Incident Investigations with Macroscope Agent