Improving Investigations with Safeguard Analysis for Events (SAFE)