Legal support for internal corporate IT security incident investigations