IsoEx: an explainable unsupervised approach to process event logs cyber investigation