Category correlating events incident investigation