Execution-based Digital Investigation on Compromised Systems with Automated Hypotheses Generation