A "How'd that malware get there?" tool for OSX