HVAC forensic analysis