@ Eddy
Given that the attached image is showing an IDP.ALEXA.51 detection, I would suspect that the IDP. part would indicate that this is the Behaviour Shield at work.
There are very few settings for the Behaviour Shield (attached image) and none indicating the Generation of a Report File (log), unlike the settings in File System Shield that has a Report File section in its settings.