Hello,
and welcome to this community forums.
Determining the cause of this message can be (currently) only done based on the time which VT is currently running at the time the AV even is occurring. Info how to enable the logging of the VT execution time in the software stack can be found here: