I will say the hardest part was getting the server running for mysql. I was able to use wamp server and create a mysql database for hawkeye so it could start logging actions.
By trial and error and some assistant I have managed to understand the how the worldedit and hawkeye work together allowing the //wand to select the region needing the preview and possible rollback.
In a scenario where there was a griever that left half a building floating in the air, i will give you what I would think is the best course of action.
1. If the area is protected who is the owner and who else had access.
2. Next I would either use hawk tool in multiple places or /hawk search a:block-break, r: depending on size of grief.
3. Find out if the player was allowed to break blocks in the area by the claim owner to rule out accidental blame.
4. I would then proceed to select my region with the //wand, then /hawk preview r:we to view the rollback to ensure a correct rollback.
5. If preview is correct I will /hawk preview apply, and if not I will /hawk preview cancel.
6. Whoever the offending player is based on your standards for banns will be banned for the appropriate time.
Thanks for your consideration,