ACC2027961 Automated learning and exploitation of action-based domain models in heterogeneous security data sources