KRYSTAL: Knowledge graph-based framework for tactical attack discovery in audit data