Sandia's synthetic network offers new insight into how cyber attackers work