Intrusion activity projection for cyber situational awareness