Non-transitory computer-readable storage media having computer-executable instructions stored thereon for expanded entity and activity mapping within a network computing environment, wherein when executed by at least one processor the computer-executable instructions cause the at least one processor to:
- retrieve data records from a data source, each of the data records containing data elements relating to an activity occurring within the network computing environment;
- apply pre-processing rules to compare the data records against a plurality of pre-defined profiles, the plurality of pre-defined profiles including a plurality of pre-defined node profiles and a plurality of pre-defined edge profiles;
- based on the application of the pre-processing rules, identify an orphan record of the data records that fails to match any one of the plurality of pre-defined profiles, and a plurality of pre-matched records of the data records, each of the plurality of pre-matched records matching at least one of the plurality of pre-defined profiles;
- build first and second test profiles for graph database modeling of the orphan record, the first test profile and the second test profile defining different ways to graph database model the orphan record;
- build a first test graph database model at least in part by modeling the plurality of pre-matched records using corresponding ones of the plurality of pre-defined profiles, and modeling the orphan record using the first test profile;
- build a second test graph database model at least in party by modeling the plurality of pre-matched records using corresponding ones of the plurality of pre-defined profiles, and modeling the orphan record using the second test profile;
- select one of first and second test profiles based on comparing identity tracing characteristics of the corresponding first and second test graph database models;
- and
- build a production graph database model at least in part by modeling the plurality of pre-matched records using corresponding ones of the plurality of pre-defined profiles, and modeling the orphan record using the selected one of the first and second test profiles.