1. A computer-implemented method for detecting potential attack paths in two or more network domains, the method being executed by one or more processors and comprising: receiving a data structure that represents communication events between computing devices of the two or more network domains, wherein the data structure is a directed graph stored in a graph database; analyzing the data structure and determining a set of potential attack paths represented in the data structure, each potential attack path being based on the communication events between computing devices and including a respective sequence of computing devices proceeding from an originating computing device to a destination computing device, wherein the originating computing device and the destination computing device of at least one potential attack path exist on different network domains; assigning a score to each potential attack path in the set of potential attack paths, based on the computing devices included in the potential attack path, communication events between the computing devices, or both; removing potential attack paths from the set of potential attack paths that have scores that do not meet a predetermined threshold; ranking potential attack paths that remain in the set of potential attack paths, based on each score assigned to each potential attack path; and providing the data structure that includes a ranked set of potential attack paths.