1. A system, comprising: a memory, configured to store a cyber reference library, an opponent catalog, and a network model, the cyber reference library having a plurality of service characterizations, each service characterization from the plurality of service characterizations simulating at least one approach to interact with a service in a network, the network having a plurality of services; the opponent catalog having a plurality of opponent representations, each opponent representation from the plurality of opponent representations indicating at least one technique for a threat to gain unauthorized access to a target associated with the service; the network model having a plurality of element representations, each element representation from the plurality of element representations defining a plurality of network paths between a plurality of elements in the network during provision of the service; and a processor, communicatively coupled to the memory, configured to: evaluate each service characterization from the plurality of service characterizations, each opponent representation from the plurality of opponent representations, and each element representation from the plurality of element representations without detecting the threat at the processor, to generate a probability distribution associated with the threat attempting to gain unauthorized access to the target, specify a random number of samples to identify a change in the probability distribution based on changes made by a system user or through configurations from the opponent catalog, the cyber reference library, or the network model, to test repeatability of a model, adjust the probability distribution based on a plurality of operational alert levels and the model to generate an adjusted probability distribution, and send the adjusted probability distribution to a client application causing a number of the unauthorized access to the target to be reduced.