1. A method for assessing compromises of data security, the method comprising: establishing access control policies for data files stored in storage devices across a communication network of an enterprise: monitoring processes executing on respective processors of the enterprise for file system operations performed thereby: assigning a suspicion score to each of the processes based on a degree to which in-memory behavior of the process deviates from previously established criteria; analyzing, in response to the suspicion score assigned to any of the processes meeting a suspicious process criterion, file system operations performed by the suspicious process against the access control policies; modifying the suspicion score based on a degree to which the file system operations performed by the suspicious process violate the access control policies; monitoring each process executing on each processor for data transport operations performed thereby in addition to the monitoring of the file system operations; storing attributes of each of the file system operations and each of the data transport operations in respective graph node data structures; identifying one or more correlations, each of the one or more correlations correlating one or more of the file system operations with one or more of the data transport operations for a given one of the processes; storing attributes of the one or more correlations in graph edge data structures; generating a process-network-file (PNF) graph data structure in which the graph node data structures representing the file system operations and the data transport operations are logically connected one to another through corresponding graph edge data structures representing the one or more correlations; and rendering a representation of the PNF graph data structure on a display such that graphical representations of the graph node data structures are graphically linked by graphical representations of the graph edge data structures; wherein the attributes of a given one of the one or more correlations stored in the graph edge data structures include a weight indicating the given correlation, and rendering the representation of the PNF graph data structure includes indicating the weight in the graphical representation of the graph edge data structures for the given correlation; wherein the PNF graph data structure comprises, for the given correlation: at least one source node corresponding to one or more of the graph node data structures, the source node representing at least one of a source file and a source network connection for the given process; at least one destination node corresponding to one or more of the graph node data structures, the destination node representing at least one of a destination file and a destination network connection for the given process; at least one operator node corresponding to one or more of the graph node data structures, the operator node representing at least one of the given process and a user associated with the given process; and at least one edge node corresponding to one or more of the graph edge data structures, the edge node representing relationships between the at least one source node, the at least one destination node and the at least one operator node; and wherein the at least one edge node depicts the weight, which is an indication of a level of suspicious behavior associated with at least one of one or more of the file system operations and one or more of the data transport operations represented by the source node, the destination node and the operator node.