Graph-aware anomalous network agent detection