Closing the Loop in Embedded Security: Evolution of an AIOps Framework for Threat Hunting