CaptHacker91/SOC_L2_Agent-detection-Response ? reverse-engineered prompt

Build me a simple Python app for a security operations analyst that helps with agent detection and response.

I want a clean interface where someone can load alert or event data, review suspicious activity, and see suggested next steps for investigation and response. It should feel like a lightweight SOC helper, not a full enterprise platform. Include a place for detection rules, some basic processing logic, and a few sample data files so I can test it right away.

Please make it easy to run from the main app file, and organize the code so the detection logic, rules, services, and page views are kept separate and easy to follow. If anything is missing, create sensible defaults so the app still works. Use current docs online if you need to, and keep the whole thing simple and practical for a security team to use.