1. A system comprising: a server computing device configured to: provide an application programming interface configured to receive inputs to generate configuration data, wherein the configuration data is provided by a user device, the configuration data comprising: emitter configuration data comprising information causing one or more emitter nodes to provide event data to the server computing device, the event data comprising recorded information about one or more activities; sensor configuration data comprising information about selecting one or more attributes, the one or more attributes representative of information about activities associated with the one or more emitter nodes; filter configuration data comprising information about selecting one or more algorithms, wherein the selected one or more algorithms are used for analyzing the one or more selected attributes; and reaction configuration data comprising information about selecting one or more responses to a determination of an occurrence of a potentially malicious activity; provide the emitter configuration data to the one or more emitter nodes; generate parsed data by transforming the event data according to the sensor configuration data, wherein the parsed data includes attribute data comprising information associated with one or more activities; in response to a determination that a potentially malicious activity occurred: generate alert data representative of the occurrence of the potentially malicious activity; and generate reaction data comprising information about one or more responses to the occurrence of the potentially malicious activity.