Enrich CrowdStrike detections with Active Directory and correlate in Jira tickets

CrowdStrike EPP alerts are listed and for each alert, it determines the device owner in Active Directory. The alert is documented in Jira, either in a new ticket or an existing ticket if it is related to another existing alert. The unique identifier for determining if the Jira ticket is related is based on the "hostname, filename/path/hash" for each behaviour.