Close CrowdStrike detections when the corresponding ServiceNow incident is closed. This story runs on a schedule, and will close all the incidents at midnight.