[Crowdstrike] Create an internal enrichment connector for Crowdstrike

[TechBurn0ut]

Use case

Current, the OpenCTI platform only supports feeds from Crowdstrike and not enrichment. As a cyber threat analyst, I require an automation that can enrich a given indicator from the Crowdstrike API.

Current Workaround

This feature does not exist in the platform. We currently utilize xSOAR to handle the connections to the CS API.

Proposed Solution

Create a new internal-enrichment connector that can enrich an observable\indicator from the Crowdstrike API.