WIP: Sentinel artifacts

[pemontto]

This PR adds entity extraction functionality. Set to WIP for discussion. It currently uses an undocumented preview API the Azure portal uses.

Notes:

• Extract all entity types with some special case handling
• Configurable option to add incident level labels in Sentinel as tags to TheHive
• Optionally configurable AzureSentinel.lookback on Sentinel getIncidents. Specify only grabbing incidents updated within X hours or days:
• Handle some of the smaller changes between TH3 and TH4 webhooks
• Handle closing all Sentinel incidents when multiple alerts are linked in a case

Questions:

• What's the best way to deal with additional data. Currently I shove it in the message, but it doesn't look very nice. Would putting "{key}={value}" tags be desirable. An example of that data would be URL detonation results and final URL etc.