Crowdstrike integration Master SID support

Summary

Add Master SID-level integration support for CrowdStrike Falcon, allowing customers to integrate at a higher organizational level so that fewer individual integrations are needed, reducing customer friction.

Background

We currently have a CrowdStrike Falcon integration, but it operates at the individual SID level. Customers with multiple SIDs must configure each one separately, which creates unnecessary friction. Integrating at the Master SID level will allow a single integration to cover all child SIDs, significantly simplifying the setup process for customers managing multiple environments.

Scope

• Add Master SID authentication support to the CrowdStrike Falcon integration
• Enable automatic discovery/coverage of child SIDs under a Master SID
• Maintain backward compatibility with existing individual SID integrations

Acceptance Criteria

• Customers can authenticate using a Master SID API key
• All child SIDs under the Master SID are accessible through the single integration
• Existing individual SID integrations continue to work without changes
• Tests passing / Documentation updated

References

• PR: (If applicable)
• Related: Existing CrowdStrike Falcon integration