CrowdStrike evidence profile | Provenance