[microsoft-sentinel/microsoft-defender] Improve matching to identify Prevented and add match on parent process name (#1757)

[isselparra]

Proposed changes

• [microsoft-sentinel]: Use alert name to verify if prevented
• [microsoft-sentinel]: Add match on parent_process_name
• [microsoft-defender]: Add match on parent_process_name
• [microsoft-defender]: Use last_update_date_time for alert_date

Related issues

• Closes Microsoft Sentinel - Improve our matching to accurately identify Blocked/Prevented  openbas#1757

Checklist

• I consider the submitted work as finished
• I tested the code for its functionality using different use cases
• I added/update the relevant documentation (either on github or on notion)
• Where necessary I refactored code to improve the overall quality

Further comments

[isselparra]

suggestion (non-blocking): ifs nesting could be removed/improved

def _extract_parent_process_name(self, columns_index, alert):
    parent_process_names = []
    entities = json.loads(alert[columns_index["Entities"]])
    
    for entity in entities:
        if (entity.get("Type") == "process" and
            entity.get("ParentProcess", {}).get("ImageFile", {}).get("Name")):
            parent_process_names.append(entity["ParentProcess"]["ImageFile"]["Name"])
    
    return parent_process_names

cc @RomuDeuxfois

[isselparra]

Test OK with Eicar, no regression with in the introduction of matching on parent_process_name