Add Microsoft Defender for Endpoint source

[juju4]

Add Ingestion of MDE assets as source (follow-up of #999)
Include initial test data and draft schema

Bugs

• fix import of array and dict, or needed values (vmMetaData, ipAddresses...) to get instance_id, subscription_d and resource_id which are required to make relationship with AzureVirtualMachine.
• fix mypy and flake8 issues, part due to import .util not working.

Pending

• AzureVirtualMachine relationship.
• Add a tenant_id to link to AzureTenant and allow multi-tenancy.
• import vulnerabilities' detections.
• may want cleanup retention to be configurable. Typically, EDR keep inventories for 30-45 days.

Reviewed with pylint and black

[juju4]

I think this is good for review and merge.
At this point, I only added relation to AzureVirtualMachine. hesitated for AzureSubscription as more widely available (ex: Crowdstrike)
Likely need some help to fix mypy errors as not familiar with tool.

[achantavy]

Let's try to avoid pandas. We can use a similar transform approach as in this PR: #1146, happy to continue helping here.

It might also be worth exploring using the data model using that PR as example.

[achantavy]

Pandas is a very heavy dependency. Can we do without it?

[achantavy]

What's this do? Can we omit it?

[achantavy]

Suggested change

# pylint: disable=missing-function-docstring,too-many-arguments

[achantavy]

Suggested change

Warning! Work In Progress.

[juju4]

I will try to review but I don't think it will be in near time.
If anyone interested, feel free to help.