Fix: Extract more fields for Cybereason (311)

[vg-svitla]

Fixes 311

Along with host info I also added user info.

[github-actions]

Smart descriptions generated from the latest tests at 2024-12-11 13:54:28:

Test File	Smart Description
CybeReason/malop-json/tests/test_file_suspect_detail.json	Detection 11.-6654920844431693523: suspected file c:\System\kprocesshacker.sys on desktop-aaaaaa
CybeReason/malop-json/tests/test_machine_detail.json	Detection 11.-6654920844431693523: Malicious activities detected on desktop-aaaaaa
CybeReason/malop-json/tests/test_machine_inbox.json	Detection 11.-6654920844431693523: Malicious activities detected on desktop-aaaaaa
CybeReason/malop-json/tests/test_malop.json	New EDR detection 11.-6654920844431693523 caused by Process cymulateagent.exe
CybeReason/malop-json/tests/test_malop_detail.json	New detection 11.7498520112250262440 caused by File kprocesshacker.sys
CybeReason/malop-json/tests/test_suspicions.json	Detection 11.7498520112250262440: suspicion shellOfNonShellRunnerSuspicion
CybeReason/malop-json/tests/test_suspicions2.json	Detection 11.7498520112250262440: suspicion T1060 - Registry Run Keys / Startup Folder : Autorun JavaScript Value
CybeReason/malop-json/tests/test_user_inbox.json	Detection 11.-6654920844431693523: user desktop-aaaaa`system` affected by malicious activities

[squioc]

LGTM