Create a "script generated alert" CE to capture bad service logins as hostile
NOVAD: Put more details in the "classification notes" string for each CE
Merge branch 'scriptAlerts' into integration