Changed title to "Malicious files detected" which is more appropriate for such an incident.
Added the Title to the XML

"Relationship" on related observables changed to "Malicious Artifact Detected" which seems more appropriate for a relationship between an incident and the malicious files detected. "Malicious Observables" seemed rather redundant on a Related_Observables relationship.

Corrected and tweaked the language in a few places.