What if Crowdstrike had used APItoolkit instead?