[SECURITY_SOLUTION][ENDPOINT] Fix Trusted Apps so that process.executable field is used for file paths

[paul-tavares]

Summary

Change the Trusted Apps condition field name to be process.executable instead of process.path.

UI:

Artifact:

{
  "entries": [
    {
      "type": "simple",
      "entries": [
        {
          "field": "process.executable",
          "operator": "included",
          "type": "exact_caseless",
          "value": "c:\\windows"
        }
      ]
    }
  ]
}

Checklist

• Unit or functional tests were updated or added to match the most common scenarios

[elasticmachine]

Pinging @elastic/endpoint-management (Team:Endpoint Management)

[elasticmachine]

Pinging @elastic/endpoint-app-team (Feature:Endpoint)

[kevinlog]

🚢

[kibanamachine]

💚 Build Succeeded

• continuous-integration/kibana-ci/pull-request
• Commit: 788c047

Metrics [docs]

async chunks size

id	before	after	diff
securitySolution	10.3MB	10.3MB	+12.0B

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream