[Bug] Suspicious Access to Web Browser Credential Stores (only supports Windows)

[tstromberg]

Describe the bug

The "Suspicious Access to Web Browser Credential Stores" rule only supports Windows. Could it please be ported to Linux and macOS?

To Reproduce

1. View https://github.com/elastic/protections-artifacts/blob/main/behavior/rules/credential_access_suspicious_access_to_web_browser_credential_stores.toml
2. Notice that os_list = ["windows"]

Expected behavior

Support for Linux and macOS.

Desktop (please complete the following information):

• OS: macOS
• Version: 14.4

Additional context

If it helps, we're new Defend customers, and credential theft is our #1 concern.