macOS security CLI abuse: keychain unlock and Chrome Safe Storage password reset
Detects abuse of the macOS `security` CLI to unlock the login keychain and suppress interactive prompts, or to delete/recreate the 'Chrome Safe Storage' keychain entry with an attacker-chosen password, matching AmnesiaStealer's keychain and cookie-decryption technique.
Microsoft Sentinel (KQL)
