[New] Browser Extension Daily Reputation Check

[Samirbous]

New workflow that runs daily an ES|QL query to detect the creation/install of of new Chrome/Edge browser extensions, for each it will perform some enumeration from respective webstore (rating, number of users, date of release, associated developer email, etc.), if those values are suspicious it will log that info, create a new case for suspicious hits, use Elastic response console to zip/get-file the suspicious extension and delete it from the impacted host.id.