[PR sublime-security#3756] modified rule: Attachment: ICS file with meeting prefix

Author: github-actions[bot]

detection-rules/3756_attachment_ics_meeting_invite.yml

@@ -7,7 +7,7 @@ source: |
   and length(attachments) == 1
   and any(attachments,
           .file_extension == "ics"
-          and regex.match(.file_name, '(meeting_)[-azA-z0-9]{5}\.ics')
+          and regex.icontains(.file_name, "meeting_[a-z0-9]{5}")
   )
 attack_types:
   - "BEC/Fraud"
@@ -20,4 +20,4 @@ detection_methods:
 id: "5800490c-1a6f-5435-b593-a505507cca09"
 og_id: "383a5810-0b85-55a8-ac9b-e7135823317b"
 testing_pr: 3756
-testing_sha: 6804bc83f3a0701a88d228259ea79e5d0a824d36
+testing_sha: 583c8d9c4bc5a51c4a2b68ecd3ea429f5a41be2b