see https://github.com/mandiant/capa-rules/blob/6a0d506713b068dca27ab035c141b968da58c653/data-manipulation/encoding/base64/reference-base64-string.yml#L20 I believe the `+` should be escaped for this rule to match as expected?
