Suspicious Filename with Embedded Base64 Commands (via file_event)

This rule detects files with specially crafted filenames that embed Base64-encoded bash payloads designed to execute when processed by shell scripts. These filenames exploit shell interpretation quirks to trigger hidden commands, a method observed in VShell malware campaigns.