update: rule metadata

Author: swachchhanda000

…/file_event_lnx_vshell_long_filename.yml …_event_lnx_susp_long_filename_patternymlrules/linux/file_event/file_event_lnx_vshell_long_filename.yml renamed to rules/linux/file_event/file_event_lnx_susp_long_filename_patternyml rules/linux/file_event/file_event_lnx_vshell_long_filename.yml renamed to rules/linux/file_event/file_event_lnx_susp_long_filename_patternyml

@@ -1,7 +1,8 @@
-title: Suspicious Long Filename Pattern - VShell
+title: Suspicious Long Filename Pattern
 id: 11629c4d-0fe6-465b-be62-b39a1c442aad
 status: experimental
-description: Detects files with suspiciously long filenames (40+ characters) that may be associated with VShell malware campaigns or similar obfuscation techniques
+description: |
+    Detects creation of files with unusually long filenames (40 or more characters), which may indicate obfuscation techniques used by malware such as VShell.
 references:
     - https://www.trellix.com/blogs/research/the-silent-fileless-threat-of-vshell/
 author: '@kostastsale'

rules/linux/file_event/file_event_susp_filename_with_embedded_base64_command.yml

@@ -17,11 +17,11 @@ logsource:
     product: linux
     category: file_event
 detection:
-    selection_filename:
+    selection:
         TargetFilename|contains:
             - '{echo'
             - '{base64,-d}'
-    condition: selection_filename
+    condition: selection
 falsepositives:
     - Legitimate files with similar naming patterns (very unlikely)
 level: high