Attachment: ICS file with meeting prefix

type.inbound
and length(attachments) == 1
and any(filter(attachments,
               .file_extension in~ ('ics')
               or .content_type in ("application/ics", "text/calendar")
        ),
        regex.icontains(.file_name, 'meeting_[a-zA-Z0-9]{5}\.')
)