import re


def rule(event):
    if re.match(r"\\\\sessionresume_[a-zA-Z]{8}$", event.deep_get("TargetFilename", default="")):
        return True
    return False
