Build, test, and debug regular expressions
Extracts a filename from OSSEC file integrity monitoring (syscheck) logs. It looks for the phrase 'changed for: '' followed by the file path. The filename is captured in the 'changed_filename' group, intended to exclude trailing quotes. Useful for parsing security alerts and monitoring system changes.