feat: filter by event name in rules

[qjerome]

This PR add a new feature simplifying detection/filtering rule writing. It allows specifying events to filter by their names instead of event id.

Example: include

name: log.mprotect_exec
params:
    filter: true
match-on:
    events:
        kunai:
            - mprotect_exec

Example: exclude

name: exclude.mprotect_exec
params:
    filter: true
match-on:
    events:
        kunai:
            # there is a - in front of event name  
            - -mprotect_exec