cscommands.coment_attachment_filter_substrings
If an attachment's name has any of the given substrings in it, it will be displayed.
For this command to work you must first run
sv_cheats true in the console. It only works on a local map or a private server — not in matchmaking. sv_cheats is a built-in Valve command and is completely safe from VAC.