def rule(event):
    if all(
        [
            event.deep_get("EventLog", default="") == "RPCFW",
            event.deep_get("EventID", default="") == 3,
            event.deep_get("InterfaceUuid", default="")
            in ["df1941c5-fe89-4e79-bf10-463657acf44d", "c681d488-d850-11d0-8c52-00c04fd90f7e"],
        ]
    ):
        return True
    return False
