def rule(event):
    if all(
        [
            event.deep_get("EventID", default="") in [400, 401],
            "3669e262-ec02-4e9d-bcb4-3d008b4afac9" in event.deep_get("PackageFullName", default=""),
        ]
    ):
        return True
    return False
