import ipaddress


def rule(event):
    if all(
        [
            any(
                [
                    event.deep_get("Image", default="").endswith("\\excel.exe"),
                    event.deep_get("Image", default="").endswith("\\outlook.exe"),
                    event.deep_get("Image", default="").endswith("\\powerpnt.exe"),
                    event.deep_get("Image", default="").endswith("\\winword.exe"),
                    event.deep_get("Image", default="").endswith("\\wordview.exe"),
                ]
            ),
            event.deep_get("Initiated", default="") == "true",
            not any(
                [
                    any(
                        [
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("127.0.0.0/8"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("10.0.0.0/8"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("172.16.0.0/12"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("192.168.0.0/16"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("169.254.0.0/16"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("::1/128"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("fe80::/10"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("fc00::/7"),
                        ]
                    ),
                    any(
                        [
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("2.16.56.0/23"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("2.17.248.0/21"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("13.107.240.0/21"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("20.184.0.0/13"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("23.61.224.0/20"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("20.192.0.0/10"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("23.72.0.0/13"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("23.3.88.0/22"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("23.216.132.0/22"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("40.76.0.0/14"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("51.10.0.0/15"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("51.103.0.0/16"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("51.104.0.0/15"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("51.142.136.0/22"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("52.160.0.0/11"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("95.101.96.0/21"),
                            ipaddress.ip_address(event.deep_get("DestinationIp", default=""))
                            in ipaddress.ip_network("204.79.197.0/24"),
                        ]
                    ),
                    all(
                        [
                            any(
                                [
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("13.107.4.0/22"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("13.107.6.152/31"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("13.107.18.10/31"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("13.107.42.0/23"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("13.107.128.0/22"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("23.35.224.0/20"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("23.53.40.0/22"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("23.103.160.0/20"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("23.216.76.0/22"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("40.96.0.0/13"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("40.104.0.0/15"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("52.96.0.0/14"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("131.253.33.215/32"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("132.245.0.0/16"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("150.171.32.0/22"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("204.79.197.215/32"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1006::/40"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1016::/36"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1026::/36"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1036::/36"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1046::/36"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1056::/36"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:4::152/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:4::153/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:c::10/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:c::11/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:d::10/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:d::11/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:8f0::/46"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:900::/46"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:a92::152/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:a92::153/128"),
                                ]
                            ),
                            event.deep_get("DestinationPort", default="") in [80, 443],
                        ]
                    ),
                    all(
                        [
                            any(
                                [
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("13.107.6.152/31"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("13.107.18.10/31"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("13.107.128.0/22"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("23.103.160.0/20"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("40.96.0.0/13"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("40.104.0.0/15"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("52.96.0.0/14"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("131.253.33.215/32"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("132.245.0.0/16"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("150.171.32.0/22"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("204.79.197.215/32"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1006::/40"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1016::/36"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1026::/36"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1036::/36"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1046::/36"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1056::/36"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:4::152/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:4::153/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:c::10/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:c::11/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:d::10/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:d::11/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:8f0::/46"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:900::/46"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:a92::152/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:a92::153/128"),
                                ]
                            ),
                            event.deep_get("DestinationPort", default="") in [143, 587, 993, 995],
                            event.deep_get("Protocol", default="") == "tcp",
                        ]
                    ),
                    all(
                        [
                            any(
                                [
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("40.92.0.0/15"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("40.107.0.0/16"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("52.100.0.0/14"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("52.238.78.88/32"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("104.47.0.0/17"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2a01:111:f400::/48"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2a01:111:f403::/48"),
                                ]
                            ),
                            event.deep_get("DestinationPort", default="") == 443,
                        ]
                    ),
                    all(
                        [
                            any(
                                [
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("40.92.0.0/15"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("40.107.0.0/16"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("52.100.0.0/14"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("52.238.78.88/32"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("104.47.0.0/17"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2a01:111:f400::/48"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2a01:111:f403::/48"),
                                ]
                            ),
                            event.deep_get("DestinationPort", default="") == 25,
                        ]
                    ),
                    all(
                        [
                            any(
                                [
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("13.107.136.0/22"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("40.108.128.0/17"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("52.104.0.0/14"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("104.146.128.0/17"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("150.171.40.0/22"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1061:1300::/40"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:8f8::/46"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:908::/46"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2a01:111:f402::/48"),
                                ]
                            ),
                            event.deep_get("DestinationPort", default="") in [80, 443],
                            event.deep_get("Protocol", default="") == "tcp",
                        ]
                    ),
                    all(
                        [
                            any(
                                [
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("13.107.6.171/32"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("13.107.18.15/32"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("13.107.140.6/32"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("20.64.0.0/10"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("52.108.0.0/14"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("52.244.37.168/32"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1006:1400::/40"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1016:2400::/40"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1026:2400::/40"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1036:2400::/40"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1046:1400::/40"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1056:1400::/40"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1063:2000::/38"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:c::15/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:8fc::6/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:a92::171/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2a01:111:f100:2000::a83e:3019/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2a01:111:f100:2002::8975:2d79/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2a01:111:f100:2002::8975:2da8/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2a01:111:f100:7000::6fdd:6cd5/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2a01:111:f100:a004::bfeb:88cf/128"),
                                ]
                            ),
                            event.deep_get("DestinationPort", default="") in [80, 443],
                            event.deep_get("Protocol", default="") == "tcp",
                        ]
                    ),
                    all(
                        [
                            any(
                                [
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("172.128.0.0/10"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("20.20.32.0/19"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("20.103.156.88/32"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("20.190.128.0/18"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("20.231.128.0/19"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("40.126.0.0/18"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("57.150.0.0/15"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1006:2000::/48"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1007:200::/48"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1016:1400::/48"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1017::/48"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1026:3000::/48"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1027:1::/48"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1036:3000::/48"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1037:1::/48"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1046:2000::/48"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1047:1::/48"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1056:2000::/48"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2603:1057:2::/48"),
                                ]
                            ),
                            event.deep_get("DestinationPort", default="") in [80, 443],
                            event.deep_get("Protocol", default="") == "tcp",
                        ]
                    ),
                    all(
                        [
                            any(
                                [
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("13.64.0.0/11"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("13.107.6.192/32"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("13.107.9.192/32"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("13.89.179.14/32"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("20.40.0.0/14"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("20.48.0.0/12"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("20.64.0.0/12"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("52.123.0.0/16"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("52.108.0.0/14"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("52.136.0.0/13"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("57.150.0.0/15"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("80.239.150.67/32"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:4::192/128"),
                                    ipaddress.ip_address(
                                        event.deep_get("DestinationIp", default="")
                                    )
                                    in ipaddress.ip_network("2620:1ec:a92::192/128"),
                                ]
                            ),
                            event.deep_get("DestinationPort", default="") == 443,
                            event.deep_get("Protocol", default="") == "tcp",
                        ]
                    ),
                    all(
                        [
                            event.deep_get("DestinationHostname", default="").endswith(
                                ".deploy.static.akamaitechnologies.com"
                            ),
                            event.deep_get("DestinationPort", default="") == 443,
                            event.deep_get("Protocol", default="") == "tcp",
                        ]
                    ),
                ]
            ),
        ]
    ):
        return True
    return False
