def rule(event):
    if all(
        [
            event.deep_get("category", default="") == "Device",
            "Recover device local administrator password"
            in event.deep_get("activityType", default=""),
            "Successfully recovered local credential by device id"
            in event.deep_get("additionalDetails", "additionalInfo", default=""),
        ]
    ):
        return True
    return False
