def rule(event):
    if all(
        [
            event.deep_get("Provider_Name", default="") == "Service Control Manager",
            event.deep_get("EventID", default="") in [7045, 7036],
            any(
                [
                    "AmmyyAdmin" in event.deep_get("ServiceName", default=""),
                    "Atera" in event.deep_get("ServiceName", default=""),
                    "BASupportExpressSrvcUpdater" in event.deep_get("ServiceName", default=""),
                    "BASupportExpressStandaloneService"
                    in event.deep_get("ServiceName", default=""),
                    "chromoting" in event.deep_get("ServiceName", default=""),
                    "GoToAssist" in event.deep_get("ServiceName", default=""),
                    "GoToMyPC" in event.deep_get("ServiceName", default=""),
                    "jumpcloud" in event.deep_get("ServiceName", default=""),
                    "LMIGuardianSvc" in event.deep_get("ServiceName", default=""),
                    "LogMeIn" in event.deep_get("ServiceName", default=""),
                    "monblanking" in event.deep_get("ServiceName", default=""),
                    "Parsec" in event.deep_get("ServiceName", default=""),
                    "RManService" in event.deep_get("ServiceName", default=""),
                    "RPCPerformanceService" in event.deep_get("ServiceName", default=""),
                    "RPCService" in event.deep_get("ServiceName", default=""),
                    "SplashtopRemoteService" in event.deep_get("ServiceName", default=""),
                    "SSUService" in event.deep_get("ServiceName", default=""),
                    "TeamViewer" in event.deep_get("ServiceName", default=""),
                    "TightVNC" in event.deep_get("ServiceName", default=""),
                    "vncserver" in event.deep_get("ServiceName", default=""),
                    "Zoho" in event.deep_get("ServiceName", default=""),
                ]
            ),
        ]
    ):
        return True
    return False
