def rule(event):
    if all(
        [
            event.deep_get("EventLog", default="") == "RPCFW",
            event.deep_get("EventID", default="") == 3,
            event.deep_get("InterfaceUuid", default="") == "378e52b0-c0a9-11cf-822d-00aa0051e40f",
            not event.deep_get("OpNum", default="") in [0, 1],
        ]
    ):
        return True
    return False
