def rule(event):
    if all(
        [
            event.deep_get("EventLog", default="") == "RPCFW",
            event.deep_get("EventID", default="") == 3,
            event.deep_get("InterfaceUuid", default="")
            in [
                "12345678-1234-abcd-ef00-0123456789ab",
                "76f03f96-cdfd-44fc-a22c-64950a001209",
                "0b6edbfa-4a24-4fc6-8a23-942b1eca65d1",
                "ae33069b-a2a8-46ee-a235-ddfd339be281",
            ],
        ]
    ):
        return True
    return False
