import re


def rule(event):
    if any(
        [
            any(
                [
                    "tracert -h 10 yahoo.com" in event.deep_get("CommandLine", default=""),
                    ".WSqmCons))|iex;" in event.deep_get("CommandLine", default=""),
                    "Fr`omBa`se6`4Str`ing" in event.deep_get("CommandLine", default=""),
                ]
            ),
            all(
                [
                    re.match(
                        r"net\\s+use\\s+https://docs.live.net",
                        event.deep_get("CommandLine", default=""),
                    ),
                    "@aol.co.uk" in event.deep_get("CommandLine", default=""),
                ]
            ),
        ]
    ):
        return True
    return False
