def rule(event):
    if any(
        [
            all(
                [
                    event.deep_get("EventID", default="") in [5136, 5137],
                    event.deep_get("ObjectClass", default="") == "dnsNode",
                    "UWhRCA" in event.deep_get("ObjectDN", default=""),
                    "BAAAA" in event.deep_get("ObjectDN", default=""),
                    "CN=MicrosoftDNS" in event.deep_get("ObjectDN", default=""),
                ]
            ),
            all(
                [
                    event.deep_get("EventID", default="") == 4662,
                    "UWhRCA" in event.deep_get("AdditionalInfo", default=""),
                    "BAAAA" in event.deep_get("AdditionalInfo", default=""),
                    "CN=MicrosoftDNS" in event.deep_get("AdditionalInfo", default=""),
                ]
            ),
        ]
    ):
        return True
    return False
