def rule(event):
    if event.deep_get("operation", default="") in [
        "RpcAsyncInstallPrinterDriverFromPackage",
        "RpcAsyncAddPrintProcessor",
        "RpcAddPrintProcessor",
        "RpcAddPrinterDriverEx",
        "RpcAddPrinterDriver",
        "RpcAsyncAddPrinterDriver",
    ]:
        return True
    return False
