def rule(event):
    if all(
        [
            event.deep_get("c-useragent", default="").startswith("Microsoft BITS/"),
            any(
                [
                    event.deep_get("cs-host", default="").endswith("1"),
                    event.deep_get("cs-host", default="").endswith("2"),
                    event.deep_get("cs-host", default="").endswith("3"),
                    event.deep_get("cs-host", default="").endswith("4"),
                    event.deep_get("cs-host", default="").endswith("5"),
                    event.deep_get("cs-host", default="").endswith("6"),
                    event.deep_get("cs-host", default="").endswith("7"),
                    event.deep_get("cs-host", default="").endswith("8"),
                    event.deep_get("cs-host", default="").endswith("9"),
                ]
            ),
        ]
    ):
        return True
    return False
