import re


def rule(event):
    if any(
        [
            re.match(
                r"\\\\mojo\\.5688\\.8052\\.(?:183894939787088877|35780273329370473)[0-9a-f]{2}",
                event.deep_get("PipeName", default=""),
            ),
            re.match(r"\\\\wkssvc_?[0-9a-f]{2}", event.deep_get("PipeName", default="")),
            re.match(r"\\\\ntsvcs[0-9a-f]{2}", event.deep_get("PipeName", default="")),
            re.match(r"\\\\DserNamePipe[0-9a-f]{2}", event.deep_get("PipeName", default="")),
            re.match(r"\\\\SearchTextHarvester[0-9a-f]{2}", event.deep_get("PipeName", default="")),
            re.match(r"\\\\mypipe-(?:f|h)[0-9a-f]{2}", event.deep_get("PipeName", default="")),
            re.match(
                r"\\\\windows\\.update\\.manager[0-9a-f]{2,3}",
                event.deep_get("PipeName", default=""),
            ),
            re.match(r"\\\\ntsvcs_[0-9a-f]{2}", event.deep_get("PipeName", default="")),
            re.match(r"\\\\scerpc_?[0-9a-f]{2}", event.deep_get("PipeName", default="")),
            re.match(r"\\\\PGMessagePipe[0-9a-f]{2}", event.deep_get("PipeName", default="")),
            re.match(r"\\\\MsFteWds[0-9a-f]{2}", event.deep_get("PipeName", default="")),
            re.match(r"\\\\f4c3[0-9a-f]{2}", event.deep_get("PipeName", default="")),
            re.match(r"\\\\fullduplex_[0-9a-f]{2}", event.deep_get("PipeName", default="")),
            re.match(r"\\\\msrpc_[0-9a-f]{4}", event.deep_get("PipeName", default="")),
            re.match(r"\\\\win\\\\msrpc_[0-9a-f]{2}", event.deep_get("PipeName", default="")),
            re.match(r"\\\\f53f[0-9a-f]{2}", event.deep_get("PipeName", default="")),
            re.match(r"\\\\rpc_[0-9a-f]{2}", event.deep_get("PipeName", default="")),
            re.match(r"\\\\spoolss_[0-9a-f]{2}", event.deep_get("PipeName", default="")),
            re.match(
                r"\\\\Winsock2\\\\CatalogChangeListener-[0-9a-f]{3}-0,",
                event.deep_get("PipeName", default=""),
            ),
        ]
    ):
        return True
    return False
