def rule(event):
    if "-NoExit -Command [Console]::OutputEncoding=[Text.UTF8Encoding]::UTF8" in event.deep_get(
        "CommandLine", default=""
    ):
        return True
    return False
