def rule(event):
    if "C:\\Windows\\System32\\spool\\drivers\\x64\\3\\old\\1\\123" in event.deep_get(
        "TargetFilename", default=""
    ):
        return True
    return False
