def rule(event):
    if all(
        [
            event.deep_get("EventLog", default="") == "RPCFW",
            event.deep_get("EventID", default="") == 3,
            event.deep_get("InterfaceUuid", default="")
            in [
                "4d9f4ab8-7d1c-11cf-861e-0020af6e7c57",
                "99fcfec4-5260-101b-bbcb-00aa0021347a",
                "000001a0-0000-0000-c000-000000000046",
                "00000131-0000-0000-c000-000000000046",
                "00000143-0000-0000-c000-000000000046",
                "00000000-0000-0000-c000-000000000046",
            ],
        ]
    ):
        return True
    return False
