def rule(event):
    if all(
        [
            any(
                [
                    "\\u202e" in event.deep_get("TargetFilename", default=""),
                    "[U+202E]" in event.deep_get("TargetFilename", default=""),
                    "‮" in event.deep_get("TargetFilename", default=""),
                ]
            ),
            any(
                [
                    "3pm." in event.deep_get("TargetFilename", default=""),
                    "4pm." in event.deep_get("TargetFilename", default=""),
                    "cod." in event.deep_get("TargetFilename", default=""),
                    "fdp." in event.deep_get("TargetFilename", default=""),
                    "ftr." in event.deep_get("TargetFilename", default=""),
                    "gepj." in event.deep_get("TargetFilename", default=""),
                    "gnp." in event.deep_get("TargetFilename", default=""),
                    "gpj." in event.deep_get("TargetFilename", default=""),
                    "ism." in event.deep_get("TargetFilename", default=""),
                    "lmth." in event.deep_get("TargetFilename", default=""),
                    "nls." in event.deep_get("TargetFilename", default=""),
                    "piz." in event.deep_get("TargetFilename", default=""),
                    "slx." in event.deep_get("TargetFilename", default=""),
                    "tdo." in event.deep_get("TargetFilename", default=""),
                    "vsc." in event.deep_get("TargetFilename", default=""),
                    "vwm." in event.deep_get("TargetFilename", default=""),
                    "xcod." in event.deep_get("TargetFilename", default=""),
                    "xslx." in event.deep_get("TargetFilename", default=""),
                    "xtpp." in event.deep_get("TargetFilename", default=""),
                ]
            ),
        ]
    ):
        return True
    return False
