import json


def rule(event):
    if any(
        [
            "cat /dev/null >*sh_history" in json.dumps(event.to_dict()),
            "cat /dev/zero >*sh_history" in json.dumps(event.to_dict()),
            "chattr +i*sh_history" in json.dumps(event.to_dict()),
            'echo "" >*sh_history' in json.dumps(event.to_dict()),
            "empty_bash_history" in json.dumps(event.to_dict()),
            "export HISTFILESIZE=0" in json.dumps(event.to_dict()),
            "history -c" in json.dumps(event.to_dict()),
            "history -w" in json.dumps(event.to_dict()),
            "ln -sf /dev/null *sh_history" in json.dumps(event.to_dict()),
            "ln -sf /dev/zero *sh_history" in json.dumps(event.to_dict()),
            "rm *sh_history" in json.dumps(event.to_dict()),
            "shopt -ou history" in json.dumps(event.to_dict()),
            "shopt -uo history" in json.dumps(event.to_dict()),
            "shred *sh_history" in json.dumps(event.to_dict()),
            "truncate -s0 *sh_history" in json.dumps(event.to_dict()),
        ]
    ):
        return True
    return False
