def rule(event):
    if any(
        [
            event.deep_get("c-useragent", default="").startswith("Internet Explorer "),
            event.deep_get("c-useragent", default="")
            == "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.2)",
            event.deep_get("c-useragent", default="")
            == "Mozilla/4.0 (compatible; Metasploit RSPEC)",
            event.deep_get("c-useragent", default="")
            == "Mozilla/4.0 (compatible; MSIE 6.1; Windows NT)",
            event.deep_get("c-useragent", default="")
            == "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)",
            event.deep_get("c-useragent", default="")
            == "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)",
            event.deep_get("c-useragent", default="")
            == "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)",
            event.deep_get("c-useragent", default="")
            == "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Trident/4.0; SIMBAR={7DB0F6DE-8DE7-4841-9084-28FA914B0F2E}; SLCC1; .N",
            event.deep_get("c-useragent", default="")
            == "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)",
            event.deep_get("c-useragent", default="")
            == "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/525.13 (KHTML, like Gecko) Chrome/4.0.221.6 Safari/525.13",
            event.deep_get("c-useragent", default="")
            == "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MAAU)",
            event.deep_get("c-useragent", default="") == "Mozilla/5.0",
            event.deep_get("c-useragent", default="") == "Mozilla/4.0 (compatible; SPIPE/1.0",
            event.deep_get("c-useragent", default="")
            == "Mozilla/5.0 (Windows NT 6.3; rv:39.0) Gecko/20100101 Firefox/35.0",
            event.deep_get("c-useragent", default="") == "Sametime Community Agent",
            event.deep_get("c-useragent", default="") == "X-FORWARDED-FOR",
            event.deep_get("c-useragent", default="") == "DotDotPwn v2.1",
            event.deep_get("c-useragent", default="") == "SIPDROID",
            event.deep_get("c-useragent", default="")
            == "Mozilla/5.0 (Windows NT 10.0; Win32; x32; rv:60.0)",
            event.deep_get("c-useragent", default="")
            == "Mozilla/6.0 (X11; Linux x86_64; rv:24.0) Gecko/20140205     Firefox/27.0 Iceweasel/25.3.0",
            "wordpress hash grabber" in event.deep_get("c-useragent", default=""),
            "exploit" in event.deep_get("c-useragent", default=""),
            event.deep_get("c-useragent", default="")
            == "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36",
        ]
    ):
        return True
    return False
