import json


def rule(event):
    if any(
        [
            "/Basic/Command/Base64/" in json.dumps(event.to_dict()),
            "/Basic/ReverseShell/" in json.dumps(event.to_dict()),
            "/Basic/TomcatMemshell" in json.dumps(event.to_dict()),
            "/Basic/JettyMemshell" in json.dumps(event.to_dict()),
            "/Basic/WeblogicMemshell" in json.dumps(event.to_dict()),
            "/Basic/JBossMemshell" in json.dumps(event.to_dict()),
            "/Basic/WebsphereMemshell" in json.dumps(event.to_dict()),
            "/Basic/SpringMemshell" in json.dumps(event.to_dict()),
            "/Deserialization/URLDNS/" in json.dumps(event.to_dict()),
            "/Deserialization/CommonsCollections1/Dnslog/" in json.dumps(event.to_dict()),
            "/Deserialization/CommonsCollections2/Command/Base64/" in json.dumps(event.to_dict()),
            "/Deserialization/CommonsBeanutils1/ReverseShell/" in json.dumps(event.to_dict()),
            "/Deserialization/Jre8u20/TomcatMemshell" in json.dumps(event.to_dict()),
            "/TomcatBypass/Dnslog/" in json.dumps(event.to_dict()),
            "/TomcatBypass/Command/" in json.dumps(event.to_dict()),
            "/TomcatBypass/ReverseShell/" in json.dumps(event.to_dict()),
            "/TomcatBypass/TomcatMemshell" in json.dumps(event.to_dict()),
            "/TomcatBypass/SpringMemshell" in json.dumps(event.to_dict()),
            "/GroovyBypass/Command/" in json.dumps(event.to_dict()),
            "/WebsphereBypass/Upload/" in json.dumps(event.to_dict()),
        ]
    ):
        return True
    return False
