import json


def rule(event):
    if "node:child_process" in json.dumps(event.to_dict()):
        return True
    return False
