import json


def rule(event):
    if all(
        [
            any(
                [
                    "rm /var/log/syslog" in json.dumps(event.to_dict()),
                    "rm -r /var/log/syslog" in json.dumps(event.to_dict()),
                    "rm -f /var/log/syslog" in json.dumps(event.to_dict()),
                    "rm -rf /var/log/syslog" in json.dumps(event.to_dict()),
                    "mv /var/log/syslog" in json.dumps(event.to_dict()),
                    " >/var/log/syslog" in json.dumps(event.to_dict()),
                    " > /var/log/syslog" in json.dumps(event.to_dict()),
                ]
            ),
            not "/syslog." in json.dumps(event.to_dict()),
        ]
    ):
        return True
    return False
