def rule(event):
    if any(
        [
            any(
                [
                    ":\\PerfLogs\\" in event.deep_get("Filename", default=""),
                    ":\\Temp\\" in event.deep_get("Filename", default=""),
                    ":\\Users\\Default\\" in event.deep_get("Filename", default=""),
                    ":\\Users\\Public\\" in event.deep_get("Filename", default=""),
                    ":\\Windows\\" in event.deep_get("Filename", default=""),
                    "/www/" in event.deep_get("Filename", default=""),
                    "\\inetpub\\" in event.deep_get("Filename", default=""),
                    "\\tsclient\\" in event.deep_get("Filename", default=""),
                    "apache" in event.deep_get("Filename", default=""),
                    "nginx" in event.deep_get("Filename", default=""),
                    "tomcat" in event.deep_get("Filename", default=""),
                    "weblogic" in event.deep_get("Filename", default=""),
                ]
            ),
            any(
                [
                    event.deep_get("Filename", default="").endswith(".asax"),
                    event.deep_get("Filename", default="").endswith(".ashx"),
                    event.deep_get("Filename", default="").endswith(".asmx"),
                    event.deep_get("Filename", default="").endswith(".asp"),
                    event.deep_get("Filename", default="").endswith(".aspx"),
                    event.deep_get("Filename", default="").endswith(".bat"),
                    event.deep_get("Filename", default="").endswith(".cfm"),
                    event.deep_get("Filename", default="").endswith(".cgi"),
                    event.deep_get("Filename", default="").endswith(".chm"),
                    event.deep_get("Filename", default="").endswith(".cmd"),
                    event.deep_get("Filename", default="").endswith(".dat"),
                    event.deep_get("Filename", default="").endswith(".ear"),
                    event.deep_get("Filename", default="").endswith(".gif"),
                    event.deep_get("Filename", default="").endswith(".hta"),
                    event.deep_get("Filename", default="").endswith(".jpeg"),
                    event.deep_get("Filename", default="").endswith(".jpg"),
                    event.deep_get("Filename", default="").endswith(".jsp"),
                    event.deep_get("Filename", default="").endswith(".jspx"),
                    event.deep_get("Filename", default="").endswith(".lnk"),
                    event.deep_get("Filename", default="").endswith(".msc"),
                    event.deep_get("Filename", default="").endswith(".php"),
                    event.deep_get("Filename", default="").endswith(".pl"),
                    event.deep_get("Filename", default="").endswith(".png"),
                    event.deep_get("Filename", default="").endswith(".ps1"),
                    event.deep_get("Filename", default="").endswith(".psm1"),
                    event.deep_get("Filename", default="").endswith(".py"),
                    event.deep_get("Filename", default="").endswith(".pyc"),
                    event.deep_get("Filename", default="").endswith(".rb"),
                    event.deep_get("Filename", default="").endswith(".scf"),
                    event.deep_get("Filename", default="").endswith(".sct"),
                    event.deep_get("Filename", default="").endswith(".sh"),
                    event.deep_get("Filename", default="").endswith(".svg"),
                    event.deep_get("Filename", default="").endswith(".txt"),
                    event.deep_get("Filename", default="").endswith(".vbe"),
                    event.deep_get("Filename", default="").endswith(".vbs"),
                    event.deep_get("Filename", default="").endswith(".war"),
                    event.deep_get("Filename", default="").endswith(".wll"),
                    event.deep_get("Filename", default="").endswith(".wsf"),
                    event.deep_get("Filename", default="").endswith(".wsh"),
                    event.deep_get("Filename", default="").endswith(".xll"),
                    event.deep_get("Filename", default="").endswith(".xml"),
                ]
            ),
        ]
    ):
        return True
    return False
