import json


def rule(event):
    if any(
        [
            "/data/etc/wxd.conf" in json.dumps(event.to_dict()),
            "/data/lib/libgif.so" in json.dumps(event.to_dict()),
            "/data/lib/libips.bak" in json.dumps(event.to_dict()),
            "/data/lib/libiptcp.so" in json.dumps(event.to_dict()),
            "/data/lib/libipudp.so" in json.dumps(event.to_dict()),
            "/data/lib/libjepg.so" in json.dumps(event.to_dict()),
            "/var/.sslvpnconfigbk" in json.dumps(event.to_dict()),
        ]
    ):
        return True
    return False
