def rule(event):
    if any(
        [
            "Remove-Item -Path " in event.deep_get("ScriptBlockText", default=""),
            "del -Path " in event.deep_get("ScriptBlockText", default=""),
            "erase -Path " in event.deep_get("ScriptBlockText", default=""),
            "rd -Path " in event.deep_get("ScriptBlockText", default=""),
            "ri -Path " in event.deep_get("ScriptBlockText", default=""),
            "rm -Path " in event.deep_get("ScriptBlockText", default=""),
            "rmdir -Path " in event.deep_get("ScriptBlockText", default=""),
        ]
    ):
        return True
    return False
