import re


def rule(event):
    if re.match(
        r"^.*New-NetFirewallRule.*-Action.*Allow.*$", event.deep_get("ScriptBlockText", default="")
    ):
        return True
    return False
