def rule(event):
    if event.deep_get("EventID", default="") in [8004, 8007, 8022, 8025]:
        return True
    return False
