def rule(event):
    if any(
        [
            "^^" in event.deep_get("CommandLine", default=""),
            "^|^" in event.deep_get("CommandLine", default=""),
            ",;," in event.deep_get("CommandLine", default=""),
            ";;;;" in event.deep_get("CommandLine", default=""),
            ";; ;;" in event.deep_get("CommandLine", default=""),
            "(,(," in event.deep_get("CommandLine", default=""),
            "%COMSPEC:~" in event.deep_get("CommandLine", default=""),
            " c^m^d" in event.deep_get("CommandLine", default=""),
            "^c^m^d" in event.deep_get("CommandLine", default=""),
            " c^md" in event.deep_get("CommandLine", default=""),
            " cm^d" in event.deep_get("CommandLine", default=""),
            "^cm^d" in event.deep_get("CommandLine", default=""),
            " s^et " in event.deep_get("CommandLine", default=""),
            " s^e^t " in event.deep_get("CommandLine", default=""),
            " se^t " in event.deep_get("CommandLine", default=""),
        ]
    ):
        return True
    return False
