code: def duo_fraud(rec):
      """
      author:       airbnb_csirt
      description:  Alert on any Duo authentication logs marked as fraud.
      reference:    https://duo.com/docs/adminapi#authentication-logs
      playbook:     N/A
      """
      return rec["result"] == "FRAUD"
  
label_desc: Use image node_id 1 for calling a global function with example usage: duo_fraud(rec) and returns: unknown