From 28c47b6cec662270f332101877bafb6788c4c54a Mon Sep 17 00:00:00 2001 From: Ali Alvi <137436351+alalvi00@users.noreply.github.com> Date: Thu, 19 Dec 2024 09:22:54 -0500 Subject: [PATCH] [BugFix] GR1 V5 Compliance Messages and Code Logic Update (#318) * Small bug issue where comments dont show for wrong queries * Updated messages for GR1 and fixed the bug where correct messages were not being displayed * Added updated zip modules * updated aa file --- psmodules/Check-AlertsMonitor.zip | Bin 4207 -> 4431 bytes psmodules/GR-ComplianceChecks.zip | Bin 20685 -> 21594 bytes setup/IaC/modules/automationaccount.bicep | 2 +- .../Audit/Check-AlertsMonitor.psd1 | 2 +- .../Audit/Check-AlertsMonitor.psm1 | 15 ++++++++++++++- .../GR-ComplianceChecks-Msgs.psd1 | 6 ++++-- .../fr-CA/GR-ComplianceChecks-Msgs.psd1 | 5 ++++- 7 files changed, 24 insertions(+), 6 deletions(-) diff --git a/psmodules/Check-AlertsMonitor.zip b/psmodules/Check-AlertsMonitor.zip index 84f492ccce67b8ffd214843b510247e9ecac5454..43ebe9f48e46c5ca3ebd0e01b405471b0d468dd2 100644 GIT binary patch literal 4431 zcmbW5byO5?l=lZvx?8#%q+#fmP#S3vMmlGPZU!j{>5!a3Bt{WXy1Ntx=~jjs5TvDq z)%V@_?b)-t=j^@bKJmvr-{-IA^F7y459b~=0RK;>S!P%Q{xudU0RVac8$jLF3FINH z>gfdWgFf-`cJuRri1 z)|D-Gb<2^?J6>&3FEq03DyMTQ`CaXqUu6dE)!{8=N~_%jDupVHJQt^`d}=irueOW+ z8MYl!Sd{xPU^qpeXhcUVJI{A-Sc5SmJ93HnvuxZh)~Y>{@Ua)ai4CV{)7Wr8wq;u~$sE@TILg#wj7m4+{Z#D{`Y7*F9mNY_v5?2{ zjJ@FKyGoe;z#J?WmJ?Z8-dO9Sst4ijVzBF09ZzCaxipQls?k#USs#$zXwYdoTYjPAr30-1bFS+kMCm|74_u zu?3s#6T;07K{|~$Hb61U>EP_++!A&&>8uWin|+Lf55zC)T%UAjtphYl8p4Y?3Odf| zQUogLFh0MIEx^2O*mO`h9^ccgz_qB=7Y;*h*_1Ok8|~&evx}EKkXkM)XnD4rfn_FH z&NzJ8n}GRDu}6MRT#Vnch;2uJ-HHVn^cogsZBrp$Fy-4)Ho=gLr4;v#b;e1j&;9g4 ztl@LlbHr>q1!$0{{~rG0I#|wS^CWh?|L{YsXpz-ZI``mN6irxD)w8#gq7e^nIo}}J z6qa(fk-Lp=HJ4JJX;~|Rxmpyvc_JXj`M3+kuMm`gL|BIDlSxL3Lu`K{y26*T6bMeDveh!*+!?)1~?RA++%qu%6mcB!+oTLnd_T3R!3 z#3j&a1j*GDA6l;e30OiX+WeVPKrAI-UxHYF)_*>fSsgWqjz~X|OR9K$5WJB+^Gc$o z(fWs2qelxqvM+MR1mQXN=`&&!IFFss+a4b$R6Ky4jD&pwQc+Pr-Zhf8i`-cXSWC}D zHE<`2tk>c*U6_0m6_Z0+e`0m_{~^;pns5QN>yIOx;t<2e6&(W7%uRh)K~;4 zu=?>4OWr^PdHKsjp`qu9K|@bKkHVXD1Mc$NDWn$P+u@Ae4yA{Q2%$Sq(ix%HuWN%0 zvu~)p5+$1~k7F5Bhs5ONJo%k+GnT$x&3g;oc`>OM_#r?XU%YY(Q*d|IpVGzshC$hU z7Hqlg`d0X2J+Q`%ymlPM*2nlmyPK`8N9MZ6z7m>8Vp}$5mSEc@csIi-pq?+e%2Px7 zpzRN|3neG^$iU(*3B=j7!MkfunpNx8N`g-xG)Qb`R&(i2LAa(yrMS?kxGWA8L!!1{ zj_5~+rMr9beEh9@FDp;@0^H>^5u5X4W9I6hkKKF8Dzw`qc(XYqsY4x$_4!u9CCoZ-OzcS=XNZ zg94M$g_o`h$Kd(=oI{JPy8+$$Xl0?h+oTJ=C(%)53AOo_cK{FO5oCdR+G=WeJWEt- z$4t#@iPiWO~43onn{qGbnL9lA{KGQ@AlT0VdxES4o zk*RDjE1klb8K|G0SofN3{d!sQ^Okf`*04a+p6-3pj6kbdKzx{n>eWO0G!OIlVdflm zh<#Ogc#Jgp)vfq+=rb<`G zo1)vgk&~W=`2rjR_j{R!juw7=70ORtb+K7yU)dpwUro}HG)SeSR_)v&VYWKm&hOzQ z8YSnecsEv}kaGiE90t!OO#4xU*Ne>MsPY_yCF0fO4c*Bser~|mqUCSy5ljD zVYspPGl>RjKuTvhklW}8Mb^Rl_T_5f3Dt;sBR>1!Yw+t>R_=lmX!A|{lS&+_BQ(h$yr74W5gf32>ym`I5N5^3aTc8D_!s;XQ{+Z&kbrJV82 zX;@KSFniN7HJlhhz^SdI2%0G{AT;!_Wt+qb7I4vmmj`Lh{nXD>gW2~c#ENC|1I>p= z&G|x|>DA1IT0)hES_NrBHR5Sr9$`-}yd=`%UroP76QZ+m>XKa(2D)KUdIU(xRG7R* ztS)Q(caX^{WSO3YYnnXT(MX##@0NYy&i8b7l5E3R`#X&NbmxBxW0)X*;H( zA-JA|4&7WI>slnX@c`b5{ z4WrHB!A|~Fggmmy0~K;Zdp~_6);$_ZZ9q@s`_@jiZuf^yfCWPNd%&SYka>p#&|w=7 zXW8wMg}xzC`l^Zn-W_EHFZ^)DHU%`O4S!>r!!2L# zQO`XrxlSd^xJ-B2#BiHgQeq*eOrCmcki^Uzd5-0(n66I14UyPF)xx2y7+Ahn*k z1hitIUZzOX(kAjvPJ<})Fq0bol-sgt%0GM%D)Tv|YW8*K^_PwLd$zF^==oMJoVMwE zRKaz98HncC$C7=dZCEJ3>2DJ>?bUu$3=Vap(zQfktn*EBO~2vzg~rR17Pn#X6#s4|_B zpfL)ZYzXx%VA$k!+%b=v@jC@)nQs#>Ayti?KV;HW$TnleW@7^L4!FWbsUAF2fyZ-< zE;?Hhm2cx4-Y+fjl+ty^0H#UH@WmOQ)iW4qK61X|zW!<&2o;ceLTzUPRIY#&`=-h3 zHkJAXBpp}c$A%91D@KJvdwW~kI%EyO zkE#=r4bML;-ZP!u5De+Z4{wFai$iU!Xs z(hW)9ZMkk_;8K*4EH_hJ84xt;^pc#38=0?P^I1BLK24kX9OWEnW`^pwOL}DAl2$_A z+htjZQ7r9s_frz%DpG4Vs*%?5I5y|(Fvx0veLqLIlwA^zC2mU5@d$$US0|7sokgmb z4~QJ}p;DcWIe(T3Kw!>AKp7OLH*c?gK3PFTBB`2%v~E82EwInPxeLRqpFZREO{T$ zr<#p_8v|IGJU5DH zpumGw3bNYrX=#GRrr6+IqUvjTu*B~Hxb5OIMBb<*5nh~pT{F2Vv~Y;94%_9njp>Vz zx-0E@AkfNAtn}!31S}Xzr)FPT*R_YIbWdW!_K3Mwbb7am4uDc(688VH6B_(_hy9nh ziZ{WJmDU<^(@{Dy>$3}(UaQhGfmEEZbPQP|P_JuKS7S+vpey7jJc6t@MTGul!}<47jkSQXDk+}u_#&MaFcf{o$i%`y z8HlFem9yT+8*{Vr4|#`jOL2=Z7~kyZXt;g&*FZvJ85x%d0D!+X(NGTyn;Pdo#tr{8 zmw(3%{}zqWe^39{;ln>w{u|W%5Z~p?8 Cb~X_J literal 4207 zcmaKwS5y;>vW3GBC{=op4iXV50i=hn2vUtmB=lYqAOS&;UIIu5Y0^Q82%#yxi!ngx zAV?2rlwPDtlyW^U_nwDy?##oinKf%a?ls>)4JfJD0RR9EpbZvp&RuoJMxX`&=2-!N z>wl;B+?*ZVCAB=9pZfY3p-~85^i!~xkCV&@+!D>E%pR)yO#{BE9}Qy*v;?N6#!k{_ z&YQ?n?_f#ZtZ20pyP!#(*vrwiAy7KOu-F1|pMO%s=d56FF{R<~Z0=gyr1@=SLM1C3 ziZ93Q-ofe8u2e^#mw;jlH}rWQ$Nl*0|hQ zQKL~5Mu}`sI-ke-Vw(&`gO`6mq|7$XKPDZ6q0Z{7G3$DF8JTHizroVN)ztsM`UcG_$`qHNS$cd z1=oSyy*Zw~r&^;v;?uW#KmVVuSbIf+Juk2Ezg1TW!=VAL~ zB?YkhF}*;evYGi+R9gF+fY@O-9YzU0Z&}Vn%R6Q9F20m)@ar-K$_{)V3vp~hW|kks zwKNqqjawPpemHW*3gzkJ&s@d2?4u`qp3lvUiyZtW8y$(i*0x!#S9Q^y^ePo-5lU8eCM1N~Guh}AxcR7a*m(`J zipeDT?XWTI)@{}ML!yh5`j<*po&i(Zs93BUe%tp=`z5IL`ANFkKRc}pyfNr!G$c`# zkC6-)9S(Afb!!&;&?q(=DJ#Pw)Q{ZyfIW4s^q4cH{E`KN7~pPrt)xWYKCO46CT!kL zzgu3ULw$6JR&LY1W0c_+`qt6$C0D6PLsV6DV5&Fa(SD)Y!3T+xNKshS8npi?@x9?|}?j0dO@$b(XluZvA^uu`E;pxWjZ%!<_5IB)kc$21)EYXgP z#Vd**{2a+>()IbWbl!9~RKs^CIc?6CcDZfNe9C|!l=wdPuFh>MI(Rbj9+M@|R%=eJ zZ)sk?`wG8-IPW>FlgBL$YE`x+FGZc#|7K(OWQ(euGk)%urfMzDjjtDuaqz%my;K0xHr>ajh>HyTDqQ0ud-THmZ2g z_)kzkr@Wj3{o*Li6vs>Zl1$nmIX_M(t671wrx3=+w55_PSQ`ofTE7d#gXEL1)6qBA zZcZ*hg?3OXl@#RQAaiAFhYqvi3HSm}U@$*b+nA0=H7nmhTS_0Lz>5L|ZHn`SZ8eDJ zRB`{0?I&FX9To5WsFC5{^zf|*HU*vGM}FIuM}VoFCco)VNRZzPH^pyBw%iy{t!|&} z;x)_ky(?%p_)T%>6F9>r5HnrMT(jJm;p z?tic~hoEKT0OhkxPu7;xHALRF`xXamA5D0Z=p{+i;QUaGg(Wpa4a%2T9-3y{@FjD! zr~8kr8%fg>7-HQBeu7cwim(Jg%93Cn{?aofLe7A5(X}M0qHp z4ceUE-*s~YSf1150D@$EZ!nZnDAtCIx^L_gi)EbJwT@Z;+FF( zwA(dy?mWNAr16I>QsUtx$V57V+Pk|a7jM-?H6&`z5W|^g7^GvXM8%g+MUVi*9nU_# zv4&?=GZ3S=!%5u#PErAXwu(A)Yi^Ox!993zZ1QvEa7!um05`XB()dQzFnvz(Mstyf ze%b!*ERToZAM8&HlrrCLqxn1sWY3DQs#+0SvwQd(VvRvJ;f z%4FC8b6q~mP;5+OHnsggxsy4!?pN-&#YY5>lkp5QULIUml*J9G1Ra5EQbYVeLnYAp zM*_y3!Cki&%{=_-X9)gx*cRvObXx*cn`<9`+G-Je;hz_wYCqEhL=A!&A!RDwG)-|BoAtNYP{u^=f^gW*T2TE=ID zFXGHtLZOqZ_$ga6Mj*$34#UHN=?Ihgu!M@5rfOo}kl#X3UJP_Me67C0O?USB=)E43 zzcE7_stcPJYr2U0)`;E66r7Vc!DCP0l6L;|pinH?D5ZKGipm zRTox#Z;cx;ZHwBKgZ)7ms#BN+^aXBzib(F9h=?Qil+|m6r5qJ$>8p<-qlS==kX}l1ARM=r7PfuNE(R$m_ez0p9ZHa5*V_a8fHAOddWm zI4P~%1)3srMLSELhHCv#{VM36fzsO822MX>i3&1W7(zeZ)|=`ZJrZI`lDV|T=6jm8 za=>mGg@ed9A2)90HpnSC0JS5@mkw*?33q~?nBEjR??tSurA`F>Y7Hf>soa>lcCyLy z=-s^TP;n&9bnL6*EBxxj#pd?A8U3;(SUBmVZl22Y3%l5zHwd1^iS(NBV{Ne)Q0~|g z-?wu!O$8UV$0;0+Y;~h^%VpdzvckP_cEa|axqde5KT9IcS9ECYC|0t=gt}lI3LF+S zqc#|`2u*p%QK5zLt^O>}qvQQQRBrs?z&qK(br1tLEs9tR$POms?mD|TFhJDpL13{Ee`To$DuUNaFhJkFlO!ZU~Ks%6qo?5#rB zVWum&s@QVFf*_&bF6o{bNX<^&aKte$BN%c0^_8X&Ao(G6v(ZP!W3fjw-~Naao;r&U z1iFOJS;I2rCfxVe={XOC1i79&=+cG$WTDX;faTw zZAm`d+S~s99ptajM+Luj7zW2gqu$L}CCha`Ef4i6?N0hyi(^KmWxi=BvmU5S_fP=} z_in{Z?NVtp#=T_nb*s;cM=2J*H_0>cSqZ8l>v|Y5Wtk=q4d6^WgBfk5keJ+)#aF+* z=ud=&jdagqisv)#UMP~{M>j6urUmB$x-b|aWUF}IOY*hjAS*Kc0(-BflntCYpIo1; zyHps0+a1JLk7y#(Q%` z_;cx@?Y`o!QymebogUcXW`DIQQ0iL9GqdyX5rqXT(ucqP3uRVdqWqxKLw%p{4sP!~ zfcS^F?i;H~`c48Bl(}z{;ui1Xqav?zbXK{Oj*2UYFqs}}$2yD{RMT!nll6b~3o+%m` z7qj?>_>om~OmT^IMnRux37$AwfQlU<`h_#Kb*GENfAh5vtrfq9o+CQ~rmZ#Pe)oP= z%>@%KC0vQ~geIlYBUbp@zWIp14j*v>XU?AIbjq6+6ZlJ_KPw?Ya(Vj|bN#%c7Uq>M zzS}Rp5FZ`##Uqz5TOizmn9in+I*xGMnmki#b7$k*92jAK4L9zBFDNkz?Lo%gwbvdE z>%q8Vl)*O8JCd}~_jQsiT_S{vMoaIbP(Dj}(pyWvd{EyAjxhbJ`yb*=`$PZ$ diff --git a/psmodules/GR-ComplianceChecks.zip b/psmodules/GR-ComplianceChecks.zip index bafea66ad6cc379285cd0c08e24f313306d9f0df..29f4ecb08dac1ca44f6f785075fe05520efec8ee 100644 GIT binary patch delta 19237 zcmYJ3Q*b2;)U0FMwr$%J+fF97y<;a6+xEoPj&0kvC%mWbf6-6tq2Icyt5)?lT?o2S z0h%BTj`n1lyibGCpqUN%fA1z3sBusv7p){6kpClex8z-D8fdF~Q_J}O@dLI64IIfk z5^uq$03=*IYay|mwzC0zEGTglzM0uy+d?3ulzZ#zB)1xecBd-aAH4_vq}43$@^lY0z8q# zPeRVk`En44&MX9ScI6`u>6Oy+U;R05KV0W;XSxpF%T{xd9Y+GzkOA}c#Gf`MvF#lt zzo@tWjk~dAfA9)RxdzzfvJ>P_m2cnMX)AotX1$=-{j-6nCe@sQO1^34Cw`k3mM#Ve zVIKlNAE%#`rYiS8XYYg;l?Dy_KNcO$=KXz{d;s4dVwcEF&}MsDu2KqXB-fYO)%2z` zC>r-|S*Y-D7!+GwxBw%hzYgUFqk%im(~R;ria#6~N_AbR1KM}xB;GizSn1qqq3p!* zjwaSMMOvA?$?KO|mFMTrRC2!!2h4wd2tV0Ye!n@_JSJ1%h#0pvYGbfX58Wyn_2ErJ zdGlTwl}Am)1=ALD&^FIcqP0rs$jn*q3(a`q{}+f4Ep$isBw*=46`MsgmZ__#i}6;& zuq=u}Ef?PPZ`-=qQ749{EDaG;8q2qM;Zb_EJRZ4u(wV(sUQD0=M>a|O*OCAz4<`gi zC`^-4pYFIr(oty;ZI5rNA26)nE|WP>G%!?(4P4T*LGclTtCL}Wlu1pL-_XLCbV}yb z`WJ@V`EJqD0e~%;-Z*X@3?Jpp&X&tM>7o`CDg-0-wK2AT4owu*`JaqK z(c|yV;6l_tK|Fy$pJe7`Xx_tCWjvzW-E>bLW+Lvw`au@y@jmZVnoo)6O4t>1lN?*9 zWE*IVXn^ZT2Z(W45~?2MC|P0*<`n_NUWR2Kwbr_#q~~6Dbr+CbxR8DRn>q@WK%1f_ zj`gS`!xQ==p4cr1tp58i`UWs-qmfDFrPU@+M9_~k1{V>Br&bw^Kj=SiAApdsf1|rU z<={}P%H=RvbSWy7d%NO7V2T`ebWOmpqiVb?a=_sdk_MYPvtw^9>%p~;cK;N@j#K9D z;tq1;jfL8oLL%5-8~BcNk=I;R?=f63%{530D@?Dj_Sira%H)p|I*gs$@aC8LAwr?3@Vv{-KAi;m;wr8V==s3?z;W)##=sJFUBew z?tnFV51W#}lVWQ|$$u5Y+pQ2HBrZD`yy&vu%7UO+{`MZrJ&>=@sOm`moSk|&KlBa_ z`e?Bsa)@r6^%XP(#b^t9ZfvZ>Z1GepRev!Ttn4{Wo_^!^9?MKZV8T0274g0=Fx#K zRqUc)c!4}4N_C;!76Hm4F3J*)>v1hzIIvjMjy!FuIX%-E6L0WJ3FD+-j<(g5Xd zFy;hhB$nmz(WY)?O0pH+Az5+_-6r4dFZuZkF?uA4Rk&V8mc%FYEyK~k5fYM)_VK3e z7Qbc@6c8}DW~_mY7EU~vUrdS|@}Qf!exSBJ+S>SN-|_JlYRWue3>3yBhhY;Ksz4!@ z*Kv`s-VP|8;C&0^F!}S(VXLjlOl2?}#(lESffJQOtnO z$P%(TpI{;Q*X;{!fk|e_Z)k6LsW=oqiKI;dC)FolXwU#yG0~OZh4UW=*(w_T-#h=!g(vKM=}Ob zUfu?mvqNP6MhZ+OUsEljRiNY!3Di%!pcTxb!hhn}60W?9YTR2y?o!HnP;WbWz3Ky& z{pDQ?*(@}y4l@q|VelhV3Ti-Nk*O91TcX1)WNa5F+z{b!3;!{#7?Q^}ZpaxTA2f-k z)v4YU_y)5h^VDD{RI0jZ{>3n1JWE3BhX?+&tb^ik)M2HnGuq6633W!Po$~2ME0W@v zqL*f)c-32h$PydmG8&gqC2`iQIc)(N>O)vGhlx=a6jMJNgxiUxp#52K<)ydpjRpF? zo3ycfw#EJ!MGed1MRQhB9mg{fs46s-*6N|j*k(>67Dl1)jw$fbz%fZEga?23y}LuG zY)20k!E4=mDNA;4-6JJ>A2cDGPP1Cur3HX$_=eyyaPKMEn?nMTAxQ{$C=>u%n@ZT) zl5(tWlcE}~P2dpld(04|sXc{k8ym^tk0yWjgN0e`D{5X9nc-XJA$5@1^pVgam>4Cd zIKz1kuiueYz-=c7AIidDXD}K4VEXR~it{NY;NDSRaerhp2oL8O3WE1GZh%W=eSE&V z7^@vT`#h+%k(eFuRw5+*N|^vx*l9ex@~8!Df^Ge_8=Lnfh5M;g(ac6RZjTX}6BkM6 zDT?HO?w#u6Or&jC?Rd~VcnnU>Jar@Ba@oZ@0&z~k4mE7Vv%_-MnZ(xqg%J->>2Ui@ z5>DHVDdX65M`CNpi~YCrR4za8pm|?#C%Bd{d8Rxm0ueH-|G*LvsBZzp=J6`~5De$V zOjrkatuax~aUpXZo)^(f9+bG?;F3^VuY7t-51{H!k=BBr)%KnJ*K53ihf@dbW*b}% zOx|OE!GvSuVUZU9=vxoR!b}Im9-ypRDVU|2+KG{Llh5RE*i9c-E9-GP8t_7p)hmrT zAHUmF%b&aUvb4j)Zyo?HJXo?<(IoB`_1&y646)Kp* zcY_js4XtS1iX{^$MNEasp;-7@CXsCylnQb=3IsKW(T%Q^LCznHr(1rPy9kArG72`}7pJrUE2OgM;6c50vL(P`ZU# zo$?sm=nciF3s5NTV^SVrbmIHY$5x3pLLm3avuMp*5-G-iE9j4s7kkT9)Kmpi` zw4}?l_&>%s>1Qg<^!3RQbY}^Jghhu6)Y_C(t`5khV@7ufFsTJC1j=kp!D_@?e05;q zH%^y2LIcx7@!YSdwlcq?Hy7>F<@7ZSb49d?HL}A_E$UMIv4Es(+O-wU_gYMMKKsdW z99)F}VTL}qn%V`v*s)}Pvh@ZL46onlz`Y5aKg}B4B`8+%)9J_w^$fum&4T6~69caVZ{rgLUkaL{wEN9IJf$}&GyRLZxaN|V+eK+*)KlkMb)3ZZZS zzlcwg#r_)Sctc&!r?HO<@+3_y2Qxmx=k@(94I8k573goz2CwR}&r0<=nB|=K^Nzao z*Xy$A0i=RCC)CnLYK`VQ@(Fx#jaQ8M-k8NRDcz*n>I~Z3& zG8$#P@!rV8ZR8uTtA4|%mQwYgiB#td0Gw~=B&;!WX=cP@;P4v+OosYDb=ER13Nkc;R6|-JCc@h|5V{IMCS8iAf(G_x3m6{p4(9k@LN-; zm;ER2dJN_#s^>)?OCq}#vicmtP!1{8M=c)46ZCXQ8rIYHqVm<% zxR%9+KtglmA>dYsw!FkV(rJSPs1o4!zkI8R7L!-URm6bI(=eYHZ2MQjP;I0?D}!92 zE5k5#-F`b5bcHpc<`x9393_0ECp}+vAY4Wu+58({S#-BubjV|=fM&p4%5T#@!{uO5 z0A{)ttYXV`ce+t1HsG*Dcu_g_eAYPm6UmDD=XG>85>5l#7uD1cBU~#L;6qMSnm!%$ zg0$ednyrr6Lw@Y|f|3`rh@_i<)mOP++lP8JveEwvBxiv)0n;>tqUK4J=P`f+%l zEgVVAAFSt;ogZ)!sX!$MFuuV9Ot$H~K;OGkE0ew+p0^Qp6$bArf)@=)9#~@d=2Php zOsMa-O@%o^Ca3aUYlM&h#a~U_!P|20KV}@BDEC==ztU!C`tSa#pX0+f?9A~9au{mA zz^rpFsq({3q*}np9gNu?&Untu==+o=SNcGlW8z^6NJ!sTzMJ@O-Y~K6RhDLIsCFTS^zmOPc z+T1m%)$4xke2D>}T6z;==VhF>Nd*Sv=V~zFT&Sib{=w(2>L59#(jg)-{`X!{;ELDI z2p~^oR)YOI_<*Sg#O)Pxm9J!jVQrUD>+~(1&K(H#H14sd3hnpmbyr5yB1G zQ8uS%zgAKs>Nkqku%>4$Hf4oQSGKAo&3G$!B-jGmIcujl?jrdWj9GEF)kKKbmh%qfM=}A@ z!L8an~CFfE==?@~m z2#%NAfbL6pzgt3uLHdD3nggd^I|I#b2J&^{SXYO^m$AgY{N$_RV$IGA_z)37fv1p$ zkyM4&U%#&Yt^a7(Gc}F$aoKCN5T6e)mUOkIu*HSYHRR}hC-Ihvpf2!2p1FV4;{Nk; z5uc_Hz~6;cWS}e9wrOKLsHra+Qi>VNpYUVZ^lI52>thA6hPb;ZD?W7*U*<-lY> z;0c!6C-^+PQM8S>sx(eJ$uPcaUj3_yQo9F9A6w-=nSINrexrxNwQ*BwY^v9lqY>4s zyFfQ@_aR5f@dxa^68`h;0bNh->iZElm>J*&z(TpKn)b#Boit`*P{Js`7sZ?hx+b~) z)Sce5*b<}?BP&eVrfc1@LQK#q`jD$D{CsGMR{J-iE7M&zi6OD{&da z&4~^wnzC4R(~s|KvgobePO=qsx#7_IY81spbmE%>|0YWc%#pnp93cmB3yrbYn?RMp zx=dQ;)%kn5x2tJsxgUMcqk=t_duaFynAS4I5I1YB3e?E^8aY$R@d<|h8X@8Hkq?Zl zFWS6ov+AH2#Xc+(sEqfinjnMpw;ncF`|~5}|SXpBxzxkL~IKo=MQev2q7aJp$9Z`=nwspd+xuS04}saX>Z-Jl5P zLLhb_$#oloUg{(`-EzoO&bpBqT2XfTi}c8w{qa)I-u?nDorI zue|{MnX6GW5`0$#Eq0v)>)R%dX>~!*LxKrSCnW3#cR(9Ib;m=|O}v}|fZTFK39L2@ z{*Vp_rQY-kuolj?bm~570t^W9g@ zXDb*F0HDmc8Y`sQ0mcDtKwwRBy zoaaLWA7nqoDR3YWKcC?Ay;b=4;4jO5c!cx@EYZbc4@|rbk76;^9Wu#*oQI6_6~s%R z9@U@+c&qXO=Llsjv4?9%Rr5&azE542`oEuCSqh(Ir9(_41r6Av3}x}6QZOZx4~|z$CiuOG$9S&ZYgSn%BQF=Ds54+lRbJ^AD_Ot zK-!P_BuHZ|fKDrHNbk<<8`Mt4B|oho2E+8xa*VCNdv09C$iy0C1Q2S}UWut58K8G& zj_&|FP2YIxH}VY_^u=$qZZK1<59XXohqOC4m7{oCrds5`a+IETilQeX^@2$!u+ql_ z6eM@1eKrpPOw%?;C;w(zYq#bDyBL}ql-~58J~m(?%@UC-{(--)z#|V%9OfnNPqHj| z%-Vg$A{JLUH4!vj&$jX?fiW$??I++Zl|y@7qFmhmEcFA(z^|la#St^xgYX9uW zQ_!PB5sqVld)AaM<`TZ&vPkbT-ig*ran3!?0gbFG z#=z55)ch?*$N*SG1L8PR7`pb6C^x)Z`;Ls9QEq|@q>~wm*FJ6XDp?#Q?v_izQ{xwD z?lu5TyWwAHZ&BEPg@};b{-7i}ihCvye0pPFI z=9)VZ#Y3YTN?v;Yu-@%-114W1j*%&ktYCY)N-ok0pH03;h>J6z!ipC8`A!r@p2E=9 z)Dzo*YaQ6Px*9kZPdj+;V@*TrpV{jxaRZtDSeS|)XD~H2J9Fl*Ciy2XsE|yZTpM~$ zet&kZ>^5ZgloH9s+QPgW?N_k+)LhVoq>A9jv4HXJ0m~` zSLlqEiT*i1!r0Q;)z&2#tmmDOi85tXepbEMft3mxtCNBjcnGRrS`j{ z45F|DAx%G6=240m&QIIa3A$@J_2_bf1-e~xv}$Z60^4$8W;GY&@2Q(l}yky8MH{I`f=O{K590c;C+`{DZY;fEt5wB?f8VY`)r zt0XB%Xv2^sTEaU9qG*mQ+ubcp__Thdg(!ep4{np`gRp#!q3+1sLa95C?kM&ljHXu zdd~9UAI(ELa+NmJ7gBN&U$66-#c2j_YZg9Ycl!<{*&8?ZI_QpyX~v$A+2Mse$qOiK_Fx33+w9>k;VwHq zS87d1Ayw!-J8`I7m8&ss8}|Twd{rR7*i3DQjEbaHE9O8h*=Ax!9&~w6fgPvv^2OYo z>^>P>oiKHSM6l+4t9j}NNBdww-_^7%3MY%6x)wWWzhXisVsBjm_i{&l%R>NMp9LQC zpE2lmS3(h_NXJ67`wSE(X##KxKjs0$eDH~O^*q(X)<05_Cl@jFd?Wxw?cdCv`==d5 zHKN5u=j{A-P!Si7$z%qTrqotgliaajhgzckj@3=nlCo-;OL;B+wjv#@{ z$|`?RjiEM=yQneA&XUQR(#?|R>U2)Ti{8MgHkG?IKe1LHW6lc2m^$rEYys9a5Hw61 zE+5YsS4n^V%h4@CdvpWS3RlW*>lLQCbjG^W$62$xOD)?&c?3YI(LMez#uZD)4Xj%M zZdb99s&6Re>q6K>Q8M_hvEy{}13TLg#sM$cV3;j~wTix!!n?g4qNTz1HBAHc0&UF4 zGuKTdQ8=QaNz;T4ZG$1d-gB(xD%0fZ_Ed z7Vx_+ZczrKCyG5WLkzXE9Ja~Rg${}gq5%|zbv$TFZ4gyq$x>8_HR4K;4GB0RG}07d z)dw2_W5Z#Ks4A}>?q~*2IIP2C5Ew0(VYiXGMyg1$h!`R2C$AQt56%Ky7{U0xf=-2 z^a}Ve&mRNV6O7H&uMVuT7|n^nzYm=WaYy8;hut<;nkL{XBR>0^8h2#W9s%~L01oQ1 z_vTpM_XU9VCihD~jKQl@>J0)uuW`>gH8i{$e6=K}KKAfq$nu+n^JC@cSc3 z6h(;d)TClnr$sp%c*X2D3fwjhlr6HLE=N0U5#Uq&##JOpb!{nSO;*os1F5tMN$;IFx@mj9)50jg(=Eg zUi*1Mi^Y1<39n~)Uc!CwOL-00FF*0Yf2)xtB^z)3sw2tpixQP>b`V%$F#GTzcD z&N#gd2~MbG?=i9byXE1Ti)ii3SEdd3pHIn45{1^J46x^M;9+qM3H~DLkGciwmqBXx za{-KjEQdFL`qO-38oEccZu0m~pV~aGzQ6ud_(m`nQM38N&!eWppEVEc6vglSp=zJ6 z-AJUn=PW!SXZ}3m&Na?_7_92FYE1`KFNg>W4|!!K{MCT%ex+9eOoe5csP#D{CPloF zCn*p#zUm=&D6xe;1A!zc-_&e}uTOZ~p8!n4O_PH+=ZElmVcN}N@OAM$SY|m8C`y?u zgj_G{V>mu4J*=?+uJ7JC&8Fk>1b~Mox@AAZnwXWe$bUtae>fyBg_?wCFpahxcR6ot zm6$L%Um)!6Mx9$PV`Xz&sWzc5=LQFQd2sXgT7*Z%`?mBw)j<@&IqP zJ+iK=ywLRRBQm^$#QskHFg#)Y^o>P4IPf^8<>ve1;;$55*6W^u^xr_X*HPa$T$m3< zP@Ua#*xuIg@Cjt3O+nxNZK`yaBC{96$-bp2LHr?+ZaJlf5@ultC|T8gB{M~o<_HfP z2#5%pd*Uv*Xw)YgMj*_NvyOH&9sqht!Xv9G70E|pzg$(Ug8UAURJt5vGyU*V*B$QIhd-GiP#J^)`#R)oQo(R+ax4I?>ye%~T4d_JwYDiJe zJ)aKnDcj{l_D15QhNRP8s0(gwq?QK>c*tYoyV-_*V&U7n5zo0Rv5j1 zkd0@IbVorkJ^S`|W9@3#9e~&OsWe<4t$g6pXy*?a`VAwemuK5jDOK{}%YSe%M?CF) zG5gy51)4uu=ZpW@tTGV&9c{Q}{`9nwLf=h1;N6N`?kv*>R>~9m*b|u_;ur2^6#V{N zT`b%i@Z6^?2Mu$8=40JX3Ic-e1_Gii2M&Spzp0Nd>xBQ!eL0x})+kPz`qx)Xa2VxA%1QtT1OP9e>${TWrBjDpGV{!EefR*aWBHn6 zlP7yO5B9A5De1+>vpb&7EF(kVZ$GX~>CXWk%Tc&~1{;Q-L7_nnr z`RU^DnU4#*k#?js=uq+D+133iZ!muB$l>VEA<-wB*WKiy)&1M!n}v{p)s|NJ;yNb@ zp8WT*&-dFSkT5_zz5M0tdXmrR8FHw9vUE+ zyIs$+zrr&at(PbWNCQ+kH|&^Kj?o8#d|2zG*zyh$TSy-NaM3@|c=Vws=%)OlU0`_c z8a$n4!bk%?r*w(ni z*58Lj%Ed+TD*(x?Y7^)uc$~(%RRlp|5UadO)d%vr1&6yqECaE_ko)Hdt$E#&=)eUI zl#@I+@~(85ma)dB`M9KGJ!fX;Un0?PfvMj5(~v^lh+Ai7hz}}(YeE54M8cBR!SFru z#KN@tOwVt$b)qtNhlc=(b&-B>nAv=V=I{nj$$?N?9e|FFwdgk-#Uq(UJM{u4iG0Qm zD}fAHp+M>mwtGB$WVhVD=QEln>}eoETuft%Gv%s?q&W-OmrhKpm4W3Qtah}F6?8#! z6vCM*wq%}WGq}_nZUuRv#yQ<6G>E=IDXtx6Foi=W8Z%rE3K))L=PfPjA|u-?8YZn&&!67Zr=-{eaq3>=j2Z4BMtumm708Fc|7Sy`26ee>9{u z+sG%lV4%jBtx<}^m~z^`#Mw>CT$xGLl8~)Adp3stpjbp)u{)Y>(OI&b#sxPWPiICR z0wx}4b@!2>K;$D}*W`rb}isLT9-@u^Dz%8%tQQj^{#)4(JgEAlZ{k`V*bS zY{6hpyGX_`5g-%W(?62ufpBdWU73ZyN1RO!C^U;{ivw4j>XRqF^OSV;OB51IHDtv= zj1NbRlyy!5c_kb7r})-GgefRCy&f+Y0neZ7gy+xQNyJq!t-9Oh`$TrG@V0Rzk1SWp zl^A}wO;n=zWv;j82A}&qP3dcHuz%OJnirEgvuXGim!LApWM+p()+pSIo7wCO8%`v| zA*M~QmU=xLtj4SI5GlB_8`o0I*?7bUPXDXsQeRwu@`Pv4-4m5@Z_|FPhpZ8%cAD@CwZ+qtA$GQ%Hu9ty*&=^76M~ zb21|DOf;Y92ZH==5t98&nqVeEFt{)zaLl$rj7>vgW#h11V?&y)9VE07dXvBYF2_1t zAE#h3Q1*q^O&de+>R`mn-lOOaK=d`pWZQbv`rA<~#toXzvX0Ah5}w5(gm9oJq^2Iq zhW369)TO_uGXc{cu%Npm`paXKS{>Jp3CI+YY#p{!%3Ebj_8Pu^N63IiS4cX5J^njS zFem2q3S390C>Q(@;#`~`$=;b#^aU}sprk*&gp+<)u(L~Mr7uWdiku}IK-?dpKJO{{ z4_x^5!0%~$67V_(RSNH05Imhce%;1?=1{wR)I)N9fa{03#f!!DOvg^Dfo_PcuNr3)H0dlDvmlCat$fJ*igw zhmDu@%$Ahqt}AV6_Swe;;1bZWHLaHq6qc#S!{SkaHPtF^R9L28o0a?w(cIP5-MSws z3Tt(jtCwl5dbt1jP4FpW9-N#Mbzg6Nm~9|@vqL?8SWeM$#=?;=x>) zy}R?z3VN2mOc?i_&WnZWe|&KsYOP`y5x&|3ftfu5p9=TH9>La~Ns)rQz;J$Z=n&ft zN!$twSkN8t^}|sRf)Obxr>&}zceE99-g3K}I(ux~KTFpbMfdO!;(KW0`y_=R6+^cH zffGF#`c3}UWPe=>V59I}=l zZ5o35Xyju7iVSs_1&kt2|1$pzV%g6pXqDrSaK56YTDM|RcBOg0=t3PogrK+rTwWfH z9T6l|W=ZwUV9AaZ_r$=@GzXCOL`&=z(71^4V4 zZ?aW(70AM~1x!?xaspbc1p>{kU)t?|oTmDXK=lE9&k3WR1s1FqarJ@^+l@ki*47j< zkwj{`0_{=>b&(39+O-ur2My3x2&qvrHZ^{l9L&p2)z+LyGU0kd-Yjkf5DSx;Y>W!N z9&9TfG{~K)vDkZijePibeLLoBXE&4v@kXYb(lk2zebDzX4M3nZEdJ&qr(%SzwH6Xe z#v|aQ+Zy;V%11f(h8}v%}^>wN3jv!K|9(cUY~)iFN+mUjpv# z6L@&#au;_D``m;t^w$o?A^7s-kl2FN-V>+7x_Q7s>tZi)w=PWs(TX9P$sq}0axK|; zaxmgcAp4lk`lUn6?cvqyUt72`jQ>_T7EKtyg+MK8`F6LdRthoc72n~0F-1QIo zd}4xCYW^sq3{32z=-W>oX@FHQH`rTnbGl;kJu_Jw#ItcytrZ4j&1f-w{k8Nzaj&lN zfjwriQ%-n+wxK8HHFUW(+#~jRQQgySyKh269NKk--O0ky%1QlqOIpd(U#<9t8kVgR zhpoIvb*GUaYG#!fbWo*KIn^;be9L%GbLw z3Eq_4#Bz>xb139l#sQ#R(`oRqKj2UNJEZ`}%REyC;b;j<#7Uo^tG36ieQ0Ct_oTBl z_Iz?bo55e~-ZDeHzX_$H$rl1bG)SR9g;|2x^Lr!5?VqA(7?q%1$_K@DvA`Zf++@lO zyqVfnq$z@HN(O82xG!1K>uv5tJISQ%)ewop zhDUh=et14UYoja4r!UvU3Kqp3O!Wv$%6-U&0Z~T;0;DhCnz1PqXCi9Y@tBFR4$#1& z?-ttz!lG6YzyoG$8@mR_Boq^^m_G^uym$4LtoCsBa8P@1@@XF|ooG~S_t7ph8)KWW zW_cRgg}^M^7?e4n7H?*P)t}+duesUnF%z>wg)QFc9p&ds#fwa6;T3SO3MXpdhyn{{ z2ooIKOfPV#5sVkSWN&~$gp;BLspW>Wbikb8riF>`5b)O${=B|Q=mBiTt)Kg~ITuL> zpl_u4x2;ydO4QI#X?5zie!5$5X53J8xp;eRHdRQw^x;e=5>t&oA)X6T3QriI{ zIbLoD4&`s1$3g<-#X=&#j#o^iOrAoBLSs(PLTc~QEA_UcnmvirudG^9+Ld&k8?^-- z5?A&WeE=NiALpcRw&%rCcb~2EzIeVMa5u(@hp3Ao9$~$7TV}}yWPDGnXwmGfLPr^n zQFm`=iJs}r3$E-gZcc>)OG{7Gj#(`3Uyk-oX{{oMV)t?nK!o4sD`l#T_e6Jk*OA^G z4ku(~V5|gZ>q7pRGnn3?wE<#Y;W3k(z8S;lSy7=q2XJzBC7c)| zNnO=t<=)#?GvrFM(u~Nf(ZesBF%mMFd;^#o7+C7WFjtk&-PT{s6yOd>+UEj|B%+{> zF8ib1)94#Ny61Qk!rvhgmwO1O|7D^zYUaPj_~R#(2`>rF^j0P1yPN(5rRMv4_UP> zQuX$hFgQ1w?bON(jI(S(0)-w#Nn8AjP3aw&>sViJ0zxDcSrMf7=Yr<5H1E5JGpjKV zyMvn?=zfH^W4YJKvGQ%9yG>Fn;!d?NLV%IEjh9}z4(If=r7EO)C`aIP7-%29lyf*Y z5(x6`=NC0Z(5DTK35Mx^qk9KLYW&*w+rcq$(ccKv^tWcf`xi=!b(kJf-{d93hxpTU zLP%bg>G#8345?lA2S?hDX9SVTH^seWN)kGr6C8VT={&@S=6Z*&uE2aifq;@eDS-KG z9)@vm05*HQ7b2FD_}nMG%M`zpy=;kyIgwC}XNg|;u>3c{f=?qy79O#Y_-8GZ_usz{ z>)~fE{YLzlCkijLO`YfyRv3bT57gmMFc1`ATFoEH*)fd#UTUv)-d1m(3x91~x+JeGG@u z?*~Fd30~zi%|E7DYcgw$;6z?qF(mb#*LB4T1d z!sBFICsTB6SyeEvWeAug|3L%?RkpuBll=kBu_le-u$9Pf)&r~;iD!{>dtz&Bvsr}P z7o(IACrp?Zj@4m&EkiC{VIp>Jqx#uWM{chEqR%VnIU-3u6;@o1CP3U51g|lpJkE2G zG-$N2Q4$Gm{IsZrY`+no@%1?hpeFNCMgar_*hiIG$Zt<3VG(-gRTL?IcpG99c>Rb zxrUu-11=>$U;snizxse}d(JBG;%0q6ry0A&4Lf|biSd0-rn29Td1rDc!`E$)`>w~N z2zqw0t4RHN6E&Au!~)8DWY`ycvNKp~W+~Y`xQj1<9j`s5A7DYOarSkPaO1%MU7Q{A z@94s1-h|L^xKW0RA3nX$jwXt0;HdkQ6j_XRjg6^0@lHyb{5zX%7O(hI?iX}7zm)N` zTwSl{Ob@a-bfO_7*%-rTCg~aYTTK@CI$X8&o5Nsgj%CQGQo*Hdul<01&0fm>M*ZVc z9Y_xC>lB3}Lg`syjXjS9q%RK#F0faKYHVfY`C#@Uf>?6o7@+;v-7 z%#Naa6I?FuM}os0W6+TR5FKAk-wkA< zT_GTN0ASE)uJis2ZB&;ET^_8-`P1bOPwW|%R`^1tuYP+)%B z=mw{K)c}5x3){^t66&eir-pyf6-DUUBSFQtgNop5&%Brt2KFPM*ybi9dm=|lI}B7D zuOqx@M;sc)jxY~qyRSd_3ukAH=C5j(Xsi9r1Qh3UxYI}sYv?F%p;;C7+U-giKSUwg z`_`3}+N_Gmf^Gb$Zn&{Z#ngAyOsMZn3Qe5d*o4qh0u(NkU3N8>rFu|FlD!*2giMP& zm4kto*q5V5W7TaV_nViO)sp-P_uga(??qVa?mE@c)9mIkHZctgBgwQahK-ETgRC@G z0C-UkQ!1{Wi@eNZ#EK&*qyFO`q=GLs!|vHpQP}PfjFqYJZF3IWf8FbuO8Z=_3l#(;jCHhwALcVRYIA0-EC5BCA zx#k+r`=mXp3m3i^PK6`B`l^dJ0fsYstwZ}_nQLRj!jBeC8g0@J`WFc1*!R9ZP?0%K zmZNET6aRs~HL`$#ei$ogl*9kGRMf;6QZ!Df$=9|r4$ZM@2kWo#$EM>^637hWbBL0_aD`=ou`w zjt6v#5hyU${WlBJFTGN*rF`_Us^oq&AB8)KL(^9fN?J3NCQG5F#zu4x2Ghm2f=TVS z^Je-o;l{1j<(2Snve?~hnCq9w07#(f$l+#c@(EE@{4O!D=0oijn!(m~#nkVcR`)qQscSA_ zOwuR-6^}w`Kc$l(tj}cin*JHEr}w{{xa^b!jj1=ki_}zeJmLhE%flv&GU8I#**mV-NOd*fRrGgXHb(BT)A~$~%C)hh zW=|ecEP|!T>JGOTN*u3F?Bm1( z*$ksz0QxJu2hHf3&P(D3k_fmDMn)4>^K)Tb0k0xr5w^8s%CT0$3TvIXcx<3V{^k~{ zT=o`*XIrXkGC#5Z=_oAU`$t&q*AkS)rRN1^E5MRk&dr3VwruZ4DAP-r`wP*;GdB`? z_#JL3`g`N?cMWgdTV8mL|FE&e68Q^JIk46p&~U#OOog&T|6wAs*8*?xj;N|2t{UDm zN4C`t!ioGl z$m#*e>|F@LJ|0>-R;E+GSYj#0^uL<8^LQp4HxA&-ElnjXWZ%lMT#1D!$(d^=_r0l{ zIi|)CMrCrXV_#w@EFoq^hB9=!e!o|*U;jL>=k`5(wW$QVGX_HYrB)i1_XavSovJLso>h^P1j&^84|@zg0NnBUQCt2R0}~9 zpytq89l|n^kiFAjA35AJ!~8g2SZTHZx1kl)K5;Vw+z@wUfJ3S|5R?8YpJ|s$ShAS2 z99F6JBqBP`ar|CQkaARo@&u&Plh;f(TVn)v<)!MVZ0j>FO(e^tD_?W+#{(Zf$37A@ z0FjaNo0I>@-5@_-zzn7%FP@TjQ^2j^A|g^JNvTB`&v!y|im`19+kI;=rfHA1zNa_7 zLAEudG)Ss(djn#^{k2BIuoo@w^{QHQm~_39O3FK8sy#J-UE9Mh18Af9I6o=1AcQnj zY2OTexM+{t@acC`o^}SKqEP6 zsr()#M1Yv8^?h=5_Cr;T)<8RAubA~PEcw;phaubaxs>6@(@{MVX58nngZsDMV;T@+ z?M~+dtVs7tn`R>@y1`FhP17gCK1eO)cCGaDN~Mw5*sNiep>k#fG(`a6=0!dBlxPto zYf#hF=X;DC5jbS~S`vU1Ys?*{IrN!_j@D$i>0tL+Z3MD8pIjo%=#)kkcr+DMxz)C~ z^<-DXGA`~+XQ>ev9EAO8Xg579e}Qk|$*W5Xz{mh}OMdU$r(^Ljy3)6fShcynm;@{C zmS8|@aF`0))@uRlCc3@3(Kg9`Gy5GG;~9^+ta9^O`9ikA>aNIMbDxr=%;|ws;2h7; z#K6AktM2?lm3!G73ySLk;hh%3gjBq8gH&tG+zy7wy)C~tkdIY(GsP6PT3@-?zccRA zUEI~EgKukAm4j>Fjv;r$5y1Ql&IM$79cn>bC125nbXrnCN`dq8J zFjz~9TF7gZk4}P>`$V0e)8=RPGijvBRqafxA#UM>gtMPuVDPZ_j>}PXKUyqDq`Mw= zeQP-18?rl;jMd2sF71dPzYuWRh>fEutA3wCPl;!M;l$SC)s}hYmi@`3ThOH%Lc+qX zdB&IXDBjdOO$asag!_fAr>m@wt3I;iUH|CGY(X>s{Wz2}x-ZrPkvNjv#L$xeX1sh{ z;qbIwM)L>Y+bNNT(?4~e9rV$)cvp|4@R+3EFS}R{#BxXJz@R)X4<3)lNA%{WEXjT? z>Iqb*o>(NjrW(wti_|%``);leAN;cH=DJAkwACn;+;O}eb z5HNkJ*Ps|Ol-Wwk^0jyBv7Qh~mglVeJTV*7YUwtdi9<~$n>-A4wpDC$zw$$vIVWZ( z6WUwif<43Pg6XO9OzH?BofG*s-CaiF3Q*+2(Zw}uz0Cr_qVTGgspr-fiw30y{9zWY zcg@`0^mZdgP7-_L;@X#lxal{4@UR5*_L>f$1m7B_{3vT(*R-edLp#@6p9y0(Z%<(D z?M}9YuepGnsSiB{l^Z-dHpBgPz+gH$tZPFM3rR3O67s0N%)mj%abH%C-BDE~*pJIw zPJzRDVPyEK|AN5e2Df7eUQM}W`N3;4=>_6Yk7TbOld2rDvbl9-1dZ20 zM10}2h-WZqQT)#x>Bnj{o$Qhi)Ex03wVu4^F`6(G&y0H zgFD3Gva{|l1_%d>UFGpGxSym|urq`fR7`dy_riejDqe$_z1bNLi`n#4*DJDYUR5!T zJRu@t{VsF=rgn)gwBm)MAvRw6quWkOjGEn2RwOIU3M%)aFeijlF4?zdpToS~4ANue zNkl?*R2}?+R#+R0{c?BTGhA_cYb)<<;FoRM+SDC7CV)~p5~hkj%0f5zD;N!LJC7~y z(%7Gk9ZHvrh-A%2(enMr*sI+0ad;Q6YikV%Ehsf@*TX#tpFU8B<=Y!^qY)PQ&n(`w z`sAJPG{}fkV5{!S)rd)Dq{Rgn92`-KtzS!wwNaHuI!t)nxRc4qegSCH@98&f1V31_ z{!Zhmz&A_WLvskXLD};!bDI+IG3EQ{Mt87j>ASkHsk2=SaD|rI27rTx@1gt)iRS*d zs;!>yY$G^gU)8Wzh+0t-7p&`%xVxTJ#skOs9zZiS(QQ}LjxM*ctpb?yb53E)Z3lVaj8xx@qlC3en>pEj0P`wxCjK}l z!}4x>+b|?HMY3OtF>)<-Oz^-O{`|Usl1K3>!=w;h9+RC|J_n4O{}P$;YU8+*SvdEz z$;&8B?6Q!WRn*<9LjLZENsTS`cermPD$p-yn%DA9CqlUt=u#YC5M6(eg}U8Eo+WzD zxc}Q*wvL1%M{yCWBc90KnKMfvzPSq-S(*J|Mwi>}-wL)E*Q%Ddu9;s4q4}O~Pz}U+ za(+CDS-vyly)_=Q`wNv$ecsjkO$yN#M=JP=AppQH7Fc6-fcH%mLw!|yJ0Re1p{Vj_ t{f|-nea-)l0RUtG$N$S4e-~=pX+;3x^(lqF*rF(*%K8wWsm<^Ce*g-%Fk1is delta 18295 zcmX_`V|OJA(5$m#+qP}nww+9Dd&jmhv2EKE+jb_lley=;>QB9T)eq>ZdNwNnGlhUe zAutA1wPZE)M$H_E|GPFrLrwq?V|BuGK>qJQ*`@43QA7QmSF!v*YT%B*mIGOL(k_NXW5E+HiNHwFxWBHi~sA{1BD(|vVupu zxo`4Lgnu>;hmJ-K?P{EaqSBdC6?HvqFKP1x?)8qBAliYB*V2vOzSKX|xStdKSg6Oj z_9Y>f^6*EYVWYDA@ZP}J^1acb&l~-xA3qq;OQbqTvwbaBNriRd>zu7iTT^Oejr;a& z6u38Z^6hQ{BOpTkZJEJ%;O@*df&7i)KlV%|hc1*M?YnYfZ)_G!t#-9gHlp}jW9yot zwXD93jRO%IAD`A))vOHWjeor%Mq^#@Lh3nn(~_7mqGefcJAV%btvLTonf#+v zPPPkxLB&&&9ks^6S=&fU1V#`E%l5h6&W_3WPCrTfx{-c&~V1RWQ%G z(9e|WoxmhrEA7w{y?43?IbwpN=-0Pg#3o4*cYJuz|GMtp10TFDKZO{mBq<;f&-C|d zNZlcykONcmNuYfXh6~zYH3A6%fr&GRjJ`2VJEgI6(-}%IC=2%JnH~_$OqyLvraoWn zm#7@opaf`X@W4POpJ*7=Ac*C=rX#$|GUy}e)ns7I4I|%+QQ1Dc zz=*==Q>8g20CZDr2hqF-6)R)nUtqkN>6|5idFX<2$q;$T>%ft2zt7^#B#PmPzoiwRb3Klpj=|I82J7LgJg9@rZ+Ywh?!M4RrThkA> zltEhMAP5)<^rzuwP;ew-Cd^(?>V}`dU)0J{=2G&k6bPow(%SFTQ_#4z=uaq}f$CJe zKqK>PO>~9aa=sj*R1&*dNMBX@mL7zWJ5V*o4 zJ%Exi#(YJ1A}%hGGEC}4i&UdA984iha;>@=7_K1sRGrD6_@VLc}_jV*sdd zIiqwg{QxLp2s25}A0b^B7g1c}s~vYQTRPO$@E%yb3dbnOjRbvNxk_6QA zJ}p`#9%@-#ZCoITA7jkBB{JRn<9UjQ7a0YdaY zQg`emWN=rQ8`c26VCU+Y$qRbSZGOb3WH*4(i^GtD<4#t zBCSzn0B7n^nbz5V(@@8GsQ~-3d%aoW#~c^ww8CM(uwqf00d$DBPy*SJT{>} zSvMF9zPo&ZpySz_`^|fNmC)bH85yoc5l}fE);pRmF5shdcc3sQAZodO{8Mlmq^7wc z`9zhA*_k;vmeDPky3WY0s(1E5GKu*hz|Tuc26SGtkig?Z&bc5Fj-5ye{;F zW+jU`Klm*70yD&w`U3?0lBr3Y(;FY|in~Y~fsXWm@EBYgO-b;z{|(p%tiLNl6FAxE zDt6Z5d(1*d1{(ykt|-A9RTR?ku=#=uR+>hyR!8E9!r*lpe4_H5t=yLzij0K*E4V-A zP4`NpSGp1G7lb#Qa+UVf0ni6&qTJ&JN1SwNTauKTIx+*Ev5DRda+d-fUFSGVx1g#r ztU0fQ-9hVVXDvIqI2Y+fh?%G<@=L~o#(tg7n7q!bS9ncT7ee^OB{QSQKG=w8>4fYL zrv5ydpB^Y~!Q#a&IO+wtL5LsA0n6c=11smPm7u%=oc5$k%EXXj5HKM(eI;-o@?X%o zs1ox2(KmJl1+FrJq~Q&59a-50jmF$z#mpuVioaBf%`AFlbsS0bppqEAM6eZ1H;f{7 zV0zxiC}CF153 zYrh+GI8TN3Smuz^HSq1>W5=*mOFZvn!XnoiMmo5=+FG5AR0tEgsmCMccZFwHv+Fm!S&iFupeQ$Kq zHdIB^cj8jSkMqysuV@+(U#C+*gho7#2G8t;24anwzRIc#3Ght`4<_7&VxLQzafe2r34$;AvrH;~38ic@kICj{8P?T?D)OFag@STJ~q1XdC`C zq%RY`toX)@IdAVvhacT%MKr-EYE%|C`ZVMNu5%C5<{C5bDrBxu5l!@Ud>$*&jXte4eXXC!LAZ;MEamk{Nv|m08)tW*w0uX#dQ3= z6{fO?lYN4*&5}`WuVeJ3{%@z>k(wjX+Ys!;$ou8fonK}MaZBQVV}3c*>3MSaUzB;B zP8N)4X5sOfk-K)5a9bo#d{O!YFLTtN9C-uh^+k!BOVYlU=J9@ zopzd1C$MNmMc0v*25uK9U4UUAa{&;Kv25T>tgg?)e2KydYSA)(L&f9GEwp_pr z{$s5mB1wvy?ujI(nPB7G_x#*yAJANi_j-=O;_Rk(*h1^Y+J=YNW~9W|;`9427& zgWA_QlX!l^fC|)RVPjG?ZbAP7Pl9bRvjD30khJ z2EbfZ%&C&(eFLif+9|dtV>{I+tP(D}mCm4pyaw~cb@0!rX@RqS8ced)+Mt=WUJTM_ zj6u%SbrgE;o~;gjjb?Y0DZ6XcP;*vg^D#=SdmB*$vqS2Uu*gvZH~9>musEMJ7qCHh z;{;5WoGa5{VW921=`l2ddkUh55Ug?U{%IyX)N{b@_a@6yLt{+5Bm!ZEh4uV zrl$!?oq?P(Oi$3&jkr7P0o|a$1o+f(qf0)!5b0vY zY6HD%#G$A^xHq~kn98qAgm||24Cub)XId++X8cDsCeFWW-;IJX#_ENLc|?Y#tPvIK zm2SxC8;?oj-ds9eu#ZaE-okG1J7y`KnIhZ)OB8>jxvy9#vKf(?eS$Nl3h3hjULC?j zRK>KDC@-}CiReX2OOo`;lKZKUoi@DvowJ<`&O{$CtjK&25iia9GzNkclXd_tLkzq^ zcAdxAF)oN%|MB{|K{_mt-(M{~EzjpO&7DBa>>k>CP)Pq4`C5cg|MTtjVKDAcvERNF zSmBiPhBLZb4x`n;s`17U0;Cwb5MQWTQsjURhGSROA$^_1QPR)wKJ&r*QAcB zru7AZne9lPYRmVdo8cfw2Q3axv9;Hw@ojqa=^Cu-t|dt1_m5KMbdqSc z1d&pn9EO+3=61m(B)j z{d;}QUz2ON1#SZs421N87yR*V$b`l;LQnTalkn*h!nqUxA-3D$c&43kT(hWi=LAcT0}5Dvr3~zW|FdFwD+AEg z?;F2F4#|1vTUdAY(j6oiSyLUhf^4w{Q*HJkN>5WY3~%RQDF(YN^@BoKn=EITwh}3L z$NE%tinK+!A+h_C68_E|9c0z*qRF+*LT1|xjsE*Q*>mC_)l-g%@tQS5qf=L*RSJr+ zy1iBC+@0d+1_UpHXWsJUl{kHg7!G;fc=#>hwS&hr{h#yf`>0@|e2F_Qmk*C@`bU%I$`V>bPE z4vj)MiiGk2ciNBaDo{1}+~-my((DP^zsuhT5pW8Q0}?jK;MEkzB(>>w7{d-*{d-N7 z1<@XUKKFLRhF1_bzZqAl35X=gaBX($>|iusepr4pL!-{wWvn6L&jNWGH0{e0Ht>=(xQAbvEm1p+aJQzeR!nl$iuh?wYdyB_9>4PvS z7T`gmY-_dAPCKuL(xu3@-&2-s)FM)Yh_}Ehg57bT#oV z;*NWzbi6p=ndk(rJ$hwgY)*coJ#LofOTh;{04Ki|>^Kvws_xiVWS<<%`&;YV0h)g( zDARv+le&#y{F=pId3y;_h8T!gfcZlTooBmsMa5j7T0iY*;Wh*N6UzU2^=h844;cXv zBCmlUhSHE|3Od-9n3<{7o)6^TETP~msHqo0oO9VylaM)p^0GKK-AB8I4iYfF}#%rjbHO^L4KlCf@ymojrjK<~D)VTEaQv8D>_`9MONp)zBcIqef z@~r2Kk-4SD8Hslqca#m}{XaMR2sgA*o_?VF#+$Gg4XD<0>P$NlDD}gWz*_wc2~4!k z*&G$$76Ti52OsM|U%J|nx9SLT;O$59FwK77+4UbaEJ@M3$S@DTmp#`{<4Vw79)xnZ zLv9M_82c zM-r};lbpRyhbjH5=xf&q_Ikmb4{SDYNa!EJ8%8!~ecmB=-Zi#ZJ5p+^^@Sc!7TmwB zLFK><-5G#xb)~ceYoKM$uGkM$$FJy!dZCCc=Vl#tjcJJLV}a|~BL>m>1_{8$f&6WE z^q%%@XE=DD?fQ-Ly6@!?R}Q#?>RRS_^S!|cR!FZtC%umih&52MRB0hI8;=9!|+KRPGE~;2sEt zu-NLTlWhwzCvB$Md{xSw1>LPdO2oA6J4MEq3YAJkrRR#9DbW%{Rv>ZCBYh|eYL+e06+j0N30s@1a88}Xlp3db{!rNMRWM!F4q%+kB*;*}{341JA?WUyR zC=AW?J-j<}r+$@ktRk$XOqR$l-)fL9VL)_Hw+9 zG1~Gcf05i*9cKbT^iuiDD9%YohrVzY0nAKpBTHJD!^3Y0cW|D9L9h#saJhCv429kj zFT%6yKrcrzP6m%@nDp%McQJro*E%wcf9vcMW)86myM9cx6g1&bD*#t(l<2&~fqbv^ z+f!cZ(@Tt&4Poj92Ch3&1%d(tdJ)RN{Q^iyAg-^>zR_#+0gdV$40dB0ZRKZvS>G=+ zaJ``fO5%fXFPlbC$8q()-+u{vrSz%UZqZ>-WLTp7jix_@eQN_3XZsKa6kCJ^-cUpxWaL8g2TCa=Hoe>6KzOMp1bHUcZc)$;-~L_t(?d^A=(K zLNFJrvpHe+g#N|_AtA*{mQ}5DAx!6-zvmYW*ed=6@QKkk5q%MR&GnKB4{a2~uMYcu z!oBH1j_Lf}3SLBcP=lys>D+EuVvqkOxb`!{7i|Z{IIe!R$ zQ$;^pJaKrNZ64bctZQy%N+brbkrsF$5tfw!*RQlcENRb!IYP2@a&72f`25*8v-XvD zY4_q+d=EJ(kTdVZJSPaC9t)M5R30R zMDUHa?#%_q%{SGd(}x5^u!7K&{&uKK&R#uP$HLE{B1_0TCgEb`;xEN8eK|n%J*Aid z<419ST4jHwy)e*@s=ZjJIYLIQ#8AbzE+w?nM3lO<$KTm2&L*8-n)EwJY)rlAd(lq`(jbT(~OWt6!F#mis z6t8(*@Tk$oYoXo}=z@N+$}DPc-f)KCf~^V3uVQ6!_2RpKlzB0L_A{;VS(&ua|3!Ym zIV9)-fTn%j?LvKwr28rFoK$!! zgk}_9aPVHg#l;ox6Of#&>K9j#vTrr*EBanbPtS&^=_t41R@k^(S(Q4WKxE{nXp@S_ zdFs_oexq;0%mdG7WRW?T_0-pZp2P!+iCrAK11pyoU#q&_LSgyVF&R?FVB4LD#84yc z%28hO&>dv)0MuQYHZA%<*1FX4W#j8&l%md$LmNbCFwBi9`#0}8D7yIytB>jU>cPT? ztrBUirghlt(FcU$fwwgFy^w4vq>v5&bzCYe;)T znCi#n+PX8N)+eY$FG>u-T1+7ntl=NXK;Th+t}j}SO?~@)+_7-pv-(OOHPzuK-dpTC zseb{SQt4L7^Cb@l!bKl2X!=#&6_2Rgp>LhgSvLq-En@2kz7ZXKe(R=7HfT4X9kk0F!jzjDddf(!g}#Xr!P*S^vSlfKMs@?cR`Kin^nFLnr{NM(yXsZ^zH<6d4Ra+8=q>g;{qGt6*oJUSUxapcORZ2O=qHdqRTuP_C9g07afCONs zD>eY-y*q0dL$A$2FwRX15B7KDq*SlMa6b(VoLT{~F4enl5f{PT2+&qg*uFxMpXZwZ zUSYuaUrqEIQ2JwiLtmXjZ}Y$xS7xYsyX#C*OD(A%>7}^g32J$t<@W5DL;If$FwSWs zo}PdiZPyeEN75ULr~dUS(&ys?jnWUbom$}M^bfbz*SykaowJdzOJPMlm2rqre6xb3 z`b7)J2B-EXVgA$T#2tA3b7A5>hOAH}2Ht=>(yu@=S!VU;k-hU@+1+D2+Jgv^lQ=); zA(#FGG*^1b7^8#Q1IT(5a74IWmS%EOeFFOT37Z}NeiP3aK$Sh_ETQ=&K_R3O;d=mm zUxxUk8BfH=uX@vgGbwtUkwIQ(xu!Bk0nqTNB}4gRzlqNgua}{r5mgTVO_Nbe&QFDd z7Y~=^tWBVEAXY?Ov0Ks+v_uXmwWiB%d4m5P6!5ql*Fv>%d#NmZoS4M*ce%VgjKp8! z-^z~$w$35ks_nd01}yS2-%9-5Yu*9Y4Q_6N6Ud3C5;cg{G!zTN-ZguPM$ib~{qdtV z^|{Q<UBW?i#>3*W+#oo2}`s8+6r3^8fjHF>rz6t$eUnb9HI}S$BFAjc!e=1iKmud{ebnzU5>rJ?Y(#mV<(ZhejeJBnIICfwBVuQI-P(NB`ewfuDZp|A!3z=Ku*p3}WHJASS}3 zp^g9obrq^?$?`vV0%i&`Ei{_Ea`^vO4+n#Qkbw{lrEa&}T^MhYK99A&xcLaL%|Ue3sKmpCSIh@ zSfl*tktKQsq|hj#oQqz*gM)GLi&H*dQ0AD~$Z?T;8YmkG@@bugWxFs=RObEnhjXTx zxTzm4k(U0DRDN-PZCoi|pHWhWM=*yx=}$=@%GxU)$_T0SeU3DEhK%|#t5G_DUpus+ zK2K1GX;=kww~SP94h|cP4War$(fk)`*e_6Sra35)aHqDwN_fsfc)}ljOj77#)(t^F z^g+t{Xdp3$@Q#mK^nROk3Ab*k3Atj3P{50tu=Xr!Cy|1Z^w|Ee1#z_#vV;!J!Nfss zWB>?r$kd~7DlUrv9$cm16!A^iJ?{jnvakuw{`ku9_|<_~P%M;J3pkixFo3DbG({72 zKYodL)}-lGq+=$9G&1>W9IOD+8>8ltJmnkn9GJmuZcvNkvkErPuSPTKt6%!P|B28g z8iq8cb!!NI$(#h9S{B5NRD!qBD_%9s-iy60tIHJp*$lJF{KA-!-^P}`fpx=l>+%gJs6z`o#@ljbMQ(+S$BY+h9dt9fMM9h4T(T z=gXvJ#p&oeMSKP-4%eO2Pw6zVt)utGfq^EVVtr8OI?&tXfGO5{#Dkyb{t$?`?175? z`hOvxdWY%&F$xe+g{6&%CZ&1YBVp|Jw~BJ)r{7hkbjj$J5Kl2R$aKd7ii`O%Qn+>P z763+3-z&B_l zw)aKkaNBZl%MG3tdMcePEoeya@@U#j;rqKs+EN3tVDKi~svS*C?~{v@kW!FPA%Q^u zZ)0K;=h4q%2F06k+4(9KkwsN;`gr3E5QgNHmR+tQ8nUDqoK{inf%tATh_47{J@b5T zv;)n~Kpsc(^>i&P6ZEujr9oIAa2~{XFjM)3@kCvCl-P{Tp-h`?MVIdfJG ztQL%M62Kb-iAW1(O8)5%$c8u_2m#~JioPQ&x)F4Z;DxZdT^zC_CWX#*V|LC=?eV7D zdOw*a5}yBMksqPn`YFZLm(dKB<{orG_XUqn?x>*ynuIa-mj=9wl^Ck#sgzpA+`61+ zGQ(~|3f+}+kT|R0S`)j`>KO`c!^UFRvq8GU`2$)gw!Y~p0JZNIu-}Kkf?B!&UHQ}` zuRwi)OZcB6Y(qh|?7B8`{(LsZ0j3x=`Q@Go5;&OC=nV;D(x9jJJ($p|9qZf8JCNHv zq$n^>J@_&&dZ$CUnWEGWGL z5NwgUTK=z>9L35Rm>3(0BcL2fL^qGNNn`4n0a-u=p69_n!~kETL$Oh%@goK?<5lN8 zd{h}6L-J#U!z{IWfenwgkAzy2ttF)%ysl9}jQS4x;!5~kpdO!$S)HuYGH+xHjX9yI z!~aF`ivleMn~K7epmkwvtvg`7Pw6ls!P#`a)FBZN8^|pP+yd2;cFv`u2|sB-QFiz* z%ObO7t3BJhlxqBG*Z^({}YG=kLx^$WOT+s8p7RKypk$=V#T8 zP`AVIRmBCF%Na-6s*(lx_lJQI^A~$E-L88dq&MI=$ zSGv9=923_|zv5a!+xiesE_ISpxZUnCmIo1cgC`=DXTF7e1zvOk@uUnLl1K0Nz#Tf{ z?yoVysW{OWdCR)px zvH2k|B)OGR+7=A#asfhS;}tWo!W3QENpfQsP{5W1>wy_gS$R33RB%K`!Fh*OO2~3I z)C$_d1I;MZ+>teNdL$?RE%YBXsWh%#RA3{ueKew{XQ(@)oD{r@7B)jt_=^`#A&#If zd6wJo1_~s{psEG&&MYN%pjNEsjwv2{dh7*wDHn;Ud3A-I0Nt*nWWOfOuF)mi5a?_~ zH3?I44hXJX{laq)t%g z&~2(u+ndDqgPHCCKQ3!i=AKz=53>SC@%At$m2q>t0C^gczd-*(yJ5OKhtADL#x(|f z)-YhC?q1j5T-vAJ4>Zqp3`?dxIRJcwsQ?45VeqyVI5Z=0turu@J03T8*^N8R7?6_S zSHnzyjTwaNbdbh2vrkh_sEWU$bV9x1l!Ei~9O>8=^vU{jmXK6bq7`mGq^r!m7U$0l za^Of$D^{KOgJXbcDcQ8fuFgKotmy;cz2m3fCAR?uA{_Up8r27Rmr{%pMys5O5#0enPu4ken zyOV%6mYq4-q+<8qU*mdj;-ce*5RV{;2fX;KSQuR@y!T4|@I(nwDN7@e*E7#@h{dyI z41@{=C!PBv*x;qN69#`C;E?xKBk~MukyC6k843t+l0~dqXONv#VdF6Ua?A)U!k!ompEIg_SOtr*&EM6r^3fVEqM{DCkAupJPvK2Us$dwH?nb|wg zvR0euoxHGH8PnA0oTpr@ew)BgM7KT^gP9sCcASF6OA_u~3H}>yaTMhNf7oWt4K_C4 zL>8xm@D7PDyj_t%nJGVa!|c~!^Rh4C=OI}IE{%wWsxRNUV!42Tl%itf>`e46SNc(GFs}u-%0RxDxt%(T}WYTJIv$-!Ct>#5wl%E+rfjWDhP%45dd;g^^ z>FJO+>^W!)^Oe|=VbkjrW6787!#p9$8I8I+JP7aiDdKUfb*zoOEn&sbJm4y4M-wd2 z7@8}>f`+q5d-TioQZb;+T*!a!6S2IG^__}6s}Mm(@GDG?PT zMEy?|L&MYS@*_Djn7B#uIcOw;vJ7SQ32GndfP}KJUnUj>4HV&A99(Oozj2>U0ncAh zrIA%=hLHp|?W*%#XiAED^K$78pFNWya@nm4@iHSg$q4-x7>V|h>{GV1NiJdQvmnr) z0}W~k{$=c;R7+q?mY1cxmsnE8l<7e3erP&#QAF zB?KRxYN3J~mIa-GOyU0MM=J6)JxP%Tgenc}Hbiw=dN@_Sc$~H);ZN*0wyail9(WyR zs6=Je?j1Jg4@)I+EjGi_X-O~(1;)iwgW659TjT?X9xf0AW&`e8LggCjnq_5SEwj`9 zR2_Ruyn?a0*K0F+OVrw(`OX&pXTkXQS(u^){3hBpWsJcdzI~^4u5!(;%2vo2cpHw# zjlOVbJ#6SI&b^sXq`EMg=^5C{TLWz6WITM#5(P^qNk&W{017?}mmm2S6q6s)z#G{x zyHeCF3kGRZGKJ{>u+r9y*f9+{uiTsCl9)FLa{@!)m}uqZTZnt+KOo0P#zDqWIL9Aw+@a4-t@V(L%~F4=Ml#Zd;3~cgCKJy~#JZ zd9h^z#Db%uykp=mnP=?|1jkH@)HB3qVw)8u%k?r(+-P4LfCu?-**~n!}9{|H({247EexR80N8`)S~`2<4Ans$r*g zFJKJ$_0akKYk$#!@T~|bJYRLjc<)jD#j%>4VLa+sxAeiPnfgWBU2seAW-wcLRjlR@nOb+wQN58P zXsxOTIu>l7zj@MDpQid({oc)Iv7rf~uw4z>etF1BKnK^IueO@xMn-kc7 zT&iI*Yfi*Q*I=nz%#D_ff7oAvGm*VoWwO$`7f>xzT-BpNnGWEy%XSybwsq`D64<_g za%3LQ39grf@UOeU3NYy(K3V$?5N=$R%zZj%geqr9rbs*&kLYz8yCuU_5S~$c1C0gs zJnnwRTS|$20ei}(5pc3YEQ3ArPzRdhQ~zZ>0EZcW8QkC=xH&;(BOCC6rtS=shG3rJ zB`eSlepH2@9tr?MTNNW@^8?gDo~LEm@JQcREM6)rK6XNz%?JKI*PbrxLwm(yBvYBg z_O$-YZQkU|G%_&oG_&4^4tdH5iT6%8gbISFmY$bf=gIl-2siTLpOELuCICufOZad{ zTgMNxhuP$Sz|%($d5X=Go`;22Iv0@+K|r?BYS588*ec!@b1JI14=UsKOE+oI?ivTo z2D7##w~H7=am$w8e{5I4DCrlCH(SGJc+|C-q&BdESd+*<#y8HIwjlU_9P>}qaX#?Q zsbyC^o&J7tLB9?pQq7cC+XRYd2H?{2$QX_mNbL+AFkD4FFLT4NpEtFItrVF>^+ zpkKJv1ZvsJrT5~b=4LRiqMW|RaJ5tOhe2@FNiOmbKpX>+L?f2-yq zT`x`H&rHD|ZeX=Zma>zDfq)|3I+?2vyAw_Lj3713$0*4)Rek~_m(=6JmCay6LbEM2 zC-L?siz&MRt7WO};wOe26VE$+{EcYwRrV?kp5v=G^5jgsGcdqo9ESk@&5`zCO|o;t z0Io-%+8AF|5Z7`Ez?di?p8evR?DEDYF)wwevnmIQx|K{rm9+6_Y<+t`rX3Nzk*5IBQTao18Hc8Ea!0U^h~Q}z-?m;60{$0BNEpi&-l z@o0zW`QwV``)iu~m+%C`Hk!|bFofs8G2c55`|?l88)A5|oPR#%N0z~ozQwU=4q7u0 zs|p9XJMS?Rkk`pmp-V)I+Mt|nJP!u$*DiNZobJ4$9bA{myvLEb06iqt{ z?dQgm&({;FC1ZMKMjFKnbsq*3Nz^ck0giDHk%MFya)Q9uUDp z2G%}s$01UEp)YxFkR!$ZzP>z$?8*csG?RHOjZ8zVH2RG~v9>>D*m5Thf7xv1UJRYN z%TN@gt_`P0%CN54*m?kI`bSf7=zD+`;KW1w#yp>#70G)9(ntX7MFi>Z4b@(^v-B{sa^=WW3zOn|bG;3}NCIpj9BGbLT zUeHWb6&q0i_uxu@p+9UAP8&1jly8JS(1w@P4o1%*L4GdGSushvngA)Yk8<}>s`X}7 zipPo5*ojskXI-FE@$A{j)J8PV<9?})Z#B%Kyos}fx+54qW%yBcSrqCLrGl!V^I{o2 zOUyrdIEiBs*XkK#3reMg;d`F2lCy>G@>WoBF=DTs;MhHUQy~ocgX)}aSXDI$h_-ET z;Z%KR1Hj^@&jag!M0VuLHp36-1P38kB3gp@e3h2~lp|B+Fju6Jo2?I31 zY392%ddIEim;_rkQa6Eb%}i?m3C@q0L>T1(N1dWDZ4^dF--JLoLH~bakgMSA`w-v!3q_VVOPU8QhrPeQ;tsaf5$uNxNGTI>i{`%v`3q*- zgw|-fd~D!;zm8_z>h@9IslSVwSTXH5Fq68cFudRUgFN1~@+NV(MkgtQwn&g~>RQ3U zYUWNxe%Dh_UL})I7>d+OqHh>eOQj-cPw{b9ChEM(EmgEzykAiQngX1~CYFmCR- zbpNwc(y=uNhupQv+JZEad?JfsCYiZ8h8uj-TAr(DKhWq31qX~;%&i3P@IxW*g5q9Y zv%3FS^x^BXw1OW(%LjhM(g=0*0PP4(Jgogef-gTiI~}_<6ZruhL!jx^3YhhbC7ARExTSq4ti3+OBs{u7!^fi}iqH z7N~@$HJS(;~iNQC>_JWT-C~*U{*NF;*6>DO?p! zLG_z=f=`p9mE~kx42q;=!-NsrAA?Cq_Z)-qhX+|Gfe~b^qbJoG7j5frFlu)Q+qf%? zwOc6X9>rap>Y8;<`D$qGx=W?~Rr4ELTfaY1@}mWi?eJ}?1Iq;lwp`l39_s?8F_{^F zuC2WTiDjMXTSnSeIDTRt#iD^~Ay|n#3rsJ=Fb@8EGy)!f)qPG5ig`P}5Y@nf@!==z z_i+4NULr?Fg;=`k1jH~FDH$ZqOQ~m~{hqUQG0$!Hm*A;F)07)SJ}o>uBdY;AuPc~d$?;65w{wKIOoj*A4Pqu zM6Mb6`{V|flmp&(ZCK3OUJq0+_Lo?aT(%=5_(bv}rI5IME?PBTBW$X_FZ?r3hp1+r zKRf)k@tCy-i{+y=S8I!o?2EY5}Z@|{x zq4{gvpg;^EqUmK3mz|gJYpu)AKiFcT@tWS&SbVV>Rvmw}y%OKTI^L2-jJ+4RK zq?N+>x7vAGrmgA^=6l``Bo=k#X~~uo)K`cbbbF`ud7Nx7Pq6_B)Bp)-y3}2Kb`hXD zUfz9YgPwF;ipXCZ`fC*cF!4TY5~#o8ve*;y%rJ(B4|VpTF!kbPx(U&5r76T=HyQ%v z;5x5dMTl8_^NEJYiPmb_oi19d^w#o67_R?c0Wb&8_yEPP_AT~fW$pi56x@G<*|p8> zXw`qf{QAKx)Yp5xuunAaAy<=awg>8a$lZdeb7G9RV6u2*!>R(WmZ8GBN*1d4Id+#` zT|Z0`U%ymdQRN;uZx_MIKTb-1VF@uOrqG|m8l1Y{bfWImX=JB-2kSH#hVHEt3AfI# zrM8X))6IhUx3um}e|deJPO5*+Hx2rGyw{G`qj?FGI_>(5UIY`qv=^ypXX0{UZ91n; zZRWi0Sh~-4+YWFe@hq9@zyl8ZMw;a&^9{FNzXpa>=nE%ZiD=&@qG`8!bjwm;uNoJP z^T7D#0$p&N`xh>dzag)RtG5}|+&tIgQM2fI#S}V*sq&%|e(ipg-|0(o^cS@x>$0L&g1fxH9pD~4khLyM=Kz8} z3|)`&d|>uk0X!k1fPR;hci<^pt0~x;9_mN;lmRN<-SD};(~y6=2-m^^yW{YJ?m}EY z{CV9Vnmc=e$!~KF&2Zuj^$0)zP7koXyM4^!uEXz5*J}r6oawVa9{==D$p11g!xZz; zYjwi1fpliN_&PBw^V0a;H_c=_$bN$5FlYikVXuxLOVz88$5m2dzO2xVA5F7btD&~7 zPrbBu0`vTVkIR1!F)hRSkD)n4O}`+dHMY}Wwaj~5#7>dhJVY0J(S>X3A|86JkaHBj z-vHy6%lANfQSY&9fx!Xb4QtY+k9{2=Xhbg zx-L8L?k);msf*v=&^7ce_hrvca4;QY!0Y$8p-0`t$1Zj2%c^itt8~~Qh#D*xl8q$O zmHKp%8@dxVu{6x{!a05b8zw2MRPBv+UPm^OnN2}2hegUj(Tm<0Uq3^s0hLCtK+q@K%-^KgSI$t0ZP*aC2 zU#;xb2(wOJP|+EDMEB{l9n(je)PZqziM?}%SJ|T-H{s7t%++&rf)~Mc08`y0yMghk z0B1Gm%Um)^Ip@^gRMCp=1>b^z~{%E44^PJNceLQ-WUV2?w( zuWxOGS<4w1gmnCqeLs$9I}C#lo&01Hnz4ZRDk;yi zmJ*~b5wNuCWY^9&(@D^e5hZKkL_zLL&T4ZX z0W!LpR`YI);qoIG=qPV{`E;k$Iq!d)k*f7PO2eY<9Y7qTIhgPsJ+S#$PfoHEexuIims0P0k+T#2dzVEXDaKI#4b>5~xu1yD-| z2zbc@t+piq0Kt{>AP$UKg;@*;4 z2kFpJXDt#_l2aT900000d|ZT+j#C>JP$&QZW^yet{>ARtUo zhFN&Y1Fg0t006^+001KZAOHXW00000006dulqi$`Qz{1m5>sa_5>t~fR3rwwP5=M^ E0Q;2YLjV8( diff --git a/setup/IaC/modules/automationaccount.bicep b/setup/IaC/modules/automationaccount.bicep index 2cac19fe..d36d803d 100644 --- a/setup/IaC/modules/automationaccount.bicep +++ b/setup/IaC/modules/automationaccount.bicep @@ -409,7 +409,7 @@ resource guardrailsAC 'Microsoft.Automation/automationAccounts@2021-06-22' = if properties: { contentLink: { uri: '${ModuleBaseURL}/Check-AlertsMonitor.zip' - version: '1.0.2' + version: '1.0.3' } } } diff --git a/src/GUARDRAIL 1 PROTECT USER ACCOUNTS AND IDENTITIES/Audit/Check-AlertsMonitor.psd1 b/src/GUARDRAIL 1 PROTECT USER ACCOUNTS AND IDENTITIES/Audit/Check-AlertsMonitor.psd1 index 362018ff..744fdef3 100644 --- a/src/GUARDRAIL 1 PROTECT USER ACCOUNTS AND IDENTITIES/Audit/Check-AlertsMonitor.psd1 +++ b/src/GUARDRAIL 1 PROTECT USER ACCOUNTS AND IDENTITIES/Audit/Check-AlertsMonitor.psd1 @@ -14,7 +14,7 @@ RootModule = 'Check-AlertsMonitor' # Version number of this module. - ModuleVersion = '1.0.2' + ModuleVersion = '1.0.3' # Supported PSEditions # CompatiblePSEditions = @() diff --git a/src/GUARDRAIL 1 PROTECT USER ACCOUNTS AND IDENTITIES/Audit/Check-AlertsMonitor.psm1 b/src/GUARDRAIL 1 PROTECT USER ACCOUNTS AND IDENTITIES/Audit/Check-AlertsMonitor.psm1 index e0e446ce..e3305df6 100644 --- a/src/GUARDRAIL 1 PROTECT USER ACCOUNTS AND IDENTITIES/Audit/Check-AlertsMonitor.psm1 +++ b/src/GUARDRAIL 1 PROTECT USER ACCOUNTS AND IDENTITIES/Audit/Check-AlertsMonitor.psm1 @@ -163,6 +163,10 @@ function Check-AlertsMonitor { $Comments += $msgTable.noActionGroupsForBGaccts } } + else{ + $IsCompliant = $false + $Comments += $msgTable.noAlertRuleforBGaccts + } #If alert rule has one of the queries to check audit logs if($auditLogsQueriesMatching) { @@ -179,10 +183,19 @@ function Check-AlertsMonitor { $Comments += $msgTable.noActionGroupsForAuditLogs } } + else{ + $IsCompliant = $false + $Comments += $msgTable.NoAlertRuleforCaps + } } catch{ + + #Set conditional messages + if($bgAcctQueriesMatching -and (-not $auditLogsQueriesMatching)){$Comments += $msgTable.noActionGroupsForBGaccts} + elseif($auditLogsQueriesMatching){$Comments += $msgTable.noActionGroupsForAuditLogs} + else{$Comments += $msgTable.noActionGroups -f $resourceGroupName} + $IsCompliant = $false - $Comments += $msgTable.noActionGroups -f $resourceGroupName $ErrorList += "Could not find action groups for the given alert rules for the resource group: $_" } diff --git a/src/GuardRails-Localization/GR-ComplianceChecks-Msgs.psd1 b/src/GuardRails-Localization/GR-ComplianceChecks-Msgs.psd1 index 38b71876..b72049ea 100644 --- a/src/GuardRails-Localization/GR-ComplianceChecks-Msgs.psd1 +++ b/src/GuardRails-Localization/GR-ComplianceChecks-Msgs.psd1 @@ -29,11 +29,13 @@ gaAccntsMFACheck = MFA and Count for Global Administrator Accounts alertsMonitor = Alerts to Flag Misuse and Suspicious Activities signInlogsNotCollected = The SignInLogs are currently not enabled. SignInLogs must be enabled to monitor and log user sign-in activities in the environment. auditlogsNotCollected = The AuditLogs are currently not enabled. AuditLogs must be enabled to capture and log all significant audit events within the environment. -noAlertRules = No alert rules were found for either SignInLogs or AuditLogs. Please ensure that alert rules are created and configured to monitor these logs for suspicious activities. +noAlertRules = No alert rules were found for SignInLogs or AuditLogs. Please ensure that alert rules are created and configured to monitor these logs for suspicious activities. noActionGroupsForBGaccts = No action groups were identified for Break Glass account sign-in activities. Action groups must be configured to receive alerts for Break Glass account sign-in attempts. -noActionGroupsForAuditLogs = No action groups were found for AuditLogs. Action groups must be created to receive alerts for important auditable events. +noActionGroupsForAuditLogs = No action groups were found for Conditional Access Policy changes and updates. Action groups must be created to receive alerts for Conditional Access Policy changes and updates. noActionGroups = No action groups were configured for the resource group “{0}”. Ensure that action groups are set up to receive alerts for the corresponding resource group's monitored activities. compliantAlerts = The alerts for Break Glass accounts and audit logs are compliant. Appropriate action groups have been configured and are correctly receiving alerts for each monitored activity. +noAlertRuleforBGaccts = Create an alert for the Breakglass accounts using the SignInLogs. Missing one of the required alerts. +NoAlertRuleforCaps = Create an alert for the Conditional Access Policy changes and updates using the AuditLogs. Missing one of the required alerts. globalAdminAccntsSurplus = There must be five or fewer global administrator accounts. globalAdminAccntsMinimum = There are not enough Global Administrator Accounts. There must be at least two but no more than five Active Global Administrator Accounts. diff --git a/src/GuardRails-Localization/fr-CA/GR-ComplianceChecks-Msgs.psd1 b/src/GuardRails-Localization/fr-CA/GR-ComplianceChecks-Msgs.psd1 index 620dbe20..a31ccc86 100644 --- a/src/GuardRails-Localization/fr-CA/GR-ComplianceChecks-Msgs.psd1 +++ b/src/GuardRails-Localization/fr-CA/GR-ComplianceChecks-Msgs.psd1 @@ -36,9 +36,12 @@ signInlogsNotCollected = Les journaux de connexion « SignInLogs » ne sont actu auditlogsNotCollected = Les journaux d'audit « AuditLogs » ne sont actuellement pas activés. Les « AuditLogs » doivent être activés pour capturer et enregistrer tous les événements d'audit significatifs dans l'environnement. noAlertRules = Aucune règle d'alerte n'a été trouvée pour les journaux de connexion « SignInLogs » ou les journaux d'audit « AuditLogs ». Assurez-vous que des règles d'alerte sont créées et configurées pour surveiller ces journaux à la recherche d'activités suspectes. noActionGroupsForBGaccts = Aucun groupe d'action n'a été identifié pour les activités de connexion au compte de bris de verre. Les groupes d'action doivent être configurés pour recevoir des alertes en cas de tentatives de connexion au compte de bris de verre. -noActionGroupsForAuditLogs = Aucun groupe d'action n'a été trouvé pour les journaux d'audit « AuditLogs ». Des groupes d'action doivent être créés pour recevoir des alertes pour les événements auditables importants. +noActionGroupsForAuditLogs = Aucun groupe d'action n'a été trouvé pour les modifications et les mises à jour de la politique d'accès conditionnel. Des groupes d'action doivent être créés pour recevoir des alertes pour les modifications et les mises à jour de la politique d'accès conditionnel. +has context menu noActionGroups = Aucun groupe d'action n'a été configuré pour le groupe de ressources « {0} ». Assurez-vous que les groupes d'action sont configurés pour recevoir des alertes pour les activités surveillées du groupe de ressources correspondant. compliantAlerts = Les alertes pour les comptes de bris de verre et les journaux d'audit « AuditLogs » sont conformes. Les groupes d'action appropriés ont été configurés et reçoivent correctement des alertes pour chaque activité surveillée. +noAlertRuleforBGaccts = Créez une alerte pour les comptes de bris de verre en utilisant « SignInLogs ». Il manque une des alertes requises. +noAlertRuleforCaps = Créez une alerte pour les modifications et les mises à jour de la politique d'accès conditionnel en utilisant « AuditLogs ». Il manque une des alertes requises. allCloudUserAccountsMFACheck = Tous les comptes d'utilisateurs infonuagiques stratégie d'accès conditionnel AMF allUserAccountsMFACheck = Vérification de l'AMF de tous les comptes d'utilisateurs infonuagiques