From 47b124210065c235341459506c7829922ac55ee1 Mon Sep 17 00:00:00 2001 From: Dmitry Vorontsov Date: Mon, 28 Jul 2025 16:36:34 +0100 Subject: [PATCH 1/4] Add Netwrix Auditor v10.8 documentation MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Create complete v10.8 documentation based on v10.7 - Add What's New section with new features and enhancements - Add Azure Files configuration and monitoring plan documentation - Update Exchange Online configuration for owner mailbox access monitoring - Configure v10.8 as latest version in product configuration New Features in v10.8: - Azure Files Activity Auditing with comprehensive configuration guide - Exchange Online Owner Mailbox Access Monitoring - Microsoft Copilot Add-on - Azure SQL Add-on - Enhanced search capabilities - New user account attributes - Platform support enhancements 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude --- .claude/settings.local.json | 18 + .../10.8/accessreviews/_category_.json | 10 + .../10.8/accessreviews/accessreviews.md | 156 ++++++ .../10.8/accessreviews/admin/_category_.json | 10 + .../admin/additionalconfig/_category_.json | 10 + .../admin/additionalconfig/emailtemplates.md | 79 +++ .../admin/additionalconfig/overview.md | 13 + .../additionalconfig/timeoutparameter.md | 32 ++ .../admin/configuration/_category_.json | 10 + .../admin/configuration/activedirectory.md | 51 ++ .../admin/configuration/consoleaccess.md | 145 +++++ .../admin/configuration/database.md | 55 ++ .../admin/configuration/diagnostics.md | 32 ++ .../admin/configuration/notifications.md | 122 +++++ .../admin/configuration/overview.md | 22 + .../10.8/accessreviews/admin/firstlaunch.md | 38 ++ .../auditor/10.8/accessreviews/admin/login.md | 90 ++++ .../admin/navigate/_category_.json | 10 + .../accessreviews/admin/navigate/datagrid.md | 77 +++ .../accessreviews/admin/navigate/editnotes.md | 20 + .../accessreviews/admin/navigate/navigate.md | 64 +++ .../10.8/accessreviews/admin/overview.md | 18 + .../admin/troubleshooting/_category_.json | 10 + .../troubleshooting/credentialpasswords.md | 56 ++ .../admin/troubleshooting/loglevel.md | 37 ++ .../admin/troubleshooting/overview.md | 39 ++ .../admin/troubleshooting/serviceaccount.md | 48 ++ .../entitlementreviews/_category_.json | 10 + .../approvalprocess/_category_.json | 10 + .../approvalprocess/approvalprocess.md | 78 +++ .../approvalprocess/removechanges.md | 18 + .../entitlementreviews/create/_category_.json | 10 + .../entitlementreviews/create/create.md | 88 +++ .../create/reviewinstances.md | 21 + .../interface/_category_.json | 10 + .../interface/deletereview.md | 39 ++ .../entitlementreviews/interface/interface.md | 132 +++++ .../interface/renamereview.md | 20 + .../interface/selectedresources.md | 22 + .../interface/sendreminders.md | 20 + .../interface/stopreview.md | 18 + .../interface/viewresponses.md | 46 ++ .../entitlementreviews/overview.md | 82 +++ .../installation/_category_.json | 10 + .../accessreviewsconfiguration.md | 56 ++ .../accessreviews/installation/install.md | 79 +++ .../accessreviews/installation/overview.md | 66 +++ .../10.8/accessreviews/installation/secure.md | 81 +++ .../accessreviews/installation/upgrade.md | 72 +++ .../owneroverview/_category_.json | 10 + .../owneroverview/confirmationrequest.md | 42 ++ .../owneroverview/owneroverview.md | 25 + .../pendingreviews/_category_.json | 10 + .../owneroverview/pendingreviews/access.md | 52 ++ .../pendingreviews/groupmembership.md | 15 + .../pendingreviews/membership.md | 47 ++ .../pendingreviews/pendingreviews.md | 89 ++++ .../owneroverview/reviewhistory.md | 46 ++ .../resourceowners/_category_.json | 10 + .../confirmation/_category_.json | 10 + .../resourceowners/confirmation/confirm.md | 48 ++ .../confirmation/confirmation.md | 34 ++ .../resourceowners/interface/_category_.json | 10 + .../resourceowners/interface/add.md | 80 +++ .../resourceowners/interface/addowner.md | 18 + .../interface/confirmremoval.md | 23 + .../resourceowners/interface/interface.md | 64 +++ .../resourceowners/interface/update.md | 67 +++ .../accessreviews/resourceowners/overview.md | 94 ++++ .../accountlockoutexaminer/_category_.json | 10 + .../10.8/accountlockoutexaminer/configure.md | 157 ++++++ .../10.8/accountlockoutexaminer/overview.md | 70 +++ .../10.8/accountlockoutexaminer/usage.md | 61 +++ docs/auditor/10.8/addon/_category_.json | 10 + .../10.8/addon/alienvaultusm/_category_.json | 10 + .../10.8/addon/alienvaultusm/automate.md | 35 ++ .../10.8/addon/alienvaultusm/collecteddata.md | 19 + .../10.8/addon/alienvaultusm/deployment.md | 25 + .../alienvaultusm/integrationeventlog.md | 40 ++ .../10.8/addon/alienvaultusm/overview.md | 50 ++ .../10.8/addon/alienvaultusm/parameters.md | 43 ++ .../10.8/addon/alienvaultusm/powershell.md | 65 +++ .../addon/amazonwebservices/_category_.json | 10 + .../10.8/addon/amazonwebservices/automate.md | 35 ++ .../addon/amazonwebservices/collecteddata.md | 18 + .../addon/amazonwebservices/deployment.md | 25 + .../10.8/addon/amazonwebservices/overview.md | 53 ++ .../addon/amazonwebservices/parameters.md | 49 ++ .../addon/amazonwebservices/powershell.md | 34 ++ .../10.8/addon/arcsight/_category_.json | 10 + docs/auditor/10.8/addon/arcsight/automate.md | 37 ++ .../10.8/addon/arcsight/collecteddata.md | 25 + .../auditor/10.8/addon/arcsight/deployment.md | 25 + docs/auditor/10.8/addon/arcsight/overview.md | 54 ++ .../auditor/10.8/addon/arcsight/parameters.md | 26 + .../auditor/10.8/addon/arcsight/powershell.md | 31 ++ .../10.8/addon/azurefiles/_category_.json | 10 + .../10.8/addon/azurefiles/collecteddata.md | 31 ++ .../10.8/addon/azurefiles/deployment.md | 91 ++++ .../auditor/10.8/addon/azurefiles/overview.md | 56 ++ .../10.8/addon/connectwise/_category_.json | 10 + .../10.8/addon/connectwise/configure.md | 85 +++ .../connectionticketingsettings.md | 112 ++++ .../10.8/addon/connectwise/deployment.md | 44 ++ docs/auditor/10.8/addon/connectwise/msp.md | 27 + .../addon/connectwise/operationalsettings.md | 48 ++ .../10.8/addon/connectwise/overview.md | 81 +++ .../10.8/addon/copilot/_category_.json | 10 + .../10.8/addon/copilot/collecteddata.md | 25 + docs/auditor/10.8/addon/copilot/deployment.md | 50 ++ docs/auditor/10.8/addon/copilot/overview.md | 51 ++ docs/auditor/10.8/addon/ctera/_category_.json | 10 + .../auditor/10.8/addon/ctera/collecteddata.md | 57 ++ docs/auditor/10.8/addon/ctera/install.md | 24 + docs/auditor/10.8/addon/ctera/overview.md | 63 +++ docs/auditor/10.8/addon/ctera/parameters.md | 30 ++ .../10.8/addon/cyberark/_category_.json | 10 + .../10.8/addon/cyberark/collecteddata.md | 32 ++ .../auditor/10.8/addon/cyberark/deployment.md | 126 +++++ .../10.8/addon/cyberark/monitoredevents.md | 24 + docs/auditor/10.8/addon/cyberark/overview.md | 114 ++++ .../auditor/10.8/addon/cyberark/parameters.md | 61 +++ .../10.8/addon/cyberark/troubleshooting.md | 24 + .../auditor/10.8/addon/hyperv/_category_.json | 10 + .../10.8/addon/hyperv/collecteddata.md | 26 + docs/auditor/10.8/addon/hyperv/deployment.md | 100 ++++ docs/auditor/10.8/addon/hyperv/install.md | 68 +++ .../10.8/addon/hyperv/monitoredevents.md | 19 + docs/auditor/10.8/addon/hyperv/overview.md | 125 +++++ docs/auditor/10.8/addon/hyperv/parameters.md | 32 ++ .../10.8/addon/hyperv/troubleshooting.md | 79 +++ .../10.8/addon/ibmqradar/_category_.json | 10 + docs/auditor/10.8/addon/ibmqradar/automate.md | 35 ++ .../10.8/addon/ibmqradar/collecteddata.md | 21 + .../10.8/addon/ibmqradar/deployment.md | 25 + .../addon/ibmqradar/integrationeventlog.md | 40 ++ docs/auditor/10.8/addon/ibmqradar/overview.md | 50 ++ .../10.8/addon/ibmqradar/parameters.md | 43 ++ .../10.8/addon/ibmqradar/powershell.md | 66 +++ .../10.8/addon/intelsecurity/_category_.json | 10 + .../10.8/addon/intelsecurity/automate.md | 35 ++ .../10.8/addon/intelsecurity/collecteddata.md | 21 + .../10.8/addon/intelsecurity/deployment.md | 25 + .../intelsecurity/integrationeventlog.md | 40 ++ .../10.8/addon/intelsecurity/overview.md | 50 ++ .../10.8/addon/intelsecurity/parameters.md | 43 ++ .../10.8/addon/intelsecurity/powershell.md | 66 +++ docs/auditor/10.8/addon/linux/_category_.json | 10 + .../auditor/10.8/addon/linux/collecteddata.md | 21 + docs/auditor/10.8/addon/linux/install.md | 24 + docs/auditor/10.8/addon/linux/overview.md | 43 ++ docs/auditor/10.8/addon/linux/parameters.md | 30 ++ .../10.8/addon/logrhythm/_category_.json | 10 + docs/auditor/10.8/addon/logrhythm/automate.md | 33 ++ .../10.8/addon/logrhythm/collecteddata.md | 21 + .../10.8/addon/logrhythm/deployment.md | 25 + .../addon/logrhythm/integrationeventlog.md | 40 ++ docs/auditor/10.8/addon/logrhythm/overview.md | 50 ++ .../10.8/addon/logrhythm/parameters.md | 43 ++ .../10.8/addon/logrhythm/powershell.md | 66 +++ .../auditor/10.8/addon/nasuni/_category_.json | 10 + .../10.8/addon/nasuni/collecteddata.md | 32 ++ docs/auditor/10.8/addon/nasuni/install.md | 24 + docs/auditor/10.8/addon/nasuni/overview.md | 81 +++ docs/auditor/10.8/addon/nasuni/parameters.md | 30 ++ .../10.8/addon/nutanixahv/_category_.json | 10 + .../10.8/addon/nutanixahv/collecteddata.md | 33 ++ .../10.8/addon/nutanixahv/deployment.md | 49 ++ docs/auditor/10.8/addon/nutanixahv/install.md | 203 +++++++ .../10.8/addon/nutanixahv/monitoredevents.md | 34 ++ .../auditor/10.8/addon/nutanixahv/overview.md | 139 +++++ .../10.8/addon/nutanixahv/troubleshooting.md | 36 ++ docs/auditor/10.8/addon/okta/_category_.json | 10 + docs/auditor/10.8/addon/okta/collecteddata.md | 32 ++ docs/auditor/10.8/addon/okta/deployment.md | 23 + docs/auditor/10.8/addon/okta/overview.md | 56 ++ docs/auditor/10.8/addon/overview.md | 81 +++ .../addon/privilegeduserlinux/_category_.json | 10 + .../privilegeduserlinux/collecteddata.md | 16 + .../10.8/addon/privilegeduserlinux/install.md | 24 + .../addon/privilegeduserlinux/overview.md | 41 ++ .../addon/privilegeduserlinux/parameters.md | 30 ++ .../auditor/10.8/addon/qumulo/_category_.json | 10 + .../10.8/addon/qumulo/collecteddata.md | 27 + docs/auditor/10.8/addon/qumulo/deployment.md | 24 + .../10.8/addon/qumulo/monitoringscope.md | 34 ++ docs/auditor/10.8/addon/qumulo/overview.md | 122 +++++ docs/auditor/10.8/addon/qumulo/parameters.md | 63 +++ .../10.8/addon/qumulo/troubleshooting.md | 26 + .../auditor/10.8/addon/radius/_category_.json | 10 + docs/auditor/10.8/addon/radius/automate.md | 36 ++ .../10.8/addon/radius/collecteddata.md | 21 + .../auditor/10.8/addon/radius/customreport.md | 32 ++ docs/auditor/10.8/addon/radius/deployment.md | 27 + docs/auditor/10.8/addon/radius/overview.md | 82 +++ docs/auditor/10.8/addon/radius/parameters.md | 25 + docs/auditor/10.8/addon/radius/powershell.md | 39 ++ .../10.8/addon/radius/troubleshooting.md | 12 + .../10.8/addon/servicenow/_category_.json | 10 + docs/auditor/10.8/addon/servicenow/alerts.md | 42 ++ .../10.8/addon/servicenow/deployment.md | 56 ++ docs/auditor/10.8/addon/servicenow/install.md | 20 + .../auditor/10.8/addon/servicenow/overview.md | 42 ++ .../10.8/addon/servicenow/parameters.md | 103 ++++ docs/auditor/10.8/addon/siem/_category_.json | 10 + .../10.8/addon/siem/activityrecords.md | 112 ++++ docs/auditor/10.8/addon/siem/collecteddata.md | 21 + docs/auditor/10.8/addon/siem/configure.md | 47 ++ docs/auditor/10.8/addon/siem/deployment.md | 38 ++ .../10.8/addon/siem/integrationeventlog.md | 40 ++ docs/auditor/10.8/addon/siem/overview.md | 89 ++++ .../10.8/addon/siemcefexport/_category_.json | 10 + .../10.8/addon/siemcefexport/automate.md | 35 ++ .../10.8/addon/siemcefexport/collecteddata.md | 18 + .../10.8/addon/siemcefexport/deployment.md | 25 + .../10.8/addon/siemcefexport/overview.md | 50 ++ .../10.8/addon/siemcefexport/parameters.md | 26 + .../10.8/addon/siemcefexport/powershell.md | 40 ++ .../addon/siemeventlogexport/_category_.json | 10 + .../10.8/addon/siemeventlogexport/automate.md | 35 ++ .../addon/siemeventlogexport/collecteddata.md | 19 + .../addon/siemeventlogexport/deployment.md | 25 + .../10.8/addon/siemeventlogexport/overview.md | 47 ++ .../addon/siemeventlogexport/parameters.md | 23 + .../addon/siemeventlogexport/powershell.md | 40 ++ .../10.8/addon/solarwinds/_category_.json | 10 + .../auditor/10.8/addon/solarwinds/automate.md | 35 ++ .../10.8/addon/solarwinds/collecteddata.md | 21 + .../10.8/addon/solarwinds/deployment.md | 25 + .../addon/solarwinds/integrationeventlog.md | 40 ++ .../auditor/10.8/addon/solarwinds/overview.md | 50 ++ .../10.8/addon/solarwinds/parameters.md | 22 + .../10.8/addon/solarwinds/powershell.md | 66 +++ .../auditor/10.8/addon/splunk/_category_.json | 10 + .../10.8/addon/splunk/collecteddata.md | 88 +++ .../auditor/10.8/addon/splunk/datamodelmap.md | 29 + docs/auditor/10.8/addon/splunk/deployment.md | 190 +++++++ docs/auditor/10.8/addon/splunk/overview.md | 122 +++++ .../10.8/addon/splunk/troubleshooting.md | 38 ++ docs/auditor/10.8/admin/_category_.json | 10 + .../10.8/admin/alertsettings/_category_.json | 10 + .../alertsettings/create/_category_.json | 10 + .../10.8/admin/alertsettings/create/create.md | 39 ++ .../alertsettings/create/createeventlog.md | 59 +++ .../create/createhealthstatus.md | 60 +++ .../create/createmailboxaccess.md | 154 ++++++ .../10.8/admin/alertsettings/dashboard.md | 53 ++ .../10.8/admin/alertsettings/manage.md | 25 + .../10.8/admin/alertsettings/overview.md | 40 ++ .../admin/alertsettings/responseaction.md | 150 ++++++ .../admin/behavioranomalies/_category_.json | 10 + .../10.8/admin/behavioranomalies/dashboard.md | 38 ++ .../10.8/admin/behavioranomalies/overview.md | 50 ++ .../10.8/admin/behavioranomalies/tips.md | 35 ++ .../admin/behavioranomalies/userprofile.md | 82 +++ docs/auditor/10.8/admin/compliancemappings.md | 16 + .../10.8/admin/healthstatus/_category_.json | 10 + .../healthstatus/dashboard/_category_.json | 10 + .../dashboard/activityrecordstatistics.md | 26 + .../dashboard/databasestatistics.md | 62 +++ .../admin/healthstatus/dashboard/healthlog.md | 92 ++++ .../dashboard/monitoringoverview.md | 47 ++ .../admin/healthstatus/dashboard/overview.md | 46 ++ .../healthstatus/networktrafficcompression.md | 43 ++ .../10.8/admin/healthstatus/overview.md | 15 + .../10.8/admin/healthstatus/selfaudit.md | 70 +++ .../10.8/admin/healthstatus/summaryemail.md | 24 + .../admin/healthstatus/troubleshooting.md | 39 ++ .../admin/monitoringplans/_category_.json | 10 + .../activedirectory/_category_.json | 10 + .../activedirectory/overview.md | 154 ++++++ .../monitoringplans/activedirectory/scope.md | 55 ++ .../monitoringplans/activitysummaryemail.md | 41 ++ .../10.8/admin/monitoringplans/adfs.md | 46 ++ .../azurefiles/_category_.json | 4 + .../monitoringplans/azurefiles/overview.md | 274 ++++++++++ .../admin/monitoringplans/azurefiles/scope.md | 500 ++++++++++++++++++ .../10.8/admin/monitoringplans/create.md | 183 +++++++ .../admin/monitoringplans/dataaccounts.md | 83 +++ .../10.8/admin/monitoringplans/datasources.md | 149 ++++++ .../10.8/admin/monitoringplans/delegation.md | 183 +++++++ .../monitoringplans/exchange/_category_.json | 10 + .../monitoringplans/exchange/overview.md | 47 ++ .../admin/monitoringplans/exchange/scope.md | 63 +++ .../exchangeonline/_category_.json | 10 + .../exchangeonline/overview.md | 122 +++++ .../monitoringplans/exchangeonline/scope.md | 28 + .../fileservers/_category_.json | 10 + .../monitoringplans/fileservers/overview.md | 476 +++++++++++++++++ .../monitoringplans/fileservers/scope.md | 117 ++++ .../fileservers/windowsfileserver.md | 223 ++++++++ .../10.8/admin/monitoringplans/finetune.md | 38 ++ .../grouppolicy/_category_.json | 10 + .../monitoringplans/grouppolicy/overview.md | 85 +++ .../monitoringplans/grouppolicy/scope.md | 28 + .../logonactivity/_category_.json | 10 + .../monitoringplans/logonactivity/overview.md | 87 +++ .../monitoringplans/logonactivity/scope.md | 43 ++ .../microsoftentraid/_category_.json | 10 + .../microsoftentraid/overview.md | 165 ++++++ .../monitoringplans/microsoftentraid/scope.md | 31 ++ .../10.8/admin/monitoringplans/msteams.md | 99 ++++ .../admin/monitoringplans/networkdevices.md | 50 ++ .../monitoringplans/oracle/_category_.json | 10 + .../admin/monitoringplans/oracle/overview.md | 93 ++++ .../admin/monitoringplans/oracle/scope.md | 23 + .../10.8/admin/monitoringplans/overview.md | 83 +++ .../10.8/admin/monitoringplans/overview_1.md | 121 +++++ .../sharepoint/_category_.json | 10 + .../monitoringplans/sharepoint/overview.md | 59 +++ .../admin/monitoringplans/sharepoint/scope.md | 35 ++ .../sharepointonline/_category_.json | 10 + .../sharepointonline/overview.md | 108 ++++ .../monitoringplans/sharepointonline/scope.md | 33 ++ .../monitoringplans/sqlserver/_category_.json | 10 + .../admin/monitoringplans/sqlserver/items.md | 63 +++ .../monitoringplans/sqlserver/overview.md | 86 +++ .../admin/monitoringplans/sqlserver/scope.md | 32 ++ .../monitoringplans/vmware/_category_.json | 10 + .../admin/monitoringplans/vmware/overview.md | 97 ++++ .../admin/monitoringplans/vmware/scope.md | 27 + .../monitoringplans/windows/_category_.json | 10 + .../admin/monitoringplans/windows/overview.md | 119 +++++ .../admin/monitoringplans/windows/scope.md | 29 + .../10.8/admin/navigation/_category_.json | 10 + .../admin/navigation/customizeexamples.md | 79 +++ .../admin/navigation/customizefavorite.md | 46 ++ .../10.8/admin/navigation/customizehome.md | 76 +++ .../auditor/10.8/admin/navigation/overview.md | 99 ++++ .../10.8/admin/navigation/recommendations.md | 123 +++++ docs/auditor/10.8/admin/overview.md | 31 ++ .../10.8/admin/reports/_category_.json | 10 + docs/auditor/10.8/admin/reports/custom.md | 66 +++ docs/auditor/10.8/admin/reports/overview.md | 28 + .../10.8/admin/reports/reviewstatus.md | 45 ++ .../10.8/admin/reports/types/_category_.json | 10 + .../10.8/admin/reports/types/activity.md | 42 ++ .../10.8/admin/reports/types/compliance.md | 33 ++ .../types/datadiscoveryclassification.md | 78 +++ .../10.8/admin/reports/types/enterprise.md | 63 +++ .../admin/reports/types/organizationlevel.md | 31 ++ .../10.8/admin/reports/types/overview.md | 53 ++ .../reports/types/stateintime/_category_.json | 10 + .../types/stateintime/activedirectory.md | 154 ++++++ .../reports/types/stateintime/fileservers.md | 33 ++ .../types/stateintime/microsoftentraid.md | 93 ++++ .../reports/types/stateintime/overview.md | 79 +++ .../reports/types/stateintime/sqlroles.md | 76 +++ .../sqlserveroverview/_category_.json | 10 + .../sqlaccountpermissions.md | 105 ++++ .../sqlserveroverview/sqldatabases.md | 70 +++ .../sqlserveroverview/sqlmeansgranted.md | 102 ++++ .../sqlserveroverview/sqlobjectpermissions.md | 111 ++++ .../sqlserveroverview/sqlserveroverview.md | 21 + .../admin/reports/types/stateintime/vmware.md | 126 +++++ .../10.8/admin/reports/types/userbehavior.md | 38 ++ docs/auditor/10.8/admin/reports/video.md | 32 ++ docs/auditor/10.8/admin/reports/view.md | 85 +++ .../10.8/admin/riskassessment/_category_.json | 10 + .../10.8/admin/riskassessment/dashboard.md | 71 +++ .../10.8/admin/riskassessment/levels.md | 88 +++ .../10.8/admin/riskassessment/overview.md | 95 ++++ .../auditor/10.8/admin/search/_category_.json | 10 + .../10.8/admin/search/filteradvanced.md | 79 +++ .../auditor/10.8/admin/search/filtersimple.md | 62 +++ docs/auditor/10.8/admin/search/overview.md | 168 ++++++ .../10.8/admin/settings/_category_.json | 10 + docs/auditor/10.8/admin/settings/about.md | 16 + .../10.8/admin/settings/auditdatabase.md | 84 +++ .../10.8/admin/settings/custombrand.md | 115 ++++ docs/auditor/10.8/admin/settings/general.md | 20 + .../10.8/admin/settings/integrations.md | 30 ++ .../10.8/admin/settings/investigations.md | 45 ++ docs/auditor/10.8/admin/settings/licenses.md | 85 +++ .../10.8/admin/settings/longtermarchive.md | 37 ++ .../10.8/admin/settings/notifications.md | 156 ++++++ docs/auditor/10.8/admin/settings/overview.md | 23 + .../10.8/admin/settings/privilegesecure.md | 123 +++++ .../admin/settings/sensitivedatadiscovery.md | 186 +++++++ .../10.8/admin/subscriptions/_category_.json | 10 + .../10.8/admin/subscriptions/create.md | 36 ++ .../10.8/admin/subscriptions/manage.md | 20 + .../10.8/admin/subscriptions/overview.md | 66 +++ docs/auditor/10.8/api/_category_.json | 10 + .../10.8/api/activityrecordreference.md | 35 ++ docs/auditor/10.8/api/compatibility.md | 18 + docs/auditor/10.8/api/endpoints.md | 46 ++ docs/auditor/10.8/api/errordetails.md | 53 ++ .../10.8/api/filterreference/_category_.json | 10 + .../api/filterreference/filteroperators.md | 20 + .../api/filterreference/filterreference.md | 48 ++ .../10.8/api/filterreference/filters.md | 29 + docs/auditor/10.8/api/overview.md | 59 +++ docs/auditor/10.8/api/ports.md | 42 ++ .../auditor/10.8/api/postdata/_category_.json | 10 + .../10.8/api/postdata/activityrecords.md | 151 ++++++ .../10.8/api/postdata/continuationmark.md | 97 ++++ docs/auditor/10.8/api/postdata/overview.md | 39 ++ .../10.8/api/postdata/searchparameters.md | 113 ++++ docs/auditor/10.8/api/prerequisites.md | 43 ++ docs/auditor/10.8/api/responsestatuscodes.md | 22 + .../10.8/api/retrieveactivityrecords.md | 142 +++++ .../auditor/10.8/api/searchactivityrecords.md | 199 +++++++ docs/auditor/10.8/api/security.md | 45 ++ docs/auditor/10.8/api/writeactivityrecords.md | 152 ++++++ .../10.8/configuration/_category_.json | 10 + .../activedirectory/_category_.json | 10 + .../activedirectory/additional.md | 241 +++++++++ .../activedirectory/advancedpolicy.md | 67 +++ .../activedirectory/automatic.md | 42 ++ .../activedirectory/basicpolicy.md | 38 ++ .../configuration/activedirectory/manual.md | 65 +++ .../activedirectory/objectlevel.md | 88 +++ .../configuration/activedirectory/overview.md | 163 ++++++ .../activedirectory/permissions.md | 272 ++++++++++ .../configuration/activedirectory/ports.md | 30 ++ .../activedirectory/registrykey.md | 25 + .../activedirectory/securitylog.md | 47 ++ .../activedirectory/tombstone.md | 45 ++ .../_category_.json | 10 + .../overview.md | 149 ++++++ .../permissions.md | 18 + .../activedirectoryfederatedservices/ports.md | 29 + .../configuration/azurefiles/_category_.json | 4 + .../10.8/configuration/azurefiles/overview.md | 181 +++++++ .../configuration/azurefiles/permissions.md | 273 ++++++++++ .../10.8/configuration/azurefiles/ports.md | 346 ++++++++++++ .../configuration/exchange/_category_.json | 10 + .../10.8/configuration/exchange/auditlog.md | 55 ++ .../configuration/exchange/mailboxacccess.md | 50 ++ .../10.8/configuration/exchange/overview.md | 138 +++++ .../configuration/exchange/permissions.md | 166 ++++++ .../exchange/permissionsregistrykeys.md | 77 +++ .../10.8/configuration/exchange/ports.md | 26 + .../configuration/exchange/registrykey.md | 25 + .../configuration/fileservers/_category_.json | 10 + .../delldatastorage/_category_.json | 10 + .../fileservers/delldatastorage/cifss.md | 109 ++++ .../delldatastorage/objectaccess.md | 56 ++ .../fileservers/delldatastorage/overview.md | 91 ++++ .../delldatastorage/permissions.md | 18 + .../fileservers/delldatastorage/ports.md | 24 + .../delldatastorage/securityeventlog.md | 25 + .../fileservers/dellisilon/_category_.json | 10 + .../fileservers/dellisilon/compliance.md | 122 +++++ .../fileservers/dellisilon/normal.md | 152 ++++++ .../fileservers/dellisilon/overview.md | 82 +++ .../fileservers/dellisilon/permissions.md | 64 +++ .../fileservers/dellisilon/ports.md | 18 + .../fileservers/netappcmode/_category_.json | 10 + .../fileservers/netappcmode/cifs.md | 108 ++++ .../netappcmode/eventcategories.md | 124 +++++ .../fileservers/netappcmode/overview.md | 156 ++++++ .../fileservers/netappcmode/permissions.md | 147 +++++ .../fileservers/netappcmode/ports.md | 49 ++ .../fileservers/netappcmode/servicepolicy.md | 111 ++++ .../fileservers/netappcmode/webaccess.md | 108 ++++ .../fileservers/nutanix/_category_.json | 10 + .../fileservers/nutanix/notificationpolicy.md | 234 ++++++++ .../fileservers/nutanix/overview.md | 95 ++++ .../fileservers/nutanix/partnerserver.md | 103 ++++ .../fileservers/nutanix/permissions.md | 74 +++ .../fileservers/nutanix/ports.md | 54 ++ .../fileservers/nutanix/useraccount.md | 51 ++ .../configuration/fileservers/overview.md | 68 +++ .../fileservers/qumulo/_category_.json | 10 + .../fileservers/qumulo/configure.md | 28 + .../fileservers/qumulo/overview.md | 57 ++ .../fileservers/qumulo/permissions.md | 25 + .../configuration/fileservers/qumulo/ports.md | 21 + .../fileservers/synology/_category_.json | 10 + .../fileservers/synology/configure.md | 31 ++ .../fileservers/synology/overview.md | 58 ++ .../fileservers/synology/permissions.md | 25 + .../fileservers/synology/ports.md | 21 + .../fileservers/windows/_category_.json | 10 + .../fileservers/windows/advancedpolicy.md | 53 ++ .../fileservers/windows/configuration.md | 60 +++ .../fileservers/windows/eventlog.md | 33 ++ .../fileservers/windows/localpolicy.md | 29 + .../fileservers/windows/objectlevel.md | 111 ++++ .../fileservers/windows/overview.md | 278 ++++++++++ .../fileservers/windows/permissions.md | 35 ++ .../fileservers/windows/ports.md | 66 +++ .../windows/remoteregistryservice.md | 26 + .../configuration/grouppolicy/_category_.json | 10 + .../configuration/grouppolicy/overview.md | 46 ++ .../configuration/grouppolicy/permissions.md | 176 ++++++ .../10.8/configuration/grouppolicy/ports.md | 29 + .../configuration/grouppolicy/registrykey.md | 28 + .../logonactivity/_category_.json | 10 + .../logonactivity/advancedpolicy.md | 68 +++ .../logonactivity/basicpolicy.md | 34 ++ .../configuration/logonactivity/overview.md | 78 +++ .../logonactivity/permissions.md | 63 +++ .../10.8/configuration/logonactivity/ports.md | 51 ++ .../logonactivity/securityeventlog.md | 36 ++ .../microsoft365/_category_.json | 10 + .../exchangeonline/_category_.json | 10 + .../exchangeonline/modernauth/_category_.json | 10 + .../exchangeonline/modernauth/manifest.md | 70 +++ .../exchangeonline/modernauth/manualconfig.md | 160 ++++++ .../exchangeonline/modernauth/modernauth.md | 179 +++++++ .../microsoft365/exchangeonline/overview.md | 155 ++++++ .../exchangeonline/permissions.md | 186 +++++++ .../microsoft365/exchangeonline/ports.md | 23 + .../microsoftentraid/_category_.json | 10 + .../microsoft365/microsoftentraid/overview.md | 119 +++++ .../permissions/_category_.json | 10 + .../microsoftentraid/permissions/basicauth.md | 100 ++++ .../permissions/modernauth/_category_.json | 10 + .../permissions/modernauth/manifest.md | 65 +++ .../permissions/modernauth/modernauth.md | 164 ++++++ .../permissions/permissions.md | 96 ++++ .../microsoft365/microsoftentraid/ports.md | 23 + .../configuration/microsoft365/overview.md | 14 + .../sharepointonline/_category_.json | 10 + .../microsoft365/sharepointonline/overview.md | 55 ++ .../permissions/_category_.json | 10 + .../sharepointonline/permissions/basicauth.md | 78 +++ .../permissions/modernauth/_category_.json | 10 + .../permissions/modernauth/manifest.md | 61 +++ .../permissions/modernauth/modernauth.md | 153 ++++++ .../permissions/permissions.md | 59 +++ .../microsoft365/sharepointonline/ports.md | 22 + .../microsoft365/teams/_category_.json | 10 + .../microsoft365/teams/overview.md | 52 ++ .../teams/permissions/_category_.json | 10 + .../teams/permissions/basicauth.md | 73 +++ .../permissions/modernauth/_category_.json | 10 + .../teams/permissions/modernauth/manifest.md | 73 +++ .../permissions/modernauth/modernauth.md | 173 ++++++ .../teams/permissions/permissions.md | 33 ++ .../configuration/microsoft365/teams/ports.md | 22 + .../networkdevices/_category_.json | 10 + .../configuration/networkdevices/ciscoasa.md | 103 ++++ .../configuration/networkdevices/ciscoios.md | 75 +++ .../networkdevices/ciscomerakidashboard.md | 82 +++ .../networkdevices/ciscomerakidevices.md | 54 ++ .../networkdevices/fortinetfortigate.md | 96 ++++ .../configuration/networkdevices/hpearuba.md | 93 ++++ .../configuration/networkdevices/juniper.md | 70 +++ .../configuration/networkdevices/overview.md | 26 + .../configuration/networkdevices/paloalto.md | 84 +++ .../networkdevices/permissions.md | 16 + .../configuration/networkdevices/ports.md | 22 + .../networkdevices/pulsesecure.md | 81 +++ .../configuration/networkdevices/sonicwall.md | 139 +++++ .../10.8/configuration/oracle/_category_.json | 10 + .../10.8/configuration/oracle/database.md | 196 +++++++ .../10.8/configuration/oracle/finegained.md | 30 ++ .../10.8/configuration/oracle/overview.md | 147 +++++ .../10.8/configuration/oracle/permissions.md | 95 ++++ .../10.8/configuration/oracle/ports.md | 24 + .../10.8/configuration/oracle/unified.md | 91 ++++ .../configuration/oracle/verifysettings.md | 21 + .../10.8/configuration/oracle/wallet.md | 152 ++++++ docs/auditor/10.8/configuration/overview.md | 39 ++ .../configuration/sharepoint/_category_.json | 10 + .../10.8/configuration/sharepoint/overview.md | 179 +++++++ .../configuration/sharepoint/permissions.md | 75 +++ .../10.8/configuration/sharepoint/ports.md | 24 + .../configuration/sqlserver/_category_.json | 10 + .../sqlserver/configuringtracelogging.md | 77 +++ .../10.8/configuration/sqlserver/overview.md | 95 ++++ .../configuration/sqlserver/permissions.md | 43 ++ .../10.8/configuration/sqlserver/ports.md | 24 + .../useractivity/_category_.json | 10 + .../useractivity/datacollection.md | 144 +++++ .../configuration/useractivity/overview.md | 113 ++++ .../10.8/configuration/useractivity/ports.md | 29 + .../useractivity/videorecordings.md | 125 +++++ .../10.8/configuration/vmware/_category_.json | 10 + .../10.8/configuration/vmware/overview.md | 81 +++ .../10.8/configuration/vmware/permissions.md | 31 ++ .../10.8/configuration/vmware/ports.md | 22 + .../windowsserver/_category_.json | 10 + .../windowsserver/advancedpolicy.md | 103 ++++ .../10.8/configuration/windowsserver/dhcp.md | 22 + .../configuration/windowsserver/eventlog.md | 118 +++++ .../10.8/configuration/windowsserver/iis.md | 25 + .../windowsserver/localpolicy.md | 48 ++ .../configuration/windowsserver/overview.md | 364 +++++++++++++ .../windowsserver/permissions.md | 91 ++++ .../windowsserver/persistenttimestamp.md | 38 ++ .../10.8/configuration/windowsserver/ports.md | 69 +++ .../windowsserver/registrykey.md | 35 ++ .../windowsserver/remoteregistry.md | 28 + .../windowsserver/removablestorage.md | 110 ++++ .../windowsserver/windowsregistry.md | 87 +++ docs/auditor/10.8/index.md | 47 ++ docs/auditor/10.8/install/_category_.json | 10 + docs/auditor/10.8/install/automatelogin.md | 42 ++ docs/auditor/10.8/install/firstlaunch.md | 37 ++ docs/auditor/10.8/install/overview.md | 87 +++ .../10.8/install/sharepointcoreservice.md | 39 ++ docs/auditor/10.8/install/silentmode.md | 31 ++ docs/auditor/10.8/install/uninstall.md | 161 ++++++ docs/auditor/10.8/install/upgrade.md | 140 +++++ .../10.8/install/useractivitycoreservice.md | 43 ++ docs/auditor/10.8/install/viagrouppolicy.md | 82 +++ .../install/virtualappliance/_category_.json | 10 + .../install/virtualappliance/configure.md | 60 +++ .../install/virtualappliance/importhyperv.md | 27 + .../install/virtualappliance/importvmware.md | 46 ++ .../10.8/install/virtualappliance/overview.md | 102 ++++ docs/auditor/10.8/overview/_category_.json | 10 + docs/auditor/10.8/overview/gettingstarted.md | 53 ++ docs/auditor/10.8/overview/producteditions.md | 75 +++ docs/auditor/10.8/overview/whatsnew.md | 65 +++ .../auditor/10.8/requirements/_category_.json | 10 + docs/auditor/10.8/requirements/console.md | 110 ++++ .../10.8/requirements/deploymentscenarios.md | 185 +++++++ docs/auditor/10.8/requirements/gmsa.md | 242 +++++++++ .../10.8/requirements/longtermarchive.md | 193 +++++++ docs/auditor/10.8/requirements/overview.md | 77 +++ docs/auditor/10.8/requirements/ports.md | 96 ++++ .../10.8/requirements/serviceaccount.md | 16 + docs/auditor/10.8/requirements/software.md | 139 +++++ docs/auditor/10.8/requirements/sqlserver.md | 296 +++++++++++ .../requirements/sqlserverreportingservice.md | 94 ++++ .../supporteddatasources/_category_.json | 10 + .../monitoredobjecttypes.md | 76 +++ .../supporteddatasources.md | 457 ++++++++++++++++ .../10.8/requirements/workingfolder.md | 23 + docs/auditor/10.8/tools/_category_.json | 10 + .../10.8/tools/auditconfigurationassistant.md | 139 +++++ .../tools/eventlogmanager/_category_.json | 10 + .../10.8/tools/eventlogmanager/eventlog.md | 25 + .../tools/eventlogmanager/eventlogmanager.md | 236 +++++++++ .../tools/eventlogmanager/windowseventlogs.md | 28 + .../auditor/10.8/tools/inactiveusertracker.md | 148 ++++++ docs/auditor/10.8/tools/objectrestoread.md | 98 ++++ docs/auditor/10.8/tools/overview.md | 15 + .../_category_.json | 10 + .../monitoringscope.md | 25 + .../passwordexpirationnotifier/overview.md | 117 ++++ .../tools/passwordexpirationnotifier/ports.md | 18 + docs/auditor/10.8/whats-new.md | 62 +++ sidebars/auditor/10.8.js | 8 + src/config/products.js | 10 +- 641 files changed, 38249 insertions(+), 2 deletions(-) create mode 100644 .claude/settings.local.json create mode 100644 docs/auditor/10.8/accessreviews/_category_.json create mode 100644 docs/auditor/10.8/accessreviews/accessreviews.md create mode 100644 docs/auditor/10.8/accessreviews/admin/_category_.json create mode 100644 docs/auditor/10.8/accessreviews/admin/additionalconfig/_category_.json create mode 100644 docs/auditor/10.8/accessreviews/admin/additionalconfig/emailtemplates.md create mode 100644 docs/auditor/10.8/accessreviews/admin/additionalconfig/overview.md create mode 100644 docs/auditor/10.8/accessreviews/admin/additionalconfig/timeoutparameter.md create mode 100644 docs/auditor/10.8/accessreviews/admin/configuration/_category_.json create mode 100644 docs/auditor/10.8/accessreviews/admin/configuration/activedirectory.md create mode 100644 docs/auditor/10.8/accessreviews/admin/configuration/consoleaccess.md create mode 100644 docs/auditor/10.8/accessreviews/admin/configuration/database.md create mode 100644 docs/auditor/10.8/accessreviews/admin/configuration/diagnostics.md create mode 100644 docs/auditor/10.8/accessreviews/admin/configuration/notifications.md create mode 100644 docs/auditor/10.8/accessreviews/admin/configuration/overview.md create mode 100644 docs/auditor/10.8/accessreviews/admin/firstlaunch.md create mode 100644 docs/auditor/10.8/accessreviews/admin/login.md create mode 100644 docs/auditor/10.8/accessreviews/admin/navigate/_category_.json create mode 100644 docs/auditor/10.8/accessreviews/admin/navigate/datagrid.md create mode 100644 docs/auditor/10.8/accessreviews/admin/navigate/editnotes.md create mode 100644 docs/auditor/10.8/accessreviews/admin/navigate/navigate.md create mode 100644 docs/auditor/10.8/accessreviews/admin/overview.md create mode 100644 docs/auditor/10.8/accessreviews/admin/troubleshooting/_category_.json create mode 100644 docs/auditor/10.8/accessreviews/admin/troubleshooting/credentialpasswords.md create mode 100644 docs/auditor/10.8/accessreviews/admin/troubleshooting/loglevel.md create mode 100644 docs/auditor/10.8/accessreviews/admin/troubleshooting/overview.md create mode 100644 docs/auditor/10.8/accessreviews/admin/troubleshooting/serviceaccount.md create mode 100644 docs/auditor/10.8/accessreviews/entitlementreviews/_category_.json create mode 100644 docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/_category_.json create mode 100644 docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/approvalprocess.md create mode 100644 docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/removechanges.md create mode 100644 docs/auditor/10.8/accessreviews/entitlementreviews/create/_category_.json create mode 100644 docs/auditor/10.8/accessreviews/entitlementreviews/create/create.md create mode 100644 docs/auditor/10.8/accessreviews/entitlementreviews/create/reviewinstances.md create mode 100644 docs/auditor/10.8/accessreviews/entitlementreviews/interface/_category_.json create mode 100644 docs/auditor/10.8/accessreviews/entitlementreviews/interface/deletereview.md create mode 100644 docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md create mode 100644 docs/auditor/10.8/accessreviews/entitlementreviews/interface/renamereview.md create mode 100644 docs/auditor/10.8/accessreviews/entitlementreviews/interface/selectedresources.md create mode 100644 docs/auditor/10.8/accessreviews/entitlementreviews/interface/sendreminders.md create mode 100644 docs/auditor/10.8/accessreviews/entitlementreviews/interface/stopreview.md create mode 100644 docs/auditor/10.8/accessreviews/entitlementreviews/interface/viewresponses.md create mode 100644 docs/auditor/10.8/accessreviews/entitlementreviews/overview.md create mode 100644 docs/auditor/10.8/accessreviews/installation/_category_.json create mode 100644 docs/auditor/10.8/accessreviews/installation/accessreviewsconfiguration.md create mode 100644 docs/auditor/10.8/accessreviews/installation/install.md create mode 100644 docs/auditor/10.8/accessreviews/installation/overview.md create mode 100644 docs/auditor/10.8/accessreviews/installation/secure.md create mode 100644 docs/auditor/10.8/accessreviews/installation/upgrade.md create mode 100644 docs/auditor/10.8/accessreviews/owneroverview/_category_.json create mode 100644 docs/auditor/10.8/accessreviews/owneroverview/confirmationrequest.md create mode 100644 docs/auditor/10.8/accessreviews/owneroverview/owneroverview.md create mode 100644 docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/_category_.json create mode 100644 docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/access.md create mode 100644 docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/groupmembership.md create mode 100644 docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/membership.md create mode 100644 docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/pendingreviews.md create mode 100644 docs/auditor/10.8/accessreviews/owneroverview/reviewhistory.md create mode 100644 docs/auditor/10.8/accessreviews/resourceowners/_category_.json create mode 100644 docs/auditor/10.8/accessreviews/resourceowners/confirmation/_category_.json create mode 100644 docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirm.md create mode 100644 docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirmation.md create mode 100644 docs/auditor/10.8/accessreviews/resourceowners/interface/_category_.json create mode 100644 docs/auditor/10.8/accessreviews/resourceowners/interface/add.md create mode 100644 docs/auditor/10.8/accessreviews/resourceowners/interface/addowner.md create mode 100644 docs/auditor/10.8/accessreviews/resourceowners/interface/confirmremoval.md create mode 100644 docs/auditor/10.8/accessreviews/resourceowners/interface/interface.md create mode 100644 docs/auditor/10.8/accessreviews/resourceowners/interface/update.md create mode 100644 docs/auditor/10.8/accessreviews/resourceowners/overview.md create mode 100644 docs/auditor/10.8/accountlockoutexaminer/_category_.json create mode 100644 docs/auditor/10.8/accountlockoutexaminer/configure.md create mode 100644 docs/auditor/10.8/accountlockoutexaminer/overview.md create mode 100644 docs/auditor/10.8/accountlockoutexaminer/usage.md create mode 100644 docs/auditor/10.8/addon/_category_.json create mode 100644 docs/auditor/10.8/addon/alienvaultusm/_category_.json create mode 100644 docs/auditor/10.8/addon/alienvaultusm/automate.md create mode 100644 docs/auditor/10.8/addon/alienvaultusm/collecteddata.md create mode 100644 docs/auditor/10.8/addon/alienvaultusm/deployment.md create mode 100644 docs/auditor/10.8/addon/alienvaultusm/integrationeventlog.md create mode 100644 docs/auditor/10.8/addon/alienvaultusm/overview.md create mode 100644 docs/auditor/10.8/addon/alienvaultusm/parameters.md create mode 100644 docs/auditor/10.8/addon/alienvaultusm/powershell.md create mode 100644 docs/auditor/10.8/addon/amazonwebservices/_category_.json create mode 100644 docs/auditor/10.8/addon/amazonwebservices/automate.md create mode 100644 docs/auditor/10.8/addon/amazonwebservices/collecteddata.md create mode 100644 docs/auditor/10.8/addon/amazonwebservices/deployment.md create mode 100644 docs/auditor/10.8/addon/amazonwebservices/overview.md create mode 100644 docs/auditor/10.8/addon/amazonwebservices/parameters.md create mode 100644 docs/auditor/10.8/addon/amazonwebservices/powershell.md create mode 100644 docs/auditor/10.8/addon/arcsight/_category_.json create mode 100644 docs/auditor/10.8/addon/arcsight/automate.md create mode 100644 docs/auditor/10.8/addon/arcsight/collecteddata.md create mode 100644 docs/auditor/10.8/addon/arcsight/deployment.md create mode 100644 docs/auditor/10.8/addon/arcsight/overview.md create mode 100644 docs/auditor/10.8/addon/arcsight/parameters.md create mode 100644 docs/auditor/10.8/addon/arcsight/powershell.md create mode 100644 docs/auditor/10.8/addon/azurefiles/_category_.json create mode 100644 docs/auditor/10.8/addon/azurefiles/collecteddata.md create mode 100644 docs/auditor/10.8/addon/azurefiles/deployment.md create mode 100644 docs/auditor/10.8/addon/azurefiles/overview.md create mode 100644 docs/auditor/10.8/addon/connectwise/_category_.json create mode 100644 docs/auditor/10.8/addon/connectwise/configure.md create mode 100644 docs/auditor/10.8/addon/connectwise/connectionticketingsettings.md create mode 100644 docs/auditor/10.8/addon/connectwise/deployment.md create mode 100644 docs/auditor/10.8/addon/connectwise/msp.md create mode 100644 docs/auditor/10.8/addon/connectwise/operationalsettings.md create mode 100644 docs/auditor/10.8/addon/connectwise/overview.md create mode 100644 docs/auditor/10.8/addon/copilot/_category_.json create mode 100644 docs/auditor/10.8/addon/copilot/collecteddata.md create mode 100644 docs/auditor/10.8/addon/copilot/deployment.md create mode 100644 docs/auditor/10.8/addon/copilot/overview.md create mode 100644 docs/auditor/10.8/addon/ctera/_category_.json create mode 100644 docs/auditor/10.8/addon/ctera/collecteddata.md create mode 100644 docs/auditor/10.8/addon/ctera/install.md create mode 100644 docs/auditor/10.8/addon/ctera/overview.md create mode 100644 docs/auditor/10.8/addon/ctera/parameters.md create mode 100644 docs/auditor/10.8/addon/cyberark/_category_.json create mode 100644 docs/auditor/10.8/addon/cyberark/collecteddata.md create mode 100644 docs/auditor/10.8/addon/cyberark/deployment.md create mode 100644 docs/auditor/10.8/addon/cyberark/monitoredevents.md create mode 100644 docs/auditor/10.8/addon/cyberark/overview.md create mode 100644 docs/auditor/10.8/addon/cyberark/parameters.md create mode 100644 docs/auditor/10.8/addon/cyberark/troubleshooting.md create mode 100644 docs/auditor/10.8/addon/hyperv/_category_.json create mode 100644 docs/auditor/10.8/addon/hyperv/collecteddata.md create mode 100644 docs/auditor/10.8/addon/hyperv/deployment.md create mode 100644 docs/auditor/10.8/addon/hyperv/install.md create mode 100644 docs/auditor/10.8/addon/hyperv/monitoredevents.md create mode 100644 docs/auditor/10.8/addon/hyperv/overview.md create mode 100644 docs/auditor/10.8/addon/hyperv/parameters.md create mode 100644 docs/auditor/10.8/addon/hyperv/troubleshooting.md create mode 100644 docs/auditor/10.8/addon/ibmqradar/_category_.json create mode 100644 docs/auditor/10.8/addon/ibmqradar/automate.md create mode 100644 docs/auditor/10.8/addon/ibmqradar/collecteddata.md create mode 100644 docs/auditor/10.8/addon/ibmqradar/deployment.md create mode 100644 docs/auditor/10.8/addon/ibmqradar/integrationeventlog.md create mode 100644 docs/auditor/10.8/addon/ibmqradar/overview.md create mode 100644 docs/auditor/10.8/addon/ibmqradar/parameters.md create mode 100644 docs/auditor/10.8/addon/ibmqradar/powershell.md create mode 100644 docs/auditor/10.8/addon/intelsecurity/_category_.json create mode 100644 docs/auditor/10.8/addon/intelsecurity/automate.md create mode 100644 docs/auditor/10.8/addon/intelsecurity/collecteddata.md create mode 100644 docs/auditor/10.8/addon/intelsecurity/deployment.md create mode 100644 docs/auditor/10.8/addon/intelsecurity/integrationeventlog.md create mode 100644 docs/auditor/10.8/addon/intelsecurity/overview.md create mode 100644 docs/auditor/10.8/addon/intelsecurity/parameters.md create mode 100644 docs/auditor/10.8/addon/intelsecurity/powershell.md create mode 100644 docs/auditor/10.8/addon/linux/_category_.json create mode 100644 docs/auditor/10.8/addon/linux/collecteddata.md create mode 100644 docs/auditor/10.8/addon/linux/install.md create mode 100644 docs/auditor/10.8/addon/linux/overview.md create mode 100644 docs/auditor/10.8/addon/linux/parameters.md create mode 100644 docs/auditor/10.8/addon/logrhythm/_category_.json create mode 100644 docs/auditor/10.8/addon/logrhythm/automate.md create mode 100644 docs/auditor/10.8/addon/logrhythm/collecteddata.md create mode 100644 docs/auditor/10.8/addon/logrhythm/deployment.md create mode 100644 docs/auditor/10.8/addon/logrhythm/integrationeventlog.md create mode 100644 docs/auditor/10.8/addon/logrhythm/overview.md create mode 100644 docs/auditor/10.8/addon/logrhythm/parameters.md create mode 100644 docs/auditor/10.8/addon/logrhythm/powershell.md create mode 100644 docs/auditor/10.8/addon/nasuni/_category_.json create mode 100644 docs/auditor/10.8/addon/nasuni/collecteddata.md create mode 100644 docs/auditor/10.8/addon/nasuni/install.md create mode 100644 docs/auditor/10.8/addon/nasuni/overview.md create mode 100644 docs/auditor/10.8/addon/nasuni/parameters.md create mode 100644 docs/auditor/10.8/addon/nutanixahv/_category_.json create mode 100644 docs/auditor/10.8/addon/nutanixahv/collecteddata.md create mode 100644 docs/auditor/10.8/addon/nutanixahv/deployment.md create mode 100644 docs/auditor/10.8/addon/nutanixahv/install.md create mode 100644 docs/auditor/10.8/addon/nutanixahv/monitoredevents.md create mode 100644 docs/auditor/10.8/addon/nutanixahv/overview.md create mode 100644 docs/auditor/10.8/addon/nutanixahv/troubleshooting.md create mode 100644 docs/auditor/10.8/addon/okta/_category_.json create mode 100644 docs/auditor/10.8/addon/okta/collecteddata.md create mode 100644 docs/auditor/10.8/addon/okta/deployment.md create mode 100644 docs/auditor/10.8/addon/okta/overview.md create mode 100644 docs/auditor/10.8/addon/overview.md create mode 100644 docs/auditor/10.8/addon/privilegeduserlinux/_category_.json create mode 100644 docs/auditor/10.8/addon/privilegeduserlinux/collecteddata.md create mode 100644 docs/auditor/10.8/addon/privilegeduserlinux/install.md create mode 100644 docs/auditor/10.8/addon/privilegeduserlinux/overview.md create mode 100644 docs/auditor/10.8/addon/privilegeduserlinux/parameters.md create mode 100644 docs/auditor/10.8/addon/qumulo/_category_.json create mode 100644 docs/auditor/10.8/addon/qumulo/collecteddata.md create mode 100644 docs/auditor/10.8/addon/qumulo/deployment.md create mode 100644 docs/auditor/10.8/addon/qumulo/monitoringscope.md create mode 100644 docs/auditor/10.8/addon/qumulo/overview.md create mode 100644 docs/auditor/10.8/addon/qumulo/parameters.md create mode 100644 docs/auditor/10.8/addon/qumulo/troubleshooting.md create mode 100644 docs/auditor/10.8/addon/radius/_category_.json create mode 100644 docs/auditor/10.8/addon/radius/automate.md create mode 100644 docs/auditor/10.8/addon/radius/collecteddata.md create mode 100644 docs/auditor/10.8/addon/radius/customreport.md create mode 100644 docs/auditor/10.8/addon/radius/deployment.md create mode 100644 docs/auditor/10.8/addon/radius/overview.md create mode 100644 docs/auditor/10.8/addon/radius/parameters.md create mode 100644 docs/auditor/10.8/addon/radius/powershell.md create mode 100644 docs/auditor/10.8/addon/radius/troubleshooting.md create mode 100644 docs/auditor/10.8/addon/servicenow/_category_.json create mode 100644 docs/auditor/10.8/addon/servicenow/alerts.md create mode 100644 docs/auditor/10.8/addon/servicenow/deployment.md create mode 100644 docs/auditor/10.8/addon/servicenow/install.md create mode 100644 docs/auditor/10.8/addon/servicenow/overview.md create mode 100644 docs/auditor/10.8/addon/servicenow/parameters.md create mode 100644 docs/auditor/10.8/addon/siem/_category_.json create mode 100644 docs/auditor/10.8/addon/siem/activityrecords.md create mode 100644 docs/auditor/10.8/addon/siem/collecteddata.md create mode 100644 docs/auditor/10.8/addon/siem/configure.md create mode 100644 docs/auditor/10.8/addon/siem/deployment.md create mode 100644 docs/auditor/10.8/addon/siem/integrationeventlog.md create mode 100644 docs/auditor/10.8/addon/siem/overview.md create mode 100644 docs/auditor/10.8/addon/siemcefexport/_category_.json create mode 100644 docs/auditor/10.8/addon/siemcefexport/automate.md create mode 100644 docs/auditor/10.8/addon/siemcefexport/collecteddata.md create mode 100644 docs/auditor/10.8/addon/siemcefexport/deployment.md create mode 100644 docs/auditor/10.8/addon/siemcefexport/overview.md create mode 100644 docs/auditor/10.8/addon/siemcefexport/parameters.md create mode 100644 docs/auditor/10.8/addon/siemcefexport/powershell.md create mode 100644 docs/auditor/10.8/addon/siemeventlogexport/_category_.json create mode 100644 docs/auditor/10.8/addon/siemeventlogexport/automate.md create mode 100644 docs/auditor/10.8/addon/siemeventlogexport/collecteddata.md create mode 100644 docs/auditor/10.8/addon/siemeventlogexport/deployment.md create mode 100644 docs/auditor/10.8/addon/siemeventlogexport/overview.md create mode 100644 docs/auditor/10.8/addon/siemeventlogexport/parameters.md create mode 100644 docs/auditor/10.8/addon/siemeventlogexport/powershell.md create mode 100644 docs/auditor/10.8/addon/solarwinds/_category_.json create mode 100644 docs/auditor/10.8/addon/solarwinds/automate.md create mode 100644 docs/auditor/10.8/addon/solarwinds/collecteddata.md create mode 100644 docs/auditor/10.8/addon/solarwinds/deployment.md create mode 100644 docs/auditor/10.8/addon/solarwinds/integrationeventlog.md create mode 100644 docs/auditor/10.8/addon/solarwinds/overview.md create mode 100644 docs/auditor/10.8/addon/solarwinds/parameters.md create mode 100644 docs/auditor/10.8/addon/solarwinds/powershell.md create mode 100644 docs/auditor/10.8/addon/splunk/_category_.json create mode 100644 docs/auditor/10.8/addon/splunk/collecteddata.md create mode 100644 docs/auditor/10.8/addon/splunk/datamodelmap.md create mode 100644 docs/auditor/10.8/addon/splunk/deployment.md create mode 100644 docs/auditor/10.8/addon/splunk/overview.md create mode 100644 docs/auditor/10.8/addon/splunk/troubleshooting.md create mode 100644 docs/auditor/10.8/admin/_category_.json create mode 100644 docs/auditor/10.8/admin/alertsettings/_category_.json create mode 100644 docs/auditor/10.8/admin/alertsettings/create/_category_.json create mode 100644 docs/auditor/10.8/admin/alertsettings/create/create.md create mode 100644 docs/auditor/10.8/admin/alertsettings/create/createeventlog.md create mode 100644 docs/auditor/10.8/admin/alertsettings/create/createhealthstatus.md create mode 100644 docs/auditor/10.8/admin/alertsettings/create/createmailboxaccess.md create mode 100644 docs/auditor/10.8/admin/alertsettings/dashboard.md create mode 100644 docs/auditor/10.8/admin/alertsettings/manage.md create mode 100644 docs/auditor/10.8/admin/alertsettings/overview.md create mode 100644 docs/auditor/10.8/admin/alertsettings/responseaction.md create mode 100644 docs/auditor/10.8/admin/behavioranomalies/_category_.json create mode 100644 docs/auditor/10.8/admin/behavioranomalies/dashboard.md create mode 100644 docs/auditor/10.8/admin/behavioranomalies/overview.md create mode 100644 docs/auditor/10.8/admin/behavioranomalies/tips.md create mode 100644 docs/auditor/10.8/admin/behavioranomalies/userprofile.md create mode 100644 docs/auditor/10.8/admin/compliancemappings.md create mode 100644 docs/auditor/10.8/admin/healthstatus/_category_.json create mode 100644 docs/auditor/10.8/admin/healthstatus/dashboard/_category_.json create mode 100644 docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md create mode 100644 docs/auditor/10.8/admin/healthstatus/dashboard/databasestatistics.md create mode 100644 docs/auditor/10.8/admin/healthstatus/dashboard/healthlog.md create mode 100644 docs/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview.md create mode 100644 docs/auditor/10.8/admin/healthstatus/dashboard/overview.md create mode 100644 docs/auditor/10.8/admin/healthstatus/networktrafficcompression.md create mode 100644 docs/auditor/10.8/admin/healthstatus/overview.md create mode 100644 docs/auditor/10.8/admin/healthstatus/selfaudit.md create mode 100644 docs/auditor/10.8/admin/healthstatus/summaryemail.md create mode 100644 docs/auditor/10.8/admin/healthstatus/troubleshooting.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/_category_.json create mode 100644 docs/auditor/10.8/admin/monitoringplans/activedirectory/_category_.json create mode 100644 docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/activedirectory/scope.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/activitysummaryemail.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/adfs.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/azurefiles/_category_.json create mode 100644 docs/auditor/10.8/admin/monitoringplans/azurefiles/overview.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/azurefiles/scope.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/create.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/dataaccounts.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/datasources.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/delegation.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/exchange/_category_.json create mode 100644 docs/auditor/10.8/admin/monitoringplans/exchange/overview.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/exchange/scope.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/exchangeonline/_category_.json create mode 100644 docs/auditor/10.8/admin/monitoringplans/exchangeonline/overview.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/exchangeonline/scope.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/fileservers/_category_.json create mode 100644 docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/fileservers/scope.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/fileservers/windowsfileserver.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/finetune.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/grouppolicy/_category_.json create mode 100644 docs/auditor/10.8/admin/monitoringplans/grouppolicy/overview.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/grouppolicy/scope.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/logonactivity/_category_.json create mode 100644 docs/auditor/10.8/admin/monitoringplans/logonactivity/overview.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/logonactivity/scope.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/microsoftentraid/_category_.json create mode 100644 docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/microsoftentraid/scope.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/msteams.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/networkdevices.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/oracle/_category_.json create mode 100644 docs/auditor/10.8/admin/monitoringplans/oracle/overview.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/oracle/scope.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/overview.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/overview_1.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/sharepoint/_category_.json create mode 100644 docs/auditor/10.8/admin/monitoringplans/sharepoint/overview.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/sharepoint/scope.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/sharepointonline/_category_.json create mode 100644 docs/auditor/10.8/admin/monitoringplans/sharepointonline/overview.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/sharepointonline/scope.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/sqlserver/_category_.json create mode 100644 docs/auditor/10.8/admin/monitoringplans/sqlserver/items.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/sqlserver/overview.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/sqlserver/scope.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/vmware/_category_.json create mode 100644 docs/auditor/10.8/admin/monitoringplans/vmware/overview.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/vmware/scope.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/windows/_category_.json create mode 100644 docs/auditor/10.8/admin/monitoringplans/windows/overview.md create mode 100644 docs/auditor/10.8/admin/monitoringplans/windows/scope.md create mode 100644 docs/auditor/10.8/admin/navigation/_category_.json create mode 100644 docs/auditor/10.8/admin/navigation/customizeexamples.md create mode 100644 docs/auditor/10.8/admin/navigation/customizefavorite.md create mode 100644 docs/auditor/10.8/admin/navigation/customizehome.md create mode 100644 docs/auditor/10.8/admin/navigation/overview.md create mode 100644 docs/auditor/10.8/admin/navigation/recommendations.md create mode 100644 docs/auditor/10.8/admin/overview.md create mode 100644 docs/auditor/10.8/admin/reports/_category_.json create mode 100644 docs/auditor/10.8/admin/reports/custom.md create mode 100644 docs/auditor/10.8/admin/reports/overview.md create mode 100644 docs/auditor/10.8/admin/reports/reviewstatus.md create mode 100644 docs/auditor/10.8/admin/reports/types/_category_.json create mode 100644 docs/auditor/10.8/admin/reports/types/activity.md create mode 100644 docs/auditor/10.8/admin/reports/types/compliance.md create mode 100644 docs/auditor/10.8/admin/reports/types/datadiscoveryclassification.md create mode 100644 docs/auditor/10.8/admin/reports/types/enterprise.md create mode 100644 docs/auditor/10.8/admin/reports/types/organizationlevel.md create mode 100644 docs/auditor/10.8/admin/reports/types/overview.md create mode 100644 docs/auditor/10.8/admin/reports/types/stateintime/_category_.json create mode 100644 docs/auditor/10.8/admin/reports/types/stateintime/activedirectory.md create mode 100644 docs/auditor/10.8/admin/reports/types/stateintime/fileservers.md create mode 100644 docs/auditor/10.8/admin/reports/types/stateintime/microsoftentraid.md create mode 100644 docs/auditor/10.8/admin/reports/types/stateintime/overview.md create mode 100644 docs/auditor/10.8/admin/reports/types/stateintime/sqlroles.md create mode 100644 docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/_category_.json create mode 100644 docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md create mode 100644 docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqldatabases.md create mode 100644 docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md create mode 100644 docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlobjectpermissions.md create mode 100644 docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlserveroverview.md create mode 100644 docs/auditor/10.8/admin/reports/types/stateintime/vmware.md create mode 100644 docs/auditor/10.8/admin/reports/types/userbehavior.md create mode 100644 docs/auditor/10.8/admin/reports/video.md create mode 100644 docs/auditor/10.8/admin/reports/view.md create mode 100644 docs/auditor/10.8/admin/riskassessment/_category_.json create mode 100644 docs/auditor/10.8/admin/riskassessment/dashboard.md create mode 100644 docs/auditor/10.8/admin/riskassessment/levels.md create mode 100644 docs/auditor/10.8/admin/riskassessment/overview.md create mode 100644 docs/auditor/10.8/admin/search/_category_.json create mode 100644 docs/auditor/10.8/admin/search/filteradvanced.md create mode 100644 docs/auditor/10.8/admin/search/filtersimple.md create mode 100644 docs/auditor/10.8/admin/search/overview.md create mode 100644 docs/auditor/10.8/admin/settings/_category_.json create mode 100644 docs/auditor/10.8/admin/settings/about.md create mode 100644 docs/auditor/10.8/admin/settings/auditdatabase.md create mode 100644 docs/auditor/10.8/admin/settings/custombrand.md create mode 100644 docs/auditor/10.8/admin/settings/general.md create mode 100644 docs/auditor/10.8/admin/settings/integrations.md create mode 100644 docs/auditor/10.8/admin/settings/investigations.md create mode 100644 docs/auditor/10.8/admin/settings/licenses.md create mode 100644 docs/auditor/10.8/admin/settings/longtermarchive.md create mode 100644 docs/auditor/10.8/admin/settings/notifications.md create mode 100644 docs/auditor/10.8/admin/settings/overview.md create mode 100644 docs/auditor/10.8/admin/settings/privilegesecure.md create mode 100644 docs/auditor/10.8/admin/settings/sensitivedatadiscovery.md create mode 100644 docs/auditor/10.8/admin/subscriptions/_category_.json create mode 100644 docs/auditor/10.8/admin/subscriptions/create.md create mode 100644 docs/auditor/10.8/admin/subscriptions/manage.md create mode 100644 docs/auditor/10.8/admin/subscriptions/overview.md create mode 100644 docs/auditor/10.8/api/_category_.json create mode 100644 docs/auditor/10.8/api/activityrecordreference.md create mode 100644 docs/auditor/10.8/api/compatibility.md create mode 100644 docs/auditor/10.8/api/endpoints.md create mode 100644 docs/auditor/10.8/api/errordetails.md create mode 100644 docs/auditor/10.8/api/filterreference/_category_.json create mode 100644 docs/auditor/10.8/api/filterreference/filteroperators.md create mode 100644 docs/auditor/10.8/api/filterreference/filterreference.md create mode 100644 docs/auditor/10.8/api/filterreference/filters.md create mode 100644 docs/auditor/10.8/api/overview.md create mode 100644 docs/auditor/10.8/api/ports.md create mode 100644 docs/auditor/10.8/api/postdata/_category_.json create mode 100644 docs/auditor/10.8/api/postdata/activityrecords.md create mode 100644 docs/auditor/10.8/api/postdata/continuationmark.md create mode 100644 docs/auditor/10.8/api/postdata/overview.md create mode 100644 docs/auditor/10.8/api/postdata/searchparameters.md create mode 100644 docs/auditor/10.8/api/prerequisites.md create mode 100644 docs/auditor/10.8/api/responsestatuscodes.md create mode 100644 docs/auditor/10.8/api/retrieveactivityrecords.md create mode 100644 docs/auditor/10.8/api/searchactivityrecords.md create mode 100644 docs/auditor/10.8/api/security.md create mode 100644 docs/auditor/10.8/api/writeactivityrecords.md create mode 100644 docs/auditor/10.8/configuration/_category_.json create mode 100644 docs/auditor/10.8/configuration/activedirectory/_category_.json create mode 100644 docs/auditor/10.8/configuration/activedirectory/additional.md create mode 100644 docs/auditor/10.8/configuration/activedirectory/advancedpolicy.md create mode 100644 docs/auditor/10.8/configuration/activedirectory/automatic.md create mode 100644 docs/auditor/10.8/configuration/activedirectory/basicpolicy.md create mode 100644 docs/auditor/10.8/configuration/activedirectory/manual.md create mode 100644 docs/auditor/10.8/configuration/activedirectory/objectlevel.md create mode 100644 docs/auditor/10.8/configuration/activedirectory/overview.md create mode 100644 docs/auditor/10.8/configuration/activedirectory/permissions.md create mode 100644 docs/auditor/10.8/configuration/activedirectory/ports.md create mode 100644 docs/auditor/10.8/configuration/activedirectory/registrykey.md create mode 100644 docs/auditor/10.8/configuration/activedirectory/securitylog.md create mode 100644 docs/auditor/10.8/configuration/activedirectory/tombstone.md create mode 100644 docs/auditor/10.8/configuration/activedirectoryfederatedservices/_category_.json create mode 100644 docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md create mode 100644 docs/auditor/10.8/configuration/activedirectoryfederatedservices/permissions.md create mode 100644 docs/auditor/10.8/configuration/activedirectoryfederatedservices/ports.md create mode 100644 docs/auditor/10.8/configuration/azurefiles/_category_.json create mode 100644 docs/auditor/10.8/configuration/azurefiles/overview.md create mode 100644 docs/auditor/10.8/configuration/azurefiles/permissions.md create mode 100644 docs/auditor/10.8/configuration/azurefiles/ports.md create mode 100644 docs/auditor/10.8/configuration/exchange/_category_.json create mode 100644 docs/auditor/10.8/configuration/exchange/auditlog.md create mode 100644 docs/auditor/10.8/configuration/exchange/mailboxacccess.md create mode 100644 docs/auditor/10.8/configuration/exchange/overview.md create mode 100644 docs/auditor/10.8/configuration/exchange/permissions.md create mode 100644 docs/auditor/10.8/configuration/exchange/permissionsregistrykeys.md create mode 100644 docs/auditor/10.8/configuration/exchange/ports.md create mode 100644 docs/auditor/10.8/configuration/exchange/registrykey.md create mode 100644 docs/auditor/10.8/configuration/fileservers/_category_.json create mode 100644 docs/auditor/10.8/configuration/fileservers/delldatastorage/_category_.json create mode 100644 docs/auditor/10.8/configuration/fileservers/delldatastorage/cifss.md create mode 100644 docs/auditor/10.8/configuration/fileservers/delldatastorage/objectaccess.md create mode 100644 docs/auditor/10.8/configuration/fileservers/delldatastorage/overview.md create mode 100644 docs/auditor/10.8/configuration/fileservers/delldatastorage/permissions.md create mode 100644 docs/auditor/10.8/configuration/fileservers/delldatastorage/ports.md create mode 100644 docs/auditor/10.8/configuration/fileservers/delldatastorage/securityeventlog.md create mode 100644 docs/auditor/10.8/configuration/fileservers/dellisilon/_category_.json create mode 100644 docs/auditor/10.8/configuration/fileservers/dellisilon/compliance.md create mode 100644 docs/auditor/10.8/configuration/fileservers/dellisilon/normal.md create mode 100644 docs/auditor/10.8/configuration/fileservers/dellisilon/overview.md create mode 100644 docs/auditor/10.8/configuration/fileservers/dellisilon/permissions.md create mode 100644 docs/auditor/10.8/configuration/fileservers/dellisilon/ports.md create mode 100644 docs/auditor/10.8/configuration/fileservers/netappcmode/_category_.json create mode 100644 docs/auditor/10.8/configuration/fileservers/netappcmode/cifs.md create mode 100644 docs/auditor/10.8/configuration/fileservers/netappcmode/eventcategories.md create mode 100644 docs/auditor/10.8/configuration/fileservers/netappcmode/overview.md create mode 100644 docs/auditor/10.8/configuration/fileservers/netappcmode/permissions.md create mode 100644 docs/auditor/10.8/configuration/fileservers/netappcmode/ports.md create mode 100644 docs/auditor/10.8/configuration/fileservers/netappcmode/servicepolicy.md create mode 100644 docs/auditor/10.8/configuration/fileservers/netappcmode/webaccess.md create mode 100644 docs/auditor/10.8/configuration/fileservers/nutanix/_category_.json create mode 100644 docs/auditor/10.8/configuration/fileservers/nutanix/notificationpolicy.md create mode 100644 docs/auditor/10.8/configuration/fileservers/nutanix/overview.md create mode 100644 docs/auditor/10.8/configuration/fileservers/nutanix/partnerserver.md create mode 100644 docs/auditor/10.8/configuration/fileservers/nutanix/permissions.md create mode 100644 docs/auditor/10.8/configuration/fileservers/nutanix/ports.md create mode 100644 docs/auditor/10.8/configuration/fileservers/nutanix/useraccount.md create mode 100644 docs/auditor/10.8/configuration/fileservers/overview.md create mode 100644 docs/auditor/10.8/configuration/fileservers/qumulo/_category_.json create mode 100644 docs/auditor/10.8/configuration/fileservers/qumulo/configure.md create mode 100644 docs/auditor/10.8/configuration/fileservers/qumulo/overview.md create mode 100644 docs/auditor/10.8/configuration/fileservers/qumulo/permissions.md create mode 100644 docs/auditor/10.8/configuration/fileservers/qumulo/ports.md create mode 100644 docs/auditor/10.8/configuration/fileservers/synology/_category_.json create mode 100644 docs/auditor/10.8/configuration/fileservers/synology/configure.md create mode 100644 docs/auditor/10.8/configuration/fileservers/synology/overview.md create mode 100644 docs/auditor/10.8/configuration/fileservers/synology/permissions.md create mode 100644 docs/auditor/10.8/configuration/fileservers/synology/ports.md create mode 100644 docs/auditor/10.8/configuration/fileservers/windows/_category_.json create mode 100644 docs/auditor/10.8/configuration/fileservers/windows/advancedpolicy.md create mode 100644 docs/auditor/10.8/configuration/fileservers/windows/configuration.md create mode 100644 docs/auditor/10.8/configuration/fileservers/windows/eventlog.md create mode 100644 docs/auditor/10.8/configuration/fileservers/windows/localpolicy.md create mode 100644 docs/auditor/10.8/configuration/fileservers/windows/objectlevel.md create mode 100644 docs/auditor/10.8/configuration/fileservers/windows/overview.md create mode 100644 docs/auditor/10.8/configuration/fileservers/windows/permissions.md create mode 100644 docs/auditor/10.8/configuration/fileservers/windows/ports.md create mode 100644 docs/auditor/10.8/configuration/fileservers/windows/remoteregistryservice.md create mode 100644 docs/auditor/10.8/configuration/grouppolicy/_category_.json create mode 100644 docs/auditor/10.8/configuration/grouppolicy/overview.md create mode 100644 docs/auditor/10.8/configuration/grouppolicy/permissions.md create mode 100644 docs/auditor/10.8/configuration/grouppolicy/ports.md create mode 100644 docs/auditor/10.8/configuration/grouppolicy/registrykey.md create mode 100644 docs/auditor/10.8/configuration/logonactivity/_category_.json create mode 100644 docs/auditor/10.8/configuration/logonactivity/advancedpolicy.md create mode 100644 docs/auditor/10.8/configuration/logonactivity/basicpolicy.md create mode 100644 docs/auditor/10.8/configuration/logonactivity/overview.md create mode 100644 docs/auditor/10.8/configuration/logonactivity/permissions.md create mode 100644 docs/auditor/10.8/configuration/logonactivity/ports.md create mode 100644 docs/auditor/10.8/configuration/logonactivity/securityeventlog.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/_category_.json create mode 100644 docs/auditor/10.8/configuration/microsoft365/exchangeonline/_category_.json create mode 100644 docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/_category_.json create mode 100644 docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/manifest.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/manualconfig.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/modernauth.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/exchangeonline/overview.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/exchangeonline/permissions.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/exchangeonline/ports.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/microsoftentraid/_category_.json create mode 100644 docs/auditor/10.8/configuration/microsoft365/microsoftentraid/overview.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/_category_.json create mode 100644 docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/basicauth.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/_category_.json create mode 100644 docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/manifest.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/permissions.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/microsoftentraid/ports.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/overview.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/sharepointonline/_category_.json create mode 100644 docs/auditor/10.8/configuration/microsoft365/sharepointonline/overview.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/_category_.json create mode 100644 docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/basicauth.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/_category_.json create mode 100644 docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/manifest.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/modernauth.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/permissions.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/sharepointonline/ports.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/teams/_category_.json create mode 100644 docs/auditor/10.8/configuration/microsoft365/teams/overview.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/teams/permissions/_category_.json create mode 100644 docs/auditor/10.8/configuration/microsoft365/teams/permissions/basicauth.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/teams/permissions/modernauth/_category_.json create mode 100644 docs/auditor/10.8/configuration/microsoft365/teams/permissions/modernauth/manifest.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/teams/permissions/modernauth/modernauth.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/teams/permissions/permissions.md create mode 100644 docs/auditor/10.8/configuration/microsoft365/teams/ports.md create mode 100644 docs/auditor/10.8/configuration/networkdevices/_category_.json create mode 100644 docs/auditor/10.8/configuration/networkdevices/ciscoasa.md create mode 100644 docs/auditor/10.8/configuration/networkdevices/ciscoios.md create mode 100644 docs/auditor/10.8/configuration/networkdevices/ciscomerakidashboard.md create mode 100644 docs/auditor/10.8/configuration/networkdevices/ciscomerakidevices.md create mode 100644 docs/auditor/10.8/configuration/networkdevices/fortinetfortigate.md create mode 100644 docs/auditor/10.8/configuration/networkdevices/hpearuba.md create mode 100644 docs/auditor/10.8/configuration/networkdevices/juniper.md create mode 100644 docs/auditor/10.8/configuration/networkdevices/overview.md create mode 100644 docs/auditor/10.8/configuration/networkdevices/paloalto.md create mode 100644 docs/auditor/10.8/configuration/networkdevices/permissions.md create mode 100644 docs/auditor/10.8/configuration/networkdevices/ports.md create mode 100644 docs/auditor/10.8/configuration/networkdevices/pulsesecure.md create mode 100644 docs/auditor/10.8/configuration/networkdevices/sonicwall.md create mode 100644 docs/auditor/10.8/configuration/oracle/_category_.json create mode 100644 docs/auditor/10.8/configuration/oracle/database.md create mode 100644 docs/auditor/10.8/configuration/oracle/finegained.md create mode 100644 docs/auditor/10.8/configuration/oracle/overview.md create mode 100644 docs/auditor/10.8/configuration/oracle/permissions.md create mode 100644 docs/auditor/10.8/configuration/oracle/ports.md create mode 100644 docs/auditor/10.8/configuration/oracle/unified.md create mode 100644 docs/auditor/10.8/configuration/oracle/verifysettings.md create mode 100644 docs/auditor/10.8/configuration/oracle/wallet.md create mode 100644 docs/auditor/10.8/configuration/overview.md create mode 100644 docs/auditor/10.8/configuration/sharepoint/_category_.json create mode 100644 docs/auditor/10.8/configuration/sharepoint/overview.md create mode 100644 docs/auditor/10.8/configuration/sharepoint/permissions.md create mode 100644 docs/auditor/10.8/configuration/sharepoint/ports.md create mode 100644 docs/auditor/10.8/configuration/sqlserver/_category_.json create mode 100644 docs/auditor/10.8/configuration/sqlserver/configuringtracelogging.md create mode 100644 docs/auditor/10.8/configuration/sqlserver/overview.md create mode 100644 docs/auditor/10.8/configuration/sqlserver/permissions.md create mode 100644 docs/auditor/10.8/configuration/sqlserver/ports.md create mode 100644 docs/auditor/10.8/configuration/useractivity/_category_.json create mode 100644 docs/auditor/10.8/configuration/useractivity/datacollection.md create mode 100644 docs/auditor/10.8/configuration/useractivity/overview.md create mode 100644 docs/auditor/10.8/configuration/useractivity/ports.md create mode 100644 docs/auditor/10.8/configuration/useractivity/videorecordings.md create mode 100644 docs/auditor/10.8/configuration/vmware/_category_.json create mode 100644 docs/auditor/10.8/configuration/vmware/overview.md create mode 100644 docs/auditor/10.8/configuration/vmware/permissions.md create mode 100644 docs/auditor/10.8/configuration/vmware/ports.md create mode 100644 docs/auditor/10.8/configuration/windowsserver/_category_.json create mode 100644 docs/auditor/10.8/configuration/windowsserver/advancedpolicy.md create mode 100644 docs/auditor/10.8/configuration/windowsserver/dhcp.md create mode 100644 docs/auditor/10.8/configuration/windowsserver/eventlog.md create mode 100644 docs/auditor/10.8/configuration/windowsserver/iis.md create mode 100644 docs/auditor/10.8/configuration/windowsserver/localpolicy.md create mode 100644 docs/auditor/10.8/configuration/windowsserver/overview.md create mode 100644 docs/auditor/10.8/configuration/windowsserver/permissions.md create mode 100644 docs/auditor/10.8/configuration/windowsserver/persistenttimestamp.md create mode 100644 docs/auditor/10.8/configuration/windowsserver/ports.md create mode 100644 docs/auditor/10.8/configuration/windowsserver/registrykey.md create mode 100644 docs/auditor/10.8/configuration/windowsserver/remoteregistry.md create mode 100644 docs/auditor/10.8/configuration/windowsserver/removablestorage.md create mode 100644 docs/auditor/10.8/configuration/windowsserver/windowsregistry.md create mode 100644 docs/auditor/10.8/index.md create mode 100644 docs/auditor/10.8/install/_category_.json create mode 100644 docs/auditor/10.8/install/automatelogin.md create mode 100644 docs/auditor/10.8/install/firstlaunch.md create mode 100644 docs/auditor/10.8/install/overview.md create mode 100644 docs/auditor/10.8/install/sharepointcoreservice.md create mode 100644 docs/auditor/10.8/install/silentmode.md create mode 100644 docs/auditor/10.8/install/uninstall.md create mode 100644 docs/auditor/10.8/install/upgrade.md create mode 100644 docs/auditor/10.8/install/useractivitycoreservice.md create mode 100644 docs/auditor/10.8/install/viagrouppolicy.md create mode 100644 docs/auditor/10.8/install/virtualappliance/_category_.json create mode 100644 docs/auditor/10.8/install/virtualappliance/configure.md create mode 100644 docs/auditor/10.8/install/virtualappliance/importhyperv.md create mode 100644 docs/auditor/10.8/install/virtualappliance/importvmware.md create mode 100644 docs/auditor/10.8/install/virtualappliance/overview.md create mode 100644 docs/auditor/10.8/overview/_category_.json create mode 100644 docs/auditor/10.8/overview/gettingstarted.md create mode 100644 docs/auditor/10.8/overview/producteditions.md create mode 100644 docs/auditor/10.8/overview/whatsnew.md create mode 100644 docs/auditor/10.8/requirements/_category_.json create mode 100644 docs/auditor/10.8/requirements/console.md create mode 100644 docs/auditor/10.8/requirements/deploymentscenarios.md create mode 100644 docs/auditor/10.8/requirements/gmsa.md create mode 100644 docs/auditor/10.8/requirements/longtermarchive.md create mode 100644 docs/auditor/10.8/requirements/overview.md create mode 100644 docs/auditor/10.8/requirements/ports.md create mode 100644 docs/auditor/10.8/requirements/serviceaccount.md create mode 100644 docs/auditor/10.8/requirements/software.md create mode 100644 docs/auditor/10.8/requirements/sqlserver.md create mode 100644 docs/auditor/10.8/requirements/sqlserverreportingservice.md create mode 100644 docs/auditor/10.8/requirements/supporteddatasources/_category_.json create mode 100644 docs/auditor/10.8/requirements/supporteddatasources/monitoredobjecttypes.md create mode 100644 docs/auditor/10.8/requirements/supporteddatasources/supporteddatasources.md create mode 100644 docs/auditor/10.8/requirements/workingfolder.md create mode 100644 docs/auditor/10.8/tools/_category_.json create mode 100644 docs/auditor/10.8/tools/auditconfigurationassistant.md create mode 100644 docs/auditor/10.8/tools/eventlogmanager/_category_.json create mode 100644 docs/auditor/10.8/tools/eventlogmanager/eventlog.md create mode 100644 docs/auditor/10.8/tools/eventlogmanager/eventlogmanager.md create mode 100644 docs/auditor/10.8/tools/eventlogmanager/windowseventlogs.md create mode 100644 docs/auditor/10.8/tools/inactiveusertracker.md create mode 100644 docs/auditor/10.8/tools/objectrestoread.md create mode 100644 docs/auditor/10.8/tools/overview.md create mode 100644 docs/auditor/10.8/tools/passwordexpirationnotifier/_category_.json create mode 100644 docs/auditor/10.8/tools/passwordexpirationnotifier/monitoringscope.md create mode 100644 docs/auditor/10.8/tools/passwordexpirationnotifier/overview.md create mode 100644 docs/auditor/10.8/tools/passwordexpirationnotifier/ports.md create mode 100644 docs/auditor/10.8/whats-new.md create mode 100644 sidebars/auditor/10.8.js diff --git a/.claude/settings.local.json b/.claude/settings.local.json new file mode 100644 index 0000000000..7a4fd6a743 --- /dev/null +++ b/.claude/settings.local.json @@ -0,0 +1,18 @@ +{ + "permissions": { + "allow": [ + "WebFetch(domain:community.netwrix.com)", + "WebFetch(domain:community.netwrix.com)", + "Bash(git checkout:*)", + "Bash(cp:*)", + "Bash(npm install)", + "Bash(npm start)", + "Bash(npm run start:*)", + "Bash(npx docusaurus start:*)", + "Bash(mkdir:*)", + "Bash(rm:*)", + "Bash(git add:*)" + ], + "deny": [] + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/accessreviews/_category_.json b/docs/auditor/10.8/accessreviews/_category_.json new file mode 100644 index 0000000000..9b74af87fe --- /dev/null +++ b/docs/auditor/10.8/accessreviews/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Access Reviews", + "position": 100, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "accessreviews" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/accessreviews/accessreviews.md b/docs/auditor/10.8/accessreviews/accessreviews.md new file mode 100644 index 0000000000..8d9206458a --- /dev/null +++ b/docs/auditor/10.8/accessreviews/accessreviews.md @@ -0,0 +1,156 @@ +--- +title: "Access Reviews" +description: "Access Reviews" +sidebar_position: 100 +--- + +# Access Reviews + +Netwrix Auditor supports integration with Netwrix Auditor Access Reviews, which enables business +owners to conduct resource and group reviews and recommend changes. The integration is available for +the following data sources: + +- Active Directory +- Dell Data Storage (only Unity family) +- NetApp +- Nutanix Files +- Qumulo +- SharePoint Online +- Synology +- Windows File Servers + +## Getting Started + +This workflow assumes you already have Netwrix Auditor installed with configured monitoring plans +for a supported data source. + +**NOTE:** Access Reviews is a separately licensed product and is not included with Netwrix Auditor. +Make sure that you have the Access Reviews license enabled in Auditor. + +See the [Licenses](/docs/auditor/10.7/admin/settings/licenses.md) topic for additional information. + +_Remember,_ there is one single Access Review license for all data sources that can send data to the +application. + +Follow the steps to use Netwrix Auditor Access Reviews in conjuction with Auditor. + +**Step 1 –** Install Access Reviews on the same computer where Netwrix Auditor is installed. See the +[Installation Overview](/docs/auditor/10.7/accessreviews/installation/overview.md) topic for prerequisites and +additional information. + +**Step 2 –** Configure Access Reviews. The Configuration interface is only available to users with +the Administrator role. See the [Administrator Overview](/docs/auditor/10.7/accessreviews/admin/overview.md) topic +for configuration settings and enabling user access. + +**Step 3 –** Use the Access reviews configuration tool to setup the data flow from the Auditor +database to the Access Reviews database. See the +[Select Data Sources](/docs/auditor/10.7/accessreviews/installation/accessreviewsconfiguration.md) topic for additional information. + +**NOTE:** Data upload speed depends on the amount of collected data and Auditor collectors +configuration. + +**Step 4 –** Configure resource ownership through the Access Reviews Console. The Resource Owners +interface is available to users with either the Security Team or Administrator role. Managing +ownership is core component for the Access Reviews workflow. See the +[Resource Owners Overview](/docs/auditor/10.7/accessreviews/resourceowners/overview.md) topic for additional +information. + +**NOTE:** The [Owners & Access Reviews](/docs/auditor/10.7/accessreviews/owneroverview/owneroverview.md) topic and +subtopics are written for the assigned owners. You can distribute the URL to this topic or download +a PDF to be distributed to your assigned resource owners. + +**Step 5 –** Configure and run reviews. The Entitlement Reviews interface is available to users with +either the Security Team or Administrator role. See the +[Reviews Overview](/docs/auditor/10.7/accessreviews/entitlementreviews/overview.md) topic for additional +information. + +Netwrix Auditor Access Reviews is now configured and ready to use. + +## Considerations & Limitations + +Review the following considerations: + +1. Enabling State-in-Time data collection for your monitoring plans option is not required for the + integration works properly. +2. The data collected by Auditor is updated at least once a day. +3. If a monitoring plan or a data source with enabled integration is deleted, all collected data + will be removed from the Access Reviews database. +4. If there are errors in upload of data to the Access Reviews database, these errors are reflected + in the Netwrix Auditor Health Log and text log files; status of items and data sources in Auditor + is not affected by these errors. +5. Permissions-related considerations: + + - For Windows File Servers, permission data for all items in this data source is sent to the + Access Reviews application; + - Only effective top-level permissions are sent (share+NTFS); + - Permission data is sent per file server (entirely for each server); + - Transfer of permission data to the Access Reviews application is started when you enable the + integration for a data source. + + ## Initial Configuration + + Next, configure the Access Reviews for your environment: + + - Console Users — Grant users access to the application starting with an Administrator account. + There are two levels of access: Administrator and Security Team. See the + [Console Access Page](/docs/auditor/10.7/accessreviews/admin/configuration/consoleaccess.md) topic for + information. + + - Optionally, disable the Builtin Administrator account. See the + [Modify the Builtin Administrator Account](/docs/auditor/10.7/accessreviews/admin/configuration/consoleaccess.md#modify-the-builtin-administrator-account) + topic for additional information. + + - Notification — Configure the Notification settings required in order for the application to + send email. See the + [Notifications Page](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md) topic for + information. + + ## Enable Console Users + + Access Reviews Console users granted one of the available roles should be notified. + + **_RECOMMENDED:_** The notification should include: + + - Why your organization is using Netwrix Auditor Access Reviews. + - What they will be doing in the Access Reviews Console. + - How to log into the Access Reviews Console, specifically what URL and credentials to use. + + You should also provide links to the appropriate topics based on the user's role: + + - Security Team — Need topics that align to the work the will be doing in the Access Reviews + Console: + + - Ownership Administrator — Send the URL link for the + [Resource Owners Overview](/docs/auditor/10.7/accessreviews/resourceowners/overview.md) topic. + - Review Administrator — Send the URL link for the + [Reviews Overview](/docs/auditor/10.7/accessreviews/entitlementreviews/overview.md) topic. + + - Administrator — Send the URL link for the + [Administrator Overview](/docs/auditor/10.7/accessreviews/admin/overview.md) topic. + + ## Resource Ownership Configuration + + Ownership of resources must be assigned in order to use the Access Reviews workflow: + + - Resource Ownership — Assign ownership for resources to be managed through the application. See + the [Resource Owners Interface](/docs/auditor/10.7/accessreviews/resourceowners/interface/interface.md) topic for + additional information. + - Enable Owners — Send a notification to your owners about resource ownership with the + application. See the + [Notification to Owners](/docs/auditor/10.7/accessreviews/resourceowners/overview.md#notification-to-owners) + topic for additional information. + + ## Access Reviews Workflow + + The Access Reviews applicaton runs attestations on resources and groups with the assigned + owners. The workflow consists of: + + - Reviews — Configure reviews for resource Access or group Membership . + - Owner Performs Review — Owners process the review, potentially recommending changes + - Review Administrator Approval — Review and process owner recommended changes + + **_RECOMMENDED:_** Set expectations for response time from owners. + + Reviews can be run multiple times, maintaining a historical record for each instance. See the + [Reviews Overview](/docs/auditor/10.7/accessreviews/entitlementreviews/overview.md) topic for additional + information. diff --git a/docs/auditor/10.8/accessreviews/admin/_category_.json b/docs/auditor/10.8/accessreviews/admin/_category_.json new file mode 100644 index 0000000000..bdd262d9c1 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Administrator Overview", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/accessreviews/admin/additionalconfig/_category_.json b/docs/auditor/10.8/accessreviews/admin/additionalconfig/_category_.json new file mode 100644 index 0000000000..a8a0507cdf --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/additionalconfig/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Additional Configuration Options", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/accessreviews/admin/additionalconfig/emailtemplates.md b/docs/auditor/10.8/accessreviews/admin/additionalconfig/emailtemplates.md new file mode 100644 index 0000000000..78d013597c --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/additionalconfig/emailtemplates.md @@ -0,0 +1,79 @@ +--- +title: "Email Templates" +description: "Email Templates" +sidebar_position: 10 +--- + +# Email Templates + +The HTML templates used to format notification email can be customized. These templates are designed +to make the message viewable within an email client. It is recommended to edit text and layout as +desired, but NOT to embed new images or logos. The following table shows the notification email +templates and describes the purpose of each. + +| Template Name | Message Type Description | +| --------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------- | +| EntitlementReviewReminder | Reminds owners of pending reviews; manually sent by a Review Administrator from the Entitlement Reviews interface | +| OwnershipChangeNotification | Sent to owners when assigned ownership is changed for a resource which already has pending reviews | +| OwnershipConfirm | Sent to owners to confirm or decline ownership of a given resource; manually sent by an Ownership Administrator from the Resource Owners interface | +| ReminderDigest | Weekly reminder configured by Administrators on the Notifications page of the Configuration interface to owners with pending reviews | + +While customizing the template content, take note of the inline Substitution Tokens. These exist to +provide the message with dynamic content, i.e. inserting values and strings from data in line with +the static portion of the message body. These Substitution Tokens begin and end with the “@” symbol, +e.g. @UserName@. + +Substitution Tokens are only valid for certain Notification message templates. Below is a table of +the Substitution Tokens, the value or string they represent, and the message templates in which they +may be used. + +| Substitution Token | Description | Applicable Template(s) | +| --------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------ | +| @LoginUrl@ | URL that allows a user to access the default (login) page | OwnershipChangeNotification ReminderDigest | +| @ResourceDescription@ | Description of resource - To use the resource's description in emails instead of the path, replace @ResourcePath@ with @ResourceDescription@ | OwnershipConfirm ReminderDigest | +| @ResourcePath@ | Path of the current resource - To use the resources’ description in emails instead of the path, replace @ResourcePath@ with @ResourceDescription@ | OwnershipConfirm ReminderDigest | +| @ResourceType@ | Type of resource | OwnershipConfirm ReminderDigest | +| @ResourceUrl@ | URL specifically created to respond to a request | EntitlementReviewReminder OwnershipConfirm | +| @ResponseCount@ | Numerically formatted count of pending reviews | ReminderDigest | +| @ReviewCount@ | Numerically formatted count of pending reviews | ReminderDigest | + +## Customize Email Templates + +Email templates are shipped in a ZIP file and stored in the Access Reviews installation directory: + +...\Netwrix\Access Reviews + +Follow the steps to customize the email templates. + +**NOTE:** To successfully modify these Notifications email templates, a familiarity with basic HTML +is necessary. + +![Access Reviews installation directory showing the Templates zip file](/images/auditor/10.7/access/reviews/admin/additionalconfig/emailtemplates.webp) + +**Step 1 –** Navigate to the Access Reviews installation directory. + +**Step 2 –** Unzip the `Templates.zip` file and save the contents to a folder within this directory +named `Templates`. + +**CAUTION:** The customized email templates must be in the `Templates` folder within the +installation directory to be preserved during future application upgrades. + +![Templates folder showing email templates](/images/auditor/10.7/access/reviews/admin/additionalconfig/emailtemplatesfolder.webp) + +**Step 3 –** Locate the desired HTML message template. + +**Step 4 –** Open the file with a text editor, e.g. Notepad, and customize the email body. + +**NOTE:** Using a tool other than a text editor to edit HTML files, such as a WYSIWYG web page +editor which may drastically alter the underlying HTML code, is not supported. + +**Step 5 –** Email subject lines can be edited by changing the text between the opening `` +tag and the closing `` tag. + +**Step 6 –** After making changes, save the file and view it within a web browser to see what the +changes will look like. The Substitution Tokens will display without supplied values. + +**Step 7 –** After making the desired changes, save and close the text editor. Then re-launch the +application. + +The modifications to the HTML email templates are in use by the notification emails. diff --git a/docs/auditor/10.8/accessreviews/admin/additionalconfig/overview.md b/docs/auditor/10.8/accessreviews/admin/additionalconfig/overview.md new file mode 100644 index 0000000000..a1b106072d --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/additionalconfig/overview.md @@ -0,0 +1,13 @@ +--- +title: "Additional Configuration Options" +description: "Additional Configuration Options" +sidebar_position: 40 +--- + +# Additional Configuration Options + +In addition to the settings that are available on the Configuration interface, the following +configurations and customizations can be done by Administrators: + +- [Email Templates](/docs/auditor/10.7/accessreviews/admin/additionalconfig/emailtemplates.md) +- [Timeout Parameter](/docs/auditor/10.7/accessreviews/admin/additionalconfig/timeoutparameter.md) diff --git a/docs/auditor/10.8/accessreviews/admin/additionalconfig/timeoutparameter.md b/docs/auditor/10.8/accessreviews/admin/additionalconfig/timeoutparameter.md new file mode 100644 index 0000000000..25b9fef5ae --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/additionalconfig/timeoutparameter.md @@ -0,0 +1,32 @@ +--- +title: "Timeout Parameter" +description: "Timeout Parameter" +sidebar_position: 20 +--- + +# Timeout Parameter + +A user session will end when the timeout parameter for inactivity has been reached, and the user +will be logged out. By default this is set to 15 minutes. + +The timeout parameter is configured within the `AccessInformationCenter.Service.exe.Config` file in +the Access Reviews installation directory: + +...\Netwrix\Access Reviews + +Follow the steps to modify the timeout parameter. + +**Step 1 –** Open the `AccessInformationCenter.Service.exe.Config` file with a text editor, e.g. +Notepad. + +![Notepad showing the AccessInformationCenter.Service.exe.Config file](/images/auditor/10.7/access/reviews/admin/additionalconfig/timeout.webp) + +**Step 2 –** Change the value for the `AuthSessionTimeout` parameter to the desired number of +minutes. For example: + + + +**Step 3 –** Save and close the file. + +A user session times out after the number of minutes specified for inactivity, for example after 20 +minutes. diff --git a/docs/auditor/10.8/accessreviews/admin/configuration/_category_.json b/docs/auditor/10.8/accessreviews/admin/configuration/_category_.json new file mode 100644 index 0000000000..5d79b0cfd1 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/configuration/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Configuration Interface Overview", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/accessreviews/admin/configuration/activedirectory.md b/docs/auditor/10.8/accessreviews/admin/configuration/activedirectory.md new file mode 100644 index 0000000000..9f697ae791 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/configuration/activedirectory.md @@ -0,0 +1,51 @@ +--- +title: "Active Directory Page" +description: "Active Directory Page" +sidebar_position: 20 +--- + +# Active Directory Page + +The Access Reviews application needs to be connected to Active Directory for user authentication and +to assign resource ownership in the Resource Owners interface. The Active Directory service account +is configured on the Active Directory page of the Configuration interface. Read access to Active +Directory is required for this purpose. + +The Active Directory service account is configured during installation based on the account used for +connecting to the database. If your Database service account uses: + +- SQL Server authentication credentials — Active Directory service account is configured to use the + Local System, or computer account, which typically has Read rights to the domain +- Windows authentication credentials — The same domain credentials are also used for the Active + Directory service account + +![Configuration interface showing the Active Directory page](/images/auditor/10.7/access/reviews/admin/configuration/activedirectory.webp) + +There are two options for the type of Active Directory service account: + +- Use the account running this service — Local System, or computer account (NT AUTHORITY\SYSTEM) +- Use the following Active Directory account — Uses a domain account with the required permissions + to Active Directory. The supplied User Name [DOMAIN\USERNAME] and Password are used as the Active + Directory service account. + +Multiple Domains + +The **Allow authentication from the following domains** option is where additional domains can be +introduced to the Access Reviews Console. By default the domain where the Access Reviews Console +resides is listed. Domains that are in the same forest or have a trust can be added in a +comma-separated list. + +- For example: nwxtech.com,example.com + +_Remember,_ click **Save** when any changes are made to this page. + +## Update the Active Directory Service Account Password + +Follow the steps to update the Active Directory service account password. These steps only apply for +the **Use the following Active Directory account** option. + +**Step 1 –** On the Active Directory page, enter the new password in the correct field. + +**Step 2 –** Click **Save**. Then click **OK** to confirm. + +The Active Directory service account password has been updated. diff --git a/docs/auditor/10.8/accessreviews/admin/configuration/consoleaccess.md b/docs/auditor/10.8/accessreviews/admin/configuration/consoleaccess.md new file mode 100644 index 0000000000..837efa562c --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/configuration/consoleaccess.md @@ -0,0 +1,145 @@ +--- +title: "Console Access Page" +description: "Console Access Page" +sidebar_position: 10 +--- + +# Console Access Page + +Console access is configured through the Configuration > Console Access page. Adding users to the +Access Reviews Console requires the Active Directory service account to be configured. + +![Configuration interface showing the Console Access page](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccess.webp) + +There are two levels of access, or roles, which can be granted to domain users or groups: + +- Administrator – Role allows access to all interfaces including the Configuration interface +- Security Team – Role allows access to all interfaces except for the Configuration interface + + - In the Entitlement Reviews interface, this role can only view reviews that the logged in user + has created. + - Access can be limited by resource types (File System, SharePoint, or Active Directory) + +**CAUTION:** Before disabling the Builtin Administrator account, it is necessary to first assign at +least one domain user account to the Administrator role. Login with another Administrator account to +disable the Builtin Administrator. Failure to do this could result in being locked-out of the +Configuration interface. As an alternative to disabling this account, the password can be changed. +See the Modify the Builtin Administrator Account topic for additional information. + +Once users have been granted console access, they can login with their domain credentials. Console +access is not a requirement for owners to complete Access Reviews. See the +[URL & Login](/docs/auditor/10.7/accessreviews/admin/login.md) topic for information on how users will log in and where they are +directed after login based on their assigned role or lack of role. + +## Add Console Users + +Follow the steps to grant domain users or groups console access. + +![Console Access Page](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccess.webp) + +**Step 1 –** In the Configuration interface on the Console Access page, click Add. The Console +Access wizard opens. + +![Console Access wizard showing the Select Trustees page](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccessselecttrustee.webp) + +**Step 2 –** On the Select Trustee page, enter the following information and click Next: + +- Domain — If the Access Reviews Console has been configured for multiple domains, use the drop-down + menu to select the desired domain +- Search — Begin typing the sAMAccountName or display name and the field will auto-populate options + from Active Directory sAMAccountName + +![Console Access wizard showing the Select Access page](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccessselectaccess.webp) + +**Step 3 –** On the Select Access page, enter the following information and click **Finish**: + +- Select a role for this trustee – Select a role from the drop down list: + + - Unlimited Access — The Administrator role grants unlimited access + - Limited Access — All other roles can be granted limited access + +- Allow access to the following resource — When enabled, users can be limited to only having + visibility into data for the selected types of resources. Check the boxes for the type of resource + data to be made available to this user. +- Access is enabled – A user's account must be enabled in order to log into the console. Unchecking + this option allows you to configure access to be granted at a future time. + +![Console Access Page displaying users with various assigned roles](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccessadd.webp) + +**Step 4 –** The new user displays in the list on the Console Access page. Repeat these steps for +each trustee to be granted console access. + +Once the first user with the role of Administrator has been added, the Builtin Administrator account +can be disabled by that user. See the Modify the Builtin Administrator Account topic for additional +information. + +## Modify Console Users + +Follow the steps to modify a user’s console access. + +**NOTE:** These steps are for modifying domain users with console access roles and do not apply to +the Builtin Administrator account. See the Modify the Builtin Administrator Account topic for +additional information. + +**Step 1 –** In the Configuration interface on the Console Access page, select the user to be +modified and click Modify. The Console Access wizard opens to the Select Access page. + +![Console Access wizard showing the Select Access page when modifying](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccessmodifyselectaccess.webp) + +**Step 2 –** Modify the desired settings and click **Finish**: + +- Select a role for this trustee – Select a role from the drop down list: + + - Unlimited Access — The Administrator role grants unlimited access + - Limited Access — All other roles can be granted limited access + +- Allow access to the following resource — When enabled, users can be limited to only having + visibility into data for the selected types of resources. Check the boxes for the type of resource + data to be made available to this user. +- Allow access to the following servers — When enabled, users can be limited to only having + visibility into data for specific servers. Begin typing server names and the field will + auto-populate with known servers from scanned data. A resource type appears in parentheses after + the host name for quick reference. +- Access is enabled – A user's account must be enabled in order to log into the console. Unchecking + this option allows you to configure access to be granted at a future time. + +Any modifications to the user’s role are visible in the list on the Console Access page. + +## Delete Console Users + +**CAUTION:** Confirmation is not requested when deleting users. An alternative to deleting a console +user is to disable their access. See the Modify Console Users topic for additional information. + +Follow the steps to remove a user’s configured console access. + +![Console Access Page showing various user accounts, with one selected enabling the Modify and Remove buttons](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccessremove.webp) + +**Step 1 –** In the Configuration interface on the Console Access page, select the user. + +**Step 2 –** Click Remove. + +The user is removed from the list on the Console Access page. + +## Modify the Builtin Administrator Account + +The Builtin Administrator account can be disabled or its password can be changed. Follow the steps +to modify this account. + +![modifybuiltinadministrator](/images/accessinformationcenter/12.0/admin/configuration/modifybuiltinadministrator.webp) + +**Step 1 –** In the Configuration interface on the Console Access page, select the Builtin +Administrator account and click **Modify**. The Builtin Administrator window opens. + +**Step 2 –** Modify the account as desired and click **OK**: + +- Access is enabled — Indicates whether the account can be used to login +- Change Password — Allows you to change the password for this Builtin Administrator account. Check + the box and enter the new password in both entry fields. The password must be eight or more + characters long. + +The modifications to the Builtin Administrator are processed. + +**NOTE:** The new password is encrypted in the `AccessInformationCenter.Service.exe.Config` file, in +the `AuthBuiltinAdminPassword` parameter. If you forget the Admin password, you can clear the +`AuthBuiltinAdminPassword` value in the `AccessInformationCenter.Service.exe.Config` file. Then use +the default first launch login credentials to set a new password. diff --git a/docs/auditor/10.8/accessreviews/admin/configuration/database.md b/docs/auditor/10.8/accessreviews/admin/configuration/database.md new file mode 100644 index 0000000000..09d7654a58 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/configuration/database.md @@ -0,0 +1,55 @@ +--- +title: "Database Page" +description: "Database Page" +sidebar_position: 40 +--- + +# Database Page + +The Access Reviews application must have access to the SQL Server hosting the database. It is +configured during installation. If it is necessary to modify these setting after installation, that +is done on the Database Page of the Configuration interface. + +![Configuration interface showing the Database page](/images/auditor/10.7/access/reviews/admin/configuration/database.webp) + +SQL Server database information: + +- Server Name – Host name of the SQL Server serving the database in one of the following formats: + + - No named instance: [SQLHostName] + + - Example: NT-SQL02 + + - Named instance: [SQLHostName]\[SQLInstanceName] + + - Example: NT-SQL02\Netwrix + + - No named instance with non-standard port: [SQLHostName],[PortNumber] + + - Example: NT-SQL02,1392 + + - Named instance with non-standard port: [SQLHostName]\[SQLInstanceName],[PortNumber] + + - Example: NT-SQL02\Netwrix,1392 + +- Database – Name of the SQL database + +Database service account information: + +- Use the windows account running this service — Local System, or computer account (NT + AUTHORITY\SYSTEM) +- Use the following SQL account – Uses SQL Authentication to the database. Provide the properly + provisioned SQL credentials for the database + +_Remember,_ click **Save** when any changes are made to this page. + +## Update the Database Service Account Password + +Follow the steps to update the Database service account password. These steps only apply for the SQL +Authentication option. + +**Step 1 –** On the Database page, enter the new password in the correct field. + +**Step 2 –** Click **Save**. Then click **OK** to confirm. + +The Database service account password has been updated. diff --git a/docs/auditor/10.8/accessreviews/admin/configuration/diagnostics.md b/docs/auditor/10.8/accessreviews/admin/configuration/diagnostics.md new file mode 100644 index 0000000000..bd7ec27de8 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/configuration/diagnostics.md @@ -0,0 +1,32 @@ +--- +title: "Diagnostics Page" +description: "Diagnostics Page" +sidebar_position: 50 +--- + +# Diagnostics Page + +Download logs and enable debug log level for troubleshooting with Netwrix Support on the Diagnostics +page of the Configuration interface. + +![Configuration interface showing the Diagnostics page](/images/auditor/10.7/access/reviews/admin/configuration/diagnostics.webp) + +When requested by [Netwrix Support](https://www.netwrix.com/support.html), click Download Logs to +download the archive of all application logs. + +## Debug Logs + +When requested by [Netwrix Support](https://www.netwrix.com/support.html) , follow the steps to +provide debug logs. + +**Step 1 –** On the Diagnostics page, check the Enable debug logging box. + +**Step 2 –** Click **Save**. + +**Step 3 –** Reproduce the issue you are having. + +**Step 4 –** On the Diagnostics page, click **Download Logs**. + +The downloaded logs have the debug logging information and can be sent to +[Netwrix Support](https://www.netwrix.com/support.html). When your issue is resolved, do not forget +to turn off Debug logs. diff --git a/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md b/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md new file mode 100644 index 0000000000..ac1c99dcc8 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md @@ -0,0 +1,122 @@ +--- +title: "Notifications Page" +description: "Notifications Page" +sidebar_position: 30 +--- + +# Notifications Page + +The Access Reviews application uses the Simple Mail Transfer Protocol (SMTP) to send email messages. +SMTP server information and several messaging options can be set through the Configuration > +Notifications page. + +![Notifications Page](/images/auditor/10.7/access/reviews/admin/configuration/notifications.webp) + +At the top, the SMTP server and email security settings are configured. The Notification options is +where you configure the sender information, and other optional settings. The Reminders section is +for configuring weekly reminders for owners with outstanding reviews. + +## Configure SMTP Server Settings + +SMTP server information is supplied and modified on the Notifications page. Follow the steps to +configure or modify the SMTP settings. + +![Notifications page SMTP server settings section](/images/auditor/10.7/access/reviews/admin/configuration/notificationssmtp.webp) + +**Step 1 –** In the Configuration interface, select the Notifications page. + +**Step 2 –** Enter the SMTP Server Name in the textbox. This should be the fully qualified domain +name (mail.example.com) or IP Address. + +**Step 3 –** If needed, modify the Port used by your SMTP server to listen for new messages. +Historically, the default for SMTP has been port 25. However, if a secure connection is desired +(SSL/TLS), the SMTPS port needs to be changed, traditionally 465. Alternately, environments with +off-premises or outsourced email service, e.g. gmail.com, hotmail.com, etc., may have to supply a +different submission port, traditionally port 587. Ultimately it is an organization’s +email/messaging administrator who will know the proper value for the SMTP port. + +**Step 4 –** SMTP security settings: + +- Use a secure connection for this server (SSL/TLS) – Allows for the use of a secure transport layer + for message relay requests (submissions) and authentication requests +- Enforce certificate validation to ensure security — Forces the use of certificate validation +- This server requires authentication – Enable if the identified SMTP server requires + authentication. Some SMTP servers traditionally have been configured to deny all but anonymous + relay requests, i.e. an attempt to authenticate results in a denial, while an anonymous request is + not denied. Select this checkbox, and then select one of the following radio buttons if + authentication is required: + + - Use the account running this service + + - To use this option, the SMTP server must be configured to use Integrated Windows + Authentication (IWA). + - Select this radio button if the configured Active Directory service account will also be + used to authenticate to the SMTP server. + + - Use the following AD Account + + - To use this option, the SMTP server must be configured to use Integrated Windows + Authentication (IWA). + - Select this radio button to specify either domain account or a traditional SMTP account + and password to authenticate to the SMTP server. + +![Test Settings window](/images/accessinformationcenter/12.0/admin/configuration/notificationstestsettings.webp) + +**Step 5 –** Click **Test Settings** to ensure a connection to the SMTP server. The Test Settings +window opens. Enter a valid email address and click **OK**. + +![Testing your settings window](/images/accessinformationcenter/12.0/admin/configuration/notificationstestconfirm.webp) + +**Step 6 –** If the SMTP settings are configured correctly, you receive a successful message. Click +**OK** to close the Testing your settings window. The test recipient should have recieved a test +email. + +**Step 7 –** Click **Save**. Then click **OK** to confirm. + +The Access Reviews Console is now configured to send email. See the following topics for additional +Notification options. + +## Notification Options + +Once the SMTP server is configured, there are additional options. Only the Reply-To field must be +populated: + +![Notifications page showing Notification Options section](/images/auditor/10.7/access/reviews/admin/configuration/notificationsoptions.webp) + +- Reply-To — The email address that receives responses to notifications sent by the application. + This can be a “no reply” address. +- Reply-Display — Optionally enter a display name for the sender +- Carbon-Copy — Optionally set additional email addresses to be CC’d on all email messages sent +- Server Name Alias — Optionally provide an alternate name for the URL link to the Access Reviews + Console. By default, the URL is the hosting server name and port, e.g. NEWYORKSRV10:81. If you do + not want the server name visible in the URL, provide an alias here, e.g. AIC.NWXTECH.com. +- Send notifications to all resource owners — This option applies only to resources with multiple + assigned owners. When unchecked, notifications are only sent to the Primary Owner. Check this + option to send owner notifications to all assigned owners. + +_Remember,_ click **Save** after making modifications to the Notification settings. + +## Reminders + +Resource Owners receive notification email when there are new pending tasks associated to their +resources. You can also set up automated weekly reminders for outstanding pending tasks. Follow the +steps to configure weekly reminders to resource owners. + +![Notifications page showing the Reminders section](/images/accessinformationcenter/12.0/admin/configuration/notificationsreminders.webp) + +**Step 1 –** In the Configuration interface, select the Notifications page and scroll down to the +Reminders section. + +**Step 2 –** Check the Send reminders to owners with pending events option. + +**Step 3 –** Set the date and time for when the reminder will be sent: + +- Day of the week – Select the day of the week from the drop-down menu +- Time of day – Click on the field to open a clock window. Set the time of day reminders will be + sent, e.g. 12:00 AM + +**Step 4 –** Click **Save**. Then click **OK** to confirm. + +Assigned resource owners now receive weekly reminders of pending events. The **Notifications were +last sent on** field will populate with the date timestamp for when the last set of reminders were +sent. diff --git a/docs/auditor/10.8/accessreviews/admin/configuration/overview.md b/docs/auditor/10.8/accessreviews/admin/configuration/overview.md new file mode 100644 index 0000000000..a0f94868d8 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/configuration/overview.md @@ -0,0 +1,22 @@ +--- +title: "Configuration Interface Overview" +description: "Configuration Interface Overview" +sidebar_position: 30 +--- + +# Configuration Interface Overview + +The Configuration interface is available only to users with the Administrator role. It is opened by +the **Configuration** tab. + +![Configuration interface showing the Console Access page](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccess.webp) + +It has the following pages: + +- [Console Access Page](/docs/auditor/10.7/accessreviews/admin/configuration/consoleaccess.md) – Grant users console access +- [Active Directory Page](/docs/auditor/10.7/accessreviews/admin/configuration/activedirectory.md) – Configure the Active Directory service account used + to add console users. +- [Notifications Page](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md) – Configure the SMTP server, email security settings, + notification options, and owner reminder settings +- [Database Page](/docs/auditor/10.7/accessreviews/admin/configuration/database.md) – Configure the connection to the database +- [Diagnostics Page](/docs/auditor/10.7/accessreviews/admin/configuration/diagnostics.md) – Download logs and enable debug log level for troubleshooting diff --git a/docs/auditor/10.8/accessreviews/admin/firstlaunch.md b/docs/auditor/10.8/accessreviews/admin/firstlaunch.md new file mode 100644 index 0000000000..807bc2112f --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/firstlaunch.md @@ -0,0 +1,38 @@ +--- +title: "First Launch" +description: "First Launch" +sidebar_position: 10 +--- + +# First Launch + +The installer places the following icon on the desktop which opens the Access Reviews Console: + +![desktopicon](/images/auditor/10.7/access/reviews/admin/desktopicon.webp) + +Use this icon to launch the Access Reviews Console for the first time. + +![Set Builtin Administrator Password page](/images/auditor/10.7/access/reviews/admin/firstlaunchpassword.webp) + +The Access Reviews application is installed with a Builtin Administrator account; "admin" is the +User Name. You will be prompted to set the account's password. It must be eight or more characters +long. After setting the password, you will need to login with the "admin" account. + +Using the Configuration interface, the Builtin Administrator account can be disabled once a domain +account has been granted the Administrator role. You can also change the password for the Builtin +Administrator account. See the +[Modify the Builtin Administrator Account](configuration/consoleaccess.md#modify-the-builtin-administrator-account) +topic for additional information. + +![firstlaunchlandingpage](/images/auditor/10.7/access/reviews/admin/firstlaunchlandingpage.webp) + +The Resource Owners interface opens. The first thing that should be done is to configure console +access for domain users and configure notification settings. Select the Configuration tab. See the +[Console Access Page](/docs/auditor/10.7/accessreviews/admin/configuration/consoleaccess.md) and +[Notifications Page](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md) topics for additional information. + +The interfaces available to console users are controlled by the role assigned. Owners do not need to +be assigned console access. See the [URL & Login](/docs/auditor/10.7/accessreviews/admin/login.md) topic for information on how users will +log in and where they are directed after login. + +See the [Navigation](/docs/auditor/10.7/accessreviews/admin/navigate/navigate.md) topic for information on each of the interfaces. diff --git a/docs/auditor/10.8/accessreviews/admin/login.md b/docs/auditor/10.8/accessreviews/admin/login.md new file mode 100644 index 0000000000..750d91e6e2 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/login.md @@ -0,0 +1,90 @@ +--- +title: "URL & Login" +description: "URL & Login" +sidebar_position: 50 +--- + +# URL & Login + +The Access Reviews Console can be accessed through a supported browser from a machine within your +company's network. The URL is the hosting machine's name and the +port, http://[HOSTNAME.DOMAIN.COM]:81. For example, if the application was installed on a server +named NEWYORKSRV10.NWXTech.com with the default port of 81, the URL would be +http://NEWYORKSRV10.NWXTech.com:81. + +Administrators + +Administrators with access to the server hosting the application can use the desktop icon to launch +the application in their default browser. Alternatively, the localhost URL can be used: + +- HTTP URL + + - http://localhost:81 + +- HTTPS URL + + - https://localhost:481 + +Remote Access + +Since Access Reviews is a browser-based application, it is possible to access the web interface +remotely. It is up to the Administrator to provide users with the correct URL for access. + +Depending on your network environment, you may need to use the NetBIOS name, FQDN, or IP Address of +the hosting server in the browser. Also, additional configurations by network and system +administrators may be necessary to make the web server accessible to remote users (firewall +configurations, DNS settings, etc.). + +The server name in the URL can be replaced with an alias. See the +[Notification Options](configuration/notifications.md#notification-options) topic for additional +information. + +## Login Page + +Users login with their domain credentials. If only one domain is known to the Access Reviews +Console, the credentials need only be username and password. If multiple domains are known, then the +username needs to be entered in the `domain\username` format. + +**NOTE:** The URL may need to be added to the browser’s list of trusted sites. + +![Access Information Center Login page](/images/auditor/10.7/access/reviews/admin/login.webp) + +The interface a user arrives at depends upon the assigned role or lack of assigned role. + +## User Landing Page + +Role based access controls what interfaces users can see and where each user is directed upon login. + +**_RECOMMENDED:_** Send an email to your users. Let them know why you are implementing use of the +application, provide the URL, and explain how to login with their domain credentials and the +username format. See the +[Enable Console Users](/docs/auditor/10.7/accessreviews/accessreviews.md#enable-console-users) topic for additional +information. + +### Administrator Role + +Users granted the Administrator role are directed to the Resource Owners interface upon login. + +![Resource Owners interface as the landing page for an Administrator user](/images/auditor/10.7/access/reviews/admin/landingadmin.webp) + +Administrators are the only ones with access to the Configuration interface. The My Reviews +interface is available if the logged in user is also assigned ownership of a resource. + +### Security Team Role + +Users granted the Security Team role are directed to the Resource Owners interface upon login. + +![Resource Owners interface as the landing page for a Security Team user](/images/auditor/10.7/access/reviews/admin/landingsecurityteam.webp) + +Security Team members only lack access to the Configuration interface, which is only available to +Administrators. The My Reviews interface is available if the logged in user is also assigned +ownership of a resource. + +### Owners Without Role + +Users assigned ownership of a resource but not granted a user role are directed to the My Reviews +interface upon login. + +![My Reviews interface as the landing page for an Owner without a user role](/images/auditor/10.7/access/reviews/admin/landingowner.webp) + +Owners can view pending reviews and view historical reviews. diff --git a/docs/auditor/10.8/accessreviews/admin/navigate/_category_.json b/docs/auditor/10.8/accessreviews/admin/navigate/_category_.json new file mode 100644 index 0000000000..fb70262fe5 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/navigate/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Navigation", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "navigate" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/accessreviews/admin/navigate/datagrid.md b/docs/auditor/10.8/accessreviews/admin/navigate/datagrid.md new file mode 100644 index 0000000000..aa531608c8 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/navigate/datagrid.md @@ -0,0 +1,77 @@ +--- +title: "Data Grid Features" +description: "Data Grid Features" +sidebar_position: 10 +--- + +# Data Grid Features + +The data grids within various tables have several features to improve your experience. + +## Search & Filter + +There is a Search box above a table's header row that can be used to filter the table data. + +![Search box above a table header row](/images/accessinformationcenter/12.0/general/tablesearch.webp) + +Begin typing in the Search box. The filter acts as a wildcard, filtering the table data as you type. + +## Column Filters + +There is a filter icon to the right of each column name that can be used to apply a column specific +filter. You can apply filters to multiple columns simultaneously. + +![tablecolumnfilter](/images/accessinformationcenter/12.0/general/tablecolumnfilter.webp) + +Click the filter icon for the column you want to filter. Select the values you want to filter for +from the list, and click **Apply**. + +**NOTE:** Hold the **Shift** key and click the first and last values to select a group of adjacent +values, or hold the **Ctrl** key and click each value to select multiple values individually. + +![tablecolumnfilterclear](/images/accessinformationcenter/12.0/general/tablecolumnfilterclear.webp) + +The filter icon is highlighted orange for a column where a filter is applied. To clear an applied +filter, click the filter icon and click **Clear**. + +## Resize Columns + +Table column widths can be resized to change the width. + +![Table header showing column line to be used to resize the column](/images/accessinformationcenter/12.0/general/tableresize.webp) + +Simply select the edges of the column headers and drag to the desired width. + +## Sort + +Data within a table can be sorted alphanumerically for a column. + +![Table column header showing arrow indicating ascending sort](/images/accessinformationcenter/12.0/general/tablesort.webp) + +Click on any column header. An arrow will appear next to the column name indicating the sort to be +ascending or descending order. + +## Columns Selector + +Columns can be hidden or unhidden. Available columns for a table are listed in the column selector +menu that appears when you right-click on a column header. + +![Column selector menu showing a hidden column](/images/accessinformationcenter/12.0/general/tablecolumns.webp) + +The column selector menu shows all available columns for the table. Check columns are visible. +Unchecked columns are hidden. + +## Exports + +There are two export buttons above a table's header row that can be used to export the data +currently displayed within the table. + +![Export buttons at the top of a table](/images/accessinformationcenter/12.0/general/tableexports.webp) + +- CSV Export – Downloads the data within the table in a CSV file format +- Excel Export – Downloads the data within the table in an Excel file format + +The export mimics the table with any sort, filter, or column modifications. The Excel or CSV file +can then be distributed as desired. The Excel file presents an easy to read format, including +information about the selected table and resource at the top. The CSV file displays column headers +in the first row. diff --git a/docs/auditor/10.8/accessreviews/admin/navigate/editnotes.md b/docs/auditor/10.8/accessreviews/admin/navigate/editnotes.md new file mode 100644 index 0000000000..e58e9797e9 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/navigate/editnotes.md @@ -0,0 +1,20 @@ +--- +title: "Edit Notes Window" +description: "Edit Notes Window" +sidebar_position: 20 +--- + +# Edit Notes Window + +The Edit Note window can be opened from a variety of interfaces. Follow the steps to add or edit a +note. + +**Step 1 –** Select the item in the interface and click Edit Notes. The Edit Notes window opens. + +![Edit Notes window showing note entry field](/images/accessinformationcenter/12.0/general/editnotes.webp) + +**Step 2 –** Type or edit the note in the textbox. + +**Step 3 –** Click OK when finished. The Edit Notes window closes. + +The user name and a date timestamp will appear at the beginning of each note added. diff --git a/docs/auditor/10.8/accessreviews/admin/navigate/navigate.md b/docs/auditor/10.8/accessreviews/admin/navigate/navigate.md new file mode 100644 index 0000000000..1b1c0781e7 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/navigate/navigate.md @@ -0,0 +1,64 @@ +--- +title: "Navigation" +description: "Navigation" +sidebar_position: 20 +--- + +# Navigation + +The Access Reviews Console has four interfaces. Upon login, users granted console access are brought +to the Resource Owners interface. + +![Access Information Center landing page, Resource Owners interface, with all 4 tabs available to an Administrator who is also an assigned owner](/images/auditor/10.7/access/reviews/admin/interface.webp) + +The signed in user is displayed in the upper-right corner, along with the **Sign out** link. The +available interfaces change according to the role assigned to the user. + +For Administrator Only + +The Configuration tab opens the Configuration interface. Configure console access, Active Directory +service account, notification settings, database access, and diagnostic logging level. + +This interface is available only to users with the Administrator role. See the +[Configuration Interface Overview](/docs/auditor/10.7/accessreviews/admin/configuration/overview.md) topic for additional information. + +For Security Team & Administrator + +The Resource Owners tab opens the Resource Owners interface. Manage resource ownership by assigning +owners to resources and requesting ownership confirmation. Resources to be included in the Access +Reviews workflow must first be assigned at least one owner within the Resource Owners interface. +Assigned owners can log in to complete reviews. + +This interface is available only to users with either the Security Team or Administrator role. See +the [Resource Owners Interface](/docs/auditor/10.7/accessreviews/resourceowners/interface/interface.md) topic for additional information. + +The Entitlement Reviews tab opens the Entitlement Reviews interface. Create and manage reviews. +There are two types of reviews for resources being managed within the Access Reviews application: +resource Access reviews and group Membership reviews. This does require the Access Reviews +application to be configured to send notifications. + +This interface is available only to users with either the Security Team or Administrator role. See +the [Entitlement Reviews Interface](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md) topic for additional +information. + +For Assigned Owner + +The My Reviews tab opens the My Reviews interface. It is only visible if the logged in user is also +an assigned owner of at least one resource. Assigned owners without a user role are directed to the +My Reviews interface at login. + +The My Reviews interface is available to any domain user who has been assigned ownership of a +resource. See the [Owners & Access Reviews](/docs/auditor/10.7/accessreviews/owneroverview/owneroverview.md) topic for additional +information. + +## Interface Quick Reference + +The table below is a quick reference aligning each interface with its purpose, how to access it, and +who has access to it: + +| Interface | Purpose | Opened By | Accessible To | +| ------------------- | --------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------- | ------------------------------------- | +| Configuration | Configure console access, Active Directory service account, notification settings, database access, and diagnostic logging level. | **Configuration** tab | Administrator role | +| Resource Owners | Manage resource ownership by assigning owners to resources and requesting ownership confirmation. | **Resource Owners** tab | Administrator role Security Team role | +| Entitlement Reviews | Create and manage reviews. | **Entitlement Reviews** tab | Administrator role Security Team role | +| My Reviews | View and process pending reviews. Also view historical reviews. | **My Reviews** tab Direct from login for owners without a role | Assigned Resource Owners | diff --git a/docs/auditor/10.8/accessreviews/admin/overview.md b/docs/auditor/10.8/accessreviews/admin/overview.md new file mode 100644 index 0000000000..fdb5cd5df1 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/overview.md @@ -0,0 +1,18 @@ +--- +title: "Administrator Overview" +description: "Administrator Overview" +sidebar_position: 20 +--- + +# Administrator Overview + +Access Reviews administrators have access to the Configuration interface where there application +settings reside. This topic includes the following subtopics: + +- [Getting Started](/docs/auditor/10.7/accessreviews/accessreviews.md#getting-started) +- [First Launch](/docs/auditor/10.7/accessreviews/admin/firstlaunch.md) +- [Navigation](/docs/auditor/10.7/accessreviews/admin/navigate/navigate.md) +- [Configuration Interface Overview](/docs/auditor/10.7/accessreviews/admin/configuration/overview.md) +- [Additional Configuration Options](/docs/auditor/10.7/accessreviews/admin/additionalconfig/overview.md) +- [URL & Login](/docs/auditor/10.7/accessreviews/admin/login.md) +- [Troubleshooting](/docs/auditor/10.7/accessreviews/admin/troubleshooting/overview.md) diff --git a/docs/auditor/10.8/accessreviews/admin/troubleshooting/_category_.json b/docs/auditor/10.8/accessreviews/admin/troubleshooting/_category_.json new file mode 100644 index 0000000000..9f3d281f3b --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/troubleshooting/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Troubleshooting", + "position": 60, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/accessreviews/admin/troubleshooting/credentialpasswords.md b/docs/auditor/10.8/accessreviews/admin/troubleshooting/credentialpasswords.md new file mode 100644 index 0000000000..e65e53eb51 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/troubleshooting/credentialpasswords.md @@ -0,0 +1,56 @@ +--- +title: "Update Credential Passwords" +description: "Update Credential Passwords" +sidebar_position: 30 +--- + +# Update Credential Passwords + +Credential passwords occasionally need to be updated due to various reasons, such as security +policies that require passwords to be reset on a regular basis. The following types of credentials +may be impacted by password changes or security policies: + +- Database service account +- Active Directory service account +- SMTP authentication service account +- Application Service Account +- Bultin Administrator account + +## Database Service Account + +The Database service account grants access to the SQL Server database. It can be updated on the +Database page of the Configuration interface. See the +[Update the Database Service Account Password](/docs/auditor/10.7/accessreviews/admin/configuration/database.md#update-the-database-service-account-password) +topic for instructions. + +## Active Directory Service Account + +The Active Directory service account handles user authentication to the Access Reviews Console. It +can be updated on the Active Directory page of the Configuration interface. See the +[Update the Active Directory Service Account Password](/docs/auditor/10.7/accessreviews/admin/configuration/activedirectory.md#update-the-active-directory-service-account-password) +topic for instructions. + +## SMTP Authentication Service Account + +An SMTP server is required for the application to send notifications. If the SMTP server requires +authentication, the service account can be updated on the Notifications page of the Configuration +interface. See the +[Configure SMTP Server Settings](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md#configure-smtp-server-settings) +topic for instructions. + +## Application Service Account + +The account used to run the Netwrix Auditor Access Reviews service can be updated using Services +Control Manager console. See the +[Modify the Service Account via Service Control Manager](serviceaccount.md#modify-the-service-account-via-service-control-manager) +topic for instructions. + +## Builtin Administrator Account + +The Builtin Administrator account is an application account that is created during the first launch. +It is used to complete the initial configuration steps and to grant console access to domain users. +This account can be disabled after Administrator users are added. However, if it is enabled and a +security policy requires the password to be reset, it can be updated on the Console Access page of +the Configuration interface. See the +[Modify the Builtin Administrator Account](/docs/auditor/10.7/accessreviews/admin/configuration/consoleaccess.md#modify-the-builtin-administrator-account) +topic for modification instructions. diff --git a/docs/auditor/10.8/accessreviews/admin/troubleshooting/loglevel.md b/docs/auditor/10.8/accessreviews/admin/troubleshooting/loglevel.md new file mode 100644 index 0000000000..bf5b6f4118 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/troubleshooting/loglevel.md @@ -0,0 +1,37 @@ +--- +title: "Change Log Level" +description: "Change Log Level" +sidebar_position: 10 +--- + +# Change Log Level + +The `AccessInformationCenter.Service.exe.Config` file is located in the `Logs` folder of the Access +Reviews installation directory: + +...\Netwrix\Access Reviews + +Follow the steps to modify the log level. + +**Step 1 –** Open the `AccessInformationCenter.Service.exe.Config` file in a text editor, e.g. +Notepad. + +![AccessInformationCenter.Service.exe.Config file in Notepad](/images/auditor/10.7/access/reviews/admin/troubleshooting/logvalue.webp) + +**Step 2 –** The level value is set in the `LogLevel` parameter, where "2" is the default level. As +the logging level increases from 0 to 3, the types of information and level of detail included +within the log file also increase. Change to the desired log level: + + + +- Error level is when `value="0"` +- Warning level is when `value="1"` +- Info level is when `value="2"` +- Debug level is when `value="3"` + + - Debug logging can be enabled from the Diagnostics page of the Configuration interface + +**Step 3 –** Save and close the `AccessInformationCenter.Service.exe.Config` file. + +Once troubleshooting has finished, it is recommended to return the log level to the default level, +Info = 2, to prevent the log file from growing too large. diff --git a/docs/auditor/10.8/accessreviews/admin/troubleshooting/overview.md b/docs/auditor/10.8/accessreviews/admin/troubleshooting/overview.md new file mode 100644 index 0000000000..f48f2fc114 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/troubleshooting/overview.md @@ -0,0 +1,39 @@ +--- +title: "Troubleshooting" +description: "Troubleshooting" +sidebar_position: 60 +--- + +# Troubleshooting + +The following are several troubleshooting tips that can assist with diagnosing trouble with the +Access Reviews application. If engaging with +[Netwrix Support](https://www.netwrix.com/support.html), it will be useful to be aware of these. + +Configuration of Permissions on the Installation Directory: + +The Windows service account running the Netwrix Auditor Access Reviews service may be used as the +Database service account, the Active Directory service account, and/or the SMTP authentication +account. Check the Database, Active Directory, and Notification pages in the Configuration interface +to confirm where the account is in use before modifying it to ensure these functionality are not +impaired. If this account is changed, a new account must have the **Full Control** permission to +files and folders in the Access Reviews installation directory. See the +[Application Service Account](/docs/auditor/10.7/accessreviews/admin/troubleshooting/serviceaccount.md) topic for additional information. + +Log File: + +By default the Access Reviews application is configured to log at the Info level. When requested by +Netwrix Support, you can enable Debug level from the Diagnostics page of the Configuration +interface. See the [Diagnostics Page](/docs/auditor/10.7/accessreviews/admin/configuration/diagnostics.md) topic for additional +information. + +If a different log level is needed or desired, the `aic.log` file can be modified. See the +[Change Log Level](/docs/auditor/10.7/accessreviews/admin/troubleshooting/loglevel.md) topic for additional information. + +Credential Password Changes: + +The Access Reviews application uses several different types of service accounts. If a credential +password for one of these accounts is no longer valid, it will impact application functionality. +Additionally, if the Builtin Administrator account remains enabled, it may be necessary to reset the +password. See the [Update Credential Passwords](/docs/auditor/10.7/accessreviews/admin/troubleshooting/credentialpasswords.md) topic for additional +information. diff --git a/docs/auditor/10.8/accessreviews/admin/troubleshooting/serviceaccount.md b/docs/auditor/10.8/accessreviews/admin/troubleshooting/serviceaccount.md new file mode 100644 index 0000000000..d67ab2718e --- /dev/null +++ b/docs/auditor/10.8/accessreviews/admin/troubleshooting/serviceaccount.md @@ -0,0 +1,48 @@ +--- +title: "Application Service Account" +description: "Application Service Account" +sidebar_position: 20 +--- + +# Application Service Account + +The Windows service account running the Netwrix Auditor Access Reviews service may be used as the +Database service account, the Active Directory service account, and/or the SMTP authentication +account. Check the Database, Active Directory, and Notification pages in the Configuration interface +to confirm where the account is in use before modifying it to ensure these functionality are not +impaired. If the same account is being used for multiple purposes, it will require the proper +permissions for each purpose. + +It may become necessary (for testing purposes, infrastructure changes, etc.) to change the Windows +account set to run the Netwrix Auditor Access Reviews service. The following step-by-step +instructions are for modifying this account within the Services Control Manager console. + +**CAUTION:** The account assigned to run the Netwrix Auditor Access Reviews service must have Full +Control over the installation directory: + +...\Netwrix\Access Reviews + +## Modify the Service Account via Service Control Manager + +Follow the steps to enable and/or modify the Windows service account running the Netwrix Auditor +Access Reviews service. + +**Step 1 –** Navigate to Service Control Manager (`services.msc`). The Services Control Manager +opens. + +![Services Manager Console showing the Netwrix Access Information Center service and the right-click Menu](/images/auditor/10.7/access/reviews/admin/troubleshooting/servicesmanager.webp) + +**Step 2 –** Right-click on the Netwrix Auditor Access Reviews service and select **Properties**. +The service Properties window opens. + +![Netwrix Access Information Center service Properties window with Select User browser window](/images/auditor/10.7/access/reviews/admin/troubleshooting/serviceproperties.webp) + +**Step 3 –** On the **Log On** tab, select the **This account** radio button. Enter the account name +using NTAccount format [```DOMAIN\username```]. Optionally, use the **Browse** button to search for +the account. Enter the account's password in both the **Password** and **Confirm password** fields. +Then click **OK**. The Properties window closes. + +**Step 4 –** The selected account is displayed in the Log On As column for the service. Either +Restart or Stop and Start the service for this change to take affect. + +The Netwrix Auditor Access Reviews service is now running with the supplied Windows account. diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/_category_.json b/docs/auditor/10.8/accessreviews/entitlementreviews/_category_.json new file mode 100644 index 0000000000..2e34d68871 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Reviews Overview", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/_category_.json b/docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/_category_.json new file mode 100644 index 0000000000..a01f573575 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Approval Process", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "approvalprocess" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/approvalprocess.md b/docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/approvalprocess.md new file mode 100644 index 0000000000..9384b1a312 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/approvalprocess.md @@ -0,0 +1,78 @@ +--- +title: "Approval Process" +description: "Approval Process" +sidebar_position: 30 +--- + +# Approval Process + +After all owners assigned to a specific review have submitted their review, its status on the Manage +Reviews page of the Entitlement Reviews interface changes to Responses awaiting review. + +![Resource Reviews interface showing Manage Reviews page](/images/auditor/10.7/access/reviews/entitlementreviews/managereviewspage.webp) + +In the approval process, the Review Administrator looks at the owner-recommended changes and chooses +to approve, deny, or defer the changes. + +See the Process Owner Responses topic for instructions on how to perform a granular review of +owner-recommended changes. See the Batch Processing topic for instructions on how to approve, +decline, or defer all owner-recommended changes for a review. + +## Process Owner Responses + +Follow the steps to perform a granular review of a resource owner's recommended changes. + +**Step 1 –** On the Manage Reviews page, select a review and click **View Details**. The Review +Details page opens. + +![Resource Reviews interface showing the Review Details page](/images/auditor/10.7/access/reviews/entitlementreviews/reviewdetailspage.webp) + +**Step 2 –** Select a resource in the list and click **View Responses**. The View Responses window +opens. + +![viewresponses](/images/accessinformationcenter/12.0/resourcereviews/viewresponses.webp) + +**Step 3 –** By default, the table displays only the recommended changes. Select an item and click +the desired action button: Accept, Decline, or Defer. The Approval column icon updates. See the +[View Responses Window](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/viewresponses.md) topic for additional information. + +**Step 4 –** Repeat Step 3 until all changes have been processed. Then click **Close**. The View +Responses window closes. + +**Step 5 –** Repeat Steps 2-4 for each resource included in the review. + +**Step 6 –** Remediation of the accepted changes must be done manually. Accepted changes must be +implemented outside of the application by your IT department. Use the **Export Excel** or **Export +CSV** buttons to generate and download an export of accepted changes. + +**Step 7 –** When remediation is complete, return to the Mange Reviews page (click on the +breadcrumb). Select the review in the list and click **Mark Completed**. + +The review remains marked as Completed until the next instance is started. + +## Batch Processing + +Follow the steps to perform a batch processing of a resource owner's recommended changes. + +**Step 1 –** On the Manage Reviews page, select a review and click **View Details**. The Review +Details page opens. . + +![Resource Reviews interface showing the Review Details page](/images/auditor/10.7/access/reviews/entitlementreviews/reviewdetailspage.webp) + +**Step 2 –** Select a resource in the list and open the **Process Changes** drop-down menu. + +**Step 3 –** Select the desired action for all recommended changes: Accept, Decline, or Defer. + +_Remember,_ all recommended changes for the selected resource will be processed with the same +resolution. + +**Step 4 –** Repeat Steps 2-3 for each resource included in the review. + +**Step 5 –** Remediation of the accepted changes must be done manually. Accepted changes must be +implemented outside of the application by your IT department. Use the **Export Excel** or **Export +CSV** buttons to generate and download an export of accepted changes. + +**Step 6 –** When remediation is complete, return to the Mange Reviews page (click on the +breadcrumb). Select the review in the list and click **Mark Completed**. + +The review remains marked as Completed until the next instance is started. diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/removechanges.md b/docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/removechanges.md new file mode 100644 index 0000000000..c5066eb0cf --- /dev/null +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/removechanges.md @@ -0,0 +1,18 @@ +--- +title: "Remove Changes Window" +description: "Remove Changes Window" +sidebar_position: 10 +--- + +# Remove Changes Window + +Select the desired resource on a Review Details page and click **Remove Changes**. The Remove +changes window opens to confirm the action. + +![Remove changes window](/images/accessinformationcenter/12.0/general/removechanges.webp) + +**CAUTION:** This will clear all owner-recommended changes and notes for the resource. The owner +will be required to complete the review again. + +Click Yes to clear owner-recommended changes. Click No to cancel it. The Remove changes window +closes. diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/create/_category_.json b/docs/auditor/10.8/accessreviews/entitlementreviews/create/_category_.json new file mode 100644 index 0000000000..c4da29b5da --- /dev/null +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/create/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Create Review Wizard", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "create" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/create/create.md b/docs/auditor/10.8/accessreviews/entitlementreviews/create/create.md new file mode 100644 index 0000000000..8d041ebf30 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/create/create.md @@ -0,0 +1,88 @@ +--- +title: "Create Review Wizard" +description: "Create Review Wizard" +sidebar_position: 20 +--- + +# Create Review Wizard + +The Create Review wizard is opened with the **Create** button on the Entitlement Reviews interface. +See the [Manage Reviews Page](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md#manage-reviews-page) topic for additional information. + +![Create Review wizard](/images/auditor/10.7/access/reviews/entitlementreviews/wizard/createreviewreviewtype.webp) + +It contains three pages: + +- 1. Review Type + + - Review Name — Visible only to Review Administrators + - Select the type of review to be created: + + - Membership – Review group membership + - Access – Review user access rights to resources + +- 2. Resources — Select resources to be included in the review +- 3. Summary + + - Preview of the review selections + - Provides a status of the action being committed. Action includes creating the review and + sending notifications to owners. + +See the Create a Review topic for additional information. + +## Create a Review + +Follow the steps to create a review. + +**Step 1 –** On the Manage Reviews page, click Create. The Create Review wizard opens. + +![Create Review wizard showing the Review Type page](/images/auditor/10.7/access/reviews/entitlementreviews/wizard/createreviewreviewtype.webp) + +**Step 2 –** On the Review Type page, provide the following information and click **Next**: + +- Review Name — Enter a unique, descriptive name for the review. The review name is only visible to + Review Administrators. +- Select Type — Reviews are limited to one type. Select the type of review from the buttons + provided: + + - Membership – Review group membership + - Access – Review user access rights to resources + +![Create Review wizrd showing the Resources page](/images/auditor/10.7/access/reviews/entitlementreviews/wizard/createreviewresources.webp) + +**Step 3 –** On the Resources page, select the resources to be included in the review. The Search +feature is available to filter the list of available resource that match the type of review being +created. + +- The table displays the following information: + + - Resources — The icon indicates the type of resource. The resource name includes its location, + such as the UNC path for a file system resource, the URL for SharePoint resource, or Group + name (e.g., [Domain]\[Group]). + - Description — Description or explanation of the resource as supplied by either the Ownership + Administrator or the assigned owner + - Reviewer — Primary owner assigned to the resource + - Confirmed — Indicates whether or not the assigned owner has confirmed ownership of that + resource. Tool-tips display when hovering over the icons indicating whether the resource + ownership has been confirmed, declined, pending response, or that a confirmation has not been + requested. + - Scan Data — A checkmark indicates the resource has been scanned. Only resources with scan data + can be included in a review. + +- Select the desired resource(s) and click **Add**. The **View Selections** button indicates how + many resources have been selected. Click the button to open the Selected Resources window, where + you can view and modify the selections. See the + [Selected Resources Window](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/selectedresources.md) topic for additional information. +- Once the desired resources have been selected, click **Next**. + +![Create Review wizard showing the Summary page](/images/auditor/10.7/access/reviews/entitlementreviews/wizard/createreviewsummary.webp) + +**Step 4 –** On the Summary page, review the settings and click Finish. The Access Reviews begins to +create the review. Action status displays on the page. When the update has completed (100%), click +Close. The Create Review wizard closes. + +The new review displays in the table on the Manage Reviews page. An email was sent to the primary +owner assigned to the resource(s) in this review. By default, the application is configured to send +notifications only to the primary owner. However, this can be customized on the Configuration > +Notifications page to send notifications to all assigned owners. See the +[Notifications Page](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md) topic for additional information. diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/create/reviewinstances.md b/docs/auditor/10.8/accessreviews/entitlementreviews/create/reviewinstances.md new file mode 100644 index 0000000000..9b2131d8e6 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/create/reviewinstances.md @@ -0,0 +1,21 @@ +--- +title: "Review Instances" +description: "Review Instances" +sidebar_position: 10 +--- + +# Review Instances + +After a review has been completed, it can be run again, which creates multiple instances of the +review. Each instance is identified by date timestamps indicating its start and end times. + +**_RECOMMENDED:_** Prior to running another review instance, ensure the most up to date information +is available to owners for review. + +![Entitlement Reviews interface showing the Manage Review page](/images/auditor/10.7/access/reviews/entitlementreviews/managereviewspage.webp) + +On the Manage Reviews page in the Entitlement Reviews interface, a review with a Completed status +can be started again. Select the review and click **Run Again**. The Create Review wizard opens +without the Review Type page. The review can be run as-is by navigating through the wizard with the +**Next** buttons, or you can modify as desired. Completing the wizard process restarts the review. +See the [Create Review Wizard](/docs/auditor/10.7/accessreviews/entitlementreviews/create/create.md) topic for additional information. diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/_category_.json b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/_category_.json new file mode 100644 index 0000000000..021c911889 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Entitlement Reviews Interface", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "interface" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/deletereview.md b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/deletereview.md new file mode 100644 index 0000000000..b06577809e --- /dev/null +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/deletereview.md @@ -0,0 +1,39 @@ +--- +title: "Delete Review Window" +description: "Delete Review Window" +sidebar_position: 10 +--- + +# Delete Review Window + +The Delete Review window opens from either the +[Manage Reviews Page](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md#manage-reviews-page) or the +[Review Details Page](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md#review-details-page) of the Entitlement Reviews interface: + +- Delete Entire Review — Deleting a review from the Manage Reviews page will delete all instances of + the selected review +- Delete Review Instance — Deleting a review from the Review Details page will delete the selected + review instance + +## Delete Entire Review + +Select the desired review on the Manage Reviews page and click **Delete**. The Delete Review window +opens to confirm the action. + +![Delete Review window](/images/accessinformationcenter/12.0/resourcereviews/window/deletereviewentire.webp) + +**CAUTION:** This will delete all instances of the selected review and all historical data +associated with it. + +Click **Yes** to complete the deletion. Click **No** to cancel it. The Delete Review window closes. + +## Delete Review Instance + +Select the desired review instance from the drop-down menu on the Review Details page and click +**Delete**. The Delete Review window opens to confirm the action. + +![Delete Review window](/images/accessinformationcenter/12.0/resourcereviews/window/deletereviewinstance.webp) + +**CAUTION:** This will delete all historical data associated to the selected review instance. + +Click **Yes** to complete the deletion. Click **No** to cancel it. The Delete Review window closes. diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md new file mode 100644 index 0000000000..20fc8886ea --- /dev/null +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md @@ -0,0 +1,132 @@ +--- +title: "Entitlement Reviews Interface" +description: "Entitlement Reviews Interface" +sidebar_position: 10 +--- + +# Entitlement Reviews Interface + +The Entitlement Reviews interface opened by the Entitlement Reviews tab is where Review +Administrators perform many operations around managing reviews. This interface has multiple pages: + +- Manage Reviews Page — Create and manage all reviews +- Review Details Page — Manage and view all instances for a specific review + +## Manage Reviews Page + +The Manage Reviews page is the first page in the Entitlement Reviews interface. It displays +high-level information for reviews. + +![Entitlement Reviews interface showing Manage Reviews page](/images/auditor/10.7/access/reviews/entitlementreviews/managereviewspage.webp) + +The interface includes: + +- Table of reviews +- Daily Review Responses line graph +- Active Review Status donut graph + +The information displayed in the table includes: + +- Name — Name of the review, as provided by the Review Administrator +- Type — Type of review: + + - Access – Review user access rights to resources + - Membership – Review group membership + +- Status — Status of the review: + + - Status bar with specified percentage completed + + - [Empty bar] 0% – Indicates not started. Hovering over the bar will display the number of + items included. + - [Partially filled bar] with a non-zero% – Indicates the specific percentage of items + completed. Hovering over the bar displays the number of items completed out of the total + number of items. + + - Responses awaiting review — Owner(s) completed reviews. Waiting on Review Administrator's + approval. + - All responses processed — Reviews have been approved by Review Administrators. The review can + be marked as completed. + - Stopped — Indicates that the review was stopped and is considered complete even if all of the + responses have not been received or processed. The review remains static until it is run + again. + - Completed — Indicates the Review Administrator has processed the owners' responses. The review + remains static until it is run again. This status can appear by accepting the review as-is + with the Mark Completed button. + +- Created By — Name of the Review Administrator who create the review +- Created On — Date timestamp for when the review was creation. If it has been run multiple times, + this is the date timestamp of the last instance. +- Finished On — Date timestamp when the review is marked complete by the Review Administrator. If it + has been run multiple times, this is the date timestamp of the last instance. + +The table data grid functions the same way as other table grids. See the +[Data Grid Features](/docs/auditor/10.7/accessreviews/admin/navigate/datagrid.md) topic for additional information. + +The buttons at the bottom enable you to conduct the following actions: + +| Button | Description | +| -------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Create | Launches the Create Review wizard for creating a new review. See the [Create Review Wizard](/docs/auditor/10.7/accessreviews/entitlementreviews/create/create.md) topic for additional information. | +| Rename | Opens the Rename Review window for modifying the review name. See the [Rename Review Window](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/renamereview.md) topic for additional information. | +| Delete | Opens the Delete Review window to delete review and its instance history, which asks for confirmation of the action. See the [Delete Review Window](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/deletereview.md) topic for additional information. | +| Stop | Opens the Stop Review window, which asks for confirmation of the action. See the [Stop Review Window](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/stopreview.md) topic for additional information. | +| View Details | Opens the Review Details page for the selected review. See the Review Details Page topic for additional information. | +| Mark Completed | Closes the selected review as-is and marks it as completed. Requires the owner(s) to have responded. **CAUTION:** No confirmation is requested for this action. | +| Run Again | Opens the Create Review wizard for the selected review without the option to change the review type. Modify as desired and relaunch the review. See the [Review Instances](/docs/auditor/10.7/accessreviews/entitlementreviews/create/reviewinstances.md) topic for additional information. | +| Send Reminders | Sends a notification email to the assigned owner(s), reminding of the pending review. Opens the Send Reminders window, which indicates an action status. See the [Send Reminders Window](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/sendreminders.md) topic for additional information. | + +## Review Details Page + +The Review Details page displays information for all instances of the selected review, which is +named in the page breadcrumb. This page is opened by selecting a review on the Manage Reviews page +and clicking **View Details**. + +![Entitlement Reviews interface showing the Review Details page](/images/auditor/10.7/access/reviews/entitlementreviews/reviewdetailspage.webp) + +Instances are selected from the drop-down menu. By default the most current instance will be +displayed. Instances are named with date timestamps indicating the start and end times for the +review instance. + +The information displayed in the table includes: + +- Resource Name — The icon indicates the type of resource. The resource name includes its location, + such as the UNC path for a file system resource, the URL for SharePoint resource, or Group name + (e.g., [Domain]\[Group]). +- Reviewer Name — Primary owner assigned to the resource +- Review Status — Indicates whether or not the assigned owner has submitted the review. Tool-tips + display when hovering over the icons. +- Review Changes — Displays a count of items that have recommended changes for the resource +- Review Time — Date timestamp for when the owner submitted the review +- Approval Status — Status of the Review Administrator's approval: + + - Blank — Indicates the owner has not completed the review for the resource + - Status bar with specified percentage completed + + - [Empty bar] 0% – Indicates not started. Hovering over the bar will display the number of + items included. + - [Partially filled bar] with a non-zero% – Indicates the specific percentage of items + completed. Hovering over the bar displays the number of items completed out of the total + number of items. + + - Completed — Indicates the Review Administrator has processed the owners' responses. The review + remains static until it is run again. + +- Approval Notes – Icon indicates a Note has been added. Click on the icon to read the attached + note(s). Notes displayed here can only be added or viewed by the Review Administrator. See the + [Edit Notes Window](/docs/auditor/10.7/accessreviews/admin/navigate/editnotes.md) topic for additional information. + +The table data grid functions the same way as other table grids. See the +[Data Grid Features](/docs/auditor/10.7/accessreviews/admin/navigate/datagrid.md) topic for additional information. + +The buttons at the top and bottom enable you to conduct the following actions: + +| Button | Description | +| --------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Delete | Opens the Delete Review window to delete selected review instance, which asks for confirmation of the action. See the [Delete Review Window](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/deletereview.md) topic for additional information. | +| Export Excel | Exports the selected review instance information to an Excel spreadsheet. This automatically downloads the spreadsheet. See the [Data Grid Features](/docs/auditor/10.7/accessreviews/admin/navigate/datagrid.md) topic for additional information. | +| Export CSV | Exports the selected review instance information to a CSV file. This automatically downloads the file. See the [Data Grid Features](/docs/auditor/10.7/accessreviews/admin/navigate/datagrid.md) topic for additional information. | +| Edit Notes | Opens the Edit Notes window for the selected resource and allows free-text editing of the notes. See the [Edit Notes Window](/docs/auditor/10.7/accessreviews/admin/navigate/editnotes.md) topic for additional information. | +| View Responses | Opens the View Responses window, which is only available if the owner has recommended changes for the resource. This window displays all recommended changes, notes provided by the owner for the recommended change, and action buttons to Accept, Decline, or Defer the recommended change. See the [View Responses Window](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/viewresponses.md) topic for additional information. | +| Process Changes | Opens a drop-down menu to Accept, Decline, or Defer all owner-recommended changes for the selected resource. This option allows the Review Administrator to process responses in batches, so all owner-recommended changes for the selected resource will be processed with the same action. | +| Remove Changes | Opens the Remove changes window. Clears all requested changes for the selected resource. The resource is returned to a ‘Waiting’ status, requiring the owner to review the resource again. See the [Remove Changes Window](/docs/auditor/10.7/accessreviews/entitlementreviews/approvalprocess/removechanges.md) topic for additional information. | diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/renamereview.md b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/renamereview.md new file mode 100644 index 0000000000..5464377854 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/renamereview.md @@ -0,0 +1,20 @@ +--- +title: "Rename Review Window" +description: "Rename Review Window" +sidebar_position: 20 +--- + +# Rename Review Window + +The Rename Review window opens from the [Manage Reviews Page](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md#manage-reviews-page) +of the Entitlement Reviews interface. Follow the steps to rename a review. + +**Step 1 –** Select the review and click **Rename**. The Rename Review window opens. + +![Rename Review window](/images/accessinformationcenter/12.0/resourcereviews/window/renamereview.webp) + +**Step 2 –** Edit the review name in the textbox. + +**Step 3 –** Click **OK** when finished. The Rename Review window closes. + +The renamed review will display in the table on the Manage Reviews page. diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/selectedresources.md b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/selectedresources.md new file mode 100644 index 0000000000..fbd46f6b9b --- /dev/null +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/selectedresources.md @@ -0,0 +1,22 @@ +--- +title: "Selected Resources Window" +description: "Selected Resources Window" +sidebar_position: 30 +--- + +# Selected Resources Window + +The Selected Resources window opens from the **View Selections** button in the +[Create Review Wizard](/docs/auditor/10.7/accessreviews/entitlementreviews/create/create.md). + +![Selected Resources windwo](/images/accessinformationcenter/12.0/accessrequests/wizard/selectedresources.webp) + +The table displays: + +- Resource — The icon indicates the type of resource. The resource name includes its location, such + as the UNC path for a file system resource, the URL for SharePoint resource, or Group name (e.g., + [Domain]\[Group]). +- Reviewer — Primary owner assigned to the resource + +Use the **Remove** button to remove a resource from this review. Click **OK** to close the window +and complete the review creation. diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/sendreminders.md b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/sendreminders.md new file mode 100644 index 0000000000..2f17616c55 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/sendreminders.md @@ -0,0 +1,20 @@ +--- +title: "Send Reminders Window" +description: "Send Reminders Window" +sidebar_position: 40 +--- + +# Send Reminders Window + +The Send Reminders window opens from the [Manage Reviews Page](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md#manage-reviews-page) +of the Entitlement Reviews interface. Select the desired active review(s) and click **Send +Reminders** to send immediate reminder notifications. The Send Reminders window opens to display an +action status. + +![Send Reminders window](/images/accessinformationcenter/12.0/resourcereviews/window/sendreminders.webp) + +The window displays the action status. When a successful status is indicated, assigned owners were +sent a reminder email. Click **OK** to close the Send Reminders window. + +_Remember,_ automatic weekly reminders can be configured on the +[Notifications Page](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md) of the Configuration interface. diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/stopreview.md b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/stopreview.md new file mode 100644 index 0000000000..981e12a9d8 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/stopreview.md @@ -0,0 +1,18 @@ +--- +title: "Stop Review Window" +description: "Stop Review Window" +sidebar_position: 50 +--- + +# Stop Review Window + +The Stop Review window opens from the [Manage Reviews Page](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md#manage-reviews-page) of +the Entitlement Reviews interface. Select the desired active review(s) and click **Stop**. The Stop +Review window opens to confirm the action. + +![Stop Review window](/images/accessinformationcenter/12.0/resourcereviews/window/stopreview.webp) + +**CAUTION:** This will prevent owners from completing the review, removing associated resources from +their Pending Reviews list. + +Click **Yes** to stop the review. Click **No** to cancel the action. The Stop Review window closes. diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/viewresponses.md b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/viewresponses.md new file mode 100644 index 0000000000..17d4bc972e --- /dev/null +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/viewresponses.md @@ -0,0 +1,46 @@ +--- +title: "View Responses Window" +description: "View Responses Window" +sidebar_position: 60 +--- + +# View Responses Window + +The View Responses window opens from the **View Response** button on the +[Review Details Page](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md#review-details-page) of the Entitlement Reviews interface. It +displays all owner-recommended changes and notes for the selected resource. + +![View Responses window](/images/accessinformationcenter/12.0/resourcereviews/viewresponses.webp) + +The information displayed in the table includes: + +- Item Reviewed — Item upon which changes were suggested by the owner +- Current — Current state of the item at the time of the review +- Desired — Change suggested by the owner +- Notes — Icon indicates a Note has been added. Click on the icon to read the attached note(s). +- Approval — Status of the Review Administrator's approval + + - Clock — Indicates waiting on the Review Administrator to make an official decision + - Green Checkmark — Indicates the Review Administrator has approved the request + - Red X — Indicates the Review Administrator has declined the request + - Yellow Question mark — Indicates the Review Administrator has deferred taking action until a + later time + +The **Show Only Changes** checkbox is selected by default to show only the items with +owner-recommended changes. If deselected, all items included in the review are displayed. When +selecting the items with no changes in the grid, the change buttons at the bottom of the page are +disabled. + +The table data grid functions the same way as other table grids. See the +[Data Grid Features](/docs/auditor/10.7/accessreviews/admin/navigate/datagrid.md) topic for additional information. + +Select an item in the table, and use the action buttons at the bottom to identify the decision: + +![viewresponsesbuttons](/images/accessinformationcenter/12.0/resourcereviews/window/viewresponsesbuttons.webp) + +| Button | Description | +| ---------- | ---------------------------------------------------- | +| Accept | Accepts the selected owner-recommended change. | +| Decline | Declines, or rejects, the owner-recommended change. | +| Defer | Defers the owner-recommended change to a later time. | +| View Notes | Opens the Notes window for the selected item. | diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/overview.md b/docs/auditor/10.8/accessreviews/entitlementreviews/overview.md new file mode 100644 index 0000000000..07e07b7f8d --- /dev/null +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/overview.md @@ -0,0 +1,82 @@ +--- +title: "Reviews Overview" +description: "Reviews Overview" +sidebar_position: 40 +--- + +# Reviews Overview + +The Entitlement Reviews interface is where users with either the Security Team or Administrator role +(to be referred to as Review Administrators) can manage reviews. The workflow provides a way for +business users or data custodians (to be referred to as Owners) to attest to the access and +privileges users have to their resources. + +For the purpose of the Access Reviewsapplication, a “resource” refers to the file system shared +folders, SharePoint Online site collections, and Active Directory (AD) groups. All data available +within the Access Reviews application is collected by Netwrix Auditor according to the synchronized +monitoring plans. + +_Remember,_ Owners are assigned to resources in the Resource Owners interface. Only resources with +assigned Owners can be included in a reviews. + +Who Can Run Reviews (Review Administrators)? + +- Console Users with Administrator role + + - Can complete the Review Administrator's approval process without impacting the visibility into + the review created by a Review Administrator with the Security Team role + + **CAUTION:** Visibility into a review created by a Review Administrator with the Security + Team role is blocked if a Review Administrator with the Administrator role starts a new + instance. + +- Console Users with Security Team role + + - Visibility into only those reviews personally created + +Who Participates in Reviews? + +- Review Administrators — Create / start reviews and approve / process owner recommended changes +- Owners — Perform reviews and recommend changes + +Types of Reviews + +There are two types of reviews: + +- Access – Review user access rights to resources +- Membership – Review group membership + +See the [Entitlement Reviews Interface](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md) topic for additional information. + +## Workflow of Reviews + +Prerequisite: + +- The Access Reviews application is configured to send Notifications. See the + [Notifications Page](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md) topic for additional information. + + **NOTE:** By default, the application is configured to send notifications only to the primary + owner. However, this can be customized on the Configuration > Notifications page to send + notifications to all assigned owners. + +- Owners assigned to resources within the Resource Owners interface. See the + [Resource Owners Overview](/docs/auditor/10.7/accessreviews/resourceowners/overview.md) topic for additional information. + +Workflow: + +**_RECOMMENDED:_** When deploying the Access Reviews application in an organization to process +reviews, owners should be notified prior to launching the first set of reviews. See the +[Notification to Owners](/docs/auditor/10.7/accessreviews/resourceowners/overview.md#notification-to-owners) topic for additional +information. + +1. Review Administrator creates a review or starts a new review instance. See the + [Create Review Wizard](/docs/auditor/10.7/accessreviews/entitlementreviews/create/create.md) topic for additional information. +2. Owner performs a review. See the [Pending Reviews](/docs/auditor/10.7/accessreviews/owneroverview/pendingreviews/pendingreviews.md) topic for additional + information. +3. Review Administrator approves owner recommendations. See the + [Approval Process](/docs/auditor/10.7/accessreviews/entitlementreviews/approvalprocess/approvalprocess.md) topic for additional information. +4. Implement approved changes in your organization. Manually, export a list of approved changes and + deliver it to your IT department. + +When desired, the Review Administrator runs another instance of the review and the workflow starts +again. See the [Review Instances](/docs/auditor/10.7/accessreviews/entitlementreviews/create/reviewinstances.md) topic for additional information. diff --git a/docs/auditor/10.8/accessreviews/installation/_category_.json b/docs/auditor/10.8/accessreviews/installation/_category_.json new file mode 100644 index 0000000000..b28bcf17a4 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/installation/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Installation Overview", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/accessreviews/installation/accessreviewsconfiguration.md b/docs/auditor/10.8/accessreviews/installation/accessreviewsconfiguration.md new file mode 100644 index 0000000000..cd0b2c64c0 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/installation/accessreviewsconfiguration.md @@ -0,0 +1,56 @@ +--- +title: "Select Data Sources" +description: "Select Data Sources" +sidebar_position: 20 +--- + +# Select Data Sources + +_Remember,_ the Access Reviews must already be installed on the Auditor server. + +You can configure Netwrix Auditor Access Reviews in two ways: + +- Select Data Sources in the General Settings +- Select Data Sources in the Monitoring Plan + +## Select Data Sources in the General Settings + +If you plan to use Access Reviews for multiple data sources, configure the settings to work with the +data sources that you select. + +Follow the steps to configure Access Reviews in the Netwrix Auditor. + +**Step 1 –** Go to **Settings > General > Access Reviews**. + +![senddataar](/images/auditor/10.7/senddataar.webp) + +**Step 2 –** Click **Manage**. + +![manageaccessreviews](/images/auditor/10.7/manageaccessreviews.webp) + +**Step 3 –** Select the desired data sources to review. + +**Step 4 –** Click **Save**. + +Netwrix Auditor Access Reviews is configured and ready to use in the Netwrix Auditor. + +## Select Data Sources in the Monitoring Plan + +If you plan to use Access Reviews for a specific monitoring plan, configure Access Reviews in that +monitoring plan. + +Follow the steps to configure Access Reviews in the Netwrix Auditor. + +**Step 1 –** Go to **Configuration > Monitoring plans**. + +**Step 2 –** Double click the desired monitoring plan. + +**Step 3 –** Click **Edit data source** button on the left. + +![enablear](/images/auditor/10.7/enablear.webp) + +**Step 4 –** Navigate to the Send data for Access Reviews and select the checkbox. + +**Step 5 –** Click **Save** or **Save & Close**. + +Netwrix Auditor Access Reviews is configured and ready to use in the Netwrix Auditor. diff --git a/docs/auditor/10.8/accessreviews/installation/install.md b/docs/auditor/10.8/accessreviews/installation/install.md new file mode 100644 index 0000000000..6cf1df870d --- /dev/null +++ b/docs/auditor/10.8/accessreviews/installation/install.md @@ -0,0 +1,79 @@ +--- +title: "Install" +description: "Install" +sidebar_position: 10 +--- + +# Install + +Once the prerequisites have been met, follow the steps to install the Access Reviews application. + +**Step 1 –** Run the `AccessReviews.exe` executable, and the Netwrix Auditor Access Reviews Setup +wizard opens. + +![Netwrix Auditor Access Reviews Setup wizard Welcome page](/images/auditor/10.7/access/reviews/installation/installwelcome.webp) + +**Step 2 –** On the Welcome page, click **Next** to begin the installation process. + +![Netwrix Auditor Access Reviews Setup wizard End-User License Agreement page](/images/auditor/10.7/access/reviews/installation/installeula.webp) + +**Step 3 –** On the End-User License Agreement page, select the **I accept the terms in the License +Agreement** checkbox and click **Next**. + +![Netwrix Auditor Access Reviews Setup wizard Destination Folder page](/images/auditor/10.7/access/reviews/installation/installdestinationfolder.webp) + +**Step 4 –** On the Destination Folder page, you can choose between the default destination folder +and a custom folder. Click **Change** to browse for a different location. When the destination is +set as desired, click **Next**. + +**NOTE:** The default location is `C:\Program Files\Netwrix\Access Access Reviews\`. There are no +specific requirements for changing the path. + +![Netwrix Auditor Access Reviews Setup wizard SQL Server Connection page](/images/auditor/10.7/access/reviews/installation/installsql.webp) + +**Step 5 –** On the SQL Server Connection page, provide the required database information. Click +**Next** to test the connection to the SQL Server. + +- Server — Enter the database server hostname (NetBIOS name, FQDN, or IP address) with the instance + name or non-standard port, if applicable, in one of the following formats: + + - No named instance, use `[SQLHostName]`, for example `NT-SQL02` + - Named instance, use `[SQLHostName]\[SQLInstanceName]`, for example `NT-SQL02\Netwrix` + - No named instance with non-standard port, use `[SQLHostName],[PortNumber]`, for example + `NT-SQL02,72` + - Named instance with non-standard port, use `[SQLHostName]\[SQLInstanceName],[PortNumber]`, for + example `NT-SQL02\Netwrix,72` + +- Database — Enter the name of the database. By default, this is set to NetwrixAR. + +- Authentication – Select the Database service account type from the drop-down menu. Then enter the + account information in the **User Name** and **Password** fields. + - For Windows Authentication – **User Name** format must be `[DOMAIN]\[username]` , for example + `NWXTECH\ad.bruce` + +**NOTE:** See the [Database Page](/docs/auditor/10.7/accessreviews/admin/configuration/database.md) topic for additional +information. + +![Database does not exist Confirmation Window](/images/auditor/10.7/access/reviews/installation/installsqldatabase.webp) + +**Step 6 –** If there are no errors, you will be asked to confirm creation of the new database. +Click **Yes**. + +![Netwrix Auditor Access Reviews Setup wizard Configure Web Server page](/images/auditor/10.7/access/reviews/installation/installconfigurewebserver.webp) + +**Step 7 –** On the Configure Web Server page, you can choose between the default port and a custom +port on which the application will be accessible. To change the port, enter a new port number in the +field. When the port is set as desired, click **Next**. + +**NOTE:** The default port is 81. + +![Netwrix Auditor Access Reviews Setup wizard Ready to Install page](/images/auditor/10.7/access/reviews/installation/installready.webp) + +**Step 8 –** On the Ready to install page, click **Install** to begin the process. + +![Netwrix Auditor Access Reviews Setup wizard Completed page](/images/auditor/10.7/access/reviews/installation/installcompleted.webp) + +**Step 9 –** Once the installation has successfully completed, click **Finish** to exit the wizard. + +The installation wizard placed a Netwrix Auditor Access Reviews icon on the desktop. Now proceed to +the [First Launch](/docs/auditor/10.7/accessreviews/admin/firstlaunch.md) topic for next steps. diff --git a/docs/auditor/10.8/accessreviews/installation/overview.md b/docs/auditor/10.8/accessreviews/installation/overview.md new file mode 100644 index 0000000000..216a4539e1 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/installation/overview.md @@ -0,0 +1,66 @@ +--- +title: "Installation Overview" +description: "Installation Overview" +sidebar_position: 10 +--- + +# Installation Overview + +The Netwrix Auditor Access Reviews application relies on collected and analyzed data that is stored +in a Microsoft® SQL® Server database. Netwrix Auditor must be installed and collecting data before +installing and using the Access Reviews application. The Access Reviews Configuration tool must be +used after installation to complete the integration of these products. + +**NOTE:** Access Reviews is a separately licensed product and is not included with Netwrix Auditor. +Make sure that you have the Access Reviews license enabled in Auditor. + +## Prerequisites + +The Access Reviews application must be installed on the same server as Netwrix Auditor. + +### Permissions + +Permissions are needed to the Netwrix Auditor database and to Active Directory. This can be one +account with sufficient rights to each or two separate accounts. For the purpose of this document, +these will be referred to as the Database service account and the Active Directory service account. + +- Database service account – This is the same account used by Netwrix Auditor for a database service + account. This credential is required for installation. + + **NOTE:** Database connection via TLS 1.2 (SQL Native Client) is supported. + +- Active Directory service account – The Access Reviews Console login authentication requires the + Active Directory service account to have rights to "read" Active Directory. This credential is + configured during installation based on the account used for connecting to the database. See the + [Active Directory Page](/docs/auditor/10.7/accessreviews/admin/configuration/activedirectory.md) topic for additional + information. + +## Software Compatibility & Versions + +For proper functionality, it is necessary for the version of the Access Reviews to be compatible +with the existing Netwrix Auditor installation. If necessary, +[Netwrix Support](https://www.netwrix.com/support.html) can confirm whether the two product versions +are compatible. + +Latest Version Compatibility + +| Component | Current Version | +| ------------------------------ | --------------- | +| Netwrix Auditor Console | 10.7\* | +| Netwrix Auditor Access Reviews | v12.0\* | + +Last Updated 6/6/2022 + +See the [Upgrade Procedure](/docs/auditor/10.7/accessreviews/installation/upgrade.md) topic for additional information. + +## Supported Browsers + +Supported browsers for the Access Reviews Console include: + +- Google® Chrome® +- Microsoft® Edge® +- Mozilla® Firefox® + +## Screen Resolution Requirement + +Supported screen resolution of 1368 x 768 or greater. diff --git a/docs/auditor/10.8/accessreviews/installation/secure.md b/docs/auditor/10.8/accessreviews/installation/secure.md new file mode 100644 index 0000000000..95129cc5b3 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/installation/secure.md @@ -0,0 +1,81 @@ +--- +title: "Secure Console Access" +description: "Secure Console Access" +sidebar_position: 30 +--- + +# Secure Console Access + +Enable Secure Sockets Layer (SSL) for secure, remote connections to the application web server. In +order to enable SSL, you need to create a certificate and then bind it to the secure port. + +**NOTE:** Organizations typically have one or more system administrators responsible for Public Key +Infrastructure (PKI) and certificates. To continue with this configuration, it will first be +necessary to confer with the PKI administrator to determine which certificate method will conform to +the organization’s security policies. + +Follow the steps to enable SSL. + +**Step 1 –** Create an SSL Binding. + +**Step 2 –** Modify the AccessInformationCenter.Service.exe.Config File. + +The Access Reviews application is now configured to use SSL for secure, remote connections. + +## Create an SSL Binding + +You run a PowerShell command to create an SSL binding. The binding command has several environmental +variables: + +- The `$certHash` value is the `Thumbprint` value. +- The `$ip` value of the IP addresses. In the example script below, the value [0.0.0.0] is set for + all IP addresses. +- The `$port` value must be accurate for your environment. The HTTP default port is 81. The HTTPS + default is 481. However, it can be customized during installation. +- The `$guid` value is required for specifying a valid GUID value to identify the owning application + for a binding purpose. It obtained from any valid GUID. + +If you need to find the `$certHash` value of a certificate that was already created, run the +PowerShell `dir` command below on the certificate's drive. This will output the Thumbprint (Hash) +value and the certificate name: + +```powershell +dir cert:\localmachine\my +``` + +Replace the environmental variables in the example script below. Then Run the PowerShell command to +create an SSL binding: + +```powershell +$guid = "1be32670-7644-4dce-9a5d-01643022074e" +$certHash = "03CFD5D51A0DAA2F3DCDA9407486B220449D0E92" +$ip = "0.0.0.0" +$port = "481" +"http add sslcert ipport=$($ip):$port certhash=$certHash appid={$guid}" | netsh +``` + +The next step is to modify the `AccessInformationCenter.Service.exe.Config` file. + +## Modify the AccessInformationCenter.Service.exe.Config File + +Follow the steps to modify the Modify the `AccessInformationCenter.Service.exe.Config` file for +HTTPS. + +**Step 1 –** Open the `AccessInformationCenter.Service.exe.Config` file in a text editor, e.g. +Notepad. It is located in the installation directory: + +...\Netwrix\Access Reviews + +![AccessInformationCenter.Service.exe.Config file showing the BindingUrl key](/images/auditor/10.7/access/reviews/installation/securebindingurlparameter.webp) + +**Step 2 –** Change the `BindingUrl` key value to `"https://+:481"` (ensure the port number matches +the port number used in the PowerShell command run to create the SSL Binding. + +**Step 3 –** Save and close the file. + +**Step 4 –** Restart the Netwrix Auditor Access Reviews service in Services Manager +`(services.msc`). + +The URL for the Access Reviews Console is now accessible +`https://[Fully Qualified Domain Name for the Machine]:481` (if port 481 was used when creating the +binding). For example, https://NEWYORKSRV10.NWXTech.com:481. diff --git a/docs/auditor/10.8/accessreviews/installation/upgrade.md b/docs/auditor/10.8/accessreviews/installation/upgrade.md new file mode 100644 index 0000000000..09250b8ab8 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/installation/upgrade.md @@ -0,0 +1,72 @@ +--- +title: "Upgrade Procedure" +description: "Upgrade Procedure" +sidebar_position: 40 +--- + +# Upgrade Procedure + +**CAUTION:** If you are upgrading from the Netwrix Access Information Center for Netwrix Auditor to +the Netwrix Auditor Access Reviews application, see the Special Considerations topic for upgrade +steps. + +To upgrade the Access Reviews application to a newer version, simply run the new `AccessReviews.msi` +executable. It is not necessary to uninstall the existing version. See the [Install](/docs/auditor/10.7/accessreviews/installation/install.md) +topic for additional information. + +_Remember,_ the Access Reviews version must align to the compatible Netwrix Auditor version. + +When the installer is run over an existing version, the following is happening in the backend: + +- During the installation process, a Backup folder is created in the Access Reviews installation + directory + + ...\Netwrix\Access Reviews + + - The Backup folder contains the files where various settings reside listed in the table below + +- The backup folder files are copied over the default files laid down by the installer, preserving + customized settings +- After the installation is complete, the Backup folder is removed + +| File | Location | Guidance | +| ----------------------------------- | ---------------------------- | ---------------------------------------------------------------------------------------------------------------------- | +| Email Templates (multiple files) | Located in the Backup folder | The HTML templates that are used to send notification email. These can be customized with logos or corporate branding. | +| AccessInformationCenter.Service.exe | Located in the Backup folder | Contains custom application settings and logging levels. | +| Version.txt | Located in the Backup folder | Indicates the version number associated with the backup contents. | + +## Special Considerations + +The originally released Netwrix Access Information Center has been rebranded to Netwrix Auditor +Access Reviews. This rebranding project included changing the installation directory, the name of +the service, and the default name of the database created by the installer. Follow the steps to +replace Netwrix Access Information Center with Netwrix Auditor Access Reviews. + +**Step 1 –** Install the Netwrix Auditor Access Reviews application on the same server where the +Netwrix Access Information Center was installed. See the [Install](/docs/auditor/10.7/accessreviews/installation/install.md) topic for additional +information. On the SQL Server Connection page: + +- Supply the information for the existing database. The default name for the original database was + NetwrixAIC. However, it could have been Customized. +- Use the same credentials for the SQL Server Connection. + +**NOTE:** The new destination folder will be `...\Netwrix\Access Reviews`. + +**Step 2 –** Launch the application and reset the Builtin Administrator password. See the +[First Launch](/docs/auditor/10.7/accessreviews/admin/firstlaunch.md) topic for additional information. + +**Step 3 –** It will be necessary to add your Console Users again. See the +[Console Access Page](/docs/auditor/10.7/accessreviews/admin/configuration/consoleaccess.md) topic for additional information. + +**Step 4 –** It will be necessary to configure the Notification settings. See the +[Notifications Page](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md) topic for additional information. + +**Step 5 –** If you have customized your email templates, it will be necessary to copy the Templates +folder from the old `...\Netwrix\Access Information Center` installation directory to the new +`...\Netwrix\Access Reviews` installation directory. + +All of the resources with assigned owners will be visible on the Resource Owners tab. All reviews +will be visible on the Entitlement Reviews tab. + +After the upgrade has been confirmed to be successful, you can optionally remove/delete the old +installation directory: `...\Netwrix\Access Information Center`. diff --git a/docs/auditor/10.8/accessreviews/owneroverview/_category_.json b/docs/auditor/10.8/accessreviews/owneroverview/_category_.json new file mode 100644 index 0000000000..82dbdba6f7 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/owneroverview/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Owners & Access Reviews", + "position": 50, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "owneroverview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/accessreviews/owneroverview/confirmationrequest.md b/docs/auditor/10.8/accessreviews/owneroverview/confirmationrequest.md new file mode 100644 index 0000000000..f391b23b53 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/owneroverview/confirmationrequest.md @@ -0,0 +1,42 @@ +--- +title: "Ownership Confirmation Request Email" +description: "Ownership Confirmation Request Email" +sidebar_position: 10 +--- + +# Ownership Confirmation Request Email + +The Ownership Administrator may request ownership confirmation for a resource being managed through +the Access Reviews application. As an assigned owner, you will receive the following email. + +![Ownership Confirmation Request Email with Yes and No buttons for responding](/images/auditor/10.7/access/reviews/resourceowners/email/confirmemail.webp) + +The Ownership Confirmation Request email provides buttons for confirming (Yes) or declining (No) +ownership of the listed resource. You will be asked to authenticate for your response to be +processed. The application will launch in your default browser. Enter your domain credentials to +complete the process. One of two messages will appear according to if you confirmed or declined. + +## Confirmed Ownership Message + +If you have accepted ownership for the assigned resource, the browser will display the following +message after authentication: + +![confirmemailaccept](/images/auditor/10.7/access/reviews/resourceowners/email/confirmemailaccept.webp) + +"Your response has been saved. You may close this window and delete the confirmation request +e-mail." + +## Declined Ownership Message + +If you have declined ownership for the assigned resource, the browser will display the following +message after authentication: + +![Ownership declined browser message](/images/auditor/10.7/access/reviews/resourceowners/email/confirmemaildecline.webp) + +"Before we update ownership can you suggest another owner?" Enter possible owners in the textbox. +Click **Submit** to complete the process. + +![Ownership declined browser message after an alternative owner is submitted](/images/auditor/10.7/access/reviews/resourceowners/email/confirmemaildecline2.webp) + +"Your response has been saved. You may close this window and delete the confirmation request +e-mail." diff --git a/docs/auditor/10.8/accessreviews/owneroverview/owneroverview.md b/docs/auditor/10.8/accessreviews/owneroverview/owneroverview.md new file mode 100644 index 0000000000..626acb8864 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/owneroverview/owneroverview.md @@ -0,0 +1,25 @@ +--- +title: "Owners & Access Reviews" +description: "Owners & Access Reviews" +sidebar_position: 50 +--- + +# Owners & Access Reviews + +This topic and its subtopics are written for users who have been assigned resource ownership. + +When your organization performs an access review on a resource for which you are the assigned owner, +it means you, the business user or data custodian, need to attest to the access and privileges users +have to your resource. + +**NOTE:** For the Netwrix Auditor Access Reviews application, a “resource” refers to the file system +shared folders, SharePoint Online site collections, and Active Directory (AD) groups. + +Your organization's Ownership Administrator and/or Review Administrator will let you know what URL +to use for logging in as well as what credentials to use. The URL will require you to be connected +to your organization's network. Upon login, you will be directed to the My Reviews page where you +can view pending and historical reviews for your resources. + +You may receive email notifications requesting ownership confirmation from your organization's +Ownership Administrators. You will receive email notifications when you have a pending access review +to perform. diff --git a/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/_category_.json b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/_category_.json new file mode 100644 index 0000000000..fa3e93df56 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Pending Reviews", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "pendingreviews" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/access.md b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/access.md new file mode 100644 index 0000000000..344964e08e --- /dev/null +++ b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/access.md @@ -0,0 +1,52 @@ +--- +title: "Perform an Access Review" +description: "Perform an Access Review" +sidebar_position: 10 +--- + +# Perform an Access Review + +An Access review can be conducted for various types of data repository resources. Follow the steps +to perform an Access review. + +**Step 1 –** On the Pending Reviews page, select the resource with a pending Access review and click +**Begin Review**. The Resource Review page opens to the 1 Make changes tab. + +![Resource Reviews page showing an Access Review on 1 Make changes tab](/images/auditor/10.7/access/reviews/entitlementreviews/reviewpageaccess.webp) + +The table displays access information for the resource being reviewed: + +- Trustee Name — Name of the trustee with access to this resource. If the trustee is a group, click + the hyperlink to open the Group Membership window. See the + [Group Membership Window](/docs/auditor/10.7/accessreviews/owneroverview/pendingreviews/groupmembership.md) topic for additional information. +- Access Level (Full Control, Modify, and Read) columns — Blue checkmark icon indicates current + access level + +**Step 2 –** Recommend access changes for a trustee by clicking the icon for the desired access +level (Full Control, Modify, or Read columns). A yellow checkmark icon indicates the new level of +access you are recommending. + +**Step 3 –** Recommend removing access by selecting one or more trustees and clicking the **Remove +Access** button or by clicking on a checkmark icon. A blank yellow icon indicates you are +recommending all access be removed; it appears in the column for the current level of access. + +_Remember,_ at any time you can save your recommendations and exit the review. It will remain +pending until you submit all recommendations for this resource. + +**Step 4 –** When the recommended changes are set as desired, click **Next**. The 2 Review changes +tab opens in the Resource Review page. + +![Resource Reviews page showing an Access Review on 2 Review changes tab](/images/auditor/10.7/access/reviews/entitlementreviews/review/reviewpageaccesstab2.webp) + +**Step 5 –** This tab displays a filtered table of trustees with recommended changes. Confirm your +recommendations and optionally add notes to the Review Administrator. Owners are encouraged to leave +notes explaining why the change is recommended. + +**NOTE:** To make changes to your recommendations, you must return to the first tab. Click +**Previous**. + +**Step 6 –** When all recommendations are confirmed and the desire notes added, click **Submit**. A +message displays stating that the review is complete. Click **OK** to close the message window. + +The review for this resource is now complete. You will be redirected to the Pending Reviews page. +Your recommended changes have been sent to the Review Administrator for approval and processing. diff --git a/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/groupmembership.md b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/groupmembership.md new file mode 100644 index 0000000000..0770a451b7 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/groupmembership.md @@ -0,0 +1,15 @@ +--- +title: "Group Membership Window" +description: "Group Membership Window" +sidebar_position: 30 +--- + +# Group Membership Window + +When a group trustee appears in the Trustee Name column of a review, it appears as a blue hyperlink +in addition to the group icon displayed in front of the name. + +![Resource Reviews page showing the Group Membership window](/images/accessanalyzer/12.0/admin/action/activedirectory/operations/groupmembership.webp) + +Click the hyperlink to open the Group Membership window. The group’s direct membership is listed for +review. Click **Close** to return to the review. diff --git a/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/membership.md b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/membership.md new file mode 100644 index 0000000000..c8025c7c40 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/membership.md @@ -0,0 +1,47 @@ +--- +title: "Perform a Membership Review" +description: "Perform a Membership Review" +sidebar_position: 20 +--- + +# Perform a Membership Review + +A Membership review is an evaluation of group membership. Follow the steps to perform a Membership +review. + +**Step 1 –** On the Pending Reviews page, select the resource with a pending Membership review and +click **Begin Review**. The Resource Review page opens to the 1 Make changes tab. + +![Resource Reviews page showing a Membership Review on 1 Make changes tab](/images/auditor/10.7/access/reviews/entitlementreviews/review/reviewpagemembership.webp) + +The table displays membership information for the group being reviewed: + +- Trustee Name — Name of the trustee with group membership. If the trustee is a group, click the + hyperlink to open the Group Membership window. See the + [Group Membership Window](/docs/auditor/10.7/accessreviews/owneroverview/pendingreviews/groupmembership.md) topic for additional information. +- Member — Blue checkmark icon indicates current membership + +**Step 2 –** Recommend removing membership by selecting one or more trustees and clicking the +**Remove Access** button or by clicking on a checkmark icon. A blank yellow icon indicates you are +recommending the trustee be removed from the group. + +_Remember,_ at any time you can save your recommendations and exit the review. It will remain +pending until you submit all recommendations for this resource. + +**Step 3 –** When the recommended changes are set as desired, click **Next**. The 2 Review changes +tab opens in the Resource Review page. + +![Resource Reviews page showing a Membership Review on 2 Review changes tab](/images/auditor/10.7/access/reviews/entitlementreviews/review/reviewpagemembershiptab2.webp) + +**Step 4 –** This tab displays a filtered table of trustees with recommended changes. Confirm your +recommendations and optionally add notes to the Review Administrator. Owners are encouraged to leave +notes explaining why the change is recommended. + +**NOTE:** To make changes to your recommendations, you must return to the first tab. Click +**Previous**. + +**Step 5 –** When all recommendations are confirmed and the desire notes added, click **Submit**. A +message displays stating that the review is complete. Click **OK** to close the message window. + +The review for this resource is now complete. You will be redirected to the Pending Reviews page. +Your recommended changes have been sent to the Review Administrator for approval and processing. diff --git a/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/pendingreviews.md b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/pendingreviews.md new file mode 100644 index 0000000000..a1f1312d18 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/pendingreviews.md @@ -0,0 +1,89 @@ +--- +title: "Pending Reviews" +description: "Pending Reviews" +sidebar_position: 20 +--- + +# Pending Reviews + +When your organization performs a review on a resource for which you are the assigned owner, it +means you, the business user or data custodian, need to attest to the access and privileges users +have to your resource. When the Review Administrator creates a new review or starts a new instance +of an existing review, you receive an email notification that includes a link to the your pending +reviews. + +![Email announcing a pending review](/images/auditor/10.7/access/reviews/entitlementreviews/pendingreviewemail.webp) + +Use the **Sign in** link at the bottom to open the My Reviews interface in the Access Reviews +Console. + +_Remember,_ your company domain credentials are used to log in. + +The My Reviews interface has two pages: Pending Reviews and Review History. See the +[Review History Page](/docs/auditor/10.7/accessreviews/owneroverview/reviewhistory.md) topic for additional information. + +## Pending Reviews Page + +The Pending Reviews page lists all of your resources included in pending reviews. + +![My Reviews interface showing Pending Reviews page](/images/auditor/10.7/access/reviews/entitlementreviews/pendingreivewspage.webp) + +The information displayed in the table includes: + +- Created — Date timestamp for when the review was creation. If it has been run multiple times, this + is the date timestamp of the last instance. +- Review Type – Type of review: + - Access – Review user access rights to resources + - Membership – Review group membership +- Resource Name — The icon indicates the type of resource. The resource name includes its location, + such as the UNC path for a file system resource, the URL for SharePoint resource, or Group name + (e.g., [Domain]\[Group]). +- In Progress — Displays a clock icon for an in-progress review +- Last Reviewed — Date timestamp when the last review took place for the resource. + +The table data grid functions the same way as other table grids. See the +[Data Grid Features](/docs/auditor/10.7/accessreviews/admin/navigate/datagrid.md) topic for additional information. + +Performing a review means you are evaluating the resources. You can leave the resource unchanged or +make recommendations for changes. Consider the following examples: + +- In an Access review, you can recommend changes to the type of access granted to the resource. +- In a Membership Review, you can recommend removing group membership from specific users. + +_Remember,_ any proposed changes are not committed until the Review Administrator approves the +recommendation and processes those changes. + +## Resource Review Page + +The Begin Review button opens the Resource Review page to start the review. + +![Resource Reviews page showing the 1 Make changes tab](/images/auditor/10.7/access/reviews/entitlementreviews/reviewpageaccess.webp) + +The Resource Review page varies based on the type of review; however, there are several common +features: + +- Tabs — This page has two tabs: + + - 1 Make changes — Displays current access for the resource. + - 2 Review changes — Displays changes you recommend making for your review prior to submission + +- You are reviewing — Indicates the type of review, the resource being reviewed, and the date + timestamp for when the review instance was started +- Search — Filters the table for matches to the typed value +- Save Changes — Saves all recommended changes, enabling you to leave the review in progress and + return at a later time to complete it. It opens the Saving review window, which displays a status + for the action. +- Remove Access — On the 1 Make changes tab, removes access from the selected trustee(s). Ctrl-click + can be used for multi-select. Current access blue icon with a checkmark will turn to an empty + yellow icon. +- Only show changes since last review — Scopes the table to only display those items that have been + modified since the last review instance +- Previous / Next buttons — Moves between the two tabs +- Submit button — On the 2 Review changes tab, the **Next** button becomes a **Submit** button. This + submits your review to the Review Administrator. + +The content within the table varies, and additional options may appear depending on the type of +review being conducted. See the following sections for step by step instructions: + +- [Perform an Access Review](/docs/auditor/10.7/accessreviews/owneroverview/pendingreviews/access.md) +- [Perform a Membership Review](/docs/auditor/10.7/accessreviews/owneroverview/pendingreviews/membership.md) diff --git a/docs/auditor/10.8/accessreviews/owneroverview/reviewhistory.md b/docs/auditor/10.8/accessreviews/owneroverview/reviewhistory.md new file mode 100644 index 0000000000..eea0e2145b --- /dev/null +++ b/docs/auditor/10.8/accessreviews/owneroverview/reviewhistory.md @@ -0,0 +1,46 @@ +--- +title: "Review History Page" +description: "Review History Page" +sidebar_position: 30 +--- + +# Review History Page + +The Review History page lists all completed review instances for your resources. + +![Review History page](/images/auditor/10.7/access/reviews/entitlementreviews/reviewhistorypage.webp) + +The information displayed in the table includes: + +- Response Time – Date timestamp when the last review took place for the resource. +- Review Type – Type of review +- Resource Name – The icon indicates the type of resource. The resource name includes its location, + such as the UNC path for a file system resource, the URL for SharePoint resource, or Group name + (e.g., [Domain]\[Group]). +- Reviewer Name – Name of the assigned owner who performed the review +- Status – Icon indicates the decision provided by the Review Administrator: Accept, Decline, Defer, + or Waiting. Hover over a status icon to display its tooltip. + +The table data grid functions the same way as other table grids. See the +[Data Grid Features](/docs/auditor/10.7/accessreviews/admin/navigate/datagrid.md) topic for additional information. + +## Review Details Window + +The View Details button at the bottom of the Review History page opens the Review Details window for +a resource where changes were recommended. + +![Review Details Window](/images/accessinformationcenter/12.0/resourcereviews/reviewdetails.webp) + +The information displayed in the table includes: + +- Item Reviewed – Item upon which changes were suggested by the owner +- Current – Current state of the item at the time of the review. It could be the type of access (for + Access reviews) or being a member (for Membership reviews). +- Desired – Change suggested by the owner. It could be the new type of access (for Access reviews) + or removing membership (for Membership reviews). +- Notes – An icon here indicates notes were entered by the owner. Select the item and click the + **View Notes** button to open the View Notes window. +- Status – Icon indicates the decision provided by the Review Administrator: Accept, Decline, Defer, + or Waiting. Hover over a status icon to display its tooltip. + +Click **OK** to close the window. diff --git a/docs/auditor/10.8/accessreviews/resourceowners/_category_.json b/docs/auditor/10.8/accessreviews/resourceowners/_category_.json new file mode 100644 index 0000000000..90f603861f --- /dev/null +++ b/docs/auditor/10.8/accessreviews/resourceowners/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Resource Owners Overview", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/accessreviews/resourceowners/confirmation/_category_.json b/docs/auditor/10.8/accessreviews/resourceowners/confirmation/_category_.json new file mode 100644 index 0000000000..c75b071d5a --- /dev/null +++ b/docs/auditor/10.8/accessreviews/resourceowners/confirmation/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Ownership Confirmation", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "confirmation" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirm.md b/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirm.md new file mode 100644 index 0000000000..2b95ca9b16 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirm.md @@ -0,0 +1,48 @@ +--- +title: "Confirm Ownership Wizard" +description: "Confirm Ownership Wizard" +sidebar_position: 10 +--- + +# Confirm Ownership Wizard + +The Confirm Ownership wizard is opened with the **Request Confirmation** button in the Resource +Owners interface. It can be opened for one or multiple resources. + +![Confirm Ownership wizard showing 1.Select Owners page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectowners_2.webp) + +It contains one page: + +- 1. Select Owners — Lists the current owner(s) for each selected resource and confirmation status + +## Request Ownership Confirmation + +Follow the steps to request ownership confirmation. + +**Step 1 –** In the Resource Owners interface, select the desired resource or resources and click +Request Confirmation. The Confirm Ownership wizard opens. + +![Confirm Ownership wizard showing 1.Select Owners page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectowners_2.webp) + +**Step 2 –** On the Select Owners page, you can optionally remove owners you do not want or need +ownership confirmation from. Select those owners and click **Remove**. Those owners will not receive +the confirmation email. Once the list is set as desired, click **Finish**. The Access Reviews +application begins to send the confirmation email. The table provides the following information: + +- Resource Name — The icon indicates the type of resource. The resource name includes its location, + such as the UNC path for a file system resource, the URL for SharePoint resource, or Group name + (e.g., [Domain]\[Group]). +- Owner Name — Name of the assigned owner +- Confirmed — Indicates whether or not the assigned owner has confirmed ownership of that resource. + Tool-tips display when hovering over the icons indicating whether the resource ownership has been + confirmed, declined, pending response, or that a confirmation has not been requested. + +![selectownerstaskcompleted](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectownerstaskcompleted.webp) + +**Step 3 –** The action status displays on the page. When the owner confirmation notification has +completed (100%), click Close. The Confirm Ownership wizard closes. + +The selected owners receive an email from the Access Reviews application asking if they are the +owner of the assigned resource. See the +[Ownership Confirmation Request Email](/docs/auditor/10.7/accessreviews/owneroverview/confirmationrequest.md) topic for additional +information. diff --git a/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirmation.md b/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirmation.md new file mode 100644 index 0000000000..ed9c54c298 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirmation.md @@ -0,0 +1,34 @@ +--- +title: "Ownership Confirmation" +description: "Ownership Confirmation" +sidebar_position: 20 +--- + +# Ownership Confirmation + +The reason for assigning owners to resources is to enable those resources to be included in reviews, +or attestations, conducted through the application. In order for this to work, the assigned owner +needs to claim that ownership responsibility. Resources that do not have confirmed owners may fall +through the cracks. + +**NOTE:** This does require the Notification settings to be configured for the Access Reviews +application. See the [Notifications Page](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md) topic for +additional information. + +![Table in Resource Owners interface showing several resources being managed and all confirmation status icons](/images/auditor/10.7/access/reviews/resourceowners/tablestatus.webp) + +The table in the Resource Owners interface includes a Status column. The following icons appear in +this column to indicate the owner confirmation status: + +| Icon | Meaning | Description | +| -------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| ![Yellow circle with whit question mark](/images/accessinformationcenter/12.0/resourceowners/statusnostatus.webp) | No Status | Indicates ownership confirmation has not been requested, and there is no ownership status at this time | +| ![Blue circle with white clock face](/images/accessinformationcenter/12.0/resourceowners/statuswaiting.webp) | Waiting | Indicates a request for confirmation has been sent, and you are waiting for a response from the assigned owner. Hover over the icon to view the date timestamp of the request. | +| ![Green circle with white checkmark](/images/accessinformationcenter/12.0/resourceowners/statusconfirmed.webp) | Confirmed | Indicates the assigned owner confirmed ownership of the resource. Hover over the icon to view the date timestamp of the confirmation. | +| ![Red circle with white X](/images/accessinformationcenter/12.0/resourceowners/statusdeclined.webp) | Declined | Indicates the assigned owner declined ownership of the resource. These individuals would have been asked to suggest an alternative owner. Check the Notes for the resource to view this information. Hover over the icon to view the date timestamp of the decline. _Remember,_ a resource with declined ownership needs to be updated to assign a new owner. See the [Update Resource Wizard](/docs/auditor/10.7/accessreviews/resourceowners/interface/update.md) topic for additional information. | + +If multiple owners have been assigned, there is a choice for which assigned owner(s) should receive +the confirmation. If multiple owners were sent the request, the column remains as a waiting symbol +until the assigned Primary owner replies. + +See the [Confirm Ownership Wizard](/docs/auditor/10.7/accessreviews/resourceowners/confirmation/confirm.md) topic for additional information. diff --git a/docs/auditor/10.8/accessreviews/resourceowners/interface/_category_.json b/docs/auditor/10.8/accessreviews/resourceowners/interface/_category_.json new file mode 100644 index 0000000000..2f3a7839bf --- /dev/null +++ b/docs/auditor/10.8/accessreviews/resourceowners/interface/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Resource Owners Interface", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "interface" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/accessreviews/resourceowners/interface/add.md b/docs/auditor/10.8/accessreviews/resourceowners/interface/add.md new file mode 100644 index 0000000000..2f731e1444 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/resourceowners/interface/add.md @@ -0,0 +1,80 @@ +--- +title: "Add New Resource Wizard" +description: "Add New Resource Wizard" +sidebar_position: 10 +--- + +# Add New Resource Wizard + +The Add new resource wizard is opened with the **Add** button in the Resource Owners interface. + +![Add new resource wizard showing 1. Select Resources page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectresource.webp) + +It contains four pages: + +- 1. Select Resource — Select the resource or group to be managed by the owner +- 2. Select Owners — Select Owners from Active Directory +- 3. Description — Optionally enter a note describing the resource +- 4. Summary — This page provides a preview of the settings selected within the wizard + +See the Add a Resource topic for additional information. + +## Add a Resource + +Follow the steps to add resources one at a time and assign owners. + +**Step 1 –** In the Resource Owners interface, click **Add**. The Add new resource wizard opens. + +![Add new resource wizard page showing 1. Select Resources page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectresource.webp) + +**Step 2 –** On the Select Resource page, select the resource to be managed. Then click **Next**. + +- Search field – Begin typing the name of the resource: + - For File System, enter a share UNC path starting with “\\” + - For example, \\example\share + - For SharePoint, enter the site URL starting with “http://” + - For example, http://farm.corp.com + - For groups, enter the group name in NTAccount format [DOMAIN\GROUP] + - For example, acme\app.group +- Browse option – Navigate through the resource tree to select the desired File System or SharePoint + resource. + +![Add new resources wizard showing 2. Select Owners page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectowners_1.webp) + +**Step 3 –** On the Select Owners page, click **Add** to browse for an owner. Repeat this Step to +add multiple owners. See the [Add Owner Window](/docs/auditor/10.7/accessreviews/resourceowners/interface/addowner.md) topic for additional +information. + +![Add new resources wizard with the 2. Select Owners page showing multiple owners selected](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectownerswithowners.webp) + +**Step 4 –** When only one owner is assigned, the owner will be the Primary by default. When +multiple owners are assigned, the first owner in the list is the Primary owner. Use the arrow +buttons to order the owners. Use the **Add** and **Remove** buttons to modify the list of owners. +When the owners list is complete, click **Next**.The table has several columns with information on +the owners: + +- Owner Name — Name of the assigned owner +- Owner Account — sAMAccountName associated with the owner, as read from Active Directory +- Owner Mail — Trustee's email address as read from Active Directory +- Owner Title — Trustee's title as read from Active Directory +- Owner Department — Trustee's department as read from Active Directory +- Confirmed — Indicates whether or not the assigned owner has confirmed ownership of that resource. + Tool-tips display when hovering over the icons indicating whether the resource ownership has been + confirmed, declined, pending response, or that a confirmation has not been requested. + +![Add new resource wizard showing 3. Description page](/images/auditor/10.7/access/reviews/resourceowners/wizard/description_1.webp) + +**Step 5 –** On the Description page, optionally add a description for the resource in the textbox. +Then click **Next**. + +![Add new resource wizard showing 4. Summary page](/images/auditor/10.7/access/reviews/resourceowners/wizard/summary_1.webp) + +**Step 6 –** On the Summary page, review the settings and click Finish. The Access Reviews +application begins to process the ownership configuration. + +![Add new resource wizard with 4. Summary page showing action status 100% completed](/images/auditor/10.7/access/reviews/resourceowners/wizard/summarytaskcompleted.webp) + +**Step 7 –** The action status displays on the page. When the task has completed (100%), click +**Close**. The Add new resource wizard closes. + +This resource is now being managed through the Access Reviews application. diff --git a/docs/auditor/10.8/accessreviews/resourceowners/interface/addowner.md b/docs/auditor/10.8/accessreviews/resourceowners/interface/addowner.md new file mode 100644 index 0000000000..f62e990588 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/resourceowners/interface/addowner.md @@ -0,0 +1,18 @@ +--- +title: "Add Owner Window" +description: "Add Owner Window" +sidebar_position: 30 +--- + +# Add Owner Window + +The Add Owner window opens from either the [Add New Resource Wizard](/docs/auditor/10.7/accessreviews/resourceowners/interface/add.md) of the +[Update Resource Wizard](/docs/auditor/10.7/accessreviews/resourceowners/interface/update.md). This window is used to search for a user account by +browsing Active Directory. + +![Add Owner window showing Search options](/images/auditor/10.7/access/reviews/resourceowners/window/addowner.webp) + +Enter a name in the search field to find and select users from Active Directory, which populates in +a drop-down menu as you type. If multiple domains are known to the application, ensure the correct +domain is selected from the drop-down menu. Click **OK** and the Add Owner window closes. The +selected user appears in the Owner list. diff --git a/docs/auditor/10.8/accessreviews/resourceowners/interface/confirmremoval.md b/docs/auditor/10.8/accessreviews/resourceowners/interface/confirmremoval.md new file mode 100644 index 0000000000..ef4f2f1cd6 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/resourceowners/interface/confirmremoval.md @@ -0,0 +1,23 @@ +--- +title: "Confirm Removal Window" +description: "Confirm Removal Window" +sidebar_position: 40 +--- + +# Confirm Removal Window + +The process of removing a resource from the Resource Owners interface disassociates the owner(s) +from the resource, it does not remove the resource from the database or from the available reports. +Any history of actions performed by the owner for that resource will be maintained, but pending +actions will be canceled. Pending actions may include s outstanding reviews. + +Follow the steps to remove a resource from being managed through the application. + +**Step 1 –** In the Resource Owners interface, select the resource and click Remove. The Confirm +Removal window opens. + +![Confirm Removal window asking are you sure you wish to remove](/images/threatprevention/7.5/admin/configuration/collectionmanager/confirmremoval.webp) + +**Step 2 –** Click Yes to complete the removal process or **No** to cancel it. + +The resource no longer appears in the Resource Owners interface. diff --git a/docs/auditor/10.8/accessreviews/resourceowners/interface/interface.md b/docs/auditor/10.8/accessreviews/resourceowners/interface/interface.md new file mode 100644 index 0000000000..4a0ae44046 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/resourceowners/interface/interface.md @@ -0,0 +1,64 @@ +--- +title: "Resource Owners Interface" +description: "Resource Owners Interface" +sidebar_position: 10 +--- + +# Resource Owners Interface + +The Resource Owners interface opened by the Resource Owners tab is where Ownership Administrators +perform many operations around assigning and managing ownership. + +![Resource Owners Tab in Netwrix Access Information Center](/images/threatprevention/7.5/reportingmodule/interface.webp) + +The information displayed in the table includes: + +- Resource Name – The icon indicates the type of resource. The resource name includes its location, + such as the UNC path for a file system resource, the URL for SharePoint resource, or Group name + (e.g., [Domain]\[Group]). +- Description – Description or explanation of the resource as supplied by either the Ownership + Administrator or the assigned owner. See the Notes & Descriptions topic for additional + information. +- Owner Name – Name of the assigned owner. If there are several owners of a resource, the list is + comma-separated. +- Status – Indicates whether or not the assigned owner has confirmed ownership of that resource. + Tool-tips display when hovering over the icons indicating whether the resource ownership has been + confirmed, declined, pending response, or that a confirmation has not been requested. See the + [Ownership Confirmation](/docs/auditor/10.7/accessreviews/resourceowners/confirmation/confirmation.md) topic for additional information. +- Notes – Icon indicates a Note has been added. Click on the icon to read the attached note(s). + Notes can be added by Ownership Administrators or populated with alternative owners by individuals + who declined ownership. See the [Edit Notes Window](/docs/auditor/10.7/accessreviews/admin/navigate/editnotes.md) and the Notes & + Descriptions topics for additional information. +- Last Reviewed – Date timestamp when the last review took place for the resource. The hyperlink + will open the Entitlement Reviews interface to that Review Details page displaying the historical + review instance. See the + [Review Details Page](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md#review-details-page) topic for additional + information. +- Active Review – Indicates whether or not there is a pending review. The hyperlink will open the + Entitlement Reviews interface to that Review Details page displaying the active review instance. + See the [Review Details Page](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md#review-details-page) topic for + additional information. + +The table data grid functions the same way as other table grids. See the +[Data Grid Features](/docs/auditor/10.7/accessreviews/admin/navigate/datagrid.md) topic for additional information. + +The buttons at the bottom enable you to conduct the following actions: + +![Action buttons in the Resource Owners Interface](/images/auditor/10.7/access/reviews/resourceowners/interfacebuttons.webp) + +| Button | Function | +| -------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Add | Launches the Add new resource wizard to add a new resource to the list. This allows you to add one resource at a time and assign an owner. See the [Add New Resource Wizard](/docs/auditor/10.7/accessreviews/resourceowners/interface/add.md) topic for additional information. | +| Update | Launches the Update resource wizard for the selected resource. This allows you to make changes to the assigned owners or add/edit the resource description. See the [Update Resource Wizard](/docs/auditor/10.7/accessreviews/resourceowners/interface/update.md) topic for additional information. | +| Remove | Opens the Confirm removal window to removes the selected resource from being managed through the application. _Remember,_ only resources with an assigned owner will be visible in the table. Removing a resource from this table does not delete the resource from the application database. See the [Confirm Removal Window](/docs/auditor/10.7/accessreviews/resourceowners/interface/confirmremoval.md) topic for additional information. | +| Request Confirmation | Opens the Confirm Ownership wizard. Sends an email to the assigned owner(s) for the selected resource requesting ownership confirmation. See the[Confirm Ownership Wizard](/docs/auditor/10.7/accessreviews/resourceowners/confirmation/confirm.md) topic for additional information. | +| Edit Notes | Opens the Edit Notes window for the selected resource and allows free-text editing of the notes. See the [Edit Notes Window](/docs/auditor/10.7/accessreviews/admin/navigate/editnotes.md) topic for additional information. | + +## Notes & Descriptions + +A note entered by an Ownership Administrator in the Resource Owners interface is only visible to +those with access to this interface. This note can also be populated with alternative owners +suggested by an individual who declined ownership. + +A resource description can be supplied by either the Ownership Administrator or the assigned owner, +and is visible during Resource Review creation. diff --git a/docs/auditor/10.8/accessreviews/resourceowners/interface/update.md b/docs/auditor/10.8/accessreviews/resourceowners/interface/update.md new file mode 100644 index 0000000000..d121769ac5 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/resourceowners/interface/update.md @@ -0,0 +1,67 @@ +--- +title: "Update Resource Wizard" +description: "Update Resource Wizard" +sidebar_position: 20 +--- + +# Update Resource Wizard + +The Update resource wizard is opened with the **Update** button in the Resource Owners interface. + +![Update Resource wizard showing 1. Select Owners page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectowners.webp) + +It contains three pages: + +- 1. Select Owners — Lists the current owner(s). Modify by adding new owners, removing owners, or + changing owner priority order (primary, secondary, etc.) +- 2. Description — Enter or modify a note describing the resource +- 3. Summary — Provides a preview of the settings selected within the wizard + +See the Update a Resource topic for additional information. + +## Update a Resource + +Follow the steps to update ownership configuration for a resource. + +**Step 1 –** In the Resource Owners interface, select the desired resource and click **Update**. The +Update resource wizard opens. + +![Update resource wizard showing 1. Select Owners page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectowners.webp) + +**Step 2 –** The Select Owners page lists the currently assigned owner(s). Modify as desired and +click **Next** to continue. + +- Add new owners — Click **Add** to browse for a new owner. See the + [Add Owner Window](/docs/auditor/10.7/accessreviews/resourceowners/interface/addowner.md) topic for additional information. +- Remove an owner — Select an owner and click **Remove** +- Change owner priority — Select an owner and use the arrow buttons to change the order + +_Remember,_ the first owner in the list is the primary owner. The table has several columns with +information on the owners: + +- Owner Name — Name of the assigned owner +- Owner Account — sAMAccountName associated with the owner, as read from Active Directory +- Owner Mail — Trustee's email address as read from Active Directory +- Owner Title — Trustee's title as read from Active Directory +- Owner Department — Trustee's department as read from Active Directory +- Confirmed — Indicates whether or not the assigned owner has confirmed ownership of that resource. + Tool-tips display when hovering over the icons indicating whether the resource ownership has been + confirmed, declined, pending response, or that a confirmation has not been requested. + +![Update resource wizard showing 2. Description page](/images/auditor/10.7/access/reviews/resourceowners/wizard/description.webp) + +**Step 3 –** The Description page displays any description that has been provided by either the +Ownership Administrator or the assigned owner(s) for the resource. Modify as desired by typing in +the textbox. Then click **Next** to continue. + +![Update resource wizard showing 3. Summary page](/images/auditor/10.7/access/reviews/resourceowners/wizard/summary.webp) + +**Step 4 –** On the Summary page, review the settings and click Finish. The Access Reviews +application begins to process the ownership changes. + +![Update resource wizard with 3. Summary page showing action status 100% complete](/images/auditor/10.7/access/reviews/resourceowners/wizard/summarytaskcompleted.webp) + +**Step 5 –** The action status displays on the page. When the update has completed (100%), click +**Close**. The Update resource wizard closes. + +This updates to ownership configuration have been processed. diff --git a/docs/auditor/10.8/accessreviews/resourceowners/overview.md b/docs/auditor/10.8/accessreviews/resourceowners/overview.md new file mode 100644 index 0000000000..b708fd1e56 --- /dev/null +++ b/docs/auditor/10.8/accessreviews/resourceowners/overview.md @@ -0,0 +1,94 @@ +--- +title: "Resource Owners Overview" +description: "Resource Owners Overview" +sidebar_position: 30 +--- + +# Resource Owners Overview + +The Resource Owners interface is where Access Reviews Console users with either the Security Team or +Administrator role (to be referred to as Ownership Administrators) can assign ownership of resources +to be managed through the application. Assigned owners do not require a console user role. Resources +to be included in the Access Reviews workflow must first be assigned owners within the Resource +Owners interface. + +**_RECOMMENDED:_** The Access Reviews application is configured to send Notifications. + +_Remember,_ a “resource” refers to the file system shared folders, SharePoint Online site +collections, and Active Directory (AD) groups. All data available within the Access Reviews +application is collected by Netwrix Auditor according to the synchronized monitoring plans. + +“Owners” are the users who are responsible for reviewing access to the resources to which they are +assigned. + +The My Reviews interface provides owners with access to historical and pending reviews. The My +Reviews interface is only accessible to users who have been assigned ownership of at least one +resource. Owners without a console user role are directed to the My Reviews interface at login. +Owners with a console user role access the pending and historical reviews for their resources by +clicking the My Reviews tab. See the [Pending Reviews](/docs/auditor/10.7/accessreviews/owneroverview/pendingreviews/pendingreviews.md) +topic for additional information. + +Who Can Assign Ownership (Ownership Administrators)? + +- Console Users with Administrator role + + - Can complete the Review Administrator's approval process without impacting the visibility into + the review created by a Review Administrator with the Security Team role + + **CAUTION:** Visibility into a review created by a Review Administrator with the Security + Team role is blocked if a Review Administrator with the Administrator role starts a new + instance. + +- Console Users with Security Team role + + - Visibility into only those reviews personally created + +What Can Resource Owners Do? + +- Perform an access review (when there is a pending review) +- View historical information on access reviews + +See the [Resource Owners Interface](/docs/auditor/10.7/accessreviews/resourceowners/interface/interface.md) topic for additional information. + +## Workflow of Ownership Assignment + +Prerequisite: + +- Optional: The Access Reviews application is configured to send Notifications. See the + [Notifications Page](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md) topic for additional information. + + **NOTE:** By default, the application is configured to send notifications only to the primary + owner. However, this can be customized on the Configuration > Notifications page to send + notifications to all assigned owners. + +- Owners assigned to resources must have: + + - Email address to receive notifications + - Credentials for a domain known to the application + +- Resources and groups must be known to the application + +Workflow: + +**NOTE:** This workflow is not numbered because the Notification piece can occur at any time in the +workflow. + +- Add resources to be managed by associating a business data owner with a resource. See the + [Add New Resource Wizard](/docs/auditor/10.7/accessreviews/resourceowners/interface/add.md) topic for additional information. +- Confirm resource ownership. See the [Ownership Confirmation](/docs/auditor/10.7/accessreviews/resourceowners/confirmation/confirmation.md) topic for additional + information. +- Notify owners of their responsibilities. See the Notification to Owners topic for additional + information. + +## Notification to Owners + +Let your owners know what their responsibilities are by notifying them with the following +information: + +- An explanation of what a review is and why your organization is conducting them through the + Netwrix Auditor Access Reviews application. +- How owners should log into the application console, specifically what URL and credentials to use. +- Expectation on response times +- How to access instructions on how to complete a review. You can link to the + [Owners & Access Reviews](/docs/auditor/10.7/accessreviews/owneroverview/owneroverview.md) topic or download that topic and its subtopics as a + PDF and make it available within your corporate resources. diff --git a/docs/auditor/10.8/accountlockoutexaminer/_category_.json b/docs/auditor/10.8/accountlockoutexaminer/_category_.json new file mode 100644 index 0000000000..84f069a8cb --- /dev/null +++ b/docs/auditor/10.8/accountlockoutexaminer/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Account Lockout Examiner", + "position": 90, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/accountlockoutexaminer/configure.md b/docs/auditor/10.8/accountlockoutexaminer/configure.md new file mode 100644 index 0000000000..02751fa1d2 --- /dev/null +++ b/docs/auditor/10.8/accountlockoutexaminer/configure.md @@ -0,0 +1,157 @@ +--- +title: "Planning and Preparation" +description: "Planning and Preparation" +sidebar_position: 10 +--- + +# Planning and Preparation + +Before you start using Netwrix Account Lockout Examiner, check the prerequisites and set up your +environment, as described in this section. + +## System requirements + +Make sure that the machine where you plan install the solution meets the system requirements listed +below. + +**Hardware:** + +| Specification | Requirement | +| ------------- | ----------- | +| CPU | min 1.5 GHz | +| Memory | 1 GB RAM | +| Disk space | 20 MB | + +**Software:** + +| Specification | Requirement | +| ------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| OS | Both 32-bit and 64-bit of the following operating systems are supported: - Windows Server 2019 - Windows Server 2016 - Windows Server 2012 R2 - Windows Server 2012 - Windows 10 - Windows 8.1 | + +## Accounts and rights + +1. The computer where **Account Lockout Examiner** will run must be a member of the domain where + lockouts happen. +2. The account used to run the application must be a member of the following groups: + 1. **Domain Admins** group (to retrieve the necessary data from domain controllers.) + 2. Local **Administrators** group on the workstation where lockouts happen (to access the + Security event log.) + +In the environments with root/child domains, the account used to run Account Lockout Examiner should +be a member of the local **Administrators** group on the workstations in both root and child +domains. + +## Licensing + +Account Lockout Examiner is shipped with a free pre-configured license that will be valid until a +newer version becomes available. You will be notified on the new version release by the +corresponding message displayed in the product. Then you will need to download that new version. + +## Target infrastructure + +For the solution to connect to and retrieve the necessary information from the Windows machines that +may become the potential lockout reasons, your infrastructure should meet the requirements listed +below. + +### Target systems and platforms + +The following Windows machines are supported as examination targets: + +- Windows Server 2019 +- Windows Server 2016 +- Windows Server 2012 R2 +- Windows Server 2012 +- Windows 10 +- Windows 8.1 + +The solution can work with the following Exchange Server versions to retrieve information needed for +lockout reason detection: + +- Exchange Server 2019 +- Exchange Server 2016 +- Exchange Server 2013 + +### Inbound firewall rules + +Make sure the following **Inbound** firewall rules are enabled on the Domain Controllers and domain +computers: + +- File and Printer Sharing (Echo Request - ICMPv4-In) +- Remote Event Log Management (RPC) +- Remote Service Management (NP-In) +- Remote Scheduled Tasks Management (RPC) +- Remote Volume Management (RPC -EPMAP) +- Windows Management Instrumentation (WMI-In) + +### Ports + +The following **TCP** ports should be open on the Domain Controllers and domain computers: + +- Port **135** — for communication using RPC +- Dynamic ports **1024-65535** — for internal communication + +### Recommended network security settings + +Security researches revealed that NTLM and NTLMv2 authentication is vulnerable to a variety of +malicious attacks, including SMB replay, man-in-the-middle attacks, and brute force attacks. + +To make Windows operating system use more secure protocols (e.g. Kerberos version 5), the outgoing +NTLM authentication traffic should be disabled for the machine where Netwrix Account Lockout +Examiner will run. (See also +[this Microsoft article](https://docs.microsoft.com/en-us/windows/win32/secauthn/microsoft-negotiate).) + +For that, you need to set the **Network Security: Restrict NTLM: Outgoing NTLM traffic to remote +servers** policy setting to **Deny All**. This can be done locally on the machine hosting Netwrix +Account Lockout Examiner, or via Group Policy. + +To disable outgoing NTLM authentication traffic locally: + +1. Run _secpol.msc_. +2. Browse to **Security Settings\Local Policies\Security Options**. +3. Set the **Network Security: Restrict NTLM: Outgoing NTLM traffic to remote servers** setting to + **Deny All**. + +To disable outgoing NTLM authentication traffic via Group Policy: + +1. Open _gpmc.msc_. +2. Find the Group Policy Object (GPO) that is applied to the machine where Netwrix Account Lockout + Examiner runs. +3. Edit this GPO. Browse to **Computer Configuration\Windows Settings\Security Settings\Local + Policies\Security Options**. +4. Set the **Network Security: Restrict NTLM: Outgoing NTLM traffic to remote servers** setting to + **Deny All**. +5. On the machine hosting Netwrix Account Lockout Examiner run the following command via the command + prompt: + + `gpupdate /force` + +### Required audit settings + +You can configure either **Advanced audit policies** or **Basic audit policies** for the target +machines. See Scenario A or Scenario B, respectively. + +Scenario A: Advanced audit policies + +Enable the following **Advanced audit policies** for the target machines: + +| Audit entry | Event ID | Success/Failure | +| ------------------------------------- | -------- | --------------- | +| Account Logon | | | +| Audit Credential Validation | 4776 | Failure | +| Audit Kerberos Authentication Service | 4771 | Failure | +| Audit Other Account Logon Events | 4776 | Failure | +| Account Management | | | +| Audit User Account Management | 4740 | Success | +| Logon/Logoff | | | +| Audit Logon | 4625 | Failure | +| Audit Account Lockout | 4625 | Failure | + +Scenario B: Basic audit policies + +Enable the following **basic audit policies** for the target machines: + +| Audit entry | Event ID | Success/Failure | +| -------------------------- | ---------- | --------------- | +| Audit logon events | 4625 | Failure | +| Audit account logon events | 4776, 4771 | Failure | +| Audit account management | 4740 | Success | diff --git a/docs/auditor/10.8/accountlockoutexaminer/overview.md b/docs/auditor/10.8/accountlockoutexaminer/overview.md new file mode 100644 index 0000000000..ed09f54f50 --- /dev/null +++ b/docs/auditor/10.8/accountlockoutexaminer/overview.md @@ -0,0 +1,70 @@ +--- +title: "Account Lockout Examiner" +description: "Account Lockout Examiner" +sidebar_position: 90 +--- + +# Account Lockout Examiner + +## Overview + +**Netwrix Account Lockout Examiner** helps IT administrators to discover why an Active Directory +account keeps locking out, so they can quickly identify the lockout reason and restore normal +operations. + +You can investigate lockouts originating from the following sources: + +- Applications running on workstations +- Microsoft Exchange ActiveSync devices +- Microsoft Outlook Web Access (including mobile devices) +- Mistyped credentials (interactive logons with incorrect password) +- Terminal Server Sessions +- Windows Credential Manager +- Windows Task Scheduler +- Windows Services + +## Upgrade recommendations + +Since the functionality of older and newer versions does not match one-to-one (see Feature +comparison of Netwrix Account Lockout Examiner 4.1 and 5.x), there is no upgrade path for **Netwrix +Account Lockout Examiner 4.1**. + +Though its users can continue working with that older version, we recommend to use the latest +Netwrix Account Lockout Examiner to benefit from the variety of its new features and enhanced +usability. + +## Feature comparison of Netwrix Account Lockout Examiner 4.1 and 5.x + +Netwrix Account Lockout Examiner 5.1 and later is not an evolutionary update, but rather a total +revamp of version 4.1. Hence, the functionality of the older and newer versions does not match +one-to-one. Feature comparison is provided in the table below. + +| Feature | Version 4.1 | Version 5.x | +| ----------------------------------------------------------------- | ----------------------- | ----------------------------------------------------------------------------------------------------------- | +| **Network/domain configuration** | | | +| Support for multi-domain (Root-Child) configurations | No | Yes | +| **Lockout sources** | | | +| Applications running on workstations | No | Yes | +| Microsoft Exchange ActiveSync devices | No | Yes | +| Microsoft Outlook Web Access (incl. mobile devices) | No | Yes | +| Mistyped credentials (interactive logons with incorrect password) | Yes | Yes | +| Terminal Server Sessions | Yes | Yes | +| Windows Credential Manager | No | Yes | +| Windows Task Scheduler | Yes | Yes | +| Windows Services | Yes | Yes | +| **User experience** | | | +| Easy to install | - | Yes | +| Ease of troubleshooting | - | Yes | +| **Workflow** | | | +| Ability to unlock account & reset password | Yes | No | +| Web-based helpdesk portal | Yes (paid version only) | No | +| Email alerts | Yes | No – check [Netwrix Auditor](https://www.netwrix.com/auditor.html) for monitoring and alerting capabilities | +| Online monitor on critical account status | Yes | No – check [Netwrix Auditor](https://www.netwrix.com/auditor.html) for monitoring and alerting capabilities | + +Users of Account Lockout Examiner 4.1 can continue using that older version, as there is no upgrade +path, just a new installation of the latest version. + +We welcome any feedback and ideas you might have. You can check in on +[Netwrix page at Spiceworks](https://community.spiceworks.com/pages/NetWrix?tab=353) or submit +direct feedback via +[this link](https://community.spiceworks.com/products/47099-netwrix-account-lockout-examiner). diff --git a/docs/auditor/10.8/accountlockoutexaminer/usage.md b/docs/auditor/10.8/accountlockoutexaminer/usage.md new file mode 100644 index 0000000000..56d74168ce --- /dev/null +++ b/docs/auditor/10.8/accountlockoutexaminer/usage.md @@ -0,0 +1,61 @@ +--- +title: "Examining Lockouts" +description: "Examining Lockouts" +sidebar_position: 20 +--- + +# Examining Lockouts + +To start using **Netwrix Account Lockout Examiner**, download it from Netwrix web site. Once the +download completes, run the executable from your browser menu or from your **Downloads** folder. + +To find out why an Active Directory account was locked out, perform the following steps: + +1. Set up the auditing as described in [Planning and Preparation](/docs/auditor/10.7/accountlockoutexaminer/configure.md) section. +2. Download the application onto a computer within the domain where lockouts happen. +3. Run the application. When prompted, accept the end-user license agreement. +4. If you wish, select to participate in Netwrix Customer Experience Improvement program. You can + later change your preference using the product settings (see the next section for details). + +![ale_usage_stats_thumb_0_0](/images/auditor/10.7/accountlockoutexaminer/ale_usage_stats_thumb_0_0.webp) + +5. In the main window, supply the name of the account that was locked out. +6. Specify examiner credentials – the user account that will be used to run the examination, access + domain controllers, and so on. The account must be a member of the **Domain Admins** group. +7. Click **Examine**. + +![ale_new_start_thumb_0_0](/images/auditor/10.7/accountlockoutexaminer/ale_new_start_thumb_0_0.webp) + +Once the examination completes, you will be presented with a list of reasons why the account you +supplied is being locked out. + +## Modifying product settings + +After you click **Settings** in the main window, you can apply the following options: + +| Option | Description | Default | +| ------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------- | +| **Examining** | | | +| Skip unresolved IP addresses | For safety reasons, Netwrix Account Lockout Examiner by default does not connect to the unknown and potentially dangerous IP addresses. See [this Knowledge Base article](https://kb.netwrix.com/5810) for more information. | Enabled | +| Examine all domain controllers | Select this option if you want to examine all domain controllers to detect potential lockout reason. | Disabled | +| **Usage statistics** | | | +| Take part in Netwrix Customer Experience Improvement program | Select this option to participate in the program. See [this Knowledge Base article](https://kb.netwrix.com/5820) for more information on the program. | | + +![ale_settings_thumb_0_0](/images/auditor/10.7/accountlockoutexaminer/ale_settings_thumb_0_0.webp) + +## Troubleshooting + +Log files of Netwrix Account Lockout Examiner can be found in the _%ProgramData%\Netwrix Account +Lockout Examiner\Logs_ folder. + +| Symptom | Cause | Solution | +| --------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| In the environments with root/child domains, you may receive the "_Could not query ComputerName. Access is denied_." error. | The account used to run Netwrix Account Lockout Examiner is not a member of the local **Administrators** group on the workstations in both root and child domains. Administrative rights are required to access the Security Event logs on these workstations. | Make sure this account is included in the local **Administrators** group. | +| **Issues encountered during examination** section is shown in the examination results. | Most probably this means that **Netwrix Account Lockout Examiner** cannot reach some of the data sources it needs. | - Check that you have configured the audit settings in the target domain as described in [Required audit settings](configure.md#required-audit-settings) section. - Check that network connectivity between the Account Lockout Examiner machine and the domain controllers in your domain works properly. | + +![ale_new_results](/images/auditor/10.7/accountlockoutexaminer/ale_new_results.webp) + +We welcome any feedback and ideas you might have. Please take a minute to check in on +[Netwrix page at Spiceworks](https://community.spiceworks.com/pages/NetWrix?tab=353) or submit +direct feedback via +[this link](https://community.spiceworks.com/products/47099-netwrix-account-lockout-examiner). diff --git a/docs/auditor/10.8/addon/_category_.json b/docs/auditor/10.8/addon/_category_.json new file mode 100644 index 0000000000..794d19cc63 --- /dev/null +++ b/docs/auditor/10.8/addon/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Add-Ons", + "position": 80, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/alienvaultusm/_category_.json b/docs/auditor/10.8/addon/alienvaultusm/_category_.json new file mode 100644 index 0000000000..f86aa4d68c --- /dev/null +++ b/docs/auditor/10.8/addon/alienvaultusm/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "AlienVault USM", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/alienvaultusm/automate.md b/docs/auditor/10.8/addon/alienvaultusm/automate.md new file mode 100644 index 0000000000..5aee188592 --- /dev/null +++ b/docs/auditor/10.8/addon/alienvaultusm/automate.md @@ -0,0 +1,35 @@ +--- +title: "Automate Add-On Execution" +description: "Automate Add-On Execution" +sidebar_position: 30 +--- + +# Automate Add-On Execution + +To ensure you feed the most recent data to your SIEM solution, Netwrix recommends scheduling a daily +task for running the add-on. + +**Perform the following steps to create a scheduled task:** + +**Step 1 –** On the computer where you want to execute the add-on, navigate to **Task Scheduler**. + +**Step 2 –** On the **General** tab, specify a task name. Make sure the account that runs the task +has all necessary rights and permissions. + +**Step 3 –** On the **Triggers** tab, click **New** and define the schedule. This option controls +how often audit data is exported from Auditor and saved to event log. Netwrixrecommends scheduling a +daily task. + +**Step 4 –** On the **Actions** tab, click **New** and specify action details. Review the following +for additional information: + +| Option | Value | +| ------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Action | Set to "_Start a program_". | +| Program/script | Input "_Powershell.exe_". | +| Add arguments (optional) | Add a path to the add-on in double quotes and specify add-on parameters. For example: -file "C:\Add-ons\Netwrix_Auditor_Add-on_for_AlienVault_USM.ps1" -NetwrixAuditorHost 172.28.6.15 | + +**Step 5 –** Save the task. + +After creating a task, wait for the next scheduled run or navigate to **Task Scheduler** and run the +task manually. To do this, right-click a task and click **Run**. diff --git a/docs/auditor/10.8/addon/alienvaultusm/collecteddata.md b/docs/auditor/10.8/addon/alienvaultusm/collecteddata.md new file mode 100644 index 0000000000..6aecbd739f --- /dev/null +++ b/docs/auditor/10.8/addon/alienvaultusm/collecteddata.md @@ -0,0 +1,19 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 50 +--- + +# Work with Collected Data + +**Step 1 –** On the computer where you executed the add-on, navigate to **Start** > **All +Programs** > **Event Viewer**. + +**Step 2 –** In the Event Viewer dialog, navigate to **Event Viewer (local)** > **Applications and +Services Logs** >Netwrix Auditor Integration log. + +**Step 3 –** Review events. + +![EventLog_Export_Example](/images/auditor/10.7/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) + +Now you can augment Windows event log with data collected by the Auditor. diff --git a/docs/auditor/10.8/addon/alienvaultusm/deployment.md b/docs/auditor/10.8/addon/alienvaultusm/deployment.md new file mode 100644 index 0000000000..406f23356d --- /dev/null +++ b/docs/auditor/10.8/addon/alienvaultusm/deployment.md @@ -0,0 +1,25 @@ +--- +title: "Choose Appropriate Execution Scenario" +description: "Choose Appropriate Execution Scenario" +sidebar_position: 20 +--- + +# Choose Appropriate Execution Scenario + +Auditor Add-on for the SIEM solution runs on any computer in your environment. For example, you can +run the add-on on the computer where Auditor is installed or on a remote server. Depending on the +execution scenario you choose, you have to define a different set of parameters. See the +[Define Parameters](/docs/auditor/10.7/addon/alienvaultusm/parameters.md) topic for additional information. + +Netwrix suggests the following execution scenarios: + +| Scenario | Example | +| ------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| The add-on runs on the Auditor Server with the current user credentials. Activity Records are exported to a local event log. | C:\Add-ons\Netwrix*Auditor_Add-on_for* AlienVault_USM.ps1 | +| The add-on runs on the Auditor Server with explicitly defined credentials. Activity Records are exported to a local event log. | C:\Add-ons\Netwrix*Auditor_Add-on_for* AlienVault_USM.ps1 -NetwrixAuditorUserName enterprise\NAuser -NetwrixAuditorPassword NetwrixIsCool | +| The add-on exports Activity Records from a remote Auditor Server using current user credentials and writes data to a local event log. | C:\Add-ons\Netwrix*Auditor_Add-on_for* AlienVault_USM.ps1-NetwrixAuditorHost 172.28.6.15 | +| The add-on exports Activity Records from a remote Auditor Server using explicitly defined credentials and writes data to a local event log. | C:\Add-ons\Netwrix*Auditor_Add-on_for* AlienVault_USM.ps1-NetwrixAuditorHost 172.28.6.15 -NetwrixAuditorUserName enterprise\NAuser -NetwrixAuditorPassword NetwrixIsCool | + +For security reasons, Netwrix recommends running the script with current user credentials (skipping +user credentials). Create a special user account with permissions to both Auditor data and event log +and use it for running the script. diff --git a/docs/auditor/10.8/addon/alienvaultusm/integrationeventlog.md b/docs/auditor/10.8/addon/alienvaultusm/integrationeventlog.md new file mode 100644 index 0000000000..a3e492d49e --- /dev/null +++ b/docs/auditor/10.8/addon/alienvaultusm/integrationeventlog.md @@ -0,0 +1,40 @@ +--- +title: "Integration Event Log Fields" +description: "Integration Event Log Fields" +sidebar_position: 60 +--- + +# Integration Event Log Fields + +This section describes how the add-on fills in the Netwrix Auditor **Integration** event log fields +with data retrieved from Activity Records. + +The Activity Record structure is described in the +[Reference for Creating Activity Records](/docs/auditor/10.7/api/activityrecordreference.md)topic. + +| Event log field name | Filled in with value | Details | +| -------------------- | --------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Source | **NA\_**`{Data Source Name}`** -OR- **Netwrix \_Auditor_Integration_API\_\_ | Depending on _SetDataSourceAsEventSource_ in-script parameter. | +| EventID | **`{Calculated by add-on}`** -OR- **0** | Depending on _GenerateEventId_ in-script parameter (calculation result also depends on _IncludeDataSourceToMakeEventId_ parameter — if _GenerateEventId_ = _True_). | +| Task Category | **`{DataSource ID}`** -OR- **1** | Depending on _SetDataSourceAsEventCategory_ in-script parameter. | + +See the [Define Parameters](/docs/auditor/10.7/addon/alienvaultusm/parameters.md) topic for additional information. + +EventData is filled in with data from the Activity Record fields as follows: + +| Entry in EventData | Activity Record field | +| ------------------ | --------------------- | +| DataSource | `{DataSource}` | +| Action | `{Action}` | +| Message | `{Action ObjectType}` | +| Where | `{Where}` | +| ObjectType | `{ObjectType}` | +| Who | `{Who}` | +| What | `{What}` | +| When | `{When}` | +| Workstation | `{Workstation}` | +| Details | `{Details}` | + +Details are filled in only if this Activity Record field is not empty. + +![eventlogexample_thumb_0_0](/images/auditor/10.7/addon/solarwinds/eventlogexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/addon/alienvaultusm/overview.md b/docs/auditor/10.8/addon/alienvaultusm/overview.md new file mode 100644 index 0000000000..16831b68f3 --- /dev/null +++ b/docs/auditor/10.8/addon/alienvaultusm/overview.md @@ -0,0 +1,50 @@ +--- +title: "AlienVault USM" +description: "AlienVault USM" +sidebar_position: 10 +--- + +# AlienVault USM + +Netwrix Auditor Add-on for SIEM helps you to get most from your SIEM investment. This topic focuses +on the AlienVault USM SIEM solution. + +The add-on works in collaboration with Netwrix Auditor, supplying additional data that augments the +data collected by the SIEM solution. + +The add-on enriches your SIEM data with actionable context in human-readable format, including the +before and after values for every change and data access attempt, both failed and successful. +Aggregating data into a single audit trail simplifies analysis, makes your SIEM more cost effective, +and helps you keep tabs on your IT infrastructure. + +Implemented as a PowerShell script, this add-on facilitates the audit data transition from Netwrix +Auditor to the SIEM solution. All you have to do is provide connection details and schedule the +script for execution. + +On a high level, the add-on works as follows: + +1. The add-on connects to the Netwrix Auditor server and retrieves audit data using the Netwrix + Auditor Integration API. +2. The add-on processes Netwrix Auditor-compatible data (Activity Records) into log events that work + as input for the SIEM solution. Each event contains the user account, action, time, and other + details. +3. The add-on creates a special Windows event log named **Netwrix_Auditor_Integration** and stores + events there. These events are structured and ready for integration with the SIEM solution. + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +of the Activity Record and the capabilities of the Netwrix Auditor Integration API. + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| On... | Ensure that... | +| ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| The computer where the script will be executed | - PowerShell **3.0** or later must be installed. - .NET **4.5** or later must be installed. - Execution policy for powershell scripts is set to _"Unrestricted"_. Run Windows PowerShell as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the write permission on the script folder—the add-on creates a special .bin file with the last exported event. - The user running the script must be a member of the Domain Users group. - At least the first script run should be performed under the account with elevated privileges, as it will be necessary to create event log file and perform other required operations. | + +## Compatibility Notice + +Make sure to check your product version, and then review and update your add-ons and scripts +leveraging Netwrix Auditor Integration API. Download the latest add-on version in the Add-on Store. diff --git a/docs/auditor/10.8/addon/alienvaultusm/parameters.md b/docs/auditor/10.8/addon/alienvaultusm/parameters.md new file mode 100644 index 0000000000..d4577ca8c4 --- /dev/null +++ b/docs/auditor/10.8/addon/alienvaultusm/parameters.md @@ -0,0 +1,43 @@ +--- +title: "Define Parameters" +description: "Define Parameters" +sidebar_position: 10 +--- + +# Define Parameters + +Before running or scheduling the add-on, you must define connection details: Auditor Server host, +user credentials, etc. Most parameters are optional, the script uses the default values unless +parameters are explicitly defined. You can skip or define parameters depending on your execution +scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/alienvaultusm/deployment.md) topic +for additional information. + +| Parameter | Default value | Description | +| --------------------------------- | ------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **Connection to Netwrix Auditor** | | | +| NetwrixAuditorHost | localhost:9699 | Assumes that the add-on runs on the computer hosting the Auditor Server and uses default port 9699. If you want to run the add-on on another machine, provide a name of the computer where Auditor Server resides (e.g., 172.28.6.15, EnterpriseNAServer, WKS.enterprise.local). To specify a non-default port, provide a server name followed by the port number (e.g., WKS.enterprise.local:9999). | +| NetwrixAuditorUserName | Current user credentials | Unless specified, the add-on runs with the current user credentials. If you want the add-on to use another account to connect to Auditor Server, specify the account name in the _DOMAIN\username_ format. The account must be assigned the Global reviewer role in Auditor or be a member of the Netwrix Auditor **Client Users** group on the computer hosting Auditor Server. | +| NetwrixAuditorPassword | Current user credentials | Unless specified, the script runs with the current user credentials. Provide a different password if necessary. | + +## In-Script Parameters + +You may also need to modify the parameters that define how EventIDs should be generated for exported +events, though their default values address most popular usage scenarios. In-script parameters are +listed in the table below. To modify them, open the script for edit and enter the values you need. + +Once set, these parameter values must stay unchanged until the last run of the script — otherwise +dynamically calculated EventIDs will be modified and applied incorrectly. + +| Parameter | Default value | Description | +| -------------------------------- | ------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **EventID generation** | | | +| GenerateEventId | True | Defines whether to generated unique EventIDs. Possible parameter values: - True — generate unique EventIDs using Activity Record fields - False — do not generate a unique ID, set EventID=0 for all cases EventID is generated through CRC32 calculation that involves the following Activity Record field values: - ObjectType - Action - DataSource (optional, see below for details) Only the lowest 16 bits of the calculation result are used. See the [Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) topic for additional information. | +| IncludeDataSourceToMakeEventId\* | True | Defines whether the DataSource field of Activity Record should be used in the EventID calculation. This parameter is applied only if GenerateEventId is set to _TRUE_. | +| SetDataSourceAsEventCategory | True | Defines whether to fill in Event Category event field with a numeric value derived from the DataSource field of Activity Record. Possible parameter values: - True — generate a numeric value for Event Category using Activity Record field - False — do not generate a numeric value, set Event Category=1 for all cases The Event Category field value is generated through CRC32 calculation that involves the DataSource field of Activity Record. Only the lowest 9 bits of the calculation result are used. | +| SetDataSourceAsEventSource | False | Defines whether to fill in the Event Source event field with the value from the DataSource field of Activity Record. Possible parameter values: - True — fill in the Event Source with the value from DataSource field of Activity Record, adding the prefix defined by $EventSourcePrefix. Default prefix is _NA_, for example:_NA Windows Server_ - False — set Event Source to _Netwrix_Auditor_Integration_API_ for all cases If the script cannot fill in the Event Source for some DataSource, the default value _Netwrix_Auditor_Integration_API_ will be used. If the event source for particular DataSource does not exist in the Netwrix_Auditor_Integration event log, elevated privileges are required for add-on execution. | + +\* When configuring the **IncludeDataSourceToMakeEventId** parameter, consider that the _Object +Type - Action_ pair may be identical for several data sources (e.g., Object='User' and +Action='Added'); thus, excluding DataSource from calculation may lead to the same EventID +(duplicates). See the [Run the Add-On with PowerShell](/docs/auditor/10.7/addon/alienvaultusm/powershell.md) topic for additional +information about duplicates. diff --git a/docs/auditor/10.8/addon/alienvaultusm/powershell.md b/docs/auditor/10.8/addon/alienvaultusm/powershell.md new file mode 100644 index 0000000000..f066d2b7b0 --- /dev/null +++ b/docs/auditor/10.8/addon/alienvaultusm/powershell.md @@ -0,0 +1,65 @@ +--- +title: "Run the Add-On with PowerShell" +description: "Run the Add-On with PowerShell" +sidebar_position: 40 +--- + +# Run the Add-On with PowerShell + +First, provide a path to your add-on followed by script parameters with their values. Each parameter +is preceded with a dash; a space separates a parameter name from its value. You can skip some +parameters— the script uses a default value unless a parameter is explicitly defined. If necessary, +modify the parameters as required. + +Follow the steps to run add-on with PowerShell: + +**Step 1 –** On computer where you want to execute the add-on, start Windows PowerShell. + +**Step 2 –** Type a path to the add-on. Or simply drag and drop the add-on file in the console +window. + +**Step 3 –** Add script parameters. The console will look similar to the following: + +Windows PowerShell + +Copyright (C) 2014 Microsoft Corporation. All rights reserved. + +PS C:\Users\AddOnUser> C:\Add-ons\Netwrix_Auditor_Add-on_for_AlienVault_USM.ps1 - NetwrixAuditorHost +172.28.6.15 + +**NOTE:** If the script path contains spaces (e.g., _C:\Netwrix Add-ons_), embrace it in double +quotes and insert the ampersand (**&**) symbol in front (e.g., & "_C:\Netwrix Add-ons_"). + +**Step 4 –** Hit **Enter**. + +Depending on the number of Activity Records stored in Netwrix Auditor Audit Database execution may +take a while. Ensure the script execution completed successfully. The Netwrix Auditor Integration +event log will be created and filled with events. + +By default, the Netwrix Auditor Integration event log size is set to 1GB, and retention is set to +"_Overwrite events as needed_". For more information about event log fields, see the documentation. + +**NOTE:** Event records with more than 30,000 characters length will be trimmed. + +At the end of each run, the script creates the +**Netwrix_Auditor_Event_Log_Export_Add-on_EventIDs.txt** file. It defines mapping between the +Activity Records and related Event IDs . You can use this file to track possible duplicates of Event +IDs created at each script execution. Duplicates, if any, are written to the +**Netwrix_Auditor_Event_Log_Export_Add-on_EventIDsDuplicates.txt** file. + +Similarly, the add-on also creates the **Netwrix_Auditor_Event_Log_Export_Add-on_CategoriesIDs.txt** +file that defines mapping between the Data Source and related Category ID. + +## Applying Filters + +Every time you run the script, Auditor makes a timestamp. The next time you run the script, it will +start retrieving new Activity Records. Consider the following: + +- By default, the add-on does not apply any filters when exporting Activity Records. If you are + running the add-on for the first time (there is no timestamp yet) with no filters, it will export + Activity Records for the last month only. This helps to optimize solution performance during the + first run. At the end of the first run, the timestamp will be created, and the next run will start + export from that timestamp. + +- However, if you have specified a time period for Activity Records to be exported, then this filter + will be applied at the add-on first run and the runs that follow. diff --git a/docs/auditor/10.8/addon/amazonwebservices/_category_.json b/docs/auditor/10.8/addon/amazonwebservices/_category_.json new file mode 100644 index 0000000000..794e25fac5 --- /dev/null +++ b/docs/auditor/10.8/addon/amazonwebservices/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Amazon Web Services", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/amazonwebservices/automate.md b/docs/auditor/10.8/addon/amazonwebservices/automate.md new file mode 100644 index 0000000000..fa6d6f2f0a --- /dev/null +++ b/docs/auditor/10.8/addon/amazonwebservices/automate.md @@ -0,0 +1,35 @@ +--- +title: "Automate Add-On Execution" +description: "Automate Add-On Execution" +sidebar_position: 40 +--- + +# Automate Add-On Execution + +To ensure you feed the most recent data to your SIEM solution, Netwrix recommends scheduling a daily +task for running the add-on. + +**Perform the following steps to create a scheduled task:** + +**Step 1 –** On the computer where you want to execute the add-on, navigate to **Task Scheduler**. + +**Step 2 –** On the **General** tab, specify a task name. Make sure the account that runs the task +has all necessary rights and permissions. + +**Step 3 –** On the **Triggers** tab, click **New** and define the schedule. This option controls +how often audit data is exported from Auditor and saved to event log. Netwrixrecommends scheduling a +daily task. + +**Step 4 –** On the **Actions** tab, click **New** and specify action details. Review the following +for additional information: + +| Option | Value | +| ------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Action | Set to "_Start a program_". | +| Program/script | Input "_Powershell.exe_". | +| Add arguments (optional) | Add a path to the add-on in double quotes and specify add-on parameters. For example: -file "C:\Add-ons\Netwrix*Auditor_Add-on_for_Amazon_Web* Services.ps1" -NetwrixAuditorHost 172.28.6.15 | + +**Step 5 –** Save the task. + +After creating a task, wait for the next scheduled run or navigate to **Task Scheduler** and run the +task manually. To do this, right-click a task and click **Run**. diff --git a/docs/auditor/10.8/addon/amazonwebservices/collecteddata.md b/docs/auditor/10.8/addon/amazonwebservices/collecteddata.md new file mode 100644 index 0000000000..b692a9f7ab --- /dev/null +++ b/docs/auditor/10.8/addon/amazonwebservices/collecteddata.md @@ -0,0 +1,18 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 50 +--- + +# Work with Collected Data + +Follow the steps to work with collected data. + +**Step 1 –** Start the Auditor client and navigate to **Search**. + +**Step 2 –** Click **Search**. + +![activityrecords](/images/auditor/10.7/addon/amazonwebservices/activityrecords.webp) + +You might want to apply a filter to narrow down your search results to the NetwrixAPI data source +only. diff --git a/docs/auditor/10.8/addon/amazonwebservices/deployment.md b/docs/auditor/10.8/addon/amazonwebservices/deployment.md new file mode 100644 index 0000000000..93dd51829d --- /dev/null +++ b/docs/auditor/10.8/addon/amazonwebservices/deployment.md @@ -0,0 +1,25 @@ +--- +title: "Choose Appropriate Execution Scenario" +description: "Choose Appropriate Execution Scenario" +sidebar_position: 20 +--- + +# Choose Appropriate Execution Scenario + +The Add-on runs on any computer in your environment. For example, you can run the add-on on the +computer where Auditor is installed or on a remote server. Depending on the execution scenario you +choose, you have to define a different set of parameters. See the [Amazon Web Services](/docs/auditor/10.7/addon/amazonwebservices/overview.md) +topic for additional information. + +Netwrix suggests the following execution scenarios: + +| Scenario | Example | +| ------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The add-on runs on the Auditor Server with the current user credentials. | C:\Add-ons\Netwrix*Auditor_Add-on_for* Amazon_Web_Services.ps1 | +| The add-on runs on the Auditor Server with the explicitly specified user credentials. | C:\Add-ons\Netwrix*Auditor_Add-on_for* Amazon_Web_Services.ps1 -NetwrixAuditorUserName enterprise\NAuser -NetwrixAuditorPassword NetwrixIsCool | +| The add-on runs on a remote computer. Data is written to a remote Auditor repository with the current user credentials. | C:\Add-ons\Netwrix*Auditor_Add-on_for* Amazon_Web_Services.ps1 -NetwrixAuditorHost 172.28.6.15 | +| The add-on runs on a remote computer. Data is written to a remote Auditor repository with the explicitly specified user credentials and monitoring plan name. | C:\Add-ons\Netwrix*Auditor_Add-on_for* Amazon_Web_Services.ps1 -NetwrixAuditorHost 172.28.6.15 -NetwrixAuditorUserName enterprise\NAuser -NetwrixAuditorPassword NetwrixIsCool -NetwrixAuditorPlan Integrations | + +For security reasons, Netwrix recommends running the script with current user credentials (skipping +user credentials). Create a special user account with permissions to both Auditor data and event log +and use it for running the script. diff --git a/docs/auditor/10.8/addon/amazonwebservices/overview.md b/docs/auditor/10.8/addon/amazonwebservices/overview.md new file mode 100644 index 0000000000..332f149d44 --- /dev/null +++ b/docs/auditor/10.8/addon/amazonwebservices/overview.md @@ -0,0 +1,53 @@ +--- +title: "Amazon Web Services" +description: "Amazon Web Services" +sidebar_position: 20 +--- + +# Amazon Web Services + +Amazon Web Services (AWS) provides a wide range of cloud-based services, including solutions and +management tools for virtualization, data storage and hosting, private networking, relational and +NoSQL databases, and many more. AWS CloudTrail is an internal tracking service that records AWS API +calls. Companies leverage this information for analyzing user activity patterns and detecting +potential threats. Unfortunately, collected audit data cannot be used for future reference: AWS +CloudTrail stores events for 7 days allowing administrators and security analysts to review data for +only short time periods. + +Netwrix Auditor helps you gain complete visibility into Amazon Web Services user and service +activity. The Add-on for Amazon Web Services extends native AWS CloudTrail auditing and reporting +possibilities. Aggregating data into a single audit trail simplifies activity analysis and helps you +keep tabs on your hybrid cloud IT infrastructure. With Netwrix Auditor, AWS audit data is kept for +much longer periods of time and always ready for review in easy-to-use search interface. + +Implemented as a PowerShell script, this add-on automates the acquisition of Amazon Web Services +CloudTrail logs and their transition to Netwrix Auditor. All you have to do is provide connection +details and schedule the script for execution. + +On a high level, the add-on works as follows: + +- The add-on makes an AWS API call and collects activity events from AWS CloudTrail. +- The add-on processes these events into Netwrix Auditor-compatible format (Activity Records). Each + Activity Record contains the user account, action, time, and other details. + + Currently, Netwrix Auditor processes details for the following AWS events (other events can be + imported without details): + + | | | | | + | -------------- | ------------------- | ------------------ | --------------- | + | CreateGroup | CreateUser | CreateLoginProfile | CreateAccessKey | + | DeleteGroup | DeleteUser | DeleteLoginProfile | DeleteAccessKey | + | AddUserToGroup | RemoveUserFromGroup | UpdateLoginProfile | UpdateAccessKey | + +- Using the Integration API, the add-on sends the activity events to the Auditor Server, which + writes them to the **Long-Term Archive** and the **Audit Database**. + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information. + +## Compatibility Notice + +Make sure to check your product version, and then review and update your add-ons and scripts +leveraging the Integration API. Download the latest add-on version in the Add-on Store. + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information about schema +updates. diff --git a/docs/auditor/10.8/addon/amazonwebservices/parameters.md b/docs/auditor/10.8/addon/amazonwebservices/parameters.md new file mode 100644 index 0000000000..262ccf54a9 --- /dev/null +++ b/docs/auditor/10.8/addon/amazonwebservices/parameters.md @@ -0,0 +1,49 @@ +--- +title: "Define Parameters" +description: "Define Parameters" +sidebar_position: 10 +--- + +# Define Parameters + +Before running or scheduling the add-on, you must define connection details: Auditor Server host, +user credentials, etc. Most parameters are optional, the script uses the default values unless +parameters are explicitly defined. You can skip or define parameters depending on your execution +scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/amazonwebservices/deployment.md)  +topic for additional information. + +First, provide a path to your add-on followed by script parameters with their values. Each parameter +is preceded with a dash; a space separates a parameter name from its value. You can skip some +parameters— the script uses a default value unless a parameter is explicitly defined. If necessary, +modify the parameters as required. + +| Parameter or switch | Default value | Description | +| ---------------------- | ----------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| AWSSDKInstallPath | 'C:\Program Files (x86)\AWS SDK for .NET' | Assumes that AWS SDK for .NET is installed by its default path. To specify another location, provide a path in single quotes (e.g., '_C:\Program Files (x86)\My SDKs\AWS SDK for .NET_'). | +| ImportAllEvents | — | By deafult, only events with processed details will be imported. To import all events, set the switch during the add-on execution. **NOTE:** Importing all events makes audit data less human-readable. | +| NetwrixAuditorHost | localhost:9699 | Assumes that the add-on runs on the computer hosting Auditor Server and uses default port **9699**. If you want to run the add- on on another machine, provide a name of the computer where Auditor Server resides (e.g., _172.28.6.15, EnterpriseNAServer,WKS.enterprise.local_). To specify a non-default port, provide a server name followed by the port number (e.g., _WKS.enterprise.local:9999_). | +| NetwrixAuditorUserName | Current user credentials | Unless specified, the add-on runs with the current user credentials. If you want the add-on to use another account to connect to Auditor Server, specify the account name in the _DOMAIN\username_ format. **NOTE:** The account must be assigned the **Contributor** role in Auditor. | +| NetwrixAuditorPassword | Current user credentials | Unless specified, the script runs with the current user credentials. Provide a different password if necessary. | +| NetwrixAuditorPlan | — | Unless specified, data is written to the **Netwrix\_ Auditor_API** database and is not associated with a specific monitoring plan. Specify a name of associated monitoring plan in Auditor. In this case, data will be written to a database linked to this plan. **NOTE:** If you select a plan name in the add-on, make sure a dedicated plan is created in Auditor, the **Netwrix API** data source is added to the plan and enabled for monitoring. Otherwise, the add-on will not be able to write data to the **Audit Database**. | + +## Update In-Script Parameters + +**Step 1 –** Right-click a script and select **Edit**. **Windows PowerShell ISE** will start. + +**Step 2 –** Navigate to the following lines: + +$RegionEndpoint = "your AWS region endpoint" + +$AccessKeyID = "your AWS access key ID" + +$SecretAccessKey = "your AWS secret access key" + +**Step 3 –** Update the following parameters: + +| Parameter | Description | +| --------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| RegionEndpoint | Provide an endpoint for your region, e.g., us-east-1 (N. Virginia). **NOTE:** If you use more than one region in your environment, run the script several times with different region endpoints. See the [AWS service endpoints](https://docs.aws.amazon.com/general/latest/gr/rande.html) article for additional information. | +| AccessKeyID | Provide an AWS access key ID for your account. Access key is used to run requests to AWS SDK, CLIs, and API. | +| SecretAccessKey | Provide an AWS secret access key that works with your access key ID. | + +**Step 4 –** Save the script. diff --git a/docs/auditor/10.8/addon/amazonwebservices/powershell.md b/docs/auditor/10.8/addon/amazonwebservices/powershell.md new file mode 100644 index 0000000000..515847bf2b --- /dev/null +++ b/docs/auditor/10.8/addon/amazonwebservices/powershell.md @@ -0,0 +1,34 @@ +--- +title: "Run the Add-On with PowerShell" +description: "Run the Add-On with PowerShell" +sidebar_position: 30 +--- + +# Run the Add-On with PowerShell + +Follow the steps to run add-on with PowerShell: + +**Step 1 –** On computer where you want to execute the add-on, start Windows PowerShell. + +**Step 2 –** Type a path to the add-on. Or simply drag and drop the add-on file in the console +window. + +**Step 3 –** Add script parameters. The console will look similar to the following: + +Windows PowerShell + +Copyright (C) 2014 Microsoft Corporation. All rights reserved. + +PS C:\Users\AddOnUser> C:\Add-ons\Netwrix_Auditor_Add-on_for_Amazon_Web_Services.ps1 - +NetwrixAuditorHost 172.28.6.15 + +**NOTE:** If the script path contains spaces (e.g., `C:\Netwrix Add-ons\`), embrace it in double +quotes and insert the ampersand (&) symbol in front (e.g., & "`C:\Netwrix Add-ons\`"). + +**Step 4 –** Hit **Enter**. + +Depending on the number of events logged by CloudTrail it may take a while. Ensure the script +execution completed successfully. Every time you run a script, Auditor makes a checkpoint with the +last imported event. The next time you run the script, it will start retrieving new events. + +**NOTE:** By default, CloudTrail keeps events for **7** days. diff --git a/docs/auditor/10.8/addon/arcsight/_category_.json b/docs/auditor/10.8/addon/arcsight/_category_.json new file mode 100644 index 0000000000..8f68082292 --- /dev/null +++ b/docs/auditor/10.8/addon/arcsight/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "ArcSight", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/arcsight/automate.md b/docs/auditor/10.8/addon/arcsight/automate.md new file mode 100644 index 0000000000..a853cd56d1 --- /dev/null +++ b/docs/auditor/10.8/addon/arcsight/automate.md @@ -0,0 +1,37 @@ +--- +title: "Automate Add-On Execution" +description: "Automate Add-On Execution" +sidebar_position: 40 +--- + +# Automate Add-On Execution + +To ensure you feed the most recent data to ArcSight, Netwrix recommends scheduling a daily task for +running the add-on. + +**To create a scheduled task** + +**Step 1 –** On the computer where you want to execute the add-on, navigate to **Task Scheduler**. + +**Step 2 –** Select **Create Task**. + +**Step 3 –** On the **General** tab, specify a task name, e.g., Netwrix Auditor Add-on for ArcSight. +Make sure the account that runs the task has all necessary rights and permissions. + +**Step 4 –** On the **Triggers** tab, **click** New and define the schedule. This option controls +how often audit data is exported from Auditor and transferred to ArcSight Logger. Netwrix recommends +scheduling a daily task. + +**Step 5 –** On the **Actions** tab, click **New** and specify action details. Review the following +for additional information. + +| Option | Value | +| ------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Action | Set to "_Start a program_". | +| Program/script | Input "_Powershell.exe_". | +| Add arguments (optional) | Add a path to the add-on in double quotes and specify add-on parameters. For example: -file "C:\Add-ons\Netwrix*Auditor_Add-on_for_HPE* ArcSight.ps1" -ArcSightHost 172.28.6.24 - NetwrixAuditorHost 172.28.6.15 | + +**Step 6 –** Save the task. + +After creating a task, wait for the next scheduled run or navigate to **Task Scheduler** and run the +task manually. To do this, right-click a task and click **Run**. diff --git a/docs/auditor/10.8/addon/arcsight/collecteddata.md b/docs/auditor/10.8/addon/arcsight/collecteddata.md new file mode 100644 index 0000000000..739b67d6b1 --- /dev/null +++ b/docs/auditor/10.8/addon/arcsight/collecteddata.md @@ -0,0 +1,25 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 50 +--- + +# Work with Collected Data + +Follow the steps to see collected data. + +**Step 1 –** Log on to your ArcSight Logger web interface. + +**Step 2 –** On the **Summary** page, select the **Event Summary by Receiver** diagram and click the +**UDP Receiver** segment (Activity Records are imported through UDP Receiver). Select **TCP +Receiver** if you specified TCP protocol for transferring data. + +**Step 3 –** On the **Analyze** page that opens, review the search field. Ensure your computer is +listed as Receiver (e.g., "_172.28.156.131 [UDP Receiver]_"). If you imported Activity Records from +more than one Netwrix Auditor Server, add all of them in the search field. + +**NOTE:** You might want to modify time range and the fields shown. + +![activityrecords](/images/auditor/10.7/addon/arcsight/activityrecords.webp) + +**Step 4 –** Review imported Activity Records. diff --git a/docs/auditor/10.8/addon/arcsight/deployment.md b/docs/auditor/10.8/addon/arcsight/deployment.md new file mode 100644 index 0000000000..a4bc797a6f --- /dev/null +++ b/docs/auditor/10.8/addon/arcsight/deployment.md @@ -0,0 +1,25 @@ +--- +title: "Choose Appropriate Execution Scenario" +description: "Choose Appropriate Execution Scenario" +sidebar_position: 20 +--- + +# Choose Appropriate Execution Scenario + +The Add-on runs on any computer in your environment. For example, you can run the add-on on the +computer where Auditor is installed or on a remote server. Depending on the execution scenario you +choose, you have to define a different set of parameters. + +Netwrix suggests the following execution scenarios: + +| Scenario | Example | +| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The add-on runs on the Auditor Server with the current user credentials. Data is written a remote ArcSight through UDP protocol. | C:\Add-ons\Netwrix*Auditor_Add-on_for_HPE* ArcSight.ps1 -ArcSightHost 172.28.6.18 | +| The add-on runs on the Auditor Server with the current user credentials. Data is written a remote ArcSight through TCP protocol. | C:\Add-ons\Netwrix*Auditor_Add-on_for_HPE* ArcSight.ps1 -TCP -ArcSightHost 172.28.6.18 | +| The add-on runs on the Auditor Server with the explicitly specified user credentials. Data is written a remote ArcSight with a non-default UDP port. | C:\Add-ons\Netwrix*Auditor_Add-on_for_HPE* ArcSight.ps1 -ArcSightHost 172.28.6.18:9999 -NetwrixAuditorUserName enterprise\NAuser - NetwrixAuditorPassword NetwrixIsCool | +| The add-on runs on a remote computer with the current user credentials. Data is retrieved from a remote Auditor repository and written to a remote ArcSight. | C:\Add-ons\Netwrix*Auditor_Add-on_for_HPE* ArcSight.ps1 -ArcSightHost 172.28.6.24 - NetwrixAuditorHost 172.28.6.15 | +| The add-on runs on a remote computer. Data is retrieved from a remote Auditor repository with the explicitly specified user credentials and written to a remote ArcSight. | C:\Add-ons\Netwrix*Auditor_Add-on_for_HPE* ArcSight.ps1 -ArcSightHost 172.28.6.24 - NetwrixAuditorHost 172.28.6.15 -NetwrixAuditorUserName enterprise\NAuser -NetwrixAuditorPassword NetwrixIsCool | + +For security reasons, Netwrix recommends running the script with current user credentials (skipping +user credentials). Create a special user account with permissions to both Auditor data and event log +and use it for running the script. diff --git a/docs/auditor/10.8/addon/arcsight/overview.md b/docs/auditor/10.8/addon/arcsight/overview.md new file mode 100644 index 0000000000..8f6e567079 --- /dev/null +++ b/docs/auditor/10.8/addon/arcsight/overview.md @@ -0,0 +1,54 @@ +--- +title: "ArcSight" +description: "ArcSight" +sidebar_position: 30 +--- + +# ArcSight + +Netwrix Auditor helps you extend auditing possibilities and get most from your ArcSight investment. +The Netwrix Auditor Add-on for ArcSight works in collaboration with Auditor, supplying additional +data that augments the data collected by ArcSight. + +The add-on enriches your SIEM data with actionable context in human-readable format, including the +before and after values for every change and data access attempt, both failed and successful. +Aggregating data into a single audit trail simplifies analysis, makes your SIEM more cost effective, +and helps you keep tabs on your IT infrastructure. + +Implemented as a PowerShell script, this add-on facilitates the audit data transition from Netwrix +Auditor to ArcSight. All you have to do is provide connection details and schedule the script for +execution. + +On a high level, the add-on works as follows: + +1. The add-on connects to the Netwrix Auditor Server and retrieves audit data using the Integration + API. +2. The add-on processes Auditor-compatible data (Activity Records) into native ArcSight CEF format. + Each exported event contains the user account, action, time, and other details. +3. The add-on uploads audit trails to ArcSight Logger making it immediately ready for review and + analysis. ArcSight SmartConnector configured as Syslog Daemon is supported as well. + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +of the Activity Record and the capabilities of the Integration API. + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| on... | Ensure that... | +| ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The Auditor Server side | - The Audit Database settings are configured in the Auditor. See the [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topic for additional information. - The TCP 9699 port (default Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the **Global reviewer** role in Auditor or is a member of the **Netwrix Auditor Client Users** group. Alternatively, you can grant the **Global administrator** role or add the user to the **Netwrix Auditor Administrators** group. In this case, this user will have the most extended permissions in the product. | +| On the ArcSight side | - The UDP Receiver is enabled and is configured to receive CEF as source and use the default port **514**. - To check receiver settings or add a new receiver, start the ArcSight Logger web interface and navigate to **Configuration** > **Receivers**. ![configuration](/images/auditor/10.7/addon/arcsight/configuration.webp) **NOTE:** You can configure TCP Receiver and switch to TCP protocol and port **515**. - The user running the script must have sufficient permissions to supply data to ArcSight. | +| The computer where the script will be executed | - Execution policy for powershell scripts is set to "_Unrestricted_". Run **Windows PowerShell** as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the **write** permission on the script folder—the add-on creates a special .bin file with the last exported event. | + +## Compatibility Notice + +Make sure to check your product version, and then review and update your add-ons and scripts +leveraging the Integration API. Download the latest add-on version in the Add-on Store. See the +[Integration API](/docs/auditor/10.7/api/overview.md)topic for additional information. + +The add-on was renamed due to HPE acquisition by Micro Focus. The former add-on name was Netwrix +Auditor Add-on for HPE ArcSight. This name may still be present in the add-on files and +documentation. ArcSight trademarks and registered trademarks are property of their respective +owners. diff --git a/docs/auditor/10.8/addon/arcsight/parameters.md b/docs/auditor/10.8/addon/arcsight/parameters.md new file mode 100644 index 0000000000..b1f76ffb96 --- /dev/null +++ b/docs/auditor/10.8/addon/arcsight/parameters.md @@ -0,0 +1,26 @@ +--- +title: "Define Parameters" +description: "Define Parameters" +sidebar_position: 10 +--- + +# Define Parameters + +Before running or scheduling the add-on, you must define connection details: Auditor Server host, +user credentials, etc. Most parameters are optional, the script uses the default values unless +parameters are explicitly defined. You can skip or define parameters depending on your execution +scenario and security policies. See the[Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/arcsight/deployment.md) topic +for additional information. + +First, provide a path to your add-on followed by script parameters with their values. Each parameter +is preceded with a dash; a space separates a parameter name from its value. You can skip some +parameters— the script uses a default value unless a parameter is explicitly defined. If necessary, +modify the parameters as required. + +| Parameter or switch | Default value | Description | +| ---------------------- | ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| TCP | – | By default, UDP protocol is used. Specify the switch during the add-on execution if you want to use TCP protocol for transferring data. Via UDP, events will be sent one by one, via TCP— in a batch. | +| ArcSightHost | – | Provide a name of the computer where ArcSight resides (e.g., 172.28.6.18, ArcSightSRV, ArcSightSRV.enterprise.local). **NOTE:** This is a mandatory parameter. Unless specified, the add- on assumes that the default port 514 is used for UDP and 515 for TCP. To specify a non-default port, provide a server name followed by the port number (e.g., _ArcSightSRV.enterprise.local:9998_). | +| NetwrixAuditorHost | localhost:9699 | Assumes that the add-on runs on the computer hosting Auditor Server and uses default port 9699. If you want to run the add- on on another machine, provide a name of the computer where Auditor Server resides (e.g., 172.28.6.15, EnterpriseNAServer, WKS.enterprise.local). To specify a non-default port, provide a server name followed by the port number (e.g., _WKS.enterprise.local:9999_). | +| NetwrixAuditorUserName | Current user credentials | Unless specified, the add-on runs with the current user credentials. If you want the add-on to use another account to connect to Auditor Server, specify the account name in the _DOMAIN\username_ format. **NOTE:** The account must be assigned the **Global reviewer** role in Netwrix Auditor or be a member of the **Netwrix Auditor Client Users** group on the computer hosting Auditor Server. | +| NetwrixAuditorPassword | Current user credentials | Unless specified, the script runs with the current user credentials. Provide a different password if necessary. | diff --git a/docs/auditor/10.8/addon/arcsight/powershell.md b/docs/auditor/10.8/addon/arcsight/powershell.md new file mode 100644 index 0000000000..7718acf4af --- /dev/null +++ b/docs/auditor/10.8/addon/arcsight/powershell.md @@ -0,0 +1,31 @@ +--- +title: "Run the Add-On with PowerShell" +description: "Run the Add-On with PowerShell" +sidebar_position: 30 +--- + +# Run the Add-On with PowerShell + +Follow the steps to run add-on with PowerShell: + +**Step 1 –** On computer where you want to execute the add-on, start Windows PowerShell. + +**Step 2 –** Type a path to the add-on. Or simply drag and drop the add-on file in the console +window. + +**Step 3 –** Add script parameters. The console will look similar to the following: + +Windows PowerShell PS C:\Users\AddOnUser> C:\Add-ons\Netwrix_Auditor_Add-on_for_HPE_ArcSight.ps1 - +ArcSightHost 172.28.6.24 -NetwrixAuditorHost 172.28.6.15 + +**NOTE:** If the script path contains spaces (e.g., _C:\Netwrix Add-ons_), embrace it in double +quotes and insert the ampersand (**&**) symbol in front (e.g., & "_C:\Netwrix Add-ons_"). + +**Step 4 –** Hit **Enter**. + +Depending on the number of Activity Records stored in the Audit Database execution may take a while. +Ensure the script execution completed successfully. As a result, data will be exported to ArcSight. +Note that events exceeding 4000 symbols are trimmed. + +Every time you run the script, Auditor makes a timestamp. The next time you run the script, it will +start retrieving new Activity Records. diff --git a/docs/auditor/10.8/addon/azurefiles/_category_.json b/docs/auditor/10.8/addon/azurefiles/_category_.json new file mode 100644 index 0000000000..41ceb7f93b --- /dev/null +++ b/docs/auditor/10.8/addon/azurefiles/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Azure Files", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/azurefiles/collecteddata.md b/docs/auditor/10.8/addon/azurefiles/collecteddata.md new file mode 100644 index 0000000000..1760daf9a2 --- /dev/null +++ b/docs/auditor/10.8/addon/azurefiles/collecteddata.md @@ -0,0 +1,31 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 20 +--- + +# Work with Collected Data + +To leverage data collected with the add-on, you can do the following in Auditor: + +- Search for required data. For that, start Auditor client and navigate to **Search**. After + specifying the criteria you need, click **Search**. You will get a list of activity records with + detailed information on who did what in the reported time period. + +You might want to apply a filter to narrow down your search results to the Netwrix**API** data +source only. + +- You can also click **Tools** in the upper-right corner and select the command you need. For + example: + - If you want to periodically receive the report on the results of search with the specified + criteria, click **Subscribe**. Then specify how you want the report to be delivered – as an + email or as a file stored to the file share. + - To create an alert on the specific occurrences, click **Create alert**. + - To export filtered data to PDF or CSV, click **Export data**. +- You can also configure and receive alerts on the events you are interested in. + +See the following topics for additional information: + +- [Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) +- [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) +- [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) diff --git a/docs/auditor/10.8/addon/azurefiles/deployment.md b/docs/auditor/10.8/addon/azurefiles/deployment.md new file mode 100644 index 0000000000..67238f1089 --- /dev/null +++ b/docs/auditor/10.8/addon/azurefiles/deployment.md @@ -0,0 +1,91 @@ +--- +title: "Deployment Procedure" +description: "Deployment Procedure" +sidebar_position: 10 +--- + +# Deployment Procedure + +Follow the steps to install Azure Files add-on. + +**Step 1 –** Accept EULA. + +![azurefileeula](/images/auditor/10.7/addon/azurefiles/azurefileeula.webp) + +**Step 2 –** Select the installation folder and click **Next**. + +![azurefileinstfolder](/images/auditor/10.7/addon/azurefiles/azurefileinstfolder.webp) + +**Step 3 –** Click **Install**. The wizard will start and ask the additional parameters. + +## Configure Azure Files for Monitoring + +Follow the steps to configure Azure files for monitoring. + +**Step 1 –** Make sure you have a storage account to store logs. To reduce the volume of the stored +logs and the corresponding cost, it is recommended to create a rule in Life Cycle Management for +this storage. Netwrix Auditor doesn't need historic logs, after the add-on has written them into the +database. Refer to the +[corresponding Microsoft article](https://learn.microsoft.com/en-us/azure/storage/blobs/lifecycle-management-overview?tabs=azure-portal) +for additional information. + +**Step 2 –** Enable audit in the Azure Files settings. Go to the Diagnostic settings, and make sure +that the following options are selected: + +- "Audit" under the **Logs** +- "Archive to a storage account" under the **Destination details** +- Correct Storage account in the drop-down menu + +**Step 3 –** Go to the storage account that has been created before and copy Connection String. This +parameter will be used in the add-on configuration. + +**Step 4 –** If Microsoft Entra Kerberos or Active Directory Domain Services is used as an Identity +source, Graph API will be used to resolve the user names. It is necessary to register an Azure App +and grant it the following permissions: + +- Type - Application +- Microsoft.Graph - User.Read.All + +After that, save the Tenant ID, Application ID, and secret. + +## Configure the add-on + +Follow the steps to configure the add-on. + +**Step 1 –** After the installation, the add-on configuration wizard will start. If it didn't start +automatically - open it from the installation folder. + +**Step 2 –** Select **Proceed**. + +**Step 3 –** Provide Auditor Server IP address and port number followed by endpoint for posting +Activity Records. See the [API Endpoints](/docs/auditor/10.7/api/endpoints.md) topic for more information. + +This assumes that the add-on runs on the computer hosting Auditor Server and uses default port 9699. + +If you want to run the add-on on another machine, you need to provide a name of the computer where +Auditor Server resides (e.g., _172.28.6.15_, EnterpriseNAServer, WKS.enterprise.local). To specify a +non-default port, provide a server name followed by the port number (e.g., WKS.ent +erprise.local:9999). + +**CAUTION:** Do not modify the endpoint part (_/netwrix/api_). + +![generalsettings](/images/auditor/10.7/addon/azurefiles/generalsettings.webp) + +**Step 4 –** Specify Active Directory credentials: + +- Username – Provide the name of the account under which the service runs. Unless specified, the + service runs under the account currently logged on. +- Password – Provide the password for the selected account. + +![adcredentials](/images/auditor/10.7/addon/azurefiles/adcredentials.webp) + +**Step 5 –** Paste Azure Connection String in the corresponded field and click **Next**. + +![azurefileconnectionstring](/images/auditor/10.7/addon/azurefiles/azurefileconnectionstring.webp) + +**Step 6 –** Enter Tenant ID, App ID and App Secret of the Azure App you registered for the add-on. +Click **Next**. + +![microsoftgraphapi](/images/auditor/10.7/addon/azurefiles/microsoftgraphapi.webp) + +**Step 7 –** Click **Run** and close the window. The service should start the data collection now. diff --git a/docs/auditor/10.8/addon/azurefiles/overview.md b/docs/auditor/10.8/addon/azurefiles/overview.md new file mode 100644 index 0000000000..6ba8252c80 --- /dev/null +++ b/docs/auditor/10.8/addon/azurefiles/overview.md @@ -0,0 +1,56 @@ +--- +title: "Azure Files" +description: "Azure Files" +sidebar_position: 40 +--- + +# Azure Files + +Azure Files is a Microsoft service that offers file shares in the cloud that are accessible via the +industry standard Server Message Block (SMB) protocol, Network File System (NFS) protocol, and Azure +Files REST API. Azure file shares can be mounted concurrently by cloud or on-premises deployments. +SMB Azure file shares are accessible from Windows, Linux, and macOS clients. To learn more about +Azure Files, refer to the +[corresponding Microsoft article](https://learn.microsoft.com/en-us/azure/storage/files/storage-files-introduction). + +The Netwrix Auditor Add-On for Azure Files works in collaboration with Netwrix Auditor, supplying +data about SMB changes on your Azure Files shares, such as document reads, modifications and +deletions. + +To get the add-on up and running, please read the following topics: + +- [Deployment Procedure](/docs/auditor/10.7/addon/azurefiles/deployment.md) +- [Work with Collected Data](/docs/auditor/10.7/addon/azurefiles/collecteddata.md) + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +- The Audit Database settings are configured in Auditor Server. See the + [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and + [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. +- The TCP 9699 port (default Integration API port) is open for inbound connections. +- The user writing data to the Audit Database is granted the Contributor role in Auditor. See the + [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional + information. +- Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor + Administrators group. In this case, this user will have the most extended permissions in the + product. +- Azure Files environment is configured for auditing. The connection of Azure file share to Windows + should be configured with authentication through Active Directory or Entra ID (as opposed to the + account key). See the [Deployment Procedure](/docs/auditor/10.7/addon/azurefiles/deployment.md)topic for more information. +- Active Directory Domain Services or Microsoft Entra Kerberos is used as an Identity source. See + the [Deployment Procedure](/docs/auditor/10.7/addon/azurefiles/deployment.md) topic for additional information. + +## How It Works + +On a high level, the add-on works as follows: + +- The add-on collects logs from the specified Azure storage account. The add-on supports activity + auditing of shares with identity-based access via saved logs collected from storage account and + using Graph API for SIDs resolving. +- The add-on processes these events into Netwrix Auditor compatible format (Activity Records). Each + Activity Record contains the user account, action, time, and other details. +- Using the Integration API, the add-on sends the activity records to the Netwrix Auditor Server, + which writes them to the Long-Term Archive and the Audit Database. diff --git a/docs/auditor/10.8/addon/connectwise/_category_.json b/docs/auditor/10.8/addon/connectwise/_category_.json new file mode 100644 index 0000000000..6b7787d37e --- /dev/null +++ b/docs/auditor/10.8/addon/connectwise/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "ConnectWise Manage", + "position": 50, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/connectwise/configure.md b/docs/auditor/10.8/addon/connectwise/configure.md new file mode 100644 index 0000000000..e4107a6604 --- /dev/null +++ b/docs/auditor/10.8/addon/connectwise/configure.md @@ -0,0 +1,85 @@ +--- +title: "Configure ConnectWise" +description: "Configure ConnectWise" +sidebar_position: 20 +--- + +# Configure ConnectWise + +This section describes how to configure settings of the main add-on component, Netwrix Auditor +**ConnectWise Manage Integration Service** that is required for connection to ConnectWise Manage and +service ticket creation. + +Follow the steps to configure ConnectWise. + +**Step 1 –** To connect to ConnectWise Manage REST API, the API keys will be required. To obtain +them, you will need an API Member account. See +[this article](https://docs.connectwise.com/ConnectWise_Documentation/090/040/010/040) for details. + +**Step 2 –** Navigate to the add-on folder and run ConfigureConnection.exe. Follow the steps of the +wizard to configure connection to ConnectWise Manage and ticketing options. At the Connection Setup +step, specify the following: + +![1_connection](/images/auditor/10.7/addon/connectwise/connectionsetup.webp) + +| Parameter | Description | +| ---------- | --------------------------------------------------------------------------------------------- | +| Site | URL of ConnectWise Manage system. | +| Company ID | The ID of ConnectWise Manage subscriber (Managed Service Provider). | +| PublicKey | Public key you obtained for the API Member — it will be used to access ConnectWise REST API. | +| PrivateKey | Private key you obtained for the API Member — it will be used to access ConnectWise REST API. | + +**Step 3 –** At the Service Ticket Routing step, specify the following: + +![serviceticketrouting](/images/auditor/10.7/addon/connectwise/serviceticketrouting.webp) + +| Parameter | Description | +| ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Company | Organization that will be recorded as ticket originator — this can be a company or MSP's managed client. | +| Service Board | Service board where the tickets will be processed. Service tickets created by the add-on will be assigned the default ticket status for the selected service board. | +| Service Team | Service team that will be responsible for tickets handling. | +| Priority | Priority for ticket handling. Default is _Priority 3 — Normal Response_. | + +**Step 4 –** Configure how Auditor activity record fields will be mapped with **ConnectWise Manage** +ticket fields. + +![ticketfieldmapping](/images/auditor/10.7/addon/connectwise/ticketfieldmapping.webp) + +| Parameter | Description | +| --------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Title | Specify how the Title field of the service ticket will be filled in. Default: [Netwrix Auditor] %AlertName% That is, the Title field for tickets originating from Netwrix alerts will include the alert name with [Netwrix Auditor] prefix (e.g., _[Netwrix Auditor] Password Reset)_. | +| Summary | Specify how the Summary field of the service ticket will be filled in. By default, it will contain the following detailed information received from the corresponding Auditor alert and activity record: Alert Details: Who: %Who% Action: %Action% Object type: %ObjectType% What: %What% When: %When% Where: %Where% Workstation: %Workstation% Details: %Details% Data source: %DataSource% Monitoring plan: %MonitoringPlanName% Item: %Item% Sent by Netwrix Auditor from %Computer% | +| Severity Level | Specify what severity level will be assigned to the service tickets. Default is Medium. | +| Business Impact | Specify what business impact level will be assigned to the service tickets. Default is Medium. | + +Optionally, you can click the Create Test Ticket button — then a test ticket will be created in +ConnectWise Manage to help you verify the connection and ticketing settings you configured. +Its Summary field will contain _[Netwrix Auditor] Test Alert_; its Initial Description field will +contain _This ticket was created to test the functionality of Netwrix Auditor Add-on for ConnectWise +Manage_. Also, the test ticket will have a sample attachment (_TestAttachment.txt_). +![testalert](/images/auditor/10.7/addon/connectwise/testalert.webp) + +**Step 5 –** Finally, at the **Summary** step, review the location of configuration file with the +settings you specified: _C:\Addon\ITSM_CW\ConnectWiseSettings.xml_. + +![summary_thumb_0_0](/images/auditor/10.7/addon/connectwise/summary_thumb_0_0.webp) + +If needed, you can edit the configuration file manually. See the +[Connection and Ticketing Settings](/docs/auditor/10.7/addon/connectwise/connectionticketingsettings.md) topic for additional +information. + +Click **Finish** to restart the add-on service so that the changes can take effect. + +## Transferring Configuration + +If necessary, you can use configuration file created with this wizard as a template for multiple +managed clients. Perform the following steps: + +**Step 1 –** Open the file path provided at the **Summary** step of the wizard. + +**Step 2 –** Locate the **ConnectWiseSettings.xml** file and copy it to the add-on folder on another +client's server. + +**Step 3 –** Then run ConfigureConnection.exe on that server to launch the configuration wizard and +specify the necessary settings — for example, provide the managed client company name at the +**Service Ticket Routing** step, and so on. diff --git a/docs/auditor/10.8/addon/connectwise/connectionticketingsettings.md b/docs/auditor/10.8/addon/connectwise/connectionticketingsettings.md new file mode 100644 index 0000000000..5f13c77fc2 --- /dev/null +++ b/docs/auditor/10.8/addon/connectwise/connectionticketingsettings.md @@ -0,0 +1,112 @@ +--- +title: "Connection and Ticketing Settings" +description: "Connection and Ticketing Settings" +sidebar_position: 40 +--- + +# Connection and Ticketing Settings + +It is recommended that you use configuration wizard to specify connection and ticketing settings. +However, you can adjust them manually, using the information provided in this section. + +## Settings for ConnectWise Ticket Creation + +Specify how data arriving from Auditor should be used to fill in ConnectWise ticket fields. For +that, review `` section of the ConnectWiseSettings.xml file. The parameters inside +this section correspond to ConnectWise ticket fields and use the same naming (e.g., priority, +urgency). + +Each `` includes the `` and `` pair that defines a +ConnectWise ticket field and a value that will be assigned to it. For most parameters, default +values are provided. Add more ticket parameters or update values if necessary. + +| `` | `` | Description | +| ------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Summary | [Netwrix Auditor] %AlertName% | Instructs the system to fill in the Summary ticket field with the Auditor alert name (e.g., _[Netwrix Auditor] Password Reset)_. | +| InitialDescription | Alert Details: Who: %Who% Action: %Action% Object type: %ObjectType% What: %What% When: %When% Where: %Where% Workstation: %Workstation% Details: %Details% Data source: %DataSource% Monitoring plan: %MonitoringPlanName% Item: %Item% Sent by Netwrix Auditor from %Computer% | Instructs the system to fill in the InitialDescription ticket field with the Auditor activity record data. To read more about activity records, see the [Reference for Creating Activity Records](/docs/auditor/10.7/api/activityrecordreference.md) topic for additional information. You may need to fill in the internal description intended for use by MSP only (this description will not be visible to managed clients), perform the following steps: **Step 1 –** Run the configuration wizard (or modify _ConnectWiseSettings.xml_) to specify the settings you need. **Step 2 –** Then open _ConnectWiseSettings.xml_ for edit. **Step 3 –** Locate the **InitialDescription** parameter and change the Name attribute to _initialInternalAnalysis_. | +| Impact/Urgency | Medium | Instructs the system to set ticket Impact/Urgency to _Medium_. | + +## Parameters for Handling Related Tickets + +Review the `` section. It shows what information about related tickets will +be included in your current ticket. Update the template if necessary. + +| CorrelationTicketFormat | Description | +| --------------------------------------------------- | --------------------------------------------------------------------------------------------------------- | +| Previous incident for the same alert type: Id: %id% | The service will automatically substitute parameters from this section with values from a related ticket. | + +## Parameters for Reopening Tickets + +Review the `` section. It defines the tickets the add-on can reopen +automatically. + +| Name | Description | +| ------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| ClosedTicketStates TicketState | Lists closed ticket statuses. By default, resolved, closed, and canceled tickets can be reopened. To specify a new status, provide its ID in the `` tag (e.g., 8 for canceled). | +| NewState | Defines a ticket status once it is reopened. By default, is set to _new_. To specify another status, provide its ID in the `` tag (e.g., _1_ for _new_). | + +When finished, save your changes to configuration file. + +Remember to restart the add-on service every time you update any of configuration files. + +## Review Other Parameters + +You can update other parameters with your own values if necessary; however, it is recommended that +you contact Netwrixbefore modifying this section. + +| Name | Description | +| --------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| IgnoreUploadAttachmentError | Instructs the add on to ignore the attachment upload errors. - If false, a corresponding error message will be displayed. - If true, the file that failed to upload will be stored to the **MissingAttachments** subfolder in the add-on folder. Error message will not appear on the screen; instead, the following record will be written to the add-on log: _Attached files for ticket id: `{0}` dumped: '`{attachmentPath}`'_ Default parameter value is **true**. | + +You can also review the `` section. It shows information related to ConnectWise +Manage objects. + +Example: + +```xml + + + company + + + id + + 42 + + + + + + board + + + id + + 1 + + + + + + priority + + + id + + 4 + + + + + + team + + + id + + 25 + + + + +``` diff --git a/docs/auditor/10.8/addon/connectwise/deployment.md b/docs/auditor/10.8/addon/connectwise/deployment.md new file mode 100644 index 0000000000..1d7439ddd8 --- /dev/null +++ b/docs/auditor/10.8/addon/connectwise/deployment.md @@ -0,0 +1,44 @@ +--- +title: "Deploy the Add-On" +description: "Deploy the Add-On" +sidebar_position: 10 +--- + +# Deploy the Add-On + +Follow the steps to deploy the Add-On for ConnectWise. + +**Step 1 –** Prepare Auditor for using the add-on: + +1. In the Auditor settings, enable Integration API and specify connection port. See the + [Integrations](/docs/auditor/10.7/admin/settings/integrations.md) topic for additional information. +2. Make sure your monitoring plans set up in Auditor are using Audit Databases to store collected + data. See the [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topic for additional + information. + +**Step 2 –** Download the add-on package and copy it to the computer where Auditor Server resides. + +**Step 3 –** Unpack the ZIP archive to a folder of your choice; by default, it will be unpacked to +the Netwrix Auditor Add-On for ConnectWise Manage folder. + +**Step 4 –** Run the install.cmd file. It will deploy and enable the Netwrix Auditor **ConnectWise +Manage Integration Service**. + +**Step 5 –** Run the ConfigureConnection.exe and follow the steps of the wizard to configure +connection and ticketing settings for ConectWise Manage. See the +[Configure ConnectWise ](/docs/auditor/10.7/addon/connectwise/configure.md)topic for additional information. + +**Step 6 –** (optional) To adjust the add-on operation and data flow settings, edit the +ITSMSettings.xml file. See the [Operational Settings](/docs/auditor/10.7/addon/connectwise/operationalsettings.md) topic for additional +information. + +**Step 7 –** In Auditor, go to Alerts, select the required alerts, click Edit, and in the Response +Action section of the alert properties specify the full path to Netwrix.ITSM.AlertResponseAction.exe +file (the add-on component responsible for alert handling), for example, +_C:\Addon\ITSM_CW\Netwrix.ITSM.AlertResponseAction.exe_. + +## Enabling TLS 1.2 Usage + +The add-on supports Transport Layer Security (TLS) 1.2 security protocol. By default, this +capability is disabled. To enable it, in the **ConnectWiseSettings.xml**, locate the +**``** parameter and set its value to _TRUE_. diff --git a/docs/auditor/10.8/addon/connectwise/msp.md b/docs/auditor/10.8/addon/connectwise/msp.md new file mode 100644 index 0000000000..c7d5d8308e --- /dev/null +++ b/docs/auditor/10.8/addon/connectwise/msp.md @@ -0,0 +1,27 @@ +--- +title: "MSP Usage Example" +description: "MSP Usage Example" +sidebar_position: 30 +--- + +# MSP Usage Example + +Consider a situation when a password is reset for a user, computer, or **inetOrgPerson** account. + +After deploying and configuring the add-on as described in this guide, the MSP (Managed Service +Providers) staff member enabled Auditor integration feature: + +![Integration API Settings](/images/auditor/10.7/addon/connectwise/integrations_thumb_0_0.webp) + +Also, she enabled the ‘**Password Reset**’ alert from the Auditor predefined set of alerts and +specified the add-on launch as response action. + +![addon](/images/auditor/10.7/addon/connectwise/addon.webp) + +Then a new ticket is automatically created shortly after any account password is reset. + +All necessary details about the case are automatically entered into the ConnectWise ticket (_Initial +Description_ field), including the name of the workstation, the name of the account in question, and +the time when the event occurred: + +![serviceboard](/images/auditor/10.7/addon/connectwise/serviceboard.webp) diff --git a/docs/auditor/10.8/addon/connectwise/operationalsettings.md b/docs/auditor/10.8/addon/connectwise/operationalsettings.md new file mode 100644 index 0000000000..3c7c99de1d --- /dev/null +++ b/docs/auditor/10.8/addon/connectwise/operationalsettings.md @@ -0,0 +1,48 @@ +--- +title: "Operational Settings" +description: "Operational Settings" +sidebar_position: 50 +--- + +# Operational Settings + +This section describes how to configure settings of the main add-on component, Netwrix Auditor +**ConnectWise Manage Integration Service**, required for its operation, including connection to +Auditor Server, activity records processing, queuing and forwarding, ticket creation, and so on. + +For that, follow the steps: + +**Step 1 –** Navigate to the add-on folder and select ITSMSettings.xml. + +**Step 2 –** Define operational parameters such as Auditor connection settings, the number of +tickets the service can create per hour, ability to reopen closed tickets, etc. For most parameters, +default values are provided. You can adjust them depending on your execution scenario and security +policies. Use the following format: `value`. + +| Parameter | Default value | Description | +| ----------------------------------- | ---------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| NetwrixAuditorHost | https://localhost:9699 | The add-on runs on the computer where Auditor Server resides and uses the default Integration API port (TCP port **9699**). To specify a non-default port, provide a new port number (e.g., _https://localhost:8788_). The add-on must always run locally, on the computer where Auditor Server resides. | +| NetwrixAuditorUserName | — | Unless specified, the Netwrix Auditor **ConnectWise Manage Integration Service** runs under the LocalSystem account. If you want this service to use another account to connect to Auditor Server, specify the account name in the _DOMAIN\username_ format in this parameter value. The user account for running the service and connecting to Auditor Server must be granted the Global administrator role in Auditor or be a member of the Netwrix Auditor **Administrators** group. It must also have sufficient permissions to create files on the local computer. | +| NetwrixAuditorPassword | — | Provide a password for the account. Unless an account is specified, the service runs under the LocalSystem account and does not require a password. | +| TicketFloodLimit | 10 | Specify the maximum number of standalone tickets the service can create during TicketFloodInterval. If a ticket flood limit is reached, the service writes all new alerts into a single ticket. | +| TicketFloodInterval | 3600 | Specify the time period, in seconds. During this time period, the service can create as many tickets as specified in TicketFloodLimit. The default value is 3600 seconds, i.e., 1 hour. | +| ConsolidationInterval | 900 | Specify the time period, in seconds. During this time period, the service does not process similar alerts as they happen but consolidates them before updating open tickets. The default values is 900 seconds, i.e., 15 minutes. This option works in combination with UpdateTicketOnRepetitiveAlertsand is helpful if you want to reduce the number of ticket updates on ConnectWise Manage side. I.e., this option defines the maximum delay for processing alerts and updating existing tickets. Tickets for new alert types are created immediately. For example, a new alert is triggered—the service opens a new ticket. The alert keeps firing 20 times more within 10 minutes. Instead of updating the ticket every time, the service consolidates alerts for 15 minutes, and then updates a ticket just once with all collected data. | +| CheckAlertQueueInterval | 5 | Internal parameter. Check and process the alert queue every N seconds; in seconds. | +| UpdateTicketOnRepetitiveAlerts | true | Instead of creating a new ticket, update an existing active ticket if a similar alert occurs within UpdateInterval. To open a new ticket for every alert, set the parameter to _"false"_. | +| ReopenTicketOnRepetitiveAlerts | true | Instead of creating a new ticket, reopen an existing ticket that is in a closed state (be default, closed, canceled, and resolved) if a similar alert occurs within UpdateInterval. This option works only when UpdateTicketOnRepetitiveAlerts is set to _"true"_. If you want to reopen closed tickets, you must be granted the right to perform Write operations on inactive tickets. | +| UpdateInterval | 86400 | Specify the time period, in seconds. If a similar alert occurs in less than N seconds, it is treated as a part of an existing ticket. The default value is 86400 seconds, i.e., 24 hours. If an alerts is triggered after the UpdateInterval is over, a new ticket is created. | +| EnableTicketCorrelation | true | Review history and complement new tickets with information about similar tickets created previously. This information is written to the Description field. This option is helpful if you want to see if there is any correlation between past tickets (from the last month, by default) and a current ticket. | +| CorrelationInterval | 2592000 | Specify the time period, in seconds. During this time period, the service treats similar tickets as related and complements a new ticket with data from a previous ticket. The default value is 2592000 seconds, i.e., 1 month. Information on alerts that are older than 1 month is removed from internal service storage. | +| ProcessActivityRecord QueueInterval | 5 | Internal parameter. Process activity record queue every N seconds; in seconds. | +| DisplayOnlyFirstActivityRecord | true | Add only the first activity record in the work notes, activity records that update this ticket will be added as attachments to this ticket. If false, all activity records will be displayed in the ticket work notes. | +| ActivityRecordRequestsRetention | | | +| RequestLimit | 5000 | Internal parameter. The maximum number of activity record requests the service can store in its internal memory. Once the limit is reached, the service clears activity record requests starting with older ones. | +| RequestLimitInterval | 604800 | Internal parameter. The service can store the activity record requests not older than N seconds; in seconds. Older activity record requests are cleared. | +| ActivityRecordWebRequests | | | +| RequestLimit | 200 | Internal parameter. The maximum number of activity records the service can retrieve in a single request. | +| RequestTimeout | 180 | Internal parameter. By default, 3 minutes. Defines the connection timeout. | +| TicketRequestsRetention | | | +| RequestLimit | 300000 | Internal parameter. The maximum number of ticket requests the service can store in its internal memory. Once the limit is reached, the service clears ticket requests starting with older ones. | +| RequestLimitInterval | 604800 | Internal parameter. The service can store the ticket requests not older than N seconds; in seconds. Older tickets requests are cleared. | + +**Step 3 –** Restart the service every time you update ITSMSettings.xml configuration file. diff --git a/docs/auditor/10.8/addon/connectwise/overview.md b/docs/auditor/10.8/addon/connectwise/overview.md new file mode 100644 index 0000000000..4892876cf8 --- /dev/null +++ b/docs/auditor/10.8/addon/connectwise/overview.md @@ -0,0 +1,81 @@ +--- +title: "ConnectWise Manage" +description: "ConnectWise Manage" +sidebar_position: 50 +--- + +# ConnectWise Manage + +Managed Service Providers (MSP) need to effectively utilize and standardize IT service management +tools. Those who use for that purpose the ConnectWise Manage solution usually have similar processes +in place: + +- When an incident or a problem occurs in the IT environment, managed client sends (usually by + email) a request to the MSP’s service desk. A service ticket is then created manually or + automatically in ConnectWise Manage. +- Each ticket is assigned to authorized personnel for investigation and resolution in accordance + with the existing workflow. +- To control ticket handling and report on statistics, ConnectWise service boards are used. + +Netwrix has built a ready-to-use add-on that automates incident management, automatically creating +service tickets for security alerts triggered by Netwrix Auditor This integration brings in the +following benefits: + +- Seamless integration with the existing MSP service process +- Speeding up the process of restoring secure, normal business service +- Minimizing the gap between incident detection and the start of a resolution process +- Automating ticket handling and reducing human errors that could impact its quality +- Meeting or exceeding service level agreements (SLAs) while saving time and effort + +To implement the solution, Managed Service Provider does the following on the client side: + +1. Deploys and maintains Netwrix Auditor that monitors users’ activity and configuration changes +2. Installs and configures integration solution (add-on) on Netwrix Auditor Server +3. Controls ticket resolution and corrective measures + +On a high level, the workflow is as follows: + +![CW_workflow](/images/auditor/10.7/addon/connectwise/diagramworkflow_thumb_0_0.webp) + +1. Managed Service Provider installs and configures the add-on on AuditorServer. MSP also enables + the necessary alerts in Netwrix Auditor, specifying add-on launch as the response action in the + alert settings. +2. Whenever the alert is triggered, the add-on uses the Integration API to retrieve activity record + for the original event from the audit store. An activity record contains the user account, + action, time, and other details. The add-on creates a service ticket in ConnectWise Manage, + populates it with data from the activity record, and assigns Impact, Priority and SLA status to + the ticket. +3. The designated service team performs data analysis and root cause detection to resolve the + ticket; MSP is notified of the results and possible response actions to take on the client side. +4. MSP performs actions for incident response. + +Solution architecture and key components are shown in the figure below: + +![diagram](/images/auditor/10.7/addon/connectwise/diagram.webp) + +- **Alert Handler (Netwrix.ITSM.AlertResponseAction.exe)** — the executable that is specified in the + Auditor alerts as the response action. Alert Handler: + 1. Receives the IDs of the alert and associated activity record. + 2. Forwards them to the Netwrix AuditorConnectWise Manage Integration Service over RPC, putting + the alert into the service queue. + +For details on the alert response action, see the +[Configure a Response Action for Alert](/docs/auditor/10.7/admin/alertsettings/responseaction.md) topic for +additional information. + +- **Netwrix Auditor ConnectWise Manage Integration Service (Netwrix.ITSM.IntegrationServiceCW.exe)** + — the main component of the solution, implemented as Windows service. It does the following: + 1. Interacts with Auditor via its Integration API to retrieve the activity records from the + Audit Database by record ID. + 2. Forwards activity record data to ConnectWise Manage via its REST API, creates a new service + ticket and populates its properties, as specified by user in the add-on configuration. + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| Location | Prerequisites | +| ------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Auditor Server | - The add-on supports Auditor version 9.96. - The add-on will run on the computer where Auditor Server works, so the add-on package should be copied to that machine. - For add-on operation, **NET 4.5** framework is required on Auditor Server. - Starting with add-on build 1.0.12.0, **TLS 1.2** protocol is supported. By default, this capability is disabled. For detailed information on enabling it, see the [Deploy the Add-On](/docs/auditor/10.7/addon/connectwise/deployment.md) topic for additional information. **Auditor settings** - The Audit Database settings should be configured in Auditor Server. - Monitoring plans should be configured to store data to the Audit Database. - The **TCP 9699** port (default Integration API port) should be open for inbound connections. **Required permissions** - Unless specified, the **Netwrix.ITSM.IntegrationServiceCW.exe** Windows service (main add-on co mponent) will run under the **LocalSystem** account. - The account that will be used by Netwrix.ITSM.IntegrationServiceCW.exe component to access Auditor Server must be granted the Global administrator role in Auditor. -OR- be a member of the Netwrix Auditor **Administrators** group. | +| ConnectWise Manage | - By default, the add-on connects to the latest version of the ConnectWise Manage application (v4_6_release). **Required permissions** - To connect to ConnectWise Manage via its REST API, you will require an API Member account — it is needed to log in to ConnectWise Manage. See [this article](https://docs.connectwise.com/ConnectWise_Documentation/090/040/010/040) for details. - It is recommended to assign the **API Member** account to a limited security role with the following permissions: - **System** – **Table Setup** – **Inquire Level** = **All** - **Companies** – **Company Maintenance** – **Add(all)**, **Inquire(all)** - **Companies** – **Manage Attachments** – **Add(all)**, **Inquire(all)** - **Service Desk** – **Service Tickets** – **Add(all)**, **Inquire(all)** | diff --git a/docs/auditor/10.8/addon/copilot/_category_.json b/docs/auditor/10.8/addon/copilot/_category_.json new file mode 100644 index 0000000000..901ff91fa5 --- /dev/null +++ b/docs/auditor/10.8/addon/copilot/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Copilot", + "position": 70, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/copilot/collecteddata.md b/docs/auditor/10.8/addon/copilot/collecteddata.md new file mode 100644 index 0000000000..32c1b9d4a0 --- /dev/null +++ b/docs/auditor/10.8/addon/copilot/collecteddata.md @@ -0,0 +1,25 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 20 +--- + +# Work with Collected Data + +To leverage data collected with the add-on, you can do the following in Auditor: + +- Search for required data. For that, start Auditor client and navigate to **Search**. After + specifying the criteria you need, click **Search**. You will get a list of activity records with + detailed information on who did what in the reported time period. + +You might want to apply a filter to narrow down your search results to the Netwrix API data source +only. + +- You can also click **Tools** in the upper-right corner and select the command you need. For + example: + - If you want to periodically receive the report on the results of search with the specified + criteria, click **Subscribe**. Then specify how you want the report to be delivered – as an + email or as a file stored to the file share. + - To create an alert on the specific occurrences, click **Create alert**. + - To export filtered data to PDF or CSV, click **Export data**. +- You can also configure and receive alerts on the events you are interested in. diff --git a/docs/auditor/10.8/addon/copilot/deployment.md b/docs/auditor/10.8/addon/copilot/deployment.md new file mode 100644 index 0000000000..c3d4a8a8cc --- /dev/null +++ b/docs/auditor/10.8/addon/copilot/deployment.md @@ -0,0 +1,50 @@ +--- +title: "Deployment Procedure" +description: "Deployment Procedure" +sidebar_position: 10 +--- + +# Deployment Procedure + +Follow the steps to install Microsoft Copilot add-on. + +**Step 1 –** Accept EULA. + +**Step 2 –** Select the installation folder and click **Next**. + +**Step 3 –** Click **Install**. The wizard will start and ask the additional parameters. + +## Configure Copilot for Monitoring + +Follow the steps to configure Copilot for monitoring. + +**Step 1 –** Make sure you have a storage account to store logs. To reduce the volume of the stored +logs and the corresponding cost, it is recommended to create a rule in Life Cycle Management for +this storage. Netwrix Auditor doesn't need historic logs, after the add-on has written them into the +database. Refer to the +[corresponding Microsoft article](https://learn.microsoft.com/en-us/azure/storage/blobs/lifecycle-management-overview?tabs=azure-portal) +for additional information. + +**Step 2 –** Register an Azure App and grant it the following permissions: + +- Microsoft.Graph — Domain.Read.All +- Office 365 Management APIs — ActivityFeed.Read + +## Configure the add-on + +Follow the steps to configure the add-on. + +**Step 1 –** Specify Active Directory credentials. + +- Username – Provide the name of the account under which the service runs. Unless specified, the + service runs under the account currently logged on. +- Password – Provide the password for the selected account. + +![adcredentials](/images/auditor/10.7/addon/copilot/adcredentials.webp) + +**Step 2 –** Enter Tenant ID, App ID and App Secret of the Azure App you registered for the add-on. +Click **Next**. + +![tenantapp](/images/auditor/10.7/addon/copilot/tenantapp.webp) + +**Step 3 –** Click **Run** and close the window. The service should start the data collection now. diff --git a/docs/auditor/10.8/addon/copilot/overview.md b/docs/auditor/10.8/addon/copilot/overview.md new file mode 100644 index 0000000000..664b25d4b8 --- /dev/null +++ b/docs/auditor/10.8/addon/copilot/overview.md @@ -0,0 +1,51 @@ +--- +title: "Copilot" +description: "Copilot" +sidebar_position: 70 +--- + +# Copilot + +Microsoft Copilot is an AI-powered assistant designed to help users in Microsoft 365 apps like Word, +Excel, and Teams. It leverages large language models to assist with tasks such as generating +content, analyzing data, and automating workflows. + +To retrieve activity logs on Copilot interactions, the Add-on requires an Azure App registration. +This allows the application to interact with Microsoft services by obtaining necessary logs and data +related to Copilot activity. + +The Netwrix Auditor Add-On for Microsoft Copilot works in collaboration with Netwrix Auditor. To get +the add-on up and running, refer the following topics: + +- [Deployment Procedure](/docs/auditor/10.7/addon/copilot/deployment.md) +- [Work with Collected Data](/docs/auditor/10.7/addon/copilot/collecteddata.md) + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +- The Audit Database settings are configured in Auditor Server. See the + [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and + [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. +- The TCP 9699 port (default Integration API port) is open for inbound connections. +- The user writing data to the Audit Database is granted the Contributor role in Auditor. See the + [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional + information. +- Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor + Administrators group. In this case, this user will have the most extended permissions in the + product. +- Active Directory Domain Services or Microsoft Entra Kerberos is used as an Identity source. See + the [Deployment Procedure](/docs/auditor/10.7/addon/azurefiles/deployment.md) topic for additional information. + +## How the Copilot Add-on Works + +On a high level, the add-on works as follows: + +- The add-on collects integration logs from the specified Azure storage account. This includes the + information about the documents that have been used. +- The add-on reworking the collected logs into the Netwrix Auditor compatible format, which is + Activity Records. Each Activity Record contains the user information, such as an account, action, + time, and other details. +- Using the Integration API, the add-on sends the activity records to the Netwrix Auditor Server, + which writes them to the Long-Term Archive and the Audit Database. diff --git a/docs/auditor/10.8/addon/ctera/_category_.json b/docs/auditor/10.8/addon/ctera/_category_.json new file mode 100644 index 0000000000..452718b09e --- /dev/null +++ b/docs/auditor/10.8/addon/ctera/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Ctera", + "position": 60, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/ctera/collecteddata.md b/docs/auditor/10.8/addon/ctera/collecteddata.md new file mode 100644 index 0000000000..5849885f38 --- /dev/null +++ b/docs/auditor/10.8/addon/ctera/collecteddata.md @@ -0,0 +1,57 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 30 +--- + +# Work with Collected Data + +To leverage data collected with the add-on, you can do the following in Auditor: + +- Search for required data. For that, start Auditor client and navigate to **Search**. After + specifying the criteria you need, click **Search**. You will get a list of activity records with + detailed information on who did what in the reported time period. + +You can apply a filter to narrow down your search results to the Netwrix **API** data source only. + +![ctera](/images/auditor/10.7/addon/ctera/ctera.webp) + +- Also, you can click **Tools** in the upper-right corner and select the command you need. For + example: + - If you want to periodically receive the report on the results of search with the specified + criteria, click **Subscribe**. Then specify how you want the report to be delivered – as an + email or as a file stored to the file share. + - To create an alert on the specific occurrences, click **Create alert**. + - To export filtered data to PDF or CSV, click **Export data**. +- You can also configure and receive alerts on the events you are interested in. + +See the following topics for additional information: + +- [Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) +- [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) +- [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) + +To leverage data collected with the add-on, you can do the following in Auditor: + +- Search for required data. For that, start Auditor client and navigate to **Search**. After + specifying the criteria you need, click **Search**. You will get a list of activity records with + detailed information on who did what in the reported time period. + +You can apply a filter to narrow down your search results to the Netwrix **API** data source only. + +![AR from CyberArk in NA](/images/auditor/10.7/addon/cyberark/cyberark_thumb_0_0.webp) + +- Also, you can click **Tools** in the upper-right corner and select the command you need. For + example: + - If you want to periodically receive the report on the results of search with the specified + criteria, click **Subscribe**. Then specify how you want the report to be delivered – as an + email or as a file stored to the file share. + - To create an alert on the specific occurrences, click **Create alert**. + - To export filtered data to PDF or CSV, click **Export data**. +- You can also configure and receive alerts on the events you are interested in. + +See the following topics for additional information: + +- [Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) +- [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) +- [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) diff --git a/docs/auditor/10.8/addon/ctera/install.md b/docs/auditor/10.8/addon/ctera/install.md new file mode 100644 index 0000000000..955178db1f --- /dev/null +++ b/docs/auditor/10.8/addon/ctera/install.md @@ -0,0 +1,24 @@ +--- +title: "Install Add-On" +description: "Install Add-On" +sidebar_position: 10 +--- + +# Install Add-On + +Follow the steps to install the Add-On: + +**Step 1 –** Navigate to your add-on package. + +**Step 2 –** Unzip the Add-On to a desired folder. + +**Step 3 –** Run the installation package. + +**Step 4 –** Accept the license agreement and follow the instructions of the setup wizard. + +**Step 5 –** On the **Destination Folder** step, specify the installation folder (_C:\Program Files +(x86)\Netwrix Add-ons\_ by default). + +**Step 6 –** Click **Install**. + +**Step 7 –** When done, click **Finish**. diff --git a/docs/auditor/10.8/addon/ctera/overview.md b/docs/auditor/10.8/addon/ctera/overview.md new file mode 100644 index 0000000000..2d2a98c2af --- /dev/null +++ b/docs/auditor/10.8/addon/ctera/overview.md @@ -0,0 +1,63 @@ +--- +title: "Ctera" +description: "Ctera" +sidebar_position: 60 +--- + +# Ctera + +The add-on works in collaboration with Netwrix Auditor, supplying data about activity on your +Ctera-based devices. Aggregating data into a single audit trail simplifies analysis, makes activity +monitoring more cost effective, and helps you keep tabs on your IT infrastructure. + +Implemented as a service, this add-on facilitates the data transition from Ctera-based systems to +Netwrix Auditor. All you have to do is provide connection details and specify parsing rules. + +On a high level, the add-on works as follows: + +1. The add-on listens to the specified UDP ports and captures designated Syslog messages. +2. The add-on processes these events into Netwrix Auditor-compatible format (Activity Records). Each + Activity Record contains the user account, action, time, and other details. +3. Using the Integration API, the add-on sends the activity records to the Netwrix Auditor Server, + which writes them to the Long-Term Archive and the Audit Database. + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +of the Activity Record and the capabilities of the Integration API. + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| On... | Ensure that... | +| ----------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| The Auditor Server side | - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP **9699** port (default Integration API port) is open for inbound connections. - The user writing data to the Audit Database is granted the **Contributor** role in Auditor. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the **Global administrator** role or add the user to the **Netwrix Auditor Administrators** group. In this case, this user will have the most extended permissions in the product. | +| The computer where the add-on will be installed | - The UDP 514 port is open for inbound connections. - .Net Framework 4.7.2 and above is installed. Review the following Microsoft technical article for additional information on how to install .Net Framework 4.7.2: [Microsoft .NET Framework 4.7.2 offline installer for Windows](https://support.microsoft.com/en-us/topic/microsoft-net-framework-4-7-2-offline-installer-for-windows-05a72734-2127-a15d-50cf-daf56d5faec2). | + +### Configure Logging for CTERA Edge Filer + +Prior to start using the Add-On, configure syslog logging settings on your CTERA Edge Filers. See +the +[Configuring Syslog Settings](https://kb.ctera.com/docs/configuring-logging#configuring-syslog-settings) +article on the CTERA product documentation portal for detailed instructions. + +### Accounts and Rights + +By default, the add-on will run under the _Local System_ account. The add-on and Auditor must be +installed on the same server. + +### Considerations and Limitations + +- The Add-On must be deployed in the same subnet as CTERA Edge Filer and Auditor. +- If the monitoring plan name in the _``_ add-on configuration parameter is + specified incorrectly, this may lead to temp files generation and, therefore, to inefficient disk + space usage. +- If you are using Netwrix Auditor for Network Devices, the 514 UDP port may be already in use, and + you should specify another port when configuring the add-on settings (see the + [Install Add-On](/docs/auditor/10.7/addon/ctera/install.md) and [Define Parameters](/docs/auditor/10.7/addon/ctera/parameters.md) topics for additional + information). Another option is to install the add-on and Auditor Server on different machines. + +## Compatibility Notice + +Make sure to check your product version, and then review and update your add-ons and scripts +leveraging Netwrix Auditor Integration API. Download the latest add-on version in the Add-on Store. diff --git a/docs/auditor/10.8/addon/ctera/parameters.md b/docs/auditor/10.8/addon/ctera/parameters.md new file mode 100644 index 0000000000..e142f66165 --- /dev/null +++ b/docs/auditor/10.8/addon/ctera/parameters.md @@ -0,0 +1,30 @@ +--- +title: "Define Parameters" +description: "Define Parameters" +sidebar_position: 20 +--- + +# Define Parameters + +The configuration wizard opens in the default web browser: + +![configwizard](/images/auditor/10.7/addon/ctera/configwizard.webp) + +Click **Proceed** and complete the following fields: + +| Option | Description | +| ------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Specify General Settings | | +| Listed UDP port | Specify UDP port for listening incoming events. (**514** by default). | +| Auditor Endpoint | Auditor Server IP address and port number followed by endpoint for posting Activity Records. Assumes that the add-on runs on the computer hostingAuditor Server and uses default port _9699_. If you want to run the add-on on another machine, provide a name of the computer where Auditor Server resides (e.g., _172.28.6.15_, _EnterpriseNAServer_, _WKS.enterprise.local_). To specify a non-default port, provide a server name followed by the port number (e.g., _WKS.ent erprise.local:9999_). Do not modify the endpoint part (_/ netwrix/ api_ ) | +| Certificate Thumbprint | Netwrix Auditor Certificate Thumbprint Property. Possible values: - `Empty`—Check Auditor certificate via Windows Certificate Store. - `AB:BB:CC`—Check Auditor Server certificate thumbprint identifier. - `NOCHECK`—Do not check Auditor certificate. Make sure to select this parameter if you plan to specify servers by their IP. | +| Specify Active Directory credentials | | +| Username | Provide the name of the account under which the service runs. Unless specified, the service runs under the account currently logged on. | +| Password | Provide the password for the selected account. | +| Auditor Monitoring Plan settings | | +| Auditor Plan | Unless specified, data is written to **Netwrix_Auditor_API** database and is not associated with a specific monitoring plan. Specify a name of associated monitoring plan in Auditor. In this case, data will be written to a database linked to this plan. If you select a plan name in the add- on, make sure a dedicated plan is created in Auditor, the Netwrix **API** data source is added to the plan and enabled for monitoring. Otherwise, the add- on will not be able to write data to the Audit Database. | +| Auditor Plan Item | Unless specified, data is not associated with a specific plan and, thus, cannot be filtered by item name. Specify an item name. Make sure to create a dedicated item inAuditor in advance. | +| Accept List | | +| Address | Specify a list of IP addresses of syslog events sources. The service will collect and process events from these sources only. Events collected from any other source will be ignored. | + +Click **Run** to start collecting data with the Add-On. diff --git a/docs/auditor/10.8/addon/cyberark/_category_.json b/docs/auditor/10.8/addon/cyberark/_category_.json new file mode 100644 index 0000000000..292dd70ee9 --- /dev/null +++ b/docs/auditor/10.8/addon/cyberark/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "CyberArk Privileged Access Security", + "position": 80, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/cyberark/collecteddata.md b/docs/auditor/10.8/addon/cyberark/collecteddata.md new file mode 100644 index 0000000000..a24736a0b1 --- /dev/null +++ b/docs/auditor/10.8/addon/cyberark/collecteddata.md @@ -0,0 +1,32 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 30 +--- + +# Work with Collected Data + +To leverage data collected with the add-on, you can do the following in Auditor: + +- Search for required data. For that, start Auditor client and navigate to **Search**. After + specifying the criteria you need, click **Search**. You will get a list of activity records with + detailed information on who did what in the reported time period. + +You can apply a filter to narrow down your search results to the Netwrix **API** data source only. + +![AR from CyberArk in NA](/images/auditor/10.7/addon/cyberark/cyberark_thumb_0_0.webp) + +- Also, you can click **Tools** in the upper-right corner and select the command you need. For + example: + - If you want to periodically receive the report on the results of search with the specified + criteria, click **Subscribe**. Then specify how you want the report to be delivered – as an + email or as a file stored to the file share. + - To create an alert on the specific occurrences, click **Create alert**. + - To export filtered data to PDF or CSV, click **Export data**. +- You can also configure and receive alerts on the events you are interested in. + +See the following topics for additional information: + +- [Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) +- [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) +- [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) diff --git a/docs/auditor/10.8/addon/cyberark/deployment.md b/docs/auditor/10.8/addon/cyberark/deployment.md new file mode 100644 index 0000000000..b937710fe2 --- /dev/null +++ b/docs/auditor/10.8/addon/cyberark/deployment.md @@ -0,0 +1,126 @@ +--- +title: "Deploy the Add-On" +description: "Deploy the Add-On" +sidebar_position: 20 +--- + +# Deploy the Add-On + +Follow the steps to deploy the Add-On: + +**Step 1 –** Prepare Auditorfor data processing. + +**Step 2 –** Configure Syslog message forwarding in CyberArk. + +**Step 3 –** Download the Add-On. + +**Step 4 –** Install Add-on. + +**Step 5 –** Configure Add-on parameters + +## Prepare Auditor for Data Processing + +In Auditor client, go to the Integrations section and verify Integration API settings: + +1. Make sure the **Leverage Integration API** is switched to **ON**. +2. Check the TCP communication port number – default is **9699**. + +See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) topic for additional information. + +By default, activity records are written to _Netwrix_Auditor_API_ database which is not associated +with a specific monitoring plan. + +Optionally, you can create a dedicated monitoring plan in Auditor. In this case, data will be +written to a database linked to this plan. Target it at Netwrix API data source and enable for +monitoring. Add a dedicated item of _Integration_ type to the plan for data to be filtered by item +name. See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information. + +In such scenario, you will need to specify this monitoring plan in the _naplan_ and _naplanitem_ +attributes of the _`` ® `
`_ configuration parameters. See the +[Add-On Parameters](/docs/auditor/10.7/addon/cyberark/parameters.md) topic for additional information. + +## Configure Syslog Message Forwarding in CyberArk + +On the CyberArk side, you need to specify the server that will receive Syslog messages from +CyberArk, process them and forward to Auditor Server. This will be the add-on installation server +(the machine where _SyslogService.exe_ runs). + +Follow the steps to configure Syslog message forwarding in CyberArk. + +**Step 1 –** Log in to your CyberArk system. + +**Step 2 –** On the CyberArk server, locate the _%Program Files (x86)%\PrivateArk\Server\Conf_ +folder and open the **dbparam.ini** file for editing. + +**Step 3 –** Go to the **[SYSLOG]** section and configure the following parameters: + +- **SyslogTranslatorFile** – relative path to **Netwrix.xsl** file. You will need to create this + file manually and copy the content of **SyslogTranslator.sample.xsl** file into it. This sample + file is provided by CyberArk. By default, it is located in the _%Program Files (x86) + %\PrivateArk\Server\Syslog_ folder. + Place the _Netwrix.xsl_ file there, too, so that default relative path should be _\Server\Syslog_. +- **SyslogServerPort** – communication port of the syslog server (i.e. add-on installation server). + Default is **514**. Note that if you are using Netwrix Auditor for Network Devices, this port may + be already in use, and you should provide another one. +- **SyslogServerIP** - IP address of the add-on installation server. +- SyslogServerProtocol – communication protocol for data transfer between CyberArk system and the + add-on. Specify **UDP** protocol. +- **SyslogMessageCodeFilter** - IDs of events to forward. The add-on will only collect and process + events you specify in this parameter. For the full list of supported events, see + [Monitored Events](/docs/auditor/10.7/addon/cyberark/monitoredevents.md). Use comma as a separator. + +![dbparamfile_thumb_0_0](/images/auditor/10.7/addon/cyberark/dbparamfile_thumb_0_0.webp) + +**Step 4 –** Save the **dbparam.ini** file. + +## Download the Add-On + +**Step 1 –** Download the distribution package **Netwrix_Auditor_Add-on_for_CyberArk_PAS.zip**. + +**Step 2 –** Unpack it to a folder on the computer where you plan to deploy the add-on. + +_Remember,_ deploy the add-on on the same machine with the Auditor Server. + +## Install Add-On + +Follow the steps to install the Add-On: + +**Step 3 –** Navigate to your add-on package. + +**Step 4 –** Unzip the Add-On to a desired folder. + +**Step 5 –** Run the installation package. + +**Step 6 –** Accept the license agreement and follow the instructions of the setup wizard. + +**Step 7 –** On the **Destination Folder** step, specify the installation folder (_C:\Program Files +(x86)\Netwrix Add-ons\_ by default). + +**Step 8 –** Click **Install**. + +**Step 9 –** When done, click **Finish**. + +## Configure Add-on Parameters + +The configuration wizard opens in the default web browser: + +![ConfigurationWizard](/images/auditor/10.7/addon/cyberark/configwizard.webp) + +Click **Proceed** and complete the following fields: + +| Option | Description | +| ------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Specify General Settings | | +| Listed UDP port | Specify UDP port for listening incoming events. (**514** by default). | +| Auditor Endpoint | Auditor Server IP address and port number followed by endpoint for posting Activity Records. Assumes that the add-on runs on the computer hostingAuditor Server and uses default port _9699_. If you want to run the add-on on another machine, provide a name of the computer where Auditor Server resides (e.g., _172.28.6.15_, _EnterpriseNAServer_, _WKS.enterprise.local_). To specify a non-default port, provide a server name followed by the port number (e.g., _WKS.ent erprise.local:9999_). Do not modify the endpoint part (_/ netwrix/ api_ ) | +| Certificate Thumbprint | Netwrix Auditor Certificate Thumbprint Property. Possible values: - `Empty`—Check Auditor certificate via Windows Certificate Store. - `AB:BB:CC`—Check Auditor Server certificate thumbprint identifier. - `NOCHECK`—Do not check Auditor certificate. Make sure to select this parameter if you plan to specify servers by their IP. | +| Specify Active Directory credentials | | +| Username | Provide the name of the account under which the service runs. Unless specified, the service runs under the account currently logged on. | +| Password | Provide the password for the selected account. | +| Auditor Monitoring Plan settings | | +| Auditor Plan | Unless specified, data is written to **Netwrix_Auditor_API** database and is not associated with a specific monitoring plan. Specify a name of associated monitoring plan in Auditor. In this case, data will be written to a database linked to this plan. If you select a plan name in the add- on, make sure a dedicated plan is created in Auditor, the Netwrix **API** data source is added to the plan and enabled for monitoring. Otherwise, the add- on will not be able to write data to the Audit Database. | +| Auditor Plan Item | Unless specified, data is not associated with a specific plan and, thus, cannot be filtered by item name. Specify an item name. Make sure to create a dedicated item inAuditor in advance. | +| Accept List | | +| Address | Specify a list of IP addresses of syslog events sources. The service will collect and process events from these sources only. Events collected from any other source will be ignored. | + +Click **Run** to start collecting data with the Add-On. diff --git a/docs/auditor/10.8/addon/cyberark/monitoredevents.md b/docs/auditor/10.8/addon/cyberark/monitoredevents.md new file mode 100644 index 0000000000..15b5b05934 --- /dev/null +++ b/docs/auditor/10.8/addon/cyberark/monitoredevents.md @@ -0,0 +1,24 @@ +--- +title: "Monitored Events" +description: "Monitored Events" +sidebar_position: 40 +--- + +# Monitored Events + +The Add-On supports monitoring of the following syslog events from CyberArk PAS: + +| Event ID | Description | +| -------- | ---------------------------------------------------------------------------------------- | +| 22 | Password verification by Central Policy Manager (success) | +| 24 | Password stored in EPV changed by Central Policy Manager (success) | +| 31 | Password reconciliation by Central Policy Manager (success) | +| 38 | Password verification by Central Policy Manager (failure) | +| 57 | Password stored in Enterprise Password Vault changed by Central Policy Manager (failure) | +| 60 | Password reconciliation by Central Policy Manager (failure) | +| 130 | Password stored in Enterprise Password Vault disabled by Central Policy Manager | +| 295 | User retrieved a password stored in Enterprise Password Vault | +| 300 | User session started in Privileged Session Manager | +| 302 | User session ended in Privileged Session Manager | +| 308 | User used a password stored in Enterprise Password Vault | +| 411 | A window was activated by user in Privileged Session Manager | diff --git a/docs/auditor/10.8/addon/cyberark/overview.md b/docs/auditor/10.8/addon/cyberark/overview.md new file mode 100644 index 0000000000..d8d8e60748 --- /dev/null +++ b/docs/auditor/10.8/addon/cyberark/overview.md @@ -0,0 +1,114 @@ +--- +title: "CyberArk Privileged Access Security" +description: "CyberArk Privileged Access Security" +sidebar_position: 80 +--- + +# CyberArk Privileged Access Security + +Netwrix Auditor is a visibility platform for user behavior analysis and risk mitigation that enables +control over changes, configurations and access in hybrid IT environments to protect data regardless +of its location. The platform provides security analytics to detect anomalies in user behavior and +investigate threat patterns before a data breach occurs. + +CyberArk offers its Privileged Access Security (PAS) solution for managing the privileged accounts +and SSH Keys. It enables organizations to manage and monitor all activities associated with the +privileged identities, for example, Windows server administrator, root on a UNIX server, etc. A +featured set of the Privileged Access Security tools includes, in particular: + +- **Privileged Session Manager** - a tool that enables users to securely connect to remote targets + with a standard remote desktop client application, providing isolated sessions. +- **Enterprise Password Vault** – a tool for storage and centralized management of the privileged + accounts; it supports automated changes and logging of the activities associated with all types of + privileged passwords and SSH Keys. This tool also includes Central Policy Manager service. + +Major benefit of the integrated solution implemented with the Add-On is the increased visibility +into actions related to CyberArk tools, in particular: + +- Visibility into the user account behind the respective isolated session controlled by Privileged + Session Manager +- Visibility into the password-related activities, e.g. password retrieval and further actions made + to target application or system, and automatic password update for managed accounts in Enterprise + Password Vault and Central Policy Manager. + +## How It Works + +The add-on is implemented as a syslog service that collects activity data from CyberArk system (PAS) +and sends it to Auditor using the Integration API. + +![HIW_CyberArch](/images/auditor/10.7/addon/cyberark/diagram_thumb_0_0.webp) + +The add-on operates as a syslog listener for the CyberArk system. On a high level, the solution +works as follows: + +1. An IT administrator configures Integration API settings to enable data collection and storage to + the Audit Databasefor further reporting, search, etc. + + It is recommended to create a dedicated monitoring plan in Auditor and add a dedicated item of + **Integration** type to it — then you will be able to filter data in reports and search results + by monitoring plan/item name. + +2. On the CyberArk server, the administrator opens the **dbparam.ini** file and specifies the + parameters for syslog message forwarding, including add-on installation server settings, the IDs + of events to be monitored, etc. + + See the [Monitored Events](/docs/auditor/10.7/addon/cyberark/monitoredevents.md) topic for additional information on the events + supported for monitoring out of the box. + +3. On the add-on installation server, the administrator runs the installation file and configures + the Add-On parameters in the configuration wizard. +4. The add-on starts collecting and forwarding activity data: it listens to the specified UDP port + and captures designated syslog messages (CyberArk events). +5. The add-on processes these events into Auditor-compatible format – activity records. Each + activity record contains the _Who-What-When-Where-Action_ information (that is, user account, + time, action, and other details). +6. Using the Integration API, the add-on sends the activity records to Auditor Server that writes + them to the Audit Database and Long-Term Archive. Data is sent periodically, by default every 5 + seconds. + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +of the activity record and the capabilities of the Integration API. + +7. Users open Auditor Client to work with collected data: + - Search for file changes using certain criteria + - Export data to PDF or CSV files + - Save search results as reports + - Subscribe to search results + - Configure and receive alerts + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| Where | Prerequisite to check | +| ------------------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The Auditor Server side | - The Integration API and Audit Database settings are configured in Auditor Server settings. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The **TCP 9699** port must be open on Windows firewall for inbound connections. - User account under which data will be written to the Audit Database requires the **Contributor** role in Auditor. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) for additional information. Alternatively, you can grant it the **Global administrator** role, or add that account to the **Netwrix Auditor Administrators** group. | +| The machine where the Add-On will be installed (Auditor Server is recommended) | - The **UDP 514** port must be open on Windows firewall for inbound connections. If you are using Netwrix Auditor for Network Devices, this port may be already in use, and you should provide another one. Another option is to install the add-on and Auditor Server on different machines. - .Net Framework 4.7.2 and above is installed. Review the following Microsoft technical article for additional information on how to install .Net Framework 4.7.2: [Microsoft .NET Framework 4.7.2 offline installer for Windows](https://support.microsoft.com/en-us/topic/microsoft-net-framework-4-7-2-offline-installer-for-windows-05a72734-2127-a15d-50cf-daf56d5faec2). | +| CyperArk PAS | Version 10.10. | + +### Accounts and Rights + +By default, the add-on will run under the _Local System_ account. So, if the add-on and Auditor will +be running on different machines, the corresponding computer account will require at least the +**Contributor** role in Auditor. See the +[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional +information. + +In case the add-on and Auditor are installed on the same server, no special settings are needed. + +### Considerations and Limitations + +- The Add-On must be deployed in the same subnet as CyberArk PAS and Auditor. +- If the monitoring plan name in the _``_ add-on configuration parameter is + specified incorrectly, this may lead to temp files generation and, therefore, to inefficient disk + space usage. +- If you are using Netwrix Auditor for Network Devices, the 514 UDP port may be already in use, and + you should specify another port when configuring the add-on settings (see + [Deploy the Add-On](/docs/auditor/10.7/addon/cyberark/deployment.md) and [Add-On Parameters](/docs/auditor/10.7/addon/cyberark/parameters.md) topics for additional + information). Another option is to install the add-on and Auditor Server on different machines. + +## Compatibility Notice + +Netwrix Auditor add-on for CyberArk is compatible with CyberArk Privileged Access Security (PAS) +10.10 and with Netwrix Auditor 9.8 and later. diff --git a/docs/auditor/10.8/addon/cyberark/parameters.md b/docs/auditor/10.8/addon/cyberark/parameters.md new file mode 100644 index 0000000000..6a5e5bbea7 --- /dev/null +++ b/docs/auditor/10.8/addon/cyberark/parameters.md @@ -0,0 +1,61 @@ +--- +title: "Add-On Parameters" +description: "Add-On Parameters" +sidebar_position: 10 +--- + +# Add-On Parameters + +To configure the add-on parameters, you need to edit the **Settings.xml** file in the add-on folder. +You must define connection details: Auditor Server host, endpoint, etc. + +Most parameters are optional; you can skip or define parameters depending on your execution scenario +and security policies. + +The service uses the default values unless parameters are explicitly defined +(`\*\*\_value_\*\*`). + +Parameters in **Settings.xml** can be grouped as follows: + +- **General parameters** that affect add- on execution. They are listed in the table below. +- Settings for a certain event source (within the _Source_ section) that can override general + settings. +- **Internal parameters** that should not be modified in most cases. They are listed in the topic. + +| Parameter | Default value | Description | +| ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General parameters | | | +| ListenUdpPort | 514 | Specify UDP port for listening to the incoming syslog events. | +| NetwrixAuditorEndpoint | https://localhost: 9699/netwrix/api/ v1/activity_records | Auditor Server IP address and port number followed by endpoint for posting Activity Records. Assumes that the add-on runs on the computer hosting Auditor Server and uses default port **9699**. If you want to run the add-on on another machine, provide a name of the computer where Auditor Server resides (e.g., _172.28.6.15, EnterpriseNAServer, WKS.enterprise.local_). To specify a non-default port, provide a server name followed by the port number (e.g., _WKS.enterprise.local:9999_). Do not modify the endpoint part (/netwrix/api . . . . ) | +| NetwrixAuditor CertificateThumbprint | NOCHECK | Netwrix Auditor Certificate Thumbprint Property. Possible values: - `Empty`—Check the certificate via Windows Certificate Store. - `AB:BB:CC.`—Check the certificate thumbprint identifier. - `NOCHECK`—Do not check the certificate. Make sure to select this parameter if you plan to specify servers by their IP. | +| NetwrixAuditorPlan | — | Unless specified, data is written to Netwrix_Auditor_API database and is not associated with a specific monitoring plan. Specify a name of associated monitoring plan in Auditor. In this case, data will be written to a database linked to this plan. If you select a plan name in the add-on, make sure a dedicated plan is created in Auditor, the Netwrix API data source is added to the plan and enabled for monitoring. Otherwise, the add-on will not be able to write data to the Audit Database. | +| NetwrixAuditorPlanItem | — | Unless specified, data is not associated with a specific monitoring plan and thus cannot be filtered by item name. Specify an item name here. Make sure to create a dedicated item in Auditor in advance. | +| EventStorePath | — | Select where to store temporary files of syslog messages before the add-on sends them to Auditor Server. Netwrix recommends to store these files in the same directory with the add-on (SyslogService.exe). | +| LogLevel | warning | Specify logging level: - none - info - warning (used by default) - error - debug | +| WriteCriticalIssues ToEventLog | 0 | Instructs the add-on to write important events (like service start or critical issue) not only to its own log but also to Netwrix event log. - 1=yes - 0=no (default) | +| Parameters within SourceList You can specify parsing rules for each specific event source and define parameters to override general settings, such as time zone, default plan name, etc. | | | +| NetwrixAuditorPlan | — | When specified, overrides the general settings. | +| NetwrixAuditorPlanItem | — | When specified, overrides the general settings. | +| AppNameRegExp | — | Custom regular expression pattern that will be used to retrieve the application name from your syslog messages. The add-on will match the application name and the files with syslog parsing rules to be applied. The pattern you provide here must match the application name in your custom rule file. Unless specified, RFC 3164/5424 format is used. | +| AppNameGroupID | — | Define application name value by Group ID only if messages are not formatted in accordance with RFC 3164/5424. Otherwise, leave the default value. | +| RuleFileList PathFile | cyberark-v2.xml | Specify paths to XML file(s) with regular expression parsing rules. You can create a custom file or use rules provided out of the box. Currently, the **cyberark-v2.xml** rule file is shipped with this add-on. You can specify several rule files. The service will check if the AppName parameter in the first rule file matches the AppNameRegExp and AppNameGroupID regular expression in this file. If not, the service will proceed to the next rule file. | +| AcceptList Address | — | Specify a list of IP addresses of syslog events sources. The service will collect and process events from these sources only. Events collected from any other source will be ignored. The _Address_ parameter may be followed by optional attributes that override parameters specified above: - _naplan_—A name of associated monitoring plan - _naplanitem_—A name of associated item For example: `
172.28.3.15
` | + +Remember to save **Settings.xml** after editing is complete. + +After you modify parameters in the **Settings.xml** file, remember to save the changes and then +restart the add-on main service (_SyslogService.exe_) for them to take effect. + +## Add-on Internal Parameters + +Internal parameters listed in the table below are intended for performance tuning. In most cases the +default values should be used. + +| Parameter | Default value | Description | +| --------------------- | ------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| EventsFromMemoryFirst | 1 | Instructs the add-on to save events to temporary storage only if there is no free space in queues: - 1=yes - 0=no | +| ConcurrentSend | -1 | Specifies the number of threads for concurrent forwarding of events to Auditor. Default value is -1 (switch off concurrent forwarding). | +| SenderSleepTime | 30 | Specifies the retry interval in seconds to send messages to Auditor (30 - 3600 seconds). | +| TaskLimit | 8 | Specifies the number of threads and queues for concurrent handling of events. | +| QueueSizeLimit | 100 | Specifies the maximum number of events to keep in queue before saving to temporary storage or sending to Netwrix API. | +| QueueTimeLimit | 5 | Specifies the length of timeout before events from queue (not full) are saved to temporary storage or sent to Netwrix API: - From 5 to 300 – timeout in seconds. - -1 – disable timeout. | diff --git a/docs/auditor/10.8/addon/cyberark/troubleshooting.md b/docs/auditor/10.8/addon/cyberark/troubleshooting.md new file mode 100644 index 0000000000..6eaa4878b7 --- /dev/null +++ b/docs/auditor/10.8/addon/cyberark/troubleshooting.md @@ -0,0 +1,24 @@ +--- +title: "Maintenance and Troubleshooting" +description: "Maintenance and Troubleshooting" +sidebar_position: 50 +--- + +# Maintenance and Troubleshooting + +The Add-On operations are logged into the **SyslogService.txt** file. This file is located in the +same folder as **SyslogService.exe.** + +To change the add-on logging level, use the **LogLevel** parameter in the **Settings.xml** file. + +- It is recommended that before the first run you set this parameter to `debug`. This will + facilitate operations tracking and possible problem solving. +- After that it is strongly recommended to re-set this parameter to `error` to prevent the + uncontrolled log growth. + +If you cannot see collected data in Auditor, check the following: + +1. In Auditor settings, go to the **Integrations** section and make sure the **Leverage Integration + API** is switched to **ON**. Check the communication port number – default is **9699**. +2. If you configured a dedicated monitoring plan, make sure data source monitoring is enabled. +3. Verify the parameters you provided in **Settings.xml** and **dbparam.ini**. diff --git a/docs/auditor/10.8/addon/hyperv/_category_.json b/docs/auditor/10.8/addon/hyperv/_category_.json new file mode 100644 index 0000000000..132f5e796d --- /dev/null +++ b/docs/auditor/10.8/addon/hyperv/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Hyper-V SCVMM", + "position": 90, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/hyperv/collecteddata.md b/docs/auditor/10.8/addon/hyperv/collecteddata.md new file mode 100644 index 0000000000..6ae8cc55e1 --- /dev/null +++ b/docs/auditor/10.8/addon/hyperv/collecteddata.md @@ -0,0 +1,26 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 40 +--- + +# Work with Collected Data + +To leverage data collected with the add-on, you can do the following in Auditor: + +- Search for required data. For that, start Auditor client and navigate to **Search**. After + specifying the criteria you need, click **Search**. You will get a list of activity records with + detailed information on who did what in the reported time period. + +You might want to apply a filter to narrow down your search results to the Netwrix API data source +only. + +- Also, you can click **Tools** in the upper-right corner and select the command you need. For + example: + - If you want to periodically receive the report on the results of search with the specified + criteria, click **Subscribe**. Then specify how you want the report to be delivered – as an + email or as a file stored to the file share. + - To create an alert on the specific occurrences, click **Create alert**. + - To export filtered data to PDF or CSV, click **Export data**. +- You can also configure and receive alerts on the events you are interested in. See the + [Administration](/docs/auditor/10.7/admin/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/addon/hyperv/deployment.md b/docs/auditor/10.8/addon/hyperv/deployment.md new file mode 100644 index 0000000000..1f5569263d --- /dev/null +++ b/docs/auditor/10.8/addon/hyperv/deployment.md @@ -0,0 +1,100 @@ +--- +title: "Deployment Scenarios" +description: "Deployment Scenarios" +sidebar_position: 20 +--- + +# Deployment Scenarios + +The add-on can be deployed on any computer in your environment. For example, you can run the add-on +on the computer where Auditor is installed, or on a remote server. Also, consider different SCVMM +deployment scenarios. Possible deployment options are as follows (here it is assumed that the add-on +is installed together with Auditor server): + +1. Add-on running on the same machine as SCVMM server (with Management Console): + +![deployment_1](/images/auditor/10.7/addon/hyperv/diagram1server.webp) + +2. Add-on and SCVMM server (with Management Console) running on different machines: + +![deployment_2](/images/auditor/10.7/addon/hyperv/diagram2servers_thumb_0_0.webp) + +In this scenario, the account used to access SCVMM server must be a member of the _Remote Management +Users_ local group on the SCVMM server. + +3. Add-on running on the same machine as SCVMM Management Console; SCVMM server running on the + remote machine: + +![deployment_3](/images/auditor/10.7/addon/hyperv/diagram3servers_thumb_0_0.webp) + +In this scenario, make sure to specify SCVMM server address in the **DataCollectionServer** +parameter (not the machine where SCVMM console runs) in the **settings.xml** configuration file. See +the [Add-On Parameters](/docs/auditor/10.7/addon/hyperv/parameters.md)topic for additional information. + +Depending on the deployment scenario you choose, you will need to define a set of the add-on +parameters. Several examples are provided below. + +In the certain scenarios you may need to configure not all parameters but only some of them. + +## Example 1 + +- The add-on runs on the Auditor server. +- The _System_ account is used to launch the add-on via Task Scheduler (default configuration). +- Configuration parameters to specify in **settings.xml** (sample values): + +```` +https://172.28.6.19:9699/netwrix/api/v1/activity_records``` + +`````` + +`````` + +Configuration parameters __NetwrixAuditorUserName__ and __NetrixAuditorPassword__ are not required. + +## Example 2 + +- The add-on runs on the Auditor server with the explicitly specified user credentials. +- Configuration parameters to specify in __settings.xml__ (sample values): + + ``` + https://172.28.6.19:9699/netwrix/api/v1/activity_records``` + + ```SecurityOfficer``` + `````` + + ```NetwrixUser``` + `````` + +## Example 3 + +- The add-on runs on the machine with SCVMM. +- The _System_ account is used to launch the add-on via Task Scheduler (default configuration). +- Configuration parameters to specify in __settings.xml__: + +``` +```` + +`` + +`` + +Credentials for **Data Collection Server** (that is, SCVMM) are not required. + +## Example 4 + +- SCVMM and/or Auditor run on the machines other than the add-on server. +- In this case, the corresponding set of credentials (for **Data Collection Server** and/or Netwrix + Auditor) must be specified explicitly. +- Configuration parameters to specify in **settings.xml** (sample values): + + `https://172.28.6.19:9699/netwrix/api/v1/activity_records ` + +`SecurityOfficer` + +`NetwrixUser` + +`SCVMMServer` + +`SCVMMAdmin` + +`Password` diff --git a/docs/auditor/10.8/addon/hyperv/install.md b/docs/auditor/10.8/addon/hyperv/install.md new file mode 100644 index 0000000000..76b7de313f --- /dev/null +++ b/docs/auditor/10.8/addon/hyperv/install.md @@ -0,0 +1,68 @@ +--- +title: "Deploy the Add-On" +description: "Deploy the Add-On" +sidebar_position: 30 +--- + +# Deploy the Add-On + +Follow the step to deploy the Add-On: + +**Step 1 –** Prepare Netwrix Auditor for Data Processing. + +**Step 2 –** Download the Add-On. + +**Step 3 –** Configure Parameters for Data Collection. + +**Step 4 –** Register Windows Scheduled Task. + +## Prepare Netwrix Auditor for Data Processing + +In Auditor client, go to the Integrations section and verify Integration API settings: + +1. Make sure the **Leverage Integration API** is switched to **ON**. +2. Check the TCP communication port number – default is **9699**. + +See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) topic for additional information. + +By default, activity records are written to _Netwrix_Auditor_API_ database which is not associated +with a specific monitoring plan. + +Optionally, you can create a dedicated monitoring plan in Auditor. In this case, data will be +written to a database linked to this plan. Target it at Netwrix API data source and enable for +monitoring. Add a dedicated item of _Integration_ type to the plan for data to be filtered by item +name. See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information. + +In such scenario, you will need to specify this monitoring plan in the _NetwrixAuditorPlan_ and +_NetwrixAuditorPlanItem_ parameters in the **settings.xml** file. See the +[Add-On Parameters](/docs/auditor/10.7/addon/hyperv/parameters.md) topic for additional information. + +## Download the Add-On + +1. Download the distribution package **Netwrix_Auditor_Add-on_for_Microsoft_SCVMM.zip**. +2. Unpack it to a folder on the computer where you plan to deploy the add-on. + +## Configure Parameters for Data Collection + +In the add-on folder, open the **settings.xml** file and configure the add-on parameters for data +collection, as listed below. + +See the [Add-On Parameters](/docs/auditor/10.7/addon/hyperv/parameters.md)topic for the full list of configuration parameters. + +| Parameter | Default value | Description | +| ---------------------- | ------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| DataCollectionServer | (empty) | Specify SCVMM server to collect data from. You can use IP address, FQDN or NETBIOS name. For _localhost_, leave this parameter empty. | +| DataCollectionUserName | (empty) | Specify user account that will be used for data collection from SCVMM server. To use the account currently logged in, leave this parameter empty.s Make sure the account has administrative rights on that server (see the [Accounts and Rights](overview.md#accounts-and-rights) topic for additional information). | +| DataCollectionPassword | | Specify user account password. | +| ShortTermFolder | ShortTerm | Specify path to the short-term archive (Netwrix Auditor working folder). You can use full or relative path. | + +Save the **settings.xml** file. New configuration settings will be applied automatically at the next +data collection. + +For the full list of parameters, see the [Add-On Parameters](/docs/auditor/10.7/addon/hyperv/parameters.md) topic for additional +information. + +## Register Windows Scheduled Task + +Run the **install.ps1** PowerShell script from the add-on folder. It will configure and register a +Windows scheduled task that will run periodically every 15 min to retrieve audit data from SCVMM. diff --git a/docs/auditor/10.8/addon/hyperv/monitoredevents.md b/docs/auditor/10.8/addon/hyperv/monitoredevents.md new file mode 100644 index 0000000000..8613dac06a --- /dev/null +++ b/docs/auditor/10.8/addon/hyperv/monitoredevents.md @@ -0,0 +1,19 @@ +--- +title: "Monitoring Scope" +description: "Monitoring Scope" +sidebar_position: 50 +--- + +# Monitoring Scope + +Review a full list of the events that can be monitored using the add-on. + +| Object Type | Reported Action | Reported Properties | +| ----------------- | ----------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------- | +| Virtual Machine | • Create/Delete • Clone • Migrate • Rename • Create/Delete Checkpoint • Hardware Configuration change | • Name • Checkpoint Name & Description • Number Of Processors • Memory Size (Allocated, Max) • VHD Location, Max size • Network Name • Switch Name | +| Hypervisor (Host) | • Create/Delete • Move • Hardware Configuration change • State change | • Name • Number Of Processors • RAM Memory Size • Host Disk Capacity | +| Host Cluster | • Create/Delete • Move | • Name | +| Host Group | • Create/Delete • Move • Rename | • Name | +| Private Cloud | • Create/Delete • Rename | • Name | +| VM Network | • Create/Delete • Rename | • Name | +| User Role | • Rename • Add/Remove Members • Add/Remove Scopes • Permissions change | • Name • Scope • Permissions • Members | diff --git a/docs/auditor/10.8/addon/hyperv/overview.md b/docs/auditor/10.8/addon/hyperv/overview.md new file mode 100644 index 0000000000..b673fa9b18 --- /dev/null +++ b/docs/auditor/10.8/addon/hyperv/overview.md @@ -0,0 +1,125 @@ +--- +title: "Hyper-V SCVMM" +description: "Hyper-V SCVMM" +sidebar_position: 90 +--- + +# Hyper-V SCVMM + +Netwrix Auditor is a visibility platform for user behavior analysis and risk mitigation that enables +control over changes, configurations and access in hybrid IT environments to protect data regardless +of its location. The platform provides security analytic to detect anomalies in user behavior and +investigate threat patterns before a data breach occurs. + +Microsoft System Center Virtual Machine Manager (SCVMM) is a solution for configuring and managing +virtualized infrastructure components across on-premises, service provider, and the Azure cloud +environment. These components include virtualization servers, networking components and storage +resources. + +Virtualization teams, Managed Service Providers and other IT professionals need to detect who does +what in the SCVMM-managed virtual infrastructure. For that, a unified audit trail is required, +supporting detailed SCVMM monitoring and effective response to changes. + +For that purpose, you can use a specially designed add-on. It works in collaboration with Netwrix +Auditor, supplying data about operations on your SCVMM server to Netwrix database. Aggregating data +into a single audit trail simplifies the analysis, makes activity monitoring more cost-effective, +and helps you keep tabs on your virtual infrastructure. + +Major benefits: + +- Gain a high-level view of the data you store +- Detect unauthorized activity that might threaten your data + +## How It Works + +The add-on is implemented as a stand-alone application that collects activity data from Virtual +Machine Manager and sends it to Auditor using the Integration API. + +![HIW](/images/auditor/10.7/addon/hyperv/diagram_thumb_0_0.webp) + +On a high level, the solution works as follows: + +1. An IT administrator configures the Integration API settings to enable data collection and storage + to the Netwrix database for further reporting, search, etc. + + It is recommended to create a dedicated monitoring plan in Auditor and add a dedicated item of + **Integration** type to it — then you will be able to filter data in reports and search results + by monitoring plan or item name. + +2. On SCVMM side, the IT administrator prepares a dedicated user account for accessing SCVMM server. + This account requires administrative rights. +3. Then the IT administrator opens the settings.xml configuration file and specifies the necessary + parameters for add-on operation, including Netwrix Auditor server settings, etc. +4. The IT administrator selects the deployment scenario and runs install.ps1 PowerShell script file + to deploy and configure the add-on components on the target server. +5. This script creates a Windows scheduled task that will run periodically (every 15 minutes) to + collect audit data from VMM server. + + See the [Monitoring Scope](/docs/auditor/10.7/addon/hyperv/monitoredevents.md) for additional information on the default list of + the events supported out-of-the box. + +6. The add-on component **HVARunner.exe** starts collecting activity data from VMM. Data + communication is performed using TCP protocol. +7. The add-on processes this data into Auditor-compatible format (Activity Records). Each Activity + Record contains the Who-What-When-Where-Action information (that is, initiator's account, time, + action, and other details). + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +of the Activity Record and the capabilities of the Integration API. + +8. The add-on uses the Integration API to send the Activity Records to Auditor Server, where this + data becomes available for search, reporting and alerting. +9. Users open Auditor Client to work with collected data: + - Search for file changes using certain criteria + - Export data to PDF or CSV files + - Save search results as reports + - Subscribe to search results + - Configure and receive alerts + +### Add-on Delivery Package + +The add-on delivery package is a ZIP archive comprising several files, including DLLs, configuration +and executable files. The latter ones are listed in the table below. + +| File name | Description | +| ----------------- | ------------------------------------------------------------------------------------------------------- | +| install.ps1 | PowerShell script that installs the add-on components and creates a scheduled task for data collection. | +| settings.xml | Contains parameters for the add-on service operation. | +| **HVARunner.exe** | Main add-on component, responsible for audit data collection from SCVMM. | + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| On... | Ensure that... | +| ------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Auditor Server | - Integration API and Audit Database settings are configured in Auditor Server settings. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The **TCP 9699** port must be open on Windows firewall for inbound connections. - User account under which data will be written to the Audit Database requires the **Contributor** role in Netwrix Auditor. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant it the **Global administrator** role, or add that account to the **Netwrix Auditor Administrators** group. | +| Add-on installation server, i.e. the machine where the add-on will be installed | - The **TCP 5985** port must be open on Windows firewall for inbound connections. - NET Framework 4.5 or later. | +| Microsoft System Center Virtual Machine Manager | SCVMM versions: - 2019 - 2016 | +| Virtualization hosts | - Microsoft Hyper-V (hardware and nested-virtualization) - VMware ESXi | + +### Accounts and Rights + +It is recommended to create a dedicated account for running the add-on. + +This account should have the following minimal rights and permissions: + +- **Administrator** role in SCVMM +- **Contributor** role in Auditor. See the + [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional + information. + +### Considerations and Limitations + +- By default, the add-on is targeted at a single SCVMM server. + +- If Auditor Server becomes unavailable for some time, the add-on will reset the last data + collection and will run it anew during the next scheduled interval. + +## Compatibility Notice + +The add-on is compatible with: + +- Microsoft System Center Virtual Machine Manager 2019 and 2016 +- Netwrix Auditor 9.9 and later diff --git a/docs/auditor/10.8/addon/hyperv/parameters.md b/docs/auditor/10.8/addon/hyperv/parameters.md new file mode 100644 index 0000000000..bc678cb5fe --- /dev/null +++ b/docs/auditor/10.8/addon/hyperv/parameters.md @@ -0,0 +1,32 @@ +--- +title: "Add-On Parameters" +description: "Add-On Parameters" +sidebar_position: 10 +--- + +# Add-On Parameters + +To configure the add-on parameters, you need to edit the **settings.xml** file in the add-on folder. +You must define connection details: Auditor Server host, user credentials, etc. + +Most parameters are optional, the service uses the default values unless parameters are explicitly +defined (`\*\*\_value_\*\*`). You can skip or define parameters depending on +your execution scenario and security policies. + +| Parameter | Default value | Description | +| ------------------------------------ | -------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| NetwrixIntegration | | | +| NetwrixAuditorEndpoint | https://localhost: 9699/netwrix/api/ v1/activity_records | Auditor Server IP address and port number followed by endpoint for posting Activity Records. Assumes that the add-on runs on the computer hosting Auditor Server and uses default port **9699**. If you want to run the add-on on another machine, provide a name of the computer where Auditor Server resides (e.g., _172.28.6.15, EnterpriseNAServer, WKS.enterprise.local_). To specify a non-default port, provide a server name followed by the port number (e.g., _WKS.enterprise.local:9999_). Do not modify the endpoint part (/netwrix/api . . . . ) | +| NetwrixAuditor CertificateThumbprint | NOCHECK | Auditor Certificate Thumbprint Property. Possible values: - `AB:BB:CC.`—Check Auditor server certificate thumbprint identifier. - `NOCHECK`—Do not check Auditor certificate. Make sure to select this parameter if you plan to specify servers by their IP. | +| NetwrixAuditorDateTimeFormat | yyyy-MM-ddTHH:mm:ssZ | Auditor time format. By default, set to zero offset. | +| NetwrixAuditorPlan | — | Unless specified, data is written to Netwrix_Auditor_API database and is not associated with a specific monitoring plan. Specify a name of associated monitoring plan in Auditor. In this case, data will be written to a database linked to this plan. If you select a plan name in the add-on, make sure a dedicated plan is created in Auditor, the Netwrix API data source is added to the plan and enabled for monitoring. Otherwise, the add-on will not be able to write data to the Audit Database. | +| NetwrixAuditorPlanItem | — | Unless specified, data is not associated with a specific plan and, thus, cannot be filtered by item name. Specify an item name. Make sure to create a dedicated item in Auditor in advance. | +| NetwrixAuditorUserName | Current user credentials | Unless specified, the add-on runs with the current user credentials. If you want the add-on to use another account to connect to Auditor Server, specify the account name in the _DOMAIN\username_ format. The account must be assigned the Contributor role in Netwrix Auditor. | +| NetwrixAuditorUserPassword | Current user credentials | Unless specified, the add-on runs with the current user credentials. Provide a different password if necessary. | +| DataCollection | | | +| DataCollectionServer | (empty) | Specify SCVMM server to collect data from. You can use IP address, FQDN or NETBIOS name. For localhost, leave this parameter empty. | +| DataCollectionUserName | (empty) | Specify user account that will be used for data collection from SCVMM server. To use the account currently logged in, leave this parameter empty. Make sure the account has administrative rights on that server (see the [Accounts and Rights](overview.md#accounts-and-rights) topic for additional information). | +| DataCollectionPassword | | Specify user account password. | +| ShortTermFolder | ShortTerm | Specify path to the short-term archive (Netwrix Auditor working folder). You can use full or relative path. | + +Remember to save **settings.xml** after editing is complete. diff --git a/docs/auditor/10.8/addon/hyperv/troubleshooting.md b/docs/auditor/10.8/addon/hyperv/troubleshooting.md new file mode 100644 index 0000000000..eb68417583 --- /dev/null +++ b/docs/auditor/10.8/addon/hyperv/troubleshooting.md @@ -0,0 +1,79 @@ +--- +title: "Maintenance and Troubleshooting" +description: "Maintenance and Troubleshooting" +sidebar_position: 60 +--- + +# Maintenance and Troubleshooting + +If you cannot see collected data in Auditor, check the following: + +- Add-on account has sufficient rights to access SCVMM and Auditor. +- In Netwrix Auditor settings, go to the **Integrations** section and make sure the **Leverage + Integration API** is switched to **ON**. Check the communication port number – default is + **9699**. +- If you configured a dedicated monitoring plan, make sure data source monitoring is enabled. +- Verify the parameters you provided in **settings.xml**. + +## Monitor Several SCVMM + +Follow the steps If you need to monitor more than one SCVMM: + +**Step 1 –** Deploy one more add-on instance to the server where the first add-on instance is +already installed. Be sure to use a different installation folder. + +**Step 2 –** Open the **settings.xml** file and configure the new add-on instance to work with the +second SCVMM server. + +**Step 3 –** Open the **install.ps1** file for the new add-on for edit. + +**Step 4 –** Modify the default scheduled task name: + +`$name = "NetwrixAuditor Add-on for Microsoft SCVMM"` + +**Step 5 –** Save and then launch the updated **install.ps1** file. + +## Modify Task Schedule + +Follow the steps if you need to modify the task schedule: + +**Step 1 –** Open **install.ps1** for edit. + +**Step 2 –** Modify the default scheduled task schedule: + +`$task.Triggers.Repetition.Interval = "PT15M"` + +**Step 3 –** Save and then launch the updated **install.ps1** file. + +Alternatively, you can use **Windows Task Scheduler**. + +- If the solution was deployed using the third scenario (that is, SCVMM server and add-on are + running on different machines), then the following error may be written in the solution log: + +The WinRM client cannot process the request. + +See the [Deployment Scenarios](/docs/auditor/10.7/addon/hyperv/deployment.md)topic for additional information. + +If the authentication scheme is different from Kerberos, or if the client computer is not joined to +a domain, then HTTPS transport must be used or the destination machine must be added to the +**TrustedHosts** list. To configure this list, use **winrm.cmd**. + +Computers included in the **TrustedHosts** list might not be authenticated. To get more information +about their settings, you can run the following command: + +`winrm help config` + +For details on remote troubleshooting and authentication issues, see the following Microsoft +article: +[about_Remote_Troubleshooting](https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_remote_troubleshooting?view=powershell-6). + +To work around, add the remote SCVMM server to the **TrustedHosts** list on the machine were the +add-on runs. For that, use the following commands: + +`winrm quickconfig` + +`Set-Item WSMan:\localhost\Client\TrustedHosts -Value "ServerNameOrIP"` + +here: + +`ServerNameOrIP` – SCVMM server name or IP address. diff --git a/docs/auditor/10.8/addon/ibmqradar/_category_.json b/docs/auditor/10.8/addon/ibmqradar/_category_.json new file mode 100644 index 0000000000..cff06a81f8 --- /dev/null +++ b/docs/auditor/10.8/addon/ibmqradar/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "IBM QRadar", + "position": 100, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/ibmqradar/automate.md b/docs/auditor/10.8/addon/ibmqradar/automate.md new file mode 100644 index 0000000000..2655f3682c --- /dev/null +++ b/docs/auditor/10.8/addon/ibmqradar/automate.md @@ -0,0 +1,35 @@ +--- +title: "Automate Add-On Execution" +description: "Automate Add-On Execution" +sidebar_position: 40 +--- + +# Automate Add-On Execution + +To ensure you feed the most recent data to your SIEM solution, Netwrix recommends scheduling a daily +task for running the add-on. + +**Perform the following steps to create a scheduled task:** + +**Step 1 –** On the computer where you want to execute the add-on, navigate to **Task Scheduler**. + +**Step 2 –** On the **General** tab, specify a task name. Make sure the account that runs the task +has all necessary rights and permissions. + +**Step 3 –** On the **Triggers** tab, click **New** and define the schedule. This option controls +how often audit data is exported from Auditor and saved to event log. Netwrixrecommends scheduling a +daily task. + +**Step 4 –** On the **Actions** tab, click **New** and specify action details. Review the following +for additional information: + +| Option | Value | +| ------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Action | Set to "_Start a program_". | +| Program/script | Input "_Powershell.exe_". | +| Add arguments (optional) | Add a path to the add-on in double quotes and specify add-on parameters. For example: -file "C:\Add-ons\Netwrix_Auditor_Add-on_for_IBM_QRadar.ps1" -NetwrixAuditorHost 172.28.6.15 | + +**Step 5 –** Save the task. + +After creating a task, wait for the next scheduled run or navigate to **Task Scheduler** and run the +task manually. To do this, right-click a task and click **Run**. diff --git a/docs/auditor/10.8/addon/ibmqradar/collecteddata.md b/docs/auditor/10.8/addon/ibmqradar/collecteddata.md new file mode 100644 index 0000000000..6f1f0a7795 --- /dev/null +++ b/docs/auditor/10.8/addon/ibmqradar/collecteddata.md @@ -0,0 +1,21 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 50 +--- + +# Work with Collected Data + +Follow the steps to work with collected data: + +**Step 1 –** On the computer where you executed the add-on, navigate to **Start** > **All +Programs** > **Event Viewer**. + +**Step 2 –** In the Event Viewer dialog, navigate to **Event Viewer (local)** > **Applications and +Services Logs** >Netwrix Auditor Integration log. + +**Step 3 –** Review events. + +![EventLog_Export_Example](/images/auditor/10.7/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) + +Now you can augment Windows event log with data collected by the Auditor. diff --git a/docs/auditor/10.8/addon/ibmqradar/deployment.md b/docs/auditor/10.8/addon/ibmqradar/deployment.md new file mode 100644 index 0000000000..b001b938c7 --- /dev/null +++ b/docs/auditor/10.8/addon/ibmqradar/deployment.md @@ -0,0 +1,25 @@ +--- +title: "Choose Appropriate Execution Scenario" +description: "Choose Appropriate Execution Scenario" +sidebar_position: 20 +--- + +# Choose Appropriate Execution Scenario + +Auditor Add-on for the SIEM solution runs on any computer in your environment. For example, you can +run the add-on on the computer where Auditor is installed or on a remote server. Depending on the +execution scenario you choose, you have to define a different set of parameters. See the +[Define Parameters](/docs/auditor/10.7/addon/ibmqradar/parameters.md) topic for additional information. + +Netwrix suggests the following execution scenarios: + +| Scenario | Example | +| ------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The add-on runs on the Auditor Server with the current user credentials. Activity Records are exported to a local event log. | C:\Add-ons\Netwrix_Auditor_Add-on_for_IBM_QRadar.ps1 | +| The add-on runs on the Auditor Server with explicitly defined credentials. Activity Records are exported to a local event log. | C:\Add-ons\Netwrix*Auditor_Add-on_for_IBM* QRadar.ps1 -NetwrixAuditorUserName enterprise\NAuser -NetwrixAuditorPassword NetwrixIsCool | +| The add-on exports Activity Records from a remote Auditor Server using current user credentials and writes data to a local event log. | C:\Add-ons\Netwrix*Auditor_Add-on_for_IBM* QRadar.ps1 -NetwrixAuditorHost 172.28.6.15 | +| The add-on exports Activity Records from a remote Auditor Server using explicitly defined credentials and writes data to a local event log. | C:\Add-ons\Netwrix*Auditor_Add-on_for_IBM* QRadar.ps1 -NetwrixAuditorHost 172.28.6.15 -NetwrixAuditorUserName enterprise\NAuser -NetwrixAuditorPassword NetwrixIsCool | + +For security reasons, Netwrix recommends running the script with current user credentials (skipping +user credentials). Create a special user account with permissions to both Auditor data and event log +and use it for running the script. diff --git a/docs/auditor/10.8/addon/ibmqradar/integrationeventlog.md b/docs/auditor/10.8/addon/ibmqradar/integrationeventlog.md new file mode 100644 index 0000000000..b975f2ae89 --- /dev/null +++ b/docs/auditor/10.8/addon/ibmqradar/integrationeventlog.md @@ -0,0 +1,40 @@ +--- +title: "Integration Event Log Fields" +description: "Integration Event Log Fields" +sidebar_position: 60 +--- + +# Integration Event Log Fields + +This section describes how the add-on fills in the Netwrix Auditor **Integration** event log fields +with data retrieved from Activity Records. + +The Activity Record structure is described in the +[Reference for Creating Activity Records](/docs/auditor/10.7/api/activityrecordreference.md)topic. + +| Event log field name | Filled in with value | Details | +| -------------------- | ----------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Source | **NA\_\_**`{Data Source Name}`** -OR- **Netwrix \_Auditor_Integration_API\_\_ | Depending on _SetDataSourceAsEventSource_ in-script parameter. | +| EventID | **`{Calculated by add-on}`** -OR- **0** | Depending on _GenerateEventId_ in-script parameter (calculation result also depends on _IncludeDataSourceToMakeEventId_ parameter — if _GenerateEventId_ = _True_). | +| Task Category | **`{DataSource ID}`** -OR- **1** | Depending on _SetDataSourceAsEventCategory_ in-script parameter. | + +See the [Define Parameters](/docs/auditor/10.7/addon/ibmqradar/parameters.md) topic for additional information. + +EventData is filled in with data from the Activity Record fields as follows: + +| Entry in EventData | Activity Record field | +| ------------------ | --------------------- | +| DataSource | `{DataSource}` | +| Action | `{Action}` | +| Message | `{Action ObjectType}` | +| Where | `{Where}` | +| ObjectType | `{ObjectType}` | +| Who | `{Who}` | +| What | `{What}` | +| When | `{When}` | +| Workstation | `{Workstation}` | +| Details | `{Details}` | + +Details are filled in only if this Activity Record field is not empty. + +![eventlogexample_thumb_0_0](/images/auditor/10.7/addon/solarwinds/eventlogexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/addon/ibmqradar/overview.md b/docs/auditor/10.8/addon/ibmqradar/overview.md new file mode 100644 index 0000000000..06be65ae26 --- /dev/null +++ b/docs/auditor/10.8/addon/ibmqradar/overview.md @@ -0,0 +1,50 @@ +--- +title: "IBM QRadar" +description: "IBM QRadar" +sidebar_position: 100 +--- + +# IBM QRadar + +Netwrix Auditor Add-on for SIEM helps you to get most from your SIEM investment. This topic focuses +on the IBM QRadar SIEM solution. + +The add-on works in collaboration with Netwrix Auditor, supplying additional data that augments the +data collected by the SIEM solution. + +The add-on enriches your SIEM data with actionable context in human-readable format, including the +before and after values for every change and data access attempt, both failed and successful. +Aggregating data into a single audit trail simplifies analysis, makes your SIEM more cost effective, +and helps you keep tabs on your IT infrastructure. + +Implemented as a PowerShell script, this add-on facilitates the audit data transition from Netwrix +Auditor to the SIEM solution. All you have to do is provide connection details and schedule the +script for execution. + +On a high level, the add-on works as follows: + +1. The add-on connects to the Netwrix Auditor server and retrieves audit data using the Netwrix + Auditor Integration API. +2. The add-on processes Netwrix Auditor-compatible data (Activity Records) into log events that work + as input for the SIEM solution. Each event contains the user account, action, time, and other + details. +3. The add-on creates a special Windows event log named **Netwrix_Auditor_Integration** and stores + events there. These events are structured and ready for integration with the SIEM solution. + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +of the Activity Record and the capabilities of the Netwrix Auditor Integration API.\ + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| On... | Ensure that... | +| ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| The computer where the script will be executed | - PowerShell **3.0** or later must be installed. - .NET **4.5** or later must be installed. - Execution policy for powershell scripts is set to _"Unrestricted"_. Run Windows PowerShell as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the write permission on the script folder—the add-on creates a special .bin file with the last exported event. - The user running the script must be a member of the Domain Users group. - At least the first script run should be performed under the account with elevated privileges, as it will be necessary to create event log file and perform other required operations. | + +## Compatibility Notice + +Make sure to check your product version, and then review and update your add-ons and scripts +leveraging Netwrix Auditor Integration API. Download the latest add-on version in the Add-on Store. diff --git a/docs/auditor/10.8/addon/ibmqradar/parameters.md b/docs/auditor/10.8/addon/ibmqradar/parameters.md new file mode 100644 index 0000000000..2615b0bb30 --- /dev/null +++ b/docs/auditor/10.8/addon/ibmqradar/parameters.md @@ -0,0 +1,43 @@ +--- +title: "Define Parameters" +description: "Define Parameters" +sidebar_position: 10 +--- + +# Define Parameters + +Before running or scheduling the add-on, you must define connection details: Auditor Server host, +user credentials, etc. Most parameters are optional, the script uses the default values unless +parameters are explicitly defined. You can skip or define parameters depending on your execution +scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/ibmqradar/deployment.md) topic +for additional information. + +| Parameter | Default value | Description | +| --------------------------------- | ------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **Connection to Netwrix Auditor** | | | +| NetwrixAuditorHost | localhost:9699 | Assumes that the add-on runs on the computer hosting the Auditor Server and uses default port 9699. If you want to run the add-on on another machine, provide a name of the computer where Auditor Server resides (e.g., 172.28.6.15, EnterpriseNAServer, WKS.enterprise.local). To specify a non-default port, provide a server name followed by the port number (e.g., WKS.enterprise.local:9999). | +| NetwrixAuditorUserName | Current user credentials | Unless specified, the add-on runs with the current user credentials. If you want the add-on to use another account to connect to Auditor Server, specify the account name in the _DOMAIN\username_ format. The account must be assigned the Global reviewer role in Auditor or be a member of the Netwrix Auditor **Client Users** group on the computer hosting Auditor Server. | +| NetwrixAuditorPassword | Current user credentials | Unless specified, the script runs with the current user credentials. Provide a different password if necessary. | + +## In-Script Parameters + +You may also need to modify the parameters that define how EventIDs should be generated for exported +events, though their default values address most popular usage scenarios. In-script parameters are +listed in the table below. To modify them, open the script for edit and enter the values you need. + +Once set, these parameter values must stay unchanged until the last run of the script — otherwise +dynamically calculated EventIDs will be modified and applied incorrectly. + +| Parameter | Default value | Description | +| -------------------------------- | ------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **EventID generation** | | | +| GenerateEventId | True | Defines whether to generated unique EventIDs. Possible parameter values: - True — generate unique EventIDs using Activity Record fields - False — do not generate a unique ID, set EventID=0 for all cases EventID is generated through CRC32 calculation that involves the following Activity Record field values: - ObjectType - Action - DataSource (optional, see below for details) Only the lowest 16 bits of the calculation result are used. See the [Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) topic for additional information. | +| IncludeDataSourceToMakeEventId\* | True | Defines whether the DataSource field of Activity Record should be used in the EventID calculation. This parameter is applied only if GenerateEventId is set to _TRUE_. | +| SetDataSourceAsEventCategory | True | Defines whether to fill in Event Category event field with a numeric value derived from the DataSource field of Activity Record. Possible parameter values: - True — generate a numeric value for Event Category using Activity Record field - False — do not generate a numeric value, set Event Category=1 for all cases The Event Category field value is generated through CRC32 calculation that involves the DataSource field of Activity Record. Only the lowest 9 bits of the calculation result are used. | +| SetDataSourceAsEventSource | False | Defines whether to fill in the Event Source event field with the value from the DataSource field of Activity Record. Possible parameter values: - True — fill in the Event Source with the value from DataSource field of Activity Record, adding the prefix defined by $EventSourcePrefix. Default prefix is _NA_, for example:_NA Windows Server_ - False — set Event Source to _Netwrix_Auditor_Integration_API_ for all cases If the script cannot fill in the Event Source for some DataSource, the default value _Netwrix_Auditor_Integration_API_ will be used. If the event source for particular DataSource does not exist in the Netwrix_Auditor_Integration event log, elevated privileges are required for add-on execution. | + +\* When configuring the **IncludeDataSourceToMakeEventId** parameter, consider that the _Object +Type - Action_ pair may be identical for several data sources (e.g., Object='User' and +Action='Added'); thus, excluding DataSource from calculation may lead to the same EventID +(duplicates). See the [Run the Add-On with PowerShell](/docs/auditor/10.7/addon/ibmqradar/powershell.md) topic for additional +information about duplicates. diff --git a/docs/auditor/10.8/addon/ibmqradar/powershell.md b/docs/auditor/10.8/addon/ibmqradar/powershell.md new file mode 100644 index 0000000000..2dead271ca --- /dev/null +++ b/docs/auditor/10.8/addon/ibmqradar/powershell.md @@ -0,0 +1,66 @@ +--- +title: "Run the Add-On with PowerShell" +description: "Run the Add-On with PowerShell" +sidebar_position: 30 +--- + +# Run the Add-On with PowerShell + +First, provide a path to your add-on followed by script parameters with their values. Each parameter +is preceded with a dash; a space separates a parameter name from its value. You can skip some +parameters— the script uses a default value unless a parameter is explicitly defined. If necessary, +modify the parameters as required. + +Follow the steps to run add-on with PowerShell: + +**Step 1 –** On computer where you want to execute the add-on, start Windows PowerShell. + +**Step 2 –** Type a path to the add-on. Or simply drag and drop the add-on file in the console +window. + +**Step 3 –** Add script parameters. The console will look similar to the following: + +Windows PowerShell + +Copyright (C) 2014 Microsoft Corporation. All rights reserved. + +PS C:\Users\AddOnUser> C:\Add-ons\Netwrix_Auditor_Add-on_for_IBM_QRadar.ps1 - NetwrixAuditorHost +172.28.6.15 + +**NOTE:** If the script path contains spaces (e.g., _C:\Netwrix Add-ons_), embrace it in double +quotes and insert the ampersand (**&**) symbol in front (e.g., & "_C:\Netwrix Add-ons_"). + +**Step 4 –** Hit **Enter**. + +Depending on the number of Activity Records stored in Netwrix Auditor Audit Database execution may +take a while. Ensure the script execution completed successfully. The Netwrix Auditor +**Integration** event log will be created and filled with events. + +By default, the Netwrix Auditor **Integration** event log size is set to **1GB**, and retention is +set to "_Overwrite events as needed_". See the +[Integration Event Log Fields](/docs/auditor/10.7/addon/ibmqradar/integrationeventlog.md) topic for additional information. + +**NOTE:** Event records with more than 30,000 characters length will be trimmed. + +At the end of each run, the script creates the +**Netwrix_Auditor_Event_Log_Export_Add-on_EventIDs.txt** file. It defines mapping between the +Activity Records and related Event IDs . You can use this file to track possible duplicates of Event +IDs created at each script execution. Duplicates, if any, are written to the +**Netwrix_Auditor_Event_Log_Export_Add-on_EventIDsDuplicates.txt** file. + +Similarly, the add-on also creates the **Netwrix_Auditor_Event_Log_Export_Add-on_CategoriesIDs.txt** +file that defines mapping between the Data Source and related Category ID. + +## Applying Filters + +Every time you run the script, Auditor makes a timestamp. The next time you run the script, it will +start retrieving new Activity Records. Consider the following: + +- By default, the add-on does not apply any filters when exporting Activity Records. If you are + running the add-on for the first time (there is no timestamp yet) with no filters, it will export + Activity Records for the last month only. This helps to optimize solution performance during the + first run. At the end of the first run, the timestamp will be created, and the next run will start + export from that timestamp. + +- However, if you have specified a time period for Activity Records to be exported, then this filter + will be applied at the add-on first run and the runs that follow. diff --git a/docs/auditor/10.8/addon/intelsecurity/_category_.json b/docs/auditor/10.8/addon/intelsecurity/_category_.json new file mode 100644 index 0000000000..1395781e14 --- /dev/null +++ b/docs/auditor/10.8/addon/intelsecurity/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Intel Security", + "position": 110, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/intelsecurity/automate.md b/docs/auditor/10.8/addon/intelsecurity/automate.md new file mode 100644 index 0000000000..62b9a7045a --- /dev/null +++ b/docs/auditor/10.8/addon/intelsecurity/automate.md @@ -0,0 +1,35 @@ +--- +title: "Automate Add-On Execution" +description: "Automate Add-On Execution" +sidebar_position: 40 +--- + +# Automate Add-On Execution + +To ensure you feed the most recent data to your SIEM solution, Netwrix recommends scheduling a daily +task for running the add-on. + +**Perform the following steps to create a scheduled task:** + +**Step 1 –** On the computer where you want to execute the add-on, navigate to **Task Scheduler**. + +**Step 2 –** On the **General** tab, specify a task name. Make sure the account that runs the task +has all necessary rights and permissions. + +**Step 3 –** On the **Triggers** tab, click **New** and define the schedule. This option controls +how often audit data is exported from Auditor and saved to event log. Netwrixrecommends scheduling a +daily task. + +**Step 4 –** On the **Actions** tab, click **New** and specify action details. Review the following +for additional information: + +| Option | Value | +| ------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Action | Set to "_Start a program_". | +| Program/script | Input "_Powershell.exe_". | +| Add arguments (optional) | Add a path to the add-on in double quotes and specify add-on parameters. For example: -file "C:\Add-ons\Netwrix_Auditor_Add-on_for_Intel_Security.ps1" -NetwrixAuditorHost 172.28.6.15 | + +**Step 5 –** Save the task. + +After creating a task, wait for the next scheduled run or navigate to **Task Scheduler** and run the +task manually. To do this, right-click a task and click **Run**. diff --git a/docs/auditor/10.8/addon/intelsecurity/collecteddata.md b/docs/auditor/10.8/addon/intelsecurity/collecteddata.md new file mode 100644 index 0000000000..6f1f0a7795 --- /dev/null +++ b/docs/auditor/10.8/addon/intelsecurity/collecteddata.md @@ -0,0 +1,21 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 50 +--- + +# Work with Collected Data + +Follow the steps to work with collected data: + +**Step 1 –** On the computer where you executed the add-on, navigate to **Start** > **All +Programs** > **Event Viewer**. + +**Step 2 –** In the Event Viewer dialog, navigate to **Event Viewer (local)** > **Applications and +Services Logs** >Netwrix Auditor Integration log. + +**Step 3 –** Review events. + +![EventLog_Export_Example](/images/auditor/10.7/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) + +Now you can augment Windows event log with data collected by the Auditor. diff --git a/docs/auditor/10.8/addon/intelsecurity/deployment.md b/docs/auditor/10.8/addon/intelsecurity/deployment.md new file mode 100644 index 0000000000..cc96ca0ed3 --- /dev/null +++ b/docs/auditor/10.8/addon/intelsecurity/deployment.md @@ -0,0 +1,25 @@ +--- +title: "Choose Appropriate Execution Scenario" +description: "Choose Appropriate Execution Scenario" +sidebar_position: 20 +--- + +# Choose Appropriate Execution Scenario + +Auditor Add-on for the SIEM solution runs on any computer in your environment. For example, you can +run the add-on on the computer where Auditor is installed or on a remote server. Depending on the +execution scenario you choose, you have to define a different set of parameters. See the +[Define Parameters](/docs/auditor/10.7/addon/intelsecurity/parameters.md) topic for additional information. + +Netwrix suggests the following execution scenarios: + +| Scenario | Example | +| ------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The add-on runs on the Auditor Server with the current user credentials. Activity Records are exported to a local event log. | C:\Add-ons\Netwrix_Auditor_Add-on_for_Intel_Security.ps1 | +| The add-on runs on the Auditor Server with explicitly defined credentials. Activity Records are exported to a local event log. | C:\Add-ons\Netwrix_Auditor_Add-on_for_Intel_Security.ps1 -NetwrixAuditorUserName enterprise\NAuser -NetwrixAuditorPassword NetwrixIsCool | +| The add-on exports Activity Records from a remote Auditor Server using current user credentials and writes data to a local event log. | C:\Add-ons\Netwrix_Auditor_Add-on_for_Intel_Security.ps1-NetwrixAuditorHost 172.28.6.15 | +| The add-on exports Activity Records from a remote Auditor Server using explicitly defined credentials and writes data to a local event log. | C:\Add-ons\Netwrix_Auditor_Add-on_for_Intel_Security.ps1-NetwrixAuditorHost 172.28.6.15 -NetwrixAuditorUserName enterprise\NAuser -NetwrixAuditorPassword NetwrixIsCool | + +For security reasons, Netwrix recommends running the script with current user credentials (skipping +user credentials). Create a special user account with permissions to both Auditor data and event log +and use it for running the script. diff --git a/docs/auditor/10.8/addon/intelsecurity/integrationeventlog.md b/docs/auditor/10.8/addon/intelsecurity/integrationeventlog.md new file mode 100644 index 0000000000..08f1754eae --- /dev/null +++ b/docs/auditor/10.8/addon/intelsecurity/integrationeventlog.md @@ -0,0 +1,40 @@ +--- +title: "Integration Event Log Fields" +description: "Integration Event Log Fields" +sidebar_position: 60 +--- + +# Integration Event Log Fields + +This section describes how the add-on fills in the Netwrix Auditor **Integration** event log fields +with data retrieved from Activity Records. + +The Activity Record structure is described in the +[Reference for Creating Activity Records](/docs/auditor/10.7/api/activityrecordreference.md)topic. + +| Event log field name | Filled in with value | Details | +| -------------------- | ----------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Source | **NA\_\_**`{Data Source Name}`** -OR- **Netwrix \_Auditor_Integration_API\_\_ | Depending on _SetDataSourceAsEventSource_ in-script parameter. | +| EventID | **`{Calculated by add-on}`** -OR- **0** | Depending on _GenerateEventId_ in-script parameter (calculation result also depends on _IncludeDataSourceToMakeEventId_ parameter — if _GenerateEventId_ = _True_). | +| Task Category | **`{DataSource ID}`** -OR- **1** | Depending on _SetDataSourceAsEventCategory_ in-script parameter. | + +See the [Define Parameters](/docs/auditor/10.7/addon/intelsecurity/parameters.md) topic for additional information. + +EventData is filled in with data from the Activity Record fields as follows: + +| Entry in EventData | Activity Record field | +| ------------------ | --------------------- | +| DataSource | `{DataSource}` | +| Action | `{Action}` | +| Message | `{Action ObjectType}` | +| Where | `{Where}` | +| ObjectType | `{ObjectType}` | +| Who | `{Who}` | +| What | `{What}` | +| When | `{When}` | +| Workstation | `{Workstation}` | +| Details | `{Details}` | + +Details are filled in only if this Activity Record field is not empty. + +![eventlogexample_thumb_0_0](/images/auditor/10.7/addon/solarwinds/eventlogexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/addon/intelsecurity/overview.md b/docs/auditor/10.8/addon/intelsecurity/overview.md new file mode 100644 index 0000000000..48adce1313 --- /dev/null +++ b/docs/auditor/10.8/addon/intelsecurity/overview.md @@ -0,0 +1,50 @@ +--- +title: "Intel Security" +description: "Intel Security" +sidebar_position: 110 +--- + +# Intel Security + +Netwrix Auditor Add-on for SIEM helps you to get most from your SIEM investment. This topic focuses +on the Intel Security SIEM solution. + +The add-on works in collaboration with Netwrix Auditor, supplying additional data that augments the +data collected by the SIEM solution. + +The add-on enriches your SIEM data with actionable context in human-readable format, including the +before and after values for every change and data access attempt, both failed and successful. +Aggregating data into a single audit trail simplifies analysis, makes your SIEM more cost effective, +and helps you keep tabs on your IT infrastructure. + +Implemented as a PowerShell script, this add-on facilitates the audit data transition from Netwrix +Auditor to the SIEM solution. All you have to do is provide connection details and schedule the +script for execution. + +On a high level, the add-on works as follows: + +1. The add-on connects to the Netwrix Auditor server and retrieves audit data using the Netwrix + Auditor Integration API. +2. The add-on processes Netwrix Auditor-compatible data (Activity Records) into log events that work + as input for the SIEM solution. Each event contains the user account, action, time, and other + details. +3. The add-on creates a special Windows event log named **Netwrix_Auditor_Integration** and stores + events there. These events are structured and ready for integration with the SIEM solution. + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +of the Activity Record and the capabilities of the Netwrix Auditor Integration API. + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| On... | Ensure that... | +| ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| The computer where the script will be executed | - PowerShell **3.0** or later must be installed. - .NET **4.5** or later must be installed. - Execution policy for powershell scripts is set to _"Unrestricted"_. Run Windows PowerShell as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the write permission on the script folder—the add-on creates a special .bin file with the last exported event. - The user running the script must be a member of the Domain Users group. - At least the first script run should be performed under the account with elevated privileges, as it will be necessary to create event log file and perform other required operations. | + +## Compatibility Notice + +Make sure to check your product version, and then review and update your add-ons and scripts +leveraging Netwrix Auditor Integration API. Download the latest add-on version in the Add-on Store. diff --git a/docs/auditor/10.8/addon/intelsecurity/parameters.md b/docs/auditor/10.8/addon/intelsecurity/parameters.md new file mode 100644 index 0000000000..3d19f1cbec --- /dev/null +++ b/docs/auditor/10.8/addon/intelsecurity/parameters.md @@ -0,0 +1,43 @@ +--- +title: "Define Parameters" +description: "Define Parameters" +sidebar_position: 10 +--- + +# Define Parameters + +Before running or scheduling the add-on, you must define connection details: Auditor Server host, +user credentials, etc. Most parameters are optional, the script uses the default values unless +parameters are explicitly defined. You can skip or define parameters depending on your execution +scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/intelsecurity/deployment.md) topic +for additional information. + +| Parameter | Default value | Description | +| --------------------------------- | ------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **Connection to Netwrix Auditor** | | | +| NetwrixAuditorHost | localhost:9699 | Assumes that the add-on runs on the computer hosting the Auditor Server and uses default port 9699. If you want to run the add-on on another machine, provide a name of the computer where Auditor Server resides (e.g., 172.28.6.15, EnterpriseNAServer, WKS.enterprise.local). To specify a non-default port, provide a server name followed by the port number (e.g., WKS.enterprise.local:9999). | +| NetwrixAuditorUserName | Current user credentials | Unless specified, the add-on runs with the current user credentials. If you want the add-on to use another account to connect to Auditor Server, specify the account name in the _DOMAIN\username_ format. The account must be assigned the Global reviewer role in Auditor or be a member of the Netwrix Auditor **Client Users** group on the computer hosting Auditor Server. | +| NetwrixAuditorPassword | Current user credentials | Unless specified, the script runs with the current user credentials. Provide a different password if necessary. | + +## In-Script Parameters + +You may also need to modify the parameters that define how EventIDs should be generated for exported +events, though their default values address most popular usage scenarios. In-script parameters are +listed in the table below. To modify them, open the script for edit and enter the values you need. + +Once set, these parameter values must stay unchanged until the last run of the script — otherwise +dynamically calculated EventIDs will be modified and applied incorrectly. + +| Parameter | Default value | Description | +| -------------------------------- | ------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **EventID generation** | | | +| GenerateEventId | True | Defines whether to generated unique EventIDs. Possible parameter values: - True — generate unique EventIDs using Activity Record fields - False — do not generate a unique ID, set EventID=0 for all cases EventID is generated through CRC32 calculation that involves the following Activity Record field values: - ObjectType - Action - DataSource (optional, see below for details) Only the lowest 16 bits of the calculation result are used. See the [Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) topic for additional information. | +| IncludeDataSourceToMakeEventId\* | True | Defines whether the DataSource field of Activity Record should be used in the EventID calculation. This parameter is applied only if GenerateEventId is set to _TRUE_. | +| SetDataSourceAsEventCategory | True | Defines whether to fill in Event Category event field with a numeric value derived from the DataSource field of Activity Record. Possible parameter values: - True — generate a numeric value for Event Category using Activity Record field - False — do not generate a numeric value, set Event Category=1 for all cases The Event Category field value is generated through CRC32 calculation that involves the DataSource field of Activity Record. Only the lowest 9 bits of the calculation result are used. | +| SetDataSourceAsEventSource | False | Defines whether to fill in the Event Source event field with the value from the DataSource field of Activity Record. Possible parameter values: - True — fill in the Event Source with the value from DataSource field of Activity Record, adding the prefix defined by $EventSourcePrefix. Default prefix is _NA_, for example:_NA Windows Server_ - False — set Event Source to _Netwrix_Auditor_Integration_API_ for all cases If the script cannot fill in the Event Source for some DataSource, the default value _Netwrix_Auditor_Integration_API_ will be used. If the event source for particular DataSource does not exist in the Netwrix_Auditor_Integration event log, elevated privileges are required for add-on execution. | + +\* When configuring the **IncludeDataSourceToMakeEventId** parameter, consider that the _Object +Type - Action_ pair may be identical for several data sources (e.g., Object='User' and +Action='Added'); thus, excluding DataSource from calculation may lead to the same EventID +(duplicates). See the [Run the Add-On with PowerShell](/docs/auditor/10.7/addon/ibmqradar/powershell.md) topic for +additional information about duplicates. diff --git a/docs/auditor/10.8/addon/intelsecurity/powershell.md b/docs/auditor/10.8/addon/intelsecurity/powershell.md new file mode 100644 index 0000000000..1add42cf80 --- /dev/null +++ b/docs/auditor/10.8/addon/intelsecurity/powershell.md @@ -0,0 +1,66 @@ +--- +title: "Run the Add-On with PowerShell" +description: "Run the Add-On with PowerShell" +sidebar_position: 30 +--- + +# Run the Add-On with PowerShell + +First, provide a path to your add-on followed by script parameters with their values. Each parameter +is preceded with a dash; a space separates a parameter name from its value. You can skip some +parameters— the script uses a default value unless a parameter is explicitly defined. If necessary, +modify the parameters as required. + +**To run the script with PowerShell:** + +**Step 1 –** On computer where you want to execute the add-on, start **Windows PowerShell**. + +**Step 2 –** Type a path to the add-on. Or simply drag and drop the add-on file in the console +window. + +**Step 3 –** Add script parameters. The console will look similar to the following: + +Windows PowerShell + +Copyright (C) 2014 Microsoft Corporation. All rights reserved. + +PS C:\Users\AddOnUser> C:\Add-ons\Netwrix_Auditor_Add-on_for_Intel_Security.ps1 - NetwrixAuditorHost +172.28.6.15 + +**NOTE:** If the script path contains spaces (e.g., _C:\Netwrix Add-ons_), embrace it in double +quotes and insert the ampersand (**&**) symbol in front (e.g., & "_C:\Netwrix Add-ons_"). + +**Step 4 –** Hit **Enter**. + +Depending on the number of Activity Records stored in Netwrix Auditor Audit Database execution may +take a while. Ensure the script execution completed successfully. The Netwrix Auditor +**Integration** event log will be created and filled with events. + +By default, the Netwrix Auditor **Integration** event log size is set to 1GB, and retention is set +to "_Overwrite events as needed_". See the [Integration Event Log Fields](/docs/auditor/10.7/addon/intelsecurity/integrationeventlog.md) +topic for additional information. + +**NOTE:** Event records with more than 30,000 characters length will be trimmed. + +At the end of each run, the script creates the +**Netwrix_Auditor_Event_Log_Export_Add-on_EventIDs.txt** file. It defines mapping between the +Activity Records and related Event IDs . You can use this file to track possible duplicates of Event +IDs created at each script execution. Duplicates, if any, are written to the +**Netwrix_Auditor_Event_Log_Export_Add-on_EventIDsDuplicates.txt** file. + +Similarly, the add-on also creates the **Netwrix_Auditor_Event_Log_Export_Add-on_CategoriesIDs.txt** +file that defines mapping between the Data Source and related Category ID. + +## Applying Filters + +Every time you run the script, Auditor makes a timestamp. The next time you run the script, it will +start retrieving new Activity Records. Consider the following: + +- By default, the add-on does not apply any filters when exporting Activity Records. If you are + running the add-on for the first time (there is no timestamp yet) with no filters, it will export + Activity Records for the last month only. This helps to optimize solution performance during the + first run. At the end of the first run, the timestamp will be created, and the next run will start + export from that timestamp. + +- However, if you have specified a time period for Activity Records to be exported, then this filter + will be applied at the add-on first run and the runs that follow. diff --git a/docs/auditor/10.8/addon/linux/_category_.json b/docs/auditor/10.8/addon/linux/_category_.json new file mode 100644 index 0000000000..0f7daf2953 --- /dev/null +++ b/docs/auditor/10.8/addon/linux/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Linux Generic Syslog", + "position": 120, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/linux/collecteddata.md b/docs/auditor/10.8/addon/linux/collecteddata.md new file mode 100644 index 0000000000..2435ba82e2 --- /dev/null +++ b/docs/auditor/10.8/addon/linux/collecteddata.md @@ -0,0 +1,21 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 30 +--- + +# Work with Collected Data + +Follow the steps to search for collected data: + +**Step 1 –** Start the Auditor client and navigate to **Search**. + +**Step 2 –** Click **Search**. + +**NOTE:** You might want to apply a filter to narrow down your search results to the Netwrix API +data source only. + +## Expand List of Gathered Events + +Based on the activity you get, you may want to adjust the processing rules, add other relevant +events, etc. To do that, copy and edit the file with processing rules, and then restart the service. diff --git a/docs/auditor/10.8/addon/linux/install.md b/docs/auditor/10.8/addon/linux/install.md new file mode 100644 index 0000000000..955178db1f --- /dev/null +++ b/docs/auditor/10.8/addon/linux/install.md @@ -0,0 +1,24 @@ +--- +title: "Install Add-On" +description: "Install Add-On" +sidebar_position: 10 +--- + +# Install Add-On + +Follow the steps to install the Add-On: + +**Step 1 –** Navigate to your add-on package. + +**Step 2 –** Unzip the Add-On to a desired folder. + +**Step 3 –** Run the installation package. + +**Step 4 –** Accept the license agreement and follow the instructions of the setup wizard. + +**Step 5 –** On the **Destination Folder** step, specify the installation folder (_C:\Program Files +(x86)\Netwrix Add-ons\_ by default). + +**Step 6 –** Click **Install**. + +**Step 7 –** When done, click **Finish**. diff --git a/docs/auditor/10.8/addon/linux/overview.md b/docs/auditor/10.8/addon/linux/overview.md new file mode 100644 index 0000000000..0c3fd15f9b --- /dev/null +++ b/docs/auditor/10.8/addon/linux/overview.md @@ -0,0 +1,43 @@ +--- +title: "Linux Generic Syslog" +description: "Linux Generic Syslog" +sidebar_position: 120 +--- + +# Linux Generic Syslog + +The add-on works in collaboration with Netwrix Auditor, supplying data about activity on your +Linux-based devices. Aggregating data into a single audit trail simplifies analysis, makes activity +monitoring more cost effective, and helps you keep tabs on your IT infrastructure. + +Implemented as a service, this add-on facilitates the data transition from Linux-based systems to +Netwrix Auditor. All you have to do is provide connection details and specify parsing rules. + +On a high level, the add-on works as follows: + +**Step 1 –** The add-on listens to the specified UDP ports and captures designated Syslog messages. + +**Step 2 –** Out of the box, messages from Red Hat Enterprise Linux 7 and 6, SUSE Linux Enterprise +Server 12, openSUSE42, and Ubuntu 16 are supported. For other distributions, deployment of the +rsyslog package may be required. You can edit the add-on configuration to extend the captured +message list. + +**Step 3 –** The add-on processes these events into Netwrix Auditor-compatible format (Activity +Records). Each Activity Record contains the user account, action, time, and other details. + +**Step 4 –** Using the Integration API, the add-on sends the activity records to the Netwrix Auditor +Server, which writes them to the Long-Term Archive and the Audit Database. + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +of the Activity Record and the capabilities of the NIntegration API. + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| On... | Ensure that... | +| ----------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The Netwrix Auditor Server side | - The Audit Database settings are configured in Auditor Server. - The TCP **9699** port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Contributor role in Auditor. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| The computer where the add-on will be installed | - The UDP 514 port is open for inbound connections. **CAUTION:** UPD 514 port can only be used by one service, otherwise the following error will occur: [ERROR] Error occurred when starting the syslog udp listener. Only one usage of each socket address (protocol/network address/port) is normally permitted - .Net Framework [3.5 SP1](http://www.microsoft.com/en-us/download/details.aspx?id=22), [4.0](https://www.microsoft.com/en-us/download/details.aspx?id=17851), [4.5](https://www.microsoft.com/en-us/download/details.aspx?id=30653), or [4.6](https://www.microsoft.com/en-us/download/details.aspx?id=48130) is installed. | +| On the target syslog-based platform | Outbound UDP 514 port must be enabled. The **Syslog daemon** must be configured to redirect events. The procedure below explains how to configure redirection. **NOTE:** Red Hat Enterprise Linux 7 and 6, SUSE Linux Enterprise Server 12, openSUSE 42, and Ubuntu 16 are supported out of the box. For other distributions, deployment of the rsyslog package may be required. - On Red Hat Enterprise Linux 7, perform the following steps: **Step 5 –** Open the **/ etc/ rsyslog.conf** file. **Step 6 –** Add the following line: `auth.*;authpriv.* @name:514;RSYSLOG_SyslogProtocol23Format` where **name** is a FQDN, Net BIOSname or IP address of the computer where Netwrix Auditor Server is installed. For example: `auth.*;authpriv.* @172.28.18.25:514;RSYSLOG_SyslogProtocol23Format` **Step 7 –** Launch the **RHEL console** and execute the following command: `service rsyslog restart` - On Ubuntu 16, perform the following steps: **Step 1 –** Navigate to the **/ etc/ rsyslog.d/ 50-default.conf** file. **Step 2 –** Add the following line: `auth.*;authpriv.* @name:514;RSYSLOG_SyslogProtocol23Format` where **name** is a FQDN, Net BIOSname or IP address of the computer where Netwrix Auditor Server is installed. For example: `auth.*;authpriv.* @172.28.18.25:514;RSYSLOG_SyslogProtocol23Format` **Step 3 –** Launch the **UBUNTU console** and execute the following command: `service rsyslog restart` | diff --git a/docs/auditor/10.8/addon/linux/parameters.md b/docs/auditor/10.8/addon/linux/parameters.md new file mode 100644 index 0000000000..370912a9ca --- /dev/null +++ b/docs/auditor/10.8/addon/linux/parameters.md @@ -0,0 +1,30 @@ +--- +title: "Define Parameters" +description: "Define Parameters" +sidebar_position: 20 +--- + +# Define Parameters + +The configuration wizard opens in the default web browser: + +![GenericLinuxConfigWizard](/images/auditor/10.7/addon/linux/configwizard.webp) + +Click **Proceed** and complete the following fields: + +| Option | Description | +| ------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Specify General Settings | | +| Listed UDP port | Specify UDP port for listening incoming events. (**514** by default). | +| Auditor Endpoint | Auditor Server IP address and port number followed by endpoint for posting Activity Records. Assumes that the add-on runs on the computer hostingAuditor Server and uses default port _9699_. If you want to run the add-on on another machine, provide a name of the computer where Auditor Server resides (e.g., _172.28.6.15_, _EnterpriseNAServer_, _WKS.enterprise.local_). To specify a non-default port, provide a server name followed by the port number (e.g., _WKS.ent erprise.local:9999_). Do not modify the endpoint part (_/ netwrix/ api_ ) | +| Certificate Thumbprint | Netwrix Auditor Certificate Thumbprint Property. Possible values: - `Empty`—Check Auditor certificate via Windows Certificate Store. - `AB:BB:CC`—Check Auditor Server certificate thumbprint identifier. - `NOCHECK`—Do not check Auditor certificate. Make sure to select this parameter if you plan to specify servers by their IP. | +| Specify Active Directory credentials | | +| Username | Provide the name of the account under which the service runs. Unless specified, the service runs under the account currently logged on. | +| Password | Provide the password for the selected account. | +| Auditor Monitoring Plan settings | | +| Auditor Plan | Unless specified, data is written to **Netwrix_Auditor_API** database and is not associated with a specific monitoring plan. Specify a name of associated monitoring plan in Auditor. In this case, data will be written to a database linked to this plan. If you select a plan name in the add- on, make sure a dedicated plan is created in Auditor, the Netwrix **API** data source is added to the plan and enabled for monitoring. Otherwise, the add- on will not be able to write data to the Audit Database. | +| Auditor Plan Item | Unless specified, data is not associated with a specific plan and, thus, cannot be filtered by item name. Specify an item name. Make sure to create a dedicated item inAuditor in advance. | +| Accept List | | +| Address | Specify a list of IP addresses of syslog events sources. The service will collect and process events from these sources only. Events collected from any other source will be ignored. | + +Click **Run** to start collecting data with the Add-On. diff --git a/docs/auditor/10.8/addon/logrhythm/_category_.json b/docs/auditor/10.8/addon/logrhythm/_category_.json new file mode 100644 index 0000000000..42addba061 --- /dev/null +++ b/docs/auditor/10.8/addon/logrhythm/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "LogRhythm", + "position": 130, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/logrhythm/automate.md b/docs/auditor/10.8/addon/logrhythm/automate.md new file mode 100644 index 0000000000..40abd9569c --- /dev/null +++ b/docs/auditor/10.8/addon/logrhythm/automate.md @@ -0,0 +1,33 @@ +--- +title: "Automate Add-On Execution" +description: "Automate Add-On Execution" +sidebar_position: 40 +--- + +# Automate Add-On Execution + +After creating a task, wait for the next scheduled run or navigate to **Task Scheduler** and run the +task manually. To do this, right-click a task and click **Run**. + +**Step 1 –** On the computer where you want to execute the add-on, navigate to **Task Scheduler**. + +**Step 2 –** On the **General** tab, specify a task name. Make sure the account that runs the task +has all necessary rights and permissions. + +**Step 3 –** On the **Triggers** tab, click **New** and define the schedule. This option controls +how often audit data is exported from Auditor and saved to event log. Netwrixrecommends scheduling a +daily task. + +**Step 4 –** On the **Actions** tab, click **New** and specify action details. Review the following +for additional information: + +| Option | Value | +| ------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Action | Set to "_Start a program_". | +| Program/script | Input "_Powershell.exe_". | +| Add arguments (optional) | Add a path to the add-on in double quotes and specify add-on parameters. For example: -file "C:\Add-ons\Netwrix_Auditor_Add-on_for_LogRhythm.ps1" -NetwrixAuditorHost 172.28.6.15 | + +**Step 5 –** Save the task. + +After creating a task, wait for the next scheduled run or navigate to **Task Scheduler** and run the +task manually. To do this, right-click a task and click **Run**. diff --git a/docs/auditor/10.8/addon/logrhythm/collecteddata.md b/docs/auditor/10.8/addon/logrhythm/collecteddata.md new file mode 100644 index 0000000000..4eb4fba982 --- /dev/null +++ b/docs/auditor/10.8/addon/logrhythm/collecteddata.md @@ -0,0 +1,21 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 50 +--- + +# Work with Collected Data + +Follow the steps to work with collected data. + +**Step 1 –** On the computer where you executed the add-on, navigate to **Start** > **All +Programs** > **Event Viewer**. + +**Step 2 –** In the Event Viewer dialog, navigate to **Event Viewer (local)** > **Applications and +Services Logs** >Netwrix Auditor Integration log. + +**Step 3 –** Review events. + +![EventLog_Export_Example](/images/auditor/10.7/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) + +Now you can augment Windows event log with data collected by the Auditor. diff --git a/docs/auditor/10.8/addon/logrhythm/deployment.md b/docs/auditor/10.8/addon/logrhythm/deployment.md new file mode 100644 index 0000000000..c9683283bf --- /dev/null +++ b/docs/auditor/10.8/addon/logrhythm/deployment.md @@ -0,0 +1,25 @@ +--- +title: "Choose Appropriate Execution Scenario" +description: "Choose Appropriate Execution Scenario" +sidebar_position: 20 +--- + +# Choose Appropriate Execution Scenario + +Auditor Add-on for the SIEM solution runs on any computer in your environment. For example, you can +run the add-on on the computer where Auditor is installed or on a remote server. Depending on the +execution scenario you choose, you have to define a different set of parameters. See the +[Define Parameters](/docs/auditor/10.7/addon/logrhythm/parameters.md) topic for additional information. + +Netwrix suggests the following execution scenarios: + +| Scenario | Example | +| ------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The add-on runs on theAuditorServer with the current user credentials. Activity Records are exported to a local event log. | C:\Add-ons\Netwrix_Auditor_Add-on_for_LogRhythm.ps1 | +| The add-on runs on the Auditor Server with explicitly defined credentials. Activity Records are exported to a local event log. | C:\Add-ons\Netwrix*Auditor_Add-on_for* LogRhythm.ps1 -NetwrixAuditorUserName enterprise\NAuser -NetwrixAuditorPassword NetwrixIsCool | +| The add-on exports Activity Records from a remote Auditor Server using current user credentials and writes data to a local event log. | C:\Add-ons\Netwrix*Auditor_Add-on_for* LogRhythm.ps1-NetwrixAuditorHost 172.28.6.15 | +| The add-on exports Activity Records from a remote Auditor Server using explicitly defined credentials and writes data to a local event log. | C:\Add-ons\Netwrix*Auditor_Add-on_for* LogRhythm.ps1-NetwrixAuditorHost 172.28.6.15 -NetwrixAuditorUserName enterprise\NAuser -NetwrixAuditorPassword NetwrixIsCool | + +For security reasons, Netwrix recommends running the script with current user credentials (skipping +user credentials). Create a special user account with permissions to both Auditor data and event log +and use it for running the script. diff --git a/docs/auditor/10.8/addon/logrhythm/integrationeventlog.md b/docs/auditor/10.8/addon/logrhythm/integrationeventlog.md new file mode 100644 index 0000000000..600a053373 --- /dev/null +++ b/docs/auditor/10.8/addon/logrhythm/integrationeventlog.md @@ -0,0 +1,40 @@ +--- +title: "Integration Event Log Fields" +description: "Integration Event Log Fields" +sidebar_position: 60 +--- + +# Integration Event Log Fields + +This section describes how the add-on fills in the Netwrix Auditor **Integration** event log fields +with data retrieved from Activity Records. + +The Activity Record structure is described in the +[Reference for Creating Activity Records](/docs/auditor/10.7/api/activityrecordreference.md)topic. + +| Event log field name | Filled in with value | Details | +| -------------------- | ----------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Source | **NA\_\_**`{Data Source Name}`** -OR- **Netwrix \_Auditor_Integration_API\_\_ | Depending on _SetDataSourceAsEventSource_ in-script parameter. | +| EventID | **`{Calculated by add-on}`** -OR- **0** | Depending on _GenerateEventId_ in-script parameter (calculation result also depends on _IncludeDataSourceToMakeEventId_ parameter — if _GenerateEventId_ = _True_). | +| Task Category | **`{DataSource ID}`** -OR- **1** | Depending on _SetDataSourceAsEventCategory_ in-script parameter. | + +See the [Define Parameters](/docs/auditor/10.7/addon/logrhythm/parameters.md) topic for additional information. + +EventData is filled in with data from the Activity Record fields as follows: + +| Entry in EventData | Activity Record field | +| ------------------ | --------------------- | +| DataSource | `{DataSource}` | +| Action | `{Action}` | +| Message | `{Action ObjectType}` | +| Where | `{Where}` | +| ObjectType | `{ObjectType}` | +| Who | `{Who}` | +| What | `{What}` | +| When | `{When}` | +| Workstation | `{Workstation}` | +| Details | `{Details}` | + +Details are filled in only if this Activity Record field is not empty. + +![eventlogexample_thumb_0_0](/images/auditor/10.7/addon/solarwinds/eventlogexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/addon/logrhythm/overview.md b/docs/auditor/10.8/addon/logrhythm/overview.md new file mode 100644 index 0000000000..d843024659 --- /dev/null +++ b/docs/auditor/10.8/addon/logrhythm/overview.md @@ -0,0 +1,50 @@ +--- +title: "LogRhythm" +description: "LogRhythm" +sidebar_position: 130 +--- + +# LogRhythm + +Netwrix Auditor Add-on for SIEM helps you to get most from your SIEM investment. This topic focuses +on the LogRhythm SIEM solution. + +The add-on works in collaboration with Netwrix Auditor, supplying additional data that augments the +data collected by the SIEM solution. + +The add-on enriches your SIEM data with actionable context in human-readable format, including the +before and after values for every change and data access attempt, both failed and successful. +Aggregating data into a single audit trail simplifies analysis, makes your SIEM more cost effective, +and helps you keep tabs on your IT infrastructure. + +Implemented as a PowerShell script, this add-on facilitates the audit data transition from Netwrix +Auditor to the SIEM solution. All you have to do is provide connection details and schedule the +script for execution. + +On a high level, the add-on works as follows: + +1. The add-on connects to the Netwrix Auditor server and retrieves audit data using the Netwrix + Auditor Integration API. +2. The add-on processes Netwrix Auditor-compatible data (Activity Records) into log events that work + as input for the SIEM solution. Each event contains the user account, action, time, and other + details. +3. The add-on creates a special Windows event log named **Netwrix_Auditor_Integration** and stores + events there. These events are structured and ready for integration with the SIEM solution. + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +of the Activity Record and the capabilities of the Netwrix Auditor Integration API. + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| On... | Ensure that... | +| ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| The computer where the script will be executed | - PowerShell **3.0** or later must be installed. - .NET **4.5** or later must be installed. - Execution policy for powershell scripts is set to _"Unrestricted"_. Run Windows PowerShell as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the write permission on the script folder—the add-on creates a special .bin file with the last exported event. - The user running the script must be a member of the Domain Users group. - At least the first script run should be performed under the account with elevated privileges, as it will be necessary to create event log file and perform other required operations. | + +## Compatibility Notice + +Make sure to check your product version, and then review and update your add-ons and scripts +leveraging Netwrix Auditor Integration API. Download the latest add-on version in the Add-on Store. diff --git a/docs/auditor/10.8/addon/logrhythm/parameters.md b/docs/auditor/10.8/addon/logrhythm/parameters.md new file mode 100644 index 0000000000..9ec8025eb4 --- /dev/null +++ b/docs/auditor/10.8/addon/logrhythm/parameters.md @@ -0,0 +1,43 @@ +--- +title: "Define Parameters" +description: "Define Parameters" +sidebar_position: 10 +--- + +# Define Parameters + +Before running or scheduling the add-on, you must define connection details: Auditor Server host, +user credentials, etc. Most parameters are optional, the script uses the default values unless +parameters are explicitly defined. You can skip or define parameters depending on your execution +scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/logrhythm/deployment.md) topic +for additional information. + +| Parameter | Default value | Description | +| --------------------------------- | ------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **Connection to Netwrix Auditor** | | | +| NetwrixAuditorHost | localhost:9699 | Assumes that the add-on runs on the computer hosting the Auditor Server and uses default port 9699. If you want to run the add-on on another machine, provide a name of the computer where Auditor Server resides (e.g., 172.28.6.15, EnterpriseNAServer, WKS.enterprise.local). To specify a non-default port, provide a server name followed by the port number (e.g., WKS.enterprise.local:9999). | +| NetwrixAuditorUserName | Current user credentials | Unless specified, the add-on runs with the current user credentials. If you want the add-on to use another account to connect to Auditor Server, specify the account name in the _DOMAIN\username_ format. The account must be assigned the Global reviewer role in Auditor or be a member of the Netwrix Auditor **Client Users** group on the computer hosting Auditor Server. | +| NetwrixAuditorPassword | Current user credentials | Unless specified, the script runs with the current user credentials. Provide a different password if necessary. | + +## In-Script Parameters + +You may also need to modify the parameters that define how EventIDs should be generated for exported +events, though their default values address most popular usage scenarios. In-script parameters are +listed in the table below. To modify them, open the script for edit and enter the values you need. + +Once set, these parameter values must stay unchanged until the last run of the script — otherwise +dynamically calculated EventIDs will be modified and applied incorrectly. + +| Parameter | Default value | Description | +| -------------------------------- | ------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **EventID generation** | | | +| GenerateEventId | True | Defines whether to generated unique EventIDs. Possible parameter values: - True — generate unique EventIDs using Activity Record fields - False — do not generate a unique ID, set EventID=0 for all cases EventID is generated through CRC32 calculation that involves the following Activity Record field values: - ObjectType - Action - DataSource (optional, see below for details) Only the lowest 16 bits of the calculation result are used. See the [Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) topic for additional information. | +| IncludeDataSourceToMakeEventId\* | True | Defines whether the DataSource field of Activity Record should be used in the EventID calculation. This parameter is applied only if GenerateEventId is set to _TRUE_. | +| SetDataSourceAsEventCategory | True | Defines whether to fill in Event Category event field with a numeric value derived from the DataSource field of Activity Record. Possible parameter values: - True — generate a numeric value for Event Category using Activity Record field - False — do not generate a numeric value, set Event Category=1 for all cases The Event Category field value is generated through CRC32 calculation that involves the DataSource field of Activity Record. Only the lowest 9 bits of the calculation result are used. | +| SetDataSourceAsEventSource | False | Defines whether to fill in the Event Source event field with the value from the DataSource field of Activity Record. Possible parameter values: - True — fill in the Event Source with the value from DataSource field of Activity Record, adding the prefix defined by $EventSourcePrefix. Default prefix is _NA_, for example:_NA Windows Server_ - False — set Event Source to _Netwrix_Auditor_Integration_API_ for all cases If the script cannot fill in the Event Source for some DataSource, the default value _Netwrix_Auditor_Integration_API_ will be used. If the event source for particular DataSource does not exist in the Netwrix_Auditor_Integration event log, elevated privileges are required for add-on execution. | + +\* When configuring the **IncludeDataSourceToMakeEventId** parameter, consider that the _Object +Type - Action_ pair may be identical for several data sources (e.g., Object='User' and +Action='Added'); thus, excluding DataSource from calculation may lead to the same EventID +(duplicates). See the [Run the Add-On with PowerShell](/docs/auditor/10.7/addon/ibmqradar/powershell.md) topic for +additional information about duplicates.\* diff --git a/docs/auditor/10.8/addon/logrhythm/powershell.md b/docs/auditor/10.8/addon/logrhythm/powershell.md new file mode 100644 index 0000000000..69f77943d8 --- /dev/null +++ b/docs/auditor/10.8/addon/logrhythm/powershell.md @@ -0,0 +1,66 @@ +--- +title: "Run the Add-On with PowerShell" +description: "Run the Add-On with PowerShell" +sidebar_position: 30 +--- + +# Run the Add-On with PowerShell + +First, provide a path to your add-on followed by script parameters with their values. Each parameter +is preceded with a dash; a space separates a parameter name from its value. You can skip some +parameters— the script uses a default value unless a parameter is explicitly defined. If necessary, +modify the parameters as required. + +Follow the steps to run the script with PowerShell. + +**Step 1 –** On computer where you want to execute the add-on, start **Windows PowerShell**. + +**Step 2 –** Type a path to the add-on. Or simply drag and drop the add-on file in the console +window. + +**Step 3 –** Add script parameters. The console will look similar to the following: + +Windows PowerShell + +Copyright (C) 2014 Microsoft Corporation. All rights reserved. + +PS C:\Users\AddOnUser> C:\Add-ons\Netwrix_Auditor_Add-on_for_LogRhythm.ps1 - NetwrixAuditorHost +172.28.6.15 + +**NOTE:** If the script path contains spaces (e.g., _C:\Netwrix Add-ons_), embrace it in double +quotes and insert the ampersand (**&**) symbol in front (e.g., & "_C:\Netwrix Add-ons_"). + +**Step 4 –** Hit **Enter**. + +Depending on the number of Activity Records stored in Netwrix Auditor Audit Database execution may +take a while. Ensure the script execution completed successfully. The Netwrix Auditor Integration +event log will be created and filled with events. + +By default, the Auditor Integration event log size is set to 1GB, and retention is set to +"_Overwrite events as needed_". See the [Integration Event Log Fields](/docs/auditor/10.7/addon/logrhythm/integrationeventlog.md) topic +for additional information. + +**NOTE:** Event records with more than 30,000 characters length will be trimmed. + +At the end of each run, the script creates the +**Netwrix_Auditor_Event_Log_Export_Add-on_EventIDs.txt** file. It defines mapping between the +Activity Records and related Event IDs . You can use this file to track possible duplicates of Event +IDs created at each script execution. Duplicates, if any, are written to the +**Netwrix_Auditor_Event_Log_Export_Add-on_EventIDsDuplicates.txt** file. + +Similarly, the add-on also creates the **Netwrix_Auditor_Event_Log_Export_Add-on_CategoriesIDs.txt** +file that defines mapping between the Data Source and related Category ID. + +## Applying Filters + +Every time you run the script, Auditor makes a timestamp. The next time you run the script, it will +start retrieving new Activity Records. Consider the following: + +- By default, the add-on does not apply any filters when exporting Activity Records. If you are + running the add-on for the first time (there is no timestamp yet) with no filters, it will export + Activity Records for the last month only. This helps to optimize solution performance during the + first run. At the end of the first run, the timestamp will be created, and the next run will start + export from that timestamp. + +- However, if you have specified a time period for Activity Records to be exported, then this filter + will be applied at the add-on first run and the runs that follow. diff --git a/docs/auditor/10.8/addon/nasuni/_category_.json b/docs/auditor/10.8/addon/nasuni/_category_.json new file mode 100644 index 0000000000..424d69590e --- /dev/null +++ b/docs/auditor/10.8/addon/nasuni/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Nasuni", + "position": 140, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/nasuni/collecteddata.md b/docs/auditor/10.8/addon/nasuni/collecteddata.md new file mode 100644 index 0000000000..a24736a0b1 --- /dev/null +++ b/docs/auditor/10.8/addon/nasuni/collecteddata.md @@ -0,0 +1,32 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 30 +--- + +# Work with Collected Data + +To leverage data collected with the add-on, you can do the following in Auditor: + +- Search for required data. For that, start Auditor client and navigate to **Search**. After + specifying the criteria you need, click **Search**. You will get a list of activity records with + detailed information on who did what in the reported time period. + +You can apply a filter to narrow down your search results to the Netwrix **API** data source only. + +![AR from CyberArk in NA](/images/auditor/10.7/addon/cyberark/cyberark_thumb_0_0.webp) + +- Also, you can click **Tools** in the upper-right corner and select the command you need. For + example: + - If you want to periodically receive the report on the results of search with the specified + criteria, click **Subscribe**. Then specify how you want the report to be delivered – as an + email or as a file stored to the file share. + - To create an alert on the specific occurrences, click **Create alert**. + - To export filtered data to PDF or CSV, click **Export data**. +- You can also configure and receive alerts on the events you are interested in. + +See the following topics for additional information: + +- [Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) +- [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) +- [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) diff --git a/docs/auditor/10.8/addon/nasuni/install.md b/docs/auditor/10.8/addon/nasuni/install.md new file mode 100644 index 0000000000..955178db1f --- /dev/null +++ b/docs/auditor/10.8/addon/nasuni/install.md @@ -0,0 +1,24 @@ +--- +title: "Install Add-On" +description: "Install Add-On" +sidebar_position: 10 +--- + +# Install Add-On + +Follow the steps to install the Add-On: + +**Step 1 –** Navigate to your add-on package. + +**Step 2 –** Unzip the Add-On to a desired folder. + +**Step 3 –** Run the installation package. + +**Step 4 –** Accept the license agreement and follow the instructions of the setup wizard. + +**Step 5 –** On the **Destination Folder** step, specify the installation folder (_C:\Program Files +(x86)\Netwrix Add-ons\_ by default). + +**Step 6 –** Click **Install**. + +**Step 7 –** When done, click **Finish**. diff --git a/docs/auditor/10.8/addon/nasuni/overview.md b/docs/auditor/10.8/addon/nasuni/overview.md new file mode 100644 index 0000000000..af04c12974 --- /dev/null +++ b/docs/auditor/10.8/addon/nasuni/overview.md @@ -0,0 +1,81 @@ +--- +title: "Nasuni" +description: "Nasuni" +sidebar_position: 140 +--- + +# Nasuni + +The add-on works in collaboration with Netwrix Auditor, supplying data about activity on your +Nasuni-based devices. Aggregating data into a single audit trail simplifies analysis, makes activity +monitoring more cost effective, and helps you keep tabs on your IT infrastructure. + +Implemented as a service, this add-on facilitates the data transition from Nasuni-based systems to +Netwrix Auditor. All you have to do is provide connect ion details and specify parsing rules. + +On a high level, the add-on works as follows: + +1. The add-on listens to the specified UDP ports and captures designated Syslog messages. +2. The add-on processes these events into Netwrix Auditor-compatible format (Activity Records). Each + Activity Record contains the user account, action, time, and other details. +3. Using the Integration API, the add-on sends the activity records to the Netwrix Auditor Server, + which writes them to the Long-Term Archive and the Audit Database. + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +of the Activity Record and the capabilities of the NIntegration API. + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| On... | Ensure that... | +| ----------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| The Auditor Server side | - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP **9699** port (default Integration API port) is open for inbound connections. - The user writing data to the Audit Database is granted the **Contributor** role in Auditor. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the **Global administrator** role or add the user to the **Netwrix Auditor Administrators** group. In this case, this user will have the most extended permissions in the product. | +| The computer where the add-on will be installed | - The UDP 514 port is open for inbound connections. - .Net Framework 4.7.2 and above is installed. Review the following Microsoft technical article for additional information on how to install .Net Framework 4.7.2: [Microsoft .NET Framework 4.7.2 offline installer for Windows](https://support.microsoft.com/en-us/topic/microsoft-net-framework-4-7-2-offline-installer-for-windows-05a72734-2127-a15d-50cf-daf56d5faec2). | + +### Configure Logging for + +Follow the steps to configure the syslog integration. + +**Step 1 –** Log in to the Nasuni Management Console and go to the **Console Settings** > **Syslog +Exports**. + +**Step 2 –** In the Network section, specify the **IP Address** and **Port** and save the +configuration. + +**Step 3 –** Configure log settings: + +- Set **Send Auditing Messages** to "_ON_"; +- Set **Logging Facility** to default "_Local0 (16)_"; +- Set **Log Level for Audit Message** to "_Info_". + +**Step 4 –** Enable auditing: + +1. On the Volumes tab, open **Auditing**. +2. Choose the volume you wish to be audited and click **Edit Volumes**. +3. Select the **Auditing Enabled** option and choose which Event Types you wish to be reported. +4. Hit the **Save Auditing Settings** button. + +### Accounts and Rights + +By default, the add-on will run under the _Local System_ account. The add-on and Auditor must be +installed on the same server. If a specific account is designated to run the add-on, it needs local +admin privileges. + +### Considerations and Limitations + +- The Add-On must be deployed in the same subnet as Nasuni NAS & File Server Silo Consolidation and + Auditor. +- If the monitoring plan name in the _``_ add-on configuration parameter is + specified incorrectly, this may lead to temp files generation and, therefore, to inefficient disk + space usage. +- If you are using Netwrix Auditor for Network Devices, the 514 UDP port may be already in use, and + you should specify another port when configuring the add-on settings (see the + [Install Add-On](/docs/auditor/10.7/addon/nasuni/install.md) and [Define Parameters](/docs/auditor/10.7/addon/nasuni/parameters.md) topics for additional + information). Another option is to install the add-on and Auditor Server on different machines. + +## Compatibility Notice + +Make sure to check your product version, and then review and update your add-ons and scripts +leveraging Netwrix Auditor Integration API. Download the latest add-on version in the Add-on Store. diff --git a/docs/auditor/10.8/addon/nasuni/parameters.md b/docs/auditor/10.8/addon/nasuni/parameters.md new file mode 100644 index 0000000000..b7e1600c84 --- /dev/null +++ b/docs/auditor/10.8/addon/nasuni/parameters.md @@ -0,0 +1,30 @@ +--- +title: "Define Parameters" +description: "Define Parameters" +sidebar_position: 20 +--- + +# Define Parameters + +The configuration wizard opens in the default web browser: + +![configwizard](/images/auditor/10.7/addon/nasuni/configwizard.webp) + +Click **Proceed** and complete the following fields: + +| Option | Description | +| ------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Specify General Settings | | +| Listed UDP port | Specify UDP port for listening incoming events. (**514** by default). | +| Auditor Endpoint | Auditor Server IP address and port number followed by endpoint for posting Activity Records. Assumes that the add-on runs on the computer hostingAuditor Server and uses default port _9699_. If you want to run the add-on on another machine, provide a name of the computer where Auditor Server resides (e.g., _172.28.6.15_, _EnterpriseNAServer_, _WKS.enterprise.local_). To specify a non-default port, provide a server name followed by the port number (e.g., _WKS.ent erprise.local:9999_). Do not modify the endpoint part (_/ netwrix/ api_ ) | +| Certificate Thumbprint | Netwrix Auditor Certificate Thumbprint Property. Possible values: - `Empty`—Check Auditor certificate via Windows Certificate Store. - `AB:BB:CC`—Check Auditor Server certificate thumbprint identifier. - `NOCHECK`—Do not check Auditor certificate. Make sure to select this parameter if you plan to specify servers by their IP. | +| Specify Active Directory credentials | | +| Username | Provide the name of the account under which the service runs. Unless specified, the service runs under the account currently logged on. | +| Password | Provide the password for the selected account. | +| Auditor Monitoring Plan settings | | +| Auditor Plan | Unless specified, data is written to **Netwrix_Auditor_API** database and is not associated with a specific monitoring plan. Specify a name of associated monitoring plan in Auditor. In this case, data will be written to a database linked to this plan. If you select a plan name in the add- on, make sure a dedicated plan is created in Auditor, the Netwrix **API** data source is added to the plan and enabled for monitoring. Otherwise, the add- on will not be able to write data to the Audit Database. | +| Auditor Plan Item | Unless specified, data is not associated with a specific plan and, thus, cannot be filtered by item name. Specify an item name. Make sure to create a dedicated item inAuditor in advance. | +| Accept List | | +| Address | Specify a list of IP addresses of syslog events sources. The service will collect and process events from these sources only. Events collected from any other source will be ignored. | + +Click **Run** to start collecting data with the Add-On. diff --git a/docs/auditor/10.8/addon/nutanixahv/_category_.json b/docs/auditor/10.8/addon/nutanixahv/_category_.json new file mode 100644 index 0000000000..6580032494 --- /dev/null +++ b/docs/auditor/10.8/addon/nutanixahv/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Nutanix AHV", + "position": 150, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/nutanixahv/collecteddata.md b/docs/auditor/10.8/addon/nutanixahv/collecteddata.md new file mode 100644 index 0000000000..1496c6a8c7 --- /dev/null +++ b/docs/auditor/10.8/addon/nutanixahv/collecteddata.md @@ -0,0 +1,33 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 30 +--- + +# Work with Collected Data + +To leverage data collected with the add-on, you can do the following in Auditor: + +- Search for required data. For that, start Auditor client and navigate to **Search**. After + specifying the criteria you need, click **Search**. You will get a list of activity records with + detailed information on who did what in the reported time period. + +You might want to apply a filter to narrow down your search results to the Netwrix**API** data +source only. + +![screen_results](/images/auditor/10.7/addon/nutanixahv/nutanixahv_thumb_0_0.webp) + +- Also, you can click **Tools** in the upper-right corner and select the command you need. For + example: + - If you want to periodically receive the report on the results of search with the specified + criteria, click **Subscribe**. Then specify how you want the report to be delivered – as an + email or as a file stored to the file share. + - To create an alert on the specific occurrences, click **Create alert**. + - To export filtered data to PDF or CSV, click **Export data**. +- You can also configure and receive alerts on the events you are interested in. + +See the following topics for additional information: + +- [Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) +- [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) +- [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) diff --git a/docs/auditor/10.8/addon/nutanixahv/deployment.md b/docs/auditor/10.8/addon/nutanixahv/deployment.md new file mode 100644 index 0000000000..1beea44e1c --- /dev/null +++ b/docs/auditor/10.8/addon/nutanixahv/deployment.md @@ -0,0 +1,49 @@ +--- +title: "Deployment Scenarios" +description: "Deployment Scenarios" +sidebar_position: 20 +--- + +# Deployment Scenarios + +The Add-On can run on any computer in your environment, except for the machine where your Nutanix +Prism Central/Element runs. Depending on the deployment scenario you choose, you will need to define +a different set of parameters + +Possible deployment options are as follows: + +1. Add-on running on the same machine as Auditor Server. +2. Add-on running on the remote machine. + +## Example 1 + +- The add-on runs on the Auditor Server. +- Configuration parameters to specify in **settings.xml** (sample values): + +```` +https://172.28.6.19:9699/netwrix/api/v1/activity_records``` + +`````` + +`````` + +Configuration parameters __NetwrixAuditorUserName__ and __NetwrixAuditorPassword__ are not required. + +You will be prompted for the corresponding set of credentials (user name and password) when you run the __install.ps1__ script. For that, use the Netwrix Auditor __Add-on for Nutanix AHV Configurator__ tool (see steps 4 and 5 of the [Deploy the Add-On](/docs/auditor/10.7/addon/nutanixahv/install.md)). Credentials for connection to Nutanix Prism server will be then encrypted and stored in the solution configuration. Consider that user account should have the __User Admin__ role in Nutanix Prism. + +## Example 2 + +- The add-on runs on the Auditor Server with the explicitly specified user credentials, or on the remote machine. +- Configuration parameters to specify in __settings.xml__ (sample values): + + ``` + https://172.28.6.19:9699/netwrix/api/v1/activity_records``` + + ```SecurityOfficer``` + `````` + + ```NetwrixUser``` + `````` + +Netwrix recommends to create a special user account with permissions to access Auditor and Nutanix server. +```` diff --git a/docs/auditor/10.8/addon/nutanixahv/install.md b/docs/auditor/10.8/addon/nutanixahv/install.md new file mode 100644 index 0000000000..02b93b9f01 --- /dev/null +++ b/docs/auditor/10.8/addon/nutanixahv/install.md @@ -0,0 +1,203 @@ +--- +title: "Deploy the Add-On" +description: "Deploy the Add-On" +sidebar_position: 10 +--- + +# Deploy the Add-On + +Follow the steps to deploy the Add-On: + +**Step 1 –** Prepare Auditorfor data processing. + +**Step 2 –** Configure message forwarding for Nutanix Prism. + +**Step 3 –** Download the Add-On. + +**Step 4 –** Configure Add-On parameters. + +**Step 5 –** Connect to Prism Central Server. + +**Step 6 –** Register the Add-On + +## Prepare Auditor for Data Processing + +In Auditor client, go to the Integrations section and verify Integration API settings: + +1. Make sure the **Leverage Integration API** is switched to **ON**. +2. Check the TCP communication port number – default is **9699**. + +See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) topic for additional information. + +By default, activity records are written to _Netwrix_Auditor_API_ database which is not associated +with a specific monitoring plan. + +Optionally, you can create a dedicated monitoring plan in Auditor. In this case, data will be +written to a database linked to this plan. Target it at Netwrix API data source and enable for +monitoring. Add a dedicated item of _Integration_ type to the plan for data to be filtered by item +name. See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information. + +In such scenario, you will need to specify this monitoring plan in the _MonitoringPlan_ and +_MonitoringPlanItem_ attributes in the add-on configuration parameters. See **Step 4** below for +details. + +## Configure Message Forwarding for Nutanix Prism + +To provide for interaction and data flow between Nutanix Prism and the Add-On, you should set up the +add-on installation server as a remote Syslog listener for Nutanix Prism. For that remote Syslog +server, you will need to specify the IP address and port for inbound messages. Depending on Nutanix +Prism server you are using (Element/Central), follow the related procedure below. + +### Procedure for Nutanix Prism Element + +Follow the steps If you are using Nutanix Prism Element. + +**Step 1 –** Connect to a Controller VM (or Nutanix Prism) by SSH or via web console and execute the +`ncli` command. + +**Step 2 –** Find the IP address of the Controller VM in Nutanix web console under **Settings** > +**General** > **Configure CVM**. + +### Procedure for Nutanix Command-Line Interface + +Alternatively, you can download and install the _ncli_ (Nutanix command-line interface) on any +server in your infrastructure, as described in the +[Nutanix Command-Line Interface (nCLI)](https://portal.nutanix.com/page/documents/details?targetId=Command-Ref-AOS-v55:man-ncli-c.html) +article, and connect to a Controller VM in your cluster. + +Follow the steps if you are using Nutanix command-line interface. + +**Step 1 –** Disable it temporarily until you configure a new remote Syslog listener. By default, +the remote Syslog listening server is enabled. For that, run the following command in ncli: + +`ncli> rsyslog-config set-status enable=false` + +**Step 2 –** Create a remote Syslog server — a remote server that will operate as a Syslog listener, +receiving the Syslog messages from Nutanix server. In the integration solution deployment, it will +be the add-on installation server. Run the following command in _nlci_: + +`ncli> rsyslog-config add-server name= ip-address= port= network-protocol=udp` + +here: + +- `CustomServerName` — remote server that will receive the syslog messages (i.e., server on which + the add-on will be deployed) +- `RemoteIP` — remote server IP address +- `Port` — Destination port number on the remote server + +**Step 3 –** To ensure the server was created successfully, review the list of servers. For that, +run the following command: + +`ncli> rsyslog-config ls-servers` + +The server will be added to the cluster automatically. + +**Step 4 –** Instruct the AUDIT module of Nutanix solution to forward its log information to the new +remote syslog listener, and specify the logging level. For that, run the following command: + +`ncli> rsyslog-config add-module server-name= module-name=AUDIT include-monitor-logs=false level=notice` + +**Step 5 –** Finally, enable syslog forwarding to remote server: +` ncli> rsyslog-config set-status enable=true` + +This syslog server will be added to the cluster automatically. + +### Procedure for Nutanix Prism Central + +First, provide the new remote Syslog server settings to Nutanix Prism server that will forward +Syslog messages. For that, follow the steps below: + +**Step 1 –** Log in to Nutanix Prism Central. + +**Step 2 –** Select **Settings** > **Email and Alerts** > **Syslog Server**. + +**Step 3 –** Click **Configure Syslog Server**. + +**Step 4 –** Enter remote Syslog server settings you specified at Step 2: + +- **Server Name** — name of the remote server. +- **IP Address** — server IP address. +- **Port**— port for incoming messages + +**Step 5 –** Select **UDP** as communication protocol. + +**Step 6 –** Click **Configure**. + +Next, for the most detailed logs to be sent to remote Syslog server, set the logging level in Prism +to _5_ (_Notice_). For that, follow the steps below: + +**Step 1 –** Select **Data Source** and click **Edit**. + +**Step 2 –** Select **Audit** module and select **5 - Notice** level. + +**Step 3 –** Finally, click **Save**. + +## Download the Add-On + +Download the distribution package from the Netwrix website and unpack it to a folder on the computer +where you plan to deploy the add-on. + +Customers who are logged in to the Netwrix Customer Portal can download the latest version of their +software products from the My Products page: +[https://www.netwrix.com/my_products.html](https://www.netwrix.com/my_products.html). See the +[Customer Portal Access](https://helpcenter.netwrix.com/bundle/NetwrixCustomerPortalAccess/page/Customer_Portal_Access.html) +topic for information on how to register for a Customer Portal account. + +Partners and MSPs who are logged into the Netwrix Partner Portal can download the latest version of +their software products from the My Product page: +[https://www.netwrix.com/par/site/products](https://www.netwrix.com/my_products.html). To receive an +invitation to the Partner Portal, please contact +[netwrix.msp@netwrix.com](http://netwrix.msp@netwrix.com/). + +## Configure Add-On Parameters + +Open the add-on folder and edit the **settings.xml** file to configure the add-on parameters: + +| Parameter | Default value | Description | +| ------------------------- | -------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| NetwrixAuditorIntegration | | | +| NetwrixAuditorEndpoint | https://localhost: 9699/netwrix/api/ v1/activity_records | Auditor server IP address and port number followed by endpoint for posting Activity Records. Assumes that the add-on runs on the computer hosting Auditor Server and uses default port **9699**. If you want to run the add-on on another machine, provide a name of the computer where Auditor Server resides (e.g., _172.28.6.15, EnterpriseNAServer, WKS.enterprise.local_). To specify a non-default port, provide a server name followed by the port number (e.g., _WKS.enterprise.local:9999_). Do not modify the endpoint part (/netwrix/api . . . . ) | +| CertificateThumbprint | NOCHECK | Auditor Certificate Thumbprint Property. Possible values: - `Empty`—Check Netwrix Auditor certificate via Windows Certificate Store. - `AB:BB:CC.`—Check Netwrix Auditor Server certificate thumbprint identifier. - `NOCHECK`—Do not check Netwrix Auditor certificate. Make sure to select this parameter if you plan to specify servers by their IP. | +| DateTimeFormat | yyyy-MM-ddTHH:mm:ssZ | Auditor time format. By default, set to zero offset. | +| MonitoringPlan | — | Unless specified, data is written to Netwrix_Auditor_API database and is not associated with a specific monitoring plan. Specify a name of associated monitoring plan in Auditor. In this case, data will be written to a database linked to this plan. If you select a plan name in the add-on, make sure a dedicated plan is created in Auditor, the Netwrix API data source is added to the plan and enabled for monitoring. Otherwise, the add-on will not be able to write data to the Audit Database. | +| MonitoringPlanItem | — | Unless specified, data is not associated with a specific plan and, thus, cannot be filtered by item name. Specify an item name. Make sure to create a dedicated item in Auditor in advance. | +| UserName | Current user credentials | Credentials to access Auditor server. Unless specified, the add-on runs with the current user credentials. If you want the add-on to use another account to connect to Auditor server, specify the account name in the _DOMAIN\username_ format. | +| Password | Current user credentials | Unless specified, the service runs with the current user credentials. Provide a different password if necessary. | +| ARsNumberAtTime | | Maximum number of Audit Records that can be sent to Auditor at a time. | +| ARsSendingPeriodicity | | Periodic time interval for sending Activity Records (in seconds). | +| PauseWhenSendingFailed | | Pause after a failed attempt to send Activity Records (in seconds). | +| **DataCollection** | | | +| ListenUDPPort | 514 | UDP port for receiving incoming Syslog messages. Make sure that this port is not used by any other add-ons or applications (for example, Netwrix Auditor for Network Devices); otherwise specify another port here. | +| StateUpdatingPeriodicity | | Periodic time interval for updating state of clusters (in seconds). | +| EventsReadingPeriodicity | | Periodic time interval for reading events (in seconds). Target endpoint: _/api/nutanix/v2.0/events_ | +| PageLength | | The number of objects loaded with one request. | +| ShortTermFolder | | Short term folder for collected data (full or local path). | + +If you modify parameters in the **settings.xml** file, remember to save the changes and then restart +the **Netwrix Auditor Add-on for Nutanix AHV** service for them to take effect. + +If you need to change user name or password for accessing Prism Central, you should run +Netwrix.IntegrationConfiguration.exe file that will prompt you for the new credentials (see step 5 +below). Then restart the Netwrix Auditor Add-on for Nutanix AHV service for the changes to take +effect. + +## Connect to Prism Central Server + +Run the Netwrix.IntegrationConfiguration.exe file and specify the following: + +- Prism IP address – IP address of Prism Cental server. +- User name – Specify a user name to connect to Prism Central server. +- Password – Specify password fof the account used to connect to Prism Central server. + +These parameters will be configured automatically by **install.ps1** script. If you need to modify +it later, use this configurator from the add-on package. + +Credentials for connection to Nutanix Prism server will be then encrypted and stored in the solution +configuration. Consider that user account should have the **User Admin** role in Nutanix Prism. + +## Register the Add-On + +Run the **install.ps1** PowerShell script to register the add-on service. You will be also prompted +to specify credentials for accessing Nutanix Prism Central. These credentials will be encrypted and +used for secure communication. If you need to modify them later, run the +Netwrix.IntegrationConfiguration.exe file from the add-on package. diff --git a/docs/auditor/10.8/addon/nutanixahv/monitoredevents.md b/docs/auditor/10.8/addon/nutanixahv/monitoredevents.md new file mode 100644 index 0000000000..2e2795a5d3 --- /dev/null +++ b/docs/auditor/10.8/addon/nutanixahv/monitoredevents.md @@ -0,0 +1,34 @@ +--- +title: "Monitoring Scope" +description: "Monitoring Scope" +sidebar_position: 40 +--- + +# Monitoring Scope + +Review a full list of object types and activities monitored on Nutanix Prism with the add-on. + +| Object | Action | Property | +| ----------------------------- | ------------------------------------------------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------- | +| Virtual Machine1 | Create/Delete Clone Migrate Rename State change (Power off/on, Pause etc.) Restore from snapshot Hardware Configuration change | Name MAC Address VLAN Name Connection State Number Of Processors Cores Per Processor Memory Size (MiB) Disk Size (Bytes) Host IP | +| Host (Node) 2 | Add3/Remove4 | IP5 | +| Host Cluster | - | - | +| VM Network (Subnet) | - | - | +| Local User2 | • Create/Delete • Properties change6 • Roles change6 • Log in/out • Password Change | • Username • First Name6 • Last Name6 • Email6 • Language6 • Roles6 | +| Authentication Configuration2 | • Authentication type change | • Authentication Types | + +1 — Syslog + +2 — Events (API v2.0) + +3 — User not applicable + +4 — Host remove event consist of 2 events (see Appendix B): + +- Host marked for removal: this event has a “Who” +- Host deleted: this event occurs when the host deletion task completes. + +5 — The host add event contains the IP address of the host Controller VM, and not the host IP +address. + +6 — UI API. diff --git a/docs/auditor/10.8/addon/nutanixahv/overview.md b/docs/auditor/10.8/addon/nutanixahv/overview.md new file mode 100644 index 0000000000..4869593453 --- /dev/null +++ b/docs/auditor/10.8/addon/nutanixahv/overview.md @@ -0,0 +1,139 @@ +--- +title: "Nutanix AHV" +description: "Nutanix AHV" +sidebar_position: 150 +--- + +# Nutanix AHV + +Netwrix Auditor is a visibility platform for user behavior analysis and risk mitigation that enables +control over changes, configurations and access in hybrid IT environments to protect data regardless +of its location. The platform provides security analytics to detect anomalies in user behavior and +investigate threat patterns before a data breach occurs. + +Nutanix AHV is a virtualization platform within the Nutanix Enterprise Cloud architecture. It +provides facilities for VM deployment, operation and centralized management. Nutanix AHV is a fully +integrated component of the Nutanix Enterprise Cloud. + +Virtualization teams, Managed Service Providers and other IT professionals need to detect who does +what in the Nutanix Hyperconverged infrastructure. For that, a unified audit trail is required, +supporting detailed Nutanix monitoring and effective response to changes. + +For that purpose, you can use a specially designed add-on that supports audit for Nutanix AHV and +Nutanix Prism/Element. The add-on works in collaboration with Auditor, supplying data about +operations on your Nutanix AHV to Netwrix database. Aggregating data into a single audit trail +simplifies analysis, makes activity monitoring more cost-effective, and helps you keep tabs on your +IT infrastructure. + +Major benefits: + +- Gain a high-level view of the data you store +- Detect unauthorized activity that might threaten your data + +## How it works + +The add-on is implemented as a Syslog service that collects activity data from Nutanix +infrastructure and sends it to Netwrix Auditor using the Integration API. + +![HIW_diagram_new](/images/auditor/10.7/addon/nutanixahv/diagram_thumb_0_0.webp) + +On a high level, the solution works as follows: + +1. An IT administrator configures the Integration API settings to enable data collection and storage + to Netwrix database for further reporting, search, etc. + + It is recommended to create a dedicated monitoring plan in Netwrix Auditor and add a dedicated + item of **Integration** type to it — then you will be able to filter data in reports and search + results by monitoring plan/item name. + +2. On Nutanix side, the IT administrator prepares a dedicated user account for accessing Nutanix + Prism Central/Element and configures Syslog server (IP, port, etc.). +3. The administrator opens the Settings.xml configuration file and specifies the necessary + parameters for add-on operation, Netwrix Auditor settings, etc. The add-on will operate as a + Syslog listener for Nutanix server. +4. The administrator runs the Netwrix.IntegrationConfiguration.exe file and provides credentials to + connect to Prism Central server. +5. The administrator selects the deployment scenario and runs the **install.ps1** PowerShell script + file to deploy and configure the add-on components on the target server. +6. In particular, the script deploys and starts **Netwrix Auditor Add-on for Nutanix AHV** Windows + Service— this is the main add-on component, responsible for audit data collection and forwarding. +7. The add-on starts collecting and forwarding activity data from Nutanix Prism server: it listens + to the specified UDP port and captures designated Syslog event messages and also collects + activity data using Nutanix REST API. + +Syslog event data communication is performed using UDP version of Syslog protocol. See the +[Monitoring Scope](/docs/auditor/10.7/addon/nutanixahv/monitoredevents.md) topic for additional information on the default list of +events supported out-of-the box. + +8. The add-on processes the incoming Syslog messages and activity data collected using Nutanix REST + API into NAuditor -compatible format (Activity Records). Each Activity Record contains the + Who-What-When-Where-Action information (that is, initiator's account, time, action, and other + details). +9. Using the Integration API, the add-on sends the activity records to Auditor Server that writes + them to the Audit Database and Long-Term Archive. Data is sent periodically, by default every + second. + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the Activity +Record structure and capabilities of the Integration API. + +10. Users open Auditor Client to work with collected data: + - Search for file changes using certain criteria + - Export data to PDF or CSV files + - Save search results as reports + - Subscribe to search results + - Configure and receive alerts + +## Add-on Delivery Package + +The add-on delivery package is a ZIP archive that includes the following files: + +| File name | Description | +| -------------------------------------- | ------------------------------------------------------------------------------ | +| Install.ps1 | PowerShell script that creates windows service to execute add-on. | +| Settings.xml | Contains parameters for the add-on service operation. | +| Netwrix.IntegrationConfiguration.exe | Add-on component responsible for accessing Prism Central server. | +| Netwrix.Nutanix.IntegrationService.exe | Main add-on component, responsible for audit data collection from Nutanix AHV. | + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| Where | Prerequisite to check | +| ---------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Auditor Server side | - Auditor version 9.9 or later. - Netwrix Integration API and Audit Database settings are configured properly in Netwrix Auditor. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The **TCP 9699** port must be open on Windows firewall for inbound connections. - User account under which data will be written to the Audit Database requires the **Contributor** role in Auditor. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant it the **Global administrator** role, or add that account to the **Netwrix Auditor Administrators** group. | +| The machine where the add-on will be installed | - Any of the following Windows OS versions: - Windows Server 2012 R2 (or later) - Windows 8.1 (or later) - The **UDP** port must be open on Windows firewall for inbound connections. - .NET Framework versions 4.5 or later | +| Nutanix Prism server | Nutanix AOS 5.11, 5.15, or 5.20 | + +### Accounts and rights + +It is recommended to create a dedicated account for running **install.ps1** and **Netwrix Auditor +Add-on for Nutanix AHV** (main service of the solution). The service will connect to Auditor Server +using this account, so at least the **Contributor** role in Auditor is required for it. See the +[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional +information. + +This service account requires the **User Admin** role in Nutanix Prism. You will be prompted for the +corresponding set of credentials when you run the **install.ps1** script (see Steps 4 and 5 of the +[Deploy the Add-On](/docs/auditor/10.7/addon/nutanixahv/install.md)). User name and password for connection to Nutanix Prism server will +be then encrypted and stored in the solution configuration. + +### Considerations and limitations + +- By default, the add-on is targeted at a single Nutanix Prism Central/Element server. +- Netwrix add-on must be deployed in the same subnet as Nutanix Prism Central/Element server. +- Please be aware that monitoring of actions performed on the add-on installation server is not + supported. + +### Upgrade Path + +To upgrade from versions released earlier than August 2020, do the following: + +1. Stop and remove the **Netwrix Auditor Add-on for Nutanix AHV** service. +2. Download and unpack the new add-on package to the same location as the earlier version. +3. Run the **install.ps1** PowerShell script file from the new add-on version on the target server. + +## Compatibility notice + +The add-on is compatible with Nutanix AOS 5.15 and Nutanix AOS 5.20, and with Auditor 10.0 and +later. diff --git a/docs/auditor/10.8/addon/nutanixahv/troubleshooting.md b/docs/auditor/10.8/addon/nutanixahv/troubleshooting.md new file mode 100644 index 0000000000..2f539f51c8 --- /dev/null +++ b/docs/auditor/10.8/addon/nutanixahv/troubleshooting.md @@ -0,0 +1,36 @@ +--- +title: "Maintenance and Troubleshooting" +description: "Maintenance and Troubleshooting" +sidebar_position: 50 +--- + +# Maintenance and Troubleshooting + +If you cannot see collected data in Auditor, check the following: + +- Service account has sufficient rights to access Auditor. +- In Auditor settings, go to the **Integrations** section and make sure the **Leverage Integration + API** is switched to **ON**. Check the communication port number – default is **9699**. +- If you configured a dedicated monitoring plan, make sure data source monitoring is enabled. +- Verify the parameters you provided in **settings.xml**. + +Also, remember that events from the remote Syslog server (add-on installation server) are not +collected. + +Currently, the add-on supports only one Prism installation (Central or Element). To monitor more +than one Prism Central/Element, you can copy the add-on to another folder, configure +**settings.xml** as described in this document and modify **install.ps1** to rename the service: + +**Step 1 –** Deploy one more add-on instance to the server where the first add-on instance is +already installed. Be sure to use a different installation folder. + +**Step 2 –** Open **settings.xml** and configure the new add-on instance to work with the second +Prism server. + +**Step 3 –** Open **install.ps1** for the new add-on for edit. + +**Step 4 –** Modify the default service name: + +`$name = "enter_new_name"` + +**Step 5 –** Save and then launch the updated **install.ps1** file. diff --git a/docs/auditor/10.8/addon/okta/_category_.json b/docs/auditor/10.8/addon/okta/_category_.json new file mode 100644 index 0000000000..2afb7db6d8 --- /dev/null +++ b/docs/auditor/10.8/addon/okta/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Okta", + "position": 160, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/okta/collecteddata.md b/docs/auditor/10.8/addon/okta/collecteddata.md new file mode 100644 index 0000000000..f85bec481f --- /dev/null +++ b/docs/auditor/10.8/addon/okta/collecteddata.md @@ -0,0 +1,32 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 20 +--- + +# Work with Collected Data + +To leverage data collected with the add-on, you can do the following in Auditor: + +- Search for required data. For that, start Auditor client and navigate to **Search**. After + specifying the criteria you need, click **Search**. You will get a list of activity records with + detailed information on who did what in the reported time period. + +You can apply a filter to narrow down your search results to the Netwrix **API** data source only. + +![AR from CyberArk in NA](/images/auditor/10.7/addon/cyberark/cyberark_thumb_0_0.webp) + +- Also, you can click **Tools** in the upper-right corner and select the command you need. For + example: + - If you want to periodically receive the report on the results of search with the specified + criteria, click **Subscribe**. Then specify how you want the report to be delivered – as an + email or as a file stored to the file share. + - To create an alert on the specific occurrences, click **Create alert**. + - To export filtered data to PDF or CSV, click **Export data**. +- You can also configure and receive alerts on the events you are interested in. + +See the following topics for additional information: + +- [Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) +- [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) +- [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) diff --git a/docs/auditor/10.8/addon/okta/deployment.md b/docs/auditor/10.8/addon/okta/deployment.md new file mode 100644 index 0000000000..d42d6f09b9 --- /dev/null +++ b/docs/auditor/10.8/addon/okta/deployment.md @@ -0,0 +1,23 @@ +--- +title: "Deploy the Add-On" +description: "Deploy the Add-On" +sidebar_position: 10 +--- + +# Deploy the Add-On + +Follow the steps to deploy the Add-On. + +**Step 1 –** Download the distribution package **Netwrix_Auditor_Add-on_for_Okta.zip**. + +**Step 2 –** Unpack it to a folder on the computer where you plan to deploy the add-on. + +_Remember,_ deploying the add-on on the same machine with the Auditor Server. + +**Step 3 –** Run the **NetwrixOktaAddon.exe** and follow the installation steps: + +| Option | Description | +| --------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Okta Connection Settings | Specify server address in the '_https://example.okta.com/_' format and SSWS token. | +| Netwrix Connection Settings | Specify settings to connect to Auditor: - Server address – provide the address of the Auditor Server host. - Username – Provide the name of the account used to connect to Auditor. - Password – Provide password for this account. | +| Summary | Review the Add-On settings. | diff --git a/docs/auditor/10.8/addon/okta/overview.md b/docs/auditor/10.8/addon/okta/overview.md new file mode 100644 index 0000000000..c6262f9730 --- /dev/null +++ b/docs/auditor/10.8/addon/okta/overview.md @@ -0,0 +1,56 @@ +--- +title: "Okta" +description: "Okta" +sidebar_position: 160 +--- + +# Okta + +The add-on works in collaboration with Netwrix Auditor, supplying data about activity on your +Okta-based devices. Aggregating data into a single audit trail simplifies analysis, makes activity +monitoring more cost effective, and helps you keep tabs on your IT infrastructure. + +Implemented as a service, this add-on facilitates the data transition from Okta-based systems to +Netwrix Auditor. All you have to do is provide connect ion details and specify parsing rules. + +On a high level, the add-on works as follows: + +1. The add-on listens to the specified UDP ports and captures designated Syslog messages. +2. The add-on processes these events into Netwrix Auditor-compatible format (Activity Records). Each + Activity Record contains the user account, action, time, and other details. +3. Using the Integration API, the add-on sends the activity records to the Netwrix Auditor Server, + which writes them to the Long-Term Archive and the Audit Database. + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +of the Activity Record and the capabilities of the NIntegration API. + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| On... | Ensure that... | +| ----------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The Auditor Server side | - .NET Framework [4.5](https://www.microsoft.com/en-us/download/details.aspx?id=30653) or later is installed. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP **9699** port (default Integration API port) is open for inbound connections. - The user writing data to the Audit Database is granted the **Contributor** role in Auditor. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the **Global administrator** role or add the user to the **Netwrix Auditor Administrators** group. In this case, this user will have the most extended permissions in the product. | + +### Accounts and Rights + +By default, the add-on will run under the _Local System_ account. So, if the add-on and Auditor will +be running on different machines, the corresponding computer account will require at least the +**Contributor** role in Auditor. See the +[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional +information. + +In case the add-on and Auditor are installed on the same server, no special settings are needed. + +### Considerations and Limitations + +- The Add-On must be deployed in the same subnet as Okta and Auditor. +- If the monitoring plan name in the _``_ add-on configuration parameter is + specified incorrectly, this may lead to temp files generation and, therefore, to inefficient disk + space usage. + +## Compatibility Notice + +Make sure to check your product version, and then review and update your add-ons and scripts +leveraging Netwrix Auditor Integration API. Download the latest add-on version in the Add-on Store. diff --git a/docs/auditor/10.8/addon/overview.md b/docs/auditor/10.8/addon/overview.md new file mode 100644 index 0000000000..3837739a83 --- /dev/null +++ b/docs/auditor/10.8/addon/overview.md @@ -0,0 +1,81 @@ +--- +title: "Add-Ons" +description: "Add-Ons" +sidebar_position: 80 +--- + +# Add-Ons + +The [Netwrix Auditor Add-on Store](https://www.netwrix.com/netwrix_addons.html) contains free +add-ons developed by Netwrix and your peers in the community. The add-ons help you leverage +integration between your on-premises or cloud applications and Netwrix Auditor. + +The list of available add-ons keeps growing because with the new RESTful API, the integration +capabilities of Netwrix Auditor are unlimited. Netwrix encourages users to develop add-ons, upload +them to Netwrix website, and share with community. + +Benefits: + +- Centralize auditing and reporting of your IT environment — Netwrix unifies auditing of all IT + systems across your on-premises, cloud or hybrid environment, and enables centralized reporting + for security and compliance. +- Get the most from your SIEM investment — To maximize SIEM value, Netwrix increases the + signal-to-noise ratio and feeds your HP ArcSight, Splunk, IBM QRadar or any other SIEM solution + with much more granular audit data. +- Automate your IT workflows — Automate and improve your change management, service desk and other + critical IT workflows by feeding them audit data from Netwrix. + +Review the following for additional information: + +- Available Add-Ons +- Use Add-Ons + +## Available Add-Ons + +The following add-ons were verified and posted in Add-ons Store. You can get add-ons within the +product. To do so, navigate to **Settings > Integrations** and click **Go to add-on store** button. +The following menu will appear: + +![addonstore](/images/auditor/10.7/addon/addonstore.webp) + +Netwrix Auditor Integration API uses HTTPS with an automatically generated certificate for running +requests to its endpoints. By default, add-ons are configured to accept all certificates that is +appropriate for evaluation purposes and allows running the script without adjusting. + +Refer to [Security](/docs/auditor/10.7/api/security.md) for detailed instructions on how to assign a new certificate +and enable trust on remote computers. + +## Use Add-Ons + +Before your start working with the add-on, go through its quick-start guide at +[Netwrix Documentation page](https://www.netwrix.com/documentation.html#netwrix-documentation-page). +Each guide contains detailed instructions for deploying and running the add-on, as well as +prerequisites and configuration settings. Generic steps are described below. + +Follow the steps to use the add-on. + +**Step 1 –** Check prerequisites. Since the add-ons work only in combination with Netwrix Auditor, +make sure that Netwrix Auidtor and its Audit Database are configured, and roles are assigned +properly. + +**Step 2 –** Specify parameters required for add-on operation. Before running or scheduling the +add-on, you should define configuration details like Netwrix Auditor Server host, user credentials, +etc. + +**Step 3 –** Choose appropriate deployment scenario, then install and start the add-on. For example, +if the add-on is implemented as a service, you will need to run the installation file that will +deploy and start that service automatically. + +**Step 4 –** If you are using a PowerShell-based add-on, run it from a command line: start Windows +PowerShell and provide parameters. First, provide a path to your add-on followed by script +parameters with their values. Each parameter is preceded with a dash; a space separates a parameter +name from its value. You can skip some parameters—the script uses a default value unless a parameter +is explicitly defined. If necessary, modify the parameters as required. + +**Step 5 –** Review the add-on operation results. For example, if you are using the add-on that +imports data to Netwrix Auditor, you can search Activity Records in the Netwrix Auditor client. + +![api_thumb_0_0](/images/auditor/10.7/addon/api_thumb_0_0.webp) + +**Step 6 –** (optional) For PowerShell based add-ons, you can schedule a daily task to ensure your +audit data is always up-to-date. diff --git a/docs/auditor/10.8/addon/privilegeduserlinux/_category_.json b/docs/auditor/10.8/addon/privilegeduserlinux/_category_.json new file mode 100644 index 0000000000..7b2baca527 --- /dev/null +++ b/docs/auditor/10.8/addon/privilegeduserlinux/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Privileged User Monitoring on Linux and Unix Systems", + "position": 170, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/privilegeduserlinux/collecteddata.md b/docs/auditor/10.8/addon/privilegeduserlinux/collecteddata.md new file mode 100644 index 0000000000..6e78bcc77c --- /dev/null +++ b/docs/auditor/10.8/addon/privilegeduserlinux/collecteddata.md @@ -0,0 +1,16 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 30 +--- + +# Work with Collected Data + +Follow the steps to work with collected data: + +**Step 1 –** Start the Auditor client and navigate to **Search**. + +**Step 2 –** Click **Search**. + +**NOTE:** You might want to apply a filter to narrow down your search results to the NetwrixAPI data +source only. diff --git a/docs/auditor/10.8/addon/privilegeduserlinux/install.md b/docs/auditor/10.8/addon/privilegeduserlinux/install.md new file mode 100644 index 0000000000..217adeb16b --- /dev/null +++ b/docs/auditor/10.8/addon/privilegeduserlinux/install.md @@ -0,0 +1,24 @@ +--- +title: "Install the Add-On" +description: "Install the Add-On" +sidebar_position: 10 +--- + +# Install the Add-On + +To install the Add-On, perform the following steps: + +**Step 1 –** Navigate to your add-on package. + +**Step 2 –** Unzip the Add-On to a desired folder. + +**Step 3 –** Run the installation package. + +**Step 4 –** Accept the license agreement and follow the instructions of the setup wizard. + +**Step 5 –** On the **Destination Folder** step, specify the installation folder (_C:\Program Files +(x86)\Netwrix Add-ons\_ by default). + +**Step 6 –** Click **Install**. + +**Step 7 –** When done, click **Finish**. diff --git a/docs/auditor/10.8/addon/privilegeduserlinux/overview.md b/docs/auditor/10.8/addon/privilegeduserlinux/overview.md new file mode 100644 index 0000000000..4aa57a8770 --- /dev/null +++ b/docs/auditor/10.8/addon/privilegeduserlinux/overview.md @@ -0,0 +1,41 @@ +--- +title: "Privileged User Monitoring on Linux and Unix Systems" +description: "Privileged User Monitoring on Linux and Unix Systems" +sidebar_position: 170 +--- + +# Privileged User Monitoring on Linux and Unix Systems + +The add-on works in collaboration with Auditor, supplying data about privileged user activity on +Linux and Unix. Aggregating data into a single audit trail simplifies analysis, makes activity +monitoring more cost effective, and helps you keep tabs on privilege elevation on your Linux and +Unix-based devices. For example, it helps monitor the usage of SUDO as well as remote access with +openSSH. + +On a high level, the add-on works as follows: + +1. The add-on listens to the specified UDP ports and captures designated Syslog messages. + + Out of the box, messages from Red Hat Enterprise Linux 7 and 6, SUSE Linux Enterprise Server 12, + openSUSE 42, and Ubuntu 16 are supported. For other distributions, deployment of the rsyslog + package may be required. You can edit the add-on configuration to extend the captured message + list. + +2. The add-on processes these events into Auditor-compatible format (Activity Records). Each + Activity Record contains the user account, action, time, and other details. +3. Using the Integration API, the add-on sends the activity records Auditor Server, which writes + them to the Long-Term Archive and the Audit Database. + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| On... | Ensure that... | +| ------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The Auditor Server side | - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP **9699** port (default Integration API port) is open for inbound connections. - The user writing data to the Audit Database is granted the **Contributor** role in Auditor. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the **Global administrator** role or add the user to the **Netwrix Auditor Administrators** group. In this case, this user will have the most extended permissions in the product. | +| The computer where the service will be installed | - The UDP 514 port is open for inbound connections. - .Net Framework 4.7.2 and above is installed. Review the following Microsoft technical article for additional information on how to install .Net Framework 4.7.2: [Microsoft .NET Framework 4.7.2 offline installer for Windows](https://support.microsoft.com/en-us/topic/microsoft-net-framework-4-7-2-offline-installer-for-windows-05a72734-2127-a15d-50cf-daf56d5faec2). | +| The target syslog-based platform | The **Syslog daemon** is configured to redirect events. The procedure below explains how to configure redirection: **NOTE:** Red Hat Enterprise Linux 7 and 6, SUSE Linux Enterprise Server 12, openSUSE 42, and Ubuntu 16 are supported out of the box. For other distributions, deployment of rsyslog package may be required. - On Red Hat Enterprise Linux 7: 1. Open the **/etc/rsyslog.conf** file. 2. Add the following line: `auth.*;authpriv.* @name:514;RSYSLOG_SyslogProtocol23Format` where `name `is a FQDN, NetBIOS name or IP address of the computer where Netwrix Auditor Server is installed. For example: `auth.*;authpriv.* @172.28.18.25:514;RSYSLOG_ SyslogProtocol23Format` 3. Launch the **RHEL console** and execute the following command: `service rsyslog restart`. - On Ubuntu 16: 1. Navigate to the **/etc/rsyslog.d/50-default.conf** file. 2. Add the following line: `auth.*;authpriv.* @name:514;RSYSLOG_SyslogProtocol23Format` where `name `is a FQDN, NetBIOS name or IP address of the computer where Netwrix Auditor Server is installed. For example: `auth.*;authpriv.* @172.28.18.25:514;RSYSLOG_ SyslogProtocol23Format` 3. Launch the **UBUNTU console** and execute the following command: `service rsyslog restart`. | + +See the the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the +structure of the Activity Record and the capabilities of the Integration API diff --git a/docs/auditor/10.8/addon/privilegeduserlinux/parameters.md b/docs/auditor/10.8/addon/privilegeduserlinux/parameters.md new file mode 100644 index 0000000000..b1ac95042d --- /dev/null +++ b/docs/auditor/10.8/addon/privilegeduserlinux/parameters.md @@ -0,0 +1,30 @@ +--- +title: "Define Parameters" +description: "Define Parameters" +sidebar_position: 20 +--- + +# Define Parameters + +The configuration wizard opens in the default web browser: + +![PrivilegedUsersConfigWizard](/images/auditor/10.7/addon/privilegeduserlinux/configwizard.webp) + +Click **Proceed** and complete the following fields: + +| Option | Description | +| ------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Specify General Settings | | +| Listed UDP port | Specify UDP port for listening incoming events. (**514** by default). | +| Auditor Endpoint | Auditor Server IP address and port number followed by endpoint for posting Activity Records. Assumes that the add-on runs on the computer hostingAuditor Server and uses default port _9699_. If you want to run the add-on on another machine, provide a name of the computer where Auditor Server resides (e.g., _172.28.6.15_, _EnterpriseNAServer_, _WKS.enterprise.local_). To specify a non-default port, provide a server name followed by the port number (e.g., _WKS.ent erprise.local:9999_). Do not modify the endpoint part (_/ netwrix/ api_ ) | +| Certificate Thumbprint | Netwrix Auditor Certificate Thumbprint Property. Possible values: - `Empty`—Check Auditor certificate via Windows Certificate Store. - `AB:BB:CC`—Check Auditor Server certificate thumbprint identifier. - `NOCHECK`—Do not check Auditor certificate. Make sure to select this parameter if you plan to specify servers by their IP. | +| Specify Active Directory credentials | | +| Username | Provide the name of the account under which the service runs. Unless specified, the service runs under the account currently logged on. | +| Password | Provide the password for the selected account. | +| Auditor Monitoring Plan settings | | +| Auditor Plan | Unless specified, data is written to **Netwrix_Auditor_API** database and is not associated with a specific monitoring plan. Specify a name of associated monitoring plan in Auditor. In this case, data will be written to a database linked to this plan. If you select a plan name in the add- on, make sure a dedicated plan is created in Auditor, the Netwrix **API** data source is added to the plan and enabled for monitoring. Otherwise, the add- on will not be able to write data to the Audit Database. | +| Auditor Plan Item | Unless specified, data is not associated with a specific plan and, thus, cannot be filtered by item name. Specify an item name. Make sure to create a dedicated item inAuditor in advance. | +| Accept List | | +| Address | Specify a list of IP addresses of syslog events sources. The service will collect and process events from these sources only. Events collected from any other source will be ignored. | + +Click **Run** to start collecting data with the Add-On. diff --git a/docs/auditor/10.8/addon/qumulo/_category_.json b/docs/auditor/10.8/addon/qumulo/_category_.json new file mode 100644 index 0000000000..1fd58ebbda --- /dev/null +++ b/docs/auditor/10.8/addon/qumulo/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Qumulo", + "position": 180, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/qumulo/collecteddata.md b/docs/auditor/10.8/addon/qumulo/collecteddata.md new file mode 100644 index 0000000000..009f4bda0f --- /dev/null +++ b/docs/auditor/10.8/addon/qumulo/collecteddata.md @@ -0,0 +1,27 @@ +--- +title: "Working with Collected Data" +description: "Working with Collected Data" +sidebar_position: 20 +--- + +# Working with Collected Data + +To leverage data collected with the add-on, you can do the following in Netwrix Auditor: + +- Search for required data. For that, start Netwrix Auditor client and navigate to **Search**. After + specifying the criteria you need, click **Search**. You will get a list of activity records with + detailed information on who did what in the reported time period. + +You might want to apply a filter to narrow down your search results to the Netwrix API data source +only. + +![Qumulo screen](/images/auditor/10.7/addon/qumulo/qumulo_thumb_0_0.webp) + +- Also, you can click **Tools** in the upper-right corner and select the command you need. For + example: + - If you want to periodically receive the report on the results of search with the specified + criteria, click **Subscribe**. Then specify how you want the report to be delivered – as an + email or as a file stored to the file share. + - To create an alert on the specific occurrences, click **Create alert**. + - To export filtered data to PDF or CSV, click **Export data**. +- You can also configure and receive alerts on the events you are interested in. diff --git a/docs/auditor/10.8/addon/qumulo/deployment.md b/docs/auditor/10.8/addon/qumulo/deployment.md new file mode 100644 index 0000000000..f158699558 --- /dev/null +++ b/docs/auditor/10.8/addon/qumulo/deployment.md @@ -0,0 +1,24 @@ +--- +title: "Deployment Scenarios" +description: "Deployment Scenarios" +sidebar_position: 10 +--- + +# Deployment Scenarios + +The Add-On can run on any computer in your environment. For example, you can run the add-on on the +computer where Auditor is installed, or on a remote server. Depending on the deployment scenario you +choose, you will need to define a different set of parameters + +Netwrix suggests the following scenarios: + +| Scenario | Example: Parameters updated in default settings.xml | +| -------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The add-on runs on the Netwrix Auditor Server with the current user credentials. | `
172.28.4.15
` `
172.28.3.18
` | +| The add-on runs on the Netwrix Auditor Server with the explicitly specified user credentials. | `SecurityOfficer` `` `NetwrixUser` `` `
172.28.4.15
` | +| The add-on runs on a remote computer. Data is written to a remote Netwrix Auditor repository with the current user credentials. | ` https://172.28.6.19:9699/netwrix/api/v1/activity_records` `
172.28.4.15
` | +| The add-on runs on a remote computer. Data is written to a remote Netwrix Auditor repository with the explicitly specified user credentials. | ` https://172.28.6.19:9699/netwrix/api/v1/activity_records` `NetwrixUser` `` `NetwrixIsCool` `` `
172.28.4.15
` | + +For security reasons, Netwrix recommends running the script with current user credentials (skipping +user credentials). Create a special user account with permissions to both Auditor data and event log +and use it for running the script. diff --git a/docs/auditor/10.8/addon/qumulo/monitoringscope.md b/docs/auditor/10.8/addon/qumulo/monitoringscope.md new file mode 100644 index 0000000000..0be7ed09af --- /dev/null +++ b/docs/auditor/10.8/addon/qumulo/monitoringscope.md @@ -0,0 +1,34 @@ +--- +title: "Monitoring Scope" +description: "Monitoring Scope" +sidebar_position: 40 +--- + +# Monitoring Scope + +Review a full list of all events Netwrix Auditor can collect on Qumulo Cluster. + +| Event | Description | +| -------------------------------------- | -------------------------------------------------------------------- | +| fs_create_directory | A new directory was created. | +| fs_create_file | A new file was created. | +| fs_create_hard_link | A new hard link was created. | +| fs_create | A filetype other than one of the types captured above was created. | +| fs_delete | An entity (file, link, directory) was deleted from the file storage. | +| fs_rename | An entity (file, link, directory) from the file storage was renamed. | +| fs_read_data | Read operation was performed. | +| fs_write_data | Write operation was performed. | +| fs_write_metadata | Write operation was performed (metadata was written). | +| nfs_create_export | Created NFS Export that the client will mount to. | +| nfs_delete_export | Removed NFS Export that the client will mount to. | +| nfs_modify_export | Modified NFS Export that the client will mount to. | +| nfs_mount | Mount to NFS share. | +| replication_create_source_relationship | A replication object was created. | +| replication_delete_source_relationship | A replication object was deleted. | +| replication_modify_source_relationship | A replication object was modified. | +| smb_create_share | A new SMB file share was created. | +| smb_delete_share | An SMB file share was deleted. | +| smb_modify_share | An SMB file share was modified. | +| snapshot_create_snapshot | A snapshot was created. | +| snapshot_delete_snapshot | A snapshot was deleted. | +| snapshot_modify_snapshot | A snapshot was modified. | diff --git a/docs/auditor/10.8/addon/qumulo/overview.md b/docs/auditor/10.8/addon/qumulo/overview.md new file mode 100644 index 0000000000..100de844d8 --- /dev/null +++ b/docs/auditor/10.8/addon/qumulo/overview.md @@ -0,0 +1,122 @@ +--- +title: "Qumulo" +description: "Qumulo" +sidebar_position: 180 +--- + +# Qumulo + +**Netwrix Auditor** is a visibility platform for user behavior analysis and risk mitigation that +enables control over changes, configurations and access in hybrid IT environments to protect data +regardless of its location. The platform provides security analytics to detect anomalies in user +behavior and investigate threat patterns before a data breach occurs. + +Qumulo Hybrid Cloud File Storage delivers real-time visibility, scale, and control of data across +on-prem and cloud. Qumulo customers understand storage at a granular level; programmatically +configure and manage usage, capacity, and performance; and are continuously delighted with new +capabilities, 100% usable capacity and direct access to experts. More information at +[www.qumulo.com](http://www.qumulo.com/). + +To control who does what in the IT infrastructure that includes Qumulo Hybrid Cloud File Storage, +organizations need to monitor file-related activity. A typical case is when a user has renamed a +directory at the top level, and other users are unable to locate their files anymore. Thus, IT +specialists require a way to monitor, search and get notifications on certain file activity so that +they can take corrective measures. + +For that purpose, you can use a specially designed Netwrix Auditor add-on for Qumulo. It works in +collaboration with Netwrix Auditor, supplying data about file operations on your Qumulo Cluster to +Netwrix database. Aggregating data into a single audit trail simplifies analysis, makes activity +monitoring more cost-effective, and helps you keep tabs on your IT infrastructure. + +Major benefits: + +- Gain a high-level view of the data you store +- Detect unauthorized activity that might threaten your data + +## How it Works + +The add-on is implemented as a Syslog service that collects activity data from Qumulo Cluster and +sends it to Auditor using the Integration API. + +![diagram_thumb_0_0](/images/auditor/10.7/addon/qumulo/diagram_thumb_0_0.webp) + +On a high level, the solution works as follows: + +1. An IT administrator configures the Integration API settings to enable data collection and storage + to the Netwrix database for further reporting, search, etc. + + It is recommended to create a dedicated monitoring plan in Netwrix Auditor and add a dedicated + item of **Integration** type to it — then you will be able to filter data in reports and search + results by monitoring plan/item name. + +2. On the Qumulo side, the IT administrator prepares Syslog configuration settings. +3. Then the administrator opens the settings.xml configuration file and specifies the necessary + parameters for add-on operation, including Qumulo Cluster as the source of Syslog messages, + Auditor settings, etc. The add-on will operate as a Syslog listener for the Qumulo Cluster. +4. The add-on starts collecting and forwarding activity data: it listens to the specified TCP port + and captures the designated Syslog messages. Data communication is performed using the TCP + version of Syslog protocol. +5. The add-on processes these Syslog messages into Auditor-compatible format (Activity Records). + Each Activity Record contains the "Who-What-When-Where-Action" information (that is, initiator's + account, time, action, and other details). +6. Using the Integration API, the add-on sends the activity records to Auditor Server that writes + them to the **Netwrix_Auditor_API** database (SQL server database) and file-based Long-Term + Archive. Data is sent periodically, by default every 5 seconds. For more information on the + Activity Record structure and capabilities of the Integration API, refer to the + [Integration API](/docs/auditor/10.7/api/overview.md) topic. +7. Users open Auditor Client to work with collected data: + - Search for file changes using certain criteria + - Export data to PDF or CSV files + - Save search results as reports + - Subscribe to search results + - Configure and receive alerts + +### Add-on Delivery Package + +The add=on delivery package is a ZIP archive that includes the following files: + +| File name | Description | +| ------------------------ | ---------------------------------------------------------------------------- | +| install.cmd | Command file that installs and enables Netwrix Syslog service. | +| settings.xml | Contains parameters for the add-on service operation. | +| SyslogService.exe | The Syslog service – main add-on component, implemented as a Syslog service. | +| SyslogService.exe.config | Add-on configuration data. | + +You will also need the **qumulo.xml** file that contains rules for processing Qumulo events. This +file is shipped separately. + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| Where | Prerequisite to check | +| ---------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The Auditor Server side | - Auditor version is 9.96 or higher. - Integration API settings and **Netwrix_Auditor_API** database are configured properly. See [Configure Integration API](https://helpcenter.netwrix.com/API/API_Configuration.html) and [Audit Database](https://helpcenter.netwrix.com/Settings/Audit_Database_settings/Default_Audit_Database_Settings.html). - The **TCP 9699** port must be open on Windows firewall for inbound connections. - User account under which data will be written to **Netwrix_Auditor_API** database requires the _Contributor_ role in Netwrix Auditor. See [Role-Based Access and Delegation](https://helpcenter.netwrix.com/Roles/Role_Based_Access.html). Alternatively, you can grant it the **Global administrator** role, or add that account to the _Netwrix Auditor Administrators_ group. | +| The machine where the add-on will be installed | - The **TCP 9905** port must be open on Windows firewall for inbound connections. - .NET Framework 4.5 or later must be installed. | +| Qumulo Cluster | Qumulo core version 3.0.5. | + +### Accounts and rights + +It is recommended to create a dedicated account for running **install.cmd** and +**SyslogService.exe**. The service will connect to Auditor Server using this account, so at least +the **Contributor** role in Auditor is required for it. See +[Role-Based Access and Delegation](https://helpcenter.netwrix.com/Roles/Role_Based_Access.html) for +more information. + +### Considerations and limitations + +- For events received with NFS3 protocol, the _posix uid_ will be displayed instead of the + initiator's account name in the "_Who_" field of the Auditor search results and activity + summaries. +- If the initiator's account name could not be resolved, then Windows SID or Qumulo auth ID will be + displayed in the the "_Who_" field of the search results and activity summaries. +- Currently, not every detail about permission and attribute changes may be provided by Qumulo + Cluster, so they cannot be reported by Auditor. +- If the monitoring plan name in the add-on configuration parameter is specified incorrectly, this + may lead to temp files generation and, therefore, to inefficient disk space usage. + +## Compatibility Notice + +(Undefined variable: Add-on.Addon_Qumulo) is compatible with Qumulo core 3.0.5 and with Netwrix +Auditor 9.96 and later. diff --git a/docs/auditor/10.8/addon/qumulo/parameters.md b/docs/auditor/10.8/addon/qumulo/parameters.md new file mode 100644 index 0000000000..e6270f05b3 --- /dev/null +++ b/docs/auditor/10.8/addon/qumulo/parameters.md @@ -0,0 +1,63 @@ +--- +title: "Add-On Parameters" +description: "Add-On Parameters" +sidebar_position: 30 +--- + +# Add-On Parameters + +To configure the add-on parameters, you need to edit the **settings.xml** file in the add-on folder. +You must define connection details: Netwrix Auditor Server host, user credentials, etc. + +Most parameters are optional, the service uses the default values unless parameters are explicitly +defined (`\*\*\_value_\*\*`). You can skip or define parameters depending on +your execution scenario and security policies. + +Parameters in **settings.xml** can be grouped as follows: + +- General parameters that affect add- on execution. They are listed in the table below. +- Settings for a certain event source (within the _Source_ section) that can override general + settings. +- Internal parameters that should not be modified in most cases. They are listed in . + +| Parameter | Default value | Description | +| ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General parameters | | | +| ListenTcpPort | 9905 | Specify TCP port for listening incoming syslog events. | +| NetwrixAuditorEndpoint | https://localhost: 9699/netwrix/api/ v1/activity_records | Netwrix Auditor Server IP address and port number followed by endpoint for posting Activity Records. Assumes that the add-on runs on the computer hosting Auditor Server and uses default port **9699**. If you want to run the add-on on another machine, provide a name of the computer where Auditor Server resides (e.g., _172.28.6.15, EnterpriseNAServer, WKS.enterprise.local_). To specify a non-default port, provide a server name followed by the port number (e.g., _WKS.enterprise.local:9999_). Do not modify the endpoint part (/netwrix/api . . . . ) | +| NetwrixAuditor CertificateThumbprint | NOCHECK | Netwrix Auditor Certificate Thumbprint Property. Possible values: - `Empty`—Check Netwrix Auditor certificate via Windows Certificate Store. - `AB:BB:CC.`—Check Netwrix Auditor Server certificate thumbprint identifier. - `NOCHECK`—Do not check Netwrix Auditor certificate. Make sure to select this parameter if you plan to specify servers by their IP. | +| NetwrixAuditorUserName | Current user credentials | Unless specified, the add-on runs with the current user credentials. If you want the add-on to use another account to connect to Auditor Server, specify the account name in the _DOMAIN\username_ format. The account must be assigned the Contributor role in Netwrix Auditor. | +| NetwrixAuditorUserPassword | Current user credentials | Unless specified, the service runs with the current user credentials. Provide a different password if necessary. | +| NetwrixAuditorDateTimeFormat | yyyy-MM-ddTHH:mm:ssZ | Netwrix Auditor time format. By default, set to zero offset. | +| NetwrixAuditorPlan | — | Unless specified, data is written to Netwrix_Auditor_API database and is not associated with a specific monitoring plan. Specify a name of associated monitoring plan in Auditor. In this case, data will be written to a database linked to this plan. If you select a plan name in the add-on, make sure a dedicated plan is created in Auditor, the Netwrix API data source is added to the plan and enabled for monitoring. Otherwise, the add-on will not be able to write data to the Audit Database. | +| NetwrixAuditorPlanItem | — | Unless specified, data is not associated with a specific plan and, thus, cannot be filtered by item name. Specify an item name. Make sure to create a dedicated item in Netwrix Auditor in advance. | +| EventStorePath | — | Select where to store temporary files of syslog messages before the add-on sends them to Netwrix Auditor Server. Netwrix recommends not to store these files out of the service directory. | +| LogLevel | error | Specify logging level: - none - info - warning - error (used by default) - debug | +| WriteCriticalIssues ToEventLog | 0 | Instructs the add-on to write important events (like service start or critical issue) not only to its own log but also to Netwrix event log. - 1=yes - 0=no (default) | +| Parameters within SourceList You can specify parsing rules for each specific event source and define parameters to override general settings, such as time zone, default plan name, etc. | | | +| NetwrixAuditorPlan | — | When specified, overrides the general settings. | +| NetwrixAuditorPlanItem | — | When specified, overrides the general settings. | +| DefaultTsTimezone | — | Define the time zone of syslog events. By default, set to zero offset (UTC). | +| AppNameRegExp | — | Define a custom regular expression pattern to retrieve the application name from your syslog messages. Unless specified, RFC 3164/5424 format is used. If you provide a pattern for application name, this name will be used to determine what rule file will be used to parse syslog messages. The pattern you provide here must match the application name in your custom rule file. | +| AppNameGroupID | — | Define application name value by Group ID only if messages are not formatted in accordance with RFC 3164/5424. Otherwise, leave the default value. | +| RuleFileList PathFile | qumulo.xml | Specify paths to XML file(s) with regular expression parsing rules. You can create a custom file or use rules provided out of the box. Currently, the **qumulo.xml** rules file is provided by Qumulo. You can specify several rule files. The service will check if the AppName parameter in the first rule file matches the **AppNameRegExp** and **AppNameGroupID** regular expression in this file. If not, the service will proceed to the next rule file. | +| AcceptList Address | — | Specify a list of IP addresses of syslog events sources. The service will collect and process events from these sources only. Events collected from any other source will be ignored. The Address parameter may be followed by optional attributes that override parameters specified above: - naplan—A name of associated monitoring plan - naplanitem—A name of associated item - tstimezone—Timezone for Qumulo Cluster For example: `
172.28.3.15
` | + +After you modify parameters in the **settings.xml** file, remember to save the changes and then +restart (Undefined variable: Add-on.Addon_Qumulo) service (**SyslogService.exe**) for them to take +effect. + +## Add-on Internal Parameters + +Internal parameters listed in the table below are intended for performance tuning. In most cases the +default values should be used. + +| Parameter | Default value | Description | +| --------------------- | ------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| EventsFromMemoryFirst | 1 | Instructs the add-on to save events to temporary storage only if there is no free space in queues: - 1=yes - 0=no | +| ConcurrentSend | -1 | Specifies number of threads for concurrent forwarding of events to Auditor. Default value is -1 (switch off concurrent forwarding). | +| ListenTcpAddress | 0.0.0.0 | Defines destination IP address. In case of multiple network cards, you can specify certain IP address here to listen to its messages only. | +| SenderSleepTime | 30 | Specifies retry interval in seconds to send messages to Auditor (30 - 3600 seconds). | +| TaskLimit | 8 | Specifies number of threads and queues for concurrent handling of events. | +| QueueSizeLimit | 1000 | Specifies maximum number of events to keep in queue before saving to temporary storage or sending to Netwrix API. | +| QueueTimeLimit | 5 | Specifies the length of timeout before events from queue (not full) are saved to temporary storage or sent to Netwrix API: - From 5 to 300 — timeout in seconds. - -1 — disable timeout. | diff --git a/docs/auditor/10.8/addon/qumulo/troubleshooting.md b/docs/auditor/10.8/addon/qumulo/troubleshooting.md new file mode 100644 index 0000000000..0789031114 --- /dev/null +++ b/docs/auditor/10.8/addon/qumulo/troubleshooting.md @@ -0,0 +1,26 @@ +--- +title: "Maintenance and Troubleshooting" +description: "Maintenance and Troubleshooting" +sidebar_position: 50 +--- + +# Maintenance and Troubleshooting + +(Undefined variable: Add-on.Addon_Qumulo) operations are logged into the **SyslogService.txt** file. +This file is located in the same folder as **SyslogService.exe.** + +To change the add-on logging level, use the **LogLevel** parameter in the **settings.xml** file. + +- It is recommended that before the first run you set this parameter to `debug`. This will + facilitate operations tracking and possible problem solving. +- After that it is strongly recommended to re-set this parameter to `error` (default value) to + prevent the uncontrolled log growth. + +If you cannot see collected data in Netwrix Auditor, check the following: + +1. Service account has sufficient rights to access Netwrix Auditor. +2. In Netwrix Auditor settings, go to the **Integrations** section and make sure the **Leverage + Integration API** is switched to **ON**. Check the communication port number – default is + **9699**. +3. If you configured a dedicated monitoring plan, make sure data source monitoring is enabled. +4. Verify the parameters you provided in **settings.xml**. diff --git a/docs/auditor/10.8/addon/radius/_category_.json b/docs/auditor/10.8/addon/radius/_category_.json new file mode 100644 index 0000000000..54c8653cc0 --- /dev/null +++ b/docs/auditor/10.8/addon/radius/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "RADIUS Server", + "position": 190, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/radius/automate.md b/docs/auditor/10.8/addon/radius/automate.md new file mode 100644 index 0000000000..463df57654 --- /dev/null +++ b/docs/auditor/10.8/addon/radius/automate.md @@ -0,0 +1,36 @@ +--- +title: "Automate Add-On Execution" +description: "Automate Add-On Execution" +sidebar_position: 40 +--- + +# Automate Add-On Execution + +To ensure you feed the most recent data to your SIEM solution, Netwrix recommends scheduling a daily +task for running the add-on. + +**To create a scheduled task:** + +**Step 1 –** On the computer where you want to execute the add-on, navigate to **Task +Scheduler**.Select **Create Task**. + +**Step 2 –** On the **General** tab, specify a task name. Make sure the account that runs the task +has all necessary rights and permissions. + +**Step 3 –** On the **Triggers** tab, click **New** and define the schedule. This option controls +how often audit data is exported from Auditor and saved to event log. Netwrix recommends scheduling +a daily task. + +**Step 4 –** On the **Actions** tab, click **New** and specify action details. Review the following +for additional information: + +| Option | Value | +| ------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Action | Set to "_Start a program_". | +| Program/script | Input "_Powershell.exe_". | +| Add arguments (optional) | Add a path to the add-on in double quotes and specify add-on parameters. For example: -file "C:\Add-ons\Netwrix*Auditor_Add-on_for_RADIUS* Server.ps1" -NetwrixAuditorHost 172.28.6.15 -RADIUSHost 172.28.6.16 | + +Save the task. + +After creating a task, wait for the next scheduled run or navigate to **Task Scheduler** and run the +task manually. To do this, right-click a task and click **Run**. diff --git a/docs/auditor/10.8/addon/radius/collecteddata.md b/docs/auditor/10.8/addon/radius/collecteddata.md new file mode 100644 index 0000000000..be0186d42d --- /dev/null +++ b/docs/auditor/10.8/addon/radius/collecteddata.md @@ -0,0 +1,21 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 50 +--- + +# Work with Collected Data + +Auditor provides a convenient interface for reviewing RADIUS server logons. Once the script +execution completed, you can start analyzing user activity data with Netwrix search. + +Follow the steps to see results. + +**Step 1 –** Start the Auditor client and navigate to Search. + +**Step 2 –** Click **Search**. + +![radius](/images/auditor/10.7/addon/radius/radius.webp) + +**NOTE:** You might want to apply a filter to narrow down your search results to the RADIUS Logon +object type only. diff --git a/docs/auditor/10.8/addon/radius/customreport.md b/docs/auditor/10.8/addon/radius/customreport.md new file mode 100644 index 0000000000..ab922ade8b --- /dev/null +++ b/docs/auditor/10.8/addon/radius/customreport.md @@ -0,0 +1,32 @@ +--- +title: "Create Custom Report" +description: "Create Custom Report" +sidebar_position: 60 +--- + +# Create Custom Report + +To speed up data review process and help you find the latest logons faster, Netwrix created an +additional script, **Netwrix_Auditor_Saved_Search_for_RADIUS_Server_Logons.ps1**. It is shipped with +the add-on and creates the RADIUS server logons since yesterday custom search-based report in the +Auditor client. + +Follow the steps to create a custom report with the script. + +**Step 1 –** Copy the **Netwrix_Auditor_Saved_Search_for_RADIUS_Server_Logons.ps1** script to the +Auditor Server. + +**Step 2 –** Start **Windows PowerShell** and specify a path to the script. + +**Step 3 –** Run the script. + +**NOTE:** The user running the script must be a member of the **Netwrix Auditor Administrators** +group. + +After running the script, the RADIUS server logons since yesterday custom report appears in +**Reports** > **Custom**. You can access the search instantly to receive it on a regular basis. + +![radiusfilters](/images/auditor/10.7/addon/radius/radiusfilters.webp) + +Clicking the saved search tile opens the search with preset filters, which shows RADIUS logon +activity data for 2 days (yesterday and today). diff --git a/docs/auditor/10.8/addon/radius/deployment.md b/docs/auditor/10.8/addon/radius/deployment.md new file mode 100644 index 0000000000..2131a27ff3 --- /dev/null +++ b/docs/auditor/10.8/addon/radius/deployment.md @@ -0,0 +1,27 @@ +--- +title: "Choose Appropriate Execution Scenario" +description: "Choose Appropriate Execution Scenario" +sidebar_position: 20 +--- + +# Choose Appropriate Execution Scenario + +Auditor Add-on for RADIUS Server runs on any computer in your environment. For example, you can run +the add-on on the computer where Auditor is installed or on your RADIUS server. + +Depending on the execution scenario you choose, you have to define a different set of script +parameters. See the [Define Parameters](/docs/auditor/10.7/addon/radius/parameters.md) topic for additional information. + +Netwrixsuggests the following execution scenarios: + +| Scenario | Example | +| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The add-on runs on theAuditor Server with the current user credentials. Data is collected from a remote RADIUS server and written to a local repository. | C:\Add-ons\Netwrix_Auditor_Add-on_for_RADIUS_Server.ps1 -RADIUSHost 172.28.6.16 | +| The add-on runs on the Auditor Server with explicitly defined credentials. Collected data is written to a remote Auditor Server. | C:\Add-ons\Netwrix*Auditor_Add-on_for* RADIUS_Server.ps1 -NetwrixAuditorHost 172.28.6.15 | +| The add-on runs on the Auditor Server with the current user credentials. Data is collected from a remote RADIUS server with explicitly defined credentials. | C:\Add-ons\Netwrix*Auditor_Add-on_for* RADIUS_Server.ps1 -RADIUSHost 172.28.6.16 -RADIUSUserName enterprise\NSPuser -RADIUSPassword SuperStrictPassword | +| The add-on runs on a remote computer with the current user credentials. Data is collected from a remote RADIUS server and written to a remote Auditor repository. | C:\Add-ons\Netwrix*Auditor_Add-on_for* RADIUS_Server.ps1 -NetwrixAuditorHost 172.28.6.15 -RADIUSHost 172.28.6.16 | +| The add-on runs on a remote computer. Data is collected from a remote RADIUS server with RADIUS server credentials and is written to a remote Auditor repository with Auditor credentials. | C:\Add-ons\Netwrix*Auditor_Add-on_for* RADIUS_Server.ps1 -NetwrixAuditorHost 172.28.6.15 -NetwrixAuditorUserName enterprise\NAuser -NetwrixAuditorPassword NetwrixIsCool -RADIUSHost 172.28.6.16 -RADIUSUserName enterprise\NSPuser -RADIUSPassword SuperStrictPassword | + +For security reasons, Netwrix recommends running the script with current user credentials (skipping +user credentials). Create a special user account with permissions to both Auditor data and event log +and use it for running the script. diff --git a/docs/auditor/10.8/addon/radius/overview.md b/docs/auditor/10.8/addon/radius/overview.md new file mode 100644 index 0000000000..13c6dce56a --- /dev/null +++ b/docs/auditor/10.8/addon/radius/overview.md @@ -0,0 +1,82 @@ +--- +title: "RADIUS Server" +description: "RADIUS Server" +sidebar_position: 190 +--- + +# RADIUS Server + +Netwrix Auditor Add-on for RADIUS Server tracks user and device logon activity on a Windows Server +where the Remote Authentication Dial-In User Service (RADIUS) is running. + +## RADIUS Protocol + +RADIUS is a client-server network protocol that enables secure authentication, authorization, and +account management through special network access servers called gateways. The protocol works as +follows: When a user tries to access network resources through a gateway that has the RADIUS client +component enabled, the gateway sends a request to the RADIUS server. The RADIUS server identifies +the user or device and either accepts or rejects the connection request, and then logs the attempt +for future reference. + +Because it enhances security and scalability, the RADIUS protocol is widely used in enterprise +network environments to provide authentication and authorization for a variety of network access +servers, such as VPN or dial-in servers and wireless access points. It helps organize and centralize +sign-in procedures and improve overall security. In a Windows Server environment, the RADIUS server +is provided by the Network Policy Server (NPS). + +In addition to providing user authentication and authorization, a RADIUS server can grant or deny +access to a connecting device based on network policies. Companies leverage these policies to +empower users to connect to the corporate infrastructure using their personal devices, while +disallowing potentially vulnerable and unsafe devices to minimize risk. + +## Netwrix Auditor Add-on + +Regular review of logon activity is essential for gaining complete visibility into your account +management + +procedures and ensuring that all activity is traceable and compliant with your policies. For +example, logons from unusual locations or devices can be a sign of user account compromise or +identity theft, and an unexpectedly high number of logon failures can indicate an intrusion attempt. +Careful review of successful and failed logons from both Active Directory and RADIUS servers helps +security operations teams detect these signs and react promptly to security threats. + +Netwrix Auditor Add-on for RADIUS Server works in collaboration with Netwrix Auditor for Active +Directory, collecting additional data that augments the data collected by Netwrix Auditor. +Aggregating data into a single audit trail simplifies logon activity analysis and helps you keep +tabs on your IT infrastructure. + +Implemented as a PowerShell script, this add-on automates the acquisition of RADIUS logon events and +their transition to Netwrix Auditor. All you have to do is provide connection details and schedule +the script for execution. Netwrix recommends running this add-on in addition to the Active Directory +auditing provided by Netwrix Auditor. + +On a high level, the add-on works as follows: + +1. The add-on connects to the Security event log on the RADIUS server and collects logon-related + events. +2. The add-on processes these events into Netwrix Auditor-compatible format (Activity Records). Each + Activity Record contains the user account, logon status, time, and other details. Where + applicable, the cause for logon failure and the name of network policy are included in the + Activity Record. +3. Using the Netwrix Auditor Integration API, the add-on sends the successful and failed logon + events to the Netwrix Auditor server, which writes them to the Long-Term Archive and the Audit + Database. + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +of the Activity Record and the capabilities of the Netwrix Auditor Integration API. + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| On... | Ensure that... | +| ---------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The Auditor Server side | - Auditor version is **9.8** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| The RADIUS server | - The **Remote Event Log Management (RPC)** inbound firewall rule is enabled. - The account collecting RADIUS logon events is member of the **Domain Users** group and have the **Manage auditing and security log** right. | +| The computer where the script will be executed | - PowerShell **3.0** or later must be installed. - .NET **4.5** or later must be installed. - Execution policy for powershell scripts is set to _"Unrestricted"_. Run Windows PowerShell as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the write permission on the script folder—the add-on creates a special .bin file with the last exported event. - The user running the script must be a member of the Domain Users group. - At least the first script run should be performed under the account with elevated privileges, as it will be necessary to create event log file and perform other required operations. | + +## Compatibility Notice + +Make sure to check your product version, and then review and update your add-ons and scripts +leveraging Netwrix Auditor Integration API. Download the latest add-on version in the Add-on Store. diff --git a/docs/auditor/10.8/addon/radius/parameters.md b/docs/auditor/10.8/addon/radius/parameters.md new file mode 100644 index 0000000000..9be5c91dc4 --- /dev/null +++ b/docs/auditor/10.8/addon/radius/parameters.md @@ -0,0 +1,25 @@ +--- +title: "Define Parameters" +description: "Define Parameters" +sidebar_position: 10 +--- + +# Define Parameters + +Before running or scheduling the add-on, you must define connection details: Auditor Server host, +user credentials, etc. Most parameters are optional, the script uses the default values unless +parameters are explicitly defined. You can skip or define parameters depending on your execution +scenario and security policies. See the +[Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/logrhythm/deployment.md) topic for additional +information. + +| Parameter | Default value | Description | +| ------------------------- | ------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **Connection to Auditor** | | | +| NetwrixAuditorHost | localhost:9699 | Assumes that the add-on runs on the computer hosting Auditor Server and uses default port 9699. If you want to run the add-on on another machine, provide a name of the computer where Auditor Server resides (e.g., 172.28.6.15, EnterpriseNAServer, WKS.enterprise.local). To specify a non-default port, provide a server name followed by the port number (e.g., WKS.enterprise.local:9999). | +| NetwrixAuditorUserName | Current user credentials | Unless specified, the add-on runs with the current user credentials. If you want the add-on to use another account to connect to Auditor Server, specify the account name in the DOMAIN\username format. The account must be assigned the Global reviewer role in Auditor or be a member of the Netwrix Auditor Client Users group on the computer hosting Auditor Server. | +| NetwrixAuditorPassword | Current user credentials | Unless specified, the script runs with the current user credentials. Provide a different password if necessary. | +| NetwrixAuditorPlan | – | Unless specified, data is written to **Netwrix\_ Auditor_API** database and is not associated with a specific monitoring plan. Specify a name of associated monitoring plan in Auditor. In this case, data will be written to a database linked to this plan. **NOTE:** If you select a plan name in the add-on, make sure a dedicated plan is created in Auditor, the Netwrix API data source is added to the plan and enabled for monitoring. Otherwise, the add-on will not be able to write data to the Audit Database. | +| RADIUSHost | localhost | Assumes that the script runs on the RADIUS server. If you want to run a script on another machine, provide a name of the computer where RADIUS server resides (e.g., 172.28.6.16, EnterpriseNPS, NPS.enterprise.local). | +| RADIUSUserName | Current user credentials | Unless specified, the script runs with the current user credentials. If you want the script to use another account to access the RADIUS server, specify the account name in the DOMAIN\username format. **NOTE:** The account must be a member of the **Domain Users** group and have the **Manage auditing and security log** right. | +| RADIUSPassword | Current user credentials | Unless specified, the script runs with the current user credentials. Provide a different password if necessary. | diff --git a/docs/auditor/10.8/addon/radius/powershell.md b/docs/auditor/10.8/addon/radius/powershell.md new file mode 100644 index 0000000000..8f0745c084 --- /dev/null +++ b/docs/auditor/10.8/addon/radius/powershell.md @@ -0,0 +1,39 @@ +--- +title: "Run the Add-On with PowerShell" +description: "Run the Add-On with PowerShell" +sidebar_position: 30 +--- + +# Run the Add-On with PowerShell + +First, provide a path to your add-on followed by script parameters with their values. Each parameter +is preceded with a dash; a space separates a parameter name from its value. You can skip some +parameters— the script uses a default value unless a parameter is explicitly defined. If necessary, +modify the parameters as required. + +Follow the steps to run the script with PowerShell. + +**Step 1 –** On computer where you want to execute the add-on, start **Windows PowerShell**. + +**Step 2 –** Type a path to the add-on. Or simply drag and drop the add-on file in the console +window. + +**Step 3 –** Add script parameters. The console will look similar to the following: + +Windows PowerShell + +Copyright (C) 2014 Microsoft Corporation. All rights reserved. + +PS C:\Users\AddOnUser> C:\Add-ons\Netwrix_Auditor_Add-on_for_for_RADIUS_Server.ps1 - +NetwrixAuditorHost 172.28.6.15 -RADIUSHost 172.28.6.16 + +**NOTE:** If the script path contains spaces (e.g., _C:\Netwrix Add-ons_), embrace it in double +quotes and insert the ampersand (**&**) symbol in front (e.g., & "_C:\Netwrix Add-ons_"). + +**Step 4 –** Hit **Enter**. + +Depending on the number of Activity Records stored in Auditor Audit Database execution may take a +while. Ensure the script execution completed successfully. + +Every time you run the script, Auditor makes a timestamp. The next time you run the script, it will +start retrieving new events. diff --git a/docs/auditor/10.8/addon/radius/troubleshooting.md b/docs/auditor/10.8/addon/radius/troubleshooting.md new file mode 100644 index 0000000000..aaa64f3e10 --- /dev/null +++ b/docs/auditor/10.8/addon/radius/troubleshooting.md @@ -0,0 +1,12 @@ +--- +title: "Troubleshoot Issues" +description: "Troubleshoot Issues" +sidebar_position: 70 +--- + +# Troubleshoot Issues + +| Error in PowerShell | Resolution | +| -------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| New-Object : Exception calling ".ctor" with "1" argument(s): "Attempted to perform an unauthorized operation." | The account specified for collecting events on the RADIUS server does not have sufficient rights and permissions or the password is incorrect. - Check the password for this account. - Select the account that belongs to the **Domain Users** group and has the **Manage auditing and security log** right in domain where the RADIUS server resides. | +| New-Object : Exception calling ".ctor" with "1" argument(s): "The RPC server is unavailable" | The firewall on the RADIUS server blocks the script execution. On the server, navigate to the **Help Protect your computer with Windows Firewall** page, select **Advanced Settings** and enable the **Remote Event Log Management (RPC)** inbound rule. | diff --git a/docs/auditor/10.8/addon/servicenow/_category_.json b/docs/auditor/10.8/addon/servicenow/_category_.json new file mode 100644 index 0000000000..3eecc0effe --- /dev/null +++ b/docs/auditor/10.8/addon/servicenow/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "ServiceNow Incident Management", + "position": 200, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/servicenow/alerts.md b/docs/auditor/10.8/addon/servicenow/alerts.md new file mode 100644 index 0000000000..8dd83e904e --- /dev/null +++ b/docs/auditor/10.8/addon/servicenow/alerts.md @@ -0,0 +1,42 @@ +--- +title: "Integrate Alerts with Add-On" +description: "Integrate Alerts with Add-On" +sidebar_position: 30 +--- + +# Integrate Alerts with Add-On + +The add-on is shipped with a special set of alerts developed by Netwrixindustry experts. These +alerts are helpful for handling some routine cases that require service manager's attention, e.g., +account lockouts, changes to administrative groups. The alerts have preset filters and can be easily +uploaded to Auditor, and then integrated with the add-on and your ServiceNow system. These alerts +have ITSM Addon prefix in their names. + +Alternatively, you can integrate any default Auditor alert or your custom-built alerts with the +addon. + +By default, none of the alerts are integrated with add-on. To instruct the add-on to create tickets +for alerts, you should enable integration. Netwrix provides a command-line tool for enabling +integration with the add-on. + +**NOTE:** Make sure to turn on alerting in Auditor. You should manually set the state to "**On**" +for all alerts you want to integrate with the add-on. + +Perform the following steps to integrate alerts with the add-on: + +**Step 1 –** On the computer where the Auditor Server is installed, start the **Command Prompt** and +run the **Netwrix.ITSM.AlertsUploaderTool.exe** tool. The tool is located in the add-on folder. For +example: + +C:\>cd C:\Add-on + +C:\Add-on\Netwrix.ITSM.AlertsUploaderTool.exe + +**Step 2 –** Execute one of the following commands depending on your task. + +| To... | Execute... | +| -------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Upload alert set shipped with the addon to Auditor | Netwrix.ITSM.AlertsUploaderTool.exe /UploadTemplates Once uploaded, the alerts appear in the **All Alerts** list in Auditor, their names start with "_ITSM add-on_". Make sure to set their state to **"On**" (turn them on) manually. | +| Review alert list and their integration status | Netwrix.ITSM.AlertsUploaderTool.exe /List You will see the full list of Auditor alerts, with an enabled or disabled integration status for each alert. | +| Enable integration | Netwrix.ITSM.AlertsUploaderTool.exe /Update "``" Enable where `` is the name of the alert you want to integrate with the add-on. Provide alert names as they appear in Auditor. **NOTE:** You can enable integration with one alert at a time. For example: Netwrix.ITSM.AlertsUploaderTool.exe /Update "ITSM Add-On: User Account Locked Out" Enable | +| Disable integration | Netwrix.ITSM.AlertsUploaderTool.exe /Update "``" Disable where `` is the name of the alert for which you want to disable integration. **NOTE:** You can disable integration with one alert at a time. For example: Netwrix.ITSM.AlertsUploaderTool.exe /Update "ITSM Add-On: User Account Locked Out" Disable | diff --git a/docs/auditor/10.8/addon/servicenow/deployment.md b/docs/auditor/10.8/addon/servicenow/deployment.md new file mode 100644 index 0000000000..d9a95c0a71 --- /dev/null +++ b/docs/auditor/10.8/addon/servicenow/deployment.md @@ -0,0 +1,56 @@ +--- +title: "Deploy the Service" +description: "Deploy the Service" +sidebar_position: 40 +--- + +# Deploy the Service + +Follow the steps to deploy the service. + +**Step 1 –** Locate the add-on folder on the computer where the Auditor Server resides. + +**Step 2 –** Run the **install.cmd** file. The file deploys and enables the Auditor **ITSM +Integration Service**. + +**NOTE:** Stop and then restart the service every time you update any of configuration files. + +## Configure Integration Service to Use Proxy + +If you are using a proxy to provide access to the Internet, consider that the Auditor ITSM +Integration Service will need some additional configuration for proxy server to be detected +properly. The reason is that this service runs under the **LocalSystem** account (non-interactive), +which requires proxy settings to be specified manually. See the following Microsoft article for +additional information: +[HTTP proxy.](https://docs.microsoft.com/en-us/dotnet/framework/network-programming/automatic-proxy-detection) + +Follow the step to configure integration service settings. + +**Step 3 –** Navigate to the add-on folder (default name is _Netwrix_Auditor_Add-on_for_ITSM_) and +select the **Netwrix.ITSM.IntegrationService.exe.config** service configuration file. + +**NOTE:** If Auditor ITSM Integration Service is running, stop it before modifying configuration +file. + +**Step 4 –** Open this XML file for edit and add the following section: + +```xml + + + + + +``` + +Here: + +| Parameter | Description | +| ---------------- | ------------------------------------------------------------------------------------------------- | +| proxyaddress | Specify default proxy address and connection port, e.g., _http://172.28.13.79:8080_ | +| usesystemdefault | Set to **True** to allow Internet Explorer proxy settings to be overwritten with custom settings. | +| autoDetect | Set to **False**. | + +**Step 5 –** Start the Auditor ITSM Integration Service. diff --git a/docs/auditor/10.8/addon/servicenow/install.md b/docs/auditor/10.8/addon/servicenow/install.md new file mode 100644 index 0000000000..99eedf71c0 --- /dev/null +++ b/docs/auditor/10.8/addon/servicenow/install.md @@ -0,0 +1,20 @@ +--- +title: "Install Add-On" +description: "Install Add-On" +sidebar_position: 10 +--- + +# Install Add-On + +After downloading the add-on package from Netwrix add-on store, copy it to the a computer where the +Auditor Server resides. Unpack the ZIP archive to a folder of your choice; by default, it will be +unpacked to the **Netwrix_Auditor_Add-on_for_ITSM** folder. + +The main component of the add- on is implemented as a service named Netwrix Auditor **ITSM +Integration Service**. This service will run on the computer where the Auditor Server works, and +will use the default Integration API port **9699**. Unless specified, the service will run under the +**LocalSystem** account. + +To use the add-on, you should check the prerequisites and specify configuration settings, as +described in the next sections. After that, run the installer that will apply settings and start the +service. See the [Deploy the Service](/docs/auditor/10.7/addon/servicenow/deployment.md) topic for additional information. diff --git a/docs/auditor/10.8/addon/servicenow/overview.md b/docs/auditor/10.8/addon/servicenow/overview.md new file mode 100644 index 0000000000..ab2393a022 --- /dev/null +++ b/docs/auditor/10.8/addon/servicenow/overview.md @@ -0,0 +1,42 @@ +--- +title: "ServiceNow Incident Management" +description: "ServiceNow Incident Management" +sidebar_position: 200 +--- + +# ServiceNow Incident Management + +The add-on works in collaboration with Netwrix Auditor, supplying data on suspicious activity or +improper actions right to your helpdesk action center. Aggregating data into a single trail +simplifies incident processing and handling, makes IT service management more cost effective, and +helps address threats as soon as possible. + +Implemented as a service, this add-on facilitates the data transition from Netwrix Auditor to +ServiceNow ITSM system. The service automatically creates incident tickets in your system and +updates them with subsequent events. All you have to do is provide connection details and specify +what actions should lead to ticket creation. + +On a high level, the add-on works as follows: + +1. The add-ons comes with a special set of alerts developed by Netwrix industry experts. With a help + of a straight- forward command- line tool, you upload these alerts to Netwrix Auditor and enable + integration with add-on. +2. Whenever the alert is triggered, the add-on retrieves an Activity Records for this action using + the Netwrix Auditor Integration API. Each Activity Record contains the user account, action, + time, and other details. +3. The add-on creates an incident ticket in ServiceNow, populates it with data that was available in + the alert, and assigns to a proper team. Now, you can process a ticket as usual. + + To prevent ticket overflow, the service provides an advanced flood suppression mechanism. + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| On... | Ensure that... | +| ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| The Auditor Server side | - Auditor version is **9.8** or later. - The Audit Database settings are configured in the Auditor. See the [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md)topic for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in the Auditor or is a member of the Netwrix Auditor Client Users group. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| On the ServiceNow side | - ServiceNow version should be any of the following: - Helsinki - Istanbul - Kingston - London **NOTE:** Currently, Jakarta version has only experimental support. - A new user is created and has sufficient permissions to create tickets and update them. The **itil** role is recommended. If you want to reopen closed tickets, you must be granted the right to perform **Write** operations on inactive incidents. | + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/addon/servicenow/parameters.md b/docs/auditor/10.8/addon/servicenow/parameters.md new file mode 100644 index 0000000000..d574a8a695 --- /dev/null +++ b/docs/auditor/10.8/addon/servicenow/parameters.md @@ -0,0 +1,103 @@ +--- +title: "Define Parameters" +description: "Define Parameters" +sidebar_position: 20 +--- + +# Define Parameters + +## General + +Perform the following steps to define general parameters for the Add-On: + +**Step 1 –** Navigate to your add-on folder and select the **ITSMSettings.xml** file. + +**Step 2 –** Define general parameters such as Auditor connection parameters, the number of tickets +the service can create per hour, ability to reopen closed tickets, etc. For most parameters, default +values are provided. + +**Step 3 –** Provide new values as follows: `value`. You can skip or define +parameters depending on your execution scenario and security policies. + +| Parameter | Default value | Description | +| ----------------------------------- | ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| **Connection to Netwrix Auditor** | | | +| NetwrixAuditorHost | localhost:9699 | - The add-on runs on the computer where the Auditor Server resides and uses the default Integration API port **9699**. To specify a non-default port, provide a new port number (e.g., _https://localhost:8788_). - The add- on must always run locally, on the computer where the Auditor Server resides. | +| NetwrixAuditorUserName | Current user credentials | Unless specified, the add-on runs under the **LocalSystem** account. If you want the add-on to use another account to connect to the Auditor Server, specify the account name in the _DOMAIN\username_ format. Alternatively, after deploying the **Netwrix Auditor ITSM Integration Service** service, specify an account in its properties. The account must be assigned the Global reviewer role in the Auditor or be a member of the Netwrix Auditor**Administrators** group. The user must have sufficient permissions to create files on the computer. | +| NetwrixAuditorPassword | – | Provide a password for the account. Unless an account is specified, the service runs under the **LocalSystem** account and does not require a password. | +| TicketFloodLimit | 10 | Specify the maximum number of standalone tickets the service can create during **TicketFloodInterval**. If a ticket flood limit is reached, the service writes all new alerts into a single ticket. | +| TicketFloodInterval | 3600 | Specify the time period, in seconds. During this time period, the service can create as many tickets as specified in **TicketFloodLimit**. The default value is 3600 seconds, i.e., 1 hour. | +| ConsolidationInterval | 900 | Specify the time period, in seconds. During this time period, the service does not process similar alerts as they happen but consolidates them before updating open tickets in your ITSM. The default values is 900 seconds, i.e., 15 minutes. This option works in combination with **UpdateTicketOnRepetitiveAlerts** and is helpful if you want to reduce the number of ticket updates on ITSM side. I.e., this option defines the maximum delay for processing alerts and updating existing tickets. Tickets for new alert types are created immediately. For example, a new alert is triggered—the service opens a new incident ticket. The alert keeps firing 20 times more within 10 minutes. Instead of updating the ticket every time, the service consolidates alerts for 15 minutes, and then updates a ticket just ones with all collected data. | +| CheckAlertQueueInterval | 5 | Internal parameter. Check and process the alert queue every N seconds; in seconds. | +| UpdateTicketOnRepetitiveAlerts | true | Instead of creating a new ticket, reopen an existing ticket that is in a closed state (be default, closed, canceled, and resolved) if a similar alert occurs within **UpdateInterval**. This option works only when **UpdateTicketOnRepetitiveAlerts** is set to "_true_". **NOTE:** If you want to reopen closed tickets, you must be granted the right to perform **Write** operations on inactive incidents. | +| UpdateInterval | 86400 | Specify the time period, in seconds. If a similar alert occurs in less than N seconds, it is treated as a part of an existing incident. The default value is 86400 seconds, i.e., 24 hours. If an alerts is triggered after the **UpdateInterval** is over, a new ticket is created. | +| EnableTicketCorrelation | true | Review history and complement new tickets with information about similar tickets created previously. This information is written to the **Description** field. This option is helpful if you want to see if there is any correlation between past incidents (occurred during last month, by default) and a current incident. | +| CorrelationInterval | 2592000 | Specify the time period, in seconds. During this time period, the service treats similar tickets as related and complements a new ticket with data from a previous ticket. The default value is 2592000 seconds, i.e., 1 month. Information on alerts that are older than 1 month is removed from internal service storage. | +| ProcessActivityRecordQueueInterval | 5 | Internal parameter. Process Activity Record queue every N seconds; in seconds. | +| DisplayOnlyFirstActivityRecord | true | Add only the first Activity Record in the work notes, Activity Records that update this ticket will be added as attachments to this ticket. If false, all Activity Records will be displayed in the ticket work notes. | +| **ActivityRecordRequestsRetention** | | | +| RequestLimit | 5000 | Internal parameter. The maximum number of Activity Record requests the service can store in its internal memory. Once the limit is reached, the service clears Activity Record requests starting with older ones. | +| RequestLimitInterval | 604800 | Internal parameter. The service can store the Activity Record requests not older than N seconds; in seconds. Older Activity Record requests are cleared. | +| **ActivityRecordWebRequests** | | | +| RequestLimit | 200 | Internal parameter. The maximum number of Activity Records the service can retrieve in a single request. | +| RequestTimeout | 180 | Internal parameter. By default, 3 minutes. Defines the connection timeout. | +| **TicketRequestsRetention** | | | +| RequestLimit | 300000 | Internal parameter. The maximum number of ticket requests the service can store in its internal memory. Once the limit is reached, the service clears ticket requests starting with older ones. | +| RequestLimitInterval | 604800 | Internal parameter. The service can store the ticket requests not older than N seconds; in seconds. Older tickets requests are cleared. | + +**NOTE:** Stop and then restart the service every time you update any of configuration files. + +## ServiceNow Parameters + +Follow the steps to define ServiceNow parameters: + +**Step 1 –** Navigate to your add-on folder and select **ServiceNowSettings.xml**. + +**Step 2 –** Define parameters such as ServiceNow connection parameters inside the `` +section. + +**Step 3 –** Provide new values as follows: `value`. + +| `` parameter | Default value | Description | +| ------------------------ | ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| URL | — | Provide a link to your ServiceNow system (e.g., _https://enterprise.service-now.com_). | +| UserName | — | Specify a user account. Make sure the user has sufficient permissions to create tickets and update them. The **itil** role is recommended. **NOTE:** If you want to reopen closed tickets, you must be granted the right to perform **Write** operations on inactive incidents. | +| Password | — | Provide a password. | + +**Step 4 –** Review the `` section. The parameters inside this section correspond +to ServiceNow ticket fields and use the same naming (e.g., priority, urgency). To find out a field +name in ServiceNow, switch to XML view (on the ticket header, navigate to Show XML). + +Each `` includes the` ` and` ` pair that defines a +ServiceNow ticket field and a value that will be assigned to it. For most parameters, default values +are provided. Add more ticket parameters or update values if necessary. + +**NOTE:** The template remains the same for all alerts and cannot be adjusted per individual alerts. + +| Name | Value | Description | +| ------------------ | -------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| short_description | [Netwrix Auditor] %AlertName% | Sets **Short** description to alert title (e.g., _[Netwrix Auditor] ITSM Add-On: User Account Locked Out)_. | +| category | software | Sets the incident **Category** to "_Software_". | +| impact | 1 | Sets **Impact** to "_1 – High_". | +| urgency | 1 | Sets **Urgency** to "_1 – High_". | +| severity | 1 | Sets **Severity** to "_1 – High_". | +| assignment\_ group | d625dccec0a8016700a22a0 f7900d06 | Sets **Assignment** group to "_Service Desk_". **NOTE:** You cannot use a group name as a value. Provide its guid instead. | +| description | %AlertDescription% %PreviousTicketReference% | Provides an alert description and references to related tickets in **Description**. | +| work_notes | Alert Details: ... | Adds the full alert text to Work notes, including data source, who, what, where, etc. To find out what is included in the alert details, see the **ServiceNowSettings.xml** file. **NOTE:** You can write alert details in the **Additional comments** field instead of Work notes. To do this, rename `work_notes `into `comments`. If you want to write alert details into both fields, create a copy of `` entry containing work_notes and `work_notes` into `comments` section. It shows what information about related +tickets will be included in your current ticket. Update the template if necessary. + +| CorrelationTicketFormat | Description | +| -------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Previous incident for the same alert type: Number: %number% Opened: %opened_at% Assigned to: %assigned_to% Assignment group: %assignment_group% State: %state% | Each` %parameter%` corresponds to a ServiceNow ticket field. The service will automatically substitute these parameters with values from a related ticket. Rearrange fields or add more if necessary. To find out a field name in ServiceNow, switch to XML view (on the ticket header, navigate to **Show XML**). | + +**Step 6 –** Review the `` section. It defines the tickets the add- on can +reopen automatically. + +| Name | Description | +| ------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| ClosedTicketStates TicketState | Lists ticket statuses. Only tickets with this status can be reopened. By default, resolved, closed, and canceled tickets can be reopened. To specify a new status, provide its ID in the `` tag (e.g., 8 for canceled). | +| NewState | Defines a ticket status once it is reopened. By default, new. To specify another status, provide its ID in the `` tag (e.g., 1 for new). | + +**NOTE:** Stop and then restart the service every time you update any of configuration files. diff --git a/docs/auditor/10.8/addon/siem/_category_.json b/docs/auditor/10.8/addon/siem/_category_.json new file mode 100644 index 0000000000..029d7c08f9 --- /dev/null +++ b/docs/auditor/10.8/addon/siem/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "SIEM", + "position": 210, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/siem/activityrecords.md b/docs/auditor/10.8/addon/siem/activityrecords.md new file mode 100644 index 0000000000..d48f306e2b --- /dev/null +++ b/docs/auditor/10.8/addon/siem/activityrecords.md @@ -0,0 +1,112 @@ +--- +title: "Export Activity Records" +description: "Export Activity Records" +sidebar_position: 30 +--- + +# Export Activity Records + +## Export Activity Records Associated with the Alert + +To export only important audit data, that is, the Activity Records that led to the alert triggering, +configure the alert response action, providing path to +**Netwrix_Auditor_Alerts_to_Event_Log_Add-on.ps1**. See the [SIEM](/docs/auditor/10.7/addon/siem/overview.md) topic for additional +information. + +## Export Activity Records in Bulk + +As said, Netwrix recommends exporting the most important data, using the script described above. +However, if you need to export all Activity Records in bulk, follow the recommendations below. + +First, provide a path to your add-on followed by script parameters with their values. Each parameter +is preceded with a dash; a space separates a parameter name from its value. You can skip some +parameters—the script uses a default value unless a parameter is explicitly defined. If necessary, +modify the parameters as required. + +Follow the steps to run add-on with PowerShell: + +**Step 1 –** On computer where you want to execute the add-on, start Windows PowerShell. + +**Step 2 –** Type a path to the add-on. Or simply drag and drop the add-on file in the console +window. + +**Step 3 –** Add script parameters. The console will look similar to the following: + +Windows PowerShell + +Copyright (C) 2014 Microsoft Corporation. All rights reserved. + +PS C:\Users\AddOnUser> C:\Add-ons\Netwrix_Auditor_Activity_Records_to_Event_Log_Add-on.ps1.ps1 + +If the script path contains spaces (e.g., `C:\Netwrix Add-ons\`), embrace it in double quotes and +insert the ampersand (&) symbol in front (e.g., `& "C:\Netwrix Add-ons\"`). + +**Step 4 –** Hit **Enter**. + +Depending on the number of Activity Records stored in Auditor Audit Database execution may take a +while. Ensure the script execution completed successfully. The Netwrix Auditor Integration event log +will be created and filled with events. + +By default, the Netwrix Auditor Integration event log size is set to _1GB_, and retention is set to +_"Overwrite events as needed"_. See the [Integration Event Log Fields](/docs/auditor/10.7/addon/siem/integrationeventlog.md) topic +for additional information. + +Event records with more than 30,000 characters length will be trimmed. + +At the end of each run, the script creates the +**Netwrix_Auditor_Event_Log_Export_Add-on_EventIDs.txt** file. It defines mapping between the +Activity Records and related Event IDs . + +You can use this file to track possible duplicates of Event IDs created at each script execution. +Duplicates, if any, are written to the +**Netwrix_Auditor_Event_Log_Export_Add-on_EventIDsDuplicates.txt** file. + +Similarly, the add-on also creates the **Netwrix_Auditor_Event_Log_Export_Add-on_CategoriesIDs.txt** +file that defines mapping between the Data Source and related Category ID. + +### Apply Filters + +Every time you run the script, Auditor makes a timestamp. The next time you run the script, it will +start retrieving new Activity Records. Consider the following: + +- By default, the add-on does not apply any filters when exporting Activity Records. If you are + running the add-on for the first time (there is no timestamp yet) with no filters, it will export + Activity Records for the last month only. This helps to optimize solution performance during the + first run. At the end of the first run, the timestamp will be created, and the next run will start + export from that timestamp. +- However, if you have specified a time period for Activity Records to be exported, then this filter + will be applied at the add-on first run and the runs that follow. + +### Automate Add-On Execution + +To ensure you feed the most recent data to your SIEM solution, you can schedule a daily task for +running the Activity Records to Event Log add-on. + +To ensure you feed the most recent data to your SIEM solution, Netwrix recommends scheduling a daily +task for running the add-on. + +**Perform the following steps to create a scheduled task:** + +**Step 1 –** On the computer where you want to execute the add-on, navigate to **Task +Scheduler**.Task Scheduler. + +**Step 2 –** On the **General** tab, specify a task name. Make sure the account that runs the task +has all necessary rights and permissions. + +**Step 3 –** On the **Triggers** tab, click **New** and define the schedule. This option controls +how often audit data is exported from Auditor and saved to event log. Netwrixrecommends scheduling a +daily task. + +**Step 4 –** On the **Actions** tab, click **New** and specify action details. Review the following +for additional information: + +| Option | Value | +| ------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Action | Set to _"Start a program"_. | +| Program/script | Input _"Powershell.exe"_. | +| Add arguments (optional) | Add a path to the add-on in double quotes and specify add-on parameters. For example: -file "C:\Add-ons\Netwrix_Auditor_Audit_Records_to_Event_Log_Add-on.ps1" | + +**Step 5 –** Save the task. + +After creating a task, wait for the next scheduled run or navigate to **Task Scheduler** and run the +task manually. To do this, right-click a task and click **Run**. diff --git a/docs/auditor/10.8/addon/siem/collecteddata.md b/docs/auditor/10.8/addon/siem/collecteddata.md new file mode 100644 index 0000000000..2a5c298623 --- /dev/null +++ b/docs/auditor/10.8/addon/siem/collecteddata.md @@ -0,0 +1,21 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 40 +--- + +# Work with Collected Data + +Follow the steps to work with collected data: + +**Step 1 –** On the computer where you executed the add-on, navigate to **Start** > **All +Programs** > **Event Viewer**. + +**Step 2 –** In the Event Viewer dialog, navigate to **Event Viewer (local)** > **Applications and +Services Logs** >Netwrix Auditor Integration log. + +**Step 3 –** Review events. + +![EventLog_Export_Example](/images/auditor/10.7/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) + +Now you can augment Windows event log with data collected by the Auditor. diff --git a/docs/auditor/10.8/addon/siem/configure.md b/docs/auditor/10.8/addon/siem/configure.md new file mode 100644 index 0000000000..1d6eb6d9e5 --- /dev/null +++ b/docs/auditor/10.8/addon/siem/configure.md @@ -0,0 +1,47 @@ +--- +title: "Configuration" +description: "Configuration" +sidebar_position: 10 +--- + +# Configuration + +## Activity Records to Event Log Add-on Connection + +Before running or scheduling the add-on, you must define connection details: Auditor Server host, +user credentials, etc. Most parameters are optional, the script uses the default values unless +parameters are explicitly defined. You can skip or define parameters depending on your execution +scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/siem/deployment.md) topic +for more information. + +| Parameter | Default value | Description | +| ------------------------- | ------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **Connection to Auditor** | | | +| NetwrixAuditorHost | localhost:9699 | Assumes that the add-on runs on the computer hosting Auditor Server and uses default port **9699**. If you want to run the add-on on another machine, provide a name of the computer where Auditor Server resides (e.g., _172.28.6.15, EnterpriseNAServer, WKS.enterprise.local_). To specify a non-default port, provide a server name followed by the port number (e.g., _WKS.enterprise.local:9999_). | +| NetwrixAuditorUserName | Current user credentials | Unless specified, the add-on runs with the current user credentials. If you want the add-on to use another account to connect to Auditor Server, specify the account name in the _DOMAIN\username_ format. The account must be assigned the Global reviewer role in Auditor or be a member of the Netwrix Auditor **Client Users** group on the computer hosting Auditor Server. | +| NetwrixAuditorPassword | Current user credentials | Unless specified, the script runs with the current user credentials. Provide a different password if necessary. | + +## In-Script Parameters + +You may also need to modify the parameters that define how EventIDs should be generated for exported +events, though their default values address most popular usage scenarios. In-script parameters are +listed in the table below. To modify them, open the script for edit and enter the values you need. + +Once set, these parameter values must stay unchanged until the last run of the script — otherwise +dynamically calculated EventIDs will be modified and applied incorrectly. + +| Parameter | Default value | Description | +| ------------------------------ | ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| **EventID generation** | | | +| GenerateEventId | True | Defines whether to generated unique EventIDs. Possible parameter values: - True — generate unique EventIDs using Activity Record fields - False — do not generate a unique ID, set EventID=0 for all cases EventID is generated through CRC32 calculation that involves the following Activity Record field values: - ObjectType - Action - DataSource (optional, see below for details) Only the lowest 16 bits of the calculation result are used. See the [Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) topic for additional information. | +| IncludeDataSourceToMakeEventId | True | Defines whether the DataSource field of Activity Record should be used in the EventID calculation. This parameter is applied only if GenerateEventId is set to TRUE. _Object Type - Action_ pair may be identical for several data sources (e.g., Object='User' and Action='Added'); thus, excluding DataSource from calculation may lead to the same EventID (duplicates). See the [Export Activity Records ](/docs/auditor/10.7/addon/siem/activityrecords.md) topic for additional information.. | +| SetDataSourceAsEventCategory | True | Defines whether to fill in Event Category event field with a numeric value derived from the **DataSource** field of Activity Record. Possible parameter values: - True — generate a numeric value for Event Category using Activity Record field - False — do not generate a numeric value, set Event Category=1 for all cases The Event Category field value is generated through CRC32 calculation that involves the **DataSource** field of Activity Record. Only the lowest 9 bits of the calculation result are used. | +| SetDataSourceAsEventSource | False | Defines whether to fill in the Event Source event field with the value from the **DataSource** field of Activity Record. Possible parameter values: - True — fill in the Event Source with the value from DataSource field of Activity Record, adding the prefix defined by $EventSourcePrefix. Default prefix is _NA_, for example:_NA Windows Server_ - False — set Event Source to _Netwrix_Auditor_Integration_API_ for all cases If the script cannot fill in the Event Source for some DataSource, the default value _Netwrix_Auditor_Integration_API_ will be used. If the event source for particular **DataSource** does not exist in the Netwrix_Auditor_Integration event log, elevated privileges are required for add-on execution. | + +## Alerts to Event Log Add-on Settings + +This add-on requires you to specify the following parameter: + +| Parameter | Description | Example | +| -------------------- | ------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------- | +| NetwrixPathToCsvData | Specify path to the auxiliary CSV file storing the data of activity records associated with the alert. | `%ProgramData%\Netwrix Auditor\ AuditCore\AuditArchive\ AlertsToolLauncher\ Csv\file.csv` | diff --git a/docs/auditor/10.8/addon/siem/deployment.md b/docs/auditor/10.8/addon/siem/deployment.md new file mode 100644 index 0000000000..e9f15c4fb8 --- /dev/null +++ b/docs/auditor/10.8/addon/siem/deployment.md @@ -0,0 +1,38 @@ +--- +title: "Choose Appropriate Execution Scenario" +description: "Choose Appropriate Execution Scenario" +sidebar_position: 20 +--- + +# Choose Appropriate Execution Scenario + +## Netwrix Auditor Activity Records to Event Log Add-on + +Auditor Add-on for the SIEM solution runs on any computer in your environment. For example, you can +run the add-on on the computer where Auditor is installed or on a remote server. Depending on the +execution scenario you choose, you have to define a different set of parameters. See the +[Configuration](/docs/auditor/10.7/addon/siem/configure.md) topic for additional information. + +Netwrix suggests the following execution scenarios: + +| Scenario | Example | +| ------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The add-on runs on the Auditor Server with the current user credentials. Activity Records are exported to a local event log. | C:\Add-ons\Netwrix_Auditor_Activity_Records_to_Event_Log_Add-on.ps1 | +| The add-on runs on the Auditor Server with explicitly defined credentials. Activity Records are exported to a local event log. | C:\Add-ons\Netwrix_Auditor_Activity_Records_to_Event_Log_Add-on.ps1 -NetwrixAuditorUserName enterprise\NAuser -NetwrixAuditorPassword NetwrixIsCool | +| The add-on exports Activity Records from a remote Auditor Server using current user credentials and writes data to a local event log. | C:\Add-ons\Netwrix_Auditor_Activity_Records_to_Event_Log_Add-on.ps1 Netwrix Auditor add-on for SIEM | +| The add-on exports Activity Records from a remote Auditor server using explicitly defined credentials and writes data to a local event log. | C:\Add-ons\Netwrix_Auditor_Activity_Records_to_Event_Log_Add-on.ps1 Netwrix Auditor add-on for SIEM-NetwrixAuditorUserName enterprise\NAuser -NetwrixAuditorPassword NetwrixIsCool | + +For security reasons, Netwrix recommends running the script with current user credentials (skipping +user credentials). Create a special user account with permissions to both Auditor data and event log +and use it for running the script. + +## Alerts to Event Log Add-on + +The script will be executed on Auditor Server. + +By default, Auditor uses the _LocalSystem_ account to run PowerShell scripts. If you want to use +another account, in the alert settings go to **Response Action**, select the **Use custom +credentials** checkbox and specify user name and password. Make sure this account has **Log on as +batch job** privilege. See the +[Configure a Response Action for Alert](/docs/auditor/10.7/admin/alertsettings/responseaction.md) topic for +additional information. diff --git a/docs/auditor/10.8/addon/siem/integrationeventlog.md b/docs/auditor/10.8/addon/siem/integrationeventlog.md new file mode 100644 index 0000000000..9bb6a77b9d --- /dev/null +++ b/docs/auditor/10.8/addon/siem/integrationeventlog.md @@ -0,0 +1,40 @@ +--- +title: "Integration Event Log Fields" +description: "Integration Event Log Fields" +sidebar_position: 50 +--- + +# Integration Event Log Fields + +This section describes how the add-on fills in the Netwrix Auditor **Integration** event log fields +with data retrieved from Activity Records. + +The Activity Record structure is described in the +[Reference for Creating Activity Records](/docs/auditor/10.7/api/activityrecordreference.md)topic. + +| Event log field name | Filled in with value | Details | +| -------------------- | ----------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Source | **NA\_\_**`{Data Source Name}`** -OR- **Netwrix \_Auditor_Integration_API\_\_ | Depending on _SetDataSourceAsEventSource_ in-script parameter. | +| EventID | **`{Calculated by add-on}`** -OR- **0** | Depending on _GenerateEventId_ in-script parameter (calculation result also depends on _IncludeDataSourceToMakeEventId_ parameter — if _GenerateEventId_ = _True_). | +| Task Category | **`{DataSource ID}`** -OR- **1** | Depending on _SetDataSourceAsEventCategory_ in-script parameter. | + +See the [Configuration](/docs/auditor/10.7/addon/siem/configure.md) topic for additional information. + +EventData is filled in with data from the Activity Record fields as follows: + +| Entry in EventData | Activity Record field | +| ------------------ | --------------------- | +| DataSource | `{DataSource}` | +| Action | `{Action}` | +| Message | `{Action ObjectType}` | +| Where | `{Where}` | +| ObjectType | `{ObjectType}` | +| Who | `{Who}` | +| What | `{What}` | +| When | `{When}` | +| Workstation | `{Workstation}` | +| Details | `{Details}` | + +Details are filled in only if this Activity Record field is not empty. + +![eventlogexample_thumb_0_0](/images/auditor/10.7/addon/solarwinds/eventlogexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/addon/siem/overview.md b/docs/auditor/10.8/addon/siem/overview.md new file mode 100644 index 0000000000..6ce43da0f1 --- /dev/null +++ b/docs/auditor/10.8/addon/siem/overview.md @@ -0,0 +1,89 @@ +--- +title: "SIEM" +description: "SIEM" +sidebar_position: 210 +--- + +# SIEM + +Netwrix Auditor Add-on for SIEM helps you to get most from your SIEM investment. This topic focuses +on the AlienVault USM SIEM solution. + +The add-on works in collaboration with Netwrix Auditor, supplying additional data that augments the +data collected by the SIEM solution. + +The add-on enriches your SIEM data with actionable context in human-readable format, including the +before and after values for every change and data access attempt, both failed and successful. +Aggregating data into a single audit trail simplifies analysis, makes your SIEM more cost effective, +and helps you keep tabs on your IT infrastructure. + +Implemented as a PowerShell script, this add-on facilitates the audit data transition from Netwrix +Auditor to the SIEM solution. All you have to do is provide connection details and schedule the +script for execution. + +On a high level, the add-on works as follows: + +1. The add-on connects to the Netwrix Auditor server and retrieves audit data using the Netwrix + Auditor Integration API. +2. The add-on processes Netwrix Auditor-compatible data (Activity Records) into log events that work + as input for the SIEM solution. Each event contains the user account, action, time, and other + details. +3. The add-on creates a special Windows event log named **Netwrix_Auditor_Integration** and stores + events there. These events are structured and ready for integration with the SIEM solution. + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +of the Activity Record and the capabilities of the Netwrix Auditor Integration API. + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +### Netwrix Auditor Activity Records to Event Log Add-on + +| On... | Ensure that... | +| ---------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The Auditor side | - Auditor version is **9.8** or later. - The Audit Database settings are configured in Auditor Server. - The TCP 9699 port (default Integration API port) is open for inbound connections. The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| The computer where the script will be executed | - PowerShell **3.0** or later must be installed. - .NET **4.5** or later must be installed. - Execution policy for powershell scripts is set to _"Unrestricted"_. Run Windows PowerShell as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the write permission on the script folder—the add-on creates a special .bin file with the last exported event. - The user running the script must be a member of the Domain Users group. - At least the first script run should be performed under the account with elevated privileges, as it will be necessary to create event log file and perform other required operations. | + +### Netwrix Auditor Alerts to Event Log Add-on + +| On... | Ensure that... | +| ----------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The Auditor Server side | - Auditor version is **9.96** or 10. - The alert response action settings in Auditor Server are configured as follows: - **Take action when alert occurs** is switched **ON** - **Run** field contains the path to Windows PowserShell: `C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe` - **With parameters** field contains the required parameters, including the path to **Netwrix_Auditor_Alerts_to_Event_Log_Add-on.ps1** file. Example: `-File C:\Netwrix_Auditor_Add-on_for_SIEM\Netwrix_Auditor_Alerts_to_Event_Log_Add-on.ps1 -NetwrixPathToCsvData` For details on script parameters, see the section below. - **Write data to CSV file** option is selected - **Command line preview** looks like this: `C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -File C:\Netwrix_Auditor_Add-on_for_SIEM\Netwrix_Auditor_Alerts_to_Event_Log_Add-on.ps1 -NetwrixPathToCsvData {CsvFile}` - By default, the executable file will be launched under the _LocalSystem_ account. If you want to use another account, make sure it has **Log on as batch job** privilege on Netwrix Auditor server. You may want to perform the test run after configuring the script as the alert response action. If so, consider that current user account (logged on to Auditor client) must have local **Administrator** privileges on AuditorServer where the executable file is located. | + +## Compatibility Notice + +Make sure to check your product version, and then review and update your add-ons and scripts +leveraging Netwrix Auditor Integration API. Download the latest add-on version in the Add-on Store. + +## Activity Records to Event Log Add-on + +On a high level, this add-on works as follows: + +1. The add-on connects to the Auditor server and retrieves audit data using the Integration API. +2. The add-on processes Netwrix Auditor -compatible data (Activity Records) into log events that + work as input for Windows event log. Each event contains the user account, action, time, and + other details. +3. The add-on creates a special Windows event log named Netwrix_Auditor_Integration and stores + events there. These events are structured and ready for integration with Windows event log. + +For more information on the structure of the Activity Record and the capabilities of the Netwrix +Auditor Integration API, refer to [Integration API](/docs/auditor/10.7/api/overview.md). + +## Netwrix Auditor Alerts to Event Log Add-on + +This add-on works as response action to the alert, as follows: + +1. The administrator enables and configured response action for selected alert, as described in the + following topic: + [Configure a Response Action for Alert](/docs/auditor/10.7/admin/alertsettings/responseaction.md). Make sure + to provide correct path to the script file and to select the Write data to CSV file option. +2. When the alert is triggered, the script starts - it retrieves audit data (activity record fields) + from the CSV file and processes it into log events. Each event contains the user account, action, + time, and other details. +3. The add-on creates a special Windows event log named Netwrix_Auditor_Integration and stores + events there. These events are structured and ready for integration with SIEM system. + +See the [Configure a Response Action for Alert](/docs/auditor/10.7/admin/alertsettings/responseaction.md) +topic for additional information on the alert response actions and CSV file. diff --git a/docs/auditor/10.8/addon/siemcefexport/_category_.json b/docs/auditor/10.8/addon/siemcefexport/_category_.json new file mode 100644 index 0000000000..ed3d1358a4 --- /dev/null +++ b/docs/auditor/10.8/addon/siemcefexport/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "SIEM Generic Integration for CEF Export", + "position": 220, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/siemcefexport/automate.md b/docs/auditor/10.8/addon/siemcefexport/automate.md new file mode 100644 index 0000000000..9750f4d269 --- /dev/null +++ b/docs/auditor/10.8/addon/siemcefexport/automate.md @@ -0,0 +1,35 @@ +--- +title: "Automate Add-On Execution" +description: "Automate Add-On Execution" +sidebar_position: 40 +--- + +# Automate Add-On Execution + +To ensure you feed the most recent data to your SIEM solution, Netwrix recommends scheduling a daily +task for running the add-on. + +**Perform the following steps to create a scheduled task:** + +**Step 1 –** On the computer where you want to execute the add-on, navigate to **Task Scheduler**. + +**Step 2 –** On the **General** tab, specify a task name. Make sure the account that runs the task +has all necessary rights and permissions. + +**Step 3 –** On the **Triggers** tab, click **New** and define the schedule. This option controls +how often audit data is exported from Auditor and saved to event log. Netwrixrecommends scheduling a +daily task. + +**Step 4 –** On the **Actions** tab, click **New** and specify action details. Review the following +for additional information: + +| Option | Value | +| ------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Action | Set to "_Start a program_". | +| Program/script | Input "_Powershell.exe_". | +| Add arguments (optional) | Add a path to the add-on in double quotes and specify add-on parameters. For example: -file "C:\Add-ons\Netwrix_Auditor_CEF_Export_Add-on.ps1" -OutputFolder C:\CEF_Export -NetwrixAuditorHost 172.28.6.15 | + +**Step 5 –** Save the task. + +After creating a task, wait for the next scheduled run or navigate to **Task Scheduler** and run the +task manually. To do this, right-click a task and click **Run**. diff --git a/docs/auditor/10.8/addon/siemcefexport/collecteddata.md b/docs/auditor/10.8/addon/siemcefexport/collecteddata.md new file mode 100644 index 0000000000..eb9595672d --- /dev/null +++ b/docs/auditor/10.8/addon/siemcefexport/collecteddata.md @@ -0,0 +1,18 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 50 +--- + +# Work with Collected Data + +Follow the steps to work with collected data: + +**Step 1 –** Navigate to the destination folder and open a CEF log file. + +**Step 2 –** Review audit data exported from the Audit Database. For example, review this +CEF-formatted string: + +`CEF:0|Netwrix|Active Directory|1.0|Added|Added user|0|shost=enterprisedc.enterprise.local cat=user suser=enterprise\\administrator filePath=\\local\\enterprise\\users\\newuser start=Mar 28 2017 14:01:48` + +Now you can feed your SIEM solutions with data collected by Auditor. diff --git a/docs/auditor/10.8/addon/siemcefexport/deployment.md b/docs/auditor/10.8/addon/siemcefexport/deployment.md new file mode 100644 index 0000000000..1e4528531b --- /dev/null +++ b/docs/auditor/10.8/addon/siemcefexport/deployment.md @@ -0,0 +1,25 @@ +--- +title: "deployment" +description: "deployment" +sidebar_position: 20 +--- + +## Choose Appropriate Execution Scenario + +Netwrix Auditor Netwrix Risk Insights runs on any computer in your environment. For example, you can +run the add-on on the computer where Netwrix Auditor is installed or on a remote server. Depending +on the execution scenario you choose, you have to define a different set of parameters. See the +[Define Parameters](/docs/auditor/10.7/addon/siemcefexport/parameters.md) topic for additional information. + +Netwrix suggests the following execution scenarios: + +| Scenario | Example | +| ---------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The add-on runs on the Auditor Server with the current user credentials. Activity Records are exported to a local folder. | C:\Add-ons\Netwrix_Auditor_CEF_Export_Addon.ps1 -OutputFolder C:\CEF_Export -OutputFolder C:\CEF_Export | +| The add-on runs on the Auditor Server with explicitly defined credentials. Activity Records are exported to a local folder. | C:\Add-ons\Netwrix_Auditor_CEF_Export_Addon.ps1 -OutputFolder C:\CEF_Export -NetwrixAuditorUserName enterprise\NAuser -NetwrixAuditorPassword NetwrixIsCool | +| The add-on exports Activity Records from a remote Auditor Server using current user credentials and writes data to a local folder. | C:\Add-ons\Netwrix_Auditor_CEF_Export_Addon.ps1 -OutputFolder C:\CEF_Export -NetwrixAuditorHost 172.28.6.15 | +| The add-on exports Activity Records from a remote Auditor Server using explicitly defined credentials and writes data to a local folder. | C:\Add-ons\Netwrix_Auditor_CEF_Export_Addon. ps1 -OutputFolder C:\CEF_Export - NetwrixAuditorHost 172.28.6.15 - NetwrixAuditorUserName enterprise\NAuser - NetwrixAuditorPassword NetwrixIsCool | + +For security reasons, Netwrix recommends running the script with current user credentials (skipping +user credentials). Create a special user account with permissions to both Auditor data and event log +and use it for running the script. diff --git a/docs/auditor/10.8/addon/siemcefexport/overview.md b/docs/auditor/10.8/addon/siemcefexport/overview.md new file mode 100644 index 0000000000..77a5276c5e --- /dev/null +++ b/docs/auditor/10.8/addon/siemcefexport/overview.md @@ -0,0 +1,50 @@ +--- +title: "SIEM Generic Integration for CEF Export" +description: "SIEM Generic Integration for CEF Export" +sidebar_position: 220 +--- + +# SIEM Generic Integration for CEF Export + +Netwrix Auditor Add-on for SIEM helps you to get most from your SIEM investment. This topic focuses +on the CEF Export SIEM solution. + +The add-on works in collaboration with Netwrix Auditor, supplying additional data that augments the +data collected by the SIEM solution. + +The add-on enriches your SIEM data with actionable context in human-readable format, including the +before and after values for every change and data access attempt, both failed and successful. +Aggregating data into a single audit trail simplifies analysis, makes your SIEM more cost effective, +and helps you keep tabs on your IT infrastructure. + +Implemented as a PowerShell script, this add-on facilitates the audit data transition from Netwrix +Auditor to the SIEM solution. All you have to do is provide connection details and schedule the +script for execution. + +On a high level, the add-on works as follows: + +1. The add-on connects to the Netwrix Auditor server and retrieves audit data using the Netwrix + Auditor Integration API. +2. The add-on processes Netwrix Auditor-compatible data (Activity Records) into log events that work + as input for the SIEM solution. Each event contains the user account, action, time, and other + details. +3. The add-on creates a special Windows event log named **Netwrix_Auditor_Integration** and stores + events there. These events are structured and ready for integration with the SIEM solution. + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +of the Activity Record and the capabilities of the Netwrix Auditor Integration API. + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| On... | Ensure that... | +| ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| The computer where the script will be executed | - PowerShell **3.0** or later must be installed. - .NET **4.5** or later must be installed. - Execution policy for powershell scripts is set to _"Unrestricted"_. Run Windows PowerShell as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the write permission on the script folder—the add-on creates a special .bin file with the last exported event. - The user running the script must be a member of the Domain Users group. - At least the first script run should be performed under the account with elevated privileges, as it will be necessary to create event log file and perform other required operations. | + +## Compatibility Notice + +Make sure to check your product version, and then review and update your add-ons and scripts +leveraging Netwrix Auditor Integration API. Download the latest add-on version in the Add-on Store. diff --git a/docs/auditor/10.8/addon/siemcefexport/parameters.md b/docs/auditor/10.8/addon/siemcefexport/parameters.md new file mode 100644 index 0000000000..cea8c1bd5b --- /dev/null +++ b/docs/auditor/10.8/addon/siemcefexport/parameters.md @@ -0,0 +1,26 @@ +--- +title: "Define Parameters" +description: "Define Parameters" +sidebar_position: 10 +--- + +# Define Parameters + +Before running or scheduling the add-on, you must define connection details: Auditor Server host, +user credentials, etc. Most parameters are optional, the script uses the default values unless +parameters are explicitly defined. You can skip or define parameters depending on your execution +scenario and security policies. See the +[Choose Appropriate Execution Scenario](deployment.md#choose-appropriate-execution-scenario) topic +for additional information. + +First, provide a path to your add-on followed by script parameters with their values. Each parameter +is preceded with a dash; a space separates a parameter name from its value. You can skip some +parameters—the script uses a default value unless a parameter is explicitly defined. If necessary, +modify the parameters as required. + +| Parameter | Default value | Description | +| ---------------------- | ------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| NetwrixAuditorHost | localhost:9699 | Assumes that the add-on runs on the computer hosting Auditor Server and uses default port **9699**. If you want to run the add-on on another machine, provide a name of the computer where Auditor Server resides (e.g., _172.28.6.15, EnterpriseNAServer, WKS.enterprise.local_). To specify a non-default port, provide a server name followed by the port number (e.g., _WKS.enterprise.local:9999_). | +| NetwrixAuditorUserName | Current user credentials | Unless specified, the add-on runs with the current user credentials. If you want the add-on to use another account to connect to Auditor Server, specify the account name in the _DOMAIN\username_ format. The account must be assigned the Global reviewer role in Auditor or be a member of the Netwrix Auditor **Client Users** group on the computer hosting Auditor Server. | +| NetwrixAuditorPassword | Current user credentials | Unless specified, the script runs with the current user credentials. Provide a different password if necessary. | +| OutputFolder | — | Provide a path to the folder to store CEF log files. This is a mandatory parameter. | diff --git a/docs/auditor/10.8/addon/siemcefexport/powershell.md b/docs/auditor/10.8/addon/siemcefexport/powershell.md new file mode 100644 index 0000000000..26a4c47f31 --- /dev/null +++ b/docs/auditor/10.8/addon/siemcefexport/powershell.md @@ -0,0 +1,40 @@ +--- +title: "Run the Add-On with PowerShell" +description: "Run the Add-On with PowerShell" +sidebar_position: 30 +--- + +# Run the Add-On with PowerShell + +First, provide a path to your add-on followed by script parameters with their values. Each parameter +is preceded with a dash; a space separates a parameter name from its value. You can skip some +parameters— the script uses a default value unless a parameter is explicitly defined. If necessary, +modify the parameters as required. + +Follow the steps to run add-on with PowerShell: + +**Step 1 –** On computer where you want to execute the add-on, start Windows PowerShell. + +**Step 2 –** Type a path to the add-on. Or simply drag and drop the add-on file in the console +window. + +**Step 3 –** Add script parameters. The console will look similar to the following: + +Windows PowerShell + +Copyright (C) 2014 Microsoft Corporation. All rights reserved. + +PS C:\Users\AddOnUser> C:\Add-ons\Netwrix_Auditor_CEF_Export_Add-on.ps1 -OutputFolder C:\CEF_Export +-NetwrixAuditorHost 172.28.6.15 + +**NOTE:** If the script path contains spaces (e.g., _C:\Netwrix Add-ons_), embrace it in double +quotes and insert the ampersand (**&**) symbol in front (e.g., & "_C:\Netwrix Add-ons_"). + +**Step 4 –** Hit **Enter**. + +Depending on the number of Activity Records stored in Auditor Audit Database execution may take a +while. Ensure the script execution completed successfully. The CEF log file will be created in the +destination folder. Note that details (or 'msg' in CEF terms) exceeding 16000 symbols are trimmed. + +Every time you run the script, Auditor makes a timestamp. The next time you run the script, it will +start retrieving new Activity Records. diff --git a/docs/auditor/10.8/addon/siemeventlogexport/_category_.json b/docs/auditor/10.8/addon/siemeventlogexport/_category_.json new file mode 100644 index 0000000000..41ebfdc8bb --- /dev/null +++ b/docs/auditor/10.8/addon/siemeventlogexport/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "SIEM Generic Integration for Event Log Export", + "position": 230, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/siemeventlogexport/automate.md b/docs/auditor/10.8/addon/siemeventlogexport/automate.md new file mode 100644 index 0000000000..a038856cad --- /dev/null +++ b/docs/auditor/10.8/addon/siemeventlogexport/automate.md @@ -0,0 +1,35 @@ +--- +title: "Automate Add-On Execution" +description: "Automate Add-On Execution" +sidebar_position: 40 +--- + +# Automate Add-On Execution + +To ensure you feed the most recent data to your SIEM solution, Netwrix recommends scheduling a daily +task for running the add-on. + +**Perform the following steps to create a scheduled task:** + +**Step 1 –** On the computer where you want to execute the add-on, navigate to **Task Scheduler**. + +**Step 2 –** On the **General** tab, specify a task name. Make sure the account that runs the task +has all necessary rights and permissions. + +**Step 3 –** On the **Triggers** tab, click **New** and define the schedule. This option controls +how often audit data is exported from Auditor and saved to event log. Netwrixrecommends scheduling a +daily task. + +**Step 4 –** On the **Actions** tab, click **New** and specify action details. Review the following +for additional information: + +| Option | Value | +| ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Action | Set to "_Start a program_". | +| Program/script | Input "_Powershell.exe_". | +| Add arguments (optional) | Add a path to the add-on in double quotes and specify add-on parameters. For example: -file "C:\Add-ons\Netwrix_Auditor_Event_Log_Export_Add-on.ps1" -NetwrixAuditorHost 172.28.6.15 | + +**Step 5 –** Save the task. + +After creating a task, wait for the next scheduled run or navigate to **Task Scheduler** and run the +task manually. To do this, right-click a task and click **Run**. diff --git a/docs/auditor/10.8/addon/siemeventlogexport/collecteddata.md b/docs/auditor/10.8/addon/siemeventlogexport/collecteddata.md new file mode 100644 index 0000000000..f54d6b1dc3 --- /dev/null +++ b/docs/auditor/10.8/addon/siemeventlogexport/collecteddata.md @@ -0,0 +1,19 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 50 +--- + +# Work with Collected Data + +Follow the steps to work with collected data: + +**Step 1 –** On the computer where you executed the add-on, navigate to **Start** > **All +Programs** > **Event Viewer**. + +**Step 2 –** In the **Event Viewer** dialog, navigate to **Event Viewer (local)** > **Applications +and Services Logs** > **Netwrix_Auditor_Integration log**. + +**Step 3 –** Review events. + +Now you can augment SIEM with data collected by Auditor. diff --git a/docs/auditor/10.8/addon/siemeventlogexport/deployment.md b/docs/auditor/10.8/addon/siemeventlogexport/deployment.md new file mode 100644 index 0000000000..5e6960cb4e --- /dev/null +++ b/docs/auditor/10.8/addon/siemeventlogexport/deployment.md @@ -0,0 +1,25 @@ +--- +title: "Choose Appropriate Execution Scenario" +description: "Choose Appropriate Execution Scenario" +sidebar_position: 20 +--- + +# Choose Appropriate Execution Scenario + +Auditor Add-on for the SIEM solution runs on any computer in your environment. For example, you can +run the add-on on the computer where Auditor is installed or on a remote server. Depending on the +execution scenario you choose, you have to define a different set of parameters. See the +[Define Parameters](/docs/auditor/10.7/addon/siemeventlogexport/parameters.md) topic for additional information. + +Netwrix suggests the following execution scenarios: + +| Scenario | Example | +| ------------------------------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The add-on runs on the Auditor Server with the current user credentials. Activity Records are exported to a local event log. | C:\Add-ons\Netwrix*Auditor_Event_Log* Export_Add-on.ps1 | +| The add-on runs on the Auditor Server with explicitly defined credentials. Activity Records are exported to a local event log. | C:\Add-ons\Netwrix*Auditor_Event_Log* Export_Add-on.ps1 -NetwrixAuditorUserName enterprise\NAuser -NetwrixAuditorPassword NetwrixIsCool | +| The add-on exports Activity Records from a remote Auditor Server using current user credentials and writes data to a local event log. | C:\Add-ons\Netwrix*Auditor_Event_Log* Export_Add-on.ps1 -NetwrixAuditorHost 172.28.6.15 | +| The add-on exports Activity Records from a remoteAuditor Server using explicitly defined credentials and writes data to a local event log. | C:\Add-ons\Netwrix*Auditor_Event_Log* Export_Add-on.ps1 -NetwrixAuditorHost 172.28.6.15 -NetwrixAuditorUserName enterprise\NAuser -NetwrixAuditorPassword NetwrixIsCool | + +For security reasons, Netwrix recommends running the script with current user credentials (skipping +user credentials). Create a special user account with permissions to both Auditor data and event log +and use it for running the script. diff --git a/docs/auditor/10.8/addon/siemeventlogexport/overview.md b/docs/auditor/10.8/addon/siemeventlogexport/overview.md new file mode 100644 index 0000000000..233e58844c --- /dev/null +++ b/docs/auditor/10.8/addon/siemeventlogexport/overview.md @@ -0,0 +1,47 @@ +--- +title: "SIEM Generic Integration for Event Log Export" +description: "SIEM Generic Integration for Event Log Export" +sidebar_position: 230 +--- + +# SIEM Generic Integration for Event Log Export + +Netwrix Auditor helps you protect and get most from your SIEM investment. The Event Log Export +Add-on works in collaboration with Netwrix Auditor , supplying additional data that augments the +data collected by SIEM. + +The add-on enriches your SIEM data with actionable context in human-readable format, including the +before and after values for every change and data access attempt, both failed and successful. +Aggregating data into a single audit trail simplifies analysis, makes your SIEM more cost effective, +and helps you keep tabs on your IT infrastructure. + +Implemented as a PowerShell script, this add-on facilitates the audit data transition from Netwrix +Auditor to SIEM. All you have to do is provide connection details and schedule the script for +execution. + +On a high level, the add-on works as follows: + +1. The add-on connects to the Auditor Server and retrieves audit data using the Integration API. +2. The add-on processes Netwrix Auditor-compatible data (Activity Records) into log events that work + as input for SIEM. Each event contains the user account, action, time, and other details. +3. The add-on creates a special Windows event log (Netwrix_Auditor_Integration) and stores events + there. These events are structured and ready for integration with SIEM. + +For more information on the structure of the Activity Record and the capabilities of the Integration +API, refer to the [Integration API](/docs/auditor/10.7/api/overview.md) topic. + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| On... | Ensure that... | +| ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| The computer where the script will be executed | - PowerShell **3.0** or later must be installed. - .NET **4.5** or later must be installed. - Execution policy for powershell scripts is set to _"Unrestricted"_. Run Windows PowerShell as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the write permission on the script folder—the add-on creates a special .bin file with the last exported event. - The user running the script must be a member of the Domain Users group. - At least the first script run should be performed under the account with elevated privileges, as it will be necessary to create event log file and perform other required operations. | + +## Compatibility Notice + +Make sure to check your product version, and then review and update your add-ons and scripts +leveraging the Integration API. Download the latest add- on version in the Add- on Store. See the +[Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information about schema updates. diff --git a/docs/auditor/10.8/addon/siemeventlogexport/parameters.md b/docs/auditor/10.8/addon/siemeventlogexport/parameters.md new file mode 100644 index 0000000000..e4adc18b9d --- /dev/null +++ b/docs/auditor/10.8/addon/siemeventlogexport/parameters.md @@ -0,0 +1,23 @@ +--- +title: "Define Parameters" +description: "Define Parameters" +sidebar_position: 10 +--- + +# Define Parameters + +Before running or scheduling the add-on, you must define connection details: Auditor Server host, +user credentials, etc. Most parameters are optional, the script uses the default values unless +parameters are explicitly defined. You can skip or define parameters depending on your execution +scenario and security policies. See [Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/siemeventlogexport/deployment.md) for +additional information. + +First provide a path to your add-on followed by script parameters with their values. Each parameter +is preceded with a dash; a space separates a parameter name from its value. You can skip some +parameters— the script uses a default value unless a parameter is explicitly defined. + +| Parameter | Default value | Description | +| ---------------------- | ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| NetwrixAuditorHost | localhost:9699 | Assumes that the add-on runs on the computer hosting Auditor Server and uses default port 9699. If you want to run the add- on on another machine, provide a name of the computer where Auditor Server resides (e.g., 172.28.6.15, EnterpriseNAServer, WKS.enterprise.local). To specify a non-default port, provide a server name followed by the port number (e.g., WKS.enterprise.local:9999). | +| NetwrixAuditorUserName | Current user credentials | Unless specified, the add-on runs with the current user credentials. If you want the add-on to use another account to connect to Auditor Server, specify the account name in the DOMAIN\username format. **NOTE:** The account must be assigned the **Global reviewer** role in Auditor or be a member of the **Netwrix Auditor Client Users** group on the computer hosting Auditor Server. | +| NetwrixAuditorPassword | Current user credentials | Unless specified, the script runs with the current user credentials. Provide a different password if necessary. | diff --git a/docs/auditor/10.8/addon/siemeventlogexport/powershell.md b/docs/auditor/10.8/addon/siemeventlogexport/powershell.md new file mode 100644 index 0000000000..4bb7b4194a --- /dev/null +++ b/docs/auditor/10.8/addon/siemeventlogexport/powershell.md @@ -0,0 +1,40 @@ +--- +title: "Run the Add-On with PowerShell" +description: "Run the Add-On with PowerShell" +sidebar_position: 30 +--- + +# Run the Add-On with PowerShell + +First, provide a path to your add-on followed by script parameters with their values. Each parameter +is preceded with a dash; a space separates a parameter name from its value. You can skip some +parameters— the script uses a default value unless a parameter is explicitly defined. If necessary, +modify the parameters as required. + +Follow the steps to run add-on with PowerShell: + +**Step 1 –** On computer where you want to execute the add-on, start Windows PowerShell. + +**Step 2 –** Type a path to the add-on. Or simply drag and drop the add-on file in the console +window. + +**Step 3 –** Add script parameters. The console will look similar to the following: + +Windows PowerShell + +Copyright (C) 2014 Microsoft Corporation. All rights reserved. + +PS C:\Users\AddOnUser> C:\Add-ons\Netwrix_Auditor_Event_Log_Export_Add-on.ps1 - NetwrixAuditorHost +172.28.6.15 + +**NOTE:** If the script path contains spaces (e.g., _C:\Netwrix Add-ons_), embrace it in double +quotes and insert the ampersand (**&**) symbol in front (e.g., & "_C:\Netwrix Add-ons_"). + +**Step 4 –** Hit **Enter**. + +Depending on the number of Activity Records stored in Netwrix Auditor Audit Database execution may +take a while. Ensure the script execution completed successfully. The Netwrix Auditor +**Integration** event log will be created and filled with events. + +By default, the Netwrix Auditor **Integration** event log size is set to **1GB**, and retention is +set to "_Overwrite events as needed_". diff --git a/docs/auditor/10.8/addon/solarwinds/_category_.json b/docs/auditor/10.8/addon/solarwinds/_category_.json new file mode 100644 index 0000000000..2e2193a982 --- /dev/null +++ b/docs/auditor/10.8/addon/solarwinds/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Solarwinds Log and Event Manager", + "position": 240, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/solarwinds/automate.md b/docs/auditor/10.8/addon/solarwinds/automate.md new file mode 100644 index 0000000000..9ff36c90df --- /dev/null +++ b/docs/auditor/10.8/addon/solarwinds/automate.md @@ -0,0 +1,35 @@ +--- +title: "Automate Add-On Execution" +description: "Automate Add-On Execution" +sidebar_position: 40 +--- + +# Automate Add-On Execution + +To ensure you feed the most recent data to your SIEM solution, Netwrix recommends scheduling a daily +task for running the add-on. + +**Perform the following steps to create a scheduled task:** + +**Step 1 –** On the computer where you want to execute the add-on, navigate to **Task Scheduler**. + +**Step 2 –** On the **General** tab, specify a task name. Make sure the account that runs the task +has all necessary rights and permissions. + +**Step 3 –** On the **Triggers** tab, click **New** and define the schedule. This option controls +how often audit data is exported from Auditor and saved to event log. Netwrixrecommends scheduling a +daily task. + +**Step 4 –** On the **Actions** tab, click **New** and specify action details. Review the following +for additional information: + +| Option | Value | +| ------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Action | Set to "_Start a program_". | +| Program/script | Input "_Powershell.exe_". | +| Add arguments (optional) | Add a path to the add-on in double quotes and specify add-on parameters. For example: -file "C:\Add-ons\Netwrix_Auditor_Add-on_for_Solarwinds_Log_and_Event_Manager.ps1" -NetwrixAuditorHost 172.28.6.15 | + +**Step 5 –** Save the task. + +After creating a task, wait for the next scheduled run or navigate to **Task Scheduler** and run the +task manually. To do this, right-click a task and click **Run**. diff --git a/docs/auditor/10.8/addon/solarwinds/collecteddata.md b/docs/auditor/10.8/addon/solarwinds/collecteddata.md new file mode 100644 index 0000000000..6f1f0a7795 --- /dev/null +++ b/docs/auditor/10.8/addon/solarwinds/collecteddata.md @@ -0,0 +1,21 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 50 +--- + +# Work with Collected Data + +Follow the steps to work with collected data: + +**Step 1 –** On the computer where you executed the add-on, navigate to **Start** > **All +Programs** > **Event Viewer**. + +**Step 2 –** In the Event Viewer dialog, navigate to **Event Viewer (local)** > **Applications and +Services Logs** >Netwrix Auditor Integration log. + +**Step 3 –** Review events. + +![EventLog_Export_Example](/images/auditor/10.7/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) + +Now you can augment Windows event log with data collected by the Auditor. diff --git a/docs/auditor/10.8/addon/solarwinds/deployment.md b/docs/auditor/10.8/addon/solarwinds/deployment.md new file mode 100644 index 0000000000..3008e20e89 --- /dev/null +++ b/docs/auditor/10.8/addon/solarwinds/deployment.md @@ -0,0 +1,25 @@ +--- +title: "Choose Appropriate Execution Scenario" +description: "Choose Appropriate Execution Scenario" +sidebar_position: 20 +--- + +# Choose Appropriate Execution Scenario + +Auditor Add-on for the SIEM solution runs on any computer in your environment. For example, you can +run the add-on on the computer where Auditor is installed or on a remote server. Depending on the +execution scenario you choose, you have to define a different set of parameters. See the +[Define Parameters](/docs/auditor/10.7/addon/solarwinds/parameters.md) topic for additional information. + +Netwrix suggests the following execution scenarios: + +| Scenario | Example | +| --------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| The add-on runs on the Netwrix Auditor Server with the current user credentials. Activity Records are exported to a local event log. | C:\Add-ons\Netwrix*Auditor_Add-on_for* Solarwinds_Log_and_Event_Manager.ps1 | +| The add-on runs on the Netwrix Auditor Server with explicitly defined credentials. Activity Records are exported to a local event log. | C:\Add-ons\Netwrix*Auditor_Add-on_for* Solarwinds_Log_and_Event_Manager.ps1 -NetwrixAuditorUserName enterprise\NAuser -NetwrixAuditorPassword NetwrixIsCool | +| The add-on exports Activity Records from a remote Netwrix Auditor Server using current user credentials and writes data to a local event log. | C:\Add-ons\Netwrix*Auditor_Add-on_for* Solarwinds_Log_and_Event_Manager.ps1-NetwrixAuditorHost 172.28.6.15 | +| The add-on exports Activity Records from a remote Netwrix Auditor Server using explicitly defined credentials and writes data to a local event log. | C:\Add-ons\Netwrix*Auditor_Add-on_for* Solarwinds_Log_and_Event_Manager.ps1-NetwrixAuditorHost 172.28.6.15 -NetwrixAuditorUserName enterprise\NAuser -NetwrixAuditorPassword NetwrixIsCool | + +For security reasons, Netwrix recommends running the script with current user credentials (skipping +user credentials). Create a special user account with permissions to both Auditor data and event log +and use it for running the script. diff --git a/docs/auditor/10.8/addon/solarwinds/integrationeventlog.md b/docs/auditor/10.8/addon/solarwinds/integrationeventlog.md new file mode 100644 index 0000000000..a6ef703655 --- /dev/null +++ b/docs/auditor/10.8/addon/solarwinds/integrationeventlog.md @@ -0,0 +1,40 @@ +--- +title: "Integration Event Log Fields" +description: "Integration Event Log Fields" +sidebar_position: 60 +--- + +# Integration Event Log Fields + +This section describes how the add-on fills in the Netwrix Auditor **Integration** event log fields +with data retrieved from Activity Records. + +The Activity Record structure is described in the +[Reference for Creating Activity Records](/docs/auditor/10.7/api/activityrecordreference.md)topic. + +| Event log field name | Filled in with value | Details | +| -------------------- | ----------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Source | **NA\_\_**`{Data Source Name}`** -OR- **Netwrix \_Auditor_Integration_API\_\_ | Depending on _SetDataSourceAsEventSource_ in-script parameter. | +| EventID | **`{Calculated by add-on}`** -OR- **0** | Depending on _GenerateEventId_ in-script parameter (calculation result also depends on _IncludeDataSourceToMakeEventId_ parameter — if _GenerateEventId_ = _True_). | +| Task Category | **`{DataSource ID}`** -OR- **1** | Depending on _SetDataSourceAsEventCategory_ in-script parameter. | + +See the [Define Parameters](/docs/auditor/10.7/addon/solarwinds/parameters.md) topic for additional information. + +EventData is filled in with data from the Activity Record fields as follows: + +| Entry in EventData | Activity Record field | +| ------------------ | --------------------- | +| DataSource | `{DataSource}` | +| Action | `{Action}` | +| Message | `{Action ObjectType}` | +| Where | `{Where}` | +| ObjectType | `{ObjectType}` | +| Who | `{Who}` | +| What | `{What}` | +| When | `{When}` | +| Workstation | `{Workstation}` | +| Details | `{Details}` | + +Details are filled in only if this Activity Record field is not empty. + +![eventlogexample_thumb_0_0](/images/auditor/10.7/addon/solarwinds/eventlogexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/addon/solarwinds/overview.md b/docs/auditor/10.8/addon/solarwinds/overview.md new file mode 100644 index 0000000000..ffc1351eee --- /dev/null +++ b/docs/auditor/10.8/addon/solarwinds/overview.md @@ -0,0 +1,50 @@ +--- +title: "Solarwinds Log and Event Manager" +description: "Solarwinds Log and Event Manager" +sidebar_position: 240 +--- + +# Solarwinds Log and Event Manager + +Netwrix Auditor Add-on for SIEM helps you to get most from your SIEM investment. This topic focuses +on the Solarwinds Log & Event Manager SIEM solution. + +The add-on works in collaboration with Netwrix Auditor, supplying additional data that augments the +data collected by the SIEM solution. + +The add-on enriches your SIEM data with actionable context in human-readable format, including the +before and after values for every change and data access attempt, both failed and successful. +Aggregating data into a single audit trail simplifies analysis, makes your SIEM more cost effective, +and helps you keep tabs on your IT infrastructure. + +Implemented as a PowerShell script, this add-on facilitates the audit data transition from Netwrix +Auditor to the SIEM solution. All you have to do is provide connection details and schedule the +script for execution. + +On a high level, the add-on works as follows: + +1. The add-on connects to the Netwrix Auditor server and retrieves audit data using the Netwrix + Auditor Integration API. +2. The add-on processes Netwrix Auditor-compatible data (Activity Records) into log events that work + as input for the SIEM solution. Each event contains the user account, action, time, and other + details. +3. The add-on creates a special Windows event log named **Netwrix_Auditor_Integration** and stores + events there. These events are structured and ready for integration with the SIEM solution. + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +of the Activity Record and the capabilities of the Netwrix Auditor Integration API. + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| On... | Ensure that... | +| ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| The computer where the script will be executed | - PowerShell **3.0** or later must be installed. - .NET **4.5** or later must be installed. - Execution policy for powershell scripts is set to _"Unrestricted"_. Run Windows PowerShell as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the write permission on the script folder—the add-on creates a special .bin file with the last exported event. - The user running the script must be a member of the Domain Users group. - At least the first script run should be performed under the account with elevated privileges, as it will be necessary to create event log file and perform other required operations. | + +## Compatibility Notice + +Make sure to check your product version, and then review and update your add-ons and scripts +leveraging Netwrix Auditor Integration API. Download the latest add-on version in the Add-on Store. diff --git a/docs/auditor/10.8/addon/solarwinds/parameters.md b/docs/auditor/10.8/addon/solarwinds/parameters.md new file mode 100644 index 0000000000..d3fa58c0b1 --- /dev/null +++ b/docs/auditor/10.8/addon/solarwinds/parameters.md @@ -0,0 +1,22 @@ +--- +title: "Define Parameters" +description: "Define Parameters" +sidebar_position: 10 +--- + +# Define Parameters + +Before running or scheduling the add-on, you must define connection details: Auditor Server host, +user credentials, etc. Most parameters are optional, the script uses the default values unless +parameters are explicitly defined. You can skip or define parameters depending on your execution +scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/solarwinds/deployment.md) topic +for additional information. + +| Parameter | Default value | Description | +| --------------------------------- | ------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **Connection to Netwrix Auditor** | | | +| NetwrixAuditorHost | localhost:9699 | Assumes that the add-on runs on the computer hosting the Auditor Server and uses default port 9699. If you want to run the add-on on another machine, provide a name of the computer where Auditor Server resides (e.g., 172.28.6.15, EnterpriseNAServer, WKS.enterprise.local). To specify a non-default port, provide a server name followed by the port number (e.g., WKS.enterprise.local:9999). | +| NetwrixAuditorUserName | Current user credentials | Unless specified, the add-on runs with the current user credentials. If you want the add-on to use another account to connect to Auditor Server, specify the account name in the _DOMAIN\username_ format. The account must be assigned the Global reviewer role in Auditor or be a member of the Netwrix Auditor **Client Users** group on the computer hosting Auditor Server. | +| NetwrixAuditorPassword | Current user credentials | Unless specified, the script runs with the current user credentials. Provide a different password if necessary. | + +## In-Script Parameters diff --git a/docs/auditor/10.8/addon/solarwinds/powershell.md b/docs/auditor/10.8/addon/solarwinds/powershell.md new file mode 100644 index 0000000000..d99b09e4c5 --- /dev/null +++ b/docs/auditor/10.8/addon/solarwinds/powershell.md @@ -0,0 +1,66 @@ +--- +title: "Run the Add-On with PowerShell" +description: "Run the Add-On with PowerShell" +sidebar_position: 30 +--- + +# Run the Add-On with PowerShell + +First, provide a path to your add-on followed by script parameters with their values. Each parameter +is preceded with a dash; a space separates a parameter name from its value. You can skip some +parameters— the script uses a default value unless a parameter is explicitly defined. If necessary, +modify the parameters as required. + +**To run the script with PowerShell:** + +**Step 1 –** On computer where you want to execute the add-on, start **Windows PowerShell**. + +**Step 2 –** Type a path to the add-on. Or simply drag and drop the add-on file in the console +window. + +**Step 3 –** Add script parameters. The console will look similar to the following: + +Windows PowerShell + +Copyright (C) 2014 Microsoft Corporation. All rights reserved. + +PS C:\Users\AddOnUser> C:\Add-ons\Netwrix_Auditor_Add-on_for_Solarwinds_Log_and_Event_Manager.ps1 - +NetwrixAuditorHost 172.28.6.15 + +**NOTE:** If the script path contains spaces (e.g., _C:\Netwrix Add-ons_), embrace it in double +quotes and insert the ampersand (**&**) symbol in front (e.g., & "_C:\Netwrix Add-ons_"). + +**Step 4 –** Hit **Enter**. + +Depending on the number of Activity Records stored in Netwrix Auditor Audit Database execution may +take a while. Ensure the script execution completed successfully. The Netwrix Auditor +**Integration** event log will be created and filled with events. + +By default, the Netwrix Auditor **Integration** event log size is set to 1GB, and retention is set +to "_Overwrite events as needed_". See the [Integration Event Log Fields](/docs/auditor/10.7/addon/solarwinds/integrationeventlog.md) +topic for additional information. + +**NOTE:** Event records with more than 30,000 characters length will be trimmed. + +At the end of each run, the script creates the +**Netwrix_Auditor_Event_Log_Export_Add-on_EventIDs.txt** file. It defines mapping between the +Activity Records and related Event IDs . You can use this file to track possible duplicates of Event +IDs created at each script execution. Duplicates, if any, are written to the +**Netwrix_Auditor_Event_Log_Export_Add-on_EventIDsDuplicates.txt** file. + +Similarly, the add-on also creates the **Netwrix_Auditor_Event_Log_Export_Add-on_CategoriesIDs.txt** +file that defines mapping between the Data Source and related Category ID. + +## Applying Filters + +Every time you run the script, Auditor makes a timestamp. The next time you run the script, it will +start retrieving new Activity Records. Consider the following: + +- By default, the add-on does not apply any filters when exporting Activity Records. If you are + running the add-on for the first time (there is no timestamp yet) with no filters, it will export + Activity Records for the last month only. This helps to optimize solution performance during the + first run. At the end of the first run, the timestamp will be created, and the next run will start + export from that timestamp. + +- However, if you have specified a time period for Activity Records to be exported, then this filter + will be applied at the add-on first run and the runs that follow. diff --git a/docs/auditor/10.8/addon/splunk/_category_.json b/docs/auditor/10.8/addon/splunk/_category_.json new file mode 100644 index 0000000000..27a5e476cb --- /dev/null +++ b/docs/auditor/10.8/addon/splunk/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Splunk", + "position": 250, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/addon/splunk/collecteddata.md b/docs/auditor/10.8/addon/splunk/collecteddata.md new file mode 100644 index 0000000000..4e298e671d --- /dev/null +++ b/docs/auditor/10.8/addon/splunk/collecteddata.md @@ -0,0 +1,88 @@ +--- +title: "Work with Collected Data" +description: "Work with Collected Data" +sidebar_position: 20 +--- + +# Work with Collected Data + +Review the examples below for the possible scenarios on how to work with collected data. + +## Example 1: Search by Index + +Follow the steps to search by index: + +**Step 1 –** Navigate to the Search page of the add-on or Search & Reporting Splunk app + +**Step 2 –** Enter the search command: + +index=`` + +for example: + +index=netwrix + +**Step 3 –** Press the Last 24 hours button and choose All time time range. + +**Step 4 –** Press the search button; you should see list of the events currently indexed in Splunk. + +**Step 5 –** Click on the arrow button next to any of the returned event to expand the list of +parsed fields and confirm that fields are populated properly. + +If you do not see any fields, make sure that you are running the search in Smart or Verbose mode. + +Follow the steps to get all user account creation events from Microsoft Entra ID (formerly Azure AD) +ports . + +**Step 1 –** Navigate to the **Search** page of the add-on or **Search & Reporting** Splunk app + +**Step 2 –** Enter the search command: + +index=netwrix Action=”Added” ObjectType=”user” + +| table Who Action ObjectType What Where + +**Step 3 –** Press the Last 24 hours button and choose All time time range. + +## Example 2: Use Netwrix Auditor Fields in Index Search + +Follow the steps to use Auditor fields in index search: + +**Step 1 –** Navigate to the **Search** page of the add-on or **Search & Reporting** Splunk app + +**Step 2 –** Enter the search command: + +| datamodel `` search + +| search sourcetype=netwrix + +for example: + +| datamodel Authentication search + +| search sourcetype=netwrix + +**Step 3 –** Press the Last 24 hours button and choose All time time range. + +**Step 4 –** Press the search button; you should see list of the events currently indexed in Splunk +and mapped to the selected data model. + +**Step 5 –** Click on the arrow button next to any of the returned event to expand the list of +parsed fields and confirm that fields are populated properly. + +## Example 3: Use CIM Data Model Search and Data Model Fields + +Follow the steps to get all events for account deletion: + +**Step 1 –** Navigate to the Search page of the add-on or Search & Reporting Splunk app + +**Step 2 –** Enter the search command: + +| datamodel Change search + +| search sourcetype=netwrix All_Changes.action=”deleted” + +| table All_Changes.vendor_product All_Changes.action All_Changes.src All_Changes.dest +All_Changes.user All_Changes.object All_Changes.object_attrs + +**Step 3 –** Press the Last 24 hours button and choose All time time range. diff --git a/docs/auditor/10.8/addon/splunk/datamodelmap.md b/docs/auditor/10.8/addon/splunk/datamodelmap.md new file mode 100644 index 0000000000..42e4e3954c --- /dev/null +++ b/docs/auditor/10.8/addon/splunk/datamodelmap.md @@ -0,0 +1,29 @@ +--- +title: "CIM Data Model Mapping" +description: "CIM Data Model Mapping" +sidebar_position: 30 +--- + +# CIM Data Model Mapping + +The Splunk Common Information Model (CIM) is installed with an add-on and adds a set of data models +that allow data normalization to simplify search. + +The CIM contains a number of standard data models that can be used for search. Each of them has +predefined set of standard fields common for different data sources. + +Netwrix Auditor Add-on for Splunk will map some of the Activity Records that match certain scenario +to the respective CIM data models. + +| Criteria | Data model | Description | +| ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------ | ---------------------------------------------- | +| DataSource IN ("Microsoft Entra ID", "Logon Activity", "SQL Server", "VMware") Action="Successful Logon" | Authentication > Authentication > Successful_Authentication | Successful login events | +| DataSource IN ("Microsoft Entra ID", "Logon Activity", "SQL Server", "VMware") Action="Failed Logon" | Authentication > Authentication > Failed\_ Authentication | Failed login events | +| DataSource IN ("Active Directory", "Microsoft Entra ID", "Exchange\*") Action="Added" ObjectType IN ("user", "computer", "inetorgperson", "service principal", "mail contact", "mail user") | Change > All_Changes > Account Management > Created Accounts | Account creation events | +| DataSource IN ("Active Directory", "Microsoft Entra ID", "Exchange\*") Action IN ("Modified", "Moved") ObjectType IN ("user", "computer", "inetorgperson", "service principal", "mail contact", "mail user") | Change > All_Changes > Account Management > Updated Accounts | Account update events | +| DataSource IN ("Active Directory", "Microsoft Entra ID", "Exchange\*") Action="Removed" ObjectType IN ("user", "computer", "inetorgperson", "service principal", "mail contact", "mail user") | Change > All_Changes > Account Management > Deleted Accounts | Account deletion events | +| DataSource IN ("Active Directory", "Microsoft Entra ID", "Exchange\*", "File Servers") Action IN ("Added", "Modified", "Moved", "Removed") NOT ObjectType IN ("user", "computer", "inetorgperson", "service principal", "mail contact", "mail user") | Change > All_Changes | All other – not related to accounts – changes | +| DataSource IN ("Active Directory", "Microsoft Entra ID", "Exchange\*") ObjectType IN ("user", "computer", "inetorgperson", "service principal", "mail contact", "mail user") is\_ lockout=1 | Change > All_Changes > Account Management > Locked Accounts | Account lockout events | +| DataSource IN ("Active Directory", "Microsoft Entra ID", "Exchange\*") Action IN ("Added", "Modified", "Removed") is_audit=1 | Change > All_Changes > Auditing Changes | Changes to audit settings or policies | +| DataSource="Exchange\*" ObjectType="Mailbox Item" Action IN ("Sent", "Removed") | Email > All Email | Information related to sent or received emails | +| DataSource="File Server" Action IN ("Added". "Modified", "Moved", "Removed", "Renamed") ObjectType IN ("file", "folder") | Endpoint > Filesystem | Changes to file shares | diff --git a/docs/auditor/10.8/addon/splunk/deployment.md b/docs/auditor/10.8/addon/splunk/deployment.md new file mode 100644 index 0000000000..72b32fadee --- /dev/null +++ b/docs/auditor/10.8/addon/splunk/deployment.md @@ -0,0 +1,190 @@ +--- +title: "Deployment Procedure" +description: "Deployment Procedure" +sidebar_position: 10 +--- + +# Deployment Procedure + +## Prepare Netwrix Auditor for Data Processing + +In the Netwrix Auditor client, go to the Integrations section and verify Integration API settings: + +1. Make sure the Leverage Integration API is switched to ON. +2. Check the TCP communication port number – default is 9699. + +See the +[Configure Integration API Settings](/docs/auditor/10.7/api/prerequisites.md#configure-integration-api-settings)[Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md)topic +for additional information. + +## Download the Add-on + +Follow the steps to download the add-on. + +**Step 1 –** Download the distribution package Netwrix_Auditor_Add-on_for_Splunk.zip from the +following web page: +[https://www.netwrix.com/add-on_for_splunk.html](https://www.netwrix.com/add-on_for_splunk.html) + +**Step 2 –** Unpack it to a folder on the computer from which you can access Splunk Web. + +## Install the Add-on + +Follow the steps to install the add-on. + +**Step 1 –** Login to Splunk Web using Splunk Administrator account. + +**Step 2 –** Open the Splunk Apps settings in any of the following ways: + +- On the main Explore Splunk Enterprise screen, click the gear icon at the top of the left **Apps** + panel: + +![config](/images/auditor/10.7/addon/splunk/config.webp) + +- When on any other screen, you can expand the drop-down list at the top panel and choose Manage + Apps: + + ![searchreporting](/images/auditor/10.7/addon/splunk/searchreporting.webp) + +**Step 3 –** On the **Apps** screen, click Install app from file: + +![installapp](/images/auditor/10.7/addon/splunk/installapp.webp) + +**Step 4 –** Click Choose File, navigate to the folder where you unpacked the add-on package, select +the "TA-netwrix-auditor-add-on-for-splunk-1.6.1.spl" file and click Open. + +**Step 5 –** Click Upload. + +![uploadapp](/images/auditor/10.7/addon/splunk/uploadapp.webp) + +The **Upload** button text will change to "_Processing…_". When the installation is complete, you +will see an invitation to reboot Splunk. This is optional unless you plan to create index +configuration in the add-on folder. In addition, Splunk might not display add-on icon until restart. + +The installed add-on should appear in the Apps list in Splunk. + +![searchreportingapp](/images/auditor/10.7/addon/splunk/searchreportingapp.webp) + +## Prepare for Using Netwrix Auditor Integration API + +Make sure you have the following information required for the add-on configuration: + +- User name and password for the account you will be using to access the Netwrix Auditor Integration + API +- Netwrix Auditor Integration API host name or IP address +- TCP port used by Integration API (default port is 9699) + +## Configure the Add-on + +Follow the steps to configure the add-on. + +**Step 1 –** From the Explore Splunk Enterprise or from the drop-down list on the top Splunk panel, +open Netwrix Auditor add-on for Splunk and navigate to the Configuration page: + +![configuration](/images/auditor/10.7/addon/splunk/configuration.webp) + +**Step 2 –** Configure the account: + +1. On the Configuration page, open the Account section. + + ![addaccount](/images/auditor/10.7/addon/splunk/addaccount.webp) + +2. Click **Add** and populate the fields: + + - For the Account name provide a unique name for the account that will be visible to the add-on + users + - In the Username field insert the user name of the account that will be used to access Netwrix + Auditor Integration API. If a domain account is used, make sure to use the _DOMAIN\User_ + format. + - In the Password field insert the account password + +3. Click the Add button. The added account should appear in the list: + + ![configurationaccount](/images/auditor/10.7/addon/splunk/configurationaccount.webp) + +**Step 3 –** Configure the Netwrix Auditor Integration API location: + +1. On the Configuration page open the Add-on Settings section: + + ![configurationaddonsettings](/images/auditor/10.7/addon/splunk/configurationaddonsettings.webp) + +2. In the Netwrix Auditor API location field provide the host name or IP address of your Netwrix + Auditor Integration API host (Netwrix Auditor server). +3. In the Netwrix Auditor API port field provide the TCP port used by Netwrix Auditor Integration + API; by default it is 9699. + + **NOTE:** Make sure that your Netwrix Auditor Integration API is configured to use HTTPS + protocol. + +4. Press the **Save** button. + +## Configure Data Input + +Splunk uses indexes to store data and manage access to it. While you can send Netwrix Auditor data +to one of the existing indexes it is strongly recommended to create a separate index. + +Follow the steps to configure data input. + +**Step 1 –** Create a new index to store data from Netwrix Auditor: + +1. In Splunk expand the Settings drop-down menu and click on the Indexes option under the DATA + section. +2. Press the **New Index** button to create an index. +3. Provide the new index parameters: + + - Index name — this parameter will be used in the search. + - App — points where the index configuration is stored; Choosing **Search & Reporting** is + recommended. + - Check if you need to provide custom location for the Home, Cold and Thawed paths. By default + they are in the Splunk program folder. + - Set the Max Size of Entire Index to match the expected volume of logs from Netwrix Auditor. + - By default, Splunk deletes old events when the size of the index exceeds its max value. If you + want Splunk to archive them instead specify the Frozen Path. + + Please refer to the + [Managing Indexers and Clusters of Indexers](https://docs.splunk.com/Documentation/Splunk/8.1.0/Indexer/Aboutmanagingindexes) + manual for additional details on indexes. + +**Step 2 –** Create a data input: + +1. Open Netwrix Auditor add-on for Splunk and go to the **Inputs** section. + + ![inputs](/images/auditor/10.7/addon/splunk/inputs.webp) + +2. Click Create New Input. + + ![addapi](/images/auditor/10.7/addon/splunk/addapi.webp) + +3. Provide the new data input parameters: + + - Name of the new data input. + - Set the interval (period) for Splunk to periodically request new data from Netwrix Auditor + Integration API. Recommended period is 300 seconds. + - Select the index that will be used to store the collected data. + - Select account with access to Netwrix Auditor Integration API. + - If not following the upgrade procedure, keep the default value for Continuation Mark. + + **CAUTION:** This field should never be empty. + + - Checkpoint type specifies location for continuation mark data. File is the recommended option. + Do not change this setting unless advised accordingly by your Splunk Administrator. + +4. Click the **Add** button. + +## Upgrade Procedure + +If you were using the older (Windows event log-based) version of Netwrix Auditor add-on for Splunk +and plan to migrate to the new version, remember to take the additional steps described below. They +will help to ensure imported data consistency and avoid excessive operations. Otherwise, the new +add-on will pull Netwrix Auditor’s activity data that had already been imported into your Splunk +system by the old add-on. + +Follow the steps to upgrade the add-on. + +**Step 1 –** Stop the old version of Netwrix Auditor add-on for Splunk. You can do this with the +Windows Scheduled Tasks. + +**Step 2 –** Locate the Netwrix_Auditor_Activity_Records_to_Event_Log_Add-on_Cookie.bin file in the +installation directory of the old add-on for Splunk. Store that file content to a safe location. + +**Step 3 –** Install the new add-on. When prompted for Continuation Mark, enter that +Netwrix*Auditor* Activity_Records_to_Event_Log_Add-on_Cookie.bin file content. diff --git a/docs/auditor/10.8/addon/splunk/overview.md b/docs/auditor/10.8/addon/splunk/overview.md new file mode 100644 index 0000000000..c738d44361 --- /dev/null +++ b/docs/auditor/10.8/addon/splunk/overview.md @@ -0,0 +1,122 @@ +--- +title: "Splunk" +description: "Splunk" +sidebar_position: 250 +--- + +# Splunk + +Netwrix Auditor is a visibility platform for user behavior analysis and risk mitigation that enables +control over changes, configurations and access in hybrid IT environments to protect data regardless +of its location. The platform provides security analytics to detect anomalies in user behavior and +investigate threat patterns before a data breach occurs. + +Splunk is a log management solution that enables search and visualization of data collected from the +company's IT assets. + +Netwrix Auditor add-on for Splunk works as an integration solution for both products: it instructs +Splunk to pull the audit data collected by Netwrix Auditor and stored to the audit databases in +Netwrix-compatible form (activity records). This data is saved in the event log format recognized by +Splunk and also mapped to the CIM data models — for normalization and better correlation with other +log sources. With that automated flow, you can use Splunk Enterprise as your single pane of glass +for aggregated data analysis. This makes the IT infrastructure monitoring more efficient and helps +you keep tabs on your IT assets. + +The major benefits- are: + +- Aggregated audit data from the variety of sources available from a single console +- Efficient search through the audit data + +## Compatibility notice + +Netwrix Auditor add-on for Splunk is compatible with the following products: + +- Splunk Enterprise 8.0.6 and 8.2.1 +- Netwrix Auditor 9.96 and above + +## Supported data sources + +Netwrix Auditor add-on for Splunk supports and provides CIM data models mapping for the following +Netwrix Auditor data sources: + +| Netwrix Auditor data source | CIM Data Model | +| --------------------------- | --------------------- | +| Active Directory | Authentication Change | +| Exchange | Change Email | +| Exchange Online | Change Email | +| File Servers | Change Endpoint | +| Microsoft Entra ID | Authentication Change | +| SharePoint | Change | +| SharePoint Online | Change | +| SQL Server | Authentication Change | +| VMware | Authentication Change | +| Windows Server | Change | + +See [CIM Data Model Mapping](/docs/auditor/10.7/addon/splunk/datamodelmap.md) for details. + +## How It Works + +Netwrix Auditor add-on for Splunk allows pulling activity records data from the Netwrix Auditor via +its Integration API. Data is retrieved in JSON format, transferred over HTTPS and stored to Splunk +index. + +![diagram](/images/auditor/10.7/addon/splunk/diagram.webp) + +To learn more about Netwrix Auditor activity records, see the +[Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) topic for additional information. + +For this data to be provided to Splunk, it adds a new Splunk source type, performing additional data +parsing and field extraction. The audit data is also mapped into the Common Information Model (CIM) +data models — for normalization and better correlation with other log sources. + +On a high level, the solution works in the following steps. + +**Step 1 –** An IT administrator configures Netwrix Auditor Integration API settings to enable +sharing Netwrix Auditor data with external applications. + +**Step 2 –** On the Splunk side, the IT administrator installs and configures the add-on, providing +the necessary parameters for its operation: Netwrix Auditor Integration API host and account to +access it with sufficient access rights. + +**Step 3 –** The IT administrator prepares a Splunk index to store the data that will be collected +from Netwrix Auditor. + +**Step 4 –** Splunk starts pulling activity records via Netwrix Auditor Integration API by sending +POST requests with Continuation Mark. Data is received in JSON format and stored in the specified +Splunk index — to make it available for further search by Splunk. + +**Step 5 –** When search is performed, Splunk attempts to extract additional information available +in the audit data and to map it to CIM data models. + +User opens Splunk Enterprise to work with collected data: + +- Search for the activity records in the specified index or data model +- Create reports and dashboards in Splunk + +Report and dashboard creation in Splunk is outside the scope of this guide. + +### Add-on delivery package + +Netwrix Auditor add-on for Splunk delivery package is a ZIP archive that includes the following +files: + +| File name | Description | +| ----------------------------------------------- | ------------------------------------------ | +| ta-netwrix-auditor-add-on-for- splunk-1.6.1.spl | Netwrix Auditor add-on for Splunk package. | + +## Prerequisites + +Before running the add-on, ensure that all the necessary components and policies are configured as +follows: + +| On... | Ensure that... | +| ------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Auditor Server side | - Auditor version is 9.8 or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| Splunk Enterprise | - Splunk version is 8.0.6 or higher. - Splunk Common Information Model add-on version 4.17.0 or higher. - Splunk Administrator or any other account with permissions to add add-ons, create indexes and data inputs. - The TCP 9699 port must be open on firewalls between Splunk and Netwrix Auditor server. | + +### Considerations and limitations + +- If the information is not available in the activity record received from Auditor, it will also not + be available in Splunk. +- CIM might not have data models for some of the activity records received from Auditor; such + information can only be accessed in Splunk using search by index. diff --git a/docs/auditor/10.8/addon/splunk/troubleshooting.md b/docs/auditor/10.8/addon/splunk/troubleshooting.md new file mode 100644 index 0000000000..ce843940f6 --- /dev/null +++ b/docs/auditor/10.8/addon/splunk/troubleshooting.md @@ -0,0 +1,38 @@ +--- +title: "Maintenance and Troubleshooting" +description: "Maintenance and Troubleshooting" +sidebar_position: 40 +--- + +# Maintenance and Troubleshooting + +Splunk records service logs to the \_internal index. Follow the steps to troubleshoot data input +from Netwrix Auditor API: + +**Step 1 –** Navigate to the Search page of the add-on or Search & Reporting Splunk app. + +**Step 2 –** Enter the search command: + +``` +index=_internal "" +``` + +For example: + +``` +index=_internal "" +``` + +**Step 3 –** Press the Last 24 hours button and choose Last 15 minutes time range. + +**Step 4 –** Press the search button; you should see list of the events with Splunk service +information. + +When the add-on operates normally there should be no errors and the following types of events should +appear regularly: + +- Regular events from _\*splunk\ta-netwrix-auditor-add-on-for-splunk_netwrix_auditor_api_input_\*\_ + source with POST requests to the Netwrix Auditor API. +- Regular events from _\*splunk\ta-netwrix-auditor-add-on-for-splunk_netwrix_auditor_api_input_\*\_ + source with checkpoint update with new ContinuationMarks received from Netwrix Auditor API. +- Events from _\*\splunk\metrics.log_ source with information about indexed volumes. diff --git a/docs/auditor/10.8/admin/_category_.json b/docs/auditor/10.8/admin/_category_.json new file mode 100644 index 0000000000..6e431b3091 --- /dev/null +++ b/docs/auditor/10.8/admin/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Administration", + "position": 50, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/alertsettings/_category_.json b/docs/auditor/10.8/admin/alertsettings/_category_.json new file mode 100644 index 0000000000..c2c7f35f4f --- /dev/null +++ b/docs/auditor/10.8/admin/alertsettings/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Alerts", + "position": 70, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/alertsettings/create/_category_.json b/docs/auditor/10.8/admin/alertsettings/create/_category_.json new file mode 100644 index 0000000000..3183dd1bec --- /dev/null +++ b/docs/auditor/10.8/admin/alertsettings/create/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Create Alerts", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "create" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/alertsettings/create/create.md b/docs/auditor/10.8/admin/alertsettings/create/create.md new file mode 100644 index 0000000000..7435171975 --- /dev/null +++ b/docs/auditor/10.8/admin/alertsettings/create/create.md @@ -0,0 +1,39 @@ +--- +title: "Create Alerts" +description: "Create Alerts" +sidebar_position: 20 +--- + +# Create Alerts + +To create new alerts and modify existing alerts, the account used to connect to Auditor Server must +be assigned the _Global administrator_ or _Global reviewer_ role in the product. + +To set up a response action, this account must also be a member of the local _Administrators_ group +on Auditor Server. + +See the +[](https://helpcenter.netwrix.com/Roles/Role_Based_Access.html)[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) +topic for additional information. + +## Create a Custom Alert + +Follow the steps to create a custom alert. + +**Step 1 –** On the main Auditor page, click the Alert settings link under the Configuration section +on the left: + +![configuration_tile](/images/auditor/10.7/admin/alertsettings/configuration_tile.webp) + +See the [Navigation](/docs/auditor/10.7/admin/navigation/overview.md) topic for additional information. + +**Step 2 –** In the All Alerts window, click Add. Configure the following: + +| Option | Description | +| --------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General |
  • Specify a name and enter the description for the new alert.
    **NOTE:** Make sure that the Send alert when the action occurs option is enabled. Otherwise, the new alert will be disabled.
  • Email subject — Specify the subject of the email. It is possible to insert variables into the subject line. You can choose between "_Who_", "_What_" and"_Where_" variables. Consider the following:
  • Only one variable of each type can be added
  • You need to cut off the full path from the object names in "_What_" alert and leave only the actual name. For example, "_\com\Corp\Users\Departments\IT\Username_" should be just "_Username_". If you want to get back to the default Email subject line, click the **Restore Default** button.
  • Apply tags — Create a set of tags to more efficiently identify and sort your alerts. Select Edit under Apply tags to associate tags with your alert. Later, you can quickly find an alert of interest using Filter by tags in the upper part of the All Alerts window. To see a full list of alerts ever created in the product, navigate to Settings > Tags.
| +| Recipients | Select alert recipients. Click Add Recipient and select alert delivery type:
  • Email — Specify the email address where notifications will be delivered. You can add as many recipients as necessary.
    **_RECOMMENDED:_** click **Send Test Email**. The system will send a test message to the specified email address and inform you if any problems are detected.
  • SMS-enabled email — Netwrix uses the sms gateway technology to deliver notifications to a phone number assigned to a dedicated email address. Specify email address to receive SMS notifications. Make sure that your carrier supports sms to email gateway technology.
| +| Filters | Apply a set of filters to narrow events that trigger a new alert. Alerts use the same interface and logic as search.
  • Filter — Select general type of filter (e.g., "Who", "Data Source", "Monitoring plan", etc.)
  • Operator — Configure match types for selected filter (e.g., "Equals", "Does not contain", etc.)
  • Value — Specify filter value. See the [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) topic for additional information on how to create and modify filters. The Filters section contains required fields highlighted with red. Once you completed all filters, click Preview on the right pane to see search-based list of events that will trigger your alert. ![preview_thumb_0_0](/images/auditor/10.7/admin/alertsettings/preview_thumb_0_0.webp)
| +| Thresholds | If necessary, enable threshold to trigger the new alert. In this case, a single alert will be sent instead of many alerts. This can be helpful when Auditor detects many activity records matching the filters you specified. Slide the switch under the Send alert when the threshold is exceeded option and configure the following:
  • Limit alerting to activity records with the same... — Select a filter in the drop-down list (e.g., who). Note that, Auditor will search for activity records with the same value in the filter you selected. Only alerts grouped by the Who parameter can be included in the Behavior Anomalies list. Mind that in this case, the product does not summarize risk scores and shows the value you associated with this alert. This may significantly reduce risk score accuracy.
  • Send alert for `<...>` activity records within `<...>` seconds — Select a number of changes that occurred in a given period (in seconds). For example, you want to receive an alert on suspicious activity. You select "_Action_" in the Limit alerting to activity records with the same list and specify a number of actions to be considered an unexpected behavior: _1000_ changes in _60_ seconds. When the selected threshold exceeded, an alert will be delivered to the specified recipients: one for every 1000 removals in 60 seconds, one for every 1000 failed removals in 60 seconds. So you can easily discover what is going on in your IT infrastructure.
| +| Risk Score |
  • Slide the switch to On under Include this alert in Behavior Anomalies assessment. See the [Behavior Anomalies](/docs/auditor/10.7/admin/behavioranomalies/overview.md) topic for additional information.
  • Associate a risk score with the alert — Assign a risk score based on the type of anomaly and the severity of the deviation from the normal behavior. An action's risk score is a numerical value from 1 (Low) to 100 (High) that designates the level of risk with 100 being the riskiest and 1 the least risky. These are general guidelines you can adopt when setting a risk score:
  • High score — Assign to an action that requires your immediate response (e.g., adding account to a privileged group). Configure a non-threshold alert with email recipients.
  • Above medium score — Assign to a repetitive action occurring during a short period of time. While a standalone action is not suspicious, multiple actions merit your attention (e.g., mass deletions from a SharePoint site). Configure a threshold-based alert with email recipients.
  • Low score — Assign to an infrequent action. While a single action is safe, multiple occurrences aggregated over a long period of time may indicate a potential in-house bad actor (e.g., creation of potentially harmful files on a file share). Configure a non-threshold alert, email recipients are optional but make sure to regularly review the Behavior Anomalies dashboard.
  • Low score — Assign to a repetitive action that does not occur too often (e.g., rapid logons). Multiple occurrences of action sets may indicate a potential in-house bad actor or account compromise. Configure a threshold-based alert, email recipients are optional but make sure to regularly review the Behavior Anomalies dashboard.
| +| Response Action | You can instruct Auditor to perform a response action when the alert occurs — for example, start an executable file (command, batch file, or other) that will remediate the issue, or open a ticket with the help desk, and so on. For that, you will need an executable file stored locally on the Auditor server. Slide the switch to turn the feature **ON**, and see the [Configure a Response Action for Alert](/docs/auditor/10.7/admin/alertsettings/responseaction.md) topic for additional information. | diff --git a/docs/auditor/10.8/admin/alertsettings/create/createeventlog.md b/docs/auditor/10.8/admin/alertsettings/create/createeventlog.md new file mode 100644 index 0000000000..6edaf2eed4 --- /dev/null +++ b/docs/auditor/10.8/admin/alertsettings/create/createeventlog.md @@ -0,0 +1,59 @@ +--- +title: "Create Alerts for Event Log" +description: "Create Alerts for Event Log" +sidebar_position: 10 +--- + +# Create Alerts for Event Log + +Alerts are configurable notifications triggered by certain events and sent to the specified +recipients. You can enable or disable, and modify existing alerts, and create new alerts. To do it, +click Configure next to Alerts. + +Follow the steps to create new alert. + +**Step 1 –** In the Alerts window, click Add to start new alert. + +**Step 2 –** On the Alert Properties step, specify the alert name and enter alert description +(optional). Specify the number alerts per email. Grouped alerts for different computers will be +delivered in separate email messages. This value is set to 1 by default, which means that each alert +will be delivered as a separate email message. + +**Step 3 –** On the Notifications step, configure email notifications and customize the notification +template, if needed. Click Edit next to Customize notifications template. Edit the template by +deleting or inserting information fields. + +The %ManagedObjectName% variable will be replaced with your monitoring plan name. + +**Step 4 –** On the Event filters step, specify an event that will trigger the alert. + +**Step 5 –** Complete the Event Filters wizard. Complete the following fields: + +- In the Event tab: + + | Option | Description | + | ----------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | + | Name | Specify the filter name. | + | Description | Enter the description for this filter (optional). | + | Event Log | Select an event log from the drop-down list. You will be alerted on events from this event log. You can also input a different event log. To find out a log’s name, navigate to Start > Windows Administrative Tools > **Event Viewer** > **Applications and Services Logs** > Microsoft > Windows and expand the required Log_Name node, right-click the file under it and select Properties. Find the event log’s name in the Full Name field. Auditor does not collect the Analytic and Debug logs, so you cannot configure alerts for these logs. You can use a wildcard (\*). In this case you will be alerted on events from all Windows logs except for the ones mentioned above. | + +- In the Event Fields tab: + + | Option | Description | + | ----------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | + | Event ID | Enter the identifier of a specific event that you want to be alerted on. You can add several IDs separated by comma. | + | Event Level | Select the event types that you want to be alerted on. If the Event Level checkbox is cleared, you will be alerted on all event types of the specified log. | + | Computer | Specify a computer. You will only be alerted on events from this computer. If you want to specify several computers, you can define a mask for this parameter. Below is an example of a mask: - \* - any machine - computer – a machine named ‘computer’ - \*computer\* - machines with names like ‘xXxcomputerxXx’ or ‘newcomputer’ - computer? – machines with names like ‘computer1’ or ‘computerV’ - co?puter - machines with names like ‘computer’ or ‘coXputer’ - ????? – any machine with a 5-character name - ???\* - any machine with a 3-character name or longer | + | User | Enter a user’s name. You will be alerted only on the events generated under this account. If you need to specify several users, you can define a mask for this parameter in the same way as described above. | + | Source | Specify this parameter if you want to be alerted on the events from a specific source. If you need to specify several users, you can define a mask for this parameter in the same way as described above. | + | Category | Specify this parameter if you want to be alerted on a specific event category. | + + ![eventfilters](/images/auditor/10.7/admin/alertsettings/eventfilters.webp) + +- In the Insertion Strings tab: + + | Option | Description | + | ---------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | + | Consider the following event Insertion Strings | Specify this parameter if you want to receive alerts on events containing a specific string in the EventData. You can use a wildcard (\*). Click Add and specify Insertion String. | + +**Step 6 –** Click OK to save the changes and close the Event Filters dialog. diff --git a/docs/auditor/10.8/admin/alertsettings/create/createhealthstatus.md b/docs/auditor/10.8/admin/alertsettings/create/createhealthstatus.md new file mode 100644 index 0000000000..2fd65dee82 --- /dev/null +++ b/docs/auditor/10.8/admin/alertsettings/create/createhealthstatus.md @@ -0,0 +1,60 @@ +--- +title: "Create Alerts on Health Status" +description: "Create Alerts on Health Status" +sidebar_position: 30 +--- + +# Create Alerts on Health Status + +You can configure alerts to be triggered by important events in the Netwrix AuditorSystem Health +log. + +To create alerts to be notified on Auditor Health Status. + +Follow the basic steps, required for creation of the monitoring plan that will be used to collect +data on Auditor health status events. See the topic for additional information. + +**Step 1 –** Start Netwrix Auditor Event Log Manager and create the new monitoring plan. + +**Step 2 –** Make sure that the Enable event log collection checkbox is selected. Specify the name +for the new plan, for example, _"\_Netwrix Auditor \_Health Status"_. + +**Step 3 –** Navigate to the Monitored computers list and add a server where the Auditor server +resides. + +**Step 4 –** On the General tab, click Configure next to Alerts. Make sure the predefined alerts are +disabled. Click Add to create anew alert. + +**Step 5 –** In the Alert Properties wizard, specify the alert name and enter alert description +(optional). Specify the number alerts per email. Grouped alerts for different computers will be +delivered in separate email messages. This value is set to 1 by default, which means that each alert +will be delivered as a separate email message. + +**Step 6 –** Specify alert recipient if you want the alert to be delivered to a non-default email. + +**Step 7 –** Navigate to Event Filters and click Add to specify an event that will trigger the +alert. + +**Step 8 –** Complete the Event Filter dialog. + +- In the Event tab, specify the filter name and description. In the Event Log field select the + Netwrix Auditor System Health log. +- In the Event Fields tab, select event levels that will trigger the alert. + +**Step 9 –** Click OK to save the changes and close the Event Filters dialog. + +**Step 10 –** In the Netwrix Auditor Event Log Manager wizard, navigate to the Notifications section +and specify the email address where notifications will be delivered. + +**_RECOMMENDED:_** click **Send Test Email**. The system will send a test message to the specified +email address and inform you if any problems are detected. + +**Step 11 –** In the Audit Archiving filters, select the Netwrix Auditor System Health as the +inclusive filter. + +**Step 12 –** Click Save to save your changes. + +![emailhealthstatusevent](/images/auditor/10.7/admin/alertsettings/emailhealthstatusevent.webp) + +If an event occurs that triggers an alert, an email notification will be sent immediately to the +specified recipients. diff --git a/docs/auditor/10.8/admin/alertsettings/create/createmailboxaccess.md b/docs/auditor/10.8/admin/alertsettings/create/createmailboxaccess.md new file mode 100644 index 0000000000..6fd8953c3c --- /dev/null +++ b/docs/auditor/10.8/admin/alertsettings/create/createmailboxaccess.md @@ -0,0 +1,154 @@ +--- +title: "Create Alerts for Non-Owner Mailbox Access Events" +description: "Create Alerts for Non-Owner Mailbox Access Events" +sidebar_position: 20 +--- + +# Create Alerts for Non-Owner Mailbox Access Events + +If you have a monitoring plan configured to audit Exchange, you can configure alerts to be triggered +by non-owner mailbox access events (e.g., opening a message folder, opening/modifying/deleting a +message) using the event log alerts. To enable monitoring of non-owner mailbox access events, you +need to create a monitoring plan for auditing event logs. + +## Create Alerts for Non-Owner Mailbox Access Events + +The procedure below describes the basic steps, required for creation of a monitoring plan that will +be used to collect data on non-owner mailbox access events. See +[Event Log Manager](/docs/auditor/10.7/tools/eventlogmanager/eventlogmanager.md) topic for additional information. + +Follow the steps to create alert for non-owner mailbox access events. + +**Step 1 –** Create a monitoring plan in Netwrix Auditor Event Log Manager. + +**Step 2 –** Make sure that the Enable event log collection checkbox is selected. Specify the name +for the new plan, for example, "_Non-owner mailbox access auditing_". + +**Step 3 –** Navigate to the Monitored computers list and add a server where your Exchange +organization resides. + +**Step 4 –** On the General tab, click Configure next to Alerts. Make sure the predefined alerts are +disabled. Click Add to create an alert for non-owner mailbox access event. + +**Step 5 –** In the Alert Properties wizard, specify the alert name and enter alert description +(optional). Specify the number alerts per email. Grouped alerts for different computers will be +delivered in separate email messages. This value is set to 1 by default, which means that each alert +will be delivered as a separate email message. + +**Step 6 –** Specify alert recipient if you want the alert to be delivered to a non-default email. + +**Step 7 –** Navigate to Event Filters and click Add to specify an event that will trigger the +alert. + +**Step 8 –** Complete the Event Filter dialog. + +- In the Event tab, specify the filter name and description. In the Event Log field enter _"Netwrix + Non-Owner Mailbox Access Agent"_. + +- In the Event Fields tab, complete the following fields: + + - Event ID—Enter the identifier of a specific event that you want to be alerted on. You can add + several IDs separated by comma. Review the event IDs available in the Netwrix **Non-Owner + Mailbox Access Agent** event log: + + | ID | Description | Access Type (as displayed in XML view of event details) | + | --- | ------------------------------------------- | ------------------------------------------------------- | + | 1 | A folder was opened | actFolderOpen | + | 2 | A message was opened | actMessageOpened | + | 3 | A message was sent | actMessageSubmit | + | 4 | A message was changed and saved | actChangedMessageSaved | + | 5 | A message was deleted | actMessageDeleted | + | 6 | A folder was deleted | actFolderDeleted | + | 7 | The entire contents of a folder was deleted | actAllFolderContentsDeleted | + | 8 | A message was created and saved | actMessageCreatedAndSaved | + | 9 | A message was moved or/and copied | actMessageMoveCopy | + | 10 | A folder was moved or/and copied | actFolderMoveCopy | + | 14 | A folder was created | actFolderCreated | + + - Source—Enter _"Netwrix Non-Owner Mailbox Access Agent"_. + +- In the Insertion Strings tab, select Consider the following event Insertion Strings to receive + alerts on events containing a specific string in the EventData. Click Add and specify the + Insertion String. + +**Step 9 –** Click OK to save the changes and close the Event Filters dialog. + +**Step 10 –** In the Netwrix Auditor Event Log Manager wizard, navigate to Notifications and specify +the email address where notifications will be delivered. + +**_RECOMMENDED:_** click **Send Test Email**. The system will send a test message to the specified +email address and inform you if any problems are detected. + +**Step 11 –** Click Edit next to Audit Archiving Filters step, in the Inclusive Filters section +clear the filters you do not need, click Add and specify the following information: + +- The filter name and description (e.g., Non-owner mailbox access event) +- In Event Log, enter _"Netwrix Non-Owner Mailbox Access Agent"_. +- In Write to, select Long-Term Archive. The events will be saved into the local repository. + +**Step 12 –** Click Save. If an event occurs that triggers an alert, an email notification will be +sent immediately to the specified recipients. + +## Review Event Description + +Review the example of the MessageOpened event in the XML view: + +![eventmessageopen](/images/auditor/10.7/admin/alertsettings/eventmessageopen.webp) + +Depending on the event, the strings in the description may vary. The first eight strings are common +for all events: + +| String | Description | +| ------- | --------------------------------------------------------------------------- | +| String1 | The event type: info or warning | +| String2 | The event date and time in the following format: YYYY_MM_DD_hh_mm_ss_000 | +| String3 | The name of the user accessing mailbox | +| String4 | The SID of the user accessing mailbox | +| String5 | The GUID of the mailbox being accessed | +| String6 | Shows whether the user accessing mailbox is the owner: it is always _false_ | +| String7 | The IP of the computer accessing the mailbox | +| String8 | The access type | + +The following strings depend on the non-owner access type, represented by different Event IDs: + +| Event ID | Access type (String 8) | Strings | Description | +| -------- | ------------------------------------------------------------------- | ------------- | ---------------------------------------------------------------------------------------------- | +| 1 | actFolderOpen | String9 | The internal folder URL | +| 2 | actMessageOpened | String9 | The internal message URL | +| String10 | The message subject | | | +| String11 | The message type: IPM.Note—Email, IPM.Contact – contact, etc. | | | +| 3 | actMessageSubmit | String9 | The internal message URL | +| String10 | The message subject | | | +| String11 | Email addresses of the message recipients, separated by a semicolon | | | +| String12 | The message type: IPM.Note—Email, IPM.Contact – contact, etc. | | | +| 4 | actChangedMessageSaved | String9 | The internal message URL | +| String10 | The message subject | | | +| String11 | The message type: IPM.Note – Email, IPM.Contact – contact, etc. | | | +| 5 | actMessageDeleted | String9 | The internal message URL | +| String10 | The message subject | | | +| String11 | The message type: IPM.Note—Email, IPM.Contact – contact, etc. | | | +| 6 | actFolderDeleted | String9 | The internal folder URL | +| 7 | actAllFolderContentsDeleted | String9 | The internal folder URL | +| 8 | actMessageCreatedAndSaved | String9 | The internal message URL | +| 9 | actMessageMoveCopy | String9 | The message being moved/copied—the final part of the message URL, e.g., /Inbox/testMessage.EML | +| String10 | The action – copy or move | | | +| String11 | The folder URL the message is copied/moved from | | | +| String12 | The destination folder URL | | | +| String13 | The message type: IPM.Note—Email, IPM.Contact – contact, etc. | | | +| 10 | actFolderMoveCopy | Strings 9 -13 | The string descriptions for the folder are similar to those for messages. | +| 14 | actFolderCreated | String9 | The new folder URL | + +With different Exchange versions and/or different email clients, the same non-owner action (e.g., +copying a message) may generate different events: e.g., actMessageMoveCopy with one server/client or +actMessageCreatedAndSaved with another. + +You can add the required strings contained in % symbols for your own custom alert separated by +a`
` tag in `Event Parameters:`. Event parameter descriptions can also be added. + +In the example below, the following information has been added: + +- The description for String 3—User accessing mailbox +- String 8 with the description +- String 9 with the description + +![editnotificationtemplate](/images/auditor/10.7/admin/alertsettings/editnotificationtemplate.webp) diff --git a/docs/auditor/10.8/admin/alertsettings/dashboard.md b/docs/auditor/10.8/admin/alertsettings/dashboard.md new file mode 100644 index 0000000000..9edab38871 --- /dev/null +++ b/docs/auditor/10.8/admin/alertsettings/dashboard.md @@ -0,0 +1,53 @@ +--- +title: "Alerts Overview Dashboard" +description: "Alerts Overview Dashboard" +sidebar_position: 10 +--- + +# Alerts Overview Dashboard + +Aggregated statistics on the alerts is provided in the Alerts overview widget. It displays currently +triggered alerts with detailed information. + +To view the dashboard, on the main Auditor page, click the Alerts tile. + +The dashboard includes the following widgets: + +- Alerts triggered – Shows amount of alerts triggered for the last 7 days (by default). Use this + tile to inspect the trend. +- Top 5 alerts by count – Shows most recently triggered alerts for the selected time period (7 days + by default). +- Risk score by top 5 users – Shows potentially harmful users for the selected time period (7 days + by default). Clicking the tile opens the Behavior Anomalies dashboard. See the + [Behavior Anomalies](/docs/auditor/10.7/admin/behavioranomalies/overview.md) topic for additional information. +- Alerts timeline – Shows the number of alerts triggered at the specific day. +- Recent alerts – Shows all the triggered alerts in chronological order. + +![alerts_overview_thumb_0_0](/images/auditor/10.7/admin/alertsettings/alerts_overview_thumb_0_0.webp) + +Clicking any tile except for Risk score by top 5 users drills down to the Alert history dashboard +that provides users with the detailed information about the latest alerts triggered in their IT +infrastructure enriched with the actionable chart and timeline. + +![alerts_history_thumb_0_0](/images/auditor/10.7/admin/alertsettings/alerts_history_thumb_0_0.webp) + +Review detailed information about the triggered alerts and change anomaly status. See the +[Review User Profiles and Process Anomalies](/docs/auditor/10.7/admin/behavioranomalies/userprofile.md) topic for +additional information. + +On the Details pane, you can review alert details and manage your alerts: + +- Select columns – Select columns to be displayed. +- Show reviewed alerts – Click to view all alerts you have already reviewed. +- Mark all as reviewed – Click to mark all alerts in the list as reviewed. Netwrix recommends doing + this only if you are completely sure that there are no critical alerts in your infrastructure. +- Edit alerts settings – Click to modify settings of the selected alert. See the + [Create Alerts](/docs/auditor/10.7/admin/alertsettings/create/create.md) topic for additional information. +- Show activity record in new window – Click to view more information about the activity record that + triggered an alert. See the + [Activity Records Statistics](/docs/auditor/10.7/admin/healthstatus/dashboard/activityrecordstatistics.md) topic for + additional information. + +You can also refresh the alerts information by clicking the Refresh button at the bottom or go to +the general alerts settings page clicking the Alert settings. See the [Manage Alerts](/docs/auditor/10.7/admin/alertsettings/manage.md) +topic for additional information. diff --git a/docs/auditor/10.8/admin/alertsettings/manage.md b/docs/auditor/10.8/admin/alertsettings/manage.md new file mode 100644 index 0000000000..d3d81ef6c4 --- /dev/null +++ b/docs/auditor/10.8/admin/alertsettings/manage.md @@ -0,0 +1,25 @@ +--- +title: "Manage Alerts" +description: "Manage Alerts" +sidebar_position: 30 +--- + +# Manage Alerts + +For your convenience, Netwrix provides you with a set of predefined alerts that are commonly used +for IT infrastructure monitoring. The out-of-the-box alerts include those that help you detect +suspicious activity and inform you on critical changes to your environment. The alerts contain +pre-configured filters and in most cases you only need to enable an alert and select who will +receive notifications. + +You can add any elements (a dashboard, report, alert, risk, etc.) to the Auditor Home screen to +access them instantly. See the [Navigation](/docs/auditor/10.7/admin/navigation/overview.md) and +[Customize Home Screen](/docs/auditor/10.7/admin/navigation/customizehome.md) topics for additional information. + +| To... | Follow the steps... | +| ---------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Enable / disable an existing alert | **Step 1 –** Select an alert from the list and enable it using the slider in the Mode column. **Step 2 –** Double-click the selected alert and specify alert recipients or set a risk score want to include an alert in Behavior Anomalies assessment. You can go on with a score suggested by Netwrix industry experts or fine-tune it to fit your organization's priorities. See the [Risk Score](/docs/auditor/10.7/admin/alertsettings/create/create.md) topic for additional information on how to configure scoring settings. **Step 3 –** Review and update filters. For some alerts you should provide filter values, such as group name or user. | +| Modify an existing alert | Select an alert from the list and click Edit. | +| Create a new alert from existing | Select an alert from the list and click Duplicate at the bottom of the window. | +| Remove an alert | Select an alert from the list and click ![delete](/images/platgovnetsuite/integrations/delete.webp) in the right pane. | +| Find an alert | Use the Filter by tags option to find an alert by tags associated with this alert. _OR_ Use a search bar in the upper part of All Alerts window to find an alert by its name or tag. | diff --git a/docs/auditor/10.8/admin/alertsettings/overview.md b/docs/auditor/10.8/admin/alertsettings/overview.md new file mode 100644 index 0000000000..254faa7313 --- /dev/null +++ b/docs/auditor/10.8/admin/alertsettings/overview.md @@ -0,0 +1,40 @@ +--- +title: "Alerts" +description: "Alerts" +sidebar_position: 70 +--- + +# Alerts + +If you want to be notified about suspicious activity, you can configure alerts that will be +triggered by specific events. Alerts are sent after the specified action has been detected. Alerts +are helpful if you want to be notified about actions critical to your organization security and have +to mitigate risks once the suspicious action occurs. + +Review the following to take advantage of the Alerts functionality: + +- See the[Manage Alerts](/docs/auditor/10.7/admin/alertsettings/manage.md) topic for additional information on how to edit and enable + existing predefined alerts, and create new alerts based on the predefined ones. +- See the [Create Alerts](/docs/auditor/10.7/admin/alertsettings/create/create.md) topic for additional information on how to create custom alerts + with your personal filters. +- If you need to be alerted on specific events in your Event Logs or non-owner mailbox access + attempts, see the [Create Alerts for Event Log](/docs/auditor/10.7/admin/alertsettings/create/createeventlog.md) and + [Create Alerts for Non-Owner Mailbox Access Events](/docs/auditor/10.7/admin/alertsettings/create/createmailboxaccess.md) topics for additional + information. + +The example alert is triggered when a new user is created in the monitored domain. + +![ad_alert](/images/auditor/10.7/admin/alertsettings/ad_alert.webp) + +## Tags + +Netwrix Auditor allows you to apply tags when creating an alert. Applying tags to alerts allows you +to distinguish one alert from another or create groups of similar alerts. + +![Manage tags list](/images/auditor/10.7/admin/alertsettings/managetags.webp) + +The Tags page contains a complete list of alerts that were created in the product. Currently, you +cannot assign or create tags on this page. + +To apply tags to an alert, navigate to alert settings and locate the Apply tags section on the +General tab. See the [Create Alerts](/docs/auditor/10.7/admin/alertsettings/create/create.md) topic to receive information about tags applying. diff --git a/docs/auditor/10.8/admin/alertsettings/responseaction.md b/docs/auditor/10.8/admin/alertsettings/responseaction.md new file mode 100644 index 0000000000..0c811d4ba0 --- /dev/null +++ b/docs/auditor/10.8/admin/alertsettings/responseaction.md @@ -0,0 +1,150 @@ +--- +title: "Configure a Response Action for Alert" +description: "Configure a Response Action for Alert" +sidebar_position: 40 +--- + +# Configure a Response Action for Alert + +Upon the alert triggering, you can instruct Auditor to perform several actions such as run a +command, a script or other executable file that will perform a remediation action, open a ticket +with the organization help desk, etc. + +![passwordreset_thumb_0_0](/images/auditor/10.7/admin/alertsettings/passwordreset_thumb_0_0.webp) + +Response Action settings contain the following configuration options: + +- Take action when alert occurs - Toggle this setting to **On** to enable alert responses +- Run – Indicates the location of the script file you want to run as your response action +- With parameters – If your script contains parameters, specify them here +- Working directory – If you need to specify a working directory for your script to perform the + operation, insert the path here +- Write data to CSV file – If this checkbox is selected, Netwrix Auditor will save activity records + in a CSV file. You can use it to pass information into your response action to receive a more + targeted response. +- Limit row count in a file to – Select the desired number of rows you want for the file +- Use custom credentials – Enter the username and password if you want the script to be run as an + account different from LocalSystem +- Command line preview – Showing a preview of the command line script. Click **Test run** button to + test its performance. + +Follow the steps to configure the required settings in the Response Action tab of the alert +properties. + +**Step 1 –** Turn the switch to On if you want a response action to be taken when the alert occurs. + +**Step 2 –** In the Run field, specify the path to the executable file (_.exe_, ._cmd_, _.bat_; for +_.ps1_ files see step 3 below). The file must be located on the machine where Netwrix Auditor server +runs. + +**Step 3 –** In the With parameters field, enter the parameters to be used by the executable file. +Use space character as a separator. + +**Step 4 –** To run _.exe_, _.cmd_ and _.bat_ files, you can enter the path to your command-line or +batch file directly in the Run field, for example: + +![command_thumb_0_0](/images/auditor/10.7/admin/alertsettings/command_thumb_0_0.webp) + +To run the ._ps1_ files, you will need to enter the path to _powershell.exe_ and path to your +script. For example: + +- In the Run field, enter _C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe_ +- In the With parameters field, enter `–File ` + +![powershell_thumb_0_0](/images/auditor/10.7/admin/alertsettings/powershell_thumb_0_0.webp) + +Unless you select to Write data to CSV file, Auditor will also pass the following parameters to the +command line: + +- _AlertID_ — alert ID +- _RecordID_ — ID of the activity record that triggered the alert + +Selecting Write data to CSV file will change this behavior, as described in the Configure a Response +Action for Alert section below. + +**Step 5 –** In the Working directory field, specify path to the working directory of the executable +file on NAuditor server. + +**Step 6 –** In the Working directory field, specify path to the working directory of the executable +file on NAuditor server. + +If you leave this field empty, then the path to the file specified in the Run field will be used as +a working directory. As shown in the example with the _.ps_ file, this may be the system directory. +So, to avoid system directory cluttering, it is recommended not to leave the Working directory field +empty but to explicitly specify the directory where your executable file is located, or a dedicated +directory for that purpose. In the latter case, make sure the directory exists on Auditor server. + +**Step 7 –** Write data to CSV file — select this option if you want Auditor to locate the activity +records associated with the alert, and write the record fields and their values in a structured way +to a ._csv_ file. For each new alert being created, this option is selected by default, as well as +for the predefined alerts installed with Auditor. + +After the upgrade, all alerts with previously configured response action will have this option +cleared. + +**Step 8 –** Limit row count in a file to `` — limit the number of rows (activity records) to be +written to a single ._csv_ file. Enter a value from _1_ to _1000_. + +Learn more about how these options work in the Configure a Response Action for Alert section. + +By default, the executable file will be launched under the _LocalSystem_ account. If you want to use +another account, select the Use custom credentials checkbox and specify user name and password. Make +sure this account has **Log on as batch job** privilege. + +The resulting command line including executable file name and execution parameters will appear in +the Command line preview. + +If you selected to **Write data to CSV file**, the command line will include +_`{CsvFile_}`_, i.e. the file path. Alternatively, the command line will include _`{AlertID}`_ and _`{RecordID}`\_, +i.e. related IDs + +**Step 9 –** Test run — if you click this button, the executable file will be run with the specified +parameters on Netwrix Auditor server. This can be helpful, for example, if you want to ensure script +operability before the related alert is triggered. + +As there is no actual alert triggering in this case, sample alert ID and sample activity record ID +will be passed to the executable file. If you selected to write data to CSV file, a sample file will +be created and populated with these sample IDs. + +To be able to perform the test run, current user account (logged on to Auditor client) must have +local Administrator privileges on Auditor server where the executable file is located. + +After the test run, you will get a notification message with the exit code. Typical values are as +follows: + +- **0** — the response action completed successfully +- Any other value — the response action was not a success + +**_RECOMMENDED:_** Apply similar logic if you plan to use custom exit codes in your response action +script. + +Same exit codes will be returned by response action regular runs. + +If the action is not a success (exit code is not 0), the program will try to perform response action +again (up to 200 times) with increasing time interval. + +## Write Data to a CSV File + +To pass certain activity record fields to the executable file, you can instruct the program to write +the fields and their values in a structured way to a CSV file. + +Here is an example of a CSV file structure: + +![csvfile_thumb_0_48](/images/auditor/10.7/admin/alertsettings/csvfile_thumb_0_48.webp) + +The number of activity records retrieved per every response action launch will be only limited by +user (see below for details). If the number of records associated with the alert exceeds this limit, +the program will create multiple CSV files, storing data in chunks. + +For example, if there are 50 records associated with the alert (e.g., “_Scanning threat is detected +on network device_” alert), and the number of records for one CSV is set to 10, the program will +create 5 CSV files, with 10 records in each chunk. Also notice that the response action will be +launched once for every such chunk (5 times in this example), and will retrieve multiple activity +records per launch (not more than the specified limit, i.e. 10 records in this example). + +A CSV file is named using the timestamp and GUID and stored in the subfolder of Netwrix Auditor +working folder (by default, _%ProgramData%\Netwrix +Auditor\AuditCore\AuditArchive\AlertsToolLauncher\Csv_). Note that a CSV file will exist only while +the executable file is running – after the execution is completed, the CSV file will be deleted. So +if you plan, for example, to obtain some data from that file for further processing, you may need to +copy it to a permanent location in a timely manner, e.g., using a script. diff --git a/docs/auditor/10.8/admin/behavioranomalies/_category_.json b/docs/auditor/10.8/admin/behavioranomalies/_category_.json new file mode 100644 index 0000000000..72c2abed44 --- /dev/null +++ b/docs/auditor/10.8/admin/behavioranomalies/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Behavior Anomalies", + "position": 80, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/behavioranomalies/dashboard.md b/docs/auditor/10.8/admin/behavioranomalies/dashboard.md new file mode 100644 index 0000000000..9f666368f6 --- /dev/null +++ b/docs/auditor/10.8/admin/behavioranomalies/dashboard.md @@ -0,0 +1,38 @@ +--- +title: "Review Behavior Anomalies Dashboard" +description: "Review Behavior Anomalies Dashboard" +sidebar_position: 10 +--- + +# Review Behavior Anomalies Dashboard + +To review the Behavior Anomalies dashboard, process and filter anomalies in user profiles, you must +be assigned the Global administrator or Global reviewer role in the product. See the +[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional +information. + +You can add any elements (a dashboard, report, alert, risk, etc.) to the Auditor Home screen to +access them instantly. See the [Navigation](/docs/auditor/10.7/admin/navigation/overview.md) and +[Customize Home Screen](/docs/auditor/10.7/admin/navigation/customizehome.md) topics for additional information. + +To review the Behavior Anomalies dashboard: + +On the main Auditor page, click +![ba_tile](/images/auditor/10.7/admin/behavioranomalies/ba_tile.webp) +on the left. + +![dashboard_thumb_0_0](/images/auditor/10.7/admin/behavioranomalies/dashboard_thumb_0_0.webp) + +The dashboards includes the following sections: + +- The Risk score timeline that helps you review anomaly surges over time. +- The Risk score by top five users chart that helps you identify the most active users. To see the + chart, click the pie chart icon in the upper left corner of the page. +- The user list with all users who provoked alerts and their total risk scores. + +Once you reviewed the general anomaly trend and identified users that merit your special attention, +review their profiles and process anomalies. Click View Profile next to a user name to dive into +user activity and investigate each action in details. +[Review User Profiles and Process Anomalies](/docs/auditor/10.7/admin/behavioranomalies/userprofile.md) + +[Review User Profiles and Process Anomalies](/docs/auditor/10.7/admin/behavioranomalies/userprofile.md) diff --git a/docs/auditor/10.8/admin/behavioranomalies/overview.md b/docs/auditor/10.8/admin/behavioranomalies/overview.md new file mode 100644 index 0000000000..24a4052a72 --- /dev/null +++ b/docs/auditor/10.8/admin/behavioranomalies/overview.md @@ -0,0 +1,50 @@ +--- +title: "Behavior Anomalies" +description: "Behavior Anomalies" +sidebar_position: 80 +--- + +# Behavior Anomalies + +Netwrix Auditor enables you to detect behavior anomalies in your IT environment, such as activity +surges or mass deletions of archived data. As you investigate suspicious activity and review +incidents, you can identify intruders or in-house bad actors who keep violating your company's +security policies. + +The behavior anomalies assessment extends the alerting functionality and provides both a high-level +visualization and a detailed history of malicious user activity. While alerts notify you on a single +or repetitive action almost immediately, the Behavior Anomalies dashboard accumulates this data over +time and thus gives you the bird's eye view of activity patterns. With Behavior Anomalies, you can +step beyond individual actions and investigate more complicated user behavior scenarios that might +otherwise stay concealed for a long time. + +On a high level, your behavior anomalies assessment workflow can be described as follows: + +1. You create alerts on threat patterns specific to your company. You include these alerts in + Behavior Anomalies assessment and associate a risk score with each alert. The score, that is + between 1 and 100 points, reflects how critical the action is for your organization. + [Risk Score](/docs/auditor/10.7/admin/alertsettings/create/create.md)how to set a risk score for an alert. + + Although Netwrix industry experts suggest risk scores for alerts that are provided + out-of-the-box, you can easily tailor these scores to your organization needs and priorities. + You can always adjust risk scores over time as you become more aware of behavior patterns and + anomalous actions in your environment. + +2. Each action that provokes an alert is treated as anomaly. Once the anomaly is detected, it + appears on a dashboard's timeline and its risk score is added to the user's total score. +3. Every now and then, you review the Behavior Anomalies dashboard—the risk score timeline with + anomaly surges, and the most active users. The general rule of thumb is: the more risk score + points the user has the more he or she merits your attention. + [Review Behavior Anomalies Dashboard](/docs/auditor/10.7/admin/behavioranomalies/dashboard.md) +4. To learn more about user activity, you can drill-down to a user profile to review all alerts + provoked by this user. As you review anomalies and mitigate risks, the user's total score + reduces. [Review User Profiles and Process Anomalies](/docs/auditor/10.7/admin/behavioranomalies/userprofile.md) + +The purpose of the dashboard is to keep risks low and help you spot and address issues as they +occur. The risk score assigned to a user does not qualify him or her as a bad actor but rather +brings your attention to behavior patterns. Depending on the role in your organization, users might +have different safe levels while you should make your priority to review the anomalies on time, stay +focused, and proactively mitigate risks. + +[ Using Behavior Anomaly Discovery](https://www.netwrix.com/using_behavior_anomaly_discovery.html) +page on Netwrix website. diff --git a/docs/auditor/10.8/admin/behavioranomalies/tips.md b/docs/auditor/10.8/admin/behavioranomalies/tips.md new file mode 100644 index 0000000000..19581e80cb --- /dev/null +++ b/docs/auditor/10.8/admin/behavioranomalies/tips.md @@ -0,0 +1,35 @@ +--- +title: "Behavior Anomalies Assessment Tips and Tricks" +description: "Behavior Anomalies Assessment Tips and Tricks" +sidebar_position: 30 +--- + +# Behavior Anomalies Assessment Tips and Tricks + +This topic contains various frequently asked questions as well as tips and tricks you might find +helpful when configuring scoring settings and reviewing behavior anomalies. + +- The user has a high score and keeps provoking same alerts almost every day. + + Drill-down to the user profile and then click Show user activity. Review user actions and + compare them to his or her job responsibilities. Does the user seem trustworthy? Are there any + rights elevation or suspicious access attempts? + + Try to review user tasks—you may find out that the anomaly the user keeps provoking is a genuine + part of his or her daily routine. For example, the office staff should not reset passwords for + other accounts while this is a basic task for a system administrator. In this case, review your + alert settings and exclude the user from the alert filters. + +- Everyone in organization has a huge score + + Probably, you have configured too many alerts that turn behavior anomalies assessment into mess. + It takes some time to learn what matters most to your organization and get accustomed to setting + proper risk scores. Try to review your scoring settings regularly and adjust them when + necessary. + +- Is anyone who is charge of "Failed..." anomaly a bad actor? + + Anyone can forget a password or accidentally try to access some data in a wrong folder. Such + users are not subject to immediate prosecution unless they do not provoke repetitive alerts. The + best practice is to review user profile after some time and check if there are any threat + patterns in user behavior. diff --git a/docs/auditor/10.8/admin/behavioranomalies/userprofile.md b/docs/auditor/10.8/admin/behavioranomalies/userprofile.md new file mode 100644 index 0000000000..0b0ce05370 --- /dev/null +++ b/docs/auditor/10.8/admin/behavioranomalies/userprofile.md @@ -0,0 +1,82 @@ +--- +title: "Review User Profiles and Process Anomalies" +description: "Review User Profiles and Process Anomalies" +sidebar_position: 20 +--- + +# Review User Profiles and Process Anomalies + +The user profile enables you to investigate user behavior and take a closer look at anomalies. + +To view a user profile + +- On the Behavior Anomalies assessment dashboard, locate a user and click View Profile next to his + or her name. + +![userprofile_thumb_0_0](/images/auditor/10.7/admin/behavioranomalies/userprofile_thumb_0_0.webp) + +The user profile page contains the following sections: + +- User data with the name and the total risk score. Click Show user activity below the total risk + score, to launch the Interactive Search in a new window. Use it to see all user actions, including + those that were not treated as anomalies. +- The Risk score timeline that demonstrates anomalous activity surges. Modify the timeframe to + narrow down the results. +- The Risk score by top five alerts chart that outlines the most frequent anomalies provoked by + user. To see the chart, click the pie chart icon in the upper left corner of the page. +- The anomalies list displays details for each anomaly: the alert that was triggered, the date and + time, the risk score and anomaly status. + + Double-click an entry to see more details: who did what, when and where the action was made, + etc. Navigate to Linked actions and click Show user activity or Show this activity record to + invoke Interactive Search and see all user actions or a specific action correspondingly. + +Netwrix Auditor shows only the top 2,000 anomalies. Modify the timeframe or hide reviewed anomalies, +and then click Refresh to see more anomalies. + +## Process Anomalies and Reduce Risk Score + +By default, the anomaly status is active and it indicates that the incident still requires some +examination or is kept for further investigation. As you inspect anomalies and respond to threats, +update statuses and add comments. + +To change an anomaly status + +1. Specify an anomaly from the list and click the Active link in the Status column. +2. In the Change Status dialog, set the status to _"reviewed"_ and provide a justification. + + You can add comments without changing a status. This might be helpful if the anomaly remains + active for a long period of time and you need even more time to examine it closely. + +![changestatus_thumb_0_0](/images/auditor/10.7/admin/behavioranomalies/changestatus_thumb_0_0.webp) + +Once the anomaly is reviewed, it disappears from the timeline and chart, and its associated risk +score is taken from user's total score. The reviewed anomalies supplement the status with the +reviewer name and date (e.g., _Reviewed by CORP\Administrator (10/02/2017 10:12:03 AM)_). + +You can always revert changes and assign the Active status back. + +To process all anomalies + +- In the Actions section, select Mark all as reviewed. + +In this case, all anomalies that are currently in view will be set to _"reviewed"_. Perform this +operation only with a proper justification. Since Netwrix Auditor shows only the top 2,000 +anomalies, make sure to click Refresh to check if there are more anomalies to be reviewed. + +The anomalies that are excluded from view by filters are not affected by the Mark all as reviewed +action. + +## Customize Anomalies List + +By default, all anomalies are in view. The Filters section helps you show or hide anomalies. + +Click Customize view and clear the checkboxes next to alert names, if you do not want to see +anomalies associated with them. + +When you hide an alert from view, its associated anomalies will no longer be displayed on a +timeline, chart, or in the list but the user total score will remain unchanged. Note that hidden +anomalies cannot be reviewed in bulk with the Mark all as reviewed action. + +Hide reviewed anomalies enables you to modify the anomalies list so that you can focus on active +anomalies only. To see reviewed anomalies, click Show reviewed anomalies. diff --git a/docs/auditor/10.8/admin/compliancemappings.md b/docs/auditor/10.8/admin/compliancemappings.md new file mode 100644 index 0000000000..3a24e44e4d --- /dev/null +++ b/docs/auditor/10.8/admin/compliancemappings.md @@ -0,0 +1,16 @@ +--- +title: "Compliance Mappings" +description: "Compliance Mappings" +sidebar_position: 100 +--- + +# Compliance Mappings + +This tile contains links to the practical guides on how to comply with different standards using +Netwrix Auditor. The guides were prepared by Netwrix industry experts and contain full information +about most popular compliance standards. Clicking the 'Learn more...' link under a desired standard +opens the page on the Netwrix website. Here you can review a brief description of each compliance +standard supported by the product and download E book containing detailed requirements for the +standards. + +![compliance_mappings](/images/auditor/10.7/admin/compliance_mappings.webp) diff --git a/docs/auditor/10.8/admin/healthstatus/_category_.json b/docs/auditor/10.8/admin/healthstatus/_category_.json new file mode 100644 index 0000000000..299c75cb5b --- /dev/null +++ b/docs/auditor/10.8/admin/healthstatus/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Netwrix Auditor Operations and Health", + "position": 110, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/healthstatus/dashboard/_category_.json b/docs/auditor/10.8/admin/healthstatus/dashboard/_category_.json new file mode 100644 index 0000000000..3ec155dadf --- /dev/null +++ b/docs/auditor/10.8/admin/healthstatus/dashboard/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Health Status Dashboard", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md b/docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md new file mode 100644 index 0000000000..45a46a6e17 --- /dev/null +++ b/docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md @@ -0,0 +1,26 @@ +--- +title: "Activity Records Statistics" +description: "Activity Records Statistics" +sidebar_position: 10 +--- + +# Activity Records Statistics + +Aggregated statistics on the activity records is provided in the Activity records by date widget. +The chart shows the number of activity records produced by your data sources, collected and saved by +Netwrix Auditor during the last 7 days. This data can help you to assess the activity records +generation intensity in your IT infrastructure, and product load. + +After you click View details, the Activity Records Statistics window will be displayed. + +![activityrecordsdetails_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/activityrecordsdetails_thumb_0_0.webp) + +By default, statistics on activity records processing is grouped by Monitoring plan and presented +for the Last 7 days. To modify the timeframe, use the drop-down list in the upper right corner. + +Other fields provide the following information: data source that produces activity records, with +date and time of the last collected record, and the overall number of records collected and uploaded +to the corresponding Audit database during the specified timeframe. + +If the data sources processed by a monitoring plan did not produce any activity records during the +specified timeframe, this monitoring plan will not appear in the list. diff --git a/docs/auditor/10.8/admin/healthstatus/dashboard/databasestatistics.md b/docs/auditor/10.8/admin/healthstatus/dashboard/databasestatistics.md new file mode 100644 index 0000000000..a27b837221 --- /dev/null +++ b/docs/auditor/10.8/admin/healthstatus/dashboard/databasestatistics.md @@ -0,0 +1,62 @@ +--- +title: "Database Statistics" +description: "Database Statistics" +sidebar_position: 40 +--- + +# Database Statistics + +Databases may tend to run out of free space due to poor capacity provisioning or to retention +settings not configured properly. Use the Database statistics widget to examine database size and +adjust retention accordingly. The widget displays the name of default SQL Server instance hosting +all Netwrix Auditor databases, the overall database capacity at the moment and its change over the +last day (24 hours). + +Transaction logs size is not included in the calculations. + +After you click View details, the following information will be displayed for the specified SQL +Server instance: + +![dbstats_overview_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/dbstats_overview_thumb_0_0.webp) + +The Database name column contains the list of Netwrix Auditor databases hosted by the specified +instance of the SQL Server: + +- Special databases are created automatically on the default SQL Server instance to store: + - alerts—_Netwrix_AlertsDB_ database + - activity records collected using Integration API—_Netwrix_Auditor_API_ database + - internal event records—_Netwrix_Auditor_EventLog_ database + - data collected by Netwrix Auditor self-audit—_Netwrix_Self_Audit_ database + - data needed for overview reports generation—_Netwrix_OverviewReportsDB_ +- To store data from the data sources included in the monitoring plan, dedicated Audit databases are + created and named by user (default name format is _Netwrix_Auditor_``\_) + +The following capacity metrics are displayed for each database: + +- **State**—database state summary +- **Size**—current database size (logs are not included) +- **Activity records**—number of the activity records stored in the database at the moment + +After you expand the database node, the detailed database properties will be shown: + +![dbstatistics_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/dbstatistics_thumb_0_0.webp) + +These properties are as follows: + +| Property | Possible Values | Description | +| -------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------ | +| Size limit | _``_ | For SQL Server Express Edition–shows database size limitations | +| Unlimited | | | +| State description | OK | Database is operating properly. | +| Capacity error | Database is running low on disk space. -OR- Size limit for SQL Server Express Edition will be reached soon (threshold is 500 MB, i.e. 5% of 10 GB limit remaining). | | +| Failed to store data | Failed to store data to the database due to some issues. | | +| Unavailable | Failed to connect to the database. | | +| Upgrade in progress | Database is being upgraded. | | +| Monitoring plans | _``_ | All monitoring plans for which this database is a target. Usually it is recommended to configure a dedicated database for each plan. | + +You can use the Search field, or apply a filter to display the information you need. For example, in +the Apply Filters dialog you can select the Show only plans with issues to display only the +monitoring plans that require attention and corrective actions. + +This information will help you to troubleshoot the product operation, detect and eliminate the root +cause of the monitoring errors, providing for auditing continuity and compliance. diff --git a/docs/auditor/10.8/admin/healthstatus/dashboard/healthlog.md b/docs/auditor/10.8/admin/healthstatus/dashboard/healthlog.md new file mode 100644 index 0000000000..07aba7dd8f --- /dev/null +++ b/docs/auditor/10.8/admin/healthstatus/dashboard/healthlog.md @@ -0,0 +1,92 @@ +--- +title: "Netwrix Auditor Health Log" +description: "Netwrix Auditor Health Log" +sidebar_position: 30 +--- + +# Netwrix Auditor Health Log + +Daily summary of the Netwrix Auditor health log is displayed in the Health log widget. The chart +shows how many events with different severity levels were written to the product health log in the +last 24 hours. To open the health log, click the **Open Health Log** link in the Health Status +dashboard. See the topic for additional information. + +If you want to clear Netwrix Auditor Health Log, son the computer where Auditor Server is installed, +navigate to **EventViewer** -> **Application and Services Logs** and locate the **Netwrix Auditor +System Health log**. Then, follow the instructions provided by Microsoft. See the Microsoft article +for additional information on +[How to Clear Event Logs](https://learn.microsoft.com/en-us/host-integration-server/core/how-to-clear-event-logs1). + +![healthlog](/images/auditor/10.7/admin/healthstatus/dashboard/healthlog.webp) + +## Netwrix Auditor System Health Log + +When an error occurs, a system administrator or support engineer must determine what caused this +error and prevent it from recurring. For your convenience, Auditor records important events in the +proprietary Netwrix Auditor **System Health** event log. + +You can review events directly in the product: + +- When issues encountered during data collection, click Details... in the Status column and select + View Health Log. + + OR + +- In the main screen, in the Configuration section click the Health status tile, then in the Health + log dashboard widget click Open health log. + +You can also inspect the log in the Event Viewer. + +There are three types of events that can be logged: + +| Event Type | Description | +| ----------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Information | An event that describes the successful operation beginning or completion. For example, the product successfully completed data collection for a monitoring plan. | +| Warning | An event that is not necessarily significant, but may indicate a possible future problem. For example, the product failed to process a domain controller. | +| Error | An event that indicates a significant problem such as loss of data or loss of functionality. For example, the product failed to retrieve settings for your data source. | + +Review the following: + +- Inspect Events in Health Log + +If you want to monitor Auditor health status in more depth, you can do the following: + +- Create a monitoring plan for this log using Event Log Manager to collect activity data. See the + Health Status overview for additional information. +- Configure alerts triggered by specific events in the product's health log. + [Create Alerts on Health Status](/docs/auditor/10.7/admin/alertsettings/create/createhealthstatus.md) + +## Inspect Events in Health Log + +Follow the steps o inspect events in Netwrix Auditor health log + +**Step 1 –** On the main Auditor page, select the Health status tile, then in the Health log +dashboard widget click Open health log. + +**Step 2 –** Select an entry to review it in details. You can also copy event details. Select the +event in the list and click Copy details at the bottom of the window. + +For your convenience, Auditor provides you with filters so that you can narrow down the number of +events on the screen and focus on those that matter most. For example, warnings on failed data +collection or events of an important monitoring plan. + +### Filter Events + +Follow the steps to filter events. + +**Step 1 –** Select Filters in the upper part of the Netwrix Auditor Health Log window. + +**Step 2 –** Complete the following fields: + +| Option | Description | +| --------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Logged | Specify event logging time period (date range, yesterday, etc.). | +| Event level | Select level of the events that you want to be displayed. | +| Event source | Select services and applications whose events you want to view. | +| Monitoring plan | Select to display events from one or several monitoring plans. | +| Item name | Select to display events from the certain item(s) you need. | +| Event ID | Enter event ID number or range of event IDs separated by commas. For example, 1, 3, 5-99. You can also exclude unwanted event IDs from being displayed. Type the minus sign before selected event ID. For example, -76. | + +![healthlogfilters_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/healthlogfilters_thumb_0_0.webp) + +The applied filters will be listed on the top of the screen under the window title. diff --git a/docs/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview.md b/docs/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview.md new file mode 100644 index 0000000000..7598d4122c --- /dev/null +++ b/docs/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview.md @@ -0,0 +1,47 @@ +--- +title: "Monitoring Overview" +description: "Monitoring Overview" +sidebar_position: 20 +--- + +# Monitoring Overview + +Aggregated statistics on the monitoring plans is provided in the Monitoring overview widget. It +displays current statuses of all monitoring plans: + +- Ready (green indicator)—The monitoring plans (one or several) successfully processed the data + sources with all their items and are ready for the next run. +- Pay attention (yellow indicator)—The monitoring plans (one or several) require your attention, as + some items were not processed completely but only partially. This status applies to the monitoring + plans targeted at Logon Activity and Windows File Server. See the table below for details. +- Take action (red indicator)—Any data source or item in the monitoring plan (one or several) was + processed with errors. + +After you click View details, the Monitoring Overview window will be displayed. + +![monitoringoverview_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/monitoringoverview_thumb_0_0.webp) + +It provides the hierarchical list of monitoring plans, processed data sources and corresponding +items with their current status and date/time of the last data processing session. For data sources +and items their current status is depicted as follows: + +| Entity | Status | Description | +| --------------- | ------------------------------------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Data source | Disabled | A data source can be disabled manually via its settings (by switching Monitor this data source and collect activity data to OFF), or automatically, if the license is not valid any more (for example, the count of licensed objects was exceeded, or the trial period has expired). | +| Empty | No items have been added to this data source yet. | | +| Enabled | Monitor this data source and collect activity data is set to ON in the data source settings. | | +| Not available | The monitoring plan is corrupted and cannot process its data sources, so it is recommended to remove it and create anew. | | +| Not responding | Data collector for this data source is not responding. The underlying items will not be displayed for such data source. | | +| Working | The data source is being processed at the moment. | | +| (not displayed) | The data source status is unknown. | | +| Item | Pay attention | The item was processed with some issues (non-critical). This status applies to the monitoring plans targeted at Logon Activity and Windows File Server. It means that data collection from at least one entity completed with errors. For example, a MyFileServer item included in the File Server monitoring plan contains all CIFS shares hosted on the MyFileServer computer. If any of these shares was processed with errors while others were processed successfully, the processing of the whole MyFileServer item will be considered partially completed, and the monitoring plan will have a yellow indicator, requiring your attention. Click the Details link to examine the product log. | +| Ready | The item was processed successfully and is ready for the next run of data collection. | | +| Take action | Critical error(s) occurred while processing this item. Click the Details link to examine the product log. | | +| Working | The item is being processed at the moment. | | + +You can use the Search field, or apply a filter to display the information you need. For example, in +the Apply Filters dialog you can select the Show only plans with issues to display only the +monitoring plans that require attention and corrective actions. + +This information will help you to troubleshoot the product operation, detect and eliminate the root +cause of the monitoring errors, providing for auditing continuity and compliance. diff --git a/docs/auditor/10.8/admin/healthstatus/dashboard/overview.md b/docs/auditor/10.8/admin/healthstatus/dashboard/overview.md new file mode 100644 index 0000000000..ba83eb9198 --- /dev/null +++ b/docs/auditor/10.8/admin/healthstatus/dashboard/overview.md @@ -0,0 +1,46 @@ +--- +title: "Health Status Dashboard" +description: "Health Status Dashboard" +sidebar_position: 10 +--- + +# Health Status Dashboard + +New Health Status dashboard facilitates Auditor maintenance and troubleshooting tasks, providing IT +specialists with at-a-glance view on the most critical factors: data collection performance, product +health and storage capacity. The dashboard comprises a set of widgets that display the status of +these aspects using aggregated statistics and charts. Nearly each widget allows you to drill down to +the detailed information on the aspect you are interested in. + +To view the dashboard, on the main Auditor page, click the Health status tile located in the +Configuration section. + +The dashboard includes the following widgets: + +- The Activity records by date chart—Shows the number of activity records produced by your data + sources, collected and saved by Netwrix Auditor during the last 7 days. See the + [Activity Records Statistics](/docs/auditor/10.7/admin/healthstatus/dashboard/activityrecordstatistics.md) topic for additional information. +- The Monitoring overview widget—Shows aggregated statistics on the statuses of all monitoring plans + configured in Netwrix Auditor at the moment. See the [Monitoring Overview](/docs/auditor/10.7/admin/healthstatus/dashboard/monitoringoverview.md) + topic for additional information. +- The Health log chart—Shows the statistics on the events written in the Netwrix Auditor health log + in the last 24 hours. Click the link in this widget to view the log. See the + [Netwrix Auditor Health Log](/docs/auditor/10.7/admin/healthstatus/dashboard/healthlog.md) topic for additional information. +- The Database statistics widget—Helps you to estimate database capacity on the default SQL Server + instance that hosts the product databases. See the [Database Statistics](/docs/auditor/10.7/admin/healthstatus/dashboard/databasestatistics.md) + topic for additional information. +- The Long-Term Archive widget—Helps you to estimate the capacity of the Long-Term Archive + file-based storage. To modify its settings, including location and retention, click the link in + this widget. See the [System Health](/docs/auditor/10.7/requirements/longtermarchive.md#system-health) topic + for additional information. +- The Working Folder widget—Helps you to estimate the capacity of the Auditor working folder used to + keep operational information (configuration files of the product components, log files, and other + data) on the Auditor Server. See the + [System Health](/docs/auditor/10.7/requirements/longtermarchive.md#system-health) topic for additional + information. + +![healthstatusdashboard_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/healthstatusdashboard_thumb_0_0.webp) + +You can also instruct Netwrix Auditor to forward similar statistics as a health summary email to +personnel in charge. For that, click Notification settings, then follow the steps described in the +[Notifications](/docs/auditor/10.7/admin/settings/notifications.md) topic. diff --git a/docs/auditor/10.8/admin/healthstatus/networktrafficcompression.md b/docs/auditor/10.8/admin/healthstatus/networktrafficcompression.md new file mode 100644 index 0000000000..1ff4665c84 --- /dev/null +++ b/docs/auditor/10.8/admin/healthstatus/networktrafficcompression.md @@ -0,0 +1,43 @@ +--- +title: "Network Traffic Compression" +description: "Network Traffic Compression" +sidebar_position: 40 +--- + +# Network Traffic Compression + +To reduce network traffic in distributed deployments, multi-site networks and other environments +with remote locations that have limited bandwidth, it is recommended to use network traffic +compression. For that purpose, special Netwrix utilities should be installed in the audited +environment. These utilities will run on the target computers (depending on your monitoring plan), +collect, pre-filter data and send it to Auditor Server in a highly compressed format. + +With network traffic compression, data from the target machines is collected simultaneously, +providing for network load balance and minimizing data collection time. (Unlike that, without +network traffic compression the target machines will be processed sequentially, i.e. one at a time.) +So, network traffic compression helps to increase scalability and optimize network traffic. + +Its key capabilities are as follows: + +- Allows Auditor to collect detailed metrics for the servers, log files, hardware and individual + processes +- Collects audit data with no recognizable load on the server +- Communicates with Netwrix Auditor Server at predefined intervals, relaying data back to a central + repository for storage + +Network traffic compression is available for the following data sources: + +- Active Directory +- Exchange +- File Servers +- Dell +- NetApp +- Windows Server +- Event Logs +- Group Policy +- Logon Activity +- SharePoint +- User Activity + +To learn how to enable this feature, refer to the +[Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/healthstatus/overview.md b/docs/auditor/10.8/admin/healthstatus/overview.md new file mode 100644 index 0000000000..6a92df3068 --- /dev/null +++ b/docs/auditor/10.8/admin/healthstatus/overview.md @@ -0,0 +1,15 @@ +--- +title: "Netwrix Auditor Operations and Health" +description: "Netwrix Auditor Operations and Health" +sidebar_position: 110 +--- + +# Netwrix Auditor Operations and Health + +This topic describes how you can monitor Auditor operations, health and resource usage. See the +following topics for additional information: + +- [Health Status Dashboard](/docs/auditor/10.7/admin/healthstatus/dashboard/overview.md) +- [Self-Audit](/docs/auditor/10.7/admin/healthstatus/selfaudit.md) +- [Health Summary Email](/docs/auditor/10.7/admin/healthstatus/summaryemail.md) +- [Netwrix Auditor Health Log](/docs/auditor/10.7/admin/healthstatus/dashboard/healthlog.md) diff --git a/docs/auditor/10.8/admin/healthstatus/selfaudit.md b/docs/auditor/10.8/admin/healthstatus/selfaudit.md new file mode 100644 index 0000000000..080840ec49 --- /dev/null +++ b/docs/auditor/10.8/admin/healthstatus/selfaudit.md @@ -0,0 +1,70 @@ +--- +title: "Self-Audit" +description: "Self-Audit" +sidebar_position: 20 +--- + +# Self-Audit + +Built-in Netwrix Auditor self-audit allows you to track changes to the product configuration, +including monitoring plans, data sources, audit scope and details about it (before-after values). +This helps you to ensure that monitoring scope is complete and changed only in line with the +workflows adopted by our organization. + +The corresponding option is available on the General tab of Netwrix AuditorSettings. By default, the +**Collect data for self-audit checkbox** is selected (enabled). + +![selfaudit_thumb_0_0](/images/auditor/10.7/admin/healthstatus/selfaudit_thumb_0_0.webp) + +### Search for Self-audit Results + +All Auditor self-audit Activity Records can be found quickly using AuditIntelligence Search. + +Follow the steps to search for self-audit results. + +**Step 1 –** In Auditor, navigate to Search. + +**Step 2 –** Set the Data source filter to **Self-audit**. + +**Step 3 –** Click Search to review results: + +![selfaudit_search_thumb_0_0](/images/auditor/10.7/admin/healthstatus/selfaudit_search_thumb_0_0.webp) + +**NOTE:** After reviewing your search results, apply filters to narrow your data. See the +[View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information. + +**Step 4 –** After browsing your data, navigate to Tools to use the search results as intended. See +the [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) topic for additional information. + +### Review Auditor Self-Audit Report + +Also, there is a new Netwrix Auditor Self-Audit report available under Organization Level Reports in +the predefined set of reports. This report shows detailed information on changes to Auditor +monitoring plans, data sources and audited items. + +Follow the steps to review the Self-audit report. + +**Step 1 –** In Auditor, navigate to Reports > Organization Level Reports. + +**Step 2 –** Select the Netwrix Auditor Self-Audit report and click View. + +![selfaudit_report](/images/auditor/10.7/admin/healthstatus/selfaudit_report.webp) + +## Netwrix Auditor Self-Audit Scope + +Review the full list of components and settings captured within Netwrix Auditor self-audit scope. + +| Object type | Action | What | Details | +| -------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------- | +| Local logon | - Successful Logon - Logoff | - Netwrix Auditor server name | - | +| Remote logon | - Successful Logon - Logoff | - Netwrix Auditor server name | - | +| Netwrix Auditor global settings | - Modified | - Self-audit settings - Usage statistics collection settings - Tags - Audit database settings - Long-term archive settings - Data import for investigations - Notification settings - Integration API settings - License settings - Check for update settings | - Self audit (enabled / disabled) - Settings changed | +| Monitoring plan | - Added - Modified - Removed | - Monitoring plan name | - Monitoring plan path changed - Role assignments (added / removed) - Activity Summary recipients (added / removed) - Settings changed | +| Data source | - Added - Modified - Removed | - Monitoring plan name \ Data source name | - Monitoring status (enabled / disabled) - Settings changed | +| Item | - Added - Modified - Removed | - Monitoring plan name \ Data source name \ Item name | - Item name changed - Settings changed | +| Alert | - Added - Modified - Removed | - Alert name | - Name changed - Mode (enabled / disabled) - Alert recipients (added / removed) - Settings changed | +| Monitoring plans folder | - Added - Modified - Removed | - All Monitoring Plans \ Folder name | - Name changed - Role assignments (added / removed) | +| Monitoring plans root folder | - Modified | - All Monitoring Plans | - Role assignment (added / removed) | +| Custom search-based report | - Added - Modified - Removed | - Report name | - Name changed - Settings changed | +| - Subscription to custom search-based report - Subscription to overview reports - Subscription to SSRS-based report - Subscription to risk assessment overview | - Added - Modified - Removed | - Subscription name | - Name changed - Mode (enabled / disabled) - Subscription recipients (added / removed) - Settings changed | +| Configuration integrity | - Added - Modified | - Configuration data - Configuration integrity state | - Alerts, saved searches, subscriptions, etc. | diff --git a/docs/auditor/10.8/admin/healthstatus/summaryemail.md b/docs/auditor/10.8/admin/healthstatus/summaryemail.md new file mode 100644 index 0000000000..1fd7309a8a --- /dev/null +++ b/docs/auditor/10.8/admin/healthstatus/summaryemail.md @@ -0,0 +1,24 @@ +--- +title: "Health Summary Email" +description: "Health Summary Email" +sidebar_position: 30 +--- + +# Health Summary Email + +Auditor Health Summary email includes all statistics on the product operations and health for the +last 24 hours; it also notifies you about license status. By default, this email is generated daily +at 7:00 AM and delivered to the recipient specified in the +[Notifications](/docs/auditor/10.7/admin/settings/notifications.md) settings. Email content is very similar to data +presented in the [Health Status Dashboard](/docs/auditor/10.7/admin/healthstatus/dashboard/overview.md). + +For greater usability, to depict overall product health state, the email includes a color indicator +in the topmost section: green means Auditor had no issues while auditing your IT infrastructure, and +red means there were some problems that require your attention. + +The email looks like shown below: + +![email_thumb_0_0](/images/auditor/10.7/admin/healthstatus/email_thumb_0_0.webp) + +The Monitoring Overview section of the email provides detail information only for the monitoring +plans with issues. Successfully completed monitoring plans are not included. diff --git a/docs/auditor/10.8/admin/healthstatus/troubleshooting.md b/docs/auditor/10.8/admin/healthstatus/troubleshooting.md new file mode 100644 index 0000000000..71902a7bb0 --- /dev/null +++ b/docs/auditor/10.8/admin/healthstatus/troubleshooting.md @@ -0,0 +1,39 @@ +--- +title: "Troubleshooting" +description: "Troubleshooting" +sidebar_position: 50 +--- + +# Troubleshooting + +This section provides instructions on how to troubleshoot issues that you may encounter while using +Netwrix Auditor. + +If your issue is not listed in the table below, try searching +[Netwrix Knowledge Base](https://helpcenter.netwrix.com/). + +If you need assistance from the Technical Support team, you can open a ticket using the Customer +portal as described in the Creating a ticket with Customer portal section. + +| Issue | Reason and solution | +| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| I cannot connect/logon to Auditor. | 1. You may have insufficient permissions. Contact your Auditor Global administrator to make sure that your account is delegated control of the product. 2. You are trying to connect to a remote Auditor specified by its IP address while the NTLM authentication is disabled. Try specifying a server by its name (e.g., EnterpriseWKS). | +| I do not receive any results while searching audit data or generating reports, or I am sure that some data is missing. | 1. No changes were detected. 2. You do not have sufficient permissions to review intelligence data. Contact your Global administrator. 3. Review your filter settings and make sure that your filters are properly configured. Try modifying your search. 4. You are looking for changes that occurred more than 180 days ago. These changes are no longer available for reporting and running searches. Ask your Auditor Global administrator to import audit data for a required date range from the Long-Term Archive. 5. Data collection for this monitoring plan might not have been launched two times yet or there was no data collection after this change; therefore, audit data has not been written to the Audit Database yet. 6. Some settings in Auditor are configured incorrectly. Contact your Auditor administrator to make sure that: - The monitoring plan you want to audit is properly configured, and the monitoring is enabled for each data source individually. - Audit Database settings are properly configured for each data source individually and Disable security intelligence and make data available only in activity summaries is cleared. Netwrix recommends to store all audit data on the same default SQL Server instance. | +| "No plans found" text in the Monitoring plan field. | Contact your Auditor Global administrator or Configurator to make sure that the monitoring plans exist and are properly configured. | +| I see a blank window instead of a report. | Contact your Auditor Global administrator to make sure that you are granted sufficient permissions on the Report Server. To view reports in a web browser - Open a web browser and type the Report Manager URL (found under Settings>**Audit Database**). In the page that opens, navigate to the report you want to generate and click the report name. You can modify the report filters and click View Report to apply them. | +| I configured report subscription to be uploaded to a file server, but cannot find it / cannot access it. | Subscriptions can be uploaded either to a file share (e.g., _\\filestorage\reports_) or to a folder on the computer where Auditor Server is installed. To access these reports, you must be granted the Read permission. | +| When trying to collect event data from Active Directory domain, an error message like this appears in Netwrix Health Log: _Monitoring Plan: `` The following error has occurred while processing '``': Error collecting the security log of the domain ``. Failed to process the domain controller `` due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it_. | This may happen due to Secondary Logon Service disabled state. To collect event data from the domain, this service must be up and running. Open its properties and start the service. | +| The 'Workstation' field in search, reports, and Activity Summary is reported as 'unknown' | For the full list of possible reasons, please refer to the following Netwrix Knowledge Base article: [Why is the "Workstation" field reported as "unknown"?](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA00g000000H9VdCAK.html) | + +## Creating a ticket with Customer portal + +1. Sign in at [https://www.netwrix.com/my_tickets.html](https://www.netwrix.com/my_tickets.html). +2. You can search or browse through the Knowledge Base articles here, or click **Create New + Ticket**: + + ![support_ticket_customer_portal_fixed](/images/auditor/10.7/admin/healthstatus/support_ticket_customer_portal_fixed.webp) + +3. Fill in the form, describing the issue, and click **Open a ticket**. +4. After that, you will be able to attach the files you need (screenshots, emails, reports, etc.). + +![support_ticket_customer_portal](/images/auditor/10.7/admin/healthstatus/support_ticket_customer_portal.webp) diff --git a/docs/auditor/10.8/admin/monitoringplans/_category_.json b/docs/auditor/10.8/admin/monitoringplans/_category_.json new file mode 100644 index 0000000000..3e533dc4dd --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Monitoring Plans", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/monitoringplans/activedirectory/_category_.json b/docs/auditor/10.8/admin/monitoringplans/activedirectory/_category_.json new file mode 100644 index 0000000000..57ae191a59 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/activedirectory/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Active Directory", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md b/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md new file mode 100644 index 0000000000..bab18a4e11 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md @@ -0,0 +1,154 @@ +--- +title: "Active Directory" +description: "Active Directory" +sidebar_position: 40 +--- + +# Active Directory + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data + collection and activity monitoring configure necessary protocols and ports for inbound and + outbound connections +- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +- [Active Directory](/docs/auditor/10.7/configuration/activedirectory/overview.md) – Configure data source as + required to be monitored + +Complete the following fields: + +| Option | Description | +| -------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General | | +| Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | +| Monitor Active Directory partitions | Select which of your Active Directory environment partitions you want to audit. By default, Auditor only tracks changes to the Domain partition and the Configuration partition of the audited domain. If you also want to audit changes to the Schema partition, or to disable auditing of changes to the Configuration partition, select one of the following: - Domain—Stores users, computers, groups and other objects. Updates to this partition are replicated only to domain controllers within the domain. - Configuration—Stores configuration objects for the entire forest. Updates to this partition are replicated to all domain controllers in the forest. Configuration objects store the information on sites, services, directory partitions, etc. - Schema—Stores class and attribute definitions for all existing and possible Active Directory objects. Updates to this partition are replicated to all domain controllers in the forest. You cannot disable auditing the Domain partition for changes. | +| Detect additional details | Specify additional information to include in reports and activity summaries. Select Group membershipif you want to include Group membership of the account under which the change was made. | +| Specify data collection method | You can enable **network traffic compression.** If enabled, a Compression Service will be automatically launched on the audited computer, collecting and prefiltering data. This significantly improves data transfer and minimizes the impact on the target computer performance. | +| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [Active Directory](/docs/auditor/10.7/configuration/activedirectory/overview.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. | +| Collect data for state-in-time reports | Configure Auditor to store daily snapshots of your Active Directory domain configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) topic for additional information. The product updates the latest snapshot on the regular basis to keep users up-to-date on actual system state. Only the latest snapshot is available for reporting in Auditor. If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. For that, in the Manage historical snapshots section, click **Manage** and select the snapshots that you want to import. To import snapshots, you must be assigned the Global administrator or the Global reviewer role . Move the selected snapshots to the Snapshots available for reporting list using the arrow button. When finished, click **OK**. | +| Users | | +| Specify monitoring restrictions | Specify user accounts to exclude from data collection (and, therefore, search results, reports and Activity Summaries). To add a user to the exclusion list, click Add, then provide the user name in the _domain\user_ format. Consider the following: - Use NetBIOS format for domain name: _mydomain_ - Some audit data (events) may contain _System_ as the user (initiator) account name. To exclude such data, specify "_System_" when adding a user name here. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | +| Objects | | +| Specify monitoring restrictions | Specify restrictions for the objects to monitor in your Active Directory. Use them to create the lists of specific objects to include and / or exclude from the monitoring scope (and, therefore, search results, reports and Activity Summaries). The following options are available: - Monitor all objects - **Include these objects** - **Exclude these objects** To create a list of inclusions / exclusions, click Add and enter object path using one of the following formats: - Canonical name, for example: _mydomain.local/Computers/filesrv01_ OR - Object path as shown in the "_What_" column of reports and search results, for example: _\local\mydomain\Computers\filesrv01_ You can use a wildcard (\*) to replace any number of characters in the path. See the examples below for more information. | + +![Specify monitoring restrictions](/images/auditor/10.7/admin/monitoringplans/activedirectory/mp_data_source_ad_omit_example.webp) + +Examples + +The following examples explain how the exclusion rules work. Same logic applies to the inclusion +rules. + +- _dc11.local/OU_ will exclude the OU itself. However, objects within this OU will not be excluded. +- _dc11.local/OU/\*_ will exclude objects within the OU. However, the OU itself will not be + excluded. +- _dc11.local/OU\*_ will exclude the OU itself, all objects within it, and also all objects whose + path begins with _dc11.local/OU_ (like _dc11.local/OU_HQ_). + +So, with the settings as in the screenshot above, the program will monitor all objects within the +_OU_, except for the objects whose path begins with _enterprise.local/OU/BO_. The OU itself, +however, will not be monitored, meaning that, for example, its renaming will not be reported. + +In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more +granular audit data. Note that the new monitoring scope restrictions apply together with previous +exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic +for additional information. + +## Enable Auditing of Active Directory Partitions + +This topic applies to auditing Active Directory only. + +Active Directory environment consists of the following directory partitions: + +- Domain partition — Stores users, computers, groups and other objects. Updates to this partition + are replicated only to domain controllers within the domain. +- Configuration partition — Stores configuration objects for the entire forest. Updates to this + partition are replicated to all domain controllers in the forest. Configuration objects store the + information on sites, services, directory partitions, etc. +- Schema partition — Stores class and attribute definitions for all existing and possible Active + Directory objects. Updates to this partition are replicated to all domain controllers in the + forest. + +By default, Netwrix Auditor only tracks changes to the Domain partition and the Configuration +partition of the audited domain. If you also want to audit changes to the Schema partition, or to +disable auditing of changes to the Configuration partition do the following: + +You cannot disable auditing the Domain partition for changes. + +To enable auditing of the Configuration and Schema partitions + +- Navigate to All monitoring plans > your monitoring plan > Active Directory. +- In the right pane, click **Configure**, next to Advanced Options. +- In the Advanced Options dialog, select **Configuration** and **Schema**. + +Information on changes to the selected partitions will be available in reports and will be saved in +snapshots. + +## AD Container + +Complete the following fields: + +| Option | Description | +| --------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General | | +| Specify AD container | Specify a whole AD domain, OU or container. Click **Browse** to select from the list of containers in your network. You can also: - Select a particular computer type to be audited within the chosen AD container: **Domain controllers, Servers (excluding domain controllers)**, or **Workstations**. - Click **Exclude** to specify AD domains, OUs, and containers you do not want to audit. In the Exclude Containers dialog, click Add and specify an object. The list of containers does not include child domains of trusted domains. Use other options **(Computer, IP range** to specify the target computers. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. If using a group Managed Service Account (gMSA), you can specify only the account name in the _domain\account$_ format. Password field can be empty. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. Refer to the [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) topic for more information on using Netwrix Privilege Secure as an account for data collection. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the[Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Containers and Computers | | +| Monitor hidden shares | By default, Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). Select **Monitor user-defined hidden shares** if necessary. Even when this option is selected, the product will not collect data from administrative hidden shares such as: default system root or Windows directory (ADMIN$), default drive shares (D$, E$, etc.), shares used by printers to enable remote administration (PRINT$), etc. | +| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. Depending on the type of the object you want to exclude, select one of the following: - Add AD Container – Browse for a container to be excluded from being audited. You can select a whole AD domain, OU or container. - Add Computer – Provide the name of the computer you want to exclude as shown in the "_Where_" column of reports and Activity Summaries. For example, _backupsrv01.mydomain.local_. Wildcards (\*) are not supported. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | + +## Domain + +Complete the following fields: + +| Option | Description | +| --------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Specify Active Directory domain | Specify the audited domain name in the FQDN format. For example, "_company.local_". | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select account type you want to use and enter credentials. The following choices are available: - User/password. The account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic for additional information. - Netwrix Privilege Secure. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. | + +Refer to the +[Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) +topic for more information on using Netwrix Privilege Secure as an account for data collection. + +## Use Netwrix Privilege Secure as a Data Collecting Account + +Starting with version 10.7, you can use Netwrix Privilege Secure to manage the account for +collecting data, after configuring the integration. See the +[Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information about +integration and supported data sources. In this case, the credentials will not be stored by Netwrix +Auditor. Instead, they will be managed by Netwrix Privilege Secure and provided on demand, ensuring +password rotation or using temporary accounts for data collection. + +Follow the steps to use Netwrix Privilege Secure as an account for data collection. + +**Step 1 –** Select the desired item. + +**Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data +collection. + +![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) + +**Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. +Credential-based is the default option. Refer to the +[Netwrix Privilege Secure](https://helpcenter.netwrix.com/category/privilegesecure_accessmanagement) +documentation to learn more about Access Policies. + +In this case, you need to provide the username of the account managed by Netwrix Privilege Secure, +and to which Netwrix Auditor has the access through a Credential-based access policy. + +**NOTE:** Netwrix recommends using different credentials for different monitoring plans and data +sources. + +![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) + +The second option is Resource-based. To use this option, you need to provide the Activity and +Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure +that you specified the same names as in Netwrix Privilege Secure. + +The Resource name in this case is where the activity will be performed. For example, if you grant +the data collecting account the access to a local Administrators group - the resource is the server +where the permission will be granted. + +Netwrix Privilege Secure is ready to use as an account for data collection. diff --git a/docs/auditor/10.8/admin/monitoringplans/activedirectory/scope.md b/docs/auditor/10.8/admin/monitoringplans/activedirectory/scope.md new file mode 100644 index 0000000000..63e45e2727 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/activedirectory/scope.md @@ -0,0 +1,55 @@ +--- +title: "Active Directory Monitoring Scope" +description: "Active Directory Monitoring Scope" +sidebar_position: 10 +--- + +# Active Directory Monitoring Scope + +You can fine-tune Netwrix Auditor by specifying data that you want to exclude from the Active +Directory monitoring scope. You can apply restrictions to monitoring scope via the UI. See the +[Objects](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md) topic for additional information. + +**_RECOMMENDED:_** Configure monitoring scope restrictions on the Active Directory monitoring plan +page. See the [Active Directory](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md) topic for additional information. + +Follow the steps to exclude data from the Active Directory monitoring scope: + +**Step 1 –** Navigate to the _%Netwrix Auditor installation folder%\Active Directory Auditing_ +folder. + +**Step 2 –** Edit the \*.txt files, based on the following guidelines: + +- Each entry must be a separate line. +- A wildcard (\*) is supported. You can use \* for cmdlets and their parameters. +- Lines that start with the # sign are treated as comments and are ignored. + +| File | Description | Syntax | +| -------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| addprops.txt | Contains a list of properties that should be included for newly created AD objects. When a new object is added, Auditor does not show any data in the Details column in the Activity Summary emails. If you want to see the information on certain attributes of a newly created object, specify these attributes in this file. | `Object type:property:` For example, to show a group description on this group’s creation, add the following line: `group:description:` | +| allowedpathlist.txt | Contains a list of AD paths to be included in Activity Summaries, reports, and search results. | `Path` The path must be provided in the same format as it is displayed in the What column. For example, if you only want to monitor specific OU(s) in the AD domain, but not the entire domain. You can put a wildcard (\*) in the omitpathlist.txt file to exclude all paths, and then specify the OU(s) you want to monitor in the allowedpathlist.txt file. Adding the widlcard (\*) to omitpathlist.txt will not allow Netwrix Auditor to run AD state-in-time data collection. | +| omitallowedpathlist.txt | Contains a list of AD paths to be excluded from Activity Summaries, reports, and search results. This file can be used if you want to exclude certain paths inside those specified in the allowedpathlist.txt file. | `Path` The path must be provided in the same format as it is displayed in the What column. For example, you can put a wildcard (\*) in the omitpathlist.txt file to exclude all paths, then specify the OU(s) you want to monitor in the allowedpathlist.txt file, and then specify the paths you want to exclude from within them in the omitallowedpathlist.txt file. Adding the widlcard (\*) to omitpathlist.txt will not allow Netwrix Auditor to run AD state-in-time data collection. | +| omitexchangeserverlist.txt | Specify the Microsoft Exchange 2010 servers to be excluded from data collection. | `FQDN_server_name` **NOTE:** You can use the wildcard (\*) when specifying servers for exclusion. | +| omitobjlist.txt | Contains a list of object types to be excluded from Activity Summaries, reports, and search results. | `Object type` For example, to omit changes to the printQueue object, add the following line: `printQueue`. | +| omitpathlist.txt | Contains a list of AD paths to be excluded from Activity Summaries, reports, and search results. | `Path` The path must be provided in the same format as it is displayed in the What column. For example, to exclude changes to the Service Desk OU, add the following line: `*\Service Desk\*`. | +| omitproplist.txt | Contains a list of object types and properties to be excluded from Activity Summaries, reports, and search results. | `object_type.property_name` If there is no separator (.) between an object type and a property, the whole entry is treated as an object type. For example to exclude the adminCount property from reports, add the following line: `*.adminCount`. | +| omitreporterrors.txt | Contains a list of errors to be excluded from Netwrix Health Log. Thus, these errors will not appear in the Activity Summary emails. | `Error message text` For example, if you have advanced audit settings applied to your domain controllers policy, the following error will be returned in the Activity Summary emails: `Auditing of Directory Service Access is not enabled for this DC. Adjust the audit policy settings using the Active Directory Audit Configuration Wizard or see the product documentation for more information.` Add the text of this error message to this file to stop getting it in the Activity Summary emails. | +| omitsnapshotpathlist.txt | Contains a list of AD paths to be excluded from AD snapshots. | `Path` The path must be provided in the same format as it is displayed in the What column. For example, to exclude data on the Disabled Accounts OU from the Snapshot report, add the following line:` *\Disabled Accounts*`. | +| omitstorelist.txt | Contains a list of object types and properties to be excluded from AD snapshots. | `object_type.property_name` If there is no separator (.) between an object type and a property, the whole entry is treated as an object type. For example to exclude data on the AD adminDescription property, add the following line: `*.adminDescription`. | +| omituserlist.txt | Contains a list of users you want to exclude from search results, reports and Activity Summaries. | `domain\username` For example, `*\administrator`. | +| processaddedprops.txt | Contains a list of properties that should be included for newly created AD objects. When a new object is created, Auditor does not show any data in the Details column in reports. If you want to see the information on certain attributes of a newly created object, specify these attributes in this file. | `object type:property:` For example, if you want a user’s Description property to be displayed in the reports when a user is added, add the following line: `User:Description:` | +| processdeletedprops.txt | Contains a list of properties that should be included for deleted AD objects. When an object is deleted, Auditor does not show any data in the Details column in reports. If you want to see the information on certain attributes of a deleted object, specify these attributes in this file. | `object type:property:` For example, if you want a user’s Description property to be displayed in the reports when a user is deleted, add the following line: `User:Description:` | +| propnames.txt | Contains a list of human-readable names for object types and properties to be displayed in Activity Summaries, reports, and search results. | `classname.attrname= intelligiblename` For example, if you want the adminDescription property to be displayed in the reports as Admin Screen Description, add the following line: `*.adminDesciption=Admin Screen Description` | + +## Example + +To exclude the "_corp/Administrator_" user from being audited, use the following syntax in the +**omitusers.txt** file: + +``` +# Specify users whose activity you want to exclude from Active Directory search results, reports and Activity Summaries. +# Syntax: Domain\Username +# Note: Wildcard * is supported and can replace any number of characters. +# Example: +# Corp\Administrator +``` diff --git a/docs/auditor/10.8/admin/monitoringplans/activitysummaryemail.md b/docs/auditor/10.8/admin/monitoringplans/activitysummaryemail.md new file mode 100644 index 0000000000..124758da16 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/activitysummaryemail.md @@ -0,0 +1,41 @@ +--- +title: "Activity Summary Email" +description: "Activity Summary Email" +sidebar_position: 220 +--- + +# Activity Summary Email + +Activity Summary email is generated automatically by Netwrix Auditor and lists all changes / +recorded user sessions that occurred since the last Activity Summary delivery. By default, for most +data sources an Activity Summary is generated daily at 3:00 AM and delivered to the specified +recipients. You can also launch data collection and Activity Summary generation manually. + +Notifications on user activity and event log collection (Event Log Collection Status) are a bit +different and do not show changes. + +The following Activity Summary example applies to Active Directory. Other Activity Summaries +generated and delivered by Netwrix Auditor will vary slightly depending on the data source. + +![ad_activitity_summary_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/ad_activitity_summary_thumb_0_0.webp) + +The example Activity Summary provides the following information on Active Directory changes: + +| Column | Description | +| ----------- | ------------------------------------------------------------------------------------------------------------------- | +| Action | Shows the type of action that was performed on the object. - Added - Removed - Modified - Activated (User Activity) | +| Object Type | Shows the type of the modified AD object, for example, 'user'. | +| What | Shows the path to the modified AD object. | +| Item | Shows the item associated with the selected monitoring plan. | +| Where | Shows the name of the domain controller where the change was made. | +| Who | Shows the name of the account under which the change was made. | +| When | Shows the exact time when the change occurred. | +| Workstation | Shows the name / IP address of the computer where the user was logged on when the change was made. | +| Details | Shows the before and after values of the modified AD object. | + +To initiate an on-demand Activity Summary delivery, navigate to the Monitoring Plans section, select +a plan, click Edit, and then select Update. A summary will be delivered to the specified recipient, +listing all activity that occurred since the last data collection. + +To disable Activity Summary Emails, you need to disable notifications in the settings. See the +[Notifications](/docs/auditor/10.7/admin/settings/notifications.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/monitoringplans/adfs.md b/docs/auditor/10.8/admin/monitoringplans/adfs.md new file mode 100644 index 0000000000..22bf82ff9a --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/adfs.md @@ -0,0 +1,46 @@ +--- +title: "Active Directory Federation Services" +description: "Active Directory Federation Services" +sidebar_position: 50 +--- + +# Active Directory Federation Services + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data collection + and activity monitoring configure necessary protocols and ports for inbound and outbound + connections +- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +- [AD FS](/docs/auditor/10.7/configuration/activedirectoryfederatedservices/overview.md) – Configure data source + as required to be monitored + +Complete the following fields: + +| Option | Description | +| -------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | +| Schedule AD FS logons collection | Specify period for AD FS logons collection. | +| Specify data collection method | You can enable network traffic compression. If enabled, a Compression Service will be automatically launched on the audited computer, collecting and pre-filtering data. This significantly improves data transfer and minimizes the impact on the target computer performance. | +| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. For a full list of audit settings required to collect comprehensive audit data and instructions on how to configure them, refer to [AD FS](/docs/auditor/10.7/configuration/activedirectoryfederatedservices/overview.md). | + +Review your data source settings and click **Add** to go back to your plan. The newly created data +source will appear in the **Data source** list. As a next step, click **Add item** to specify an +object for monitoring. See the [Add Items for Monitoring](datasources.md#add-items-for-monitoring) +topic for additional information. + +## Federation Server + +If you are going to audit an entire AD FS farm, consider adding all AD FS server one by one as items +to your monitoring plan. Otherwise, your audit scope may contain warnings, errors or incomplete +data. + +Complete the following fields: + +| Option | Description | +| --------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Specify AD FS federation server | Provide a server name by entering its FQDN, NETBIOS or IPv4 address. You can click Browse to select a computer from the list of computers in your network. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | diff --git a/docs/auditor/10.8/admin/monitoringplans/azurefiles/_category_.json b/docs/auditor/10.8/admin/monitoringplans/azurefiles/_category_.json new file mode 100644 index 0000000000..e21975e1d4 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/azurefiles/_category_.json @@ -0,0 +1,4 @@ +{ + "label": "Azure Files", + "position": 85 +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/monitoringplans/azurefiles/overview.md b/docs/auditor/10.8/admin/monitoringplans/azurefiles/overview.md new file mode 100644 index 0000000000..29710614b4 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/azurefiles/overview.md @@ -0,0 +1,274 @@ +--- +title: "Azure Files Monitoring Plan" +description: "Create and configure Azure Files monitoring plans in Netwrix Auditor v10.8" +sidebar_position: 1 +--- + +# Azure Files Monitoring Plan + +**New in Netwrix Auditor v10.8:** Azure Files monitoring provides comprehensive visibility into your Azure file storage environment, tracking file and folder changes, permission modifications, and access attempts across your Azure storage accounts. + +## Prerequisites + +Before creating an Azure Files monitoring plan, ensure you have completed: + +### Configuration Requirements +- **[Azure Files Configuration](/docs/auditor/10.8/configuration/azurefiles/overview.md)** - Azure environment setup and permissions +- **[Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md)** - Network connectivity configuration +- **[Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md)** - Service account configuration + +### Azure Prerequisites +- **Azure Application**: Registered Azure AD application with proper permissions +- **Storage Accounts**: Azure storage accounts with file shares configured for monitoring +- **Audit Logging**: Diagnostic settings enabled for file storage audit logs + +## Creating Azure Files Monitoring Plan + +### Step 1: Create New Monitoring Plan + +1. Navigate to **Home > Monitoring Plans** in Netwrix Auditor +2. Click **Create New Monitoring Plan** +3. Configure basic plan settings: + - **Plan Name**: Descriptive name (e.g., "Azure Files - Production") + - **Description**: Optional description of monitored resources + - **Schedule**: Configure collection frequency (recommended: every 15-30 minutes) + +### Step 2: Add Azure Files Data Source + +1. In the monitoring plan, click **Add Data Source** +2. Select **Azure Files** from the available data collectors +3. Configure data source properties: + +#### General Settings +| Setting | Description | Example | +|---------|-------------|---------| +| **Data Source Name** | Descriptive name for this data source | "Production Azure Files" | +| **Description** | Optional detailed description | "File shares for finance and HR departments" | + +#### Azure Connection Settings +| Setting | Description | Required | +|---------|-------------|----------| +| **Tenant ID** | Azure Active Directory tenant identifier | ✅ | +| **Application ID** | Azure AD application (client) ID | ✅ | +| **Application Secret** | Client secret for the Azure application | ✅ | + +**Important**: Use the Tenant ID (GUID format) rather than the tenant name for more reliable authentication. + +#### Storage Account Configuration +| Setting | Description | Required | +|---------|-------------|----------| +| **File Share Storage Account** | Name of storage account containing file shares | ✅ | +| **Audit Log Storage Account** | Storage account for collecting audit logs | ✅ | +| **Resource Group** | Resource group containing the storage accounts | ✅ | + +### Step 3: Configure Monitoring Options + +Select the monitoring capabilities to enable: + +#### Data Collection Options +| Option | Description | Impact | +|--------|-------------|--------| +| **Monitor this data source and collect activity data** | Enable basic activity monitoring | Standard performance impact | +| **Collect data for state-in-time reports** | Store daily snapshots for compliance reporting | Increased storage requirements | +| **Monitor file and folder changes** | Track file/folder creation, modification, deletion | Moderate performance impact | +| **Monitor permission changes** | Track access control modifications | Low performance impact | +| **Monitor access attempts** | Log successful and failed file access | High performance impact | + +#### Advanced Monitoring Settings +| Option | Description | Recommendation | +|--------|-------------|----------------| +| **Include read operations** | Monitor file read access | Enable for high-security environments only | +| **Monitor metadata changes** | Track file attribute modifications | Enable for compliance requirements | +| **Collect user activity details** | Detailed user interaction logging | Enable for forensic capabilities | + +**⚠️ Performance Note**: Enabling read operation monitoring significantly increases audit event volume and may impact performance. + +### Step 4: Add Storage Accounts for Monitoring + +1. Click **Add Item** to specify storage accounts to monitor +2. For each storage account: + +#### Item Configuration +| Setting | Description | Example | +|---------|-------------|---------| +| **Storage Account Name** | Azure storage account name | `companyfilestorage` | +| **Resource Group** | Resource group containing the storage account | `rg-files-production` | +| **Region** | Azure region of the storage account | `East US` | + +#### File Share Selection +| Setting | Description | Options | +|---------|-------------|---------| +| **Monitor All File Shares** | Monitor all file shares in the storage account | Recommended for comprehensive monitoring | +| **Specific File Shares** | Select individual file shares to monitor | Use for targeted monitoring | + +#### Monitoring Scope +Configure what to monitor within selected file shares: + +| Scope Option | Description | Use Case | +|--------------|-------------|----------| +| **All Files and Folders** | Monitor entire file share content | Complete visibility | +| **Specific Paths** | Monitor designated folders only | Focused monitoring on sensitive data | +| **Exclude Paths** | Exclude specific folders from monitoring | Reduce noise from temp/cache folders | + +### Step 5: Configure Audit Database + +Set up the database for storing Azure Files audit data: + +#### Database Configuration +| Setting | Description | Recommendation | +|---------|-------------|----------------| +| **Database Server** | SQL Server instance for audit data | Use dedicated audit database server | +| **Database Name** | Name for Azure Files audit database | `NetwrixAuditor_AzureFiles` | +| **Authentication** | SQL Server or Windows authentication | Use Windows authentication when possible | + +#### Database Sizing Considerations +- **Initial Size**: Minimum 1 GB for small environments +- **Growth**: 10-50 MB per 1000 files monitored per day +- **Retention**: Configure based on compliance requirements (typically 1-7 years) + +### Step 6: Configure Alert and Notification Settings + +Set up alerts for Azure Files monitoring: + +#### Email Notifications +| Setting | Description | Example | +|---------|-------------|---------| +| **SMTP Server** | Mail server for sending alerts | `smtp.company.com` | +| **Recipients** | Email addresses for notifications | `security@company.com` | +| **Alert Frequency** | How often to send digest emails | Daily summary recommended | + +#### Alert Triggers +Configure alerts for specific events: + +| Event Type | Alert Condition | Business Impact | +|------------|----------------|-----------------| +| **Mass File Deletion** | >100 files deleted by single user in 1 hour | High - Potential data loss | +| **Permission Escalation** | User granted elevated file share permissions | Medium - Security risk | +| **Unusual Access Patterns** | Access outside normal business hours | Medium - Potential insider threat | +| **Failed Access Attempts** | Multiple failed access attempts | Low - Possible unauthorized access | + +### Step 7: Test and Validate Configuration + +#### Connectivity Test +1. Click **Test Connection** to verify Azure authentication +2. Confirm successful connection to: + - Azure Active Directory + - Storage accounts + - Audit log storage + +#### Data Collection Validation +1. **Initial Scan**: Allow 15-30 minutes for initial data collection +2. **Verify Events**: Check that file activities are being captured +3. **Test Alerts**: Perform test activities to validate alert triggers + +## Monitoring Scope and Items + +### File Share Monitoring Scope + +Configure monitoring scope for optimal coverage: + +#### Inclusion Patterns +``` +/finance/* - Monitor all files in finance folder +/hr/sensitive/* - Monitor sensitive HR documents +*.docx - Monitor all Word documents +*.xlsx - Monitor all Excel files +``` + +#### Exclusion Patterns +``` +/temp/* - Exclude temporary files +~* - Exclude temporary Office files +*.tmp - Exclude temporary files +/logs/* - Exclude log directories +``` + +### User and Group Monitoring + +Configure which users and activities to monitor: + +#### High-Priority Users +- Administrators with elevated permissions +- Service accounts accessing file shares +- External users with file share access +- Recently terminated employees (during transition period) + +#### Activity Priorities +1. **Critical**: File deletion, permission changes, bulk operations +2. **Important**: File creation, modification, unusual access patterns +3. **Informational**: Read operations, metadata changes + +## Performance Optimization + +### Collection Frequency Optimization + +| Environment Size | Recommended Frequency | Rationale | +|------------------|----------------------|-----------| +| Small (<1000 files) | Every 15 minutes | Real-time monitoring with minimal impact | +| Medium (1000-10000 files) | Every 30 minutes | Balance between timeliness and performance | +| Large (>10000 files) | Every 60 minutes | Reduce processing overhead | + +### Storage Account Optimization + +#### Multiple Storage Accounts +- Create separate monitoring plans for different business units +- Distribute monitoring load across multiple data sources +- Group related file shares in single monitoring plans + +#### Regional Considerations +- Monitor storage accounts in same region as Netwrix Auditor when possible +- Account for network latency in collection scheduling +- Consider using multiple Netwrix Auditor instances for global deployments + +## Troubleshooting Common Issues + +### Authentication Problems + +**Issue**: "Authentication failed" or "Access denied" +**Solutions**: +1. Verify Tenant ID is correct (use ID, not name) +2. Check application secret hasn't expired +3. Confirm admin consent granted for Graph API permissions +4. Validate storage account role assignments + +### Data Collection Issues + +**Issue**: "No data collected" or "Events missing" +**Solutions**: +1. Verify diagnostic settings enabled on storage accounts +2. Check audit log storage account accessibility +3. Confirm monitoring plan is active and scheduled +4. Review exclusion patterns for over-filtering + +### Performance Problems + +**Issue**: Slow data collection or high system resource usage +**Solutions**: +1. Reduce monitoring frequency for large environments +2. Disable read operation monitoring if not required +3. Optimize inclusion/exclusion patterns +4. Consider splitting large storage accounts across multiple plans + +## Security Considerations + +### Data Privacy +- **Audit Log Content**: May include file names and metadata +- **User Information**: Contains user identities and access patterns +- **Compliance**: Ensure audit data handling meets regulatory requirements + +### Access Control +- **Monitoring Data**: Restrict access to audit data based on business need +- **Administrative Access**: Limit who can modify monitoring plans +- **Credential Management**: Securely store and rotate Azure application secrets + +## Next Steps + +After creating the Azure Files monitoring plan: + +1. **Monitor Performance**: Track initial collection performance and adjust settings +2. **Configure Reports**: Set up regular compliance and security reports +3. **Establish Baselines**: Create baseline activity patterns for anomaly detection +4. **User Training**: Train security team on Azure Files audit capabilities +5. **Regular Reviews**: Schedule periodic reviews of monitoring scope and effectiveness + +For detailed Azure Files configuration requirements, see [Azure Files Configuration](/docs/auditor/10.8/configuration/azurefiles/overview.md). \ No newline at end of file diff --git a/docs/auditor/10.8/admin/monitoringplans/azurefiles/scope.md b/docs/auditor/10.8/admin/monitoringplans/azurefiles/scope.md new file mode 100644 index 0000000000..8cf9a53382 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/azurefiles/scope.md @@ -0,0 +1,500 @@ +--- +title: "Azure Files Monitoring Scope" +description: "Configure monitoring scope for Azure Files in Netwrix Auditor v10.8" +sidebar_position: 2 +--- + +# Azure Files Monitoring Scope + +Configuring the appropriate monitoring scope for Azure Files is critical for balancing comprehensive visibility with performance and storage requirements. This document provides guidance on defining what files, folders, users, and activities to monitor. + +## Scope Configuration Overview + +Azure Files monitoring scope can be configured at multiple levels: +- **Storage Account Level**: Which storage accounts to monitor +- **File Share Level**: Which file shares within storage accounts to monitor +- **Path Level**: Specific folders and files to include or exclude +- **User Level**: Which users and groups to monitor +- **Activity Level**: Which types of activities to track + +## File and Folder Scope + +### Inclusion Strategies + +#### Department-Based Monitoring +Monitor file shares based on organizational structure: + +``` +Finance Department: + /finance/budgets/* + /finance/reports/* + /finance/invoices/* + +Human Resources: + /hr/personnel/* + /hr/policies/* + /hr/payroll/* + +Legal Department: + /legal/contracts/* + /legal/compliance/* + /legal/litigation/* +``` + +#### Sensitivity-Based Monitoring +Focus on sensitive data locations: + +``` +High Sensitivity: + /confidential/* + /executive/* + /security/* + /intellectual-property/* + +Medium Sensitivity: + /internal/* + /projects/* + /customer-data/* + +Low Sensitivity: + /public/* + /archived/* + /templates/* +``` + +#### File Type-Based Monitoring +Monitor specific file types across all locations: + +``` +Financial Documents: + *.xlsx + *.xls + *budget* + *financial* + +Legal Documents: + *.docx + *.pdf + *contract* + *agreement* + +Code and IP: + *.cs + *.js + *.py + *.config +``` + +### Exclusion Strategies + +#### System and Temporary Files +Exclude files that create excessive noise: + +``` +Temporary Files: + ~* + *.tmp + *.temp + desktop.ini + thumbs.db + +System Folders: + /System Volume Information/* + /$RECYCLE.BIN/* + /Windows/* + /.vs/* + +Cache and Logs: + /cache/* + /logs/* + /temp/* + *.log + *.cache +``` + +#### Application-Specific Exclusions +Exclude application folders that generate high activity: + +``` +Office Applications: + ~$* + *.tmp + /SharePoint Drafts/* + +Development Tools: + /bin/* + /obj/* + /node_modules/* + /.git/* + +Media Files (if not sensitive): + *.mp4 + *.avi + *.mov + *.mp3 +``` + +### Path Configuration Examples + +#### Complete File Share Monitoring +Monitor all content in critical file shares: + +```xml + + + /* + + + /temp/* + *.tmp + ~* + + +``` + +#### Selective Path Monitoring +Monitor only specific business-critical folders: + +```xml + + + /finance/* + /hr/sensitive/* + /legal/contracts/* + /executive/* + + + /finance/temp/* + *.tmp + + +``` + +## User and Group Scope + +### High-Priority Users + +#### Administrative Users +Monitor users with elevated privileges: + +``` +IT Administrators: + - Domain Admins + - Storage Admins + - Azure Admins + - Service Account owners + +Business Administrators: + - Finance Managers + - HR Directors + - Legal Counsel + - Executive Assistants +``` + +#### Service Accounts +Monitor automated processes and applications: + +``` +Service Accounts: + - Backup services + - Automated reporting systems + - Integration applications + - Synchronization services +``` + +#### External Users +Monitor external access and contractors: + +``` +External Users: + - Guest accounts + - Contractor accounts + - Vendor access accounts + - Temporary accounts +``` + +### User-Based Monitoring Rules + +#### Executive-Level Users +```xml + + + ceo@company.com + cfo@company.com + C-Level Executives + + + All + + High + +``` + +#### Privileged Users +```xml + + + Domain Admins + Storage Administrators + + + FileDelete + PermissionChange + BulkOperations + + Medium + +``` + +## Activity Scope Configuration + +### Activity Types + +#### File Operations +Configure which file operations to monitor: + +| Activity | Priority | Performance Impact | Use Case | +|----------|----------|-------------------|----------| +| **Create** | High | Low | Track new document creation | +| **Modify** | High | Low | Monitor document changes | +| **Delete** | Critical | Low | Detect data loss events | +| **Rename** | Medium | Low | Track file organization changes | +| **Move** | Medium | Low | Monitor file relocation | + +#### Access Operations +Configure access monitoring with performance considerations: + +| Activity | Priority | Performance Impact | Use Case | +|----------|----------|-------------------|----------| +| **Read** | Low | Very High | Forensic investigations only | +| **Open** | Medium | High | Track file usage patterns | +| **Download** | High | Medium | Monitor data exfiltration | +| **Copy** | High | Medium | Track data duplication | + +#### Permission Operations +Monitor security-related changes: + +| Activity | Priority | Performance Impact | Use Case | +|----------|----------|-------------------|----------| +| **Permission Grant** | Critical | Low | Detect privilege escalation | +| **Permission Revoke** | High | Low | Monitor access removal | +| **Owner Change** | Critical | Low | Track ownership transfers | +| **Share Creation** | High | Low | Monitor new shared access | + +### Activity Configuration Examples + +#### Security-Focused Monitoring +```xml + + + Delete + PermissionChange + OwnerChange + BulkDelete + UnusualAccess + + + 50 + 18:00-08:00 + + +``` + +#### Compliance-Focused Monitoring +```xml + + + Create + Modify + Delete + PermissionChange + Access + + + 7 + + +``` + +## Time-Based Scope + +### Business Hours Configuration +Focus monitoring on business-critical time periods: + +```xml + + + 08:00-18:00 + 08:00-18:00 + 08:00-18:00 + 08:00-18:00 + 08:00-18:00 + + + 18:00-08:00 + Saturday-Sunday + Holidays + + +``` + +### Seasonal Monitoring Adjustments +Adjust monitoring scope based on business cycles: + +``` +High Activity Periods: + - Financial year-end (increased finance folder monitoring) + - Budget planning season (enhanced budget document tracking) + - Audit periods (comprehensive compliance monitoring) + - Project deadlines (expanded project folder monitoring) + +Low Activity Periods: + - Company holidays (reduced monitoring frequency) + - Vacation seasons (focus on administrative activities) + - Maintenance windows (exclude system-generated activities) +``` + +## Performance Impact Considerations + +### High-Impact Activities to Limit + +#### Read Operation Monitoring +``` +Impact: Very High +Recommendation: Enable only for: + - High-security environments + - Specific sensitive folders + - Investigation periods + - Forensic analysis requirements +``` + +#### Real-Time Monitoring +``` +Impact: High +Recommendations: + - Use 15-30 minute collection intervals instead of real-time + - Implement during business hours only + - Focus on critical file shares +``` + +### Performance Optimization Strategies + +#### Tiered Monitoring Approach +``` +Tier 1 - Critical (Real-time monitoring): + - Executive documents + - Financial data + - Legal contracts + - IP/source code + +Tier 2 - Important (30-minute intervals): + - HR documents + - Customer data + - Project files + - Policies + +Tier 3 - Standard (Hourly monitoring): + - General business documents + - Archived data + - Templates + - Public information +``` + +## Scope Validation and Testing + +### Validation Checklist + +#### Coverage Validation +- [ ] All critical business data paths included +- [ ] High-risk users covered +- [ ] Sensitive file types monitored +- [ ] Compliance requirements met +- [ ] Security gaps identified and addressed + +#### Performance Validation +- [ ] Initial data collection completed within acceptable timeframe +- [ ] System resource usage within limits +- [ ] Network bandwidth impact acceptable +- [ ] Database growth rate manageable + +#### Functional Testing +```powershell +# Test scope configuration +$testActivities = @( + "Create test file in monitored folder", + "Modify existing monitored document", + "Delete file from sensitive location", + "Change permissions on critical folder", + "Access file outside business hours" +) + +foreach ($activity in $testActivities) { + Write-Host "Testing: $activity" + # Perform test activity + # Verify event captured in Netwrix Auditor + # Confirm alert triggered if configured +} +``` + +## Scope Maintenance + +### Regular Review Schedule + +#### Monthly Reviews +- Review alert frequency and relevance +- Adjust thresholds based on normal activity patterns +- Add new critical paths as business grows +- Remove monitoring for deprecated file shares + +#### Quarterly Reviews +- Analyze performance metrics and optimize +- Review user scope for organizational changes +- Update file type monitoring based on new applications +- Assess compliance requirement changes + +#### Annual Reviews +- Complete scope assessment against business objectives +- Review and update documentation +- Validate disaster recovery and backup monitoring +- Assess monitoring coverage gaps + +### Scope Documentation Template + +```markdown +## Azure Files Monitoring Scope - [Environment Name] + +### Monitored Storage Accounts +- [List storage accounts and business justification] + +### Monitored File Shares +- [List file shares with sensitivity classification] + +### Inclusion Rules +- [Document path patterns and rationale] + +### Exclusion Rules +- [Document excluded paths and reasons] + +### User Scope +- [High-priority users and groups] + +### Activity Scope +- [Monitored activities and thresholds] + +### Performance Baseline +- [Document expected volumes and performance metrics] + +### Review Schedule +- [Next review date and responsible party] +``` + +## Best Practices Summary + +1. **Start Narrow**: Begin with critical data and expand scope gradually +2. **Performance First**: Monitor performance impact before adding extensive scope +3. **Document Rationale**: Maintain clear documentation for scope decisions +4. **Regular Reviews**: Schedule periodic scope reviews and adjustments +5. **Test Changes**: Validate scope changes in test environment first +6. **User Communication**: Inform stakeholders about monitoring scope and privacy implications +7. **Compliance Alignment**: Ensure scope meets regulatory and compliance requirements +8. **Balance Coverage and Performance**: Optimize for business risk while maintaining system performance \ No newline at end of file diff --git a/docs/auditor/10.8/admin/monitoringplans/create.md b/docs/auditor/10.8/admin/monitoringplans/create.md new file mode 100644 index 0000000000..8d9056922f --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/create.md @@ -0,0 +1,183 @@ +--- +title: "Create a New Monitoring Plan" +description: "Create a New Monitoring Plan" +sidebar_position: 10 +--- + +# Create a New Monitoring Plan + +To create monitoring plans, user account must be assigned the _Global administrator_ in Auditor. +Users with the _Configurator_ role can create plans only within a delegated folder. See the +[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. + +To start creating a plan, do any of the following: + +- On the main Auditor page, in the Quick Start section, click the tile with a data source of your + choice, e.g., Active Directory. If you need a data source that is not listed on the main page, + click All data sources. +- On the main Auditor page, in the Configuration section, click the Monitoring Plans tile. On the + Monitoring Plans page, select Add Plan. + +Then follow the steps in the Monitoring Plan Wizard. + +**Step 1 –** Choose a data source for monitoring. + +**Step 2 –** Specify an account for collecting data. + +**Step 3 –** Specify default SQL Server instance and configure the Audit Database to store your +data. + +**Step 4 –** Configure notification settings. + +**Step 5 –** Specify the recipients who will receive daily activity summaries. + +**Step 6 –** Specify a plan name. + +## Settings for Data Collection + +![mp_wizard_step1](/images/auditor/10.7/admin/monitoringplans/mp_wizard_step1.webp) + +At this step of the wizard, specify the account that Auditor will use to access the data source, and +general settings for data collection. + +![mp_wizard_step2](/images/auditor/10.7/admin/monitoringplans/mp_wizard_step2.webp) + +| Option | Description | +| --------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Specify the account for collecting data | If applicable, you can create a data collecting account in the following ways: - Not specified – Select this option if you want to choose the Netwrix Privilege Secure as the data collecting account for the Monitoring Plan. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. - User/password – Provide a username and password for the account that Auditor will use to collect data. By default, the user name is prepopulated with your account name. - gMSA – Use the group Managed Service Account (gMSA) as data collecting account. For more details about gMSA usage, see the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic. **NOTE:** If you want to audit network devices or Microsoft Entra ID (formerly Azure AD)/Office 365 infrastructure, you need to use _not specified_ account. Make sure the account has sufficient permissions to collect data. For a full list of the rights and permissions, and instructions on how to configure them, refer to the[Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md). Netwrix recommends creating a special service account with extended permissions. When you configure a monitoring plan for the first time, the account you specify for data collection will be set as default. | +| Enable network traffic compression | If selected, this option instructs Auditor to deploy a special utility that will run on the audited computers and do the following: - Collect and pre-filter audit data - Compress data and forward it to Auditor Server. This approach helps to optimize load balance and reduce network traffic. So, using this option can be recommended especially for distributed networks with remote locations that have limited bandwidth. See the [Network Traffic Compression](/docs/auditor/10.7/admin/healthstatus/networktrafficcompression.md) topic for additional information. | +| Adjust audit settings automatically | Auditor can configure audit settings in your environment automatically. Select Adjust audit settings automatically. In this case, Auditor will continually check and enforce the relevant audit policies. For some data sources (currently, Active Directory and Logon Activity) you will be offered to launch a special utility that will detect current audit settings, check them against requirements and then adjust them automatically. See the [Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md) topic for additional information. You may also want to apply audit settings via GPO (for example, for Windows Servers). Auditor has certain limitations when configuring audit settings for NetApp and Dell Data Storage. See the [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) topic for additional information. If any conflicts are detected with your current settings, automatic audit configuration will not be performed. Select this option if you want to audit file shares on NetApp Data ONTAP 7 and 8 in 7-mode. For NetApp Clustered Data ONTAP 8 and ONTAP 9, only audit settings for file shares can be configured automatically, other settings must be applied manually. If you plan to monitor EMC Isilon, clear the checkbox. Currently, Auditor cannot configure audit on Dell Isilon appliances automatically. If you want to audit Dell VNX/VNXe, select Adjust audit settings automatically, but only audit settings for file shares will configured, the rest of settings must be configured manually. For a full list of audit settings and instructions on how to configure them manually, see the [Supported Data Sources](/docs/auditor/10.7/requirements/supporteddatasources/supporteddatasources.md) for additional information. | +| Launch Audit Configuration Assistant | Click to launch a specially intended utility that will assess your environment readiness for monitoring and adjust audit settings, if necessary. The tool will be launched in a new window. See the [Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md) topic for additional information. | +| Collect data for state-in-time reports | State-in-time reports are based on the daily configuration snapshots of your audited systems; they help you to analyze particular aspects of the environment. State-in-time configuration snapshots are also used for IT risks assessment metrics and reports. This data collection option is available if you are creating a monitoring plan for any of the following data sources: - Active Directory - File Servers - Windows Server - Group Policy - SharePoint - SharePoint Online - Exchange Online - SQL Server - VMware See the [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) and [IT Risk Assessment Overview ](/docs/auditor/10.7/admin/riskassessment/overview.md) topics for additional information. | + +## Default SQL Server Instance + +To provide searching, alerting and reporting capabilities, Auditor needs an SQL Server where audit +data will be stored in the databases. To store data from the data sources included in the monitoring +plan, the wizard creates an Audit Database for each plan. At this step, you should specify the +default SQL Server instance that will host Auditor databases. See the +[Requirements for SQL Server to Store Audit Data](/docs/auditor/10.7/requirements/sqlserver.md) topic for +additional information. + +Alternatively, you can instruct Auditor not to store data to the databases but only to the +repository (Long-Term Archive) – in this scenario, you will only be able to receive activity +summaries. Reporting and alerting capabilities will not be provided. + +Auditor skips this step if you have already configured Audit Database settings for other monitoring +plans. + +Select one of the following options: + +- Disable security intelligence and make data available only in activity summaries — select this + option if you do not want audit data to be written to the Audit Database. In this case, data will + be available only in Activity Summary emails. Alerts, reports and search capabilities will not be + supported. + + If you later clear this option to start saving data to the database, consider that already + collected audit data will not be imported in that database. + +- Install a new instance of Microsoft SQL Server Express automatically — this option is available at + the first run of the wizard. It allows you to deploy SQL Server 2016 SP2 Express with Advanced + Services on the local machine. This SQL Server will be used as default host for Auditor databases. + + It is strongly recommended that you plan for your databases first, as described in + [Requirements for SQL Server to Store Audit Data](/docs/auditor/10.7/requirements/sqlserver.md) section. + Remember that database size in SQL Server Express edition may be insufficient for your audited + infrastructure. + +- Use an existing SQL Server instance — select this option to use an existing SQL Server instance. + + Local SQL Server instance is detected automatically, and input fields are pre-populated with its + settings. + + Complete the following fields: + + | Option | Description | + | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | + | SQL Server instance | Specify the name of the SQL Server instance to store audit data. If you have more than one Auditor Server running in your network, make sure to configure them to use different SQL Server instances. The same SQL Server instance cannot be used to store audit data collected by several Auditor  Servers. | + | Authentication | Select the authentication type you want to use to connect to the SQL Server instance: - Windows authentication - SQL Server authentication | + | User name | Specify the account to be used to connect to the SQL Server instance. This account must be granted the **database owner (db_owner)** role and the dbcreator server role. | + | Password | Enter a password. | + + **NOTE:** If you want to use Group Managed Service Account (gMSA) to access the SQL Server + instance hosting the database, consider that in this case Netwrix Auditor will not be able to + generate SSRS-based reports (due to the following Microsoft article: + [Configure the Unattended Execution Account (Report Server Configuration Manager)](https://docs.microsoft.com/en-us/sql/reporting-services/install-windows/configure-the-unattended-execution-account-ssrs-configuration-manager?view=sql-server-ver15). + +## Database Settings + +At this step, you need to specify a database where Netwrix Auditor will store data collected from +the data sources included in this monitoring plan. + +It is strongly recommended to target each monitoring plan at a separate database. + +You can use default settings for your SQL Server instance or modify them (e.g., use a different +authentication method or user). You can also change these settings later. See the +[Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topic for additional information. + +![mp_wizard_step_db_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/mp_wizard_step_db_thumb_0_0.webp) + +Configure the following: + +| Setting | Description | +| ------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Disable security intelligence ... | Only select this option if you do not want your data to be stored in the database. In this case, you will only be able to receive activity summaries. Reporting and alerting capabilities will not be provided. To store data to the database, leave this check box cleared. | +| Database | Default database name is _Netwrix_Auditor_``_. It is recommended that you enter a meaningful name for the database here. It may include the data source type (e.g. \_Exchange_Audit_Data_ or _OracleSrv02_Audit_Data_), or so. If you decided to use the existing SQL Server instance instead of dedicated, you may want to use _Netwrix_Auditor_ prefix to distinguish Netwrix Auditor databases from others. | +| Use default SQL Server settings | Select this option if you want Auditor to connect to the SQL Server instance using the default settings you specified at the Default SQL Server Instance step. | +| Specify custom connection parameters | Select this option to use custom credentials when connecting to SQL Server. Specify authentication method and the account that Auditor will use. Make sure this account has sufficient rights to connect to SQL Server and work with the databases. | + +Auditor will connect to the default SQL Server instance and create a database with the specified +name on it. + +Global settings that apply to all databases with audit data (including retention period and SSRS +server used for reporting) are available on the Audit Database page of Auditor settings. See the +[Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topic for additional information. + +## SMTP Server Settings + +When you create the first monitoring plan, you are prompted to specify the email settings that will +be used for activity and health summaries, reports and alerts delivery. For the monitoring plans +that follow, Netwrix Auditor will automatically detect SMTP settings; however, for your first plan +you should provide them manually. See the [Notifications](/docs/auditor/10.7/admin/settings/notifications.md) topic for +additional information. + +You can skip this step if you do not want to receive email notifications, or configure SMTP settings +later, as described in the related section. + +## Email Notification Recipients + +Specify who will receive daily emails: [Activity Summary Email](/docs/auditor/10.7/admin/monitoringplans/activitysummaryemail.md) on changes +in the monitored infrastructure, and [Health Summary Email](/docs/auditor/10.7/admin/healthstatus/summaryemail.md) on +Auditor operations and health. + +Click Add Recipient and provide email address. + +**_RECOMMENDED:_** click **Send Test Email**. The system will send a test message to the specified +email address and inform you if any problems are detected. + +## Monitoring Plan Summary + +At this step of the wizard, to provide a meaningful name and optional description for your +monitoring plan. + +To start collecting data, you should specify the objects (items) that belong to the target data +source and should be processed according to the settings of this monitoring plan. For example, for +Exchange data source the item will be your Exchange server, for Windows Server data source - +computer, IP range or AD container, and so on. To add items right after finishing the monitoring +plan wizard, select the Add item now checkbox. See the +[Add Items for Monitoring](datasources.md#add-items-for-monitoring) topic for additional +information. + +A monitoring plan cannot collect data until at least one item is specified. + +Some data sources require additional system components and updates to be installed on your computer. +In this case, Auditor will inform you and prompt you to check data source prerequisites instead of +adding an item. + +Once you complete the wizard, you can: + +- Add items to your plan +- Add more data sources +- Customize data source's scope and settings (e.g., enable read access auditing) +- Fine-tune or modify plan settings +- Delegate control of the plan configuration or collected data to other users. diff --git a/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md b/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md new file mode 100644 index 0000000000..96bf412891 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md @@ -0,0 +1,83 @@ +--- +title: "Data Collecting Account" +description: "Data Collecting Account" +sidebar_position: 30 +--- + +# Data Collecting Account + +This is a service account that Auditor uses to collect audit data from the monitored items, such as +domains, OUs and servers. Netwrix recommends the creation of a dedicated service account for that +purpose. Depending on the data source your monitoring plan will process, the account must meet the +corresponding requirements in the table below. + +Select the account that will be used to collect data for this item. If you want to use a specific +account (other than the one you specified during monitoring plan creation), select account type you +want to use and enter credentials. The following choices are available: + +- User/password. The account must be granted the same permissions and access rights as the default + account used for data collection. See the Data Collecting Account topic for additional + information. +- Group Managed Service Account (gMSA). You should specify only the account name in the + domain\account$ format. See the + [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic for additional + information. +- Netwrix Privilege Secure. Starting with version 10.7, you can implement the integration between + Netwrix Auditor and Netwrix Privilege Secure. See the + [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. + +- Application and secret for Microsoft 365 with modern authentication. + +Each data collecting accounts should meet the requirements from the table below, depending on the +data source. + +| Data source | Required rights and permissions: | +| ------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Active Directory | [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) | +| Active Directory Federation Services | [Permissions for AD FS Auditing](/docs/auditor/10.7/configuration/activedirectoryfederatedservices/permissions.md) | +| Microsoft Entra ID (formerly Azure AD), Exchange Online, SharePoint Online, MS Teams | [Permissions for Microsoft Entra ID Auditing](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/permissions.md) [Permissions for Exchange Online Auditing](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/permissions.md) [Permissions for SharePoint Online Auditing ](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/permissions/permissions.md) [Permissions for Teams Auditing](/docs/auditor/10.7/configuration/microsoft365/teams/permissions/permissions.md) | +| Exchange | [Permissions for Exchange Auditing](/docs/auditor/10.7/configuration/exchange/permissions.md) | +| Windows File Servers | [Permissions for Windows File Server Auditing](/docs/auditor/10.7/configuration/fileservers/windows/permissions.md) | +| Dell Isilon | [Permissions for Dell Isilon/PowerScale Auditing](/docs/auditor/10.7/configuration/fileservers/dellisilon/permissions.md) | +| Dell VNX/VNXe/Unity | [Permissions for Dell Data Storage Auditing](/docs/auditor/10.7/configuration/fileservers/delldatastorage/permissions.md) | +| NetApp | [Permissions for NetApp Auditing](/docs/auditor/10.7/configuration/fileservers/netappcmode/permissions.md) | +| Nutanix Files | [Permissions for Nutanix Files Auditing](/docs/auditor/10.7/configuration/fileservers/nutanix/permissions.md) | +| Qumulo | [Permissions for Qumulo Auditing](/docs/auditor/10.7/configuration/fileservers/qumulo/permissions.md) | +| Synology | [Permissions for Synology Auditing](/docs/auditor/10.7/configuration/fileservers/synology/permissions.md) | +| Network Devices | [Permissions for Network Devices Auditing](/docs/auditor/10.7/configuration/networkdevices/permissions.md) | +| Oracle Database | [Permissions for Oracle Database Auditing](/docs/auditor/10.7/configuration/oracle/permissions.md) | +| SharePoint | [Permissions for SharePoint Auditing](/docs/auditor/10.7/configuration/sharepoint/permissions.md) | +| SQL Server | [Permissions for SQL Server Auditing ](/docs/auditor/10.7/configuration/sqlserver/permissions.md) | +| VMware | [Permissions for VMware Server Auditing ](/docs/auditor/10.7/configuration/vmware/permissions.md) | +| Windows Server (including DNS and DHCP) | [Permissions for Windows Server Auditing ](/docs/auditor/10.7/configuration/windowsserver/permissions.md) | +| Event Log (including IIS)—collected with Event Log Manager | [Permissions for Windows Server Auditing ](/docs/auditor/10.7/configuration/windowsserver/permissions.md) | +| Group Policy | [Permissions for Group Policy Auditing ](/docs/auditor/10.7/configuration/grouppolicy/permissions.md) | +| Logon Activity | [Permissions for Logon Activity Auditing ](/docs/auditor/10.7/configuration/logonactivity/permissions.md) | +| Inactive Users in Active Directory—collected with Inactive User Tracker | In the target domain - A member of the Domain Admins group | +| Password Expiration in Active Directory—collected with Password Expiration Notifier | In the target domain - A member of the Domain Users group | +| User Activity | On the target server - A member of the local Administrators group | +| Sensitive Data Discovery | [Sensitive Data Discovery ](/docs/auditor/10.7/admin/settings/sensitivedatadiscovery.md) | + +## Update Credentials for Account + +Once a Data Collecting Account has been configured, you can always update the password for this +account in Netwrix Auditor. + +Follow the steps to update credentials for the accounts used by Auditor: + +**Step 1 –** On the Auditor home page, navigate to **Settings**. + +**Step 2 –** Locate the General tab. + +**Step 3 –** Click the **Manage** button under **Accounts and Passwords**. + +**Step 4 –** Select an account you want to update the password for. + +**Step 5 –** Review the account configuration scope and click **Update password** next to this +account. + +![Password Management](/images/auditor/10.7/admin/monitoringplans/updatecredentials.webp) + +**Step 6 –** Save your edits. + +See the [General](/docs/auditor/10.7/admin/settings/general.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/monitoringplans/datasources.md b/docs/auditor/10.8/admin/monitoringplans/datasources.md new file mode 100644 index 0000000000..7407e36bfa --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/datasources.md @@ -0,0 +1,149 @@ +--- +title: "Manage Data Sources" +description: "Manage Data Sources" +sidebar_position: 20 +--- + +# Manage Data Sources + +You can fine-tune data collection for each data source. Settings that you configure for the data +source will be applied to all items belonging to that data source. Using data source settings, you +can, for example: + +- Enable state-in-time data collection (currently supported for several data sources) +- Depending on the data source, customize the monitoring scope (e.g., enable read access auditing, + monitoring of failed attempts) + +To add, modify and remove data sources, enable or disable monitoring, you must be assigned the +Global administrator role in the product or the Configurator role on the plan. See the +[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. + +## Modify Data Source Settings + +Follow the steps to modify data source settings. + +**Step 1 –** Select the monitoring plan you need and click **Edit**. + +**Step 2 –** Within the monitoring plan window, highlight the data source (the first one is the row +right under the blue table header) and click Edit data source on the right: + +![Data source settings](/images/auditor/10.7/admin/monitoringplans/mp_edit_data_source_thumb_0_0.webp) + +**Step 3 –** Modify data source settings as you need. + +**Step 4 –** When finished, click **Save**. + +Review the following for additional information: + +- [Active Directory](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md) +- [Active Directory Federation Services ](/docs/auditor/10.7/admin/monitoringplans/adfs.md) +- [Microsoft Entra ID](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md) +- [Exchange](/docs/auditor/10.7/admin/monitoringplans/exchange/overview.md) +- [Exchange Online](/docs/auditor/10.7/admin/monitoringplans/exchangeonline/overview.md) +- [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) +- [Group Policy](/docs/auditor/10.7/admin/monitoringplans/grouppolicy/overview.md) +- [Logon Activity](/docs/auditor/10.7/admin/monitoringplans/logonactivity/overview.md) +- [MS Teams](/docs/auditor/10.7/admin/monitoringplans/msteams.md) +- [Network Devices](/docs/auditor/10.7/admin/monitoringplans/networkdevices.md) +- [Oracle Database](/docs/auditor/10.7/admin/monitoringplans/oracle/overview.md) +- [SharePoint](/docs/auditor/10.7/admin/monitoringplans/sharepoint/overview.md) +- [SharePoint Online](/docs/auditor/10.7/admin/monitoringplans/sharepointonline/overview.md) +- [SQL Server](/docs/auditor/10.7/admin/monitoringplans/sqlserver/overview.md) +- [User Activity](/docs/auditor/10.7/admin/monitoringplans/overview_1.md) +- [VMware](/docs/auditor/10.7/admin/monitoringplans/vmware/overview.md) +- [Windows File Share](fileservers/scope.md#windows-file-share) + +Also, you can add a data source to the monitoring plan, or remove a data source that is no longer +needed. + +## Add a Data Source to an Existing Plan + +Follow the steps to add a data source to existing plan. + +**Step 1 –** Select the monitoring plan you need and click Edit. + +**Step 2 –** In the right pane, select Add data source. + +**Step 3 –** Specify a data source. + +**Step 4 –** Configure settings specific to your data source. + +**Step 5 –** When finished, click the **Add** button to save the settings. + +## Add Items for Monitoring + +Once you completed monitoring plan wizard and specified data sources, add items for monitoring. You +can add as many items for a data source as you want. In this case, all items will share settings you +specified for this data source. + +Each data source has a dedicated item type. Netwrix Auditor automatically suggests item types +associated with your data source. + +| Data Source | Item | +| ----------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Active Directory Group Policy Exchange Logon Activity | [Domain](activedirectory/overview.md#domain) | +| Active Directory Federation Services | [Federation Server](adfs.md#federation-server) | +| Microsoft Entra ID Exchange Online SharePoint Online Microsoft Teams | [Microsoft Entra ID](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md) | +| File Servers (including Windows file server, Dell, NetApp, Nutanix File server, Synology, and Qumulo) | [AD Container](activedirectory/overview.md#ad-container) [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) [Dell Isilon](fileservers/overview.md#dell-isilon) [Dell VNX VNXe](fileservers/overview.md#dell-vnx-vnxe) [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) [NetApp](fileservers/overview.md#netapp) [Windows File Share](fileservers/scope.md#windows-file-share) [Nutanix SMB Shares](fileservers/overview.md#nutanix-smb-shares) [Qumulo](fileservers/overview.md#qumulo) [Synology](fileservers/overview.md#synology) By default, Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). If you want to monitor user-defined hidden shares, select the related option in the monitored item settings. Remember that administrative hidden shares like default system root or Windows directory (ADMIN$), default drive shares (D$, E$), etc. will not be monitored. See the topics on the monitored items for details. | +| Network Devices | [Syslog Device](networkdevices.md#syslog-device) [Cisco Meraki Dashboard](networkdevices.md#cisco-meraki-dashboard) | +| Oracle Database | [Oracle Database Instance](oracle/overview.md#oracle-database-instance) | +| SharePoint | [SharePoint Farm](sharepoint/overview.md#sharepoint-farm) | +| SQL Server | [SQL Server Instance](sqlserver/items.md#sql-server-instance) [SQL Server Availability Group](sqlserver/items.md#sql-server-availability-group) | +| VMware | [VMware ESX/ESXi/vCenter](vmware/overview.md#vmware-esxesxivcenter) | +| Windows Server User Activity | [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) [AD Container](activedirectory/overview.md#ad-container) [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) | +| Netwrix API | [Integration API](/docs/auditor/10.7/api/overview.md) | + +To add, modify and remove items, you must be assigned the Global administrator role in the product +or the **Configurator** role on the plan. See the +[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md)topic for additional information. + +Follow the steps to add a new item to a data source: + +**Step 6 –** Navigate to your plan settings. + +**Step 7 –** Click Add item under the data source. + +**Step 8 –** Provide the object name and configure item settings. + +You can fine-tune data collection for each item individually. To do it, select an item within your +monitoring plan and click Edit item. For each item, you can: + +- Specify a custom account for data collection +- Customize settings specific your item (e.g., specify SharePoint site collections) + +## Configure Monitoring Scope + +In some environments, it may not be necessary to monitor the entire IT infrastructure. Netwrix +monitoring scope can be configured on the Data Source and/or Item levels. the section below contains +examples on how to use omit functionality in Auditor. + +In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more +granular audit data. Note that the new monitoring scope restrictions apply together with previous +exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for +additional information. + +| Use case | Related documentation | +| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **Active Directory** | | +| I want to omit all activity by a specific service account or service accounts with specific naming pattern. | [Active Directory](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md) | +| If Netwrix user is responsible just for a limited scope within corporate AD, s/he needs to omit everything else. | [Active Directory](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md) - Always both activity and state in time data are omitted. - In group/Not in group filters don't not process groups from omitted OUs. | +| **Logon Activity** | | +| I want to omit domain logons by a specific service account or service accounts with specific naming pattern. | [Logon Activity](/docs/auditor/10.7/admin/monitoringplans/logonactivity/overview.md) | +| **File Servers** (including Windows file server, Dell, NetApp, Nutanix File server) | | +| I have a server named _StationWin16_ where I can't install .Net 4.5 in OU where I keep all member servers. I want to suppress errors from this server by excluding it from the Netwrix auditing scope. | [AD Container](activedirectory/overview.md#ad-container) | +| A Security Officer wants to monitor a file share but s/he does not have access to a certain folder on this share. Then, s/he does not want the product to monitor this folder at all. | [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) [Dell Isilon](fileservers/overview.md#dell-isilon) [Dell VNX VNXe](fileservers/overview.md#dell-vnx-vnxe) [NetApp](fileservers/overview.md#netapp) [Windows File Share](fileservers/scope.md#windows-file-share) [Nutanix SMB Shares](fileservers/overview.md#nutanix-smb-shares) | +| A Security Officer wants to monitor a file share but s/he does not have access to a certain folder on this share. Then, s/he does not want the product to monitor this folder at all. | [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) [Dell Isilon](fileservers/overview.md#dell-isilon) [Dell VNX VNXe](fileservers/overview.md#dell-vnx-vnxe) [NetApp](fileservers/overview.md#netapp) [Windows File Share](fileservers/scope.md#windows-file-share) [Nutanix SMB Shares](fileservers/overview.md#nutanix-smb-shares) | +| A Security Officer wants to monitor a file share, but it contains a folder with a huge amount of objects, so s/he does not want Netwrix Auditor to collect State-in-Time data for this folder. | [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) [Dell Isilon](fileservers/overview.md#dell-isilon) [Dell VNX VNXe](fileservers/overview.md#dell-vnx-vnxe) [NetApp](fileservers/overview.md#netapp) [Windows File Share](fileservers/scope.md#windows-file-share) [Nutanix SMB Shares](fileservers/overview.md#nutanix-smb-shares) | +| I want to exclude specific computers within an IP range from the Netwrix auditing scope. | [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) | +| **SQL Server** | | +| I want to know if _corp\administrator_ user is messing with SQL data. | [SQL Server Instance](sqlserver/items.md#sql-server-instance) | +| As a Auditor administrator I want to exclude the _domain\nwxserviceaccount_ service account activity from SQL server audit so that I get reports without changes made by automatic systems. | [SQL Server Instance](sqlserver/items.md#sql-server-instance) | +| As a Auditor administrator I want to exclude all changes performed by _MyCustomTool_. | [SQL Server Instance](sqlserver/items.md#sql-server-instance) | +| **SharePoint** | | +| I want to exclude the _domain\nwxserviceaccount_ account from data collection as it produces standard activity that doesn't require monitoring. | [SharePoint Farm](sharepoint/overview.md#sharepoint-farm) | +| As a Auditor Administrator I want to exclude shared _PublicList_ from read audit. | [SharePoint Farm](sharepoint/overview.md#sharepoint-farm) | +| Windows Server | | +| I have a server named StationWin16 where I can't install .Net 4.5 in OU where I keep all member servers. I want to suppress errors from this server by excluding it from the Netwrix auditing scope. | [AD Container](activedirectory/overview.md#ad-container) | +| I want to exclude specific computers within an IP range from the Netwrix auditing scope. | [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) | +| VMware | | +| I have a virtual machine named "testvm" I use for testing purposes, so I want to exclude it from being monitored. | [VMware ESX/ESXi/vCenter](vmware/overview.md#vmware-esxesxivcenter) | diff --git a/docs/auditor/10.8/admin/monitoringplans/delegation.md b/docs/auditor/10.8/admin/monitoringplans/delegation.md new file mode 100644 index 0000000000..23cdd3948a --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/delegation.md @@ -0,0 +1,183 @@ +--- +title: "Role-Based Access and Delegation" +description: "Role-Based Access and Delegation" +sidebar_position: 230 +--- + +# Role-Based Access and Delegation + +Security and awareness of _who_ has access to _what_ is crucial for every organization. Besides +notifying you on _who_ changed _what_, _when_ and _where_, and _who_ has access to _what_ in your IT +infrastructure, Netwrix pays attention to safety of its own configuration and collected data. + +To keep the monitoring process secure, Netwrix suggests configuring role-based access. Delegating +control ensures that only appropriate users can modify the product configuration or view audit data, +based on your company policies and the user's job responsibilities. + +![rbac-01](/images/auditor/10.7/admin/monitoringplans/rbac-01.webp) + +Roles are described briefly in the table below and explained in detail in the next topic. + +| Role | Access level | Recommended use | +| -------------------- | ----------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Global administrator | Full control. Access to global settings, monitoring plan configuration, collected data, access delegation, etc. | The role should be assigned to a very limited number of employees—typically, only the owner of the Auditor Server host in your environment. By default, the user who installed Auditor is assigned the Global administrator role. All members of the local Administrators group are Global administrators too. | +| Configurator | Access to monitoring plan configuration within the delegated scope: a monitoring plan or a folder with monitoring plans | The role is appropriate for system administrators, infrastructure engineers, and members of operations team who manage network and services in your organization but should not have access to sensitive data. | +| Global reviewer | Access to all data collected by Auditor and intelligence and visibility features. | The role is appropriate for key employees who need to review audit data collected across various data sources—typically, IT managers, chief information security officer, and so on. | +| Reviewer | Access to data collected by Auditor and intelligence and visibility features within the delegated scope. | The role is appropriate for members of security team and helpdesk personnel who are responsible for mitigating risks in a certain sector of your environment (e.g., domain, file share). This role is granted to specialists who use the Integration API to retrieve data from the Audit Database. | +| Contributor | Write access to Auditor Server and Audit Database. | This service role is granted to specialists who use the Integration API to write data to the Audit Database. This role is also granted to service accounts or any accounts used for interaction with Auditor Server (e.g., add-on scripts). | + +## Compare Roles + +| Feature | Global administrator | Global reviewer | Reviewer | Configurator | Contributor | +| --------------------------------------------------------------------------------------------- | -------------------- | ----------------------------------------------- | -------------------------------------------------------------------------- | --------------------------------------------------------------------------------------- | ------------------- | +| Launch Auditor client | + | + | + | + | + | +| Delegate control, grant and revoke permissions | + | – | – | – | – | +| View global settings | + | Some | Some | Some | Some | +| Modify global settings (including default Audit Database, licenses, retention settings, etc.) | + | – | – | – | – | +| Monitoring plan configuration | | | | | | +| List folders | + | + | + | + | + | +| Add, remove, rename folders | + | – | – | Some Only under assigned folders provided that directly assigned roles do not conflict. | – | +| List monitoring plans, review status | + | + | + | + | + | +| Add, remove, rename monitoring plans | + | – | – | Some Only under assigned folders provided that directly assigned roles do not conflict. | – | +| Modify monitoring plan settings | + | Some Add and remove Activity Summary recipients | Some Add and remove Activity Summary recipients within the delegated scope | Some Restricted to the delegated scope (folder or monitoring plan) | – | +| List data sources and items in monitoring plan | + | + | + | + | + | +| Add, modify, remove data sources, enable or disable auditing | + | – | – | Some Restricted to the delegated scope (folder or monitoring plan) | – | +| Add, modify, remove items in monitoring plan | + | – | – | Some Restricted to the delegated scope (folder or monitoring plan) | – | +| Manage state-in-time data, upload snapshots to the Audit Database | + | + | – | – | – | +| Intelligence | | | | | | +| List reports | + | + | + | + | + | +| Generate reports | + | + | Some Restricted to the delegated scope (folder or monitoring plan) | – | – | +| List report subscriptions | + | + | + | + | + | +| Create, modify, remove subscriptions | + | + | – | – | – | +| See search results | + | + | Some Restricted to the delegated scope (folder or monitoring plan) | – | – | +| List, create, modify, delete custom reports | + | + | + | + | - (only can _list_) | +| List alerts | + | + | + | + | + | +| Create, modify, delete alerts | + | + | – | – | – | +| Import investigation data from the Long-Term Archive | + | – | – | – | – | +| View investigation data | + | + | – | – | – | +| View Behavior Anomalies list | + | + | – | – | – | +| Review user profile | + | + | – | – | – | +| Update anomaly status | + | + | – | – | – | +| **Risk Assessment Overview dashboard and drill-down reports** | | | | | | +| View Risk Assessment Overview results (dashboard, drill-down reports) | + | + | Some Restricted to delegated scope (folder or monitoring plan) | - | - | +| Modify risk level thresholds | + | + | - | - | - | +| Customize risk indicators | + | + | - | - | - | +| Auditor Integration API | | | | | | +| Write Activity Records | + | – | – | – | + | +| Retrieve Activity Records | + | + | + Restricted to the delegated scope (folder or monitoring plan) | – | – | + +## Assign Roles + +Netwrix Auditor allows assigning roles on the product as a whole, or within a specific _scope_. A +scope can be limited to a single monitoring plan or to the contents of a folder. This helps to +ensure that only authorized personnel has access to the relevant data. For example, database +administrators (DBAs) should not access Active Directory management data, and domain administrators +do not need permissions to view database schema changes or update data collection settings, and so +on. + +### Understanding Scopes + +Scopes for different Auditor roles are as follows: + +| Scope | Roles | +| ----------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Global (All monitoring plans) | Global administrator Global reviewer Contributor **NOTE:** To assign Global role, you need to click **Delegate** button from All Monitoring Plans list. | +| Folder level | Configurator Reviewer | +| Plan level | Configurator Reviewer | + +Follow the steps to delegate control to some scope, review, or revoke assigned roles. + +**Step 1 –** On the main Auditor page, navigate to the **Monitoring Plans** section. + +**Step 2 –** Browse your monitoring plans tree and select the scope you want to delegate to a user +(e.g., All monitoring plans root folder, a folder, or a monitoring plan). + +**Step 3 –** Click **Delegate**. + +Review roles that are already defined for this scope. + +Do one of the following: + +| To... | Do... | +| ------------------------ | --------------------------------------------------------------------------------------------------------------------------- | +| Assign a role | 1. Select Add User. 2. In the dialog that opens, specify a user (or a group) and a role. | +| Revoke a role assignment | - Click ![delete](/images/auditor/10.7/admin/monitoringplans/delete.webp) next to the user. | + +**Step 4 –** Click **Save** or **Save&Close**. + +### Browser Role on Report Server + +Along with adding a new Global administrator, Global reviewer or Reviewer role, Auditor will +automatically assign this user the Browser role on the Report Server (SSRS). + +The Browser role is required to generate reports. It is granted on all reports — or within a +delegated scope. + +If for some reason Auditor is unable to grant the Browser role, configure it manually. See the +[SQL Server Reporting Services](/docs/auditor/10.7/requirements/sqlserverreportingservice.md) topic for +additional information. + +### Default Role Assignments + +By default, several accounts and local groups are assigned the following roles: + +| Account or group name | Role | Details | +| ---------------------- | -------------------- | ----------------------------------------------------------------------------------------------------------------- | +| Local Administrators | Global administrator | | +| Local service accounts | Global administrator | Global administrator Auditor uses system accounts for data processing and interaction between product components. | +| Auditor Administrators | Global administrator | | +| Auditor Client Users | Global reviewer | | + +#### Delegating Control via Windows Group Membership + +During the Auditor Server installation, Netwrix Auditor Administrators and Netwrix Auditor Client +Users groups are created automatically. To delegate control via group membership, you need to add +users to these groups on the computer where Auditor Server resides. + +Users will be granted roles with extended permissions. You may need to limit their scope to a +specific monitoring plan. + +Follow the steps to add an account to a group. + +**Step 1 –** On the computer where Auditor Server is installed, start the Local Users and Computers +snap-in. + +**Step 2 –** Navigate to the **Groups** node and locate the Netwrix Auditor Administrators or +Netwrix Auditor Client Users group. + +**Step 3 –** In the group properties, click **Add**. + +Specify users you want to be included in this group. + +![Roles_Groups](/images/auditor/10.7/admin/monitoringplans/roles_groups.webp) + +**NOTE:** For additional information about User Activity video access management, see the +[Configure Video Recordings Playback Settings](/docs/auditor/10.7/configuration/useractivity/videorecordings.md) +topic. + +## Provide Access to a Limited Set of Data + +By default, only users designated in Auditor are allowed to view its configuration and collected +data. This policy ensures that only authorized and trustworthy users access sensitive data and make +changes. + +However, in some cases, organizations need to provide certain employees with access to a limited set +of audit data. For example, an auditor might need to review particular access reports once or twice +a year. You can provide these users (recipients) with means to review the data they need without +actually running Auditor. This ensures that dedicated specialists have access to the data while +preventing data breaches and ensuring that sensitive data is not being distributed across the whole +company. + +Netwrix recommends granting limited access permissions to employees who need to: + +- Review audit data periodically in accordance with company policy +- Review audit data accumulated over time +- Be notified only in case of a rare incident + +To grant limited access to audit data, you can: + +| Do.. | Recommended use | +| ----------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Schedule email report subscriptions | This is helpful when you want to share information with a group of employees, external consultants, auditors, and so on. Reports are sent according to a specified schedule and recipients can review them, but they do not have any other means to access audit data. Basically, this option is enough for employees who are interested in a high-level summary—for example, an auditor who performs monthly access rights attestation on critical folders or a senior manager. | +| Publish reports to file shares | This scenario works great for a helpdesk with several departments. Assume, each department has its own field of responsibility and must not disclose information to other departments. You can configure Auditor to publish reports to folders that can be accessed by employees from a specific department only. You might set up the following folders and permissions: - The user support team has access to a folder with reports on account lockouts and password resets. - File server helpdesk personnel have access to a different folder with daily reports listing all file removals. - The helpdesk supervisor has access to both folders. | +| Configure alerts | This is helpful for rare occasions when you have to notify some senior specialists about critical system state that has to be addressed immediately, e.g., CISO must mitigate risks in the event of massive deletions in the sensitive data storage. | diff --git a/docs/auditor/10.8/admin/monitoringplans/exchange/_category_.json b/docs/auditor/10.8/admin/monitoringplans/exchange/_category_.json new file mode 100644 index 0000000000..d00e7f2246 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/exchange/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Exchange", + "position": 70, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/monitoringplans/exchange/overview.md b/docs/auditor/10.8/admin/monitoringplans/exchange/overview.md new file mode 100644 index 0000000000..afc6790d57 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/exchange/overview.md @@ -0,0 +1,47 @@ +--- +title: "Exchange" +description: "Exchange" +sidebar_position: 70 +--- + +# Exchange + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data + collection and activity monitoring configure necessary protocols and ports for inbound and + outbound connections +- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +- [Exchange](/docs/auditor/10.7/configuration/exchange/overview.md) – Configure data source as required to be + monitored + +Complete the following fields: + +| Option | Description | +| -------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | +| Detect additional details | Specify additional information to include in reports and activity summaries. Select Group membershipif you want to include Group membership of the account under which the change was made. | +| Specify data collection method | You can enable **network traffic compression.** If enabled, a Compression Service will be automatically launched on the audited computer, collecting and prefiltering data. This significantly improves data transfer and minimizes the impact on the target computer performance. | +| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [Exchange](/docs/auditor/10.7/configuration/exchange/overview.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. | +| Collect data on non-owner access to mailboxes | Enable monitoring of unauthorized access to mailboxes within your Exchange Online organization. Configure the following: - Notify users if someone gained access to their mailboxes — Select this checkbox if you want to notify users on non-owner access events to their mailboxes. - Notify only specific users — Select this checkbox and click Add Recipient to specify the list of users who will receive notifications on non-owner access to their mailboxes. Users not included in this list will not be notified. - Enable automatic audit configuration— If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. See the [Exchange](/docs/auditor/10.7/configuration/exchange/overview.md) and [Exchange Online](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/overview.md) topics for additional information about the audit settings required for Auditor to collect comprehensive audit data and instructions on how to configure them. If you select to automatically configure audit in the target environment, your current audit settings will be checked on each data collection and adjusted if necessary. | + +Review your data source settings and click **Add** to go back to your plan. The newly created data +source will appear in the **Data source** list. As a next step, click **Add item** to specify an +object for monitoring. See the +[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +information. + +## Domain + +Complete the following fields: + +| Option | Description | +| --------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Specify Active Directory domain | Specify the audited domain name in the FQDN format. For example, "_company.local_". | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select account type you want to use and enter credentials. The following choices are available: - User/password. The account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic for additional information. - Netwrix Privilege Secure. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. | + +See the [Permissions for Exchange Auditing](/docs/auditor/10.7/configuration/exchange/permissions.md) topic +for additional information. diff --git a/docs/auditor/10.8/admin/monitoringplans/exchange/scope.md b/docs/auditor/10.8/admin/monitoringplans/exchange/scope.md new file mode 100644 index 0000000000..0b9be8407c --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/exchange/scope.md @@ -0,0 +1,63 @@ +--- +title: "Exchange Monitoring Scope" +description: "Exchange Monitoring Scope" +sidebar_position: 10 +--- + +# Exchange Monitoring Scope + +You can fine-tune Auditor by specifying data that you want to exclude from the Exchange monitoring +scope. In addition, you can exclude data from non-owner access auditing. + +- Exchange Monitoring Scope +- To exclude users or mailboxes from the Mailbox Access monitoring scope + +Follow the steps to exclude data from the Exchange monitoring scope: + +**Step 1 –** Navigate to the _%Netwrix Auditor installation folder%\Active Directory Auditing_ +folder. + +**Step 2 –** Edit the \*.txt files, based on the following guidelines: + +- Each entry must be a separate line. +- A wildcard (\*) is supported. You can use \* for cmdlets and their parameters. +- Lines that start with the # sign are treated as comments and are ignored. + +| File | Description | Syntax | +| ------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| aal_omitlist.txt | For Exchange 2010 and above, the file contains a list of changes performed by cmdlets. To exclude a change from reports, specify name of a cmdlet and the attribute that is changed by the selected cmdlet. | `cmdlet.attrname` For example: `Set-User` `Set-ContactSet-Group` `#Update-AddressList` `Add-ADPermissionRemove-ADPermission` `#RBAC:` `*-MailboxAuditLogSearch` `*-AdminAuditLogSearch` | +| aal_propnames.txt | For Exchange 2010 and above, the file contains a list of human-readable names of changed attributes to be displayed in change reports. To exclude a change from the reports, specify name of a cmdlet and the attribute that is changed by the selected cmdlet. | `classname.attrname= intelligiblename` For example: `*-OutlookAnywhere.SSLOffloading = Allow secure channel (SSL) offloading` | +| omitobjlist_ecr.txt | Contains a list of human-readable names of object classes to be excluded from change reports. | `Classname` For example: `exchangeAdminService` `msExchMessageDeliveryConfig` `Exchange_DSAccessDC` | +| omitpathlist_ecr.txt | Contains a list of AD paths to be excluded from change reports. | `Path` For example: `*\Microsoft Exchange System Objects\SystemMailbox*` | +| omitproplist_ecr.txt | Contains a list of object types and properties to be excluded from change reports. | `object_type.property_name` If there is no separator (.) between an object type and a property, the whole entry is treated as an object type. For example: `msExchSystemMailbox.*` `*.msExchEdgeSyncCredential` `*.msExchMailboxMoveTargetMDBLink` `*.adminDescription` | +| omitreporterrors_ecr.txt | Contains a list of errors to be excluded from Activity Summaries. | `Error message text` For example, to omit the error “The HTTP service used by Public Folders is not available, possible causes are that Public stores are not mounted and the Information Store service is not running. ID no: c1030af3”, add `*c1030af3*` to the file. | +| omitstorelist_ecr.txt | Contains a list of classes and attributes names to be excluded from Exchange snapshots. | `object_type.property_name` If there is no separator (.) between an object type and a property, the whole entry is treated as an object type. For example: `Exchange_Server.AdministrativeGroup` `Exchange_Server.AdministrativeNote` `Exchange_Server.CreationTime` | +| propnames_ecr2007.txt | Contains a list of human-readable names for object classes and attributes of Exchange 2007 to be displayed in change reports. | `classname.attrname= intelligiblename` For example: `msExchMDBAvailabilityGroup= Database Availability Group` | + +To exclude users or mailboxes from the Mailbox Access monitoring scope + +Auditor  allows specifying users and mailboxes that you do not want to monitor for non-owner mailbox +access events. To do this, edit the mailboxestoexclude.txt, userstoexclude.txt, and +agentomitusers.txt files. + +Follow the steps to exclude data from Exchange Online monitoring scope + +**Step 1 –** Navigate to the _%Netwrix Auditor installation folder%\Non-owner Mailbox Access +Reporter for Exchange_ folder. + +**Step 2 –** Edit mailboxestoexclude.txt, userstoexclude.txt, or agentomitusers.txt files, based on +the following guidelines: + +- Each entry must be a separate line. +- A wildcard (\*) is supported. You can use \* for cmdlets and their parameters. +- Lines that start with the # sign are treated as comments and are ignored. + +You can also limit your reports by specific mailboxes. Edit the mailboxestoinclude.txt file to +specify mailboxes. + +| File | Description | Syntax | +| ---------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| mailboxestoexclude.txt | This file contains a list of mailboxes and folders that must be excluded from data collection. | Each entry must be a separate line. Wildcards (\*) can be used to replace any number of characters. - To exclude the certain user's mailbox, enter `username@domainname` , e.g.`john.smith@acme.com` - To exclude the certian folder, enter `username@domainname/foldername` , e.g. `john.smith@acme.com/Drafts ` - Use \*to exclude multiple mailboxes or folders, e.g. `*/foldername` will exclude the specified folder when processing all mailboxes. Examples: `*admin*@corp.com` `*/Drafts` - exclude _Drafts_ folder (for all mailboxes) `*/Testfolder/*` - exclude subfolders of _Testfolder_ (for all mailboxes) | +| mailboxestoinclude.txt | This file contains a list of mailboxes that must be included when collecting data. For the mailboxes added to this list, the reports will contain only non-owner access events. | Specify email address to be included in the list as `username@domainname.` Example: `analyst@enterprise.com` | +| userstoexclude.txt | This file contains a list of users who must be excluded from reports if they perform non-owner access attempt for mailboxes (audit data on these users will still be stored in the state-in-time snapshots). If a user is removed from this list, the information on this user’s actions can be viewed with the Report Viewer. | `DOMAIN\username` | +| agentomitusers.txt | This file contains a list of users who must be excluded from reports and snapshots. If a user is removed from this list, audit data on this user will only be available after the next data collection. Writing new users to this file affects reports and snapshots only if Network traffic compression is enabled. | `DOMAIN\username` | diff --git a/docs/auditor/10.8/admin/monitoringplans/exchangeonline/_category_.json b/docs/auditor/10.8/admin/monitoringplans/exchangeonline/_category_.json new file mode 100644 index 0000000000..17592919a5 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/exchangeonline/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Exchange Online", + "position": 80, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/monitoringplans/exchangeonline/overview.md b/docs/auditor/10.8/admin/monitoringplans/exchangeonline/overview.md new file mode 100644 index 0000000000..fcc8005c98 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/exchangeonline/overview.md @@ -0,0 +1,122 @@ +--- +title: "Exchange Online" +description: "Exchange Online" +sidebar_position: 80 +--- + +# Exchange Online + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data + collection and activity monitoring configure necessary protocols and ports for inbound and + outbound connections +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +- [Exchange Online](/docs/auditor/10.8/configuration/microsoft365/exchangeonline/overview.md) – Configure data + source as required to be monitored + +## How to add Exchange Online Monitoring Plan + +This instruction shows how to collect audit data from the Microsoft 365 tenant. + +If you plan to use modern authentication, see the +[Configuring Microsoft Entra ID App for Auditing Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md#configuring-microsoft-entra-id-app-for-auditing-microsoft-entra-id) +topic for additional information on how to prepare Microsoft Entra ID app with required permissions. +Make sure you have the following at hand: + +- Tenant name +- For modern authentication: Application (client) ID +- Application secret +- For basic authentication: User name and password + +Types of data that can be collected by Netwrix Auditor from the Microsoft 365 tenant depend on the +authentication option you choose. + +Follow the steps to configure Office 365 tenant as a monitored item. + +**Step 1 –** On the **General** page of the item properties, specify **Tenant name**: + +- If you are going to use **Basic authentication**, you can proceed to the next step – **Tenant + name** will be filled in automatically after it. + +- **NOTE:** Basic authentication is no longer possible for Exchange Online. For the already existing + tenants it is still possible to use basic authentication for SharePoint Online and Microsoft Entra + ID monitoring. + +- If you are going to use **Modern authentication**, paste the obtained name. See the + [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) + topic for additional information. + +![tenantenvironment](/images/auditor/10.8/admin/monitoringplans/tenantenvironment.webp) + +If you are using a government tenant, please click the **Tenant Environment** tab and select the +desired tenant environment. + +**Step 2 –** Select authentication method that will be used when accessing Office 365 services: + +- Basic authentication: + + - Selected, Office 365 organization will be accessed on behalf of the user you specify. + - Enter **User name** and **password**; use any of the following formats: _user@domain.com_ or + _user@domain.onmicrosoft.com_. + - The **Tenant name** field then will be filled in automatically. + - Make sure this user account has sufficient access rights. See + [Using Basic Authentication with Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/basicauth.md) + topic for additional information. + +- Modern authentication: + + - Selected, Office 365 organization will be accessed using the Microsoft Entra ID (formerly + Azure AD) app you prepared. Enter: + + - **Application ID**; + + - **Application secret**. + + - See the + [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) + for additional information. + +**Step 3 –** Click the **Add** button. + +![Add Office 365 Item window](/images/auditor/10.8/admin/monitoringplans/item_o365_basic_auth_thumb_0_0.webp) + +You can use a single account to collect audit data for different Office 365 services (Microsoft +Entra ID, Exchange Online, SharePoint Online); however, Netwrix recommends that you specify +individual credentials for each of them. + +If you plan to collect and report on the audit data for Exchange Online non-owner mailbox access, +consider that the value shown in the "_Who_" field in reports and search results will be displayed +in UPN format (unlike the earlier Netwrix Auditor versions). This refers to the following scenarios: + +- All new installations +- Upgrade from the previous versions if: + + - Modern authentication is selected in the item settings after the upgrade. + + OR + + - Modern authentication has ever been selected in the item settings and reverted back to Basic + later + +**Step 4 –** Complete the following fields: + +| Option | Description | +| -------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Monitor this data source and collect activity data | | +| Configure audit settings | See the [Exchange Online](/docs/auditor/10.8/configuration/microsoft365/exchangeonline/overview.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. | +| Collect data for state-in-time reports | Configure Netwrix Auditor to store daily snapshots of your system configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.8/admin/reports/types/stateintime/overview.md) topic for additional information. | +| Collect data on non-owner access to mailboxes | Monitor access to mailboxes by users other than the mailbox owner, including delegate access and shared mailbox activities. | +| Collect data on owner access to mailboxes | **NEW IN 10.8:** Monitor mailbox owner activities including mass email deletions, folder permission changes, and inbox rule modifications. This provides enhanced visibility into potentially suspicious owner activities that could indicate compromised accounts or insider threats. | + +Review your data source settings and click **Add** to go back to your plan. The newly created data +source will appear in the **Data source** list. As a next step, click **Add item** to specify an +object for monitoring. See the +[Add Items for Monitoring](/docs/auditor/10.8/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +information. + +See the [Microsoft 365](/docs/auditor/10.8/configuration/microsoft365/overview.md) topic for additional +information. diff --git a/docs/auditor/10.8/admin/monitoringplans/exchangeonline/scope.md b/docs/auditor/10.8/admin/monitoringplans/exchangeonline/scope.md new file mode 100644 index 0000000000..0bc6cb9e14 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/exchangeonline/scope.md @@ -0,0 +1,28 @@ +--- +title: "Exchange Online Monitoring Scope" +description: "Exchange Online Monitoring Scope" +sidebar_position: 10 +--- + +# Exchange Online Monitoring Scope + +You can fine-tune Netwrix Auditor by specifying data that you want to exclude from the Exchange +Online monitoring scope. + +Follow the steps to exclude data from Exchange Online monitoring scope: + +**Step 1 –** Navigate to the _%Netwrix Auditor installation folder%\Exchange Online Auditing_ +folder. + +**Step 2 –** Edit the \*.txt files, based on the following guidelines: + +- Each entry must be a separate line. +- A wildcard (\*) is supported. You can use \* for cmdlets and their parameters. +- Lines that start with the # sign are treated as comments and are ignored. + +| File | Description | Syntax | +| ---------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| omitlist.txt | The file contains a list of changes performed by cmdlets. To exclude a change from reports, search results and Activity Summaries, specify name of a cmdlet and the attribute that is changed by the selected cmdlet. | `cmdlet` For example: `Enable-OrganizationCustomization` `New-AdminAuditLogSearch` `New-MailboxAuditLogSearch` `cmdlet.param` For example: `*.Identity` `*.DomainController` `*.Organization` `*.IgnoreDefaultScope` `*.Force` `*.Confirm` `*.Password` `*-ManagementRoleEntry.Parameters` `Remove-PublicFolder.Recurse` | +| omitpathlist.txt | Contains a list of paths to be excluded from reports, search results and Activity Summaries. | `path` For example: `SystemMailbox{*}` `DiscoverySearchMailbox{*}` `FederatedEmail.*` You can use a wildcard (\*) to replace any number of characters in the path. | +| omituserlist.txt | Contains a list of user names to be excluded from reports, search results and Activity Summaries. | `domain\user` For example: `Enterprise\analyst` `email address` For example: `analyst@Enterprise.onmicrosoft.com` | +| propnames.txt | Contains a list of human-readable names for object classes and their and their properties to be displayed in search results, reports and Activity Summaries. | `cmdletobject=friendlyname` `cmdlet.param=friendlyname` For example: `RoleGroupMember = Role Group` `UMHuntGroup = Unified Messaging Hunt Group` | diff --git a/docs/auditor/10.8/admin/monitoringplans/fileservers/_category_.json b/docs/auditor/10.8/admin/monitoringplans/fileservers/_category_.json new file mode 100644 index 0000000000..e15046caf4 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/fileservers/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "File Servers", + "position": 90, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md b/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md new file mode 100644 index 0000000000..cb365cc132 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md @@ -0,0 +1,476 @@ +--- +title: "File Servers" +description: "File Servers" +sidebar_position: 90 +--- + +# File Servers + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data + collection and activity monitoring configure necessary protocols and ports for inbound and + outbound connections +- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +- [File Servers](/docs/auditor/10.7/configuration/fileservers/overview.md) – Configure data source as required + to be monitored + + + +Complete the following fields: + +- General +- Monitor this data source and collect activity data – Enable monitoring of the selected data source and configure Auditor to collect and store audit data. +- Specify actions for monitoring – Specify actions you want to track and auditing mode. + +| | | +|---------------|------------------------------------------------------------------------------------------------------------------------------------------| +| **Changes** | | +| Successful | Use this option to track changes to your data. Helps find out who made changes to your files, including their creation and deletion. | +| Failed | Use this option to detect suspicious activity on your file server. Helps identify potential intruders who tried to modify or delete files, etc., but failed to do it. | +| **Read access** | | +| Successful | Use this option to supervise access to files containing confidential data intended for privileged users. Helps identify who accessed important files besides your trusted users. Enabling this option on public shares will result in high number of events generated on your file server and the amount of data written to the Long-Term Archive. | +| Failed | Use this option to track suspicious activity. Helps find out who was trying to access your private data without proper justification. Enabling this option on public shares will result in high number of events generated on your file server and the amount of data written to the Long-Term Archive. | + +Actions reported by Auditor vary depending on the file server type and the audited object (file, folder, or share). The changes include creation, modification, deletion, moving, etc. To track the copy action, enable successful read access and change auditing. + +- Specify data collection method – You can enable network traffic compression. If enabled, a Compression Service will be automatically launched on the audited computer, collecting and prefiltering data. This significantly improves data transfer and minimizes the impact on the target computer performance. +To collect data from 32-bit operating systems, network traffic compression must be disabled. +To collect data from Windows Failover Cluster, network traffic compression must be enabled. + +- Configure audit settings – You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. +Do not select the checkbox if you want to configure audit settings manually. Some settings cannot be configured automatically. The product has the following limitations depending on your file server type + +| File Server | SACL Check | SACL Adjust | Policy Check | Policy Adjust | Log Check | Log Adjust | +|-----------------------------------------|------------|-------------|--------------|---------------|-----------|------------| +| Windows | + | + | + | + | + | + | +| Dell Celerra\VNX\Unity | + | + | + | — | + | — | +| Dell Isilon | n/a | n/a | + | — | + | — | +| NetApp Data ONTAP 7 and 8 in 7-mode | + | + | + | + | + | + | +| NetApp Clustered Data ONTAP 8 and ONTAP 9 | + | + | + | + | + | — | +| Nutanix Files | n/a | n/a | + | — | n/a | n/a | + +- Collect data for state-in-time reports – Configure Auditor to store daily snapshots of your system configuration required for further state-in-time reports generation. +When auditing file servers, changes to effective access permissions can be tracked in addition to audit permissions. By default, Combination of file and share permissions is tracked. File permissions define who has access to local files and folders. Share permissions provide or deny access to the same resources over the network. The combination of both determines the final access permissions for a shared folder—the more restrictive permissions are applied. Upon selecting Combination of file and share permissions only the resultant set will be written to the Audit Database. Select File permissions option too if you want to see difference between permissions applied locally and the effective file and share permissions set. To disable auditing of effective access, unselect all checkboxes under Include details on effective permissions. +In the Schedule state-in-time data collection section, you can select a custom weekly interval for snapshots collection. Click Modify and select day(s) of week you want your snapshot to be collected. +In the Manage historical snapshots section, you can click Manage and select the snapshots that you want to import to the Audit Database to generate a report on the data source's state at the specific moment in the past. +You must be assigned the Global administrator or the Global reviewer role to import snapshots. +Move the selected snapshots to the Snapshots available for reporting list using the arrow button. +The product updates the latest snapshot on the regular basis to keep users up to date on actual system state. Users can also configure Only the latest snapshot is available for reporting in Auditor. If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. + +- Users + +- Specify monitoring restrictions – Select the users to be excluded from search results, reports and Activity Summaries. To add users to the list, click Add and provide user name in the domain\user format: *mydomain\user1*. + - Use NetBIOS domain name format. + - To exclude events containing “System” instead of initiator's account name in the “Who” column, enter "System" value to the list. + +In addition to the restrictions for a monitoring plan, you can use the *.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the *.txt files. + +Review your data source settings and click **Add** to go back to your plan. The newly created data +source will appear in the Data source list. As a next step, click Add item to specify an object for +monitoring. + +| | +| ------------------- | +| Windows File Server | +| Dell Data storage | +| NetApp storage | +| Nutanix File Server | + +By default, Auditor will monitor all shares stored in the specified location, except for hidden +shares (both default and user-defined). If you want to monitor user-defined hidden shares, select +the related option in the monitored item settings. + +Administrative hidden shares like default system root or Windows directory (_ADMIN$_), default drive +shares (_D$, E$_), etc. will not be monitored. See the +[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +information. + +_Remember,_ before adding your monitored items, examine the considerations, limitations and +recommendations provided in the following sections: + +- [DFS-Related Constraints](/docs/auditor/10.7/configuration/fileservers/windows/overview.md#dfs-related-constraints) +- [Supported File Servers and Devices](/docs/auditor/10.7/configuration/fileservers/overview.md#supported-file-servers-and-devices) +- [State-in-Time Data](/docs/auditor/10.7/configuration/fileservers/overview.md#state-in-time-data) +- [Sensitive Data](/docs/auditor/10.7/configuration/fileservers/overview.md#sensitive-data) + +## Dell VNX VNXe + +Dell VNX, VNXe, Celerra, and Unity NAS devices are collectively referred to as Dell Data Storage. + +Complete the following fields: + +| Option | Description | +| ----------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General | | +| Specify Dell VNX/VNXe, Celerra or Unity storage array | Provide a server name by entering its FQDN, NETBIOS or IPv4 address. You can click Browse to select a computer from the list of computers in your network. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Scope | | +| Monitor hidden shares | By default, Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). Select **Monitor user-defined hidden shares** if necessary. Even when this option is selected, the product will not collect data from administrative hidden shares such as: default system root or Windows directory (ADMIN$), default drive shares (D$, E$, etc.), shares used by printers to enable remote administration (PRINT$), etc. | +| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. See the Fine-tune Monitoring Scope for additional information on how to narrow your monitoring scope. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | + +### Fine-tune Monitoring Scope + +To audit all file shares, under Specify monitoring restrictions, select Monitor all file shares in +the array. + +![item_emc_scope_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/fileservers/item_emc_scope_thumb_0_0.webp) + +You can also create lists of specific file shares to include and/or exclude from being audited. + +#### Include a File Share + +Follow the steps to include a file share. + +**Step 1 –** Under Specify monitoring restrictions, select Specific file shares. + +**Step 2 –** Click Add Inclusion. + +**Step 3 –** Provide UNC path to a shared resource. For example: _NewStation\Shared._ + +**Step 4 –** Do not specify a default file share mapped to a local drive (e.g., \\Server\e$). + +#### Exclude Specific Data + +Follow the steps to exclude specific data. + +Click Add Exclusion. Then, in the Specify Filters dialog, do the following: + +**Step 5 –** Provide the path to the file share where you are going to exclude some audit data. Use +the path format as it appears in the "_What_" column of reports and Activity Summaries — for +example, _\\corpsrv\shared_. + +**Step 6 –** You can use a wildcard (\*) only if you need to exclude user activity on this file +share. For other data types (_state-in-time_ or _all data_) wildcards are not supported. This refers +to the specified shared folder, its subfolders and files. + +**Step 7 –** Select what type of data you want to exclude: + +| Option | Description | Example | +| ----------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **All Data** | Select if you want to completely exclude the specified file share from being audited. The product will not collect any user activity or state-in-time data. **NOTE:** In this case,Auditor does not adjust audit settings automatically for the selected folders. | A Security Officer wants to monitor a file share but s/he does not have access to a certain folder on this share. Thus, s/he configures the product not to monitor this folder at all. | +| State-in-Time | Select to configure Auditor to exclude data for the state-in-time reports from the monitoring scope. | A Security Officer wants to monitor a file share, but it contains a folder with a huge amount of objects, so s/he does not want Auditor to collect state-in-time data for this folder. | +| **User Activity** | Select to exclude actions performed by specific users on the selected file share. See the procedure below for details. **NOTE:** In this case, the product still collects stat-in-time data for this share. | A Security Officer wants to monitor a file share that contains a public folder for which s/he does not want to collect _Read_ operations. | + +**Follow the steps to exclude specific user activity.** + +**Step 1 –** Specify what user accounts should be excluded: + +- All Users — Select to exclude the activity of any user on the file share you specified. +- These users— Select to exclude specific users' activity. Provide user names as shown in the + "_Who_" column in reports and Activity Summaries, e.g., _MyDomain\user1_. To enter multiple + accounts, use comma as a separator. + +**Step 2 –** Specify what actions should be excluded: + +- All actions — Exclude all actions of the selected users +- These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_. + +![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) + +**Step 3 –** After configuring all filters, click **Add** to save them and return to the item +settings. + +## Dell Isilon + +Complete the following fields: + +| Option | Description | +| --------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General | | +| Specify Dell Isilon storage array | Provide the IP address or the host name of the name server used to connect to your access zone. For example, _account.corp.lab_ | +| Access Zone | Enter the name of access zone partition within your EMC Isilon cluster. For example, _zone_account_ | +| OneFS web administration interface URL | Enter Dell Isilon web administration URL (e.g., _https://isiloncluster.corp.lab:8080_). This URL is used to get configuration details about your Isilon cluster via OneFS API. | +| File Share UNC path to audit logs | Path to the file share located on a Dell Isilon with event log files (e.g., _\\srv\netwrix_audit$\logs_). | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Scope | | +| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. See the Fine-tune Monitoring ScopeFine-tune Monitoring Scopetopic for additional information about how to narrow your monitoring scope. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | + +### Configure the Scope + +You can configure Netwrix Auditor to audit all file shares except for ones added as exclusions. For +that, under Specify monitoring restrictions, select All file shares in the array. You can also +create lists of specific file shares to include and/or exclude from being audited. Review the +following for additional information: + +- Add Inclusion +- Add Exclusion + +### Add Inclusion + +Follow the steps to add inclusion. + +**Step 1 –** Under Specify monitoring restrictions, select Specific file shares. + +**Step 2 –** Click Add Inclusion. + +**Step 3 –** Provide UNC path to a shared resource. For example: _NewStation\Shared._ + +Do not specify a default file share mapped to a local drive (e.g., \\Server\e$). + +### Add Exclusion + +Follow the steps to add exclusion. + +Click Add Exclusion. Then, in the Specify Filters dialog, do the following: + +**Step 4 –** Provide the path to the file share where you are going to exclude some audit data. Use +the path format as it appears in the "_What_" column of reports and Activity Summaries — for +example, _\\corpsrv\shared_. + +**Step 5 –** You can use a wildcard (\*) only if you need to exclude user activity on this file +share. For other data types (_state-in-time_ or _all data_) wildcards are not supported. This refers +to the specified shared folder, its subfolders and files. + +**Step 6 –** Select what type of data you want to exclude: + +| Option | Description | Example | +| ----------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **All Data** | Select if you want to completely exclude the specified file share from being audited. The product will not collect any user activity or state-in-time data. **NOTE:** In this case,Auditor does not adjust audit settings automatically for the selected folders. | A Security Officer wants to monitor a file share but s/he does not have access to a certain folder on this share. Thus, s/he configures the product not to monitor this folder at all. | +| State-in-Time | Select to configure Auditor to exclude data for the state-in-time reports from the monitoring scope. | A Security Officer wants to monitor a file share, but it contains a folder with a huge amount of objects, so s/he does not want Auditor to collect state-in-time data for this folder. | +| **User Activity** | Select to exclude actions performed by specific users on the selected file share. See the procedure below for details. **NOTE:** In this case, the product still collects stat-in-time data for this share. | A Security Officer wants to monitor a file share that contains a public folder for which s/he does not want to collect _Read_ operations. | + +**Follow the steps to exclude specific user activity.** + +**Step 1 –** Specify what user accounts should be excluded: + +- All Users — Select to exclude the activity of any user on the file share you specified. +- These users— Select to exclude specific users' activity. Provide user names as shown in the + "_Who_" column in reports and Activity Summaries, e.g., _MyDomain\user1_. To enter multiple + accounts, use comma as a separator. + +**Step 2 –** Specify what actions should be excluded: + +- All actions — Exclude all actions of the selected users +- These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_. + +![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) + +**Step 3 –** After configuring all filters, click **Add** to save them and return to the item +settings. + +## NetApp + +Complete the following fields: + +| Option | Description | +| ------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General | | +| Specify NetApp file server | Provide a server name by entering its FQDN, NETBIOS or IPv4 address. You can click Browse to select a computer from the list of computers in your network. | +| File share UNC path to audit logs | Select one of the following: - Detect automatically—If selected, a shared resource will be detected automatically. - Use this path—UNC path to the file share located on a NetApp Filer with event log files (e.g., _\\CORP\ETC$\log_). | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| ONTAPI/ONTAP REST API | | +| Specify protocol for accessing ONTAPI/ONTAP REST API | Select one of the following: - Detect automatically—If selected, a connection protocol will be detected automatically. - HTTP - HTTPS Refer to [Netwrix Auditor Installation and Configuration Guide](https://www.netwrix.com/download/documents/Netwrix_Auditor_Installation_Configuration_Guide.pdf) for detailed instructions on how to enable HTTP or HTTPS admin access. NOTE: ONTAP REST API works only over HTTPS protocol | +| Specify management interface | Select management interface to connect to ONTAPI/ONTAP REST API. If you want to use custom management interface for ONTAPI/ONTAP REST API, select Custom and provide a server name by entering its FQDN, NETBIOS or IP address. | +| Specify account for connecting to ONTAPI/ONTAP REST API | Select an account to connect to NetApp and collect data through ONTAPI/ONTAP REST API. If you want to use a specific account (other than the one you specified on the General tab), select **Custom** and enter credentials. The credentials are case sensitive. Take into consideration that even if a custom account is specified, the account selected on the General tab must be a member of the Builtin\Administrators group and have sufficient permissions to access audit logs shared folder and audited shares. [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) | +| Scope | | +| Monitor hidden shares | By default, Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). Select **Monitor user-defined hidden shares** if necessary. Even when this option is selected, the product will not collect data from administrative hidden shares such as: default system root or Windows directory (ADMIN$), default drive shares (D$, E$, etc.), shares used by printers to enable remote administration (PRINT$), etc. **CAUTION:** Monitoring of non-default hidden shares is not supported for NetApp servers in 7-mode. | +| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. Configure Scope how to narrow your monitoring scope. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | + +### Configure Scope + +You can configure Netwrix Auditor to audit all file shares except for ones added as exclusions. For +that, under Specify monitoring restrictions, select All file shares in the array. You can also +create lists of specific file shares to include and/or exclude from being audited. Review the +following for additional information: + +### Add Inclusion + +Follow the steps to add inclusion. + +**Step 1 –** Under Specify monitoring restrictions, select Specific file shares. + +**Step 2 –** Click Add Inclusion. + +**Step 3 –** Provide UNC path to a shared resource. For example: _NewStation\Shared._ + +NOTE: Do not specify a default file share mapped to a local drive (e.g., \\Server\e$). + +### Add Exclusion + +Follow the steps to add exclusion. + +Click Add Exclusion. Then, in the Specify Filters dialog, do the following: + +**Step 4 –** Provide the path to the file share where you are going to exclude some audit data. Use +the path format as it appears in the "_What_" column of reports and Activity Summaries — for +example, _\\corpsrv\shared_. + +**Step 5 –** You can use a wildcard (\*) only if you need to exclude user activity on this file +share. For other data types (_state-in-time_ or _all data_) wildcards are not supported. This refers +to the specified shared folder, its subfolders and files. + +**Step 6 –** Select what type of data you want to exclude: + +| Option | Description | Example | +| ----------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **All Data** | Select if you want to completely exclude the specified file share from being audited. The product will not collect any user activity or state-in-time data. **NOTE:** In this case,Auditor does not adjust audit settings automatically for the selected folders. | A Security Officer wants to monitor a file share but s/he does not have access to a certain folder on this share. Thus, s/he configures the product not to monitor this folder at all. | +| State-in-Time | Select to configure Auditor to exclude data for the state-in-time reports from the monitoring scope. | A Security Officer wants to monitor a file share, but it contains a folder with a huge amount of objects, so s/he does not want Auditor to collect state-in-time data for this folder. | +| **User Activity** | Select to exclude actions performed by specific users on the selected file share. See the procedure below for details. **NOTE:** In this case, the product still collects stat-in-time data for this share. | A Security Officer wants to monitor a file share that contains a public folder for which s/he does not want to collect _Read_ operations. | + +**Follow the steps to exclude specific user activity.** + +**Step 1 –** Specify what user accounts should be excluded: + +- All Users — Select to exclude the activity of any user on the file share you specified. +- These users— Select to exclude specific users' activity. Provide user names as shown in the + "_Who_" column in reports and Activity Summaries, e.g., _MyDomain\user1_. To enter multiple + accounts, use comma as a separator. + +**Step 2 –** Specify what actions should be excluded: + +- All actions — Exclude all actions of the selected users +- These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_. + +![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) + +**Step 3 –** After configuring all filters, click **Add** to save them and return to the item +settings. + +## Nutanix Files + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data + collection and activity monitoring configure necessary protocols and ports for inbound and + outbound connections +- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +Complete the following fields: + +- Monitor this data source and collect activity data – Enable monitoring of the selected data source and configure Auditor to collect and store audit data. +- Specify actions for monitoring – Specify actions you want to track and auditing mode. + +| | | +|---------------|------------------------------------------------------------------------------------------------------------------------------------------| +| **Changes** | | +| Successful | Use this option to track changes to your data. Helps find out who made changes to your files, including their creation and deletion. | +| Failed | Use this option to detect suspicious activity on your file server. Helps identify potential intruders who tried to modify or delete files, etc., but failed to do it. | +| **Read access** | | +| Successful | Use this option to supervise access to files containing confidential data intended for privileged users. Helps identify who accessed important files besides your trusted users. Enabling this option on public shares will result in high number of events generated on your file server and the amount of data written to the Long-Term Archive. | +| Failed | Use this option to track suspicious activity. Helps find out who was trying to access your private data without proper justification. Enabling this option on public shares will result in high number of events generated on your file server and the amount of data written to the Long-Term Archive. | + +Actions reported by Auditor vary depending on the file server type and the audited object (file, folder, or share). The changes include creation, modification, deletion, moving, etc. To track the copy action, enable successful read access and change auditing. + +- Specify data collection method – You can enable **network traffic compression.** If enabled, a Compression Service will be automatically launched on the audited computer, collecting and prefiltering data. This significantly improves data transfer and minimizes the impact on the target computer performance. + +- Configure audit settings – You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [Supported Data Sources](/docs/auditor/10.7/requirements/supporteddatasources/supporteddatasources.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. Netwrix Auditor can configure the following settings: + - Policy Check + - Policy Adjust + +- Collect data for state-in-time reports – Configure Auditor to store daily snapshots of your system configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) topic for additional information. When auditing file servers, changes to effective access permissions can be tracked in addition to audit permissions. By default, Combination of file and share permissions is tracked. File permissions define who has access to local files and folders. Share permissions provide or deny access to the same resources over the network. The combination of both determines the final access permissions for a shared folder—the more restrictive permissions are applied. Upon selecting Combination of file and share permissions only the resultant set will be written to the Audit Database. Select File permissions option too if you want to see difference between permissions applied locally and the effective file and share permissions set. To disable auditing of effective access, unselect all checkboxes under Include details on effective permissions. In the Schedule state-in-time data collection section, you can select a custom weekly interval for snapshots collection. Click Modify and select day(s) of week you want your snapshot to be collected. In the Manage historical snapshots section, you can click **Manage** and select the snapshots that you want to import to the Audit Database to generate a report on the data source's state at the specific moment in the past. You must be assigned the Global administrator or the Global reviewer role to import snapshots. Move the selected snapshots to the Snapshots available for reporting list using the arrow button. The product updates the latest snapshot on the regular basis to keep users up to date on actual system state. Users can also configure Only the latest snapshot is available for reporting in Auditor. If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. + +Review your data source settings and click **Add** to go back to your plan. The newly created data +source will appear in the **Data source** list. As a next step, click **Add item** to specify an +object for monitoring. See the [Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional information. + +## Nutanix SMB Shares + +Complete the following fields: + +| Option | Description | +| -------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| **General** | | +| Specify Nutanix File Server | Provide a server name by entering its FQDN, NETBIOS or IPv4 address. You can click Browse to select a computer from the list of computers in your network. If you need to audit a 3-node cluster, it is recommended to use FQDN or NETBIOS name. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for more information. | +| Specify listening port for incoming connections | Provide the name of the TCP port to listen to notifications on the operations with Nutanix file shares. Default is **9898**. For details on how to open the port, refer to the [Nutanix Ports](/docs/auditor/10.7/configuration/fileservers/nutanix/ports.md) topic. | +| **Nutanix File Server REST API** | | +| Specify account for connecting to Nutanix File Server REST API | Specify the account that will be used to connect to Nutanix REST API. This account should have sufficient privileges on the Nutanix File Server. For details, refer to [Create User Account to Access Nutanix REST API](/docs/auditor/10.7/configuration/fileservers/nutanix/useraccount.md). | +| **Scope** | | +| Monitor hidden shares | By default, Netwrix Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). Select **Monitor user-defined hidden shares** if necessary. Even when this option is selected, the product will not collect data from administrative hidden shares such as: default system root or Windows directory (ADMIN$), default drive shares (D$, E$, etc.), shares used by printers to enable remote administration (PRINT$), etc. | +| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. Refer to Configure Scope for detailed instructions on how to configure your monitoring scope. Currently, auditing is available for SMB shares only. Auditing of NFS shares is not supported due to known limitations. | + +### Configure Scope + +You can configure Netwrix Auditor to audit all file shares except for ones added as exclusions. For +that, under Specify monitoring restrictions, select All file shares in the array. You can also +create lists of specific file shares to include and/or exclude from being audited. Review the +following for additional information: + +### Add Inclusion + +Follow the steps to add inclusion. + +**Step 1 –** Under Specify monitoring restrictions, select Specific file shares. + +**Step 2 –** Click Add Inclusion. + +**Step 3 –** Provide UNC path to a shared resource. For example: _NewStation\Shared._ + +Do not specify a default file share mapped to a local drive (e.g., \\Server\e$). + +### Add Exclusion + +Follow the steps to add exclusion. + +Click Add Exclusion. Then, in the Specify Filters dialog, do the following: + +**Step 4 –** Provide the path to the file share where you are going to exclude some audit data. Use +the path format as it appears in the "_What_" column of reports and Activity Summaries — for +example, _\\corpsrv\shared_. + +**Step 5 –** You can use a wildcard (\*) only if you need to exclude user activity on this file +share. For other data types (_state-in-time_ or _all data_) wildcards are not supported. This refers +to the specified shared folder, its subfolders and files. + +**Step 6 –** Select what type of data you want to exclude: + +| Option | Description | Example | +| ----------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **All Data** | Select if you want to completely exclude the specified file share from being audited. The product will not collect any user activity or state-in-time data. **NOTE:** In this case,Auditor does not adjust audit settings automatically for the selected folders. | A Security Officer wants to monitor a file share but s/he does not have access to a certain folder on this share. Thus, s/he configures the product not to monitor this folder at all. | +| State-in-Time | Select to configure Auditor to exclude data for the state-in-time reports from the monitoring scope. | A Security Officer wants to monitor a file share, but it contains a folder with a huge amount of objects, so s/he does not want Auditor to collect state-in-time data for this folder. | +| **User Activity** | Select to exclude actions performed by specific users on the selected file share. See the procedure below for details. **NOTE:** In this case, the product still collects stat-in-time data for this share. | A Security Officer wants to monitor a file share that contains a public folder for which s/he does not want to collect _Read_ operations. | + +**Follow the steps to exclude specific user activity.** + +**Step 1 –** Specify what user accounts should be excluded: + +- All Users — Select to exclude the activity of any user on the file share you specified. +- These users— Select to exclude specific users' activity. Provide user names as shown in the + "_Who_" column in reports and Activity Summaries, e.g., _MyDomain\user1_. To enter multiple + accounts, use comma as a separator. + +**Step 2 –** Specify what actions should be excluded: + +- All actions — Exclude all actions of the selected users +- These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_. + +![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) + +**Step 3 –** After configuring all filters, click **Add** to save them and return to the item +settings. + +## Qumulo + +Complete the following fields: + +| Option | Description | +| -------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| General | | +| Specify a file server | Provide UNC path to a file server. See the section below for special considerations. Do not specify a default file share mapped to a local drive (e.g., \\Server\e$). | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Event Collection | | +| Specify a host or network resource | Provide UNC path to a file server or an IP range of servers you want to get activity events from. You can select to collect event data from the same server or provide a custom server or IP range. | +| Specify port and protocol for incoming connections | Use **Port** and **Protocol** to provide the port required for incoming connections (default is **UDP port 514**). | +| Scope | | +| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. By default, Netwrix Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). If you want to monitor user-defined hidden shares, select the related option in the monitored item settings. Remember that administrative hidden shares like default system root or Windows directory (ADMIN$), default drive shares (D$, E$), etc. will not be monitored. See the topics on the monitored items for details. | + +## Synology + +Complete the following fields: + +| Option | Description | +| -------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| General | | +| Specify a file server | Provide UNC path to a file server. See the section below for special considerations. Do not specify a default file share mapped to a local drive (e.g., \\Server\e$). | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Event Collection | | +| Specify a host or network resource | Provide UNC path to a file server or an IP range of servers you want to get activity events from. You can select to collect event data from the same server or provide a custom server or IP range. | +| Specify port and protocol for incoming connections | Use **Port** and **Protocol** to provide the port required for incoming connections (default is **UDP port 514**). | +| Scope | | +| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. By default, Netwrix Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). If you want to monitor user-defined hidden shares, select the related option in the monitored item settings. Remember that administrative hidden shares like default system root or Windows directory (ADMIN$), default drive shares (D$, E$), etc. will not be monitored. See the topics on the monitored items for details. | diff --git a/docs/auditor/10.8/admin/monitoringplans/fileservers/scope.md b/docs/auditor/10.8/admin/monitoringplans/fileservers/scope.md new file mode 100644 index 0000000000..03d79aa4e3 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/fileservers/scope.md @@ -0,0 +1,117 @@ +--- +title: "File Servers Monitoring Scope" +description: "File Servers Monitoring Scope" +sidebar_position: 20 +--- + +# File Servers Monitoring Scope + +You can specify data that you want to include into / exclude from the Windows File Server, NetApp +Filer, and Dell Data Storage (formerly EMC) monitoring scope. For that, you can configure monitoring +scope in Auditor client UI, as explained in the related section: + +- [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) +- Windows File Share + +Besides, you can configure exclusions for file servers audit using the special txt files (omit +lists), as explained below. + +Monitoring scope restrictions set up in the UI will apply together with the exclusion settings +configured in the \*.txt files. + +**Follow the steps to exclude data from file server monitoring scope:** + +**Step 1 –** Navigate to the _%Netwrix Auditor installation folder%\File Server Auditing_ folder. + +**Step 2 –** Edit the \*.txt files, based on the following guidelines: + +- Each entry must be a separate line. +- A wildcard (\*) is supported. You can use \* for cmdlets and their parameters. +- Lines that start with the # sign are treated as comments and are ignored. + +| File | Description | Syntax | +| ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| omitcollectlist.txt | Contains a list of objects to be excluded from being monitored. | `Monitoring plan name,server name, resource path` Wildcards are not supported for the Server Name field. To disable filtering for this field, specify an empty string. For example: `*,,\\\\*\\System Volume Information*` | +| omiterrors.txt | Contains a list of errors and warnings to be omitted from logging to the Netwrix Auditor System Health event log. | `Monitoring plan name,``````server name,error text` For example: `*,productionserver1.corp.local, *Access is denied*` | +| omitreportlist.txt | Contains a list of objects to be excluded from reports and Activity Summary emails. In this case audit data is still being collected. | `Monitoring plan name,action,who,object type,resource path,property name` Wildcards are not supported for the action and property name fields. To disable filtering for these fields, specify an empty string. For example: `*,,CORP\\jsmith,*,*,` | +| omitstorelist.txt | Contains a list of objects to be excluded from being stored to the Audit Archive and showing up in reports. In this case audit data is still being collected. | `Monitoring plan name,action,who ,object type,resource path,property name` Wildcards are not supported for the Change Type and Property Name fields. To disable filtering for these fields, specify an empty string. For example: `*,,*,*,\\\\productionserver1.corp.local\\builds\\*, Attributes` | +| omitstoreprocesslist.txt | Contains a list of processes to be excluded from being stored to the Audit Archive and showing up in reports. | `Monitoring plan name,resource path, executable path` Only local applications can be excluded. For example: `*,*,*notepad.exe` | + +## Windows File Share + +Complete the following fields: + +| Option | Description | +| --------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| General | | +| Specify Windows file share | Provide UNC path to a shared resource. See the section below for special considerations. Do not specify a default file share mapped to a local drive (e.g., \\Server\e$). | +| Specify the account for collecting data | | +| Scope | | +| Specify monitoring restrictions | Refer to Configure Scope for detailed instructions on how to narrow your monitoring scope. By default, Netwrix Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). If you want to monitor user-defined hidden shares, select the related option in the monitored item settings. Remember that administrative hidden shares like default system root or Windows directory (ADMIN$), default drive shares (D$, E$), etc. will not be monitored. See the topics on the monitored items for details. | + +### Configure Scope + +You can narrow your monitoring scope by adding exclusions. + +Click Add Exclusion. Then, in the Specify Filters dialog, do the following: + +**Step 3 –** Provide the path to the file share where you are going to exclude some audit data. Use +the path format as it appears in the "_What_" column of reports and Activity Summaries — for +example, _\\corpsrv\shared_. + +**Step 4 –** You can use a wildcard (\*) only if you need to exclude user activity on this file +share. For other data types (_state-in-time_ or _all data_) wildcards are not supported. This refers +to the specified shared folder, its subfolders and files. + +**Step 5 –** Select what type of data you want to exclude: + +| Option | Description | Example | +| ----------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **All Data** | Select if you want to completely exclude the specified file share from being audited. The product will not collect any user activity or state-in-time data. **NOTE:** In this case,Auditor does not adjust audit settings automatically for the selected folders. | A Security Officer wants to monitor a file share but s/he does not have access to a certain folder on this share. Thus, s/he configures the product not to monitor this folder at all. | +| State-in-Time | Select to configure Auditor to exclude data for the state-in-time reports from the monitoring scope. | A Security Officer wants to monitor a file share, but it contains a folder with a huge amount of objects, so s/he does not want Auditor to collect state-in-time data for this folder. | +| **User Activity** | Select to exclude actions performed by specific users on the selected file share. See the procedure below for details. **NOTE:** In this case, the product still collects stat-in-time data for this share. | A Security Officer wants to monitor a file share that contains a public folder for which s/he does not want to collect _Read_ operations. | + +**Follow the steps to exclude specific user activity.** + +**Step 1 –** Specify what user accounts should be excluded: + +- All Users — Select to exclude the activity of any user on the file share you specified. +- These users— Select to exclude specific users' activity. Provide user names as shown in the + "_Who_" column in reports and Activity Summaries, e.g., _MyDomain\user1_. To enter multiple + accounts, use comma as a separator. + +**Step 2 –** Specify what actions should be excluded: + +- All actions — Exclude all actions of the selected users +- These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_. + +![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) + +**Step 3 –** After configuring all filters, click **Add** to save them and return to the item +settings. + +### Working with DFS File Shares + +Netwrix Auditor supports auditing of DFS and clustered file servers if Object Access Auditing is +enabled on DFS file shares or on every cluster node. + +- When adding a cluster file server for auditing, it is recommended to specify a server name of the + **Role** server or a UNC path of the shared folder located on the **Role** server. +- When adding a DFS file share for auditing, specify a Windows file share item and provide the UNC + path of the whole namespace or UNC path of the DFS link (folder). For example: + - _"\\domain\dfsnamespace\"_ (domain-based namespace) or _"\\server\dfsnamespace\"_ (in case of + stand-alone namespace); + - _"\\domain\dfsnamespace\link"_ (domain-based namespace) or _"\\server\dfsnamespace\link"_ (in + case of stand-alone namespace). +- For recommendations on configuring DFS replication, refer to + [this Knowledge Base article](https://www.netwrix.com/kb/2103). + +### Working with Mount Points + +You can specify a mount point as a monitored item. However, consider the following: + +- If a mount point represents a shared folder, then the objects in its root will be initially + collected by Netwrix Auditor and appear as processed by _System_ account. Wait for the next data + collections - then all actions for these objects will be monitored in a normal way. +- To monitor the mount points targeted at the subfolder of a file share, provide network path to the + target subfolder. diff --git a/docs/auditor/10.8/admin/monitoringplans/fileservers/windowsfileserver.md b/docs/auditor/10.8/admin/monitoringplans/fileservers/windowsfileserver.md new file mode 100644 index 0000000000..c7a466f5b3 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/fileservers/windowsfileserver.md @@ -0,0 +1,223 @@ +--- +title: "Windows File Server" +description: "Windows File Server" +sidebar_position: 10 +--- + +# Windows File Server + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data + collection and activity monitoring configure necessary protocols and ports for inbound and + outbound connections +- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +## Windows File Share + +Complete the following fields: + +| Option | Description | +| --------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General | | +| Specify Windows file share | Provide UNC path to a shared resource. See the section below for special considerations. Do not specify a default file share mapped to a local drive (e.g., \\Server\e$). | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. | +| Scope | | +| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. See the Configure Scope topic for additional information on how to narrow your monitoring scope. By default, Netwrix Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). If you want to monitor user-defined hidden shares, select the related option in the monitored item settings. Remember that administrative hidden shares like default system root or Windows directory (ADMIN$), default drive shares (D$, E$), etc. will not be monitored. See the topics on the monitored items for details. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | + +### Configure Scope + +You can narrow your monitoring scope by adding exclusions. + +Click Add Exclusion. Then, in the Specify Filters dialog, do the following: + +**Step 1 –** Provide the path to the file share where you are going to exclude some audit data. Use +the path format as it appears in the "_What_" column of reports and Activity Summaries — for +example, _\\corpsrv\shared_. + +**Step 2 –** You can use a wildcard (\*) only if you need to exclude user activity on this file +share. For other data types (_state-in-time_ or _all data_) wildcards are not supported. This refers +to the specified shared folder, its subfolders and files. + +**Step 3 –** Select what type of data you want to exclude: + +| Option | Description | Example | +| ----------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **All Data** | Select if you want to completely exclude the specified file share from being audited. The product will not collect any user activity or state-in-time data. **NOTE:** In this case,Auditor does not adjust audit settings automatically for the selected folders. | A Security Officer wants to monitor a file share but s/he does not have access to a certain folder on this share. Thus, s/he configures the product not to monitor this folder at all. | +| State-in-Time | Select to configure Auditor to exclude data for the state-in-time reports from the monitoring scope. | A Security Officer wants to monitor a file share, but it contains a folder with a huge amount of objects, so s/he does not want Auditor to collect state-in-time data for this folder. | +| **User Activity** | Select to exclude actions performed by specific users on the selected file share. See the procedure below for details. **NOTE:** In this case, the product still collects stat-in-time data for this share. | A Security Officer wants to monitor a file share that contains a public folder for which s/he does not want to collect _Read_ operations. | + +**Follow the steps to exclude specific user activity.** + +**Step 1 –** Specify what user accounts should be excluded: + +- All Users — Select to exclude the activity of any user on the file share you specified. +- These users— Select to exclude specific users' activity. Provide user names as shown in the + "_Who_" column in reports and Activity Summaries, e.g., _MyDomain\user1_. To enter multiple + accounts, use comma as a separator. + +**Step 2 –** Specify what actions should be excluded: + +- All actions — Exclude all actions of the selected users +- These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_. + +![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) + +**Step 3 –** After configuring all filters, click **Add** to save them and return to the item +settings. + +### Working with DFS File Shares + +Netwrix Auditor supports auditing of DFS and clustered file servers if Object Access Auditing is +enabled on DFS file shares or on every cluster node. + +- When adding a cluster file server for auditing, it is recommended to specify a server name of the + **Role** server or a UNC path of the shared folder located on the **Role** server. +- When adding a DFS file share for auditing, specify a Windows file share item and provide the UNC + path of the whole namespace or UNC path of the DFS link (folder). For example: + - _"\\domain\dfsnamespace\"_ (domain-based namespace) or _"\\server\dfsnamespace\"_ (in case of + stand-alone namespace); + - _"\\domain\dfsnamespace\link"_ (domain-based namespace) or _"\\server\dfsnamespace\link"_ (in + case of stand-alone namespace). +- For recommendations on configuring DFS replication, refer to + [this Knowledge Base article](https://www.netwrix.com/kb/2103). + +### Working with Mount Points + +You can specify a mount point as a monitored item. However, consider the following: + +- If a mount point represents a shared folder, then the objects in its root will be initially + collected by Netwrix Auditor and appear as processed by _System_ account. Wait for the next data + collections - then all actions for these objects will be monitored in a normal way. +- To monitor the mount points targeted at the subfolder of a file share, provide network path to the + target subfolder. + +## AD Container + +Complete the following fields: + +| Option | Description | +| --------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General | | +| Specify AD container | Specify a whole AD domain, OU or container. Click **Browse** to select from the list of containers in your network. You can also: - Select a particular computer type to be audited within the chosen AD container: **Domain controllers, Servers (excluding domain controllers)**, or **Workstations**. - Click **Exclude** to specify AD domains, OUs, and containers you do not want to audit. In the Exclude Containers dialog, click Add and specify an object. The list of containers does not include child domains of trusted domains. Use other options **(Computer, IP range** to specify the target computers. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. If using a group Managed Service Account (gMSA), you can specify only the account name in the _domain\account$_ format. Password field can be empty. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. Refer to the [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) topic for more information on using Netwrix Privilege Secure as an account for data collection. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the[Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Containers and Computers | | +| Monitor hidden shares | By default, Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). Select **Monitor user-defined hidden shares** if necessary. Even when this option is selected, the product will not collect data from administrative hidden shares such as: default system root or Windows directory (ADMIN$), default drive shares (D$, E$, etc.), shares used by printers to enable remote administration (PRINT$), etc. | +| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. Depending on the type of the object you want to exclude, select one of the following: - Add AD Container – Browse for a container to be excluded from being audited. You can select a whole AD domain, OU or container. - Add Computer – Provide the name of the computer you want to exclude as shown in the "_Where_" column of reports and Activity Summaries. For example, _backupsrv01.mydomain.local_. Wildcards (\*) are not supported. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | + +## IP Range + +Complete the following fields: + +| Option | Description | +| --------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General | | +| Specify IP range | Specify an IP range for the audited computers. To exclude computers from within the specified range, click **Exclude**. Enter the IP subrange you want to exclude, and click **Add**. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Scope | | +| Monitor hidden shares | By default, Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). Select **Monitor user-defined hidden shares** if necessary. Even when this option is selected, the product will not collect data from administrative hidden shares such as: default system root or Windows directory (ADMIN$), default drive shares (D$, E$, etc.), shares used by printers to enable remote administration (PRINT$), etc. | + +## Computer + +For evaluation purposes, Netwrix recommends selecting Computer as an item for a monitoring plan. +Once the product is configured to collect data from the specified items, audit settings (including +Core and Compression services installation) will be applied to all computers within AD Container or +IP Range. + +Complete the following fields: + +| Option | Description | +| --------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| General | | +| Specify a computer | Provide a server name by entering its FQDN, NETBIOS or IPv4 address. You can click Browse to select a computer from the list of computers in your network. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select account type you want to use and enter credentials. The following choices are available: - User/password. The account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic for additional information. - Netwrix Privilege Secure. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. | +| Scope | | +| Monitor hidden shares | By default, Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). Select **Monitor user-defined hidden shares** if necessary. Even when this option is selected, the product will not collect data from administrative hidden shares such as: default system root or Windows directory (ADMIN$), default drive shares (D$, E$, etc.), shares used by printers to enable remote administration (PRINT$), etc. | +| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. | + +### Configure Scope + +By default, both user activity and state-in-time data will be collected for the monitored item. +However, you can narrow your monitoring scope by specifying certain locations, user accounts or +actions to exclude . + +![Add Item (Computer)](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclusions_thumb_0_0.webp) + +Click Add Exclusion, then follow the steps in the Specify Filters dialog: + +**Step 1 –** Provide the path to the file share where you are going to exclude some audit data. Use +the path format as it appears in the "_What_" column of reports and Activity Summaries — for +example, _\\corpsrv\shared_. + +You can use a wildcard (\*) only if you need to exclude user activity on this file share. For other +data types (_state-in-time_ or _all data_) wildcards are not supported. This refers to the specified +shared folder, its subfolders and files. + +**Step 2 –** Select what type of data you want to exclude: + +| Option | Description | Example | +| ----------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **All Data** | Select if you want to completely exclude the specified file share from being audited. The product will not collect any user activity or state-in-time data. In this case,Netwrix Auditor does not adjust audit settings automatically for the selected folders. | A Security Officer wants to monitor a file share but s/he does not have access to a certain folder on this share. Thus, s/he configures the product not to monitor this folder at all. | +| State-in-Time | Select to configure Netwrix Auditor to exclude data for the state-in-time reports from the monitoring scope. | A Security Officer wants to monitor a file share, but it contains a folder with a huge amount of objects, so s/he does not want Netwrix Auditor to collect state-in-time data for this folder. | +| **User Activity** | Select to exclude actions performed by specific users on the selected file share. See the procedure below for details. In this case, the product still collects stat-in-time data for this share. | A Security Officer wants to monitor a file share that contains a public folder for which s/he does not want to collect _Read_ operations. | + +Follow the steps to exclude specific user activity. + +**Step 1 –** Specify what user accounts should be excluded: + +- All Users — Select to exclude the activity of any user on the file share you specified. +- These users — Select to exclude specific users' activity. Provide user names as shown in the + "_Who_" column in reports and Activity Summaries, e.g., _MyDomain\user1_. To enter multiple + accounts, use comma as a separator. + +**Step 2 –** Specify what actions should be excluded: + +- All actions — Exclude all actions of the selected users +- These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_ + +![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users.webp) + +After configuring all filters, click **Add** to save them and return to the item settings. + +## Use Netwrix Privilege Secure as a Data Collecting Account + +Starting with version 10.7, you can use Netwrix Privilege Secure to manage the account for +collecting data, after configuring the integration. See the +[Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information about +integration and supported data sources. In this case, the credentials will not be stored by Netwrix +Auditor. Instead, they will be managed by Netwrix Privilege Secure and provided on demand, ensuring +password rotation or using temporary accounts for data collection. + +Follow the steps to use Netwrix Privilege Secure as an account for data collection. + +**Step 1 –** Select the desired item. + +**Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data +collection. + +![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) + +**Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. +Credential-based is the default option. Refer to the +[Netwrix Privilege Secure](https://helpcenter.netwrix.com/category/privilegesecure_accessmanagement) +documentation to learn more about Access Policies. + +In this case, you need to provide the username of the account managed by Netwrix Privilege Secure, +and to which Netwrix Auditor has the access through a Credential-based access policy. + +**NOTE:** Netwrix recommends using different credentials for different monitoring plans and data +sources. + +![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) + +The second option is Resource-based. To use this option, you need to provide the Activity and +Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure +that you specified the same names as in Netwrix Privilege Secure. + +The Resource name in this case is where the activity will be performed. For example, if you grant +the data collecting account the access to a local Administrators group - the resource is the server +where the permission will be granted. + +Netwrix Privilege Secure is ready to use as an account for data collection. diff --git a/docs/auditor/10.8/admin/monitoringplans/finetune.md b/docs/auditor/10.8/admin/monitoringplans/finetune.md new file mode 100644 index 0000000000..cc3a2f13e1 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/finetune.md @@ -0,0 +1,38 @@ +--- +title: "Fine-Tune Your Plan and Edit Settings" +description: "Fine-Tune Your Plan and Edit Settings" +sidebar_position: 210 +--- + +# Fine-Tune Your Plan and Edit Settings + +At any time, you can review your plan settings and fine-tune Audit Database, notification and data +collection settings. + +To modify most plan settings, you must be assigned the Global administrator role in the product or +the Configurator role on the plan. The Global reviewer or this plan's Reviewer can modify Activity +Summary recipients. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional +information. + +Follow the steps to edit your plan settings: + +**Step 1 –** Select a plan in the All Monitoring Plans list and click Edit. + +**Step 2 –** In the right pane, select Edit settings. + +**Step 3 –** In the Plan Settings page, review the tabs and modify the settings. + +| Option | Description | +| -------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General | | +| Name Description | Update a plan name or its description. | +| Data Collection | | +| Specify the account for collecting data - Not specified - User/Password - gMSA | Specify a new user name and a password for the account that Auditor  will use to collect data. Make sure the account has sufficient permissions to collect data. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information about the rights and permissions, and instructions on how to configure them. | +| Audit Database | | +| Disable security intelligence and make data available only in activity summaries | Keep this checkbox cleared if you want Auditor to write data to the Audit Database. | +| Use default SQL Server settings | Select this checkbox to write data to a SQL Server instance with connection parameters as shown in **Settings** > **Audit Database**. See the [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topic for additional information. | +| Specify custom connection parameters | Specify this option to use non-default settings (e.g., use a different authentication method or user). Make sure to store data on the same SQL Server instance. Otherwise some data may become unavailable for search and reporting. | +| Notifications | | +| Specify Activity Summary delivery schedule | Configure how often you want to receive an Activity Summary. By default, it is delivered once a day, at 3 AM. You can specify custom delivery time and frequency (e.g., every 6 hours starting 12 AM — at 12 AM, 6 AM, 12 PM, 6 PM). | +| Customize notifications | By default, Activity Summary lists changes and activity in email body. For most data sources, if an Activity Summaries contains more than 1,000 activity records, these records are sent as a CSV attachment, bigger attachments are compressed in ZIP files. - Attach Activity Summary as a CSV file — You can configure Auditor to always send emails with attachments instead of listing activity and changes in email body. - Compress attachment before sending — You can configure Auditor to always compress attachments in a ZIP file, irrespective of its size and number of activity records. | +| Specify the recipients who will receive daily activity summaries | Modify a list of users who will receive daily activity summaries. Click Add Recipient and provide email address. | diff --git a/docs/auditor/10.8/admin/monitoringplans/grouppolicy/_category_.json b/docs/auditor/10.8/admin/monitoringplans/grouppolicy/_category_.json new file mode 100644 index 0000000000..eaf7189e31 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/grouppolicy/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Group Policy", + "position": 100, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/monitoringplans/grouppolicy/overview.md b/docs/auditor/10.8/admin/monitoringplans/grouppolicy/overview.md new file mode 100644 index 0000000000..b7ee4a2b3a --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/grouppolicy/overview.md @@ -0,0 +1,85 @@ +--- +title: "Group Policy" +description: "Group Policy" +sidebar_position: 100 +--- + +# Group Policy + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data + collection and activity monitoring configure necessary protocols and ports for inbound and + outbound connections +- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +- [Group Policy](/docs/auditor/10.7/configuration/grouppolicy/overview.md) – Configure data source as required + to be monitored + +Complete the following fields: + +| Option | Description | +| -------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | +| Prerequisites | Netwrix Auditor will automatically look up additional system components and prompt you to install those that are missing. In case all required components have been already installed, this section will be omitted. See the [Other Components](/docs/auditor/10.7/requirements/software.md#other-components) topic for additional information. | +| Detect additional details | Specify additional information to include in reports and activity summaries. Select Group membershipif you want to include Group membership of the account under which the change was made. | +| Specify data collection method | You can enable **network traffic compression.** If enabled, a Compression Service will be automatically launched on the audited computer, collecting and prefiltering data. This significantly improves data transfer and minimizes the impact on the target computer performance. | +| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [Group Policy](/docs/auditor/10.7/configuration/grouppolicy/overview.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. | + +Review your data source settings and click **Add** to go back to your plan. The newly created data +source will appear in the **Data source** list. As a next step, click **Add item** to specify an +object for monitoring. See the +[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +information. + +## Domain + +Complete the following fields: + +| Option | Description | +| --------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Specify Active Directory domain | Specify the audited domain name in the FQDN format. For example, "_company.local_". | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select account type you want to use and enter credentials. The following choices are available: - User/password. The account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic for additional information. - Netwrix Privilege Secure. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. | + +## Use Netwrix Privilege Secure as a Data Collecting Account + +Starting with version 10.7, you can use Netwrix Privilege Secure to manage the account for +collecting data, after configuring the integration. See the +[Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information about +integration and supported data sources. In this case, the credentials will not be stored by Netwrix +Auditor. Instead, they will be managed by Netwrix Privilege Secure and provided on demand, ensuring +password rotation or using temporary accounts for data collection. + +Follow the steps to use Netwrix Privilege Secure as an account for data collection. + +**Step 1 –** Select the desired item. + +**Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data +collection. + +![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) + +**Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. +Credential-based is the default option. Refer to the +[Netwrix Privilege Secure](https://helpcenter.netwrix.com/category/privilegesecure_accessmanagement) +documentation to learn more about Access Policies. + +In this case, you need to provide the username of the account managed by Netwrix Privilege Secure, +and to which Netwrix Auditor has the access through a Credential-based access policy. + +**NOTE:** Netwrix recommends using different credentials for different monitoring plans and data +sources. + +![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) + +The second option is Resource-based. To use this option, you need to provide the Activity and +Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure +that you specified the same names as in Netwrix Privilege Secure. + +The Resource name in this case is where the activity will be performed. For example, if you grant +the data collecting account the access to a local Administrators group - the resource is the server +where the permission will be granted. + +Netwrix Privilege Secure is ready to use as an account for data collection. diff --git a/docs/auditor/10.8/admin/monitoringplans/grouppolicy/scope.md b/docs/auditor/10.8/admin/monitoringplans/grouppolicy/scope.md new file mode 100644 index 0000000000..599368ba01 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/grouppolicy/scope.md @@ -0,0 +1,28 @@ +--- +title: "Group Policy Monitoring Scope" +description: "Group Policy Monitoring Scope" +sidebar_position: 10 +--- + +# Group Policy Monitoring Scope + +You can fine-tune Netwrix Auditor by specifying data that you want to exclude from the Group Policy +monitoring scope. To do it, edit the omitobjlist_gp.txt, omitproplist_gp.txt and omituserlist_gp.txt +files. + +Follow the steps to exclude data from the Group Policy monitoring scope: + +**Step 1 –** Navigate to the _%Netwrix Auditor installation folder%\Active Directory Auditing_ +folder. + +**Step 2 –** Edit the \*.txt files, based on the following guidelines: + +- Each entry must be a separate line. +- A wildcard (\*) is supported. You can use \* for cmdlets and their parameters. +- Lines that start with the # sign are treated as comments and are ignored. + +| File | Description | Syntax | +| ------------------- | --------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------- | +| omitobjlist_gp.txt | The file contains a list of the Group Policy Object (GPO) names to be excluded from change reports. | `` For example, to exclude changes to the Default Domain Policy GPO, add the following line: `Default Domain Policy`. | +| omitproplist_gp.txt | The file contains a list of the Group Policy Object settings to be excluded from change reports. | `` For example, to exclude data on changes made to the Maximum password length setting, add the following line: `Maximum password length`. | +| omituserlist_gp | The file contains a list of user names to be excluded from change reports. | `` For example, to exclude changes made by the user “usertest” in the domain “domaintest”, add the following line: `domaintest\usertest`. | diff --git a/docs/auditor/10.8/admin/monitoringplans/logonactivity/_category_.json b/docs/auditor/10.8/admin/monitoringplans/logonactivity/_category_.json new file mode 100644 index 0000000000..7fed8bf477 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/logonactivity/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Logon Activity", + "position": 110, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/monitoringplans/logonactivity/overview.md b/docs/auditor/10.8/admin/monitoringplans/logonactivity/overview.md new file mode 100644 index 0000000000..2387412238 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/logonactivity/overview.md @@ -0,0 +1,87 @@ +--- +title: "Logon Activity" +description: "Logon Activity" +sidebar_position: 110 +--- + +# Logon Activity + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data + collection and activity monitoring configure necessary protocols and ports for inbound and + outbound connections +- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +- [Logon Activity](/docs/auditor/10.7/configuration/logonactivity/overview.md) – Configure data source as + required to be monitored + +Complete the following fields: + +| Option | Description | +| -------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General | | +| Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | +| Fine-tune logon activity monitoring | Specify interval for Netwrix Auditor to collect data on logon activity and add successful non-interactive logons to your auditing scope, if necessary. | +| Specify data collection method | You can enable **network traffic compression.** If enabled, a Compression Service will be automatically launched on the audited computer, collecting and prefiltering data. This significantly improves data transfer and minimizes the impact on the target computer performance. | +| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [Logon Activity](/docs/auditor/10.7/configuration/logonactivity/overview.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. | +| Users | | +| Specify monitoring restrictions | Select the users to be excluded from search results, reports and Activity Summaries. To add users to the list, click Add. Then, provide the user name in the domain\user format. For example: _mydomain\user1_. Consider the following: - Use NetBIOS domain name format. - You can provide the "_System_" value to exclude events containing the “_System_” instead of an account name in the “_Who_” column. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | + +Review your data source settings and click **Add** to go back to your plan. The newly created data +source will appear in the **Data source** list. As a next step, click **Add item** to specify an +object for monitoring. See the +[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +information. + +## Domain + +Complete the following fields: + +| Option | Description | +| --------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Specify Active Directory domain | Specify the audited domain name in the FQDN format. For example, "_company.local_". | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select account type you want to use and enter credentials. The following choices are available: - User/password. The account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic for additional information. - Netwrix Privilege Secure. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. | + +## Use Netwrix Privilege Secure as a Data Collecting Account + +Starting with version 10.7, you can use Netwrix Privilege Secure to manage the account for +collecting data, after configuring the integration. See the +[Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information about +integration and supported data sources. In this case, the credentials will not be stored by Netwrix +Auditor. Instead, they will be managed by Netwrix Privilege Secure and provided on demand, ensuring +password rotation or using temporary accounts for data collection. + +Follow the steps to use Netwrix Privilege Secure as an account for data collection. + +**Step 1 –** Select the desired item. + +**Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data +collection. + +![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) + +**Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. +Credential-based is the default option. Refer to the +[Netwrix Privilege Secure](https://helpcenter.netwrix.com/category/privilegesecure_accessmanagement) +documentation to learn more about Access Policies. + +In this case, you need to provide the username of the account managed by Netwrix Privilege Secure, +and to which Netwrix Auditor has the access through a Credential-based access policy. + +**NOTE:** Netwrix recommends using different credentials for different monitoring plans and data +sources. + +![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) + +The second option is Resource-based. To use this option, you need to provide the Activity and +Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure +that you specified the same names as in Netwrix Privilege Secure. + +The Resource name in this case is where the activity will be performed. For example, if you grant +the data collecting account the access to a local Administrators group - the resource is the server +where the permission will be granted. + +Netwrix Privilege Secure is ready to use as an account for data collection. diff --git a/docs/auditor/10.8/admin/monitoringplans/logonactivity/scope.md b/docs/auditor/10.8/admin/monitoringplans/logonactivity/scope.md new file mode 100644 index 0000000000..24f06abb21 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/logonactivity/scope.md @@ -0,0 +1,43 @@ +--- +title: "Logon Activity Monitoring Scope" +description: "Logon Activity Monitoring Scope" +sidebar_position: 10 +--- + +# Logon Activity Monitoring Scope + +You can fine-tune Netwrix Auditor by specifying data that you want to exclude from the Logon +Activity monitoring scope. + +Follow the steps to exclude data from the Logon Activity monitoring scope: + +**Step 1 –** Navigate to the _%working folder%\\NLA\Settings_ folder and locate your monitoring plan +GUID. + +**NOTE:** If you have several monitoring plans for monitoring Logon Activity, configure omitlist for +each monitoring plan separately. + +**Step 2 –** Edit the Settings.cfg file based on the following guidelines: + +- Each entry must be a separate line. +- A wildcard (\*) is supported. You can use \* for cmdlets and their parameters. +- Lines that start with the # sign are treated as comments and are ignored. + +| Configuration String | Description | Syntax | +| ------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| `` | Contains a list of DCs to be excluded from being monitored. | `DC_name` For example: `` | +| `` | Determines whether to enable network traffic compression for a Domain Controller or not. If configured, overrides the Enable network traffic compression option in monitoring plan configuration. | ` `````` `````` `````` `````` `````` `````` `````` `````` `````` ` | +| ` `````` ` | Contains a list of users to be excluded from being monitored. Allows specifying a user by name. | `User name` For example: `` | +| `` | Contains a list of users to be excluded from being monitored. Allows specifying a user by security identifier (SID). | `User SID` For example: `` | + +The file must be formatted in accordance with XML standard. The following symbols must be replaced +with corresponding XML entities: & (ampersand), " (double quotes), ' (single quotes), < (less than), +and > (greater than) symbols. + +| Symbol | XML entity | +| ----------------------------- | -------------------------------------------- | +| & e.g., Ally & Sons | & e.g., Ally & Sons | +| " e.g., Domain1\Users\"Stars" | " e.g., Domain1\Users\"Stars" | +| ' e.g., Domain1\Users\O'Hara | ' e.g., Domain1\Users\O'Hara | +| < e.g., CompanyDC`<100` | < e.g., CompanyDC<100 | +| > e.g., ID`>500` | > e.g., ID>500 | diff --git a/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/_category_.json b/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/_category_.json new file mode 100644 index 0000000000..38cbe92a56 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Microsoft Entra ID", + "position": 60, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md b/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md new file mode 100644 index 0000000000..90e7ce0f2b --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md @@ -0,0 +1,165 @@ +--- +title: "Microsoft Entra ID" +description: "Microsoft Entra ID" +sidebar_position: 60 +--- + +# Microsoft Entra ID + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data + collection and activity monitoring configure necessary protocols and ports for inbound and + outbound connections +- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +- [Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/overview.md) – Configure + data source as required to be monitored + +You can use the following data collecting account options: + +- Username and password. +- Integration with the Netwrix Privilege Secure. See the + [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) and How to Add Microsoft Entra ID + Monitoring Plan Using Netwrix Privilege Secure topics for additional information. +- Application and secret for Microsoft 365 with modern authentication. + +To add a new monitoring plan for Entra ID, you need to launch the New Monitoring Plan wizard, either +from the Home screen, or from the Monitoring plans menu under the All Monitoring Plans section. + +## Configure Data Source Settings + +Default data source settings will be configured during the completion of the New Monitoring Plan +wizard. To customize the settings, you need to open your monitoring plan, and click **Edit data +source** on the right side of the screen. + +Complete the following fields: + +| Option | Description | +| -------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | +| Monitor Microsoft Entra ID logon activity | Specify what types of logon events you want to monitor: successful or failed, performed through Windows and SQL authentication. - Failed logons - Successful logons | +| Collect data for state-in-time reports | Configure Netwrix Auditor to store daily snapshots of your system configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) topic for additional information. | + +Review your data source settings and click **Add** to go back to your plan. The newly created data +source will appear in the **Data source** list. As a next step, click **Add item** to specify an +object for monitoring. See the +[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +information. + +This instruction shows how to collect audit data from the Microsoft 365 tenant. + +If you plan to use modern authentication, see the +[Configuring Microsoft Entra ID App for Auditing Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md#configuring-microsoft-entra-id-app-for-auditing-microsoft-entra-id) +topic for additional information on how to prepare Microsoft Entra ID app with required permissions. +Make sure you have the following at hand: + +- Tenant name +- For modern authentication: Application (client) ID +- Application secret +- For basic authentication: User name and password + +Types of data that can be collected by Netwrix Auditor from the Microsoft 365 tenant depend on the +authentication option you choose. + +Follow the steps to configure Office 365 tenant as a monitored item. + +**Step 1 –** On the **General** page of the item properties, specify **Tenant name**: + +- If you are going to use **Basic authentication**, you can proceed to the next step – **Tenant + name** will be filled in automatically after it. + +- **NOTE:** Basic authentication is no longer possible for Exchange Online. For the already existing + tenants it is still possible to use basic authentication for SharePoint Online and Microsoft Entra + ID monitoring. + +- If you are going to use **Modern authentication**, paste the obtained name. See the + [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) + topic for additional information. + +![tenantenvironment](/images/auditor/10.7/admin/monitoringplans/tenantenvironment.webp) + +If you are using a government tenant, please click the **Tenant Environment** tab and select the +desired tenant environment. + +**Step 2 –** Select authentication method that will be used when accessing Office 365 services: + +- Basic authentication: + + - Selected, Office 365 organization will be accessed on behalf of the user you specify. + - Enter **User name** and **password**; use any of the following formats: _user@domain.com_ or + _user@domain.onmicrosoft.com_. + - The **Tenant name** field then will be filled in automatically. + - Make sure this user account has sufficient access rights. See + [Using Basic Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/basicauth.md) + topic for additional information. + +- Modern authentication: + + - Selected, Office 365 organization will be accessed using the Microsoft Entra ID (formerly + Azure AD) app you prepared. Enter: + + - **Application ID**; + + - **Application secret**. + + - See the + [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) + for additional information. + +**Step 3 –** Click the **Add** button. + +![Add Office 365 Item window](/images/auditor/10.7/admin/monitoringplans/item_o365_basic_auth_thumb_0_0.webp) + +You can use a single account to collect audit data for different Office 365 services (Microsoft +Entra ID, Exchange Online, SharePoint Online); however, Netwrix recommends that you specify +individual credentials for each of them. + +## How to Add Microsoft Entra ID Monitoring Plan Using Netwrix Privilege Secure + +**NOTE:** Netwrix Privilege Secure resource-based integration works only with basic authentication. +Ephemeral accounts will be created or elevated to be used as data collecting accounts. If you want +to use modern authentication and the Netwrix Privilege Secure integration, you need to choose a +credential-based access policy, save your application and secret in Netwrix Privilege Secure, and +provide the Application ID instead of the user name. + +Starting with version 10.7, you can use Netwrix Privilege Secure to manage the account for +collecting data, after configuring the integration. See the +[Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information about +integration and supported data sources. In this case, the credentials will not be stored by Netwrix +Auditor. Instead, they will be managed by Netwrix Privilege Secure and provided on demand, ensuring +password rotation or using temporary accounts for data collection. + +Follow the steps to use Netwrix Privilege Secure as an account for data collection. + +**Step 1 –** Select the desired item. + +**Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data +collection. + +![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) + +**Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. +Credential-based is the default option. Refer to the +[Netwrix Privilege Secure](https://helpcenter.netwrix.com/category/privilegesecure_accessmanagement) +documentation to learn more about Access Policies. + +In this case, you need to provide the username of the account managed by Netwrix Privilege Secure, +and to which Netwrix Auditor has the access through a Credential-based access policy. + +**NOTE:** Netwrix recommends using different credentials for different monitoring plans and data +sources. + +![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) + +The second option is Resource-based. To use this option, you need to provide the Activity and +Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure +that you specified the same names as in Netwrix Privilege Secure. + +The Resource name in this case is where the activity will be performed. For example, if you grant +the data collecting account the access to a local Administrators group - the resource is the server +where the permission will be granted. + +Netwrix Privilege Secure is ready to use as an account for data collection. diff --git a/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/scope.md b/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/scope.md new file mode 100644 index 0000000000..d3c17bb8b8 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/scope.md @@ -0,0 +1,31 @@ +--- +title: "Microsoft Entra ID Monitoring Scope" +description: "Microsoft Entra ID Monitoring Scope" +sidebar_position: 10 +--- + +# Microsoft Entra ID Monitoring Scope + +You can fine-tune Netwrix Auditor by specifying data that you want to exclude from the Microsoft +Entra ID (formerly Azure AD) monitoring scope or modify the way it will be displayed. + +Follow the steps to exclude data from the Microsoft Entra ID monitoring scope: + +**Step 1 –** Navigate to the _%Netwrix Auditor installation folder%\Azure AD Auditing_ folder. + +**Step 2 –** Edit the \*.txt files, based on the following guidelines: + +- Each entry must be a separate line. +- A wildcard (\*) is supported. You can use \* for cmdlets and their parameters. +- Lines that start with the # sign are treated as comments and are ignored. + +| File | Description | Syntax | +| ----------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------- | +| adomiteventuserlist.txt | Contains a list of users whose user names you want to exclude from Microsoft Entra ID search results, reports and Activity Summaries. The rest of change details (action, object type, etc.) will be reported, but the Who value will be "system". | user@tenant.com | +| exomiteventuserlist.txt | Contains a list of Exchange whose user names you want to exclude from Microsoft Entra ID search results, reports and Activity Summaries. The rest of change details (action, object type, etc.) will be reported, but the Who value will be "system". This list omits changes made by users through Exchange admin center. | user@tenant.com | +| maapioperationtypes.txt | Contains an overall list of object types that will be displayed in search results, reports, and Activity Summaries for each particular operation. By default, the list contains mapping for the most frequent operations (e.g., add user, update policy, remove member). The rest will be reported with Microsoft Entra ID object type. | operation = object type For example: add owner to group = Group | +| omitproplist.txt | Contains a list of object classes and attributes to be excluded from Microsoft Entra ID search results, reports and Activity Summaries. | classname.attrname If there is no full stop, the entire line is considered a class name. | +| omitUPNlist.txt | Specify the user principal name for objects you want to exclude from Microsoft Entra ID search results, licenses, reports and SITs. | user@tenant.com **NOTE:** Wildcard \* is supported and can replace any number of characters. | +| omituserlist.txt | Contains a list of users you want to exclude from Microsoft Entra ID search results, Microsoft Entra ID Changes reports and Activity Summaries. | user@tenant.com | +| propnames.txt | Contains a list of human-readable names for object types and attributes to be displayed in search results, reports, and Activity Summaries. | object=friendlyname object.property=friendlyname For example: \*.PasswordChanged = Password Changed | +| proptypes.txt | Defines how values will be displayed in the Details columns in Microsoft Entra ID search results, reports, and Activity Summaries. | For example: \*.Role.DisplayName = MultiValued | diff --git a/docs/auditor/10.8/admin/monitoringplans/msteams.md b/docs/auditor/10.8/admin/monitoringplans/msteams.md new file mode 100644 index 0000000000..a1cd059141 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/msteams.md @@ -0,0 +1,99 @@ +--- +title: "MS Teams" +description: "MS Teams" +sidebar_position: 120 +--- + +# MS Teams + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data collection + and activity monitoring configure necessary protocols and ports for inbound and outbound + connections +- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +- [MS Teams](/docs/auditor/10.7/configuration/microsoft365/teams/overview.md) – Configure data source as required + to be monitored + +## How to Add Office365 Item + +This instruction shows how to collect audit data from the Microsoft 365 tenant. + +If you plan to use modern authentication, see the +[Configuring Microsoft Entra ID App for Auditing Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md#configuring-microsoft-entra-id-app-for-auditing-microsoft-entra-id) +topic for additional information on how to prepare Microsoft Entra ID app with required permissions. +Make sure you have the following at hand: + +- Tenant name +- For modern authentication: Application (client) ID +- Application secret +- For basic authentication: User name and password + +Types of data that can be collected by Netwrix Auditor from the Microsoft 365 tenant depend on the +authentication option you choose. + +Follow the steps to configure Office 365 tenant as a monitored item. + +**Step 1 –** On the **General** page of the item properties, specify **Tenant name**: + +- If you are going to use **Basic authentication**, you can proceed to the next step – **Tenant + name** will be filled in automatically after it. + +- **NOTE:** Basic authentication is no longer possible for Exchange Online. For the already existing + tenants it is still possible to use basic authentication for SharePoint Online and Microsoft Entra + ID monitoring. + +- If you are going to use **Modern authentication**, paste the obtained name. See the + [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) + topic for additional information. + +![tenantenvironment](/images/auditor/10.7/admin/monitoringplans/tenantenvironment.webp) + +If you are using a government tenant, please click the **Tenant Environment** tab and select the +desired tenant environment. + +**Step 2 –** Select authentication method that will be used when accessing Office 365 services: + +- Basic authentication: + + - Selected, Office 365 organization will be accessed on behalf of the user you specify. + - Enter **User name** and **password**; use any of the following formats: _user@domain.com_ or + _user@domain.onmicrosoft.com_. + - The **Tenant name** field then will be filled in automatically. + - Make sure this user account has sufficient access rights. See + [Using Basic Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/basicauth.md) + topic for additional information. + +- Modern authentication: + + - Selected, Office 365 organization will be accessed using the Microsoft Entra ID (formerly + Azure AD) app you prepared. Enter: + + - **Application ID**; + + - **Application secret**. + + - See the + [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) + for additional information. + +**Step 3 –** Click the **Add** button. + +![Add Office 365 Item window](/images/auditor/10.7/admin/monitoringplans/item_o365_basic_auth_thumb_0_0.webp) + +You can use a single account to collect audit data for different Office 365 services (Microsoft +Entra ID, Exchange Online, SharePoint Online); however, Netwrix recommends that you specify +individual credentials for each of them. + +**Step 4 –** Complete the following fields: + +| Option | Description | +| -------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | +| Collect data for state-in-time reports | Configure Netwrix Auditor to store daily snapshots of your system configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) topic for additional information. | + +After that, you can use the Microsoft Entra ID management portal to revoke this privileged role and +assign one of the non-privileged roles instead (for example, _Security Reader_). diff --git a/docs/auditor/10.8/admin/monitoringplans/networkdevices.md b/docs/auditor/10.8/admin/monitoringplans/networkdevices.md new file mode 100644 index 0000000000..21d6d8438a --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/networkdevices.md @@ -0,0 +1,50 @@ +--- +title: "Network Devices" +description: "Network Devices" +sidebar_position: 130 +--- + +# Network Devices + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data collection + and activity monitoring configure necessary protocols and ports for inbound and outbound + connections +- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +- [Network Devices](/docs/auditor/10.7/configuration/networkdevices/overview.md) – Configure data source as + required to be monitored + +Complete the following fields: + +| Option | Description | +| -------------------------------------------------- | ---------------------------------------------------------------------------------------------------- | +| Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | + +## Cisco Meraki Dashboard + +Complete the following fields: + +| Option | Description | +| -------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Specify credentials to connect to Cisco Meraki Dashboard | Provide a name of your organization or an account used to connect to Cisco Meraki dashboard. | +| Select authentication type | There are two authentication options available to collect data from Cisco Meraki devices: - Access through API. You can access Cisco Meraki dashboard using API secret key if one-time password (OTP) MFA is required in your organization. In this case, you need to provide your API secret key. See Cisco Meraki documentation for additional information about Cisco Meraki API: [Meraki Dashboard API](https://developer.cisco.com/meraki/api-v1/#meraki-dashboard-api). - Basic authentication: access on behalf of a user. Provide the name and password of the service account configured to access Cisco Meraki Dashboard. See the Configure Cisco Meraki Dashboard Account topic for additional information on how to configure the account used to collect data. | + +This monitoring plan also requires a management IP address. A management IP is an IP address that is +used for management purposes. For example, the IP that is configured on a switch so that you can +remotely access it through its IP address would be considered a management IP address. + +## Syslog Device + +Complete the following fields: + +| Option | Description | +| ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General | | +| Specify syslog host or network source | Select one of the following: - Host or network source name — Provide a server name by entering its FQDN, NETBIOS or IPv4 address. You can click Browse to select a computer from the list of computers in your network. - IP Range — Specify an IP range for the audited computers. To exclude computers from within the specified range, click **Exclude**. Enter the IP subrange you want to exclude, and click **Add**. | +| Specify port and protocol for incoming connections | Use **Port** and **Protocol** to provide the port required for incoming connections (default is **UDP port 514**). | +| Devices | | +| Configure monitoring rules for required network devices: - Cisco (ASA, IOS, FTD, Meraki) - Fortinet (FortiGate FortiOS) - Juniper (Junos OS) - Palo Alto (PAN-OS) - Sonic Wall (NS, SMA, WAF) - HPE (ArubaOS) - Pulse Secure | | diff --git a/docs/auditor/10.8/admin/monitoringplans/oracle/_category_.json b/docs/auditor/10.8/admin/monitoringplans/oracle/_category_.json new file mode 100644 index 0000000000..2a38c0ae85 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/oracle/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Oracle Database", + "position": 140, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/monitoringplans/oracle/overview.md b/docs/auditor/10.8/admin/monitoringplans/oracle/overview.md new file mode 100644 index 0000000000..545a46c94e --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/oracle/overview.md @@ -0,0 +1,93 @@ +--- +title: "Oracle Database" +description: "Oracle Database" +sidebar_position: 140 +--- + +# Oracle Database + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data + collection and activity monitoring configure necessary protocols and ports for inbound and + outbound connections +- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +- [Oracle Database](/docs/auditor/10.7/configuration/oracle/overview.md) – Configure data source as required + to be monitored + +Complete the following fields: + +| Option | Description | +| -------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **General** | | +| Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | +| Monitor Oracle Database logon activity | Specify what types of logon events you want to monitor: successful or failed, performed through Windows and SQL authentication. - Failed logons - Successfullogons | +| **Users** | | +| Specify users to track their activity | Use controls in this section to populate the corresponding lists -click **Add** and specify user name and type (OS or database user). - Include—Add users to be included in the auditing scope. - Exclude—Add users to be excluded from the auditing scope by specifying their names and type (OS or database user). User names are case-sensitive. | +| **Database Objects** | | +| Data objects to monitor | Create rules for objects and actions that you want to audit: 1. Click Add Rule. 2. Specify a name of the Oracle database _Object_ and _Schema_. 3. Select the necessary actions (successful or failed changes, successful or failed reads). 4. Click **Add**. Schema and object names are case sensitive. | + +Review your data source settings and click **Add** to go back to your plan. The newly created data +source will appear in the **Data source** list. As a next step, click **Add item** to specify an +object for monitoring. See the +[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +information. + +## Oracle Database Instance + +Complete the following fields: + +| Option | Description | +| ------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Connection type | Select how the product connects to Oracle Database: - Oracle Database instance – select if you want to connect to a database by instance name. - Oracle Wallet – select if you want to use Oracle Wallet – password-protected container used to store authentication and signing credentials, including private keys, certificates, and trusted certificates needed by SSL. | +| Instance name | Provide connection details in the following format: _host:port/service_name._ Make sure audit settings are configured for your Oracle Database instance. | +| Wallet alias | Provide the alias you set while creating wallet. For example, "_MyOracle_". Alias name in Netwrix Auditor should exactly match the alias in the `tnsnames.ora` file. [Configure Oracle Instant Client for HTTP Proxy Connections](/docs/auditor/10.7/configuration/oracle/wallet.md#configure-oracle-instant-client-for-http-proxy-connections) | +| Specify the account for collecting data For Oracle Database instance connection type only. | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | + +## Data Collection from Oracle Database + +On a high level, data collection process for Oracle databases works as follows: + +![hiw_diagram_oracle](/images/auditor/10.7/admin/monitoringplans/oracle/hiw_diagram_oracle.webp) + +1. Oracle administrator prepares a dedicated service account with sufficient permissions to collect + data from Oracle Database. See the + [Permissions for Oracle Database Auditing](/docs/auditor/10.7/configuration/oracle/permissions.md) topic + for additional information. +2. Netwrix administrator does the following: + + - Creates a monitoring plan in Netwrix Auditor, specifying the service account (prepared at + step 1) as a data collecting account in the Monitoring Plan wizard. Then s/he adds items to + the monitoring plan – these are Oracle Databases to collect data from. + - Configures alerts related to Oracle data source. Current version does not include predefined + alerts for that data source, so follow the [Create Alerts](/docs/auditor/10.7/admin/alertsettings/create/create.md) + section to create and configure the necessary alerts. + + Remember to set the filter to “Data Source*equals* Oracle”. + +3. Netwrix Auditor Data Collection Service starts periodic (every 10 min by default) data collection + sessions. The results of each session include audit events that occurred since the previous data + collection. Data is retrieved via Oracle Instant Client application. The product uses direct + connection string or Oracle Wallet to connect to Oracle databases. +4. Netwrix Auditor Data Collection Service processes collected data into the proprietary format + (Activity Records). Each Activity Record contains initiator’s account, time, action, and other + details. + + - To determine what has changed in the configuration, it compares a state snapshot from Oracle + Server with the previously taken. + - To get ‘_Who_’ (initiator) and ‘_When_’ (date and time) information for the detected changes, + the product uses Oracle events data. + + Netwrix Auditor Serverthen writes the Activity Records to the audit database (default retention + – 180 days) and long-term archive (default retention – 120 months). + +5. Users can work with collected data in Netwrix Auditor client UI: run search, view reports, and so + on. If you have configured alerting in Netwrix Auditor, then the activities that match the + certain criteria will trigger the alerts. Recipients will be notified by email, and response + actions will be taken, if configured. +6. Netwrix Auditor also generates an Activity Summary once a day (by default, at 3 AM) and sends it + to the specified recipients. This email lists Oracle infrastructure changes and activities + collected by Netwrix Auditor during the last 24 hours. diff --git a/docs/auditor/10.8/admin/monitoringplans/oracle/scope.md b/docs/auditor/10.8/admin/monitoringplans/oracle/scope.md new file mode 100644 index 0000000000..ebf87a982b --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/oracle/scope.md @@ -0,0 +1,23 @@ +--- +title: "Oracle Database Monitoring Scope" +description: "Oracle Database Monitoring Scope" +sidebar_position: 10 +--- + +# Oracle Database Monitoring Scope + +You can fine-tune Netwrix Auditor by specifying users that you want to exclude from the Oracle +Database monitoring scope. + +Follow the steps to exclude data from the Oracle Database monitoring scope: + +**Step 1 –** In Auditor, navigate to your Oracle Database monitoring plan and click Edit. + +**Step 2 –** In the right pane, select Edit data source. + +**Step 3 –** Navigate to Users tab and click Add next to Exclude. + +**Step 4 –** In the Add User dialog, type name of the user you want to exclude and select its type +(OS user or Database user). + +**Step 5 –** Click Add to exclude selected user from being monitored. diff --git a/docs/auditor/10.8/admin/monitoringplans/overview.md b/docs/auditor/10.8/admin/monitoringplans/overview.md new file mode 100644 index 0000000000..38db21d371 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/overview.md @@ -0,0 +1,83 @@ +--- +title: "Monitoring Plans" +description: "Monitoring Plans" +sidebar_position: 30 +--- + +# Monitoring Plans + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data collection + and activity monitoring configure necessary protocols and ports for inbound and outbound + connections +- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +- [Supported Data Sources](/docs/auditor/10.7/requirements/supporteddatasources/supporteddatasources.md) – Configure data source as + required to be monitored + +To start auditing your environment and analyzing user behavior with Netwrix Auditor, create a +monitoring plan. + +A monitoring plan defines data collection, notification, and storage settings. + +To start collecting data, and add items to its scope. + +Follow the steps to collect data from your environment. + +**Step 1 –** Create a monitoring plan with the wizard. Select the data source when you start the +monitoring plan wizard, and its initial settings are configured at the wizard steps. See the +[Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional information. + +**Step 2 –** Fine-tune data source settings, if necessary: use the data source properties to modify +data collection settings, customize the monitoring scope, and more. + +**Step 3 –** Add items to be monitored. An item is a specific object you want to audit, e.g., a +VMware server or a SharePoint farm. As soon as the item is added, to the monitoring plan, Auditor +starts collecting data from it. See the +[Add Items for Monitoring](datasources.md#add-items-for-monitoring) topic for additional +information. + +**Step 4 –** To view and modify your plans, in the main Auditor window click the Monitoring Plans +tile, then expand the All Monitoring Plans tree. + +| To.. | Do.. | +| --------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| See how data collection goes on | Click on a plan name. You will see all data sources included in the plan and data collection status for each data source. | +| Start data collection manually | 1. Select a plan and click Edit. 2. In the monitoring plan window, click Update in the right pane. Data collection will be started (status for the data sources will be displayed as _Working_). Do the same if you need to generate Activity Summary with the latest changes. | +| View collected data | 1. Select a plan and click Edit. 2. In the right pane, go to the Intelligence section (in the bottom) and click Search. The search page will appear, displaying the collected data filtered out accordingly (i.e. provided by this monitoring plan). | +| Modify plan settings, add or delete data sources, add or delete items | Select a plan and click Edit. On the page that opens, review your plan settings. Then follow the instructions described in these sections: - [Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md) - [Fine-Tune Your Plan and Edit Settings](/docs/auditor/10.7/admin/monitoringplans/finetune.md) | +| Assign roles | Click Delegate to review current delegations and assign roles. You can delegate control over a monitoring plan to another administrator, or grant read access—Reviewer role—to the data collected by this plan. To simplify delegation, you can further organize the monitoring plans into folders. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. | + +## Using historical data + +For many data sources, you can instruct Netwrix Auditor to collect state-in-time data along with +event data. For that, Netwrix Auditor uses state-in-time snapshots of the relevant system (for +example, see [VMware](/docs/auditor/10.7/admin/monitoringplans/vmware/overview.md)). + +To keep users up-to-date on actual system state, Auditor updates the latest snapshot on the regular +basis. Thus, only the latest snapshot is available for ongoing reporting in the product. + +However, you may need to generate reports based on the historical data. For that, you must import +the historical snapshots to the database. + +To import snapshots, you must be assigned the _Global administrator_ or the _Global reviewer_ role. + +Follow the steps to import historical snapshots. + +**Step 1 –** Select the monitoring plan you need. + +**Step 2 –** Select the required data source and click **Edit data source** on the right to open its +properties. + +**Step 3 –** Click **General** on the left. + +**Step 4 –** In the **Manage historical snapshots** section, click **Manage**. + +**Step 5 –** In the **Manage Snapshots** window, select the snapshots that you want to import — use +the arrows to move the selected snapshots to the **Snapshots available for reporting** list. When +finished, click **OK**. + +See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/monitoringplans/overview_1.md b/docs/auditor/10.8/admin/monitoringplans/overview_1.md new file mode 100644 index 0000000000..0518da3817 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/overview_1.md @@ -0,0 +1,121 @@ +--- +title: "User Activity" +description: "User Activity" +sidebar_position: 180 +--- + +# User Activity + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data + collection and activity monitoring configure necessary protocols and ports for inbound and + outbound connections +- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +- [User Activity](/docs/auditor/10.7/configuration/useractivity/overview.md) – Configure data source as + required to be monitored + +Complete the following fields: + +| Option | Description | +| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| General | | +| Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | +| Notify users about activity monitoring | You can enable the message that will be displayed when a user logs in and specify the message text. | +| Record video of user activity within sessions | - If disabled, only user session events will be collected (regardless of whether the user is idle or not). - If enabled, the product will both collect user session events and record video of user activity. By default, this option is disabled. | +| Video Recording For these settings to become effective, enable video recording on the General tab. | | +| Adjust video quality | Optimize video file by adjusting the following: - File size and video quality - Save video in grayscale - CPU load and Video smoothness. | +| Adjust video duration | Limit video file length by adjusting the following: - Recording lasts for `<...>` minutes—Video recording will be stopped after the selected time period. - User has been idle for `<...>` minutes—Video recording will be stopped if a user is considered inactive during the selected time period. If the Record video of user activity within sessions option is enabled, the User Sessions report shows active time calculated without including user idle period. Mind that a computer is considered to be idle by Windows if there has not been user interaction via the mouse or keyboard for a given time and if the hard drives and processors have been idle more than 90% of that time. - Free disk space is less than `<...>` MB—Video recording will be stopped when upon reaching selected disk space limit. - Consider user activity — Select one of the following: - Stop if user has been idle for `<...>` minutes. Select if you want video recording for a user to be stopped after the specified time period. - Continue video recording regardless of the user idle state. When selected, Netwrix Auditor continues video recording for idle users. | +| Set a retention period to clear stale videos | When the selected retention period is over, Netwrix Auditor deletes your video recordings. | +| Users | | +| Specify users to track their activity | Select the users whose activity should be recorded. You can select **All users** or create a list of **Specific users or user groups**. Certain users can also be added to **Exceptions** list. | +| Applications | | +| Specify applications you want to track | Select the applications that you want to monitor. You can select All applications or create a list of Specific applications. Certain applications can also be added to Exceptions list. | +| Monitored Computers | | +| For a newly created monitoring plan for User Activity, the list of monitored computers is empty. Add items to your monitoring plan and wait until Netwrix Auditor retrieves all computers within these items. See [Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring)for more information. The list contains computer name, its current status and last activity time. | | + +Review your data source settings and click **Add** to go back to your plan. The newly created data +source will appear in the **Data source** list. As a next step, click **Add item** to specify an +object for monitoring. See the +[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +information. + +## How to Include/Exclude Applications + +To create a list of application to include in / exclude from monitoring, you will need to provide: + +- Title — application title as shown on top of the application window, for example, + **MonthlyReport.docx - Word**. + + - Title can also be found in the "_What_" column of related Netwrix Auditor reports and search + results, for example, in the **User Sessions** report. + +- Description — as shown in the Description column on theDetails tab of Windows Task Manager. + + - Using Description can help to filter out several components of a single application — for + example, all executables having _TeamViewer 14_ description belong to the same app (see the + screenshot above). + +To create a list of inclusions / exclusions for applications: + +**Step 1 –** Click Add on the right of the list. + +**Step 2 –** Enter application title and description you have identified. + +Wildcards (\*?) are supported and applied as follows: + +- _\* - Notepad_ (the "Title" filter) will exclude all Notepad windows. +- _colo?r \*_ (the "Title" filter) will exclude all application window titles containing "_color_" + or "_colour_". + +Same logic applies to the inclusion rules. + +Example + +To exclude the Notepad application window with "_Document1_" open, add the following filter values: + +- In the Title filter enter "_Document1.txt - Notepad_": + + ![uavr_source_example_1](/images/auditor/10.7/admin/monitoringplans/useractivity/uavr_source_example_1.webp) + +- In the Description filter, enter the corresponding value, here it will be "_Notepad_". + +![uavr_source_example_2_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/useractivity/uavr_source_example_2_thumb_0_0.webp) + +## Computer + +For evaluation purposes, Netwrix recommends selecting Computer as an item for a monitoring plan. +Once the product is configured to collect data from the specified items, audit settings (including +Core and Compression services installation) will be applied to all computers within AD Container or +IP Range. + +Complete the following fields: + +| Option | Description | +| --------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General | | +| Specify a computer | Provide a server name by entering its FQDN, NETBIOS or IPv4 address. You can click Browse to select a computer from the list of computers in your network. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select account type you want to use and enter credentials. The following choices are available: - User/password. The account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic for additional information. | + +## IP Range + +Complete the following fields: + +| Option | Description | +| --------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General | | +| Specify IP range | Specify an IP range for the audited computers. To exclude computers from within the specified range, click **Exclude**. Enter the IP subrange you want to exclude, and click **Add**. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | + +## AD Container + +Complete the following fields: + +| Option | Description | +| --------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General | | +| Specify AD container | Specify a whole AD domain, OU or container. Click **Browse** to select from the list of containers in your network. You can also: - Select a particular computer type to be audited within the chosen AD container: **Domain controllers, Servers (excluding domain controllers)**, or **Workstations**. - Click **Exclude** to specify AD domains, OUs, and containers you do not want to audit. In the Exclude Containers dialog, click Add and specify an object. The list of containers does not include child domains of trusted domains. Use other options **(Computer, IP range** to specify the target computers. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. If using a group Managed Service Account (gMSA), you can specify only the account name in the _domain\account$_ format. Password field can be empty. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the[Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | diff --git a/docs/auditor/10.8/admin/monitoringplans/sharepoint/_category_.json b/docs/auditor/10.8/admin/monitoringplans/sharepoint/_category_.json new file mode 100644 index 0000000000..c88d03be65 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/sharepoint/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "SharePoint", + "position": 150, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/monitoringplans/sharepoint/overview.md b/docs/auditor/10.8/admin/monitoringplans/sharepoint/overview.md new file mode 100644 index 0000000000..4be2b8e957 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/sharepoint/overview.md @@ -0,0 +1,59 @@ +--- +title: "SharePoint" +description: "SharePoint" +sidebar_position: 150 +--- + +# SharePoint + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data + collection and activity monitoring configure necessary protocols and ports for inbound and + outbound connections +- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +- [SharePoint](/docs/auditor/10.7/configuration/sharepoint/overview.md) – Configure data source as required to + be monitored + +Complete the following fields: + +| Option | Description | +| -------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | +| Detect additional details | Specify additional information to include in reports and activity summaries. Select Group membershipif you want to include Group membership of the account under which the change was made. | +| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [SharePoint](/docs/auditor/10.7/configuration/sharepoint/overview.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. | +| Collect data for state-in-time reports | Configure Netwrix Auditor to store daily snapshots of your system configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) topic for additional information. In the **Manage historical snapshots** section, you can click **Manage** and select the snapshots that you want to import to the Audit Database to generate a report on the data source's state at the specific moment in the past. You must be assigned the **Global administrator** or the **Global reviewer** role to import snapshots. Move the selected snapshots to the Snapshots available for reporting list using the arrow button. The product updates the latest snapshot on the regular basis to keep users up to date on actual system state. Users can also configure Only the latest snapshot is available for reporting in Auditor . If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. | + +Review your data source settings and click **Add** to go back to your plan. The newly created data +source will appear in the **Data source** list. As a next step, click **Add item** to specify an +object for monitoring. See the +[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +information. + +## Troubleshoot SharePoint Auditing + +| Problem | Description | KB article | +| ------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| The "Timeout Expired" error appears during the agent's deployment. | The agent failed to be deployed due to one of the following reasons: - One or several servers are unreachable - The SPAdminV4 service is not started on any of the servers. - The servers within the farm are located in different time zones. - Your SharePoint farm exceeds the recommended capacity limits. Increase DeployTimeout value in _%ProgramData%\Netwrix\NetwrixAuditor for SharePoint\ Configuration\ ``\ Commonsettings.config_ and restart the agent service. | Refer to the [Timeout Expired Error on SharePoint Core Service Deployment](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA00g000000H9YfCAK.html) Knowledge Base article for the solution. | + +## SharePoint Farm + +Complete the following fields: + +| Option | Description | +| -------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General | | +| Specify SharePoint farm for monitoring | Enter the SharePoint Central Administration website URL. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Core Service | | +| Deploy Netwrix Auditor for SharePoint Core Service | Select deployment method for the Core Service. Select one of the following: - Automatically—The installation will run under the account used to collect data on the SharePoint farm wizard completion. Prior to the Netwrix Auditor for SharePoint Core Service installation, review the following prerequisites and make sure that: - Netwrix Auditor for SharePoint Core Service is going to be installed on the computer that hosts SharePoint Central Administration in the audited SharePoint farm. - [.Net Framework 3.5 SP1](http://www.microsoft.com/en-us/download/details.aspx?id=22) is installed on the computer that hosts SharePoint Central Administration in the audited SharePoint farm. - The SharePoint Administration (SPAdminV4) service is started on the target computer. See [SharePoint](/docs/auditor/10.7/configuration/sharepoint/overview.md) for more information. - The user that is going to run the Core Service installation: - Is a member of the local Administrators group on SharePoint server, where the Core Service will be deployed. - Is granted the SharePoint_Shell_Access role on SharePoint SQL Server configuration database. See [Permissions for SharePoint Auditing](/docs/auditor/10.7/configuration/sharepoint/permissions.md) topic for more information. - Manually—See the [Netwrix Auditor Installation and Configuration Guide](https://www.netwrix.com/download/documents/Netwrix_Auditor_Installation_Configuration_Guide.pdf) for more information. During the Netwrix Auditor for SharePoint Core Service installation / uninstallation your SharePoint sites may be unavailable. | +| Changes | | +| Audit SharePoint farm configuration changes | Configuration changes are always audited. | +| Audit SharePoint permissions and content changes | Select change types to be audited with Netwrix Auditor. Netwrix Auditor allows auditing the entire SharePoint farm. Alternatively, you can limit the auditing scope to separate web applications and site collections. To do it, select Specific SharePoint objects and do one of the following: - Click Add, provide the URL to web application or site collection and select object type (Web application or Site collection). - Click Import, select object type (Web application or Site collection), encoding type, and browse for a file that contains a list of web applications and sites. Netwrix Auditor ignores changes to system data (e.g., hidden and system lists or items are not audited). Netwrix Auditor also ignores the content changes to sites and objects on the site collections located on Central Administration web application, but the security changes that occurred there are tracked and reported anyway. | +| Activity | | +| Specify monitoring restrictions | Specify restriction filters to narrow your SharePoint monitoring scope (search results, reports and Activity Summaries). For example, you can exclude site collections document libraries and lists from being audited as they contain public non sensitive data. All filters are applied using AND logic. Click Add and complete the following fields: - User – provide the name of the user as shown in the "_Who_" column of reports and Activity Summaries. Example: _mydomain\user1_. - Object URL – provide URL of the objects as shown in the "_What_" column of reports and Activity Summaries. Example: _http://sitecollection/list/document.docx_. - Action Type – select what types of actions performed by selected users under the object you want to monitor. Available values: _All_, _Changes_, _Reads_. You can use a wildcard (\*) to replace any number of characters in filters. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | +| Read Access | | +| Audit SharePoint read access | Configure Netwrix Auditor to track read access to lists and list items within your SharePoint farm except for Central Administration web sites. Select Sites only if you want to enable read access auditing on SharePoint sites only. Enable Sites and subsites to track read access on each subsite. Then, do one of the following: - Click Add and provide URL to a SharePoint site. - Click Import, select encoding type, and browse for a file that contains a list of sites. Read access auditing significantly increases the number of events generated on your SharePoint and the amount of data written to the AuditArchive. | diff --git a/docs/auditor/10.8/admin/monitoringplans/sharepoint/scope.md b/docs/auditor/10.8/admin/monitoringplans/sharepoint/scope.md new file mode 100644 index 0000000000..870bfe7dad --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/sharepoint/scope.md @@ -0,0 +1,35 @@ +--- +title: "SharePoint Monitoring Scope" +description: "SharePoint Monitoring Scope" +sidebar_position: 10 +--- + +# SharePoint Monitoring Scope + +You can fine-tune Netwrix Auditor by specifying data that you want to exclude from the SharePoint +monitoring scope. + +Follow the steps to exclude data from the SharePoint monitoring scope: + +**Step 1 –** Navigate to the _%working folder%\Netwrix Auditor for SharePoint\Configuration\GUID_ +folder, where omit lists are located. + +If you have several monitoring plans for monitoring SharePoint farms, configure omit lists for each +monitoring plan separately. + +**Step 2 –** Edit the \*.txt files, based on the following guidelines: + +- Each entry must be a separate line. +- A wildcard (\*) is supported. You can use \* for cmdlets and their parameters. +- Lines that start with the # sign are treated as comments and are ignored. + +| File | Description | Syntax | +| ------------------------- | ------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| omiteventloglist.txt | Contains a list of event IDs to be excluded from the Netwrix Auditor System Health event log. | `event ID` For example: `1001` Only add known error or warning events, otherwise you may lose important data. | +| omitscreadaccesslist.txt | Contains a list of site collections for which the product will not monitor read access attempts. | `http(s)://URL` Enter the root web site URLs. If you have alternate access mapping configured in your SharePoint farm, and one web application has different URLs for different zones, you can use any of these URLs to specify a child site collection. For example: `http://sharepointsrv:3333/` | +| omitscstorelist.txt | Contains a list of site collections to be excluded from audit data collection. | `http(s)://URL` Enter the root web site URLs. If you have alternate access mapping configured in your SharePoint farm, and one web application has different URLs for different zones, you can use any of these URLs to specify a child site collection. For example: `https://siteColl*` | +| omitsitscstorelist.txt | Lists site collections to exclude from being monitored and reported in state-in-time report. | `http(s)://URL` Enter root web site URLs. If you have alternate access mapping configured in your SharePoint farm, and one web application has different URLs for different zones, you can use any of these URLs to specify a child site collection. You can use a wildcard (\*) to replace any number of characters. Examples: `http://siteCollection1:3333/ `````` https://siteColl*` | +| omitsitstorelist.txt | Contains SharePoint lists and list items that you want to exclude from being audited. | URI Reference URI Reference does not include site collection URL. For example, to exclude the list item with URL _http://sitecollection/list/document.docx_, specify only "_list/document.docx_" instead of full URL. Wildcard (\*) is supported to replace any number of characters. Examples: `*list/document.docx `````` */_catalogs/* `````` */_vti_inf.html `````` */Style Library* `````` */SitePages*` | +| omituserviewstorelist.txt | Contains a list of user or service accounts to be excluded from read access monitoring. | `Login name` For example: SHAREPOINT\System | +| omitviewstorelist.txt | Contains lists and list items to be excluded from being monitored for read access. | `URI Reference ` Only specify URI reference to a list or list item without `https:\\` part. For example: `*list/document.docx` | +| omitwastorelist.txt | Contains a list of web applications to be excluded from audit data collection. | `http(s)://URL` Enter the root web site URLs. If you have alternate access mapping configured in your SharePoint farm, and one web application has different URLs for different zones, you can use any of these URLs. For example: `http://webApplication1:3333/` | diff --git a/docs/auditor/10.8/admin/monitoringplans/sharepointonline/_category_.json b/docs/auditor/10.8/admin/monitoringplans/sharepointonline/_category_.json new file mode 100644 index 0000000000..8b5da04c57 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/sharepointonline/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "SharePoint Online", + "position": 160, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/monitoringplans/sharepointonline/overview.md b/docs/auditor/10.8/admin/monitoringplans/sharepointonline/overview.md new file mode 100644 index 0000000000..82c909b261 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/sharepointonline/overview.md @@ -0,0 +1,108 @@ +--- +title: "SharePoint Online" +description: "SharePoint Online" +sidebar_position: 160 +--- + +# SharePoint Online + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data + collection and activity monitoring configure necessary protocols and ports for inbound and + outbound connections +- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +- [SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/overview.md) – Configure + data source as required to be monitored + +## How to Add Office365 Item + +This instruction shows how to collect audit data from the Microsoft 365 tenant. + +If you plan to use modern authentication, see the +[Configuring Microsoft Entra ID App for Auditing Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md#configuring-microsoft-entra-id-app-for-auditing-microsoft-entra-id) +topic for additional information on how to prepare Microsoft Entra ID app with required permissions. +Make sure you have the following at hand: + +- Tenant name +- For modern authentication: Application (client) ID +- Application secret +- For basic authentication: User name and password + +Types of data that can be collected by Netwrix Auditor from the Microsoft 365 tenant depend on the +authentication option you choose. + +Follow the steps to configure Office 365 tenant as a monitored item. + +**Step 1 –** On the **General** page of the item properties, specify **Tenant name**: + +- If you are going to use **Basic authentication**, you can proceed to the next step – **Tenant + name** will be filled in automatically after it. + +- **NOTE:** Basic authentication is no longer possible for Exchange Online. For the already existing + tenants it is still possible to use basic authentication for SharePoint Online and Microsoft Entra + ID monitoring. + +- If you are going to use **Modern authentication**, paste the obtained name. See the + [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) + topic for additional information. + +![tenantenvironment](/images/auditor/10.7/admin/monitoringplans/tenantenvironment.webp) + +If you are using a government tenant, please click the **Tenant Environment** tab and select the +desired tenant environment. + +**Step 2 –** Select authentication method that will be used when accessing Office 365 services: + +- Basic authentication: + + - Selected, Office 365 organization will be accessed on behalf of the user you specify. + - Enter **User name** and **password**; use any of the following formats: _user@domain.com_ or + _user@domain.onmicrosoft.com_. + - The **Tenant name** field then will be filled in automatically. + - Make sure this user account has sufficient access rights. See + [Using Basic Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/basicauth.md) + topic for additional information. + +- Modern authentication: + + - Selected, Office 365 organization will be accessed using the Microsoft Entra ID (formerly + Azure AD) app you prepared. Enter: + + - **Application ID**; + + - **Application secret**. + + - See the + [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) + for additional information. + +**Step 3 –** Click the **Add** button. + +![Add Office 365 Item window](/images/auditor/10.7/admin/monitoringplans/item_o365_basic_auth_thumb_0_0.webp) + +You can use a single account to collect audit data for different Office 365 services (Microsoft +Entra ID, Exchange Online, SharePoint Online); however, Netwrix recommends that you specify +individual credentials for each of them. + +**Step 4 –** Complete the following fields: + +| Option | Description | +| --------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | +| Audit SharePoint Online configuration and content changes | Configuration and content changes are always audited. | +| Audit SharePoint Online read access | Configure Auditor to monitor SharePoint Online read access. | +| Collect data for state-in-time reports | Configure Netwrix Auditor to store daily snapshots of your SharePoint Online configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) topic for additional information. The product updates the latest snapshot on the regular basis to keep users up-to-date on actual system state. Only the latest snapshot is available for reporting in Netwrix Auditor. If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. For that, in the Manage historical snapshots section, click **Manage** and select the snapshots that you want to import. To import snapshots, you must be assigned the Global administrator or the Global reviewer role . Move the selected snapshots to the Snapshots available for reporting list using the arrow button. When finished, click **OK**. | + +Review your data source settings and click **Add** to go back to your plan. The newly created data +source will appear in the **Data source** list. As a next step, click **Add item** to specify an +object for monitoring. See the +[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +information. + +See the +[Permissions for SharePoint Online Auditing ](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/permissions/permissions.md)topic +for additional information. diff --git a/docs/auditor/10.8/admin/monitoringplans/sharepointonline/scope.md b/docs/auditor/10.8/admin/monitoringplans/sharepointonline/scope.md new file mode 100644 index 0000000000..a8287366c0 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/sharepointonline/scope.md @@ -0,0 +1,33 @@ +--- +title: "SharePoint Online Monitoring Scope" +description: "SharePoint Online Monitoring Scope" +sidebar_position: 10 +--- + +# SharePoint Online Monitoring Scope + +You can fine-tune Netwrix Auditor by specifying data that you want to exclude from the SharePoint +Online monitoring scope. + +Follow the steps to exclude data from the SharePoint monitoring scope: + +**Step 1 –** Navigate to the _%ProgramData%\Netwrix Auditor\Netwrix Auditor for SharePoint +Online\Configuration_ folder and locate your monitoring plan. + +If you have several monitoring plans for monitoring SharePoint Online, configure omitlists for each +monitoring plan separately. + +**Step 2 –** Edit the \*.txt files, based on the following guidelines: + +- Each entry must be a separate line. +- A wildcard (\*) is supported. You can use \* for cmdlets and their parameters. +- Lines that start with the # sign are treated as comments and are ignored. + +| File | Description | Syntax | +| ------------------------- | ----------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| omitstorelist.txt | Contains a list URLs of SharePoint Online objects to be excluded from audit data collection. | `https://URL` For example: `https://Corp.sharepoint.com/*` | +| omiteventloglist.txt | Contains a list of event IDs to be excluded from the Netwrix Auditor System Health event log. | `event ID` For example: `1001` Only add known error or warning events, otherwise you may lose important data. | +| omitreadstorelist.txt | Contains the SharePoint Online lists, documents, etc., to be excluded from being monitored for read access. | `https://URL` For example: `https://Corp.sharepoint.com/*` `*list/document.docx` | +| omituserreadstorelist.txt | Contains a list of user accounts to be excluded from read access monitoring. | Provide user name in the UPN format. For example: `account@example.*.com` | +| OmitSitScStoreList.txt | Contains a list of SharePoint Online site collections to be excluded from state-in-time data collection. | Enter root web site URLs. For example: `https://URL` | +| OmitSitStoreList.txt | Contains SharePoint Online lists and list items to be excluded from state-in-time data collection. | Enter list or list item URI (Unique resource identifier, or endpoint) reference. Note that URI Reference does not include site collection URL. For example, to exclude a list item with the `https://sitecollection.sharepoint.com/list/document.docx`, URL, you should specify the corresponding endpoint (URI), i.e. `list/document.docx`. | diff --git a/docs/auditor/10.8/admin/monitoringplans/sqlserver/_category_.json b/docs/auditor/10.8/admin/monitoringplans/sqlserver/_category_.json new file mode 100644 index 0000000000..95de659817 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/sqlserver/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "SQL Server", + "position": 170, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/monitoringplans/sqlserver/items.md b/docs/auditor/10.8/admin/monitoringplans/sqlserver/items.md new file mode 100644 index 0000000000..4ae7073e6d --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/sqlserver/items.md @@ -0,0 +1,63 @@ +--- +title: "Add Item to the SQL Server" +description: "Add Item to the SQL Server" +sidebar_position: 10 +--- + +# Add Item to the SQL Server + +Perform the following steps to add an item to the SQL Server monitoring plan. + +**Step 1 –** Create a monitoring plan for the SQL Server. + +**Step 2 –** Double-click SQL Server monitoring plan. + +**Step 3 –** Click **Add Item**. + +**Step 4 –** Select one of the items from the drop-down list: + +- SQL Server Instance +- SQL Server Availability Group + +**Step 5 –** Click **Add**. + +Item is added and SQL Server monitoring plan is ready to use. + +## SQL Server Instance + +Complete the following fields: + +| Option | Description | +| --------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Specify SQL Server instance | Specify the name of the SQL Server instance. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | + +Use a combination of server role, environment, instance name (including "DEFAULT" for default +instances), and a unique identifier. + +Example: + +- Production default instance: PROD-SQL-01 +- Development named instance: DEV-SQL-01\DEVINSTANCE +- Test named instance on a specific port: TEST-SQL-01\TESTINSTANCE:1440 + +**NOTE:** When dealing with SQL Server instances, Always On Availability Group (AG) instances, and a +mix of default and non-default instances along with specified ports, it's important to craft names +that provide clear identification. + +## SQL Server Availability Group + +Complete the following fields: + +| Option | Description | +| --------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Availability group listener | Provide a name of an availability group listener in FQDN or NetBIOS format. The listener is a virtual network name (VNN) that you can connect to in order to access a database in a primary or secondary replica of an Always On availability group. A listener allows you to connect to a replica without having to know the physical instance name of the SQL Server. Ensure that the requirements to the DNS name and Windows permissions requirements are met. See [Configure a listener for an Always On availability group](https://docs.microsoft.com/en-us/sql/database-engine/availability-groups/windows/create-or-configure-an-availability-group-listener-sql-server?view=sql-server-ver15) for additional information. | +| Availability group name | Enter a name of your SQL Server availability group. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | + +Extend the SQL Server instance name with a replica role (Primary/Secondary), AG identifier, and a +unique identifier. + +Example: + +- For: `PROD-SQL-01-AG1` diff --git a/docs/auditor/10.8/admin/monitoringplans/sqlserver/overview.md b/docs/auditor/10.8/admin/monitoringplans/sqlserver/overview.md new file mode 100644 index 0000000000..3869601495 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/sqlserver/overview.md @@ -0,0 +1,86 @@ +--- +title: "SQL Server" +description: "SQL Server" +sidebar_position: 170 +--- + +# SQL Server + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data + collection and activity monitoring configure necessary protocols and ports for inbound and + outbound connections +- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +- [SQL Server](/docs/auditor/10.7/configuration/sqlserver/overview.md) – Configure data source as required to + be monitored + +To configure SQL Server data source settings, use the following property tabs: + +- General settings +- Users +- Data +- Audit SELECT + +When finished, review your data source settings and click **Add** to go back to your plan. The newly +created data source will appear in the Data source list. + +As a next step, click Add item to specify an object for monitoring. See the +[Add Item to the SQL Server](/docs/auditor/10.7/admin/monitoringplans/sqlserver/items.md) topic for additional information. + +## General settings + +On the **General** tab, you can configure the following settings for SQL Server data source: + +| Option | Description | +| -------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **General** | | +| Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | +| Monitor SQL Server configuration changes | Always enabled, as SQL Server configuration changes are always monitored. | +| Monitor SQL Server logon activity | Specify what types of logon events you want to monitor: successful or failed, performed through Windows and SQL authentication. - Failed logons - Successfullogons | +| Collect data for state-in-time reports | Configure Netwrix Auditor to store the snapshots of your SQL Server instance configuration — you will require them for state-in-time reports generation. See [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) for more information. **CAUTION:** The State-in-Time functionality is not available for SQL Server Availability Groups. The product updates the latest snapshot on the regular basis to keep users up-to-date on actual system state. Only the latest snapshot is available for reporting in Netwrix Auditor. If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. To import snapshots, you must be assigned the Global administrator or the Global reviewer role in Netwrix Auditor. 1. In the Manage historical snapshots section, click **Manage** and select the snapshots that you want to import. 2. Move the selected snapshots to the Snapshots available for reporting list using the arrow button. 3. When finished, click **OK**. See also [Using historical data](/docs/auditor/10.7/admin/monitoringplans/overview.md#using-historical-data). | + +## Users + +On the **Users** tab, you can configure the following settings for SQL Server data source: + +![data_source_sql_users_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/sqlserver/data_source_sql_users_thumb_0_0.webp) + +| Options | Description | +| ------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Specify users to track their activity | Select the option you need to fine-tune your SQL Server monitoring scope. - **Monitor all users** - **Include only users matching these criteria** - **Exclude users matching these criteria** For example, you may need to track only actions performed by administrative accounts, or exclude the activity initiated by ordinary applications. If so, data should be filtered accordingly before it appears in search results, reports and Activity Summaries. You can create either inclusion or exclusion lists. All filters are applied using AND logic. To create a filter for user activity monitoring, select the related option and click the button on the right. Specify the following: - User — enter the initiator's account as it appears in the "_Who_" column of reports and Activity Summaries, for example: _mydomain\user1_. For events containing “_System_” in the “_Who_” column you can enter "_System_" . - Workstation where activity was initiated — enter the workstation name as it is shown in the "_Workstation_" column of reports and Activity Summaries, for example: _StationWin2016_. - Application that initiated the activity — enter the application name as shown next to "_Application name_" in details of reports and Activity Summaries. You can use a wildcard (\*) to replace any number of characters in filters. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | + +## Data + +On the **Data** tab, you can configure the following settings for SQL Server data source. + +_Remember,_ when auditing SQL Server availability on groups, the only supported data collection mode +is the 'Do not use triggers' mode. + +| Option | Description | +| ------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| --- | --- | +| --- | --- | +| Monitor changes to data in the database tables | Enable monitoring of changes to data stored in the database tables hosted on the SQL Server. If you plan to enable this option, make sure the account that runs the _SQL Server service_ on the monitored instance has at least _read_ permissions in the Active Directory domain (e.g., it does not run under a local user account). Otherwise, enabling this option may lead to issues when altering databases on the monitored SQL Server instances. | +| **Data collection mode** | | +| Do not use triggers | Default mode for a new installation of Netwrix Auditor. Data will be collected using the SQL Server traces. This mode allows you to get a sufficient level of detail in the reports and search results without producing additional load on your SQL Server instance. Thus, it is recommended for highly-transactional servers. When using this mode, consider that the "_What_" field of the Activity Record with "_Object type_" = "_Data_" may show incorrect data. The issues occur because the product applies data categories to an entire SQL Server table and not to rows. | +| Use triggers for detailed monitoring | However, if you require a very detailed reporting on the data changes, you can select this mode. It will be also selected by default if you are upgrading your Netwrix Auditor deployment. Data will be collected using a set of triggers. For more information on this technology, see [https://kb.netwrix.com/728](https://kb.netwrix.com/728) . It is recommended to use this setting carefully, as collecting large amount of details from a highly-transactional server may affect its performance. Using this mode may lead to issues when altering databases on the monitored SQL Server instances. The issues occur only if the SQL Server service account does not have _Read_ permissions in the Active Directory domain (e.g., a local user account). When using this mode, consider that the "_What_" field of the Activity Record with "_Object type_" = "_Data_" may show incorrect data. The issues occur because the product applies data categories to an entire SQL Server table and not to rows. Switching from the configured triggerless mode may lead to a data loss. The workaround is to force data collection right after enabling the triggers. | +| Changes (per transaction) to collect and report: | Specify how many changes per a database transaction you want to be collected. For example, you can limit this number to 10 changes per transaction, or collect all changes. It is recommended to adjust this setting carefully, as collecting large number of changes from a highly-transactional server may affect its performance. | +| Monitoring rules | To specify what data changes must be monitored, create at least one **inclusion rule**. Exclusion rules are optional. Click **Add Rule** and configure the following: ![data_source_sql_data_rule_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/sqlserver/data_source_sql_data_rule_thumb_0_0.webp) - Type — Select rule type: include or exclude. - Server — Specify a name of the monitored SQL Server instance where the required database resides. Use the _server_name\instance_name_ format, for example, _SQLsrv11\SQLExpress2016_. **NOTE:** If you are going to configure monitoring rules for SQL Server Availability Groups, provide the name of your Availability Group item in this field. - Database — Specify the database whose data changes you want to monitor. - Table — Specify database table to monitor. - Column—Specify table column name. The following column types are currently not supported: `text, ntext, image, binary, varbinary, timestamp, sql_variant`. These filters will be applied using AND logic. Wildcard (\*) is supported and can be used to replace any number of characters. | + +## Audit SELECT + +Use the settings in this section to configure how the successful SELECT statements should be +audited. + +![data_source_sql_audit_select_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/sqlserver/data_source_sql_audit_select_thumb_0_0.webp) + +| Option | Description | +| ---------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| --- | --- | +| --- | --- | +| Audit successful SELECT statements | Enable monitoring of successful SELECT statements for the database tables. Successful SELECT statement execution will be reported as Read operation on the database table. Auditing SELECT statements will increase the amount of data collected from the SQL Server instance and stored to long-term archive and audit database. Plan for your resources accordingly. | +| Monitoring rules | To specify what data changes will be monitored, you must create at least one **inclusion rule**. Exclusion rules are optional. Click **Add Inclusion** and specify the following: ![data_source_sql_audit_select_rule_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/sqlserver/data_source_sql_audit_select_rule_thumb_0_0.webp) - Server — specify target SQL Server instance in the server\instance format. **NOTE:** If you are going to configure monitoring rules for SQL Server Availability Groups, provide the name of your Availability Group item in this field. - Database — specify target database - Schema — specify database schema - Table — specify database table you will monitor Wildcard (\*) is supported and can be used to replace any number of characters. Filters will be applied using AND logic, that is, only SELECT statements matching all specified criteria will be monitored. So, in the example above, the program will track and report only the successful SELECT statements executed against the _Applicants_ table of the _HR2019_ database with _Custom_ schema, hosted on the _SQLsrv02\TestInstance_. When finished, click **Add**. If needed, configure the exclusion rules in a similar way. | diff --git a/docs/auditor/10.8/admin/monitoringplans/sqlserver/scope.md b/docs/auditor/10.8/admin/monitoringplans/sqlserver/scope.md new file mode 100644 index 0000000000..5452b99009 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/sqlserver/scope.md @@ -0,0 +1,32 @@ +--- +title: "SQL Server Monitoring Scope" +description: "SQL Server Monitoring Scope" +sidebar_position: 20 +--- + +# SQL Server Monitoring Scope + +You can fine-tune Netwrix Auditor by specifying data that you want to exclude from the SQL Server +monitoring scope. + +Follow the steps to exclude data from the SQL Server monitoring scope. + +**Step 1 –** Navigate to the _%Netwrix Auditor install folder%\SQL Server Auditing_ folder. + +**Step 2 –** Edit the \*.txt files, based on the following guidelines: + +- Each entry must be a separate line. +- A wildcard (\*) is supported. You can use \* for cmdlets and their parameters. +- Lines that start with the # sign are treated as comments and are ignored. + +| File | Description | Syntax | +| ----------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| omitarlist.txt | Lists activity records to exclude from showing up in reports, search, and activity summaries. This omit list does not affect triggerless data collection mode, SELECT statements auditing and SQL logons monitoring. Use the _omitlogonlist.txt_ to exclude SQL logons from monitoring. Use the _omitreadaccess.txt_ to exclude SELECT statements from monitoring. | Specify the following fields of the activity records to exclude: `Monitoring plan name, `````` SQL Server instance,object type, `````` account,workstation,application name` Wildcard (\*) is supported and can replace any number of characters. For the account, workstation, application name fields, you can specify a mixed expression that contains both a value and a wildcard (e.g., Admin\*). For example: `SQLPlan,Ent-SQL,Table,guest,WksSQL,MyInternalApp` | +| omiterrorlist.txt | Contains a list of errors and warnings to be excluded from logging to the Netwrix Auditor System Health event log. | Monitoring plan name,item name,error text Wildcard (\*) is supported and can replace any number of characters. For example: \*,sqlserver1.corp.local, \*Access is denied\* | +| omitlogonlist.txt | Contains a list of logons to exclude from monitoring. | `monitoring plan name,SQL Server instance,logon type,account,workstation,application name` For the `account`, `workstation`, `application name` fields, you can specify a mixed expression that contains both a value and a wildcard (e.g., `Admin*`). The following logon types are supported: - `NtLogon `— Successful logon attempt made through Windows authentication. - `SqlLogon `— Successful logon attempt made through SQL Server authentication. - `NtFailedLogon `— Failed logon attempt made through Windows authentication. - `SqlFailedLogon `— Failed logon attempt made through SQL Server authentication. For example: `DB_M0,Ent-SQL,SQLFailedLogon,guest,WksSQL,MyInternalApp` | +| omitobjlist.txt | Contains a list of object to exclude from showing up in reports, search results and activity summaries. Audit data, however, will still be collected and saved to Long-Term Archive. This omit list does not affect SELECT statements auditing, data changes auditing and logon activity auditing. Use the _omitlogonlist.txt_ to exclude logon activity from monitoring. Use the _omitreadaccess.txt_ to exclude SELECT statements from monitoring. | `object_type_name` Available object types can be found in the "Object type" column in reports. For example: `Database` `Column` | +| omitpathlist.txt | Specify the resource paths to objects that you want to exclude from showing up in search, reports and activity summaries. Audit data, however, will still be collected and saved to Long-Term Archive. This omit list does not affect triggerless data collection mode, SELECT statements auditing and logon activity auditing. Use the _omitlogonlist.txt_ to exclude logon activity from monitoring. Use the _omitreadaccess.txt_ to exclude SELECT statements from monitoring. | `server_instance:resource_path` where: - `server_instance` — SQL Server instance, use \* for all servers - `resource_path` — resource path as shown in the "**What**" column of SQL Server report, or in search results Wildcard \* is supported and can replace any part of the path. For example, to exclude information about databases whose names start with "tmp" on the SQL Server instance "PROD.SQL2012": `PROD.SQL2012:Databases\tmp*`. | +| omitproplist.txt | Contains a list of attributes to be excluded from being monitored and stored to the Audit Archive. | `object_type_name.property_name.attribute_name` where: - `object_type_name`—Can be found in the found in the Object Type column in change reports. - `property_name`—Can be found in the Details column (property name is bold). - `attribute_name`—Can be found in the Details column (attribute name is not bold). If an object does not have an attribute name, use the \* character. For example to exclude information about the Size attribute of the Database File property in all databases: `Database.Database File.Size`. | +| omitstorelist.txt | Contains a list of SQL Server objects that you want to exclude from data collection and reporting. This list is only relevant to operations with SQL Server objects; it does not affect triggerless data collection mode, SELECT statements auditing and logon activity auditing. To configure exclusions for logon activity auditing (Windows or SQL logons), use the _omitlogonlist.txt_. Use the _omitreadaccess.txt_ to exclude SELECT statements from monitoring. | `server_instance:resource_path` where: - `server_instance` — SQL Server instance. For all instances, use wildcard (\*). - ` resource_path` — path as shown in the "**What**" column of SQL Server report, or in search results. Wildcard (\*) can be used to replace any number of characters. For example, to exclude information about server roles on the SQL Server instances whose names start with _njsqlsrv23_, enter: `njsqlsrv23*:Security\Server Roles\*` | +| omittracelist.txt | If you do not want the product to enable SQL tracing on some of your SQL Server instances, specify their names in this omitlist. In this case the "Who", "Workstation" and "When" values will not be reported correctly (except for content changes). This omit list does not affect triggerless data collection mode, SELECT statements auditing and logon activity auditing. Use the _omitlogonlist.txt_ to exclude logon activity from monitoring. Use the _omitreadaccess.txt_ to exclude SELECT statements from monitoring. | Enter the name of SQL Server instance, use \* for all servers: `server\instance name` Wildcard (\*) is supported and can replace any number of characters, e.g., MYSERVER_SQL\* Examples: \* \*\SQLExpress MYSERVER\\\* | +| propnames.txt | Contains a list of human-readable names for object types and properties to be displayed in the change reports. | `object_type_name.property_name=friendlyname` For example: `*.Date modified=Modification Time` | diff --git a/docs/auditor/10.8/admin/monitoringplans/vmware/_category_.json b/docs/auditor/10.8/admin/monitoringplans/vmware/_category_.json new file mode 100644 index 0000000000..0bace7e13d --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/vmware/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "VMware", + "position": 190, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/monitoringplans/vmware/overview.md b/docs/auditor/10.8/admin/monitoringplans/vmware/overview.md new file mode 100644 index 0000000000..8060d4ec32 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/vmware/overview.md @@ -0,0 +1,97 @@ +--- +title: "VMware" +description: "VMware" +sidebar_position: 190 +--- + +# VMware + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data + collection and activity monitoring configure necessary protocols and ports for inbound and + outbound connections +- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +- [VMware](/docs/auditor/10.7/configuration/vmware/overview.md) – Configure data source as required to be + monitored + +For this data source, specify the options you need: + +| Option | Description | +| ----------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | +| Monitor VMware configuration changes | Configuration changes are always monitored for VMware data source. See the Data Collection from VMware Servers topic  for additional information. | +| Monitor VMware logon activity | Specify what types of logon events you want to monitor for VMware infrastructure. | +| Monitor SSO users/groups on vCenter and Local users on ESXi sever | Select Enable monitoring if you want to audit the following users and groups: - vCenter Single Sign-On (SSO) Users. The product collects data from vCenter. - Localos users. For these users, the product collects data from ESXi and vCenter. - VMware groups. The product collects data from vCenter. To audit users and groups, vCenter 6.5 and above required. Check that your data collecting account has all required rights and permissions. See the [Permissions for VMware Server Auditing ](/docs/auditor/10.7/configuration/vmware/permissions.md) topic for additional information. | +| Collect data for state-in-time reports | Configure Auditor to store daily snapshots of your VMware system configuration required for further state-in-time reports generation. The product updates the latest snapshot on the regular basis to keep users up-to-date on actual system state. Only the latest snapshot is available for reporting in Auditor. If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. To import snapshots, you must be assigned the Global administrator or the Global reviewer role . Follow the steps to import snapshots. **Step 1 –** In the Manage historical snapshots section, click Manage. **Step 2 –** Select the snapshots that you want to import. **Step 3 –** Move the selected snapshots to the Snapshots available for reporting list using the arrow button. **Step 4 –** When finished, click OK. | + +Review your data source settings and click **Add** to go back to your plan. The newly created data +source will appear in the **Data source** list. As a next step, click **Add item** to specify an +object for monitoring. See the +[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +information. + +## Data Collection from VMware Servers + +On a high level, data collection process for VMware servers works as follows: + +![hiw_diagram_vma_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/vmware/hiw_diagram_vma_thumb_0_0.webp) + +VMware administrator prepares a dedicated service account with sufficient permissions to collect +data from VMware servers. This account must have at least **Read Only role** on those servers. For +more information on VMware vSphere roles and permissions assignment, refer to +[this VMware article](https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.security.doc/GUID-18071E9A-EED1-4968-8D51-E0B4F526FDA3.html). + +Netwrix administrator does the following: + +- Creates a monitoring plan in Netwrix Auditor, specifying the service account (prepared at step 1) + as a data collecting account in the **Monitoring Plan wizard**. Then s/he adds items to the + monitoring plan – these are VMware servers to collect data from. +- Configures alerts related to VMware data source. Current version does not include predefined + alerts for that data source, so follow the [Create Alerts](/docs/auditor/10.7/admin/alertsettings/create/create.md) to + create and configure the necessary alerts. + + - Remember to set the filter to “**Data Source\_**equals**\_VMware**”. + +- **Netwrix Auditor Data Collection Service**starts periodic (every 15 min) data collection + sessions. The results of each session include: + + - VMware infrastructure snapshot collected from the monitored items, i.e. VMware vCenter or + ESX(i) host + - VMware events that occurred since the previous data collection. Data is retrieved via **VMware + web services API** using HTTPS protocol. + +- **Netwrix Auditor Data Collection Service** processes collected data into the proprietary format + (Activity Records). Each Activity Record contains initiator’s account, time, action, and other + details. + + - To determine what has changed in the configuration, it compares a state snapshot from VMware + server with the previously taken. + - To get ‘_Who_’ (initiator) and ‘_When_’ (date and time) information for the detected changes, + the product uses VMware events data. + +- Netwrix Auditor Server then writes the Activity Records to the audit database (default retention – + 180 days) and long-term archive (default retention – 120 months). +- Users can work with collected data in Netwrix Auditor client UI: run search, view reports, and so + on. If you have configured alerting in Netwrix Auditor, then the activities that match the certain + criteria will trigger the alerts. Recipients will be notified by email, and response actions will + be taken, if configured. + +Netwrix Auditor also generates an Activity Summary once a day (by default, at 3 AM) and sends it to +the specified recipients. This email lists VMware infrastructure changes and activities collected by +Netwrix Auditor during the last 24 hours. + +## VMware ESX/ESXi/vCenter + +Complete the following fields: + +| Option | Description | +| --------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| **General** | | +| Specify VMware ESX, ESXi, or vCenter for monitoring | Specify the ESX or ESXi host URL, or vCenter Server URL. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See [Permissions for VMware Server Auditing ](/docs/auditor/10.7/configuration/vmware/permissions.md)topic for more information. | +| **Virtual Machines** | | +| Specify monitoring restrictions | Select the virtual machines to be excluded from search results, reports and Activity Summaries. To add VMs to the list, click Add. Then provide the full path of the machine to exclude. Consider the following: - To exclude a single VM, provide its full path as shown in the "_What_" column of reports and Activity Summary, for example: _Vcenters\VCenterServer021\VMs\vm01_. - To exclude several VMs, you can define a mask using a wildcard, for example: - _\*\TestVM\*_ — exclude VMs with names starting with _TestVM_ (e.g., _TestVM01, TestVM_new_), located anywhere. - _\*TestVM\*_ — exclude VMs with names containing _TestVM_ (e.g., _MyTestVM02_). In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | diff --git a/docs/auditor/10.8/admin/monitoringplans/vmware/scope.md b/docs/auditor/10.8/admin/monitoringplans/vmware/scope.md new file mode 100644 index 0000000000..8b0de504fd --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/vmware/scope.md @@ -0,0 +1,27 @@ +--- +title: "VMware Monitoring Scope" +description: "VMware Monitoring Scope" +sidebar_position: 10 +--- + +# VMware Monitoring Scope + +You can fine-tune Netwrix Auditor by specifying various data types that you want to exclude/include +from/in the VMware reports. + +Follow the steps to exclude data from the VMware monitoring scope: + +**Step 1 –** Navigate to the _%Netwrix Auditor installation folder%\Vmware Auditing_ folder. + +**Step 2 –** Edit the \*.txt files, based on the following guidelines: + +- Each entry must be a separate line. +- A wildcard (\*) is supported. You can use \* for cmdlets and their parameters. +- Lines that start with the # sign are treated as comments and are ignored. + +| File | Description | Syntax | +| ------------------ | ----------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| omitproplist.txt | Contains a list of object types and properties to be excluded from change reports. | `object_type.property_name` If there is no separator (.) between an object type and aproperty, the whole entry is treated as an object type. For example, to exclude the config.flags.monitorType property from reports, add the following line: `*.config.flags.monitorType`. | +| hidepropvalues.txt | Contains a list of object types and properties to be excluded from the reports when the property is set to certain value. | `object_type.property_name=property_value:object_type.hidden_property` For example, to exclude the config.cpuAllocation.shares.level property when it equals to _"Low"_, add the following line: `*.config.cpuAllocation.shares .level=low:` `*.config.cpuAllocation.shares.shares`. | +| proplist.txt | Contains a list of human-readable names for object types and properties to be displayed in the reports. | `inner_type:object_type.property=intelligiblename` `Inner_type` is optional. For example, if you want the configStatus property to be displayed in the reports as Configuration Status, add the following line: `*.configStatus=Configuration Status.` | +| omitstorelist.txt | Contains a list of objects to be excluded from being saved to data storage and showing up in reports. Audit data will still be collected. | Monitoring plan name, who, where, object type, what, property name, property value For example, to exclude internal logons: `*,*,*,Logon,*,UserAgent,VMware vim-java*` The following characters must be preceded with a backslash (\) if they are a part of an entry value: `*` `,` `\` `?` Characters may be also specified with hex value using _\xnnnn_ template. The spaces are trimmed. If they are required, use hex notation. For example: `Word\x0020 where \x0020 `(with space at the end) means blank character. | diff --git a/docs/auditor/10.8/admin/monitoringplans/windows/_category_.json b/docs/auditor/10.8/admin/monitoringplans/windows/_category_.json new file mode 100644 index 0000000000..61700f9d8f --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/windows/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Windows Server", + "position": 200, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/monitoringplans/windows/overview.md b/docs/auditor/10.8/admin/monitoringplans/windows/overview.md new file mode 100644 index 0000000000..bf39755a0c --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/windows/overview.md @@ -0,0 +1,119 @@ +--- +title: "Windows Server" +description: "Windows Server" +sidebar_position: 200 +--- + +# Windows Server + +**NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in +the following topics: + +- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data + collection and activity monitoring configure necessary protocols and ports for inbound and + outbound connections +- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to + audit your IT systems + +- [Windows Server](/docs/auditor/10.7/configuration/windowsserver/overview.md) – Configure data source as + required to be monitored + +Complete the following fields: + +| Option | Description | +| -------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General | | +| Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | +| Monitor changes to system components | Select the system components that you want to audit for changes. Review the following for additional information: - General computer settings—Enables auditing of general computer settings. For example, computer name or workgroup changes. - Hardware—Enables auditing of hardware devices configuration. For example, your network adapter configuration changes. - Add/Remove programs—Enables auditing of installed and removed programs. For example, Microsoft Office package has been removed from the audited Windows Server. - Services—Enables auditing of started/stopped services. For example, the Windows Firewall service stopped. - Audit policies—Enables auditing of local advanced audit policies configuration. For example, the Audit User Account Management advanced audit policy is set to "_Failure_". - DHCP configuration—Enables auditing of DHCP configuration changes. - Scheduled tasks—Enables auditing of enabled / disabled / modified scheduled tasks. For example, the GoogleUpdateTaskMachineUA scheduled task trigger changes. - Local users and groups—Enables auditing of local users and groups. For example, an unknown user was added to the Administrators group. - DNS configuration—Enables auditing of your DNS configuration changes. For example, your DNS security parameters' changes. - DNS resource records—Enables auditing of all types of DNS resource records. For example, A-type resource records (Address record) changes. - File shares—Enables auditing of created / removed / modified file shares and their properties. For example, a new file share was created on the audited Windows Server. - Removable media—Enables auditing of USB thumb drives insertion. | +| Specify data collection method | You can enable **network traffic compression.** If enabled, a Compression Service will be automatically launched on the audited computer, collecting and prefiltering data. This significantly improves data transfer and minimizes the impact on the target computer performance. | +| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [Windows Server](/docs/auditor/10.7/configuration/windowsserver/overview.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. | +| Collect data for state-in-time reports | Configure Auditor to store daily snapshots of your system configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) topic for additional information. When auditing file servers, changes to effective access permissions can be tracked in addition to audit permissions. By default, Combination of file and share permissions is tracked. File permissions define who has access to local files and folders. Share permissions provide or deny access to the same resources over the network. The combination of both determines the final access permissions for a shared folder—the more restrictive permissions are applied. Upon selecting Combination of file and share permissions only the resultant set will be written to the Audit Database. Select File permissions option too if you want to see difference between permissions applied locally and the effective file and share permissions set. To disable auditing of effective access, unselect all checkboxes under Include details on effective permissions. In the Schedule state-in-time data collection section, you can select a custom weekly interval for snapshots collection. Click Modify and select day(s) of week you want your snapshot to be collected. In the Manage historical snapshots section, you can click **Manage** and select the snapshots that you want to import to the Audit Database to generate a report on the data source's state at the specific moment in the past. You must be assigned the Global administrator or the Global reviewer role to import snapshots. Move the selected snapshots to the Snapshots available for reporting list using the arrow button. The product updates the latest snapshot on the regular basis to keep users up to date on actual system state. Users can also configure Only the latest snapshot is available for reporting in Auditor. If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. | +| Activity | | +| Specify monitoring restrictions | Specify restriction filters to narrow your Windows Server monitoring scope (search results, reports and Activity Summaries). For example, you can exclude system activity on a particular objects on all computers. All filters are applied using AND logic. Click Add and complete the following fields: - User who initiated the change: – provide the name of the user whose changes you want to ignore as shown in the "_Who_" column of reports and Activity Summaries. Example: _mydomain\user1_. You can provide the "_System_" value to exclude events containing the “_System_” instead of an account name in the “_Who_” column. - Windows Server which setting was changed: – provide the name of the server in your IT infrastructure whose changes you want to ignore as shown in the "_What_" column of reports and Activity Summaries. Example: _winsrv2016-01.mydomain.local_. - Setting changed: – provide the name for unwanted settings as shown in the "_What_" column in reports and Activity Summaries. Example: _System Properties\*_. You can use a wildcard (\*) to replace any number of characters in filters. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | + +Review your data source settings and click **Add** to go back to your plan. The newly created data +source will appear in the **Data source** list. As a next step, click **Add item** to specify an +object for monitoring. See the +[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +information. + +## Computer + +Select the account that will be used to collect data for this item. If you want to use a specific +account (other than the one you specified during monitoring plan creation), select account type you +want to use and enter credentials. The following choices are available: + +- User/password. The account must be granted the same permissions and access rights as the default + account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for + additional information. +- Group Managed Service Account (gMSA). You should specify only the account name in the + domain\account$ format. See the + [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic for additional + information. +- Netwrix Privilege Secure. Starting with version 10.7, you can implement the integration between + Netwrix Auditor and Netwrix Privilege Secure. See the + [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. + +## IP Range + +Complete the following fields: + +| Option | Description | +| --------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General | | +| Specify IP range | Specify an IP range for the audited computers. To exclude computers from within the specified range, click **Exclude**. Enter the IP subrange you want to exclude, and click **Add**. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | + +## AD Container + +Complete the following fields: + +| Option | Description | +| --------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General | | +| Specify AD container | Specify a whole AD domain, OU or container. Click **Browse** to select from the list of containers in your network. You can also: - Select a particular computer type to be audited within the chosen AD container: **Domain controllers, Servers (excluding domain controllers)**, or **Workstations**. - Click **Exclude** to specify AD domains, OUs, and containers you do not want to audit. In the Exclude Containers dialog, click Add and specify an object. The list of containers does not include child domains of trusted domains. Use other options **(Computer, IP range** to specify the target computers. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. If using a group Managed Service Account (gMSA), you can specify only the account name in the _domain\account$_ format. Password field can be empty. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. Refer to the [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) topic for more information on using Netwrix Privilege Secure as an account for data collection. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the[Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Containers and Computers | | +| Monitor hidden shares | By default, Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). Select **Monitor user-defined hidden shares** if necessary. Even when this option is selected, the product will not collect data from administrative hidden shares such as: default system root or Windows directory (ADMIN$), default drive shares (D$, E$, etc.), shares used by printers to enable remote administration (PRINT$), etc. | +| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. Depending on the type of the object you want to exclude, select one of the following: - Add AD Container – Browse for a container to be excluded from being audited. You can select a whole AD domain, OU or container. - Add Computer – Provide the name of the computer you want to exclude as shown in the "_Where_" column of reports and Activity Summaries. For example, _backupsrv01.mydomain.local_. Wildcards (\*) are not supported. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | + +## Use Netwrix Privilege Secure as a Data Collecting Account + +Starting with version 10.7, you can use Netwrix Privilege Secure to manage the account for +collecting data, after configuring the integration. See the +[Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information about +integration and supported data sources. In this case, the credentials will not be stored by Netwrix +Auditor. Instead, they will be managed by Netwrix Privilege Secure and provided on demand, ensuring +password rotation or using temporary accounts for data collection. + +Follow the steps to use Netwrix Privilege Secure as an account for data collection. + +**Step 1 –** Select the desired item. + +**Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data +collection. + +![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) + +**Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. +Credential-based is the default option. Refer to the +[Netwrix Privilege Secure](https://helpcenter.netwrix.com/category/privilegesecure_accessmanagement) +documentation to learn more about Access Policies. + +In this case, you need to provide the username of the account managed by Netwrix Privilege Secure, +and to which Netwrix Auditor has the access through a Credential-based access policy. + +**NOTE:** Netwrix recommends using different credentials for different monitoring plans and data +sources. + +![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) + +The second option is Resource-based. To use this option, you need to provide the Activity and +Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure +that you specified the same names as in Netwrix Privilege Secure. + +The Resource name in this case is where the activity will be performed. For example, if you grant +the data collecting account the access to a local Administrators group - the resource is the server +where the permission will be granted. + +Netwrix Privilege Secure is ready to use as an account for data collection. diff --git a/docs/auditor/10.8/admin/monitoringplans/windows/scope.md b/docs/auditor/10.8/admin/monitoringplans/windows/scope.md new file mode 100644 index 0000000000..c74c2a2d14 --- /dev/null +++ b/docs/auditor/10.8/admin/monitoringplans/windows/scope.md @@ -0,0 +1,29 @@ +--- +title: "Windows Server Monitoring Scope" +description: "Windows Server Monitoring Scope" +sidebar_position: 10 +--- + +# Windows Server Monitoring Scope + +You can fine-tune Netwrix Auditor by specifying data that you want to exclude from the Windows +Server monitoring scope. + +Follow the steps to exclude data from the Windows Server monitoring scope: + +**Step 1 –** Navigate to the _%Netwrix Auditor installation folder%\Windows Server Auditing_ folder. + +**Step 2 –** Edit the \*.txt files, based on the following guidelines: + +- Each entry must be a separate line. +- Wildcards (\* and ?) are supported. A backslash (\) must be put in front of (\*), (?), (,), and + (\) if they are a part of an entry value. +- Lines that start with the # sign are treated as comments and are ignored. + +| File | Description | Syntax | +| ---------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| omitcollectlist.txt | Contains a list of objects and their properties to be excluded from being monitored. If you want to restart monitoring these objects, remove them from the omitcollectlist.txt and run data collection at least twice. | `monitoring plan name,server name,class name,property name,property value` `class name` is a mandatory parameter, it cannot be replaced with a wildcard. `property name` and `property value` are optional, but cannot be replaced with wildcards either. For example: `#*,server,MicrosoftDNS_Server `````` #*,*,StdServerRegProv` | +| omiterrors.txt | Contains a list of errors/warnings to be omitted from logging to the Netwrix Auditor System Health event log. | `monitoring plan name,server name,error text` For example: `*,productionserver1.corp.local,*Access is denied*` | +| omitreportlist.txt | Contains a list of objects to be excluded from reports and Activity Summary emails. In this case audit data is still being collected. | `monitoring plan name,who,where,object type,what,property name` For example: `*,CORP\\jsmith,*,*,*,*` | +| omitsitcollectlist.txt | Contains a list of objects to be excluded from State-in-time reports. | `monitoring planname,server name,class name,property name,property value` `class name` is a mandatory parameter, it cannot be replaced with a wildcard. `property name` and `property value` are optional, but cannot be replaced with wildcards either. For example: `*,server,MicrosoftDNS_Server` `*,*,StdServerRegProv` | +| omitstorelist.txt | Contains a list of objects to be excluded from being stored to the Audit Archive and showing up in reports. In this case audit data is still being collected. | `monitoring plan name,who,where,object type,what,property name` For example: `*,*,*,Scheduled task,Scheduled Tasks\\User_Feed_Synchronization*,*` | diff --git a/docs/auditor/10.8/admin/navigation/_category_.json b/docs/auditor/10.8/admin/navigation/_category_.json new file mode 100644 index 0000000000..4ee7155632 --- /dev/null +++ b/docs/auditor/10.8/admin/navigation/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Navigation", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/navigation/customizeexamples.md b/docs/auditor/10.8/admin/navigation/customizeexamples.md new file mode 100644 index 0000000000..d8275c667d --- /dev/null +++ b/docs/auditor/10.8/admin/navigation/customizeexamples.md @@ -0,0 +1,79 @@ +--- +title: "Customization Examples" +description: "Customization Examples" +sidebar_position: 40 +--- + +# Customization Examples + +Here are several examples of why and how you might customize the Netwrix Auditor main page. + +## View Report and Add to Favorites + +Follow the steps to view a report and add it to the list of Favorites. + +**Step 1 –** On the main Auditor page, click the Reports tile in the upper left corner. + +**Step 2 –** Open a report you are interested in; for example, Account Permissions in Active +Directory: + +![scenario_reports_1](/images/auditor/10.7/admin/navigation/scenario_reports_1.webp) + +**Step 3 –** Click the report menu (three dots) to the right and select Add to favorites. +(Alternatively, click the star icon in the upper right corner of the report description.) + +The report is added to the Favorite reports section on the home page and you can run it instantly. + +![scenario_reports_2](/images/auditor/10.7/admin/navigation/scenario_reports_2.webp) + +## Run Search and Create Alert + +Follow the steps to run search and create the alert based on the search filters. + +**Step 1 –** On the main Auditor page, click the Search Activity Records tile. + +**Step 2 –** Specify search filters to narrow your search results. See the +[Use Filters in Simple Mode](/docs/auditor/10.7/admin/search/filtersimple.md) topic for additional information. + +**Step 3 –** Click Search. + +**Step 4 –** Review your search results. + +**Step 5 –** Navigate to Tools and click Create alert to get instant email or SMS notifications on +suspicious activity that matches your current search criteria. + +**Step 6 –** Specify a name for the new alert. See the +[Create Alerts](/docs/auditor/10.7/admin/alertsettings/create/create.md)topic for additional information. + +Now, whenever there is activity that matches your search criteria, the appropriate people will +receive a notification. You can also review the list of triggered alerts by clicking the Alerts tile +on the home page, which opens the Alerts overview dashboard. + +## Review and Pin Risks + +Follow the steps to review risks and pin important ones to the Home Screen. + +**Step 1 –** On the main Auditor page, click the Risk Assessment tile. + +**Step 2 –** Review the Risk Assessment Overview dashbord and select the risk you are interested in, +such as "_User Accounts with administrative permissions_". See the +[IT Risk Assessment Overview ](/docs/auditor/10.7/admin/riskassessment/overview.md) topic for additional information. + +**Step 3 –** To access this risk quickly, pin it to the home page, as follows: + +1. On the main product page, click Customize. +2. Click Add tile. +3. Search the group of risks you want to pin to the home page (in this case, the "_Permissions_" + risks group): + + ![scenario_risks_thumb_0_0](/images/auditor/10.7/admin/navigation/scenario_risks_thumb_0_0.webp) + +**Step 4 –** Click Add. + +The selected risks group is added to the home screen. + +## What is Next? + +Personalize the home page of the product depending on your business needs. Review the customization +settings and collect only required tiles for quick access on the Auditor home page. See the +[Customize Home Screen](/docs/auditor/10.7/admin/navigation/customizehome.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/navigation/customizefavorite.md b/docs/auditor/10.8/admin/navigation/customizefavorite.md new file mode 100644 index 0000000000..af3d7d0d25 --- /dev/null +++ b/docs/auditor/10.8/admin/navigation/customizefavorite.md @@ -0,0 +1,46 @@ +--- +title: "Customizing Favorite Reports" +description: "Customizing Favorite Reports" +sidebar_position: 30 +--- + +# Customizing Favorite Reports + +The Favorite reports tile displays a shortened list of your favorite reports. To view, edit or +update the full list, click View all. + +The Home > Reports page opens. This page includes several folders: Favorites, Predefined, Compliance +and Custom. Favorite reports are located in the Favorites folder. + +![reportsfavorites](/images/auditor/10.7/admin/navigation/reportsfavorites.webp) + +Follow the steps to add or remove a Favorite report + +**Step 1 –** Locate the desired report in one of the other folders. + +**Step 2 –** Click the name of the report to view its description. + +**Step 3 –** To change whether the report is a favorite, click the star icon in the upper right-hand +corner of the report description. + +![reportsummary](/images/auditor/10.7/admin/navigation/reportsummary.webp) + +Report Summary with Star icon unchecked + +## Other Actions for Favorite Reports + +The options on the Reports page for Favorite reports are show below: + +| | | +| -------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| ![favoritesrestorerefresh](/images/auditor/10.7/admin/navigation/favoritesrestorerefresh.webp) | ![reportsoptions](/images/auditor/10.7/admin/navigation/reportsoptions.webp) | +| _Favorites Sub-Folder Options_ | _Favorites > [Report] Options_ | +| Option Name | Description | +| --- | --- | +| Restore Default | Repopulates the Favorites sub-folder with all reports that have been marked Favorite. When using Role-Based Access in Netwrix Auditor, if several users mark the same report as **Favorite**, then that report will be removed from the Favorites list if a user removes the report from the Favorites list. Using the **Restore Default** option will re-add the report to the Favorites list for all users that have not removed the Favorite mark. | +| Refresh | Runs the reports in the Favorites folder to display the most recent information. | +| View | Opens the Preview Report page. There, you can modify report options (such as the timeframe) if desired, and then click View Report to see the resulting report. See the [View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information. | +| Subscribe | Opens the Add Subscription to Report page. See the [Create Subscriptions](/docs/auditor/10.7/admin/subscriptions/create.md) topic for additional information. | +| Add to Favorites | This option is greyed out when viewing the Favorites list, since all the reports shown have already been added to Favorites. | +| Remove from Favorites | Removes a report from the Favorites list. This option provides the same function as removing a report as a favorite using the **Star** icon. | +| Go to Original | Expands the sub-folder in which the report is originally located. For example, clicking **Go to Original** for the Enterprise Overview report will expand the **Predefined > Organization Level Reports** sub-folder. | diff --git a/docs/auditor/10.8/admin/navigation/customizehome.md b/docs/auditor/10.8/admin/navigation/customizehome.md new file mode 100644 index 0000000000..b2a3c2f8e5 --- /dev/null +++ b/docs/auditor/10.8/admin/navigation/customizehome.md @@ -0,0 +1,76 @@ +--- +title: "Customize Home Screen" +description: "Customize Home Screen" +sidebar_position: 20 +--- + +# Customize Home Screen + +Starting with version 10, you can personalize theHome Screen of Netwrix Auditor to display the tiles +that best meet your needs. Be sure to plan your screen space, considering which tiles you want to +pin and their dimensions. You can modify the size of any tile; horizontal scrolling is also +supported. Rest assured that your configurations and data will not be affected by any changes you +make to the home screen. + +## Add a Tile to the Home Screen + +Follow the steps to add tile on the Home Screen. + +**Step 1 –** Click Customize in the upper right corner of the home screen. + +**Step 2 –** Select Add tile. + +Either search for the tile you want by name, or select it from the list of tiles. Note that tiles +are grouped into menus; to view all tiles within a menu, check Show all menu tiles. + +**Step 3 –** Click Add and the selected tile appears on the home screen. + +**Step 4 –** Drag and drop it to the desired location. + +**Step 5 –** Click Apply. + +## Remove a Tile from the Home Screen + +Follow the steps to remove a tile from the Home Screen. + +**Step 1 –** Click Customize in the upper right corner of the home screen. + +**Step 2 –** Select the tile you want to remove. + +**Step 3 –** Click **close (x)**: + +![remove_tile](/images/auditor/10.7/admin/navigation/remove_tile.webp) + +**Step 4 –** Click Apply. + +## Resize a Tile on the Home Screen + +You can change the size of the tile to plan your screen placement and view detailed information on +what you are interested in. There are several types of size: small, medium, wide, large, extra +large, extra tall. However, not every tile supports all types of sizes. Tiles with graphic +information have medium, large and extra large sizes. These sizes provide more screen space, +resulting in a better visual representation of data. Additionally, tiles with less information have +small and wide sizes. They are designed to open separate windows, providing easy access to features +such as search, reports, and live news updates. + +Follow the steps to resizea tile. + +**Step 1 –** Click Customize in the upper right corner of the home screen. + +**Step 2 –** Select the tile you want to resize. + +**Step 3 –** Click the **resize** button: + +![homescreenresizetile](/images/auditor/10.7/admin/navigation/homescreenresizetile.webp) + +**Step 4 –** Select the preferred size from the drop-down list. + +## Restore the Default View + +Follow the steps to restore the default Home Screen view. + +**Step 1 –** Click Customize in the upper right corner of the Home Screen. + +**Step 2 –** Click Restore default. + +Your configuration and data will be preserved during this operation. diff --git a/docs/auditor/10.8/admin/navigation/overview.md b/docs/auditor/10.8/admin/navigation/overview.md new file mode 100644 index 0000000000..acffd74684 --- /dev/null +++ b/docs/auditor/10.8/admin/navigation/overview.md @@ -0,0 +1,99 @@ +--- +title: "Navigation" +description: "Navigation" +sidebar_position: 10 +--- + +# Navigation + +Starting with version 10, the home screen in Netwrix Auditor is customizable so you can instantly +get access to the information that is most relevant to you. This section covers the tiles are +available and how you can use them to create the home screen that works best for you. It also +illustrates the customization process with several common scenarios. + +## Home Screen Tiles + +Home Screen Tiles in the Netwrix Auditor provide an interface that allows users to access main +information. The following tiles are displayed on the initially configured Home Screen: + +- Welcome to Netwrix Auditor Tile +- Audit Intelligence Tiles +- Configuration Tile + +### Welcome to Netwrix Auditor Tile + +The Welcome to Netwrix Auditor Tile tile provides a checklist you can use to get started collecting +and viewing data about your IT ecosystem. + +![welcome_section](/images/auditor/10.7/admin/navigation/welcome_section.webp) + +- The "Create a monitoring plan" link prompts you to create a monitoring plan for at least one data + source (such as Active Directory, Exchange Online or network devices). For detailed instructions + on how to create a monitoring plan, see the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md) + topic for additional information. Wait until the initial data collection completes. + +- Clicking the second link opens a dashboard that lists all the monitoring plans you’ve created, + along with the status and last activity time for each. Review this list and address any errors or + warnings. See the [Monitoring Overview](/docs/auditor/10.7/admin/healthstatus/dashboard/monitoringoverview.md) topic for + additional information. + +- Once have created a monitoring plan and verified that it is properly configured, run one or more + searches to get insights into your IT infrastructure. See the + [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) topic for additional information. + +When you have completed these three steps, you can close this tile by clicking the "Close" link at +the bottom. The checklist will be replaced by statistics across your audited systems. See the +[Customize Home Screen](/docs/auditor/10.7/admin/navigation/customizehome.md) topic for additional information. + +### Audit Intelligence Tiles + +This section contains four tiles for getting security intelligence about your IT infrastructure: + +![section_left](/images/auditor/10.7/admin/navigation/section_left.webp) + +| Tile | Description | +| ----------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| NEW MONITORING PLAN | Create a new monitoring plan for a particular data source. See the [Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional information. | +| SEARCH ACTIVITY RECORDS | Investigate incidents by running interactive searches using data collected across the entire IT infrastructure. See the [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) topic for additional information. | +| REPORTS | Access the predefined reports for each data source and create custom reports. See the [Reports](/docs/auditor/10.7/admin/reports/overview.md) topic for additional information. | +| BEHAVIOR ANOMALIES | Detect and investigate unusual behavior in your IT environment. See the [Behavior Anomalies](/docs/auditor/10.7/admin/behavioranomalies/overview.md) topic for additional information. | + +### Configuration Tile + +This tile helps you set up and fine-tune auditing of your IT infrastructure. It includes the +following links: + +| Option | Description | +| ---------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Monitoring plans | Opens the Monitoring plans wizard, where you can add, edit and delete monitoring plans, as well as group them into folders. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md) topic for additional information. | +| Subscriptions | Opens the Subscriptions wizard, which enables you to subscribe to Auditor reports and searches, so you can easily stay informed about what is going on in your infrastructure. See the [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) topic for additional information. | +| Alert settings | Opens the All Alerts wizard, where you can create, edit, and enable or disable alerts on critical events in your environment. See the [Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md)topic for additional information. | + +## Risk Assessment, Compliance Mapping, Live News, and Health Tiles + +| Tile | Description | +| ------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| RISK ASSESSMENT | Opens the Risk Assessment Overview dashboard, which identifies possible configuration issues in your environment that could impact security. See the [IT Risk Assessment Overview ](/docs/auditor/10.7/admin/riskassessment/overview.md) topic for additional information. | +| COMPLIANCE MAPPING | Enables you to review how Auditor can help you comply common standards and regulations. See the [Compliance Mappings](/docs/auditor/10.7/admin/compliancemappings.md) topic for additional information. | +| LIVE NEWS | Shows the latest Netwrix news, including product updates. | +| HEALTH STATUS | Opens the Health Status dashboard, which provides at-a-glance insight into product health, data collection, storage and more. See the [Health Status Dashboard](/docs/auditor/10.7/admin/healthstatus/dashboard/overview.md) topic for additional information. | +| ALERTS HISTORY | Clicking this tile opens the Alerts History dashboard, which provides detailed information about the latest alerts triggered in your IT infrastructure, enriched with actionable charts and timelines. See the [Alerts Overview Dashboard](/docs/auditor/10.7/admin/alertsettings/dashboard.md) topic for additional information. | + +## Favorite Reports + +Initially, the Favorite Reports tile lists the reports that our customers use most frequently. You +can add and remove reports to reflect your needs and interests. If you have more favorite reports +than can fit in the tile, simply click **View all** to see the complete list. See the +[Customizing Favorite Reports](/docs/auditor/10.7/admin/navigation/customizefavorite.md) topic for additional information. + +## Other + +| | | +| -------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| ![alerts_triggered](/images/auditor/10.7/admin/navigation/alerts_triggered.webp) | Opens the Alerts Overview dashboard, which lists the latest alerts triggered in your IT infrastructure, enriched with actionable charts and timelines. See the [Alerts Overview Dashboard](/docs/auditor/10.7/admin/alertsettings/dashboard.md) topic for additional information. | +| ![environment_stats](/images/auditor/10.7/admin/navigation/environment_stats.webp) | This tile shows the current number of users, groups, and files and folders in your IT infrastructure in one place. Clicking the link opens the corresponding report: - Users — User Accounts state-in-time report for Active Directory - Groups — Groups state-in-time report for Active Directory - Files and Folders — Folder Tree View state-in-time report for File Servers Click Recalculate to update values. | +| ![monitroing_plans_overview](/images/auditor/10.7/admin/navigation/monitroing_plans_overview.webp) | Clicking the tile opens the Monitoring Overview dashboard, which shows the current status of each of your monitoring plans. See the [Monitoring Overview](/docs/auditor/10.7/admin/healthstatus/dashboard/monitoringoverview.md) topic for additional information. | +| ![activity_records](/images/auditor/10.7/admin/navigation/activity_records.webp) | Clicking the tile opens the Activity Record Statistics dashboard which shows the number of activity records that were collected from your data sources during the last 7 days. See the [Activity Records Statistics](/docs/auditor/10.7/admin/healthstatus/dashboard/activityrecordstatistics.md) topic for additional information. | +| ![hs_screen_default_report_1](/images/auditor/10.7/admin/navigation/hs_screen_default_report_1.webp) | Opens the listed Auditor report. See the [Custom Search-Based Reports](/docs/auditor/10.7/admin/reports/custom.md) topic for additional information. | +| ![hs_screen_default_report_2](/images/auditor/10.7/admin/navigation/hs_screen_default_report_2.webp) | Opens the listed Auditor report. See the [Predefined Reports](/docs/auditor/10.7/admin/reports/types/overview.md) topic for additional information. | +| ![recommendations_tile](/images/auditor/10.7/admin/navigation/recommendations_tile.webp) | Opens the list of the configuration recommendations provided by Netwrix industry experts to take advantage of the Auditor functionality. See the [Recommendations](/docs/auditor/10.7/admin/navigation/recommendations.md) topic for additional information. | diff --git a/docs/auditor/10.8/admin/navigation/recommendations.md b/docs/auditor/10.8/admin/navigation/recommendations.md new file mode 100644 index 0000000000..80eb114e8d --- /dev/null +++ b/docs/auditor/10.8/admin/navigation/recommendations.md @@ -0,0 +1,123 @@ +--- +title: "Recommendations" +description: "Recommendations" +sidebar_position: 10 +--- + +# Recommendations + +This section covers the Recommendations interface that contains detailed guidance on the Auditor +usage patterns. Once you installed the product, configured your IT infrastructure, and prepared +Netwrix Service Accounts, you can start collecting data and review it with Netwrix Auditor. The +recommendations are based on your current product configuration and help you to experience the +Auditor capabilities in earnest. + +![recommendations](/images/auditor/10.7/admin/navigation/recommendations.webp) + +Follow the steps to review the recommendations provided by Netwrix industry experts. + +**Step 1 –** On the Auditor home page, click the **Recommendations** tile. + +**Step 2 –** Review the recommendations applicable to your current Auditor configuration and take +required steps. + +Once the required steps are done, the recommendation goes to the '**Complete**' list. You can move +it back to the active state any time you want by clicking the **Move to active** link. + +## Available Recommendations + +Review the list of the recommendations available in Auditor. + +### Create Your First Monitoring Plan + +To start collecting data with Netwrix Auditor, you need to create a monitoring plan that defines +data collection, notification, and storage settings and add a source-specific item. This +recommendation will appear if you don't have any monitoring plans configured. Clicking the **Add +plan** button opens the New Monitoring Plan wizard. See the +[Create a New Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional information about plans +configuration. Once completed, you will be prompted to add an item to your plan, otherwise the +configuration will be incomplete and the product will not be able to collect data. Auditor +automatically suggests item types associated with your data source. + +### Start Abandoned Data Source Auditing + +If you have a license for several applications, Netwrix suggests enabling each undeployed data +source for each purchased application if they were never deployed before. Clicking the **Add plan** +button opens the New Monitoring Plan wizard. Select the data source you want to monitor with Netwrix +Auditor and see the [Create a New Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional +information about further configuration. + +### Enable State-in-Time Data Collection + +If you want to review the state of your system configuration at a specific moment in time, for +example, account permissions or group membership, you need to enable the State-in-Time data +collection for your data source. See the +[State–in–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) topic for additional information +about the available reports. Clicking the **Go to data source** button opens the settings page of +the data source to which this recommendation applies to. See the +[Manage Data Sources](/docs/auditor/10.7/admin/monitoringplans/datasources.md) topic for additional information. + +**NOTE:** This recommendation will not be shown for to the File Servers data sources (Windows-based +file shares, NetApp Filers, Dell Data Storage, etc.). Navigate to your file server data source and +check the state-in-time data collection settings manually. + +### Subscribe to the Health Summary Email + +The Health Summary email includes all statistics on the product operations and health for the last +24 hours; it also notifies you about license status. If you have configured monitoring plans with +data sources and items, Netwrix recommends subscribing to Health Summary emails to be notified on +the problems that need your attention. See the +[Health Summary Email](/docs/auditor/10.7/admin/healthstatus/summaryemail.md) topic for additional information. + +Clicking the **Go to Notifications** button opens the Netwrix Auditor notifications settings page. +See the [Notifications](/docs/auditor/10.7/admin/settings/notifications.md) topic for additional information. + +### Logon Activity: Start Auditing Item + +If you have the monitoring plans with configured Active Directory data source and domain item, +Netwrix recommends creating a new monitoring plan for the Logon Activity data source to review +details around interactive and non-interactive logons, including failed logon attempts, and users +logon and logoff activity on domain controllers in the audited domain. Clicking the **Add plan** +button opens the New Monitoring Plan wizard with the Logon Activity as a selected data source. See +the [Create a New Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional information about further +configuration. + +### Enable Alerts + +For the configured monitoring plans, Netwrix recommends enabling alerts to be immediately notified +on the suspicious activity. You can enable predefined alerts or create your custom ones. + +Clicking the **Open** settings button opens the All Alerts wizard. See the +[Manage Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) topic for additional information. + +## Manage Recommendations + +For active recommendations, you can follow the prompts or move them to the completed state by +clicking the '**Mark as complete**' link. + +For completed recommendations, you can configure the retention period to keep them visible and +select their categories for further displaying on the tile. If you want to proceed with a completed +recommendation, click the '**Move to active**' link below the recommendation. + +Follow the steps to manage recommendations: + +**Step 1 –** On the Auditor home page, click the **Recommendations** tile. + +**Step 2 –** Click **Settings** at the bottom. + +![managerecommendations](/images/auditor/10.7/admin/navigation/managerecommendations.webp) + +**Step 3 –** In the Manage recommendations dialog, do the following: + +- Keep completed recommendations: `<30>` days – Specify time period in days to keep the completed + recommendations visible. The default period is set to 30 days. +- Select the recommendations to fine-tune product configuration – Select recommendations types you + want to be displayed. When checked, the recommendations of the selected type appear once your + Auditor configuration meets the recommendation conditions. + + For example, if you selected the 'Enable State-in-Time data collection', this recommendation + appears for each new monitoring plan with disabled state-in-time option. + +**Step 4 –** Click **OK** to save your edits. + +To refresh the recommendations list, click the **Refresh** button in the left bottom corner. diff --git a/docs/auditor/10.8/admin/overview.md b/docs/auditor/10.8/admin/overview.md new file mode 100644 index 0000000000..2a67f5ab42 --- /dev/null +++ b/docs/auditor/10.8/admin/overview.md @@ -0,0 +1,31 @@ +--- +title: "Administration" +description: "Administration" +sidebar_position: 50 +--- + +# Administration + +This section contains information on how to use collected data with Netwrix Auditor: + +- First launch of the product +- Navigation +- Search collected data +- Use reports +- Get alerts +- Assess risks +- View behavior anomalies +- Create subscriptions to search and reports +- Detailed information about Netwrix Auditor reports + +## Collect Data with Netwrix Auditor Administrator Console + +This section contains the following information on how to use Netwrix Auditor: + +- Integration with Netwrix Access Information Center Overview +- Role-based access and delegation +- Monitored Object Types, Actions, and Attributes +- Monitoring Plans +- Description of the main product features +- Netwrix standalone tools +- Network traffic compression diff --git a/docs/auditor/10.8/admin/reports/_category_.json b/docs/auditor/10.8/admin/reports/_category_.json new file mode 100644 index 0000000000..31af544560 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Reports", + "position": 50, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/reports/custom.md b/docs/auditor/10.8/admin/reports/custom.md new file mode 100644 index 0000000000..81b6f136a0 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/custom.md @@ -0,0 +1,66 @@ +--- +title: "Custom Search-Based Reports" +description: "Custom Search-Based Reports" +sidebar_position: 50 +--- + +# Custom Search-Based Reports + +Netwrix Auditor allows you to save your favorite searches as reports to access them instantly. For +your convenience, the product provides predefined templates for some popular usage scenarios. You +can save your custom report or use one of the templates provided by Netwrix. Navigate to Reports → +Custom to review these reports. Click View to generate the selected report. + +Moreover, custom reports are shared between all Netwrix Auditor clients that have access to the same +Netwrix Auditor Server (the main component responsible for collecting and processing audit data). + +For your convenience, you can create additional folders for your custom reports. Select Add Folder +under the Custom section and specify the name for a new folder. Then, select a custom report and +move it to the new folder. + +The example custom report results apply to AD or Group Policy modifications by administrator. + +![customreport_thumb_0_0](/images/auditor/10.7/admin/reports/types/customreport_thumb_0_0.webp) + +Review the following for additional information: + +- To save a search as a custom report +- To modify a custom report +- To subscribe to a custom report +- To delete a custom report + +## To save a search as a custom report + +1. On the main Netwrix Auditor page, navigate to Search. +2. Apply filters and click Search. + + [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) how to apply filters when searching + audit data. + +3. Navigate to Tools and select Save as report. +4. In the Specify a name for your custom report dialog, specify a name. Make sure to specify a + unique name. + +## To modify a custom report + +1. On the main Netwrix Auditor page, navigate to Reports → Custom. +2. Select one of the custom reports in the list and review filters. +3. Click View to open search. +4. Modify filters and click Search. + + [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) how to apply filters when searching + audit data. + +5. Navigate to Tools and select Save as report. +6. In the Specify a name for your custom report dialog, specify a name. Netwrix Auditor + automatically offers a previously used name so that this custom report will be overwritten. If + you want to save both searches, specify a unique name for a modified search. + +## To subscribe to a custom report + +1. Navigate to Reports → Custom and select the report you want to subscribe to. +2. Click Subscribe and complete the Add Subscription to Search wizard. + +## To delete a custom report + +- Navigate to Reports → Custom, select a report and click Delete. diff --git a/docs/auditor/10.8/admin/reports/overview.md b/docs/auditor/10.8/admin/reports/overview.md new file mode 100644 index 0000000000..28579ff0cb --- /dev/null +++ b/docs/auditor/10.8/admin/reports/overview.md @@ -0,0 +1,28 @@ +--- +title: "Reports" +description: "Reports" +sidebar_position: 50 +--- + +# Reports + +Netwrix Auditor provides a variety of reports for each data source. This helps you keep track of all +changes in your IT infrastructure and validate compliance with various standards and regulations +(FISMA, HIPAA, PCI, SOX, etc.). You can also create your custom reports based on the Interactive +Search technology. + +To review intelligence data, you must be assigned the Global administrator or Global reviewer role +in the product. The users assigned the Reviewer role on a certain plan or folder have a limited +access to data—only within a delegated scope. See the +[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional +informatuion. + +![allactivedirectorychanges_thumb_0_0](/images/auditor/10.7/admin/reports/allactivedirectorychanges_thumb_0_0.webp) + +Review general report types available in Netwrix Auditor to meet your specific business needs: + +| Report type | Description | +| ------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Predefined reports | Predefined reports pack contains over a hundred SSRS-based reports grouped by business categories and data sources. Predefined reports are helpful if you are looking for a ready-to-use template for your business needs. See the [Predefined Reports](/docs/auditor/10.7/admin/reports/types/overview.md) topic for additional information. | +| Compliance reports | For your convenience, specific reports are grouped into folders by corresponding international standards and regulations such as security controls, information security, etc. See the [Compliance Reports](/docs/auditor/10.7/admin/reports/types/compliance.md) topic for additional information. | +| Custom reports | For your convenience, the Reports section has been enhanced with Custom reports. Initially, the product provides templates for the best common workflows within Auditor. Later, you can always create custom report from interactive search and find them here. See the [Custom Search-Based Reports](/docs/auditor/10.7/admin/reports/custom.md) topic for additional information. | diff --git a/docs/auditor/10.8/admin/reports/reviewstatus.md b/docs/auditor/10.8/admin/reports/reviewstatus.md new file mode 100644 index 0000000000..b4c318bc35 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/reviewstatus.md @@ -0,0 +1,45 @@ +--- +title: "Interactive Reports for Change Management Workflow" +description: "Interactive Reports for Change Management Workflow" +sidebar_position: 20 +--- + +# Interactive Reports for Change Management Workflow + +Change management is one of the critical processes for many companies referring to such areas as +requesting, planning, implementing, and evaluating changes to various systems. For your change +management workflow, Netwrix Auditor offers several reports with interactive capabilities – not only +they list changes in your infrastructure but also allow you to track, analyze, assign appropriate +status and comment on these changes. + +This capability can supplement your organization's workflow of monitoring and resolving potential +issues through the following automated course of action: + +1. The reported changes to the monitored environment are assigned the New status by default. +2. If a change seems unauthorized, or requires further analysis, you can click the Click to update + status link next to the change detailed data: + ![reviewstatus_thumb_0_0](/images/auditor/10.7/admin/reports/reviewstatus_thumb_0_0.webp)3. + In the **Review status** dialog for selected change, set its status to In Review and provide a + reason. +3. Once the change has been approved of, or rolled back, you can set its status to Resolved. + +This capability is supported for the following reports: + +| Data source | Report location | +| ------------------------ | --------------------------------------------------------------------------------------------- | +| Entire IT infrastructure | Organization Level Reports | +| Active Directory | Active Directory → Active Directory Changes → All Active Directory Changes with Review Status | +| Exchange | Exchange → All Exchange Server Changes with Review Status | +| SharePoint | SharePoint → All SharePoint Changes with Review Status | +| Windows Server | Windows Server → Windows Server Changes → All Windows Server Changes with Review Status | +| Group Policy | Active Directory → Group Policy Changes → All Group Policy Changes with Review Status | + +In the report filters, select a monitoring plan you want to generate a report for. To review data +sources and items included in each plan, navigate to the Monitoring Plans section. + +They list + +Each report has a set of filters which help organize audit data in the most convenient way. See the +[View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information. You can also create a subscription to any +report you want to receive on a regular basis. See the [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) +topic for additional information. diff --git a/docs/auditor/10.8/admin/reports/types/_category_.json b/docs/auditor/10.8/admin/reports/types/_category_.json new file mode 100644 index 0000000000..ff49ae96c8 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Predefined Reports", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/reports/types/activity.md b/docs/auditor/10.8/admin/reports/types/activity.md new file mode 100644 index 0000000000..6138f7a4a1 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/activity.md @@ -0,0 +1,42 @@ +--- +title: "Change and Activity Reports" +description: "Change and Activity Reports" +sidebar_position: 50 +--- + +# Change and Activity Reports + +Change and activity reports provide information on changes to different aspects of the audited +environment. Depending on the data source, navigate to one of the following locations, or use the +search field to look for the keywords you need: + +| Data source | Report location | +| ------------------------------------ | ---------------------------------------------------- | +| Active Directory | **Active Directory** → **Active Directory Changes** | +| Active Directory Federation Services | **Active Directory Federation Services (AD** **FS)** | +| Microsoft Entra ID Plans | Microsoft Entra ID Plans | +| Group Policy | Active Directory → Group Policy Changes | +| Exchange | Exchange | +| Exchange Online | Exchange Online | +| File Servers | File Servers → File Servers Activity | +| Oracle Database | Oracle Database | +| SharePoint | SharePoint | +| SharePoint Online | SharePoint Online | +| SQL Server | SQL Server | +| VMware | VMware | +| Windows Server | Windows Server → Windows Server Changes | +| Event Log | Windows Server → Event Log | +| IIS | Windows Server→ Event Log | +| Logon Activity | **Active Directory** → **Logon Activity** | +| Integration API | Organization Level Reports | +| Netwrix Auditor self-audit | Organization Level Reports | + +In the report filters, select a monitoring plan you want to generate a report for. To review data +sources and items included in each plan, navigate to the Monitoring Plans section. + +![allactivedirectorychanges_thumb_0_0](/images/auditor/10.7/admin/reports/allactivedirectorychanges_thumb_0_0.webp) + +Each report has a set of filters which help organize audit data in the most convenient way. See the +[View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information. You can also create a subscription to +any report you want to receive on a regular basis. See the +[Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/reports/types/compliance.md b/docs/auditor/10.8/admin/reports/types/compliance.md new file mode 100644 index 0000000000..58803543e8 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/compliance.md @@ -0,0 +1,33 @@ +--- +title: "Compliance Reports" +description: "Compliance Reports" +sidebar_position: 70 +--- + +# Compliance Reports + +For your convenience, besides grouping by data source the reports are grouped by compliance +standards. Auditor provides out-of-box reports that allow validating compliance with different +standards and regulations, including but not limited to: + +- FERPA +- FISMA/NIST SP800-53 rev4 +- GDPR +- GLBA +- HIPAA +- ISO/IEC 27001 +- NERC +- PCI DSS v3.2 +- SOX +- CJIS + +Each compliance folder provides overview on a selected standard, to read it, click on the folder +name. Click Read More to learn more about mapping between these standards and Auditor reports. + +In the report filters, select a monitoring plan you want to generate a report for. To review data +sources and items included in each plan, navigate to the Monitoring Plans section. + +Review the following for additional information: + +- See the [View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information on how to find the report you + need and view reports in a web browser. diff --git a/docs/auditor/10.8/admin/reports/types/datadiscoveryclassification.md b/docs/auditor/10.8/admin/reports/types/datadiscoveryclassification.md new file mode 100644 index 0000000000..9dbca2c57e --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/datadiscoveryclassification.md @@ -0,0 +1,78 @@ +--- +title: "Data Discovery and Classification Reports" +description: "Data Discovery and Classification Reports" +sidebar_position: 30 +--- + +# Data Discovery and Classification Reports + +Follow the steps to review Data Discovery and Classification reports: + +**Step 1 –** Navigate to **Reports** > **Data Discovery and Classification** and select a report you +are interested in. + +**Step 2 –** Click View. + +Data Discovery and Classification reports grouped by data sources. + +The table below lists the reports available for Data Discovery and Classification: + +| Report | Description | +| ----------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| File Servers | | +| Activity reports | | +| Activity Related to Sensitive Files and Folders | This report lists all access attempts to files and folders that contain certain categories of sensitive data at the moment. | +| State-in-time reports | | +| Most Accessible Sensitive Files and Folders | This report shows the number of users that effectively have access to sensitive files or folders, sorted in descending order. Use this report to identify data at high risk and plan for corrective actions accordingly. | +| Overexposed Files and Folders | This report shows sensitive files and folders accessible by the specified users or groups, based on the combination of folder and share permissions. Use this report to identify data at high risk and plan for corrective actions accordingly. | +| Sensitive Files and Folders by Owner | This report shows ownership of files and folders that are stored in the specified file share and contain selected categories of sensitive data. Use this report to determine the owners of particular sensitive data. | +| Files and Folders Categories by Object | This report shows files and folders that contain specific categories of sensitive data. Use this report to see whether a specific file or folder contains sensitive data. | +| Sensitive Files Count by Source | This report shows the number of files that contain specific categories of sensitive data. Use this report to estimate amount of your sensitive data in each category, plan for data protection measures and control their implementation. | +| Sensitive File and Folder Permissions Details | This report shows permissions granted on files and folders that contain certain categories of sensitive data. Use this report to see who has access to a particular file or folder, via either group membership or direct assignment. Reveal sensitive content that has permissions different from the parent folder. | +| SharePoint | | +| Activity reports | | +| Activity Related to Sensitive Data Objects | This report shows changes and read operations on SharePoint sites and documents that contain sensitive information. Use this report to detect suspicious activity around your sensitive data. | +| State-in-time reports | | +| Sensitive Data Objects by Site Collection | For each SharePoint site collection listed, this report shows the categories of sensitive data stored there and the number of documents in each category. Use this report to reveal the number of sensitive files stored in your SharePoint site collections. | +| Sensitive Data Objects | For each site collection listed, this report shows the SharePoint objects (sites, lists and documents) that have been classified as containing sensitive information. Use this report to plan and control data protection measures for sensitive information stored on your SharePoint. | +| Sensitive Data Object Permissions | For each SharePoint object (site, list or document) listed, this report shows the user accounts that have access to this object, their effective permissions and how those permissions were granted (for example, permissions can be granted directly, via group membership or using SharePoint policy). Use this report to control access to SharePoint objects that contain sensitive data. | +| Overexposed Sensitive Data Objects | For each user account listed, this report shows the SharePoint objects (sites, lists and documents) containing sensitive data that the user can access based on their effective permissions. Use this report to identify overexposed data and plan measures to mitigate your risk. | +| Most Exposed Sensitive Data Objects | Lists the SharePoint objects (sites, lists and documents) containing sensitive data that can be accessed by the most users (or even Everyone), based on effective permissions. Use this report to identify data at high risk and plan corrective actions. | + +## Requirements for Data Discovery and Classification Reports + +The table below contains requirements to run Data Discovery and Classification reports. These are +reports that help you to reduce the risk of data leaks and non-compliance by ensuring that all +sensitive data resides in safe locations, that it isn't overexposed and that user activity around it +is in line with security policies. + +Applicable for: + +- File Servers +- SharePoint +- SharePoint Online + +| Report | Requirement | +| ----------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| File Servers | | +| Activity Related to Sensitive Files and Folders | - Monitoring plan for File Server data source with activity audit enabled in Netwrix Auditor; - Netwrix Data Classification instance configured to crawl from the same source (naming must exactly match); - Sensitive Data Discovery correctly configured on the Netwrix Auditor Server. | +| File and Folder Categories by Object | - Monitoring plan for File Server data source with 'Collect data for State-In-Time reports' feature enabled in Netwrix Auditor; - Netwrix Data Classification instance configured to crawl from the same source (naming must exactly match); - Sensitive Data Discovery correctly configured on the Netwrix Auditor Server. | +| Most Accessible Sensitive Files and Folders | - Monitoring plan for File Server data source with 'Collect data for State-In-Time reports' feature enabled in Netwrix Auditor; - Netwrix Data Classification instance configured to crawl from the same source (naming must exactly match); - Sensitive Data Discovery correctly configured on the Netwrix Auditor Server. | +| Overexposed Files and Folders | - Monitoring plan for File Server data source with 'Collect data for State-In-Time reports' feature enabled in Netwrix Auditor; - Netwrix Data Classification instance configured to crawl from the same source (naming must exactly match); - Sensitive Data Discovery correctly configured on the Netwrix Auditor Server. | +| Sensitive File and Folder Permissions Details | - Monitoring plan for File Server data source with 'Collect data for State-In-Time reports' feature enabled in Netwrix Auditor; - Netwrix Data Classification instance configured to crawl from the same source (naming must exactly match); - Sensitive Data Discovery correctly configured on the Netwrix Auditor Server. | +| Sensitive Files and Folders by Owner | - Monitoring plan for File Server data source with 'Collect data for State-In-Time reports' feature enabled in Netwrix Auditor; - Netwrix Data Classification instance configured to crawl from the same source (naming must exactly match); - Sensitive Data Discovery correctly configured on the Netwrix Auditor Server. | +| Sensitive Files and Folders by Source | - Monitoring plan for File Server data source with 'Collect data for State-In-Time reports' feature enabled in Netwrix Auditor; - Netwrix Data Classification instance configured to crawl from the same source (naming must exactly match); - Sensitive Data Discovery correctly configured on the Netwrix Auditor Server. | +| SharePoint | | +| Activity Related to Sensitive Data Objects | - Monitoring plan for SharePoint data source with activity audit enabled in Netwrix Auditor; - Netwrix Data Classification instance configured to crawl from the same source (naming must exactly match); - Sensitive Data Discovery correctly configured on the Netwrix Auditor Server. | +| Overexposed Sensitive Data Objects | - Monitoring plan for File Server data source with 'Collect data for State-In-Time reports' feature enabled in Netwrix Auditor; - Netwrix Data Classification instance configured to crawl from the same source (naming must exactly match); - Sensitive Data Discovery correctly configured on the Netwrix Auditor Server. | +| Sensitive Data Object Permissions | - Monitoring plan for File Server data source with 'Collect data for State-In-Time reports' feature enabled in Netwrix Auditor; - Netwrix Data Classification instance configured to crawl from the same source (naming must exactly match); - Sensitive Data Discovery correctly configured on the Netwrix Auditor Server. | +| Sensitive Data Objects by Site Collection | - Monitoring plan for File Server data source with 'Collect data for State-In-Time reports' feature enabled in Netwrix Auditor; - Netwrix Data Classification instance configured to crawl from the same source (naming must exactly match); - Sensitive Data Discovery correctly configured on the Netwrix Auditor Server. | +| Sensitive Data Objects | - Monitoring plan for File Server data source with 'Collect data for State-In-Time reports' feature enabled in Netwrix Auditor; - Netwrix Data Classification instance configured to crawl from the same source (naming must exactly match); - Sensitive Data Discovery correctly configured on the Netwrix Auditor Server. | + +## Make Reports Handy + +In addition to reviewing reports, you can customize them with filters and create report +subscriptions. Review the following for additional information: + +- [View Reports](/docs/auditor/10.7/admin/reports/view.md) +- [Create Subscriptions](/docs/auditor/10.7/admin/subscriptions/create.md) diff --git a/docs/auditor/10.8/admin/reports/types/enterprise.md b/docs/auditor/10.8/admin/reports/types/enterprise.md new file mode 100644 index 0000000000..01d2eba0ec --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/enterprise.md @@ -0,0 +1,63 @@ +--- +title: "Enterprise Overview Dashboard" +description: "Enterprise Overview Dashboard" +sidebar_position: 10 +--- + +# Enterprise Overview Dashboard + +Enterprise Overview dashboard provide a high-level overview of activity trends by date, user, +server, object type or audited system in your IT infrastructure. They allow you to see the activity +trends by date, user, object type, server or audited IT system, and drill through to detailed +reports for further analysis. The Enterprise diagram aggregates data on all Managed Objects and all +audited systems, while system-specific diagrams provide quick access to important statistics within +one audited system. + +The current version of Netwrix Auditor contains the following diagrams: + +- Enterprise (aggregates data on all audited systems listed below) +- Active Directory +- Exchange +- File Servers +- SharePoint +- SQL Server +- VMware +- Windows Server + +If you are sure that some audit data is missing (e.g., you do not see information on your file +servers in reports and search results), verify that the Audit Database settings are configured and +that data is written to databases that reside on the default SQL Server instance. + +By default, Auditor allows generating reports and running interactive searches on data collected in +the last 180 days. If you want to investigate incidents that occurred more than 180 days ago, ask +your Auditor Global administrator to import that data from the Long-Term Archive. + +All diagrams provide the drill-down functionality, which means that by clicking on a segment, you +will be redirected to a report with the corresponding filtering and grouping of data that renders +the next level of detail. + +Follow the steps to review a diagram: + +- On the Auditor home screen, click the **Reports** tile and open the Enterprise Overview section. + Click a tile to open a corresponding diagram. +- Navigate to Reports and select one of the following locations: + + | Title | Location | + | ------------------------- | -------------------------------------------- | + | Enterprise | Organization Level Reports | + | Active Directory Overview | Active Directory ® Active Directory Changes | + | Exchange Overview | Exchange | + | File Servers Overview | File Servers ® File Servers Activity | + | SharePoint Overview | SharePoint | + | SQL Server Overview | SQL Server | + | VMware Overview | VMware | + | Windows Server Overview | Windows Server ® Windows Server Changes | + +The example below applies to Enterprise. + +![dashboard](/images/auditor/10.7/admin/reports/types/dashboard.webp) + +Each report has a set of filters which help organize audit data in the most convenient way. See the +[View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information. You can also create a subscription to +any report you want to receive on a regular basis. See the +[Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/reports/types/organizationlevel.md b/docs/auditor/10.8/admin/reports/types/organizationlevel.md new file mode 100644 index 0000000000..5190460ce4 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/organizationlevel.md @@ -0,0 +1,31 @@ +--- +title: "Organization Level Reports" +description: "Organization Level Reports" +sidebar_position: 20 +--- + +# Organization Level Reports + +Organization Level reports aggregate data on all monitoring plans and list changes and activity that +occurred across all data sources. Also, this folder includes a report on Auditor self-audit - it +provides detailed information on changes to monitoring plans, data sources and audited items. + +Organization Level reports can be found in the Organization Level Reports folder under the Reports +node. + +This folder includes: + +| Report | Details | +| ------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Enterprise Overview | Dashboard report with diagrams showing all activities and changes across the monitored data sources. See also: [Enterprise Overview Dashboard](/docs/auditor/10.7/admin/reports/types/enterprise.md) | +| All Activity with Review Status | Shows all activity across the entire IT infrastructure, including changes, read access and logons. Features interactive review status to supplement your change management workflow. See also: [Interactive Reports for Change Management Workflow](/docs/auditor/10.7/admin/reports/reviewstatus.md). | +| All Changes by Data Source | Shows all changes across your IT infrastructure, grouped by data source. | +| All Changes by Server | Shows all changes across the entire IT infrastructure, grouped by the server where the change was made. | +| All Changes by User | Shows all changes across your IT infrastructure, grouped by the user who made the change. | +| All Integration API Activity | Shows all activity records imported with Netwrix Auditor Integration API. | +| Self-Audit | Help to ensure that the scope of data to be audited is complete and all changes are in line with the workflows adopted by your organization. | + +Each report has a set of filters which help organize audit data in the most convenient way. See the +[View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information. You can also create a subscription to +any report you want to receive on a regular basis. See the +[Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/reports/types/overview.md b/docs/auditor/10.8/admin/reports/types/overview.md new file mode 100644 index 0000000000..60d2be6a03 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/overview.md @@ -0,0 +1,53 @@ +--- +title: "Predefined Reports" +description: "Predefined Reports" +sidebar_position: 40 +--- + +# Predefined Reports + +Netwrix Auditor is shipped with 250+ ready-to-use reports designed by Netwrix industry experts. To +find a report that is right for you, check out the predefined report types available in the product. + +- Enterprise Overview—A dashboard with a set of widgets that provide quick access to important + statistics across the audited IT infrastructure. They allow you to see the activity trends by + date, user, data source, server or audited IT system, and drill through to detailed reports for + further analysis. The Enterprise Overview dashboard aggregates the information on changes from all + data sources and provides a centralized overview. System-specific dashboards reflect all changes + across all monitoring plans where audit of this target system is enabled. See the + [Enterprise Overview Dashboard](/docs/auditor/10.7/admin/reports/types/enterprise.md) topic for additional information. +- Organization level reports—High-level reports that aggregate data from all data sources and + monitoring plans. They list all activity that occurred across the audited IT infrastructure. + Enterprise Overview provides bird's eye view of changes and activity from all data sources and + provides a centralized overview. See the [ Organization Level Reports](/docs/auditor/10.7/admin/reports/types/organizationlevel.md) topic + for additional information. +- Overview diagrams—System-specific diagram reports that aggregate audit data for an auditing + system. They provide a high-level overview of changes within a selected time period. Overviews + consist of four charts, showing the activity trends by date, user, object type or server, and + drill through to detailed reports for further analysis. +- Change and activity reports—System-specific reports that aggregate audit data for a specific data + source within specified monitoring plans. These reports show detailed data on changes and activity + and provide grouping, sorting and filtering capabilities. Each report has a different set of + filters allowing you to manage collected data in the most convenient way. See the + [Change and Activity Reports](/docs/auditor/10.7/admin/reports/types/activity.md) topic for additional information. +- State-in-time reports—System-specific reports that aggregate data for a specific data source + within a specified individual monitoring plan and allow reviewing the point-in-time state of the + data source. These reports are based on daily snapshots and help you paint a picture of your + system configuration at a specific moment in time. Currently, the Windows Server State-in-Time + report set provides baselining functionality that help identify aberrant servers. See the + [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) topic for additional information. +- Changes with video reports—Windows server-based reports that provide video recordings of user + activity on audited computers. See the [Reports with Video](/docs/auditor/10.7/admin/reports/video.md) topic for additional + information. +- Changes with review status reports—Both system-specific and overview reports that can be used in + the basic change management process. These reports allow setting a review status for each change + and providing comments. See the + [Interactive Reports for Change Management Workflow](/docs/auditor/10.7/admin/reports/reviewstatus.md) topic for additional + information. + +Review the following for additional information: + +- See the [View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information on how to find the report you + need and view reports in a web browser. +- See the [View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information on how to apply filters to + reports. diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/_category_.json b/docs/auditor/10.8/admin/reports/types/stateintime/_category_.json new file mode 100644 index 0000000000..7f17aba3c4 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/stateintime/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "State–In–Time Reports", + "position": 60, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/activedirectory.md b/docs/auditor/10.8/admin/reports/types/stateintime/activedirectory.md new file mode 100644 index 0000000000..ce0e313fa1 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/stateintime/activedirectory.md @@ -0,0 +1,154 @@ +--- +title: "Active Directory State-In-Time Reports" +description: "Active Directory State-In-Time Reports" +sidebar_position: 10 +--- + +# Active Directory State-In-Time Reports + +Examine the Active Directory state-in-time data on the user account attributes: + +- User Accounts - Attributes + +To instruct Netwrix Auditor to collect data needed for the report, make sure that **Collect data for +state-in-time reports** option is selected in the corresponding monitoring plan properties. See the +[Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) +topic for additional information. + +## User Accounts - Attributes + +This report shows specific AD attributes for the accounts that meet the specified filtering +criteria. Use this report to discover user accounts with settings that violate company policies or +applicable compliance standards. + +Supported object types and attributes are listed in the +[Active Directory](/docs/auditor/10.7/configuration/activedirectory/overview.md) topic. + +For this report to function properly, you must enable the **Collect data for state-in-time reports** +option for the data source in the monitoring plan settings. See the +[Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) +topic for additional information. + +### Tips to Work with Report + +1. Set desired filters in the report header. See Filters for more information. +2. Select as many Accounts details to show as needed. Selected details are shown in the table view + for each account that comply filtering criteria. +3. Filter on Sort by to bring important accounts' data to front. +4. Add filters by specific attribute values to narrow your report scope. In this case, the report + shows only accounts that contains these values. See the Reported Attributes  topic below for more + information. +5. The report is limited by 2000 records. To view all, create subscription to the report. The + subscription (email attachment or file uploaded to a file share) will contain complete data. +6. If you have more than 2000 entities within the report scope, sorting might work incorrectly. + Apply filters to narrow your report scope. + +Please consider that if you are going to export the report in .csv format or want to subscribe to +the .csv report, the file will contain the full list of available attributes regardless of which +filters you specified. Note that unseleted attributes have no values. + +### Filters + +You can narrow your reporting scope using multiple filters. Review the full list of available +filters and values: + +- Monitoring plan — name of the monitoring plan set to collect data from the AD domain you need. +- Item — name of the item within your monitoring plan. +- Account details to show — set of AD attributes to display in the report for each account. +- Sort by — list of available sorting parameters. +- Attribute/Value — list of available AD attributes with the ability to provide specific value. + Review the full list in the Reported Attributes + +### Reported Data + +For the account(s) you selected using filters, the summary section includes: + +- **Total account count** — total number of accounts that meet selected filtering criteria. +- **Enabled accounts** —total number of enabled accounts that meet selected filtering criteria. +- **Disabled accounts** —total number of disabled accounts that meet selected filtering criteria. + +#### Reported Attributes + +The following account attributes are reported: + +| Attribute | Description | Possible values | Filtering | +| ----------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------ | --------- | +| Account | | | | +| Account enabled | Shows whether an account enabled or not. | Yes No | + | +| Account locked | Shows whether an account locked or not. | Yes No | + | +| Canonical name | Equals the Canonical-Name attribute. See the corresponding Microsoft article for more information: [Canonical-Name attribute](https://docs.microsoft.com/en-us/windows/win32/adschema/a-canonicalname). | Example: _USRegion.OrgName.com/Finance/JDoe_ | + | +| Display name | Equals the Display-Name attribute. See the corresponding Microsoft article for more information: [Display-Name attribute](https://docs.microsoft.com/en-us/windows/win32/adschema/a-displayname). | Example: _John Smith_ | + | +| Logon name (sAMAccountName) | Equals the sAMAccountName attribute. See the corresponding Microsoft article for more information: [sAMAccountName](https://docs.microsoft.com/en-us/windows/win32/ad/naming-properties#samaccountname). | Example: _JSmith_ | + | +| Logon name (UPN) | Equals the userPrincipalName attribute. See the corresponding Microsoft article for more information: [User-Principal-Name attribute](https://docs.microsoft.com/en-us/windows/win32/adschema/a-userprincipalname). | Example: _JSmith@domain.com_ | + | +| Parent OU/container | Shows the path to account's parent object (OU or container) | Example: _test.corp.local/UserAccounts/user with all properties_ | + | +| Member of | Shows direct AD group membership for the account. The report is limited to 10 groups. To view all groups the account is member of, export the report to .CSV file. | Example: _Domain Admins, Backup Operators_ Clicking the Expand group membership link opens a detailed report on the user’s effective group membership. | + | +| Employee details | | | | +| First name | Shows the first name. | Example: _John_ | + | +| Last name | Shows the last name. | Example: _Smith_ | + | +| Job title | Equals the Title attribute. See the corresponding Microsoft article for more information: [Title attribute (AD Schema)](https://docs.microsoft.com/en-us/windows/win32/adschema/a-title). | Example: _Manager_ | + | +| Department | Shows the name for the department in which the user works. | Example: _Sales_ | + | +| Telephone number | Equals the Telephone-Number attribute. See the corresponding Microsoft article for more information: [Telephone-Number attribute](https://docs.microsoft.com/en-us/windows/win32/adschema/a-telephonenumber). | Example: _949-555-1234_ | + | +| Email address | Equals the E-mail-Addresses attribute. See the corresponding Microsoft article for more information: [E-mail-Addresses attribute](https://docs.microsoft.com/en-us/windows/win32/adschema/a-mail). | Email address _Example: JSmith@domain.com_ | + | +| Manager | Shows manager specified for the account. | Display name (default) If empty, the report shows common name. | + | +| Manager email address | Equals the manager / mail attribute. | Email address _Example: JSmith@domain.com_ | + | +| Office | Equals the Physical-Delivery-Office-Name attribute. See the corresponding Microsoft article for more information: [Physical-Delivery-Office-Name attribute](https://docs.microsoft.com/en-us/windows/win32/adschema/a-physicaldeliveryofficename). | Example: _London Office_ | + | +| Company | Equals the Company attribute. See the corresponding Microsoft article for more information: [Company attribute](https://docs.microsoft.com/en-us/windows/win32/adschema/a-company). | Example: _Corporation_ | + | +| Street address | Shows address based on the Street-Address and postOfficeBox attributes. | Example: _The Main Road; 10_ | + | +| City | Shows the locality, such as the town or city, in the user's address. | Example: _NewLondon_ | + | +| State/province | Equals the State-Or-Province-Name attribute. See the corresponding Microsoft article for more information: [State-Or-Province-Name attribute](https://docs.microsoft.com/en-us/windows/win32/adschema/a-st). | Example: _New York_ | + | +| ZIP/postal code | Equals the Postal-Code attribute. See the corresponding Microsoft article for more information: [Postal-Code attribute](https://docs.microsoft.com/en-us/windows/win32/adschema/a-postalcode). | Example: _61441_ | + | +| Country/region | Shows the country/region in which the user is located. | Example: _Ireland_ | + | +| Security | | | | +| Account cannot be delegated | Shows whether the account can be delegated or not based on the User-Account-Control attribute. See the corresponding Microsoft article for more information: [User-Account-Control attribute](https://docs.microsoft.com/en-us/windows/win32/adschema/a-useraccountcontrol). | Yes No | + | +| Account expiration date | Equals the Account-Expires attribute. See the corresponding Microsoft article for more information: [Account-Expires attribute](https://docs.microsoft.com/en-us/windows/win32/adschema/a-accountexpires). | Date | – | +| Password age | Shows password age for the account based on the Pwd-Last-Set attribute. See the corresponding Microsoft article for more information: [Pwd-Last-Set attribute](https://docs.microsoft.com/en-us/windows/win32/adschema/a-pwdlastset). | Number of days N/A — if password never set When the filter applied, the report shows above or equal results | + | +| Password expired | Shows whether the account has the "_Password expired_" flag set under the AccountControl attribute. | Yes No | + | +| Password last changed | Equals the Pwd-Last-Set attribute. See the corresponding Microsoft article for more information: [Pwd-Last-Set attribute](https://docs.microsoft.com/en-us/windows/win32/adschema/a-pwdlastset). | Date | – | +| Never – if password never set | + | | | +| Password never expires | Shows whether the account has the "_Password never expires_" flag set on the Account tab in properties. | Yes No | + | +| Password not required | Shows whether the account has the "_Password not required_" flag set under the AccountControl attribute. Such account may have empty password. | Yes No | + | +| User cannot change password | Shows whether the account has the "_User cannot change password_" flag set on the Account tab in properties. | Yes No | + | +| User must change password | Shows whether the account has the "_User must change password_" flag set on the Account tab in properties. | Yes No | + | +| Other | | | | +| Creation date | Shows account creation date. | Date | – | +| Days inactive | Shows the number of days the account is considered to be inactive. | Days When the filter applied, the report shows above or equal results | + | +| Description | Contains account description if provided. | Example: _Sales Manager_ | + | +| Last logon | Shows the date of account's last logon. | Date Never A user's last logon time is updated only once every 9-14 days, so some data may be outdated. | - | +| Last modified | Equals the When-Changed attribute. See the corresponding Microsoft article for more information: [When-Changed attribute](https://docs.microsoft.com/en-us/windows/win32/adschema/a-whenchanged). | Date The Last modified attribute is considered as last object's modification date and not appears immediately. So some data may be outdated. | – | +| Logon script path | Equals the Script-Path attribute. See the corresponding Microsoft article for more information: [Script-Path attribute](https://docs.microsoft.com/en-us/windows/win32/adschema/a-scriptpath). | Example: _C:\Powershellscripts\old scripts\script.ps1_ | + | +| Recipient type | Shows recipient type based on the msExchRecipientTypeDetails attribute. | Mail user User Mailbox | + | +| Working (logon) hours | Shows time interval based on the Logon-Hours attribute. See the corresponding Microsoft article for more information: [Logon-Hours attribute](https://docs.microsoft.com/en-us/windows/win32/adschema/a-logonhours). | Specified time interval (in hours). | – | + +### Related Reports + +Clicking the **Account name** link opens the Account Permissions in Active Directory report. + +Clicking the **Expand group membership** link opens the Effective Group Membership report for this +account. + +### Usage Example + +An IT administrators wants to find all user accounts from the OU named _Finance_ that are currently +locked out and disabled with information about their managers to contact them in case of any +questions. This OU is included in the monitoring plan named _Active Directory Monitoring_. They need +to set report filters as follows: + +- Monitoring plan: Active Directory Monitoring +- In the "Account details to show" filter, select Manager. +- Attribute 1: Parent OU/container - equals | Value: Domain.com/Finance +- Attribute 2: Account enabled | Value: No +- Attribute 3: Account locked | Value: Yes +- All other filter values can be left default. + +A security manager wants to find administrators of the _corp.local_ domain with incorrect password +settings (password not required). Service accounts (_svc_%_) must be skipped in the report. This +domain is included in the monitoring plan named \_Active Directory Monitoring_. He or she needs to +set report filters as follows: + +- Monitoring plan: Active Directory Monitoring +- Item: corp.local +- In the "Account details to show" filter, select Member of, Password not required. +- Attribute 1: Member of - equals | Value: Domain Admins +- Attribute 2: Password not required| Value: Yes +- Attribute 3: Logon name (sAMAccountName) - not equal to | Value: svc\_% +- All other filter values can be left default. diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/fileservers.md b/docs/auditor/10.8/admin/reports/types/stateintime/fileservers.md new file mode 100644 index 0000000000..8e1108aa25 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/stateintime/fileservers.md @@ -0,0 +1,33 @@ +--- +title: "File Servers State-In-Time Reports" +description: "File Servers State-In-Time Reports" +sidebar_position: 30 +--- + +# File Servers State-In-Time Reports + +This section contains limitations and considerations for File Server State-in-Time reports +generation. + +## Limitations + +1. For the following File Server State-in-Time reports wildcard _%_ is not supported for the + "_Object Path_" field: + + - Account permissions + - Duplicate files + - Empty folders + - Excessive Access Permissions + - Excessive Access Permissions with Account Details + - Files and Folders by Owner + - Folder and File Permission Details + - Folder and File Permissions with Account Details + - Folder Permissions + - Folder Permissions with Account Details + - Folder Summary Report + - Largest Files + - Potential Data Owners by Folder + - Stale Data by Folder + - Top Owners by Total File Size + +2. For the Folder TreeView State-in-Time report, the wildcard _%_ is supported. diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/microsoftentraid.md b/docs/auditor/10.8/admin/reports/types/stateintime/microsoftentraid.md new file mode 100644 index 0000000000..bae7baa4e0 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/stateintime/microsoftentraid.md @@ -0,0 +1,93 @@ +--- +title: "Microsoft Entra ID State-In-Time Reports" +description: "Microsoft Entra ID State-In-Time Reports" +sidebar_position: 20 +--- + +# Microsoft Entra ID State-In-Time Reports + +To instruct Netwrix Auditor to collect data needed for the report, make sure that Collect data for +state-in-time reports option is selected in the corresponding monitoring plan properties. See +[Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md). + +**NOTE:** For Microsoft Entra ID, only the current date snapshot can be used for Reports. + +## User Accounts - Attributes + +The report shows specific AD attributes for the Microsoft Entra ID (formerly Azure AD) accounts that +meet the specified filtering criteria. Use this report to discover Microsoft Entra ID accounts with +settings that violate company policies or applicable compliance standards. + +For this report to function properly, you must enable the Collect data for state-in-time reports +option for the data source in the monitoring plan settings. See the +[Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) +topic for more information. + +### Tips to Work with Report + +1. Set desired filters in the report header. See the Filters topic for more information. +2. Select as many Accounts details to show as needed. Selected details are shown in the table view + for each account that comply filtering criteria. +3. Filter on Sort by to bring important accounts' data to front. +4. Add filters by specific attribute values to narrow your report scope. In this case, the report + shows only accounts that contains these values. See the Reported Attributes topic for more + information. +5. The report is limited by 2000 records. To view all, create subscription to the report. The + subscription (email attachment or file uploaded to a file share) will contain complete data. +6. If you have more than 2000 entities within the report scope, sorting might work incorrectly. + Apply filters to narrow your report scope. + +### Filters + +You can narrow your reporting scope using multiple filters. Review the full list of available +filters and values: + +- Monitoring plan — name of the monitoring plan set to collect data from the AD domain you need. +- Time zone — select you time zone. +- Item — name of the item within your monitoring plan. +- Sort by — list of available sorting parameters. +- Account enabled — select whether you want to see disabled accounts or not. +- Department — provide the name of the department if needed. +- Attribute/Value — list of available AD attributes with the ability to provide specific value. + +### Reported Data + +For the account(s) you selected using filters, the summary section includes: + +- Total account count — total number of accounts that meet selected filtering criteria. + +- Enabled accounts —total number of enabled accounts that meet selected filtering criteria. +- Disabled accounts —total number of disabled accounts that meet selected filtering criteria. + +### Reported Attributes + +The following account attributes are reported: + +| Attribute (display name in report) | Microsoft Entra ID attribute mapping | Possible values | Description | +| ---------------------------------------- | ------------------------------------------- | ------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Account enabled | accountEnabled | Yes/No | Specifies, whether the user account is enabled or disabled: the "true" value indicates that the account is enabled. | +| Change password on next sign in | passwordProfile | Yes/No | Specifies the password profile for a user. The password in the profile must satisfy the minimum requirements as specified by the passwordPolicies property. By default, a strong password is required. | +| Change password on next sign in with MFA | passwordProfile | Yes/No | Specifies the password profile for the user. The password in the profile must satisfy the minimum requirements as specified by the passwordPolicies property. By default, a strong password is required. | +| City | city | Example: "_London_" | The city where a user is located. Maximum length 128. | +| Cloud-only | onPremisesSyncEnabled | Yes/No | true if this object is synced from any on- premises directory; false if this object was originally synced from any on- premises directory but is no longer synced; null if this object has never been synced from any on-premises directory (default). | +| Country | country | Example: "_US_" | The country/region in which the user is located. Example: "US" or "UK". Maximum length 128. | +| Creation date | createdDateTime | 1/21/2021 4:08:00 PM | The created date of the user object. | +| Department | department | Example: "_Accounting and Finance_" | The name for the department in which the user works. Maximum length is 64 characters. | +| Display name | displayName | Example: "_John Smith_" | The name displayed in the address book for the user. This is usually the combination of the user's first name, middle initial and last name. This property is required when a user is created and it cannot be cleared during updates. Maximum length is 256 characters. | +| First name | givenName | Example: "_John_" | The given name (first name) of the user. Maximum length is 64 characters. | +| Is licensed | – | – | – | +| Last DirSync time | onPremisesLastSyncDateTime | Example: _3/20/2021 2:13:00 PM_ | M Indicates the last time at which the object was synchronized with the on-premises directory; for example: "2013- 02- 16T03:04:54Z". The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. | +| Last name | surname | Example: "_Smith_" | The user's surname (family name or last name). Maximum length is 64 characters. | +| Licenses | – | Example: _OFFICE 365 E1_ | – | +| Manager | manager | Example: "_James\_\_Williams_" | The user or contact that is this user's manager. | +| Manager email | – | Example: _JWilliams@gmail.com_ | – | +| Office | physicalDeliveryOfficeName (officeLocation) | Example: _1068_ | The office location in the user's place of business. Maximum length is 128 characters. | +| Password last change | lastPasswordChangeDateTime | Example: _4/6/2021 6:17:00 PM_ | The time when this Microsoft Entra ID Plans user last changed their password. The date and time information uses ISO 8601 format and is always in UTC time. | +| Password never expires | passwordPolicies | Yes/No | Specifies password policies for the user. This value is an enumeration with one possible value being "DisableStrongPassword", which allows weaker passwords than the default policy to be specified. "DisablePasswordExpiration" can also be specified. The two may be specified together; for example: "DisablePasswordExpiration, DisableStrongPassword". | +| Phone number | businessPhones | Example: _+1-202-555-155_ | The telephone numbers for the user. Although this is a string collection, only one number can be set for this property. | +| Role membership | – | Example: "_Exchange Service Administrator, Company Administrator_" | – | +| Sign in names | identities | _Example: "user_company.com#EXT#@officenwxqc.onmicrosoft.com"_ | Represents the identities that can be used to sign into this user account. An identity can be provided by Microsoft (also known as a local account), by organizations, or by social identity providers such as Facebook, Google, and Microsoft, and tied to a user account. May contain multiple items with the same signInType value. https://docs.microsoft.com/en- us/graph/api/resources/objectid entity?view=graph-rest-1.0 | +| Strong password required | passwordPolicies | Yes/No | Specifies password policies for the user. This value is an enumeration with one possible value being "DisableStrongPassword", which allows weaker passwords than the default policy to be specified. "DisablePasswordExpiration" can also be specified. The two may be specified together; for example: "DisablePasswordExpiration, DisableStrongPassword". | +| Title | jobTitle | Example: "_Business development manager_" | The user's job title. Max length is 128. | +| User principal name | userPrincipalName | Example: "_user_company.com#EXT#@officenwxqc.onmicrosoft.com_" | The user principal name (UPN) of wxq the user. The UPN is an Internet- style login name for the user based on the Internet standard RFC 822. By convention, this should map to the user's email name. The general format is alias@domain, where the domain must be present in the tenant's collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization. NOTE: While this property can contain accent characters, they can cause access issues to first-party applications for the user. | +| User type | userType | Example: "_Member_" | A string value that can be used to classify user types in your directory, such as "Member" and "Guest". | diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/overview.md b/docs/auditor/10.8/admin/reports/types/stateintime/overview.md new file mode 100644 index 0000000000..c0906e30d5 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/stateintime/overview.md @@ -0,0 +1,79 @@ +--- +title: "State–In–Time Reports" +description: "State–In–Time Reports" +sidebar_position: 60 +--- + +# State–In–Time Reports + +The state-in-time reports functionality allows generating reports on the system's state at a +specific moment of time in addition to change and activity reports. State-in-time reports are based +on the daily configuration snapshots, and reflect a particular aspect of the audited environment. + +This functionality is currently available for the following data sources: + +- Active Directory +- Microsoft Entra ID +- File Servers +- Exchange Online +- MS Teams +- Windows Server +- SharePoint +- SharePoint Online +- SQL Server +- Group Policy +- VMware + +**NOTE:** The State-in-Time functionality is not available for SQL Server Availability Groups. + +To provide data for state-in-time reports, remember to select the **Collect data for state-in-time +reports** option when you configure a monitoring plan for the selected data source. See the +[Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) +topic for additional information. + +The state-in-time reports are available under the Reports node. Depending on the data source, +navigate to the corresponding subfolder, for example, **Predefined\_\_**>_**\_Active +Directory\_\_**>_**\_Active Directory\_\_**>\_**\_State-in-Time**. + +In the report filters, select a monitoring plan you want to generate a report for. To review data +sources and items included in each plan, navigate to the Monitoring Plans section. + +![fileshareswindowsservers](/images/auditor/10.7/admin/reports/types/stateintime/fileshareswindowsservers.webp) + +Each report has a set of filters which help organize audit data in the most convenient way. See the +[View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information. You can also create a subscription +to any report you want to receive on a regular basis. See the +[Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) topic for additional information. + +By default, state-in-time reports reflect the current state of the data source. If you want to +generate a report to assess your system at a particular moment in the past, you can select the +corresponding snapshot from the Snapshot Date filter. + +To be able to generate reports based on different snapshots, ask your Auditor Global administrator +to import historical snapshots to the Audit Database, otherwise only the Current Session option is +available in the drop-down list. + +**NOTE:** Importing historical snapshots is not available for Office 365. + +When auditing file servers, changes to both access and audit permissions are tracked. To exclude +information on access permissions, contact your Auditor Global administrator or Configurator of this +plan. + +## Baseline Reports + +Most reports in Windows Server—State-in-Time folder allow you to specify baselines. A _baseline_ +defines a certain safe level or state. If a server parameter falls below it, it is a considered a +threat or at least merits your special attention. With baselines specified right in report filters, +you can easily identify servers that are different from your corporate policies or best practices. +Risks are marked with red color and are easy to spot in the report. + +![windowsserverinventory_thumb_0_0](/images/auditor/10.7/admin/reports/types/stateintime/windowsserverinventory_thumb_0_0.webp) + +You can specify baseline values specific to your organization in one of the following ways: + +- As a baseline filter value in the report filters. Baselines in the field should be separated by + commas. + + While inputting text inline is easy, your baseline values will not be preserved for the next + report generation. You will have to input them every time you generate a report. This method is + recommended you plan to subscribe to this report. diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/sqlroles.md b/docs/auditor/10.8/admin/reports/types/stateintime/sqlroles.md new file mode 100644 index 0000000000..ed131cf954 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/stateintime/sqlroles.md @@ -0,0 +1,76 @@ +# SQL Server-Level Roles + +This report shows the server-level fixed and custom roles for the selected SQL Server instance, +grouped by role name. The details for each role include its name, type, and a list of the effective +role members and member types. Use this report to control role membership and permissions. + +To read more about SQL server-level roles, refer to +[this Microsoft article](https://docs.microsoft.com/en-us/sql/relational-databases/security/authentication-access/server-level-roles?view=sql-server-ver15). + +To instruct Netwrix Auditor to collect data needed for this report, make sure that **Collect data +for state-in-time reports** option is selected in the monitoring plan properties. See Settings for +Data Collection in the monitoring plan documentation. + +![sqlserverlevelroles](/images/auditor/10.7/admin/reports/types/stateintime/sqlserverlevelroles.webp) + +## Reported data + +The report has a summary section with general information on the selected SQL Server object, and the +details section presented in the table format. + +The summary section shows: + +- **Role name** +- **Role type** — _Fixed server role_ or _Custom role_ + +The detailed information under summary includes the list of effective members for this role, where: + +- **Member** — role member name. +- **Member type** —possible values: + - Windows Account + - Login SQL Authentication + - DB SQL User with password + +## Filters + +This report has the following filters: + +- **Monitoring plan** — name of the monitoring plan set to collect data from the SQL Server you + need. +- **Time zone** — time zone where Netwrix Auditor server is located, for example, UTC-08:00. This + value is filled in automatically. time zone where Netwrix Auditor server is located, for example, + UTC-08:00. +- **Snapshot date** —select the date of state-in-time snapshot you want to report on. By default, + the report includes data obtained during the latest data collection session (_Current Session_). + To report on other snapshots, make sure they are available through import. For details, see + **Manage historical snapshots** option description in the SQL Server monitoring plan + documentation. +- **Item**— name of the SQL Server instance monitored with selected monitoring plan. +- **Server-level role** —select the role that you want to explore. +- **Role type** — _Fixed server role_ or _Custom role_. +- **Member**— role member name. + +## Considerations and limitations + +- Reporting for case-sensitive SQL Servers and databases is not supported. + +## Related reports + +- Clicking a role member (account) link opens the + [Account Permissions in SQL Server](/docs/auditor/10.7/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md) report. + +## Usage example + +Database administrators in the _Corp_ organization need to discover what fixed server roles a +certain user has on the **SQLSrv01\SQLServer2016** instance. This instance is included in the +monitoring plan named _SQL Servers Monitoring_. + +To examine the relevant data, they generated the **SQL Server-Level Roles** report with the filters +set as follows: + +- **Monitoring plan:\_**SQL Servers Monitoring\_ +- **Snapshot date:\_**Current Session\_ +- **Item:\_**SQLSrv01\SQLServer2016\_ +- **Server-level role:** % +- **Role type:** Fixed server role +- **Member:\_**Corp\Jim.White\_ diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/_category_.json b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/_category_.json new file mode 100644 index 0000000000..42d11eeba8 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "SQL Server State-In-Time Reports", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "sqlserveroverview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md new file mode 100644 index 0000000000..f0f873bc5e --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md @@ -0,0 +1,105 @@ +--- +title: "Account Permissions in SQL Server" +description: "Account Permissions in SQL Server" +sidebar_position: 10 +--- + +# Account Permissions in SQL Server + +Details the effective permissions that the specified account has on the SQL Server objects of the +selected type. Use this report to review the permissions granted to users through your SQL Server +objects. + +![accountpermissionssqlserver_thumb_0_0](/images/auditor/10.7/admin/reports/types/stateintime/accountpermissionssqlserver_thumb_0_0.webp) + +## Reported data + +The report has a summary section with general information on the selected account, and the details +section presented in the table format. + +The summary section shows: + +- **User account**— name or SID of the account +- **Account type** —possible values: + - Windows Account + - Login SQL Authentication + - DB SQL User with password +- **Job title** —reported for Active Directory users as set in their corresponding attribute. If not + set, _``_ is reported. +- **Total objects count** — total number of objects that this account has access to. + +The detailed information under summary includes: + +- **Object path** — monitored object path as formatted by Netwrix Auditor in the activity records + (see '_What_' field in the reports, search results and activity summaries). For example, if + reporting on the database hosted on selected SQL Server, the path will be as follows: + _Databases\database_name_. +- **Object type** — monitored object type; for the full list of supported object types, refer to + [SQL Server](/docs/auditor/10.7/configuration/sqlserver/overview.md) topic. +- **Means granted** —how access permissions were granted to this account, e.g., _Direct permissions_ + or _Server role permissions_. +- **Effective grant** —the effective set of permissions granted to this account on the selected + object. + +## Filters + +This report has the following filters: + +- **Monitoring plan** — name of the monitoring plan set to collect data from the SQL Server you + need. +- **Time zone** — time zone where Netwrix Auditor server is located, for example, UTC-08:00. This + value is filled in automatically. +- **Snapshot date** —select the date of state-in-time snapshot you want to report on. By default, + the report includes data obtained during the latest data collection session (_Current Session_). + To report on other snapshots, make sure they are available through import. For details, see + **Manage historical snapshots** option description in + [SQL Server](/docs/auditor/10.7/admin/monitoringplans/sqlserver/overview.md) +- **Item**— name of the SQL Server instance monitored with selected monitoring plan. +- **Object path** — path to the monitored object, as formatted by Netwrix Auditor in the activity + records (see '_What_' field in the reports, search results and activity summaries). Wildcard (\*) + is supported. For example, to report on the database hosted on selected SQL Server, specify the + path as follows: _Databases\database_name_. +- **Object type**— type of the monitored object that provided data for this report. Possible values: + _Database_, _Server Instance_. +- **Permissions** —access permissions whose assignment you want to be reported for selected account. +- **Means granted** —how access permissions were granted to this account. You can select _Directly_, + _Inherited_, or both (default setting). +- **Account type** —possible values: _Windows Account_, _Login SQL Authentication_, _DB SQL User + with password_. +- **User account**—name or SID of the account whose permission assignments are reported. + +## Considerations and limitations + +- Reporting for case-sensitive SQL Servers and databases is not supported. +- Permissions for INFORMATION*SCHEMA granted via \_master db* will not be reported. +- The report will not show the RESTORE capability for the database owner. + +- When calculating effective rights and permissions, the following will not be considered: + + - Ownership chaining + - Cross DB ownership chaining + - Trustworthy database + - SQL Server agent fixed database roles + +## Related reports + +- Clicking a Object permissions link opens the + [Object Permissions in SQL Server](/docs/auditor/10.7/admin/reports/types/stateintime/sqlserveroverview/sqlobjectpermissions.md) report. +- Clicking a Means granted link opens the **[SQL Server Means Granted](/docs/auditor/10.7/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md)** report. + +## Usage example + +Database administrators in the _Corp_ organization need to discover what kind of permissions a +certain user has on the **SQLSrv01\SQLServer2016** instance. This instance is included in the +monitoring plan named _SQL Servers Monitoring_. + +To examine the relevant data, they generated the **Account Permissions in SQL Server** report with +the filters set as follows: + +- **Monitoring plan:\_**SQL Servers Monitoring\_ +- **Snapshot date:\_**Current Session\_ +- **Item:\_**SQLSrv01\SQLServer2016\_ +- **User account:** _Corp\Ian.Harris_ + +The report revealed that this user has access permissions for the master database. To discover how +they were granted, click the link in the **Means granted** field. diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqldatabases.md b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqldatabases.md new file mode 100644 index 0000000000..171c57873e --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqldatabases.md @@ -0,0 +1,70 @@ +--- +title: "SQL Server Databases" +description: "SQL Server Databases" +sidebar_position: 30 +--- + +# SQL Server Databases + +This report lists the properties of databases and database snapshots hosted on the selected SQL +Server instance. Use this report for your SQL Server database inventory. + +![sqlserverdatabases_thumb_0_0](/images/auditor/10.7/admin/reports/types/stateintime/sqlserverdatabases_thumb_0_0.webp) + +## Reported data + +For each database, the following information is reported: + +- **Database name** +- **Restrict access** mode— as set in the database properties **>Options>State**. Possible values + are: _Multi_user_ (for _Multiple_), _Restricted_, _Single_. See + [this Microsoft article](https://docs.microsoft.com/en-us/sql/relational-databases/databases/database-properties-options-page?view=sql-server-ver15) + for details. +- **State**— as set in the database properties**>Options>State**. See + [this Microsoft article](https://docs.microsoft.com/en-us/sql/relational-databases/databases/database-states?view=sql-server-ver15) + for details +- **Size (MB)** +- **Shrink enabled**— as set in the database properties **>Options>Automatic>Auto Shrink**. See + [this Microsoft article](https://docs.microsoft.com/en-us/sql/relational-databases/databases/database-properties-options-page?view=sql-server-ver15) + for details. +- **Encryption status**— as set in the database properties **>Options>State**. See + [this Microsoft article](https://docs.microsoft.com/en-us/sql/relational-databases/databases/database-properties-options-page?view=sql-server-ver15#this-microsoft-article) + for details. +- **Last full backup date**— local date and time for the audited SQL Server instance. + +In some cases, the backup time will be displayed in server ticks. + +- **Data file path**— .MDF file path. +- **Log file path**— .LDF file path. + +For each database snapshot, the following information is reported: + +- **Database snapshot name** +- **Source database name** +- **Restrict access** mode — as set in the database properties at snapshot creation time. +- **State** — as set in the database properties at snapshot creation time. + +## Filters + +This report has the following filters: + +- **Monitoring plan** — name of the monitoring plan set to collect data from the SQL Server instance + hosting the required database. +- **Item** — name of the item within your monitoring plan, here — SQL Server instance. +- **Time zone** — time zone where Netwrix Auditor server is located, for example, UTC-08:00. This + value is filled in automatically. +- **Database name** — database to report on. Default is all databases on selected SQL Server + instance (_%_). + +## Considerations and recommendations + +Reporting for case-sensitive SQL Servers and databases is not supported. + +## Usage example + +Database administrators in the _Corp_ organization need to perform an inventory of the +**SQLSrv01\SQLServer2016** instance. This instance is included in the monitoring plan named _SQL +Servers Monitoring_. + +To examine the relevant data, they generated the **SQL Server Databases** report with the default +filters. diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md new file mode 100644 index 0000000000..810a6e9358 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md @@ -0,0 +1,102 @@ +--- +title: "SQL Server Means Granted" +description: "SQL Server Means Granted" +sidebar_position: 40 +--- + +# SQL Server Means Granted + +This report shows accounts with explicit and inherited permissions on the selected SQL Server object +and how those permissions were granted (directly, through role membership, etc.). Use this report to +investigate how permissions are granted. + +Supported object types and attributes are listed in the +[SQL Server](/docs/auditor/10.7/configuration/sqlserver/overview.md) section. + +To instruct Netwrix Auditor to collect data needed for this report, make sure that **Collect data +for state-in-time reports** option is selected in the monitoring plan properties. + +![sqlservermeansgranted](/images/auditor/10.7/admin/reports/types/stateintime/sqlservermeansgranted.webp) + +## Reported data + +The report has a summary section with general information on the selected SQL Server object, and the +details section presented in the table format. + +The summary section shows: + +- **User account** — name or SID of the account that has permissions on the selected object. + +- **Account type** —possible values: + - Windows Account + - Login SQL Authentication + - DB SQL User with password +- **Job title** —reported for Active Directory users as set in their corresponding attribute. If not + set, _``_ is reported. +- **Object path** —path to the monitored object, as formatted by Netwrix Auditor in the activity + records (see '_What_' field in the reports, search results and activity summaries). For example, + when reporting on the database hosted on selected SQL Server, the path will be as follows: + _Databases\database_name_. +- **Object type** — monitored object type; for the full list of supported object types, refer to + [SQL Server](/docs/auditor/10.7/configuration/sqlserver/overview.md). + +The detailed information under summary includes: + +- **Means granted** —how access permissions were granted to this account, e.g., _Direct permissions_ + or _Server role permissions_. +- **Granted to**— the security principal to which the access permissions were granted, e.g. + _sysadmin_. +- **Type**— the security principal type, e.g. _Server role_. +- **Grant** —the set of permissions granted to this account on the selected object by all means. + +Covering rules do not need to be applied, since **Grant** permissions are reported automatically +using these rules. + +## Filters + +This report has the following filters: + +- **Monitoring plan** — name of the monitoring plan set to collect data from the SQL Server you + need. +- **Time zone** — time zone where Netwrix Auditor server is located, for example, UTC-08:00. This + value is filled in automatically. +- **Snapshot date** —select the date of state-in-time snapshot you want to report on. By default, + the report includes data obtained during the latest data collection session (_Current Session_). + To report on other snapshots, make sure they are available through import. For details, see + **Manage historical snapshots** option description in the SQL Server monitoring plan + documentation. +- **Item**—name of the SQL Server instance monitored with selected monitoring plan. +- **Object path** —path to the monitored object, as formatted by Netwrix Auditor in the activity + records (see '_What_' field in the reports, search results and activity summaries). Wildcard (\*) + is supported. For example, to report on the database hosted on selected SQL Server, specify the + path as follows: _Databases\database_name_. +- **User account**—name or SID of the account that has permissions on the selected object. Default + is _%_ (all accounts). +- **Account type** —possible values: _Windows Account_, _Login SQL Authentication_, _DB SQL User + with password_. + +## Considerations and limitations + +- Reporting is not supported for the following objects: + - Case-sensitive SQL Servers and databases + - Read-only Filegroups + - Contained databases. +- Permissions assigned using **With Grant option** are not reported (see + [this Microsoft article](https://docs.microsoft.com/en-us/sql/t-sql/statements/grant-object-permissions-transact-sql?view=sql-server-ver15) + on that means). +- When calculating effective rights and permissions, the following will not be considered: + + - Ownership chaining + - Cross DB ownership chaining + - Trustworthy database + - SQL Server agent fixed database roles + +## Usage example + +When examining the **Object Permissions in SQL Server** report, database administrators in the +_Corp_ organization discovered that the accounts with Contractor job title has access to the +**SQLSrv01\SQLServer2016** instance. To explore how this could happen, they drilled down to the +**SQL Server Means Granted** report for that account by clicking the link in the **Means granted** +field for that account. + +![sqlservermeansgranteddetails](/images/auditor/10.7/admin/reports/types/stateintime/sqlservermeansgranteddetails.webp) diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlobjectpermissions.md b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlobjectpermissions.md new file mode 100644 index 0000000000..a76ea56ff8 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlobjectpermissions.md @@ -0,0 +1,111 @@ +--- +title: "Object Permissions in SQL Server" +description: "Object Permissions in SQL Server" +sidebar_position: 20 +--- + +# Object Permissions in SQL Server + +This report shows a detailed list of the effective permissions that accounts have on the selected +object. Use this report to review who has access to your SQL Server objects. + +Supported object types and attributes are listed in the +[SQL Server](/docs/auditor/10.7/configuration/sqlserver/overview.md) section. + +![objectpermissionssqlserver_thumb_0_0](/images/auditor/10.7/admin/reports/types/stateintime/objectpermissionssqlserver_thumb_0_0.webp) + +## Reported data + +The report has a summary section with general information on the selected SQL Server object, and the +details section presented in the table format. + +The summary section shows: + +- **Object path** — monitored object path as formatted by Netwrix Auditor in the activity records + (see '_What_' field in the reports, search results and activity summaries). For example, if + reporting on the database hosted on selected SQL Server, the path will be as follows: + _Databases\database_name_. +- **Object type** — monitored object type; for the full list of supported object types, refer to + [SQL Server](/docs/auditor/10.7/configuration/sqlserver/overview.md) topic. +- **Total account count** — total number of accounts that have access to this object. + +The detailed information under summary includes: + +- **User account** —name or SID of the account that has permissions on the selected object. +- **Account type** —possible values: + - Windows Account + - Login SQL Authentication + - DB SQL User with password +- **Means granted** —how access permissions were granted to this account, e.g., _Direct permissions_ + or _Server role permissions_. +- **Job title** —reported for Active Directory users as set in their corresponding attribute. If not + set, _``_ is reported. +- **Effective grant** —the effective set of permissions granted to this account on the selected + object. + +Covering rules do not need to be applied, since **Effective grant** permissions are reported +automatically using these rules. + +## Filters + +This report has the following filters: + +- **Monitoring plan** — name of the monitoring plan set to collect data from the SQL Server you + need. +- **Time zone** — time zone where Netwrix Auditor server is located, for example, UTC-08:00. This + value is filled in automatically. +- **Snapshot date** —select the date of state-in-time snapshot you want to report on. By default, + the report includes data obtained during the latest data collection session (_Current Session_). + To report on other snapshots, make sure they are available through import. For details, see + **Manage historical snapshots** option description in the + [SQL Server](/docs/auditor/10.7/admin/monitoringplans/sqlserver/overview.md) topic. +- **Item**—name of the SQL Server instance monitored with selected monitoring plan. +- **Object path** —path to the monitored object, as formatted by Netwrix Auditor in the activity + records (see '_What_' field in the reports, search results and activity summaries). Wildcard (\*) + is supported. For example, to report on the database hosted on selected SQL Server, specify the + path as follows: _Databases\database_name_. +- **Permissions** —access permissions which assignment you want to be reported for the selected + object. +- **Means granted** —how access permissions were granted to this account. You can select _Directly_, + _Inherited_, or both (default setting). +- **User account**—name or SID of the account that has permissions on the selected object. Default + is _%_ (all accounts). +- **Account type** —possible values: _Windows Account_, _Login SQL Authentication_, _DB SQL User + with password_. +- **Job title (Active Directory)** —reported for Active Directory users as set in their + corresponding attribute. Default is _%_ (any title). + +## Considerations and limitations + +- Reporting for case-sensitive SQL Servers and databases is not supported. +- The report will not show the RESTORE capability for the database owner. + +- When calculating effective rights and permissions, the following will not be considered: + - Ownership chaining + - Cross DB ownership chaining + - Trustworthy database + - SQL Server agent fixed database roles +- Some permissions may not be reported correctly due to the known issues. See Release Notes for + details. + +## Related reports + +- Clicking a User account link opens the + [Account Permissions in SQL Server](/docs/auditor/10.7/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md) report. +- Clicking a Means granted link opens the[SQL Server Means Granted](/docs/auditor/10.7/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md) report. + +## Usage example + +Database administrators need to discover who currently has access permissions to **FinReports** +database stored on the **SQLSrv01\SQLServer2016** instance. This instance is included in the +monitoring plan named _SQL Servers Monitoring_. + +To examine the relevant data, they need to generate **Object Permissions in SQL Server** report with +the filters set as follows: + +- **Monitoring plan:** _SQL Servers Monitoring_ +- **Snapshot date:** _Current Session_ +- **Item:** _SQLSrv01\SQLServer2016_ +- **Object path:** _Databases\FinReports_ + +All other filter values can be left default. diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlserveroverview.md b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlserveroverview.md new file mode 100644 index 0000000000..a61861eea0 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlserveroverview.md @@ -0,0 +1,21 @@ +--- +title: "SQL Server State-In-Time Reports" +description: "SQL Server State-In-Time Reports" +sidebar_position: 40 +--- + +# SQL Server State-In-Time Reports + +These are reports on the SQL Server state-in-time data, including roles, permissions and other +configuration settings: + +- [Account Permissions in SQL Server](/docs/auditor/10.7/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md) +- [Object Permissions in SQL Server](/docs/auditor/10.7/admin/reports/types/stateintime/sqlserveroverview/sqlobjectpermissions.md) +- [SQL Server Databases](/docs/auditor/10.7/admin/reports/types/stateintime/sqlserveroverview/sqldatabases.md) +- [SQL Server Means Granted](/docs/auditor/10.7/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md) +- [SQL Server-Level Roles](/docs/auditor/10.7/admin/reports/types/stateintime/sqlroles.md) + +To instruct Netwrix Auditor to collect data needed for these reports, make sure that **Collect data +for state-in-time reports** option is selected in the corresponding monitoring plan properties. See +the [Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) +topic for additional information. By default, data collection will run daily at 4 AM. diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/vmware.md b/docs/auditor/10.8/admin/reports/types/stateintime/vmware.md new file mode 100644 index 0000000000..7fb8af50a3 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/stateintime/vmware.md @@ -0,0 +1,126 @@ +--- +title: "VMware State-In-Time Reports" +description: "VMware State-In-Time Reports" +sidebar_position: 50 +--- + +# VMware State-In-Time Reports + +These are reports on the VMware vCenter state-in-time data, including account permissions and object +permissions: + +- Account Permissions in vCenter +- Detailed Account Permissions in vCenter +- Object Permissions in vCenter + +To instruct Netwrix Auditor to collect data needed for these reports, make sure that **Collect data +for state-in-time reports** option is selected in the corresponding monitoring plan properties. See +the [Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) +topic for more information. + +## Account Permissions in vCenter + +Shows vCenter objects that user or group has explicit or inherited permissions on (either granted +directly or through group membership). Use this report to see who has permissions to what and +prevent rights elevation. + +Supported object types and attributes are listed in the +[VMware](/docs/auditor/10.7/configuration/vmware/overview.md) topic. + +For this report to function properly, you must enable the **Collect data for state-in-time reports** +option for the data source in the monitoring plan settings. See the +[Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) +topic for more information. + +### Filters + +You can narrow your reporting scope using multiple filters. Review the full list of available +filters and values: + +- **Monitoring plan** — name of the monitoring plan set to collect data from the AD domain you need. +- Time zone — is set automatically. +- **Snapshot date** —select the date of state-in-time snapshot you want to report on. By default, + the report includes data obtained during the latest data collection session (_Current Session_). + To report on other snapshots, make sure they are available through import. For details, see + **Manage historical snapshots** option description in + [VMware](/docs/auditor/10.7/admin/monitoringplans/vmware/overview.md) +- Item — name of the item within your monitoring plan. +- Inherited — select whether to show inherited permissions or not. +- Role – select the name of the VMware role you want to see in the report. +- User (domain\account) – select a specific user to be displayed in the report. + +### Related Reports + +- Clicking a Object path link opens the Object Permissions in vCenter report. +- Clicking a Role link opens the detailed report on privileges for the account report. +- Clicking the Defined in link opens the object permissions on vCenter level report. + +## Detailed Account Permissions in vCenter + +Shows detailed list of privileges that the specified account has on the VMware objects. Use this +report to prevent unnecessary privileges assigned to custom roles. + +Supported object types and attributes are listed in the +[VMware](/docs/auditor/10.7/configuration/vmware/overview.md) topic. + +For this report to function properly, you must enable the **Collect data for state-in-time reports** +option for the data source in the monitoring plan settings. See the +[Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) +topic for more information. + +### Filters + +You can narrow your reporting scope using multiple filters. Review the full list of available +filters and values: + +- **Monitoring plan** — name of the monitoring plan set to collect data from the AD domain you need. +- Time zone — is set automatically. +- **Snapshot date** —select the date of state-in-time snapshot you want to report on. By default, + the report includes data obtained during the latest data collection session (_Current Session_). + To report on other snapshots, make sure they are available through import. For details, see + **Manage historical snapshots** option description in + [VMware](/docs/auditor/10.7/admin/monitoringplans/vmware/overview.md) +- Item — name of the item within your monitoring plan. +- Role – select the name of the VMware role you want to see in the report. +- Object path — path to the monitored object, as formatted by Netwrix Auditor in the activity + records. +- User (domain\account) – select a specific user to be displayed in the report. +- Inherited — select whether to show inherited permissions or not. + +## Object Permissions in vCenter + +Shows accounts with explicit or inherited permissions on a specific object in your vCenter (either +granted directly or through group membership). Use this report to see who has permissions to what +and prevent rights elevation. + +Supported object types and attributes are listed in the +[VMware](/docs/auditor/10.7/configuration/vmware/overview.md) topic. + +For this report to function properly, you must enable the **Collect data for state-in-time reports** +option for the data source in the monitoring plan settings. See the +[Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) +topic for more information. + +### Filters + +You can narrow your reporting scope using multiple filters. Review the full list of available +filters and values: + +- **Monitoring plan** — name of the monitoring plan set to collect data from the AD domain you need. +- Time zone — is set automatically. +- **Snapshot date** —select the date of state-in-time snapshot you want to report on. By default, + the report includes data obtained during the latest data collection session (_Current Session_). + To report on other snapshots, make sure they are available through import. For details, see + **Manage historical snapshots** option description in + [VMware](/docs/auditor/10.7/admin/monitoringplans/vmware/overview.md) +- Item — name of the item within your monitoring plan. +- Role – select the name of the VMware role you want to see in the report. +- **Object path** —path to the monitored object, as formatted by Netwrix Auditor in the activity + records . +- User (domain\account) – select a specific user to be displayed in the report. + +### Related Reports + +- Clicking a User account link opens the Account Permissions in vCenter report. +- Clicking a Role link opens the detailed report on privileges for the account report. +- Clicking the Defined in link opens the object permissions on vCenter level report. diff --git a/docs/auditor/10.8/admin/reports/types/userbehavior.md b/docs/auditor/10.8/admin/reports/types/userbehavior.md new file mode 100644 index 0000000000..5be4292bef --- /dev/null +++ b/docs/auditor/10.8/admin/reports/types/userbehavior.md @@ -0,0 +1,38 @@ +--- +title: "User Behavior and Blind Spot Analysis Reports" +description: "User Behavior and Blind Spot Analysis Reports" +sidebar_position: 40 +--- + +# User Behavior and Blind Spot Analysis Reports + +The User Behavior and Blind Spot Analysis report pack contains a set of smart reports that help you +identify vulnerabilities and easily answer questions such as: + +- Has there been any abnormal access to sensitive data? +- Is anyone accessing stale data? +- Have there been any unusual spikes in failed activity? +- Who is active outside of business hours and what are they doing? +- Has anyone put harmful files on corporate data storage? +- Are there any files likely to contain credentials, Social Security numbers, PHI or other sensitive + data? + +Analytics reports can be found in the User Behavior and Blind Spot Analysis folder under the +Predefined node. + +![userbehaviorblindspotanalysis_thumb_0_0](/images/auditor/10.7/admin/reports/types/userbehaviorblindspotanalysis_thumb_0_0.webp) + +If you are sure that some audit data is missing (e.g., you do not see information on your file +servers in reports and search results), verify that the Audit Database settings are configured and +that data is written to databases that reside on the default SQL Server instance. + +By default, Auditor allows generating reports and running interactive searches on data collected in +the last 180 days. If you want to investigate incidents that occurred more than 180 days ago, ask +your Auditor Global administrator to import that data from the Long-Term Archive. + +![failedactivitytrend_thumb_0_0](/images/auditor/10.7/admin/reports/types/failedactivitytrend_thumb_0_0.webp) + +Each report has a set of filters which help organize audit data in the most convenient way. See the +[View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information. You can also create a subscription to +any report you want to receive on a regular basis. See the +[Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/reports/video.md b/docs/auditor/10.8/admin/reports/video.md new file mode 100644 index 0000000000..d67a0ce5b6 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/video.md @@ -0,0 +1,32 @@ +--- +title: "Reports with Video" +description: "Reports with Video" +sidebar_position: 30 +--- + +# Reports with Video + +Netwrix Auditor can be configured to capture video of user activity on the monitored computers that +helps analyze and control changes made there. When you click a link, a video player opens and +playback of the recorded user activity starts, showing launched applications, actions, etc. + +To view reports with video, navigate to Reports → User Activity. + +In the report filters, select a monitoring plan you want to generate a report for. To review data +sources and items included in each plan, navigate to the Monitoring Plans section. + +![ReportsWithVideo](/images/auditor/10.7/admin/reports/alluseractivityvideo_thumb_0_0.webp) + +Each report has a set of filters which help organize audit data in the most convenient way. See the +[View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information. You can also create a subscription to any +report you want to receive on a regular basis. See the [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) +topic for additional information. + +Follow the steps to play a video: + +**Step 1 –** Navigate to **Reports** → **User Activity**. Select any report and click View. + +**Step 2 –** Click a link in the **When** column. + +To open User Activity report for the selected user or server, you can also click the link in the Who +and Where columns of the All Users Activity report. diff --git a/docs/auditor/10.8/admin/reports/view.md b/docs/auditor/10.8/admin/reports/view.md new file mode 100644 index 0000000000..9362e31f64 --- /dev/null +++ b/docs/auditor/10.8/admin/reports/view.md @@ -0,0 +1,85 @@ +--- +title: "View Reports" +description: "View Reports" +sidebar_position: 10 +--- + +# View Reports + +To view reports, users need the following: + +1. Sufficient access rights in Netwrix Auditor, which are provided through role assignment: + +- Users with _Reviewer_ role can generate the reports for their delegated scope only, and view them + in any Netwrix Auditor client or in a web browser. +- Users with _Global administrator_ or _Global reviewer_ role can also create subscriptions to + reports. + +2. The Browser role on the SSRS Report Server. See the + [SQL Server Reporting Services](/docs/auditor/10.7/requirements/sqlserverreportingservice.md) topic for + additional information. + +To view a report + +You can add any elements (a dashboard, report, alert, risk, etc.) to the Auditor Home screen to +access them instantly. See the [Navigation](/docs/auditor/10.7/admin/navigation/overview.md) and +[Customize Home Screen](/docs/auditor/10.7/admin/navigation/customizehome.md) topics for additional information. + +1. In Netwrix Auditor Home screen, click + ![reports_tile](/images/auditor/10.7/admin/reports/reports_tile.webp)on + the left, and in the tree on the left select the report you need. + +To speed up the process, you can use the **Search** field, entering the keyword to search by. + +![searchreports_thumb_0_0](/images/auditor/10.7/admin/reports/searchreports_thumb_0_0.webp) + +2. Click View button in the right pane. + +To learn how to subscribe to a report, see [Create Subscriptions](/docs/auditor/10.7/admin/subscriptions/create.md). + +## Troubleshooting + +If no data is displayed in the report, you may need to do the following: + +1. Make sure that the Audit Database settings are configured properly in the monitoring plan, and + that data is written to databases that reside on the default SQL Server instance. See the + [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topic for additional information. +2. For SSRS-based reports - verify that SSRS (SQL Server Reporting Services) settings are configured + properly. See the [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topic for additional + information. +3. For state-in-time reports - verify that the monitoring plan that provides data for the report has + the corresponding option selected. See the + [Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional information. + +## Customize Report with Filters + +Report filters allow you to display changes matching certain criteria. For example, you can filter +changes by audited domain or object type. Filtering does not delete changes, but modifies the report +view allowing you to see changes you are interested in. Filters can be found in the upper part of +the Preview Report page. + +To apply filters + +1. Navigate to Reports and generate a report. +2. Apply required filters to the report and click View Report. For example, you can update report + timeframe, change _Who_ and _Where_ values, apply sorting, etc. + +Wildcards are supported. For example, type _%corp\administrator%_ in the in the Who domain\user +field if you want to view changes made by the corp\administrator user only . + +Do not use % in the exclusive filters (e.g., Who (Exclude domain\user)). Otherwise, you will receive +an empty report. + +_escape_characters_ are not supported. + +The example below applies to the All Changes by Server report and shows the before and after views +of the report. The filters may vary slightly depending on the audited system and report type. + +The report without filtering: + +![allchangesserver](/images/auditor/10.7/admin/reports/allchangesserver.webp) + +The report below displays changes for all audited systems made by the CORP\Administrator user on the +ROOTDC2 domain controller for a month sorted by the action type. + +![allchangesserverfiltered](/images/auditor/10.7/admin/reports/allchangesserverfiltered.webp) diff --git a/docs/auditor/10.8/admin/riskassessment/_category_.json b/docs/auditor/10.8/admin/riskassessment/_category_.json new file mode 100644 index 0000000000..0f590a61bd --- /dev/null +++ b/docs/auditor/10.8/admin/riskassessment/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "IT Risk Assessment Overview", + "position": 90, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/riskassessment/dashboard.md b/docs/auditor/10.8/admin/riskassessment/dashboard.md new file mode 100644 index 0000000000..5cd54b4264 --- /dev/null +++ b/docs/auditor/10.8/admin/riskassessment/dashboard.md @@ -0,0 +1,71 @@ +--- +title: "IT Risk Assessment Dashboard" +description: "IT Risk Assessment Dashboard" +sidebar_position: 10 +--- + +# IT Risk Assessment Dashboard + +To access the Risk Assessment dashboard, click the corresponding tile in the main window. + +You can add any elements (a dashboard, report, alert, risk, etc.) to the Auditor Home screen to +access them instantly. See the [Navigation](/docs/auditor/10.7/admin/navigation/overview.md) and +[Customize Home Screen](/docs/auditor/10.7/admin/navigation/customizehome.md) topics for additional information. + +The IT risks are grouped into the following categories: + +- Users and Computers +- Permissions +- Data +- Infrastructure + +Within each category there are several key metrics identified by Netwrix industry experts who also +suggested formulas for calculating metrics values. Risks are assessed against these metrics and +displayed with the color indicators in accordance with the level: + +- High — red +- Medium — yellow +- Low — green + +![dashboard_thumb_0_0](/images/auditor/10.7/admin/riskassessment/dashboard_thumb_0_0.webp) + +After reviewing general risks assessment results in each category, you can drill-down to details +covered in the underlying report. To do so, double-click the selected metric or use the View Report +button. + +## Customizing Metrics for Your Organization + +Default threshold values for risk levels are set in accordance with recommendations of +Netwrixindustry experts, as described in the [How Risk Levels Are Estimated ](/docs/auditor/10.7/admin/riskassessment/levels.md) topic. They +can be, however, easily customized to reflect your organization's internal security policies and +standards. Follow the steps to customize the metrics. + +**Step 1 –** In the dashboard pane, select the metric you need and in the **Actions** section on the +right click Modify thresholds. + +**Step 2 –** In the displayed dialog, specify new threshold values for risk levels. + +**Step 3 –** Click OK to save the settings and close the dialog. + +![modify_thresholds_thumb_0_0](/images/auditor/10.7/admin/riskassessment/modify_thresholds_thumb_0_0.webp) + +Also, for several metrics the Customize risk indicators command is available. + +| For metric... | Use Customize risk indicators command to... | +| ----------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------- | +| File and folder names containing sensitive data | Edit the list of words you consider to be indicators of sensitive content if detected in the file or folder name. | +| Potentially harmful files on file shares | Edit the list of extensions you consider to be indicators of potentially harmful files detected in the file share. | +| Servers with inappropriate operating systems | Edit the whitelist of permitted OS versions. Any other OS version will be considered a risk factor. | +| Servers with unauthorized antivirus software | Edit the whitelist of permitted antivirus tools. Any other antivirus will be considered a risk factor. | +| Administrative group membership sprawl | Edit the whitelist of permitted accounts that can be the members of local administrative groups. Any other account will be considered a risk factor. | + +New settings will be applied/risk level thresholds will be refreshed after the next data collection +session. + +## Delivering Assessment Results as a File + +You can create a subscription to periodically receive IT risk assessment results by email or using a +file share. For that, in the dashboard window click Subscribe and configure the necessary settings. +See the [Create Subscriptions](/docs/auditor/10.7/admin/subscriptions/create.md) topic for additional information. + +You can also save current results to a PDF file by using the Export button in the dashboard window. diff --git a/docs/auditor/10.8/admin/riskassessment/levels.md b/docs/auditor/10.8/admin/riskassessment/levels.md new file mode 100644 index 0000000000..afe40e9b97 --- /dev/null +++ b/docs/auditor/10.8/admin/riskassessment/levels.md @@ -0,0 +1,88 @@ +--- +title: "How Risk Levels Are Estimated" +description: "How Risk Levels Are Estimated" +sidebar_position: 20 +--- + +# How Risk Levels Are Estimated + +As mentioned, dashboard and built-in reports give you a bird's eye view of the following high-risk +areas: + +- User and computer accounts +- Permissions +- Data +- Infrastructure + +Within each area, Netwrix Auditor industry experts identified risk categories and suggested +guidelines for them. For example, if the number of administrative accounts in your organization is +less than 2%, the risk should be considered insufficient. If the value is between 2% and 3%, the +risk is moderate, while any value that exceeds 3% should be considered a high risk. These guidelines +are based on security best practices and analytical data. + +The product compares your environment configuration against these metrics and assigns a risk level +to each category. The risk levels in each category determine the overall risk level for the area you +review. The following risk levels are used: + +| Risk level | Color | Comments | +| ---------- | ------ | ---------------------------------------------------------------------------- | +| Low | Green | Keep monitoring your environment on a regular basic. | +| Medium | Yellow | Proactively mitigate risks and adjust your workflows before a breach occurs. | +| High | Red | Respond to the threat as soon as possible. | + +Calculation formulas for each metric are provided in the table below. + +The following signs are used to define risk level intervals and threshold values: + +- > —More than, exclusive +- ≥ —This value or more, inclusive +- = —Equals +- < —Less than, exclusive +- ≤ —This value or less, inclusive +- [ ] —Inclusive interval +- ( ) —Exclusive interval +- [ ) or ( ] —Half-closed interval, where 1 value is inclusive and the other is exclusive or vice + versa. + +| Risk | Assessment formula | Default risk level thresholds | +| ----------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------- | +| Users and computers | | | +| User accounts with "Password never expires" | Number of enabled user accounts with **Password never expires** property set | - 0 — Low - [1 – 5] — Medium - > 5 — High | +| User accounts with "Password not required" | Number of enabled user accounts with Password not required property set Interdomain trust accounts are excluded from total count. | - 0 — Low - [1 – 2] — Medium - > 2 — High | +| Disabled computer accounts | Number of disabled computer accounts / Overall number of computer accounts (%) | - ≤ 1% — Low - (1% – 3%) — Medium - ≥ 3% — High | +| Inactive user accounts | Number of inactive but enabled users / Overall number of enabled user accounts (%) | - 0% — Low - (0% – 1%) — Medium - ≥ 1% — High | +| Inactive computer accounts | Number of inactive but enabled computer accounts / Overall number of enabled computer accounts (%) | - 0% — Low - (0% – 3%) — Medium - ≥ 3% — High | +| Servers with Guest account enabled\* | Number of servers with enabled Guest account / Overall number of servers (%) | - 0%— Low - (0% - 1%] — Medium - >1% — High | +| Servers that have local user accounts with **Password never expires**\* | Servers that have local user accounts with Password never expires / Overall number of servers (%) | - 0% — Low - >0% — High | +| Permissions | | | +| User accounts with administrative permissions | Number of administrative accounts / Overall number of accounts (%) | - ≤ 2%— Low - (2% – 3%) — Medium - ≥ 3% — High | +| Administrative groups | Number of administrative groups / Overall number of groups (%) | - ≤ 2% — Low - (2% – 3%) — Medium - ≥ 3% — High | +| Administrative group membership sprawl\* | Number of Windows servers whose Local Administrators Group members differ from those specified in the whitelist / Overall number of servers (%) | - 0% — Low - >0% — High | +| Empty security groups | Number of security groups without members / Overall number of security groups (%) | - ≤ 1% — Low - (1% – 2%) — Medium - ≥ 2% — High | +| Site collections with the **Get a link** feature enabled | Number of site collections with the Get a link feature enabled / Total number of site collections (%) | - ≤30% — Low - (30% - 60%) — Medium - ≥60% — High | +| Sites with the **Anonymous access** feature enabled | Number of sites with the Anonymous access feature enabled / Total number of sites (%) | - ≤30% — Low - (30% - 60%) — Medium - ≥60% — High | +| Site collections with broken inheritance | Number of site collections with broken inheritance / Total number of site collections (%) | - ≤30% — Low - (30% - 60%) — Medium - ≥60% — High | +| Sites with broken inheritance | Number of sites with broken inheritance / Total number of sites (%). | - ≤30% — Low - (30% - 60%) — Medium - ≥60% — High | +| Data | | | +| Files and folders accessible by Everyone | Files and folders shared with _Everyone_ security group /Overall number of shared folders (%) | - ≤ 1% — Low - (1% – 5%) — Medium - ≥ 5% — High | +| Sensitive data shared with Everyone | Number of sensitive files shared with the security groups "Everyone" and "Authenticated" / Total number of sensitive files (%). | - 0% — Low - (1% – 2%) — Medium - ≥ 2% — High | +| Sensitive files shared with external users | Number of sensitive files shared with external users / Total number of sensitive files (%). Sharing sensitive data with external users (authenticated users who are not members of your Office 365 organization) may lead to data leaks. To reduce the risk of data leaks and non-compliance, control data sharing to external users. | - ≤ 5% — Low - (5% – 10%) — Medium - ≥ 10% — High | +| Sensitive files shared with anonymous users | Number of sensitive files shared with anonymous users / Total number of sensitive files (%). Files may be shared with any users outside the Office 365 organization, so that any user with the link can access the file. This may lead to your sensitive content being highly exposed. To reduce the risk of data leaks, control data sharing to anonymous users. | - 0% — Low - (0% – 2%) — Medium - ≥ 2% — High | +| Sensitive documents accessible by Everyone | Number of sensitive documents accessible by Everyone or similar groups / Total number of sensitive documents (%). Only designated personnel should have access to your sensitive data. Thus, only public data should be accessible by the following predefined Office 365 groups: - Everyone - Everyone Except External Users - All Authenticated Users - All Forms Users - All Users | - 0% — Low - (0% – 5%) — Medium - ≥ 5% — High | +| File and folder names containing sensitive data | Number of files and folders with names that suggest they contain sensitive data | - 0 — Low - 1 — Medium - > 1 — High | +| Potentially harmful files on file shares | Number of detected harmful files | - 0 — Low - 1 — Medium - > 1 — High | +| Direct permissions on files and folders | Number of shared objects with at least one direct permission / Overall number of shared objects (%) | - 0% — Low - (0% – 5%) — Medium - ≥ 5% — High | +| Direct permissions to sensitive files | Number of sensitive files shared with users through direct permissions / Total number of shared files (%). | - 0% — Low - (0% - 3%) — Medium - ≥ 3% — High | +| Documents and list items accessible by Everyone and Authenticated Users | Number of documents and list items shared with the _Everyone_ and _Authenticated Users_ groups / Total number of documents and list items (%) | - ≤25% — Low - (25% - 50%) — Medium - ≥50% — High | +| Files shared with external users | Number of files that have been shared with external users / Total number of files (%). | - ≤ 10% — Low - (10% –25%) — Medium - ≥ 25% — High | +| Files shared with anonymous users | Number of files that have been shared with anonymous users / Total number of files (%). | - ≤ 5% — Low - (5% – 10%) — Medium - ≥ 10% — High | +| Documents and list items accessible by Everyone | Number of documents and list items accessible by Everyone or similar groups / Total number of documents and list items (%). | - ≤25% — Low - (25% - 50%) — Medium - ≥50% — High | +| Files that can be modified by external users or anonymous users | Number of files for which external users or anonymous users have "Edit" permissions / Total number of files (%). | - ≤ 5% — Low - (5% – 10%) — Medium - ≥ 10% — High | +| Infrastructure | | | +| Servers with inappropriate operating systems\* | Number of Windows servers with OS not included in the whitelist / Overall number of servers (%) | - 0% — Low - >0% — High | +| Servers with under-governed Windows Update configurations\* | Number of servers with Windows Update configuration source set to Local Settings AND/OR with auto-update set to Not configured or Disabled / Overall number of servers (%) | - 0% — Low - >0% — Medium | +| Servers with unauthorized antivirus software\* | Number of Windows servers with antivirus tools not included in the whitelist / Overall number of servers (%) | - 0% — Low - >0% — High | + +\* -here the _Overall number of servers_ means the number of Windows servers for which data +collection was a success. That said, this count may vary across the risks. In such a case, it is +recommended to examine Netwrix Auditor health log and omit lists. diff --git a/docs/auditor/10.8/admin/riskassessment/overview.md b/docs/auditor/10.8/admin/riskassessment/overview.md new file mode 100644 index 0000000000..bb12269a66 --- /dev/null +++ b/docs/auditor/10.8/admin/riskassessment/overview.md @@ -0,0 +1,95 @@ +--- +title: "IT Risk Assessment Overview" +description: "IT Risk Assessment Overview" +sidebar_position: 90 +--- + +# IT Risk Assessment Overview + +To help you identify configuration gaps in your environment and understand their impact on overall +security, Netwrix Auditor offers a dashboard with a number of metrics and drill-down reports on IT +risk assessment. They pinpoint the weak points in your IT infrastructure such as overly broad +assignment of access rights, loose password policies, and stale accounts. This information will help +you to take corrective measures in the required area, ensuring the IT risks stay in the safe zone. + +Risk assessment dashboard can be accessed by clicking the Risk assessment tile in the main window of +Netwrix Auditor. For details about using the dashboard, see +[IT Risk Assessment Dashboard](/docs/auditor/10.7/admin/riskassessment/dashboard.md). + +For details about metrics calculation, see [How Risk Levels Are Estimated ](/docs/auditor/10.7/admin/riskassessment/levels.md). + +## Providing Data for Risk Assessment + +To provide data for metrics and reports that belong to different categories, you will need to +configure monitoring plans that will process related data sources. These monitoring plans should +have at least one item added. See the following table for the certain reports: + +| Category | Report name | Collect data from | +| ----------------------------------------------------------------------- | --------------------------------------------- | ------------------- | +| Users and Computers | User accounts with "Password never expires" | AD domain | +| User accounts with "Password not required" | AD domain | | +| Disabled computer accounts | AD domain | | +| Inactive user accounts | AD domain | | +| Inactive computer accounts | AD domain | | +| Servers with Guest account enabled | Windows Server | | +| Servers that have local user accounts with "Password never expires" | Windows Server | | +| Permissions | User accounts with administrative permissions | AD domain | +| Administrative groups | AD domain | | +| Administrative group membership sprawl | Windows Server | | +| Empty security group | AD domain | | +| Site collections with the "Get a link" feature enabled | SharePoint farm | | +| Sites with the "Anonymous access" feature enabled | SharePoint farm | | +| Site collections with broken inheritance | SharePoint farm | | +| Sites with broken inheritance | SharePoint farm | | +| Data | Files and folders accessible by Everyone | Windows File Server | +| Sensitive data shared with Everyone \* | Windows File Server | | +| File and folder names containing sensitive data | Windows File Server | | +| Potentially harmful files on file shares | Windows File Server | | +| Direct permissions on files and folders | Windows File Server | | +| Direct permissions to sensitive files \* | Windows File Server | | +| Documents and list items accessible by Everyone and Authenticated Users | SharePoint farm | | +| Files shared with external users | Windows File Server | | +| Files shared with anonymous users | Windows File Server | | +| Documents and list items accessible by Everyone | Windows File Server | | +| Files that can be modified by external users or anonymous users | Windows File Server | | +| Infrastructure | Servers with inappropriate operating systems | Windows Server | +| Servers with under-governed Windows Update configurations | Windows Server | | +| Servers with unauthorized antivirus software | Windows Server | | + +**NOTE:** Risks marked with (\*) require both pre-configured NDC SQL database connection and NDC API +connection. To check configuration status, go to Settings > Sensitive Data Discovery. See +[Sensitive Data Discovery ](/docs/auditor/10.7/admin/settings/sensitivedatadiscovery.md)for more information. + +**NOTE:** Right after setting up the integration the drill down reports might be empty, while the +risk indicator is already completed. Please wait until Auditor gets all the information from Netwrix +Data Classification it needs. + +## Required Monitoring Plan Settings + +To provide data needed for risk assessment, the related monitoring plan must be set up to store data +to the audit database. + +Also, consider that all risk metrics and related reports require state-in-time data to be collected. +You can select the relevant option when creating a new monitoring plan, as described in the +[Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) section. For the exising plan, refer to +the procedure below. + +To verify the necessary settings of the existing plan + +1. Select the monitoring plan you need and click the **Edit** button. +2. In the right pane of the dialog displayed, select Edit settings from the Monitoring plan section. +3. Go to the Audit Database section and make sure that Disable security intelligence ... checkbox is + cleared. This will instruct Netwrix Auditor to store data to both Long-Term Archive and audit + database: + ![edit_mp_store_data_to_db_thumb_0_0](/images/auditor/10.7/admin/riskassessment/edit_mp_store_data_to_db_thumb_0_0.webp) +4. Save the settings and return to the window with the monitoring plan details. Make sure you have + at least one monitored item in the plan. If necessary, add an item. +5. Select the data source you need (for example, Active Directory) and click Edit data source from + the Data source section on the right. + ![edit_mp_open_ds_settings_thumb_0_0](/images/auditor/10.7/admin/riskassessment/edit_mp_open_ds_settings_thumb_0_0.webp) +6. Make sure that: + 1. Monitor this data source and collect activity data is switched ON. + 2. Collect data for state-in-time reports is switched ON. +7. Save the settings and close the dialog. + +![edit_data_source_sit](/images/auditor/10.7/admin/riskassessment/edit_data_source_sit.webp) diff --git a/docs/auditor/10.8/admin/search/_category_.json b/docs/auditor/10.8/admin/search/_category_.json new file mode 100644 index 0000000000..bd0de28493 --- /dev/null +++ b/docs/auditor/10.8/admin/search/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "View and Search Collected Data", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/search/filteradvanced.md b/docs/auditor/10.8/admin/search/filteradvanced.md new file mode 100644 index 0000000000..89c4f6f791 --- /dev/null +++ b/docs/auditor/10.8/admin/search/filteradvanced.md @@ -0,0 +1,79 @@ +--- +title: "Use Filters in Advanced Mode" +description: "Use Filters in Advanced Mode" +sidebar_position: 20 +--- + +# Use Filters in Advanced Mode + +Netwrix Auditor provides an advanced set of filters and match type operators that enable you to +customize your searches even more precisely. + +Switch to Advanced mode to review your current search in details and modify it if necessary. Click +Add to add a new filter to your search. + +Review the following for additional information: + +- Apply Additional Filters +- Search Conditions + +## Apply Additional Filters + +Expand the Filter list to find additional filters or filter values. The most commonly used filters +are described in [Use Filters in Simple Mode](/docs/auditor/10.7/admin/search/filtersimple.md). Review the following for additional +information: + +| Filter | Description | Example | +|------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Action | Limits your search to the selected actions only. Specify an action from the Value list or type it yourself. The Action filter in the Advanced mode contains actions besides those available in basic mode (added, modified, removed, and read). Reported actions vary depending on the data source and object type. | You are investigating suspicious user activity. You have already identified the intruder and now you want to see if any files were deleted or moved, and emails sent. Since you are interested in specific actions only, set the Action filter to Removed, Moved, and Sent. | +| Object type | Limits your search to objects of a specific type only. Specify an object type from the Value list or type it yourself. This filter modifies the What filter. The value list is prepopulated with the most frequent object types. | You noticed that some domain policies were changed and you want to investigate this issue. Your What filter is set to Policy, and so you keep receiving search results such as HiSecPolicy, \FS\Share\NewPolicy.docx, http://corp/sites/col1/Lists/Policy. These entries correspond to different object types and data sources. Since you are looking for GPOs only, select GroupPolicy from the Value list. | +| Data source | Limits your search to the selected data source only. Specify a data source from the Value list or type it yourself. | You are investigating suspicious user activity. A user specified in the Who filter made a lot of changes across your IT infrastructure, so the search results became difficult to review. Since you are only interested in the way this user's activity could affect your Active Directory domain and Exchange organization, set the Data source filter to Active Directory and Exchange to limit the search results. | +| Monitoring plan | Limits your search to the selected plan only. Specify the name from the Value list or type it yourself. | You are investigating suspicious user activity. A user specified in the Who filter made a lot of changes across your IT infrastructure, so the search results became difficult to review. Since you are only interested in the way this user's activity could affect file shares audited within a single plan, set the Monitoring plan filter to "My servers" to limit the search results. | +| Item | Limits your search to the selected item only. This filter can be helpful if you have several items of the same type in your monitoring plan (e.g., two Active Directory domains). Specify the name from the Value list or type it yourself. | Your monitoring plan is configured to track domains and includes your secured corporate domain and a domain for temporary employees. You are investigating who logged in your secured corporate domain outside business hours. You can set the Item filter to this domain name to limit the search results and exclude logons to computers from a less important domain. | +| Working hours | Limits your search results to entries that occurred within the specified hours. You can use this filter together with When if you need, for example, to search for activity in the non-business hours during the last week. | You are investigating an incident and want to know who accessed sensitive data outside business hours. You can set this filter as Not equal to and specify the time interval from 8:00 AM to 6:00 PM. Filtered data will include only operations that occurred outside this interval, that is, during non-business hours. | +| Data categories | Limits your search results to entries that contain sensitive data complying with a classification rule. You can use this filter together with Equal to PCIDSS to, for example, search for sensitive files that contain data regulated by the PCIDSS. | You are searching all documents containing cardholder data that can potentially be mapped with the PCIDSS compliance standard. You can set this filter as equal to and specify the value as PCIDSS. Filtered data will contain only files that match this criteria. This filter shows activity records collected from the following data sources: Windows File Servers, SharePoint, SharePoint Online. | +| Details | Limits your search results to entries that contain the specified information in the Details column. The Details column normally contains data specific to your target, e.g., assigned permissions, before and after values, start and end dates. This filter can be helpful when you are looking for a unique entry. | You discovered that a registry key was updated to "242464". Now you want to investigate who made the change and what the value was before. You can set the Details filter to 242464 to find this change faster. | +| Before* | Limits your search results to entries that contain the specified before value in the Details column. | You are investigating an incident in which the SAM-account-name attribute was changed for an account in your Active Directory domain. You can set the Before filter to the previous name (e.g., John2000) to find the new name faster. | +| After* | Limits your search results to entries that contain the specified after value in the Details column. | You are investigating a security incident and want to know who enabled a local Administrator account on your Windows Server. You can set the After filter to this account's current state (e.g., Enabled) to find this change faster. | +| Everywhere | Limits your search results to entries that contain the specified value in any column. | You are investigating a security incident. You have already identified the intruder (e.g., BadActor) and now you want to see all actions made by the intruder's account or with it. Since the intruder can be the actor (Who), the object (What), or can even show up in details, set the Everywhere filter to the intruder's name. | + +\* If you plan to audit an SQL Server for data changes and browse the results using 'Before' and +'After' filter values, make sure that the audited SQL database tables have a primary key (or a +unique column). Otherwise, 'Before' and 'After' values will not be reported. + +\* – If you plan to audit an SQL Server for data changes and browse the results using 'Before' and +'After' filter values, make sure that the audited SQL database tables have a primary key (or a +unique column). Otherwise, 'Before' and 'After' values will not be reported. + +## Search Conditions + +When you apply filters at search, you can specify operators that should be used as conditions for +data you want to retrieve and compare with the certain filter value. A condition can be, for +example, Contains, Starts with, and so on. + +![advancedfilters_thumb_0_0](/images/auditor/10.7/admin/search/advancedfilters_thumb_0_0.webp) + +The following operators can be used to specify search conditions: + +| Operator | Description | Example | +| ---------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Contains | This operator shows all entries that contain a value specified in the filter. | If you set the Who filter to contains _John_, you will get the following results: _Domain1\John_, _Domain1\Johnson_, _Domain2\Johnny_, _John@domain.com_. | +| Equals | This operator shows all entries with the exact value specified. Make sure to provide a full object name or path. To apply this operator when adding filters in the Simple mode, provide a value in quotation marks (e.g., _"Domain1\John"_). | Use this operator if you want to get precise results, e.g., _\\FS\Share\NewPolicy.docx_. | +| Not equal to | This operator shows all entries except those with the exact value specified. In the Search field in the Simple mode, this operator appears as not, e.g., Who not for the Who filter. | If you set the Who filter to not equal to _Domain1\John_, you will exclude the exact user specified and find all changes performed by other users, e.g., _Domain1\Johnson, Domain2\John_. | +| Starts with | This operator shows all entries that start with the specified value. | If you set the Who filter to starts with _Domain1\John_, you will find all changes performed by _Domain1\John_, _Domain1\Johnson_, and _Domain1\Johnny_. | +| Ends with | This operator shows all entries that end with the exact specified value. | If you set the Who filter to ends with _John_, you will find all changes performed by _Domain1\John_, _Domain2\Dr.John_, _Domain3\John_. | +| Does not contain | This operator shows all entries except those that contain the specified value. In the Search field in the Simple mode, this operator appears as not, e.g., Who not for the Who filter. | If you set the Who filter to does not contain _John_, you will exclude the following users: _Domain1\John_, _Domain2\Johnson_, and _Johnny@domain.com_. | +| In group | This operator relates to the Who filter. It instructs Netwrix Auditor to show only data for the accounts included in the specified group. | If you set the In group condition for Who filter to _Domain\Administrators_, only the data for the accounts included in that group will be displayed. | +| Not in group | This operator relates to the Who filter. It instructs Netwrix Auditor to show only data for the accounts not included in the specified group. | If you set the Not in group condition for Who filter to _Domain\Administrators_, only the data for the accounts not included in that group will be displayed. | + +When you add a new search filter, the Contains operator is used by default. + +To modify conditions for the selected filters, make sure you have switched to the Advanced search +mode. + +![advanced_thumb_0_0](/images/auditor/10.7/admin/search/advanced_thumb_0_0.webp) + +The image below represents the same search filters as they are shown in the Search field in the +Simple mode. + +![advancedexample_thumb_0_0](/images/auditor/10.7/admin/search/advancedexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/admin/search/filtersimple.md b/docs/auditor/10.8/admin/search/filtersimple.md new file mode 100644 index 0000000000..77444aab06 --- /dev/null +++ b/docs/auditor/10.8/admin/search/filtersimple.md @@ -0,0 +1,62 @@ +--- +title: "Use Filters in Simple Mode" +description: "Use Filters in Simple Mode" +sidebar_position: 10 +--- + +# Use Filters in Simple Mode + +Filters are used to narrow your search results. To create a unique set of filters, you can: + +- Add different filters to your search. Search results will be sorted by all selected filters since + they work as a logical conjunction (e.g., Who: Administrator and  Action: Added). +- Specify several values in the same filter to search for any of them (e.g., Action: Modified + or Action: Removed). To do this, select a filter again and specify a new value. + + Spaces do not separate values, so the whole expression will be included in your search as a + single value. For example, if you want to search for any of three names, do not enter **Anna + Mark Bill** but instead create a separate filter entry for each name. + +## Filter Types + +| Filter | Description | +| ------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Who | Filter data by user (initiator) account. Specify an account name (e.g., John) to find all entries containing it (e.g., `Domain1\John`, `Domain1\Johnson`, `Domain2\Johnny`, `John@domain.com`). For exact match, use quotation marks and provide a user name in Domain\User or UPN format (e.g., `Domain1\John` or `John@domain.com`) . | +| Action | Filter data by action type (Added, Removed, etc.) Select an action type from the list (Added, Removed, Modified, Read). For additional actions, navigate to the Advanced mode. See the [Use Filters in Advanced Mode](/docs/auditor/10.7/admin/search/filteradvanced.md) topic for additional information. | +| What | Specify an object name (e.g., _Policy_) to find all entries containing it (e.g., _HiSecPolicy_, `\\FileSserver\Share\NewFolder\NewPolicy.docx`, `http://sharepoint/sites/collection1/Lists/Policy`). Netwrix Auditor searches across all data sources. For an exact match, use quotation marks and provide an object name in the format that is typical for your data source (e.g., `HiSecPolicy`). | +| When | Filter data by the time interval when the change occurred. Specify a timeframe or provide a custom date range. Netwrix Auditor allows you to see changes that occurred today, yesterday, in the last 7 or 30 days, or within the specified date range. | +| Where | Specify a resource name (e.g., _Enterprise_) to find all entries containing it (e.g., `Enterprise-SQL`, `FileStorage.enterprise.local`). The resource name can be a FQDN or NETBIOS server name, Active Directory domain or container, SQL Server instance, SharePoint farm, VMware host, etc. Netwrix Auditor searches across all data sources. For an exact match, use quotation marks and provide a resource name in the format that is typical for your data source (e.g., `Enterprise-SQL`). | + +Follow the steps to add a filter to your search. + +**Step 1 –** Click a filter type icon. Enter a value you want to search for. + +![Account specification](/images/auditor/10.7/admin/search/add.webp) + +Alternatively, you can type a value directly into the Search field. + +- For exact match, use quotation marks. +- To further restrict your search, right-click the value and select a filter from the pop-up menu. + To search across all columns in the results view (everywhere—Who, What, Where, Action, etc.), + leave it as is. + +![Filter](/images/auditor/10.7/admin/search/addsuggestions.webp) + +**Step 2 –** Click Search to apply your filters. By default, all entries that contain the filter +value are shown. + +## Modifying and Removing Filters + +| To... | Do... | +| ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Modify filter | Double-click the filter and type a new value. ![Filter new value](/images/auditor/10.7/admin/search/search_modify_filter.webp) If you need to modify the When filter, delete it and add a new value, or navigate to the Advanced mode (Simple mode does not support its modification). | +| Remove filter | Click the **Close** icon next to it. | + +## Exporting and Importing Filters + +To export or import filters as regular expressions, use the **Tools** menu commands: + +| To... | Use... | +| ------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Export | **Copy search** — copy the search filters that are currently applied to your search. This can be helpful if you want to share your search with a colleague (e.g., by pasting it in an email) or to modify a saved search query with your current filters. | +| Import | **Paste search** — paste the search filters you copied before. These can be filters copied from a previous search or those someone shared with you. | diff --git a/docs/auditor/10.8/admin/search/overview.md b/docs/auditor/10.8/admin/search/overview.md new file mode 100644 index 0000000000..0fbf4a7c33 --- /dev/null +++ b/docs/auditor/10.8/admin/search/overview.md @@ -0,0 +1,168 @@ +--- +title: "View and Search Collected Data" +description: "View and Search Collected Data" +sidebar_position: 40 +--- + +# View and Search Collected Data + +Netwrix Auditor delivers complete visibility into your IT infrastructure. Its convenient interactive +search interface enables you to investigate incidents and browse data collected across the entire IT +infrastructure. When running a search, you are not limited to a certain data source, change type, or +object name. You can create flexible searches that provide you with precise results on _who_ changed +_what_, and _when_ and _where_ each change was made. + +To review collected data, you must be assigned the **Global administrator** or **Global reviewer** +Netwrix Auditor role. Users with the **Reviewer** role on a certain plan or folder have limited +access to data—only within their delegated scope. See the +[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional +information. + +This functionality is currently available for the following data sources: + +- Active Directory +- Microsoft Entra ID (formerly Azure AD) +- Exchange +- Exchange Online +- File Servers (Windows File Servers, EMC, and NetApp) +- Network Devices +- Oracle Database +- SharePoint +- SharePoint Online +- SQL Server +- VMware +- Windows Server +- Group Policy +- Logon Activity +- User Activity (Video) +- Netwrix API—data imported to the Audit Database from other sources using Netwrix Auditor + Integration API +- Netwrix Auditor Self-Audit +- Netwrix Data Classification. See + [Sensitive Data Discovery ](/docs/auditor/10.7/admin/settings/sensitivedatadiscovery.md)for more information. + +Netwrix Auditor executes interactive search queries against data stored in the audit databases, that +is, on data collected in the last 180 days (default retention period). If you want to investigate +incidents that occurred more than 180 days ago, then you should import that data from the Long-Term +Archive. See [Investigations](/docs/auditor/10.7/admin/settings/investigations.md) topic for additional information. + +## Browsing Your Audit Data + +On the main Netwrix Auditor page, click +![search_tile](/images/auditor/10.7/admin/search/search_tile.webp) +on the left. + +You can add any elements (a dashboard, report, alert, risk, etc.) to the Auditor Home screen to +access them instantly. See the [Navigation](/docs/auditor/10.7/admin/navigation/overview.md) and +[Customize Home Screen](/docs/auditor/10.7/admin/navigation/customizehome.md) topics for additional information. + +There you can use the UI controls to run the variety of search queries that will fecth you exactly +the data you need. + +- To view all audit data stored in all Audit Databases by all monitoring plans, click **Search** + button in the center. + + Be aware that this type of search query may take time due to a large amount of data. Thus, it is + recommended that instead of retrieveing a massive data set, you pre-configure your search query + using filters. + + By default, Netwrix Auditor shows only the top 2,000 entries in the search results. + +- To pre-configure your search query before you click Search, you can add filters. Then the search + query will return only data matching your filtering criteria. See + [Use Filters in Simple Mode](/docs/auditor/10.7/admin/search/filtersimple.md) for details. + + You can also use advanced filtering capabilities based on regular expressions (they involve + filter fields and conditions). See [Use Filters in Advanced Mode](/docs/auditor/10.7/admin/search/filteradvanced.md) for + details. + + ![search_filter](/images/auditor/10.7/admin/search/search_filter.webp) + +- By default, search results are open in the same window, so the subsequent search results will + overwrite the previous search results. To view them in different windows, click Open in new + window. +- In addition, you can customize your view by selecting columns to display. + +Use search results for your own needs: save, share, create search-based alerts, subscribe to +periodic delivery of search query results, etc. See Make Search Results Actionnable for more +information. + +![search_nofilter_1](/images/auditor/10.7/admin/search/search_nofilter_1.webp) + +You can also use the **Search** window to examine details for the selected activity record, or watch +a video recording (for User Ativity data). + +### Examining Activity Record in Detail + +To work with a certain activity record: + +1. Select the activity record which details you want to review. Its key fields and user (initiator) + account details will be displayed in the right pane. +2. To display all fields and copy them if necessary, click the Full screen... link on the right. + +If you are examining User Activity entries, click the Show video... link below the entry. Review +details and play a video by clicking the Show video on the right. + +3. You can instruct Netwrix Auditor to include or exclude this activity record from the search query + results, as described in the Include and Exclude Data + +## Customize View + +Having reviewed the search results, you can modify the way the data is presented, for example, hide +a column or change its position, or hide the Details pane on the right. + +To modify view: + +1. Navigate to Tools +2. Click Select columns. The dialog that opens shows the search columns currently selected for + display. +3. Check the columns you want to include and clear unwanted ones. +4. Set the order of displayed columns using arrows on the right. +5. Click **Hide details** if you want to hide the Details pane with the activity record and user + (initiator) account details. +6. To restore the original view configuration, click Restore Default. + +## Include and Exclude Data + +Having reviewed the search results, you can proceed with your investigation by excluding or +including data. Excluding a filter value is helpful if you want to skip it in your search results +(e.g., a service account or trusted user account). On the other hand, including a filter value +ensures that only the entries containing it will be shown (e.g., a suspicious user or potentially +violated folder). + +To include or exclude data + +1. Review your search results and locate an entry with data you want to exclude or include. +2. Select this entry and review details. +3. Click Exclude from search or Include to search and specify a filter value from the list. +4. Click Search to update the search results. + +Your exclusions and inclusions will automatically be added to the search filters, limiting the +amount of data shown in the results pane. + +## Make Search Results Actionnable + +You can export your search query results, save them as a custom report, subscribe to periodic +delivery of this search results, create a search-based alert. + +Navigate to Tools in the top right corner of the Search window and select the required action. + +| Use... | To... | +| -------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Save as report | Save your search results as custom reports. | +| Create alert | Create an alert with the same set of filters you have just specified for your search. | +| Subscribe | Create subscription for periodic delivery of the search query results. Subscription to the search results is not the same as creation of a custom report using this search. | +| Export data | Save your search results as a _.pdf_ or _.csv_ file. All audit data from your search query results will be exported (unlike the interactive view which is limited to the top 2,000 entries). When exporting large amount of data (e.g., changes made by a newly retired employee during the last 8 months), it is recommended to use _.csv_ format. | + +## Troubleshooting Tips + +If you do not see the expected information in search results, try the following: + +- Verify the Audit Database retention and SQL Server settings. +- Make sure that data collection is configured properly in the monitoring plan settings. +- Check the required audit settings in your monitored infrastructure. +- Verify the data collecting account. + +See next: + +- [Use Filters in Advanced Mode](/docs/auditor/10.7/admin/search/filteradvanced.md) diff --git a/docs/auditor/10.8/admin/settings/_category_.json b/docs/auditor/10.8/admin/settings/_category_.json new file mode 100644 index 0000000000..65a7c8c8dc --- /dev/null +++ b/docs/auditor/10.8/admin/settings/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Netwrix Auditor Settings", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/settings/about.md b/docs/auditor/10.8/admin/settings/about.md new file mode 100644 index 0000000000..4ad32e6b7c --- /dev/null +++ b/docs/auditor/10.8/admin/settings/about.md @@ -0,0 +1,16 @@ +--- +title: "About Netwrix Auditor" +description: "About Netwrix Auditor" +sidebar_position: 100 +--- + +# About Netwrix Auditor + +The About Netwrix Auditor tab contains complete information on the product: + +| Option | Description | +| --------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------- | +| Netwrix Auditor | Review current version of Netwrix Auditor. | +| Check for updates | Select to check for available updates now.  | +| Check for updates automatically and show notifications about new product versions | Netwrix Auditor periodically checks for updates so you don’t have to. When an update is available, a user is immediately noticed. | +| Getting Help | Click the link to visit Netwrix Auditor Help Center and access configuration guidelines and step-by-step instructions online. | diff --git a/docs/auditor/10.8/admin/settings/auditdatabase.md b/docs/auditor/10.8/admin/settings/auditdatabase.md new file mode 100644 index 0000000000..297bc451df --- /dev/null +++ b/docs/auditor/10.8/admin/settings/auditdatabase.md @@ -0,0 +1,84 @@ +--- +title: "Audit Database" +description: "Audit Database" +sidebar_position: 20 +--- + +# Audit Database + +If you want to generate reports and run interactive search queries, you should configure Auditor to +store collected data to the SQL Server database (Audit Database). By default, each monitoring plan +will use a dedicated database to store data. So, there are two types of database settings: + +- Global settings that apply to all Audit Databases: + + - Default SQL Server instance hosting all databases + - SQL Server Reporting Services (SSRS) settings + - Retention settings + + Usually, initial global settings are configured when you create a first monitoring plan. They + become the defaults and appear on the **Settings** > **Audit Database** tab. If you have not + specified the default settings before, click Configure. + +- Specific settings for each dedicated database. You can configure specific database storage + settings for each monitoring plan individually. For that, use the **Monitoring Plan** wizard or + navigate to the settings. (Global settings appear as default values there, and you can modify them + if needed.) See the [Fine-Tune Your Plan and Edit Settings](/docs/auditor/10.7/admin/monitoringplans/finetune.md)  topic + for additional information. + +Follow the steps to review and update global Audit Database settings: + +**Step 1 –** Navigate to **Settings** > **Audit Database**. + +**Step 2 –** Click **Modify** to edit the settings. + +![audit_db_settings_thumb_0_0](/images/auditor/10.7/admin/settings/audit_db_settings_thumb_0_0.webp) + +**Step 3 –** Specify the following database storage settings: + +| Option | Description | +| -------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Default SQL Server settings | Specify SQL Server instance name and connection settings. | +| Database retention | Configure retention if you want audit data to be deleted automatically from your Audit Database after a certain period of time. These settings cannot be modified for a certain plan. | +| SQL Server Reporting Services settings | Define the Report Server URL and account used to upload data to Report Server. These settings cannot be modified for a certain plan. | + +## Configure Default SQL Server Settings + +On the **Settings** > **Audit Database** tab, review settings and click Modify under the Default SQL +Server settings section. + +| Option | Description | +| ------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| SQL Server instance | Specify the name of the SQL Server instance to store audit data. If you have more than one Auditor Server running in your network, make sure to configure them to use different SQL Server instances. The same SQL Server instance cannot be used to store audit data collected by several Auditor  Servers. | +| Authentication | Select the authentication type you want to use to connect to the SQL Server instance: - Windows authentication - SQL Server authentication | +| User name | Specify the account to be used to connect to the SQL Server instance. This account must be granted the **database owner (db_owner)** role and the dbcreator server role. | +| Password | Enter a password. | + +**NOTE:** If you want to use Group Managed Service Account (gMSA) to access the SQL Server instance +hosting the database, consider that in this case Netwrix Auditor will not be able to generate +SSRS-based reports (due to the following Microsoft article: +[Configure the Unattended Execution Account (Report Server Configuration Manager)](https://docs.microsoft.com/en-us/sql/reporting-services/install-windows/configure-the-unattended-execution-account-ssrs-configuration-manager?view=sql-server-ver15). + +## Configure Database Retention + +On the **Settings** > **Audit Database** tab, review settings and click Modify under the Database +retention section. + +These settings are global, that is, they will be applied to all audit databases. + +| Option | Description | +| ------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Clear stale data when a database retention period is exceeded | Use this option if you want audit data to be deleted automatically from the corresponding database after a certain period of time. | +| Store audit data in database for | Specify the retention period for storing audit data in the database. Default retention period is **180 days**. When the retention period is over, data will be deleted automatically. | + +## Configure SSRS Settings + +On the Settings > Audit Database tab, review settings and click Modify under the SQL Server +Reporting Services settings section. + +| Option | Description | +| ------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Report Server URL | Specify the Report Server URL. Make sure that the resource is reachable. | +| Report Manager URL | Specify the Report Manager URL. Make sure that the resource is reachable. | +| User name | Specify the account to connect to SSRS. Use the following format: _domain\username_ or _hostname\username_ Workgroup format (_.\username_) is not supported. Use _hostname\username_ instead. Make sure this account is granted the Content Manager role on the Report Server. See the [SQL Server Reporting Services](/docs/auditor/10.7/requirements/sqlserverreportingservice.md) topic for additional information. | +| Password | Enter a password. | diff --git a/docs/auditor/10.8/admin/settings/custombrand.md b/docs/auditor/10.8/admin/settings/custombrand.md new file mode 100644 index 0000000000..104b8d6554 --- /dev/null +++ b/docs/auditor/10.8/admin/settings/custombrand.md @@ -0,0 +1,115 @@ +--- +title: "Customize Branding" +description: "Customize Branding" +sidebar_position: 110 +--- + +# Customize Branding + +Netwrix Auditor allows customizing look and feel of your reports, search subscriptions and exported +search results—you can skip Netwrix logo, add your company logo and title. However, users are not +empowered to customize layout or color scheme. + +Review the following for additional information: + +- Customize Branding in AuditIntelligence Outputs +- Customize Branding in Reports + +## Customize Branding in AuditIntelligence Outputs + +You can customize branding for the following AuditIntelligence outputs: + +- Search results delivered as pdf file in the search subscription email; +- Search results exported to pdf file; +- Risk Assessment dashboard exported to pdf file; +- Risk Assessment dashboard delivered in the subscription email; +- Overview dashboard exported to pdf file; +- Overview dashboard delivered in the subscription email. + +Please note the following rebranding limitations and requirements to the logo file: + +1. Make sure you have full Netwrix Auditor installation: Netwrix Auditor Server and Client to enable + rebranding. +2. Since Netwrix applies company's logo as is, keep in mind reasonable limitations of your logo + dimensions. You can find examples of appropriate logo files in the rebranding archive (file + LLogo.webp). Re-size your logo and verify that subscriptions emails and pdf files look fine after + rebranding. +3. Only PNG images can be used as logo files. +4. Endure that image file is located in the default directory or custom folder. Consider the + following: + + - For subscription emails, just put the logo file to _%ALLUSERSPROFILE%\Netwrix + Auditor\Branding_ and run the script to update email look and feel. + - For exported pdf files, make sure that the logo file is located in the default directory for + each user that is going to work with exported search results, Risk Assessment and Overview + dashboards. Otherwise, specify custom path to logo file. Default path to logo for exported + files is _%LOCALAPPDATA%\Netwrix Auditor\Audit Intelligence\Resources_. + +Follow the steps t o customize branding + +**Step 1 –** On the computer where the Netwrix Auditor Server is installed, navigate to +_%ALLUSERSPROFILE%\Netwrix Auditor_ and locate the Rebranding.zip package. + +**Step 2 –** Unzip the package to any folder on the computer where Netwrix Auditor Server is +installed. + +**Step 3 –** Run SearchRebranding.ps1 considering the following: + +- Use default paths to logo files—Run the script and type your company name as the `report_title`. +- Use custom paths to logo files—run the script as follows: + + `SearchRebranding.ps1 -subscriptions_logo_path -export_logo_path ` + +**Step 4 –** Generate any test subscription email or export a dashboard to pdf file to verify that +rebranding applied. + +To restore original look and feel, run the script and replace"_True_" with "_False_" in the +"_enabled_" section. + +## Customize Branding in Reports + +By default, Netwrix Auditor reports look as follows: + +![All Logon Activity](/images/auditor/10.7/admin/settings/report_rebranding_thumb_0_0.webp) + +Report branding is customized on Netwrix Auditor Server side that means that all clients connected +to this server will have the same look and feel for reports. + +Follow the steps to customize branding. + +**Step 1 –** On the computer where Auditor Server resides, navigate to _C:\Program Data\Netwrix +Auditor\Rebranding_. + +**Step 2 –** Right-click the Rebranding.ps1 script and select Edit. Windows PowerShell ISE will +start. + +**Step 3 –** Review the script and provide parameters. + +| Parameter | Description | +| --------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------- | +| UseIntegratedSecurity | Defines whether to use Windows Authentication when connecting to SQL Server instance. Enabled by default. | +| UserName | Defines a username used to connect to SQL Server instance in case of SQL Server Authentication. Leave blank if you use Windows Authentication. | +| Password | Defines a password used to connect to SQL Server instance in case of SQL Server Authentication. Leave blank if you use Windows Authentication. | +| SQLServerInstance | Defines a SQL Server instance where your Audit Database resides. By default, local unnamed instance is selected. | +| DBName | By default, the database responsible for Netwrix Auditor look and feel is Netwrix_CommonDB. If you renamed this database, provide a new name. | +| HeaderImageFullPath | Defines a full path to the png image with the new report header (product logo). Supported size: 21x21px (WxH). | +| FooterImageFullPath | Defines a full path to the png image with the new report footer (logo). Supported size: 105x22px (WxH). | +| HeaderText | Defines text in the report header. Max length: 21 characters. | +| FooterURL | Defines URL that opens on clicking the report logo in the footer. | + +**Step 4 –** Click the arrow button to run the script. The user who runs the script is granted the +db_owner role on the Netwrix_CommonDB database. + +After running the script, start the Netwrix Auditor client and generate a report. The branding will +be updated. + +![report_rebranding_result_thumb_0_0](/images/auditor/10.7/admin/settings/report_rebranding_result_thumb_0_0.webp) + +Follow the steps to restore original look. + +**Step 1 –** On the computer where Auditor Server resides, navigate to the script location. + +**Step 2 –** Right-click a script and select Edit. Windows PowerShell ISE will start. + +**Step 3 –** Run the script as it is. The user who runs the script must be granted the db_owner role +on the Common_DB database in a local unnamed SQL Server configured as default for Netwrix Auditor. diff --git a/docs/auditor/10.8/admin/settings/general.md b/docs/auditor/10.8/admin/settings/general.md new file mode 100644 index 0000000000..ccf7059caa --- /dev/null +++ b/docs/auditor/10.8/admin/settings/general.md @@ -0,0 +1,20 @@ +--- +title: "General" +description: "General" +sidebar_position: 10 +--- + +# General + +On the General tab you can configure global Netwrix Auditor settings, e.g., self-audit, tags, +accounts and passwords. + +Review the following for additional information: + +| Option | Description | +| --------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Self-audit | Select to enable data collection for product self-auditing. Self-audit allows tracking every change to monitoring plan, data source, and audit scope and details about it (before-after values) so that you know that scope of data to be audited is complete and changed only in line with workflows adopted by our organization. Review the following for additional information: - [Netwrix Auditor Operations and Health](/docs/auditor/10.7/admin/healthstatus/overview.md) | +| Netwrix Auditor  usage statistics | It is optional on your part to help Netwrix improve the quality, reliability, and performance of Netwrix products and services. If selected, Netwrix collects statistical information on how the Licensee uses the product in accordance with applicable law. Visit [Netwrix Corporation Software License Agreement](https://www.netwrix.com/eula.html) for additional information about the program. You can review a sample piece of data if you are interested in data acquired by Netwrix. | +| Tags | Netwrix Auditor  allows you to apply tags when creating an alert. With alerts, you can distinguish one alert from another, create groups of similar alerts, etc. The Tags page contains a complete list of alerts that were ever created in the product. See the [Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) topic for additional information. Currently, you cannot assign or create tags on this page. To apply tags to an alert, navigate to alert settings and locate the Apply tags section on the General tab. See the [Create Alerts](/docs/auditor/10.7/admin/alertsettings/create/create.md) topic for additional information. | +| Account and passwords | Netwrix Auditor  allows you to assign different accounts for monitoring plans. Click **Manage** to review the full list of accounts and associated auditing scope. You can also change accounts' password if necessary. | +| Access Reviews | Netwrix Auditor supports integration with Netwrix Auditor Access Reviews, which enables business owners to conduct resource and group reviews and recommend changes. See the [Access Reviews](/docs/auditor/10.7/accessreviews/accessreviews.md) topic for additional information. | diff --git a/docs/auditor/10.8/admin/settings/integrations.md b/docs/auditor/10.8/admin/settings/integrations.md new file mode 100644 index 0000000000..1bd5124c05 --- /dev/null +++ b/docs/auditor/10.8/admin/settings/integrations.md @@ -0,0 +1,30 @@ +--- +title: "Integrations" +description: "Integrations" +sidebar_position: 60 +--- + +# Integrations + +Netwrix Auditor Integration API—endless integration, auditing and reporting capabilities. + +The Netwrix Auditor Integration API provides access to audit data collected by Netwrix Auditor +through REST API endpoints. According to the RESTful model, each operation is associated with a URL. +Integration API provides the following capabilities: + +- Data in: Solidify security and meet regulatory compliance standards by enabling visibility into + what is going on in any third-party application. +- Data out: Further automate your business processes, IT security and operations workflows by + enriching third-party solutions with actionable audit data. + +Netwrix Auditor Integration API is enabled by default and communicates through port 9699. Navigate +to Settings → Integrations to adjust port settings and review information about possible +integrations. + +Netwrix recommends adding a special data source to your monitoring plan—Netwrix API. + +In Netwrix Auditor 9.0, Netwrix has updated API schemas. See the +[Compatibility Notice](/docs/auditor/10.7/api/compatibility.md) topic for additional information. + +To learn more about Integration API capabilities, refer to the +[Integration API](/docs/auditor/10.7/api/overview.md). diff --git a/docs/auditor/10.8/admin/settings/investigations.md b/docs/auditor/10.8/admin/settings/investigations.md new file mode 100644 index 0000000000..40e6561a69 --- /dev/null +++ b/docs/auditor/10.8/admin/settings/investigations.md @@ -0,0 +1,45 @@ +--- +title: "Investigations" +description: "Investigations" +sidebar_position: 40 +--- + +# Investigations + +By default, the Audit Database stores data up to 180 days. Once the retention period is over, the +data is deleted from the Audit Database and becomes unavailable for reporting and search. + +Depending on your company requirements you may need to investigate past incidents and browse old +data stored in the Long-Term Archive. Netwrix Auditor allows importing data from the Long-Term +Archive to a special "investigation" database. Having imported data there, you can run searches and +generate reports with your past data. + +![investigate](/images/auditor/10.7/admin/settings/investigate.webp) + +To import audit data with the Archive Data Investigation wizard + +**NOTE:** You must be assigned the Global administrator role to import investigation data. To view +investigation data, you must be assigned the Global administrator or Global reviewer role. See +[Assign Roles](/docs/auditor/10.7/admin/monitoringplans/delegation.md#assign-roles) topic for more information. + +1. Navigate to Settings → Investigations. +2. Complete your SQL Server settings. + + | Option | Description | + | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | + | SQL Server Instance | Specify the name of the SQL Server instance to import your audit data to. If you want to run searches and generate reports, select the same SQL Server instance as the one specified on Settings → Audit Database page. See [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topic for more information. | + | Database | Select import database name. By default, data is imported to a specially created the Netwrix_ImportDB database but you can select any other. Do not select databases that already contain data. Selecting such databases leads to data overwrites and loss. | + | Authentication | Select the authentication type you want to use to connect to the SQL Server instance: - Windows authentication - SQL Server authentication | + | User name | Specify the account to be used to connect to the SQL Server instance. This account must be granted the **database owner (db_owner)** role and the dbcreator server role. | + | Password | Enter a password. | + | Clear imported data | Select to delete all previously imported data. To prevent SQL Server from overfilling, it is recommended to clear imported data once it is longer needed. | + +3. Review your New investigation configuration. Click Configure to specify the import scope. + + | Option | Description | + | ---------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | + | From... To... | Specify the time range for which you want to import past audit data. | + | Data sources | Select data sources whose audit data you want to import to the Audit Database. | + | Monitoring plans | Select monitoring plans whose audit data you want to import to the Audit Database. Netwrix Auditor lists monitoring plans that are currently available in the product configuration. Select All to import audit data for all monitoring plans, including those that were removed from the product (or removed and then recreated with the same name—Netwrix Auditor treats them as different monitoring plans). For example, you had a monitoring plan corp.local used for auditing Active Directory. You removed this monitoring plan, but its audit data was preserved in the Long-Term Archive. Then, you created a new monitoring plan for auditing Exchange and named it corp.local again. Its data is also stored in the Long-Term Archive. Netwrix Auditor treats both corp.local monitoring plans—the removed and the current—as different. If you select corp.local in the monitoring plans list, only Exchange data will be imported to Audit Database (as it corresponds to the current monitoring plan configuration). To import Active Directory data from the removed monitoring plan, select All monitoring plans. | + +4. Click Run. diff --git a/docs/auditor/10.8/admin/settings/licenses.md b/docs/auditor/10.8/admin/settings/licenses.md new file mode 100644 index 0000000000..4cb6cc8f8b --- /dev/null +++ b/docs/auditor/10.8/admin/settings/licenses.md @@ -0,0 +1,85 @@ +--- +title: "Licenses" +description: "Licenses" +sidebar_position: 90 +--- + +# Licenses + +The Licenses tab allows you to review the status of your current licenses, update them and add new +licenses. To learn about Netwrix Auditor licenses, refer to the following Netwrix Knowledge Base +article: [Netwrix Auditor Licensing FAQs](https://www.netwrix.com/kb/2113). + +Follow the steps to update or add a license. + +**Step 1 –** Click **Update**. + +**Step 2 –** In the dialog that opens, do one of the following: + +- Select Load from file, click Browse and point to a license file received from your sales + representative. +- Select Enter manually and type in your company name, license count and license codes. + +## Notes for Managed Service Providers + +Being a Managed Service Provider (MSP) you are supplied with a special MSP license that allows you +to deploy Netwrix Auditor on several servers with the same license key. In this case the license +count is based on total number of users across all managed client environments. + +MSP billing is calculated based on the arithmetic average of the number of licenses used in that +month. This is determined by the following formula: + +(LicensesUsedOnDay1 + LicensesUsedOnDay2 … LicensesUsedOnDay29 + LicensesUsedOnDay30) / 30 + +To ensure that licenses are calculated correctly (per heartbeat) by Netwrix, perform the following +steps. + +**Step 1 –** Create organizational units within audited domains and add there service accounts you +want to exclude from license count. + +**Step 2 –** On the computer where Auditor Server resides, navigate to _Netwrix Auditor installation +folder\Netwrix Auditor\Administrative Console_ and locate MSP.xml. + +**Step 3 –** In MSP.xml, provide the following: + +- CustomInstanceIdentificator – It is used to identify a server where Netwrix Auditor Server is + installed. It can be any custom name, for example a server name, code name or any other name you + use to distinguish one server from another (e.g., ABCServer). + + **NOTE:** Netwrix recommends you to assign a unique identifier for each client. This information + is stored in the Netwrix Partner Portal and helps you identify each instance when you invoice + customers for Netwrix services. + + Netwrix gathers the following information about MSP licenses: identifier, license key and + license count. + +- ServiceAccount Path – It is a path to OU that contains service accounts. You can add several OUs + to MSP.xml, one per line. + +For example: + +![msp](/images/auditor/10.7/admin/settings/msp.webp) + +**NOTE:** MSP.xml file must be formatted in accordance with XML standard. If company name (used as +identifier) or service account path includes & (ampersand), " (double quotes) or ' (single quotes), +< (less than), > (greater than) symbols, they must be replaced with corresponding HTML entities. + +**_RECOMMENDED:_** Netwrix recommends avoiding special characters since some web browsers (e.g., +Internet Explorer 8) have troubles processing them. + +| Symbol | XML entity | +| ----------------------------- | -------------------------------------------- | +| & e.g., Ally & Sons | & e.g., Ally & Sons | +| " e.g., Domain1\Users\"Stars" | " e.g., Domain1\Users\"Stars" | +| ' e.g., Domain1\Users\O'Hara | ' e.g., Domain1\Users\O'Hara | +| < e.g., `Company<1` | < e.g., `Company<1` | +| > e.g., `ID>500` | > e.g., `ID>500` | + +**Step 4 –** Navigate to _Netwrix Auditor installation folder\Netwrix Auditor\Administrative +Console_ and start **Netwrix.CallHome.MSPTool.exe**. The tool transfers information on service +accounts to Netwrix Auditor. Netwrix Auditor uses this information to exclude service accounts from +license count so that only heartbeat users will be calculated. + +**NOTE:** You must run Netwrix.CallHome.MSPTool.exe every time you update MSP.xml. + +The appearance of the license will be reflected in the MSP portal. diff --git a/docs/auditor/10.8/admin/settings/longtermarchive.md b/docs/auditor/10.8/admin/settings/longtermarchive.md new file mode 100644 index 0000000000..fb3195f5cf --- /dev/null +++ b/docs/auditor/10.8/admin/settings/longtermarchive.md @@ -0,0 +1,37 @@ +--- +title: "Long-Term Archive" +description: "Long-Term Archive" +sidebar_position: 30 +--- + +# Long-Term Archive + +The Long-Term Archive is configured by default, irrespective of your subscription plan and settings +you specified when configuring a monitoring plan. To review and update your Long-Term Archive +settings, navigate to **Settings** > **Long-Term Archive** and click Modify. + +![lta_settings_thumb_0_0](/images/auditor/10.7/admin/settings/lta_settings_thumb_0_0.webp) + +Review the following for additional information: + +| Option | Description | +| ------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Long-Term Archive settings | | +| Write audit data to | Specify the path to a local or shared folder where your audit data will be stored. By default, it is set to _"C:\ProgramData\Netwrix Auditor\Data"_. By default, the LocalSystem account is used to write data to the local-based Long-Term Archive and computer account is used for the file share-based storage. Subscriptions created in the Auditor client are uploaded to file servers under the Long-Term Archive service account as well. It is not recommended to store your Long-Term Archive on a system disk. If you want to move the Long-Term Archive to another location, refer to the following Netwrix Knowledge base article: [How to move Long-Term Archive to a new location](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA00g000000H9SSCA0.html). | +| Keep audit data for (in months) | Specify how long data will be stored. By default, it is set to 120 months. | +| Use custom credentials (for the file share-based Long-Term Archive only) | Select the checkbox and provide user name and password for the Long-Term Archive service account. You can specify a custom account only for the Long-Term Archive stored on a file share. The custom Long-Term Archive service account can be granted the following rights and permissions: - Advanced permissions on the folder where the Long-term Archive is stored: - List folder / read data - Read attributes - Read extended attributes - Create files / write data - Create folders / append data - Write attributes - Write extended attributes - Delete subfolders and files - Read permissions - On the file shares where report subscriptions are saved: - Change share permission - Create files / write data folder permission Subscriptions created in the Auditor client  are uploaded to file servers under the Long-Term Archive service account as well. See the [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) topic for additional information. | + +Setting Recording Settings + +![usersessions_storage](/images/auditor/10.7/admin/settings/usersessions_storage.webp) + +| | | +| ----------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Configure custom location of session recordings | Default location for storing session recordings is set to _"\\``\Netwrix_UAVR$"_. However, storing extra files on the Auditor  Server may produce additional load on it, so consider using this option to specify another location where session recordings will be stored. | +| Enter UNC path to shared folder: | Specify UNC path to the shared folder where user session video recordings will be stored. You can use server name or IP address, for example: _\\172.28.6.33\NA_UserSessions_ Using a local folder for that purpose is not recommended, as storing extra files on the Auditor  Server will produce additional load on it. Make sure the specified shared folder has enough capacity to store the video files. Retention period for the video files can be adjusted in the related monitoring plan settings (targeted at User Activity data source); default retention is 7 days. See the [User Activity](/docs/auditor/10.7/admin/monitoringplans/overview_1.md) topic for additional information. After you specify and save settings for session recordings, it is recommended that you leave them unchanged. Otherwise — if you change the storage location while using Netwrix Auditor for User Activity — please be aware of possible data loss, as Auditor  will not automatically move session recordings to a new location. | +| User name / Password | Provide user name and password for the account that will be used to store session recordings to the specified shared folder. Make sure the account has at least the Write permission for that folder. | + +Auditor  informs you if you are running out of space on a system disk where the Long-Term Archive is +stored by default. You will see events in the Netwrix Auditor **System Health** log once the free +disk space starts approaching minimum level. When the free disk space is less than 3 GB, the +Netwrix services responsible for audit data collection will be stopped. diff --git a/docs/auditor/10.8/admin/settings/notifications.md b/docs/auditor/10.8/admin/settings/notifications.md new file mode 100644 index 0000000000..52a21bbc48 --- /dev/null +++ b/docs/auditor/10.8/admin/settings/notifications.md @@ -0,0 +1,156 @@ +--- +title: "Notifications" +description: "Notifications" +sidebar_position: 50 +--- + +# Notifications + +Notification settings are configured when you create the first monitoring plan in the New monitoring +plan wizard. + +You can update notification settings at any time in the **Settings > Notifications**. To disable +notifications, go to **Settings > Notifications > Modify** and select **No notifications** options. + +Review the following for additional information: + +- Enable Notifications via Exchange Online +- Enable Notifications via SMTP +- Summary Emails and Notifications about Critical Events + +## Enable Notifications via Exchange Online + +To enable Netwrix Auditor to send email notifications via Exchange Online using modern +authentication, configure an application. To do this, follow the steps below. + +**Step 1 –** Register a new application in the Microsoft Entra admin center. + +**Step 1 –** Under Identity go to **Applications > App registrations** and choose **New +registration**. + +**Step 2 –** Enter the name for your application, choose "Accounts in this organizational directory +only". Redirect URL is optional. + +**Step 3 –** Save Client ID and Tenant ID. + +**Step 4 –** Create a new client secret and save it. + +**Step 5 –** Under Microsoft Graph API, go to **Manage** **>** **API permissions**, and perform the +following steps: + +1. Click **Add** +2. In the Request API permissions window, click **Microsoft Graph**. +3. Select **Application Permissions**. +4. In the search box, type Mail.ReadWrite and Mail.Send to add these permissions to the application. + +**Step 6 –** Grant admin consent for these permissions. + +**Step 7 –** In Netwrix Auditor, go to Notification Settings, click Modify, and under Exchange +Online enter Tenant name, Application ID and Application secret. + +After the application configuration, you can restrict permission so only the specified accounts +could use the application to send email. To do this, the following actions required: + +- Create a Group +- Add Email to a Group +- Apply Restriction Using PowerShell Commands + +### Create a Group + +Follow the steps to create a group. + +**Step 1 –** Log in to the Exchange admin center with your administrator account. + +**Step 2 –** Under Groupsclick on the **Mail-enabled security** tab. + +**Step 3 –** Click **Add a group**. + +**Step 4 –** Select **Mail-enabled security** and click **Next**. + +**Step 5 –** Set a name and click **Next**. + +**Step 6 –** Set group name and select **Approval**. Its needed to require owner approval to join +the group. + +**Step 7 –** Click **Next**. + +**Step 8 –** Click **Create**. + +### Add Email to a Group + +Follow the steps to add emails to group. + +**Step 1 –** In the Exchange admin cente go to Groupsand click on the [Mail-enabled security] tab. + +**Step 2 –** Click on the group you have created and add emails you want to allow APIs to access. + +### Apply Restriction Using PowerShell Commands + +Follow the steps to run following commands using PowerShell. + +**Step 1 –** Open PowerShell + +**Step 2 –** Run the following commands in order: + +``` +Set-ExecutionPolicy -ExecutionPolicy RemoteSigned +Run: Install-Module PowerShellGet -Force +Install-Module -Name ExchangeOnlineManagement -Force +Get-Module ExchangeOnlineManagement +Connect-ExchangeOnline -UserPrincipalName {ADMIN_EMAIL_ADDRESS_HERE} +``` + +**Step 3 –** Sign in as Admin in the pop-up window. + +**Step 4 –** Run the following command: + +``` +New-ApplicationAccessPolicy  +-AppId {APPLICATION_ID_HERE}  +-PolicyScopeGroupId {GROUP_EMAIL_ADDRESS_HERE}  +-AccessRight RestrictAccess  +-Description "YOUR DESCRIPTION HERE." +``` + +## Enable Notifications via SMTP + +To enable notifications via SMTP, first select **SMTP** in the **Method** column, then navigate to +Default SMTP settings below to review settings used to deliver email notifications, reports, etc., +and click Modify to adjust them if necessary. + +| Option | Description | +| ------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| SMTP server | Enter your SMTP server address. It can be your company's Exchange server or any public mail server (e.g., Gmail, Yahoo). | +| Port number | Specify your SMTP server port number. | +| Sender address | Enter the address that will appear in the From field. **_RECOMMENDED:_** click **Send Test Email**. The system will send a test message to the specified email address and inform you if any problems are detected. | +| SMTP authentication | Select this checkbox if your mail server requires the SMTP authentication. | +| Sender email (from) | Enter the address that will appear in the "_From_" field in email notifications. This option does not affect notifications sent to users' managers and administrators. Before configuring the "_From_" field for user email notifications, make sure that your Exchange supports this option. | +| User name | Enter a user name for the SMTP authentication. | +| Password | Enter a password for SMTP authentication. | +| Use Secure Sockets Layer encrypted connection (SSL/TLS) | Select this checkbox if your SMTP server requires SSL to be enabled. | +| Use implicit SSL anthentification | Select this checkbox if the implicit SSL mode is used, which means that an SSL connection is established before any meaningful data is sent. | +| Enforce certificate validation to ensure security | Select this checkbox if you want to verify security certificate on every email transmission. The option is not available for auditing User Activity as well Netwrix Auditor tools. | + +You can configure Activity Summary frequency, format and delivery time for each monitoring plan +individually. See the [Fine-Tune Your Plan and Edit Settings](/docs/auditor/10.7/admin/monitoringplans/finetune.md) topic +for more information. + +After that, you can specify the recipient who will receive product activity and health summary +emails. + +## Summary Emails and Notifications about Critical Events + +Follow the steps to send summary emails and notifications about critical events. + +**Step 1 –** Navigate to the Summary email recipient and click Modify. + +**Step 2 –** Specify recipient address: + +- To send to a single recipient, enter personal mailbox address. +- To send to multiple recipients, make sure they are added to a distribution group, and enter the + group address. Entering multiple individual addresses is not supported. + +To learn more about product health, you can also navigate to the Health status tile in the main +window. It will take you to the Health Status dashboard that contains information on the product +activity and system health state. See the +[Health Status Dashboard](/docs/auditor/10.7/admin/healthstatus/dashboard/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/settings/overview.md b/docs/auditor/10.8/admin/settings/overview.md new file mode 100644 index 0000000000..ddf33d5239 --- /dev/null +++ b/docs/auditor/10.8/admin/settings/overview.md @@ -0,0 +1,23 @@ +--- +title: "Netwrix Auditor Settings" +description: "Netwrix Auditor Settings" +sidebar_position: 20 +--- + +# Netwrix Auditor Settings + +In the Settings section, you can configure product settings, such as default SQL Server instance for +Audit Database, the Long-Term Archive location and retention period, etc. You can also review +information about the product version and your licenses. See the following sections: + +- [General](/docs/auditor/10.7/admin/settings/general.md) +- [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) +- [Long-Term Archive](/docs/auditor/10.7/admin/settings/longtermarchive.md) +- [Investigations](/docs/auditor/10.7/admin/settings/investigations.md) +- [Notifications](/docs/auditor/10.7/admin/settings/notifications.md) +- [Integrations](/docs/auditor/10.7/admin/settings/integrations.md) +- [Licenses](/docs/auditor/10.7/admin/settings/licenses.md) +- [About Netwrix Auditor](/docs/auditor/10.7/admin/settings/about.md) + +To modify Netwrix Auditor settings, you must be assigned the _Global administrator_ role. See +[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) for more information. diff --git a/docs/auditor/10.8/admin/settings/privilegesecure.md b/docs/auditor/10.8/admin/settings/privilegesecure.md new file mode 100644 index 0000000000..9852f50703 --- /dev/null +++ b/docs/auditor/10.8/admin/settings/privilegesecure.md @@ -0,0 +1,123 @@ +--- +title: "Netwrix Privilege Secure" +description: "Netwrix Privilege Secure" +sidebar_position: 70 +--- + +# Netwrix Privilege Secure + +Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix +Privilege Secure. + +The integration can be configured for the following Auditor data sources: + +- Active Directory. + + See the + [Use Netwrix Privilege Secure as a Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md#use-netwrix-privilege-secure-as-a-data-collecting-account) + topic for additional information. + +- Group Policy. + + See the + [Use Netwrix Privilege Secure as a Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/grouppolicy/overview.md#use-netwrix-privilege-secure-as-a-data-collecting-account) + topic for additional information. + +- Logon Activity. + + See the + [Use Netwrix Privilege Secure as a Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/logonactivity/overview.md#use-netwrix-privilege-secure-as-a-data-collecting-account) + topic for additional information. + +- Microsoft Entra ID. + + See the + [How to Add Microsoft Entra ID Monitoring Plan Using Netwrix Privilege Secure](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md#how-to-add-microsoft-entra-id-monitoring-plan-using-netwrix-privilege-secure) + topic for additional information. + +- Windows File Server. + + See the + [Use Netwrix Privilege Secure as a Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/fileservers/windowsfileserver.md#use-netwrix-privilege-secure-as-a-data-collecting-account) + topic for additional information. + +- Windows Server. + + See the + [Use Netwrix Privilege Secure as a Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/windows/overview.md#use-netwrix-privilege-secure-as-a-data-collecting-account) + topic for additional information. + +## Software Requirements + +| Component | Version | +| ------------------------ | ------- | +| Netwrix Auditor | 10.7+ | +| Netwrix Privilege Secure | 4.2+ | + +## Enable and Configure Netwrix Privilege Secure Integration + +Follow the steps to enable and configure Netwrix Privilege Secure integration. + +**Step 1 –** In Netwrix Auditor, navigate to Settings in the upper right corner. + +**Step 2 –** Select Netwrix Privilege Secure. + +**Step 3 –** Click **Set up Integration**. + +**Step 4 –** Specify the Privilege Secure URL. + +**Step 5 –** Specify the application name and Netwrix Auditor client certificate. The following two +options are available: + +- New/Generate certificate – Create a new certificate. +- Select an existing certificate – Select an available certificate from the drop-down list. + +![npsclientcertificate](/images/auditor/10.7/admin/settings/npsclientcertificate.webp) + +**Step 6 –** Click **Next**. + +**Step 7 –** You need to manually export the Netwrix Auditor server certificate. To do so, follow +the steps below: + +1. On the machine where Netwrix Auditor is installed, press the Windows key + R to open the Run + dialog box. Type "_mmc_" in the box and click **OK**. This will open MMC (Microsoft Management + Console). +2. **Click File > Add/Remove Snap-in...** and locate Certificates icon. +3. In the pop-up window, select the **Computer account** and click **Next**. +4. Make sure that the **Local Computer** option is selected in the next window, then click + **Finish**. The Certificates menu will appear. +5. Go to **Certificates (Local Computer) > Personal > Certificates > `{Certificate Name}`** and + click **Export**. +6. After successful export, copy the certificate to the machine where Netwrix Privilege Secure is + installed. + +**Step 8 –** Install the certificate on the machine where Netwrix Privilege Secure is installed. To +do so, follow the steps below: + +1. Right-click the imported certificate and select **Install Certificate** option. +2. In the Certificate Import Wizard, select **Local Machine** as a Store Location and click + **Next**. +3. In the next menu, select **Paste all certificates in the following store** option, click + **Browse** and select **Trusted Root Certification Authorities** folder in the pop-up menu. +4. Click **Finish**. + +**Step 9 –** Launch Netwrix Privilege Secure to create an application user for Netwrix Auditor with +the Application name and Certificate Serial Number that you received. Refer to the +[Netwrix Privilege Secure](https://helpcenter.netwrix.com/category/privilegesecure_accessmanagement) +documentation for additional instructions. + +**Step 10 –** Provide the security key you got in Netwrix Privilege Secure. + +![npsintegrationparameters](/images/auditor/10.7/admin/settings/npsintegrationparameters.webp) + +**Step 11 –** Click **Next**. + +![npsintegrationfinished](/images/auditor/10.7/admin/settings/npsintegrationfinished.webp) + +**Step 12 –** After the validation, click **Finish**. + +Integration between Netwrix Auditor and Netwrix Privilege Secure is established. Before using the +Netwrix Privilege Secure for data collection in Netwrix Auditor, make sure that you created a +dedicated Access Policy and Connection Profile in Netwrix Privilege Secure. Refer to the +[Netwrix Privilege Secure](https://helpcenter.netwrix.com/category/privilegesecure_accessmanagement) +documentation for additional information. diff --git a/docs/auditor/10.8/admin/settings/sensitivedatadiscovery.md b/docs/auditor/10.8/admin/settings/sensitivedatadiscovery.md new file mode 100644 index 0000000000..76a99a2180 --- /dev/null +++ b/docs/auditor/10.8/admin/settings/sensitivedatadiscovery.md @@ -0,0 +1,186 @@ +--- +title: "Sensitive Data Discovery" +description: "Sensitive Data Discovery" +sidebar_position: 80 +--- + +# Sensitive Data Discovery + +Sensitive Data Discovery is an integration module between Auditor and Netwrix Data Classification. +It allows Auditor users to generate reports and configure alerts and search for the sensitive data +collected and classified with Netwrix Data Classification (NDC). Refer to the following +documentation to learn more about NDC: + +- [ ](https://helpcenter.netwrix.com/bundle/DataClassification_5.6.2/page/NDC_Overview.html)[Netwrix Data Classification Documentation](https://helpcenter.netwrix.com/category/dataclassification) + +The integration can be configured for the following Auditor data sources: + +SharePoint + +- SharePoint +- SharePoint Online + +File Storage Systems + +- Windows File Servers +- EMC +- Netapp +- Nutanix Files +- Qumulo +- Synology + +Databases + +- SQL Server + +The following integration options are available: + +- NDC SQL Database Provider – This integration allows users to generate State-in-Time reports + showing data categories for the sensitive data classified with Netwrix Data Classification. + Available for File storage systems, SharePoint, and SharePoint Online. +- NDC Endpoint Provider – This integration allows users to receive alerts triggered by specific + events related to the sensitive data classified with Netwrix Data Classification. When enabled, + Netwrix users can also browse sensitive data with the search. Available for File storage systems + (including Windows file server, EMC, NetApp, Nutanix File server, Synology, and Qumulo), + SharePoint Online, and SQL Server. + +This section lists all requirements for monitoring plans configuration and required versions of +Netwrix Auditor and Netwrix Data Classification. Also, it lists requirements for the accounts used +by Sensitive Data Discovery . + +## Permissions for Integration with Netwrix Data Classification + +The account must be granted the following rights and permissions: + +- The Database datareader server role must be assigned to the account on the SQL Server instance + where the NDC SQL database resides. + +Netwrix recommends using different accounts to connect to the SQL Server instances where NDC SQL +database and Categories database reside. + +**NOTE:** Netwrix Data Classification and Netwrix Auditor integration (NDC Provider) currently does +not support Single Sign-On. Single Sign-on needs to be disabled in Netwrix Data Classification in +order for the account used by the NDC Provider to authenticate. + +The account you are using for integration should have Rest API access in the Netwrix Data +Classification. You can add it in **NDC console > Settings > Users**. Refer to the +[Netwrix Data Classification documentation](https://helpcenter.netwrix.com/category/dataclassification) +for additional information. + +## Requirements for Monitoring Plans in Netwrix Auditor + +For File Storage Systems: + +- Monitoring plan for File Servers data source with activity audit enabled in Netwrix Auditor; +- Netwrix Data Classification instance configured to crawl from the same source (naming must exactly + match) + +For SharePoint: + +- Monitoring plan for SharePoint data source with activity audit enabled in Netwrix Auditor +- Netwrix Data Classification  instance configured to crawl from the same source; + +For SharePoint Online: + +- Monitoring plan for SharePoint Online data source with activity audit enabled in Netwrix Auditor +- Netwrix Data Classification instance configured to crawl from the same source + +For SQL Server: + +- Monitoring plan for SQL Server data source with activity audit enabled in Netwrix Auditor +- Netwrix Data Classification instance configured to crawl from the same source; + +## Software Requirements + +| Component | Version | +| --------------------------- | ------- | +| Netwrix Auditor | 10.0+ | +| Netwrix Data Classification | 5.6.1+ | + +## Enable and configure Sensitive Data Discovery + +This section contains instructions on how to enable and configure Sensitive Data Discovery to +include sensitive data in Netwrix Auditor reports, search, and alerts. + +Ensure that your account meets the requirements and has all server roles assigned. Follow these +steps to enable and configure Sensitive Data Discovery: + +**Step 1 –** In Netwrix Auditor, navigate to Setting in the upper right corner. + +**Step 2 –** Select **Sensitive Data Discovery**. + +**Step 3 –** Configure the following settings: + +- Enable NDC SQL Database Provider – Select Enable in the Connect to NDC SQL database field and then + click Configure to specify NDC SQL database connection settings. +- SQL Server instance – Specify the name of the SQL Server instance where the NDC SQL database + resides +- Database – Specify the name of the database (NDC SQL database by default) +- Authentication – Select the authentication type you want to use to connect to the SQL Server + instance: + + - Windows authentication + - SQL Server authentication + +- User name – Specify the account to be used to connect to the SQL Server instance. For example, + _WORKSTATIONNDC/integrator_. +- Password – Provide a password for that account +- Enable NDC Endpoint Provider – Select Enable in the Connect to NDC via API field and then click + Configure to specify NDC endpoint connection settings. + + - NDC Web Console address – Provide the URL of your Netwrix Data Classification web console. For + example: _http://workstationndc/conceptQS_. + - User name – Provide the name of account that will be used to connect to NDC web console. For + example, _WORKSTATIONNDC/integrator_. A user must be granted both: the 'REST API User' and + 'Superuser' permissions in NDC. See the User Management topic in the + [Netwrix Data Classification Documentation](https://helpcenter.netwrix.com/category/dataclassification) + for additional information. + - Password – Provide a password for that account + +## What is Next + +Follow the steps to run a data collection and review sensitive data. + +**Step 1 –** Navigate to your File storage system, SharePoint, SharePoint Online, or SQL Server +monitoring plan. + +**Step 2 –** Run data collection. + +**Step 3 –** Consider that data collection for SharePoint Online may take a while. + +**Step 4 –** Perform some changes and run data collection again. + +**Step 5 –** Review sensitive data. + +Netwrix suggests the following integration scenarios: + +For NDC SQL Database Provider: + +Review your sensitive data in Data Discovery and Classification reports. Refer to the following +Netwrix Auditor help center article for more information about these reports: +[Data Discovery and Classification Reports](/docs/auditor/10.7/admin/reports/types/datadiscoveryclassification.md). + +ForNDC Endpoint Provider: + +- Browse your data with Netwrix search. +- **NOTE:** Shortly after the data collection, changes related to sensitive content are reported + without data categories. For example, if a user adds some sensitive data to the SharePoint Online + document that initially does not contain sensitive data; this will be reported as document + modification with empty "_data categories_" field. Another example: a user creates a new document + containing sensitive data on a file server; this will be reported as a file add with empty "data + categories" field. In this case, you have to wait until Netwrix Auditor processes information + collected by NDC. It takes a while depending on a number of processed objects in your + infrastructure and reindexing settings configured in Netwrix Data Classification. See the Manage + Sources and Control Data Processing topic in the + [Netwrix Data Classification Documentation](https://helpcenter.netwrix.com/category/dataclassification) + for additional information. +- Click the **Select** column in the Tools menu and review data categories (taxonomies) of your + sensitive documents. +- Use filtering capabilities to narrow your search results. See the + [Use Filters in Advanced Mode](/docs/auditor/10.7/admin/search/filteradvanced.md) topic for additional information. +- Create an alert triggered by specific actions with your sensitive data. + +**_RECOMMENDED:_** Netwrix recommends enable threshold to trigger the new alert. In this case, a +single alert will be sent instead of many alerts. This can be helpful when Netwrix Auditor detects +many activity records matching the filters you specified. See the +[Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/subscriptions/_category_.json b/docs/auditor/10.8/admin/subscriptions/_category_.json new file mode 100644 index 0000000000..002def26b2 --- /dev/null +++ b/docs/auditor/10.8/admin/subscriptions/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Subscriptions", + "position": 60, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/admin/subscriptions/create.md b/docs/auditor/10.8/admin/subscriptions/create.md new file mode 100644 index 0000000000..b1108e4e97 --- /dev/null +++ b/docs/auditor/10.8/admin/subscriptions/create.md @@ -0,0 +1,36 @@ +--- +title: "Create Subscriptions" +description: "Create Subscriptions" +sidebar_position: 10 +--- + +# Create Subscriptions + +To create new subscriptions and manage existing subscriptions, you must be assigned the Global +administrator or Global reviewer role in the product. See the +[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional +information. + +1. Do one of the following depending on subscription type: + + | To... | Do... | + | ------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | + | Subscribe to a report | On the main Auditor page, navigate to Reports. Specify the report that you want to subscribe to and click Subscribe. | + | Subscribe to Behavior anomalies dashboard report | On the main Auditor page, navigate to Behavior anomalies, then in the dashboard window click Subscribe. | + | Subscribe to search | 1. Navigate to Search and set appropriate search criteria. See the [Use Filters in Simple Mode](/docs/auditor/10.7/admin/search/filtersimple.md) topic for additional information. Click Search. 2. Navigate to Tools and select Subscribe. | + | Subscribe to risk assessment overview | On the main Auditor page, navigate to Risk assessment and in the dashboard window click Subscribe. | + +2. On the Add Subscription page, complete the following fields: + + | Option | Description | + | ------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | + | General | | + | Subscription name | Enter the name for the subscription. | + | Report name _OR_ Email subject | For report subscription—You cannot edit report name. For subscription to search and risk assessment overview—Specify email subject to identify subscription emails from Auditor. For example, "_Successful read attempts on important file shares_". | + | Send empty subscriptions when no activity occurred Available for report and search subscriptions only. | Slide the switch to Yes if you want to receive a report even if no changes occurred. | + | Specify delivery options | - File format—Configure reports to be delivered as the pdf or csv files for search subscriptions; and pdf, docx, csv or xls files for report subscriptions. Available for report and search subscriptions only. - File delivery—Select delivery method: - Attach to email—Select this option to receive data as email attachments. The maximum size of the attachment file is 50 MB. Attachments larger than 50MB will be uploaded to _\\``\Netwrix_Auditor_Subscriptions$\LostAndFound_ folder on Netwrix Auditor server. They will be available for 7 days. Check the subscription email to get the files. - Upload to a file share—Select this option to save data on the selected file share. Click Browse to select a folder on the computer that hosts Auditor Server or specify a UNC path to a shared network resource. Make sure that the recipients have sufficient rights to access it and the Long-Term Archive service account has sufficient rights to upload reports. See the [File-Based Repository for Long-Term Archive](/docs/auditor/10.7/requirements/longtermarchive.md) topic for additional information. **NOTE:** Make sure that the AD Computer account for the Auditor host server also has read access on the file share where the Subscriptions are being uploaded. | + | Other tabs | | + | Recipients | Shows the number of recipients selected and allows specifying emails where reports are to be sent. Expand the Recipients list and click Add to add more recipients. | + | Schedule | Allows specifying report delivery schedule (daily, certain days of week, a certain day of a certain month). By default, risk assessment overview and search subscription delivery is scheduled to 7.00 am daily, report subscription delivery - to 8.00 am daily. | + | Filters | - For report subscription—Specify the report filters, which vary depending on the selected report. - For subscription to risk assessment overview—Select one or several monitoring plans and risk categories whose data you want to be included. By default, you will receive data on all risk categories, provided by all monitoring plans configured for risk assessment. - For search subscription—Specify filters in the same way as for search. See the [Use Filters in Advanced Mode](/docs/auditor/10.7/admin/search/filteradvanced.md) topic for additional information. For search subscription, you can also select a parameter to sort actions by and the sorting order. | + | History For search and risk assessment subscriptions only. | - Contains subscription generation details (intervals, status, last run time, start type). If the subscription failed, expand its details to understand and resolve error, then click the Try again link. - Allows for on-demand subscription delivery—for that, click Run Now. On successful subscription generation you will receive the results that match your criteria for the scheduled period. | diff --git a/docs/auditor/10.8/admin/subscriptions/manage.md b/docs/auditor/10.8/admin/subscriptions/manage.md new file mode 100644 index 0000000000..b7e25f30d4 --- /dev/null +++ b/docs/auditor/10.8/admin/subscriptions/manage.md @@ -0,0 +1,20 @@ +--- +title: "Review and Manage Subscriptions" +description: "Review and Manage Subscriptions" +sidebar_position: 20 +--- + +# Review and Manage Subscriptions + +On the main Netwrix Auditor page, navigate to Subscriptions to review a list of your subscriptions. + +![subscription](/images/auditor/10.7/admin/subscriptions/subscription.webp) + +The table below provides instructions on how to manage your subscriptions. + +| To... | Do... | +| ------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Browse subscriptions | Type the target subscription name in the search bar in the upper part of the Subscriptions window and click the Search icon to review results. | +| Enable or disable subscriptions | Pick a subscription and select On or Off in the Mode column. | +| Modify subscriptions | Select the subscription that you want to modify and click Edit at the bottom of the Subscriptions window. Update the subscription and save your changes. | +| Remove subscriptions | Click ![delete](/images/platgovnetsuite/integrations/delete.webp) icon next to the selected subscription. | diff --git a/docs/auditor/10.8/admin/subscriptions/overview.md b/docs/auditor/10.8/admin/subscriptions/overview.md new file mode 100644 index 0000000000..842bcb5dda --- /dev/null +++ b/docs/auditor/10.8/admin/subscriptions/overview.md @@ -0,0 +1,66 @@ +--- +title: "Subscriptions" +description: "Subscriptions" +sidebar_position: 60 +--- + +# Subscriptions + +Subscriptions enable you to schedule email delivery of a variety of reports or set of specific +search criteria. Subscriptions are helpful if you are a rare guest of Netwrix Auditor and you only +need to get statistics based on individual criteria. For example, an IT manager can easily provide +auditors with weekly reports to prove compliance with regulations. + +You can configure subscriptions to reports (including dashboards) risk assessment overview and +interactive search. + +You can add any elements (a dashboard, report, alert, risk, etc.) to the Auditor Home screen to +access them instantly. See the [Navigation](/docs/auditor/10.7/admin/navigation/overview.md) and +[Customize Home Screen](/docs/auditor/10.7/admin/navigation/customizehome.md) topics for additional information. + +## Subscription to Reports + +This subscription type has the following key features: + +- Predefined change reports to monitor important cases for all data sources. +- State-in-Time reports to monitor data source state at a specific moment of time. +- Predefined User Behavior and Blind Spot Analysis report pack with complex logic to identify + vulnerabilities (e.g., data access, suspicious files, etc.). +- Organization level reports to visualize what is happening in your environment. +- Reports with review status to track team workflow. +- Compliance reports to stay compliant with different standards. + +## Subscription to Search Results + +This subscription type has the following key features: + +- Flexible set of filters to modify search for your business use and create another subscription + based on the existing one. +- Advanced filters to make your results context match. +- The History option to verify that the subscription is configured properly. +- On-demand delivery to send the subscription to a recipient at any moment. + +## Subscription to Risk Assessment Overview + +This subscription type has the following key features: + +- Risk assessment overview based on the latest state-in-time data to monitor the state of your + Active Directory users and computers, as well as files and folders and other data at a specific + moment. +- Automatically calculated metrics to identify risks and potential vulnerabilities (sensitive data, + malicious files, etc.). +- Filters for monitoring plans and risk categories to receive exactly the data you need. +- Subscription options - delivery by email or upload to the specified file share. +- History option to verify that the subscription was configured properly and delivered successfully. +- On-demand delivery (Run Now) to send the subscription to a recipient at any moment. + +Subscription emails may vary slightly depending on the file delivery method and subscription type. + +## Subscription to Behavior Anomalies + +This subscription type is similar to the predefined reports. + +Review the following for additional information: + +- [Create Subscriptions](/docs/auditor/10.7/admin/subscriptions/create.md)how to create new subscriptions. +- [Review and Manage Subscriptions](/docs/auditor/10.7/admin/subscriptions/manage.md)how to manage subscriptions. diff --git a/docs/auditor/10.8/api/_category_.json b/docs/auditor/10.8/api/_category_.json new file mode 100644 index 0000000000..d275f70d06 --- /dev/null +++ b/docs/auditor/10.8/api/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Integration API", + "position": 70, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/api/activityrecordreference.md b/docs/auditor/10.8/api/activityrecordreference.md new file mode 100644 index 0000000000..c7e30d4c70 --- /dev/null +++ b/docs/auditor/10.8/api/activityrecordreference.md @@ -0,0 +1,35 @@ +--- +title: "Reference for Creating Activity Records" +description: "Reference for Creating Activity Records" +sidebar_position: 70 +--- + +# Reference for Creating Activity Records + +The table below describes Activity Record elements. + +Netwrix recommends limiting the input Activity Records file to 50MB and maximum 1,000 Activity +Records. + +| Element | Mandatory | Datatype | Description | +| --------------------------------------------------------- | ------------- | ---------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Activity Record main elements | | | | +| RID | No | string | RID is a unique key of the Activity Record. The identifier is created automatically when you write an Activity Record to the Audit Database. RID is included in output Activity Records only. | +| Who | Yes | nvarchar 255 | A specific user who made the change (e.g., _Enterprise\ Administrator_, _Admin@enterprise.onmicrosoft.com_). | +| Action | Yes | — | Activity captured by Auditor (varies depending on the data source). | +| What | Yes | nvarchar max | A specific object that was changed (e.g., _NewPolicy_). | +| When | Yes | dateTime | The moment when the change occurred. When supports the following datetime formats. | +| Where | Yes | nvarchar 255 | A resource where the change was made (e.g., _Enterprise-SQL_, _FileStorage.enterprise.local_). The resource name can be a FQDN or NETBIOS server name, Active Directory domain or container, SQL Server instance, SharePoint farm, VMware host, etc. | +| ObjectType | Yes | nvarchar 255 | A type of affected object or its class (e.g., user, mailbox). | +| Monitoring Plan | No | nvarchar 255 | The Auditor object that is responsible for monitoring a given data source and item. Sub-elements: Name and ID. If you provide a monitoring plan name for input Activity Records, ensure the plan is created in Auditor, the Netwrix API data source is added to the plan, and enabled for monitoring. This ensures data is written to the database associated with this plan. | +| DataSource | No | nvarchar max | IT infrastructure monitored with Auditor (e.g., _Active Directory_). For input Activity Records, the data source is automatically set to Netwrix API. | +| Item | No | nvarchar max | The exact object that is monitored (e.g., a domain name, SharePoint farm name) or integration name. Sub-element: Name. The item type is added inside the name value in brackets (e.g., _enterprise.local (Domain)_). For input Activity Records, the type is automatically set to Integration, you do not need to provide it. The output Activity Records may contain various item types depending on the monitoring plan configuration:
  • AD container
  • NetApp
  • Computer
  • Office 365 tenant
  • Domain
  • Oracle Database instance
  • EMC Isilon
  • SharePoint farm
  • Dell VNX/VNXe
  • SQL Server instance
  • Integration
  • VMware ESX/ESXi/vCenter
  • IP range
  • Windows file share. If you provide an item name for input Activity Records, ensure this item is included in the monitoring plan within the Netwrix API data source. If you specify an item that does not exist, data will be written to the plan's database anyway but will not be available for search using the Item filter.
| +| Workstation | No | nvarchar max | An originating workstation from which the change was made (e.g., _WKSwin12.enterprise.local_). | +| IsArchiveOnly | No | — | IsArchiveOnly allows saving Activity Record to the Long-Term Archive only. In this case, these Activity Records will not be available for search in the Auditor client. | +| DetailList | No | — | Information specific to the data source, e.g., assigned permissions, before and after values, start and end dates. References details. | +| Detail sub-elements (provided that DetailList exists) | | | | +| PropertyName | Yes | nvarchar 255 | The name of a modified property. | +| Message | No | string | Object-specific details about the change. Message is included in output Activity Records only. | +| Before | No | ntext | The previous value of the modified property. | +| After | No | ntext | The new value of the modified property. | + diff --git a/docs/auditor/10.8/api/compatibility.md b/docs/auditor/10.8/api/compatibility.md new file mode 100644 index 0000000000..e862908266 --- /dev/null +++ b/docs/auditor/10.8/api/compatibility.md @@ -0,0 +1,18 @@ +--- +title: "Compatibility Notice" +description: "Compatibility Notice" +sidebar_position: 130 +--- + +# Compatibility Notice + +Make sure to check your product version, and then review and update your add-ons and scripts +leveraging Netwrix Auditor Integration API. Download the latest add-on version in the Add-on Store. + +| Property in 8.0 – 8.5 | New property in 9.0 and above | +|----------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| XML: ``, JSON: `"AuditedSystem"` | XML: ``, JSON: `"DataSource"` | +| XML: ``, JSON: `"ManagedObject"` | XML: ` Name Unique ID `, JSON: `"MonitoringPlan" : { "ID": "{Unique ID}", "Name": "Name" }` Now the MonitoringPlan contains two sub-entries: ID and Name. The ID property is optional and is assigned automatically by the product. | +| — | XML: ` Item name `, JSON: `"Item": {"Name": "Item name"` | + +To learn more about input and output Activity Record structure, refer to [Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md). diff --git a/docs/auditor/10.8/api/endpoints.md b/docs/auditor/10.8/api/endpoints.md new file mode 100644 index 0000000000..0571b3105c --- /dev/null +++ b/docs/auditor/10.8/api/endpoints.md @@ -0,0 +1,46 @@ +--- +title: "API Endpoints" +description: "API Endpoints" +sidebar_position: 30 +--- + +# API Endpoints + +| Method | Endpoint | POST Data | Description | +| ------ | --------------------------------------- | ------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------ | +| GET | /netwrix/api/v1/activity_records/enum | — | Returns Activity Records. [Retrieve Activity Records](/docs/auditor/10.7/api/retrieveactivityrecords.md) | +| POST | /netwrix/api/v1/activity_records/enum | [Continuation Mark](/docs/auditor/10.7/api/postdata/continuationmark.md) | Returns next 1,000 Activity Records. [Continuation Mark](/docs/auditor/10.7/api/postdata/continuationmark.md) | +| POST | /netwrix/api/v1/activity_records/search | [Search Parameters](/docs/auditor/10.7/api/postdata/searchparameters.md) | Returns Activity Records matching a criteria defined in search parameters. [Search Activity Records](/docs/auditor/10.7/api/searchactivityrecords.md) | +| POST | /netwrix/api/v1/activity_records/ | [Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) | Writes data to the Audit Database. [Write Activity Records](/docs/auditor/10.7/api/writeactivityrecords.md) | + +### Authentication + +Authentication is required for all endpoints. The following authentication methods are supported: + +- NTLM—recommended + + If NTLM authentication is disabled through a group policy, you will not be able to address + Netwrix Auditor Server by its IP address. + +- Negotiate +- Digest +- Basic + +### Account Permissions + +Netwrix Auditor restricts control to its configuration and data collected by the product. Role-based +access system ensures that only relevant employees and services can access the exact amount of data +they need. To be able to retrieve activity records or supply data to the Audit Database, an account +must be assigned a role in the product. +[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) + +| To... | Required role | +| ------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Retrieve all activity records and write data | The user must be assigned the Global administrator role in the product, or be a member of the Netwrix Auditor Administrators group on the computer that hosts Netwrix Auditor Server. | +| Retrieve all activity records | The user must be assigned the Global reviewer role in the product or be a member of the Netwrix Auditor Client Users group on the computer that hosts Netwrix Auditor Server. | +| Retrieve activity records within a limited scope | The user must be assigned the Reviewer role on a monitoring plan or folder with plans. In this case, Netwrix Auditor Server will retrieve only activity records the user is allowed to review according to the scope delegated (e.g., a scope can be limited to a single domain or file share). | +| Write activity records | The user must be assigned the Contributor role in the product. | + +Review the example below to see how to authenticate in cURL: + +- `curl https://172.28.6.15:9699/netwrix/api/v1/activity_records/enum -u Enterprise\NetwrixUser:NetwrixIsCool` diff --git a/docs/auditor/10.8/api/errordetails.md b/docs/auditor/10.8/api/errordetails.md new file mode 100644 index 0000000000..501f43d320 --- /dev/null +++ b/docs/auditor/10.8/api/errordetails.md @@ -0,0 +1,53 @@ +--- +title: "Error Details" +description: "Error Details" +sidebar_position: 110 +--- + +# Error Details + +On error, most requests contain an error description in the response body (except some requests with +empty body, e.g., 404, 405). [Response Status Codes](/docs/auditor/10.7/api/responsestatuscodes.md) + +The error details include: + +| Block | Description | +| ----------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Category | Defines the type of error (XML formatting-related error, invalid input-related error, etc.) | +| Description | Provides details about this error. | +| Location | (optional) Provides a link to a corrupted text in request. XML is considered a default format for Netwrix Auditor Integration API. Error location is defined in XML format. | + +The error details have the format similar to the following: + +**XML:** +```xml + + + + Category + Error Description + Error Location + + +``` + +**JSON:** +```json +{ + "ErrorList": [ + { + "Category": "Category", + "Description": "Error Description", + "Location": "Error Location" + } + ] +} +``` + +Review examples below to see how error details correspond to invalid requests. + +| Request | Error details returned | +|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Invalid request: **XML:** `curl -H "Content-Type: application/xml; Charset=UTF-8" https://WKSWin12R2:9699/netwrix/api/v1/activity_records/search -u Enterprise\NetwrixUser:NetwrixIsCool --data-binary @C:\APIdocs\Search.xml`; ```xml Administrator Active Directory Modified ```; **JSON:** `curl -H "Content-Type: application/json; Charset=UTF-8" https://WKSWin12R2:9699/netwrix/api/v1/activity_records/search?format=json -u Enterprise\NetwrixUser:NetwrixIsCool --data-binary @C:\APIdocs\Search.json`; ```json { "FilterList": { "Who": "Administrator", "DataSource": "Active Directory", "Action": "Added" } } ``` | 400 Bad Request; **XML:** ```xml XMLError 0xC00CE56D End tag 'FilterList' does not match the start tag 'DataSource' ```; **JSON:** If JSON is corrupted, server returns 500 Internal Server Error with empty body. | +| Invalid request: **XML:** `curl https://WKSWin12R2:9699/netwrix/api/v1/activity_records/enum?count=FIVE -u Enterprise\NetwrixUser:NetwrixIsCool`; **JSON:** `curl https://WKSWin12R2:9699/netwrix/api/v1/activity_records/enum?format=json&count=FIVE -u Enterprise\NetwrixUser:NetwrixIsCool` | 400 Bad Request; **XML:** ```xml InputError Invalid count parameter specified. Error details: 0x80040204 Cannot convert the attribute data type ```; **JSON:** ```json { "ErrorList": [ { "Category": "InputError", "Description": "Invalid count parameter specified. Error details: 0x80040204 Cannot convert the attribute data type" } ] } ``` | +| Valid request, but the Audit Database is unreachable: **XML:** `curl https://WKSWin12R2:9699/netwrix/api/v1/activity_records/enum -u Enterprise\NetwrixUser:NetwrixIsCool`; **JSON:** `curl https://WKSWin12R2:9699/netwrix/api/v1/activity_records/enum?format=json -u Enterprise\NetwrixUser:NetwrixIsCool` | 500 Internal Server Error; **XML:** ```xml ServerError 0x80040C0A SQL Server cannot be contacted, connection is lost (0x80004005 [DBNETLIB][ConnectionOpen (Connect())] SQL Server does not exist or access denied.) [0x00007FFDCC06BBC8,0x00007FFDB99EF4BA; 0x00007FFDB99BEEEF,0x00007FFDB99EF4DC] ```; **JSON:** ```json { "ErrorList": [ { "Category": "ServerError", "Description": "0x80040C0A SQL Server cannot be contacted, connection is lost (0x80004005 [DBNETLIB][ConnectionOpen (Connect())] SQL Server does not exist or access denied.) [0x00007FFDCC06BBC8,0x00007FFDB99EF4BA; 0x00007FFDB99BEEEF,0x00007FFDB99EF4DC]" } ] } ``` | \ No newline at end of file diff --git a/docs/auditor/10.8/api/filterreference/_category_.json b/docs/auditor/10.8/api/filterreference/_category_.json new file mode 100644 index 0000000000..ba2580d372 --- /dev/null +++ b/docs/auditor/10.8/api/filterreference/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Reference for Creating Search Parameters File", + "position": 80, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "filterreference" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/api/filterreference/filteroperators.md b/docs/auditor/10.8/api/filterreference/filteroperators.md new file mode 100644 index 0000000000..4dd053dbc1 --- /dev/null +++ b/docs/auditor/10.8/api/filterreference/filteroperators.md @@ -0,0 +1,20 @@ +--- +title: "Operators" +description: "Operators" +sidebar_position: 20 +--- + +# Operators + +Review the table below to learn more about operators. + +| Operator | Description | Example | +| ---------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Contains | This operator shows all entries that contain a value specified in the filter. | If you set the Who filter to contains _John_, you will get the following results: _Domain1\John_, _Domain1\Johnson_, _Domain2\Johnny_, _John@domain.com_. | +| Equals | This operator shows all entries with the exact value specified. Make sure to provide a full object name or path. To apply this operator when adding filters in the Simple mode, provide a value in quotation marks (e.g., _"Domain1\John"_). | Use this operator if you want to get precise results, e.g., _\\FS\Share\NewPolicy.docx_. | +| Not equal to | This operator shows all entries except those with the exact value specified. In the Search field in the Simple mode, this operator appears as not, e.g., Who not for the Who filter. | If you set the Who filter to not equal to _Domain1\John_, you will exclude the exact user specified and find all changes performed by other users, e.g., _Domain1\Johnson, Domain2\John_. | +| Starts with | This operator shows all entries that start with the specified value. | If you set the Who filter to starts with _Domain1\John_, you will find all changes performed by _Domain1\John_, _Domain1\Johnson_, and _Domain1\Johnny_. | +| Ends with | This operator shows all entries that end with the exact specified value. | If you set the Who filter to ends with _John_, you will find all changes performed by _Domain1\John_, _Domain2\Dr.John_, _Domain3\John_. | +| Does not contain | This operator shows all entries except those that contain the specified value. In the Search field in the Simple mode, this operator appears as not, e.g., Who not for the Who filter. | If you set the Who filter to does not contain _John_, you will exclude the following users: _Domain1\John_, _Domain2\Johnson_, and _Johnny@domain.com_. | +| In group | This operator relates to the Who filter. It instructs Netwrix Auditor to show only data for the accounts included in the specified group. | If you set the In group condition for Who filter to _Domain\Administrators_, only the data for the accounts included in that group will be displayed. | +| Not in group | This operator relates to the Who filter. It instructs Netwrix Auditor to show only data for the accounts not included in the specified group. | If you set the Not in group condition for Who filter to _Domain\Administrators_, only the data for the accounts not included in that group will be displayed. | diff --git a/docs/auditor/10.8/api/filterreference/filterreference.md b/docs/auditor/10.8/api/filterreference/filterreference.md new file mode 100644 index 0000000000..976bfe9fb7 --- /dev/null +++ b/docs/auditor/10.8/api/filterreference/filterreference.md @@ -0,0 +1,48 @@ +--- +title: "Reference for Creating Search Parameters File" +description: "Reference for Creating Search Parameters File" +sidebar_position: 80 +--- + +# Reference for Creating Search Parameters File + +Review this section to learn more about operators and how to apply them to Activity Record filters +to create a unique search. You can: + +- Add different filters to your search. Search results will be sorted by all selected filters since + they work as a logical AND. + + | Format | Example | + |--------|-----------------------------------------------------------------------------------------------------------------------| + | XML | `Admin Active Directory User`| + | JSON | `"Who": { "Equals": "Admin" }, "DataSource": { "NotEqualTo": "Active Directory" }, "What": "User"` | + +- Specify several values for the same filter. To do this, add two entries one after another. + + Entries with Equals, Contains, StartsWith, EndsWith, and InGroup operators work as a logical OR + (Activity Records with either of following values will be returned). Entries with DoesNotContain + and NotEqualTo operators work as a logical AND (Activity Records with neither of the following + values will be returned). + + | Format | Example | + | ------ | ------------------------------------------------------------------------------------------ | + | XML | `Admin Analyst` | + | JSON | `"Who" : [ "Admin" , "Analyst" ]` Use square brackets to add several values for the entry. | + +Review the following for additional information: + +- [Filters](/docs/auditor/10.7/api/filterreference/filters.md) +- [Operators](/docs/auditor/10.7/api/filterreference/filteroperators.md) + +The table below shows filters and Activity Records matching them. + +| Filters | Matching Activity Records | +|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| XML: `Admin Active Directory User` | Retrieves all activity records where the administrator made any actions on SharePoint, except Read. Examples of XML activity record: ` Added {42F64379-163E-4A43-A9C5-4514C5A23798} Compliance SharePoint http://demolabsp:8080 (SharePoint farm) List 20160217093959797091D091D2EAF4A89BF7A1CCC27D158A7 http://demolabsp/lists/Taskslist 2017-02-17T09:28:35Z http://demolabsp Enterprise\Administrator 172.28.15.126 Removed {42F64379-163E-4A43-A9C5-4514C5A23798} Compliance SharePoint http://demolabsp:8080 (SharePoint farm) List 20160217093959797091D091D2EAF4A89BF7A1CCC27D15857 http://demolabsp/lists/Old/Taskslist 2017-02-17T09:28:35Z http://demolabsp Enterprise\Administrator 172.28.15.126 ` | +| JSON: `"Who" : "Admin", "DataSource" : "SharePoint", "Action" : { "NotEqualTo" : "Read" }` | JSON representation for filtering actions by the administrator on SharePoint. Examples of JSON activity record: `{ "Action": "Added", "MonitoringPlan": { "ID": "{42F64379-163E-4A43-A9C5-4514C5A23798}", "Name": "Compliance" }, "DataSource": "SharePoint", "Item": {"Name": "http://demolabsp:8080 (SharePoint farm)"}, "ObjectType": "List", "RID": "20160217093959797091D091D2EAF4A89BF7A1CCC27D158A7", "What": "http://demolabsp/lists/Taskslist", "When": "2017-02-17T09:28:35Z", "Where": "http://demolabsp", "Who": "Enterprise\\Administrator", "Workstation": "172.28.15.126" }, { "Action" : "Removed", "MonitoringPlan": { "ID": "{42F64379-163E-4A43-A9C5-4514C5A23798}", "Name": "Compliance" }, "DataSource": "SharePoint", "Item": {"Name": "http://demolabsp:8080 (SharePoint farm)"}, "ObjectType": "List", "RID": "20160217093959797091D091D2EAF4A89BF7A1CCC27D15857", "What": "http://demolabsp/lists/Old/Taskslist", "When": "2017-02-17T09:28:35Z", "Where": "http://demolabsp", "Who": "Enterprise\\Administrator", "Workstation": "172.28.15.126" }` | +| XML: `Admin Analyst` | XML example of filtering for multiple users (Admin and Analyst). Example of XML activity record: ` Added {42F64379-163E-4A43-A9C5-4514C5A23798} Compliance File Servers wks.enterprise.local (Computer) Folder 2016021116354759207E9DDCEEB674986AD30CD3D13F5DDA3 Annual_Reports 2017-02-10T14:46:00Z wks.enterprise.local Enterprise\Admin Removed {42F64379-163E-4A43-A9C5-4514C5A23798} Compliance Active Directory enterprise.local (Domain) User 2016021116354759207E9DDCEEB674986AD30CD3D13F5DAA3 Anna.Smith 2017-02-10T10:46:00Z dc1.enterprise.local Enterprise\Analyst 172.28.6.15 ` | +| JSON: `"Who" : [ "Admin" , "Analyst" ]` | JSON format for multiple user records. Example JSON activity record: `{ "Action": "Added", "MonitoringPlan": { "ID": "{42F64379-163E-4A43-A9C5-4514C5A23798}", "Name": "Compliance" }, "DataSource" : "File Servers", "Item": {"Name": "wks.enterprise.local (Computer)"}, "ObjectType": "Folder", "RID": "2016021116354759207E9DDCEEB674986AD30CD3D13F5DDA3", "What": "Annual_Reports", "When": "2017-02-10T14:46:00Z", "Where": "wks.enterprise.local", "Who": "Enterprise\\Admin" }, { "Action": "Removed", "MonitoringPlan": { "ID": "{42F64379-163E-4A43-A9C5-4514C5A23798}", "Name": "Compliance" }, "DataSource": "Active Directory", "Item": {"Name": "enterprise.local (Domain)"}, "ObjectType": "User", "RID": "2016021116354759207E9DDCEEB674986AD30CD3D13F5DAA3", "What": "Anna.Smith", "When": "2017-02-10T10:46:00Z", "Where": "dc1.enterprise.local", "Who": "Enterprise\\Analyst", "Workstation": "172.28.6.15" }` | +| XML: ` 2017-01-16T16:30:00Z 2017-02-01T00:00:00Z ` | XML example of date filtering. Example of XML activity record: ` Modified My Cloud {42F64379-163E-4A43-A9C5-4514C5A23701} My Cloud Exchange Online mail@corp.onmicrosoft.com (Office 365 tenant) Mailbox 201602170939597970997D56DDA034420B9044249CC15EC5A Shared Mailbox 2017-03-17T09:37:11Z BLUPR05MB1940 admin@corp.onmicrosoft.com Successful Logon {42F64379-163E-4A43-A9C5-4514C5A23798} Compliance Logon Activity enterprise.local (Domain) Logon 20160217093959797091D091D2EAF4A89BF7A1CCC27D158A7 stationexchange.enterprise.local 2017-02-17T09:28:35Z enterprisedc1.enterprise.local ENTERPRISE\Administrator stwin12R2.enterprise.local ` | +| JSON: `"When" : [ {"LastSevenDays" : ""}, {"From" : "2017-01-16T16:30:00Z", "To" : "2017-02-01T00:00:00Z" } ]` | JSON representation of filtering by date range. Example JSON activity record: `{ "Action" : "Modified", "MonitoringPlan" : "My Cloud", "MonitoringPlan": { "ID": "{42F64379-163E-4A43-A9C5-4514C5A23701}", "Name": "My Cloud" }, "DataSource": "Exchange Online", "Item": { "Name": "mail@corp.onmicrosoft.com (Office 365 tenant)" }, "ObjectType" : "Mailbox", "RID" : "201602170939597970997D56DDA034420B9044249CC15EC5A", "What" : "Shared Mailbox", "When" : "2017-03-17T09:37:11Z", "Where" : "BLUPR05MB1940", "Who" : "admin@corp.onmicrosoft.com" }, { "Action" : "Successful Logon", "MonitoringPlan": { "ID": "{42F64379-163E-4A43-A9C5-4514C5A23798}", "Name": "Compliance" }, "DataSource": "Logon Activity", "Item": {"Name": "enterprise.local (Domain)"}, "ObjectType": "Logon", "RID" : "20160217093959797091D091D2EAF4A89BF7A1CCC27D158A7", "What" : "stationexchange.enterprise.local", "When" : "2017-02-17T09:28:35Z", "Where" : "enterprisedc1.enterprise.local", "Who" : "ENTERPRISE\\Administrator", "Workstation" : "stwin12R2.enterprise.local" }` | +| XML: ` Logon Activity ` | Retrieves all activity records for Logon Activity data source irrespective of who made logon attempt and when it was made. Example of XML activity record: ` Successful Logon {42F64379-163E-4A43-A9C5-4514C5A23798} Compliance Logon Activity enterprise.local (Domain) Logon 20160217093959797091D091D2EAF4A89BF7A1CCC27D158A7 stationexchange.enterprise.local 2017-02-17T09:28:35Z enterprisedc1.enterprise.local ENTERPRISE\Administrator stwin12R2.enterprise.local Successful Logon {42F64379-163E-4A43-A9C5-4514C5A23798} Compliance Logon Activity enterprise.local (Domain) Logon 201602170939597970997D56DDA034420B9044249CC15EC5A stationwin12r2.enterprise.local 2017-02-17T09:37:11Z enterprisedc2.enterprise.local ENTERPRISE\Analyst stwin12R2.enterprise.local ` | +| JSON: `"DataSource" : "Logon Activity"` | Example JSON retrieval for Logon Activity records. Example JSON activity record: `{ "Action" : "Successful Logon", "MonitoringPlan": { "ID": "{42F64379-163E-4A43-A9C5-4514C5A23798}", "Name": "Compliance" }, "DataSource": "Logon Activity", "Item": {"Name": "enterprise.local (Domain)"}, "ObjectType" : "Logon", "RID" : "20160217093959797091D091D2EAF4A89BF7A1CCC27D158A7", "What" : "stationexchange.enterprise.local", "When" : "2017-02-17T09:28:35Z", "Where" : "enterprisedc1.enterprise.local", "Who" : "ENTERPRISE\\Administrator", "Workstation" : "stwin12R2.enterprise.local" }, { "Action" : "Successful Logon", "MonitoringPlan": { "ID": "{42F64379-163E-4A43-A9C5-4514C5A23798}", "Name": "Compliance" }, "DataSource": "Logon Activity", "Item": {"Name": "enterprise.local (Domain)"}, "ObjectType" : "Logon", "RID" : "201602170939597970997D56DDA034420B9044249CC15EC5A", "What" : "stationwin12r2.enterprise.local", "When" : "2017-02-17T09:37:11Z", "Where" : "enterprisedc2.enterprise.local", "Who" : "ENTERPRISE\\Analyst", "Workstation" : "stwin12R2.enterprise.local" }` | \ No newline at end of file diff --git a/docs/auditor/10.8/api/filterreference/filters.md b/docs/auditor/10.8/api/filterreference/filters.md new file mode 100644 index 0000000000..f64e207fb0 --- /dev/null +++ b/docs/auditor/10.8/api/filterreference/filters.md @@ -0,0 +1,29 @@ +--- +title: "Filters" +description: "Filters" +sidebar_position: 10 +--- + +# Filters + +Review the table below to learn more about filters. The filters correspond to Activity Record +fields. + +| Filter | Description | Supported Operators | +|-------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| RID | Activity Record ID. Limits your search to a unique key of the Activity Record. Max length: 49. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith | +| Who | Limits your search to a specific user who made the change (e.g., _Enterprise\Administrator_, _administrator@enterprise.onmicrosoft.com_). Max length: 255. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith, InGroup, NotInGroup | +| Where | Limits your search to a resource where the change was made (e.g., _Enterprise-SQL_, _FileStorage.enterprise.local_). Max length: 255. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith | +| ObjectType | Limits your search to objects of a specific type only (e.g., _user_). Max length: 255. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith | +| What | Limits your search to a specific object that was changed (e.g., _NewPolicy_). Max length: 1073741822 | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith | +| DataSource | Limits your search to the selected data source only (e.g., _Active Directory_). Max length: 1073741822 | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith | +| Monitoring Plan | Limits your search to a specific monitoring plan—Netwrix Auditor object that governs data collection. Max length: 255. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith | +| Item | Limits your search to a specific item—object of monitoring—and its type provided in brackets. Max length: 1073741822. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith, Various item types such as AD container, NetApp, Computer, Office 365 tenant, Domain, Oracle Database instance, EMC Isilon, SharePoint farm, etc. | +| Workstation | Limits your search to an originating workstation from which the change was made (e.g., _WKSwin12.enterprise.local_). Max length: 1073741822. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith | +| Detail | Limits your search results to entries that contain the specified information in Detail. Max length: 1073741822. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith | +| Before | Limits your search results to entries that contain the specified before value in Detail. Max length: 536870911. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith | +| After | Limits your search results to entries that contain the specified after value in Detail. Max length: 536870911. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith | +| Action | Limits your search results to certain actions (e.g., Added, Removed, Modified, Read). | Equals (default), NotEqualTo, List includes Added, Removed, Modified, Read, Moved, Renamed, Checked in/out, etc. | +| When | Limits your search to a specified time range. Supports various date/time formats. | Equals (default), NotEqualTo, Within timeframe: Today, Yesterday, LastSevenDays, etc., From..To interval | +| WorkingHours | Limits your search to the specified working hours. You can track activity outside business hours by using the NotEqualTo operator. | "From..To" interval, Equals (default), NotEqualTo | | + diff --git a/docs/auditor/10.8/api/overview.md b/docs/auditor/10.8/api/overview.md new file mode 100644 index 0000000000..3b74c65963 --- /dev/null +++ b/docs/auditor/10.8/api/overview.md @@ -0,0 +1,59 @@ +--- +title: "Integration API" +description: "Integration API" +sidebar_position: 70 +--- + +# Integration API + +Netwrix Auditor Netwrix Risk Insights leverages Netwrix Auditor Integration API. Although you can +always use the add-on as is, but Netwrix encourages customers to create their own integration +add-ons. The add-ons created based on Netwrix Auditor Integration API capabilities are easily +tailored to your specific environment and business requirements. + +Netwrix Auditor Integration API—endless integration, auditing and reporting capabilities. + +The Netwrix Auditor Integration API provides access to audit data collected by Netwrix Auditor +through REST API endpoints. According to the RESTful model, each operation is associated with a URL. +Integration API provides the following capabilities: + +- Data in: Solidify security and meet regulatory compliance standards by enabling visibility into + what is going on in any third-party application. +- Data out: Further automate your business processes, IT security and operations workflows by + enriching third-party solutions with actionable audit data. + +![diagram_thumb_0_0](/images/auditor/10.7/api/diagram_thumb_0_0.webp) + +Netwrix Auditor Integration API operates with XML- and JSON-formatted Activity Records—minimal +chunks of audit data containing information on _who_ changed _what_, _when_ and _where_ this change +was made. XML format is set as default. + +With Integration API you can write Activity Records to the SQL Server-based Audit Database and +access audit data from remote computers. Also, Netwrix prepares add-ons—sample scripts—to help you +integrate your SIEM solutions with Netwrix Auditor. + +Netwrix Auditor Integration API Service is responsible for processing API requests. This component +is installed along with Netwrix Auditor Server and is enabled automatically. By default, Netwrix +Auditor Integration API works over HTTPS protocol using an automatically generated certificate. +Default communication port is 9699. + +Netwrix does not limit you with applications that can be used with Integration API. You can write +RESTful requests using any tool or application you prefer—cURL, Telerik Fiddler, various Google +Chrome or Mozilla FireFox plug-ins, etc. + +## Integration Option + +Integration is a custom item type that helps diversify activity records coming from custom sources +and integrations (e.g., Amazon Web Services, Cisco devices) within Netwrix API data source. It is +optional to add this item to your monitoring plan. + +Complete the following fields: + +| Option | Description | +| ----------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Specify a name for your integration | Specify the add-on name or provide any other name that distinguishes this custom source from any other. This name will be listed in the Item filter in the interactive search. | + +Make sure Integration API is enabled. To check it, navigate to Settings → Integrations tab. See +[Integrations](/docs/auditor/10.7/admin/settings/integrations.md) for more information. + +Make sure to provide a monitoring plan name and item name in activity records before importing data. diff --git a/docs/auditor/10.8/api/ports.md b/docs/auditor/10.8/api/ports.md new file mode 100644 index 0000000000..d05fa5ff93 --- /dev/null +++ b/docs/auditor/10.8/api/ports.md @@ -0,0 +1,42 @@ +--- +title: "Integration API Ports" +description: "Integration API Ports" +sidebar_position: 20 +--- + +# Integration API Ports + +Review a full list of protocols and ports required for add-ons or any queries leveraging Netwrix +Auditor Integration API. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to remote ports on the source and inbound connections to local ports on + the target. + +On any computer you plan to host the add-on (source), allow outbound connections to remote 9699 TCP +port. On the computer where Netwrix Auditor Server resides (target), allow inbound connections to +local 9699 TCP port. + +| Add-on | Port | Protocol | Source | Target | Purpose | +| ---------------------------------------------------------------------------------------------------------------------------------------------------- | ------- | ------------ | --------------------- | ---------------------------- | ------------------------------------------------------------------------------------------------------------------------------- | +| All add-ons or queries | 9699 | TCP | Script or query host | Netwrix Auditor  Server | The default Netwrix Auditor Integration API port. However, you can configure another TCP port for that purpose. | +| AlienVault USM | 53 | UDP/TCP | Script host | DNS Server | DNS Client | +| Amazon Web Services | 443 | TCP | Script host | Amazon Web Services | — | +| 53 | UDP/TCP | Script host | DNS server | DNS Client | | +|
  • Event Log Export
  • IBM QRadar
  • Intel Security
  • LogRhythm
  • SolarWinds Log & Event Manager
  • Splunk
| 53 | UDP/TCP | Script host | DNS server | DNS Client | +| CEF Export | 53 | UDP/TCP | Script host | DNS server | DNS Client | +|
  • Cisco Network Devices
  • Privileged User Monitoring
  • General Linux Syslog
| 514 | UDP | Cisco network devices | Service host | The default port for Cisco network devices remote Syslog logging. However, you can configure another UDP port for that purpose. | +| 53 | UDP | Service host | DNS server | DNS Client | | +| HPE ArcSight | 515 | TCP | Script host | ArcSight Logger | — | +| 514 | UDP | Script host | ArcSight Logger | — | | +| 53 | UDP/TCP | Script host | DNS server | DNS Client | | +| 53 | UDP | Script host | DNS server | DNS Client | | +| RADIUS Server | 139 | TCP | Script host | RADIUS server | RPC/NP Eventlog | +| 445 | TCP | Script host | RADIUS server | RPC/NP Eventlog | | +| 137 | UDP | Script host | RADIUS server | RPC/NP Eventlog | | +| 138 | UDP | Script host | RADIUS server | RPC/NP Eventlog | | +| 135 | TCP | Script host | RADIUS server | RPC Endpoint Mapper Eventlog | | +| 1024 – 65535 (Dynamically assigned) | TCP | Script host | RADIUS server | RPC Eventlog | | +| 53 | UDP/TCP | Script host | DNS server | DNS Client | | + diff --git a/docs/auditor/10.8/api/postdata/_category_.json b/docs/auditor/10.8/api/postdata/_category_.json new file mode 100644 index 0000000000..7d177b2dfc --- /dev/null +++ b/docs/auditor/10.8/api/postdata/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Post Data", + "position": 90, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/api/postdata/activityrecords.md b/docs/auditor/10.8/api/postdata/activityrecords.md new file mode 100644 index 0000000000..30d9070a0e --- /dev/null +++ b/docs/auditor/10.8/api/postdata/activityrecords.md @@ -0,0 +1,151 @@ +--- +title: "Activity Records" +description: "Activity Records" +sidebar_position: 30 +--- + +# Activity Records + +In Netwrix terms, one operable chunk of information is called the Activity Record. Netwrix Auditor +Integration API processes both XML and JSON Activity Records. The Activity Records have the format +similar to the following—the exact schema depends on operation (input or output). + +**XML:** +```xml + + + + Who + Object Type + Action + What + When + Where + + Unique ID + Name + + Data source + + Item name (Item type) + + + + Before Value + After Value + Property + Text + + + + ... + +``` + +**JSON:** +```json +[ + { + "Action": "Action", + "MonitoringPlan": { + "ID": "Unique ID", + "Name": "Name" + }, + "DataSource": "Data source", + "Item": { + "Name": "Item name (Item type)" + }, + "DetailList": [ + { + "Before": "Before Value", + "After": "After Value", + "PropertyName": "Property", + "Message": "Text" + } + ], + "ObjectType": "Object Type", + "What": "What", + "When": "When", + "Where": "Where", + "Who": "Who" + }, + {...} +] +``` + +To feed data from a custom audit source to Netwrix Auditor, send a POST request containing Activity +Records. [Write Activity Records](/docs/auditor/10.7/api/writeactivityrecords.md) + +## Schema + +The Activity Records you want to feed to Netwrix Auditor must be compatible with input schema. The +output schema resembles the input schema and can be used to validate Activity Records returned +by Netwrix Auditor before further data parsing. + +| Format | Schema description | +| ------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| XML | The file must be compatible with the XML schema. On the computer where Auditor Server resides, you can find XSD file under _Netwrix_Auditor_installation_folder\Audit Core\API Schemas_. The `ActivityRecordList` root element includes the `ActivityRecord `elements. Each `ActivityRecord` contains values in the `Who`, `When`, `Where`, etc. fields. The `MonitoringPlan` element contains sub-elements such as `Name `and `ID`, the `Item `element contains `Name`. Both `MonitoringPlan` and `Item `are optional for input Activity Records. The `DetailList `element is optional too, it may include one or more `Detail `entries. The `Detail `element may contain sub-elements with values (e.g., before and after values). For input Activity Records, the data source is automatically set to Netwrix API. minOccurs="0" indicates that element is optional and may be absent when writing data to the Audit Database. | +| JSON | Activity Records are sent as an array collected within square brackets [ ]. Each `ActivityRecord` object is collected in braces {} and contains values in the `Who`, `When`, `Where`, etc. fields. The `DetailList `field is not mandatory, it may include one or more detail. The `Detail `field may contain sub-fields with values (e.g., before and after values). For input Activity Records, the data source is automatically set to Netwrix API. | + +## Example + +The examples below show an output Activity Record. + +**XML:** +```xml + + + + Modified + + {42F64379-163E-4A43-A9C5-4514C5A23798} + Compliance + + Exchange Online + + mail@enterprise.onmicrosoft.com (Office 365 tenant) + + Mailbox + Shared Mailbox + 2017-03-17T09:37:11Z + BLUPR05MB1940 + admin@enterprise.onmicrosoft.com + + + 1 + 2 + Custom_attribute + + + + +``` + +**JSON:** +```json +[ + { + "Action": "Modified", + "MonitoringPlan": { + "ID": "{42F64379-163E-4A43-A9C5-4514C5A23798}", + "Name": "Compliance" + }, + "DataSource": "Exchange Online", + "Item": { + "Name": "mail@enterprise.onmicrosoft.com (Office 365 tenant)" + }, + "ObjectType": "Mailbox", + "What": "Shared Mailbox", + "When": "2017-03-17T09:37:11Z", + "Where": "BLUPR05MB1940", + "Who": "admin@enterprise.onmicrosoft.com", + "DetailList": [ + { + "PropertyName": "Custom_Attribute", + "Before": "1", + "After": "2" + } + ] + } +] +``` \ No newline at end of file diff --git a/docs/auditor/10.8/api/postdata/continuationmark.md b/docs/auditor/10.8/api/postdata/continuationmark.md new file mode 100644 index 0000000000..c50df2b17d --- /dev/null +++ b/docs/auditor/10.8/api/postdata/continuationmark.md @@ -0,0 +1,97 @@ +--- +title: "Continuation Mark" +description: "Continuation Mark" +sidebar_position: 10 +--- + +# Continuation Mark + +When exporting data from the Audit Database, a successful response includes: + +- For XML—A `` inside the `` root element. +- For JSON—An object with the "ContinuationMark" field. + +Continuation mark is a checkpoint, use it to retrieve data starting with the next Activity Record. + +Send a POST request containing Continuation mark to the following endpoints: + +| Method | Endpoint | Description | +| ------ | ----------------------------------------------------------------------- | --------------------------------------------------------- | +| POST | [/netwrix/api/v1/activity_records/enum ](/docs/auditor/10.7/api/retrieveactivityrecords.md) | Returns next Activity Records. | +| POST | [/netwrix/api/v1/activity_records/search](/docs/auditor/10.7/api/searchactivityrecords.md) | Returns next Activity Records matching a filter criteria. | + +Ensure to pass information about transferred data, including `Content-Type:application/xml` or +`application/json `and encoding. The syntax greatly depends on the tool you use. + +You can send as many POST requests as you want. A new response returns next Activity Records and a +new Continuation mark. Once all the Activity Records are retrieved, you will receive a 200 OK +response with no Activity Records inside the `ActivityRecordList` root element (XML) or array +(JSON). + +## Schema + +Copy the contents of `ContinuationMark` to a separate XML or JSON file (e.g., ContMark.xml). + +| Format | Schema description | +| ------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| XML | The file must be compatible with the XML schema. On the computer where Auditor Server resides, you can find XSD file under _Netwrix_Auditor_installation_folder\Audit Core\API Schemas_. The `ContinuationMark` root element contains a value previously returned by Netwrix Auditor Integration API. | +| JSON | JSON-formatted Continuation mark includes the field value in quotes. | + +If you want to retrieve next Activity Records for your search, include the Continuation mark to your +Search parameters file. [Search Parameters](/docs/auditor/10.7/api/postdata/searchparameters.md) + +## Example + +[Retrieve Activity Records](/docs/auditor/10.7/api/retrieveactivityrecords.md) +```xml + + +PG5yPjxuIG49IntFNzA...PjwvYT48L24+PC9ucj4A+PC9ucj4A + +``` + + +[Search Activity Records](/docs/auditor/10.7/api/searchactivityrecords.md) + +```xml + + + PG5yPjxuIG49IntFNzA...PjwvYT48L24+PC9ucj4A+PC9ucj4A + + Administrator + Active Directory + Added + Group + + 2016-09-16T16:30:00+11:00 + 2017-03-16T00:00:00Z + + + +``` + +[Retrieve Activity Records](/docs/auditor/10.7/api/retrieveactivityrecords.md) + +```json +`"PG5yPjxuIG49IntFNzA...PjwvYT48L24+PC9ucj4A"` +``` + +[Search Activity Records](/docs/auditor/10.7/api/searchactivityrecords.md) + +```json + { + "ContinuationMark": "PG5yPjxuIG49IntFNzA...PjwvYT48L24+PC9ucj4A+PC9ucj4A", + "FilterList": { + "Who": "Administrator", + "DataSource": "Active Directory", + "Action": "Added", + "ObjectType": { + "DoesNotContain": "Group" + }, + "When": { + "From": "2016-09-16T16:30:00+11:00", + "To": "2017-03-16T00:00:00Z" + } + } +} +``` \ No newline at end of file diff --git a/docs/auditor/10.8/api/postdata/overview.md b/docs/auditor/10.8/api/postdata/overview.md new file mode 100644 index 0000000000..5a9b55d517 --- /dev/null +++ b/docs/auditor/10.8/api/postdata/overview.md @@ -0,0 +1,39 @@ +--- +title: "Post Data" +description: "Post Data" +sidebar_position: 90 +--- + +# Post Data + +While running requests to Netwrix Auditor Integration API endpoints, you will need to post data, +e.g., a Continuation mark in order to continue retrieving Activity Records, Search parameters to +find Activity Records matching your search, or Activity Records you want to feed to the Audit +Database. Data is sent in the request body and must be formatted according to XML convention and +compatible with Netwrix-provided XSD schemas. + +In Netwrix Auditor 9.0, Netwrix has updated API schemas. Make sure to check and update your custom +scripts and add-ons. [Compatibility Notice](/docs/auditor/10.7/api/compatibility.md) + +The file must be formatted in accordance with XML standard. The following symbols must be replaced +with corresponding XML entities: & (ampersand), " (double quotes), ' (single quotes), < (less than), +and > (greater than) symbols. + +| Symbol | XML entity | +| ----------------------------- | -------------------------------------------- | +| & e.g., Ally & Sons | & e.g., Ally & Sons | +| " e.g., Domain1\Users\"Stars" | " e.g., Domain1\Users\"Stars" | +| ' e.g., Domain1\Users\O'Hara | ' e.g., Domain1\Users\O'Hara | +| < e.g., CompanyDC`<100` | < e.g., CompanyDC<100 | +| > e.g., ID>500 | > e.g., ID>500 | + +Also, Netwrix allows transferring data in JSON format (organized as name and value pairs). JSON file +must be formatted in accordance with JSON specification. Special characters in JSON strings must be +preceded with the \ character: " (double quotes), / (slash), \ (backslash). E.g., +"\\local\\enterprise\\Users\\Jason Smith". Trailing comma is not supported. + +Review the following for additional information: + +- [Continuation Mark](/docs/auditor/10.7/api/postdata/continuationmark.md) +- [Search Parameters](/docs/auditor/10.7/api/postdata/searchparameters.md) +- [Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) diff --git a/docs/auditor/10.8/api/postdata/searchparameters.md b/docs/auditor/10.8/api/postdata/searchparameters.md new file mode 100644 index 0000000000..6f12249a0f --- /dev/null +++ b/docs/auditor/10.8/api/postdata/searchparameters.md @@ -0,0 +1,113 @@ +--- +title: "Search Parameters" +description: "Search Parameters" +sidebar_position: 20 +--- + +# Search Parameters + +Send the search parameters in the POST request body to narrow down the search results returned by +the [/netwrix/api/v1/activity_records/search](/docs/auditor/10.7/api/searchactivityrecords.md) endpoint. The Search +parameters file includes one or more filters with operators and values (e.g., to find entries where +_data source_ is _SharePoint_); it may also contain a [Continuation Mark](/docs/auditor/10.7/api/postdata/continuationmark.md). +Generally, the Search parameters file looks similar to the following: + +**XML:** +```xml + + + Continuation mark + + Value + Value1 + Value2 + Value1 + Value2 + Value1 + Value2 + + +``` + +**JSON:** +```json +{ + "ContinuationMark": "Continuation Mark", + "FilterList": { + "Filter1": "Value", + "Filter2": ["Value1", "Value2"], + "Filter3": { + "MatchType1": "Value1", + "MatchType2": "Value2" + }, + "Filter4": [ + "Value1", + {"MatchType": "Value2"} + ] + } +} +``` + +Ensure to pass information about transferred data, including `Content-Type:application/xml` or +`application/json `and encoding. The syntax greatly depends on the tool you use. + +## Schema + +| Format | Schema description | +| ------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| XML | The file must be compatible with the XML schema. On the computer where Auditor Server resides, you can find XSD file under _Netwrix_Auditor_installation_folder\Audit Core\API Schemas_. The `ActivityRecordSearch` root element includes the `FilterList `element with one or more `Filter `elements inside. The root element may contain a `ContinuationMark `element. Each `Filter `specified within the `FilterList `must have a value to search for. The element may also include a modifier—a match type operator. minOccurs="0" indicates that element is optional and may be absent in the Search parameters. ![filterschema](/images/auditor/10.7/api/postdata/filterschema.webp) | +| JSON | The `FilterList `object includes with one or more `Filter `entries inside. JSON may contain a `ContinuationMark `object. Each `Filter `specified within the `FilterList `must have a value to search for. The entry may also include a modifier—a match type operator. | + +Review the following for additional information: + +- [Filters](/docs/auditor/10.7/api/filterreference/filters.md) +- [Operators](/docs/auditor/10.7/api/filterreference/filteroperators.md) + +## Example + +**XML:** +```xml + + + + Administrator + My Hybrid Cloud enterprise + Active Directory + Exchange + Removed + Added + Group + + 2016-01-16T16:30:00+11:00 + 2017-01-01T00:00:00Z + + + +``` + +**JSON:** +```json +{ + "FilterList": { + "Who": { + "NotEqualTo": "Administrator" + }, + "MonitoringPlan": "My Hybrid Cloud enterprise", + "DataSource": [ + "Active Directory", + { "StartsWith": "Exchange" } + ], + "Action": [ + "Added", + "Removed" + ], + "ObjectType": { + "DoesNotContain": "Group" + }, + "When": { + "From": "2016-01-16T16:30:00+11:00", + "To": "2017-01-01T00:00:00Z" + } + } +} +``` diff --git a/docs/auditor/10.8/api/prerequisites.md b/docs/auditor/10.8/api/prerequisites.md new file mode 100644 index 0000000000..5f60ff182e --- /dev/null +++ b/docs/auditor/10.8/api/prerequisites.md @@ -0,0 +1,43 @@ +--- +title: "Prerequisites" +description: "Prerequisites" +sidebar_position: 10 +--- + +# Prerequisites + +Netwrix Auditor Integration API uses HTTPS for communication with the automatically generated +certificate. The default communication port is 9699. + +Refer to the [Security](/docs/auditor/10.7/api/security.md) topic for detailed instructions on how to disable HTTPS and +manage other API settings. + +## Configure Integration API Settings + +Follow the steps to change the port. + +**Step 1 –** In the Netwrix Auditor main window, navigate to the Integration tile. + +**Step 2 –** Make sure the Leverage Integration API option is enabled. + +**Step 3 –** Click Modify under the API settings section and specify a port number. Windows firewall +rule will be automatically created. + +**Step 4 –** If you use a third-party firewall, you must create a rule for inbound connections +manually. + +![Integration API Settings](/images/auditor/10.7/addon/connectwise/integrations_thumb_0_0.webp) + +## Configure Audit Database Settings + +When you first configure the Audit Database settings in Netwrix Auditor, the product also creates +several databases for special purposes, including Netwrix_Auditor_API. This database is designed to +store data imported from the other sources using Netwrix Auditor Integration API. + +Make sure that the Audit Database settings are configured in Netwrix Auditor. To check or configure +these settings, navigate to the **Settings > Audit Database**. + +You cannot use Netwrix Auditor Integration API without configuring the Audit Database. + +Refer to the [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topic for detailed instructions on +how to configure SQL Server settings. diff --git a/docs/auditor/10.8/api/responsestatuscodes.md b/docs/auditor/10.8/api/responsestatuscodes.md new file mode 100644 index 0000000000..32135d9094 --- /dev/null +++ b/docs/auditor/10.8/api/responsestatuscodes.md @@ -0,0 +1,22 @@ +--- +title: "Response Status Codes" +description: "Response Status Codes" +sidebar_position: 100 +--- + +# Response Status Codes + +| Code | Status | Write Activity Records | Retrieve, search Activity Records | +| ---------------------------- | ------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| 200 OK | Success | Success. The body is empty. Activity Records were written to the Audit Database and the Long-Term Archive. | Success. The body contains Activity Records. Activity Records were retrieved from the Audit Database. | +| 400 Bad Request | Error | Error validating Activity Records. Make sure the Activity Records are compatible with the [Schema](postdata/activityrecords.md#schema). | Error validating request parameters or post data. Make sure the post data files (Continuation mark, Search parameters) are compatible with their schemas and the `?count=` parameter is valid. | +| 401 Unauthorized | Error | The request is unauthorized and the body is empty. See for [API Endpoints](/docs/auditor/10.7/api/endpoints.md) more information. | | +| 404 Not Found | Error | Error addressing the endpoint. The body is empty. The requested endpoint does not exist (e.g., /netwrix/api/v1/mynewendpoint/). | | +| 405 Method Not Allowed | Error | Error addressing the endpoint. The body is empty. Wrong HTTP request was sent (any except POST). | Error addressing the endpoint. The body is empty. Wrong HTTP request was sent (any except GET or POST). | +| 413 Request Entity Too Large | Error | Error transferring files. The body is empty. The posted file exceeds supported size. | | +| 500 Internal Server Error | Error | Error writing Activity Records to the Audit Database or the Long-Term Archive:
  • One or more Activity Records were not processed.
  • Netwrix Auditor license has expired.
  • Internal error occurred.
| Error retrieving Activity Records from the Audit Database:
  • Netwrix Auditorlicense has expired.
  • The Netwrix Auditor Archive Service is unreachable. Try restarting the service on the computer that hosts Netwrix Auditor Server.
  • Internal error occurred.
| +| 503 Service Unavailable | Error | The Netwrix Auditor Archive Service is busy or unreachable. Try restarting the service on the computer that hosts Netwrix Auditor Server. | — | + + +Most failed requests contain error in the response body (except those with empty body, e.g., 404, +405). [Error Details](/docs/auditor/10.7/api/errordetails.md) diff --git a/docs/auditor/10.8/api/retrieveactivityrecords.md b/docs/auditor/10.8/api/retrieveactivityrecords.md new file mode 100644 index 0000000000..17a835ea4b --- /dev/null +++ b/docs/auditor/10.8/api/retrieveactivityrecords.md @@ -0,0 +1,142 @@ +--- +title: "Retrieve Activity Records" +description: "Retrieve Activity Records" +sidebar_position: 40 +--- + +# Retrieve Activity Records + +## Endpoint + +Use to export data from the Audit Database. By default, first 1,000 Activity Records are returned. +To get the next Activity Records, send a POST request to the same endpoint containing a Continuation +mark. + +| Method | Endpoint | POST Data | +| ------ | --------------------------------------------------------------------------------------- | ------------------------------------------------- | +| GET | `https://{host:port}/netwrix/api/v1/activity_records/enum{?format=json}{&count=Number}` | — | +| POST | `https://{host:port}/netwrix/api/v1/activity_records/enum{?format=json}{&count=Number}` | [Continuation Mark](/docs/auditor/10.7/api/postdata/continuationmark.md) | + +## Request Parameters + +| Parameter | Mandatory | Description | +| --------------- | --------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| `host:port` | Yes | Replace with the IP address or a name of your Netwrix Auditor Server host and port (e.g., _172.28.6.15:9699_, _stationwin12:9699_, _WKSWin2012.enterprise.local:9699_). With enabled HTTPS, provide the computer name as it appears in certificate properties. | +| `format=json` | No | Add this parameter to retrieve data in JSON format. Otherwise, XML-formatted Activity Records will be returned. | +| `count=Number ` | No | Add this parameter to define the number of Activity Records to be exported. Replace `Number` with a number (e.g.,` &count=1500`). | + +Optional parameters (format and count) can be provided in any order. The first parameter must start +with ?, others are joined with &, no spaces required (e.g., `?format=json&count=1500`). + +## Response + +| Request Status | Response | +|----------------|--------------------------------------------------------------------------------------------------------------------------| +| Success | The HTTP status code in the response header is 200 OK. The response body contains Activity Records and Continuation Mark. | +| | `HTTP/1.1 200 OK` | +| | `Server: Microsoft-HTTPAPI/2.0` | +| | `Content-Length: 311896` | +| | `Content-Type: application/xml` | +| | `Date: Fri, 08 Apr 2017 13:56:22 GMT` | +| or | `HTTP/1.1 200 OK` | +| | `Server: Microsoft-HTTPAPI/2.0` | +| | `Content-Length: 311896` | +| | `Content-Type: application/json` | +| | `Date: Fri, 08 Apr 2017 13:56:22 GMT` | +| Error | The header status code is an error code. Depending on the error code, the response body may contain an error object. | + +## Usage Example—Retrieve All Activity Records + +This example describes how to retrieve all Activity Records from the Audit Database. + +**Step 1 –** Send a GET request. For example: + +| Format | Request | +| ------ | ----------------------------------------------------------------------------------------------------------------------- | +| XML | `curl https://WKSWin2012:9699/netwrix/api/v1/activity_records/enum -u Enterprise\NetwrixUser:NetwrixIsCool` | +| JSON | `curl https://WKSWin2012:9699/netwrix/api/v1/activity_records/enum?format=json -u Enterprise\NetwrixUser:NetwrixIsCool` | + +**Step 2 –** Receive the response. Activity Records are retrieved according to the account's +delegated scope. Below is an example of a successful GET request. The status is 200 OK. For XML, a +response body contains the `ActivityRecordList` root element with Activity Records and a +Continuation mark inside. For JSON, a response body contains the `ActivityRecordList` array with +Activity Records collected in braces {} and a Continuation mark. + +**XML:** + +```xml + + + PG5yPjxuIG49IntFNzA...PjwvYT48L24+PC9ucj4A + + + AD Monitoring + {42F64379-163E-4A43-A9C5-4514C5A23798} + + Active Directory + + enterprise.local (Domain) + + user + 20160215110503420B9451771F5964A9EAC0A5F35307EA155 + \local\enterprise\Users\Jason Smith + Added + 2017-02-14T15:42:34Z + EnterpriseDC1.enterprise.local + ENTERPRISE\Administrator + EnterpriseDC1.enterprise.local + + ... + ... + +``` +**JSON:** + +```json +{ + "ActivityRecordList": [ + { + "Action": "Added", + "MonitoringPlan": { + "ID": "{42F64379-163E-4A43-A9C5-4514C5A23798}", + "Name": "AD Monitoring" + }, + "DataSource": "Active Directory", + "Item": {"Name": "enterprise.local (Domain)"}, + "ObjectType": "user", + "RID": "20160215110503420B9451771F5964A9EAC0A5F35307EA155", + "What": "\\local\\enterprise\\Users\\Jason Smith", + "When": "2017-02-14T15:42:34Z", + "Where": "EnterpriseDC1.enterprise.local", + "Who": "ENTERPRISE\\Administrator", + "Workstation": "EnterpriseDC1.enterprise.local" + }, + {...}, + {...} + ], + "ContinuationMark": "PG5yPjxuIG49IntFNzA...PjwvYT48L24+PC9ucj4A" +} +``` + +**Step 3 –** Continue retrieving Activity Records. Send a POST request containing this Continuation +mark to the same endpoint. See the [Continuation Mark](/docs/auditor/10.7/api/postdata/continuationmark.md) topic for more +information. For example: + +| | +| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| XML | +| `curl -H "Content-Type: application/xml; Charset=UTF-8" https://WKSWin2012:9699/netwrix/api/v1/activity_records/enum -u Enterprise\NetwrixUser:NetwrixIsCool --data-binary @C:\APIdocs\ContMark.xml` ` `````` `````` PG5yPjxuIG49IntFNzA...PjwvYT48L24+PC9ucj4A+PC9ucj4A `````` ` | +| JSON | +| `curl -H "Content-Type: application/json; Charset=UTF-8" https://WKSWin2012:9699/netwrix/api/v1/activity_records/enum?format=json -u Enterprise\NetwrixUser:NetwrixIsCool --data-binary ``````@C:\APIdocs\ContMark.json` `"PG5yPjxuIG49IntFNzA...PjwvYT48L24+PC9ucj4A+PC9ucj4A"` | + +Ensure to pass information about transferred data, including `Content-Type:application/xml` or +`application/json `and encoding. The syntax greatly depends on the tool you use. + +**Step 4 –** Receive the next response. On success, the status is 200 OK. For XML, a response body +contains the `ActivityRecordList` root element with next Activity Records and a new Continuation +mark inside. For JSON, a response body contains the `ActivityRecordSearch` array with next Activity +Records collected in braces {} and a new Continuation mark. + +**Step 5 –** Continue retrieving Activity Records. Send POST requests containing new Continuation +marks until you receive a 200 OK response with no Activity Records inside the `ActivityRecordList`. +It means you reached the end of the Audit Database. diff --git a/docs/auditor/10.8/api/searchactivityrecords.md b/docs/auditor/10.8/api/searchactivityrecords.md new file mode 100644 index 0000000000..9bf12ab8e3 --- /dev/null +++ b/docs/auditor/10.8/api/searchactivityrecords.md @@ -0,0 +1,199 @@ +--- +title: "Search Activity Records" +description: "Search Activity Records" +sidebar_position: 50 +--- + +# Search Activity Records + +The search functionality in the Netwrix Auditor Integration API reproduces interactive search +available in the Netwrix Auditor client. See the +[Netwrix Auditor Intelligence Guide](https://www.netwrix.com/download/documents/Netwrix_Auditor_User_Guide.pdf) +and [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) topic for detailed instruction on +how to search and filter audit data. + +As the interactive search in the Netwrix Auditor client, this REST API endpoint allows you to +retrieve Activity Records matching a certain criteria. You can create your own set of filters in the +Search parameters file. See the [Search Parameters](/docs/auditor/10.7/api/postdata/searchparameters.md) topic for more +information. Activity Records are retrieved according to the account's delegated scope. + +## Endpoint + +To retrieve Activity Records matching a certain criteria, send a POST request containing search +parameters (also may include a Continuation mark). See the +[Search Parameters](/docs/auditor/10.7/api/postdata/searchparameters.md) topic for more information. + +| Method | Endpoint | POST Data | +| ------ | ----------------------------------------------------------------------------------------- | ------------------------------------------------- | +| `POST` | `https://{host:port}/netwrix/api/v1/activity_records/search{?format=json}{&count=Number}` | [Search Parameters](/docs/auditor/10.7/api/postdata/searchparameters.md) | + +## Request Parameters + +| Parameter | Mandatory | Description | +| -------------- | --------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| `host:port` | Yes | Replace with the IP address or a name of your Netwrix Auditor Server host and port (e.g., _172.28.6.15:9699_, _stationwin12:9699_, _WKSWin2012.enterprise.local:9699_). With enabled HTTPS, provide the computer name as it appears in certificate properties. | +| `format=json` | No | Add this parameter to retrieve data in JSON format. Otherwise, XML-formatted Activity Records will be returned. | +| `count=Number` | No | Add this parameter to define the number of Activity Records to be exported. Replace `Number` with a number (e.g.,` ?count=1500`). | + +Optional parameters (format and count) can be provided in any order. The first parameter must start +with ?, others are joined with &, no spaces required (e.g., `?format=json&count=1500`). + +## Response + +| Request Status | Response | +|----------------|--------------------------------------------------------------------------------------------------------------------------| +| Success | The HTTP status code in the response header is 200 OK. The response body contains Activity Records and Continuation Mark. | +| | **Example for XML response: ** | +| | ``` | +| | HTTP/1.1 200 OK | +| | Server: Microsoft-HTTPAPI/2.0 | +| | Content-Length: 311896 | +| | Content-Type: application/xml | +| | Date: Fri, 08 Apr 2017 13:56:22 GMT | +| | ``` | +| | **Example for JSON response: ** | +| | ``` | +| | HTTP/1.1 200 OK | +| | Server: Microsoft-HTTPAPI/2.0 | +| | Content-Length: 311896 | +| | Content-Type: application/json | +| | Date: Fri, 08 Apr 2017 13:56:22 GMT | +| | ``` | +| Error | The header status code is an error code. Depending on the error code, the response body may contain an error object. | + +## Usage Example—Retrieve All Activity Records Matching Search Criteria + +Follow the steps- to retrieve all Activity Records matching search criteria. + +**Step 1 –** Send a POST request containing search parameters. See the +[Search Parameters](/docs/auditor/10.7/api/postdata/searchparameters.md) topic for more information. + +As an example, this request retrieves Activity Records where administrator added new objects to the +Active Directory domain. Groups and group policies are not taken into account. Changes could only +occur between September 16, 2016 and March 16, 2017. + +Ensure to pass information about transferred data, including `Content-Type:application/xml` or +`application/json `and encoding. The syntax greatly depends on the tool you use. + +**Step 2 –** Receive the response. Activity Records are retrieved according to the account's +delegated scope. Below is an example of a successful search request. The status is 200 OK. For XML, +a response body contains the `ActivityRecordList` root element with Activity Records matching filter +criteria and a Continuation mark inside. For JSON, a response body contains the `ActivityRecordList` +array with Activity Records matching filter criteria and collected in braces {}, and a Continuation +mark. + +**XML:** + +```xml + + + PG5yPjxuIG49IntFNzA...PjwvYT48L24+PC9ucj4A + + + AD Monitoring + {42F64379-163E-4A43-A9C5-4514C5A23798} + + Active Directory + + enterprise.local (Domain) + + user + 20160215110503420B9451771F5964A9EAC0A5F35307EA155 + \local\enterprise\Users\Jason Smith + Added + 2017-02-14T15:42:34Z + EnterpriseDC1.enterprise.local + ENTERPRISE\Administrator + EnterpriseDC1.enterprise.local + + ... + ... + +``` + +**JSON:** + +```json +{ + "ActivityRecordList": [ + { + "Action": "Added", + "MonitoringPlan": { + "ID": "{42F64379-163E-4A43-A9C5-4514C5A23798}", + "Name": "AD Monitoring" + }, + "DataSource": "Active Directory", + "Item": {"Name": "enterprise.local (Domain)"}, + "ObjectType": "user", + "RID": "20160215110503420B9451771F5964A9EAC0A5F35307EA155", + "What": "\\local\\enterprise\\Users\\Jason Smith", + "When": "2017-02-14T15:42:34Z", + "Where": "EnterpriseDC1.enterprise.local", + "Who": "ENTERPRISE\\Administrator", + "Workstation": "EnterpriseDC1.enterprise.local" + }, + {...}, + {...} + ], + "ContinuationMark": "PG5yPjxuIG49IntFNzA...PjwvYT48L24+PC9ucj4A" +} +``` + +**Step 3 –** Continue retrieving Activity Records. Send a POST request containing your search +parameters and this Continuation mark to the same endpoint. +See the [Continuation Mark](/docs/auditor/10.7/api/postdata/continuationmark.md) for additional information. + +**XML:** + +```xml + + + PG5yPjxuIG49IntFNzA...PjwvYT48L24+PC9ucj4A+PC9ucj4A + + Administrator + Active Directory + Added + Group + + 2016-09-16T16:30:00+11:00 + 2017-03-16T00:00:00Z + + + +``` + +**JSON:** + +```bash +curl -H "Content-Type:application/json; Charset=UTF-8" https://WKSWin2012:9699/netwrix/api/v1/activity_records/search?format=json -u Enterprise\NetwrixUser:NetwrixIsCool --data-binary @C:\APIdocs\Search.json +``` + +```json +{ + "ContinuationMark": "PG5yPjxuIG49IntFNzA...PjwvYT48L24+PC9ucj4A+PC9ucj4A", + "FilterList": { + "Who": "Administrator", + "DataSource": "Active Directory", + "Action": "Added", + "ObjectType": { "DoesNotContain": "Group" }, + "When": { + "From": "2016-09-16T16:30:00+11:00", + "To": "2017-03-16T00:00:00Z" + } + } +} + +``` + +Ensure to pass information about transferred data, including `Content-Type:application/xml` or +`application/json `and encoding. The syntax greatly depends on the tool you use. + +**Step 4 –** Receive the next response. On success, the status is 200 OK. For XML, a response body +contains the `ActivityRecordList` root element with next Activity Records and a new Continuation +mark inside. For JSON, a response body contains the `ActivityRecordSearch` array with next Activity +Records collected in braces {} and a new Continuation mark. + +**Step 5 –** Continue retrieving Activity Records. Send POST requests containing your search +parameters with new Continuation marks until you receive a 200 OK response with no Activity Records +inside the `ActivityRecordList`. It means you retrieved all Activity Records matching your search +criteria. diff --git a/docs/auditor/10.8/api/security.md b/docs/auditor/10.8/api/security.md new file mode 100644 index 0000000000..aba998bef3 --- /dev/null +++ b/docs/auditor/10.8/api/security.md @@ -0,0 +1,45 @@ +--- +title: "Security" +description: "Security" +sidebar_position: 120 +--- + +# Security + +By default, Netwrix Auditor API uses HTTPS for sending requests to its endpoints. Netwrix encrypts +data with a self-signed automatically generated SSL certificate and strongly recommends you to +replace it with a new secured certificate acquired from any reliable source. + +The automatically generated Netwrix API certificate is located in the Personal store. To enable +trust on remote computers, install this certificate in the Trusted Root Certification Authorities +store. + +![certificatestore_thumb_0_0](/images/auditor/10.7/api/certificatestore_thumb_0_0.webp) + +To manage API security settings with APIAdminTool.exe + +Netwrix provides a command-line tool for managing Integration API. The tool allows switching between +HTTP and HTTPS, assigning new certificates, etc. + +1. On the computer where Auditor Server resides, start the Command Prompt and run the tool. The tool + is located in the _Netwrix Auditor installation folder_, inside the _Audit Core_ folder. For + example: + + `C:\>cd C:\Program Files (x86)\Netwrix Auditor\Audit Core` + + `C:\Program Files (x86)\Netwrix Auditor\Audit Core>APIAdminTool.exe` + +2. Execute one of the following commands depending on your task. Review the tips for running the + tool: + + - Some commands require parameters. Provide parameters with values (parameter= value) if you + want to use non-default. E.g., `APIAdminTool.exe api http port= 4431`. + - Append `help `to any command to see available parameters and sub-commands. E.g., + `APIAdminTool.exe api help`. + +| To... | Execute... | +| ---------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Disable API | `APIAdminTool.exe api disable` This command duplicates the checkbox on the Integrations page in Netwrix Auditor. | +| Switch to HTTP | `APIAdminTool.exe api http` Netwrix recommends switching to HTTP only in safe intranet environments. To use a non-default port (9699), append a parameter port with value to the command above (e.g.,` port= 4431`). | +| Switch to HTTPS | `APIAdminTool.exe api https` Run this command if you want to continue using Netwrix-generated certificate. To use a non-default port (9699), append a parameter port with value to the command above (e.g., `port= 4431`). | +| Assign a new SSL certificate | `APIAdminTool.exe api https certificate` Run this command if you want to apply a new certificate and use it instead default. You must add a certificate to the store before running this command. Provide parameters to specify a certificate:
  • For a certificate exported to a file:
  • path—Mandatory, defines certificate location.
  • store—Optional, defines the store name where certificate is located. By default, Personal. For example: `APIAdminTool.exe api https certificate path= C:\SecureCertificate.cef store= Personal`
  • For a self-signed certificate:
  • subject—Mandatory, defines certificate name.
  • validFrom—Optional, defines a certificate start date. By default, today.
  • validTo—Optional, defines a certificate expiration date. By default, 5 years after a validFrom date. For example: `APIAdminTool.exe api https certificate subject= New validTo= 01/01/2024` If you want to create a new self-signed certificate for a default period of 5 years from the current date: `APIAdminTool.exe api https certificate subject= "Netwrix Integration API"`
  • For a certificate specified using thumbprint:
  • store—Optional, defines the store name where certificate is located. By default, Personal.
  • thumbprint—Mandatory, defines a thumbprint identifier for a certificate. For example: `APIAdminTool.exe api https certificate thumbprint= 3478cda8586675e420511dc0fdf59078093eeeda`
| diff --git a/docs/auditor/10.8/api/writeactivityrecords.md b/docs/auditor/10.8/api/writeactivityrecords.md new file mode 100644 index 0000000000..befd3b0507 --- /dev/null +++ b/docs/auditor/10.8/api/writeactivityrecords.md @@ -0,0 +1,152 @@ +--- +title: "Write Activity Records" +description: "Write Activity Records" +sidebar_position: 60 +--- + +# Write Activity Records + +## Endpoint + +Write data to the Audit Database and to the Long-Term Archive. By default, all imported data is +written to a special Netwrix_Auditor_API database and recognized as the Netwrix API data source. +This data is not associated with any monitoring plan in the product. You can associate Activity +Records with a plan, in this case data will be written to a database linked to this plan. Make sure +the plan you specify is already created in Netwrix Auditor, the Netwrix API data source is added to +the plan and enabled for monitoring. + +To feed data, send a POST request containing Activity Records. The user sending a request must be +assigned the Contributor role in Netwrix Auditor. After feeding data to the Audit Database it will +become available for search in the Netwrix Auditor client and through +[/netwrix/api/v1/activity_records/search](/docs/auditor/10.7/api/searchactivityrecords.md) and +[/netwrix/api/v1/activity_records/enum](/docs/auditor/10.7/api/retrieveactivityrecords.md) endpoints. + +| Method | Endpoint | POST Data | +| ------ | -------------------------------------------------------------------- | ----------------------------------------------- | +| `POST` | `https://{host:port}/netwrix/api/v1/activity_records/{?format=json}` | [Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) | + +Netwrix recommends limiting the input Activity Records file to 50MB and maximum 1,000 Activity +Records. + +## Request Parameters + +| Parameter | Mandatory | Description | +| -------------- | --------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| `host:port` | Yes | Replace with the IP address or a name of your Netwrix Auditor Server host and port (e.g., _172.28.6.15:9699_, _stationwin12:9699_, _WKSWin2012.enterprise.local:9699_). With enabled HTTPS, provide the computer name as it appears in certificate properties. | +| `?format=json` | No | Add this parameter to write data in JSON format. Otherwise, Netwrix Auditor Server will expect XML-formatted Activity Records and will consider JSON invalid. | + +## Response + +| Request Status | Response | +| -------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Success | The HTTP status code in the response header is 200 OK and the body is empty. `HTTP/1.1 200 OK `````` Server: Microsoft-HTTPAPI/2.0 `````` Content-Length: 0 `````` Content-Type: text/plain `````` Date: Fri, 08 Apr 2017 13:56:22 GMT` | +| Error | The header status code is an error code. Depending on the error code, the response body may contain an error object. [See Response Status Codes for more information.](/docs/auditor/10.7/api/responsestatuscodes.md) | + +## Usage Example—Write Data + +This example describes how to feed Activity Records to the Audit Database. + +**Step 1 –** Send a POST request containing Activity Records. +[Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) For example: + +**XML:** + +```bash +curl -H "Content-Type:application/xml; Charset=UTF-8" https://WKSWin2012:9699/netwrix/api/v1/activity_records/ -u Enterprise\NetwrixUser:NetwrixIsCool --data-binary @C:\APIdocs\Input.xml +``` + +```xml + + + + Admin + Stored Procedure + Added + Databases\ReportServer\Stored Procedures\dbo.sp_New + + Integrations and custom sources + + WKSWin12SQL + 2017-02-19T03:43:49-11:00 + + + Modified + Mailbox + Shared Mailbox + 2017-02-10T14:46:00Z + BLUPR05MB1940 + admin@enterprise.onmicrosoft.com + + + Custom_Attribute + 1 + 2 + + + + +``` + +**JSON:** + +```bash +curl -H "Content-Type:application/json; Charset=UTF-8" https://WKSWin2012:9699/netwrix/api/v1/activity_records/?format=json -u Enterprise\NetwrixUser:NetwrixIsCool --data-binary @C:\APIdocs\Input.json +``` + +```json +[ + { + "Who": "Admin", + "ObjectType": "Stored Procedure", + "Action": "Added", + "MonitoringPlan": {"Name": "Integrations and custom sources"}, + "What": "Databases\\ReportServer\\Stored Procedures\\dbo.sp_New", + "Where": "WKSWin12SQL", + "When": "2017-02-19T03:43:49-11:00" + }, + { + "Action": "Modified", + "ObjectType": "Mailbox", + "What": "Shared Mailbox", + "When": "2017-02-10T14:46:00Z", + "Where": "BLUPR05MB1940", + "Who": "admin@enterprise.onmicrosoft.com", + "DetailList": [ + { + "PropertyName": "Custom_Attribute", + "Before": "1", + "After": "2" + } + ] + } +] +``` + + +Ensure to pass information about transferred data, including `Content-Type:application/xml` or +`application/json `and encoding. The syntax greatly depends on the tool you use. + +**Step 2 –** Receive the response. Below is an example of a successful write request. The status is +200 OK and the body is empty. + +``` +HTTP/1.1 200 OK + +Server: Microsoft-HTTPAPI/2.0 + +Content-Length: 0 + +Content-Type: text/plain + +Date: Fri, 08 Apr 2017 13:56:22 GMT +``` + +**Step 3 –** Send more POST requests containing Activity Records if necessary. + +**Step 4 –** Check that posted data is now available in the Audit Database. Run a search request to [/netwrix/api/v1/activity_records/search](/docs/auditor/10.7/api/searchactivityrecords.md) endpoint or use interactive search in the Netwrix Auditor client. For example: + +![apiactivity_thumb_0_0](/images/auditor/10.7/api/apiactivity_thumb_0_0.webp) + +**Step 5 –** For input Activity Records, the data source is set to Netwrix API. + +![apiactivitydetails](/images/auditor/10.7/api/apiactivitydetails.webp) diff --git a/docs/auditor/10.8/configuration/_category_.json b/docs/auditor/10.8/configuration/_category_.json new file mode 100644 index 0000000000..5e21979e81 --- /dev/null +++ b/docs/auditor/10.8/configuration/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Data Source Configuration", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/activedirectory/_category_.json b/docs/auditor/10.8/configuration/activedirectory/_category_.json new file mode 100644 index 0000000000..f1b7611a03 --- /dev/null +++ b/docs/auditor/10.8/configuration/activedirectory/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Active Directory", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/activedirectory/additional.md b/docs/auditor/10.8/configuration/activedirectory/additional.md new file mode 100644 index 0000000000..b37a7127de --- /dev/null +++ b/docs/auditor/10.8/configuration/activedirectory/additional.md @@ -0,0 +1,241 @@ +--- +title: "Additional Configuration to Review Changes Made via Exchange Server" +description: "Additional Configuration to Review Changes Made via Exchange Server" +sidebar_position: 40 +--- + +# Additional Configuration to Review Changes Made via Exchange Server + +If you have an on-premises Exchange server in your Active Directory domain, consider that some +changes can be made through this Exchange server. To be able to audit and report who made those +changes, make sure that the account used for data collection meets one of the following +requirements: + +- Membership in the Organization Management or Records Management group + +OR + +- The Audit Logs management role (see the + [Assign Management Roles](/docs/auditor/10.7/configuration/exchange/permissions.md#assign-management-roles) topic for additional + information) + +You will also need to configure Exchange Administrator Audit Logging (AAL) settings. See the +[Exchange Administrator Audit Logging Settings](/docs/auditor/10.7/configuration/exchange/auditlog.md) topic for additional +information. + +## Additional Configuration for Domain Controller's Event Logs Auto-backup + +The following is required if auto-backup is _enabled_ for the domain controller event logs: + +- Permissions to access the _HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Security_ + registry key on the domain controllers in the target domain. See the Assign Permission to Read the + Registry Key topic for additional information. +- Membership in one of the following groups: Administrators, Print Operators, or Server Operators +- Read/Write share permission and Full control security permission on the logs backup folder. + +## Considerations for gMSA Account + +If you are using gMSA for data collection, consider that AAL event data collection from your +on-premise Exchange server will not be possible. + +Thus, changes made to your Active Directory domain via that Exchange server will be reported with +_domain\\Exchange_server_name$_ instead of the initiator (user) name in the "_Who_" field of +reports, search results and activity summaries. + +## Configure Manage Auditing and Security Log Policy + +Perform this procedure only if the account selected for data collection is not a member of the +Domain Admins group. Follow the steps: + +**Step 1 –** Open the **Group Policy Management** console on any domain controller in the target +domain: navigate to Start > Windows Administrative Tools (Windows Server 2016 and higher) or +Administrative Tools (Windows 2012) **Group Policy Management.** + +**Step 2 –** In the left pane, navigate to **Forest: `` > Domains > ``** +**> Domain Controllers**. Right-click the effective domain controllers policy (by default, it is the +**Default Domain Controllers Policy**), and select **Edit** from the pop-up menu. + +**Step 3 –** In the Group Policy Management Editor dialog, expand the **Computer Configuration** +node on the left and navigate to **Policies > Windows Settings > Security Settings > Local +Policies.** + +**Step 4 –** On the right, double-click the **User Rights Assignment** policy. + +**Step 5 –** Locate the **Manage auditing and security log** policy and double-click it. + +**Step 6 –** In the Manage auditing and security log Properties**anage auditing and security log +Properties** dialog, click **Add User or Group**, specify the user that you want to define this +policy for. + +**Step 7 –** Run the following command to update group policy: `gpupdate /force` + +**Step 8 –** Type `repadmin /syncall` command and press Enter for replicate GPO changes to other +domain controllers. + +**Step 9 –** Ensure that new GPO settings applied on any audited domain controller. + +## Grant Permissions for Deleted Objects Container + +Perform this procedure only if the account selected for data collection is not a member of the +Domain Admins group. Follow the steps: + +**Step 1 –** Log on to any domain controller in the target domain with a user account that is a +member of the **Domain Admins** group. + +**Step 2 –** Navigate to **Start > Run** and type **cmd**. + +**Step 3 –** Input the following command: `dsacls /takeownership` + +where `deleted_object_dn` is the distinguished name of the deleted directory object. + +For example: `dsacls "CN=Deleted Objects,DC=Corp,DC=local" /takeownership` + +**Step 4 –** To grant permission to view objects in the Deleted Objects container to a user or a +group, type the following command: + +`dsacls /G :` + +where `deleted_object_dn` is the distinguished name of the deleted directory object +and` user_or_group` is the user or group for whom the permission applies, and `Permissions` is the +permission to grant. + +For example, `dsacls "CN=Deleted Objects,DC=Corp,DC=local" /G Corp\jsmith:LCRP` + +In this example, the user CORP\jsmith has been granted **List Contents** and **Read Property** +permissions for the **Deleted Objects** container in the **corp.local** domain. These permissions +let this user view the contents of the **Deleted Objects** container, but do not let this user make +any changes to objects in this container. These permissions are equivalent to the default +permissions that are granted to the **Domain Admins** group. + +## Define Log On As a Batch Job Policy + +On monitoring plan creation, the Log on as a batch job policy is automatically defined for the Data +Processing Account as a local security policy. However, if you have the "Deny a log on as a batch +job" policy defined locally or on the domain level, the local "Log on as a batch job" policy will be +reset. In this case, redefine the "Deny log on as a batch job" policy through the "Local Security +Policy" console on your computer or on the domain level through the Group Policy Management console. + +You can configure this policy via the Local Security Policy snap-in or using the Group Policy +Management console. + +### Configure the Log On As a Batch Job policy via Local Security Policy Snap-in + +Follow the steps to configure the Log On As a Batch Job policy via Local Security Policy snap-in. + +**Step 1 –** On any domain controller in the target domain, open the Local Security Policy snap-in: +navigate to Start > Windows Administrative Tools and select Local Security Policy. + +**Step 2 –** In the Local Security Policy snap-in, navigate to **Security Settings** > **Local +Policies > User Rights Assignment** and locate the **Log on as a batch job** policy. + +![manualconfig_ws_logonasbatch](/images/1secure/admin/datacollection/activedirectory/manualconfig_ws_logonasbatch.webp) + +**Step 3 –** Double-click the **Log on as a batch job** policy, and click **Add User or Group**. +Specify the account that you want to define this policy for. + +### Configure the Log On As a Batch Job Policy Using the Group Policy Management Console + +Perform this procedure only if the account selected for data collection is not a member of the +Domain Admins group. Follow the steps: + +**Step 1 –** Open the Group Policy Management console on any domain controller in the target domain: +navigate to Start > Windows Administrative Tools (Windows Server 2016/2019) or Administrative Tools +(Windows 2012 R2 and below) > Group Policy Management. + +**Step 2 –** In the left pane, navigate to Forest: `` > Domains > `` > +Domain Controllers. Right-click the effective domain controllers policy (by default, it is the +_Default Domain Controllers Policy_), and select Edit. + +**Step 3 –** In the Group Policy Management Editor dialog, expand the Computer Configuration node on +the left and navigate to Policies > Windows Settings > Security Settings > Local Policies. + +**Step 4 –** On the right, double-click the User Rights Assignment policy. + +**Step 5 –** Locate the Log on as a batch job policy and double-click it. + +**Step 6 –** In the Log on as a batch job Properties dialog, click Add User or Group and specify the +user that you want to define this policy for. + +**Step 7 –** Navigate to Start > Run and type cmd. Input the `gpupdate /force` command and press +Enter. The group policy will be updated. + +**Step 8 –** Type `repadmin /syncall` command and press Enter for replicate GPO changes to other +domain controllers. + +**Step 9 –** Ensure that new GPO settings applied on any audited domain controller. + +## Assign Permission to Read the Registry Key + +This permission is required only if the account selected for data collection is not a member of the +Domain Admins group. + +This permission should be assigned on each domain controller in the audited domain, so if your +domain contains multiple domain controllers, it is recommended to assign permissions through Group +Policy, or automatically using +[Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md). + +To assign permissions manually, use the Registry Editor snap-in or the Group Policy Management +console. + +Assign Permission Via the Registry Editor Snap-in + +Follow the steps to assign permission via the Registry Editor snap-in: + +**Step 1 –** On your target server, open Registry Editor: navigate to **Start > Run** and type +_"regedit"_. + +**Step 2 –** In the left pane, navigate to _HKEY_LOCAL_MACHINE\SYSTEM\CurrentControl +Set\Services\EventLog\Security_. + +**Step 3 –** Right-click the **Security** node and select **Permissions** from the pop-up menu. + +**Step 4 –** Click **Add** and enter the name of the user that you want to grant permissions to. + +**Step 5 –** Check **Allow** next to the **Read** permission. + +**Step 6 –** For auditing Logon Activity, you also need to assign the Read permission to the +_HKEY_LOCAL_MACHINE\SECURITY\Policy\PolAdtEv_ registry key. + +To assign permission using the Group Policy Management console + +Assign Permission Using the Group Policy Management Console + +Follow the steps to assign permission using the Group Policy Management console: + +**Step 1 –** Open the Group Policy Management console on any domain controller in the target domain: +navigate to Start > Windows Administrative Tools (Windows Server 2016/2019) or Administrative Tools +(Windows 2012 R2 and below) > Group Policy Management. + +**Step 2 –** In the left pane, navigate to Forest: `` > Domains > `` > +Domain Controllers. Right-click the effective domain controllers policy (by default, it is the +_Default Domain Controllers Policy_), and select Edit . + +**Step 3 –** In the Group Policy Management Editor dialog, expand the Computer Configuration node on +the left and navigate to Policies > Windows Settings > Security Settings > Registry. + +**Step 4 –** Right-click in the pane and select Add Key. + +**Step 5 –** Navigate to `HKEY_LOCAL_MACHINE\SECURITY\Policy\PolAdtEv` and click OK. + +**Step 6 –** Click Add and enter the name of the user that you want to grant permissions to and +press Enter. + +**Step 7 –** Check Allow next to the _"Read"_ permission and click OK + +**Step 8 –** In the pop-up window, select Propagate inheritable permissions to all subkeys and click +OK. + +**Step 9 –** Repeat the steps 4-8 for keys below: + +- `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg`; +- `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security`. + +**Step 10 –** Close the Group Policy Management console. + +**Step 11 –** Navigate to Start > Run and type **cmd**. Input the `gpupdate /force` command and +press Enter. The group policy will be updated. + +**Step 12 –** Type `repadmin /syncall` command and press Enter for replicate GPO changes to other +domain controllers. + +**Step 13 –** Ensure that new GPO settings were applied to the domain controllers. diff --git a/docs/auditor/10.8/configuration/activedirectory/advancedpolicy.md b/docs/auditor/10.8/configuration/activedirectory/advancedpolicy.md new file mode 100644 index 0000000000..8aaecef089 --- /dev/null +++ b/docs/auditor/10.8/configuration/activedirectory/advancedpolicy.md @@ -0,0 +1,67 @@ +--- +title: "Configure Advanced Audit Policies" +description: "Configure Advanced Audit Policies" +sidebar_position: 60 +--- + +# Configure Advanced Audit Policies + +You can configure advanced audit policies instead of basic domain policies to collect Active +Directory changes with more granularity. Either basic or advanced audit policies must be configured +to track changes to accounts and groups, and to identify workstations where changes were made. + +Perform the following procedures: + +- To configure security options +- To configure advanced audit policies + +## To configure security options + +Setting up both basic and advanced audit policies may lead to incorrect audit reporting. To force +basic audit policies to be ignored and prevent conflicts, enable the _Audit: Force audit policy +subcategory settings_ policy. + +To do it, perform the following steps: + +1. Open the **Group Policy Management** console on any domain controller in the target domain: + navigate to Start > Windows Administrative Tools (Windows Server 2016 and higher) or + Administrative Tools (Windows 2012) **Group Policy Management.** +2. In the left pane, navigate to **Forest: `` > Domains > ``** **> Domain + Controllers**. Right-click the effective domain controllers policy (by default, it is the + **Default Domain Controllers Policy**), and select **Edit** from the pop-up menu. +3. In the Group Policy Management Editor dialog, expand the Computer Configuration node on the left + and navigate to Policies → Windows Settings → Security Settings → Local Policies → Security + Options. +4. Locate the Audit: Force audit policy subcategory settings to override audit policy category + settings and make sure that policy setting is set to _"Enabled"_. + + ![manualconfig_ad_nla_audit_force_winserver2016](/images/1secure/configuration/ad/manualconfig_ad_nla_audit_force_winserver2016.webp) + +5. Run the following command to update group policy: + + `gpupdate /force` + +## To configure advanced audit policies + +1. Open the **Group Policy Management** console on any domain controller in the target domain: + navigate to Start > Windows Administrative Tools (Windows Server 2016 and higher) or + Administrative Tools (Windows 2012) **Group Policy Management.** +2. In the left pane, navigate to **Forest: `` > Domains > ``** **> Domain + Controllers**. Right-click the effective domain controllers policy (by default, it is the + **Default Domain Controllers Policy**), and select **Edit** from the pop-up menu. +3. In the Group Policy Management Editor dialog, expand the Computer Configuration node on the left + and navigate to Policies → Windows Settings → Security Settings → Advanced Audit Policy + Configuration → Audit Policies. +4. Configure the following audit policies. + + | Policy Subnode | Policy Name | Audit Events | + | ------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------ | + | Account Management | - Audit Computer Account Management - Audit Distribution Group Management - Audit Security Group Management - Audit User Account Management | _"Success"_ | + | DS Access | Audit Directory Service Access | _"Success"_ | + | Logon/Logoff | - Audit Logoff - Audit Logon These policies are only required to collect the information on the originating workstation, i.e., the computer from which a change was made. | _"Success"_ | + + ![manualconfig_ad_advpol_winserver2016](/images/1secure/configuration/ad/manualconfig_ad_advpol_winserver2016.webp) + +5. Run the following command to update group policy: + + `gpupdate /force` diff --git a/docs/auditor/10.8/configuration/activedirectory/automatic.md b/docs/auditor/10.8/configuration/activedirectory/automatic.md new file mode 100644 index 0000000000..8c05eccb5d --- /dev/null +++ b/docs/auditor/10.8/configuration/activedirectory/automatic.md @@ -0,0 +1,42 @@ +--- +title: "Active Directory: Automatic Configuration" +description: "Active Directory: Automatic Configuration" +sidebar_position: 20 +--- + +# Active Directory: Automatic Configuration + +This is a recommended method of applying Active Directory audit settings required by Auditor to +monitor your AD domain. With this approach, the program will check your current audit settings at +each data collection session and adjust them if necessary. + +To adjust audit settings automatically, do any of the following: + +- When creating a new monitoring plan, at the first step of the wizard select the **Adjust audit + settings automatically** option. See the + [Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional + information. + +![mp_wizard_step1_ad_thumb_0_0](/images/auditor/10.7/configuration/activedirectory/mp_wizard_step1_ad_thumb_0_0.webp) + +- For the existing monitoring plan, modify data collection settings for Active Directory data + source, selecting **Adjust audit settings automatically** option. + See the [Manage Data Sources](/docs/auditor/10.7/admin/monitoringplans/datasources.md) and + [Active Directory](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md) topics for additional + information. +- For both new and existing monitoring plans, you can click **Launch Audit Configuration Assistant** + (in the wizard step or in the plan settings, respectively) to launch a special tool that can + detect current infrastructure settings and adjust them as needed for monitoring. See the + [Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md) topic for additional + information. + +If any conflicts are detected with your current audit settings, automatic audit configuration will +not be performed. For a full list of audit settings required for Netwrix Auditor to collect +comprehensive audit data and instructions on how to configure them, refer to the +[Active Directory](/docs/auditor/10.7/configuration/activedirectory/overview.md) topic. + +See also: + +- [Active Directory](/docs/auditor/10.7/configuration/activedirectory/overview.md) +- [Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md) +- [Active Directory: Manual Configuration](/docs/auditor/10.7/configuration/activedirectory/manual.md) diff --git a/docs/auditor/10.8/configuration/activedirectory/basicpolicy.md b/docs/auditor/10.8/configuration/activedirectory/basicpolicy.md new file mode 100644 index 0000000000..2176305b11 --- /dev/null +++ b/docs/auditor/10.8/configuration/activedirectory/basicpolicy.md @@ -0,0 +1,38 @@ +--- +title: "Configure Basic Domain Audit Policies" +description: "Configure Basic Domain Audit Policies" +sidebar_position: 50 +--- + +# Configure Basic Domain Audit Policies + +Basic audit policies allow tracking changes to user accounts and groups and identifying originating +workstations. You can configure advanced audit policies for the same purpose too. See the +[Configure Advanced Audit Policies](/docs/auditor/10.7/configuration/activedirectory/advancedpolicy.md)topic for additional information. + +1. Open the **Group Policy Management** console on any domain controller in the target domain: + navigate to Start > Windows Administrative Tools (Windows Server 2016 and higher) or + Administrative Tools (Windows 2012) **Group Policy Management.** +2. In the left pane, navigate to **Forest: `` > Domains > ``** **> Domain + Controllers**. Right-click the effective domain controllers policy (by default, it is the + **Default Domain Controllers Policy**), and select **Edit** from the pop-up menu. +3. In the **Group Policy Management Editor** dialog, expand the **Computer Configuration** node on + the left and navigate to **Policies → Windows Settings → Security Settings → Local Policies → + Audit Policy.** +4. Configure the following audit policies. + + | Policy | Audit Events | + | ---------------------------------- | ------------ | + | **Audit account management** | _"Success"_ | + | **Audit directory service access** | _"Success"_ | + | **Audit logon events** | _"Success"_ | + + ![manualconfig_ad_localpolicy_winserver2016](/images/1secure/configuration/ad/manualconfig_ad_localpolicy_winserver2016.webp) + + The Audit logon events policy is only required to collect the information on the originating + workstation, i.e., the computer from which a change was made. This functionality is optional and + can be disabled. + +5. Run the following command to update group policy: + + `gpupdate /force` diff --git a/docs/auditor/10.8/configuration/activedirectory/manual.md b/docs/auditor/10.8/configuration/activedirectory/manual.md new file mode 100644 index 0000000000..9a17f2b9e3 --- /dev/null +++ b/docs/auditor/10.8/configuration/activedirectory/manual.md @@ -0,0 +1,65 @@ +--- +title: "Active Directory: Manual Configuration" +description: "Active Directory: Manual Configuration" +sidebar_position: 30 +--- + +# Active Directory: Manual Configuration + +To configure your domain for monitoring manually, you will need: + +- Group Policy Management Console — Required if you plan to perform configuration steps from a + domain controller + + -OR- + +- ADSI Edit — Required if you plan to perform configuration steps from a server other than domain + controller + +**NOTE:** If these tools are not installed, refer to the following Microsoft articles: + +- [Group Policy Management Console](https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn265969(v=ws.11)) +- [ADSI Edit](https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc773354(v=ws.10)?redirectedfrom=MSDN) + +Follow the steps to configure your domain for monitoring. + +**Step 1 –** Configure effective domain controllers policy (by default, Default Domain Controllers +Policy). See the [Configure Basic Domain Audit Policies](/docs/auditor/10.7/configuration/activedirectory/basicpolicy.md) or +[Configure Advanced Audit Policies](/docs/auditor/10.7/configuration/activedirectory/advancedpolicy.md) topics for additional information. + +**Step 2 –** Configure object-level auditing. See the +[Configure Object-Level Auditing](/docs/auditor/10.7/configuration/activedirectory/objectlevel.md) topic for additional information. + +**Step 3 –** Adjust the security event log size and retention settings. See the +[Adjust Security Event Log Size and Retention](/docs/auditor/10.7/configuration/activedirectory/securitylog.md)topic for additional information. + +**Step 4 –** If you have an on-premises Exchange server in your Active Directory domain, consider +that some changes to AD can be made via that Exchange server. To be able to audit and report who +made those changes, perform configuration steps as described in the +[Exchange Administrator Audit Logging Settings](/docs/auditor/10.7/configuration/exchange/auditlog.md) topic. + +Optionally, you can adjust the Active Directory Tombstone Lifetime. See the +[Adjust Active Directory Tombstone Lifetime (optional)](/docs/auditor/10.7/configuration/activedirectory/tombstone.md) topic for additional +information. + +Also, remember to perform the following steps for AD auditing: + +**Step 1 –** Configure Data Collecting Account, as described in the +[Additional Configuration to Review Changes Made via Exchange Server](/docs/auditor/10.7/configuration/activedirectory/additional.md) topic. + +**Step 2 –** Configure required protocols and ports, as described in the +[Active Directory Ports](/docs/auditor/10.7/configuration/activedirectory/ports.md) topic. + +**Step 3 –** Enable Secondary Logon Service on the computer where Netwrix Auditor Server resides. + +## Enable Secondary Logon Service + +Follow the steps to Enable Secondary Logon Service. + +**Step 1 –** On the computer where Auditor Server resides, navigate to Start > Windows +Administrative Tools > **Services**. + +**Step 2 –** In the **Services** dialog, locate the **Secondary Logon** service. + +**Step 3 –** Right-click the service and on the **General** tab make sure that **Startup type** for +this service is other than _Disabled_. The startup type can be either _Automatic_ or _Manual_. diff --git a/docs/auditor/10.8/configuration/activedirectory/objectlevel.md b/docs/auditor/10.8/configuration/activedirectory/objectlevel.md new file mode 100644 index 0000000000..93ba0ba105 --- /dev/null +++ b/docs/auditor/10.8/configuration/activedirectory/objectlevel.md @@ -0,0 +1,88 @@ +--- +title: "Configure Object-Level Auditing" +description: "Configure Object-Level Auditing" +sidebar_position: 70 +--- + +# Configure Object-Level Auditing + +Object-level auditing must be configured for the **Domain** partition if you want to collect +information on user activity in the domain. If you also want to audit changes to AD configuration +and schema, you must enable object-level auditing for **Configuration** and **Schema** partitions. + +Auditing of the Configuration partition is enabled by default. See the +[Active Directory](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md) topic for detailed +instructions on how to enable monitoring of changes to the Schema partition in the target AD domain. + +Perform the following procedures to configure object-level auditing for the Domain, Configuration +and Schema partitions: + +- Configuring object-level auditing for the Domain partition +- Enabling object-level auditing for the Configuration and Schema partitions + +## Configuring object-level auditing for the Domain partition + +**Step 1 –** Open the **Active Directory Users and Computers** console on any domain controller in +the target domain: navigate to Start > Windows Administrative Tools → **Active Directory Users and +Computers**. + +**Step 2 –** In the **Active Directory Users and Computers** dialog, click **View** in the main menu +and ensure that the **Advanced Features** are enabled. + +![manualconfig_aduc_advsecwinserver2016](/images/1secure/configuration/ad/manualconfig_aduc_advsecwinserver2016.webp) + +**Step 3 –** Right-click the **``** node and select **Properties.** Select the +**Security** tab and click **Advanced**. In the **Advanced Security Settings for ``** +dialog, select the **Auditing** tab. + +![manualconfig_aduc_advauditing_winserver2016](/images/1secure/configuration/ad/manualconfig_aduc_advauditing_winserver2016.webp) + +**Step 4 –** Perform the following actions on the Windows Server 2012 and above: + +1. Click **Add**. In the **Auditing Entry** dialog, click the **Select a principal** link. +2. In the **Select user, Computer, Service account, or Group** dialog, type _"Everyone"_ in the + **Enter the object name to select** field. +3. Set **Type** to _"Success"_ and **Applies to** to _"This object and all descendant objects"_. +4. Under **Permissions**, select all checkboxes except the following: _Full Control_, _List + Contents_, _Read All Properties_ and _Read Permissions_. +5. Scroll to the bottom of the list and make sure that the **Only apply these auditing settings to + objects and/or containers within this container** checkbox is cleared. + + ![manualconfig_objectlevel_winserver2016](/images/1secure/configuration/ad/manualconfig_objectlevel_winserver2016.webp) + +## Enabling object-level auditing for the Configuration and Schema partitions + +To perform this procedure, you will need the +[ADSI Edit](http://technet.microsoft.com/en-us/library/cc773354(v=ws.10).aspx) utility. Follow the +steps to enable object-level auditing for the Configuration and Schema partitions. + +**Step 1 –** On any domain controller in the target domain, navigate to Start > Windows +Administrative Tools **> ADSI Edit**. + +**Step 2 –** Right-click the **ADSI Edit** node and select **Connect To**. In the **Connection +Settings** dialog, enable **Select a well-known Naming Context** and select **Configuration** from +the drop-down list. + +![manualconfig_adsi_connectionwinserver2016](/images/1secure/configuration/ad/manualconfig_adsi_connectionwinserver2016.webp) + +**Step 3 –** Expand the **Configuration ``** node. Right-click the +**CN=Configuration, DC=``,DC=``…** node and select **Properties.** + +**Step 4 –** In the **CN=Configuration, DC=``, DC=`` Properties** dialog select the +**Security** tab and click **Advanced**. In the **Advanced Security Settings for Configuration** +dialog, open the **Auditing** tab. + +**Step 5 –** Perform the following actions on the Windows Server 2012 and above: + +1. Click **Add**. In the **Auditing Entry** dialog, click the **Select a principal** link. +2. In the **Select user, Computer, Service account, or Group** dialog, type _"Everyone"_ in the + **Enter the object name to select** field. +3. Set **Type** to _"Success"_ and **Applies to** to _"This object and all descendant objects"_. +4. Under **Permissions**, select all checkboxes except the following: _Full Control_, _List + Contents_, _Read All Properties_ and _Read Permissions_. +5. Scroll to the bottom of the list and make sure that the **Only apply these auditing settings to + objects and/or containers within this container** checkbox is cleared. + + ![manualconfig_objectlevel_winserver2016](/images/1secure/configuration/ad/manualconfig_objectlevel_winserver2016.webp) + +Repeat these steps for the Schema container if necessary. diff --git a/docs/auditor/10.8/configuration/activedirectory/overview.md b/docs/auditor/10.8/configuration/activedirectory/overview.md new file mode 100644 index 0000000000..735bd648a9 --- /dev/null +++ b/docs/auditor/10.8/configuration/activedirectory/overview.md @@ -0,0 +1,163 @@ +--- +title: "Active Directory" +description: "Active Directory" +sidebar_position: 10 +--- + +# Active Directory + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - Configure the domain for auditing. See the + [Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md) topic for + information on configuring the domain. + - On the Auditor console computer: + + - If you have enabled automatic log backup for the Security log of your domain controller, + you can instruct Auditor to clear the old backups automatically. For that, use the + **CleanAutoBackupLogs** registry key, as described in the + [Active Directory Registry Key Configuration](/docs/auditor/10.7/configuration/activedirectory/registrykey.md) topic. + + **_RECOMMENDED:_** Adjust retention period for the backup files accordingly (default is + **50** hours). See the [Adjust Security Event Log Size and Retention](/docs/auditor/10.7/configuration/activedirectory/securitylog.md) + topic. + + - To provide for event data collection, the Secondary Logon service must be up and running . + Open **Administrative Tools** > **Services**, right-click the **Secondary Logon** service + and on the **General** tab make sure that Startup type for this service is other than + _Disabled_. + +## Monitored Objects + +Netwrix Auditor tracks changes made to all object classes and attributes in the Active Directory +Domain, Configuration and Schema partitions. It also tracks changes to new object classes and +attributes added due to the Active Directory Schema extension. For detailed information, refer to +Microsoft articles: + +- [A full list of Active Directory object classes](http://msdn.microsoft.com/en-us/library/ms680938(v=vs.85).aspx) +- [A full list of Active Directory object attributes](http://msdn.microsoft.com/en-us/library/ms675090(v=vs.85).aspx) + +Review the following limitations: + +- Netwrix Auditor does not track changes to non-replicated attributes, such as badPwdCount, + Last-Logon, Last-Logoff, etc. The non-replicated attributes pertain to a particular domain + controller and are not replicated to other domain controllers. +- Changes made through the Exchange Management Console in the Organization Configuration node + (Federation Trust, Organization Relationships and Hybrid Configuration tabs) are displayed in an + internal Active Directory format that can be difficult to interpret. +- Netwrix Auditor tracks changes to membership in all groups inside the monitored domain (Domain + local groups) and Universal and Global groups of domains in the same forest. Changes to Domain + local groups of a different domain in the same forest are not reported. + +State-in-time data collection is supported for Active Directory. + +For AD domain monitoring with Netwrix Auditor, the domain should be configured as explained below. + +## Domain Audit Policy Settings + +Effective domain controllers policy settings must be configured as listed in the table below. + +| Policy | Audit type | +| ------------------------------ | ----------- | +| Audit account management | _"Success"_ | +| Audit directory service access | _"Success"_ | +| Audit logon events | _"Success"_ | + +You can configure either **Basic domain audit policies**, or **Advanced domain audit policies**. + +- To configure these settings automatically using Netwrix Auditor, refer to the + [Active Directory: Automatic Configuration](/docs/auditor/10.7/configuration/activedirectory/automatic.md) topic. +- To configure them manually, refer to the [Configure Basic Domain Audit Policies](/docs/auditor/10.7/configuration/activedirectory/basicpolicy.md) + or [Configure Advanced Audit Policies](/docs/auditor/10.7/configuration/activedirectory/advancedpolicy.md) topics. + +## Audit Settings for AD Partitions + +Required object-level audit settings for the Active Directory partition must be configured as +described in the next sections. + +### Domain Partition + +Object-level audit settings for the Domain partition must be configured to audit for _Success_ of +all access operations except the following: _Full Control_, _List Contents_, _Read All Properties_ +and _Read Permissions_. + +These settings must be configured for **Everyone** security principal and applied to **This object +and all descendant objects**. + +- You can configure these settings automatically using Netwrix Auditor, as described in the + [Active Directory: Automatic Configuration](/docs/auditor/10.7/configuration/activedirectory/automatic.md) topic. +- To configure them manually, refer o the [Configure Object-Level Auditing](/docs/auditor/10.7/configuration/activedirectory/objectlevel.md) topic. + +### Configuration and Schema Partitions + +Object-level audit settings for the Configuration and **Schema** partitions must be configured to +audit for _Success_ of all access operations except the following: _Full Control_, _List Contents_, +_Read All Properties_ and _Read Permissions_ + +These settings must be configured for **Everyone** security principal and applied to **This object +and its descendant objects**. + +- You can configure these settings automatically using Netwrix Auditor, as described in the + [Active Directory: Automatic Configuration](/docs/auditor/10.7/configuration/activedirectory/automatic.md) topic. +- To configure them manually, refer to the [Configure Object-Level Auditing](/docs/auditor/10.7/configuration/activedirectory/objectlevel.md) topic. + +## Security Event Log Settings + +**Security event log** settings for the domain controllers should be configured as follows: + +| Setting | Value | +| ------------------ | ---------------------------- | +| Max event log size | 4 GB | +| Retention method | _Overwrite events as needed_ | +| Auto-archiving | Enabled | + +- You can configure these settings automatically using Netwrix Auditor, as described in the + [Active Directory: Automatic Configuration](/docs/auditor/10.7/configuration/activedirectory/automatic.md) topic. +- To configure them manually, refer to the + [Adjust Security Event Log Size and Retention](/docs/auditor/10.7/configuration/activedirectory/securitylog.md) topic. + +## Exchange Settings + +If you have an on-premises Exchange server in your Active Directory domain, consider that some +changes can be made via that Exchange server. To be able to audit and report who made those changes, +you should: + +- Configure the Exchange Administrator Audit Logging (AAL) settings, as described the + [Exchange Administrator Audit Logging Settings](/docs/auditor/10.7/configuration/exchange/auditlog.md) topic. +- Make sure that the account used for data collection has the following: + + - Membership in the Organization Management or Records Management group + +-OR- + +- The Audit Logs management role. + +### Next Steps + +- Configure Data Collecting Account, as described in the + [Additional Configuration to Review Changes Made via Exchange Server](/docs/auditor/10.7/configuration/activedirectory/additional.md) topic. +- Configure required protocols and ports, as described in the [Active Directory Ports](/docs/auditor/10.7/configuration/activedirectory/ports.md) + topic. +- If you plan to restore deleted Active Directory objects and their attributes using the Netwrix + Auditor Object Restore for Active Directory tool (shipped with Netwrix Auditor,) it is recommended + to set the **Active Directory tombstone lifetime** property to 730 days (default is 180 days). See + the [Adjust Active Directory Tombstone Lifetime (optional)](/docs/auditor/10.7/configuration/activedirectory/tombstone.md) topic for additional + information. diff --git a/docs/auditor/10.8/configuration/activedirectory/permissions.md b/docs/auditor/10.8/configuration/activedirectory/permissions.md new file mode 100644 index 0000000000..2f1a2f4f1e --- /dev/null +++ b/docs/auditor/10.8/configuration/activedirectory/permissions.md @@ -0,0 +1,272 @@ +--- +title: "Permissions for Active Directory Auditing" +description: "Permissions for Active Directory Auditing" +sidebar_position: 110 +--- + +# Permissions for Active Directory Auditing + +Before you start creating a monitoring plan to audit your Active Directory, plan for the account +that will be used for data collection – it should meet the requirements listed in this topic. Then +you will provide this account in the monitoring plan wizard (or in the monitored item settings). + +## Account Requirements + +The account used for data collection must meet the following requirements: + +- Member of the Domain Admins group on the target server. + + **NOTE:** This covers all the required permissions below and is a mandatory setting if you want + to use network traffic compression for data collection. + +- Local Admin on the Netwrix Auditor server. +- The combination of the following rights and permissions if you plan to disable network traffic + compression for your monitoring plan or, for some reasons, do not want to add this account to the + Domain Admins group: + + - The "Manage auditing and security log" policy must be defined for this account. + See the Configure the Manage Auditing and Security Log Policy topic for additional + information. + - If you plan to process the Active Directory Deleted Objects container, Read permission on this + container are required. See the Grant Permissions for the Deleted Objects Container topic for + additional information. + +If the account selected for data collection is not a member of the Domain Admins group, see the +[Assign Permission To Read the Registry Key](/docs/auditor/10.7/configuration/windowsserver/permissions.md) topic. + +## Additional Configuration to Review Changes Made via Exchange Server + +If you have an on-premises Exchange server in your Active Directory domain, consider that some +changes can be made via that Exchange server. To be able to audit and report who made those changes, +you should make sure that the account used for data collection has any of the following: + +- Membership in the **Organization Management** or **Records Management** group. + +- The **Audit Logs** management role (see the + [Assigning Management Roles](/docs/auditor/10.7/configuration/exchange/permissions.md#assign-management-roles) topic for + additional information). + +You will also need to configure Exchange Administrator Audit Logging (AAL) settings. See the +[Exchange Administrator Audit Logging Settings](/docs/auditor/10.7/configuration/exchange/auditlog.md) topic for additional +information. + +## Additional Configuration for Domain Controller's Event Logs Auto-backup + +The following is required if auto-backup is enabled for the domain controller event logs: + +- Permissions to access the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Security + registry key on the domain controllers in the target domain. See the + [Assign Permission To Read the Registry Key](/docs/auditor/10.7/configuration/windowsserver/permissions.md) topic for additional + information. +- Membership in one of the following groups: **Administrators**, **Print Operators**, **Server + Operators**. +- Read/Write share permission and Full control security permission on the logs backup folder. + +## Considerations for gMSA Account + +If you are using gMSA for data collection, consider that AAL event data collection from your +on-premise Exchange server will not be possible. + +Thus, changes made to your Active Directory domain via that Exchange server will be reported with +_`domain\Exchange_server_name$`_ instead of the initiator (user) name in the "_Who_" field of +reports, search results and activity summaries. + +### Target Domain + +If you plan to use network traffic compression for data processing, consider the following: + +- If network traffic compression will be _enabled_, then the account must belong to the Domain + Admins group. +- If network traffic compression will be _disabled_, and the account you plan to use for data + collection is not a member of the Domain Admins group, then the **Manage auditing and security + log** policy must be defined for this account. + See the Configure the Manage Auditing and Security Log Policy topic for more information. + +If you need to process Active Directory **Deleted Objects** container, consider the following: + +- Read permission on this container is required. See the Grant Permissions for the Deleted Objects + Container topic for additional information. +- Grant this permission only if the account you plan to use for data collection is not a member of + the Domain Admins group. + +If auto-backup is _enabled_ for the domain controller event logs: + +- Permissions to access the _HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Security_ + registry key on the domain controllers in the target domain. See the + [Assign Permission To Read the Registry Key](/docs/auditor/10.7/configuration/windowsserver/permissions.md) topic for additional + information. +- Membership in any of the following groups: Administrators, Print Operators, Server Operators +- Read/Write share permission and Full control security permission on the logs backup folder. + +**NOTE:** Grant these permissions only if the account you plan to use for data collection is not a +member of the **Domain Admins** group. + +If you have an on-premises Exchange server in your Active Directory domain, consider that some +changes can be made via that Exchange server. To be able to audit and report who made those changes, +you should make sure that the account used for data collection has any of the following: + +- Membership in the **Organization Management** or **Records Management** group. +- The **Audit Logs** management role (see the + [Assigning Management Roles](/docs/auditor/10.7/configuration/exchange/permissions.md#assign-management-roles) topic for + additional information). + +You will also need to configure Exchange Administrator Audit Logging (AAL) settings. See the +[Exchange Administrator Audit Logging Settings](/docs/auditor/10.7/configuration/exchange/auditlog.md) topic for additional +information. + +If you are using gMSA for data collection, consider that AAL event data collection from your +on-premise Exchange server will not be possible. + +Thus, changes made to your Active Directory domain via that Exchange server will be reported with +_`domain\Exchange_server_name$`_ instead of the initiator (user) name in the "_Who_" field of +reports, search results and activity summaries. + +## Configure the Manage Auditing and Security Log Policy + +Perform this procedure only if the account selected for data collection is not a member of the +Domain Admins group. + +Follow the steps to configure the Manage Auditing and Security Log Policy. + +**Step 1 –** Open the **Group Policy Management** console on any domain controller in the target +domain: navigate to Start > Windows Administrative Tools (Windows Server 2016 and higher) or +Administrative Tools (Windows 2012) **Group Policy Management.** + +**Step 2 –** In the left pane, navigate to **Forest: `` > Domains > ``** +**> Domain Controllers**. Right-click the effective domain controllers policy (by default, it is the +**Default Domain Controllers Policy**), and select **Edit** from the pop-up menu. + +**Step 3 –** In the **Group Policy Management Editor** dialog, expand the **Computer Configuration** +node on the left and navigate to **Policies > Windows Settings > Security Settings > Local +Policies.** + +**Step 4 –** On the right, double-click the **User Rights Assignment** policy. + +**Step 5 –** Locate the **Manage auditing and security log** policy and double-click it. + +**Step 6 –** In the **Manage auditing and security log Properties** dialog, click **Add User or +Group**, specify the user that you want to define this policy for. + +**Step 7 –** Run the following command to update group policy: `gpupdate /force` + +**Step 8 –** Type `repadmin /syncall` command and press Enter for replicate GPO changes to other +domain controllers. + +**Step 9 –** Ensure that new GPO settings applied on any audited domain controller. + +## Grant Permissions for the Deleted Objects Container + +Perform this procedure only if the account selected for data collection is not a member of the +Domain Admins group. + +Follow the steps to grant permissions for the Deleted Objects Container. + +**Step 1 –** Log on to any domain controller in the target domain with a user account that is a +member of the **Domain Admins** group. + +**Step 2 –** Navigate to **Start > Run** and type _"cmd"_. + +**Step 3 –** Input the following command: `dsacls /takeownership` + +where `deleted_object_dn` is the distinguished name of the deleted directory object. + +For example: `dsacls "CN=Deleted Objects,DC=Corp,DC=local" /takeownership` + +**Step 4 –** To grant permission to view objects in the **Deleted Objects** container to a user or a +group, type the following command: + +`dsacls /G :` + +where `deleted_object_dn` is the distinguished name of the deleted directory object +and` user_or_group` is the user or group for whom the permission applies, and `Permissions` is the +permission to grant. + +For example, `dsacls "CN=Deleted Objects,DC=Corp,DC=local" /G Corp\jsmith:LCRP` + +In this example, the user CORP\jsmith has been granted **List Contents** and **Read Property** +permissions for the **Deleted Objects** container in the **corp.local** domain. These permissions +let this user view the contents of the **Deleted Objects** container, but do not let this user make +any changes to objects in this container. These permissions are equivalent to the default +permissions that are granted to the **Domain Admins** group. + +## Define the Log On As a Service Policy + +On the Logon Activity monitoring plan creation, the Log on as a service policy is automatically +defined for the Data Processing Account as a local security policy. However, if you have the Deny +log on as a service policy defined locally or on the domain level, the local Log on as a service +policy will be reset. In this case, redefine the Deny log on as a service policy through the Local +Security Policy console on your computer or on the domain level through the Group Policy Management +console. + +Follow the steps to define the Log On As a Service policy. + +**Step 1 –** On the computer where Auditor Server is installed, open the **Local Security Policy** +snap-in: navigate to Start > Windows Administrative Tools and select Local Security Policy. + +**Step 2 –** Navigate to **Security Settings > Local Policies > User Rights Assignment** and locate +the **Log on as a service** policy. + +**Step 3 –** Double-click the **Log on as a service** policy, and click **Add User or Group**. + +**Step 4 –** Specify the account that you want to define this policy for. + +## Define the Log On As a Batch Job Policy + +When you create a Logon Activity monitoring plan, the Log on as a batch job policy is automatically +defined for the Data Processing Account as a local security policy. However, if you have the Deny +log on as a batch job policy defined locally or on the domain level, the local Log on as a batch job +policy will be reset. In this case, redefine the Deny log on as a batch job policy through the Local +Security Policy console on your computer or on the domain level through the Group Policy Management +console. + +You can configure this policy via the **Local Security Policy** snap-in or using the Group Policy +Management console. + +### Configure the Log On As a Batch Job policy via Local Security Policy Snap-in + +Follow the steps to configure the Log On As a Batch Job policy via Local Security Policy snap-in. + +**Step 1 –** On any domain controller in the target domain, open the **Local Security Policy** +snap-in: navigate to Start > Windows Administrative Tools and select Local Security Policy. + +**Step 2 –** In the **Local Security Policy** snap-in, navigate to **Security Settings** > **Local +Policies > User Rights Assignment** and locate the **Log on as a batch job** policy. + +![manualconfig_ws_logonasbatch](/images/1secure/admin/datacollection/activedirectory/manualconfig_ws_logonasbatch.webp) + +**Step 3 –** Double-click the **Log on as a batch job** policy, and click **Add User or Group**. +Specify the account that you want to define this policy for. + +### Configure the Log On As a Batch Job Policy Using the Group Policy Management Console + +Perform this procedure only if the account selected for data collection is not a member of the +Domain Admins group. + +Follow the steps to configure the Log On As a Batch Job policy using the Group Policy Management +Console. + +**Step 1 –** Open the Group Policy Management console on any domain controller in the target domain: +navigate to Start > Windows Administrative Tools (Windows Server 2016/2019) or Administrative Tools +(Windows 2012 R2 and below) > Group Policy Management. + +**Step 2 –** In the left pane, navigate to Forest: `` > Domains > `` > +Domain Controllers. Right-click the effective domain controllers policy (by default, it is the +Default Domain Controllers Policy), and select Edit. + +**Step 3 –** In the Group Policy Management Editor dialog, expand the Computer Configuration node on +the left and navigate to Policies > Windows Settings > Security Settings > Local Policies. + +**Step 4 –** On the right, double-click the User Rights Assignment policy. + +**Step 5 –** Locate the Log on as a batch job policy and double-click it. + +**Step 6 –** In the Log on as a batch job Properties dialog, click Add User or Group and specify the +user that you want to define this policy for. + +**Step 7 –** Navigate to Start > Run and type `cmd`. Input the `gpupdate /force` command and press +Enter. The group policy will be updated. + +**Step 8 –** Type `repadmin /syncall` command and press Enter for replicate GPO changes to other +domain controllers. + +**Step 9 –** Ensure that new GPO settings applied on any audited domain controller. diff --git a/docs/auditor/10.8/configuration/activedirectory/ports.md b/docs/auditor/10.8/configuration/activedirectory/ports.md new file mode 100644 index 0000000000..5817709946 --- /dev/null +++ b/docs/auditor/10.8/configuration/activedirectory/ports.md @@ -0,0 +1,30 @@ +--- +title: "Active Directory Ports" +description: "Active Directory Ports" +sidebar_position: 10 +--- + +# Active Directory Ports + +Review a full list of protocols and ports required for monitoring Active Directory. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to remote ports on the source and inbound connections to local ports on + the target. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 389 TCP port. On domain controllers in your domain +(target), allow inbound connections to the local 389 TCP port. + +| Port | Protocol | Source | Target | Purpose | +| ---------------------------------- | -------- | ---------------------- | ------------------ | ---------------------------------------------------------------------------------------------- | +| 389 | TCP\UDP | Netwrix Auditor Server | Domain controllers | LDAP Common queries | +| 3268 | TCP | Netwrix Auditor Server | Domain controllers | LDAP Group membership GC search | +| 3269 | TCP | Netwrix Auditor Server | Domain controllers | Global catalog LDAP over SSL | +| 88 | TCP/UDP | Netwrix Auditor Server | Domain controllers | Kerberos authentication | +| 135 and dynamic range: 1024 -65535 | TCP | Netwrix Auditor Server | Domain controllers | Windows Management Instrumentation. `gpupdate /force ` | +| 445 | TCP | Netwrix Auditor Server | Domain controllers | SMB 2.0/3.0 Authenticated communication between Netwrix Auditor Server and domain controllers. | +| 53 | UDP | Netwrix Auditor Server | DNS Server | DNS Client | + +\* - for Exchange 2010 only diff --git a/docs/auditor/10.8/configuration/activedirectory/registrykey.md b/docs/auditor/10.8/configuration/activedirectory/registrykey.md new file mode 100644 index 0000000000..de306fd580 --- /dev/null +++ b/docs/auditor/10.8/configuration/activedirectory/registrykey.md @@ -0,0 +1,25 @@ +--- +title: "Active Directory Registry Key Configuration" +description: "Active Directory Registry Key Configuration" +sidebar_position: 100 +--- + +# Active Directory Registry Key Configuration + +Review the basic registry keys that you may need to configure for monitoring Active Directory with +Netwrix Auditor. On the computer whereNetwrix Auditor Server is installed, navigate to **Start** > +**Run** and type **regedit**. + +| Registry key (REG_DWORD type) | Description / Value | +| ------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Netwrix Auditor\AD Change Reporter | | +| CleanAutoBackupLogs | Defines the retention period for the security log backups: - 0—Backups are never deleted from Domain controllers - [X]— Backups are deleted after [X] hours | +| IgnoreAuditCheckResultError | Defines whether audit check errors should be displayed in the Activity Summary footer: - 0—Display errors - 1—Do not display errors | +| IgnoreRootDCErrors | Defines whether to display audit check errors for the root domain (when data is collected from a child domain) in the Activity Summary footer: - 0—Display errors - 1—Do not display errors | +| MonitorModifiedAndRevertedBack | Defines whether the Activity Summary must display the attributes whose values were modified and then restored between data collections: - 0—These attributes are not displayed - 1—These attributes are displayed as "modified and reverted back" | +| ProcessBackupLogs | Defines whether to process security log backups: - 0—No - 1—Yes Even if this key is set to _"0"_, the security log backups will not be deleted regardless of the value of the CleanAutoBackupLogs key. | +| HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Netwrix Auditor\AD Change Reporter\ | | +| CollectLogsMaxThreads | Defines the number of Domain Controllers to simultaneously start log collection on. | +| HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Netwrix Auditor\Management Console\Database settings | | +| SqlOperationTimeout | Defines the timeout for executing SQL queries such as data selection, insertion or deletion (in seconds). | +| timeout | Defines the Audit Database connection timeout (in seconds). | diff --git a/docs/auditor/10.8/configuration/activedirectory/securitylog.md b/docs/auditor/10.8/configuration/activedirectory/securitylog.md new file mode 100644 index 0000000000..e3a2a07e74 --- /dev/null +++ b/docs/auditor/10.8/configuration/activedirectory/securitylog.md @@ -0,0 +1,47 @@ +--- +title: "Adjust Security Event Log Size and Retention" +description: "Adjust Security Event Log Size and Retention" +sidebar_position: 80 +--- + +# Adjust Security Event Log Size and Retention + +Defining the Security event log size is essential for change auditing. If the log size is +insufficient, overwrites may occur before data is written to the Long-Term Archive and the Audit +Database, and some audit data may be lost. + +To prevent overwrites, you can increase the maximum size of the Security event log and set retention +method for this log to “_Overwrite events as needed_”. + +To adjust your Security event log size and retention method, follow the procedure described below. + +To read about event log settings recommended by Microsoft, refer to the following article: +[Event Log](https://support.microsoft.com/en-us/help/957662/recommended-settings-for-event-log-sizes-in-windows). + +To increase the maximum size of the Security event log and set its retention method + +1. Open the **Group Policy Management** console on any domain controller in the target domain: + navigate to Start > Windows Administrative Tools (Windows Server 2016 and higher) or + Administrative Tools (Windows 2012) **Group Policy Management.** +2. In the left pane, navigate to **Forest: `` > Domains > ``** **> Domain + Controllers**. Right-click the effective domain controllers policy (by default, it is the + **Default Domain Controllers Policy**), and select **Edit** from the pop-up menu. +3. Navigate to **Computer Configuration > Policies > Windows Settings > Security Settings > Event + Log** and double-click the **Maximum security log size** policy. + + ![manualconfig_grouppolicymaxsecuritysizewinserver2016](/images/1secure/configuration/logonactivity/manualconfig_grouppolicymaxsecuritysizewinserver2016.webp) + +4. In the Maximum security log size Properties dialog, select **Define this policy setting** and set + maximum security log size to **4194240** kilobytes (4GB). +5. Select the **Retention method for security log** policy. In the Retention method for security log + Properties dialog, check **Define this policy** and select **Overwrite events as needed**. +6. Run the following command to update group policy: + + `gpupdate /force` + +If "Overwrite" option is not enough to meet your data retention requirements, you can use +_auto-archiving_ option for Security event log to preserve historical event data in the archive +files. With that option enabled, you may want to adjust the retention settings for log archives +(backups). Related procedures are described in the +[Auto-archiving Windows Security log](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u000000Pcx6CAC.html) +Netwrix Knowledge Base article. diff --git a/docs/auditor/10.8/configuration/activedirectory/tombstone.md b/docs/auditor/10.8/configuration/activedirectory/tombstone.md new file mode 100644 index 0000000000..d49208ef68 --- /dev/null +++ b/docs/auditor/10.8/configuration/activedirectory/tombstone.md @@ -0,0 +1,45 @@ +--- +title: "Adjust Active Directory Tombstone Lifetime (optional)" +description: "Adjust Active Directory Tombstone Lifetime (optional)" +sidebar_position: 90 +--- + +# Adjust Active Directory Tombstone Lifetime (optional) + +You can restore deleted Active Directory objects and their attributes using the Netwrix Auditor +Object Restore for Active Directory tool shipped with Netwrix Auditor. The tool finds the +information on deleted objects in the product snapshots (this data is stored in the Long-Term +Archive, a local file-based storage of audit data) and AD tombstones. + +To be able to restore deleted Active Directory objects longer, increase the **Active Directory +tombstone lifetime** property (set by default to 180 days). Netwrix recommends setting it to 2 years +(**730 days**). You can specify any number of days, but a selected value should not exceed the +Long-Term Archive retention period. + +Take into consideration that increasing tombstone lifetime may affect Active Directory performance +and operability. + +To perform this procedure, you will need the +[ADSI Edit](http://technet.microsoft.com/en-us/library/cc773354(v=ws.10).aspx) utility.utility. + +Follow the steps to change the tombstone lifetime attribute. + +**Step 1 –** On any domain controller in the target domain, navigate to Start > Windows +Administrative Tools **> ADSI Edit**. + +**Step 2 –** Right-click the **ADSI Edit** node and select **Connect To**. In the **Connection +Settings** dialog, enable **Select a well-known Naming Context** and select **Configuration** from +the drop-down list. + +![manualconfig_adsi_connectionwinserver2016](/images/1secure/configuration/ad/manualconfig_adsi_connectionwinserver2016.webp) + +**Step 3 –** Navigate to **Configuration `` → +CN=Configuration,DC=``,DC=`` → CN=Services → CN=Windows NT → CN=Directory Service**. +Right-click it and select **Properties** from the pop-up menu. + +**Step 4 –** In the **CN=Directory Service Properties** dialog, locate the **tombstoneLifetime** +attribute in the **Attribute Editor** tab. + +![manualconfig_adsi_tombstone_winserver2016](/images/auditor/10.7/configuration/activedirectory/manualconfig_adsi_tombstone_winserver2016.webp) + +**Step 5 –** Click **Edit**. Set the value to _"730"_ (which equals 2 years). diff --git a/docs/auditor/10.8/configuration/activedirectoryfederatedservices/_category_.json b/docs/auditor/10.8/configuration/activedirectoryfederatedservices/_category_.json new file mode 100644 index 0000000000..360379a7cc --- /dev/null +++ b/docs/auditor/10.8/configuration/activedirectoryfederatedservices/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "AD FS", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md b/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md new file mode 100644 index 0000000000..f24568d07f --- /dev/null +++ b/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md @@ -0,0 +1,149 @@ +--- +title: "AD FS" +description: "AD FS" +sidebar_position: 20 +--- + +# AD FS + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +Active Directory Federation Services (AD FS) server role can be assigned: + +- to a domain controller +- to a Windows server joined in the domain + +Multiple AD FS federation servers can be included in a **farm**, a group of connected servers with +configuration replicated between them. The first AD FS federation server you set up in the farm +becomes the **primary** server. Other federation servers you add to the farm will become +**secondary** servers. + +Make sure you have Windows Remote Management properly configured on your Auditor console computer. +See the [Software Requirements](/docs/auditor/10.7/requirements/software.md) topic for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. See the Configure AD FS farm audit + settings automatically topic for additional information. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - AD FS audit settings must be configured on the primary AD FS server, i.e. on the first server + you have set up in the farm: + + - To configure audit of AD FS 4.0 on Windows Server 2016 or AD FS 5.0 on Windows Server + 2019, use the following PowerShell cmdlets: + + ``` + Set-AdfsProperties -LogLevel Errors,FailureAudits,Verbose,SuccessAudits,Warnings + Set-AdfsProperties –AuditLevel Verbose + ``` + + - To configure audit of AD FS 3.0 on Windows Server 2012 R2, use the following PowerShell + cmdlet + + ``` + Set-AdfsProperties -LogLevel Errors,FailureAudits,Verbose,SuccessAudits,Warnings + ``` + + - Windows Audit policy must be configured on each server in the farm. For all Windows server + versions Run the _auditpol_ utility with the following parameters: + + - `auditpol.exe /set /subcategory:"Application Generated" /failure:enable /success:enable` + + - Adjust log size and retention settings for **Security** log and for **AD FS Admin** log (under + **Applications and Service logs**). See + [Adjusting Event Log Size and Retention Settings](/docs/auditor/10.7/configuration/windowsserver/eventlog.md) for details. + - If AD FS Admin logging is disabled, you should enable it. + - See the Configure AD FS farm manually topic for additional information. + +## **Configure AD FS farm audit settings automatically** + +Audit settings can be applied automatically if your monitoring plan has the primary AD FS federation +server included as an item. If it has only secondary AD FS federation servers included, you will +need to configure audit settings manually, as described later in this section. + +**Step 1 –** Select the AD FS data source in this monitoring plan (top row under the header), click +**Edit data source** to open its settings. + +![mp_adfs_listing_thumb_0_0](/images/auditor/10.7/configuration/activedirectoryfederatedservices/mp_adfs_listing_thumb_0_0.webp) + +**Step 2 –** In the **Configure audit settings** section, select **Adjust audit settings +automatically** check box. + +![mp_data_source_ad_fs_thumb_0_0](/images/auditor/10.7/configuration/activedirectoryfederatedservices/mp_data_source_ad_fs_thumb_0_0.webp) + +**Step 3 –** Save the settings. + +Auditor  will automatically configure audit settings on all servers in the AD FS farm and adjust the +necessary log settings on these servers. + +## Configure AD FS farm manually + +Follow the steps to enable AD FS audit settings and set up Windows audit policy. + +**Step 1 –** AD FS audit settings must be configured on the primary AD FS server, i.e. on the first +server you have set up in the farm: + +- To configure audit of AD FS 3.0 on Windows Server 2012 R2, use the following PowerShell cmdlet: + +Set-AdfsProperties -LogLevel Errors,FailureAudits,Verbose,SuccessAudits,Warnings + +- To configure audit of AD FS 4.0 on Windows Server 2016 or AD FS 5.0 on Windows Server 2019, use + the following PowerShell cmdlets: + +Set-AdfsProperties -LogLevel Errors,FailureAudits,Verbose,SuccessAudits,Warnings + +Set-AdfsProperties –AuditLevel Verbose + +**Step 2 –** Windows Audit policy must be configured on each server in the farm. For all Windows +server versions + +- Run the _auditpol_ utility with the following parameters: + +```auditpol.exe /set /subcategory:"Application Generated" /failure:enable /success:enable + +``` + +**Step 3 –** Adjust log size and retention settings for **Security** log and for **AD FS Admin** log +(under **Applications and Service logs**). See the +[Adjusting Event Log Size and Retention Settings](/docs/auditor/10.7/configuration/windowsserver/eventlog.md) topic for additional +information. + +If AD FS Admin logging is disabled, you should enable it. + +_Remember,_ do the following: + +- Configure Data Collecting Account as described in the + [Permissions for AD FS Auditing](/docs/auditor/10.7/configuration/activedirectoryfederatedservices/permissions.md) topic. +- Configure ports as described in the [AD FS Ports](/docs/auditor/10.7/configuration/activedirectoryfederatedservices/ports.md) topic. + +## AD FS Servers Data Collection + +For Active Directory Federation Services (AD FS) servers, Netwrix Auditor can collect audit data on +the events and configuration objects listed below. + +| Event type | Action | Details | +| ---------------------- | ---------------- | ------------------------------------------------ | +| AD FS logon (intranet) | Failed Logon | Cause (for failed attempts) | +| AD FS logon (extranet) | Successful Logon | Authentication methods (for Successful attempts) | + +Configuration information can be collected for the following objects: + +- AD FS servers included in the farm +- Application Groups settings +- Authentication Method names +- Relying Party Trusts settings +- Scope Descriptions diff --git a/docs/auditor/10.8/configuration/activedirectoryfederatedservices/permissions.md b/docs/auditor/10.8/configuration/activedirectoryfederatedservices/permissions.md new file mode 100644 index 0000000000..5dc29490e8 --- /dev/null +++ b/docs/auditor/10.8/configuration/activedirectoryfederatedservices/permissions.md @@ -0,0 +1,18 @@ +--- +title: "Permissions for AD FS Auditing" +description: "Permissions for AD FS Auditing" +sidebar_position: 20 +--- + +# Permissions for AD FS Auditing + +Before you start creating a monitoring plan to audit your AD FS federation servers, plan for the +account that will be used for data collection – it should meet the requirements listed below. Then +you will provide this account in the monitoring plan wizard. + +**On the target server:** + +- If the target AD FS federation server is a domain controller, then the account must belong to the + **Administrators** or **Domain Admins** group +- Otherwise, if the server is not a domain controller, the account must belong to the **Local + Administrators** group. diff --git a/docs/auditor/10.8/configuration/activedirectoryfederatedservices/ports.md b/docs/auditor/10.8/configuration/activedirectoryfederatedservices/ports.md new file mode 100644 index 0000000000..42dd1c30a6 --- /dev/null +++ b/docs/auditor/10.8/configuration/activedirectoryfederatedservices/ports.md @@ -0,0 +1,29 @@ +--- +title: "AD FS Ports" +description: "AD FS Ports" +sidebar_position: 10 +--- + +# AD FS Ports + +Review a full list of protocols and ports required for monitoring logon activities performed using +Active Directory Federation Services (AD FS). + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to remote ports on the source and inbound connections to local ports on + the target. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 389 TCP port. On domain controllers in your domain +(target), allow inbound connections to local 389 TCP port. + +| Port | Protocol | Source | Target | Purpose | +| -------------------------------- | -------- | ---------------------- | ------------------ | ----------------------------------------------------------------------- | +| 389 | TCP | Netwrix Auditor Server | Domain controllers | LDAP DC query Account resolve | +| 53 | TCP | Netwrix Auditor Server | DNS Server | DNS Client | +| 135 + Dynamic: 1024 -65535 | TCP | Netwrix Auditor Server | Domain controllers | Windows Management Instrumentation Firewall configuration | +| 135 | TCP | Netwrix Auditor Server | Domain controllers | Service Control Manager Remote Protocol (RPC) Core Service installation | +| 137 through 139 | UDP | Netwrix Auditor Server | Domain controllers | Service Control Manager Remote Protocol (RPC) Core Service installation | +| 445 | TCP | Netwrix Auditor Server | Domain controllers | SMB 2.0/3.0 | +| 5985 (for HTTP) 5986 (for HTTPS) | TCP | Netwrix Auditor Server | AD FS servers | Windows Remote Management (WinRM) | diff --git a/docs/auditor/10.8/configuration/azurefiles/_category_.json b/docs/auditor/10.8/configuration/azurefiles/_category_.json new file mode 100644 index 0000000000..23eacd1365 --- /dev/null +++ b/docs/auditor/10.8/configuration/azurefiles/_category_.json @@ -0,0 +1,4 @@ +{ + "label": "Azure Files", + "position": 15 +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/azurefiles/overview.md b/docs/auditor/10.8/configuration/azurefiles/overview.md new file mode 100644 index 0000000000..f86d3b001f --- /dev/null +++ b/docs/auditor/10.8/configuration/azurefiles/overview.md @@ -0,0 +1,181 @@ +--- +title: "Azure Files Configuration Overview" +description: "Configure Azure Files for monitoring with Netwrix Auditor v10.8" +sidebar_position: 1 +--- + +# Azure Files Configuration Overview + +Azure Files is a cloud-based file storage service that provides shared file storage accessible via the Server Message Block (SMB) protocol. To monitor Azure Files with Netwrix Auditor, you need to configure audit logging and permissions in your Azure environment. + +## Prerequisites + +Before configuring Azure Files monitoring, ensure you have: + +### Azure Environment Requirements +- **Azure Subscription**: Active Azure subscription with Azure Files storage accounts +- **Azure Active Directory**: Access to Azure AD tenant administration +- **Storage Accounts**: Azure storage accounts containing file shares to monitor + +### Required Permissions +- **Global Administrator** or **Security Administrator** role in Azure AD +- **Storage Account Contributor** role on target storage accounts +- **Resource Group Reader** access to storage account resource groups + +## Configuration Steps Overview + +The Azure Files configuration process involves several key steps: + +1. **[Azure Application Registration](#azure-application-registration)** - Create and configure Azure AD application +2. **[Storage Account Configuration](#storage-account-configuration)** - Configure audit logging for file shares +3. **[Permissions Setup](#permissions-setup)** - Assign necessary permissions to the monitoring application +4. **[Audit Log Storage](#audit-log-storage)** - Configure audit log collection and storage + +## Azure Application Registration + +### Create Azure AD Application + +1. Navigate to **Azure Active Directory > App registrations** in the Azure portal +2. Click **New registration** +3. Configure the application: + - **Name**: `Netwrix-Auditor-AzureFiles-Monitor` + - **Supported account types**: Accounts in this organizational directory only + - **Redirect URI**: Leave blank +4. Click **Register** + +### Configure Application Credentials + +1. In the registered application, go to **Certificates & secrets** +2. Click **New client secret** +3. Configure the secret: + - **Description**: `Netwrix Auditor Access Secret` + - **Expires**: Choose appropriate expiration (recommended: 24 months) +4. **Important**: Copy and securely store the secret value immediately + +### Required Application Information + +Record the following information for Netwrix Auditor configuration: +- **Tenant ID**: From Azure AD properties +- **Application (Client) ID**: From the app registration overview +- **Client Secret**: Created in the previous step + +## Storage Account Configuration + +### Enable Audit Logging + +For each Azure storage account containing file shares to monitor: + +1. Navigate to **Storage Account > Monitoring > Diagnostic settings** +2. Click **Add diagnostic setting** +3. Configure audit logging: + - **Name**: `Netwrix-AzureFiles-Audit` + - **Categories**: Select all file service categories: + - StorageRead + - StorageWrite + - StorageDelete +4. **Destination**: Configure to send logs to: + - Storage account (for Netwrix Auditor collection) + - Log Analytics workspace (optional, for additional analysis) + +### File Share Configuration + +1. Navigate to **Storage Account > File shares** +2. For each file share to monitor: + - Ensure **Access tier** is set appropriately + - Configure **Backup** if required for compliance + - Review **Access policies** and permissions + +## Permissions Setup + +### Microsoft Graph API Permissions + +The Azure application requires the following Microsoft Graph permissions: + +#### Application Permissions (Admin Consent Required) +- **Directory.Read.All**: Read directory data +- **User.Read.All**: Read all users' profiles + +### Azure Storage Permissions + +#### Storage Account Level +- **Storage Blob Data Reader**: Read audit logs from storage containers +- **Storage File Data SMB Share Reader**: Read file share data and metadata + +#### Resource Group Level +- **Reader**: List and view storage accounts in the resource group + +### Assign Permissions + +#### Graph API Permissions +1. In the Azure AD application, go to **API permissions** +2. Click **Add a permission > Microsoft Graph > Application permissions** +3. Select the required permissions listed above +4. Click **Grant admin consent** for your organization + +#### Storage Permissions +1. Navigate to each **Storage Account > Access control (IAM)** +2. Click **Add > Add role assignment** +3. Assign the following roles to your application: + - **Storage Blob Data Reader** + - **Storage File Data SMB Share Reader** + +## Audit Log Storage + +### Create Dedicated Storage Account + +It's recommended to create a separate storage account for audit logs: + +1. Create new storage account: `netwrixauditlogs[suffix]` +2. Configure storage settings: + - **Performance**: Standard + - **Replication**: LRS or GRS based on compliance requirements + - **Access tier**: Hot (for frequent access to recent logs) + +### Configure Log Collection + +1. Navigate to the audit log storage account +2. Create containers for audit data organization: + - `azurefiles-audit-logs` + - `file-access-logs` + - `permission-change-logs` + +## Network and Security Considerations + +### Network Access +- Ensure Netwrix Auditor can reach Azure endpoints (*.core.windows.net) +- Configure firewall rules if necessary +- Consider using Azure Private Endpoints for enhanced security + +### Security Best Practices +- **Principle of Least Privilege**: Grant only necessary permissions +- **Regular Secret Rotation**: Rotate client secrets regularly +- **Monitor Application Usage**: Review application access logs +- **Conditional Access**: Consider applying conditional access policies + +## Troubleshooting Common Issues + +### Authentication Problems +- Verify Tenant ID is correct (use ID, not name) +- Ensure client secret hasn't expired +- Check application permissions are granted with admin consent + +### Permission Issues +- Verify storage account role assignments +- Check resource group reader access +- Ensure Microsoft Graph permissions are application-level, not delegated + +### Audit Log Collection Issues +- Verify diagnostic settings are properly configured +- Check storage account accessibility from Netwrix Auditor +- Review audit log retention policies + +## Next Steps + +After completing the Azure Files configuration: + +1. **Test Connectivity**: Verify Netwrix Auditor can authenticate and access storage accounts +2. **Create Monitoring Plan**: Configure Azure Files monitoring in Netwrix Auditor +3. **Validate Data Collection**: Confirm audit events are being collected properly +4. **Set Up Alerting**: Configure alerts for suspicious activities + +For detailed instructions on creating the monitoring plan in Netwrix Auditor, see the [Azure Files Monitoring Plan](/docs/auditor/10.8/admin/monitoringplans/azurefiles/overview.md) documentation. \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/azurefiles/permissions.md b/docs/auditor/10.8/configuration/azurefiles/permissions.md new file mode 100644 index 0000000000..023e578af4 --- /dev/null +++ b/docs/auditor/10.8/configuration/azurefiles/permissions.md @@ -0,0 +1,273 @@ +--- +title: "Azure Files Permissions" +description: "Detailed permissions configuration for Azure Files monitoring" +sidebar_position: 2 +--- + +# Azure Files Permissions + +This document provides detailed information about the permissions required to monitor Azure Files with Netwrix Auditor, including specific steps for configuring each permission level. + +## Permission Types Overview + +Azure Files monitoring requires permissions at multiple levels: +- **Azure Active Directory**: Application permissions for Graph API access +- **Storage Account**: Access to file shares and audit logs +- **Resource Group**: Resource discovery and management +- **Subscription**: Optional, for broader resource access + +## Azure Active Directory Permissions + +### Required Microsoft Graph Permissions + +#### Application Permissions (Requires Admin Consent) + +| Permission | Scope | Justification | +|------------|--------|---------------| +| `Directory.Read.All` | Read all directory objects | Required to read user and group information for audit events | +| `User.Read.All` | Read all users' full profiles | Needed to resolve user identities in file access events | + +#### Optional Enhanced Permissions + +| Permission | Scope | Use Case | +|------------|--------|----------| +| `Group.Read.All` | Read all groups | Enhanced group membership resolution | +| `Application.Read.All` | Read applications | Track application-based file access | + +### Configuring Azure AD Permissions + +#### Method 1: Azure Portal +1. Navigate to **Azure Active Directory > App registrations** +2. Select your Netwrix Auditor application +3. Go to **API permissions** +4. Click **Add a permission** +5. Select **Microsoft Graph > Application permissions** +6. Search for and select required permissions: + - `Directory.Read.All` + - `User.Read.All` +7. Click **Add permissions** +8. **Critical**: Click **Grant admin consent for [Your Organization]** + +#### Method 2: PowerShell +```powershell +# Connect to Azure AD +Connect-AzureAD + +# Get the service principal for your application +$appId = "YOUR_APPLICATION_ID" +$sp = Get-AzureADServicePrincipal -Filter "AppId eq '$appId'" + +# Get Microsoft Graph service principal +$graphSP = Get-AzureADServicePrincipal -Filter "AppId eq '00000003-0000-0000-c000-000000000000'" + +# Add Directory.Read.All permission +$directoryReadPermission = $graphSP.AppRoles | Where-Object {$_.Value -eq "Directory.Read.All"} +New-AzureADServiceAppRoleAssignment -ObjectId $sp.ObjectId -PrincipalId $sp.ObjectId -ResourceId $graphSP.ObjectId -Id $directoryReadPermission.Id + +# Add User.Read.All permission +$userReadPermission = $graphSP.AppRoles | Where-Object {$_.Value -eq "User.Read.All"} +New-AzureADServiceAppRoleAssignment -ObjectId $sp.ObjectId -PrincipalId $sp.ObjectId -ResourceId $graphSP.ObjectId -Id $userReadPermission.Id +``` + +## Storage Account Permissions + +### Required Storage Roles + +#### Primary File Share Access +| Role | Scope | Purpose | +|------|--------|---------| +| `Storage File Data SMB Share Reader` | Storage Account | Read file share data and metadata | +| `Storage Blob Data Reader` | Storage Account | Access audit logs stored as blobs | + +#### Alternative Broader Access (Less Secure) +| Role | Scope | Purpose | +|------|--------|---------| +| `Storage Account Contributor` | Storage Account | Full storage account access (not recommended) | + +### Configuring Storage Account Permissions + +#### Method 1: Azure Portal +1. Navigate to **Storage Account > Access control (IAM)** +2. Click **Add > Add role assignment** +3. For each required role: + - **Role**: Select from required roles above + - **Assign access to**: User, group, or service principal + - **Select**: Search for your Netwrix Auditor application + - Click **Save** + +#### Method 2: Azure CLI +```bash +# Variables +SUBSCRIPTION_ID="your-subscription-id" +RESOURCE_GROUP="your-resource-group" +STORAGE_ACCOUNT="your-storage-account" +APP_OBJECT_ID="your-app-object-id" + +# Assign Storage File Data SMB Share Reader +az role assignment create \ + --assignee $APP_OBJECT_ID \ + --role "Storage File Data SMB Share Reader" \ + --scope "/subscriptions/$SUBSCRIPTION_ID/resourceGroups/$RESOURCE_GROUP/providers/Microsoft.Storage/storageAccounts/$STORAGE_ACCOUNT" + +# Assign Storage Blob Data Reader +az role assignment create \ + --assignee $APP_OBJECT_ID \ + --role "Storage Blob Data Reader" \ + --scope "/subscriptions/$SUBSCRIPTION_ID/resourceGroups/$RESOURCE_GROUP/providers/Microsoft.Storage/storageAccounts/$STORAGE_ACCOUNT" +``` + +#### Method 3: PowerShell +```powershell +# Connect to Azure +Connect-AzAccount + +# Variables +$subscriptionId = "your-subscription-id" +$resourceGroupName = "your-resource-group" +$storageAccountName = "your-storage-account" +$appObjectId = "your-app-object-id" + +# Set context +Set-AzContext -SubscriptionId $subscriptionId + +# Get storage account resource +$storageAccount = Get-AzStorageAccount -ResourceGroupName $resourceGroupName -Name $storageAccountName + +# Assign Storage File Data SMB Share Reader +New-AzRoleAssignment -ObjectId $appObjectId -RoleDefinitionName "Storage File Data SMB Share Reader" -Scope $storageAccount.Id + +# Assign Storage Blob Data Reader +New-AzRoleAssignment -ObjectId $appObjectId -RoleDefinitionName "Storage Blob Data Reader" -Scope $storageAccount.Id +``` + +## Resource Group Permissions + +### Required Resource Group Roles + +| Role | Scope | Purpose | +|------|--------|---------| +| `Reader` | Resource Group | List and discover storage accounts | + +### Configuring Resource Group Permissions + +#### Azure Portal Method +1. Navigate to **Resource Groups > [Your Resource Group] > Access control (IAM)** +2. Click **Add > Add role assignment** +3. Configure assignment: + - **Role**: Reader + - **Assign access to**: User, group, or service principal + - **Select**: Your Netwrix Auditor application +4. Click **Save** + +## Subscription-Level Permissions (Optional) + +### Optional Subscription Roles + +| Role | Scope | Use Case | +|------|--------|----------| +| `Reader` | Subscription | Discovery across multiple resource groups | +| `Storage Account Contributor` | Subscription | Manage storage accounts (typically not needed) | + +**Note**: Subscription-level permissions are generally not required for Azure Files monitoring and should be avoided following the principle of least privilege. + +## Permission Validation + +### Verify Azure AD Permissions +```powershell +# Connect and get application permissions +Connect-AzureAD +$appId = "YOUR_APPLICATION_ID" +$sp = Get-AzureADServicePrincipal -Filter "AppId eq '$appId'" +Get-AzureADServiceAppRoleAssignment -ObjectId $sp.ObjectId +``` + +### Verify Storage Account Permissions +```bash +# List role assignments for storage account +az role assignment list --scope "/subscriptions/SUBSCRIPTION_ID/resourceGroups/RESOURCE_GROUP/providers/Microsoft.Storage/storageAccounts/STORAGE_ACCOUNT" --assignee APP_OBJECT_ID +``` + +### Test Connectivity +```powershell +# Test Graph API access +$appId = "YOUR_APPLICATION_ID" +$clientSecret = "YOUR_CLIENT_SECRET" +$tenantId = "YOUR_TENANT_ID" + +# Get access token +$body = @{ + grant_type = "client_credentials" + client_id = $appId + client_secret = $clientSecret + scope = "https://graph.microsoft.com/.default" +} + +$response = Invoke-RestMethod -Uri "https://login.microsoftonline.com/$tenantId/oauth2/v2.0/token" -Method Post -Body $body +$accessToken = $response.access_token + +# Test Graph API call +$headers = @{Authorization = "Bearer $accessToken"} +Invoke-RestMethod -Uri "https://graph.microsoft.com/v1.0/users?`$top=1" -Headers $headers +``` + +## Troubleshooting Permission Issues + +### Common Permission Problems + +#### Insufficient Privileges Error +**Symptoms**: `Insufficient privileges to complete the operation` +**Solutions**: +- Verify admin consent was granted for Graph API permissions +- Check that application permissions (not delegated) are configured +- Ensure the service principal has the required storage roles + +#### Access Denied to Storage Account +**Symptoms**: `Access denied` when accessing file shares or audit logs +**Solutions**: +- Verify storage account role assignments +- Check that roles are assigned to the service principal, not the user +- Ensure storage account firewall settings allow access + +#### Authentication Failed +**Symptoms**: `Authentication failed` or `Invalid client secret` +**Solutions**: +- Verify Tenant ID is correct (use ID, not display name) +- Check client secret hasn't expired +- Ensure application ID is correct + +### Permission Auditing + +#### Regular Permission Reviews +1. **Monthly**: Review application permissions and role assignments +2. **Quarterly**: Validate that permissions follow principle of least privilege +3. **Annually**: Rotate client secrets and review access patterns + +#### Monitoring Permission Usage +- Enable Azure AD sign-in logs for the application +- Monitor Azure Activity Log for permission-related events +- Set up alerts for permission changes + +## Security Best Practices + +### Principle of Least Privilege +- Grant only the minimum permissions required +- Use resource-specific roles rather than broad administrative roles +- Regularly review and remove unused permissions + +### Secret Management +- Rotate client secrets every 12-24 months +- Use Azure Key Vault for secret storage when possible +- Monitor secret expiration dates + +### Access Monitoring +- Enable logging for the monitoring application +- Set up alerts for unusual access patterns +- Regular audit permission usage + +## Next Steps + +After configuring permissions: +1. **Test Connectivity**: Verify the application can authenticate and access resources +2. **Create Monitoring Plan**: Configure Azure Files monitoring in Netwrix Auditor +3. **Validate Data Collection**: Ensure audit events are collected successfully +4. **Implement Monitoring**: Set up alerts for permission changes and access anomalies \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/azurefiles/ports.md b/docs/auditor/10.8/configuration/azurefiles/ports.md new file mode 100644 index 0000000000..2282cc746e --- /dev/null +++ b/docs/auditor/10.8/configuration/azurefiles/ports.md @@ -0,0 +1,346 @@ +--- +title: "Azure Files Ports and Network Configuration" +description: "Network ports and connectivity requirements for Azure Files monitoring" +sidebar_position: 3 +--- + +# Azure Files Ports and Network Configuration + +This document outlines the network connectivity requirements, ports, and protocols needed for Netwrix Auditor to monitor Azure Files storage accounts. + +## Network Connectivity Overview + +Azure Files monitoring requires outbound connectivity from Netwrix Auditor to various Azure services over HTTPS (port 443). All communication is initiated from the Netwrix Auditor server to Azure cloud services. + +## Required Outbound Connections + +### Azure Storage Services + +| Service | FQDN Pattern | Port | Protocol | Purpose | +|---------|--------------|------|----------|---------| +| Azure Storage | `*.core.windows.net` | 443 | HTTPS | File share and audit log access | +| Azure Storage | `[storageaccount].file.core.windows.net` | 443 | HTTPS | Specific file share access | +| Azure Storage | `[storageaccount].blob.core.windows.net` | 443 | HTTPS | Audit log blob access | + +### Azure Active Directory Services + +| Service | FQDN | Port | Protocol | Purpose | +|---------|------|------|----------|---------| +| Azure AD | `login.microsoftonline.com` | 443 | HTTPS | Authentication and token requests | +| Azure AD | `graph.microsoft.com` | 443 | HTTPS | Microsoft Graph API access | +| Azure AD | `[tenant].onmicrosoft.com` | 443 | HTTPS | Tenant-specific authentication | + +### Azure Management Services + +| Service | FQDN | Port | Protocol | Purpose | +|---------|------|------|----------|---------| +| Azure Resource Manager | `management.azure.com` | 443 | HTTPS | Resource discovery and management | +| Azure Monitor | `[region].monitoring.azure.com` | 443 | HTTPS | Diagnostic data collection | + +## Firewall Configuration + +### Windows Firewall (Netwrix Auditor Server) + +If Windows Firewall is enabled on the Netwrix Auditor server, ensure outbound HTTPS traffic is allowed: + +```powershell +# Allow outbound HTTPS traffic for Netwrix Auditor +New-NetFirewallRule -DisplayName "Netwrix Auditor - Azure Files Monitoring" -Direction Outbound -Protocol TCP -LocalPort Any -RemotePort 443 -Action Allow -Program "C:\Program Files\Netwrix Auditor\[AuditorExecutable].exe" +``` + +### Corporate Firewall Rules + +Configure your corporate firewall to allow outbound connections: + +#### Method 1: FQDN-Based Rules (Recommended) +``` +ALLOW OUTBOUND HTTPS (TCP/443) TO: +- *.core.windows.net +- login.microsoftonline.com +- graph.microsoft.com +- management.azure.com +- *.monitoring.azure.com +``` + +#### Method 2: IP Address Ranges +If FQDN filtering is not available, use Azure IP ranges (updated monthly): + +1. Download current Azure IP ranges from: https://www.microsoft.com/download/details.aspx?id=56519 +2. Extract relevant IP ranges for your Azure region +3. Configure firewall rules for the following service tags: + - `Storage.[Region]` + - `AzureActiveDirectory` + - `AzureResourceManager` + - `AzureMonitor.[Region]` + +**Note**: IP-based rules require regular updates as Azure IP ranges change monthly. + +## Proxy Configuration + +### Corporate Proxy Settings + +If your organization uses a corporate proxy, configure Netwrix Auditor to route Azure traffic through the proxy: + +#### Windows Proxy Configuration +```powershell +# Configure system proxy (affects all applications) +netsh winhttp set proxy proxy-server:port + +# Configure proxy with authentication +netsh winhttp set proxy proxy-server:port bypass-list="" +``` + +#### Application-Specific Proxy +Configure proxy settings in Netwrix Auditor configuration files (consult Netwrix documentation for specific file locations): + +```xml + + + + + + + +``` + +### Proxy Bypass for Internal Resources +Configure proxy bypass for internal resources while routing Azure traffic through proxy: + +``` +PROXY BYPASS LIST: +- *.internal.company.com +- 192.168.* +- 10.* +- 172.16.* +``` + +## Network Security Considerations + +### SSL/TLS Requirements + +All Azure communications use TLS 1.2 or higher: +- Ensure TLS 1.2 is enabled on Netwrix Auditor server +- Disable older SSL/TLS versions for security +- Verify certificate validation is enabled + +#### Enable TLS 1.2 on Windows +```powershell +# Enable TLS 1.2 for .NET applications +Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319" -Name "SchUseStrongCrypto" -Value 1 +Set-ItemProperty -Path "HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319" -Name "SchUseStrongCrypto" -Value 1 + +# Enable TLS 1.2 system-wide +Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client" -Name "Enabled" -Value 1 +Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client" -Name "DisabledByDefault" -Value 0 +``` + +### Private Endpoints (Enhanced Security) + +For organizations requiring enhanced security, consider using Azure Private Endpoints: + +#### Storage Account Private Endpoint +1. Create private endpoint for storage account in your virtual network +2. Configure DNS resolution for private endpoint +3. Ensure Netwrix Auditor can resolve private DNS names +4. Update firewall rules to allow traffic to private IP ranges + +#### Network Architecture with Private Endpoints +``` +[Netwrix Auditor] → [Corporate Network] → [VPN/ExpressRoute] → [Azure VNet] → [Private Endpoint] → [Storage Account] +``` + +## DNS Configuration + +### DNS Resolution Requirements + +Ensure proper DNS resolution for Azure services: + +#### Required DNS Records +- `*.core.windows.net` resolves to Azure Storage public IPs +- `login.microsoftonline.com` resolves to Azure AD public IPs +- `graph.microsoft.com` resolves to Microsoft Graph public IPs + +#### DNS Testing +```powershell +# Test DNS resolution for key services +nslookup login.microsoftonline.com +nslookup graph.microsoft.com +nslookup [yourstorageaccount].file.core.windows.net +nslookup [yourstorageaccount].blob.core.windows.net +``` + +### Custom DNS Configuration + +For environments with custom DNS servers: + +1. Ensure DNS servers can resolve public Azure FQDNs +2. Configure conditional forwarders for `*.azure.com` and `*.microsoft.com` +3. Test resolution from the Netwrix Auditor server + +## Bandwidth and Performance Considerations + +### Bandwidth Requirements + +| Activity | Estimated Bandwidth | Peak Usage | +|----------|-------------------|------------| +| Authentication tokens | < 1 KB/hour | Minimal | +| File metadata collection | 10-100 KB/hour per 1000 files | During initial scan | +| Audit log collection | 1-10 MB/hour per active user | Business hours | +| Graph API queries | 1-5 KB/query | Periodic | + +### Performance Optimization + +#### Connection Pooling +- Azure Storage SDKs automatically use connection pooling +- Monitor connection limits (typically 100+ concurrent connections) + +#### Caching Configuration +```xml + + + + + +``` + +## Monitoring Network Connectivity + +### Connection Testing Script + +```powershell +# Test Azure Files connectivity +function Test-AzureFilesConnectivity { + param( + [string]$StorageAccount, + [string]$TenantId + ) + + $endpoints = @( + "https://login.microsoftonline.com/$TenantId/oauth2/v2.0/token", + "https://graph.microsoft.com/v1.0/users", + "https://$StorageAccount.file.core.windows.net", + "https://$StorageAccount.blob.core.windows.net", + "https://management.azure.com" + ) + + foreach ($endpoint in $endpoints) { + try { + $response = Invoke-WebRequest -Uri $endpoint -Method GET -TimeoutSec 10 -UseBasicParsing + Write-Host "✓ $endpoint - Status: $($response.StatusCode)" -ForegroundColor Green + } + catch { + Write-Host "✗ $endpoint - Error: $($_.Exception.Message)" -ForegroundColor Red + } + } +} + +# Usage +Test-AzureFilesConnectivity -StorageAccount "yourstorageaccount" -TenantId "your-tenant-id" +``` + +### Network Monitoring Tools + +#### Built-in Windows Tools +```cmd +# Test connectivity to Azure endpoints +telnet login.microsoftonline.com 443 +telnet graph.microsoft.com 443 +telnet yourstorageaccount.file.core.windows.net 443 +``` + +#### PowerShell Network Testing +```powershell +# Test port connectivity +Test-NetConnection -ComputerName "login.microsoftonline.com" -Port 443 +Test-NetConnection -ComputerName "graph.microsoft.com" -Port 443 +Test-NetConnection -ComputerName "[storageaccount].file.core.windows.net" -Port 443 +``` + +## Troubleshooting Network Issues + +### Common Connectivity Problems + +#### Firewall Blocking +**Symptoms**: Connection timeout errors, "Unable to connect" messages +**Solutions**: +- Verify outbound HTTPS (port 443) is allowed +- Check corporate firewall logs for blocked connections +- Test connectivity from Netwrix Auditor server + +#### DNS Resolution Failures +**Symptoms**: "Host not found" or "Name resolution failed" +**Solutions**: +- Test DNS resolution using `nslookup` +- Verify DNS server configuration +- Check for DNS filtering/blocking + +#### Proxy Authentication Issues +**Symptoms**: HTTP 407 Proxy Authentication Required +**Solutions**: +- Configure proxy credentials in application settings +- Verify proxy bypass rules +- Test proxy connectivity manually + +#### SSL/TLS Certificate Issues +**Symptoms**: "Certificate validation failed" or "SSL handshake failed" +**Solutions**: +- Update certificate store +- Verify system date/time is correct +- Check for SSL inspection/filtering + +### Network Diagnostics + +#### Comprehensive Network Test +```powershell +# Comprehensive Azure Files network diagnostic +$testResults = @() + +# Test DNS resolution +$dnsTests = @( + "login.microsoftonline.com", + "graph.microsoft.com", + "[storageaccount].file.core.windows.net", + "[storageaccount].blob.core.windows.net" +) + +foreach ($host in $dnsTests) { + try { + $result = Resolve-DnsName -Name $host -ErrorAction Stop + $testResults += "✓ DNS: $host resolved to $($result.IPAddress -join ', ')" + } + catch { + $testResults += "✗ DNS: $host resolution failed - $($_.Exception.Message)" + } +} + +# Test port connectivity +$portTests = @( + @{Host="login.microsoftonline.com"; Port=443}, + @{Host="graph.microsoft.com"; Port=443} +) + +foreach ($test in $portTests) { + try { + $result = Test-NetConnection -ComputerName $test.Host -Port $test.Port -WarningAction SilentlyContinue + if ($result.TcpTestSucceeded) { + $testResults += "✓ Port: $($test.Host):$($test.Port) accessible" + } else { + $testResults += "✗ Port: $($test.Host):$($test.Port) not accessible" + } + } + catch { + $testResults += "✗ Port: $($test.Host):$($test.Port) test failed - $($_.Exception.Message)" + } +} + +$testResults | ForEach-Object { Write-Host $_ } +``` + +## Next Steps + +After configuring network connectivity: +1. **Verify Connectivity**: Run network tests to ensure all endpoints are accessible +2. **Test Authentication**: Verify Azure AD authentication works from Netwrix Auditor +3. **Configure Monitoring Plan**: Set up Azure Files monitoring in Netwrix Auditor +4. **Monitor Performance**: Establish baseline performance metrics for monitoring \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/exchange/_category_.json b/docs/auditor/10.8/configuration/exchange/_category_.json new file mode 100644 index 0000000000..53c0779822 --- /dev/null +++ b/docs/auditor/10.8/configuration/exchange/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Exchange", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/exchange/auditlog.md b/docs/auditor/10.8/configuration/exchange/auditlog.md new file mode 100644 index 0000000000..a2dba834fb --- /dev/null +++ b/docs/auditor/10.8/configuration/exchange/auditlog.md @@ -0,0 +1,55 @@ +--- +title: "Exchange Administrator Audit Logging Settings" +description: "Exchange Administrator Audit Logging Settings" +sidebar_position: 20 +--- + +# Exchange Administrator Audit Logging Settings + +To be able to audit and report who made changes to the Exchange servers in your on-premises +infrastructure, or to Active Directory via the Exchange, ensure the Exchange Administrator Audit +Logging (AAL) settings are configured as follows: + +| Setting | Value | Comment | +| --------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------- | +| AdminAuditLogEnabled | True | Enables audit logging | +| AdminAuditLogAgeLimit | 30 | Determines how long audit log entries will be retained (default is 90 days) | +| AdminAuditLogCmdlets | \* | Instructs the program to create a log entry for every cmdlet that is run. | +| LogLevel | Verbose | Sets logging level. | +| ExcludedCmdlets | \*-InboxRule, \*-MailboxAutoReplyConfiguration, Set-MailboxAuditBypassAssociation, Set-MailboxAutoReplyConfiguration, Set-MailboxCalendarConfiguration, Set-MailboxCalendarFolder, Set-MailboxFolderPermission, Set-MailboxJunkEmailConfiguration, Set-MailboxMessageConfiguration, Set-MailboxRegionalConfiguration, Set-MailboxSpellingConfiguration | This list of exclusions is set up as explained in step 3 of the procedure below. | + +You can configure these settings automatically using Netwrix Auditor, as described in the +[Active Directory: Automatic Configuration](/docs/auditor/10.7/configuration/activedirectory/automatic.md) topic. + +To configure them manually, refer to the procedure described below. + +You can perform this procedure on any of the Exchange servers, and these settings will then be +replicated to all Exchange servers in the domain. + +**To configure Exchange Administrator Audit Logging settings** + +**Step 1 –** On the computer where the monitored Exchange server is installed, navigate to **Start → +Programs → Exchange Management Shell**. + +**Step 2 –** Execute the following command depending on your Exchange version: + +- Exchange 2019, 2016 and 2013 + + `Set-AdminAuditLogConfig -AdminAuditLogEnabled $true -AdminAuditLogAgeLimit 30 -AdminAuditLogCmdlets * -LogLevel Verbose` + +- Exchange 2010 + +`Set-AdminAuditLogConfig -AdminAuditLogEnabled $true -AdminAuditLogAgeLimit 30 -AdminAuditLogCmdlets *` + +**Step 3 –** To reduce server load, you can exclude the cmdlets listed in the table above from +Exchange logging. For that: + +- On the computer where Netwrix Auditor is installed, browse to the _%Netwrix Auditor Server + installation folder%/Active Directory Auditing_ folder, locate the **SetAALExcludedCmdlets.ps1** + PowerShell script file and copy it to Exchange server. + +- In **Exchange Management Shell**, run this script using the command line: + + `.\SetAALExcludedCmdlets.ps1` + +Make sure your policies allow script execution. diff --git a/docs/auditor/10.8/configuration/exchange/mailboxacccess.md b/docs/auditor/10.8/configuration/exchange/mailboxacccess.md new file mode 100644 index 0000000000..c22171d2a6 --- /dev/null +++ b/docs/auditor/10.8/configuration/exchange/mailboxacccess.md @@ -0,0 +1,50 @@ +--- +title: "Configure Exchange for Monitoring Mailbox Access" +description: "Configure Exchange for Monitoring Mailbox Access" +sidebar_position: 30 +--- + +# Configure Exchange for Monitoring Mailbox Access + +Netwrix Auditor allows tracking non-owner mailbox access in your Exchange organization. + +It is recommended to select **Adjust audit settings automatically** option when setting up Exchange +monitoring in Netwrix Auditor. See the +[Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional +information. + +However, in some scenarios users may need to apply required audit settings manually. For that, +review the following procedures: + +- Configuring mailbox access tracking for Exchange 2019, 2016 and 2013 manually +- Configuring mailbox access tracking for Exchange 2010 manually + +## Configuring mailbox access tracking for Exchange 2019, 2016 and 2013 manually + +Perform the procedures below only if you do not want to enable the automatic audit configuration +option when setting up monitoring in Netwrix Auditor. + +You can configure auditing for: + +- All mailboxes (User, Linked, Equipment, and Room mailbox) +- Selected mailboxes + +| Track... | Steps... | +| ---------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| All mailboxes | 1. On the computer where the monitored Exchange server is installed, navigate to **Start → Programs → Exchange Management Shell**. 2. Execute the following command: Get-MailboxDatabase -Server `{0}` \| foreach \{ Get-Mailbox -RecipientTypeDetails UserMailbox,SharedMailbox,EquipmentMailbox,LinkedMailbox,RoomMailbox \| Set-Mailbox -AuditEnabled $true -AuditAdmin Update,Copy,Move,MoveToDeletedItems,SoftDelete,HardDelete,FolderBind,SendAs, SendOnBehalf,MessageBind,Create -AuditDelegate Update,Move,MoveToDeletedItems,SoftDelete,HardDelete,FolderBind,SendAs,SendOnBehalf,Create \} Where the _`{0}`_ character must be replaced with your audited server FQDN name (e.g., _stationexchange.enterprise.local_). If you are going to audit multiple Exchange servers, repeat these steps for each audited Exchange server. | +| Selected mailbox | 1. On the computer where the monitored Exchange server is installed, navigate to **Start → Programs → Exchange Management Shell**. 2. Execute the following command: Set-Mailbox -Identity `{0}` -AuditEnabled $true -AuditAdmin Update,Copy,Move,MoveToDeletedItems,SoftDelete,HardDelete,FolderBind,SendAs,SendOnBehalf,MessageBind,Create -AuditDelegate Update,Move,MoveToDeletedItems,SoftDelete,HardDelete,FolderBind,SendAs,SendOnBehalf,Create Where the _`{0}`_ character must be replaced with one of the following: - Display Name. Example: "Michael Jones" - Domain\User. Example: enterprise.local\MJones - GUID. Example: `{c43a7694-ba06-46d2-ac9b-205f25dfb32d}` - (DN) Distinguished name. Example: CN=MJones,CN=Users,DC=enterprisedc1,DC=enterprise,DC=local - User Principal Name. Example: MJones@enterprise.local If you are going to audit multiple individual mailboxes, repeat these steps for each mailbox on each Exchange server. | + +## Configuring mailbox access tracking for Exchange 2010 manually + +Perform the procedure below only if you do not want to enable network traffic compression option +when setting up Exchange monitoring in Netwrix Auditor. + +**Step 1 –** On the computer where the monitored Exchange server is installed, navigate to **Start → +Programs → Exchange Management Shell**. + +**Step 2 –** Execute the following command: + +`Set-EventLogLevel "MSExchangeIS\9000 Private\Logons" –Level Low` + +**Step 3 –** Navigate to **Start → Run** and type _"services.msc"_. In the Services snap-in, locate +the Microsoft Exchange Information Store service and restart it. diff --git a/docs/auditor/10.8/configuration/exchange/overview.md b/docs/auditor/10.8/configuration/exchange/overview.md new file mode 100644 index 0000000000..5954a3cf96 --- /dev/null +++ b/docs/auditor/10.8/configuration/exchange/overview.md @@ -0,0 +1,138 @@ +--- +title: "Exchange" +description: "Exchange" +sidebar_position: 30 +--- + +# Exchange + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - In the Exchange environment: + + - Install the ADSI Edit utility to the server from which configuration is performed if it is + not a domain controller + - The following policies must be set to _"Success"_ for the effective domain controllers + policy: + + - Audit account management + - Audit directory service access + + - The Audit logon events policy must be set to _"Success"_ (or _"Success"_ and "_Failure"_) + for the effective domain controllers policy. + - The Advanced audit policy settings can be configured instead of basic. + - The Maximum Security event log size must be set to 4GB. The retention method of the + Security event log must be set to _“Overwrite events as needed.”_ + - Auto archiving must be enabled to prevent audit data loss if log overwrites occur. + - The Object-level audit settings must be configured for the Domain, Configuration and + Schema partitions. + - The AD tombstoneLifetime attribute must be set to _"730"_. + - If you have an on-premises Exchange server 2019, 2016, 2013 or 2010 in your Active + Directory domain, consider that some changes can be made via that Exchange server. To be + able to audit and report who made those changes, you should configure the Exchange + Administrator Audit Logging (AAL) settings, as described in the + [Exchange Administrator Audit Logging Settings](/docs/auditor/10.7/configuration/exchange/auditlog.md) topic. + - The Administrator Audit Logging settings must be configured (only required for Exchange + 2019, 2016, 2013 or 2010). See the + [Exchange Administrator Audit Logging Settings](/docs/auditor/10.7/configuration/exchange/auditlog.md) topic for additional + information. + - In order to audit mailbox access, native audit logging must be enabled for user, shared, + equipment, linked, and room mailboxes: + + - Access types: administrator , delegate user + - Actions: Update, Move, MoveToDeletedItems, SoftDelete, HardDelete, FolderBind, SendAs, + SendOnBehalf, Create + + - If you want to track non-owner access, configure mailbox monitoring. See the + [Configure Exchange for Monitoring Mailbox Access](/docs/auditor/10.7/configuration/exchange/mailboxacccess.md) topic for additional + information. + + - On the Auditor console computer: + + - If you have enabled automatic log backup for the Security log of your domain controller, + you can instruct Auditor to clear the old backups automatically. For that, use the + **CleanAutoBackupLogs** registry key, as described in the + [Active Directory Registry Key Configuration](/docs/auditor/10.7/configuration/activedirectory/registrykey.md) topic. + + **_RECOMMENDED:_** Adjust retention period for the backup files accordingly (default is + **50** hours). See the + [Adjust Security Event Log Size and Retention](/docs/auditor/10.7/configuration/activedirectory/securitylog.md) topic. + + - To provide for event data collection, the Secondary Logon service must be up and running . + Open **Administrative Tools** > **Services**, right-click the **Secondary Logon** service + and on the **General** tab make sure that Startup type for this service is other than + _Disabled_. + +_Remember,_ for Exchange auditing, do the following: + +1. Configure Data Collecting Account, as described in the + [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic. +2. Configure required protocols and ports, as described in the [Exchange Ports](/docs/auditor/10.7/configuration/exchange/ports.md) topic. + +## Monitored Object Types, Actions, and Attributes + +Netwrix Auditor tracks changes that have been made to all Exchange server object classes and +attributes. The list of Exchange object classes is version-dependent. + +- The list of schema changes for Exchange 2013 can be found in the following Microsoft article: + [https://learn.microsoft.com/en-us/exchange/exchange-2013-active-directory-schema-changes-exchange-2013-help](https://learn.microsoft.com/en-us/exchange/exchange-2013-active-directory-schema-changes-exchange-2013-help) +- The list of schema changes for Exchange 2016 can be found in the following Microsoft article: + [https://learn.microsoft.com/en-us/exchange/plan-and-deploy/active-directory/ad-schema-changes?view=exchserver-2016](https://learn.microsoft.com/en-us/exchange/plan-and-deploy/active-directory/ad-schema-changes?view=exchserver-2016) +- The list of schema changes for Exchange 2019 can be found in the following Microsoft article: + [https://learn.microsoft.com/en-us/exchange/plan-and-deploy/active-directory/ad-schema-changes?view=exchserver-2019](https://learn.microsoft.com/en-us/exchange/plan-and-deploy/active-directory/ad-schema-changes?view=exchserver-2019) + +## Non-Owner Mailbox Access + +Netwrix Auditor can monitor non-owner access to mailboxes in on-premises Exchange organization. The +following mailbox types will be monitored by default: + +- UserMailbox +- EquipmentMailbox +- LinkedMailbox +- RoomMailbox + +Here is the list of actions captured: + +| Item | Action | Audited | How this change is reported by the product | +| ------------------------------------------------------------------------ | ----------- | -------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------- | +| Emails and Folders | New email | Yes | The message was created in \Drafts folder with subject `<...>` | +| A user with Send as or Send on behalf permissions tried to send an email | Yes | Message located in Root with subject `<...>` was queued for delivery to IPM.Message. | +| Delete email | Yes | Message with subject `<...>` was moved from folder \Drafts to folder \Deleted Items. | +| Move email to another folder | Yes | Message with subject `<...>` was moved from folder `<...>` to folder `<...>`. | +| Create rules for emails | No | — | +| Email read attempt | No | — | +| New folder | No | — | +| Open folder | Yes | The folder `<...>` was opened. | +| Delete folder | Yes | Folder `<...>` was moved from folder `<...>` to folder \Deleted Items. | +| Empty folder | Yes | The folder `<...>` was opened. | +| Edit folder permissions | No | — | +| Calendar | New event | Yes | Message was created in \Calendar with subject `<...>`. | +| Event read attempt | No | — | +| Edit event | Yes | Message located in \Calendar with subject `<...>` was modified. | +| Delete event | Yes | Message with subject `<...>` was moved from folder \Calendar to folder \Deleted Items. | +| People | New contact | Yes | Message was created in \Contacts\Recipient Cache with subject ``. | +| Contact read attempt | Yes | Folder \Contacts\Recipient Cache was opened. | +| Edit contact | No | — | +| Delete contact | Yes | Message with subject `<...>` was moved from folder \Contacts to folder \Deleted Items. | +| Tasks | New task | Yes | Message was created in \Tasks with subject `<...>`. | +| Task read attempt | No | — | +| Edit task | Yes | Message located in \Tasks with subject `<...>` was modified. | +| Delete task | Yes | Message with subject `<...>` was moved from folder \Tasks to folder \Deleted Items. | diff --git a/docs/auditor/10.8/configuration/exchange/permissions.md b/docs/auditor/10.8/configuration/exchange/permissions.md new file mode 100644 index 0000000000..98b707b464 --- /dev/null +++ b/docs/auditor/10.8/configuration/exchange/permissions.md @@ -0,0 +1,166 @@ +--- +title: "Permissions for Exchange Auditing" +description: "Permissions for Exchange Auditing" +sidebar_position: 60 +--- + +# Permissions for Exchange Auditing + +Before creating a monitoring plan to audit your Exchange server, you need to plan for the account +that will be used for data collection. This account should meet the requirements listed below. You +will specify this account in the monitoring plan wizard (or in the monitored item settings). + +## Account Requirements + +The account used for data collection must meet the following requirements: + +- Member of the Domain Admins group on the target server. + + **NOTE:** This covers all the required permissions below and is a mandatory setting if you want + to use network traffic compression for data collection. + + OR + +- The combination of the following rights and permissions if you plan to disable network traffic + compression for your monitoring plan or, for some reasons, do not want to add this account to the + Domain Admins group: + + - The Manage auditing and security log policy must be defined for this account. See the + [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) topic for + additional information. + - If you plan to process the Active Directory Deleted Objects container, Read permission on this + container is required. See the + [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) topic for + additional information. + - The account must belong to the Organization Management or Records Management group. See the + Add Account to the Organization Management Group topic for additional information. + - Several management roles assigned: Audit Logs role, View-only Configuration role, Mail + Recipients role, and Monitoring role. See the Add Account to the Organization Management Group + topic for additional information on how to perform role assignment. + - Additional configuration if auto-backup is _enabled_ for the domain controller event logs (see + below). + +## Additional Configuration for Domain Controller's Event Logs Auto-backup + +The following is required if auto-backup is _enabled_ for the domain controller event logs: + +- Permissions to access the _HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Security_ + registry key on the domain controllers in the target domain. See the Assign Permission to Read the + Registry Key topic for additional information. +- Membership in one of the following groups: Administrators, Print Operators, Server Operators +- Read/Write share permission and Full control security permission on the logs backup folder + +## Add Account to the Organization Management Group + +Follow the steps to add account to the Organization Management group. + +**Step 1 –** Navigate to **Start > Active Directory Users and Computers** on any domain controller +in the root domain of the forest where Microsoft Exchange 2019, 2016, or 2013 is installed. + +**Step 2 –** In the left pane, navigate to **`` > Microsoft Exchange Security Groups**. + +**Step 3 –** On the right, locate the **Organization Management** group and double-click it. + +**Step 4 –** In the **Organization Management Properties** dialog that opens, select the **Members** +tab and click **Add**. + +![manualconfig_orgmanagement2016](/images/auditor/10.7/configuration/exchange/manualconfig_orgmanagement2016.webp) + +If for some reason you do not want this account to belong to the Organization Management group, you +can add it to the Records Management group in the same way. The Records Management group is less +powerful, and accounts belonging to it have fewer rights and permissions. + +## Assign Management Roles + +Perform this procedure only if the account selected for data collection is not a member of the +**Organization Management** or the **Records Management** group. + +Follow the steps to assign management roles. + +**Step 1 –** On the computer where Microsoft Exchange 2019, 2016, 2013 or is installed, open the +**Exchange Management Shell** under an account that belongs to the **Organization Management** +group. + +**Step 2 –** Use the following syntax to assign the required management role to a user: + +New-ManagementRoleAssignment -Name `` -User `` -Role `` + +For example: + +New-ManagementRoleAssignment -Name "AuditLogsNetwrixRole" -User Corp\\jsmith -Role "Audit Logs" + +In this example, the user _CORP\jsmith_ has been assigned the **Audit Logs** role. + +## Assign Permission to Read the Registry Key + +This permission is required only if the account selected for data collection is not a member of the +Domain Admins group. + +This permission should be assigned on each domain controller in the audited domain, so if your +domain contains multiple domain controllers, it is recommended to assign permissions through Group +Policy, or automatically using +[Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md). + +To assign permissions manually, use the Registry Editor snap-in or the Group Policy Management +console. + +### Assign Permission Via the Registry Editor Snap-in + +Follow the steps to assign permission via the Registry Editor snap-in. + +**Step 1 –** On your target server, open Registry Editor: navigate to **Start > Run** and type +_"regedit"_. + +**Step 2 –** In the left pane, navigate to _HKEY_LOCAL_MACHINE\SYSTEM\CurrentControl +Set\Services\EventLog\Security_. + +**Step 3 –** Right-click the **Security** node and select **Permissions** from the pop-up menu. + +**Step 4 –** Click **Add** and enter the name of the user that you want to grant permissions to. + +**Step 5 –** Check **Allow** next to the **Read** permission. + +**Step 6 –** For auditing Logon Activity, you also need to assign the Read permission to the +_HKEY_LOCAL_MACHINE\SECURITY\Policy\PolAdtEv_ registry key. + +### Assign Permission Using the Group Policy Management Console + +Follow the steps to assign permission using the Group Policy Management console. + +**Step 1 –** Open the Group Policy Management console on any domain controller in the target domain: +navigate to Start > Windows Administrative Tools (Windows Server 2016/2019) or Administrative Tools +(Windows 2012 R2 and below) > Group Policy Management. + +**Step 2 –** In the left pane, navigate to Forest: `` > Domains > `` > +Domain Controllers. Right-click the effective domain controllers policy (by default, it is the +_Default Domain Controllers Policy_), and select Edit . + +**Step 3 –** In the Group Policy Management Editor dialog, expand the Computer Configuration node on +the left and navigate to Policies > Windows Settings > Security Settings > Registry. + +**Step 4 –** Right-click in the pane and select Add Key. + +**Step 5 –** Navigate to `HKEY_LOCAL_MACHINE\SECURITY\Policy\PolAdtEv` and click OK. + +**Step 6 –** Click Add and enter the name of the user that you want to grant permissions to and +press Enter. + +**Step 7 –** Check Allow next to the _"Read"_ permission and click OK + +**Step 8 –** In the pop-up window, select Propagate inheritable permissions to all subkeys and click +OK. + +**Step 9 –** Repeat the steps 4-8 for keys below: + +- `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg`; +- `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security`. + +**Step 10 –** Close Group Policy Management console. + +**Step 11 –** Navigate to Start > Run and type "_cmd_". Input the `gpupdate /force` command and +press Enter. The group policy will be updated. + +**Step 12 –** Type `repadmin /syncall` command and press Enter for replicate GPO changes to other +domain controllers. + +**Step 13 –** Ensure that new GPO settings were applied to the domain controllers. diff --git a/docs/auditor/10.8/configuration/exchange/permissionsregistrykeys.md b/docs/auditor/10.8/configuration/exchange/permissionsregistrykeys.md new file mode 100644 index 0000000000..7dd3c023b4 --- /dev/null +++ b/docs/auditor/10.8/configuration/exchange/permissionsregistrykeys.md @@ -0,0 +1,77 @@ +--- +title: "Assign Permission To Read the Registry Key" +description: "Assign Permission To Read the Registry Key" +sidebar_position: 50 +--- + +# Assign Permission To Read the Registry Key + +This permission is required only if the account selected for data collection is not a member of the +Domain Admins group. This permission should be assigned on each domain controller in the audited +domain, so if your domain contains multiple domain controllers, it is recommended to assign +permissions through Group Policy, or automatically using +[Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md). To assign permissions +manually, use the Registry Editor snap-in or the Group Policy Management console. See the +[Permissions for Group Policy Auditing ](/docs/auditor/10.7/configuration/grouppolicy/permissions.md)topic for additional +information. + +## Assign Permission Via the Registry Editor Snap-in + +Follow the steps to assign permission via the Registry Editor snap-in. + +**Step 1 –** On your target server, open Registry Editor: navigate to **Start > Run** and type +_"regedit"_. + +**Step 2 –** In the left pane, navigate to _HKEY_LOCAL_MACHINE\SYSTEM\CurrentControl +Set\Services\EventLog\Security_. + +**Step 3 –** Right-click the **Security** node and select **Permissions** from the pop-up menu. + +**Step 4 –** Click **Add** and enter the name of the user that you want to grant permissions to. + +**Step 5 –** Check **Allow** next to the **Read** permission. + +**Step 6 –** For auditing Logon Activity, you also need to assign the Read permission to the +_HKEY_LOCAL_MACHINE\SECURITY\Policy\PolAdtEv_ registry key. + +## Assign Permission Using the Group Policy Management Console + +Follow the steps to assign permission using the Group Policy Management console. + +**Step 1 –** Open the Group Policy Management console on any domain controller in the target domain: +navigate to Start > Windows Administrative Tools (Windows Server 2016/2019) or Administrative Tools +(Windows 2012 R2 and below) > Group Policy Management. + +**Step 2 –** In the left pane, navigate to Forest: `` > Domains > `` > +Domain Controllers. Right-click the effective domain controllers policy (by default, it is the +_Default Domain Controllers Policy_), and select Edit . + +**Step 3 –** In the Group Policy Management Editor dialog, expand the Computer Configuration node on +the left and navigate to Policies > Windows Settings > Security Settings > Registry. + +**Step 4 –** Right-click in the pane and select Add Key. + +**Step 5 –** Navigate to `HKEY_LOCAL_MACHINE\SECURITY\Policy\PolAdtEv` and click OK. + +**Step 6 –** Click Add and enter the name of the user that you want to grant permissions to and +press Enter. + +**Step 7 –** Check Allow next to the _Read_ permission and click OK + +**Step 8 –** In the pop-up window, select Propagate inheritable permissions to all subkeys and click +OK. + +**Step 9 –** Repeat the steps 4-8 for keys below: + +- `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg`; +- `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security`. + +**Step 10 –** Close Group Policy Management console. + +**Step 11 –** Navigate to Start > Run and type `cmd`. Input the `gpupdate /force` command and press +Enter. The group policy will be updated. + +**Step 12 –** Type `repadmin/syncall` command and press Enter for replicate GPO changes to other +domain controllers. + +**Step 13 –** Ensure that new GPO settings were applied to the domain controllers. diff --git a/docs/auditor/10.8/configuration/exchange/ports.md b/docs/auditor/10.8/configuration/exchange/ports.md new file mode 100644 index 0000000000..01931b12de --- /dev/null +++ b/docs/auditor/10.8/configuration/exchange/ports.md @@ -0,0 +1,26 @@ +--- +title: "Exchange Ports" +description: "Exchange Ports" +sidebar_position: 10 +--- + +# Exchange Ports + +Review a full list of protocols and ports required for monitoring Exchange. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to remote ports on the source and inbound connections to local ports on + the target. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 389 TCP port. On domain controllers in your domain +(target), allow inbound connections to the local 389 TCP port. + +| Port | Protocol | Source | Target | Purpose | +| ---------------------------------- | -------- | ---------------------- | --------------- | ---------------------------------------------------------------------------------------------------------------------- | +| 135 and dynamic range: 1024 -65535 | TCP | Netwrix Auditor Server | Exchange Server | - Windows Management Instrumentation. - Retrieve Exchange Server configuration settings\* - Run `gpupdate /force `\* | +| 5985 5986 | TCP | Netwrix Auditor Server | Exchange server | - Windows Remote Management. - PowerShell connections: - 5985 - for HTTP - 5986 - for HTTPS | +| 80 443 | TCP | Netwrix Auditor Server | Exchange server | PowerShell connections | + +\* - for Exchange 2010 only diff --git a/docs/auditor/10.8/configuration/exchange/registrykey.md b/docs/auditor/10.8/configuration/exchange/registrykey.md new file mode 100644 index 0000000000..76937a0941 --- /dev/null +++ b/docs/auditor/10.8/configuration/exchange/registrykey.md @@ -0,0 +1,25 @@ +--- +title: "Exchange Registry Keys" +description: "Exchange Registry Keys" +sidebar_position: 40 +--- + +# Exchange Registry Keys + +Review the basic registry keys that you may need to configure for monitoring Exchange with Netwrix +Auditor. Navigate to Start → Run and type _"regedit"_. + +| Registry key (REG_DWORD type) | Description / Value | +| ------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Netwrix Auditor\AD Change Reporter | | +| CleanAutoBackupLogs | Defines the retention period for the security log backups: - 0—Backups are never deleted from Domain controllers - [X]— Backups are deleted after [X] hours | +| IgnoreAuditCheckResultError | Defines whether audit check errors should be displayed in the Activity Summary footer: - 0—Display errors - 1—Do not display errors | +| IgnoreRootDCErrors | Defines whether to display audit check errors for the root domain (when data is collected from a child domain) in the Activity Summary footer: - 0—Display errors - 1—Do not display errors | +| MonitorModifiedAndRevertedBack | Defines whether the Activity Summary must display the attributes whose values were modified and then restored between data collections: - 0—These attributes are not displayed - 1—These attributes are displayed as "modified and reverted back" | +| ProcessBackupLogs | Defines whether to process security log backups: - 0—No - 1—Yes Even if this key is set to _"0"_, the security log backups will not be deleted regardless of the value of the CleanAutoBackupLogs key. | +| HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Netwrix Auditor\AD Change Reporter\ | | +| CollectLogsMaxThreads | Defines the number of Domain Controllers to simultaneously start log collection on. | +| HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Netwrix Auditor\Management Console\Database settings | | +| overwrite_datasource | Defines whether to overwrite the database connection settings (stored in the reports data source) if they differ from the SQL server settings specified when configuring the monitoring plan: - 0—No - 1—Yes | +| SqlOperationTimeout | Defines the timeout for executing SQL queries such as data selection, insertion or deletion (in seconds). | +| timeout | Defines the Audit Database connection timeout (in seconds). | diff --git a/docs/auditor/10.8/configuration/fileservers/_category_.json b/docs/auditor/10.8/configuration/fileservers/_category_.json new file mode 100644 index 0000000000..00230f25ea --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "File Servers", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/fileservers/delldatastorage/_category_.json b/docs/auditor/10.8/configuration/fileservers/delldatastorage/_category_.json new file mode 100644 index 0000000000..f4839332fd --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/delldatastorage/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Dell Data Storage", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/fileservers/delldatastorage/cifss.md b/docs/auditor/10.8/configuration/fileservers/delldatastorage/cifss.md new file mode 100644 index 0000000000..1bbaeea2f7 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/delldatastorage/cifss.md @@ -0,0 +1,109 @@ +--- +title: "Configure Audit Settings for CIFS File Shares on Dell Data Storage" +description: "Configure Audit Settings for CIFS File Shares on Dell Data Storage" +sidebar_position: 40 +--- + +# Configure Audit Settings for CIFS File Shares on Dell Data Storage + +Dell VNX, VNXe, Celerra, and Unity NAS devices are collectively referred to as Dell Data Storage. + +Auditor  can be configured to audit all access types, review the table below and select options that +you want to track: + +| Option | | Description | +| ----------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Changes | Successful | Use this option to track changes to your data. Helps find out who made changes to your files, including their creation and deletion. | +| Failed | Use this option to detect suspicious activity on your file server. Helps identify potential intruders who tried to modify or delete files, etc., but failed to do it. | | +| Read access | Successful | Use this option to supervise access to files containing confidential data intended for privileged users. Helps identify who accessed important files besides your trusted users. Enabling this option on public shares will result in high number of events generated on your file server and the amount of data written to the Audit Archive. | +| Failed | Use this option to track suspicious activity. Helps find out who was trying to access your private data without proper justification. Enabling this option on public shares will result in high number of events generated on your file server and the amount of data written to the Audit Archive. | | + +Actions reported by Auditor vary depending on the file server type and the audited object (file, +folder, or share). The changes include creation, modification, deletion, moving, renaming, and +copying. See the [Dell Data Storage](/docs/auditor/10.7/configuration/fileservers/delldatastorage/overview.md) topic for additional information. + +## Configure Audit Settings for the CIFS File Shares Pre-Windows Server 2012 + +Perform the following steps: + +**Step 1 –** Navigate to the target file share, right-click it and select **Properties**. + +**Step 2 –** In the **`` Properties** dialog, select the **Security** tab and click +**Advanced**. + +**Step 3 –** In the **Advanced Security Settings for ``** dialog, navigate to the +**Auditing** tab, click Edit. + +**Step 4 –** In a separate **Advanced Security Settings for ``** dialog, click Add to +add a principal. You can select **Everyone** (or another user-defined group containing users that +are granted special permissions) and click **Edit**. + +**Step 5 –** You can specify any other user group, but in this case Netwrix Auditor will send emails +with errors on incorrect audit configuration. This will not affect the reports or data searches +performed in the Auditor client and the product will only audit user accounts that belong to the +selected group. + +**Step 6 –** Apply settings to your Auditing Entries depending on the access types that you want to +audit. If you want to audit all access types (successful reads and changes as well as failed read +and change attempts), you need to add separate Auditing Entries for each file share. Otherwise, +reports will contain limited data and warning messages. Review the following for additional +information: + +- Successful reads +- Successful changes +- Failed read attempts +- Failed change attempts + +| Auditing Entry | +| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **Successful reads** | +| The Auditing Entry below shows Advanced Permissions for auditing successful reads only:
  • Apply onto—Select _"Files only"_.
  • Check _"Successful"_ and _"Failed"_ next to List folder / read data.
  • Make sure that the **Apply these auditing entries to objects and/or containers within this container only** checkbox is cleared.
| +| **Successful changes** | +| The Auditing Entry below shows Advanced Permissions for auditing successful changes only:
  • Apply onto—Select _"This folder, subfolders and files"_.
  • Check _"Successful"_ next to the following permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the **Apply these auditing entries to objects and/or containers within this container only** checkbox is cleared.
| +| **Failed read attempts** | +| The Auditing Entry below shows Advanced Permissions for auditing failed read attempts only:
  • Apply onto—Select _"This folder, subfolders and files"_.
  • Check _"Failed"_ next to List folder / read data.
  • Make sure that the **Apply these auditing entries to objects and/or containers within this container only** checkbox is cleared.
| +| **Failed change attempts** | +| The Auditing Entry below shows Advanced Permissions for auditing failed change attempts only:
  • Apply onto—Select _"This folder, subfolders and files"_.
  • Check _"Failed"_ next to the following permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the **Apply these auditing entries to objects and/or containers within this container only** checkbox is cleared.
| + + +## Configure Object-level Access Auditing on Windows Server 2012 and Above + +Follow the steps to configure Object-level access auditing on Windows Server 2012 and above. + +**Step 1 –** Navigate to the target file share, right-click it and select **Properties**. + +**Step 2 –** In the `` Properties dialog box, select the Security tab and click +**Advanced**. + +**Step 3 –** In the Advanced Security Settings for `` dialog box, navigate to the +Auditing tab. + +![Advanced Security Settings for Share_Name dialog box](/images/1secure/configuration/computer/auditing_entries_netapp_2016.webp) + +**Step 4 –** Click **Add** to add a new principal. You can select **Everyone** (or another +user-defined group containing users that are granted special permissions) and click **Edit**. + +**Step 5 –** In the Auditing Entry for `` dialog box, click the **Select a principal** +link and specify **Everyone**. + +**NOTE:** You can specify any other user group, but in this case the emails will be sent with +warnings on incorrect audit configuration. The product will audit only user accounts that belong to +the selected group. + +**Step 6 –** Apply settings to your Auditing Entries depending on the access types that you want to +audit. If you want to audit all access types (successful reads, modification as well as failed read +and modification attempts), you need to add separate Auditing Entries for each file share. +Otherwise, reports will contain limited data and warning messages. + +Review the following for additional information: + +| Auditing Entry | | +| --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --- | +| Successful reads | | +| The Auditing Entry below shows Advanced Permissions for auditing successful reads only: ![manualconfig_fileserver_auditingentry_1_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_1_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"Files only"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| Successful changes | | +| The Auditing Entry below shows Advanced Permissions for auditing successful changes only: ![manualconfig_fileserver_auditingentry_2_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_2_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| Failed read attempts | | +| The Auditing Entry below shows Advanced Permissions for auditing failed read attempts: ![manualconfig_fileserver_auditingentry_3_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_3_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| Failed change attempts | | +| The Auditing Entry below shows Advanced Permissions for auditing failed change attempts: ![manualconfig_fileserver_auditingentry_4_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_4_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | diff --git a/docs/auditor/10.8/configuration/fileservers/delldatastorage/objectaccess.md b/docs/auditor/10.8/configuration/fileservers/delldatastorage/objectaccess.md new file mode 100644 index 0000000000..9df7b2d40e --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/delldatastorage/objectaccess.md @@ -0,0 +1,56 @@ +--- +title: "Configure Audit Object Access Policy" +description: "Configure Audit Object Access Policy" +sidebar_position: 30 +--- + +# Configure Audit Object Access Policy + +Netwrixrecommends you to avoid linking a GPO to the top level of the domain due to the potential +impact. Instead, create a new organization unit for your file servers within your domain and assign +GPO there. For detailed instructions on how to create a new OU, refer to the following Microsoft +article: +[Create a New Organizational Unit](https://technet.microsoft.com/en-us/library/cc771564.aspx). + +Follow the steps to configure Audit Object Access Policy: + +**Step 1 –** Open the **Group Policy Management** console on any domain controller in the target +domain: navigate to Start > Windows Administrative Tools**→ Group Policy Management.** + +**Step 2 –** In the left pane, navigate to **Forest: `` → Domains** → +**``**, right-click `` and select **Create a GPO in this domain and Link it +here**. + +**Step 3 –** Enter the name for the new GPO. + +**Step 4 –** Right-click the newly created GPO and select **Edit**. + +**Step 5 –** In the **Group Policy Management Editor** dialog, expand the **Computer Configuration** +node on the left and navigate to **Policies → Windows Settings → Security Settings → Local Policies +→ Audit Policy.** + +| Policy Subnode | Policy Name | Audit Events | +| -------------- | ----------------------- | --------------------------- | +| Audit Policy | **Audit object access** | _"Success"_ and _"Failure"_ | + +![manualconfig_fileserver_auditpolicy2016](/images/auditor/10.7/configuration/fileservers/delldatastorage/manualconfig_fileserver_auditpolicy2016.webp) + +**Step 6 –** To update the group policies, execute the following command: + +- For Dell Unity: + + svc_cifssupport `` -gpo -update + + where `` is the name of the target Unity\VNX server. + +- For Dell VNX: + + server_security `` -update -policy gpo + + where `` is the name of the target Unity\VNX server. + + To update group policies for Dell VNX you must be logged in as the 'nasadmin' user. + +You can configure advanced audit policy to narrow the range of events tracked and recorded by the +product, thus preventing your AuditArchive and the Security event log from overfilling. See the +[Configure Security Event Log Maximum Size](/docs/auditor/10.7/configuration/fileservers/delldatastorage/securityeventlog.md) topic for additional information. diff --git a/docs/auditor/10.8/configuration/fileservers/delldatastorage/overview.md b/docs/auditor/10.8/configuration/fileservers/delldatastorage/overview.md new file mode 100644 index 0000000000..73daa0fc45 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/delldatastorage/overview.md @@ -0,0 +1,91 @@ +--- +title: "Dell Data Storage" +description: "Dell Data Storage" +sidebar_position: 10 +--- + +# Dell Data Storage + +**NOTE:** Dell VNX, VNXe, Celerra, and Unity NAS devices are collectively referred to as Dell Data +Storage. + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - On the Dell Data Storage device: + + - CIFS Network Protocol support is required + - Security Event Log Maximum Size must be set to 4GB. + - The Audit object access policy must be set to _"Success"_ and "Failure" in the Group + Policy of the OU where the audited Dell VNX/VNXe/Unity/Celerra appliance belongs to. + - Audit settings must be configured for CIFS File Shares. For a security principal (e.g., + Everyone), the following options must be set to "Success" and "Fail" in the **Advanced + Security** > **Auditing** settings for the audited shared folders: + + - List Folder / Read Data (Files only) + - Create Files / Write Data + - Create Folders / Append Data + - Write Attributes + - Write Extended Attributes + - Delete Subfolders and Files + - Delete + - Change Permissions + - Take Ownership + + - On the Auditor console computer: + + - If your file shares contain symbolic links and you want to collect state-in-time data for + these shares, the local-to-local, local-to-remote, remote-to-local, and remote-to-remote + symbolic link evaluations must be enabled on the computer that hosts Auditor Server. + +First, you should decide on the objects and actions you want to track. Consider the following: + +- Actions reported by Auditor vary depending on the file server type and the audited object (file, + folder, or share). +- Besides, monitoring and reporting of the Dell Data Storage systems may not provide the results you + expect — due to native Dell audit peculiarities. See the [File Servers](/docs/auditor/10.7/configuration/fileservers/overview.md) topic for + additional information. + +For example, the _change_ operation (in Auditor terminology) includes creation, modification, and +deletion. + +## Manual Configuration + +To collect comprehensive audit data, you must configure your file shares for monitoring. Consider +the following: + +**Step 1 –** [Configure Security Event Log Maximum Size](/docs/auditor/10.7/configuration/fileservers/delldatastorage/securityeventlog.md) to avoid overwriting +of the security logs; it is recommended to set security log size to a maximum (4GB). Auditor does +not clean Dell Unity logs automatically, the log will start overwriting when it goes beyond the +limit. See the +[Unity Family Security Configuration Guide](https://support.emc.com/docu69321_Unity-Family-Security-Configuration-Guide.pdf?language=en_US) for +additional information on how to set logs roll over manually. + +**Step 2 –** By default, the security log is set to overwrite events that are older than 10 days, +and its size is set to 512 KB. The default location for the security.evt log is **C:\security.evt**, +which corresponds to the root partition of the Data Mover. To be able to increase the security log +size, you must move it from the Data Mover root folder. + +**Step 3 –** [Configure Audit Object Access Policy](/docs/auditor/10.7/configuration/fileservers/delldatastorage/objectaccess.md). Set the Audit object access +policy to "Success" and "Failure" in the Group Policy of the OU where your Dell +VNX/VNXe/Unity/Celerra appliance belongs to. For more information on VNX/VNXe/Unity/Celerra GPO +support, refer to documentation provided by Dell. + +**Step 4 –** [Configure Audit Settings for CIFS File Shares on Dell Data Storage](/docs/auditor/10.7/configuration/fileservers/delldatastorage/cifss.md) diff --git a/docs/auditor/10.8/configuration/fileservers/delldatastorage/permissions.md b/docs/auditor/10.8/configuration/fileservers/delldatastorage/permissions.md new file mode 100644 index 0000000000..c60ad4b368 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/delldatastorage/permissions.md @@ -0,0 +1,18 @@ +--- +title: "Permissions for Dell Data Storage Auditing" +description: "Permissions for Dell Data Storage Auditing" +sidebar_position: 50 +--- + +# Permissions for Dell Data Storage Auditing + +Dell VNX, VNXe, Celerra, and Unity NAS devices are collectively referred to as Dell Data Storage. + +Before you start creating a monitoring plan to audit your Dell VNX/VNXe/Unity file storage system, +plan for the account that will be used for data collection – it should meet the requirements listed +below. Then you will provide this account in the monitoring plan wizard. + +**On the target server:** + +1. The account must be a member of the local Administrators group. +2. The account requires **Read** permissions on the audited shared folders. diff --git a/docs/auditor/10.8/configuration/fileservers/delldatastorage/ports.md b/docs/auditor/10.8/configuration/fileservers/delldatastorage/ports.md new file mode 100644 index 0000000000..d1457c2d46 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/delldatastorage/ports.md @@ -0,0 +1,24 @@ +--- +title: "Dell Data Storage Ports" +description: "Dell Data Storage Ports" +sidebar_position: 10 +--- + +# Dell Data Storage Ports + +Review a full list of Dell Data Storage protocols and ports required for Netwrix Auditor for File +Servers. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to remote ports on the source and inbound connections to local ports on + the target. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 389 TCP port. On domain controllers in your domain +(target), allow inbound connections to local 389 TCP port. + +| Port | Protocol | Source | Target | Purpose | +| ----------- | -------- | ---------------------- | -------------- | ----------------------------------------------------- | +| Dell Isilon | | | | | +| 8080 | TCP | Netwrix Auditor Server | Isilon cluster | HTTPS Used to connect to the Isilon Management Server | diff --git a/docs/auditor/10.8/configuration/fileservers/delldatastorage/securityeventlog.md b/docs/auditor/10.8/configuration/fileservers/delldatastorage/securityeventlog.md new file mode 100644 index 0000000000..ec3ee353a8 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/delldatastorage/securityeventlog.md @@ -0,0 +1,25 @@ +--- +title: "Configure Security Event Log Maximum Size" +description: "Configure Security Event Log Maximum Size" +sidebar_position: 20 +--- + +# Configure Security Event Log Maximum Size + +Follow the steps to configure Event Log maximum size: + +**Step 1 –** On your file server, create a new file system where the security log will be stored. + +**Step 2 –** Mount this file system on a mount point, e.g., **/events**. + +**Step 3 –** Make sure that it is accessible via the **\\``\C$\events** UNC path. + +**Step 4 –** On the computer where Auditor Server is installed, open **Registry Editor**: navigate +to **Start → Run** and type _"regedit"_. + +**Step 5 –** Navigate to **File → Connect Network Registry** and specify the file server name. + +**Step 6 –** Navigate to **HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security** +and set the **File** value to _"C:\events\security.evt"_. + +**Step 7 –** Set the **MaxSize** value to _"4 000 000 000 (decimal)"_. diff --git a/docs/auditor/10.8/configuration/fileservers/dellisilon/_category_.json b/docs/auditor/10.8/configuration/fileservers/dellisilon/_category_.json new file mode 100644 index 0000000000..dd12b02404 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/dellisilon/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Dell Isilon/PowerScale", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/fileservers/dellisilon/compliance.md b/docs/auditor/10.8/configuration/fileservers/dellisilon/compliance.md new file mode 100644 index 0000000000..fc744dc94e --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/dellisilon/compliance.md @@ -0,0 +1,122 @@ +--- +title: "Compliance Mode" +description: "Compliance Mode" +sidebar_position: 30 +--- + +# Compliance Mode + +You can configure your cluster for monitoring in one of the following ways: + +- Using the **configure_ifs.sh** shell script that comes with Netwrix Auditor. See the Configure + Dell Isilon/PowerScale Cluster in Compliance Mode Via Shell Script topic for additional + information. +- Manual configuration. See the Configure Dell Isilon/PowerScale Cluster in Compliance Mode Manually + topic for additional information. + +## Configure Dell Isilon/PowerScale Cluster in Compliance Mode Via Shell Script + +Follow the steps to configure Dell Isilon/PowerScale cluster in Compliance mode via the shell +script: + +**Step 1 –** On the computer where Auditor Server resides, navigate to _C:\Program Files +(x86)\Netwrix Auditor\File Server Auditing_ and copy the configure*ifs.sh shell script to +*/ifs/data\_ catalog on your cluster. + +**Step 2 –** Navigate to your cluster command prompt through the SSH connection. + +**Step 3 –** Log in to your cluster as a **compadmin** user. + +**Step 4 –** Run the shell script by executing the following command: + +`sh /ifs/data/configure_ifs.sh -z zone1 -a 1` + +where + +`zone1` is the name of the audited access zone on your file server. + +`1` is a combination of the bitwise flags. The table below shows the example combination of 4 flags: + +| | | +| ------------------------ | ---- | +| `Successful changes` | `1` | +| `Failed change attempts` | `2` | +| `Successful reads` | `4` | +| `Failed read attempts` | `8` | +| `Total:` | `15` | + +**Step 5 –** Create a shared folder named netwrix*audit$ on a system zone. This folder points to +*/ifs\_: + +`isi smb shares create --name=netwrix_audit$ --path=/ifs/ --zone=system --browsable=true` + +**Step 6 –** Add the BUILTIN\Administrators group in the share permissions for netwrix*audit$ folder +with *"full access"\_ rights: + +`isi smb shares permission create --share=netwrix_audit$ --group="BUILTIN\Administrators" --permission-type=allow --permission=full --zone=system` + +**Step 7 –** Grant your data collection account the _"read access"_ rights to the catalog +_/ifs/.ifsvar/audit_ : + +`isi zone modify system --add-user-mapping-rules="Enterprise\Administrator ++ compadmin [group]"` + +Where `Enterprise\Administrator` is your account name. + +## Configure Dell Isilon/PowerScale Cluster in Compliance Mode Manually + +Follow the steps to configure Dell Isilon/PowerScale cluster in Compliance mode manually: + +**Step 1 –** Navigate to your cluster command prompt through the SSH connection. + +**Step 2 –** Log in to your cluster as a **compadmin** user. + +**Step 3 –** Create a shared folder named netwrix*audit$ on a system zone. This folder points to +*/ifs\_: + +`isi smb shares create --name=netwrix_audit$ --path=/ifs/ --zone=system --browsable=true` + +**Step 4 –** Add the BUILTIN\Administrators group in the share permissions for netwrix*audit$ folder +with *"full access"\_ rights: + +`isi smb shares permission create --share=netwrix_audit$ --group="BUILTIN\Administrators" --permission-type=allow --permission=full --zone=system` + +**Step 5 –** Grant your data collecting account the _"read access"_ rights to the catalog +_/ifs/.ifsvar/audit_ : + +`isi zone modify system --add-user-mapping-rules="Enterprise\Administrator ++ compadmin [group]"` + +Where `Enterprise\Administrator` is your account name. + +**Step 6 –** Enable protocol auditing for a selected zone (for example, _"zone1"_). Do one of the +following, depending on your Dell Isilon/PowerScale version: + +| EMC Isilon/PowerScale 7.x | EMC Isilon/PowerScale 8.x | +| -------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------- | +| `isi audit settings modify ` `--add-audited-zones=zone1 --protocol` `-auditing-enabled=true` | `isi audit settings global modify ` `--add-audited-zones=zone1 --protocol` `-auditing-enabled=true` | + +Enable filters for auditing protocol operations that succeeded / failed for audited access zones on +your cluster. + +| EMC Isilon/PowerScale 7.x | EMC Isilon/PowerScale 8.2 and above | +| ------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------- | +| Successful changes | | +| `isi zone zones modify ` `zone1 --audit-success` `=write,delete,set_security,rename` | `isi audit settings modify ` `--zone=zone1 --audit-success` `=write,delete,set_security,rename, create` | +| Failed change attempts | | +| `isi zone zones modify ` `zone1 --audit-failure` `=create,write,delete,set_security,rename` | `isi audit settings modify ` `--zone=zone1 --audit-failure` `=create,write,delete,set_security,rename,open` | +| Successful reads | | +| `isi zone zones modify ` `zone1 --audit-success=read` | `isi audit settings modify --` `zone=zone1 --audit-success=read` | +| Failed read attempts | | +| `isi zone zones modify ` `zone1 ` `--audit-failure= create,read` | `isi audit settings ` `modify --zone=zone1 ` `--audit-failure=create,read, open` | + +**Step 7 –** Create the _"netwrix_audit"_ role and add the required privileges to this role. For +example: + +```isi auth roles create --name=netwrix_audit + +``` + +```isi auth roles modify netwrix_audit --add-priv-ro="ISI_PRIV_LOGIN_PAPI,ISI_PRIV_AUTH,ISI_PRIV_AUDIT,ISI_PRIV_IFS_BACKUP" + +``` + +`isi auth roles modify netwrix_audit --add-group="BUILTIN\Administrators"` diff --git a/docs/auditor/10.8/configuration/fileservers/dellisilon/normal.md b/docs/auditor/10.8/configuration/fileservers/dellisilon/normal.md new file mode 100644 index 0000000000..b958340c8b --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/dellisilon/normal.md @@ -0,0 +1,152 @@ +--- +title: "Normal and Enterprise Modes for Clusters" +description: "Normal and Enterprise Modes for Clusters" +sidebar_position: 20 +--- + +# Normal and Enterprise Modes for Clusters + +You can configure your cluster for monitoring in one of the following ways: + +- Using the configure_ifs.sh shell script that comes with Netwrix Auditor. See the Configure Dell + Isilon/PowerScale Cluster in Normal or Enterprise Mode via Shell Script topic for additional + information. +- Manual configuration. See the Configure Dell Isilon/PowerScale Cluster in Normal or Enterprise + Mode Manually topic for additional information. + +## Configure Dell Isilon/PowerScale Cluster in Normal or Enterprise Mode via Shell Script + +Follow the steps to configure Dell Isilon/PowerScale cluster in Normal or Enterprise mode using +shell script: + +**Step 1 –** On the computer where Auditor Server resides, navigate to _C:\Program Files +(x86)\Netwrix Auditor\File Server Auditing_ and copy the configure*ifs.sh shell script to +*/ifs/data\_ catalog on your cluster. + +**Step 2 –** Navigate to your cluster command prompt through the SSH connection. + +**Step 3 –** Log in to your cluster as a root user. + +**Step 4 –** Run the shell script by executing the following command: + +``` +sh /ifs/data/configure_ifs.sh -z zone1 -a 1 +``` + +where + +`zone1` is the name of the audited access zone on your file server. + +`1` is a combination of the bitwise flags. The table below shows the example combination of 4 flags: + +| | | +| ------------------------ | ---- | +| `Successful changes` | `1` | +| `Failed change attempts` | `2` | +| `Successful reads` | `4` | +| `Failed read attempts` | `8` | +| `Total:` | `15` | + +## Configure Dell Isilon/PowerScale Cluster in Normal or Enterprise Mode Manually + +Follow the steps to configure Dell Isilon/PowerScale cluster in Normal or Enterprise mode manually: + +**Step 1 –** Navigate to your cluster command prompt through the SSH connection. + +**Step 2 –** Log in to your cluster as a root user. + +**Step 3 –** Grant full access to the catalog _/ifs/.ifsvar/audit/_ for BUILTIN\Administrators: + +``` +chmod -R +a group "BUILTIN\Administrators" allow dir_gen_all,object_inherit,container_inherit, inherited /ifs/.ifsvar/audit/ +chmod -a group "BUILTIN\Administrators" allow dir_gen_all,object_inherit,container_inherit, inherited /ifs/.ifsvar/audit/ +chmod +a group "BUILTIN\Administrators" allow dir_gen_all,object_inherit,container_inherit /ifs/.ifsvar/audit/ +chmod +a user root allow dir_gen_read /ifs/.ifsvar/audit/ +``` + +**Step 4 –** Create a shared folder named netwrix*audit$ on a system zone. This folder points to +*/ifs/.ifsvar/audit/\_: + +``` +/usr/likewise/bin/lwnet share add "netwrix_audit$"="c:\\ifs\\.ifsvar\\audit\\" +isi smb shares modify netwrix_audit$ --new-zone=system +``` + +Starting from Dell Isilon/PowerScale 9.2.0 and above, the `lwnet` command is considered as +deprecated. When configuring audit manually, you see the following warning: + +WARNING: lwnet has been deprecated. + +Please use `isi smb ...` equivalents instead. + +See `isi smb --help` for more information. + +This command is required to create a shared folder pointed to _/ifs/.ifsvar/audit/_. Please ignore +the warning. + +**Step 5 –** Add the BUILTIN\Administrators group in the share permissions for the netwrix*audit$ +folder with *"full access"\_ rights: + +``` +isi smb shares permission create --share=netwrix_audit$ --group="BUILTIN\Administrators"  +--permission-type=allow --permission=full --zone=system +``` + +**NOTE:** Please verify the correctness of the path to the Isilon audit log files in +`_Monitoring Plans -> -> -> Edit item -> General -> File share UNC path to audit logs_` + +It must follow the format: + +``` +\\\netwrix_audit$\logs +``` + +**Step 6 –** Enable protocol auditing for a selected zone (for example, _"zone1"_). Do one of the +following, depending on your Dell Isilon/PowerScale storage version: + +| Dell Isilon/PowerScale 7.x | Dell Isilon/PowerScale 8.x | +| ------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------- | +| `isi audit settings modify --add-audited-zones=zone1  --protocol -auditing-enabled=true` | `isi audit settings global modify --add-audited-zones=zone1  --protocol -auditing-enabled=true` | + +Enable filters for auditing protocol operations that succeeded / failed for audited access zones on +your cluster. + +| Dell Isilon/PowerScale 7.x | Dell Isilon/PowerScale 8.2 and above | +| ---------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------- | +| Successful changes | | +| `isi zone zones modify zone1 --audit-success =write,delete,set_security,rename` | `isi audit settings modify --zone=zone1 --audit-success =write,delete,set_security,rename, create` | +| Failed change attempts | | +| `isi zone zones modify zone1 --audit-failure =create,write,delete,set_security,rename` | `isi audit settings modify --zone=zone1 --audit-failure =create,write,delete,set_security,rename,open` | +| Successful reads | | +| `isi zone zones modify zone1 --audit-success=read` | `isi audit settings modify --zone=zone1 --audit-success=read` | +| Failed read attempts | | +| `isi zone zones modify zone1  --audit-failure= create,read` | `isi audit settings modify --zone=zone1  --audit-failure=create,read, open` | + +**Step 7 –** Create the _"netwrix_audit"_ role in your access zone (for example, "zone1") and add +the required privileges to this role: + +``` +isi auth roles create --name=netwrix_audit --zone=zone1 +isi auth roles modify netwrix_audit --add-priv-ro="ISI_PRIV_LOGIN_PAPI,ISI_PRIV_AUTH,ISI_PRIV_AUDIT, ISI_PRIV_IFS_BACKUP" --zone=zone1 +isi auth roles modify netwrix_audit --add-group="BUILTIN\Administrators" --zone=zone1 +``` + +## Considerations and Recommendations + +When preparing to audit your Dell Isilon/PowerScale storage system, consider the following: + +- If you plan to configure audit settings for Dell Isilon/PowerScale storage below the version 8.2 + manually (without using the**configure_ifs.sh** script), make sure that auditing of the + `success create` events is **disabled**. + + For Dell Isilon/PowerScale storage below the version 8.2, the storage system logging will become + too verbose, which may lead to data collector overload with excessive events, decrease its + performance and result in data collection errors with the "_Timeout expired_" message issued. + + For Dell Isilon/PowerScale storage 8.2 and above, this option for manual audit configuration can + be safely enabled. + +- Auditing of the _System_ zone is not supported. As stated by Dell, this zone should be reserved + for configuration access only. Current data should be stored in other access zones. See the + [Isilon OneFS 8.2.1 CLI Administration Guide](https://www.dellemc.com/en-us/collaterals/unauth/technical-guides-support-information/2019/09/docu95372.pdf) + topic for additional information. diff --git a/docs/auditor/10.8/configuration/fileservers/dellisilon/overview.md b/docs/auditor/10.8/configuration/fileservers/dellisilon/overview.md new file mode 100644 index 0000000000..ed214a1d85 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/dellisilon/overview.md @@ -0,0 +1,82 @@ +--- +title: "Dell Isilon/PowerScale" +description: "Dell Isilon/PowerScale" +sidebar_position: 20 +--- + +# Dell Isilon/PowerScale + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - CIFS Network Protocol support is required. + - Create a shared directory _/ifs/.ifsvar/audit/_ on your cluster. + + Use SMB (CIFS) protocol for sharing. + + - The following filters for auditing protocol operations that succeeded/failed must be enabled + for audited access zones on your cluster: + + For EMC Isilon/PowerScale 7x: + + - Audit Success: read, write, delete, set_security, rename + - Audit Failure: read, create, write, delete, set_security, rename + + For EMC Isilon/PowerScale 8.2 and above: + + - Audit Success: read, create, write, delete, set_security, rename + - Audit Failure: read, create, write, open, delete, set_security, rename + +To configure your Dell Isilon/PowerScale appliance for monitoring perform the following procedures: + +- [Normal and Enterprise Modes for Clusters](/docs/auditor/10.7/configuration/fileservers/dellisilon/normal.md) +- [Compliance Mode](/docs/auditor/10.7/configuration/fileservers/dellisilon/compliance.md) + +If your file shares contain symbolic links and you want to collect state-in-time data for these +shares, the local-to-local, local-to-remote, remote-to-local, and remote-to-remote symbolic link +evaluations must be enabled on the computer that hosts AuditorServer. + +The following table lists actions that can be performed on Dell Isilon/PowerScale: + +| | File | Folder | Share | +| ------------------------ | ---- | ------ | ----- | +| Added | + | + | + | +| Add (failed attempt) | +\* | +\* | – | +| Modified | + | + | + | +| Modify (failed attempt) | + | + | – | +| Moved | +\* | +\* | – | +| Move (failed attempt) | +\* | +\* | – | +| Read | + | – | – | +| Read (failed attempt) | + | +\* | – | +| Renamed | +\* | +\* | – | +| Renamed (failed attempt) | +\* | +\* | – | +| Removed | + | + | + | +| Remove (failed attempt) | +\* | +\* | – | +| Copied | – | – | – | + +**NOTE:** For Dell Isilon/PowerScale storage, auditing of _System_ zone is not supported. As stated +by Dell, this zone should be reserved for configuration access only. Current data should be stored +in other access zones. See the +[Dell Upsilon CLI Administration Guide](https://www.dellemc.com/en-us/collaterals/unauth/technical-guides-support-information/2019/09/docu95372.pdf) +for additional information. + +Actions marked with an asterisk (\*) are reported for Dell Isilon/PowerScale only. Consider that +monitoring and reporting of other Dell Data Storage systems may not provide the results you expect +due to native Dell audit peculiarities. diff --git a/docs/auditor/10.8/configuration/fileservers/dellisilon/permissions.md b/docs/auditor/10.8/configuration/fileservers/dellisilon/permissions.md new file mode 100644 index 0000000000..23587a891b --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/dellisilon/permissions.md @@ -0,0 +1,64 @@ +--- +title: "Permissions for Dell Isilon/PowerScale Auditing" +description: "Permissions for Dell Isilon/PowerScale Auditing" +sidebar_position: 40 +--- + +# Permissions for Dell Isilon/PowerScale Auditing + +Before you start creating a monitoring plan to audit your Dell Isilon/PowerScale file storage +system, plan for the account that will be used for data collection. See the Configuring Your Dell +Isilon/PowerScale Cluster for Auditing section for additional information. The following scenarios +are possible: + +- Automatic configuration: you can use a special shell script for configuring an audited Dell + Isilon/PowerScale cluster and granting necessary privileges to the account used to collect audit + data. See the following topics for additional information: + - [Configure Dell Isilon/PowerScale Cluster in Normal or Enterprise Mode via Shell Script](normal.md#configure-dell-isilonpowerscale-cluster-in-normal-or-enterprise-mode-via-shell-script) + - [Configure Dell Isilon/PowerScale Cluster in Compliance Mode Via Shell Script](compliance.md#configure-dell-isilonpowerscale-cluster-in-compliance-mode-via-shell-script) +- Manual configuration: you can grant all the necessary permissions to data collecting account + manually. See the following topics for additional information: + - [Configure Dell Isilon/PowerScale Cluster in Normal or Enterprise Mode Manually](normal.md#configure-dell-isilonpowerscale-cluster-in-normal-or-enterprise-mode-manually) + - [Configure Dell Isilon/PowerScale Cluster in Compliance Mode Manually](compliance.md#configure-dell-isilonpowerscale-cluster-in-compliance-mode-manually) + +For manual configuration, ensure the account meets the requirements listed below. + +On the target server: + +**Step 1 –** The account must be a member of the local Administrators group. + +**Step 2 –** The account requires Read permissions on the audited shared folders. + +**Step 3 –** The account requires Read permissions on the folder where audit events are logged +(_/ifs/.ifsvar/audit/_) + +**Step 4 –** To connect to Dell Isilon/PowerScale storage cluster, an account must be assigned a +custom role (e.g., _netwrix_audit_) that has the following privileges: + +| | | +| ---------------------------------- | -------- | +| Platform API (ISI_PRIV_LOGIN_PAPI) | readonly | +| Auth (ISI_PRIV_AUTH) | readonly | +| Audit (ISI_PRIV_AUDIT) | readonly | +| Backup (ISI_PRIV_IFS_BACKUP) | readonly | + +**NOTE:** If you plan to connect to a cluster that works in the compliance mode, the account must +meet additional requirements. + +## Configuring Your Dell Isilon/PowerScale Cluster for Auditing + +A Dell Isilon/PowerScale cluster can operate in one of the following modes: + +- Standard or Normal mode +- Smartlock Enterprise mode +- Smartlock Compliance mode + +For your convenience, Netwrix provides a special shell script for configuring an audited Dell +Isilon/PowerScale cluster and granting necessary privileges to the account that is used to collect +audit data. + +To grant the necessary permissions to Isilon/PowerScale data collecting account manually, you need +to perform all steps for manual audit configuration, otherwise the product will not function +properly. + +See the [Normal and Enterprise Modes for Clusters](/docs/auditor/10.7/configuration/fileservers/dellisilon/normal.md) topic for additional information. diff --git a/docs/auditor/10.8/configuration/fileservers/dellisilon/ports.md b/docs/auditor/10.8/configuration/fileservers/dellisilon/ports.md new file mode 100644 index 0000000000..0130816deb --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/dellisilon/ports.md @@ -0,0 +1,18 @@ +--- +title: "Dell Isilon/PowerScale Ports" +description: "Dell Isilon/PowerScale Ports" +sidebar_position: 10 +--- + +# Dell Isilon/PowerScale Ports + +Review a full list of protocols and ports required for Netwrix Auditor for Dell Isilon/PowerScale: + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to remote ports on the source and inbound connections to local ports on + the target. + +| Port | Protocol | Source | Target | Purpose | +| ---- | -------- | ---------------------- | ------------------------- | ---------------------------------------------------------------- | +| 8080 | TCP | Netwrix Auditor Server | Isilon/PowerScale cluster | HTTPS Used to connect to the Isilon/PowerScale Management Server | diff --git a/docs/auditor/10.8/configuration/fileservers/netappcmode/_category_.json b/docs/auditor/10.8/configuration/fileservers/netappcmode/_category_.json new file mode 100644 index 0000000000..3d04745c8b --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/netappcmode/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "NetApp Data ONTAP", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/fileservers/netappcmode/cifs.md b/docs/auditor/10.8/configuration/fileservers/netappcmode/cifs.md new file mode 100644 index 0000000000..02a31f3969 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/netappcmode/cifs.md @@ -0,0 +1,108 @@ +--- +title: "Configure Audit Settings for CIFS File Shares" +description: "Configure Audit Settings for CIFS File Shares" +sidebar_position: 50 +--- + +# Configure Audit Settings for CIFS File Shares + +Netwrix Auditor can be configured to audit all access types, review the table below and select +options that you want to track: + +| Option | | Description | +| ----------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Changes | Successful | Use this option to track changes to your data. Helps find out who made changes to your files, including their creation and deletion. | +| Failed | Use this option to detect suspicious activity on your file server. Helps identify potential intruders who tried to modify or delete files, etc., but failed to do it. | | +| Read access | Successful | Use this option to supervise access to files containing confidential data intended for privileged users. Helps identify who accessed important files besides your trusted users. Enabling this option on public shares will result in high number of events generated on your file server and the amount of data written to the AuditArchive. | +| Failed | Use this option to track suspicious activity. Helps find out who was trying to access your private data without proper justification. Enabling this option on public shares will result in high number of events generated on your file server and the amount of data written to the AuditArchive. | | + +Actions reported by Netwrix Auditor vary depending on the file server type and the audited object +(file, folder, or share). The changes include creation, modification, deletion, moving, renaming, +and copying. To track the copy action, enable successful read access and change auditing. See the +[File Servers](/docs/auditor/10.7/configuration/fileservers/overview.md) topic for additional information. + +Do one of the following depending on the OS: + +- To configure audit settings for the CIFS file shares from computers running pre-Windows Server + 2012 versions +- To configure audit settings for the CIFS file shares from computers running Windows Server 2012 + and above + +## To configure audit settings for the CIFS file shares from computers running pre-Windows Server 2012 versions + +1. Navigate to the root share folder, right-click it and select **Properties**. +2. In the **`` Properties** dialog, select the **Security** tab and click **Advanced**. + + If there is no such tab, it means a wrong security style has been specified for the volume + holding this file share. + +3. In the **Advanced Security Settings for ``** dialog, navigate to the **Auditing** + tab, click Edit. + + ![auditing_entries_netapp](/images/auditor/10.7/configuration/fileservers/netappcmode/auditing_entries_netapp.webp) + +4. In a separate **Advanced Security Settings for ``** dialog, click Add to add a + principal. You can also select **Everyone** (or another user-defined group containing users that + are granted special permissions) and click **Edit**. + + You can specify any other user group, but in this case Netwrix Auditor will send emails with + warnings on incorrect audit configuration. This will not affect the Reports functionality and + the product will only audit user accounts that belong to the selected group. + +5. Apply settings to your Auditing Entries depending on actions that you want to audit. If you want + to audit all actions (successful reads and changes as well as failed read and change attempts), + you need to add three separate Auditing Entries for each file share. Otherwise, reports will + contain limited data and warning messages. + + | Auditing Entry | + | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | + | Successful reads | + | The Auditing Entry below shows Advanced Permissions for auditing successful reads only: - Apply onto—Select _"Files only"_. - Check _"Successful"_ and _"Failed"_ next to List folder / read data. - Make sure that the **Apply these auditing entries to objects and/or containers within this container only** checkbox is cleared. | + | Successful changes | + | The Auditing Entry below shows Advanced Permissions for auditing successful changes only: - Apply onto—Select _"This folder, subfolders and files"_. - Check _"Successful"_ next to the following permissions: - Create files / write data - Create folders / append data - Write extended attributes - Delete subfolders and files - Delete - Change permissions - Take ownership - Make sure that the **Apply these auditing entries to objects and/or containers within this container only** checkbox is cleared. | + | Failed read attempts | + | The Auditing Entry below shows Advanced Permissions for auditing failed read attempts only: - Apply onto—Select _"This folder, subfolders and files"_. - Check _"Failed"_ next to List folder / read data. - Make sure that the **Apply these auditing entries to objects and/or containers within this container only** checkbox is cleared. | + | Failed change attempts | + | The Auditing Entry below shows Advanced Permissions for auditing failed change attempts only: - Apply onto—Select _"This folder, subfolders and files"_. - Check _"Failed"_ next to the following permissions: - Create files / write data - Create folders / append data - Write extended attributes - Delete subfolders and files - Delete - Change permissions - Take ownership - Make sure that the **Apply these auditing entries to objects and/or containers within this container only** checkbox is cleared. | + +## Configure Object-level Access Auditing on Windows Server 2012 and Above + +Follow the steps to configure Object-level access auditing on Windows Server 2012 and above. + +**Step 1 –** Navigate to the target file share, right-click it and select **Properties**. + +**Step 2 –** In the `` Properties dialog box, select the Security tab and click +**Advanced**. + +**Step 3 –** In the Advanced Security Settings for `` dialog box, navigate to the +Auditing tab. + +![Advanced Security Settings for Share_Name dialog box](/images/1secure/configuration/computer/auditing_entries_netapp_2016.webp) + +**Step 4 –** Click **Add** to add a new principal. You can select **Everyone** (or another +user-defined group containing users that are granted special permissions) and click **Edit**. + +**Step 5 –** In the Auditing Entry for `` dialog box, click the **Select a principal** +link and specify **Everyone**. + +**NOTE:** You can specify any other user group, but in this case the emails will be sent with +warnings on incorrect audit configuration. The product will audit only user accounts that belong to +the selected group. + +**Step 6 –** Apply settings to your Auditing Entries depending on the access types that you want to +audit. If you want to audit all access types (successful reads, modification as well as failed read +and modification attempts), you need to add separate Auditing Entries for each file share. +Otherwise, reports will contain limited data and warning messages. + +Review the following for additional information: + +| Auditing Entry | | +| --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --- | +| Successful reads | | +| The Auditing Entry below shows Advanced Permissions for auditing successful reads only: ![manualconfig_fileserver_auditingentry_1_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_1_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"Files only"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| Successful changes | | +| The Auditing Entry below shows Advanced Permissions for auditing successful changes only: ![manualconfig_fileserver_auditingentry_2_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_2_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| Failed read attempts | | +| The Auditing Entry below shows Advanced Permissions for auditing failed read attempts: ![manualconfig_fileserver_auditingentry_3_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_3_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| Failed change attempts | | +| The Auditing Entry below shows Advanced Permissions for auditing failed change attempts: ![manualconfig_fileserver_auditingentry_4_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_4_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | diff --git a/docs/auditor/10.8/configuration/fileservers/netappcmode/eventcategories.md b/docs/auditor/10.8/configuration/fileservers/netappcmode/eventcategories.md new file mode 100644 index 0000000000..43a626996f --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/netappcmode/eventcategories.md @@ -0,0 +1,124 @@ +--- +title: "Configure Event Categories and Log" +description: "Configure Event Categories and Log" +sidebar_position: 40 +--- + +# Configure Event Categories and Log + +Perform the following procedures to configure audit: + +- To configure auditing state, event categories and log +- To configure logs retention period + +To configure auditing state, event categories and log + +Configure audit settings in the context of Cluster or Storage Virtual Machine (SVM). All examples in +the procedure below apply to SVM. + +To execute commands in the context of Cluster, add `-vserver name`, where `name` is your server +name. + +1. Navigate to command prompt through the SSH/Telnet connection. +2. Log in as a cluster administrator and switch to the context of SVM from the cluster. For example + to switch to the SVM called `svm1`: + + `cluster1::> vserver context -vserver svm1` + + After a switch, you will be in the context of SVM: + + `svm1::>` + +3. Create audit. For more information on audit configuration, refer to NetApp documentation. For + example: + + `svm1::> vserver audit create -destination ` + + In the example above, the `vserver audit create -destination /audit` command executed on the + `svm1` SVM creates and enables audit on the volume `/audit`. + + Netwrix Auditor accesses audit logs via file shares. Make sure the volume you specified is + mounted on SVM and shared (e.g., `audit$` is a share name and its path is `/audit`). + +4. Enable audit: + + `svm1::> vserver audit enable` + +5. Add categories of events to be audited: + + - For ONTAPI 9.0 or later + + `svm1::> vserver audit modify -events file-ops, file-share` + + - For ONTAPI 8.3 and below + + svm1::> vserver audit modify -events file-ops + +6. Check the following options: + + | Option | Setting | + | ------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | + | `Auditing State` | `true` | + | `Categories of Events to Audit` | `file-ops` Only required if you use Clustered Data ONTAP 8.3, ONTAP 9.0, ONTAP 9.1 or later. You cannot select event categories if you use Clustered Data ONTAP 8.2. For ONTAP 9.0 and later, also check the following options: `file-ops, file-share, audit-policy-change`. For ONTAP 8.3, just check `file-ops`. | + | Log Format | "XML" or "EVTX" | + +7. Modify the log file size limit—set to 300 MB. Execute: + + svm1::> vserver audit modify -rotate-size 300MB + + 300MB is the recommended maximum log size proceeding from performance evaluations. Make sure + there is enough disk space allocated for the security logs archives. Depending on the file + access activity, audit data may grow rapidly, and the location specified for the security log + (and security log auto archives) must be large enough to hold data until it is processed by + Netwrix Auditor. You can customize your security log by configuring log rotation schedule. For + detailed information, review the Planning the auditing configuration section in the + [Clustered Data ONTAP® 8.3 File Access Management Guide for CIFS.](https://library.netapp.com/ecm/ecm_download_file/ECMP1610207) + +8. After configuration, double-check your settings. + + `svm1::> vserver audit show -instance` + + | | | + | ----------------------------------- | --------------------------- | + | Auditing State: | true | + | Log Destination Path: | /audit | + | Categories of Events to Audit: | file-ops, cifs-logon-logoff | + | Log Format: | evtx | + | Log File Size Limit: | 300MB | + | Log Rotation Schedule: Month: | — | + | Log Rotation Schedule: Day of Week: | — | + | Log Rotation Schedule: Day: | — | + | Log Rotation Schedule: Hour: | — | + | Log Rotation Schedule: Minute: | — | + | Rotation Schedules: | — | + | Log Files Rotation Limit: | 0 | + +**NOTE:** For ONTAP 9.0 and later, also check the following settings: +`file-ops, file-share, audit-policy-change`. + +For ONTAP 8.3, just check `file-ops`. + +To configure logs retention period + +**NOTE:** This instruction is only effective for NetApp versions older than 8.2.1. + +1. On the computer where Auditor Server resides, open Registry Editor: navigate to **Start** **→ + Run** and type _"regedit"_. +2. Navigate to **HKEY_LOCAL_MACHINE → SOFTWARE → Wow6432Node → Netwrix Auditor → File Server Change + Reporter**. +3. In the right-pane, right-click and select New → DWORD (32-bit Value). + + For the backup logs retention functionality to work properly, you need to specify the + CleanAutoBackupLogs name for the newly created registry value. + + ![manualconfig_fileserver_netapp_createregistryvalue_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_netapp_createregistryvalue_2016.webp) + +4. Double-click **CleanAutoBackupLogs**. The **Edit DWORD Value** dialog will open. +5. This value defines the time period (in hours) after which security event logs archives will be + automatically deleted. By default, it is set to _"0"_ (decimal). Modify this value, if necessary, + and click **OK** to save the changes. + + ![manualconfig_retentionperiodbackuplog_winserver2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_retentionperiodbackuplog_winserver2016.webp) + +6. **NOTE:** If the **CleanAutoBackupLogs** registry value is set to _"0"_, you will have to remove + the old logs manually, or you may run out of space on your hard drive. diff --git a/docs/auditor/10.8/configuration/fileservers/netappcmode/overview.md b/docs/auditor/10.8/configuration/fileservers/netappcmode/overview.md new file mode 100644 index 0000000000..881b6d9ebc --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/netappcmode/overview.md @@ -0,0 +1,156 @@ +--- +title: "NetApp Data ONTAP" +description: "NetApp Data ONTAP" +sidebar_position: 30 +--- + +# NetApp Data ONTAP + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. + + - To use this option for NetApp Clustered Data ONTAP 8 or ONTAP 9, make sure that audit + configuration has been created (with `vserver audit create` command) for the target system + enabling audit configuration is optional. + +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - On the NetApp device: + + - CIFS Network Protocol support is required. + - Qtree Security must be configured. The volume where the audited file shares are located + must be set to the _"ntfs"_ or _"mixed"_ security style. + - On Clustered Data ONTAP 8 and ONTAP 9: + + - `External Web Services: true`. + + **_RECOMMENDED:_** For security reasons, enable only SSL access. + + - Firewall policy for data interfaces must be configured to allow ONTAPI protocol + connections. + - Audit settings must be configured as follows: + + | Audit Setting | Configuration | + | ----------------------------- | --------------------------- | + | Auditing State: | true | + | Log Destination Path | /audit | + | Categories of Events to Audit | file-ops, cifs-logon-logoff | + | Log Format | evtx | + | Log File Size Limit | 300 MB | + + - On Data ONTAP 7 and Data ONTAP 8 in 7-mode: + + - The `httpd.admin.enable` or the `httpd.admin.ssl.enable` option must be set to _"on"_. + For security reasons, it is recommended to configure SSL access and enable the + `httpd.admin.ssl.enable` option. + - The `cifs.audit.liveview.enable` option must be set to _"off"_. + - The `cifs.audit.enable` and the `cifs.audit.file_access_events.enable` options must be + set to _"on"_. + - Unless you are going to audit logon events, the `cifs.audit.logon_events.enable` and + the `cifs.audit.account_mgmt_events.enable` options must be set to _"off"_. + - The Security log must be configured: + + - `cifs.audit.logsize 300 000 000 (300 MB)` + - `cifs.audit.autosave.onsize.enable on` + - `cifs.audit.autosave.file.extension timestamp` + + - Audit settings must be configured for CIFS File Shares. For a security principal (e.g., + Everyone), the following options must be set to "Success" and "Fail" in the Advanced + Security → Auditing settings for the audited shared folders: + + - List Folder / Read Data (Files only) + - Create Files / Write Data + - Create Folders / Append Data + - Write Extended Attributes + - Delete Subfolders and Files + - Delete + - Change Permissions + - Take Ownership + + - On the Auditor console computer: + + - If your file shares contain symbolic links and you want to collect state-in-time data for + these shares, the local-to-local, local-to-remote, remote-to-local, and remote-to-remote + symbolic link evaluations must be enabled on the computer that hosts Auditor Server. + +See the following topics for additional information: + +- Configure NetApp Clustered Data ONTAP 8 and ONTAP 9 for Monitoring +- [Configure Audit Settings for CIFS File Shares](/docs/auditor/10.7/configuration/fileservers/netappcmode/cifs.md) + +The following table lists the actions that can be performed on NetApp: + +| | File | Folder | Share | +| ------------------------ | ---- | ------ | ----- | +| Added | + | + | + | +| Add (failed attempt) | – | – | – | +| Modified | + | + | + | +| Modify (failed attempt) | + | + | – | +| Moved | +\* | +\* | – | +| Move (failed attempt) | +\* | +\* | – | +| Read | + | - | – | +| Read (failed attempt) | + | + | – | +| Renamed | +\* | +\* | – | +| Renamed (failed attempt) | +\* | +\* | – | +| Removed | + | + | + | +| Remove (failed attempt) | + | + | – | +| Copied | – | – | – | + +Actions marked with an asterisks (\*) are reported for NetApp Clustered Data ONTAP 8 and ONTAP 9 +only. + +## Configure NetApp Clustered Data ONTAP 8 and ONTAP 9 for Monitoring + +To configure Clustered Data ONTAP 8 and ONTAP 9 for monitoring, perform the following procedures: + +- Prerequisites +- [Configure ONTAPI\RESTAPI Web Access](/docs/auditor/10.7/configuration/fileservers/netappcmode/webaccess.md) +- [Configure System Service Firewall Policies](/docs/auditor/10.7/configuration/fileservers/netappcmode/ports.md) +- [Configure Service Policy](/docs/auditor/10.7/configuration/fileservers/netappcmode/servicepolicy.md) +- [Configure Event Categories and Log](/docs/auditor/10.7/configuration/fileservers/netappcmode/eventcategories.md) + +### Prerequisites + +Netwrix assumes that you are aware of basic installation and configuration steps. If not, refer to +the following administration and management guides. + +| Version | Related documentation | +| -------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Clustered Data ONTAP 8.2 |
  • [Clustered Data ONTAP® 8.2 File Access and Protocols Management Guide](https://library.netapp.com/ecm/ecm_download_file/ECMP1196891)
  • [Clustered Data ONTAP® 8.2 System Administration Guide for SVM Administrators](https://library.netapp.com/ecm/ecm_download_file/ECMP1368704)
| +| Clustered Data ONTAP 8.3 |
  • [Clustered Data ONTAP® 8.3 System Administration Guide for Cluster Administrators](https://library.netapp.com/ecm/ecm_get_file/ECMP1636037)
  • [Clustered Data ONTAP® 8.3 File Access Management Guide for CIFS](https://library.netapp.com/ecm/ecm_download_file/ECMP1610207)
| +| ONTAP 9.0
  • 9.10
|
  • [ONTAP 9 Documentation Center](http://docs.netapp.com/ontap-9/index.jsp)
| + + +Perform the following steps before proceeding with the audit configuration. + +**Step 1 –** Configure CIFS server and make sure it functions properly. + +**NOTE**: NFS file shares are not supported. + +**Step 2 –** Configure System Access Control List (SACL) on your file share. See +[Configure Audit Settings for CIFS File Shares](/docs/auditor/10.7/configuration/fileservers/netappcmode/cifs.md) topic for additional information. + +**Step 3 –** Set the Security Style for Volume or Qtree where the audited file shares are located to +the _"ntfs"_ or _"mixed"_. + +**Step 4 –** Configure audit manually. For 8.3, review the Auditing NAS events on SVMs with FlexVol +volumes section in +[Clustered Data ONTAP® 8.3 File Access Management Guide for CIFS.](https://library.netapp.com/ecm/ecm_download_file/ECMP1610207) + +**NOTE:** The current version of Netwrix Auditor does not support auditing of Infinite Volumes. diff --git a/docs/auditor/10.8/configuration/fileservers/netappcmode/permissions.md b/docs/auditor/10.8/configuration/fileservers/netappcmode/permissions.md new file mode 100644 index 0000000000..4100d32e96 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/netappcmode/permissions.md @@ -0,0 +1,147 @@ +--- +title: "Permissions for NetApp Auditing" +description: "Permissions for NetApp Auditing" +sidebar_position: 60 +--- + +# Permissions for NetApp Auditing + +Before you start creating a monitoring plan to audit your NetApp file storage system, plan for the +account that will be used for data collection – it should meet the requirements listed below. + +If you want to authenticate with AD user account, you must enable it to access SVM through ONTAPI. +See the Create Role on NetApp Clustered Data ONTAP 8 or ONTAP 9 and Enabling AD User Access section +for additional information. + +The following permissions are required for the account on the target server: + +- The account must be a member of the Local Administrators group. +- The account must be a member of the BUILTIN\Administrators group. + +- The account requires the following **NTFS** permissions: + + - List folder / read data + - Read attributes + - Read extended attributes + - Read permissions + +- The account requires the following share permissions: + + - Read + +- The account requires the following NTFS and share permissions: + + - Read permission on the audit logs folder and its content. + - Delete permission on the audit log folder content. + +- To connect to NetApp Clustered Data ONTAP 8 or ONTAP 9, an account must be assigned a custom role + (e.g., fsa_role) on SVM that has the following capabilities with access query levels: + + | | | + | ---------------------------------------------------------------------------- | ---------------------------------- | + | - version - volume - vserver audit - vserver audit rotate-log - vserver cifs | readonly readonly all all readonly | + +The following permissions are required for the account on the Netwrix Auditor server: + +- The account must be a member of the Local Administrators group. + +See Create Role on NetApp Clustered Data ONTAP 8 or ONTAP 9 and Enabling AD User Access section for +additional information. + +_Remember,_ that you can also assign the built-in vsadmin role instead of the permissions above. + +## Create Role on NetApp Clustered Data ONTAP 8 or ONTAP 9 and Enabling AD User Access + +**NOTE:** This article applies to NetApp 8.3.2 and later. You must be a **cluster administrator** to +run the commands below. + +Follow the steps to create a role for enabling AD user access: + +**Step 1 –** Create a new role (e.g., netwrix_role for ONTAPI and netwrix_rest_role for RESTAPI) on +your SVM (e.g., svm1). For example: + +Create ONTAPI role: + +``` +security login role create -role netwrix_role -cmddirname version -access readonly -vserver svm1 +security login role create -role netwrix_role -cmddirname volume -access readonly -vserver svm1 +security login role create -role netwrix_role -cmddirname "vserver audit" -access all -vserver svm1 +security login role create -role netwrix_role -cmddirname "vserver audit rotate-log" -access all -vserver svm1 +``` + +**NOTE:** This option is required for auto audit configuration. + +``` +security login role create -role netwrix_role -cmddirname "vserver cifs" -access readonly -vserver svm1 +``` + +Create RESTAPI role: + +``` +security login rest-role create -role netwrix_rest_role -api /api/svm/svms -access read_create_modify -vserver svm1  +security login rest-role create -role netwrix_rest_role -api /api/protocols/audit -access read_create_modify -vserver svm1  +security login rest-role create -role netwrix_rest_role -api /api/storage/volumes -access readonly -vserver svm1  +security login rest-role create -role netwrix_rest_role -api /api/protocols/cifs/shares -access readonly -vserver svm1 +``` + +**NOTE:** The commands in the first two lines above can be used on NetApp versions 9.11+. In earlier +versions, use the following commands: + +``` +security login rest-role create -role netwrix_rest_role -api /api/svm/svms -access all -vserver svm1 +security login rest-role create -role netwrix_rest_role -api /api/protocols/audit -access all -vserver svm1 +``` + +**Step 2 –** The capabilities must be assigned one by one. To review currently applied capabilities, +you can use the following command: + +ONTAPI role: + +``` +security login role show -vserver svm1 -role netwrix_role +``` + +RESTAPI role: + +``` +security login rest-role show -vserver svm1 -role netwrix_rest_role +``` + +**Step 3 –** Create a login for the account that is going to authenticate and collect data from +NetApp. If you want to use an AD account for collecting data, enable it to access SVM through +ONTAPI. For example: + +**NOTE:** In ONTAP 9.10 and higher, it is not possible to assign ONTAPI role (e.g. netwrix_role) and +RESTAPI role (e.g. netwrix_rest_role) to one AD user. To allow a user access to both the ONTAPI and +RESTAPI, you can use different AD groups by assigning roles to them and including the user in these +groups. + +Create login for ONTAPI role: + +``` +security login create -vserver svm1 -user-or-group-name domain\user -application ontapi -authmethod domain -role netwrix_role +``` + +Create login for RESTAPI role: + +``` +security login create -vserver svm1 -user-or-group-name domain\user -application http -authmethod domain -role netwrix_rest_role +``` + +where `domain\user` is your data collecting account. + +_Remember,_ that to be able to add event policy for NetApp, the role you set up for working with +ONTAPI must have the following attributes: + +- version readonly +- volume readonly +- vserver audit all (required for the product to adjust audit settings automatically) +- vserver audit rotate-log all +- vserver cifs readonly + +The role you set up for working with RESTAPI must have the following attributes: + +- /api/svm/svms read_create_modify +- /api/protocols/audit read_create_modify +- /api/storage/volumes readonly +- /api/protocols/cifs/shares readonly diff --git a/docs/auditor/10.8/configuration/fileservers/netappcmode/ports.md b/docs/auditor/10.8/configuration/fileservers/netappcmode/ports.md new file mode 100644 index 0000000000..f31c0b3d50 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/netappcmode/ports.md @@ -0,0 +1,49 @@ +--- +title: "Configure System Service Firewall Policies" +description: "Configure System Service Firewall Policies" +sidebar_position: 20 +--- + +# Configure System Service Firewall Policies + +Configure firewall to make file shares and Clustered Data ONTAP HTTP/HTTPS ports accessible from the +computer where Netwrix Auditor Server is installed. Your firewall configuration depends on network +settings and security policies in your organization. Below is an example of configuration: + +**NOTE:** For NetApp ONTAP 9.10.1 and higher, the command context system services firewall policy is +deprecated and might be removed in a future ONTAP release. Review the NetApp +[ONTAP 9.10.1 commands](https://docs.netapp.com/us-en/ontap-cli-9101/) article for additional +information. + +1. Navigate to your cluster command prompt through the SSH/Telnet connection. +2. Log in as a cluster administrator and review your current firewall configuration. For example: + + | | | | + | ----------------------------------------- | ------------ | ------- | + | cluster1::> system services firewall show | | | + | Node | Enabled | Logging | + | ------------ | ------------ | ------- | + | cluster1-01 | true | false | + +3. Create firewall policy or edit existing policy to allow HTTP/HTTPS (note that modifying a policy + you may overwrite some settings). For example: + + | To... | Execute... | + | ------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | + | NetApp Clustered Data ONTAP 8.2 | | + | Create a policy | `cluster1::> system services firewall policy create -policy netwrix_policy -service http -vserver svm1 -action allow -ip-list 192.168.1.0/24` `cluster1::> system services firewall policy create -policy netwrix_policy -service https -vserver svm1 -action allow -ip-list 192.168.1.0/24` | + | Modify existing policy | `cluster1::> system services firewall policy modify -policy netwrix_policy -service http -vserver svm1 -action allow -ip-list 192.168.1.0/24` `cluster1::> system services firewall policy modify -policy netwrix_policy -service https -vserver svm1 -action allow -ip-list 192.168.1.0/24` | + | NetApp Clustered Data ONTAP 8.3, ONTAP 9.0 - 9.10 | | + | Create a policy | `cluster1::> system services firewall policy create -policy netwrix_policy -service http -vserver svm1 -allow-list 192.168.1.0/24` `cluster1::> system services firewall policy create -policy netwrix_policy -service https -vserver svm1 -allow-list 192.168.1.0/24` | + | Modify existing policy | `cluster1::> system services firewall policy modify -policy netwrix_policy -service http -vserver svm1 -allow-list 192.168.1.0/24` `cluster1::> system services firewall policy modify -policy netwrix_policy -service https -vserver svm1 -allow-list 192.168.1.0/24` | + + where `pol1` is your Firewall policy name and `192.168.1.0/24` is your subnet where Netwrix + Auditor Server resides. + +4. Apply the firewall policy to a LIF. + + `cluster1::>network interface modify -vserver svm -lif vs1-cifs-lif1 -firewall-policy netwrix_policy` + + To verify the policy was applied correctly, execute the following: + + `cluster1::>network interface show -fields firewall-policy` diff --git a/docs/auditor/10.8/configuration/fileservers/netappcmode/servicepolicy.md b/docs/auditor/10.8/configuration/fileservers/netappcmode/servicepolicy.md new file mode 100644 index 0000000000..d65645b420 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/netappcmode/servicepolicy.md @@ -0,0 +1,111 @@ +--- +title: "Configure Service Policy" +description: "Configure Service Policy" +sidebar_position: 30 +--- + +# Configure Service Policy + +**NOTE:** This paragraph only applies to NetApp ONTAP version 9.10.1 and higher. + +By default, the 'default-data-files' policy is applied to the SVM CIFS/SMB interface and HTTP/HTTPS +options are not available. To make the ONTAPI available through HTTP/HTTPS ports on your SVM +interface for Netwrix Auditor Server, configure the 'interface service'-policy. Below is an example +of the configuration: + +1. Navigate to your cluster command prompt through the SSH/Telnet connection. +2. Log in as a cluster administrator and review your current service-policy configuration. Run the + following command: + + cluster1::> network interface show -vserver svm1 -fields service-policy + + Example output: + + vserver lif service-policy + + *** + + svm1 lif_svm1_126 default-data-files + + svm1 lif_svm1_349 default-data-files + + Where `svm1 `– is the name of your SVM, + + The `lif_svm1_126 and lif_svm1_349` parameter is the `svm1` logical interface. + + The `default-data-files` parameter is the service-policy applied to lif-s. + +3. To display the services available through the '`default-data-files`' policy, run the following + command: + + cluster1::> network interface service-policy show -vserver svm1 -policy default-data-files + + Example output: + + Vserver: svm1 + + Policy Name: default-data-files + + Included Services: data-core, data-cifs, data-fpolicy-client, data-dns-server + + Service: Allowed Addresses: data-core: 0.0.0.0/0 + + data-cifs: 0.0.0.0/0 + + data-fpolicy-client: 0.0.0.0/0 + + data-dns-server: 0.0.0.0/0 + +4. Set the advanced privilege level to be able to create and modify the service-policy. Run the + following command: + + cluster1::> set -privilege advanced + + _Remember,_ The command prompt should be changed to “`cluster1::*>`” + +5. Clone the existing '`default-data-files`' LIF policy to be able using shares with a new + service-policy. Run the following command: + + cluster1::\*> network interface service-policy clone -vserver svm1 -policy default-data-files + -target-policy netwrix-policy -target-vserver svm1 + + Where the '`netwrix-policy`' parameter is the name of new service-policy. + +6. Modify the new service-policy by adding services to access over http\https protocols. Run the + following command: + + cluster1::\*> network interface service-policy add-service -vserver svm1 -policy netwrix-policy + -service management-http + + cluster1::\*> network interface service-policy add-service -vserver svm1 -policy netwrix-policy + -service management-https + +7. Return to the administrator privilege level. Run the following command: + + cluster1::\*> set -privilege admin + +8. Apply a new service-policy to the SVM LIFs. Run the following command: + + cluster1::> network interface modify -vserver svm1 -lif lif_svm1_126 -service-policy + netwrix-policy + + cluster1::> network interface modify -vserver svm1 -lif lif_svm1_349 -service-policy + netwrix-policy + + **NOTE:** For better security, specify the allowed ip-addresses when adding the service. + Double-check that your subnet is configured on the machine where Netwrix Auditor Server resides. + Allowed-addresses are: 192.168.1.0/24. + +9. Check the current interface service-policy using command from the step 2: + + cluster1::> network interface show -vserver svm1 -fields service-policy + + Example output: + + vserver lif service-policy + + *** + + svm1 lif_svm1_126 netwrix-policy + + svm1 lif_svm1_349 netwrix-policy diff --git a/docs/auditor/10.8/configuration/fileservers/netappcmode/webaccess.md b/docs/auditor/10.8/configuration/fileservers/netappcmode/webaccess.md new file mode 100644 index 0000000000..4cac066ce5 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/netappcmode/webaccess.md @@ -0,0 +1,108 @@ +--- +title: "Configure ONTAPI/RESTAPI Web Access" +description: "Configure ONTAPI/RESTAPI Web Access" +sidebar_position: 10 +--- + +# Configure ONTAPI\RESTAPI Web Access + +Netwrix Auditor uses ONTAPI to obtain the current CIFS audit configuration and force the audit data +flush from the internal filer format to an MS Event Viewer compatible format. Netwrix Auditor +supports both the SSL and non-SSL HTTP access, trying HTTPS first, and falling back to HTTP if it is +unavailable. + +Follow the steps to configure ONTAPI\RESTAPI Web Access. + +**Step 1 –** Navigate to your cluster management command prompt through the SSH/Telnet connection. + +**Step 2 –** Log in as a cluster administrator and review your current web access settings. Make +sure that External Web Services are allowed. For example: + +| | | +| ------------------------------------------------------------------------------------------------------ | ------ | +| `cluster1::>  system  services  web show` where `'cluster1`' is the name of your NetApp ONTAP cluster. | | +| External Web Services: | true | +| Status: | online | +| HTTP Protocol Port: | 80 | +| HTTPs Protocol Port: | 443 | +| TLSv1 Enabled: | true | +| SSLv3 Enabled: | true | +| SSLv2 Enabled: | false | + +If the result of the` External Web Services` command is '`false`', execute the following: + +``` +cluster1::> system services web modify -external true +``` + +**Step 3 –** Enable ONTAPI access on the 'Storage VM' (SVM) where CIFS server is installed. Run the +following command where svm1 is the name of your SVM: + +``` +cluster1::> vserver services web modify -vserver svm1 -name ontapi -enabled true +cluster1::> vserver services web show -vserver svm1. +``` + +| Vserver | Type | Service Name | Description | Enabled | +| ------- | ------- | ------------ | --------------------------- | ------- | +| `svm1` | `data ` | `ontapi ` | `Remote Administrative API` | `true` | +| | | | Support | | +| svm1 | data | rest | Remote Administrative API | true | +| | | | `Support` | | + +To display the current settings of web services for SVM svm1, use the following command: + +``` +cluster1::> vserver services web show -vserver svm1 +``` + +**Step 4 –** Review the [Permissions for NetApp Auditing](/docs/auditor/10.7/configuration/fileservers/netappcmode/permissions.md) topic for additional +information on how to create the role and enable AD user access. + +**Step 5 –** Enable HTTP/HTTPS access. For example: + +ONTAPI + +``` +cluster1::> vserver services web modify -vserver svm1 -name ontapi -enabled true +``` + +RESTAPI + +``` +cluster1::> vserver services web modify -vserver svm1 -name rest -enabled true +``` + +**Step 6 –** Enable only SSL access (HTTPS in Netwrix Auditor). For example: + +ONTAPI + +``` +cluster1::> vserver services web modify -vserver svm1 -name ontapi -enabled true -ssl-only true +``` + +RESTAPI + +``` +cluster1::> vserver services web modify -vserver svm1 -name rest -enabled true -ssl-only true +``` + +**Step 7 –** Make sure that the custom role (e.g., netwrix_role for ONTAPI or netwrix_rest_role for +RESTAPI) assigned to your account specified for data collection can access ONTAPI or RESTAPI. See +[Permissions for NetApp Auditing](/docs/auditor/10.7/configuration/fileservers/netappcmode/permissions.md) topic for additional information. + +``` +cluster1::> vserver services web access show -name ontapi -vserver svm1 +cluster1::> vserver services web access show -name rest -vserver svm1 +``` + +| | | | | +| --------------------------- | --------- | -------------- | ------------------ | +| `Vserver` | `Type` | `Service Name` | `Role` | +| `--------------` | `-------` | `------------` | `---------------` | +| `svm1` | `data ` | `ontapi ` | `netwrix_role` | +| `svm1` | `data ` | `ontapi ` | `vsadmin` | +| `svm1` | `data ` | `ontapi ` | `vsadmin-protocol` | +| `svm1` | `data ` | `ontapi ` | `vsadmin-readonly` | +| `svm1` | `data ` | `ontapi ` | `vsadmin-volume` | +| `5 entries were displayed.` | | | | diff --git a/docs/auditor/10.8/configuration/fileservers/nutanix/_category_.json b/docs/auditor/10.8/configuration/fileservers/nutanix/_category_.json new file mode 100644 index 0000000000..7b48fc1df0 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/nutanix/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Nutanix", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/fileservers/nutanix/notificationpolicy.md b/docs/auditor/10.8/configuration/fileservers/nutanix/notificationpolicy.md new file mode 100644 index 0000000000..fc47c75162 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/nutanix/notificationpolicy.md @@ -0,0 +1,234 @@ +--- +title: "Create a Notification Policy" +description: "Create a Notification Policy" +sidebar_position: 40 +--- + +# Create a Notification Policy + +To monitor operations with files and folders on Nutanix File Server, you should configure a +notification policy for the related events. + +## Monitored Operations + +The list of supported operations is provided in the table below. Your notification policy can +include any of them. + +| To audit... | Operation name to specify at policy creation | +| -------------------------------------- | -------------------------------------------- | +| Successful _create_ operations | FILE_CREATE DIRECTORY_CREATE | +| Successful _read_ operations | FILE_READ | +| Successful _modify_ operations | FILE_WRITE RENAME SECURITY | +| Successful _delete_ operations | FILE_DELETE DIRECTORY_DELETE | +| Failed _read/modify/delete_ attempts\* | FILE_OPEN | + +\* - Failed attempt to move/rename file are not audited. + +## Configuration Procedure + +Notification policy creation procedure involves API requests usage. It is assumed that you have a +good understanding of REST API concepts, as well as enough experience in working with JSON-formatted +requests in any API client. To get acquainted with Nutanix REST API Explorer client, refer to +[Nutanix documentation](https://portal.nutanix.com/#nutanix-documentation). + +To create a notification policy for Nutanix File Server via API: + +1. Open the **File Server REST API Explorer** client using the following URL: + + `https://:9440/api/nutanix/v3/api_explorer/index.html#/` + + here `< fileserver_ip >` - IP address of the Nutanix File Server to be audited. + +If you select to launch the RestAPI Explorer from the Prism menu, the **RestAPI Explorer for Prism** +client will be opened. + +2. In the **username** and **password** fields, enter the credentials of the + [Create User Account to Access Nutanix REST API](/docs/auditor/10.7/configuration/fileservers/nutanix/useraccount.md) you have created. +3. Click **Explore**. +4. In the **File Server REST API Explorer** REST API client, locate the POST request for + `notification_policies` : + + `POST /notification_policies` + +5. In the request body, enter the following JSON-formatted structure: + +``` +{ + +"spec": { + +"name": "", + +"resources": { + +"all_mount_targets" : true, + +"protocol_type_list" : ["SMB"], + +"file_operation_list" : [], + +"partner_server_reference_list" : [{ + +"kind" : "partner_server", + +"uuid" : "" + +}] + +}, + +"description": "" + +}, + +"api_version": "3.0", + +"metadata": { + +"kind": "notification_policy" + +} + +} +``` + +here: + +_"all_mount_targets" : true_ - instructs to notify on changes to all shares + +_"protocol_type_list" : ["SMB"]_ - instructs to track SMB shares (the only currently supported) + +_``_ – enter the name of notification policy you want to create + +_``_ - enter the `uuid` of [Configure Partner Server](/docs/auditor/10.7/configuration/fileservers/nutanix/partnerserver.md) + +_``_ - enter the list of operations to be audited. + +6. Send the request, clicking **Try it out**. +7. Get the response - `Response Code` should be _200_. In the response body, locate the `uuid` of + the created notification policy. +8. To check that a new policy was included in the list of existing policies, retrieve the list of + policies, sending the POST request to the following endpoint: + + `POST /notification_policies/list`. The request body must be empty - for that, enter empty + brackets as the **value** for _get_entities_request_ parameter : `{ }` + +## Auditing Specific Folders + +If you want to audit only the certain folders on Nutanix File Server (mount targets), then do the +following: + +1. Retrieve the list of existing mount targets using the `mount_target POST /mount_targets/list` + request with empty body, as described above. +2. In the response, locate the `uuids` of the target folders you want to audit. +3. In the notification policy creation request (described above) instead of + `"all_mount_targets" : true` in the request body enter the following JSON-formatted structure: + +```json +"mount_target_reference_list": [ +{ +"kind" : "mount_target", +"uuid" : "" +}, +{ +"kind" : "mount_target", +"uuid" : "" +}, +] +``` + +here: + +_`_ – enter the uuid of target you want to audit. + +## Example + +The JSON-formatted structure below is an example of the request body that can be used to create a +notification policy named _MOUNT_POINT_POLICY_ to audit the mount a share on Nutanix File Server +with the _uuid=378896fd-e829-4869-84a2-6c29268acfff_. The following operations will be audited: + +- "FILE_READ", +- "FILE_CREATE", +- "FILE_DELETE", +- "DIRECTORY_CREATE", +- "DIRECTORY_DELETE", +- "FILE_WRITE", +- "RENAME", +- "SECURITY", +- "FILE_OPEN" + +JSON structure is as follows: + +``` +{ + +"spec": { + +"name": "MOUNT_POINT_POLICY ", + +"resources": { + +"mount_target_reference_list": [ + +{ + +"kind" : "mount_target", + +"uuid" : "378896fd-e829-4869-84a2-6c29268acfff” + +} + +], + +"protocol_type_list" : ["SMB"], + +"file_operation_list" :[ + +"FILE_READ", + +"FILE_CREATE", + +"FILE_DELETE", + +"DIRECTORY_CREATE", + +"DIRECTORY_DELETE", + +"FILE_WRITE", + +"RENAME", + +"SECURITY", + +"FILE_OPEN" + +], + +"partner_server_reference_list" : [ + +{ + +"kind" : "partner_server", + +"uuid" : " d0bfb952-924b-459e-bd32-44c8b5a62838" + +} + +] + +}, + +"description": "" + +}, + +"api_version": "3.0", + +"metadata": { + +"kind": "notification_policy" + +} + +} +``` diff --git a/docs/auditor/10.8/configuration/fileservers/nutanix/overview.md b/docs/auditor/10.8/configuration/fileservers/nutanix/overview.md new file mode 100644 index 0000000000..bb21fcc81d --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/nutanix/overview.md @@ -0,0 +1,95 @@ +--- +title: "Nutanix" +description: "Nutanix" +sidebar_position: 40 +--- + +# Nutanix + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - To allow inbound connections to Netwrix Auditor server from Nutanix File Server, a TCP port + must be open: + + - For the first Nutanix File Server you configure for auditing, the **TCP 9898** port will + be used. + - For each subsequent server, a new TCP port must be open. + + - Target Nutanix File Server must be located in the same subnet as Netwrix Auditor Server and + must be configured as described in the Nutanix section. + +## Manual Configuration + +To configure your Nutanix File Server for monitoring SMB shares, you will need to do the following: + +**Step 1 –** Create a user account to access the Nutanix REST API. See the +[Create User Account to Access Nutanix REST API](/docs/auditor/10.7/configuration/fileservers/nutanix/useraccount.md) topic for additional information. + +**Step 2 –** Open a port for inbound connections. See the [Nutanix Ports](/docs/auditor/10.7/configuration/fileservers/nutanix/ports.md) topic for +additional information. + +In addition, configure the Auditor console server as a partner server for Nutanix Files, and create +a notification policy to make Netwrix Auditor aware of the Nutanix events. These operations can be +performed in any of the following ways: + +- Automatically when creating a monitoring plan. For that, you should select the **Adjust audit + settings automatically** option in the monitoring plan wizard. See the + [Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) + topic for additional information. +- Manually, as described in the corresponding topics: + - [Configure Partner Server](/docs/auditor/10.7/configuration/fileservers/nutanix/partnerserver.md) + - [Create a Notification Policy](/docs/auditor/10.7/configuration/fileservers/nutanix/notificationpolicy.md) + +Remember that in both cases (automatic or manual configuration) you will need to complete the steps +above to ensure that the user account for accessing REST API is created and the listening port on +Netwrix Auditor  Server is open for inbound connections. + +### Nutanix Files + +The following table lists the actions that can be performed with Nutanix Files: + +| | File | Folder | Share | +| ------------------------ | ---- | ------ | ----- | +| Added | + | + | + | +| Add (failed attempt) | + | + | – | +| Modified | + | + | + | +| Modify (failed attempt) | + | + | – | +| Moved | + | + | – | +| Move (failed attempt) | – | – | – | +| Read | + | + | – | +| Read (failed attempt) | + | + | – | +| Renamed | + | + | – | +| Renamed (failed attempt) | – | – | – | +| Removed | + | + | + | +| Remove (failed attempt) | + | + | – | +| Copied | – | – | – | + +The following considerations refer to Nutanix Files auditing and reporting: + +- All changes performed on Nutanix File Shares initiated from the machine(s) where Auditor Server + resides, will not displayed in Netwrix search and reports because Nutanix Files unable to generate + such Activity Records for Auditor. +- Auditing of NFS file shares in not supported due to known limitations. +- Currently, not every detail about permission and attribute changes may be provided by Nutanix + Files, so they cannot be reported by Auditor. +- As for the state-in-time data collection, note that effective permissions (as a combination of + NTFS and Shared permissions) are not calculated properly for the local Administrator group + members. diff --git a/docs/auditor/10.8/configuration/fileservers/nutanix/partnerserver.md b/docs/auditor/10.8/configuration/fileservers/nutanix/partnerserver.md new file mode 100644 index 0000000000..013eb472e5 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/nutanix/partnerserver.md @@ -0,0 +1,103 @@ +--- +title: "Configure Partner Server" +description: "Configure Partner Server" +sidebar_position: 30 +--- + +# Configure Partner Server + +To start monitoring files and folders on Nutanix File Server, you should configure Netwrix Auditor +Server as a partner server for Nutanix File Server. + +This configuration procedure involves creation of API requests and assumes that you have an good +understanding of REST API concept, as well as experience in working with JSON-formatted requests in +some API client. To get acquainted with Nutanix REST API Explorer client, refer to +[Nutanix documentation](https://portal.nutanix.com/#nutanix-documentation) + +To create a partner server for Nutanix File Server via API: + +1. Open the **File Server REST API Explorer** REST API client using the following URL: + + `https://:9440/api/nutanix/v3/api_explorer/index.html#/` + + here `` - IP address of the Nutanix File Server to be audited. + +If you select to launch the RestAPI Explorer from the Prism menu, the **RestAPI Explorer for Prism** +server will be opened. + +2. In the **username** and **password** fields, enter the credentials of the + [Create User Account to Access Nutanix REST API](/docs/auditor/10.7/configuration/fileservers/nutanix/useraccount.md) you have created. +3. Click **Explore**. +4. Locate the POST request for **partner_servers** endpoint: + + `POST /partner_servers` + +![api_thumb_0_0](/images/auditor/10.7/configuration/fileservers/nutanix/api_thumb_0_0.webp) + +5. In the request body, enter the following JSON-formatted structure: + +``` +{ + +"spec": { + +"name": "", + +"resources": { + +"usage_type": "NOTIFICATION", + +"vendor_name": "netwrix", + +"server_info": { + +"server_type": "PRIMARY", + +"address": { + +"ip": "", + +"port": 9898 + +} + +} + +} + +}, + +"api_version": "3.0", + +"metadata": { + +"kind": "partner_server" + +} + +} +``` + +here: + +_``_ - enter the Netwrix Auditor server name + +_``_ - enter the Netwrix Auditor server IP address + +This address must be visible from the Nutanix File Server network. + +6. Send the request, clicking **Try it out**. +7. Get the response - `Response Code` should be _200_. In the response body, locate the `uuid` of + the created partner server. +8. To check that a new partner server was included in the list of existing partner servers, retrieve + the list of servers, sending the POST request to the following endpoint: + + `POST /partner_servers/list` + +The request body must be empty - for that, enter empty brackets as the **value** for +_get_entities_request_ parameter: `{ }` + +![api_partner_server_resquest_thumb_0_0](/images/auditor/10.7/configuration/fileservers/nutanix/api_partner_server_resquest_thumb_0_0.webp) + +9. The response body should contain the list of servers, including new partner server name and other + settings. diff --git a/docs/auditor/10.8/configuration/fileservers/nutanix/permissions.md b/docs/auditor/10.8/configuration/fileservers/nutanix/permissions.md new file mode 100644 index 0000000000..beddd32f0e --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/nutanix/permissions.md @@ -0,0 +1,74 @@ +--- +title: "Permissions for Nutanix Files Auditing" +description: "Permissions for Nutanix Files Auditing" +sidebar_position: 50 +--- + +# Permissions for Nutanix Files Auditing + +Before you start creating a monitoring plan to audit Nutanix Files, plan for the accounts that will +be used for data collection. They should meet the requirements listed below. + +## Account for Accessing Nutanix File Server + +First, you need an account that Netwrix Auditor will use to access Nutanix File Server. This account +requires at least _Read_ permission for the target SMB shares on the Nutanix File Server. + +This is the account you will provide in the monitoring plan wizard at the +[Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) step; it can be modified in +the **General** tab of the monitored item settings. + +![nutanix_item_mp_thumb_0_0](/images/auditor/10.7/configuration/fileservers/nutanix/nutanix_item_mp_thumb_0_0.webp) + +This account must have a role with sufficient privileges on that server: **File Server Admin** +(recommended) or **Backup Admin** role. + +## Account for Accessing REST API + +You will also need an account that will be used to connect to Nutanix File Server REST API. + +This account should be provided in the **Nutanix File Server REST API** tab of the monitored item +(_Nutanix SMB shares_) settings. + +![nutanix_item_restapi_thumb_0_0](/images/auditor/10.7/configuration/fileservers/nutanix/nutanix_item_restapi_thumb_0_0.webp) + +This account must be assigned the **REST API access users** role for Nutanix File Server you want to +audit. + +See the section below for the instructions on user role assignment. + +## Role Assignment Procedure + +Before starting the role assignment, make sure your Nutanix File Server is included in the AD +domain. + +Follow the steps to assign the required roles to the corresponding accounts using Nutanix Prism. + +**Step 1 –** Open Nutanix Prism web portal. + +**Step 2 –** Select **File Server** category. In the list of servers, select the server you want to +audit. + +**Step 3 –** Click **Manage roles**. + +**Step 4 –** In the **Manage roles** dialog locate the **Add admins** section and click **+New +user**. + +**Step 5 –** Enter the AD user account (to be used as data collection account) in the _domain\name_ +format and select the **File Server Admin** or **Backup Admin** role to assign + +**Step 6 –** Click **Save** next to these cells to save the settings. + +**Step 7 –** Next, in the **REST API access users** section click **+New user**. + +**Step 8 –** Enter the local user account and password, then click **Save** next to these cells to +save the settings. + +![nutanix_user_thumb_0_0](/images/auditor/10.7/configuration/fileservers/nutanix/nutanix_user_thumb_0_0.webp) + +**Step 9 –** When finished, click **Close**. + +See the following topics for additional information. + +- [Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) +- [Create User Account to Access Nutanix REST API](/docs/auditor/10.7/configuration/fileservers/nutanix/useraccount.md). diff --git a/docs/auditor/10.8/configuration/fileservers/nutanix/ports.md b/docs/auditor/10.8/configuration/fileservers/nutanix/ports.md new file mode 100644 index 0000000000..873ea978c4 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/nutanix/ports.md @@ -0,0 +1,54 @@ +--- +title: "Nutanix Ports" +description: "Nutanix Ports" +sidebar_position: 10 +--- + +# Nutanix Ports + +Follow the steps to open Nutanix port for inbound connections. + +**Step 1 –** On a target computer navigate to **Start** > **Control Panel** and select **Windows +Firewall.** + +**Step 2 –** In the Help Protect your computer with Windows Firewall page, click **Advanced +settings** on the left. + +**Step 3 –** In the Windows Firewall with Advanced Security dialog, select Inbound Rules on the +left. + +**Step 4 –** Click New Rule. In the New Inbound Rule wizard, complete the steps as described below. + +| Option | Setting | +| ------------------- | -------------------------------------------------------------------------------------------------------- | +| Rule Type | Port | +| Protocols and Ports | - Does this rule applies to TCP or UDP—Select TCP - Specific local ports—Type required port, e.g., 9898. | +| Action | Select Allow the connection | +| Profile | Applies to Domain | +| Rule name | Rule name, for example Nutanix Files inbound rule. | + +When you add the first item (_Nutanix SMB shares_) to the Nutanix monitoring plan, you will be +suggested to use port **9898**. For the next _Nutanix SMB shares_ added as an item, you should +specify a different TCP port and configure it for inbound connections, as described above. + +### Protocols and Ports Required for Monitoring Nutanix Files + +Review a full list of protocols and ports required for Netwrix Auditor for Nutanix Files. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to the remote ports on the computer where Netwrix Auditor Server + resides. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 9898 TCP port. + +| Port | Protocol | Source | Target | Purpose | +| ---- | -------- | ------------------------------- | ---------------------- | ------------------------------------- | +| 9898 | TCP | Monitored Nutanix Files devices | Netwrix Auditor Server | Getting events from monitored devices | + +**NOTE:** You need to open the 9898 TCP port for inbound connections manually. + +Later, you can specify any custom TCP port when editing your Nutanix Files monitoring plan. See the +[File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) (Nutanix section) for more +information. diff --git a/docs/auditor/10.8/configuration/fileservers/nutanix/useraccount.md b/docs/auditor/10.8/configuration/fileservers/nutanix/useraccount.md new file mode 100644 index 0000000000..823248bf46 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/nutanix/useraccount.md @@ -0,0 +1,51 @@ +--- +title: "Create User Account to Access Nutanix REST API" +description: "Create User Account to Access Nutanix REST API" +sidebar_position: 20 +--- + +# Create User Account to Access Nutanix REST API + +To create a user account using the ncli utility: + +1. Download and install the _ncli_ (Nutanix command-line interface) on any server in your + infrastructure, as described [here](https://portal.nutanix.com/#here). +2. Start the utility and establish a _ncli_ session by the following command: + + `ncli -s management_ip_addr -u 'username' -p 'user_password'` + + here: + + - `management_ip_addr` - the IP address of any Nutanix Controller VM in the cluster + - `username` - user name to access that VM; if not specified, _admin_ (default name) will be + used + - `user_password` - password to access that VM + +3. Run the `fs list` command in _ncli_ to get the list of Nutanix Files servers. +4. Locate the name of Nutanix Files server you want to audit; locate and save the following server + parameters to a text file: + - **Uuid** - Nutanix Files server ID +5. Finally, create a new user and specify credentials that will be used to access this Nutanix Files + server. For that, run the following command in _ncli_ : + + `fs add-user uuid= user= password=` + + here: + + - `` - Nutanix Files server ID (Uuid) + - `` - user name + - `` - password + +To create a new user account with Nutanix Prism: + +1. Open Nutanix Prism web portal. +2. Select **File Server** category. In the list of servers, select the server you want to audit. +3. Click **Manage roles**. +4. In the **Manage roles** dialog locate the **REST API access user** section and click **+New + user**. + + ![nutanix_user_thumb_0_0](/images/auditor/10.7/configuration/fileservers/nutanix/nutanix_user_thumb_0_0.webp) + +5. Enter local user account name and password, then click **Save** next to them to save the + settings. +6. Click the **Close** button to close the **Manage roles** dialog. diff --git a/docs/auditor/10.8/configuration/fileservers/overview.md b/docs/auditor/10.8/configuration/fileservers/overview.md new file mode 100644 index 0000000000..bf10d71874 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/overview.md @@ -0,0 +1,68 @@ +--- +title: "File Servers" +description: "File Servers" +sidebar_position: 40 +--- + +# File Servers + +Netwrix Auditor can monitor for operations with files and folders on the storage systems, collect +state-in-time snapshots and track changes to the object attributes. This section provides detailed +information on these activities. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +## Supported File Servers and Devices + +The following topics list the operations with files and folders that can be monitored and reported +by Auditor on these supported storage systems.: + +- [Dell Data Storage](/docs/auditor/10.7/configuration/fileservers/delldatastorage/overview.md) +- [Dell Isilon/PowerScale](/docs/auditor/10.7/configuration/fileservers/dellisilon/overview.md) +- [NetApp Data ONTAP](/docs/auditor/10.7/configuration/fileservers/netappcmode/overview.md) +- [Nutanix](/docs/auditor/10.7/configuration/fileservers/nutanix/overview.md) +- [Qumulo](/docs/auditor/10.7/configuration/fileservers/qumulo/overview.md) +- [Synology](/docs/auditor/10.7/configuration/fileservers/synology/overview.md) +- [Windows File Servers](/docs/auditor/10.7/configuration/fileservers/windows/overview.md) + +## State-in-Time Data + +State-in-time data collection is supported for files, folders and shares on Windows-based file +servers, Dell and NetApp storage systems, and Nutanix File Servers. Remember to select the +corresponding option in the data source settings within the monitoring plan. + +## Sensitive Data + +Starting with the version 10, the product is able to report about sensitive data in your IT +infrastructure. Pay attention to the "_Data categories_" column in search and reports (for the +"_File_" object types only). See the +[Sensitive Data Discovery ](/docs/auditor/10.7/admin/settings/sensitivedatadiscovery.md) topic for additional +information on how to enable monitoring of sensitive data in Auditor. + +## Monitored Object Attributes + +The table below lists the object types and attributes that can be monitored by Auditor. + +For more information on the attributes marked with (\*) , refer to the following Microsoft article: +[File Attribute Constants](https://msdn.microsoft.com/en-us/library/windows/desktop/gg258117(v=vs.85).aspx). + +| Object type | Attributes | +| ----------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| File | - Attributes\* - Location - Name - Ownership - Permissions: - Group Permissions - User Permissions - Primary Group - Security descriptor control flags - Size - Data categories | +| Folder | - Attributes\* The Reparse point attribute content is available for reviewing only when State-In-Time snapshot collection is enabled. Mind that reparse point content changes cannot be audited. - Location - Name - Ownership - Permissions: - Group Permissions - User Permissions - Primary Group - Security descriptor control flags | +| Share | - Access-based Enumeration - Caching - Continuous Availability - Description - Enable BranchCache - Encrypt Data Access - Local Path - User Limit | + +**CAUTION:** File and folder attributes marked with the (\*) are not monitored by default. Please +contact Netwrix Technical Support team to monitor these file and folder attributes. + +In addition to general object attributes, Auditor generates the following attributes associated with +the object and reserved for internal use: + +- **Session ID** — This attribute is based on the user's logon ID and timestamp of the related logon + event. Being unique for a user's logon session, it usually helps to distinguish the events and + changes that occurred within that session. +- **Statement ID** — This attribute appears if an object was moved/renamed due to its root object + modifications. diff --git a/docs/auditor/10.8/configuration/fileservers/qumulo/_category_.json b/docs/auditor/10.8/configuration/fileservers/qumulo/_category_.json new file mode 100644 index 0000000000..347655a8b8 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/qumulo/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Qumulo", + "position": 50, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/fileservers/qumulo/configure.md b/docs/auditor/10.8/configuration/fileservers/qumulo/configure.md new file mode 100644 index 0000000000..fdb7b6d294 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/qumulo/configure.md @@ -0,0 +1,28 @@ +--- +title: "Configure Core Audit for Qumulo File Servers" +description: "Configure Core Audit for Qumulo File Servers" +sidebar_position: 20 +--- + +# Configure Core Audit for Qumulo File Servers + +To configure your Qumulo file servers for auditing, you need to connect your device to Active +Directory or LDAP (local names are supported) and then configure Remote Syslog Address and port +number via Web UI. + +To configure Core Audit for Qumulo file servers + +1. Log in to the Web UI. +2. Navigate to Cluster and click Audit. +3. Under the Configuration, provide the following: + + - Remote Syslog Address – Provide the IP address or the computer listened by Syslog. It should + be a third-party Syslog forward service or the machine where Netwrix Auditor is installed. + - Port Number – use the default value (_514_). + + ![qumulo_web_ui](/images/auditor/10.7/configuration/fileservers/qumulo/qumulo_web_ui.webp) + +When you see the green line “_Connected_”, the environment is ready. + +For detailed information about Qumulo Web UI. refer to the following Qumulo how-to article: +[Qumulo Core Audit Logging](https://care.qumulo.com/hc/en-us/articles/360021454193-Qumulo-Core-Audit-Logging). diff --git a/docs/auditor/10.8/configuration/fileservers/qumulo/overview.md b/docs/auditor/10.8/configuration/fileservers/qumulo/overview.md new file mode 100644 index 0000000000..f1dd3365bd --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/qumulo/overview.md @@ -0,0 +1,57 @@ +--- +title: "Qumulo" +description: "Qumulo" +sidebar_position: 50 +--- + +# Qumulo + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - The Remote Syslog Address and port number must be configured as described in the + [Configure Core Audit for Qumulo File Servers](/docs/auditor/10.7/configuration/fileservers/qumulo/configure.md) topic. + +Review a full list of object types Netwrix Auditor can collect on Qumulo network devices. + +| Action | File | Folder | Share | +| ----------------------- | ---- | ------ | ----- | +| Added | + | + | - | +| Add (failed attempt) | + | + | - | +| Modified | + | + | - | +| Modify (failed attempt) | - | - | - | +| Moved | + | + | - | +| Move (failed attempt) | - | - | - | +| Read | + | + | - | +| Read (failed attempt) | - | - | - | +| Renamed | + | + | - | +| Rename (failed attempt) | - | - | - | +| Removed | + | + | - | +| Remove (failed attempt) | - | - | - | +| Copied | - | - | - | + +**NOTE:** For Qumulo system Auditor displays the actual time when the event occurred. The 'When' +column shows the time when the syslog message arrived. + +If an object has been moved between file shares, the product reports the following actions: + +- Read + Removed for the initial object; + +- Added + Modified for the object to a new location. diff --git a/docs/auditor/10.8/configuration/fileservers/qumulo/permissions.md b/docs/auditor/10.8/configuration/fileservers/qumulo/permissions.md new file mode 100644 index 0000000000..2341009acc --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/qumulo/permissions.md @@ -0,0 +1,25 @@ +--- +title: "Permissions for Qumulo Auditing" +description: "Permissions for Qumulo Auditing" +sidebar_position: 30 +--- + +# Permissions for Qumulo Auditing + +Before you start creating a monitoring plan to audit your Qumulo or Synology file servers, plan for +the account that will be used for data collection – it should meet the requirements listed below. +Then you will provide this account in the monitoring plan wizard (or monitored item settings). + +Starting with version 9.96, you can use group Managed Service Accounts (gMSA) as data collecting +accounts. + +See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic and the +[Group Managed Service Accounts Overview](https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview) +Microsoft article for additional information. + +These group Managed Service Accounts should meet the related requirements, as listed below. + +**On the target server:** + +1. The account requires Read share permission on the audited shared folders. +2. The account requires Read NTFS permission on all objects in the audited folders. diff --git a/docs/auditor/10.8/configuration/fileservers/qumulo/ports.md b/docs/auditor/10.8/configuration/fileservers/qumulo/ports.md new file mode 100644 index 0000000000..fc2f28c29a --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/qumulo/ports.md @@ -0,0 +1,21 @@ +--- +title: "Qumulo Ports" +description: "Qumulo Ports" +sidebar_position: 10 +--- + +# Qumulo Ports + +Review a full list of protocols and ports required for Netwrix Auditor for Qumulo. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to remote ports on the source and inbound connections to local ports on + the target. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 514 UDP port. + +| Port | Protocol | Source | Target | Purpose | +| ---- | --------- | ---------------------- | ---------------------- | ------------------------------------------ | +| 514 | UDP / TCP | Monitored file servers | Netwrix Auditor Server | Getting events from monitored file servers | diff --git a/docs/auditor/10.8/configuration/fileservers/synology/_category_.json b/docs/auditor/10.8/configuration/fileservers/synology/_category_.json new file mode 100644 index 0000000000..3439c5a523 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/synology/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Synology", + "position": 60, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/fileservers/synology/configure.md b/docs/auditor/10.8/configuration/fileservers/synology/configure.md new file mode 100644 index 0000000000..d6cfb045bd --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/synology/configure.md @@ -0,0 +1,31 @@ +--- +title: "Configure Synology File Servers for Audit" +description: "Configure Synology File Servers for Audit" +sidebar_position: 10 +--- + +# Configure Synology File Servers for Audit + +Follow the steps to configure your Synology NAS devices to transmit the local system logs for +monitoring. + +**Step 1 –** Navigate to **Control Panel > File Services > SMB > Log Settings**. Please note that +all audit types should be enabled. + +**Step 2 –** Log in to the Synology Web Administration Console. + +**Step 3 –** Navigate to **Log Center > Log Sending** and configure the following: + +- Server – Provide the IP address or the computer listened by Syslog. It should be a running Netwrix + Syslog service or a third-party Syslog forward service. +- Port – Use the default value (514). +- Transfer protocol – select TCP or **UDP**. +- Log format – Set to "IETF (RFC 5424)". +- Enable secure connection – Use the default value. +- Import certificate – Use the default value. + +**Step 4 –** Click Apply. + +**NOTE:** Currently, Netwrix Auditor cannot collect activities using a local Synology user. Data +collection only supported via a domain user with the necessary access privileges to the Synology +file server. diff --git a/docs/auditor/10.8/configuration/fileservers/synology/overview.md b/docs/auditor/10.8/configuration/fileservers/synology/overview.md new file mode 100644 index 0000000000..a154aa9a22 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/synology/overview.md @@ -0,0 +1,58 @@ +--- +title: "Synology" +description: "Synology" +sidebar_position: 60 +--- + +# Synology + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - The log sending must be configured as described in the + [Configure Synology File Servers for Audit](/docs/auditor/10.7/configuration/fileservers/synology/configure.md) topic. + +Review a full list of object types Netwrix Auditor can collect on Synology NAS network devices. + +## Monitored Objects + +| Action | File | Folder | Share | +| ----------------------- | ---- | ------ | ----- | +| Added | + | + | - | +| Add (failed attempt) | - | - | - | +| Modified | + | - | - | +| Modify (failed attempt) | - | - | - | +| Moved | + | + | - | +| Move (failed attempt) | - | - | - | +| Read | + | - | - | +| Read (failed attempt) | - | - | - | +| Renamed | + | + | - | +| Rename (failed attempt) | - | - | - | +| Remove (failed attempt) | - | - | - | +| Copied | - | - | - | + +**NOTE:** For Synology system Auditor displays the actual time when the event occurred. The 'When' +column shows the time when the syslog message arrived. + +If an object has been moved between file shares, the product reports the following actions: + +- Read + Removed for the initial object + +- Added + Modified for the object to a new location diff --git a/docs/auditor/10.8/configuration/fileservers/synology/permissions.md b/docs/auditor/10.8/configuration/fileservers/synology/permissions.md new file mode 100644 index 0000000000..9af623b62f --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/synology/permissions.md @@ -0,0 +1,25 @@ +--- +title: "Permissions for Synology Auditing" +description: "Permissions for Synology Auditing" +sidebar_position: 30 +--- + +# Permissions for Synology Auditing + +Before you start creating a monitoring plan to audit your Qumulo or Synology file servers, plan for +the account that will be used for data collection – it should meet the requirements listed below. +Then you will provide this account in the monitoring plan wizard (or monitored item settings). + +Starting with version 9.96, you can use group Managed Service Accounts (gMSA) as data collecting +accounts. + +See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic and the +[Group Managed Service Accounts Overview](https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview) +Microsoft article for additional information. + +These group Managed Service Accounts should meet the related requirements, as listed below. + +**On the target server:** + +1. The account requires Read share permission on the audited shared folders. +2. The account requires Read NTFS permission on all objects in the audited folders. diff --git a/docs/auditor/10.8/configuration/fileservers/synology/ports.md b/docs/auditor/10.8/configuration/fileservers/synology/ports.md new file mode 100644 index 0000000000..1b541379b9 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/synology/ports.md @@ -0,0 +1,21 @@ +--- +title: "Synology Ports" +description: "Synology Ports" +sidebar_position: 20 +--- + +# Synology Ports + +Review a full list of protocols and ports required for Netwrix Auditor for Synology. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to remote ports on the source and inbound connections to local ports on + the target. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 514 UDP port. + +| Port | Protocol | Source | Target | Purpose | +| ---- | --------- | ---------------------- | ---------------------- | ------------------------------------------ | +| 514 | UDP / TCP | Monitored file servers | Netwrix Auditor Server | Getting events from monitored file servers | diff --git a/docs/auditor/10.8/configuration/fileservers/windows/_category_.json b/docs/auditor/10.8/configuration/fileservers/windows/_category_.json new file mode 100644 index 0000000000..7a17eae326 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/windows/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Windows File Servers", + "position": 70, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/fileservers/windows/advancedpolicy.md b/docs/auditor/10.8/configuration/fileservers/windows/advancedpolicy.md new file mode 100644 index 0000000000..dd3d6b750a --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/windows/advancedpolicy.md @@ -0,0 +1,53 @@ +--- +title: "Configure Advanced Audit Policies" +description: "Configure Advanced Audit Policies" +sidebar_position: 40 +--- + +# Configure Advanced Audit Policies + +Configure advanced audit policies to limit the range of events tracked and recorded by the product, +thus preventing your AuditArchive and the Security event log from overfilling. Perform procedures +below instead of the [Configure Local Audit Policies](/docs/auditor/10.7/configuration/fileservers/windows/localpolicy.md). + +## Configure Security Options + +Setting up both basic and advanced audit policies may lead to incorrect audit reporting. To force +basic audit policies to be ignored and prevent conflicts, enable the _Audit: Force audit policy +subcategory settings_ policy. + +Follow the steps to enforce advanced policies. + +**Step 1 –** On the audited server, open the Local Security Policy snap-in and navigate to Start > +Windows Administrative Tools > Local Security Policy. + +**Step 2 –** Navigate to Security Settings > Local Policies > Security Options and locate the Audit: +Force audit policy subcategory settings policy. + +![Local Security Policy snap-in ](/images/1secure/configuration/computer/manualconfig_fileserver_graudit_secpol2016.webp) + +**Step 3 –** Double-click the policy and enable it. + +## Configure Advanced Audit Policy on Windows Server 2016 and Above + +In Windows Server 2016 and above, Advanced audit policies are integrated with Group Policies, so +they can be applied via Group Policy Object or Local Security Policies. The procedure below +describes how to apply Advanced policies via Local Security Policy console. + +**Step 1 –** On the audited server, open the **Local Security Policy** snap-in and navigate to +Start > Windows Administrative Tools > Local Security Policy. + +**Step 2 –** In the left pane, navigate to Security Settings > Advanced Audit Policy Configuration > +System Audit Policies. + +**Step 3 –** Configure the following audit policies. + +| Policy Subnode | Policy Name | Audit Events | +| ------------------------------------------- | --------------------------------------------------------------------- | ----------------------------------------------------------------------------- | +| Object Access |
  • Audit File System
  • Audit Handle Manipulation
| "Success" and/or "Failure" depending on the type of events you want to track. | +|
  • Audit Detailed File Share
| "Failure" | | +|
  • Audit File Share
| "Success" | | +| Policy Change |
  • Audit Policy Change
| "Success" | +| Logon/Logoff |
  • Logon
| "Success" | +|
  • Logoff
| "Success" | | +| System |
  • Security State Change
| "Success" | diff --git a/docs/auditor/10.8/configuration/fileservers/windows/configuration.md b/docs/auditor/10.8/configuration/fileservers/windows/configuration.md new file mode 100644 index 0000000000..a81b5966f6 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/windows/configuration.md @@ -0,0 +1,60 @@ +--- +title: "Configure the Back up Files and Directories Policy" +description: "Configure the Back up Files and Directories Policy" +sidebar_position: 80 +--- + +# Configure the Back up Files and Directories Policy + +Configure this Back up Files and Directories policy via the Local Security Policy Snap-in or using +the Group Policy Management Console. + +Follow the steps to configure the Back up Files and Directories policy via the Local Security Policy +Snap-in. + +**Step 1 –** On any domain controller in the target domain, open the Local Security Policy snap-in: +navigate to Start > Windows Administrative Tools > Local Security Policy. + +**Step 2 –** Navigate to **Security Settings** > **Local Policies** > **User right Assignment**. + +**Step 3 –** Locate the Back up files and directories policy and double-click it. + +**Step 4 –** In the Back up files and directories Properties dialog, click **Add User or Group**, +specify the user that you want to define this policy for. + +The policy is now configured. + +Follow the steps to configure the Back up Files and Directories policy using the Group Policy +Management Console. + +**NOTE:** Perform this procedure only if the account selected for data collection is not a member of +the Domain Admins group. + +**Step 1 –** Open the Group Policy Management console on any domain controller in the target domain: +navigate to **Start** > **Windows Administrative Tools (Windows Server 2016/2019) or Administrative +Tools (Windows 2012 R2 and below)** > **Group Policy Management**. + +**Step 2 –** In the left pane, navigate to Forest: `` > Domains > `` > +Domain Controllers. Right-click the **effective domain controllers policy** (by default, it is the +Default Domain Controllers Policy), and select **Edit**. + +**Step 3 –** In the Group Policy Management Editor dialog, expand the Computer Configuration node on +the left and navigate to **Policies** > **Windows Settings** > **Security Settings** > **Local +Policies**. + +**Step 4 –** On the right, double-click the User Rights Assignment policy. + +**Step 5 –** Locate the Back up files and directories policy and double-click it. + +**Step 6 –** In the Back up files and directories Properties dialog, click Add User or Group and +specify the user that you want to define this policy for. + +**Step 7 –** Navigate to Start > Run and type **cmd**. Input the `gpupdate /force` command and press +Enter. The group policy will be updated. + +**Step 8 –** Type `repadmin /syncall` command and press Enter for replicate GPO changes to other +domain controllers. + +**Step 9 –** Ensure that new GPO settings applied on any audited domain controller. + +The policy is now configured. diff --git a/docs/auditor/10.8/configuration/fileservers/windows/eventlog.md b/docs/auditor/10.8/configuration/fileservers/windows/eventlog.md new file mode 100644 index 0000000000..ee1f453d21 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/windows/eventlog.md @@ -0,0 +1,33 @@ +--- +title: "Configure Event Log Size and Retention Settings" +description: "Configure Event Log Size and Retention Settings" +sidebar_position: 50 +--- + +# Configure Event Log Size and Retention Settings + +The procedure below describes one of the possible ways to adjust event log settings. If you have +multiple target computers, you need to perform this procedure on each of them. + +If you move security log files from the default system folder to a non-default one, you must reboot +your target server for the reports and search functionality to work properly. + +Follow the steps to configure Event Log Size and Retention Settings. + +**Step 1 –** On a target server, navigate to Start > Windows Administrative Tools > Event Viewer. + +**Step 2 –** Navigate to Event Viewer tree > Windows Logs, right-click **Security** and select +**Properties**. + +![Log Properties dialog box](/images/auditor/10.7/configuration/fileservers/windows/manualconfig_ws_eventviewerpr2016_thumb_0_0.webp) + +**Step 3 –** Make sure Enable logging is selected. + +**Step 4 –** In the Maximum log size field, specify the desired log size. + +**Step 5 –** Make sure the Do not overwrite events (Clear logs manually) check box is cleared. If +selected, change the retention method to _Overwrite events as needed (oldest events first)_. + +Make sure the Maximum security log size group policy does not overwrite your log settings. To check +this, start the Group Policy Management console, proceed to the GPO that affects your server, and +navigate to Computer Configuration > Policies > Windows Settings > Security Settings > Event Log. diff --git a/docs/auditor/10.8/configuration/fileservers/windows/localpolicy.md b/docs/auditor/10.8/configuration/fileservers/windows/localpolicy.md new file mode 100644 index 0000000000..d1b4bb662a --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/windows/localpolicy.md @@ -0,0 +1,29 @@ +--- +title: "Configure Local Audit Policies" +description: "Configure Local Audit Policies" +sidebar_position: 30 +--- + +# Configure Local Audit Policies + +You can choose to configure local audit policies or advanced audit policies.See the +[Configure Advanced Audit Policies](/docs/auditor/10.7/configuration/fileservers/windows/advancedpolicy.md) topic for more information. + +Follow the steps to configure local audit policies. + +**Step 1 –** On the audited server, open the Local Security Policy snap-in: navigate to Start > +Windows Administrative Tools > Local Security Policy. + +**Step 2 –** Navigate to Security Settings > Local Policies > Audit Policy. + +**Step 3 –** Configure the following audit policies. + +| Policy Name | Audit Events | +| ------------------------ | ------------ | +| Audit account management | "Success" | +| Audit object access | "Success" | +| Audit policy change | "Success" | + +Local audit policy is configured. + +![Local Security Policy snap-in](/images/1secure/configuration/computer/manualconfig_ws_local_audit_policies2016.webp) diff --git a/docs/auditor/10.8/configuration/fileservers/windows/objectlevel.md b/docs/auditor/10.8/configuration/fileservers/windows/objectlevel.md new file mode 100644 index 0000000000..b637281279 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/windows/objectlevel.md @@ -0,0 +1,111 @@ +--- +title: "Configure Object-Level Access Auditing" +description: "Configure Object-Level Access Auditing" +sidebar_position: 20 +--- + +# Configure Object-Level Access Auditing + +Netwrix Auditor can be configured to audit all access types, review the table below and select +options that you want to track: + +| Option | | Description | +| ----------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Changes | Successful | Use this option to track changes to your data. Helps find out who made changes to your files, including their creation and deletion. | +| Failed | Use this option to detect suspicious activity on your file server. Helps identify potential intruders who tried to modify or delete files, etc., but failed to do it. | | +| Read access | Successful | Use this option to supervise access to files containing confidential data intended for privileged users. Helps identify who accessed important files besides your trusted users. Enabling this option on public shares will result in high number of events generated on your file server and the amount of data written to the AuditArchive. | +| Failed | Use this option to track suspicious activity. Helps find out who was trying to access your private data without proper justification. Enabling this option on public shares will result in high number of events generated on your file server and the amount of data written to the AuditArchive. | | + +Actions reported by Netwrix Auditor vary depending on the file server type and the audited object +(file, folder, or share). The changes include creation, modification, deletion, moving, renaming, +and copying. To track the copy action, enable successful read access and change auditing. See the +[File Servers](/docs/auditor/10.7/configuration/fileservers/overview.md) topic for additional information. + +Perform one of the following procedures depending on the OS version you are using: + +- Configure Object-level Access Auditing on Windows Server 2012 and Above +- Configure Object-level access auditing on pre-Windows Server 2012 versions + +## Configure Object-level Access Auditing on Windows Server 2012 and Above + +Follow the steps to configure Object-level access auditing on Windows Server 2012 and above. + +**Step 1 –** Navigate to the target file share, right-click it and select **Properties**. + +**Step 2 –** In the `` Properties dialog box, select the Security tab and click +**Advanced**. + +**Step 3 –** In the Advanced Security Settings for `` dialog box, navigate to the +Auditing tab. + +![Advanced Security Settings for Share_Name dialog box](/images/1secure/configuration/computer/auditing_entries_netapp_2016.webp) + +**Step 4 –** Click **Add** to add a new principal. You can select **Everyone** (or another +user-defined group containing users that are granted special permissions) and click **Edit**. + +**Step 5 –** In the Auditing Entry for `` dialog box, click the **Select a principal** +link and specify **Everyone**. + +**NOTE:** You can specify any other user group, but in this case the emails will be sent with +warnings on incorrect audit configuration. The product will audit only user accounts that belong to +the selected group. + +**Step 6 –** Apply settings to your Auditing Entries depending on the access types that you want to +audit. If you want to audit all access types (successful reads, modification as well as failed read +and modification attempts), you need to add separate Auditing Entries for each file share. +Otherwise, reports will contain limited data and warning messages. + +Review the following for additional information: + +| Auditing Entry | | +| --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --- | +| Successful reads | | +| The Auditing Entry below shows Advanced Permissions for auditing successful reads only: ![manualconfig_fileserver_auditingentry_1_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_1_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"Files only"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| Successful changes | | +| The Auditing Entry below shows Advanced Permissions for auditing successful changes only: ![manualconfig_fileserver_auditingentry_2_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_2_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| Failed read attempts | | +| The Auditing Entry below shows Advanced Permissions for auditing failed read attempts: ![manualconfig_fileserver_auditingentry_3_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_3_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| Failed change attempts | | +| The Auditing Entry below shows Advanced Permissions for auditing failed change attempts: ![manualconfig_fileserver_auditingentry_4_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_4_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | + + +## Configure Object-level access auditing on pre-Windows Server 2012 versions + +**Step 1 –** Navigate to the target file share, right-click it and select **Properties**. + +**Step 2 –** In the **`` Properties** dialog, select the **Security** tab and click +**Advanced**. + +**Step 3 –** In the **Advanced Security Settings for ``** dialog, navigate to the +**Auditing** tab, click Edit. + +**Step 4 –** In a separate **Advanced Security Settings for ``** dialog, click Add to +add a principal. You can select **Everyone** (or another user-defined group containing users that +are granted special permissions) and click **Edit**. + +**Step 5 –** You can specify any other user group, but in this case Netwrix Auditor will send emails +with errors on incorrect audit configuration. This will not affect the reports or data searches +performed in the Auditor client and the product will only audit user accounts that belong to the +selected group. + +**Step 6 –** Apply settings to your Auditing Entries depending on the access types that you want to +audit. If you want to audit all access types (successful reads and changes as well as failed read +and change attempts), you need to add separate Auditing Entries for each file share. Otherwise, +reports will contain limited data and warning messages. Review the following for additional +information: + +- Successful reads +- Successful changes +- Failed read attempts +- Failed change attempts + +| Auditing Entry | +| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **Successful reads** | +| The Auditing Entry below shows Advanced Permissions for auditing successful reads only:
  • Apply onto—Select _"Files only"_.
  • Check _"Successful"_ and _"Failed"_ next to List folder / read data.
  • Make sure that the **Apply these auditing entries to objects and/or containers within this container only** checkbox is cleared.
| +| **Successful changes** | +| The Auditing Entry below shows Advanced Permissions for auditing successful changes only:
  • Apply onto—Select _"This folder, subfolders and files"_.
  • Check _"Successful"_ next to the following permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the **Apply these auditing entries to objects and/or containers within this container only** checkbox is cleared.
| +| **Failed read attempts** | +| The Auditing Entry below shows Advanced Permissions for auditing failed read attempts only:
  • Apply onto—Select _"This folder, subfolders and files"_.
  • Check _"Failed"_ next to List folder / read data.
  • Make sure that the **Apply these auditing entries to objects and/or containers within this container only** checkbox is cleared.
| +| **Failed change attempts** | +| The Auditing Entry below shows Advanced Permissions for auditing failed change attempts only:
  • Apply onto—Select _"This folder, subfolders and files"_.
  • Check _"Failed"_ next to the following permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the **Apply these auditing entries to objects and/or containers within this container only** checkbox is cleared.
| diff --git a/docs/auditor/10.8/configuration/fileservers/windows/overview.md b/docs/auditor/10.8/configuration/fileservers/windows/overview.md new file mode 100644 index 0000000000..0cb31e5957 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/windows/overview.md @@ -0,0 +1,278 @@ +--- +title: "Windows File Servers" +description: "Windows File Servers" +sidebar_position: 70 +--- + +# Windows File Servers + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +## Configuration Overview + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - On the Windows file server: + + - For a security principal (e.g., Everyone), the following options must be configured in the + Advanced Security > Auditing settings for the audited shared folders: + + | Advanced Security Option | Setting | + | ----------------------------------------------------------- | -------------------- | + | List Folder / Read Data (Files only) | "Success" and "Fail" | + | List Folder / Read Data (This folder, subfolders and files) | "Fail" | + | Create Files / Write Data\* | "Success" and "Fail" | + | Create Folders / Append Data\* | "Success" and "Fail" | + | Write Extended Attributes\* | "Success" and "Fail" | + | Delete Subfolders and Files\* | "Success" and "Fail" | + | Delete\* | "Success" and "Fail" | + | Change Permissions\* | "Success" and "Fail" | + | Take Ownership\* | "Success" and "Fail" | + + \* Select "Fail" only if you want to track failure events, it is not required for + success events monitoring. + + **NOTE:** If you want to get only state-in-time snapshots of your system configuration, + limit your settings to the permissions marked with \* and set it to "Success" (Apply + onto: This folder, subfolders and files). + + - The following Advanced audit policy settings must be configured: + + - The Audit: Force audit policy subcategory settings (Windows 7 or later) security + option must be enabled. + - **NOTE:** If you want to get only state-in-time snapshots of your system + configuration, limit your audit settings to the following policies: + + | Advanced Audit Policy | Setting | + | ----------------------------------------- | --------- | + | Object Access > Audit File Share | "Success" | + | Object Access > Audit Handle Manipulation | "Success" | + | Policy Change > Audit Audit Policy Change | "Success" | + + - The following legacy policies can be configured instead of advanced: + + - Audit object access policy must set to "Success" and "Failure." + - Audit logon events policy must be set to "Success." + - Audit system events policy must be set to "Success." + - Audit policy change must be set to "Success." + + - The Security event log maximum size must be set to 4GB. The retention method of the + Security event log must be set to _“Overwrite events as needed”_. + - The Remote Registry service must be started. + - The following inbound Firewall rules must be enabled: + + - Remote Event Log Management (NP-In)\* + - Remote Event Log Management (RPC)\* + - Remote Event Log Management (RPC-EPMAP)\* + - Windows Management Instrumentation (ASync-In) + - Windows Management Instrumentation (DCOM-In) + - Windows Management Instrumentation (WMI-In) + - Network Discovery (NB-Name-In) + - File and Printer Sharing (NB-Name-In) + - File and Printer Sharing (Echo Request - ICMPv4-In) + - File and Printer Sharing (Echo Request - ICMPv6-In) + + **NOTE:** The rules marked with \* are required only if you do not want to use + network traffic compression for auditing. + + - If you plan to audit Windows Server 2019 or Windows 10 Update 1803 without network + compression service, make sure the following inbound connection rules are enabled: + + - Remote Scheduled Tasks Management (RPC) + - Remote Scheduled Tasks Management (RPC-EMAP) + + - On the Auditor console computer: + + - If your file shares contain symbolic links and you want to collect state-in-time data for + these shares, the local-to-local, local-to-remote, remote-to-local, and remote-to-remote + symbolic link evaluations must be enabled on the computer that hosts Auditor Server. + +Consider the following: + +- To collect data from 32-bit operating systems, network traffic compression must be disabled. +- To collect data from Windows Failover Cluster, network traffic compression must be enabled. +- Scale-Out File Server (SOFS) cluster is not supported. +- Auditing of files and folders placed directly into the DFS namespace root is not supported, as + such configuration is not recommended by Microsoft. (See the Microsoft + [Placing files directly in the namespace share](https://learn.microsoft.com/en-us/archive/blogs/askds/common-dfsn-configuration-mistakes-and-oversights#placing-files-directly-in-the-namespace-share) + article for additional information.) Make sure the UNC path of a shared folder is placed within a + share targeted by a DFS folder. + +## Configuration Steps + +Follow the steps to configure Windows File Servers for auditing: + +**Step 1 –** Check requirements. Make sure the Windows File Servers you want to monitor meet the +requirements. + +**Step 2 –** Decide on audit data to collect. + +- Review the list of objects and attributes that can be monitored by Auditor: See the + [File Servers](/docs/auditor/10.7/configuration/fileservers/overview.md)topic for additional information. +- Plan for the file servers and shares you want to audit: +- - If you have multiple file shares frequently accessed by a significant number of users, it is + reasonable to audit object changes only. Tracking all events may result in too much data + written to the audit logs, whereas only some part of it may be of any interest. + - Audit flags must be set on every file share you want to audit. + - If your file shares are stored within one folder (or disk drive), you can configure audit + settings for this folder only. As a result, you will receive reports on all required access + types applied to all file shares within this folder. It is not recommended to configure audit + settings for system disks. + - By default, Auditor will monitor all shares stored in the specified location, except for + hidden shares (both default and user-defined). If you want to monitor user-defined hidden + shares, select the related option in the monitored item settings. + - Administrative hidden shares like default system root or Windows directory (_ADMIN$_), default + drive shares (_D$, E$_), etc. will not be monitored. + +**Step 3 –** Review considerations and limitations: + +**The following considerations and limitations refer to data collection:** + +- To collect data from 32-bit operating systems, network traffic compression must be disabled. +- To collect data from Windows Failover Cluster, network traffic compression must be enabled. +- Scale-Out File Server (SOFS) cluster is not supported. +- Several constraints apply to DFS auditing. See the DFS-Related Constraints topic for additional + information. + +**The following considerations and limitations refer to reporting:** + +- In the reports and search results, in some cases, Auditor displays not the actual time when the + event occurred but data collection time. +- Auditor may report on several unexpected changes with _who_ (initiator's account) reported as + _system_ due to the native Windows File Servers audit peculiarities. If you do not want to see + these changes, exclude them from the audit. See the [File Servers](/docs/auditor/10.7/configuration/fileservers/overview.md) topic for + additional information. For example - mass file removals, when target Windows server generates too + many events at a time and the product is unable to parse their sequences correctly. +- Due to Windows limitations, the _copy/rename/move_ actions on remote file shares may be reported + as two sequential actions: copying – as adding a new file and reading the initial file; + renaming/moving – as removing the initial file and adding a new file with the same name. +- To report on _copy_ actions on remote file shares, make sure that audit of successful read + operations is enabled. See the [Configure Object-Level Access Auditing](/docs/auditor/10.7/configuration/fileservers/windows/objectlevel.md) topic for + additional information. + +**Step 4 –** Apply required audit settings. + +Depending on your auditing requirements, you may need to audit your file server objects for: + +- Successful read attempts +- Successful modifications +- Failed read and modification attempts +- Failed modification attempts + +For that, object-level audit settings and appropriate audit policies should be set up. Besides, the +following should be configured for your Windows file servers: + +- Windows Event log size and retention settings +- Remote registry service +- Inbound connection rules for Windows firewall + +You can apply required audit settings to your Windows file servers in one of the following ways: + +- **Automatically** when creating a monitoring plan. + + In this case, the audit settings will be applied automatically, then they will be periodically + checked and adjusted if necessary. See the + [Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional + information. + +- **Manually.** To configure your Windows File Servers for monitoring manually, perform the + following procedures: + + - [Configure Object-Level Access Auditing](/docs/auditor/10.7/configuration/fileservers/windows/objectlevel.md) + - [Configure Local Audit Policies](/docs/auditor/10.7/configuration/fileservers/windows/localpolicy.md) or + [Configure Advanced Audit Policies](/docs/auditor/10.7/configuration/fileservers/windows/advancedpolicy.md) + - [Configure Event Log Size and Retention Settings](/docs/auditor/10.7/configuration/fileservers/windows/eventlog.md) + - [Enable Remote Registry Service](/docs/auditor/10.7/configuration/fileservers/windows/remoteregistryservice.md) + - [Windows File Server Ports](/docs/auditor/10.7/configuration/fileservers/windows/ports.md) + +With automatically applied settings, initial SACL configuration for DFS replication links may take +longer than with manual configuration — however, automatic configuration will help to minimize the +impact on the DFS backlog and replication process in general. + +**Step 5 –** Configure Data Collecting Account. See the +[Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional +information. + +**Step 6 –** Configure required protocols and ports. Set up protocols and ports. See the +[Dell Data Storage Ports](/docs/auditor/10.7/configuration/fileservers/delldatastorage/ports.md) topic for additional information. + +## DFS-Related Constraints + +Perform the following steps if planning to audit DFS files and folders: + +**Step 1 –** Auditor supports auditing of DFS and clustered file servers if Object Access Auditing +is enabled on DFS file shares or on every cluster node. + +**Step 2 –** When adding a cluster file server for auditing, it is recommended to specify a server +name of the **Role** server or a UNC path of the shared folder located on the **Role** server. + +**Step 3 –** When adding a DFS file share for auditing, specify a Windows file share item and +provide the UNC path of the whole namespace or UNC path of the DFS link (folder). For example: + +- _"\\domain\dfsnamespace\"_ (domain-based namespace) +- _"\\server\dfsnamespace\"_ (in case of stand-alone namespace); + +Auditing of files and folders placed directly into the DFS namespace root is not supported, as such +configuration is not recommended by Microsoft. See the +[Placing files directly in the namespace share](https://docs.microsoft.com/en-us/archive/blogs/askds/common-dfsn-configuration-mistakes-and-oversights#placing-files-directly-in-the-namespace-share) +section of the Microsoft article for additional information. Make sure the UNC path of a shared +folder is placed within a share targeted by a DFS folder. + +For recommendations on configuring DFS replication, refer to the following Netwrix knowledge base +article: +[Why did loss of performance occur when configuring audit settings for Windows File Servers?](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA00g000000H9SyCAK.html). +Remember that replication of namespace roots is not supported. + +## File Servers and Antivirus + +It is strongly recommended that you add the following executables to the list of exclusions for your +antivirus: + +- C:\Windows\SysWOW64\NwxExeSvc\NwxExeSvc.exe +- C:\Windows\SysWOW64\NwxExeSvc\NwxEventCollectorAgent.exe +- C:\Windows\SysWOW64\NwxExeSvc\NwxFsAgent.exe +- C:\Windows\SysWOW64\NwxExeSvc\NwxSaclTunerAgent.exe + +Otherwise, significant delays and performance issues may occur while collecting data. + +This happens because these executables access a large number of file server objects (files, +folders), fetching audit data — and your antivirus may treat this as a suspicious behavior. + +For some antiviruses (for example, Trend Micro) you may need to specify the folders to exclude, that +is, **C:\Windows\SysWOW64\NwxExeSvc**. Refer to your antivirus documentation for details. + +## Monitored Objects + +The following table lists the actions that can be performed with Windows-Based File Shares: + +| | File | Folder | Share | +| ------------------------ | ---- | ------ | ----- | +| Added | + | + | + | +| Add (failed attempt) | + | + | – | +| Modified | + | + | + | +| Modify (failed attempt) | + | + | + | +| Moved | + | + | – | +| Move (failed attempt) | – | – | – | +| Read | + | – | – | +| Read (failed attempt) | + | + | + | +| Renamed | + | + | – | +| Renamed (failed attempt) | – | – | – | +| Removed | + | + | + | +| Remove (failed attempt) | + | + | – | +| Copied | + | – | – | diff --git a/docs/auditor/10.8/configuration/fileservers/windows/permissions.md b/docs/auditor/10.8/configuration/fileservers/windows/permissions.md new file mode 100644 index 0000000000..84933026de --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/windows/permissions.md @@ -0,0 +1,35 @@ +--- +title: "Permissions for Windows File Server Auditing" +description: "Permissions for Windows File Server Auditing" +sidebar_position: 70 +--- + +# Permissions for Windows File Server Auditing + +Before creating a monitoring plan to audit your Windows file servers, plan for the account that will +be used for data collection . This account should meet the requirements listed below. You will +provide this account in the monitoring plan wizard or monitored item settings. + +Data Collection Accounts should meet the following policies and permissions: + +- Data collecting account on the target server must be a member of the local Administrators group. +- The **Manage auditing and security log** and Backup files and directories policies must be defined + for this account. See the + [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) and topics for + additional more information. +- The **Read** share permission on the audited shared folders. +- The Read NTFS permission on all objects in the audited folders. + +## Considerations for gMSA Account + +You can use group Managed Service Accounts (gMSA) as data collecting accounts. + +**NOTE:** On the Netwrix Auditor Server, the gMSA account must be a member of the local +Administrators group. + +For more information on gMSA, see the following: + +- [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) + +- Microsoft article: + [Group Managed Service Accounts Overview](https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview) diff --git a/docs/auditor/10.8/configuration/fileservers/windows/ports.md b/docs/auditor/10.8/configuration/fileservers/windows/ports.md new file mode 100644 index 0000000000..de421cc084 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/windows/ports.md @@ -0,0 +1,66 @@ +--- +title: "Windows File Server Ports" +description: "Windows File Server Ports" +sidebar_position: 10 +--- + +# Windows File Server Ports + +Review a full list of Windows File Server protocols and ports required for Netwrix Auditor for File +Servers. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to remote ports on the source and inbound connections to local ports on + the target. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 389 TCP port. On domain controllers in your domain +(target), allow inbound connections to local 389 TCP port. + +| Port | Protocol | Source | Target | Purpose | +| -------------------------- | -------- | ---------------------- | ------------------ | ----------------------------------------------------------------------------------------------------------- | +| Windows File Servers | | | | | +| 389 | TCP/UDP | Netwrix Auditor Server | Domain controllers | LDAP DC query Account resolve | +| 135 + Dynamic: 1024 -65535 | TCP | Netwrix Auditor Server | Monitored computer | Windows Management Instrumentation Firewall configuration Network Traffic Compression Service communication | +| 135 | TCP | Netwrix Auditor Server | Monitored computer | Service Control Manager Remote Protocol (Network Traffic Compression Service) installation | +| 137 | UDP | Netwrix Auditor Server | Monitored computer | File and Printer Sharing (NetBIOS Name Resolution) | +| 138 | UDP | Netwrix Auditor Server | Monitored computer | File and Printer Sharing (NetBIOS Datagram Service) | +| 139 | TCP | Netwrix Auditor Server | Monitored computer | File and Printer Sharing (NetBIOS Session Service) | +| 445 | TCP | Netwrix Auditor Server | Monitored computer | SMB 2.0/3.0 | +| 3268 | TCP | Netwrix Auditor Server | Domain controllers | LDAP Group membership GC search | + +## Configure Windows Firewall Inbound Connection Rules + +You can also configure Windows Firewall settings through Group Policy settings. To do this, edit the +GPO affecting your firewall settings. Navigate to Computer Configuration > Administrative +Templates > Network >Network Connections > Windows Firewall, select Domain Profile or Standard +Profile. Then, enable the Allow inbound remote administration exception. + +**Step 1 –** On each audited server, navigate to **Start** > **Control Panel** and select **Windows +Firewall**. + +**Step 2 –** In the Help Protect your computer with Windows Firewall page, click **Advanced +settings** on the left. + +**Step 3 –** In the Windows Firewall with Advanced Security dialog, select **Inbound Rules** on the +left. + +![manualconfig_nla_inbound_connections2016](/images/1secure/configuration/logonactivity/manualconfig_nla_inbound_connections2016.webp) + +**Step 4 –** Enable the following inbound connection rules: + +- Remote Event Log Management (NP-In) +- Remote Event Log Management (RPC) +- Remote Event Log Management (RPC-EPMAP) +- Windows Management Instrumentation (ASync-In) +- Windows Management Instrumentation (DCOM-In) +- Windows Management Instrumentation (WMI-In) +- Network Discovery (NB-Name-In) +- File and Printer Sharing (NB-Name-In) +- File and Printer Sharing (Echo Request - ICMPv4-In) +- File and Printer Sharing (Echo Request - ICMPv6-In) +- Remote Service Management (NP-In) +- Remote Service Management (RPC) +- Performance Logs and Alerts (DCOM-In) +- Performance Logs and Alerts (Tcp-In) diff --git a/docs/auditor/10.8/configuration/fileservers/windows/remoteregistryservice.md b/docs/auditor/10.8/configuration/fileservers/windows/remoteregistryservice.md new file mode 100644 index 0000000000..cc51fe8ae2 --- /dev/null +++ b/docs/auditor/10.8/configuration/fileservers/windows/remoteregistryservice.md @@ -0,0 +1,26 @@ +--- +title: "Enable Remote Registry Service" +description: "Enable Remote Registry Service" +sidebar_position: 60 +--- + +# Enable Remote Registry Service + +Follow the steps to enable the Remote Registry service. + +**Step 1 –** Navigate to Start > Windows Administrative Tools > Services. + +![Services Console](/images/1secure/configuration/computer/manualconfig_genevents_remoteregistry2016.webp) + +**Step 2 –** In the Services window, locate the Remote Registry service, right-click it and select +**Properties**. + +**Step 3 –** In the Remote Registry Properties dialog box, make sure the Startup type parameter is +set to _Automatic_ and click **Start**. + +![Remote Registry Properties dialog box](/images/1secure/configuration/computer/manualconfig_genevents_remoteregistry_start2016.webp) + +**Step 4 –** In the Services window, ensure that the Remote Registry service has the _Running_ +status on Windows Server 2012 and above. + +**NOTE:** The Remote Registry service should be enabled on the target server. diff --git a/docs/auditor/10.8/configuration/grouppolicy/_category_.json b/docs/auditor/10.8/configuration/grouppolicy/_category_.json new file mode 100644 index 0000000000..2c12dabf6a --- /dev/null +++ b/docs/auditor/10.8/configuration/grouppolicy/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Group Policy", + "position": 50, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/grouppolicy/overview.md b/docs/auditor/10.8/configuration/grouppolicy/overview.md new file mode 100644 index 0000000000..e34c0f7836 --- /dev/null +++ b/docs/auditor/10.8/configuration/grouppolicy/overview.md @@ -0,0 +1,46 @@ +--- +title: "Group Policy" +description: "Group Policy" +sidebar_position: 50 +--- + +# Group Policy + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - Configure the domain for auditing. See the + [Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md) topic for + information on configuring the domain. + - On the Auditor console computer: + + - If you have enabled automatic log backup for the Security log of your domain controller, + you can instruct Auditor to clear the old backups automatically. For that, use the + **CleanAutoBackupLogs** registry key, as described in the + [Active Directory Registry Key Configuration](/docs/auditor/10.7/configuration/activedirectory/registrykey.md) topic. + + **_RECOMMENDED:_** Adjust retention period for the backup files accordingly (default is + **50** hours). See the + [Adjust Security Event Log Size and Retention](/docs/auditor/10.7/configuration/activedirectory/securitylog.md) topic. + + - To provide for event data collection, the Secondary Logon service must be up and running . + Open **Administrative Tools** > **Services**, right-click the **Secondary Logon** service + and on the **General** tab make sure that Startup type for this service is other than + _Disabled_. diff --git a/docs/auditor/10.8/configuration/grouppolicy/permissions.md b/docs/auditor/10.8/configuration/grouppolicy/permissions.md new file mode 100644 index 0000000000..8c6c7d5189 --- /dev/null +++ b/docs/auditor/10.8/configuration/grouppolicy/permissions.md @@ -0,0 +1,176 @@ +--- +title: "Permissions for Group Policy Auditing" +description: "Permissions for Group Policy Auditing" +sidebar_position: 30 +--- + +# Permissions for Group Policy Auditing + +Before you start creating a monitoring plan to audit the group policy in the domain, plan for the +account that will be used for data collection – it should meet the requirements listed below. Then +you will provide this account in the monitoring plan wizard (or in the monitored item settings). + +You can use group Managed Service Accounts (gMSA) as data collecting accounts. + +See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic and the +following Microsoft article: +[Group Managed Service Accounts Overview](https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview) +for additional information about gMSA. + +## Account Requirements + +**NOTE:** These group Managed Service Accounts should also meet the related requirements. See the +[Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic and the following +Microsoft article: +[Group Managed Service Accounts Overview](https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview) +for additional information about gMSA. + +The account used for data collection must meet the following requirements: + +- Member of the local Administrators group on the target server. +- Member of the Domain Admins group on the target server. + + **NOTE:** This covers all the required permissions below and is a mandatory setting if you want + to use network traffic compression for data collection. + + OR + +- The combination of the following rights and permissions if you plan to disable network traffic + compression for your monitoring plan or, for some reasons, do not want to add this account to the + **Domain Admins** group: + + - **Manage auditing and security log** policy must be defined for this account. + See the [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) topic + for additional information. + - If you plan to process Active Directory **Deleted Objects** container, **Read** permission on + this container is required. See the + [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) topic for + additional information. + +## Additional Configuration for Domain Controller's Event Logs Auto-backup + +The following is required if auto-backup is _enabled_ for the domain controller event logs: + +- Permissions to access the _HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Security_ + registry key on the domain controllers in the target domain. See the Assign Permission to Read the + Registry Key topic for additional information. +- Membership in one of the following groups: **Administrators**, **Print Operators**, **Server + Operators**. +- Read/Write share permission and Full control security permission on the logs backup folder. + +## Assign Permission to Read the Registry Key + +This permission is required only if the account selected for data collection is not a member of the +Domain Admins group. + +This permission should be assigned on each domain controller in the audited domain, so if your +domain contains multiple domain controllers, it is recommended to assign permissions through Group +Policy, or automatically using +[Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md). + +To assign permissions manually, use the Registry Editor snap-in or the Group Policy Management +console. + +Assign Permission Via the Registry Editor Snap-in + +Follow the steps to assign permission via the Registry Editor snap-in: + +**Step 1 –** On your target server, open Registry Editor: navigate to **Start > Run** and type +_"regedit"_. + +**Step 2 –** In the left pane, navigate to _HKEY_LOCAL_MACHINE\SYSTEM\CurrentControl +Set\Services\EventLog\Security_. + +**Step 3 –** Right-click the **Security** node and select **Permissions** from the pop-up menu. + +**Step 4 –** Click **Add** and enter the name of the user that you want to grant permissions to. + +**Step 5 –** Check **Allow** next to the **Read** permission. + +**Step 6 –** For auditing Logon Activity, you also need to assign the Read permission to the +_HKEY_LOCAL_MACHINE\SECURITY\Policy\PolAdtEv_ registry key. + +To assign permission using the Group Policy Management console + +Assign Permission Using the Group Policy Management Console + +Follow the steps to assign permission using the Group Policy Management console: + +**Step 1 –** Open the Group Policy Management console on any domain controller in the target domain: +navigate to Start > Windows Administrative Tools (Windows Server 2016/2019) or Administrative Tools +(Windows 2012 R2 and below) > Group Policy Management. + +**Step 2 –** In the left pane, navigate to Forest: `` > Domains > `` > +Domain Controllers. Right-click the effective domain controllers policy (by default, it is the +_Default Domain Controllers Policy_), and select Edit . + +**Step 3 –** In the Group Policy Management Editor dialog, expand the Computer Configuration node on +the left and navigate to Policies > Windows Settings > Security Settings > Registry. + +**Step 4 –** Right-click in the pane and select Add Key. + +**Step 5 –** Navigate to `HKEY_LOCAL_MACHINE\SECURITY\Policy\PolAdtEv` and click OK. + +**Step 6 –** Click Add and enter the name of the user that you want to grant permissions to and +press Enter. + +**Step 7 –** Check Allow next to the _"Read"_ permission and click OK + +**Step 8 –** In the pop-up window, select Propagate inheritable permissions to all subkeys and click +OK. + +**Step 9 –** Repeat the steps 4-8 for keys below: + +- `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg`; +- `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security`. + +**Step 10 –** Close Group Policy Management console. + +**Step 11 –** Navigate to Start > Run and type "_cmd_". Input the `gpupdate /force` command and +press Enter. The group policy will be updated. + +**Step 12 –** Type `repadmin /syncall` command and press Enter for replicate GPO changes to other +domain controllers. + +**Step 13 –** Ensure that new GPO settings were applied to the domain controllers. + +## Considerations for Netwrix Privilege Secure Integration + +Starting with version 10.7, you can use Netwrix Privilege Secure to manage the account for +collecting data, after configuring the integration. See the +[Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information +about integration and supported data sources. In this case, the credentials will not be stored by +Netwrix Auditor. Instead, they will be managed by Netwrix Privilege Secure and provided on demand, +ensuring password rotation or using temporary accounts for data collection. + +Follow the steps to use Netwrix Privilege Secure as an account for data collection. + +**Step 1 –** Select the desired item. + +**Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data +collection. + +![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) + +**Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. +Credential-based is the default option. Refer to the +[Netwrix Privilege Secure](https://helpcenter.netwrix.com/category/privilegesecure_accessmanagement) +documentation to learn more about Access Policies. + +In this case, you need to provide the username of the account managed by Netwrix Privilege Secure, +and to which Netwrix Auditor has the access through a Credential-based access policy. + +**NOTE:** Netwrix recommends using different credentials for different monitoring plans and data +sources. + +![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) + +The second option is Resource-based. To use this option, you need to provide the Activity and +Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure +that you specified the same names as in Netwrix Privilege Secure. + +The Resource name in this case is where the activity will be performed. For example, if you grant +the data collecting account the access to a local Administrators group - the resource is the server +where the permission will be granted. + +Netwrix Privilege Secure is ready to use as an account for data collection. diff --git a/docs/auditor/10.8/configuration/grouppolicy/ports.md b/docs/auditor/10.8/configuration/grouppolicy/ports.md new file mode 100644 index 0000000000..8a5ecb78f2 --- /dev/null +++ b/docs/auditor/10.8/configuration/grouppolicy/ports.md @@ -0,0 +1,29 @@ +--- +title: "Group Policy Ports" +description: "Group Policy Ports" +sidebar_position: 10 +--- + +# Group Policy Ports + +Review a full list of protocols and ports required for monitoring Active Directory, Exchange, and +Group Policy. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to remote ports on the source and inbound connections to local ports on + the target. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 389 TCP port. On domain controllers in your domain +(target), allow inbound connections to the local 389 TCP port. + +| Port | Protocol | Source | Target | Purpose | +| ---------------------------------- | -------- | ---------------------- | ------------------ | ---------------------------------------------------------------------------------------------- | +| 389 | TCP/UDP | Netwrix Auditor Server | Domain controllers | LDAP Common queries | +| 3268 | TCP | Netwrix Auditor Server | Domain controllers | LDAP Group membership GC search | +| 3269 | TCP | Netwrix Auditor Server | Domain controllers | Global catalog LDAP over SSL | +| 88 | TCP/UDP | Netwrix Auditor Server | Domain controllers | Kerberos authentication | +| 135 and dynamic range: 1024 -65535 | TCP | Netwrix Auditor Server | Domain controllers | Windows Management Instrumentation. `gpupdate /force ` | +| 445 | TCP | Netwrix Auditor Server | Domain controllers | SMB 2.0/3.0 Authenticated communication between Netwrix Auditor Server and domain controllers. | +| 53 | UDP | Netwrix Auditor Server | DNS Server | DNS Client | diff --git a/docs/auditor/10.8/configuration/grouppolicy/registrykey.md b/docs/auditor/10.8/configuration/grouppolicy/registrykey.md new file mode 100644 index 0000000000..1815b48baa --- /dev/null +++ b/docs/auditor/10.8/configuration/grouppolicy/registrykey.md @@ -0,0 +1,28 @@ +--- +title: "Group Policy Registry Keys" +description: "Group Policy Registry Keys" +sidebar_position: 20 +--- + +# Group Policy Registry Keys + +Review the basic registry keys that you may need to configure for monitoring Group Policy with +Netwrix Auditor. Navigate to Start → Run and type _"regedit"_. + +| Registry key (REG_DWORD type) | Description / Value | +| -------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Netwrix Auditor\AD Change Reporter | | +| CleanAutoBackupLogs | Defines the retention period for the security log backups: - 0—Backups are never deleted from Domain controllers - [X]— Backups are deleted after [X] hours | +| GPOBackup | Defines whether to backup GPOs during data collection: - 0—No - 1—Yes | +| GPOBackupDays | Defines the backup frequency: - 0—Backup always - X—Once in X days GPOBackup must be set to _"1"_. | +| IgnoreAuditCheckResultError | Defines whether audit check errors should be displayed in the Activity Summary footer: - 0—Display errors - 1—Do not display errors | +| IgnoreRootDCErrors | Defines whether to display audit check errors for the root domain (when data is collected from a child domain) in the Activity Summary footer: - 0—Display errors - 1—Do not display errors | +| ProcessBackupLogs | Defines whether to process security log backups: - 0—No - 1—Yes Even if this key is set to _"0"_, the security log backups will not be deleted regardless of the value of the CleanAutoBackupLogs key. | +| HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Netwrix Auditor\AD Change Reporter\ | | +| CollectLogsMaxThreads | Defines the number of Domain Controllers to simultaneously start log collection on. | +| HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Netwrix Auditor\ AD Change Reporter\\Database settings | | +| SessionImportDays | Defines the frequency of a full snapshot upload: - X—Once in X days | +| HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Netwrix Auditor\Management Console\Database settings | | +| overwrite_datasource | Defines whether to overwrite the database connection settings (stored in the reports data source) if they differ from the SQL server settings specified when configuring the monitoring plan: - 0—No - 1—Yes | +| SqlOperationTimeout | Defines the timeout for executing SQL queries such as data selection, insertion or deletion (in seconds). | +| timeout | Defines the Audit Database connection timeout (in seconds). | diff --git a/docs/auditor/10.8/configuration/logonactivity/_category_.json b/docs/auditor/10.8/configuration/logonactivity/_category_.json new file mode 100644 index 0000000000..03b517a218 --- /dev/null +++ b/docs/auditor/10.8/configuration/logonactivity/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Logon Activity", + "position": 60, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/logonactivity/advancedpolicy.md b/docs/auditor/10.8/configuration/logonactivity/advancedpolicy.md new file mode 100644 index 0000000000..bab0e22308 --- /dev/null +++ b/docs/auditor/10.8/configuration/logonactivity/advancedpolicy.md @@ -0,0 +1,68 @@ +--- +title: "Configure Advanced Audit Policies" +description: "Configure Advanced Audit Policies" +sidebar_position: 30 +--- + +# Configure Advanced Audit Policies + +You can configure advanced audit policies instead of basic domain policies to collect Logon Activity +changes with more granularity. + +Perform the following procedures: + +- Configuring security options +- Configuring advanced audit policies + +## Configuring security options + +Setting up both basic and advanced audit policies may lead to incorrect audit reporting. To force +basic audit policies to be ignored and prevent conflicts, enable the _Audit: Force audit policy +subcategory settings_ policy. + +To do it, perform the following steps: + +1. Open the **Group Policy Management** console on any domain controller in the target domain: + navigate to Start > Windows Administrative Tools (Windows Server 2016 and higher) or + Administrative Tools (Windows 2012) **Group Policy Management.** +2. In the left pane, navigate to **Forest: `` > Domains > ``** **> Domain + Controllers**. Right-click the effective domain controllers policy (by default, it is the + **Default Domain Controllers Policy**), and select **Edit** from the pop-up menu. +3. In the Group Policy Management Editor dialog, expand the Computer Configuration node on the left + and navigate to Policies → Windows Settings → Security Settings → Local Policies → Security + Options. +4. Locate the Audit: Force audit policy subcategory settings to override audit policy category + settings and make sure that policy setting is set to _"Enabled"_. + + ![manualconfig_ad_nla_audit_force_winserver2016](/images/1secure/configuration/ad/manualconfig_ad_nla_audit_force_winserver2016.webp) + +5. Run the following command to update group policy: + + `gpupdate /force` + +## Configuring advanced audit policies + +1. Open the **Group Policy Management** console on any domain controller in the target domain: + navigate to Start > Windows Administrative Tools (Windows Server 2016 and higher) or + Administrative Tools (Windows 2012) **Group Policy Management.** +2. In the left pane, navigate to **Forest: `` > Domains > ``** **> Domain + Controllers**. Right-click the effective domain controllers policy (by default, it is the + **Default Domain Controllers Policy**), and select **Edit** from the pop-up menu. +3. In the Group Policy Management Editor dialog, expand the Computer Configuration node on the left + and navigate to Policies → Windows Settings → Security Settings → Advanced Audit Policy + Configuration → Audit Policies . +4. Configure the following audit policies. + + | Policy Subnode | Policy Name | Audit Events | + | ---------------------------------- | ---------------------------------------------------------------------------------------------------------------- | --------------------------- | + | Account Logon | - Audit Kerberos Service Ticket Operations - Audit Kerberos Authentication Service - Audit Credential Validation | _"Success"_ and _"Failure"_ | + | - Audit Other Account Logon Events | _"Success"_ and _"Failure"_ | | + | Logon/Logoff | - Audit Logoff - Audit Other Logon/Logoff Events | _"Success"_ | + | - Audit Logon | _"Success"_ and _"Failure"_ | | + | System | - Audit Security State Change | _"Success"_ | + + ![manualconfig_nla_advpol2016](/images/1secure/configuration/logonactivity/manualconfig_nla_advpol2016.webp) + +5. Run the following command to update group policy: + + `gpupdate /force` diff --git a/docs/auditor/10.8/configuration/logonactivity/basicpolicy.md b/docs/auditor/10.8/configuration/logonactivity/basicpolicy.md new file mode 100644 index 0000000000..b5f0ffc556 --- /dev/null +++ b/docs/auditor/10.8/configuration/logonactivity/basicpolicy.md @@ -0,0 +1,34 @@ +--- +title: "Configure Basic Domain Audit Policies" +description: "Configure Basic Domain Audit Policies" +sidebar_position: 20 +--- + +# Configure Basic Domain Audit Policies + +Basic local audit policies allow tracking changes to user accounts and groups and identifying +originating workstations. You can configure advanced audit policies for the same purpose too. See +the [Configure Advanced Audit Policies](/docs/auditor/10.7/configuration/logonactivity/advancedpolicy.md) topic for additional information. + +1. Open the **Group Policy Management** console on any domain controller in the target domain: + navigate to Start > Windows Administrative Tools (Windows Server 2016 and higher) or + Administrative Tools (Windows 2012) **Group Policy Management.** +2. In the left pane, navigate to **Forest: `` > Domains > ``** **> Domain + Controllers**. Right-click the effective domain controllers policy (by default, it is the + **Default Domain Controllers Policy**), and select **Edit** from the pop-up menu. +3. In the **Group Policy Management Editor** dialog, expand the **Computer Configuration** node on + the left and navigate to **Policies → Windows Settings → Security Settings → Local Policies → + Audit Policy.** +4. Configure the following audit policies. + + | Policy | Audit Events | + | -------------------------- | --------------------------- | + | Audit logon events | _"Success"_ and _"Failure"_ | + | Audit account logon events | _"Success"_ and _"Failure"_ | + | Audit system events | _"Success"_ | + + ![manualconfig_nla_auditpolicies2016](/images/1secure/configuration/logonactivity/manualconfig_nla_auditpolicies2016.webp) + +5. Run the following command to update group policy: + + `gpupdate /force` diff --git a/docs/auditor/10.8/configuration/logonactivity/overview.md b/docs/auditor/10.8/configuration/logonactivity/overview.md new file mode 100644 index 0000000000..3b09b1be4d --- /dev/null +++ b/docs/auditor/10.8/configuration/logonactivity/overview.md @@ -0,0 +1,78 @@ +--- +title: "Logon Activity" +description: "Logon Activity" +sidebar_position: 60 +--- + +# Logon Activity + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. + + - For both new and existing monitoring plans, you can click **Launch Audit Configuration + Assistant** (in the wizard step or in the plan settings, respectively) to launch a special + tool that can detect current infrastructure settings and adjust them as needed for monitoring. + See the [Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md) topic for + additional information. + +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - The following policies must be set to _"Success"_ and _"Failure"_ for the effective domain + controllers policy: + + - Audit Logon Events + - Audit Account Logon Events + + - The Audit system events policy must be set to _"Success"_ for the effective domain controllers + policy. + - The Advanced audit policy settings can be configured instead of basic. + - The Maximum Security event log size must be set to 4GB. The retention method of the Security + event log must be set to _“Overwrite events as needed”_ or _"Archive the log when full"_. + - The following Windows Firewall inbound rules must be enabled: + + - Remote Event Log Management (NP-In) + - Remote Event Log Management (RPC) + - Remote Event Log Management (RPC-EPMAP) + +See the following topics for additional information: + +- [Configure Basic Domain Audit Policies](/docs/auditor/10.7/configuration/logonactivity/basicpolicy.md) +- [Configure Advanced Audit Policies](/docs/auditor/10.7/configuration/logonactivity/advancedpolicy.md) +- [Configure Security Event Log Size and Retention Settings](/docs/auditor/10.7/configuration/logonactivity/securityeventlog.md) +- [ Logon Activity Ports](/docs/auditor/10.7/configuration/logonactivity/ports.md) + +## Logon Activity Actions + +Review a full list of actions captured when monitoring Logon Activity with Netwrix Auditor. + +**NOTE:** Please consider the following: + +- Logon activity by local accounts is not reported +- Logoff activity from workstations is not reported +- Logoff activity from Domain Controllers is reported + +For the attributes marked with asterisk (\*) _what_ changed is not reported. + +| Action | Object Type | Attributes | +| ----------------- | -------------------------- | ------------------------------------------------------------------------------------------------------------------------- | +| Successful Logon | Logon | — | +| Interactive Logon | A session was reconnected. | | +| Failed Logon | Logon\* | Cause description. The number of matching events if the logon attempt failed several times during a short period of time. | +| Interactive Logon | | | +| Logoff | Interactive Logon | A session was disconnected. Session duration (if the corresponding logon was found). | diff --git a/docs/auditor/10.8/configuration/logonactivity/permissions.md b/docs/auditor/10.8/configuration/logonactivity/permissions.md new file mode 100644 index 0000000000..9ff292b1ed --- /dev/null +++ b/docs/auditor/10.8/configuration/logonactivity/permissions.md @@ -0,0 +1,63 @@ +--- +title: "Permissions for Logon Activity Auditing" +description: "Permissions for Logon Activity Auditing" +sidebar_position: 50 +--- + +# Permissions for Logon Activity Auditing + +Before you start creating a monitoring plan to audit the logon activity in your domain, determine +the domain account that will be used for data collection. + +Depending on the network traffic compression setting you need to use, one of the following is +required: + +- If network traffic compression is enabled, then the account must belong to the Domain Admins + group; +- If network traffic compression is disabled, then you can choose between account which belongs to + the Domain Admins group or non-administrative account. See the Configure Non-Administrative + Account to Collect Logon Activity topic below for additional information. + +Afterward, include this account in the monitoring plan wizard. + +Please consider the following: + +- For the data collecting account, you should use a different account than the one Auditor is using + to access the database. +- If gMSA is being used, data collecting account should be a member of the local Administrators + group on the Netwrix Auditor host. + +## Configure Non-Administrative Account to Collect Logon Activity + +This section contains instructions on how to configure an account to collect Logon Activity with +minimum rights assignment. The instructions below apply only if you are going create a monitoring +plan with disabled network traffic compression and do not want to adjust audit settings +automatically. + +Before creating an account, grant the _Read_ permission on the SECURITY registry key +`(HKEY_LOCAL_MACHINE\SECURITY)` for an admin account under which you will make changes in Group +Policy. + +Follow the steps to configure non-administrative account to collect logon activity: + +**Step 1 –** Create a domain user with the following privileges: + +- Back up files and directories. See the +  [Configure the Back up Files and Directories Policy](/docs/auditor/10.7/configuration/fileservers/windows/configuration.md) + topic for additional information. +- Log on as a batch job. See the + [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) topic for + additional information. +- Manage auditing and security log. See the + [Configure the Manage Auditing and Security Log Policy](/docs/auditor/10.7/configuration/activedirectory/permissions.md#configure-the-manage-auditing-and-security-log-policy) + topic for additional information. + +**Step 2 –** Grant the _Read_ permission on the following registry keys to this user: + +- `HKEY_LOCAL_MACHINE\SECURITY\Policy\PolAdtEv` +- `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg` +- `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security` + +See the +[Assign Permission To Read the Registry Key](/docs/auditor/10.7/configuration/windowsserver/permissions.md#assign-permission-to-read-the-registry-key) +topic for additional information on how to do it using Registry Editor. diff --git a/docs/auditor/10.8/configuration/logonactivity/ports.md b/docs/auditor/10.8/configuration/logonactivity/ports.md new file mode 100644 index 0000000000..069ec886a0 --- /dev/null +++ b/docs/auditor/10.8/configuration/logonactivity/ports.md @@ -0,0 +1,51 @@ +--- +title: "Logon Activity Ports" +description: "Logon Activity Ports" +sidebar_position: 10 +--- + +# Logon Activity Ports + +Review a full list of protocols and ports required for monitoring Logon Activity. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to remote ports on the source and inbound connections to local ports on + the target. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 389 TCP port. On domain controllers in your domain +(target), allow inbound connections to local 389 TCP port. + +| Port | Protocol | Source | Target | Purpose | +| -------------------------- | -------- | ---------------------- | ------------------ | ----------------------------------------------------------------------- | +| 389 | TCP | Netwrix Auditor Server | Domain controllers | LDAP DC query Account resolve | +| 53 | TCP | Netwrix Auditor Server | DNS Server | DNS Client | +| 135 + Dynamic: 1024 -65535 | TCP | Netwrix Auditor Server | Domain controllers | Windows Management Instrumentation Firewall configuration | +| 135 | TCP | Netwrix Auditor Server | Domain controllers | Service Control Manager Remote Protocol (RPC) Core Service installation | +| 137 through 139 | UDP | Netwrix Auditor Server | Domain controllers | Service Control Manager Remote Protocol (RPC) Core Service installation | +| 445 | TCP | Netwrix Auditor Server | Domain controllers | SMB 2.0/3.0 | + +## Configure Windows Firewall Inbound Connection Rules + +For successful data collection, Netwrix Auditor may have to create inbound Firewall rules. If you do +not enable the Network traffic compression option, the product will try creating these rules +automatically and will notify you it fails to do so. In this case, you have to configure Windows +Firewall inbound rules manually. + +**Step 1 –** On every domain controller, navigate to **Start → Control Panel** and select **Windows +Firewall**. + +**Step 2 –** In the **Help Protect your computer with Windows Firewall** page, click **Advanced +settings** on the left. + +**Step 3 –** In the Windows Firewall with Advanced Security dialog, select Inbound Rules on the +left. + +![manualconfig_nla_inbound_connections2016](/images/1secure/configuration/logonactivity/manualconfig_nla_inbound_connections2016.webp) + +**Step 4 –** Enable the following inbound connection rules: + +- Remote Event Log Management (NP-In) +- Remote Event Log Management (RPC) +- Remote Event Log Management (RPC-EPMAP) diff --git a/docs/auditor/10.8/configuration/logonactivity/securityeventlog.md b/docs/auditor/10.8/configuration/logonactivity/securityeventlog.md new file mode 100644 index 0000000000..37a52fb8ca --- /dev/null +++ b/docs/auditor/10.8/configuration/logonactivity/securityeventlog.md @@ -0,0 +1,36 @@ +--- +title: "Configure Security Event Log Size and Retention Settings" +description: "Configure Security Event Log Size and Retention Settings" +sidebar_position: 40 +--- + +# Configure Security Event Log Size and Retention Settings + +Follow the steps to configure Security Event Log settings: + +**Step 1 –** Open the **Group Policy Management** console on any domain controller in the target +domain: navigate to Start > Windows Administrative Tools (Windows Server 2016 and higher) or +Administrative Tools (Windows 2012) **Group Policy Management.** + +**Step 2 –** In the left pane, navigate to **Forest: `` > Domains > ``** +**> Domain Controllers**. Right-click the effective domain controllers policy (by default, it is the +**Default Domain Controllers Policy**), and select **Edit** from the pop-up menu. + +**Step 3 –** Navigate to **Computer Configuration > Policies > Windows Settings > Security +Settings > Event Log** and double-click the **Maximum security log size** policy. + +![manualconfig_grouppolicymaxsecuritysizewinserver2016](/images/1secure/configuration/logonactivity/manualconfig_grouppolicymaxsecuritysizewinserver2016.webp) + +**Step 4 –** In the Maximum security log size Properties dialog, select **Define this policy +setting** and set maximum security log size to **4194240** kilobytes (4GB). + +**Step 5 –** Select the **Retention method for security log** policy. In the Retention method for +security log Properties dialog, check **Define this policy** and select **Overwrite events as +needed**. + +**Step 6 –** Run the following command to update group policy: `gpupdate /force` + +**NOTE:** After configuring security event settings via Group Policy, you may notice that the log +size on a specific computer is not set correctly. In this case, follow the resolution steps from the +Netwrix Knowledge base article to fix the issue: +[Security log settings do not apply via GPO](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u000000HDk6CAG.html). diff --git a/docs/auditor/10.8/configuration/microsoft365/_category_.json b/docs/auditor/10.8/configuration/microsoft365/_category_.json new file mode 100644 index 0000000000..e8e8a30203 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Microsoft 365", + "position": 70, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/microsoft365/exchangeonline/_category_.json b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/_category_.json new file mode 100644 index 0000000000..fae4fad12f --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Exchange Online", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/_category_.json b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/_category_.json new file mode 100644 index 0000000000..a7fa3ee580 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Access Exchange Online Using Modern Authentication", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "modernauth" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/manifest.md b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/manifest.md new file mode 100644 index 0000000000..cfafce4b59 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/manifest.md @@ -0,0 +1,70 @@ +--- +title: "Assigning Application Permissions Using Manifest" +description: "Assigning Application Permissions Using Manifest" +sidebar_position: 20 +--- + +# Assigning Application Permissions Using Manifest + +Follow the steps to assign Exchange Online application permissions using manifest. + +**Step 1 –** Under App registrations, select the newly created app. + +**Step 2 –** Select **Manifest** on the left. + +**Step 3 –** Locate the **requiredResourceAccess** property in the manifest and edit it with the +following in the square brackets ([]). + +**Step 4 –** Click **Save**. + +Optionally, you can select **Download** to edit the manifest locally, and then click **Upload** to +reapply it to your application. + +Do one of the following: + +- For the clear installation of Netwrix Auditor, add roles as described below. + +- If you upgraded Netwrix Auditor from the version 10.0, replace all existing content under the + **requiredResourceAccess** property. + +``` +{ +    "resourceAppId": "00000002-0000-0ff1-ce00-000000000000", +    "resourceAccess": [ +        { +            "id": "dc50a0fb-09a3-484d-be87-e023b12c6440", +            "type": "Role" +        } +    ] +}, +{ +    "resourceAppId": "00000003-0000-0000-c000-000000000000", +    "resourceAccess": [ +        { +            "id": "693c5e45-0940-467d-9b8a-1022fb9d42ef", +            "type": "Role" +        }, +        { +            "id": "1bfefb4e-e0b5-418b-a88f-73c46d2cc8e9", +            "type": "Role" +        }, +        { +            "id": "7ab1d382-f21e-4acd-a863-ba3e13f7da61", +            "type": "Role" +        }, +        { +            "id": "40f97065-369a-49f4-947c-6a255697ae91",             +            "type": "Role" +        } +    ] +}, +{ +    "resourceAppId": "c5393580-f805-4401-95e8-94b7a6ef2fc2", +    "resourceAccess": [ +        { +            "id": "594c1fb6-4f81-4475-ae41-0c394909246c", +            "type": "Role" +        } +    ] +} +``` diff --git a/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/manualconfig.md b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/manualconfig.md new file mode 100644 index 0000000000..574815571a --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/manualconfig.md @@ -0,0 +1,160 @@ +--- +title: "Configure Exchange Online State-in-Time Modern Authentication Manually" +description: "Configure Exchange Online State-in-Time Modern Authentication Manually" +sidebar_position: 10 +--- + +# Configure Exchange Online State-in-Time Modern Authentication Manually + +This topic contains general requirements for Exchange Online State-in-Time and Auto Audit for +mailboxes Modern Authentication, configuration steps, including the ExchangeOnlineManagement +PowerShell module installation. + +Review the following: + +- Requirements for Exchange Online Modern Authentication +- Install the ExchangeOnlineManagement PowerShell Module +- Configure Exchange Online Modern Authentication Manually + +## Requirements for Exchange Online Modern Authentication + +General Requirements + +- Windows Management Framework for your OS: + [Windows Management Framework 5.1](https://www.microsoft.com/en-us/download/details.aspx?id=54616) +- .NET Framework 4.7.1 and above: + [Download .NET Framework 4.7.1](https://dotnet.microsoft.com/download/dotnet-framework/net471) + +**NOTE:** If you have the FIPS option enabled you should proceed to Manual Exchange Online +pre-configuration. See the Configure Exchange Online Modern Authentication Manuallysection for +additional information. + +Follow the steps to enable Exchange Online Auto Audit for mailboxes with Modern Authentication +(automatic mode). + +**Step 1 –** Install the ExchangeOnlineManagement Powershell module and dependencies (Nget package +provider). Refer to the following Microsoft article for more information: +[About the Exchange Online PowerShell V2 module](https://docs.microsoft.com/en-us/powershell/exchange/exchange-online-powershell-v2?view=exchange-ps). + +**Step 2 –** Generate the self-signed certificate. + +**Step 3 –** Install the certificate to the _CurrentUser/My certificate_ folder for the Local System +account. + +**Step 4 –** Install the certificate to the Microsoft Entra ID cloud application + +## Install the ExchangeOnlineManagement PowerShell Module + +This section will be helpful for any case below: + +- You encountered errors related to the ExchangeOnlineManagement PowerShell module +- You have the FIPS policy enabled +- You want to install the module manually + +Follow the steps to install the module. + +**Step 1 –** Install the Windows Management Framework for your OS: +[Windows Management Framework 5.1](https://www.microsoft.com/en-us/download/details.aspx?id=54616) + +**Step 2 –** Install **Nuget Package Provider** version 3.1 and above. Open **Windows PowerShell** +and execute the following command: + +``` +Install-PackageProvider Nuget -MinimumVersion 2.8.5.201 -Scope AllUsers +``` + +**Step 3 –** Install the ExchangeOnlineManagement Powershell module. Open **Windows PowerShell** and +execute the following command: + +``` +Install-Module ExchangeOnlineManagement +``` + +Review the following Microsoft technical article for more information: +[About the Exchange Online PowerShell V2 module](https://docs.microsoft.com/en-us/powershell/exchange/exchange-online-powershell-v2?view=exchange-ps) + +See next: Configure Exchange Online Modern Authentication Manually + +**NOTE:** If you encountered errors executing the `Install-PackageProvider` cmdlet try to force +PowerShell into TLS 1.2 mode and try again: + +``` +[System.Net.ServicePointManager]:SecurityProtocol = [System.Net.SecurityProtocolType] 'Ssl3 , Tls12' +``` + +**NOTE:** If you getting _"No match was found for the specified search criteria..."_ message on the +`Install-Module ExchangeOnlineManagement` execution, try to register default repository: + +``` +Register-PSRepository -Default +``` + +## Configure Exchange Online Modern Authentication Manually + +If you encountered errors from Netwrix Auditor during the automatic configuration of the +certificate, complete the following steps. + +**Step 1 –** In Netwrix Auditor, find your Exchange Online monitoring plan. + +**Step 2 –** Click Update to force data collection. + +If the error still persists, or you want to pre-configure the work with certificate, follow the +instructions below: + +Follow the steps to install a certificate. + +**Step 1 –** Get your certificate or generate a self-signed certificate. The name must be +_`Netwrix_Auditor_MFA_`* + +**Step 2 –** Save the certificate to the _CurrentUser/My certificate_ folder for the Local System +account. + +**Step 3 –** Upload the certificate to the application selected in your monitoring plan or configure +it automatically with Netwrix Auditor. + +Follow the steps to generate a self-signed certificate. + +**Step 1 –** Open Windows PowerShell as an Administrator and run the following commands: + +``` +# Create certificate +$mycert = New-SelfSignedCertificate -DnsName "example.com" -CertStoreLocation "cert:\LocalMachine\My" -NotAfter (Get-Date).AddYears(1) -KeySpec KeyExchange +# Export certificate to .pfx file +$mycert | Export-PfxCertificate -FilePath mycert.pfx -Password $(ConvertTo-SecureString -String "your_password" -Force -AsPlainText) +# Export certificate to .cer file +$mycert | Export-Certificate -FilePath mycert.cer +``` + +**Step 2 –** Replace the `DnsName `parameter value with your certificate name +(`Netwrix_Auditor_MFA_`). + +Follow the steps to install the certificate to the CurrentUser/My certificate folder. + +**Step 1 –** Download [PsExec](https://docs.microsoft.com/en-us/sysinternals/downloads/psexec) to +run Windows PowerShell session under the LocalSystem account; + +**Step 2 –** Run Windows PowerShell as an Administrator, navigate to to PsExec.exe installation +directory (use the 'CD' command), if necessary, and run the following command: + +``` +.\PsExec.exe -i -s powershell.exe +``` + +**Step 3 –** Verify that you are logged in as a Local System account. Run the following command: + +``` +whoami +``` + +**Step 4 –** Import the certificate. Run the following command: + +``` +Import-PfxCertificate -FilePath -CertStoreLocation  +'Cert:\CurrentUser\My' -Password (ConvertTo-SecureString -String "your_password" -AsPlainText -Force) +``` + +Where `path_to_certificate` is the full path to the certificate file. + +You can also install the certificate with the '.cer' extension to the Microsoft Entra ID Portal or +Netwrix Auditor will set it automatically during establishing a PowerShell connection with Exchange +Online. diff --git a/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/modernauth.md b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/modernauth.md new file mode 100644 index 0000000000..2e87c8230d --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/modernauth.md @@ -0,0 +1,179 @@ +--- +title: "Access Exchange Online Using Modern Authentication" +description: "Access Exchange Online Using Modern Authentication" +sidebar_position: 30 +--- + +# Access Exchange Online Using Modern Authentication + +Support for modern authentication will allow you to audit the organizations where MFA is enabled for +all users, including service accounts. + +This option is recommended for organizations that use modern authentication as the identity +management approach, having multi-factor authentication (MFA) enabled for their user accounts. In +this scenario, Netwrix Auditor will access the cloud-based infrastructure via Microsoft Graph and +other modern APIs, being authenticated through a pre-configured Microsoft Entra ID application with +appropriate access permissions. + +If you plan to implement this scenario, you should register an Microsoft Entra ID app manually and +provide its settings to Netwrix Auditor when configuring a monitored item. + +### Create and Register a New App in Microsoft Entra ID + +You will need to create a dedicated app for each cloud-based data source you plan to audit: + +- Microsoft Entra ID (formerly Azure AD) +- Exchange Online +- SharePoint Online +- MS Teams + +If you plan to audit all of them, you need to create 4 apps. + +Follow the steps to register a new Microsoft Entra ID application. + +**Step 1 –** Sign into the **Microsoft 365 Admin Center** with your _Global Administrator_, +_Application Administrator_ or _Cloud Application Administrator_ account and go to the **Microsoft +Entra ID admin center**. + +**Step 2 –** Under the App registrations section, select **New registration**. + +**Step 3 –** In the Name field, enter the application name. + +**Step 4 –** In the Supported account types select who can use this application – use the **Accounts +in this organizational directory only** option. + +**Step 5 –** Click the **Register** button. Application **Redirect URI** is optional, you can leave +it blank. + +**Step 6 –** Your Application (client) ID is now available in the Overview section. Copy it to a +safe location. + +See the following Microsoft article for additional information on how to create an application and +service principal using Microsoft Entra ID Admin portal: +[Create an Microsoft Entra ID application and service principal that can access resources](https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal). + +### Grant Required Permissions + +You need to grant your new application the required API permissions. Microsoft Entra ID applications +can be assigned _Delegated_ or _Application_ permissions: + +- _Delegated_ permissions require a signed-in user present who consents to the permissions every + time an API call is sent. +- _Application_ permissions are consented by an administrator once granted. + +For the newly created app, you should use the _Application_ permissions. + +To grant required permissions, assign granular _Application_ permissions required for Netwrix +Auditor to collect data from the application. To do so, perform the following steps: + +**Step 1 –** Go to the **App registrations** and open the app you created to assign Auditor +permissions. + +**Step 2 –** Go to **Manage > API permissions** and click **Add a permission** button. + +**Step 3 –** Assign the required permissions. + +Permission assignment will depend on the data you plan to collect: + +- Activity data only +- Both activity and state-in-time data + +| To... | Requirement | Comment | +| ------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------- | +| Collect audit data | Microsoft Entra ID app requires the following **Application** permissions: 1. **Microsoft Graph** - Directory.Read.All - Application.ReadWrite.All - **Mail.ReadBasic.All** - **MailboxSettings.Read** 2. **Office 365 Management APIs** - **ActivityFeed.Read** 3. **Office 365 Exchange Online** - **Exchange.ManageAsApp** | To learn how to assign required permissions, see the Access Exchange Online Using Modern Authentication section for additional information. | +| Roles | _Exchange Administrator_ (_Exchange Service Administrator_) assigned to application service principal OR _Global Administrator_ assigned to application service principal | | + +**NOTE:** You can also assign application permissions by editing Microsoft Entra app manifest. See +the Access Exchange Online Using Modern Authentication topic for additional information on how to +assign the required permissions. Information about manifest is also described in the following +Microsoft +article: [ Microsoft Entra app manifest](https://learn.microsoft.com/en-us/azure/active-directory/develop/reference-app-manifest). + +#### Grant Admin Consent to a Tenant + +Follow the steps to grant Admin consent to a tenant. + +Go back to the **Microsoft Entra ID admin center** > **Applications** > **App registrations** > +**API permissions** and click **Grant admin consent for** *``*. When prompted to +confirm, click **Yes**. + +**NOTE:** For Office 365 permissions, go to **Request API Permissions** > **APIs my organization +users** and type "Office 365" in the search bar. + +See the following Microsoft article for additional information on how to create an application and +service principal using Microsoft Entra ID Admin portal: +[Create an Microsoft Entra application and service principal that can access resources](https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal). + +### Grant Required Roles + +Follow the steps to grant the required Microsoft Entra ID (formerly Azure AD) roles to the new +application. + +**Step 1 –** In the Entra portal, click **View** under Manage Azure Active Directory. + +**Step 2 –** Select **Roles and admins** under Applications . + +**Step 3 –** Select the Exchange Administrator or Global Administrator role. + +**Step 4 –** On the Assignments page that appears, click Add assignments. + +**Step 5 –** In the Add assignments flyout that appears, find and select the created application, +and click Add. + +See the following Microsoft article for additional information on how to create an application and +service principal using Azure AD Admin portal: +[Create an Azure Active Directory application and service principal that can access resources](https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal). + +### Configure Client Secret + +Follow the steps to create a new client secret to be used by the app. + +**Step 1 –** Go to **Manage** > **Certificates & secrets** and click **New client secret**. + +**Step 2 –** Enter the description. From the expiration options select **24 months**. + +**Step 3 –** Click **Add**. + +**Step 4 –** The new secret will be displayed in the list. Click **Copy to clipboard** icon on the +"Value" parameter on the right side of the screen. + +See the following Microsoft article for more information on how to add a client secret: +[Add a client secret](https://learn.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app#add-a-client-secret). + +## Add an Exchange Online Monitoring Plan + +Follow the steps to add Exchange Online monitoring plan in the Netwrix Auditor: + +**Step 1 –** In the Monitoring Plans, click **Add Plan** button. + +**Step 2 –** Create a monitoring plan with the Exchange Online data source. + +**Step 3 –** Add the "Office 365 tenant" item. + +**Step 4 –** Click **Select**. + +**Step 5 –** Enter your tenant name. + +**Step 6 –** Choose modern authentication. + +**Step 7 –** Enter Application ID and Application secret you have created before. + +**Step 8 –** Click **Add**. + +Exchange Online monitoring plan has been added to Auditor and initial data collection has begun. + +### Obtain the Tenant Name + +Follow the steps to obtain the tenant name. + +**Step 1 –** Navigate to **Microsoft Entra ID** > **Overview**. + +**Step 2 –** In the **Tenant information** locate the **Primary domain** field, copy its value and +store to a safe location. + +See the following Microsoft article for additional information on how to obtain tenant name: +[Locate important IDs for a user](https://learn.microsoft.com/en-us/partner-center/find-ids-and-domain-names). + +Then, create a corresponding monitoring plan in Netwrix Auditor and add an item (Office 365 tenant) +to it. See the [Microsoft Entra ID](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md) +topic for additional information. diff --git a/docs/auditor/10.8/configuration/microsoft365/exchangeonline/overview.md b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/overview.md new file mode 100644 index 0000000000..4dd69fe23f --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/overview.md @@ -0,0 +1,155 @@ +--- +title: "Exchange Online" +description: "Exchange Online" +sidebar_position: 20 +--- + +# Exchange Online + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + **NOTE:** Unified audit log must be enabled for a Tenant. See the Microsoft + [Turn auditing on or off](https://docs.microsoft.com/en-us/microsoft-365/compliance/turn-audit-log-search-on-or-off?view=o365-worldwide) + article for additional information. + +If you plan to audit non-owner mailbox access within your Exchange Online organization, native audit +logging must be enabled for user, shared, equipment, linked, and room mailboxes: + +- Access types: administrator , delegate user +- Actions: Update, Move, MoveToDeletedItems, SoftDelete, HardDelete, FolderBind, SendAs, + SendOnBehalf, Create + +**New in v10.8:** If you plan to audit **owner** mailbox access activities (mass deletions, folder permission changes, inbox rule modifications), enable native audit logging with the following configuration: + +- Access types: **owner** +- Actions: **SoftDelete, HardDelete, Move, UpdateCalendarDelegation, UpdateFolderPermissions, MailboxLogin, MailItemsAccessed, MoveToDeletedItems** + +**Important:** Read access auditing (MailItemsAccessed) significantly increases the number of generated audit events which might affect performance and reporting. Audit search results may include email subject lines, potentially exposing sensitive information. + +Perform the following configuration procedures: + +- Prepare a Data Collecting Account as described in the + [Permissions for Exchange Online Auditing](/docs/auditor/10.8/configuration/microsoft365/exchangeonline/permissions.md) topic +- Configure required protocols and ports, as described in the [Exchange Online Ports](/docs/auditor/10.8/configuration/microsoft365/exchangeonline/ports.md) + topic + +## Monitored Object Types and Attributes + +See the full list of object types and attributes monitored by Exchange Online. + +Mailboxes: + +- UserMailbox +- SharedMailbox +- EquipmentMailbox +- LinkedMailbox +- RoomMailbox + +Users: + +- MailUser +- GuestMailUser +- User (Entity under UserMailbox or MailUser) + +Groups: + +- Role Group \ RoleGroup +- Mail-enabled security\MailUniversalSecurityGroup +- Dynamic distribution list\DynamicDistributionGroup +- Distribution list\MailUniversalDistributionGroup +- Microsoft 365 \ GroupMailbox +- ExchangeSecurityGroup + +Folders: + +- MailFolder +- Permissions: +- SendAs +- FullAccess +- ChangeOwner +- DeleteItem +- ExternalAccount +- ChangePermission +- ReadPermission + +Azure: + +- Group + +Properties + +Refer to the table to see Properties used in the Snapshot collection. + +| Type | Properties | +| ----------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| User Mailbox Shared Mailbox Equipment Mailbox Room‎ Mailbox‎ Linked Mailbox Mail-enabled security Dynamic distribution list Distribution list Microsoft 365 | Identity Name DisplayName DistinguishedName PrimarySmtpAddress Guid ArchiveGuid ExternalDirectoryObjectId ExchangeObjectId AuditEnabled AuditAdmin AuditDelegate AuditLogAgeLimit Type OwnerUPN ExchangeSecurityDescriptorSddl SendOnBehalfPrincipals Sid IsDirSynced SerializationData ForwardingAddress ForwardingSMTPAddress DeliverToMailboxAndForward | +| ExchangeSecurityGroup | RecipientTypeDetails ExchangeObjectId ExternalDirectoryObjectId ExternalDirectoryObjectId Name | +| RoleGroup | ExchangeObjectId Name Sid UserFriendlyName UserPrincipalName | +| MailUser GuestMailUser User | Identity Name DisplayName DistinguishedName SamAccountName UserPrincipalName ObjectCategory Id ExchangeObjectId ExternalDirectoryObjectId OrganizationId OriginatingServer RecipientType RecipientTypeDetails IsDirSynced Sid | +| MailFolder | ObjectType ObjectId DisplayName MailboxGuid SecurityDescriptorSddl ParentFolderId ChildFolderCount UnreadItemCount TotalItemCount WellKnownName Childs | +| SendAs permissions | Trustee AccessControlType AccessRights IsInherited InheritanceType IsValid ObjectState | +| Permissions: FullAccess ChangeOwner DeleteItem ExternalAccount ChangePermission ReadPermission | MailboxIdentity User UserSid IsOwner AccessRights IsInherited Deny InheritanceType | + +Refer to the table to see Properties used in membership collection. + +| Type | Properties | +| ----------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Azure group | Id Classification CreatedDateTime Description DisplayName GroupTypes Mail MailEnabled MailNickname OnPremisesLastSyncDateTime OnPremisesSecurityIdentifier OnPremisesSyncEnabled ProxyAddresses RenewedDateTime SecurityEnabled Visibility ResourceProvisioningOptions | + +## Monitored Actions + +See the full list of actions monitored by Exchange Online. + +Monitored Sign-In types: + +- Delegate +- Admin + +Delegate: + +- A user who's been assigned the SendAs, SendOnBehalf, or FullAccess permission to another mailbox. +- An admin who's been assigned the FullAccess permission to a user's mailbox. + +Admin: + +- The mailbox is searched with one of the following Microsoft eDiscovery tools: + + - Content Search in the compliance portal. + - eDiscovery or eDiscovery (Premium) in the compliance portal. + - In-Place eDiscovery in Exchange Online. + +• The mailbox is accessed by using the Microsoft Exchange Server MAPI Editor. + +• The mailbox is accessed by an account impersonating another user. This occurs when the +ApplicationImpersonation role is assigned to an account, such as an application, which is now +actively accessing the data. + +| Sign-In types | Action Types | Description | +| -------------- | ------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Delegate Admin | Update | A message or any of its properties was changed. | +| Admin | Copy | A message or any of its properties was changed. | +| Delegate Admin | Move | A message was moved to another folder. | +| Delegate Admin | MoveToDeletedItems | A message was deleted and moved to the Deleted Items folder. | +| Delegate Admin | SoftDelete | A message was permanently deleted or deleted from the Deleted Items folder. Soft-deleted items are moved to the Recoverable Items folder. | +| Delegate Admin | FolderBind | A mailbox folder was accessed. This action is also logged when the admin or delegate opens the mailbox. **NOTE:** Audit records for folder bind actions performed by delegates are consolidated. One audit record is generated for individual folder access within a 24-hour period. | +| Delegate Admin | SendAs | A message was sent using the SendAs permission. This permission allows another user to send the message as though it came from the mailbox owner. | +| Delegate Admin | SendOnBehalf | A message was sent using the SendOnBehalf permission. This permission allows another user to send the message on behalf of the mailbox owner. The message indicates to the recipient who the message was sent on behalf of and who actually sent the message. | +| Delegate Admin | Create | An item was created in the Calendar, Contacts, Draft, Notes, or Tasks folder in the mailbox (for example, a new meeting request is created). Creating, sending, or receiving a message isn't audited. Also, creating a mailbox folder isn't audited. | diff --git a/docs/auditor/10.8/configuration/microsoft365/exchangeonline/permissions.md b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/permissions.md new file mode 100644 index 0000000000..db3d32bc90 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/permissions.md @@ -0,0 +1,186 @@ +--- +title: "Permissions for Exchange Online Auditing" +description: "Permissions for Exchange Online Auditing" +sidebar_position: 20 +--- + +# Permissions for Exchange Online Auditing + +Auditor allows you to audit Office 365 organizations that have established modern authentication as +their identity management approach, including support for +[multi-factor authentication (MFA)](https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks). +To learn more about modern authentication, refer to the following Microsoft article: +[What is modern authentication](https://docs.microsoft.com/en-us/office365/enterprise/hybrid-modern-auth-overview#what-is-modern-authentication). + +In this scenario, Netwrix Auditor will access the cloud-based infrastructure via Microsoft Graph and +other modern APIs, being authenticated through a pre-configured Microsoft Entra ID (formerly Azure +AD) application with appropriate access permissions. So, you should register an Microsoft Entra ID +app and provide its settings to Auditor when configuring a monitored item. + +## Configure the Microsoft Entra ID App for Auditing Exchange Online + +Follow the steps to use a data collecting account with modern authentication. + +**Step 1 –** Create a Microsoft Entra ID app that will be used for modern authentication. See the +[Create and Register a New App in Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/modernauth/modernauth.md#create-and-register-a-new-app-in-microsoft-entra-id) +topic for additional information. + +**NOTE:** After you start a new monitoring plan and select a data source in the first step, you will +be asked to enter a default data collection account. However, this step is not needed for Exchange +Online as it cannot be used. Thus, there is no need to grant any permissions to this account. +Instead, you will need to configure a modern authentication app and give the necessary permissions +there. + +**Step 2 –** Grant required permissions to that application. See the +[Grant Required Permissions](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/modernauth/modernauth.md#grant-required-permissions) topic for additional +information. + +**Step 3 –** Grant required roles to that application. See the +[Grant Required Roles](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/modernauth/modernauth.md#grant-required-roles) topic for additional information. + +**Step 4 –** Configure client secret for that application. See the +[Configure Client Secret](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/modernauth/modernauth.md#configure-client-secret) topic for additional information. + +**Step 5 –** Obtain tenant ID – you will need it when configuring a monitored item (Office 365 +tenant) settings. See the [Obtain the Tenant Name](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/modernauth/modernauth.md#obtain-the-tenant-name) topic for +additional information. + +## Non-owner Mailbox Access Audit Configuration + +To prepare for non-owner mailbox access auditing in the Exchange Online organization, you will need +to take several configuration steps, creating a Microsoft Entra ID app with the required permissions +and instructing this app to automatically apply the necessary audit settings. + +Follow the steps to configure a non-owner mailbox access audit. + +**Step 1 –** Install the **Exchange Online PowerShell V3** module. There are three versions in the +repository: 3.0.0, 3.1.0 and 3.2.0. + +**NOTE:** Make sure you are using the version specified in the +[App-only authentication for unattended scripts in Exchange Online PowerShell and Security & Compliance PowerShell ](https://docs.microsoft.com/en-us/powershell/exchange/app-only-auth-powershell-v2?view=exchange-ps)Microsoft +article. + +**Step 2 –** In the **Microsoft Entra ID admin center**, create and register an Microsoft Entra ID +app, as described in the related +[Connect to Exchange Online PowerShell ](https://docs.microsoft.com/en-us/powershell/exchange/connect-to-exchange-online-powershell?view=exchange-ps)Microsoft +article. + +**Step 3 –** At the top of the **Request API permissions** pane, click the **APIs my organization +uses** tab and search for _Office 365 Exchange Online_. + +**Step 4 –** Click on the _Office 365 Exchange Online_ entry in the list of apps found. + +**Step 5 –** Proceed with adding the permissions for this app: select **Application permissions** +and then select **Exchange.ManageAsApp**. + +**Step 6 –** Grant admin consent to the tenant (that is, for the Office 365 organization whose audit +data will be collected by the newly registered app). Go to the **new app settings > API +permissions** and click **Grant admin consent for\_**``\_. When prompted to confirm +granting, click **Yes**. + +**Step 7 –** Go to **Azure Active Directory** — **Roles and administrators** and assign **Exchange +Administrator** role. + +**Step 8 –** Download the PowerShell script for certificate creation, as provided in the +[Generate a self-signed certificate ](https://docs.microsoft.com/en-us/powershell/exchange/app-only-auth-powershell-v2?view=exchange-ps#generate-a-self-signed-certificate)Microsoft +article. + +**Step 9 –** To create a self-signed certificate to be used by the app, run the following command: + +``` +.\Create-SelfSignedCertificate.ps1 -CommonName "MyCompanyName" -StartDate 2020-04-01 -EndDate 2022-04-01 +``` + +where: + +`CommonName` — specify _"Netwrix Auditor"_ + +`StartDate` — set to current date + +`EndDate` — set to 2 years from now + +**Step 10 –** When prompted to specify a password, click **Enter**. + +**Step 11 –** Go to **Manage > Certificates & secrets**, click **Upload certificate** and upload +the*.crt* file you have just created. + +![certificates_secrets_thumb_0_0](/images/auditor/10.7/configuration/microsoft365/exchangeonline/certificates_secrets_thumb_0_0.webp) + +**Step 12 –** To create Exchange Online connection session, you can provide certificate file path or +thumbprint. If you want to use a file path, run the following command: + +``` +Connect-ExchangeOnline -CertificateFilePath "full_path_to_certificate" +-AppID "yourAppId" -Organization "Office365_tenant_name" +``` + +Application (client ID) can be found in the **Overview** page. + +![tenant_id_thumb_0_0](/images/auditor/10.7/configuration/microsoft365/exchangeonline/tenant_id_thumb_0_0.webp) + +For example: + +``` +Connect-ExchangeOnline -CertificateFilePath "C:\Path\MyCompanyName1.pfx" +-AppId "402b12a2-fb2b-4222-8f54-5596def1" -Organization "myorganization123.onmicrosoft.com" +``` + +You can use certificate thumbprint instead of file path. For that, import the certificate to the +local certificate store, using the following command: + +``` +Import-PfxCertificate -FilePath "path_to_pfx_certificate" -CertStoreLocation Cert:\CurrentUser\My +``` + +Then run the command like following: + +``` +Connect-ExchangeOnline -CertificateThumbprint 6AEА5A82911ААА3F76FEE149B7B52А70DDFD88 -AppId a14a 822d-f228-412b-9222-281de23 +-Organization myorganization123.onmicrosoft.com +``` + +Finally, run the following command to end the session: + +``` +Disconnect-ExchangeOnline -Confirm:$false +``` + +To automate the process described above, you can create a a script comprising the corresponding +commands and schedule its launch. + +## Non-owner Mailbox Access Audit: Manual Configuration + +If you plan to manually apply the audit settings required to audit non-owner mailbox access in +Exchange Online organization, you will need to create a remote PowerShell session to Exchange +Online. Follow the steps to do so. + +**Step 1 –** Install the Exchange Online PowerShell V2 module as described in the +[About the Exchange Online PowerShell module](https://docs.microsoft.com/en-us/powershell/exchange/exchange-online-powershell-v2?view=exchange-ps) +Microsoft article. + +Make sure to install the latest version. + +**Step 2 –** Launch PowerShell and connect to Exchange Online, as described in the +[About the Exchange Online PowerShell module](https://docs.microsoft.com/en-us/powershell/exchange/exchange-online-powershell-v2?view=exchange-ps) +Microsoft article. + +**Step 3 –** Run the cmdlet, depending on the mailboxes you plan to audit (all mailboxes or selected +individual mailbox): + +| For | Command | +|----------|-------------------------------------------------------------------------------------------------------------| +| All | Execute the following cmdlet: | +| | `Get-ExoMailbox -PropertySets Minimum -RecipientTypeDetails UserMailbox,SharedMailbox,EquipmentMailbox,LinkedMailbox,RoomMailbox` | +| | `Set-Mailbox -AuditEnabled $true --AuditAdmin Update,Copy,Move,MoveToDeletedItems,SoftDelete,HardDelete,FolderBind,SendAs,SendOnBehalf,Create --AuditDelegate Update,Move,MoveToDeletedItems,SoftDelete,HardDelete,FolderBind,SendAs,SendOnBehalf,Create` | +| Selected | Execute the following cmdlet: | +| | `Set-Mailbox -Identity {0} -AuditEnabled $true --AuditAdmin Update,Copy,Move,MoveToDeletedItems,SoftDelete,HardDelete,FolderBind,SendAs,SendOnBehalf,Create --AuditDelegate Update,Move,MoveToDeletedItems,SoftDelete,HardDelete,FolderBind,SendAs,SendOnBehalf,Create` | +| | Where the {0} character must be replaced with any of the following: | +| | - Display Name. Example: "Michael Jones" | +| | - Domain\User. Example: `enterprise.local\MJones` | +| | - Email address. Example: `analyst@enterprise.onmicrosoft.com` | +| | - GUID. Example: `{c43a7694-ba06-46d2-ac9b-205f25dfb32d}` | +| | - LegacyExchangeDN. Example: `/o=EnterpriseDev/ou=Exchange Administrative Group(FYDIBOHF23SPDLT)/cn=Recipients/cn=97da560450c942aba81b2da46c60858a-analyst` | +| | - SamAccountName. Example: `MANAG58792-1758064122` | +| | - (DN) Distinguished name. Example: `CN=MJones,CN=Users,DC=enterprisedc1,DC=enterprise,DC=local` | +| | - User ID or User Principal Name. Example: `MJones@enterprise.onmicrosoft.com` | +| | If you are going to audit multiple individual mailboxes, run the cmdlet for each mailbox you need. | diff --git a/docs/auditor/10.8/configuration/microsoft365/exchangeonline/ports.md b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/ports.md new file mode 100644 index 0000000000..7328653298 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/ports.md @@ -0,0 +1,23 @@ +--- +title: "Exchange Online Ports" +description: "Exchange Online Ports" +sidebar_position: 10 +--- + +# Exchange Online Ports + +Review a full list of protocols and ports required for Netwrix Auditor for Office 365. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to the remote ports on the computer where Netwrix Auditor Server + resides. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 80 TCP port. + +| Port | Protocol | Source | Target | Purpose | +| --------------- | -------- | ---------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------- | +| Exchange Online | | | | | +| 80 | TCP | Netwrix Auditor Server | For a full list of Office 365 URLs, refer to the following Microsoft support article: [Office 365 URLs and IP address ranges](https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2) | outlook.office365.com graph.windows.net manage.office.com | +| 443 | TCP | Netwrix Auditor Server | For a full list of Office 365 URLs, refer to the following Microsoft support article: [Office 365 URLs and IP address ranges](https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2) | outlook.office365.com graph.windows.net manage.office.com | diff --git a/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/_category_.json b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/_category_.json new file mode 100644 index 0000000000..310894b761 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Microsoft Entra ID", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/overview.md b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/overview.md new file mode 100644 index 0000000000..01f831b614 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/overview.md @@ -0,0 +1,119 @@ +--- +title: "Microsoft Entra ID" +description: "Microsoft Entra ID" +sidebar_position: 10 +--- + +# Microsoft Entra ID + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - Unified audit log must be enabled for a Tenant. See the Microsoft + [Turn auditing on or off](https://docs.microsoft.com/en-us/microsoft-365/compliance/turn-audit-log-search-on-or-off?view=o365-worldwide) + article for additional information. + - While no special settings are required. Remember to do the following: + + - Prepare a Data Collecting Account as described in + [Permissions for Microsoft Entra ID Auditing](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/permissions.md) topic + - Configure required protocols and ports, as described in the + [Microsoft Entra ID Ports](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/ports.md) topic + +## Monitored Object Types and Attributes + +See the full list of object types and attributes monitored by Microsoft Entra ID. + +Collected properties for snapshot + +Users properties: + +``` +manager,userPrincipalName,accountEnabled,ageGroup,assignedLicenses,assignedPlans, +identities,passwordProfile,businessPhones,city,companyName,consentProvidedForMinor, +country,department,displayName,employeeId,faxNumber,givenName,imAddresses,jobTitle, +legalAgeGroupClassification,mail,mailNickname,mobilePhone,onPremisesDistinguishedName, +onPremisesImmutableId,onPremisesLastSyncDateTime,onPremisesSecurityIdentifier, +onPremisesSyncEnabled,onPremisesDomainName,onPremisesSamAccountName,onPremisesUserPrincipalName, +otherMails,passwordPolicies,officeLocation,postalCode,preferredLanguage,provisionedPlans,proxyAddresses, +showInAddressList,state,streetAddress,surname,usageLocation,userType,lastPasswordChangeDateTime, +createdDateTime,externalUserState,externalUserStateChangeDateTime,isResourceAccount,licenseAssignmentStates, +refreshTokensValidFromDateTime,signInSessionsValidFromDateTime,id + +``` + +Groups properties: + +``` +members,classification,createdDateTime,description,displayName,groupTypes, +mail,mailEnabled,mailNickname,onPremisesLastSyncDateTime, +onPremisesSecurityIdentifier,onPremisesSyncEnabled,proxyAddresses, +renewedDateTime,securityEnabled,visibility,resourceProvisioningOptions,id             +``` + +Devices properties: + +``` +displayName,deviceId,deviceMetadata,deviceVersion,manufacturer,model,operatingSystem, +operatingSystemVersion,profileType,trustType,accountEnabled,isCompliant,isManaged,id +             +``` + +DirectoryRoles properties: + +``` +description,displayName,roleTemplateId,id,members +             +``` + +DirectoryRoleTemplates properties: + +``` +displayName,description,id +             +``` + +SubscribedSkus properties: + +``` +capabilityStatus,consumedUnits,prepaidUnits,servicePlans,skuId,skuPartNumber,appliesTo,id +             +``` + +ServicePrincipals properties: + +``` + accountEnabled,appId,appRoles,displayName,homepage,oauth2PermissionScopes, + servicePrincipalNames,servicePrincipalType,tags,id +             +``` + +| Data source | Data usage | +| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Audit logs Collected via MS Graph on endpoint _/auditLogs/directoryaudits_ | Activity Record: who, when and some event-based Activity Record | +| Sign-in logs Collected via MS Graph on endpoint _/auditLogs/signIns_ | Logon Activity Record | +| Users changes Collected via MS Graph on endpoint _/users/delta/…_ | Activity Record for users | +| Groups changes Collected via MS Graph on endpoint _/groups/delta/…_ | Activity Record for groups | +| Groups membership changes Collected via MS Graph on endpoint _/groups/delta?$deltaToken=latest&$select=members&$expand=members_ | Activity Record for groups membership | +| All Users Collected via MS Graph on endpoint _/users/delta/…_ | Snapshot for users. Used for previous values in users Activity Record. Used in SSRS (SQL Server Reporting Services) report "Entra ID Accounts – Attributes" | +| All Groups and membership Collected via MS Graph on endpoint _/groups/delta/…&$expand=members_ | Snapshot for groups and membership Groups snapshot used for previous values in groups Activity Record. | +| All devices Collected via MS Graph on endpoint _/devices_ | Snapshot for "Not used" devices. | +| All service principals Collected via MS Graph on endpoint _/servicePrincipals_ | Snapshot for service principals. | +| All directory role templates Collected via MS Graph on endpoint _/directoryRoleTemplates_ All directory roles Collected via MS Graph on endpoint _/directoryRoles/delta_ | Snapshot for Entra ID directory roles Used in SSRS (SQL Server Reporting Services) report "Entra ID roles and their members" | +| All SKUs Collected via MS Graph on endpoint _/subscribedSkus_ | Snapshot for SKUs Used in SSRS report "Entra ID roles and their members" | diff --git a/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/_category_.json b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/_category_.json new file mode 100644 index 0000000000..33356bb7ec --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Permissions for Microsoft Entra ID Auditing", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "permissions" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/basicauth.md b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/basicauth.md new file mode 100644 index 0000000000..aaa3cebbdf --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/basicauth.md @@ -0,0 +1,100 @@ +--- +title: "Using Basic Authentication with Microsoft Entra ID" +description: "Using Basic Authentication with Microsoft Entra ID" +sidebar_position: 10 +--- + +# Using Basic Authentication with Microsoft Entra ID + +With basic authentication, your Microsoft Entra ID organization will be accessed on behalf of a +user. You will need to provide user name and password in the monitored item properties. Auditor will +use this account to access the Microsoft Entra ID organization, automatically create an Microsoft +Entra ID app with required permissions, and perform initial data collection. For that, the user +account will need an administrative role in the cloud-based infrastructure. + +Further permission assignment will depend on the data you plan to collect: + +- To collect activity data including **logon attempts**, the administrative role is required, as + well as the Premium Plan license. +- To collect activity data without logons, the privileged role can be revoked from the specified + account after the initial data collection. Ongoing audit data collection will leverage Microsoft + APIs access permissions granted to Microsoft Entra ID app and, therefore, requires no tenant-level + administrative permissions. + +## Required Roles and Permissions + +| To... | Requirement | Comment | +| --------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Create Microsoft Entra ID application, run initial data collection, and perform Auditor upgrade from previous version | Any of the following role combinations: - Application Administrator & Privileged Role Administrator OR - Cloud Application Administrator & Privileged Role Administrator OR - _Global Admin_ | Prepare a user account and specify it in the monitored item properties. See the and [Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/overview.md) topics for additional information. | +| Collect audit data, including _Successful Logons_ and/or _Failed Logons_ | - _Security Reader_ OR - _Security Administrator_ OR - _Application Administrator_ OR - _Cloud Application Administrator_ OR - _Global Administrator_ | To assign the non-privileged role, see | +| Collect audit data (without logons) | Any of the following roles: - _Security Reader_ OR - _Application Administrator_ OR - _Cloud Application Administrator_ OR - _Global Admin_ | Assign the role you need, as explained above. | + +## Assigning a Privileged Role for Microsoft Entra ID and Office 365 + +When configuring a monitored item for Microsoft Entra ID (formerly Azure AD) or Office 365 auditing +with basic authentication, specify a data collecting account that has sufficient privileges in +Microsoft Entra ID. This account should be able to create a dedicated application in your Microsoft +Entra ID domain. Depending on your requirements and company policies, you can select one of the +following approaches: + +- Assign a privileged role (for example, _Application Administrator_ & _Privileged Role + Administrator_) to the account, then revoke it after the application creation and initial data + collection, and assign a less-privileged role to this account (for example, _Security Reader_). +- Use the account with a privileged role on a regular basis. Any additional role assignments will + not be necessary in this case. If you select this method, contact your security administrator to + avoid violations of security policies in your organization. + +**NOTE:** If you previously used a non-privileged account for Microsoft Entra ID data collection in +your Netwrix Auditor, consider that after the upgrade you will have to perform the role assignment +procedure again, selecting one of these approaches. Until then, data collection will not be +performed. + +Follow the steps to assign a privileged role to the account. + +**Step 1 –** Sign in to Microsoft Entra ID portal using your Microsoft account. + +**Step 2 –** Select Microsoft Entra ID on the left. + +**Step 3 –** Select the account that you want to use as data collecting account, or create a new +user. + +**Step 4 –** Make sure you have disabled multi-factor authentication for this account. + +**Step 5 –** Expand Directory role and select the role you need (for example, Global admin or any +other privileged role). + +_Remember,_ In Microsoft Graph API, Microsoft Entra ID Graph API, and Microsoft Entra ID PowerShell, +the Global admin role is identified as Company Administrator. + +**Step 6 –** Click OK. + +**Step 7 –** In Auditor, create a monitoring plan for auditing Microsoft Entra ID and specify this +account with this privileged role on the Specify the account for collecting data step. + +**Step 8 –** Wait until initial data collection completes. + +**Step 9 –** Open Microsoft Entra ID portal and remove the privileged role from the account. + +**Step 10 –** Assign a less-privileged role to this account. + +A less privileged role has now been assigned to the account. + +## Assigning 'Security Administrator' or 'Security Reader' Role + +To audit _Successful_ and/or _Failed Logons_ in Microsoft Entra ID, the Security Administrator or +Security Reader role is required. Follow the steps to assign the role you need: + +**Step 1 –** Sign in to [Microsoft Entra ID portal](https://portal.azure.com/) using your Microsoft +account. + +**Step 2 –** Select Microsoft Entra ID portal on the left. + +**Step 3 –** Navigate to Roles and administrators. + +**Step 4 –** Click the Security administrator or Security Reader role. + +**Step 5 –** Click Add member and select the account that you want to assign the role to. + +Refer to the following Microsoft article: +[Microsoft Entra built-in roles](https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles) +for additional information on the Administrator role permissions. diff --git a/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/_category_.json b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/_category_.json new file mode 100644 index 0000000000..caf05caca6 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Using Modern Authentication with Microsoft Entra ID", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "modernauth" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/manifest.md b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/manifest.md new file mode 100644 index 0000000000..16f12c0fc2 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/manifest.md @@ -0,0 +1,65 @@ +--- +title: "Assign Application Permissions Using Manifest" +description: "Assign Application Permissions Using Manifest" +sidebar_position: 10 +--- + +# Assign Application Permissions Using Manifest + +Follow the steps to assign application permissions using manifest. + +**Step 1 –** Under App registrations, select the newly created app. + +**Step 2 –** Select **Manifest** on the left. + +**Step 3 –** Locate the **requiredResourceAccess** property in the manifest and edit it with the +following in the square brackets ([]). + +**Step 4 –** Click **Save**. + +Optionally, you can select **Download** to edit the manifest locally, and then use Upload to reapply +it to your application. + +The following Application permissions will be added: + +- Microsoft Graph + + - Directory.Read.All + - AuditLog.Read.All + +- Office 365 Management APIs + + - ActivityFeed.Read + +To add the required permissions, do one of the following: + +- For the clear installation of Auditor 10.5, add roles as described below. + +- If you upgraded Auditor from the version 10.0, replace all existing content under the + **requiredResourceAccess** property. + +``` +{ +    "resourceAppId": "00000003-0000-0000-c000-000000000000", +    "resourceAccess": [ +        { +            "id": "b0afded3-3588-46d8-8b3d-9842eff778da", +            "type": "Role" +        }, +        { +            "id": "7ab1d382-f21e-4acd-a863-ba3e13f7da61", +            "type": "Role" +        } +    ] +}, +{ +    "resourceAppId": "c5393580-f805-4401-95e8-94b7a6ef2fc2", +    "resourceAccess": [ +        { +            "id": "594c1fb6-4f81-4475-ae41-0c394909246c", +            "type": "Role" +        } +    ] +} + +``` diff --git a/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md new file mode 100644 index 0000000000..21b1f1ac1d --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md @@ -0,0 +1,164 @@ +--- +title: "Using Modern Authentication with Microsoft Entra ID" +description: "Using Modern Authentication with Microsoft Entra ID" +sidebar_position: 20 +--- + +# Using Modern Authentication with Microsoft Entra ID + +This option is recommended for organizations that use modern authentication as the identity +management approach, having multi-factor authentication (MFA) enabled for their user accounts. In +this scenario, Auditor will access the cloud-based infrastructure via Microsoft Graph and other +modern APIs, being authenticated through a pre-configured Microsoft Entra ID application with +appropriate access permissions. + +If you plan to implement this scenario, you should register an Microsoft Entra ID app manually and +provide its settings to Auditor when configuring a monitored item. + +## Configuring Microsoft Entra ID App for Auditing Microsoft Entra ID + +Follow the steps to use a data collecting account with modern authentication. + +**Step 1 –** Create and Register a New App in Microsoft Entra ID app that will be used for modern +authentication. See the Create and Register a New App in Microsoft Entra ID section for additional +information. + +**Step 2 –** Grant required permissions to that application using Microsoft Entra ID app manifest. +See the Grant Required Permissions section for additional information. + +**Step 3 –** Configure client secret for that application. See the Configure Client Secret topic for +additional information. + +**Step 4 –** Obtain tenant ID – you will need it when configuring a monitored item (Office 365 +tenant) settings. See the Obtain Tenant Name section for additional information. + +### Create and Register a New App in Microsoft Entra ID + +You will need to create a dedicated app for each cloud-based data source you plan to audit: + +- Microsoft Entra ID (formerly Azure AD) +- Exchange Online +- SharePoint Online +- MS Teams + +If you plan to audit all of them, you need to create 4 apps. + +Follow the steps to register a new Microsoft Entra ID application. + +**Step 1 –** Sign into the **Microsoft 365 Admin Center** with your _Global Administrator_, +_Application Administrator_ or _Cloud Application Administrator_ account and go to the **Microsoft +Entra ID admin center**. + +**Step 2 –** Under the App registrations section, select **New registration**. + +**Step 3 –** In the Name field, enter the application name. + +**Step 4 –** In the Supported account types select who can use this application – use the **Accounts +in this organizational directory only** option. + +**Step 5 –** Click the **Register** button. Application **Redirect URI** is optional, you can leave +it blank. + +**Step 6 –** Your Application (client) ID is now available in the Overview section. Copy it to a +safe location. + +See the following Microsoft article for additional information on how to create an application and +service principal using Microsoft Entra ID Admin portal: +[Create an Microsoft Entra ID application and service principal that can access resources](https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal). + +### Grant Required Permissions + +You need to grant your new application the required API permissions. Microsoft Entra ID applications +can be assigned _Delegated_ or _Application_ permissions: + +- _Delegated_ permissions require a signed-in user present who consents to the permissions every + time an API call is sent. +- _Application_ permissions are consented by an administrator once granted. + +For the newly created app, you should use the _Application_ permissions. + +To grant required permissions, assign granular _Application_ permissions required for Netwrix +Auditor to collect data from the application. To do so, perform the following steps: + +**Step 1 –** Go to the **App registrations** and open the app you created to assign Auditor +permissions. + +**Step 2 –** Go to **Manage > API permissions** and click **Add a permission** button. + +**Step 3 –** Assign the required permissions. + +Permission assignment will depend on the data you plan to collect: + +- Activity data only +- Both activity and state-in-time data + +| Requirement | Comment | +| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Microsoft Entra ID app requires the following **Application** permissions: 1. **Microsoft Graph** - **Directory.Read.All** - **AuditLog.Read.All** 2. **Office 365 Management APIs** - **ActivityFeed.Read** | To learn how to assign required permissions, see the Configuring Microsoft Entra ID App for Auditing Microsoft Entra ID section for additional information. | + +**NOTE:** You can also assign application permissions by editing Microsoft Entra app manifest. See +the Using Modern Authentication with Microsoft Entra ID topic for additional information on how to +assign the required permissions. Information about manifest is also described in the following +Microsoft +article: [ Microsoft Entra app manifest](https://learn.microsoft.com/en-us/azure/active-directory/develop/reference-app-manifest). + +### Grant Admin Consent to a Tenant + +Go back to the **Microsoft Entra ID admin center** > **Applications** > **App registrations** > +**API permissions** and click **Grant admin consent for** *``*. When prompted to +confirm, click **Yes**. + +**NOTE:** For Office 365 permissions, go to **Request API Permissions** > **APIs my organization +users** and type "Office 365" in the search bar. + +See the following Microsoft article for additional information on how to create an application and +service principal using Microsoft Entra ID Admin portal: +[Create an Microsoft Entra application and service principal that can access resources](https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal). + +### Configure Client Secret + +Follow the steps to create a new client secret to be used by the app. + +**Step 1 –** Go to **Manage** > **Certificates & secrets** and click **New client secret**. + +**Step 2 –** Enter the description. From the expiration options select **24 months**. + +**Step 3 –** Click **Add**. + +**Step 4 –** The new secret will be displayed in the list. Click **Copy to clipboard** icon on the +"Value" parameter on the right side of the screen. + +See the following Microsoft article for more information on how to add a client secret: +[Add a client secret](https://learn.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app#add-a-client-secret). + +### Add Microsoft Entra ID monitoring plan + +Follow the steps to add Microsoft Entra ID monitoring plan in the Netwrix Auditor. + +**Step 1 –** In the Monitoring Plans, click **Add Plan** button. + +**Step 2 –** Create a monitoring plan with the Microsoft Entra ID data source. + +**Step 3 –** Add the Office 365 tenant item. + +**Step 4 –** Click **Select**. + +**Step 5 –** Enter your **tenant name**. + +**Step 6 –** Choose modern authentication. + +**Step 7 –** Enter the **Application ID** and **Application secret** you have created before. + +**Step 8 –** Click **Add**. + +Microsoft Entra ID monitoring plan has been added to Auditor and initial data collection has begun. + +### Obtain Tenant Name + +Follow the steps to obtain the tenant name. + +**Step 1 –** Navigate to **Microsoft Entra ID** > **Overview**. + +**Step 2 –** In the Tenant Information menu, locate the **Primary domain** field and copy its value. + +**Step 3 –** Store the tenant to a safe location. diff --git a/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/permissions.md b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/permissions.md new file mode 100644 index 0000000000..75935c0eb1 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/permissions.md @@ -0,0 +1,96 @@ +--- +title: "Permissions for Microsoft Entra ID Auditing" +description: "Permissions for Microsoft Entra ID Auditing" +sidebar_position: 20 +--- + +# Permissions for Microsoft Entra ID Auditing + +Auditor allows you to audit Office 365 organizations that have established modern authentication as +their identity management approach, including support for +[multi-factor authentication (MFA)](https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks). +To learn more about modern authentication, refer to the following Microsoft article: +[What is modern authentication](https://docs.microsoft.com/en-us/office365/enterprise/hybrid-modern-auth-overview#what-is-modern-authentication). + +In this scenario, Netwrix Auditor will access the cloud-based infrastructure via Microsoft Graph and +other modern APIs, being authenticated through a pre-configured Microsoft Entra ID (formerly Azure +AD) application with appropriate access permissions. So, you should register an Microsoft Entra ID +app and provide its settings to Auditor  when configuring a monitored item. + +## For Microsoft Entra ID Auditing + +To collect audit data in your cloud-based environment, Netwrix uses a dedicated Microsoft Entra ID +application and leverages APIs access permissions granted to that app. To register such application +and assign required permissions, a Microsoft Entra ID account with an administrative role will be +required: + +- If Basic Authentication is used: + - A Microsoft Entra ID application named **Netwrix Auditor for Microsoft Entra ID** will be + created automatically when Netwrix Auditor connects to the monitored item (Office 365 tenant) + for the first time. Thus, you will need to prepare a Microsoft Entra ID user account with an + administrative role in Microsoft Entra ID —to create an app and perform initial data + collection. + - Provide this user name and password in the monitored item properties. See the + [Microsoft Entra ID](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md) topic for + additional information. + +See the [Using Basic Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/basicauth.md) topic for additional +information. + +- If Modern Authentication is used: + - Microsoft Entra ID application should be created manually by user with administrative role and + assigned required permissions. See the + [Configuring Microsoft Entra ID App for Auditing Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md#configuring-microsoft-entra-id-app-for-auditing-microsoft-entra-id) + topic for additional information. + - You will need to provide the Microsoft Entra ID app settings in the monitored item (Office 365 + tenant) properties. See the + [Microsoft Entra ID](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md) topic for + additional information. + +See the [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) topic for additional +information. + +Permissions for ongoing data collection will depend on data you plan to collect: + +- To collect activity (event-based) data including logon attempts, the administrative role will be + needed. +- To collect activity data without logons, the privileged role can be revoked from the specified + account after the initial data collection. + +### Grant Admin Consent to a Tenant + +Go back to the **Microsoft Entra ID admin center** > **Applications** > **App registrations** > +**API permissions** and click **Grant admin consent for** *``*. When prompted to +confirm, click **Yes**. + +**NOTE:** For Office 365 permissions, go to **Request API Permissions** > **APIs my organization +users** and type "Office 365" in the search bar. + +See the following Microsoft article for additional information on how to create an application and +service principal using Microsoft Entra ID Admin portal: +[Create an Microsoft Entra application and service principal that can access resources](https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal). + +### Configure Client Secret + +Follow the steps to create a new client secret to be used by the app. + +**Step 1 –** Go to **Manage** > **Certificates & secrets** and click **New client secret**. + +**Step 2 –** Enter the description. From the expiration options select **24 months**. + +**Step 3 –** Click **Add**. + +**Step 4 –** The new secret will be displayed in the list. Click **Copy to clipboard** icon on the +"Value" parameter on the right side of the screen. + +See the following Microsoft article for more information on how to add a client secret: +[Add a client secret](https://learn.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app#add-a-client-secret). + +### Obtain Tenant Name + +Follow the steps to obtain the tenant name. + +**Step 1 –** Go to **Microsoft Entra ID** > **Overview**. + +**Step 2 –** In the Tenant Information section, locate the **Primary domain** field, copy its value +and store to a safe location. diff --git a/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/ports.md b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/ports.md new file mode 100644 index 0000000000..ef03513b55 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/ports.md @@ -0,0 +1,23 @@ +--- +title: "Microsoft Entra ID Ports" +description: "Microsoft Entra ID Ports" +sidebar_position: 10 +--- + +# Microsoft Entra ID Ports + +Review a full list of protocols and ports required for Netwrix Auditor for Microsoft Entra ID +(formerly Azure AD). + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to the remote ports on the computer where Netwrix Auditor Server + resides. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 80 TCP port. + +| Port | Protocol | Source | Target | Purpose | +| ---- | -------- | ---------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------- | +| 80 | TCP/UDP | Netwrix Auditor Server | For a full list of Microsoft Entra ID URLs, refer to the following Microsoft support article: [Office 365 URLs and IP address ranges](https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2) | login.windows.net graph.windows.net manage.office.com | +| 443 | TCP/UDP | Netwrix Auditor Server | For a full list of Microsoft Entra ID URLs, refer to the following Microsoft support article: [Office 365 URLs and IP address ranges](https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2) | login.windows.net graph.windows.net manage.office.com | diff --git a/docs/auditor/10.8/configuration/microsoft365/overview.md b/docs/auditor/10.8/configuration/microsoft365/overview.md new file mode 100644 index 0000000000..0e0f101553 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/overview.md @@ -0,0 +1,14 @@ +--- +title: "Microsoft 365" +description: "Microsoft 365" +sidebar_position: 70 +--- + +# Microsoft 365 + +Microsoft 365 audit configuration will cover the following components: + +- [Exchange Online](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/overview.md) +- [Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/overview.md) +- [MS Teams](/docs/auditor/10.7/configuration/microsoft365/teams/overview.md) +- [SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/overview.md) diff --git a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/_category_.json b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/_category_.json new file mode 100644 index 0000000000..c3c351624a --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "SharePoint Online", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/overview.md b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/overview.md new file mode 100644 index 0000000000..857d0de0fb --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/overview.md @@ -0,0 +1,55 @@ +--- +title: "SharePoint Online" +description: "SharePoint Online" +sidebar_position: 30 +--- + +# SharePoint Online + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in the following way: + +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - Unified audit log must be enabled for a Tenant. See the Microsoft + [Turn auditing on or off](https://docs.microsoft.com/en-us/microsoft-365/compliance/turn-audit-log-search-on-or-off?view=o365-worldwide) + article for additional information. + - Prepare a Data Collecting Account as described in the + [Permissions for SharePoint Online Auditing ](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/permissions/permissions.md) topic. + - Configure required protocols and ports, as described in the + [SharePoint Online Ports](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/ports.md) topic. + +Review a full list of object types and attributes Netwrix Auditor can collect on SharePoint Online. +OneDrive for Business changes are reported as SharePoint Online. + +| Object type | Attributes | +| ------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Site Collection | - Site Collection administrators | +| Document | - Name - Permissions - URL - Data categories | +| Site | - Permissions | +| Site Collection Sharing Policy | - Sharing with external users - Sharing using anonymous access links | +| Sharing Policy | - Sharing with external users - Sharing using anonymous access links - External users must accept sharing invitations using the same account that the invitations were sent to - Sharing Domain Restriction mode - Allow domain list - Deny domain list - Require anonymous links expire in days | +| Group | - Members - Name | +| Folder | - Permissions | +| Sharing Invitation | - Expiration date - Shared with | +| Access Request | - Expiration date | + +## Sensitive data + +Starting with the version 10, Netwrix Auditor is able to report about sensitive data in your IT +infrastructure. Pay attention to the "_Data categories_" column in search and reports (for the +"_Document_" object types only). See the +[Sensitive Data Discovery ](/docs/auditor/10.7/admin/settings/sensitivedatadiscovery.md)topic for additional +information on how to enable monitoring of sensitive data in Netwrix Auditor. diff --git a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/_category_.json b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/_category_.json new file mode 100644 index 0000000000..0509816239 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Permissions for SharePoint Online Auditing", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "permissions" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/basicauth.md b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/basicauth.md new file mode 100644 index 0000000000..addafa008f --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/basicauth.md @@ -0,0 +1,78 @@ +--- +title: "Using Basic Authentication with SharePoint Online" +description: "Using Basic Authentication with SharePoint Online" +sidebar_position: 20 +--- + +# Using Basic Authentication with SharePoint Online + +With basic authentication, your SharePoint Online will be accessed on behalf of a user. You will +need to provide Office 365 user name and password in the monitored item properties. To access the +Microsoft Entra ID (formerly Azure AD)/Office 365 organization and perform initial data collection, +the user account will need an administrative role in the cloud-based infrastructure. + +The user account should be a _Cloud-only_ account. + +Further permission assignment will depend on the data you plan to collect: + +- To collect both activity and state-in-time data, the administrative role will be still needed. See + the table below for details. +- To collect activity data only, the privileged role can be revoked from the specified account after + the initial data collection. + +## Required Roles and Permissions + +| To... | Requirement | Comment | +| --------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Collect activity and state-in-time data | Any of the following role combinations: - Application Administrator & Privileged Role Administrator OR - Cloud Application Administrator & Privileged Role Administrator OR - _Global Admin_ (_Company Administrator_ in Microsoft Entra ID PowerShell terms) | Prepare a **Cloud-only** user account and specify it in the monitored item properties. See the [SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/overview.md) topic for additional information. | +| Collect activity data only | 1. For initial connection to SharePoint Online, initial data collection, and Netwrix Auditor upgrade from previous version — any of the role combinations listed above. 2. After the initial data collection, the privileged roles can be revoked from this account. | | + +## Assigning a Privileged Role for SharePoint and Office 365 + +When configuring a monitored item for Microsoft Entra ID (formerly Azure AD) or Office 365 auditing +with basic authentication, specify a data collecting account that has sufficient privileges in +Microsoft Entra ID. This account should be able to create a dedicated application in your Microsoft +Entra ID domain. Depending on your requirements and company policies, you can select one of the +following approaches: + +- Assign a privileged role (for example, _Application Administrator_ & _Privileged Role + Administrator_) to the account, then revoke it after the application creation and initial data + collection, and assign a less-privileged role to this account (for example, _Security Reader_). +- Use the account with a privileged role on a regular basis. Any additional role assignments will + not be necessary in this case. If you select this method, contact your security administrator to + avoid violations of security policies in your organization. + +**NOTE:** If you previously used a non-privileged account for Microsoft Entra ID data collection in +your Netwrix Auditor, consider that after the upgrade you will have to perform the role assignment +procedure again, selecting one of these approaches. Until then, data collection will not be +performed. + +Follow the steps to assign a privileged role to the account. + +**Step 1 –** Sign in to Microsoft Entra ID portal using your Microsoft account. + +**Step 2 –** Select Microsoft Entra ID on the left. + +**Step 3 –** Select the account that you want to use as data collecting account, or create a new +user. + +**Step 4 –** Make sure you have disabled multi-factor authentication for this account. + +**Step 5 –** Expand Directory role and select the role you need (for example, Global admin or any +other privileged role). + +_Remember,_ In Microsoft Graph API, Microsoft Entra ID Graph API, and Microsoft Entra ID PowerShell, +the Global admin role is identified as Company Administrator. + +**Step 6 –** Click OK. + +**Step 7 –** In Auditor, create a monitoring plan for auditing Microsoft Entra ID and specify this +account with this privileged role on the Specify the account for collecting data step. + +**Step 8 –** Wait until initial data collection completes. + +**Step 9 –** Open Microsoft Entra ID portal and remove the privileged role from the account. + +**Step 10 –** Assign a less-privileged role to this account. + +A less privileged role has now been assigned to the account. diff --git a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/_category_.json b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/_category_.json new file mode 100644 index 0000000000..bc36d91cca --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Using Modern Authentication with SharePoint Online", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "modernauth" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/manifest.md b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/manifest.md new file mode 100644 index 0000000000..7c63e057d2 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/manifest.md @@ -0,0 +1,61 @@ +--- +title: "Assigning Application Permissions Using Manifest" +description: "Assigning Application Permissions Using Manifest" +sidebar_position: 10 +--- + +# Assigning Application Permissions Using Manifest + +Follow the steps to assign application permissions using Manifest. + +**Step 1 –** Under **App registrations**, select the newly created app. + +**Step 2 –** Select **Manifest** on the left. + +**Step 3 –** Locate the **requiredResourceAccess** property in the manifest and edit it with the +following in the square brackets ([]). Then click **Save**. + +Optionally, you can select **Download** to edit the manifest locally, and then use Upload to reapply +it to your application. + +Do one of the following: + +- For the clear installation of Netwrix Auditor, add roles as described in the + [Using Modern Authentication with SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/permissions/modernauth/modernauth.md) topic. + +- If you upgraded Netwrix Auditor from the version 10.0, replace all existing content under the + **requiredResourceAccess** property. + +``` +{ +    "resourceAppId": "00000003-0000-0ff1-ce00-000000000000", +    "resourceAccess": [ +        { +            "id": "678536fe-1083-478a-9c59-b99265e6b0d3", +            "type": "Role" +        } +    ] +}, +{ +    "resourceAppId": "00000003-0000-0000-c000-000000000000", +    "resourceAccess": [ +        { +            "id": "1bfefb4e-e0b5-418b-a88f-73c46d2cc8e9", +            "type": "Role" +        }, +        { +            "id": "7ab1d382-f21e-4acd-a863-ba3e13f7da61", +            "type": "Role" +        } +    ] +}, +{ +"resourceAppId": "c5393580-f805-4401-95e8-94b7a6ef2fc2", +"resourceAccess": [ +        { +            "id": "594c1fb6-4f81-4475-ae41-0c394909246c", +            "type": "Role" +        } +    ] +} +``` diff --git a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/modernauth.md b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/modernauth.md new file mode 100644 index 0000000000..c3316501c3 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/modernauth.md @@ -0,0 +1,153 @@ +--- +title: "Using Modern Authentication with SharePoint Online" +description: "Using Modern Authentication with SharePoint Online" +sidebar_position: 10 +--- + +# Using Modern Authentication with SharePoint Online + +This option is recommended for organizations that use modern authentication as the identity +management approach, having multi-factor authentication (MFA) enabled for their user accounts. In +this scenario,Netwrix Auditor will access the cloud-based infrastructure via Microsoft Graph and +other modern APIs, being authenticated through a pre-configured Microsoft Entra ID application with +appropriate access permissions. + +If you plan to implement such scenario, you should register an Microsoft Entra ID app manually and +provide its settings to Auditor when configuring a monitored item. + +Support for modern authentication will allow you to audit the organizations where MFA is enabled for +all users, including service accounts. + +Required configuration procedure includes several manual steps, as described in the corresponding +section: + +## Configuring Microsoft Entra ID App for Auditing SharePoint Online + +To collect data with modern authentication, you should do the following: + +**Step 1 –** Create an Microsoft Entra ID app that will be used for modern authentication. See the +Creating and registering a new app in Microsoft Entra ID topic for additional information. + +**Step 2 –** Grant required permissions to that application using Microsoft Entra ID app manifest. +See the Granting required permissions topic for additional information. + +**Step 3 –** Configure client secret for that application. See the Configuring client secret topic +for additional information. + +**Step 4 –** Obtain tenant ID – you will need it when configuring a monitored item (Office 365 +tenant) settings. See the Obtaining tenant name topic for additional information. + +### Creating and registering a new app in Microsoft Entra ID + +You will need to create a dedicated app for each cloud-based data source you plan to audit: + +- Microsoft Entra ID (formerly Azure AD) +- Exchange Online +- SharePoint Online +- MS Teams + +If you plan to audit all of them, you need to create 4 apps. + +Follow the steps to register a new Microsoft Entra ID application. + +**Step 1 –** Sign into the **Microsoft 365 Admin Center** with your _Global Administrator_, +_Application Administrator_ or _Cloud Application Administrator_ account and go to the **Microsoft +Entra ID admin center**. + +**Step 2 –** Under the App registrations section, select **New registration**. + +**Step 3 –** In the Name field, enter the application name. + +**Step 4 –** In the Supported account types select who can use this application – use the **Accounts +in this organizational directory only** option. + +**Step 5 –** Click the **Register** button. Application **Redirect URI** is optional, you can leave +it blank. + +**Step 6 –** Your Application (client) ID is now available in the Overview section. Copy it to a +safe location. + +See the following Microsoft article for additional information on how to create an application and +service principal using Microsoft Entra ID Admin portal: +[Create an Microsoft Entra ID application and service principal that can access resources](https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal). + +### Granting required permissions + +You need to grant your new application the required API permissions. Microsoft Entra ID applications +can be assigned _Delegated_ or _Application_ permissions: + +- _Delegated_ permissions require a signed-in user present who consents to the permissions every + time an API call is sent. +- _Application_ permissions are consented by an administrator once granted. + +For the newly created app, you should use the _Application_ permissions. + +To grant required permissions, assign granular _Application_ permissions required for Netwrix +Auditor to collect data from the application. To do so, perform the following steps: + +**Step 1 –** Go to the **App registrations** and open the app you created to assign Auditor +permissions. + +**Step 2 –** Go to **Manage > API permissions** and click **Add a permission** button. + +**Step 3 –** Assign the required permissions. + +Permission assignment will depend on the data you plan to collect: + +- Activity data only +- Both activity and state-in-time data + +| To... | Requirement | Comment | +| --------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Collect activity and State-in-Time data | Microsoft Entra ID app requires the following Application permissions: 1. Office 365 Management APIs - ActivityFeed.Read 2. Microsoft Graph - Application.ReadWrite.All - Directory.Read.All 3. SharePoint - Sites.FullControl.All | To learn how to assign required permissions, see the Configuring Microsoft Entra ID App for Auditing SharePoint Online section for additional information. Application.ReadWrite.All is required for automatic rotation of the certificate. Rotating certificates in the Entra ID application is important for the following reasons: - Mitigate Risks from Expired Certificates - Enhance Security - Compliance Requirements - Operational Continuity | + +**NOTE:** You can also assign application permissions by editing Microsoft Entra app manifest. See +the Using Modern Authentication with SharePoint Online topic for additional information on how to +assign the required permissions. Information about manifest is also described in the following +Microsoft +article: [ Microsoft Entra app manifest](https://learn.microsoft.com/en-us/azure/active-directory/develop/reference-app-manifest). + +### Granting Admin consent to a tenant + +Go back to the **Microsoft Entra ID admin center** > **Applications** > **App registrations** > +**API permissions** and click **Grant admin consent for** *``*. When prompted to +confirm, click **Yes**. + +**NOTE:** For Office 365 permissions, go to **Request API Permissions** > **APIs my organization +users** and type "Office 365" in the search bar. + +See the following Microsoft article for additional information on how to create an application and +service principal using Microsoft Entra ID Admin portal: +[Create an Microsoft Entra application and service principal that can access resources](https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal). + +### Configuring client secret + +Follow the steps to create a new client secret to be used by the app. + +**Step 1 –** Go to **Manage** > **Certificates & secrets** and click **New client secret**. + +**Step 2 –** Enter the description. From the expiration options select **24 months**. + +**Step 3 –** Click **Add**. + +**Step 4 –** The new secret will be displayed in the list. Click **Copy to clipboard** icon on the +"Value" parameter on the right side of the screen. + +See the following Microsoft article for more information on how to add a client secret: +[Add a client secret](https://learn.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app#add-a-client-secret). + +### Obtaining tenant name + +Follow the steps to obtain the tenant name. + +**Step 1 –** Navigate to **Microsoft Entra ID** > **Overview**. + +**Step 2 –** In the **Tenant information** locate the **Primary domain** field, copy its value and +store to a safe location. + +See the following Microsoft article for additional information on how to obtain tenant name: +[Locate important IDs for a user](https://learn.microsoft.com/en-us/partner-center/find-ids-and-domain-names). + +Then, create a corresponding monitoring plan in Netwrix Auditor and add an item (Office 365 tenant) +to it. See the [Microsoft Entra ID](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md) +topic for additional information. diff --git a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/permissions.md b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/permissions.md new file mode 100644 index 0000000000..1df49b0c1b --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/permissions.md @@ -0,0 +1,59 @@ +--- +title: "Permissions for SharePoint Online Auditing" +description: "Permissions for SharePoint Online Auditing" +sidebar_position: 20 +--- + +# Permissions for SharePoint Online Auditing + +Auditor allows you to audit Office 365 organizations that have established modern authentication as +their identity management approach, including support for +[multi-factor authentication (MFA)](https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks). +To learn more about modern authentication, refer to the following Microsoft article: +[What is modern authentication](https://docs.microsoft.com/en-us/office365/enterprise/hybrid-modern-auth-overview#what-is-modern-authentication). + +In this scenario, Netwrix Auditor will access the cloud-based infrastructure via Microsoft Graph and +other modern APIs, being authenticated through a pre-configured Microsoft Entra ID (formerly Azure +AD) application with appropriate access permissions. So, you should register an Microsoft Entra ID +app and provide its settings to Auditor  when configuring a monitored item. + +## Authentication for SharePoint Online Auditing + +To collect audit data from your SharePoint Online and OneDrive for Business, Netwrix Auditor uses a +dedicated Microsoft Entra ID application and leverages APIs access permissions granted to that app. +To register this application and assign required permissions, an Microsoft Entra ID account with an +administrative role will be required: + +- If Modern Authentication is used: + - Microsoft Entra ID application should be created manually by user with administrative role and + assigned required permissions. This app will allow you to collect both activity and + state-in-time data. See the + [Configuring Microsoft Entra ID App for Auditing SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/permissions/modernauth/modernauth.md#configuring-microsoft-entra-id-app-for-auditing-sharepoint-online) + section for additional information. + - You will need to provide the Microsoft Entra ID app settings in the monitored item (Office 365 + tenant) properties. See the + [Microsoft Entra ID](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md) topic for + additional information. + +See the [Using Modern Authentication with SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/permissions/modernauth/modernauth.md) topic for additional +information. + +- If Basic Authentication is used: + + - Microsoft Entra ID application named **Netwrix Auditor for Microsoft Entra ID** will be + created automatically when Netwrix Auditor connects to the monitored item (Office 365 tenant) + for the first time. Thus, you will need to prepare an Office 356 user account with an + administrative role in Microsoft Entra ID — to create an app and perform initial data + collection. + - Provide this user name and password in the monitored item properties. See the + [Microsoft Entra ID](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md) topic for + additional information. + - Permissions for ongoing data collection will depend on data you plan to collect: + + - To collect both activity (event-based) and state-in-time data, the administrative role + will be still needed. + - To collect activity data only, the privileged role can be revoked from the specified + account after the initial data collection. + +See the [Using Basic Authentication with SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/permissions/basicauth.md) topic for additional +information. diff --git a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/ports.md b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/ports.md new file mode 100644 index 0000000000..9b04303ca0 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/ports.md @@ -0,0 +1,22 @@ +--- +title: "SharePoint Online Ports" +description: "SharePoint Online Ports" +sidebar_position: 10 +--- + +# SharePoint Online Ports + +Review a full list of protocols and ports required for Netwrix Auditor for Office 365. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to the remote ports on the computer where Netwrix Auditor Server + resides. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 80 TCP port. + +| Port | Protocol | Source | Target | Purpose | +| ---- | -------- | ---------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------- | +| 80 | TCP | Netwrix Auditor Server | For a full list of Office 365 URLs, refer to the following Microsoft support article: [Office 365 URLs and IP address ranges](https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2) | login.windows.net graph.windows.net manage.office.com | +| 443 | TCP | Netwrix Auditor Server | For a full list of Office 365 URLs, refer to the following Microsoft support article: [Office 365 URLs and IP address ranges](https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2) | login.windows.net graph.windows.net manage.office.com | diff --git a/docs/auditor/10.8/configuration/microsoft365/teams/_category_.json b/docs/auditor/10.8/configuration/microsoft365/teams/_category_.json new file mode 100644 index 0000000000..1408791267 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/teams/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "MS Teams", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/microsoft365/teams/overview.md b/docs/auditor/10.8/configuration/microsoft365/teams/overview.md new file mode 100644 index 0000000000..5ec82d3239 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/teams/overview.md @@ -0,0 +1,52 @@ +--- +title: "MS Teams" +description: "MS Teams" +sidebar_position: 40 +--- + +# MS Teams + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - Unified audit log must be enabled for a Tenant. See the Microsoft + [Turn auditing on or off](https://docs.microsoft.com/en-us/microsoft-365/compliance/turn-audit-log-search-on-or-off?view=o365-worldwide) + article for additional information. + - Prepare a Data Collecting Account as described in the + [Permissions for Teams Auditing](/docs/auditor/10.7/configuration/microsoft365/teams/permissions/permissions.md) topic. + - Configure required protocols and ports, as described in the [Teams Ports](/docs/auditor/10.7/configuration/microsoft365/teams/ports.md) topic. + +Auditor can monitor for operations with MS Teams entities, collect state-in-time snapshots and track +changes to the object attributes. This section provides detailed information on these activities. + +Starting with the version 10.5, Auditor is able to report about sensitive data in your IT +infrastructure. Pay attention to the "_Data categories_" column in search and reports (for the +"_Document_" object types only). Refer to +[Sensitive Data Discovery ](/docs/auditor/10.7/admin/settings/sensitivedatadiscovery.md) for detailed +instructions on how to enable monitoring of sensitive data in Auditor. + +Review a full list of object types and attributes Auditor can collect on SharePoint Online. OneDrive +for Business changes are reported as SharePoint Online. + +| Object type | Attributes | +| ----------- | -------------------------------------------- | +| Document | - Name - Permissions - URL - Data categories | +| Team | - Members - Name | +| Folder | - Permissions | diff --git a/docs/auditor/10.8/configuration/microsoft365/teams/permissions/_category_.json b/docs/auditor/10.8/configuration/microsoft365/teams/permissions/_category_.json new file mode 100644 index 0000000000..c7576b862a --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/teams/permissions/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Permissions for Teams Auditing", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "permissions" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/microsoft365/teams/permissions/basicauth.md b/docs/auditor/10.8/configuration/microsoft365/teams/permissions/basicauth.md new file mode 100644 index 0000000000..261e943771 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/teams/permissions/basicauth.md @@ -0,0 +1,73 @@ +--- +title: "Using Basic Authentication with MS Teams" +description: "Using Basic Authentication with MS Teams" +sidebar_position: 10 +--- + +# Using Basic Authentication with MS Teams + +With basic authentication, your MS Teams organization will be accessed on behalf of a user. You will +need to provide user name and password in the monitored item properties. Auditor will use this +account to access the Microsoft Entra ID (formerly Azure AD) organization, automatically create a +Microsoft Entra ID app with required permissions, and perform initial data collection. For that, the +user account will need an administrative role in the cloud-based infrastructure. + +## Required Roles and Permissions + +| To... | Requirement | Comment | +| --------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------- | +| Create Microsoft Entra ID application, run initial data collection, and perform Auditor upgrade from previous version | Any of the following role combinations: - Application Administrator & Privileged Role Administrator & _Teams Administrator_ OR - Cloud Application Administrator & Privileged Role Administrator & _Teams Administrator_ OR - _Global Admin_ | Prepare a user account and specify it in the monitored item properties. See the [MS Teams](/docs/auditor/10.7/configuration/microsoft365/teams/overview.md) topic for additional information. | +| Collect activity data | Any of the following roles: _Application Administrator_ & _Teams Administrator_ OR _Cloud Application Administrator_ & _Teams Administrator_ OR _Global Admin_ | | + +## Assigning a Privileged Role for Microsoft Entra ID and Office 365 + +When configuring a monitored item for Microsoft Entra ID (formerly Azure AD) or Office 365 auditing +with basic authentication, specify a data collecting account that has sufficient privileges in +Microsoft Entra ID. This account should be able to create a dedicated application in your Microsoft +Entra ID domain. Depending on your requirements and company policies, you can select one of the +following approaches: + +- Assign a privileged role (for example, _Application Administrator_ & _Privileged Role + Administrator_) to the account, then revoke it after the application creation and initial data + collection, and assign a less-privileged role to this account (for example, _Security Reader_). +- Use the account with a privileged role on a regular basis. Any additional role assignments will + not be necessary in this case. If you select this method, contact your security administrator to + avoid violations of security policies in your organization. + +**NOTE:** If you previously used a non-privileged account for Microsoft Entra ID data collection in +your Netwrix Auditor, consider that after the upgrade you will have to perform the role assignment +procedure again, selecting one of these approaches. Until then, data collection will not be +performed. + +Follow the steps to assign a privileged role to the account. + +**Step 1 –** Sign in to Microsoft Entra ID portal using your Microsoft account. + +**Step 2 –** Select Microsoft Entra ID on the left. + +**Step 3 –** Select the account that you want to use as data collecting account, or create a new +user. + +**Step 4 –** Make sure you have disabled multi-factor authentication for this account. + +**Step 5 –** Expand Directory role and select the role you need (for example, Global admin or any +other privileged role). + +_Remember,_ In Microsoft Graph API, Microsoft Entra ID Graph API, and Microsoft Entra ID PowerShell, +the Global admin role is identified as Company Administrator. + +**Step 6 –** Click OK. + +**Step 7 –** In Auditor, create a monitoring plan for auditing Microsoft Entra ID and specify this +account with this privileged role on the Specify the account for collecting data step. + +**Step 8 –** Wait until initial data collection completes. + +**Step 9 –** Open Microsoft Entra ID portal and remove the privileged role from the account. + +**Step 10 –** Assign a less-privileged role to this account. + +A less privileged role has now been assigned to the account. + +See the [Permissions for Microsoft Entra ID Auditing](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/permissions.md) topic for +additional information. diff --git a/docs/auditor/10.8/configuration/microsoft365/teams/permissions/modernauth/_category_.json b/docs/auditor/10.8/configuration/microsoft365/teams/permissions/modernauth/_category_.json new file mode 100644 index 0000000000..d1818492c9 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/teams/permissions/modernauth/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Using Modern Authentication with MS Teams", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "modernauth" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/microsoft365/teams/permissions/modernauth/manifest.md b/docs/auditor/10.8/configuration/microsoft365/teams/permissions/modernauth/manifest.md new file mode 100644 index 0000000000..e326caaf65 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/teams/permissions/modernauth/manifest.md @@ -0,0 +1,73 @@ +--- +title: "Assign Application Permissions Using Manifest" +description: "Assign Application Permissions Using Manifest" +sidebar_position: 10 +--- + +# Assign Application Permissions Using Manifest + +Follow the steps to assign application permissions using manifest. + +**Step 1 –** Under **App registrations**, select the newly created app. + +**Step 2 –** Select **Manifest** on the left. + +**Step 3 –** Locate the **requiredResourceAccess** property in the manifest and edit it with the +following in the square brackets ([]). + +**Step 4 –** Click **Save**. + +Optionally, you can select **Download** to edit the manifest locally, and then use Upload to reapply +it to your application. + +Depending on your installation type, do one of the following: + +- For the clear installation, add roles as described below. +- If you upgraded Auditor from previous version, replace all existing content under the + requiredResourcdAccess property. + +``` +{ +    "resourceAppId": "00000003-0000-0000-c000-000000000000", +    "resourceAccess": [ +        { +            "id": "332a536c-c7ef-4017-ab91-336970924f0d", +            "type": "Role" +        }, +        { +            "id": "b0afded3-3588-46d8-8b3d-9842eff778da", +            "type": "Role" +        }, +        { +            "id": "1bfefb4e-e0b5-418b-a88f-73c46d2cc8e9", +            "type": "Role" +        }, +        { +            "id": "7ab1d382-f21e-4acd-a863-ba3e13f7da61", +            "type": "Role" +        }, +        { +            "id": "660b7406-55f1-41ca-a0ed-0b035e182f3e", +            "type": "Role" +        } +    ] +}, +{ +    "resourceAppId": "00000003-0000-0ff1-ce00-000000000000", +    "resourceAccess": [ +        { +            "id": "678536fe-1083-478a-9c59-b99265e6b0d3", +            "type": "Role" +        } +    ] +}, +{ +    "resourceAppId": "c5393580-f805-4401-95e8-94b7a6ef2fc2", +    "resourceAccess": [ +        { +            "id": "594c1fb6-4f81-4475-ae41-0c394909246c", +            "type": "Role" +        } +    ] +} +``` diff --git a/docs/auditor/10.8/configuration/microsoft365/teams/permissions/modernauth/modernauth.md b/docs/auditor/10.8/configuration/microsoft365/teams/permissions/modernauth/modernauth.md new file mode 100644 index 0000000000..68065d0d2f --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/teams/permissions/modernauth/modernauth.md @@ -0,0 +1,173 @@ +--- +title: "Using Modern Authentication with MS Teams" +description: "Using Modern Authentication with MS Teams" +sidebar_position: 20 +--- + +# Using Modern Authentication with MS Teams + +Modern authentication allows you to audit MS Teams environments without using an account with basic +authentication. The configuration procedure includes several manual steps, as described below. + +### Access MS Teams Using Modern Authentication + +This option is recommended for organizations that use modern authentication as the identity +management approach, having multi-factor authentication (MFA) enabled for their user accounts. In +this scenario, Auditor will access the cloud-based infrastructure via Microsoft Graph and other +modern APIs, being authenticated through a preconfigured Microsoft Entra ID (formerly Azure AD) +application with appropriate access permissions. + +If you plan to implement this scenario, you should register an Microsoft Entra ID app manually and +provide its settings to Netwrix Auditor when configuring a monitored item. + +## Configure the Microsoft Entra ID App for Auditing MS Teams + +Follow the steps to use a data collecting account with modern authentication: + +**Step 1 –** Create an Microsoft Entra ID app that will be used for modern authentication. See the +Create and Register a New App in Microsoft Entra ID section for additional information. + +**Step 2 –** Grant required permissions to that application using Microsoft Entra ID app manifest. +See the Grant Required Permissions topic for additional information. + +**Step 3 –** Configure client secret for that application. See the Configure Client Secret section +for additional information. + +**Step 4 –** Obtain the tenant ID. You will need it when configuring a monitored item (Office 365 +tenant) settings. See the Obtain Tenant Name topic for additional information. + +### Create and Register a New App in Microsoft Entra ID + +You will need to create a dedicated app for each cloud-based data source you plan to audit: + +- Microsoft Entra ID (formerly Azure AD) +- Exchange Online +- SharePoint Online +- MS Teams + +If you plan to audit all of them, you need to create 4 apps. + +Follow the steps to register a new Microsoft Entra ID application. + +**Step 1 –** Sign into the **Microsoft 365 Admin Center** with your _Global Administrator_, +_Application Administrator_ or _Cloud Application Administrator_ account and go to the **Microsoft +Entra ID admin center**. + +**Step 2 –** Under the App registrations section, select **New registration**. + +**Step 3 –** In the Name field, enter the application name. + +**Step 4 –** In the Supported account types select who can use this application – use the **Accounts +in this organizational directory only** option. + +**Step 5 –** Click the **Register** button. Application **Redirect URI** is optional, you can leave +it blank. + +**Step 6 –** Your Application (client) ID is now available in the Overview section. Copy it to a +safe location. + +See the following Microsoft article for additional information on how to create an application and +service principal using Microsoft Entra ID Admin portal: +[Create an Microsoft Entra ID application and service principal that can access resources](https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal). + +### Grant Required Permissions + +You need to grant your new application the required API permissions. Microsoft Entra ID applications +can be assigned _Delegated_ or _Application_ permissions: + +- _Delegated_ permissions require a signed-in user present who consents to the permissions every + time an API call is sent. +- _Application_ permissions are consented by an administrator once granted. + +For the newly created app, you should use the _Application_ permissions. + +To grant required permissions, assign granular _Application_ permissions required for Netwrix +Auditor to collect data from the application. To do so, perform the following steps: + +**Step 1 –** Go to the **App registrations** and open the app you created to assign Auditor +permissions. + +**Step 2 –** Go to **Manage > API permissions** and click **Add a permission** button. + +**Step 3 –** Assign the required permissions. + +Permission assignment will depend on the data you plan to collect: + +- Activity data only +- Both activity and state-in-time data + +- | Requirement | Comment | + | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- | + | Microsoft Entra ID app requires the following **Application** permissions: 1. **Microsoft Graph** - Application.ReadWrite.All - **AuditLog.Read.All** - Directory.Read.All - Sites.Read.All - TeamMember.Read.All 2. **Office 365 Management APIs** - **ActivityFeed.Read** 3. SharePoint - **Sites.FullControl.All** | To learn how to assign required permissions, see the Configure the Microsoft Entra ID App for Auditing MS Teams topic for additional information. | + +**NOTE:** You can also assign application permissions by editing Microsoft Entra app manifest. See +the Using Modern Authentication with MS Teams topic for additional information on how to assign the +required permissions. Information about manifest is also described in the following Microsoft +article: [ Microsoft Entra app manifest](https://learn.microsoft.com/en-us/azure/active-directory/develop/reference-app-manifest). + +#### Grant Admin Consent to a Tenant + +Go back to the **Microsoft Entra ID admin center** > **Applications** > **App registrations** > +**API permissions** and click **Grant admin consent for** *``*. When prompted to +confirm, click **Yes**. + +**NOTE:** For Office 365 permissions, go to **Request API Permissions** > **APIs my organization +users** and type "Office 365" in the search bar. + +See the following Microsoft article for additional information on how to create an application and +service principal using Microsoft Entra ID Admin portal: +[Create an Microsoft Entra application and service principal that can access resources](https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal). + +### Configure Client Secret + +Follow the steps to create a new client secret to be used by the app. + +**Step 1 –** Go to **Manage** > **Certificates & secrets** and click **New client secret**. + +**Step 2 –** Enter the description. From the expiration options select **24 months**. + +**Step 3 –** Click **Add**. + +**Step 4 –** The new secret will be displayed in the list. Click **Copy to clipboard** icon on the +"Value" parameter on the right side of the screen. + +See the following Microsoft article for more information on how to add a client secret: +[Add a client secret](https://learn.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app#add-a-client-secret). + +### Add MS Teams monitoring plan + +Follow the steps to add MS Teams monitoring plan in the Netwrix Auditor. + +**Step 1 –** In the Monitoring Plans, click **Add Plan** button. + +**Step 2 –** Create a monitoring plan with the MS Teams data source. + +**Step 3 –** Add the "Office 365 tenant" item. + +**Step 4 –** Click **Select**. + +**Step 5 –** Enter your tenant name. + +**Step 6 –** Choose modern authentication. + +**Step 7 –** Enter Application ID and Application secret you have created before. + +**Step 8 –** Click **Add**. + +MS Teams monitoring plan has been added to Auditor and initial data collection has begun. + +### Obtain Tenant Name + +Follow the steps to obtain the tenant name. + +**Step 1 –** Navigate to **Microsoft Entra ID** > **Overview**. + +**Step 2 –** In the **Tenant information** locate the **Primary domain** field, copy its value and +store to a safe location. + +See the following Microsoft article for additional information on how to obtain tenant name: +[Locate important IDs for a user](https://learn.microsoft.com/en-us/partner-center/find-ids-and-domain-names). + +Then, create a corresponding monitoring plan in Netwrix Auditor and add an item (Office 365 tenant) +to it. See the [Microsoft Entra ID](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md) +topic for additional information. diff --git a/docs/auditor/10.8/configuration/microsoft365/teams/permissions/permissions.md b/docs/auditor/10.8/configuration/microsoft365/teams/permissions/permissions.md new file mode 100644 index 0000000000..efce2c80b5 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/teams/permissions/permissions.md @@ -0,0 +1,33 @@ +--- +title: "Permissions for Teams Auditing" +description: "Permissions for Teams Auditing" +sidebar_position: 20 +--- + +# Permissions for Teams Auditing + +Auditor allows you to audit Office 365 organizations that have established modern authentication as +their identity management approach, including support for +[multi-factor authentication (MFA)](https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks). +To learn more about modern authentication, refer to the following Microsoft article: +[What is modern authentication](https://docs.microsoft.com/en-us/office365/enterprise/hybrid-modern-auth-overview#what-is-modern-authentication). + +In this scenario, Netwrix Auditor will access the cloud-based infrastructure via Microsoft Graph and +other modern APIs, being authenticated through a pre-configured Microsoft Entra ID (formerly Azure +AD) application with appropriate access permissions. So, you should register an Microsoft Entra ID +app and provide its settings to Auditor  when configuring a monitored item. + +**NOTE:** In some scenarios multi-factor authentication cannot be enabled for Auditor  service +account. If so, you will need to configure an account with basic authentication to access Microsoft +Entra ID/Office 365 tenant. + +## For Microsoft Teams + +Before you start creating a monitoring plan to audit your Active Directory, plan for the account +that will be used for data collection – it should meet the requirements listed in this topic. Then +you will provide this account in the monitoring plan wizard (or in the monitored item settings). + +Refer to the following topics to access Microsoft teams: + +- [Using Basic Authentication with MS Teams](/docs/auditor/10.7/configuration/microsoft365/teams/permissions/basicauth.md) +- [Using Modern Authentication with MS Teams](/docs/auditor/10.7/configuration/microsoft365/teams/permissions/modernauth/modernauth.md) diff --git a/docs/auditor/10.8/configuration/microsoft365/teams/ports.md b/docs/auditor/10.8/configuration/microsoft365/teams/ports.md new file mode 100644 index 0000000000..0c23e694f7 --- /dev/null +++ b/docs/auditor/10.8/configuration/microsoft365/teams/ports.md @@ -0,0 +1,22 @@ +--- +title: "Teams Ports" +description: "Teams Ports" +sidebar_position: 10 +--- + +# Teams Ports + +Review a full list of protocols and ports required for Netwrix Auditor for Microsoft Teams. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to the remote ports on the computer where Netwrix Auditor Server + resides. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 80 TCP port. + +| Port | Protocol | Source | Target | Purpose | +| ---- | -------- | ---------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------- | +| 80 | TCP | Netwrix Auditor Server | For a full list of Office 365 URLs, refer to the following Microsoft support article: [Office 365 URLs and IP address ranges](https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2) | outlook.office365.com graph.windows.net manage.office.com | +| 443 | TCP | Netwrix Auditor Server | For a full list of Office 365 URLs, refer to the following Microsoft support article: [Office 365 URLs and IP address ranges](https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2) | outlook.office365.com graph.windows.net manage.office.com | diff --git a/docs/auditor/10.8/configuration/networkdevices/_category_.json b/docs/auditor/10.8/configuration/networkdevices/_category_.json new file mode 100644 index 0000000000..b03f00dffb --- /dev/null +++ b/docs/auditor/10.8/configuration/networkdevices/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Network Devices", + "position": 80, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/networkdevices/ciscoasa.md b/docs/auditor/10.8/configuration/networkdevices/ciscoasa.md new file mode 100644 index 0000000000..de6d4260b5 --- /dev/null +++ b/docs/auditor/10.8/configuration/networkdevices/ciscoasa.md @@ -0,0 +1,103 @@ +--- +title: "Configure Cisco ASA Devices" +description: "Configure Cisco ASA Devices" +sidebar_position: 20 +--- + +# Configure Cisco ASA Devices + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - On the Cisco ASA Device: + + - The global configuration mode is selected. + - The `logging enable `option is selected on the Cisco ASA device. + - The `logging host` parameter is set to the host address of the audited CiscoASA device. + And UDP port (for, example 514) is used for sending messages. + + **NOTE:** Do not select the EMBLEM format logging for the syslog server option. + + - The `logging timestamp` option enabled. + - The `logging trap` option is selected from 1 to 6 inclusive. + +To configure your Cisco ASA devices, do the following: + +1. Navigate to your Cisco ASA device terminal through the SSH/Telnet connection (for example, use + PuTTY Telnet client). +2. Access the global configuration mode. For example: + + hostname# configure terminal + + hostname(config)# + +3. Enable logging. For example: + + hostname(config)# logging enable + +4. Set the IP address of the computer that hosts Netwrix Auditor Server as the `logging host` + parameter. And make sure that the UDP port is used for sending syslog messages (e.g., 514 UDP + port). For example: + + hostname(config)# logging host `` + + Do not select the EMBLEM format logging for the syslog server option. + +5. Enable the `logging timestamp` option. For example: + + hostname(config)# logging timestamp + +6. Set the `logging trap` option from 1 to 6 inclusive. For example: + + hostname(config)# logging trap 5 + +7. Configure the devices to show username for failed logons: + + hostname(config)# no logging hide username + +## Cisco ASA Devices + +Review a full list of object types Netwrix Auditor can collect on Cisco ASA network devices. + +| Object type | Actions | Event ID | +| ------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------- | +| Cisco ASA devices | | | +| Authentication | - Successful logon | - 716038 - 611101 - 113012 | +| - Failed logon | - 716039 - 611102 - 113021 - 113020 - 113015 - 109031 - 109025 - 109024 - 109022 - 109017 - 109010 - 109008 - 109006 - 107001 - 107002 | | +| Configuration | - Modified / Modify (Failed attempt) | - 111004 - 111010 - 612001 - 612002 - 612003 | +| - Read / Read (Failed attempt) | - 111007 | | +| - Removed / Remove (Failed attempt) | - 111003 - 112001 - 208005 | | +| CPU | - Modified / Modify (Failed attempt) | - 211003 | +| Device state | - Modified / Modify (Failed attempt) | - 199009 | +| Environment (IPMI) | - Modified / Modify (Failed attempt) | - 735002 - 735004 - 735006 - 735007 - 735008 - 735012 - 735014 - 735016 - 735018 - 735019 - 735022 - 735023 - 735025 - 735027 - 735028 - 735029 | +| GroupPolicy | - Add / Added (Failed attempt) | - 502111 | +| - Removed / Remove (Failed attempt) | - 502112 | | +| Logon | - Successful logon | - 605005 | +| - Failed logon | - 308001 - 605004 | | +| RAM | - Modified / Modify (Failed attempt) | - 211004 | +| Session | - Successful Logon | - 716001 - 713228 - 722033 - 722022 - 725001 - 725002 - 725003 - 606001 | +| - Logoff | - 725007 - 722023 - 722030 - 722031 - 716002 - 713259 - 606002 - 302014 - 302304 - 302016 | | +| - Failed Logon | - 722056 - 725006 - 725014 | | +| --- | --- | --- | +| Rule | - Activated | - 733101 | +| URL | - Read / Read (Failed attempt) | - 716003 - 716004 | +| User | - Add / Added (Failed attempt) | - 502101 | +| - Modified / Modify (Failed attempt) | - 502103 - 113006 - 113007 | | +| - Removed / Remove (Failed attempt) | - 502102 | | diff --git a/docs/auditor/10.8/configuration/networkdevices/ciscoios.md b/docs/auditor/10.8/configuration/networkdevices/ciscoios.md new file mode 100644 index 0000000000..3c5b6ae89d --- /dev/null +++ b/docs/auditor/10.8/configuration/networkdevices/ciscoios.md @@ -0,0 +1,75 @@ +--- +title: "Configure Cisco IOS Devices" +description: "Configure Cisco IOS Devices" +sidebar_position: 30 +--- + +# Configure Cisco IOS Devices + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - The global configuration mode is selected. + - The `logging timestamp` option enabled. + - The `logging trap` option is selected from 1 to 6 inclusive. + - The `logging host` parameter is set to the host address where the service is going to be + installed. And UDP port (for, example 514) is used for sending messages. + +To configure your Cisco IOS devices, do the following: + +1. Navigate to your Cisco IOS device terminal through the SSH/Telnet connection (for example, use + PuTTY Telnet client). +2. Access the global configuration mode. For example: + + Router# configure terminal + +3. Enable time stamps in syslog messages: + + Router# service timestamps log datetime localtime show-timezone + +4. Set the `logging trap` option from 1 to 6 inclusive. For example: + + Router# logging trap 5 + +5. Set the IP address of the Netwrix Auditor Server as the logging host parameter. And make sure + that the UDP port is used for sending syslog messages (e.g., 514 UDP port). For example: + + Router# logging 192.168.1.5 + +## Cisco IOS Devices + +Review a full list of object types Netwrix Auditor can collect on Cisco IOS network devices. + +| Object type | Actions | Event ID | +| -------------- | -------------------------- | --------------------------- | +| --- | --- | --- | +| --- | --- | --- | +| Cisco IOS | | | +| Attribute | - Read | - `INFO: AAA/ATTR` | +| Authentication | - Successful logon | - `IKEv2:` | +| - Failed logon | - `IKEv2-ERROR:` | | +| Configuration | - Modified | - `CONFIG_I` | +| Device state | - Modified | - `UPDOWN` - `CHANGED` | +| Environment | - Modified | - `FAN_FAULT` - `OVER_TEMP` | +| Logon | - Successful logon | - `LOGIN_SUCCESS` | +| - Failed logon | - `LOGIN_FAILED` | | +| Session | - Successful Logon | - `IKEv2:` | +| - Logoff | - `%FW-6-SESS_AUDIT_TRAIL` | | +| - Failed Logon | - `IKEv2-ERROR:` | | diff --git a/docs/auditor/10.8/configuration/networkdevices/ciscomerakidashboard.md b/docs/auditor/10.8/configuration/networkdevices/ciscomerakidashboard.md new file mode 100644 index 0000000000..52dd34928e --- /dev/null +++ b/docs/auditor/10.8/configuration/networkdevices/ciscomerakidashboard.md @@ -0,0 +1,82 @@ +--- +title: "Cisco Meraki Dashboard" +description: "Cisco Meraki Dashboard" +sidebar_position: 40 +--- + +# Cisco Meraki Dashboard + +Before creating a monitoring plan to audit your Cisco Meraki devices, plan for the account that will +be used for data collection. See the +[Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional +information. You will provide this account in the monitoring plan wizard. + +Changes that are collected with the basic authorization: + +- Add/Modify/Remove User +- Configuration +- Successful logon +- Failed logon + +Changes that are collected with the API: + +- Add/Modify/Remove User +- Configuration + +## Configure Cisco Meraki Dashboard Account + +Before you start creating a monitoring plan to audit your Cisco Meraki devices, plan for the data +collection should meet the requirements listed below. Then you will provide this account in the +item. + +For Basic Authorization + +Since accounts with multi-factor authentication are not supported, you need to create a special +cloud account with read-only permissions and disabled multi-factor authentication. + +Follow the steps to configure Cisco Meraki Dashboard item. + +**Step 1 –** Sign in to the +[Cisco Meraki Dashboard](https://account.meraki.com/secure/login/dashboard_login). + +**Step 2 –** Create a dashboard account as described in the following Cisco Meraki article: +[Getting Started](https://documentation.meraki.com/Getting_Started) + +**Step 3 –** Make sure that the read-only permissions assigned to the account. For more information +about Meraki permissions, refer to the following Cisco Meraki article: +[Managing Dashboard Administrators and Permissions](https://documentation.meraki.com/zGeneral_Administration/Managing_Dashboard_Access/Managing_Dashboard_Administrators_and_Permissions). + +**Step 4 –** Log in to this account and navigate to **My Profile** at the top of the dashboard. + +**Step 5 –** Find the section labeled SMS authentication. + +**Step 6 –** Make sure that the SMS authentication parameter is set to **OFF**. For more information +about authentication, refer to the following Cisco Meraki article: +[Two-Factor Authentication](https://documentation.meraki.com/zGeneral_Administration/Other_Topics/Two-Factor_Authentication). + +**NOTE:** This account is for Netwrix Auditor purposes. Do not forget to switch back to your +account. + +To Collect Data via API Key + +To work with multi-factor authentication (MFA) accounts, you need to generate an API key during +authorization. + +Follow the steps to create an API key for the Meraki Dashboard API. + +**Step 1 –** Log in to your Cisco Meraki Dashboard account. + +**Step 2 –** Click on your username in the top-right corner of the dashboard to open the drop-down +menu. + +**Step 3 –** Select **My profile**. + +**Step 4 –** In the **My profile** page, scroll down to the **API access** section. + +**Step 5 –** Click on the **Generate new API key** button. You may be prompted to enter your account +password for security verification. + +Once generated, the API key will be displayed on the screen. Make sure to copy and save the API key +in a secure location, as it won't be displayed again for security reasons. + +**NOTE:** Logons are not collected on the board due to technical limitations from the Meraki API. diff --git a/docs/auditor/10.8/configuration/networkdevices/ciscomerakidevices.md b/docs/auditor/10.8/configuration/networkdevices/ciscomerakidevices.md new file mode 100644 index 0000000000..4526f72eb4 --- /dev/null +++ b/docs/auditor/10.8/configuration/networkdevices/ciscomerakidevices.md @@ -0,0 +1,54 @@ +--- +title: "Configure Cisco Meraki Devices" +description: "Configure Cisco Meraki Devices" +sidebar_position: 50 +--- + +# Configure Cisco Meraki Devices + +To configure Cisco Meraki devices, configure the Syslog server for each of your networks. + +Netwrix recommends assigning a unique identificator to each Cisco Meraki device; otherwise, the +product may count them as a single anonymous device. + +Follow the steps to configure the Syslog server. + +**Step 1 –** Sign in to +[Cisco Meraki Dashboard](https://account.meraki.com/secure/login/dashboard_login). + +**Step 2 –** Navigate to **Network wide** > **Configure** > **General**. + +![nand_meraki_network](/images/auditor/10.7/configuration/networkdevices/nand_meraki_network.webp) + +**Step 3 –** Locate the Reporting section and click Add a syslog server. + +![nand_meraki_server](/images/auditor/10.7/configuration/networkdevices/nand_meraki_server.webp) + +**Step 4 –** In the dialog that opens, complete the following fields: + +| Option | Description | +| --------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Server IP | Provide the IP address of the computer that hosts your Netwrix Auditor Server. | +| Port | Provide the port configured in your monitoring plan for Network Devices (514 by default). See the[Network Devices](/docs/auditor/10.7/admin/monitoringplans/networkdevices.md) topic for additional information. | +| Roles | Select the following roles: - Appliance event log - Switch event log - Wireless event log | + +### Cisco Meraki Devices Configuration + +If you need any additional information about the Cisco Meraki devices configuration, refer to Cisco +documentation: +[Syslog Server Overview and Configuration](https://documentation.meraki.com/zGeneral_Administration/Monitoring_and_Reporting/Syslog_Server_Overview_and_Configuration). + +Review a full list of object types Netwrix Auditor can collect on Cisco Meraki network devices. + +| Object type | Actions | Event ID | +| -------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| --- | --- | --- | +| --- | --- | --- | +| Cisco Meraki | | | +| Authentication | - Successful Logon | - 716038 - 113012 - `client_vpn_connect` - `authentication on` - `type=8021x_auth` - `type=8021x_eap_success` - `type=splash_auth` - `type=wpa_auth` | +| - Failed Logon | - 113020 - 113015 - `type=8021x_eap_failure` - `type=disassociation` | | +| Session | - Successful Logon | - 716001 - 713228 - 722033 - 722022 - 725001 - 725002 - 725003 | +| - Failed Logon | - 716039 - 722056 - 725006 - 725014 | | +| - Logoff | - 716002 - 713259 - 302014 - 302304 - 302016 - 722023 - 725007 - 722030 - 722031 - 113019 - `client_vpn_disconnect` - `type=8021x_deauth` - `type=8021x_client_deauth` - `type=wpa_deauth` | | +| Rule | - Activated | - `ids-alerts` - `security_event ids_alerted` - `security_event security_filtering_file_scanned` - `security_event security_filtering_disposition_change` - `type=device_packet_flood` - `type=rogue_ssid_detected` - `type=ssid_spoofing_detected` | +| URL | - Read / Failed read | - 716003 - 716004 | diff --git a/docs/auditor/10.8/configuration/networkdevices/fortinetfortigate.md b/docs/auditor/10.8/configuration/networkdevices/fortinetfortigate.md new file mode 100644 index 0000000000..20777f502e --- /dev/null +++ b/docs/auditor/10.8/configuration/networkdevices/fortinetfortigate.md @@ -0,0 +1,96 @@ +--- +title: "Configure Fortinet FortiGate Devices" +description: "Configure Fortinet FortiGate Devices" +sidebar_position: 60 +--- + +# Configure Fortinet FortiGate Devices + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - The target Fortinet Fortigate device must be configured via Command Line Interface (CLI) as + described below. + +To configure your Fortinet FortiGate devices, enable logging to multiple Syslog servers and +configure FortiOS to send log messages to remote syslog servers in CEF format. Do one of the +following: + +- To configure Fortinet FortiGate devices via Command Line Interface +- To configure Fortinet FortiGate devices through the Fortigate Management Console + +To configure Fortinet FortiGate devices via Command Line Interface + +1. Log in to the Command Line Interface (CLI). +2. Enter the following commands: + + config log syslogd setting + + set format cef + + To enable CEF format in some previous FortiOS versions, enter the `set csv disable` command. + + set csv disable + + set facility `` + + set port 514 + + set reliable disable + + set server `` + + set status enable + + end + +To configure Fortinet FortiGate devices through the Fortigate Management Console + +1. Open Fortigate Management Console and navigate to Log&Report ® Log Config ® Log Setting. +2. Select the Syslog checkbox. +3. Expand the Options section and complete the following fields: + + | Option | Description | + | ----------- | ----------------------------------------------------------------------------------------------------- | + | Name/IP | Enter the address of your Netwrix Auditor Server. | + | Port | Set to _"514"_. | + | Level | Select desired logging level. | + | Facility | Netwrix recommends using default values. | + | Data format | Select CEF. To enable CEF format in some previous FortiOS versions, unselect the Enable CSV checkbox. | + +4. Click Apply. + +## Fortinet FortiGate Devices + +Review a full list of object types Netwrix Auditor can collect on Fortinet FortiGate devices. + +| Object type | Actions | LogID | +| ------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Authentication | - Successful logon | - 0100029002 - 0102043039 - 0102043008 - 0102043029 - 0101037138 / `act=tunnel-up` | +| - Failed logon | - 0100029003 - 0101039426 - 0102043009 - 0102043010 - 0101037121 / `XAUTH authentication failed` | | +| Configuration | - Copied | - 0100032211 - 0100032300 | +| - Modified / Modify (Failed attempt) | - 0100032102 - 0100032104 - 0100032400 - 0100044544 - 0100044545 - 0100044546 - 0100044547 - 0100032565 - 0100032566 - 0100032567 - 0100032571 - 0100032199 - 0100032202 - 0100032203 - 0100032234 - 0100032235 - 0108035012 - 0100044548 | | +| - Read / Read (Failed attempt) | - 0100032226 - 0100032228 - 0100032229 - 0100032230 | | +| Logon | - Successful logon | - 0100032001 | +| - Failed logon | - 0100032002 - 0100032021 | | +| Rule | - Activated | - 0419016384 - 0419016385 - 0419016386 - 0421016399 - 0211008192 - 0211008194 - 0203008200 - 0212008448 - 0261008450 - 0212008452 - 0212008457 - 0213008704 - 0213008706 - 0263008720 - 0262008960 - 0262008962 - 0262008964 - 0262008966 - 0262008968 - 0262008970 - 0262008972 - 0262008974 - 0211009234 - 0211009236 - 0202009248 - 0954024576 - 0954024579 - 0720018432 - 0720018433 - 0720018434 | +| Session | - Logoff | - 0100032003 - 0102043040 | +| User | - Add / Remove | - 0100032129 - 0100032131 - 0100032132 | +| - Modified / Modify (Failed attempt) | - 0100032130 | | diff --git a/docs/auditor/10.8/configuration/networkdevices/hpearuba.md b/docs/auditor/10.8/configuration/networkdevices/hpearuba.md new file mode 100644 index 0000000000..43a8e0725b --- /dev/null +++ b/docs/auditor/10.8/configuration/networkdevices/hpearuba.md @@ -0,0 +1,93 @@ +--- +title: "Configure HPE Aruba Devices" +description: "Configure HPE Aruba Devices" +sidebar_position: 70 +--- + +# Configure HPE Aruba Devices + +To configure your HPE Aruba devices, enable logging to multiple Syslog servers and configure logging +levels. Do one of the following: + +- To configure HPE Aruba devices via Command Line Interface +- To configure HPE Aruba devices through the Management Console + +To configure HPE Aruba devices via Command Line Interface + +1. Log in to the Command Line Interface (CLI). +2. Enter the following command to start configuration mode: + + # configure terminal + +3. Specify IP address of the computer that hosts your Netwrix Auditor Server to send Syslog messages + to: + + # logging `` severity information + +4. Specify event level for the following categories: security, system, user, wireless, network: + + # logging network level information + + # logging security level information + + # logging system level information + + # logging user level information + + # logging wireless level information + +5. Apply configuration changes: + + # write memory + +To configure HPE Aruba devices through the Management Console + +1. Log in to HPE Aruba web interface. +2. Navigate to Mobility Master and select a device or a group of devices you want to monitor with + Netwrix Auditor. +3. Navigate to Configuration → System → Logging and click + to add a new Syslog Server. + + ![nand_aruba_logging](/images/auditor/10.7/configuration/networkdevices/nand_aruba_logging.webp) + +4. In the Add New Syslog Servers dialog, complete the following fields: + + | Option | Description | + | ---------------- | ----------------------------------------- | + | IP address | Provide the IP address of the new server. | + | Category | Select None. | + | Logging facility | Leave empty. | + | Logging level | Select Informational. | + | Format | Select None. | + +5. Click Submit. The new server is added to the Syslog Servers list. +6. Click Pending Changes on the right. +7. In the Pending Changes for `` Managed Controller(s) dialog, select the device you want to + apply changes to. +8. Click Deploy Changes. +9. If the configuration is correct, you will see the following wizard: + + ![nand_aruba_status](/images/auditor/10.7/configuration/networkdevices/nand_aruba_status.webp) + +10. Navigate to Configuration → System → Logging and expand the Logging Levels. +11. Select the Informational value for the following parameters: + + - network + - system + - wireless + - security + +12. Deploy pending changes for the logging level: repeat steps 6 - 8. + +## HPE Aruba Devices + +Review a full list of object types Netwrix Auditor can collect on HPE Aruba devices. + +| Object type | Actions | Message ID | +| -------------- | ------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Authentication | - Successful logon | - 103047 - 103082 - 103085 - 105004 - 133008 - 133005 - 133098 | +| | - Failed logon | - 522275 - 541003 - 103046 - 103048 - 103067 - 103068 - 103083 - 103084 - 105002 - 105003 - 133009 - 133006 - 133099 - 125021 - 125022 - 125031 - 125033 - 125071 | +| Configuration | - Add / Added (Failed attempt) - Removed / Remove (Failed attempt) - Modified / Modify (Failed attempt) | - 125012 - (109012 - 124037 - 124036 - 124010 - 325013 - 325014 - 325015 - 325018 - 325019 - 335000 - 335009 - 335016 - 335015 - 335010 - 335013 - 335001 - 305034 - 335002 - 125063 - 125065 - 125067 - 125069 - 125064 - 125066 - 125068 - 125060 - 125061 - 125072 - 133109 - 133022 - 133104 - ECC error detected - Power supply failure | +| Rule | Activated | - 127054 - 127033 - 127068 - 127034 - 127006 - 127086 - 127064 - 127073 - 127079 - 127082 - 127084 - 127080 - 127083 - 127081 - 127085 - 127007 - 127074 - 127036 - 127047 - 127066 - 127043 - 127067 - 127087 - 127078 - 127035 - 127032 - 127072 - 127088 - 127109 - 127071 - 127077 - 127065 - 127075 - 127046 - 127044 - 127045 - 127116 - 127117 - 127052 - 127053 - 127069 - 127070 - 127014 - 127015 - 127016 - 127017 - 127029 - 127030 - 127008 - 127009 - 127010 - 127011 - 127028 - 127061 - 127062 - 127063 - 127039 - 127040 - 127041 - 127042 | +| Session | - Logoff | - 103040 - 103042 - 103056 - 103069 | +| Logon | - Logon succeeded | - 125023 - 125024 - 125032 - 125070 | +| Role | - Add / Added (Failed attempt) | - 125011 | diff --git a/docs/auditor/10.8/configuration/networkdevices/juniper.md b/docs/auditor/10.8/configuration/networkdevices/juniper.md new file mode 100644 index 0000000000..5ce6e7a4f1 --- /dev/null +++ b/docs/auditor/10.8/configuration/networkdevices/juniper.md @@ -0,0 +1,70 @@ +--- +title: "Configure Juniper Devices" +description: "Configure Juniper Devices" +sidebar_position: 80 +--- + +# Configure Juniper Devices + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - The target Juniper device must be configured via JunOS Command Line Interface (CLI) as + described below. + +To configure you Juniper devices, do the following: + +1. Launch the JunOS Command Line Interface (CLI). +2. Execute the following commands: + + # configure + + # set system syslog host `` any info + + where `` is the IP address of the computer where Netwrix Auditor Server is + installed. + + # set system syslog host `` port `` + + where + + `` is the IP address of the computer where Netwrix Auditor Server is installed + + AND + + `` is the name of the UDP port used to listen to network devices (514 port used by + default). [Network Devices](/docs/auditor/10.7/admin/monitoringplans/networkdevices.md) + + # set system syslog time-format `` + + # commit + +## Juniper Devices + +Review a full list of object types Netwrix Auditor can collect on Juniper network devices. + +| Object type | Actions | Event ID | +| -------------- | ------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Logon | - Successful logon | - `LOGIN_INFORMATION` - `Accepted keyboard-interactive/pam` - `WEB_AUTH_SUCCESS` - `JADE_AUTH_SUCCESS` | +| - Failed logon | - `LOGIN_FAILED` - `SSHD_LOGIN_FAILED` `LIBJNX_LOGIN_ACCOUNT_LOCKED` - `WEB_AUTH_FAIL` `JADE_AUTH_FAILURE` | | +| Authentication | - Successful Logon | - FWAUTH_HTTP_USER_AUTH_ACCEPTED - `FWAUTH_WEBAUTH_SUCCESS` - FWAUTH_FTP_USER_AUTH_ACCEPTED - FWAUTH_TELNET_USER_AUTH_ACCEPTED - DYNAMIC_VPN_AUTH_OK | +| - Failed logon | - FWAUTH_HTTP_USER_AUTH_FAIL - FWAUTH_WEBAUTH_FAIL - FWAUTH_FTP_USER_AUTH_FAIL - FWAUTH_TELNET_USER_AUTH_FAIL - DYNAMIC_VPN_AUTH_FAIL | | +| Configuration | - Modified / Modify (Failed attempt) | - `UI_FACTORY_OPERATION` - UI_INITIALSETUP_OPERATION - UI_RESCUE_OPERATION - UI_LOAD_EVENT - UI_CFG_AUDIT_OTHER - UI_CFG_AUDIT_SET: - UI_CFG_AUDIT_NEW - UI_CFG_AUDIT_SET_SECRET - UI_COMMIT: - UI_COMMIT_PROGRESS - UI_COMMIT_COMPLETED - UI_COMMIT_AT_COMPLETED - UI_COMMIT_NOT_CONFIRMED - UI_COMMIT_CONFIRMED_REMINDER - UI_COMMIT_AT_ABORT - UI_COMMIT_AT_FAILED - UI_COMMIT_COMPRESS_FAILED - UI_COMMIT_ROLLBACK_FAILED | +| Rule | - Activated | - RT_SCREEN_ICMP - RT_SCREEN_IP - RT_SCREEN_TCP - RT_SCREEN_TCP_DST_IP - RT_SCREEN_TCP_SRC_IP - RT_SCREEN_UDP - AV_VIRUS_DETECTED_MT - ANTISPAM_SPAM_DETECTED_MT - IDP_APPDDOS_APP_ATTACK_EVENT - IDP_APPDDOS_APP_STATE_EVENT - IDP_ATTACK_LOG_EVENT | diff --git a/docs/auditor/10.8/configuration/networkdevices/overview.md b/docs/auditor/10.8/configuration/networkdevices/overview.md new file mode 100644 index 0000000000..71b2f52e11 --- /dev/null +++ b/docs/auditor/10.8/configuration/networkdevices/overview.md @@ -0,0 +1,26 @@ +--- +title: "Network Devices" +description: "Network Devices" +sidebar_position: 80 +--- + +# Network Devices + +To configure your network devices for monitoring perform the following procedures, depending on your +device: + +- [Configure Cisco ASA Devices](/docs/auditor/10.7/configuration/networkdevices/ciscoasa.md) +- [Configure Cisco IOS Devices](/docs/auditor/10.7/configuration/networkdevices/ciscoios.md) +- [Cisco Meraki Dashboard ](/docs/auditor/10.7/configuration/networkdevices/ciscomerakidashboard.md) +- [Configure Cisco Meraki Devices](/docs/auditor/10.7/configuration/networkdevices/ciscomerakidevices.md) +- [Configure Fortinet FortiGate Devices](/docs/auditor/10.7/configuration/networkdevices/fortinetfortigate.md) +- [Configure PaloAlto Devices](/docs/auditor/10.7/configuration/networkdevices/paloalto.md) +- [Configure Juniper Devices](/docs/auditor/10.7/configuration/networkdevices/juniper.md) +- [Configure SonicWall Devices](/docs/auditor/10.7/configuration/networkdevices/sonicwall.md) +- [Configure HPE Aruba Devices](/docs/auditor/10.7/configuration/networkdevices/hpearuba.md) +- [Configure Pulse Secure Devices](/docs/auditor/10.7/configuration/networkdevices/pulsesecure.md) + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. diff --git a/docs/auditor/10.8/configuration/networkdevices/paloalto.md b/docs/auditor/10.8/configuration/networkdevices/paloalto.md new file mode 100644 index 0000000000..7f59360dfd --- /dev/null +++ b/docs/auditor/10.8/configuration/networkdevices/paloalto.md @@ -0,0 +1,84 @@ +--- +title: "Configure PaloAlto Devices" +description: "Configure PaloAlto Devices" +sidebar_position: 90 +--- + +# Configure PaloAlto Devices + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - Create a Syslog Server profile and syslog forwarding for the target PaloAlto device via Web + Interface as described below. + +To configure your PaloAlto devices, create a Syslog server profile and assign it to the log settings +for each log type. + +Follow the steps to configure a Syslog server profile. + +**Step 1 –** Connect to your PaloAlto device: launch an Internet browser and enter the IP address of +the firewall in the URL field (https://``). + +**Step 2 –** In the Web Interface, navigate to **Device** > **Server Profiles** > **Syslog**. + +**Step 3 –** Click **Add** and specify profile name, for example, _"SyslogProf1"_. + +**Step 4 –** Specify syslog server parameters: + +| Parameter | Description | +| ------------- | ---------------------------------------------------------------------------------------------- | +| Name | Specify unique name for a syslog server. | +| Syslog Server | Provide a server name by entering its FQDN or IPv4 address. | +| Transport | Select UDP. | +| Port | Provide the name of the UDP port used to listen to network devices (514 port used by default). | +| Format | Select IETF. | +| Facility | Netwrix recommends using default values. | + +Follow the steps to configure syslog forwarding. + +**Step 1 –** In the Web Interface, navigate to **Device** > **Log Settings**. + +**Step 2 –** For System, Config, and User ID logs, click Add and enter unique name of your syslog +server. + +**Step 3 –** On the syslog panel, click Add and select the syslog profile you created above. + +**Step 4 –** Click **Commit** and review the logs on the syslog server. + +**NOTE:** After configuring the monitoring plan, Netwrix Auditor will listen to the logs forwarded +by the Palo Alto device. + +## PaloAlto Devices + +Review a full list of object types Netwrix Auditor can collect on PaloAlto network devices. + +| Object type | Actions | Event ID | +| ------------------------------------ | ------------------------------------------------------------------ | ----------------------------------------------------------------------------------- | +| Logon | - Successful logon | - logged in | +| - Failed logon | - failed authentication for user - authentication failed for user | | +| Authentication | - Successful Logon | - authentication succeeded for user - USERID,login, - globalprotectportal-auth-succ | +| - Failed Logon | - authentication failed for user - globalprotectportal-auth-fail | | +| Configuration | - Modified / Modify (Failed attempt) | - commit | +| Environment | - Read / Read (Failed attempt) | - connect-server-monitor-failure | +| Session | - Logoff | - logged out | +| User | - Add / Added (Failed attempt) | - config mgt-config users - config shared local-user-database user | +| - Modified / Modify (Failed attempt) | - config mgt-config users - config shared local-user-database user | | +| - Removed / Remove (Failed attempt) | - config mgt-config users - config shared local-user-database user | | diff --git a/docs/auditor/10.8/configuration/networkdevices/permissions.md b/docs/auditor/10.8/configuration/networkdevices/permissions.md new file mode 100644 index 0000000000..2f2caf7d1f --- /dev/null +++ b/docs/auditor/10.8/configuration/networkdevices/permissions.md @@ -0,0 +1,16 @@ +--- +title: "Permissions for Network Devices Auditing" +description: "Permissions for Network Devices Auditing" +sidebar_position: 120 +--- + +# Permissions for Network Devices Auditing + +Before you start creating a monitoring plan to audit your network devices, plan for the account that +will be used for data collection – it should meet the requirements listed below. Then you will +provide this account in the monitoring plan wizard. + +| For... | Requirement | +| ----------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| - Cisco ASA - Cisco IOS - Cisco FTD - Fortinet - HPE Aruba - Juniper - Palo Alto - Pulse Secure - SonicWall - HPE | You can use any account (not necessarily the credentials used to connect to the device itself), as long as these credentials do not affect Netwrix Auditor or monitored IT infrastructure. Provide this account in the monitoring plan wizard. | +| - Cisco Meraki | See the [Configure Cisco Meraki Dashboard Account](ciscomerakidashboard.md#configure-cisco-meraki-dashboard-account) section for additional information. | diff --git a/docs/auditor/10.8/configuration/networkdevices/ports.md b/docs/auditor/10.8/configuration/networkdevices/ports.md new file mode 100644 index 0000000000..ccf3ad5238 --- /dev/null +++ b/docs/auditor/10.8/configuration/networkdevices/ports.md @@ -0,0 +1,22 @@ +--- +title: "Network Devices Ports" +description: "Network Devices Ports" +sidebar_position: 10 +--- + +# Network Devices Ports + +Review a full list of protocols and ports required for Netwrix Auditor for Network Devices. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to the remote ports on the computer where Netwrix Auditor Server + resides. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 514 UDP port. + +| Port | Protocol | Source | Target | Purpose | +| ---- | -------- | ------------------------- | ---------------------- | ------------------------------------- | +| 514 | UDP | Monitored network devices | Netwrix Auditor Server | Getting events from monitored devices | +| 443 | TCP | Netwrix Auditor Server | Cisco Meraki Dashboard | \*.meraki.com | diff --git a/docs/auditor/10.8/configuration/networkdevices/pulsesecure.md b/docs/auditor/10.8/configuration/networkdevices/pulsesecure.md new file mode 100644 index 0000000000..27f2e1cd97 --- /dev/null +++ b/docs/auditor/10.8/configuration/networkdevices/pulsesecure.md @@ -0,0 +1,81 @@ +--- +title: "Configure Pulse Secure Devices" +description: "Configure Pulse Secure Devices" +sidebar_position: 100 +--- + +# Configure Pulse Secure Devices + +1. Connect to your Pulse Secure device: launch an Internet browser and enter the IP address or + device DNS name in the URL field (https://``/admin). +2. In the Web Interface, navigate to System → Log/Monitoring. +3. Under Log/Monitoring, expand the User Access link. +4. Locate the Settings tab. +5. Under the Select Events to Log, select the following (minimal requirement, select other events if + needed): + + - Login/Logout + - VPN Tunneling + + ![manual_config_pulse_1](/images/auditor/10.7/configuration/networkdevices/manual_config_pulse_1.webp) + +6. Under the Syslog Servers, complete the following fields: + + | Option | Description | + | ------------------ | ----------------------------------------------------- | + | Server nameIP | Specify the IP address of the computer where resides. | + | Facility | Select desired facility. | + | Type | Select UDP. | + | Client Certificate | Use default values. | + | Filter | Select Standard. | + +7. Save your changes. +8. Switch to the Admin Access tab. +9. Under the Select Events to Log, select the following (minimal requirement, select other events if + needed): + + - Administrator logins + - Administrator changes + +10. Repeat the step 6 for Syslog Servers configuration. +11. Save your changes. +12. Navigate to System → Configuration → Advanced Networking. +13. Expand the Select the source port to be used for the following features link. +14. Locate the Syslog parameter and set it to _Internal_. + + Netwrix Auditor must be accessible from the selected network interface + +15. Save your changes. +16. Start Netwrix Auditor. +17. Navigate to your monitoring plan for Network Devices. See + [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md) +18. Provide the IP address of the interface you specified on the step 14 as the Computer item for + your monitoring plan. See + [Active Directory](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md) + +## Pulse Secure Devices + +Review a full list of object types Netwrix Auditor can collect on Pulse Secure network devices. + +| Object Type | Actions | | +| -------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Logon | - Successful logon | - user authenticated successfully - user logged in successfully - administrative login succeeded - SuperAdmin session created using token for administrative logon recovery - Admin logged in successfully through the local console | +| - Failed logon | - Login/authentication failed - Login attempt from the local console failed | | +| - Logoff | - user logged out or session timed out - admin logged out or session timed out - SuperAdmin session finished or timed out - Admin logged off from the local console | | +| Authentication | - Successful logon | - VPN Tunneling Successful Logon | +| - Logoff | - VPN connection closed | | +| Configuration | - Modified | - Server shutdown/reboot/restart requested - Platform administrator account added - Console administrator password is disabled or enabled - IKEv2 settings modified - Global SAML Settings modified - SAML Metadata Provider added - SAML Metadata Provider removed - SAML Metadata Provider updated - authentication server added - authentication server deleted - authentication server modified - Sign-in policy created - Sign-in policy deleted - Sign-in policy modified - Sign-in policy multiple user session limit modified - Sign-in policy multiple user session modified - Sign-in policy multiple user session warning notification modified - Updated the order of the sign-in policies - Sign-in policy user access parameters modified - Sign-in page created - Sign-in page deleted - Sign-in page updated - Sign-in notification created - Sign-in notification deleted - Sign-in notification updated - Sign-in SAML modified | +| User | - Added | - user account added | +| - Modified | - user account password changed - user account disabled or enabled - user account unlocked - user account modified - admin rights granted - admin rights revoked | | +| - Removed | - user account removed | | +| Role | - Added | - Role is created | +| - Modified | - Role is modified | | +| - Removed | - Role is deleted | | +| - Copied | - Role is duplicated | | +| Session | - Session start | - VPN Tunneling Session started | +| - Session end | - VPN Tunneling Session ended | | +| Realm | - Added | - Realm added | +| - Modified | - IP added to allowed IP list in Realm authentication policy - IP removed from allowed IP list - IP setting reordered - Source IP restriction modified - browser restriction set - Browser restriction modified - browser restriction removed - Browser restriction reordered - Client-side certificate requirement modified - Certificate attribute modified - Password restriction modified - Minimum password length modified - Host Checker restriction is updated - User Limit restriction is modified - Guaranteed minimum number of users is modified - Maximum number of sessions is modified - Maximum number of users is modified - Realm is modified | | +| | - Removed | - Realm deleted | +| - Copied | - Realm duplicated | | +| - Renamed | - Realm renamed | | diff --git a/docs/auditor/10.8/configuration/networkdevices/sonicwall.md b/docs/auditor/10.8/configuration/networkdevices/sonicwall.md new file mode 100644 index 0000000000..4f76f297e6 --- /dev/null +++ b/docs/auditor/10.8/configuration/networkdevices/sonicwall.md @@ -0,0 +1,139 @@ +--- +title: "Configure SonicWall Devices" +description: "Configure SonicWall Devices" +sidebar_position: 110 +--- + +# Configure SonicWall Devices + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - Configure log settings, depending on your device type. + +To configure your SonicWall devices, do the following: + +To configure SonicWall Web Application Firewall + +1. Connect to your SonicWall device. Launch an Internet browser and enter the following in the URL + field: _https://``:84443_, where IP address is the IP of the device and 84443 is the + default connection port. +2. Log in to the device. +3. In the Web Interface, navigate to Log → Settings and configure the following: + + | Parameter | Description | + | --------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------- | + | - Log Level - Alert Level - Syslog Level | Set to "Info". | + | - Enable Audit Log - Send to Syslog Server in Audit Log Settings - Send to Syslog Server in Access Log Settings | Select these checkboxes. | + | Primary Syslog Server | Enter the address of your Netwrix Auditor Server. | + | Primary Syslog Server Port | Provide the name of the UDP port used to listen to network devices (514 port used by default). | + +4. Click Accept. +5. Navigate to Log → Categories. +6. Select the following checkboxes: + + - Authentication + - Authorization & Access + - System + - Web Application Firewall + - Geo IP & Botnet Filter In Log Categories (Standard) + +7. Click Accept. + +To configure SonicWall SMA + +1. Connect to your SonicWall device. Launch an Internet browser and enter the following in the URL + field: _https://``:8443_, where IP address is the IP of the device and 8443 is the + default connection port. +2. Log in to the device. +3. In the Web Interface, navigate Log → Settings and configure the following: + + | Parameter | Description | + | --------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------- | + | - Log Level - Alert Level - Syslog Level | Set to "Info". | + | - Enable Audit Log - Send to Syslog Server in Audit Log Settings - Send to Syslog Server in Access Log Settings | Select these checkboxes. | + | Primary Syslog Server | Enter the address of your Netwrix Auditor Server. | + | Primary Syslog Server Port | Provide the name of the UDP port used to listen to network devices (514 port used by default). | + +4. Click Accept. +5. Navigate to Log → Categories. +6. Select the following checkboxes: + + - Authentication + - Authorization & Access + - System + - Web Application Firewall + - Geo IP & Botnet Filter In Log Categories (Standard) + +7. Click Accept. + +To configure SonicWall NS series + +1. Connect to your SonicWall device. Launch an Internet browser and enter the following in the URL + field: _https://``:443_, where IP address is the IP of the device and 443 is the + default connection port. +2. Log in to the device. +3. In the Web Interface, navigate to Manage → Log Settings → Base Setup. +4. Select all checkboxes in the Syslog column. +5. Click Accept. +6. Navigate to Manage → Log Settings → Syslog. +7. Set the Syslog Format to Default. +8. Click Add. +9. In the dialog appears, select Create new address object option in the Name or IP Address combo + box. +10. Provide name and IP address of the new object. +11. Click OK. +12. In the Add Syslog Server dialog, find the IP address you specified on the step 10 in the Name or + IP Address list. +13. Click OK. +14. Click Save. + +## SonicWall Devices + +Review a full list of object types Netwrix Auditor can collect on SonicWall network devices. + +| Object type | Actions | Event ID | +| ------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Logon | - Successful logon | - User login from an internal zone allowed - User login successful - XAUTH Succeeded with VPN - VPN zone remote user login allowed - WAN zone remote user login allowed - PPP: Authentication successful - Local Authentication Success - RADIUS/LDAP Authentication Success - Successful authentication received for Remotely Triggered - IKEv2 Authentication successful - SSL VPN zone remote user login allowed | +| - Failed logon | - User login denied - User login failed - XAUTH Failed with VPN - L2TP PPP Authentication Failed - check username / password - RADIUS/LDAP reports Authentication Failure - Local Authentication Failure - User login to Administration Portal denied - User login failure rate exceeded - User Name authentication Failure locally - ISAKMP_AUTH_FAILED - Guest service limit reached - Guest login denied - Incorrect authentication received for Remotely Triggered - Authentication Timeout during Remotely Triggered - Problem occurred during user group membership retrieval - An error has occurred while sending your - IPsec Authentication Failed | | +| - Logoff | - User logged out - logged out - Guest Session Timeout - Guest Account Timeout - Guest Idle Timeout - Guest traffic quota exceeded | | +| Authentication | - Successful Logon | - Administrator login allowed - CLI administrator login allowed - VPN zone administrator login allowed - WAN zone administrator login allowed - Configuration mode administration session started - Read-only mode GUI administration session started - Non-config mode GUI administration session started - User login successful - Session Start: - EventMessage: Session Start Success | +| - Failed Logon | - Administrator login denied - CLI administrator login denied due to bad credentials - User login failed - The account has been disabled for - is not permitted for this Web App - Authentication for user - Authentication failed - maximum authentication attempts exceeded for - EventMessage: Session Start Failed | | +| - Logoff | - Administrator logged out - CLI administrator logged out - Configuration mode administration session ended - GUI administration session ended - Logged out - Session End: - EventMessage: Session End - Command='Tunnel' | | +| Configuration | - Add / Added (Failed attempt) | - m=1333 - Scheduled settings generated - A new default Self-Signed certificate was generated successfully - Scheduled Tech Support Report generated - Restarted Tech Support Report generated | +| - Modified / Modify (Failed attempt) | - Mail attachment disabled - Watch and report possible SYN floods - Watch and proxy WAN connections when under attack - Always proxy WAN connections - SYN Flood blacklisting enabled by user - SYN Flood blacklisting disabled by user - Administrator name changed - VPN disabled by administrator - VPN enabled by administrator - WLAN disabled by administrator - WLAN enabled by administrator - WLAN disabled by schedule - WLAN enabled by schedule - is added into Group - is removed from Group - m=1334 - Update administrator/user lockout params - Settings imported - Critical Operating System Update failed - msg=\"WAF restarted - HTTP(S) Cache settings were updated - database has been updated - Web Server Fingerprint Protection enforced - About to reconfigure service: - Finished applying configuration changes - Started - Start failed - Stopped | | +| - Read / Read (Failed attempt) | - m=1203 - m=1204 - Problem loading the URL list - Registration Update Needed, Please restore your existing security service subscriptions - Failed to synchronize license information with Licensing Server - Current settings exported - Error sending - settings sent successfully - Automated scheduled settings successful - Scheduled settings downloaded - Tech Support Report - Tech Support Report sent successfully - Loaded WAF signature database successfully - Error sending - logs sent out successfully | | +| | - Remove / Removed (Failed attempt) | - Scheduled settings deleted - Oldest scheduled Tech Support Report deleted - has been deleted - Event Logs cleared - Audit Logs cleared - Access Logs cleared - Deleting log files - Deleting core files - Deleting snapshots older | +| Device state | - Modified / Modify (Failed attempt) | - Registration Update Needed, Please restore your existing security service subscriptions - Intrusion Prevention (IDP) subscription has expired - Failed to synchronize license information with Licensing Server | +| Folder | - Add / Added (Failed attempt) | - Request='GET /cgi-bin/sonicfiles?RacNumber=9&Arg1= | +| - Read / Read (Failed attempt) | - Request='GET /cgi-bin/sonicfiles?RacNumber=16&Arg1= | | +| - Remove / Removed (Failed attempt) | - Request='GET /cgi-bin/sonicfiles?RacNumber=13&Arg1= | | +| File | - Add / Added (Failed attempt) | - Request='GET /cgi-bin/sonicfiles?RacNumber=31&Arg1= | +| - Read / Read (Failed attempt) | - Request='GET /cgi-bin/sonicfiles?RacNumber=25&Arg1= | | +| - Rename / Renamed (Failed attempt) | - Request='GET /cgi-bin/sonicfiles?RacNumber=14&Arg1= | | +| - Remove / Removed (Failed attempt) | - Request='GET /cgi-bin/sonicfiles?RacNumber=12&Arg1= | | +| Host | - Read / Read (Failed attempt) | - Received AV Alert - The loaded content URL List has expired - CFS Alert - Mail Filter Alert - Mail attachment deleted - Intrusion Prevention (IDP) subscription has expired - Smurf Amplification attack dropped - TCP Xmas Tree dropped - Source routed IP packet dropped - Mail fragment dropped - PASV response spoof attack dropped - PORT bounce attack dropped - PASV response bounce attack dropped - Spank attack multicast packet dropped - IPS Detection Alert - IPS Prevention Alert - Drop WLAN traffic - IDP Detection Alert - IDP Prevention Alert - Ping of death dropped - IP spoof dropped - Possible SYN flood attack detected - Land attack dropped | +| Rule | - Activated | - will be denied - msg=\"WAF threat detected - Ping of death dropped - IP spoof dropped - Possible SYN flood attack detected - Land attack dropped - Smurf Amplification attack dropped - Possible port scan detected - Probable port scan detected - Probable TCP FIN scan detected - Probable TCP XMAS scan detected - Probable TCP NULL scan detected - Mail attachment deleted - TCP Xmas Tree dropped - Source routed IP packet dropped - Mail fragment dropped - PASV response spoof attack dropped - PORT bounce attack dropped - PASV response bounce attack dropped - Spank attack multicast packet dropped - IPS Detection Alert - IPS Prevention Alert - Drop WLAN traffic - IDP Detection Alert | +| Session | - Add / Added (Failed attempt) | - msg=\"New HTTP Request to - msg=\"New HTTPS Request to - msg=\"New HTTP Session for - msg=\"New HTTPS Session for | +| - Read / Read (Failed attempt) | - msg=\"WAF threat detected: - will be denied - Access to proxy server denied - Website found in blacklist | | +| - Logoff | - Connection Closed | | +| User | - Add / Added (Failed attempt) | - Guest account | +| - Modified / Modify (Failed attempt) | - Administrator name changed - out user logins allowed - Guest account - User login disabled from - User account | | +| - Remove / Removed (Failed attempt) | - Guest account - m=1335 | | diff --git a/docs/auditor/10.8/configuration/oracle/_category_.json b/docs/auditor/10.8/configuration/oracle/_category_.json new file mode 100644 index 0000000000..7752d24282 --- /dev/null +++ b/docs/auditor/10.8/configuration/oracle/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Oracle Database", + "position": 90, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/oracle/database.md b/docs/auditor/10.8/configuration/oracle/database.md new file mode 100644 index 0000000000..22c6bd2cda --- /dev/null +++ b/docs/auditor/10.8/configuration/oracle/database.md @@ -0,0 +1,196 @@ +--- +title: "Configure Oracle Database for Auditing" +description: "Configure Oracle Database for Auditing" +sidebar_position: 20 +--- + +# Configure Oracle Database for Auditing + +This topic explains how to configure Oracle Database for the following versions of the Oracle +Database Software: + +- Configure Oracle Database 12c, 18c, 19c for Auditing +- Configure Oracle Database 11g for Auditing + +## Configure Oracle Database 12c, 18c, 19c for Auditing + +The following auditing modes are available for Oracle Database 12c, 18c, 19c: + +- Unified Auditing—Recommended. See the following Oracle technical article for detailed instructions + on how to enable Unified Auditing: + [Enabling Unified Auditing](http://www.oracle.com/webfolder/technetwork/tutorials/obe/db/12c/r1/security/sec_uni_audit/sec_uni_audit.html). + + Perform the following steps to configure Unified Auditing on your Oracle Database: + + 1. Create and enable an audit policy to audit specific parameters across your Oracle Database. + + After an audit policy has been enabled or disabled, Netwrix Auditor starts collecting data + after a successful logon session. + + 2. If needed, create and enable specific audit policies to audit successful data access and + changes, user actions, component actions, etc. + +- Mixed Mode—Default auditing in a newly installed database. It enables both traditional and the new + **Unified Auditing** facilities. Netwrix recommends using **Unified Auditing** mode if you do not + have any trail audit facilities in your infrastructure. + + The product does not log any errors on these events to the Netwrix Auditor System Health log. + +To configure Oracle Database 12c, 18c, 19c Unified Auditing + +1. On the computer where your database is deployed, run the sqlplus tool. +2. Connect to your Oracle Database—use Oracle account with the `SYSDBA` privilege. For example: + + `OracleUser as sysdba` + + Enter your password. + +3. Create and enable audit policies. You can set them to audit the following: + + - Configuration changes + - Successful and failed data access and changes + - `Oracle Data Pump`, `Oracle Recovery Manager (RMAN)` and `Oracle SQL*Loader Direct Path Load` + components | To monitor... | Execute the command... | | --- | --- | | Configuration changes + | - Create an audit policy (e.g., `nwx_actions_pol`) for any user: + `CREATE AUDIT POLICY nwx_actions_pol ACTIONS CREATE TABLE,DROP TABLE,ALTER TABLE,GRANT,REVOKE, CREATE VIEW,DROP VIEW,CREATE PROCEDURE, ALTER PROCEDURE,RENAME,AUDIT,NOAUDIT, ALTER DATABASE,ALTER USER,ALTER SYSTEM, CREATE USER,CREATE ROLE,SET ROLE,DROP USER, DROP ROLE,CREATE TRIGGER,ALTER TRIGGER, DROP TRIGGER,CREATE PROFILE,DROP PROFILE, ALTER PROFILE,DROP PROCEDURE, CREATE MATERIALIZED VIEW,DROP MATERIALIZED VIEW, ALTER ROLE,TRUNCATE TABLE,CREATE FUNCTION, ALTER FUNCTION,DROP FUNCTION,CREATE PACKAGE, ALTER PACKAGE,DROP PACKAGE,CREATE PACKAGE BODY, ALTER PACKAGE BODY,DROP PACKAGE BODY,LOGON,LOGOFF, CREATE DIRECTORY,DROP DIRECTORY,CREATE JAVA, ALTER JAVA,DROP JAVA,PURGE TABLE, CREATE PLUGGABLE DATABASE,ALTER PLUGGABLE DATABASE, DROP PLUGGABLE DATABASE,CREATE AUDIT POLICY, ALTER AUDIT POLICY,DROP AUDIT POLICY, CREATE FLASHBACK ARCHIVE,ALTER FLASHBACK ARCHIVE, DROP FLASHBACK ARCHIVE;` - + Enable the audit policy: `AUDIT POLICY nwx_actions_pol;` To disable audit policy, use the + following command: `NOAUDIT POLICY nwx_actions_pol;` | | Data access and changes (successful + and failed) | - Create the audit policy (e.g., `nwx_actions_obj_pol`): + `CREATE AUDIT POLICY nwx_actions_obj_pol ACTIONS DELETE on hr.employees, INSERT on hr.employees, UPDATE on hr.employees, SELECT on hr.employees, FLASHBACK on hr.employees CONTAINER = CURRENT;` - + Enable the audit policy (e.g., `nwx_actions_obj_pol`): `AUDIT POLICY nwx_actions_obj_pol;` | | + Component actions: `Oracle Data Pump`, `Oracle Recovery Manager`, and + `Oracle SQL*Loader Direct Path Load` | - Create the audit policies (e.g., + `nwx_sqlloader_dp_pol`, etc.): No special configuration required to audit RMAN events. + `CREATE AUDIT POLICY nwx_datapump_exp_pol ACTIONS COMPONENT=DATAPUMP EXPORT;` + `CREATE AUDIT POLICY nwx_datapump_imp_pol ACTIONS COMPONENT=DATAPUMP IMPORT;` + `CREATE AUDIT POLICY nwx_sqlloader_dp_pol ACTIONS COMPONENT=DIRECT_LOAD LOAD;` - Enable these + policies: `AUDIT POLICY nwx_datapump_exp_pol;` `AUDIT POLICY nwx_datapump_imp_pol;` + `AUDIT POLICY nwx_sqlloader_dp_pol;` | + +4. If necessary, enable more granular audit policies. + + | To... | Execute the command... | + | --------------------------------------------------------------------------------- | ----------------------------------------------------------------------- | + | Apply audit policy to selected users | `AUDIT POLICY nwx_actions_pol BY SYS, SYSTEM, ; ` | + | Exclude user actions from being audited (e.g., exclude failed `Operator` actions) | `AUDIT POLICY nwx_actions_pol EXCEPT Operator WHENEVER NOT SUCCESSFUL;` | + | Audit successful actions of selected user (e.g., `Operator`) | `AUDIT POLICY nwx_actions_pol BY Operator WHENEVER SUCCESSFUL;` | + +For additional information on `CREATE AUDIT POLICY` and `AUDIT POLICY` parameters, see the following +Oracle Database administration documents: + +- `[CREATE AUDIT POLICY](https://docs.oracle.com/database/121/SQLRF/statements_5001.htm#create-audit-policy)` +- `[AUDIT POLICY](http://docs.oracle.com/database/121/SQLRF/statements_4008.htm#audit-policy)` + +Currently, Netwrix Auditor checks audit settings for Unified Auditing when accomptability is enabled +for `ACTIONS`. If any of your current settings conflict with the audit configuration required for +Netwrix Auditor, these conflicts will be listed in the Netwrix Auditor System Health event log. + +Also, remember to do the following: + +- Configure Data Collecting Account as described in + [Permissions for Oracle Database Auditing](/docs/auditor/10.7/configuration/oracle/permissions.md) topic. +- Configure ports as described in [Oracle Database Ports](/docs/auditor/10.7/configuration/oracle/ports.md) topic. + +**NOTE:** Traditional auditing is deprecated in Oracle Database 21c. Oracle recommends using Unified +Auditing, which enables selective and more effective auditing within Oracle Database. See the +[Oracle website](https://docs.oracle.com/en/database/oracle/oracle-database/23/sqlrf/AUDIT-Traditional-Auditing.html#oracle-website) +for more information. + +## Configure Oracle Database 11g for Auditing + +This section explains how to configure **Standard Auditing** on your Oracle Database 11g, preparing +for monitoring with the product. + +Starting with version 10.5, Auditor provides limited support of Oracle Database 11g. See the +[Considerations for Oracle Database 11g](overview.md#considerations-for-oracle-database-11g) topic +for additional information. + +Verify that Oracle Data Provider for .NET and Oracle Instant Client are installed and properly +configured on the computer where Auditor Server is installed. The product does not provide any +special notification for that. + +Follow the steps to configure **Standard Auditing** on your Oracle Database 11g: + +**Step 1 –** Select the audit trail to store audit records. Oracle Database has the following +options: + +- **Database audit trail**— Set by default. +- **XML audit trail**— Recommended. +- **OS files**—Not supported by current version of Netwrix Auditor. + +**Step 2 –** Enable auditing of Oracle Database changes, using the corresponding command. + +### Store Oracle Audit Records + +Follow the steps to select Audit Trail to store Oracle Audit Records: + +**Step 1 –** On the computer where your database is deployed, run the sqlplus tool. + +**Step 2 –** Connect to your Oracle Database using Oracle account with the `SYSDBA` privilege. For +example: + +`OracleUser as sysdba` + +**Step 3 –** Enter your password. + +Depending on where you want to store audit records, execute the required command. + +| Store to... | Execute... | +| -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Store audit records to XML audit trail (recommended). Use this audit trail if you want Netwrix Auditor to report on actions performed by users with SYSDBA and SYSOPER privileges. Otherwise, these actions will not be audited. | `ALTER SYSTEM SET audit_trail=XML SCOPE=SPFILE;` If you want to enable auditing of actions performed by SYS user and by users connecting with SYSDBA and SYSOPER privileges, execute: `ALTER SYSTEM SET audit_sys_operations=TRUE SCOPE=SPFILE;` | +| Database audit trail (default setting) In this case, actions performed by user SYS and users connecting with SYSDBA and SYSOPER privileges will not be audited. | `ALTER SYSTEM SET audit_trail=DB SCOPE=SPFILE;` | +| Store audit records to XML or database audit trail and keep full text of SQL-specific query in audit records. Only ALTER actions will be reported. | For database audit trail: `ALTER SYSTEM SET audit_trail=DB, EXTENDED SCOPE=SPFILE;` For XML audit trail: ` ALTER SYSTEM SET audit_trail=XML, EXTENDED SCOPE=SPFILE;` | + +**Step 4 –** If you turned auditing on or off, you will need to restart the database. For that, run +the following: + +`SHUTDOWN IMMEDIATE` + +`STARTUP` + +If you only changed auditing settings, database restart is not required. + +If you are using Oracle Real Application Clusters (RAC), see the +[Starting and Stopping Instances and Oracle RAC Databases](https://docs.oracle.com/cd/E11882_01/rac.112/e41960/admin.htm#starting-and-stopping-instances-and-oracle-rac-databases) +section in Real Application Clusters Administration and Deployment Guide for additional information +on restarting your instances. + +### Enable Auditing of Oracle Database Changes + +Follow the steps to enable auditing of Oracle Database changes: + +**Step 1 –** On the computer where your database is deployed, run the sqlplus tool. + +**Step 2 –** Connect to your Oracle Database—use Oracle account with the `SYSDBA` privilege. For +example: + +`OracleUser as sysdba` + +**Step 3 –** Enter your password. + +**Step 4 –** Depending on your monitoring requirements, enable auditing of the database parameters +with the related command. + +| To monitor for... | Execute... | +| --------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Configuration changes | - For any user: `AUDIT ALTER SYSTEM,SYSTEM AUDIT,SESSION,TABLE,USER, VIEW,ROLE,PROCEDURE,TRIGGER,PROFILE,DIRECTORY, MATERIALIZED VIEW,SYSTEM GRANT,NOT EXISTS, ALTER TABLE,GRANT DIRECTORY,GRANT PROCEDURE, GRANT TABLE;` `AUDIT ALTER DATABASE, FLASHBACK ARCHIVE ADMINISTER;` If you want to disable configuration auditing, use the following commands: `NOAUDIT ALTER SYSTEM,SYSTEM AUDIT,SESSION, TABLE,USER,VIEW,ROLE,PROCEDURE,TRIGGER,PROFILE, DIRECTORY,MATERIALIZED VIEW,SYSTEM GRANT, NOT EXISTS,ALTER TABLE,GRANT DIRECTORY, GRANT PROCEDURE,GRANT TABLE;` `NOAUDIT ALTER DATABASE, FLASHBACK ARCHIVE ADMINISTER;` | +| - For specific user: `AUDIT SYSTEM GRANT, SESSION, TABLE, PROCEDURE BY ``````;` You can specify several users separated by commas. | | +| Successful data access and changes | `AUDIT SELECT,INSERT,DELETE,UPDATE,RENAME, FLASHBACK ON BY ACCESS WHENEVER SUCCESSFUL;` | +| Failed data access and change | `AUDIT SELECT,INSERT,DELETE,UPDATE,RENAME, FLASHBACK ON BY ACCESS WHENEVER NOT SUCCESSFUL;` | +| Successful and failed data access and changes | `AUDIT SELECT,INSERT,DELETE,UPDATE,RENAME, FLASHBACK ON ;` | + +For additional information on `ALTER SYSTEM` and `AUDIT` parameters, see the following Oracle +database administration documents: + +- `[AUDIT_TRAIL](https://docs.oracle.com/cd/E11882_01/server.112/e40402/initparams017.htm#audit_trail)` +- `[AUDIT](http://docs.oracle.com/cd/E11882_01/server.112/e41084/statements_4007.htm#audit)` + +After an audit parameter has been enabled or disabled, Auditor will start collecting data after +successful logon session. + +Also, remember to do the following: + +- Configure Data Collecting Account. See the + [Permissions for Oracle Database Auditing](/docs/auditor/10.7/configuration/oracle/permissions.md) topic for additional information. +- Configure ports. See the [Oracle Database Ports](/docs/auditor/10.7/configuration/oracle/ports.md) topic for additional information about + ports and protocols required for auditing. diff --git a/docs/auditor/10.8/configuration/oracle/finegained.md b/docs/auditor/10.8/configuration/oracle/finegained.md new file mode 100644 index 0000000000..25712703df --- /dev/null +++ b/docs/auditor/10.8/configuration/oracle/finegained.md @@ -0,0 +1,30 @@ +--- +title: "Configure Fine Grained Auditing" +description: "Configure Fine Grained Auditing" +sidebar_position: 40 +--- + +# Configure Fine Grained Auditing + +When configuring Fine Grained Auditing, you need to create an audit policy with required parameters +set. The section below explains how to create, disable and delete such audit policies. + +Fine Grained audit policies can be configured for Oracle Database Enterprise Edition only. Keep in +mind that if you have Fine Grained policies configured, you will receive a permanent error in the +Netwrix Auditor System Health log because Netwrix Auditor cannot detect it. Use Unified and Standard +audit policies to keep track of data changes. + +To configure Fine Grained Auditing: + +Below is an example of Fine Grained audit policy that enables auditing of audit statements +`(INSERT, UPDATE, DELETE,` and `SELECT`) on table `hr.emp` to audit any query that accesses the +`salary` column of the employee records that belong to `sales` department. + +| To... | Execute the following command... | +| ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| To create audit policy | `EXEC DBMS_FGA.ADD_POLICY(object_schema => 'hr', object_name => 'emp', policy_name => 'chk_hr_emp', audit_condition => 'dept = ''SALES'' ', audit_column => 'salary', statement_types => 'INSERT,UPDATE,DELETE,SELECT');` | +| To disable audit policy | `EXEC DBMS_FGA.DISABLE_POLICY(object_schema => 'hr', object_name =>'emp', policy_name => 'chk_hr_emp');` | +| To delete audit policy | `EXEC DBMS_FGA.DROP_POLICY(object_schema => 'hr', object_name =>'emp', policy_name => 'chk_hr_emp');` | + +Refer to Oracle documentation for additional information on +[Working with Oracle Fine Grained Auditing](https://docs.oracle.com/cd/F28299_01/pt857pbr3/eng/pt/tadm/task_WorkingwithOracleFineGrainedAuditing-4f7f7a.html?pli=ul_d90e208_tadm#working-with-oracle-fine-grained-auditing). diff --git a/docs/auditor/10.8/configuration/oracle/overview.md b/docs/auditor/10.8/configuration/oracle/overview.md new file mode 100644 index 0000000000..dc15001c94 --- /dev/null +++ b/docs/auditor/10.8/configuration/oracle/overview.md @@ -0,0 +1,147 @@ +--- +title: "Oracle Database" +description: "Oracle Database" +sidebar_position: 90 +--- + +# Oracle Database + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - On the Oracle server, configure the required settings described below. + - On the Auditor console computer, verify that Oracle Data Provider for .NET and Oracle Instant + Client are installed and properly configured. See the + [Permissions for Oracle Database Auditing](/docs/auditor/10.7/configuration/oracle/permissions.md) topic of system requirements. + +Ensure that you have met all software requirements on the Oracle Database side. See the +[Software Requirements](/docs/auditor/10.7/requirements/software.md) topic for additional information. + +Before you start monitoring your Oracle Database with Netwrix Auditor, you should configure it to +provide audit trails. Depending on your current database version and edition, Oracle supports +different auditing types: + +| Auditing type | Oracle version | Details | +| --------------------------------------- | --------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Unified Auditing | Oracle Database 23c, 21c, 19c, 18c, 12c | Consolidates all auditing into a single repository and view. This provides a two-fold simplification: audit data can now be found in a single location and all audit data is in a single format. See [Configure Oracle Database for Auditing](/docs/auditor/10.7/configuration/oracle/database.md) topic for more information. | +| Fine Grained Auditing | Oracle Database 23c, 21c, 19c, 18c, 12c, 11g Available for **Enterprise Edition** only. | Supports auditing of actions associated with columns in application tables — along with conditions necessary for an audit record to be generated. Helps to focus on security-relevant columns and rows, ignoring areas that are less important. See [Configure Fine Grained Auditing](/docs/auditor/10.7/configuration/oracle/finegained.md) topic for more information. | +| Standard Auditing (trail auditing mode) | Oracle Database 11g | See topic for more information. Use initialization parameters and the `AUDIT` and `NOAUDIT` SQL statements to audit: - SQL statements - privileges - schema objects - network and multitier activities See [Oracle documentation](https://docs.oracle.com/cd/E11882_01/server.112/e10575/tdpsg_auditing.htm#oracle-documentation) for more information. Starting with version 10.5, Netwrix Auditor provides limited support of Oracle Database 11g and trail auditing mode, in particular: Netwrix Auditor client UI does not display any warnings and / or errors related to Standard Auditing mode operation. | + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +## Considerations for Oracle Database 11g + +Starting with version 9.95, Netwrix Auditor for Oracle Database is focused on versions 12c and +above. It means that Oracle Database 11g users will not be able to benefit from latest features and +improvements of the product. Oracle Database 11g users should also consider its support expiration +dates set by the vendor. So, when planning your Netwrix Auditor deployment, consider the following: + +- Several limitations apply to Oracle 11g support in Netwrix Auditor 9.96: + + - Oracle wallets are not supported + - Lightweight drivers for Oracle Instant Client are not supported + - Auditor client UI does not display any warnings and / or errors regarding to trail audit mode + operation + +- If you are using Oracle Database 11g and have performed seamless upgrade to the latest version of + Auditor, the audit data collection will operate properly. However, consider and keep in mind + Oracle Database 11g support expiration dates. + +If you are using Oracle Database 12c or later, make sure you have Unified auditing mode enabled. +Otherwise, Netwrix Auditor may not operate properly. See the [Migrate to Unified Audit](/docs/auditor/10.7/configuration/oracle/unified.md) +topic for additional information. + +See the [Software Requirements](/docs/auditor/10.7/requirements/software.md) topic for additional information. + +## Configuration + +If you are using Oracle Wallet to connect to your database, see the +[Create and Configure Oracle Wallet](/docs/auditor/10.7/configuration/oracle/wallet.md) topic for configuration details. + +Oracle Wallet is not supported for Oracle 11g. If you are unsure of your audit settings, refer to +the [Verify Your Oracle Database Audit Settings](/docs/auditor/10.7/configuration/oracle/verifysettings.md) + +Follow the steps for proper configuration. + +**Step 1 –** Configure Data Collecting Account, as described in the +[Permissions for Oracle Database Auditing](/docs/auditor/10.7/configuration/oracle/permissions.md) topic. + +**Step 2 –** Configure required protocols and ports, as described in the +[Oracle Database Ports](/docs/auditor/10.7/configuration/oracle/ports.md) topic. + +## Oracle Database objects + +Review a full list of object types Netwrix Auditor can collect on Oracle Database. If you deployed +your Oracle Database in a cluster mode (Oracle Real Application Cluster), a host name also will be +reported. + +Details marked with asterisk (\*) are reported for Oracle Database 11g only. + +Details marked with asterisk (\*\*) are reported for Oracle Database 12c only. + +Oracle Object modification under Privileges and object rename under Rename are reported without +Object type (“Not available” is displayed). + +Oracle Database startup under System Settings is reported without Workstation (“Not available” is +displayed). + +| Object type | Actions | Details | +| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Directories | | | +| - Directory | - Added / Add (Failed attempt) - Removed / Remove (Failed attempt) | - Cause (for failed attempts) - Container name\*\* - Database User - Program name / Database session requester\*\* - Privilege for action - Session ID - Object schema | +| Executable objects | | | +| - Procedure - Function - Package - Package body - Java | - Added / Add (Failed attempt) - Modified / Modify (Failed attempt) - Removed / Remove (Failed attempt) | - Cause (for failed attempts) - Container name\*\* - Database User - Privilege for action - Program name / Database session requester\*\* - Session ID - Unified policy name\*\* | +| For Oracle 11g database Modified / Modify (Failed attempt) events will not be monitored for the following objects: _Procedure, Function, Package, Package body_ since native audit of these events is not supported. See the [Database SQL Language Reference](https://docs.oracle.com/cd/B28359_01/server.111/b28286/statements_4007.htm#database-sql-language-reference) for additional information. | | | +| Logons | | | +| - Logon | - Successful logon / Failed logon - Logoff | - Cause (for failed attempts) - Client IP (only for logon events) - Container name\*\* - Database User - Privilege for action - Program name / Database session requester\*\* - Session ID - Object schema - Unified policy name\*\* | +| Materialized views | | | +| - Materialized view | - Added / Failed Add - Removed / Failed Remove | - Cause (for failed attempts) - Container name\*\* - Database user - With option - Program name / Database session requester\*\* - Session ID - Object schema - Unified policy name\*\* | +| Privileges | | | +| - Object | - Modified / Modify (Failed attempt) | - Cause (for failed attempts) - Container name\*\* - Database user - With option - Privilege user - Program name / Database session requester\*\* - Session ID - Unified policy name\*\* | +| - Role | - Added / Add (Failed attempt) - Modified / Modify (Failed attempt) - Removed / Remove (Failed attempt) | - Captured SQL statement - Cause (for failed attempts) - Container name\*\* - Database user - With option - Program name / Database session requester\*\* - Role name - Session ID - Unified policy name\*\* | +| - Database | - Modified / Modify (Failed attempt) | - Captured SQL statement - Cause (for failed attempts) - Container name\*\* - Database user - With option - Program name / Database session requester\*\* - Session ID - Unified policy name\*\* | +| Profiles | | | +| - Profile | - Added / Add (Failed attempt) - Modified / Modify (Failed attempt) - Removed / Remove (Failed attempt) | - Captured SQL statement - Cause (for failed attempts) - Container name\*\* - Database user - Privilege for action - Program name / Database session requester\*\* - Session ID - Unified policy name\*\* | +| Rename | | | +| - Object | - Renamed / Rename (Failed attempt) | - Cause (for failed attempts) - Container name\*\* - Database user - New object name - With option - Privilege user - Session ID - Unified policy name\*\* | +| Roles | | | +| - Role | - Added / Add (Failed attempt) - Modified / Modify (Failed attempt) - Removed / Remove (Failed attempt) | - Captured SQL statement - Cause (for failed attempts) - Container name\*\* - Database user - Privilege for action - Program name / Database session requester\*\* - Session ID - Unified policy name\*\* | +| Data | | | +| - Data | - Added / Add (Failed attempt) - Modified / Modify (Failed attempt) - Read / Read (Failed attempt) - Removed / Remove (Failed attempt) | - Cause (for failed attempts) - Container name\*\* - Database user - FGA policy name - Session ID | +| System Settings | | | +| - Audit Policy | - Added / Add (Failed attempt) - Modified / Modify (Failed attempt) | - Captured SQL statement - Cause (for failed attempts) - Container name\*\* - Database user - With option - Program name / Database session requester\*\* - Session ID - Unified policy name\*\* | +| - Database | - Modified / Modify (Failed attempt) | | +| Tables | | | +| - Table | - Added / Add (Failed attempt) - Modified / Modify (Failed attempt) - Removed / Remove (Failed attempt) | - Captured SQL statement - Cause (for failed attempts) - Container name\*\* - Database user - Program name / Database session requester\*\* - Session ID - Object schema - Unified policy name | +| Triggers | | | +| - Trigger | - Added / Add (Failed attempt) - Modified / Modify (Failed attempt) - Removed / Remove (Failed attempt) | - Captured SQL statement - Cause (for failed attempts) - Container name\*\* - Database user - With option - Program name / Database session requester\*\* - Referenced table - Referenced table schema - Session ID - Object schema - Triggered by\* - Unified policy name\*\* | +| Users | | | +| - User | - Added / Add (Failed attempt) - Modified / Modify (Failed attempt) - Removed / Remove (Failed attempt) | - Captured SQL statement - Cause (for failed attempts) - Container name\*\* - Database user - Privilege for action - Program name / Database session requester\*\* - Session ID - Unified policy name\*\* | +| Views | | | +| - View | - Added / Add (Failed attempt) - Removed / Remove (Failed attempt) | - Cause (for failed attempts) - Container name\*\* - Database user - With option - Program name / Database session requester\*\* - Session ID - Object schema - Unified policy name\*\* | +| Oracle Datapump | | | +| - Datapump | - Read / Read (Failed attempt) - Modified / Modify (Failed attempt) | - Cause (for failed attempts) - Container name\*\* - Database user - Datapump boolean parameters - Datapump text parameters - Program name / Database session requester\*\* - Session ID | +| Oracle Recovery Manager (RMAN) | | | +| - RMAN | - Added / Add (Failed attempt) - Modified / Modify (Failed attempt) - Read / Read (Failed attempt) - Removed / Remove (Failed attempt) | - Cause (for failed attempts) - Container name\*\* - Database user - Program name / Database session requester\*\* - RMAN operation | +| Oracle SQL\*Loader Direct Path Load | | | +| - Direct Path Load API | - Modified / Modify (Failed attempt) | - Cause (for failed attempts) Container name\*\* - Database user - Program name / Database session requester\*\* - Session ID | diff --git a/docs/auditor/10.8/configuration/oracle/permissions.md b/docs/auditor/10.8/configuration/oracle/permissions.md new file mode 100644 index 0000000000..5b982b94ce --- /dev/null +++ b/docs/auditor/10.8/configuration/oracle/permissions.md @@ -0,0 +1,95 @@ +--- +title: "Permissions for Oracle Database Auditing" +description: "Permissions for Oracle Database Auditing" +sidebar_position: 70 +--- + +# Permissions for Oracle Database Auditing + +When creating a monitoring plan for your Oracle Database, you should specify the account that has +sufficient privileges to collect data from the database. At least, the following privileges are +required: + +- CREATE SESSION — Allows an account to connect to a database. +- SELECT — Allows an account to retrieve data from one or more tables, views, etc. + +Alternatively, you can assign the default administrator role to that account. + +You can grant the required privileges to the existing account, or create a new one. Follow the +procedure described below. + +Follow the steps to grant CREATE SESSION and SELECT privileges to the account. + +**Step 1 –** On the computer where your database is deployed, run the sqlplus tool. + +**Step 2 –** Connect to your Oracle Database. + +**NOTE:** Use Oracle account with the `SYSDBA` privilege, for example: + +`OracleUser as sysdba` + +**Step 3 –** Enter the account password. + +**Step 4 –** Decide on the account that will be used to access this database for audit data +collection. You can: + +- Use the account that already exists + + - OR - + +- Create a new account. To create a new account, use the following command:: + `CREATE USER IDENTIFIED BY PASSWORD;` + +**Step 5 –** Grant `CREATE SESSION` system privilege to that account. For that, execute: +`GRANT CREATE SESSION TO ;` + +**Step 6 –** Grant `SELECT` privilege on the required object to that account. See the For Oracle +Database Auditing topic for the detailed object list. For that, execute: +`GRANT SELECT ON TO ;` +For example: +`GRANT SELECT ON aud$ TO OracleUser;` + +CREATE SESSION and SELECT privileges now granted to the account. + +Alternatively, you can grant the default administrator role to that account. For that, execute: +`GRANT DBA TO ; ` + +## For Oracle Database Auditing + +Before you start creating a monitoring plan to audit your Oracle Database, plan for the account that +will be used for data collection – it should meet the requirements listed below. Then you will +provide this account in the monitoring plan wizard. + +1. The `CREATE SESSION` system privilege must be granted to the account used to connect to Oracle + Database for data collection. +2. Depending on your Oracle Database version, the `SELECT` privilege on the certain objects must be + granted to that account: + +| Version | Privileges Required | +|--------------------------|-----------------------------------------------------------------------------------------------------------------------------------| +| Oracle Database 12c, 18c, 19c | Grant SELECT privilege on the following objects: | +| | - aud$ | +| | - gv_$xml_audit_trail | +| | - dba_stmt_audit_opts | +| | - v_$parameter | +| | - dba_obj_audit_opts | +| | - dba_audit_policies | +| | - dba_audit_mgmt_clean_events | +| | - gv_$instance | +| | - fga_log$ | +| | - gv_$unified_audit_trail | +| | - all_unified_audit_actions | +| | - audit_unified_policies | +| | - audit_unified_enabled_policies | +| | - audsys.aud$unified (for Oracle Database 12c Release 2 and higher) | +| Oracle Database 11g | Starting with version 10.5, Netwrix Auditor provides limited support of Oracle Database 11g. | +| | Grant SELECT privilege on the following objects: | +| | - aud$ | +| | - gv_$xml_audit_trail | +| | - dba_stmt_audit_opts | +| | - v_$parameter | +| | - dba_obj_audit_opts | +| | - dba_audit_policies | +| | - dba_audit_mgmt_clean_events | +| | - gv_$instance | +| | - fga_log$ | diff --git a/docs/auditor/10.8/configuration/oracle/ports.md b/docs/auditor/10.8/configuration/oracle/ports.md new file mode 100644 index 0000000000..ac0a793589 --- /dev/null +++ b/docs/auditor/10.8/configuration/oracle/ports.md @@ -0,0 +1,24 @@ +--- +title: "Oracle Database Ports" +description: "Oracle Database Ports" +sidebar_position: 10 +--- + +# Oracle Database Ports + +Review a full list of protocols and ports required for Netwrix Auditor for Oracle Database. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to remote ports on the source and inbound connections to local ports on + the target. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 1521 TCP port. On your Oracle Database Server +(target), allow inbound connections to local 1521 TCP port. + +| Port | Protocol | Source | Target | Purpose | +| ---- | -------- | ---------------------- | ---------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| 1521 | TCP | Netwrix Auditor Server | Oracle Database Server | Allows Oracle client connections to the database via the Oracle's SQL\*Net protocol. You can configure it during installation. Port 1521 is the default client connections port, however, you can configure another TCP port via the Oracle configuration and administration tools. | +| 2484 | TCP | Netwrix Auditor Server | Oracle Database Server | The default SSL port for secured Oracle client connections to the database via the Oracle's SQL\*Net protocol. Open this port if you need secure connection. | +| 53 | UDP | Netwrix Auditor Server | DNS Server | DNS Client | diff --git a/docs/auditor/10.8/configuration/oracle/unified.md b/docs/auditor/10.8/configuration/oracle/unified.md new file mode 100644 index 0000000000..1fe9ec7543 --- /dev/null +++ b/docs/auditor/10.8/configuration/oracle/unified.md @@ -0,0 +1,91 @@ +--- +title: "Migrate to Unified Audit" +description: "Migrate to Unified Audit" +sidebar_position: 30 +--- + +# Migrate to Unified Audit + +Starting with 10.5 version, Netwrix Auditor provides limited support of Oracle Database 11g and +trail auditing mode accordingly. See +[Considerations for Oracle Database Auditing for more information.](overview.md#considerations-for-oracle-database-11g) + +When planning your migration, consider that you can select the following scenario: + +- Migration to pure unified auditing. See the corresponding Oracle documentation article: + [Migrating to Unified Auditing for Oracle Database](https://docs.oracle.com/database/121/UPGRD/afterup.htm#migrating-to-unified-auditing-for-oracle-database). +- Use a mixed-mode audit facility (not recommended). + +Perform the following steps according to official Oracle documentation: + +1. To migrate to Unified Auditing for Oracle Database +2. [Manage Earlier Audit Records After You Migrate to Unified Auditing](https://docs.oracle.com/database/121/UPGRD/afterup.htm#manage-earlier-audit-records-after-you-migrate-to-unified-auditing) + +To migrate to Unified Auditing for Oracle Database + +The procedure contains basic migration steps. Refer to +[Oracle_Database_Upgrade_Guide](https://docs.oracle.com/database/121/UPGRD/toc.htm) for more +detailed upgrade scenario. + +1. On the computer where your database is deployed, run the sqlplus tool. +2. Connect to your Oracle Database—use Oracle account with the `SYSDBA` privilege. For example: + + sqlplus sys as sysdba + + Enter password: password + +3. Check if your Oracle database has already been migrated to unified auditing: + + SQL> SELECT VALUE FROM V$OPTION WHERE PARAMETER = 'Unified Auditing'; + + If the `value` is `true`, unified auditing mode is already enabled in your database. + + In this case, you can ignore further steps and start managing your earlier audit records. Refer + to Oracle documentation for more information: + [Managing Earlier Audit Records After You Migrate to Unified Auditing](https://docs.oracle.com/database/121/UPGRD/afterup.htm#managing-earlier-audit-records-after-you-migrate-to-unified-auditing). + + If the `value` is `false`, proceed with the steps below. + +4. Stop the database. Do the following, depending on your environment: + + | For... | Do... | + | ---------------------------- | --------------------------------------------------------------------------------- | + | Single-instance environments | In sqlplus tool, execute the following command: SQL> SHUTDOWN IMMEDIATE SQL> EXIT | + | Windows systems | Stop the Oracle service: net stop OracleService%ORACLE_SID% | + | Oracle RAC installations | Shut down each database instance as follows: srvctl stop database -db db_name | + +5. Stop the listener. Stopping the listener is not necessary for Oracle RAC and Grid Infrastructure + listeners. + + lsnrctl stop listener_name + + To find your listener name, execute the following command: + + lsnrctl status + + The `Alias `parameter shows listener name. + +6. Navigate to `$ORACLE_HOME /rdbms/lib` directory. +7. Enable the unified auditing executable. Do the following depending on your infrastructure: + + | For... | Do... | + | ------------------ | ----------------------------------------------------------------------------------------------- | + | Windows systems | Rename the `%ORACLE_HOME%/bin/orauniaud12.dll.dbl` file to `%ORACLE_HOME%/bin/orauniaud12.dll.` | + | UNIX-based systems | Execute the following command: make -f ins_rdbms.mk uniaud_on ioracle ORACLE_HOME=$ORACLE_HOME | + +8. Restart the listener. + + lsnrctl start listener_name + +9. Restart the database. Do the following, depending on your environment: + + | For... | Do... | + | ---------------------------- | ------------------------------------------------------------------------------------------------------------ | + | Single-instance environments | In sqlplus tool, execute the following command: sqlplus sys as sysoper Enter password: password SQL> STARTUP | + | Windows systems | Start the Oracle service: net start OracleService%ORACLE_SID% | + | Oracle RAC installations | Start each database instance as follows: srvctl start database -db db_name | + +See also: + +1. [Manage Earlier Audit Records After You Migrate to Unified Auditing](https://docs.oracle.com/database/121/UPGRD/afterup.htm#manage-earlier-audit-records-after-you-migrate-to-unified-auditing) +2. [Remove the Unified Auditing Functionality](https://docs.oracle.com/database/121/UPGRD/afterup.htm#remove-the-unified-auditing-functionality) diff --git a/docs/auditor/10.8/configuration/oracle/verifysettings.md b/docs/auditor/10.8/configuration/oracle/verifysettings.md new file mode 100644 index 0000000000..89fa82a90d --- /dev/null +++ b/docs/auditor/10.8/configuration/oracle/verifysettings.md @@ -0,0 +1,21 @@ +--- +title: "Verify Your Oracle Database Audit Settings" +description: "Verify Your Oracle Database Audit Settings" +sidebar_position: 60 +--- + +# Verify Your Oracle Database Audit Settings + +You can verify your Oracle Database audit settings manually. Do one of the following, depending on +your Oracle Database version and edition. + +| Oracle Database version/edition | Command | +| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Oracle Database 19c (Unified Auditing) | `select ENTITY_NAME, ENABLED_OPTION, SUCCESS, FAILURE from AUDIT_UNIFIED_ENABLED_POLICIES; ` | +| Oracle Database 12c, 18c, 19c (Unified Auditing) | `select USER_NAME, ENABLED_OPT, SUCCESS, FAILURE from AUDIT_UNIFIED_ENABLED_POLICIES;` | +| Oracle Database Enterprise Edition (Fine Grained Auditing) | `SELECT POLICY_NAME, ENABLED from DBA_AUDIT_POLICIES;` | +| Oracle Database 11g(Standard Auditing) Starting with version 10.5, Netwrix Auditor provides limited support of Oracle Database 11g and trail auditing mode accordingly. | `SELECT audit_option, success, failure FROM dba_stmt_audit_opts;` To review your initialization parameters, execute the following command: `SHOW PARAMETERS audit%r;` | + +If you want to clean your audit settings periodically, refer to the following Oracle Help Center +article for more information: +[Database PL/SQL Packages and Types Reference.](https://docs.oracle.com/database/121/ARPLS/d_audit_mgmt.htm#database-plsql-packages-and-types-reference) diff --git a/docs/auditor/10.8/configuration/oracle/wallet.md b/docs/auditor/10.8/configuration/oracle/wallet.md new file mode 100644 index 0000000000..fafb003b85 --- /dev/null +++ b/docs/auditor/10.8/configuration/oracle/wallet.md @@ -0,0 +1,152 @@ +--- +title: "Create and Configure Oracle Wallet" +description: "Create and Configure Oracle Wallet" +sidebar_position: 50 +--- + +# Create and Configure Oracle Wallet + +Oracle Wallet is a file that stores database authentication and signing credentials. It allows users +to securely access databases without providing credentials to third-party software (for example, +Netwrix Auditor), and easily connect to Oracle products, including located in the clouds (e.g. +Autonomous Data Warehouse). + +A configured Wallet consists of two files, `cwallet.sso` and `ewallet.p12` stored in a secure Wallet +directory + +## Create Oracle Wallet + +There are multiple methods to create Oracle Wallet files. For example: + +- Using Oracle Wallet Manager. Refer to the following Oracle help article for more information: + [Creating a New Oracle Wallet](https://docs.oracle.com/database/121/DBIMI/walet.htm#creating-a-new-oracle-wallet). +- Using a console. As an example, refer to the following Oracle help article for WebLogic JDBC: + [Creating and Managing Oracle Wallet](https://docs.oracle.com/middleware/1213/wls/JDBCA/oraclewallet.htm#creating-and-managing-oracle-wallet). +- Using other Oracle products. For example, Autonomous Data Warehouse. Refer to the following Oracle + help article for more information: + [Download Client Credentials (Wallets)](https://docs.oracle.com/en/cloud/paas/autonomous-data-warehouse-cloud/user/connect-download-wallet.html#download-client-credentials-wallets). + +## Install Oracle Instant Client + +To perform clear install of Oracle Instant Client, follow the instructions below. If you have Oracle +Client installed, see the Update Existing Oracle Client Installation topic for additional +information. + +Follow the steps to install Oracle Instant Client + +**Step 1 –** Download the appropriate package from Oracle website: +[Instant Client Packages](https://www.oracle.com/database/technologies/instant-client/downloads.html). +Netwrix recommends installing the latest available version but the product is compatible with +version 12 and above. + +**Step 2 –** Download client credentials and store the file in a secure location. See +[Download Client Credentials (Wallets)](https://docs.oracle.com/en/cloud/paas/atp-cloud/atpug/connect-download-wallet.html#download-client-credentials-wallets) +for more information. + +**Step 3 –** Unzip your credentials file into a secure location. + +**Step 4 –** Navigate to a folder where you unzipped your credentials and locate the sqlnet.ora +file. + +**Step 5 –** Replace the `"?/network/admin"` parameter with the name of the folder containing client +credentials. For example: + +Windows-based platforms: + +WALLET_LOCATION = (SOURCE = (METHOD = file) (METHOD_DATA = +(DIRECTORY="D:\\myapp\\atp_credentials") + +SSL_SERVER_DN_MATCH=yes + +**Step 6 –** Create the `TNS_ADMIN` environment variable and set it to the location of the +credentials file. + +This variable is used to change the directory path of Oracle Net Services configuration files from +the default location of `ORACLE_HOME\network\admin` to the location of the secure folder containing +the credentials file you saved in Step 2. Set the `TNS_ADMIN` environment variable to the directory +where the unzipped credentials files are, not to the credentials file itself. + +**Step 7 –** Navigate to a folder where you unzipped your credentials and locate the tnsnames.ora +file. The file is used to map connection information for each Oracle service to a logical alias. + +**Step 8 –** Review sample tnsnames.ora file where `myOracle` – is a logical alias for the wallet: + +myOracle = + +(description= + +(address=((ADDRESS = (PROTOCOL = TCP)(HOST = server1)(PORT = 1521)) + +(CONNECT_DATA = + +) + +) + +Keep in mind that the wallet alias in the configuration file must equal to Netwrix Auditor item +name. + +## Configure Oracle Instant Client for HTTP Proxy Connections + +If the client is behind a firewall and your network configuration requires an HTTP proxy to connect +to the internet, perform the following steps to update the `sqlnet.ora` and `tnsnames.ora` files. + +HTTP proxy connections are available starting with Oracle Instant Client 12.2.0.1 or later. + +1. Add the following line to the `sqlnet.ora` file to enable connections through an HTTP proxy: + + SQLNET.USE_HTTPS_PROXY=on + +2. Open the `tnsnames.ora.` file and add the following HTTP proxy connection definitions: + + - `https_proxy` — specify the proxy server hostname. For example, `proxyhostname`. + - `https_proxy_port `— specify port used for HTTP proxy connection. For example, `80`. + + Review configuration example: + + ATPC_high = + + (description= + + (address= + + (https_proxy=proxyhostname)(https_proxy_port=80)(protocol=tcps)(port=1522)(host=atpc.example.oraclecloud.com) + + ) + + (connect_data=(service_name=atpc1_high.atpc.oraclecloud.com) + + ) + + (security=(ssl_server_cert_dn="atpc.example.oraclecloud.com,OU=Oracle BMCS US,O=Oracle + Corporation,L=Redwood City,ST=California,C=US") + + ) + + ) + +Configuring `sqlnet.ora` and` tnsnames.ora` for the HTTP proxy may not be enough depending on your +organization's network configuration and security policies. For example, some networks require a +username and password for the HTTP proxy. In such cases, contact your network administrator to open +outbound connections to hosts in the oraclecloud.com domain using port `1522 `without going through +an HTTP proxy. + +## Update Existing Oracle Client Installation + +Netwrix assumes that you have `sqlnet.ora` and `tnsnames.ora` files and the `TNS_ADMIN `environment +variable. + +Do the following: + +1. Update your sqlnet.ora file. Example: + + WALLET_LOCATION = (SOURCE = (METHOD = file) (METHOD_DATA = + (DIRECTORY="/home/atpc_credentials") + +2. Copy the entries in the `tnsnames.ora` file provided in the Autonomous Transaction Processing + wallet to your existing `tnsnames.ora` file. + +See also: + +- For information about using Oracle Wallet with monitoring plans, see the + [Oracle monitoring plan documentation](/docs/auditor/10.7/admin/monitoringplans/oracle/overview.md). diff --git a/docs/auditor/10.8/configuration/overview.md b/docs/auditor/10.8/configuration/overview.md new file mode 100644 index 0000000000..45802f167e --- /dev/null +++ b/docs/auditor/10.8/configuration/overview.md @@ -0,0 +1,39 @@ +--- +title: "Data Source Configuration" +description: "Data Source Configuration" +sidebar_position: 30 +--- + +# Data Source Configuration + +With the Netwrix Auditor, the following Data Sources can be monitored: + +- [Active Directory](/docs/auditor/10.7/configuration/activedirectory/overview.md) +- [AD FS](/docs/auditor/10.7/configuration/activedirectoryfederatedservices/overview.md) +- [Exchange](/docs/auditor/10.7/configuration/exchange/overview.md) +- [File Servers](/docs/auditor/10.7/configuration/fileservers/overview.md) + + - [Dell Data Storage](/docs/auditor/10.7/configuration/fileservers/delldatastorage/overview.md) + - [Dell Isilon/PowerScale](/docs/auditor/10.7/configuration/fileservers/dellisilon/overview.md) + - [NetApp Data ONTAP](/docs/auditor/10.7/configuration/fileservers/netappcmode/overview.md) + - [Nutanix](/docs/auditor/10.7/configuration/fileservers/nutanix/overview.md) + - [Qumulo](/docs/auditor/10.7/configuration/fileservers/qumulo/overview.md) + - [Synology](/docs/auditor/10.7/configuration/fileservers/synology/overview.md) + - [Windows File Servers](/docs/auditor/10.7/configuration/fileservers/windows/overview.md) + +- [Group Policy](/docs/auditor/10.7/configuration/grouppolicy/overview.md) +- [Logon Activity](/docs/auditor/10.7/configuration/logonactivity/overview.md) +- [Microsoft 365](/docs/auditor/10.7/configuration/microsoft365/overview.md) + + - [Exchange Online](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/overview.md) + - [Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/overview.md) + - [SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/overview.md) + - [MS Teams](/docs/auditor/10.7/configuration/microsoft365/teams/overview.md) + +- [Network Devices](/docs/auditor/10.7/configuration/networkdevices/overview.md) +- [Oracle Database](/docs/auditor/10.7/configuration/oracle/overview.md) +- [SharePoint](/docs/auditor/10.7/configuration/sharepoint/overview.md) +- [SQL Server](/docs/auditor/10.7/configuration/sqlserver/overview.md) +- [User Activity](/docs/auditor/10.7/configuration/useractivity/overview.md) +- [VMware](/docs/auditor/10.7/configuration/vmware/overview.md) +- [Windows Server](/docs/auditor/10.7/configuration/windowsserver/overview.md) diff --git a/docs/auditor/10.8/configuration/sharepoint/_category_.json b/docs/auditor/10.8/configuration/sharepoint/_category_.json new file mode 100644 index 0000000000..2041788521 --- /dev/null +++ b/docs/auditor/10.8/configuration/sharepoint/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "SharePoint", + "position": 100, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/sharepoint/overview.md b/docs/auditor/10.8/configuration/sharepoint/overview.md new file mode 100644 index 0000000000..0faf768ce0 --- /dev/null +++ b/docs/auditor/10.8/configuration/sharepoint/overview.md @@ -0,0 +1,179 @@ +--- +title: "SharePoint" +description: "SharePoint" +sidebar_position: 100 +--- + +# SharePoint + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. + + - In this case, Auditor will enable automatic audit log trimming for all monitored site + collections; log retention period will be set to 7 days. Also, consider that after a site + collection is processed, Auditor will automatically delete the events older than 1 day from + its audit log. + +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - Configure Audit Log Trimming on your SharePoint farm. + - Configure Events Auditing Settings on your SharePoint farm. + - Enable SharePoint Administration Service on the computer where SharePoint Central + Administration is installed and where you intend to deploy Netwrix Auditor for SharePoint Core + Service. + +## Configure Audit Log Trimming + +Follow the steps to configure Audit Log Trimming on your SharePoint farm. + +**Step 1 –** Log in as an administrator to the audited SharePoint site collection. + +**Step 2 –** In the upper-left of your site collection, go to **Site Actions** > **Site Settings** +and select one of the following: + +- SharePoint 2010 +- SharePoint 2013 +- SharePoint 2016 +- SharePoint 2019 +- SharePoint Subscription Edition + +**Step 3 –** Under the Site Collection Administration section, select Site collection audit +settings. + +**Step 4 –** In the Audit Log Trimming section, do the following: + +- Set "Automatically trim the audit log for this site" to "Yes". +- In "Specify the number of days of audit log data to retain" set "retention" to 7 days. + + You may keep the existing audit log retention provided that it is set to 7 days or less. + +## Configure Events Auditing Settings + +Follow the steps to configure event auditing settings. + +**Step 1 –** Log in as an administrator to the audited SharePoint site collection. + +**Step 2 –** In the upper-left of your site collection, go to **Site Actions** > **Site Settings** +and select one of the following: + +- SharePoint 2010 +- SharePoint 2013 +- SharePoint 2016 +- SharePoint 2019 +- SharePoint Subscription Edition + +**Step 3 –** Under the Site Collection Administration section, select Site collection audit +settings. + +**Step 4 –** In the "List, Libraries, and Sites" section, select Editing users and permissions. + +**NOTE:** Enable Opening or downloading documents, viewing items in lists, or viewing item +properties for read access auditing. + +If you are using SharePoint 2019 or SharePoint Subscription Edition, it is recommended to adjust +audit settings automatically with Auditor to enable this option. See the +[Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional +information. + +## Enable SharePoint Administration Service + +This service is must be started to ensure the Netwrix Auditor for SharePoint Core Service successful +installation. Perform the procedure below, prior to the Core Service installation. See the +[Install for SharePoint Core Service](/docs/auditor/10.7/install/sharepointcoreservice.md) topic for additional +information. + +Follow the steps to enable SharePoint Administration Service. + +**Step 1 –** On the computer where SharePoint Central Administration is installed and where you +intend to deploy Netwrix Auditor for SharePoint Core Service, open the Services Management Console. +Navigate to Start > Windows Administrative Tools > Services. + +**Step 2 –** Locate the SharePoint Administration service (SPAdminV4), right-click it and select +Properties. + +**Step 3 –** In the General tab, set the Startup type to "Automatic" and click Apply. + +**Step 4 –** Click Start to start the service. + +## SharePoint objects + +Review a full list of object types and attributes Netwrix Auditor can collect on SharePoint. + +The attributes marked with \* are reported without details, only the fact of change is reported. + +The changes to object types marked with \*\* are reported with the "Not applicable" value in the +"Who" and "Workstation" columns. + +The changes to object types and attributes marked with \*\*\* are reported with the "Not applicable" +value in the "Workstation" column. + +Read access is reported for documents and lists and displays "Not applicable" in the "Workstation" +column. + +| Object type | Attributes | +| --------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Group\*\*\* | - Membership | +| Permission Level\*\*\* | - Permissions | +| Site | - Site URL - Permissions\*\*\* - Permission Inheritance\*\*\* | +| List | - Permissions\*\*\* - Permission Inheritance\*\*\* | +| List Item | - Attachments - Permissions\*\*\* - Permission Inheritance\*\*\* - List Item Properties\* | +| Document | - Document URL - Permissions\*\*\* - Permission Inheritance\*\*\* - Document Properties\* - Content Modifications\* | +| Farm\*\* | - Configuration Database - Configuration Database Server - Version - Managed Account for "Web Application Pool - `{name}`" - Managed Account for "Service Application Pool - `{name}`" - Managed Account for "Windows Service - `{name}`" - Managed Account for "Farm Account" - Managed Accounts | +| Web Application \*\* | - Web Application URL - Name - Port - User Permissions - Alternate Access Mappings - Content Database - Blocked File Extensions | +| Site Collection\*\* | - Site Collection URL - Content Database - Content Database Server - Site Storage Maximum Limit - Site Storage Warning Limit - Sandboxed Solutions Resource Maximum Quota - Sandboxed Solutions Resource Warning Quota - Quota Template - Lock Status | +| Server\*\* | - Name | +| Service\*\* | - Name - Status | +| Permission Policy Level\*\* | - Name - Grant Permissions - Deny Permissions - Site Collection Permissions | +| User Policy\*\* | - Display Name - Permissions | +| Anonymous Policy\*\* | - Zone - Permissions | +| Farm Solution\*\* | - Name - Status - Last Operation Time | +| Farm Feature\*\* | - Name - Status | + +To collect State-in-Time data from a SharePoint farm, the following is required: + +- for site collection processing – lock status must differ from _No access_ for Netwrix Auditor + service account +- for web application processing – the following permissions must be assigned to Netwrix Auditor + service account: + - Open items + - View items + - Browse directories + - View pages + - Browse user information + - Open + - Enumerate permissions + +Also, state-in-time data collection is supported for SharePoint farm. + +### Means Granted + +The Means granted column in the Account Permissions in SharePoint and SharePoint Object Permissions +State-in-Time reports list detailed permissions and permission levels by user account. + +Review the following for additional information: + +| Means granted | Description | +| -------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Permission level | Default permission levels are predefined sets of permissions that you can assign to individual users, groups of users, or security groups, based on their functional requirements and on security considerations. SharePoint Server permission levels are defined at the site collection level; by default, they are inherited from the parent object. For more information on SharePoint permissions and permission levels read the following Microsoft article: [User permissions and permission levels in SharePoint Server](https://docs.microsoft.com/en-us/sharepoint/sites/user-permissions-and-permission-levels). | +| Zone: Default (policy) Zone: Intranet (policy) Zone: Internet (policy) Zone: Custom (policy) Zone: Extranet (policy) | Zone If you want to expose the same content in a web application to different types of users by using additional URLs or authentication methods, you can extend an existing web application into a new zone. When you extend the web application into a new zone, you create a separate Internet Information Services (IIS) web site to serve the same content, but with a unique URL and authentication type. For more information on SharePoint zones read the following Microsoft article: [Extend claims-based web applications in SharePoint](https://learn.microsoft.com/en-us/sharepoint/administration/extend-a-claims-based-web-application)[ ](https://social.technet.microsoft.com/wiki/contents/articles/38031.sharepoint-2016-extend-a-web-application.aspx). Policies Web application policies represent a concept that allows SharePoint administrators to grant or deny permissions to users and groups for sites under a web application. These granted or denied permissions take preference over the permissions set for the sites in the web application. For more information on SharePoint web application policies read the following Microsoft article: [Manage permissions for a web application in SharePoint Server](https://docs.microsoft.com/en-us/sharepoint/administration/manage-permissions-for-a-web-application). | +| Site collection administrator | The _SharePoint site collection administrator_ is a permission type that overrides Full Control permission. It cannot be locked out of any subsite, list, library, item, or page on the site. The permissions inheritance for any of these elements can be broken at any time, and permissions can be changed so that even users with Full Control will have lesser permissions or even no permissions at all. In all cases the SharePoint site collection administrator will always have full access to all elements and all data. For more information, read the following Microsoft article: [Change site collection administrators in SharePoint Server](https://docs.microsoft.com/en-us/sharepoint/sites/change-site-collection-administrators). | +| Site Collection lock status | Lock statuses apply to a site collection and are used to control the actions allowed on site collection. For more information on lock statuses, read the following Microsoft article: [Manage the lock status for site collections in SharePoint Server](https://docs.microsoft.com/en-us/sharepoint/sites/manage-the-lock-status-for-site-collections). | +| Web application user permissions | Sites and site collections have a variety of permissions that can be set, such as adding or editing list items or documents. These permissions are normally given to a user by assigning a particular permission level, such as _Full Control_, _Contribute_, or _View Only_. Each individual permission can be enabled or disabled for entire web application. For more information on web application user permissions, read the following Microsoft article: [Manage permissions for a web application in SharePoint Server](https://docs.microsoft.com/en-us/sharepoint/administration/manage-permissions-for-a-web-application). | +| Farm account | Farm account is a service account used to run the Central Administration web site application pool. It has _dbo_ access to the configuration database. For more information on SharePoint service accounts, read the following Microsoft articles: - [Plan for administrative and service accounts in SharePoint Server](https://docs.microsoft.com/en-us/sharepoint/security-for-sharepoint-server/plan-for-administrative-and-service-accounts) - [Account permissions and security settings in SharePoint Servers 2016 and 2019 Public Preview](https://docs.microsoft.com/en-us/sharepoint/install/account-permissions-and-security-settings-in-sharepoint-server-2016) | +| Service account for web application pool | Service account for web application pool is used for internal purposes across a SharePoint farm, except for Central administration. For more information on application pool account, read the following Microsoft article: [Application pool account](https://docs.microsoft.com/en-us/sharepoint/install/account-permissions-and-security-settings-in-sharepoint-server-2016#application-pool-account). | diff --git a/docs/auditor/10.8/configuration/sharepoint/permissions.md b/docs/auditor/10.8/configuration/sharepoint/permissions.md new file mode 100644 index 0000000000..110ffae26a --- /dev/null +++ b/docs/auditor/10.8/configuration/sharepoint/permissions.md @@ -0,0 +1,75 @@ +--- +title: "Permissions for SharePoint Auditing" +description: "Permissions for SharePoint Auditing" +sidebar_position: 20 +--- + +# Permissions for SharePoint Auditing + +Before you start creating a monitoring plan to audit your SharePoint farm, plan for the account that +will be used for data collection – it should meet the requirements listed below. Then you will +provide this account in the monitoring plan wizard. + +Starting with version 9.96, you can use group Managed Service Accounts (gMSA) as data collecting +accounts. + +For more information on gMSA, refer to +[Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md)[Microsoft documentation](https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview). + +These group Managed Service Accounts should meet the related requirements. + +**On the target SharePoint farm:** + +1. On the SharePoint server where the Netwrix Auditor Core Service will be deployed: the account + must be a member of the local Administrators group. + To learn more about Netwrix Auditor Core Services, refer to + [Installation](/docs/auditor/10.7/install/overview.md) topic. +2. On the SQL Server hosting SharePoint database: the SharePoint_Shell_Access role. + See the Assigning 'SharePoint_Shell_Access' Role topic for additional information. +3. If you plan to collect state-in-time data from a SharePoint farm, the account should also meet + the requirements below: + - For site collection processing — lock status for this account must differ from _No access_ + - For web application processing — the following permissions must be assigned to this account: + - Open items + - View items + - Browse directories + - View pages + - Browse user information + - Open + - Enumerate permissions + +## Assigning 'SharePoint_Shell_Access' Role + +The account that runs Netwrix Auditor for SharePoint Core Service installation must be granted the +SharePoint_Shell_Access role on SharePoint SQL Server configuration database. If you select to +deploy the Netwrix Auditor for SharePoint Core Service automatically when configuring auditing in +Netwrix Auditor, the installation will be performed under the account specified for data collection. + +1. In your SharePoint server, click Start → Microsoft SharePoint Products `` SharePoint + Management Shell. +2. Execute the following command: + + ``` + Add-SPShellAdmin –UserName + ``` + +## Define Log On As a Service Policy + +On the SharePoint monitoring plan creation, the Log on as a service policy is automatically defined +for the Data Processing Account as a local security policy. However, if you have the Deny log on as +a service policy defined locally or on the domain level, the local Log on as a service policy will +be reset. In this case, redefine the Deny log on as a service policy through the Local Security +Policy console on your computer or on the domain level through the Group Policy Management console. + +Follow the steps to define log on as a service policy: + +**Step 1 –** On the computer where Auditor Server is installed, open the **Local Security Policy** +snap-in: navigate to Start > Windows Administrative Tools and select Local Security Policy. + +**Step 2 –** Navigate to **Security Settings > Local Policies > User Rights Assignment** and locate +the **Log on as a service** policy. + +**Step 3 –** Double-click the **Log on as a service** policy, and click **Add User or Group**. +Specify the account that you want to define this policy for. + +The Log On is now defined as a policy. diff --git a/docs/auditor/10.8/configuration/sharepoint/ports.md b/docs/auditor/10.8/configuration/sharepoint/ports.md new file mode 100644 index 0000000000..d844734e0e --- /dev/null +++ b/docs/auditor/10.8/configuration/sharepoint/ports.md @@ -0,0 +1,24 @@ +--- +title: "SharePoint Ports" +description: "SharePoint Ports" +sidebar_position: 10 +--- + +# SharePoint Ports + +Review a full list of protocols and ports required for Netwrix Auditor for SharePoint. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to remote ports on the source and inbound connections to local ports on + the target. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 137 UDP port. On front end server (target), allow +inbound connections to local 137 UDP port. + +| Port | Protocol | Source | Target | Purpose | +| ----------- | -------- | ---------------------- | ---------------------------------------- | ---------------------------------------------------------------- | +| 137 138 445 | UDP | Netwrix Auditor Server | Windows Server running FrontEnd Server | Network Traffic Compression Service installation | +| 139 445 | TCP | Netwrix Auditor Server | Windows Server running FrontEnd Server | Network Traffic Compression Service installation | +| Custom port | TCP | Netwrix Auditor Server | Central Administration – FrontEnd Server | HTTP/ HTTPS Used to connect to SharePoint Central Administration | diff --git a/docs/auditor/10.8/configuration/sqlserver/_category_.json b/docs/auditor/10.8/configuration/sqlserver/_category_.json new file mode 100644 index 0000000000..3c4d130775 --- /dev/null +++ b/docs/auditor/10.8/configuration/sqlserver/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "SQL Server", + "position": 110, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/sqlserver/configuringtracelogging.md b/docs/auditor/10.8/configuration/sqlserver/configuringtracelogging.md new file mode 100644 index 0000000000..151d61d5eb --- /dev/null +++ b/docs/auditor/10.8/configuration/sqlserver/configuringtracelogging.md @@ -0,0 +1,77 @@ +--- +title: "Configuring Trace Logging" +description: "Configuring Trace Logging" +sidebar_position: 30 +--- + +# Configuring Trace Logging + +If trace logging is disabled in SQL Server, then changes will be reported in Netwrix Auditor as made +by _system_. To detect actual change initiator, Netwrix Auditor needs native trace logs data. During +every data collection, Netwrix Auditor will check if the internal SQL audit mechanism is enabled, +and enable it if necessary. To read more, refer to +[this Netwrix Knowledge Base article](https://kb.netwrix.com/728). + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +In some cases, however, you may need to disable trace logging on your SQL Server instance. For that, +follow the procedure below. + +If you enable monitoring of SQL logons, SQL trace for these logons will be created anyway. + +Follow the steps to exclude SQL Server instance from turning trace logging on automatically. + +**Step 1 –** On Netwrix Auditor server, go to the _%Netwrix Auditor installation folder%\SQL Server +Auditing_ folder. + +**Step 2 –** Locate the _omittracelist.txt_ file and open it for editing. + +**Step 3 –** Specify SQL Server instances that you want to exclude from switching trace logging on +automatically. Syntax: `server\instance name` + +Each entry must be a separate line. Lines that start with the # sign are treated as comments and +will be ignored. + +With trace logging disabled, the "Who", "Workstation" and "When" values will be not reported +correctly by Netwrix Auditor (except for content changes). + +By default, SQL Server trace logs will be stored in the predefined location (depending on the SQL +Server version). For example, SQL Server 2019 error logs are located at _``:\Program +Files\Microsoft SQL Server\MSSQL13.``\MSSQL\Log_. + +You can change this default location, using the _pathstotracelogs.txt_ file. + +Follow the steps to change trace log location. + +**Step 1 –** On Netwrix Auditor server, go to _%Netwrix Auditor installation folder%\SQL Server +Auditing_ folder. + +**Step 2 –** Locate the _pathstotracelogs.txt_ file and open it for editing. + +**Step 3 –** Specify SQL Server instance that you need to audit and enter a UNC path to the folder +where you want the trace logs to be stored. Syntax: `SQLServer\Instance|UNC path` + +Each entry must be a separate line. Lines that start with the # sign are treated as comments and +will be ignored. + +**Example:** + +`SQLSRV01\MSSQL2016|C:\Logs\NA trace logs\` + +If you want to change trace logs location for multiple instances of one SQL server, make sure that +specified UNC paths are unique across these instances. + +Correct: + +`SQLSRV01\MSSQL2014|C:\Program Files\Microsoft SQL Server\MSSQL\LOG\` + +`SQLSRV01\MSSQL2019|C:\Logs\SQL trace logs\` + +Incorrect: + +`SQLSRV01\MSSQL2014|C:\Logs\SQL trace logs\` + +`SQLSRV01\MSSQL2019|C:\Logs\SQL trace logs\` diff --git a/docs/auditor/10.8/configuration/sqlserver/overview.md b/docs/auditor/10.8/configuration/sqlserver/overview.md new file mode 100644 index 0000000000..1c46bbdc2d --- /dev/null +++ b/docs/auditor/10.8/configuration/sqlserver/overview.md @@ -0,0 +1,95 @@ +--- +title: "SQL Server" +description: "SQL Server" +sidebar_position: 110 +--- + +# SQL Server + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +The IT Infrastructure for monitoring is configured automatically. Your current audit settings will +be checked on each data collection and adjusted if necessary. + +## Checking for Primary Key + +If you plan to audit an SQL Server for data changes and browse the results using '_Before_' and +'_After_' filter values, make sure that the audited SQL database tables have a primary key (or a +unique column). Otherwise, '_Before_' and '_After_' values will not be reported. + +## SQL Server Objects + +Review a full list of all object and data types Netwrix Auditor can collect on SQL Server. + +Monitored Object Types + +The table below contains the full list of object types that Netwrix Auditor monitors on SQL Servers. +The product reports on adding and removing of object types below (Application Roles, Database, Jobs, +etc.) and modifying attributes of these objects (listed in the "_Attributes_" column). + +As for logons, the product collects successful and failed logon attempts for Windows and SQL logons: + +| Logon Type | Action | +| ------------- | --------------------------------- | +| SQL logon | - Successful logon - Failed logon | +| Windows logon | - Successful logon - Failed logon | + +Review the full list of monitored object types and their attributes: + +The attributes marked with asterisk (\*) are reported only for the SQL Server item, not for +availability groups. + +| Object type | Attributes | +| ----------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| SQL Objects | | +| Application Role | - Date Created - Date Modified - Default Schema - Extended Properties - Id - Name - Owned Schemas | +| Backup | - Backup name - Description - Device name - logical_device_name - Size - Type | +| Column | - Allow nulls - ANSI Padding Status - Collation - Computed Text - Default Constraint - Full Text - ID - Identity - Identity increment - Identity seed - Is Computed - Length - Name - Not for replication - Numeric precision - Numeric scale - Primary Key - Rule - Rule Schema - System Type - XML Schema Namespace | +| Constraints | - Date Created - Date Modified - Definition - ID - Is system named - MS shipped - Name - Published - Schema published | +| Credentials\* | - Id - Identity - Date Created - Date Modified - Name | +| Database | - Compatibility - Database Size - Database Space Available - Date Created - Date Modified - Extended Properties - File Id - File Group - File Name - Growth - Id - Name - Options - Owner - Permissions - Size - Usage | +| Database Role | - Date Created - Date Modified - Extended Properties - Id - Name - Owner - Owned Schemas - Role Members | +| Functions | - Date Created - Date Modified - Id - Name - Permissions - Type | +| Jobs\* | - Automatically delete job - Category - Date Created - Date Modified - Description - Email notification - Email operator - Enabled - ID - Name - Net send notification - Net send operator - Owner - Page notification - Page operator - Schedules - Write to the Windows Application event log | +| Job Steps\* | - ID - Name - On Failure - On Success - Output file - Process exit code of a successful command - Retry attempts - Retry interval (minutes) - Step - Type | +| Jobs Schedules\* | - Date Created - Date Modified - Enabled - ID - Name - Owner - Schedule Type - Settings | +| Indexes | - Allow page locks - Name - Primary key - Ignore duplicate values - Unique constraint - Allow row locks - Type - Disabled - Included Columns - Fill factor - Data Space ID - Index Key Columns - Padded - Hypothetical - Unique | +| Keys | - Name - ID - Date Created - Date Modified - MS shipped - Published - Schema published - Disabled - Not for replication - Not trusted - Delete referential action - Update referential action - Is system named | +| Login\* | - Date Created - Date Modified - Default Database - Default Language - Disabled - Enforce Password Expiration - Enforce Password Policy - Id - Name - Password Hash - Server Roles | +| Restore | - Type | +| Schema | - Date Created - Date Modified - Extended Properties - Id - Name - Owner - Permissions | +| Server Instance\* | - Ad Hoc Distributed Queries - Affinity I/O Mask - Affinity Mask - Agent XPs - Allow Updates - Awe Enabled - Blocked Process Threshold - C2 Audit Mode - Clr Enabled - Collation - Cost Threshold For Parallelism - Cross Db Ownership Chaining - Cursor Threshold - Database Mail XPs - Date Modified - Default Full-text Language - Default Language - Default Trace Enabled - Disallow Results From Triggers - Fill Factor (%) - Ft Crawl Bandwidth (max) - Ft Crawl Bandwidth (min) - Ft Notify Bandwidth (max) - Ft Notify Bandwidth (min) - Id - In-doubt Xact Resolution - Index Create Memory (K) - Lightweight Pooling - Locks - Max Degree Of Parallelism - Max Full-text Crawl Range - Max Server Memory (M) - Max Text Repl Size (B) - Max Worker Threads - Media Retention - Min Memory Per Query (K) - Min Server Memory (M) - Name - Nested Triggers - Network Packet Size (B) - Ole Automation Procedures - Open Objects - Permissions - PH Timeout (s) - Precompute Rank - Priority Boost - Query Wait (s) - Query Governor Cost Limit - Recovery Interval (min) - Remote Admin Connections - Remote Login Timeout (s) - Remote Proc Trans - Remote Query Timeout (s) - Remote Access - Replication XPs - Scan For Startup Procs - Server Trigger Recursion - Set Working Set Size - Show Advanced Options - SMO And DMO XPs - SQL Mail XPs - Status - Transform Noise Words - Two Digit Year Cutoff - User Connections - User Instances Enabled - User Instance Timeout - User Options - Web Assistant Procedures - Xp_cmdshell | +| Server Role\* | - Date Created - Date Modified - Id - Name - Role Members | +| Stored Procedure | - ANSI NULLs - Date Created - Date Modified - Encrypted - Execute as - FOR replication - Id - Name - Permissions - Quoted Identifier - Recompile - Schema | +| Table | - ANSI NULLs - Date Created - Date Modified - Filegroup - Id - Name - Partition scheme - Permissions - Schema - Table is partitioned - Table is replicated - Text filegroup | +| Triggers | Only DML table triggers are supported. - Date Created - Date Modified - Disabled - ID - Instead of trigger - MS shipped - Name - Not for replication | +| User | - Date Created - Date Modified - Default Schema - Extended Properties - Id - Name - Owned Schemas - Roles | +| View | - ANSI NULLs - Date Created - Date Modified - Encrypted - Id - Name - Permissions - Quoted Identifier - Schema - Schema bound | +| View Column | - Allow nulls - ANSI Padding Status - Collation - Computed Text - Default Constraint - Full Text - ID - Identity - Identity increment - Identity seed - Is Computed - Length - Name - Not for replication - Numeric precision - Numeric scale - Rule - Rule Schema - System Type - XML Schema Namespace - XML Schema Namespace schema | +| View Index | - Allow Page Locks - Allow Row Locks - ID - Data Space ID - Disabled - Fill Factor - Hypothetical - Ignore Dup Key - Name - Padindex - Primary Key - Schema Name - Type - Unique - Unique Constraint - View Name | +| View Index Column | - Column ID - ID - Included Column - Index ID - Key Ordinal - Name - Partition Ordinal - Schema Name - Sort Order - View Name | + +Monitored Data Types + +The following list contains the names of all data types monitored by Netwrix Auditor: + +| | | | +| --------------------------------------------------------------------- | --------------------------------------------------------------------- | ----------------------------------------------------------------------------- | +| bigint bit char cursor date datetime2 datetime datetimeoffset decimal | hierarchyid int float money nchar nvarchar numeric real smalldatetime | smallint smallmoney table time timestamp tinyint uniqueidentifier varchar xml | + +## Next Steps + +Also remember to do the following: + +- Configure Data Collecting Account as described in + [Permissions for SQL Server Auditing ](/docs/auditor/10.7/configuration/sqlserver/permissions.md)section. +- Configure ports as described in the [SQL Server Ports](/docs/auditor/10.7/configuration/sqlserver/ports.md) section. diff --git a/docs/auditor/10.8/configuration/sqlserver/permissions.md b/docs/auditor/10.8/configuration/sqlserver/permissions.md new file mode 100644 index 0000000000..30f198da99 --- /dev/null +++ b/docs/auditor/10.8/configuration/sqlserver/permissions.md @@ -0,0 +1,43 @@ +--- +title: "Permissions for SQL Server Auditing" +description: "Permissions for SQL Server Auditing" +sidebar_position: 20 +--- + +# Permissions for SQL Server Auditing + +Before you start creating a monitoring plan to audit your SQL Server, plan for the account that will +be used for data collection – it should meet the requirements listed below. Then you will provide +this account in the monitoring plan wizard. + +You can use group Managed Service Accounts (gMSA) as data collecting accounts. + +**On the target SQL Server:** + +1. To access SQL Server, Windows authentication will be used, so data collection account should be a + Windows account specified in the _domain\user_ format (_domain\user$_ for Managed Service + Account). + SQL Server logins and authentication method are not supported. +2. The account must be assigned the **System Administrator** server role for this SQL Server. See + Assigning 'System Administrator' Role section for more information. +3. For auditing SQL Server availability on groups, the account must have the sysadmin server role + granted on each server added to an availability group. +4. If you plan to collect state-in-time data from SQL Server, in addition to requirements above the + account will also need: + - Local **Administrator** rights on the target SQL Server. + - If SQL Server is included in the Active Directory domain, the account should also be included + in that domain. + +## Assigning 'System Administrator' Role + +1. On the computer where audited SQL Server instance is installed, navigate to **Start → All + Programs → Microsoft SQL Server → SQL Server Management Studio**. +2. Connect to the SQL Server instance. +3. In the left pane, expand the **Security** node. Right-click the **Logins** node and select **New + Login** from the pop-up menu. + + ![manualconfig_ssms_newlogin2016](/images/1secure/configuration/sqlserver/manualconfig_ssms_newlogin2016.webp) + +4. Click **Search** next to **Login Name** and specify the user that you want to assign the + **sysadmin** role to. +5. Specify the **Server roles** tab and assign the **sysadmin** role to the new login. diff --git a/docs/auditor/10.8/configuration/sqlserver/ports.md b/docs/auditor/10.8/configuration/sqlserver/ports.md new file mode 100644 index 0000000000..87f50fa1be --- /dev/null +++ b/docs/auditor/10.8/configuration/sqlserver/ports.md @@ -0,0 +1,24 @@ +--- +title: "SQL Server Ports" +description: "SQL Server Ports" +sidebar_position: 10 +--- + +# SQL Server Ports + +Review a full list of protocols and ports required for Netwrix Auditor for SQL Server. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to remote ports on the source and inbound connections to local ports on + the target. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 1433 TCP port. On the computer hosting default SQL +Server instance (target), allow inbound connections to local 1433 TCP port. + +| Port | Protocol | Source | Target | Purpose | +| -------------------- | -------- | ---------------------- | --------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------- | +| 1433 | TCP | Netwrix Auditor Server | Default SQL Server Instance | Connection to the default named instance server. Port 1433 is the default connections port, however, you can configure another TCP port. | +| 1434 | UDP | Netwrix Auditor Server | SQL Server Browser Service | Service which helps resolving named instance servers | +| Dynamic: 1024 -65535 | TCP | Netwrix Auditor Server | Named SQL Server Instance | Connection to the named instance servers | diff --git a/docs/auditor/10.8/configuration/useractivity/_category_.json b/docs/auditor/10.8/configuration/useractivity/_category_.json new file mode 100644 index 0000000000..3b495fc19d --- /dev/null +++ b/docs/auditor/10.8/configuration/useractivity/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "User Activity", + "position": 120, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/useractivity/datacollection.md b/docs/auditor/10.8/configuration/useractivity/datacollection.md new file mode 100644 index 0000000000..6a84706e37 --- /dev/null +++ b/docs/auditor/10.8/configuration/useractivity/datacollection.md @@ -0,0 +1,144 @@ +--- +title: "Configure Data Collection Settings" +description: "Configure Data Collection Settings" +sidebar_position: 20 +--- + +# Configure Data Collection Settings + +To successfully track user activity, make sure that the following settings are configured on the +audited computers and on the computer where Netwrix Auditor Server is installed: + +- The **Windows Management Instrumentation** and the **Remote Registry** services are running and + their **Startup Type** is set to _"Automatic"_. See the Check the Windows Services Status topic + for additional information. +- The **File and Printer Sharing** and the **Windows Management Instrumentation** features are + allowed to communicate through Windows Firewall. See the Windows Features Communication topic for + additional information. +- Local TCP Port 9004 is opened for inbound connections on the computer where Netwrix Auditor Server + is installed. This is done automatically on the product installation. See the Open Local TCP Port + 9004 topic for additional information. +- Local TCP Port 9003 is opened for inbound connections on the audited computers. See the Open Local + TCP Port 9003 topic for additional information. +- Remote TCP Port 9004 is opened for outbound connections on the audited computers. See the Open + Remote TCP Port 9004 topic for additional information. + +## Check the Windows Services Status + +Follow the steps to check the status and startup type of Windows services. + +**Step 1 –** Navigate to Start > Windows Administrative Tools > Services. + +**Step 2 –** In the **Services** snap-in, locate the **Remote Registry** service and make sure that +its status is _"Started"_ (on pre-Windows Server 2012 versions) and _"Running"_ (on Windows Server +2012 and above). If it is not, right-click the service and select Start from the pop-up menu. + +**Step 3 –** Check that the **Startup Type** is set to _"Automatic"_. If it is not, double-click the +service. In the **Remote Registry Properties** dialog, in the **General** tab, select _"Automatic"_ +from the drop-down list. + +**Step 4 –** Perform the steps above for the **Windows Management Instrumentation** service. + +## Windows Features Communication + +Follow the steps to allow Windows features to communicate through Firewall. + +**Step 1 –** Navigate to **Start → Control Panel** and select **Windows Firewall.** + +**Step 2 –** In the **Help Protect your computer with Windows Firewall** page, click **Allow a +program or feature through Windows Firewall** on the left. + +**Step 3 –** In the Allow an app or feature through Windows Firewall page that opens, locate the +**File and Printer Sharing** feature and make sure that the corresponding checkbox is selected under +Domain. + +**Step 4 –** Repeat step 3 for the **Windows Management Instrumentation (WMI)** feature. + +## Open Local TCP Port 9004 + +Follow the steps to open Local TCP Port 9004 for inbound connections. + +**Step 1 –** On the computer where Netwrix Auditor is installed, navigate to **Start → Control +Panel** and select **Windows Firewall.** + +**Step 2 –** In the **Help Protect your computer with Windows Firewall** page, click **Advanced +settings** on the left. + +**Step 3 –** In the Windows Firewall with Advanced Security dialog, select Inbound Rules on the +left. + +**Step 4 –** Click New Rule. In the New Inbound Rule wizard, complete the steps as described below: + +- On the Rule Type step, select Program. +- On the Program step, specify the path: %Netwrix Auditor installation folder%/Netwrix Auditor/User + Activity Video Recording/UAVRServer.exe. +- On the Action step, select the Allow the connection action. +- On the Profile step, make sure that the rule applies to Domain. +- On the Name step, specify the rule's name, for example UA Server inbound rule. + +**Step 5 –** Double-click the newly created rule and open the Protocols and Ports tab. + +**Step 6 –** In the Protocols and Ports tab, complete the steps as described below: + +- Set Protocol type to _"TCP"_. +- Set Local port to _"Specific Ports"_ and specify to _"9004"_. + +## Open Local TCP Port 9003 + +Follow the steps to open Local TCP Port 9003 for inbound connections. + +**Step 1 –** On a target computer navigate to **Start → Control Panel** and select **Windows +Firewall.** + +**Step 2 –** In the **Help Protect your computer with Windows Firewall** page, click **Advanced +settings** on the left. + +**Step 3 –** In the Windows Firewall with Advanced Security dialog, select Inbound Rules on the +left. + +**Step 4 –** Click New Rule. In the New Inbound Rule wizard, complete the steps as described below. + +| Option | Setting | +| --------- | ---------------------------------------------------------------------------------------------------------------------------------- | +| Rule Type | Program | +| Program | Specify the path to the Core Service. By default, _%ProgramFiles% (x86)\Netwrix Auditor\User Activity Core Service\UAVRAgent.exe_. | +| Action | Allow the connection | +| Profile | Applies to Domain | +| Name | Rule name, for example UA Core Service inbound rule. | + +**Step 5 –** Double-click the newly created rule and open the Protocols and Ports tab. + +**Step 6 –** In the Protocols and Ports tab, complete the steps as described below: + +- Set Protocol type to _"TCP"_. +- Set Local port to _"Specific Ports"_ and specify to _"9003"_. + +## Open Remote TCP Port 9004 + +Follow the steps to open Remote TCP Port 9004 for outbound connections. + +**Step 1 –** On a target computer, navigate to **Start → Control Panel** and select **Windows +Firewall.** + +**Step 2 –** In the **Help Protect your computer with Windows Firewall** page, click **Advanced +settings** on the left. + +**Step 3 –** In the Windows Firewall with Advanced Security dialog, select Outbound Rules on the +left. + +**Step 4 –** Click New Rule. In the New Outbound Rule wizard, complete the steps as described below. + +| Option | Setting | +| --------- | ---------------------------------------------------------------------------------------------------------------------------------- | +| Rule Type | Program | +| Program | Specify the path to the Core Service. By default, _%ProgramFiles% (x86)\Netwrix Auditor\User Activity Core Service\UAVRAgent.exe_. | +| Action | Allow the connection | +| Profile | Applies to Domain | +| Name | Rule name, for example UA Core Service outbound rule. | + +**Step 5 –** Double-click the newly created rule and open the Protocols and Ports tab. + +**Step 6 –** In the Protocols and Ports tab, complete the steps as described below: + +- Set Protocol type to _"TCP"_. +- Set Remote port to _"Specific Ports"_ and specify to _"9004"_. diff --git a/docs/auditor/10.8/configuration/useractivity/overview.md b/docs/auditor/10.8/configuration/useractivity/overview.md new file mode 100644 index 0000000000..c4d8dea65f --- /dev/null +++ b/docs/auditor/10.8/configuration/useractivity/overview.md @@ -0,0 +1,113 @@ +--- +title: "User Activity" +description: "User Activity" +sidebar_position: 120 +--- + +# User Activity + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can use group Managed Service Accounts (gMSA) as data collecting accounts. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - On the audited system(s): + + - The **Windows Management Instrumentation** and the **Remote Registry** services must be + running and their **Startup Type** must be set to "Automatic". + - The **File and Printer Sharing** and the **Windows Management Instrumentation** features + must be allowed to communicate through the Windows Firewall. + - Local TCP Port 9003 must be opened for inbound connections. + - Remote TCP Port 9004 must be opened for outbound connections. + - The User Activity Core Service is installed on the monitored computers. See the Install + Netwrix Auditor Agent to Audit User Activity topic for additional information. + - .NET 4.8 must be installed. + + - On the Netwrix Auditor host system/server: + + - The **Windows Management Instrumentation** and the **Remote Registry** services must be + running and their **Startup Type** must be set to "Automatic". + - The **File and Printer Sharing** and the **Windows Management Instrumentation** features + must be allowed to communicate through Windows Firewall. + - Local TCP Port 9004 must be opened for inbound connections. + - .NET 4.8 must be installed. + +See the following topics for additional information: + +- [Configure Data Collection Settings](/docs/auditor/10.7/configuration/useractivity/datacollection.md) +- [Configure Video Recordings Playback Settings](/docs/auditor/10.7/configuration/useractivity/videorecordings.md) + +## User Sessions + +Review a full list of all session actions when auditing user sessions with Netwrix Auditor. + +| Object type | Action | What | Description | +| --------------------------- | -------------------------------- | ----------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------- | +| User session | Session start | Monitoring start | - Logon (session creation) - Start of monitoring (after service install or deploy) | +| Session start | Local session start | — | | +| Session end | Sign-out | - User initiated sign-out / logoff | | +| Session end | Shutdown | - Computer shutdown - Service stop / crash (appears after one starts service again) | | +| Session start / Session end | Screensaver off / Screensaver on | — | | +| Session start / Session end | Unlock / Lock | — | | +| Session start | Console connection | - Connect locally to existing session | | +| Session end | Console disconnection | - Switch user - Remote connect to existing session | | +| Session start | Remote connection | - Connect through RDP | | +| Session end | Remote disconnection | - Disconnect in RDP or just close RDP session | | + +### Run As Monitoring + +Netwrix Auditor for User Activity can monitor programs executed under different user accounts. +Review the table below to discover how different "run as" scenarios are reflected in the product. + +| Object type | Details | Description | +| --------------- | ------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------- | +| Window | None | User runs the application. | +| Window | Application Run As: `` | Standard user runs an application under credentials of another standard user. | +| Elevated Window | Application Run As: `` | User runs program through Run As Administrator or Accepts UAC (User Account Control) elevation prompts. | +| Elevated Window | None | Administrator needs to run the program with Run as Administrator enabled. Server Manager is one of the main examples for this case. | + +## Install Netwrix Auditor Agent to Audit User Activity + +By default, the agent is installed automatically on the audited computers upon the **New Managed +Object** wizard completion. If, for some reason, installation has failed, you must install the agent +manually on each of the audited computers. + +Before installing Netwrix Auditor agent to audit user activity, make sure that: + +- The audit settings are configured properly. +- The Data Processing Account has access to the administrative shares. + +Follow the steps to install Netwrix Auditor agent to audit user activity. + +**Step 1 –** Navigate to _%Netwrix Auditor Installation Folder%\User Activity Video Recording_ and +copy the UACoreSvcSetup.msi file to the audited computer. + +**NOTE:** This is the default location. However, it may be changed because users can move this +folder. + +**Step 2 –** Run the installation package. + +**Step 3 –** Follow the instructions of the setup wizard. When prompted, accept the license +agreement and specify the installation folder. + +**Step 4 –** On the Agent Settings page, specify the host server (i.e., the name of the computer +where Netwrix Auditor is installed) and the server TCP port. + +Netwrix Auditor agent is installed and ready to audit user activity. diff --git a/docs/auditor/10.8/configuration/useractivity/ports.md b/docs/auditor/10.8/configuration/useractivity/ports.md new file mode 100644 index 0000000000..8834d40722 --- /dev/null +++ b/docs/auditor/10.8/configuration/useractivity/ports.md @@ -0,0 +1,29 @@ +--- +title: "User Activity Ports" +description: "User Activity Ports" +sidebar_position: 10 +--- + +# User Activity Ports + +Review a full list of protocols and ports required for monitoring User Activity. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to remote ports on the source and inbound connections to local ports on + the target. + +Tip for reading the table: For example, on any monitored computer (source), allow outbound +connections to remote 9004 TCP port. On the computer where Netwrix Auditor Server resides (target), +allow inbound connections to local 9004 TCP port. + +| Port | Protocol | Source | Target | Purpose | +| -------------------- | -------- | ---------------------- | ---------------------- | ---------------------------------------------------------------------------------------------- | +| 9004 | TCP | Monitored computer | Netwrix Auditor Server | Network Traffic Compression Service communications | +| 9003 | TCP | Netwrix Auditor Server | Monitored computer | Network Traffic Compression Service communications | +| 139 445 | TCP | Netwrix Auditor Server | Monitored computer | Service Control Manager Remote Protocol (RPC) Remote registry | +| Dynamic: 1024 -65535 | TCP | Netwrix Auditor Server | Monitored computer | Windows Management Instrumentation | +| 135 | TCP | Netwrix Auditor Server | Monitored computer | Service Control Manager Remote Protocol (RPC) Network Traffic Compression Service installation | +| 137 through 139 | UDP | Netwrix Auditor Server | Monitored computer | Service Control Manager Remote Protocol (RPC) Network Traffic Compression Service installation | +| 445 | TCP | Netwrix Auditor Server | Monitored computer | SMB 2.0/3.0 Video files copy | +| – | ICMP | Netwrix Auditor Server | Monitored computer | Network Traffic Compression Service communications | diff --git a/docs/auditor/10.8/configuration/useractivity/videorecordings.md b/docs/auditor/10.8/configuration/useractivity/videorecordings.md new file mode 100644 index 0000000000..7d513caae3 --- /dev/null +++ b/docs/auditor/10.8/configuration/useractivity/videorecordings.md @@ -0,0 +1,125 @@ +--- +title: "Configure Video Recordings Playback Settings" +description: "Configure Video Recordings Playback Settings" +sidebar_position: 30 +--- + +# Configure Video Recordings Playback Settings + +Video recordings of users' activity can be watched in any Netwrix Auditor client. Also, recordings +are available as links in web-based reports and email-based Activity Summaries. + +You can use group Managed Service Accounts (gMSA) as data collecting accounts. + +To be able to watch video files captured by Netwrix Auditor via console, the following settings must +be configured: + +- The user must have read permissions (resultant set) to the **Netwrix_UAVR$** shared folder where + video files are stored. By default, all members of the **Netwrix Auditor Client Users** group can + access this shared folder. Both the group and the folder are created automatically by Netwrix + Auditor. Make sure to grant sufficient permissions on folder or explicitly add user to the group + (regardless his or her role delegated in the product). See the To Add an Account to Netwrix + Auditor Client Users Group topic for additional information. +- A dedicated codec must be installed. This codec is installed automatically on the computer where + Netwrix Auditor is deployed, and on the monitored computers. To install it on a different + computer, download it from + [https://www.netwrix.com/download/ScreenPressorNetwrix.zip](https://www.netwrix.com/download/ScreenPressorNetwrix.zip). +- The Ink and Handwriting Services, Media Foundation, and Desktop Experience Windows features must + be installed on the computer where Netwrix Auditor Server is deployed. These features allow + enabling Windows Media Player and sharing video recordings via DLNA. See the To Enable Windows + Features topic for additional information. + +To be able to watch video files captured by Netwrix Auditor via direct links, the following settings +must be configured: + +- Microsoft Internet Explorer 7.0 and above must be installed and ActiveX must be enabled. +- Internet Explorer security settings must be configured properly. See the To Configure Internet + Explorer Security Settings topic for additional information. +- JavaScript must be enabled. See the To Enable JavaScript topic for additional information. +- Internet Explorer Enhanced Security Configuration (IE ESC) must be disabled. See the To Disable + Internet Explorer Enhanced Security Configuration (IE ESC) topic for additional information. + +All Internet Explorer-related settings are relevant only for those who watch videos not in Netwrix +Auditor console. + +**NOTE:** Microsoft is in the process of deprecating Internet Explorer. However, if you are trying +to access the video recordings from browser via direct links (reports on SSRS portal, subscriptions, +activity summaries, search export results), IE engine should be present on the client machine. IE +might be disabled with GPO, but it should not be removed completely. Recommended option is to use +Edge with "IE mode" option enabled. + +## To Configure Internet Explorer Security Settings + +Follow the steps to configure Internet Explorer security settings. + +**Step 1 –** In Internet Explorer, navigate to **Tools** > **Internet Options**. + +**Step 2 –** Switch to the Security tab and select **Local Intranet**. Click **Custom Level**. + +**Step 3 –** In the Security Settings - Local Intranet Zone dialog, scroll down to **Downloads** and +verify that **File download** is set to **Enable**. + +**Step 4 –** In the Internet Options dialog, switch to the **Advanced** tab. + +**Step 5 –** Local Security and select the **Allow active content to run in files on My Computer** +checkbox. + +![manualconfig_uavr_ie2016](/images/auditor/10.7/configuration/useractivity/manualconfig_uavr_ie2016.webp) + +## To Enable JavaScript + +Follow the steps to enable JavaScript. + +**Step 1 –** In Internet Explorer, navigate to **Tools** > **Internet Options**. + +**Step 2 –** Switch to the Security tab and select **Internet**. Click **Custom Level**. + +**Step 3 –** In the Security Settings - Internet Zone dialog, scroll down to **Scripting** and +verify that **Active scripting** is set to **Enable**. + +## To Disable Internet Explorer Enhanced Security Configuration (IE ESC) + +Follow the steps to disable Internet Explorer enhanced security configuration. + +**Step 1 –** Navigate to Start > Windows Administrative Tools > **Server Manager**. + +**Step 2 –** In the Security Information section, click Configure IE ESC link on the right to +disable it. + +## To Add an Account to Netwrix Auditor Client Users Group + +All members of the Netwrix Auditor Client Users group are granted the Global reviewer role in +Netwrix Auditor and have access to all collected data. + +Follow the steps to add an account to the Netwrix Auditor Client Users group. + +**Step 1 –** On the computer where Netwrix Auditor Server is installed, start the Local Users and +Computers snap-in. + +**Step 2 –** Navigate to the Groups node and locate the Netwrix Auditor Client Users group. + +**Step 3 –** In the Netwrix Auditor Client Users Properties dialog, click **Add**. + +**Step 4 –** Specify the users you want to be included in this group. + +## To Enable Windows Features + +Follow the steps if Netwrix Auditor Server is installed on the Windows Server 2012 and later. + +**Step 1 –** Navigate to **Start** > **Server Manager**. + +**Step 2 –** In the Server Manager window, click **Add roles and features**. + +**Step 3 –** On the Select Features step, select one of the following Windows features and the +follow the installation prompts: + +- Ink and Handwriting Services +- Media Foundation +- User Interface and Infrastructure > Desktop Experience + +**NOTE:** If you have Windows corruption errors when installing Windows Media Foundation, run the +Deployment Image Servicing and Management (DISM) tool from the command prompt with administrative +rights. For detailed information, refer to the Microsoft article: +[Fix Windows corruption errors by using the DISM or System Update Readiness tool.](https://support.microsoft.com/en-us/kb/947821) + +**Step 4 –** Restart your computer to complete features installation. diff --git a/docs/auditor/10.8/configuration/vmware/_category_.json b/docs/auditor/10.8/configuration/vmware/_category_.json new file mode 100644 index 0000000000..268b10537b --- /dev/null +++ b/docs/auditor/10.8/configuration/vmware/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "VMware", + "position": 130, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/vmware/overview.md b/docs/auditor/10.8/configuration/vmware/overview.md new file mode 100644 index 0000000000..30cb79f98c --- /dev/null +++ b/docs/auditor/10.8/configuration/vmware/overview.md @@ -0,0 +1,81 @@ +--- +title: "VMware" +description: "VMware" +sidebar_position: 130 +--- + +# VMware + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring automatically through a monitoring plan. No +manual configurations are required. + +Review a full list of object types and attributes Netwrix Auditor can collect on VMware server +(standalone host or vCenter server). + +| Object type | Attributes | +| ---------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Virtual Machine | - Annotation - Check and upgrade Tools - Connect at power on - Connected - Current Snapshot - Disable Acceleration - Enable Logging - Force BIOS Setup - Guest OS - Guest OS Version - Guest Power Management - Guest State - Hardware Page Table Virtualization - Hyper-threaded Core Sharing - Memory Size (M) - Notes - Number of virtual processors - Operation mode of guest OS - Power Off Type - Power On - Power State - Power-on Boot Delay - Record Debugging Information - Reset Type - Resource Pool - Run VMware Tools Scripts After Powering On - Run VMware Tools Scripts After Resuming - Run VMware Tools Scripts Before Powering Off - Run VMware Tools Scripts Before Suspending - Snapshot Description - Snapshot Name - Suspend Type - Synchronize guest time with host - Swap file Location - Template - Virtual Machine Name - VirtualCdrom Device Type - VirtualCdrom Mode - VirtualDisk Capacity(K) - VirtualDisk Datastore - VirtualDisk Disk Mode - VirtualDisk Share Level - VirtualDisk Unit Number - VirtualFloppy Device Type - VirtualParallelPort Connection - VirtualPCNet32 MAC Address Type - VirtualPCNet32 MAC Address - VirtualPCNet32 Wake on LAN - VirtualSerialPort Connection - VirtualSerialPort Far End - VirtualSerialPort Near End - VirtualSerialPort Yield CPU on poll - VirtualSCSIController Controller Type - VirtualSCSIController Bus Sharing - VirtualSCSIController Bus Number | +| Authorization Manager | - Authorization Manager Name - Privilege | +| Cluster Resource | - Available CPU - Available Hosts - Available Memory - Name - Swap Policy for Virtual Machines - VMware DRS - VMware DRS Automation Level - VMware DRS Migration threshold - VMware DRS Power Management - VMware DRS 'Keep Virtual Machines Together' Rule Name - VMware DRS 'Keep Virtual Machines Together' Rule Enabled - VMware DRS 'Keep Virtual Machines Together' Rule Status - VMware DRS 'Keep Virtual Machines Together' Rule Virtual Machine - VMware DRS 'Separate Virtual Machines' Rule Name - VMware DRS 'Separate Virtual Machines' Rule Enabled - VMware DRS 'Separate Virtual Machines' Rule Status - VMware DRS 'Separate Virtual Machines' Rule Virtual Machine - VMware DRS Virtual Machine Automation Mode - VMware HA - VMware HA Admission Control - VMware HA Isolation Response - VMware HA Restart Priority - VMware HA Number of host failures allowed - VMware HA Advanced Option - VMware HA Isolation Response - VMware HA Restart Priority | +| Computer Resource | - Name | +| Datacenter | - Name | +| Data Store | - Accessible - Name | +| Distributed Port Group | - Name - Distributed Virtual Switch - Ports Number - Uplink | +| Distributed Switch | - Name - Port Group - Uplink Port | +| Folder | - Folder Name | +| Host System | - Configuration Status - CPU Expandable Reservation - CPU Limit - CPU Reservation - CPU Shares Level - CPU Shares - Datastore accessible to Host - Memory Expandable Reservation - Memory Limit - Memory Reservation - Memory Shares Level - Memory Shares - NTP required - NTP uninstallable - NTP running - NTP policy - NTP Servers - Overall Status - Port Group Allow Promiscuous - Port Group MAC Address Changes - Port Group Forged Transmits - Port Group VLAN ID - Port Group Attached uplink adapter - Service Console IP Address of port - Virtual Switch Allow Promiscuous - Virtual Switch MAC Address Changes - Virtual Switch Forged Transmits - Virtual Switch Number of Ports - Virtual Switch Attached uplink adapter - VMkernel IP Address of port | +| Resource Pool | - Name | +| VirtualApp | - Name - Child - Parent Folder | + +## Users and groups + +Starting with the version 10.5, Netwrix Auditor for VMware collects data on VMware users and groups. + +To audit users and groups, vCenter 6.5 and above required. + +The following objects are monitored: + +- vCenter Single Sign-On (SSO) Users. The product collects data from vCenter. +- Localos users. For these users, the product collects data from ESXi and vCenter. + + the Who value is reported as _“Not Applicable”_ for the localos users if the data was collected + from the entire vCenter. + +- VMware groups. The product collects data from vCenter. + +| Object type | Actions | Attributes | +| ------------ | ---------------------------- | ------------------------------------------------- | +| SSO User | - Added - Modified - Removed | - Description - Email - FullName - Disabled | +| Localos user | - Added - Modified - Removed | - Disabled - FullName - Locked - Member Of - Name | +| Group | - Added - Modified - Removed | - Member - Description | + +Netwrix Auditor may report on several changes with _who_ reported as _system_ due to the native +VMware audit peculiarities + +## Considerations and Limitations + +The following considerations refer to VMware infrastructure monitoring with Netwrix Auditor: + +- A VM that was moved from one resource pool to another (within the same VMware host) will be + reported as _Modified_. +- If an ESXi host was specified as a monitored item in the corresponding monitoring plan, but a + virtual machine was created using the vCenter Server (not this ESXi host) management facilities, + information about this VM creation will not be collected. To work around, specify the vCenter + Server as a monitored item in the monitoring plan. +- For ESXi host permission changes, the "What" field in the Activity Records (and, therefore, + reports and search results) will report _\root_. +- Netwrix Auditor will not collect data on _Failed Logon_ event in case of incorrect logon attempt + through VMware vCenter Single Sign-On. +- Also, data on the logon attempts performed using SSH will not be collected. +- For custom role creation event, initiator will be reported as _System_. diff --git a/docs/auditor/10.8/configuration/vmware/permissions.md b/docs/auditor/10.8/configuration/vmware/permissions.md new file mode 100644 index 0000000000..108a297299 --- /dev/null +++ b/docs/auditor/10.8/configuration/vmware/permissions.md @@ -0,0 +1,31 @@ +--- +title: "Permissions for VMware Server Auditing" +description: "Permissions for VMware Server Auditing" +sidebar_position: 20 +--- + +# Permissions for VMware Server Auditing + +Before you start creating a monitoring plan to audit your VMware hosts, plan for the account that +will be used for data collection – it should meet the requirements listed below. Contact your +virtual infrastructure administrator if necessary. + +**On the target VMware hosts:** + +- To collect state-in-time data, and auditing SSO users, local users, and groups, the account must + be included in the **Administrators** group for the vCenter SSO domain. (If you have assigned the + **Read-only** role to that account, it should be removed.) +- To collect activity data, the account must have at least Read-only role on the audited hosts. + +See the following VMware article for additional information: +[Add Members to a vCenter Single Sign-On Group](https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.authentication.doc/GUID-CDEA6F32-7581-4615-8572-E0B44C11D80D.html). + +Then you will provide this account in the monitoring plan wizard — it will be used as default +account to process all items (VMware servers) included in the monitoring plan. However, if you want +to use specific settings for each of your VMware servers, you can provide custom account when +configuring a corresponding monitored item. + +See also: + +- [Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) step of the monitoring plan + wizard diff --git a/docs/auditor/10.8/configuration/vmware/ports.md b/docs/auditor/10.8/configuration/vmware/ports.md new file mode 100644 index 0000000000..de15f88683 --- /dev/null +++ b/docs/auditor/10.8/configuration/vmware/ports.md @@ -0,0 +1,22 @@ +--- +title: "VMware Ports" +description: "VMware Ports" +sidebar_position: 10 +--- + +# VMware Ports + +Review a full list of protocols and ports required for Netwrix Auditor for VMware. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to remote ports on the source and inbound connections to local ports on + the target. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 443 TCP port. On the VMware server (target), allow +inbound connections to local 443 TCP port. + +| Port | Protocol | Source | Target | Purpose | +| ---- | -------- | ---------------------- | ------ | ------------------------------------------ | +| 443 | TCP | Netwrix Auditor Server | VMware | HTTPS Connection to VMware VSphere via SDK | diff --git a/docs/auditor/10.8/configuration/windowsserver/_category_.json b/docs/auditor/10.8/configuration/windowsserver/_category_.json new file mode 100644 index 0000000000..fb2847c60e --- /dev/null +++ b/docs/auditor/10.8/configuration/windowsserver/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Windows Server", + "position": 140, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/configuration/windowsserver/advancedpolicy.md b/docs/auditor/10.8/configuration/windowsserver/advancedpolicy.md new file mode 100644 index 0000000000..7bdc69641f --- /dev/null +++ b/docs/auditor/10.8/configuration/windowsserver/advancedpolicy.md @@ -0,0 +1,103 @@ +--- +title: "Configure Advanced Audit Policies" +description: "Configure Advanced Audit Policies" +sidebar_position: 50 +--- + +# Configure Advanced Audit Policies + +Advanced audit policies can be configured instead of local policies. Any of them are required if you +want to get the "Who" and "When" values for the changes to the following monitored system +components: + +- Audit policies +- File shares +- Hardware and system drivers +- General computer settings +- Local users and groups +- Services +- Scheduled tasks +- Windows registry +- Removable storage media + +## Configure Security Options + +Setting up both basic and advanced audit policies may lead to incorrect audit reporting. To force +basic audit policies to be ignored and prevent conflicts, enable the _Audit: Force audit policy +subcategory settings_ policy. + +Follow the steps to enforce advanced policies. + +**Step 1 –** On the audited server, open the Local Security Policy snap-in and navigate to Start > +Windows Administrative Tools > Local Security Policy. + +**Step 2 –** Navigate to Security Settings > Local Policies > Security Options and locate the Audit: +Force audit policy subcategory settings policy. + +![Local Security Policy snap-in ](/images/1secure/configuration/computer/manualconfig_fileserver_graudit_secpol2016.webp) + +**Step 3 –** Double-click the policy and enable it. + +## Configure Advanced Audit Policy on Windows Server 2016 + +In Windows Server 2016 audit policies are not integrated with the Group Policies and can only be +deployed using logon scripts generated with the native Windows **auditpol.exe** command line tool. +Therefore, these settings are not permanent and will be lost after server reboot. + +The procedure below explains how to configure Advanced audit policy for a single server. If you +audit multiple servers, you may want to create logon scripts and distribute them to all target +machines via Group Policy. Refer to the +[Create System Startup / Shutdown and User Logon / Logoff Scripts](https://technet.microsoft.com/en-us/library/dd630947.aspx) +Microsoft article for more information. + +**Step 1 –** On an audited server, navigate to Start > Run and type "cmd". + +**Step 2 –** Disable the Object Access, Account Management, and Policy Change categories by +executing the following command in the command line interface: + +``` +auditpol /set /category:"Object Access" /success:disable /failure:disable +auditpol /set /category:"Account Management" /success:disable /failure:disable +auditpol /set /category:"Policy Change" /success:disable /failure:disable +``` + +**Step 3 –** Enable the following audit subcategories: + +| Audit subcategory | Command | +| -------------------------- | ------------------------------------------------------------------------------------------ | +| Security Group Management | `auditpol /set /subcategory:"Security Group Management" /success:enable /failure:disable` | +| User Account Management | `auditpol /set /subcategory:"User Account Management" /success:enable /failure:disable` | +| Handle Manipulation | `auditpol /set /subcategory:"Handle Manipulation" /success:enable /failure:disable` | +| Other Object Access Events | `auditpol /set /subcategory:"Other Object Access Events" /success:enable /failure:disable` | +| Registry | `auditpol /set /subcategory:"Registry" /success:enable /failure:disable` | +| File Share | `auditpol /set /subcategory:"File Share" /success:enable /failure:disable` | +| Audit Policy Change | `auditpol /set /subcategory:"Audit Policy Change" /success:enable /failure:disable` | + +It is recommended to disable all other subcategories unless you need them for other purposes. You +can check your current effective settings by executing the following commands: + +``` +auditpol /set /category:"Object Access"  +auditpol /set /category:"Account Management"  +auditpol /set /category:"Policy Change"  +``` + +## Configure Advanced Audit Policy on Windows Server 2016 and Above + +In Windows Server 2016 and above, Advanced audit policies are integrated with Group Policies, so +they can be applied via Group Policy Object or Local Security Policies. The procedure below +describes how to apply Advanced policies via Local Security Policy console. + +**Step 1 –** On the audited server, open the **Local Security Policy** snap-in and navigate to +Start > Windows Administrative Tools >Local Security Policy. + +**Step 2 –** In the left pane, navigate to Security Settings > Advanced Audit Policy Configuration > +System Audit Policies. + +**Step 3 –** Configure the following audit policies. + +| Policy Subnode | Policy Name | Audit Events | +| ------------------ | ------------------------------------------------------------------------------------------------------------------------------------ | ------------ | +| Account Management |
  • Audit Security Group Management
  • Audit User Account Management
| "Success" | +| Object Access |
  • Audit Handle Manipulation
  • Audit Other Object Access Events
  • Audit Registry
  • Audit File Share
| "Success" | +| Policy Change |
  • Audit Audit Policy Change
| "Success" | diff --git a/docs/auditor/10.8/configuration/windowsserver/dhcp.md b/docs/auditor/10.8/configuration/windowsserver/dhcp.md new file mode 100644 index 0000000000..3fb268b52e --- /dev/null +++ b/docs/auditor/10.8/configuration/windowsserver/dhcp.md @@ -0,0 +1,22 @@ +--- +title: "Adjust DHCP Server Operational Log Settings" +description: "Adjust DHCP Server Operational Log Settings" +sidebar_position: 70 +--- + +# Adjust DHCP Server Operational Log Settings + +If you plan to monitor DHCP changes, you may need to adjust your DHCP Server Operational log +settings (size and retention method). For that, take the steps described below. + +1. On the DHCP server, navigate to Event Viewer. +2. Navigate to Event Viewer tree → Applications and Services Logs → Microsoft → Windows and expand + the DHCP-Server node. +3. Right-click the Operational log and select Properties. + + ![manual_config_dhcp_log](/images/auditor/10.7/configuration/windowsserver/manual_config_dhcp_log.webp) + +4. Make sure the **Enable logging** option is selected. +5. Set **Maximum log size** to **4 GB**. +6. Set the retention method to **Overwrite events as needed (oldest events first)**. Click **OK** to + save the settings and close the dialog. diff --git a/docs/auditor/10.8/configuration/windowsserver/eventlog.md b/docs/auditor/10.8/configuration/windowsserver/eventlog.md new file mode 100644 index 0000000000..b763d53811 --- /dev/null +++ b/docs/auditor/10.8/configuration/windowsserver/eventlog.md @@ -0,0 +1,118 @@ +--- +title: "Adjusting Event Log Size and Retention Settings" +description: "Adjusting Event Log Size and Retention Settings" +sidebar_position: 60 +--- + +# Adjusting Event Log Size and Retention Settings + +Consider that if the event log size is insufficient, overwrites may occur before data is written to +the Long-Term Archive and the Audit Database, and some audit data may be lost. + +To prevent overwrites, you can increase the maximum size of the event logs and set retention method +for these logs to "_Overwrite events as needed_". This refers to the following event logs: + +- Application +- Security +- Setup +- System +- Applications and Services logs > Microsoft>Windows > TaskScheduler > Operational +- Applications and Services logs > Microsoft > Windows > DNS-Server > Audit (only for DCs running + Windows Server 2012 R2 and above) +- Applications and Services logs > AD FS > Admin log (for AD FS servers ) + +Refer to the following Microsoft +[article to read about the recommended event log settings](https://support.microsoft.com/en-us/help/957662/recommended-settings-for-event-log-sizes-in-windows). + +The procedure below provides a possible way to specify the event log settings manually. However, if +you have multiple target computers, consider configuring these settings via Group Policy as also +described in this section + +## Configure the Event Log Size Manually + +Follow the steps to configure Event Log Size and Retention Settings. + +**Step 1 –** On a target server, navigate to Start > Windows Administrative Tools > Event Viewer. + +**Step 2 –** Navigate to Event Viewer tree > Windows Logs, right-click **Security** and select +**Properties**. + +![Log Properties dialog box](/images/1secure/configuration/computer/manualconfig_ws_eventviewerpr2016_thumb_0_0.webp) + +**Step 3 –** Make sure Enable logging is selected. + +**Step 4 –** In the Maximum log size field, specify the desired log size. + +**Step 5 –** Make sure the Do not overwrite events (Clear logs manually) check box is cleared. If +selected, change the retention method to _Overwrite events as needed (oldest events first)_. + +Make sure the Maximum security log size group policy does not overwrite your log settings. To check +this, start the Group Policy Management console, proceed to the GPO that affects your server, and +navigate to Computer Configuration > Policies > Windows Settings > Security Settings > Event Log. + +Repeat these steps for the following event logs: + +- **Windows Logs** **>** **Application** +- **Windows Logs** **>** **System** +- **Applications and Services Logs > Microsoft > Windows > TaskScheduler > Operational** + + Configure setting for TaskScheduler/Operational log only if you want to monitor scheduled tasks. + +- **Applications and Services Logs > Microsoft > Windows > DNS-Server > Audit** + + Configure setting for DNS log only if you want to monitor DNS changes. The log is available on + Windows Server 2012 R2 and above and is not enabled by default. See Microsoft documentation for + more information on how to enable this log. + +- **Applications and Services Logs** **>** **AD FS** **>** **Admin** + + Applies to the AD FS servers. + +## Configure the Event Log Size Using Group Policy + +Personnel with administrative rights can use Group Policy Objects to apply configuration settings to +multiple servers in bulk. + +Follow the steps to configure settings for Application, System and Security event logs. + +**Step 1 –** Open the Group Policy Management Editor on the domain controller and go to **Computer +Configuration > Policies > Administrative Templates > Windows Components > Event Log Service**. + +**Step 2 –** Select the log you need. + +**Step 3 –** Edit Specify the maximum log file size setting; the value is usually set to _4194240 +KB_. + +**Step 4 –** Specify retention settings for the log; usually it is Overwrite as needed. + +Follow the steps to configure settings for other logs. + +**Step 1 –** Open the registry editor and go to +HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\. For example: +HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Directory Service + +**Step 2 –** Set the MaxSize to the required decimal value (in bytes). + +![gpo_eventlog_regedit_thumb_0_0](/images/auditor/10.7/configuration/windowsserver/gpo_eventlog_regedit_thumb_0_0.webp) + +You can configure Group Policy Preferences to push registry changes to the target domain computers. +For the example above (Directory Service Log), perform the following steps. + +**Step 1 –** In Group Policy Management Console on the domain controller go to **Computer > +Preferences > Windows Settings > Registry**. + +**Step 2 –** Right-click Registry and select **New > Registry Item**. + +**Step 3 –** In the Properties window on the General tab select the following: + +- Action > Create +- Hive > HKEY_LOCAL_MACHINE +- Key Path – browse to MaxSize value at the SYSTEM\CurrentControlSet\Services\EventLog\Directory + Service + ![gpo_eventlog_gpmc_thumb_0_0](/images/auditor/10.7/configuration/windowsserver/gpo_eventlog_gpmc_thumb_0_0.webp) + +**Step 4 –** Change the MaxSize REG_DWORD to the required decimal value (in bytes). + +**Step 5 –** Save the preferences and link them to the necessary servers (OUs). + +When finished, run the `gpupdate /force` command to force group policy update. diff --git a/docs/auditor/10.8/configuration/windowsserver/iis.md b/docs/auditor/10.8/configuration/windowsserver/iis.md new file mode 100644 index 0000000000..f56ff9052d --- /dev/null +++ b/docs/auditor/10.8/configuration/windowsserver/iis.md @@ -0,0 +1,25 @@ +--- +title: "Internet Information Services (IIS)" +description: "Internet Information Services (IIS)" +sidebar_position: 100 +--- + +# Internet Information Services (IIS) + +To be able to process Internet Information Services (IIS) events, you must enable the Remote +Registry service on the target computers. [Windows Server](/docs/auditor/10.7/configuration/windowsserver/overview.md) + +To configure the Operational log size and retention method + +1. On the computer where IIS is installed, navigate to Start > Windows Administrative Tools → Event + Viewer. +2. Navigate to Event Viewer tree → Applications and Services Logs → Microsoft → Windows and expand + the IIS-Configuration node. +3. Right-click the Operational log and select Properties. + + ![manualconfig_iis2016](/images/auditor/10.7/configuration/windowsserver/manualconfig_iis2016.webp) + +4. Make sure **Enable logging** is enabled. +5. Set **Maximum log size** to 4 GB. +6. Make sure **Do not overwrite events (Clear logs manually)** is cleared. If selected, change the + retention method to **Overwrite events as needed (oldest events first)**. diff --git a/docs/auditor/10.8/configuration/windowsserver/localpolicy.md b/docs/auditor/10.8/configuration/windowsserver/localpolicy.md new file mode 100644 index 0000000000..caaaaaaf48 --- /dev/null +++ b/docs/auditor/10.8/configuration/windowsserver/localpolicy.md @@ -0,0 +1,48 @@ +--- +title: "Configure Local Audit Policies" +description: "Configure Local Audit Policies" +sidebar_position: 40 +--- + +# Configure Local Audit Policies + +Local audit policies must be configured on the target servers to get the "Who" and "When" values for +the changes to the following monitored system components: + +- Audit policies +- File shares +- Hardware and system drivers +- General computer settings +- Local users and groups +- Services +- Scheduled tasks +- Windows registry +- Removable media + +You can also configure advanced audit policies for same purpose. See the +[Configure Advanced Audit Policies](/docs/auditor/10.7/configuration/windowsserver/advancedpolicy.md) topic for more information. + +## Manual Configuration + +While there are several methods to configure local audit policies, this topic covers just one of +them: how to configure policies locally with the Local Security Policy snap-in. To apply settings to +the whole domain, use the Group Policy but consider the possible impact on your environment. + +Follow the steps to configure local audit policies. + +**Step 1 –** On the audited server, open the Local Security Policy snap-in: navigate to Start > +Windows Administrative Tools > Local Security Policy. + +**Step 2 –** Navigate to Security Settings > Local Policies > Audit Policy. + +**Step 3 –** Configure the following audit policies. + +| Policy Name | Audit Events | +| ------------------------ | ------------ | +| Audit account management | "Success" | +| Audit object access | "Success" | +| Audit policy change | "Success" | + +Local audit policy is configured. + +![Local Security Policy snap-in](/images/1secure/configuration/computer/manualconfig_ws_local_audit_policies2016.webp) diff --git a/docs/auditor/10.8/configuration/windowsserver/overview.md b/docs/auditor/10.8/configuration/windowsserver/overview.md new file mode 100644 index 0000000000..9bba343dfc --- /dev/null +++ b/docs/auditor/10.8/configuration/windowsserver/overview.md @@ -0,0 +1,364 @@ +--- +title: "Windows Server" +description: "Windows Server" +sidebar_position: 140 +--- + +# Windows Server + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - The Remote Registry and the Windows Management Instrumentation (WMI) service must be started. + See the + [Enable Remote Registry and Windows Management Instrumentation Services](/docs/auditor/10.7/configuration/windowsserver/remoteregistry.md) + topic and the [Configure Windows Registry Audit Settings](/docs/auditor/10.7/configuration/windowsserver/windowsregistry.md) topic for + additional information. + - The following advanced audit policy settings must be configured: + + - The Audit: Force audit policy subcategory settings (Windows 7 or later) security option + must be enabled. + - For Windows Server 2008—The Object Access, Account Management, and Policy Change + categories must be disabled while the Security Group Management, User Account Management, + Handle Manipulation, Other Object Access Events, Registry, File Share, and Audit Policy + Change subcategories must be enabled for _"Success"_. + - For Windows Server 2008 R2 / Windows 7 and above—Audit Security Group Management, Audit + User Account Management, Audit Handle Manipulation, Audit Other Object Access Events, + Audit Registry, Audit File Share, and Audit Audit Policy Changeadvanced audit policies + must be set to _"Success"_. + - See the [Configure Local Audit Policies](/docs/auditor/10.7/configuration/windowsserver/localpolicy.md) topic and the + [Configure Advanced Audit Policies](/docs/auditor/10.7/configuration/windowsserver/advancedpolicy.md) topic for additional information. + + - The following legacy audit policies can be configured instead of advanced: Audit object + access, Audit policy change, and **Audit account management** must be set to _"Success"_. + - The Enable Persistent Time Stamp local group policy must be enabled. This policy should be + configured manually since Auditor does not enable it automatically. See the + [Configure Enable Persistent Time Stamp Policy](/docs/auditor/10.7/configuration/windowsserver/persistenttimestamp.md) topic for additional + information. + - The Application, Security, and System event log maximum size must be set to 4 GB. The + retention method must be set to _“Overwrite events as needed”_. See the + [Adjusting Event Log Size and Retention Settings](/docs/auditor/10.7/configuration/windowsserver/eventlog.md) topic for additional + information. + - For auditing scheduled tasks, the Microsoft-Windows-TaskScheduler/Operational event log must + be enabled and its maximum size must be set to 4 GB. The retention method of the log must be + set to _“Overwrite events as needed”_. + - For auditing DHCP, the Microsoft-Windows-Dhcp-Server/Operational event log must be enabled and + its maximum size must be set to 4 GB. The retention method of the log must be set to + _“Overwrite events as needed”_. See the [Adjust DHCP Server Operational Log Settings](/docs/auditor/10.7/configuration/windowsserver/dhcp.md) + topic for additional information. + - For auditing DNS, the Microsoft-Windows-DNS-Server/Audit event log must be enabled and its + maximum size must be set to 4 GB. The retention method of the log must be set to _“Overwrite + events as needed”_. + - The following inbound Firewall rules must be enabled: + + - Remote Event Log Management (NP-In) + - Remote Event Log Management (RPC) + - Remote Event Log Management (RPC-EPMAP) + - Windows Management Instrumentation (ASync-In) + - Windows Management Instrumentation (DCOM-In) + - Windows Management Instrumentation (WMI-In) + - Network Discovery (NB-Name-In) + - File and Printer Sharing (NB-Name-In) + - Remote Service Management (NP-In) + - Remote Service Management (RPC) + - Remote Service Management (RPC-EPMAP) + - Performance Logs and Alerts (DCOM-In) + - Performance Logs and Alerts (TCP-In) + + - If the audited servers are behind the Firewall, review the list of protocols and ports + required for Netwrix Auditor and make sure that these ports are opened. See the + [Windows Server Ports](/docs/auditor/10.7/configuration/windowsserver/ports.md) topic for additional information. + - For auditing removable storage media, two Event Trace Session objects must be created. See the + [Configure Removable Storage Media for Monitoring](/docs/auditor/10.7/configuration/windowsserver/removablestorage.md) topic for additional + information. + - If you want to use Network traffic compression, make sure that the Auditor console computer is + accessible by its FQDN name. + - For auditing IIS: + + - The **Remote Registry** service must be running and its **Startup Type** must be set to + _"Automatic"_. + - The Microsoft-IIS-Configuration/Operational log must be enabled and its maximum size must + be set to 4 GB. The retention method of the log must be set to _“Overwrite events as + needed”_. + +Whatever method you choose to configure Windows Server for auditing (manual or automated), also +remember to do the following: + +1. Configure Data Collecting Account, as described in the + [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic. +2. Configure required protocols and ports, as described in the [Windows Server Ports](/docs/auditor/10.7/configuration/windowsserver/ports.md) + topic. + +## Exclude Monitored Objects + +You can fine-tune Netwrix Auditor by specifying data that you want to exclude from the Windows +Server monitoring scope. + +Follow the steps to exclude data from the Windows Server monitoring scope: + +**Step 1 –** Navigate to the _%Netwrix Auditor installation folder%\Windows Server Auditing_ folder. + +**Step 2 –** Edit the \*.txt files, based on the following guidelines: + +- Each entry must be a separate line. +- Wildcards (\* and ?) are supported. A backslash (\) must be put in front of (\*), (?), (,), and + (\) if they are a part of an entry value. +- Lines that start with the # sign are treated as comments and are ignored. + +| File | Description | Syntax | +| ---------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| omitcollectlist.txt | Contains a list of objects and their properties to be excluded from being monitored. If you want to restart monitoring these objects, remove them from the omitcollectlist.txt and run data collection at least twice. | `monitoring plan name,server name,class name,property name,property value` `class name` is a mandatory parameter, it cannot be replaced with a wildcard. `property name` and `property value` are optional, but cannot be replaced with wildcards either. For example: `#*,server,MicrosoftDNS_Server `````` #*,*,StdServerRegProv` | +| omiterrors.txt | Contains a list of errors/warnings to be omitted from logging to the Netwrix Auditor System Health event log. | `monitoring plan name,server name,error text` For example: `*,productionserver1.corp.local,*Access is denied*` | +| omitreportlist.txt | Contains a list of objects to be excluded from reports and Activity Summary emails. In this case audit data is still being collected. | `monitoring plan name,who,where,object type,what,property name` For example: `*,CORP\\jsmith,*,*,*,*` | +| omitsitcollectlist.txt | Contains a list of objects to be excluded from State-in-time reports. | `monitoring planname,server name,class name,property name,property value` `class name` is a mandatory parameter, it cannot be replaced with a wildcard. `property name` and `property value` are optional, but cannot be replaced with wildcards either. For example: `*,server,MicrosoftDNS_Server` `*,*,StdServerRegProv` | +| omitstorelist.txt | Contains a list of objects to be excluded from being stored to the Audit Archive and showing up in reports. In this case audit data is still being collected. | `monitoring plan name,who,where,object type,what,property name` For example: `*,*,*,Scheduled task,Scheduled Tasks\\User_Feed_Synchronization*,*` | + +## Monitored Objects + +This section lists Windows Server components and settings whose changes Netwrix Auditor can monitor. + +When monitoring a Windows Server, Netwrix Auditor needs to audit some registry settings. See the +Windows Server Registry Keys section for additional information. If you want Netwrix Auditor to +audit custom registry keys, see the Monitoring Custom Registry KeysMonitoring Custom Registry +Keystopic for additional information. + +In the table below, double asterisks (\*\*) indicates the components and settings for which the Who +value is reported as _“Not Applicable”_. + +| Object type | Attributes | +| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| General Computer Settings | | +| Computer |
  • System state changed to Started
  • System state changed to Stopped. Reason: Reason type
  • System state changed to Stopped. Reason: unexpected shutdown or system failure
| +| Computer Name |
  • Computer Description
  • Name
  • Domain
| +| Environment Variables |
  • Type
  • Value
| +| Event Log |
  • Event Log Cleared
| +| General |
  • Caption
  • Organization
  • Registered User
  • Serial Number
  • Service Pack\*\*
  • Version\*\*
| +| Remote |
  • Enable Remote Desktop on this computer
| +| Startup and Recovery |
  • Automatically Restart
  • Dump File
  • Dump Type
  • Overwrite any existing file
  • Send Alert
  • System Startup Delay
  • Write an Event
| +| System Time |
  • System time changed from ... to ...
  • Time zone changed Not supported on Windows Server 2008 SP2 and Windows Server 2008 R2.
| +| Add / Remove Programs | | +| Add or Remove Programs |
  • Installed For\*\*
  • Version
| +| Services | | +| System Service |
  • Action in case of failed service startup
  • Action in case of service stopping
  • Allow service to interact with desktop
  • Caption
  • Created
  • Deleted
  • Description
  • Name
  • Path to executable
  • Service Account
  • Service Type
  • Start Mode
  • Error Control
| +| Audit Policies | | +| Local Audit Policy |
  • Added Audit settings Only for the Global Object Access Auditing advanced policies.
  • Successful audit enabled/disabled
  • Failure audit enabled/disabled
| +| Per-User Local Audit Policy |
  • Success audit include added
  • Success audit include removed
  • Failure audit include added
  • Failure audit include removed
  • Success audit exclude added
  • Success audit exclude removed
  • Failure audit exclude added
  • Failure audit exclude remove
| +| Hardware | | +| Base Board\*\* |
  • Hosting Board
  • Status
  • Manufacturer
  • Product
  • Version
  • Serial Number
| +| BIOS\*\* |
  • Manufacturer
  • Version
| +| Bus\*\* |
  • Bus Type
  • Status
| +| Cache Memory\*\* |
  • Configuration Manager Error Code
  • Last Error Description
  • Last Error Code
  • Purpose
  • Status
| +| CD-ROM Drive\*\* |
  • Configuration Manager Error Code
  • Last Error Description
  • Last Error Code
  • Media Type
  • Name
  • SCSI Bus
  • SCSI Logical Unit
  • SCSI Port
  • SCSI Target ID
  • Status
| +| Disk Partition\*\* |
  • Primary Partition
  • Size (bytes)
  • Starting offset (bytes)
| +| Display Adapter\*\* |
  • Adapter RAM (bytes)
  • Adapter Type
  • Bits/Pixel
  • Configuration Manager Error Code
  • Driver Version
  • Installed Drivers
  • Last Error Description
  • Last Error Code
  • Refresh Rate
  • Resolution
  • Status
| +| DMA\*\* |
  • Status
| +| Floppy Drive\*\* |
  • Configuration Manager Error Code
  • Last Error Description
  • Last Error Code
  • Status
| +| Hard Drive\*\* |
  • Bytes/Sector
  • Configuration Manager Error Code
  • Interface Type
  • Last Error Description
  • Last Error Code
  • Media Loaded
  • Media Type
  • Model
  • Partitions
  • SCSI Bus
  • SCSI Logical Unit
  • SCSI Port
  • SCSI Target ID
  • Sectors/Track
  • Size (bytes)
  • Status
  • Total Cylinders
  • Total Heads
  • Total Sectors
  • Total Tracks
  • Tracks/Cylinder
| +| IDE\*\* |
  • Configuration Manager Error Code
  • Description
  • Last Error Description
  • Last Error Code
  • Status
| +| Infrared\*\* |
  • Configuration Manager Error Code
  • Last Error Description
  • Last Error Code
  • Status
| +| Keyboard\*\* |
  • Configuration Manager Error Code
  • Description
  • Last Error Description
  • Last Error Code
  • Layout
  • Name
  • Status
| +| Logical Disk\*\* |
  • Description
  • File System
  • Size (bytes)
  • Status
| +| Monitor\*\* |
  • Configuration Manager Error Code
  • Last Error Description
  • Last Error Code
  • Monitor Type
  • Status
| +| Network Adapter |
  • Adapter Type \*
  • Configuration Manager Error Code
  • Default IP Gateway \*
  • DHCP Enabled\*
  • DHCP Server
  • DNS Server Search Order
  • IP Address \*
  • Last Error Description
  • Last Error Code
  • MAC Address
  • Network Connection Name
  • Network Connection Status
  • Service Name
  • Status \* — indicates the properties whose changes may not be reported correctly, displaying "_Who_" (i.e. initiator's account) as _System_.
| +| Network Protocol\*\* |
  • Description
  • Status
| +| Parallel Ports\*\* |
  • Configuration Manager Error Code
  • Last Error Description
  • Last Error Code
  • Status
| +| PCMCIA Controller\*\* |
  • Configuration Manager Error Code
  • Last Error Description
  • Last Error Code
  • Status
| +| Physical Memory\*\* |
  • Capacity (bytes)
  • Status
  • Manufacturer
  • Memory Type
  • Speed
  • Part Number
  • Serial Number
| +| Pointing Device\*\* |
  • Configuration Manager Error Code
  • Double Click Threshold
  • Handedness
  • Hardware Type
  • Last Error Description
  • Last Error Code
  • Number of buttons
  • Status
| +| Printing |
  • Comment\*\*
  • Hidden\*\*
  • Local\*\*
  • Location\*\*
  • Name\*\*
  • Network\*\*
  • Port Name\*\*
  • Printer error information
  • Published\*\*
  • Shared\*\*
  • Share Name\*\*
  • Status
| +| Processor\*\* |
  • Configuration Manager Error Code
  • Last Error Description
  • Last Error Code
  • Max Clock Speed (MHz)
  • Name
  • Status
| +| SCSI\*\* |
  • Configuration Manager Error Code
  • Description
  • Last Error Description
  • Last Error Code
  • Status
| +| Serial Ports\*\* |
  • Configuration Manager Error Code
  • Last Error Description
  • Last Error Code
  • Maximum Bits/Second
  • Name
  • Status
| +| Sound Device\*\* |
  • Configuration Manager Error Code
  • Last Error Description
  • Last Error Code
  • Status
| +| System Slot\*\* |
  • Slot Designation
  • Status
| +| USB Controller\*\* |
  • Configuration Manager Error Code
  • Last Error Description
  • Last Error Code
  • Name
  • Status
| +| USB Hub\*\* |
  • Configuration Manager Error Code
  • Last Error Description
  • Last Error Code
  • Name
  • Status
| +| DHCP configuration | | +| If the DHCP server runs on Windows Server 2008 (or below), then the Who value for DHCP server configuration events is reported as _“Not Applicable”_. | | +| Server role |
  • Added
  • Removed
| +| Server settings |
  • Type:
  • IPv4
  • IPv4 Filters
  • IPv6
  • Action:
  • Modified
| +| DHCP scope |
  • Type:
  • IPv4
  • Multicast IPv4
  • Superscope for IPv4
  • IPv6
  • Action:
  • Added
  • Removed
  • Modified
  • Moved
| +| DHCP Reservation |
  • Type:
  • IPv4
  • IPv6
  • Action:
  • Added
  • Removed
  • Modified
| +| DHCP Policy |
  • Type:
  • IPv4
  • IPv4 server-wide
  • Action:
  • Added
  • Removed
  • Modified
  • Renamed
| +| Removable media | | +| Removable Storage Media\*\* | Netwrix Auditor does not report on floppy/optical disk and memory card storage medias. For removable storages, the When value reports actual time when a change was made and/or a target server was started.
  • Device class:
  • CD and DVD
  • Floppy Drives
  • Removable Disk
  • Tape Drives
  • Windows Portable Devices When the Audit Object Access local audit policy and/or the Audit Central Access Policy Staging \ Audit Removable Storage advanced audit policies are enabled on the target server, the `gpupdate /force` command execution issues removable storage restart. These actions are disclosed in Netwrix Auditor reports, search, and activity summaries. Note that these actions are system, not user-effected.
| +| Scheduled Tasks | | +| Scheduled Task |
  • Account Name
  • Application
  • Comment
  • Creator
  • Enabled
  • Parameters
  • Triggers
| +| Local Users and Groups | | +| Local Group |
  • Description
  • Name
  • Members
| +| Local User |
  • Description
  • Disabled/Enabled
  • Full Name
  • Name
  • User cannot change password
  • Password Never Expires
  • User must change password at next logon
| +| DNS Configuration | | +| The Who value will be reported for DNS configuration settings only if the DNS server runs on Windows Server 2012 R2. See the following Microsoft article for additional information: [Update adds query logging and change auditing to Windows DNS servers](https://support.microsoft.com/en-us/kb/2956577). | | +| DNS Server |
  • Address Answer Limit
  • Allow Update
  • Auto Cache Update
  • Auto Config File Zones
  • Bind Secondaries
  • Boot Method
  • Default Aging State
  • Default No Refresh Interval
  • Default Refresh Interval
  • Disable Auto Reverse Zones
  • Disjoint Nets
  • Ds Available
  • Ds Polling Interval
  • Ds Tombstone Interval
  • EDns Cache Timeout
  • Enable Directory Partitions
  • Enable Dns Sec
  • Enable EDns Probes
  • CD-ROM D Enable Netmask Ordering
  • Event Log Level
  • Fail On Load If Bad Zone Data
  • Forward Delegations
  • Forwarders
  • Forwarding Timeout
  • Is Slave
  • Listen Addresses
  • Log File Max Size
  • Log File Path
  • Log Level
  • Loose Wildcarding
  • Max Cache TTL
  • Max Negative Cache TTL
  • Name Check Flag
  • No Recursion
  • Recursion Retry
  • Recursion Timeout
  • Round Robin
  • Rpc Protocol
  • Scavenging Interval
  • Secure Cache Against Pollution
  • Send Port
  • Server Addresses
| +| DNS Zone |
  • Aging State
  • Allow update
  • Auto created
  • Data file name
  • Ds integrated
  • Expires after
  • Forwarder slave
  • Forwarder timeout
  • Master servers
  • Minimum TTL
  • No refresh interval
  • Notify
  • Notify servers
  • Owner name
  • Paused
  • Primary server
  • Refresh interval
  • Responsible person
  • Retry interval
  • Reverse
  • Scavenge servers
  • Secondary servers
  • Secure secondaries
  • Shutdown
  • TTL
  • User NB stat
  • Use WINS
  • Zone type
| +| DNS Resource Records | | +| The Who value will be reported for DNS Resource Records only if the DNS server runs Windows Server 2012 R2. See the following Microsoft article for additional information: [Update adds query logging and change auditing to Windows DNS servers](https://support.microsoft.com/en-us/kb/2956577). | | +| DNS AAAA |
  • Container name
  • IPv6 Address
  • Owner name
  • Record class
  • TTL
  • Zone type
| +| DNS AFSDB |
  • Container name
  • Owner name
  • Server name
  • Server subtype
  • Record class
  • TTL
  • Zone type
| +| DNS ATM A |
  • ATM Address
  • Container name
  • Format
  • Owner name
  • Record class
  • TTL
  • Value
  • Zone type
| +| DNS A |
  • Container name
  • IP Address
  • Owner name
  • Record class
  • TTL
  • Zone type
| +| DNS CNAME |
  • Container name
  • FQDN for target host
  • Owner name
  • Record class
  • TTL
  • Zone type
| +| DNS DHCID |
  • Container name
  • DHCID (base 64)
  • Owner name
  • Record class
  • TTL
  • Zone type
| +| DNS DNAME |
  • Container name
  • FQDN for target domain
  • Owner name
  • Record class
  • TTL
  • Zone type
| +| DNS DNSKEY |
  • Algorithm
  • Container name
  • Key type
  • Key (base 64)
  • Name type
  • Owner name
  • Protocol
  • Record class
  • Signatory field
  • TTL
  • Zone type
| +| DNS DS |
  • Algorithm
  • Container name
  • Data
  • DigestType
  • Key tag
  • Owner name
  • Record class
  • TTL
  • Zone type
| +| DNS HINFO |
  • Container name
  • CPU type
  • Operating system
  • Owner name
  • Record class
  • TTL
  • Zone type
| +| DNS ISDN |
  • Container name
  • ISDN phone number and DDI
  • ISDN subaddress
  • Owner name
  • Record class
  • TTL
  • Zone type
| +| DNS KEY |
  • Algorithm
  • Container name
  • Key type
  • Key (base 64)
  • Name type
  • Owner name
  • Protocol
  • Record class
  • Signatory field
  • TTL
  • Zone type
| +| DNS MB\*\*\* |
  • Container name
  • Mailbox host
  • Owner name
  • Record class
  • TTL
  • Zone type
| +| DNS MD |
  • Container name
  • MD host
  • Owner name
  • Record class
  • TTL
  • Zone type
| +| DNS MF |
  • Container name
  • MF host
  • Owner name
  • Record class
  • TTL
  • Zone type
| +| DNS MG |
  • Container name
  • Member mailbox
  • Owner name
  • Record class
  • TTL
  • Zone type
| +| DNS MINFO |
  • Container name
  • Error mailbox
  • Owner name
  • Responsible mailbox
  • Record class
  • TTL
  • Zone type
| +| DNS MR |
  • Container name
  • Owner name
  • Replacement mailbox
  • Record class
  • TTL
  • Zone type
| +| DNS MX |
  • Container name
  • FQDN of mail server
  • Mail server priority
  • Owner name
  • Record class
  • TTL
  • Zone type
| +| DNS NAPTR |
  • Container name
  • Flag string
  • Order
  • Owner name
  • Preference
  • Record class
  • Regular expression string
  • Replacement domain
  • Service string
  • TTL
  • Zone type
| +| DNS NS |
  • Container name
  • Name servers
  • Owner name
  • TTL
| +| DNS NXT |
  • Container name
  • Next domain name
  • Owner name
  • Record class
  • Record types
  • TTL
  • Zone type
| +| DNS PTR |
  • Container name
  • Owner name
  • PTR domain name
  • Record class
  • TTL
  • Zone type
| +| DNS RP |
  • Container name
  • Mailbox of responsible person
  • Optional associated text (TXT) record
  • Owner name
  • Record class
  • TTL
  • Zone type
| +| DNS RRSIG |
  • Algorithm
  • Container name
  • Key tag
  • Labels
  • Original TTL
  • Owner name
  • Record class
  • Signature expiration (GMT)
  • Signature inception (GMT)
  • Signature (base 64)
  • Signer's name
  • TTL
  • Type covered
  • Zone type
| +| DNS RT |
  • Container name
  • Intermediate host
  • Owner name
  • Preference
  • Record class
  • TTL
  • Zone type
| +| DNS SIG |
  • Algorithm
  • Container name
  • Key tag
  • Labels
  • Original TTL
  • Owner name
  • Record class
  • Signature expiration (GMT)
  • Signature inception (GMT)
  • Signature (base 64)
  • Signer's name
  • TTL
  • Type covered
  • Zone type
| +| DNS SRV |
  • Container name
  • Host offering this service
  • Owner name
  • Port number
  • Priority
  • Record class
  • TTL
  • Weight
  • Zone type
| +| DNS TEXT |
  • Container name
  • Owner name
  • Record class
  • Text
  • TTL
  • Zone type
| +| DNS WINS |
  • Cache time-out
  • Container name
  • Do not replicate this record
  • Lookup time-out
  • Owner name
  • Record class
  • Wins servers
  • Zone type
| +| DNS WKS |
  • Container name
  • IP address
  • Owner name
  • Protocol
  • Record class
  • Services
  • TTL
  • Zone type
| +| DNS X25 |
  • Container name
  • Owner name
  • Record
  • Record class
  • TTL
  • X.121 PSDN address
  • Zone type
| +| File Shares | | +| Share |
  • Access-based enumeration
  • Caching
  • Description
  • Enable BranchCache
  • Encrypt data access
  • Folder path
  • Share permissions
  • User limit
| + + +### Windows Server Registry Keys + +If you want to monitor changes to system components on a Windows Server, make sure that Windows +Registry audit settings are configured on that Windows server. + +This refers to the following keys: + +- HKEY_LOCAL_MACHINE\SOFTWARE +- HKEY_LOCAL_MACHINE\SYSTEM +- HKEY_USERS\.DEFAULT + +For these keys and subkeys, the following advanced permissions must be audited ("_Successful_" audit +type required): + +- Set Value +- Create Subkey +- Delete +- Write DAC +- Write Owner + +The below is the full list of keys (and subkeys) involved in Windows Server auditing. + +| Category | Registry Keys | +|----------------|-------------------------------------------------------------------------------------------------------------------| +| Hardware | - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\* | +| | - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\* | +| | - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}\* | +| | - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\* | +| General | - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl\* | +| | - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CrashControl\* | +| | - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\CrashControl\* | +| | - HKEY_LOCAL_MACHINE\Software\WOW6432NODE\Microsoft\Windows NT\CurrentVersion\* | +| | - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\* | +| Software | - HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\* | +| | - HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\* | +| Services | - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\* | +| | - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\* | +| | - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\* | +| RemovableMedia | - SYSTEM\CurrentControlSet\Enum\* | + + +Consider that audit data for the registry keys themselves will not appear in Netwrix Auditor +reports, alerts or search results, as it is only used as one of the sources for the Activity Records +formation. + +- You can configure these settings automatically using Netwrix Auditor, as described in the + [Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) + topic. Corresponding audit settings will be also applied automatically after you select a checkbox + under **Monitor changes to system components** on the **General** tab in the Windows Server data + source properties. + +Audit settings will be automatically adjusted only for the keys/subkeys involved in the monitoring +of selected components (granular adjustment). For example, if you selected **Services**, the program +will adjust the audit settings for the following subkeys: + +- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services(|\\.\*) +- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services(|\\.\*) +- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services(|\\.\*) + +- To configure the audit settings manually, refer to the + [Configure Windows Registry Audit Settings](/docs/auditor/10.7/configuration/windowsserver/windowsregistry.md) topic for additional information. + +#### Monitoring Custom Registry Keys + +Follow the steps to monitor custom registry keys. + +**Step 1 –** On the computer where Auditor Server resides, navigate to _%Netwrix Auditor +installation folder%\Windows Server Auditing._ + +![customregistrykeyentry](/images/auditor/10.7/configuration/windowsserver/customregistrykeyentry.webp) + +**Step 2 –** Edit the following parameters of the customregistrykeys.txt file: + +`monitoring plan name,server name,registry key name` + +For example: + +`#*,productionserver1.corp.local,HKEY_LOCAL_MACHINE\\SYSTEM\\RNG` + +**Step 3 –** Consider the following: + +- Each entry must be a separate line. +- Wildcards (\* and ?) are supported (except for the `registry key name` field). A backslash (\) + must be put in front of (\*), (?), (,), and (\) if they are a part of an entry value. +- Lines that start with the # sign are treated as comments and are ignored. + +![customregistrykey](/images/auditor/10.7/configuration/windowsserver/customregistrykey.webp) + +**NOTE:** In some cases, **Who** will be the system and **When** will be collection time, because +there is no necessary event in the Security log with this path. + +## VM Template Cloning + +While VM cloning is supported by Netwrix Auditor, an additional setup process should be taken into +consideration before the deployment process. + +Every monitored VM instance gets a unique ID assigned for monitoring and data collection purposes. +To ensure proper operation, the VM template must be excluded from the monitoring scope beforehand. +Omitting the VM template will allow Netwrix Auditor to assign unique IDs correctly and collect data +as intended. + +Follow the steps to add the template server to exclusions. + +**Step 1 –** In main Netwrix Auditor menu, select **Monitoring plans**. + +**Step 2 –** Select your Windows Server monitoring plan and click **Edit**. + +**Step 3 –** Choose the AD Container containing the template VM and click **Edit data source** in +the right pane. + +**Step 4 –** In the left pane, select **Containers and Computers**. + +**Step 5 –** Check the **Exclude these objects** checkbox and add the template VM by clicking **Add +Computer**. + +VM template server is added to exclusions and ready to use. diff --git a/docs/auditor/10.8/configuration/windowsserver/permissions.md b/docs/auditor/10.8/configuration/windowsserver/permissions.md new file mode 100644 index 0000000000..dc632e6ab2 --- /dev/null +++ b/docs/auditor/10.8/configuration/windowsserver/permissions.md @@ -0,0 +1,91 @@ +--- +title: "Permissions for Windows Server Auditing" +description: "Permissions for Windows Server Auditing" +sidebar_position: 120 +--- + +# Permissions for Windows Server Auditing + +Before you start creating a monitoring plan to audit your Windows servers (including DNS and DHCP +servers), plan for the account that will be used for data collection – it should meet the +requirements listed below. Then you will provide this account in the monitoring plan wizard (or in +the monitored item settings). + +The account used for data collection must meet the following requirements on the target servers: + +- The "Manage auditing and security log" policy must be defined for this account. See the + [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) topic for + additional information. +- This account must be a member of the local Administrators group. + +## Assign Permission To Read the Registry Key + +**NOTE:** This permission is required only if the account selected for data collection is not a +member of the Domain Admins group. + +This permission should be assigned on each domain controller in the audited domain, so if your +domain contains multiple domain controllers, it is recommended to assign permissions through Group +Policy. + +To assign permissions manually, use the Registry Editor snap-in or the Group Policy Management +console. + +### Assign Permission via the Registry Editor Snap-in + +Follow the steps to assign permission via the Registry Editor snap-in: + +**Step 1 –** On your target server, open Registry Editor: navigate to **Start > Run** and type +_"regedit"_. + +**Step 2 –** In the left pane, navigate to _HKEY_LOCAL_MACHINE\SYSTEM\CurrentControl +Set\Services\EventLog\Security_. + +**Step 3 –** Right-click the **Security** node and select **Permissions** from the pop-up menu. + +**Step 4 –** Click **Add** and enter the name of the user that you want to grant permissions to. + +**Step 5 –** Check **Allow** next to the **Read** permission. + +**NOTE:** For auditing Logon Activity, you also need to assign the Read permission to the +_HKEY_LOCAL_MACHINE\SECURITY\Policy\PolAdtEv_ registry key. + +### Assign Permission using the Group Policy Management Console + +Follow the steps to assign permission using the Group Policy Management console; + +**Step 1 –** Open the Group Policy Management console on any domain controller in the target domain: +navigate to Start > Windows Administrative Tools (Windows Server 2016/2019) or Administrative Tools +(Windows 2012 R2 and below) > Group Policy Management. + +**Step 2 –** In the left pane, navigate to Forest: `` > Domains > `` > +Domain Controllers. Right-click the effective domain controllers policy (by default, it is the +_Default Domain Controllers Policy_), and select Edit. + +**Step 3 –** In the Group Policy Management Editor dialog, expand the Computer Configuration node on +the left and navigate to Policies > Windows Settings > Security Settings > Registry. + +**Step 4 –** Right-click in the pane and select Add Key. + +**Step 5 –** Navigate to `HKEY_LOCAL_MACHINE\SECURITY\Policy\PolAdtEv` and click OK. + +**Step 6 –** Click Add and enter the name of the user that you want to grant permissions to and +press Enter. + +**Step 7 –** Check Allow next to the _"Read"_ permission and click OK. + +In the pop-up window, select Propagate inheritable permissions to all subkeys and click OK. + +Repeat the steps 4-7 for keys below: + +- `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg`; +- `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security`. + +**Step 8 –** Close Group Policy Management console. + +**Step 9 –** Open command prompt and input the `gpupdate /force` command and press Enter. The group +policy will be updated. + +**Step 10 –** Type `repadmin /syncall` command and press Enter for replicate GPO changes to other +domain controllers. + +**Step 11 –** Ensure that new GPO settings were applied to the domain controllers. diff --git a/docs/auditor/10.8/configuration/windowsserver/persistenttimestamp.md b/docs/auditor/10.8/configuration/windowsserver/persistenttimestamp.md new file mode 100644 index 0000000000..2bd481d2ce --- /dev/null +++ b/docs/auditor/10.8/configuration/windowsserver/persistenttimestamp.md @@ -0,0 +1,38 @@ +--- +title: "Configure Enable Persistent Time Stamp Policy" +description: "Configure Enable Persistent Time Stamp Policy" +sidebar_position: 90 +--- + +# Configure Enable Persistent Time Stamp Policy + +The Enable Persistent Time Stamp policy must be enabled on the target servers to track the +shutdowns. + +## Manual Configuation + +This section explains how to configure policies locally with the Local Group Policy Editor snap-in. + +To enable the policy + +1. On the audited server, open the **Local Group Policy Editor** snap-in: navigate to **Start** → + Run and type _"gpedit.msc"_. +2. Navigate to Computer Configuration → Administrative Templates → System and locate the policy. + + | Policy Name | State | + | -------------------------------- | ----------- | + | **Enable Persistent Time Stamp** | _"Enabled"_ | + +## Configuration via Group Policy + +To apply settings to the whole domain, you can use Group Policy. Remember to consider the possible +impact on your environment. + +To enable the policy + +1. Open the Group Policy Management console on the domain controller, browse to Computer + Configuration → Policies → Administrative Templates → System. +2. Locate the Enable Persistent Time Stamp policy in the right pane, right-click it and select Edit. +3. Switch policy state to Enabled. + +When finished, run the `gpupdate /force` command to force group policy update diff --git a/docs/auditor/10.8/configuration/windowsserver/ports.md b/docs/auditor/10.8/configuration/windowsserver/ports.md new file mode 100644 index 0000000000..42b824d52c --- /dev/null +++ b/docs/auditor/10.8/configuration/windowsserver/ports.md @@ -0,0 +1,69 @@ +--- +title: "Windows Server Ports" +description: "Windows Server Ports" +sidebar_position: 10 +--- + +# Windows Server Ports + +Review a full list of protocols and ports required for Netwrix Auditor for Windows Server. + +- Allow outbound connections from the dynamic (1024 - 65535) local port on the computer where + Netwrix Auditor Server resides. +- Allow outbound connections to remote ports on the source and inbound connections to local ports on + the target. + +Tip for reading the table: For example, on the computer where Netwrix Auditor Server resides +(source), allow outbound connections to remote 139 TCP port. On monitored computers (target), allow +inbound connections to local 139 TCP port. + +| Port | Protocol | Source | Target | Purpose | +| -------------------------- | -------- | ------------------------------------------------------------------------------ | ---------------------- | ------------------------------------------------------------------------------------------------------------------- | +| 139 445 | TCP | Netwrix Auditor Server | Monitored computer | Service Control Manager Remote Protocol (RPC) Remote registry | +| 135 + Dynamic: 1024 -65535 | TCP | Netwrix Auditor Server | Monitored computer | Windows Management Instrumentation Collect objects | +| 135 + Dynamic: 1024 -65535 | TCP | Netwrix Auditor Server | Monitored computer | Collect removable storage insertions. Allow the following process to use the port: %systemroot%\system32\plasrv.exe | +| 135 | TCP | Netwrix Auditor Server | Monitored computer | Service Control Manager Remote Protocol (RPC) Core Service installation | +| 137 through 139 | UDP | Netwrix Auditor Server | Monitored computer | Service Control Manager Remote Protocol (RPC) Core Service installation | +| 445 | TCP | Netwrix Auditor Server | Monitored computer | SMB 2.0/3.0 | +| 9011 | TCP | Computers where Netwrix Auditor for Windows Server Compression Services reside | Netwrix Auditor Server | Network traffic compression and interaction with services | + +## Configure Windows Firewall Inbound Connection Rules + +You can also configure Windows Firewall settings through Group Policy settings. To do this, edit the +GPO affecting your firewall settings. Navigate to Computer Configuration > Administrative +Templates > Network >Network Connections > Windows Firewall, select Domain Profile or Standard +Profile. Then, enable the Allow inbound remote administration exception. + +**Step 1 –** On each audited server, navigate to **Start** > **Control Panel** and select **Windows +Firewall**. + +**Step 2 –** In the Help Protect your computer with Windows Firewall page, click **Advanced +settings** on the left. + +**Step 3 –** In the Windows Firewall with Advanced Security dialog, select **Inbound Rules** on the +left. + +![manualconfig_nla_inbound_connections2016](/images/1secure/configuration/logonactivity/manualconfig_nla_inbound_connections2016.webp) + +**Step 4 –** Enable the following inbound connection rules: + +- Remote Event Log Management (NP-In) +- Remote Event Log Management (RPC) +- Remote Event Log Management (RPC-EPMAP) +- Windows Management Instrumentation (ASync-In) +- Windows Management Instrumentation (DCOM-In) +- Windows Management Instrumentation (WMI-In) +- Network Discovery (NB-Name-In) +- File and Printer Sharing (NB-Name-In) +- File and Printer Sharing (Echo Request - ICMPv4-In) +- File and Printer Sharing (Echo Request - ICMPv6-In) +- Remote Service Management (NP-In) +- Remote Service Management (RPC) +- Performance Logs and Alerts (DCOM-In) +- Performance Logs and Alerts (Tcp-In) + +If you plan to audit Windows Server 2019 or Windows 10 Update 1803 without network compression +service, make sure the following inbound connection rules are enabled: + +- Remote Scheduled Tasks Management (RPC) +- Remote Scheduled Tasks Management (RPC-EMAP) diff --git a/docs/auditor/10.8/configuration/windowsserver/registrykey.md b/docs/auditor/10.8/configuration/windowsserver/registrykey.md new file mode 100644 index 0000000000..ea0538b4eb --- /dev/null +++ b/docs/auditor/10.8/configuration/windowsserver/registrykey.md @@ -0,0 +1,35 @@ +--- +title: "Windows Server Registry Keys" +description: "Windows Server Registry Keys" +sidebar_position: 110 +--- + +# Windows Server Registry Keys + +Review the basic registry keys that you may need to configure for monitoring Windows Server with +Netwrix Auditor. Navigate to Start → Run and type _"regedit"_. + +| Registry key (REG_DWORD type) | Description / Value | +| -------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Netwrix Auditor\Windows Server Change Reporter | | +| CleanAutoBackupLogs | Defines the retention period for the security log backups:
  • 0—Backups are never deleted from Domain controllers
  • [X]— Backups are deleted after [X] hours
| +| ProcessBackupLogs | Defines whether to process security log backups:
  • 0—No
  • 1—Yes Even if this key is set to _"0"_, the security log backups will not be deleted regardless of the value of the CleanAutoBackupLogs key.
| + + +## Event Log + +Review the basic registry keys that you may need to configure for monitoring event logs with Netwrix +Auditor. Navigate to Start → Run and type _"regedit"_. + +| Registry key (REG_DWORD type) | Description / Value | +| ------------------------------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\Netwrix Auditor\Event Log Manager\\Database Settings | | +| ConnectionTimeout | Defines SQL database connection timeout (in seconds). | +| BatchTimeOut | Defines batch writing timeout (in seconds). | +| DeadLockErrorCount | Defines the number of write attempts to a SQL database. | +| HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\Netwrix Auditor\Event Log Manager | | +| CleanAutoBackupLogs | Defines the retention period for the security log backups:
  • 0—Backups are never deleted from Domain controllers
  • [X]— Backups are deleted after [X] hours
| +| ProcessBackupLogs | Defines whether to process security log backups:
  • 0—No
  • 1—Yes Even if this key is set to _"0"_, the security log backups will not be deleted regardless of the value of the CleanAutoBackupLogs key.
| +| WriteAgentsToApplicationLog | Defines whether to write the events produced by the Netwrix Auditor Event Log Compression Service to the Application Log of a monitored machine:
  • 0—Disabled
  • 1—Enabled
| +| WriteToApplicationLog | Defines whether to write events produced by Netwrix Auditor to the Application Log of the machine where the product is installed:
  • 0—No
  • 1—Yes
| + diff --git a/docs/auditor/10.8/configuration/windowsserver/remoteregistry.md b/docs/auditor/10.8/configuration/windowsserver/remoteregistry.md new file mode 100644 index 0000000000..18b0e50980 --- /dev/null +++ b/docs/auditor/10.8/configuration/windowsserver/remoteregistry.md @@ -0,0 +1,28 @@ +--- +title: "Enable Remote Registry and Windows Management Instrumentation Services" +description: "Enable Remote Registry and Windows Management Instrumentation Services" +sidebar_position: 20 +--- + +# Enable Remote Registry and Windows Management Instrumentation Services + +Follow the steps to enable the Remote Registry service. + +**Step 1 –** Navigate to Start > Windows Administrative Tools > Services. + +![Services Console](/images/1secure/configuration/computer/manualconfig_genevents_remoteregistry2016.webp) + +**Step 2 –** In the Services window, locate the Remote Registry service, right-click it and select +**Properties**. + +**Step 3 –** In the Remote Registry Properties dialog box, make sure the Startup type parameter is +set to _Automatic_ and click **Start**. + +![Remote Registry Properties dialog box](/images/1secure/configuration/computer/manualconfig_genevents_remoteregistry_start2016.webp) + +**Step 4 –** In the Services window, ensure that the Remote Registry service has the _Running_ +status on Windows Server 2012 and above. + +**NOTE:** The Remote Registry service should be enabled on the target server. + +5. Locate the Windows Management Instrumentation service and repeat these steps. diff --git a/docs/auditor/10.8/configuration/windowsserver/removablestorage.md b/docs/auditor/10.8/configuration/windowsserver/removablestorage.md new file mode 100644 index 0000000000..b5715dd8c6 --- /dev/null +++ b/docs/auditor/10.8/configuration/windowsserver/removablestorage.md @@ -0,0 +1,110 @@ +--- +title: "Configure Removable Storage Media for Monitoring" +description: "Configure Removable Storage Media for Monitoring" +sidebar_position: 80 +--- + +# Configure Removable Storage Media for Monitoring + +You can configure IT infrastructure for monitoring removable storage media both locally and +remotely. + +Review the following: + +To configure removable storage media monitoring on the local server + +1. On the target server, create the following catalog: _“%ALLUSERSPROFILE%\Netwrix Auditor\Windows + Server Audit\ETS\”_ to store event logs. To review Event Trace Session objects' configurationhow + to modify the root directory. + + If you do not want to use the Netwrix Auditor for Windows Server Compression Service for data + collection, make sure that this path is readable via any shared resource. + + After environment variable substitution, the path shall be as follows: + + `C:\ProgramData\Netwrix Auditor\Windows Server Audit\ETS` + + If your environment variable accesses another directory, update the path. + +2. Run the Command Prompt as Administrator. +3. Execute the commands below. + + - To create the Event Trace Session object: + + `logman import -n "Session\NetwrixAuditorForWindowsServer" -xml ""` + + - To start the Event Trace Session object automatically every time the server starts: + + `logman import -n "AutoSession\NetwrixAuditorForWindowsServer" -xml ""` + + where: + + - `NetwrixAuditorForWindowsServer`—Fixed name the product uses to identify the Event Trace + Session object. The name cannot be changed. + - ``—Path to the Event Trace Session + template file that comes with Netwrix Auditor. The default path is _"C:\Program Files + (x86)\Netwrix Auditor\Windows Server Auditing\EventTraceSessionTemplate.xml"_. + +To configure removable storage media monitoring remotely + +1. On the target server, create the following catalog: _“%ALLUSERSPROFILE%\Netwrix Auditor\Windows + Server Audit\ETS\”_ to write data to. To review Event Trace Session objects' configurationhow to + modify the root directory. + + If you do not want to use the Netwrix Auditor for Windows Server Compression Service for data + collection, make sure that this path is readable via any shared resource. + + After environment variable substitution, the path shall be as follows: + + `\\\c$\ProgramData\Netwrix Auditor\Windows Server Audit\ETS` + + If your environment variable accesses another directory, update the path. + +2. Run the Command Prompt under the target server Administrator's account. +3. Execute the commands below. + + - To create the Event Trace Session object: + + `logman import -n "Session\NetwrixAuditorForWindowsServer" -xml "" -s ` + + - To create the Event Trace Session object automatically every time the server starts: + + `logman import -n "AutoSession\NetwrixAuditorForWindowsServer" -xml "" -s ` + + where: + + - `NetwrixAuditorForWindowsServer`—Fixed name the product uses to identify the Event Trace + Session object. The name cannot be changed. + - ``—Path to the Event Trace Session + template file that comes with Netwrix Auditor. The default path is _"C:\Program Files + (x86)\Netwrix Auditor\Windows Server Auditing\EventTraceSessionTemplate.xml"_. + - ``—Name of the target server. Provide a server name by entering its + FQDN, NETBIOS or IPv4 address. + +To review Event Trace Session objects' configuration + +An Administrator can only modify the root directory and log file name. Other configurations are not +supported by Netwrix Auditor. + +1. On the target server, navigate to Start → Administrative Tools → Performance Monitor. +2. In the Performance Monitor snap-in, navigate to Performance → Data Collectors Set → Event Trace + Sessions. +3. Stop the NetwrixAuditorForWindowsServer object. +4. Locate the NetwrixAuditorForWindowsServer object, right-click it and select Properties. Complete + the following fields: + + | Option | Description | + | -------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | + | Directory → Root Directory | Path to the directory where event log is stored. If you want to change root directory, do the following: 1. Under the Root directory option, click Browse and select a new root directory. 2. Navigate to _C:\ProgramData\Netwrix Auditor\Windows Server Audit_ and copy the ETS folder to a new location. | + | File → Log file name | Name of the event log where the events will be stored. | + +5. Start the NetwrixAuditorForWindowsServer object. +6. In the Performance Monitor snap-in, navigate to Performance → Data Collectors Set → Startup Event + Trace Sessions. +7. Locate the NetwrixAuditorForWindowsServer object, right-click it and select Properties. Complete + the following fields: + + | Option | Description | + | -------------------------- | ------------------------------------------------------------------------------------------------------------------------------- | + | Directory → Root Directory | Path to the directory where event log is stored. Under the Root directory option, click Browse and select a new root directory. | + | File → Log file name | Name of the event log where the events will be stored. | diff --git a/docs/auditor/10.8/configuration/windowsserver/windowsregistry.md b/docs/auditor/10.8/configuration/windowsserver/windowsregistry.md new file mode 100644 index 0000000000..02bbace08b --- /dev/null +++ b/docs/auditor/10.8/configuration/windowsserver/windowsregistry.md @@ -0,0 +1,87 @@ +--- +title: "Configure Windows Registry Audit Settings" +description: "Configure Windows Registry Audit Settings" +sidebar_position: 30 +--- + +# Configure Windows Registry Audit Settings + +Windows Registry audit permissions must be configured on each Windows server you want to audit so +that the “Who” and “When” values are reported correctly for each change. For test environment, PoC +or evaluation you can use automatic audit configuration. If you want to configure Windows Registry +manually, follow the instructions below. + +The following audit permissions must be set to _"Successful"_ for the +`HKEY_LOCAL_MACHINE\SOFTWARE and HKEY_LOCAL_MACHINE\SYSTEM` keys: + +- Set Value +- Create Subkey +- Delete +- Write DAC +- Write Owner + +Perform one of the following procedures depending on the OS version: + +- Configuring Windows registry audit settings on pre-Windows Server 2012 versions +- Configuring Windows registry audit settings on Windows Server 2012 and above + +## Configuring Windows registry audit settings on pre-Windows Server 2012 versions + +**Step 1 –** On your target server, open **Registry Editor**: navigate to **Start → Run** and type +_"regedit"_. + +**Step 2 –** In the registry tree, expand the **HKEY_LOCAL_MACHINE** key, right-click **SOFTWARE** +and select **Permissions** from the pop-up menu. + +**Step 3 –** In the **Permissions for SOFTWARE** dialog, click **Advanced**. + +**Step 4 –** In the **Advanced Security Settings for SOFTWARE** dialog, select the **Auditing** tab +and click **Add**. + +**Step 5 –** Select the **Everyone** group. + +**Step 6 –** In the **Auditing Entry for SOFTWARE** dialog, select _"Successful"_ for the following +access types: + +- **Set Value** +- **Create Subkey** +- **Delete** +- **Write DAC** +- **Write Owner** + +![ManualConfig_WS_AuditingEntry2008](/images/auditor/10.7/configuration/windowsserver/manualconfig_ws_auditenrty2008.webp) + +Repeat the same steps for the `HKEY_LOCAL_MACHINE\SYSTEM` key. + +## Configuring Windows registry audit settings on Windows Server 2012 and above + +**Step 1 –** On your target server, open **Registry Editor**: navigate to **Start → Run** and type +_"regedit"_. + +**Step 2 –** In the registry tree, expand the **HKEY_LOCAL_MACHINE** key, right-click **SOFTWARE** +and select **Permissions** from the pop-up menu. + +**Step 3 –** In the **Permissions for SOFTWARE** dialog, click **Advanced**. + +**Step 4 –** In the **Advanced Security Settings for SOFTWARE** dialog, select the **Auditing** tab +and click **Add**. + +**Step 5 –** Click **Select a principal link** and specify the **Everyone** group in the **Enter the +object name to select** field. + +**Step 6 –** Set **Type** to _"Success"_ and **Applies to** to _"This key and subkeys_. + +**Step 7 –** Click **Show advanced permissions** and select the following access types: + +- Set Value +- Create Subkey +- Delete +- Write DAC +- Write Owner + +![Config_WS_AuditingEntry_2016](/images/auditor/10.7/configuration/windowsserver/manualconfig_ws_auditenrty_2016.webp) + +Repeat the same steps for the `HKEY_LOCAL_MACHINE\SYSTEM` key. + +Using Group Policy for configuring registry audit is not recommended, as registry DACL settings may +be lost. diff --git a/docs/auditor/10.8/index.md b/docs/auditor/10.8/index.md new file mode 100644 index 0000000000..6aa09207fe --- /dev/null +++ b/docs/auditor/10.8/index.md @@ -0,0 +1,47 @@ +--- +title: "Netwrix Auditor v10.8 Documentation" +description: "Netwrix Auditor v10.8 Documentation" +sidebar_position: 1 +--- + +# Netwrix Auditor v10.8 Documentation + +Netwrix Auditor is a visibility platform for user behavior analysis and risk mitigation that enables +control over changes, configurations and access in hybrid IT environments to protect data regardless +of its location. The platform provides security analytics to detect anomalies in user behavior and +investigate threat patterns before a data breach occurs. + +Netwrix Auditor includes applications for: + +- Active Directory +- Active Directory Federation Services +- Microsoft Entra ID +- Exchange +- Microsoft 365 +- Windows file servers +- Dell Data Storage devices +- NetApp filer appliances +- Nutanix Files +- Azure Files +- Network Devices +- SharePoint +- Oracle Database +- SQL Server +- VMware +- Windows Server +- User Activity + +Empowered with a RESTful API, the platform delivers visibility and control across all of your +on-premises or cloud-based IT systems in a unified way. + +Major benefits: + +- Detect insider threats on premises and in the cloud +- Pass compliance audits with less effort and expense +- Increase productivity of IT security and operations teams + +To learn how Netwrix Auditor can help you achieve your specific business objectives, refer to the +[Netwrix Auditor Best Practices Guide](https://helpcenter.netwrix.com/bundle/Auditor_BestPractices_10.0/resource/NetwrixAuditor_BestPractices_10.0.pdf). + +**CAUTION:** To keep your systems safe, Auditor should not be exposed to inbound access from the +internet. diff --git a/docs/auditor/10.8/install/_category_.json b/docs/auditor/10.8/install/_category_.json new file mode 100644 index 0000000000..3351d0ba09 --- /dev/null +++ b/docs/auditor/10.8/install/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Installation", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/install/automatelogin.md b/docs/auditor/10.8/install/automatelogin.md new file mode 100644 index 0000000000..d6de2bf95b --- /dev/null +++ b/docs/auditor/10.8/install/automatelogin.md @@ -0,0 +1,42 @@ +--- +title: "Automate Sign-in to the Client" +description: "Automate Sign-in to the Client" +sidebar_position: 40 +--- + +# Automate Sign-in to the Client + +When you launch Netwrix Auditor client installed on the same machine as Netwrix Auditor server, +connection to that server is established automatically using your current account. However, if you +want to connect to Netwrix Auditor Server installed on another computer, you will be prompted to +specify connection parameters: server name and user credentials. + +To automate the sign-in process, users who need to frequently connect to different Netwrix Auditor +Servers (for example, Managed Service Providers) may configure the product shortcut: when you click +the shortcut, Netwrix Auditor client will display the sign-in window with pre-populated server name +and user name. You will only have to enter password. + +To create a shortcut for automated sign-in: + +1. Navigate to the Netwrix Auditor client installation directory and locate the + AuditIntelligence.exe file (default location is _C:\Program Files (x86)\Netwrix Auditor\Audit + Intelligence\AuditIntelligence.exe)._ +2. Create a shortcut for this executable file. +3. Right-click the created shortcut and select Properties. +4. In the Target field, a path to the executable file will be shown. Add the following parameters to + the end: + + `/s:server_name /u:user_name /specify_creds` + + where: + + - `server_name`—your Netwrix Auditor Server name or IP address. + - `user_name`— Netwrix Auditor user who will log in. + + Example: + + `"C:\Program Files (x86)\Netwrix Auditor\Audit Intelligence\Audit Intelligence.exe" /s:host.corp.local /u:corp\analyst /specify_creds` + +5. Click Apply. + +You can create as many shortcuts with different parameters as needed. diff --git a/docs/auditor/10.8/install/firstlaunch.md b/docs/auditor/10.8/install/firstlaunch.md new file mode 100644 index 0000000000..29495f9382 --- /dev/null +++ b/docs/auditor/10.8/install/firstlaunch.md @@ -0,0 +1,37 @@ +--- +title: "First Launch" +description: "First Launch" +sidebar_position: 30 +--- + +# First Launch + +To start using Netwrix Auditor + +1. Navigate to Start → Netwrix Auditor. +2. Log into the product. + + This step is required if Netwrix Auditor is installed remotely (not on computer that hosts + Netwrix Auditor Server). + + You can configure a single Netwrix Auditor client to work with several Netwrix Auditor Servers. + To switch to another server, reopen the Netwrix Auditor client and provide another host name + (e.g., _rootdc2_, _WKSWin12r2.enterprise.local_). + + For your convenience, the Host field is prepopulated with your computer name. By default, you + can log in with your Windows credentials by simply clicking Connect. Select Use specified + credentials if you want to log in as another user. + + Make sure you have sufficient permissions to access the product. If you cannot log into Netwrix + Auditor with your Windows credentials, contact your Netwrix Auditor administrator. + +After logging into Netwrix Auditor, you will see the following window: + +![welcome_screen_thumb_0_0](/images/auditor/10.7/install/welcome_screen_thumb_0_0.webp) + +Take a closer look at the Home page. It contains everything you need to enable complete visibility +in your environment. + +See next: + +- [Navigation](/docs/auditor/10.7/admin/navigation/overview.md) diff --git a/docs/auditor/10.8/install/overview.md b/docs/auditor/10.8/install/overview.md new file mode 100644 index 0000000000..2840790130 --- /dev/null +++ b/docs/auditor/10.8/install/overview.md @@ -0,0 +1,87 @@ +--- +title: "Installation" +description: "Installation" +sidebar_position: 40 +--- + +# Installation + +This chapter provides step-by-step instructions on how to install Netwrix Auditor and its +Compression Services. Refer to the following sections for detailed information: + +- Install Netwrix Auditor +- Installing Core Services + +It also includes advanced scenarios such as: + +- [Install Client via Group Policy](/docs/auditor/10.7/install/viagrouppolicy.md) +- [Install in Silent Mode](/docs/auditor/10.7/install/silentmode.md) + +## Install Netwrix Auditor + +For instructions on upgrade procedures, refer to [Upgrade to the Latest Version](/docs/auditor/10.7/install/upgrade.md). + +**CAUTION:** To keep your systems safe, Netwrix Auditor should not be exposed to inbound access from +the internet. + +Follow these steps to install Netwrix Auditor + +**Step 1 –** Download Netwrix Auditor 10.7 from +[Netwrix website](https://www.netwrix.com/auditor.html). + +NOTE: Before installing Netwrix Auditor, make sure that the Windows Firewall service is started. If +you use a third-party firewall, see [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md). Also, +you must be a member of the local Administrators group to run the Netwrix Auditor installation. + +**Step 2 –** Unpack the installation package. The following window will be displayed on successful +operation completion: + +![installationscreen](/images/auditor/10.7/install/installationscreen.webp) + +**Step 3 –** Follow the instructions of the setup wizard. When prompted, accept the license +agreement. + +**Step 4 –** On the Select Installation Type step, you will be prompted to select the installation +type: + +- Full installation—Select if you are going to install Netwrix Auditor server and client on the same + machine. In this case the main component called Auditor Server and the Auditor Client will be + installed. +- Client installation—Select if you want to install a UI client to provide access to configuration + and audit data. + +**Step 5 –** On the Destination Folder step, specify the installation folder. + +**Step 6 –** On the Netwrix Customer Experience Program step, you are invited to take part in the +Netwrix Customer Experience Program. It is optional on your part to help Netwrix improve the +quality, reliability, and performance of Netwrix products and services. If you accept, Netwrix +collects statistical information on how the Licensee uses the product in accordance with applicable +law. Select Skip if you do not want to participate in the program. + +You can always opt-out of the Netwrix Customer Experience Program later. See the +[About Netwrix Auditor](/docs/auditor/10.7/admin/settings/about.md) topic for additional information. + +**Step 7 –** Click Install. + +After a successful installation, Auditor shortcut will be added to the **Start** menu and screen and +the product will start. See the [First Launch](/docs/auditor/10.7/install/firstlaunch.md) topic for additional information on +the product navigation. + +![welcome_screen](/images/auditor/10.7/install/welcome_screen.webp) + +Netwrix looks beyond the traditional on-premises installation and provides Auditor for cloud and +virtual environments. For example, you can deploy Auditor on a pre-configured Microsoft Azure +virtual machine or install it as a virtual appliance on your VMware vSphere or Hyper-V +virtualization server. For more information on additional deployment options, visit +[Virtual Appliance page](https://www.netwrix.com/virtual_appliances.html). + +## Installing Core Services + +To audit SharePoint farms and user activity, Netwrix Auditor provides Core Services that must be +installed in the audited environment to collect audit data. Both Core Services can be installed +either automatically when setting up auditing in Netwrix Auditor, or manually. + +Refer to the following sections below for manual installation instructions: + +- [Install for SharePoint Core Service](/docs/auditor/10.7/install/sharepointcoreservice.md) +- [Install for User Activity Core Service](/docs/auditor/10.7/install/useractivitycoreservice.md) diff --git a/docs/auditor/10.8/install/sharepointcoreservice.md b/docs/auditor/10.8/install/sharepointcoreservice.md new file mode 100644 index 0000000000..c50e955651 --- /dev/null +++ b/docs/auditor/10.8/install/sharepointcoreservice.md @@ -0,0 +1,39 @@ +--- +title: "Install for SharePoint Core Service" +description: "Install for SharePoint Core Service" +sidebar_position: 50 +--- + +# Install for SharePoint Core Service + +This section contains instructions on how to install Netwrix Auditor for SharePoint Core Service. + +During the Netwrix Auditor for SharePoint Core Service installation / uninstallation your SharePoint +sites may be unavailable. + +Prior to the Netwrix Auditor for SharePoint Core Service installation, review the following +prerequisites and make sure that: + +- Netwrix Auditor for SharePoint Core Service is going to be installed on the computer that hosts + SharePoint Central Administration in the audited SharePoint farm. +- [.Net Framework 3.5 SP1](http://www.microsoft.com/en-us/download/details.aspx?id=22) is installed + on the computer that hosts SharePoint Central Administration in the audited SharePoint farm. +- The SharePoint Administration (SPAdminV4) service is started on the target computer. See + [SharePoint](/docs/auditor/10.7/configuration/sharepoint/overview.md) for more information. +- The user that is going to run the Core Service installation: + - Is a member of the local Administrators group on SharePoint server, where the Core Service + will be deployed. + - Is granted the SharePoint_Shell_Access role on SharePoint SQL Server configuration database. + See [Permissions for SharePoint Auditing](/docs/auditor/10.7/configuration/sharepoint/permissions.md) topic + for more information. + +Follow the steps to install Netwrix Auditor for SharePoint Core Service manually. + +**Step 1 –** On the computer where Auditor Server resides,navigate to _%Netwrix Auditor installation +folder%\SharePoint Auditing\_\_\SharePointPackage_ and copy SpaPackage\_``.msi to the +computer where Central Administration is installed. + +**Step 2 –** Run the installation package. + +**Step 3 –** Follow the instructions of the setup wizard. When prompted, accept the license +agreement and specify the installation folder. diff --git a/docs/auditor/10.8/install/silentmode.md b/docs/auditor/10.8/install/silentmode.md new file mode 100644 index 0000000000..33a1e56703 --- /dev/null +++ b/docs/auditor/10.8/install/silentmode.md @@ -0,0 +1,31 @@ +--- +title: "Install in Silent Mode" +description: "Install in Silent Mode" +sidebar_position: 20 +--- + +# Install in Silent Mode + +Silent installation provides a convenient method for deploying Netwrix Auditor without UI. + +Follow the steps to install Auditor in a silent mode. + +**Step 1 –** Download the product installation package. + +**Step 2 –** Open the command prompt: navigate to Start > Run and type "_cmd_". + +**Step 3 –** Enter the following command to extract the msi file into the %Temp% folder: + +`Netwrix_Auditor.exe -d%Temp%` + +where %Temp% can be replaced with any folder you want to extract the file to. + +**Step 4 –** Enter the following command: + +`msiexec.exe /i "path to netwrix_auditor_setup.msi" /qn install_all=0` + +| Command Line Option | Description | +| ------------------- | ---------------------------------------------------------------------------------------------------------------------------- | +| `/i` | Run installation. | +| `/q` | Specify the user interface (UI) that displays during installation. You can append other options, such as `n` to hide the UI. | +| `install_all` | Specify components to be installed: - 0—Install the Netwrix Auditor client only. - 1—Full installation | diff --git a/docs/auditor/10.8/install/uninstall.md b/docs/auditor/10.8/install/uninstall.md new file mode 100644 index 0000000000..35bd33dc3a --- /dev/null +++ b/docs/auditor/10.8/install/uninstall.md @@ -0,0 +1,161 @@ +--- +title: "Uninstall Netwrix Auditor" +description: "Uninstall Netwrix Auditor" +sidebar_position: 90 +--- + +# Uninstall Netwrix Auditor + +This topic provides instructions to uninstall Netwrix Auditor. + +**NOTE:** If you enabled network traffic compression for data collection, make sure to disable it +before uninstalling the product. Some network compression services must be removed manually. See the +Uninstall Compression and Core Services topic for additional information. + +Follow the steps to uninstall Auditor. + +**Step 1 –** On the computer where Auditor is installed, navigate to **Start > Control Panel > +Programs and Features**. + +**Step 2 –** Select Netwrix Auditor and click **Uninstall**. + +If you uninstall an instance on Auditor that includes Server part (full installation), all remote +client consoles will become inoperable. + +## Uninstall Compression and Core Services + +Perform the procedures below if you used Compression Services and Core Services for data collection +(i.e., the **Network traffic compression** option was enabled). + +Some Auditor Compression services are stopped but not removed when the product is uninstalled. You +need to delete them manually prior to uninstalling Auditor. + +### Delete Netwrix Auditor for Active Directory Compression Service + +Follow the steps to uninstall the service. + +**Step 1 –** Navigate to the Active Directory monitoring plan you are using. In the command prompt, +execute the following command: + +**Step 2 –** Select your Active Directory data source. + +**Step 3 –** Click **Edit data source** on the right. + +**Step 4 –** Uncheck the **Enable network traffic compression** checkbox. + +**Step 5 –** Remove the network traffic compression service on the domain controller by executing +the following command: + +``` +sc delete adcrsvc +``` + +### Delete Netwrix Auditor for SharePoint Core Service + +Follow the steps to delete the Netwrix Auditor for the SharePoint Core Service. + +**Step 1 –** In the audited SharePoint farm, navigate to the computer where Central Administration +is installed and where the Netwrix Auditor for SharePoint Core Service resides. + +**Step 2 –** Navigate to **Start > Control Panel > Programs and Features**. + +**Step 3 –** Select the Netwrix Auditor **for SharePoint Core Service** and click Uninstall. + +**CAUTION:** Once you click Uninstall you cannot cancel the uninstallation. The Netwrix Auditor +**for SharePoint Core Service** will be uninstalled even if you click Cancel. + +### Delete Netwrix Auditor for Windows Server Compression Service + +**NOTE:** Perform this procedure only if you enabled the Compression Service for data collection. + +Follow the steps to delete the Netwrix Auditor for Windows Server Compression Service. + +**Step 1 –** On the target servers, navigate to **Start > Control Panel > Programs and Features**. + +**Step 2 –** Select **Netwrix Auditor for Windows Server** **Compression Service** and click +**Uninstall**. + +### Delete Netwrix Auditor Mailbox Access Core Service + +Follow the steps to delete a Netwrix Auditor Mailbox Access Core Service. + +**Step 1 –** In the command prompt, execute the following command: + +``` +sc delete "Netwrix Auditor Mailbox Access Core Service" +``` + +**Step 2 –** Remove the following folder: _%SYSTEMROOT%\Netwrix Auditor\Netwrix Auditor Mailbox +Access Core Service_ + +If any argument contains spaces, use double quotes. + +### Delete Netwrix Auditor User Activity Core Service + +Follow the steps to remove the Core Service via Auditor client on the computer where the Auditor +Server resides: + +**Step 1 –** In Auditor client, navigate to All **monitoring plans** and specify the plan. + +**Step 2 –** In the right pane, select the **Items** tab. + +**Step 3 –** Select a computer in the list and click **Remove**. The Netwrix Auditor **User Activity +Core Service** will be deleted from the selected computer. Perform this action with other computers. + +**Step 4 –** In the left pane navigate to **All monitoring plans >\_\_**User Activity monitoring +plan > Monitored Computers.\_\_ Make sure that the computers you have removed from auditing are no +longer present in the list. + +**Step 5 –** In case some computers are still present in the list, select them one by one and click +**Retry Uninstallation**. If this does not help, remove the Core Services manually from the target +computers through **Programs and Features**. + +Remove the Netwrix Auditor User Activity Core Service manually on each audited computer: + +**Step 1 –** Navigate to **Start > Control Panel > Programs and Features**. + +**Step 2 –** Select the **Netwrix Auditor User Activity** **Core Service** and click **Uninstall**. + +### Delete the Netwrix Auditor Application Deployment Service + +The Netwrix Auditor **Application Deployment Service** allows collecting file events and data. The +service runs on the target servers. + +**NOTE:** Perform this procedure only if you enabled the Network traffic compression option for +Windows File Servers data collection. + +Follow the steps to delete the Netwrix Auditor Application Deployment Service. + +**Step 1 –** On the target server, navigate to **Start > Registry Editor > Programs and Features**. + +**Step 2 –** Delete the **HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NwxExecSvc** registry +key. + +**Step 3 –** Restart your machine and the service will be removed. + +### Delete Netwrix Auditor for File Servers Compression Service + +The Netwrix Auditor for File Servers Compression Service runs on the Auditor Server host as +designed. + +**NOTE:** This is applicable for NetApp and Dell Data Storage sources. Delete the service +irrespective of the Network traffic compression option for Dell Isilon source. + +Follow the steps to delete the Netwrix Auditor for File Servers Compression Service. + +**Step 1 –** On the computer where AuditorServer resides, navigate to **Start > Control Panel > +Programs and Features**. + +**Step 2 –** Select Netwrix Auditor**for File Servers Compression Service** and click **Uninstall**. + +**NOTE:** This is applicable to NetApp and Dell Data Storage only if the service was installed on +the Auditor Server. For a Windows File Server, the service is the Netwrix Auditor Application +Deployment Service and runs on the File Server directly. + +### Delete the Netwrix Auditor Event Log Compression Service + +Follow the steps to delete the Netwrix Auditor Event Log Compression Service. + +**Step 1 –** Navigate to **Start > Control Panel > Programs and Features**. + +**Step 2 –** Select **Netwrix Auditor Event Log Compression** > **Service** and click **Uninstall**. diff --git a/docs/auditor/10.8/install/upgrade.md b/docs/auditor/10.8/install/upgrade.md new file mode 100644 index 0000000000..dbbc178696 --- /dev/null +++ b/docs/auditor/10.8/install/upgrade.md @@ -0,0 +1,140 @@ +--- +title: "Upgrade to the Latest Version" +description: "Upgrade to the Latest Version" +sidebar_position: 80 +--- + +# Upgrade to the Latest Version + +Netwrix recommends that you upgrade from the older versions of Netwrix Auditor to the latest version +available to take advantage of the new features. + +Seamless upgrade to Netwrix Auditor 10.7 is supported for versions 10.6 and 10.5. + +If you use an earlier version of Netwrix Auditor, then you need to upgrade sequentially right to +version 10.7. See the following Netwrix knowledge base article for more information: +[Upgrade Increments for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA00g000000H9eJCAS.html). + +## Before Starting the Upgrade + +Before you start the upgrade, it is strongly recommended taking the following preparatory steps. + +**Step 1 –** Upgrade Netwrix Auditor Server OS to the supported version before upgrading Netwrix +Auditor itself. + +**Step 2 –** Check that the account under which you plan to run Netwrix Auditor setup has the local +Administrator rights. + +**Step 3 –** Back up Netwrix databases. This includes all Audit databases, Integration API database, +and others, which have default names starting with "Netwrix". To do so: + +1. Start Microsoft SQL Server Management Studio and connect to SQL Server instance hosting these + databases. +2. In Object Explorer, right-click each Netwrix database and select Tasks > Back Up. +3. Wait for the process to complete. + +**Step 4 –** Back up the Long-Term Archive folder, by default located at _C:\ProgramData\Netwrix +Auditor\Data_. You can copy and archive this folder manually, or use your preferred backup routine. + +**Step 5 –** If you can capture a snapshot of the server where Netwrix Auditor Server resides, +Netwrix recommends doing so. + +**Step 6 –** Finally, close the Netwrix Auditor console. + +### General Considerations and Known Issues + +During the seamless upgrade from previous versions, Netwrix Auditor preserves its configuration, so +you will be able to continue auditing right after finishing the upgrade. However, there are some +considerations you should examine - they refer to the upgrade process and post-upgrade product +operation. The issues listed below apply to upgrade from 9.96 and 10. + +- After the upgrade you may receive temporary data collection errors – they occur when the program + tries to upload collected data to the Audit Database before the database upgrade is finished. +- Microsoft Exchange Server 2010 is no longer supported. Please upgrade your Exchange Server to a + new version. +- For Netwrix Auditor for SharePoint Online, the following data will be available within 24 hours + after upgrade: + + - Current values for SharePoint Online risk metrics (Office 365) + - Data in the Objects Shared with External or Anonymous Users state-in-time report + - Numbers of shared objects and drill downs to reports in the SharePoint Online Site Collections + External Sharing state-in-time report. + +- For auditing cloud-based applications (Microsoft Entra ID, Exhange Online, SharePoint Online, and + MS Teams) with Netwrix Auditor using basic authentication: before an upgrade from version 10.0 and + earlier, make sure that the account under which the upgrade will be performed has sufficient + rights and permissions to perform initial data collection and upgrade. Review the following for + more information about required rights and permissions: + + - [Permissions for Microsoft Entra ID Auditing](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/permissions.md) + - [Permissions for Exchange Online Auditing](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/permissions.md) + - [Permissions for SharePoint Online Auditing ](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/permissions/permissions.md) + - [Permissions for Teams Auditing](/docs/auditor/10.7/configuration/microsoft365/teams/permissions/permissions.md) + +- For auditing cloud-based applications (Microsoft Entra ID, Exchange Online, SharePoint Online, and + MS Teams) with Netwrix Auditor using modern authentication: additional configuration of the Azure + AD app permissions is required. Review the following for more information about required rights + and permissions: + + - [Permissions for Microsoft Entra ID Auditing](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/permissions.md) + - [Permissions for Exchange Online Auditing](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/permissions.md) + - [Permissions for SharePoint Online Auditing ](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/permissions/permissions.md) + - [Permissions for Teams Auditing](/docs/auditor/10.7/configuration/microsoft365/teams/permissions/permissions.md) + +- Netwrix Auditor for Oracle Database. If you use the following combination of the audit settings: + Mixed Mode + Fine Grained Auditing, please check your configuration. You may need to re-configure + your audit since the Oracle Database data collection mechanism was changed. See the + [Supported Data Sources](/docs/auditor/10.7/requirements/supporteddatasources/supporteddatasources.md) and + [Verify Your Oracle Database Audit Settings](/docs/auditor/10.7/configuration/oracle/verifysettings.md) topics for + additional information. +- During the initial data collection, the product automatically upgrades services responsible for + Windows Server and SharePoint network traffic compression. Consider the following: + + - During the Netwrix Auditor for SharePoint Core Service upgrade, your SharePoint sites will be + temporarily unavailable. The duration of the upgrade depends on your SharePoint Farms size and + usually it takes a few minutes. For bigger SharePoint farms, consider up to 10 minutes for a + successful service upgrade and the same for the rollback in case of an upgrade failure. + - During the Netwrix Auditor for Windows Server Compression Service upgrade you may see the + following errors: _"The Compression Service has encountered an internal error: Unable to + update the Compression Service on the following server: ``"_. Ignore these errors + and wait up to one hour for the upgrade completes. + +- For the User Password Changes report to function properly after the upgrade, you need to comment + out or delete the "\*._PasswordChanged_" line in the omitproplist.txt file. +- For Exchange Online, the "_Who_" field in search, reports, Activity Summary emails, etc., shows + User Principal Name (UPN) instead of Display Name. +- For Windows Server Auditing and User Activity Video Recording data sources .NET 4.8 needs to be + installed on the Netwrix Auditor server and target servers. + +## Upgrade Procedure + +You can upgrade Netwrix Auditor to 10.7 by running the installation package. + +Customers who are logged in to the Netwrix Customer Portal can download the latest version of their +software products from the My Products page: +[https://www.netwrix.com/my_products.html](https://www.netwrix.com/my_products.html). See the +[Customer Portal Access](https://helpcenter.netwrix.com/bundle/NetwrixCustomerPortalAccess/page/Customer_Portal_Access.html) +topic for information on how to register for a Customer Portal account. + +Partners and MSPs who are logged into the Netwrix Partner Portal can download the latest version of +their software products from the My Product page: +[https://www.netwrix.com/par/site/products](https://www.netwrix.com/my_products.html). To receive an +invitation to the Partner Portal, please contact +[netwrix.msp@netwrix.com](http://netwrix.msp@netwrix.com/). + +Follow the steps to perform the upgrade. + +**Step 1 –** Make sure you have completed the preparatory steps above. + +**Step 2 –** Run the setup on the computer where the Auditor  Server resides. See the +[Installation](/docs/auditor/10.7/install/overview.md) topic for additional information. + +**Step 3 –** If you have a client-server deployment, then after upgrading the server run the setup +on all remote machines where the Auditor Client resides. + +Netwrix recommends reviewing your current port configuration after every re-installation or upgrade. + +If you were auditing Windows Server or SharePoint server/farm, and the corresponding Core Services +were installed automatically according to the monitoring plan settings, then they will be upgraded +automatically during the initial data collection. During the Netwrix Auditor for SharePoint Core +Service upgrade, your SharePoint sites will be temporarily unavailable. diff --git a/docs/auditor/10.8/install/useractivitycoreservice.md b/docs/auditor/10.8/install/useractivitycoreservice.md new file mode 100644 index 0000000000..7bcfb0a400 --- /dev/null +++ b/docs/auditor/10.8/install/useractivitycoreservice.md @@ -0,0 +1,43 @@ +--- +title: "Install for User Activity Core Service" +description: "Install for User Activity Core Service" +sidebar_position: 60 +--- + +# Install for User Activity Core Service + +By default, the Core Service is installed automatically on the audited computers when setting up +auditing in Netwrix Auditor. If, for some reason, installation has failed, you must install the Core +Service manually on each audited computer. + +Follow the steps to install Netwrix Auditor User Activity Core Service. + +**Step 1 –** On the computer where Auditor Server resides, navigate to _%ProgramFiles% (x86)\Netwrix +Auditor\User Activity Video Recording_ and copy the UACoreSvcSetup.msi file to the audited computer. + +**Step 2 –** Run the installation package. + +**Step 3 –** Follow the instructions of the setup wizard. When prompted, accept the license +agreement and specify the installation folder. + +**Step 4 –** On the Core Service Settings page, specify the host server (i.e., the name of the +computer where Netwrix Auditor is installed) and the server TCP port. + +## Install User Activity Core Service with the Command Prompt + +Follow the steps to perform a silent installation of the User Activity Core Service with the command +prompt. + +**Step 1 –** On the computer where Auditor Server resides,, navigate to _%ProgramFiles% +(x86)\Netwrix Auditor\User Activity Video Recording_ and copy the **UACoreSvcSetup.msi** file to the +audited computer or to a file share the target server(s) can access. + +**Step 2 –** Run the following commands on target servers: + +- `CD %PathToInstaller%` +- `msiexec.exe /i "UACoreSvcSetup.msi" ALLUSERS=1 /qn /norestart /log output.log UAVR_SERVERNAME=%NAServer% UAVR_SERVERPORT=9004` + +**Step 3 –** Replace _%PathToInstaller%_ with the path to the folder you copied the +**UACoreSvcSetup.msi** file. + +**Step 4 –** Replace _%NAServer%_ with the name of your Netwrix Auditor server. diff --git a/docs/auditor/10.8/install/viagrouppolicy.md b/docs/auditor/10.8/install/viagrouppolicy.md new file mode 100644 index 0000000000..57f2f3e7fc --- /dev/null +++ b/docs/auditor/10.8/install/viagrouppolicy.md @@ -0,0 +1,82 @@ +--- +title: "Install Client via Group Policy" +description: "Install Client via Group Policy" +sidebar_position: 10 +--- + +# Install Client via Group Policy + +The Netwrix Auditor client can be deployed on multiple computers via Group Policy. This can be +helpful if you want to grant access to configuration and audit data to a significant number of +employees and, therefore, have to run Netwrix Auditor installation on multiple computers. + +If installing via Group Policy, make sure to deploy Netwrix Auditor client and Netwrix Auditor +server on different machines. If both components are installed on the same machine, you may +experience issues with future upgrades. + +To run the Netwrix Auditor installation, you must be a member of the local Administrators group. + +## Extract MSI File + +1. Download the product installation package. +2. Open the command prompt: navigate to Start → Run and type "_cmd_". +3. Enter the following command to extract the msi file into %Temp% folder: + + `Netwrix_Auditor.exe -d%Temp%` + + where %Temp% can be replaced with any folder you want to extract the file to. + +4. Navigate to this directory and locate Netwrix_Auditor_client.msi. + +## Create and Distribute Installation Package + +1. Create a shared folder that will be used for distributing the installation package. + + Make sure that the folder is accessible from computers where the Netwrix Auditor clients are + going to be deployed. You must grant the Read permissions on this folder to these computer + accounts. + +2. Copy Netwrix_Auditor_client.msi to the shared folder. + +## Create a Group Policy to Deploy Netwrix Auditor + +It is recommended to create a dedicated organizational unit using Active Directory Users and +Computers and add computers where you want to deploy the Netwrix Auditor client. + +Follow the steps to create a Group Policy + +**Step 1 –** Open the **Group Policy Management** console on any domain controller in the target +domain: navigate to Start > Windows Administrative Tools (Windows Server 2016 and higher) or +Administrative Tools (Windows 2012) **Group Policy Management.** + +**Step 2 –** In the left pane, navigate to **Forest: `` → Domain →** **``, +right-click ``** and select **Create a GPO in this domain and Link it here**. + +![winserver2016_ou_gpo_for_deploy](/images/auditor/10.7/install/winserver2016_ou_gpo_for_deploy.webp) + +**Step 3 –** Right-click the newly created GPO and select **Edit** from the pop-up menu. + +**Step 4 –** In the Group Policy Management Editor dialog, expand the **Computer Configuration** +node on the left and navigate to **Policies → Software Settings → Software installation.** + +**Step 5 –** In the right page, right-click and select New → Package. + +**Step 6 –** In the dialog that opens, locate Netwrix_Auditor_client.msi and click Open. + +**Step 7 –** In the Deploy Software dialog, select Advanced. + +![add_msi](/images/auditor/10.7/install/add_msi.webp) + +**Step 8 –** In the Netwrix Auditor Properties dialog, select the Deployment tab and click Advanced. + +**Step 9 –** In the Advanced Deployment Options dialog, select the Ignore language when deploying +this package checkbox. + +![winserver2016_advanced_deployment_options](/images/auditor/10.7/install/winserver2016_advanced_deployment_options.webp) + +**Step 10 –** Close the Netwrix Auditor Properties dialog. + +**Step 11 –** Reboot computers where you want to deploy the Netwrix Auditor client. + +The product will be automatically installed on computers affected by the newly created Group Policy +after reboot. diff --git a/docs/auditor/10.8/install/virtualappliance/_category_.json b/docs/auditor/10.8/install/virtualappliance/_category_.json new file mode 100644 index 0000000000..57e15f3b32 --- /dev/null +++ b/docs/auditor/10.8/install/virtualappliance/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Virtual Deployment Overview", + "position": 70, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/install/virtualappliance/configure.md b/docs/auditor/10.8/install/virtualappliance/configure.md new file mode 100644 index 0000000000..a8bacdb7e8 --- /dev/null +++ b/docs/auditor/10.8/install/virtualappliance/configure.md @@ -0,0 +1,60 @@ +--- +title: "Configure Virtual Appliance" +description: "Configure Virtual Appliance" +sidebar_position: 30 +--- + +# Configure Virtual Appliance + +Perform the following steps to configure your virtual appliance: + +**Step 1 –** For **Windows Server**, the EULA will be displayed in the License terms page; read and +accept the agreement. + +**Step 2 –** Next, specify a password for the built-in administrator account. Then re-enter your +password. Click Finish. + +**Step 3 –** Log in to the virtual machine. + +**Step 4 –** The Windows PowerShell opens and automatically runs the script. Press any key to read +the license agreement and then press `Y` to accept it. + +**Step 5 –** Then you will be prompted to configure the virtual machine. Press Enter to start. + +| Step | Description | +| ---------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Rename virtual machine | Specify a new name for the virtual machine (e.g., _`NA-Server`_). The computer name must be properly formatted. It may contain letters (a-z, A-Z), numbers (0-9), and hyphens (-), but no spaces and periods (.). The name may not consist entirely of digits and may not be longer than 15 characters. | +| Add additional input languages | Select `Y` if you want to specify additional input languages. Select `N` to proceed with English. | +| Configure network | - Select `Y` to use DHCP server to configure network settings automatically. - Select `N` to configure required parameters manually. In this case, you will be prompted to set up IP settings manually. | +| Join computer to the domain or workgroup | **To join a domain** Select `Y`. Specify the fully qualified domain name to join (e.g., `corp.local`). Then specify domain administrator name and password. For your convenience, the account specified will be added to the local Administrators group and set as account for collecting data from the target systems. Domain Users group will be removed from the local Users group after the machine with the appliance joins the domain. The script is starting to test your domain controller: by NETBIOS name first, then by DNS name and finally, using an IP address. If at least one of the tests is successful, the computer will be added to a domain. In case of failure, you will be prompted to do one of the following: - Re-try to joint to the selected domain. In this case, the script uses the DNS name of your domain controller. The name must be resolved. - Continue with Workgroup. See the procedure below on how to join the computer to a workgroup. - Cancel and **Return to Main Menu**. Select if you want to cancel the domain join and re-configure the machine. Press Enter and repeat menu section. You will return to step 5. **To join a workgroup** Select `N`. Specify the local administrator name and credentials. For your convenience, the account specified will be set as account for collecting data from the target systems. Netwrix Auditor is unable to work in a workgroup. Please confirm if you want to proceed. Otherwise, you will not be able to run reviews on data collected by Auditor. See the [Access Reviews](/docs/auditor/10.7/accessreviews/accessreviews.md) topic for additional information about integration with Access Reviews. | +| Configure SQL Server | The shell script automatically configures SQL Server instance. The sysadmin server role on SQL Server instance is granted automatically to the BUILTIN\Administrators group. | + +In the example below, review how the shell script configures the new VM: + +![appliance_script](/images/auditor/10.7/install/virtualappliance/appliance_script.webp) + +**Step 6 –** When the script execution completes, you will be prompted to reboot the virtual machine +for the changes to take effect. + +**Step 7 –** After reboot, log in to the virtual machine using the domain administrator credentials +(for appliances joined to domain) or local administrator credentials (for appliances joined to +workgroup). + +For the first time, Auditor Client starts automatically. Later, you can always run it from the Start +menu or launch it by double-clicking the Auditor shortcut on the desktop. + +Do not close the Virtual Appliance Configuration window until the product configuration completes. + +## What Is Next + +Now you can evaluate Auditor functionality. Review the table below for more information. + +| To... | Run... | Get more info | +| ---------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| - See a list of audit settings - See a list of rights and permissions required for data collecting account | — | - [Supported Data Sources](/docs/auditor/10.7/requirements/supporteddatasources/supporteddatasources.md) - [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) | +| - Create a monitoring plan - Review data collection status - Configure the Long-Term Archive and the Audit Database settings - Assign roles and delegate control | Auditor Client | - [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md) - [Netwrix Auditor Settings](/docs/auditor/10.7/admin/settings/overview.md) - [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) | +| - Browse data with interactive search - Review diagrams - Generate reports - Configure report subscriptions - Create alerts | Auditor Client | - [Reports](/docs/auditor/10.7/admin/reports/overview.md) - [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) - [Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) | +| See the data collected by Auditor | Auditor Client | - [Access Reviews](/docs/auditor/10.7/accessreviews/accessreviews.md) | + +**NOTE:** If any errors occur, please contact +[Netwrix technical support](https://www.netwrix.com/support.html). diff --git a/docs/auditor/10.8/install/virtualappliance/importhyperv.md b/docs/auditor/10.8/install/virtualappliance/importhyperv.md new file mode 100644 index 0000000000..6b81a05edb --- /dev/null +++ b/docs/auditor/10.8/install/virtualappliance/importhyperv.md @@ -0,0 +1,27 @@ +--- +title: "Import Virtual Machine from Image to Hyper-V" +description: "Import Virtual Machine from Image to Hyper-V" +sidebar_position: 20 +--- + +# Import Virtual Machine from Image to Hyper-V + +Perform the following steps to import a virtual machine: + +**Step 1 –** On your Hyper-V server, unzip the virtual appliance package to the specified location. + +**Step 2 –** Navigate to **Start** → **All Apps** → **Hyper-V Manager**. + +**Step 3 –** In the Hyper-V Manager, navigate to **Actions** → **Import virtual machine** and follow +the instructions of the wizard. Review the table below for more information. + +| Step | Description | +| ---------------------- | ---------------------------------------------------------------------- | +| Locate Folder | Browse for the folder that contains extracted virtual appliance. | +| Select Virtual Machine | Select Netwrix Auditor. | +| Choose Import Type | Choose the import type that best suits your needs. | +| Choose Network Type | Select a virtual switch. | +| Summary | Review your virtual machine settings. Click Finish to exit the wizard. | + +The newly created virtual machine named Netwrix Auditor will appear in the list of virtual machines. +Right-click and select Start. diff --git a/docs/auditor/10.8/install/virtualappliance/importvmware.md b/docs/auditor/10.8/install/virtualappliance/importvmware.md new file mode 100644 index 0000000000..6ddfea60ae --- /dev/null +++ b/docs/auditor/10.8/install/virtualappliance/importvmware.md @@ -0,0 +1,46 @@ +--- +title: "Import Virtual Machine from Image to VMware" +description: "Import Virtual Machine from Image to VMware" +sidebar_position: 10 +--- + +# Import Virtual Machine from Image to VMware + +Perform the following steps to import a virtual machine: + +**Step 1 –** Connect to your vSphere infrastructure using vSphere Web client, right-click the object +you need (datacenter, ESXi host, VM folder or resource pool) and select Deploy OVF Template. + +**Step 2 –** If you are running VMware 6.0, connect to vSphere using the on-premises vSphere client +and select File → Deploy OVF Template. + +Follow the instructions in the table below: + +| Step | Description | +| -------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Source | Browse for the folder that contains the Auditor virtual appliance template. | +| OVF Template Details | Review information on this template. | +| Name and Location | Select a name for the new virtual machine (optional; default name is _"Netwrix Auditor"_). The name must be unique within the Inventory folder; it may contain up to 80 characters including spaces. | +| Resource Pool | Select a resource pool to deploy the virtual appliance. | +| Storage | Select the destination storage. | +| Disk Format | To optimize the disk space, it is recommended to select Thin Provision. | +| Network Mapping | If you have multiple networks on your ESXi Server, select the Destination network for a new virtual machine. | +| Ready to Complete | Review your virtual machine settings. Click Finish to complete the wizard. | + +Select the newly created virtual machine and click Power On. + +## Deploy Virtual Appliance to VMware Cloud on AWS + +Perform the following steps to deploy virtual appliance: + +**Step 3 –** Import the NetwrixAuditor.ova file to a Content Library of VMware vSphere, as described +in this VMware article: +[Import Items to a Content Library](https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.vm_admin.doc/GUID-897EEEC2-B378-41A7-B92B-D1159B5F6095.html). + +**Step 4 –** Start the New Virtual Machine… wizard. + +**Step 5 –** On the Select a creation type step, select Deploy from template. + +**Step 6 –** On the Select a template step, select NetwrixAuditor from your ContentLibrary. + +**Step 7 –** Proceed with the wizard: select name and folder, resources and storage for the VM. diff --git a/docs/auditor/10.8/install/virtualappliance/overview.md b/docs/auditor/10.8/install/virtualappliance/overview.md new file mode 100644 index 0000000000..1c0d20c2f0 --- /dev/null +++ b/docs/auditor/10.8/install/virtualappliance/overview.md @@ -0,0 +1,102 @@ +--- +title: "Virtual Deployment Overview" +description: "Virtual Deployment Overview" +sidebar_position: 70 +--- + +# Virtual Deployment Overview + +In addition to on-premises deployment, Netwrix Auditor offers the deployment option that can speed +time-to-value by getting you up and running in less than 15 minutes. + +Virtual appliance — If you run a Microsoft Hyper-V or VMware vSphere, you can deploy Auditor as a +virtual appliance. Virtual appliance is a VM image file with installed Netwrix Auditor. The image is +also configured to use Microsoft Edge as a default web browser. + +Navigate to the Netwrix website at +[Netwrix Auditor Virtual Appliance](https://www.netwrix.com/virtual_appliances.html) and download +the Virtual Appliance. + +Review the following for additional information: + +- Virtual Deployment +- Available Configurations + +## Virtual Deployment + +This section explains how to import a virtual machine with installed Auditor to your virtual +environment. + +Review the following for additional information: + +- Requirements to Deploy Virtual Appliance +- [Import Virtual Machine from Image to VMware](/docs/auditor/10.7/install/virtualappliance/importvmware.md) +- [Import Virtual Machine from Image to Hyper-V ](/docs/auditor/10.7/install/virtualappliance/importhyperv.md) + +## Available Configurations + +The following virtual appliance configurations are available: + +| Guest OS | SQL Server | +| ------------------------------------------------------------ | ----------------------------------------------------------------------------------- | +| Generalized Windows Server 2022 (180-day evaluation version) | Microsoft SQL Server 2019 Express Edition, with native Reporting Services installed | +| Generalized Windows Server 2019 (180-day evaluation version) | Microsoft SQL Server 2019 Express Edition, with native Reporting Services installed | + +The virtual appliance also contains Access Information Center for Auditor version installed. + +### Considerations and Limitations + +- Consider Microsoft limits for evaluation versions of Windows Server. If your deployment is + offline, you have 10 days to complete online activation, otherwise your Windows evaluation license + expires, and Auditor virtual appliance will shut down every hour. If the OS has Internet access, + it is granted 180 days trial. + + Provide a valid license key for Windows Server, or go to Microsoft Licensing Activation Center + to register your license online. Depending on the selected virtual appliance configuration, + refer to one of the Microsoft articles for additional information: + + - [Windows Server 2022](https://www.microsoft.com/en-us/evalcenter/evaluate-windows-server-2022) + - [Windows Server 2019](https://www.microsoft.com/en-us/evalcenter/evaluate-windows-server-2019) + + Also, you can register you license by phone. See the following Microsoft article: + [Microsoft Licensing Activation Centers worldwide telephone numbers](https://www.microsoft.com/en-us/licensing/existing-customer/activation-centers) + for additional information. + +- Microsoft SQL Server Express Edition is only recommended for evaluation, PoC or small deployments. + For production deployment planning in bigger environments, refer to requirements and + recommendations listed in the + [Requirements for SQL Server to Store Audit Data](/docs/auditor/10.7/requirements/sqlserver.md) section. + +## Requirements to Deploy Virtual Appliance + +This section lists supported virtualization platforms and default hardware configuration required +for the virtual machine where Auditor virtual appliance will be deployed. + +The requirements below are sufficient for evaluation purposes only. See the +[Requirements](/docs/auditor/10.7/requirements/overview.md) topic for additional information. + +### Supported Platforms + +The table below lists supported virtualization platforms for the virtual appliance deployment: + +| Virtual Infrastructure | Supported Version | +| ---------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| VMware vSphere | - VMware server: ESXi 7.0, 6.7, 6.5, 6.0 - VMware workstation: 11 and 12 You can also add the Virtual Appliance to the Content Library of your VMware Cloud on AWS SDDC and then deploy this Virtual Appliance to the cloud-based ESXi host. | +| Microsoft Hyper-V | - Microsoft Windows Server 2019 - Microsoft Windows Server 2016 - Microsoft Windows Server 2022 | + +### Virtual Machine Hardware Requirements + +When deploying Auditor virtual appliance, a pre-configured virtual machine will be created from the +template. Below is the default hardware configuration for the VM where you plan to deploy the +virtual appliance: + +| Parameter | Value | +| ------------------ | -------------------------------------------------- | +| General | | +| Processor | 4 cores | +| RAM | 16 GB | +| HDD | - Local Disk (C:) 100 GB - Data (D:) 300 GB | +| VMware only | | +| Total Video Memory | 16 MB | +| Network adapter | vmxnet3 | +| Other | Check and upgrade VMware Tools during power cycle. | diff --git a/docs/auditor/10.8/overview/_category_.json b/docs/auditor/10.8/overview/_category_.json new file mode 100644 index 0000000000..ff379f3cc2 --- /dev/null +++ b/docs/auditor/10.8/overview/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Getting Started", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "gettingstarted" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/overview/gettingstarted.md b/docs/auditor/10.8/overview/gettingstarted.md new file mode 100644 index 0000000000..0caf59f1c4 --- /dev/null +++ b/docs/auditor/10.8/overview/gettingstarted.md @@ -0,0 +1,53 @@ +--- +title: "Getting Started" +description: "Getting Started" +sidebar_position: 10 +--- + +# Getting Started + +In this section, we will cover: + +- Pre-installation procedures +- Installation +- IT infrastructure and accounts configuration +- Product configuration +- Data collection +- AuditIntelligence: search, reports, alerts, risk assessment dashboards, and user behavior + anomalies detection +- Operation and health + +| | | +| -------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------ | +| Pre-installation procedures | | +| Review recommendations and considerations for Netwrix Auditor deployment planning. | - [Requirements](/docs/auditor/10.7/requirements/overview.md) | +| Make sure the data source you are going to audit is supported. | - [Supported Data Sources](/docs/auditor/10.7/requirements/supporteddatasources/supporteddatasources.md) | +| Open the required ports for connections. | - [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) | +| Review system requirements. | - [Requirements](/docs/auditor/10.7/requirements/overview.md) | +| Installation | | +| If you are using previous version of the product, upgrade to the latest version then. | - [Upgrade to the Latest Version](/docs/auditor/10.7/install/upgrade.md) | +| Install the product and review additional installation scenarios. | - [Installation](/docs/auditor/10.7/install/overview.md) | +| IT infrastructure configuration | | +| Configure target IT infrastructure depending on your data source. | - [Supported Data Sources](/docs/auditor/10.7/requirements/supporteddatasources/supporteddatasources.md) | +| Configure Auditor service accounts. | - [Software Requirements](/docs/auditor/10.7/requirements/software.md) | +| If you are going to use Group Managed Service Account (gMSA) for data collection and storage, refer to the following article for more information. | - [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) | +| Product configuration | | +| Configure role-based access and delegation. | - [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) | +| Configure general product settings. | - [Netwrix Auditor Settings](/docs/auditor/10.7/admin/settings/overview.md) | +| Create monitoring plans to start collecting data from your IT infrastructure. | - [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md) | +| Start data collection | | +| Understand how the product collects data. | - [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) | +| Start data collection. | - [Configure Data Collection Settings](/docs/auditor/10.7/configuration/useractivity/datacollection.md) | +| Make collected data actionable | | +| View data and perform search. | - [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) | +| Review reports. | - [View Reports](/docs/auditor/10.7/admin/reports/view.md) | +| Create alerts to be notified about suspicious activity. | - [Create Alerts](/docs/auditor/10.7/admin/alertsettings/create/create.md) | +| Identify configuration gaps in your environment and understand their impact on overall security with Netwrix Risk Assessment dashboard. | - [IT Risk Assessment Overview ](/docs/auditor/10.7/admin/riskassessment/overview.md) | +| Detect behavior anomalies in your IT environment with NetwrixBehavior Anomalies dashboard. | - [Behavior Anomalies](/docs/auditor/10.7/admin/behavioranomalies/overview.md) | +| Schedule email delivery of a variety of reports or set of specific search criteria with subscriptions/ | - [Create Subscriptions](/docs/auditor/10.7/admin/subscriptions/create.md) | +| Operations and health | | +| Track changes to the product configuration with Netwrix  self-audit. | - [Self-Audit](/docs/auditor/10.7/admin/healthstatus/selfaudit.md) | +| Review Netwrix Auditor System Health event log. | - [Netwrix Auditor Health Log](/docs/auditor/10.7/admin/healthstatus/dashboard/healthlog.md) | +| Review Health status dashboard. | - [Health Status Dashboard](/docs/auditor/10.7/admin/healthstatus/dashboard/overview.md) | +| Schedule Health Summary email delivery. | - [Health Summary Email](/docs/auditor/10.7/admin/healthstatus/summaryemail.md) | +| If some issues encountered while using the product, review the troubleshooting instructions. | - [Troubleshooting](/docs/auditor/10.7/admin/healthstatus/troubleshooting.md) | diff --git a/docs/auditor/10.8/overview/producteditions.md b/docs/auditor/10.8/overview/producteditions.md new file mode 100644 index 0000000000..deb86319fa --- /dev/null +++ b/docs/auditor/10.8/overview/producteditions.md @@ -0,0 +1,75 @@ +--- +title: "Product Editions" +description: "Product Editions" +sidebar_position: 20 +--- + +# Product Editions + +Netwrix Auditor is available in two editions: + +- Full-featured Enterprise Advanced +- Free Community Edition that is distributed free of charge and is more limited + +Netwrix Auditor Enterprise Advanced can be evaluated for 20 days. During this period you have free, +unlimited access to all features and functions. After the evaluation license expires, the product +will prompt you to supply a commercial license where you can choose if you want to stay on +Enterprise Advanced version. Alternatively, you can switch to Free Community Edition. + +Free Community Edition helps you maintain visibility into your environment by delivering daily +reports that summarize changes that took place in the last 24 hours. However, you will no longer be +able to use interactive search, predefined reports, alerts and dashboards, or store your security +intelligence. After switching to free mode, you may need to re-arrange your audit configuration due +to the limitations. + +When running Free Community Edition, at any time you can upgrade to Enterprise Advanced version, +simply by supplying a commercial license in Settings > Licenses. + +Refer to a table below to compare product editions. + +| Feature | Free Community Edition | Enterprise Advanced | +| ------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------ | ----------------------------------------------------------- | +| Deployment options | One Netwrix Auditor client instance per one Netwrix Auditor Server | Multiple Netwrix Auditor clients for Netwrix Auditor Server | +| Role–based access and delegation | – | + | +| Support plan | – | Full | +| Automatic audit configuration | + | + | +| Data sources | | | +| Active Directory (including Group Policy and Logon Activity) | One domain | Unlimited | +| Microsoft Entra ID | One Office 365 tenant | Unlimited | +| Exchange | One domain | Unlimited | +| EMC | One server or one file share, or one IP range, or one OU | Unlimited | +| NetApp | One server or one file share, or one IP range, or one OU | Unlimited | +| Windows File Servers | One server or one file share, or one IP range, or one OU | Unlimited | +| Office 365 (including Exchange Online, SharePoint Online, and OneDrive for Business) | One Office 365 tenant | Unlimited | +| Network Devices | One network device or one IP range | Unlimited | +| Oracle Database | One Oracle Database instance | Unlimited | +| SharePoint | One SharePoint farm | Unlimited | +| SQL Server | One SQL Server instance | Unlimited | +| VMware | One VMware Virtual Center | Unlimited | +| Windows Server | One server or IP range or one Active Directory container | Unlimited | +| Netwrix Auditor tools | | | +| Netwrix Auditor Object Restore for Active Directory | – | + | +| Netwrix Auditor Event Log Manager | – | + | +| Netwrix Auditor Inactive User Tracker | – | + | +| Netwrix Auditor Password Expiration Notifier | – | + | +| Data collection details | | | +| Who | – | + | +| What | + | + | +| When | + | + | +| Where | + | + | +| Workstation | + | + | +| User Activity video recording | – | + | +| Intelligence | | | +| Activity Summary | 1 recipient | Multiple recipients | +| AuditArchive | – | Both Long-Term Archive and Audit Database | +| Search | – | + | +| Reports (including organization–level reports, overview diagrams, change and activity reports, reports with video and review status) and special report packs | – | + | +| State–in–time reports | – | + | +| Ability to save search as a custom report | – | + | +| Subscriptions | – | + | +| Alerts | – | + | +| Behavior Anomaly Discovery dashboard | – | + | +| IT Risk Assessment dashboard | – | + | +| Netwrix Auditor Integration API | | | +| Data in | – | + | +| Data out | – | + | diff --git a/docs/auditor/10.8/overview/whatsnew.md b/docs/auditor/10.8/overview/whatsnew.md new file mode 100644 index 0000000000..2469c90a4b --- /dev/null +++ b/docs/auditor/10.8/overview/whatsnew.md @@ -0,0 +1,65 @@ +--- +title: "What's New" +description: "What's New" +sidebar_position: 30 +--- + +# What's New + +## New Netwrix Community! + +All Netwrix product announcements have moved to the new Netwrix Community. See announcements for +Netwrix Auditor in the [Auditor](https://community.netwrix.com/c/auditor/announcements/90) area of +our new community. + +The following information highlights the new and enhanced features introduced in this Netwrix +Auditor 10.7 version. + +## New Features + +Integration with Netwrix Privilege Secure + +Netwrix Auditor is able to store its collection credentials in Netwrix Privilege Secure, making the +usage of Auditor more secure. + +Data sensitivity tags in searches and alerts for NetApp, Qumulo, and Synology + +Data sensitivity tags in searches and alerts enable customers using NetApp, Qumulo, and Synology +systems to reduce the time to detect incidents involving sensitive data and accelerate the response +to these kinds of threats. They can set up alerts that will be triggered whenever sensitive +documents are accessed, modified or deleted, or filter out all activity that isn’t related to +sensitive data. + +New sensitive data-related risks for SharePoint Online + +Three new risks help users secure their overexposed sensitive data in SharePoint Online (NDC is +required). The new risks include: + +- Sensitive files shared with anonymous users +- Sensitive files shared with external users +- Sensitive documents accessible by everyone + +New Exchange Online report to ensure the confidentiality of sensitive email communications + +This new state-in-time report shows all Exchange Online mailboxes with forwarding enabled, including +details on whether the recipient is an internal or external user. Customers can use this report to +review forwarding rules, detect Business Email Compromise (BEC) attacks, and mitigate the risk of +ongoing data leakages. + +More informative subject lines in email notifications + +The subject line of email alerts may include the who, what, or where details of an alerted activity. +For example, the subject line of an email alert will be "_J.Doe has added M.Smith to Domain Admins_" +instead of "_User has been added to a privileged group_". + +## Major Enhancements + +- Download and read actions in SharePoint Online reports can be easily differentiated. +- Configuration of government Microsoft 365 tenants became easier. In the UI you can choose the + national cloud environment you want to use. +- Modern authentication options for email notifications are supported. +- Option to save and send a report at the same time. +- Support for various new network devices, NAS, and database versions. + +Numerous additional enhancements have been made to improve administration, performance, and +security. diff --git a/docs/auditor/10.8/requirements/_category_.json b/docs/auditor/10.8/requirements/_category_.json new file mode 100644 index 0000000000..8a00596580 --- /dev/null +++ b/docs/auditor/10.8/requirements/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Requirements", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/requirements/console.md b/docs/auditor/10.8/requirements/console.md new file mode 100644 index 0000000000..211d51a710 --- /dev/null +++ b/docs/auditor/10.8/requirements/console.md @@ -0,0 +1,110 @@ +--- +title: "Hardware Requirements" +description: "Hardware Requirements" +sidebar_position: 20 +--- + +# Hardware Requirements + +This topic covers hardware requirements for Netwrix Auditor installation and provides estimations of +the resources required for Netwrix Auditor deployment. + +The actual hardware requirements will depend on the number of activities collected per day in +addition to the number of files and folders monitored. + +**CAUTION:** To keep your systems safe, Auditor should not be exposed to inbound access from the +internet. + +## Full Installation + +The full installation includes both Auditor Server and Auditor Client. This is the initial product +installation. + +Requirements provided in this section apply to a clean installation on a server without any +additional roles or third-party applications installed. + +Use these requirements only for initial estimations and be sure to correct them based on your data +collection and monitoring workflow. + +You can deploy Auditor on a virtual machine running Microsoft Windows guest OS on the corresponding +virtualization platform, in particular: + +- VMware vSphere +- Microsoft Hyper-V +- Nutanix AHV + +Auditor supports only Windows OS versions listed in the [Software Requirements](/docs/auditor/10.7/requirements/software.md) topic. + +Netwrix Auditor and SQL Server instance will be deployed on different servers. + +Requirements below apply to Netwrix Auditor server. + +| Hardware component | Evaluation, PoC or starter environment | Regular environment (up to 1m ARs\*/day) | Large environment (1-10m ARs\*/day) | XLarge environment (10m ARs\*/day or more) | +| ------------------ | -------------------------------------- | ---------------------------------------- | ----------------------------------------- | ---------------------------------------------------------------- | +| CPUs | 2 cores | 4 CPUs | 8 CPUs | 16 CPUs | +| RAM | 8 GB | min 8 GB | min 16 GB | 64 GB | +| Disk space | 100 GB—System drive 100 GB—Data drive | 100 GB—System drive 400 GB—Data drive | 500 GB—System drive\*\* 1.5 TB—Data drive | Up to 1 TB—System drive\*\* Up to several TB per year—Data drive | +| Others | — | — | Network capacity 1 Gbit | Network capacity 1 Gbit | + +\* — ARs stands for Activity Records, that is, Netwrix-compatible format for the audit data. See +[Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md)[Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) +for more details. + +\*\* — By default, the Long-Term Archive and working folder are stored on a system drive. To reduce +the impact on the system drive in large and xlarge environments, Netwrix recommends storing your +Long-Term Archive and working folder on a data drive and plan for their capacity accordingly. For +details, see: + +- [File-Based Repository for Long-Term Archive](/docs/auditor/10.7/requirements/longtermarchive.md) +- [Working Folder](/docs/auditor/10.7/requirements/workingfolder.md) + +Netwrix Auditor informs you if you are running out of space on a system disk where the Long-Term +Archive is stored by default. You will see related events in the Health log once the free disk space +starts approaching the minimum level. When the free disk space is less than 3 GB, the Netwrix +services responsible for audit data collection will be stopped. + +For detailed information about hardware requirements for a standalone SQL Server, refer to the +following Microsoft article: +[SQL Server: Hardware and software requirements](https://learn.microsoft.com/en-us/sql/sql-server/install/hardware-and-software-requirements-for-installing-sql-server-2019?view=sql-server-ver16) + +**NOTE:** In larger environments, SQL Server may become underprovisioned on resources. For +troubleshooting such cases, refer to the [Sample Deployment Scenarios](/docs/auditor/10.7/requirements/deploymentscenarios.md) +topic. + +Additional Sizing Information for File Data Source + +Use this table to determine the requirements for file servers monitoring based on the number of +files in the system. These requirements will add up to the requirements for other monitoring plans. + +| Netwrix Auditor | Per 1 Million Files | Per 5 Million Files | +| ---------------------------------------- | ------------------- | ------------------- | +| CPUs | 0.2 CPUs | 1.0 CPUs | +| RAM (Activity Records only) | 0.125 GB RAM | 0.625 GB RAM | +| RAM (Activity Records and State-in-Time) | 0.5 GB RAM | 2.5 GB RAM | + +If you are monitoring both Active Directory and Windows File Servers data sources, you calculate +using the requirements for AD, and then add the requirements for your File Servers. + +For example, you have a large Active Directory environment which requires 8 cores and 16 GB RAM. Add +the requirements for 5 million files which are 1 CPU and 2.5 GB RAM. Therefore, you will need 9 CPUs +and 18.5 GB RAM. + +If you need assistance calculating the number of files you have and already using Netwrix Auditor, +this information is displayed in the Environment Stats located on the Home Screen. + +If you have not already started using Netwrix Auditor, you can download the Resource Estimation Tool +by clicking +[the download link](https://releases.netwrix.com/products/auditor/10.7/auditor-resource-estimation-tool-1.2.39.zip). + +## Client Installation + +The client installation includes only Netwrix Auditor client console that enables you to connect to +the Netwrix Auditor Server installed remotely. + +Virtual deployment is recommended. + +| Hardware component | Minimum required | Recommended | +| ------------------ | ------------------------------------------------ | ---------------------------------------------------------------- | +| CPUs | Any modern CPU (e.g. Intel or AMD 32 bit, 2 GHz) | Any modern 2 CPUs (e.g. Intel Core 2 Duo 2x or 4x 64 bit, 3 GHz) | +| RAM | 2 GB | 8 GB | +| Disk space | 200 MB | | diff --git a/docs/auditor/10.8/requirements/deploymentscenarios.md b/docs/auditor/10.8/requirements/deploymentscenarios.md new file mode 100644 index 0000000000..7bc567f001 --- /dev/null +++ b/docs/auditor/10.8/requirements/deploymentscenarios.md @@ -0,0 +1,185 @@ +--- +title: "Sample Deployment Scenarios" +description: "Sample Deployment Scenarios" +sidebar_position: 110 +--- + +# Sample Deployment Scenarios + +Recommendations in the sections below refer to deploying the product in the environments of +different size: + +- Small Environment +- Regular Environment +- Large Environment +- Extra-Large Environment + +If you are going to set up integration with Netwrix Data Classification, consider planning for 3 +dedicated servers: + +- Netwrix Auditor server +- Netwrix Data Classification server +- SQL server with 2 instances: for Netwrix Auditor databases and for NDC SQL Database + +Also, ensure these servers have enough RAM to prevent from performance loss - minimum 12 GB +required, 16+ GB recommended. + +To learn more, see the How It Works and Deployment Planning topics in the Netwrix Data +Classification Knowlege center: +[Netwrix Data Classification Documentation](https://helpcenter.netwrix.com/category/dataclassification).. + +When planning for hardware resources, consider that insufficient CPU and RAM may lead to performance +bottlenecks. Thus, try to provide not minimal but recommended configuration. Same recommendations +refer to planning for storage capacity, especially if you plan to keep historical data for longer +periods (e.g., to provide for investigations, compliance audit, etc.) - SSD + +## Small Environment + +Recommendations below refer to deployment in the evaluation lab or small infrastructure (up to 500 +users): + +1. Prepare a virtual machine meeting the following requirements: + +| Hardware Component | Requirement | +|---------------------|-----------------------------------------------------------------------------------------------| +| Processor | 2 cores | +| RAM | 4 GB minimum, 8 GB recommended | +| Disk space | 100 GB on system drive and 100 GB on data drive (capacity required for SQL Server and Long-Term Archive)| +| Screen resolution | Minimum 1280x1024; Recommended 1920x1080 or higher | + +1. Download and install Netwrix Auditor on that VM, selecting Full installation to deploy both + server and client components. +2. When prompted to configure the Audit database settings, proceed with installing SQL Server + Express Edition with Advanced Services on the same VM. See the + [SQL Server Reporting Services](/docs/auditor/10.7/requirements/sqlserverreportingservice.md) topic for additional information. + +Alternatively, you can install Netwrix Auditor as a virtual appliance on your VMware vSphere or +Hyper-V virtualization server. For more information on this deployment option, refer to the +[Virtual Appliance page](https://www.netwrix.com/virtual_appliances.html). + +### PoC and Production Infrastructure + +- If you are implementing a PoC project, it is strongly recommended that after its completion you + create a new Netwrix Auditor server VM dedicated for use in production. Migrating the VM that + hosted Netwrix Auditor server during the PoC into production environment is not recommended, as it + may lead to performance problems. +- Consider using a dedicated SQL Server for the PoC project. Production database servers are often + configured with the features that are not necessary for Netwrix Auditor (like cluster support, + frequent backup, and so on). If you have no opportunity to use a dedicated SQL Server, then create + an dedicated instance for Netwrix Auditor databases on your existing server. + +## Regular Environment + +Recommendations below refer to the product deployment in a in a regular environment (500 — 1000 +users, approximately up to 1 million of activity records generated per day): + +1. Prepare a physical or a virtual machine meeting the following requirements: + +| Hardware Component | Requirement | +|---------------------|------------------------------------------------------------------------------------------------------| +| Processor | 4 cores | +| RAM | 16 - 32 GB | +| Disk space | 200 GB on system drive, 0.5 - 1 TB or more on data drive (capacity required for SQL Server and Long-Term Archive) | +| Screen resolution | Minimum 1280x1024; Recommended 1920x1080 or higher | + +2. Download and install Netwrix Auditor on that machine. Deploy the required number of Netwrix + Auditor clients on the remote Windows machines. + + Client-server connection requires user sign-in. You can automate this process, as described in + [Automate Sign-in to the Client](/docs/auditor/10.7/install/automatelogin.md) of Online Help. + +3. When prompted to configure the Audit database settings, proceed with installing SQL Server + Express Edition with Advanced Services. See the + [SQL Server Reporting Services](/docs/auditor/10.7/requirements/sqlserverreportingservice.md) topic for additional information. + +Alternatively, you can install Netwrix Auditor as a virtual appliance on your VMware vSphere or +Hyper-V virtualization server. For more information on this deployment option, refer to the +[Virtual Appliance page](https://www.netwrix.com/virtual_appliances.html). + +## Large Environment + +Recommendations below refer to the product deployment in a large environment (up to 20 000 users, +approximately 1+ million of activity records generated per day): + +1. Prepare a physical or a virtual machine for Netwrix Auditor server, meeting the following + requirements: + +| Hardware Component | Requirement | +|---------------------|------------------------------------------------------------------------------------------------------| +| Processor | 8 cores | +| RAM | 16 - 32 GB | +| Disk space | - 200-500 GB on system drive | +| | - 0.5 - 1 TB on data drive | +| Screen resolution | Minimum 1280 x 1024, Recommended 1920 x 1080 or higher | + +2. Download and install Netwrix Auditor on that machine. Deploy the required number of Netwrix + Auditor clients on the remote Windows machines. + + Client-server connection requires user sign-in. You can automate this process, as described in + the [Automate Sign-in to the Client](/docs/auditor/10.7/install/automatelogin.md) section of Online Help. + +3. Prepare Microsoft SQL Server meeting the following requirements: + +| Hardware Component | Requirement | +|---------------------|-----------------------------------------------------------------------------| +| Processor | 2-4 cores | +| RAM | 16-32 GB | +| Disk space | - 100 GB on system drive | +| | - 200-400 GB on data drive | + +| Software Component | Requirement | +|---------------------------------------|---------------------------------------------------------------------------------------------| +| Microsoft SQL Server 2012 or later | Standard or Enterprise edition (Express cannot be used due to its database size limitation) | +| Dedicated SQL Server instance or cluster is recommended | | +| SQL Server Reporting Services for reporting | | + +4. When prompted to configure the Audit database settings, proceed using the dedicated SQL Server + with Reporting Services. + +## Extra-Large Environment + +Recommendations below refer to the product deployment in an extra-large environment, that is, with +more than 20 000 users (10+ million of activity records generated per day): + +1. Prepare a physical or a virtual machine for Auditor Server, meeting the following requirements: + +| Hardware Component | Requirement | +|---------------------|----------------------------------------------------------------------------------| +| Processor | 16 cores (recommended) | +| RAM | 32 - 64 GB | +| Disk space | - 300-500 GB on system drive | +| | - 1+ TB on data drive | +| Screen resolution | Minimum 1280 x 1024, Recommended 1920 x 1080 or higher | + +2. Download and install Netwrix Auditor on that machine. Deploy the required number of Netwrix + Auditor clients on the remote Windows machines. + + Client-server connection requires user sign-in. You can automate this process, as described in + the [Automate Sign-in to the Client](/docs/auditor/10.7/install/automatelogin.md) section. + +3. Prepare a machine for Microsoft SQL Server meeting the following requirements: + +| Hardware Component | Requirement | +|---------------------|-----------------------------------------------------------------------------| +| Processor | 4 cores | +| RAM | 32 - 64 GB | +| Disk space | - 100 GB on system drive | +| | - 1 TB on data drive | + +| Software Component | Requirement | +|-----------------------------------------|------------------------------------------------------------------------------------------------------| +| Microsoft SQL Server 2012 or later | Standard or Enterprise edition (Express cannot be used due to its database size limitation) | +| Dedicated SQL Server instance or cluster| Recommended | +| SQL Server Reporting Services | For reporting | + +4. As an option, you can install Reporting Services on a dedicated machine. The following hardware + configuration is recommended: + +| Hardware Component | Requirement | +|---------------------|-----------------------------| +| Processor | 4 cores | +| RAM | 32 GB | +| Disk space | 100 GB on system drive | + +5. When prompted to configure the Audit database settings, proceed using the dedicated SQL Server + and Reporting Services. diff --git a/docs/auditor/10.8/requirements/gmsa.md b/docs/auditor/10.8/requirements/gmsa.md new file mode 100644 index 0000000000..bc75c087d9 --- /dev/null +++ b/docs/auditor/10.8/requirements/gmsa.md @@ -0,0 +1,242 @@ +--- +title: "Use Group Managed Service Account (gMSA)" +description: "Use Group Managed Service Account (gMSA)" +sidebar_position: 100 +--- + +# Use Group Managed Service Account (gMSA) + +Auditor supports using Group Managed Service Accounts (gMSA) for data collection and storage. This +can help you to simplify product administration, providing the following benefits: + +- There is no password to manage for this account: Windows handles the password management for it. + User interaction for password update on a regular basis is not required. +- Using the gMSA also eliminates a need in service accounts with static passwords that are set upon + creation and then never cycled. +- The gMSA also helps to ensure that service account is only used to run a service (gMSA accounts + cannot be used to log on interactively to domain computers). +- The gMSA is allowed to audit trusted domains using configured and validated gMSA from the target + domain. + +Currently, gMSA is supported: + +- As a data collecting account for the following data sources: + + - Active Directory (including Group Policy and Logon Activity) + - File Server (currently for Windows File Servers) + - SQL Server + - SharePoint + - User Activity (including User Activity Video Recording) + - Windows Server + + See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional + information about supported data sources. + + **NOTE:** If you are using a gMSA account for Active Directory collection consider that the + Active Directory Object Restore tool will not work. + +- As an account for accessing Long-Term archive. See the + [File-Based Repository for Long-Term Archive](/docs/auditor/10.7/requirements/longtermarchive.md) topic for additional + information. +- As an account for accessing Audit Databases. See + [Requirements for SQL Server to Store Audit Data](/docs/auditor/10.7/requirements/sqlserver.md) topic for additional information. + + **CAUTION:** In case of accessing Audit Databases using gMSA account, SSRS-based reports will + not work. + +**_RECOMMENDED:_** Prepare a dedicated gMSA for these purposes. + +The gMSA would work only within one domain, the parent domain and NA also should be joined within +the same domain. The reason is that gMSAs are designed to be scoped within a single Active Directory +domain or subdomain. + +See the following Microsoft article for more information: +[Get started with Group Managed Service Accounts](https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/group-managed-service-accounts/group-managed-service-accounts/getting-started-with-group-managed-service-accounts) + +By default, the gMSA account is not a member of any domain groups. After creating gMSA account, you +need to add this account to one of the domain groups as required for the data source you are going +to audit. + +## Check for a KDS Root Key + +To generate password for gMSA accounts, domain controllers require a Key Distribution Services (KDS) +root key. This key is created once, so if there are any gMSA accounts in your domain, this means the +root key already exists. + +Follow the steps to check whether the root key exists in your domain. + +**Step 1 –** Open the **Active Directory Sites and Services** Console and select **View** > **Show +Services Node**. + +**Step 2 –** Browse to **Services** > **Group Key Distribution Services** > **Master Root Keys**. + +**Step 3 –** Alternatively, you can run the `Get-KdsRootKey` cmdlet. If the key does not exist, it +will not return any output. + +## Create a KDS Root Key + +If the KDS root key does not exist, then you can create a KDS root key as described below, or +contact your Active Directory administrator. + +Follow the steps to create a KDS key (on a domain controller running Windows Server 2012 or later). + +**Step 1 –** On the domain controller, run **Windows PowerShell**. + +**Step 2 –** In the command prompt of Windows PowerShell Active Directory module, run the following +cmdlet: + +`Add-KdsRootKey -EffectiveImmediately` + +**Step 3 –** A root key will be added to the target DC which will be used by the KDS service +immediately. + +**NOTE:** This requires waiting 10 hours, as other domain controllers will be able to use the root +key only after a successful replication. See the +[Create the Key Distribution Services KDS Root Key](https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/create-the-key-distribution-services-kds-root-key) +Microsoft article for additional information. + +**Step 4 –** Alternatively, you can use the following cmdlet: + +`Add-KdsRootKey -EffectiveTime MM/DD/YYYY` + +This cmdlet generates a KDS root key that will take effect on the specified date. Use the +_mm/dd/yyyy_ format, for example: `Add-KdsRootKey -EffectiveTime 02/27/21` + +**CAUTION:** This approach, however, should be used with care. Waiting up to 10 hours is a safety +measure to prevent password generation from occurring before all DCs in the environment are capable +of answering gMSA requests. For more information, refer to the following microsoft article: +[Create the Key Distribution Services KDS Root Key](https://learn.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/create-the-key-distribution-services-kds-root-key). + +To make the KDS Root Key work immediately you can use the following powershell command: + +Add-KDSRootKey -Effectivetime ((get-date).addhours(-10)) + +This command will make the KDS Root Key work immediately. + +**NOTE:** This is recommended only for small environments. In large environments, it is required to +wait 10 hours for replication. + +## Create a gMSA + +To create a new gMSA, you will need to specify: + +- New account name and FQDN +- Computer account(s) that will be allowed to make use of that gMSA. Here it will be your Auditor + Server + + - The account must be a member of the **Administrators** group on the Auditor Server. + +For example, you can create a gMSA using the `New-ADServiceAccount` PowerShell cmdlet. If so, you +should specify your Auditor Server account in the `-PrincipalsAllowedToRetrieveManagedPassword` +attribute. + +Make sure you specify a valid computer object in this attribute. + +If you have multiple Auditor servers, you can specify the computer accounts using a comma separated +list, or specify a security group and add the required computer accounts to that security group. + +To create a new gMSA in the root domain using PowerShell: + +- If you are using a single Netwrix Auditor Server, run the command as follows: + + `New-ADServiceAccount -name nagmsa -DNSHostName nagmsa.mydomain.local -PrincipalsAllowedToRetrieveManagedPassword NASrv$` + + here: + + - _name_ — new gMSA name, here **nagmsa**. Make sure the name refers to a valid computer + objects. + - _DNSHostName_ — FQDN of the new gMSA account, here **nagmsa.mydomain.local** + - _PrincipalsAllowedToRetrieveManagedPassword_ — your Netwrix Auditor Server NETBIOS name ended + with $, here __NASrv$\_\_ + +- If you want to specify a security group that comprises multiple Auditor  servers, run the command + as follows: + + `New-ADServiceAccount -Name gmsagroup -DNSHostName gmsagroup.mydomain.local -PrincipalsAllowedToRetrieveManagedPassword NAServers` + + here **NAServers** — a security group with your Auditor  servers. + +## Assign Required Roles and Permissions to a gMSA + +Once a new gMSA account has been prepared, assign the required roles and permissions to this +account, depending on what purpose a gMSA account will be used for. + +- If you are going to use a gMSA as a data collecting account in Auditor, add this account to the + Local Admins group on the Auditor Server and assign the following rights and permissions, + depending on the data source you want to collect data from: + + - [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) + - [Permissions for Group Policy Auditing ](/docs/auditor/10.7/configuration/grouppolicy/permissions.md) + - [Permissions for Logon Activity Auditing ](/docs/auditor/10.7/configuration/logonactivity/permissions.md) + - [Permissions for Windows File Server Auditing](/docs/auditor/10.7/configuration/fileservers/windows/permissions.md) + - [Permissions for SharePoint Auditing](/docs/auditor/10.7/configuration/sharepoint/permissions.md) + - [Permissions for SQL Server Auditing ](/docs/auditor/10.7/configuration/sqlserver/permissions.md) + - [Permissions for Windows Server Auditing ](/docs/auditor/10.7/configuration/windowsserver/permissions.md) + + _Remember,_ + [Permissions for Windows Server Auditing ](/docs/auditor/10.7/configuration/windowsserver/permissions.md) + +- If you are going to use a gMSA to access Long-Term archive, assign the roles and permissions + required for a custom account: + + - [File-Based Repository for Long-Term Archive](/docs/auditor/10.7/requirements/longtermarchive.md) + + _Remember,_ that you can use custom (gMSA) account only if your Long-Term archive stored on + a file share. + +- If you are going to use a gMSA to access Audit Database, assign the required roles: + + - [Requirements for SQL Server to Store Audit Data](/docs/auditor/10.7/requirements/sqlserver.md) + + _Remember,_ that a gMSA account cannot access SSRS due to Microsoft restrictions. + +- If you are going to use a gMSA as a data collection accoun for User Activity or User Activity + Video Recording, refer to the following topics: + + - [User Activity](/docs/auditor/10.7/configuration/useractivity/overview.md) + - [Configure Video Recordings Playback Settings](/docs/auditor/10.7/configuration/useractivity/videorecordings.md) + +Now you can use a gMSA account as one of the Auditor Service Account. + +## Apply a gMSA + +This topic contains instructions on how to apply a gMSA as one of the Auditor Service Accounts. + +- Apply a gMSA as a Data Collecting Account +- Apply gMSA to Access Long-Term Archive +- Apply gMSA to Access Audit Database + +### Apply a gMSA as a Data Collecting Account + +To process the corresponding monitored items using gMSA, you can specify this account in the +monitored plan properties. See the +[Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional information. + +Follow the steps to set a custom account in the monitored item properties. + +**Step 1 –** Open the monitored item properties for editing. + +**Step 2 –** On the **General** tab, under **Specify account for collecting data**, select **gMSA** +option. + +![Monitored Item Properties page](/images/auditor/10.7/requirements/gmsa.webp) + +See the +[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic +for additional information. + +### Apply gMSA to Access Long-Term Archive + +To write data to the Long-Term Archive and upload report subscriptions to shared folders, you can +specify this account as a custom account in the Long-Term Archive settings. See the +[Long-Term Archive](/docs/auditor/10.7/admin/settings/longtermarchive.md) topic for additional information. + +**NOTE:** For a custom account or a gMSA one, consider that you can use the account for the +Long-Term Archive based on a file share + +### Apply gMSA to Access Audit Database + +To access Audit Database, generate reports and run interactive search queries, you can specify this +account under the 'Specify custom connection parameters in your common database plan settings. See +the [Fine-Tune Your Plan and Edit Settings](/docs/auditor/10.7/admin/monitoringplans/finetune.md) topic for +additional information. diff --git a/docs/auditor/10.8/requirements/longtermarchive.md b/docs/auditor/10.8/requirements/longtermarchive.md new file mode 100644 index 0000000000..60b17dbe71 --- /dev/null +++ b/docs/auditor/10.8/requirements/longtermarchive.md @@ -0,0 +1,193 @@ +--- +title: "File-Based Repository for Long-Term Archive" +description: "File-Based Repository for Long-Term Archive" +sidebar_position: 60 +--- + +# File-Based Repository for Long-Term Archive + +Long-Term Archive is a file-based repository for keeping activity records collected by Auditor. + +## Location + +Long-Term Archive can be located on the same computer with Auditor Server, or separately - in this +case ensure that the Auditor Server can access the remote machine. By default, the Long-Term Archive +(repository) and Auditor working folder are stored on the system drive. Default path to the +Long-Term Archive is `%ProgramData%\NetwrixAuditor\Data`. + +To reduce the impact on the system drive in large and extra-large environments, it is recommended to +move Long-Term Archive to another disk. For that, you should estimate the required capacity using +recommendations in the next section. + +Then you should prepare the new folder for repository, target Netwrix Auditor at that folder, and, +if necessary, move repository data from the old to the new location. + +Follow the steps to modify Long-Term Archive location and other settings. + +**Step 1 –** In Auditor client, click Settings > Long-Term Archive; alternatively, if you are +viewing the Long-Term Archive widget of the Health Status dashboard, click Open settings. + +**Step 2 –** Click Modify. + +![archive_modify_settings_thumb_0_0](/images/auditor/10.7/requirements/archive_modify_settings_thumb_0_0.webp) + +**Step 3 –** Enter new path or browse for the required folder. + +**Step 4 –** Provide retention settings and access credentials. + +**Step 5 –** To move data from the old repository to the new location, take the steps described in +the following Netwrix knowledge base article: +[How to Move Long-Term Archive to a New Location](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA00g000000H9SSCA0.html). + +Auditor client will start writing data to the new location right after you complete data moving +procedure. + +## Retention + +Default retention period for repository data is **120 months**. You can specify the value you need +in the Long-Term Archive settings. When retention period is over, data will be deleted +automatically. + +If the retention period is set to **0**, the following logic will be applied: + +- **Audit data for SQL Server, file servers, Windows Server:** only data stored by the last **2** + data collection sessions will be preserved. +- **User activity data:** only data stored by the last **7** data collection sessions will be + preserved. +- **Other data sources:** only data stored by the last **4** data collection sessions will be + preserved. + +## Capacity + +To examine the repository capacity and daily growth, use the Long-Term Archive Capacity of the +Health Status dashboard. + +![healthstatusdashboard_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/healthstatusdashboard_thumb_0_0.webp) + +To estimate the amount of activity records collected and stored to the repository day by day, use +the [Activity Records Statistics](/docs/auditor/10.7/admin/healthstatus/dashboard/activityrecordstatistics.md) +widget. Click View details to see how many activity records were produced by each data source, +collected and saved to the Long-Term Archive and to the database. + +Netwrix Auditor will inform you if you are running out of space on a system disk where the +repository is stored by default — you will see this information in the Health Status dashboard, in +the health summary email, and also in the events in the Netwrix Auditor health log. + +When free disk space is less than **3 GB**, the Netwrix services responsible for audit data +collection will be stopped. + +## Configure Long-Term Archive Account + +An account used to write data to the Long-term Archive and upload report subscriptions to shared +folders. By default, the LocalSystem account is used for the archive stored locally and the computer +account is used for archive stored on a file share. + +If you want to store the Long-term Archive on a file share, you can specify custom account in +Settings>**Long-Term Archive** in Auditor. + +Starting with version 9.96, you can use Group Managed Service Account (gMSA) as the account for +accessing Long-term Archive. + +The custom account must be granted the following rights and permissions: + +- Advanced permissions on the folder where the Long-term Archive is stored: + - List folder / read data + - Read attributes + - Read extended attributes + - Create files / write data + - Create folders / append data + - Write attributes + - Write extended attributes + - Delete subfolders and files + - Read permissions +- On the file shares where report subscriptions are saved: + + - Change share permission + - Create files / write data folder permission + + Subscriptions created in the Auditor client  are uploaded to file servers under the Long-Term + Archive service account as well. See the [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) + topic for additional information. + +### Assign Permissions on the Long-Term Archive Folder + +The procedure below applies to Windows Server 2012 R2 and above and may vary slightly depending on +your OS. + +Follow the steps to assign permissions on the Long-Term Archive folder: + +**Step 1 –** Navigate to a folder where the Long-Term Archive will be stored, right-click it and +select Properties. + +**Step 2 –** In the **`` Properties** dialog, select the **Security** tab and click +**Advanced**. + +**Step 3 –** In the Advanced Security dialog, select the Permissions tab and click Add. + +**Step 4 –** In the Permission Entry for `` dialog, apply the following settings: + +- Specify an account as principal. +- Set Type to _"Allow"_. +- Set Applies to to _"This folder, subfolders and files"_. +- Switch to the Advanced permissions section. +- Check the following permissions: + - List folder / read data + - Read attributes + - Read extended attributes + - Create files / write data + - Create folders / append data + - Write attributes + - Write extended attributes + - Delete subfolders and files + - Read permissions + +### Assign Change and Create Files/Write Data Permissions to Upload Subscriptions to File Shares + +The procedure below applies to Windows Server 2012 R2 and above and may vary slightly depending on +your OS. + +Follow the steps to assign the **Change** and **Create Files/Write Data** permissions to upload +subscriptions to file shares: + +**Step 1 –** Navigate to a folder where report subscriptions will be stored, right-click it and +select Properties. + +**Step 2 –** In the **`` Properties** dialog, select the **Sharing** tab and click +**Advanced Sharing**. + +**Step 3 –** In the Advanced Sharing dialog, click Permissions. + +**Step 4 –** In the Permissions for `` dialog, select a principal or add a new, then +check the Allow flag next to Change. + +**Step 5 –** Apply settings and return to the **`` Properties** dialog. + +**Step 6 –** In the **`` Properties** dialog, select the **Security** tab and click +**Advanced**. + +**Step 7 –** In the **Advanced Security Settings for ``** dialog, navigate to the +**Permissions** tab, select a principal and click Edit, or click Add to add a new one. + +**Step 8 –** Apply the following settings to your Permission Entry. + +- Specify a Netwrix Auditor user as principal. +- Set Type to _"Allow"_. +- Set Applies to to _"This folder, subfolders and files"_. +- Check Create files / write data in the Advanced permissions section. + +The users who are going to access report subscriptions must be granted read access to these shares. +Netwrix recommends you to create a dedicated folder and grant access to the entire Netwrix Auditor +Client Users group or any other group assigned the Global reviewer role in Auditor. + +## System Health + +Long-Term Archive is a file-based storage where Auditor saves the collected activity records. By +default, it is located on the system drive at `%PROGRAMDATA%\Netwrix Auditor\Data` and keeps data +for 120 months. You may want to modify these settings, for example, move the storage from the system +drive to another location. The Long-Term Archive widget will help you to monitor the Long-Term +Archive capacity. The widget displays the current size and daily increase of the Long-Term Archive, +and the remaining free space on the target drive. + +To open the Long-Term Archive settings, click the corresponding link. Then you will be able to +adjust the settings as necessary. See the [Long-Term Archive](/docs/auditor/10.7/admin/settings/longtermarchive.md) +topic for additional information. diff --git a/docs/auditor/10.8/requirements/overview.md b/docs/auditor/10.8/requirements/overview.md new file mode 100644 index 0000000000..bec7dc29a5 --- /dev/null +++ b/docs/auditor/10.8/requirements/overview.md @@ -0,0 +1,77 @@ +--- +title: "Requirements" +description: "Requirements" +sidebar_position: 20 +--- + +# Requirements + +This topic provides the requirements for the server where Netwrix Auditor will be installed. See the +following topics for additional information: + +- [Supported Data Sources](/docs/auditor/10.7/requirements/supporteddatasources/supporteddatasources.md) +- [Hardware Requirements](/docs/auditor/10.7/requirements/console.md) +- [Software Requirements](/docs/auditor/10.7/requirements/software.md) +- [Requirements for SQL Server to Store Audit Data](/docs/auditor/10.7/requirements/sqlserver.md) + +## Architecture Overview + +Netwrix Auditor provides comprehensive auditing of applications, platforms and storage systems. The +product architecture and components interactions are shown in the figure below. + +![auditorarchitecture_thumb_0_0](/images/auditor/10.7/requirements/auditorarchitecture_thumb_0_0.webp) + +- Netwrix Auditor Server — the central component that handles the collection, transfer and + processing of audit data from the various data sources (audited systems). Data from the sources + not yet supported out of the box is collected using RESTful Integration API. +- Netwrix Auditor Client — a component that provides a friendly interface to authorized personnel + who can use this console UI to manage the product settings, examine alerts, reports and search + results. Other users can obtain audit data by email or with 3rd party tools — for example, reports + can be provided to the management team via the intranet portal. +- Data sources — entities that represent the types of audited systems supported by Netwrix Auditor + (for example, Active Directory, Exchange Online, NetApp storage system, and so on), or the areas + you are interested in (Group Policy, User Activity, and others). +- Long-Term Archive — a file-based repository storage keeps the audit data collected from all your + data sources or imported using Integration API in a compressed format for a long period of time. + Default retention period is 120 months. +- Audit databases — these are Microsoft SQL Server databases used as operational storage. This type + of data storage allows you to browse recent data, run search queries, generate reports and + alerts. + Typically, data collected from the certain data source (for example, Exchange Server) is stored to + the dedicated Audit database and the long-term archive. So, you can configure as many databases as + the data sources you want to process. Default retention period for data stored in the Audit + database is 180 days + +**NOTE:** When auditing Active Directory domains, Exchange servers, expired passwords, and inactive +users, the data sent by the product can be encrypted using Signing and Sealing. See the following +Netwrix knowledge base article for additional information on how to secure Netwrix Auditor: +[Best Practices for Securing Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA00g000000H9SPCA0.html). + +### Workflow Stages + +The general workflow stages are as follows: + +- Authorized administrators prepare IT infrastructure and data sources they are going to audit, as + recommended in Netwrix Auditor documentation and industry best practices; they use Netwrix Auditor + Client (management UI) to set up automated data processing. +- Netwrix Auditor collects audit data from the specified data source (application, server, storage + system, and so on). + + - To provide a coherent picture of changes that occurred in the audited systems, the product can + consolidate data from multiple independent sources (event logs, configuration snapshots, + change history records, etc.). This capability is implemented with Netwrix Auditor Server and + Integration API. + - See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on custom data + source processing workflow. + +- Audit data is stored to the Audit databases and the repository (Long-Term Archive) and preserved + there according to the corresponding retention settings. +- Netwrix Auditor analyzes the incoming audit data and alerts appropriate staff about critical + changes, according to the built-in alerts you choose to use and any custom alerts you have + created. +- Authorized users use the Netwrix Auditor Client to view pre-built dashboards, run predefined + reports, conduct investigations, and create custom reports based on their searches. Other users + obtain the data they need via email or third-party tools. +- To enable historical data analysis, Netwrix Auditor can extract data from the repository and + import it to the Audit database, where it becomes available for search queries and report + generation. diff --git a/docs/auditor/10.8/requirements/ports.md b/docs/auditor/10.8/requirements/ports.md new file mode 100644 index 0000000000..e553096ae4 --- /dev/null +++ b/docs/auditor/10.8/requirements/ports.md @@ -0,0 +1,96 @@ +--- +title: "Protocols and Ports Required" +description: "Protocols and Ports Required" +sidebar_position: 80 +--- + +# Protocols and Ports Required + +To ensure successful data collection and activity monitoring, Auditor has to communicate through +firewall and requires some ports to be opened for inbound and outbound connections. + +**_RECOMMENDED:_** Netwrix recommends reviewing your current port configuration after every +re-installation or upgrade. + +| If you use... | Do the following... | +| -------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Windows Firewall | If you are running Windows Firewall on the computer where Auditor Server is going to be installed, the 135, 9004, 9699, 9011, and one dynamic port will be opened automatically for inbound connections during Auditor installation. For outbound rules, create or enable predefined Windows Firewall rules. Before installing Auditor, make sure that the Windows Firewall service is started. | +| Third-party Firewall | If you use a third-party firewall, you must create rules manually. | + +Follow the steps to create Firewall rules manually. + +The example below applies to Windows Firewall and explains how to create a rule for inbound +connection. + +**Step 1 –** Start the Windows Firewall service. + +**Step 2 –** Navigate to **Start** > **Control Panel** and select **Windows Firewall**. + +**Step 3 –** In the Help Protect your computer with Windows Firewall page, click **Advanced +settings** on the left. + +**Step 4 –** In the Windows Firewall with Advanced Security dialog, select Inbound Rules on the +left. + +**Step 5 –** Click New Rule. In the New Inbound Rule wizard, complete the following steps: + +- On the Rule Type step, select Port. +- On the Protocol and Ports step, select TCP or UDP. In the Specific local ports field specify the + port number. +- On the Action step, select the Allow the connection action. +- On the Profile step, make sure that the rule applies to all profiles (Domain, Private, Public). +- On the Name step, specify the rule's name, for example Netwrix Auditor TCP port_number Access. + +In most cases, this configuration is enough to ensure successful data collection and processing. If +your organization policy requires you to provide a justification for each particular port, review +the following for a full list of ports to be opened on the computer where Auditor Server is going to +be installed and on your target servers. + +- [Active Directory Ports](/docs/auditor/10.7/configuration/activedirectory/ports.md) +- [AD FS Ports](/docs/auditor/10.7/configuration/activedirectoryfederatedservices/ports.md) +- [Microsoft Entra ID Ports](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/ports.md) +- [Dell Data Storage Ports](/docs/auditor/10.7/configuration/fileservers/delldatastorage/ports.md) +- [Exchange Ports](/docs/auditor/10.7/configuration/exchange/ports.md) +- [Exchange Online Ports](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/ports.md) +- [Group Policy Ports](/docs/auditor/10.7/configuration/grouppolicy/ports.md) +- [Integration API Ports](/docs/auditor/10.7/api/ports.md) +- [ Logon Activity Ports](/docs/auditor/10.7/configuration/logonactivity/ports.md) +- [Nutanix Ports](/docs/auditor/10.7/configuration/fileservers/nutanix/ports.md) +- [Oracle Database Ports](/docs/auditor/10.7/configuration/oracle/ports.md) +- [Qumulo Ports](/docs/auditor/10.7/configuration/fileservers/qumulo/ports.md) +- [SharePoint Ports](/docs/auditor/10.7/configuration/sharepoint/ports.md) +- [SharePoint Online Ports](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/ports.md) +- [SQL Server Ports](/docs/auditor/10.7/configuration/sqlserver/ports.md) +- [Synology Ports](/docs/auditor/10.7/configuration/fileservers/synology/ports.md) +- [Teams Ports](/docs/auditor/10.7/configuration/microsoft365/teams/ports.md) +- [User Activity Ports](/docs/auditor/10.7/configuration/useractivity/ports.md) +- [VMware Ports](/docs/auditor/10.7/configuration/vmware/ports.md) +- [Windows File Server Ports](/docs/auditor/10.7/configuration/fileservers/windows/ports.md) +- [Windows Server Ports](/docs/auditor/10.7/configuration/windowsserver/ports.md) + +## Netwrix Auditor Server + +During installation, Netwrix Auditor automatically creates inbound Windows Firewall rules for the +essential ports required for the product to function properly. If you use a third-party firewall, +make sure to allow inbound connections to local ports on the target and outbound connections to +remote ports on the source. + +Tip for reading the table: For example, on the computer where Netwrix Auditor client is installed +(source), allow outbound connections to remote 135 TCP port. On the computer where Netwrix Auditor +Server resides (target), allow inbound connections to local 135 TCP port. + +| Port | Protocol | Source | Target | Purpose | +| ---------------------------------- | -------- | ------------------------------------------------------------------------------- | ---------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------- | +| 135 | TCP | Computer where Netwrix Auditor client is installed | Netwrix Auditor Server | Netwrix Auditor remote client console | +| 9004 | TCP | Monitored computers | Netwrix Auditor Server | Network Traffic Compression Services responsible for user activity monitoring | +| 9011 | TCP | Computers where Netwrix Auditor for Windows Server Compression Services reside | Netwrix Auditor Server | Network traffic compression and interaction with hubs and services | +| 9699 | TCP | Script / query host | Netwrix Auditor Server | Netwrix Auditor Integration API | +| Dynamic: 1024 -65535 | TCP | Computers where Netwrix Auditor Server and Netwrix Auditor client are installed | Netwrix Auditor Server | Netwrix Auditor internal components interaction. Allow C:\Program Files (x86)\Netwrix Auditor\Audit Core\NwCoreSvc.exe to use the port. | +| For Managed Service Providers: 443 | TCP | Netwrix Auditor Server | Netwrix Partner Portal | Reporting on active MSP licenses | +| - 80 for http - 443 for https | TCP | SSRS | Netwrix Auditor Server | Reports If your environment is configured differently, we recommend that you check with your DBA or the SSRS settings through the Configuration Manage. | + +In most environments, the rules are created automatically and you do not need to open more ports to +ensure successful data collection. + +In rare cases, for example if your security policies require you to provide a justification for +opening each particular port, you might need a more detailed overview. diff --git a/docs/auditor/10.8/requirements/serviceaccount.md b/docs/auditor/10.8/requirements/serviceaccount.md new file mode 100644 index 0000000000..da8588a8c1 --- /dev/null +++ b/docs/auditor/10.8/requirements/serviceaccount.md @@ -0,0 +1,16 @@ +--- +title: "Configure Netwrix Auditor Service Accounts" +description: "Configure Netwrix Auditor Service Accounts" +sidebar_position: 90 +--- + +# Configure Netwrix Auditor Service Accounts + +Netwrix Auditor uses the following service accounts: + +| Service account | Description | +| --------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Account for data collection | An account used by Netwrix Auditor to collect audit data from the target systems. **NOTE:** For the data collecting account, you should use a different account than the one Auditor is using to access the database. See [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) for additional information. | +| Audit Database service account | An account used by Netwrix Auditor to write collected audit data to the Audit Database. See [Requirements for SQL Server to Store Audit Data](/docs/auditor/10.7/requirements/sqlserver.md) for additional information. | +| SSRS service account | An account used by Netwrix Auditor to upload data to the Report Server. See [SQL Server Reporting Services](/docs/auditor/10.7/requirements/sqlserverreportingservice.md) for additional information. | +| Long-Term Archive service account | An account used to write data to the Long-Term Archive and upload report subscriptions to shared folders. The LocalSystem account is selected by default. See [File-Based Repository for Long-Term Archive](/docs/auditor/10.7/requirements/longtermarchive.md) for additional information. | diff --git a/docs/auditor/10.8/requirements/software.md b/docs/auditor/10.8/requirements/software.md new file mode 100644 index 0000000000..ad811a7c81 --- /dev/null +++ b/docs/auditor/10.8/requirements/software.md @@ -0,0 +1,139 @@ +--- +title: "Software Requirements" +description: "Software Requirements" +sidebar_position: 30 +--- + +# Software Requirements + +The table below lists the software requirements for the Auditor installation: + +| Component | Full installation (both Auditor Server and Client) | Client installation (client only) | +| ------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Operating system (English-only) | Windows Server OS: - Windows Server 2025 - Windows Server 2022 - Windows Server 2019 - Windows Server 2016 - Windows Server 2012 R2 Windows Desktop OS (64-bit): - Windows 11 - Windows 10 | Windows Server OS: - Windows Server 2025 - Windows Server 2022 - Windows Server 2019 - Windows Server 2016 - Windows Server 2012 R2 Windows Desktop OS (32 and 64-bit): - Windows 11 - Windows 10 | +| .NET Framework | - .NET Framework 4.8 and above. See the following Microsoft article for additional information about .Net Framework installer redistributable: [Microsoft .NET Framework 4.8 offline installer for Windows.](https://support.microsoft.com/en-us/topic/microsoft-net-framework-4-8-offline-installer-for-windows-9d23f658-3b97-68ab-d013-aa3c3e7495e0) | — | +| Installer | - Windows Installer 3.1 and above See the following Microsoft article for additional information about Windows Installer redistributable: [Windows Installer 3.1 v2 (3.1.4000.2435) is available](https://support.microsoft.com/en-us/topic/windows-installer-3-1-v2-3-1-4000-2435-is-available-e3978d9b-5fbf-bfec-71b9-1a463290065a) | - Windows Installer 3.1 and above See the following Microsoft article for additional information about Windows Installer redistributable: [Windows Installer 3.1 v2 (3.1.4000.2435) is available](https://support.microsoft.com/en-us/topic/windows-installer-3-1-v2-3-1-4000-2435-is-available-e3978d9b-5fbf-bfec-71b9-1a463290065a) | + +## Other Components + +To monitor your data sources, you will need to install additional software components on Auditor +Server, in the monitored environment, or in both locations. + +| Data source | Components | +| --------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| - Active Directory - Exchange Server - Exchange Online | _On the computer where_ Auditor _Server_ _is installed:_ - [Windows PowerShell 3.0](https://www.microsoft.com/en-us/download/details.aspx?id=34595) and above | +| - AD FS | _On the computer where_ Auditor _Server_ _is installed:_ - Windows Remote Management must be configured to allow remote PowerShell usage. For that, set up the **TrustedHosts** list: - to include all AD FS servers, use the following cmdlet: `Set-Item wsman:\localhost\Client\TrustedHosts -value '*' -Force;` - to include specific AD FS servers (monitored items), do the following: 1. Use Get cmdlet to obtain the existing **TrustedHosts** list. 2. If necessary, add the IP addresses of required AD FS servers to existing list (use comma as a separator). 3. Provide the updated list to the cmdlet as a parameter. For example: `Set-Item wsman:\localhost\Client\TrustedHosts -value '172.28.57.240,172.28.57.127' -Force;` See the following Microsoft article [Installation and configuration for Windows Remote Management](https://docs.microsoft.com/en-us/windows/win32/winrm/installation-and-configuration-for-windows-remote-management) for additional information about TrustedHosts. | +| - Windows Server (with enabled network traffic compression) - User Activity | _In the monitored environment:_ - .NET Framework 4.8 and above. See the following Microsoft article for additional information about .Net Framework installer redistributable: [Microsoft .NET Framework 4.8 offline installer for Windows.](https://support.microsoft.com/en-us/topic/microsoft-net-framework-4-8-offline-installer-for-windows-9d23f658-3b97-68ab-d013-aa3c3e7495e0) | +| - Microsoft Entra ID Ports - SharePoint Online | Usually, there is no need in any additional components for data collection. | +| - Oracle Database | Oracle Database 12c and above: _On the computer where_ Auditor _Server_ _is installed:_ - Oracle Instant Client. - Download the appropriate package from Oracle website: [Instant Client Packages](https://www.oracle.com/database/technologies/instant-client.html). Netwrix recommends installing the latest available version (Netwrix Auditor is compatible with version 12 and above). - Install, following the instructions, for example,[ Instant Client Installation for Microsoft Windows 64-bit](https://www.oracle.com/database/technologies/instant-client/winx64-64-downloads.html#instant-client-installation-for-microsoft-windows-64-bit). Check your Visual Studio Redistributable version. Applicable packages for each Oracle Database version with downloading links are listed in the installation instructions: [Instant Client Installation for Microsoft Windows 64-bit](https://www.oracle.com/database/technologies/instant-client/winx64-64-downloads.html#instant-client-installation-for-microsoft-windows-64-bit). Oracle Database 11g: Auditor provides limited support of Oracle Database 11g. See the [Considerations for Oracle Database 11g](/docs/auditor/10.7/configuration/oracle/overview.md#considerations-for-oracle-database-11g) topic for additional information. _On the computer where_ Auditor _Server_ _is installed:_ - [Microsoft Visual C++ 2010 Redistributable Package](https://www.microsoft.com/en-us/download/details.aspx?id=14632)—can be installed automatically during the monitoring plan creation. - Oracle Data Provider for .NET and Oracle Instant Client Netwrix recommends the following setup steps: 1. Download the [64-bit Oracle Data Access Components 12c Release 4 (12.1.0.2.4) for Windows x64 (ODAC121024_x64.zip)](http://www.oracle.com/technetwork/database/windows/downloads/index-090165.html) package. 2. Run the setup and select the Data Provider for .NET checkbox. Oracle Instant Client will be installed, too. 3. On the ODP.NET (Oracle Data Provider) step make sure the Configure ODP.NET and/or Oracle Providers for ASP.Net at machine-wide level checkbox is selected . | +| - Group Policy | _On the computer where_ Auditor _Server_ _is installed:_ - Group Policy Management Console. Download Remote Server Administration Tools that include GPMC for: - [Windows 8.1](http://www.microsoft.com/en-us/download/details.aspx?id=39296) - [Windows 10](https://www.microsoft.com/en-us/download/details.aspx?id=45520) - For Windows Server 2012 R2/2016, Group Policy Management is turned on as a Windows feature. | + +## Using SSRS-based Reports + +SQL Server Reporting Services are needed for this kind of reports. See the +[Requirements for SQL Server to Store Audit Data](/docs/auditor/10.7/requirements/sqlserver.md) topic for additional information. If +you plan to export or print such reports, check the requirements below. + +**NOTE:** Please note that if you are going to use SQL Express plan, do not install SSRS and Auditor +on the domain controller. + +Export SSRS-based reports + +To export SSRS-based reports, it is recommended Internet Explorer is installed on the machine where +Auditor client runs. If IE is not available, you can use the **Print** function or click the button +**Open in browser** and export the report directly from Netwrix Auditor. + +See the following Microsoft article for the full list of the supported browsers: +[Browser Support for Reporting Services and Power View](https://learn.microsoft.com/en-us/sql/reporting-services/browser-support-for-reporting-services-and-power-view?view=sql-server-ver16). + +Follow the steps to configure Internet Options to allow file downloads for the Local intranet zone. + +**Step 1 –** Select **Internet Options** and click **Security**. + +**Step 2 –** Select **Local intranet** zone and click **Custom level**. + +**Step 3 –** In the Settings list, locate **Downloads** > **File download** and make sure the +**Enabled** option is selected. + +Printing + +To print SSRS-based reports, SSRS Report Viewer and Auditor Client require ActiveX Control to be +installed and enabled on the local machine. See the +[Impossible to Export a Report ](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u000000HDfkCAG.html) +Netwrix knowledge base article for additional information. + +You can, for example, open any SSRS-based report using your default web browser and click **Print**. +The browser will prompt for installation of the additional components it needs for printing. Having +them installed, you will be able to print the reports from Auditor UI as well. + +## Server and Client + +It is recommended to deploy Auditor server on the virtualized server – to simplify backup, provide +scalability for future growth, and facilitate hardware configuration updates. Auditor client can be +deployed on a physical or virtual workstation, as it only provides the UI. + +You can deploy Netwrix Auditor on the VM running on any of the following hypervisors: + +- VMware vSphere Hypervisor (ESXi) + + - You can deploy Netwrix Auditor to VMware cloud. You can install the product to a virtual + machine or deploy as virtual appliance. + +- Microsoft Hyper-V +- Nutanix AHV (Acropolis Hypervisor Virtualization) 20180425.199 + +See the [Virtual Deployment Overview](/docs/auditor/10.7/install/virtualappliance/overview.md) topic for additional +information. + +### Domains and Trusts + +You can deploy Auditor on servers or workstations running supported Windows OS version. See system +requirements for details. + +Installation on the domain controller is not supported. + +If you plan to have the audited system and Auditor Server residing in the workgroups, consider that +in such scenario the product cannot be installed on the machine running Windows 7. + +Domain trusts, however, may affect data collection from different data sources. To prevent this, +consider the recommendations and restrictions listed below. + +| If Auditor Server and the audit system reside... | Mind the following restrictions... | +| ------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| In the same domain | No restrictions | +| In two-way trusted domains | No restrictions | +| In non-trusted domains | - The computer where Auditor Server is installed must be able to access the target system (server, share, database instance, SharePoint farm, DC, etc.) by its DNS or NetBIOS name. - For monitoring Active Directory, File Servers, SharePoint, Group Policy, Inactive Users, Logon Activity, and Password Expiration, the domain where your target system resides as well as all domain controllers must be accessible by DNS or NetBIOS names—use the _nslookup_ command-line tool to look up domain names. - For monitoring Windows Server and User Activity, each monitored computer (the computer where Netwrix Auditor User Activity Core Service resides) must be able to access the Auditor Server host by its DNS or NetBIOS name. | +| In workgroups | - The computer where Auditor Server is installed must be able to access the target system (server, share, database instance, SharePoint farm, DC, etc.) by its DNS or NetBIOS name. - For monitoring Active Directory, File Servers, SharePoint, Group Policy, Inactive Users, Logon Activity, and Password Expiration, the domain where your target system resides as well as all domain controllers must be accessible by DNS or NetBIOS names—use the _nslookup_ command-line tool to look up domain names. - For monitoring Windows Server and User Activity, each monitored computer (the computer where Netwrix Auditor User Activity Core Service resides) must be able to access the Auditor Server host by its DNS or NetBIOS name. | + +In the next sections you will find some recommendations based on the size of your monitored +environment and the number of activity records (ARs) the product is planned to process per day. + +Activity record stands for one operable chunk of information in Auditor workflow. + +### Simple Deployment + +This scenario can be used for PoC, evaluation, or testing purposes. It can be also suitable for +small infrastructures, producing only several thousands of activity records per day. In this +scenario, you only deploy Auditor Server and default client, selecting Full installation option +during the product setup. + +![na_setup_select_type_thumb_0_0](/images/auditor/10.7/requirements/na_setup_select_type_thumb_0_0.webp) + +If you plan to implement this scenario in bigger environments, consider hardware requirements listed +in the Auditor documentation. + +### Distributed Deployment (Client-Server) + +In this scenario, multiple Auditor clients are installed on different machines. + +Follow the steps to perform distributed deployment. + +**Step 1 –** Install Auditor server and default client, selecting Full installation during the +product setup. + +**Step 2 –** Then install as many clients as you need, running the setup on the remote machines and +selecting Client installation during the setup. Alternatively, you can install Auditor client using +Group Policy. See the [Install Client via Group Policy](/docs/auditor/10.7/install/viagrouppolicy.md) topic for +additional information. + +Default local client will be always installed together with the Auditor in all scenarios. diff --git a/docs/auditor/10.8/requirements/sqlserver.md b/docs/auditor/10.8/requirements/sqlserver.md new file mode 100644 index 0000000000..1a615a4ca6 --- /dev/null +++ b/docs/auditor/10.8/requirements/sqlserver.md @@ -0,0 +1,296 @@ +--- +title: "Requirements for SQL Server to Store Audit Data" +description: "Requirements for SQL Server to Store Audit Data" +sidebar_position: 40 +--- + +# Requirements for SQL Server to Store Audit Data + +If you plan to generate reports, use alerts and run search queries in Netwrix Auditor, consider that +your deployment must include Microsoft SQL Server where audit data will be stored. For report +generation, Reporting Services (or Advanced Services) are also required. + +Supported SQL Server versions and editions are listed below. + +Due to limited database size, Express Edition (with Reporting Services) is recommended only for +evaluation, PoC or small environments. For production environment, consider using Standard or +Enterprise Edition. + +| Version | Edition | +| ---------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| SQl Server 2022 | - Standard or Enterprise Edition - [Express Edition](https://www.microsoft.com/en-us/download/details.aspx?id=104781) with [Reporting Services](https://www.microsoft.com/en-us/download/details.aspx?id=104502) (for evaluation, PoC and small environments) | +| SQL Server 2019 (on-premises Windows version) cumulative update 10 and above | - Standard or Enterprise Edition - [Express Edition](https://go.microsoft.com/fwlink/?linkid=866658) with [Reporting Services](https://www.microsoft.com/en-us/download/details.aspx?id=100122) (for evaluation, PoC and small environments) | +| SQL Server 2017 | - Standard or Enterprise Edition - [Express Edition](https://go.microsoft.com/fwlink/?linkid=866658) with [Reporting Services](https://www.microsoft.com/en-us/download/details.aspx?id=100122) (for evaluation, PoC and small environments) | +| SQL Server 2016 | - Standard or Enterprise Edition - [Express Edition with Advanced Services (SP2)](https://www.microsoft.com/en-us/download/details.aspx?id=56840) (for evaluation, PoC and small environments) | +| SQL Server 2014 | - Standard or Enterprise Edition - [Express Edition with Advanced Services](https://www.microsoft.com/en-us/download/details.aspx?id=42299) (for evaluation, PoC and small environments) | +| SQL Server 2012 | - Standard or Enterprise Edition - [Express Edition with Advanced Services](http://www.microsoft.com/en-us/download/details.aspx?id=29062) (for evaluation, PoC and small environments) | + +**NOTE:** SQL express is only supported for small environments. It might cause performance issues on +the medium and large environments. + +SQL Server +[AlwaysOn Availability Group](https://docs.microsoft.com/en-us/sql/database-engine/availability-groups/windows/overview-of-always-on-availability-groups-sql-server) +can also be used for hosting Netwrix Auditor audit databases. For that, after specifying audit +database settings in Netwrix Auditor, you should manually add created database to a properly +configured AlwaysOn Availability Group. These steps must be taken each time a new audit database is +created in Netwrix Auditor. + +See the +[Add a database to an Always On availability group with the 'Availability Group Wizard'](https://docs.microsoft.com/en-us/sql/database-engine/availability-groups/windows/availability-group-add-database-to-group-wizard) +Microsoft article for details on adding a database to AlwaysOn Availability Group. + +You can configure Netwrix Auditor to use an existing SQL Server instance, or deploy a new instance. + +If your deployment planning reveals that SQL Server Express Edition will be suitable for your +production environment, then you can install, for example, SQL Server 2016 SP2 Express with Advanced +Services using the Audit Database Settings wizard or by manually downloading it from Microsoft web +site. See the Install Microsoft SQL Server and Reporting Services section for additional +information. + +## SQL Server and Databases + +Netwrix Auditor uses SQL Server databases as operational storages that keep audit data for analysis, +search and reporting purposes. Supported versions are SQL Server 2012 and later (Reporting Services +versions should be 2012 R2 or later). + +- You will be prompted to configure the default SQL Server instance when you create the first + monitoring plan; also, you can specify it Netwrix Auditor settings. +- You can configure Netwrix Auditor to use an existing instance of SQL Server, or deploy a new + instance, as described in the [Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) + topic. + +For evaluation and PoC projects you can deploy Microsoft SQL Server 2016 SP2 Express Edition with +Advanced Services (sufficient for report generation). + +For production deployment in bigger environments, it is recommended to use Microsoft SQL Server +Standard Edition or higher because of the limited database size and other limitations of Express +Edition. + +Make your choice based on the size of the environment you are going to monitor, the number of users +and other factors. This refers, for example, to Netwrix Auditor for Network Devices: if you need to +audit successful logons to these devices, consider that large number of activity records will be +produced, so plan for SQL Server Standard or Enterprise edition (Express edition will not fit). + +Netwrix Auditor supports automated size calculation for all its databases in total, displaying the +result, in particular, in the +[Database Statistics](/docs/auditor/10.7/admin/healthstatus/dashboard/databasestatistics.md) of the Health Status +dashboard. This feature, however, is supported only for SQL Server 2012 SP3 and later. + +### Databases + +To store data from the data sources included in the monitoring plan, the Monitoring Plan Wizard +creates an Audit Database. Default database name is `Netwrix_Auditor_`. + +It is strongly recommended to target each monitoring plan at a separate database. + +Also, several dedicated databases are created automatically on the default SQL Server instance. +These databases are intended for storing various data, as listed below. + +| Database name | Description | +| ------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| `Netwrix_AlertsDB` | Stores alerts. | +| `Netwrix_Auditor_API` | Stores activity records collected using Integration API. | +| `Netwrix_Auditor_EventLog` | Stores internal event records. | +| **`Netwrix_CategoriesDB`** | Intended for integration with Netwrix Data Classification. This database is always created but is involved in the workflow only if the DDC Provider is enabled. See for more information. | +| `Netwrix_CommonDB` | Stores views to provide cross-database reporting. | +| `Netwrix_ImportDB` | Stores data imported from Long-Term Archive. | +| **`Netwrix_OverviewReportsDB`** | Stores data required for overview reports. | +| **`Netwrix_Self_Audit`** | Stores data collected by Netwrix Auditor self-audit (optional, created if the corresponding feature is enabled). | + +These databases usually do not appear in the UI; they are only listed in the **Database statistics** +widget of the **Health Status** dashboard. If you need their settings to be modified via SQL Server +Management Studio, please contact your database administrator. For example, you may need to change +logging and recovery model (by default, it is set to **simple** for all these databases, as well as +for the Audit databases). + +## Install Microsoft SQL Server and Reporting Services + +Netwrix Auditor uses Microsoft SQL Server database as short-term data storage and utilizes SQL +Server Reporting Services engine for report generation. You can either use your existing SQL Server +for these purposes, or deploy a new server instance. System requirements for SQL Server are listed +in the corresponding section of this guide. + +Consider the following: + +- Supported versions are 2012 and later. +- **NOTE:** Please, note that for the Reporting Services, only English operating systems are + supported. +- Supported editions are Enterprise, Standard and Express with Advanced Services (it includes + Reporting Services). +- If downloading SQL Server Express Edition with Advanced Services from Microsoft site, make sure + you download the file whose name contains SQLEXPRADV. Otherwise, Reporting Services will not be + deployed, and you will not be able to analyze and report on collected data. + +By the way of example, this section provides instructions on how to: + +- [SQL Server Reporting Services](/docs/auditor/10.7/requirements/sqlserverreportingservice.md) + +For detailed information on installing other versions/editions, refer to Microsoft website. + +Maximum database size provided in SQL Server Express editions may be insufficient for storing data +in bigger infrastructures. Thus, when planning for SQL Server, consider maximum database capacity in +different editions, considering the size of the audited environment. + +## SQL Server + +When planning for SQL Server that will host Auditor databases, consider the following: + +- For PoC, evaluation scenario or small environment SQL Server can run on the same computer where + Netwrix Auditor Server will be installed, or on the remote machine accessible by Netwrix Auditor. + Remember to check connection settings and access rights. +- In large and extra-large infrastructures SQL Server should be installed on a separate server or + cluster. Installation of Netwrix Auditor and SQL Server on the same server is not recommended in + such environments. +- If you plan to have Netwrix Auditor and SQL Server running on different machines, establish fast + and reliable connection between them (100 Mbps or higher). +- Both standalone servers and SQL Server clusters are supported, as well as AlwaysOn Availability + Groups. +- You can configure Netwrix Auditor to use an existing SQL Server instance, or create a new one. As + an option, you can install SQL Server 2016 Express Edition, using the Audit Database Settings + wizard or manually downloading it from Microsoft web site (see Install Microsoft SQL Server and + Reporting Services). + +**CAUTION:** It is not recommended to install Netwrix Auditor databases to a production SQL Server +instance. Such instances may have a lot of maintenance plans or scripts running that may affect data +uploaded by the product. The product databases are designed for reporting and searching and do not +require maintenance or backup. For the long-term data storage, Netwrix Auditor uses Long-Term +Archive. See [File-Based Repository for Long-Term Archive](/docs/auditor/10.7/requirements/longtermarchive.md) for additional +information. + +If you select to set up a new SQL Server instance, the current user account (this should be a member +of local Administrators group) will be assigned the _sysadmin_ server role for it. + +You will also need to provide a path for storing the SQL Server databases - it is recommended to +specify the data drive for that purpose (by default, system drive is used). + +- If you plan to have more than one Netwrix Auditor Servers in your network, make sure to configure + them to use different SQL Server instances. The same SQL Server instance cannot be used to store + audit data collected by several Netwrix Auditor Servers. +- Consider that sufficient access rights will be required for the account that will write data to + the audit databases hosted on the default SQL Server. This account should be assigned the + following roles: + + 1. **Database owner (db_owner)** database-level role + 2. dbcreator server-level role + + This account can be specified when you configure the + [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) settings. + +## Database Sizing + +For database sizing, it is recommended to estimate: + +- Size of the environment you are going to monitor +- Amount of activity records produced by the audited system +- Retention policy for the audit databases +- Maximum database size supported by different SQL Server versions + +To estimate the number of the activity records produced by your data sources, collected and saved by +Auditor during the week, you can use the Activity records by date widget of the Health Status +dashboard. See the +[Activity Records Statistics](/docs/auditor/10.7/admin/healthstatus/dashboard/activityrecordstatistics.md) topic for +additional information. + +Auditor supports automated size calculation for all its databases in total, displaying the result, +in particular, in the Database Statistics widget of the Health Status dashboard. To estimate current +capacity and daily growth for each database, you can click View details and examine information in +the table. See the [Database Statistics](/docs/auditor/10.7/admin/healthstatus/dashboard/databasestatistics.md) +topic for additional information. + +This feature is supported only for SQL Server 2012 SP3 and later. + +Remember that database size in SQL Server Express editions may be insufficient. For example, +Microsoft SQL Server 2012 SP3 Express Edition has the following limitations which may affect +performance: + +- Each instance uses only up to 1 GB of RAM +- Each instance uses only up to 4 cores of the first CPU +- Database size cannot exceed 10 GB + +## Database Settings + +Settings of the certain Audit database, including hosting SQL Server, can be specified when you +create a monitoring plan and configure data collection for an audited system. Consider the +following: + +- To store data from the data sources included in the monitoring plan, you can configure the Audit + database on the default SQL Server (recommended), or select another server. +- By default, database name will be `Netwrix_Auditor_`; you can name the + database as you need, for example, `Active_Directory_Audit_Data`. + +To avoid syntax errors, for instance, in the PowerShell cmdlets, it is recommended to use the +underscore character (`_`) instead of space character in the database names. + +If not yet existing on the specified SQL server instance, the database will be created there. For +this operation to succeed, ensure that Netwrix Auditor service account has sufficient rights on that +SQL Server. + +Settings of other Auditor databases cannot be modified. + +### Example + +As a database administrator, you can have SQL Server cluster of 2 servers, and 2 Oracle servers. If +so, you can create 2 monitoring plans: + +1. First monitoring plan for collecting data from SQL Servers, targeted at + `Netwrix_Auditor_SQL_Monitoring` database. +2. Second monitoring plan for collecting data from Oracle servers, targeted at + `Netwrix_Auditor_Oracle_Monitoring` database. + +### Database Retention + +Consider that retention is a global setting, that is, it applies to all Audit databases you +configure for your monitoring plans. + +Follow the steps to change database retention after the product deployment. + +**Step 1 –** In the Auditor main screen, select Settings > Audit Database. + +![audit_db_settings](/images/auditor/10.7/requirements/audit_db_settings.webp) + +**Step 2 –** In the dialog displayed, make sure the Clear stale data when a database retention +period is exceeded: is set to ON, then click Modify to specify the required retention period (in +days). + +This setting also applies to the `Netwrix_Auditor_API` database. + +## Configure Audit Database Account + +This is the account that Auditor uses to write the collected audit data to the audit databases. +Starting with version 9.96, you can use Group Managed Service Account (gMSA) for that purpose. + +_Remember,_ gMSA cannot be used to access SSRS. Use a standard account for that. See the +[SQL Server Reporting Services](/docs/auditor/10.7/requirements/sqlserverreportingservice.md) topic for additional information. + +This account must be granted the **Database owner (`db_owner`)** role and the **dbcreator** server +role on the SQL Server instance hosting your audit databases. + +Follow the steps to assign the **dbcreator** and **`db_owner`** roles. + +**Step 3 –** On the computer where SQL Server instance with the Audit Database resides, navigate to +**Start** > **All Programs** > **Microsoft SQL Server** > **SQL Server Management Studio**. + +**Step 4 –** Connect to the server. + +**Step 5 –** In the left pane, expand the **Security** node. Right-click the **Logins** node and +select **New Login** from the pop-up menu. + +![manualconfig_ssms_newlogin2016](/images/1secure/configuration/sqlserver/manualconfig_ssms_newlogin2016.webp) + +**Step 6 –** Click **Search** next to **Login Name** and specify the user that you want to assign +the **`db_owner`** role to. + +**Step 7 –** Select **Server roles** on the left and assign the **dbcreator** role to the new login. + +**Step 8 –** Select the **User Mapping** tab. Select all databases used by Auditor to store audit +data in the upper pane and check **`db_owner`** in the lower pane. + +**NOTE:** This step is only required when changing the existing Audit Database Account to a new one. + +**Step 9 –** If the account that you want to assign the **`db_owner`** role to has been already +added to **SQL Server Logins**, expand the **Security** > **Logins** node, right-click the account, +select **Properties** from the pop-up menu, and edit its roles. + +If you need to migrate the Audit Database, see the +[How to Migrate Netwrix Auditor Databases to Another SQL Server Instance](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA00g000000Pbd8CAC.html) +knowledge base article. diff --git a/docs/auditor/10.8/requirements/sqlserverreportingservice.md b/docs/auditor/10.8/requirements/sqlserverreportingservice.md new file mode 100644 index 0000000000..a0cd1f9838 --- /dev/null +++ b/docs/auditor/10.8/requirements/sqlserverreportingservice.md @@ -0,0 +1,94 @@ +--- +title: "SQL Server Reporting Services" +description: "SQL Server Reporting Services" +sidebar_position: 50 +--- + +# SQL Server Reporting Services + +Netwrix Auditor utilizes SQL Server Reporting Services (SSRS) engine for report generation. + +If you want to generate reports and run search queries against data collected by Netwrix Auditor, +you should configure SQL Server Reporting Services (2012 R2 and above required). + +Consider the following: + +- SQL Server and SQL Server Reporting Services can be deployed on the separate machines only in + commercial edition. SQL Server Express Edition with Advanced Services does not support such + deployment scenario. + +**NOTE:** It is recommended to use HTTPS instead of HTTP. HTTPS connection should also be configured +for Reporting Service. + +If you plan, however, not to use Netwrix Auditor built-in intelligence (search, alerts or reports) +but only to receive e-mail notifications on audit data collection results, you may not need to +configure SSRS or audit database settings. + +## Configure SSRS Account + +An account used to upload data to the SQL Server Reporting Services (SSRS) Server must be granted +the Content Manager role on the SSRS **Home** folder. + +**NOTE:** gMSA cannot be used to access SSRS. Use a standard account for that purpose. + +Follow the steps to assign the Content Manager role. + +**Step 1 –** Navigate to your **Report Manager** URL. + +**Step 2 –** On the Home page, navigate to **Folder Settings** and click **New Role Assignment** +(the path can slightly vary depending on your SQL Server version). + +**Step 3 –** Specify an account in the following format: _domain\user_. The account must belong to +the same domain where Netwrix Auditor is installed, or to a trusted domain. + +**Step 4 –** Select **Content Manager**. + +## Grant Additional Permissions on Report Server + +To be able to generate a report, any user assigned the Global administrator, Global reviewer, or +Reviewer role must be granted the Browser role on the Report Server. Netwrix Auditor grants this +role automatically when adding a user. If for some reason the product was unable to grant the role, +do it manually. + +Follow the steps to assign the Browser role to a user. + +**Step 1 –** Open the **Report Manager** URL in your web browser. + +**Step 2 –** Depending on the user's delegated scope, select the entire Home folder or drill-down to +specific data sources or event reports. + +**Step 3 –** Navigate to **Manage Folder** (the path can slightly vary depending on your SQL Server +version) and select Add group or user. + +**Step 4 –** Specify an account in the following format: _domain\user_. The account must belong to +the same domain where Netwrix Auditor Server is installed, or to a trusted domain. + +**Step 5 –** Select **Browser**. + +As a rule, Auditor can use Reporting Services with the default settings. However, to ensure that +Reporting Services is properly configured, perform the following procedure: + +You must be logged in as a member of the local Administrators group on the computer where SQL Server +2016 Express is installed. + +Follow the steps to verify Reporting Services installation. + +**Step 6 –** Navigate to **Start >\_\_**All Apps > SQL Server\_**\_Reporting Services Configuration +Manager**. + +**Step 7 –** In the Reporting Services Configuration Connection dialog, make sure that your local +report server instance (for example, _SQLExpress_) is selected, and click **Connect**. + +**Step 8 –** In the **Reporting Services Configuration Manager** left pane, select **Web Service +URL**. Make sure that: + +- **Virtual Directory** is set to _ReportServer_``_ (e.g., + \_ReportServer_SQLEXPRESS_ for _SQLEXPRESS_ instance) +- **TCP Port** is set to _80_ + +**Step 9 –** In the Reporting Services Configuration Manager left pane, select **Database**. Make +sure that the SQL Server Name and Database Name fields contain correct values. If necessary, click +**Change Database** and complete the Report Server Database Configuration wizard. + +**Step 10 –** In the Reporting Services Configuration Manager left pane, select **Report Manager +URL**. Make sure **Virtual Directory** is set correctly, and that the URL is valid. diff --git a/docs/auditor/10.8/requirements/supporteddatasources/_category_.json b/docs/auditor/10.8/requirements/supporteddatasources/_category_.json new file mode 100644 index 0000000000..aee8f9a445 --- /dev/null +++ b/docs/auditor/10.8/requirements/supporteddatasources/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Supported Data Sources", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "supporteddatasources" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/requirements/supporteddatasources/monitoredobjecttypes.md b/docs/auditor/10.8/requirements/supporteddatasources/monitoredobjecttypes.md new file mode 100644 index 0000000000..cef1ac3231 --- /dev/null +++ b/docs/auditor/10.8/requirements/supporteddatasources/monitoredobjecttypes.md @@ -0,0 +1,76 @@ +--- +title: "Monitored Object Types, Actions, and Attributes" +description: "Monitored Object Types, Actions, and Attributes" +sidebar_position: 10 +--- + +# Monitored Object Types, Actions, and Attributes + +Netwrix Auditor monitored object types, actions, attributes and components for each data source are +located in the following topics: + +- [Active Directory](/docs/auditor/10.7/configuration/activedirectory/overview.md) +- [AD FS](/docs/auditor/10.7/configuration/activedirectoryfederatedservices/overview.md) +- [Exchange](/docs/auditor/10.7/configuration/exchange/overview.md) +- [File Servers](/docs/auditor/10.7/configuration/fileservers/overview.md) + + - [Dell Data Storage](/docs/auditor/10.7/configuration/fileservers/delldatastorage/overview.md) + - [Dell Isilon/PowerScale](/docs/auditor/10.7/configuration/fileservers/dellisilon/overview.md) + - [NetApp Data ONTAP](/docs/auditor/10.7/configuration/fileservers/netappcmode/overview.md) + - [Nutanix](/docs/auditor/10.7/configuration/fileservers/nutanix/overview.md) + - [Qumulo](/docs/auditor/10.7/configuration/fileservers/qumulo/overview.md) + - [Synology](/docs/auditor/10.7/configuration/fileservers/synology/overview.md) + - [Windows File Servers](/docs/auditor/10.7/configuration/fileservers/windows/overview.md) + +- [Group Policy](/docs/auditor/10.7/configuration/grouppolicy/overview.md) +- [Logon Activity](/docs/auditor/10.7/configuration/logonactivity/overview.md) +- [Microsoft 365](/docs/auditor/10.7/configuration/microsoft365/overview.md) + + - [Exchange Online](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/overview.md) + - [Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/overview.md) + - [SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/overview.md) + - [MS Teams](/docs/auditor/10.7/configuration/microsoft365/teams/overview.md) + +- [Network Devices](/docs/auditor/10.7/configuration/networkdevices/overview.md) +- [Oracle Database](/docs/auditor/10.7/configuration/oracle/overview.md) +- [SharePoint](/docs/auditor/10.7/configuration/sharepoint/overview.md) +- [SQL Server](/docs/auditor/10.7/configuration/sqlserver/overview.md) +- [User Activity](/docs/auditor/10.7/configuration/useractivity/overview.md) +- [VMware](/docs/auditor/10.7/configuration/vmware/overview.md) +- [Windows Server](/docs/auditor/10.7/configuration/windowsserver/overview.md) + +Review the list of actions audited and reported by Netwrix Auditor. Actions vary depending on the +data source and the object type. + +| Action | Active Directory | Active Directory Federation Services | Exchange Exchange Online | File Servers | Group Policy | Logon Activity | Microsoft Entra ID (formerly Azure AD) | Oracle database | SharePoint SharePoint Online | SQL Server | User Activity | VMware Servers | Windows Server | +| ----------------------------------------- | ---------------- | ------------------------------------ | ------------------------ | ------------ | ------------ | -------------- | -------------------------------------- | --------------- | ---------------------------- | ---------- | ------------- | -------------- | -------------- | +| Added | + | - | +\* | + | + | – | + | + | + | + | – | + | + | +| Removed | + | - | +\* | + | + | – | + | + | + | + | – | + | + | +| Modified | + | – | +\* | + | + | – | + | + | + | + | – | + | + | +| Add (failed attempt) | – | – | – | + | – | – | – | + | – | – | – | – | – | +| Remove (failed attempt) | – | – | – | + | – | – | – | + | – | – | – | – | – | +| Modify (failed attempt) | – | – | – | + | – | – | – | + | – | – | – | – | + | +| Read | – | – | +\* | + | – | – | – | + | + | – | – | – | – | +| Read (failed attempt) | – | – | – | + | – | – | – | + | – | – | – | – | – | +| Renamed | – | – | – | + | – | – | – | + | +\*\* | – | – | – | – | +| Moved | – | – | +\* | + | – | – | – | – | + | – | – | – | – | +| Rename (failed attempt) | – | – | – | + | – | – | – | + | – | – | – | – | – | +| Move (failed attempt) | – | – | – | + | – | – | – | – | – | – | – | – | – | +| Checked in | – | – | – | – | – | – | – | – | + | – | – | – | – | +| Checked out | – | – | – | – | – | – | – | – | + | – | – | – | – | +| Discard check out | – | – | – | – | – | – | – | – | + | – | – | – | – | +| Successful logon | – | + | – | – | – | + | + | + | – | + | – | + | – | +| Failed logon | – | + | – | – | – | + | + | + | – | + | – | +\*\*\* | – | +| Logoff | – | – | – | – | – | – | – | + | – | – | – | – | – | +| Copied | – | – | +\* | + | – | – | – | – | +\*\* | – | – | – | – | +| Sent | – | – | +\* | – | – | – | – | – | – | – | – | – | – | +| Activated | – | – | – | – | – | – | – | – | – | – | + | – | – | +| Support for state-in-time data collection | + | – | + | + | + | - | + | - | + | - | - | + | + | + +\* —these actions are reported when auditing non-owner mailbox access for Exchange or Exchange +Online. + +\*\* — these actions are reported for SharePoint Online only. + +\*\*\* — Auditor will not collect data on _Failed Logon_ event for VMware in case of incorrect logon +attempt through VMware vCenter Single Sign-On; also, it will not collect logons using SSH. diff --git a/docs/auditor/10.8/requirements/supporteddatasources/supporteddatasources.md b/docs/auditor/10.8/requirements/supporteddatasources/supporteddatasources.md new file mode 100644 index 0000000000..e05ddb9c92 --- /dev/null +++ b/docs/auditor/10.8/requirements/supporteddatasources/supporteddatasources.md @@ -0,0 +1,457 @@ +--- +title: "Supported Data Sources" +description: "Supported Data Sources" +sidebar_position: 10 +--- + +# Supported Data Sources + +This section lists platforms and systems that can be monitored with Netwrix Auditor. + +## Active Directory + +Auditor supports monitoring the following domain controller operating system versions: + +- Windows Server 2025 +- Windows Server 2022 +- Windows Server 2019 +- Windows Server 2016 +- Windows Server 2012 R2 +- Windows Server 2012 + +See the [Active Directory](/docs/auditor/10.7/configuration/activedirectory/overview.md) topic for additional +information. + +## Active Directory Federation Services (AD FS) + +Auditor supports monitoring the following AD FS operating system versions: + +- AD FS 5.0 – Windows Server 2019 +- AD FS 4.0 – Windows Server 2016 +- AD FS 3.0 – Windows Server 2012 R2 + +See the [AD FS](/docs/auditor/10.7/configuration/activedirectoryfederatedservices/overview.md) topic for additional +information. + +## Exchange + +Auditor supports monitoring the following Exchange Server versions: + +- Microsoft Exchange Server 2019 +- Microsoft Exchange Server 2016 +- Microsoft Exchange Server 2013 + +See the [Exchange](/docs/auditor/10.7/configuration/exchange/overview.md) topic for additional information. + +## File Servers + +Dell Data Storage + +Auditor supports monitoring the following device versions: + +- Dell Data Storage (Unity XT, UnityVSA) running any of the following operating environment + versions: + + - 5.4.x + - 5.2.x + - 5.0.x + - 4.5.x + - 4.4.x + +- Dell VNX/VNXe/Celerra families +- Dell PowerStore family + +**NOTE:** Only CIFS configuration is supported. + +See the [Dell Data Storage](/docs/auditor/10.7/configuration/fileservers/delldatastorage/overview.md) topic for +additional information. + +Dell Isilon/PowerScale + +Auditor supports monitoring the following device versions: + +- Dell Isilon/PowerScale versions 7.2 – 9.10 + +**NOTE:** Only CIFS configuration is supported. + +Auditing of _System_ zone is not supported. As stated by Dell, this zone should be reserved for +configuration access only. Current data should be stored in other access zones. See the +[Isilon OneFS 8.2.1 CLI Administration Guide](https://www.dellemc.com/en-us/collaterals/unauth/technical-guides-support-information/2019/09/docu95372.pdf) +for additional information. + +See the [Dell Isilon/PowerScale](/docs/auditor/10.7/configuration/fileservers/dellisilon/overview.md) topic for +additional information. + +NetApp Data ONTAP + +Auditor supports monitoring the following device versions: + +- Clustered-Mode + + - 9.0 – 9.16 + - 8.3 + +**NOTE:** Only CIFS configuration is supported. + +See the [NetApp Data ONTAP](/docs/auditor/10.7/configuration/fileservers/netappcmode/overview.md) topic for +additional information. + +Nutanix + +Auditor supports monitoring the following device versions: + +- Files 3.6 - 4.3.0 + +See the [Nutanix](/docs/auditor/10.7/configuration/fileservers/nutanix/overview.md) topic for additional +information. + +Qumulo + +Auditor supports monitoring the following device versions: + +- Core 3.3.5 - 6.x.x + +See the [Qumulo](/docs/auditor/10.7/configuration/fileservers/qumulo/overview.md) topic for additional information. + +Synology + +Auditor supports monitoring the following device versions: + +- DSM 7.2 +- DSM 7.1 +- DSM 7.0 +- DSM 6.2.3 + +See the [Synology](/docs/auditor/10.7/configuration/fileservers/synology/overview.md) topic for additional +information. + +Windows File Servers + +Auditor supports monitoring the following operating system versions: + +- Windows Server 2025 +- Windows Server 2022 +- Windows Server 2019 +- Windows Server 2016 +- Windows Server 2012 R2 +- Windows Server 2012 + +- Windows 11 +- Windows 10 (32 and 64-bit) +- Windows 8.1 (32 and 64-bit) +- Windows 7 (32 and 64-bit) + +See the [Windows File Servers](/docs/auditor/10.7/configuration/fileservers/windows/overview.md) topic for +additional information. + +## Group Policy + +Auditor supports monitoring the following domain controller operating system versions: + +- Windows Server 2025 +- Windows Server 2022 +- Windows Server 2019 +- Windows Server 2016 +- Windows Server 2012 R2 +- Windows Server 2012 + +See the [Group Policy](/docs/auditor/10.7/configuration/grouppolicy/overview.md) topic for additional information. + +## Logon Activity + +Auditor supports monitoring the following domain controller operating system versions: + +- Windows Server 2025 +- Windows Server 2022 +- Windows Server 2019 +- Windows Server 2016 +- Windows Server 2012 R2 +- Windows Server 2012 + +See the [Logon Activity](/docs/auditor/10.7/configuration/logonactivity/overview.md) topic for additional +information. + +## Microsoft 365 + +Exchange Online + +Auditor supports monitoring the following versions: + +- Exchange Online version provided within Microsoft Office 365 +- Microsoft GCC (government community cloud) and GCC High + + **NOTE:** DoD tenant types are not supported. + +See the [Exchange Online](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/overview.md) topic for +additional information. + +Microsoft Entra ID (formerly Azure AD) + +Auditor supports monitoring the following versions: + +- Microsoft Entra ID version provided within Microsoft Office 365 +- Microsoft GCC (government community cloud) and GCC High + + **NOTE:** DoD tenant types are not supported. + +See the +[Microsoft Entra ID (formerly Azure AD)](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/overview.md) +topic for additional information. + +Microsoft Teams (MS Teams) + +Auditor supports monitoring the following versions: + +- Microsoft Entra ID version provided within Microsoft Office 365 +- Microsoft GCC (government community cloud) and GCC High + + **NOTE:** DoD tenant types are not supported. + +See the [MS Teams](/docs/auditor/10.7/configuration/microsoft365/teams/overview.md) topic for additional +information. + +SharePoint Online + +Auditor supports monitoring the following versions: + +- SharePoint Online version provided within Microsoft Office 365 +- Microsoft GCC (government community cloud) and GCC High + + **NOTE:** DoD tenant types are not supported. + +See the [SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/overview.md) topic for +additional information. + +## Network Devices + +Cisco ASA Devices + +Auditor supports monitoring the following device versions: + +- ASA (Adaptive Security Appliance) 8 and above + +See the [Configure Cisco ASA Devices](/docs/auditor/10.7/configuration/networkdevices/ciscoasa.md) topic for +additional information. + +Cisco IOS Devices + +Auditor supports monitoring the following device versions: + +- IOS (Internetwork Operating System) 12, 15, 16, and 17 + +See the [Configure Cisco IOS Devices](/docs/auditor/10.7/configuration/networkdevices/ciscoios.md) topic for +additional information. + +Cisco Meraki Dashboard + +Auditor supports monitoring the following device versions: + +- Netwrix recommends the latest version of the Meraki Dashboard + +See the [Cisco Meraki Dashboard ](/docs/auditor/10.7/configuration/networkdevices/ciscomerakidashboard.md) topic for +additional information. + +Cisco FTD + +Auditor supports monitoring the following device versions: + +- FTD (Firepower Threat Defense) 6.5 + +Fortinet FortiGate Devices + +Auditor supports monitoring the following device versions: + +- FortiOS 5.6 and above + +See the [Configure Fortinet FortiGate Devices](/docs/auditor/10.7/configuration/networkdevices/fortinetfortigate.md) +topic for additional information. + +HPE Aruba Devices + +Auditor supports monitoring the following device versions: + +- Aruba OS 6.46.4.x – 8.6.0.x (Mobility Master, Mobility Controller) + +See the [Configure Pulse Secure Devices](/docs/auditor/10.7/configuration/networkdevices/pulsesecure.md) topic for +additional information. + +Juniper Devices + +Auditor supports monitoring the following device versions: + +- vSRX with Junos OS 12.1, Junos OS 18.1, Junos OS 20.4R2 +- vMX with Junos OS 17.1 + +See the [Configure Juniper Devices](/docs/auditor/10.7/configuration/networkdevices/juniper.md) topic for additional +information. + +PaloAlto Devices + +Auditor supports monitoring the following device versions: + +- PAN-OS 7.0, 8.0, 9.0, 10.0 + +See the [Configure PaloAlto Devices](/docs/auditor/10.7/configuration/networkdevices/paloalto.md) topic for +additional information. + +Pulse Secure Devices + +Auditor supports monitoring the following device versions: + +- 9.1R3 and above + +See the [Configure Pulse Secure Devices](/docs/auditor/10.7/configuration/networkdevices/pulsesecure.md) topic for +additional information. + +SonicWall Devices + +Auditor supports monitoring the following device versions: + +- WAF 2.0.0.x / SMA v9.x & v10.x +- NS 6.5.х.х with SonicOS 6.5.х and 7.0.x +- SMA 12.2 + +See the [Configure SonicWall Devices](/docs/auditor/10.7/configuration/networkdevices/sonicwall.md) topic for +additional information. + +## Oracle + +Auditor supports monitoring the following versions: + +- Database 23c On-Premise +- Database 21c On-Premise +- Database 19c On-Premise +- Database 18c On-Premise +- Database 12c On-Premise (12.1, 12.2) +- Database 11g, limited support + + **NOTE:** See the + [Considerations for Oracle Database 11g](/docs/auditor/10.7/configuration/oracle/overview.md#considerations-for-oracle-database-11g) + topic for additional information. + +- Oracle Database Cloud Service (Enterprise Edition) + +See the [Oracle Database](/docs/auditor/10.7/configuration/oracle/overview.md) topic for additional information. + +## SharePoint + +Auditor supports monitoring the following versions: + +- Microsoft SharePoint Server Subscription Edition +- Microsoft SharePoint Server 2019 +- Microsoft SharePoint Server 2016 +- Microsoft SharePoint Foundation 2013 and SharePoint Server 2013 +- Microsoft SharePoint Foundation 2010 and SharePoint Server 2010 + +See the [SharePoint](/docs/auditor/10.7/configuration/sharepoint/overview.md) topic for additional information. + +## SQL Server + +Auditor supports monitoring the following versions: + +- Microsoft SQL Server 2022 +- Microsoft SQL Server 2019 +- Microsoft SQL Server 2017 +- Microsoft SQL Server 2016 +- Microsoft SQL Server 2014 +- Microsoft SQL Server 2012 + +**NOTE:** Linux-based versions are not supported. + +See the [SQL Server](/docs/auditor/10.7/configuration/sqlserver/overview.md) topic for additional information. + +## User Activity + +Auditor supports monitoring the following versions: + +- Windows Server 2025 +- Windows Server 2022 +- Windows Server 2019 +- Windows Server 2016 +- Windows Server 2012 R2 +- Windows Server 2012 + +- Windows 11 +- Windows 10 (32 and 64-bit) +- Windows 8.1 (32 and 64-bit) +- Windows 7 (32 and 64-bit) + +User Activity data source can support around 300 targets with one user session per target without +scalability issues: + +- Depending on how dense is the actual user activity, the number can be more for servers but less + for workstations. +- 50-100 concurrent sessions per terminal server. + +Netwrix recommends using the User Activity auditing only for those infrastructure areas that require +more attention due to their sensitivity or criticality. Applicable usage scenarios include, for +example: + +- Terminal servers where users can log in from external locations +- Areas accessible by contractor personnel +- Servers with sensitive information +- Sessions with elevated privileges + +See the [User Activity](/docs/auditor/10.7/configuration/useractivity/overview.md) topic for additional information. + +## VMware Servers + +Auditor supports monitoring the following versions: + +- VMware ESX/ESXi: 6.0 – 6.7, 7.0, 8.0 +- VMware vCenter Server: 6.0 – 6.7, 7.0, 8.0 + +See the [VMware](/docs/auditor/10.7/configuration/vmware/overview.md) topic for additional information. + +## Windows Servers + +Windows Servers & Desktops + +Auditor supports monitoring the following operating system versions: + +- Windows Server 2025 +- Windows Server 2022 +- Windows Server 2019 +- Windows Server 2016 +- Windows Server 2012 R2 +- Windows Server 2012 + +- Windows 11 +- Windows 10 (32 and 64-bit) +- Windows 8.1 (32 and 64-bit) +- Windows 7 (32 and 64-bit) + +DNS & DHCP + +Auditor supports monitoring the following operating system versions: + +- Windows Server 2025 +- Windows Server 2022 +- Windows Server 2019 +- Windows Server 2016 +- Windows Server 2012 R2 +- Windows Server 2012 + +**NOTE:** DNS support is limited on Windows Server 2008 to Windows Server 2008 SP2 (32 and 64-bit). +DHCP is not supported on Windows Server 2008. + +Internet Information Services (IIS) + +Auditor supports monitoring the following operating system versions: + +- IIS 7.0 and above. + +See the [Windows Server](/docs/auditor/10.7/configuration/windowsserver/overview.md) topic for additional +information. + +## Netwrix Integration API + +In addition to data sources monitored within the product, Auditor supports technology integrations +leveraging its API. Download free add-ons from +[Netwrix Auditor Add-on Store](https://www.netwrix.com/netwrix_addons.html) to enrich your audit +trails with activity from the following systems and applications. + +Also, there are even add-ons that can export data collected by Auditor to other systems (e.g., +ArcSight and ServiceNow). + +See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/requirements/workingfolder.md b/docs/auditor/10.8/requirements/workingfolder.md new file mode 100644 index 0000000000..d69c2c240a --- /dev/null +++ b/docs/auditor/10.8/requirements/workingfolder.md @@ -0,0 +1,23 @@ +--- +title: "Working Folder" +description: "Working Folder" +sidebar_position: 70 +--- + +# Working Folder + +The working folder is a file-based storage that also keeps operational information (configuration +files of the product components, log files, and other data). To ensure audit trail continuity, +Netwrix Auditor also caches some audit data locally in its working folder for a short period (up to +30 days) prior to storing it to the Long-Term Archive or audit database. + +By default, the working folder is located at _%ProgramData%\Netwrix Auditor_. + +In busy environments and during activity peaks, working folder size may grow significantly and +require up to 1 TB, so plan for this file-based storage accordingly. To track the working folder +capacity, you can use the Working Folder widget of the Health Status dashboard. + +If you want to change the working folder default location, run the specially designed utility. See +the +[How to Migrate Netwrix Auditor Working Folder to a New Location](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA00g000000PcOLCA0.html) +Knowledge Base article for additional information. diff --git a/docs/auditor/10.8/tools/_category_.json b/docs/auditor/10.8/tools/_category_.json new file mode 100644 index 0000000000..8043775584 --- /dev/null +++ b/docs/auditor/10.8/tools/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Tools", + "position": 60, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/tools/auditconfigurationassistant.md b/docs/auditor/10.8/tools/auditconfigurationassistant.md new file mode 100644 index 0000000000..7e26d90730 --- /dev/null +++ b/docs/auditor/10.8/tools/auditconfigurationassistant.md @@ -0,0 +1,139 @@ +--- +title: "Audit Configuration Assistant" +description: "Audit Configuration Assistant" +sidebar_position: 10 +--- + +# Audit Configuration Assistant + +Auditor Audit Configuration Assistant utility helps you to assess your environment readiness to +being monitored with the product and automatically adjust the audit settings with the requirements. + +It checks current settings of your Active Directory and Group Policies against those required for +monitoring of selected data sources: Group Policy settings, auditing entries for directory +partitions, and admin audit log settings of Exchange server. Assessment results are reported on the +screen and can be downloaded as a PDF file. + +You can instruct the utility to automatically apply the required settings. + +For that, you should ensure that the account you plan to use for accessing the target domain has the +necessary rights. + +**Audit Configuration Assistant** is a part of Netwrix Auditor product setup. It is installed +together with the Auditor client and can be launched from the **Start** **menu** **>\_\_**Netwrix +Auditor\*\*\*\*>**\*\*Netwrix Auditor Audit Configuration Assistant**. Alternatively, you can launch +this utility from the monitoring plan wizard for Active Directory data source. See the Launch Audit +Configuration Assistant section for additional information. + +Currently, the utility supports Active Directory and Logon Activity data sources. + +## Prerequisites + +When working with the utility, you will need to provide an account with the rights required to +access the AD audit entries and other settings. Thus, the account should be a member of the +following groups: + +- _Domain Admins_ — to access audit policies and audit entries on the domain controllers +- _Enterprise Admins_ — to configure audit entries for AD partitions +- _Organization Management_ or _Records Management_ (in Exchange organization) — to configure admin + audit log settings + +You can create a dedicated account for the assessment purposes, include it in these groups for the +assessment period, and after finishing, remove it from these privileged groups. + +## Usage + +To assess and adjust the audit settings with Audit Configuration Assistant, take the following +steps: + +1. Launch Audit Configuration Assistant +2. Start Assessment +3. View Results +4. Complete the process + +## Launch Audit Configuration Assistant + +Audit Configuration Assistant is a part of Netwrix Auditor product setup. It is installed together +with Netwrix Auditor client and can be launched from the **Start** menu. + +Select **Netwrix Auditor**→**Netwrix Auditor Audit Configuration Assistant**. + +- If the utility is installed on the same machine as Netwrix Auditor server, you will be taken to + the **Welcome** step. +- If the utility is installed on the remote machine together with Netwrix Auditor client, the + initial window will allow you to enter the settings to connect to Netwrix Auditor Server. Specify + the following: + +| Setting | Description | +| ------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Host | Enter the name or IP address of Netwrix Auditor Server to connect to. | +| Use specified credentials | If not selected, then your current Windows credentials will be used to access Netwrix Auditor Server. Select this option if you want to use other credentials | +| User | Enter user account in the _domain\name_ format. | +| Password | Enter account password. | + +After you click **Connect**, the connection with Netwrix Auditor Server will be established, and you +will be taken to the **Welcome** step. + +Alternatively, you can launch this utility by clicking the corresponding link: + +- From [Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) for Active Directory data + source. +- From the [Active Directory](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md) within the plan. +- From the [Logon Activity](/docs/auditor/10.7/admin/monitoringplans/logonactivity/overview.md) source properties. + +## Start Assessment + +Follow the steps to start assessment. + +**Step 1 –** Specify the monitoring scope —select what you plan to monitor with Netwrix Auditor. You +can select both **Active Directory** and **Logon Activity**, or any of them. + +![audit_cfg_assist_creds](/images/auditor/10.7/tools/audit_cfg_assist_creds.webp) + +**Step 2 –** If you launched **Audit Configuration Assistant** from the **Start** menu (not from the +monitoring plan settings), enter the name of Active Directory domain you want to assess. + +**Step 3 –** Enter credentials that will be used to access the audit setting of that domain. This +account must be included in the following groups: + +- _Domain Admins_ — to access audit policies and audit entries on the domain controllers +- _Enterprise Admins_ — to configure audit entries for AD partitions +- _Organization Management_ or _Records Management_ (in Exchange organization) — to configure admin + audit log settings + +**Step 4 –** Click **Start assessment**. + +## View Results + +At this step, you will be presented the results of the environment readiness assessment, including: + +- the list of current and required settings for each entity +- the list of issues (if any) that occurred during the assessment + +![assessment_results_thumb_0_0](/images/auditor/10.7/tools/assessment_results_thumb_0_0.webp) + +Follow the steps to view results. + +**Step 1 –** Examine the report. + +**Step 2 –** If some issues occurred due to the lack of access rights during the assessment, you can +click **Back** and modify the settings provided at the previous step. + +**Step 3 –** If you need to save this report (for example, to get your manager's approval), click +**Export to PDF**. + +**Step 4 –** When ready, you can automatically adjust audit settings with the requirements — for +that, click **Apply required settings**. + +## Complete the process + +After you click **Apply required settings**, the utility will proceed with modifying your current +audit settings. Operation progress will be reported in the bottom of the window. + +**Step 1 –** Wait for the process to complete. + +**Step 2 –** Review the results. Successfully applied settings will be reported with a green tick; +those that did not manage to apply will be with the yellow warning sign and explanatory text. + +**Step 3 –** You can click **Start over** to get to the Start Assessment, fix the issues and perform +the procedure again, or click **Finish**. diff --git a/docs/auditor/10.8/tools/eventlogmanager/_category_.json b/docs/auditor/10.8/tools/eventlogmanager/_category_.json new file mode 100644 index 0000000000..eaf962d344 --- /dev/null +++ b/docs/auditor/10.8/tools/eventlogmanager/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Event Log Manager", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "eventlogmanager" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/tools/eventlogmanager/eventlog.md b/docs/auditor/10.8/tools/eventlogmanager/eventlog.md new file mode 100644 index 0000000000..b7dfeb9bef --- /dev/null +++ b/docs/auditor/10.8/tools/eventlogmanager/eventlog.md @@ -0,0 +1,25 @@ +--- +title: "Event Log" +description: "Event Log" +sidebar_position: 20 +--- + +# Event Log + +You can fine-tune Netwrix Auditor by specifying data that you want to exclude from the Event Log +monitoring scope. + +Follow the steps to exclude data from the Event Log monitoring scope: + +**Step 1 –** Navigate to the _%Netwrix Auditor installation folder%\Event Log Management_ folder. + +**Step 2 –** Edit the \*.txt files, based on the following guidelines: + +- Each entry must be a separate line. +- A wildcard (\*) is supported. You can use \* for cmdlets and their parameters. +- Lines that start with the # sign are treated as comments and are ignored. + +| File | Description | Syntax | +| ------------------ | ----------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------- | +| OmitErrorsList.txt | Contains a list of data collection errors and warnings to be excluded from the Netwrix Auditor System Health event log. | `Error text` | +| omitServerList.txt | Contains a list of server names or servers IP addresses to be excluded from processing. | `ip address` or `server name` For example: `192.168.3.*` | diff --git a/docs/auditor/10.8/tools/eventlogmanager/eventlogmanager.md b/docs/auditor/10.8/tools/eventlogmanager/eventlogmanager.md new file mode 100644 index 0000000000..a461d05031 --- /dev/null +++ b/docs/auditor/10.8/tools/eventlogmanager/eventlogmanager.md @@ -0,0 +1,236 @@ +--- +title: "Event Log Manager" +description: "Event Log Manager" +sidebar_position: 20 +--- + +# Event Log Manager + +Netwrix Auditor Event Log Manager standalone tool consolidates and archives event log data, and +allows setting up alerts on critical events including unauthorized access to mailbox in your +Exchange organization and events generated by Auditor. + +Netwrix Auditor relies on native logs for collecting audit data. Therefore, successful change and +access auditing requires a certain configuration of native audit settings in the audited environment +and on the Auditor console computer. Configuring your IT infrastructure may also include enabling +certain built-in Windows services, etc. Proper audit configuration is required to ensure audit data +integrity, otherwise your change reports may contain warnings, errors or incomplete audit data. + +**CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See +the +[Antivirus Exclusions for Netwrix Auditor](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA04u0000000HirCAE.html) +knowledge base article for additional information. + +You can configure your IT Infrastructure for monitoring in one of the following ways: + +- Automatically through a monitoring plan – This is a recommended method. If you select to + automatically configure audit in the target environment, your current audit settings will be + checked on each data collection and adjusted if necessary. +- Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and + reliable audit data. You can enable Auditor to continually enforce the relevant audit policies or + configure them manually: + + - For Windows-based platforms: the **Remote Registry** service must be running and its **Startup + Type** must be set to _"Automatic"_. + - For Syslog-based platforms: the Syslog daemon must be configured to redirect events. + +Review the following for additional information: + +- Create Monitoring Plans for Event Logs +- Configure Audit Archiving Filters for Event Log +- Create Monitoring Plan for System Health Log +- Review Past Event Log Entries +- Import Audit Data with the Database Importer +- [Create Alerts for Event Log](/docs/auditor/10.7/admin/alertsettings/create/createeventlog.md) +- [Create Alerts for Non-Owner Mailbox Access Events](/docs/auditor/10.7/admin/alertsettings/create/createmailboxaccess.md) + +## Create Monitoring Plans for Event Logs + +Follow the steps to configure monitoring plan for event logs. + +**Step 1 –** Navigate to **Start** **>** Netwrix Auditor **>** Netwrix Auditor**Event Log +Manager\_\_**.\_\_ + +**Step 2 –** On the main page, you will be prompted to select a monitoring plan. Click Add to add +new plan. + +**Step 3 –** Configure basic parameters as follows: + +- Enable event log collection — Select the checkbox to start monitoring event logs. +- Monitoring plan — Enter a name for a new list of monitored computers. +- Notification recipients — Specify one or several email addresses for users to receive daily Event + Log collection status notifications. Use semicolon to separate several addresses. +- Monitored computers — Select items that you want to audit. You can add several items to your + monitoring plan. Click **Add** and complete the following: + + | Option | Description | + | ----------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | + | Computer name | Allows specifying a single computer by entering its FQDN, NETBIOS or IP address. You can click Browse to select a computer from the list of computers in your network. | + | Active Directory container | Allows specifying a whole AD container. Click **Browse** to select from the list of containers in your network. You can also: - Select a particular computer type to be monitored within the chosen AD container: **Domain controllers, Servers (excluding domain controllers)**, or **Workstations**. - Click **Exclude** to specify domains, OUs, and containers you do not want to audit. The list of containers does not include child domains of trusted domains. Use other options **(Computer name, IP address range**, or **Import computer names from a file**) to specify the target computers. | + | IP address range / Computers within an IP range | Allows specifying an IP range for the audited computers. To exclude computers from within the specified range, click **Exclude**. Enter the IP range you want to exclude, and click **Add**. | + +**Step 4 –** You can specify multiple computer names by importing a list from a .txt file (one +computer name/IP address per line is accepted). Click Import and select a .txt file. You can choose +whether to import the list once, or to update it on every data collection. + +**Step 5 –** Navigate to the General tab and configure the following: + +| Option | Description | +| ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| User name Password | Enter the account that will be used by Netwrix Auditor Event Log Manager for data collection. For a full list of the rights and permissions required for the account, and instructions on how to configure them, refer to the Permissions for Event Log Auditing section. | +| Audit archiving filters | Define what events will be saved to the Long-Term Archive or the Audit Database. Refer to for detailed instructions on how to configure audit archiving filters. | +| Alerts | Configure alerts that will be triggered by specific events. Refer to [Create Alerts for Event Log](/docs/auditor/10.7/admin/alertsettings/create/createeventlog.md) for detailed instructions on how to configure Netwrix Auditor Event Log Manager alerts. | + +**Step 6 –** Navigate to the Notifications tab and complete the following fields: + +| Option | Description | +| --------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| SMTP server | Enter your SMTP server address. It can be your company's Exchange server or any public mail server (e.g., Gmail, Yahoo). | +| Port number | Specify your SMTP server port number. | +| Sender address | Enter the address that will appear in the From field. **_RECOMMENDED:_** click **Send Test Email**. The system will send a test message to the specified email address and inform you if any problems are detected. | +| SMTP authentication | Select this checkbox if your mail server requires the SMTP authentication. | +| User name | Enter a user name for the SMTP authentication. | +| Password | Enter a password for SMTP authentication. | +| Use Secure Sockets Layer encrypted connection (SSL) | Select this checkbox if your SMTP server requires SSL to be enabled. | +| Use implicit SSL | Select this checkbox if the implicit SSL mode is used, which means that an SSL connection is established before any meaningful data is sent. | +| Enforce certificate validation to ensure security | Select this checkbox if you want to verify security certificate on every email transmission. The option is not available for auditing User Activity as well Netwrix Auditor tools. | + +**Step 7 –** Navigate to the Audit Database tab to configure Audit Database and review SQL Server +settings. Netwrix Auditor Event Log Manager synchronizes Audit Database and reports settings with +the default Audit Database configuration from Netwrix Auditor Server. If this option is disabled, +contact your Netwrix Auditor Global administrator and make sure that these settings are properly +configured in Netwrix Auditor Server. Refer to [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) +for detailed instructions on how to configure the Audit Database settings. + +**Step 8 –** Complete the following fields: + +| Option | Description | +| ----------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Write data to Audit Database and enable reports | Select if you want to generate reports. Even if you do not select this checkbox now, you will still be able to configure these settings later, but already collected audit data will not be imported in the Audit Database. | +| Write event descriptions to Audit Database | Select if you want to see the exact error or warning text. | +| Store events for... days | Specify the Audit Database retention period. This setting affects all monitoring plans. The minimum value specified across the plans will be applied. When configuring, mind that your data will be deleted automatically when its retention period is over. | + +**NOTE:** You cannot edit SQL Server settings for Netwrix Auditor Event Log Manager. + +**Step 9 –** Navigate to the Advanced tab and configure the following: + +| Option | Description | +| ---------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Enable network traffic compression | If enabled, a Compression Service will be automatically launched on the audited computer, collecting and prefiltering data. This significantly improves data transfer and minimizes the impact on the target computer performance. | +| Specify notification delivery time | Modify the Event Log collection status email delivery schedule. | + +If you want to review the Event Log Collection Status email, the Event Log Collection Status email +shows whether data collection for your monitoring plan completed successfully or with warnings and +errors. + +![changesummary_eventlog](/images/auditor/10.7/tools/changesummary_eventlog.webp) + +## Configure Audit Archiving Filters for Event Log + +Audit archiving filters define what events will be saved to the Long-Term Archive or the Audit +Database, and provide more granular reporting. For example, if you are going to audit Internet +Information Services (IIS) or track health status of the product, enable the Internet Information +Services Events or Netwrix Auditor System Health filter respectively. You can also skip certain +events with exclusive filters (e.g., computer logons). You can enable or disable, and modify +existing filters, and create new filters. To do it, click Configure next to Audit archiving filters. + +The product allows creating inclusive and exclusive audit archiving filters. + +Follow the steps to configure audit archiving filters. + +**Step 1 –** To create or modify an audit archiving filter, see Create Monitoring Plans for Event +Logs. + +**Step 2 –** To collect events required to generate a specific report, you must select a filter +which name coincides with this report’s name. Click Enable and select Filters for Reports. All +filters required to store events for all available reports will be selected automatically. + +Follow the steps to create or edit an audit archiving filter. + +**Step 1 –** On the Audit archiving filters page, click Add or select a filter and click Edit. + +**Step 2 –** Complete the fields. Review the following for additional information: + +| Option | Description | +| ---------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| The Event tab | | +| Name | Specify the filter name. | +| Description | Enter the description for this filter (optional). | +| Event Log | Select an event log from the drop-down list. You will be alerted on events from this event log. You can also input a different event log. To find out a log’s name, navigate to Start > Windows Administrative Tools→ Event Viewer → Applications and Services Logs → Microsoft → Windows and expand the required `` node, right-click the file under it and select Properties. Find the event log’s name in the Full Name field. Netwrix Auditor Event Log Manager does not collect the Analytic and Debug logs, so you cannot configure alerts for these logs. You can use a wildcard (`*`). For inclusive filters: all Windows logs except for the ones mentioned above will be saved. For exclusive: all Windows logs events will be excluded. | +| Write to/Don't write to | Select the location to write/not to write events to, depending on the filter type (inclusive or exclusive). It is recommended to write events both to the Long-Term Archive and to the Audit Database, because if your database is corrupted, you will be able to import the necessary data from the Long-Term Archive using the DB Importer tool. See Import Audit Data with the Database Importer for more information. | +| The Event Fields tab | | +| Event ID | Enter the identifier of a specific event that you want to be save. You can add several IDs separated by comma. | +| Event Level | Select the event types that you want to be save. If the Event Level check box is cleared, all event types will be saved. If you want to select the inclusive Success Audit/Failure Audit filters, note that on these platforms these events belong to the “Information” level, so they will not be collected if you select the Information checkbox in the Exclusive Filters. | +| Computer | Specify a computer (as it is displayed in the Computer field in the event properties). Only events from this computer will be saved. If you want to specify several computers, you can define a case-sensitive mask for this parameter. Below is an example of a mask: - `*` - any machine - computer – a machine named ‘computer’ - `*`computer`*` - machines with names like ‘xXxcomputerxXx’ or ‘newcomputer’ - computer? – machines with names like ‘computer1’ or ‘computerV’ - co?puter - machines with names like ‘computer’ or ‘coXputer’ - ????? – any machine with a 5-character name - ???`*` - any machine with a 3-character name or longer | +| User | Enter a user’s name. Only events created by this user will be saved. If you need to specify several users, you can define a mask for this parameter in the same way as described above. | +| Source | Specify this parameter if you want to save events from a specific source. Input the event source as it is displayed in the Source field in the event properties. If you need to specify several sources, you can define a mask for this parameter in the same way as described above. | +| Category | Specify this parameter if you want to save a specific events category. | +| The Insertion Strings tab | | +| Consider the following event Insertion Strings | Specify this parameter if you want to store events containing a specific string in the EventData. You can use a wildcard (`*`). Click Add and specify Insertion String. | + +## Create Monitoring Plan for System Health Log + +If you want to generate reports on health state and to be alerted on important Netwrix Auditor +health events, you need to create a dedicated monitoring plan for this log with Netwrix Auditor +Event Log Manager standalone tool. + +You can also review and filter Netwrix Auditor health events right in the product. See +[Netwrix Auditor Health Log](/docs/auditor/10.7/admin/healthstatus/dashboard/healthlog.md) for addditional +information + +Follow the steps to configure the Netwrix Auditor System Health log monitoring. + +**Step 1 –** Start Netwrix Auditor Event Log Manager and create the new monitoring plan. + +**Step 2 –** Make sure that the Enable event log collection checkbox is selected. Specify the name +for the new monitoring plan, for example, _"\_Netwrix Auditor \_Health Status"_. + +**Step 3 –** Navigate to the Monitored computers list and add a server where the Netwrix Auditor +Server resides. + +**Step 4 –** Navigate to the Audit Database tab and select Write event descriptions to Audit +Database if you want to see the exact error or warning text. Make sure that Audit Database settings +are configured properly, follow the [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) + +**Step 5 –** Click Configure next to Audit archiving filters and select the Netwrix Auditor System +Health Log filter in the Inclusive Filters list. + +This procedure describes the basic steps, required for creation of the monitoring plan that will be +used to collect data on Netwrix Auditor health status events. + +## Review Past Event Log Entries + +Netwrix Auditor Event Log Manager collects event log entries and stores them to the Audit Archive. +Follow the steps to review past events. + +**Step 1 –** On the main Netwrix Auditor Event Log Manager page, click View next to View collected +events. + +**Step 2 –** In the Netwrix Auditor Event Viewer window, complete the following to narrow results: + +| Option | Description | +| --------------- | ---------------------------------------------------------------------- | +| Monitoring plan | Select the monitoring plan that audits desired event log entries. | +| Computer | If you have several items in the monitoring plan, adjust a computer. | +| Event log | Select event log that contains desired entries. | +| From... To... | Specify the time range for which you want to retrieve past audit data. | + +## Import Audit Data with the Database Importer + +Follow the steps to Import Audit Data with the Database Importer. + +**Step 1 –** On the main Netwrix Auditor Event Log Manager page, click Import Data. + +**Step 2 –** Select a monitoring plan and the time range for which you want to import data. + +**Step 3 –** Click Import. + +## Permissions for Event Log Auditing + +Before you start creating a monitoring plan to audit the event logs of your servers (including IIS), +plan for the account that will be used for data collection – it should meet the requirements listed +below. Then you will provide this account in the monitoring plan wizard. + +**On the target server:** + +The account must have be a member of the local Administrators group. diff --git a/docs/auditor/10.8/tools/eventlogmanager/windowseventlogs.md b/docs/auditor/10.8/tools/eventlogmanager/windowseventlogs.md new file mode 100644 index 0000000000..4a9a06d9d3 --- /dev/null +++ b/docs/auditor/10.8/tools/eventlogmanager/windowseventlogs.md @@ -0,0 +1,28 @@ +--- +title: "Windows Event Logs" +description: "Windows Event Logs" +sidebar_position: 10 +--- + +# Windows Event Logs + +The Remote Registry service must be enabled on the target computers. + +Follow the steps to enable the Remote Registry service. + +**Step 1 –** Navigate to Start > Windows Administrative Tools > Services. + +![Services Console](/images/1secure/configuration/computer/manualconfig_genevents_remoteregistry2016.webp) + +**Step 2 –** In the Services window, locate the Remote Registry service, right-click it and select +**Properties**. + +**Step 3 –** In the Remote Registry Properties dialog box, make sure the Startup type parameter is +set to _Automatic_ and click **Start**. + +![Remote Registry Properties dialog box](/images/1secure/configuration/computer/manualconfig_genevents_remoteregistry_start2016.webp) + +**Step 4 –** In the Services window, ensure that the Remote Registry service has the _Running_ +status on Windows Server 2012 and above. + +**NOTE:** The Remote Registry service should be enabled on the target server. diff --git a/docs/auditor/10.8/tools/inactiveusertracker.md b/docs/auditor/10.8/tools/inactiveusertracker.md new file mode 100644 index 0000000000..a118716279 --- /dev/null +++ b/docs/auditor/10.8/tools/inactiveusertracker.md @@ -0,0 +1,148 @@ +--- +title: "Inactive User Tracker" +description: "Inactive User Tracker" +sidebar_position: 30 +--- + +# Inactive User Tracker + +Auditor Inactive User Tracker standalone tool discovers inactive user and computer accounts. It +performs the following tasks: + +- Checks the managed domain or specific organizational units by inquiring all domain controllers, + and sends reports to managers and system administrators listing all accounts that have been + inactive for the specified number of days. +- Automatically deactivates inactive accounts by settings a random password, disabling, deleting or + moving them to a specified organizational unit. + + **NOTE:** The password that is generated will contain uppercase and lowercase letters, numbers + and special characters. The default value for the password length is 15 characters. You can + modify this password any time by configuring registry keys. See the Registry Keys topic for + additional information. + +- Windows Server 2025 +- Windows Server 2022 +- Windows Server 2019 +- Windows Server 2016 +- Windows Server 2012 R2 +- Windows Server 2012 + +## Create Monitoring Plan to Audit Inactive Users + +Follow the steps to create a monitoring plan to audit inactive users. + +**Step 1 –** Navigate to Start > Netwrix Auditor > Netwrix Auditor Inactive Users Tracker. + +**Step 2 –** On the main page, you will be prompted to select a monitoring plan. Click Add to add a +new monitoring plan. + +**Step 3 –** Configure basic parameters as follows: + +| Option | Description | +| ----------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Enable inactive user tracking | Select the checkbox to discover inactive users in your Active Directory domain. | +| Audited domain | Specify domain name in the FQDN format. | +| Send report to administrators | Enable this option and specify one or several email addresses for administrators to receive daily reports with a list of inactive users. Use semicolon to separate several addresses. | + +**Step 4 –** Navigate to the General tab and complete the following fields: + +| Option | Description | +| -------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Specify account which will be used to collect data: - User name - Password | Enter the account which will be used for data collection. See the[Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information about the full list of the rights and permissions for the account. | +| Consider user inactive after | Specify account inactivity period, after which a user is considered to be inactive. | +| Customize the report template | Click Edit to edit the notification template, for example, modify the text of the message. You can use HTML tags when editing a template. | +| Attach report as a CSV files | Select this option to receive reports attached to emails as CSV files. | + +The following variables can be used in the Inactive User Tracker message templates: + +| | | +| --------------- | -------------------- | +| mpName | Monitoring Plan Name | +| sAMAccountName | Account Name | +| sAMAccountType | Account Type | +| mail | E-Mail | +| inactivityTime | Inactivity Time | +| accountAge | Account Age | +| performedAction | Performed Action | + +**Step 5 –** Navigate to the Actions tab and complete the following fields: + +| Option | Description | +| ------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Notify manager after | Specify account inactivity period, after which the account owner's manager must be notified. | +| Set random password after | Specify account inactivity period, after which a random password will be set for this account. | +| Disable accounts after | Specify account inactivity period, after which the account will be disabled. | +| Move to a specific OU after | - Specify account inactivity period, after which the account will be moved to a specified organizational unit. - OU name—Specify OU name or select an AD container using ![select_button](/images/auditor/10.7/tools/select_button.webp) button. | +| Delete accounts after | Specify account inactivity period, after which the account will be removed. | +| Delete account with all its subnodes | Select this checkbox to delete an account that is a container for objects. | +| Notify managers only once | If this checkbox is selected, managers receive one notification on account inactivity and one on every action on accounts. Managers will receive a notification in the day when the account inactivity time will be the same as specified in the inactivity period settings. By default, managers receive notifications every day after the time interval of inactivity specified in the Notify managers after entry field. | + +**Step 6 –** Navigate to the Advanced tab and complete the following fields: + +| Option | Description | +| ----------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Filter by account name | Specify one or several user account names (e.g., \*John\*). Use semicolon to separate several names. Only user accounts that contain selected name will be notified and included in the administrators and managers reports. | +| Filter by organizational unit | To audit inactive users that belong to certain organizational units within your Active Directory domain, select this option and click Select OUs. In the dialog that opens, specify the OUs that you want to audit. Only users belonging to these OUs will be notified and included in the administrators and managers reports. | +| Process user accounts | Select this checkbox to audit user accounts. | +| Process computer accounts | Select this checkbox to audit computer accounts. | + +**Step 7 –** Navigate to the Notifications tab and complete the following fields: + +| Option | Description | +| --------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Use Netwrix Auditor notification settings | Select this option if you want to use modern authentication. Please note that modern authentication must already be configured in the monitoring plan you are going to use. If you select this option, the fields below are not needed. | +| SMTP server | Enter your SMTP server address. It can be your company's Exchange server or any public mail server (e.g., Gmail, Yahoo). | +| Port number | Specify your SMTP server port number. | +| Sender address | Enter the address that will appear in the From field. **_RECOMMENDED:_** click **Send Test Email**. The system will send a test message to the specified email address and inform you if any problems are detected. | +| SMTP authentication | Select this checkbox if your mail server requires the SMTP authentication. | +| User name | Enter a user name for the SMTP authentication. | +| Password | Enter a password for SMTP authentication. | +| Use Secure Sockets Layer encrypted connection (SSL) | Select this checkbox if your SMTP server requires SSL to be enabled. | +| Use implicit SSL | Select this checkbox if the implicit SSL mode is used, which means that an SSL connection is established before any meaningful data is sent. | +| Enforce certificate validation to ensure security | Select this checkbox if you want to verify security certificate on every email transmission. The option is not available for auditing User Activity as well Netwrix Auditor tools. | +| Display the following From address in email notifications | Enter the address that will appear in the "_From_" field in email notifications. This option does not affect notifications sent to users' managers and administrators. Before configuring the "_From_" field for user email notifications, make sure that your Exchange supports this option. | + +Review your configuration and click Save. + +## Review Report on Inactive Users + +Follow the steps to review report on inactive users. + +**Step 1 –** Click Generate next to Generate report on inactive users to view report immediately. + +![inactiveusersactivedirectory](/images/auditor/10.7/tools/inactiveusersactivedirectory.webp) + +## Registry Keys + +Review the basic registry keys that you may need to configure for monitoring inactive users within +your Active Directory domain with Netwrix Auditor. Navigate to Start > Run and type _"regedit"_. + +| Registry key (REG_DWORD type) | Description / Value | +| -------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| `HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Netwrix Auditor\Inactive Users Tracker` | | +| HideEmailAdditionalInfo | Defines whether to show or hide the header and footer in emails sent to managers (emails sent to administrators always have default header and footer): - 0—Show - Any other number—Hide | +| RandomPasswordLength | Defines the length of a random password to be set for inactive user. | +| WriteEventLog | Defines whether to write events to the Application Log: - 0—No - 1—Yes | + +## Monitoring Scope + +You can fine-tune Netwrix Auditor by specifying data that you want to exclude from the Inactive User +monitoring scope. + +Follow the steps to exclude data from the Inactive Users monitoring scope: + +**Step 1 –** Navigate to the `%PROGRAMDATA%\Netwrix Auditor\Inactive Users Tracker` folder. + +**NOTE:** This is default location. However, it may be changed because users can move this folder. + +**Step 2 –** Edit the \*.txt files, based on the following guidelines: + +- Each entry must be a separate line. +- A wildcard (\*) is supported. You can use \* for cmdlets and their parameters. +- Lines that start with the # sign are treated as comments and are ignored. + +| File | Description | Syntax | +| -------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------- | +| filter.txt | Contains a list of accounts to be excluded from processing. | `Username` | +| omitdclist.txt | Contains a list of domain controllers to be excluded from processing. Auditor skips all automated deactivation actions for inactive accounts (disable, move, delete) even if one domain controller is unavailable during scheduled task execution. Add the unavailable domain controllers to this file to ensure Auditor functions properly. | `Full DNS name` or `NetBIOS name` IP addresses are not supported. | +| omitoulist.txt | Contains a list of organizational units to be excluded from processing. | `Path` `*OU=OUNAME*` For example: If the OU is "sampledomain.sample/sampling", the syntax should be: `*OU=sampling*` | diff --git a/docs/auditor/10.8/tools/objectrestoread.md b/docs/auditor/10.8/tools/objectrestoread.md new file mode 100644 index 0000000000..2f7e6baf87 --- /dev/null +++ b/docs/auditor/10.8/tools/objectrestoread.md @@ -0,0 +1,98 @@ +--- +title: "Object Restore for Active Directory" +description: "Object Restore for Active Directory" +sidebar_position: 40 +--- + +# Object Restore for Active Directory + +With Netwrix Auditor you can quickly restore deleted and modified objects using the Netwrix Auditor +Object Restore for Active Directory tool shipped with the product. This tool enables AD object +restore without rebooting a domain controller and affecting the rest of the AD structure, and goes +beyond the standard tombstone capabilities. + +The following Windows Server versions are supported: + +- Windows Server 2025 +- Windows Server 2022 +- Windows Server 2019 +- Windows Server 2016 +- Windows Server 2012 R2 +- Windows Server 2012 + +Perform the following procedures: + +- Modify Schema Container Settings +- Roll Back Unwanted Changes + +## Modify Schema Container Settings + +By default, when a user or computer account is deleted from Active Directory, its password is +discarded as well as a domain membership. When you restore deleted accounts with the Netwrix Auditor +Object Restore for Active Directory tool, it rolls back a membership in domain and sets random +passwords which then have to be changed manually. If you want to be able to restore AD objects with +their passwords preserved, you must modify the Schema container settings so that account passwords +are retained when accounts are being deleted. + +To perform this procedure, you will need the +[ADSI Edit](http://technet.microsoft.com/en-us/library/cc773354(v=ws.10).aspx) utility.utility. + +Follow the steps to modify schema container settings. + +**Step 1 –** Navigate to Start > Windows Administrative Tools > ADSI Edit. + +**Step 2 –** Right-click the **ADSI Edit** node and select **Connect To**. In the **Connection +Settings** dialog, enable **Select a well-known Naming Context** and select **Schema** from the +drop-down list. + +**Step 3 –** Expand the Schema your_Root_Domain_name node. Right-click the CN=Unicode-Pwd attribute +and select Properties. + +![ad_object_restore_1](/images/auditor/10.7/tools/ad_object_restore_1.webp) + +**Step 4 –** Double-click the searchFlags attribute and set its value to _"8"_. + +![ad_object_restore_2](/images/auditor/10.7/tools/ad_object_restore_2.webp) + +Now you will be able to restore deleted accounts with their passwords preserved. + +## Roll Back Unwanted Changes + +Follow the steps to roll back unwanted changes. + +**Step 1 –** Navigate to Start > Netwrix Auditor > Netwrix Auditor Object Restore for Active +Directory. + +**Step 2 –** On the Select Rollback Period step, specify the period of time when the changes that +you want to revert occurred. You can either select a period between a specified date and the present +date, or between two specified dates. + +**Step 3 –** On the Select Rollback Source step, specify the rollback source. The following restore +options are available: + +- State-in-time snapshots — This option allows restoring objects from configuration snapshots made + by Netwrix Auditor. This option is more preferable since it allows to restore AD objects with all + their attributes. + + Complete the following fields: + + | Option | Description | + | ------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | + | Audited domain | Select a domain where changes that you want to rollback occurred. | + | Select a state-in-time snapshot | Select if you want to revert to a specific snapshot. Otherwise, the program will automatically search for the most recent snapshot that will cover the selected time period. | + +- Active Directory tombstones — This option is recommended when no snapshot is available. This is a + last resort measure as the tombstone holds only the basic object attributes. + +**Step 4 –** On the Analyzing Changes step, the product analyzes the changes made during the +specified time period. When reverting to a snapshot, the tool reviews the changes that occurred +between the specified snapshots. When restoring from a tombstone, the tool reviews all AD objects +put in the tombstone during the specified period of time. + +**Step 5 –** On the Rollback Results step, the analysis results are displayed. Select a change to +see its rollback details in the bottom of the window. Select an attribute and click Details to see +what changes will be applied if this attribute is selected for rollback. Check the changes you want +to roll back to their previous state. + +Wait until the tool has finished restoring the selected objects. On the last step, review the +results and click Finish to exit the wizard. diff --git a/docs/auditor/10.8/tools/overview.md b/docs/auditor/10.8/tools/overview.md new file mode 100644 index 0000000000..67d6c45012 --- /dev/null +++ b/docs/auditor/10.8/tools/overview.md @@ -0,0 +1,15 @@ +--- +title: "Tools" +description: "Tools" +sidebar_position: 60 +--- + +# Tools + +There are several tools available with Netwrix Auditor: + +- [Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md) +- [Event Log Manager](/docs/auditor/10.7/tools/eventlogmanager/eventlogmanager.md) +- [Inactive User Tracker](/docs/auditor/10.7/tools/inactiveusertracker.md) +- [Object Restore for Active Directory](/docs/auditor/10.7/tools/objectrestoread.md) +- [Password Expiration Notifier ](/docs/auditor/10.7/tools/passwordexpirationnotifier/overview.md) diff --git a/docs/auditor/10.8/tools/passwordexpirationnotifier/_category_.json b/docs/auditor/10.8/tools/passwordexpirationnotifier/_category_.json new file mode 100644 index 0000000000..3c6f127095 --- /dev/null +++ b/docs/auditor/10.8/tools/passwordexpirationnotifier/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Password Expiration Notifier", + "position": 50, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/auditor/10.8/tools/passwordexpirationnotifier/monitoringscope.md b/docs/auditor/10.8/tools/passwordexpirationnotifier/monitoringscope.md new file mode 100644 index 0000000000..0217766595 --- /dev/null +++ b/docs/auditor/10.8/tools/passwordexpirationnotifier/monitoringscope.md @@ -0,0 +1,25 @@ +--- +title: "Password Expiration Monitoring Scope" +description: "Password Expiration Monitoring Scope" +sidebar_position: 20 +--- + +# Password Expiration Monitoring Scope + +You can fine-tune Netwrix Auditor by specifying data that you want to exclude from monitoring and +alerting on password expiration. + +Follow the steps to exclude data from the Active Directory monitoring scope. + +**Step 1 –** Navigate to the \_%Netwrix Auditor installation folder%\Password Expiration +Alerting_folder. + +**Step 2 –** Edit the omitoulist.txt file, based on the following guidelines: + +- Each entry must be a separate line. +- A wildcard (\*) is supported. You can use \* for cmdlets and their parameters. +- Lines that start with the # sign are treated as comments and are ignored. + +| File | Description | Syntax | +| -------------- | --------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------- | +| omitoulist.txt | This file defines a list of OUs to exclude from being audited. To specify the OUs and their subOUs, type names each on a separate line. | `Name` For example: `*OU=C,OU=B,OU=A*` | diff --git a/docs/auditor/10.8/tools/passwordexpirationnotifier/overview.md b/docs/auditor/10.8/tools/passwordexpirationnotifier/overview.md new file mode 100644 index 0000000000..278be84ad0 --- /dev/null +++ b/docs/auditor/10.8/tools/passwordexpirationnotifier/overview.md @@ -0,0 +1,117 @@ +--- +title: "Password Expiration Notifier" +description: "Password Expiration Notifier" +sidebar_position: 50 +--- + +# Password Expiration Notifier + +Netwrix Auditor Password Expiration Notifier standalone tool checks which domain accounts or +passwords are about to expire in the specified number of days and sends notifications to users. It +also generates summary reports that can be delivered to system administrators and/or users' +managers. Besides, Netwrix Auditor Password Expiration Notifier allows checking the effects of a +password policy change before applying it to the managed domain. + +- Windows Server 2025 +- Windows Server 2022 +- Windows Server 2019 +- Windows Server 2016 +- Windows Server 2012 R2 +- Windows Server 2012 + +Review the following for additional information: + +- Configure Password Expiration Alerting +- Registry Key Configuration +- [Password Expiration Notifier Ports](/docs/auditor/10.7/tools/passwordexpirationnotifier/ports.md) +- [Password Expiration Monitoring Scope](/docs/auditor/10.7/tools/passwordexpirationnotifier/monitoringscope.md) + +## Configure Password Expiration Alerting + +Follow the steps to configure password expiration alerting. + +**Step 1 –** Navigate to **Start** > **Netwrix Auditor** > **Password Expiration Notifier**. + +**Step 2 –** On the main page, you will be prompted to select a monitoring plan. Click Add to add a +new monitoring plan. + +**Step 3 –** Configure basic parameters as follows: + +| Option | Description | +| ------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Enable password expiration alerting or inactive user tracking | Select the checkbox to discover expiring passwords or inactive users in your Active Directory domain. | +| Audited domain | Specify domain name in the FQDN format. | +| Send report to administrators | Enable this option and specify one or several email addresses for administrators to receive daily reports with a list of inactive users whose accounts/passwords are going to expire in the specified number of days. Use semicolon to separate several addresses. | + +**Step 4 –** Navigate to the **General** tab and complete the following fields: + +| Option | Description | +| -------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Specify account which will be used to collect data: - User name - Password | Enter the account which will be used for data collection. For a full list of the rights and permissions of this account, and instructions on how to configure them, refer to [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md). | +| Filter users by organizational unit | To audit users for expiring accounts/passwords that belong to certain organizational units within your Active Directory domain, select this option and click Select OUs. In the dialog that opens, specify the OUs that you want to audit. Only users belonging to these OUs will be notified and included in the administrators and managers reports. | +| Filter users by group | To audit users for expiring accounts/passwords that belong to certain groups within your Active Directory domain, select this option and click Select Groups. In the dialog that opens, specify the groups that you want to audit. Only users belonging to these groups will be notified and included in the administrators and managers reports. | +| Filter by account name | Specify one or several user account names (e.g., \*John\*). Use semicolon to separate several names. Only user accounts that contain selected name will be notified and included in the administrators and managers reports. | + +**Step 5 –** Navigate to the **Actions** tab and complete the following fields: + +| Option | Description | +| --------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Send report to the users’ managers | Enable this option to deliver reports to the user’s managers. To review and edit the user's managers 1. Start **Active Directory Users and Computers**. 2. Navigate to each group where the user belongs to, right-click it and select Properties. 3. In the `` Properties dialog, select the Managed By tab and review a manager. Update it if necessary. To edit a report template, click **Customize**. You can use HTML tags when editing a template. | +| List users whose accounts or passwords expire in `<>` days or less | Specify the expiration period for accounts and/or passwords to be included in the administrators and managers reports. | +| Only report on users with expiring accounts | Select this option to deliver reports on users with expiring accounts only and ignore users whose passwords will be valid for a rather long time. | +| Notify users | Select this option to notify users that their passwords and/or accounts are about to expire. | +| Every day if password expires in `<>` days or less | Select this option for users to be notified daily that their passwords are going to expire, and specify the number of days before the expiration date. To edit a report template, click **Customize**. You can use HTML tags when editing a template. In order to send a test email, click **Test** and select an account. Make sure this account has a password that expires within the period you specifed next to this option. | +| First/Second/Last time when password expires in `<>` days | Select this option for users to be notified three times, and specify the number of days before the expiration date for each of three notifications. To edit a report template, click **Customize**. You can use HTML tags when editing a template. In order to send a test email, click Test and select an account. Make sure this account has a password that expires within the period you specifed next to this option. | +| Notify users by email every day if their accounts expire in `<>` days | Select this option for users to be notified daily that their account is going to expire, and specify the number of days before the expiration date. In order to send a test email, click **Test** and select an account. Make sure this account has a password that expires within the period you specifed next to this option. | +| Notify users by text messages | Select this option for users to receive text messages if their passwords are about to expire. To edit SMS Notifications template, click Customize. - Every day if password expires in `<>` days or less — Select this option for users to be notified daily that their passwords are going to expire, and specify the number of days before the expiration date. - First/Second/Last time when password expires in `<>` days — Select this option for users to be notified three times, and specify the number of days before the expiration date for each of three notifications. - Provider name — Specify provider name. - Property name — Specify the name of the Active Directory User Property where the recipient's phone number is stored. Pager is the default property. If the Pager property of an AD User contains a full email address, Provider Name will be ignored. | + +**Step 6 –** Navigate to the **Notifications** tab and complete the following fields: + +| Option | Description | +| --------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Use Netwrix Auditor notification settings | Select this option if you want to use modern authentication. Please note that modern authentication must already be configured in the monitoring plan you are going to use. If you select this option, the fields below are not needed. | +| SMTP server | Enter your SMTP server address. It can be your company's Exchange server or any public mail server (e.g., Gmail, Yahoo). | +| Port number | Specify your SMTP server port number. | +| Sender address | Enter the address that will appear in the From field. **_RECOMMENDED:_** click **Send Test Email**. The system will send a test message to the specified email address and inform you if any problems are detected. | +| SMTP authentication | Select this checkbox if your mail server requires the SMTP authentication. | +| User name | Enter a user name for the SMTP authentication. | +| Password | Enter a password for SMTP authentication. | +| Use Secure Sockets Layer encrypted connection (SSL) | Select this checkbox if your SMTP server requires SSL to be enabled. | +| Use implicit SSL | Select this checkbox if the implicit SSL mode is used, which means that an SSL connection is established before any meaningful data is sent. | +| Enforce certificate validation to ensure security | Select this checkbox if you want to verify security certificate on every email transmission. The option is not available for auditing User Activity as well Netwrix Auditor tools. | +| Display the following From address in email notifications | Enter the address that will appear in the "_From_" field in email notifications. This option does not affect notifications sent to users' managers and administrators. Before configuring the "_From_" field for user email notifications, make sure that your Exchange supports this option. | + +**Step 7 –** Navigate to the **Advanced** tab and complete the following fields: + +| Option | Description | +| ---------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------- | +| Modify scheduled task start time | The default start time of the scheduled task is 3.00 AM every day. Click Modify to configure custom schedule. | +| Customize the report template | Click Customize to edit the notification template, for example, modify the text of the message. You can use HTML tags when editing a template. | +| Attach reports as a CSV files | Select this option to receive reports attached to emails as CSV files. | +| Ignore users who must change password at next logon | Select this option to exclude users who must change password at next logon from reports. | +| Ignore users with the "_Password never expires_" option enabled | Select this option to exclude users with the "_Password never expires_" option enabled from reports. | +| Ignore users who do not have email accounts | Select this option to exclude users who do not have email accounts from reports. | +| Ignore users whose passwords have already expired | Select this option to exclude users whose passwords have already expired from reports. | +| Include data on expiring accounts | Select this option to include data on expiring domain accounts further to expiring passwords information. | +| Only report on users with fine-grained password policies applied | Select this option to include in reports only users who have fine-grained policies applied. | + +**Step 8 –** If you want to save your current configuration, click Save. + +To review Password Expiration Report + +Click Generate next to Generate report on users with expired account or passwords to view report on +users passwords immediately. In the Maximum Password Age Setting dialog that opens, select domain +policy settings or specify the maximum password age in days. + +![passwordexpiration](/images/auditor/10.7/tools/passwordexpirationnotifier/passwordexpiration.webp) + +## Registry Key Configuration + +Review the basic registry keys that you may need to configure for monitoring expiring passwords +within your Active Directory domain with Netwrix Auditor. Navigate to **Start > Run** and type +_"regedit"_. + +| Registry key (REG_DWORD type) | Description / Value | +| ------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Netwrix Auditor\Password Expiration Notifier | | +| HideEmailAdditionalInfo | Defines whether to show or hide the header and footer in emails sent to users and their managers (emails sent to administrators always have default header and footer): - 0—Show - Any other number—Hide | diff --git a/docs/auditor/10.8/tools/passwordexpirationnotifier/ports.md b/docs/auditor/10.8/tools/passwordexpirationnotifier/ports.md new file mode 100644 index 0000000000..fc380fd5cf --- /dev/null +++ b/docs/auditor/10.8/tools/passwordexpirationnotifier/ports.md @@ -0,0 +1,18 @@ +--- +title: "Password Expiration Notifier Ports" +description: "Password Expiration Notifier Ports" +sidebar_position: 10 +--- + +# Password Expiration Notifier Ports + +Review a protocol and port required for Netwrix Auditor Password Expiration Notifier. + +**NOTE:** Tip for reading the table – On the compuer where the Netwrix Auditor server resides +(source), allow outbound connections to remote 389 the TCP port. On domain controllers in your +domain (target), allow inbound connections to the local 389 TCP port. + +| Port | Protocol | Source | Target | Purpose | +| ---------------------------- | -------- | ---------------------- | ------------------ | ------------------- | +| Password Expiration Notifier | | | | | +| 389 | TCP | Netwrix Auditor Server | Domain controllers | LDAP Common queries | diff --git a/docs/auditor/10.8/whats-new.md b/docs/auditor/10.8/whats-new.md new file mode 100644 index 0000000000..12cd4aa68b --- /dev/null +++ b/docs/auditor/10.8/whats-new.md @@ -0,0 +1,62 @@ +--- +title: "What's New in Netwrix Auditor v10.8" +description: "New features and enhancements in Netwrix Auditor v10.8" +sidebar_position: 2 +--- + +# What's New in Netwrix Auditor v10.8 + +## New Data Sources and Integrations + +### Azure Files Activity Auditing +Azure Files monitoring provides comprehensive visibility into your Azure file storage environment: +- **File and Folder Changes**: Track all modifications to files and folders +- **Permission Changes**: Monitor security and access control modifications +- **Access Attempts**: Capture both successful and failed read attempts +- **Complete Audit Trail**: Get detailed "who, what, when, and where" information for all activities + +### Microsoft Copilot Add-on (Free) +The new Microsoft Copilot add-on delivers insights into AI assistant usage: +- **Event Collection**: Collect comprehensive Copilot interaction events +- **User Insights**: Track user interactions and resource utilization +- **File Tracking**: Monitor file names and exact paths used in AI response generation +- **Usage Analytics**: Understand how Copilot is being used across your organization + +### Azure SQL Add-on (Free) +Enhanced database monitoring capabilities for Azure SQL environments: +- **Change Tracking**: Monitor all database changes and modifications +- **Logon Monitoring**: Track user authentication and access events +- **Detailed Reporting**: Complete "who, what, when, and where" event details + +## Enhanced Search and Monitoring Capabilities + +### Advanced Search Features +- **"Does not contain" Filter**: New filter option for the Details field provides more precise search capabilities +- **Cancellable Searches**: Improved user experience with the ability to cancel long-running searches on large datasets + +### Exchange Online Enhancements +**Mailbox Owner Activity Monitoring** provides deeper insights into mailbox activities: +- **Mass Email Deletion Detection**: Identify suspicious bulk deletion activities +- **Folder Permission Tracking**: Monitor changes to mailbox folder permissions +- **Inbox Rule Monitoring**: Track modifications to email rules and filters + +## New User Account Attributes + +Expanded user monitoring with additional Active Directory attributes: +- **EmployeeID**: Track corporate employee identifiers +- **Smart Card Logon Requirement**: Monitor smart card authentication settings +- **SID History**: Track security identifier history for migration scenarios +- **Logon Workstation**: Identify specific workstations used for authentication +- **Mobile Phone**: Monitor mobile contact information changes +- **User SID**: Track security identifier information + +## Platform Support Enhancements + +### Storage Platform Updates +- **Nutanix Files 5.0**: Full support for the latest Nutanix Files version +- **Dell Isilon OneFS 9.8 and 9.9**: Enhanced compatibility with newer OneFS versions +- **Dell Unity up to 5.4**: Extended support for Dell Unity storage systems +- **Isilon/PowerScale 9.10**: Support for the latest PowerScale platform +- **Qumulo Core 7.4.1**: Updated support for Qumulo distributed file systems + +These enhancements ensure comprehensive monitoring across your hybrid IT infrastructure while providing the visibility needed to detect threats, maintain compliance, and optimize security operations. \ No newline at end of file diff --git a/sidebars/auditor/10.8.js b/sidebars/auditor/10.8.js new file mode 100644 index 0000000000..5ab4af3199 --- /dev/null +++ b/sidebars/auditor/10.8.js @@ -0,0 +1,8 @@ +module.exports = { + sidebar: [ + { + type: 'autogenerated', + dirName: '.', + }, + ], +}; \ No newline at end of file diff --git a/src/config/products.js b/src/config/products.js index 30630eab48..c5b51bc761 100644 --- a/src/config/products.js +++ b/src/config/products.js @@ -129,10 +129,16 @@ export const PRODUCTS = [ categories: ['Directory Management', 'Data Security Posture Management (DSPM)'], icon: '', versions: [ + { + version: '10.8', + label: '10.8', + isLatest: true, + sidebarFile: './sidebars/auditor/10.8.js', + }, { version: '10.7', label: '10.7', - isLatest: true, + isLatest: false, sidebarFile: './sidebars/auditor/10.7.js', }, { @@ -142,7 +148,7 @@ export const PRODUCTS = [ sidebarFile: './sidebars/auditor/10.6.js', }, ], - defaultVersion: '10.7', + defaultVersion: '10.8', }, { id: 'changetracker', From 1b2b8034d43f39244dc6944bd2b79097044d3a08 Mon Sep 17 00:00:00 2001 From: Dmitry Vorontsov Date: Mon, 28 Jul 2025 16:44:48 +0100 Subject: [PATCH 2/4] Fix internal link references for Netwrix Auditor v10.8 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Update all internal documentation links from 10.7 to 10.8 - Update all image references from 10.7 to 10.8 - Resolve MDX compilation errors preventing local viewing This ensures all cross-references within the 10.8 documentation point to the correct version paths. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude --- .claude/settings.local.json | 4 +- .../10.8/accessreviews/accessreviews.md | 32 ++++----- .../admin/additionalconfig/emailtemplates.md | 4 +- .../admin/additionalconfig/overview.md | 4 +- .../additionalconfig/timeoutparameter.md | 2 +- .../admin/configuration/activedirectory.md | 2 +- .../admin/configuration/consoleaccess.md | 16 ++--- .../admin/configuration/database.md | 2 +- .../admin/configuration/diagnostics.md | 2 +- .../admin/configuration/notifications.md | 6 +- .../admin/configuration/overview.md | 12 ++-- .../10.8/accessreviews/admin/firstlaunch.md | 14 ++-- .../auditor/10.8/accessreviews/admin/login.md | 10 +-- .../accessreviews/admin/navigate/navigate.md | 10 +-- .../10.8/accessreviews/admin/overview.md | 14 ++-- .../troubleshooting/credentialpasswords.md | 8 +-- .../admin/troubleshooting/loglevel.md | 2 +- .../admin/troubleshooting/overview.md | 8 +-- .../admin/troubleshooting/serviceaccount.md | 4 +- .../approvalprocess/approvalprocess.md | 8 +-- .../entitlementreviews/create/create.md | 14 ++-- .../create/reviewinstances.md | 4 +- .../interface/deletereview.md | 4 +- .../entitlementreviews/interface/interface.md | 34 +++++----- .../interface/renamereview.md | 2 +- .../interface/selectedresources.md | 2 +- .../interface/sendreminders.md | 4 +- .../interface/stopreview.md | 2 +- .../interface/viewresponses.md | 4 +- .../entitlementreviews/overview.md | 16 ++--- .../accessreviewsconfiguration.md | 6 +- .../accessreviews/installation/install.md | 20 +++--- .../accessreviews/installation/overview.md | 4 +- .../10.8/accessreviews/installation/secure.md | 2 +- .../accessreviews/installation/upgrade.md | 10 +-- .../owneroverview/confirmationrequest.md | 8 +-- .../owneroverview/pendingreviews/access.md | 6 +- .../pendingreviews/membership.md | 6 +- .../pendingreviews/pendingreviews.md | 14 ++-- .../owneroverview/reviewhistory.md | 4 +- .../resourceowners/confirmation/confirm.md | 8 +-- .../confirmation/confirmation.md | 8 +-- .../resourceowners/interface/add.md | 16 ++--- .../resourceowners/interface/addowner.md | 6 +- .../resourceowners/interface/interface.md | 22 +++---- .../resourceowners/interface/update.md | 12 ++-- .../accessreviews/resourceowners/overview.md | 12 ++-- .../10.8/accountlockoutexaminer/usage.md | 10 +-- .../10.8/addon/alienvaultusm/collecteddata.md | 2 +- .../10.8/addon/alienvaultusm/deployment.md | 2 +- .../alienvaultusm/integrationeventlog.md | 6 +- .../10.8/addon/alienvaultusm/overview.md | 4 +- .../10.8/addon/alienvaultusm/parameters.md | 6 +- .../addon/amazonwebservices/collecteddata.md | 2 +- .../addon/amazonwebservices/deployment.md | 2 +- .../10.8/addon/amazonwebservices/overview.md | 4 +- .../addon/amazonwebservices/parameters.md | 2 +- .../10.8/addon/arcsight/collecteddata.md | 2 +- docs/auditor/10.8/addon/arcsight/overview.md | 8 +-- .../auditor/10.8/addon/arcsight/parameters.md | 2 +- .../10.8/addon/azurefiles/collecteddata.md | 6 +- .../10.8/addon/azurefiles/deployment.md | 14 ++-- .../auditor/10.8/addon/azurefiles/overview.md | 14 ++-- .../10.8/addon/connectwise/configure.md | 12 ++-- .../connectionticketingsettings.md | 2 +- .../10.8/addon/connectwise/deployment.md | 8 +-- docs/auditor/10.8/addon/connectwise/msp.md | 6 +- .../10.8/addon/connectwise/overview.md | 8 +-- docs/auditor/10.8/addon/copilot/deployment.md | 4 +- docs/auditor/10.8/addon/copilot/overview.md | 12 ++-- .../auditor/10.8/addon/ctera/collecteddata.md | 16 ++--- docs/auditor/10.8/addon/ctera/overview.md | 6 +- docs/auditor/10.8/addon/ctera/parameters.md | 2 +- .../10.8/addon/cyberark/collecteddata.md | 8 +-- .../auditor/10.8/addon/cyberark/deployment.md | 12 ++-- docs/auditor/10.8/addon/cyberark/overview.md | 12 ++-- .../10.8/addon/hyperv/collecteddata.md | 2 +- docs/auditor/10.8/addon/hyperv/deployment.md | 8 +-- docs/auditor/10.8/addon/hyperv/install.md | 10 +-- docs/auditor/10.8/addon/hyperv/overview.md | 10 +-- .../10.8/addon/hyperv/troubleshooting.md | 2 +- .../10.8/addon/ibmqradar/collecteddata.md | 2 +- .../10.8/addon/ibmqradar/deployment.md | 2 +- .../addon/ibmqradar/integrationeventlog.md | 6 +- docs/auditor/10.8/addon/ibmqradar/overview.md | 4 +- .../10.8/addon/ibmqradar/parameters.md | 6 +- .../10.8/addon/ibmqradar/powershell.md | 2 +- .../10.8/addon/intelsecurity/collecteddata.md | 2 +- .../10.8/addon/intelsecurity/deployment.md | 2 +- .../intelsecurity/integrationeventlog.md | 6 +- .../10.8/addon/intelsecurity/overview.md | 4 +- .../10.8/addon/intelsecurity/parameters.md | 6 +- .../10.8/addon/intelsecurity/powershell.md | 2 +- docs/auditor/10.8/addon/linux/overview.md | 2 +- docs/auditor/10.8/addon/linux/parameters.md | 2 +- .../10.8/addon/logrhythm/collecteddata.md | 2 +- .../10.8/addon/logrhythm/deployment.md | 2 +- .../addon/logrhythm/integrationeventlog.md | 6 +- docs/auditor/10.8/addon/logrhythm/overview.md | 4 +- .../10.8/addon/logrhythm/parameters.md | 6 +- .../10.8/addon/logrhythm/powershell.md | 2 +- .../10.8/addon/nasuni/collecteddata.md | 8 +-- docs/auditor/10.8/addon/nasuni/overview.md | 6 +- docs/auditor/10.8/addon/nasuni/parameters.md | 2 +- .../10.8/addon/nutanixahv/collecteddata.md | 8 +-- .../10.8/addon/nutanixahv/deployment.md | 2 +- docs/auditor/10.8/addon/nutanixahv/install.md | 4 +- .../auditor/10.8/addon/nutanixahv/overview.md | 12 ++-- docs/auditor/10.8/addon/okta/collecteddata.md | 8 +-- docs/auditor/10.8/addon/okta/overview.md | 6 +- docs/auditor/10.8/addon/overview.md | 6 +- .../addon/privilegeduserlinux/overview.md | 4 +- .../addon/privilegeduserlinux/parameters.md | 2 +- .../10.8/addon/qumulo/collecteddata.md | 2 +- docs/auditor/10.8/addon/qumulo/overview.md | 4 +- .../10.8/addon/radius/collecteddata.md | 2 +- .../auditor/10.8/addon/radius/customreport.md | 2 +- docs/auditor/10.8/addon/radius/deployment.md | 2 +- docs/auditor/10.8/addon/radius/overview.md | 4 +- docs/auditor/10.8/addon/radius/parameters.md | 2 +- docs/auditor/10.8/addon/servicenow/install.md | 2 +- .../auditor/10.8/addon/servicenow/overview.md | 4 +- .../10.8/addon/siem/activityrecords.md | 4 +- docs/auditor/10.8/addon/siem/collecteddata.md | 2 +- docs/auditor/10.8/addon/siem/configure.md | 6 +- docs/auditor/10.8/addon/siem/deployment.md | 4 +- .../10.8/addon/siem/integrationeventlog.md | 6 +- docs/auditor/10.8/addon/siem/overview.md | 8 +-- .../10.8/addon/siemcefexport/deployment.md | 2 +- .../10.8/addon/siemcefexport/overview.md | 4 +- .../addon/siemeventlogexport/deployment.md | 2 +- .../10.8/addon/siemeventlogexport/overview.md | 6 +- .../addon/siemeventlogexport/parameters.md | 2 +- .../10.8/addon/solarwinds/collecteddata.md | 2 +- .../10.8/addon/solarwinds/deployment.md | 2 +- .../addon/solarwinds/integrationeventlog.md | 6 +- .../auditor/10.8/addon/solarwinds/overview.md | 4 +- .../10.8/addon/solarwinds/parameters.md | 2 +- .../10.8/addon/solarwinds/powershell.md | 2 +- docs/auditor/10.8/addon/splunk/deployment.md | 24 +++---- docs/auditor/10.8/addon/splunk/overview.md | 8 +-- .../10.8/admin/alertsettings/create/create.md | 12 ++-- .../alertsettings/create/createeventlog.md | 2 +- .../create/createhealthstatus.md | 2 +- .../create/createmailboxaccess.md | 6 +- .../10.8/admin/alertsettings/dashboard.md | 14 ++-- .../10.8/admin/alertsettings/manage.md | 6 +- .../10.8/admin/alertsettings/overview.md | 14 ++-- .../admin/alertsettings/responseaction.md | 8 +-- .../10.8/admin/behavioranomalies/dashboard.md | 14 ++-- .../10.8/admin/behavioranomalies/overview.md | 6 +- .../admin/behavioranomalies/userprofile.md | 4 +- docs/auditor/10.8/admin/compliancemappings.md | 2 +- .../dashboard/activityrecordstatistics.md | 2 +- .../dashboard/databasestatistics.md | 4 +- .../admin/healthstatus/dashboard/healthlog.md | 6 +- .../dashboard/monitoringoverview.md | 2 +- .../admin/healthstatus/dashboard/overview.md | 16 ++--- .../healthstatus/networktrafficcompression.md | 2 +- .../10.8/admin/healthstatus/overview.md | 8 +-- .../10.8/admin/healthstatus/selfaudit.md | 10 +-- .../10.8/admin/healthstatus/summaryemail.md | 6 +- .../admin/healthstatus/troubleshooting.md | 4 +- .../activedirectory/overview.md | 30 ++++----- .../monitoringplans/activedirectory/scope.md | 4 +- .../monitoringplans/activitysummaryemail.md | 4 +- .../10.8/admin/monitoringplans/adfs.md | 10 +-- .../10.8/admin/monitoringplans/create.md | 32 ++++----- .../admin/monitoringplans/dataaccounts.md | 50 +++++++------- .../10.8/admin/monitoringplans/datasources.md | 64 +++++++++--------- .../10.8/admin/monitoringplans/delegation.md | 10 +-- .../monitoringplans/exchange/overview.md | 16 ++--- .../monitoringplans/fileservers/overview.md | 60 ++++++++--------- .../monitoringplans/fileservers/scope.md | 4 +- .../fileservers/windowsfileserver.md | 28 ++++---- .../10.8/admin/monitoringplans/finetune.md | 6 +- .../monitoringplans/grouppolicy/overview.md | 20 +++--- .../monitoringplans/logonactivity/overview.md | 20 +++--- .../microsoftentraid/overview.md | 30 ++++----- .../10.8/admin/monitoringplans/msteams.md | 20 +++--- .../admin/monitoringplans/networkdevices.md | 6 +- .../admin/monitoringplans/oracle/overview.md | 18 ++--- .../10.8/admin/monitoringplans/overview.md | 16 ++--- .../10.8/admin/monitoringplans/overview_1.md | 20 +++--- .../monitoringplans/sharepoint/overview.md | 18 ++--- .../sharepointonline/overview.md | 24 +++---- .../admin/monitoringplans/sqlserver/items.md | 4 +- .../monitoringplans/sqlserver/overview.md | 20 +++--- .../admin/monitoringplans/vmware/overview.md | 18 ++--- .../admin/monitoringplans/windows/overview.md | 32 ++++----- .../admin/navigation/customizeexamples.md | 14 ++-- .../admin/navigation/customizefavorite.md | 10 +-- .../10.8/admin/navigation/customizehome.md | 4 +- .../auditor/10.8/admin/navigation/overview.md | 50 +++++++------- .../10.8/admin/navigation/recommendations.md | 20 +++--- docs/auditor/10.8/admin/reports/custom.md | 6 +- docs/auditor/10.8/admin/reports/overview.md | 10 +-- .../10.8/admin/reports/reviewstatus.md | 6 +- .../10.8/admin/reports/types/activity.md | 6 +- .../10.8/admin/reports/types/compliance.md | 2 +- .../types/datadiscoveryclassification.md | 4 +- .../10.8/admin/reports/types/enterprise.md | 6 +- .../admin/reports/types/organizationlevel.md | 8 +-- .../10.8/admin/reports/types/overview.md | 16 ++--- .../types/stateintime/activedirectory.md | 6 +- .../types/stateintime/microsoftentraid.md | 4 +- .../reports/types/stateintime/overview.md | 10 +-- .../reports/types/stateintime/sqlroles.md | 4 +- .../sqlaccountpermissions.md | 10 +-- .../sqlserveroverview/sqldatabases.md | 2 +- .../sqlserveroverview/sqlmeansgranted.md | 8 +-- .../sqlserveroverview/sqlobjectpermissions.md | 12 ++-- .../sqlserveroverview/sqlserveroverview.md | 12 ++-- .../admin/reports/types/stateintime/vmware.md | 20 +++--- .../10.8/admin/reports/types/userbehavior.md | 8 +-- docs/auditor/10.8/admin/reports/video.md | 6 +- docs/auditor/10.8/admin/reports/view.md | 22 +++---- .../10.8/admin/riskassessment/dashboard.md | 12 ++-- .../10.8/admin/riskassessment/overview.md | 14 ++-- .../10.8/admin/search/filteradvanced.md | 8 +-- .../auditor/10.8/admin/search/filtersimple.md | 8 +-- docs/auditor/10.8/admin/search/overview.md | 22 +++---- .../10.8/admin/settings/auditdatabase.md | 6 +- .../10.8/admin/settings/custombrand.md | 4 +- docs/auditor/10.8/admin/settings/general.md | 6 +- .../10.8/admin/settings/integrations.md | 4 +- .../10.8/admin/settings/investigations.md | 6 +- docs/auditor/10.8/admin/settings/licenses.md | 2 +- .../10.8/admin/settings/longtermarchive.md | 8 +-- .../10.8/admin/settings/notifications.md | 4 +- docs/auditor/10.8/admin/settings/overview.md | 18 ++--- .../10.8/admin/settings/privilegesecure.md | 18 ++--- .../admin/settings/sensitivedatadiscovery.md | 6 +- .../10.8/admin/subscriptions/create.md | 8 +-- .../10.8/admin/subscriptions/manage.md | 2 +- .../10.8/admin/subscriptions/overview.md | 8 +-- docs/auditor/10.8/api/compatibility.md | 2 +- docs/auditor/10.8/api/endpoints.md | 10 +-- docs/auditor/10.8/api/errordetails.md | 2 +- .../api/filterreference/filterreference.md | 4 +- docs/auditor/10.8/api/overview.md | 4 +- .../10.8/api/postdata/activityrecords.md | 2 +- .../10.8/api/postdata/continuationmark.md | 14 ++-- docs/auditor/10.8/api/postdata/overview.md | 8 +-- .../10.8/api/postdata/searchparameters.md | 10 +-- docs/auditor/10.8/api/prerequisites.md | 6 +- docs/auditor/10.8/api/responsestatuscodes.md | 4 +- .../10.8/api/retrieveactivityrecords.md | 4 +- .../auditor/10.8/api/searchactivityrecords.md | 12 ++-- docs/auditor/10.8/api/security.md | 2 +- docs/auditor/10.8/api/writeactivityrecords.md | 16 ++--- .../activedirectory/additional.md | 6 +- .../activedirectory/automatic.md | 18 ++--- .../activedirectory/basicpolicy.md | 2 +- .../configuration/activedirectory/manual.md | 16 ++--- .../activedirectory/objectlevel.md | 2 +- .../configuration/activedirectory/overview.md | 32 ++++----- .../activedirectory/permissions.md | 14 ++-- .../activedirectory/tombstone.md | 2 +- .../overview.md | 14 ++-- .../10.8/configuration/exchange/auditlog.md | 2 +- .../configuration/exchange/mailboxacccess.md | 2 +- .../10.8/configuration/exchange/overview.md | 14 ++-- .../configuration/exchange/permissions.md | 8 +-- .../exchange/permissionsregistrykeys.md | 4 +- .../fileservers/delldatastorage/cifss.md | 10 +-- .../delldatastorage/objectaccess.md | 4 +- .../fileservers/delldatastorage/overview.md | 8 +-- .../fileservers/dellisilon/overview.md | 4 +- .../fileservers/dellisilon/permissions.md | 2 +- .../fileservers/netappcmode/cifs.md | 12 ++-- .../netappcmode/eventcategories.md | 4 +- .../fileservers/netappcmode/overview.md | 12 ++-- .../fileservers/netappcmode/webaccess.md | 4 +- .../fileservers/nutanix/notificationpolicy.md | 4 +- .../fileservers/nutanix/overview.md | 10 +-- .../fileservers/nutanix/partnerserver.md | 6 +- .../fileservers/nutanix/permissions.md | 12 ++-- .../fileservers/nutanix/ports.md | 2 +- .../fileservers/nutanix/useraccount.md | 2 +- .../configuration/fileservers/overview.md | 16 ++--- .../fileservers/qumulo/configure.md | 2 +- .../fileservers/qumulo/overview.md | 2 +- .../fileservers/qumulo/permissions.md | 2 +- .../fileservers/synology/overview.md | 2 +- .../fileservers/synology/permissions.md | 2 +- .../fileservers/windows/advancedpolicy.md | 2 +- .../fileservers/windows/eventlog.md | 2 +- .../fileservers/windows/localpolicy.md | 2 +- .../fileservers/windows/objectlevel.md | 10 +-- .../fileservers/windows/overview.md | 24 +++---- .../fileservers/windows/permissions.md | 4 +- .../configuration/grouppolicy/overview.md | 6 +- .../configuration/grouppolicy/permissions.md | 16 ++--- .../logonactivity/basicpolicy.md | 2 +- .../configuration/logonactivity/overview.md | 10 +-- .../logonactivity/permissions.md | 8 +-- .../exchangeonline/modernauth/modernauth.md | 2 +- .../exchangeonline/permissions.md | 14 ++-- .../microsoft365/microsoftentraid/overview.md | 4 +- .../microsoftentraid/permissions/basicauth.md | 2 +- .../permissions/permissions.md | 10 +-- .../configuration/microsoft365/overview.md | 8 +-- .../microsoft365/sharepointonline/overview.md | 6 +- .../sharepointonline/permissions/basicauth.md | 2 +- .../permissions/modernauth/manifest.md | 2 +- .../permissions/modernauth/modernauth.md | 2 +- .../permissions/permissions.md | 10 +-- .../microsoft365/teams/overview.md | 6 +- .../teams/permissions/basicauth.md | 4 +- .../permissions/modernauth/modernauth.md | 2 +- .../teams/permissions/permissions.md | 4 +- .../networkdevices/ciscomerakidashboard.md | 2 +- .../networkdevices/ciscomerakidevices.md | 6 +- .../configuration/networkdevices/hpearuba.md | 4 +- .../configuration/networkdevices/juniper.md | 2 +- .../configuration/networkdevices/overview.md | 20 +++--- .../networkdevices/pulsesecure.md | 6 +- .../10.8/configuration/oracle/database.md | 8 +-- .../10.8/configuration/oracle/overview.md | 20 +++--- .../10.8/configuration/oracle/wallet.md | 2 +- docs/auditor/10.8/configuration/overview.md | 50 +++++++------- .../10.8/configuration/sharepoint/overview.md | 4 +- .../configuration/sharepoint/permissions.md | 4 +- .../10.8/configuration/sqlserver/overview.md | 4 +- .../configuration/useractivity/overview.md | 4 +- .../useractivity/videorecordings.md | 2 +- .../10.8/configuration/vmware/permissions.md | 2 +- .../10.8/configuration/windowsserver/dhcp.md | 2 +- .../configuration/windowsserver/eventlog.md | 4 +- .../10.8/configuration/windowsserver/iis.md | 4 +- .../windowsserver/localpolicy.md | 2 +- .../configuration/windowsserver/overview.md | 30 ++++----- .../windowsserver/permissions.md | 2 +- .../windowsserver/windowsregistry.md | 4 +- docs/auditor/10.8/install/firstlaunch.md | 4 +- docs/auditor/10.8/install/overview.md | 20 +++--- .../10.8/install/sharepointcoreservice.md | 4 +- docs/auditor/10.8/install/upgrade.md | 22 +++---- docs/auditor/10.8/install/viagrouppolicy.md | 6 +- .../install/virtualappliance/configure.md | 12 ++-- .../10.8/install/virtualappliance/overview.md | 8 +-- docs/auditor/10.8/overview/gettingstarted.md | 50 +++++++------- docs/auditor/10.8/requirements/console.md | 10 +-- .../10.8/requirements/deploymentscenarios.md | 10 +-- docs/auditor/10.8/requirements/gmsa.md | 40 +++++------ .../10.8/requirements/longtermarchive.md | 10 +-- docs/auditor/10.8/requirements/overview.md | 12 ++-- docs/auditor/10.8/requirements/ports.md | 42 ++++++------ .../10.8/requirements/serviceaccount.md | 8 +-- docs/auditor/10.8/requirements/software.md | 10 +-- docs/auditor/10.8/requirements/sqlserver.md | 18 ++--- .../monitoredobjecttypes.md | 50 +++++++------- .../supporteddatasources.md | 66 +++++++++---------- .../10.8/tools/auditconfigurationassistant.md | 10 +-- .../tools/eventlogmanager/eventlogmanager.md | 14 ++-- .../auditor/10.8/tools/inactiveusertracker.md | 6 +- docs/auditor/10.8/tools/objectrestoread.md | 4 +- docs/auditor/10.8/tools/overview.md | 10 +-- .../passwordexpirationnotifier/overview.md | 8 +-- 360 files changed, 1624 insertions(+), 1622 deletions(-) diff --git a/.claude/settings.local.json b/.claude/settings.local.json index 7a4fd6a743..d95dec73f1 100644 --- a/.claude/settings.local.json +++ b/.claude/settings.local.json @@ -11,7 +11,9 @@ "Bash(npx docusaurus start:*)", "Bash(mkdir:*)", "Bash(rm:*)", - "Bash(git add:*)" + "Bash(git add:*)", + "Bash(git commit:*)", + "Bash(find:*)" ], "deny": [] } diff --git a/docs/auditor/10.8/accessreviews/accessreviews.md b/docs/auditor/10.8/accessreviews/accessreviews.md index 8d9206458a..ec6f66bf6a 100644 --- a/docs/auditor/10.8/accessreviews/accessreviews.md +++ b/docs/auditor/10.8/accessreviews/accessreviews.md @@ -27,7 +27,7 @@ for a supported data source. **NOTE:** Access Reviews is a separately licensed product and is not included with Netwrix Auditor. Make sure that you have the Access Reviews license enabled in Auditor. -See the [Licenses](/docs/auditor/10.7/admin/settings/licenses.md) topic for additional information. +See the [Licenses](/docs/auditor/10.8/admin/settings/licenses.md) topic for additional information. _Remember,_ there is one single Access Review license for all data sources that can send data to the application. @@ -35,16 +35,16 @@ application. Follow the steps to use Netwrix Auditor Access Reviews in conjuction with Auditor. **Step 1 –** Install Access Reviews on the same computer where Netwrix Auditor is installed. See the -[Installation Overview](/docs/auditor/10.7/accessreviews/installation/overview.md) topic for prerequisites and +[Installation Overview](/docs/auditor/10.8/accessreviews/installation/overview.md) topic for prerequisites and additional information. **Step 2 –** Configure Access Reviews. The Configuration interface is only available to users with -the Administrator role. See the [Administrator Overview](/docs/auditor/10.7/accessreviews/admin/overview.md) topic +the Administrator role. See the [Administrator Overview](/docs/auditor/10.8/accessreviews/admin/overview.md) topic for configuration settings and enabling user access. **Step 3 –** Use the Access reviews configuration tool to setup the data flow from the Auditor database to the Access Reviews database. See the -[Select Data Sources](/docs/auditor/10.7/accessreviews/installation/accessreviewsconfiguration.md) topic for additional information. +[Select Data Sources](/docs/auditor/10.8/accessreviews/installation/accessreviewsconfiguration.md) topic for additional information. **NOTE:** Data upload speed depends on the amount of collected data and Auditor collectors configuration. @@ -52,16 +52,16 @@ configuration. **Step 4 –** Configure resource ownership through the Access Reviews Console. The Resource Owners interface is available to users with either the Security Team or Administrator role. Managing ownership is core component for the Access Reviews workflow. See the -[Resource Owners Overview](/docs/auditor/10.7/accessreviews/resourceowners/overview.md) topic for additional +[Resource Owners Overview](/docs/auditor/10.8/accessreviews/resourceowners/overview.md) topic for additional information. -**NOTE:** The [Owners & Access Reviews](/docs/auditor/10.7/accessreviews/owneroverview/owneroverview.md) topic and +**NOTE:** The [Owners & Access Reviews](/docs/auditor/10.8/accessreviews/owneroverview/owneroverview.md) topic and subtopics are written for the assigned owners. You can distribute the URL to this topic or download a PDF to be distributed to your assigned resource owners. **Step 5 –** Configure and run reviews. The Entitlement Reviews interface is available to users with either the Security Team or Administrator role. See the -[Reviews Overview](/docs/auditor/10.7/accessreviews/entitlementreviews/overview.md) topic for additional +[Reviews Overview](/docs/auditor/10.8/accessreviews/entitlementreviews/overview.md) topic for additional information. Netwrix Auditor Access Reviews is now configured and ready to use. @@ -93,16 +93,16 @@ Review the following considerations: - Console Users — Grant users access to the application starting with an Administrator account. There are two levels of access: Administrator and Security Team. See the - [Console Access Page](/docs/auditor/10.7/accessreviews/admin/configuration/consoleaccess.md) topic for + [Console Access Page](/docs/auditor/10.8/accessreviews/admin/configuration/consoleaccess.md) topic for information. - Optionally, disable the Builtin Administrator account. See the - [Modify the Builtin Administrator Account](/docs/auditor/10.7/accessreviews/admin/configuration/consoleaccess.md#modify-the-builtin-administrator-account) + [Modify the Builtin Administrator Account](/docs/auditor/10.8/accessreviews/admin/configuration/consoleaccess.md#modify-the-builtin-administrator-account) topic for additional information. - Notification — Configure the Notification settings required in order for the application to send email. See the - [Notifications Page](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md) topic for + [Notifications Page](/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md) topic for information. ## Enable Console Users @@ -121,23 +121,23 @@ Review the following considerations: Console: - Ownership Administrator — Send the URL link for the - [Resource Owners Overview](/docs/auditor/10.7/accessreviews/resourceowners/overview.md) topic. + [Resource Owners Overview](/docs/auditor/10.8/accessreviews/resourceowners/overview.md) topic. - Review Administrator — Send the URL link for the - [Reviews Overview](/docs/auditor/10.7/accessreviews/entitlementreviews/overview.md) topic. + [Reviews Overview](/docs/auditor/10.8/accessreviews/entitlementreviews/overview.md) topic. - Administrator — Send the URL link for the - [Administrator Overview](/docs/auditor/10.7/accessreviews/admin/overview.md) topic. + [Administrator Overview](/docs/auditor/10.8/accessreviews/admin/overview.md) topic. ## Resource Ownership Configuration Ownership of resources must be assigned in order to use the Access Reviews workflow: - Resource Ownership — Assign ownership for resources to be managed through the application. See - the [Resource Owners Interface](/docs/auditor/10.7/accessreviews/resourceowners/interface/interface.md) topic for + the [Resource Owners Interface](/docs/auditor/10.8/accessreviews/resourceowners/interface/interface.md) topic for additional information. - Enable Owners — Send a notification to your owners about resource ownership with the application. See the - [Notification to Owners](/docs/auditor/10.7/accessreviews/resourceowners/overview.md#notification-to-owners) + [Notification to Owners](/docs/auditor/10.8/accessreviews/resourceowners/overview.md#notification-to-owners) topic for additional information. ## Access Reviews Workflow @@ -152,5 +152,5 @@ Review the following considerations: **_RECOMMENDED:_** Set expectations for response time from owners. Reviews can be run multiple times, maintaining a historical record for each instance. See the - [Reviews Overview](/docs/auditor/10.7/accessreviews/entitlementreviews/overview.md) topic for additional + [Reviews Overview](/docs/auditor/10.8/accessreviews/entitlementreviews/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/accessreviews/admin/additionalconfig/emailtemplates.md b/docs/auditor/10.8/accessreviews/admin/additionalconfig/emailtemplates.md index 78d013597c..73617b956d 100644 --- a/docs/auditor/10.8/accessreviews/admin/additionalconfig/emailtemplates.md +++ b/docs/auditor/10.8/accessreviews/admin/additionalconfig/emailtemplates.md @@ -48,7 +48,7 @@ Follow the steps to customize the email templates. **NOTE:** To successfully modify these Notifications email templates, a familiarity with basic HTML is necessary. -![Access Reviews installation directory showing the Templates zip file](/images/auditor/10.7/access/reviews/admin/additionalconfig/emailtemplates.webp) +![Access Reviews installation directory showing the Templates zip file](/images/auditor/10.8/access/reviews/admin/additionalconfig/emailtemplates.webp) **Step 1 –** Navigate to the Access Reviews installation directory. @@ -58,7 +58,7 @@ named `Templates`. **CAUTION:** The customized email templates must be in the `Templates` folder within the installation directory to be preserved during future application upgrades. -![Templates folder showing email templates](/images/auditor/10.7/access/reviews/admin/additionalconfig/emailtemplatesfolder.webp) +![Templates folder showing email templates](/images/auditor/10.8/access/reviews/admin/additionalconfig/emailtemplatesfolder.webp) **Step 3 –** Locate the desired HTML message template. diff --git a/docs/auditor/10.8/accessreviews/admin/additionalconfig/overview.md b/docs/auditor/10.8/accessreviews/admin/additionalconfig/overview.md index a1b106072d..0518ba21f9 100644 --- a/docs/auditor/10.8/accessreviews/admin/additionalconfig/overview.md +++ b/docs/auditor/10.8/accessreviews/admin/additionalconfig/overview.md @@ -9,5 +9,5 @@ sidebar_position: 40 In addition to the settings that are available on the Configuration interface, the following configurations and customizations can be done by Administrators: -- [Email Templates](/docs/auditor/10.7/accessreviews/admin/additionalconfig/emailtemplates.md) -- [Timeout Parameter](/docs/auditor/10.7/accessreviews/admin/additionalconfig/timeoutparameter.md) +- [Email Templates](/docs/auditor/10.8/accessreviews/admin/additionalconfig/emailtemplates.md) +- [Timeout Parameter](/docs/auditor/10.8/accessreviews/admin/additionalconfig/timeoutparameter.md) diff --git a/docs/auditor/10.8/accessreviews/admin/additionalconfig/timeoutparameter.md b/docs/auditor/10.8/accessreviews/admin/additionalconfig/timeoutparameter.md index 25b9fef5ae..011713735f 100644 --- a/docs/auditor/10.8/accessreviews/admin/additionalconfig/timeoutparameter.md +++ b/docs/auditor/10.8/accessreviews/admin/additionalconfig/timeoutparameter.md @@ -19,7 +19,7 @@ Follow the steps to modify the timeout parameter. **Step 1 –** Open the `AccessInformationCenter.Service.exe.Config` file with a text editor, e.g. Notepad. -![Notepad showing the AccessInformationCenter.Service.exe.Config file](/images/auditor/10.7/access/reviews/admin/additionalconfig/timeout.webp) +![Notepad showing the AccessInformationCenter.Service.exe.Config file](/images/auditor/10.8/access/reviews/admin/additionalconfig/timeout.webp) **Step 2 –** Change the value for the `AuthSessionTimeout` parameter to the desired number of minutes. For example: diff --git a/docs/auditor/10.8/accessreviews/admin/configuration/activedirectory.md b/docs/auditor/10.8/accessreviews/admin/configuration/activedirectory.md index 9f697ae791..252b8c5fbc 100644 --- a/docs/auditor/10.8/accessreviews/admin/configuration/activedirectory.md +++ b/docs/auditor/10.8/accessreviews/admin/configuration/activedirectory.md @@ -19,7 +19,7 @@ connecting to the database. If your Database service account uses: - Windows authentication credentials — The same domain credentials are also used for the Active Directory service account -![Configuration interface showing the Active Directory page](/images/auditor/10.7/access/reviews/admin/configuration/activedirectory.webp) +![Configuration interface showing the Active Directory page](/images/auditor/10.8/access/reviews/admin/configuration/activedirectory.webp) There are two options for the type of Active Directory service account: diff --git a/docs/auditor/10.8/accessreviews/admin/configuration/consoleaccess.md b/docs/auditor/10.8/accessreviews/admin/configuration/consoleaccess.md index 837efa562c..b9cd2275cb 100644 --- a/docs/auditor/10.8/accessreviews/admin/configuration/consoleaccess.md +++ b/docs/auditor/10.8/accessreviews/admin/configuration/consoleaccess.md @@ -9,7 +9,7 @@ sidebar_position: 10 Console access is configured through the Configuration > Console Access page. Adding users to the Access Reviews Console requires the Active Directory service account to be configured. -![Configuration interface showing the Console Access page](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccess.webp) +![Configuration interface showing the Console Access page](/images/auditor/10.8/access/reviews/admin/configuration/consoleaccess.webp) There are two levels of access, or roles, which can be granted to domain users or groups: @@ -28,19 +28,19 @@ See the Modify the Builtin Administrator Account topic for additional informatio Once users have been granted console access, they can login with their domain credentials. Console access is not a requirement for owners to complete Access Reviews. See the -[URL & Login](/docs/auditor/10.7/accessreviews/admin/login.md) topic for information on how users will log in and where they are +[URL & Login](/docs/auditor/10.8/accessreviews/admin/login.md) topic for information on how users will log in and where they are directed after login based on their assigned role or lack of role. ## Add Console Users Follow the steps to grant domain users or groups console access. -![Console Access Page](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccess.webp) +![Console Access Page](/images/auditor/10.8/access/reviews/admin/configuration/consoleaccess.webp) **Step 1 –** In the Configuration interface on the Console Access page, click Add. The Console Access wizard opens. -![Console Access wizard showing the Select Trustees page](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccessselecttrustee.webp) +![Console Access wizard showing the Select Trustees page](/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessselecttrustee.webp) **Step 2 –** On the Select Trustee page, enter the following information and click Next: @@ -49,7 +49,7 @@ Access wizard opens. - Search — Begin typing the sAMAccountName or display name and the field will auto-populate options from Active Directory sAMAccountName -![Console Access wizard showing the Select Access page](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccessselectaccess.webp) +![Console Access wizard showing the Select Access page](/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessselectaccess.webp) **Step 3 –** On the Select Access page, enter the following information and click **Finish**: @@ -64,7 +64,7 @@ Access wizard opens. - Access is enabled – A user's account must be enabled in order to log into the console. Unchecking this option allows you to configure access to be granted at a future time. -![Console Access Page displaying users with various assigned roles](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccessadd.webp) +![Console Access Page displaying users with various assigned roles](/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessadd.webp) **Step 4 –** The new user displays in the list on the Console Access page. Repeat these steps for each trustee to be granted console access. @@ -84,7 +84,7 @@ additional information. **Step 1 –** In the Configuration interface on the Console Access page, select the user to be modified and click Modify. The Console Access wizard opens to the Select Access page. -![Console Access wizard showing the Select Access page when modifying](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccessmodifyselectaccess.webp) +![Console Access wizard showing the Select Access page when modifying](/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessmodifyselectaccess.webp) **Step 2 –** Modify the desired settings and click **Finish**: @@ -112,7 +112,7 @@ user is to disable their access. See the Modify Console Users topic for addition Follow the steps to remove a user’s configured console access. -![Console Access Page showing various user accounts, with one selected enabling the Modify and Remove buttons](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccessremove.webp) +![Console Access Page showing various user accounts, with one selected enabling the Modify and Remove buttons](/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessremove.webp) **Step 1 –** In the Configuration interface on the Console Access page, select the user. diff --git a/docs/auditor/10.8/accessreviews/admin/configuration/database.md b/docs/auditor/10.8/accessreviews/admin/configuration/database.md index 09d7654a58..8482a07d30 100644 --- a/docs/auditor/10.8/accessreviews/admin/configuration/database.md +++ b/docs/auditor/10.8/accessreviews/admin/configuration/database.md @@ -10,7 +10,7 @@ The Access Reviews application must have access to the SQL Server hosting the da configured during installation. If it is necessary to modify these setting after installation, that is done on the Database Page of the Configuration interface. -![Configuration interface showing the Database page](/images/auditor/10.7/access/reviews/admin/configuration/database.webp) +![Configuration interface showing the Database page](/images/auditor/10.8/access/reviews/admin/configuration/database.webp) SQL Server database information: diff --git a/docs/auditor/10.8/accessreviews/admin/configuration/diagnostics.md b/docs/auditor/10.8/accessreviews/admin/configuration/diagnostics.md index bd7ec27de8..c16ef8b727 100644 --- a/docs/auditor/10.8/accessreviews/admin/configuration/diagnostics.md +++ b/docs/auditor/10.8/accessreviews/admin/configuration/diagnostics.md @@ -9,7 +9,7 @@ sidebar_position: 50 Download logs and enable debug log level for troubleshooting with Netwrix Support on the Diagnostics page of the Configuration interface. -![Configuration interface showing the Diagnostics page](/images/auditor/10.7/access/reviews/admin/configuration/diagnostics.webp) +![Configuration interface showing the Diagnostics page](/images/auditor/10.8/access/reviews/admin/configuration/diagnostics.webp) When requested by [Netwrix Support](https://www.netwrix.com/support.html), click Download Logs to download the archive of all application logs. diff --git a/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md b/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md index ac1c99dcc8..0123c2e327 100644 --- a/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md +++ b/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md @@ -10,7 +10,7 @@ The Access Reviews application uses the Simple Mail Transfer Protocol (SMTP) to SMTP server information and several messaging options can be set through the Configuration > Notifications page. -![Notifications Page](/images/auditor/10.7/access/reviews/admin/configuration/notifications.webp) +![Notifications Page](/images/auditor/10.8/access/reviews/admin/configuration/notifications.webp) At the top, the SMTP server and email security settings are configured. The Notification options is where you configure the sender information, and other optional settings. The Reminders section is @@ -21,7 +21,7 @@ for configuring weekly reminders for owners with outstanding reviews. SMTP server information is supplied and modified on the Notifications page. Follow the steps to configure or modify the SMTP settings. -![Notifications page SMTP server settings section](/images/auditor/10.7/access/reviews/admin/configuration/notificationssmtp.webp) +![Notifications page SMTP server settings section](/images/auditor/10.8/access/reviews/admin/configuration/notificationssmtp.webp) **Step 1 –** In the Configuration interface, select the Notifications page. @@ -81,7 +81,7 @@ Notification options. Once the SMTP server is configured, there are additional options. Only the Reply-To field must be populated: -![Notifications page showing Notification Options section](/images/auditor/10.7/access/reviews/admin/configuration/notificationsoptions.webp) +![Notifications page showing Notification Options section](/images/auditor/10.8/access/reviews/admin/configuration/notificationsoptions.webp) - Reply-To — The email address that receives responses to notifications sent by the application. This can be a “no reply” address. diff --git a/docs/auditor/10.8/accessreviews/admin/configuration/overview.md b/docs/auditor/10.8/accessreviews/admin/configuration/overview.md index a0f94868d8..337cefe290 100644 --- a/docs/auditor/10.8/accessreviews/admin/configuration/overview.md +++ b/docs/auditor/10.8/accessreviews/admin/configuration/overview.md @@ -9,14 +9,14 @@ sidebar_position: 30 The Configuration interface is available only to users with the Administrator role. It is opened by the **Configuration** tab. -![Configuration interface showing the Console Access page](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccess.webp) +![Configuration interface showing the Console Access page](/images/auditor/10.8/access/reviews/admin/configuration/consoleaccess.webp) It has the following pages: -- [Console Access Page](/docs/auditor/10.7/accessreviews/admin/configuration/consoleaccess.md) – Grant users console access -- [Active Directory Page](/docs/auditor/10.7/accessreviews/admin/configuration/activedirectory.md) – Configure the Active Directory service account used +- [Console Access Page](/docs/auditor/10.8/accessreviews/admin/configuration/consoleaccess.md) – Grant users console access +- [Active Directory Page](/docs/auditor/10.8/accessreviews/admin/configuration/activedirectory.md) – Configure the Active Directory service account used to add console users. -- [Notifications Page](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md) – Configure the SMTP server, email security settings, +- [Notifications Page](/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md) – Configure the SMTP server, email security settings, notification options, and owner reminder settings -- [Database Page](/docs/auditor/10.7/accessreviews/admin/configuration/database.md) – Configure the connection to the database -- [Diagnostics Page](/docs/auditor/10.7/accessreviews/admin/configuration/diagnostics.md) – Download logs and enable debug log level for troubleshooting +- [Database Page](/docs/auditor/10.8/accessreviews/admin/configuration/database.md) – Configure the connection to the database +- [Diagnostics Page](/docs/auditor/10.8/accessreviews/admin/configuration/diagnostics.md) – Download logs and enable debug log level for troubleshooting diff --git a/docs/auditor/10.8/accessreviews/admin/firstlaunch.md b/docs/auditor/10.8/accessreviews/admin/firstlaunch.md index 807bc2112f..238d55e80d 100644 --- a/docs/auditor/10.8/accessreviews/admin/firstlaunch.md +++ b/docs/auditor/10.8/accessreviews/admin/firstlaunch.md @@ -8,11 +8,11 @@ sidebar_position: 10 The installer places the following icon on the desktop which opens the Access Reviews Console: -![desktopicon](/images/auditor/10.7/access/reviews/admin/desktopicon.webp) +![desktopicon](/images/auditor/10.8/access/reviews/admin/desktopicon.webp) Use this icon to launch the Access Reviews Console for the first time. -![Set Builtin Administrator Password page](/images/auditor/10.7/access/reviews/admin/firstlaunchpassword.webp) +![Set Builtin Administrator Password page](/images/auditor/10.8/access/reviews/admin/firstlaunchpassword.webp) The Access Reviews application is installed with a Builtin Administrator account; "admin" is the User Name. You will be prompted to set the account's password. It must be eight or more characters @@ -24,15 +24,15 @@ Administrator account. See the [Modify the Builtin Administrator Account](configuration/consoleaccess.md#modify-the-builtin-administrator-account) topic for additional information. -![firstlaunchlandingpage](/images/auditor/10.7/access/reviews/admin/firstlaunchlandingpage.webp) +![firstlaunchlandingpage](/images/auditor/10.8/access/reviews/admin/firstlaunchlandingpage.webp) The Resource Owners interface opens. The first thing that should be done is to configure console access for domain users and configure notification settings. Select the Configuration tab. See the -[Console Access Page](/docs/auditor/10.7/accessreviews/admin/configuration/consoleaccess.md) and -[Notifications Page](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md) topics for additional information. +[Console Access Page](/docs/auditor/10.8/accessreviews/admin/configuration/consoleaccess.md) and +[Notifications Page](/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md) topics for additional information. The interfaces available to console users are controlled by the role assigned. Owners do not need to -be assigned console access. See the [URL & Login](/docs/auditor/10.7/accessreviews/admin/login.md) topic for information on how users will +be assigned console access. See the [URL & Login](/docs/auditor/10.8/accessreviews/admin/login.md) topic for information on how users will log in and where they are directed after login. -See the [Navigation](/docs/auditor/10.7/accessreviews/admin/navigate/navigate.md) topic for information on each of the interfaces. +See the [Navigation](/docs/auditor/10.8/accessreviews/admin/navigate/navigate.md) topic for information on each of the interfaces. diff --git a/docs/auditor/10.8/accessreviews/admin/login.md b/docs/auditor/10.8/accessreviews/admin/login.md index 750d91e6e2..1743b736d4 100644 --- a/docs/auditor/10.8/accessreviews/admin/login.md +++ b/docs/auditor/10.8/accessreviews/admin/login.md @@ -47,7 +47,7 @@ username needs to be entered in the `domain\username` format. **NOTE:** The URL may need to be added to the browser’s list of trusted sites. -![Access Information Center Login page](/images/auditor/10.7/access/reviews/admin/login.webp) +![Access Information Center Login page](/images/auditor/10.8/access/reviews/admin/login.webp) The interface a user arrives at depends upon the assigned role or lack of assigned role. @@ -58,14 +58,14 @@ Role based access controls what interfaces users can see and where each user is **_RECOMMENDED:_** Send an email to your users. Let them know why you are implementing use of the application, provide the URL, and explain how to login with their domain credentials and the username format. See the -[Enable Console Users](/docs/auditor/10.7/accessreviews/accessreviews.md#enable-console-users) topic for additional +[Enable Console Users](/docs/auditor/10.8/accessreviews/accessreviews.md#enable-console-users) topic for additional information. ### Administrator Role Users granted the Administrator role are directed to the Resource Owners interface upon login. -![Resource Owners interface as the landing page for an Administrator user](/images/auditor/10.7/access/reviews/admin/landingadmin.webp) +![Resource Owners interface as the landing page for an Administrator user](/images/auditor/10.8/access/reviews/admin/landingadmin.webp) Administrators are the only ones with access to the Configuration interface. The My Reviews interface is available if the logged in user is also assigned ownership of a resource. @@ -74,7 +74,7 @@ interface is available if the logged in user is also assigned ownership of a res Users granted the Security Team role are directed to the Resource Owners interface upon login. -![Resource Owners interface as the landing page for a Security Team user](/images/auditor/10.7/access/reviews/admin/landingsecurityteam.webp) +![Resource Owners interface as the landing page for a Security Team user](/images/auditor/10.8/access/reviews/admin/landingsecurityteam.webp) Security Team members only lack access to the Configuration interface, which is only available to Administrators. The My Reviews interface is available if the logged in user is also assigned @@ -85,6 +85,6 @@ ownership of a resource. Users assigned ownership of a resource but not granted a user role are directed to the My Reviews interface upon login. -![My Reviews interface as the landing page for an Owner without a user role](/images/auditor/10.7/access/reviews/admin/landingowner.webp) +![My Reviews interface as the landing page for an Owner without a user role](/images/auditor/10.8/access/reviews/admin/landingowner.webp) Owners can view pending reviews and view historical reviews. diff --git a/docs/auditor/10.8/accessreviews/admin/navigate/navigate.md b/docs/auditor/10.8/accessreviews/admin/navigate/navigate.md index 1b1c0781e7..47633a7e97 100644 --- a/docs/auditor/10.8/accessreviews/admin/navigate/navigate.md +++ b/docs/auditor/10.8/accessreviews/admin/navigate/navigate.md @@ -9,7 +9,7 @@ sidebar_position: 20 The Access Reviews Console has four interfaces. Upon login, users granted console access are brought to the Resource Owners interface. -![Access Information Center landing page, Resource Owners interface, with all 4 tabs available to an Administrator who is also an assigned owner](/images/auditor/10.7/access/reviews/admin/interface.webp) +![Access Information Center landing page, Resource Owners interface, with all 4 tabs available to an Administrator who is also an assigned owner](/images/auditor/10.8/access/reviews/admin/interface.webp) The signed in user is displayed in the upper-right corner, along with the **Sign out** link. The available interfaces change according to the role assigned to the user. @@ -20,7 +20,7 @@ The Configuration tab opens the Configuration interface. Configure console acces service account, notification settings, database access, and diagnostic logging level. This interface is available only to users with the Administrator role. See the -[Configuration Interface Overview](/docs/auditor/10.7/accessreviews/admin/configuration/overview.md) topic for additional information. +[Configuration Interface Overview](/docs/auditor/10.8/accessreviews/admin/configuration/overview.md) topic for additional information. For Security Team & Administrator @@ -30,7 +30,7 @@ Reviews workflow must first be assigned at least one owner within the Resource O Assigned owners can log in to complete reviews. This interface is available only to users with either the Security Team or Administrator role. See -the [Resource Owners Interface](/docs/auditor/10.7/accessreviews/resourceowners/interface/interface.md) topic for additional information. +the [Resource Owners Interface](/docs/auditor/10.8/accessreviews/resourceowners/interface/interface.md) topic for additional information. The Entitlement Reviews tab opens the Entitlement Reviews interface. Create and manage reviews. There are two types of reviews for resources being managed within the Access Reviews application: @@ -38,7 +38,7 @@ resource Access reviews and group Membership reviews. This does require the Acce application to be configured to send notifications. This interface is available only to users with either the Security Team or Administrator role. See -the [Entitlement Reviews Interface](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md) topic for additional +the [Entitlement Reviews Interface](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md) topic for additional information. For Assigned Owner @@ -48,7 +48,7 @@ an assigned owner of at least one resource. Assigned owners without a user role My Reviews interface at login. The My Reviews interface is available to any domain user who has been assigned ownership of a -resource. See the [Owners & Access Reviews](/docs/auditor/10.7/accessreviews/owneroverview/owneroverview.md) topic for additional +resource. See the [Owners & Access Reviews](/docs/auditor/10.8/accessreviews/owneroverview/owneroverview.md) topic for additional information. ## Interface Quick Reference diff --git a/docs/auditor/10.8/accessreviews/admin/overview.md b/docs/auditor/10.8/accessreviews/admin/overview.md index fdb5cd5df1..f10ce0e0a3 100644 --- a/docs/auditor/10.8/accessreviews/admin/overview.md +++ b/docs/auditor/10.8/accessreviews/admin/overview.md @@ -9,10 +9,10 @@ sidebar_position: 20 Access Reviews administrators have access to the Configuration interface where there application settings reside. This topic includes the following subtopics: -- [Getting Started](/docs/auditor/10.7/accessreviews/accessreviews.md#getting-started) -- [First Launch](/docs/auditor/10.7/accessreviews/admin/firstlaunch.md) -- [Navigation](/docs/auditor/10.7/accessreviews/admin/navigate/navigate.md) -- [Configuration Interface Overview](/docs/auditor/10.7/accessreviews/admin/configuration/overview.md) -- [Additional Configuration Options](/docs/auditor/10.7/accessreviews/admin/additionalconfig/overview.md) -- [URL & Login](/docs/auditor/10.7/accessreviews/admin/login.md) -- [Troubleshooting](/docs/auditor/10.7/accessreviews/admin/troubleshooting/overview.md) +- [Getting Started](/docs/auditor/10.8/accessreviews/accessreviews.md#getting-started) +- [First Launch](/docs/auditor/10.8/accessreviews/admin/firstlaunch.md) +- [Navigation](/docs/auditor/10.8/accessreviews/admin/navigate/navigate.md) +- [Configuration Interface Overview](/docs/auditor/10.8/accessreviews/admin/configuration/overview.md) +- [Additional Configuration Options](/docs/auditor/10.8/accessreviews/admin/additionalconfig/overview.md) +- [URL & Login](/docs/auditor/10.8/accessreviews/admin/login.md) +- [Troubleshooting](/docs/auditor/10.8/accessreviews/admin/troubleshooting/overview.md) diff --git a/docs/auditor/10.8/accessreviews/admin/troubleshooting/credentialpasswords.md b/docs/auditor/10.8/accessreviews/admin/troubleshooting/credentialpasswords.md index e65e53eb51..afc86ede38 100644 --- a/docs/auditor/10.8/accessreviews/admin/troubleshooting/credentialpasswords.md +++ b/docs/auditor/10.8/accessreviews/admin/troubleshooting/credentialpasswords.md @@ -20,14 +20,14 @@ may be impacted by password changes or security policies: The Database service account grants access to the SQL Server database. It can be updated on the Database page of the Configuration interface. See the -[Update the Database Service Account Password](/docs/auditor/10.7/accessreviews/admin/configuration/database.md#update-the-database-service-account-password) +[Update the Database Service Account Password](/docs/auditor/10.8/accessreviews/admin/configuration/database.md#update-the-database-service-account-password) topic for instructions. ## Active Directory Service Account The Active Directory service account handles user authentication to the Access Reviews Console. It can be updated on the Active Directory page of the Configuration interface. See the -[Update the Active Directory Service Account Password](/docs/auditor/10.7/accessreviews/admin/configuration/activedirectory.md#update-the-active-directory-service-account-password) +[Update the Active Directory Service Account Password](/docs/auditor/10.8/accessreviews/admin/configuration/activedirectory.md#update-the-active-directory-service-account-password) topic for instructions. ## SMTP Authentication Service Account @@ -35,7 +35,7 @@ topic for instructions. An SMTP server is required for the application to send notifications. If the SMTP server requires authentication, the service account can be updated on the Notifications page of the Configuration interface. See the -[Configure SMTP Server Settings](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md#configure-smtp-server-settings) +[Configure SMTP Server Settings](/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md#configure-smtp-server-settings) topic for instructions. ## Application Service Account @@ -52,5 +52,5 @@ It is used to complete the initial configuration steps and to grant console acce This account can be disabled after Administrator users are added. However, if it is enabled and a security policy requires the password to be reset, it can be updated on the Console Access page of the Configuration interface. See the -[Modify the Builtin Administrator Account](/docs/auditor/10.7/accessreviews/admin/configuration/consoleaccess.md#modify-the-builtin-administrator-account) +[Modify the Builtin Administrator Account](/docs/auditor/10.8/accessreviews/admin/configuration/consoleaccess.md#modify-the-builtin-administrator-account) topic for modification instructions. diff --git a/docs/auditor/10.8/accessreviews/admin/troubleshooting/loglevel.md b/docs/auditor/10.8/accessreviews/admin/troubleshooting/loglevel.md index bf5b6f4118..bc5824b7f5 100644 --- a/docs/auditor/10.8/accessreviews/admin/troubleshooting/loglevel.md +++ b/docs/auditor/10.8/accessreviews/admin/troubleshooting/loglevel.md @@ -16,7 +16,7 @@ Follow the steps to modify the log level. **Step 1 –** Open the `AccessInformationCenter.Service.exe.Config` file in a text editor, e.g. Notepad. -![AccessInformationCenter.Service.exe.Config file in Notepad](/images/auditor/10.7/access/reviews/admin/troubleshooting/logvalue.webp) +![AccessInformationCenter.Service.exe.Config file in Notepad](/images/auditor/10.8/access/reviews/admin/troubleshooting/logvalue.webp) **Step 2 –** The level value is set in the `LogLevel` parameter, where "2" is the default level. As the logging level increases from 0 to 3, the types of information and level of detail included diff --git a/docs/auditor/10.8/accessreviews/admin/troubleshooting/overview.md b/docs/auditor/10.8/accessreviews/admin/troubleshooting/overview.md index f48f2fc114..798e8f2873 100644 --- a/docs/auditor/10.8/accessreviews/admin/troubleshooting/overview.md +++ b/docs/auditor/10.8/accessreviews/admin/troubleshooting/overview.md @@ -18,22 +18,22 @@ account. Check the Database, Active Directory, and Notification pages in the Con to confirm where the account is in use before modifying it to ensure these functionality are not impaired. If this account is changed, a new account must have the **Full Control** permission to files and folders in the Access Reviews installation directory. See the -[Application Service Account](/docs/auditor/10.7/accessreviews/admin/troubleshooting/serviceaccount.md) topic for additional information. +[Application Service Account](/docs/auditor/10.8/accessreviews/admin/troubleshooting/serviceaccount.md) topic for additional information. Log File: By default the Access Reviews application is configured to log at the Info level. When requested by Netwrix Support, you can enable Debug level from the Diagnostics page of the Configuration -interface. See the [Diagnostics Page](/docs/auditor/10.7/accessreviews/admin/configuration/diagnostics.md) topic for additional +interface. See the [Diagnostics Page](/docs/auditor/10.8/accessreviews/admin/configuration/diagnostics.md) topic for additional information. If a different log level is needed or desired, the `aic.log` file can be modified. See the -[Change Log Level](/docs/auditor/10.7/accessreviews/admin/troubleshooting/loglevel.md) topic for additional information. +[Change Log Level](/docs/auditor/10.8/accessreviews/admin/troubleshooting/loglevel.md) topic for additional information. Credential Password Changes: The Access Reviews application uses several different types of service accounts. If a credential password for one of these accounts is no longer valid, it will impact application functionality. Additionally, if the Builtin Administrator account remains enabled, it may be necessary to reset the -password. See the [Update Credential Passwords](/docs/auditor/10.7/accessreviews/admin/troubleshooting/credentialpasswords.md) topic for additional +password. See the [Update Credential Passwords](/docs/auditor/10.8/accessreviews/admin/troubleshooting/credentialpasswords.md) topic for additional information. diff --git a/docs/auditor/10.8/accessreviews/admin/troubleshooting/serviceaccount.md b/docs/auditor/10.8/accessreviews/admin/troubleshooting/serviceaccount.md index d67ab2718e..7a98a94444 100644 --- a/docs/auditor/10.8/accessreviews/admin/troubleshooting/serviceaccount.md +++ b/docs/auditor/10.8/accessreviews/admin/troubleshooting/serviceaccount.md @@ -30,12 +30,12 @@ Access Reviews service. **Step 1 –** Navigate to Service Control Manager (`services.msc`). The Services Control Manager opens. -![Services Manager Console showing the Netwrix Access Information Center service and the right-click Menu](/images/auditor/10.7/access/reviews/admin/troubleshooting/servicesmanager.webp) +![Services Manager Console showing the Netwrix Access Information Center service and the right-click Menu](/images/auditor/10.8/access/reviews/admin/troubleshooting/servicesmanager.webp) **Step 2 –** Right-click on the Netwrix Auditor Access Reviews service and select **Properties**. The service Properties window opens. -![Netwrix Access Information Center service Properties window with Select User browser window](/images/auditor/10.7/access/reviews/admin/troubleshooting/serviceproperties.webp) +![Netwrix Access Information Center service Properties window with Select User browser window](/images/auditor/10.8/access/reviews/admin/troubleshooting/serviceproperties.webp) **Step 3 –** On the **Log On** tab, select the **This account** radio button. Enter the account name using NTAccount format [```DOMAIN\username```]. Optionally, use the **Browse** button to search for diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/approvalprocess.md b/docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/approvalprocess.md index 9384b1a312..cdfaec5674 100644 --- a/docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/approvalprocess.md +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/approvalprocess.md @@ -9,7 +9,7 @@ sidebar_position: 30 After all owners assigned to a specific review have submitted their review, its status on the Manage Reviews page of the Entitlement Reviews interface changes to Responses awaiting review. -![Resource Reviews interface showing Manage Reviews page](/images/auditor/10.7/access/reviews/entitlementreviews/managereviewspage.webp) +![Resource Reviews interface showing Manage Reviews page](/images/auditor/10.8/access/reviews/entitlementreviews/managereviewspage.webp) In the approval process, the Review Administrator looks at the owner-recommended changes and chooses to approve, deny, or defer the changes. @@ -25,7 +25,7 @@ Follow the steps to perform a granular review of a resource owner's recommended **Step 1 –** On the Manage Reviews page, select a review and click **View Details**. The Review Details page opens. -![Resource Reviews interface showing the Review Details page](/images/auditor/10.7/access/reviews/entitlementreviews/reviewdetailspage.webp) +![Resource Reviews interface showing the Review Details page](/images/auditor/10.8/access/reviews/entitlementreviews/reviewdetailspage.webp) **Step 2 –** Select a resource in the list and click **View Responses**. The View Responses window opens. @@ -34,7 +34,7 @@ opens. **Step 3 –** By default, the table displays only the recommended changes. Select an item and click the desired action button: Accept, Decline, or Defer. The Approval column icon updates. See the -[View Responses Window](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/viewresponses.md) topic for additional information. +[View Responses Window](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/viewresponses.md) topic for additional information. **Step 4 –** Repeat Step 3 until all changes have been processed. Then click **Close**. The View Responses window closes. @@ -57,7 +57,7 @@ Follow the steps to perform a batch processing of a resource owner's recommended **Step 1 –** On the Manage Reviews page, select a review and click **View Details**. The Review Details page opens. . -![Resource Reviews interface showing the Review Details page](/images/auditor/10.7/access/reviews/entitlementreviews/reviewdetailspage.webp) +![Resource Reviews interface showing the Review Details page](/images/auditor/10.8/access/reviews/entitlementreviews/reviewdetailspage.webp) **Step 2 –** Select a resource in the list and open the **Process Changes** drop-down menu. diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/create/create.md b/docs/auditor/10.8/accessreviews/entitlementreviews/create/create.md index 8d041ebf30..9ea1284d4d 100644 --- a/docs/auditor/10.8/accessreviews/entitlementreviews/create/create.md +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/create/create.md @@ -7,9 +7,9 @@ sidebar_position: 20 # Create Review Wizard The Create Review wizard is opened with the **Create** button on the Entitlement Reviews interface. -See the [Manage Reviews Page](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md#manage-reviews-page) topic for additional information. +See the [Manage Reviews Page](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md#manage-reviews-page) topic for additional information. -![Create Review wizard](/images/auditor/10.7/access/reviews/entitlementreviews/wizard/createreviewreviewtype.webp) +![Create Review wizard](/images/auditor/10.8/access/reviews/entitlementreviews/wizard/createreviewreviewtype.webp) It contains three pages: @@ -36,7 +36,7 @@ Follow the steps to create a review. **Step 1 –** On the Manage Reviews page, click Create. The Create Review wizard opens. -![Create Review wizard showing the Review Type page](/images/auditor/10.7/access/reviews/entitlementreviews/wizard/createreviewreviewtype.webp) +![Create Review wizard showing the Review Type page](/images/auditor/10.8/access/reviews/entitlementreviews/wizard/createreviewreviewtype.webp) **Step 2 –** On the Review Type page, provide the following information and click **Next**: @@ -48,7 +48,7 @@ Follow the steps to create a review. - Membership – Review group membership - Access – Review user access rights to resources -![Create Review wizrd showing the Resources page](/images/auditor/10.7/access/reviews/entitlementreviews/wizard/createreviewresources.webp) +![Create Review wizrd showing the Resources page](/images/auditor/10.8/access/reviews/entitlementreviews/wizard/createreviewresources.webp) **Step 3 –** On the Resources page, select the resources to be included in the review. The Search feature is available to filter the list of available resource that match the type of review being @@ -72,10 +72,10 @@ created. - Select the desired resource(s) and click **Add**. The **View Selections** button indicates how many resources have been selected. Click the button to open the Selected Resources window, where you can view and modify the selections. See the - [Selected Resources Window](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/selectedresources.md) topic for additional information. + [Selected Resources Window](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/selectedresources.md) topic for additional information. - Once the desired resources have been selected, click **Next**. -![Create Review wizard showing the Summary page](/images/auditor/10.7/access/reviews/entitlementreviews/wizard/createreviewsummary.webp) +![Create Review wizard showing the Summary page](/images/auditor/10.8/access/reviews/entitlementreviews/wizard/createreviewsummary.webp) **Step 4 –** On the Summary page, review the settings and click Finish. The Access Reviews begins to create the review. Action status displays on the page. When the update has completed (100%), click @@ -85,4 +85,4 @@ The new review displays in the table on the Manage Reviews page. An email was se owner assigned to the resource(s) in this review. By default, the application is configured to send notifications only to the primary owner. However, this can be customized on the Configuration > Notifications page to send notifications to all assigned owners. See the -[Notifications Page](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md) topic for additional information. +[Notifications Page](/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md) topic for additional information. diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/create/reviewinstances.md b/docs/auditor/10.8/accessreviews/entitlementreviews/create/reviewinstances.md index 9b2131d8e6..8263ee866b 100644 --- a/docs/auditor/10.8/accessreviews/entitlementreviews/create/reviewinstances.md +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/create/reviewinstances.md @@ -12,10 +12,10 @@ review. Each instance is identified by date timestamps indicating its start and **_RECOMMENDED:_** Prior to running another review instance, ensure the most up to date information is available to owners for review. -![Entitlement Reviews interface showing the Manage Review page](/images/auditor/10.7/access/reviews/entitlementreviews/managereviewspage.webp) +![Entitlement Reviews interface showing the Manage Review page](/images/auditor/10.8/access/reviews/entitlementreviews/managereviewspage.webp) On the Manage Reviews page in the Entitlement Reviews interface, a review with a Completed status can be started again. Select the review and click **Run Again**. The Create Review wizard opens without the Review Type page. The review can be run as-is by navigating through the wizard with the **Next** buttons, or you can modify as desired. Completing the wizard process restarts the review. -See the [Create Review Wizard](/docs/auditor/10.7/accessreviews/entitlementreviews/create/create.md) topic for additional information. +See the [Create Review Wizard](/docs/auditor/10.8/accessreviews/entitlementreviews/create/create.md) topic for additional information. diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/deletereview.md b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/deletereview.md index b06577809e..c73d7c628f 100644 --- a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/deletereview.md +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/deletereview.md @@ -7,8 +7,8 @@ sidebar_position: 10 # Delete Review Window The Delete Review window opens from either the -[Manage Reviews Page](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md#manage-reviews-page) or the -[Review Details Page](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md#review-details-page) of the Entitlement Reviews interface: +[Manage Reviews Page](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md#manage-reviews-page) or the +[Review Details Page](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md#review-details-page) of the Entitlement Reviews interface: - Delete Entire Review — Deleting a review from the Manage Reviews page will delete all instances of the selected review diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md index 20fc8886ea..ecb0d6d80b 100644 --- a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md @@ -17,7 +17,7 @@ Administrators perform many operations around managing reviews. This interface h The Manage Reviews page is the first page in the Entitlement Reviews interface. It displays high-level information for reviews. -![Entitlement Reviews interface showing Manage Reviews page](/images/auditor/10.7/access/reviews/entitlementreviews/managereviewspage.webp) +![Entitlement Reviews interface showing Manage Reviews page](/images/auditor/10.8/access/reviews/entitlementreviews/managereviewspage.webp) The interface includes: @@ -61,20 +61,20 @@ The information displayed in the table includes: has been run multiple times, this is the date timestamp of the last instance. The table data grid functions the same way as other table grids. See the -[Data Grid Features](/docs/auditor/10.7/accessreviews/admin/navigate/datagrid.md) topic for additional information. +[Data Grid Features](/docs/auditor/10.8/accessreviews/admin/navigate/datagrid.md) topic for additional information. The buttons at the bottom enable you to conduct the following actions: | Button | Description | | -------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Create | Launches the Create Review wizard for creating a new review. See the [Create Review Wizard](/docs/auditor/10.7/accessreviews/entitlementreviews/create/create.md) topic for additional information. | -| Rename | Opens the Rename Review window for modifying the review name. See the [Rename Review Window](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/renamereview.md) topic for additional information. | -| Delete | Opens the Delete Review window to delete review and its instance history, which asks for confirmation of the action. See the [Delete Review Window](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/deletereview.md) topic for additional information. | -| Stop | Opens the Stop Review window, which asks for confirmation of the action. See the [Stop Review Window](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/stopreview.md) topic for additional information. | +| Create | Launches the Create Review wizard for creating a new review. See the [Create Review Wizard](/docs/auditor/10.8/accessreviews/entitlementreviews/create/create.md) topic for additional information. | +| Rename | Opens the Rename Review window for modifying the review name. See the [Rename Review Window](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/renamereview.md) topic for additional information. | +| Delete | Opens the Delete Review window to delete review and its instance history, which asks for confirmation of the action. See the [Delete Review Window](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/deletereview.md) topic for additional information. | +| Stop | Opens the Stop Review window, which asks for confirmation of the action. See the [Stop Review Window](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/stopreview.md) topic for additional information. | | View Details | Opens the Review Details page for the selected review. See the Review Details Page topic for additional information. | | Mark Completed | Closes the selected review as-is and marks it as completed. Requires the owner(s) to have responded. **CAUTION:** No confirmation is requested for this action. | -| Run Again | Opens the Create Review wizard for the selected review without the option to change the review type. Modify as desired and relaunch the review. See the [Review Instances](/docs/auditor/10.7/accessreviews/entitlementreviews/create/reviewinstances.md) topic for additional information. | -| Send Reminders | Sends a notification email to the assigned owner(s), reminding of the pending review. Opens the Send Reminders window, which indicates an action status. See the [Send Reminders Window](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/sendreminders.md) topic for additional information. | +| Run Again | Opens the Create Review wizard for the selected review without the option to change the review type. Modify as desired and relaunch the review. See the [Review Instances](/docs/auditor/10.8/accessreviews/entitlementreviews/create/reviewinstances.md) topic for additional information. | +| Send Reminders | Sends a notification email to the assigned owner(s), reminding of the pending review. Opens the Send Reminders window, which indicates an action status. See the [Send Reminders Window](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/sendreminders.md) topic for additional information. | ## Review Details Page @@ -82,7 +82,7 @@ The Review Details page displays information for all instances of the selected r named in the page breadcrumb. This page is opened by selecting a review on the Manage Reviews page and clicking **View Details**. -![Entitlement Reviews interface showing the Review Details page](/images/auditor/10.7/access/reviews/entitlementreviews/reviewdetailspage.webp) +![Entitlement Reviews interface showing the Review Details page](/images/auditor/10.8/access/reviews/entitlementreviews/reviewdetailspage.webp) Instances are selected from the drop-down menu. By default the most current instance will be displayed. Instances are named with date timestamps indicating the start and end times for the @@ -114,19 +114,19 @@ The information displayed in the table includes: - Approval Notes – Icon indicates a Note has been added. Click on the icon to read the attached note(s). Notes displayed here can only be added or viewed by the Review Administrator. See the - [Edit Notes Window](/docs/auditor/10.7/accessreviews/admin/navigate/editnotes.md) topic for additional information. + [Edit Notes Window](/docs/auditor/10.8/accessreviews/admin/navigate/editnotes.md) topic for additional information. The table data grid functions the same way as other table grids. See the -[Data Grid Features](/docs/auditor/10.7/accessreviews/admin/navigate/datagrid.md) topic for additional information. +[Data Grid Features](/docs/auditor/10.8/accessreviews/admin/navigate/datagrid.md) topic for additional information. The buttons at the top and bottom enable you to conduct the following actions: | Button | Description | | --------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Delete | Opens the Delete Review window to delete selected review instance, which asks for confirmation of the action. See the [Delete Review Window](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/deletereview.md) topic for additional information. | -| Export Excel | Exports the selected review instance information to an Excel spreadsheet. This automatically downloads the spreadsheet. See the [Data Grid Features](/docs/auditor/10.7/accessreviews/admin/navigate/datagrid.md) topic for additional information. | -| Export CSV | Exports the selected review instance information to a CSV file. This automatically downloads the file. See the [Data Grid Features](/docs/auditor/10.7/accessreviews/admin/navigate/datagrid.md) topic for additional information. | -| Edit Notes | Opens the Edit Notes window for the selected resource and allows free-text editing of the notes. See the [Edit Notes Window](/docs/auditor/10.7/accessreviews/admin/navigate/editnotes.md) topic for additional information. | -| View Responses | Opens the View Responses window, which is only available if the owner has recommended changes for the resource. This window displays all recommended changes, notes provided by the owner for the recommended change, and action buttons to Accept, Decline, or Defer the recommended change. See the [View Responses Window](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/viewresponses.md) topic for additional information. | +| Delete | Opens the Delete Review window to delete selected review instance, which asks for confirmation of the action. See the [Delete Review Window](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/deletereview.md) topic for additional information. | +| Export Excel | Exports the selected review instance information to an Excel spreadsheet. This automatically downloads the spreadsheet. See the [Data Grid Features](/docs/auditor/10.8/accessreviews/admin/navigate/datagrid.md) topic for additional information. | +| Export CSV | Exports the selected review instance information to a CSV file. This automatically downloads the file. See the [Data Grid Features](/docs/auditor/10.8/accessreviews/admin/navigate/datagrid.md) topic for additional information. | +| Edit Notes | Opens the Edit Notes window for the selected resource and allows free-text editing of the notes. See the [Edit Notes Window](/docs/auditor/10.8/accessreviews/admin/navigate/editnotes.md) topic for additional information. | +| View Responses | Opens the View Responses window, which is only available if the owner has recommended changes for the resource. This window displays all recommended changes, notes provided by the owner for the recommended change, and action buttons to Accept, Decline, or Defer the recommended change. See the [View Responses Window](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/viewresponses.md) topic for additional information. | | Process Changes | Opens a drop-down menu to Accept, Decline, or Defer all owner-recommended changes for the selected resource. This option allows the Review Administrator to process responses in batches, so all owner-recommended changes for the selected resource will be processed with the same action. | -| Remove Changes | Opens the Remove changes window. Clears all requested changes for the selected resource. The resource is returned to a ‘Waiting’ status, requiring the owner to review the resource again. See the [Remove Changes Window](/docs/auditor/10.7/accessreviews/entitlementreviews/approvalprocess/removechanges.md) topic for additional information. | +| Remove Changes | Opens the Remove changes window. Clears all requested changes for the selected resource. The resource is returned to a ‘Waiting’ status, requiring the owner to review the resource again. See the [Remove Changes Window](/docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/removechanges.md) topic for additional information. | diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/renamereview.md b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/renamereview.md index 5464377854..83476a5752 100644 --- a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/renamereview.md +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/renamereview.md @@ -6,7 +6,7 @@ sidebar_position: 20 # Rename Review Window -The Rename Review window opens from the [Manage Reviews Page](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md#manage-reviews-page) +The Rename Review window opens from the [Manage Reviews Page](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md#manage-reviews-page) of the Entitlement Reviews interface. Follow the steps to rename a review. **Step 1 –** Select the review and click **Rename**. The Rename Review window opens. diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/selectedresources.md b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/selectedresources.md index fbd46f6b9b..8c3c1c4ddc 100644 --- a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/selectedresources.md +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/selectedresources.md @@ -7,7 +7,7 @@ sidebar_position: 30 # Selected Resources Window The Selected Resources window opens from the **View Selections** button in the -[Create Review Wizard](/docs/auditor/10.7/accessreviews/entitlementreviews/create/create.md). +[Create Review Wizard](/docs/auditor/10.8/accessreviews/entitlementreviews/create/create.md). ![Selected Resources windwo](/images/accessinformationcenter/12.0/accessrequests/wizard/selectedresources.webp) diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/sendreminders.md b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/sendreminders.md index 2f17616c55..bd84115b61 100644 --- a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/sendreminders.md +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/sendreminders.md @@ -6,7 +6,7 @@ sidebar_position: 40 # Send Reminders Window -The Send Reminders window opens from the [Manage Reviews Page](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md#manage-reviews-page) +The Send Reminders window opens from the [Manage Reviews Page](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md#manage-reviews-page) of the Entitlement Reviews interface. Select the desired active review(s) and click **Send Reminders** to send immediate reminder notifications. The Send Reminders window opens to display an action status. @@ -17,4 +17,4 @@ The window displays the action status. When a successful status is indicated, as sent a reminder email. Click **OK** to close the Send Reminders window. _Remember,_ automatic weekly reminders can be configured on the -[Notifications Page](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md) of the Configuration interface. +[Notifications Page](/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md) of the Configuration interface. diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/stopreview.md b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/stopreview.md index 981e12a9d8..84c60151a3 100644 --- a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/stopreview.md +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/stopreview.md @@ -6,7 +6,7 @@ sidebar_position: 50 # Stop Review Window -The Stop Review window opens from the [Manage Reviews Page](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md#manage-reviews-page) of +The Stop Review window opens from the [Manage Reviews Page](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md#manage-reviews-page) of the Entitlement Reviews interface. Select the desired active review(s) and click **Stop**. The Stop Review window opens to confirm the action. diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/viewresponses.md b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/viewresponses.md index 17d4bc972e..846814179a 100644 --- a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/viewresponses.md +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/viewresponses.md @@ -7,7 +7,7 @@ sidebar_position: 60 # View Responses Window The View Responses window opens from the **View Response** button on the -[Review Details Page](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md#review-details-page) of the Entitlement Reviews interface. It +[Review Details Page](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md#review-details-page) of the Entitlement Reviews interface. It displays all owner-recommended changes and notes for the selected resource. ![View Responses window](/images/accessinformationcenter/12.0/resourcereviews/viewresponses.webp) @@ -32,7 +32,7 @@ selecting the items with no changes in the grid, the change buttons at the botto disabled. The table data grid functions the same way as other table grids. See the -[Data Grid Features](/docs/auditor/10.7/accessreviews/admin/navigate/datagrid.md) topic for additional information. +[Data Grid Features](/docs/auditor/10.8/accessreviews/admin/navigate/datagrid.md) topic for additional information. Select an item in the table, and use the action buttons at the bottom to identify the decision: diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/overview.md b/docs/auditor/10.8/accessreviews/entitlementreviews/overview.md index 07e07b7f8d..a4901aa787 100644 --- a/docs/auditor/10.8/accessreviews/entitlementreviews/overview.md +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/overview.md @@ -46,37 +46,37 @@ There are two types of reviews: - Access – Review user access rights to resources - Membership – Review group membership -See the [Entitlement Reviews Interface](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md) topic for additional information. +See the [Entitlement Reviews Interface](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md) topic for additional information. ## Workflow of Reviews Prerequisite: - The Access Reviews application is configured to send Notifications. See the - [Notifications Page](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md) topic for additional information. + [Notifications Page](/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md) topic for additional information. **NOTE:** By default, the application is configured to send notifications only to the primary owner. However, this can be customized on the Configuration > Notifications page to send notifications to all assigned owners. - Owners assigned to resources within the Resource Owners interface. See the - [Resource Owners Overview](/docs/auditor/10.7/accessreviews/resourceowners/overview.md) topic for additional information. + [Resource Owners Overview](/docs/auditor/10.8/accessreviews/resourceowners/overview.md) topic for additional information. Workflow: **_RECOMMENDED:_** When deploying the Access Reviews application in an organization to process reviews, owners should be notified prior to launching the first set of reviews. See the -[Notification to Owners](/docs/auditor/10.7/accessreviews/resourceowners/overview.md#notification-to-owners) topic for additional +[Notification to Owners](/docs/auditor/10.8/accessreviews/resourceowners/overview.md#notification-to-owners) topic for additional information. 1. Review Administrator creates a review or starts a new review instance. See the - [Create Review Wizard](/docs/auditor/10.7/accessreviews/entitlementreviews/create/create.md) topic for additional information. -2. Owner performs a review. See the [Pending Reviews](/docs/auditor/10.7/accessreviews/owneroverview/pendingreviews/pendingreviews.md) topic for additional + [Create Review Wizard](/docs/auditor/10.8/accessreviews/entitlementreviews/create/create.md) topic for additional information. +2. Owner performs a review. See the [Pending Reviews](/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/pendingreviews.md) topic for additional information. 3. Review Administrator approves owner recommendations. See the - [Approval Process](/docs/auditor/10.7/accessreviews/entitlementreviews/approvalprocess/approvalprocess.md) topic for additional information. + [Approval Process](/docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/approvalprocess.md) topic for additional information. 4. Implement approved changes in your organization. Manually, export a list of approved changes and deliver it to your IT department. When desired, the Review Administrator runs another instance of the review and the workflow starts -again. See the [Review Instances](/docs/auditor/10.7/accessreviews/entitlementreviews/create/reviewinstances.md) topic for additional information. +again. See the [Review Instances](/docs/auditor/10.8/accessreviews/entitlementreviews/create/reviewinstances.md) topic for additional information. diff --git a/docs/auditor/10.8/accessreviews/installation/accessreviewsconfiguration.md b/docs/auditor/10.8/accessreviews/installation/accessreviewsconfiguration.md index cd0b2c64c0..62edfa25c6 100644 --- a/docs/auditor/10.8/accessreviews/installation/accessreviewsconfiguration.md +++ b/docs/auditor/10.8/accessreviews/installation/accessreviewsconfiguration.md @@ -22,11 +22,11 @@ Follow the steps to configure Access Reviews in the Netwrix Auditor. **Step 1 –** Go to **Settings > General > Access Reviews**. -![senddataar](/images/auditor/10.7/senddataar.webp) +![senddataar](/images/auditor/10.8/senddataar.webp) **Step 2 –** Click **Manage**. -![manageaccessreviews](/images/auditor/10.7/manageaccessreviews.webp) +![manageaccessreviews](/images/auditor/10.8/manageaccessreviews.webp) **Step 3 –** Select the desired data sources to review. @@ -47,7 +47,7 @@ Follow the steps to configure Access Reviews in the Netwrix Auditor. **Step 3 –** Click **Edit data source** button on the left. -![enablear](/images/auditor/10.7/enablear.webp) +![enablear](/images/auditor/10.8/enablear.webp) **Step 4 –** Navigate to the Send data for Access Reviews and select the checkbox. diff --git a/docs/auditor/10.8/accessreviews/installation/install.md b/docs/auditor/10.8/accessreviews/installation/install.md index 6cf1df870d..bcd924d637 100644 --- a/docs/auditor/10.8/accessreviews/installation/install.md +++ b/docs/auditor/10.8/accessreviews/installation/install.md @@ -11,16 +11,16 @@ Once the prerequisites have been met, follow the steps to install the Access Rev **Step 1 –** Run the `AccessReviews.exe` executable, and the Netwrix Auditor Access Reviews Setup wizard opens. -![Netwrix Auditor Access Reviews Setup wizard Welcome page](/images/auditor/10.7/access/reviews/installation/installwelcome.webp) +![Netwrix Auditor Access Reviews Setup wizard Welcome page](/images/auditor/10.8/access/reviews/installation/installwelcome.webp) **Step 2 –** On the Welcome page, click **Next** to begin the installation process. -![Netwrix Auditor Access Reviews Setup wizard End-User License Agreement page](/images/auditor/10.7/access/reviews/installation/installeula.webp) +![Netwrix Auditor Access Reviews Setup wizard End-User License Agreement page](/images/auditor/10.8/access/reviews/installation/installeula.webp) **Step 3 –** On the End-User License Agreement page, select the **I accept the terms in the License Agreement** checkbox and click **Next**. -![Netwrix Auditor Access Reviews Setup wizard Destination Folder page](/images/auditor/10.7/access/reviews/installation/installdestinationfolder.webp) +![Netwrix Auditor Access Reviews Setup wizard Destination Folder page](/images/auditor/10.8/access/reviews/installation/installdestinationfolder.webp) **Step 4 –** On the Destination Folder page, you can choose between the default destination folder and a custom folder. Click **Change** to browse for a different location. When the destination is @@ -29,7 +29,7 @@ set as desired, click **Next**. **NOTE:** The default location is `C:\Program Files\Netwrix\Access Access Reviews\`. There are no specific requirements for changing the path. -![Netwrix Auditor Access Reviews Setup wizard SQL Server Connection page](/images/auditor/10.7/access/reviews/installation/installsql.webp) +![Netwrix Auditor Access Reviews Setup wizard SQL Server Connection page](/images/auditor/10.8/access/reviews/installation/installsql.webp) **Step 5 –** On the SQL Server Connection page, provide the required database information. Click **Next** to test the connection to the SQL Server. @@ -51,15 +51,15 @@ specific requirements for changing the path. - For Windows Authentication – **User Name** format must be `[DOMAIN]\[username]` , for example `NWXTECH\ad.bruce` -**NOTE:** See the [Database Page](/docs/auditor/10.7/accessreviews/admin/configuration/database.md) topic for additional +**NOTE:** See the [Database Page](/docs/auditor/10.8/accessreviews/admin/configuration/database.md) topic for additional information. -![Database does not exist Confirmation Window](/images/auditor/10.7/access/reviews/installation/installsqldatabase.webp) +![Database does not exist Confirmation Window](/images/auditor/10.8/access/reviews/installation/installsqldatabase.webp) **Step 6 –** If there are no errors, you will be asked to confirm creation of the new database. Click **Yes**. -![Netwrix Auditor Access Reviews Setup wizard Configure Web Server page](/images/auditor/10.7/access/reviews/installation/installconfigurewebserver.webp) +![Netwrix Auditor Access Reviews Setup wizard Configure Web Server page](/images/auditor/10.8/access/reviews/installation/installconfigurewebserver.webp) **Step 7 –** On the Configure Web Server page, you can choose between the default port and a custom port on which the application will be accessible. To change the port, enter a new port number in the @@ -67,13 +67,13 @@ field. When the port is set as desired, click **Next**. **NOTE:** The default port is 81. -![Netwrix Auditor Access Reviews Setup wizard Ready to Install page](/images/auditor/10.7/access/reviews/installation/installready.webp) +![Netwrix Auditor Access Reviews Setup wizard Ready to Install page](/images/auditor/10.8/access/reviews/installation/installready.webp) **Step 8 –** On the Ready to install page, click **Install** to begin the process. -![Netwrix Auditor Access Reviews Setup wizard Completed page](/images/auditor/10.7/access/reviews/installation/installcompleted.webp) +![Netwrix Auditor Access Reviews Setup wizard Completed page](/images/auditor/10.8/access/reviews/installation/installcompleted.webp) **Step 9 –** Once the installation has successfully completed, click **Finish** to exit the wizard. The installation wizard placed a Netwrix Auditor Access Reviews icon on the desktop. Now proceed to -the [First Launch](/docs/auditor/10.7/accessreviews/admin/firstlaunch.md) topic for next steps. +the [First Launch](/docs/auditor/10.8/accessreviews/admin/firstlaunch.md) topic for next steps. diff --git a/docs/auditor/10.8/accessreviews/installation/overview.md b/docs/auditor/10.8/accessreviews/installation/overview.md index 216a4539e1..b46d3ad4a9 100644 --- a/docs/auditor/10.8/accessreviews/installation/overview.md +++ b/docs/auditor/10.8/accessreviews/installation/overview.md @@ -32,7 +32,7 @@ these will be referred to as the Database service account and the Active Directo - Active Directory service account – The Access Reviews Console login authentication requires the Active Directory service account to have rights to "read" Active Directory. This credential is configured during installation based on the account used for connecting to the database. See the - [Active Directory Page](/docs/auditor/10.7/accessreviews/admin/configuration/activedirectory.md) topic for additional + [Active Directory Page](/docs/auditor/10.8/accessreviews/admin/configuration/activedirectory.md) topic for additional information. ## Software Compatibility & Versions @@ -51,7 +51,7 @@ Latest Version Compatibility Last Updated 6/6/2022 -See the [Upgrade Procedure](/docs/auditor/10.7/accessreviews/installation/upgrade.md) topic for additional information. +See the [Upgrade Procedure](/docs/auditor/10.8/accessreviews/installation/upgrade.md) topic for additional information. ## Supported Browsers diff --git a/docs/auditor/10.8/accessreviews/installation/secure.md b/docs/auditor/10.8/accessreviews/installation/secure.md index 95129cc5b3..cebd91589c 100644 --- a/docs/auditor/10.8/accessreviews/installation/secure.md +++ b/docs/auditor/10.8/accessreviews/installation/secure.md @@ -66,7 +66,7 @@ Notepad. It is located in the installation directory: ...\Netwrix\Access Reviews -![AccessInformationCenter.Service.exe.Config file showing the BindingUrl key](/images/auditor/10.7/access/reviews/installation/securebindingurlparameter.webp) +![AccessInformationCenter.Service.exe.Config file showing the BindingUrl key](/images/auditor/10.8/access/reviews/installation/securebindingurlparameter.webp) **Step 2 –** Change the `BindingUrl` key value to `"https://+:481"` (ensure the port number matches the port number used in the PowerShell command run to create the SSL Binding. diff --git a/docs/auditor/10.8/accessreviews/installation/upgrade.md b/docs/auditor/10.8/accessreviews/installation/upgrade.md index 09250b8ab8..172211016c 100644 --- a/docs/auditor/10.8/accessreviews/installation/upgrade.md +++ b/docs/auditor/10.8/accessreviews/installation/upgrade.md @@ -11,7 +11,7 @@ the Netwrix Auditor Access Reviews application, see the Special Considerations t steps. To upgrade the Access Reviews application to a newer version, simply run the new `AccessReviews.msi` -executable. It is not necessary to uninstall the existing version. See the [Install](/docs/auditor/10.7/accessreviews/installation/install.md) +executable. It is not necessary to uninstall the existing version. See the [Install](/docs/auditor/10.8/accessreviews/installation/install.md) topic for additional information. _Remember,_ the Access Reviews version must align to the compatible Netwrix Auditor version. @@ -43,7 +43,7 @@ the service, and the default name of the database created by the installer. Foll replace Netwrix Access Information Center with Netwrix Auditor Access Reviews. **Step 1 –** Install the Netwrix Auditor Access Reviews application on the same server where the -Netwrix Access Information Center was installed. See the [Install](/docs/auditor/10.7/accessreviews/installation/install.md) topic for additional +Netwrix Access Information Center was installed. See the [Install](/docs/auditor/10.8/accessreviews/installation/install.md) topic for additional information. On the SQL Server Connection page: - Supply the information for the existing database. The default name for the original database was @@ -53,13 +53,13 @@ information. On the SQL Server Connection page: **NOTE:** The new destination folder will be `...\Netwrix\Access Reviews`. **Step 2 –** Launch the application and reset the Builtin Administrator password. See the -[First Launch](/docs/auditor/10.7/accessreviews/admin/firstlaunch.md) topic for additional information. +[First Launch](/docs/auditor/10.8/accessreviews/admin/firstlaunch.md) topic for additional information. **Step 3 –** It will be necessary to add your Console Users again. See the -[Console Access Page](/docs/auditor/10.7/accessreviews/admin/configuration/consoleaccess.md) topic for additional information. +[Console Access Page](/docs/auditor/10.8/accessreviews/admin/configuration/consoleaccess.md) topic for additional information. **Step 4 –** It will be necessary to configure the Notification settings. See the -[Notifications Page](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md) topic for additional information. +[Notifications Page](/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md) topic for additional information. **Step 5 –** If you have customized your email templates, it will be necessary to copy the Templates folder from the old `...\Netwrix\Access Information Center` installation directory to the new diff --git a/docs/auditor/10.8/accessreviews/owneroverview/confirmationrequest.md b/docs/auditor/10.8/accessreviews/owneroverview/confirmationrequest.md index f391b23b53..bbd03d50fa 100644 --- a/docs/auditor/10.8/accessreviews/owneroverview/confirmationrequest.md +++ b/docs/auditor/10.8/accessreviews/owneroverview/confirmationrequest.md @@ -9,7 +9,7 @@ sidebar_position: 10 The Ownership Administrator may request ownership confirmation for a resource being managed through the Access Reviews application. As an assigned owner, you will receive the following email. -![Ownership Confirmation Request Email with Yes and No buttons for responding](/images/auditor/10.7/access/reviews/resourceowners/email/confirmemail.webp) +![Ownership Confirmation Request Email with Yes and No buttons for responding](/images/auditor/10.8/access/reviews/resourceowners/email/confirmemail.webp) The Ownership Confirmation Request email provides buttons for confirming (Yes) or declining (No) ownership of the listed resource. You will be asked to authenticate for your response to be @@ -21,7 +21,7 @@ complete the process. One of two messages will appear according to if you confir If you have accepted ownership for the assigned resource, the browser will display the following message after authentication: -![confirmemailaccept](/images/auditor/10.7/access/reviews/resourceowners/email/confirmemailaccept.webp) +![confirmemailaccept](/images/auditor/10.8/access/reviews/resourceowners/email/confirmemailaccept.webp) "Your response has been saved. You may close this window and delete the confirmation request e-mail." @@ -31,12 +31,12 @@ e-mail." If you have declined ownership for the assigned resource, the browser will display the following message after authentication: -![Ownership declined browser message](/images/auditor/10.7/access/reviews/resourceowners/email/confirmemaildecline.webp) +![Ownership declined browser message](/images/auditor/10.8/access/reviews/resourceowners/email/confirmemaildecline.webp) "Before we update ownership can you suggest another owner?" Enter possible owners in the textbox. Click **Submit** to complete the process. -![Ownership declined browser message after an alternative owner is submitted](/images/auditor/10.7/access/reviews/resourceowners/email/confirmemaildecline2.webp) +![Ownership declined browser message after an alternative owner is submitted](/images/auditor/10.8/access/reviews/resourceowners/email/confirmemaildecline2.webp) "Your response has been saved. You may close this window and delete the confirmation request e-mail." diff --git a/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/access.md b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/access.md index 344964e08e..f20be4d7b3 100644 --- a/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/access.md +++ b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/access.md @@ -12,13 +12,13 @@ to perform an Access review. **Step 1 –** On the Pending Reviews page, select the resource with a pending Access review and click **Begin Review**. The Resource Review page opens to the 1 Make changes tab. -![Resource Reviews page showing an Access Review on 1 Make changes tab](/images/auditor/10.7/access/reviews/entitlementreviews/reviewpageaccess.webp) +![Resource Reviews page showing an Access Review on 1 Make changes tab](/images/auditor/10.8/access/reviews/entitlementreviews/reviewpageaccess.webp) The table displays access information for the resource being reviewed: - Trustee Name — Name of the trustee with access to this resource. If the trustee is a group, click the hyperlink to open the Group Membership window. See the - [Group Membership Window](/docs/auditor/10.7/accessreviews/owneroverview/pendingreviews/groupmembership.md) topic for additional information. + [Group Membership Window](/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/groupmembership.md) topic for additional information. - Access Level (Full Control, Modify, and Read) columns — Blue checkmark icon indicates current access level @@ -36,7 +36,7 @@ pending until you submit all recommendations for this resource. **Step 4 –** When the recommended changes are set as desired, click **Next**. The 2 Review changes tab opens in the Resource Review page. -![Resource Reviews page showing an Access Review on 2 Review changes tab](/images/auditor/10.7/access/reviews/entitlementreviews/review/reviewpageaccesstab2.webp) +![Resource Reviews page showing an Access Review on 2 Review changes tab](/images/auditor/10.8/access/reviews/entitlementreviews/review/reviewpageaccesstab2.webp) **Step 5 –** This tab displays a filtered table of trustees with recommended changes. Confirm your recommendations and optionally add notes to the Review Administrator. Owners are encouraged to leave diff --git a/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/membership.md b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/membership.md index c8025c7c40..b2de5e8a49 100644 --- a/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/membership.md +++ b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/membership.md @@ -12,13 +12,13 @@ review. **Step 1 –** On the Pending Reviews page, select the resource with a pending Membership review and click **Begin Review**. The Resource Review page opens to the 1 Make changes tab. -![Resource Reviews page showing a Membership Review on 1 Make changes tab](/images/auditor/10.7/access/reviews/entitlementreviews/review/reviewpagemembership.webp) +![Resource Reviews page showing a Membership Review on 1 Make changes tab](/images/auditor/10.8/access/reviews/entitlementreviews/review/reviewpagemembership.webp) The table displays membership information for the group being reviewed: - Trustee Name — Name of the trustee with group membership. If the trustee is a group, click the hyperlink to open the Group Membership window. See the - [Group Membership Window](/docs/auditor/10.7/accessreviews/owneroverview/pendingreviews/groupmembership.md) topic for additional information. + [Group Membership Window](/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/groupmembership.md) topic for additional information. - Member — Blue checkmark icon indicates current membership **Step 2 –** Recommend removing membership by selecting one or more trustees and clicking the @@ -31,7 +31,7 @@ pending until you submit all recommendations for this resource. **Step 3 –** When the recommended changes are set as desired, click **Next**. The 2 Review changes tab opens in the Resource Review page. -![Resource Reviews page showing a Membership Review on 2 Review changes tab](/images/auditor/10.7/access/reviews/entitlementreviews/review/reviewpagemembershiptab2.webp) +![Resource Reviews page showing a Membership Review on 2 Review changes tab](/images/auditor/10.8/access/reviews/entitlementreviews/review/reviewpagemembershiptab2.webp) **Step 4 –** This tab displays a filtered table of trustees with recommended changes. Confirm your recommendations and optionally add notes to the Review Administrator. Owners are encouraged to leave diff --git a/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/pendingreviews.md b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/pendingreviews.md index a1f1312d18..cbbea2a21f 100644 --- a/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/pendingreviews.md +++ b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/pendingreviews.md @@ -12,7 +12,7 @@ have to your resource. When the Review Administrator creates a new review or sta of an existing review, you receive an email notification that includes a link to the your pending reviews. -![Email announcing a pending review](/images/auditor/10.7/access/reviews/entitlementreviews/pendingreviewemail.webp) +![Email announcing a pending review](/images/auditor/10.8/access/reviews/entitlementreviews/pendingreviewemail.webp) Use the **Sign in** link at the bottom to open the My Reviews interface in the Access Reviews Console. @@ -20,13 +20,13 @@ Console. _Remember,_ your company domain credentials are used to log in. The My Reviews interface has two pages: Pending Reviews and Review History. See the -[Review History Page](/docs/auditor/10.7/accessreviews/owneroverview/reviewhistory.md) topic for additional information. +[Review History Page](/docs/auditor/10.8/accessreviews/owneroverview/reviewhistory.md) topic for additional information. ## Pending Reviews Page The Pending Reviews page lists all of your resources included in pending reviews. -![My Reviews interface showing Pending Reviews page](/images/auditor/10.7/access/reviews/entitlementreviews/pendingreivewspage.webp) +![My Reviews interface showing Pending Reviews page](/images/auditor/10.8/access/reviews/entitlementreviews/pendingreivewspage.webp) The information displayed in the table includes: @@ -42,7 +42,7 @@ The information displayed in the table includes: - Last Reviewed — Date timestamp when the last review took place for the resource. The table data grid functions the same way as other table grids. See the -[Data Grid Features](/docs/auditor/10.7/accessreviews/admin/navigate/datagrid.md) topic for additional information. +[Data Grid Features](/docs/auditor/10.8/accessreviews/admin/navigate/datagrid.md) topic for additional information. Performing a review means you are evaluating the resources. You can leave the resource unchanged or make recommendations for changes. Consider the following examples: @@ -57,7 +57,7 @@ recommendation and processes those changes. The Begin Review button opens the Resource Review page to start the review. -![Resource Reviews page showing the 1 Make changes tab](/images/auditor/10.7/access/reviews/entitlementreviews/reviewpageaccess.webp) +![Resource Reviews page showing the 1 Make changes tab](/images/auditor/10.8/access/reviews/entitlementreviews/reviewpageaccess.webp) The Resource Review page varies based on the type of review; however, there are several common features: @@ -85,5 +85,5 @@ features: The content within the table varies, and additional options may appear depending on the type of review being conducted. See the following sections for step by step instructions: -- [Perform an Access Review](/docs/auditor/10.7/accessreviews/owneroverview/pendingreviews/access.md) -- [Perform a Membership Review](/docs/auditor/10.7/accessreviews/owneroverview/pendingreviews/membership.md) +- [Perform an Access Review](/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/access.md) +- [Perform a Membership Review](/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/membership.md) diff --git a/docs/auditor/10.8/accessreviews/owneroverview/reviewhistory.md b/docs/auditor/10.8/accessreviews/owneroverview/reviewhistory.md index eea0e2145b..b62c689fc4 100644 --- a/docs/auditor/10.8/accessreviews/owneroverview/reviewhistory.md +++ b/docs/auditor/10.8/accessreviews/owneroverview/reviewhistory.md @@ -8,7 +8,7 @@ sidebar_position: 30 The Review History page lists all completed review instances for your resources. -![Review History page](/images/auditor/10.7/access/reviews/entitlementreviews/reviewhistorypage.webp) +![Review History page](/images/auditor/10.8/access/reviews/entitlementreviews/reviewhistorypage.webp) The information displayed in the table includes: @@ -22,7 +22,7 @@ The information displayed in the table includes: or Waiting. Hover over a status icon to display its tooltip. The table data grid functions the same way as other table grids. See the -[Data Grid Features](/docs/auditor/10.7/accessreviews/admin/navigate/datagrid.md) topic for additional information. +[Data Grid Features](/docs/auditor/10.8/accessreviews/admin/navigate/datagrid.md) topic for additional information. ## Review Details Window diff --git a/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirm.md b/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirm.md index 2b95ca9b16..41d6ebc8a1 100644 --- a/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirm.md +++ b/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirm.md @@ -9,7 +9,7 @@ sidebar_position: 10 The Confirm Ownership wizard is opened with the **Request Confirmation** button in the Resource Owners interface. It can be opened for one or multiple resources. -![Confirm Ownership wizard showing 1.Select Owners page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectowners_2.webp) +![Confirm Ownership wizard showing 1.Select Owners page](/images/auditor/10.8/access/reviews/resourceowners/wizard/selectowners_2.webp) It contains one page: @@ -22,7 +22,7 @@ Follow the steps to request ownership confirmation. **Step 1 –** In the Resource Owners interface, select the desired resource or resources and click Request Confirmation. The Confirm Ownership wizard opens. -![Confirm Ownership wizard showing 1.Select Owners page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectowners_2.webp) +![Confirm Ownership wizard showing 1.Select Owners page](/images/auditor/10.8/access/reviews/resourceowners/wizard/selectowners_2.webp) **Step 2 –** On the Select Owners page, you can optionally remove owners you do not want or need ownership confirmation from. Select those owners and click **Remove**. Those owners will not receive @@ -37,12 +37,12 @@ application begins to send the confirmation email. The table provides the follow Tool-tips display when hovering over the icons indicating whether the resource ownership has been confirmed, declined, pending response, or that a confirmation has not been requested. -![selectownerstaskcompleted](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectownerstaskcompleted.webp) +![selectownerstaskcompleted](/images/auditor/10.8/access/reviews/resourceowners/wizard/selectownerstaskcompleted.webp) **Step 3 –** The action status displays on the page. When the owner confirmation notification has completed (100%), click Close. The Confirm Ownership wizard closes. The selected owners receive an email from the Access Reviews application asking if they are the owner of the assigned resource. See the -[Ownership Confirmation Request Email](/docs/auditor/10.7/accessreviews/owneroverview/confirmationrequest.md) topic for additional +[Ownership Confirmation Request Email](/docs/auditor/10.8/accessreviews/owneroverview/confirmationrequest.md) topic for additional information. diff --git a/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirmation.md b/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirmation.md index ed9c54c298..80d1fcc260 100644 --- a/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirmation.md +++ b/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirmation.md @@ -12,10 +12,10 @@ needs to claim that ownership responsibility. Resources that do not have confirm through the cracks. **NOTE:** This does require the Notification settings to be configured for the Access Reviews -application. See the [Notifications Page](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md) topic for +application. See the [Notifications Page](/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md) topic for additional information. -![Table in Resource Owners interface showing several resources being managed and all confirmation status icons](/images/auditor/10.7/access/reviews/resourceowners/tablestatus.webp) +![Table in Resource Owners interface showing several resources being managed and all confirmation status icons](/images/auditor/10.8/access/reviews/resourceowners/tablestatus.webp) The table in the Resource Owners interface includes a Status column. The following icons appear in this column to indicate the owner confirmation status: @@ -25,10 +25,10 @@ this column to indicate the owner confirmation status: | ![Yellow circle with whit question mark](/images/accessinformationcenter/12.0/resourceowners/statusnostatus.webp) | No Status | Indicates ownership confirmation has not been requested, and there is no ownership status at this time | | ![Blue circle with white clock face](/images/accessinformationcenter/12.0/resourceowners/statuswaiting.webp) | Waiting | Indicates a request for confirmation has been sent, and you are waiting for a response from the assigned owner. Hover over the icon to view the date timestamp of the request. | | ![Green circle with white checkmark](/images/accessinformationcenter/12.0/resourceowners/statusconfirmed.webp) | Confirmed | Indicates the assigned owner confirmed ownership of the resource. Hover over the icon to view the date timestamp of the confirmation. | -| ![Red circle with white X](/images/accessinformationcenter/12.0/resourceowners/statusdeclined.webp) | Declined | Indicates the assigned owner declined ownership of the resource. These individuals would have been asked to suggest an alternative owner. Check the Notes for the resource to view this information. Hover over the icon to view the date timestamp of the decline. _Remember,_ a resource with declined ownership needs to be updated to assign a new owner. See the [Update Resource Wizard](/docs/auditor/10.7/accessreviews/resourceowners/interface/update.md) topic for additional information. | +| ![Red circle with white X](/images/accessinformationcenter/12.0/resourceowners/statusdeclined.webp) | Declined | Indicates the assigned owner declined ownership of the resource. These individuals would have been asked to suggest an alternative owner. Check the Notes for the resource to view this information. Hover over the icon to view the date timestamp of the decline. _Remember,_ a resource with declined ownership needs to be updated to assign a new owner. See the [Update Resource Wizard](/docs/auditor/10.8/accessreviews/resourceowners/interface/update.md) topic for additional information. | If multiple owners have been assigned, there is a choice for which assigned owner(s) should receive the confirmation. If multiple owners were sent the request, the column remains as a waiting symbol until the assigned Primary owner replies. -See the [Confirm Ownership Wizard](/docs/auditor/10.7/accessreviews/resourceowners/confirmation/confirm.md) topic for additional information. +See the [Confirm Ownership Wizard](/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirm.md) topic for additional information. diff --git a/docs/auditor/10.8/accessreviews/resourceowners/interface/add.md b/docs/auditor/10.8/accessreviews/resourceowners/interface/add.md index 2f731e1444..5c0ccfaef8 100644 --- a/docs/auditor/10.8/accessreviews/resourceowners/interface/add.md +++ b/docs/auditor/10.8/accessreviews/resourceowners/interface/add.md @@ -8,7 +8,7 @@ sidebar_position: 10 The Add new resource wizard is opened with the **Add** button in the Resource Owners interface. -![Add new resource wizard showing 1. Select Resources page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectresource.webp) +![Add new resource wizard showing 1. Select Resources page](/images/auditor/10.8/access/reviews/resourceowners/wizard/selectresource.webp) It contains four pages: @@ -25,7 +25,7 @@ Follow the steps to add resources one at a time and assign owners. **Step 1 –** In the Resource Owners interface, click **Add**. The Add new resource wizard opens. -![Add new resource wizard page showing 1. Select Resources page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectresource.webp) +![Add new resource wizard page showing 1. Select Resources page](/images/auditor/10.8/access/reviews/resourceowners/wizard/selectresource.webp) **Step 2 –** On the Select Resource page, select the resource to be managed. Then click **Next**. @@ -39,13 +39,13 @@ Follow the steps to add resources one at a time and assign owners. - Browse option – Navigate through the resource tree to select the desired File System or SharePoint resource. -![Add new resources wizard showing 2. Select Owners page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectowners_1.webp) +![Add new resources wizard showing 2. Select Owners page](/images/auditor/10.8/access/reviews/resourceowners/wizard/selectowners_1.webp) **Step 3 –** On the Select Owners page, click **Add** to browse for an owner. Repeat this Step to -add multiple owners. See the [Add Owner Window](/docs/auditor/10.7/accessreviews/resourceowners/interface/addowner.md) topic for additional +add multiple owners. See the [Add Owner Window](/docs/auditor/10.8/accessreviews/resourceowners/interface/addowner.md) topic for additional information. -![Add new resources wizard with the 2. Select Owners page showing multiple owners selected](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectownerswithowners.webp) +![Add new resources wizard with the 2. Select Owners page showing multiple owners selected](/images/auditor/10.8/access/reviews/resourceowners/wizard/selectownerswithowners.webp) **Step 4 –** When only one owner is assigned, the owner will be the Primary by default. When multiple owners are assigned, the first owner in the list is the Primary owner. Use the arrow @@ -62,17 +62,17 @@ the owners: Tool-tips display when hovering over the icons indicating whether the resource ownership has been confirmed, declined, pending response, or that a confirmation has not been requested. -![Add new resource wizard showing 3. Description page](/images/auditor/10.7/access/reviews/resourceowners/wizard/description_1.webp) +![Add new resource wizard showing 3. Description page](/images/auditor/10.8/access/reviews/resourceowners/wizard/description_1.webp) **Step 5 –** On the Description page, optionally add a description for the resource in the textbox. Then click **Next**. -![Add new resource wizard showing 4. Summary page](/images/auditor/10.7/access/reviews/resourceowners/wizard/summary_1.webp) +![Add new resource wizard showing 4. Summary page](/images/auditor/10.8/access/reviews/resourceowners/wizard/summary_1.webp) **Step 6 –** On the Summary page, review the settings and click Finish. The Access Reviews application begins to process the ownership configuration. -![Add new resource wizard with 4. Summary page showing action status 100% completed](/images/auditor/10.7/access/reviews/resourceowners/wizard/summarytaskcompleted.webp) +![Add new resource wizard with 4. Summary page showing action status 100% completed](/images/auditor/10.8/access/reviews/resourceowners/wizard/summarytaskcompleted.webp) **Step 7 –** The action status displays on the page. When the task has completed (100%), click **Close**. The Add new resource wizard closes. diff --git a/docs/auditor/10.8/accessreviews/resourceowners/interface/addowner.md b/docs/auditor/10.8/accessreviews/resourceowners/interface/addowner.md index f62e990588..a8e9d06841 100644 --- a/docs/auditor/10.8/accessreviews/resourceowners/interface/addowner.md +++ b/docs/auditor/10.8/accessreviews/resourceowners/interface/addowner.md @@ -6,11 +6,11 @@ sidebar_position: 30 # Add Owner Window -The Add Owner window opens from either the [Add New Resource Wizard](/docs/auditor/10.7/accessreviews/resourceowners/interface/add.md) of the -[Update Resource Wizard](/docs/auditor/10.7/accessreviews/resourceowners/interface/update.md). This window is used to search for a user account by +The Add Owner window opens from either the [Add New Resource Wizard](/docs/auditor/10.8/accessreviews/resourceowners/interface/add.md) of the +[Update Resource Wizard](/docs/auditor/10.8/accessreviews/resourceowners/interface/update.md). This window is used to search for a user account by browsing Active Directory. -![Add Owner window showing Search options](/images/auditor/10.7/access/reviews/resourceowners/window/addowner.webp) +![Add Owner window showing Search options](/images/auditor/10.8/access/reviews/resourceowners/window/addowner.webp) Enter a name in the search field to find and select users from Active Directory, which populates in a drop-down menu as you type. If multiple domains are known to the application, ensure the correct diff --git a/docs/auditor/10.8/accessreviews/resourceowners/interface/interface.md b/docs/auditor/10.8/accessreviews/resourceowners/interface/interface.md index 4a0ae44046..1713f56017 100644 --- a/docs/auditor/10.8/accessreviews/resourceowners/interface/interface.md +++ b/docs/auditor/10.8/accessreviews/resourceowners/interface/interface.md @@ -24,35 +24,35 @@ The information displayed in the table includes: - Status – Indicates whether or not the assigned owner has confirmed ownership of that resource. Tool-tips display when hovering over the icons indicating whether the resource ownership has been confirmed, declined, pending response, or that a confirmation has not been requested. See the - [Ownership Confirmation](/docs/auditor/10.7/accessreviews/resourceowners/confirmation/confirmation.md) topic for additional information. + [Ownership Confirmation](/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirmation.md) topic for additional information. - Notes – Icon indicates a Note has been added. Click on the icon to read the attached note(s). Notes can be added by Ownership Administrators or populated with alternative owners by individuals - who declined ownership. See the [Edit Notes Window](/docs/auditor/10.7/accessreviews/admin/navigate/editnotes.md) and the Notes & + who declined ownership. See the [Edit Notes Window](/docs/auditor/10.8/accessreviews/admin/navigate/editnotes.md) and the Notes & Descriptions topics for additional information. - Last Reviewed – Date timestamp when the last review took place for the resource. The hyperlink will open the Entitlement Reviews interface to that Review Details page displaying the historical review instance. See the - [Review Details Page](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md#review-details-page) topic for additional + [Review Details Page](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md#review-details-page) topic for additional information. - Active Review – Indicates whether or not there is a pending review. The hyperlink will open the Entitlement Reviews interface to that Review Details page displaying the active review instance. - See the [Review Details Page](/docs/auditor/10.7/accessreviews/entitlementreviews/interface/interface.md#review-details-page) topic for + See the [Review Details Page](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md#review-details-page) topic for additional information. The table data grid functions the same way as other table grids. See the -[Data Grid Features](/docs/auditor/10.7/accessreviews/admin/navigate/datagrid.md) topic for additional information. +[Data Grid Features](/docs/auditor/10.8/accessreviews/admin/navigate/datagrid.md) topic for additional information. The buttons at the bottom enable you to conduct the following actions: -![Action buttons in the Resource Owners Interface](/images/auditor/10.7/access/reviews/resourceowners/interfacebuttons.webp) +![Action buttons in the Resource Owners Interface](/images/auditor/10.8/access/reviews/resourceowners/interfacebuttons.webp) | Button | Function | | -------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -| Add | Launches the Add new resource wizard to add a new resource to the list. This allows you to add one resource at a time and assign an owner. See the [Add New Resource Wizard](/docs/auditor/10.7/accessreviews/resourceowners/interface/add.md) topic for additional information. | -| Update | Launches the Update resource wizard for the selected resource. This allows you to make changes to the assigned owners or add/edit the resource description. See the [Update Resource Wizard](/docs/auditor/10.7/accessreviews/resourceowners/interface/update.md) topic for additional information. | -| Remove | Opens the Confirm removal window to removes the selected resource from being managed through the application. _Remember,_ only resources with an assigned owner will be visible in the table. Removing a resource from this table does not delete the resource from the application database. See the [Confirm Removal Window](/docs/auditor/10.7/accessreviews/resourceowners/interface/confirmremoval.md) topic for additional information. | -| Request Confirmation | Opens the Confirm Ownership wizard. Sends an email to the assigned owner(s) for the selected resource requesting ownership confirmation. See the[Confirm Ownership Wizard](/docs/auditor/10.7/accessreviews/resourceowners/confirmation/confirm.md) topic for additional information. | -| Edit Notes | Opens the Edit Notes window for the selected resource and allows free-text editing of the notes. See the [Edit Notes Window](/docs/auditor/10.7/accessreviews/admin/navigate/editnotes.md) topic for additional information. | +| Add | Launches the Add new resource wizard to add a new resource to the list. This allows you to add one resource at a time and assign an owner. See the [Add New Resource Wizard](/docs/auditor/10.8/accessreviews/resourceowners/interface/add.md) topic for additional information. | +| Update | Launches the Update resource wizard for the selected resource. This allows you to make changes to the assigned owners or add/edit the resource description. See the [Update Resource Wizard](/docs/auditor/10.8/accessreviews/resourceowners/interface/update.md) topic for additional information. | +| Remove | Opens the Confirm removal window to removes the selected resource from being managed through the application. _Remember,_ only resources with an assigned owner will be visible in the table. Removing a resource from this table does not delete the resource from the application database. See the [Confirm Removal Window](/docs/auditor/10.8/accessreviews/resourceowners/interface/confirmremoval.md) topic for additional information. | +| Request Confirmation | Opens the Confirm Ownership wizard. Sends an email to the assigned owner(s) for the selected resource requesting ownership confirmation. See the[Confirm Ownership Wizard](/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirm.md) topic for additional information. | +| Edit Notes | Opens the Edit Notes window for the selected resource and allows free-text editing of the notes. See the [Edit Notes Window](/docs/auditor/10.8/accessreviews/admin/navigate/editnotes.md) topic for additional information. | ## Notes & Descriptions diff --git a/docs/auditor/10.8/accessreviews/resourceowners/interface/update.md b/docs/auditor/10.8/accessreviews/resourceowners/interface/update.md index d121769ac5..cfbd773de2 100644 --- a/docs/auditor/10.8/accessreviews/resourceowners/interface/update.md +++ b/docs/auditor/10.8/accessreviews/resourceowners/interface/update.md @@ -8,7 +8,7 @@ sidebar_position: 20 The Update resource wizard is opened with the **Update** button in the Resource Owners interface. -![Update Resource wizard showing 1. Select Owners page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectowners.webp) +![Update Resource wizard showing 1. Select Owners page](/images/auditor/10.8/access/reviews/resourceowners/wizard/selectowners.webp) It contains three pages: @@ -26,13 +26,13 @@ Follow the steps to update ownership configuration for a resource. **Step 1 –** In the Resource Owners interface, select the desired resource and click **Update**. The Update resource wizard opens. -![Update resource wizard showing 1. Select Owners page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectowners.webp) +![Update resource wizard showing 1. Select Owners page](/images/auditor/10.8/access/reviews/resourceowners/wizard/selectowners.webp) **Step 2 –** The Select Owners page lists the currently assigned owner(s). Modify as desired and click **Next** to continue. - Add new owners — Click **Add** to browse for a new owner. See the - [Add Owner Window](/docs/auditor/10.7/accessreviews/resourceowners/interface/addowner.md) topic for additional information. + [Add Owner Window](/docs/auditor/10.8/accessreviews/resourceowners/interface/addowner.md) topic for additional information. - Remove an owner — Select an owner and click **Remove** - Change owner priority — Select an owner and use the arrow buttons to change the order @@ -48,18 +48,18 @@ information on the owners: Tool-tips display when hovering over the icons indicating whether the resource ownership has been confirmed, declined, pending response, or that a confirmation has not been requested. -![Update resource wizard showing 2. Description page](/images/auditor/10.7/access/reviews/resourceowners/wizard/description.webp) +![Update resource wizard showing 2. Description page](/images/auditor/10.8/access/reviews/resourceowners/wizard/description.webp) **Step 3 –** The Description page displays any description that has been provided by either the Ownership Administrator or the assigned owner(s) for the resource. Modify as desired by typing in the textbox. Then click **Next** to continue. -![Update resource wizard showing 3. Summary page](/images/auditor/10.7/access/reviews/resourceowners/wizard/summary.webp) +![Update resource wizard showing 3. Summary page](/images/auditor/10.8/access/reviews/resourceowners/wizard/summary.webp) **Step 4 –** On the Summary page, review the settings and click Finish. The Access Reviews application begins to process the ownership changes. -![Update resource wizard with 3. Summary page showing action status 100% complete](/images/auditor/10.7/access/reviews/resourceowners/wizard/summarytaskcompleted.webp) +![Update resource wizard with 3. Summary page showing action status 100% complete](/images/auditor/10.8/access/reviews/resourceowners/wizard/summarytaskcompleted.webp) **Step 5 –** The action status displays on the page. When the update has completed (100%), click **Close**. The Update resource wizard closes. diff --git a/docs/auditor/10.8/accessreviews/resourceowners/overview.md b/docs/auditor/10.8/accessreviews/resourceowners/overview.md index b708fd1e56..61a49337de 100644 --- a/docs/auditor/10.8/accessreviews/resourceowners/overview.md +++ b/docs/auditor/10.8/accessreviews/resourceowners/overview.md @@ -25,7 +25,7 @@ The My Reviews interface provides owners with access to historical and pending r Reviews interface is only accessible to users who have been assigned ownership of at least one resource. Owners without a console user role are directed to the My Reviews interface at login. Owners with a console user role access the pending and historical reviews for their resources by -clicking the My Reviews tab. See the [Pending Reviews](/docs/auditor/10.7/accessreviews/owneroverview/pendingreviews/pendingreviews.md) +clicking the My Reviews tab. See the [Pending Reviews](/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/pendingreviews.md) topic for additional information. Who Can Assign Ownership (Ownership Administrators)? @@ -48,14 +48,14 @@ What Can Resource Owners Do? - Perform an access review (when there is a pending review) - View historical information on access reviews -See the [Resource Owners Interface](/docs/auditor/10.7/accessreviews/resourceowners/interface/interface.md) topic for additional information. +See the [Resource Owners Interface](/docs/auditor/10.8/accessreviews/resourceowners/interface/interface.md) topic for additional information. ## Workflow of Ownership Assignment Prerequisite: - Optional: The Access Reviews application is configured to send Notifications. See the - [Notifications Page](/docs/auditor/10.7/accessreviews/admin/configuration/notifications.md) topic for additional information. + [Notifications Page](/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md) topic for additional information. **NOTE:** By default, the application is configured to send notifications only to the primary owner. However, this can be customized on the Configuration > Notifications page to send @@ -74,8 +74,8 @@ Workflow: workflow. - Add resources to be managed by associating a business data owner with a resource. See the - [Add New Resource Wizard](/docs/auditor/10.7/accessreviews/resourceowners/interface/add.md) topic for additional information. -- Confirm resource ownership. See the [Ownership Confirmation](/docs/auditor/10.7/accessreviews/resourceowners/confirmation/confirmation.md) topic for additional + [Add New Resource Wizard](/docs/auditor/10.8/accessreviews/resourceowners/interface/add.md) topic for additional information. +- Confirm resource ownership. See the [Ownership Confirmation](/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirmation.md) topic for additional information. - Notify owners of their responsibilities. See the Notification to Owners topic for additional information. @@ -90,5 +90,5 @@ information: - How owners should log into the application console, specifically what URL and credentials to use. - Expectation on response times - How to access instructions on how to complete a review. You can link to the - [Owners & Access Reviews](/docs/auditor/10.7/accessreviews/owneroverview/owneroverview.md) topic or download that topic and its subtopics as a + [Owners & Access Reviews](/docs/auditor/10.8/accessreviews/owneroverview/owneroverview.md) topic or download that topic and its subtopics as a PDF and make it available within your corporate resources. diff --git a/docs/auditor/10.8/accountlockoutexaminer/usage.md b/docs/auditor/10.8/accountlockoutexaminer/usage.md index 56d74168ce..30dd8613e4 100644 --- a/docs/auditor/10.8/accountlockoutexaminer/usage.md +++ b/docs/auditor/10.8/accountlockoutexaminer/usage.md @@ -11,20 +11,20 @@ download completes, run the executable from your browser menu or from your **Dow To find out why an Active Directory account was locked out, perform the following steps: -1. Set up the auditing as described in [Planning and Preparation](/docs/auditor/10.7/accountlockoutexaminer/configure.md) section. +1. Set up the auditing as described in [Planning and Preparation](/docs/auditor/10.8/accountlockoutexaminer/configure.md) section. 2. Download the application onto a computer within the domain where lockouts happen. 3. Run the application. When prompted, accept the end-user license agreement. 4. If you wish, select to participate in Netwrix Customer Experience Improvement program. You can later change your preference using the product settings (see the next section for details). -![ale_usage_stats_thumb_0_0](/images/auditor/10.7/accountlockoutexaminer/ale_usage_stats_thumb_0_0.webp) +![ale_usage_stats_thumb_0_0](/images/auditor/10.8/accountlockoutexaminer/ale_usage_stats_thumb_0_0.webp) 5. In the main window, supply the name of the account that was locked out. 6. Specify examiner credentials – the user account that will be used to run the examination, access domain controllers, and so on. The account must be a member of the **Domain Admins** group. 7. Click **Examine**. -![ale_new_start_thumb_0_0](/images/auditor/10.7/accountlockoutexaminer/ale_new_start_thumb_0_0.webp) +![ale_new_start_thumb_0_0](/images/auditor/10.8/accountlockoutexaminer/ale_new_start_thumb_0_0.webp) Once the examination completes, you will be presented with a list of reasons why the account you supplied is being locked out. @@ -41,7 +41,7 @@ After you click **Settings** in the main window, you can apply the following opt | **Usage statistics** | | | | Take part in Netwrix Customer Experience Improvement program | Select this option to participate in the program. See [this Knowledge Base article](https://kb.netwrix.com/5820) for more information on the program. | | -![ale_settings_thumb_0_0](/images/auditor/10.7/accountlockoutexaminer/ale_settings_thumb_0_0.webp) +![ale_settings_thumb_0_0](/images/auditor/10.8/accountlockoutexaminer/ale_settings_thumb_0_0.webp) ## Troubleshooting @@ -53,7 +53,7 @@ Lockout Examiner\Logs_ folder. | In the environments with root/child domains, you may receive the "_Could not query ComputerName. Access is denied_." error. | The account used to run Netwrix Account Lockout Examiner is not a member of the local **Administrators** group on the workstations in both root and child domains. Administrative rights are required to access the Security Event logs on these workstations. | Make sure this account is included in the local **Administrators** group. | | **Issues encountered during examination** section is shown in the examination results. | Most probably this means that **Netwrix Account Lockout Examiner** cannot reach some of the data sources it needs. | - Check that you have configured the audit settings in the target domain as described in [Required audit settings](configure.md#required-audit-settings) section. - Check that network connectivity between the Account Lockout Examiner machine and the domain controllers in your domain works properly. | -![ale_new_results](/images/auditor/10.7/accountlockoutexaminer/ale_new_results.webp) +![ale_new_results](/images/auditor/10.8/accountlockoutexaminer/ale_new_results.webp) We welcome any feedback and ideas you might have. Please take a minute to check in on [Netwrix page at Spiceworks](https://community.spiceworks.com/pages/NetWrix?tab=353) or submit diff --git a/docs/auditor/10.8/addon/alienvaultusm/collecteddata.md b/docs/auditor/10.8/addon/alienvaultusm/collecteddata.md index 6aecbd739f..2f325d6bd3 100644 --- a/docs/auditor/10.8/addon/alienvaultusm/collecteddata.md +++ b/docs/auditor/10.8/addon/alienvaultusm/collecteddata.md @@ -14,6 +14,6 @@ Services Logs** >Netwrix Auditor Integration log. **Step 3 –** Review events. -![EventLog_Export_Example](/images/auditor/10.7/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) +![EventLog_Export_Example](/images/auditor/10.8/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) Now you can augment Windows event log with data collected by the Auditor. diff --git a/docs/auditor/10.8/addon/alienvaultusm/deployment.md b/docs/auditor/10.8/addon/alienvaultusm/deployment.md index 406f23356d..1dc4e72795 100644 --- a/docs/auditor/10.8/addon/alienvaultusm/deployment.md +++ b/docs/auditor/10.8/addon/alienvaultusm/deployment.md @@ -9,7 +9,7 @@ sidebar_position: 20 Auditor Add-on for the SIEM solution runs on any computer in your environment. For example, you can run the add-on on the computer where Auditor is installed or on a remote server. Depending on the execution scenario you choose, you have to define a different set of parameters. See the -[Define Parameters](/docs/auditor/10.7/addon/alienvaultusm/parameters.md) topic for additional information. +[Define Parameters](/docs/auditor/10.8/addon/alienvaultusm/parameters.md) topic for additional information. Netwrix suggests the following execution scenarios: diff --git a/docs/auditor/10.8/addon/alienvaultusm/integrationeventlog.md b/docs/auditor/10.8/addon/alienvaultusm/integrationeventlog.md index a3e492d49e..e430f7aef0 100644 --- a/docs/auditor/10.8/addon/alienvaultusm/integrationeventlog.md +++ b/docs/auditor/10.8/addon/alienvaultusm/integrationeventlog.md @@ -10,7 +10,7 @@ This section describes how the add-on fills in the Netwrix Auditor **Integration with data retrieved from Activity Records. The Activity Record structure is described in the -[Reference for Creating Activity Records](/docs/auditor/10.7/api/activityrecordreference.md)topic. +[Reference for Creating Activity Records](/docs/auditor/10.8/api/activityrecordreference.md)topic. | Event log field name | Filled in with value | Details | | -------------------- | --------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | @@ -18,7 +18,7 @@ The Activity Record structure is described in the | EventID | **`{Calculated by add-on}`** -OR- **0** | Depending on _GenerateEventId_ in-script parameter (calculation result also depends on _IncludeDataSourceToMakeEventId_ parameter — if _GenerateEventId_ = _True_). | | Task Category | **`{DataSource ID}`** -OR- **1** | Depending on _SetDataSourceAsEventCategory_ in-script parameter. | -See the [Define Parameters](/docs/auditor/10.7/addon/alienvaultusm/parameters.md) topic for additional information. +See the [Define Parameters](/docs/auditor/10.8/addon/alienvaultusm/parameters.md) topic for additional information. EventData is filled in with data from the Activity Record fields as follows: @@ -37,4 +37,4 @@ EventData is filled in with data from the Activity Record fields as follows: Details are filled in only if this Activity Record field is not empty. -![eventlogexample_thumb_0_0](/images/auditor/10.7/addon/solarwinds/eventlogexample_thumb_0_0.webp) +![eventlogexample_thumb_0_0](/images/auditor/10.8/addon/solarwinds/eventlogexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/addon/alienvaultusm/overview.md b/docs/auditor/10.8/addon/alienvaultusm/overview.md index 16831b68f3..08f8876dc8 100644 --- a/docs/auditor/10.8/addon/alienvaultusm/overview.md +++ b/docs/auditor/10.8/addon/alienvaultusm/overview.md @@ -31,7 +31,7 @@ On a high level, the add-on works as follows: 3. The add-on creates a special Windows event log named **Netwrix_Auditor_Integration** and stores events there. These events are structured and ready for integration with the SIEM solution. -See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information on the structure of the Activity Record and the capabilities of the Netwrix Auditor Integration API. ## Prerequisites @@ -41,7 +41,7 @@ follows: | On... | Ensure that... | | ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.8/api/prerequisites.md) and [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | | The computer where the script will be executed | - PowerShell **3.0** or later must be installed. - .NET **4.5** or later must be installed. - Execution policy for powershell scripts is set to _"Unrestricted"_. Run Windows PowerShell as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the write permission on the script folder—the add-on creates a special .bin file with the last exported event. - The user running the script must be a member of the Domain Users group. - At least the first script run should be performed under the account with elevated privileges, as it will be necessary to create event log file and perform other required operations. | ## Compatibility Notice diff --git a/docs/auditor/10.8/addon/alienvaultusm/parameters.md b/docs/auditor/10.8/addon/alienvaultusm/parameters.md index d4577ca8c4..c8a8661531 100644 --- a/docs/auditor/10.8/addon/alienvaultusm/parameters.md +++ b/docs/auditor/10.8/addon/alienvaultusm/parameters.md @@ -9,7 +9,7 @@ sidebar_position: 10 Before running or scheduling the add-on, you must define connection details: Auditor Server host, user credentials, etc. Most parameters are optional, the script uses the default values unless parameters are explicitly defined. You can skip or define parameters depending on your execution -scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/alienvaultusm/deployment.md) topic +scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.8/addon/alienvaultusm/deployment.md) topic for additional information. | Parameter | Default value | Description | @@ -31,7 +31,7 @@ dynamically calculated EventIDs will be modified and applied incorrectly. | Parameter | Default value | Description | | -------------------------------- | ------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **EventID generation** | | | -| GenerateEventId | True | Defines whether to generated unique EventIDs. Possible parameter values: - True — generate unique EventIDs using Activity Record fields - False — do not generate a unique ID, set EventID=0 for all cases EventID is generated through CRC32 calculation that involves the following Activity Record field values: - ObjectType - Action - DataSource (optional, see below for details) Only the lowest 16 bits of the calculation result are used. See the [Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) topic for additional information. | +| GenerateEventId | True | Defines whether to generated unique EventIDs. Possible parameter values: - True — generate unique EventIDs using Activity Record fields - False — do not generate a unique ID, set EventID=0 for all cases EventID is generated through CRC32 calculation that involves the following Activity Record field values: - ObjectType - Action - DataSource (optional, see below for details) Only the lowest 16 bits of the calculation result are used. See the [Activity Records](/docs/auditor/10.8/api/postdata/activityrecords.md) topic for additional information. | | IncludeDataSourceToMakeEventId\* | True | Defines whether the DataSource field of Activity Record should be used in the EventID calculation. This parameter is applied only if GenerateEventId is set to _TRUE_. | | SetDataSourceAsEventCategory | True | Defines whether to fill in Event Category event field with a numeric value derived from the DataSource field of Activity Record. Possible parameter values: - True — generate a numeric value for Event Category using Activity Record field - False — do not generate a numeric value, set Event Category=1 for all cases The Event Category field value is generated through CRC32 calculation that involves the DataSource field of Activity Record. Only the lowest 9 bits of the calculation result are used. | | SetDataSourceAsEventSource | False | Defines whether to fill in the Event Source event field with the value from the DataSource field of Activity Record. Possible parameter values: - True — fill in the Event Source with the value from DataSource field of Activity Record, adding the prefix defined by $EventSourcePrefix. Default prefix is _NA_, for example:_NA Windows Server_ - False — set Event Source to _Netwrix_Auditor_Integration_API_ for all cases If the script cannot fill in the Event Source for some DataSource, the default value _Netwrix_Auditor_Integration_API_ will be used. If the event source for particular DataSource does not exist in the Netwrix_Auditor_Integration event log, elevated privileges are required for add-on execution. | @@ -39,5 +39,5 @@ dynamically calculated EventIDs will be modified and applied incorrectly. \* When configuring the **IncludeDataSourceToMakeEventId** parameter, consider that the _Object Type - Action_ pair may be identical for several data sources (e.g., Object='User' and Action='Added'); thus, excluding DataSource from calculation may lead to the same EventID -(duplicates). See the [Run the Add-On with PowerShell](/docs/auditor/10.7/addon/alienvaultusm/powershell.md) topic for additional +(duplicates). See the [Run the Add-On with PowerShell](/docs/auditor/10.8/addon/alienvaultusm/powershell.md) topic for additional information about duplicates. diff --git a/docs/auditor/10.8/addon/amazonwebservices/collecteddata.md b/docs/auditor/10.8/addon/amazonwebservices/collecteddata.md index b692a9f7ab..4917a8c88c 100644 --- a/docs/auditor/10.8/addon/amazonwebservices/collecteddata.md +++ b/docs/auditor/10.8/addon/amazonwebservices/collecteddata.md @@ -12,7 +12,7 @@ Follow the steps to work with collected data. **Step 2 –** Click **Search**. -![activityrecords](/images/auditor/10.7/addon/amazonwebservices/activityrecords.webp) +![activityrecords](/images/auditor/10.8/addon/amazonwebservices/activityrecords.webp) You might want to apply a filter to narrow down your search results to the NetwrixAPI data source only. diff --git a/docs/auditor/10.8/addon/amazonwebservices/deployment.md b/docs/auditor/10.8/addon/amazonwebservices/deployment.md index 93dd51829d..821334bb89 100644 --- a/docs/auditor/10.8/addon/amazonwebservices/deployment.md +++ b/docs/auditor/10.8/addon/amazonwebservices/deployment.md @@ -8,7 +8,7 @@ sidebar_position: 20 The Add-on runs on any computer in your environment. For example, you can run the add-on on the computer where Auditor is installed or on a remote server. Depending on the execution scenario you -choose, you have to define a different set of parameters. See the [Amazon Web Services](/docs/auditor/10.7/addon/amazonwebservices/overview.md) +choose, you have to define a different set of parameters. See the [Amazon Web Services](/docs/auditor/10.8/addon/amazonwebservices/overview.md) topic for additional information. Netwrix suggests the following execution scenarios: diff --git a/docs/auditor/10.8/addon/amazonwebservices/overview.md b/docs/auditor/10.8/addon/amazonwebservices/overview.md index 332f149d44..bb8853d45e 100644 --- a/docs/auditor/10.8/addon/amazonwebservices/overview.md +++ b/docs/auditor/10.8/addon/amazonwebservices/overview.md @@ -42,12 +42,12 @@ On a high level, the add-on works as follows: - Using the Integration API, the add-on sends the activity events to the Auditor Server, which writes them to the **Long-Term Archive** and the **Audit Database**. -See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information. +See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information. ## Compatibility Notice Make sure to check your product version, and then review and update your add-ons and scripts leveraging the Integration API. Download the latest add-on version in the Add-on Store. -See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information about schema +See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information about schema updates. diff --git a/docs/auditor/10.8/addon/amazonwebservices/parameters.md b/docs/auditor/10.8/addon/amazonwebservices/parameters.md index 262ccf54a9..44826c7340 100644 --- a/docs/auditor/10.8/addon/amazonwebservices/parameters.md +++ b/docs/auditor/10.8/addon/amazonwebservices/parameters.md @@ -9,7 +9,7 @@ sidebar_position: 10 Before running or scheduling the add-on, you must define connection details: Auditor Server host, user credentials, etc. Most parameters are optional, the script uses the default values unless parameters are explicitly defined. You can skip or define parameters depending on your execution -scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/amazonwebservices/deployment.md)  +scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.8/addon/amazonwebservices/deployment.md)  topic for additional information. First, provide a path to your add-on followed by script parameters with their values. Each parameter diff --git a/docs/auditor/10.8/addon/arcsight/collecteddata.md b/docs/auditor/10.8/addon/arcsight/collecteddata.md index 739b67d6b1..2a9db1ee7c 100644 --- a/docs/auditor/10.8/addon/arcsight/collecteddata.md +++ b/docs/auditor/10.8/addon/arcsight/collecteddata.md @@ -20,6 +20,6 @@ more than one Netwrix Auditor Server, add all of them in the search field. **NOTE:** You might want to modify time range and the fields shown. -![activityrecords](/images/auditor/10.7/addon/arcsight/activityrecords.webp) +![activityrecords](/images/auditor/10.8/addon/arcsight/activityrecords.webp) **Step 4 –** Review imported Activity Records. diff --git a/docs/auditor/10.8/addon/arcsight/overview.md b/docs/auditor/10.8/addon/arcsight/overview.md index 8f6e567079..23d41380dd 100644 --- a/docs/auditor/10.8/addon/arcsight/overview.md +++ b/docs/auditor/10.8/addon/arcsight/overview.md @@ -28,7 +28,7 @@ On a high level, the add-on works as follows: 3. The add-on uploads audit trails to ArcSight Logger making it immediately ready for review and analysis. ArcSight SmartConnector configured as Syslog Daemon is supported as well. -See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information on the structure of the Activity Record and the capabilities of the Integration API. ## Prerequisites @@ -38,15 +38,15 @@ follows: | on... | Ensure that... | | ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| The Auditor Server side | - The Audit Database settings are configured in the Auditor. See the [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topic for additional information. - The TCP 9699 port (default Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the **Global reviewer** role in Auditor or is a member of the **Netwrix Auditor Client Users** group. Alternatively, you can grant the **Global administrator** role or add the user to the **Netwrix Auditor Administrators** group. In this case, this user will have the most extended permissions in the product. | -| On the ArcSight side | - The UDP Receiver is enabled and is configured to receive CEF as source and use the default port **514**. - To check receiver settings or add a new receiver, start the ArcSight Logger web interface and navigate to **Configuration** > **Receivers**. ![configuration](/images/auditor/10.7/addon/arcsight/configuration.webp) **NOTE:** You can configure TCP Receiver and switch to TCP protocol and port **515**. - The user running the script must have sufficient permissions to supply data to ArcSight. | +| The Auditor Server side | - The Audit Database settings are configured in the Auditor. See the [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topic for additional information. - The TCP 9699 port (default Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the **Global reviewer** role in Auditor or is a member of the **Netwrix Auditor Client Users** group. Alternatively, you can grant the **Global administrator** role or add the user to the **Netwrix Auditor Administrators** group. In this case, this user will have the most extended permissions in the product. | +| On the ArcSight side | - The UDP Receiver is enabled and is configured to receive CEF as source and use the default port **514**. - To check receiver settings or add a new receiver, start the ArcSight Logger web interface and navigate to **Configuration** > **Receivers**. ![configuration](/images/auditor/10.8/addon/arcsight/configuration.webp) **NOTE:** You can configure TCP Receiver and switch to TCP protocol and port **515**. - The user running the script must have sufficient permissions to supply data to ArcSight. | | The computer where the script will be executed | - Execution policy for powershell scripts is set to "_Unrestricted_". Run **Windows PowerShell** as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the **write** permission on the script folder—the add-on creates a special .bin file with the last exported event. | ## Compatibility Notice Make sure to check your product version, and then review and update your add-ons and scripts leveraging the Integration API. Download the latest add-on version in the Add-on Store. See the -[Integration API](/docs/auditor/10.7/api/overview.md)topic for additional information. +[Integration API](/docs/auditor/10.8/api/overview.md)topic for additional information. The add-on was renamed due to HPE acquisition by Micro Focus. The former add-on name was Netwrix Auditor Add-on for HPE ArcSight. This name may still be present in the add-on files and diff --git a/docs/auditor/10.8/addon/arcsight/parameters.md b/docs/auditor/10.8/addon/arcsight/parameters.md index b1f76ffb96..ed3a87e289 100644 --- a/docs/auditor/10.8/addon/arcsight/parameters.md +++ b/docs/auditor/10.8/addon/arcsight/parameters.md @@ -9,7 +9,7 @@ sidebar_position: 10 Before running or scheduling the add-on, you must define connection details: Auditor Server host, user credentials, etc. Most parameters are optional, the script uses the default values unless parameters are explicitly defined. You can skip or define parameters depending on your execution -scenario and security policies. See the[Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/arcsight/deployment.md) topic +scenario and security policies. See the[Choose Appropriate Execution Scenario](/docs/auditor/10.8/addon/arcsight/deployment.md) topic for additional information. First, provide a path to your add-on followed by script parameters with their values. Each parameter diff --git a/docs/auditor/10.8/addon/azurefiles/collecteddata.md b/docs/auditor/10.8/addon/azurefiles/collecteddata.md index 1760daf9a2..d6aa2ee3f8 100644 --- a/docs/auditor/10.8/addon/azurefiles/collecteddata.md +++ b/docs/auditor/10.8/addon/azurefiles/collecteddata.md @@ -26,6 +26,6 @@ source only. See the following topics for additional information: -- [Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) -- [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) -- [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) +- [Alerts](/docs/auditor/10.8/admin/alertsettings/overview.md) +- [View and Search Collected Data](/docs/auditor/10.8/admin/search/overview.md) +- [Subscriptions](/docs/auditor/10.8/admin/subscriptions/overview.md) diff --git a/docs/auditor/10.8/addon/azurefiles/deployment.md b/docs/auditor/10.8/addon/azurefiles/deployment.md index 67238f1089..d3c06bbe7f 100644 --- a/docs/auditor/10.8/addon/azurefiles/deployment.md +++ b/docs/auditor/10.8/addon/azurefiles/deployment.md @@ -10,11 +10,11 @@ Follow the steps to install Azure Files add-on. **Step 1 –** Accept EULA. -![azurefileeula](/images/auditor/10.7/addon/azurefiles/azurefileeula.webp) +![azurefileeula](/images/auditor/10.8/addon/azurefiles/azurefileeula.webp) **Step 2 –** Select the installation folder and click **Next**. -![azurefileinstfolder](/images/auditor/10.7/addon/azurefiles/azurefileinstfolder.webp) +![azurefileinstfolder](/images/auditor/10.8/addon/azurefiles/azurefileinstfolder.webp) **Step 3 –** Click **Install**. The wizard will start and ask the additional parameters. @@ -58,7 +58,7 @@ automatically - open it from the installation folder. **Step 2 –** Select **Proceed**. **Step 3 –** Provide Auditor Server IP address and port number followed by endpoint for posting -Activity Records. See the [API Endpoints](/docs/auditor/10.7/api/endpoints.md) topic for more information. +Activity Records. See the [API Endpoints](/docs/auditor/10.8/api/endpoints.md) topic for more information. This assumes that the add-on runs on the computer hosting Auditor Server and uses default port 9699. @@ -69,7 +69,7 @@ erprise.local:9999). **CAUTION:** Do not modify the endpoint part (_/netwrix/api_). -![generalsettings](/images/auditor/10.7/addon/azurefiles/generalsettings.webp) +![generalsettings](/images/auditor/10.8/addon/azurefiles/generalsettings.webp) **Step 4 –** Specify Active Directory credentials: @@ -77,15 +77,15 @@ erprise.local:9999). service runs under the account currently logged on. - Password – Provide the password for the selected account. -![adcredentials](/images/auditor/10.7/addon/azurefiles/adcredentials.webp) +![adcredentials](/images/auditor/10.8/addon/azurefiles/adcredentials.webp) **Step 5 –** Paste Azure Connection String in the corresponded field and click **Next**. -![azurefileconnectionstring](/images/auditor/10.7/addon/azurefiles/azurefileconnectionstring.webp) +![azurefileconnectionstring](/images/auditor/10.8/addon/azurefiles/azurefileconnectionstring.webp) **Step 6 –** Enter Tenant ID, App ID and App Secret of the Azure App you registered for the add-on. Click **Next**. -![microsoftgraphapi](/images/auditor/10.7/addon/azurefiles/microsoftgraphapi.webp) +![microsoftgraphapi](/images/auditor/10.8/addon/azurefiles/microsoftgraphapi.webp) **Step 7 –** Click **Run** and close the window. The service should start the data collection now. diff --git a/docs/auditor/10.8/addon/azurefiles/overview.md b/docs/auditor/10.8/addon/azurefiles/overview.md index 6ba8252c80..3b6adc3727 100644 --- a/docs/auditor/10.8/addon/azurefiles/overview.md +++ b/docs/auditor/10.8/addon/azurefiles/overview.md @@ -19,8 +19,8 @@ deletions. To get the add-on up and running, please read the following topics: -- [Deployment Procedure](/docs/auditor/10.7/addon/azurefiles/deployment.md) -- [Work with Collected Data](/docs/auditor/10.7/addon/azurefiles/collecteddata.md) +- [Deployment Procedure](/docs/auditor/10.8/addon/azurefiles/deployment.md) +- [Work with Collected Data](/docs/auditor/10.8/addon/azurefiles/collecteddata.md) ## Prerequisites @@ -28,20 +28,20 @@ Before running the add-on, ensure that all the necessary components and policies follows: - The Audit Database settings are configured in Auditor Server. See the - [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and - [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. + [Prerequisites](/docs/auditor/10.8/api/prerequisites.md) and + [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Integration API port) is open for inbound connections. - The user writing data to the Audit Database is granted the Contributor role in Auditor. See the - [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional + [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. - Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. - Azure Files environment is configured for auditing. The connection of Azure file share to Windows should be configured with authentication through Active Directory or Entra ID (as opposed to the - account key). See the [Deployment Procedure](/docs/auditor/10.7/addon/azurefiles/deployment.md)topic for more information. + account key). See the [Deployment Procedure](/docs/auditor/10.8/addon/azurefiles/deployment.md)topic for more information. - Active Directory Domain Services or Microsoft Entra Kerberos is used as an Identity source. See - the [Deployment Procedure](/docs/auditor/10.7/addon/azurefiles/deployment.md) topic for additional information. + the [Deployment Procedure](/docs/auditor/10.8/addon/azurefiles/deployment.md) topic for additional information. ## How It Works diff --git a/docs/auditor/10.8/addon/connectwise/configure.md b/docs/auditor/10.8/addon/connectwise/configure.md index e4107a6604..1d050b079c 100644 --- a/docs/auditor/10.8/addon/connectwise/configure.md +++ b/docs/auditor/10.8/addon/connectwise/configure.md @@ -20,7 +20,7 @@ them, you will need an API Member account. See wizard to configure connection to ConnectWise Manage and ticketing options. At the Connection Setup step, specify the following: -![1_connection](/images/auditor/10.7/addon/connectwise/connectionsetup.webp) +![1_connection](/images/auditor/10.8/addon/connectwise/connectionsetup.webp) | Parameter | Description | | ---------- | --------------------------------------------------------------------------------------------- | @@ -31,7 +31,7 @@ step, specify the following: **Step 3 –** At the Service Ticket Routing step, specify the following: -![serviceticketrouting](/images/auditor/10.7/addon/connectwise/serviceticketrouting.webp) +![serviceticketrouting](/images/auditor/10.8/addon/connectwise/serviceticketrouting.webp) | Parameter | Description | | ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | @@ -43,7 +43,7 @@ step, specify the following: **Step 4 –** Configure how Auditor activity record fields will be mapped with **ConnectWise Manage** ticket fields. -![ticketfieldmapping](/images/auditor/10.7/addon/connectwise/ticketfieldmapping.webp) +![ticketfieldmapping](/images/auditor/10.8/addon/connectwise/ticketfieldmapping.webp) | Parameter | Description | | --------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | @@ -57,15 +57,15 @@ ConnectWise Manage to help you verify the connection and ticketing settings you Its Summary field will contain _[Netwrix Auditor] Test Alert_; its Initial Description field will contain _This ticket was created to test the functionality of Netwrix Auditor Add-on for ConnectWise Manage_. Also, the test ticket will have a sample attachment (_TestAttachment.txt_). -![testalert](/images/auditor/10.7/addon/connectwise/testalert.webp) +![testalert](/images/auditor/10.8/addon/connectwise/testalert.webp) **Step 5 –** Finally, at the **Summary** step, review the location of configuration file with the settings you specified: _C:\Addon\ITSM_CW\ConnectWiseSettings.xml_. -![summary_thumb_0_0](/images/auditor/10.7/addon/connectwise/summary_thumb_0_0.webp) +![summary_thumb_0_0](/images/auditor/10.8/addon/connectwise/summary_thumb_0_0.webp) If needed, you can edit the configuration file manually. See the -[Connection and Ticketing Settings](/docs/auditor/10.7/addon/connectwise/connectionticketingsettings.md) topic for additional +[Connection and Ticketing Settings](/docs/auditor/10.8/addon/connectwise/connectionticketingsettings.md) topic for additional information. Click **Finish** to restart the add-on service so that the changes can take effect. diff --git a/docs/auditor/10.8/addon/connectwise/connectionticketingsettings.md b/docs/auditor/10.8/addon/connectwise/connectionticketingsettings.md index 5f13c77fc2..328db8ff00 100644 --- a/docs/auditor/10.8/addon/connectwise/connectionticketingsettings.md +++ b/docs/auditor/10.8/addon/connectwise/connectionticketingsettings.md @@ -23,7 +23,7 @@ values are provided. Add more ticket parameters or update values if necessary. | `` | `` | Description | | ------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Summary | [Netwrix Auditor] %AlertName% | Instructs the system to fill in the Summary ticket field with the Auditor alert name (e.g., _[Netwrix Auditor] Password Reset)_. | -| InitialDescription | Alert Details: Who: %Who% Action: %Action% Object type: %ObjectType% What: %What% When: %When% Where: %Where% Workstation: %Workstation% Details: %Details% Data source: %DataSource% Monitoring plan: %MonitoringPlanName% Item: %Item% Sent by Netwrix Auditor from %Computer% | Instructs the system to fill in the InitialDescription ticket field with the Auditor activity record data. To read more about activity records, see the [Reference for Creating Activity Records](/docs/auditor/10.7/api/activityrecordreference.md) topic for additional information. You may need to fill in the internal description intended for use by MSP only (this description will not be visible to managed clients), perform the following steps: **Step 1 –** Run the configuration wizard (or modify _ConnectWiseSettings.xml_) to specify the settings you need. **Step 2 –** Then open _ConnectWiseSettings.xml_ for edit. **Step 3 –** Locate the **InitialDescription** parameter and change the Name attribute to _initialInternalAnalysis_. | +| InitialDescription | Alert Details: Who: %Who% Action: %Action% Object type: %ObjectType% What: %What% When: %When% Where: %Where% Workstation: %Workstation% Details: %Details% Data source: %DataSource% Monitoring plan: %MonitoringPlanName% Item: %Item% Sent by Netwrix Auditor from %Computer% | Instructs the system to fill in the InitialDescription ticket field with the Auditor activity record data. To read more about activity records, see the [Reference for Creating Activity Records](/docs/auditor/10.8/api/activityrecordreference.md) topic for additional information. You may need to fill in the internal description intended for use by MSP only (this description will not be visible to managed clients), perform the following steps: **Step 1 –** Run the configuration wizard (or modify _ConnectWiseSettings.xml_) to specify the settings you need. **Step 2 –** Then open _ConnectWiseSettings.xml_ for edit. **Step 3 –** Locate the **InitialDescription** parameter and change the Name attribute to _initialInternalAnalysis_. | | Impact/Urgency | Medium | Instructs the system to set ticket Impact/Urgency to _Medium_. | ## Parameters for Handling Related Tickets diff --git a/docs/auditor/10.8/addon/connectwise/deployment.md b/docs/auditor/10.8/addon/connectwise/deployment.md index 1d7439ddd8..bac39990cf 100644 --- a/docs/auditor/10.8/addon/connectwise/deployment.md +++ b/docs/auditor/10.8/addon/connectwise/deployment.md @@ -11,9 +11,9 @@ Follow the steps to deploy the Add-On for ConnectWise. **Step 1 –** Prepare Auditor for using the add-on: 1. In the Auditor settings, enable Integration API and specify connection port. See the - [Integrations](/docs/auditor/10.7/admin/settings/integrations.md) topic for additional information. + [Integrations](/docs/auditor/10.8/admin/settings/integrations.md) topic for additional information. 2. Make sure your monitoring plans set up in Auditor are using Audit Databases to store collected - data. See the [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topic for additional + data. See the [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topic for additional information. **Step 2 –** Download the add-on package and copy it to the computer where Auditor Server resides. @@ -26,10 +26,10 @@ Manage Integration Service**. **Step 5 –** Run the ConfigureConnection.exe and follow the steps of the wizard to configure connection and ticketing settings for ConectWise Manage. See the -[Configure ConnectWise ](/docs/auditor/10.7/addon/connectwise/configure.md)topic for additional information. +[Configure ConnectWise ](/docs/auditor/10.8/addon/connectwise/configure.md)topic for additional information. **Step 6 –** (optional) To adjust the add-on operation and data flow settings, edit the -ITSMSettings.xml file. See the [Operational Settings](/docs/auditor/10.7/addon/connectwise/operationalsettings.md) topic for additional +ITSMSettings.xml file. See the [Operational Settings](/docs/auditor/10.8/addon/connectwise/operationalsettings.md) topic for additional information. **Step 7 –** In Auditor, go to Alerts, select the required alerts, click Edit, and in the Response diff --git a/docs/auditor/10.8/addon/connectwise/msp.md b/docs/auditor/10.8/addon/connectwise/msp.md index c7d5d8308e..52c1148683 100644 --- a/docs/auditor/10.8/addon/connectwise/msp.md +++ b/docs/auditor/10.8/addon/connectwise/msp.md @@ -11,12 +11,12 @@ Consider a situation when a password is reset for a user, computer, or **inetOrg After deploying and configuring the add-on as described in this guide, the MSP (Managed Service Providers) staff member enabled Auditor integration feature: -![Integration API Settings](/images/auditor/10.7/addon/connectwise/integrations_thumb_0_0.webp) +![Integration API Settings](/images/auditor/10.8/addon/connectwise/integrations_thumb_0_0.webp) Also, she enabled the ‘**Password Reset**’ alert from the Auditor predefined set of alerts and specified the add-on launch as response action. -![addon](/images/auditor/10.7/addon/connectwise/addon.webp) +![addon](/images/auditor/10.8/addon/connectwise/addon.webp) Then a new ticket is automatically created shortly after any account password is reset. @@ -24,4 +24,4 @@ All necessary details about the case are automatically entered into the ConnectW Description_ field), including the name of the workstation, the name of the account in question, and the time when the event occurred: -![serviceboard](/images/auditor/10.7/addon/connectwise/serviceboard.webp) +![serviceboard](/images/auditor/10.8/addon/connectwise/serviceboard.webp) diff --git a/docs/auditor/10.8/addon/connectwise/overview.md b/docs/auditor/10.8/addon/connectwise/overview.md index 4892876cf8..e894c8d27c 100644 --- a/docs/auditor/10.8/addon/connectwise/overview.md +++ b/docs/auditor/10.8/addon/connectwise/overview.md @@ -35,7 +35,7 @@ To implement the solution, Managed Service Provider does the following on the cl On a high level, the workflow is as follows: -![CW_workflow](/images/auditor/10.7/addon/connectwise/diagramworkflow_thumb_0_0.webp) +![CW_workflow](/images/auditor/10.8/addon/connectwise/diagramworkflow_thumb_0_0.webp) 1. Managed Service Provider installs and configures the add-on on AuditorServer. MSP also enables the necessary alerts in Netwrix Auditor, specifying add-on launch as the response action in the @@ -51,7 +51,7 @@ On a high level, the workflow is as follows: Solution architecture and key components are shown in the figure below: -![diagram](/images/auditor/10.7/addon/connectwise/diagram.webp) +![diagram](/images/auditor/10.8/addon/connectwise/diagram.webp) - **Alert Handler (Netwrix.ITSM.AlertResponseAction.exe)** — the executable that is specified in the Auditor alerts as the response action. Alert Handler: @@ -60,7 +60,7 @@ Solution architecture and key components are shown in the figure below: the alert into the service queue. For details on the alert response action, see the -[Configure a Response Action for Alert](/docs/auditor/10.7/admin/alertsettings/responseaction.md) topic for +[Configure a Response Action for Alert](/docs/auditor/10.8/admin/alertsettings/responseaction.md) topic for additional information. - **Netwrix Auditor ConnectWise Manage Integration Service (Netwrix.ITSM.IntegrationServiceCW.exe)** @@ -77,5 +77,5 @@ follows: | Location | Prerequisites | | ------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -| Auditor Server | - The add-on supports Auditor version 9.96. - The add-on will run on the computer where Auditor Server works, so the add-on package should be copied to that machine. - For add-on operation, **NET 4.5** framework is required on Auditor Server. - Starting with add-on build 1.0.12.0, **TLS 1.2** protocol is supported. By default, this capability is disabled. For detailed information on enabling it, see the [Deploy the Add-On](/docs/auditor/10.7/addon/connectwise/deployment.md) topic for additional information. **Auditor settings** - The Audit Database settings should be configured in Auditor Server. - Monitoring plans should be configured to store data to the Audit Database. - The **TCP 9699** port (default Integration API port) should be open for inbound connections. **Required permissions** - Unless specified, the **Netwrix.ITSM.IntegrationServiceCW.exe** Windows service (main add-on co mponent) will run under the **LocalSystem** account. - The account that will be used by Netwrix.ITSM.IntegrationServiceCW.exe component to access Auditor Server must be granted the Global administrator role in Auditor. -OR- be a member of the Netwrix Auditor **Administrators** group. | +| Auditor Server | - The add-on supports Auditor version 9.96. - The add-on will run on the computer where Auditor Server works, so the add-on package should be copied to that machine. - For add-on operation, **NET 4.5** framework is required on Auditor Server. - Starting with add-on build 1.0.12.0, **TLS 1.2** protocol is supported. By default, this capability is disabled. For detailed information on enabling it, see the [Deploy the Add-On](/docs/auditor/10.8/addon/connectwise/deployment.md) topic for additional information. **Auditor settings** - The Audit Database settings should be configured in Auditor Server. - Monitoring plans should be configured to store data to the Audit Database. - The **TCP 9699** port (default Integration API port) should be open for inbound connections. **Required permissions** - Unless specified, the **Netwrix.ITSM.IntegrationServiceCW.exe** Windows service (main add-on co mponent) will run under the **LocalSystem** account. - The account that will be used by Netwrix.ITSM.IntegrationServiceCW.exe component to access Auditor Server must be granted the Global administrator role in Auditor. -OR- be a member of the Netwrix Auditor **Administrators** group. | | ConnectWise Manage | - By default, the add-on connects to the latest version of the ConnectWise Manage application (v4_6_release). **Required permissions** - To connect to ConnectWise Manage via its REST API, you will require an API Member account — it is needed to log in to ConnectWise Manage. See [this article](https://docs.connectwise.com/ConnectWise_Documentation/090/040/010/040) for details. - It is recommended to assign the **API Member** account to a limited security role with the following permissions: - **System** – **Table Setup** – **Inquire Level** = **All** - **Companies** – **Company Maintenance** – **Add(all)**, **Inquire(all)** - **Companies** – **Manage Attachments** – **Add(all)**, **Inquire(all)** - **Service Desk** – **Service Tickets** – **Add(all)**, **Inquire(all)** | diff --git a/docs/auditor/10.8/addon/copilot/deployment.md b/docs/auditor/10.8/addon/copilot/deployment.md index c3d4a8a8cc..bd969ad733 100644 --- a/docs/auditor/10.8/addon/copilot/deployment.md +++ b/docs/auditor/10.8/addon/copilot/deployment.md @@ -40,11 +40,11 @@ Follow the steps to configure the add-on. service runs under the account currently logged on. - Password – Provide the password for the selected account. -![adcredentials](/images/auditor/10.7/addon/copilot/adcredentials.webp) +![adcredentials](/images/auditor/10.8/addon/copilot/adcredentials.webp) **Step 2 –** Enter Tenant ID, App ID and App Secret of the Azure App you registered for the add-on. Click **Next**. -![tenantapp](/images/auditor/10.7/addon/copilot/tenantapp.webp) +![tenantapp](/images/auditor/10.8/addon/copilot/tenantapp.webp) **Step 3 –** Click **Run** and close the window. The service should start the data collection now. diff --git a/docs/auditor/10.8/addon/copilot/overview.md b/docs/auditor/10.8/addon/copilot/overview.md index 664b25d4b8..7674d23bb5 100644 --- a/docs/auditor/10.8/addon/copilot/overview.md +++ b/docs/auditor/10.8/addon/copilot/overview.md @@ -17,8 +17,8 @@ related to Copilot activity. The Netwrix Auditor Add-On for Microsoft Copilot works in collaboration with Netwrix Auditor. To get the add-on up and running, refer the following topics: -- [Deployment Procedure](/docs/auditor/10.7/addon/copilot/deployment.md) -- [Work with Collected Data](/docs/auditor/10.7/addon/copilot/collecteddata.md) +- [Deployment Procedure](/docs/auditor/10.8/addon/copilot/deployment.md) +- [Work with Collected Data](/docs/auditor/10.8/addon/copilot/collecteddata.md) ## Prerequisites @@ -26,17 +26,17 @@ Before running the add-on, ensure that all the necessary components and policies follows: - The Audit Database settings are configured in Auditor Server. See the - [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and - [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. + [Prerequisites](/docs/auditor/10.8/api/prerequisites.md) and + [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Integration API port) is open for inbound connections. - The user writing data to the Audit Database is granted the Contributor role in Auditor. See the - [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional + [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. - Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. - Active Directory Domain Services or Microsoft Entra Kerberos is used as an Identity source. See - the [Deployment Procedure](/docs/auditor/10.7/addon/azurefiles/deployment.md) topic for additional information. + the [Deployment Procedure](/docs/auditor/10.8/addon/azurefiles/deployment.md) topic for additional information. ## How the Copilot Add-on Works diff --git a/docs/auditor/10.8/addon/ctera/collecteddata.md b/docs/auditor/10.8/addon/ctera/collecteddata.md index 5849885f38..5afc38866e 100644 --- a/docs/auditor/10.8/addon/ctera/collecteddata.md +++ b/docs/auditor/10.8/addon/ctera/collecteddata.md @@ -14,7 +14,7 @@ To leverage data collected with the add-on, you can do the following in Auditor: You can apply a filter to narrow down your search results to the Netwrix **API** data source only. -![ctera](/images/auditor/10.7/addon/ctera/ctera.webp) +![ctera](/images/auditor/10.8/addon/ctera/ctera.webp) - Also, you can click **Tools** in the upper-right corner and select the command you need. For example: @@ -27,9 +27,9 @@ You can apply a filter to narrow down your search results to the Netwrix **API** See the following topics for additional information: -- [Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) -- [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) -- [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) +- [Alerts](/docs/auditor/10.8/admin/alertsettings/overview.md) +- [View and Search Collected Data](/docs/auditor/10.8/admin/search/overview.md) +- [Subscriptions](/docs/auditor/10.8/admin/subscriptions/overview.md) To leverage data collected with the add-on, you can do the following in Auditor: @@ -39,7 +39,7 @@ To leverage data collected with the add-on, you can do the following in Auditor: You can apply a filter to narrow down your search results to the Netwrix **API** data source only. -![AR from CyberArk in NA](/images/auditor/10.7/addon/cyberark/cyberark_thumb_0_0.webp) +![AR from CyberArk in NA](/images/auditor/10.8/addon/cyberark/cyberark_thumb_0_0.webp) - Also, you can click **Tools** in the upper-right corner and select the command you need. For example: @@ -52,6 +52,6 @@ You can apply a filter to narrow down your search results to the Netwrix **API** See the following topics for additional information: -- [Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) -- [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) -- [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) +- [Alerts](/docs/auditor/10.8/admin/alertsettings/overview.md) +- [View and Search Collected Data](/docs/auditor/10.8/admin/search/overview.md) +- [Subscriptions](/docs/auditor/10.8/admin/subscriptions/overview.md) diff --git a/docs/auditor/10.8/addon/ctera/overview.md b/docs/auditor/10.8/addon/ctera/overview.md index 2d2a98c2af..5c04e552b0 100644 --- a/docs/auditor/10.8/addon/ctera/overview.md +++ b/docs/auditor/10.8/addon/ctera/overview.md @@ -21,7 +21,7 @@ On a high level, the add-on works as follows: 3. Using the Integration API, the add-on sends the activity records to the Netwrix Auditor Server, which writes them to the Long-Term Archive and the Audit Database. -See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information on the structure of the Activity Record and the capabilities of the Integration API. ## Prerequisites @@ -31,7 +31,7 @@ follows: | On... | Ensure that... | | ----------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -| The Auditor Server side | - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP **9699** port (default Integration API port) is open for inbound connections. - The user writing data to the Audit Database is granted the **Contributor** role in Auditor. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the **Global administrator** role or add the user to the **Netwrix Auditor Administrators** group. In this case, this user will have the most extended permissions in the product. | +| The Auditor Server side | - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.8/api/prerequisites.md) and [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topics for additional information. - The TCP **9699** port (default Integration API port) is open for inbound connections. - The user writing data to the Audit Database is granted the **Contributor** role in Auditor. See the [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the **Global administrator** role or add the user to the **Netwrix Auditor Administrators** group. In this case, this user will have the most extended permissions in the product. | | The computer where the add-on will be installed | - The UDP 514 port is open for inbound connections. - .Net Framework 4.7.2 and above is installed. Review the following Microsoft technical article for additional information on how to install .Net Framework 4.7.2: [Microsoft .NET Framework 4.7.2 offline installer for Windows](https://support.microsoft.com/en-us/topic/microsoft-net-framework-4-7-2-offline-installer-for-windows-05a72734-2127-a15d-50cf-daf56d5faec2). | ### Configure Logging for CTERA Edge Filer @@ -54,7 +54,7 @@ installed on the same server. space usage. - If you are using Netwrix Auditor for Network Devices, the 514 UDP port may be already in use, and you should specify another port when configuring the add-on settings (see the - [Install Add-On](/docs/auditor/10.7/addon/ctera/install.md) and [Define Parameters](/docs/auditor/10.7/addon/ctera/parameters.md) topics for additional + [Install Add-On](/docs/auditor/10.8/addon/ctera/install.md) and [Define Parameters](/docs/auditor/10.8/addon/ctera/parameters.md) topics for additional information). Another option is to install the add-on and Auditor Server on different machines. ## Compatibility Notice diff --git a/docs/auditor/10.8/addon/ctera/parameters.md b/docs/auditor/10.8/addon/ctera/parameters.md index e142f66165..fb2590d98e 100644 --- a/docs/auditor/10.8/addon/ctera/parameters.md +++ b/docs/auditor/10.8/addon/ctera/parameters.md @@ -8,7 +8,7 @@ sidebar_position: 20 The configuration wizard opens in the default web browser: -![configwizard](/images/auditor/10.7/addon/ctera/configwizard.webp) +![configwizard](/images/auditor/10.8/addon/ctera/configwizard.webp) Click **Proceed** and complete the following fields: diff --git a/docs/auditor/10.8/addon/cyberark/collecteddata.md b/docs/auditor/10.8/addon/cyberark/collecteddata.md index a24736a0b1..3643a56caf 100644 --- a/docs/auditor/10.8/addon/cyberark/collecteddata.md +++ b/docs/auditor/10.8/addon/cyberark/collecteddata.md @@ -14,7 +14,7 @@ To leverage data collected with the add-on, you can do the following in Auditor: You can apply a filter to narrow down your search results to the Netwrix **API** data source only. -![AR from CyberArk in NA](/images/auditor/10.7/addon/cyberark/cyberark_thumb_0_0.webp) +![AR from CyberArk in NA](/images/auditor/10.8/addon/cyberark/cyberark_thumb_0_0.webp) - Also, you can click **Tools** in the upper-right corner and select the command you need. For example: @@ -27,6 +27,6 @@ You can apply a filter to narrow down your search results to the Netwrix **API** See the following topics for additional information: -- [Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) -- [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) -- [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) +- [Alerts](/docs/auditor/10.8/admin/alertsettings/overview.md) +- [View and Search Collected Data](/docs/auditor/10.8/admin/search/overview.md) +- [Subscriptions](/docs/auditor/10.8/admin/subscriptions/overview.md) diff --git a/docs/auditor/10.8/addon/cyberark/deployment.md b/docs/auditor/10.8/addon/cyberark/deployment.md index b937710fe2..cade6f0821 100644 --- a/docs/auditor/10.8/addon/cyberark/deployment.md +++ b/docs/auditor/10.8/addon/cyberark/deployment.md @@ -25,7 +25,7 @@ In Auditor client, go to the Integrations section and verify Integration API set 1. Make sure the **Leverage Integration API** is switched to **ON**. 2. Check the TCP communication port number – default is **9699**. -See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) topic for additional information. +See the [Prerequisites](/docs/auditor/10.8/api/prerequisites.md) topic for additional information. By default, activity records are written to _Netwrix_Auditor_API_ database which is not associated with a specific monitoring plan. @@ -33,11 +33,11 @@ with a specific monitoring plan. Optionally, you can create a dedicated monitoring plan in Auditor. In this case, data will be written to a database linked to this plan. Target it at Netwrix API data source and enable for monitoring. Add a dedicated item of _Integration_ type to the plan for data to be filtered by item -name. See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information. +name. See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information. In such scenario, you will need to specify this monitoring plan in the _naplan_ and _naplanitem_ attributes of the _`` ® `
`_ configuration parameters. See the -[Add-On Parameters](/docs/auditor/10.7/addon/cyberark/parameters.md) topic for additional information. +[Add-On Parameters](/docs/auditor/10.8/addon/cyberark/parameters.md) topic for additional information. ## Configure Syslog Message Forwarding in CyberArk @@ -67,9 +67,9 @@ folder and open the **dbparam.ini** file for editing. add-on. Specify **UDP** protocol. - **SyslogMessageCodeFilter** - IDs of events to forward. The add-on will only collect and process events you specify in this parameter. For the full list of supported events, see - [Monitored Events](/docs/auditor/10.7/addon/cyberark/monitoredevents.md). Use comma as a separator. + [Monitored Events](/docs/auditor/10.8/addon/cyberark/monitoredevents.md). Use comma as a separator. -![dbparamfile_thumb_0_0](/images/auditor/10.7/addon/cyberark/dbparamfile_thumb_0_0.webp) +![dbparamfile_thumb_0_0](/images/auditor/10.8/addon/cyberark/dbparamfile_thumb_0_0.webp) **Step 4 –** Save the **dbparam.ini** file. @@ -104,7 +104,7 @@ Follow the steps to install the Add-On: The configuration wizard opens in the default web browser: -![ConfigurationWizard](/images/auditor/10.7/addon/cyberark/configwizard.webp) +![ConfigurationWizard](/images/auditor/10.8/addon/cyberark/configwizard.webp) Click **Proceed** and complete the following fields: diff --git a/docs/auditor/10.8/addon/cyberark/overview.md b/docs/auditor/10.8/addon/cyberark/overview.md index d8d8e60748..76316bea07 100644 --- a/docs/auditor/10.8/addon/cyberark/overview.md +++ b/docs/auditor/10.8/addon/cyberark/overview.md @@ -36,7 +36,7 @@ into actions related to CyberArk tools, in particular: The add-on is implemented as a syslog service that collects activity data from CyberArk system (PAS) and sends it to Auditor using the Integration API. -![HIW_CyberArch](/images/auditor/10.7/addon/cyberark/diagram_thumb_0_0.webp) +![HIW_CyberArch](/images/auditor/10.8/addon/cyberark/diagram_thumb_0_0.webp) The add-on operates as a syslog listener for the CyberArk system. On a high level, the solution works as follows: @@ -52,7 +52,7 @@ works as follows: parameters for syslog message forwarding, including add-on installation server settings, the IDs of events to be monitored, etc. - See the [Monitored Events](/docs/auditor/10.7/addon/cyberark/monitoredevents.md) topic for additional information on the events + See the [Monitored Events](/docs/auditor/10.8/addon/cyberark/monitoredevents.md) topic for additional information on the events supported for monitoring out of the box. 3. On the add-on installation server, the administrator runs the installation file and configures @@ -66,7 +66,7 @@ works as follows: them to the Audit Database and Long-Term Archive. Data is sent periodically, by default every 5 seconds. -See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information on the structure of the activity record and the capabilities of the Integration API. 7. Users open Auditor Client to work with collected data: @@ -83,7 +83,7 @@ follows: | Where | Prerequisite to check | | ------------------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| The Auditor Server side | - The Integration API and Audit Database settings are configured in Auditor Server settings. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The **TCP 9699** port must be open on Windows firewall for inbound connections. - User account under which data will be written to the Audit Database requires the **Contributor** role in Auditor. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) for additional information. Alternatively, you can grant it the **Global administrator** role, or add that account to the **Netwrix Auditor Administrators** group. | +| The Auditor Server side | - The Integration API and Audit Database settings are configured in Auditor Server settings. See the [Prerequisites](/docs/auditor/10.8/api/prerequisites.md) and [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topics for additional information. - The **TCP 9699** port must be open on Windows firewall for inbound connections. - User account under which data will be written to the Audit Database requires the **Contributor** role in Auditor. See the [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) for additional information. Alternatively, you can grant it the **Global administrator** role, or add that account to the **Netwrix Auditor Administrators** group. | | The machine where the Add-On will be installed (Auditor Server is recommended) | - The **UDP 514** port must be open on Windows firewall for inbound connections. If you are using Netwrix Auditor for Network Devices, this port may be already in use, and you should provide another one. Another option is to install the add-on and Auditor Server on different machines. - .Net Framework 4.7.2 and above is installed. Review the following Microsoft technical article for additional information on how to install .Net Framework 4.7.2: [Microsoft .NET Framework 4.7.2 offline installer for Windows](https://support.microsoft.com/en-us/topic/microsoft-net-framework-4-7-2-offline-installer-for-windows-05a72734-2127-a15d-50cf-daf56d5faec2). | | CyperArk PAS | Version 10.10. | @@ -92,7 +92,7 @@ follows: By default, the add-on will run under the _Local System_ account. So, if the add-on and Auditor will be running on different machines, the corresponding computer account will require at least the **Contributor** role in Auditor. See the -[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional +[Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. In case the add-on and Auditor are installed on the same server, no special settings are needed. @@ -105,7 +105,7 @@ In case the add-on and Auditor are installed on the same server, no special sett space usage. - If you are using Netwrix Auditor for Network Devices, the 514 UDP port may be already in use, and you should specify another port when configuring the add-on settings (see - [Deploy the Add-On](/docs/auditor/10.7/addon/cyberark/deployment.md) and [Add-On Parameters](/docs/auditor/10.7/addon/cyberark/parameters.md) topics for additional + [Deploy the Add-On](/docs/auditor/10.8/addon/cyberark/deployment.md) and [Add-On Parameters](/docs/auditor/10.8/addon/cyberark/parameters.md) topics for additional information). Another option is to install the add-on and Auditor Server on different machines. ## Compatibility Notice diff --git a/docs/auditor/10.8/addon/hyperv/collecteddata.md b/docs/auditor/10.8/addon/hyperv/collecteddata.md index 6ae8cc55e1..d73336668b 100644 --- a/docs/auditor/10.8/addon/hyperv/collecteddata.md +++ b/docs/auditor/10.8/addon/hyperv/collecteddata.md @@ -23,4 +23,4 @@ only. - To create an alert on the specific occurrences, click **Create alert**. - To export filtered data to PDF or CSV, click **Export data**. - You can also configure and receive alerts on the events you are interested in. See the - [Administration](/docs/auditor/10.7/admin/overview.md) topic for additional information. + [Administration](/docs/auditor/10.8/admin/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/addon/hyperv/deployment.md b/docs/auditor/10.8/addon/hyperv/deployment.md index 1f5569263d..d11cf4d187 100644 --- a/docs/auditor/10.8/addon/hyperv/deployment.md +++ b/docs/auditor/10.8/addon/hyperv/deployment.md @@ -13,11 +13,11 @@ is installed together with Auditor server): 1. Add-on running on the same machine as SCVMM server (with Management Console): -![deployment_1](/images/auditor/10.7/addon/hyperv/diagram1server.webp) +![deployment_1](/images/auditor/10.8/addon/hyperv/diagram1server.webp) 2. Add-on and SCVMM server (with Management Console) running on different machines: -![deployment_2](/images/auditor/10.7/addon/hyperv/diagram2servers_thumb_0_0.webp) +![deployment_2](/images/auditor/10.8/addon/hyperv/diagram2servers_thumb_0_0.webp) In this scenario, the account used to access SCVMM server must be a member of the _Remote Management Users_ local group on the SCVMM server. @@ -25,11 +25,11 @@ Users_ local group on the SCVMM server. 3. Add-on running on the same machine as SCVMM Management Console; SCVMM server running on the remote machine: -![deployment_3](/images/auditor/10.7/addon/hyperv/diagram3servers_thumb_0_0.webp) +![deployment_3](/images/auditor/10.8/addon/hyperv/diagram3servers_thumb_0_0.webp) In this scenario, make sure to specify SCVMM server address in the **DataCollectionServer** parameter (not the machine where SCVMM console runs) in the **settings.xml** configuration file. See -the [Add-On Parameters](/docs/auditor/10.7/addon/hyperv/parameters.md)topic for additional information. +the [Add-On Parameters](/docs/auditor/10.8/addon/hyperv/parameters.md)topic for additional information. Depending on the deployment scenario you choose, you will need to define a set of the add-on parameters. Several examples are provided below. diff --git a/docs/auditor/10.8/addon/hyperv/install.md b/docs/auditor/10.8/addon/hyperv/install.md index 76b7de313f..0eca8aa257 100644 --- a/docs/auditor/10.8/addon/hyperv/install.md +++ b/docs/auditor/10.8/addon/hyperv/install.md @@ -23,7 +23,7 @@ In Auditor client, go to the Integrations section and verify Integration API set 1. Make sure the **Leverage Integration API** is switched to **ON**. 2. Check the TCP communication port number – default is **9699**. -See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) topic for additional information. +See the [Prerequisites](/docs/auditor/10.8/api/prerequisites.md) topic for additional information. By default, activity records are written to _Netwrix_Auditor_API_ database which is not associated with a specific monitoring plan. @@ -31,11 +31,11 @@ with a specific monitoring plan. Optionally, you can create a dedicated monitoring plan in Auditor. In this case, data will be written to a database linked to this plan. Target it at Netwrix API data source and enable for monitoring. Add a dedicated item of _Integration_ type to the plan for data to be filtered by item -name. See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information. +name. See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information. In such scenario, you will need to specify this monitoring plan in the _NetwrixAuditorPlan_ and _NetwrixAuditorPlanItem_ parameters in the **settings.xml** file. See the -[Add-On Parameters](/docs/auditor/10.7/addon/hyperv/parameters.md) topic for additional information. +[Add-On Parameters](/docs/auditor/10.8/addon/hyperv/parameters.md) topic for additional information. ## Download the Add-On @@ -47,7 +47,7 @@ _NetwrixAuditorPlanItem_ parameters in the **settings.xml** file. See the In the add-on folder, open the **settings.xml** file and configure the add-on parameters for data collection, as listed below. -See the [Add-On Parameters](/docs/auditor/10.7/addon/hyperv/parameters.md)topic for the full list of configuration parameters. +See the [Add-On Parameters](/docs/auditor/10.8/addon/hyperv/parameters.md)topic for the full list of configuration parameters. | Parameter | Default value | Description | | ---------------------- | ------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | @@ -59,7 +59,7 @@ See the [Add-On Parameters](/docs/auditor/10.7/addon/hyperv/parameters.md)topic Save the **settings.xml** file. New configuration settings will be applied automatically at the next data collection. -For the full list of parameters, see the [Add-On Parameters](/docs/auditor/10.7/addon/hyperv/parameters.md) topic for additional +For the full list of parameters, see the [Add-On Parameters](/docs/auditor/10.8/addon/hyperv/parameters.md) topic for additional information. ## Register Windows Scheduled Task diff --git a/docs/auditor/10.8/addon/hyperv/overview.md b/docs/auditor/10.8/addon/hyperv/overview.md index b673fa9b18..83d7c8ff94 100644 --- a/docs/auditor/10.8/addon/hyperv/overview.md +++ b/docs/auditor/10.8/addon/hyperv/overview.md @@ -35,7 +35,7 @@ Major benefits: The add-on is implemented as a stand-alone application that collects activity data from Virtual Machine Manager and sends it to Auditor using the Integration API. -![HIW](/images/auditor/10.7/addon/hyperv/diagram_thumb_0_0.webp) +![HIW](/images/auditor/10.8/addon/hyperv/diagram_thumb_0_0.webp) On a high level, the solution works as follows: @@ -55,7 +55,7 @@ On a high level, the solution works as follows: 5. This script creates a Windows scheduled task that will run periodically (every 15 minutes) to collect audit data from VMM server. - See the [Monitoring Scope](/docs/auditor/10.7/addon/hyperv/monitoredevents.md) for additional information on the default list of + See the [Monitoring Scope](/docs/auditor/10.8/addon/hyperv/monitoredevents.md) for additional information on the default list of the events supported out-of-the box. 6. The add-on component **HVARunner.exe** starts collecting activity data from VMM. Data @@ -64,7 +64,7 @@ On a high level, the solution works as follows: Record contains the Who-What-When-Where-Action information (that is, initiator's account, time, action, and other details). -See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information on the structure of the Activity Record and the capabilities of the Integration API. 8. The add-on uses the Integration API to send the Activity Records to Auditor Server, where this @@ -94,7 +94,7 @@ follows: | On... | Ensure that... | | ------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Auditor Server | - Integration API and Audit Database settings are configured in Auditor Server settings. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The **TCP 9699** port must be open on Windows firewall for inbound connections. - User account under which data will be written to the Audit Database requires the **Contributor** role in Netwrix Auditor. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant it the **Global administrator** role, or add that account to the **Netwrix Auditor Administrators** group. | +| Auditor Server | - Integration API and Audit Database settings are configured in Auditor Server settings. See the [Prerequisites](/docs/auditor/10.8/api/prerequisites.md) and [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topics for additional information. - The **TCP 9699** port must be open on Windows firewall for inbound connections. - User account under which data will be written to the Audit Database requires the **Contributor** role in Netwrix Auditor. See the [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant it the **Global administrator** role, or add that account to the **Netwrix Auditor Administrators** group. | | Add-on installation server, i.e. the machine where the add-on will be installed | - The **TCP 5985** port must be open on Windows firewall for inbound connections. - NET Framework 4.5 or later. | | Microsoft System Center Virtual Machine Manager | SCVMM versions: - 2019 - 2016 | | Virtualization hosts | - Microsoft Hyper-V (hardware and nested-virtualization) - VMware ESXi | @@ -107,7 +107,7 @@ This account should have the following minimal rights and permissions: - **Administrator** role in SCVMM - **Contributor** role in Auditor. See the - [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional + [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. ### Considerations and Limitations diff --git a/docs/auditor/10.8/addon/hyperv/troubleshooting.md b/docs/auditor/10.8/addon/hyperv/troubleshooting.md index eb68417583..767378249f 100644 --- a/docs/auditor/10.8/addon/hyperv/troubleshooting.md +++ b/docs/auditor/10.8/addon/hyperv/troubleshooting.md @@ -52,7 +52,7 @@ Alternatively, you can use **Windows Task Scheduler**. The WinRM client cannot process the request. -See the [Deployment Scenarios](/docs/auditor/10.7/addon/hyperv/deployment.md)topic for additional information. +See the [Deployment Scenarios](/docs/auditor/10.8/addon/hyperv/deployment.md)topic for additional information. If the authentication scheme is different from Kerberos, or if the client computer is not joined to a domain, then HTTPS transport must be used or the destination machine must be added to the diff --git a/docs/auditor/10.8/addon/ibmqradar/collecteddata.md b/docs/auditor/10.8/addon/ibmqradar/collecteddata.md index 6f1f0a7795..3df6b858b1 100644 --- a/docs/auditor/10.8/addon/ibmqradar/collecteddata.md +++ b/docs/auditor/10.8/addon/ibmqradar/collecteddata.md @@ -16,6 +16,6 @@ Services Logs** >Netwrix Auditor Integration log. **Step 3 –** Review events. -![EventLog_Export_Example](/images/auditor/10.7/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) +![EventLog_Export_Example](/images/auditor/10.8/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) Now you can augment Windows event log with data collected by the Auditor. diff --git a/docs/auditor/10.8/addon/ibmqradar/deployment.md b/docs/auditor/10.8/addon/ibmqradar/deployment.md index b001b938c7..10b9b059d7 100644 --- a/docs/auditor/10.8/addon/ibmqradar/deployment.md +++ b/docs/auditor/10.8/addon/ibmqradar/deployment.md @@ -9,7 +9,7 @@ sidebar_position: 20 Auditor Add-on for the SIEM solution runs on any computer in your environment. For example, you can run the add-on on the computer where Auditor is installed or on a remote server. Depending on the execution scenario you choose, you have to define a different set of parameters. See the -[Define Parameters](/docs/auditor/10.7/addon/ibmqradar/parameters.md) topic for additional information. +[Define Parameters](/docs/auditor/10.8/addon/ibmqradar/parameters.md) topic for additional information. Netwrix suggests the following execution scenarios: diff --git a/docs/auditor/10.8/addon/ibmqradar/integrationeventlog.md b/docs/auditor/10.8/addon/ibmqradar/integrationeventlog.md index b975f2ae89..7c6ab754f9 100644 --- a/docs/auditor/10.8/addon/ibmqradar/integrationeventlog.md +++ b/docs/auditor/10.8/addon/ibmqradar/integrationeventlog.md @@ -10,7 +10,7 @@ This section describes how the add-on fills in the Netwrix Auditor **Integration with data retrieved from Activity Records. The Activity Record structure is described in the -[Reference for Creating Activity Records](/docs/auditor/10.7/api/activityrecordreference.md)topic. +[Reference for Creating Activity Records](/docs/auditor/10.8/api/activityrecordreference.md)topic. | Event log field name | Filled in with value | Details | | -------------------- | ----------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | @@ -18,7 +18,7 @@ The Activity Record structure is described in the | EventID | **`{Calculated by add-on}`** -OR- **0** | Depending on _GenerateEventId_ in-script parameter (calculation result also depends on _IncludeDataSourceToMakeEventId_ parameter — if _GenerateEventId_ = _True_). | | Task Category | **`{DataSource ID}`** -OR- **1** | Depending on _SetDataSourceAsEventCategory_ in-script parameter. | -See the [Define Parameters](/docs/auditor/10.7/addon/ibmqradar/parameters.md) topic for additional information. +See the [Define Parameters](/docs/auditor/10.8/addon/ibmqradar/parameters.md) topic for additional information. EventData is filled in with data from the Activity Record fields as follows: @@ -37,4 +37,4 @@ EventData is filled in with data from the Activity Record fields as follows: Details are filled in only if this Activity Record field is not empty. -![eventlogexample_thumb_0_0](/images/auditor/10.7/addon/solarwinds/eventlogexample_thumb_0_0.webp) +![eventlogexample_thumb_0_0](/images/auditor/10.8/addon/solarwinds/eventlogexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/addon/ibmqradar/overview.md b/docs/auditor/10.8/addon/ibmqradar/overview.md index 06be65ae26..13debeb18a 100644 --- a/docs/auditor/10.8/addon/ibmqradar/overview.md +++ b/docs/auditor/10.8/addon/ibmqradar/overview.md @@ -31,7 +31,7 @@ On a high level, the add-on works as follows: 3. The add-on creates a special Windows event log named **Netwrix_Auditor_Integration** and stores events there. These events are structured and ready for integration with the SIEM solution. -See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information on the structure of the Activity Record and the capabilities of the Netwrix Auditor Integration API.\ ## Prerequisites @@ -41,7 +41,7 @@ follows: | On... | Ensure that... | | ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.8/api/prerequisites.md) and [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | | The computer where the script will be executed | - PowerShell **3.0** or later must be installed. - .NET **4.5** or later must be installed. - Execution policy for powershell scripts is set to _"Unrestricted"_. Run Windows PowerShell as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the write permission on the script folder—the add-on creates a special .bin file with the last exported event. - The user running the script must be a member of the Domain Users group. - At least the first script run should be performed under the account with elevated privileges, as it will be necessary to create event log file and perform other required operations. | ## Compatibility Notice diff --git a/docs/auditor/10.8/addon/ibmqradar/parameters.md b/docs/auditor/10.8/addon/ibmqradar/parameters.md index 2615b0bb30..ec0cf1b902 100644 --- a/docs/auditor/10.8/addon/ibmqradar/parameters.md +++ b/docs/auditor/10.8/addon/ibmqradar/parameters.md @@ -9,7 +9,7 @@ sidebar_position: 10 Before running or scheduling the add-on, you must define connection details: Auditor Server host, user credentials, etc. Most parameters are optional, the script uses the default values unless parameters are explicitly defined. You can skip or define parameters depending on your execution -scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/ibmqradar/deployment.md) topic +scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.8/addon/ibmqradar/deployment.md) topic for additional information. | Parameter | Default value | Description | @@ -31,7 +31,7 @@ dynamically calculated EventIDs will be modified and applied incorrectly. | Parameter | Default value | Description | | -------------------------------- | ------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **EventID generation** | | | -| GenerateEventId | True | Defines whether to generated unique EventIDs. Possible parameter values: - True — generate unique EventIDs using Activity Record fields - False — do not generate a unique ID, set EventID=0 for all cases EventID is generated through CRC32 calculation that involves the following Activity Record field values: - ObjectType - Action - DataSource (optional, see below for details) Only the lowest 16 bits of the calculation result are used. See the [Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) topic for additional information. | +| GenerateEventId | True | Defines whether to generated unique EventIDs. Possible parameter values: - True — generate unique EventIDs using Activity Record fields - False — do not generate a unique ID, set EventID=0 for all cases EventID is generated through CRC32 calculation that involves the following Activity Record field values: - ObjectType - Action - DataSource (optional, see below for details) Only the lowest 16 bits of the calculation result are used. See the [Activity Records](/docs/auditor/10.8/api/postdata/activityrecords.md) topic for additional information. | | IncludeDataSourceToMakeEventId\* | True | Defines whether the DataSource field of Activity Record should be used in the EventID calculation. This parameter is applied only if GenerateEventId is set to _TRUE_. | | SetDataSourceAsEventCategory | True | Defines whether to fill in Event Category event field with a numeric value derived from the DataSource field of Activity Record. Possible parameter values: - True — generate a numeric value for Event Category using Activity Record field - False — do not generate a numeric value, set Event Category=1 for all cases The Event Category field value is generated through CRC32 calculation that involves the DataSource field of Activity Record. Only the lowest 9 bits of the calculation result are used. | | SetDataSourceAsEventSource | False | Defines whether to fill in the Event Source event field with the value from the DataSource field of Activity Record. Possible parameter values: - True — fill in the Event Source with the value from DataSource field of Activity Record, adding the prefix defined by $EventSourcePrefix. Default prefix is _NA_, for example:_NA Windows Server_ - False — set Event Source to _Netwrix_Auditor_Integration_API_ for all cases If the script cannot fill in the Event Source for some DataSource, the default value _Netwrix_Auditor_Integration_API_ will be used. If the event source for particular DataSource does not exist in the Netwrix_Auditor_Integration event log, elevated privileges are required for add-on execution. | @@ -39,5 +39,5 @@ dynamically calculated EventIDs will be modified and applied incorrectly. \* When configuring the **IncludeDataSourceToMakeEventId** parameter, consider that the _Object Type - Action_ pair may be identical for several data sources (e.g., Object='User' and Action='Added'); thus, excluding DataSource from calculation may lead to the same EventID -(duplicates). See the [Run the Add-On with PowerShell](/docs/auditor/10.7/addon/ibmqradar/powershell.md) topic for additional +(duplicates). See the [Run the Add-On with PowerShell](/docs/auditor/10.8/addon/ibmqradar/powershell.md) topic for additional information about duplicates. diff --git a/docs/auditor/10.8/addon/ibmqradar/powershell.md b/docs/auditor/10.8/addon/ibmqradar/powershell.md index 2dead271ca..37527d9157 100644 --- a/docs/auditor/10.8/addon/ibmqradar/powershell.md +++ b/docs/auditor/10.8/addon/ibmqradar/powershell.md @@ -38,7 +38,7 @@ take a while. Ensure the script execution completed successfully. The Netwrix Au By default, the Netwrix Auditor **Integration** event log size is set to **1GB**, and retention is set to "_Overwrite events as needed_". See the -[Integration Event Log Fields](/docs/auditor/10.7/addon/ibmqradar/integrationeventlog.md) topic for additional information. +[Integration Event Log Fields](/docs/auditor/10.8/addon/ibmqradar/integrationeventlog.md) topic for additional information. **NOTE:** Event records with more than 30,000 characters length will be trimmed. diff --git a/docs/auditor/10.8/addon/intelsecurity/collecteddata.md b/docs/auditor/10.8/addon/intelsecurity/collecteddata.md index 6f1f0a7795..3df6b858b1 100644 --- a/docs/auditor/10.8/addon/intelsecurity/collecteddata.md +++ b/docs/auditor/10.8/addon/intelsecurity/collecteddata.md @@ -16,6 +16,6 @@ Services Logs** >Netwrix Auditor Integration log. **Step 3 –** Review events. -![EventLog_Export_Example](/images/auditor/10.7/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) +![EventLog_Export_Example](/images/auditor/10.8/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) Now you can augment Windows event log with data collected by the Auditor. diff --git a/docs/auditor/10.8/addon/intelsecurity/deployment.md b/docs/auditor/10.8/addon/intelsecurity/deployment.md index cc96ca0ed3..f7cae2032b 100644 --- a/docs/auditor/10.8/addon/intelsecurity/deployment.md +++ b/docs/auditor/10.8/addon/intelsecurity/deployment.md @@ -9,7 +9,7 @@ sidebar_position: 20 Auditor Add-on for the SIEM solution runs on any computer in your environment. For example, you can run the add-on on the computer where Auditor is installed or on a remote server. Depending on the execution scenario you choose, you have to define a different set of parameters. See the -[Define Parameters](/docs/auditor/10.7/addon/intelsecurity/parameters.md) topic for additional information. +[Define Parameters](/docs/auditor/10.8/addon/intelsecurity/parameters.md) topic for additional information. Netwrix suggests the following execution scenarios: diff --git a/docs/auditor/10.8/addon/intelsecurity/integrationeventlog.md b/docs/auditor/10.8/addon/intelsecurity/integrationeventlog.md index 08f1754eae..a602b50df6 100644 --- a/docs/auditor/10.8/addon/intelsecurity/integrationeventlog.md +++ b/docs/auditor/10.8/addon/intelsecurity/integrationeventlog.md @@ -10,7 +10,7 @@ This section describes how the add-on fills in the Netwrix Auditor **Integration with data retrieved from Activity Records. The Activity Record structure is described in the -[Reference for Creating Activity Records](/docs/auditor/10.7/api/activityrecordreference.md)topic. +[Reference for Creating Activity Records](/docs/auditor/10.8/api/activityrecordreference.md)topic. | Event log field name | Filled in with value | Details | | -------------------- | ----------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | @@ -18,7 +18,7 @@ The Activity Record structure is described in the | EventID | **`{Calculated by add-on}`** -OR- **0** | Depending on _GenerateEventId_ in-script parameter (calculation result also depends on _IncludeDataSourceToMakeEventId_ parameter — if _GenerateEventId_ = _True_). | | Task Category | **`{DataSource ID}`** -OR- **1** | Depending on _SetDataSourceAsEventCategory_ in-script parameter. | -See the [Define Parameters](/docs/auditor/10.7/addon/intelsecurity/parameters.md) topic for additional information. +See the [Define Parameters](/docs/auditor/10.8/addon/intelsecurity/parameters.md) topic for additional information. EventData is filled in with data from the Activity Record fields as follows: @@ -37,4 +37,4 @@ EventData is filled in with data from the Activity Record fields as follows: Details are filled in only if this Activity Record field is not empty. -![eventlogexample_thumb_0_0](/images/auditor/10.7/addon/solarwinds/eventlogexample_thumb_0_0.webp) +![eventlogexample_thumb_0_0](/images/auditor/10.8/addon/solarwinds/eventlogexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/addon/intelsecurity/overview.md b/docs/auditor/10.8/addon/intelsecurity/overview.md index 48adce1313..43cfa02874 100644 --- a/docs/auditor/10.8/addon/intelsecurity/overview.md +++ b/docs/auditor/10.8/addon/intelsecurity/overview.md @@ -31,7 +31,7 @@ On a high level, the add-on works as follows: 3. The add-on creates a special Windows event log named **Netwrix_Auditor_Integration** and stores events there. These events are structured and ready for integration with the SIEM solution. -See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information on the structure of the Activity Record and the capabilities of the Netwrix Auditor Integration API. ## Prerequisites @@ -41,7 +41,7 @@ follows: | On... | Ensure that... | | ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.8/api/prerequisites.md) and [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | | The computer where the script will be executed | - PowerShell **3.0** or later must be installed. - .NET **4.5** or later must be installed. - Execution policy for powershell scripts is set to _"Unrestricted"_. Run Windows PowerShell as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the write permission on the script folder—the add-on creates a special .bin file with the last exported event. - The user running the script must be a member of the Domain Users group. - At least the first script run should be performed under the account with elevated privileges, as it will be necessary to create event log file and perform other required operations. | ## Compatibility Notice diff --git a/docs/auditor/10.8/addon/intelsecurity/parameters.md b/docs/auditor/10.8/addon/intelsecurity/parameters.md index 3d19f1cbec..3822b8cc1e 100644 --- a/docs/auditor/10.8/addon/intelsecurity/parameters.md +++ b/docs/auditor/10.8/addon/intelsecurity/parameters.md @@ -9,7 +9,7 @@ sidebar_position: 10 Before running or scheduling the add-on, you must define connection details: Auditor Server host, user credentials, etc. Most parameters are optional, the script uses the default values unless parameters are explicitly defined. You can skip or define parameters depending on your execution -scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/intelsecurity/deployment.md) topic +scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.8/addon/intelsecurity/deployment.md) topic for additional information. | Parameter | Default value | Description | @@ -31,7 +31,7 @@ dynamically calculated EventIDs will be modified and applied incorrectly. | Parameter | Default value | Description | | -------------------------------- | ------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **EventID generation** | | | -| GenerateEventId | True | Defines whether to generated unique EventIDs. Possible parameter values: - True — generate unique EventIDs using Activity Record fields - False — do not generate a unique ID, set EventID=0 for all cases EventID is generated through CRC32 calculation that involves the following Activity Record field values: - ObjectType - Action - DataSource (optional, see below for details) Only the lowest 16 bits of the calculation result are used. See the [Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) topic for additional information. | +| GenerateEventId | True | Defines whether to generated unique EventIDs. Possible parameter values: - True — generate unique EventIDs using Activity Record fields - False — do not generate a unique ID, set EventID=0 for all cases EventID is generated through CRC32 calculation that involves the following Activity Record field values: - ObjectType - Action - DataSource (optional, see below for details) Only the lowest 16 bits of the calculation result are used. See the [Activity Records](/docs/auditor/10.8/api/postdata/activityrecords.md) topic for additional information. | | IncludeDataSourceToMakeEventId\* | True | Defines whether the DataSource field of Activity Record should be used in the EventID calculation. This parameter is applied only if GenerateEventId is set to _TRUE_. | | SetDataSourceAsEventCategory | True | Defines whether to fill in Event Category event field with a numeric value derived from the DataSource field of Activity Record. Possible parameter values: - True — generate a numeric value for Event Category using Activity Record field - False — do not generate a numeric value, set Event Category=1 for all cases The Event Category field value is generated through CRC32 calculation that involves the DataSource field of Activity Record. Only the lowest 9 bits of the calculation result are used. | | SetDataSourceAsEventSource | False | Defines whether to fill in the Event Source event field with the value from the DataSource field of Activity Record. Possible parameter values: - True — fill in the Event Source with the value from DataSource field of Activity Record, adding the prefix defined by $EventSourcePrefix. Default prefix is _NA_, for example:_NA Windows Server_ - False — set Event Source to _Netwrix_Auditor_Integration_API_ for all cases If the script cannot fill in the Event Source for some DataSource, the default value _Netwrix_Auditor_Integration_API_ will be used. If the event source for particular DataSource does not exist in the Netwrix_Auditor_Integration event log, elevated privileges are required for add-on execution. | @@ -39,5 +39,5 @@ dynamically calculated EventIDs will be modified and applied incorrectly. \* When configuring the **IncludeDataSourceToMakeEventId** parameter, consider that the _Object Type - Action_ pair may be identical for several data sources (e.g., Object='User' and Action='Added'); thus, excluding DataSource from calculation may lead to the same EventID -(duplicates). See the [Run the Add-On with PowerShell](/docs/auditor/10.7/addon/ibmqradar/powershell.md) topic for +(duplicates). See the [Run the Add-On with PowerShell](/docs/auditor/10.8/addon/ibmqradar/powershell.md) topic for additional information about duplicates. diff --git a/docs/auditor/10.8/addon/intelsecurity/powershell.md b/docs/auditor/10.8/addon/intelsecurity/powershell.md index 1add42cf80..b47e6f0247 100644 --- a/docs/auditor/10.8/addon/intelsecurity/powershell.md +++ b/docs/auditor/10.8/addon/intelsecurity/powershell.md @@ -37,7 +37,7 @@ take a while. Ensure the script execution completed successfully. The Netwrix Au **Integration** event log will be created and filled with events. By default, the Netwrix Auditor **Integration** event log size is set to 1GB, and retention is set -to "_Overwrite events as needed_". See the [Integration Event Log Fields](/docs/auditor/10.7/addon/intelsecurity/integrationeventlog.md) +to "_Overwrite events as needed_". See the [Integration Event Log Fields](/docs/auditor/10.8/addon/intelsecurity/integrationeventlog.md) topic for additional information. **NOTE:** Event records with more than 30,000 characters length will be trimmed. diff --git a/docs/auditor/10.8/addon/linux/overview.md b/docs/auditor/10.8/addon/linux/overview.md index 0c3fd15f9b..775fca57d6 100644 --- a/docs/auditor/10.8/addon/linux/overview.md +++ b/docs/auditor/10.8/addon/linux/overview.md @@ -28,7 +28,7 @@ Records). Each Activity Record contains the user account, action, time, and othe **Step 4 –** Using the Integration API, the add-on sends the activity records to the Netwrix Auditor Server, which writes them to the Long-Term Archive and the Audit Database. -See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information on the structure of the Activity Record and the capabilities of the NIntegration API. ## Prerequisites diff --git a/docs/auditor/10.8/addon/linux/parameters.md b/docs/auditor/10.8/addon/linux/parameters.md index 370912a9ca..6bf4019027 100644 --- a/docs/auditor/10.8/addon/linux/parameters.md +++ b/docs/auditor/10.8/addon/linux/parameters.md @@ -8,7 +8,7 @@ sidebar_position: 20 The configuration wizard opens in the default web browser: -![GenericLinuxConfigWizard](/images/auditor/10.7/addon/linux/configwizard.webp) +![GenericLinuxConfigWizard](/images/auditor/10.8/addon/linux/configwizard.webp) Click **Proceed** and complete the following fields: diff --git a/docs/auditor/10.8/addon/logrhythm/collecteddata.md b/docs/auditor/10.8/addon/logrhythm/collecteddata.md index 4eb4fba982..bdc6795bb4 100644 --- a/docs/auditor/10.8/addon/logrhythm/collecteddata.md +++ b/docs/auditor/10.8/addon/logrhythm/collecteddata.md @@ -16,6 +16,6 @@ Services Logs** >Netwrix Auditor Integration log. **Step 3 –** Review events. -![EventLog_Export_Example](/images/auditor/10.7/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) +![EventLog_Export_Example](/images/auditor/10.8/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) Now you can augment Windows event log with data collected by the Auditor. diff --git a/docs/auditor/10.8/addon/logrhythm/deployment.md b/docs/auditor/10.8/addon/logrhythm/deployment.md index c9683283bf..5fdc104b2a 100644 --- a/docs/auditor/10.8/addon/logrhythm/deployment.md +++ b/docs/auditor/10.8/addon/logrhythm/deployment.md @@ -9,7 +9,7 @@ sidebar_position: 20 Auditor Add-on for the SIEM solution runs on any computer in your environment. For example, you can run the add-on on the computer where Auditor is installed or on a remote server. Depending on the execution scenario you choose, you have to define a different set of parameters. See the -[Define Parameters](/docs/auditor/10.7/addon/logrhythm/parameters.md) topic for additional information. +[Define Parameters](/docs/auditor/10.8/addon/logrhythm/parameters.md) topic for additional information. Netwrix suggests the following execution scenarios: diff --git a/docs/auditor/10.8/addon/logrhythm/integrationeventlog.md b/docs/auditor/10.8/addon/logrhythm/integrationeventlog.md index 600a053373..aa721699b3 100644 --- a/docs/auditor/10.8/addon/logrhythm/integrationeventlog.md +++ b/docs/auditor/10.8/addon/logrhythm/integrationeventlog.md @@ -10,7 +10,7 @@ This section describes how the add-on fills in the Netwrix Auditor **Integration with data retrieved from Activity Records. The Activity Record structure is described in the -[Reference for Creating Activity Records](/docs/auditor/10.7/api/activityrecordreference.md)topic. +[Reference for Creating Activity Records](/docs/auditor/10.8/api/activityrecordreference.md)topic. | Event log field name | Filled in with value | Details | | -------------------- | ----------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | @@ -18,7 +18,7 @@ The Activity Record structure is described in the | EventID | **`{Calculated by add-on}`** -OR- **0** | Depending on _GenerateEventId_ in-script parameter (calculation result also depends on _IncludeDataSourceToMakeEventId_ parameter — if _GenerateEventId_ = _True_). | | Task Category | **`{DataSource ID}`** -OR- **1** | Depending on _SetDataSourceAsEventCategory_ in-script parameter. | -See the [Define Parameters](/docs/auditor/10.7/addon/logrhythm/parameters.md) topic for additional information. +See the [Define Parameters](/docs/auditor/10.8/addon/logrhythm/parameters.md) topic for additional information. EventData is filled in with data from the Activity Record fields as follows: @@ -37,4 +37,4 @@ EventData is filled in with data from the Activity Record fields as follows: Details are filled in only if this Activity Record field is not empty. -![eventlogexample_thumb_0_0](/images/auditor/10.7/addon/solarwinds/eventlogexample_thumb_0_0.webp) +![eventlogexample_thumb_0_0](/images/auditor/10.8/addon/solarwinds/eventlogexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/addon/logrhythm/overview.md b/docs/auditor/10.8/addon/logrhythm/overview.md index d843024659..de47365a9e 100644 --- a/docs/auditor/10.8/addon/logrhythm/overview.md +++ b/docs/auditor/10.8/addon/logrhythm/overview.md @@ -31,7 +31,7 @@ On a high level, the add-on works as follows: 3. The add-on creates a special Windows event log named **Netwrix_Auditor_Integration** and stores events there. These events are structured and ready for integration with the SIEM solution. -See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information on the structure of the Activity Record and the capabilities of the Netwrix Auditor Integration API. ## Prerequisites @@ -41,7 +41,7 @@ follows: | On... | Ensure that... | | ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.8/api/prerequisites.md) and [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | | The computer where the script will be executed | - PowerShell **3.0** or later must be installed. - .NET **4.5** or later must be installed. - Execution policy for powershell scripts is set to _"Unrestricted"_. Run Windows PowerShell as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the write permission on the script folder—the add-on creates a special .bin file with the last exported event. - The user running the script must be a member of the Domain Users group. - At least the first script run should be performed under the account with elevated privileges, as it will be necessary to create event log file and perform other required operations. | ## Compatibility Notice diff --git a/docs/auditor/10.8/addon/logrhythm/parameters.md b/docs/auditor/10.8/addon/logrhythm/parameters.md index 9ec8025eb4..751c5b06cf 100644 --- a/docs/auditor/10.8/addon/logrhythm/parameters.md +++ b/docs/auditor/10.8/addon/logrhythm/parameters.md @@ -9,7 +9,7 @@ sidebar_position: 10 Before running or scheduling the add-on, you must define connection details: Auditor Server host, user credentials, etc. Most parameters are optional, the script uses the default values unless parameters are explicitly defined. You can skip or define parameters depending on your execution -scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/logrhythm/deployment.md) topic +scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.8/addon/logrhythm/deployment.md) topic for additional information. | Parameter | Default value | Description | @@ -31,7 +31,7 @@ dynamically calculated EventIDs will be modified and applied incorrectly. | Parameter | Default value | Description | | -------------------------------- | ------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **EventID generation** | | | -| GenerateEventId | True | Defines whether to generated unique EventIDs. Possible parameter values: - True — generate unique EventIDs using Activity Record fields - False — do not generate a unique ID, set EventID=0 for all cases EventID is generated through CRC32 calculation that involves the following Activity Record field values: - ObjectType - Action - DataSource (optional, see below for details) Only the lowest 16 bits of the calculation result are used. See the [Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) topic for additional information. | +| GenerateEventId | True | Defines whether to generated unique EventIDs. Possible parameter values: - True — generate unique EventIDs using Activity Record fields - False — do not generate a unique ID, set EventID=0 for all cases EventID is generated through CRC32 calculation that involves the following Activity Record field values: - ObjectType - Action - DataSource (optional, see below for details) Only the lowest 16 bits of the calculation result are used. See the [Activity Records](/docs/auditor/10.8/api/postdata/activityrecords.md) topic for additional information. | | IncludeDataSourceToMakeEventId\* | True | Defines whether the DataSource field of Activity Record should be used in the EventID calculation. This parameter is applied only if GenerateEventId is set to _TRUE_. | | SetDataSourceAsEventCategory | True | Defines whether to fill in Event Category event field with a numeric value derived from the DataSource field of Activity Record. Possible parameter values: - True — generate a numeric value for Event Category using Activity Record field - False — do not generate a numeric value, set Event Category=1 for all cases The Event Category field value is generated through CRC32 calculation that involves the DataSource field of Activity Record. Only the lowest 9 bits of the calculation result are used. | | SetDataSourceAsEventSource | False | Defines whether to fill in the Event Source event field with the value from the DataSource field of Activity Record. Possible parameter values: - True — fill in the Event Source with the value from DataSource field of Activity Record, adding the prefix defined by $EventSourcePrefix. Default prefix is _NA_, for example:_NA Windows Server_ - False — set Event Source to _Netwrix_Auditor_Integration_API_ for all cases If the script cannot fill in the Event Source for some DataSource, the default value _Netwrix_Auditor_Integration_API_ will be used. If the event source for particular DataSource does not exist in the Netwrix_Auditor_Integration event log, elevated privileges are required for add-on execution. | @@ -39,5 +39,5 @@ dynamically calculated EventIDs will be modified and applied incorrectly. \* When configuring the **IncludeDataSourceToMakeEventId** parameter, consider that the _Object Type - Action_ pair may be identical for several data sources (e.g., Object='User' and Action='Added'); thus, excluding DataSource from calculation may lead to the same EventID -(duplicates). See the [Run the Add-On with PowerShell](/docs/auditor/10.7/addon/ibmqradar/powershell.md) topic for +(duplicates). See the [Run the Add-On with PowerShell](/docs/auditor/10.8/addon/ibmqradar/powershell.md) topic for additional information about duplicates.\* diff --git a/docs/auditor/10.8/addon/logrhythm/powershell.md b/docs/auditor/10.8/addon/logrhythm/powershell.md index 69f77943d8..3f5b5be75f 100644 --- a/docs/auditor/10.8/addon/logrhythm/powershell.md +++ b/docs/auditor/10.8/addon/logrhythm/powershell.md @@ -37,7 +37,7 @@ take a while. Ensure the script execution completed successfully. The Netwrix Au event log will be created and filled with events. By default, the Auditor Integration event log size is set to 1GB, and retention is set to -"_Overwrite events as needed_". See the [Integration Event Log Fields](/docs/auditor/10.7/addon/logrhythm/integrationeventlog.md) topic +"_Overwrite events as needed_". See the [Integration Event Log Fields](/docs/auditor/10.8/addon/logrhythm/integrationeventlog.md) topic for additional information. **NOTE:** Event records with more than 30,000 characters length will be trimmed. diff --git a/docs/auditor/10.8/addon/nasuni/collecteddata.md b/docs/auditor/10.8/addon/nasuni/collecteddata.md index a24736a0b1..3643a56caf 100644 --- a/docs/auditor/10.8/addon/nasuni/collecteddata.md +++ b/docs/auditor/10.8/addon/nasuni/collecteddata.md @@ -14,7 +14,7 @@ To leverage data collected with the add-on, you can do the following in Auditor: You can apply a filter to narrow down your search results to the Netwrix **API** data source only. -![AR from CyberArk in NA](/images/auditor/10.7/addon/cyberark/cyberark_thumb_0_0.webp) +![AR from CyberArk in NA](/images/auditor/10.8/addon/cyberark/cyberark_thumb_0_0.webp) - Also, you can click **Tools** in the upper-right corner and select the command you need. For example: @@ -27,6 +27,6 @@ You can apply a filter to narrow down your search results to the Netwrix **API** See the following topics for additional information: -- [Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) -- [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) -- [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) +- [Alerts](/docs/auditor/10.8/admin/alertsettings/overview.md) +- [View and Search Collected Data](/docs/auditor/10.8/admin/search/overview.md) +- [Subscriptions](/docs/auditor/10.8/admin/subscriptions/overview.md) diff --git a/docs/auditor/10.8/addon/nasuni/overview.md b/docs/auditor/10.8/addon/nasuni/overview.md index af04c12974..dbcf643a16 100644 --- a/docs/auditor/10.8/addon/nasuni/overview.md +++ b/docs/auditor/10.8/addon/nasuni/overview.md @@ -21,7 +21,7 @@ On a high level, the add-on works as follows: 3. Using the Integration API, the add-on sends the activity records to the Netwrix Auditor Server, which writes them to the Long-Term Archive and the Audit Database. -See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information on the structure of the Activity Record and the capabilities of the NIntegration API. ## Prerequisites @@ -31,7 +31,7 @@ follows: | On... | Ensure that... | | ----------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -| The Auditor Server side | - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP **9699** port (default Integration API port) is open for inbound connections. - The user writing data to the Audit Database is granted the **Contributor** role in Auditor. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the **Global administrator** role or add the user to the **Netwrix Auditor Administrators** group. In this case, this user will have the most extended permissions in the product. | +| The Auditor Server side | - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.8/api/prerequisites.md) and [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topics for additional information. - The TCP **9699** port (default Integration API port) is open for inbound connections. - The user writing data to the Audit Database is granted the **Contributor** role in Auditor. See the [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the **Global administrator** role or add the user to the **Netwrix Auditor Administrators** group. In this case, this user will have the most extended permissions in the product. | | The computer where the add-on will be installed | - The UDP 514 port is open for inbound connections. - .Net Framework 4.7.2 and above is installed. Review the following Microsoft technical article for additional information on how to install .Net Framework 4.7.2: [Microsoft .NET Framework 4.7.2 offline installer for Windows](https://support.microsoft.com/en-us/topic/microsoft-net-framework-4-7-2-offline-installer-for-windows-05a72734-2127-a15d-50cf-daf56d5faec2). | ### Configure Logging for @@ -72,7 +72,7 @@ admin privileges. space usage. - If you are using Netwrix Auditor for Network Devices, the 514 UDP port may be already in use, and you should specify another port when configuring the add-on settings (see the - [Install Add-On](/docs/auditor/10.7/addon/nasuni/install.md) and [Define Parameters](/docs/auditor/10.7/addon/nasuni/parameters.md) topics for additional + [Install Add-On](/docs/auditor/10.8/addon/nasuni/install.md) and [Define Parameters](/docs/auditor/10.8/addon/nasuni/parameters.md) topics for additional information). Another option is to install the add-on and Auditor Server on different machines. ## Compatibility Notice diff --git a/docs/auditor/10.8/addon/nasuni/parameters.md b/docs/auditor/10.8/addon/nasuni/parameters.md index b7e1600c84..f886a5e26a 100644 --- a/docs/auditor/10.8/addon/nasuni/parameters.md +++ b/docs/auditor/10.8/addon/nasuni/parameters.md @@ -8,7 +8,7 @@ sidebar_position: 20 The configuration wizard opens in the default web browser: -![configwizard](/images/auditor/10.7/addon/nasuni/configwizard.webp) +![configwizard](/images/auditor/10.8/addon/nasuni/configwizard.webp) Click **Proceed** and complete the following fields: diff --git a/docs/auditor/10.8/addon/nutanixahv/collecteddata.md b/docs/auditor/10.8/addon/nutanixahv/collecteddata.md index 1496c6a8c7..27a03519d7 100644 --- a/docs/auditor/10.8/addon/nutanixahv/collecteddata.md +++ b/docs/auditor/10.8/addon/nutanixahv/collecteddata.md @@ -15,7 +15,7 @@ To leverage data collected with the add-on, you can do the following in Auditor: You might want to apply a filter to narrow down your search results to the Netwrix**API** data source only. -![screen_results](/images/auditor/10.7/addon/nutanixahv/nutanixahv_thumb_0_0.webp) +![screen_results](/images/auditor/10.8/addon/nutanixahv/nutanixahv_thumb_0_0.webp) - Also, you can click **Tools** in the upper-right corner and select the command you need. For example: @@ -28,6 +28,6 @@ source only. See the following topics for additional information: -- [Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) -- [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) -- [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) +- [Alerts](/docs/auditor/10.8/admin/alertsettings/overview.md) +- [View and Search Collected Data](/docs/auditor/10.8/admin/search/overview.md) +- [Subscriptions](/docs/auditor/10.8/admin/subscriptions/overview.md) diff --git a/docs/auditor/10.8/addon/nutanixahv/deployment.md b/docs/auditor/10.8/addon/nutanixahv/deployment.md index 1beea44e1c..35cd85480c 100644 --- a/docs/auditor/10.8/addon/nutanixahv/deployment.md +++ b/docs/auditor/10.8/addon/nutanixahv/deployment.md @@ -29,7 +29,7 @@ https://172.28.6.19:9699/netwrix/api/v1/activity_records Integrations** and click **Go to add-on store** button. The following menu will appear: -![addonstore](/images/auditor/10.7/addon/addonstore.webp) +![addonstore](/images/auditor/10.8/addon/addonstore.webp) Netwrix Auditor Integration API uses HTTPS with an automatically generated certificate for running requests to its endpoints. By default, add-ons are configured to accept all certificates that is appropriate for evaluation purposes and allows running the script without adjusting. -Refer to [Security](/docs/auditor/10.7/api/security.md) for detailed instructions on how to assign a new certificate +Refer to [Security](/docs/auditor/10.8/api/security.md) for detailed instructions on how to assign a new certificate and enable trust on remote computers. ## Use Add-Ons @@ -75,7 +75,7 @@ is explicitly defined. If necessary, modify the parameters as required. **Step 5 –** Review the add-on operation results. For example, if you are using the add-on that imports data to Netwrix Auditor, you can search Activity Records in the Netwrix Auditor client. -![api_thumb_0_0](/images/auditor/10.7/addon/api_thumb_0_0.webp) +![api_thumb_0_0](/images/auditor/10.8/addon/api_thumb_0_0.webp) **Step 6 –** (optional) For PowerShell based add-ons, you can schedule a daily task to ensure your audit data is always up-to-date. diff --git a/docs/auditor/10.8/addon/privilegeduserlinux/overview.md b/docs/auditor/10.8/addon/privilegeduserlinux/overview.md index 4aa57a8770..db66bfffc3 100644 --- a/docs/auditor/10.8/addon/privilegeduserlinux/overview.md +++ b/docs/auditor/10.8/addon/privilegeduserlinux/overview.md @@ -33,9 +33,9 @@ follows: | On... | Ensure that... | | ------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| The Auditor Server side | - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP **9699** port (default Integration API port) is open for inbound connections. - The user writing data to the Audit Database is granted the **Contributor** role in Auditor. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the **Global administrator** role or add the user to the **Netwrix Auditor Administrators** group. In this case, this user will have the most extended permissions in the product. | +| The Auditor Server side | - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.8/api/prerequisites.md) and [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topics for additional information. - The TCP **9699** port (default Integration API port) is open for inbound connections. - The user writing data to the Audit Database is granted the **Contributor** role in Auditor. See the [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the **Global administrator** role or add the user to the **Netwrix Auditor Administrators** group. In this case, this user will have the most extended permissions in the product. | | The computer where the service will be installed | - The UDP 514 port is open for inbound connections. - .Net Framework 4.7.2 and above is installed. Review the following Microsoft technical article for additional information on how to install .Net Framework 4.7.2: [Microsoft .NET Framework 4.7.2 offline installer for Windows](https://support.microsoft.com/en-us/topic/microsoft-net-framework-4-7-2-offline-installer-for-windows-05a72734-2127-a15d-50cf-daf56d5faec2). | | The target syslog-based platform | The **Syslog daemon** is configured to redirect events. The procedure below explains how to configure redirection: **NOTE:** Red Hat Enterprise Linux 7 and 6, SUSE Linux Enterprise Server 12, openSUSE 42, and Ubuntu 16 are supported out of the box. For other distributions, deployment of rsyslog package may be required. - On Red Hat Enterprise Linux 7: 1. Open the **/etc/rsyslog.conf** file. 2. Add the following line: `auth.*;authpriv.* @name:514;RSYSLOG_SyslogProtocol23Format` where `name `is a FQDN, NetBIOS name or IP address of the computer where Netwrix Auditor Server is installed. For example: `auth.*;authpriv.* @172.28.18.25:514;RSYSLOG_ SyslogProtocol23Format` 3. Launch the **RHEL console** and execute the following command: `service rsyslog restart`. - On Ubuntu 16: 1. Navigate to the **/etc/rsyslog.d/50-default.conf** file. 2. Add the following line: `auth.*;authpriv.* @name:514;RSYSLOG_SyslogProtocol23Format` where `name `is a FQDN, NetBIOS name or IP address of the computer where Netwrix Auditor Server is installed. For example: `auth.*;authpriv.* @172.28.18.25:514;RSYSLOG_ SyslogProtocol23Format` 3. Launch the **UBUNTU console** and execute the following command: `service rsyslog restart`. | -See the the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the +See the the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information on the structure of the Activity Record and the capabilities of the Integration API diff --git a/docs/auditor/10.8/addon/privilegeduserlinux/parameters.md b/docs/auditor/10.8/addon/privilegeduserlinux/parameters.md index b1ac95042d..4ed0d69ec7 100644 --- a/docs/auditor/10.8/addon/privilegeduserlinux/parameters.md +++ b/docs/auditor/10.8/addon/privilegeduserlinux/parameters.md @@ -8,7 +8,7 @@ sidebar_position: 20 The configuration wizard opens in the default web browser: -![PrivilegedUsersConfigWizard](/images/auditor/10.7/addon/privilegeduserlinux/configwizard.webp) +![PrivilegedUsersConfigWizard](/images/auditor/10.8/addon/privilegeduserlinux/configwizard.webp) Click **Proceed** and complete the following fields: diff --git a/docs/auditor/10.8/addon/qumulo/collecteddata.md b/docs/auditor/10.8/addon/qumulo/collecteddata.md index 009f4bda0f..fa7f0fd26c 100644 --- a/docs/auditor/10.8/addon/qumulo/collecteddata.md +++ b/docs/auditor/10.8/addon/qumulo/collecteddata.md @@ -15,7 +15,7 @@ To leverage data collected with the add-on, you can do the following in Netwrix You might want to apply a filter to narrow down your search results to the Netwrix API data source only. -![Qumulo screen](/images/auditor/10.7/addon/qumulo/qumulo_thumb_0_0.webp) +![Qumulo screen](/images/auditor/10.8/addon/qumulo/qumulo_thumb_0_0.webp) - Also, you can click **Tools** in the upper-right corner and select the command you need. For example: diff --git a/docs/auditor/10.8/addon/qumulo/overview.md b/docs/auditor/10.8/addon/qumulo/overview.md index 100de844d8..e92cac8dfa 100644 --- a/docs/auditor/10.8/addon/qumulo/overview.md +++ b/docs/auditor/10.8/addon/qumulo/overview.md @@ -38,7 +38,7 @@ Major benefits: The add-on is implemented as a Syslog service that collects activity data from Qumulo Cluster and sends it to Auditor using the Integration API. -![diagram_thumb_0_0](/images/auditor/10.7/addon/qumulo/diagram_thumb_0_0.webp) +![diagram_thumb_0_0](/images/auditor/10.8/addon/qumulo/diagram_thumb_0_0.webp) On a high level, the solution works as follows: @@ -63,7 +63,7 @@ On a high level, the solution works as follows: them to the **Netwrix_Auditor_API** database (SQL server database) and file-based Long-Term Archive. Data is sent periodically, by default every 5 seconds. For more information on the Activity Record structure and capabilities of the Integration API, refer to the - [Integration API](/docs/auditor/10.7/api/overview.md) topic. + [Integration API](/docs/auditor/10.8/api/overview.md) topic. 7. Users open Auditor Client to work with collected data: - Search for file changes using certain criteria - Export data to PDF or CSV files diff --git a/docs/auditor/10.8/addon/radius/collecteddata.md b/docs/auditor/10.8/addon/radius/collecteddata.md index be0186d42d..7bc232600d 100644 --- a/docs/auditor/10.8/addon/radius/collecteddata.md +++ b/docs/auditor/10.8/addon/radius/collecteddata.md @@ -15,7 +15,7 @@ Follow the steps to see results. **Step 2 –** Click **Search**. -![radius](/images/auditor/10.7/addon/radius/radius.webp) +![radius](/images/auditor/10.8/addon/radius/radius.webp) **NOTE:** You might want to apply a filter to narrow down your search results to the RADIUS Logon object type only. diff --git a/docs/auditor/10.8/addon/radius/customreport.md b/docs/auditor/10.8/addon/radius/customreport.md index ab922ade8b..9545545595 100644 --- a/docs/auditor/10.8/addon/radius/customreport.md +++ b/docs/auditor/10.8/addon/radius/customreport.md @@ -26,7 +26,7 @@ group. After running the script, the RADIUS server logons since yesterday custom report appears in **Reports** > **Custom**. You can access the search instantly to receive it on a regular basis. -![radiusfilters](/images/auditor/10.7/addon/radius/radiusfilters.webp) +![radiusfilters](/images/auditor/10.8/addon/radius/radiusfilters.webp) Clicking the saved search tile opens the search with preset filters, which shows RADIUS logon activity data for 2 days (yesterday and today). diff --git a/docs/auditor/10.8/addon/radius/deployment.md b/docs/auditor/10.8/addon/radius/deployment.md index 2131a27ff3..e9315eaf4e 100644 --- a/docs/auditor/10.8/addon/radius/deployment.md +++ b/docs/auditor/10.8/addon/radius/deployment.md @@ -10,7 +10,7 @@ Auditor Add-on for RADIUS Server runs on any computer in your environment. For e the add-on on the computer where Auditor is installed or on your RADIUS server. Depending on the execution scenario you choose, you have to define a different set of script -parameters. See the [Define Parameters](/docs/auditor/10.7/addon/radius/parameters.md) topic for additional information. +parameters. See the [Define Parameters](/docs/auditor/10.8/addon/radius/parameters.md) topic for additional information. Netwrixsuggests the following execution scenarios: diff --git a/docs/auditor/10.8/addon/radius/overview.md b/docs/auditor/10.8/addon/radius/overview.md index 13c6dce56a..e291da084c 100644 --- a/docs/auditor/10.8/addon/radius/overview.md +++ b/docs/auditor/10.8/addon/radius/overview.md @@ -62,7 +62,7 @@ On a high level, the add-on works as follows: events to the Netwrix Auditor server, which writes them to the Long-Term Archive and the Audit Database. -See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information on the structure of the Activity Record and the capabilities of the Netwrix Auditor Integration API. ## Prerequisites @@ -72,7 +72,7 @@ follows: | On... | Ensure that... | | ---------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| The Auditor Server side | - Auditor version is **9.8** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| The Auditor Server side | - Auditor version is **9.8** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.8/api/prerequisites.md) and [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | | The RADIUS server | - The **Remote Event Log Management (RPC)** inbound firewall rule is enabled. - The account collecting RADIUS logon events is member of the **Domain Users** group and have the **Manage auditing and security log** right. | | The computer where the script will be executed | - PowerShell **3.0** or later must be installed. - .NET **4.5** or later must be installed. - Execution policy for powershell scripts is set to _"Unrestricted"_. Run Windows PowerShell as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the write permission on the script folder—the add-on creates a special .bin file with the last exported event. - The user running the script must be a member of the Domain Users group. - At least the first script run should be performed under the account with elevated privileges, as it will be necessary to create event log file and perform other required operations. | diff --git a/docs/auditor/10.8/addon/radius/parameters.md b/docs/auditor/10.8/addon/radius/parameters.md index 9be5c91dc4..697138743e 100644 --- a/docs/auditor/10.8/addon/radius/parameters.md +++ b/docs/auditor/10.8/addon/radius/parameters.md @@ -10,7 +10,7 @@ Before running or scheduling the add-on, you must define connection details: Aud user credentials, etc. Most parameters are optional, the script uses the default values unless parameters are explicitly defined. You can skip or define parameters depending on your execution scenario and security policies. See the -[Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/logrhythm/deployment.md) topic for additional +[Choose Appropriate Execution Scenario](/docs/auditor/10.8/addon/logrhythm/deployment.md) topic for additional information. | Parameter | Default value | Description | diff --git a/docs/auditor/10.8/addon/servicenow/install.md b/docs/auditor/10.8/addon/servicenow/install.md index 99eedf71c0..25f36dee4c 100644 --- a/docs/auditor/10.8/addon/servicenow/install.md +++ b/docs/auditor/10.8/addon/servicenow/install.md @@ -17,4 +17,4 @@ will use the default Integration API port **9699**. Unless specified, the servic To use the add-on, you should check the prerequisites and specify configuration settings, as described in the next sections. After that, run the installer that will apply settings and start the -service. See the [Deploy the Service](/docs/auditor/10.7/addon/servicenow/deployment.md) topic for additional information. +service. See the [Deploy the Service](/docs/auditor/10.8/addon/servicenow/deployment.md) topic for additional information. diff --git a/docs/auditor/10.8/addon/servicenow/overview.md b/docs/auditor/10.8/addon/servicenow/overview.md index ab2393a022..568065961b 100644 --- a/docs/auditor/10.8/addon/servicenow/overview.md +++ b/docs/auditor/10.8/addon/servicenow/overview.md @@ -36,7 +36,7 @@ follows: | On... | Ensure that... | | ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -| The Auditor Server side | - Auditor version is **9.8** or later. - The Audit Database settings are configured in the Auditor. See the [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md)topic for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in the Auditor or is a member of the Netwrix Auditor Client Users group. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| The Auditor Server side | - Auditor version is **9.8** or later. - The Audit Database settings are configured in the Auditor. See the [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md)topic for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in the Auditor or is a member of the Netwrix Auditor Client Users group. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | | On the ServiceNow side | - ServiceNow version should be any of the following: - Helsinki - Istanbul - Kingston - London **NOTE:** Currently, Jakarta version has only experimental support. - A new user is created and has sufficient permissions to create tickets and update them. The **itil** role is recommended. If you want to reopen closed tickets, you must be granted the right to perform **Write** operations on inactive incidents. | -See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information. +See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/addon/siem/activityrecords.md b/docs/auditor/10.8/addon/siem/activityrecords.md index d48f306e2b..a662ce3900 100644 --- a/docs/auditor/10.8/addon/siem/activityrecords.md +++ b/docs/auditor/10.8/addon/siem/activityrecords.md @@ -10,7 +10,7 @@ sidebar_position: 30 To export only important audit data, that is, the Activity Records that led to the alert triggering, configure the alert response action, providing path to -**Netwrix_Auditor_Alerts_to_Event_Log_Add-on.ps1**. See the [SIEM](/docs/auditor/10.7/addon/siem/overview.md) topic for additional +**Netwrix_Auditor_Alerts_to_Event_Log_Add-on.ps1**. See the [SIEM](/docs/auditor/10.8/addon/siem/overview.md) topic for additional information. ## Export Activity Records in Bulk @@ -48,7 +48,7 @@ while. Ensure the script execution completed successfully. The Netwrix Auditor I will be created and filled with events. By default, the Netwrix Auditor Integration event log size is set to _1GB_, and retention is set to -_"Overwrite events as needed"_. See the [Integration Event Log Fields](/docs/auditor/10.7/addon/siem/integrationeventlog.md) topic +_"Overwrite events as needed"_. See the [Integration Event Log Fields](/docs/auditor/10.8/addon/siem/integrationeventlog.md) topic for additional information. Event records with more than 30,000 characters length will be trimmed. diff --git a/docs/auditor/10.8/addon/siem/collecteddata.md b/docs/auditor/10.8/addon/siem/collecteddata.md index 2a5c298623..700800a7f7 100644 --- a/docs/auditor/10.8/addon/siem/collecteddata.md +++ b/docs/auditor/10.8/addon/siem/collecteddata.md @@ -16,6 +16,6 @@ Services Logs** >Netwrix Auditor Integration log. **Step 3 –** Review events. -![EventLog_Export_Example](/images/auditor/10.7/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) +![EventLog_Export_Example](/images/auditor/10.8/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) Now you can augment Windows event log with data collected by the Auditor. diff --git a/docs/auditor/10.8/addon/siem/configure.md b/docs/auditor/10.8/addon/siem/configure.md index 1d6eb6d9e5..9f7065066d 100644 --- a/docs/auditor/10.8/addon/siem/configure.md +++ b/docs/auditor/10.8/addon/siem/configure.md @@ -11,7 +11,7 @@ sidebar_position: 10 Before running or scheduling the add-on, you must define connection details: Auditor Server host, user credentials, etc. Most parameters are optional, the script uses the default values unless parameters are explicitly defined. You can skip or define parameters depending on your execution -scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/siem/deployment.md) topic +scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.8/addon/siem/deployment.md) topic for more information. | Parameter | Default value | Description | @@ -33,8 +33,8 @@ dynamically calculated EventIDs will be modified and applied incorrectly. | Parameter | Default value | Description | | ------------------------------ | ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | **EventID generation** | | | -| GenerateEventId | True | Defines whether to generated unique EventIDs. Possible parameter values: - True — generate unique EventIDs using Activity Record fields - False — do not generate a unique ID, set EventID=0 for all cases EventID is generated through CRC32 calculation that involves the following Activity Record field values: - ObjectType - Action - DataSource (optional, see below for details) Only the lowest 16 bits of the calculation result are used. See the [Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) topic for additional information. | -| IncludeDataSourceToMakeEventId | True | Defines whether the DataSource field of Activity Record should be used in the EventID calculation. This parameter is applied only if GenerateEventId is set to TRUE. _Object Type - Action_ pair may be identical for several data sources (e.g., Object='User' and Action='Added'); thus, excluding DataSource from calculation may lead to the same EventID (duplicates). See the [Export Activity Records ](/docs/auditor/10.7/addon/siem/activityrecords.md) topic for additional information.. | +| GenerateEventId | True | Defines whether to generated unique EventIDs. Possible parameter values: - True — generate unique EventIDs using Activity Record fields - False — do not generate a unique ID, set EventID=0 for all cases EventID is generated through CRC32 calculation that involves the following Activity Record field values: - ObjectType - Action - DataSource (optional, see below for details) Only the lowest 16 bits of the calculation result are used. See the [Activity Records](/docs/auditor/10.8/api/postdata/activityrecords.md) topic for additional information. | +| IncludeDataSourceToMakeEventId | True | Defines whether the DataSource field of Activity Record should be used in the EventID calculation. This parameter is applied only if GenerateEventId is set to TRUE. _Object Type - Action_ pair may be identical for several data sources (e.g., Object='User' and Action='Added'); thus, excluding DataSource from calculation may lead to the same EventID (duplicates). See the [Export Activity Records ](/docs/auditor/10.8/addon/siem/activityrecords.md) topic for additional information.. | | SetDataSourceAsEventCategory | True | Defines whether to fill in Event Category event field with a numeric value derived from the **DataSource** field of Activity Record. Possible parameter values: - True — generate a numeric value for Event Category using Activity Record field - False — do not generate a numeric value, set Event Category=1 for all cases The Event Category field value is generated through CRC32 calculation that involves the **DataSource** field of Activity Record. Only the lowest 9 bits of the calculation result are used. | | SetDataSourceAsEventSource | False | Defines whether to fill in the Event Source event field with the value from the **DataSource** field of Activity Record. Possible parameter values: - True — fill in the Event Source with the value from DataSource field of Activity Record, adding the prefix defined by $EventSourcePrefix. Default prefix is _NA_, for example:_NA Windows Server_ - False — set Event Source to _Netwrix_Auditor_Integration_API_ for all cases If the script cannot fill in the Event Source for some DataSource, the default value _Netwrix_Auditor_Integration_API_ will be used. If the event source for particular **DataSource** does not exist in the Netwrix_Auditor_Integration event log, elevated privileges are required for add-on execution. | diff --git a/docs/auditor/10.8/addon/siem/deployment.md b/docs/auditor/10.8/addon/siem/deployment.md index e9f15c4fb8..73a9db3f95 100644 --- a/docs/auditor/10.8/addon/siem/deployment.md +++ b/docs/auditor/10.8/addon/siem/deployment.md @@ -11,7 +11,7 @@ sidebar_position: 20 Auditor Add-on for the SIEM solution runs on any computer in your environment. For example, you can run the add-on on the computer where Auditor is installed or on a remote server. Depending on the execution scenario you choose, you have to define a different set of parameters. See the -[Configuration](/docs/auditor/10.7/addon/siem/configure.md) topic for additional information. +[Configuration](/docs/auditor/10.8/addon/siem/configure.md) topic for additional information. Netwrix suggests the following execution scenarios: @@ -34,5 +34,5 @@ By default, Auditor uses the _LocalSystem_ account to run PowerShell scripts. If another account, in the alert settings go to **Response Action**, select the **Use custom credentials** checkbox and specify user name and password. Make sure this account has **Log on as batch job** privilege. See the -[Configure a Response Action for Alert](/docs/auditor/10.7/admin/alertsettings/responseaction.md) topic for +[Configure a Response Action for Alert](/docs/auditor/10.8/admin/alertsettings/responseaction.md) topic for additional information. diff --git a/docs/auditor/10.8/addon/siem/integrationeventlog.md b/docs/auditor/10.8/addon/siem/integrationeventlog.md index 9bb6a77b9d..80b02b1141 100644 --- a/docs/auditor/10.8/addon/siem/integrationeventlog.md +++ b/docs/auditor/10.8/addon/siem/integrationeventlog.md @@ -10,7 +10,7 @@ This section describes how the add-on fills in the Netwrix Auditor **Integration with data retrieved from Activity Records. The Activity Record structure is described in the -[Reference for Creating Activity Records](/docs/auditor/10.7/api/activityrecordreference.md)topic. +[Reference for Creating Activity Records](/docs/auditor/10.8/api/activityrecordreference.md)topic. | Event log field name | Filled in with value | Details | | -------------------- | ----------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | @@ -18,7 +18,7 @@ The Activity Record structure is described in the | EventID | **`{Calculated by add-on}`** -OR- **0** | Depending on _GenerateEventId_ in-script parameter (calculation result also depends on _IncludeDataSourceToMakeEventId_ parameter — if _GenerateEventId_ = _True_). | | Task Category | **`{DataSource ID}`** -OR- **1** | Depending on _SetDataSourceAsEventCategory_ in-script parameter. | -See the [Configuration](/docs/auditor/10.7/addon/siem/configure.md) topic for additional information. +See the [Configuration](/docs/auditor/10.8/addon/siem/configure.md) topic for additional information. EventData is filled in with data from the Activity Record fields as follows: @@ -37,4 +37,4 @@ EventData is filled in with data from the Activity Record fields as follows: Details are filled in only if this Activity Record field is not empty. -![eventlogexample_thumb_0_0](/images/auditor/10.7/addon/solarwinds/eventlogexample_thumb_0_0.webp) +![eventlogexample_thumb_0_0](/images/auditor/10.8/addon/solarwinds/eventlogexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/addon/siem/overview.md b/docs/auditor/10.8/addon/siem/overview.md index 6ce43da0f1..1311da3bb3 100644 --- a/docs/auditor/10.8/addon/siem/overview.md +++ b/docs/auditor/10.8/addon/siem/overview.md @@ -31,7 +31,7 @@ On a high level, the add-on works as follows: 3. The add-on creates a special Windows event log named **Netwrix_Auditor_Integration** and stores events there. These events are structured and ready for integration with the SIEM solution. -See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information on the structure of the Activity Record and the capabilities of the Netwrix Auditor Integration API. ## Prerequisites @@ -69,7 +69,7 @@ On a high level, this add-on works as follows: events there. These events are structured and ready for integration with Windows event log. For more information on the structure of the Activity Record and the capabilities of the Netwrix -Auditor Integration API, refer to [Integration API](/docs/auditor/10.7/api/overview.md). +Auditor Integration API, refer to [Integration API](/docs/auditor/10.8/api/overview.md). ## Netwrix Auditor Alerts to Event Log Add-on @@ -77,7 +77,7 @@ This add-on works as response action to the alert, as follows: 1. The administrator enables and configured response action for selected alert, as described in the following topic: - [Configure a Response Action for Alert](/docs/auditor/10.7/admin/alertsettings/responseaction.md). Make sure + [Configure a Response Action for Alert](/docs/auditor/10.8/admin/alertsettings/responseaction.md). Make sure to provide correct path to the script file and to select the Write data to CSV file option. 2. When the alert is triggered, the script starts - it retrieves audit data (activity record fields) from the CSV file and processes it into log events. Each event contains the user account, action, @@ -85,5 +85,5 @@ This add-on works as response action to the alert, as follows: 3. The add-on creates a special Windows event log named Netwrix_Auditor_Integration and stores events there. These events are structured and ready for integration with SIEM system. -See the [Configure a Response Action for Alert](/docs/auditor/10.7/admin/alertsettings/responseaction.md) +See the [Configure a Response Action for Alert](/docs/auditor/10.8/admin/alertsettings/responseaction.md) topic for additional information on the alert response actions and CSV file. diff --git a/docs/auditor/10.8/addon/siemcefexport/deployment.md b/docs/auditor/10.8/addon/siemcefexport/deployment.md index 1e4528531b..1295850403 100644 --- a/docs/auditor/10.8/addon/siemcefexport/deployment.md +++ b/docs/auditor/10.8/addon/siemcefexport/deployment.md @@ -9,7 +9,7 @@ sidebar_position: 20 Netwrix Auditor Netwrix Risk Insights runs on any computer in your environment. For example, you can run the add-on on the computer where Netwrix Auditor is installed or on a remote server. Depending on the execution scenario you choose, you have to define a different set of parameters. See the -[Define Parameters](/docs/auditor/10.7/addon/siemcefexport/parameters.md) topic for additional information. +[Define Parameters](/docs/auditor/10.8/addon/siemcefexport/parameters.md) topic for additional information. Netwrix suggests the following execution scenarios: diff --git a/docs/auditor/10.8/addon/siemcefexport/overview.md b/docs/auditor/10.8/addon/siemcefexport/overview.md index 77a5276c5e..4ea2e91e24 100644 --- a/docs/auditor/10.8/addon/siemcefexport/overview.md +++ b/docs/auditor/10.8/addon/siemcefexport/overview.md @@ -31,7 +31,7 @@ On a high level, the add-on works as follows: 3. The add-on creates a special Windows event log named **Netwrix_Auditor_Integration** and stores events there. These events are structured and ready for integration with the SIEM solution. -See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information on the structure of the Activity Record and the capabilities of the Netwrix Auditor Integration API. ## Prerequisites @@ -41,7 +41,7 @@ follows: | On... | Ensure that... | | ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.8/api/prerequisites.md) and [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | | The computer where the script will be executed | - PowerShell **3.0** or later must be installed. - .NET **4.5** or later must be installed. - Execution policy for powershell scripts is set to _"Unrestricted"_. Run Windows PowerShell as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the write permission on the script folder—the add-on creates a special .bin file with the last exported event. - The user running the script must be a member of the Domain Users group. - At least the first script run should be performed under the account with elevated privileges, as it will be necessary to create event log file and perform other required operations. | ## Compatibility Notice diff --git a/docs/auditor/10.8/addon/siemeventlogexport/deployment.md b/docs/auditor/10.8/addon/siemeventlogexport/deployment.md index 5e6960cb4e..e8e40e92af 100644 --- a/docs/auditor/10.8/addon/siemeventlogexport/deployment.md +++ b/docs/auditor/10.8/addon/siemeventlogexport/deployment.md @@ -9,7 +9,7 @@ sidebar_position: 20 Auditor Add-on for the SIEM solution runs on any computer in your environment. For example, you can run the add-on on the computer where Auditor is installed or on a remote server. Depending on the execution scenario you choose, you have to define a different set of parameters. See the -[Define Parameters](/docs/auditor/10.7/addon/siemeventlogexport/parameters.md) topic for additional information. +[Define Parameters](/docs/auditor/10.8/addon/siemeventlogexport/parameters.md) topic for additional information. Netwrix suggests the following execution scenarios: diff --git a/docs/auditor/10.8/addon/siemeventlogexport/overview.md b/docs/auditor/10.8/addon/siemeventlogexport/overview.md index 233e58844c..b25efc5624 100644 --- a/docs/auditor/10.8/addon/siemeventlogexport/overview.md +++ b/docs/auditor/10.8/addon/siemeventlogexport/overview.md @@ -28,7 +28,7 @@ On a high level, the add-on works as follows: there. These events are structured and ready for integration with SIEM. For more information on the structure of the Activity Record and the capabilities of the Integration -API, refer to the [Integration API](/docs/auditor/10.7/api/overview.md) topic. +API, refer to the [Integration API](/docs/auditor/10.8/api/overview.md) topic. ## Prerequisites @@ -37,11 +37,11 @@ follows: | On... | Ensure that... | | ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.8/api/prerequisites.md) and [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | | The computer where the script will be executed | - PowerShell **3.0** or later must be installed. - .NET **4.5** or later must be installed. - Execution policy for powershell scripts is set to _"Unrestricted"_. Run Windows PowerShell as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the write permission on the script folder—the add-on creates a special .bin file with the last exported event. - The user running the script must be a member of the Domain Users group. - At least the first script run should be performed under the account with elevated privileges, as it will be necessary to create event log file and perform other required operations. | ## Compatibility Notice Make sure to check your product version, and then review and update your add-ons and scripts leveraging the Integration API. Download the latest add- on version in the Add- on Store. See the -[Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information about schema updates. +[Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information about schema updates. diff --git a/docs/auditor/10.8/addon/siemeventlogexport/parameters.md b/docs/auditor/10.8/addon/siemeventlogexport/parameters.md index e4adc18b9d..a78ba14978 100644 --- a/docs/auditor/10.8/addon/siemeventlogexport/parameters.md +++ b/docs/auditor/10.8/addon/siemeventlogexport/parameters.md @@ -9,7 +9,7 @@ sidebar_position: 10 Before running or scheduling the add-on, you must define connection details: Auditor Server host, user credentials, etc. Most parameters are optional, the script uses the default values unless parameters are explicitly defined. You can skip or define parameters depending on your execution -scenario and security policies. See [Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/siemeventlogexport/deployment.md) for +scenario and security policies. See [Choose Appropriate Execution Scenario](/docs/auditor/10.8/addon/siemeventlogexport/deployment.md) for additional information. First provide a path to your add-on followed by script parameters with their values. Each parameter diff --git a/docs/auditor/10.8/addon/solarwinds/collecteddata.md b/docs/auditor/10.8/addon/solarwinds/collecteddata.md index 6f1f0a7795..3df6b858b1 100644 --- a/docs/auditor/10.8/addon/solarwinds/collecteddata.md +++ b/docs/auditor/10.8/addon/solarwinds/collecteddata.md @@ -16,6 +16,6 @@ Services Logs** >Netwrix Auditor Integration log. **Step 3 –** Review events. -![EventLog_Export_Example](/images/auditor/10.7/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) +![EventLog_Export_Example](/images/auditor/10.8/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) Now you can augment Windows event log with data collected by the Auditor. diff --git a/docs/auditor/10.8/addon/solarwinds/deployment.md b/docs/auditor/10.8/addon/solarwinds/deployment.md index 3008e20e89..8355d8d6a9 100644 --- a/docs/auditor/10.8/addon/solarwinds/deployment.md +++ b/docs/auditor/10.8/addon/solarwinds/deployment.md @@ -9,7 +9,7 @@ sidebar_position: 20 Auditor Add-on for the SIEM solution runs on any computer in your environment. For example, you can run the add-on on the computer where Auditor is installed or on a remote server. Depending on the execution scenario you choose, you have to define a different set of parameters. See the -[Define Parameters](/docs/auditor/10.7/addon/solarwinds/parameters.md) topic for additional information. +[Define Parameters](/docs/auditor/10.8/addon/solarwinds/parameters.md) topic for additional information. Netwrix suggests the following execution scenarios: diff --git a/docs/auditor/10.8/addon/solarwinds/integrationeventlog.md b/docs/auditor/10.8/addon/solarwinds/integrationeventlog.md index a6ef703655..42497fd375 100644 --- a/docs/auditor/10.8/addon/solarwinds/integrationeventlog.md +++ b/docs/auditor/10.8/addon/solarwinds/integrationeventlog.md @@ -10,7 +10,7 @@ This section describes how the add-on fills in the Netwrix Auditor **Integration with data retrieved from Activity Records. The Activity Record structure is described in the -[Reference for Creating Activity Records](/docs/auditor/10.7/api/activityrecordreference.md)topic. +[Reference for Creating Activity Records](/docs/auditor/10.8/api/activityrecordreference.md)topic. | Event log field name | Filled in with value | Details | | -------------------- | ----------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | @@ -18,7 +18,7 @@ The Activity Record structure is described in the | EventID | **`{Calculated by add-on}`** -OR- **0** | Depending on _GenerateEventId_ in-script parameter (calculation result also depends on _IncludeDataSourceToMakeEventId_ parameter — if _GenerateEventId_ = _True_). | | Task Category | **`{DataSource ID}`** -OR- **1** | Depending on _SetDataSourceAsEventCategory_ in-script parameter. | -See the [Define Parameters](/docs/auditor/10.7/addon/solarwinds/parameters.md) topic for additional information. +See the [Define Parameters](/docs/auditor/10.8/addon/solarwinds/parameters.md) topic for additional information. EventData is filled in with data from the Activity Record fields as follows: @@ -37,4 +37,4 @@ EventData is filled in with data from the Activity Record fields as follows: Details are filled in only if this Activity Record field is not empty. -![eventlogexample_thumb_0_0](/images/auditor/10.7/addon/solarwinds/eventlogexample_thumb_0_0.webp) +![eventlogexample_thumb_0_0](/images/auditor/10.8/addon/solarwinds/eventlogexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/addon/solarwinds/overview.md b/docs/auditor/10.8/addon/solarwinds/overview.md index ffc1351eee..7633f5a2c6 100644 --- a/docs/auditor/10.8/addon/solarwinds/overview.md +++ b/docs/auditor/10.8/addon/solarwinds/overview.md @@ -31,7 +31,7 @@ On a high level, the add-on works as follows: 3. The add-on creates a special Windows event log named **Netwrix_Auditor_Integration** and stores events there. These events are structured and ready for integration with the SIEM solution. -See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on the structure +See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information on the structure of the Activity Record and the capabilities of the Netwrix Auditor Integration API. ## Prerequisites @@ -41,7 +41,7 @@ follows: | On... | Ensure that... | | ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| The Auditor server side | - Auditor version is **10.0** or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.8/api/prerequisites.md) and [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | | The computer where the script will be executed | - PowerShell **3.0** or later must be installed. - .NET **4.5** or later must be installed. - Execution policy for powershell scripts is set to _"Unrestricted"_. Run Windows PowerShell as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the write permission on the script folder—the add-on creates a special .bin file with the last exported event. - The user running the script must be a member of the Domain Users group. - At least the first script run should be performed under the account with elevated privileges, as it will be necessary to create event log file and perform other required operations. | ## Compatibility Notice diff --git a/docs/auditor/10.8/addon/solarwinds/parameters.md b/docs/auditor/10.8/addon/solarwinds/parameters.md index d3fa58c0b1..93556047b4 100644 --- a/docs/auditor/10.8/addon/solarwinds/parameters.md +++ b/docs/auditor/10.8/addon/solarwinds/parameters.md @@ -9,7 +9,7 @@ sidebar_position: 10 Before running or scheduling the add-on, you must define connection details: Auditor Server host, user credentials, etc. Most parameters are optional, the script uses the default values unless parameters are explicitly defined. You can skip or define parameters depending on your execution -scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.7/addon/solarwinds/deployment.md) topic +scenario and security policies. See the [Choose Appropriate Execution Scenario](/docs/auditor/10.8/addon/solarwinds/deployment.md) topic for additional information. | Parameter | Default value | Description | diff --git a/docs/auditor/10.8/addon/solarwinds/powershell.md b/docs/auditor/10.8/addon/solarwinds/powershell.md index d99b09e4c5..9df9eb9dc5 100644 --- a/docs/auditor/10.8/addon/solarwinds/powershell.md +++ b/docs/auditor/10.8/addon/solarwinds/powershell.md @@ -37,7 +37,7 @@ take a while. Ensure the script execution completed successfully. The Netwrix Au **Integration** event log will be created and filled with events. By default, the Netwrix Auditor **Integration** event log size is set to 1GB, and retention is set -to "_Overwrite events as needed_". See the [Integration Event Log Fields](/docs/auditor/10.7/addon/solarwinds/integrationeventlog.md) +to "_Overwrite events as needed_". See the [Integration Event Log Fields](/docs/auditor/10.8/addon/solarwinds/integrationeventlog.md) topic for additional information. **NOTE:** Event records with more than 30,000 characters length will be trimmed. diff --git a/docs/auditor/10.8/addon/splunk/deployment.md b/docs/auditor/10.8/addon/splunk/deployment.md index 72b32fadee..a58e479ce0 100644 --- a/docs/auditor/10.8/addon/splunk/deployment.md +++ b/docs/auditor/10.8/addon/splunk/deployment.md @@ -14,7 +14,7 @@ In the Netwrix Auditor client, go to the Integrations section and verify Integra 2. Check the TCP communication port number – default is 9699. See the -[Configure Integration API Settings](/docs/auditor/10.7/api/prerequisites.md#configure-integration-api-settings)[Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md)topic +[Configure Integration API Settings](/docs/auditor/10.8/api/prerequisites.md#configure-integration-api-settings)[Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md)topic for additional information. ## Download the Add-on @@ -38,23 +38,23 @@ Follow the steps to install the add-on. - On the main Explore Splunk Enterprise screen, click the gear icon at the top of the left **Apps** panel: -![config](/images/auditor/10.7/addon/splunk/config.webp) +![config](/images/auditor/10.8/addon/splunk/config.webp) - When on any other screen, you can expand the drop-down list at the top panel and choose Manage Apps: - ![searchreporting](/images/auditor/10.7/addon/splunk/searchreporting.webp) + ![searchreporting](/images/auditor/10.8/addon/splunk/searchreporting.webp) **Step 3 –** On the **Apps** screen, click Install app from file: -![installapp](/images/auditor/10.7/addon/splunk/installapp.webp) +![installapp](/images/auditor/10.8/addon/splunk/installapp.webp) **Step 4 –** Click Choose File, navigate to the folder where you unpacked the add-on package, select the "TA-netwrix-auditor-add-on-for-splunk-1.6.1.spl" file and click Open. **Step 5 –** Click Upload. -![uploadapp](/images/auditor/10.7/addon/splunk/uploadapp.webp) +![uploadapp](/images/auditor/10.8/addon/splunk/uploadapp.webp) The **Upload** button text will change to "_Processing…_". When the installation is complete, you will see an invitation to reboot Splunk. This is optional unless you plan to create index @@ -62,7 +62,7 @@ configuration in the add-on folder. In addition, Splunk might not display add-on The installed add-on should appear in the Apps list in Splunk. -![searchreportingapp](/images/auditor/10.7/addon/splunk/searchreportingapp.webp) +![searchreportingapp](/images/auditor/10.8/addon/splunk/searchreportingapp.webp) ## Prepare for Using Netwrix Auditor Integration API @@ -80,13 +80,13 @@ Follow the steps to configure the add-on. **Step 1 –** From the Explore Splunk Enterprise or from the drop-down list on the top Splunk panel, open Netwrix Auditor add-on for Splunk and navigate to the Configuration page: -![configuration](/images/auditor/10.7/addon/splunk/configuration.webp) +![configuration](/images/auditor/10.8/addon/splunk/configuration.webp) **Step 2 –** Configure the account: 1. On the Configuration page, open the Account section. - ![addaccount](/images/auditor/10.7/addon/splunk/addaccount.webp) + ![addaccount](/images/auditor/10.8/addon/splunk/addaccount.webp) 2. Click **Add** and populate the fields: @@ -99,13 +99,13 @@ open Netwrix Auditor add-on for Splunk and navigate to the Configuration page: 3. Click the Add button. The added account should appear in the list: - ![configurationaccount](/images/auditor/10.7/addon/splunk/configurationaccount.webp) + ![configurationaccount](/images/auditor/10.8/addon/splunk/configurationaccount.webp) **Step 3 –** Configure the Netwrix Auditor Integration API location: 1. On the Configuration page open the Add-on Settings section: - ![configurationaddonsettings](/images/auditor/10.7/addon/splunk/configurationaddonsettings.webp) + ![configurationaddonsettings](/images/auditor/10.8/addon/splunk/configurationaddonsettings.webp) 2. In the Netwrix Auditor API location field provide the host name or IP address of your Netwrix Auditor Integration API host (Netwrix Auditor server). @@ -148,11 +148,11 @@ Follow the steps to configure data input. 1. Open Netwrix Auditor add-on for Splunk and go to the **Inputs** section. - ![inputs](/images/auditor/10.7/addon/splunk/inputs.webp) + ![inputs](/images/auditor/10.8/addon/splunk/inputs.webp) 2. Click Create New Input. - ![addapi](/images/auditor/10.7/addon/splunk/addapi.webp) + ![addapi](/images/auditor/10.8/addon/splunk/addapi.webp) 3. Provide the new data input parameters: diff --git a/docs/auditor/10.8/addon/splunk/overview.md b/docs/auditor/10.8/addon/splunk/overview.md index c738d44361..3cc7f3ca8a 100644 --- a/docs/auditor/10.8/addon/splunk/overview.md +++ b/docs/auditor/10.8/addon/splunk/overview.md @@ -52,7 +52,7 @@ Netwrix Auditor data sources: | VMware | Authentication Change | | Windows Server | Change | -See [CIM Data Model Mapping](/docs/auditor/10.7/addon/splunk/datamodelmap.md) for details. +See [CIM Data Model Mapping](/docs/auditor/10.8/addon/splunk/datamodelmap.md) for details. ## How It Works @@ -60,10 +60,10 @@ Netwrix Auditor add-on for Splunk allows pulling activity records data from the its Integration API. Data is retrieved in JSON format, transferred over HTTPS and stored to Splunk index. -![diagram](/images/auditor/10.7/addon/splunk/diagram.webp) +![diagram](/images/auditor/10.8/addon/splunk/diagram.webp) To learn more about Netwrix Auditor activity records, see the -[Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) topic for additional information. +[Activity Records](/docs/auditor/10.8/api/postdata/activityrecords.md) topic for additional information. For this data to be provided to Splunk, it adds a new Splunk source type, performing additional data parsing and field extraction. The audit data is also mapped into the Common Information Model (CIM) @@ -111,7 +111,7 @@ follows: | On... | Ensure that... | | ------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Auditor Server side | - Auditor version is 9.8 or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.7/api/prerequisites.md) and [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | +| Auditor Server side | - Auditor version is 9.8 or later. - The Audit Database settings are configured in Auditor Server. See the [Prerequisites](/docs/auditor/10.8/api/prerequisites.md) and [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topics for additional information. - The TCP 9699 port (default Auditor Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the Global reviewer role in Auditor or is a member of the Netwrix Auditor Client Users group. See the [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user will have the most extended permissions in the product. | | Splunk Enterprise | - Splunk version is 8.0.6 or higher. - Splunk Common Information Model add-on version 4.17.0 or higher. - Splunk Administrator or any other account with permissions to add add-ons, create indexes and data inputs. - The TCP 9699 port must be open on firewalls between Splunk and Netwrix Auditor server. | ### Considerations and limitations diff --git a/docs/auditor/10.8/admin/alertsettings/create/create.md b/docs/auditor/10.8/admin/alertsettings/create/create.md index 7435171975..09997e892b 100644 --- a/docs/auditor/10.8/admin/alertsettings/create/create.md +++ b/docs/auditor/10.8/admin/alertsettings/create/create.md @@ -13,7 +13,7 @@ To set up a response action, this account must also be a member of the local _Ad on Auditor Server. See the -[](https://helpcenter.netwrix.com/Roles/Role_Based_Access.html)[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) +[](https://helpcenter.netwrix.com/Roles/Role_Based_Access.html)[Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. ## Create a Custom Alert @@ -23,9 +23,9 @@ Follow the steps to create a custom alert. **Step 1 –** On the main Auditor page, click the Alert settings link under the Configuration section on the left: -![configuration_tile](/images/auditor/10.7/admin/alertsettings/configuration_tile.webp) +![configuration_tile](/images/auditor/10.8/admin/alertsettings/configuration_tile.webp) -See the [Navigation](/docs/auditor/10.7/admin/navigation/overview.md) topic for additional information. +See the [Navigation](/docs/auditor/10.8/admin/navigation/overview.md) topic for additional information. **Step 2 –** In the All Alerts window, click Add. Configure the following: @@ -33,7 +33,7 @@ See the [Navigation](/docs/auditor/10.7/admin/navigation/overview.md) topic for | --------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | General |
  • Specify a name and enter the description for the new alert.
    **NOTE:** Make sure that the Send alert when the action occurs option is enabled. Otherwise, the new alert will be disabled.
  • Email subject — Specify the subject of the email. It is possible to insert variables into the subject line. You can choose between "_Who_", "_What_" and"_Where_" variables. Consider the following:
  • Only one variable of each type can be added
  • You need to cut off the full path from the object names in "_What_" alert and leave only the actual name. For example, "_\com\Corp\Users\Departments\IT\Username_" should be just "_Username_". If you want to get back to the default Email subject line, click the **Restore Default** button.
  • Apply tags — Create a set of tags to more efficiently identify and sort your alerts. Select Edit under Apply tags to associate tags with your alert. Later, you can quickly find an alert of interest using Filter by tags in the upper part of the All Alerts window. To see a full list of alerts ever created in the product, navigate to Settings > Tags.
| | Recipients | Select alert recipients. Click Add Recipient and select alert delivery type:
  • Email — Specify the email address where notifications will be delivered. You can add as many recipients as necessary.
    **_RECOMMENDED:_** click **Send Test Email**. The system will send a test message to the specified email address and inform you if any problems are detected.
  • SMS-enabled email — Netwrix uses the sms gateway technology to deliver notifications to a phone number assigned to a dedicated email address. Specify email address to receive SMS notifications. Make sure that your carrier supports sms to email gateway technology.
| -| Filters | Apply a set of filters to narrow events that trigger a new alert. Alerts use the same interface and logic as search.
  • Filter — Select general type of filter (e.g., "Who", "Data Source", "Monitoring plan", etc.)
  • Operator — Configure match types for selected filter (e.g., "Equals", "Does not contain", etc.)
  • Value — Specify filter value. See the [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) topic for additional information on how to create and modify filters. The Filters section contains required fields highlighted with red. Once you completed all filters, click Preview on the right pane to see search-based list of events that will trigger your alert. ![preview_thumb_0_0](/images/auditor/10.7/admin/alertsettings/preview_thumb_0_0.webp)
| +| Filters | Apply a set of filters to narrow events that trigger a new alert. Alerts use the same interface and logic as search.
  • Filter — Select general type of filter (e.g., "Who", "Data Source", "Monitoring plan", etc.)
  • Operator — Configure match types for selected filter (e.g., "Equals", "Does not contain", etc.)
  • Value — Specify filter value. See the [View and Search Collected Data](/docs/auditor/10.8/admin/search/overview.md) topic for additional information on how to create and modify filters. The Filters section contains required fields highlighted with red. Once you completed all filters, click Preview on the right pane to see search-based list of events that will trigger your alert. ![preview_thumb_0_0](/images/auditor/10.8/admin/alertsettings/preview_thumb_0_0.webp)
| | Thresholds | If necessary, enable threshold to trigger the new alert. In this case, a single alert will be sent instead of many alerts. This can be helpful when Auditor detects many activity records matching the filters you specified. Slide the switch under the Send alert when the threshold is exceeded option and configure the following:
  • Limit alerting to activity records with the same... — Select a filter in the drop-down list (e.g., who). Note that, Auditor will search for activity records with the same value in the filter you selected. Only alerts grouped by the Who parameter can be included in the Behavior Anomalies list. Mind that in this case, the product does not summarize risk scores and shows the value you associated with this alert. This may significantly reduce risk score accuracy.
  • Send alert for `<...>` activity records within `<...>` seconds — Select a number of changes that occurred in a given period (in seconds). For example, you want to receive an alert on suspicious activity. You select "_Action_" in the Limit alerting to activity records with the same list and specify a number of actions to be considered an unexpected behavior: _1000_ changes in _60_ seconds. When the selected threshold exceeded, an alert will be delivered to the specified recipients: one for every 1000 removals in 60 seconds, one for every 1000 failed removals in 60 seconds. So you can easily discover what is going on in your IT infrastructure.
| -| Risk Score |
  • Slide the switch to On under Include this alert in Behavior Anomalies assessment. See the [Behavior Anomalies](/docs/auditor/10.7/admin/behavioranomalies/overview.md) topic for additional information.
  • Associate a risk score with the alert — Assign a risk score based on the type of anomaly and the severity of the deviation from the normal behavior. An action's risk score is a numerical value from 1 (Low) to 100 (High) that designates the level of risk with 100 being the riskiest and 1 the least risky. These are general guidelines you can adopt when setting a risk score:
  • High score — Assign to an action that requires your immediate response (e.g., adding account to a privileged group). Configure a non-threshold alert with email recipients.
  • Above medium score — Assign to a repetitive action occurring during a short period of time. While a standalone action is not suspicious, multiple actions merit your attention (e.g., mass deletions from a SharePoint site). Configure a threshold-based alert with email recipients.
  • Low score — Assign to an infrequent action. While a single action is safe, multiple occurrences aggregated over a long period of time may indicate a potential in-house bad actor (e.g., creation of potentially harmful files on a file share). Configure a non-threshold alert, email recipients are optional but make sure to regularly review the Behavior Anomalies dashboard.
  • Low score — Assign to a repetitive action that does not occur too often (e.g., rapid logons). Multiple occurrences of action sets may indicate a potential in-house bad actor or account compromise. Configure a threshold-based alert, email recipients are optional but make sure to regularly review the Behavior Anomalies dashboard.
| -| Response Action | You can instruct Auditor to perform a response action when the alert occurs — for example, start an executable file (command, batch file, or other) that will remediate the issue, or open a ticket with the help desk, and so on. For that, you will need an executable file stored locally on the Auditor server. Slide the switch to turn the feature **ON**, and see the [Configure a Response Action for Alert](/docs/auditor/10.7/admin/alertsettings/responseaction.md) topic for additional information. | +| Risk Score |
  • Slide the switch to On under Include this alert in Behavior Anomalies assessment. See the [Behavior Anomalies](/docs/auditor/10.8/admin/behavioranomalies/overview.md) topic for additional information.
  • Associate a risk score with the alert — Assign a risk score based on the type of anomaly and the severity of the deviation from the normal behavior. An action's risk score is a numerical value from 1 (Low) to 100 (High) that designates the level of risk with 100 being the riskiest and 1 the least risky. These are general guidelines you can adopt when setting a risk score:
  • High score — Assign to an action that requires your immediate response (e.g., adding account to a privileged group). Configure a non-threshold alert with email recipients.
  • Above medium score — Assign to a repetitive action occurring during a short period of time. While a standalone action is not suspicious, multiple actions merit your attention (e.g., mass deletions from a SharePoint site). Configure a threshold-based alert with email recipients.
  • Low score — Assign to an infrequent action. While a single action is safe, multiple occurrences aggregated over a long period of time may indicate a potential in-house bad actor (e.g., creation of potentially harmful files on a file share). Configure a non-threshold alert, email recipients are optional but make sure to regularly review the Behavior Anomalies dashboard.
  • Low score — Assign to a repetitive action that does not occur too often (e.g., rapid logons). Multiple occurrences of action sets may indicate a potential in-house bad actor or account compromise. Configure a threshold-based alert, email recipients are optional but make sure to regularly review the Behavior Anomalies dashboard.
| +| Response Action | You can instruct Auditor to perform a response action when the alert occurs — for example, start an executable file (command, batch file, or other) that will remediate the issue, or open a ticket with the help desk, and so on. For that, you will need an executable file stored locally on the Auditor server. Slide the switch to turn the feature **ON**, and see the [Configure a Response Action for Alert](/docs/auditor/10.8/admin/alertsettings/responseaction.md) topic for additional information. | diff --git a/docs/auditor/10.8/admin/alertsettings/create/createeventlog.md b/docs/auditor/10.8/admin/alertsettings/create/createeventlog.md index 6edaf2eed4..4a100fb6ad 100644 --- a/docs/auditor/10.8/admin/alertsettings/create/createeventlog.md +++ b/docs/auditor/10.8/admin/alertsettings/create/createeventlog.md @@ -48,7 +48,7 @@ The %ManagedObjectName% variable will be replaced with your monitoring plan name | Source | Specify this parameter if you want to be alerted on the events from a specific source. If you need to specify several users, you can define a mask for this parameter in the same way as described above. | | Category | Specify this parameter if you want to be alerted on a specific event category. | - ![eventfilters](/images/auditor/10.7/admin/alertsettings/eventfilters.webp) + ![eventfilters](/images/auditor/10.8/admin/alertsettings/eventfilters.webp) - In the Insertion Strings tab: diff --git a/docs/auditor/10.8/admin/alertsettings/create/createhealthstatus.md b/docs/auditor/10.8/admin/alertsettings/create/createhealthstatus.md index 2fd65dee82..6141aa461e 100644 --- a/docs/auditor/10.8/admin/alertsettings/create/createhealthstatus.md +++ b/docs/auditor/10.8/admin/alertsettings/create/createhealthstatus.md @@ -54,7 +54,7 @@ inclusive filter. **Step 12 –** Click Save to save your changes. -![emailhealthstatusevent](/images/auditor/10.7/admin/alertsettings/emailhealthstatusevent.webp) +![emailhealthstatusevent](/images/auditor/10.8/admin/alertsettings/emailhealthstatusevent.webp) If an event occurs that triggers an alert, an email notification will be sent immediately to the specified recipients. diff --git a/docs/auditor/10.8/admin/alertsettings/create/createmailboxaccess.md b/docs/auditor/10.8/admin/alertsettings/create/createmailboxaccess.md index 6fd8953c3c..3f66947a59 100644 --- a/docs/auditor/10.8/admin/alertsettings/create/createmailboxaccess.md +++ b/docs/auditor/10.8/admin/alertsettings/create/createmailboxaccess.md @@ -15,7 +15,7 @@ need to create a monitoring plan for auditing event logs. The procedure below describes the basic steps, required for creation of a monitoring plan that will be used to collect data on non-owner mailbox access events. See -[Event Log Manager](/docs/auditor/10.7/tools/eventlogmanager/eventlogmanager.md) topic for additional information. +[Event Log Manager](/docs/auditor/10.8/tools/eventlogmanager/eventlogmanager.md) topic for additional information. Follow the steps to create alert for non-owner mailbox access events. @@ -93,7 +93,7 @@ sent immediately to the specified recipients. Review the example of the MessageOpened event in the XML view: -![eventmessageopen](/images/auditor/10.7/admin/alertsettings/eventmessageopen.webp) +![eventmessageopen](/images/auditor/10.8/admin/alertsettings/eventmessageopen.webp) Depending on the event, the strings in the description may vary. The first eight strings are common for all events: @@ -151,4 +151,4 @@ In the example below, the following information has been added: - String 8 with the description - String 9 with the description -![editnotificationtemplate](/images/auditor/10.7/admin/alertsettings/editnotificationtemplate.webp) +![editnotificationtemplate](/images/auditor/10.8/admin/alertsettings/editnotificationtemplate.webp) diff --git a/docs/auditor/10.8/admin/alertsettings/dashboard.md b/docs/auditor/10.8/admin/alertsettings/dashboard.md index 9edab38871..7400461740 100644 --- a/docs/auditor/10.8/admin/alertsettings/dashboard.md +++ b/docs/auditor/10.8/admin/alertsettings/dashboard.md @@ -19,20 +19,20 @@ The dashboard includes the following widgets: by default). - Risk score by top 5 users – Shows potentially harmful users for the selected time period (7 days by default). Clicking the tile opens the Behavior Anomalies dashboard. See the - [Behavior Anomalies](/docs/auditor/10.7/admin/behavioranomalies/overview.md) topic for additional information. + [Behavior Anomalies](/docs/auditor/10.8/admin/behavioranomalies/overview.md) topic for additional information. - Alerts timeline – Shows the number of alerts triggered at the specific day. - Recent alerts – Shows all the triggered alerts in chronological order. -![alerts_overview_thumb_0_0](/images/auditor/10.7/admin/alertsettings/alerts_overview_thumb_0_0.webp) +![alerts_overview_thumb_0_0](/images/auditor/10.8/admin/alertsettings/alerts_overview_thumb_0_0.webp) Clicking any tile except for Risk score by top 5 users drills down to the Alert history dashboard that provides users with the detailed information about the latest alerts triggered in their IT infrastructure enriched with the actionable chart and timeline. -![alerts_history_thumb_0_0](/images/auditor/10.7/admin/alertsettings/alerts_history_thumb_0_0.webp) +![alerts_history_thumb_0_0](/images/auditor/10.8/admin/alertsettings/alerts_history_thumb_0_0.webp) Review detailed information about the triggered alerts and change anomaly status. See the -[Review User Profiles and Process Anomalies](/docs/auditor/10.7/admin/behavioranomalies/userprofile.md) topic for +[Review User Profiles and Process Anomalies](/docs/auditor/10.8/admin/behavioranomalies/userprofile.md) topic for additional information. On the Details pane, you can review alert details and manage your alerts: @@ -42,12 +42,12 @@ On the Details pane, you can review alert details and manage your alerts: - Mark all as reviewed – Click to mark all alerts in the list as reviewed. Netwrix recommends doing this only if you are completely sure that there are no critical alerts in your infrastructure. - Edit alerts settings – Click to modify settings of the selected alert. See the - [Create Alerts](/docs/auditor/10.7/admin/alertsettings/create/create.md) topic for additional information. + [Create Alerts](/docs/auditor/10.8/admin/alertsettings/create/create.md) topic for additional information. - Show activity record in new window – Click to view more information about the activity record that triggered an alert. See the - [Activity Records Statistics](/docs/auditor/10.7/admin/healthstatus/dashboard/activityrecordstatistics.md) topic for + [Activity Records Statistics](/docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md) topic for additional information. You can also refresh the alerts information by clicking the Refresh button at the bottom or go to -the general alerts settings page clicking the Alert settings. See the [Manage Alerts](/docs/auditor/10.7/admin/alertsettings/manage.md) +the general alerts settings page clicking the Alert settings. See the [Manage Alerts](/docs/auditor/10.8/admin/alertsettings/manage.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/alertsettings/manage.md b/docs/auditor/10.8/admin/alertsettings/manage.md index d3d81ef6c4..ff96c55e33 100644 --- a/docs/auditor/10.8/admin/alertsettings/manage.md +++ b/docs/auditor/10.8/admin/alertsettings/manage.md @@ -13,12 +13,12 @@ pre-configured filters and in most cases you only need to enable an alert and se receive notifications. You can add any elements (a dashboard, report, alert, risk, etc.) to the Auditor Home screen to -access them instantly. See the [Navigation](/docs/auditor/10.7/admin/navigation/overview.md) and -[Customize Home Screen](/docs/auditor/10.7/admin/navigation/customizehome.md) topics for additional information. +access them instantly. See the [Navigation](/docs/auditor/10.8/admin/navigation/overview.md) and +[Customize Home Screen](/docs/auditor/10.8/admin/navigation/customizehome.md) topics for additional information. | To... | Follow the steps... | | ---------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Enable / disable an existing alert | **Step 1 –** Select an alert from the list and enable it using the slider in the Mode column. **Step 2 –** Double-click the selected alert and specify alert recipients or set a risk score want to include an alert in Behavior Anomalies assessment. You can go on with a score suggested by Netwrix industry experts or fine-tune it to fit your organization's priorities. See the [Risk Score](/docs/auditor/10.7/admin/alertsettings/create/create.md) topic for additional information on how to configure scoring settings. **Step 3 –** Review and update filters. For some alerts you should provide filter values, such as group name or user. | +| Enable / disable an existing alert | **Step 1 –** Select an alert from the list and enable it using the slider in the Mode column. **Step 2 –** Double-click the selected alert and specify alert recipients or set a risk score want to include an alert in Behavior Anomalies assessment. You can go on with a score suggested by Netwrix industry experts or fine-tune it to fit your organization's priorities. See the [Risk Score](/docs/auditor/10.8/admin/alertsettings/create/create.md) topic for additional information on how to configure scoring settings. **Step 3 –** Review and update filters. For some alerts you should provide filter values, such as group name or user. | | Modify an existing alert | Select an alert from the list and click Edit. | | Create a new alert from existing | Select an alert from the list and click Duplicate at the bottom of the window. | | Remove an alert | Select an alert from the list and click ![delete](/images/platgovnetsuite/integrations/delete.webp) in the right pane. | diff --git a/docs/auditor/10.8/admin/alertsettings/overview.md b/docs/auditor/10.8/admin/alertsettings/overview.md index 254faa7313..06068ae90e 100644 --- a/docs/auditor/10.8/admin/alertsettings/overview.md +++ b/docs/auditor/10.8/admin/alertsettings/overview.md @@ -13,28 +13,28 @@ to mitigate risks once the suspicious action occurs. Review the following to take advantage of the Alerts functionality: -- See the[Manage Alerts](/docs/auditor/10.7/admin/alertsettings/manage.md) topic for additional information on how to edit and enable +- See the[Manage Alerts](/docs/auditor/10.8/admin/alertsettings/manage.md) topic for additional information on how to edit and enable existing predefined alerts, and create new alerts based on the predefined ones. -- See the [Create Alerts](/docs/auditor/10.7/admin/alertsettings/create/create.md) topic for additional information on how to create custom alerts +- See the [Create Alerts](/docs/auditor/10.8/admin/alertsettings/create/create.md) topic for additional information on how to create custom alerts with your personal filters. - If you need to be alerted on specific events in your Event Logs or non-owner mailbox access - attempts, see the [Create Alerts for Event Log](/docs/auditor/10.7/admin/alertsettings/create/createeventlog.md) and - [Create Alerts for Non-Owner Mailbox Access Events](/docs/auditor/10.7/admin/alertsettings/create/createmailboxaccess.md) topics for additional + attempts, see the [Create Alerts for Event Log](/docs/auditor/10.8/admin/alertsettings/create/createeventlog.md) and + [Create Alerts for Non-Owner Mailbox Access Events](/docs/auditor/10.8/admin/alertsettings/create/createmailboxaccess.md) topics for additional information. The example alert is triggered when a new user is created in the monitored domain. -![ad_alert](/images/auditor/10.7/admin/alertsettings/ad_alert.webp) +![ad_alert](/images/auditor/10.8/admin/alertsettings/ad_alert.webp) ## Tags Netwrix Auditor allows you to apply tags when creating an alert. Applying tags to alerts allows you to distinguish one alert from another or create groups of similar alerts. -![Manage tags list](/images/auditor/10.7/admin/alertsettings/managetags.webp) +![Manage tags list](/images/auditor/10.8/admin/alertsettings/managetags.webp) The Tags page contains a complete list of alerts that were created in the product. Currently, you cannot assign or create tags on this page. To apply tags to an alert, navigate to alert settings and locate the Apply tags section on the -General tab. See the [Create Alerts](/docs/auditor/10.7/admin/alertsettings/create/create.md) topic to receive information about tags applying. +General tab. See the [Create Alerts](/docs/auditor/10.8/admin/alertsettings/create/create.md) topic to receive information about tags applying. diff --git a/docs/auditor/10.8/admin/alertsettings/responseaction.md b/docs/auditor/10.8/admin/alertsettings/responseaction.md index 0c811d4ba0..7d3dcf5472 100644 --- a/docs/auditor/10.8/admin/alertsettings/responseaction.md +++ b/docs/auditor/10.8/admin/alertsettings/responseaction.md @@ -10,7 +10,7 @@ Upon the alert triggering, you can instruct Auditor to perform several actions s command, a script or other executable file that will perform a remediation action, open a ticket with the organization help desk, etc. -![passwordreset_thumb_0_0](/images/auditor/10.7/admin/alertsettings/passwordreset_thumb_0_0.webp) +![passwordreset_thumb_0_0](/images/auditor/10.8/admin/alertsettings/passwordreset_thumb_0_0.webp) Response Action settings contain the following configuration options: @@ -43,7 +43,7 @@ Use space character as a separator. **Step 4 –** To run _.exe_, _.cmd_ and _.bat_ files, you can enter the path to your command-line or batch file directly in the Run field, for example: -![command_thumb_0_0](/images/auditor/10.7/admin/alertsettings/command_thumb_0_0.webp) +![command_thumb_0_0](/images/auditor/10.8/admin/alertsettings/command_thumb_0_0.webp) To run the ._ps1_ files, you will need to enter the path to _powershell.exe_ and path to your script. For example: @@ -51,7 +51,7 @@ script. For example: - In the Run field, enter _C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe_ - In the With parameters field, enter `–File ` -![powershell_thumb_0_0](/images/auditor/10.7/admin/alertsettings/powershell_thumb_0_0.webp) +![powershell_thumb_0_0](/images/auditor/10.8/admin/alertsettings/powershell_thumb_0_0.webp) Unless you select to Write data to CSV file, Auditor will also pass the following parameters to the command line: @@ -130,7 +130,7 @@ the fields and their values in a structured way to a CSV file. Here is an example of a CSV file structure: -![csvfile_thumb_0_48](/images/auditor/10.7/admin/alertsettings/csvfile_thumb_0_48.webp) +![csvfile_thumb_0_48](/images/auditor/10.8/admin/alertsettings/csvfile_thumb_0_48.webp) The number of activity records retrieved per every response action launch will be only limited by user (see below for details). If the number of records associated with the alert exceeds this limit, diff --git a/docs/auditor/10.8/admin/behavioranomalies/dashboard.md b/docs/auditor/10.8/admin/behavioranomalies/dashboard.md index 9f666368f6..36c892eb5e 100644 --- a/docs/auditor/10.8/admin/behavioranomalies/dashboard.md +++ b/docs/auditor/10.8/admin/behavioranomalies/dashboard.md @@ -8,20 +8,20 @@ sidebar_position: 10 To review the Behavior Anomalies dashboard, process and filter anomalies in user profiles, you must be assigned the Global administrator or Global reviewer role in the product. See the -[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional +[Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. You can add any elements (a dashboard, report, alert, risk, etc.) to the Auditor Home screen to -access them instantly. See the [Navigation](/docs/auditor/10.7/admin/navigation/overview.md) and -[Customize Home Screen](/docs/auditor/10.7/admin/navigation/customizehome.md) topics for additional information. +access them instantly. See the [Navigation](/docs/auditor/10.8/admin/navigation/overview.md) and +[Customize Home Screen](/docs/auditor/10.8/admin/navigation/customizehome.md) topics for additional information. To review the Behavior Anomalies dashboard: On the main Auditor page, click -![ba_tile](/images/auditor/10.7/admin/behavioranomalies/ba_tile.webp) +![ba_tile](/images/auditor/10.8/admin/behavioranomalies/ba_tile.webp) on the left. -![dashboard_thumb_0_0](/images/auditor/10.7/admin/behavioranomalies/dashboard_thumb_0_0.webp) +![dashboard_thumb_0_0](/images/auditor/10.8/admin/behavioranomalies/dashboard_thumb_0_0.webp) The dashboards includes the following sections: @@ -33,6 +33,6 @@ The dashboards includes the following sections: Once you reviewed the general anomaly trend and identified users that merit your special attention, review their profiles and process anomalies. Click View Profile next to a user name to dive into user activity and investigate each action in details. -[Review User Profiles and Process Anomalies](/docs/auditor/10.7/admin/behavioranomalies/userprofile.md) +[Review User Profiles and Process Anomalies](/docs/auditor/10.8/admin/behavioranomalies/userprofile.md) -[Review User Profiles and Process Anomalies](/docs/auditor/10.7/admin/behavioranomalies/userprofile.md) +[Review User Profiles and Process Anomalies](/docs/auditor/10.8/admin/behavioranomalies/userprofile.md) diff --git a/docs/auditor/10.8/admin/behavioranomalies/overview.md b/docs/auditor/10.8/admin/behavioranomalies/overview.md index 24a4052a72..e004464b5a 100644 --- a/docs/auditor/10.8/admin/behavioranomalies/overview.md +++ b/docs/auditor/10.8/admin/behavioranomalies/overview.md @@ -23,7 +23,7 @@ On a high level, your behavior anomalies assessment workflow can be described as 1. You create alerts on threat patterns specific to your company. You include these alerts in Behavior Anomalies assessment and associate a risk score with each alert. The score, that is between 1 and 100 points, reflects how critical the action is for your organization. - [Risk Score](/docs/auditor/10.7/admin/alertsettings/create/create.md)how to set a risk score for an alert. + [Risk Score](/docs/auditor/10.8/admin/alertsettings/create/create.md)how to set a risk score for an alert. Although Netwrix industry experts suggest risk scores for alerts that are provided out-of-the-box, you can easily tailor these scores to your organization needs and priorities. @@ -35,10 +35,10 @@ On a high level, your behavior anomalies assessment workflow can be described as 3. Every now and then, you review the Behavior Anomalies dashboard—the risk score timeline with anomaly surges, and the most active users. The general rule of thumb is: the more risk score points the user has the more he or she merits your attention. - [Review Behavior Anomalies Dashboard](/docs/auditor/10.7/admin/behavioranomalies/dashboard.md) + [Review Behavior Anomalies Dashboard](/docs/auditor/10.8/admin/behavioranomalies/dashboard.md) 4. To learn more about user activity, you can drill-down to a user profile to review all alerts provoked by this user. As you review anomalies and mitigate risks, the user's total score - reduces. [Review User Profiles and Process Anomalies](/docs/auditor/10.7/admin/behavioranomalies/userprofile.md) + reduces. [Review User Profiles and Process Anomalies](/docs/auditor/10.8/admin/behavioranomalies/userprofile.md) The purpose of the dashboard is to keep risks low and help you spot and address issues as they occur. The risk score assigned to a user does not qualify him or her as a bad actor but rather diff --git a/docs/auditor/10.8/admin/behavioranomalies/userprofile.md b/docs/auditor/10.8/admin/behavioranomalies/userprofile.md index 0b0ce05370..751ccd05b2 100644 --- a/docs/auditor/10.8/admin/behavioranomalies/userprofile.md +++ b/docs/auditor/10.8/admin/behavioranomalies/userprofile.md @@ -13,7 +13,7 @@ To view a user profile - On the Behavior Anomalies assessment dashboard, locate a user and click View Profile next to his or her name. -![userprofile_thumb_0_0](/images/auditor/10.7/admin/behavioranomalies/userprofile_thumb_0_0.webp) +![userprofile_thumb_0_0](/images/auditor/10.8/admin/behavioranomalies/userprofile_thumb_0_0.webp) The user profile page contains the following sections: @@ -48,7 +48,7 @@ To change an anomaly status You can add comments without changing a status. This might be helpful if the anomaly remains active for a long period of time and you need even more time to examine it closely. -![changestatus_thumb_0_0](/images/auditor/10.7/admin/behavioranomalies/changestatus_thumb_0_0.webp) +![changestatus_thumb_0_0](/images/auditor/10.8/admin/behavioranomalies/changestatus_thumb_0_0.webp) Once the anomaly is reviewed, it disappears from the timeline and chart, and its associated risk score is taken from user's total score. The reviewed anomalies supplement the status with the diff --git a/docs/auditor/10.8/admin/compliancemappings.md b/docs/auditor/10.8/admin/compliancemappings.md index 3a24e44e4d..fb8793397d 100644 --- a/docs/auditor/10.8/admin/compliancemappings.md +++ b/docs/auditor/10.8/admin/compliancemappings.md @@ -13,4 +13,4 @@ opens the page on the Netwrix website. Here you can review a brief description o standard supported by the product and download E book containing detailed requirements for the standards. -![compliance_mappings](/images/auditor/10.7/admin/compliance_mappings.webp) +![compliance_mappings](/images/auditor/10.8/admin/compliance_mappings.webp) diff --git a/docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md b/docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md index 45a46a6e17..f5ac25202f 100644 --- a/docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md +++ b/docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md @@ -13,7 +13,7 @@ generation intensity in your IT infrastructure, and product load. After you click View details, the Activity Records Statistics window will be displayed. -![activityrecordsdetails_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/activityrecordsdetails_thumb_0_0.webp) +![activityrecordsdetails_thumb_0_0](/images/auditor/10.8/admin/healthstatus/dashboard/activityrecordsdetails_thumb_0_0.webp) By default, statistics on activity records processing is grouped by Monitoring plan and presented for the Last 7 days. To modify the timeframe, use the drop-down list in the upper right corner. diff --git a/docs/auditor/10.8/admin/healthstatus/dashboard/databasestatistics.md b/docs/auditor/10.8/admin/healthstatus/dashboard/databasestatistics.md index a27b837221..9879ce58ad 100644 --- a/docs/auditor/10.8/admin/healthstatus/dashboard/databasestatistics.md +++ b/docs/auditor/10.8/admin/healthstatus/dashboard/databasestatistics.md @@ -17,7 +17,7 @@ Transaction logs size is not included in the calculations. After you click View details, the following information will be displayed for the specified SQL Server instance: -![dbstats_overview_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/dbstats_overview_thumb_0_0.webp) +![dbstats_overview_thumb_0_0](/images/auditor/10.8/admin/healthstatus/dashboard/dbstats_overview_thumb_0_0.webp) The Database name column contains the list of Netwrix Auditor databases hosted by the specified instance of the SQL Server: @@ -39,7 +39,7 @@ The following capacity metrics are displayed for each database: After you expand the database node, the detailed database properties will be shown: -![dbstatistics_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/dbstatistics_thumb_0_0.webp) +![dbstatistics_thumb_0_0](/images/auditor/10.8/admin/healthstatus/dashboard/dbstatistics_thumb_0_0.webp) These properties are as follows: diff --git a/docs/auditor/10.8/admin/healthstatus/dashboard/healthlog.md b/docs/auditor/10.8/admin/healthstatus/dashboard/healthlog.md index 07aba7dd8f..45c903bad7 100644 --- a/docs/auditor/10.8/admin/healthstatus/dashboard/healthlog.md +++ b/docs/auditor/10.8/admin/healthstatus/dashboard/healthlog.md @@ -17,7 +17,7 @@ System Health log**. Then, follow the instructions provided by Microsoft. See th for additional information on [How to Clear Event Logs](https://learn.microsoft.com/en-us/host-integration-server/core/how-to-clear-event-logs1). -![healthlog](/images/auditor/10.7/admin/healthstatus/dashboard/healthlog.webp) +![healthlog](/images/auditor/10.8/admin/healthstatus/dashboard/healthlog.webp) ## Netwrix Auditor System Health Log @@ -54,7 +54,7 @@ If you want to monitor Auditor health status in more depth, you can do the follo - Create a monitoring plan for this log using Event Log Manager to collect activity data. See the Health Status overview for additional information. - Configure alerts triggered by specific events in the product's health log. - [Create Alerts on Health Status](/docs/auditor/10.7/admin/alertsettings/create/createhealthstatus.md) + [Create Alerts on Health Status](/docs/auditor/10.8/admin/alertsettings/create/createhealthstatus.md) ## Inspect Events in Health Log @@ -87,6 +87,6 @@ Follow the steps to filter events. | Item name | Select to display events from the certain item(s) you need. | | Event ID | Enter event ID number or range of event IDs separated by commas. For example, 1, 3, 5-99. You can also exclude unwanted event IDs from being displayed. Type the minus sign before selected event ID. For example, -76. | -![healthlogfilters_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/healthlogfilters_thumb_0_0.webp) +![healthlogfilters_thumb_0_0](/images/auditor/10.8/admin/healthstatus/dashboard/healthlogfilters_thumb_0_0.webp) The applied filters will be listed on the top of the screen under the window title. diff --git a/docs/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview.md b/docs/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview.md index 7598d4122c..4018e04207 100644 --- a/docs/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview.md +++ b/docs/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview.md @@ -19,7 +19,7 @@ displays current statuses of all monitoring plans: After you click View details, the Monitoring Overview window will be displayed. -![monitoringoverview_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/monitoringoverview_thumb_0_0.webp) +![monitoringoverview_thumb_0_0](/images/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview_thumb_0_0.webp) It provides the hierarchical list of monitoring plans, processed data sources and corresponding items with their current status and date/time of the last data processing session. For data sources diff --git a/docs/auditor/10.8/admin/healthstatus/dashboard/overview.md b/docs/auditor/10.8/admin/healthstatus/dashboard/overview.md index ba83eb9198..dc61aebaf7 100644 --- a/docs/auditor/10.8/admin/healthstatus/dashboard/overview.md +++ b/docs/auditor/10.8/admin/healthstatus/dashboard/overview.md @@ -19,28 +19,28 @@ The dashboard includes the following widgets: - The Activity records by date chart—Shows the number of activity records produced by your data sources, collected and saved by Netwrix Auditor during the last 7 days. See the - [Activity Records Statistics](/docs/auditor/10.7/admin/healthstatus/dashboard/activityrecordstatistics.md) topic for additional information. + [Activity Records Statistics](/docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md) topic for additional information. - The Monitoring overview widget—Shows aggregated statistics on the statuses of all monitoring plans - configured in Netwrix Auditor at the moment. See the [Monitoring Overview](/docs/auditor/10.7/admin/healthstatus/dashboard/monitoringoverview.md) + configured in Netwrix Auditor at the moment. See the [Monitoring Overview](/docs/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview.md) topic for additional information. - The Health log chart—Shows the statistics on the events written in the Netwrix Auditor health log in the last 24 hours. Click the link in this widget to view the log. See the - [Netwrix Auditor Health Log](/docs/auditor/10.7/admin/healthstatus/dashboard/healthlog.md) topic for additional information. + [Netwrix Auditor Health Log](/docs/auditor/10.8/admin/healthstatus/dashboard/healthlog.md) topic for additional information. - The Database statistics widget—Helps you to estimate database capacity on the default SQL Server - instance that hosts the product databases. See the [Database Statistics](/docs/auditor/10.7/admin/healthstatus/dashboard/databasestatistics.md) + instance that hosts the product databases. See the [Database Statistics](/docs/auditor/10.8/admin/healthstatus/dashboard/databasestatistics.md) topic for additional information. - The Long-Term Archive widget—Helps you to estimate the capacity of the Long-Term Archive file-based storage. To modify its settings, including location and retention, click the link in - this widget. See the [System Health](/docs/auditor/10.7/requirements/longtermarchive.md#system-health) topic + this widget. See the [System Health](/docs/auditor/10.8/requirements/longtermarchive.md#system-health) topic for additional information. - The Working Folder widget—Helps you to estimate the capacity of the Auditor working folder used to keep operational information (configuration files of the product components, log files, and other data) on the Auditor Server. See the - [System Health](/docs/auditor/10.7/requirements/longtermarchive.md#system-health) topic for additional + [System Health](/docs/auditor/10.8/requirements/longtermarchive.md#system-health) topic for additional information. -![healthstatusdashboard_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/healthstatusdashboard_thumb_0_0.webp) +![healthstatusdashboard_thumb_0_0](/images/auditor/10.8/admin/healthstatus/dashboard/healthstatusdashboard_thumb_0_0.webp) You can also instruct Netwrix Auditor to forward similar statistics as a health summary email to personnel in charge. For that, click Notification settings, then follow the steps described in the -[Notifications](/docs/auditor/10.7/admin/settings/notifications.md) topic. +[Notifications](/docs/auditor/10.8/admin/settings/notifications.md) topic. diff --git a/docs/auditor/10.8/admin/healthstatus/networktrafficcompression.md b/docs/auditor/10.8/admin/healthstatus/networktrafficcompression.md index 1ff4665c84..68acf607bf 100644 --- a/docs/auditor/10.8/admin/healthstatus/networktrafficcompression.md +++ b/docs/auditor/10.8/admin/healthstatus/networktrafficcompression.md @@ -40,4 +40,4 @@ Network traffic compression is available for the following data sources: - User Activity To learn how to enable this feature, refer to the -[Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional information. +[Create a New Monitoring Plan](/docs/auditor/10.8/admin/monitoringplans/create.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/healthstatus/overview.md b/docs/auditor/10.8/admin/healthstatus/overview.md index 6a92df3068..bb92e28da6 100644 --- a/docs/auditor/10.8/admin/healthstatus/overview.md +++ b/docs/auditor/10.8/admin/healthstatus/overview.md @@ -9,7 +9,7 @@ sidebar_position: 110 This topic describes how you can monitor Auditor operations, health and resource usage. See the following topics for additional information: -- [Health Status Dashboard](/docs/auditor/10.7/admin/healthstatus/dashboard/overview.md) -- [Self-Audit](/docs/auditor/10.7/admin/healthstatus/selfaudit.md) -- [Health Summary Email](/docs/auditor/10.7/admin/healthstatus/summaryemail.md) -- [Netwrix Auditor Health Log](/docs/auditor/10.7/admin/healthstatus/dashboard/healthlog.md) +- [Health Status Dashboard](/docs/auditor/10.8/admin/healthstatus/dashboard/overview.md) +- [Self-Audit](/docs/auditor/10.8/admin/healthstatus/selfaudit.md) +- [Health Summary Email](/docs/auditor/10.8/admin/healthstatus/summaryemail.md) +- [Netwrix Auditor Health Log](/docs/auditor/10.8/admin/healthstatus/dashboard/healthlog.md) diff --git a/docs/auditor/10.8/admin/healthstatus/selfaudit.md b/docs/auditor/10.8/admin/healthstatus/selfaudit.md index 080840ec49..5d19d6afea 100644 --- a/docs/auditor/10.8/admin/healthstatus/selfaudit.md +++ b/docs/auditor/10.8/admin/healthstatus/selfaudit.md @@ -14,7 +14,7 @@ workflows adopted by our organization. The corresponding option is available on the General tab of Netwrix AuditorSettings. By default, the **Collect data for self-audit checkbox** is selected (enabled). -![selfaudit_thumb_0_0](/images/auditor/10.7/admin/healthstatus/selfaudit_thumb_0_0.webp) +![selfaudit_thumb_0_0](/images/auditor/10.8/admin/healthstatus/selfaudit_thumb_0_0.webp) ### Search for Self-audit Results @@ -28,13 +28,13 @@ Follow the steps to search for self-audit results. **Step 3 –** Click Search to review results: -![selfaudit_search_thumb_0_0](/images/auditor/10.7/admin/healthstatus/selfaudit_search_thumb_0_0.webp) +![selfaudit_search_thumb_0_0](/images/auditor/10.8/admin/healthstatus/selfaudit_search_thumb_0_0.webp) **NOTE:** After reviewing your search results, apply filters to narrow your data. See the -[View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information. +[View Reports](/docs/auditor/10.8/admin/reports/view.md) topic for additional information. **Step 4 –** After browsing your data, navigate to Tools to use the search results as intended. See -the [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) topic for additional information. +the [View and Search Collected Data](/docs/auditor/10.8/admin/search/overview.md) topic for additional information. ### Review Auditor Self-Audit Report @@ -48,7 +48,7 @@ Follow the steps to review the Self-audit report. **Step 2 –** Select the Netwrix Auditor Self-Audit report and click View. -![selfaudit_report](/images/auditor/10.7/admin/healthstatus/selfaudit_report.webp) +![selfaudit_report](/images/auditor/10.8/admin/healthstatus/selfaudit_report.webp) ## Netwrix Auditor Self-Audit Scope diff --git a/docs/auditor/10.8/admin/healthstatus/summaryemail.md b/docs/auditor/10.8/admin/healthstatus/summaryemail.md index 1fd7309a8a..c99eb126f3 100644 --- a/docs/auditor/10.8/admin/healthstatus/summaryemail.md +++ b/docs/auditor/10.8/admin/healthstatus/summaryemail.md @@ -9,8 +9,8 @@ sidebar_position: 30 Auditor Health Summary email includes all statistics on the product operations and health for the last 24 hours; it also notifies you about license status. By default, this email is generated daily at 7:00 AM and delivered to the recipient specified in the -[Notifications](/docs/auditor/10.7/admin/settings/notifications.md) settings. Email content is very similar to data -presented in the [Health Status Dashboard](/docs/auditor/10.7/admin/healthstatus/dashboard/overview.md). +[Notifications](/docs/auditor/10.8/admin/settings/notifications.md) settings. Email content is very similar to data +presented in the [Health Status Dashboard](/docs/auditor/10.8/admin/healthstatus/dashboard/overview.md). For greater usability, to depict overall product health state, the email includes a color indicator in the topmost section: green means Auditor had no issues while auditing your IT infrastructure, and @@ -18,7 +18,7 @@ red means there were some problems that require your attention. The email looks like shown below: -![email_thumb_0_0](/images/auditor/10.7/admin/healthstatus/email_thumb_0_0.webp) +![email_thumb_0_0](/images/auditor/10.8/admin/healthstatus/email_thumb_0_0.webp) The Monitoring Overview section of the email provides detail information only for the monitoring plans with issues. Successfully completed monitoring plans are not included. diff --git a/docs/auditor/10.8/admin/healthstatus/troubleshooting.md b/docs/auditor/10.8/admin/healthstatus/troubleshooting.md index 71902a7bb0..2b75fcad89 100644 --- a/docs/auditor/10.8/admin/healthstatus/troubleshooting.md +++ b/docs/auditor/10.8/admin/healthstatus/troubleshooting.md @@ -31,9 +31,9 @@ portal as described in the Creating a ticket with Customer portal section. 2. You can search or browse through the Knowledge Base articles here, or click **Create New Ticket**: - ![support_ticket_customer_portal_fixed](/images/auditor/10.7/admin/healthstatus/support_ticket_customer_portal_fixed.webp) + ![support_ticket_customer_portal_fixed](/images/auditor/10.8/admin/healthstatus/support_ticket_customer_portal_fixed.webp) 3. Fill in the form, describing the issue, and click **Open a ticket**. 4. After that, you will be able to attach the files you need (screenshots, emails, reports, etc.). -![support_ticket_customer_portal](/images/auditor/10.7/admin/healthstatus/support_ticket_customer_portal.webp) +![support_ticket_customer_portal](/images/auditor/10.8/admin/healthstatus/support_ticket_customer_portal.webp) diff --git a/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md b/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md index bab18a4e11..e65f8c5266 100644 --- a/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md @@ -9,13 +9,13 @@ sidebar_position: 40 **NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in the following topics: -- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data collection and activity monitoring configure necessary protocols and ports for inbound and outbound connections -- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to audit your IT systems -- [Active Directory](/docs/auditor/10.7/configuration/activedirectory/overview.md) – Configure data source as +- [Active Directory](/docs/auditor/10.8/configuration/activedirectory/overview.md) – Configure data source as required to be monitored Complete the following fields: @@ -27,14 +27,14 @@ Complete the following fields: | Monitor Active Directory partitions | Select which of your Active Directory environment partitions you want to audit. By default, Auditor only tracks changes to the Domain partition and the Configuration partition of the audited domain. If you also want to audit changes to the Schema partition, or to disable auditing of changes to the Configuration partition, select one of the following: - Domain—Stores users, computers, groups and other objects. Updates to this partition are replicated only to domain controllers within the domain. - Configuration—Stores configuration objects for the entire forest. Updates to this partition are replicated to all domain controllers in the forest. Configuration objects store the information on sites, services, directory partitions, etc. - Schema—Stores class and attribute definitions for all existing and possible Active Directory objects. Updates to this partition are replicated to all domain controllers in the forest. You cannot disable auditing the Domain partition for changes. | | Detect additional details | Specify additional information to include in reports and activity summaries. Select Group membershipif you want to include Group membership of the account under which the change was made. | | Specify data collection method | You can enable **network traffic compression.** If enabled, a Compression Service will be automatically launched on the audited computer, collecting and prefiltering data. This significantly improves data transfer and minimizes the impact on the target computer performance. | -| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [Active Directory](/docs/auditor/10.7/configuration/activedirectory/overview.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. | -| Collect data for state-in-time reports | Configure Auditor to store daily snapshots of your Active Directory domain configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) topic for additional information. The product updates the latest snapshot on the regular basis to keep users up-to-date on actual system state. Only the latest snapshot is available for reporting in Auditor. If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. For that, in the Manage historical snapshots section, click **Manage** and select the snapshots that you want to import. To import snapshots, you must be assigned the Global administrator or the Global reviewer role . Move the selected snapshots to the Snapshots available for reporting list using the arrow button. When finished, click **OK**. | +| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [Active Directory](/docs/auditor/10.8/configuration/activedirectory/overview.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. | +| Collect data for state-in-time reports | Configure Auditor to store daily snapshots of your Active Directory domain configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.8/admin/reports/types/stateintime/overview.md) topic for additional information. The product updates the latest snapshot on the regular basis to keep users up-to-date on actual system state. Only the latest snapshot is available for reporting in Auditor. If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. For that, in the Manage historical snapshots section, click **Manage** and select the snapshots that you want to import. To import snapshots, you must be assigned the Global administrator or the Global reviewer role . Move the selected snapshots to the Snapshots available for reporting list using the arrow button. When finished, click **OK**. | | Users | | -| Specify monitoring restrictions | Specify user accounts to exclude from data collection (and, therefore, search results, reports and Activity Summaries). To add a user to the exclusion list, click Add, then provide the user name in the _domain\user_ format. Consider the following: - Use NetBIOS format for domain name: _mydomain_ - Some audit data (events) may contain _System_ as the user (initiator) account name. To exclude such data, specify "_System_" when adding a user name here. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | +| Specify monitoring restrictions | Specify user accounts to exclude from data collection (and, therefore, search results, reports and Activity Summaries). To add a user to the exclusion list, click Add, then provide the user name in the _domain\user_ format. Consider the following: - Use NetBIOS format for domain name: _mydomain_ - Some audit data (events) may contain _System_ as the user (initiator) account name. To exclude such data, specify "_System_" when adding a user name here. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md)topic for additional information. | | Objects | | | Specify monitoring restrictions | Specify restrictions for the objects to monitor in your Active Directory. Use them to create the lists of specific objects to include and / or exclude from the monitoring scope (and, therefore, search results, reports and Activity Summaries). The following options are available: - Monitor all objects - **Include these objects** - **Exclude these objects** To create a list of inclusions / exclusions, click Add and enter object path using one of the following formats: - Canonical name, for example: _mydomain.local/Computers/filesrv01_ OR - Object path as shown in the "_What_" column of reports and search results, for example: _\local\mydomain\Computers\filesrv01_ You can use a wildcard (\*) to replace any number of characters in the path. See the examples below for more information. | -![Specify monitoring restrictions](/images/auditor/10.7/admin/monitoringplans/activedirectory/mp_data_source_ad_omit_example.webp) +![Specify monitoring restrictions](/images/auditor/10.8/admin/monitoringplans/activedirectory/mp_data_source_ad_omit_example.webp) Examples @@ -53,7 +53,7 @@ however, will not be monitored, meaning that, for example, its renaming will not In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous -exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic +exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md)topic for additional information. ## Enable Auditing of Active Directory Partitions @@ -94,10 +94,10 @@ Complete the following fields: | --------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | General | | | Specify AD container | Specify a whole AD domain, OU or container. Click **Browse** to select from the list of containers in your network. You can also: - Select a particular computer type to be audited within the chosen AD container: **Domain controllers, Servers (excluding domain controllers)**, or **Workstations**. - Click **Exclude** to specify AD domains, OUs, and containers you do not want to audit. In the Exclude Containers dialog, click Add and specify an object. The list of containers does not include child domains of trusted domains. Use other options **(Computer, IP range** to specify the target computers. | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. If using a group Managed Service Account (gMSA), you can specify only the account name in the _domain\account$_ format. Password field can be empty. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. Refer to the [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) topic for more information on using Netwrix Privilege Secure as an account for data collection. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the[Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. If using a group Managed Service Account (gMSA), you can specify only the account name in the _domain\account$_ format. Password field can be empty. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) topic for additional information. Refer to the [Permissions for Active Directory Auditing](/docs/auditor/10.8/configuration/activedirectory/permissions.md) topic for more information on using Netwrix Privilege Secure as an account for data collection. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the[Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. | | Containers and Computers | | | Monitor hidden shares | By default, Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). Select **Monitor user-defined hidden shares** if necessary. Even when this option is selected, the product will not collect data from administrative hidden shares such as: default system root or Windows directory (ADMIN$), default drive shares (D$, E$, etc.), shares used by printers to enable remote administration (PRINT$), etc. | -| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. Depending on the type of the object you want to exclude, select one of the following: - Add AD Container – Browse for a container to be excluded from being audited. You can select a whole AD domain, OU or container. - Add Computer – Provide the name of the computer you want to exclude as shown in the "_Where_" column of reports and Activity Summaries. For example, _backupsrv01.mydomain.local_. Wildcards (\*) are not supported. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | +| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. Depending on the type of the object you want to exclude, select one of the following: - Add AD Container – Browse for a container to be excluded from being audited. You can select a whole AD domain, OU or container. - Add Computer – Provide the name of the computer you want to exclude as shown in the "_Where_" column of reports and Activity Summaries. For example, _backupsrv01.mydomain.local_. Wildcards (\*) are not supported. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md)topic for additional information. | ## Domain @@ -106,17 +106,17 @@ Complete the following fields: | Option | Description | | --------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | Specify Active Directory domain | Specify the audited domain name in the FQDN format. For example, "_company.local_". | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select account type you want to use and enter credentials. The following choices are available: - User/password. The account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic for additional information. - Netwrix Privilege Secure. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select account type you want to use and enter credentials. The following choices are available: - User/password. The account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.8/requirements/gmsa.md) topic for additional information. - Netwrix Privilege Secure. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) topic for additional information. | Refer to the -[Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) +[Permissions for Active Directory Auditing](/docs/auditor/10.8/configuration/activedirectory/permissions.md) topic for more information on using Netwrix Privilege Secure as an account for data collection. ## Use Netwrix Privilege Secure as a Data Collecting Account Starting with version 10.7, you can use Netwrix Privilege Secure to manage the account for collecting data, after configuring the integration. See the -[Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information about +[Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) topic for additional information about integration and supported data sources. In this case, the credentials will not be stored by Netwrix Auditor. Instead, they will be managed by Netwrix Privilege Secure and provided on demand, ensuring password rotation or using temporary accounts for data collection. @@ -128,7 +128,7 @@ Follow the steps to use Netwrix Privilege Secure as an account for data collect **Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data collection. -![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) +![npsdatacollectingaccount](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccount.webp) **Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. Credential-based is the default option. Refer to the @@ -141,7 +141,7 @@ and to which Netwrix Auditor has the access through a Credential-based access po **NOTE:** Netwrix recommends using different credentials for different monitoring plans and data sources. -![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) +![npsdatacollectingaccountresourced](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) The second option is Resource-based. To use this option, you need to provide the Activity and Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure diff --git a/docs/auditor/10.8/admin/monitoringplans/activedirectory/scope.md b/docs/auditor/10.8/admin/monitoringplans/activedirectory/scope.md index 63e45e2727..d559ce04ca 100644 --- a/docs/auditor/10.8/admin/monitoringplans/activedirectory/scope.md +++ b/docs/auditor/10.8/admin/monitoringplans/activedirectory/scope.md @@ -8,10 +8,10 @@ sidebar_position: 10 You can fine-tune Netwrix Auditor by specifying data that you want to exclude from the Active Directory monitoring scope. You can apply restrictions to monitoring scope via the UI. See the -[Objects](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md) topic for additional information. +[Objects](/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md) topic for additional information. **_RECOMMENDED:_** Configure monitoring scope restrictions on the Active Directory monitoring plan -page. See the [Active Directory](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md) topic for additional information. +page. See the [Active Directory](/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md) topic for additional information. Follow the steps to exclude data from the Active Directory monitoring scope: diff --git a/docs/auditor/10.8/admin/monitoringplans/activitysummaryemail.md b/docs/auditor/10.8/admin/monitoringplans/activitysummaryemail.md index 124758da16..b5f3ba4bcb 100644 --- a/docs/auditor/10.8/admin/monitoringplans/activitysummaryemail.md +++ b/docs/auditor/10.8/admin/monitoringplans/activitysummaryemail.md @@ -17,7 +17,7 @@ different and do not show changes. The following Activity Summary example applies to Active Directory. Other Activity Summaries generated and delivered by Netwrix Auditor will vary slightly depending on the data source. -![ad_activitity_summary_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/ad_activitity_summary_thumb_0_0.webp) +![ad_activitity_summary_thumb_0_0](/images/auditor/10.8/admin/monitoringplans/ad_activitity_summary_thumb_0_0.webp) The example Activity Summary provides the following information on Active Directory changes: @@ -38,4 +38,4 @@ a plan, click Edit, and then select Update. A summary will be delivered to the s listing all activity that occurred since the last data collection. To disable Activity Summary Emails, you need to disable notifications in the settings. See the -[Notifications](/docs/auditor/10.7/admin/settings/notifications.md) topic for additional information. +[Notifications](/docs/auditor/10.8/admin/settings/notifications.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/monitoringplans/adfs.md b/docs/auditor/10.8/admin/monitoringplans/adfs.md index 22bf82ff9a..d74274ef58 100644 --- a/docs/auditor/10.8/admin/monitoringplans/adfs.md +++ b/docs/auditor/10.8/admin/monitoringplans/adfs.md @@ -9,13 +9,13 @@ sidebar_position: 50 **NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in the following topics: -- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data collection +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data collection and activity monitoring configure necessary protocols and ports for inbound and outbound connections -- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to audit your IT systems -- [AD FS](/docs/auditor/10.7/configuration/activedirectoryfederatedservices/overview.md) – Configure data source +- [AD FS](/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md) – Configure data source as required to be monitored Complete the following fields: @@ -25,7 +25,7 @@ Complete the following fields: | Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | | Schedule AD FS logons collection | Specify period for AD FS logons collection. | | Specify data collection method | You can enable network traffic compression. If enabled, a Compression Service will be automatically launched on the audited computer, collecting and pre-filtering data. This significantly improves data transfer and minimizes the impact on the target computer performance. | -| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. For a full list of audit settings required to collect comprehensive audit data and instructions on how to configure them, refer to [AD FS](/docs/auditor/10.7/configuration/activedirectoryfederatedservices/overview.md). | +| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. For a full list of audit settings required to collect comprehensive audit data and instructions on how to configure them, refer to [AD FS](/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md). | Review your data source settings and click **Add** to go back to your plan. The newly created data source will appear in the **Data source** list. As a next step, click **Add item** to specify an @@ -43,4 +43,4 @@ Complete the following fields: | Option | Description | | --------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Specify AD FS federation server | Provide a server name by entering its FQDN, NETBIOS or IPv4 address. You can click Browse to select a computer from the list of computers in your network. | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. | diff --git a/docs/auditor/10.8/admin/monitoringplans/create.md b/docs/auditor/10.8/admin/monitoringplans/create.md index 8d9056922f..a47b06b892 100644 --- a/docs/auditor/10.8/admin/monitoringplans/create.md +++ b/docs/auditor/10.8/admin/monitoringplans/create.md @@ -8,7 +8,7 @@ sidebar_position: 10 To create monitoring plans, user account must be assigned the _Global administrator_ in Auditor. Users with the _Configurator_ role can create plans only within a delegated folder. See the -[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. +[Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. To start creating a plan, do any of the following: @@ -35,20 +35,20 @@ data. ## Settings for Data Collection -![mp_wizard_step1](/images/auditor/10.7/admin/monitoringplans/mp_wizard_step1.webp) +![mp_wizard_step1](/images/auditor/10.8/admin/monitoringplans/mp_wizard_step1.webp) At this step of the wizard, specify the account that Auditor will use to access the data source, and general settings for data collection. -![mp_wizard_step2](/images/auditor/10.7/admin/monitoringplans/mp_wizard_step2.webp) +![mp_wizard_step2](/images/auditor/10.8/admin/monitoringplans/mp_wizard_step2.webp) | Option | Description | | --------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Specify the account for collecting data | If applicable, you can create a data collecting account in the following ways: - Not specified – Select this option if you want to choose the Netwrix Privilege Secure as the data collecting account for the Monitoring Plan. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. - User/password – Provide a username and password for the account that Auditor will use to collect data. By default, the user name is prepopulated with your account name. - gMSA – Use the group Managed Service Account (gMSA) as data collecting account. For more details about gMSA usage, see the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic. **NOTE:** If you want to audit network devices or Microsoft Entra ID (formerly Azure AD)/Office 365 infrastructure, you need to use _not specified_ account. Make sure the account has sufficient permissions to collect data. For a full list of the rights and permissions, and instructions on how to configure them, refer to the[Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md). Netwrix recommends creating a special service account with extended permissions. When you configure a monitoring plan for the first time, the account you specify for data collection will be set as default. | -| Enable network traffic compression | If selected, this option instructs Auditor to deploy a special utility that will run on the audited computers and do the following: - Collect and pre-filter audit data - Compress data and forward it to Auditor Server. This approach helps to optimize load balance and reduce network traffic. So, using this option can be recommended especially for distributed networks with remote locations that have limited bandwidth. See the [Network Traffic Compression](/docs/auditor/10.7/admin/healthstatus/networktrafficcompression.md) topic for additional information. | -| Adjust audit settings automatically | Auditor can configure audit settings in your environment automatically. Select Adjust audit settings automatically. In this case, Auditor will continually check and enforce the relevant audit policies. For some data sources (currently, Active Directory and Logon Activity) you will be offered to launch a special utility that will detect current audit settings, check them against requirements and then adjust them automatically. See the [Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md) topic for additional information. You may also want to apply audit settings via GPO (for example, for Windows Servers). Auditor has certain limitations when configuring audit settings for NetApp and Dell Data Storage. See the [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) topic for additional information. If any conflicts are detected with your current settings, automatic audit configuration will not be performed. Select this option if you want to audit file shares on NetApp Data ONTAP 7 and 8 in 7-mode. For NetApp Clustered Data ONTAP 8 and ONTAP 9, only audit settings for file shares can be configured automatically, other settings must be applied manually. If you plan to monitor EMC Isilon, clear the checkbox. Currently, Auditor cannot configure audit on Dell Isilon appliances automatically. If you want to audit Dell VNX/VNXe, select Adjust audit settings automatically, but only audit settings for file shares will configured, the rest of settings must be configured manually. For a full list of audit settings and instructions on how to configure them manually, see the [Supported Data Sources](/docs/auditor/10.7/requirements/supporteddatasources/supporteddatasources.md) for additional information. | -| Launch Audit Configuration Assistant | Click to launch a specially intended utility that will assess your environment readiness for monitoring and adjust audit settings, if necessary. The tool will be launched in a new window. See the [Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md) topic for additional information. | -| Collect data for state-in-time reports | State-in-time reports are based on the daily configuration snapshots of your audited systems; they help you to analyze particular aspects of the environment. State-in-time configuration snapshots are also used for IT risks assessment metrics and reports. This data collection option is available if you are creating a monitoring plan for any of the following data sources: - Active Directory - File Servers - Windows Server - Group Policy - SharePoint - SharePoint Online - Exchange Online - SQL Server - VMware See the [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) and [IT Risk Assessment Overview ](/docs/auditor/10.7/admin/riskassessment/overview.md) topics for additional information. | +| Specify the account for collecting data | If applicable, you can create a data collecting account in the following ways: - Not specified – Select this option if you want to choose the Netwrix Privilege Secure as the data collecting account for the Monitoring Plan. See the [Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) topic for additional information. - User/password – Provide a username and password for the account that Auditor will use to collect data. By default, the user name is prepopulated with your account name. - gMSA – Use the group Managed Service Account (gMSA) as data collecting account. For more details about gMSA usage, see the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.8/requirements/gmsa.md) topic. **NOTE:** If you want to audit network devices or Microsoft Entra ID (formerly Azure AD)/Office 365 infrastructure, you need to use _not specified_ account. Make sure the account has sufficient permissions to collect data. For a full list of the rights and permissions, and instructions on how to configure them, refer to the[Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md). Netwrix recommends creating a special service account with extended permissions. When you configure a monitoring plan for the first time, the account you specify for data collection will be set as default. | +| Enable network traffic compression | If selected, this option instructs Auditor to deploy a special utility that will run on the audited computers and do the following: - Collect and pre-filter audit data - Compress data and forward it to Auditor Server. This approach helps to optimize load balance and reduce network traffic. So, using this option can be recommended especially for distributed networks with remote locations that have limited bandwidth. See the [Network Traffic Compression](/docs/auditor/10.8/admin/healthstatus/networktrafficcompression.md) topic for additional information. | +| Adjust audit settings automatically | Auditor can configure audit settings in your environment automatically. Select Adjust audit settings automatically. In this case, Auditor will continually check and enforce the relevant audit policies. For some data sources (currently, Active Directory and Logon Activity) you will be offered to launch a special utility that will detect current audit settings, check them against requirements and then adjust them automatically. See the [Audit Configuration Assistant](/docs/auditor/10.8/tools/auditconfigurationassistant.md) topic for additional information. You may also want to apply audit settings via GPO (for example, for Windows Servers). Auditor has certain limitations when configuring audit settings for NetApp and Dell Data Storage. See the [File Servers](/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md) topic for additional information. If any conflicts are detected with your current settings, automatic audit configuration will not be performed. Select this option if you want to audit file shares on NetApp Data ONTAP 7 and 8 in 7-mode. For NetApp Clustered Data ONTAP 8 and ONTAP 9, only audit settings for file shares can be configured automatically, other settings must be applied manually. If you plan to monitor EMC Isilon, clear the checkbox. Currently, Auditor cannot configure audit on Dell Isilon appliances automatically. If you want to audit Dell VNX/VNXe, select Adjust audit settings automatically, but only audit settings for file shares will configured, the rest of settings must be configured manually. For a full list of audit settings and instructions on how to configure them manually, see the [Supported Data Sources](/docs/auditor/10.8/requirements/supporteddatasources/supporteddatasources.md) for additional information. | +| Launch Audit Configuration Assistant | Click to launch a specially intended utility that will assess your environment readiness for monitoring and adjust audit settings, if necessary. The tool will be launched in a new window. See the [Audit Configuration Assistant](/docs/auditor/10.8/tools/auditconfigurationassistant.md) topic for additional information. | +| Collect data for state-in-time reports | State-in-time reports are based on the daily configuration snapshots of your audited systems; they help you to analyze particular aspects of the environment. State-in-time configuration snapshots are also used for IT risks assessment metrics and reports. This data collection option is available if you are creating a monitoring plan for any of the following data sources: - Active Directory - File Servers - Windows Server - Group Policy - SharePoint - SharePoint Online - Exchange Online - SQL Server - VMware See the [State–In–Time Reports](/docs/auditor/10.8/admin/reports/types/stateintime/overview.md) and [IT Risk Assessment Overview ](/docs/auditor/10.8/admin/riskassessment/overview.md) topics for additional information. | ## Default SQL Server Instance @@ -56,7 +56,7 @@ To provide searching, alerting and reporting capabilities, Auditor needs an SQL data will be stored in the databases. To store data from the data sources included in the monitoring plan, the wizard creates an Audit Database for each plan. At this step, you should specify the default SQL Server instance that will host Auditor databases. See the -[Requirements for SQL Server to Store Audit Data](/docs/auditor/10.7/requirements/sqlserver.md) topic for +[Requirements for SQL Server to Store Audit Data](/docs/auditor/10.8/requirements/sqlserver.md) topic for additional information. Alternatively, you can instruct Auditor not to store data to the databases but only to the @@ -81,7 +81,7 @@ Select one of the following options: Services on the local machine. This SQL Server will be used as default host for Auditor databases. It is strongly recommended that you plan for your databases first, as described in - [Requirements for SQL Server to Store Audit Data](/docs/auditor/10.7/requirements/sqlserver.md) section. + [Requirements for SQL Server to Store Audit Data](/docs/auditor/10.8/requirements/sqlserver.md) section. Remember that database size in SQL Server Express edition may be insufficient for your audited infrastructure. @@ -113,9 +113,9 @@ It is strongly recommended to target each monitoring plan at a separate database You can use default settings for your SQL Server instance or modify them (e.g., use a different authentication method or user). You can also change these settings later. See the -[Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topic for additional information. +[Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topic for additional information. -![mp_wizard_step_db_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/mp_wizard_step_db_thumb_0_0.webp) +![mp_wizard_step_db_thumb_0_0](/images/auditor/10.8/admin/monitoringplans/mp_wizard_step_db_thumb_0_0.webp) Configure the following: @@ -131,14 +131,14 @@ name on it. Global settings that apply to all databases with audit data (including retention period and SSRS server used for reporting) are available on the Audit Database page of Auditor settings. See the -[Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topic for additional information. +[Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topic for additional information. ## SMTP Server Settings When you create the first monitoring plan, you are prompted to specify the email settings that will be used for activity and health summaries, reports and alerts delivery. For the monitoring plans that follow, Netwrix Auditor will automatically detect SMTP settings; however, for your first plan -you should provide them manually. See the [Notifications](/docs/auditor/10.7/admin/settings/notifications.md) topic for +you should provide them manually. See the [Notifications](/docs/auditor/10.8/admin/settings/notifications.md) topic for additional information. You can skip this step if you do not want to receive email notifications, or configure SMTP settings @@ -146,8 +146,8 @@ later, as described in the related section. ## Email Notification Recipients -Specify who will receive daily emails: [Activity Summary Email](/docs/auditor/10.7/admin/monitoringplans/activitysummaryemail.md) on changes -in the monitored infrastructure, and [Health Summary Email](/docs/auditor/10.7/admin/healthstatus/summaryemail.md) on +Specify who will receive daily emails: [Activity Summary Email](/docs/auditor/10.8/admin/monitoringplans/activitysummaryemail.md) on changes +in the monitored infrastructure, and [Health Summary Email](/docs/auditor/10.8/admin/healthstatus/summaryemail.md) on Auditor operations and health. Click Add Recipient and provide email address. diff --git a/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md b/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md index 96bf412891..6521f8b6ea 100644 --- a/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md +++ b/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md @@ -20,11 +20,11 @@ want to use and enter credentials. The following choices are available: information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the - [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic for additional + [Use Group Managed Service Account (gMSA)](/docs/auditor/10.8/requirements/gmsa.md) topic for additional information. - Netwrix Privilege Secure. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the - [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. + [Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) topic for additional information. - Application and secret for Microsoft 365 with modern authentication. @@ -33,30 +33,30 @@ data source. | Data source | Required rights and permissions: | | ------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Active Directory | [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) | -| Active Directory Federation Services | [Permissions for AD FS Auditing](/docs/auditor/10.7/configuration/activedirectoryfederatedservices/permissions.md) | -| Microsoft Entra ID (formerly Azure AD), Exchange Online, SharePoint Online, MS Teams | [Permissions for Microsoft Entra ID Auditing](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/permissions.md) [Permissions for Exchange Online Auditing](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/permissions.md) [Permissions for SharePoint Online Auditing ](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/permissions/permissions.md) [Permissions for Teams Auditing](/docs/auditor/10.7/configuration/microsoft365/teams/permissions/permissions.md) | -| Exchange | [Permissions for Exchange Auditing](/docs/auditor/10.7/configuration/exchange/permissions.md) | -| Windows File Servers | [Permissions for Windows File Server Auditing](/docs/auditor/10.7/configuration/fileservers/windows/permissions.md) | -| Dell Isilon | [Permissions for Dell Isilon/PowerScale Auditing](/docs/auditor/10.7/configuration/fileservers/dellisilon/permissions.md) | -| Dell VNX/VNXe/Unity | [Permissions for Dell Data Storage Auditing](/docs/auditor/10.7/configuration/fileservers/delldatastorage/permissions.md) | -| NetApp | [Permissions for NetApp Auditing](/docs/auditor/10.7/configuration/fileservers/netappcmode/permissions.md) | -| Nutanix Files | [Permissions for Nutanix Files Auditing](/docs/auditor/10.7/configuration/fileservers/nutanix/permissions.md) | -| Qumulo | [Permissions for Qumulo Auditing](/docs/auditor/10.7/configuration/fileservers/qumulo/permissions.md) | -| Synology | [Permissions for Synology Auditing](/docs/auditor/10.7/configuration/fileservers/synology/permissions.md) | -| Network Devices | [Permissions for Network Devices Auditing](/docs/auditor/10.7/configuration/networkdevices/permissions.md) | -| Oracle Database | [Permissions for Oracle Database Auditing](/docs/auditor/10.7/configuration/oracle/permissions.md) | -| SharePoint | [Permissions for SharePoint Auditing](/docs/auditor/10.7/configuration/sharepoint/permissions.md) | -| SQL Server | [Permissions for SQL Server Auditing ](/docs/auditor/10.7/configuration/sqlserver/permissions.md) | -| VMware | [Permissions for VMware Server Auditing ](/docs/auditor/10.7/configuration/vmware/permissions.md) | -| Windows Server (including DNS and DHCP) | [Permissions for Windows Server Auditing ](/docs/auditor/10.7/configuration/windowsserver/permissions.md) | -| Event Log (including IIS)—collected with Event Log Manager | [Permissions for Windows Server Auditing ](/docs/auditor/10.7/configuration/windowsserver/permissions.md) | -| Group Policy | [Permissions for Group Policy Auditing ](/docs/auditor/10.7/configuration/grouppolicy/permissions.md) | -| Logon Activity | [Permissions for Logon Activity Auditing ](/docs/auditor/10.7/configuration/logonactivity/permissions.md) | +| Active Directory | [Permissions for Active Directory Auditing](/docs/auditor/10.8/configuration/activedirectory/permissions.md) | +| Active Directory Federation Services | [Permissions for AD FS Auditing](/docs/auditor/10.8/configuration/activedirectoryfederatedservices/permissions.md) | +| Microsoft Entra ID (formerly Azure AD), Exchange Online, SharePoint Online, MS Teams | [Permissions for Microsoft Entra ID Auditing](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/permissions.md) [Permissions for Exchange Online Auditing](/docs/auditor/10.8/configuration/microsoft365/exchangeonline/permissions.md) [Permissions for SharePoint Online Auditing ](/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/permissions.md) [Permissions for Teams Auditing](/docs/auditor/10.8/configuration/microsoft365/teams/permissions/permissions.md) | +| Exchange | [Permissions for Exchange Auditing](/docs/auditor/10.8/configuration/exchange/permissions.md) | +| Windows File Servers | [Permissions for Windows File Server Auditing](/docs/auditor/10.8/configuration/fileservers/windows/permissions.md) | +| Dell Isilon | [Permissions for Dell Isilon/PowerScale Auditing](/docs/auditor/10.8/configuration/fileservers/dellisilon/permissions.md) | +| Dell VNX/VNXe/Unity | [Permissions for Dell Data Storage Auditing](/docs/auditor/10.8/configuration/fileservers/delldatastorage/permissions.md) | +| NetApp | [Permissions for NetApp Auditing](/docs/auditor/10.8/configuration/fileservers/netappcmode/permissions.md) | +| Nutanix Files | [Permissions for Nutanix Files Auditing](/docs/auditor/10.8/configuration/fileservers/nutanix/permissions.md) | +| Qumulo | [Permissions for Qumulo Auditing](/docs/auditor/10.8/configuration/fileservers/qumulo/permissions.md) | +| Synology | [Permissions for Synology Auditing](/docs/auditor/10.8/configuration/fileservers/synology/permissions.md) | +| Network Devices | [Permissions for Network Devices Auditing](/docs/auditor/10.8/configuration/networkdevices/permissions.md) | +| Oracle Database | [Permissions for Oracle Database Auditing](/docs/auditor/10.8/configuration/oracle/permissions.md) | +| SharePoint | [Permissions for SharePoint Auditing](/docs/auditor/10.8/configuration/sharepoint/permissions.md) | +| SQL Server | [Permissions for SQL Server Auditing ](/docs/auditor/10.8/configuration/sqlserver/permissions.md) | +| VMware | [Permissions for VMware Server Auditing ](/docs/auditor/10.8/configuration/vmware/permissions.md) | +| Windows Server (including DNS and DHCP) | [Permissions for Windows Server Auditing ](/docs/auditor/10.8/configuration/windowsserver/permissions.md) | +| Event Log (including IIS)—collected with Event Log Manager | [Permissions for Windows Server Auditing ](/docs/auditor/10.8/configuration/windowsserver/permissions.md) | +| Group Policy | [Permissions for Group Policy Auditing ](/docs/auditor/10.8/configuration/grouppolicy/permissions.md) | +| Logon Activity | [Permissions for Logon Activity Auditing ](/docs/auditor/10.8/configuration/logonactivity/permissions.md) | | Inactive Users in Active Directory—collected with Inactive User Tracker | In the target domain - A member of the Domain Admins group | | Password Expiration in Active Directory—collected with Password Expiration Notifier | In the target domain - A member of the Domain Users group | | User Activity | On the target server - A member of the local Administrators group | -| Sensitive Data Discovery | [Sensitive Data Discovery ](/docs/auditor/10.7/admin/settings/sensitivedatadiscovery.md) | +| Sensitive Data Discovery | [Sensitive Data Discovery ](/docs/auditor/10.8/admin/settings/sensitivedatadiscovery.md) | ## Update Credentials for Account @@ -76,8 +76,8 @@ Follow the steps to update credentials for the accounts used by Auditor: **Step 5 –** Review the account configuration scope and click **Update password** next to this account. -![Password Management](/images/auditor/10.7/admin/monitoringplans/updatecredentials.webp) +![Password Management](/images/auditor/10.8/admin/monitoringplans/updatecredentials.webp) **Step 6 –** Save your edits. -See the [General](/docs/auditor/10.7/admin/settings/general.md) topic for additional information. +See the [General](/docs/auditor/10.8/admin/settings/general.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/monitoringplans/datasources.md b/docs/auditor/10.8/admin/monitoringplans/datasources.md index 7407e36bfa..9fd1272ee5 100644 --- a/docs/auditor/10.8/admin/monitoringplans/datasources.md +++ b/docs/auditor/10.8/admin/monitoringplans/datasources.md @@ -16,7 +16,7 @@ can, for example: To add, modify and remove data sources, enable or disable monitoring, you must be assigned the Global administrator role in the product or the Configurator role on the plan. See the -[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. +[Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. ## Modify Data Source Settings @@ -27,7 +27,7 @@ Follow the steps to modify data source settings. **Step 2 –** Within the monitoring plan window, highlight the data source (the first one is the row right under the blue table header) and click Edit data source on the right: -![Data source settings](/images/auditor/10.7/admin/monitoringplans/mp_edit_data_source_thumb_0_0.webp) +![Data source settings](/images/auditor/10.8/admin/monitoringplans/mp_edit_data_source_thumb_0_0.webp) **Step 3 –** Modify data source settings as you need. @@ -35,22 +35,22 @@ right under the blue table header) and click Edit data source on the right: Review the following for additional information: -- [Active Directory](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md) -- [Active Directory Federation Services ](/docs/auditor/10.7/admin/monitoringplans/adfs.md) -- [Microsoft Entra ID](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md) -- [Exchange](/docs/auditor/10.7/admin/monitoringplans/exchange/overview.md) -- [Exchange Online](/docs/auditor/10.7/admin/monitoringplans/exchangeonline/overview.md) -- [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) -- [Group Policy](/docs/auditor/10.7/admin/monitoringplans/grouppolicy/overview.md) -- [Logon Activity](/docs/auditor/10.7/admin/monitoringplans/logonactivity/overview.md) -- [MS Teams](/docs/auditor/10.7/admin/monitoringplans/msteams.md) -- [Network Devices](/docs/auditor/10.7/admin/monitoringplans/networkdevices.md) -- [Oracle Database](/docs/auditor/10.7/admin/monitoringplans/oracle/overview.md) -- [SharePoint](/docs/auditor/10.7/admin/monitoringplans/sharepoint/overview.md) -- [SharePoint Online](/docs/auditor/10.7/admin/monitoringplans/sharepointonline/overview.md) -- [SQL Server](/docs/auditor/10.7/admin/monitoringplans/sqlserver/overview.md) -- [User Activity](/docs/auditor/10.7/admin/monitoringplans/overview_1.md) -- [VMware](/docs/auditor/10.7/admin/monitoringplans/vmware/overview.md) +- [Active Directory](/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md) +- [Active Directory Federation Services ](/docs/auditor/10.8/admin/monitoringplans/adfs.md) +- [Microsoft Entra ID](/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md) +- [Exchange](/docs/auditor/10.8/admin/monitoringplans/exchange/overview.md) +- [Exchange Online](/docs/auditor/10.8/admin/monitoringplans/exchangeonline/overview.md) +- [File Servers](/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md) +- [Group Policy](/docs/auditor/10.8/admin/monitoringplans/grouppolicy/overview.md) +- [Logon Activity](/docs/auditor/10.8/admin/monitoringplans/logonactivity/overview.md) +- [MS Teams](/docs/auditor/10.8/admin/monitoringplans/msteams.md) +- [Network Devices](/docs/auditor/10.8/admin/monitoringplans/networkdevices.md) +- [Oracle Database](/docs/auditor/10.8/admin/monitoringplans/oracle/overview.md) +- [SharePoint](/docs/auditor/10.8/admin/monitoringplans/sharepoint/overview.md) +- [SharePoint Online](/docs/auditor/10.8/admin/monitoringplans/sharepointonline/overview.md) +- [SQL Server](/docs/auditor/10.8/admin/monitoringplans/sqlserver/overview.md) +- [User Activity](/docs/auditor/10.8/admin/monitoringplans/overview_1.md) +- [VMware](/docs/auditor/10.8/admin/monitoringplans/vmware/overview.md) - [Windows File Share](fileservers/scope.md#windows-file-share) Also, you can add a data source to the monitoring plan, or remove a data source that is no longer @@ -83,19 +83,19 @@ associated with your data source. | ----------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Active Directory Group Policy Exchange Logon Activity | [Domain](activedirectory/overview.md#domain) | | Active Directory Federation Services | [Federation Server](adfs.md#federation-server) | -| Microsoft Entra ID Exchange Online SharePoint Online Microsoft Teams | [Microsoft Entra ID](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md) | -| File Servers (including Windows file server, Dell, NetApp, Nutanix File server, Synology, and Qumulo) | [AD Container](activedirectory/overview.md#ad-container) [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) [Dell Isilon](fileservers/overview.md#dell-isilon) [Dell VNX VNXe](fileservers/overview.md#dell-vnx-vnxe) [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) [NetApp](fileservers/overview.md#netapp) [Windows File Share](fileservers/scope.md#windows-file-share) [Nutanix SMB Shares](fileservers/overview.md#nutanix-smb-shares) [Qumulo](fileservers/overview.md#qumulo) [Synology](fileservers/overview.md#synology) By default, Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). If you want to monitor user-defined hidden shares, select the related option in the monitored item settings. Remember that administrative hidden shares like default system root or Windows directory (ADMIN$), default drive shares (D$, E$), etc. will not be monitored. See the topics on the monitored items for details. | +| Microsoft Entra ID Exchange Online SharePoint Online Microsoft Teams | [Microsoft Entra ID](/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md) | +| File Servers (including Windows file server, Dell, NetApp, Nutanix File server, Synology, and Qumulo) | [AD Container](activedirectory/overview.md#ad-container) [File Servers](/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md) [Dell Isilon](fileservers/overview.md#dell-isilon) [Dell VNX VNXe](fileservers/overview.md#dell-vnx-vnxe) [File Servers](/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md) [NetApp](fileservers/overview.md#netapp) [Windows File Share](fileservers/scope.md#windows-file-share) [Nutanix SMB Shares](fileservers/overview.md#nutanix-smb-shares) [Qumulo](fileservers/overview.md#qumulo) [Synology](fileservers/overview.md#synology) By default, Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). If you want to monitor user-defined hidden shares, select the related option in the monitored item settings. Remember that administrative hidden shares like default system root or Windows directory (ADMIN$), default drive shares (D$, E$), etc. will not be monitored. See the topics on the monitored items for details. | | Network Devices | [Syslog Device](networkdevices.md#syslog-device) [Cisco Meraki Dashboard](networkdevices.md#cisco-meraki-dashboard) | | Oracle Database | [Oracle Database Instance](oracle/overview.md#oracle-database-instance) | | SharePoint | [SharePoint Farm](sharepoint/overview.md#sharepoint-farm) | | SQL Server | [SQL Server Instance](sqlserver/items.md#sql-server-instance) [SQL Server Availability Group](sqlserver/items.md#sql-server-availability-group) | | VMware | [VMware ESX/ESXi/vCenter](vmware/overview.md#vmware-esxesxivcenter) | -| Windows Server User Activity | [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) [AD Container](activedirectory/overview.md#ad-container) [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) | -| Netwrix API | [Integration API](/docs/auditor/10.7/api/overview.md) | +| Windows Server User Activity | [File Servers](/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md) [AD Container](activedirectory/overview.md#ad-container) [File Servers](/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md) | +| Netwrix API | [Integration API](/docs/auditor/10.8/api/overview.md) | To add, modify and remove items, you must be assigned the Global administrator role in the product or the **Configurator** role on the plan. See the -[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md)topic for additional information. +[Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md)topic for additional information. Follow the steps to add a new item to a data source: @@ -119,22 +119,22 @@ examples on how to use omit functionality in Auditor. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous -exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for +exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md)topic for additional information. | Use case | Related documentation | | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Active Directory** | | -| I want to omit all activity by a specific service account or service accounts with specific naming pattern. | [Active Directory](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md) | -| If Netwrix user is responsible just for a limited scope within corporate AD, s/he needs to omit everything else. | [Active Directory](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md) - Always both activity and state in time data are omitted. - In group/Not in group filters don't not process groups from omitted OUs. | +| I want to omit all activity by a specific service account or service accounts with specific naming pattern. | [Active Directory](/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md) | +| If Netwrix user is responsible just for a limited scope within corporate AD, s/he needs to omit everything else. | [Active Directory](/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md) - Always both activity and state in time data are omitted. - In group/Not in group filters don't not process groups from omitted OUs. | | **Logon Activity** | | -| I want to omit domain logons by a specific service account or service accounts with specific naming pattern. | [Logon Activity](/docs/auditor/10.7/admin/monitoringplans/logonactivity/overview.md) | +| I want to omit domain logons by a specific service account or service accounts with specific naming pattern. | [Logon Activity](/docs/auditor/10.8/admin/monitoringplans/logonactivity/overview.md) | | **File Servers** (including Windows file server, Dell, NetApp, Nutanix File server) | | | I have a server named _StationWin16_ where I can't install .Net 4.5 in OU where I keep all member servers. I want to suppress errors from this server by excluding it from the Netwrix auditing scope. | [AD Container](activedirectory/overview.md#ad-container) | -| A Security Officer wants to monitor a file share but s/he does not have access to a certain folder on this share. Then, s/he does not want the product to monitor this folder at all. | [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) [Dell Isilon](fileservers/overview.md#dell-isilon) [Dell VNX VNXe](fileservers/overview.md#dell-vnx-vnxe) [NetApp](fileservers/overview.md#netapp) [Windows File Share](fileservers/scope.md#windows-file-share) [Nutanix SMB Shares](fileservers/overview.md#nutanix-smb-shares) | -| A Security Officer wants to monitor a file share but s/he does not have access to a certain folder on this share. Then, s/he does not want the product to monitor this folder at all. | [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) [Dell Isilon](fileservers/overview.md#dell-isilon) [Dell VNX VNXe](fileservers/overview.md#dell-vnx-vnxe) [NetApp](fileservers/overview.md#netapp) [Windows File Share](fileservers/scope.md#windows-file-share) [Nutanix SMB Shares](fileservers/overview.md#nutanix-smb-shares) | -| A Security Officer wants to monitor a file share, but it contains a folder with a huge amount of objects, so s/he does not want Netwrix Auditor to collect State-in-Time data for this folder. | [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) [Dell Isilon](fileservers/overview.md#dell-isilon) [Dell VNX VNXe](fileservers/overview.md#dell-vnx-vnxe) [NetApp](fileservers/overview.md#netapp) [Windows File Share](fileservers/scope.md#windows-file-share) [Nutanix SMB Shares](fileservers/overview.md#nutanix-smb-shares) | -| I want to exclude specific computers within an IP range from the Netwrix auditing scope. | [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) | +| A Security Officer wants to monitor a file share but s/he does not have access to a certain folder on this share. Then, s/he does not want the product to monitor this folder at all. | [File Servers](/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md) [Dell Isilon](fileservers/overview.md#dell-isilon) [Dell VNX VNXe](fileservers/overview.md#dell-vnx-vnxe) [NetApp](fileservers/overview.md#netapp) [Windows File Share](fileservers/scope.md#windows-file-share) [Nutanix SMB Shares](fileservers/overview.md#nutanix-smb-shares) | +| A Security Officer wants to monitor a file share but s/he does not have access to a certain folder on this share. Then, s/he does not want the product to monitor this folder at all. | [File Servers](/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md) [Dell Isilon](fileservers/overview.md#dell-isilon) [Dell VNX VNXe](fileservers/overview.md#dell-vnx-vnxe) [NetApp](fileservers/overview.md#netapp) [Windows File Share](fileservers/scope.md#windows-file-share) [Nutanix SMB Shares](fileservers/overview.md#nutanix-smb-shares) | +| A Security Officer wants to monitor a file share, but it contains a folder with a huge amount of objects, so s/he does not want Netwrix Auditor to collect State-in-Time data for this folder. | [File Servers](/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md) [Dell Isilon](fileservers/overview.md#dell-isilon) [Dell VNX VNXe](fileservers/overview.md#dell-vnx-vnxe) [NetApp](fileservers/overview.md#netapp) [Windows File Share](fileservers/scope.md#windows-file-share) [Nutanix SMB Shares](fileservers/overview.md#nutanix-smb-shares) | +| I want to exclude specific computers within an IP range from the Netwrix auditing scope. | [File Servers](/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md) | | **SQL Server** | | | I want to know if _corp\administrator_ user is messing with SQL data. | [SQL Server Instance](sqlserver/items.md#sql-server-instance) | | As a Auditor administrator I want to exclude the _domain\nwxserviceaccount_ service account activity from SQL server audit so that I get reports without changes made by automatic systems. | [SQL Server Instance](sqlserver/items.md#sql-server-instance) | @@ -144,6 +144,6 @@ additional information. | As a Auditor Administrator I want to exclude shared _PublicList_ from read audit. | [SharePoint Farm](sharepoint/overview.md#sharepoint-farm) | | Windows Server | | | I have a server named StationWin16 where I can't install .Net 4.5 in OU where I keep all member servers. I want to suppress errors from this server by excluding it from the Netwrix auditing scope. | [AD Container](activedirectory/overview.md#ad-container) | -| I want to exclude specific computers within an IP range from the Netwrix auditing scope. | [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) | +| I want to exclude specific computers within an IP range from the Netwrix auditing scope. | [File Servers](/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md) | | VMware | | | I have a virtual machine named "testvm" I use for testing purposes, so I want to exclude it from being monitored. | [VMware ESX/ESXi/vCenter](vmware/overview.md#vmware-esxesxivcenter) | diff --git a/docs/auditor/10.8/admin/monitoringplans/delegation.md b/docs/auditor/10.8/admin/monitoringplans/delegation.md index 23cdd3948a..963786b559 100644 --- a/docs/auditor/10.8/admin/monitoringplans/delegation.md +++ b/docs/auditor/10.8/admin/monitoringplans/delegation.md @@ -14,7 +14,7 @@ To keep the monitoring process secure, Netwrix suggests configuring role-based a control ensures that only appropriate users can modify the product configuration or view audit data, based on your company policies and the user's job responsibilities. -![rbac-01](/images/auditor/10.7/admin/monitoringplans/rbac-01.webp) +![rbac-01](/images/auditor/10.8/admin/monitoringplans/rbac-01.webp) Roles are described briefly in the table below and explained in detail in the next topic. @@ -101,7 +101,7 @@ Do one of the following: | To... | Do... | | ------------------------ | --------------------------------------------------------------------------------------------------------------------------- | | Assign a role | 1. Select Add User. 2. In the dialog that opens, specify a user (or a group) and a role. | -| Revoke a role assignment | - Click ![delete](/images/auditor/10.7/admin/monitoringplans/delete.webp) next to the user. | +| Revoke a role assignment | - Click ![delete](/images/auditor/10.8/admin/monitoringplans/delete.webp) next to the user. | **Step 4 –** Click **Save** or **Save&Close**. @@ -114,7 +114,7 @@ The Browser role is required to generate reports. It is granted on all reports delegated scope. If for some reason Auditor is unable to grant the Browser role, configure it manually. See the -[SQL Server Reporting Services](/docs/auditor/10.7/requirements/sqlserverreportingservice.md) topic for +[SQL Server Reporting Services](/docs/auditor/10.8/requirements/sqlserverreportingservice.md) topic for additional information. ### Default Role Assignments @@ -149,10 +149,10 @@ Netwrix Auditor Client Users group. Specify users you want to be included in this group. -![Roles_Groups](/images/auditor/10.7/admin/monitoringplans/roles_groups.webp) +![Roles_Groups](/images/auditor/10.8/admin/monitoringplans/roles_groups.webp) **NOTE:** For additional information about User Activity video access management, see the -[Configure Video Recordings Playback Settings](/docs/auditor/10.7/configuration/useractivity/videorecordings.md) +[Configure Video Recordings Playback Settings](/docs/auditor/10.8/configuration/useractivity/videorecordings.md) topic. ## Provide Access to a Limited Set of Data diff --git a/docs/auditor/10.8/admin/monitoringplans/exchange/overview.md b/docs/auditor/10.8/admin/monitoringplans/exchange/overview.md index afc6790d57..b876183ef5 100644 --- a/docs/auditor/10.8/admin/monitoringplans/exchange/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/exchange/overview.md @@ -9,13 +9,13 @@ sidebar_position: 70 **NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in the following topics: -- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data collection and activity monitoring configure necessary protocols and ports for inbound and outbound connections -- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to audit your IT systems -- [Exchange](/docs/auditor/10.7/configuration/exchange/overview.md) – Configure data source as required to be +- [Exchange](/docs/auditor/10.8/configuration/exchange/overview.md) – Configure data source as required to be monitored Complete the following fields: @@ -25,13 +25,13 @@ Complete the following fields: | Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | | Detect additional details | Specify additional information to include in reports and activity summaries. Select Group membershipif you want to include Group membership of the account under which the change was made. | | Specify data collection method | You can enable **network traffic compression.** If enabled, a Compression Service will be automatically launched on the audited computer, collecting and prefiltering data. This significantly improves data transfer and minimizes the impact on the target computer performance. | -| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [Exchange](/docs/auditor/10.7/configuration/exchange/overview.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. | -| Collect data on non-owner access to mailboxes | Enable monitoring of unauthorized access to mailboxes within your Exchange Online organization. Configure the following: - Notify users if someone gained access to their mailboxes — Select this checkbox if you want to notify users on non-owner access events to their mailboxes. - Notify only specific users — Select this checkbox and click Add Recipient to specify the list of users who will receive notifications on non-owner access to their mailboxes. Users not included in this list will not be notified. - Enable automatic audit configuration— If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. See the [Exchange](/docs/auditor/10.7/configuration/exchange/overview.md) and [Exchange Online](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/overview.md) topics for additional information about the audit settings required for Auditor to collect comprehensive audit data and instructions on how to configure them. If you select to automatically configure audit in the target environment, your current audit settings will be checked on each data collection and adjusted if necessary. | +| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [Exchange](/docs/auditor/10.8/configuration/exchange/overview.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. | +| Collect data on non-owner access to mailboxes | Enable monitoring of unauthorized access to mailboxes within your Exchange Online organization. Configure the following: - Notify users if someone gained access to their mailboxes — Select this checkbox if you want to notify users on non-owner access events to their mailboxes. - Notify only specific users — Select this checkbox and click Add Recipient to specify the list of users who will receive notifications on non-owner access to their mailboxes. Users not included in this list will not be notified. - Enable automatic audit configuration— If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. See the [Exchange](/docs/auditor/10.8/configuration/exchange/overview.md) and [Exchange Online](/docs/auditor/10.8/configuration/microsoft365/exchangeonline/overview.md) topics for additional information about the audit settings required for Auditor to collect comprehensive audit data and instructions on how to configure them. If you select to automatically configure audit in the target environment, your current audit settings will be checked on each data collection and adjusted if necessary. | Review your data source settings and click **Add** to go back to your plan. The newly created data source will appear in the **Data source** list. As a next step, click **Add item** to specify an object for monitoring. See the -[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +[Add Items for Monitoring](/docs/auditor/10.8/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional information. ## Domain @@ -41,7 +41,7 @@ Complete the following fields: | Option | Description | | --------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | Specify Active Directory domain | Specify the audited domain name in the FQDN format. For example, "_company.local_". | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select account type you want to use and enter credentials. The following choices are available: - User/password. The account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic for additional information. - Netwrix Privilege Secure. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select account type you want to use and enter credentials. The following choices are available: - User/password. The account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.8/requirements/gmsa.md) topic for additional information. - Netwrix Privilege Secure. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) topic for additional information. | -See the [Permissions for Exchange Auditing](/docs/auditor/10.7/configuration/exchange/permissions.md) topic +See the [Permissions for Exchange Auditing](/docs/auditor/10.8/configuration/exchange/permissions.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md b/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md index cb365cc132..cb9741be3f 100644 --- a/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md @@ -9,13 +9,13 @@ sidebar_position: 90 **NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in the following topics: -- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data collection and activity monitoring configure necessary protocols and ports for inbound and outbound connections -- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to audit your IT systems -- [File Servers](/docs/auditor/10.7/configuration/fileservers/overview.md) – Configure data source as required +- [File Servers](/docs/auditor/10.8/configuration/fileservers/overview.md) – Configure data source as required to be monitored @@ -86,16 +86,16 @@ the related option in the monitored item settings. Administrative hidden shares like default system root or Windows directory (_ADMIN$_), default drive shares (_D$, E$_), etc. will not be monitored. See the -[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +[Add Items for Monitoring](/docs/auditor/10.8/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional information. _Remember,_ before adding your monitored items, examine the considerations, limitations and recommendations provided in the following sections: -- [DFS-Related Constraints](/docs/auditor/10.7/configuration/fileservers/windows/overview.md#dfs-related-constraints) -- [Supported File Servers and Devices](/docs/auditor/10.7/configuration/fileservers/overview.md#supported-file-servers-and-devices) -- [State-in-Time Data](/docs/auditor/10.7/configuration/fileservers/overview.md#state-in-time-data) -- [Sensitive Data](/docs/auditor/10.7/configuration/fileservers/overview.md#sensitive-data) +- [DFS-Related Constraints](/docs/auditor/10.8/configuration/fileservers/windows/overview.md#dfs-related-constraints) +- [Supported File Servers and Devices](/docs/auditor/10.8/configuration/fileservers/overview.md#supported-file-servers-and-devices) +- [State-in-Time Data](/docs/auditor/10.8/configuration/fileservers/overview.md#state-in-time-data) +- [Sensitive Data](/docs/auditor/10.8/configuration/fileservers/overview.md#sensitive-data) ## Dell VNX VNXe @@ -107,17 +107,17 @@ Complete the following fields: | ----------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | General | | | Specify Dell VNX/VNXe, Celerra or Unity storage array | Provide a server name by entering its FQDN, NETBIOS or IPv4 address. You can click Browse to select a computer from the list of computers in your network. | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. | | Scope | | | Monitor hidden shares | By default, Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). Select **Monitor user-defined hidden shares** if necessary. Even when this option is selected, the product will not collect data from administrative hidden shares such as: default system root or Windows directory (ADMIN$), default drive shares (D$, E$, etc.), shares used by printers to enable remote administration (PRINT$), etc. | -| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. See the Fine-tune Monitoring Scope for additional information on how to narrow your monitoring scope. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | +| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. See the Fine-tune Monitoring Scope for additional information on how to narrow your monitoring scope. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md)topic for additional information. | ### Fine-tune Monitoring Scope To audit all file shares, under Specify monitoring restrictions, select Monitor all file shares in the array. -![item_emc_scope_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/fileservers/item_emc_scope_thumb_0_0.webp) +![item_emc_scope_thumb_0_0](/images/auditor/10.8/admin/monitoringplans/fileservers/item_emc_scope_thumb_0_0.webp) You can also create lists of specific file shares to include and/or exclude from being audited. @@ -169,7 +169,7 @@ to the specified shared folder, its subfolders and files. - All actions — Exclude all actions of the selected users - These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_. -![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) +![Specify Filters](/images/auditor/10.8/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) **Step 3 –** After configuring all filters, click **Add** to save them and return to the item settings. @@ -185,9 +185,9 @@ Complete the following fields: | Access Zone | Enter the name of access zone partition within your EMC Isilon cluster. For example, _zone_account_ | | OneFS web administration interface URL | Enter Dell Isilon web administration URL (e.g., _https://isiloncluster.corp.lab:8080_). This URL is used to get configuration details about your Isilon cluster via OneFS API. | | File Share UNC path to audit logs | Path to the file share located on a Dell Isilon with event log files (e.g., _\\srv\netwrix_audit$\logs_). | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. | | Scope | | -| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. See the Fine-tune Monitoring ScopeFine-tune Monitoring Scopetopic for additional information about how to narrow your monitoring scope. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | +| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. See the Fine-tune Monitoring ScopeFine-tune Monitoring Scopetopic for additional information about how to narrow your monitoring scope. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md)topic for additional information. | ### Configure the Scope @@ -247,7 +247,7 @@ to the specified shared folder, its subfolders and files. - All actions — Exclude all actions of the selected users - These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_. -![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) +![Specify Filters](/images/auditor/10.8/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) **Step 3 –** After configuring all filters, click **Add** to save them and return to the item settings. @@ -261,14 +261,14 @@ Complete the following fields: | General | | | Specify NetApp file server | Provide a server name by entering its FQDN, NETBIOS or IPv4 address. You can click Browse to select a computer from the list of computers in your network. | | File share UNC path to audit logs | Select one of the following: - Detect automatically—If selected, a shared resource will be detected automatically. - Use this path—UNC path to the file share located on a NetApp Filer with event log files (e.g., _\\CORP\ETC$\log_). | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. | | ONTAPI/ONTAP REST API | | | Specify protocol for accessing ONTAPI/ONTAP REST API | Select one of the following: - Detect automatically—If selected, a connection protocol will be detected automatically. - HTTP - HTTPS Refer to [Netwrix Auditor Installation and Configuration Guide](https://www.netwrix.com/download/documents/Netwrix_Auditor_Installation_Configuration_Guide.pdf) for detailed instructions on how to enable HTTP or HTTPS admin access. NOTE: ONTAP REST API works only over HTTPS protocol | | Specify management interface | Select management interface to connect to ONTAPI/ONTAP REST API. If you want to use custom management interface for ONTAPI/ONTAP REST API, select Custom and provide a server name by entering its FQDN, NETBIOS or IP address. | -| Specify account for connecting to ONTAPI/ONTAP REST API | Select an account to connect to NetApp and collect data through ONTAPI/ONTAP REST API. If you want to use a specific account (other than the one you specified on the General tab), select **Custom** and enter credentials. The credentials are case sensitive. Take into consideration that even if a custom account is specified, the account selected on the General tab must be a member of the Builtin\Administrators group and have sufficient permissions to access audit logs shared folder and audited shares. [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) | +| Specify account for connecting to ONTAPI/ONTAP REST API | Select an account to connect to NetApp and collect data through ONTAPI/ONTAP REST API. If you want to use a specific account (other than the one you specified on the General tab), select **Custom** and enter credentials. The credentials are case sensitive. Take into consideration that even if a custom account is specified, the account selected on the General tab must be a member of the Builtin\Administrators group and have sufficient permissions to access audit logs shared folder and audited shares. [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) | | Scope | | | Monitor hidden shares | By default, Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). Select **Monitor user-defined hidden shares** if necessary. Even when this option is selected, the product will not collect data from administrative hidden shares such as: default system root or Windows directory (ADMIN$), default drive shares (D$, E$, etc.), shares used by printers to enable remote administration (PRINT$), etc. **CAUTION:** Monitoring of non-default hidden shares is not supported for NetApp servers in 7-mode. | -| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. Configure Scope how to narrow your monitoring scope. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | +| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. Configure Scope how to narrow your monitoring scope. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md)topic for additional information. | ### Configure Scope @@ -325,7 +325,7 @@ to the specified shared folder, its subfolders and files. - All actions — Exclude all actions of the selected users - These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_. -![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) +![Specify Filters](/images/auditor/10.8/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) **Step 3 –** After configuring all filters, click **Add** to save them and return to the item settings. @@ -335,10 +335,10 @@ settings. **NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in the following topics: -- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data collection and activity monitoring configure necessary protocols and ports for inbound and outbound connections -- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to audit your IT systems Complete the following fields: @@ -359,15 +359,15 @@ Actions reported by Auditor vary depending on the file server type and the audit - Specify data collection method – You can enable **network traffic compression.** If enabled, a Compression Service will be automatically launched on the audited computer, collecting and prefiltering data. This significantly improves data transfer and minimizes the impact on the target computer performance. -- Configure audit settings – You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [Supported Data Sources](/docs/auditor/10.7/requirements/supporteddatasources/supporteddatasources.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. Netwrix Auditor can configure the following settings: +- Configure audit settings – You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [Supported Data Sources](/docs/auditor/10.8/requirements/supporteddatasources/supporteddatasources.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. Netwrix Auditor can configure the following settings: - Policy Check - Policy Adjust -- Collect data for state-in-time reports – Configure Auditor to store daily snapshots of your system configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) topic for additional information. When auditing file servers, changes to effective access permissions can be tracked in addition to audit permissions. By default, Combination of file and share permissions is tracked. File permissions define who has access to local files and folders. Share permissions provide or deny access to the same resources over the network. The combination of both determines the final access permissions for a shared folder—the more restrictive permissions are applied. Upon selecting Combination of file and share permissions only the resultant set will be written to the Audit Database. Select File permissions option too if you want to see difference between permissions applied locally and the effective file and share permissions set. To disable auditing of effective access, unselect all checkboxes under Include details on effective permissions. In the Schedule state-in-time data collection section, you can select a custom weekly interval for snapshots collection. Click Modify and select day(s) of week you want your snapshot to be collected. In the Manage historical snapshots section, you can click **Manage** and select the snapshots that you want to import to the Audit Database to generate a report on the data source's state at the specific moment in the past. You must be assigned the Global administrator or the Global reviewer role to import snapshots. Move the selected snapshots to the Snapshots available for reporting list using the arrow button. The product updates the latest snapshot on the regular basis to keep users up to date on actual system state. Users can also configure Only the latest snapshot is available for reporting in Auditor. If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. +- Collect data for state-in-time reports – Configure Auditor to store daily snapshots of your system configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.8/admin/reports/types/stateintime/overview.md) topic for additional information. When auditing file servers, changes to effective access permissions can be tracked in addition to audit permissions. By default, Combination of file and share permissions is tracked. File permissions define who has access to local files and folders. Share permissions provide or deny access to the same resources over the network. The combination of both determines the final access permissions for a shared folder—the more restrictive permissions are applied. Upon selecting Combination of file and share permissions only the resultant set will be written to the Audit Database. Select File permissions option too if you want to see difference between permissions applied locally and the effective file and share permissions set. To disable auditing of effective access, unselect all checkboxes under Include details on effective permissions. In the Schedule state-in-time data collection section, you can select a custom weekly interval for snapshots collection. Click Modify and select day(s) of week you want your snapshot to be collected. In the Manage historical snapshots section, you can click **Manage** and select the snapshots that you want to import to the Audit Database to generate a report on the data source's state at the specific moment in the past. You must be assigned the Global administrator or the Global reviewer role to import snapshots. Move the selected snapshots to the Snapshots available for reporting list using the arrow button. The product updates the latest snapshot on the regular basis to keep users up to date on actual system state. Users can also configure Only the latest snapshot is available for reporting in Auditor. If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. Review your data source settings and click **Add** to go back to your plan. The newly created data source will appear in the **Data source** list. As a next step, click **Add item** to specify an -object for monitoring. See the [Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional information. +object for monitoring. See the [Add Items for Monitoring](/docs/auditor/10.8/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional information. ## Nutanix SMB Shares @@ -377,10 +377,10 @@ Complete the following fields: | -------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | **General** | | | Specify Nutanix File Server | Provide a server name by entering its FQDN, NETBIOS or IPv4 address. You can click Browse to select a computer from the list of computers in your network. If you need to audit a 3-node cluster, it is recommended to use FQDN or NETBIOS name. | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for more information. | -| Specify listening port for incoming connections | Provide the name of the TCP port to listen to notifications on the operations with Nutanix file shares. Default is **9898**. For details on how to open the port, refer to the [Nutanix Ports](/docs/auditor/10.7/configuration/fileservers/nutanix/ports.md) topic. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for more information. | +| Specify listening port for incoming connections | Provide the name of the TCP port to listen to notifications on the operations with Nutanix file shares. Default is **9898**. For details on how to open the port, refer to the [Nutanix Ports](/docs/auditor/10.8/configuration/fileservers/nutanix/ports.md) topic. | | **Nutanix File Server REST API** | | -| Specify account for connecting to Nutanix File Server REST API | Specify the account that will be used to connect to Nutanix REST API. This account should have sufficient privileges on the Nutanix File Server. For details, refer to [Create User Account to Access Nutanix REST API](/docs/auditor/10.7/configuration/fileservers/nutanix/useraccount.md). | +| Specify account for connecting to Nutanix File Server REST API | Specify the account that will be used to connect to Nutanix REST API. This account should have sufficient privileges on the Nutanix File Server. For details, refer to [Create User Account to Access Nutanix REST API](/docs/auditor/10.8/configuration/fileservers/nutanix/useraccount.md). | | **Scope** | | | Monitor hidden shares | By default, Netwrix Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). Select **Monitor user-defined hidden shares** if necessary. Even when this option is selected, the product will not collect data from administrative hidden shares such as: default system root or Windows directory (ADMIN$), default drive shares (D$, E$, etc.), shares used by printers to enable remote administration (PRINT$), etc. | | Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. Refer to Configure Scope for detailed instructions on how to configure your monitoring scope. Currently, auditing is available for SMB shares only. Auditing of NFS shares is not supported due to known limitations. | @@ -440,7 +440,7 @@ to the specified shared folder, its subfolders and files. - All actions — Exclude all actions of the selected users - These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_. -![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) +![Specify Filters](/images/auditor/10.8/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) **Step 3 –** After configuring all filters, click **Add** to save them and return to the item settings. @@ -453,7 +453,7 @@ Complete the following fields: | -------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | General | | | Specify a file server | Provide UNC path to a file server. See the section below for special considerations. Do not specify a default file share mapped to a local drive (e.g., \\Server\e$). | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. | | Event Collection | | | Specify a host or network resource | Provide UNC path to a file server or an IP range of servers you want to get activity events from. You can select to collect event data from the same server or provide a custom server or IP range. | | Specify port and protocol for incoming connections | Use **Port** and **Protocol** to provide the port required for incoming connections (default is **UDP port 514**). | @@ -468,7 +468,7 @@ Complete the following fields: | -------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | General | | | Specify a file server | Provide UNC path to a file server. See the section below for special considerations. Do not specify a default file share mapped to a local drive (e.g., \\Server\e$). | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. | | Event Collection | | | Specify a host or network resource | Provide UNC path to a file server or an IP range of servers you want to get activity events from. You can select to collect event data from the same server or provide a custom server or IP range. | | Specify port and protocol for incoming connections | Use **Port** and **Protocol** to provide the port required for incoming connections (default is **UDP port 514**). | diff --git a/docs/auditor/10.8/admin/monitoringplans/fileservers/scope.md b/docs/auditor/10.8/admin/monitoringplans/fileservers/scope.md index 03d79aa4e3..ae15ff603f 100644 --- a/docs/auditor/10.8/admin/monitoringplans/fileservers/scope.md +++ b/docs/auditor/10.8/admin/monitoringplans/fileservers/scope.md @@ -10,7 +10,7 @@ You can specify data that you want to include into / exclude from the Windows Fi Filer, and Dell Data Storage (formerly EMC) monitoring scope. For that, you can configure monitoring scope in Auditor client UI, as explained in the related section: -- [File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) +- [File Servers](/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md) - Windows File Share Besides, you can configure exclusions for file servers audit using the special txt files (omit @@ -85,7 +85,7 @@ to the specified shared folder, its subfolders and files. - All actions — Exclude all actions of the selected users - These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_. -![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) +![Specify Filters](/images/auditor/10.8/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) **Step 3 –** After configuring all filters, click **Add** to save them and return to the item settings. diff --git a/docs/auditor/10.8/admin/monitoringplans/fileservers/windowsfileserver.md b/docs/auditor/10.8/admin/monitoringplans/fileservers/windowsfileserver.md index c7a466f5b3..daef83a007 100644 --- a/docs/auditor/10.8/admin/monitoringplans/fileservers/windowsfileserver.md +++ b/docs/auditor/10.8/admin/monitoringplans/fileservers/windowsfileserver.md @@ -9,10 +9,10 @@ sidebar_position: 10 **NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in the following topics: -- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data collection and activity monitoring configure necessary protocols and ports for inbound and outbound connections -- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to audit your IT systems ## Windows File Share @@ -23,9 +23,9 @@ Complete the following fields: | --------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | General | | | Specify Windows file share | Provide UNC path to a shared resource. See the section below for special considerations. Do not specify a default file share mapped to a local drive (e.g., \\Server\e$). | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) topic for additional information. | | Scope | | -| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. See the Configure Scope topic for additional information on how to narrow your monitoring scope. By default, Netwrix Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). If you want to monitor user-defined hidden shares, select the related option in the monitored item settings. Remember that administrative hidden shares like default system root or Windows directory (ADMIN$), default drive shares (D$, E$), etc. will not be monitored. See the topics on the monitored items for details. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | +| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. See the Configure Scope topic for additional information on how to narrow your monitoring scope. By default, Netwrix Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). If you want to monitor user-defined hidden shares, select the related option in the monitored item settings. Remember that administrative hidden shares like default system root or Windows directory (ADMIN$), default drive shares (D$, E$), etc. will not be monitored. See the topics on the monitored items for details. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md)topic for additional information. | ### Configure Scope @@ -63,7 +63,7 @@ to the specified shared folder, its subfolders and files. - All actions — Exclude all actions of the selected users - These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_. -![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) +![Specify Filters](/images/auditor/10.8/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) **Step 3 –** After configuring all filters, click **Add** to save them and return to the item settings. @@ -102,10 +102,10 @@ Complete the following fields: | --------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | General | | | Specify AD container | Specify a whole AD domain, OU or container. Click **Browse** to select from the list of containers in your network. You can also: - Select a particular computer type to be audited within the chosen AD container: **Domain controllers, Servers (excluding domain controllers)**, or **Workstations**. - Click **Exclude** to specify AD domains, OUs, and containers you do not want to audit. In the Exclude Containers dialog, click Add and specify an object. The list of containers does not include child domains of trusted domains. Use other options **(Computer, IP range** to specify the target computers. | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. If using a group Managed Service Account (gMSA), you can specify only the account name in the _domain\account$_ format. Password field can be empty. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. Refer to the [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) topic for more information on using Netwrix Privilege Secure as an account for data collection. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the[Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. If using a group Managed Service Account (gMSA), you can specify only the account name in the _domain\account$_ format. Password field can be empty. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) topic for additional information. Refer to the [Permissions for Active Directory Auditing](/docs/auditor/10.8/configuration/activedirectory/permissions.md) topic for more information on using Netwrix Privilege Secure as an account for data collection. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the[Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. | | Containers and Computers | | | Monitor hidden shares | By default, Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). Select **Monitor user-defined hidden shares** if necessary. Even when this option is selected, the product will not collect data from administrative hidden shares such as: default system root or Windows directory (ADMIN$), default drive shares (D$, E$, etc.), shares used by printers to enable remote administration (PRINT$), etc. | -| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. Depending on the type of the object you want to exclude, select one of the following: - Add AD Container – Browse for a container to be excluded from being audited. You can select a whole AD domain, OU or container. - Add Computer – Provide the name of the computer you want to exclude as shown in the "_Where_" column of reports and Activity Summaries. For example, _backupsrv01.mydomain.local_. Wildcards (\*) are not supported. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | +| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. Depending on the type of the object you want to exclude, select one of the following: - Add AD Container – Browse for a container to be excluded from being audited. You can select a whole AD domain, OU or container. - Add Computer – Provide the name of the computer you want to exclude as shown in the "_Where_" column of reports and Activity Summaries. For example, _backupsrv01.mydomain.local_. Wildcards (\*) are not supported. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md)topic for additional information. | ## IP Range @@ -115,7 +115,7 @@ Complete the following fields: | --------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | General | | | Specify IP range | Specify an IP range for the audited computers. To exclude computers from within the specified range, click **Exclude**. Enter the IP subrange you want to exclude, and click **Add**. | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. | | Scope | | | Monitor hidden shares | By default, Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). Select **Monitor user-defined hidden shares** if necessary. Even when this option is selected, the product will not collect data from administrative hidden shares such as: default system root or Windows directory (ADMIN$), default drive shares (D$, E$, etc.), shares used by printers to enable remote administration (PRINT$), etc. | @@ -132,7 +132,7 @@ Complete the following fields: | --------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | General | | | Specify a computer | Provide a server name by entering its FQDN, NETBIOS or IPv4 address. You can click Browse to select a computer from the list of computers in your network. | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select account type you want to use and enter credentials. The following choices are available: - User/password. The account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic for additional information. - Netwrix Privilege Secure. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select account type you want to use and enter credentials. The following choices are available: - User/password. The account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.8/requirements/gmsa.md) topic for additional information. - Netwrix Privilege Secure. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) topic for additional information. | | Scope | | | Monitor hidden shares | By default, Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). Select **Monitor user-defined hidden shares** if necessary. Even when this option is selected, the product will not collect data from administrative hidden shares such as: default system root or Windows directory (ADMIN$), default drive shares (D$, E$, etc.), shares used by printers to enable remote administration (PRINT$), etc. | | Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. | @@ -143,7 +143,7 @@ By default, both user activity and state-in-time data will be collected for the However, you can narrow your monitoring scope by specifying certain locations, user accounts or actions to exclude . -![Add Item (Computer)](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclusions_thumb_0_0.webp) +![Add Item (Computer)](/images/auditor/10.8/admin/monitoringplans/fileservers/item_computer_exclusions_thumb_0_0.webp) Click Add Exclusion, then follow the steps in the Specify Filters dialog: @@ -177,7 +177,7 @@ Follow the steps to exclude specific user activity. - All actions — Exclude all actions of the selected users - These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_ -![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users.webp) +![Specify Filters](/images/auditor/10.8/admin/monitoringplans/fileservers/item_computer_exclude_users.webp) After configuring all filters, click **Add** to save them and return to the item settings. @@ -185,7 +185,7 @@ After configuring all filters, click **Add** to save them and return to the item Starting with version 10.7, you can use Netwrix Privilege Secure to manage the account for collecting data, after configuring the integration. See the -[Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information about +[Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) topic for additional information about integration and supported data sources. In this case, the credentials will not be stored by Netwrix Auditor. Instead, they will be managed by Netwrix Privilege Secure and provided on demand, ensuring password rotation or using temporary accounts for data collection. @@ -197,7 +197,7 @@ Follow the steps to use Netwrix Privilege Secure as an account for data collect **Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data collection. -![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) +![npsdatacollectingaccount](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccount.webp) **Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. Credential-based is the default option. Refer to the @@ -210,7 +210,7 @@ and to which Netwrix Auditor has the access through a Credential-based access po **NOTE:** Netwrix recommends using different credentials for different monitoring plans and data sources. -![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) +![npsdatacollectingaccountresourced](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) The second option is Resource-based. To use this option, you need to provide the Activity and Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure diff --git a/docs/auditor/10.8/admin/monitoringplans/finetune.md b/docs/auditor/10.8/admin/monitoringplans/finetune.md index cc3a2f13e1..3fda03684b 100644 --- a/docs/auditor/10.8/admin/monitoringplans/finetune.md +++ b/docs/auditor/10.8/admin/monitoringplans/finetune.md @@ -11,7 +11,7 @@ collection settings. To modify most plan settings, you must be assigned the Global administrator role in the product or the Configurator role on the plan. The Global reviewer or this plan's Reviewer can modify Activity -Summary recipients. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional +Summary recipients. See the [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. Follow the steps to edit your plan settings: @@ -27,10 +27,10 @@ Follow the steps to edit your plan settings: | General | | | Name Description | Update a plan name or its description. | | Data Collection | | -| Specify the account for collecting data - Not specified - User/Password - gMSA | Specify a new user name and a password for the account that Auditor  will use to collect data. Make sure the account has sufficient permissions to collect data. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information about the rights and permissions, and instructions on how to configure them. | +| Specify the account for collecting data - Not specified - User/Password - gMSA | Specify a new user name and a password for the account that Auditor  will use to collect data. Make sure the account has sufficient permissions to collect data. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information about the rights and permissions, and instructions on how to configure them. | | Audit Database | | | Disable security intelligence and make data available only in activity summaries | Keep this checkbox cleared if you want Auditor to write data to the Audit Database. | -| Use default SQL Server settings | Select this checkbox to write data to a SQL Server instance with connection parameters as shown in **Settings** > **Audit Database**. See the [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topic for additional information. | +| Use default SQL Server settings | Select this checkbox to write data to a SQL Server instance with connection parameters as shown in **Settings** > **Audit Database**. See the [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topic for additional information. | | Specify custom connection parameters | Specify this option to use non-default settings (e.g., use a different authentication method or user). Make sure to store data on the same SQL Server instance. Otherwise some data may become unavailable for search and reporting. | | Notifications | | | Specify Activity Summary delivery schedule | Configure how often you want to receive an Activity Summary. By default, it is delivered once a day, at 3 AM. You can specify custom delivery time and frequency (e.g., every 6 hours starting 12 AM — at 12 AM, 6 AM, 12 PM, 6 PM). | diff --git a/docs/auditor/10.8/admin/monitoringplans/grouppolicy/overview.md b/docs/auditor/10.8/admin/monitoringplans/grouppolicy/overview.md index b7ee4a2b3a..5c816ec5e3 100644 --- a/docs/auditor/10.8/admin/monitoringplans/grouppolicy/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/grouppolicy/overview.md @@ -9,13 +9,13 @@ sidebar_position: 100 **NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in the following topics: -- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data collection and activity monitoring configure necessary protocols and ports for inbound and outbound connections -- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to audit your IT systems -- [Group Policy](/docs/auditor/10.7/configuration/grouppolicy/overview.md) – Configure data source as required +- [Group Policy](/docs/auditor/10.8/configuration/grouppolicy/overview.md) – Configure data source as required to be monitored Complete the following fields: @@ -23,15 +23,15 @@ Complete the following fields: | Option | Description | | -------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | -| Prerequisites | Netwrix Auditor will automatically look up additional system components and prompt you to install those that are missing. In case all required components have been already installed, this section will be omitted. See the [Other Components](/docs/auditor/10.7/requirements/software.md#other-components) topic for additional information. | +| Prerequisites | Netwrix Auditor will automatically look up additional system components and prompt you to install those that are missing. In case all required components have been already installed, this section will be omitted. See the [Other Components](/docs/auditor/10.8/requirements/software.md#other-components) topic for additional information. | | Detect additional details | Specify additional information to include in reports and activity summaries. Select Group membershipif you want to include Group membership of the account under which the change was made. | | Specify data collection method | You can enable **network traffic compression.** If enabled, a Compression Service will be automatically launched on the audited computer, collecting and prefiltering data. This significantly improves data transfer and minimizes the impact on the target computer performance. | -| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [Group Policy](/docs/auditor/10.7/configuration/grouppolicy/overview.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. | +| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [Group Policy](/docs/auditor/10.8/configuration/grouppolicy/overview.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. | Review your data source settings and click **Add** to go back to your plan. The newly created data source will appear in the **Data source** list. As a next step, click **Add item** to specify an object for monitoring. See the -[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +[Add Items for Monitoring](/docs/auditor/10.8/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional information. ## Domain @@ -41,13 +41,13 @@ Complete the following fields: | Option | Description | | --------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | Specify Active Directory domain | Specify the audited domain name in the FQDN format. For example, "_company.local_". | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select account type you want to use and enter credentials. The following choices are available: - User/password. The account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic for additional information. - Netwrix Privilege Secure. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select account type you want to use and enter credentials. The following choices are available: - User/password. The account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.8/requirements/gmsa.md) topic for additional information. - Netwrix Privilege Secure. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) topic for additional information. | ## Use Netwrix Privilege Secure as a Data Collecting Account Starting with version 10.7, you can use Netwrix Privilege Secure to manage the account for collecting data, after configuring the integration. See the -[Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information about +[Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) topic for additional information about integration and supported data sources. In this case, the credentials will not be stored by Netwrix Auditor. Instead, they will be managed by Netwrix Privilege Secure and provided on demand, ensuring password rotation or using temporary accounts for data collection. @@ -59,7 +59,7 @@ Follow the steps to use Netwrix Privilege Secure as an account for data collect **Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data collection. -![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) +![npsdatacollectingaccount](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccount.webp) **Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. Credential-based is the default option. Refer to the @@ -72,7 +72,7 @@ and to which Netwrix Auditor has the access through a Credential-based access po **NOTE:** Netwrix recommends using different credentials for different monitoring plans and data sources. -![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) +![npsdatacollectingaccountresourced](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) The second option is Resource-based. To use this option, you need to provide the Activity and Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure diff --git a/docs/auditor/10.8/admin/monitoringplans/logonactivity/overview.md b/docs/auditor/10.8/admin/monitoringplans/logonactivity/overview.md index 2387412238..ef55f3d07a 100644 --- a/docs/auditor/10.8/admin/monitoringplans/logonactivity/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/logonactivity/overview.md @@ -9,13 +9,13 @@ sidebar_position: 110 **NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in the following topics: -- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data collection and activity monitoring configure necessary protocols and ports for inbound and outbound connections -- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to audit your IT systems -- [Logon Activity](/docs/auditor/10.7/configuration/logonactivity/overview.md) – Configure data source as +- [Logon Activity](/docs/auditor/10.8/configuration/logonactivity/overview.md) – Configure data source as required to be monitored Complete the following fields: @@ -26,14 +26,14 @@ Complete the following fields: | Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | | Fine-tune logon activity monitoring | Specify interval for Netwrix Auditor to collect data on logon activity and add successful non-interactive logons to your auditing scope, if necessary. | | Specify data collection method | You can enable **network traffic compression.** If enabled, a Compression Service will be automatically launched on the audited computer, collecting and prefiltering data. This significantly improves data transfer and minimizes the impact on the target computer performance. | -| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [Logon Activity](/docs/auditor/10.7/configuration/logonactivity/overview.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. | +| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [Logon Activity](/docs/auditor/10.8/configuration/logonactivity/overview.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. | | Users | | -| Specify monitoring restrictions | Select the users to be excluded from search results, reports and Activity Summaries. To add users to the list, click Add. Then, provide the user name in the domain\user format. For example: _mydomain\user1_. Consider the following: - Use NetBIOS domain name format. - You can provide the "_System_" value to exclude events containing the “_System_” instead of an account name in the “_Who_” column. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | +| Specify monitoring restrictions | Select the users to be excluded from search results, reports and Activity Summaries. To add users to the list, click Add. Then, provide the user name in the domain\user format. For example: _mydomain\user1_. Consider the following: - Use NetBIOS domain name format. - You can provide the "_System_" value to exclude events containing the “_System_” instead of an account name in the “_Who_” column. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md)topic for additional information. | Review your data source settings and click **Add** to go back to your plan. The newly created data source will appear in the **Data source** list. As a next step, click **Add item** to specify an object for monitoring. See the -[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +[Add Items for Monitoring](/docs/auditor/10.8/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional information. ## Domain @@ -43,13 +43,13 @@ Complete the following fields: | Option | Description | | --------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | Specify Active Directory domain | Specify the audited domain name in the FQDN format. For example, "_company.local_". | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select account type you want to use and enter credentials. The following choices are available: - User/password. The account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic for additional information. - Netwrix Privilege Secure. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select account type you want to use and enter credentials. The following choices are available: - User/password. The account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.8/requirements/gmsa.md) topic for additional information. - Netwrix Privilege Secure. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) topic for additional information. | ## Use Netwrix Privilege Secure as a Data Collecting Account Starting with version 10.7, you can use Netwrix Privilege Secure to manage the account for collecting data, after configuring the integration. See the -[Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information about +[Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) topic for additional information about integration and supported data sources. In this case, the credentials will not be stored by Netwrix Auditor. Instead, they will be managed by Netwrix Privilege Secure and provided on demand, ensuring password rotation or using temporary accounts for data collection. @@ -61,7 +61,7 @@ Follow the steps to use Netwrix Privilege Secure as an account for data collect **Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data collection. -![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) +![npsdatacollectingaccount](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccount.webp) **Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. Credential-based is the default option. Refer to the @@ -74,7 +74,7 @@ and to which Netwrix Auditor has the access through a Credential-based access po **NOTE:** Netwrix recommends using different credentials for different monitoring plans and data sources. -![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) +![npsdatacollectingaccountresourced](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) The second option is Resource-based. To use this option, you need to provide the Activity and Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure diff --git a/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md b/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md index 90e7ce0f2b..2f7f7a72f9 100644 --- a/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md @@ -9,20 +9,20 @@ sidebar_position: 60 **NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in the following topics: -- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data collection and activity monitoring configure necessary protocols and ports for inbound and outbound connections -- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to audit your IT systems -- [Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/overview.md) – Configure +- [Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/overview.md) – Configure data source as required to be monitored You can use the following data collecting account options: - Username and password. - Integration with the Netwrix Privilege Secure. See the - [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) and How to Add Microsoft Entra ID + [Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) and How to Add Microsoft Entra ID Monitoring Plan Using Netwrix Privilege Secure topics for additional information. - Application and secret for Microsoft 365 with modern authentication. @@ -41,18 +41,18 @@ Complete the following fields: | -------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | | Monitor Microsoft Entra ID logon activity | Specify what types of logon events you want to monitor: successful or failed, performed through Windows and SQL authentication. - Failed logons - Successful logons | -| Collect data for state-in-time reports | Configure Netwrix Auditor to store daily snapshots of your system configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) topic for additional information. | +| Collect data for state-in-time reports | Configure Netwrix Auditor to store daily snapshots of your system configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.8/admin/reports/types/stateintime/overview.md) topic for additional information. | Review your data source settings and click **Add** to go back to your plan. The newly created data source will appear in the **Data source** list. As a next step, click **Add item** to specify an object for monitoring. See the -[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +[Add Items for Monitoring](/docs/auditor/10.8/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional information. This instruction shows how to collect audit data from the Microsoft 365 tenant. If you plan to use modern authentication, see the -[Configuring Microsoft Entra ID App for Auditing Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md#configuring-microsoft-entra-id-app-for-auditing-microsoft-entra-id) +[Configuring Microsoft Entra ID App for Auditing Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md#configuring-microsoft-entra-id-app-for-auditing-microsoft-entra-id) topic for additional information on how to prepare Microsoft Entra ID app with required permissions. Make sure you have the following at hand: @@ -76,10 +76,10 @@ Follow the steps to configure Office 365 tenant as a monitored item. ID monitoring. - If you are going to use **Modern authentication**, paste the obtained name. See the - [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) + [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) topic for additional information. -![tenantenvironment](/images/auditor/10.7/admin/monitoringplans/tenantenvironment.webp) +![tenantenvironment](/images/auditor/10.8/admin/monitoringplans/tenantenvironment.webp) If you are using a government tenant, please click the **Tenant Environment** tab and select the desired tenant environment. @@ -93,7 +93,7 @@ desired tenant environment. _user@domain.onmicrosoft.com_. - The **Tenant name** field then will be filled in automatically. - Make sure this user account has sufficient access rights. See - [Using Basic Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/basicauth.md) + [Using Basic Authentication with Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/basicauth.md) topic for additional information. - Modern authentication: @@ -106,12 +106,12 @@ desired tenant environment. - **Application secret**. - See the - [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) + [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) for additional information. **Step 3 –** Click the **Add** button. -![Add Office 365 Item window](/images/auditor/10.7/admin/monitoringplans/item_o365_basic_auth_thumb_0_0.webp) +![Add Office 365 Item window](/images/auditor/10.8/admin/monitoringplans/item_o365_basic_auth_thumb_0_0.webp) You can use a single account to collect audit data for different Office 365 services (Microsoft Entra ID, Exchange Online, SharePoint Online); however, Netwrix recommends that you specify @@ -127,7 +127,7 @@ provide the Application ID instead of the user name. Starting with version 10.7, you can use Netwrix Privilege Secure to manage the account for collecting data, after configuring the integration. See the -[Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information about +[Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) topic for additional information about integration and supported data sources. In this case, the credentials will not be stored by Netwrix Auditor. Instead, they will be managed by Netwrix Privilege Secure and provided on demand, ensuring password rotation or using temporary accounts for data collection. @@ -139,7 +139,7 @@ Follow the steps to use Netwrix Privilege Secure as an account for data collect **Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data collection. -![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) +![npsdatacollectingaccount](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccount.webp) **Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. Credential-based is the default option. Refer to the @@ -152,7 +152,7 @@ and to which Netwrix Auditor has the access through a Credential-based access po **NOTE:** Netwrix recommends using different credentials for different monitoring plans and data sources. -![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) +![npsdatacollectingaccountresourced](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) The second option is Resource-based. To use this option, you need to provide the Activity and Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure diff --git a/docs/auditor/10.8/admin/monitoringplans/msteams.md b/docs/auditor/10.8/admin/monitoringplans/msteams.md index a1cd059141..9b5c5ca775 100644 --- a/docs/auditor/10.8/admin/monitoringplans/msteams.md +++ b/docs/auditor/10.8/admin/monitoringplans/msteams.md @@ -9,13 +9,13 @@ sidebar_position: 120 **NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in the following topics: -- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data collection +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data collection and activity monitoring configure necessary protocols and ports for inbound and outbound connections -- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to audit your IT systems -- [MS Teams](/docs/auditor/10.7/configuration/microsoft365/teams/overview.md) – Configure data source as required +- [MS Teams](/docs/auditor/10.8/configuration/microsoft365/teams/overview.md) – Configure data source as required to be monitored ## How to Add Office365 Item @@ -23,7 +23,7 @@ the following topics: This instruction shows how to collect audit data from the Microsoft 365 tenant. If you plan to use modern authentication, see the -[Configuring Microsoft Entra ID App for Auditing Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md#configuring-microsoft-entra-id-app-for-auditing-microsoft-entra-id) +[Configuring Microsoft Entra ID App for Auditing Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md#configuring-microsoft-entra-id-app-for-auditing-microsoft-entra-id) topic for additional information on how to prepare Microsoft Entra ID app with required permissions. Make sure you have the following at hand: @@ -47,10 +47,10 @@ Follow the steps to configure Office 365 tenant as a monitored item. ID monitoring. - If you are going to use **Modern authentication**, paste the obtained name. See the - [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) + [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) topic for additional information. -![tenantenvironment](/images/auditor/10.7/admin/monitoringplans/tenantenvironment.webp) +![tenantenvironment](/images/auditor/10.8/admin/monitoringplans/tenantenvironment.webp) If you are using a government tenant, please click the **Tenant Environment** tab and select the desired tenant environment. @@ -64,7 +64,7 @@ desired tenant environment. _user@domain.onmicrosoft.com_. - The **Tenant name** field then will be filled in automatically. - Make sure this user account has sufficient access rights. See - [Using Basic Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/basicauth.md) + [Using Basic Authentication with Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/basicauth.md) topic for additional information. - Modern authentication: @@ -77,12 +77,12 @@ desired tenant environment. - **Application secret**. - See the - [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) + [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) for additional information. **Step 3 –** Click the **Add** button. -![Add Office 365 Item window](/images/auditor/10.7/admin/monitoringplans/item_o365_basic_auth_thumb_0_0.webp) +![Add Office 365 Item window](/images/auditor/10.8/admin/monitoringplans/item_o365_basic_auth_thumb_0_0.webp) You can use a single account to collect audit data for different Office 365 services (Microsoft Entra ID, Exchange Online, SharePoint Online); however, Netwrix recommends that you specify @@ -93,7 +93,7 @@ individual credentials for each of them. | Option | Description | | -------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | -| Collect data for state-in-time reports | Configure Netwrix Auditor to store daily snapshots of your system configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) topic for additional information. | +| Collect data for state-in-time reports | Configure Netwrix Auditor to store daily snapshots of your system configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.8/admin/reports/types/stateintime/overview.md) topic for additional information. | After that, you can use the Microsoft Entra ID management portal to revoke this privileged role and assign one of the non-privileged roles instead (for example, _Security Reader_). diff --git a/docs/auditor/10.8/admin/monitoringplans/networkdevices.md b/docs/auditor/10.8/admin/monitoringplans/networkdevices.md index 21d6d8438a..97e93bbcb1 100644 --- a/docs/auditor/10.8/admin/monitoringplans/networkdevices.md +++ b/docs/auditor/10.8/admin/monitoringplans/networkdevices.md @@ -9,13 +9,13 @@ sidebar_position: 130 **NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in the following topics: -- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data collection +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data collection and activity monitoring configure necessary protocols and ports for inbound and outbound connections -- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to audit your IT systems -- [Network Devices](/docs/auditor/10.7/configuration/networkdevices/overview.md) – Configure data source as +- [Network Devices](/docs/auditor/10.8/configuration/networkdevices/overview.md) – Configure data source as required to be monitored Complete the following fields: diff --git a/docs/auditor/10.8/admin/monitoringplans/oracle/overview.md b/docs/auditor/10.8/admin/monitoringplans/oracle/overview.md index 545a46c94e..6ceed98418 100644 --- a/docs/auditor/10.8/admin/monitoringplans/oracle/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/oracle/overview.md @@ -9,13 +9,13 @@ sidebar_position: 140 **NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in the following topics: -- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data collection and activity monitoring configure necessary protocols and ports for inbound and outbound connections -- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to audit your IT systems -- [Oracle Database](/docs/auditor/10.7/configuration/oracle/overview.md) – Configure data source as required +- [Oracle Database](/docs/auditor/10.8/configuration/oracle/overview.md) – Configure data source as required to be monitored Complete the following fields: @@ -33,7 +33,7 @@ Complete the following fields: Review your data source settings and click **Add** to go back to your plan. The newly created data source will appear in the **Data source** list. As a next step, click **Add item** to specify an object for monitoring. See the -[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +[Add Items for Monitoring](/docs/auditor/10.8/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional information. ## Oracle Database Instance @@ -44,18 +44,18 @@ Complete the following fields: | ------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Connection type | Select how the product connects to Oracle Database: - Oracle Database instance – select if you want to connect to a database by instance name. - Oracle Wallet – select if you want to use Oracle Wallet – password-protected container used to store authentication and signing credentials, including private keys, certificates, and trusted certificates needed by SSL. | | Instance name | Provide connection details in the following format: _host:port/service_name._ Make sure audit settings are configured for your Oracle Database instance. | -| Wallet alias | Provide the alias you set while creating wallet. For example, "_MyOracle_". Alias name in Netwrix Auditor should exactly match the alias in the `tnsnames.ora` file. [Configure Oracle Instant Client for HTTP Proxy Connections](/docs/auditor/10.7/configuration/oracle/wallet.md#configure-oracle-instant-client-for-http-proxy-connections) | -| Specify the account for collecting data For Oracle Database instance connection type only. | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Wallet alias | Provide the alias you set while creating wallet. For example, "_MyOracle_". Alias name in Netwrix Auditor should exactly match the alias in the `tnsnames.ora` file. [Configure Oracle Instant Client for HTTP Proxy Connections](/docs/auditor/10.8/configuration/oracle/wallet.md#configure-oracle-instant-client-for-http-proxy-connections) | +| Specify the account for collecting data For Oracle Database instance connection type only. | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. | ## Data Collection from Oracle Database On a high level, data collection process for Oracle databases works as follows: -![hiw_diagram_oracle](/images/auditor/10.7/admin/monitoringplans/oracle/hiw_diagram_oracle.webp) +![hiw_diagram_oracle](/images/auditor/10.8/admin/monitoringplans/oracle/hiw_diagram_oracle.webp) 1. Oracle administrator prepares a dedicated service account with sufficient permissions to collect data from Oracle Database. See the - [Permissions for Oracle Database Auditing](/docs/auditor/10.7/configuration/oracle/permissions.md) topic + [Permissions for Oracle Database Auditing](/docs/auditor/10.8/configuration/oracle/permissions.md) topic for additional information. 2. Netwrix administrator does the following: @@ -63,7 +63,7 @@ On a high level, data collection process for Oracle databases works as follows: step 1) as a data collecting account in the Monitoring Plan wizard. Then s/he adds items to the monitoring plan – these are Oracle Databases to collect data from. - Configures alerts related to Oracle data source. Current version does not include predefined - alerts for that data source, so follow the [Create Alerts](/docs/auditor/10.7/admin/alertsettings/create/create.md) + alerts for that data source, so follow the [Create Alerts](/docs/auditor/10.8/admin/alertsettings/create/create.md) section to create and configure the necessary alerts. Remember to set the filter to “Data Source*equals* Oracle”. diff --git a/docs/auditor/10.8/admin/monitoringplans/overview.md b/docs/auditor/10.8/admin/monitoringplans/overview.md index 38db21d371..3776428ef8 100644 --- a/docs/auditor/10.8/admin/monitoringplans/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/overview.md @@ -9,13 +9,13 @@ sidebar_position: 30 **NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in the following topics: -- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data collection +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data collection and activity monitoring configure necessary protocols and ports for inbound and outbound connections -- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to audit your IT systems -- [Supported Data Sources](/docs/auditor/10.7/requirements/supporteddatasources/supporteddatasources.md) – Configure data source as +- [Supported Data Sources](/docs/auditor/10.8/requirements/supporteddatasources/supporteddatasources.md) – Configure data source as required to be monitored To start auditing your environment and analyzing user behavior with Netwrix Auditor, create a @@ -29,7 +29,7 @@ Follow the steps to collect data from your environment. **Step 1 –** Create a monitoring plan with the wizard. Select the data source when you start the monitoring plan wizard, and its initial settings are configured at the wizard steps. See the -[Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional information. +[Create a New Monitoring Plan](/docs/auditor/10.8/admin/monitoringplans/create.md) topic for additional information. **Step 2 –** Fine-tune data source settings, if necessary: use the data source properties to modify data collection settings, customize the monitoring scope, and more. @@ -48,14 +48,14 @@ tile, then expand the All Monitoring Plans tree. | See how data collection goes on | Click on a plan name. You will see all data sources included in the plan and data collection status for each data source. | | Start data collection manually | 1. Select a plan and click Edit. 2. In the monitoring plan window, click Update in the right pane. Data collection will be started (status for the data sources will be displayed as _Working_). Do the same if you need to generate Activity Summary with the latest changes. | | View collected data | 1. Select a plan and click Edit. 2. In the right pane, go to the Intelligence section (in the bottom) and click Search. The search page will appear, displaying the collected data filtered out accordingly (i.e. provided by this monitoring plan). | -| Modify plan settings, add or delete data sources, add or delete items | Select a plan and click Edit. On the page that opens, review your plan settings. Then follow the instructions described in these sections: - [Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md) - [Fine-Tune Your Plan and Edit Settings](/docs/auditor/10.7/admin/monitoringplans/finetune.md) | -| Assign roles | Click Delegate to review current delegations and assign roles. You can delegate control over a monitoring plan to another administrator, or grant read access—Reviewer role—to the data collected by this plan. To simplify delegation, you can further organize the monitoring plans into folders. See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. | +| Modify plan settings, add or delete data sources, add or delete items | Select a plan and click Edit. On the page that opens, review your plan settings. Then follow the instructions described in these sections: - [Add Items for Monitoring](/docs/auditor/10.8/admin/monitoringplans/datasources.md) - [Fine-Tune Your Plan and Edit Settings](/docs/auditor/10.8/admin/monitoringplans/finetune.md) | +| Assign roles | Click Delegate to review current delegations and assign roles. You can delegate control over a monitoring plan to another administrator, or grant read access—Reviewer role—to the data collected by this plan. To simplify delegation, you can further organize the monitoring plans into folders. See the [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. | ## Using historical data For many data sources, you can instruct Netwrix Auditor to collect state-in-time data along with event data. For that, Netwrix Auditor uses state-in-time snapshots of the relevant system (for -example, see [VMware](/docs/auditor/10.7/admin/monitoringplans/vmware/overview.md)). +example, see [VMware](/docs/auditor/10.8/admin/monitoringplans/vmware/overview.md)). To keep users up-to-date on actual system state, Auditor updates the latest snapshot on the regular basis. Thus, only the latest snapshot is available for ongoing reporting in the product. @@ -80,4 +80,4 @@ properties. the arrows to move the selected snapshots to the **Snapshots available for reporting** list. When finished, click **OK**. -See the [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional information. +See the [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/monitoringplans/overview_1.md b/docs/auditor/10.8/admin/monitoringplans/overview_1.md index 0518da3817..fcc83af3ed 100644 --- a/docs/auditor/10.8/admin/monitoringplans/overview_1.md +++ b/docs/auditor/10.8/admin/monitoringplans/overview_1.md @@ -9,13 +9,13 @@ sidebar_position: 180 **NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in the following topics: -- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data collection and activity monitoring configure necessary protocols and ports for inbound and outbound connections -- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to audit your IT systems -- [User Activity](/docs/auditor/10.7/configuration/useractivity/overview.md) – Configure data source as +- [User Activity](/docs/auditor/10.8/configuration/useractivity/overview.md) – Configure data source as required to be monitored Complete the following fields: @@ -35,12 +35,12 @@ Complete the following fields: | Applications | | | Specify applications you want to track | Select the applications that you want to monitor. You can select All applications or create a list of Specific applications. Certain applications can also be added to Exceptions list. | | Monitored Computers | | -| For a newly created monitoring plan for User Activity, the list of monitored computers is empty. Add items to your monitoring plan and wait until Netwrix Auditor retrieves all computers within these items. See [Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring)for more information. The list contains computer name, its current status and last activity time. | | +| For a newly created monitoring plan for User Activity, the list of monitored computers is empty. Add items to your monitoring plan and wait until Netwrix Auditor retrieves all computers within these items. See [Add Items for Monitoring](/docs/auditor/10.8/admin/monitoringplans/datasources.md#add-items-for-monitoring)for more information. The list contains computer name, its current status and last activity time. | | Review your data source settings and click **Add** to go back to your plan. The newly created data source will appear in the **Data source** list. As a next step, click **Add item** to specify an object for monitoring. See the -[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +[Add Items for Monitoring](/docs/auditor/10.8/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional information. ## How to Include/Exclude Applications @@ -79,11 +79,11 @@ To exclude the Notepad application window with "_Document1_" open, add the follo - In the Title filter enter "_Document1.txt - Notepad_": - ![uavr_source_example_1](/images/auditor/10.7/admin/monitoringplans/useractivity/uavr_source_example_1.webp) + ![uavr_source_example_1](/images/auditor/10.8/admin/monitoringplans/useractivity/uavr_source_example_1.webp) - In the Description filter, enter the corresponding value, here it will be "_Notepad_". -![uavr_source_example_2_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/useractivity/uavr_source_example_2_thumb_0_0.webp) +![uavr_source_example_2_thumb_0_0](/images/auditor/10.8/admin/monitoringplans/useractivity/uavr_source_example_2_thumb_0_0.webp) ## Computer @@ -98,7 +98,7 @@ Complete the following fields: | --------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | General | | | Specify a computer | Provide a server name by entering its FQDN, NETBIOS or IPv4 address. You can click Browse to select a computer from the list of computers in your network. | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select account type you want to use and enter credentials. The following choices are available: - User/password. The account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select account type you want to use and enter credentials. The following choices are available: - User/password. The account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.8/requirements/gmsa.md) topic for additional information. | ## IP Range @@ -108,7 +108,7 @@ Complete the following fields: | --------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | General | | | Specify IP range | Specify an IP range for the audited computers. To exclude computers from within the specified range, click **Exclude**. Enter the IP subrange you want to exclude, and click **Add**. | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. | ## AD Container @@ -118,4 +118,4 @@ Complete the following fields: | --------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | General | | | Specify AD container | Specify a whole AD domain, OU or container. Click **Browse** to select from the list of containers in your network. You can also: - Select a particular computer type to be audited within the chosen AD container: **Domain controllers, Servers (excluding domain controllers)**, or **Workstations**. - Click **Exclude** to specify AD domains, OUs, and containers you do not want to audit. In the Exclude Containers dialog, click Add and specify an object. The list of containers does not include child domains of trusted domains. Use other options **(Computer, IP range** to specify the target computers. | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. If using a group Managed Service Account (gMSA), you can specify only the account name in the _domain\account$_ format. Password field can be empty. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the[Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. If using a group Managed Service Account (gMSA), you can specify only the account name in the _domain\account$_ format. Password field can be empty. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the[Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. | diff --git a/docs/auditor/10.8/admin/monitoringplans/sharepoint/overview.md b/docs/auditor/10.8/admin/monitoringplans/sharepoint/overview.md index 4be2b8e957..567ec9c5c9 100644 --- a/docs/auditor/10.8/admin/monitoringplans/sharepoint/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/sharepoint/overview.md @@ -9,13 +9,13 @@ sidebar_position: 150 **NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in the following topics: -- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data collection and activity monitoring configure necessary protocols and ports for inbound and outbound connections -- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to audit your IT systems -- [SharePoint](/docs/auditor/10.7/configuration/sharepoint/overview.md) – Configure data source as required to +- [SharePoint](/docs/auditor/10.8/configuration/sharepoint/overview.md) – Configure data source as required to be monitored Complete the following fields: @@ -24,13 +24,13 @@ Complete the following fields: | -------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | | Detect additional details | Specify additional information to include in reports and activity summaries. Select Group membershipif you want to include Group membership of the account under which the change was made. | -| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [SharePoint](/docs/auditor/10.7/configuration/sharepoint/overview.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. | -| Collect data for state-in-time reports | Configure Netwrix Auditor to store daily snapshots of your system configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) topic for additional information. In the **Manage historical snapshots** section, you can click **Manage** and select the snapshots that you want to import to the Audit Database to generate a report on the data source's state at the specific moment in the past. You must be assigned the **Global administrator** or the **Global reviewer** role to import snapshots. Move the selected snapshots to the Snapshots available for reporting list using the arrow button. The product updates the latest snapshot on the regular basis to keep users up to date on actual system state. Users can also configure Only the latest snapshot is available for reporting in Auditor . If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. | +| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [SharePoint](/docs/auditor/10.8/configuration/sharepoint/overview.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. | +| Collect data for state-in-time reports | Configure Netwrix Auditor to store daily snapshots of your system configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.8/admin/reports/types/stateintime/overview.md) topic for additional information. In the **Manage historical snapshots** section, you can click **Manage** and select the snapshots that you want to import to the Audit Database to generate a report on the data source's state at the specific moment in the past. You must be assigned the **Global administrator** or the **Global reviewer** role to import snapshots. Move the selected snapshots to the Snapshots available for reporting list using the arrow button. The product updates the latest snapshot on the regular basis to keep users up to date on actual system state. Users can also configure Only the latest snapshot is available for reporting in Auditor . If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. | Review your data source settings and click **Add** to go back to your plan. The newly created data source will appear in the **Data source** list. As a next step, click **Add item** to specify an object for monitoring. See the -[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +[Add Items for Monitoring](/docs/auditor/10.8/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional information. ## Troubleshoot SharePoint Auditing @@ -47,13 +47,13 @@ Complete the following fields: | -------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | General | | | Specify SharePoint farm for monitoring | Enter the SharePoint Central Administration website URL. | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. | | Core Service | | -| Deploy Netwrix Auditor for SharePoint Core Service | Select deployment method for the Core Service. Select one of the following: - Automatically—The installation will run under the account used to collect data on the SharePoint farm wizard completion. Prior to the Netwrix Auditor for SharePoint Core Service installation, review the following prerequisites and make sure that: - Netwrix Auditor for SharePoint Core Service is going to be installed on the computer that hosts SharePoint Central Administration in the audited SharePoint farm. - [.Net Framework 3.5 SP1](http://www.microsoft.com/en-us/download/details.aspx?id=22) is installed on the computer that hosts SharePoint Central Administration in the audited SharePoint farm. - The SharePoint Administration (SPAdminV4) service is started on the target computer. See [SharePoint](/docs/auditor/10.7/configuration/sharepoint/overview.md) for more information. - The user that is going to run the Core Service installation: - Is a member of the local Administrators group on SharePoint server, where the Core Service will be deployed. - Is granted the SharePoint_Shell_Access role on SharePoint SQL Server configuration database. See [Permissions for SharePoint Auditing](/docs/auditor/10.7/configuration/sharepoint/permissions.md) topic for more information. - Manually—See the [Netwrix Auditor Installation and Configuration Guide](https://www.netwrix.com/download/documents/Netwrix_Auditor_Installation_Configuration_Guide.pdf) for more information. During the Netwrix Auditor for SharePoint Core Service installation / uninstallation your SharePoint sites may be unavailable. | +| Deploy Netwrix Auditor for SharePoint Core Service | Select deployment method for the Core Service. Select one of the following: - Automatically—The installation will run under the account used to collect data on the SharePoint farm wizard completion. Prior to the Netwrix Auditor for SharePoint Core Service installation, review the following prerequisites and make sure that: - Netwrix Auditor for SharePoint Core Service is going to be installed on the computer that hosts SharePoint Central Administration in the audited SharePoint farm. - [.Net Framework 3.5 SP1](http://www.microsoft.com/en-us/download/details.aspx?id=22) is installed on the computer that hosts SharePoint Central Administration in the audited SharePoint farm. - The SharePoint Administration (SPAdminV4) service is started on the target computer. See [SharePoint](/docs/auditor/10.8/configuration/sharepoint/overview.md) for more information. - The user that is going to run the Core Service installation: - Is a member of the local Administrators group on SharePoint server, where the Core Service will be deployed. - Is granted the SharePoint_Shell_Access role on SharePoint SQL Server configuration database. See [Permissions for SharePoint Auditing](/docs/auditor/10.8/configuration/sharepoint/permissions.md) topic for more information. - Manually—See the [Netwrix Auditor Installation and Configuration Guide](https://www.netwrix.com/download/documents/Netwrix_Auditor_Installation_Configuration_Guide.pdf) for more information. During the Netwrix Auditor for SharePoint Core Service installation / uninstallation your SharePoint sites may be unavailable. | | Changes | | | Audit SharePoint farm configuration changes | Configuration changes are always audited. | | Audit SharePoint permissions and content changes | Select change types to be audited with Netwrix Auditor. Netwrix Auditor allows auditing the entire SharePoint farm. Alternatively, you can limit the auditing scope to separate web applications and site collections. To do it, select Specific SharePoint objects and do one of the following: - Click Add, provide the URL to web application or site collection and select object type (Web application or Site collection). - Click Import, select object type (Web application or Site collection), encoding type, and browse for a file that contains a list of web applications and sites. Netwrix Auditor ignores changes to system data (e.g., hidden and system lists or items are not audited). Netwrix Auditor also ignores the content changes to sites and objects on the site collections located on Central Administration web application, but the security changes that occurred there are tracked and reported anyway. | | Activity | | -| Specify monitoring restrictions | Specify restriction filters to narrow your SharePoint monitoring scope (search results, reports and Activity Summaries). For example, you can exclude site collections document libraries and lists from being audited as they contain public non sensitive data. All filters are applied using AND logic. Click Add and complete the following fields: - User – provide the name of the user as shown in the "_Who_" column of reports and Activity Summaries. Example: _mydomain\user1_. - Object URL – provide URL of the objects as shown in the "_What_" column of reports and Activity Summaries. Example: _http://sitecollection/list/document.docx_. - Action Type – select what types of actions performed by selected users under the object you want to monitor. Available values: _All_, _Changes_, _Reads_. You can use a wildcard (\*) to replace any number of characters in filters. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | +| Specify monitoring restrictions | Specify restriction filters to narrow your SharePoint monitoring scope (search results, reports and Activity Summaries). For example, you can exclude site collections document libraries and lists from being audited as they contain public non sensitive data. All filters are applied using AND logic. Click Add and complete the following fields: - User – provide the name of the user as shown in the "_Who_" column of reports and Activity Summaries. Example: _mydomain\user1_. - Object URL – provide URL of the objects as shown in the "_What_" column of reports and Activity Summaries. Example: _http://sitecollection/list/document.docx_. - Action Type – select what types of actions performed by selected users under the object you want to monitor. Available values: _All_, _Changes_, _Reads_. You can use a wildcard (\*) to replace any number of characters in filters. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md)topic for additional information. | | Read Access | | | Audit SharePoint read access | Configure Netwrix Auditor to track read access to lists and list items within your SharePoint farm except for Central Administration web sites. Select Sites only if you want to enable read access auditing on SharePoint sites only. Enable Sites and subsites to track read access on each subsite. Then, do one of the following: - Click Add and provide URL to a SharePoint site. - Click Import, select encoding type, and browse for a file that contains a list of sites. Read access auditing significantly increases the number of events generated on your SharePoint and the amount of data written to the AuditArchive. | diff --git a/docs/auditor/10.8/admin/monitoringplans/sharepointonline/overview.md b/docs/auditor/10.8/admin/monitoringplans/sharepointonline/overview.md index 82c909b261..a426243792 100644 --- a/docs/auditor/10.8/admin/monitoringplans/sharepointonline/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/sharepointonline/overview.md @@ -9,13 +9,13 @@ sidebar_position: 160 **NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in the following topics: -- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data collection and activity monitoring configure necessary protocols and ports for inbound and outbound connections -- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to audit your IT systems -- [SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/overview.md) – Configure +- [SharePoint Online](/docs/auditor/10.8/configuration/microsoft365/sharepointonline/overview.md) – Configure data source as required to be monitored ## How to Add Office365 Item @@ -23,7 +23,7 @@ the following topics: This instruction shows how to collect audit data from the Microsoft 365 tenant. If you plan to use modern authentication, see the -[Configuring Microsoft Entra ID App for Auditing Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md#configuring-microsoft-entra-id-app-for-auditing-microsoft-entra-id) +[Configuring Microsoft Entra ID App for Auditing Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md#configuring-microsoft-entra-id-app-for-auditing-microsoft-entra-id) topic for additional information on how to prepare Microsoft Entra ID app with required permissions. Make sure you have the following at hand: @@ -47,10 +47,10 @@ Follow the steps to configure Office 365 tenant as a monitored item. ID monitoring. - If you are going to use **Modern authentication**, paste the obtained name. See the - [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) + [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) topic for additional information. -![tenantenvironment](/images/auditor/10.7/admin/monitoringplans/tenantenvironment.webp) +![tenantenvironment](/images/auditor/10.8/admin/monitoringplans/tenantenvironment.webp) If you are using a government tenant, please click the **Tenant Environment** tab and select the desired tenant environment. @@ -64,7 +64,7 @@ desired tenant environment. _user@domain.onmicrosoft.com_. - The **Tenant name** field then will be filled in automatically. - Make sure this user account has sufficient access rights. See - [Using Basic Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/basicauth.md) + [Using Basic Authentication with Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/basicauth.md) topic for additional information. - Modern authentication: @@ -77,12 +77,12 @@ desired tenant environment. - **Application secret**. - See the - [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) + [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) for additional information. **Step 3 –** Click the **Add** button. -![Add Office 365 Item window](/images/auditor/10.7/admin/monitoringplans/item_o365_basic_auth_thumb_0_0.webp) +![Add Office 365 Item window](/images/auditor/10.8/admin/monitoringplans/item_o365_basic_auth_thumb_0_0.webp) You can use a single account to collect audit data for different Office 365 services (Microsoft Entra ID, Exchange Online, SharePoint Online); however, Netwrix recommends that you specify @@ -95,14 +95,14 @@ individual credentials for each of them. | Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | | Audit SharePoint Online configuration and content changes | Configuration and content changes are always audited. | | Audit SharePoint Online read access | Configure Auditor to monitor SharePoint Online read access. | -| Collect data for state-in-time reports | Configure Netwrix Auditor to store daily snapshots of your SharePoint Online configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) topic for additional information. The product updates the latest snapshot on the regular basis to keep users up-to-date on actual system state. Only the latest snapshot is available for reporting in Netwrix Auditor. If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. For that, in the Manage historical snapshots section, click **Manage** and select the snapshots that you want to import. To import snapshots, you must be assigned the Global administrator or the Global reviewer role . Move the selected snapshots to the Snapshots available for reporting list using the arrow button. When finished, click **OK**. | +| Collect data for state-in-time reports | Configure Netwrix Auditor to store daily snapshots of your SharePoint Online configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.8/admin/reports/types/stateintime/overview.md) topic for additional information. The product updates the latest snapshot on the regular basis to keep users up-to-date on actual system state. Only the latest snapshot is available for reporting in Netwrix Auditor. If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. For that, in the Manage historical snapshots section, click **Manage** and select the snapshots that you want to import. To import snapshots, you must be assigned the Global administrator or the Global reviewer role . Move the selected snapshots to the Snapshots available for reporting list using the arrow button. When finished, click **OK**. | Review your data source settings and click **Add** to go back to your plan. The newly created data source will appear in the **Data source** list. As a next step, click **Add item** to specify an object for monitoring. See the -[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +[Add Items for Monitoring](/docs/auditor/10.8/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional information. See the -[Permissions for SharePoint Online Auditing ](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/permissions/permissions.md)topic +[Permissions for SharePoint Online Auditing ](/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/permissions.md)topic for additional information. diff --git a/docs/auditor/10.8/admin/monitoringplans/sqlserver/items.md b/docs/auditor/10.8/admin/monitoringplans/sqlserver/items.md index 4ae7073e6d..b37889c9c7 100644 --- a/docs/auditor/10.8/admin/monitoringplans/sqlserver/items.md +++ b/docs/auditor/10.8/admin/monitoringplans/sqlserver/items.md @@ -30,7 +30,7 @@ Complete the following fields: | Option | Description | | --------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Specify SQL Server instance | Specify the name of the SQL Server instance. | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. | Use a combination of server role, environment, instance name (including "DEFAULT" for default instances), and a unique identifier. @@ -53,7 +53,7 @@ Complete the following fields: | --------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Availability group listener | Provide a name of an availability group listener in FQDN or NetBIOS format. The listener is a virtual network name (VNN) that you can connect to in order to access a database in a primary or secondary replica of an Always On availability group. A listener allows you to connect to a replica without having to know the physical instance name of the SQL Server. Ensure that the requirements to the DNS name and Windows permissions requirements are met. See [Configure a listener for an Always On availability group](https://docs.microsoft.com/en-us/sql/database-engine/availability-groups/windows/create-or-configure-an-availability-group-listener-sql-server?view=sql-server-ver15) for additional information. | | Availability group name | Enter a name of your SQL Server availability group. | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. | Extend the SQL Server instance name with a replica role (Primary/Secondary), AG identifier, and a unique identifier. diff --git a/docs/auditor/10.8/admin/monitoringplans/sqlserver/overview.md b/docs/auditor/10.8/admin/monitoringplans/sqlserver/overview.md index 3869601495..524b82aaad 100644 --- a/docs/auditor/10.8/admin/monitoringplans/sqlserver/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/sqlserver/overview.md @@ -9,13 +9,13 @@ sidebar_position: 170 **NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in the following topics: -- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data collection and activity monitoring configure necessary protocols and ports for inbound and outbound connections -- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to audit your IT systems -- [SQL Server](/docs/auditor/10.7/configuration/sqlserver/overview.md) – Configure data source as required to +- [SQL Server](/docs/auditor/10.8/configuration/sqlserver/overview.md) – Configure data source as required to be monitored To configure SQL Server data source settings, use the following property tabs: @@ -29,7 +29,7 @@ When finished, review your data source settings and click **Add** to go back to created data source will appear in the Data source list. As a next step, click Add item to specify an object for monitoring. See the -[Add Item to the SQL Server](/docs/auditor/10.7/admin/monitoringplans/sqlserver/items.md) topic for additional information. +[Add Item to the SQL Server](/docs/auditor/10.8/admin/monitoringplans/sqlserver/items.md) topic for additional information. ## General settings @@ -41,17 +41,17 @@ On the **General** tab, you can configure the following settings for SQL Server | Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | | Monitor SQL Server configuration changes | Always enabled, as SQL Server configuration changes are always monitored. | | Monitor SQL Server logon activity | Specify what types of logon events you want to monitor: successful or failed, performed through Windows and SQL authentication. - Failed logons - Successfullogons | -| Collect data for state-in-time reports | Configure Netwrix Auditor to store the snapshots of your SQL Server instance configuration — you will require them for state-in-time reports generation. See [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) for more information. **CAUTION:** The State-in-Time functionality is not available for SQL Server Availability Groups. The product updates the latest snapshot on the regular basis to keep users up-to-date on actual system state. Only the latest snapshot is available for reporting in Netwrix Auditor. If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. To import snapshots, you must be assigned the Global administrator or the Global reviewer role in Netwrix Auditor. 1. In the Manage historical snapshots section, click **Manage** and select the snapshots that you want to import. 2. Move the selected snapshots to the Snapshots available for reporting list using the arrow button. 3. When finished, click **OK**. See also [Using historical data](/docs/auditor/10.7/admin/monitoringplans/overview.md#using-historical-data). | +| Collect data for state-in-time reports | Configure Netwrix Auditor to store the snapshots of your SQL Server instance configuration — you will require them for state-in-time reports generation. See [State–In–Time Reports](/docs/auditor/10.8/admin/reports/types/stateintime/overview.md) for more information. **CAUTION:** The State-in-Time functionality is not available for SQL Server Availability Groups. The product updates the latest snapshot on the regular basis to keep users up-to-date on actual system state. Only the latest snapshot is available for reporting in Netwrix Auditor. If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. To import snapshots, you must be assigned the Global administrator or the Global reviewer role in Netwrix Auditor. 1. In the Manage historical snapshots section, click **Manage** and select the snapshots that you want to import. 2. Move the selected snapshots to the Snapshots available for reporting list using the arrow button. 3. When finished, click **OK**. See also [Using historical data](/docs/auditor/10.8/admin/monitoringplans/overview.md#using-historical-data). | ## Users On the **Users** tab, you can configure the following settings for SQL Server data source: -![data_source_sql_users_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/sqlserver/data_source_sql_users_thumb_0_0.webp) +![data_source_sql_users_thumb_0_0](/images/auditor/10.8/admin/monitoringplans/sqlserver/data_source_sql_users_thumb_0_0.webp) | Options | Description | | ------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Specify users to track their activity | Select the option you need to fine-tune your SQL Server monitoring scope. - **Monitor all users** - **Include only users matching these criteria** - **Exclude users matching these criteria** For example, you may need to track only actions performed by administrative accounts, or exclude the activity initiated by ordinary applications. If so, data should be filtered accordingly before it appears in search results, reports and Activity Summaries. You can create either inclusion or exclusion lists. All filters are applied using AND logic. To create a filter for user activity monitoring, select the related option and click the button on the right. Specify the following: - User — enter the initiator's account as it appears in the "_Who_" column of reports and Activity Summaries, for example: _mydomain\user1_. For events containing “_System_” in the “_Who_” column you can enter "_System_" . - Workstation where activity was initiated — enter the workstation name as it is shown in the "_Workstation_" column of reports and Activity Summaries, for example: _StationWin2016_. - Application that initiated the activity — enter the application name as shown next to "_Application name_" in details of reports and Activity Summaries. You can use a wildcard (\*) to replace any number of characters in filters. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | +| Specify users to track their activity | Select the option you need to fine-tune your SQL Server monitoring scope. - **Monitor all users** - **Include only users matching these criteria** - **Exclude users matching these criteria** For example, you may need to track only actions performed by administrative accounts, or exclude the activity initiated by ordinary applications. If so, data should be filtered accordingly before it appears in search results, reports and Activity Summaries. You can create either inclusion or exclusion lists. All filters are applied using AND logic. To create a filter for user activity monitoring, select the related option and click the button on the right. Specify the following: - User — enter the initiator's account as it appears in the "_Who_" column of reports and Activity Summaries, for example: _mydomain\user1_. For events containing “_System_” in the “_Who_” column you can enter "_System_" . - Workstation where activity was initiated — enter the workstation name as it is shown in the "_Workstation_" column of reports and Activity Summaries, for example: _StationWin2016_. - Application that initiated the activity — enter the application name as shown next to "_Application name_" in details of reports and Activity Summaries. You can use a wildcard (\*) to replace any number of characters in filters. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md)topic for additional information. | ## Data @@ -69,18 +69,18 @@ is the 'Do not use triggers' mode. | Do not use triggers | Default mode for a new installation of Netwrix Auditor. Data will be collected using the SQL Server traces. This mode allows you to get a sufficient level of detail in the reports and search results without producing additional load on your SQL Server instance. Thus, it is recommended for highly-transactional servers. When using this mode, consider that the "_What_" field of the Activity Record with "_Object type_" = "_Data_" may show incorrect data. The issues occur because the product applies data categories to an entire SQL Server table and not to rows. | | Use triggers for detailed monitoring | However, if you require a very detailed reporting on the data changes, you can select this mode. It will be also selected by default if you are upgrading your Netwrix Auditor deployment. Data will be collected using a set of triggers. For more information on this technology, see [https://kb.netwrix.com/728](https://kb.netwrix.com/728) . It is recommended to use this setting carefully, as collecting large amount of details from a highly-transactional server may affect its performance. Using this mode may lead to issues when altering databases on the monitored SQL Server instances. The issues occur only if the SQL Server service account does not have _Read_ permissions in the Active Directory domain (e.g., a local user account). When using this mode, consider that the "_What_" field of the Activity Record with "_Object type_" = "_Data_" may show incorrect data. The issues occur because the product applies data categories to an entire SQL Server table and not to rows. Switching from the configured triggerless mode may lead to a data loss. The workaround is to force data collection right after enabling the triggers. | | Changes (per transaction) to collect and report: | Specify how many changes per a database transaction you want to be collected. For example, you can limit this number to 10 changes per transaction, or collect all changes. It is recommended to adjust this setting carefully, as collecting large number of changes from a highly-transactional server may affect its performance. | -| Monitoring rules | To specify what data changes must be monitored, create at least one **inclusion rule**. Exclusion rules are optional. Click **Add Rule** and configure the following: ![data_source_sql_data_rule_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/sqlserver/data_source_sql_data_rule_thumb_0_0.webp) - Type — Select rule type: include or exclude. - Server — Specify a name of the monitored SQL Server instance where the required database resides. Use the _server_name\instance_name_ format, for example, _SQLsrv11\SQLExpress2016_. **NOTE:** If you are going to configure monitoring rules for SQL Server Availability Groups, provide the name of your Availability Group item in this field. - Database — Specify the database whose data changes you want to monitor. - Table — Specify database table to monitor. - Column—Specify table column name. The following column types are currently not supported: `text, ntext, image, binary, varbinary, timestamp, sql_variant`. These filters will be applied using AND logic. Wildcard (\*) is supported and can be used to replace any number of characters. | +| Monitoring rules | To specify what data changes must be monitored, create at least one **inclusion rule**. Exclusion rules are optional. Click **Add Rule** and configure the following: ![data_source_sql_data_rule_thumb_0_0](/images/auditor/10.8/admin/monitoringplans/sqlserver/data_source_sql_data_rule_thumb_0_0.webp) - Type — Select rule type: include or exclude. - Server — Specify a name of the monitored SQL Server instance where the required database resides. Use the _server_name\instance_name_ format, for example, _SQLsrv11\SQLExpress2016_. **NOTE:** If you are going to configure monitoring rules for SQL Server Availability Groups, provide the name of your Availability Group item in this field. - Database — Specify the database whose data changes you want to monitor. - Table — Specify database table to monitor. - Column—Specify table column name. The following column types are currently not supported: `text, ntext, image, binary, varbinary, timestamp, sql_variant`. These filters will be applied using AND logic. Wildcard (\*) is supported and can be used to replace any number of characters. | ## Audit SELECT Use the settings in this section to configure how the successful SELECT statements should be audited. -![data_source_sql_audit_select_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/sqlserver/data_source_sql_audit_select_thumb_0_0.webp) +![data_source_sql_audit_select_thumb_0_0](/images/auditor/10.8/admin/monitoringplans/sqlserver/data_source_sql_audit_select_thumb_0_0.webp) | Option | Description | | ---------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | --- | --- | | --- | --- | | Audit successful SELECT statements | Enable monitoring of successful SELECT statements for the database tables. Successful SELECT statement execution will be reported as Read operation on the database table. Auditing SELECT statements will increase the amount of data collected from the SQL Server instance and stored to long-term archive and audit database. Plan for your resources accordingly. | -| Monitoring rules | To specify what data changes will be monitored, you must create at least one **inclusion rule**. Exclusion rules are optional. Click **Add Inclusion** and specify the following: ![data_source_sql_audit_select_rule_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/sqlserver/data_source_sql_audit_select_rule_thumb_0_0.webp) - Server — specify target SQL Server instance in the server\instance format. **NOTE:** If you are going to configure monitoring rules for SQL Server Availability Groups, provide the name of your Availability Group item in this field. - Database — specify target database - Schema — specify database schema - Table — specify database table you will monitor Wildcard (\*) is supported and can be used to replace any number of characters. Filters will be applied using AND logic, that is, only SELECT statements matching all specified criteria will be monitored. So, in the example above, the program will track and report only the successful SELECT statements executed against the _Applicants_ table of the _HR2019_ database with _Custom_ schema, hosted on the _SQLsrv02\TestInstance_. When finished, click **Add**. If needed, configure the exclusion rules in a similar way. | +| Monitoring rules | To specify what data changes will be monitored, you must create at least one **inclusion rule**. Exclusion rules are optional. Click **Add Inclusion** and specify the following: ![data_source_sql_audit_select_rule_thumb_0_0](/images/auditor/10.8/admin/monitoringplans/sqlserver/data_source_sql_audit_select_rule_thumb_0_0.webp) - Server — specify target SQL Server instance in the server\instance format. **NOTE:** If you are going to configure monitoring rules for SQL Server Availability Groups, provide the name of your Availability Group item in this field. - Database — specify target database - Schema — specify database schema - Table — specify database table you will monitor Wildcard (\*) is supported and can be used to replace any number of characters. Filters will be applied using AND logic, that is, only SELECT statements matching all specified criteria will be monitored. So, in the example above, the program will track and report only the successful SELECT statements executed against the _Applicants_ table of the _HR2019_ database with _Custom_ schema, hosted on the _SQLsrv02\TestInstance_. When finished, click **Add**. If needed, configure the exclusion rules in a similar way. | diff --git a/docs/auditor/10.8/admin/monitoringplans/vmware/overview.md b/docs/auditor/10.8/admin/monitoringplans/vmware/overview.md index 8060d4ec32..c0822036b6 100644 --- a/docs/auditor/10.8/admin/monitoringplans/vmware/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/vmware/overview.md @@ -9,13 +9,13 @@ sidebar_position: 190 **NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in the following topics: -- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data collection and activity monitoring configure necessary protocols and ports for inbound and outbound connections -- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to audit your IT systems -- [VMware](/docs/auditor/10.7/configuration/vmware/overview.md) – Configure data source as required to be +- [VMware](/docs/auditor/10.8/configuration/vmware/overview.md) – Configure data source as required to be monitored For this data source, specify the options you need: @@ -25,20 +25,20 @@ For this data source, specify the options you need: | Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | | Monitor VMware configuration changes | Configuration changes are always monitored for VMware data source. See the Data Collection from VMware Servers topic  for additional information. | | Monitor VMware logon activity | Specify what types of logon events you want to monitor for VMware infrastructure. | -| Monitor SSO users/groups on vCenter and Local users on ESXi sever | Select Enable monitoring if you want to audit the following users and groups: - vCenter Single Sign-On (SSO) Users. The product collects data from vCenter. - Localos users. For these users, the product collects data from ESXi and vCenter. - VMware groups. The product collects data from vCenter. To audit users and groups, vCenter 6.5 and above required. Check that your data collecting account has all required rights and permissions. See the [Permissions for VMware Server Auditing ](/docs/auditor/10.7/configuration/vmware/permissions.md) topic for additional information. | +| Monitor SSO users/groups on vCenter and Local users on ESXi sever | Select Enable monitoring if you want to audit the following users and groups: - vCenter Single Sign-On (SSO) Users. The product collects data from vCenter. - Localos users. For these users, the product collects data from ESXi and vCenter. - VMware groups. The product collects data from vCenter. To audit users and groups, vCenter 6.5 and above required. Check that your data collecting account has all required rights and permissions. See the [Permissions for VMware Server Auditing ](/docs/auditor/10.8/configuration/vmware/permissions.md) topic for additional information. | | Collect data for state-in-time reports | Configure Auditor to store daily snapshots of your VMware system configuration required for further state-in-time reports generation. The product updates the latest snapshot on the regular basis to keep users up-to-date on actual system state. Only the latest snapshot is available for reporting in Auditor. If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. To import snapshots, you must be assigned the Global administrator or the Global reviewer role . Follow the steps to import snapshots. **Step 1 –** In the Manage historical snapshots section, click Manage. **Step 2 –** Select the snapshots that you want to import. **Step 3 –** Move the selected snapshots to the Snapshots available for reporting list using the arrow button. **Step 4 –** When finished, click OK. | Review your data source settings and click **Add** to go back to your plan. The newly created data source will appear in the **Data source** list. As a next step, click **Add item** to specify an object for monitoring. See the -[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +[Add Items for Monitoring](/docs/auditor/10.8/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional information. ## Data Collection from VMware Servers On a high level, data collection process for VMware servers works as follows: -![hiw_diagram_vma_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/vmware/hiw_diagram_vma_thumb_0_0.webp) +![hiw_diagram_vma_thumb_0_0](/images/auditor/10.8/admin/monitoringplans/vmware/hiw_diagram_vma_thumb_0_0.webp) VMware administrator prepares a dedicated service account with sufficient permissions to collect data from VMware servers. This account must have at least **Read Only role** on those servers. For @@ -51,7 +51,7 @@ Netwrix administrator does the following: as a data collecting account in the **Monitoring Plan wizard**. Then s/he adds items to the monitoring plan – these are VMware servers to collect data from. - Configures alerts related to VMware data source. Current version does not include predefined - alerts for that data source, so follow the [Create Alerts](/docs/auditor/10.7/admin/alertsettings/create/create.md) to + alerts for that data source, so follow the [Create Alerts](/docs/auditor/10.8/admin/alertsettings/create/create.md) to create and configure the necessary alerts. - Remember to set the filter to “**Data Source\_**equals**\_VMware**”. @@ -92,6 +92,6 @@ Complete the following fields: | --------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | **General** | | | Specify VMware ESX, ESXi, or vCenter for monitoring | Specify the ESX or ESXi host URL, or vCenter Server URL. | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See [Permissions for VMware Server Auditing ](/docs/auditor/10.7/configuration/vmware/permissions.md)topic for more information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See [Permissions for VMware Server Auditing ](/docs/auditor/10.8/configuration/vmware/permissions.md)topic for more information. | | **Virtual Machines** | | -| Specify monitoring restrictions | Select the virtual machines to be excluded from search results, reports and Activity Summaries. To add VMs to the list, click Add. Then provide the full path of the machine to exclude. Consider the following: - To exclude a single VM, provide its full path as shown in the "_What_" column of reports and Activity Summary, for example: _Vcenters\VCenterServer021\VMs\vm01_. - To exclude several VMs, you can define a mask using a wildcard, for example: - _\*\TestVM\*_ — exclude VMs with names starting with _TestVM_ (e.g., _TestVM01, TestVM_new_), located anywhere. - _\*TestVM\*_ — exclude VMs with names containing _TestVM_ (e.g., _MyTestVM02_). In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | +| Specify monitoring restrictions | Select the virtual machines to be excluded from search results, reports and Activity Summaries. To add VMs to the list, click Add. Then provide the full path of the machine to exclude. Consider the following: - To exclude a single VM, provide its full path as shown in the "_What_" column of reports and Activity Summary, for example: _Vcenters\VCenterServer021\VMs\vm01_. - To exclude several VMs, you can define a mask using a wildcard, for example: - _\*\TestVM\*_ — exclude VMs with names starting with _TestVM_ (e.g., _TestVM01, TestVM_new_), located anywhere. - _\*TestVM\*_ — exclude VMs with names containing _TestVM_ (e.g., _MyTestVM02_). In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md)topic for additional information. | diff --git a/docs/auditor/10.8/admin/monitoringplans/windows/overview.md b/docs/auditor/10.8/admin/monitoringplans/windows/overview.md index bf39755a0c..4fc9eed7fe 100644 --- a/docs/auditor/10.8/admin/monitoringplans/windows/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/windows/overview.md @@ -9,13 +9,13 @@ sidebar_position: 200 **NOTE:** Prior to configuring your monitoring plan, please read and complete the instructions in the following topics: -- [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) – To ensure successful data +- [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) – To ensure successful data collection and activity monitoring configure necessary protocols and ports for inbound and outbound connections -- [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to +- [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) – Configure data collecting accounts as required to audit your IT systems -- [Windows Server](/docs/auditor/10.7/configuration/windowsserver/overview.md) – Configure data source as +- [Windows Server](/docs/auditor/10.8/configuration/windowsserver/overview.md) – Configure data source as required to be monitored Complete the following fields: @@ -26,15 +26,15 @@ Complete the following fields: | Monitor this data source and collect activity data | Enable monitoring of the selected data source and configure Auditor to collect and store audit data. | | Monitor changes to system components | Select the system components that you want to audit for changes. Review the following for additional information: - General computer settings—Enables auditing of general computer settings. For example, computer name or workgroup changes. - Hardware—Enables auditing of hardware devices configuration. For example, your network adapter configuration changes. - Add/Remove programs—Enables auditing of installed and removed programs. For example, Microsoft Office package has been removed from the audited Windows Server. - Services—Enables auditing of started/stopped services. For example, the Windows Firewall service stopped. - Audit policies—Enables auditing of local advanced audit policies configuration. For example, the Audit User Account Management advanced audit policy is set to "_Failure_". - DHCP configuration—Enables auditing of DHCP configuration changes. - Scheduled tasks—Enables auditing of enabled / disabled / modified scheduled tasks. For example, the GoogleUpdateTaskMachineUA scheduled task trigger changes. - Local users and groups—Enables auditing of local users and groups. For example, an unknown user was added to the Administrators group. - DNS configuration—Enables auditing of your DNS configuration changes. For example, your DNS security parameters' changes. - DNS resource records—Enables auditing of all types of DNS resource records. For example, A-type resource records (Address record) changes. - File shares—Enables auditing of created / removed / modified file shares and their properties. For example, a new file share was created on the audited Windows Server. - Removable media—Enables auditing of USB thumb drives insertion. | | Specify data collection method | You can enable **network traffic compression.** If enabled, a Compression Service will be automatically launched on the audited computer, collecting and prefiltering data. This significantly improves data transfer and minimizes the impact on the target computer performance. | -| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [Windows Server](/docs/auditor/10.7/configuration/windowsserver/overview.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. | -| Collect data for state-in-time reports | Configure Auditor to store daily snapshots of your system configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) topic for additional information. When auditing file servers, changes to effective access permissions can be tracked in addition to audit permissions. By default, Combination of file and share permissions is tracked. File permissions define who has access to local files and folders. Share permissions provide or deny access to the same resources over the network. The combination of both determines the final access permissions for a shared folder—the more restrictive permissions are applied. Upon selecting Combination of file and share permissions only the resultant set will be written to the Audit Database. Select File permissions option too if you want to see difference between permissions applied locally and the effective file and share permissions set. To disable auditing of effective access, unselect all checkboxes under Include details on effective permissions. In the Schedule state-in-time data collection section, you can select a custom weekly interval for snapshots collection. Click Modify and select day(s) of week you want your snapshot to be collected. In the Manage historical snapshots section, you can click **Manage** and select the snapshots that you want to import to the Audit Database to generate a report on the data source's state at the specific moment in the past. You must be assigned the Global administrator or the Global reviewer role to import snapshots. Move the selected snapshots to the Snapshots available for reporting list using the arrow button. The product updates the latest snapshot on the regular basis to keep users up to date on actual system state. Users can also configure Only the latest snapshot is available for reporting in Auditor. If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. | +| Configure audit settings | You can adjust audit settings automatically. Your current audit settings will be checked on each data collection and adjusted if necessary. This method is recommended for evaluation purposes in test environments. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. Do not select the checkbox if you want to configure audit settings manually. See the [Windows Server](/docs/auditor/10.8/configuration/windowsserver/overview.md) configuration topic for additional information about audit settings required to collect comprehensive audit data and the instructions on how to configure them. | +| Collect data for state-in-time reports | Configure Auditor to store daily snapshots of your system configuration required for further state-in-time reports generation. See the [State–In–Time Reports](/docs/auditor/10.8/admin/reports/types/stateintime/overview.md) topic for additional information. When auditing file servers, changes to effective access permissions can be tracked in addition to audit permissions. By default, Combination of file and share permissions is tracked. File permissions define who has access to local files and folders. Share permissions provide or deny access to the same resources over the network. The combination of both determines the final access permissions for a shared folder—the more restrictive permissions are applied. Upon selecting Combination of file and share permissions only the resultant set will be written to the Audit Database. Select File permissions option too if you want to see difference between permissions applied locally and the effective file and share permissions set. To disable auditing of effective access, unselect all checkboxes under Include details on effective permissions. In the Schedule state-in-time data collection section, you can select a custom weekly interval for snapshots collection. Click Modify and select day(s) of week you want your snapshot to be collected. In the Manage historical snapshots section, you can click **Manage** and select the snapshots that you want to import to the Audit Database to generate a report on the data source's state at the specific moment in the past. You must be assigned the Global administrator or the Global reviewer role to import snapshots. Move the selected snapshots to the Snapshots available for reporting list using the arrow button. The product updates the latest snapshot on the regular basis to keep users up to date on actual system state. Users can also configure Only the latest snapshot is available for reporting in Auditor. If you want to generate reports based on different snapshots, you must import snapshots to the Audit Database. | | Activity | | -| Specify monitoring restrictions | Specify restriction filters to narrow your Windows Server monitoring scope (search results, reports and Activity Summaries). For example, you can exclude system activity on a particular objects on all computers. All filters are applied using AND logic. Click Add and complete the following fields: - User who initiated the change: – provide the name of the user whose changes you want to ignore as shown in the "_Who_" column of reports and Activity Summaries. Example: _mydomain\user1_. You can provide the "_System_" value to exclude events containing the “_System_” instead of an account name in the “_Who_” column. - Windows Server which setting was changed: – provide the name of the server in your IT infrastructure whose changes you want to ignore as shown in the "_What_" column of reports and Activity Summaries. Example: _winsrv2016-01.mydomain.local_. - Setting changed: – provide the name for unwanted settings as shown in the "_What_" column in reports and Activity Summaries. Example: _System Properties\*_. You can use a wildcard (\*) to replace any number of characters in filters. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | +| Specify monitoring restrictions | Specify restriction filters to narrow your Windows Server monitoring scope (search results, reports and Activity Summaries). For example, you can exclude system activity on a particular objects on all computers. All filters are applied using AND logic. Click Add and complete the following fields: - User who initiated the change: – provide the name of the user whose changes you want to ignore as shown in the "_Who_" column of reports and Activity Summaries. Example: _mydomain\user1_. You can provide the "_System_" value to exclude events containing the “_System_” instead of an account name in the “_Who_” column. - Windows Server which setting was changed: – provide the name of the server in your IT infrastructure whose changes you want to ignore as shown in the "_What_" column of reports and Activity Summaries. Example: _winsrv2016-01.mydomain.local_. - Setting changed: – provide the name for unwanted settings as shown in the "_What_" column in reports and Activity Summaries. Example: _System Properties\*_. You can use a wildcard (\*) to replace any number of characters in filters. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md)topic for additional information. | Review your data source settings and click **Add** to go back to your plan. The newly created data source will appear in the **Data source** list. As a next step, click **Add item** to specify an object for monitoring. See the -[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional +[Add Items for Monitoring](/docs/auditor/10.8/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional information. ## Computer @@ -44,15 +44,15 @@ account (other than the one you specified during monitoring plan creation), sele want to use and enter credentials. The following choices are available: - User/password. The account must be granted the same permissions and access rights as the default - account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for + account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. - Group Managed Service Account (gMSA). You should specify only the account name in the domain\account$ format. See the - [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic for additional + [Use Group Managed Service Account (gMSA)](/docs/auditor/10.8/requirements/gmsa.md) topic for additional information. - Netwrix Privilege Secure. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the - [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. + [Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) topic for additional information. ## IP Range @@ -62,7 +62,7 @@ Complete the following fields: | --------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | General | | | Specify IP range | Specify an IP range for the audited computers. To exclude computers from within the specified range, click **Exclude**. Enter the IP subrange you want to exclude, and click **Add**. | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. | ## AD Container @@ -72,16 +72,16 @@ Complete the following fields: | --------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | General | | | Specify AD container | Specify a whole AD domain, OU or container. Click **Browse** to select from the list of containers in your network. You can also: - Select a particular computer type to be audited within the chosen AD container: **Domain controllers, Servers (excluding domain controllers)**, or **Workstations**. - Click **Exclude** to specify AD domains, OUs, and containers you do not want to audit. In the Exclude Containers dialog, click Add and specify an object. The list of containers does not include child domains of trusted domains. Use other options **(Computer, IP range** to specify the target computers. | -| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. If using a group Managed Service Account (gMSA), you can specify only the account name in the _domain\account$_ format. Password field can be empty. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information. Refer to the [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) topic for more information on using Netwrix Privilege Secure as an account for data collection. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the[Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information. | +| Specify the account for collecting data | Select the account that will be used to collect data for this item. If you want to use a specific account (other than the one you specified during monitoring plan creation), select **Custom account** and enter credentials. The credentials are case sensitive. If using a group Managed Service Account (gMSA), you can specify only the account name in the _domain\account$_ format. Password field can be empty. Starting with version 10.7, you can implement the integration between Netwrix Auditor and Netwrix Privilege Secure. See the [Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) topic for additional information. Refer to the [Permissions for Active Directory Auditing](/docs/auditor/10.8/configuration/activedirectory/permissions.md) topic for more information on using Netwrix Privilege Secure as an account for data collection. A custom account must be granted the same permissions and access rights as the default account used for data collection. See the[Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. | | Containers and Computers | | | Monitor hidden shares | By default, Auditor will monitor all shares stored in the specified location, except for hidden shares (both default and user-defined). Select **Monitor user-defined hidden shares** if necessary. Even when this option is selected, the product will not collect data from administrative hidden shares such as: default system root or Windows directory (ADMIN$), default drive shares (D$, E$, etc.), shares used by printers to enable remote administration (PRINT$), etc. | -| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. Depending on the type of the object you want to exclude, select one of the following: - Add AD Container – Browse for a container to be excluded from being audited. You can select a whole AD domain, OU or container. - Add Computer – Provide the name of the computer you want to exclude as shown in the "_Where_" column of reports and Activity Summaries. For example, _backupsrv01.mydomain.local_. Wildcards (\*) are not supported. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md)topic for additional information. | +| Specify monitoring restrictions | Specify restriction filters to narrow your monitoring scope (search results, reports and Activity Summaries). All filters are applied using AND logic. Depending on the type of the object you want to exclude, select one of the following: - Add AD Container – Browse for a container to be excluded from being audited. You can select a whole AD domain, OU or container. - Add Computer – Provide the name of the computer you want to exclude as shown in the "_Where_" column of reports and Activity Summaries. For example, _backupsrv01.mydomain.local_. Wildcards (\*) are not supported. In addition to the restrictions for a monitoring plan, you can use the \*.txt files to collect more granular audit data. Note that the new monitoring scope restrictions apply together with previous exclusion settings configured in the \*.txt files. See the [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md)topic for additional information. | ## Use Netwrix Privilege Secure as a Data Collecting Account Starting with version 10.7, you can use Netwrix Privilege Secure to manage the account for collecting data, after configuring the integration. See the -[Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information about +[Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) topic for additional information about integration and supported data sources. In this case, the credentials will not be stored by Netwrix Auditor. Instead, they will be managed by Netwrix Privilege Secure and provided on demand, ensuring password rotation or using temporary accounts for data collection. @@ -93,7 +93,7 @@ Follow the steps to use Netwrix Privilege Secure as an account for data collect **Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data collection. -![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) +![npsdatacollectingaccount](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccount.webp) **Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. Credential-based is the default option. Refer to the @@ -106,7 +106,7 @@ and to which Netwrix Auditor has the access through a Credential-based access po **NOTE:** Netwrix recommends using different credentials for different monitoring plans and data sources. -![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) +![npsdatacollectingaccountresourced](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) The second option is Resource-based. To use this option, you need to provide the Activity and Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure diff --git a/docs/auditor/10.8/admin/navigation/customizeexamples.md b/docs/auditor/10.8/admin/navigation/customizeexamples.md index d8275c667d..0d8da3b1d7 100644 --- a/docs/auditor/10.8/admin/navigation/customizeexamples.md +++ b/docs/auditor/10.8/admin/navigation/customizeexamples.md @@ -17,14 +17,14 @@ Follow the steps to view a report and add it to the list of Favorites. **Step 2 –** Open a report you are interested in; for example, Account Permissions in Active Directory: -![scenario_reports_1](/images/auditor/10.7/admin/navigation/scenario_reports_1.webp) +![scenario_reports_1](/images/auditor/10.8/admin/navigation/scenario_reports_1.webp) **Step 3 –** Click the report menu (three dots) to the right and select Add to favorites. (Alternatively, click the star icon in the upper right corner of the report description.) The report is added to the Favorite reports section on the home page and you can run it instantly. -![scenario_reports_2](/images/auditor/10.7/admin/navigation/scenario_reports_2.webp) +![scenario_reports_2](/images/auditor/10.8/admin/navigation/scenario_reports_2.webp) ## Run Search and Create Alert @@ -33,7 +33,7 @@ Follow the steps to run search and create the alert based on the search filters. **Step 1 –** On the main Auditor page, click the Search Activity Records tile. **Step 2 –** Specify search filters to narrow your search results. See the -[Use Filters in Simple Mode](/docs/auditor/10.7/admin/search/filtersimple.md) topic for additional information. +[Use Filters in Simple Mode](/docs/auditor/10.8/admin/search/filtersimple.md) topic for additional information. **Step 3 –** Click Search. @@ -43,7 +43,7 @@ Follow the steps to run search and create the alert based on the search filters. suspicious activity that matches your current search criteria. **Step 6 –** Specify a name for the new alert. See the -[Create Alerts](/docs/auditor/10.7/admin/alertsettings/create/create.md)topic for additional information. +[Create Alerts](/docs/auditor/10.8/admin/alertsettings/create/create.md)topic for additional information. Now, whenever there is activity that matches your search criteria, the appropriate people will receive a notification. You can also review the list of triggered alerts by clicking the Alerts tile @@ -57,7 +57,7 @@ Follow the steps to review risks and pin important ones to the Home Screen. **Step 2 –** Review the Risk Assessment Overview dashbord and select the risk you are interested in, such as "_User Accounts with administrative permissions_". See the -[IT Risk Assessment Overview ](/docs/auditor/10.7/admin/riskassessment/overview.md) topic for additional information. +[IT Risk Assessment Overview ](/docs/auditor/10.8/admin/riskassessment/overview.md) topic for additional information. **Step 3 –** To access this risk quickly, pin it to the home page, as follows: @@ -66,7 +66,7 @@ such as "_User Accounts with administrative permissions_". See the 3. Search the group of risks you want to pin to the home page (in this case, the "_Permissions_" risks group): - ![scenario_risks_thumb_0_0](/images/auditor/10.7/admin/navigation/scenario_risks_thumb_0_0.webp) + ![scenario_risks_thumb_0_0](/images/auditor/10.8/admin/navigation/scenario_risks_thumb_0_0.webp) **Step 4 –** Click Add. @@ -76,4 +76,4 @@ The selected risks group is added to the home screen. Personalize the home page of the product depending on your business needs. Review the customization settings and collect only required tiles for quick access on the Auditor home page. See the -[Customize Home Screen](/docs/auditor/10.7/admin/navigation/customizehome.md) topic for additional information. +[Customize Home Screen](/docs/auditor/10.8/admin/navigation/customizehome.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/navigation/customizefavorite.md b/docs/auditor/10.8/admin/navigation/customizefavorite.md index af3d7d0d25..a2f5fa74c3 100644 --- a/docs/auditor/10.8/admin/navigation/customizefavorite.md +++ b/docs/auditor/10.8/admin/navigation/customizefavorite.md @@ -12,7 +12,7 @@ update the full list, click View all. The Home > Reports page opens. This page includes several folders: Favorites, Predefined, Compliance and Custom. Favorite reports are located in the Favorites folder. -![reportsfavorites](/images/auditor/10.7/admin/navigation/reportsfavorites.webp) +![reportsfavorites](/images/auditor/10.8/admin/navigation/reportsfavorites.webp) Follow the steps to add or remove a Favorite report @@ -23,7 +23,7 @@ Follow the steps to add or remove a Favorite report **Step 3 –** To change whether the report is a favorite, click the star icon in the upper right-hand corner of the report description. -![reportsummary](/images/auditor/10.7/admin/navigation/reportsummary.webp) +![reportsummary](/images/auditor/10.8/admin/navigation/reportsummary.webp) Report Summary with Star icon unchecked @@ -33,14 +33,14 @@ The options on the Reports page for Favorite reports are show below: | | | | -------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| ![favoritesrestorerefresh](/images/auditor/10.7/admin/navigation/favoritesrestorerefresh.webp) | ![reportsoptions](/images/auditor/10.7/admin/navigation/reportsoptions.webp) | +| ![favoritesrestorerefresh](/images/auditor/10.8/admin/navigation/favoritesrestorerefresh.webp) | ![reportsoptions](/images/auditor/10.8/admin/navigation/reportsoptions.webp) | | _Favorites Sub-Folder Options_ | _Favorites > [Report] Options_ | | Option Name | Description | | --- | --- | | Restore Default | Repopulates the Favorites sub-folder with all reports that have been marked Favorite. When using Role-Based Access in Netwrix Auditor, if several users mark the same report as **Favorite**, then that report will be removed from the Favorites list if a user removes the report from the Favorites list. Using the **Restore Default** option will re-add the report to the Favorites list for all users that have not removed the Favorite mark. | | Refresh | Runs the reports in the Favorites folder to display the most recent information. | -| View | Opens the Preview Report page. There, you can modify report options (such as the timeframe) if desired, and then click View Report to see the resulting report. See the [View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information. | -| Subscribe | Opens the Add Subscription to Report page. See the [Create Subscriptions](/docs/auditor/10.7/admin/subscriptions/create.md) topic for additional information. | +| View | Opens the Preview Report page. There, you can modify report options (such as the timeframe) if desired, and then click View Report to see the resulting report. See the [View Reports](/docs/auditor/10.8/admin/reports/view.md) topic for additional information. | +| Subscribe | Opens the Add Subscription to Report page. See the [Create Subscriptions](/docs/auditor/10.8/admin/subscriptions/create.md) topic for additional information. | | Add to Favorites | This option is greyed out when viewing the Favorites list, since all the reports shown have already been added to Favorites. | | Remove from Favorites | Removes a report from the Favorites list. This option provides the same function as removing a report as a favorite using the **Star** icon. | | Go to Original | Expands the sub-folder in which the report is originally located. For example, clicking **Go to Original** for the Enterprise Overview report will expand the **Predefined > Organization Level Reports** sub-folder. | diff --git a/docs/auditor/10.8/admin/navigation/customizehome.md b/docs/auditor/10.8/admin/navigation/customizehome.md index b2a3c2f8e5..53648ad00a 100644 --- a/docs/auditor/10.8/admin/navigation/customizehome.md +++ b/docs/auditor/10.8/admin/navigation/customizehome.md @@ -39,7 +39,7 @@ Follow the steps to remove a tile from the Home Screen. **Step 3 –** Click **close (x)**: -![remove_tile](/images/auditor/10.7/admin/navigation/remove_tile.webp) +![remove_tile](/images/auditor/10.8/admin/navigation/remove_tile.webp) **Step 4 –** Click Apply. @@ -61,7 +61,7 @@ Follow the steps to resizea tile. **Step 3 –** Click the **resize** button: -![homescreenresizetile](/images/auditor/10.7/admin/navigation/homescreenresizetile.webp) +![homescreenresizetile](/images/auditor/10.8/admin/navigation/homescreenresizetile.webp) **Step 4 –** Select the preferred size from the drop-down list. diff --git a/docs/auditor/10.8/admin/navigation/overview.md b/docs/auditor/10.8/admin/navigation/overview.md index acffd74684..6dcd7c009a 100644 --- a/docs/auditor/10.8/admin/navigation/overview.md +++ b/docs/auditor/10.8/admin/navigation/overview.md @@ -25,38 +25,38 @@ information. The following tiles are displayed on the initially configured Home The Welcome to Netwrix Auditor Tile tile provides a checklist you can use to get started collecting and viewing data about your IT ecosystem. -![welcome_section](/images/auditor/10.7/admin/navigation/welcome_section.webp) +![welcome_section](/images/auditor/10.8/admin/navigation/welcome_section.webp) - The "Create a monitoring plan" link prompts you to create a monitoring plan for at least one data source (such as Active Directory, Exchange Online or network devices). For detailed instructions - on how to create a monitoring plan, see the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md) + on how to create a monitoring plan, see the [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md) topic for additional information. Wait until the initial data collection completes. - Clicking the second link opens a dashboard that lists all the monitoring plans you’ve created, along with the status and last activity time for each. Review this list and address any errors or - warnings. See the [Monitoring Overview](/docs/auditor/10.7/admin/healthstatus/dashboard/monitoringoverview.md) topic for + warnings. See the [Monitoring Overview](/docs/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview.md) topic for additional information. - Once have created a monitoring plan and verified that it is properly configured, run one or more searches to get insights into your IT infrastructure. See the - [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) topic for additional information. + [View and Search Collected Data](/docs/auditor/10.8/admin/search/overview.md) topic for additional information. When you have completed these three steps, you can close this tile by clicking the "Close" link at the bottom. The checklist will be replaced by statistics across your audited systems. See the -[Customize Home Screen](/docs/auditor/10.7/admin/navigation/customizehome.md) topic for additional information. +[Customize Home Screen](/docs/auditor/10.8/admin/navigation/customizehome.md) topic for additional information. ### Audit Intelligence Tiles This section contains four tiles for getting security intelligence about your IT infrastructure: -![section_left](/images/auditor/10.7/admin/navigation/section_left.webp) +![section_left](/images/auditor/10.8/admin/navigation/section_left.webp) | Tile | Description | | ----------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| NEW MONITORING PLAN | Create a new monitoring plan for a particular data source. See the [Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional information. | -| SEARCH ACTIVITY RECORDS | Investigate incidents by running interactive searches using data collected across the entire IT infrastructure. See the [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) topic for additional information. | -| REPORTS | Access the predefined reports for each data source and create custom reports. See the [Reports](/docs/auditor/10.7/admin/reports/overview.md) topic for additional information. | -| BEHAVIOR ANOMALIES | Detect and investigate unusual behavior in your IT environment. See the [Behavior Anomalies](/docs/auditor/10.7/admin/behavioranomalies/overview.md) topic for additional information. | +| NEW MONITORING PLAN | Create a new monitoring plan for a particular data source. See the [Create a New Monitoring Plan](/docs/auditor/10.8/admin/monitoringplans/create.md) topic for additional information. | +| SEARCH ACTIVITY RECORDS | Investigate incidents by running interactive searches using data collected across the entire IT infrastructure. See the [View and Search Collected Data](/docs/auditor/10.8/admin/search/overview.md) topic for additional information. | +| REPORTS | Access the predefined reports for each data source and create custom reports. See the [Reports](/docs/auditor/10.8/admin/reports/overview.md) topic for additional information. | +| BEHAVIOR ANOMALIES | Detect and investigate unusual behavior in your IT environment. See the [Behavior Anomalies](/docs/auditor/10.8/admin/behavioranomalies/overview.md) topic for additional information. | ### Configuration Tile @@ -65,35 +65,35 @@ following links: | Option | Description | | ---------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Monitoring plans | Opens the Monitoring plans wizard, where you can add, edit and delete monitoring plans, as well as group them into folders. See the [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md) topic for additional information. | -| Subscriptions | Opens the Subscriptions wizard, which enables you to subscribe to Auditor reports and searches, so you can easily stay informed about what is going on in your infrastructure. See the [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) topic for additional information. | -| Alert settings | Opens the All Alerts wizard, where you can create, edit, and enable or disable alerts on critical events in your environment. See the [Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md)topic for additional information. | +| Monitoring plans | Opens the Monitoring plans wizard, where you can add, edit and delete monitoring plans, as well as group them into folders. See the [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md) topic for additional information. | +| Subscriptions | Opens the Subscriptions wizard, which enables you to subscribe to Auditor reports and searches, so you can easily stay informed about what is going on in your infrastructure. See the [Subscriptions](/docs/auditor/10.8/admin/subscriptions/overview.md) topic for additional information. | +| Alert settings | Opens the All Alerts wizard, where you can create, edit, and enable or disable alerts on critical events in your environment. See the [Alerts](/docs/auditor/10.8/admin/alertsettings/overview.md)topic for additional information. | ## Risk Assessment, Compliance Mapping, Live News, and Health Tiles | Tile | Description | | ------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| RISK ASSESSMENT | Opens the Risk Assessment Overview dashboard, which identifies possible configuration issues in your environment that could impact security. See the [IT Risk Assessment Overview ](/docs/auditor/10.7/admin/riskassessment/overview.md) topic for additional information. | -| COMPLIANCE MAPPING | Enables you to review how Auditor can help you comply common standards and regulations. See the [Compliance Mappings](/docs/auditor/10.7/admin/compliancemappings.md) topic for additional information. | +| RISK ASSESSMENT | Opens the Risk Assessment Overview dashboard, which identifies possible configuration issues in your environment that could impact security. See the [IT Risk Assessment Overview ](/docs/auditor/10.8/admin/riskassessment/overview.md) topic for additional information. | +| COMPLIANCE MAPPING | Enables you to review how Auditor can help you comply common standards and regulations. See the [Compliance Mappings](/docs/auditor/10.8/admin/compliancemappings.md) topic for additional information. | | LIVE NEWS | Shows the latest Netwrix news, including product updates. | -| HEALTH STATUS | Opens the Health Status dashboard, which provides at-a-glance insight into product health, data collection, storage and more. See the [Health Status Dashboard](/docs/auditor/10.7/admin/healthstatus/dashboard/overview.md) topic for additional information. | -| ALERTS HISTORY | Clicking this tile opens the Alerts History dashboard, which provides detailed information about the latest alerts triggered in your IT infrastructure, enriched with actionable charts and timelines. See the [Alerts Overview Dashboard](/docs/auditor/10.7/admin/alertsettings/dashboard.md) topic for additional information. | +| HEALTH STATUS | Opens the Health Status dashboard, which provides at-a-glance insight into product health, data collection, storage and more. See the [Health Status Dashboard](/docs/auditor/10.8/admin/healthstatus/dashboard/overview.md) topic for additional information. | +| ALERTS HISTORY | Clicking this tile opens the Alerts History dashboard, which provides detailed information about the latest alerts triggered in your IT infrastructure, enriched with actionable charts and timelines. See the [Alerts Overview Dashboard](/docs/auditor/10.8/admin/alertsettings/dashboard.md) topic for additional information. | ## Favorite Reports Initially, the Favorite Reports tile lists the reports that our customers use most frequently. You can add and remove reports to reflect your needs and interests. If you have more favorite reports than can fit in the tile, simply click **View all** to see the complete list. See the -[Customizing Favorite Reports](/docs/auditor/10.7/admin/navigation/customizefavorite.md) topic for additional information. +[Customizing Favorite Reports](/docs/auditor/10.8/admin/navigation/customizefavorite.md) topic for additional information. ## Other | | | | -------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| ![alerts_triggered](/images/auditor/10.7/admin/navigation/alerts_triggered.webp) | Opens the Alerts Overview dashboard, which lists the latest alerts triggered in your IT infrastructure, enriched with actionable charts and timelines. See the [Alerts Overview Dashboard](/docs/auditor/10.7/admin/alertsettings/dashboard.md) topic for additional information. | -| ![environment_stats](/images/auditor/10.7/admin/navigation/environment_stats.webp) | This tile shows the current number of users, groups, and files and folders in your IT infrastructure in one place. Clicking the link opens the corresponding report: - Users — User Accounts state-in-time report for Active Directory - Groups — Groups state-in-time report for Active Directory - Files and Folders — Folder Tree View state-in-time report for File Servers Click Recalculate to update values. | -| ![monitroing_plans_overview](/images/auditor/10.7/admin/navigation/monitroing_plans_overview.webp) | Clicking the tile opens the Monitoring Overview dashboard, which shows the current status of each of your monitoring plans. See the [Monitoring Overview](/docs/auditor/10.7/admin/healthstatus/dashboard/monitoringoverview.md) topic for additional information. | -| ![activity_records](/images/auditor/10.7/admin/navigation/activity_records.webp) | Clicking the tile opens the Activity Record Statistics dashboard which shows the number of activity records that were collected from your data sources during the last 7 days. See the [Activity Records Statistics](/docs/auditor/10.7/admin/healthstatus/dashboard/activityrecordstatistics.md) topic for additional information. | -| ![hs_screen_default_report_1](/images/auditor/10.7/admin/navigation/hs_screen_default_report_1.webp) | Opens the listed Auditor report. See the [Custom Search-Based Reports](/docs/auditor/10.7/admin/reports/custom.md) topic for additional information. | -| ![hs_screen_default_report_2](/images/auditor/10.7/admin/navigation/hs_screen_default_report_2.webp) | Opens the listed Auditor report. See the [Predefined Reports](/docs/auditor/10.7/admin/reports/types/overview.md) topic for additional information. | -| ![recommendations_tile](/images/auditor/10.7/admin/navigation/recommendations_tile.webp) | Opens the list of the configuration recommendations provided by Netwrix industry experts to take advantage of the Auditor functionality. See the [Recommendations](/docs/auditor/10.7/admin/navigation/recommendations.md) topic for additional information. | +| ![alerts_triggered](/images/auditor/10.8/admin/navigation/alerts_triggered.webp) | Opens the Alerts Overview dashboard, which lists the latest alerts triggered in your IT infrastructure, enriched with actionable charts and timelines. See the [Alerts Overview Dashboard](/docs/auditor/10.8/admin/alertsettings/dashboard.md) topic for additional information. | +| ![environment_stats](/images/auditor/10.8/admin/navigation/environment_stats.webp) | This tile shows the current number of users, groups, and files and folders in your IT infrastructure in one place. Clicking the link opens the corresponding report: - Users — User Accounts state-in-time report for Active Directory - Groups — Groups state-in-time report for Active Directory - Files and Folders — Folder Tree View state-in-time report for File Servers Click Recalculate to update values. | +| ![monitroing_plans_overview](/images/auditor/10.8/admin/navigation/monitroing_plans_overview.webp) | Clicking the tile opens the Monitoring Overview dashboard, which shows the current status of each of your monitoring plans. See the [Monitoring Overview](/docs/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview.md) topic for additional information. | +| ![activity_records](/images/auditor/10.8/admin/navigation/activity_records.webp) | Clicking the tile opens the Activity Record Statistics dashboard which shows the number of activity records that were collected from your data sources during the last 7 days. See the [Activity Records Statistics](/docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md) topic for additional information. | +| ![hs_screen_default_report_1](/images/auditor/10.8/admin/navigation/hs_screen_default_report_1.webp) | Opens the listed Auditor report. See the [Custom Search-Based Reports](/docs/auditor/10.8/admin/reports/custom.md) topic for additional information. | +| ![hs_screen_default_report_2](/images/auditor/10.8/admin/navigation/hs_screen_default_report_2.webp) | Opens the listed Auditor report. See the [Predefined Reports](/docs/auditor/10.8/admin/reports/types/overview.md) topic for additional information. | +| ![recommendations_tile](/images/auditor/10.8/admin/navigation/recommendations_tile.webp) | Opens the list of the configuration recommendations provided by Netwrix industry experts to take advantage of the Auditor functionality. See the [Recommendations](/docs/auditor/10.8/admin/navigation/recommendations.md) topic for additional information. | diff --git a/docs/auditor/10.8/admin/navigation/recommendations.md b/docs/auditor/10.8/admin/navigation/recommendations.md index 80eb114e8d..5f4cff1b9e 100644 --- a/docs/auditor/10.8/admin/navigation/recommendations.md +++ b/docs/auditor/10.8/admin/navigation/recommendations.md @@ -12,7 +12,7 @@ Netwrix Service Accounts, you can start collecting data and review it with Netwr recommendations are based on your current product configuration and help you to experience the Auditor capabilities in earnest. -![recommendations](/images/auditor/10.7/admin/navigation/recommendations.webp) +![recommendations](/images/auditor/10.8/admin/navigation/recommendations.webp) Follow the steps to review the recommendations provided by Netwrix industry experts. @@ -34,7 +34,7 @@ To start collecting data with Netwrix Auditor, you need to create a monitoring p data collection, notification, and storage settings and add a source-specific item. This recommendation will appear if you don't have any monitoring plans configured. Clicking the **Add plan** button opens the New Monitoring Plan wizard. See the -[Create a New Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional information about plans +[Create a New Plan](/docs/auditor/10.8/admin/monitoringplans/create.md) topic for additional information about plans configuration. Once completed, you will be prompted to add an item to your plan, otherwise the configuration will be incomplete and the product will not be able to collect data. Auditor automatically suggests item types associated with your data source. @@ -44,7 +44,7 @@ automatically suggests item types associated with your data source. If you have a license for several applications, Netwrix suggests enabling each undeployed data source for each purchased application if they were never deployed before. Clicking the **Add plan** button opens the New Monitoring Plan wizard. Select the data source you want to monitor with Netwrix -Auditor and see the [Create a New Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional +Auditor and see the [Create a New Plan](/docs/auditor/10.8/admin/monitoringplans/create.md) topic for additional information about further configuration. ### Enable State-in-Time Data Collection @@ -52,10 +52,10 @@ information about further configuration. If you want to review the state of your system configuration at a specific moment in time, for example, account permissions or group membership, you need to enable the State-in-Time data collection for your data source. See the -[State–in–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) topic for additional information +[State–in–Time Reports](/docs/auditor/10.8/admin/reports/types/stateintime/overview.md) topic for additional information about the available reports. Clicking the **Go to data source** button opens the settings page of the data source to which this recommendation applies to. See the -[Manage Data Sources](/docs/auditor/10.7/admin/monitoringplans/datasources.md) topic for additional information. +[Manage Data Sources](/docs/auditor/10.8/admin/monitoringplans/datasources.md) topic for additional information. **NOTE:** This recommendation will not be shown for to the File Servers data sources (Windows-based file shares, NetApp Filers, Dell Data Storage, etc.). Navigate to your file server data source and @@ -67,10 +67,10 @@ The Health Summary email includes all statistics on the product operations and h 24 hours; it also notifies you about license status. If you have configured monitoring plans with data sources and items, Netwrix recommends subscribing to Health Summary emails to be notified on the problems that need your attention. See the -[Health Summary Email](/docs/auditor/10.7/admin/healthstatus/summaryemail.md) topic for additional information. +[Health Summary Email](/docs/auditor/10.8/admin/healthstatus/summaryemail.md) topic for additional information. Clicking the **Go to Notifications** button opens the Netwrix Auditor notifications settings page. -See the [Notifications](/docs/auditor/10.7/admin/settings/notifications.md) topic for additional information. +See the [Notifications](/docs/auditor/10.8/admin/settings/notifications.md) topic for additional information. ### Logon Activity: Start Auditing Item @@ -79,7 +79,7 @@ Netwrix recommends creating a new monitoring plan for the Logon Activity data so details around interactive and non-interactive logons, including failed logon attempts, and users logon and logoff activity on domain controllers in the audited domain. Clicking the **Add plan** button opens the New Monitoring Plan wizard with the Logon Activity as a selected data source. See -the [Create a New Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional information about further +the [Create a New Plan](/docs/auditor/10.8/admin/monitoringplans/create.md) topic for additional information about further configuration. ### Enable Alerts @@ -88,7 +88,7 @@ For the configured monitoring plans, Netwrix recommends enabling alerts to be im on the suspicious activity. You can enable predefined alerts or create your custom ones. Clicking the **Open** settings button opens the All Alerts wizard. See the -[Manage Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) topic for additional information. +[Manage Alerts](/docs/auditor/10.8/admin/alertsettings/overview.md) topic for additional information. ## Manage Recommendations @@ -105,7 +105,7 @@ Follow the steps to manage recommendations: **Step 2 –** Click **Settings** at the bottom. -![managerecommendations](/images/auditor/10.7/admin/navigation/managerecommendations.webp) +![managerecommendations](/images/auditor/10.8/admin/navigation/managerecommendations.webp) **Step 3 –** In the Manage recommendations dialog, do the following: diff --git a/docs/auditor/10.8/admin/reports/custom.md b/docs/auditor/10.8/admin/reports/custom.md index 81b6f136a0..f3ef93c961 100644 --- a/docs/auditor/10.8/admin/reports/custom.md +++ b/docs/auditor/10.8/admin/reports/custom.md @@ -20,7 +20,7 @@ move it to the new folder. The example custom report results apply to AD or Group Policy modifications by administrator. -![customreport_thumb_0_0](/images/auditor/10.7/admin/reports/types/customreport_thumb_0_0.webp) +![customreport_thumb_0_0](/images/auditor/10.8/admin/reports/types/customreport_thumb_0_0.webp) Review the following for additional information: @@ -34,7 +34,7 @@ Review the following for additional information: 1. On the main Netwrix Auditor page, navigate to Search. 2. Apply filters and click Search. - [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) how to apply filters when searching + [View and Search Collected Data](/docs/auditor/10.8/admin/search/overview.md) how to apply filters when searching audit data. 3. Navigate to Tools and select Save as report. @@ -48,7 +48,7 @@ Review the following for additional information: 3. Click View to open search. 4. Modify filters and click Search. - [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) how to apply filters when searching + [View and Search Collected Data](/docs/auditor/10.8/admin/search/overview.md) how to apply filters when searching audit data. 5. Navigate to Tools and select Save as report. diff --git a/docs/auditor/10.8/admin/reports/overview.md b/docs/auditor/10.8/admin/reports/overview.md index 28579ff0cb..5fd359d40b 100644 --- a/docs/auditor/10.8/admin/reports/overview.md +++ b/docs/auditor/10.8/admin/reports/overview.md @@ -14,15 +14,15 @@ Search technology. To review intelligence data, you must be assigned the Global administrator or Global reviewer role in the product. The users assigned the Reviewer role on a certain plan or folder have a limited access to data—only within a delegated scope. See the -[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional +[Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional informatuion. -![allactivedirectorychanges_thumb_0_0](/images/auditor/10.7/admin/reports/allactivedirectorychanges_thumb_0_0.webp) +![allactivedirectorychanges_thumb_0_0](/images/auditor/10.8/admin/reports/allactivedirectorychanges_thumb_0_0.webp) Review general report types available in Netwrix Auditor to meet your specific business needs: | Report type | Description | | ------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Predefined reports | Predefined reports pack contains over a hundred SSRS-based reports grouped by business categories and data sources. Predefined reports are helpful if you are looking for a ready-to-use template for your business needs. See the [Predefined Reports](/docs/auditor/10.7/admin/reports/types/overview.md) topic for additional information. | -| Compliance reports | For your convenience, specific reports are grouped into folders by corresponding international standards and regulations such as security controls, information security, etc. See the [Compliance Reports](/docs/auditor/10.7/admin/reports/types/compliance.md) topic for additional information. | -| Custom reports | For your convenience, the Reports section has been enhanced with Custom reports. Initially, the product provides templates for the best common workflows within Auditor. Later, you can always create custom report from interactive search and find them here. See the [Custom Search-Based Reports](/docs/auditor/10.7/admin/reports/custom.md) topic for additional information. | +| Predefined reports | Predefined reports pack contains over a hundred SSRS-based reports grouped by business categories and data sources. Predefined reports are helpful if you are looking for a ready-to-use template for your business needs. See the [Predefined Reports](/docs/auditor/10.8/admin/reports/types/overview.md) topic for additional information. | +| Compliance reports | For your convenience, specific reports are grouped into folders by corresponding international standards and regulations such as security controls, information security, etc. See the [Compliance Reports](/docs/auditor/10.8/admin/reports/types/compliance.md) topic for additional information. | +| Custom reports | For your convenience, the Reports section has been enhanced with Custom reports. Initially, the product provides templates for the best common workflows within Auditor. Later, you can always create custom report from interactive search and find them here. See the [Custom Search-Based Reports](/docs/auditor/10.8/admin/reports/custom.md) topic for additional information. | diff --git a/docs/auditor/10.8/admin/reports/reviewstatus.md b/docs/auditor/10.8/admin/reports/reviewstatus.md index b4c318bc35..fc5b0879d7 100644 --- a/docs/auditor/10.8/admin/reports/reviewstatus.md +++ b/docs/auditor/10.8/admin/reports/reviewstatus.md @@ -18,7 +18,7 @@ issues through the following automated course of action: 1. The reported changes to the monitored environment are assigned the New status by default. 2. If a change seems unauthorized, or requires further analysis, you can click the Click to update status link next to the change detailed data: - ![reviewstatus_thumb_0_0](/images/auditor/10.7/admin/reports/reviewstatus_thumb_0_0.webp)3. + ![reviewstatus_thumb_0_0](/images/auditor/10.8/admin/reports/reviewstatus_thumb_0_0.webp)3. In the **Review status** dialog for selected change, set its status to In Review and provide a reason. 3. Once the change has been approved of, or rolled back, you can set its status to Resolved. @@ -40,6 +40,6 @@ sources and items included in each plan, navigate to the Monitoring Plans sectio They list Each report has a set of filters which help organize audit data in the most convenient way. See the -[View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information. You can also create a subscription to any -report you want to receive on a regular basis. See the [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) +[View Reports](/docs/auditor/10.8/admin/reports/view.md) topic for additional information. You can also create a subscription to any +report you want to receive on a regular basis. See the [Subscriptions](/docs/auditor/10.8/admin/subscriptions/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/reports/types/activity.md b/docs/auditor/10.8/admin/reports/types/activity.md index 6138f7a4a1..7c9954f4ac 100644 --- a/docs/auditor/10.8/admin/reports/types/activity.md +++ b/docs/auditor/10.8/admin/reports/types/activity.md @@ -34,9 +34,9 @@ search field to look for the keywords you need: In the report filters, select a monitoring plan you want to generate a report for. To review data sources and items included in each plan, navigate to the Monitoring Plans section. -![allactivedirectorychanges_thumb_0_0](/images/auditor/10.7/admin/reports/allactivedirectorychanges_thumb_0_0.webp) +![allactivedirectorychanges_thumb_0_0](/images/auditor/10.8/admin/reports/allactivedirectorychanges_thumb_0_0.webp) Each report has a set of filters which help organize audit data in the most convenient way. See the -[View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information. You can also create a subscription to +[View Reports](/docs/auditor/10.8/admin/reports/view.md) topic for additional information. You can also create a subscription to any report you want to receive on a regular basis. See the -[Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) topic for additional information. +[Subscriptions](/docs/auditor/10.8/admin/subscriptions/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/reports/types/compliance.md b/docs/auditor/10.8/admin/reports/types/compliance.md index 58803543e8..ecb234e6d6 100644 --- a/docs/auditor/10.8/admin/reports/types/compliance.md +++ b/docs/auditor/10.8/admin/reports/types/compliance.md @@ -29,5 +29,5 @@ sources and items included in each plan, navigate to the Monitoring Plans sectio Review the following for additional information: -- See the [View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information on how to find the report you +- See the [View Reports](/docs/auditor/10.8/admin/reports/view.md) topic for additional information on how to find the report you need and view reports in a web browser. diff --git a/docs/auditor/10.8/admin/reports/types/datadiscoveryclassification.md b/docs/auditor/10.8/admin/reports/types/datadiscoveryclassification.md index 9dbca2c57e..763cbc2e19 100644 --- a/docs/auditor/10.8/admin/reports/types/datadiscoveryclassification.md +++ b/docs/auditor/10.8/admin/reports/types/datadiscoveryclassification.md @@ -74,5 +74,5 @@ Applicable for: In addition to reviewing reports, you can customize them with filters and create report subscriptions. Review the following for additional information: -- [View Reports](/docs/auditor/10.7/admin/reports/view.md) -- [Create Subscriptions](/docs/auditor/10.7/admin/subscriptions/create.md) +- [View Reports](/docs/auditor/10.8/admin/reports/view.md) +- [Create Subscriptions](/docs/auditor/10.8/admin/subscriptions/create.md) diff --git a/docs/auditor/10.8/admin/reports/types/enterprise.md b/docs/auditor/10.8/admin/reports/types/enterprise.md index 01d2eba0ec..c8419a52de 100644 --- a/docs/auditor/10.8/admin/reports/types/enterprise.md +++ b/docs/auditor/10.8/admin/reports/types/enterprise.md @@ -55,9 +55,9 @@ Follow the steps to review a diagram: The example below applies to Enterprise. -![dashboard](/images/auditor/10.7/admin/reports/types/dashboard.webp) +![dashboard](/images/auditor/10.8/admin/reports/types/dashboard.webp) Each report has a set of filters which help organize audit data in the most convenient way. See the -[View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information. You can also create a subscription to +[View Reports](/docs/auditor/10.8/admin/reports/view.md) topic for additional information. You can also create a subscription to any report you want to receive on a regular basis. See the -[Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) topic for additional information. +[Subscriptions](/docs/auditor/10.8/admin/subscriptions/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/reports/types/organizationlevel.md b/docs/auditor/10.8/admin/reports/types/organizationlevel.md index 5190460ce4..3b23bd3d66 100644 --- a/docs/auditor/10.8/admin/reports/types/organizationlevel.md +++ b/docs/auditor/10.8/admin/reports/types/organizationlevel.md @@ -17,8 +17,8 @@ This folder includes: | Report | Details | | ------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -| Enterprise Overview | Dashboard report with diagrams showing all activities and changes across the monitored data sources. See also: [Enterprise Overview Dashboard](/docs/auditor/10.7/admin/reports/types/enterprise.md) | -| All Activity with Review Status | Shows all activity across the entire IT infrastructure, including changes, read access and logons. Features interactive review status to supplement your change management workflow. See also: [Interactive Reports for Change Management Workflow](/docs/auditor/10.7/admin/reports/reviewstatus.md). | +| Enterprise Overview | Dashboard report with diagrams showing all activities and changes across the monitored data sources. See also: [Enterprise Overview Dashboard](/docs/auditor/10.8/admin/reports/types/enterprise.md) | +| All Activity with Review Status | Shows all activity across the entire IT infrastructure, including changes, read access and logons. Features interactive review status to supplement your change management workflow. See also: [Interactive Reports for Change Management Workflow](/docs/auditor/10.8/admin/reports/reviewstatus.md). | | All Changes by Data Source | Shows all changes across your IT infrastructure, grouped by data source. | | All Changes by Server | Shows all changes across the entire IT infrastructure, grouped by the server where the change was made. | | All Changes by User | Shows all changes across your IT infrastructure, grouped by the user who made the change. | @@ -26,6 +26,6 @@ This folder includes: | Self-Audit | Help to ensure that the scope of data to be audited is complete and all changes are in line with the workflows adopted by your organization. | Each report has a set of filters which help organize audit data in the most convenient way. See the -[View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information. You can also create a subscription to +[View Reports](/docs/auditor/10.8/admin/reports/view.md) topic for additional information. You can also create a subscription to any report you want to receive on a regular basis. See the -[Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) topic for additional information. +[Subscriptions](/docs/auditor/10.8/admin/subscriptions/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/reports/types/overview.md b/docs/auditor/10.8/admin/reports/types/overview.md index 60d2be6a03..6b2c969f60 100644 --- a/docs/auditor/10.8/admin/reports/types/overview.md +++ b/docs/auditor/10.8/admin/reports/types/overview.md @@ -15,11 +15,11 @@ find a report that is right for you, check out the predefined report types avail further analysis. The Enterprise Overview dashboard aggregates the information on changes from all data sources and provides a centralized overview. System-specific dashboards reflect all changes across all monitoring plans where audit of this target system is enabled. See the - [Enterprise Overview Dashboard](/docs/auditor/10.7/admin/reports/types/enterprise.md) topic for additional information. + [Enterprise Overview Dashboard](/docs/auditor/10.8/admin/reports/types/enterprise.md) topic for additional information. - Organization level reports—High-level reports that aggregate data from all data sources and monitoring plans. They list all activity that occurred across the audited IT infrastructure. Enterprise Overview provides bird's eye view of changes and activity from all data sources and - provides a centralized overview. See the [ Organization Level Reports](/docs/auditor/10.7/admin/reports/types/organizationlevel.md) topic + provides a centralized overview. See the [ Organization Level Reports](/docs/auditor/10.8/admin/reports/types/organizationlevel.md) topic for additional information. - Overview diagrams—System-specific diagram reports that aggregate audit data for an auditing system. They provide a high-level overview of changes within a selected time period. Overviews @@ -29,25 +29,25 @@ find a report that is right for you, check out the predefined report types avail source within specified monitoring plans. These reports show detailed data on changes and activity and provide grouping, sorting and filtering capabilities. Each report has a different set of filters allowing you to manage collected data in the most convenient way. See the - [Change and Activity Reports](/docs/auditor/10.7/admin/reports/types/activity.md) topic for additional information. + [Change and Activity Reports](/docs/auditor/10.8/admin/reports/types/activity.md) topic for additional information. - State-in-time reports—System-specific reports that aggregate data for a specific data source within a specified individual monitoring plan and allow reviewing the point-in-time state of the data source. These reports are based on daily snapshots and help you paint a picture of your system configuration at a specific moment in time. Currently, the Windows Server State-in-Time report set provides baselining functionality that help identify aberrant servers. See the - [State–In–Time Reports](/docs/auditor/10.7/admin/reports/types/stateintime/overview.md) topic for additional information. + [State–In–Time Reports](/docs/auditor/10.8/admin/reports/types/stateintime/overview.md) topic for additional information. - Changes with video reports—Windows server-based reports that provide video recordings of user - activity on audited computers. See the [Reports with Video](/docs/auditor/10.7/admin/reports/video.md) topic for additional + activity on audited computers. See the [Reports with Video](/docs/auditor/10.8/admin/reports/video.md) topic for additional information. - Changes with review status reports—Both system-specific and overview reports that can be used in the basic change management process. These reports allow setting a review status for each change and providing comments. See the - [Interactive Reports for Change Management Workflow](/docs/auditor/10.7/admin/reports/reviewstatus.md) topic for additional + [Interactive Reports for Change Management Workflow](/docs/auditor/10.8/admin/reports/reviewstatus.md) topic for additional information. Review the following for additional information: -- See the [View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information on how to find the report you +- See the [View Reports](/docs/auditor/10.8/admin/reports/view.md) topic for additional information on how to find the report you need and view reports in a web browser. -- See the [View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information on how to apply filters to +- See the [View Reports](/docs/auditor/10.8/admin/reports/view.md) topic for additional information on how to apply filters to reports. diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/activedirectory.md b/docs/auditor/10.8/admin/reports/types/stateintime/activedirectory.md index ce0e313fa1..2216369839 100644 --- a/docs/auditor/10.8/admin/reports/types/stateintime/activedirectory.md +++ b/docs/auditor/10.8/admin/reports/types/stateintime/activedirectory.md @@ -12,7 +12,7 @@ Examine the Active Directory state-in-time data on the user account attributes: To instruct Netwrix Auditor to collect data needed for the report, make sure that **Collect data for state-in-time reports** option is selected in the corresponding monitoring plan properties. See the -[Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) +[Settings for Data Collection](/docs/auditor/10.8/admin/monitoringplans/create.md#settings-for-data-collection) topic for additional information. ## User Accounts - Attributes @@ -22,11 +22,11 @@ criteria. Use this report to discover user accounts with settings that violate c applicable compliance standards. Supported object types and attributes are listed in the -[Active Directory](/docs/auditor/10.7/configuration/activedirectory/overview.md) topic. +[Active Directory](/docs/auditor/10.8/configuration/activedirectory/overview.md) topic. For this report to function properly, you must enable the **Collect data for state-in-time reports** option for the data source in the monitoring plan settings. See the -[Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) +[Settings for Data Collection](/docs/auditor/10.8/admin/monitoringplans/create.md#settings-for-data-collection) topic for additional information. ### Tips to Work with Report diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/microsoftentraid.md b/docs/auditor/10.8/admin/reports/types/stateintime/microsoftentraid.md index bae7baa4e0..0e09b804f6 100644 --- a/docs/auditor/10.8/admin/reports/types/stateintime/microsoftentraid.md +++ b/docs/auditor/10.8/admin/reports/types/stateintime/microsoftentraid.md @@ -8,7 +8,7 @@ sidebar_position: 20 To instruct Netwrix Auditor to collect data needed for the report, make sure that Collect data for state-in-time reports option is selected in the corresponding monitoring plan properties. See -[Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md). +[Create a New Monitoring Plan](/docs/auditor/10.8/admin/monitoringplans/create.md). **NOTE:** For Microsoft Entra ID, only the current date snapshot can be used for Reports. @@ -20,7 +20,7 @@ settings that violate company policies or applicable compliance standards. For this report to function properly, you must enable the Collect data for state-in-time reports option for the data source in the monitoring plan settings. See the -[Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) +[Settings for Data Collection](/docs/auditor/10.8/admin/monitoringplans/create.md#settings-for-data-collection) topic for more information. ### Tips to Work with Report diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/overview.md b/docs/auditor/10.8/admin/reports/types/stateintime/overview.md index c0906e30d5..c1e6820098 100644 --- a/docs/auditor/10.8/admin/reports/types/stateintime/overview.md +++ b/docs/auditor/10.8/admin/reports/types/stateintime/overview.md @@ -28,7 +28,7 @@ This functionality is currently available for the following data sources: To provide data for state-in-time reports, remember to select the **Collect data for state-in-time reports** option when you configure a monitoring plan for the selected data source. See the -[Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) +[Settings for Data Collection](/docs/auditor/10.8/admin/monitoringplans/create.md#settings-for-data-collection) topic for additional information. The state-in-time reports are available under the Reports node. Depending on the data source, @@ -38,12 +38,12 @@ Directory\_\_**>_**\_Active Directory\_\_**>\_**\_State-in-Time**. In the report filters, select a monitoring plan you want to generate a report for. To review data sources and items included in each plan, navigate to the Monitoring Plans section. -![fileshareswindowsservers](/images/auditor/10.7/admin/reports/types/stateintime/fileshareswindowsservers.webp) +![fileshareswindowsservers](/images/auditor/10.8/admin/reports/types/stateintime/fileshareswindowsservers.webp) Each report has a set of filters which help organize audit data in the most convenient way. See the -[View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information. You can also create a subscription +[View Reports](/docs/auditor/10.8/admin/reports/view.md) topic for additional information. You can also create a subscription to any report you want to receive on a regular basis. See the -[Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) topic for additional information. +[Subscriptions](/docs/auditor/10.8/admin/subscriptions/overview.md) topic for additional information. By default, state-in-time reports reflect the current state of the data source. If you want to generate a report to assess your system at a particular moment in the past, you can select the @@ -67,7 +67,7 @@ threat or at least merits your special attention. With baselines specified right you can easily identify servers that are different from your corporate policies or best practices. Risks are marked with red color and are easy to spot in the report. -![windowsserverinventory_thumb_0_0](/images/auditor/10.7/admin/reports/types/stateintime/windowsserverinventory_thumb_0_0.webp) +![windowsserverinventory_thumb_0_0](/images/auditor/10.8/admin/reports/types/stateintime/windowsserverinventory_thumb_0_0.webp) You can specify baseline values specific to your organization in one of the following ways: diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/sqlroles.md b/docs/auditor/10.8/admin/reports/types/stateintime/sqlroles.md index ed131cf954..23c4e66a31 100644 --- a/docs/auditor/10.8/admin/reports/types/stateintime/sqlroles.md +++ b/docs/auditor/10.8/admin/reports/types/stateintime/sqlroles.md @@ -11,7 +11,7 @@ To instruct Netwrix Auditor to collect data needed for this report, make sure th for state-in-time reports** option is selected in the monitoring plan properties. See Settings for Data Collection in the monitoring plan documentation. -![sqlserverlevelroles](/images/auditor/10.7/admin/reports/types/stateintime/sqlserverlevelroles.webp) +![sqlserverlevelroles](/images/auditor/10.8/admin/reports/types/stateintime/sqlserverlevelroles.webp) ## Reported data @@ -57,7 +57,7 @@ This report has the following filters: ## Related reports - Clicking a role member (account) link opens the - [Account Permissions in SQL Server](/docs/auditor/10.7/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md) report. + [Account Permissions in SQL Server](/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md) report. ## Usage example diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md index f0f873bc5e..7b18589e91 100644 --- a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md +++ b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md @@ -10,7 +10,7 @@ Details the effective permissions that the specified account has on the SQL Serv selected type. Use this report to review the permissions granted to users through your SQL Server objects. -![accountpermissionssqlserver_thumb_0_0](/images/auditor/10.7/admin/reports/types/stateintime/accountpermissionssqlserver_thumb_0_0.webp) +![accountpermissionssqlserver_thumb_0_0](/images/auditor/10.8/admin/reports/types/stateintime/accountpermissionssqlserver_thumb_0_0.webp) ## Reported data @@ -35,7 +35,7 @@ The detailed information under summary includes: reporting on the database hosted on selected SQL Server, the path will be as follows: _Databases\database_name_. - **Object type** — monitored object type; for the full list of supported object types, refer to - [SQL Server](/docs/auditor/10.7/configuration/sqlserver/overview.md) topic. + [SQL Server](/docs/auditor/10.8/configuration/sqlserver/overview.md) topic. - **Means granted** —how access permissions were granted to this account, e.g., _Direct permissions_ or _Server role permissions_. - **Effective grant** —the effective set of permissions granted to this account on the selected @@ -53,7 +53,7 @@ This report has the following filters: the report includes data obtained during the latest data collection session (_Current Session_). To report on other snapshots, make sure they are available through import. For details, see **Manage historical snapshots** option description in - [SQL Server](/docs/auditor/10.7/admin/monitoringplans/sqlserver/overview.md) + [SQL Server](/docs/auditor/10.8/admin/monitoringplans/sqlserver/overview.md) - **Item**— name of the SQL Server instance monitored with selected monitoring plan. - **Object path** — path to the monitored object, as formatted by Netwrix Auditor in the activity records (see '_What_' field in the reports, search results and activity summaries). Wildcard (\*) @@ -84,8 +84,8 @@ This report has the following filters: ## Related reports - Clicking a Object permissions link opens the - [Object Permissions in SQL Server](/docs/auditor/10.7/admin/reports/types/stateintime/sqlserveroverview/sqlobjectpermissions.md) report. -- Clicking a Means granted link opens the **[SQL Server Means Granted](/docs/auditor/10.7/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md)** report. + [Object Permissions in SQL Server](/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlobjectpermissions.md) report. +- Clicking a Means granted link opens the **[SQL Server Means Granted](/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md)** report. ## Usage example diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqldatabases.md b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqldatabases.md index 171c57873e..8e436b589e 100644 --- a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqldatabases.md +++ b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqldatabases.md @@ -9,7 +9,7 @@ sidebar_position: 30 This report lists the properties of databases and database snapshots hosted on the selected SQL Server instance. Use this report for your SQL Server database inventory. -![sqlserverdatabases_thumb_0_0](/images/auditor/10.7/admin/reports/types/stateintime/sqlserverdatabases_thumb_0_0.webp) +![sqlserverdatabases_thumb_0_0](/images/auditor/10.8/admin/reports/types/stateintime/sqlserverdatabases_thumb_0_0.webp) ## Reported data diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md index 810a6e9358..ac3e285e90 100644 --- a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md +++ b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md @@ -11,12 +11,12 @@ and how those permissions were granted (directly, through role membership, etc.) investigate how permissions are granted. Supported object types and attributes are listed in the -[SQL Server](/docs/auditor/10.7/configuration/sqlserver/overview.md) section. +[SQL Server](/docs/auditor/10.8/configuration/sqlserver/overview.md) section. To instruct Netwrix Auditor to collect data needed for this report, make sure that **Collect data for state-in-time reports** option is selected in the monitoring plan properties. -![sqlservermeansgranted](/images/auditor/10.7/admin/reports/types/stateintime/sqlservermeansgranted.webp) +![sqlservermeansgranted](/images/auditor/10.8/admin/reports/types/stateintime/sqlservermeansgranted.webp) ## Reported data @@ -38,7 +38,7 @@ The summary section shows: when reporting on the database hosted on selected SQL Server, the path will be as follows: _Databases\database_name_. - **Object type** — monitored object type; for the full list of supported object types, refer to - [SQL Server](/docs/auditor/10.7/configuration/sqlserver/overview.md). + [SQL Server](/docs/auditor/10.8/configuration/sqlserver/overview.md). The detailed information under summary includes: @@ -99,4 +99,4 @@ _Corp_ organization discovered that the accounts with Contractor job title has a **SQL Server Means Granted** report for that account by clicking the link in the **Means granted** field for that account. -![sqlservermeansgranteddetails](/images/auditor/10.7/admin/reports/types/stateintime/sqlservermeansgranteddetails.webp) +![sqlservermeansgranteddetails](/images/auditor/10.8/admin/reports/types/stateintime/sqlservermeansgranteddetails.webp) diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlobjectpermissions.md b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlobjectpermissions.md index a76ea56ff8..3954356ee5 100644 --- a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlobjectpermissions.md +++ b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlobjectpermissions.md @@ -10,9 +10,9 @@ This report shows a detailed list of the effective permissions that accounts hav object. Use this report to review who has access to your SQL Server objects. Supported object types and attributes are listed in the -[SQL Server](/docs/auditor/10.7/configuration/sqlserver/overview.md) section. +[SQL Server](/docs/auditor/10.8/configuration/sqlserver/overview.md) section. -![objectpermissionssqlserver_thumb_0_0](/images/auditor/10.7/admin/reports/types/stateintime/objectpermissionssqlserver_thumb_0_0.webp) +![objectpermissionssqlserver_thumb_0_0](/images/auditor/10.8/admin/reports/types/stateintime/objectpermissionssqlserver_thumb_0_0.webp) ## Reported data @@ -26,7 +26,7 @@ The summary section shows: reporting on the database hosted on selected SQL Server, the path will be as follows: _Databases\database_name_. - **Object type** — monitored object type; for the full list of supported object types, refer to - [SQL Server](/docs/auditor/10.7/configuration/sqlserver/overview.md) topic. + [SQL Server](/docs/auditor/10.8/configuration/sqlserver/overview.md) topic. - **Total account count** — total number of accounts that have access to this object. The detailed information under summary includes: @@ -58,7 +58,7 @@ This report has the following filters: the report includes data obtained during the latest data collection session (_Current Session_). To report on other snapshots, make sure they are available through import. For details, see **Manage historical snapshots** option description in the - [SQL Server](/docs/auditor/10.7/admin/monitoringplans/sqlserver/overview.md) topic. + [SQL Server](/docs/auditor/10.8/admin/monitoringplans/sqlserver/overview.md) topic. - **Item**—name of the SQL Server instance monitored with selected monitoring plan. - **Object path** —path to the monitored object, as formatted by Netwrix Auditor in the activity records (see '_What_' field in the reports, search results and activity summaries). Wildcard (\*) @@ -91,8 +91,8 @@ This report has the following filters: ## Related reports - Clicking a User account link opens the - [Account Permissions in SQL Server](/docs/auditor/10.7/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md) report. -- Clicking a Means granted link opens the[SQL Server Means Granted](/docs/auditor/10.7/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md) report. + [Account Permissions in SQL Server](/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md) report. +- Clicking a Means granted link opens the[SQL Server Means Granted](/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md) report. ## Usage example diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlserveroverview.md b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlserveroverview.md index a61861eea0..0aadbee3cf 100644 --- a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlserveroverview.md +++ b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlserveroverview.md @@ -9,13 +9,13 @@ sidebar_position: 40 These are reports on the SQL Server state-in-time data, including roles, permissions and other configuration settings: -- [Account Permissions in SQL Server](/docs/auditor/10.7/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md) -- [Object Permissions in SQL Server](/docs/auditor/10.7/admin/reports/types/stateintime/sqlserveroverview/sqlobjectpermissions.md) -- [SQL Server Databases](/docs/auditor/10.7/admin/reports/types/stateintime/sqlserveroverview/sqldatabases.md) -- [SQL Server Means Granted](/docs/auditor/10.7/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md) -- [SQL Server-Level Roles](/docs/auditor/10.7/admin/reports/types/stateintime/sqlroles.md) +- [Account Permissions in SQL Server](/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md) +- [Object Permissions in SQL Server](/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlobjectpermissions.md) +- [SQL Server Databases](/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqldatabases.md) +- [SQL Server Means Granted](/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md) +- [SQL Server-Level Roles](/docs/auditor/10.8/admin/reports/types/stateintime/sqlroles.md) To instruct Netwrix Auditor to collect data needed for these reports, make sure that **Collect data for state-in-time reports** option is selected in the corresponding monitoring plan properties. See -the [Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) +the [Settings for Data Collection](/docs/auditor/10.8/admin/monitoringplans/create.md#settings-for-data-collection) topic for additional information. By default, data collection will run daily at 4 AM. diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/vmware.md b/docs/auditor/10.8/admin/reports/types/stateintime/vmware.md index 7fb8af50a3..5869fb93ae 100644 --- a/docs/auditor/10.8/admin/reports/types/stateintime/vmware.md +++ b/docs/auditor/10.8/admin/reports/types/stateintime/vmware.md @@ -15,7 +15,7 @@ permissions: To instruct Netwrix Auditor to collect data needed for these reports, make sure that **Collect data for state-in-time reports** option is selected in the corresponding monitoring plan properties. See -the [Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) +the [Settings for Data Collection](/docs/auditor/10.8/admin/monitoringplans/create.md#settings-for-data-collection) topic for more information. ## Account Permissions in vCenter @@ -25,11 +25,11 @@ directly or through group membership). Use this report to see who has permission prevent rights elevation. Supported object types and attributes are listed in the -[VMware](/docs/auditor/10.7/configuration/vmware/overview.md) topic. +[VMware](/docs/auditor/10.8/configuration/vmware/overview.md) topic. For this report to function properly, you must enable the **Collect data for state-in-time reports** option for the data source in the monitoring plan settings. See the -[Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) +[Settings for Data Collection](/docs/auditor/10.8/admin/monitoringplans/create.md#settings-for-data-collection) topic for more information. ### Filters @@ -43,7 +43,7 @@ filters and values: the report includes data obtained during the latest data collection session (_Current Session_). To report on other snapshots, make sure they are available through import. For details, see **Manage historical snapshots** option description in - [VMware](/docs/auditor/10.7/admin/monitoringplans/vmware/overview.md) + [VMware](/docs/auditor/10.8/admin/monitoringplans/vmware/overview.md) - Item — name of the item within your monitoring plan. - Inherited — select whether to show inherited permissions or not. - Role – select the name of the VMware role you want to see in the report. @@ -61,11 +61,11 @@ Shows detailed list of privileges that the specified account has on the VMware o report to prevent unnecessary privileges assigned to custom roles. Supported object types and attributes are listed in the -[VMware](/docs/auditor/10.7/configuration/vmware/overview.md) topic. +[VMware](/docs/auditor/10.8/configuration/vmware/overview.md) topic. For this report to function properly, you must enable the **Collect data for state-in-time reports** option for the data source in the monitoring plan settings. See the -[Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) +[Settings for Data Collection](/docs/auditor/10.8/admin/monitoringplans/create.md#settings-for-data-collection) topic for more information. ### Filters @@ -79,7 +79,7 @@ filters and values: the report includes data obtained during the latest data collection session (_Current Session_). To report on other snapshots, make sure they are available through import. For details, see **Manage historical snapshots** option description in - [VMware](/docs/auditor/10.7/admin/monitoringplans/vmware/overview.md) + [VMware](/docs/auditor/10.8/admin/monitoringplans/vmware/overview.md) - Item — name of the item within your monitoring plan. - Role – select the name of the VMware role you want to see in the report. - Object path — path to the monitored object, as formatted by Netwrix Auditor in the activity @@ -94,11 +94,11 @@ granted directly or through group membership). Use this report to see who has pe and prevent rights elevation. Supported object types and attributes are listed in the -[VMware](/docs/auditor/10.7/configuration/vmware/overview.md) topic. +[VMware](/docs/auditor/10.8/configuration/vmware/overview.md) topic. For this report to function properly, you must enable the **Collect data for state-in-time reports** option for the data source in the monitoring plan settings. See the -[Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) +[Settings for Data Collection](/docs/auditor/10.8/admin/monitoringplans/create.md#settings-for-data-collection) topic for more information. ### Filters @@ -112,7 +112,7 @@ filters and values: the report includes data obtained during the latest data collection session (_Current Session_). To report on other snapshots, make sure they are available through import. For details, see **Manage historical snapshots** option description in - [VMware](/docs/auditor/10.7/admin/monitoringplans/vmware/overview.md) + [VMware](/docs/auditor/10.8/admin/monitoringplans/vmware/overview.md) - Item — name of the item within your monitoring plan. - Role – select the name of the VMware role you want to see in the report. - **Object path** —path to the monitored object, as formatted by Netwrix Auditor in the activity diff --git a/docs/auditor/10.8/admin/reports/types/userbehavior.md b/docs/auditor/10.8/admin/reports/types/userbehavior.md index 5be4292bef..6715eaf6a9 100644 --- a/docs/auditor/10.8/admin/reports/types/userbehavior.md +++ b/docs/auditor/10.8/admin/reports/types/userbehavior.md @@ -20,7 +20,7 @@ identify vulnerabilities and easily answer questions such as: Analytics reports can be found in the User Behavior and Blind Spot Analysis folder under the Predefined node. -![userbehaviorblindspotanalysis_thumb_0_0](/images/auditor/10.7/admin/reports/types/userbehaviorblindspotanalysis_thumb_0_0.webp) +![userbehaviorblindspotanalysis_thumb_0_0](/images/auditor/10.8/admin/reports/types/userbehaviorblindspotanalysis_thumb_0_0.webp) If you are sure that some audit data is missing (e.g., you do not see information on your file servers in reports and search results), verify that the Audit Database settings are configured and @@ -30,9 +30,9 @@ By default, Auditor allows generating reports and running interactive searches o the last 180 days. If you want to investigate incidents that occurred more than 180 days ago, ask your Auditor Global administrator to import that data from the Long-Term Archive. -![failedactivitytrend_thumb_0_0](/images/auditor/10.7/admin/reports/types/failedactivitytrend_thumb_0_0.webp) +![failedactivitytrend_thumb_0_0](/images/auditor/10.8/admin/reports/types/failedactivitytrend_thumb_0_0.webp) Each report has a set of filters which help organize audit data in the most convenient way. See the -[View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information. You can also create a subscription to +[View Reports](/docs/auditor/10.8/admin/reports/view.md) topic for additional information. You can also create a subscription to any report you want to receive on a regular basis. See the -[Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) topic for additional information. +[Subscriptions](/docs/auditor/10.8/admin/subscriptions/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/reports/video.md b/docs/auditor/10.8/admin/reports/video.md index d67a0ce5b6..ac7459f416 100644 --- a/docs/auditor/10.8/admin/reports/video.md +++ b/docs/auditor/10.8/admin/reports/video.md @@ -15,11 +15,11 @@ To view reports with video, navigate to Reports → User Activity. In the report filters, select a monitoring plan you want to generate a report for. To review data sources and items included in each plan, navigate to the Monitoring Plans section. -![ReportsWithVideo](/images/auditor/10.7/admin/reports/alluseractivityvideo_thumb_0_0.webp) +![ReportsWithVideo](/images/auditor/10.8/admin/reports/alluseractivityvideo_thumb_0_0.webp) Each report has a set of filters which help organize audit data in the most convenient way. See the -[View Reports](/docs/auditor/10.7/admin/reports/view.md) topic for additional information. You can also create a subscription to any -report you want to receive on a regular basis. See the [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) +[View Reports](/docs/auditor/10.8/admin/reports/view.md) topic for additional information. You can also create a subscription to any +report you want to receive on a regular basis. See the [Subscriptions](/docs/auditor/10.8/admin/subscriptions/overview.md) topic for additional information. Follow the steps to play a video: diff --git a/docs/auditor/10.8/admin/reports/view.md b/docs/auditor/10.8/admin/reports/view.md index 9362e31f64..b5593ca4dc 100644 --- a/docs/auditor/10.8/admin/reports/view.md +++ b/docs/auditor/10.8/admin/reports/view.md @@ -16,26 +16,26 @@ To view reports, users need the following: reports. 2. The Browser role on the SSRS Report Server. See the - [SQL Server Reporting Services](/docs/auditor/10.7/requirements/sqlserverreportingservice.md) topic for + [SQL Server Reporting Services](/docs/auditor/10.8/requirements/sqlserverreportingservice.md) topic for additional information. To view a report You can add any elements (a dashboard, report, alert, risk, etc.) to the Auditor Home screen to -access them instantly. See the [Navigation](/docs/auditor/10.7/admin/navigation/overview.md) and -[Customize Home Screen](/docs/auditor/10.7/admin/navigation/customizehome.md) topics for additional information. +access them instantly. See the [Navigation](/docs/auditor/10.8/admin/navigation/overview.md) and +[Customize Home Screen](/docs/auditor/10.8/admin/navigation/customizehome.md) topics for additional information. 1. In Netwrix Auditor Home screen, click - ![reports_tile](/images/auditor/10.7/admin/reports/reports_tile.webp)on + ![reports_tile](/images/auditor/10.8/admin/reports/reports_tile.webp)on the left, and in the tree on the left select the report you need. To speed up the process, you can use the **Search** field, entering the keyword to search by. -![searchreports_thumb_0_0](/images/auditor/10.7/admin/reports/searchreports_thumb_0_0.webp) +![searchreports_thumb_0_0](/images/auditor/10.8/admin/reports/searchreports_thumb_0_0.webp) 2. Click View button in the right pane. -To learn how to subscribe to a report, see [Create Subscriptions](/docs/auditor/10.7/admin/subscriptions/create.md). +To learn how to subscribe to a report, see [Create Subscriptions](/docs/auditor/10.8/admin/subscriptions/create.md). ## Troubleshooting @@ -43,13 +43,13 @@ If no data is displayed in the report, you may need to do the following: 1. Make sure that the Audit Database settings are configured properly in the monitoring plan, and that data is written to databases that reside on the default SQL Server instance. See the - [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topic for additional information. + [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topic for additional information. 2. For SSRS-based reports - verify that SSRS (SQL Server Reporting Services) settings are configured - properly. See the [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topic for additional + properly. See the [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topic for additional information. 3. For state-in-time reports - verify that the monitoring plan that provides data for the report has the corresponding option selected. See the - [Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional information. + [Create a New Monitoring Plan](/docs/auditor/10.8/admin/monitoringplans/create.md) topic for additional information. ## Customize Report with Filters @@ -77,9 +77,9 @@ of the report. The filters may vary slightly depending on the audited system and The report without filtering: -![allchangesserver](/images/auditor/10.7/admin/reports/allchangesserver.webp) +![allchangesserver](/images/auditor/10.8/admin/reports/allchangesserver.webp) The report below displays changes for all audited systems made by the CORP\Administrator user on the ROOTDC2 domain controller for a month sorted by the action type. -![allchangesserverfiltered](/images/auditor/10.7/admin/reports/allchangesserverfiltered.webp) +![allchangesserverfiltered](/images/auditor/10.8/admin/reports/allchangesserverfiltered.webp) diff --git a/docs/auditor/10.8/admin/riskassessment/dashboard.md b/docs/auditor/10.8/admin/riskassessment/dashboard.md index 5cd54b4264..cca0148269 100644 --- a/docs/auditor/10.8/admin/riskassessment/dashboard.md +++ b/docs/auditor/10.8/admin/riskassessment/dashboard.md @@ -9,8 +9,8 @@ sidebar_position: 10 To access the Risk Assessment dashboard, click the corresponding tile in the main window. You can add any elements (a dashboard, report, alert, risk, etc.) to the Auditor Home screen to -access them instantly. See the [Navigation](/docs/auditor/10.7/admin/navigation/overview.md) and -[Customize Home Screen](/docs/auditor/10.7/admin/navigation/customizehome.md) topics for additional information. +access them instantly. See the [Navigation](/docs/auditor/10.8/admin/navigation/overview.md) and +[Customize Home Screen](/docs/auditor/10.8/admin/navigation/customizehome.md) topics for additional information. The IT risks are grouped into the following categories: @@ -27,7 +27,7 @@ displayed with the color indicators in accordance with the level: - Medium — yellow - Low — green -![dashboard_thumb_0_0](/images/auditor/10.7/admin/riskassessment/dashboard_thumb_0_0.webp) +![dashboard_thumb_0_0](/images/auditor/10.8/admin/riskassessment/dashboard_thumb_0_0.webp) After reviewing general risks assessment results in each category, you can drill-down to details covered in the underlying report. To do so, double-click the selected metric or use the View Report @@ -36,7 +36,7 @@ button. ## Customizing Metrics for Your Organization Default threshold values for risk levels are set in accordance with recommendations of -Netwrixindustry experts, as described in the [How Risk Levels Are Estimated ](/docs/auditor/10.7/admin/riskassessment/levels.md) topic. They +Netwrixindustry experts, as described in the [How Risk Levels Are Estimated ](/docs/auditor/10.8/admin/riskassessment/levels.md) topic. They can be, however, easily customized to reflect your organization's internal security policies and standards. Follow the steps to customize the metrics. @@ -47,7 +47,7 @@ right click Modify thresholds. **Step 3 –** Click OK to save the settings and close the dialog. -![modify_thresholds_thumb_0_0](/images/auditor/10.7/admin/riskassessment/modify_thresholds_thumb_0_0.webp) +![modify_thresholds_thumb_0_0](/images/auditor/10.8/admin/riskassessment/modify_thresholds_thumb_0_0.webp) Also, for several metrics the Customize risk indicators command is available. @@ -66,6 +66,6 @@ session. You can create a subscription to periodically receive IT risk assessment results by email or using a file share. For that, in the dashboard window click Subscribe and configure the necessary settings. -See the [Create Subscriptions](/docs/auditor/10.7/admin/subscriptions/create.md) topic for additional information. +See the [Create Subscriptions](/docs/auditor/10.8/admin/subscriptions/create.md) topic for additional information. You can also save current results to a PDF file by using the Export button in the dashboard window. diff --git a/docs/auditor/10.8/admin/riskassessment/overview.md b/docs/auditor/10.8/admin/riskassessment/overview.md index bb12269a66..43260e1d28 100644 --- a/docs/auditor/10.8/admin/riskassessment/overview.md +++ b/docs/auditor/10.8/admin/riskassessment/overview.md @@ -14,9 +14,9 @@ you to take corrective measures in the required area, ensuring the IT risks stay Risk assessment dashboard can be accessed by clicking the Risk assessment tile in the main window of Netwrix Auditor. For details about using the dashboard, see -[IT Risk Assessment Dashboard](/docs/auditor/10.7/admin/riskassessment/dashboard.md). +[IT Risk Assessment Dashboard](/docs/auditor/10.8/admin/riskassessment/dashboard.md). -For details about metrics calculation, see [How Risk Levels Are Estimated ](/docs/auditor/10.7/admin/riskassessment/levels.md). +For details about metrics calculation, see [How Risk Levels Are Estimated ](/docs/auditor/10.8/admin/riskassessment/levels.md). ## Providing Data for Risk Assessment @@ -58,7 +58,7 @@ have at least one item added. See the following table for the certain reports: **NOTE:** Risks marked with (\*) require both pre-configured NDC SQL database connection and NDC API connection. To check configuration status, go to Settings > Sensitive Data Discovery. See -[Sensitive Data Discovery ](/docs/auditor/10.7/admin/settings/sensitivedatadiscovery.md)for more information. +[Sensitive Data Discovery ](/docs/auditor/10.8/admin/settings/sensitivedatadiscovery.md)for more information. **NOTE:** Right after setting up the integration the drill down reports might be empty, while the risk indicator is already completed. Please wait until Auditor gets all the information from Netwrix @@ -71,7 +71,7 @@ to the audit database. Also, consider that all risk metrics and related reports require state-in-time data to be collected. You can select the relevant option when creating a new monitoring plan, as described in the -[Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) section. For the exising plan, refer to +[Create a New Monitoring Plan](/docs/auditor/10.8/admin/monitoringplans/create.md) section. For the exising plan, refer to the procedure below. To verify the necessary settings of the existing plan @@ -81,15 +81,15 @@ To verify the necessary settings of the existing plan 3. Go to the Audit Database section and make sure that Disable security intelligence ... checkbox is cleared. This will instruct Netwrix Auditor to store data to both Long-Term Archive and audit database: - ![edit_mp_store_data_to_db_thumb_0_0](/images/auditor/10.7/admin/riskassessment/edit_mp_store_data_to_db_thumb_0_0.webp) + ![edit_mp_store_data_to_db_thumb_0_0](/images/auditor/10.8/admin/riskassessment/edit_mp_store_data_to_db_thumb_0_0.webp) 4. Save the settings and return to the window with the monitoring plan details. Make sure you have at least one monitored item in the plan. If necessary, add an item. 5. Select the data source you need (for example, Active Directory) and click Edit data source from the Data source section on the right. - ![edit_mp_open_ds_settings_thumb_0_0](/images/auditor/10.7/admin/riskassessment/edit_mp_open_ds_settings_thumb_0_0.webp) + ![edit_mp_open_ds_settings_thumb_0_0](/images/auditor/10.8/admin/riskassessment/edit_mp_open_ds_settings_thumb_0_0.webp) 6. Make sure that: 1. Monitor this data source and collect activity data is switched ON. 2. Collect data for state-in-time reports is switched ON. 7. Save the settings and close the dialog. -![edit_data_source_sit](/images/auditor/10.7/admin/riskassessment/edit_data_source_sit.webp) +![edit_data_source_sit](/images/auditor/10.8/admin/riskassessment/edit_data_source_sit.webp) diff --git a/docs/auditor/10.8/admin/search/filteradvanced.md b/docs/auditor/10.8/admin/search/filteradvanced.md index 89c4f6f791..0f8066743e 100644 --- a/docs/auditor/10.8/admin/search/filteradvanced.md +++ b/docs/auditor/10.8/admin/search/filteradvanced.md @@ -20,7 +20,7 @@ Review the following for additional information: ## Apply Additional Filters Expand the Filter list to find additional filters or filter values. The most commonly used filters -are described in [Use Filters in Simple Mode](/docs/auditor/10.7/admin/search/filtersimple.md). Review the following for additional +are described in [Use Filters in Simple Mode](/docs/auditor/10.8/admin/search/filtersimple.md). Review the following for additional information: | Filter | Description | Example | @@ -51,7 +51,7 @@ When you apply filters at search, you can specify operators that should be used data you want to retrieve and compare with the certain filter value. A condition can be, for example, Contains, Starts with, and so on. -![advancedfilters_thumb_0_0](/images/auditor/10.7/admin/search/advancedfilters_thumb_0_0.webp) +![advancedfilters_thumb_0_0](/images/auditor/10.8/admin/search/advancedfilters_thumb_0_0.webp) The following operators can be used to specify search conditions: @@ -71,9 +71,9 @@ When you add a new search filter, the Contains operator is used by default. To modify conditions for the selected filters, make sure you have switched to the Advanced search mode. -![advanced_thumb_0_0](/images/auditor/10.7/admin/search/advanced_thumb_0_0.webp) +![advanced_thumb_0_0](/images/auditor/10.8/admin/search/advanced_thumb_0_0.webp) The image below represents the same search filters as they are shown in the Search field in the Simple mode. -![advancedexample_thumb_0_0](/images/auditor/10.7/admin/search/advancedexample_thumb_0_0.webp) +![advancedexample_thumb_0_0](/images/auditor/10.8/admin/search/advancedexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/admin/search/filtersimple.md b/docs/auditor/10.8/admin/search/filtersimple.md index 77444aab06..bd2c8e39bb 100644 --- a/docs/auditor/10.8/admin/search/filtersimple.md +++ b/docs/auditor/10.8/admin/search/filtersimple.md @@ -22,7 +22,7 @@ Filters are used to narrow your search results. To create a unique set of filter | Filter | Description | | ------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Who | Filter data by user (initiator) account. Specify an account name (e.g., John) to find all entries containing it (e.g., `Domain1\John`, `Domain1\Johnson`, `Domain2\Johnny`, `John@domain.com`). For exact match, use quotation marks and provide a user name in Domain\User or UPN format (e.g., `Domain1\John` or `John@domain.com`) . | -| Action | Filter data by action type (Added, Removed, etc.) Select an action type from the list (Added, Removed, Modified, Read). For additional actions, navigate to the Advanced mode. See the [Use Filters in Advanced Mode](/docs/auditor/10.7/admin/search/filteradvanced.md) topic for additional information. | +| Action | Filter data by action type (Added, Removed, etc.) Select an action type from the list (Added, Removed, Modified, Read). For additional actions, navigate to the Advanced mode. See the [Use Filters in Advanced Mode](/docs/auditor/10.8/admin/search/filteradvanced.md) topic for additional information. | | What | Specify an object name (e.g., _Policy_) to find all entries containing it (e.g., _HiSecPolicy_, `\\FileSserver\Share\NewFolder\NewPolicy.docx`, `http://sharepoint/sites/collection1/Lists/Policy`). Netwrix Auditor searches across all data sources. For an exact match, use quotation marks and provide an object name in the format that is typical for your data source (e.g., `HiSecPolicy`). | | When | Filter data by the time interval when the change occurred. Specify a timeframe or provide a custom date range. Netwrix Auditor allows you to see changes that occurred today, yesterday, in the last 7 or 30 days, or within the specified date range. | | Where | Specify a resource name (e.g., _Enterprise_) to find all entries containing it (e.g., `Enterprise-SQL`, `FileStorage.enterprise.local`). The resource name can be a FQDN or NETBIOS server name, Active Directory domain or container, SQL Server instance, SharePoint farm, VMware host, etc. Netwrix Auditor searches across all data sources. For an exact match, use quotation marks and provide a resource name in the format that is typical for your data source (e.g., `Enterprise-SQL`). | @@ -31,7 +31,7 @@ Follow the steps to add a filter to your search. **Step 1 –** Click a filter type icon. Enter a value you want to search for. -![Account specification](/images/auditor/10.7/admin/search/add.webp) +![Account specification](/images/auditor/10.8/admin/search/add.webp) Alternatively, you can type a value directly into the Search field. @@ -40,7 +40,7 @@ Alternatively, you can type a value directly into the Search field. To search across all columns in the results view (everywhere—Who, What, Where, Action, etc.), leave it as is. -![Filter](/images/auditor/10.7/admin/search/addsuggestions.webp) +![Filter](/images/auditor/10.8/admin/search/addsuggestions.webp) **Step 2 –** Click Search to apply your filters. By default, all entries that contain the filter value are shown. @@ -49,7 +49,7 @@ value are shown. | To... | Do... | | ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -| Modify filter | Double-click the filter and type a new value. ![Filter new value](/images/auditor/10.7/admin/search/search_modify_filter.webp) If you need to modify the When filter, delete it and add a new value, or navigate to the Advanced mode (Simple mode does not support its modification). | +| Modify filter | Double-click the filter and type a new value. ![Filter new value](/images/auditor/10.8/admin/search/search_modify_filter.webp) If you need to modify the When filter, delete it and add a new value, or navigate to the Advanced mode (Simple mode does not support its modification). | | Remove filter | Click the **Close** icon next to it. | ## Exporting and Importing Filters diff --git a/docs/auditor/10.8/admin/search/overview.md b/docs/auditor/10.8/admin/search/overview.md index 0fbf4a7c33..083d6b4090 100644 --- a/docs/auditor/10.8/admin/search/overview.md +++ b/docs/auditor/10.8/admin/search/overview.md @@ -15,7 +15,7 @@ _what_, and _when_ and _where_ each change was made. To review collected data, you must be assigned the **Global administrator** or **Global reviewer** Netwrix Auditor role. Users with the **Reviewer** role on a certain plan or folder have limited access to data—only within their delegated scope. See the -[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional +[Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. This functionality is currently available for the following data sources: @@ -39,22 +39,22 @@ This functionality is currently available for the following data sources: Integration API - Netwrix Auditor Self-Audit - Netwrix Data Classification. See - [Sensitive Data Discovery ](/docs/auditor/10.7/admin/settings/sensitivedatadiscovery.md)for more information. + [Sensitive Data Discovery ](/docs/auditor/10.8/admin/settings/sensitivedatadiscovery.md)for more information. Netwrix Auditor executes interactive search queries against data stored in the audit databases, that is, on data collected in the last 180 days (default retention period). If you want to investigate incidents that occurred more than 180 days ago, then you should import that data from the Long-Term -Archive. See [Investigations](/docs/auditor/10.7/admin/settings/investigations.md) topic for additional information. +Archive. See [Investigations](/docs/auditor/10.8/admin/settings/investigations.md) topic for additional information. ## Browsing Your Audit Data On the main Netwrix Auditor page, click -![search_tile](/images/auditor/10.7/admin/search/search_tile.webp) +![search_tile](/images/auditor/10.8/admin/search/search_tile.webp) on the left. You can add any elements (a dashboard, report, alert, risk, etc.) to the Auditor Home screen to -access them instantly. See the [Navigation](/docs/auditor/10.7/admin/navigation/overview.md) and -[Customize Home Screen](/docs/auditor/10.7/admin/navigation/customizehome.md) topics for additional information. +access them instantly. See the [Navigation](/docs/auditor/10.8/admin/navigation/overview.md) and +[Customize Home Screen](/docs/auditor/10.8/admin/navigation/customizehome.md) topics for additional information. There you can use the UI controls to run the variety of search queries that will fecth you exactly the data you need. @@ -70,13 +70,13 @@ the data you need. - To pre-configure your search query before you click Search, you can add filters. Then the search query will return only data matching your filtering criteria. See - [Use Filters in Simple Mode](/docs/auditor/10.7/admin/search/filtersimple.md) for details. + [Use Filters in Simple Mode](/docs/auditor/10.8/admin/search/filtersimple.md) for details. You can also use advanced filtering capabilities based on regular expressions (they involve - filter fields and conditions). See [Use Filters in Advanced Mode](/docs/auditor/10.7/admin/search/filteradvanced.md) for + filter fields and conditions). See [Use Filters in Advanced Mode](/docs/auditor/10.8/admin/search/filteradvanced.md) for details. - ![search_filter](/images/auditor/10.7/admin/search/search_filter.webp) + ![search_filter](/images/auditor/10.8/admin/search/search_filter.webp) - By default, search results are open in the same window, so the subsequent search results will overwrite the previous search results. To view them in different windows, click Open in new @@ -87,7 +87,7 @@ Use search results for your own needs: save, share, create search-based alerts, periodic delivery of search query results, etc. See Make Search Results Actionnable for more information. -![search_nofilter_1](/images/auditor/10.7/admin/search/search_nofilter_1.webp) +![search_nofilter_1](/images/auditor/10.8/admin/search/search_nofilter_1.webp) You can also use the **Search** window to examine details for the selected activity record, or watch a video recording (for User Ativity data). @@ -165,4 +165,4 @@ If you do not see the expected information in search results, try the following: See next: -- [Use Filters in Advanced Mode](/docs/auditor/10.7/admin/search/filteradvanced.md) +- [Use Filters in Advanced Mode](/docs/auditor/10.8/admin/search/filteradvanced.md) diff --git a/docs/auditor/10.8/admin/settings/auditdatabase.md b/docs/auditor/10.8/admin/settings/auditdatabase.md index 297bc451df..002ad331d1 100644 --- a/docs/auditor/10.8/admin/settings/auditdatabase.md +++ b/docs/auditor/10.8/admin/settings/auditdatabase.md @@ -23,7 +23,7 @@ will use a dedicated database to store data. So, there are two types of database - Specific settings for each dedicated database. You can configure specific database storage settings for each monitoring plan individually. For that, use the **Monitoring Plan** wizard or navigate to the settings. (Global settings appear as default values there, and you can modify them - if needed.) See the [Fine-Tune Your Plan and Edit Settings](/docs/auditor/10.7/admin/monitoringplans/finetune.md)  topic + if needed.) See the [Fine-Tune Your Plan and Edit Settings](/docs/auditor/10.8/admin/monitoringplans/finetune.md)  topic for additional information. Follow the steps to review and update global Audit Database settings: @@ -32,7 +32,7 @@ Follow the steps to review and update global Audit Database settings: **Step 2 –** Click **Modify** to edit the settings. -![audit_db_settings_thumb_0_0](/images/auditor/10.7/admin/settings/audit_db_settings_thumb_0_0.webp) +![audit_db_settings_thumb_0_0](/images/auditor/10.8/admin/settings/audit_db_settings_thumb_0_0.webp) **Step 3 –** Specify the following database storage settings: @@ -80,5 +80,5 @@ Reporting Services settings section. | ------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Report Server URL | Specify the Report Server URL. Make sure that the resource is reachable. | | Report Manager URL | Specify the Report Manager URL. Make sure that the resource is reachable. | -| User name | Specify the account to connect to SSRS. Use the following format: _domain\username_ or _hostname\username_ Workgroup format (_.\username_) is not supported. Use _hostname\username_ instead. Make sure this account is granted the Content Manager role on the Report Server. See the [SQL Server Reporting Services](/docs/auditor/10.7/requirements/sqlserverreportingservice.md) topic for additional information. | +| User name | Specify the account to connect to SSRS. Use the following format: _domain\username_ or _hostname\username_ Workgroup format (_.\username_) is not supported. Use _hostname\username_ instead. Make sure this account is granted the Content Manager role on the Report Server. See the [SQL Server Reporting Services](/docs/auditor/10.8/requirements/sqlserverreportingservice.md) topic for additional information. | | Password | Enter a password. | diff --git a/docs/auditor/10.8/admin/settings/custombrand.md b/docs/auditor/10.8/admin/settings/custombrand.md index 104b8d6554..946c4855ee 100644 --- a/docs/auditor/10.8/admin/settings/custombrand.md +++ b/docs/auditor/10.8/admin/settings/custombrand.md @@ -70,7 +70,7 @@ To restore original look and feel, run the script and replace"_True_" with "_Fal By default, Netwrix Auditor reports look as follows: -![All Logon Activity](/images/auditor/10.7/admin/settings/report_rebranding_thumb_0_0.webp) +![All Logon Activity](/images/auditor/10.8/admin/settings/report_rebranding_thumb_0_0.webp) Report branding is customized on Netwrix Auditor Server side that means that all clients connected to this server will have the same look and feel for reports. @@ -103,7 +103,7 @@ db_owner role on the Netwrix_CommonDB database. After running the script, start the Netwrix Auditor client and generate a report. The branding will be updated. -![report_rebranding_result_thumb_0_0](/images/auditor/10.7/admin/settings/report_rebranding_result_thumb_0_0.webp) +![report_rebranding_result_thumb_0_0](/images/auditor/10.8/admin/settings/report_rebranding_result_thumb_0_0.webp) Follow the steps to restore original look. diff --git a/docs/auditor/10.8/admin/settings/general.md b/docs/auditor/10.8/admin/settings/general.md index ccf7059caa..fb209c452e 100644 --- a/docs/auditor/10.8/admin/settings/general.md +++ b/docs/auditor/10.8/admin/settings/general.md @@ -13,8 +13,8 @@ Review the following for additional information: | Option | Description | | --------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Self-audit | Select to enable data collection for product self-auditing. Self-audit allows tracking every change to monitoring plan, data source, and audit scope and details about it (before-after values) so that you know that scope of data to be audited is complete and changed only in line with workflows adopted by our organization. Review the following for additional information: - [Netwrix Auditor Operations and Health](/docs/auditor/10.7/admin/healthstatus/overview.md) | +| Self-audit | Select to enable data collection for product self-auditing. Self-audit allows tracking every change to monitoring plan, data source, and audit scope and details about it (before-after values) so that you know that scope of data to be audited is complete and changed only in line with workflows adopted by our organization. Review the following for additional information: - [Netwrix Auditor Operations and Health](/docs/auditor/10.8/admin/healthstatus/overview.md) | | Netwrix Auditor  usage statistics | It is optional on your part to help Netwrix improve the quality, reliability, and performance of Netwrix products and services. If selected, Netwrix collects statistical information on how the Licensee uses the product in accordance with applicable law. Visit [Netwrix Corporation Software License Agreement](https://www.netwrix.com/eula.html) for additional information about the program. You can review a sample piece of data if you are interested in data acquired by Netwrix. | -| Tags | Netwrix Auditor  allows you to apply tags when creating an alert. With alerts, you can distinguish one alert from another, create groups of similar alerts, etc. The Tags page contains a complete list of alerts that were ever created in the product. See the [Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) topic for additional information. Currently, you cannot assign or create tags on this page. To apply tags to an alert, navigate to alert settings and locate the Apply tags section on the General tab. See the [Create Alerts](/docs/auditor/10.7/admin/alertsettings/create/create.md) topic for additional information. | +| Tags | Netwrix Auditor  allows you to apply tags when creating an alert. With alerts, you can distinguish one alert from another, create groups of similar alerts, etc. The Tags page contains a complete list of alerts that were ever created in the product. See the [Alerts](/docs/auditor/10.8/admin/alertsettings/overview.md) topic for additional information. Currently, you cannot assign or create tags on this page. To apply tags to an alert, navigate to alert settings and locate the Apply tags section on the General tab. See the [Create Alerts](/docs/auditor/10.8/admin/alertsettings/create/create.md) topic for additional information. | | Account and passwords | Netwrix Auditor  allows you to assign different accounts for monitoring plans. Click **Manage** to review the full list of accounts and associated auditing scope. You can also change accounts' password if necessary. | -| Access Reviews | Netwrix Auditor supports integration with Netwrix Auditor Access Reviews, which enables business owners to conduct resource and group reviews and recommend changes. See the [Access Reviews](/docs/auditor/10.7/accessreviews/accessreviews.md) topic for additional information. | +| Access Reviews | Netwrix Auditor supports integration with Netwrix Auditor Access Reviews, which enables business owners to conduct resource and group reviews and recommend changes. See the [Access Reviews](/docs/auditor/10.8/accessreviews/accessreviews.md) topic for additional information. | diff --git a/docs/auditor/10.8/admin/settings/integrations.md b/docs/auditor/10.8/admin/settings/integrations.md index 1bd5124c05..3428cf1a31 100644 --- a/docs/auditor/10.8/admin/settings/integrations.md +++ b/docs/auditor/10.8/admin/settings/integrations.md @@ -24,7 +24,7 @@ integrations. Netwrix recommends adding a special data source to your monitoring plan—Netwrix API. In Netwrix Auditor 9.0, Netwrix has updated API schemas. See the -[Compatibility Notice](/docs/auditor/10.7/api/compatibility.md) topic for additional information. +[Compatibility Notice](/docs/auditor/10.8/api/compatibility.md) topic for additional information. To learn more about Integration API capabilities, refer to the -[Integration API](/docs/auditor/10.7/api/overview.md). +[Integration API](/docs/auditor/10.8/api/overview.md). diff --git a/docs/auditor/10.8/admin/settings/investigations.md b/docs/auditor/10.8/admin/settings/investigations.md index 40e6561a69..ee62652be0 100644 --- a/docs/auditor/10.8/admin/settings/investigations.md +++ b/docs/auditor/10.8/admin/settings/investigations.md @@ -14,20 +14,20 @@ data stored in the Long-Term Archive. Netwrix Auditor allows importing data from Archive to a special "investigation" database. Having imported data there, you can run searches and generate reports with your past data. -![investigate](/images/auditor/10.7/admin/settings/investigate.webp) +![investigate](/images/auditor/10.8/admin/settings/investigate.webp) To import audit data with the Archive Data Investigation wizard **NOTE:** You must be assigned the Global administrator role to import investigation data. To view investigation data, you must be assigned the Global administrator or Global reviewer role. See -[Assign Roles](/docs/auditor/10.7/admin/monitoringplans/delegation.md#assign-roles) topic for more information. +[Assign Roles](/docs/auditor/10.8/admin/monitoringplans/delegation.md#assign-roles) topic for more information. 1. Navigate to Settings → Investigations. 2. Complete your SQL Server settings. | Option | Description | | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | - | SQL Server Instance | Specify the name of the SQL Server instance to import your audit data to. If you want to run searches and generate reports, select the same SQL Server instance as the one specified on Settings → Audit Database page. See [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topic for more information. | + | SQL Server Instance | Specify the name of the SQL Server instance to import your audit data to. If you want to run searches and generate reports, select the same SQL Server instance as the one specified on Settings → Audit Database page. See [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topic for more information. | | Database | Select import database name. By default, data is imported to a specially created the Netwrix_ImportDB database but you can select any other. Do not select databases that already contain data. Selecting such databases leads to data overwrites and loss. | | Authentication | Select the authentication type you want to use to connect to the SQL Server instance: - Windows authentication - SQL Server authentication | | User name | Specify the account to be used to connect to the SQL Server instance. This account must be granted the **database owner (db_owner)** role and the dbcreator server role. | diff --git a/docs/auditor/10.8/admin/settings/licenses.md b/docs/auditor/10.8/admin/settings/licenses.md index 4cb6cc8f8b..1eb4abeef9 100644 --- a/docs/auditor/10.8/admin/settings/licenses.md +++ b/docs/auditor/10.8/admin/settings/licenses.md @@ -58,7 +58,7 @@ folder\Netwrix Auditor\Administrative Console_ and locate MSP.xml. For example: -![msp](/images/auditor/10.7/admin/settings/msp.webp) +![msp](/images/auditor/10.8/admin/settings/msp.webp) **NOTE:** MSP.xml file must be formatted in accordance with XML standard. If company name (used as identifier) or service account path includes & (ampersand), " (double quotes) or ' (single quotes), diff --git a/docs/auditor/10.8/admin/settings/longtermarchive.md b/docs/auditor/10.8/admin/settings/longtermarchive.md index fb3195f5cf..90aef259b6 100644 --- a/docs/auditor/10.8/admin/settings/longtermarchive.md +++ b/docs/auditor/10.8/admin/settings/longtermarchive.md @@ -10,7 +10,7 @@ The Long-Term Archive is configured by default, irrespective of your subscriptio you specified when configuring a monitoring plan. To review and update your Long-Term Archive settings, navigate to **Settings** > **Long-Term Archive** and click Modify. -![lta_settings_thumb_0_0](/images/auditor/10.7/admin/settings/lta_settings_thumb_0_0.webp) +![lta_settings_thumb_0_0](/images/auditor/10.8/admin/settings/lta_settings_thumb_0_0.webp) Review the following for additional information: @@ -19,16 +19,16 @@ Review the following for additional information: | Long-Term Archive settings | | | Write audit data to | Specify the path to a local or shared folder where your audit data will be stored. By default, it is set to _"C:\ProgramData\Netwrix Auditor\Data"_. By default, the LocalSystem account is used to write data to the local-based Long-Term Archive and computer account is used for the file share-based storage. Subscriptions created in the Auditor client are uploaded to file servers under the Long-Term Archive service account as well. It is not recommended to store your Long-Term Archive on a system disk. If you want to move the Long-Term Archive to another location, refer to the following Netwrix Knowledge base article: [How to move Long-Term Archive to a new location](https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA00g000000H9SSCA0.html). | | Keep audit data for (in months) | Specify how long data will be stored. By default, it is set to 120 months. | -| Use custom credentials (for the file share-based Long-Term Archive only) | Select the checkbox and provide user name and password for the Long-Term Archive service account. You can specify a custom account only for the Long-Term Archive stored on a file share. The custom Long-Term Archive service account can be granted the following rights and permissions: - Advanced permissions on the folder where the Long-term Archive is stored: - List folder / read data - Read attributes - Read extended attributes - Create files / write data - Create folders / append data - Write attributes - Write extended attributes - Delete subfolders and files - Read permissions - On the file shares where report subscriptions are saved: - Change share permission - Create files / write data folder permission Subscriptions created in the Auditor client  are uploaded to file servers under the Long-Term Archive service account as well. See the [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) topic for additional information. | +| Use custom credentials (for the file share-based Long-Term Archive only) | Select the checkbox and provide user name and password for the Long-Term Archive service account. You can specify a custom account only for the Long-Term Archive stored on a file share. The custom Long-Term Archive service account can be granted the following rights and permissions: - Advanced permissions on the folder where the Long-term Archive is stored: - List folder / read data - Read attributes - Read extended attributes - Create files / write data - Create folders / append data - Write attributes - Write extended attributes - Delete subfolders and files - Read permissions - On the file shares where report subscriptions are saved: - Change share permission - Create files / write data folder permission Subscriptions created in the Auditor client  are uploaded to file servers under the Long-Term Archive service account as well. See the [Subscriptions](/docs/auditor/10.8/admin/subscriptions/overview.md) topic for additional information. | Setting Recording Settings -![usersessions_storage](/images/auditor/10.7/admin/settings/usersessions_storage.webp) +![usersessions_storage](/images/auditor/10.8/admin/settings/usersessions_storage.webp) | | | | ----------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | Configure custom location of session recordings | Default location for storing session recordings is set to _"\\``\Netwrix_UAVR$"_. However, storing extra files on the Auditor  Server may produce additional load on it, so consider using this option to specify another location where session recordings will be stored. | -| Enter UNC path to shared folder: | Specify UNC path to the shared folder where user session video recordings will be stored. You can use server name or IP address, for example: _\\172.28.6.33\NA_UserSessions_ Using a local folder for that purpose is not recommended, as storing extra files on the Auditor  Server will produce additional load on it. Make sure the specified shared folder has enough capacity to store the video files. Retention period for the video files can be adjusted in the related monitoring plan settings (targeted at User Activity data source); default retention is 7 days. See the [User Activity](/docs/auditor/10.7/admin/monitoringplans/overview_1.md) topic for additional information. After you specify and save settings for session recordings, it is recommended that you leave them unchanged. Otherwise — if you change the storage location while using Netwrix Auditor for User Activity — please be aware of possible data loss, as Auditor  will not automatically move session recordings to a new location. | +| Enter UNC path to shared folder: | Specify UNC path to the shared folder where user session video recordings will be stored. You can use server name or IP address, for example: _\\172.28.6.33\NA_UserSessions_ Using a local folder for that purpose is not recommended, as storing extra files on the Auditor  Server will produce additional load on it. Make sure the specified shared folder has enough capacity to store the video files. Retention period for the video files can be adjusted in the related monitoring plan settings (targeted at User Activity data source); default retention is 7 days. See the [User Activity](/docs/auditor/10.8/admin/monitoringplans/overview_1.md) topic for additional information. After you specify and save settings for session recordings, it is recommended that you leave them unchanged. Otherwise — if you change the storage location while using Netwrix Auditor for User Activity — please be aware of possible data loss, as Auditor  will not automatically move session recordings to a new location. | | User name / Password | Provide user name and password for the account that will be used to store session recordings to the specified shared folder. Make sure the account has at least the Write permission for that folder. | Auditor  informs you if you are running out of space on a system disk where the Long-Term Archive is diff --git a/docs/auditor/10.8/admin/settings/notifications.md b/docs/auditor/10.8/admin/settings/notifications.md index 52a21bbc48..f35a5bc6f9 100644 --- a/docs/auditor/10.8/admin/settings/notifications.md +++ b/docs/auditor/10.8/admin/settings/notifications.md @@ -132,7 +132,7 @@ and click Modify to adjust them if necessary. | Enforce certificate validation to ensure security | Select this checkbox if you want to verify security certificate on every email transmission. The option is not available for auditing User Activity as well Netwrix Auditor tools. | You can configure Activity Summary frequency, format and delivery time for each monitoring plan -individually. See the [Fine-Tune Your Plan and Edit Settings](/docs/auditor/10.7/admin/monitoringplans/finetune.md) topic +individually. See the [Fine-Tune Your Plan and Edit Settings](/docs/auditor/10.8/admin/monitoringplans/finetune.md) topic for more information. After that, you can specify the recipient who will receive product activity and health summary @@ -153,4 +153,4 @@ Follow the steps to send summary emails and notifications about critical events. To learn more about product health, you can also navigate to the Health status tile in the main window. It will take you to the Health Status dashboard that contains information on the product activity and system health state. See the -[Health Status Dashboard](/docs/auditor/10.7/admin/healthstatus/dashboard/overview.md) topic for additional information. +[Health Status Dashboard](/docs/auditor/10.8/admin/healthstatus/dashboard/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/settings/overview.md b/docs/auditor/10.8/admin/settings/overview.md index ddf33d5239..31d3c620d6 100644 --- a/docs/auditor/10.8/admin/settings/overview.md +++ b/docs/auditor/10.8/admin/settings/overview.md @@ -10,14 +10,14 @@ In the Settings section, you can configure product settings, such as default SQL Audit Database, the Long-Term Archive location and retention period, etc. You can also review information about the product version and your licenses. See the following sections: -- [General](/docs/auditor/10.7/admin/settings/general.md) -- [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) -- [Long-Term Archive](/docs/auditor/10.7/admin/settings/longtermarchive.md) -- [Investigations](/docs/auditor/10.7/admin/settings/investigations.md) -- [Notifications](/docs/auditor/10.7/admin/settings/notifications.md) -- [Integrations](/docs/auditor/10.7/admin/settings/integrations.md) -- [Licenses](/docs/auditor/10.7/admin/settings/licenses.md) -- [About Netwrix Auditor](/docs/auditor/10.7/admin/settings/about.md) +- [General](/docs/auditor/10.8/admin/settings/general.md) +- [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) +- [Long-Term Archive](/docs/auditor/10.8/admin/settings/longtermarchive.md) +- [Investigations](/docs/auditor/10.8/admin/settings/investigations.md) +- [Notifications](/docs/auditor/10.8/admin/settings/notifications.md) +- [Integrations](/docs/auditor/10.8/admin/settings/integrations.md) +- [Licenses](/docs/auditor/10.8/admin/settings/licenses.md) +- [About Netwrix Auditor](/docs/auditor/10.8/admin/settings/about.md) To modify Netwrix Auditor settings, you must be assigned the _Global administrator_ role. See -[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) for more information. +[Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) for more information. diff --git a/docs/auditor/10.8/admin/settings/privilegesecure.md b/docs/auditor/10.8/admin/settings/privilegesecure.md index 9852f50703..2009b80f26 100644 --- a/docs/auditor/10.8/admin/settings/privilegesecure.md +++ b/docs/auditor/10.8/admin/settings/privilegesecure.md @@ -14,37 +14,37 @@ The integration can be configured for the following Auditor data sources: - Active Directory. See the - [Use Netwrix Privilege Secure as a Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md#use-netwrix-privilege-secure-as-a-data-collecting-account) + [Use Netwrix Privilege Secure as a Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md#use-netwrix-privilege-secure-as-a-data-collecting-account) topic for additional information. - Group Policy. See the - [Use Netwrix Privilege Secure as a Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/grouppolicy/overview.md#use-netwrix-privilege-secure-as-a-data-collecting-account) + [Use Netwrix Privilege Secure as a Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/grouppolicy/overview.md#use-netwrix-privilege-secure-as-a-data-collecting-account) topic for additional information. - Logon Activity. See the - [Use Netwrix Privilege Secure as a Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/logonactivity/overview.md#use-netwrix-privilege-secure-as-a-data-collecting-account) + [Use Netwrix Privilege Secure as a Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/logonactivity/overview.md#use-netwrix-privilege-secure-as-a-data-collecting-account) topic for additional information. - Microsoft Entra ID. See the - [How to Add Microsoft Entra ID Monitoring Plan Using Netwrix Privilege Secure](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md#how-to-add-microsoft-entra-id-monitoring-plan-using-netwrix-privilege-secure) + [How to Add Microsoft Entra ID Monitoring Plan Using Netwrix Privilege Secure](/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md#how-to-add-microsoft-entra-id-monitoring-plan-using-netwrix-privilege-secure) topic for additional information. - Windows File Server. See the - [Use Netwrix Privilege Secure as a Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/fileservers/windowsfileserver.md#use-netwrix-privilege-secure-as-a-data-collecting-account) + [Use Netwrix Privilege Secure as a Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/fileservers/windowsfileserver.md#use-netwrix-privilege-secure-as-a-data-collecting-account) topic for additional information. - Windows Server. See the - [Use Netwrix Privilege Secure as a Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/windows/overview.md#use-netwrix-privilege-secure-as-a-data-collecting-account) + [Use Netwrix Privilege Secure as a Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/windows/overview.md#use-netwrix-privilege-secure-as-a-data-collecting-account) topic for additional information. ## Software Requirements @@ -72,7 +72,7 @@ options are available: - New/Generate certificate – Create a new certificate. - Select an existing certificate – Select an available certificate from the drop-down list. -![npsclientcertificate](/images/auditor/10.7/admin/settings/npsclientcertificate.webp) +![npsclientcertificate](/images/auditor/10.8/admin/settings/npsclientcertificate.webp) **Step 6 –** Click **Next**. @@ -108,11 +108,11 @@ documentation for additional instructions. **Step 10 –** Provide the security key you got in Netwrix Privilege Secure. -![npsintegrationparameters](/images/auditor/10.7/admin/settings/npsintegrationparameters.webp) +![npsintegrationparameters](/images/auditor/10.8/admin/settings/npsintegrationparameters.webp) **Step 11 –** Click **Next**. -![npsintegrationfinished](/images/auditor/10.7/admin/settings/npsintegrationfinished.webp) +![npsintegrationfinished](/images/auditor/10.8/admin/settings/npsintegrationfinished.webp) **Step 12 –** After the validation, click **Finish**. diff --git a/docs/auditor/10.8/admin/settings/sensitivedatadiscovery.md b/docs/auditor/10.8/admin/settings/sensitivedatadiscovery.md index 76a99a2180..82fd011119 100644 --- a/docs/auditor/10.8/admin/settings/sensitivedatadiscovery.md +++ b/docs/auditor/10.8/admin/settings/sensitivedatadiscovery.md @@ -158,7 +158,7 @@ For NDC SQL Database Provider: Review your sensitive data in Data Discovery and Classification reports. Refer to the following Netwrix Auditor help center article for more information about these reports: -[Data Discovery and Classification Reports](/docs/auditor/10.7/admin/reports/types/datadiscoveryclassification.md). +[Data Discovery and Classification Reports](/docs/auditor/10.8/admin/reports/types/datadiscoveryclassification.md). ForNDC Endpoint Provider: @@ -177,10 +177,10 @@ ForNDC Endpoint Provider: - Click the **Select** column in the Tools menu and review data categories (taxonomies) of your sensitive documents. - Use filtering capabilities to narrow your search results. See the - [Use Filters in Advanced Mode](/docs/auditor/10.7/admin/search/filteradvanced.md) topic for additional information. + [Use Filters in Advanced Mode](/docs/auditor/10.8/admin/search/filteradvanced.md) topic for additional information. - Create an alert triggered by specific actions with your sensitive data. **_RECOMMENDED:_** Netwrix recommends enable threshold to trigger the new alert. In this case, a single alert will be sent instead of many alerts. This can be helpful when Netwrix Auditor detects many activity records matching the filters you specified. See the -[Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) topic for additional information. +[Alerts](/docs/auditor/10.8/admin/alertsettings/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/subscriptions/create.md b/docs/auditor/10.8/admin/subscriptions/create.md index b1108e4e97..f8ef897e29 100644 --- a/docs/auditor/10.8/admin/subscriptions/create.md +++ b/docs/auditor/10.8/admin/subscriptions/create.md @@ -8,7 +8,7 @@ sidebar_position: 10 To create new subscriptions and manage existing subscriptions, you must be assigned the Global administrator or Global reviewer role in the product. See the -[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) topic for additional +[Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional information. 1. Do one of the following depending on subscription type: @@ -17,7 +17,7 @@ information. | ------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Subscribe to a report | On the main Auditor page, navigate to Reports. Specify the report that you want to subscribe to and click Subscribe. | | Subscribe to Behavior anomalies dashboard report | On the main Auditor page, navigate to Behavior anomalies, then in the dashboard window click Subscribe. | - | Subscribe to search | 1. Navigate to Search and set appropriate search criteria. See the [Use Filters in Simple Mode](/docs/auditor/10.7/admin/search/filtersimple.md) topic for additional information. Click Search. 2. Navigate to Tools and select Subscribe. | + | Subscribe to search | 1. Navigate to Search and set appropriate search criteria. See the [Use Filters in Simple Mode](/docs/auditor/10.8/admin/search/filtersimple.md) topic for additional information. Click Search. 2. Navigate to Tools and select Subscribe. | | Subscribe to risk assessment overview | On the main Auditor page, navigate to Risk assessment and in the dashboard window click Subscribe. | 2. On the Add Subscription page, complete the following fields: @@ -28,9 +28,9 @@ information. | Subscription name | Enter the name for the subscription. | | Report name _OR_ Email subject | For report subscription—You cannot edit report name. For subscription to search and risk assessment overview—Specify email subject to identify subscription emails from Auditor. For example, "_Successful read attempts on important file shares_". | | Send empty subscriptions when no activity occurred Available for report and search subscriptions only. | Slide the switch to Yes if you want to receive a report even if no changes occurred. | - | Specify delivery options | - File format—Configure reports to be delivered as the pdf or csv files for search subscriptions; and pdf, docx, csv or xls files for report subscriptions. Available for report and search subscriptions only. - File delivery—Select delivery method: - Attach to email—Select this option to receive data as email attachments. The maximum size of the attachment file is 50 MB. Attachments larger than 50MB will be uploaded to _\\``\Netwrix_Auditor_Subscriptions$\LostAndFound_ folder on Netwrix Auditor server. They will be available for 7 days. Check the subscription email to get the files. - Upload to a file share—Select this option to save data on the selected file share. Click Browse to select a folder on the computer that hosts Auditor Server or specify a UNC path to a shared network resource. Make sure that the recipients have sufficient rights to access it and the Long-Term Archive service account has sufficient rights to upload reports. See the [File-Based Repository for Long-Term Archive](/docs/auditor/10.7/requirements/longtermarchive.md) topic for additional information. **NOTE:** Make sure that the AD Computer account for the Auditor host server also has read access on the file share where the Subscriptions are being uploaded. | + | Specify delivery options | - File format—Configure reports to be delivered as the pdf or csv files for search subscriptions; and pdf, docx, csv or xls files for report subscriptions. Available for report and search subscriptions only. - File delivery—Select delivery method: - Attach to email—Select this option to receive data as email attachments. The maximum size of the attachment file is 50 MB. Attachments larger than 50MB will be uploaded to _\\``\Netwrix_Auditor_Subscriptions$\LostAndFound_ folder on Netwrix Auditor server. They will be available for 7 days. Check the subscription email to get the files. - Upload to a file share—Select this option to save data on the selected file share. Click Browse to select a folder on the computer that hosts Auditor Server or specify a UNC path to a shared network resource. Make sure that the recipients have sufficient rights to access it and the Long-Term Archive service account has sufficient rights to upload reports. See the [File-Based Repository for Long-Term Archive](/docs/auditor/10.8/requirements/longtermarchive.md) topic for additional information. **NOTE:** Make sure that the AD Computer account for the Auditor host server also has read access on the file share where the Subscriptions are being uploaded. | | Other tabs | | | Recipients | Shows the number of recipients selected and allows specifying emails where reports are to be sent. Expand the Recipients list and click Add to add more recipients. | | Schedule | Allows specifying report delivery schedule (daily, certain days of week, a certain day of a certain month). By default, risk assessment overview and search subscription delivery is scheduled to 7.00 am daily, report subscription delivery - to 8.00 am daily. | - | Filters | - For report subscription—Specify the report filters, which vary depending on the selected report. - For subscription to risk assessment overview—Select one or several monitoring plans and risk categories whose data you want to be included. By default, you will receive data on all risk categories, provided by all monitoring plans configured for risk assessment. - For search subscription—Specify filters in the same way as for search. See the [Use Filters in Advanced Mode](/docs/auditor/10.7/admin/search/filteradvanced.md) topic for additional information. For search subscription, you can also select a parameter to sort actions by and the sorting order. | + | Filters | - For report subscription—Specify the report filters, which vary depending on the selected report. - For subscription to risk assessment overview—Select one or several monitoring plans and risk categories whose data you want to be included. By default, you will receive data on all risk categories, provided by all monitoring plans configured for risk assessment. - For search subscription—Specify filters in the same way as for search. See the [Use Filters in Advanced Mode](/docs/auditor/10.8/admin/search/filteradvanced.md) topic for additional information. For search subscription, you can also select a parameter to sort actions by and the sorting order. | | History For search and risk assessment subscriptions only. | - Contains subscription generation details (intervals, status, last run time, start type). If the subscription failed, expand its details to understand and resolve error, then click the Try again link. - Allows for on-demand subscription delivery—for that, click Run Now. On successful subscription generation you will receive the results that match your criteria for the scheduled period. | diff --git a/docs/auditor/10.8/admin/subscriptions/manage.md b/docs/auditor/10.8/admin/subscriptions/manage.md index b7e25f30d4..fd81efb743 100644 --- a/docs/auditor/10.8/admin/subscriptions/manage.md +++ b/docs/auditor/10.8/admin/subscriptions/manage.md @@ -8,7 +8,7 @@ sidebar_position: 20 On the main Netwrix Auditor page, navigate to Subscriptions to review a list of your subscriptions. -![subscription](/images/auditor/10.7/admin/subscriptions/subscription.webp) +![subscription](/images/auditor/10.8/admin/subscriptions/subscription.webp) The table below provides instructions on how to manage your subscriptions. diff --git a/docs/auditor/10.8/admin/subscriptions/overview.md b/docs/auditor/10.8/admin/subscriptions/overview.md index 842bcb5dda..c18cad227a 100644 --- a/docs/auditor/10.8/admin/subscriptions/overview.md +++ b/docs/auditor/10.8/admin/subscriptions/overview.md @@ -15,8 +15,8 @@ You can configure subscriptions to reports (including dashboards) risk assessmen interactive search. You can add any elements (a dashboard, report, alert, risk, etc.) to the Auditor Home screen to -access them instantly. See the [Navigation](/docs/auditor/10.7/admin/navigation/overview.md) and -[Customize Home Screen](/docs/auditor/10.7/admin/navigation/customizehome.md) topics for additional information. +access them instantly. See the [Navigation](/docs/auditor/10.8/admin/navigation/overview.md) and +[Customize Home Screen](/docs/auditor/10.8/admin/navigation/customizehome.md) topics for additional information. ## Subscription to Reports @@ -62,5 +62,5 @@ This subscription type is similar to the predefined reports. Review the following for additional information: -- [Create Subscriptions](/docs/auditor/10.7/admin/subscriptions/create.md)how to create new subscriptions. -- [Review and Manage Subscriptions](/docs/auditor/10.7/admin/subscriptions/manage.md)how to manage subscriptions. +- [Create Subscriptions](/docs/auditor/10.8/admin/subscriptions/create.md)how to create new subscriptions. +- [Review and Manage Subscriptions](/docs/auditor/10.8/admin/subscriptions/manage.md)how to manage subscriptions. diff --git a/docs/auditor/10.8/api/compatibility.md b/docs/auditor/10.8/api/compatibility.md index e862908266..d265b62e05 100644 --- a/docs/auditor/10.8/api/compatibility.md +++ b/docs/auditor/10.8/api/compatibility.md @@ -15,4 +15,4 @@ leveraging Netwrix Auditor Integration API. Download the latest add-on version i | XML: ``, JSON: `"ManagedObject"` | XML: ` Name Unique ID `, JSON: `"MonitoringPlan" : { "ID": "{Unique ID}", "Name": "Name" }` Now the MonitoringPlan contains two sub-entries: ID and Name. The ID property is optional and is assigned automatically by the product. | | — | XML: ` Item name `, JSON: `"Item": {"Name": "Item name"` | -To learn more about input and output Activity Record structure, refer to [Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md). +To learn more about input and output Activity Record structure, refer to [Activity Records](/docs/auditor/10.8/api/postdata/activityrecords.md). diff --git a/docs/auditor/10.8/api/endpoints.md b/docs/auditor/10.8/api/endpoints.md index 0571b3105c..c170590e87 100644 --- a/docs/auditor/10.8/api/endpoints.md +++ b/docs/auditor/10.8/api/endpoints.md @@ -8,10 +8,10 @@ sidebar_position: 30 | Method | Endpoint | POST Data | Description | | ------ | --------------------------------------- | ------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------ | -| GET | /netwrix/api/v1/activity_records/enum | — | Returns Activity Records. [Retrieve Activity Records](/docs/auditor/10.7/api/retrieveactivityrecords.md) | -| POST | /netwrix/api/v1/activity_records/enum | [Continuation Mark](/docs/auditor/10.7/api/postdata/continuationmark.md) | Returns next 1,000 Activity Records. [Continuation Mark](/docs/auditor/10.7/api/postdata/continuationmark.md) | -| POST | /netwrix/api/v1/activity_records/search | [Search Parameters](/docs/auditor/10.7/api/postdata/searchparameters.md) | Returns Activity Records matching a criteria defined in search parameters. [Search Activity Records](/docs/auditor/10.7/api/searchactivityrecords.md) | -| POST | /netwrix/api/v1/activity_records/ | [Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) | Writes data to the Audit Database. [Write Activity Records](/docs/auditor/10.7/api/writeactivityrecords.md) | +| GET | /netwrix/api/v1/activity_records/enum | — | Returns Activity Records. [Retrieve Activity Records](/docs/auditor/10.8/api/retrieveactivityrecords.md) | +| POST | /netwrix/api/v1/activity_records/enum | [Continuation Mark](/docs/auditor/10.8/api/postdata/continuationmark.md) | Returns next 1,000 Activity Records. [Continuation Mark](/docs/auditor/10.8/api/postdata/continuationmark.md) | +| POST | /netwrix/api/v1/activity_records/search | [Search Parameters](/docs/auditor/10.8/api/postdata/searchparameters.md) | Returns Activity Records matching a criteria defined in search parameters. [Search Activity Records](/docs/auditor/10.8/api/searchactivityrecords.md) | +| POST | /netwrix/api/v1/activity_records/ | [Activity Records](/docs/auditor/10.8/api/postdata/activityrecords.md) | Writes data to the Audit Database. [Write Activity Records](/docs/auditor/10.8/api/writeactivityrecords.md) | ### Authentication @@ -32,7 +32,7 @@ Netwrix Auditor restricts control to its configuration and data collected by the access system ensures that only relevant employees and services can access the exact amount of data they need. To be able to retrieve activity records or supply data to the Audit Database, an account must be assigned a role in the product. -[Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) +[Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) | To... | Required role | | ------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | diff --git a/docs/auditor/10.8/api/errordetails.md b/docs/auditor/10.8/api/errordetails.md index 501f43d320..d8c5510de8 100644 --- a/docs/auditor/10.8/api/errordetails.md +++ b/docs/auditor/10.8/api/errordetails.md @@ -7,7 +7,7 @@ sidebar_position: 110 # Error Details On error, most requests contain an error description in the response body (except some requests with -empty body, e.g., 404, 405). [Response Status Codes](/docs/auditor/10.7/api/responsestatuscodes.md) +empty body, e.g., 404, 405). [Response Status Codes](/docs/auditor/10.8/api/responsestatuscodes.md) The error details include: diff --git a/docs/auditor/10.8/api/filterreference/filterreference.md b/docs/auditor/10.8/api/filterreference/filterreference.md index 976bfe9fb7..7f0152872a 100644 --- a/docs/auditor/10.8/api/filterreference/filterreference.md +++ b/docs/auditor/10.8/api/filterreference/filterreference.md @@ -31,8 +31,8 @@ to create a unique search. You can: Review the following for additional information: -- [Filters](/docs/auditor/10.7/api/filterreference/filters.md) -- [Operators](/docs/auditor/10.7/api/filterreference/filteroperators.md) +- [Filters](/docs/auditor/10.8/api/filterreference/filters.md) +- [Operators](/docs/auditor/10.8/api/filterreference/filteroperators.md) The table below shows filters and Activity Records matching them. diff --git a/docs/auditor/10.8/api/overview.md b/docs/auditor/10.8/api/overview.md index 3b74c65963..ed6aab34fe 100644 --- a/docs/auditor/10.8/api/overview.md +++ b/docs/auditor/10.8/api/overview.md @@ -22,7 +22,7 @@ Integration API provides the following capabilities: - Data out: Further automate your business processes, IT security and operations workflows by enriching third-party solutions with actionable audit data. -![diagram_thumb_0_0](/images/auditor/10.7/api/diagram_thumb_0_0.webp) +![diagram_thumb_0_0](/images/auditor/10.8/api/diagram_thumb_0_0.webp) Netwrix Auditor Integration API operates with XML- and JSON-formatted Activity Records—minimal chunks of audit data containing information on _who_ changed _what_, _when_ and _where_ this change @@ -54,6 +54,6 @@ Complete the following fields: | Specify a name for your integration | Specify the add-on name or provide any other name that distinguishes this custom source from any other. This name will be listed in the Item filter in the interactive search. | Make sure Integration API is enabled. To check it, navigate to Settings → Integrations tab. See -[Integrations](/docs/auditor/10.7/admin/settings/integrations.md) for more information. +[Integrations](/docs/auditor/10.8/admin/settings/integrations.md) for more information. Make sure to provide a monitoring plan name and item name in activity records before importing data. diff --git a/docs/auditor/10.8/api/postdata/activityrecords.md b/docs/auditor/10.8/api/postdata/activityrecords.md index 30d9070a0e..88baf64039 100644 --- a/docs/auditor/10.8/api/postdata/activityrecords.md +++ b/docs/auditor/10.8/api/postdata/activityrecords.md @@ -74,7 +74,7 @@ similar to the following—the exact schema depends on operation (input or outpu ``` To feed data from a custom audit source to Netwrix Auditor, send a POST request containing Activity -Records. [Write Activity Records](/docs/auditor/10.7/api/writeactivityrecords.md) +Records. [Write Activity Records](/docs/auditor/10.8/api/writeactivityrecords.md) ## Schema diff --git a/docs/auditor/10.8/api/postdata/continuationmark.md b/docs/auditor/10.8/api/postdata/continuationmark.md index c50df2b17d..f271195159 100644 --- a/docs/auditor/10.8/api/postdata/continuationmark.md +++ b/docs/auditor/10.8/api/postdata/continuationmark.md @@ -17,8 +17,8 @@ Send a POST request containing Continuation mark to the following endpoints: | Method | Endpoint | Description | | ------ | ----------------------------------------------------------------------- | --------------------------------------------------------- | -| POST | [/netwrix/api/v1/activity_records/enum ](/docs/auditor/10.7/api/retrieveactivityrecords.md) | Returns next Activity Records. | -| POST | [/netwrix/api/v1/activity_records/search](/docs/auditor/10.7/api/searchactivityrecords.md) | Returns next Activity Records matching a filter criteria. | +| POST | [/netwrix/api/v1/activity_records/enum ](/docs/auditor/10.8/api/retrieveactivityrecords.md) | Returns next Activity Records. | +| POST | [/netwrix/api/v1/activity_records/search](/docs/auditor/10.8/api/searchactivityrecords.md) | Returns next Activity Records matching a filter criteria. | Ensure to pass information about transferred data, including `Content-Type:application/xml` or `application/json `and encoding. The syntax greatly depends on the tool you use. @@ -38,11 +38,11 @@ Copy the contents of `ContinuationMark` to a separate XML or JSON file (e.g., Co | JSON | JSON-formatted Continuation mark includes the field value in quotes. | If you want to retrieve next Activity Records for your search, include the Continuation mark to your -Search parameters file. [Search Parameters](/docs/auditor/10.7/api/postdata/searchparameters.md) +Search parameters file. [Search Parameters](/docs/auditor/10.8/api/postdata/searchparameters.md) ## Example -[Retrieve Activity Records](/docs/auditor/10.7/api/retrieveactivityrecords.md) +[Retrieve Activity Records](/docs/auditor/10.8/api/retrieveactivityrecords.md) ```xml @@ -51,7 +51,7 @@ PG5yPjxuIG49IntFNzA...PjwvYT48L24+PC9ucj4A+PC9ucj4A ``` -[Search Activity Records](/docs/auditor/10.7/api/searchactivityrecords.md) +[Search Activity Records](/docs/auditor/10.8/api/searchactivityrecords.md) ```xml @@ -70,13 +70,13 @@ PG5yPjxuIG49IntFNzA...PjwvYT48L24+PC9ucj4A+PC9ucj4A ``` -[Retrieve Activity Records](/docs/auditor/10.7/api/retrieveactivityrecords.md) +[Retrieve Activity Records](/docs/auditor/10.8/api/retrieveactivityrecords.md) ```json `"PG5yPjxuIG49IntFNzA...PjwvYT48L24+PC9ucj4A"` ``` -[Search Activity Records](/docs/auditor/10.7/api/searchactivityrecords.md) +[Search Activity Records](/docs/auditor/10.8/api/searchactivityrecords.md) ```json { diff --git a/docs/auditor/10.8/api/postdata/overview.md b/docs/auditor/10.8/api/postdata/overview.md index 5a9b55d517..4e485ad9fc 100644 --- a/docs/auditor/10.8/api/postdata/overview.md +++ b/docs/auditor/10.8/api/postdata/overview.md @@ -13,7 +13,7 @@ Database. Data is sent in the request body and must be formatted according to XM compatible with Netwrix-provided XSD schemas. In Netwrix Auditor 9.0, Netwrix has updated API schemas. Make sure to check and update your custom -scripts and add-ons. [Compatibility Notice](/docs/auditor/10.7/api/compatibility.md) +scripts and add-ons. [Compatibility Notice](/docs/auditor/10.8/api/compatibility.md) The file must be formatted in accordance with XML standard. The following symbols must be replaced with corresponding XML entities: & (ampersand), " (double quotes), ' (single quotes), < (less than), @@ -34,6 +34,6 @@ preceded with the \ character: " (double quotes), / (slash), \ (backslash). E.g. Review the following for additional information: -- [Continuation Mark](/docs/auditor/10.7/api/postdata/continuationmark.md) -- [Search Parameters](/docs/auditor/10.7/api/postdata/searchparameters.md) -- [Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) +- [Continuation Mark](/docs/auditor/10.8/api/postdata/continuationmark.md) +- [Search Parameters](/docs/auditor/10.8/api/postdata/searchparameters.md) +- [Activity Records](/docs/auditor/10.8/api/postdata/activityrecords.md) diff --git a/docs/auditor/10.8/api/postdata/searchparameters.md b/docs/auditor/10.8/api/postdata/searchparameters.md index 6f12249a0f..5f5777d2c8 100644 --- a/docs/auditor/10.8/api/postdata/searchparameters.md +++ b/docs/auditor/10.8/api/postdata/searchparameters.md @@ -7,9 +7,9 @@ sidebar_position: 20 # Search Parameters Send the search parameters in the POST request body to narrow down the search results returned by -the [/netwrix/api/v1/activity_records/search](/docs/auditor/10.7/api/searchactivityrecords.md) endpoint. The Search +the [/netwrix/api/v1/activity_records/search](/docs/auditor/10.8/api/searchactivityrecords.md) endpoint. The Search parameters file includes one or more filters with operators and values (e.g., to find entries where -_data source_ is _SharePoint_); it may also contain a [Continuation Mark](/docs/auditor/10.7/api/postdata/continuationmark.md). +_data source_ is _SharePoint_); it may also contain a [Continuation Mark](/docs/auditor/10.8/api/postdata/continuationmark.md). Generally, the Search parameters file looks similar to the following: **XML:** @@ -55,13 +55,13 @@ Ensure to pass information about transferred data, including `Content-Type:appli | Format | Schema description | | ------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| XML | The file must be compatible with the XML schema. On the computer where Auditor Server resides, you can find XSD file under _Netwrix_Auditor_installation_folder\Audit Core\API Schemas_. The `ActivityRecordSearch` root element includes the `FilterList `element with one or more `Filter `elements inside. The root element may contain a `ContinuationMark `element. Each `Filter `specified within the `FilterList `must have a value to search for. The element may also include a modifier—a match type operator. minOccurs="0" indicates that element is optional and may be absent in the Search parameters. ![filterschema](/images/auditor/10.7/api/postdata/filterschema.webp) | +| XML | The file must be compatible with the XML schema. On the computer where Auditor Server resides, you can find XSD file under _Netwrix_Auditor_installation_folder\Audit Core\API Schemas_. The `ActivityRecordSearch` root element includes the `FilterList `element with one or more `Filter `elements inside. The root element may contain a `ContinuationMark `element. Each `Filter `specified within the `FilterList `must have a value to search for. The element may also include a modifier—a match type operator. minOccurs="0" indicates that element is optional and may be absent in the Search parameters. ![filterschema](/images/auditor/10.8/api/postdata/filterschema.webp) | | JSON | The `FilterList `object includes with one or more `Filter `entries inside. JSON may contain a `ContinuationMark `object. Each `Filter `specified within the `FilterList `must have a value to search for. The entry may also include a modifier—a match type operator. | Review the following for additional information: -- [Filters](/docs/auditor/10.7/api/filterreference/filters.md) -- [Operators](/docs/auditor/10.7/api/filterreference/filteroperators.md) +- [Filters](/docs/auditor/10.8/api/filterreference/filters.md) +- [Operators](/docs/auditor/10.8/api/filterreference/filteroperators.md) ## Example diff --git a/docs/auditor/10.8/api/prerequisites.md b/docs/auditor/10.8/api/prerequisites.md index 5f60ff182e..295b0c572a 100644 --- a/docs/auditor/10.8/api/prerequisites.md +++ b/docs/auditor/10.8/api/prerequisites.md @@ -9,7 +9,7 @@ sidebar_position: 10 Netwrix Auditor Integration API uses HTTPS for communication with the automatically generated certificate. The default communication port is 9699. -Refer to the [Security](/docs/auditor/10.7/api/security.md) topic for detailed instructions on how to disable HTTPS and +Refer to the [Security](/docs/auditor/10.8/api/security.md) topic for detailed instructions on how to disable HTTPS and manage other API settings. ## Configure Integration API Settings @@ -26,7 +26,7 @@ rule will be automatically created. **Step 4 –** If you use a third-party firewall, you must create a rule for inbound connections manually. -![Integration API Settings](/images/auditor/10.7/addon/connectwise/integrations_thumb_0_0.webp) +![Integration API Settings](/images/auditor/10.8/addon/connectwise/integrations_thumb_0_0.webp) ## Configure Audit Database Settings @@ -39,5 +39,5 @@ these settings, navigate to the **Settings > Audit Database**. You cannot use Netwrix Auditor Integration API without configuring the Audit Database. -Refer to the [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) topic for detailed instructions on +Refer to the [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topic for detailed instructions on how to configure SQL Server settings. diff --git a/docs/auditor/10.8/api/responsestatuscodes.md b/docs/auditor/10.8/api/responsestatuscodes.md index 32135d9094..bd57d60538 100644 --- a/docs/auditor/10.8/api/responsestatuscodes.md +++ b/docs/auditor/10.8/api/responsestatuscodes.md @@ -10,7 +10,7 @@ sidebar_position: 100 | ---------------------------- | ------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | 200 OK | Success | Success. The body is empty. Activity Records were written to the Audit Database and the Long-Term Archive. | Success. The body contains Activity Records. Activity Records were retrieved from the Audit Database. | | 400 Bad Request | Error | Error validating Activity Records. Make sure the Activity Records are compatible with the [Schema](postdata/activityrecords.md#schema). | Error validating request parameters or post data. Make sure the post data files (Continuation mark, Search parameters) are compatible with their schemas and the `?count=` parameter is valid. | -| 401 Unauthorized | Error | The request is unauthorized and the body is empty. See for [API Endpoints](/docs/auditor/10.7/api/endpoints.md) more information. | | +| 401 Unauthorized | Error | The request is unauthorized and the body is empty. See for [API Endpoints](/docs/auditor/10.8/api/endpoints.md) more information. | | | 404 Not Found | Error | Error addressing the endpoint. The body is empty. The requested endpoint does not exist (e.g., /netwrix/api/v1/mynewendpoint/). | | | 405 Method Not Allowed | Error | Error addressing the endpoint. The body is empty. Wrong HTTP request was sent (any except POST). | Error addressing the endpoint. The body is empty. Wrong HTTP request was sent (any except GET or POST). | | 413 Request Entity Too Large | Error | Error transferring files. The body is empty. The posted file exceeds supported size. | | @@ -19,4 +19,4 @@ sidebar_position: 100 Most failed requests contain error in the response body (except those with empty body, e.g., 404, -405). [Error Details](/docs/auditor/10.7/api/errordetails.md) +405). [Error Details](/docs/auditor/10.8/api/errordetails.md) diff --git a/docs/auditor/10.8/api/retrieveactivityrecords.md b/docs/auditor/10.8/api/retrieveactivityrecords.md index 17a835ea4b..1645ed992c 100644 --- a/docs/auditor/10.8/api/retrieveactivityrecords.md +++ b/docs/auditor/10.8/api/retrieveactivityrecords.md @@ -15,7 +15,7 @@ mark. | Method | Endpoint | POST Data | | ------ | --------------------------------------------------------------------------------------- | ------------------------------------------------- | | GET | `https://{host:port}/netwrix/api/v1/activity_records/enum{?format=json}{&count=Number}` | — | -| POST | `https://{host:port}/netwrix/api/v1/activity_records/enum{?format=json}{&count=Number}` | [Continuation Mark](/docs/auditor/10.7/api/postdata/continuationmark.md) | +| POST | `https://{host:port}/netwrix/api/v1/activity_records/enum{?format=json}{&count=Number}` | [Continuation Mark](/docs/auditor/10.8/api/postdata/continuationmark.md) | ## Request Parameters @@ -119,7 +119,7 @@ Activity Records collected in braces {} and a Continuation mark. ``` **Step 3 –** Continue retrieving Activity Records. Send a POST request containing this Continuation -mark to the same endpoint. See the [Continuation Mark](/docs/auditor/10.7/api/postdata/continuationmark.md) topic for more +mark to the same endpoint. See the [Continuation Mark](/docs/auditor/10.8/api/postdata/continuationmark.md) topic for more information. For example: | | diff --git a/docs/auditor/10.8/api/searchactivityrecords.md b/docs/auditor/10.8/api/searchactivityrecords.md index 9bf12ab8e3..9b6c8a03bc 100644 --- a/docs/auditor/10.8/api/searchactivityrecords.md +++ b/docs/auditor/10.8/api/searchactivityrecords.md @@ -9,23 +9,23 @@ sidebar_position: 50 The search functionality in the Netwrix Auditor Integration API reproduces interactive search available in the Netwrix Auditor client. See the [Netwrix Auditor Intelligence Guide](https://www.netwrix.com/download/documents/Netwrix_Auditor_User_Guide.pdf) -and [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) topic for detailed instruction on +and [View and Search Collected Data](/docs/auditor/10.8/admin/search/overview.md) topic for detailed instruction on how to search and filter audit data. As the interactive search in the Netwrix Auditor client, this REST API endpoint allows you to retrieve Activity Records matching a certain criteria. You can create your own set of filters in the -Search parameters file. See the [Search Parameters](/docs/auditor/10.7/api/postdata/searchparameters.md) topic for more +Search parameters file. See the [Search Parameters](/docs/auditor/10.8/api/postdata/searchparameters.md) topic for more information. Activity Records are retrieved according to the account's delegated scope. ## Endpoint To retrieve Activity Records matching a certain criteria, send a POST request containing search parameters (also may include a Continuation mark). See the -[Search Parameters](/docs/auditor/10.7/api/postdata/searchparameters.md) topic for more information. +[Search Parameters](/docs/auditor/10.8/api/postdata/searchparameters.md) topic for more information. | Method | Endpoint | POST Data | | ------ | ----------------------------------------------------------------------------------------- | ------------------------------------------------- | -| `POST` | `https://{host:port}/netwrix/api/v1/activity_records/search{?format=json}{&count=Number}` | [Search Parameters](/docs/auditor/10.7/api/postdata/searchparameters.md) | +| `POST` | `https://{host:port}/netwrix/api/v1/activity_records/search{?format=json}{&count=Number}` | [Search Parameters](/docs/auditor/10.8/api/postdata/searchparameters.md) | ## Request Parameters @@ -66,7 +66,7 @@ with ?, others are joined with &, no spaces required (e.g., `?format=json&count= Follow the steps- to retrieve all Activity Records matching search criteria. **Step 1 –** Send a POST request containing search parameters. See the -[Search Parameters](/docs/auditor/10.7/api/postdata/searchparameters.md) topic for more information. +[Search Parameters](/docs/auditor/10.8/api/postdata/searchparameters.md) topic for more information. As an example, this request retrieves Activity Records where administrator added new objects to the Active Directory domain. Groups and group policies are not taken into account. Changes could only @@ -141,7 +141,7 @@ mark. **Step 3 –** Continue retrieving Activity Records. Send a POST request containing your search parameters and this Continuation mark to the same endpoint. -See the [Continuation Mark](/docs/auditor/10.7/api/postdata/continuationmark.md) for additional information. +See the [Continuation Mark](/docs/auditor/10.8/api/postdata/continuationmark.md) for additional information. **XML:** diff --git a/docs/auditor/10.8/api/security.md b/docs/auditor/10.8/api/security.md index aba998bef3..cfa2b4b0c9 100644 --- a/docs/auditor/10.8/api/security.md +++ b/docs/auditor/10.8/api/security.md @@ -14,7 +14,7 @@ The automatically generated Netwrix API certificate is located in the Personal s trust on remote computers, install this certificate in the Trusted Root Certification Authorities store. -![certificatestore_thumb_0_0](/images/auditor/10.7/api/certificatestore_thumb_0_0.webp) +![certificatestore_thumb_0_0](/images/auditor/10.8/api/certificatestore_thumb_0_0.webp) To manage API security settings with APIAdminTool.exe diff --git a/docs/auditor/10.8/api/writeactivityrecords.md b/docs/auditor/10.8/api/writeactivityrecords.md index befd3b0507..e7d5b93331 100644 --- a/docs/auditor/10.8/api/writeactivityrecords.md +++ b/docs/auditor/10.8/api/writeactivityrecords.md @@ -18,12 +18,12 @@ the plan and enabled for monitoring. To feed data, send a POST request containing Activity Records. The user sending a request must be assigned the Contributor role in Netwrix Auditor. After feeding data to the Audit Database it will become available for search in the Netwrix Auditor client and through -[/netwrix/api/v1/activity_records/search](/docs/auditor/10.7/api/searchactivityrecords.md) and -[/netwrix/api/v1/activity_records/enum](/docs/auditor/10.7/api/retrieveactivityrecords.md) endpoints. +[/netwrix/api/v1/activity_records/search](/docs/auditor/10.8/api/searchactivityrecords.md) and +[/netwrix/api/v1/activity_records/enum](/docs/auditor/10.8/api/retrieveactivityrecords.md) endpoints. | Method | Endpoint | POST Data | | ------ | -------------------------------------------------------------------- | ----------------------------------------------- | -| `POST` | `https://{host:port}/netwrix/api/v1/activity_records/{?format=json}` | [Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) | +| `POST` | `https://{host:port}/netwrix/api/v1/activity_records/{?format=json}` | [Activity Records](/docs/auditor/10.8/api/postdata/activityrecords.md) | Netwrix recommends limiting the input Activity Records file to 50MB and maximum 1,000 Activity Records. @@ -40,14 +40,14 @@ Records. | Request Status | Response | | -------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Success | The HTTP status code in the response header is 200 OK and the body is empty. `HTTP/1.1 200 OK `````` Server: Microsoft-HTTPAPI/2.0 `````` Content-Length: 0 `````` Content-Type: text/plain `````` Date: Fri, 08 Apr 2017 13:56:22 GMT` | -| Error | The header status code is an error code. Depending on the error code, the response body may contain an error object. [See Response Status Codes for more information.](/docs/auditor/10.7/api/responsestatuscodes.md) | +| Error | The header status code is an error code. Depending on the error code, the response body may contain an error object. [See Response Status Codes for more information.](/docs/auditor/10.8/api/responsestatuscodes.md) | ## Usage Example—Write Data This example describes how to feed Activity Records to the Audit Database. **Step 1 –** Send a POST request containing Activity Records. -[Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) For example: +[Activity Records](/docs/auditor/10.8/api/postdata/activityrecords.md) For example: **XML:** @@ -143,10 +143,10 @@ Date: Fri, 08 Apr 2017 13:56:22 GMT **Step 3 –** Send more POST requests containing Activity Records if necessary. -**Step 4 –** Check that posted data is now available in the Audit Database. Run a search request to [/netwrix/api/v1/activity_records/search](/docs/auditor/10.7/api/searchactivityrecords.md) endpoint or use interactive search in the Netwrix Auditor client. For example: +**Step 4 –** Check that posted data is now available in the Audit Database. Run a search request to [/netwrix/api/v1/activity_records/search](/docs/auditor/10.8/api/searchactivityrecords.md) endpoint or use interactive search in the Netwrix Auditor client. For example: -![apiactivity_thumb_0_0](/images/auditor/10.7/api/apiactivity_thumb_0_0.webp) +![apiactivity_thumb_0_0](/images/auditor/10.8/api/apiactivity_thumb_0_0.webp) **Step 5 –** For input Activity Records, the data source is set to Netwrix API. -![apiactivitydetails](/images/auditor/10.7/api/apiactivitydetails.webp) +![apiactivitydetails](/images/auditor/10.8/api/apiactivitydetails.webp) diff --git a/docs/auditor/10.8/configuration/activedirectory/additional.md b/docs/auditor/10.8/configuration/activedirectory/additional.md index b37a7127de..7bb7986ef7 100644 --- a/docs/auditor/10.8/configuration/activedirectory/additional.md +++ b/docs/auditor/10.8/configuration/activedirectory/additional.md @@ -16,11 +16,11 @@ requirements: OR - The Audit Logs management role (see the - [Assign Management Roles](/docs/auditor/10.7/configuration/exchange/permissions.md#assign-management-roles) topic for additional + [Assign Management Roles](/docs/auditor/10.8/configuration/exchange/permissions.md#assign-management-roles) topic for additional information) You will also need to configure Exchange Administrator Audit Logging (AAL) settings. See the -[Exchange Administrator Audit Logging Settings](/docs/auditor/10.7/configuration/exchange/auditlog.md) topic for additional +[Exchange Administrator Audit Logging Settings](/docs/auditor/10.8/configuration/exchange/auditlog.md) topic for additional information. ## Additional Configuration for Domain Controller's Event Logs Auto-backup @@ -172,7 +172,7 @@ Domain Admins group. This permission should be assigned on each domain controller in the audited domain, so if your domain contains multiple domain controllers, it is recommended to assign permissions through Group Policy, or automatically using -[Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md). +[Audit Configuration Assistant](/docs/auditor/10.8/tools/auditconfigurationassistant.md). To assign permissions manually, use the Registry Editor snap-in or the Group Policy Management console. diff --git a/docs/auditor/10.8/configuration/activedirectory/automatic.md b/docs/auditor/10.8/configuration/activedirectory/automatic.md index 8c05eccb5d..6cc89e3cd8 100644 --- a/docs/auditor/10.8/configuration/activedirectory/automatic.md +++ b/docs/auditor/10.8/configuration/activedirectory/automatic.md @@ -14,29 +14,29 @@ To adjust audit settings automatically, do any of the following: - When creating a new monitoring plan, at the first step of the wizard select the **Adjust audit settings automatically** option. See the - [Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional + [Create a New Monitoring Plan](/docs/auditor/10.8/admin/monitoringplans/create.md) topic for additional information. -![mp_wizard_step1_ad_thumb_0_0](/images/auditor/10.7/configuration/activedirectory/mp_wizard_step1_ad_thumb_0_0.webp) +![mp_wizard_step1_ad_thumb_0_0](/images/auditor/10.8/configuration/activedirectory/mp_wizard_step1_ad_thumb_0_0.webp) - For the existing monitoring plan, modify data collection settings for Active Directory data source, selecting **Adjust audit settings automatically** option. - See the [Manage Data Sources](/docs/auditor/10.7/admin/monitoringplans/datasources.md) and - [Active Directory](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md) topics for additional + See the [Manage Data Sources](/docs/auditor/10.8/admin/monitoringplans/datasources.md) and + [Active Directory](/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md) topics for additional information. - For both new and existing monitoring plans, you can click **Launch Audit Configuration Assistant** (in the wizard step or in the plan settings, respectively) to launch a special tool that can detect current infrastructure settings and adjust them as needed for monitoring. See the - [Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md) topic for additional + [Audit Configuration Assistant](/docs/auditor/10.8/tools/auditconfigurationassistant.md) topic for additional information. If any conflicts are detected with your current audit settings, automatic audit configuration will not be performed. For a full list of audit settings required for Netwrix Auditor to collect comprehensive audit data and instructions on how to configure them, refer to the -[Active Directory](/docs/auditor/10.7/configuration/activedirectory/overview.md) topic. +[Active Directory](/docs/auditor/10.8/configuration/activedirectory/overview.md) topic. See also: -- [Active Directory](/docs/auditor/10.7/configuration/activedirectory/overview.md) -- [Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md) -- [Active Directory: Manual Configuration](/docs/auditor/10.7/configuration/activedirectory/manual.md) +- [Active Directory](/docs/auditor/10.8/configuration/activedirectory/overview.md) +- [Audit Configuration Assistant](/docs/auditor/10.8/tools/auditconfigurationassistant.md) +- [Active Directory: Manual Configuration](/docs/auditor/10.8/configuration/activedirectory/manual.md) diff --git a/docs/auditor/10.8/configuration/activedirectory/basicpolicy.md b/docs/auditor/10.8/configuration/activedirectory/basicpolicy.md index 2176305b11..68368627eb 100644 --- a/docs/auditor/10.8/configuration/activedirectory/basicpolicy.md +++ b/docs/auditor/10.8/configuration/activedirectory/basicpolicy.md @@ -8,7 +8,7 @@ sidebar_position: 50 Basic audit policies allow tracking changes to user accounts and groups and identifying originating workstations. You can configure advanced audit policies for the same purpose too. See the -[Configure Advanced Audit Policies](/docs/auditor/10.7/configuration/activedirectory/advancedpolicy.md)topic for additional information. +[Configure Advanced Audit Policies](/docs/auditor/10.8/configuration/activedirectory/advancedpolicy.md)topic for additional information. 1. Open the **Group Policy Management** console on any domain controller in the target domain: navigate to Start > Windows Administrative Tools (Windows Server 2016 and higher) or diff --git a/docs/auditor/10.8/configuration/activedirectory/manual.md b/docs/auditor/10.8/configuration/activedirectory/manual.md index 9a17f2b9e3..f2f59bd9f4 100644 --- a/docs/auditor/10.8/configuration/activedirectory/manual.md +++ b/docs/auditor/10.8/configuration/activedirectory/manual.md @@ -24,31 +24,31 @@ To configure your domain for monitoring manually, you will need: Follow the steps to configure your domain for monitoring. **Step 1 –** Configure effective domain controllers policy (by default, Default Domain Controllers -Policy). See the [Configure Basic Domain Audit Policies](/docs/auditor/10.7/configuration/activedirectory/basicpolicy.md) or -[Configure Advanced Audit Policies](/docs/auditor/10.7/configuration/activedirectory/advancedpolicy.md) topics for additional information. +Policy). See the [Configure Basic Domain Audit Policies](/docs/auditor/10.8/configuration/activedirectory/basicpolicy.md) or +[Configure Advanced Audit Policies](/docs/auditor/10.8/configuration/activedirectory/advancedpolicy.md) topics for additional information. **Step 2 –** Configure object-level auditing. See the -[Configure Object-Level Auditing](/docs/auditor/10.7/configuration/activedirectory/objectlevel.md) topic for additional information. +[Configure Object-Level Auditing](/docs/auditor/10.8/configuration/activedirectory/objectlevel.md) topic for additional information. **Step 3 –** Adjust the security event log size and retention settings. See the -[Adjust Security Event Log Size and Retention](/docs/auditor/10.7/configuration/activedirectory/securitylog.md)topic for additional information. +[Adjust Security Event Log Size and Retention](/docs/auditor/10.8/configuration/activedirectory/securitylog.md)topic for additional information. **Step 4 –** If you have an on-premises Exchange server in your Active Directory domain, consider that some changes to AD can be made via that Exchange server. To be able to audit and report who made those changes, perform configuration steps as described in the -[Exchange Administrator Audit Logging Settings](/docs/auditor/10.7/configuration/exchange/auditlog.md) topic. +[Exchange Administrator Audit Logging Settings](/docs/auditor/10.8/configuration/exchange/auditlog.md) topic. Optionally, you can adjust the Active Directory Tombstone Lifetime. See the -[Adjust Active Directory Tombstone Lifetime (optional)](/docs/auditor/10.7/configuration/activedirectory/tombstone.md) topic for additional +[Adjust Active Directory Tombstone Lifetime (optional)](/docs/auditor/10.8/configuration/activedirectory/tombstone.md) topic for additional information. Also, remember to perform the following steps for AD auditing: **Step 1 –** Configure Data Collecting Account, as described in the -[Additional Configuration to Review Changes Made via Exchange Server](/docs/auditor/10.7/configuration/activedirectory/additional.md) topic. +[Additional Configuration to Review Changes Made via Exchange Server](/docs/auditor/10.8/configuration/activedirectory/additional.md) topic. **Step 2 –** Configure required protocols and ports, as described in the -[Active Directory Ports](/docs/auditor/10.7/configuration/activedirectory/ports.md) topic. +[Active Directory Ports](/docs/auditor/10.8/configuration/activedirectory/ports.md) topic. **Step 3 –** Enable Secondary Logon Service on the computer where Netwrix Auditor Server resides. diff --git a/docs/auditor/10.8/configuration/activedirectory/objectlevel.md b/docs/auditor/10.8/configuration/activedirectory/objectlevel.md index 93ba0ba105..7a4e96014f 100644 --- a/docs/auditor/10.8/configuration/activedirectory/objectlevel.md +++ b/docs/auditor/10.8/configuration/activedirectory/objectlevel.md @@ -11,7 +11,7 @@ information on user activity in the domain. If you also want to audit changes to and schema, you must enable object-level auditing for **Configuration** and **Schema** partitions. Auditing of the Configuration partition is enabled by default. See the -[Active Directory](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md) topic for detailed +[Active Directory](/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md) topic for detailed instructions on how to enable monitoring of changes to the Schema partition in the target AD domain. Perform the following procedures to configure object-level auditing for the Domain, Configuration diff --git a/docs/auditor/10.8/configuration/activedirectory/overview.md b/docs/auditor/10.8/configuration/activedirectory/overview.md index 735bd648a9..35775ccf83 100644 --- a/docs/auditor/10.8/configuration/activedirectory/overview.md +++ b/docs/auditor/10.8/configuration/activedirectory/overview.md @@ -27,17 +27,17 @@ You can configure your IT Infrastructure for monitoring in one of the following configure them manually: - Configure the domain for auditing. See the - [Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md) topic for + [Audit Configuration Assistant](/docs/auditor/10.8/tools/auditconfigurationassistant.md) topic for information on configuring the domain. - On the Auditor console computer: - If you have enabled automatic log backup for the Security log of your domain controller, you can instruct Auditor to clear the old backups automatically. For that, use the **CleanAutoBackupLogs** registry key, as described in the - [Active Directory Registry Key Configuration](/docs/auditor/10.7/configuration/activedirectory/registrykey.md) topic. + [Active Directory Registry Key Configuration](/docs/auditor/10.8/configuration/activedirectory/registrykey.md) topic. **_RECOMMENDED:_** Adjust retention period for the backup files accordingly (default is - **50** hours). See the [Adjust Security Event Log Size and Retention](/docs/auditor/10.7/configuration/activedirectory/securitylog.md) + **50** hours). See the [Adjust Security Event Log Size and Retention](/docs/auditor/10.8/configuration/activedirectory/securitylog.md) topic. - To provide for event data collection, the Secondary Logon service must be up and running . @@ -84,9 +84,9 @@ Effective domain controllers policy settings must be configured as listed in the You can configure either **Basic domain audit policies**, or **Advanced domain audit policies**. - To configure these settings automatically using Netwrix Auditor, refer to the - [Active Directory: Automatic Configuration](/docs/auditor/10.7/configuration/activedirectory/automatic.md) topic. -- To configure them manually, refer to the [Configure Basic Domain Audit Policies](/docs/auditor/10.7/configuration/activedirectory/basicpolicy.md) - or [Configure Advanced Audit Policies](/docs/auditor/10.7/configuration/activedirectory/advancedpolicy.md) topics. + [Active Directory: Automatic Configuration](/docs/auditor/10.8/configuration/activedirectory/automatic.md) topic. +- To configure them manually, refer to the [Configure Basic Domain Audit Policies](/docs/auditor/10.8/configuration/activedirectory/basicpolicy.md) + or [Configure Advanced Audit Policies](/docs/auditor/10.8/configuration/activedirectory/advancedpolicy.md) topics. ## Audit Settings for AD Partitions @@ -103,8 +103,8 @@ These settings must be configured for **Everyone** security principal and applie and all descendant objects**. - You can configure these settings automatically using Netwrix Auditor, as described in the - [Active Directory: Automatic Configuration](/docs/auditor/10.7/configuration/activedirectory/automatic.md) topic. -- To configure them manually, refer o the [Configure Object-Level Auditing](/docs/auditor/10.7/configuration/activedirectory/objectlevel.md) topic. + [Active Directory: Automatic Configuration](/docs/auditor/10.8/configuration/activedirectory/automatic.md) topic. +- To configure them manually, refer o the [Configure Object-Level Auditing](/docs/auditor/10.8/configuration/activedirectory/objectlevel.md) topic. ### Configuration and Schema Partitions @@ -116,8 +116,8 @@ These settings must be configured for **Everyone** security principal and applie and its descendant objects**. - You can configure these settings automatically using Netwrix Auditor, as described in the - [Active Directory: Automatic Configuration](/docs/auditor/10.7/configuration/activedirectory/automatic.md) topic. -- To configure them manually, refer to the [Configure Object-Level Auditing](/docs/auditor/10.7/configuration/activedirectory/objectlevel.md) topic. + [Active Directory: Automatic Configuration](/docs/auditor/10.8/configuration/activedirectory/automatic.md) topic. +- To configure them manually, refer to the [Configure Object-Level Auditing](/docs/auditor/10.8/configuration/activedirectory/objectlevel.md) topic. ## Security Event Log Settings @@ -130,9 +130,9 @@ and its descendant objects**. | Auto-archiving | Enabled | - You can configure these settings automatically using Netwrix Auditor, as described in the - [Active Directory: Automatic Configuration](/docs/auditor/10.7/configuration/activedirectory/automatic.md) topic. + [Active Directory: Automatic Configuration](/docs/auditor/10.8/configuration/activedirectory/automatic.md) topic. - To configure them manually, refer to the - [Adjust Security Event Log Size and Retention](/docs/auditor/10.7/configuration/activedirectory/securitylog.md) topic. + [Adjust Security Event Log Size and Retention](/docs/auditor/10.8/configuration/activedirectory/securitylog.md) topic. ## Exchange Settings @@ -141,7 +141,7 @@ changes can be made via that Exchange server. To be able to audit and report who you should: - Configure the Exchange Administrator Audit Logging (AAL) settings, as described the - [Exchange Administrator Audit Logging Settings](/docs/auditor/10.7/configuration/exchange/auditlog.md) topic. + [Exchange Administrator Audit Logging Settings](/docs/auditor/10.8/configuration/exchange/auditlog.md) topic. - Make sure that the account used for data collection has the following: - Membership in the Organization Management or Records Management group @@ -153,11 +153,11 @@ you should: ### Next Steps - Configure Data Collecting Account, as described in the - [Additional Configuration to Review Changes Made via Exchange Server](/docs/auditor/10.7/configuration/activedirectory/additional.md) topic. -- Configure required protocols and ports, as described in the [Active Directory Ports](/docs/auditor/10.7/configuration/activedirectory/ports.md) + [Additional Configuration to Review Changes Made via Exchange Server](/docs/auditor/10.8/configuration/activedirectory/additional.md) topic. +- Configure required protocols and ports, as described in the [Active Directory Ports](/docs/auditor/10.8/configuration/activedirectory/ports.md) topic. - If you plan to restore deleted Active Directory objects and their attributes using the Netwrix Auditor Object Restore for Active Directory tool (shipped with Netwrix Auditor,) it is recommended to set the **Active Directory tombstone lifetime** property to 730 days (default is 180 days). See - the [Adjust Active Directory Tombstone Lifetime (optional)](/docs/auditor/10.7/configuration/activedirectory/tombstone.md) topic for additional + the [Adjust Active Directory Tombstone Lifetime (optional)](/docs/auditor/10.8/configuration/activedirectory/tombstone.md) topic for additional information. diff --git a/docs/auditor/10.8/configuration/activedirectory/permissions.md b/docs/auditor/10.8/configuration/activedirectory/permissions.md index 2f1a2f4f1e..fa956176dd 100644 --- a/docs/auditor/10.8/configuration/activedirectory/permissions.md +++ b/docs/auditor/10.8/configuration/activedirectory/permissions.md @@ -32,7 +32,7 @@ The account used for data collection must meet the following requirements: additional information. If the account selected for data collection is not a member of the Domain Admins group, see the -[Assign Permission To Read the Registry Key](/docs/auditor/10.7/configuration/windowsserver/permissions.md) topic. +[Assign Permission To Read the Registry Key](/docs/auditor/10.8/configuration/windowsserver/permissions.md) topic. ## Additional Configuration to Review Changes Made via Exchange Server @@ -43,11 +43,11 @@ you should make sure that the account used for data collection has any of the fo - Membership in the **Organization Management** or **Records Management** group. - The **Audit Logs** management role (see the - [Assigning Management Roles](/docs/auditor/10.7/configuration/exchange/permissions.md#assign-management-roles) topic for + [Assigning Management Roles](/docs/auditor/10.8/configuration/exchange/permissions.md#assign-management-roles) topic for additional information). You will also need to configure Exchange Administrator Audit Logging (AAL) settings. See the -[Exchange Administrator Audit Logging Settings](/docs/auditor/10.7/configuration/exchange/auditlog.md) topic for additional +[Exchange Administrator Audit Logging Settings](/docs/auditor/10.8/configuration/exchange/auditlog.md) topic for additional information. ## Additional Configuration for Domain Controller's Event Logs Auto-backup @@ -56,7 +56,7 @@ The following is required if auto-backup is enabled for the domain controller ev - Permissions to access the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Security registry key on the domain controllers in the target domain. See the - [Assign Permission To Read the Registry Key](/docs/auditor/10.7/configuration/windowsserver/permissions.md) topic for additional + [Assign Permission To Read the Registry Key](/docs/auditor/10.8/configuration/windowsserver/permissions.md) topic for additional information. - Membership in one of the following groups: **Administrators**, **Print Operators**, **Server Operators**. @@ -93,7 +93,7 @@ If auto-backup is _enabled_ for the domain controller event logs: - Permissions to access the _HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Security_ registry key on the domain controllers in the target domain. See the - [Assign Permission To Read the Registry Key](/docs/auditor/10.7/configuration/windowsserver/permissions.md) topic for additional + [Assign Permission To Read the Registry Key](/docs/auditor/10.8/configuration/windowsserver/permissions.md) topic for additional information. - Membership in any of the following groups: Administrators, Print Operators, Server Operators - Read/Write share permission and Full control security permission on the logs backup folder. @@ -107,11 +107,11 @@ you should make sure that the account used for data collection has any of the fo - Membership in the **Organization Management** or **Records Management** group. - The **Audit Logs** management role (see the - [Assigning Management Roles](/docs/auditor/10.7/configuration/exchange/permissions.md#assign-management-roles) topic for + [Assigning Management Roles](/docs/auditor/10.8/configuration/exchange/permissions.md#assign-management-roles) topic for additional information). You will also need to configure Exchange Administrator Audit Logging (AAL) settings. See the -[Exchange Administrator Audit Logging Settings](/docs/auditor/10.7/configuration/exchange/auditlog.md) topic for additional +[Exchange Administrator Audit Logging Settings](/docs/auditor/10.8/configuration/exchange/auditlog.md) topic for additional information. If you are using gMSA for data collection, consider that AAL event data collection from your diff --git a/docs/auditor/10.8/configuration/activedirectory/tombstone.md b/docs/auditor/10.8/configuration/activedirectory/tombstone.md index d49208ef68..129c170523 100644 --- a/docs/auditor/10.8/configuration/activedirectory/tombstone.md +++ b/docs/auditor/10.8/configuration/activedirectory/tombstone.md @@ -40,6 +40,6 @@ Right-click it and select **Properties** from the pop-up menu. **Step 4 –** In the **CN=Directory Service Properties** dialog, locate the **tombstoneLifetime** attribute in the **Attribute Editor** tab. -![manualconfig_adsi_tombstone_winserver2016](/images/auditor/10.7/configuration/activedirectory/manualconfig_adsi_tombstone_winserver2016.webp) +![manualconfig_adsi_tombstone_winserver2016](/images/auditor/10.8/configuration/activedirectory/manualconfig_adsi_tombstone_winserver2016.webp) **Step 5 –** Click **Edit**. Set the value to _"730"_ (which equals 2 years). diff --git a/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md b/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md index f24568d07f..d1624e6d6b 100644 --- a/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md +++ b/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md @@ -28,7 +28,7 @@ becomes the **primary** server. Other federation servers you add to the farm wil **secondary** servers. Make sure you have Windows Remote Management properly configured on your Auditor console computer. -See the [Software Requirements](/docs/auditor/10.7/requirements/software.md) topic for additional information. +See the [Software Requirements](/docs/auditor/10.8/requirements/software.md) topic for additional information. You can configure your IT Infrastructure for monitoring in one of the following ways: @@ -65,7 +65,7 @@ You can configure your IT Infrastructure for monitoring in one of the following - Adjust log size and retention settings for **Security** log and for **AD FS Admin** log (under **Applications and Service logs**). See - [Adjusting Event Log Size and Retention Settings](/docs/auditor/10.7/configuration/windowsserver/eventlog.md) for details. + [Adjusting Event Log Size and Retention Settings](/docs/auditor/10.8/configuration/windowsserver/eventlog.md) for details. - If AD FS Admin logging is disabled, you should enable it. - See the Configure AD FS farm manually topic for additional information. @@ -78,12 +78,12 @@ need to configure audit settings manually, as described later in this section. **Step 1 –** Select the AD FS data source in this monitoring plan (top row under the header), click **Edit data source** to open its settings. -![mp_adfs_listing_thumb_0_0](/images/auditor/10.7/configuration/activedirectoryfederatedservices/mp_adfs_listing_thumb_0_0.webp) +![mp_adfs_listing_thumb_0_0](/images/auditor/10.8/configuration/activedirectoryfederatedservices/mp_adfs_listing_thumb_0_0.webp) **Step 2 –** In the **Configure audit settings** section, select **Adjust audit settings automatically** check box. -![mp_data_source_ad_fs_thumb_0_0](/images/auditor/10.7/configuration/activedirectoryfederatedservices/mp_data_source_ad_fs_thumb_0_0.webp) +![mp_data_source_ad_fs_thumb_0_0](/images/auditor/10.8/configuration/activedirectoryfederatedservices/mp_data_source_ad_fs_thumb_0_0.webp) **Step 3 –** Save the settings. @@ -119,7 +119,7 @@ server versions **Step 3 –** Adjust log size and retention settings for **Security** log and for **AD FS Admin** log (under **Applications and Service logs**). See the -[Adjusting Event Log Size and Retention Settings](/docs/auditor/10.7/configuration/windowsserver/eventlog.md) topic for additional +[Adjusting Event Log Size and Retention Settings](/docs/auditor/10.8/configuration/windowsserver/eventlog.md) topic for additional information. If AD FS Admin logging is disabled, you should enable it. @@ -127,8 +127,8 @@ If AD FS Admin logging is disabled, you should enable it. _Remember,_ do the following: - Configure Data Collecting Account as described in the - [Permissions for AD FS Auditing](/docs/auditor/10.7/configuration/activedirectoryfederatedservices/permissions.md) topic. -- Configure ports as described in the [AD FS Ports](/docs/auditor/10.7/configuration/activedirectoryfederatedservices/ports.md) topic. + [Permissions for AD FS Auditing](/docs/auditor/10.8/configuration/activedirectoryfederatedservices/permissions.md) topic. +- Configure ports as described in the [AD FS Ports](/docs/auditor/10.8/configuration/activedirectoryfederatedservices/ports.md) topic. ## AD FS Servers Data Collection diff --git a/docs/auditor/10.8/configuration/exchange/auditlog.md b/docs/auditor/10.8/configuration/exchange/auditlog.md index a2dba834fb..6c4079f97a 100644 --- a/docs/auditor/10.8/configuration/exchange/auditlog.md +++ b/docs/auditor/10.8/configuration/exchange/auditlog.md @@ -19,7 +19,7 @@ Logging (AAL) settings are configured as follows: | ExcludedCmdlets | \*-InboxRule, \*-MailboxAutoReplyConfiguration, Set-MailboxAuditBypassAssociation, Set-MailboxAutoReplyConfiguration, Set-MailboxCalendarConfiguration, Set-MailboxCalendarFolder, Set-MailboxFolderPermission, Set-MailboxJunkEmailConfiguration, Set-MailboxMessageConfiguration, Set-MailboxRegionalConfiguration, Set-MailboxSpellingConfiguration | This list of exclusions is set up as explained in step 3 of the procedure below. | You can configure these settings automatically using Netwrix Auditor, as described in the -[Active Directory: Automatic Configuration](/docs/auditor/10.7/configuration/activedirectory/automatic.md) topic. +[Active Directory: Automatic Configuration](/docs/auditor/10.8/configuration/activedirectory/automatic.md) topic. To configure them manually, refer to the procedure described below. diff --git a/docs/auditor/10.8/configuration/exchange/mailboxacccess.md b/docs/auditor/10.8/configuration/exchange/mailboxacccess.md index c22171d2a6..a5e0d03d87 100644 --- a/docs/auditor/10.8/configuration/exchange/mailboxacccess.md +++ b/docs/auditor/10.8/configuration/exchange/mailboxacccess.md @@ -10,7 +10,7 @@ Netwrix Auditor allows tracking non-owner mailbox access in your Exchange organi It is recommended to select **Adjust audit settings automatically** option when setting up Exchange monitoring in Netwrix Auditor. See the -[Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional +[Create a New Monitoring Plan](/docs/auditor/10.8/admin/monitoringplans/create.md) topic for additional information. However, in some scenarios users may need to apply required audit settings manually. For that, diff --git a/docs/auditor/10.8/configuration/exchange/overview.md b/docs/auditor/10.8/configuration/exchange/overview.md index 5954a3cf96..39dfdc0141 100644 --- a/docs/auditor/10.8/configuration/exchange/overview.md +++ b/docs/auditor/10.8/configuration/exchange/overview.md @@ -49,10 +49,10 @@ You can configure your IT Infrastructure for monitoring in one of the following Directory domain, consider that some changes can be made via that Exchange server. To be able to audit and report who made those changes, you should configure the Exchange Administrator Audit Logging (AAL) settings, as described in the - [Exchange Administrator Audit Logging Settings](/docs/auditor/10.7/configuration/exchange/auditlog.md) topic. + [Exchange Administrator Audit Logging Settings](/docs/auditor/10.8/configuration/exchange/auditlog.md) topic. - The Administrator Audit Logging settings must be configured (only required for Exchange 2019, 2016, 2013 or 2010). See the - [Exchange Administrator Audit Logging Settings](/docs/auditor/10.7/configuration/exchange/auditlog.md) topic for additional + [Exchange Administrator Audit Logging Settings](/docs/auditor/10.8/configuration/exchange/auditlog.md) topic for additional information. - In order to audit mailbox access, native audit logging must be enabled for user, shared, equipment, linked, and room mailboxes: @@ -62,7 +62,7 @@ You can configure your IT Infrastructure for monitoring in one of the following SendOnBehalf, Create - If you want to track non-owner access, configure mailbox monitoring. See the - [Configure Exchange for Monitoring Mailbox Access](/docs/auditor/10.7/configuration/exchange/mailboxacccess.md) topic for additional + [Configure Exchange for Monitoring Mailbox Access](/docs/auditor/10.8/configuration/exchange/mailboxacccess.md) topic for additional information. - On the Auditor console computer: @@ -70,11 +70,11 @@ You can configure your IT Infrastructure for monitoring in one of the following - If you have enabled automatic log backup for the Security log of your domain controller, you can instruct Auditor to clear the old backups automatically. For that, use the **CleanAutoBackupLogs** registry key, as described in the - [Active Directory Registry Key Configuration](/docs/auditor/10.7/configuration/activedirectory/registrykey.md) topic. + [Active Directory Registry Key Configuration](/docs/auditor/10.8/configuration/activedirectory/registrykey.md) topic. **_RECOMMENDED:_** Adjust retention period for the backup files accordingly (default is **50** hours). See the - [Adjust Security Event Log Size and Retention](/docs/auditor/10.7/configuration/activedirectory/securitylog.md) topic. + [Adjust Security Event Log Size and Retention](/docs/auditor/10.8/configuration/activedirectory/securitylog.md) topic. - To provide for event data collection, the Secondary Logon service must be up and running . Open **Administrative Tools** > **Services**, right-click the **Secondary Logon** service @@ -84,8 +84,8 @@ You can configure your IT Infrastructure for monitoring in one of the following _Remember,_ for Exchange auditing, do the following: 1. Configure Data Collecting Account, as described in the - [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic. -2. Configure required protocols and ports, as described in the [Exchange Ports](/docs/auditor/10.7/configuration/exchange/ports.md) topic. + [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic. +2. Configure required protocols and ports, as described in the [Exchange Ports](/docs/auditor/10.8/configuration/exchange/ports.md) topic. ## Monitored Object Types, Actions, and Attributes diff --git a/docs/auditor/10.8/configuration/exchange/permissions.md b/docs/auditor/10.8/configuration/exchange/permissions.md index 98b707b464..b57b688f8f 100644 --- a/docs/auditor/10.8/configuration/exchange/permissions.md +++ b/docs/auditor/10.8/configuration/exchange/permissions.md @@ -26,11 +26,11 @@ The account used for data collection must meet the following requirements: Domain Admins group: - The Manage auditing and security log policy must be defined for this account. See the - [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) topic for + [Permissions for Active Directory Auditing](/docs/auditor/10.8/configuration/activedirectory/permissions.md) topic for additional information. - If you plan to process the Active Directory Deleted Objects container, Read permission on this container is required. See the - [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) topic for + [Permissions for Active Directory Auditing](/docs/auditor/10.8/configuration/activedirectory/permissions.md) topic for additional information. - The account must belong to the Organization Management or Records Management group. See the Add Account to the Organization Management Group topic for additional information. @@ -64,7 +64,7 @@ in the root domain of the forest where Microsoft Exchange 2019, 2016, or 2013 is **Step 4 –** In the **Organization Management Properties** dialog that opens, select the **Members** tab and click **Add**. -![manualconfig_orgmanagement2016](/images/auditor/10.7/configuration/exchange/manualconfig_orgmanagement2016.webp) +![manualconfig_orgmanagement2016](/images/auditor/10.8/configuration/exchange/manualconfig_orgmanagement2016.webp) If for some reason you do not want this account to belong to the Organization Management group, you can add it to the Records Management group in the same way. The Records Management group is less @@ -99,7 +99,7 @@ Domain Admins group. This permission should be assigned on each domain controller in the audited domain, so if your domain contains multiple domain controllers, it is recommended to assign permissions through Group Policy, or automatically using -[Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md). +[Audit Configuration Assistant](/docs/auditor/10.8/tools/auditconfigurationassistant.md). To assign permissions manually, use the Registry Editor snap-in or the Group Policy Management console. diff --git a/docs/auditor/10.8/configuration/exchange/permissionsregistrykeys.md b/docs/auditor/10.8/configuration/exchange/permissionsregistrykeys.md index 7dd3c023b4..47fcaab8bc 100644 --- a/docs/auditor/10.8/configuration/exchange/permissionsregistrykeys.md +++ b/docs/auditor/10.8/configuration/exchange/permissionsregistrykeys.md @@ -10,9 +10,9 @@ This permission is required only if the account selected for data collection is Domain Admins group. This permission should be assigned on each domain controller in the audited domain, so if your domain contains multiple domain controllers, it is recommended to assign permissions through Group Policy, or automatically using -[Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md). To assign permissions +[Audit Configuration Assistant](/docs/auditor/10.8/tools/auditconfigurationassistant.md). To assign permissions manually, use the Registry Editor snap-in or the Group Policy Management console. See the -[Permissions for Group Policy Auditing ](/docs/auditor/10.7/configuration/grouppolicy/permissions.md)topic for additional +[Permissions for Group Policy Auditing ](/docs/auditor/10.8/configuration/grouppolicy/permissions.md)topic for additional information. ## Assign Permission Via the Registry Editor Snap-in diff --git a/docs/auditor/10.8/configuration/fileservers/delldatastorage/cifss.md b/docs/auditor/10.8/configuration/fileservers/delldatastorage/cifss.md index 1bbaeea2f7..e8bc5a5023 100644 --- a/docs/auditor/10.8/configuration/fileservers/delldatastorage/cifss.md +++ b/docs/auditor/10.8/configuration/fileservers/delldatastorage/cifss.md @@ -20,7 +20,7 @@ you want to track: Actions reported by Auditor vary depending on the file server type and the audited object (file, folder, or share). The changes include creation, modification, deletion, moving, renaming, and -copying. See the [Dell Data Storage](/docs/auditor/10.7/configuration/fileservers/delldatastorage/overview.md) topic for additional information. +copying. See the [Dell Data Storage](/docs/auditor/10.8/configuration/fileservers/delldatastorage/overview.md) topic for additional information. ## Configure Audit Settings for the CIFS File Shares Pre-Windows Server 2012 @@ -100,10 +100,10 @@ Review the following for additional information: | Auditing Entry | | | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --- | | Successful reads | | -| The Auditing Entry below shows Advanced Permissions for auditing successful reads only: ![manualconfig_fileserver_auditingentry_1_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_1_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"Files only"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing successful reads only: ![manualconfig_fileserver_auditingentry_1_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_1_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"Files only"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | | Successful changes | | -| The Auditing Entry below shows Advanced Permissions for auditing successful changes only: ![manualconfig_fileserver_auditingentry_2_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_2_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing successful changes only: ![manualconfig_fileserver_auditingentry_2_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_2_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | | Failed read attempts | | -| The Auditing Entry below shows Advanced Permissions for auditing failed read attempts: ![manualconfig_fileserver_auditingentry_3_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_3_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing failed read attempts: ![manualconfig_fileserver_auditingentry_3_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_3_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | | Failed change attempts | | -| The Auditing Entry below shows Advanced Permissions for auditing failed change attempts: ![manualconfig_fileserver_auditingentry_4_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_4_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing failed change attempts: ![manualconfig_fileserver_auditingentry_4_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_4_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | diff --git a/docs/auditor/10.8/configuration/fileservers/delldatastorage/objectaccess.md b/docs/auditor/10.8/configuration/fileservers/delldatastorage/objectaccess.md index 9df7b2d40e..906687406a 100644 --- a/docs/auditor/10.8/configuration/fileservers/delldatastorage/objectaccess.md +++ b/docs/auditor/10.8/configuration/fileservers/delldatastorage/objectaccess.md @@ -33,7 +33,7 @@ node on the left and navigate to **Policies → Windows Settings → Security Se | -------------- | ----------------------- | --------------------------- | | Audit Policy | **Audit object access** | _"Success"_ and _"Failure"_ | -![manualconfig_fileserver_auditpolicy2016](/images/auditor/10.7/configuration/fileservers/delldatastorage/manualconfig_fileserver_auditpolicy2016.webp) +![manualconfig_fileserver_auditpolicy2016](/images/auditor/10.8/configuration/fileservers/delldatastorage/manualconfig_fileserver_auditpolicy2016.webp) **Step 6 –** To update the group policies, execute the following command: @@ -53,4 +53,4 @@ node on the left and navigate to **Policies → Windows Settings → Security Se You can configure advanced audit policy to narrow the range of events tracked and recorded by the product, thus preventing your AuditArchive and the Security event log from overfilling. See the -[Configure Security Event Log Maximum Size](/docs/auditor/10.7/configuration/fileservers/delldatastorage/securityeventlog.md) topic for additional information. +[Configure Security Event Log Maximum Size](/docs/auditor/10.8/configuration/fileservers/delldatastorage/securityeventlog.md) topic for additional information. diff --git a/docs/auditor/10.8/configuration/fileservers/delldatastorage/overview.md b/docs/auditor/10.8/configuration/fileservers/delldatastorage/overview.md index 73daa0fc45..e2b06b1e43 100644 --- a/docs/auditor/10.8/configuration/fileservers/delldatastorage/overview.md +++ b/docs/auditor/10.8/configuration/fileservers/delldatastorage/overview.md @@ -60,7 +60,7 @@ First, you should decide on the objects and actions you want to track. Consider - Actions reported by Auditor vary depending on the file server type and the audited object (file, folder, or share). - Besides, monitoring and reporting of the Dell Data Storage systems may not provide the results you - expect — due to native Dell audit peculiarities. See the [File Servers](/docs/auditor/10.7/configuration/fileservers/overview.md) topic for + expect — due to native Dell audit peculiarities. See the [File Servers](/docs/auditor/10.8/configuration/fileservers/overview.md) topic for additional information. For example, the _change_ operation (in Auditor terminology) includes creation, modification, and @@ -71,7 +71,7 @@ deletion. To collect comprehensive audit data, you must configure your file shares for monitoring. Consider the following: -**Step 1 –** [Configure Security Event Log Maximum Size](/docs/auditor/10.7/configuration/fileservers/delldatastorage/securityeventlog.md) to avoid overwriting +**Step 1 –** [Configure Security Event Log Maximum Size](/docs/auditor/10.8/configuration/fileservers/delldatastorage/securityeventlog.md) to avoid overwriting of the security logs; it is recommended to set security log size to a maximum (4GB). Auditor does not clean Dell Unity logs automatically, the log will start overwriting when it goes beyond the limit. See the @@ -83,9 +83,9 @@ and its size is set to 512 KB. The default location for the security.evt log is which corresponds to the root partition of the Data Mover. To be able to increase the security log size, you must move it from the Data Mover root folder. -**Step 3 –** [Configure Audit Object Access Policy](/docs/auditor/10.7/configuration/fileservers/delldatastorage/objectaccess.md). Set the Audit object access +**Step 3 –** [Configure Audit Object Access Policy](/docs/auditor/10.8/configuration/fileservers/delldatastorage/objectaccess.md). Set the Audit object access policy to "Success" and "Failure" in the Group Policy of the OU where your Dell VNX/VNXe/Unity/Celerra appliance belongs to. For more information on VNX/VNXe/Unity/Celerra GPO support, refer to documentation provided by Dell. -**Step 4 –** [Configure Audit Settings for CIFS File Shares on Dell Data Storage](/docs/auditor/10.7/configuration/fileservers/delldatastorage/cifss.md) +**Step 4 –** [Configure Audit Settings for CIFS File Shares on Dell Data Storage](/docs/auditor/10.8/configuration/fileservers/delldatastorage/cifss.md) diff --git a/docs/auditor/10.8/configuration/fileservers/dellisilon/overview.md b/docs/auditor/10.8/configuration/fileservers/dellisilon/overview.md index ed214a1d85..7d69a6052f 100644 --- a/docs/auditor/10.8/configuration/fileservers/dellisilon/overview.md +++ b/docs/auditor/10.8/configuration/fileservers/dellisilon/overview.md @@ -46,8 +46,8 @@ You can configure your IT Infrastructure for monitoring in one of the following To configure your Dell Isilon/PowerScale appliance for monitoring perform the following procedures: -- [Normal and Enterprise Modes for Clusters](/docs/auditor/10.7/configuration/fileservers/dellisilon/normal.md) -- [Compliance Mode](/docs/auditor/10.7/configuration/fileservers/dellisilon/compliance.md) +- [Normal and Enterprise Modes for Clusters](/docs/auditor/10.8/configuration/fileservers/dellisilon/normal.md) +- [Compliance Mode](/docs/auditor/10.8/configuration/fileservers/dellisilon/compliance.md) If your file shares contain symbolic links and you want to collect state-in-time data for these shares, the local-to-local, local-to-remote, remote-to-local, and remote-to-remote symbolic link diff --git a/docs/auditor/10.8/configuration/fileservers/dellisilon/permissions.md b/docs/auditor/10.8/configuration/fileservers/dellisilon/permissions.md index 23587a891b..4dfec0fe08 100644 --- a/docs/auditor/10.8/configuration/fileservers/dellisilon/permissions.md +++ b/docs/auditor/10.8/configuration/fileservers/dellisilon/permissions.md @@ -61,4 +61,4 @@ To grant the necessary permissions to Isilon/PowerScale data collecting account to perform all steps for manual audit configuration, otherwise the product will not function properly. -See the [Normal and Enterprise Modes for Clusters](/docs/auditor/10.7/configuration/fileservers/dellisilon/normal.md) topic for additional information. +See the [Normal and Enterprise Modes for Clusters](/docs/auditor/10.8/configuration/fileservers/dellisilon/normal.md) topic for additional information. diff --git a/docs/auditor/10.8/configuration/fileservers/netappcmode/cifs.md b/docs/auditor/10.8/configuration/fileservers/netappcmode/cifs.md index 02a31f3969..25a20e78e7 100644 --- a/docs/auditor/10.8/configuration/fileservers/netappcmode/cifs.md +++ b/docs/auditor/10.8/configuration/fileservers/netappcmode/cifs.md @@ -19,7 +19,7 @@ options that you want to track: Actions reported by Netwrix Auditor vary depending on the file server type and the audited object (file, folder, or share). The changes include creation, modification, deletion, moving, renaming, and copying. To track the copy action, enable successful read access and change auditing. See the -[File Servers](/docs/auditor/10.7/configuration/fileservers/overview.md) topic for additional information. +[File Servers](/docs/auditor/10.8/configuration/fileservers/overview.md) topic for additional information. Do one of the following depending on the OS: @@ -39,7 +39,7 @@ Do one of the following depending on the OS: 3. In the **Advanced Security Settings for ``** dialog, navigate to the **Auditing** tab, click Edit. - ![auditing_entries_netapp](/images/auditor/10.7/configuration/fileservers/netappcmode/auditing_entries_netapp.webp) + ![auditing_entries_netapp](/images/auditor/10.8/configuration/fileservers/netappcmode/auditing_entries_netapp.webp) 4. In a separate **Advanced Security Settings for ``** dialog, click Add to add a principal. You can also select **Everyone** (or another user-defined group containing users that @@ -99,10 +99,10 @@ Review the following for additional information: | Auditing Entry | | | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --- | | Successful reads | | -| The Auditing Entry below shows Advanced Permissions for auditing successful reads only: ![manualconfig_fileserver_auditingentry_1_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_1_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"Files only"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing successful reads only: ![manualconfig_fileserver_auditingentry_1_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_1_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"Files only"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | | Successful changes | | -| The Auditing Entry below shows Advanced Permissions for auditing successful changes only: ![manualconfig_fileserver_auditingentry_2_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_2_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing successful changes only: ![manualconfig_fileserver_auditingentry_2_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_2_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | | Failed read attempts | | -| The Auditing Entry below shows Advanced Permissions for auditing failed read attempts: ![manualconfig_fileserver_auditingentry_3_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_3_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing failed read attempts: ![manualconfig_fileserver_auditingentry_3_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_3_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | | Failed change attempts | | -| The Auditing Entry below shows Advanced Permissions for auditing failed change attempts: ![manualconfig_fileserver_auditingentry_4_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_4_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing failed change attempts: ![manualconfig_fileserver_auditingentry_4_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_4_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | diff --git a/docs/auditor/10.8/configuration/fileservers/netappcmode/eventcategories.md b/docs/auditor/10.8/configuration/fileservers/netappcmode/eventcategories.md index 43a626996f..5a196924b6 100644 --- a/docs/auditor/10.8/configuration/fileservers/netappcmode/eventcategories.md +++ b/docs/auditor/10.8/configuration/fileservers/netappcmode/eventcategories.md @@ -111,14 +111,14 @@ To configure logs retention period For the backup logs retention functionality to work properly, you need to specify the CleanAutoBackupLogs name for the newly created registry value. - ![manualconfig_fileserver_netapp_createregistryvalue_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_netapp_createregistryvalue_2016.webp) + ![manualconfig_fileserver_netapp_createregistryvalue_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_netapp_createregistryvalue_2016.webp) 4. Double-click **CleanAutoBackupLogs**. The **Edit DWORD Value** dialog will open. 5. This value defines the time period (in hours) after which security event logs archives will be automatically deleted. By default, it is set to _"0"_ (decimal). Modify this value, if necessary, and click **OK** to save the changes. - ![manualconfig_retentionperiodbackuplog_winserver2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_retentionperiodbackuplog_winserver2016.webp) + ![manualconfig_retentionperiodbackuplog_winserver2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_retentionperiodbackuplog_winserver2016.webp) 6. **NOTE:** If the **CleanAutoBackupLogs** registry value is set to _"0"_, you will have to remove the old logs manually, or you may run out of space on your hard drive. diff --git a/docs/auditor/10.8/configuration/fileservers/netappcmode/overview.md b/docs/auditor/10.8/configuration/fileservers/netappcmode/overview.md index 881b6d9ebc..494c01ca92 100644 --- a/docs/auditor/10.8/configuration/fileservers/netappcmode/overview.md +++ b/docs/auditor/10.8/configuration/fileservers/netappcmode/overview.md @@ -92,7 +92,7 @@ You can configure your IT Infrastructure for monitoring in one of the following See the following topics for additional information: - Configure NetApp Clustered Data ONTAP 8 and ONTAP 9 for Monitoring -- [Configure Audit Settings for CIFS File Shares](/docs/auditor/10.7/configuration/fileservers/netappcmode/cifs.md) +- [Configure Audit Settings for CIFS File Shares](/docs/auditor/10.8/configuration/fileservers/netappcmode/cifs.md) The following table lists the actions that can be performed on NetApp: @@ -120,10 +120,10 @@ only. To configure Clustered Data ONTAP 8 and ONTAP 9 for monitoring, perform the following procedures: - Prerequisites -- [Configure ONTAPI\RESTAPI Web Access](/docs/auditor/10.7/configuration/fileservers/netappcmode/webaccess.md) -- [Configure System Service Firewall Policies](/docs/auditor/10.7/configuration/fileservers/netappcmode/ports.md) -- [Configure Service Policy](/docs/auditor/10.7/configuration/fileservers/netappcmode/servicepolicy.md) -- [Configure Event Categories and Log](/docs/auditor/10.7/configuration/fileservers/netappcmode/eventcategories.md) +- [Configure ONTAPI\RESTAPI Web Access](/docs/auditor/10.8/configuration/fileservers/netappcmode/webaccess.md) +- [Configure System Service Firewall Policies](/docs/auditor/10.8/configuration/fileservers/netappcmode/ports.md) +- [Configure Service Policy](/docs/auditor/10.8/configuration/fileservers/netappcmode/servicepolicy.md) +- [Configure Event Categories and Log](/docs/auditor/10.8/configuration/fileservers/netappcmode/eventcategories.md) ### Prerequisites @@ -144,7 +144,7 @@ Perform the following steps before proceeding with the audit configuration. **NOTE**: NFS file shares are not supported. **Step 2 –** Configure System Access Control List (SACL) on your file share. See -[Configure Audit Settings for CIFS File Shares](/docs/auditor/10.7/configuration/fileservers/netappcmode/cifs.md) topic for additional information. +[Configure Audit Settings for CIFS File Shares](/docs/auditor/10.8/configuration/fileservers/netappcmode/cifs.md) topic for additional information. **Step 3 –** Set the Security Style for Volume or Qtree where the audited file shares are located to the _"ntfs"_ or _"mixed"_. diff --git a/docs/auditor/10.8/configuration/fileservers/netappcmode/webaccess.md b/docs/auditor/10.8/configuration/fileservers/netappcmode/webaccess.md index 4cac066ce5..396185baa8 100644 --- a/docs/auditor/10.8/configuration/fileservers/netappcmode/webaccess.md +++ b/docs/auditor/10.8/configuration/fileservers/netappcmode/webaccess.md @@ -56,7 +56,7 @@ To display the current settings of web services for SVM svm1, use the following cluster1::> vserver services web show -vserver svm1 ``` -**Step 4 –** Review the [Permissions for NetApp Auditing](/docs/auditor/10.7/configuration/fileservers/netappcmode/permissions.md) topic for additional +**Step 4 –** Review the [Permissions for NetApp Auditing](/docs/auditor/10.8/configuration/fileservers/netappcmode/permissions.md) topic for additional information on how to create the role and enable AD user access. **Step 5 –** Enable HTTP/HTTPS access. For example: @@ -89,7 +89,7 @@ cluster1::> vserver services web modify -vserver svm1 -name rest -enabled true - **Step 7 –** Make sure that the custom role (e.g., netwrix_role for ONTAPI or netwrix_rest_role for RESTAPI) assigned to your account specified for data collection can access ONTAPI or RESTAPI. See -[Permissions for NetApp Auditing](/docs/auditor/10.7/configuration/fileservers/netappcmode/permissions.md) topic for additional information. +[Permissions for NetApp Auditing](/docs/auditor/10.8/configuration/fileservers/netappcmode/permissions.md) topic for additional information. ``` cluster1::> vserver services web access show -name ontapi -vserver svm1 diff --git a/docs/auditor/10.8/configuration/fileservers/nutanix/notificationpolicy.md b/docs/auditor/10.8/configuration/fileservers/nutanix/notificationpolicy.md index fc47c75162..4dfb77aff6 100644 --- a/docs/auditor/10.8/configuration/fileservers/nutanix/notificationpolicy.md +++ b/docs/auditor/10.8/configuration/fileservers/nutanix/notificationpolicy.md @@ -43,7 +43,7 @@ If you select to launch the RestAPI Explorer from the Prism menu, the **RestAPI client will be opened. 2. In the **username** and **password** fields, enter the credentials of the - [Create User Account to Access Nutanix REST API](/docs/auditor/10.7/configuration/fileservers/nutanix/useraccount.md) you have created. + [Create User Account to Access Nutanix REST API](/docs/auditor/10.8/configuration/fileservers/nutanix/useraccount.md) you have created. 3. Click **Explore**. 4. In the **File Server REST API Explorer** REST API client, locate the POST request for `notification_policies` : @@ -100,7 +100,7 @@ _"protocol_type_list" : ["SMB"]_ - instructs to track SMB shares (the only curre _``_ – enter the name of notification policy you want to create -_``_ - enter the `uuid` of [Configure Partner Server](/docs/auditor/10.7/configuration/fileservers/nutanix/partnerserver.md) +_``_ - enter the `uuid` of [Configure Partner Server](/docs/auditor/10.8/configuration/fileservers/nutanix/partnerserver.md) _``_ - enter the list of operations to be audited. diff --git a/docs/auditor/10.8/configuration/fileservers/nutanix/overview.md b/docs/auditor/10.8/configuration/fileservers/nutanix/overview.md index bb21fcc81d..c4d524bcf0 100644 --- a/docs/auditor/10.8/configuration/fileservers/nutanix/overview.md +++ b/docs/auditor/10.8/configuration/fileservers/nutanix/overview.md @@ -41,9 +41,9 @@ You can configure your IT Infrastructure for monitoring in one of the following To configure your Nutanix File Server for monitoring SMB shares, you will need to do the following: **Step 1 –** Create a user account to access the Nutanix REST API. See the -[Create User Account to Access Nutanix REST API](/docs/auditor/10.7/configuration/fileservers/nutanix/useraccount.md) topic for additional information. +[Create User Account to Access Nutanix REST API](/docs/auditor/10.8/configuration/fileservers/nutanix/useraccount.md) topic for additional information. -**Step 2 –** Open a port for inbound connections. See the [Nutanix Ports](/docs/auditor/10.7/configuration/fileservers/nutanix/ports.md) topic for +**Step 2 –** Open a port for inbound connections. See the [Nutanix Ports](/docs/auditor/10.8/configuration/fileservers/nutanix/ports.md) topic for additional information. In addition, configure the Auditor console server as a partner server for Nutanix Files, and create @@ -52,11 +52,11 @@ performed in any of the following ways: - Automatically when creating a monitoring plan. For that, you should select the **Adjust audit settings automatically** option in the monitoring plan wizard. See the - [Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) + [Settings for Data Collection](/docs/auditor/10.8/admin/monitoringplans/create.md#settings-for-data-collection) topic for additional information. - Manually, as described in the corresponding topics: - - [Configure Partner Server](/docs/auditor/10.7/configuration/fileservers/nutanix/partnerserver.md) - - [Create a Notification Policy](/docs/auditor/10.7/configuration/fileservers/nutanix/notificationpolicy.md) + - [Configure Partner Server](/docs/auditor/10.8/configuration/fileservers/nutanix/partnerserver.md) + - [Create a Notification Policy](/docs/auditor/10.8/configuration/fileservers/nutanix/notificationpolicy.md) Remember that in both cases (automatic or manual configuration) you will need to complete the steps above to ensure that the user account for accessing REST API is created and the listening port on diff --git a/docs/auditor/10.8/configuration/fileservers/nutanix/partnerserver.md b/docs/auditor/10.8/configuration/fileservers/nutanix/partnerserver.md index 013eb472e5..5b6aa1a7f3 100644 --- a/docs/auditor/10.8/configuration/fileservers/nutanix/partnerserver.md +++ b/docs/auditor/10.8/configuration/fileservers/nutanix/partnerserver.md @@ -26,13 +26,13 @@ If you select to launch the RestAPI Explorer from the Prism menu, the **RestAPI server will be opened. 2. In the **username** and **password** fields, enter the credentials of the - [Create User Account to Access Nutanix REST API](/docs/auditor/10.7/configuration/fileservers/nutanix/useraccount.md) you have created. + [Create User Account to Access Nutanix REST API](/docs/auditor/10.8/configuration/fileservers/nutanix/useraccount.md) you have created. 3. Click **Explore**. 4. Locate the POST request for **partner_servers** endpoint: `POST /partner_servers` -![api_thumb_0_0](/images/auditor/10.7/configuration/fileservers/nutanix/api_thumb_0_0.webp) +![api_thumb_0_0](/images/auditor/10.8/configuration/fileservers/nutanix/api_thumb_0_0.webp) 5. In the request body, enter the following JSON-formatted structure: @@ -97,7 +97,7 @@ This address must be visible from the Nutanix File Server network. The request body must be empty - for that, enter empty brackets as the **value** for _get_entities_request_ parameter: `{ }` -![api_partner_server_resquest_thumb_0_0](/images/auditor/10.7/configuration/fileservers/nutanix/api_partner_server_resquest_thumb_0_0.webp) +![api_partner_server_resquest_thumb_0_0](/images/auditor/10.8/configuration/fileservers/nutanix/api_partner_server_resquest_thumb_0_0.webp) 9. The response body should contain the list of servers, including new partner server name and other settings. diff --git a/docs/auditor/10.8/configuration/fileservers/nutanix/permissions.md b/docs/auditor/10.8/configuration/fileservers/nutanix/permissions.md index beddd32f0e..00b5ab7ca3 100644 --- a/docs/auditor/10.8/configuration/fileservers/nutanix/permissions.md +++ b/docs/auditor/10.8/configuration/fileservers/nutanix/permissions.md @@ -15,10 +15,10 @@ First, you need an account that Netwrix Auditor will use to access Nutanix File requires at least _Read_ permission for the target SMB shares on the Nutanix File Server. This is the account you will provide in the monitoring plan wizard at the -[Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) step; it can be modified in +[Create a New Monitoring Plan](/docs/auditor/10.8/admin/monitoringplans/create.md) step; it can be modified in the **General** tab of the monitored item settings. -![nutanix_item_mp_thumb_0_0](/images/auditor/10.7/configuration/fileservers/nutanix/nutanix_item_mp_thumb_0_0.webp) +![nutanix_item_mp_thumb_0_0](/images/auditor/10.8/configuration/fileservers/nutanix/nutanix_item_mp_thumb_0_0.webp) This account must have a role with sufficient privileges on that server: **File Server Admin** (recommended) or **Backup Admin** role. @@ -30,7 +30,7 @@ You will also need an account that will be used to connect to Nutanix File Serve This account should be provided in the **Nutanix File Server REST API** tab of the monitored item (_Nutanix SMB shares_) settings. -![nutanix_item_restapi_thumb_0_0](/images/auditor/10.7/configuration/fileservers/nutanix/nutanix_item_restapi_thumb_0_0.webp) +![nutanix_item_restapi_thumb_0_0](/images/auditor/10.8/configuration/fileservers/nutanix/nutanix_item_restapi_thumb_0_0.webp) This account must be assigned the **REST API access users** role for Nutanix File Server you want to audit. @@ -64,11 +64,11 @@ format and select the **File Server Admin** or **Backup Admin** role to assign **Step 8 –** Enter the local user account and password, then click **Save** next to these cells to save the settings. -![nutanix_user_thumb_0_0](/images/auditor/10.7/configuration/fileservers/nutanix/nutanix_user_thumb_0_0.webp) +![nutanix_user_thumb_0_0](/images/auditor/10.8/configuration/fileservers/nutanix/nutanix_user_thumb_0_0.webp) **Step 9 –** When finished, click **Close**. See the following topics for additional information. -- [Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) -- [Create User Account to Access Nutanix REST API](/docs/auditor/10.7/configuration/fileservers/nutanix/useraccount.md). +- [Add Items for Monitoring](/docs/auditor/10.8/admin/monitoringplans/datasources.md#add-items-for-monitoring) +- [Create User Account to Access Nutanix REST API](/docs/auditor/10.8/configuration/fileservers/nutanix/useraccount.md). diff --git a/docs/auditor/10.8/configuration/fileservers/nutanix/ports.md b/docs/auditor/10.8/configuration/fileservers/nutanix/ports.md index 873ea978c4..0739a37a7c 100644 --- a/docs/auditor/10.8/configuration/fileservers/nutanix/ports.md +++ b/docs/auditor/10.8/configuration/fileservers/nutanix/ports.md @@ -50,5 +50,5 @@ Tip for reading the table: For example, on the computer where Netwrix Auditor Se **NOTE:** You need to open the 9898 TCP port for inbound connections manually. Later, you can specify any custom TCP port when editing your Nutanix Files monitoring plan. See the -[File Servers](/docs/auditor/10.7/admin/monitoringplans/fileservers/overview.md) (Nutanix section) for more +[File Servers](/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md) (Nutanix section) for more information. diff --git a/docs/auditor/10.8/configuration/fileservers/nutanix/useraccount.md b/docs/auditor/10.8/configuration/fileservers/nutanix/useraccount.md index 823248bf46..1cdcc8c227 100644 --- a/docs/auditor/10.8/configuration/fileservers/nutanix/useraccount.md +++ b/docs/auditor/10.8/configuration/fileservers/nutanix/useraccount.md @@ -44,7 +44,7 @@ To create a new user account with Nutanix Prism: 4. In the **Manage roles** dialog locate the **REST API access user** section and click **+New user**. - ![nutanix_user_thumb_0_0](/images/auditor/10.7/configuration/fileservers/nutanix/nutanix_user_thumb_0_0.webp) + ![nutanix_user_thumb_0_0](/images/auditor/10.8/configuration/fileservers/nutanix/nutanix_user_thumb_0_0.webp) 5. Enter local user account name and password, then click **Save** next to them to save the settings. diff --git a/docs/auditor/10.8/configuration/fileservers/overview.md b/docs/auditor/10.8/configuration/fileservers/overview.md index bf10d71874..56662e131d 100644 --- a/docs/auditor/10.8/configuration/fileservers/overview.md +++ b/docs/auditor/10.8/configuration/fileservers/overview.md @@ -20,13 +20,13 @@ knowledge base article for additional information. The following topics list the operations with files and folders that can be monitored and reported by Auditor on these supported storage systems.: -- [Dell Data Storage](/docs/auditor/10.7/configuration/fileservers/delldatastorage/overview.md) -- [Dell Isilon/PowerScale](/docs/auditor/10.7/configuration/fileservers/dellisilon/overview.md) -- [NetApp Data ONTAP](/docs/auditor/10.7/configuration/fileservers/netappcmode/overview.md) -- [Nutanix](/docs/auditor/10.7/configuration/fileservers/nutanix/overview.md) -- [Qumulo](/docs/auditor/10.7/configuration/fileservers/qumulo/overview.md) -- [Synology](/docs/auditor/10.7/configuration/fileservers/synology/overview.md) -- [Windows File Servers](/docs/auditor/10.7/configuration/fileservers/windows/overview.md) +- [Dell Data Storage](/docs/auditor/10.8/configuration/fileservers/delldatastorage/overview.md) +- [Dell Isilon/PowerScale](/docs/auditor/10.8/configuration/fileservers/dellisilon/overview.md) +- [NetApp Data ONTAP](/docs/auditor/10.8/configuration/fileservers/netappcmode/overview.md) +- [Nutanix](/docs/auditor/10.8/configuration/fileservers/nutanix/overview.md) +- [Qumulo](/docs/auditor/10.8/configuration/fileservers/qumulo/overview.md) +- [Synology](/docs/auditor/10.8/configuration/fileservers/synology/overview.md) +- [Windows File Servers](/docs/auditor/10.8/configuration/fileservers/windows/overview.md) ## State-in-Time Data @@ -39,7 +39,7 @@ corresponding option in the data source settings within the monitoring plan. Starting with the version 10, the product is able to report about sensitive data in your IT infrastructure. Pay attention to the "_Data categories_" column in search and reports (for the "_File_" object types only). See the -[Sensitive Data Discovery ](/docs/auditor/10.7/admin/settings/sensitivedatadiscovery.md) topic for additional +[Sensitive Data Discovery ](/docs/auditor/10.8/admin/settings/sensitivedatadiscovery.md) topic for additional information on how to enable monitoring of sensitive data in Auditor. ## Monitored Object Attributes diff --git a/docs/auditor/10.8/configuration/fileservers/qumulo/configure.md b/docs/auditor/10.8/configuration/fileservers/qumulo/configure.md index fdb7b6d294..fd3d1f94c4 100644 --- a/docs/auditor/10.8/configuration/fileservers/qumulo/configure.md +++ b/docs/auditor/10.8/configuration/fileservers/qumulo/configure.md @@ -20,7 +20,7 @@ To configure Core Audit for Qumulo file servers be a third-party Syslog forward service or the machine where Netwrix Auditor is installed. - Port Number – use the default value (_514_). - ![qumulo_web_ui](/images/auditor/10.7/configuration/fileservers/qumulo/qumulo_web_ui.webp) + ![qumulo_web_ui](/images/auditor/10.8/configuration/fileservers/qumulo/qumulo_web_ui.webp) When you see the green line “_Connected_”, the environment is ready. diff --git a/docs/auditor/10.8/configuration/fileservers/qumulo/overview.md b/docs/auditor/10.8/configuration/fileservers/qumulo/overview.md index f1dd3365bd..aaf42a838f 100644 --- a/docs/auditor/10.8/configuration/fileservers/qumulo/overview.md +++ b/docs/auditor/10.8/configuration/fileservers/qumulo/overview.md @@ -27,7 +27,7 @@ You can configure your IT Infrastructure for monitoring in one of the following configure them manually: - The Remote Syslog Address and port number must be configured as described in the - [Configure Core Audit for Qumulo File Servers](/docs/auditor/10.7/configuration/fileservers/qumulo/configure.md) topic. + [Configure Core Audit for Qumulo File Servers](/docs/auditor/10.8/configuration/fileservers/qumulo/configure.md) topic. Review a full list of object types Netwrix Auditor can collect on Qumulo network devices. diff --git a/docs/auditor/10.8/configuration/fileservers/qumulo/permissions.md b/docs/auditor/10.8/configuration/fileservers/qumulo/permissions.md index 2341009acc..c29e1c532c 100644 --- a/docs/auditor/10.8/configuration/fileservers/qumulo/permissions.md +++ b/docs/auditor/10.8/configuration/fileservers/qumulo/permissions.md @@ -13,7 +13,7 @@ Then you will provide this account in the monitoring plan wizard (or monitored i Starting with version 9.96, you can use group Managed Service Accounts (gMSA) as data collecting accounts. -See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic and the +See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.8/requirements/gmsa.md) topic and the [Group Managed Service Accounts Overview](https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview) Microsoft article for additional information. diff --git a/docs/auditor/10.8/configuration/fileservers/synology/overview.md b/docs/auditor/10.8/configuration/fileservers/synology/overview.md index a154aa9a22..f14d1b1d8e 100644 --- a/docs/auditor/10.8/configuration/fileservers/synology/overview.md +++ b/docs/auditor/10.8/configuration/fileservers/synology/overview.md @@ -27,7 +27,7 @@ You can configure your IT Infrastructure for monitoring in one of the following configure them manually: - The log sending must be configured as described in the - [Configure Synology File Servers for Audit](/docs/auditor/10.7/configuration/fileservers/synology/configure.md) topic. + [Configure Synology File Servers for Audit](/docs/auditor/10.8/configuration/fileservers/synology/configure.md) topic. Review a full list of object types Netwrix Auditor can collect on Synology NAS network devices. diff --git a/docs/auditor/10.8/configuration/fileservers/synology/permissions.md b/docs/auditor/10.8/configuration/fileservers/synology/permissions.md index 9af623b62f..5291ee9569 100644 --- a/docs/auditor/10.8/configuration/fileservers/synology/permissions.md +++ b/docs/auditor/10.8/configuration/fileservers/synology/permissions.md @@ -13,7 +13,7 @@ Then you will provide this account in the monitoring plan wizard (or monitored i Starting with version 9.96, you can use group Managed Service Accounts (gMSA) as data collecting accounts. -See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic and the +See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.8/requirements/gmsa.md) topic and the [Group Managed Service Accounts Overview](https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview) Microsoft article for additional information. diff --git a/docs/auditor/10.8/configuration/fileservers/windows/advancedpolicy.md b/docs/auditor/10.8/configuration/fileservers/windows/advancedpolicy.md index dd3d6b750a..de5805f3c1 100644 --- a/docs/auditor/10.8/configuration/fileservers/windows/advancedpolicy.md +++ b/docs/auditor/10.8/configuration/fileservers/windows/advancedpolicy.md @@ -8,7 +8,7 @@ sidebar_position: 40 Configure advanced audit policies to limit the range of events tracked and recorded by the product, thus preventing your AuditArchive and the Security event log from overfilling. Perform procedures -below instead of the [Configure Local Audit Policies](/docs/auditor/10.7/configuration/fileservers/windows/localpolicy.md). +below instead of the [Configure Local Audit Policies](/docs/auditor/10.8/configuration/fileservers/windows/localpolicy.md). ## Configure Security Options diff --git a/docs/auditor/10.8/configuration/fileservers/windows/eventlog.md b/docs/auditor/10.8/configuration/fileservers/windows/eventlog.md index ee1f453d21..0457fedef7 100644 --- a/docs/auditor/10.8/configuration/fileservers/windows/eventlog.md +++ b/docs/auditor/10.8/configuration/fileservers/windows/eventlog.md @@ -19,7 +19,7 @@ Follow the steps to configure Event Log Size and Retention Settings. **Step 2 –** Navigate to Event Viewer tree > Windows Logs, right-click **Security** and select **Properties**. -![Log Properties dialog box](/images/auditor/10.7/configuration/fileservers/windows/manualconfig_ws_eventviewerpr2016_thumb_0_0.webp) +![Log Properties dialog box](/images/auditor/10.8/configuration/fileservers/windows/manualconfig_ws_eventviewerpr2016_thumb_0_0.webp) **Step 3 –** Make sure Enable logging is selected. diff --git a/docs/auditor/10.8/configuration/fileservers/windows/localpolicy.md b/docs/auditor/10.8/configuration/fileservers/windows/localpolicy.md index d1b4bb662a..61a891cd1f 100644 --- a/docs/auditor/10.8/configuration/fileservers/windows/localpolicy.md +++ b/docs/auditor/10.8/configuration/fileservers/windows/localpolicy.md @@ -7,7 +7,7 @@ sidebar_position: 30 # Configure Local Audit Policies You can choose to configure local audit policies or advanced audit policies.See the -[Configure Advanced Audit Policies](/docs/auditor/10.7/configuration/fileservers/windows/advancedpolicy.md) topic for more information. +[Configure Advanced Audit Policies](/docs/auditor/10.8/configuration/fileservers/windows/advancedpolicy.md) topic for more information. Follow the steps to configure local audit policies. diff --git a/docs/auditor/10.8/configuration/fileservers/windows/objectlevel.md b/docs/auditor/10.8/configuration/fileservers/windows/objectlevel.md index b637281279..d45067eff0 100644 --- a/docs/auditor/10.8/configuration/fileservers/windows/objectlevel.md +++ b/docs/auditor/10.8/configuration/fileservers/windows/objectlevel.md @@ -19,7 +19,7 @@ options that you want to track: Actions reported by Netwrix Auditor vary depending on the file server type and the audited object (file, folder, or share). The changes include creation, modification, deletion, moving, renaming, and copying. To track the copy action, enable successful read access and change auditing. See the -[File Servers](/docs/auditor/10.7/configuration/fileservers/overview.md) topic for additional information. +[File Servers](/docs/auditor/10.8/configuration/fileservers/overview.md) topic for additional information. Perform one of the following procedures depending on the OS version you are using: @@ -60,13 +60,13 @@ Review the following for additional information: | Auditing Entry | | | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --- | | Successful reads | | -| The Auditing Entry below shows Advanced Permissions for auditing successful reads only: ![manualconfig_fileserver_auditingentry_1_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_1_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"Files only"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing successful reads only: ![manualconfig_fileserver_auditingentry_1_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_1_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"Files only"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | | Successful changes | | -| The Auditing Entry below shows Advanced Permissions for auditing successful changes only: ![manualconfig_fileserver_auditingentry_2_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_2_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing successful changes only: ![manualconfig_fileserver_auditingentry_2_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_2_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | | Failed read attempts | | -| The Auditing Entry below shows Advanced Permissions for auditing failed read attempts: ![manualconfig_fileserver_auditingentry_3_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_3_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing failed read attempts: ![manualconfig_fileserver_auditingentry_3_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_3_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | | Failed change attempts | | -| The Auditing Entry below shows Advanced Permissions for auditing failed change attempts: ![manualconfig_fileserver_auditingentry_4_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_4_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing failed change attempts: ![manualconfig_fileserver_auditingentry_4_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_4_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | ## Configure Object-level access auditing on pre-Windows Server 2012 versions diff --git a/docs/auditor/10.8/configuration/fileservers/windows/overview.md b/docs/auditor/10.8/configuration/fileservers/windows/overview.md index 0cb31e5957..214ff9300e 100644 --- a/docs/auditor/10.8/configuration/fileservers/windows/overview.md +++ b/docs/auditor/10.8/configuration/fileservers/windows/overview.md @@ -124,7 +124,7 @@ requirements. **Step 2 –** Decide on audit data to collect. - Review the list of objects and attributes that can be monitored by Auditor: See the - [File Servers](/docs/auditor/10.7/configuration/fileservers/overview.md)topic for additional information. + [File Servers](/docs/auditor/10.8/configuration/fileservers/overview.md)topic for additional information. - Plan for the file servers and shares you want to audit: - - If you have multiple file shares frequently accessed by a significant number of users, it is reasonable to audit object changes only. Tracking all events may result in too much data @@ -156,14 +156,14 @@ requirements. event occurred but data collection time. - Auditor may report on several unexpected changes with _who_ (initiator's account) reported as _system_ due to the native Windows File Servers audit peculiarities. If you do not want to see - these changes, exclude them from the audit. See the [File Servers](/docs/auditor/10.7/configuration/fileservers/overview.md) topic for + these changes, exclude them from the audit. See the [File Servers](/docs/auditor/10.8/configuration/fileservers/overview.md) topic for additional information. For example - mass file removals, when target Windows server generates too many events at a time and the product is unable to parse their sequences correctly. - Due to Windows limitations, the _copy/rename/move_ actions on remote file shares may be reported as two sequential actions: copying – as adding a new file and reading the initial file; renaming/moving – as removing the initial file and adding a new file with the same name. - To report on _copy_ actions on remote file shares, make sure that audit of successful read - operations is enabled. See the [Configure Object-Level Access Auditing](/docs/auditor/10.7/configuration/fileservers/windows/objectlevel.md) topic for + operations is enabled. See the [Configure Object-Level Access Auditing](/docs/auditor/10.8/configuration/fileservers/windows/objectlevel.md) topic for additional information. **Step 4 –** Apply required audit settings. @@ -188,29 +188,29 @@ You can apply required audit settings to your Windows file servers in one of the In this case, the audit settings will be applied automatically, then they will be periodically checked and adjusted if necessary. See the - [Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional + [Create a New Monitoring Plan](/docs/auditor/10.8/admin/monitoringplans/create.md) topic for additional information. - **Manually.** To configure your Windows File Servers for monitoring manually, perform the following procedures: - - [Configure Object-Level Access Auditing](/docs/auditor/10.7/configuration/fileservers/windows/objectlevel.md) - - [Configure Local Audit Policies](/docs/auditor/10.7/configuration/fileservers/windows/localpolicy.md) or - [Configure Advanced Audit Policies](/docs/auditor/10.7/configuration/fileservers/windows/advancedpolicy.md) - - [Configure Event Log Size and Retention Settings](/docs/auditor/10.7/configuration/fileservers/windows/eventlog.md) - - [Enable Remote Registry Service](/docs/auditor/10.7/configuration/fileservers/windows/remoteregistryservice.md) - - [Windows File Server Ports](/docs/auditor/10.7/configuration/fileservers/windows/ports.md) + - [Configure Object-Level Access Auditing](/docs/auditor/10.8/configuration/fileservers/windows/objectlevel.md) + - [Configure Local Audit Policies](/docs/auditor/10.8/configuration/fileservers/windows/localpolicy.md) or + [Configure Advanced Audit Policies](/docs/auditor/10.8/configuration/fileservers/windows/advancedpolicy.md) + - [Configure Event Log Size and Retention Settings](/docs/auditor/10.8/configuration/fileservers/windows/eventlog.md) + - [Enable Remote Registry Service](/docs/auditor/10.8/configuration/fileservers/windows/remoteregistryservice.md) + - [Windows File Server Ports](/docs/auditor/10.8/configuration/fileservers/windows/ports.md) With automatically applied settings, initial SACL configuration for DFS replication links may take longer than with manual configuration — however, automatic configuration will help to minimize the impact on the DFS backlog and replication process in general. **Step 5 –** Configure Data Collecting Account. See the -[Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional +[Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. **Step 6 –** Configure required protocols and ports. Set up protocols and ports. See the -[Dell Data Storage Ports](/docs/auditor/10.7/configuration/fileservers/delldatastorage/ports.md) topic for additional information. +[Dell Data Storage Ports](/docs/auditor/10.8/configuration/fileservers/delldatastorage/ports.md) topic for additional information. ## DFS-Related Constraints diff --git a/docs/auditor/10.8/configuration/fileservers/windows/permissions.md b/docs/auditor/10.8/configuration/fileservers/windows/permissions.md index 84933026de..8140cff5c6 100644 --- a/docs/auditor/10.8/configuration/fileservers/windows/permissions.md +++ b/docs/auditor/10.8/configuration/fileservers/windows/permissions.md @@ -15,7 +15,7 @@ Data Collection Accounts should meet the following policies and permissions: - Data collecting account on the target server must be a member of the local Administrators group. - The **Manage auditing and security log** and Backup files and directories policies must be defined for this account. See the - [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) and topics for + [Permissions for Active Directory Auditing](/docs/auditor/10.8/configuration/activedirectory/permissions.md) and topics for additional more information. - The **Read** share permission on the audited shared folders. - The Read NTFS permission on all objects in the audited folders. @@ -29,7 +29,7 @@ Administrators group. For more information on gMSA, see the following: -- [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) +- [Use Group Managed Service Account (gMSA)](/docs/auditor/10.8/requirements/gmsa.md) - Microsoft article: [Group Managed Service Accounts Overview](https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview) diff --git a/docs/auditor/10.8/configuration/grouppolicy/overview.md b/docs/auditor/10.8/configuration/grouppolicy/overview.md index e34c0f7836..5b0bd43f65 100644 --- a/docs/auditor/10.8/configuration/grouppolicy/overview.md +++ b/docs/auditor/10.8/configuration/grouppolicy/overview.md @@ -27,18 +27,18 @@ You can configure your IT Infrastructure for monitoring in one of the following configure them manually: - Configure the domain for auditing. See the - [Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md) topic for + [Audit Configuration Assistant](/docs/auditor/10.8/tools/auditconfigurationassistant.md) topic for information on configuring the domain. - On the Auditor console computer: - If you have enabled automatic log backup for the Security log of your domain controller, you can instruct Auditor to clear the old backups automatically. For that, use the **CleanAutoBackupLogs** registry key, as described in the - [Active Directory Registry Key Configuration](/docs/auditor/10.7/configuration/activedirectory/registrykey.md) topic. + [Active Directory Registry Key Configuration](/docs/auditor/10.8/configuration/activedirectory/registrykey.md) topic. **_RECOMMENDED:_** Adjust retention period for the backup files accordingly (default is **50** hours). See the - [Adjust Security Event Log Size and Retention](/docs/auditor/10.7/configuration/activedirectory/securitylog.md) topic. + [Adjust Security Event Log Size and Retention](/docs/auditor/10.8/configuration/activedirectory/securitylog.md) topic. - To provide for event data collection, the Secondary Logon service must be up and running . Open **Administrative Tools** > **Services**, right-click the **Secondary Logon** service diff --git a/docs/auditor/10.8/configuration/grouppolicy/permissions.md b/docs/auditor/10.8/configuration/grouppolicy/permissions.md index 8c6c7d5189..6da2b37686 100644 --- a/docs/auditor/10.8/configuration/grouppolicy/permissions.md +++ b/docs/auditor/10.8/configuration/grouppolicy/permissions.md @@ -12,7 +12,7 @@ you will provide this account in the monitoring plan wizard (or in the monitored You can use group Managed Service Accounts (gMSA) as data collecting accounts. -See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic and the +See the [Use Group Managed Service Account (gMSA)](/docs/auditor/10.8/requirements/gmsa.md) topic and the following Microsoft article: [Group Managed Service Accounts Overview](https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview) for additional information about gMSA. @@ -20,7 +20,7 @@ for additional information about gMSA. ## Account Requirements **NOTE:** These group Managed Service Accounts should also meet the related requirements. See the -[Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) topic and the following +[Use Group Managed Service Account (gMSA)](/docs/auditor/10.8/requirements/gmsa.md) topic and the following Microsoft article: [Group Managed Service Accounts Overview](https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview) for additional information about gMSA. @@ -40,11 +40,11 @@ The account used for data collection must meet the following requirements: **Domain Admins** group: - **Manage auditing and security log** policy must be defined for this account. - See the [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) topic + See the [Permissions for Active Directory Auditing](/docs/auditor/10.8/configuration/activedirectory/permissions.md) topic for additional information. - If you plan to process Active Directory **Deleted Objects** container, **Read** permission on this container is required. See the - [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) topic for + [Permissions for Active Directory Auditing](/docs/auditor/10.8/configuration/activedirectory/permissions.md) topic for additional information. ## Additional Configuration for Domain Controller's Event Logs Auto-backup @@ -66,7 +66,7 @@ Domain Admins group. This permission should be assigned on each domain controller in the audited domain, so if your domain contains multiple domain controllers, it is recommended to assign permissions through Group Policy, or automatically using -[Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md). +[Audit Configuration Assistant](/docs/auditor/10.8/tools/auditconfigurationassistant.md). To assign permissions manually, use the Registry Editor snap-in or the Group Policy Management console. @@ -138,7 +138,7 @@ domain controllers. Starting with version 10.7, you can use Netwrix Privilege Secure to manage the account for collecting data, after configuring the integration. See the -[Netwrix Privilege Secure](/docs/auditor/10.7/admin/settings/privilegesecure.md) topic for additional information +[Netwrix Privilege Secure](/docs/auditor/10.8/admin/settings/privilegesecure.md) topic for additional information about integration and supported data sources. In this case, the credentials will not be stored by Netwrix Auditor. Instead, they will be managed by Netwrix Privilege Secure and provided on demand, ensuring password rotation or using temporary accounts for data collection. @@ -150,7 +150,7 @@ Follow the steps to use Netwrix Privilege Secure as an account for data collect **Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data collection. -![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) +![npsdatacollectingaccount](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccount.webp) **Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. Credential-based is the default option. Refer to the @@ -163,7 +163,7 @@ and to which Netwrix Auditor has the access through a Credential-based access po **NOTE:** Netwrix recommends using different credentials for different monitoring plans and data sources. -![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) +![npsdatacollectingaccountresourced](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) The second option is Resource-based. To use this option, you need to provide the Activity and Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure diff --git a/docs/auditor/10.8/configuration/logonactivity/basicpolicy.md b/docs/auditor/10.8/configuration/logonactivity/basicpolicy.md index b5f0ffc556..cb1ee44218 100644 --- a/docs/auditor/10.8/configuration/logonactivity/basicpolicy.md +++ b/docs/auditor/10.8/configuration/logonactivity/basicpolicy.md @@ -8,7 +8,7 @@ sidebar_position: 20 Basic local audit policies allow tracking changes to user accounts and groups and identifying originating workstations. You can configure advanced audit policies for the same purpose too. See -the [Configure Advanced Audit Policies](/docs/auditor/10.7/configuration/logonactivity/advancedpolicy.md) topic for additional information. +the [Configure Advanced Audit Policies](/docs/auditor/10.8/configuration/logonactivity/advancedpolicy.md) topic for additional information. 1. Open the **Group Policy Management** console on any domain controller in the target domain: navigate to Start > Windows Administrative Tools (Windows Server 2016 and higher) or diff --git a/docs/auditor/10.8/configuration/logonactivity/overview.md b/docs/auditor/10.8/configuration/logonactivity/overview.md index 3b09b1be4d..c9779bd55e 100644 --- a/docs/auditor/10.8/configuration/logonactivity/overview.md +++ b/docs/auditor/10.8/configuration/logonactivity/overview.md @@ -26,7 +26,7 @@ You can configure your IT Infrastructure for monitoring in one of the following - For both new and existing monitoring plans, you can click **Launch Audit Configuration Assistant** (in the wizard step or in the plan settings, respectively) to launch a special tool that can detect current infrastructure settings and adjust them as needed for monitoring. - See the [Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md) topic for + See the [Audit Configuration Assistant](/docs/auditor/10.8/tools/auditconfigurationassistant.md) topic for additional information. - Manually – Native audit settings must be adjusted manually to ensure collecting comprehensive and @@ -52,10 +52,10 @@ You can configure your IT Infrastructure for monitoring in one of the following See the following topics for additional information: -- [Configure Basic Domain Audit Policies](/docs/auditor/10.7/configuration/logonactivity/basicpolicy.md) -- [Configure Advanced Audit Policies](/docs/auditor/10.7/configuration/logonactivity/advancedpolicy.md) -- [Configure Security Event Log Size and Retention Settings](/docs/auditor/10.7/configuration/logonactivity/securityeventlog.md) -- [ Logon Activity Ports](/docs/auditor/10.7/configuration/logonactivity/ports.md) +- [Configure Basic Domain Audit Policies](/docs/auditor/10.8/configuration/logonactivity/basicpolicy.md) +- [Configure Advanced Audit Policies](/docs/auditor/10.8/configuration/logonactivity/advancedpolicy.md) +- [Configure Security Event Log Size and Retention Settings](/docs/auditor/10.8/configuration/logonactivity/securityeventlog.md) +- [ Logon Activity Ports](/docs/auditor/10.8/configuration/logonactivity/ports.md) ## Logon Activity Actions diff --git a/docs/auditor/10.8/configuration/logonactivity/permissions.md b/docs/auditor/10.8/configuration/logonactivity/permissions.md index 9ff292b1ed..a5348dd712 100644 --- a/docs/auditor/10.8/configuration/logonactivity/permissions.md +++ b/docs/auditor/10.8/configuration/logonactivity/permissions.md @@ -43,13 +43,13 @@ Follow the steps to configure non-administrative account to collect logon activi **Step 1 –** Create a domain user with the following privileges: - Back up files and directories. See the -  [Configure the Back up Files and Directories Policy](/docs/auditor/10.7/configuration/fileservers/windows/configuration.md) +  [Configure the Back up Files and Directories Policy](/docs/auditor/10.8/configuration/fileservers/windows/configuration.md) topic for additional information. - Log on as a batch job. See the - [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) topic for + [Permissions for Active Directory Auditing](/docs/auditor/10.8/configuration/activedirectory/permissions.md) topic for additional information. - Manage auditing and security log. See the - [Configure the Manage Auditing and Security Log Policy](/docs/auditor/10.7/configuration/activedirectory/permissions.md#configure-the-manage-auditing-and-security-log-policy) + [Configure the Manage Auditing and Security Log Policy](/docs/auditor/10.8/configuration/activedirectory/permissions.md#configure-the-manage-auditing-and-security-log-policy) topic for additional information. **Step 2 –** Grant the _Read_ permission on the following registry keys to this user: @@ -59,5 +59,5 @@ Follow the steps to configure non-administrative account to collect logon activi - `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security` See the -[Assign Permission To Read the Registry Key](/docs/auditor/10.7/configuration/windowsserver/permissions.md#assign-permission-to-read-the-registry-key) +[Assign Permission To Read the Registry Key](/docs/auditor/10.8/configuration/windowsserver/permissions.md#assign-permission-to-read-the-registry-key) topic for additional information on how to do it using Registry Editor. diff --git a/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/modernauth.md b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/modernauth.md index 2e87c8230d..acb667896f 100644 --- a/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/modernauth.md +++ b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/modernauth.md @@ -175,5 +175,5 @@ See the following Microsoft article for additional information on how to obtain [Locate important IDs for a user](https://learn.microsoft.com/en-us/partner-center/find-ids-and-domain-names). Then, create a corresponding monitoring plan in Netwrix Auditor and add an item (Office 365 tenant) -to it. See the [Microsoft Entra ID](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md) +to it. See the [Microsoft Entra ID](/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/configuration/microsoft365/exchangeonline/permissions.md b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/permissions.md index db3d32bc90..aeca0f94e5 100644 --- a/docs/auditor/10.8/configuration/microsoft365/exchangeonline/permissions.md +++ b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/permissions.md @@ -22,7 +22,7 @@ app and provide its settings to Auditor when configuring a monitored item. Follow the steps to use a data collecting account with modern authentication. **Step 1 –** Create a Microsoft Entra ID app that will be used for modern authentication. See the -[Create and Register a New App in Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/modernauth/modernauth.md#create-and-register-a-new-app-in-microsoft-entra-id) +[Create and Register a New App in Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/modernauth.md#create-and-register-a-new-app-in-microsoft-entra-id) topic for additional information. **NOTE:** After you start a new monitoring plan and select a data source in the first step, you will @@ -32,17 +32,17 @@ Instead, you will need to configure a modern authentication app and give the nec there. **Step 2 –** Grant required permissions to that application. See the -[Grant Required Permissions](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/modernauth/modernauth.md#grant-required-permissions) topic for additional +[Grant Required Permissions](/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/modernauth.md#grant-required-permissions) topic for additional information. **Step 3 –** Grant required roles to that application. See the -[Grant Required Roles](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/modernauth/modernauth.md#grant-required-roles) topic for additional information. +[Grant Required Roles](/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/modernauth.md#grant-required-roles) topic for additional information. **Step 4 –** Configure client secret for that application. See the -[Configure Client Secret](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/modernauth/modernauth.md#configure-client-secret) topic for additional information. +[Configure Client Secret](/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/modernauth.md#configure-client-secret) topic for additional information. **Step 5 –** Obtain tenant ID – you will need it when configuring a monitored item (Office 365 -tenant) settings. See the [Obtain the Tenant Name](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/modernauth/modernauth.md#obtain-the-tenant-name) topic for +tenant) settings. See the [Obtain the Tenant Name](/docs/auditor/10.8/configuration/microsoft365/exchangeonline/modernauth/modernauth.md#obtain-the-tenant-name) topic for additional information. ## Non-owner Mailbox Access Audit Configuration @@ -104,7 +104,7 @@ where: **Step 11 –** Go to **Manage > Certificates & secrets**, click **Upload certificate** and upload the*.crt* file you have just created. -![certificates_secrets_thumb_0_0](/images/auditor/10.7/configuration/microsoft365/exchangeonline/certificates_secrets_thumb_0_0.webp) +![certificates_secrets_thumb_0_0](/images/auditor/10.8/configuration/microsoft365/exchangeonline/certificates_secrets_thumb_0_0.webp) **Step 12 –** To create Exchange Online connection session, you can provide certificate file path or thumbprint. If you want to use a file path, run the following command: @@ -116,7 +116,7 @@ Connect-ExchangeOnline -CertificateFilePath "full_path_to_certificate" Application (client ID) can be found in the **Overview** page. -![tenant_id_thumb_0_0](/images/auditor/10.7/configuration/microsoft365/exchangeonline/tenant_id_thumb_0_0.webp) +![tenant_id_thumb_0_0](/images/auditor/10.8/configuration/microsoft365/exchangeonline/tenant_id_thumb_0_0.webp) For example: diff --git a/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/overview.md b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/overview.md index 01f831b614..c9b988489d 100644 --- a/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/overview.md +++ b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/overview.md @@ -32,9 +32,9 @@ You can configure your IT Infrastructure for monitoring in one of the following - While no special settings are required. Remember to do the following: - Prepare a Data Collecting Account as described in - [Permissions for Microsoft Entra ID Auditing](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/permissions.md) topic + [Permissions for Microsoft Entra ID Auditing](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/permissions.md) topic - Configure required protocols and ports, as described in the - [Microsoft Entra ID Ports](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/ports.md) topic + [Microsoft Entra ID Ports](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/ports.md) topic ## Monitored Object Types and Attributes diff --git a/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/basicauth.md b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/basicauth.md index aaa3cebbdf..b77abd164e 100644 --- a/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/basicauth.md +++ b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/basicauth.md @@ -25,7 +25,7 @@ Further permission assignment will depend on the data you plan to collect: | To... | Requirement | Comment | | --------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Create Microsoft Entra ID application, run initial data collection, and perform Auditor upgrade from previous version | Any of the following role combinations: - Application Administrator & Privileged Role Administrator OR - Cloud Application Administrator & Privileged Role Administrator OR - _Global Admin_ | Prepare a user account and specify it in the monitored item properties. See the and [Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/overview.md) topics for additional information. | +| Create Microsoft Entra ID application, run initial data collection, and perform Auditor upgrade from previous version | Any of the following role combinations: - Application Administrator & Privileged Role Administrator OR - Cloud Application Administrator & Privileged Role Administrator OR - _Global Admin_ | Prepare a user account and specify it in the monitored item properties. See the and [Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/overview.md) topics for additional information. | | Collect audit data, including _Successful Logons_ and/or _Failed Logons_ | - _Security Reader_ OR - _Security Administrator_ OR - _Application Administrator_ OR - _Cloud Application Administrator_ OR - _Global Administrator_ | To assign the non-privileged role, see | | Collect audit data (without logons) | Any of the following roles: - _Security Reader_ OR - _Application Administrator_ OR - _Cloud Application Administrator_ OR - _Global Admin_ | Assign the role you need, as explained above. | diff --git a/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/permissions.md b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/permissions.md index 75935c0eb1..deaaa23c8d 100644 --- a/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/permissions.md +++ b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/permissions.md @@ -31,23 +31,23 @@ required: administrative role in Microsoft Entra ID —to create an app and perform initial data collection. - Provide this user name and password in the monitored item properties. See the - [Microsoft Entra ID](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md) topic for + [Microsoft Entra ID](/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md) topic for additional information. -See the [Using Basic Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/basicauth.md) topic for additional +See the [Using Basic Authentication with Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/basicauth.md) topic for additional information. - If Modern Authentication is used: - Microsoft Entra ID application should be created manually by user with administrative role and assigned required permissions. See the - [Configuring Microsoft Entra ID App for Auditing Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md#configuring-microsoft-entra-id-app-for-auditing-microsoft-entra-id) + [Configuring Microsoft Entra ID App for Auditing Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md#configuring-microsoft-entra-id-app-for-auditing-microsoft-entra-id) topic for additional information. - You will need to provide the Microsoft Entra ID app settings in the monitored item (Office 365 tenant) properties. See the - [Microsoft Entra ID](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md) topic for + [Microsoft Entra ID](/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md) topic for additional information. -See the [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) topic for additional +See the [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) topic for additional information. Permissions for ongoing data collection will depend on data you plan to collect: diff --git a/docs/auditor/10.8/configuration/microsoft365/overview.md b/docs/auditor/10.8/configuration/microsoft365/overview.md index 0e0f101553..b126de14d5 100644 --- a/docs/auditor/10.8/configuration/microsoft365/overview.md +++ b/docs/auditor/10.8/configuration/microsoft365/overview.md @@ -8,7 +8,7 @@ sidebar_position: 70 Microsoft 365 audit configuration will cover the following components: -- [Exchange Online](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/overview.md) -- [Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/overview.md) -- [MS Teams](/docs/auditor/10.7/configuration/microsoft365/teams/overview.md) -- [SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/overview.md) +- [Exchange Online](/docs/auditor/10.8/configuration/microsoft365/exchangeonline/overview.md) +- [Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/overview.md) +- [MS Teams](/docs/auditor/10.8/configuration/microsoft365/teams/overview.md) +- [SharePoint Online](/docs/auditor/10.8/configuration/microsoft365/sharepointonline/overview.md) diff --git a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/overview.md b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/overview.md index 857d0de0fb..e1e642c37a 100644 --- a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/overview.md +++ b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/overview.md @@ -27,9 +27,9 @@ You can configure your IT Infrastructure for monitoring in the following way: [Turn auditing on or off](https://docs.microsoft.com/en-us/microsoft-365/compliance/turn-audit-log-search-on-or-off?view=o365-worldwide) article for additional information. - Prepare a Data Collecting Account as described in the - [Permissions for SharePoint Online Auditing ](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/permissions/permissions.md) topic. + [Permissions for SharePoint Online Auditing ](/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/permissions.md) topic. - Configure required protocols and ports, as described in the - [SharePoint Online Ports](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/ports.md) topic. + [SharePoint Online Ports](/docs/auditor/10.8/configuration/microsoft365/sharepointonline/ports.md) topic. Review a full list of object types and attributes Netwrix Auditor can collect on SharePoint Online. OneDrive for Business changes are reported as SharePoint Online. @@ -51,5 +51,5 @@ OneDrive for Business changes are reported as SharePoint Online. Starting with the version 10, Netwrix Auditor is able to report about sensitive data in your IT infrastructure. Pay attention to the "_Data categories_" column in search and reports (for the "_Document_" object types only). See the -[Sensitive Data Discovery ](/docs/auditor/10.7/admin/settings/sensitivedatadiscovery.md)topic for additional +[Sensitive Data Discovery ](/docs/auditor/10.8/admin/settings/sensitivedatadiscovery.md)topic for additional information on how to enable monitoring of sensitive data in Netwrix Auditor. diff --git a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/basicauth.md b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/basicauth.md index addafa008f..24c21bc3e7 100644 --- a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/basicauth.md +++ b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/basicauth.md @@ -24,7 +24,7 @@ Further permission assignment will depend on the data you plan to collect: | To... | Requirement | Comment | | --------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Collect activity and state-in-time data | Any of the following role combinations: - Application Administrator & Privileged Role Administrator OR - Cloud Application Administrator & Privileged Role Administrator OR - _Global Admin_ (_Company Administrator_ in Microsoft Entra ID PowerShell terms) | Prepare a **Cloud-only** user account and specify it in the monitored item properties. See the [SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/overview.md) topic for additional information. | +| Collect activity and state-in-time data | Any of the following role combinations: - Application Administrator & Privileged Role Administrator OR - Cloud Application Administrator & Privileged Role Administrator OR - _Global Admin_ (_Company Administrator_ in Microsoft Entra ID PowerShell terms) | Prepare a **Cloud-only** user account and specify it in the monitored item properties. See the [SharePoint Online](/docs/auditor/10.8/configuration/microsoft365/sharepointonline/overview.md) topic for additional information. | | Collect activity data only | 1. For initial connection to SharePoint Online, initial data collection, and Netwrix Auditor upgrade from previous version — any of the role combinations listed above. 2. After the initial data collection, the privileged roles can be revoked from this account. | | ## Assigning a Privileged Role for SharePoint and Office 365 diff --git a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/manifest.md b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/manifest.md index 7c63e057d2..f7a52860ed 100644 --- a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/manifest.md +++ b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/manifest.md @@ -21,7 +21,7 @@ it to your application. Do one of the following: - For the clear installation of Netwrix Auditor, add roles as described in the - [Using Modern Authentication with SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/permissions/modernauth/modernauth.md) topic. + [Using Modern Authentication with SharePoint Online](/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/modernauth.md) topic. - If you upgraded Netwrix Auditor from the version 10.0, replace all existing content under the **requiredResourceAccess** property. diff --git a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/modernauth.md b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/modernauth.md index c3316501c3..cb27c6e2a2 100644 --- a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/modernauth.md +++ b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/modernauth.md @@ -149,5 +149,5 @@ See the following Microsoft article for additional information on how to obtain [Locate important IDs for a user](https://learn.microsoft.com/en-us/partner-center/find-ids-and-domain-names). Then, create a corresponding monitoring plan in Netwrix Auditor and add an item (Office 365 tenant) -to it. See the [Microsoft Entra ID](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md) +to it. See the [Microsoft Entra ID](/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/permissions.md b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/permissions.md index 1df49b0c1b..08e0d931bd 100644 --- a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/permissions.md +++ b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/permissions.md @@ -28,14 +28,14 @@ administrative role will be required: - Microsoft Entra ID application should be created manually by user with administrative role and assigned required permissions. This app will allow you to collect both activity and state-in-time data. See the - [Configuring Microsoft Entra ID App for Auditing SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/permissions/modernauth/modernauth.md#configuring-microsoft-entra-id-app-for-auditing-sharepoint-online) + [Configuring Microsoft Entra ID App for Auditing SharePoint Online](/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/modernauth.md#configuring-microsoft-entra-id-app-for-auditing-sharepoint-online) section for additional information. - You will need to provide the Microsoft Entra ID app settings in the monitored item (Office 365 tenant) properties. See the - [Microsoft Entra ID](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md) topic for + [Microsoft Entra ID](/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md) topic for additional information. -See the [Using Modern Authentication with SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/permissions/modernauth/modernauth.md) topic for additional +See the [Using Modern Authentication with SharePoint Online](/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/modernauth/modernauth.md) topic for additional information. - If Basic Authentication is used: @@ -46,7 +46,7 @@ information. administrative role in Microsoft Entra ID — to create an app and perform initial data collection. - Provide this user name and password in the monitored item properties. See the - [Microsoft Entra ID](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md) topic for + [Microsoft Entra ID](/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md) topic for additional information. - Permissions for ongoing data collection will depend on data you plan to collect: @@ -55,5 +55,5 @@ information. - To collect activity data only, the privileged role can be revoked from the specified account after the initial data collection. -See the [Using Basic Authentication with SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/permissions/basicauth.md) topic for additional +See the [Using Basic Authentication with SharePoint Online](/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/basicauth.md) topic for additional information. diff --git a/docs/auditor/10.8/configuration/microsoft365/teams/overview.md b/docs/auditor/10.8/configuration/microsoft365/teams/overview.md index 5ec82d3239..b49e9b41d3 100644 --- a/docs/auditor/10.8/configuration/microsoft365/teams/overview.md +++ b/docs/auditor/10.8/configuration/microsoft365/teams/overview.md @@ -30,8 +30,8 @@ You can configure your IT Infrastructure for monitoring in one of the following [Turn auditing on or off](https://docs.microsoft.com/en-us/microsoft-365/compliance/turn-audit-log-search-on-or-off?view=o365-worldwide) article for additional information. - Prepare a Data Collecting Account as described in the - [Permissions for Teams Auditing](/docs/auditor/10.7/configuration/microsoft365/teams/permissions/permissions.md) topic. - - Configure required protocols and ports, as described in the [Teams Ports](/docs/auditor/10.7/configuration/microsoft365/teams/ports.md) topic. + [Permissions for Teams Auditing](/docs/auditor/10.8/configuration/microsoft365/teams/permissions/permissions.md) topic. + - Configure required protocols and ports, as described in the [Teams Ports](/docs/auditor/10.8/configuration/microsoft365/teams/ports.md) topic. Auditor can monitor for operations with MS Teams entities, collect state-in-time snapshots and track changes to the object attributes. This section provides detailed information on these activities. @@ -39,7 +39,7 @@ changes to the object attributes. This section provides detailed information on Starting with the version 10.5, Auditor is able to report about sensitive data in your IT infrastructure. Pay attention to the "_Data categories_" column in search and reports (for the "_Document_" object types only). Refer to -[Sensitive Data Discovery ](/docs/auditor/10.7/admin/settings/sensitivedatadiscovery.md) for detailed +[Sensitive Data Discovery ](/docs/auditor/10.8/admin/settings/sensitivedatadiscovery.md) for detailed instructions on how to enable monitoring of sensitive data in Auditor. Review a full list of object types and attributes Auditor can collect on SharePoint Online. OneDrive diff --git a/docs/auditor/10.8/configuration/microsoft365/teams/permissions/basicauth.md b/docs/auditor/10.8/configuration/microsoft365/teams/permissions/basicauth.md index 261e943771..5e3c1061c9 100644 --- a/docs/auditor/10.8/configuration/microsoft365/teams/permissions/basicauth.md +++ b/docs/auditor/10.8/configuration/microsoft365/teams/permissions/basicauth.md @@ -16,7 +16,7 @@ user account will need an administrative role in the cloud-based infrastructure. | To... | Requirement | Comment | | --------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------- | -| Create Microsoft Entra ID application, run initial data collection, and perform Auditor upgrade from previous version | Any of the following role combinations: - Application Administrator & Privileged Role Administrator & _Teams Administrator_ OR - Cloud Application Administrator & Privileged Role Administrator & _Teams Administrator_ OR - _Global Admin_ | Prepare a user account and specify it in the monitored item properties. See the [MS Teams](/docs/auditor/10.7/configuration/microsoft365/teams/overview.md) topic for additional information. | +| Create Microsoft Entra ID application, run initial data collection, and perform Auditor upgrade from previous version | Any of the following role combinations: - Application Administrator & Privileged Role Administrator & _Teams Administrator_ OR - Cloud Application Administrator & Privileged Role Administrator & _Teams Administrator_ OR - _Global Admin_ | Prepare a user account and specify it in the monitored item properties. See the [MS Teams](/docs/auditor/10.8/configuration/microsoft365/teams/overview.md) topic for additional information. | | Collect activity data | Any of the following roles: _Application Administrator_ & _Teams Administrator_ OR _Cloud Application Administrator_ & _Teams Administrator_ OR _Global Admin_ | | ## Assigning a Privileged Role for Microsoft Entra ID and Office 365 @@ -69,5 +69,5 @@ account with this privileged role on the Specify the account for collecting data A less privileged role has now been assigned to the account. -See the [Permissions for Microsoft Entra ID Auditing](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/permissions.md) topic for +See the [Permissions for Microsoft Entra ID Auditing](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/permissions.md) topic for additional information. diff --git a/docs/auditor/10.8/configuration/microsoft365/teams/permissions/modernauth/modernauth.md b/docs/auditor/10.8/configuration/microsoft365/teams/permissions/modernauth/modernauth.md index 68065d0d2f..c1fcf5f4cb 100644 --- a/docs/auditor/10.8/configuration/microsoft365/teams/permissions/modernauth/modernauth.md +++ b/docs/auditor/10.8/configuration/microsoft365/teams/permissions/modernauth/modernauth.md @@ -169,5 +169,5 @@ See the following Microsoft article for additional information on how to obtain [Locate important IDs for a user](https://learn.microsoft.com/en-us/partner-center/find-ids-and-domain-names). Then, create a corresponding monitoring plan in Netwrix Auditor and add an item (Office 365 tenant) -to it. See the [Microsoft Entra ID](/docs/auditor/10.7/admin/monitoringplans/microsoftentraid/overview.md) +to it. See the [Microsoft Entra ID](/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/configuration/microsoft365/teams/permissions/permissions.md b/docs/auditor/10.8/configuration/microsoft365/teams/permissions/permissions.md index efce2c80b5..cb82e0ae60 100644 --- a/docs/auditor/10.8/configuration/microsoft365/teams/permissions/permissions.md +++ b/docs/auditor/10.8/configuration/microsoft365/teams/permissions/permissions.md @@ -29,5 +29,5 @@ you will provide this account in the monitoring plan wizard (or in the monitored Refer to the following topics to access Microsoft teams: -- [Using Basic Authentication with MS Teams](/docs/auditor/10.7/configuration/microsoft365/teams/permissions/basicauth.md) -- [Using Modern Authentication with MS Teams](/docs/auditor/10.7/configuration/microsoft365/teams/permissions/modernauth/modernauth.md) +- [Using Basic Authentication with MS Teams](/docs/auditor/10.8/configuration/microsoft365/teams/permissions/basicauth.md) +- [Using Modern Authentication with MS Teams](/docs/auditor/10.8/configuration/microsoft365/teams/permissions/modernauth/modernauth.md) diff --git a/docs/auditor/10.8/configuration/networkdevices/ciscomerakidashboard.md b/docs/auditor/10.8/configuration/networkdevices/ciscomerakidashboard.md index 52dd34928e..f68dd27d90 100644 --- a/docs/auditor/10.8/configuration/networkdevices/ciscomerakidashboard.md +++ b/docs/auditor/10.8/configuration/networkdevices/ciscomerakidashboard.md @@ -8,7 +8,7 @@ sidebar_position: 40 Before creating a monitoring plan to audit your Cisco Meraki devices, plan for the account that will be used for data collection. See the -[Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional +[Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information. You will provide this account in the monitoring plan wizard. Changes that are collected with the basic authorization: diff --git a/docs/auditor/10.8/configuration/networkdevices/ciscomerakidevices.md b/docs/auditor/10.8/configuration/networkdevices/ciscomerakidevices.md index 4526f72eb4..b8b6aeef6e 100644 --- a/docs/auditor/10.8/configuration/networkdevices/ciscomerakidevices.md +++ b/docs/auditor/10.8/configuration/networkdevices/ciscomerakidevices.md @@ -18,18 +18,18 @@ Follow the steps to configure the Syslog server. **Step 2 –** Navigate to **Network wide** > **Configure** > **General**. -![nand_meraki_network](/images/auditor/10.7/configuration/networkdevices/nand_meraki_network.webp) +![nand_meraki_network](/images/auditor/10.8/configuration/networkdevices/nand_meraki_network.webp) **Step 3 –** Locate the Reporting section and click Add a syslog server. -![nand_meraki_server](/images/auditor/10.7/configuration/networkdevices/nand_meraki_server.webp) +![nand_meraki_server](/images/auditor/10.8/configuration/networkdevices/nand_meraki_server.webp) **Step 4 –** In the dialog that opens, complete the following fields: | Option | Description | | --------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Server IP | Provide the IP address of the computer that hosts your Netwrix Auditor Server. | -| Port | Provide the port configured in your monitoring plan for Network Devices (514 by default). See the[Network Devices](/docs/auditor/10.7/admin/monitoringplans/networkdevices.md) topic for additional information. | +| Port | Provide the port configured in your monitoring plan for Network Devices (514 by default). See the[Network Devices](/docs/auditor/10.8/admin/monitoringplans/networkdevices.md) topic for additional information. | | Roles | Select the following roles: - Appliance event log - Switch event log - Wireless event log | ### Cisco Meraki Devices Configuration diff --git a/docs/auditor/10.8/configuration/networkdevices/hpearuba.md b/docs/auditor/10.8/configuration/networkdevices/hpearuba.md index 43a8e0725b..ab3682bf72 100644 --- a/docs/auditor/10.8/configuration/networkdevices/hpearuba.md +++ b/docs/auditor/10.8/configuration/networkdevices/hpearuba.md @@ -47,7 +47,7 @@ To configure HPE Aruba devices through the Management Console Netwrix Auditor. 3. Navigate to Configuration → System → Logging and click + to add a new Syslog Server. - ![nand_aruba_logging](/images/auditor/10.7/configuration/networkdevices/nand_aruba_logging.webp) + ![nand_aruba_logging](/images/auditor/10.8/configuration/networkdevices/nand_aruba_logging.webp) 4. In the Add New Syslog Servers dialog, complete the following fields: @@ -66,7 +66,7 @@ To configure HPE Aruba devices through the Management Console 8. Click Deploy Changes. 9. If the configuration is correct, you will see the following wizard: - ![nand_aruba_status](/images/auditor/10.7/configuration/networkdevices/nand_aruba_status.webp) + ![nand_aruba_status](/images/auditor/10.8/configuration/networkdevices/nand_aruba_status.webp) 10. Navigate to Configuration → System → Logging and expand the Logging Levels. 11. Select the Informational value for the following parameters: diff --git a/docs/auditor/10.8/configuration/networkdevices/juniper.md b/docs/auditor/10.8/configuration/networkdevices/juniper.md index 5ce6e7a4f1..cb31933f0e 100644 --- a/docs/auditor/10.8/configuration/networkdevices/juniper.md +++ b/docs/auditor/10.8/configuration/networkdevices/juniper.md @@ -50,7 +50,7 @@ To configure you Juniper devices, do the following: AND `` is the name of the UDP port used to listen to network devices (514 port used by - default). [Network Devices](/docs/auditor/10.7/admin/monitoringplans/networkdevices.md) + default). [Network Devices](/docs/auditor/10.8/admin/monitoringplans/networkdevices.md) # set system syslog time-format `` diff --git a/docs/auditor/10.8/configuration/networkdevices/overview.md b/docs/auditor/10.8/configuration/networkdevices/overview.md index 71b2f52e11..12120c25e0 100644 --- a/docs/auditor/10.8/configuration/networkdevices/overview.md +++ b/docs/auditor/10.8/configuration/networkdevices/overview.md @@ -9,16 +9,16 @@ sidebar_position: 80 To configure your network devices for monitoring perform the following procedures, depending on your device: -- [Configure Cisco ASA Devices](/docs/auditor/10.7/configuration/networkdevices/ciscoasa.md) -- [Configure Cisco IOS Devices](/docs/auditor/10.7/configuration/networkdevices/ciscoios.md) -- [Cisco Meraki Dashboard ](/docs/auditor/10.7/configuration/networkdevices/ciscomerakidashboard.md) -- [Configure Cisco Meraki Devices](/docs/auditor/10.7/configuration/networkdevices/ciscomerakidevices.md) -- [Configure Fortinet FortiGate Devices](/docs/auditor/10.7/configuration/networkdevices/fortinetfortigate.md) -- [Configure PaloAlto Devices](/docs/auditor/10.7/configuration/networkdevices/paloalto.md) -- [Configure Juniper Devices](/docs/auditor/10.7/configuration/networkdevices/juniper.md) -- [Configure SonicWall Devices](/docs/auditor/10.7/configuration/networkdevices/sonicwall.md) -- [Configure HPE Aruba Devices](/docs/auditor/10.7/configuration/networkdevices/hpearuba.md) -- [Configure Pulse Secure Devices](/docs/auditor/10.7/configuration/networkdevices/pulsesecure.md) +- [Configure Cisco ASA Devices](/docs/auditor/10.8/configuration/networkdevices/ciscoasa.md) +- [Configure Cisco IOS Devices](/docs/auditor/10.8/configuration/networkdevices/ciscoios.md) +- [Cisco Meraki Dashboard ](/docs/auditor/10.8/configuration/networkdevices/ciscomerakidashboard.md) +- [Configure Cisco Meraki Devices](/docs/auditor/10.8/configuration/networkdevices/ciscomerakidevices.md) +- [Configure Fortinet FortiGate Devices](/docs/auditor/10.8/configuration/networkdevices/fortinetfortigate.md) +- [Configure PaloAlto Devices](/docs/auditor/10.8/configuration/networkdevices/paloalto.md) +- [Configure Juniper Devices](/docs/auditor/10.8/configuration/networkdevices/juniper.md) +- [Configure SonicWall Devices](/docs/auditor/10.8/configuration/networkdevices/sonicwall.md) +- [Configure HPE Aruba Devices](/docs/auditor/10.8/configuration/networkdevices/hpearuba.md) +- [Configure Pulse Secure Devices](/docs/auditor/10.8/configuration/networkdevices/pulsesecure.md) **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See the diff --git a/docs/auditor/10.8/configuration/networkdevices/pulsesecure.md b/docs/auditor/10.8/configuration/networkdevices/pulsesecure.md index 27f2e1cd97..87911f8c86 100644 --- a/docs/auditor/10.8/configuration/networkdevices/pulsesecure.md +++ b/docs/auditor/10.8/configuration/networkdevices/pulsesecure.md @@ -17,7 +17,7 @@ sidebar_position: 100 - Login/Logout - VPN Tunneling - ![manual_config_pulse_1](/images/auditor/10.7/configuration/networkdevices/manual_config_pulse_1.webp) + ![manual_config_pulse_1](/images/auditor/10.8/configuration/networkdevices/manual_config_pulse_1.webp) 6. Under the Syslog Servers, complete the following fields: @@ -48,10 +48,10 @@ sidebar_position: 100 15. Save your changes. 16. Start Netwrix Auditor. 17. Navigate to your monitoring plan for Network Devices. See - [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md) + [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md) 18. Provide the IP address of the interface you specified on the step 14 as the Computer item for your monitoring plan. See - [Active Directory](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md) + [Active Directory](/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md) ## Pulse Secure Devices diff --git a/docs/auditor/10.8/configuration/oracle/database.md b/docs/auditor/10.8/configuration/oracle/database.md index 22c6bd2cda..6785cba54e 100644 --- a/docs/auditor/10.8/configuration/oracle/database.md +++ b/docs/auditor/10.8/configuration/oracle/database.md @@ -88,8 +88,8 @@ Netwrix Auditor, these conflicts will be listed in the Netwrix Auditor System He Also, remember to do the following: - Configure Data Collecting Account as described in - [Permissions for Oracle Database Auditing](/docs/auditor/10.7/configuration/oracle/permissions.md) topic. -- Configure ports as described in [Oracle Database Ports](/docs/auditor/10.7/configuration/oracle/ports.md) topic. + [Permissions for Oracle Database Auditing](/docs/auditor/10.8/configuration/oracle/permissions.md) topic. +- Configure ports as described in [Oracle Database Ports](/docs/auditor/10.8/configuration/oracle/ports.md) topic. **NOTE:** Traditional auditing is deprecated in Oracle Database 21c. Oracle recommends using Unified Auditing, which enables selective and more effective auditing within Oracle Database. See the @@ -191,6 +191,6 @@ successful logon session. Also, remember to do the following: - Configure Data Collecting Account. See the - [Permissions for Oracle Database Auditing](/docs/auditor/10.7/configuration/oracle/permissions.md) topic for additional information. -- Configure ports. See the [Oracle Database Ports](/docs/auditor/10.7/configuration/oracle/ports.md) topic for additional information about + [Permissions for Oracle Database Auditing](/docs/auditor/10.8/configuration/oracle/permissions.md) topic for additional information. +- Configure ports. See the [Oracle Database Ports](/docs/auditor/10.8/configuration/oracle/ports.md) topic for additional information about ports and protocols required for auditing. diff --git a/docs/auditor/10.8/configuration/oracle/overview.md b/docs/auditor/10.8/configuration/oracle/overview.md index dc15001c94..f0218c2241 100644 --- a/docs/auditor/10.8/configuration/oracle/overview.md +++ b/docs/auditor/10.8/configuration/oracle/overview.md @@ -29,10 +29,10 @@ You can configure your IT Infrastructure for monitoring in one of the following - On the Oracle server, configure the required settings described below. - On the Auditor console computer, verify that Oracle Data Provider for .NET and Oracle Instant Client are installed and properly configured. See the - [Permissions for Oracle Database Auditing](/docs/auditor/10.7/configuration/oracle/permissions.md) topic of system requirements. + [Permissions for Oracle Database Auditing](/docs/auditor/10.8/configuration/oracle/permissions.md) topic of system requirements. Ensure that you have met all software requirements on the Oracle Database side. See the -[Software Requirements](/docs/auditor/10.7/requirements/software.md) topic for additional information. +[Software Requirements](/docs/auditor/10.8/requirements/software.md) topic for additional information. Before you start monitoring your Oracle Database with Netwrix Auditor, you should configure it to provide audit trails. Depending on your current database version and edition, Oracle supports @@ -40,8 +40,8 @@ different auditing types: | Auditing type | Oracle version | Details | | --------------------------------------- | --------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Unified Auditing | Oracle Database 23c, 21c, 19c, 18c, 12c | Consolidates all auditing into a single repository and view. This provides a two-fold simplification: audit data can now be found in a single location and all audit data is in a single format. See [Configure Oracle Database for Auditing](/docs/auditor/10.7/configuration/oracle/database.md) topic for more information. | -| Fine Grained Auditing | Oracle Database 23c, 21c, 19c, 18c, 12c, 11g Available for **Enterprise Edition** only. | Supports auditing of actions associated with columns in application tables — along with conditions necessary for an audit record to be generated. Helps to focus on security-relevant columns and rows, ignoring areas that are less important. See [Configure Fine Grained Auditing](/docs/auditor/10.7/configuration/oracle/finegained.md) topic for more information. | +| Unified Auditing | Oracle Database 23c, 21c, 19c, 18c, 12c | Consolidates all auditing into a single repository and view. This provides a two-fold simplification: audit data can now be found in a single location and all audit data is in a single format. See [Configure Oracle Database for Auditing](/docs/auditor/10.8/configuration/oracle/database.md) topic for more information. | +| Fine Grained Auditing | Oracle Database 23c, 21c, 19c, 18c, 12c, 11g Available for **Enterprise Edition** only. | Supports auditing of actions associated with columns in application tables — along with conditions necessary for an audit record to be generated. Helps to focus on security-relevant columns and rows, ignoring areas that are less important. See [Configure Fine Grained Auditing](/docs/auditor/10.8/configuration/oracle/finegained.md) topic for more information. | | Standard Auditing (trail auditing mode) | Oracle Database 11g | See topic for more information. Use initialization parameters and the `AUDIT` and `NOAUDIT` SQL statements to audit: - SQL statements - privileges - schema objects - network and multitier activities See [Oracle documentation](https://docs.oracle.com/cd/E11882_01/server.112/e10575/tdpsg_auditing.htm#oracle-documentation) for more information. Starting with version 10.5, Netwrix Auditor provides limited support of Oracle Database 11g and trail auditing mode, in particular: Netwrix Auditor client UI does not display any warnings and / or errors related to Standard Auditing mode operation. | **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See @@ -68,26 +68,26 @@ dates set by the vendor. So, when planning your Netwrix Auditor deployment, cons Oracle Database 11g support expiration dates. If you are using Oracle Database 12c or later, make sure you have Unified auditing mode enabled. -Otherwise, Netwrix Auditor may not operate properly. See the [Migrate to Unified Audit](/docs/auditor/10.7/configuration/oracle/unified.md) +Otherwise, Netwrix Auditor may not operate properly. See the [Migrate to Unified Audit](/docs/auditor/10.8/configuration/oracle/unified.md) topic for additional information. -See the [Software Requirements](/docs/auditor/10.7/requirements/software.md) topic for additional information. +See the [Software Requirements](/docs/auditor/10.8/requirements/software.md) topic for additional information. ## Configuration If you are using Oracle Wallet to connect to your database, see the -[Create and Configure Oracle Wallet](/docs/auditor/10.7/configuration/oracle/wallet.md) topic for configuration details. +[Create and Configure Oracle Wallet](/docs/auditor/10.8/configuration/oracle/wallet.md) topic for configuration details. Oracle Wallet is not supported for Oracle 11g. If you are unsure of your audit settings, refer to -the [Verify Your Oracle Database Audit Settings](/docs/auditor/10.7/configuration/oracle/verifysettings.md) +the [Verify Your Oracle Database Audit Settings](/docs/auditor/10.8/configuration/oracle/verifysettings.md) Follow the steps for proper configuration. **Step 1 –** Configure Data Collecting Account, as described in the -[Permissions for Oracle Database Auditing](/docs/auditor/10.7/configuration/oracle/permissions.md) topic. +[Permissions for Oracle Database Auditing](/docs/auditor/10.8/configuration/oracle/permissions.md) topic. **Step 2 –** Configure required protocols and ports, as described in the -[Oracle Database Ports](/docs/auditor/10.7/configuration/oracle/ports.md) topic. +[Oracle Database Ports](/docs/auditor/10.8/configuration/oracle/ports.md) topic. ## Oracle Database objects diff --git a/docs/auditor/10.8/configuration/oracle/wallet.md b/docs/auditor/10.8/configuration/oracle/wallet.md index fafb003b85..1c3c8ab323 100644 --- a/docs/auditor/10.8/configuration/oracle/wallet.md +++ b/docs/auditor/10.8/configuration/oracle/wallet.md @@ -149,4 +149,4 @@ Do the following: See also: - For information about using Oracle Wallet with monitoring plans, see the - [Oracle monitoring plan documentation](/docs/auditor/10.7/admin/monitoringplans/oracle/overview.md). + [Oracle monitoring plan documentation](/docs/auditor/10.8/admin/monitoringplans/oracle/overview.md). diff --git a/docs/auditor/10.8/configuration/overview.md b/docs/auditor/10.8/configuration/overview.md index 45802f167e..e8c78ae833 100644 --- a/docs/auditor/10.8/configuration/overview.md +++ b/docs/auditor/10.8/configuration/overview.md @@ -8,32 +8,32 @@ sidebar_position: 30 With the Netwrix Auditor, the following Data Sources can be monitored: -- [Active Directory](/docs/auditor/10.7/configuration/activedirectory/overview.md) -- [AD FS](/docs/auditor/10.7/configuration/activedirectoryfederatedservices/overview.md) -- [Exchange](/docs/auditor/10.7/configuration/exchange/overview.md) -- [File Servers](/docs/auditor/10.7/configuration/fileservers/overview.md) +- [Active Directory](/docs/auditor/10.8/configuration/activedirectory/overview.md) +- [AD FS](/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md) +- [Exchange](/docs/auditor/10.8/configuration/exchange/overview.md) +- [File Servers](/docs/auditor/10.8/configuration/fileservers/overview.md) - - [Dell Data Storage](/docs/auditor/10.7/configuration/fileservers/delldatastorage/overview.md) - - [Dell Isilon/PowerScale](/docs/auditor/10.7/configuration/fileservers/dellisilon/overview.md) - - [NetApp Data ONTAP](/docs/auditor/10.7/configuration/fileservers/netappcmode/overview.md) - - [Nutanix](/docs/auditor/10.7/configuration/fileservers/nutanix/overview.md) - - [Qumulo](/docs/auditor/10.7/configuration/fileservers/qumulo/overview.md) - - [Synology](/docs/auditor/10.7/configuration/fileservers/synology/overview.md) - - [Windows File Servers](/docs/auditor/10.7/configuration/fileservers/windows/overview.md) + - [Dell Data Storage](/docs/auditor/10.8/configuration/fileservers/delldatastorage/overview.md) + - [Dell Isilon/PowerScale](/docs/auditor/10.8/configuration/fileservers/dellisilon/overview.md) + - [NetApp Data ONTAP](/docs/auditor/10.8/configuration/fileservers/netappcmode/overview.md) + - [Nutanix](/docs/auditor/10.8/configuration/fileservers/nutanix/overview.md) + - [Qumulo](/docs/auditor/10.8/configuration/fileservers/qumulo/overview.md) + - [Synology](/docs/auditor/10.8/configuration/fileservers/synology/overview.md) + - [Windows File Servers](/docs/auditor/10.8/configuration/fileservers/windows/overview.md) -- [Group Policy](/docs/auditor/10.7/configuration/grouppolicy/overview.md) -- [Logon Activity](/docs/auditor/10.7/configuration/logonactivity/overview.md) -- [Microsoft 365](/docs/auditor/10.7/configuration/microsoft365/overview.md) +- [Group Policy](/docs/auditor/10.8/configuration/grouppolicy/overview.md) +- [Logon Activity](/docs/auditor/10.8/configuration/logonactivity/overview.md) +- [Microsoft 365](/docs/auditor/10.8/configuration/microsoft365/overview.md) - - [Exchange Online](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/overview.md) - - [Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/overview.md) - - [SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/overview.md) - - [MS Teams](/docs/auditor/10.7/configuration/microsoft365/teams/overview.md) + - [Exchange Online](/docs/auditor/10.8/configuration/microsoft365/exchangeonline/overview.md) + - [Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/overview.md) + - [SharePoint Online](/docs/auditor/10.8/configuration/microsoft365/sharepointonline/overview.md) + - [MS Teams](/docs/auditor/10.8/configuration/microsoft365/teams/overview.md) -- [Network Devices](/docs/auditor/10.7/configuration/networkdevices/overview.md) -- [Oracle Database](/docs/auditor/10.7/configuration/oracle/overview.md) -- [SharePoint](/docs/auditor/10.7/configuration/sharepoint/overview.md) -- [SQL Server](/docs/auditor/10.7/configuration/sqlserver/overview.md) -- [User Activity](/docs/auditor/10.7/configuration/useractivity/overview.md) -- [VMware](/docs/auditor/10.7/configuration/vmware/overview.md) -- [Windows Server](/docs/auditor/10.7/configuration/windowsserver/overview.md) +- [Network Devices](/docs/auditor/10.8/configuration/networkdevices/overview.md) +- [Oracle Database](/docs/auditor/10.8/configuration/oracle/overview.md) +- [SharePoint](/docs/auditor/10.8/configuration/sharepoint/overview.md) +- [SQL Server](/docs/auditor/10.8/configuration/sqlserver/overview.md) +- [User Activity](/docs/auditor/10.8/configuration/useractivity/overview.md) +- [VMware](/docs/auditor/10.8/configuration/vmware/overview.md) +- [Windows Server](/docs/auditor/10.8/configuration/windowsserver/overview.md) diff --git a/docs/auditor/10.8/configuration/sharepoint/overview.md b/docs/auditor/10.8/configuration/sharepoint/overview.md index 0faf768ce0..9b39dbdc8d 100644 --- a/docs/auditor/10.8/configuration/sharepoint/overview.md +++ b/docs/auditor/10.8/configuration/sharepoint/overview.md @@ -88,14 +88,14 @@ properties for read access auditing. If you are using SharePoint 2019 or SharePoint Subscription Edition, it is recommended to adjust audit settings automatically with Auditor to enable this option. See the -[Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional +[Create a New Monitoring Plan](/docs/auditor/10.8/admin/monitoringplans/create.md) topic for additional information. ## Enable SharePoint Administration Service This service is must be started to ensure the Netwrix Auditor for SharePoint Core Service successful installation. Perform the procedure below, prior to the Core Service installation. See the -[Install for SharePoint Core Service](/docs/auditor/10.7/install/sharepointcoreservice.md) topic for additional +[Install for SharePoint Core Service](/docs/auditor/10.8/install/sharepointcoreservice.md) topic for additional information. Follow the steps to enable SharePoint Administration Service. diff --git a/docs/auditor/10.8/configuration/sharepoint/permissions.md b/docs/auditor/10.8/configuration/sharepoint/permissions.md index 110ffae26a..51cb2d7f92 100644 --- a/docs/auditor/10.8/configuration/sharepoint/permissions.md +++ b/docs/auditor/10.8/configuration/sharepoint/permissions.md @@ -14,7 +14,7 @@ Starting with version 9.96, you can use group Managed Service Accounts (gMSA) as accounts. For more information on gMSA, refer to -[Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md)[Microsoft documentation](https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview). +[Use Group Managed Service Account (gMSA)](/docs/auditor/10.8/requirements/gmsa.md)[Microsoft documentation](https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview). These group Managed Service Accounts should meet the related requirements. @@ -23,7 +23,7 @@ These group Managed Service Accounts should meet the related requirements. 1. On the SharePoint server where the Netwrix Auditor Core Service will be deployed: the account must be a member of the local Administrators group. To learn more about Netwrix Auditor Core Services, refer to - [Installation](/docs/auditor/10.7/install/overview.md) topic. + [Installation](/docs/auditor/10.8/install/overview.md) topic. 2. On the SQL Server hosting SharePoint database: the SharePoint_Shell_Access role. See the Assigning 'SharePoint_Shell_Access' Role topic for additional information. 3. If you plan to collect state-in-time data from a SharePoint farm, the account should also meet diff --git a/docs/auditor/10.8/configuration/sqlserver/overview.md b/docs/auditor/10.8/configuration/sqlserver/overview.md index 1c46bbdc2d..fbd8e09f17 100644 --- a/docs/auditor/10.8/configuration/sqlserver/overview.md +++ b/docs/auditor/10.8/configuration/sqlserver/overview.md @@ -91,5 +91,5 @@ The following list contains the names of all data types monitored by Netwrix Aud Also remember to do the following: - Configure Data Collecting Account as described in - [Permissions for SQL Server Auditing ](/docs/auditor/10.7/configuration/sqlserver/permissions.md)section. -- Configure ports as described in the [SQL Server Ports](/docs/auditor/10.7/configuration/sqlserver/ports.md) section. + [Permissions for SQL Server Auditing ](/docs/auditor/10.8/configuration/sqlserver/permissions.md)section. +- Configure ports as described in the [SQL Server Ports](/docs/auditor/10.8/configuration/sqlserver/ports.md) section. diff --git a/docs/auditor/10.8/configuration/useractivity/overview.md b/docs/auditor/10.8/configuration/useractivity/overview.md index c4d8dea65f..5060a1fc23 100644 --- a/docs/auditor/10.8/configuration/useractivity/overview.md +++ b/docs/auditor/10.8/configuration/useractivity/overview.md @@ -51,8 +51,8 @@ You can configure your IT Infrastructure for monitoring in one of the following See the following topics for additional information: -- [Configure Data Collection Settings](/docs/auditor/10.7/configuration/useractivity/datacollection.md) -- [Configure Video Recordings Playback Settings](/docs/auditor/10.7/configuration/useractivity/videorecordings.md) +- [Configure Data Collection Settings](/docs/auditor/10.8/configuration/useractivity/datacollection.md) +- [Configure Video Recordings Playback Settings](/docs/auditor/10.8/configuration/useractivity/videorecordings.md) ## User Sessions diff --git a/docs/auditor/10.8/configuration/useractivity/videorecordings.md b/docs/auditor/10.8/configuration/useractivity/videorecordings.md index 7d513caae3..e44a98d76d 100644 --- a/docs/auditor/10.8/configuration/useractivity/videorecordings.md +++ b/docs/auditor/10.8/configuration/useractivity/videorecordings.md @@ -64,7 +64,7 @@ verify that **File download** is set to **Enable**. **Step 5 –** Local Security and select the **Allow active content to run in files on My Computer** checkbox. -![manualconfig_uavr_ie2016](/images/auditor/10.7/configuration/useractivity/manualconfig_uavr_ie2016.webp) +![manualconfig_uavr_ie2016](/images/auditor/10.8/configuration/useractivity/manualconfig_uavr_ie2016.webp) ## To Enable JavaScript diff --git a/docs/auditor/10.8/configuration/vmware/permissions.md b/docs/auditor/10.8/configuration/vmware/permissions.md index 108a297299..4a2fce81c2 100644 --- a/docs/auditor/10.8/configuration/vmware/permissions.md +++ b/docs/auditor/10.8/configuration/vmware/permissions.md @@ -27,5 +27,5 @@ configuring a corresponding monitored item. See also: -- [Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) step of the monitoring plan +- [Create a New Monitoring Plan](/docs/auditor/10.8/admin/monitoringplans/create.md) step of the monitoring plan wizard diff --git a/docs/auditor/10.8/configuration/windowsserver/dhcp.md b/docs/auditor/10.8/configuration/windowsserver/dhcp.md index 3fb268b52e..139722be5c 100644 --- a/docs/auditor/10.8/configuration/windowsserver/dhcp.md +++ b/docs/auditor/10.8/configuration/windowsserver/dhcp.md @@ -14,7 +14,7 @@ settings (size and retention method). For that, take the steps described below. the DHCP-Server node. 3. Right-click the Operational log and select Properties. - ![manual_config_dhcp_log](/images/auditor/10.7/configuration/windowsserver/manual_config_dhcp_log.webp) + ![manual_config_dhcp_log](/images/auditor/10.8/configuration/windowsserver/manual_config_dhcp_log.webp) 4. Make sure the **Enable logging** option is selected. 5. Set **Maximum log size** to **4 GB**. diff --git a/docs/auditor/10.8/configuration/windowsserver/eventlog.md b/docs/auditor/10.8/configuration/windowsserver/eventlog.md index b763d53811..b91c8f0a01 100644 --- a/docs/auditor/10.8/configuration/windowsserver/eventlog.md +++ b/docs/auditor/10.8/configuration/windowsserver/eventlog.md @@ -93,7 +93,7 @@ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Directory Service **Step 2 –** Set the MaxSize to the required decimal value (in bytes). -![gpo_eventlog_regedit_thumb_0_0](/images/auditor/10.7/configuration/windowsserver/gpo_eventlog_regedit_thumb_0_0.webp) +![gpo_eventlog_regedit_thumb_0_0](/images/auditor/10.8/configuration/windowsserver/gpo_eventlog_regedit_thumb_0_0.webp) You can configure Group Policy Preferences to push registry changes to the target domain computers. For the example above (Directory Service Log), perform the following steps. @@ -109,7 +109,7 @@ Preferences > Windows Settings > Registry**. - Hive > HKEY_LOCAL_MACHINE - Key Path – browse to MaxSize value at the SYSTEM\CurrentControlSet\Services\EventLog\Directory Service - ![gpo_eventlog_gpmc_thumb_0_0](/images/auditor/10.7/configuration/windowsserver/gpo_eventlog_gpmc_thumb_0_0.webp) + ![gpo_eventlog_gpmc_thumb_0_0](/images/auditor/10.8/configuration/windowsserver/gpo_eventlog_gpmc_thumb_0_0.webp) **Step 4 –** Change the MaxSize REG_DWORD to the required decimal value (in bytes). diff --git a/docs/auditor/10.8/configuration/windowsserver/iis.md b/docs/auditor/10.8/configuration/windowsserver/iis.md index f56ff9052d..a294bce3be 100644 --- a/docs/auditor/10.8/configuration/windowsserver/iis.md +++ b/docs/auditor/10.8/configuration/windowsserver/iis.md @@ -7,7 +7,7 @@ sidebar_position: 100 # Internet Information Services (IIS) To be able to process Internet Information Services (IIS) events, you must enable the Remote -Registry service on the target computers. [Windows Server](/docs/auditor/10.7/configuration/windowsserver/overview.md) +Registry service on the target computers. [Windows Server](/docs/auditor/10.8/configuration/windowsserver/overview.md) To configure the Operational log size and retention method @@ -17,7 +17,7 @@ To configure the Operational log size and retention method the IIS-Configuration node. 3. Right-click the Operational log and select Properties. - ![manualconfig_iis2016](/images/auditor/10.7/configuration/windowsserver/manualconfig_iis2016.webp) + ![manualconfig_iis2016](/images/auditor/10.8/configuration/windowsserver/manualconfig_iis2016.webp) 4. Make sure **Enable logging** is enabled. 5. Set **Maximum log size** to 4 GB. diff --git a/docs/auditor/10.8/configuration/windowsserver/localpolicy.md b/docs/auditor/10.8/configuration/windowsserver/localpolicy.md index caaaaaaf48..ad7acc6f16 100644 --- a/docs/auditor/10.8/configuration/windowsserver/localpolicy.md +++ b/docs/auditor/10.8/configuration/windowsserver/localpolicy.md @@ -20,7 +20,7 @@ the changes to the following monitored system components: - Removable media You can also configure advanced audit policies for same purpose. See the -[Configure Advanced Audit Policies](/docs/auditor/10.7/configuration/windowsserver/advancedpolicy.md) topic for more information. +[Configure Advanced Audit Policies](/docs/auditor/10.8/configuration/windowsserver/advancedpolicy.md) topic for more information. ## Manual Configuration diff --git a/docs/auditor/10.8/configuration/windowsserver/overview.md b/docs/auditor/10.8/configuration/windowsserver/overview.md index 9bba343dfc..70ac3dff0e 100644 --- a/docs/auditor/10.8/configuration/windowsserver/overview.md +++ b/docs/auditor/10.8/configuration/windowsserver/overview.md @@ -28,8 +28,8 @@ You can configure your IT Infrastructure for monitoring in one of the following - The Remote Registry and the Windows Management Instrumentation (WMI) service must be started. See the - [Enable Remote Registry and Windows Management Instrumentation Services](/docs/auditor/10.7/configuration/windowsserver/remoteregistry.md) - topic and the [Configure Windows Registry Audit Settings](/docs/auditor/10.7/configuration/windowsserver/windowsregistry.md) topic for + [Enable Remote Registry and Windows Management Instrumentation Services](/docs/auditor/10.8/configuration/windowsserver/remoteregistry.md) + topic and the [Configure Windows Registry Audit Settings](/docs/auditor/10.8/configuration/windowsserver/windowsregistry.md) topic for additional information. - The following advanced audit policy settings must be configured: @@ -43,25 +43,25 @@ You can configure your IT Infrastructure for monitoring in one of the following User Account Management, Audit Handle Manipulation, Audit Other Object Access Events, Audit Registry, Audit File Share, and Audit Audit Policy Changeadvanced audit policies must be set to _"Success"_. - - See the [Configure Local Audit Policies](/docs/auditor/10.7/configuration/windowsserver/localpolicy.md) topic and the - [Configure Advanced Audit Policies](/docs/auditor/10.7/configuration/windowsserver/advancedpolicy.md) topic for additional information. + - See the [Configure Local Audit Policies](/docs/auditor/10.8/configuration/windowsserver/localpolicy.md) topic and the + [Configure Advanced Audit Policies](/docs/auditor/10.8/configuration/windowsserver/advancedpolicy.md) topic for additional information. - The following legacy audit policies can be configured instead of advanced: Audit object access, Audit policy change, and **Audit account management** must be set to _"Success"_. - The Enable Persistent Time Stamp local group policy must be enabled. This policy should be configured manually since Auditor does not enable it automatically. See the - [Configure Enable Persistent Time Stamp Policy](/docs/auditor/10.7/configuration/windowsserver/persistenttimestamp.md) topic for additional + [Configure Enable Persistent Time Stamp Policy](/docs/auditor/10.8/configuration/windowsserver/persistenttimestamp.md) topic for additional information. - The Application, Security, and System event log maximum size must be set to 4 GB. The retention method must be set to _“Overwrite events as needed”_. See the - [Adjusting Event Log Size and Retention Settings](/docs/auditor/10.7/configuration/windowsserver/eventlog.md) topic for additional + [Adjusting Event Log Size and Retention Settings](/docs/auditor/10.8/configuration/windowsserver/eventlog.md) topic for additional information. - For auditing scheduled tasks, the Microsoft-Windows-TaskScheduler/Operational event log must be enabled and its maximum size must be set to 4 GB. The retention method of the log must be set to _“Overwrite events as needed”_. - For auditing DHCP, the Microsoft-Windows-Dhcp-Server/Operational event log must be enabled and its maximum size must be set to 4 GB. The retention method of the log must be set to - _“Overwrite events as needed”_. See the [Adjust DHCP Server Operational Log Settings](/docs/auditor/10.7/configuration/windowsserver/dhcp.md) + _“Overwrite events as needed”_. See the [Adjust DHCP Server Operational Log Settings](/docs/auditor/10.8/configuration/windowsserver/dhcp.md) topic for additional information. - For auditing DNS, the Microsoft-Windows-DNS-Server/Audit event log must be enabled and its maximum size must be set to 4 GB. The retention method of the log must be set to _“Overwrite @@ -84,9 +84,9 @@ You can configure your IT Infrastructure for monitoring in one of the following - If the audited servers are behind the Firewall, review the list of protocols and ports required for Netwrix Auditor and make sure that these ports are opened. See the - [Windows Server Ports](/docs/auditor/10.7/configuration/windowsserver/ports.md) topic for additional information. + [Windows Server Ports](/docs/auditor/10.8/configuration/windowsserver/ports.md) topic for additional information. - For auditing removable storage media, two Event Trace Session objects must be created. See the - [Configure Removable Storage Media for Monitoring](/docs/auditor/10.7/configuration/windowsserver/removablestorage.md) topic for additional + [Configure Removable Storage Media for Monitoring](/docs/auditor/10.8/configuration/windowsserver/removablestorage.md) topic for additional information. - If you want to use Network traffic compression, make sure that the Auditor console computer is accessible by its FQDN name. @@ -102,8 +102,8 @@ Whatever method you choose to configure Windows Server for auditing (manual or a remember to do the following: 1. Configure Data Collecting Account, as described in the - [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic. -2. Configure required protocols and ports, as described in the [Windows Server Ports](/docs/auditor/10.7/configuration/windowsserver/ports.md) + [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic. +2. Configure required protocols and ports, as described in the [Windows Server Ports](/docs/auditor/10.8/configuration/windowsserver/ports.md) topic. ## Exclude Monitored Objects @@ -292,7 +292,7 @@ reports, alerts or search results, as it is only used as one of the sources for formation. - You can configure these settings automatically using Netwrix Auditor, as described in the - [Settings for Data Collection](/docs/auditor/10.7/admin/monitoringplans/create.md#settings-for-data-collection) + [Settings for Data Collection](/docs/auditor/10.8/admin/monitoringplans/create.md#settings-for-data-collection) topic. Corresponding audit settings will be also applied automatically after you select a checkbox under **Monitor changes to system components** on the **General** tab in the Windows Server data source properties. @@ -306,7 +306,7 @@ will adjust the audit settings for the following subkeys: - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services(|\\.\*) - To configure the audit settings manually, refer to the - [Configure Windows Registry Audit Settings](/docs/auditor/10.7/configuration/windowsserver/windowsregistry.md) topic for additional information. + [Configure Windows Registry Audit Settings](/docs/auditor/10.8/configuration/windowsserver/windowsregistry.md) topic for additional information. #### Monitoring Custom Registry Keys @@ -315,7 +315,7 @@ Follow the steps to monitor custom registry keys. **Step 1 –** On the computer where Auditor Server resides, navigate to _%Netwrix Auditor installation folder%\Windows Server Auditing._ -![customregistrykeyentry](/images/auditor/10.7/configuration/windowsserver/customregistrykeyentry.webp) +![customregistrykeyentry](/images/auditor/10.8/configuration/windowsserver/customregistrykeyentry.webp) **Step 2 –** Edit the following parameters of the customregistrykeys.txt file: @@ -332,7 +332,7 @@ For example: must be put in front of (\*), (?), (,), and (\) if they are a part of an entry value. - Lines that start with the # sign are treated as comments and are ignored. -![customregistrykey](/images/auditor/10.7/configuration/windowsserver/customregistrykey.webp) +![customregistrykey](/images/auditor/10.8/configuration/windowsserver/customregistrykey.webp) **NOTE:** In some cases, **Who** will be the system and **When** will be collection time, because there is no necessary event in the Security log with this path. diff --git a/docs/auditor/10.8/configuration/windowsserver/permissions.md b/docs/auditor/10.8/configuration/windowsserver/permissions.md index dc632e6ab2..27b0e441df 100644 --- a/docs/auditor/10.8/configuration/windowsserver/permissions.md +++ b/docs/auditor/10.8/configuration/windowsserver/permissions.md @@ -14,7 +14,7 @@ the monitored item settings). The account used for data collection must meet the following requirements on the target servers: - The "Manage auditing and security log" policy must be defined for this account. See the - [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) topic for + [Permissions for Active Directory Auditing](/docs/auditor/10.8/configuration/activedirectory/permissions.md) topic for additional information. - This account must be a member of the local Administrators group. diff --git a/docs/auditor/10.8/configuration/windowsserver/windowsregistry.md b/docs/auditor/10.8/configuration/windowsserver/windowsregistry.md index 02bbace08b..c34f175e1d 100644 --- a/docs/auditor/10.8/configuration/windowsserver/windowsregistry.md +++ b/docs/auditor/10.8/configuration/windowsserver/windowsregistry.md @@ -49,7 +49,7 @@ access types: - **Write DAC** - **Write Owner** -![ManualConfig_WS_AuditingEntry2008](/images/auditor/10.7/configuration/windowsserver/manualconfig_ws_auditenrty2008.webp) +![ManualConfig_WS_AuditingEntry2008](/images/auditor/10.8/configuration/windowsserver/manualconfig_ws_auditenrty2008.webp) Repeat the same steps for the `HKEY_LOCAL_MACHINE\SYSTEM` key. @@ -79,7 +79,7 @@ object name to select** field. - Write DAC - Write Owner -![Config_WS_AuditingEntry_2016](/images/auditor/10.7/configuration/windowsserver/manualconfig_ws_auditenrty_2016.webp) +![Config_WS_AuditingEntry_2016](/images/auditor/10.8/configuration/windowsserver/manualconfig_ws_auditenrty_2016.webp) Repeat the same steps for the `HKEY_LOCAL_MACHINE\SYSTEM` key. diff --git a/docs/auditor/10.8/install/firstlaunch.md b/docs/auditor/10.8/install/firstlaunch.md index 29495f9382..93a40bc5d6 100644 --- a/docs/auditor/10.8/install/firstlaunch.md +++ b/docs/auditor/10.8/install/firstlaunch.md @@ -27,11 +27,11 @@ To start using Netwrix Auditor After logging into Netwrix Auditor, you will see the following window: -![welcome_screen_thumb_0_0](/images/auditor/10.7/install/welcome_screen_thumb_0_0.webp) +![welcome_screen_thumb_0_0](/images/auditor/10.8/install/welcome_screen_thumb_0_0.webp) Take a closer look at the Home page. It contains everything you need to enable complete visibility in your environment. See next: -- [Navigation](/docs/auditor/10.7/admin/navigation/overview.md) +- [Navigation](/docs/auditor/10.8/admin/navigation/overview.md) diff --git a/docs/auditor/10.8/install/overview.md b/docs/auditor/10.8/install/overview.md index 2840790130..d08ad35afb 100644 --- a/docs/auditor/10.8/install/overview.md +++ b/docs/auditor/10.8/install/overview.md @@ -14,12 +14,12 @@ Compression Services. Refer to the following sections for detailed information: It also includes advanced scenarios such as: -- [Install Client via Group Policy](/docs/auditor/10.7/install/viagrouppolicy.md) -- [Install in Silent Mode](/docs/auditor/10.7/install/silentmode.md) +- [Install Client via Group Policy](/docs/auditor/10.8/install/viagrouppolicy.md) +- [Install in Silent Mode](/docs/auditor/10.8/install/silentmode.md) ## Install Netwrix Auditor -For instructions on upgrade procedures, refer to [Upgrade to the Latest Version](/docs/auditor/10.7/install/upgrade.md). +For instructions on upgrade procedures, refer to [Upgrade to the Latest Version](/docs/auditor/10.8/install/upgrade.md). **CAUTION:** To keep your systems safe, Netwrix Auditor should not be exposed to inbound access from the internet. @@ -30,13 +30,13 @@ Follow these steps to install Netwrix Auditor [Netwrix website](https://www.netwrix.com/auditor.html). NOTE: Before installing Netwrix Auditor, make sure that the Windows Firewall service is started. If -you use a third-party firewall, see [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md). Also, +you use a third-party firewall, see [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md). Also, you must be a member of the local Administrators group to run the Netwrix Auditor installation. **Step 2 –** Unpack the installation package. The following window will be displayed on successful operation completion: -![installationscreen](/images/auditor/10.7/install/installationscreen.webp) +![installationscreen](/images/auditor/10.8/install/installationscreen.webp) **Step 3 –** Follow the instructions of the setup wizard. When prompted, accept the license agreement. @@ -59,15 +59,15 @@ collects statistical information on how the Licensee uses the product in accorda law. Select Skip if you do not want to participate in the program. You can always opt-out of the Netwrix Customer Experience Program later. See the -[About Netwrix Auditor](/docs/auditor/10.7/admin/settings/about.md) topic for additional information. +[About Netwrix Auditor](/docs/auditor/10.8/admin/settings/about.md) topic for additional information. **Step 7 –** Click Install. After a successful installation, Auditor shortcut will be added to the **Start** menu and screen and -the product will start. See the [First Launch](/docs/auditor/10.7/install/firstlaunch.md) topic for additional information on +the product will start. See the [First Launch](/docs/auditor/10.8/install/firstlaunch.md) topic for additional information on the product navigation. -![welcome_screen](/images/auditor/10.7/install/welcome_screen.webp) +![welcome_screen](/images/auditor/10.8/install/welcome_screen.webp) Netwrix looks beyond the traditional on-premises installation and provides Auditor for cloud and virtual environments. For example, you can deploy Auditor on a pre-configured Microsoft Azure @@ -83,5 +83,5 @@ either automatically when setting up auditing in Netwrix Auditor, or manually. Refer to the following sections below for manual installation instructions: -- [Install for SharePoint Core Service](/docs/auditor/10.7/install/sharepointcoreservice.md) -- [Install for User Activity Core Service](/docs/auditor/10.7/install/useractivitycoreservice.md) +- [Install for SharePoint Core Service](/docs/auditor/10.8/install/sharepointcoreservice.md) +- [Install for User Activity Core Service](/docs/auditor/10.8/install/useractivitycoreservice.md) diff --git a/docs/auditor/10.8/install/sharepointcoreservice.md b/docs/auditor/10.8/install/sharepointcoreservice.md index c50e955651..ab4643b301 100644 --- a/docs/auditor/10.8/install/sharepointcoreservice.md +++ b/docs/auditor/10.8/install/sharepointcoreservice.md @@ -19,12 +19,12 @@ prerequisites and make sure that: - [.Net Framework 3.5 SP1](http://www.microsoft.com/en-us/download/details.aspx?id=22) is installed on the computer that hosts SharePoint Central Administration in the audited SharePoint farm. - The SharePoint Administration (SPAdminV4) service is started on the target computer. See - [SharePoint](/docs/auditor/10.7/configuration/sharepoint/overview.md) for more information. + [SharePoint](/docs/auditor/10.8/configuration/sharepoint/overview.md) for more information. - The user that is going to run the Core Service installation: - Is a member of the local Administrators group on SharePoint server, where the Core Service will be deployed. - Is granted the SharePoint_Shell_Access role on SharePoint SQL Server configuration database. - See [Permissions for SharePoint Auditing](/docs/auditor/10.7/configuration/sharepoint/permissions.md) topic + See [Permissions for SharePoint Auditing](/docs/auditor/10.8/configuration/sharepoint/permissions.md) topic for more information. Follow the steps to install Netwrix Auditor for SharePoint Core Service manually. diff --git a/docs/auditor/10.8/install/upgrade.md b/docs/auditor/10.8/install/upgrade.md index dbbc178696..ff7fac854a 100644 --- a/docs/auditor/10.8/install/upgrade.md +++ b/docs/auditor/10.8/install/upgrade.md @@ -66,26 +66,26 @@ operation. The issues listed below apply to upgrade from 9.96 and 10. rights and permissions to perform initial data collection and upgrade. Review the following for more information about required rights and permissions: - - [Permissions for Microsoft Entra ID Auditing](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/permissions.md) - - [Permissions for Exchange Online Auditing](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/permissions.md) - - [Permissions for SharePoint Online Auditing ](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/permissions/permissions.md) - - [Permissions for Teams Auditing](/docs/auditor/10.7/configuration/microsoft365/teams/permissions/permissions.md) + - [Permissions for Microsoft Entra ID Auditing](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/permissions.md) + - [Permissions for Exchange Online Auditing](/docs/auditor/10.8/configuration/microsoft365/exchangeonline/permissions.md) + - [Permissions for SharePoint Online Auditing ](/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/permissions.md) + - [Permissions for Teams Auditing](/docs/auditor/10.8/configuration/microsoft365/teams/permissions/permissions.md) - For auditing cloud-based applications (Microsoft Entra ID, Exchange Online, SharePoint Online, and MS Teams) with Netwrix Auditor using modern authentication: additional configuration of the Azure AD app permissions is required. Review the following for more information about required rights and permissions: - - [Permissions for Microsoft Entra ID Auditing](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/permissions/permissions.md) - - [Permissions for Exchange Online Auditing](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/permissions.md) - - [Permissions for SharePoint Online Auditing ](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/permissions/permissions.md) - - [Permissions for Teams Auditing](/docs/auditor/10.7/configuration/microsoft365/teams/permissions/permissions.md) + - [Permissions for Microsoft Entra ID Auditing](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/permissions.md) + - [Permissions for Exchange Online Auditing](/docs/auditor/10.8/configuration/microsoft365/exchangeonline/permissions.md) + - [Permissions for SharePoint Online Auditing ](/docs/auditor/10.8/configuration/microsoft365/sharepointonline/permissions/permissions.md) + - [Permissions for Teams Auditing](/docs/auditor/10.8/configuration/microsoft365/teams/permissions/permissions.md) - Netwrix Auditor for Oracle Database. If you use the following combination of the audit settings: Mixed Mode + Fine Grained Auditing, please check your configuration. You may need to re-configure your audit since the Oracle Database data collection mechanism was changed. See the - [Supported Data Sources](/docs/auditor/10.7/requirements/supporteddatasources/supporteddatasources.md) and - [Verify Your Oracle Database Audit Settings](/docs/auditor/10.7/configuration/oracle/verifysettings.md) topics for + [Supported Data Sources](/docs/auditor/10.8/requirements/supporteddatasources/supporteddatasources.md) and + [Verify Your Oracle Database Audit Settings](/docs/auditor/10.8/configuration/oracle/verifysettings.md) topics for additional information. - During the initial data collection, the product automatically upgrades services responsible for Windows Server and SharePoint network traffic compression. Consider the following: @@ -127,7 +127,7 @@ Follow the steps to perform the upgrade. **Step 1 –** Make sure you have completed the preparatory steps above. **Step 2 –** Run the setup on the computer where the Auditor  Server resides. See the -[Installation](/docs/auditor/10.7/install/overview.md) topic for additional information. +[Installation](/docs/auditor/10.8/install/overview.md) topic for additional information. **Step 3 –** If you have a client-server deployment, then after upgrading the server run the setup on all remote machines where the Auditor Client resides. diff --git a/docs/auditor/10.8/install/viagrouppolicy.md b/docs/auditor/10.8/install/viagrouppolicy.md index 57f2f3e7fc..a9f2239beb 100644 --- a/docs/auditor/10.8/install/viagrouppolicy.md +++ b/docs/auditor/10.8/install/viagrouppolicy.md @@ -52,7 +52,7 @@ Administrative Tools (Windows 2012) **Group Policy Management.** **Step 2 –** In the left pane, navigate to **Forest: `` → Domain →** **``, right-click ``** and select **Create a GPO in this domain and Link it here**. -![winserver2016_ou_gpo_for_deploy](/images/auditor/10.7/install/winserver2016_ou_gpo_for_deploy.webp) +![winserver2016_ou_gpo_for_deploy](/images/auditor/10.8/install/winserver2016_ou_gpo_for_deploy.webp) **Step 3 –** Right-click the newly created GPO and select **Edit** from the pop-up menu. @@ -65,14 +65,14 @@ node on the left and navigate to **Policies → Software Settings → Software i **Step 7 –** In the Deploy Software dialog, select Advanced. -![add_msi](/images/auditor/10.7/install/add_msi.webp) +![add_msi](/images/auditor/10.8/install/add_msi.webp) **Step 8 –** In the Netwrix Auditor Properties dialog, select the Deployment tab and click Advanced. **Step 9 –** In the Advanced Deployment Options dialog, select the Ignore language when deploying this package checkbox. -![winserver2016_advanced_deployment_options](/images/auditor/10.7/install/winserver2016_advanced_deployment_options.webp) +![winserver2016_advanced_deployment_options](/images/auditor/10.8/install/winserver2016_advanced_deployment_options.webp) **Step 10 –** Close the Netwrix Auditor Properties dialog. diff --git a/docs/auditor/10.8/install/virtualappliance/configure.md b/docs/auditor/10.8/install/virtualappliance/configure.md index a8bacdb7e8..53deccdaf5 100644 --- a/docs/auditor/10.8/install/virtualappliance/configure.md +++ b/docs/auditor/10.8/install/virtualappliance/configure.md @@ -26,12 +26,12 @@ the license agreement and then press `Y` to accept it. | Rename virtual machine | Specify a new name for the virtual machine (e.g., _`NA-Server`_). The computer name must be properly formatted. It may contain letters (a-z, A-Z), numbers (0-9), and hyphens (-), but no spaces and periods (.). The name may not consist entirely of digits and may not be longer than 15 characters. | | Add additional input languages | Select `Y` if you want to specify additional input languages. Select `N` to proceed with English. | | Configure network | - Select `Y` to use DHCP server to configure network settings automatically. - Select `N` to configure required parameters manually. In this case, you will be prompted to set up IP settings manually. | -| Join computer to the domain or workgroup | **To join a domain** Select `Y`. Specify the fully qualified domain name to join (e.g., `corp.local`). Then specify domain administrator name and password. For your convenience, the account specified will be added to the local Administrators group and set as account for collecting data from the target systems. Domain Users group will be removed from the local Users group after the machine with the appliance joins the domain. The script is starting to test your domain controller: by NETBIOS name first, then by DNS name and finally, using an IP address. If at least one of the tests is successful, the computer will be added to a domain. In case of failure, you will be prompted to do one of the following: - Re-try to joint to the selected domain. In this case, the script uses the DNS name of your domain controller. The name must be resolved. - Continue with Workgroup. See the procedure below on how to join the computer to a workgroup. - Cancel and **Return to Main Menu**. Select if you want to cancel the domain join and re-configure the machine. Press Enter and repeat menu section. You will return to step 5. **To join a workgroup** Select `N`. Specify the local administrator name and credentials. For your convenience, the account specified will be set as account for collecting data from the target systems. Netwrix Auditor is unable to work in a workgroup. Please confirm if you want to proceed. Otherwise, you will not be able to run reviews on data collected by Auditor. See the [Access Reviews](/docs/auditor/10.7/accessreviews/accessreviews.md) topic for additional information about integration with Access Reviews. | +| Join computer to the domain or workgroup | **To join a domain** Select `Y`. Specify the fully qualified domain name to join (e.g., `corp.local`). Then specify domain administrator name and password. For your convenience, the account specified will be added to the local Administrators group and set as account for collecting data from the target systems. Domain Users group will be removed from the local Users group after the machine with the appliance joins the domain. The script is starting to test your domain controller: by NETBIOS name first, then by DNS name and finally, using an IP address. If at least one of the tests is successful, the computer will be added to a domain. In case of failure, you will be prompted to do one of the following: - Re-try to joint to the selected domain. In this case, the script uses the DNS name of your domain controller. The name must be resolved. - Continue with Workgroup. See the procedure below on how to join the computer to a workgroup. - Cancel and **Return to Main Menu**. Select if you want to cancel the domain join and re-configure the machine. Press Enter and repeat menu section. You will return to step 5. **To join a workgroup** Select `N`. Specify the local administrator name and credentials. For your convenience, the account specified will be set as account for collecting data from the target systems. Netwrix Auditor is unable to work in a workgroup. Please confirm if you want to proceed. Otherwise, you will not be able to run reviews on data collected by Auditor. See the [Access Reviews](/docs/auditor/10.8/accessreviews/accessreviews.md) topic for additional information about integration with Access Reviews. | | Configure SQL Server | The shell script automatically configures SQL Server instance. The sysadmin server role on SQL Server instance is granted automatically to the BUILTIN\Administrators group. | In the example below, review how the shell script configures the new VM: -![appliance_script](/images/auditor/10.7/install/virtualappliance/appliance_script.webp) +![appliance_script](/images/auditor/10.8/install/virtualappliance/appliance_script.webp) **Step 6 –** When the script execution completes, you will be prompted to reboot the virtual machine for the changes to take effect. @@ -51,10 +51,10 @@ Now you can evaluate Auditor functionality. Review the table below for more info | To... | Run... | Get more info | | ---------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -| - See a list of audit settings - See a list of rights and permissions required for data collecting account | — | - [Supported Data Sources](/docs/auditor/10.7/requirements/supporteddatasources/supporteddatasources.md) - [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) | -| - Create a monitoring plan - Review data collection status - Configure the Long-Term Archive and the Audit Database settings - Assign roles and delegate control | Auditor Client | - [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md) - [Netwrix Auditor Settings](/docs/auditor/10.7/admin/settings/overview.md) - [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) | -| - Browse data with interactive search - Review diagrams - Generate reports - Configure report subscriptions - Create alerts | Auditor Client | - [Reports](/docs/auditor/10.7/admin/reports/overview.md) - [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) - [Alerts](/docs/auditor/10.7/admin/alertsettings/overview.md) | -| See the data collected by Auditor | Auditor Client | - [Access Reviews](/docs/auditor/10.7/accessreviews/accessreviews.md) | +| - See a list of audit settings - See a list of rights and permissions required for data collecting account | — | - [Supported Data Sources](/docs/auditor/10.8/requirements/supporteddatasources/supporteddatasources.md) - [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) | +| - Create a monitoring plan - Review data collection status - Configure the Long-Term Archive and the Audit Database settings - Assign roles and delegate control | Auditor Client | - [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md) - [Netwrix Auditor Settings](/docs/auditor/10.8/admin/settings/overview.md) - [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) | +| - Browse data with interactive search - Review diagrams - Generate reports - Configure report subscriptions - Create alerts | Auditor Client | - [Reports](/docs/auditor/10.8/admin/reports/overview.md) - [Subscriptions](/docs/auditor/10.8/admin/subscriptions/overview.md) - [Alerts](/docs/auditor/10.8/admin/alertsettings/overview.md) | +| See the data collected by Auditor | Auditor Client | - [Access Reviews](/docs/auditor/10.8/accessreviews/accessreviews.md) | **NOTE:** If any errors occur, please contact [Netwrix technical support](https://www.netwrix.com/support.html). diff --git a/docs/auditor/10.8/install/virtualappliance/overview.md b/docs/auditor/10.8/install/virtualappliance/overview.md index 1c0d20c2f0..a0021662ac 100644 --- a/docs/auditor/10.8/install/virtualappliance/overview.md +++ b/docs/auditor/10.8/install/virtualappliance/overview.md @@ -30,8 +30,8 @@ environment. Review the following for additional information: - Requirements to Deploy Virtual Appliance -- [Import Virtual Machine from Image to VMware](/docs/auditor/10.7/install/virtualappliance/importvmware.md) -- [Import Virtual Machine from Image to Hyper-V ](/docs/auditor/10.7/install/virtualappliance/importhyperv.md) +- [Import Virtual Machine from Image to VMware](/docs/auditor/10.8/install/virtualappliance/importvmware.md) +- [Import Virtual Machine from Image to Hyper-V ](/docs/auditor/10.8/install/virtualappliance/importhyperv.md) ## Available Configurations @@ -65,7 +65,7 @@ The virtual appliance also contains Access Information Center for Auditor versio - Microsoft SQL Server Express Edition is only recommended for evaluation, PoC or small deployments. For production deployment planning in bigger environments, refer to requirements and recommendations listed in the - [Requirements for SQL Server to Store Audit Data](/docs/auditor/10.7/requirements/sqlserver.md) section. + [Requirements for SQL Server to Store Audit Data](/docs/auditor/10.8/requirements/sqlserver.md) section. ## Requirements to Deploy Virtual Appliance @@ -73,7 +73,7 @@ This section lists supported virtualization platforms and default hardware confi for the virtual machine where Auditor virtual appliance will be deployed. The requirements below are sufficient for evaluation purposes only. See the -[Requirements](/docs/auditor/10.7/requirements/overview.md) topic for additional information. +[Requirements](/docs/auditor/10.8/requirements/overview.md) topic for additional information. ### Supported Platforms diff --git a/docs/auditor/10.8/overview/gettingstarted.md b/docs/auditor/10.8/overview/gettingstarted.md index 0caf59f1c4..d7109fe895 100644 --- a/docs/auditor/10.8/overview/gettingstarted.md +++ b/docs/auditor/10.8/overview/gettingstarted.md @@ -20,34 +20,34 @@ In this section, we will cover: | | | | -------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------ | | Pre-installation procedures | | -| Review recommendations and considerations for Netwrix Auditor deployment planning. | - [Requirements](/docs/auditor/10.7/requirements/overview.md) | -| Make sure the data source you are going to audit is supported. | - [Supported Data Sources](/docs/auditor/10.7/requirements/supporteddatasources/supporteddatasources.md) | -| Open the required ports for connections. | - [Protocols and Ports Required](/docs/auditor/10.7/requirements/ports.md) | -| Review system requirements. | - [Requirements](/docs/auditor/10.7/requirements/overview.md) | +| Review recommendations and considerations for Netwrix Auditor deployment planning. | - [Requirements](/docs/auditor/10.8/requirements/overview.md) | +| Make sure the data source you are going to audit is supported. | - [Supported Data Sources](/docs/auditor/10.8/requirements/supporteddatasources/supporteddatasources.md) | +| Open the required ports for connections. | - [Protocols and Ports Required](/docs/auditor/10.8/requirements/ports.md) | +| Review system requirements. | - [Requirements](/docs/auditor/10.8/requirements/overview.md) | | Installation | | -| If you are using previous version of the product, upgrade to the latest version then. | - [Upgrade to the Latest Version](/docs/auditor/10.7/install/upgrade.md) | -| Install the product and review additional installation scenarios. | - [Installation](/docs/auditor/10.7/install/overview.md) | +| If you are using previous version of the product, upgrade to the latest version then. | - [Upgrade to the Latest Version](/docs/auditor/10.8/install/upgrade.md) | +| Install the product and review additional installation scenarios. | - [Installation](/docs/auditor/10.8/install/overview.md) | | IT infrastructure configuration | | -| Configure target IT infrastructure depending on your data source. | - [Supported Data Sources](/docs/auditor/10.7/requirements/supporteddatasources/supporteddatasources.md) | -| Configure Auditor service accounts. | - [Software Requirements](/docs/auditor/10.7/requirements/software.md) | -| If you are going to use Group Managed Service Account (gMSA) for data collection and storage, refer to the following article for more information. | - [Use Group Managed Service Account (gMSA)](/docs/auditor/10.7/requirements/gmsa.md) | +| Configure target IT infrastructure depending on your data source. | - [Supported Data Sources](/docs/auditor/10.8/requirements/supporteddatasources/supporteddatasources.md) | +| Configure Auditor service accounts. | - [Software Requirements](/docs/auditor/10.8/requirements/software.md) | +| If you are going to use Group Managed Service Account (gMSA) for data collection and storage, refer to the following article for more information. | - [Use Group Managed Service Account (gMSA)](/docs/auditor/10.8/requirements/gmsa.md) | | Product configuration | | -| Configure role-based access and delegation. | - [Role-Based Access and Delegation](/docs/auditor/10.7/admin/monitoringplans/delegation.md) | -| Configure general product settings. | - [Netwrix Auditor Settings](/docs/auditor/10.7/admin/settings/overview.md) | -| Create monitoring plans to start collecting data from your IT infrastructure. | - [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md) | +| Configure role-based access and delegation. | - [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) | +| Configure general product settings. | - [Netwrix Auditor Settings](/docs/auditor/10.8/admin/settings/overview.md) | +| Create monitoring plans to start collecting data from your IT infrastructure. | - [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md) | | Start data collection | | -| Understand how the product collects data. | - [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) | -| Start data collection. | - [Configure Data Collection Settings](/docs/auditor/10.7/configuration/useractivity/datacollection.md) | +| Understand how the product collects data. | - [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) | +| Start data collection. | - [Configure Data Collection Settings](/docs/auditor/10.8/configuration/useractivity/datacollection.md) | | Make collected data actionable | | -| View data and perform search. | - [View and Search Collected Data](/docs/auditor/10.7/admin/search/overview.md) | -| Review reports. | - [View Reports](/docs/auditor/10.7/admin/reports/view.md) | -| Create alerts to be notified about suspicious activity. | - [Create Alerts](/docs/auditor/10.7/admin/alertsettings/create/create.md) | -| Identify configuration gaps in your environment and understand their impact on overall security with Netwrix Risk Assessment dashboard. | - [IT Risk Assessment Overview ](/docs/auditor/10.7/admin/riskassessment/overview.md) | -| Detect behavior anomalies in your IT environment with NetwrixBehavior Anomalies dashboard. | - [Behavior Anomalies](/docs/auditor/10.7/admin/behavioranomalies/overview.md) | -| Schedule email delivery of a variety of reports or set of specific search criteria with subscriptions/ | - [Create Subscriptions](/docs/auditor/10.7/admin/subscriptions/create.md) | +| View data and perform search. | - [View and Search Collected Data](/docs/auditor/10.8/admin/search/overview.md) | +| Review reports. | - [View Reports](/docs/auditor/10.8/admin/reports/view.md) | +| Create alerts to be notified about suspicious activity. | - [Create Alerts](/docs/auditor/10.8/admin/alertsettings/create/create.md) | +| Identify configuration gaps in your environment and understand their impact on overall security with Netwrix Risk Assessment dashboard. | - [IT Risk Assessment Overview ](/docs/auditor/10.8/admin/riskassessment/overview.md) | +| Detect behavior anomalies in your IT environment with NetwrixBehavior Anomalies dashboard. | - [Behavior Anomalies](/docs/auditor/10.8/admin/behavioranomalies/overview.md) | +| Schedule email delivery of a variety of reports or set of specific search criteria with subscriptions/ | - [Create Subscriptions](/docs/auditor/10.8/admin/subscriptions/create.md) | | Operations and health | | -| Track changes to the product configuration with Netwrix  self-audit. | - [Self-Audit](/docs/auditor/10.7/admin/healthstatus/selfaudit.md) | -| Review Netwrix Auditor System Health event log. | - [Netwrix Auditor Health Log](/docs/auditor/10.7/admin/healthstatus/dashboard/healthlog.md) | -| Review Health status dashboard. | - [Health Status Dashboard](/docs/auditor/10.7/admin/healthstatus/dashboard/overview.md) | -| Schedule Health Summary email delivery. | - [Health Summary Email](/docs/auditor/10.7/admin/healthstatus/summaryemail.md) | -| If some issues encountered while using the product, review the troubleshooting instructions. | - [Troubleshooting](/docs/auditor/10.7/admin/healthstatus/troubleshooting.md) | +| Track changes to the product configuration with Netwrix  self-audit. | - [Self-Audit](/docs/auditor/10.8/admin/healthstatus/selfaudit.md) | +| Review Netwrix Auditor System Health event log. | - [Netwrix Auditor Health Log](/docs/auditor/10.8/admin/healthstatus/dashboard/healthlog.md) | +| Review Health status dashboard. | - [Health Status Dashboard](/docs/auditor/10.8/admin/healthstatus/dashboard/overview.md) | +| Schedule Health Summary email delivery. | - [Health Summary Email](/docs/auditor/10.8/admin/healthstatus/summaryemail.md) | +| If some issues encountered while using the product, review the troubleshooting instructions. | - [Troubleshooting](/docs/auditor/10.8/admin/healthstatus/troubleshooting.md) | diff --git a/docs/auditor/10.8/requirements/console.md b/docs/auditor/10.8/requirements/console.md index 211d51a710..42988e68b0 100644 --- a/docs/auditor/10.8/requirements/console.md +++ b/docs/auditor/10.8/requirements/console.md @@ -33,7 +33,7 @@ virtualization platform, in particular: - Microsoft Hyper-V - Nutanix AHV -Auditor supports only Windows OS versions listed in the [Software Requirements](/docs/auditor/10.7/requirements/software.md) topic. +Auditor supports only Windows OS versions listed in the [Software Requirements](/docs/auditor/10.8/requirements/software.md) topic. Netwrix Auditor and SQL Server instance will be deployed on different servers. @@ -47,7 +47,7 @@ Requirements below apply to Netwrix Auditor server. | Others | — | — | Network capacity 1 Gbit | Network capacity 1 Gbit | \* — ARs stands for Activity Records, that is, Netwrix-compatible format for the audit data. See -[Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md)[Activity Records](/docs/auditor/10.7/api/postdata/activityrecords.md) +[Activity Records](/docs/auditor/10.8/api/postdata/activityrecords.md)[Activity Records](/docs/auditor/10.8/api/postdata/activityrecords.md) for more details. \*\* — By default, the Long-Term Archive and working folder are stored on a system drive. To reduce @@ -55,8 +55,8 @@ the impact on the system drive in large and xlarge environments, Netwrix recomme Long-Term Archive and working folder on a data drive and plan for their capacity accordingly. For details, see: -- [File-Based Repository for Long-Term Archive](/docs/auditor/10.7/requirements/longtermarchive.md) -- [Working Folder](/docs/auditor/10.7/requirements/workingfolder.md) +- [File-Based Repository for Long-Term Archive](/docs/auditor/10.8/requirements/longtermarchive.md) +- [Working Folder](/docs/auditor/10.8/requirements/workingfolder.md) Netwrix Auditor informs you if you are running out of space on a system disk where the Long-Term Archive is stored by default. You will see related events in the Health log once the free disk space @@ -68,7 +68,7 @@ following Microsoft article: [SQL Server: Hardware and software requirements](https://learn.microsoft.com/en-us/sql/sql-server/install/hardware-and-software-requirements-for-installing-sql-server-2019?view=sql-server-ver16) **NOTE:** In larger environments, SQL Server may become underprovisioned on resources. For -troubleshooting such cases, refer to the [Sample Deployment Scenarios](/docs/auditor/10.7/requirements/deploymentscenarios.md) +troubleshooting such cases, refer to the [Sample Deployment Scenarios](/docs/auditor/10.8/requirements/deploymentscenarios.md) topic. Additional Sizing Information for File Data Source diff --git a/docs/auditor/10.8/requirements/deploymentscenarios.md b/docs/auditor/10.8/requirements/deploymentscenarios.md index 7bc567f001..568c46dbf6 100644 --- a/docs/auditor/10.8/requirements/deploymentscenarios.md +++ b/docs/auditor/10.8/requirements/deploymentscenarios.md @@ -51,7 +51,7 @@ users): server and client components. 2. When prompted to configure the Audit database settings, proceed with installing SQL Server Express Edition with Advanced Services on the same VM. See the - [SQL Server Reporting Services](/docs/auditor/10.7/requirements/sqlserverreportingservice.md) topic for additional information. + [SQL Server Reporting Services](/docs/auditor/10.8/requirements/sqlserverreportingservice.md) topic for additional information. Alternatively, you can install Netwrix Auditor as a virtual appliance on your VMware vSphere or Hyper-V virtualization server. For more information on this deployment option, refer to the @@ -86,11 +86,11 @@ users, approximately up to 1 million of activity records generated per day): Auditor clients on the remote Windows machines. Client-server connection requires user sign-in. You can automate this process, as described in - [Automate Sign-in to the Client](/docs/auditor/10.7/install/automatelogin.md) of Online Help. + [Automate Sign-in to the Client](/docs/auditor/10.8/install/automatelogin.md) of Online Help. 3. When prompted to configure the Audit database settings, proceed with installing SQL Server Express Edition with Advanced Services. See the - [SQL Server Reporting Services](/docs/auditor/10.7/requirements/sqlserverreportingservice.md) topic for additional information. + [SQL Server Reporting Services](/docs/auditor/10.8/requirements/sqlserverreportingservice.md) topic for additional information. Alternatively, you can install Netwrix Auditor as a virtual appliance on your VMware vSphere or Hyper-V virtualization server. For more information on this deployment option, refer to the @@ -116,7 +116,7 @@ approximately 1+ million of activity records generated per day): Auditor clients on the remote Windows machines. Client-server connection requires user sign-in. You can automate this process, as described in - the [Automate Sign-in to the Client](/docs/auditor/10.7/install/automatelogin.md) section of Online Help. + the [Automate Sign-in to the Client](/docs/auditor/10.8/install/automatelogin.md) section of Online Help. 3. Prepare Microsoft SQL Server meeting the following requirements: @@ -155,7 +155,7 @@ more than 20 000 users (10+ million of activity records generated per day): Auditor clients on the remote Windows machines. Client-server connection requires user sign-in. You can automate this process, as described in - the [Automate Sign-in to the Client](/docs/auditor/10.7/install/automatelogin.md) section. + the [Automate Sign-in to the Client](/docs/auditor/10.8/install/automatelogin.md) section. 3. Prepare a machine for Microsoft SQL Server meeting the following requirements: diff --git a/docs/auditor/10.8/requirements/gmsa.md b/docs/auditor/10.8/requirements/gmsa.md index bc75c087d9..b569f7d577 100644 --- a/docs/auditor/10.8/requirements/gmsa.md +++ b/docs/auditor/10.8/requirements/gmsa.md @@ -29,17 +29,17 @@ Currently, gMSA is supported: - User Activity (including User Activity Video Recording) - Windows Server - See the [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional + See the [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information about supported data sources. **NOTE:** If you are using a gMSA account for Active Directory collection consider that the Active Directory Object Restore tool will not work. - As an account for accessing Long-Term archive. See the - [File-Based Repository for Long-Term Archive](/docs/auditor/10.7/requirements/longtermarchive.md) topic for additional + [File-Based Repository for Long-Term Archive](/docs/auditor/10.8/requirements/longtermarchive.md) topic for additional information. - As an account for accessing Audit Databases. See - [Requirements for SQL Server to Store Audit Data](/docs/auditor/10.7/requirements/sqlserver.md) topic for additional information. + [Requirements for SQL Server to Store Audit Data](/docs/auditor/10.8/requirements/sqlserver.md) topic for additional information. **CAUTION:** In case of accessing Audit Databases using gMSA account, SSRS-based reports will not work. @@ -165,36 +165,36 @@ account, depending on what purpose a gMSA account will be used for. Local Admins group on the Auditor Server and assign the following rights and permissions, depending on the data source you want to collect data from: - - [Permissions for Active Directory Auditing](/docs/auditor/10.7/configuration/activedirectory/permissions.md) - - [Permissions for Group Policy Auditing ](/docs/auditor/10.7/configuration/grouppolicy/permissions.md) - - [Permissions for Logon Activity Auditing ](/docs/auditor/10.7/configuration/logonactivity/permissions.md) - - [Permissions for Windows File Server Auditing](/docs/auditor/10.7/configuration/fileservers/windows/permissions.md) - - [Permissions for SharePoint Auditing](/docs/auditor/10.7/configuration/sharepoint/permissions.md) - - [Permissions for SQL Server Auditing ](/docs/auditor/10.7/configuration/sqlserver/permissions.md) - - [Permissions for Windows Server Auditing ](/docs/auditor/10.7/configuration/windowsserver/permissions.md) + - [Permissions for Active Directory Auditing](/docs/auditor/10.8/configuration/activedirectory/permissions.md) + - [Permissions for Group Policy Auditing ](/docs/auditor/10.8/configuration/grouppolicy/permissions.md) + - [Permissions for Logon Activity Auditing ](/docs/auditor/10.8/configuration/logonactivity/permissions.md) + - [Permissions for Windows File Server Auditing](/docs/auditor/10.8/configuration/fileservers/windows/permissions.md) + - [Permissions for SharePoint Auditing](/docs/auditor/10.8/configuration/sharepoint/permissions.md) + - [Permissions for SQL Server Auditing ](/docs/auditor/10.8/configuration/sqlserver/permissions.md) + - [Permissions for Windows Server Auditing ](/docs/auditor/10.8/configuration/windowsserver/permissions.md) _Remember,_ - [Permissions for Windows Server Auditing ](/docs/auditor/10.7/configuration/windowsserver/permissions.md) + [Permissions for Windows Server Auditing ](/docs/auditor/10.8/configuration/windowsserver/permissions.md) - If you are going to use a gMSA to access Long-Term archive, assign the roles and permissions required for a custom account: - - [File-Based Repository for Long-Term Archive](/docs/auditor/10.7/requirements/longtermarchive.md) + - [File-Based Repository for Long-Term Archive](/docs/auditor/10.8/requirements/longtermarchive.md) _Remember,_ that you can use custom (gMSA) account only if your Long-Term archive stored on a file share. - If you are going to use a gMSA to access Audit Database, assign the required roles: - - [Requirements for SQL Server to Store Audit Data](/docs/auditor/10.7/requirements/sqlserver.md) + - [Requirements for SQL Server to Store Audit Data](/docs/auditor/10.8/requirements/sqlserver.md) _Remember,_ that a gMSA account cannot access SSRS due to Microsoft restrictions. - If you are going to use a gMSA as a data collection accoun for User Activity or User Activity Video Recording, refer to the following topics: - - [User Activity](/docs/auditor/10.7/configuration/useractivity/overview.md) - - [Configure Video Recordings Playback Settings](/docs/auditor/10.7/configuration/useractivity/videorecordings.md) + - [User Activity](/docs/auditor/10.8/configuration/useractivity/overview.md) + - [Configure Video Recordings Playback Settings](/docs/auditor/10.8/configuration/useractivity/videorecordings.md) Now you can use a gMSA account as one of the Auditor Service Account. @@ -210,7 +210,7 @@ This topic contains instructions on how to apply a gMSA as one of the Auditor Se To process the corresponding monitored items using gMSA, you can specify this account in the monitored plan properties. See the -[Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) topic for additional information. +[Create a New Monitoring Plan](/docs/auditor/10.8/admin/monitoringplans/create.md) topic for additional information. Follow the steps to set a custom account in the monitored item properties. @@ -219,17 +219,17 @@ Follow the steps to set a custom account in the monitored item properties. **Step 2 –** On the **General** tab, under **Specify account for collecting data**, select **gMSA** option. -![Monitored Item Properties page](/images/auditor/10.7/requirements/gmsa.webp) +![Monitored Item Properties page](/images/auditor/10.8/requirements/gmsa.webp) See the -[Add Items for Monitoring](/docs/auditor/10.7/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic +[Add Items for Monitoring](/docs/auditor/10.8/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic for additional information. ### Apply gMSA to Access Long-Term Archive To write data to the Long-Term Archive and upload report subscriptions to shared folders, you can specify this account as a custom account in the Long-Term Archive settings. See the -[Long-Term Archive](/docs/auditor/10.7/admin/settings/longtermarchive.md) topic for additional information. +[Long-Term Archive](/docs/auditor/10.8/admin/settings/longtermarchive.md) topic for additional information. **NOTE:** For a custom account or a gMSA one, consider that you can use the account for the Long-Term Archive based on a file share @@ -238,5 +238,5 @@ Long-Term Archive based on a file share To access Audit Database, generate reports and run interactive search queries, you can specify this account under the 'Specify custom connection parameters in your common database plan settings. See -the [Fine-Tune Your Plan and Edit Settings](/docs/auditor/10.7/admin/monitoringplans/finetune.md) topic for +the [Fine-Tune Your Plan and Edit Settings](/docs/auditor/10.8/admin/monitoringplans/finetune.md) topic for additional information. diff --git a/docs/auditor/10.8/requirements/longtermarchive.md b/docs/auditor/10.8/requirements/longtermarchive.md index 60b17dbe71..3c8da0d0b8 100644 --- a/docs/auditor/10.8/requirements/longtermarchive.md +++ b/docs/auditor/10.8/requirements/longtermarchive.md @@ -29,7 +29,7 @@ viewing the Long-Term Archive widget of the Health Status dashboard, click Open **Step 2 –** Click Modify. -![archive_modify_settings_thumb_0_0](/images/auditor/10.7/requirements/archive_modify_settings_thumb_0_0.webp) +![archive_modify_settings_thumb_0_0](/images/auditor/10.8/requirements/archive_modify_settings_thumb_0_0.webp) **Step 3 –** Enter new path or browse for the required folder. @@ -62,10 +62,10 @@ If the retention period is set to **0**, the following logic will be applied: To examine the repository capacity and daily growth, use the Long-Term Archive Capacity of the Health Status dashboard. -![healthstatusdashboard_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/healthstatusdashboard_thumb_0_0.webp) +![healthstatusdashboard_thumb_0_0](/images/auditor/10.8/admin/healthstatus/dashboard/healthstatusdashboard_thumb_0_0.webp) To estimate the amount of activity records collected and stored to the repository day by day, use -the [Activity Records Statistics](/docs/auditor/10.7/admin/healthstatus/dashboard/activityrecordstatistics.md) +the [Activity Records Statistics](/docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md) widget. Click View details to see how many activity records were produced by each data source, collected and saved to the Long-Term Archive and to the database. @@ -106,7 +106,7 @@ The custom account must be granted the following rights and permissions: - Create files / write data folder permission Subscriptions created in the Auditor client  are uploaded to file servers under the Long-Term - Archive service account as well. See the [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) + Archive service account as well. See the [Subscriptions](/docs/auditor/10.8/admin/subscriptions/overview.md) topic for additional information. ### Assign Permissions on the Long-Term Archive Folder @@ -189,5 +189,5 @@ Archive capacity. The widget displays the current size and daily increase of the and the remaining free space on the target drive. To open the Long-Term Archive settings, click the corresponding link. Then you will be able to -adjust the settings as necessary. See the [Long-Term Archive](/docs/auditor/10.7/admin/settings/longtermarchive.md) +adjust the settings as necessary. See the [Long-Term Archive](/docs/auditor/10.8/admin/settings/longtermarchive.md) topic for additional information. diff --git a/docs/auditor/10.8/requirements/overview.md b/docs/auditor/10.8/requirements/overview.md index bec7dc29a5..d984e37bed 100644 --- a/docs/auditor/10.8/requirements/overview.md +++ b/docs/auditor/10.8/requirements/overview.md @@ -9,17 +9,17 @@ sidebar_position: 20 This topic provides the requirements for the server where Netwrix Auditor will be installed. See the following topics for additional information: -- [Supported Data Sources](/docs/auditor/10.7/requirements/supporteddatasources/supporteddatasources.md) -- [Hardware Requirements](/docs/auditor/10.7/requirements/console.md) -- [Software Requirements](/docs/auditor/10.7/requirements/software.md) -- [Requirements for SQL Server to Store Audit Data](/docs/auditor/10.7/requirements/sqlserver.md) +- [Supported Data Sources](/docs/auditor/10.8/requirements/supporteddatasources/supporteddatasources.md) +- [Hardware Requirements](/docs/auditor/10.8/requirements/console.md) +- [Software Requirements](/docs/auditor/10.8/requirements/software.md) +- [Requirements for SQL Server to Store Audit Data](/docs/auditor/10.8/requirements/sqlserver.md) ## Architecture Overview Netwrix Auditor provides comprehensive auditing of applications, platforms and storage systems. The product architecture and components interactions are shown in the figure below. -![auditorarchitecture_thumb_0_0](/images/auditor/10.7/requirements/auditorarchitecture_thumb_0_0.webp) +![auditorarchitecture_thumb_0_0](/images/auditor/10.8/requirements/auditorarchitecture_thumb_0_0.webp) - Netwrix Auditor Server — the central component that handles the collection, transfer and processing of audit data from the various data sources (audited systems). Data from the sources @@ -61,7 +61,7 @@ The general workflow stages are as follows: consolidate data from multiple independent sources (event logs, configuration snapshots, change history records, etc.). This capability is implemented with Netwrix Auditor Server and Integration API. - - See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information on custom data + - See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information on custom data source processing workflow. - Audit data is stored to the Audit databases and the repository (Long-Term Archive) and preserved diff --git a/docs/auditor/10.8/requirements/ports.md b/docs/auditor/10.8/requirements/ports.md index e553096ae4..018ece8460 100644 --- a/docs/auditor/10.8/requirements/ports.md +++ b/docs/auditor/10.8/requirements/ports.md @@ -46,27 +46,27 @@ your organization policy requires you to provide a justification for each partic the following for a full list of ports to be opened on the computer where Auditor Server is going to be installed and on your target servers. -- [Active Directory Ports](/docs/auditor/10.7/configuration/activedirectory/ports.md) -- [AD FS Ports](/docs/auditor/10.7/configuration/activedirectoryfederatedservices/ports.md) -- [Microsoft Entra ID Ports](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/ports.md) -- [Dell Data Storage Ports](/docs/auditor/10.7/configuration/fileservers/delldatastorage/ports.md) -- [Exchange Ports](/docs/auditor/10.7/configuration/exchange/ports.md) -- [Exchange Online Ports](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/ports.md) -- [Group Policy Ports](/docs/auditor/10.7/configuration/grouppolicy/ports.md) -- [Integration API Ports](/docs/auditor/10.7/api/ports.md) -- [ Logon Activity Ports](/docs/auditor/10.7/configuration/logonactivity/ports.md) -- [Nutanix Ports](/docs/auditor/10.7/configuration/fileservers/nutanix/ports.md) -- [Oracle Database Ports](/docs/auditor/10.7/configuration/oracle/ports.md) -- [Qumulo Ports](/docs/auditor/10.7/configuration/fileservers/qumulo/ports.md) -- [SharePoint Ports](/docs/auditor/10.7/configuration/sharepoint/ports.md) -- [SharePoint Online Ports](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/ports.md) -- [SQL Server Ports](/docs/auditor/10.7/configuration/sqlserver/ports.md) -- [Synology Ports](/docs/auditor/10.7/configuration/fileservers/synology/ports.md) -- [Teams Ports](/docs/auditor/10.7/configuration/microsoft365/teams/ports.md) -- [User Activity Ports](/docs/auditor/10.7/configuration/useractivity/ports.md) -- [VMware Ports](/docs/auditor/10.7/configuration/vmware/ports.md) -- [Windows File Server Ports](/docs/auditor/10.7/configuration/fileservers/windows/ports.md) -- [Windows Server Ports](/docs/auditor/10.7/configuration/windowsserver/ports.md) +- [Active Directory Ports](/docs/auditor/10.8/configuration/activedirectory/ports.md) +- [AD FS Ports](/docs/auditor/10.8/configuration/activedirectoryfederatedservices/ports.md) +- [Microsoft Entra ID Ports](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/ports.md) +- [Dell Data Storage Ports](/docs/auditor/10.8/configuration/fileservers/delldatastorage/ports.md) +- [Exchange Ports](/docs/auditor/10.8/configuration/exchange/ports.md) +- [Exchange Online Ports](/docs/auditor/10.8/configuration/microsoft365/exchangeonline/ports.md) +- [Group Policy Ports](/docs/auditor/10.8/configuration/grouppolicy/ports.md) +- [Integration API Ports](/docs/auditor/10.8/api/ports.md) +- [ Logon Activity Ports](/docs/auditor/10.8/configuration/logonactivity/ports.md) +- [Nutanix Ports](/docs/auditor/10.8/configuration/fileservers/nutanix/ports.md) +- [Oracle Database Ports](/docs/auditor/10.8/configuration/oracle/ports.md) +- [Qumulo Ports](/docs/auditor/10.8/configuration/fileservers/qumulo/ports.md) +- [SharePoint Ports](/docs/auditor/10.8/configuration/sharepoint/ports.md) +- [SharePoint Online Ports](/docs/auditor/10.8/configuration/microsoft365/sharepointonline/ports.md) +- [SQL Server Ports](/docs/auditor/10.8/configuration/sqlserver/ports.md) +- [Synology Ports](/docs/auditor/10.8/configuration/fileservers/synology/ports.md) +- [Teams Ports](/docs/auditor/10.8/configuration/microsoft365/teams/ports.md) +- [User Activity Ports](/docs/auditor/10.8/configuration/useractivity/ports.md) +- [VMware Ports](/docs/auditor/10.8/configuration/vmware/ports.md) +- [Windows File Server Ports](/docs/auditor/10.8/configuration/fileservers/windows/ports.md) +- [Windows Server Ports](/docs/auditor/10.8/configuration/windowsserver/ports.md) ## Netwrix Auditor Server diff --git a/docs/auditor/10.8/requirements/serviceaccount.md b/docs/auditor/10.8/requirements/serviceaccount.md index da8588a8c1..f8f31fc456 100644 --- a/docs/auditor/10.8/requirements/serviceaccount.md +++ b/docs/auditor/10.8/requirements/serviceaccount.md @@ -10,7 +10,7 @@ Netwrix Auditor uses the following service accounts: | Service account | Description | | --------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Account for data collection | An account used by Netwrix Auditor to collect audit data from the target systems. **NOTE:** For the data collecting account, you should use a different account than the one Auditor is using to access the database. See [Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) for additional information. | -| Audit Database service account | An account used by Netwrix Auditor to write collected audit data to the Audit Database. See [Requirements for SQL Server to Store Audit Data](/docs/auditor/10.7/requirements/sqlserver.md) for additional information. | -| SSRS service account | An account used by Netwrix Auditor to upload data to the Report Server. See [SQL Server Reporting Services](/docs/auditor/10.7/requirements/sqlserverreportingservice.md) for additional information. | -| Long-Term Archive service account | An account used to write data to the Long-Term Archive and upload report subscriptions to shared folders. The LocalSystem account is selected by default. See [File-Based Repository for Long-Term Archive](/docs/auditor/10.7/requirements/longtermarchive.md) for additional information. | +| Account for data collection | An account used by Netwrix Auditor to collect audit data from the target systems. **NOTE:** For the data collecting account, you should use a different account than the one Auditor is using to access the database. See [Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) for additional information. | +| Audit Database service account | An account used by Netwrix Auditor to write collected audit data to the Audit Database. See [Requirements for SQL Server to Store Audit Data](/docs/auditor/10.8/requirements/sqlserver.md) for additional information. | +| SSRS service account | An account used by Netwrix Auditor to upload data to the Report Server. See [SQL Server Reporting Services](/docs/auditor/10.8/requirements/sqlserverreportingservice.md) for additional information. | +| Long-Term Archive service account | An account used to write data to the Long-Term Archive and upload report subscriptions to shared folders. The LocalSystem account is selected by default. See [File-Based Repository for Long-Term Archive](/docs/auditor/10.8/requirements/longtermarchive.md) for additional information. | diff --git a/docs/auditor/10.8/requirements/software.md b/docs/auditor/10.8/requirements/software.md index ad811a7c81..f50c18df4a 100644 --- a/docs/auditor/10.8/requirements/software.md +++ b/docs/auditor/10.8/requirements/software.md @@ -25,13 +25,13 @@ Server, in the monitored environment, or in both locations. | - AD FS | _On the computer where_ Auditor _Server_ _is installed:_ - Windows Remote Management must be configured to allow remote PowerShell usage. For that, set up the **TrustedHosts** list: - to include all AD FS servers, use the following cmdlet: `Set-Item wsman:\localhost\Client\TrustedHosts -value '*' -Force;` - to include specific AD FS servers (monitored items), do the following: 1. Use Get cmdlet to obtain the existing **TrustedHosts** list. 2. If necessary, add the IP addresses of required AD FS servers to existing list (use comma as a separator). 3. Provide the updated list to the cmdlet as a parameter. For example: `Set-Item wsman:\localhost\Client\TrustedHosts -value '172.28.57.240,172.28.57.127' -Force;` See the following Microsoft article [Installation and configuration for Windows Remote Management](https://docs.microsoft.com/en-us/windows/win32/winrm/installation-and-configuration-for-windows-remote-management) for additional information about TrustedHosts. | | - Windows Server (with enabled network traffic compression) - User Activity | _In the monitored environment:_ - .NET Framework 4.8 and above. See the following Microsoft article for additional information about .Net Framework installer redistributable: [Microsoft .NET Framework 4.8 offline installer for Windows.](https://support.microsoft.com/en-us/topic/microsoft-net-framework-4-8-offline-installer-for-windows-9d23f658-3b97-68ab-d013-aa3c3e7495e0) | | - Microsoft Entra ID Ports - SharePoint Online | Usually, there is no need in any additional components for data collection. | -| - Oracle Database | Oracle Database 12c and above: _On the computer where_ Auditor _Server_ _is installed:_ - Oracle Instant Client. - Download the appropriate package from Oracle website: [Instant Client Packages](https://www.oracle.com/database/technologies/instant-client.html). Netwrix recommends installing the latest available version (Netwrix Auditor is compatible with version 12 and above). - Install, following the instructions, for example,[ Instant Client Installation for Microsoft Windows 64-bit](https://www.oracle.com/database/technologies/instant-client/winx64-64-downloads.html#instant-client-installation-for-microsoft-windows-64-bit). Check your Visual Studio Redistributable version. Applicable packages for each Oracle Database version with downloading links are listed in the installation instructions: [Instant Client Installation for Microsoft Windows 64-bit](https://www.oracle.com/database/technologies/instant-client/winx64-64-downloads.html#instant-client-installation-for-microsoft-windows-64-bit). Oracle Database 11g: Auditor provides limited support of Oracle Database 11g. See the [Considerations for Oracle Database 11g](/docs/auditor/10.7/configuration/oracle/overview.md#considerations-for-oracle-database-11g) topic for additional information. _On the computer where_ Auditor _Server_ _is installed:_ - [Microsoft Visual C++ 2010 Redistributable Package](https://www.microsoft.com/en-us/download/details.aspx?id=14632)—can be installed automatically during the monitoring plan creation. - Oracle Data Provider for .NET and Oracle Instant Client Netwrix recommends the following setup steps: 1. Download the [64-bit Oracle Data Access Components 12c Release 4 (12.1.0.2.4) for Windows x64 (ODAC121024_x64.zip)](http://www.oracle.com/technetwork/database/windows/downloads/index-090165.html) package. 2. Run the setup and select the Data Provider for .NET checkbox. Oracle Instant Client will be installed, too. 3. On the ODP.NET (Oracle Data Provider) step make sure the Configure ODP.NET and/or Oracle Providers for ASP.Net at machine-wide level checkbox is selected . | +| - Oracle Database | Oracle Database 12c and above: _On the computer where_ Auditor _Server_ _is installed:_ - Oracle Instant Client. - Download the appropriate package from Oracle website: [Instant Client Packages](https://www.oracle.com/database/technologies/instant-client.html). Netwrix recommends installing the latest available version (Netwrix Auditor is compatible with version 12 and above). - Install, following the instructions, for example,[ Instant Client Installation for Microsoft Windows 64-bit](https://www.oracle.com/database/technologies/instant-client/winx64-64-downloads.html#instant-client-installation-for-microsoft-windows-64-bit). Check your Visual Studio Redistributable version. Applicable packages for each Oracle Database version with downloading links are listed in the installation instructions: [Instant Client Installation for Microsoft Windows 64-bit](https://www.oracle.com/database/technologies/instant-client/winx64-64-downloads.html#instant-client-installation-for-microsoft-windows-64-bit). Oracle Database 11g: Auditor provides limited support of Oracle Database 11g. See the [Considerations for Oracle Database 11g](/docs/auditor/10.8/configuration/oracle/overview.md#considerations-for-oracle-database-11g) topic for additional information. _On the computer where_ Auditor _Server_ _is installed:_ - [Microsoft Visual C++ 2010 Redistributable Package](https://www.microsoft.com/en-us/download/details.aspx?id=14632)—can be installed automatically during the monitoring plan creation. - Oracle Data Provider for .NET and Oracle Instant Client Netwrix recommends the following setup steps: 1. Download the [64-bit Oracle Data Access Components 12c Release 4 (12.1.0.2.4) for Windows x64 (ODAC121024_x64.zip)](http://www.oracle.com/technetwork/database/windows/downloads/index-090165.html) package. 2. Run the setup and select the Data Provider for .NET checkbox. Oracle Instant Client will be installed, too. 3. On the ODP.NET (Oracle Data Provider) step make sure the Configure ODP.NET and/or Oracle Providers for ASP.Net at machine-wide level checkbox is selected . | | - Group Policy | _On the computer where_ Auditor _Server_ _is installed:_ - Group Policy Management Console. Download Remote Server Administration Tools that include GPMC for: - [Windows 8.1](http://www.microsoft.com/en-us/download/details.aspx?id=39296) - [Windows 10](https://www.microsoft.com/en-us/download/details.aspx?id=45520) - For Windows Server 2012 R2/2016, Group Policy Management is turned on as a Windows feature. | ## Using SSRS-based Reports SQL Server Reporting Services are needed for this kind of reports. See the -[Requirements for SQL Server to Store Audit Data](/docs/auditor/10.7/requirements/sqlserver.md) topic for additional information. If +[Requirements for SQL Server to Store Audit Data](/docs/auditor/10.8/requirements/sqlserver.md) topic for additional information. If you plan to export or print such reports, check the requirements below. **NOTE:** Please note that if you are going to use SQL Express plan, do not install SSRS and Auditor @@ -82,7 +82,7 @@ You can deploy Netwrix Auditor on the VM running on any of the following hypervi - Microsoft Hyper-V - Nutanix AHV (Acropolis Hypervisor Virtualization) 20180425.199 -See the [Virtual Deployment Overview](/docs/auditor/10.7/install/virtualappliance/overview.md) topic for additional +See the [Virtual Deployment Overview](/docs/auditor/10.8/install/virtualappliance/overview.md) topic for additional information. ### Domains and Trusts @@ -117,7 +117,7 @@ small infrastructures, producing only several thousands of activity records per scenario, you only deploy Auditor Server and default client, selecting Full installation option during the product setup. -![na_setup_select_type_thumb_0_0](/images/auditor/10.7/requirements/na_setup_select_type_thumb_0_0.webp) +![na_setup_select_type_thumb_0_0](/images/auditor/10.8/requirements/na_setup_select_type_thumb_0_0.webp) If you plan to implement this scenario in bigger environments, consider hardware requirements listed in the Auditor documentation. @@ -133,7 +133,7 @@ product setup. **Step 2 –** Then install as many clients as you need, running the setup on the remote machines and selecting Client installation during the setup. Alternatively, you can install Auditor client using -Group Policy. See the [Install Client via Group Policy](/docs/auditor/10.7/install/viagrouppolicy.md) topic for +Group Policy. See the [Install Client via Group Policy](/docs/auditor/10.8/install/viagrouppolicy.md) topic for additional information. Default local client will be always installed together with the Auditor in all scenarios. diff --git a/docs/auditor/10.8/requirements/sqlserver.md b/docs/auditor/10.8/requirements/sqlserver.md index 1a615a4ca6..53639fc8e1 100644 --- a/docs/auditor/10.8/requirements/sqlserver.md +++ b/docs/auditor/10.8/requirements/sqlserver.md @@ -56,7 +56,7 @@ versions should be 2012 R2 or later). - You will be prompted to configure the default SQL Server instance when you create the first monitoring plan; also, you can specify it Netwrix Auditor settings. - You can configure Netwrix Auditor to use an existing instance of SQL Server, or deploy a new - instance, as described in the [Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) + instance, as described in the [Create a New Monitoring Plan](/docs/auditor/10.8/admin/monitoringplans/create.md) topic. For evaluation and PoC projects you can deploy Microsoft SQL Server 2016 SP2 Express Edition with @@ -73,7 +73,7 @@ produced, so plan for SQL Server Standard or Enterprise edition (Express edition Netwrix Auditor supports automated size calculation for all its databases in total, displaying the result, in particular, in the -[Database Statistics](/docs/auditor/10.7/admin/healthstatus/dashboard/databasestatistics.md) of the Health Status +[Database Statistics](/docs/auditor/10.8/admin/healthstatus/dashboard/databasestatistics.md) of the Health Status dashboard. This feature, however, is supported only for SQL Server 2012 SP3 and later. ### Databases @@ -123,7 +123,7 @@ Consider the following: By the way of example, this section provides instructions on how to: -- [SQL Server Reporting Services](/docs/auditor/10.7/requirements/sqlserverreportingservice.md) +- [SQL Server Reporting Services](/docs/auditor/10.8/requirements/sqlserverreportingservice.md) For detailed information on installing other versions/editions, refer to Microsoft website. @@ -154,7 +154,7 @@ When planning for SQL Server that will host Auditor databases, consider the foll instance. Such instances may have a lot of maintenance plans or scripts running that may affect data uploaded by the product. The product databases are designed for reporting and searching and do not require maintenance or backup. For the long-term data storage, Netwrix Auditor uses Long-Term -Archive. See [File-Based Repository for Long-Term Archive](/docs/auditor/10.7/requirements/longtermarchive.md) for additional +Archive. See [File-Based Repository for Long-Term Archive](/docs/auditor/10.8/requirements/longtermarchive.md) for additional information. If you select to set up a new SQL Server instance, the current user account (this should be a member @@ -174,7 +174,7 @@ specify the data drive for that purpose (by default, system drive is used). 2. dbcreator server-level role This account can be specified when you configure the - [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) settings. + [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) settings. ## Database Sizing @@ -188,13 +188,13 @@ For database sizing, it is recommended to estimate: To estimate the number of the activity records produced by your data sources, collected and saved by Auditor during the week, you can use the Activity records by date widget of the Health Status dashboard. See the -[Activity Records Statistics](/docs/auditor/10.7/admin/healthstatus/dashboard/activityrecordstatistics.md) topic for +[Activity Records Statistics](/docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md) topic for additional information. Auditor supports automated size calculation for all its databases in total, displaying the result, in particular, in the Database Statistics widget of the Health Status dashboard. To estimate current capacity and daily growth for each database, you can click View details and examine information in -the table. See the [Database Statistics](/docs/auditor/10.7/admin/healthstatus/dashboard/databasestatistics.md) +the table. See the [Database Statistics](/docs/auditor/10.8/admin/healthstatus/dashboard/databasestatistics.md) topic for additional information. This feature is supported only for SQL Server 2012 SP3 and later. @@ -246,7 +246,7 @@ Follow the steps to change database retention after the product deployment. **Step 1 –** In the Auditor main screen, select Settings > Audit Database. -![audit_db_settings](/images/auditor/10.7/requirements/audit_db_settings.webp) +![audit_db_settings](/images/auditor/10.8/requirements/audit_db_settings.webp) **Step 2 –** In the dialog displayed, make sure the Clear stale data when a database retention period is exceeded: is set to ON, then click Modify to specify the required retention period (in @@ -260,7 +260,7 @@ This is the account that Auditor uses to write the collected audit data to the a Starting with version 9.96, you can use Group Managed Service Account (gMSA) for that purpose. _Remember,_ gMSA cannot be used to access SSRS. Use a standard account for that. See the -[SQL Server Reporting Services](/docs/auditor/10.7/requirements/sqlserverreportingservice.md) topic for additional information. +[SQL Server Reporting Services](/docs/auditor/10.8/requirements/sqlserverreportingservice.md) topic for additional information. This account must be granted the **Database owner (`db_owner`)** role and the **dbcreator** server role on the SQL Server instance hosting your audit databases. diff --git a/docs/auditor/10.8/requirements/supporteddatasources/monitoredobjecttypes.md b/docs/auditor/10.8/requirements/supporteddatasources/monitoredobjecttypes.md index cef1ac3231..beb3ad50ba 100644 --- a/docs/auditor/10.8/requirements/supporteddatasources/monitoredobjecttypes.md +++ b/docs/auditor/10.8/requirements/supporteddatasources/monitoredobjecttypes.md @@ -9,35 +9,35 @@ sidebar_position: 10 Netwrix Auditor monitored object types, actions, attributes and components for each data source are located in the following topics: -- [Active Directory](/docs/auditor/10.7/configuration/activedirectory/overview.md) -- [AD FS](/docs/auditor/10.7/configuration/activedirectoryfederatedservices/overview.md) -- [Exchange](/docs/auditor/10.7/configuration/exchange/overview.md) -- [File Servers](/docs/auditor/10.7/configuration/fileservers/overview.md) +- [Active Directory](/docs/auditor/10.8/configuration/activedirectory/overview.md) +- [AD FS](/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md) +- [Exchange](/docs/auditor/10.8/configuration/exchange/overview.md) +- [File Servers](/docs/auditor/10.8/configuration/fileservers/overview.md) - - [Dell Data Storage](/docs/auditor/10.7/configuration/fileservers/delldatastorage/overview.md) - - [Dell Isilon/PowerScale](/docs/auditor/10.7/configuration/fileservers/dellisilon/overview.md) - - [NetApp Data ONTAP](/docs/auditor/10.7/configuration/fileservers/netappcmode/overview.md) - - [Nutanix](/docs/auditor/10.7/configuration/fileservers/nutanix/overview.md) - - [Qumulo](/docs/auditor/10.7/configuration/fileservers/qumulo/overview.md) - - [Synology](/docs/auditor/10.7/configuration/fileservers/synology/overview.md) - - [Windows File Servers](/docs/auditor/10.7/configuration/fileservers/windows/overview.md) + - [Dell Data Storage](/docs/auditor/10.8/configuration/fileservers/delldatastorage/overview.md) + - [Dell Isilon/PowerScale](/docs/auditor/10.8/configuration/fileservers/dellisilon/overview.md) + - [NetApp Data ONTAP](/docs/auditor/10.8/configuration/fileservers/netappcmode/overview.md) + - [Nutanix](/docs/auditor/10.8/configuration/fileservers/nutanix/overview.md) + - [Qumulo](/docs/auditor/10.8/configuration/fileservers/qumulo/overview.md) + - [Synology](/docs/auditor/10.8/configuration/fileservers/synology/overview.md) + - [Windows File Servers](/docs/auditor/10.8/configuration/fileservers/windows/overview.md) -- [Group Policy](/docs/auditor/10.7/configuration/grouppolicy/overview.md) -- [Logon Activity](/docs/auditor/10.7/configuration/logonactivity/overview.md) -- [Microsoft 365](/docs/auditor/10.7/configuration/microsoft365/overview.md) +- [Group Policy](/docs/auditor/10.8/configuration/grouppolicy/overview.md) +- [Logon Activity](/docs/auditor/10.8/configuration/logonactivity/overview.md) +- [Microsoft 365](/docs/auditor/10.8/configuration/microsoft365/overview.md) - - [Exchange Online](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/overview.md) - - [Microsoft Entra ID](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/overview.md) - - [SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/overview.md) - - [MS Teams](/docs/auditor/10.7/configuration/microsoft365/teams/overview.md) + - [Exchange Online](/docs/auditor/10.8/configuration/microsoft365/exchangeonline/overview.md) + - [Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/overview.md) + - [SharePoint Online](/docs/auditor/10.8/configuration/microsoft365/sharepointonline/overview.md) + - [MS Teams](/docs/auditor/10.8/configuration/microsoft365/teams/overview.md) -- [Network Devices](/docs/auditor/10.7/configuration/networkdevices/overview.md) -- [Oracle Database](/docs/auditor/10.7/configuration/oracle/overview.md) -- [SharePoint](/docs/auditor/10.7/configuration/sharepoint/overview.md) -- [SQL Server](/docs/auditor/10.7/configuration/sqlserver/overview.md) -- [User Activity](/docs/auditor/10.7/configuration/useractivity/overview.md) -- [VMware](/docs/auditor/10.7/configuration/vmware/overview.md) -- [Windows Server](/docs/auditor/10.7/configuration/windowsserver/overview.md) +- [Network Devices](/docs/auditor/10.8/configuration/networkdevices/overview.md) +- [Oracle Database](/docs/auditor/10.8/configuration/oracle/overview.md) +- [SharePoint](/docs/auditor/10.8/configuration/sharepoint/overview.md) +- [SQL Server](/docs/auditor/10.8/configuration/sqlserver/overview.md) +- [User Activity](/docs/auditor/10.8/configuration/useractivity/overview.md) +- [VMware](/docs/auditor/10.8/configuration/vmware/overview.md) +- [Windows Server](/docs/auditor/10.8/configuration/windowsserver/overview.md) Review the list of actions audited and reported by Netwrix Auditor. Actions vary depending on the data source and the object type. diff --git a/docs/auditor/10.8/requirements/supporteddatasources/supporteddatasources.md b/docs/auditor/10.8/requirements/supporteddatasources/supporteddatasources.md index e05ddb9c92..14ddbd9afc 100644 --- a/docs/auditor/10.8/requirements/supporteddatasources/supporteddatasources.md +++ b/docs/auditor/10.8/requirements/supporteddatasources/supporteddatasources.md @@ -19,7 +19,7 @@ Auditor supports monitoring the following domain controller operating system ver - Windows Server 2012 R2 - Windows Server 2012 -See the [Active Directory](/docs/auditor/10.7/configuration/activedirectory/overview.md) topic for additional +See the [Active Directory](/docs/auditor/10.8/configuration/activedirectory/overview.md) topic for additional information. ## Active Directory Federation Services (AD FS) @@ -30,7 +30,7 @@ Auditor supports monitoring the following AD FS operating system versions: - AD FS 4.0 – Windows Server 2016 - AD FS 3.0 – Windows Server 2012 R2 -See the [AD FS](/docs/auditor/10.7/configuration/activedirectoryfederatedservices/overview.md) topic for additional +See the [AD FS](/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md) topic for additional information. ## Exchange @@ -41,7 +41,7 @@ Auditor supports monitoring the following Exchange Server versions: - Microsoft Exchange Server 2016 - Microsoft Exchange Server 2013 -See the [Exchange](/docs/auditor/10.7/configuration/exchange/overview.md) topic for additional information. +See the [Exchange](/docs/auditor/10.8/configuration/exchange/overview.md) topic for additional information. ## File Servers @@ -63,7 +63,7 @@ Auditor supports monitoring the following device versions: **NOTE:** Only CIFS configuration is supported. -See the [Dell Data Storage](/docs/auditor/10.7/configuration/fileservers/delldatastorage/overview.md) topic for +See the [Dell Data Storage](/docs/auditor/10.8/configuration/fileservers/delldatastorage/overview.md) topic for additional information. Dell Isilon/PowerScale @@ -79,7 +79,7 @@ configuration access only. Current data should be stored in other access zones. [Isilon OneFS 8.2.1 CLI Administration Guide](https://www.dellemc.com/en-us/collaterals/unauth/technical-guides-support-information/2019/09/docu95372.pdf) for additional information. -See the [Dell Isilon/PowerScale](/docs/auditor/10.7/configuration/fileservers/dellisilon/overview.md) topic for +See the [Dell Isilon/PowerScale](/docs/auditor/10.8/configuration/fileservers/dellisilon/overview.md) topic for additional information. NetApp Data ONTAP @@ -93,7 +93,7 @@ Auditor supports monitoring the following device versions: **NOTE:** Only CIFS configuration is supported. -See the [NetApp Data ONTAP](/docs/auditor/10.7/configuration/fileservers/netappcmode/overview.md) topic for +See the [NetApp Data ONTAP](/docs/auditor/10.8/configuration/fileservers/netappcmode/overview.md) topic for additional information. Nutanix @@ -102,7 +102,7 @@ Auditor supports monitoring the following device versions: - Files 3.6 - 4.3.0 -See the [Nutanix](/docs/auditor/10.7/configuration/fileservers/nutanix/overview.md) topic for additional +See the [Nutanix](/docs/auditor/10.8/configuration/fileservers/nutanix/overview.md) topic for additional information. Qumulo @@ -111,7 +111,7 @@ Auditor supports monitoring the following device versions: - Core 3.3.5 - 6.x.x -See the [Qumulo](/docs/auditor/10.7/configuration/fileservers/qumulo/overview.md) topic for additional information. +See the [Qumulo](/docs/auditor/10.8/configuration/fileservers/qumulo/overview.md) topic for additional information. Synology @@ -122,7 +122,7 @@ Auditor supports monitoring the following device versions: - DSM 7.0 - DSM 6.2.3 -See the [Synology](/docs/auditor/10.7/configuration/fileservers/synology/overview.md) topic for additional +See the [Synology](/docs/auditor/10.8/configuration/fileservers/synology/overview.md) topic for additional information. Windows File Servers @@ -141,7 +141,7 @@ Auditor supports monitoring the following operating system versions: - Windows 8.1 (32 and 64-bit) - Windows 7 (32 and 64-bit) -See the [Windows File Servers](/docs/auditor/10.7/configuration/fileservers/windows/overview.md) topic for +See the [Windows File Servers](/docs/auditor/10.8/configuration/fileservers/windows/overview.md) topic for additional information. ## Group Policy @@ -155,7 +155,7 @@ Auditor supports monitoring the following domain controller operating system ver - Windows Server 2012 R2 - Windows Server 2012 -See the [Group Policy](/docs/auditor/10.7/configuration/grouppolicy/overview.md) topic for additional information. +See the [Group Policy](/docs/auditor/10.8/configuration/grouppolicy/overview.md) topic for additional information. ## Logon Activity @@ -168,7 +168,7 @@ Auditor supports monitoring the following domain controller operating system ver - Windows Server 2012 R2 - Windows Server 2012 -See the [Logon Activity](/docs/auditor/10.7/configuration/logonactivity/overview.md) topic for additional +See the [Logon Activity](/docs/auditor/10.8/configuration/logonactivity/overview.md) topic for additional information. ## Microsoft 365 @@ -182,7 +182,7 @@ Auditor supports monitoring the following versions: **NOTE:** DoD tenant types are not supported. -See the [Exchange Online](/docs/auditor/10.7/configuration/microsoft365/exchangeonline/overview.md) topic for +See the [Exchange Online](/docs/auditor/10.8/configuration/microsoft365/exchangeonline/overview.md) topic for additional information. Microsoft Entra ID (formerly Azure AD) @@ -195,7 +195,7 @@ Auditor supports monitoring the following versions: **NOTE:** DoD tenant types are not supported. See the -[Microsoft Entra ID (formerly Azure AD)](/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/overview.md) +[Microsoft Entra ID (formerly Azure AD)](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/overview.md) topic for additional information. Microsoft Teams (MS Teams) @@ -207,7 +207,7 @@ Auditor supports monitoring the following versions: **NOTE:** DoD tenant types are not supported. -See the [MS Teams](/docs/auditor/10.7/configuration/microsoft365/teams/overview.md) topic for additional +See the [MS Teams](/docs/auditor/10.8/configuration/microsoft365/teams/overview.md) topic for additional information. SharePoint Online @@ -219,7 +219,7 @@ Auditor supports monitoring the following versions: **NOTE:** DoD tenant types are not supported. -See the [SharePoint Online](/docs/auditor/10.7/configuration/microsoft365/sharepointonline/overview.md) topic for +See the [SharePoint Online](/docs/auditor/10.8/configuration/microsoft365/sharepointonline/overview.md) topic for additional information. ## Network Devices @@ -230,7 +230,7 @@ Auditor supports monitoring the following device versions: - ASA (Adaptive Security Appliance) 8 and above -See the [Configure Cisco ASA Devices](/docs/auditor/10.7/configuration/networkdevices/ciscoasa.md) topic for +See the [Configure Cisco ASA Devices](/docs/auditor/10.8/configuration/networkdevices/ciscoasa.md) topic for additional information. Cisco IOS Devices @@ -239,7 +239,7 @@ Auditor supports monitoring the following device versions: - IOS (Internetwork Operating System) 12, 15, 16, and 17 -See the [Configure Cisco IOS Devices](/docs/auditor/10.7/configuration/networkdevices/ciscoios.md) topic for +See the [Configure Cisco IOS Devices](/docs/auditor/10.8/configuration/networkdevices/ciscoios.md) topic for additional information. Cisco Meraki Dashboard @@ -248,7 +248,7 @@ Auditor supports monitoring the following device versions: - Netwrix recommends the latest version of the Meraki Dashboard -See the [Cisco Meraki Dashboard ](/docs/auditor/10.7/configuration/networkdevices/ciscomerakidashboard.md) topic for +See the [Cisco Meraki Dashboard ](/docs/auditor/10.8/configuration/networkdevices/ciscomerakidashboard.md) topic for additional information. Cisco FTD @@ -263,7 +263,7 @@ Auditor supports monitoring the following device versions: - FortiOS 5.6 and above -See the [Configure Fortinet FortiGate Devices](/docs/auditor/10.7/configuration/networkdevices/fortinetfortigate.md) +See the [Configure Fortinet FortiGate Devices](/docs/auditor/10.8/configuration/networkdevices/fortinetfortigate.md) topic for additional information. HPE Aruba Devices @@ -272,7 +272,7 @@ Auditor supports monitoring the following device versions: - Aruba OS 6.46.4.x – 8.6.0.x (Mobility Master, Mobility Controller) -See the [Configure Pulse Secure Devices](/docs/auditor/10.7/configuration/networkdevices/pulsesecure.md) topic for +See the [Configure Pulse Secure Devices](/docs/auditor/10.8/configuration/networkdevices/pulsesecure.md) topic for additional information. Juniper Devices @@ -282,7 +282,7 @@ Auditor supports monitoring the following device versions: - vSRX with Junos OS 12.1, Junos OS 18.1, Junos OS 20.4R2 - vMX with Junos OS 17.1 -See the [Configure Juniper Devices](/docs/auditor/10.7/configuration/networkdevices/juniper.md) topic for additional +See the [Configure Juniper Devices](/docs/auditor/10.8/configuration/networkdevices/juniper.md) topic for additional information. PaloAlto Devices @@ -291,7 +291,7 @@ Auditor supports monitoring the following device versions: - PAN-OS 7.0, 8.0, 9.0, 10.0 -See the [Configure PaloAlto Devices](/docs/auditor/10.7/configuration/networkdevices/paloalto.md) topic for +See the [Configure PaloAlto Devices](/docs/auditor/10.8/configuration/networkdevices/paloalto.md) topic for additional information. Pulse Secure Devices @@ -300,7 +300,7 @@ Auditor supports monitoring the following device versions: - 9.1R3 and above -See the [Configure Pulse Secure Devices](/docs/auditor/10.7/configuration/networkdevices/pulsesecure.md) topic for +See the [Configure Pulse Secure Devices](/docs/auditor/10.8/configuration/networkdevices/pulsesecure.md) topic for additional information. SonicWall Devices @@ -311,7 +311,7 @@ Auditor supports monitoring the following device versions: - NS 6.5.х.х with SonicOS 6.5.х and 7.0.x - SMA 12.2 -See the [Configure SonicWall Devices](/docs/auditor/10.7/configuration/networkdevices/sonicwall.md) topic for +See the [Configure SonicWall Devices](/docs/auditor/10.8/configuration/networkdevices/sonicwall.md) topic for additional information. ## Oracle @@ -326,12 +326,12 @@ Auditor supports monitoring the following versions: - Database 11g, limited support **NOTE:** See the - [Considerations for Oracle Database 11g](/docs/auditor/10.7/configuration/oracle/overview.md#considerations-for-oracle-database-11g) + [Considerations for Oracle Database 11g](/docs/auditor/10.8/configuration/oracle/overview.md#considerations-for-oracle-database-11g) topic for additional information. - Oracle Database Cloud Service (Enterprise Edition) -See the [Oracle Database](/docs/auditor/10.7/configuration/oracle/overview.md) topic for additional information. +See the [Oracle Database](/docs/auditor/10.8/configuration/oracle/overview.md) topic for additional information. ## SharePoint @@ -343,7 +343,7 @@ Auditor supports monitoring the following versions: - Microsoft SharePoint Foundation 2013 and SharePoint Server 2013 - Microsoft SharePoint Foundation 2010 and SharePoint Server 2010 -See the [SharePoint](/docs/auditor/10.7/configuration/sharepoint/overview.md) topic for additional information. +See the [SharePoint](/docs/auditor/10.8/configuration/sharepoint/overview.md) topic for additional information. ## SQL Server @@ -358,7 +358,7 @@ Auditor supports monitoring the following versions: **NOTE:** Linux-based versions are not supported. -See the [SQL Server](/docs/auditor/10.7/configuration/sqlserver/overview.md) topic for additional information. +See the [SQL Server](/docs/auditor/10.8/configuration/sqlserver/overview.md) topic for additional information. ## User Activity @@ -392,7 +392,7 @@ example: - Servers with sensitive information - Sessions with elevated privileges -See the [User Activity](/docs/auditor/10.7/configuration/useractivity/overview.md) topic for additional information. +See the [User Activity](/docs/auditor/10.8/configuration/useractivity/overview.md) topic for additional information. ## VMware Servers @@ -401,7 +401,7 @@ Auditor supports monitoring the following versions: - VMware ESX/ESXi: 6.0 – 6.7, 7.0, 8.0 - VMware vCenter Server: 6.0 – 6.7, 7.0, 8.0 -See the [VMware](/docs/auditor/10.7/configuration/vmware/overview.md) topic for additional information. +See the [VMware](/docs/auditor/10.8/configuration/vmware/overview.md) topic for additional information. ## Windows Servers @@ -441,7 +441,7 @@ Auditor supports monitoring the following operating system versions: - IIS 7.0 and above. -See the [Windows Server](/docs/auditor/10.7/configuration/windowsserver/overview.md) topic for additional +See the [Windows Server](/docs/auditor/10.8/configuration/windowsserver/overview.md) topic for additional information. ## Netwrix Integration API @@ -454,4 +454,4 @@ trails with activity from the following systems and applications. Also, there are even add-ons that can export data collected by Auditor to other systems (e.g., ArcSight and ServiceNow). -See the [Integration API](/docs/auditor/10.7/api/overview.md) topic for additional information. +See the [Integration API](/docs/auditor/10.8/api/overview.md) topic for additional information. diff --git a/docs/auditor/10.8/tools/auditconfigurationassistant.md b/docs/auditor/10.8/tools/auditconfigurationassistant.md index 7e26d90730..dfd46ee8a0 100644 --- a/docs/auditor/10.8/tools/auditconfigurationassistant.md +++ b/docs/auditor/10.8/tools/auditconfigurationassistant.md @@ -76,10 +76,10 @@ will be taken to the **Welcome** step. Alternatively, you can launch this utility by clicking the corresponding link: -- From [Create a New Monitoring Plan](/docs/auditor/10.7/admin/monitoringplans/create.md) for Active Directory data +- From [Create a New Monitoring Plan](/docs/auditor/10.8/admin/monitoringplans/create.md) for Active Directory data source. -- From the [Active Directory](/docs/auditor/10.7/admin/monitoringplans/activedirectory/overview.md) within the plan. -- From the [Logon Activity](/docs/auditor/10.7/admin/monitoringplans/logonactivity/overview.md) source properties. +- From the [Active Directory](/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md) within the plan. +- From the [Logon Activity](/docs/auditor/10.8/admin/monitoringplans/logonactivity/overview.md) source properties. ## Start Assessment @@ -88,7 +88,7 @@ Follow the steps to start assessment. **Step 1 –** Specify the monitoring scope —select what you plan to monitor with Netwrix Auditor. You can select both **Active Directory** and **Logon Activity**, or any of them. -![audit_cfg_assist_creds](/images/auditor/10.7/tools/audit_cfg_assist_creds.webp) +![audit_cfg_assist_creds](/images/auditor/10.8/tools/audit_cfg_assist_creds.webp) **Step 2 –** If you launched **Audit Configuration Assistant** from the **Start** menu (not from the monitoring plan settings), enter the name of Active Directory domain you want to assess. @@ -110,7 +110,7 @@ At this step, you will be presented the results of the environment readiness ass - the list of current and required settings for each entity - the list of issues (if any) that occurred during the assessment -![assessment_results_thumb_0_0](/images/auditor/10.7/tools/assessment_results_thumb_0_0.webp) +![assessment_results_thumb_0_0](/images/auditor/10.8/tools/assessment_results_thumb_0_0.webp) Follow the steps to view results. diff --git a/docs/auditor/10.8/tools/eventlogmanager/eventlogmanager.md b/docs/auditor/10.8/tools/eventlogmanager/eventlogmanager.md index a461d05031..cbf8343eb0 100644 --- a/docs/auditor/10.8/tools/eventlogmanager/eventlogmanager.md +++ b/docs/auditor/10.8/tools/eventlogmanager/eventlogmanager.md @@ -41,8 +41,8 @@ Review the following for additional information: - Create Monitoring Plan for System Health Log - Review Past Event Log Entries - Import Audit Data with the Database Importer -- [Create Alerts for Event Log](/docs/auditor/10.7/admin/alertsettings/create/createeventlog.md) -- [Create Alerts for Non-Owner Mailbox Access Events](/docs/auditor/10.7/admin/alertsettings/create/createmailboxaccess.md) +- [Create Alerts for Event Log](/docs/auditor/10.8/admin/alertsettings/create/createeventlog.md) +- [Create Alerts for Non-Owner Mailbox Access Events](/docs/auditor/10.8/admin/alertsettings/create/createmailboxaccess.md) ## Create Monitoring Plans for Event Logs @@ -79,7 +79,7 @@ whether to import the list once, or to update it on every data collection. | ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | User name Password | Enter the account that will be used by Netwrix Auditor Event Log Manager for data collection. For a full list of the rights and permissions required for the account, and instructions on how to configure them, refer to the Permissions for Event Log Auditing section. | | Audit archiving filters | Define what events will be saved to the Long-Term Archive or the Audit Database. Refer to for detailed instructions on how to configure audit archiving filters. | -| Alerts | Configure alerts that will be triggered by specific events. Refer to [Create Alerts for Event Log](/docs/auditor/10.7/admin/alertsettings/create/createeventlog.md) for detailed instructions on how to configure Netwrix Auditor Event Log Manager alerts. | +| Alerts | Configure alerts that will be triggered by specific events. Refer to [Create Alerts for Event Log](/docs/auditor/10.8/admin/alertsettings/create/createeventlog.md) for detailed instructions on how to configure Netwrix Auditor Event Log Manager alerts. | **Step 6 –** Navigate to the Notifications tab and complete the following fields: @@ -99,7 +99,7 @@ whether to import the list once, or to update it on every data collection. settings. Netwrix Auditor Event Log Manager synchronizes Audit Database and reports settings with the default Audit Database configuration from Netwrix Auditor Server. If this option is disabled, contact your Netwrix Auditor Global administrator and make sure that these settings are properly -configured in Netwrix Auditor Server. Refer to [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) +configured in Netwrix Auditor Server. Refer to [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) for detailed instructions on how to configure the Audit Database settings. **Step 8 –** Complete the following fields: @@ -123,7 +123,7 @@ If you want to review the Event Log Collection Status email, the Event Log Colle shows whether data collection for your monitoring plan completed successfully or with warnings and errors. -![changesummary_eventlog](/images/auditor/10.7/tools/changesummary_eventlog.webp) +![changesummary_eventlog](/images/auditor/10.8/tools/changesummary_eventlog.webp) ## Configure Audit Archiving Filters for Event Log @@ -175,7 +175,7 @@ health events, you need to create a dedicated monitoring plan for this log with Event Log Manager standalone tool. You can also review and filter Netwrix Auditor health events right in the product. See -[Netwrix Auditor Health Log](/docs/auditor/10.7/admin/healthstatus/dashboard/healthlog.md) for addditional +[Netwrix Auditor Health Log](/docs/auditor/10.8/admin/healthstatus/dashboard/healthlog.md) for addditional information Follow the steps to configure the Netwrix Auditor System Health log monitoring. @@ -190,7 +190,7 @@ Server resides. **Step 4 –** Navigate to the Audit Database tab and select Write event descriptions to Audit Database if you want to see the exact error or warning text. Make sure that Audit Database settings -are configured properly, follow the [Audit Database](/docs/auditor/10.7/admin/settings/auditdatabase.md) +are configured properly, follow the [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) **Step 5 –** Click Configure next to Audit archiving filters and select the Netwrix Auditor System Health Log filter in the Inclusive Filters list. diff --git a/docs/auditor/10.8/tools/inactiveusertracker.md b/docs/auditor/10.8/tools/inactiveusertracker.md index a118716279..2a91d2d73c 100644 --- a/docs/auditor/10.8/tools/inactiveusertracker.md +++ b/docs/auditor/10.8/tools/inactiveusertracker.md @@ -48,7 +48,7 @@ new monitoring plan. | Option | Description | | -------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Specify account which will be used to collect data: - User name - Password | Enter the account which will be used for data collection. See the[Data Collecting Account](/docs/auditor/10.7/admin/monitoringplans/dataaccounts.md) topic for additional information about the full list of the rights and permissions for the account. | +| Specify account which will be used to collect data: - User name - Password | Enter the account which will be used for data collection. See the[Data Collecting Account](/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md) topic for additional information about the full list of the rights and permissions for the account. | | Consider user inactive after | Specify account inactivity period, after which a user is considered to be inactive. | | Customize the report template | Click Edit to edit the notification template, for example, modify the text of the message. You can use HTML tags when editing a template. | | Attach report as a CSV files | Select this option to receive reports attached to emails as CSV files. | @@ -72,7 +72,7 @@ The following variables can be used in the Inactive User Tracker message templat | Notify manager after | Specify account inactivity period, after which the account owner's manager must be notified. | | Set random password after | Specify account inactivity period, after which a random password will be set for this account. | | Disable accounts after | Specify account inactivity period, after which the account will be disabled. | -| Move to a specific OU after | - Specify account inactivity period, after which the account will be moved to a specified organizational unit. - OU name—Specify OU name or select an AD container using ![select_button](/images/auditor/10.7/tools/select_button.webp) button. | +| Move to a specific OU after | - Specify account inactivity period, after which the account will be moved to a specified organizational unit. - OU name—Specify OU name or select an AD container using ![select_button](/images/auditor/10.8/tools/select_button.webp) button. | | Delete accounts after | Specify account inactivity period, after which the account will be removed. | | Delete account with all its subnodes | Select this checkbox to delete an account that is a container for objects. | | Notify managers only once | If this checkbox is selected, managers receive one notification on account inactivity and one on every action on accounts. Managers will receive a notification in the day when the account inactivity time will be the same as specified in the inactivity period settings. By default, managers receive notifications every day after the time interval of inactivity specified in the Notify managers after entry field. | @@ -110,7 +110,7 @@ Follow the steps to review report on inactive users. **Step 1 –** Click Generate next to Generate report on inactive users to view report immediately. -![inactiveusersactivedirectory](/images/auditor/10.7/tools/inactiveusersactivedirectory.webp) +![inactiveusersactivedirectory](/images/auditor/10.8/tools/inactiveusersactivedirectory.webp) ## Registry Keys diff --git a/docs/auditor/10.8/tools/objectrestoread.md b/docs/auditor/10.8/tools/objectrestoread.md index 2f7e6baf87..89c37e4f57 100644 --- a/docs/auditor/10.8/tools/objectrestoread.md +++ b/docs/auditor/10.8/tools/objectrestoread.md @@ -48,11 +48,11 @@ drop-down list. **Step 3 –** Expand the Schema your_Root_Domain_name node. Right-click the CN=Unicode-Pwd attribute and select Properties. -![ad_object_restore_1](/images/auditor/10.7/tools/ad_object_restore_1.webp) +![ad_object_restore_1](/images/auditor/10.8/tools/ad_object_restore_1.webp) **Step 4 –** Double-click the searchFlags attribute and set its value to _"8"_. -![ad_object_restore_2](/images/auditor/10.7/tools/ad_object_restore_2.webp) +![ad_object_restore_2](/images/auditor/10.8/tools/ad_object_restore_2.webp) Now you will be able to restore deleted accounts with their passwords preserved. diff --git a/docs/auditor/10.8/tools/overview.md b/docs/auditor/10.8/tools/overview.md index 67d6c45012..e9cd7d651d 100644 --- a/docs/auditor/10.8/tools/overview.md +++ b/docs/auditor/10.8/tools/overview.md @@ -8,8 +8,8 @@ sidebar_position: 60 There are several tools available with Netwrix Auditor: -- [Audit Configuration Assistant](/docs/auditor/10.7/tools/auditconfigurationassistant.md) -- [Event Log Manager](/docs/auditor/10.7/tools/eventlogmanager/eventlogmanager.md) -- [Inactive User Tracker](/docs/auditor/10.7/tools/inactiveusertracker.md) -- [Object Restore for Active Directory](/docs/auditor/10.7/tools/objectrestoread.md) -- [Password Expiration Notifier ](/docs/auditor/10.7/tools/passwordexpirationnotifier/overview.md) +- [Audit Configuration Assistant](/docs/auditor/10.8/tools/auditconfigurationassistant.md) +- [Event Log Manager](/docs/auditor/10.8/tools/eventlogmanager/eventlogmanager.md) +- [Inactive User Tracker](/docs/auditor/10.8/tools/inactiveusertracker.md) +- [Object Restore for Active Directory](/docs/auditor/10.8/tools/objectrestoread.md) +- [Password Expiration Notifier ](/docs/auditor/10.8/tools/passwordexpirationnotifier/overview.md) diff --git a/docs/auditor/10.8/tools/passwordexpirationnotifier/overview.md b/docs/auditor/10.8/tools/passwordexpirationnotifier/overview.md index 278be84ad0..8d6f424600 100644 --- a/docs/auditor/10.8/tools/passwordexpirationnotifier/overview.md +++ b/docs/auditor/10.8/tools/passwordexpirationnotifier/overview.md @@ -23,8 +23,8 @@ Review the following for additional information: - Configure Password Expiration Alerting - Registry Key Configuration -- [Password Expiration Notifier Ports](/docs/auditor/10.7/tools/passwordexpirationnotifier/ports.md) -- [Password Expiration Monitoring Scope](/docs/auditor/10.7/tools/passwordexpirationnotifier/monitoringscope.md) +- [Password Expiration Notifier Ports](/docs/auditor/10.8/tools/passwordexpirationnotifier/ports.md) +- [Password Expiration Monitoring Scope](/docs/auditor/10.8/tools/passwordexpirationnotifier/monitoringscope.md) ## Configure Password Expiration Alerting @@ -47,7 +47,7 @@ new monitoring plan. | Option | Description | | -------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -| Specify account which will be used to collect data: - User name - Password | Enter the account which will be used for data collection. For a full list of the rights and permissions of this account, and instructions on how to configure them, refer to [Monitoring Plans](/docs/auditor/10.7/admin/monitoringplans/overview.md). | +| Specify account which will be used to collect data: - User name - Password | Enter the account which will be used for data collection. For a full list of the rights and permissions of this account, and instructions on how to configure them, refer to [Monitoring Plans](/docs/auditor/10.8/admin/monitoringplans/overview.md). | | Filter users by organizational unit | To audit users for expiring accounts/passwords that belong to certain organizational units within your Active Directory domain, select this option and click Select OUs. In the dialog that opens, specify the OUs that you want to audit. Only users belonging to these OUs will be notified and included in the administrators and managers reports. | | Filter users by group | To audit users for expiring accounts/passwords that belong to certain groups within your Active Directory domain, select this option and click Select Groups. In the dialog that opens, specify the groups that you want to audit. Only users belonging to these groups will be notified and included in the administrators and managers reports. | | Filter by account name | Specify one or several user account names (e.g., \*John\*). Use semicolon to separate several names. Only user accounts that contain selected name will be notified and included in the administrators and managers reports. | @@ -103,7 +103,7 @@ Click Generate next to Generate report on users with expired account or password users passwords immediately. In the Maximum Password Age Setting dialog that opens, select domain policy settings or specify the maximum password age in days. -![passwordexpiration](/images/auditor/10.7/tools/passwordexpirationnotifier/passwordexpiration.webp) +![passwordexpiration](/images/auditor/10.8/tools/passwordexpirationnotifier/passwordexpiration.webp) ## Registry Key Configuration From 3db6262b91e512c71a668efbab95751e77c01459 Mon Sep 17 00:00:00 2001 From: Dmitry Vorontsov Date: Mon, 28 Jul 2025 17:01:14 +0100 Subject: [PATCH 3/4] Copy 10.7 images to 10.8 for v10.8 documentation MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Copied complete image directory structure from 10.7 to 10.8 - Resolves MDX compilation errors for missing image references - Maintains separate image assets for future v10.8-specific updates - All image paths now correctly reference /images/auditor/10.8/ 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude --- .claude/settings.local.json | 3 ++- .../admin/additionalconfig/emailtemplates.md | 4 ++-- .../additionalconfig/timeoutparameter.md | 2 +- .../admin/configuration/activedirectory.md | 2 +- .../admin/configuration/consoleaccess.md | 14 +++++------ .../admin/configuration/database.md | 2 +- .../admin/configuration/diagnostics.md | 2 +- .../admin/configuration/notifications.md | 6 ++--- .../admin/configuration/overview.md | 2 +- .../10.8/accessreviews/admin/firstlaunch.md | 6 ++--- .../auditor/10.8/accessreviews/admin/login.md | 8 +++---- .../accessreviews/admin/navigate/navigate.md | 2 +- .../admin/troubleshooting/loglevel.md | 2 +- .../admin/troubleshooting/serviceaccount.md | 4 ++-- .../approvalprocess/approvalprocess.md | 6 ++--- .../entitlementreviews/create/create.md | 8 +++---- .../create/reviewinstances.md | 2 +- .../entitlementreviews/interface/interface.md | 4 ++-- .../accessreviewsconfiguration.md | 6 ++--- .../accessreviews/installation/install.md | 16 ++++++------- .../10.8/accessreviews/installation/secure.md | 2 +- .../owneroverview/confirmationrequest.md | 8 +++---- .../owneroverview/pendingreviews/access.md | 4 ++-- .../pendingreviews/membership.md | 4 ++-- .../pendingreviews/pendingreviews.md | 6 ++--- .../owneroverview/reviewhistory.md | 2 +- .../resourceowners/confirmation/confirm.md | 6 ++--- .../confirmation/confirmation.md | 2 +- .../resourceowners/interface/add.md | 14 +++++------ .../resourceowners/interface/addowner.md | 2 +- .../resourceowners/interface/interface.md | 2 +- .../resourceowners/interface/update.md | 10 ++++---- .../10.8/accountlockoutexaminer/usage.md | 8 +++---- .../10.8/addon/alienvaultusm/collecteddata.md | 2 +- .../alienvaultusm/integrationeventlog.md | 2 +- .../addon/amazonwebservices/collecteddata.md | 2 +- .../10.8/addon/arcsight/collecteddata.md | 2 +- docs/auditor/10.8/addon/arcsight/overview.md | 2 +- .../10.8/addon/azurefiles/deployment.md | 12 +++++----- .../10.8/addon/connectwise/configure.md | 10 ++++---- docs/auditor/10.8/addon/connectwise/msp.md | 6 ++--- .../10.8/addon/connectwise/overview.md | 4 ++-- docs/auditor/10.8/addon/copilot/deployment.md | 4 ++-- .../auditor/10.8/addon/ctera/collecteddata.md | 4 ++-- docs/auditor/10.8/addon/ctera/parameters.md | 2 +- .../10.8/addon/cyberark/collecteddata.md | 2 +- .../auditor/10.8/addon/cyberark/deployment.md | 4 ++-- docs/auditor/10.8/addon/cyberark/overview.md | 2 +- docs/auditor/10.8/addon/hyperv/deployment.md | 6 ++--- docs/auditor/10.8/addon/hyperv/overview.md | 2 +- .../10.8/addon/ibmqradar/collecteddata.md | 2 +- .../addon/ibmqradar/integrationeventlog.md | 2 +- .../10.8/addon/intelsecurity/collecteddata.md | 2 +- .../intelsecurity/integrationeventlog.md | 2 +- docs/auditor/10.8/addon/linux/parameters.md | 2 +- .../10.8/addon/logrhythm/collecteddata.md | 2 +- .../addon/logrhythm/integrationeventlog.md | 2 +- .../10.8/addon/nasuni/collecteddata.md | 2 +- docs/auditor/10.8/addon/nasuni/parameters.md | 2 +- .../10.8/addon/nutanixahv/collecteddata.md | 2 +- .../auditor/10.8/addon/nutanixahv/overview.md | 2 +- docs/auditor/10.8/addon/okta/collecteddata.md | 2 +- docs/auditor/10.8/addon/overview.md | 4 ++-- .../addon/privilegeduserlinux/parameters.md | 2 +- .../10.8/addon/qumulo/collecteddata.md | 2 +- docs/auditor/10.8/addon/qumulo/overview.md | 2 +- .../10.8/addon/radius/collecteddata.md | 2 +- .../auditor/10.8/addon/radius/customreport.md | 2 +- docs/auditor/10.8/addon/siem/collecteddata.md | 2 +- .../10.8/addon/siem/integrationeventlog.md | 2 +- .../10.8/addon/solarwinds/collecteddata.md | 2 +- .../addon/solarwinds/integrationeventlog.md | 2 +- docs/auditor/10.8/addon/splunk/deployment.md | 22 +++++++++--------- docs/auditor/10.8/addon/splunk/overview.md | 2 +- .../10.8/admin/alertsettings/create/create.md | 4 ++-- .../alertsettings/create/createeventlog.md | 2 +- .../create/createhealthstatus.md | 2 +- .../create/createmailboxaccess.md | 4 ++-- .../10.8/admin/alertsettings/dashboard.md | 4 ++-- .../10.8/admin/alertsettings/overview.md | 4 ++-- .../admin/alertsettings/responseaction.md | 8 +++---- .../10.8/admin/behavioranomalies/dashboard.md | 4 ++-- .../admin/behavioranomalies/userprofile.md | 4 ++-- docs/auditor/10.8/admin/compliancemappings.md | 2 +- .../dashboard/activityrecordstatistics.md | 2 +- .../dashboard/databasestatistics.md | 4 ++-- .../admin/healthstatus/dashboard/healthlog.md | 4 ++-- .../dashboard/monitoringoverview.md | 2 +- .../admin/healthstatus/dashboard/overview.md | 2 +- .../10.8/admin/healthstatus/selfaudit.md | 6 ++--- .../10.8/admin/healthstatus/summaryemail.md | 2 +- .../admin/healthstatus/troubleshooting.md | 4 ++-- .../activedirectory/overview.md | 6 ++--- .../monitoringplans/activitysummaryemail.md | 2 +- .../10.8/admin/monitoringplans/create.md | 6 ++--- .../admin/monitoringplans/dataaccounts.md | 2 +- .../10.8/admin/monitoringplans/datasources.md | 2 +- .../10.8/admin/monitoringplans/delegation.md | 6 ++--- .../exchangeonline/overview.md | 4 ++-- .../monitoringplans/fileservers/overview.md | 10 ++++---- .../monitoringplans/fileservers/scope.md | 2 +- .../fileservers/windowsfileserver.md | 10 ++++---- .../monitoringplans/grouppolicy/overview.md | 4 ++-- .../monitoringplans/logonactivity/overview.md | 4 ++-- .../microsoftentraid/overview.md | 8 +++---- .../10.8/admin/monitoringplans/msteams.md | 4 ++-- .../admin/monitoringplans/oracle/overview.md | 2 +- .../10.8/admin/monitoringplans/overview_1.md | 4 ++-- .../sharepointonline/overview.md | 4 ++-- .../monitoringplans/sqlserver/overview.md | 8 +++---- .../admin/monitoringplans/vmware/overview.md | 2 +- .../admin/monitoringplans/windows/overview.md | 4 ++-- .../admin/navigation/customizeexamples.md | 6 ++--- .../admin/navigation/customizefavorite.md | 6 ++--- .../10.8/admin/navigation/customizehome.md | 4 ++-- .../auditor/10.8/admin/navigation/overview.md | 18 +++++++------- .../10.8/admin/navigation/recommendations.md | 4 ++-- docs/auditor/10.8/admin/reports/custom.md | 2 +- docs/auditor/10.8/admin/reports/overview.md | 2 +- .../10.8/admin/reports/reviewstatus.md | 2 +- .../10.8/admin/reports/types/activity.md | 2 +- .../10.8/admin/reports/types/enterprise.md | 2 +- .../reports/types/stateintime/overview.md | 4 ++-- .../reports/types/stateintime/sqlroles.md | 2 +- .../sqlaccountpermissions.md | 2 +- .../sqlserveroverview/sqldatabases.md | 2 +- .../sqlserveroverview/sqlmeansgranted.md | 4 ++-- .../sqlserveroverview/sqlobjectpermissions.md | 2 +- .../10.8/admin/reports/types/userbehavior.md | 4 ++-- docs/auditor/10.8/admin/reports/video.md | 2 +- docs/auditor/10.8/admin/reports/view.md | 8 +++---- .../10.8/admin/riskassessment/dashboard.md | 4 ++-- .../10.8/admin/riskassessment/overview.md | 6 ++--- .../10.8/admin/search/filteradvanced.md | 6 ++--- .../auditor/10.8/admin/search/filtersimple.md | 6 ++--- docs/auditor/10.8/admin/search/overview.md | 6 ++--- .../10.8/admin/settings/auditdatabase.md | 2 +- .../10.8/admin/settings/custombrand.md | 4 ++-- .../10.8/admin/settings/investigations.md | 2 +- docs/auditor/10.8/admin/settings/licenses.md | 2 +- .../10.8/admin/settings/longtermarchive.md | 4 ++-- .../10.8/admin/settings/privilegesecure.md | 6 ++--- .../10.8/admin/subscriptions/manage.md | 2 +- docs/auditor/10.8/api/overview.md | 2 +- .../10.8/api/postdata/searchparameters.md | 2 +- docs/auditor/10.8/api/prerequisites.md | 2 +- docs/auditor/10.8/api/security.md | 2 +- docs/auditor/10.8/api/writeactivityrecords.md | 4 ++-- .../activedirectory/automatic.md | 2 +- .../activedirectory/tombstone.md | 2 +- .../overview.md | 4 ++-- .../configuration/exchange/permissions.md | 2 +- .../fileservers/delldatastorage/cifss.md | 8 +++---- .../delldatastorage/objectaccess.md | 2 +- .../fileservers/netappcmode/cifs.md | 10 ++++---- .../netappcmode/eventcategories.md | 4 ++-- .../fileservers/nutanix/partnerserver.md | 4 ++-- .../fileservers/nutanix/permissions.md | 6 ++--- .../fileservers/nutanix/useraccount.md | 2 +- .../fileservers/qumulo/configure.md | 2 +- .../fileservers/windows/eventlog.md | 2 +- .../fileservers/windows/objectlevel.md | 8 +++---- .../configuration/grouppolicy/permissions.md | 4 ++-- .../exchangeonline/permissions.md | 4 ++-- .../networkdevices/ciscomerakidevices.md | 4 ++-- .../configuration/networkdevices/hpearuba.md | 4 ++-- .../networkdevices/pulsesecure.md | 2 +- .../useractivity/videorecordings.md | 2 +- .../10.8/configuration/windowsserver/dhcp.md | 2 +- .../configuration/windowsserver/eventlog.md | 4 ++-- .../10.8/configuration/windowsserver/iis.md | 2 +- .../configuration/windowsserver/overview.md | 4 ++-- .../windowsserver/windowsregistry.md | 4 ++-- docs/auditor/10.8/install/firstlaunch.md | 2 +- docs/auditor/10.8/install/overview.md | 4 ++-- docs/auditor/10.8/install/viagrouppolicy.md | 6 ++--- .../install/virtualappliance/configure.md | 2 +- docs/auditor/10.8/requirements/gmsa.md | 2 +- .../10.8/requirements/longtermarchive.md | 4 ++-- docs/auditor/10.8/requirements/overview.md | 2 +- docs/auditor/10.8/requirements/software.md | 2 +- docs/auditor/10.8/requirements/sqlserver.md | 2 +- .../10.8/tools/auditconfigurationassistant.md | 4 ++-- .../tools/eventlogmanager/eventlogmanager.md | 2 +- .../auditor/10.8/tools/inactiveusertracker.md | 4 ++-- docs/auditor/10.8/tools/objectrestoread.md | 4 ++-- .../passwordexpirationnotifier/overview.md | 2 +- .../additionalconfig/emailtemplates.webp | Bin 0 -> 55746 bytes .../emailtemplatesfolder.webp | Bin 0 -> 26608 bytes .../admin/additionalconfig/timeout.webp | Bin 0 -> 33570 bytes .../admin/configuration/activedirectory.webp | Bin 0 -> 28314 bytes .../admin/configuration/consoleaccess.webp | Bin 0 -> 21870 bytes .../admin/configuration/consoleaccessadd.webp | Bin 0 -> 23096 bytes .../consoleaccessmodifyselectaccess.webp | Bin 0 -> 9550 bytes .../configuration/consoleaccessremove.webp | Bin 0 -> 29310 bytes .../consoleaccessselectaccess.webp | Bin 0 -> 10818 bytes .../consoleaccessselecttrustee.webp | Bin 0 -> 7710 bytes .../reviews/admin/configuration/database.webp | Bin 0 -> 23642 bytes .../admin/configuration/diagnostics.webp | Bin 0 -> 29870 bytes .../admin/configuration/notifications.webp | Bin 0 -> 45802 bytes .../configuration/notificationsoptions.webp | Bin 0 -> 11880 bytes .../configuration/notificationssmtp.webp | Bin 0 -> 16770 bytes .../access/reviews/admin/desktopicon.webp | Bin 0 -> 3096 bytes .../reviews/admin/firstlaunchlandingpage.webp | Bin 0 -> 19884 bytes .../reviews/admin/firstlaunchpassword.webp | Bin 0 -> 12644 bytes .../10.8/access/reviews/admin/interface.webp | Bin 0 -> 45800 bytes .../access/reviews/admin/landingadmin.webp | Bin 0 -> 45940 bytes .../access/reviews/admin/landingowner.webp | Bin 0 -> 18238 bytes .../reviews/admin/landingsecurityteam.webp | Bin 0 -> 43254 bytes .../10.8/access/reviews/admin/login.webp | Bin 0 -> 5742 bytes .../admin/troubleshooting/logvalue.webp | Bin 0 -> 22654 bytes .../troubleshooting/serviceproperties.webp | Bin 0 -> 11902 bytes .../troubleshooting/servicesmanager.webp | Bin 0 -> 97640 bytes .../entitlementreviews/managereviewspage.webp | Bin 0 -> 63946 bytes .../pendingreivewspage.webp | Bin 0 -> 22516 bytes .../pendingreviewemail.webp | Bin 0 -> 14968 bytes .../review/reviewpageaccesstab2.webp | Bin 0 -> 35554 bytes .../review/reviewpagemembership.webp | Bin 0 -> 32372 bytes .../review/reviewpagemembershiptab2.webp | Bin 0 -> 28618 bytes .../entitlementreviews/reviewdetailspage.webp | Bin 0 -> 41234 bytes .../entitlementreviews/reviewhistorypage.webp | Bin 0 -> 37300 bytes .../entitlementreviews/reviewpageaccess.webp | Bin 0 -> 37992 bytes .../wizard/createreviewresources.webp | Bin 0 -> 23406 bytes .../wizard/createreviewreviewtype.webp | Bin 0 -> 11160 bytes .../wizard/createreviewsummary.webp | Bin 0 -> 11064 bytes .../installation/installcompleted.webp | Bin 0 -> 11980 bytes .../installconfigurewebserver.webp | Bin 0 -> 10292 bytes .../installdestinationfolder.webp | Bin 0 -> 13578 bytes .../reviews/installation/installeula.webp | Bin 0 -> 41940 bytes .../reviews/installation/installready.webp | Bin 0 -> 13488 bytes .../reviews/installation/installsql.webp | Bin 0 -> 13130 bytes .../installation/installsqldatabase.webp | Bin 0 -> 5196 bytes .../reviews/installation/installwelcome.webp | Bin 0 -> 16386 bytes .../securebindingurlparameter.webp | Bin 0 -> 18492 bytes .../resourceowners/email/confirmemail.webp | Bin 0 -> 15106 bytes .../email/confirmemailaccept.webp | Bin 0 -> 11144 bytes .../email/confirmemaildecline.webp | Bin 0 -> 9482 bytes .../email/confirmemaildecline2.webp | Bin 0 -> 9340 bytes .../resourceowners/interfacebuttons.webp | Bin 0 -> 4732 bytes .../reviews/resourceowners/tablestatus.webp | Bin 0 -> 30586 bytes .../resourceowners/window/addowner.webp | Bin 0 -> 5874 bytes .../resourceowners/wizard/description.webp | Bin 0 -> 8982 bytes .../resourceowners/wizard/description_1.webp | Bin 0 -> 10916 bytes .../resourceowners/wizard/selectowners.webp | Bin 0 -> 11896 bytes .../resourceowners/wizard/selectowners_1.webp | Bin 0 -> 13126 bytes .../resourceowners/wizard/selectowners_2.webp | Bin 0 -> 17094 bytes .../wizard/selectownerstaskcompleted.webp | Bin 0 -> 7408 bytes .../wizard/selectownerswithowners.webp | Bin 0 -> 14822 bytes .../resourceowners/wizard/selectresource.webp | Bin 0 -> 9856 bytes .../resourceowners/wizard/summary.webp | Bin 0 -> 11260 bytes .../resourceowners/wizard/summary_1.webp | Bin 0 -> 13400 bytes .../wizard/summarytaskcompleted.webp | Bin 0 -> 8044 bytes .../wizard/summarytaskcompleted_1.webp | Bin 0 -> 9532 bytes .../ale_new_results.webp | Bin 0 -> 27878 bytes .../ale_new_start_thumb_0_0.webp | Bin 0 -> 16292 bytes .../ale_settings_thumb_0_0.webp | Bin 0 -> 10194 bytes .../ale_usage_stats_thumb_0_0.webp | Bin 0 -> 71456 bytes .../images/auditor/10.8/addon/addonstore.webp | Bin 0 -> 52366 bytes .../amazonwebservices/activityrecords.webp | Bin 0 -> 27608 bytes .../auditor/10.8/addon/api_thumb_0_0.webp | Bin 0 -> 30950 bytes .../10.8/addon/arcsight/activityrecords.webp | Bin 0 -> 13372 bytes .../10.8/addon/arcsight/configuration.webp | Bin 0 -> 11568 bytes .../10.8/addon/azurefiles/adcredentials.webp | Bin 0 -> 11514 bytes .../azurefiles/azurefileconnectionstring.webp | Bin 0 -> 11066 bytes .../10.8/addon/azurefiles/azurefileeula.webp | Bin 0 -> 27544 bytes .../addon/azurefiles/azurefileinstfolder.webp | Bin 0 -> 10186 bytes .../addon/azurefiles/generalsettings.webp | Bin 0 -> 20520 bytes .../addon/azurefiles/microsoftgraphapi.webp | Bin 0 -> 12456 bytes .../auditor/10.8/addon/connectwise/addon.webp | Bin 0 -> 37232 bytes .../addon/connectwise/connectionsetup.webp | Bin 0 -> 10562 bytes .../10.8/addon/connectwise/diagram.webp | Bin 0 -> 26664 bytes .../diagramworkflow_thumb_0_0.webp | Bin 0 -> 21346 bytes .../connectwise/integrations_thumb_0_0.webp | Bin 0 -> 32980 bytes .../10.8/addon/connectwise/serviceboard.webp | Bin 0 -> 58806 bytes .../connectwise/serviceticketrouting.webp | Bin 0 -> 11094 bytes .../addon/connectwise/summary_thumb_0_0.webp | Bin 0 -> 14482 bytes .../10.8/addon/connectwise/testalert.webp | Bin 0 -> 58390 bytes .../addon/connectwise/ticketfieldmapping.webp | Bin 0 -> 16900 bytes .../10.8/addon/copilot/adcredentials.webp | Bin 0 -> 16258 bytes .../auditor/10.8/addon/copilot/tenantapp.webp | Bin 0 -> 10430 bytes .../10.8/addon/ctera/configwizard.webp | Bin 0 -> 28420 bytes .../auditor/10.8/addon/ctera/ctera.webp | Bin 0 -> 76776 bytes .../10.8/addon/cyberark/configwizard.webp | Bin 0 -> 33048 bytes .../addon/cyberark/cyberark_thumb_0_0.webp | Bin 0 -> 98004 bytes .../addon/cyberark/dbparamfile_thumb_0_0.webp | Bin 0 -> 64458 bytes .../addon/cyberark/diagram_thumb_0_0.webp | Bin 0 -> 24268 bytes .../10.8/addon/hyperv/diagram1server.webp | Bin 0 -> 14622 bytes .../hyperv/diagram2servers_thumb_0_0.webp | Bin 0 -> 15238 bytes .../hyperv/diagram3servers_thumb_0_0.webp | Bin 0 -> 20342 bytes .../10.8/addon/hyperv/diagram_thumb_0_0.webp | Bin 0 -> 29624 bytes .../10.8/addon/linux/configwizard.webp | Bin 0 -> 38146 bytes .../10.8/addon/nasuni/configwizard.webp | Bin 0 -> 25792 bytes .../addon/nutanixahv/diagram_thumb_0_0.webp | Bin 0 -> 30556 bytes .../nutanixahv/nutanixahv_thumb_0_0.webp | Bin 0 -> 63146 bytes .../privilegeduserlinux/configwizard.webp | Bin 0 -> 47656 bytes .../10.8/addon/qumulo/diagram_thumb_0_0.webp | Bin 0 -> 28916 bytes .../10.8/addon/qumulo/qumulo_thumb_0_0.webp | Bin 0 -> 113516 bytes .../auditor/10.8/addon/radius/radius.webp | Bin 0 -> 50694 bytes .../10.8/addon/radius/radiusfilters.webp | Bin 0 -> 4180 bytes .../solarwinds/eventlogexample_thumb_0_0.webp | Bin 0 -> 37306 bytes .../eventlogexportexample_thumb_0_0.webp | Bin 0 -> 127122 bytes .../auditor/10.8/addon/splunk/addaccount.webp | Bin 0 -> 4044 bytes .../auditor/10.8/addon/splunk/addapi.webp | Bin 0 -> 21248 bytes .../auditor/10.8/addon/splunk/config.webp | Bin 0 -> 6626 bytes .../10.8/addon/splunk/configuration.webp | Bin 0 -> 5412 bytes .../addon/splunk/configurationaccount.webp | Bin 0 -> 2018 bytes .../splunk/configurationaddonsettings.webp | Bin 0 -> 2712 bytes .../auditor/10.8/addon/splunk/diagram.webp | Bin 0 -> 10050 bytes .../auditor/10.8/addon/splunk/inputs.webp | Bin 0 -> 3924 bytes .../auditor/10.8/addon/splunk/installapp.webp | Bin 0 -> 3486 bytes .../10.8/addon/splunk/searchreporting.webp | Bin 0 -> 5542 bytes .../10.8/addon/splunk/searchreportingapp.webp | Bin 0 -> 28428 bytes .../auditor/10.8/addon/splunk/uploadapp.webp | Bin 0 -> 31906 bytes .../10.8/admin/alertsettings/ad_alert.webp | Bin 0 -> 22994 bytes .../alerts_history_thumb_0_0.webp | Bin 0 -> 78208 bytes .../alerts_overview_thumb_0_0.webp | Bin 0 -> 44446 bytes .../alertsettings/command_thumb_0_0.webp | Bin 0 -> 5370 bytes .../alertsettings/configuration_tile.webp | Bin 0 -> 3198 bytes .../alertsettings/csvfile_thumb_0_48.webp | Bin 0 -> 5114 bytes .../editnotificationtemplate.webp | Bin 0 -> 21374 bytes .../alertsettings/emailhealthstatusevent.webp | Bin 0 -> 55556 bytes .../admin/alertsettings/eventfilters.webp | Bin 0 -> 13420 bytes .../admin/alertsettings/eventmessageopen.webp | Bin 0 -> 37814 bytes .../10.8/admin/alertsettings/managetags.webp | Bin 0 -> 31144 bytes .../passwordreset_thumb_0_0.webp | Bin 0 -> 36318 bytes .../alertsettings/powershell_thumb_0_0.webp | Bin 0 -> 8328 bytes .../alertsettings/preview_thumb_0_0.webp | Bin 0 -> 29356 bytes .../10.8/admin/behavioranomalies/ba_tile.webp | Bin 0 -> 1442 bytes .../changestatus_thumb_0_0.webp | Bin 0 -> 16116 bytes .../dashboard_thumb_0_0.webp | Bin 0 -> 36994 bytes .../userprofile_thumb_0_0.webp | Bin 0 -> 58286 bytes .../10.8/admin/compliance_mappings.webp | Bin 0 -> 96098 bytes .../activityrecordsdetails_thumb_0_0.webp | Bin 0 -> 21500 bytes .../dashboard/dbstatistics_thumb_0_0.webp | Bin 0 -> 32158 bytes .../dashboard/dbstats_overview_thumb_0_0.webp | Bin 0 -> 31738 bytes .../healthstatus/dashboard/healthlog.webp | Bin 0 -> 70156 bytes .../dashboard/healthlogfilters_thumb_0_0.webp | Bin 0 -> 19614 bytes .../healthstatusdashboard_thumb_0_0.webp | Bin 0 -> 39342 bytes .../monitoringoverview_thumb_0_0.webp | Bin 0 -> 38692 bytes .../admin/healthstatus/email_thumb_0_0.webp | Bin 0 -> 54520 bytes .../admin/healthstatus/selfaudit_report.webp | Bin 0 -> 42038 bytes .../selfaudit_search_thumb_0_0.webp | Bin 0 -> 82936 bytes .../healthstatus/selfaudit_thumb_0_0.webp | Bin 0 -> 15454 bytes .../support_ticket_customer_portal.webp | Bin 0 -> 46104 bytes .../support_ticket_customer_portal_fixed.webp | Bin 0 -> 33700 bytes .../mp_data_source_ad_omit_example.webp | Bin 0 -> 25694 bytes .../ad_activitity_summary_thumb_0_0.webp | Bin 0 -> 60960 bytes .../10.8/admin/monitoringplans/delete.webp | Bin 0 -> 132 bytes .../item_computer_exclude_users.webp | Bin 0 -> 25930 bytes ...item_computer_exclude_users_thumb_0_0.webp | Bin 0 -> 25930 bytes .../item_computer_exclusions_thumb_0_0.webp | Bin 0 -> 29080 bytes .../fileservers/item_emc_scope_thumb_0_0.webp | Bin 0 -> 33550 bytes .../item_o365_basic_auth_thumb_0_0.webp | Bin 0 -> 32972 bytes .../mp_edit_data_source_thumb_0_0.webp | Bin 0 -> 28066 bytes .../monitoringplans/mp_wizard_step1.webp | Bin 0 -> 19528 bytes .../monitoringplans/mp_wizard_step2.webp | Bin 0 -> 11128 bytes .../mp_wizard_step_db_thumb_0_0.webp | Bin 0 -> 22492 bytes .../oracle/hiw_diagram_oracle.webp | Bin 0 -> 33470 bytes .../10.8/admin/monitoringplans/rbac-01.webp | Bin 0 -> 134640 bytes .../admin/monitoringplans/roles_groups.webp | Bin 0 -> 40360 bytes ...ource_sql_audit_select_rule_thumb_0_0.webp | Bin 0 -> 14970 bytes ...ata_source_sql_audit_select_thumb_0_0.webp | Bin 0 -> 45988 bytes .../data_source_sql_data_rule_thumb_0_0.webp | Bin 0 -> 9118 bytes .../data_source_sql_users_thumb_0_0.webp | Bin 0 -> 31614 bytes .../monitoringplans/tenantenvironment.webp | Bin 0 -> 15422 bytes .../monitoringplans/updatecredentials.webp | Bin 0 -> 27868 bytes .../useractivity/uavr_source_example_1.webp | Bin 0 -> 3134 bytes .../uavr_source_example_2_thumb_0_0.webp | Bin 0 -> 10468 bytes .../vmware/hiw_diagram_vma_thumb_0_0.webp | Bin 0 -> 37000 bytes .../admin/navigation/activity_records.webp | Bin 0 -> 2466 bytes .../admin/navigation/alerts_triggered.webp | Bin 0 -> 1780 bytes .../admin/navigation/environment_stats.webp | Bin 0 -> 3302 bytes .../navigation/favoritesrestorerefresh.webp | Bin 0 -> 17240 bytes .../navigation/homescreenresizetile.webp | Bin 0 -> 1252 bytes .../hs_screen_default_report_1.webp | Bin 0 -> 2820 bytes .../hs_screen_default_report_2.webp | Bin 0 -> 1252 bytes .../navigation/managerecommendations.webp | Bin 0 -> 19244 bytes .../navigation/monitroing_plans_overview.webp | Bin 0 -> 3448 bytes .../admin/navigation/recommendations.webp | Bin 0 -> 47408 bytes .../navigation/recommendations_tile.webp | Bin 0 -> 2390 bytes .../10.8/admin/navigation/remove_tile.webp | Bin 0 -> 986 bytes .../admin/navigation/reportsfavorites.webp | Bin 0 -> 24404 bytes .../10.8/admin/navigation/reportsoptions.webp | Bin 0 -> 27270 bytes .../10.8/admin/navigation/reportsummary.webp | Bin 0 -> 22552 bytes .../admin/navigation/scenario_reports_1.webp | Bin 0 -> 52532 bytes .../admin/navigation/scenario_reports_2.webp | Bin 0 -> 58422 bytes .../navigation/scenario_risks_thumb_0_0.webp | Bin 0 -> 37972 bytes .../10.8/admin/navigation/section_left.webp | Bin 0 -> 4584 bytes .../admin/navigation/welcome_section.webp | Bin 0 -> 21342 bytes .../allactivedirectorychanges_thumb_0_0.webp | Bin 0 -> 41252 bytes .../10.8/admin/reports/allchangesserver.webp | Bin 0 -> 57296 bytes .../reports/allchangesserverfiltered.webp | Bin 0 -> 29720 bytes .../alluseractivityvideo_thumb_0_0.webp | Bin 0 -> 58952 bytes .../10.8/admin/reports/reports_tile.webp | Bin 0 -> 764 bytes .../admin/reports/reviewstatus_thumb_0_0.webp | Bin 0 -> 57038 bytes .../reports/searchreports_thumb_0_0.webp | Bin 0 -> 31302 bytes .../reports/types/customreport_thumb_0_0.webp | Bin 0 -> 29838 bytes .../10.8/admin/reports/types/dashboard.webp | Bin 0 -> 41192 bytes .../types/failedactivitytrend_thumb_0_0.webp | Bin 0 -> 48246 bytes ...accountpermissionssqlserver_thumb_0_0.webp | Bin 0 -> 78760 bytes .../stateintime/fileshareswindowsservers.webp | Bin 0 -> 44008 bytes .../objectpermissionssqlserver_thumb_0_0.webp | Bin 0 -> 81894 bytes .../sqlserverdatabases_thumb_0_0.webp | Bin 0 -> 70962 bytes .../stateintime/sqlserverlevelroles.webp | Bin 0 -> 49130 bytes .../stateintime/sqlservermeansgranted.webp | Bin 0 -> 74874 bytes .../sqlservermeansgranteddetails.webp | Bin 0 -> 75404 bytes .../windowsserverinventory_thumb_0_0.webp | Bin 0 -> 42710 bytes ...erbehaviorblindspotanalysis_thumb_0_0.webp | Bin 0 -> 34788 bytes .../riskassessment/dashboard_thumb_0_0.webp | Bin 0 -> 84104 bytes .../riskassessment/edit_data_source_sit.webp | Bin 0 -> 37268 bytes .../edit_mp_open_ds_settings_thumb_0_0.webp | Bin 0 -> 21114 bytes .../edit_mp_store_data_to_db_thumb_0_0.webp | Bin 0 -> 26718 bytes .../modify_thresholds_thumb_0_0.webp | Bin 0 -> 13822 bytes .../images/auditor/10.8/admin/search/add.webp | Bin 0 -> 12528 bytes .../10.8/admin/search/addsuggestions.webp | Bin 0 -> 9684 bytes .../10.8/admin/search/advanced_thumb_0_0.webp | Bin 0 -> 21136 bytes .../search/advancedexample_thumb_0_0.webp | Bin 0 -> 7794 bytes .../search/advancedfilters_thumb_0_0.webp | Bin 0 -> 72120 bytes .../10.8/admin/search/search_filter.webp | Bin 0 -> 6832 bytes .../admin/search/search_modify_filter.webp | Bin 0 -> 2930 bytes .../10.8/admin/search/search_nofilter_1.webp | Bin 0 -> 67044 bytes .../10.8/admin/search/search_tile.webp | Bin 0 -> 1660 bytes .../settings/audit_db_settings_thumb_0_0.webp | Bin 0 -> 45426 bytes .../10.8/admin/settings/investigate.webp | Bin 0 -> 18102 bytes .../settings/lta_settings_thumb_0_0.webp | Bin 0 -> 29310 bytes .../auditor/10.8/admin/settings/msp.webp | Bin 0 -> 16806 bytes .../admin/settings/npsclientcertificate.webp | Bin 0 -> 32288 bytes .../settings/npsintegrationfinished.webp | Bin 0 -> 32078 bytes .../settings/npsintegrationparameters.webp | Bin 0 -> 43850 bytes .../report_rebranding_result_thumb_0_0.webp | Bin 0 -> 43810 bytes .../settings/report_rebranding_thumb_0_0.webp | Bin 0 -> 46870 bytes .../admin/settings/usersessions_storage.webp | Bin 0 -> 26868 bytes .../admin/subscriptions/subscription.webp | Bin 0 -> 21532 bytes .../10.8/api/apiactivity_thumb_0_0.webp | Bin 0 -> 23850 bytes .../auditor/10.8/api/apiactivitydetails.webp | Bin 0 -> 12822 bytes .../10.8/api/certificatestore_thumb_0_0.webp | Bin 0 -> 34030 bytes .../auditor/10.8/api/diagram_thumb_0_0.webp | Bin 0 -> 14936 bytes .../10.8/api/postdata/filterschema.webp | Bin 0 -> 28664 bytes ...alconfig_adsi_tombstone_winserver2016.webp | Bin 0 -> 42958 bytes .../mp_wizard_step1_ad_thumb_0_0.webp | Bin 0 -> 27832 bytes .../mp_adfs_listing_thumb_0_0.webp | Bin 0 -> 22194 bytes .../mp_data_source_ad_fs_thumb_0_0.webp | Bin 0 -> 24164 bytes .../manualconfig_orgmanagement2016.webp | Bin 0 -> 43272 bytes ...nualconfig_fileserver_auditpolicy2016.webp | Bin 0 -> 31150 bytes ...alconfig_fileserver_emc_auditingentry.webp | Bin 0 -> 29594 bytes ...fig_fileserver_emc_auditingentry_fail.webp | Bin 0 -> 29412 bytes .../netappcmode/auditing_entries_netapp.webp | Bin 0 -> 16128 bytes ...onfig_fileserver_auditingentry_1_2016.webp | Bin 0 -> 28682 bytes ...onfig_fileserver_auditingentry_2_2016.webp | Bin 0 -> 29852 bytes ...onfig_fileserver_auditingentry_3_2016.webp | Bin 0 -> 29662 bytes ...onfig_fileserver_auditingentry_4_2016.webp | Bin 0 -> 29486 bytes ...erver_netapp_createregistryvalue_2016.webp | Bin 0 -> 61488 bytes ...etentionperiodbackuplog_winserver2016.webp | Bin 0 -> 6096 bytes ...api_partner_server_resquest_thumb_0_0.webp | Bin 0 -> 38456 bytes .../fileservers/nutanix/api_thumb_0_0.webp | Bin 0 -> 6120 bytes .../nutanix/nutanix_item_mp_thumb_0_0.webp | Bin 0 -> 28120 bytes .../nutanix_item_restapi_thumb_0_0.webp | Bin 0 -> 18648 bytes .../nutanix/nutanix_user_thumb_0_0.webp | Bin 0 -> 63446 bytes .../fileservers/qumulo/qumulo_web_ui.webp | Bin 0 -> 6292 bytes ...config_ws_eventviewerpr2016_thumb_0_0.webp | Bin 0 -> 25564 bytes .../grouppolicy/npsdatacollectingaccount.webp | Bin 0 -> 11046 bytes .../npsdatacollectingaccountresourced.webp | Bin 0 -> 19722 bytes .../certificates_secrets_thumb_0_0.webp | Bin 0 -> 39794 bytes .../exchangeonline/tenant_id_thumb_0_0.webp | Bin 0 -> 43630 bytes .../networkdevices/manual_config_pulse_1.webp | Bin 0 -> 35478 bytes .../networkdevices/nand_aruba_logging.webp | Bin 0 -> 12194 bytes .../networkdevices/nand_aruba_status.webp | Bin 0 -> 6834 bytes .../networkdevices/nand_meraki_network.webp | Bin 0 -> 15406 bytes .../networkdevices/nand_meraki_server.webp | Bin 0 -> 7218 bytes .../manualconfig_uavr_ie2016.webp | Bin 0 -> 33384 bytes .../windowsserver/customregistrykey.webp | Bin 0 -> 44496 bytes .../windowsserver/customregistrykeyentry.webp | Bin 0 -> 41696 bytes .../gpo_eventlog_gpmc_thumb_0_0.webp | Bin 0 -> 34810 bytes .../gpo_eventlog_regedit_thumb_0_0.webp | Bin 0 -> 29112 bytes .../windowsserver/manual_config_dhcp_log.webp | Bin 0 -> 29362 bytes .../windowsserver/manualconfig_iis2016.webp | Bin 0 -> 26910 bytes .../manualconfig_ws_auditenrty2008.webp | Bin 0 -> 15806 bytes .../manualconfig_ws_auditenrty_2016.webp | Bin 0 -> 18778 bytes static/images/auditor/10.8/enablear.webp | Bin 0 -> 4446 bytes .../images/auditor/10.8/install/add_msi.webp | Bin 0 -> 20150 bytes .../10.8/install/installationscreen.webp | Bin 0 -> 30316 bytes .../virtualappliance/appliance_script.webp | Bin 0 -> 53298 bytes .../auditor/10.8/install/welcome_screen.webp | Bin 0 -> 62688 bytes .../install/welcome_screen_thumb_0_0.webp | Bin 0 -> 62688 bytes ...erver2016_advanced_deployment_options.webp | Bin 0 -> 19310 bytes .../winserver2016_ou_gpo_for_deploy.webp | Bin 0 -> 35826 bytes .../auditor/10.8/manageaccessreviews.webp | Bin 0 -> 22232 bytes .../archive_modify_settings_thumb_0_0.webp | Bin 0 -> 32088 bytes .../10.8/requirements/audit_db_settings.webp | Bin 0 -> 45426 bytes .../auditorarchitecture_thumb_0_0.webp | Bin 0 -> 41474 bytes .../auditor/10.8/requirements/gmsa.webp | Bin 0 -> 29228 bytes .../na_setup_select_type_thumb_0_0.webp | Bin 0 -> 20754 bytes static/images/auditor/10.8/senddataar.webp | Bin 0 -> 3578 bytes .../10.8/tools/ad_object_restore_1.webp | Bin 0 -> 52688 bytes .../10.8/tools/ad_object_restore_2.webp | Bin 0 -> 15502 bytes .../tools/assessment_results_thumb_0_0.webp | Bin 0 -> 35874 bytes .../10.8/tools/audit_cfg_assist_creds.webp | Bin 0 -> 48348 bytes .../10.8/tools/changesummary_eventlog.webp | Bin 0 -> 16126 bytes .../tools/inactiveusersactivedirectory.webp | Bin 0 -> 21494 bytes .../passwordexpiration.webp | Bin 0 -> 9776 bytes .../auditor/10.8/tools/select_button.webp | Bin 0 -> 168 bytes 501 files changed, 372 insertions(+), 371 deletions(-) create mode 100644 static/images/auditor/10.8/access/reviews/admin/additionalconfig/emailtemplates.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/additionalconfig/emailtemplatesfolder.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/additionalconfig/timeout.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/configuration/activedirectory.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/configuration/consoleaccess.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessadd.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessmodifyselectaccess.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessremove.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessselectaccess.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessselecttrustee.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/configuration/database.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/configuration/diagnostics.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/configuration/notifications.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/configuration/notificationsoptions.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/configuration/notificationssmtp.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/desktopicon.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/firstlaunchlandingpage.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/firstlaunchpassword.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/interface.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/landingadmin.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/landingowner.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/landingsecurityteam.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/login.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/troubleshooting/logvalue.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/troubleshooting/serviceproperties.webp create mode 100644 static/images/auditor/10.8/access/reviews/admin/troubleshooting/servicesmanager.webp create mode 100644 static/images/auditor/10.8/access/reviews/entitlementreviews/managereviewspage.webp create mode 100644 static/images/auditor/10.8/access/reviews/entitlementreviews/pendingreivewspage.webp create mode 100644 static/images/auditor/10.8/access/reviews/entitlementreviews/pendingreviewemail.webp create mode 100644 static/images/auditor/10.8/access/reviews/entitlementreviews/review/reviewpageaccesstab2.webp create mode 100644 static/images/auditor/10.8/access/reviews/entitlementreviews/review/reviewpagemembership.webp create mode 100644 static/images/auditor/10.8/access/reviews/entitlementreviews/review/reviewpagemembershiptab2.webp create mode 100644 static/images/auditor/10.8/access/reviews/entitlementreviews/reviewdetailspage.webp create mode 100644 static/images/auditor/10.8/access/reviews/entitlementreviews/reviewhistorypage.webp create mode 100644 static/images/auditor/10.8/access/reviews/entitlementreviews/reviewpageaccess.webp create mode 100644 static/images/auditor/10.8/access/reviews/entitlementreviews/wizard/createreviewresources.webp create mode 100644 static/images/auditor/10.8/access/reviews/entitlementreviews/wizard/createreviewreviewtype.webp create mode 100644 static/images/auditor/10.8/access/reviews/entitlementreviews/wizard/createreviewsummary.webp create mode 100644 static/images/auditor/10.8/access/reviews/installation/installcompleted.webp create mode 100644 static/images/auditor/10.8/access/reviews/installation/installconfigurewebserver.webp create mode 100644 static/images/auditor/10.8/access/reviews/installation/installdestinationfolder.webp create mode 100644 static/images/auditor/10.8/access/reviews/installation/installeula.webp create mode 100644 static/images/auditor/10.8/access/reviews/installation/installready.webp create mode 100644 static/images/auditor/10.8/access/reviews/installation/installsql.webp create mode 100644 static/images/auditor/10.8/access/reviews/installation/installsqldatabase.webp create mode 100644 static/images/auditor/10.8/access/reviews/installation/installwelcome.webp create mode 100644 static/images/auditor/10.8/access/reviews/installation/securebindingurlparameter.webp create mode 100644 static/images/auditor/10.8/access/reviews/resourceowners/email/confirmemail.webp create mode 100644 static/images/auditor/10.8/access/reviews/resourceowners/email/confirmemailaccept.webp create mode 100644 static/images/auditor/10.8/access/reviews/resourceowners/email/confirmemaildecline.webp create mode 100644 static/images/auditor/10.8/access/reviews/resourceowners/email/confirmemaildecline2.webp create mode 100644 static/images/auditor/10.8/access/reviews/resourceowners/interfacebuttons.webp create mode 100644 static/images/auditor/10.8/access/reviews/resourceowners/tablestatus.webp create mode 100644 static/images/auditor/10.8/access/reviews/resourceowners/window/addowner.webp create mode 100644 static/images/auditor/10.8/access/reviews/resourceowners/wizard/description.webp create mode 100644 static/images/auditor/10.8/access/reviews/resourceowners/wizard/description_1.webp create mode 100644 static/images/auditor/10.8/access/reviews/resourceowners/wizard/selectowners.webp create mode 100644 static/images/auditor/10.8/access/reviews/resourceowners/wizard/selectowners_1.webp create mode 100644 static/images/auditor/10.8/access/reviews/resourceowners/wizard/selectowners_2.webp create mode 100644 static/images/auditor/10.8/access/reviews/resourceowners/wizard/selectownerstaskcompleted.webp create mode 100644 static/images/auditor/10.8/access/reviews/resourceowners/wizard/selectownerswithowners.webp create mode 100644 static/images/auditor/10.8/access/reviews/resourceowners/wizard/selectresource.webp create mode 100644 static/images/auditor/10.8/access/reviews/resourceowners/wizard/summary.webp create mode 100644 static/images/auditor/10.8/access/reviews/resourceowners/wizard/summary_1.webp create mode 100644 static/images/auditor/10.8/access/reviews/resourceowners/wizard/summarytaskcompleted.webp create mode 100644 static/images/auditor/10.8/access/reviews/resourceowners/wizard/summarytaskcompleted_1.webp create mode 100644 static/images/auditor/10.8/accountlockoutexaminer/ale_new_results.webp create mode 100644 static/images/auditor/10.8/accountlockoutexaminer/ale_new_start_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/accountlockoutexaminer/ale_settings_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/accountlockoutexaminer/ale_usage_stats_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/addon/addonstore.webp create mode 100644 static/images/auditor/10.8/addon/amazonwebservices/activityrecords.webp create mode 100644 static/images/auditor/10.8/addon/api_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/addon/arcsight/activityrecords.webp create mode 100644 static/images/auditor/10.8/addon/arcsight/configuration.webp create mode 100644 static/images/auditor/10.8/addon/azurefiles/adcredentials.webp create mode 100644 static/images/auditor/10.8/addon/azurefiles/azurefileconnectionstring.webp create mode 100644 static/images/auditor/10.8/addon/azurefiles/azurefileeula.webp create mode 100644 static/images/auditor/10.8/addon/azurefiles/azurefileinstfolder.webp create mode 100644 static/images/auditor/10.8/addon/azurefiles/generalsettings.webp create mode 100644 static/images/auditor/10.8/addon/azurefiles/microsoftgraphapi.webp create mode 100644 static/images/auditor/10.8/addon/connectwise/addon.webp create mode 100644 static/images/auditor/10.8/addon/connectwise/connectionsetup.webp create mode 100644 static/images/auditor/10.8/addon/connectwise/diagram.webp create mode 100644 static/images/auditor/10.8/addon/connectwise/diagramworkflow_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/addon/connectwise/integrations_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/addon/connectwise/serviceboard.webp create mode 100644 static/images/auditor/10.8/addon/connectwise/serviceticketrouting.webp create mode 100644 static/images/auditor/10.8/addon/connectwise/summary_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/addon/connectwise/testalert.webp create mode 100644 static/images/auditor/10.8/addon/connectwise/ticketfieldmapping.webp create mode 100644 static/images/auditor/10.8/addon/copilot/adcredentials.webp create mode 100644 static/images/auditor/10.8/addon/copilot/tenantapp.webp create mode 100644 static/images/auditor/10.8/addon/ctera/configwizard.webp create mode 100644 static/images/auditor/10.8/addon/ctera/ctera.webp create mode 100644 static/images/auditor/10.8/addon/cyberark/configwizard.webp create mode 100644 static/images/auditor/10.8/addon/cyberark/cyberark_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/addon/cyberark/dbparamfile_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/addon/cyberark/diagram_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/addon/hyperv/diagram1server.webp create mode 100644 static/images/auditor/10.8/addon/hyperv/diagram2servers_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/addon/hyperv/diagram3servers_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/addon/hyperv/diagram_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/addon/linux/configwizard.webp create mode 100644 static/images/auditor/10.8/addon/nasuni/configwizard.webp create mode 100644 static/images/auditor/10.8/addon/nutanixahv/diagram_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/addon/nutanixahv/nutanixahv_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/addon/privilegeduserlinux/configwizard.webp create mode 100644 static/images/auditor/10.8/addon/qumulo/diagram_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/addon/qumulo/qumulo_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/addon/radius/radius.webp create mode 100644 static/images/auditor/10.8/addon/radius/radiusfilters.webp create mode 100644 static/images/auditor/10.8/addon/solarwinds/eventlogexample_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/addon/solarwinds/eventlogexportexample_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/addon/splunk/addaccount.webp create mode 100644 static/images/auditor/10.8/addon/splunk/addapi.webp create mode 100644 static/images/auditor/10.8/addon/splunk/config.webp create mode 100644 static/images/auditor/10.8/addon/splunk/configuration.webp create mode 100644 static/images/auditor/10.8/addon/splunk/configurationaccount.webp create mode 100644 static/images/auditor/10.8/addon/splunk/configurationaddonsettings.webp create mode 100644 static/images/auditor/10.8/addon/splunk/diagram.webp create mode 100644 static/images/auditor/10.8/addon/splunk/inputs.webp create mode 100644 static/images/auditor/10.8/addon/splunk/installapp.webp create mode 100644 static/images/auditor/10.8/addon/splunk/searchreporting.webp create mode 100644 static/images/auditor/10.8/addon/splunk/searchreportingapp.webp create mode 100644 static/images/auditor/10.8/addon/splunk/uploadapp.webp create mode 100644 static/images/auditor/10.8/admin/alertsettings/ad_alert.webp create mode 100644 static/images/auditor/10.8/admin/alertsettings/alerts_history_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/alertsettings/alerts_overview_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/alertsettings/command_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/alertsettings/configuration_tile.webp create mode 100644 static/images/auditor/10.8/admin/alertsettings/csvfile_thumb_0_48.webp create mode 100644 static/images/auditor/10.8/admin/alertsettings/editnotificationtemplate.webp create mode 100644 static/images/auditor/10.8/admin/alertsettings/emailhealthstatusevent.webp create mode 100644 static/images/auditor/10.8/admin/alertsettings/eventfilters.webp create mode 100644 static/images/auditor/10.8/admin/alertsettings/eventmessageopen.webp create mode 100644 static/images/auditor/10.8/admin/alertsettings/managetags.webp create mode 100644 static/images/auditor/10.8/admin/alertsettings/passwordreset_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/alertsettings/powershell_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/alertsettings/preview_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/behavioranomalies/ba_tile.webp create mode 100644 static/images/auditor/10.8/admin/behavioranomalies/changestatus_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/behavioranomalies/dashboard_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/behavioranomalies/userprofile_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/compliance_mappings.webp create mode 100644 static/images/auditor/10.8/admin/healthstatus/dashboard/activityrecordsdetails_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/healthstatus/dashboard/dbstatistics_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/healthstatus/dashboard/dbstats_overview_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/healthstatus/dashboard/healthlog.webp create mode 100644 static/images/auditor/10.8/admin/healthstatus/dashboard/healthlogfilters_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/healthstatus/dashboard/healthstatusdashboard_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/healthstatus/email_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/healthstatus/selfaudit_report.webp create mode 100644 static/images/auditor/10.8/admin/healthstatus/selfaudit_search_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/healthstatus/selfaudit_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/healthstatus/support_ticket_customer_portal.webp create mode 100644 static/images/auditor/10.8/admin/healthstatus/support_ticket_customer_portal_fixed.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/activedirectory/mp_data_source_ad_omit_example.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/ad_activitity_summary_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/delete.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/fileservers/item_computer_exclude_users.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/fileservers/item_computer_exclusions_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/fileservers/item_emc_scope_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/item_o365_basic_auth_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/mp_edit_data_source_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/mp_wizard_step1.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/mp_wizard_step2.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/mp_wizard_step_db_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/oracle/hiw_diagram_oracle.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/rbac-01.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/roles_groups.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/sqlserver/data_source_sql_audit_select_rule_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/sqlserver/data_source_sql_audit_select_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/sqlserver/data_source_sql_data_rule_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/sqlserver/data_source_sql_users_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/tenantenvironment.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/updatecredentials.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/useractivity/uavr_source_example_1.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/useractivity/uavr_source_example_2_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/monitoringplans/vmware/hiw_diagram_vma_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/navigation/activity_records.webp create mode 100644 static/images/auditor/10.8/admin/navigation/alerts_triggered.webp create mode 100644 static/images/auditor/10.8/admin/navigation/environment_stats.webp create mode 100644 static/images/auditor/10.8/admin/navigation/favoritesrestorerefresh.webp create mode 100644 static/images/auditor/10.8/admin/navigation/homescreenresizetile.webp create mode 100644 static/images/auditor/10.8/admin/navigation/hs_screen_default_report_1.webp create mode 100644 static/images/auditor/10.8/admin/navigation/hs_screen_default_report_2.webp create mode 100644 static/images/auditor/10.8/admin/navigation/managerecommendations.webp create mode 100644 static/images/auditor/10.8/admin/navigation/monitroing_plans_overview.webp create mode 100644 static/images/auditor/10.8/admin/navigation/recommendations.webp create mode 100644 static/images/auditor/10.8/admin/navigation/recommendations_tile.webp create mode 100644 static/images/auditor/10.8/admin/navigation/remove_tile.webp create mode 100644 static/images/auditor/10.8/admin/navigation/reportsfavorites.webp create mode 100644 static/images/auditor/10.8/admin/navigation/reportsoptions.webp create mode 100644 static/images/auditor/10.8/admin/navigation/reportsummary.webp create mode 100644 static/images/auditor/10.8/admin/navigation/scenario_reports_1.webp create mode 100644 static/images/auditor/10.8/admin/navigation/scenario_reports_2.webp create mode 100644 static/images/auditor/10.8/admin/navigation/scenario_risks_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/navigation/section_left.webp create mode 100644 static/images/auditor/10.8/admin/navigation/welcome_section.webp create mode 100644 static/images/auditor/10.8/admin/reports/allactivedirectorychanges_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/reports/allchangesserver.webp create mode 100644 static/images/auditor/10.8/admin/reports/allchangesserverfiltered.webp create mode 100644 static/images/auditor/10.8/admin/reports/alluseractivityvideo_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/reports/reports_tile.webp create mode 100644 static/images/auditor/10.8/admin/reports/reviewstatus_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/reports/searchreports_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/reports/types/customreport_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/reports/types/dashboard.webp create mode 100644 static/images/auditor/10.8/admin/reports/types/failedactivitytrend_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/reports/types/stateintime/accountpermissionssqlserver_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/reports/types/stateintime/fileshareswindowsservers.webp create mode 100644 static/images/auditor/10.8/admin/reports/types/stateintime/objectpermissionssqlserver_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/reports/types/stateintime/sqlserverdatabases_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/reports/types/stateintime/sqlserverlevelroles.webp create mode 100644 static/images/auditor/10.8/admin/reports/types/stateintime/sqlservermeansgranted.webp create mode 100644 static/images/auditor/10.8/admin/reports/types/stateintime/sqlservermeansgranteddetails.webp create mode 100644 static/images/auditor/10.8/admin/reports/types/stateintime/windowsserverinventory_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/reports/types/userbehaviorblindspotanalysis_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/riskassessment/dashboard_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/riskassessment/edit_data_source_sit.webp create mode 100644 static/images/auditor/10.8/admin/riskassessment/edit_mp_open_ds_settings_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/riskassessment/edit_mp_store_data_to_db_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/riskassessment/modify_thresholds_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/search/add.webp create mode 100644 static/images/auditor/10.8/admin/search/addsuggestions.webp create mode 100644 static/images/auditor/10.8/admin/search/advanced_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/search/advancedexample_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/search/advancedfilters_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/search/search_filter.webp create mode 100644 static/images/auditor/10.8/admin/search/search_modify_filter.webp create mode 100644 static/images/auditor/10.8/admin/search/search_nofilter_1.webp create mode 100644 static/images/auditor/10.8/admin/search/search_tile.webp create mode 100644 static/images/auditor/10.8/admin/settings/audit_db_settings_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/settings/investigate.webp create mode 100644 static/images/auditor/10.8/admin/settings/lta_settings_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/settings/msp.webp create mode 100644 static/images/auditor/10.8/admin/settings/npsclientcertificate.webp create mode 100644 static/images/auditor/10.8/admin/settings/npsintegrationfinished.webp create mode 100644 static/images/auditor/10.8/admin/settings/npsintegrationparameters.webp create mode 100644 static/images/auditor/10.8/admin/settings/report_rebranding_result_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/settings/report_rebranding_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/admin/settings/usersessions_storage.webp create mode 100644 static/images/auditor/10.8/admin/subscriptions/subscription.webp create mode 100644 static/images/auditor/10.8/api/apiactivity_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/api/apiactivitydetails.webp create mode 100644 static/images/auditor/10.8/api/certificatestore_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/api/diagram_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/api/postdata/filterschema.webp create mode 100644 static/images/auditor/10.8/configuration/activedirectory/manualconfig_adsi_tombstone_winserver2016.webp create mode 100644 static/images/auditor/10.8/configuration/activedirectory/mp_wizard_step1_ad_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/configuration/activedirectoryfederatedservices/mp_adfs_listing_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/configuration/activedirectoryfederatedservices/mp_data_source_ad_fs_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/configuration/exchange/manualconfig_orgmanagement2016.webp create mode 100644 static/images/auditor/10.8/configuration/fileservers/delldatastorage/manualconfig_fileserver_auditpolicy2016.webp create mode 100644 static/images/auditor/10.8/configuration/fileservers/delldatastorage/manualconfig_fileserver_emc_auditingentry.webp create mode 100644 static/images/auditor/10.8/configuration/fileservers/delldatastorage/manualconfig_fileserver_emc_auditingentry_fail.webp create mode 100644 static/images/auditor/10.8/configuration/fileservers/netappcmode/auditing_entries_netapp.webp create mode 100644 static/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_1_2016.webp create mode 100644 static/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_2_2016.webp create mode 100644 static/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_3_2016.webp create mode 100644 static/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_4_2016.webp create mode 100644 static/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_netapp_createregistryvalue_2016.webp create mode 100644 static/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_retentionperiodbackuplog_winserver2016.webp create mode 100644 static/images/auditor/10.8/configuration/fileservers/nutanix/api_partner_server_resquest_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/configuration/fileservers/nutanix/api_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/configuration/fileservers/nutanix/nutanix_item_mp_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/configuration/fileservers/nutanix/nutanix_item_restapi_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/configuration/fileservers/nutanix/nutanix_user_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/configuration/fileservers/qumulo/qumulo_web_ui.webp create mode 100644 static/images/auditor/10.8/configuration/fileservers/windows/manualconfig_ws_eventviewerpr2016_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccount.webp create mode 100644 static/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccountresourced.webp create mode 100644 static/images/auditor/10.8/configuration/microsoft365/exchangeonline/certificates_secrets_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/configuration/microsoft365/exchangeonline/tenant_id_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/configuration/networkdevices/manual_config_pulse_1.webp create mode 100644 static/images/auditor/10.8/configuration/networkdevices/nand_aruba_logging.webp create mode 100644 static/images/auditor/10.8/configuration/networkdevices/nand_aruba_status.webp create mode 100644 static/images/auditor/10.8/configuration/networkdevices/nand_meraki_network.webp create mode 100644 static/images/auditor/10.8/configuration/networkdevices/nand_meraki_server.webp create mode 100644 static/images/auditor/10.8/configuration/useractivity/manualconfig_uavr_ie2016.webp create mode 100644 static/images/auditor/10.8/configuration/windowsserver/customregistrykey.webp create mode 100644 static/images/auditor/10.8/configuration/windowsserver/customregistrykeyentry.webp create mode 100644 static/images/auditor/10.8/configuration/windowsserver/gpo_eventlog_gpmc_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/configuration/windowsserver/gpo_eventlog_regedit_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/configuration/windowsserver/manual_config_dhcp_log.webp create mode 100644 static/images/auditor/10.8/configuration/windowsserver/manualconfig_iis2016.webp create mode 100644 static/images/auditor/10.8/configuration/windowsserver/manualconfig_ws_auditenrty2008.webp create mode 100644 static/images/auditor/10.8/configuration/windowsserver/manualconfig_ws_auditenrty_2016.webp create mode 100644 static/images/auditor/10.8/enablear.webp create mode 100644 static/images/auditor/10.8/install/add_msi.webp create mode 100644 static/images/auditor/10.8/install/installationscreen.webp create mode 100644 static/images/auditor/10.8/install/virtualappliance/appliance_script.webp create mode 100644 static/images/auditor/10.8/install/welcome_screen.webp create mode 100644 static/images/auditor/10.8/install/welcome_screen_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/install/winserver2016_advanced_deployment_options.webp create mode 100644 static/images/auditor/10.8/install/winserver2016_ou_gpo_for_deploy.webp create mode 100644 static/images/auditor/10.8/manageaccessreviews.webp create mode 100644 static/images/auditor/10.8/requirements/archive_modify_settings_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/requirements/audit_db_settings.webp create mode 100644 static/images/auditor/10.8/requirements/auditorarchitecture_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/requirements/gmsa.webp create mode 100644 static/images/auditor/10.8/requirements/na_setup_select_type_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/senddataar.webp create mode 100644 static/images/auditor/10.8/tools/ad_object_restore_1.webp create mode 100644 static/images/auditor/10.8/tools/ad_object_restore_2.webp create mode 100644 static/images/auditor/10.8/tools/assessment_results_thumb_0_0.webp create mode 100644 static/images/auditor/10.8/tools/audit_cfg_assist_creds.webp create mode 100644 static/images/auditor/10.8/tools/changesummary_eventlog.webp create mode 100644 static/images/auditor/10.8/tools/inactiveusersactivedirectory.webp create mode 100644 static/images/auditor/10.8/tools/passwordexpirationnotifier/passwordexpiration.webp create mode 100644 static/images/auditor/10.8/tools/select_button.webp diff --git a/.claude/settings.local.json b/.claude/settings.local.json index d95dec73f1..1712d76faf 100644 --- a/.claude/settings.local.json +++ b/.claude/settings.local.json @@ -13,7 +13,8 @@ "Bash(rm:*)", "Bash(git add:*)", "Bash(git commit:*)", - "Bash(find:*)" + "Bash(find:*)", + "Bash(ls:*)" ], "deny": [] } diff --git a/docs/auditor/10.8/accessreviews/admin/additionalconfig/emailtemplates.md b/docs/auditor/10.8/accessreviews/admin/additionalconfig/emailtemplates.md index 73617b956d..78d013597c 100644 --- a/docs/auditor/10.8/accessreviews/admin/additionalconfig/emailtemplates.md +++ b/docs/auditor/10.8/accessreviews/admin/additionalconfig/emailtemplates.md @@ -48,7 +48,7 @@ Follow the steps to customize the email templates. **NOTE:** To successfully modify these Notifications email templates, a familiarity with basic HTML is necessary. -![Access Reviews installation directory showing the Templates zip file](/images/auditor/10.8/access/reviews/admin/additionalconfig/emailtemplates.webp) +![Access Reviews installation directory showing the Templates zip file](/images/auditor/10.7/access/reviews/admin/additionalconfig/emailtemplates.webp) **Step 1 –** Navigate to the Access Reviews installation directory. @@ -58,7 +58,7 @@ named `Templates`. **CAUTION:** The customized email templates must be in the `Templates` folder within the installation directory to be preserved during future application upgrades. -![Templates folder showing email templates](/images/auditor/10.8/access/reviews/admin/additionalconfig/emailtemplatesfolder.webp) +![Templates folder showing email templates](/images/auditor/10.7/access/reviews/admin/additionalconfig/emailtemplatesfolder.webp) **Step 3 –** Locate the desired HTML message template. diff --git a/docs/auditor/10.8/accessreviews/admin/additionalconfig/timeoutparameter.md b/docs/auditor/10.8/accessreviews/admin/additionalconfig/timeoutparameter.md index 011713735f..25b9fef5ae 100644 --- a/docs/auditor/10.8/accessreviews/admin/additionalconfig/timeoutparameter.md +++ b/docs/auditor/10.8/accessreviews/admin/additionalconfig/timeoutparameter.md @@ -19,7 +19,7 @@ Follow the steps to modify the timeout parameter. **Step 1 –** Open the `AccessInformationCenter.Service.exe.Config` file with a text editor, e.g. Notepad. -![Notepad showing the AccessInformationCenter.Service.exe.Config file](/images/auditor/10.8/access/reviews/admin/additionalconfig/timeout.webp) +![Notepad showing the AccessInformationCenter.Service.exe.Config file](/images/auditor/10.7/access/reviews/admin/additionalconfig/timeout.webp) **Step 2 –** Change the value for the `AuthSessionTimeout` parameter to the desired number of minutes. For example: diff --git a/docs/auditor/10.8/accessreviews/admin/configuration/activedirectory.md b/docs/auditor/10.8/accessreviews/admin/configuration/activedirectory.md index 252b8c5fbc..9f697ae791 100644 --- a/docs/auditor/10.8/accessreviews/admin/configuration/activedirectory.md +++ b/docs/auditor/10.8/accessreviews/admin/configuration/activedirectory.md @@ -19,7 +19,7 @@ connecting to the database. If your Database service account uses: - Windows authentication credentials — The same domain credentials are also used for the Active Directory service account -![Configuration interface showing the Active Directory page](/images/auditor/10.8/access/reviews/admin/configuration/activedirectory.webp) +![Configuration interface showing the Active Directory page](/images/auditor/10.7/access/reviews/admin/configuration/activedirectory.webp) There are two options for the type of Active Directory service account: diff --git a/docs/auditor/10.8/accessreviews/admin/configuration/consoleaccess.md b/docs/auditor/10.8/accessreviews/admin/configuration/consoleaccess.md index b9cd2275cb..8c6c87958b 100644 --- a/docs/auditor/10.8/accessreviews/admin/configuration/consoleaccess.md +++ b/docs/auditor/10.8/accessreviews/admin/configuration/consoleaccess.md @@ -9,7 +9,7 @@ sidebar_position: 10 Console access is configured through the Configuration > Console Access page. Adding users to the Access Reviews Console requires the Active Directory service account to be configured. -![Configuration interface showing the Console Access page](/images/auditor/10.8/access/reviews/admin/configuration/consoleaccess.webp) +![Configuration interface showing the Console Access page](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccess.webp) There are two levels of access, or roles, which can be granted to domain users or groups: @@ -35,12 +35,12 @@ directed after login based on their assigned role or lack of role. Follow the steps to grant domain users or groups console access. -![Console Access Page](/images/auditor/10.8/access/reviews/admin/configuration/consoleaccess.webp) +![Console Access Page](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccess.webp) **Step 1 –** In the Configuration interface on the Console Access page, click Add. The Console Access wizard opens. -![Console Access wizard showing the Select Trustees page](/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessselecttrustee.webp) +![Console Access wizard showing the Select Trustees page](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccessselecttrustee.webp) **Step 2 –** On the Select Trustee page, enter the following information and click Next: @@ -49,7 +49,7 @@ Access wizard opens. - Search — Begin typing the sAMAccountName or display name and the field will auto-populate options from Active Directory sAMAccountName -![Console Access wizard showing the Select Access page](/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessselectaccess.webp) +![Console Access wizard showing the Select Access page](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccessselectaccess.webp) **Step 3 –** On the Select Access page, enter the following information and click **Finish**: @@ -64,7 +64,7 @@ Access wizard opens. - Access is enabled – A user's account must be enabled in order to log into the console. Unchecking this option allows you to configure access to be granted at a future time. -![Console Access Page displaying users with various assigned roles](/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessadd.webp) +![Console Access Page displaying users with various assigned roles](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccessadd.webp) **Step 4 –** The new user displays in the list on the Console Access page. Repeat these steps for each trustee to be granted console access. @@ -84,7 +84,7 @@ additional information. **Step 1 –** In the Configuration interface on the Console Access page, select the user to be modified and click Modify. The Console Access wizard opens to the Select Access page. -![Console Access wizard showing the Select Access page when modifying](/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessmodifyselectaccess.webp) +![Console Access wizard showing the Select Access page when modifying](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccessmodifyselectaccess.webp) **Step 2 –** Modify the desired settings and click **Finish**: @@ -112,7 +112,7 @@ user is to disable their access. See the Modify Console Users topic for addition Follow the steps to remove a user’s configured console access. -![Console Access Page showing various user accounts, with one selected enabling the Modify and Remove buttons](/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessremove.webp) +![Console Access Page showing various user accounts, with one selected enabling the Modify and Remove buttons](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccessremove.webp) **Step 1 –** In the Configuration interface on the Console Access page, select the user. diff --git a/docs/auditor/10.8/accessreviews/admin/configuration/database.md b/docs/auditor/10.8/accessreviews/admin/configuration/database.md index 8482a07d30..09d7654a58 100644 --- a/docs/auditor/10.8/accessreviews/admin/configuration/database.md +++ b/docs/auditor/10.8/accessreviews/admin/configuration/database.md @@ -10,7 +10,7 @@ The Access Reviews application must have access to the SQL Server hosting the da configured during installation. If it is necessary to modify these setting after installation, that is done on the Database Page of the Configuration interface. -![Configuration interface showing the Database page](/images/auditor/10.8/access/reviews/admin/configuration/database.webp) +![Configuration interface showing the Database page](/images/auditor/10.7/access/reviews/admin/configuration/database.webp) SQL Server database information: diff --git a/docs/auditor/10.8/accessreviews/admin/configuration/diagnostics.md b/docs/auditor/10.8/accessreviews/admin/configuration/diagnostics.md index c16ef8b727..bd7ec27de8 100644 --- a/docs/auditor/10.8/accessreviews/admin/configuration/diagnostics.md +++ b/docs/auditor/10.8/accessreviews/admin/configuration/diagnostics.md @@ -9,7 +9,7 @@ sidebar_position: 50 Download logs and enable debug log level for troubleshooting with Netwrix Support on the Diagnostics page of the Configuration interface. -![Configuration interface showing the Diagnostics page](/images/auditor/10.8/access/reviews/admin/configuration/diagnostics.webp) +![Configuration interface showing the Diagnostics page](/images/auditor/10.7/access/reviews/admin/configuration/diagnostics.webp) When requested by [Netwrix Support](https://www.netwrix.com/support.html), click Download Logs to download the archive of all application logs. diff --git a/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md b/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md index 0123c2e327..ac1c99dcc8 100644 --- a/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md +++ b/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md @@ -10,7 +10,7 @@ The Access Reviews application uses the Simple Mail Transfer Protocol (SMTP) to SMTP server information and several messaging options can be set through the Configuration > Notifications page. -![Notifications Page](/images/auditor/10.8/access/reviews/admin/configuration/notifications.webp) +![Notifications Page](/images/auditor/10.7/access/reviews/admin/configuration/notifications.webp) At the top, the SMTP server and email security settings are configured. The Notification options is where you configure the sender information, and other optional settings. The Reminders section is @@ -21,7 +21,7 @@ for configuring weekly reminders for owners with outstanding reviews. SMTP server information is supplied and modified on the Notifications page. Follow the steps to configure or modify the SMTP settings. -![Notifications page SMTP server settings section](/images/auditor/10.8/access/reviews/admin/configuration/notificationssmtp.webp) +![Notifications page SMTP server settings section](/images/auditor/10.7/access/reviews/admin/configuration/notificationssmtp.webp) **Step 1 –** In the Configuration interface, select the Notifications page. @@ -81,7 +81,7 @@ Notification options. Once the SMTP server is configured, there are additional options. Only the Reply-To field must be populated: -![Notifications page showing Notification Options section](/images/auditor/10.8/access/reviews/admin/configuration/notificationsoptions.webp) +![Notifications page showing Notification Options section](/images/auditor/10.7/access/reviews/admin/configuration/notificationsoptions.webp) - Reply-To — The email address that receives responses to notifications sent by the application. This can be a “no reply” address. diff --git a/docs/auditor/10.8/accessreviews/admin/configuration/overview.md b/docs/auditor/10.8/accessreviews/admin/configuration/overview.md index 337cefe290..7e1fc53a1a 100644 --- a/docs/auditor/10.8/accessreviews/admin/configuration/overview.md +++ b/docs/auditor/10.8/accessreviews/admin/configuration/overview.md @@ -9,7 +9,7 @@ sidebar_position: 30 The Configuration interface is available only to users with the Administrator role. It is opened by the **Configuration** tab. -![Configuration interface showing the Console Access page](/images/auditor/10.8/access/reviews/admin/configuration/consoleaccess.webp) +![Configuration interface showing the Console Access page](/images/auditor/10.7/access/reviews/admin/configuration/consoleaccess.webp) It has the following pages: diff --git a/docs/auditor/10.8/accessreviews/admin/firstlaunch.md b/docs/auditor/10.8/accessreviews/admin/firstlaunch.md index 238d55e80d..da3ac80506 100644 --- a/docs/auditor/10.8/accessreviews/admin/firstlaunch.md +++ b/docs/auditor/10.8/accessreviews/admin/firstlaunch.md @@ -8,11 +8,11 @@ sidebar_position: 10 The installer places the following icon on the desktop which opens the Access Reviews Console: -![desktopicon](/images/auditor/10.8/access/reviews/admin/desktopicon.webp) +![desktopicon](/images/auditor/10.7/access/reviews/admin/desktopicon.webp) Use this icon to launch the Access Reviews Console for the first time. -![Set Builtin Administrator Password page](/images/auditor/10.8/access/reviews/admin/firstlaunchpassword.webp) +![Set Builtin Administrator Password page](/images/auditor/10.7/access/reviews/admin/firstlaunchpassword.webp) The Access Reviews application is installed with a Builtin Administrator account; "admin" is the User Name. You will be prompted to set the account's password. It must be eight or more characters @@ -24,7 +24,7 @@ Administrator account. See the [Modify the Builtin Administrator Account](configuration/consoleaccess.md#modify-the-builtin-administrator-account) topic for additional information. -![firstlaunchlandingpage](/images/auditor/10.8/access/reviews/admin/firstlaunchlandingpage.webp) +![firstlaunchlandingpage](/images/auditor/10.7/access/reviews/admin/firstlaunchlandingpage.webp) The Resource Owners interface opens. The first thing that should be done is to configure console access for domain users and configure notification settings. Select the Configuration tab. See the diff --git a/docs/auditor/10.8/accessreviews/admin/login.md b/docs/auditor/10.8/accessreviews/admin/login.md index 1743b736d4..3bd28a4e58 100644 --- a/docs/auditor/10.8/accessreviews/admin/login.md +++ b/docs/auditor/10.8/accessreviews/admin/login.md @@ -47,7 +47,7 @@ username needs to be entered in the `domain\username` format. **NOTE:** The URL may need to be added to the browser’s list of trusted sites. -![Access Information Center Login page](/images/auditor/10.8/access/reviews/admin/login.webp) +![Access Information Center Login page](/images/auditor/10.7/access/reviews/admin/login.webp) The interface a user arrives at depends upon the assigned role or lack of assigned role. @@ -65,7 +65,7 @@ information. Users granted the Administrator role are directed to the Resource Owners interface upon login. -![Resource Owners interface as the landing page for an Administrator user](/images/auditor/10.8/access/reviews/admin/landingadmin.webp) +![Resource Owners interface as the landing page for an Administrator user](/images/auditor/10.7/access/reviews/admin/landingadmin.webp) Administrators are the only ones with access to the Configuration interface. The My Reviews interface is available if the logged in user is also assigned ownership of a resource. @@ -74,7 +74,7 @@ interface is available if the logged in user is also assigned ownership of a res Users granted the Security Team role are directed to the Resource Owners interface upon login. -![Resource Owners interface as the landing page for a Security Team user](/images/auditor/10.8/access/reviews/admin/landingsecurityteam.webp) +![Resource Owners interface as the landing page for a Security Team user](/images/auditor/10.7/access/reviews/admin/landingsecurityteam.webp) Security Team members only lack access to the Configuration interface, which is only available to Administrators. The My Reviews interface is available if the logged in user is also assigned @@ -85,6 +85,6 @@ ownership of a resource. Users assigned ownership of a resource but not granted a user role are directed to the My Reviews interface upon login. -![My Reviews interface as the landing page for an Owner without a user role](/images/auditor/10.8/access/reviews/admin/landingowner.webp) +![My Reviews interface as the landing page for an Owner without a user role](/images/auditor/10.7/access/reviews/admin/landingowner.webp) Owners can view pending reviews and view historical reviews. diff --git a/docs/auditor/10.8/accessreviews/admin/navigate/navigate.md b/docs/auditor/10.8/accessreviews/admin/navigate/navigate.md index 47633a7e97..321b96fbb6 100644 --- a/docs/auditor/10.8/accessreviews/admin/navigate/navigate.md +++ b/docs/auditor/10.8/accessreviews/admin/navigate/navigate.md @@ -9,7 +9,7 @@ sidebar_position: 20 The Access Reviews Console has four interfaces. Upon login, users granted console access are brought to the Resource Owners interface. -![Access Information Center landing page, Resource Owners interface, with all 4 tabs available to an Administrator who is also an assigned owner](/images/auditor/10.8/access/reviews/admin/interface.webp) +![Access Information Center landing page, Resource Owners interface, with all 4 tabs available to an Administrator who is also an assigned owner](/images/auditor/10.7/access/reviews/admin/interface.webp) The signed in user is displayed in the upper-right corner, along with the **Sign out** link. The available interfaces change according to the role assigned to the user. diff --git a/docs/auditor/10.8/accessreviews/admin/troubleshooting/loglevel.md b/docs/auditor/10.8/accessreviews/admin/troubleshooting/loglevel.md index bc5824b7f5..bf5b6f4118 100644 --- a/docs/auditor/10.8/accessreviews/admin/troubleshooting/loglevel.md +++ b/docs/auditor/10.8/accessreviews/admin/troubleshooting/loglevel.md @@ -16,7 +16,7 @@ Follow the steps to modify the log level. **Step 1 –** Open the `AccessInformationCenter.Service.exe.Config` file in a text editor, e.g. Notepad. -![AccessInformationCenter.Service.exe.Config file in Notepad](/images/auditor/10.8/access/reviews/admin/troubleshooting/logvalue.webp) +![AccessInformationCenter.Service.exe.Config file in Notepad](/images/auditor/10.7/access/reviews/admin/troubleshooting/logvalue.webp) **Step 2 –** The level value is set in the `LogLevel` parameter, where "2" is the default level. As the logging level increases from 0 to 3, the types of information and level of detail included diff --git a/docs/auditor/10.8/accessreviews/admin/troubleshooting/serviceaccount.md b/docs/auditor/10.8/accessreviews/admin/troubleshooting/serviceaccount.md index 7a98a94444..d67ab2718e 100644 --- a/docs/auditor/10.8/accessreviews/admin/troubleshooting/serviceaccount.md +++ b/docs/auditor/10.8/accessreviews/admin/troubleshooting/serviceaccount.md @@ -30,12 +30,12 @@ Access Reviews service. **Step 1 –** Navigate to Service Control Manager (`services.msc`). The Services Control Manager opens. -![Services Manager Console showing the Netwrix Access Information Center service and the right-click Menu](/images/auditor/10.8/access/reviews/admin/troubleshooting/servicesmanager.webp) +![Services Manager Console showing the Netwrix Access Information Center service and the right-click Menu](/images/auditor/10.7/access/reviews/admin/troubleshooting/servicesmanager.webp) **Step 2 –** Right-click on the Netwrix Auditor Access Reviews service and select **Properties**. The service Properties window opens. -![Netwrix Access Information Center service Properties window with Select User browser window](/images/auditor/10.8/access/reviews/admin/troubleshooting/serviceproperties.webp) +![Netwrix Access Information Center service Properties window with Select User browser window](/images/auditor/10.7/access/reviews/admin/troubleshooting/serviceproperties.webp) **Step 3 –** On the **Log On** tab, select the **This account** radio button. Enter the account name using NTAccount format [```DOMAIN\username```]. Optionally, use the **Browse** button to search for diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/approvalprocess.md b/docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/approvalprocess.md index cdfaec5674..2c48c5a147 100644 --- a/docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/approvalprocess.md +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/approvalprocess/approvalprocess.md @@ -9,7 +9,7 @@ sidebar_position: 30 After all owners assigned to a specific review have submitted their review, its status on the Manage Reviews page of the Entitlement Reviews interface changes to Responses awaiting review. -![Resource Reviews interface showing Manage Reviews page](/images/auditor/10.8/access/reviews/entitlementreviews/managereviewspage.webp) +![Resource Reviews interface showing Manage Reviews page](/images/auditor/10.7/access/reviews/entitlementreviews/managereviewspage.webp) In the approval process, the Review Administrator looks at the owner-recommended changes and chooses to approve, deny, or defer the changes. @@ -25,7 +25,7 @@ Follow the steps to perform a granular review of a resource owner's recommended **Step 1 –** On the Manage Reviews page, select a review and click **View Details**. The Review Details page opens. -![Resource Reviews interface showing the Review Details page](/images/auditor/10.8/access/reviews/entitlementreviews/reviewdetailspage.webp) +![Resource Reviews interface showing the Review Details page](/images/auditor/10.7/access/reviews/entitlementreviews/reviewdetailspage.webp) **Step 2 –** Select a resource in the list and click **View Responses**. The View Responses window opens. @@ -57,7 +57,7 @@ Follow the steps to perform a batch processing of a resource owner's recommended **Step 1 –** On the Manage Reviews page, select a review and click **View Details**. The Review Details page opens. . -![Resource Reviews interface showing the Review Details page](/images/auditor/10.8/access/reviews/entitlementreviews/reviewdetailspage.webp) +![Resource Reviews interface showing the Review Details page](/images/auditor/10.7/access/reviews/entitlementreviews/reviewdetailspage.webp) **Step 2 –** Select a resource in the list and open the **Process Changes** drop-down menu. diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/create/create.md b/docs/auditor/10.8/accessreviews/entitlementreviews/create/create.md index 9ea1284d4d..b133b09376 100644 --- a/docs/auditor/10.8/accessreviews/entitlementreviews/create/create.md +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/create/create.md @@ -9,7 +9,7 @@ sidebar_position: 20 The Create Review wizard is opened with the **Create** button on the Entitlement Reviews interface. See the [Manage Reviews Page](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md#manage-reviews-page) topic for additional information. -![Create Review wizard](/images/auditor/10.8/access/reviews/entitlementreviews/wizard/createreviewreviewtype.webp) +![Create Review wizard](/images/auditor/10.7/access/reviews/entitlementreviews/wizard/createreviewreviewtype.webp) It contains three pages: @@ -36,7 +36,7 @@ Follow the steps to create a review. **Step 1 –** On the Manage Reviews page, click Create. The Create Review wizard opens. -![Create Review wizard showing the Review Type page](/images/auditor/10.8/access/reviews/entitlementreviews/wizard/createreviewreviewtype.webp) +![Create Review wizard showing the Review Type page](/images/auditor/10.7/access/reviews/entitlementreviews/wizard/createreviewreviewtype.webp) **Step 2 –** On the Review Type page, provide the following information and click **Next**: @@ -48,7 +48,7 @@ Follow the steps to create a review. - Membership – Review group membership - Access – Review user access rights to resources -![Create Review wizrd showing the Resources page](/images/auditor/10.8/access/reviews/entitlementreviews/wizard/createreviewresources.webp) +![Create Review wizrd showing the Resources page](/images/auditor/10.7/access/reviews/entitlementreviews/wizard/createreviewresources.webp) **Step 3 –** On the Resources page, select the resources to be included in the review. The Search feature is available to filter the list of available resource that match the type of review being @@ -75,7 +75,7 @@ created. [Selected Resources Window](/docs/auditor/10.8/accessreviews/entitlementreviews/interface/selectedresources.md) topic for additional information. - Once the desired resources have been selected, click **Next**. -![Create Review wizard showing the Summary page](/images/auditor/10.8/access/reviews/entitlementreviews/wizard/createreviewsummary.webp) +![Create Review wizard showing the Summary page](/images/auditor/10.7/access/reviews/entitlementreviews/wizard/createreviewsummary.webp) **Step 4 –** On the Summary page, review the settings and click Finish. The Access Reviews begins to create the review. Action status displays on the page. When the update has completed (100%), click diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/create/reviewinstances.md b/docs/auditor/10.8/accessreviews/entitlementreviews/create/reviewinstances.md index 8263ee866b..3bb2c1df8f 100644 --- a/docs/auditor/10.8/accessreviews/entitlementreviews/create/reviewinstances.md +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/create/reviewinstances.md @@ -12,7 +12,7 @@ review. Each instance is identified by date timestamps indicating its start and **_RECOMMENDED:_** Prior to running another review instance, ensure the most up to date information is available to owners for review. -![Entitlement Reviews interface showing the Manage Review page](/images/auditor/10.8/access/reviews/entitlementreviews/managereviewspage.webp) +![Entitlement Reviews interface showing the Manage Review page](/images/auditor/10.7/access/reviews/entitlementreviews/managereviewspage.webp) On the Manage Reviews page in the Entitlement Reviews interface, a review with a Completed status can be started again. Select the review and click **Run Again**. The Create Review wizard opens diff --git a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md index ecb0d6d80b..8ac3907346 100644 --- a/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md +++ b/docs/auditor/10.8/accessreviews/entitlementreviews/interface/interface.md @@ -17,7 +17,7 @@ Administrators perform many operations around managing reviews. This interface h The Manage Reviews page is the first page in the Entitlement Reviews interface. It displays high-level information for reviews. -![Entitlement Reviews interface showing Manage Reviews page](/images/auditor/10.8/access/reviews/entitlementreviews/managereviewspage.webp) +![Entitlement Reviews interface showing Manage Reviews page](/images/auditor/10.7/access/reviews/entitlementreviews/managereviewspage.webp) The interface includes: @@ -82,7 +82,7 @@ The Review Details page displays information for all instances of the selected r named in the page breadcrumb. This page is opened by selecting a review on the Manage Reviews page and clicking **View Details**. -![Entitlement Reviews interface showing the Review Details page](/images/auditor/10.8/access/reviews/entitlementreviews/reviewdetailspage.webp) +![Entitlement Reviews interface showing the Review Details page](/images/auditor/10.7/access/reviews/entitlementreviews/reviewdetailspage.webp) Instances are selected from the drop-down menu. By default the most current instance will be displayed. Instances are named with date timestamps indicating the start and end times for the diff --git a/docs/auditor/10.8/accessreviews/installation/accessreviewsconfiguration.md b/docs/auditor/10.8/accessreviews/installation/accessreviewsconfiguration.md index 62edfa25c6..cd0b2c64c0 100644 --- a/docs/auditor/10.8/accessreviews/installation/accessreviewsconfiguration.md +++ b/docs/auditor/10.8/accessreviews/installation/accessreviewsconfiguration.md @@ -22,11 +22,11 @@ Follow the steps to configure Access Reviews in the Netwrix Auditor. **Step 1 –** Go to **Settings > General > Access Reviews**. -![senddataar](/images/auditor/10.8/senddataar.webp) +![senddataar](/images/auditor/10.7/senddataar.webp) **Step 2 –** Click **Manage**. -![manageaccessreviews](/images/auditor/10.8/manageaccessreviews.webp) +![manageaccessreviews](/images/auditor/10.7/manageaccessreviews.webp) **Step 3 –** Select the desired data sources to review. @@ -47,7 +47,7 @@ Follow the steps to configure Access Reviews in the Netwrix Auditor. **Step 3 –** Click **Edit data source** button on the left. -![enablear](/images/auditor/10.8/enablear.webp) +![enablear](/images/auditor/10.7/enablear.webp) **Step 4 –** Navigate to the Send data for Access Reviews and select the checkbox. diff --git a/docs/auditor/10.8/accessreviews/installation/install.md b/docs/auditor/10.8/accessreviews/installation/install.md index bcd924d637..0a11c51901 100644 --- a/docs/auditor/10.8/accessreviews/installation/install.md +++ b/docs/auditor/10.8/accessreviews/installation/install.md @@ -11,16 +11,16 @@ Once the prerequisites have been met, follow the steps to install the Access Rev **Step 1 –** Run the `AccessReviews.exe` executable, and the Netwrix Auditor Access Reviews Setup wizard opens. -![Netwrix Auditor Access Reviews Setup wizard Welcome page](/images/auditor/10.8/access/reviews/installation/installwelcome.webp) +![Netwrix Auditor Access Reviews Setup wizard Welcome page](/images/auditor/10.7/access/reviews/installation/installwelcome.webp) **Step 2 –** On the Welcome page, click **Next** to begin the installation process. -![Netwrix Auditor Access Reviews Setup wizard End-User License Agreement page](/images/auditor/10.8/access/reviews/installation/installeula.webp) +![Netwrix Auditor Access Reviews Setup wizard End-User License Agreement page](/images/auditor/10.7/access/reviews/installation/installeula.webp) **Step 3 –** On the End-User License Agreement page, select the **I accept the terms in the License Agreement** checkbox and click **Next**. -![Netwrix Auditor Access Reviews Setup wizard Destination Folder page](/images/auditor/10.8/access/reviews/installation/installdestinationfolder.webp) +![Netwrix Auditor Access Reviews Setup wizard Destination Folder page](/images/auditor/10.7/access/reviews/installation/installdestinationfolder.webp) **Step 4 –** On the Destination Folder page, you can choose between the default destination folder and a custom folder. Click **Change** to browse for a different location. When the destination is @@ -29,7 +29,7 @@ set as desired, click **Next**. **NOTE:** The default location is `C:\Program Files\Netwrix\Access Access Reviews\`. There are no specific requirements for changing the path. -![Netwrix Auditor Access Reviews Setup wizard SQL Server Connection page](/images/auditor/10.8/access/reviews/installation/installsql.webp) +![Netwrix Auditor Access Reviews Setup wizard SQL Server Connection page](/images/auditor/10.7/access/reviews/installation/installsql.webp) **Step 5 –** On the SQL Server Connection page, provide the required database information. Click **Next** to test the connection to the SQL Server. @@ -54,12 +54,12 @@ specific requirements for changing the path. **NOTE:** See the [Database Page](/docs/auditor/10.8/accessreviews/admin/configuration/database.md) topic for additional information. -![Database does not exist Confirmation Window](/images/auditor/10.8/access/reviews/installation/installsqldatabase.webp) +![Database does not exist Confirmation Window](/images/auditor/10.7/access/reviews/installation/installsqldatabase.webp) **Step 6 –** If there are no errors, you will be asked to confirm creation of the new database. Click **Yes**. -![Netwrix Auditor Access Reviews Setup wizard Configure Web Server page](/images/auditor/10.8/access/reviews/installation/installconfigurewebserver.webp) +![Netwrix Auditor Access Reviews Setup wizard Configure Web Server page](/images/auditor/10.7/access/reviews/installation/installconfigurewebserver.webp) **Step 7 –** On the Configure Web Server page, you can choose between the default port and a custom port on which the application will be accessible. To change the port, enter a new port number in the @@ -67,11 +67,11 @@ field. When the port is set as desired, click **Next**. **NOTE:** The default port is 81. -![Netwrix Auditor Access Reviews Setup wizard Ready to Install page](/images/auditor/10.8/access/reviews/installation/installready.webp) +![Netwrix Auditor Access Reviews Setup wizard Ready to Install page](/images/auditor/10.7/access/reviews/installation/installready.webp) **Step 8 –** On the Ready to install page, click **Install** to begin the process. -![Netwrix Auditor Access Reviews Setup wizard Completed page](/images/auditor/10.8/access/reviews/installation/installcompleted.webp) +![Netwrix Auditor Access Reviews Setup wizard Completed page](/images/auditor/10.7/access/reviews/installation/installcompleted.webp) **Step 9 –** Once the installation has successfully completed, click **Finish** to exit the wizard. diff --git a/docs/auditor/10.8/accessreviews/installation/secure.md b/docs/auditor/10.8/accessreviews/installation/secure.md index cebd91589c..95129cc5b3 100644 --- a/docs/auditor/10.8/accessreviews/installation/secure.md +++ b/docs/auditor/10.8/accessreviews/installation/secure.md @@ -66,7 +66,7 @@ Notepad. It is located in the installation directory: ...\Netwrix\Access Reviews -![AccessInformationCenter.Service.exe.Config file showing the BindingUrl key](/images/auditor/10.8/access/reviews/installation/securebindingurlparameter.webp) +![AccessInformationCenter.Service.exe.Config file showing the BindingUrl key](/images/auditor/10.7/access/reviews/installation/securebindingurlparameter.webp) **Step 2 –** Change the `BindingUrl` key value to `"https://+:481"` (ensure the port number matches the port number used in the PowerShell command run to create the SSL Binding. diff --git a/docs/auditor/10.8/accessreviews/owneroverview/confirmationrequest.md b/docs/auditor/10.8/accessreviews/owneroverview/confirmationrequest.md index bbd03d50fa..f391b23b53 100644 --- a/docs/auditor/10.8/accessreviews/owneroverview/confirmationrequest.md +++ b/docs/auditor/10.8/accessreviews/owneroverview/confirmationrequest.md @@ -9,7 +9,7 @@ sidebar_position: 10 The Ownership Administrator may request ownership confirmation for a resource being managed through the Access Reviews application. As an assigned owner, you will receive the following email. -![Ownership Confirmation Request Email with Yes and No buttons for responding](/images/auditor/10.8/access/reviews/resourceowners/email/confirmemail.webp) +![Ownership Confirmation Request Email with Yes and No buttons for responding](/images/auditor/10.7/access/reviews/resourceowners/email/confirmemail.webp) The Ownership Confirmation Request email provides buttons for confirming (Yes) or declining (No) ownership of the listed resource. You will be asked to authenticate for your response to be @@ -21,7 +21,7 @@ complete the process. One of two messages will appear according to if you confir If you have accepted ownership for the assigned resource, the browser will display the following message after authentication: -![confirmemailaccept](/images/auditor/10.8/access/reviews/resourceowners/email/confirmemailaccept.webp) +![confirmemailaccept](/images/auditor/10.7/access/reviews/resourceowners/email/confirmemailaccept.webp) "Your response has been saved. You may close this window and delete the confirmation request e-mail." @@ -31,12 +31,12 @@ e-mail." If you have declined ownership for the assigned resource, the browser will display the following message after authentication: -![Ownership declined browser message](/images/auditor/10.8/access/reviews/resourceowners/email/confirmemaildecline.webp) +![Ownership declined browser message](/images/auditor/10.7/access/reviews/resourceowners/email/confirmemaildecline.webp) "Before we update ownership can you suggest another owner?" Enter possible owners in the textbox. Click **Submit** to complete the process. -![Ownership declined browser message after an alternative owner is submitted](/images/auditor/10.8/access/reviews/resourceowners/email/confirmemaildecline2.webp) +![Ownership declined browser message after an alternative owner is submitted](/images/auditor/10.7/access/reviews/resourceowners/email/confirmemaildecline2.webp) "Your response has been saved. You may close this window and delete the confirmation request e-mail." diff --git a/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/access.md b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/access.md index f20be4d7b3..8e9b8f9bbe 100644 --- a/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/access.md +++ b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/access.md @@ -12,7 +12,7 @@ to perform an Access review. **Step 1 –** On the Pending Reviews page, select the resource with a pending Access review and click **Begin Review**. The Resource Review page opens to the 1 Make changes tab. -![Resource Reviews page showing an Access Review on 1 Make changes tab](/images/auditor/10.8/access/reviews/entitlementreviews/reviewpageaccess.webp) +![Resource Reviews page showing an Access Review on 1 Make changes tab](/images/auditor/10.7/access/reviews/entitlementreviews/reviewpageaccess.webp) The table displays access information for the resource being reviewed: @@ -36,7 +36,7 @@ pending until you submit all recommendations for this resource. **Step 4 –** When the recommended changes are set as desired, click **Next**. The 2 Review changes tab opens in the Resource Review page. -![Resource Reviews page showing an Access Review on 2 Review changes tab](/images/auditor/10.8/access/reviews/entitlementreviews/review/reviewpageaccesstab2.webp) +![Resource Reviews page showing an Access Review on 2 Review changes tab](/images/auditor/10.7/access/reviews/entitlementreviews/review/reviewpageaccesstab2.webp) **Step 5 –** This tab displays a filtered table of trustees with recommended changes. Confirm your recommendations and optionally add notes to the Review Administrator. Owners are encouraged to leave diff --git a/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/membership.md b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/membership.md index b2de5e8a49..8c9ff1b678 100644 --- a/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/membership.md +++ b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/membership.md @@ -12,7 +12,7 @@ review. **Step 1 –** On the Pending Reviews page, select the resource with a pending Membership review and click **Begin Review**. The Resource Review page opens to the 1 Make changes tab. -![Resource Reviews page showing a Membership Review on 1 Make changes tab](/images/auditor/10.8/access/reviews/entitlementreviews/review/reviewpagemembership.webp) +![Resource Reviews page showing a Membership Review on 1 Make changes tab](/images/auditor/10.7/access/reviews/entitlementreviews/review/reviewpagemembership.webp) The table displays membership information for the group being reviewed: @@ -31,7 +31,7 @@ pending until you submit all recommendations for this resource. **Step 3 –** When the recommended changes are set as desired, click **Next**. The 2 Review changes tab opens in the Resource Review page. -![Resource Reviews page showing a Membership Review on 2 Review changes tab](/images/auditor/10.8/access/reviews/entitlementreviews/review/reviewpagemembershiptab2.webp) +![Resource Reviews page showing a Membership Review on 2 Review changes tab](/images/auditor/10.7/access/reviews/entitlementreviews/review/reviewpagemembershiptab2.webp) **Step 4 –** This tab displays a filtered table of trustees with recommended changes. Confirm your recommendations and optionally add notes to the Review Administrator. Owners are encouraged to leave diff --git a/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/pendingreviews.md b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/pendingreviews.md index cbbea2a21f..3001ec576f 100644 --- a/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/pendingreviews.md +++ b/docs/auditor/10.8/accessreviews/owneroverview/pendingreviews/pendingreviews.md @@ -12,7 +12,7 @@ have to your resource. When the Review Administrator creates a new review or sta of an existing review, you receive an email notification that includes a link to the your pending reviews. -![Email announcing a pending review](/images/auditor/10.8/access/reviews/entitlementreviews/pendingreviewemail.webp) +![Email announcing a pending review](/images/auditor/10.7/access/reviews/entitlementreviews/pendingreviewemail.webp) Use the **Sign in** link at the bottom to open the My Reviews interface in the Access Reviews Console. @@ -26,7 +26,7 @@ The My Reviews interface has two pages: Pending Reviews and Review History. See The Pending Reviews page lists all of your resources included in pending reviews. -![My Reviews interface showing Pending Reviews page](/images/auditor/10.8/access/reviews/entitlementreviews/pendingreivewspage.webp) +![My Reviews interface showing Pending Reviews page](/images/auditor/10.7/access/reviews/entitlementreviews/pendingreivewspage.webp) The information displayed in the table includes: @@ -57,7 +57,7 @@ recommendation and processes those changes. The Begin Review button opens the Resource Review page to start the review. -![Resource Reviews page showing the 1 Make changes tab](/images/auditor/10.8/access/reviews/entitlementreviews/reviewpageaccess.webp) +![Resource Reviews page showing the 1 Make changes tab](/images/auditor/10.7/access/reviews/entitlementreviews/reviewpageaccess.webp) The Resource Review page varies based on the type of review; however, there are several common features: diff --git a/docs/auditor/10.8/accessreviews/owneroverview/reviewhistory.md b/docs/auditor/10.8/accessreviews/owneroverview/reviewhistory.md index b62c689fc4..bf11453a55 100644 --- a/docs/auditor/10.8/accessreviews/owneroverview/reviewhistory.md +++ b/docs/auditor/10.8/accessreviews/owneroverview/reviewhistory.md @@ -8,7 +8,7 @@ sidebar_position: 30 The Review History page lists all completed review instances for your resources. -![Review History page](/images/auditor/10.8/access/reviews/entitlementreviews/reviewhistorypage.webp) +![Review History page](/images/auditor/10.7/access/reviews/entitlementreviews/reviewhistorypage.webp) The information displayed in the table includes: diff --git a/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirm.md b/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirm.md index 41d6ebc8a1..0ace1242a0 100644 --- a/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirm.md +++ b/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirm.md @@ -9,7 +9,7 @@ sidebar_position: 10 The Confirm Ownership wizard is opened with the **Request Confirmation** button in the Resource Owners interface. It can be opened for one or multiple resources. -![Confirm Ownership wizard showing 1.Select Owners page](/images/auditor/10.8/access/reviews/resourceowners/wizard/selectowners_2.webp) +![Confirm Ownership wizard showing 1.Select Owners page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectowners_2.webp) It contains one page: @@ -22,7 +22,7 @@ Follow the steps to request ownership confirmation. **Step 1 –** In the Resource Owners interface, select the desired resource or resources and click Request Confirmation. The Confirm Ownership wizard opens. -![Confirm Ownership wizard showing 1.Select Owners page](/images/auditor/10.8/access/reviews/resourceowners/wizard/selectowners_2.webp) +![Confirm Ownership wizard showing 1.Select Owners page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectowners_2.webp) **Step 2 –** On the Select Owners page, you can optionally remove owners you do not want or need ownership confirmation from. Select those owners and click **Remove**. Those owners will not receive @@ -37,7 +37,7 @@ application begins to send the confirmation email. The table provides the follow Tool-tips display when hovering over the icons indicating whether the resource ownership has been confirmed, declined, pending response, or that a confirmation has not been requested. -![selectownerstaskcompleted](/images/auditor/10.8/access/reviews/resourceowners/wizard/selectownerstaskcompleted.webp) +![selectownerstaskcompleted](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectownerstaskcompleted.webp) **Step 3 –** The action status displays on the page. When the owner confirmation notification has completed (100%), click Close. The Confirm Ownership wizard closes. diff --git a/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirmation.md b/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirmation.md index 80d1fcc260..a495247680 100644 --- a/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirmation.md +++ b/docs/auditor/10.8/accessreviews/resourceowners/confirmation/confirmation.md @@ -15,7 +15,7 @@ through the cracks. application. See the [Notifications Page](/docs/auditor/10.8/accessreviews/admin/configuration/notifications.md) topic for additional information. -![Table in Resource Owners interface showing several resources being managed and all confirmation status icons](/images/auditor/10.8/access/reviews/resourceowners/tablestatus.webp) +![Table in Resource Owners interface showing several resources being managed and all confirmation status icons](/images/auditor/10.7/access/reviews/resourceowners/tablestatus.webp) The table in the Resource Owners interface includes a Status column. The following icons appear in this column to indicate the owner confirmation status: diff --git a/docs/auditor/10.8/accessreviews/resourceowners/interface/add.md b/docs/auditor/10.8/accessreviews/resourceowners/interface/add.md index 5c0ccfaef8..bac0fb6248 100644 --- a/docs/auditor/10.8/accessreviews/resourceowners/interface/add.md +++ b/docs/auditor/10.8/accessreviews/resourceowners/interface/add.md @@ -8,7 +8,7 @@ sidebar_position: 10 The Add new resource wizard is opened with the **Add** button in the Resource Owners interface. -![Add new resource wizard showing 1. Select Resources page](/images/auditor/10.8/access/reviews/resourceowners/wizard/selectresource.webp) +![Add new resource wizard showing 1. Select Resources page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectresource.webp) It contains four pages: @@ -25,7 +25,7 @@ Follow the steps to add resources one at a time and assign owners. **Step 1 –** In the Resource Owners interface, click **Add**. The Add new resource wizard opens. -![Add new resource wizard page showing 1. Select Resources page](/images/auditor/10.8/access/reviews/resourceowners/wizard/selectresource.webp) +![Add new resource wizard page showing 1. Select Resources page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectresource.webp) **Step 2 –** On the Select Resource page, select the resource to be managed. Then click **Next**. @@ -39,13 +39,13 @@ Follow the steps to add resources one at a time and assign owners. - Browse option – Navigate through the resource tree to select the desired File System or SharePoint resource. -![Add new resources wizard showing 2. Select Owners page](/images/auditor/10.8/access/reviews/resourceowners/wizard/selectowners_1.webp) +![Add new resources wizard showing 2. Select Owners page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectowners_1.webp) **Step 3 –** On the Select Owners page, click **Add** to browse for an owner. Repeat this Step to add multiple owners. See the [Add Owner Window](/docs/auditor/10.8/accessreviews/resourceowners/interface/addowner.md) topic for additional information. -![Add new resources wizard with the 2. Select Owners page showing multiple owners selected](/images/auditor/10.8/access/reviews/resourceowners/wizard/selectownerswithowners.webp) +![Add new resources wizard with the 2. Select Owners page showing multiple owners selected](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectownerswithowners.webp) **Step 4 –** When only one owner is assigned, the owner will be the Primary by default. When multiple owners are assigned, the first owner in the list is the Primary owner. Use the arrow @@ -62,17 +62,17 @@ the owners: Tool-tips display when hovering over the icons indicating whether the resource ownership has been confirmed, declined, pending response, or that a confirmation has not been requested. -![Add new resource wizard showing 3. Description page](/images/auditor/10.8/access/reviews/resourceowners/wizard/description_1.webp) +![Add new resource wizard showing 3. Description page](/images/auditor/10.7/access/reviews/resourceowners/wizard/description_1.webp) **Step 5 –** On the Description page, optionally add a description for the resource in the textbox. Then click **Next**. -![Add new resource wizard showing 4. Summary page](/images/auditor/10.8/access/reviews/resourceowners/wizard/summary_1.webp) +![Add new resource wizard showing 4. Summary page](/images/auditor/10.7/access/reviews/resourceowners/wizard/summary_1.webp) **Step 6 –** On the Summary page, review the settings and click Finish. The Access Reviews application begins to process the ownership configuration. -![Add new resource wizard with 4. Summary page showing action status 100% completed](/images/auditor/10.8/access/reviews/resourceowners/wizard/summarytaskcompleted.webp) +![Add new resource wizard with 4. Summary page showing action status 100% completed](/images/auditor/10.7/access/reviews/resourceowners/wizard/summarytaskcompleted.webp) **Step 7 –** The action status displays on the page. When the task has completed (100%), click **Close**. The Add new resource wizard closes. diff --git a/docs/auditor/10.8/accessreviews/resourceowners/interface/addowner.md b/docs/auditor/10.8/accessreviews/resourceowners/interface/addowner.md index a8e9d06841..aa8656dc06 100644 --- a/docs/auditor/10.8/accessreviews/resourceowners/interface/addowner.md +++ b/docs/auditor/10.8/accessreviews/resourceowners/interface/addowner.md @@ -10,7 +10,7 @@ The Add Owner window opens from either the [Add New Resource Wizard](/docs/audit [Update Resource Wizard](/docs/auditor/10.8/accessreviews/resourceowners/interface/update.md). This window is used to search for a user account by browsing Active Directory. -![Add Owner window showing Search options](/images/auditor/10.8/access/reviews/resourceowners/window/addowner.webp) +![Add Owner window showing Search options](/images/auditor/10.7/access/reviews/resourceowners/window/addowner.webp) Enter a name in the search field to find and select users from Active Directory, which populates in a drop-down menu as you type. If multiple domains are known to the application, ensure the correct diff --git a/docs/auditor/10.8/accessreviews/resourceowners/interface/interface.md b/docs/auditor/10.8/accessreviews/resourceowners/interface/interface.md index 1713f56017..ca0cebd3a0 100644 --- a/docs/auditor/10.8/accessreviews/resourceowners/interface/interface.md +++ b/docs/auditor/10.8/accessreviews/resourceowners/interface/interface.md @@ -44,7 +44,7 @@ The table data grid functions the same way as other table grids. See the The buttons at the bottom enable you to conduct the following actions: -![Action buttons in the Resource Owners Interface](/images/auditor/10.8/access/reviews/resourceowners/interfacebuttons.webp) +![Action buttons in the Resource Owners Interface](/images/auditor/10.7/access/reviews/resourceowners/interfacebuttons.webp) | Button | Function | | -------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | diff --git a/docs/auditor/10.8/accessreviews/resourceowners/interface/update.md b/docs/auditor/10.8/accessreviews/resourceowners/interface/update.md index cfbd773de2..09010f416f 100644 --- a/docs/auditor/10.8/accessreviews/resourceowners/interface/update.md +++ b/docs/auditor/10.8/accessreviews/resourceowners/interface/update.md @@ -8,7 +8,7 @@ sidebar_position: 20 The Update resource wizard is opened with the **Update** button in the Resource Owners interface. -![Update Resource wizard showing 1. Select Owners page](/images/auditor/10.8/access/reviews/resourceowners/wizard/selectowners.webp) +![Update Resource wizard showing 1. Select Owners page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectowners.webp) It contains three pages: @@ -26,7 +26,7 @@ Follow the steps to update ownership configuration for a resource. **Step 1 –** In the Resource Owners interface, select the desired resource and click **Update**. The Update resource wizard opens. -![Update resource wizard showing 1. Select Owners page](/images/auditor/10.8/access/reviews/resourceowners/wizard/selectowners.webp) +![Update resource wizard showing 1. Select Owners page](/images/auditor/10.7/access/reviews/resourceowners/wizard/selectowners.webp) **Step 2 –** The Select Owners page lists the currently assigned owner(s). Modify as desired and click **Next** to continue. @@ -48,18 +48,18 @@ information on the owners: Tool-tips display when hovering over the icons indicating whether the resource ownership has been confirmed, declined, pending response, or that a confirmation has not been requested. -![Update resource wizard showing 2. Description page](/images/auditor/10.8/access/reviews/resourceowners/wizard/description.webp) +![Update resource wizard showing 2. Description page](/images/auditor/10.7/access/reviews/resourceowners/wizard/description.webp) **Step 3 –** The Description page displays any description that has been provided by either the Ownership Administrator or the assigned owner(s) for the resource. Modify as desired by typing in the textbox. Then click **Next** to continue. -![Update resource wizard showing 3. Summary page](/images/auditor/10.8/access/reviews/resourceowners/wizard/summary.webp) +![Update resource wizard showing 3. Summary page](/images/auditor/10.7/access/reviews/resourceowners/wizard/summary.webp) **Step 4 –** On the Summary page, review the settings and click Finish. The Access Reviews application begins to process the ownership changes. -![Update resource wizard with 3. Summary page showing action status 100% complete](/images/auditor/10.8/access/reviews/resourceowners/wizard/summarytaskcompleted.webp) +![Update resource wizard with 3. Summary page showing action status 100% complete](/images/auditor/10.7/access/reviews/resourceowners/wizard/summarytaskcompleted.webp) **Step 5 –** The action status displays on the page. When the update has completed (100%), click **Close**. The Update resource wizard closes. diff --git a/docs/auditor/10.8/accountlockoutexaminer/usage.md b/docs/auditor/10.8/accountlockoutexaminer/usage.md index 30dd8613e4..f4d51a77ac 100644 --- a/docs/auditor/10.8/accountlockoutexaminer/usage.md +++ b/docs/auditor/10.8/accountlockoutexaminer/usage.md @@ -17,14 +17,14 @@ To find out why an Active Directory account was locked out, perform the followin 4. If you wish, select to participate in Netwrix Customer Experience Improvement program. You can later change your preference using the product settings (see the next section for details). -![ale_usage_stats_thumb_0_0](/images/auditor/10.8/accountlockoutexaminer/ale_usage_stats_thumb_0_0.webp) +![ale_usage_stats_thumb_0_0](/images/auditor/10.7/accountlockoutexaminer/ale_usage_stats_thumb_0_0.webp) 5. In the main window, supply the name of the account that was locked out. 6. Specify examiner credentials – the user account that will be used to run the examination, access domain controllers, and so on. The account must be a member of the **Domain Admins** group. 7. Click **Examine**. -![ale_new_start_thumb_0_0](/images/auditor/10.8/accountlockoutexaminer/ale_new_start_thumb_0_0.webp) +![ale_new_start_thumb_0_0](/images/auditor/10.7/accountlockoutexaminer/ale_new_start_thumb_0_0.webp) Once the examination completes, you will be presented with a list of reasons why the account you supplied is being locked out. @@ -41,7 +41,7 @@ After you click **Settings** in the main window, you can apply the following opt | **Usage statistics** | | | | Take part in Netwrix Customer Experience Improvement program | Select this option to participate in the program. See [this Knowledge Base article](https://kb.netwrix.com/5820) for more information on the program. | | -![ale_settings_thumb_0_0](/images/auditor/10.8/accountlockoutexaminer/ale_settings_thumb_0_0.webp) +![ale_settings_thumb_0_0](/images/auditor/10.7/accountlockoutexaminer/ale_settings_thumb_0_0.webp) ## Troubleshooting @@ -53,7 +53,7 @@ Lockout Examiner\Logs_ folder. | In the environments with root/child domains, you may receive the "_Could not query ComputerName. Access is denied_." error. | The account used to run Netwrix Account Lockout Examiner is not a member of the local **Administrators** group on the workstations in both root and child domains. Administrative rights are required to access the Security Event logs on these workstations. | Make sure this account is included in the local **Administrators** group. | | **Issues encountered during examination** section is shown in the examination results. | Most probably this means that **Netwrix Account Lockout Examiner** cannot reach some of the data sources it needs. | - Check that you have configured the audit settings in the target domain as described in [Required audit settings](configure.md#required-audit-settings) section. - Check that network connectivity between the Account Lockout Examiner machine and the domain controllers in your domain works properly. | -![ale_new_results](/images/auditor/10.8/accountlockoutexaminer/ale_new_results.webp) +![ale_new_results](/images/auditor/10.7/accountlockoutexaminer/ale_new_results.webp) We welcome any feedback and ideas you might have. Please take a minute to check in on [Netwrix page at Spiceworks](https://community.spiceworks.com/pages/NetWrix?tab=353) or submit diff --git a/docs/auditor/10.8/addon/alienvaultusm/collecteddata.md b/docs/auditor/10.8/addon/alienvaultusm/collecteddata.md index 2f325d6bd3..6aecbd739f 100644 --- a/docs/auditor/10.8/addon/alienvaultusm/collecteddata.md +++ b/docs/auditor/10.8/addon/alienvaultusm/collecteddata.md @@ -14,6 +14,6 @@ Services Logs** >Netwrix Auditor Integration log. **Step 3 –** Review events. -![EventLog_Export_Example](/images/auditor/10.8/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) +![EventLog_Export_Example](/images/auditor/10.7/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) Now you can augment Windows event log with data collected by the Auditor. diff --git a/docs/auditor/10.8/addon/alienvaultusm/integrationeventlog.md b/docs/auditor/10.8/addon/alienvaultusm/integrationeventlog.md index e430f7aef0..1b9df219ad 100644 --- a/docs/auditor/10.8/addon/alienvaultusm/integrationeventlog.md +++ b/docs/auditor/10.8/addon/alienvaultusm/integrationeventlog.md @@ -37,4 +37,4 @@ EventData is filled in with data from the Activity Record fields as follows: Details are filled in only if this Activity Record field is not empty. -![eventlogexample_thumb_0_0](/images/auditor/10.8/addon/solarwinds/eventlogexample_thumb_0_0.webp) +![eventlogexample_thumb_0_0](/images/auditor/10.7/addon/solarwinds/eventlogexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/addon/amazonwebservices/collecteddata.md b/docs/auditor/10.8/addon/amazonwebservices/collecteddata.md index 4917a8c88c..b692a9f7ab 100644 --- a/docs/auditor/10.8/addon/amazonwebservices/collecteddata.md +++ b/docs/auditor/10.8/addon/amazonwebservices/collecteddata.md @@ -12,7 +12,7 @@ Follow the steps to work with collected data. **Step 2 –** Click **Search**. -![activityrecords](/images/auditor/10.8/addon/amazonwebservices/activityrecords.webp) +![activityrecords](/images/auditor/10.7/addon/amazonwebservices/activityrecords.webp) You might want to apply a filter to narrow down your search results to the NetwrixAPI data source only. diff --git a/docs/auditor/10.8/addon/arcsight/collecteddata.md b/docs/auditor/10.8/addon/arcsight/collecteddata.md index 2a9db1ee7c..739b67d6b1 100644 --- a/docs/auditor/10.8/addon/arcsight/collecteddata.md +++ b/docs/auditor/10.8/addon/arcsight/collecteddata.md @@ -20,6 +20,6 @@ more than one Netwrix Auditor Server, add all of them in the search field. **NOTE:** You might want to modify time range and the fields shown. -![activityrecords](/images/auditor/10.8/addon/arcsight/activityrecords.webp) +![activityrecords](/images/auditor/10.7/addon/arcsight/activityrecords.webp) **Step 4 –** Review imported Activity Records. diff --git a/docs/auditor/10.8/addon/arcsight/overview.md b/docs/auditor/10.8/addon/arcsight/overview.md index 23d41380dd..0501bb039a 100644 --- a/docs/auditor/10.8/addon/arcsight/overview.md +++ b/docs/auditor/10.8/addon/arcsight/overview.md @@ -39,7 +39,7 @@ follows: | on... | Ensure that... | | ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | The Auditor Server side | - The Audit Database settings are configured in the Auditor. See the [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topic for additional information. - The TCP 9699 port (default Integration API port) is open for inbound connections. - The user retrieving data from the Audit Database is granted the **Global reviewer** role in Auditor or is a member of the **Netwrix Auditor Client Users** group. Alternatively, you can grant the **Global administrator** role or add the user to the **Netwrix Auditor Administrators** group. In this case, this user will have the most extended permissions in the product. | -| On the ArcSight side | - The UDP Receiver is enabled and is configured to receive CEF as source and use the default port **514**. - To check receiver settings or add a new receiver, start the ArcSight Logger web interface and navigate to **Configuration** > **Receivers**. ![configuration](/images/auditor/10.8/addon/arcsight/configuration.webp) **NOTE:** You can configure TCP Receiver and switch to TCP protocol and port **515**. - The user running the script must have sufficient permissions to supply data to ArcSight. | +| On the ArcSight side | - The UDP Receiver is enabled and is configured to receive CEF as source and use the default port **514**. - To check receiver settings or add a new receiver, start the ArcSight Logger web interface and navigate to **Configuration** > **Receivers**. ![configuration](/images/auditor/10.7/addon/arcsight/configuration.webp) **NOTE:** You can configure TCP Receiver and switch to TCP protocol and port **515**. - The user running the script must have sufficient permissions to supply data to ArcSight. | | The computer where the script will be executed | - Execution policy for powershell scripts is set to "_Unrestricted_". Run **Windows PowerShell** as administrator and execute the following command: Set-ExecutionPolicy Unrestricted - The user running the script is granted the **write** permission on the script folder—the add-on creates a special .bin file with the last exported event. | ## Compatibility Notice diff --git a/docs/auditor/10.8/addon/azurefiles/deployment.md b/docs/auditor/10.8/addon/azurefiles/deployment.md index d3c06bbe7f..8e71b686c2 100644 --- a/docs/auditor/10.8/addon/azurefiles/deployment.md +++ b/docs/auditor/10.8/addon/azurefiles/deployment.md @@ -10,11 +10,11 @@ Follow the steps to install Azure Files add-on. **Step 1 –** Accept EULA. -![azurefileeula](/images/auditor/10.8/addon/azurefiles/azurefileeula.webp) +![azurefileeula](/images/auditor/10.7/addon/azurefiles/azurefileeula.webp) **Step 2 –** Select the installation folder and click **Next**. -![azurefileinstfolder](/images/auditor/10.8/addon/azurefiles/azurefileinstfolder.webp) +![azurefileinstfolder](/images/auditor/10.7/addon/azurefiles/azurefileinstfolder.webp) **Step 3 –** Click **Install**. The wizard will start and ask the additional parameters. @@ -69,7 +69,7 @@ erprise.local:9999). **CAUTION:** Do not modify the endpoint part (_/netwrix/api_). -![generalsettings](/images/auditor/10.8/addon/azurefiles/generalsettings.webp) +![generalsettings](/images/auditor/10.7/addon/azurefiles/generalsettings.webp) **Step 4 –** Specify Active Directory credentials: @@ -77,15 +77,15 @@ erprise.local:9999). service runs under the account currently logged on. - Password – Provide the password for the selected account. -![adcredentials](/images/auditor/10.8/addon/azurefiles/adcredentials.webp) +![adcredentials](/images/auditor/10.7/addon/azurefiles/adcredentials.webp) **Step 5 –** Paste Azure Connection String in the corresponded field and click **Next**. -![azurefileconnectionstring](/images/auditor/10.8/addon/azurefiles/azurefileconnectionstring.webp) +![azurefileconnectionstring](/images/auditor/10.7/addon/azurefiles/azurefileconnectionstring.webp) **Step 6 –** Enter Tenant ID, App ID and App Secret of the Azure App you registered for the add-on. Click **Next**. -![microsoftgraphapi](/images/auditor/10.8/addon/azurefiles/microsoftgraphapi.webp) +![microsoftgraphapi](/images/auditor/10.7/addon/azurefiles/microsoftgraphapi.webp) **Step 7 –** Click **Run** and close the window. The service should start the data collection now. diff --git a/docs/auditor/10.8/addon/connectwise/configure.md b/docs/auditor/10.8/addon/connectwise/configure.md index 1d050b079c..aecff8bc58 100644 --- a/docs/auditor/10.8/addon/connectwise/configure.md +++ b/docs/auditor/10.8/addon/connectwise/configure.md @@ -20,7 +20,7 @@ them, you will need an API Member account. See wizard to configure connection to ConnectWise Manage and ticketing options. At the Connection Setup step, specify the following: -![1_connection](/images/auditor/10.8/addon/connectwise/connectionsetup.webp) +![1_connection](/images/auditor/10.7/addon/connectwise/connectionsetup.webp) | Parameter | Description | | ---------- | --------------------------------------------------------------------------------------------- | @@ -31,7 +31,7 @@ step, specify the following: **Step 3 –** At the Service Ticket Routing step, specify the following: -![serviceticketrouting](/images/auditor/10.8/addon/connectwise/serviceticketrouting.webp) +![serviceticketrouting](/images/auditor/10.7/addon/connectwise/serviceticketrouting.webp) | Parameter | Description | | ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | @@ -43,7 +43,7 @@ step, specify the following: **Step 4 –** Configure how Auditor activity record fields will be mapped with **ConnectWise Manage** ticket fields. -![ticketfieldmapping](/images/auditor/10.8/addon/connectwise/ticketfieldmapping.webp) +![ticketfieldmapping](/images/auditor/10.7/addon/connectwise/ticketfieldmapping.webp) | Parameter | Description | | --------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | @@ -57,12 +57,12 @@ ConnectWise Manage to help you verify the connection and ticketing settings you Its Summary field will contain _[Netwrix Auditor] Test Alert_; its Initial Description field will contain _This ticket was created to test the functionality of Netwrix Auditor Add-on for ConnectWise Manage_. Also, the test ticket will have a sample attachment (_TestAttachment.txt_). -![testalert](/images/auditor/10.8/addon/connectwise/testalert.webp) +![testalert](/images/auditor/10.7/addon/connectwise/testalert.webp) **Step 5 –** Finally, at the **Summary** step, review the location of configuration file with the settings you specified: _C:\Addon\ITSM_CW\ConnectWiseSettings.xml_. -![summary_thumb_0_0](/images/auditor/10.8/addon/connectwise/summary_thumb_0_0.webp) +![summary_thumb_0_0](/images/auditor/10.7/addon/connectwise/summary_thumb_0_0.webp) If needed, you can edit the configuration file manually. See the [Connection and Ticketing Settings](/docs/auditor/10.8/addon/connectwise/connectionticketingsettings.md) topic for additional diff --git a/docs/auditor/10.8/addon/connectwise/msp.md b/docs/auditor/10.8/addon/connectwise/msp.md index 52c1148683..c7d5d8308e 100644 --- a/docs/auditor/10.8/addon/connectwise/msp.md +++ b/docs/auditor/10.8/addon/connectwise/msp.md @@ -11,12 +11,12 @@ Consider a situation when a password is reset for a user, computer, or **inetOrg After deploying and configuring the add-on as described in this guide, the MSP (Managed Service Providers) staff member enabled Auditor integration feature: -![Integration API Settings](/images/auditor/10.8/addon/connectwise/integrations_thumb_0_0.webp) +![Integration API Settings](/images/auditor/10.7/addon/connectwise/integrations_thumb_0_0.webp) Also, she enabled the ‘**Password Reset**’ alert from the Auditor predefined set of alerts and specified the add-on launch as response action. -![addon](/images/auditor/10.8/addon/connectwise/addon.webp) +![addon](/images/auditor/10.7/addon/connectwise/addon.webp) Then a new ticket is automatically created shortly after any account password is reset. @@ -24,4 +24,4 @@ All necessary details about the case are automatically entered into the ConnectW Description_ field), including the name of the workstation, the name of the account in question, and the time when the event occurred: -![serviceboard](/images/auditor/10.8/addon/connectwise/serviceboard.webp) +![serviceboard](/images/auditor/10.7/addon/connectwise/serviceboard.webp) diff --git a/docs/auditor/10.8/addon/connectwise/overview.md b/docs/auditor/10.8/addon/connectwise/overview.md index e894c8d27c..ad0ec483ed 100644 --- a/docs/auditor/10.8/addon/connectwise/overview.md +++ b/docs/auditor/10.8/addon/connectwise/overview.md @@ -35,7 +35,7 @@ To implement the solution, Managed Service Provider does the following on the cl On a high level, the workflow is as follows: -![CW_workflow](/images/auditor/10.8/addon/connectwise/diagramworkflow_thumb_0_0.webp) +![CW_workflow](/images/auditor/10.7/addon/connectwise/diagramworkflow_thumb_0_0.webp) 1. Managed Service Provider installs and configures the add-on on AuditorServer. MSP also enables the necessary alerts in Netwrix Auditor, specifying add-on launch as the response action in the @@ -51,7 +51,7 @@ On a high level, the workflow is as follows: Solution architecture and key components are shown in the figure below: -![diagram](/images/auditor/10.8/addon/connectwise/diagram.webp) +![diagram](/images/auditor/10.7/addon/connectwise/diagram.webp) - **Alert Handler (Netwrix.ITSM.AlertResponseAction.exe)** — the executable that is specified in the Auditor alerts as the response action. Alert Handler: diff --git a/docs/auditor/10.8/addon/copilot/deployment.md b/docs/auditor/10.8/addon/copilot/deployment.md index bd969ad733..c3d4a8a8cc 100644 --- a/docs/auditor/10.8/addon/copilot/deployment.md +++ b/docs/auditor/10.8/addon/copilot/deployment.md @@ -40,11 +40,11 @@ Follow the steps to configure the add-on. service runs under the account currently logged on. - Password – Provide the password for the selected account. -![adcredentials](/images/auditor/10.8/addon/copilot/adcredentials.webp) +![adcredentials](/images/auditor/10.7/addon/copilot/adcredentials.webp) **Step 2 –** Enter Tenant ID, App ID and App Secret of the Azure App you registered for the add-on. Click **Next**. -![tenantapp](/images/auditor/10.8/addon/copilot/tenantapp.webp) +![tenantapp](/images/auditor/10.7/addon/copilot/tenantapp.webp) **Step 3 –** Click **Run** and close the window. The service should start the data collection now. diff --git a/docs/auditor/10.8/addon/ctera/collecteddata.md b/docs/auditor/10.8/addon/ctera/collecteddata.md index 5afc38866e..c233d88d49 100644 --- a/docs/auditor/10.8/addon/ctera/collecteddata.md +++ b/docs/auditor/10.8/addon/ctera/collecteddata.md @@ -14,7 +14,7 @@ To leverage data collected with the add-on, you can do the following in Auditor: You can apply a filter to narrow down your search results to the Netwrix **API** data source only. -![ctera](/images/auditor/10.8/addon/ctera/ctera.webp) +![ctera](/images/auditor/10.7/addon/ctera/ctera.webp) - Also, you can click **Tools** in the upper-right corner and select the command you need. For example: @@ -39,7 +39,7 @@ To leverage data collected with the add-on, you can do the following in Auditor: You can apply a filter to narrow down your search results to the Netwrix **API** data source only. -![AR from CyberArk in NA](/images/auditor/10.8/addon/cyberark/cyberark_thumb_0_0.webp) +![AR from CyberArk in NA](/images/auditor/10.7/addon/cyberark/cyberark_thumb_0_0.webp) - Also, you can click **Tools** in the upper-right corner and select the command you need. For example: diff --git a/docs/auditor/10.8/addon/ctera/parameters.md b/docs/auditor/10.8/addon/ctera/parameters.md index fb2590d98e..e142f66165 100644 --- a/docs/auditor/10.8/addon/ctera/parameters.md +++ b/docs/auditor/10.8/addon/ctera/parameters.md @@ -8,7 +8,7 @@ sidebar_position: 20 The configuration wizard opens in the default web browser: -![configwizard](/images/auditor/10.8/addon/ctera/configwizard.webp) +![configwizard](/images/auditor/10.7/addon/ctera/configwizard.webp) Click **Proceed** and complete the following fields: diff --git a/docs/auditor/10.8/addon/cyberark/collecteddata.md b/docs/auditor/10.8/addon/cyberark/collecteddata.md index 3643a56caf..0da803a426 100644 --- a/docs/auditor/10.8/addon/cyberark/collecteddata.md +++ b/docs/auditor/10.8/addon/cyberark/collecteddata.md @@ -14,7 +14,7 @@ To leverage data collected with the add-on, you can do the following in Auditor: You can apply a filter to narrow down your search results to the Netwrix **API** data source only. -![AR from CyberArk in NA](/images/auditor/10.8/addon/cyberark/cyberark_thumb_0_0.webp) +![AR from CyberArk in NA](/images/auditor/10.7/addon/cyberark/cyberark_thumb_0_0.webp) - Also, you can click **Tools** in the upper-right corner and select the command you need. For example: diff --git a/docs/auditor/10.8/addon/cyberark/deployment.md b/docs/auditor/10.8/addon/cyberark/deployment.md index cade6f0821..a47adcc1e5 100644 --- a/docs/auditor/10.8/addon/cyberark/deployment.md +++ b/docs/auditor/10.8/addon/cyberark/deployment.md @@ -69,7 +69,7 @@ folder and open the **dbparam.ini** file for editing. events you specify in this parameter. For the full list of supported events, see [Monitored Events](/docs/auditor/10.8/addon/cyberark/monitoredevents.md). Use comma as a separator. -![dbparamfile_thumb_0_0](/images/auditor/10.8/addon/cyberark/dbparamfile_thumb_0_0.webp) +![dbparamfile_thumb_0_0](/images/auditor/10.7/addon/cyberark/dbparamfile_thumb_0_0.webp) **Step 4 –** Save the **dbparam.ini** file. @@ -104,7 +104,7 @@ Follow the steps to install the Add-On: The configuration wizard opens in the default web browser: -![ConfigurationWizard](/images/auditor/10.8/addon/cyberark/configwizard.webp) +![ConfigurationWizard](/images/auditor/10.7/addon/cyberark/configwizard.webp) Click **Proceed** and complete the following fields: diff --git a/docs/auditor/10.8/addon/cyberark/overview.md b/docs/auditor/10.8/addon/cyberark/overview.md index 76316bea07..cbd907f410 100644 --- a/docs/auditor/10.8/addon/cyberark/overview.md +++ b/docs/auditor/10.8/addon/cyberark/overview.md @@ -36,7 +36,7 @@ into actions related to CyberArk tools, in particular: The add-on is implemented as a syslog service that collects activity data from CyberArk system (PAS) and sends it to Auditor using the Integration API. -![HIW_CyberArch](/images/auditor/10.8/addon/cyberark/diagram_thumb_0_0.webp) +![HIW_CyberArch](/images/auditor/10.7/addon/cyberark/diagram_thumb_0_0.webp) The add-on operates as a syslog listener for the CyberArk system. On a high level, the solution works as follows: diff --git a/docs/auditor/10.8/addon/hyperv/deployment.md b/docs/auditor/10.8/addon/hyperv/deployment.md index d11cf4d187..a2402e0952 100644 --- a/docs/auditor/10.8/addon/hyperv/deployment.md +++ b/docs/auditor/10.8/addon/hyperv/deployment.md @@ -13,11 +13,11 @@ is installed together with Auditor server): 1. Add-on running on the same machine as SCVMM server (with Management Console): -![deployment_1](/images/auditor/10.8/addon/hyperv/diagram1server.webp) +![deployment_1](/images/auditor/10.7/addon/hyperv/diagram1server.webp) 2. Add-on and SCVMM server (with Management Console) running on different machines: -![deployment_2](/images/auditor/10.8/addon/hyperv/diagram2servers_thumb_0_0.webp) +![deployment_2](/images/auditor/10.7/addon/hyperv/diagram2servers_thumb_0_0.webp) In this scenario, the account used to access SCVMM server must be a member of the _Remote Management Users_ local group on the SCVMM server. @@ -25,7 +25,7 @@ Users_ local group on the SCVMM server. 3. Add-on running on the same machine as SCVMM Management Console; SCVMM server running on the remote machine: -![deployment_3](/images/auditor/10.8/addon/hyperv/diagram3servers_thumb_0_0.webp) +![deployment_3](/images/auditor/10.7/addon/hyperv/diagram3servers_thumb_0_0.webp) In this scenario, make sure to specify SCVMM server address in the **DataCollectionServer** parameter (not the machine where SCVMM console runs) in the **settings.xml** configuration file. See diff --git a/docs/auditor/10.8/addon/hyperv/overview.md b/docs/auditor/10.8/addon/hyperv/overview.md index 83d7c8ff94..9951c08fdd 100644 --- a/docs/auditor/10.8/addon/hyperv/overview.md +++ b/docs/auditor/10.8/addon/hyperv/overview.md @@ -35,7 +35,7 @@ Major benefits: The add-on is implemented as a stand-alone application that collects activity data from Virtual Machine Manager and sends it to Auditor using the Integration API. -![HIW](/images/auditor/10.8/addon/hyperv/diagram_thumb_0_0.webp) +![HIW](/images/auditor/10.7/addon/hyperv/diagram_thumb_0_0.webp) On a high level, the solution works as follows: diff --git a/docs/auditor/10.8/addon/ibmqradar/collecteddata.md b/docs/auditor/10.8/addon/ibmqradar/collecteddata.md index 3df6b858b1..6f1f0a7795 100644 --- a/docs/auditor/10.8/addon/ibmqradar/collecteddata.md +++ b/docs/auditor/10.8/addon/ibmqradar/collecteddata.md @@ -16,6 +16,6 @@ Services Logs** >Netwrix Auditor Integration log. **Step 3 –** Review events. -![EventLog_Export_Example](/images/auditor/10.8/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) +![EventLog_Export_Example](/images/auditor/10.7/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) Now you can augment Windows event log with data collected by the Auditor. diff --git a/docs/auditor/10.8/addon/ibmqradar/integrationeventlog.md b/docs/auditor/10.8/addon/ibmqradar/integrationeventlog.md index 7c6ab754f9..2271b809e4 100644 --- a/docs/auditor/10.8/addon/ibmqradar/integrationeventlog.md +++ b/docs/auditor/10.8/addon/ibmqradar/integrationeventlog.md @@ -37,4 +37,4 @@ EventData is filled in with data from the Activity Record fields as follows: Details are filled in only if this Activity Record field is not empty. -![eventlogexample_thumb_0_0](/images/auditor/10.8/addon/solarwinds/eventlogexample_thumb_0_0.webp) +![eventlogexample_thumb_0_0](/images/auditor/10.7/addon/solarwinds/eventlogexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/addon/intelsecurity/collecteddata.md b/docs/auditor/10.8/addon/intelsecurity/collecteddata.md index 3df6b858b1..6f1f0a7795 100644 --- a/docs/auditor/10.8/addon/intelsecurity/collecteddata.md +++ b/docs/auditor/10.8/addon/intelsecurity/collecteddata.md @@ -16,6 +16,6 @@ Services Logs** >Netwrix Auditor Integration log. **Step 3 –** Review events. -![EventLog_Export_Example](/images/auditor/10.8/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) +![EventLog_Export_Example](/images/auditor/10.7/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) Now you can augment Windows event log with data collected by the Auditor. diff --git a/docs/auditor/10.8/addon/intelsecurity/integrationeventlog.md b/docs/auditor/10.8/addon/intelsecurity/integrationeventlog.md index a602b50df6..eb4e547fa7 100644 --- a/docs/auditor/10.8/addon/intelsecurity/integrationeventlog.md +++ b/docs/auditor/10.8/addon/intelsecurity/integrationeventlog.md @@ -37,4 +37,4 @@ EventData is filled in with data from the Activity Record fields as follows: Details are filled in only if this Activity Record field is not empty. -![eventlogexample_thumb_0_0](/images/auditor/10.8/addon/solarwinds/eventlogexample_thumb_0_0.webp) +![eventlogexample_thumb_0_0](/images/auditor/10.7/addon/solarwinds/eventlogexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/addon/linux/parameters.md b/docs/auditor/10.8/addon/linux/parameters.md index 6bf4019027..370912a9ca 100644 --- a/docs/auditor/10.8/addon/linux/parameters.md +++ b/docs/auditor/10.8/addon/linux/parameters.md @@ -8,7 +8,7 @@ sidebar_position: 20 The configuration wizard opens in the default web browser: -![GenericLinuxConfigWizard](/images/auditor/10.8/addon/linux/configwizard.webp) +![GenericLinuxConfigWizard](/images/auditor/10.7/addon/linux/configwizard.webp) Click **Proceed** and complete the following fields: diff --git a/docs/auditor/10.8/addon/logrhythm/collecteddata.md b/docs/auditor/10.8/addon/logrhythm/collecteddata.md index bdc6795bb4..4eb4fba982 100644 --- a/docs/auditor/10.8/addon/logrhythm/collecteddata.md +++ b/docs/auditor/10.8/addon/logrhythm/collecteddata.md @@ -16,6 +16,6 @@ Services Logs** >Netwrix Auditor Integration log. **Step 3 –** Review events. -![EventLog_Export_Example](/images/auditor/10.8/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) +![EventLog_Export_Example](/images/auditor/10.7/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) Now you can augment Windows event log with data collected by the Auditor. diff --git a/docs/auditor/10.8/addon/logrhythm/integrationeventlog.md b/docs/auditor/10.8/addon/logrhythm/integrationeventlog.md index aa721699b3..8aaeab96fe 100644 --- a/docs/auditor/10.8/addon/logrhythm/integrationeventlog.md +++ b/docs/auditor/10.8/addon/logrhythm/integrationeventlog.md @@ -37,4 +37,4 @@ EventData is filled in with data from the Activity Record fields as follows: Details are filled in only if this Activity Record field is not empty. -![eventlogexample_thumb_0_0](/images/auditor/10.8/addon/solarwinds/eventlogexample_thumb_0_0.webp) +![eventlogexample_thumb_0_0](/images/auditor/10.7/addon/solarwinds/eventlogexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/addon/nasuni/collecteddata.md b/docs/auditor/10.8/addon/nasuni/collecteddata.md index 3643a56caf..0da803a426 100644 --- a/docs/auditor/10.8/addon/nasuni/collecteddata.md +++ b/docs/auditor/10.8/addon/nasuni/collecteddata.md @@ -14,7 +14,7 @@ To leverage data collected with the add-on, you can do the following in Auditor: You can apply a filter to narrow down your search results to the Netwrix **API** data source only. -![AR from CyberArk in NA](/images/auditor/10.8/addon/cyberark/cyberark_thumb_0_0.webp) +![AR from CyberArk in NA](/images/auditor/10.7/addon/cyberark/cyberark_thumb_0_0.webp) - Also, you can click **Tools** in the upper-right corner and select the command you need. For example: diff --git a/docs/auditor/10.8/addon/nasuni/parameters.md b/docs/auditor/10.8/addon/nasuni/parameters.md index f886a5e26a..b7e1600c84 100644 --- a/docs/auditor/10.8/addon/nasuni/parameters.md +++ b/docs/auditor/10.8/addon/nasuni/parameters.md @@ -8,7 +8,7 @@ sidebar_position: 20 The configuration wizard opens in the default web browser: -![configwizard](/images/auditor/10.8/addon/nasuni/configwizard.webp) +![configwizard](/images/auditor/10.7/addon/nasuni/configwizard.webp) Click **Proceed** and complete the following fields: diff --git a/docs/auditor/10.8/addon/nutanixahv/collecteddata.md b/docs/auditor/10.8/addon/nutanixahv/collecteddata.md index 27a03519d7..e3bb323de3 100644 --- a/docs/auditor/10.8/addon/nutanixahv/collecteddata.md +++ b/docs/auditor/10.8/addon/nutanixahv/collecteddata.md @@ -15,7 +15,7 @@ To leverage data collected with the add-on, you can do the following in Auditor: You might want to apply a filter to narrow down your search results to the Netwrix**API** data source only. -![screen_results](/images/auditor/10.8/addon/nutanixahv/nutanixahv_thumb_0_0.webp) +![screen_results](/images/auditor/10.7/addon/nutanixahv/nutanixahv_thumb_0_0.webp) - Also, you can click **Tools** in the upper-right corner and select the command you need. For example: diff --git a/docs/auditor/10.8/addon/nutanixahv/overview.md b/docs/auditor/10.8/addon/nutanixahv/overview.md index 8e65b0ca2b..ba9ed2bf68 100644 --- a/docs/auditor/10.8/addon/nutanixahv/overview.md +++ b/docs/auditor/10.8/addon/nutanixahv/overview.md @@ -35,7 +35,7 @@ Major benefits: The add-on is implemented as a Syslog service that collects activity data from Nutanix infrastructure and sends it to Netwrix Auditor using the Integration API. -![HIW_diagram_new](/images/auditor/10.8/addon/nutanixahv/diagram_thumb_0_0.webp) +![HIW_diagram_new](/images/auditor/10.7/addon/nutanixahv/diagram_thumb_0_0.webp) On a high level, the solution works as follows: diff --git a/docs/auditor/10.8/addon/okta/collecteddata.md b/docs/auditor/10.8/addon/okta/collecteddata.md index 4b2539b8fe..b1a1a285ae 100644 --- a/docs/auditor/10.8/addon/okta/collecteddata.md +++ b/docs/auditor/10.8/addon/okta/collecteddata.md @@ -14,7 +14,7 @@ To leverage data collected with the add-on, you can do the following in Auditor: You can apply a filter to narrow down your search results to the Netwrix **API** data source only. -![AR from CyberArk in NA](/images/auditor/10.8/addon/cyberark/cyberark_thumb_0_0.webp) +![AR from CyberArk in NA](/images/auditor/10.7/addon/cyberark/cyberark_thumb_0_0.webp) - Also, you can click **Tools** in the upper-right corner and select the command you need. For example: diff --git a/docs/auditor/10.8/addon/overview.md b/docs/auditor/10.8/addon/overview.md index f56c78e4a8..8f3b2033a5 100644 --- a/docs/auditor/10.8/addon/overview.md +++ b/docs/auditor/10.8/addon/overview.md @@ -36,7 +36,7 @@ The following add-ons were verified and posted in Add-ons Store. You can get add product. To do so, navigate to **Settings > Integrations** and click **Go to add-on store** button. The following menu will appear: -![addonstore](/images/auditor/10.8/addon/addonstore.webp) +![addonstore](/images/auditor/10.7/addon/addonstore.webp) Netwrix Auditor Integration API uses HTTPS with an automatically generated certificate for running requests to its endpoints. By default, add-ons are configured to accept all certificates that is @@ -75,7 +75,7 @@ is explicitly defined. If necessary, modify the parameters as required. **Step 5 –** Review the add-on operation results. For example, if you are using the add-on that imports data to Netwrix Auditor, you can search Activity Records in the Netwrix Auditor client. -![api_thumb_0_0](/images/auditor/10.8/addon/api_thumb_0_0.webp) +![api_thumb_0_0](/images/auditor/10.7/addon/api_thumb_0_0.webp) **Step 6 –** (optional) For PowerShell based add-ons, you can schedule a daily task to ensure your audit data is always up-to-date. diff --git a/docs/auditor/10.8/addon/privilegeduserlinux/parameters.md b/docs/auditor/10.8/addon/privilegeduserlinux/parameters.md index 4ed0d69ec7..b1ac95042d 100644 --- a/docs/auditor/10.8/addon/privilegeduserlinux/parameters.md +++ b/docs/auditor/10.8/addon/privilegeduserlinux/parameters.md @@ -8,7 +8,7 @@ sidebar_position: 20 The configuration wizard opens in the default web browser: -![PrivilegedUsersConfigWizard](/images/auditor/10.8/addon/privilegeduserlinux/configwizard.webp) +![PrivilegedUsersConfigWizard](/images/auditor/10.7/addon/privilegeduserlinux/configwizard.webp) Click **Proceed** and complete the following fields: diff --git a/docs/auditor/10.8/addon/qumulo/collecteddata.md b/docs/auditor/10.8/addon/qumulo/collecteddata.md index fa7f0fd26c..009f4bda0f 100644 --- a/docs/auditor/10.8/addon/qumulo/collecteddata.md +++ b/docs/auditor/10.8/addon/qumulo/collecteddata.md @@ -15,7 +15,7 @@ To leverage data collected with the add-on, you can do the following in Netwrix You might want to apply a filter to narrow down your search results to the Netwrix API data source only. -![Qumulo screen](/images/auditor/10.8/addon/qumulo/qumulo_thumb_0_0.webp) +![Qumulo screen](/images/auditor/10.7/addon/qumulo/qumulo_thumb_0_0.webp) - Also, you can click **Tools** in the upper-right corner and select the command you need. For example: diff --git a/docs/auditor/10.8/addon/qumulo/overview.md b/docs/auditor/10.8/addon/qumulo/overview.md index e92cac8dfa..4f343434fb 100644 --- a/docs/auditor/10.8/addon/qumulo/overview.md +++ b/docs/auditor/10.8/addon/qumulo/overview.md @@ -38,7 +38,7 @@ Major benefits: The add-on is implemented as a Syslog service that collects activity data from Qumulo Cluster and sends it to Auditor using the Integration API. -![diagram_thumb_0_0](/images/auditor/10.8/addon/qumulo/diagram_thumb_0_0.webp) +![diagram_thumb_0_0](/images/auditor/10.7/addon/qumulo/diagram_thumb_0_0.webp) On a high level, the solution works as follows: diff --git a/docs/auditor/10.8/addon/radius/collecteddata.md b/docs/auditor/10.8/addon/radius/collecteddata.md index 7bc232600d..be0186d42d 100644 --- a/docs/auditor/10.8/addon/radius/collecteddata.md +++ b/docs/auditor/10.8/addon/radius/collecteddata.md @@ -15,7 +15,7 @@ Follow the steps to see results. **Step 2 –** Click **Search**. -![radius](/images/auditor/10.8/addon/radius/radius.webp) +![radius](/images/auditor/10.7/addon/radius/radius.webp) **NOTE:** You might want to apply a filter to narrow down your search results to the RADIUS Logon object type only. diff --git a/docs/auditor/10.8/addon/radius/customreport.md b/docs/auditor/10.8/addon/radius/customreport.md index 9545545595..ab922ade8b 100644 --- a/docs/auditor/10.8/addon/radius/customreport.md +++ b/docs/auditor/10.8/addon/radius/customreport.md @@ -26,7 +26,7 @@ group. After running the script, the RADIUS server logons since yesterday custom report appears in **Reports** > **Custom**. You can access the search instantly to receive it on a regular basis. -![radiusfilters](/images/auditor/10.8/addon/radius/radiusfilters.webp) +![radiusfilters](/images/auditor/10.7/addon/radius/radiusfilters.webp) Clicking the saved search tile opens the search with preset filters, which shows RADIUS logon activity data for 2 days (yesterday and today). diff --git a/docs/auditor/10.8/addon/siem/collecteddata.md b/docs/auditor/10.8/addon/siem/collecteddata.md index 700800a7f7..2a5c298623 100644 --- a/docs/auditor/10.8/addon/siem/collecteddata.md +++ b/docs/auditor/10.8/addon/siem/collecteddata.md @@ -16,6 +16,6 @@ Services Logs** >Netwrix Auditor Integration log. **Step 3 –** Review events. -![EventLog_Export_Example](/images/auditor/10.8/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) +![EventLog_Export_Example](/images/auditor/10.7/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) Now you can augment Windows event log with data collected by the Auditor. diff --git a/docs/auditor/10.8/addon/siem/integrationeventlog.md b/docs/auditor/10.8/addon/siem/integrationeventlog.md index 80b02b1141..bb0ba17b32 100644 --- a/docs/auditor/10.8/addon/siem/integrationeventlog.md +++ b/docs/auditor/10.8/addon/siem/integrationeventlog.md @@ -37,4 +37,4 @@ EventData is filled in with data from the Activity Record fields as follows: Details are filled in only if this Activity Record field is not empty. -![eventlogexample_thumb_0_0](/images/auditor/10.8/addon/solarwinds/eventlogexample_thumb_0_0.webp) +![eventlogexample_thumb_0_0](/images/auditor/10.7/addon/solarwinds/eventlogexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/addon/solarwinds/collecteddata.md b/docs/auditor/10.8/addon/solarwinds/collecteddata.md index 3df6b858b1..6f1f0a7795 100644 --- a/docs/auditor/10.8/addon/solarwinds/collecteddata.md +++ b/docs/auditor/10.8/addon/solarwinds/collecteddata.md @@ -16,6 +16,6 @@ Services Logs** >Netwrix Auditor Integration log. **Step 3 –** Review events. -![EventLog_Export_Example](/images/auditor/10.8/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) +![EventLog_Export_Example](/images/auditor/10.7/addon/solarwinds/eventlogexportexample_thumb_0_0.webp) Now you can augment Windows event log with data collected by the Auditor. diff --git a/docs/auditor/10.8/addon/solarwinds/integrationeventlog.md b/docs/auditor/10.8/addon/solarwinds/integrationeventlog.md index 42497fd375..3c5f1352c1 100644 --- a/docs/auditor/10.8/addon/solarwinds/integrationeventlog.md +++ b/docs/auditor/10.8/addon/solarwinds/integrationeventlog.md @@ -37,4 +37,4 @@ EventData is filled in with data from the Activity Record fields as follows: Details are filled in only if this Activity Record field is not empty. -![eventlogexample_thumb_0_0](/images/auditor/10.8/addon/solarwinds/eventlogexample_thumb_0_0.webp) +![eventlogexample_thumb_0_0](/images/auditor/10.7/addon/solarwinds/eventlogexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/addon/splunk/deployment.md b/docs/auditor/10.8/addon/splunk/deployment.md index a58e479ce0..0d3f6adf4c 100644 --- a/docs/auditor/10.8/addon/splunk/deployment.md +++ b/docs/auditor/10.8/addon/splunk/deployment.md @@ -38,23 +38,23 @@ Follow the steps to install the add-on. - On the main Explore Splunk Enterprise screen, click the gear icon at the top of the left **Apps** panel: -![config](/images/auditor/10.8/addon/splunk/config.webp) +![config](/images/auditor/10.7/addon/splunk/config.webp) - When on any other screen, you can expand the drop-down list at the top panel and choose Manage Apps: - ![searchreporting](/images/auditor/10.8/addon/splunk/searchreporting.webp) + ![searchreporting](/images/auditor/10.7/addon/splunk/searchreporting.webp) **Step 3 –** On the **Apps** screen, click Install app from file: -![installapp](/images/auditor/10.8/addon/splunk/installapp.webp) +![installapp](/images/auditor/10.7/addon/splunk/installapp.webp) **Step 4 –** Click Choose File, navigate to the folder where you unpacked the add-on package, select the "TA-netwrix-auditor-add-on-for-splunk-1.6.1.spl" file and click Open. **Step 5 –** Click Upload. -![uploadapp](/images/auditor/10.8/addon/splunk/uploadapp.webp) +![uploadapp](/images/auditor/10.7/addon/splunk/uploadapp.webp) The **Upload** button text will change to "_Processing…_". When the installation is complete, you will see an invitation to reboot Splunk. This is optional unless you plan to create index @@ -62,7 +62,7 @@ configuration in the add-on folder. In addition, Splunk might not display add-on The installed add-on should appear in the Apps list in Splunk. -![searchreportingapp](/images/auditor/10.8/addon/splunk/searchreportingapp.webp) +![searchreportingapp](/images/auditor/10.7/addon/splunk/searchreportingapp.webp) ## Prepare for Using Netwrix Auditor Integration API @@ -80,13 +80,13 @@ Follow the steps to configure the add-on. **Step 1 –** From the Explore Splunk Enterprise or from the drop-down list on the top Splunk panel, open Netwrix Auditor add-on for Splunk and navigate to the Configuration page: -![configuration](/images/auditor/10.8/addon/splunk/configuration.webp) +![configuration](/images/auditor/10.7/addon/splunk/configuration.webp) **Step 2 –** Configure the account: 1. On the Configuration page, open the Account section. - ![addaccount](/images/auditor/10.8/addon/splunk/addaccount.webp) + ![addaccount](/images/auditor/10.7/addon/splunk/addaccount.webp) 2. Click **Add** and populate the fields: @@ -99,13 +99,13 @@ open Netwrix Auditor add-on for Splunk and navigate to the Configuration page: 3. Click the Add button. The added account should appear in the list: - ![configurationaccount](/images/auditor/10.8/addon/splunk/configurationaccount.webp) + ![configurationaccount](/images/auditor/10.7/addon/splunk/configurationaccount.webp) **Step 3 –** Configure the Netwrix Auditor Integration API location: 1. On the Configuration page open the Add-on Settings section: - ![configurationaddonsettings](/images/auditor/10.8/addon/splunk/configurationaddonsettings.webp) + ![configurationaddonsettings](/images/auditor/10.7/addon/splunk/configurationaddonsettings.webp) 2. In the Netwrix Auditor API location field provide the host name or IP address of your Netwrix Auditor Integration API host (Netwrix Auditor server). @@ -148,11 +148,11 @@ Follow the steps to configure data input. 1. Open Netwrix Auditor add-on for Splunk and go to the **Inputs** section. - ![inputs](/images/auditor/10.8/addon/splunk/inputs.webp) + ![inputs](/images/auditor/10.7/addon/splunk/inputs.webp) 2. Click Create New Input. - ![addapi](/images/auditor/10.8/addon/splunk/addapi.webp) + ![addapi](/images/auditor/10.7/addon/splunk/addapi.webp) 3. Provide the new data input parameters: diff --git a/docs/auditor/10.8/addon/splunk/overview.md b/docs/auditor/10.8/addon/splunk/overview.md index 3cc7f3ca8a..fcc9257345 100644 --- a/docs/auditor/10.8/addon/splunk/overview.md +++ b/docs/auditor/10.8/addon/splunk/overview.md @@ -60,7 +60,7 @@ Netwrix Auditor add-on for Splunk allows pulling activity records data from the its Integration API. Data is retrieved in JSON format, transferred over HTTPS and stored to Splunk index. -![diagram](/images/auditor/10.8/addon/splunk/diagram.webp) +![diagram](/images/auditor/10.7/addon/splunk/diagram.webp) To learn more about Netwrix Auditor activity records, see the [Activity Records](/docs/auditor/10.8/api/postdata/activityrecords.md) topic for additional information. diff --git a/docs/auditor/10.8/admin/alertsettings/create/create.md b/docs/auditor/10.8/admin/alertsettings/create/create.md index 09997e892b..b55eb21002 100644 --- a/docs/auditor/10.8/admin/alertsettings/create/create.md +++ b/docs/auditor/10.8/admin/alertsettings/create/create.md @@ -23,7 +23,7 @@ Follow the steps to create a custom alert. **Step 1 –** On the main Auditor page, click the Alert settings link under the Configuration section on the left: -![configuration_tile](/images/auditor/10.8/admin/alertsettings/configuration_tile.webp) +![configuration_tile](/images/auditor/10.7/admin/alertsettings/configuration_tile.webp) See the [Navigation](/docs/auditor/10.8/admin/navigation/overview.md) topic for additional information. @@ -33,7 +33,7 @@ See the [Navigation](/docs/auditor/10.8/admin/navigation/overview.md) topic for | --------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | General |
  • Specify a name and enter the description for the new alert.
    **NOTE:** Make sure that the Send alert when the action occurs option is enabled. Otherwise, the new alert will be disabled.
  • Email subject — Specify the subject of the email. It is possible to insert variables into the subject line. You can choose between "_Who_", "_What_" and"_Where_" variables. Consider the following:
  • Only one variable of each type can be added
  • You need to cut off the full path from the object names in "_What_" alert and leave only the actual name. For example, "_\com\Corp\Users\Departments\IT\Username_" should be just "_Username_". If you want to get back to the default Email subject line, click the **Restore Default** button.
  • Apply tags — Create a set of tags to more efficiently identify and sort your alerts. Select Edit under Apply tags to associate tags with your alert. Later, you can quickly find an alert of interest using Filter by tags in the upper part of the All Alerts window. To see a full list of alerts ever created in the product, navigate to Settings > Tags.
| | Recipients | Select alert recipients. Click Add Recipient and select alert delivery type:
  • Email — Specify the email address where notifications will be delivered. You can add as many recipients as necessary.
    **_RECOMMENDED:_** click **Send Test Email**. The system will send a test message to the specified email address and inform you if any problems are detected.
  • SMS-enabled email — Netwrix uses the sms gateway technology to deliver notifications to a phone number assigned to a dedicated email address. Specify email address to receive SMS notifications. Make sure that your carrier supports sms to email gateway technology.
| -| Filters | Apply a set of filters to narrow events that trigger a new alert. Alerts use the same interface and logic as search.
  • Filter — Select general type of filter (e.g., "Who", "Data Source", "Monitoring plan", etc.)
  • Operator — Configure match types for selected filter (e.g., "Equals", "Does not contain", etc.)
  • Value — Specify filter value. See the [View and Search Collected Data](/docs/auditor/10.8/admin/search/overview.md) topic for additional information on how to create and modify filters. The Filters section contains required fields highlighted with red. Once you completed all filters, click Preview on the right pane to see search-based list of events that will trigger your alert. ![preview_thumb_0_0](/images/auditor/10.8/admin/alertsettings/preview_thumb_0_0.webp)
| +| Filters | Apply a set of filters to narrow events that trigger a new alert. Alerts use the same interface and logic as search.
  • Filter — Select general type of filter (e.g., "Who", "Data Source", "Monitoring plan", etc.)
  • Operator — Configure match types for selected filter (e.g., "Equals", "Does not contain", etc.)
  • Value — Specify filter value. See the [View and Search Collected Data](/docs/auditor/10.8/admin/search/overview.md) topic for additional information on how to create and modify filters. The Filters section contains required fields highlighted with red. Once you completed all filters, click Preview on the right pane to see search-based list of events that will trigger your alert. ![preview_thumb_0_0](/images/auditor/10.7/admin/alertsettings/preview_thumb_0_0.webp)
| | Thresholds | If necessary, enable threshold to trigger the new alert. In this case, a single alert will be sent instead of many alerts. This can be helpful when Auditor detects many activity records matching the filters you specified. Slide the switch under the Send alert when the threshold is exceeded option and configure the following:
  • Limit alerting to activity records with the same... — Select a filter in the drop-down list (e.g., who). Note that, Auditor will search for activity records with the same value in the filter you selected. Only alerts grouped by the Who parameter can be included in the Behavior Anomalies list. Mind that in this case, the product does not summarize risk scores and shows the value you associated with this alert. This may significantly reduce risk score accuracy.
  • Send alert for `<...>` activity records within `<...>` seconds — Select a number of changes that occurred in a given period (in seconds). For example, you want to receive an alert on suspicious activity. You select "_Action_" in the Limit alerting to activity records with the same list and specify a number of actions to be considered an unexpected behavior: _1000_ changes in _60_ seconds. When the selected threshold exceeded, an alert will be delivered to the specified recipients: one for every 1000 removals in 60 seconds, one for every 1000 failed removals in 60 seconds. So you can easily discover what is going on in your IT infrastructure.
| | Risk Score |
  • Slide the switch to On under Include this alert in Behavior Anomalies assessment. See the [Behavior Anomalies](/docs/auditor/10.8/admin/behavioranomalies/overview.md) topic for additional information.
  • Associate a risk score with the alert — Assign a risk score based on the type of anomaly and the severity of the deviation from the normal behavior. An action's risk score is a numerical value from 1 (Low) to 100 (High) that designates the level of risk with 100 being the riskiest and 1 the least risky. These are general guidelines you can adopt when setting a risk score:
  • High score — Assign to an action that requires your immediate response (e.g., adding account to a privileged group). Configure a non-threshold alert with email recipients.
  • Above medium score — Assign to a repetitive action occurring during a short period of time. While a standalone action is not suspicious, multiple actions merit your attention (e.g., mass deletions from a SharePoint site). Configure a threshold-based alert with email recipients.
  • Low score — Assign to an infrequent action. While a single action is safe, multiple occurrences aggregated over a long period of time may indicate a potential in-house bad actor (e.g., creation of potentially harmful files on a file share). Configure a non-threshold alert, email recipients are optional but make sure to regularly review the Behavior Anomalies dashboard.
  • Low score — Assign to a repetitive action that does not occur too often (e.g., rapid logons). Multiple occurrences of action sets may indicate a potential in-house bad actor or account compromise. Configure a threshold-based alert, email recipients are optional but make sure to regularly review the Behavior Anomalies dashboard.
| | Response Action | You can instruct Auditor to perform a response action when the alert occurs — for example, start an executable file (command, batch file, or other) that will remediate the issue, or open a ticket with the help desk, and so on. For that, you will need an executable file stored locally on the Auditor server. Slide the switch to turn the feature **ON**, and see the [Configure a Response Action for Alert](/docs/auditor/10.8/admin/alertsettings/responseaction.md) topic for additional information. | diff --git a/docs/auditor/10.8/admin/alertsettings/create/createeventlog.md b/docs/auditor/10.8/admin/alertsettings/create/createeventlog.md index 4a100fb6ad..6edaf2eed4 100644 --- a/docs/auditor/10.8/admin/alertsettings/create/createeventlog.md +++ b/docs/auditor/10.8/admin/alertsettings/create/createeventlog.md @@ -48,7 +48,7 @@ The %ManagedObjectName% variable will be replaced with your monitoring plan name | Source | Specify this parameter if you want to be alerted on the events from a specific source. If you need to specify several users, you can define a mask for this parameter in the same way as described above. | | Category | Specify this parameter if you want to be alerted on a specific event category. | - ![eventfilters](/images/auditor/10.8/admin/alertsettings/eventfilters.webp) + ![eventfilters](/images/auditor/10.7/admin/alertsettings/eventfilters.webp) - In the Insertion Strings tab: diff --git a/docs/auditor/10.8/admin/alertsettings/create/createhealthstatus.md b/docs/auditor/10.8/admin/alertsettings/create/createhealthstatus.md index 6141aa461e..2fd65dee82 100644 --- a/docs/auditor/10.8/admin/alertsettings/create/createhealthstatus.md +++ b/docs/auditor/10.8/admin/alertsettings/create/createhealthstatus.md @@ -54,7 +54,7 @@ inclusive filter. **Step 12 –** Click Save to save your changes. -![emailhealthstatusevent](/images/auditor/10.8/admin/alertsettings/emailhealthstatusevent.webp) +![emailhealthstatusevent](/images/auditor/10.7/admin/alertsettings/emailhealthstatusevent.webp) If an event occurs that triggers an alert, an email notification will be sent immediately to the specified recipients. diff --git a/docs/auditor/10.8/admin/alertsettings/create/createmailboxaccess.md b/docs/auditor/10.8/admin/alertsettings/create/createmailboxaccess.md index 3f66947a59..6c2e28b00d 100644 --- a/docs/auditor/10.8/admin/alertsettings/create/createmailboxaccess.md +++ b/docs/auditor/10.8/admin/alertsettings/create/createmailboxaccess.md @@ -93,7 +93,7 @@ sent immediately to the specified recipients. Review the example of the MessageOpened event in the XML view: -![eventmessageopen](/images/auditor/10.8/admin/alertsettings/eventmessageopen.webp) +![eventmessageopen](/images/auditor/10.7/admin/alertsettings/eventmessageopen.webp) Depending on the event, the strings in the description may vary. The first eight strings are common for all events: @@ -151,4 +151,4 @@ In the example below, the following information has been added: - String 8 with the description - String 9 with the description -![editnotificationtemplate](/images/auditor/10.8/admin/alertsettings/editnotificationtemplate.webp) +![editnotificationtemplate](/images/auditor/10.7/admin/alertsettings/editnotificationtemplate.webp) diff --git a/docs/auditor/10.8/admin/alertsettings/dashboard.md b/docs/auditor/10.8/admin/alertsettings/dashboard.md index 7400461740..91eb416b29 100644 --- a/docs/auditor/10.8/admin/alertsettings/dashboard.md +++ b/docs/auditor/10.8/admin/alertsettings/dashboard.md @@ -23,13 +23,13 @@ The dashboard includes the following widgets: - Alerts timeline – Shows the number of alerts triggered at the specific day. - Recent alerts – Shows all the triggered alerts in chronological order. -![alerts_overview_thumb_0_0](/images/auditor/10.8/admin/alertsettings/alerts_overview_thumb_0_0.webp) +![alerts_overview_thumb_0_0](/images/auditor/10.7/admin/alertsettings/alerts_overview_thumb_0_0.webp) Clicking any tile except for Risk score by top 5 users drills down to the Alert history dashboard that provides users with the detailed information about the latest alerts triggered in their IT infrastructure enriched with the actionable chart and timeline. -![alerts_history_thumb_0_0](/images/auditor/10.8/admin/alertsettings/alerts_history_thumb_0_0.webp) +![alerts_history_thumb_0_0](/images/auditor/10.7/admin/alertsettings/alerts_history_thumb_0_0.webp) Review detailed information about the triggered alerts and change anomaly status. See the [Review User Profiles and Process Anomalies](/docs/auditor/10.8/admin/behavioranomalies/userprofile.md) topic for diff --git a/docs/auditor/10.8/admin/alertsettings/overview.md b/docs/auditor/10.8/admin/alertsettings/overview.md index 06068ae90e..0dc4dc0bf8 100644 --- a/docs/auditor/10.8/admin/alertsettings/overview.md +++ b/docs/auditor/10.8/admin/alertsettings/overview.md @@ -24,14 +24,14 @@ Review the following to take advantage of the Alerts functionality: The example alert is triggered when a new user is created in the monitored domain. -![ad_alert](/images/auditor/10.8/admin/alertsettings/ad_alert.webp) +![ad_alert](/images/auditor/10.7/admin/alertsettings/ad_alert.webp) ## Tags Netwrix Auditor allows you to apply tags when creating an alert. Applying tags to alerts allows you to distinguish one alert from another or create groups of similar alerts. -![Manage tags list](/images/auditor/10.8/admin/alertsettings/managetags.webp) +![Manage tags list](/images/auditor/10.7/admin/alertsettings/managetags.webp) The Tags page contains a complete list of alerts that were created in the product. Currently, you cannot assign or create tags on this page. diff --git a/docs/auditor/10.8/admin/alertsettings/responseaction.md b/docs/auditor/10.8/admin/alertsettings/responseaction.md index 7d3dcf5472..0c811d4ba0 100644 --- a/docs/auditor/10.8/admin/alertsettings/responseaction.md +++ b/docs/auditor/10.8/admin/alertsettings/responseaction.md @@ -10,7 +10,7 @@ Upon the alert triggering, you can instruct Auditor to perform several actions s command, a script or other executable file that will perform a remediation action, open a ticket with the organization help desk, etc. -![passwordreset_thumb_0_0](/images/auditor/10.8/admin/alertsettings/passwordreset_thumb_0_0.webp) +![passwordreset_thumb_0_0](/images/auditor/10.7/admin/alertsettings/passwordreset_thumb_0_0.webp) Response Action settings contain the following configuration options: @@ -43,7 +43,7 @@ Use space character as a separator. **Step 4 –** To run _.exe_, _.cmd_ and _.bat_ files, you can enter the path to your command-line or batch file directly in the Run field, for example: -![command_thumb_0_0](/images/auditor/10.8/admin/alertsettings/command_thumb_0_0.webp) +![command_thumb_0_0](/images/auditor/10.7/admin/alertsettings/command_thumb_0_0.webp) To run the ._ps1_ files, you will need to enter the path to _powershell.exe_ and path to your script. For example: @@ -51,7 +51,7 @@ script. For example: - In the Run field, enter _C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe_ - In the With parameters field, enter `–File ` -![powershell_thumb_0_0](/images/auditor/10.8/admin/alertsettings/powershell_thumb_0_0.webp) +![powershell_thumb_0_0](/images/auditor/10.7/admin/alertsettings/powershell_thumb_0_0.webp) Unless you select to Write data to CSV file, Auditor will also pass the following parameters to the command line: @@ -130,7 +130,7 @@ the fields and their values in a structured way to a CSV file. Here is an example of a CSV file structure: -![csvfile_thumb_0_48](/images/auditor/10.8/admin/alertsettings/csvfile_thumb_0_48.webp) +![csvfile_thumb_0_48](/images/auditor/10.7/admin/alertsettings/csvfile_thumb_0_48.webp) The number of activity records retrieved per every response action launch will be only limited by user (see below for details). If the number of records associated with the alert exceeds this limit, diff --git a/docs/auditor/10.8/admin/behavioranomalies/dashboard.md b/docs/auditor/10.8/admin/behavioranomalies/dashboard.md index 36c892eb5e..e88f772e4b 100644 --- a/docs/auditor/10.8/admin/behavioranomalies/dashboard.md +++ b/docs/auditor/10.8/admin/behavioranomalies/dashboard.md @@ -18,10 +18,10 @@ access them instantly. See the [Navigation](/docs/auditor/10.8/admin/navigation/ To review the Behavior Anomalies dashboard: On the main Auditor page, click -![ba_tile](/images/auditor/10.8/admin/behavioranomalies/ba_tile.webp) +![ba_tile](/images/auditor/10.7/admin/behavioranomalies/ba_tile.webp) on the left. -![dashboard_thumb_0_0](/images/auditor/10.8/admin/behavioranomalies/dashboard_thumb_0_0.webp) +![dashboard_thumb_0_0](/images/auditor/10.7/admin/behavioranomalies/dashboard_thumb_0_0.webp) The dashboards includes the following sections: diff --git a/docs/auditor/10.8/admin/behavioranomalies/userprofile.md b/docs/auditor/10.8/admin/behavioranomalies/userprofile.md index 751ccd05b2..0b0ce05370 100644 --- a/docs/auditor/10.8/admin/behavioranomalies/userprofile.md +++ b/docs/auditor/10.8/admin/behavioranomalies/userprofile.md @@ -13,7 +13,7 @@ To view a user profile - On the Behavior Anomalies assessment dashboard, locate a user and click View Profile next to his or her name. -![userprofile_thumb_0_0](/images/auditor/10.8/admin/behavioranomalies/userprofile_thumb_0_0.webp) +![userprofile_thumb_0_0](/images/auditor/10.7/admin/behavioranomalies/userprofile_thumb_0_0.webp) The user profile page contains the following sections: @@ -48,7 +48,7 @@ To change an anomaly status You can add comments without changing a status. This might be helpful if the anomaly remains active for a long period of time and you need even more time to examine it closely. -![changestatus_thumb_0_0](/images/auditor/10.8/admin/behavioranomalies/changestatus_thumb_0_0.webp) +![changestatus_thumb_0_0](/images/auditor/10.7/admin/behavioranomalies/changestatus_thumb_0_0.webp) Once the anomaly is reviewed, it disappears from the timeline and chart, and its associated risk score is taken from user's total score. The reviewed anomalies supplement the status with the diff --git a/docs/auditor/10.8/admin/compliancemappings.md b/docs/auditor/10.8/admin/compliancemappings.md index fb8793397d..3a24e44e4d 100644 --- a/docs/auditor/10.8/admin/compliancemappings.md +++ b/docs/auditor/10.8/admin/compliancemappings.md @@ -13,4 +13,4 @@ opens the page on the Netwrix website. Here you can review a brief description o standard supported by the product and download E book containing detailed requirements for the standards. -![compliance_mappings](/images/auditor/10.8/admin/compliance_mappings.webp) +![compliance_mappings](/images/auditor/10.7/admin/compliance_mappings.webp) diff --git a/docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md b/docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md index f5ac25202f..45a46a6e17 100644 --- a/docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md +++ b/docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md @@ -13,7 +13,7 @@ generation intensity in your IT infrastructure, and product load. After you click View details, the Activity Records Statistics window will be displayed. -![activityrecordsdetails_thumb_0_0](/images/auditor/10.8/admin/healthstatus/dashboard/activityrecordsdetails_thumb_0_0.webp) +![activityrecordsdetails_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/activityrecordsdetails_thumb_0_0.webp) By default, statistics on activity records processing is grouped by Monitoring plan and presented for the Last 7 days. To modify the timeframe, use the drop-down list in the upper right corner. diff --git a/docs/auditor/10.8/admin/healthstatus/dashboard/databasestatistics.md b/docs/auditor/10.8/admin/healthstatus/dashboard/databasestatistics.md index 9879ce58ad..a27b837221 100644 --- a/docs/auditor/10.8/admin/healthstatus/dashboard/databasestatistics.md +++ b/docs/auditor/10.8/admin/healthstatus/dashboard/databasestatistics.md @@ -17,7 +17,7 @@ Transaction logs size is not included in the calculations. After you click View details, the following information will be displayed for the specified SQL Server instance: -![dbstats_overview_thumb_0_0](/images/auditor/10.8/admin/healthstatus/dashboard/dbstats_overview_thumb_0_0.webp) +![dbstats_overview_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/dbstats_overview_thumb_0_0.webp) The Database name column contains the list of Netwrix Auditor databases hosted by the specified instance of the SQL Server: @@ -39,7 +39,7 @@ The following capacity metrics are displayed for each database: After you expand the database node, the detailed database properties will be shown: -![dbstatistics_thumb_0_0](/images/auditor/10.8/admin/healthstatus/dashboard/dbstatistics_thumb_0_0.webp) +![dbstatistics_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/dbstatistics_thumb_0_0.webp) These properties are as follows: diff --git a/docs/auditor/10.8/admin/healthstatus/dashboard/healthlog.md b/docs/auditor/10.8/admin/healthstatus/dashboard/healthlog.md index 45c903bad7..14fbc5d956 100644 --- a/docs/auditor/10.8/admin/healthstatus/dashboard/healthlog.md +++ b/docs/auditor/10.8/admin/healthstatus/dashboard/healthlog.md @@ -17,7 +17,7 @@ System Health log**. Then, follow the instructions provided by Microsoft. See th for additional information on [How to Clear Event Logs](https://learn.microsoft.com/en-us/host-integration-server/core/how-to-clear-event-logs1). -![healthlog](/images/auditor/10.8/admin/healthstatus/dashboard/healthlog.webp) +![healthlog](/images/auditor/10.7/admin/healthstatus/dashboard/healthlog.webp) ## Netwrix Auditor System Health Log @@ -87,6 +87,6 @@ Follow the steps to filter events. | Item name | Select to display events from the certain item(s) you need. | | Event ID | Enter event ID number or range of event IDs separated by commas. For example, 1, 3, 5-99. You can also exclude unwanted event IDs from being displayed. Type the minus sign before selected event ID. For example, -76. | -![healthlogfilters_thumb_0_0](/images/auditor/10.8/admin/healthstatus/dashboard/healthlogfilters_thumb_0_0.webp) +![healthlogfilters_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/healthlogfilters_thumb_0_0.webp) The applied filters will be listed on the top of the screen under the window title. diff --git a/docs/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview.md b/docs/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview.md index 4018e04207..7598d4122c 100644 --- a/docs/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview.md +++ b/docs/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview.md @@ -19,7 +19,7 @@ displays current statuses of all monitoring plans: After you click View details, the Monitoring Overview window will be displayed. -![monitoringoverview_thumb_0_0](/images/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview_thumb_0_0.webp) +![monitoringoverview_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/monitoringoverview_thumb_0_0.webp) It provides the hierarchical list of monitoring plans, processed data sources and corresponding items with their current status and date/time of the last data processing session. For data sources diff --git a/docs/auditor/10.8/admin/healthstatus/dashboard/overview.md b/docs/auditor/10.8/admin/healthstatus/dashboard/overview.md index dc61aebaf7..189709ccf8 100644 --- a/docs/auditor/10.8/admin/healthstatus/dashboard/overview.md +++ b/docs/auditor/10.8/admin/healthstatus/dashboard/overview.md @@ -39,7 +39,7 @@ The dashboard includes the following widgets: [System Health](/docs/auditor/10.8/requirements/longtermarchive.md#system-health) topic for additional information. -![healthstatusdashboard_thumb_0_0](/images/auditor/10.8/admin/healthstatus/dashboard/healthstatusdashboard_thumb_0_0.webp) +![healthstatusdashboard_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/healthstatusdashboard_thumb_0_0.webp) You can also instruct Netwrix Auditor to forward similar statistics as a health summary email to personnel in charge. For that, click Notification settings, then follow the steps described in the diff --git a/docs/auditor/10.8/admin/healthstatus/selfaudit.md b/docs/auditor/10.8/admin/healthstatus/selfaudit.md index 5d19d6afea..28b012d747 100644 --- a/docs/auditor/10.8/admin/healthstatus/selfaudit.md +++ b/docs/auditor/10.8/admin/healthstatus/selfaudit.md @@ -14,7 +14,7 @@ workflows adopted by our organization. The corresponding option is available on the General tab of Netwrix AuditorSettings. By default, the **Collect data for self-audit checkbox** is selected (enabled). -![selfaudit_thumb_0_0](/images/auditor/10.8/admin/healthstatus/selfaudit_thumb_0_0.webp) +![selfaudit_thumb_0_0](/images/auditor/10.7/admin/healthstatus/selfaudit_thumb_0_0.webp) ### Search for Self-audit Results @@ -28,7 +28,7 @@ Follow the steps to search for self-audit results. **Step 3 –** Click Search to review results: -![selfaudit_search_thumb_0_0](/images/auditor/10.8/admin/healthstatus/selfaudit_search_thumb_0_0.webp) +![selfaudit_search_thumb_0_0](/images/auditor/10.7/admin/healthstatus/selfaudit_search_thumb_0_0.webp) **NOTE:** After reviewing your search results, apply filters to narrow your data. See the [View Reports](/docs/auditor/10.8/admin/reports/view.md) topic for additional information. @@ -48,7 +48,7 @@ Follow the steps to review the Self-audit report. **Step 2 –** Select the Netwrix Auditor Self-Audit report and click View. -![selfaudit_report](/images/auditor/10.8/admin/healthstatus/selfaudit_report.webp) +![selfaudit_report](/images/auditor/10.7/admin/healthstatus/selfaudit_report.webp) ## Netwrix Auditor Self-Audit Scope diff --git a/docs/auditor/10.8/admin/healthstatus/summaryemail.md b/docs/auditor/10.8/admin/healthstatus/summaryemail.md index c99eb126f3..8ed69815f9 100644 --- a/docs/auditor/10.8/admin/healthstatus/summaryemail.md +++ b/docs/auditor/10.8/admin/healthstatus/summaryemail.md @@ -18,7 +18,7 @@ red means there were some problems that require your attention. The email looks like shown below: -![email_thumb_0_0](/images/auditor/10.8/admin/healthstatus/email_thumb_0_0.webp) +![email_thumb_0_0](/images/auditor/10.7/admin/healthstatus/email_thumb_0_0.webp) The Monitoring Overview section of the email provides detail information only for the monitoring plans with issues. Successfully completed monitoring plans are not included. diff --git a/docs/auditor/10.8/admin/healthstatus/troubleshooting.md b/docs/auditor/10.8/admin/healthstatus/troubleshooting.md index 2b75fcad89..71902a7bb0 100644 --- a/docs/auditor/10.8/admin/healthstatus/troubleshooting.md +++ b/docs/auditor/10.8/admin/healthstatus/troubleshooting.md @@ -31,9 +31,9 @@ portal as described in the Creating a ticket with Customer portal section. 2. You can search or browse through the Knowledge Base articles here, or click **Create New Ticket**: - ![support_ticket_customer_portal_fixed](/images/auditor/10.8/admin/healthstatus/support_ticket_customer_portal_fixed.webp) + ![support_ticket_customer_portal_fixed](/images/auditor/10.7/admin/healthstatus/support_ticket_customer_portal_fixed.webp) 3. Fill in the form, describing the issue, and click **Open a ticket**. 4. After that, you will be able to attach the files you need (screenshots, emails, reports, etc.). -![support_ticket_customer_portal](/images/auditor/10.8/admin/healthstatus/support_ticket_customer_portal.webp) +![support_ticket_customer_portal](/images/auditor/10.7/admin/healthstatus/support_ticket_customer_portal.webp) diff --git a/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md b/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md index e65f8c5266..89da8d3ddf 100644 --- a/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/activedirectory/overview.md @@ -34,7 +34,7 @@ Complete the following fields: | Objects | | | Specify monitoring restrictions | Specify restrictions for the objects to monitor in your Active Directory. Use them to create the lists of specific objects to include and / or exclude from the monitoring scope (and, therefore, search results, reports and Activity Summaries). The following options are available: - Monitor all objects - **Include these objects** - **Exclude these objects** To create a list of inclusions / exclusions, click Add and enter object path using one of the following formats: - Canonical name, for example: _mydomain.local/Computers/filesrv01_ OR - Object path as shown in the "_What_" column of reports and search results, for example: _\local\mydomain\Computers\filesrv01_ You can use a wildcard (\*) to replace any number of characters in the path. See the examples below for more information. | -![Specify monitoring restrictions](/images/auditor/10.8/admin/monitoringplans/activedirectory/mp_data_source_ad_omit_example.webp) +![Specify monitoring restrictions](/images/auditor/10.7/admin/monitoringplans/activedirectory/mp_data_source_ad_omit_example.webp) Examples @@ -128,7 +128,7 @@ Follow the steps to use Netwrix Privilege Secure as an account for data collect **Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data collection. -![npsdatacollectingaccount](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccount.webp) +![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) **Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. Credential-based is the default option. Refer to the @@ -141,7 +141,7 @@ and to which Netwrix Auditor has the access through a Credential-based access po **NOTE:** Netwrix recommends using different credentials for different monitoring plans and data sources. -![npsdatacollectingaccountresourced](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) +![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) The second option is Resource-based. To use this option, you need to provide the Activity and Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure diff --git a/docs/auditor/10.8/admin/monitoringplans/activitysummaryemail.md b/docs/auditor/10.8/admin/monitoringplans/activitysummaryemail.md index b5f3ba4bcb..ece7a22b02 100644 --- a/docs/auditor/10.8/admin/monitoringplans/activitysummaryemail.md +++ b/docs/auditor/10.8/admin/monitoringplans/activitysummaryemail.md @@ -17,7 +17,7 @@ different and do not show changes. The following Activity Summary example applies to Active Directory. Other Activity Summaries generated and delivered by Netwrix Auditor will vary slightly depending on the data source. -![ad_activitity_summary_thumb_0_0](/images/auditor/10.8/admin/monitoringplans/ad_activitity_summary_thumb_0_0.webp) +![ad_activitity_summary_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/ad_activitity_summary_thumb_0_0.webp) The example Activity Summary provides the following information on Active Directory changes: diff --git a/docs/auditor/10.8/admin/monitoringplans/create.md b/docs/auditor/10.8/admin/monitoringplans/create.md index a47b06b892..7175441f3b 100644 --- a/docs/auditor/10.8/admin/monitoringplans/create.md +++ b/docs/auditor/10.8/admin/monitoringplans/create.md @@ -35,12 +35,12 @@ data. ## Settings for Data Collection -![mp_wizard_step1](/images/auditor/10.8/admin/monitoringplans/mp_wizard_step1.webp) +![mp_wizard_step1](/images/auditor/10.7/admin/monitoringplans/mp_wizard_step1.webp) At this step of the wizard, specify the account that Auditor will use to access the data source, and general settings for data collection. -![mp_wizard_step2](/images/auditor/10.8/admin/monitoringplans/mp_wizard_step2.webp) +![mp_wizard_step2](/images/auditor/10.7/admin/monitoringplans/mp_wizard_step2.webp) | Option | Description | | --------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | @@ -115,7 +115,7 @@ You can use default settings for your SQL Server instance or modify them (e.g., authentication method or user). You can also change these settings later. See the [Audit Database](/docs/auditor/10.8/admin/settings/auditdatabase.md) topic for additional information. -![mp_wizard_step_db_thumb_0_0](/images/auditor/10.8/admin/monitoringplans/mp_wizard_step_db_thumb_0_0.webp) +![mp_wizard_step_db_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/mp_wizard_step_db_thumb_0_0.webp) Configure the following: diff --git a/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md b/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md index 6521f8b6ea..dbcf2b6152 100644 --- a/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md +++ b/docs/auditor/10.8/admin/monitoringplans/dataaccounts.md @@ -76,7 +76,7 @@ Follow the steps to update credentials for the accounts used by Auditor: **Step 5 –** Review the account configuration scope and click **Update password** next to this account. -![Password Management](/images/auditor/10.8/admin/monitoringplans/updatecredentials.webp) +![Password Management](/images/auditor/10.7/admin/monitoringplans/updatecredentials.webp) **Step 6 –** Save your edits. diff --git a/docs/auditor/10.8/admin/monitoringplans/datasources.md b/docs/auditor/10.8/admin/monitoringplans/datasources.md index 9fd1272ee5..6c00323468 100644 --- a/docs/auditor/10.8/admin/monitoringplans/datasources.md +++ b/docs/auditor/10.8/admin/monitoringplans/datasources.md @@ -27,7 +27,7 @@ Follow the steps to modify data source settings. **Step 2 –** Within the monitoring plan window, highlight the data source (the first one is the row right under the blue table header) and click Edit data source on the right: -![Data source settings](/images/auditor/10.8/admin/monitoringplans/mp_edit_data_source_thumb_0_0.webp) +![Data source settings](/images/auditor/10.7/admin/monitoringplans/mp_edit_data_source_thumb_0_0.webp) **Step 3 –** Modify data source settings as you need. diff --git a/docs/auditor/10.8/admin/monitoringplans/delegation.md b/docs/auditor/10.8/admin/monitoringplans/delegation.md index 963786b559..0ded923aa9 100644 --- a/docs/auditor/10.8/admin/monitoringplans/delegation.md +++ b/docs/auditor/10.8/admin/monitoringplans/delegation.md @@ -14,7 +14,7 @@ To keep the monitoring process secure, Netwrix suggests configuring role-based a control ensures that only appropriate users can modify the product configuration or view audit data, based on your company policies and the user's job responsibilities. -![rbac-01](/images/auditor/10.8/admin/monitoringplans/rbac-01.webp) +![rbac-01](/images/auditor/10.7/admin/monitoringplans/rbac-01.webp) Roles are described briefly in the table below and explained in detail in the next topic. @@ -101,7 +101,7 @@ Do one of the following: | To... | Do... | | ------------------------ | --------------------------------------------------------------------------------------------------------------------------- | | Assign a role | 1. Select Add User. 2. In the dialog that opens, specify a user (or a group) and a role. | -| Revoke a role assignment | - Click ![delete](/images/auditor/10.8/admin/monitoringplans/delete.webp) next to the user. | +| Revoke a role assignment | - Click ![delete](/images/auditor/10.7/admin/monitoringplans/delete.webp) next to the user. | **Step 4 –** Click **Save** or **Save&Close**. @@ -149,7 +149,7 @@ Netwrix Auditor Client Users group. Specify users you want to be included in this group. -![Roles_Groups](/images/auditor/10.8/admin/monitoringplans/roles_groups.webp) +![Roles_Groups](/images/auditor/10.7/admin/monitoringplans/roles_groups.webp) **NOTE:** For additional information about User Activity video access management, see the [Configure Video Recordings Playback Settings](/docs/auditor/10.8/configuration/useractivity/videorecordings.md) diff --git a/docs/auditor/10.8/admin/monitoringplans/exchangeonline/overview.md b/docs/auditor/10.8/admin/monitoringplans/exchangeonline/overview.md index fcc8005c98..b5555845ca 100644 --- a/docs/auditor/10.8/admin/monitoringplans/exchangeonline/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/exchangeonline/overview.md @@ -50,7 +50,7 @@ Follow the steps to configure Office 365 tenant as a monitored item. [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) topic for additional information. -![tenantenvironment](/images/auditor/10.8/admin/monitoringplans/tenantenvironment.webp) +![tenantenvironment](/images/auditor/10.7/admin/monitoringplans/tenantenvironment.webp) If you are using a government tenant, please click the **Tenant Environment** tab and select the desired tenant environment. @@ -82,7 +82,7 @@ desired tenant environment. **Step 3 –** Click the **Add** button. -![Add Office 365 Item window](/images/auditor/10.8/admin/monitoringplans/item_o365_basic_auth_thumb_0_0.webp) +![Add Office 365 Item window](/images/auditor/10.7/admin/monitoringplans/item_o365_basic_auth_thumb_0_0.webp) You can use a single account to collect audit data for different Office 365 services (Microsoft Entra ID, Exchange Online, SharePoint Online); however, Netwrix recommends that you specify diff --git a/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md b/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md index cb9741be3f..0296ad5fae 100644 --- a/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/fileservers/overview.md @@ -117,7 +117,7 @@ Complete the following fields: To audit all file shares, under Specify monitoring restrictions, select Monitor all file shares in the array. -![item_emc_scope_thumb_0_0](/images/auditor/10.8/admin/monitoringplans/fileservers/item_emc_scope_thumb_0_0.webp) +![item_emc_scope_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/fileservers/item_emc_scope_thumb_0_0.webp) You can also create lists of specific file shares to include and/or exclude from being audited. @@ -169,7 +169,7 @@ to the specified shared folder, its subfolders and files. - All actions — Exclude all actions of the selected users - These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_. -![Specify Filters](/images/auditor/10.8/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) +![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) **Step 3 –** After configuring all filters, click **Add** to save them and return to the item settings. @@ -247,7 +247,7 @@ to the specified shared folder, its subfolders and files. - All actions — Exclude all actions of the selected users - These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_. -![Specify Filters](/images/auditor/10.8/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) +![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) **Step 3 –** After configuring all filters, click **Add** to save them and return to the item settings. @@ -325,7 +325,7 @@ to the specified shared folder, its subfolders and files. - All actions — Exclude all actions of the selected users - These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_. -![Specify Filters](/images/auditor/10.8/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) +![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) **Step 3 –** After configuring all filters, click **Add** to save them and return to the item settings. @@ -440,7 +440,7 @@ to the specified shared folder, its subfolders and files. - All actions — Exclude all actions of the selected users - These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_. -![Specify Filters](/images/auditor/10.8/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) +![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) **Step 3 –** After configuring all filters, click **Add** to save them and return to the item settings. diff --git a/docs/auditor/10.8/admin/monitoringplans/fileservers/scope.md b/docs/auditor/10.8/admin/monitoringplans/fileservers/scope.md index ae15ff603f..70e85999b7 100644 --- a/docs/auditor/10.8/admin/monitoringplans/fileservers/scope.md +++ b/docs/auditor/10.8/admin/monitoringplans/fileservers/scope.md @@ -85,7 +85,7 @@ to the specified shared folder, its subfolders and files. - All actions — Exclude all actions of the selected users - These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_. -![Specify Filters](/images/auditor/10.8/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) +![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) **Step 3 –** After configuring all filters, click **Add** to save them and return to the item settings. diff --git a/docs/auditor/10.8/admin/monitoringplans/fileservers/windowsfileserver.md b/docs/auditor/10.8/admin/monitoringplans/fileservers/windowsfileserver.md index daef83a007..ee05a6068a 100644 --- a/docs/auditor/10.8/admin/monitoringplans/fileservers/windowsfileserver.md +++ b/docs/auditor/10.8/admin/monitoringplans/fileservers/windowsfileserver.md @@ -63,7 +63,7 @@ to the specified shared folder, its subfolders and files. - All actions — Exclude all actions of the selected users - These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_. -![Specify Filters](/images/auditor/10.8/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) +![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users_thumb_0_0.webp) **Step 3 –** After configuring all filters, click **Add** to save them and return to the item settings. @@ -143,7 +143,7 @@ By default, both user activity and state-in-time data will be collected for the However, you can narrow your monitoring scope by specifying certain locations, user accounts or actions to exclude . -![Add Item (Computer)](/images/auditor/10.8/admin/monitoringplans/fileservers/item_computer_exclusions_thumb_0_0.webp) +![Add Item (Computer)](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclusions_thumb_0_0.webp) Click Add Exclusion, then follow the steps in the Specify Filters dialog: @@ -177,7 +177,7 @@ Follow the steps to exclude specific user activity. - All actions — Exclude all actions of the selected users - These actions — Use the drop-down list to select the actions to exclude, e.g. _Added_ and _Moved_ -![Specify Filters](/images/auditor/10.8/admin/monitoringplans/fileservers/item_computer_exclude_users.webp) +![Specify Filters](/images/auditor/10.7/admin/monitoringplans/fileservers/item_computer_exclude_users.webp) After configuring all filters, click **Add** to save them and return to the item settings. @@ -197,7 +197,7 @@ Follow the steps to use Netwrix Privilege Secure as an account for data collect **Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data collection. -![npsdatacollectingaccount](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccount.webp) +![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) **Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. Credential-based is the default option. Refer to the @@ -210,7 +210,7 @@ and to which Netwrix Auditor has the access through a Credential-based access po **NOTE:** Netwrix recommends using different credentials for different monitoring plans and data sources. -![npsdatacollectingaccountresourced](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) +![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) The second option is Resource-based. To use this option, you need to provide the Activity and Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure diff --git a/docs/auditor/10.8/admin/monitoringplans/grouppolicy/overview.md b/docs/auditor/10.8/admin/monitoringplans/grouppolicy/overview.md index 5c816ec5e3..ecf833ea5e 100644 --- a/docs/auditor/10.8/admin/monitoringplans/grouppolicy/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/grouppolicy/overview.md @@ -59,7 +59,7 @@ Follow the steps to use Netwrix Privilege Secure as an account for data collect **Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data collection. -![npsdatacollectingaccount](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccount.webp) +![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) **Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. Credential-based is the default option. Refer to the @@ -72,7 +72,7 @@ and to which Netwrix Auditor has the access through a Credential-based access po **NOTE:** Netwrix recommends using different credentials for different monitoring plans and data sources. -![npsdatacollectingaccountresourced](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) +![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) The second option is Resource-based. To use this option, you need to provide the Activity and Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure diff --git a/docs/auditor/10.8/admin/monitoringplans/logonactivity/overview.md b/docs/auditor/10.8/admin/monitoringplans/logonactivity/overview.md index ef55f3d07a..bad488ba36 100644 --- a/docs/auditor/10.8/admin/monitoringplans/logonactivity/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/logonactivity/overview.md @@ -61,7 +61,7 @@ Follow the steps to use Netwrix Privilege Secure as an account for data collect **Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data collection. -![npsdatacollectingaccount](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccount.webp) +![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) **Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. Credential-based is the default option. Refer to the @@ -74,7 +74,7 @@ and to which Netwrix Auditor has the access through a Credential-based access po **NOTE:** Netwrix recommends using different credentials for different monitoring plans and data sources. -![npsdatacollectingaccountresourced](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) +![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) The second option is Resource-based. To use this option, you need to provide the Activity and Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure diff --git a/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md b/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md index 2f7f7a72f9..9f724841b7 100644 --- a/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/microsoftentraid/overview.md @@ -79,7 +79,7 @@ Follow the steps to configure Office 365 tenant as a monitored item. [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) topic for additional information. -![tenantenvironment](/images/auditor/10.8/admin/monitoringplans/tenantenvironment.webp) +![tenantenvironment](/images/auditor/10.7/admin/monitoringplans/tenantenvironment.webp) If you are using a government tenant, please click the **Tenant Environment** tab and select the desired tenant environment. @@ -111,7 +111,7 @@ desired tenant environment. **Step 3 –** Click the **Add** button. -![Add Office 365 Item window](/images/auditor/10.8/admin/monitoringplans/item_o365_basic_auth_thumb_0_0.webp) +![Add Office 365 Item window](/images/auditor/10.7/admin/monitoringplans/item_o365_basic_auth_thumb_0_0.webp) You can use a single account to collect audit data for different Office 365 services (Microsoft Entra ID, Exchange Online, SharePoint Online); however, Netwrix recommends that you specify @@ -139,7 +139,7 @@ Follow the steps to use Netwrix Privilege Secure as an account for data collect **Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data collection. -![npsdatacollectingaccount](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccount.webp) +![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) **Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. Credential-based is the default option. Refer to the @@ -152,7 +152,7 @@ and to which Netwrix Auditor has the access through a Credential-based access po **NOTE:** Netwrix recommends using different credentials for different monitoring plans and data sources. -![npsdatacollectingaccountresourced](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) +![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) The second option is Resource-based. To use this option, you need to provide the Activity and Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure diff --git a/docs/auditor/10.8/admin/monitoringplans/msteams.md b/docs/auditor/10.8/admin/monitoringplans/msteams.md index 9b5c5ca775..eaf0c47f3c 100644 --- a/docs/auditor/10.8/admin/monitoringplans/msteams.md +++ b/docs/auditor/10.8/admin/monitoringplans/msteams.md @@ -50,7 +50,7 @@ Follow the steps to configure Office 365 tenant as a monitored item. [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) topic for additional information. -![tenantenvironment](/images/auditor/10.8/admin/monitoringplans/tenantenvironment.webp) +![tenantenvironment](/images/auditor/10.7/admin/monitoringplans/tenantenvironment.webp) If you are using a government tenant, please click the **Tenant Environment** tab and select the desired tenant environment. @@ -82,7 +82,7 @@ desired tenant environment. **Step 3 –** Click the **Add** button. -![Add Office 365 Item window](/images/auditor/10.8/admin/monitoringplans/item_o365_basic_auth_thumb_0_0.webp) +![Add Office 365 Item window](/images/auditor/10.7/admin/monitoringplans/item_o365_basic_auth_thumb_0_0.webp) You can use a single account to collect audit data for different Office 365 services (Microsoft Entra ID, Exchange Online, SharePoint Online); however, Netwrix recommends that you specify diff --git a/docs/auditor/10.8/admin/monitoringplans/oracle/overview.md b/docs/auditor/10.8/admin/monitoringplans/oracle/overview.md index 6ceed98418..cba45fd7c5 100644 --- a/docs/auditor/10.8/admin/monitoringplans/oracle/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/oracle/overview.md @@ -51,7 +51,7 @@ Complete the following fields: On a high level, data collection process for Oracle databases works as follows: -![hiw_diagram_oracle](/images/auditor/10.8/admin/monitoringplans/oracle/hiw_diagram_oracle.webp) +![hiw_diagram_oracle](/images/auditor/10.7/admin/monitoringplans/oracle/hiw_diagram_oracle.webp) 1. Oracle administrator prepares a dedicated service account with sufficient permissions to collect data from Oracle Database. See the diff --git a/docs/auditor/10.8/admin/monitoringplans/overview_1.md b/docs/auditor/10.8/admin/monitoringplans/overview_1.md index fcc83af3ed..5df3a83df4 100644 --- a/docs/auditor/10.8/admin/monitoringplans/overview_1.md +++ b/docs/auditor/10.8/admin/monitoringplans/overview_1.md @@ -79,11 +79,11 @@ To exclude the Notepad application window with "_Document1_" open, add the follo - In the Title filter enter "_Document1.txt - Notepad_": - ![uavr_source_example_1](/images/auditor/10.8/admin/monitoringplans/useractivity/uavr_source_example_1.webp) + ![uavr_source_example_1](/images/auditor/10.7/admin/monitoringplans/useractivity/uavr_source_example_1.webp) - In the Description filter, enter the corresponding value, here it will be "_Notepad_". -![uavr_source_example_2_thumb_0_0](/images/auditor/10.8/admin/monitoringplans/useractivity/uavr_source_example_2_thumb_0_0.webp) +![uavr_source_example_2_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/useractivity/uavr_source_example_2_thumb_0_0.webp) ## Computer diff --git a/docs/auditor/10.8/admin/monitoringplans/sharepointonline/overview.md b/docs/auditor/10.8/admin/monitoringplans/sharepointonline/overview.md index a426243792..28ed703bf2 100644 --- a/docs/auditor/10.8/admin/monitoringplans/sharepointonline/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/sharepointonline/overview.md @@ -50,7 +50,7 @@ Follow the steps to configure Office 365 tenant as a monitored item. [Using Modern Authentication with Microsoft Entra ID](/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/permissions/modernauth/modernauth.md) topic for additional information. -![tenantenvironment](/images/auditor/10.8/admin/monitoringplans/tenantenvironment.webp) +![tenantenvironment](/images/auditor/10.7/admin/monitoringplans/tenantenvironment.webp) If you are using a government tenant, please click the **Tenant Environment** tab and select the desired tenant environment. @@ -82,7 +82,7 @@ desired tenant environment. **Step 3 –** Click the **Add** button. -![Add Office 365 Item window](/images/auditor/10.8/admin/monitoringplans/item_o365_basic_auth_thumb_0_0.webp) +![Add Office 365 Item window](/images/auditor/10.7/admin/monitoringplans/item_o365_basic_auth_thumb_0_0.webp) You can use a single account to collect audit data for different Office 365 services (Microsoft Entra ID, Exchange Online, SharePoint Online); however, Netwrix recommends that you specify diff --git a/docs/auditor/10.8/admin/monitoringplans/sqlserver/overview.md b/docs/auditor/10.8/admin/monitoringplans/sqlserver/overview.md index 524b82aaad..d870d0dfe4 100644 --- a/docs/auditor/10.8/admin/monitoringplans/sqlserver/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/sqlserver/overview.md @@ -47,7 +47,7 @@ On the **General** tab, you can configure the following settings for SQL Server On the **Users** tab, you can configure the following settings for SQL Server data source: -![data_source_sql_users_thumb_0_0](/images/auditor/10.8/admin/monitoringplans/sqlserver/data_source_sql_users_thumb_0_0.webp) +![data_source_sql_users_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/sqlserver/data_source_sql_users_thumb_0_0.webp) | Options | Description | | ------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | @@ -69,18 +69,18 @@ is the 'Do not use triggers' mode. | Do not use triggers | Default mode for a new installation of Netwrix Auditor. Data will be collected using the SQL Server traces. This mode allows you to get a sufficient level of detail in the reports and search results without producing additional load on your SQL Server instance. Thus, it is recommended for highly-transactional servers. When using this mode, consider that the "_What_" field of the Activity Record with "_Object type_" = "_Data_" may show incorrect data. The issues occur because the product applies data categories to an entire SQL Server table and not to rows. | | Use triggers for detailed monitoring | However, if you require a very detailed reporting on the data changes, you can select this mode. It will be also selected by default if you are upgrading your Netwrix Auditor deployment. Data will be collected using a set of triggers. For more information on this technology, see [https://kb.netwrix.com/728](https://kb.netwrix.com/728) . It is recommended to use this setting carefully, as collecting large amount of details from a highly-transactional server may affect its performance. Using this mode may lead to issues when altering databases on the monitored SQL Server instances. The issues occur only if the SQL Server service account does not have _Read_ permissions in the Active Directory domain (e.g., a local user account). When using this mode, consider that the "_What_" field of the Activity Record with "_Object type_" = "_Data_" may show incorrect data. The issues occur because the product applies data categories to an entire SQL Server table and not to rows. Switching from the configured triggerless mode may lead to a data loss. The workaround is to force data collection right after enabling the triggers. | | Changes (per transaction) to collect and report: | Specify how many changes per a database transaction you want to be collected. For example, you can limit this number to 10 changes per transaction, or collect all changes. It is recommended to adjust this setting carefully, as collecting large number of changes from a highly-transactional server may affect its performance. | -| Monitoring rules | To specify what data changes must be monitored, create at least one **inclusion rule**. Exclusion rules are optional. Click **Add Rule** and configure the following: ![data_source_sql_data_rule_thumb_0_0](/images/auditor/10.8/admin/monitoringplans/sqlserver/data_source_sql_data_rule_thumb_0_0.webp) - Type — Select rule type: include or exclude. - Server — Specify a name of the monitored SQL Server instance where the required database resides. Use the _server_name\instance_name_ format, for example, _SQLsrv11\SQLExpress2016_. **NOTE:** If you are going to configure monitoring rules for SQL Server Availability Groups, provide the name of your Availability Group item in this field. - Database — Specify the database whose data changes you want to monitor. - Table — Specify database table to monitor. - Column—Specify table column name. The following column types are currently not supported: `text, ntext, image, binary, varbinary, timestamp, sql_variant`. These filters will be applied using AND logic. Wildcard (\*) is supported and can be used to replace any number of characters. | +| Monitoring rules | To specify what data changes must be monitored, create at least one **inclusion rule**. Exclusion rules are optional. Click **Add Rule** and configure the following: ![data_source_sql_data_rule_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/sqlserver/data_source_sql_data_rule_thumb_0_0.webp) - Type — Select rule type: include or exclude. - Server — Specify a name of the monitored SQL Server instance where the required database resides. Use the _server_name\instance_name_ format, for example, _SQLsrv11\SQLExpress2016_. **NOTE:** If you are going to configure monitoring rules for SQL Server Availability Groups, provide the name of your Availability Group item in this field. - Database — Specify the database whose data changes you want to monitor. - Table — Specify database table to monitor. - Column—Specify table column name. The following column types are currently not supported: `text, ntext, image, binary, varbinary, timestamp, sql_variant`. These filters will be applied using AND logic. Wildcard (\*) is supported and can be used to replace any number of characters. | ## Audit SELECT Use the settings in this section to configure how the successful SELECT statements should be audited. -![data_source_sql_audit_select_thumb_0_0](/images/auditor/10.8/admin/monitoringplans/sqlserver/data_source_sql_audit_select_thumb_0_0.webp) +![data_source_sql_audit_select_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/sqlserver/data_source_sql_audit_select_thumb_0_0.webp) | Option | Description | | ---------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | --- | --- | | --- | --- | | Audit successful SELECT statements | Enable monitoring of successful SELECT statements for the database tables. Successful SELECT statement execution will be reported as Read operation on the database table. Auditing SELECT statements will increase the amount of data collected from the SQL Server instance and stored to long-term archive and audit database. Plan for your resources accordingly. | -| Monitoring rules | To specify what data changes will be monitored, you must create at least one **inclusion rule**. Exclusion rules are optional. Click **Add Inclusion** and specify the following: ![data_source_sql_audit_select_rule_thumb_0_0](/images/auditor/10.8/admin/monitoringplans/sqlserver/data_source_sql_audit_select_rule_thumb_0_0.webp) - Server — specify target SQL Server instance in the server\instance format. **NOTE:** If you are going to configure monitoring rules for SQL Server Availability Groups, provide the name of your Availability Group item in this field. - Database — specify target database - Schema — specify database schema - Table — specify database table you will monitor Wildcard (\*) is supported and can be used to replace any number of characters. Filters will be applied using AND logic, that is, only SELECT statements matching all specified criteria will be monitored. So, in the example above, the program will track and report only the successful SELECT statements executed against the _Applicants_ table of the _HR2019_ database with _Custom_ schema, hosted on the _SQLsrv02\TestInstance_. When finished, click **Add**. If needed, configure the exclusion rules in a similar way. | +| Monitoring rules | To specify what data changes will be monitored, you must create at least one **inclusion rule**. Exclusion rules are optional. Click **Add Inclusion** and specify the following: ![data_source_sql_audit_select_rule_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/sqlserver/data_source_sql_audit_select_rule_thumb_0_0.webp) - Server — specify target SQL Server instance in the server\instance format. **NOTE:** If you are going to configure monitoring rules for SQL Server Availability Groups, provide the name of your Availability Group item in this field. - Database — specify target database - Schema — specify database schema - Table — specify database table you will monitor Wildcard (\*) is supported and can be used to replace any number of characters. Filters will be applied using AND logic, that is, only SELECT statements matching all specified criteria will be monitored. So, in the example above, the program will track and report only the successful SELECT statements executed against the _Applicants_ table of the _HR2019_ database with _Custom_ schema, hosted on the _SQLsrv02\TestInstance_. When finished, click **Add**. If needed, configure the exclusion rules in a similar way. | diff --git a/docs/auditor/10.8/admin/monitoringplans/vmware/overview.md b/docs/auditor/10.8/admin/monitoringplans/vmware/overview.md index c0822036b6..940a2747ef 100644 --- a/docs/auditor/10.8/admin/monitoringplans/vmware/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/vmware/overview.md @@ -38,7 +38,7 @@ information. On a high level, data collection process for VMware servers works as follows: -![hiw_diagram_vma_thumb_0_0](/images/auditor/10.8/admin/monitoringplans/vmware/hiw_diagram_vma_thumb_0_0.webp) +![hiw_diagram_vma_thumb_0_0](/images/auditor/10.7/admin/monitoringplans/vmware/hiw_diagram_vma_thumb_0_0.webp) VMware administrator prepares a dedicated service account with sufficient permissions to collect data from VMware servers. This account must have at least **Read Only role** on those servers. For diff --git a/docs/auditor/10.8/admin/monitoringplans/windows/overview.md b/docs/auditor/10.8/admin/monitoringplans/windows/overview.md index 4fc9eed7fe..ce72858b6d 100644 --- a/docs/auditor/10.8/admin/monitoringplans/windows/overview.md +++ b/docs/auditor/10.8/admin/monitoringplans/windows/overview.md @@ -93,7 +93,7 @@ Follow the steps to use Netwrix Privilege Secure as an account for data collect **Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data collection. -![npsdatacollectingaccount](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccount.webp) +![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) **Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. Credential-based is the default option. Refer to the @@ -106,7 +106,7 @@ and to which Netwrix Auditor has the access through a Credential-based access po **NOTE:** Netwrix recommends using different credentials for different monitoring plans and data sources. -![npsdatacollectingaccountresourced](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) +![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) The second option is Resource-based. To use this option, you need to provide the Activity and Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure diff --git a/docs/auditor/10.8/admin/navigation/customizeexamples.md b/docs/auditor/10.8/admin/navigation/customizeexamples.md index 0d8da3b1d7..9f300fab46 100644 --- a/docs/auditor/10.8/admin/navigation/customizeexamples.md +++ b/docs/auditor/10.8/admin/navigation/customizeexamples.md @@ -17,14 +17,14 @@ Follow the steps to view a report and add it to the list of Favorites. **Step 2 –** Open a report you are interested in; for example, Account Permissions in Active Directory: -![scenario_reports_1](/images/auditor/10.8/admin/navigation/scenario_reports_1.webp) +![scenario_reports_1](/images/auditor/10.7/admin/navigation/scenario_reports_1.webp) **Step 3 –** Click the report menu (three dots) to the right and select Add to favorites. (Alternatively, click the star icon in the upper right corner of the report description.) The report is added to the Favorite reports section on the home page and you can run it instantly. -![scenario_reports_2](/images/auditor/10.8/admin/navigation/scenario_reports_2.webp) +![scenario_reports_2](/images/auditor/10.7/admin/navigation/scenario_reports_2.webp) ## Run Search and Create Alert @@ -66,7 +66,7 @@ such as "_User Accounts with administrative permissions_". See the 3. Search the group of risks you want to pin to the home page (in this case, the "_Permissions_" risks group): - ![scenario_risks_thumb_0_0](/images/auditor/10.8/admin/navigation/scenario_risks_thumb_0_0.webp) + ![scenario_risks_thumb_0_0](/images/auditor/10.7/admin/navigation/scenario_risks_thumb_0_0.webp) **Step 4 –** Click Add. diff --git a/docs/auditor/10.8/admin/navigation/customizefavorite.md b/docs/auditor/10.8/admin/navigation/customizefavorite.md index a2f5fa74c3..02115c5035 100644 --- a/docs/auditor/10.8/admin/navigation/customizefavorite.md +++ b/docs/auditor/10.8/admin/navigation/customizefavorite.md @@ -12,7 +12,7 @@ update the full list, click View all. The Home > Reports page opens. This page includes several folders: Favorites, Predefined, Compliance and Custom. Favorite reports are located in the Favorites folder. -![reportsfavorites](/images/auditor/10.8/admin/navigation/reportsfavorites.webp) +![reportsfavorites](/images/auditor/10.7/admin/navigation/reportsfavorites.webp) Follow the steps to add or remove a Favorite report @@ -23,7 +23,7 @@ Follow the steps to add or remove a Favorite report **Step 3 –** To change whether the report is a favorite, click the star icon in the upper right-hand corner of the report description. -![reportsummary](/images/auditor/10.8/admin/navigation/reportsummary.webp) +![reportsummary](/images/auditor/10.7/admin/navigation/reportsummary.webp) Report Summary with Star icon unchecked @@ -33,7 +33,7 @@ The options on the Reports page for Favorite reports are show below: | | | | -------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| ![favoritesrestorerefresh](/images/auditor/10.8/admin/navigation/favoritesrestorerefresh.webp) | ![reportsoptions](/images/auditor/10.8/admin/navigation/reportsoptions.webp) | +| ![favoritesrestorerefresh](/images/auditor/10.7/admin/navigation/favoritesrestorerefresh.webp) | ![reportsoptions](/images/auditor/10.7/admin/navigation/reportsoptions.webp) | | _Favorites Sub-Folder Options_ | _Favorites > [Report] Options_ | | Option Name | Description | | --- | --- | diff --git a/docs/auditor/10.8/admin/navigation/customizehome.md b/docs/auditor/10.8/admin/navigation/customizehome.md index 53648ad00a..b2a3c2f8e5 100644 --- a/docs/auditor/10.8/admin/navigation/customizehome.md +++ b/docs/auditor/10.8/admin/navigation/customizehome.md @@ -39,7 +39,7 @@ Follow the steps to remove a tile from the Home Screen. **Step 3 –** Click **close (x)**: -![remove_tile](/images/auditor/10.8/admin/navigation/remove_tile.webp) +![remove_tile](/images/auditor/10.7/admin/navigation/remove_tile.webp) **Step 4 –** Click Apply. @@ -61,7 +61,7 @@ Follow the steps to resizea tile. **Step 3 –** Click the **resize** button: -![homescreenresizetile](/images/auditor/10.8/admin/navigation/homescreenresizetile.webp) +![homescreenresizetile](/images/auditor/10.7/admin/navigation/homescreenresizetile.webp) **Step 4 –** Select the preferred size from the drop-down list. diff --git a/docs/auditor/10.8/admin/navigation/overview.md b/docs/auditor/10.8/admin/navigation/overview.md index 6dcd7c009a..c2e1cf405f 100644 --- a/docs/auditor/10.8/admin/navigation/overview.md +++ b/docs/auditor/10.8/admin/navigation/overview.md @@ -25,7 +25,7 @@ information. The following tiles are displayed on the initially configured Home The Welcome to Netwrix Auditor Tile tile provides a checklist you can use to get started collecting and viewing data about your IT ecosystem. -![welcome_section](/images/auditor/10.8/admin/navigation/welcome_section.webp) +![welcome_section](/images/auditor/10.7/admin/navigation/welcome_section.webp) - The "Create a monitoring plan" link prompts you to create a monitoring plan for at least one data source (such as Active Directory, Exchange Online or network devices). For detailed instructions @@ -49,7 +49,7 @@ the bottom. The checklist will be replaced by statistics across your audited sys This section contains four tiles for getting security intelligence about your IT infrastructure: -![section_left](/images/auditor/10.8/admin/navigation/section_left.webp) +![section_left](/images/auditor/10.7/admin/navigation/section_left.webp) | Tile | Description | | ----------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | @@ -90,10 +90,10 @@ than can fit in the tile, simply click **View all** to see the complete list. Se | | | | -------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| ![alerts_triggered](/images/auditor/10.8/admin/navigation/alerts_triggered.webp) | Opens the Alerts Overview dashboard, which lists the latest alerts triggered in your IT infrastructure, enriched with actionable charts and timelines. See the [Alerts Overview Dashboard](/docs/auditor/10.8/admin/alertsettings/dashboard.md) topic for additional information. | -| ![environment_stats](/images/auditor/10.8/admin/navigation/environment_stats.webp) | This tile shows the current number of users, groups, and files and folders in your IT infrastructure in one place. Clicking the link opens the corresponding report: - Users — User Accounts state-in-time report for Active Directory - Groups — Groups state-in-time report for Active Directory - Files and Folders — Folder Tree View state-in-time report for File Servers Click Recalculate to update values. | -| ![monitroing_plans_overview](/images/auditor/10.8/admin/navigation/monitroing_plans_overview.webp) | Clicking the tile opens the Monitoring Overview dashboard, which shows the current status of each of your monitoring plans. See the [Monitoring Overview](/docs/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview.md) topic for additional information. | -| ![activity_records](/images/auditor/10.8/admin/navigation/activity_records.webp) | Clicking the tile opens the Activity Record Statistics dashboard which shows the number of activity records that were collected from your data sources during the last 7 days. See the [Activity Records Statistics](/docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md) topic for additional information. | -| ![hs_screen_default_report_1](/images/auditor/10.8/admin/navigation/hs_screen_default_report_1.webp) | Opens the listed Auditor report. See the [Custom Search-Based Reports](/docs/auditor/10.8/admin/reports/custom.md) topic for additional information. | -| ![hs_screen_default_report_2](/images/auditor/10.8/admin/navigation/hs_screen_default_report_2.webp) | Opens the listed Auditor report. See the [Predefined Reports](/docs/auditor/10.8/admin/reports/types/overview.md) topic for additional information. | -| ![recommendations_tile](/images/auditor/10.8/admin/navigation/recommendations_tile.webp) | Opens the list of the configuration recommendations provided by Netwrix industry experts to take advantage of the Auditor functionality. See the [Recommendations](/docs/auditor/10.8/admin/navigation/recommendations.md) topic for additional information. | +| ![alerts_triggered](/images/auditor/10.7/admin/navigation/alerts_triggered.webp) | Opens the Alerts Overview dashboard, which lists the latest alerts triggered in your IT infrastructure, enriched with actionable charts and timelines. See the [Alerts Overview Dashboard](/docs/auditor/10.8/admin/alertsettings/dashboard.md) topic for additional information. | +| ![environment_stats](/images/auditor/10.7/admin/navigation/environment_stats.webp) | This tile shows the current number of users, groups, and files and folders in your IT infrastructure in one place. Clicking the link opens the corresponding report: - Users — User Accounts state-in-time report for Active Directory - Groups — Groups state-in-time report for Active Directory - Files and Folders — Folder Tree View state-in-time report for File Servers Click Recalculate to update values. | +| ![monitroing_plans_overview](/images/auditor/10.7/admin/navigation/monitroing_plans_overview.webp) | Clicking the tile opens the Monitoring Overview dashboard, which shows the current status of each of your monitoring plans. See the [Monitoring Overview](/docs/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview.md) topic for additional information. | +| ![activity_records](/images/auditor/10.7/admin/navigation/activity_records.webp) | Clicking the tile opens the Activity Record Statistics dashboard which shows the number of activity records that were collected from your data sources during the last 7 days. See the [Activity Records Statistics](/docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md) topic for additional information. | +| ![hs_screen_default_report_1](/images/auditor/10.7/admin/navigation/hs_screen_default_report_1.webp) | Opens the listed Auditor report. See the [Custom Search-Based Reports](/docs/auditor/10.8/admin/reports/custom.md) topic for additional information. | +| ![hs_screen_default_report_2](/images/auditor/10.7/admin/navigation/hs_screen_default_report_2.webp) | Opens the listed Auditor report. See the [Predefined Reports](/docs/auditor/10.8/admin/reports/types/overview.md) topic for additional information. | +| ![recommendations_tile](/images/auditor/10.7/admin/navigation/recommendations_tile.webp) | Opens the list of the configuration recommendations provided by Netwrix industry experts to take advantage of the Auditor functionality. See the [Recommendations](/docs/auditor/10.8/admin/navigation/recommendations.md) topic for additional information. | diff --git a/docs/auditor/10.8/admin/navigation/recommendations.md b/docs/auditor/10.8/admin/navigation/recommendations.md index 5f4cff1b9e..f03ccba1b7 100644 --- a/docs/auditor/10.8/admin/navigation/recommendations.md +++ b/docs/auditor/10.8/admin/navigation/recommendations.md @@ -12,7 +12,7 @@ Netwrix Service Accounts, you can start collecting data and review it with Netwr recommendations are based on your current product configuration and help you to experience the Auditor capabilities in earnest. -![recommendations](/images/auditor/10.8/admin/navigation/recommendations.webp) +![recommendations](/images/auditor/10.7/admin/navigation/recommendations.webp) Follow the steps to review the recommendations provided by Netwrix industry experts. @@ -105,7 +105,7 @@ Follow the steps to manage recommendations: **Step 2 –** Click **Settings** at the bottom. -![managerecommendations](/images/auditor/10.8/admin/navigation/managerecommendations.webp) +![managerecommendations](/images/auditor/10.7/admin/navigation/managerecommendations.webp) **Step 3 –** In the Manage recommendations dialog, do the following: diff --git a/docs/auditor/10.8/admin/reports/custom.md b/docs/auditor/10.8/admin/reports/custom.md index f3ef93c961..e5fe981485 100644 --- a/docs/auditor/10.8/admin/reports/custom.md +++ b/docs/auditor/10.8/admin/reports/custom.md @@ -20,7 +20,7 @@ move it to the new folder. The example custom report results apply to AD or Group Policy modifications by administrator. -![customreport_thumb_0_0](/images/auditor/10.8/admin/reports/types/customreport_thumb_0_0.webp) +![customreport_thumb_0_0](/images/auditor/10.7/admin/reports/types/customreport_thumb_0_0.webp) Review the following for additional information: diff --git a/docs/auditor/10.8/admin/reports/overview.md b/docs/auditor/10.8/admin/reports/overview.md index 5fd359d40b..1a6feaa8d6 100644 --- a/docs/auditor/10.8/admin/reports/overview.md +++ b/docs/auditor/10.8/admin/reports/overview.md @@ -17,7 +17,7 @@ access to data—only within a delegated scope. See the [Role-Based Access and Delegation](/docs/auditor/10.8/admin/monitoringplans/delegation.md) topic for additional informatuion. -![allactivedirectorychanges_thumb_0_0](/images/auditor/10.8/admin/reports/allactivedirectorychanges_thumb_0_0.webp) +![allactivedirectorychanges_thumb_0_0](/images/auditor/10.7/admin/reports/allactivedirectorychanges_thumb_0_0.webp) Review general report types available in Netwrix Auditor to meet your specific business needs: diff --git a/docs/auditor/10.8/admin/reports/reviewstatus.md b/docs/auditor/10.8/admin/reports/reviewstatus.md index fc5b0879d7..5afbf5a59e 100644 --- a/docs/auditor/10.8/admin/reports/reviewstatus.md +++ b/docs/auditor/10.8/admin/reports/reviewstatus.md @@ -18,7 +18,7 @@ issues through the following automated course of action: 1. The reported changes to the monitored environment are assigned the New status by default. 2. If a change seems unauthorized, or requires further analysis, you can click the Click to update status link next to the change detailed data: - ![reviewstatus_thumb_0_0](/images/auditor/10.8/admin/reports/reviewstatus_thumb_0_0.webp)3. + ![reviewstatus_thumb_0_0](/images/auditor/10.7/admin/reports/reviewstatus_thumb_0_0.webp)3. In the **Review status** dialog for selected change, set its status to In Review and provide a reason. 3. Once the change has been approved of, or rolled back, you can set its status to Resolved. diff --git a/docs/auditor/10.8/admin/reports/types/activity.md b/docs/auditor/10.8/admin/reports/types/activity.md index 7c9954f4ac..4f650a9bd6 100644 --- a/docs/auditor/10.8/admin/reports/types/activity.md +++ b/docs/auditor/10.8/admin/reports/types/activity.md @@ -34,7 +34,7 @@ search field to look for the keywords you need: In the report filters, select a monitoring plan you want to generate a report for. To review data sources and items included in each plan, navigate to the Monitoring Plans section. -![allactivedirectorychanges_thumb_0_0](/images/auditor/10.8/admin/reports/allactivedirectorychanges_thumb_0_0.webp) +![allactivedirectorychanges_thumb_0_0](/images/auditor/10.7/admin/reports/allactivedirectorychanges_thumb_0_0.webp) Each report has a set of filters which help organize audit data in the most convenient way. See the [View Reports](/docs/auditor/10.8/admin/reports/view.md) topic for additional information. You can also create a subscription to diff --git a/docs/auditor/10.8/admin/reports/types/enterprise.md b/docs/auditor/10.8/admin/reports/types/enterprise.md index c8419a52de..f38700aedd 100644 --- a/docs/auditor/10.8/admin/reports/types/enterprise.md +++ b/docs/auditor/10.8/admin/reports/types/enterprise.md @@ -55,7 +55,7 @@ Follow the steps to review a diagram: The example below applies to Enterprise. -![dashboard](/images/auditor/10.8/admin/reports/types/dashboard.webp) +![dashboard](/images/auditor/10.7/admin/reports/types/dashboard.webp) Each report has a set of filters which help organize audit data in the most convenient way. See the [View Reports](/docs/auditor/10.8/admin/reports/view.md) topic for additional information. You can also create a subscription to diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/overview.md b/docs/auditor/10.8/admin/reports/types/stateintime/overview.md index c1e6820098..2b907ec6a4 100644 --- a/docs/auditor/10.8/admin/reports/types/stateintime/overview.md +++ b/docs/auditor/10.8/admin/reports/types/stateintime/overview.md @@ -38,7 +38,7 @@ Directory\_\_**>_**\_Active Directory\_\_**>\_**\_State-in-Time**. In the report filters, select a monitoring plan you want to generate a report for. To review data sources and items included in each plan, navigate to the Monitoring Plans section. -![fileshareswindowsservers](/images/auditor/10.8/admin/reports/types/stateintime/fileshareswindowsservers.webp) +![fileshareswindowsservers](/images/auditor/10.7/admin/reports/types/stateintime/fileshareswindowsservers.webp) Each report has a set of filters which help organize audit data in the most convenient way. See the [View Reports](/docs/auditor/10.8/admin/reports/view.md) topic for additional information. You can also create a subscription @@ -67,7 +67,7 @@ threat or at least merits your special attention. With baselines specified right you can easily identify servers that are different from your corporate policies or best practices. Risks are marked with red color and are easy to spot in the report. -![windowsserverinventory_thumb_0_0](/images/auditor/10.8/admin/reports/types/stateintime/windowsserverinventory_thumb_0_0.webp) +![windowsserverinventory_thumb_0_0](/images/auditor/10.7/admin/reports/types/stateintime/windowsserverinventory_thumb_0_0.webp) You can specify baseline values specific to your organization in one of the following ways: diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/sqlroles.md b/docs/auditor/10.8/admin/reports/types/stateintime/sqlroles.md index 23c4e66a31..364add4faa 100644 --- a/docs/auditor/10.8/admin/reports/types/stateintime/sqlroles.md +++ b/docs/auditor/10.8/admin/reports/types/stateintime/sqlroles.md @@ -11,7 +11,7 @@ To instruct Netwrix Auditor to collect data needed for this report, make sure th for state-in-time reports** option is selected in the monitoring plan properties. See Settings for Data Collection in the monitoring plan documentation. -![sqlserverlevelroles](/images/auditor/10.8/admin/reports/types/stateintime/sqlserverlevelroles.webp) +![sqlserverlevelroles](/images/auditor/10.7/admin/reports/types/stateintime/sqlserverlevelroles.webp) ## Reported data diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md index 7b18589e91..7a8e005fba 100644 --- a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md +++ b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlaccountpermissions.md @@ -10,7 +10,7 @@ Details the effective permissions that the specified account has on the SQL Serv selected type. Use this report to review the permissions granted to users through your SQL Server objects. -![accountpermissionssqlserver_thumb_0_0](/images/auditor/10.8/admin/reports/types/stateintime/accountpermissionssqlserver_thumb_0_0.webp) +![accountpermissionssqlserver_thumb_0_0](/images/auditor/10.7/admin/reports/types/stateintime/accountpermissionssqlserver_thumb_0_0.webp) ## Reported data diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqldatabases.md b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqldatabases.md index 8e436b589e..171c57873e 100644 --- a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqldatabases.md +++ b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqldatabases.md @@ -9,7 +9,7 @@ sidebar_position: 30 This report lists the properties of databases and database snapshots hosted on the selected SQL Server instance. Use this report for your SQL Server database inventory. -![sqlserverdatabases_thumb_0_0](/images/auditor/10.8/admin/reports/types/stateintime/sqlserverdatabases_thumb_0_0.webp) +![sqlserverdatabases_thumb_0_0](/images/auditor/10.7/admin/reports/types/stateintime/sqlserverdatabases_thumb_0_0.webp) ## Reported data diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md index ac3e285e90..077035d4b6 100644 --- a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md +++ b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlmeansgranted.md @@ -16,7 +16,7 @@ Supported object types and attributes are listed in the To instruct Netwrix Auditor to collect data needed for this report, make sure that **Collect data for state-in-time reports** option is selected in the monitoring plan properties. -![sqlservermeansgranted](/images/auditor/10.8/admin/reports/types/stateintime/sqlservermeansgranted.webp) +![sqlservermeansgranted](/images/auditor/10.7/admin/reports/types/stateintime/sqlservermeansgranted.webp) ## Reported data @@ -99,4 +99,4 @@ _Corp_ organization discovered that the accounts with Contractor job title has a **SQL Server Means Granted** report for that account by clicking the link in the **Means granted** field for that account. -![sqlservermeansgranteddetails](/images/auditor/10.8/admin/reports/types/stateintime/sqlservermeansgranteddetails.webp) +![sqlservermeansgranteddetails](/images/auditor/10.7/admin/reports/types/stateintime/sqlservermeansgranteddetails.webp) diff --git a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlobjectpermissions.md b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlobjectpermissions.md index 3954356ee5..b6fc66bc92 100644 --- a/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlobjectpermissions.md +++ b/docs/auditor/10.8/admin/reports/types/stateintime/sqlserveroverview/sqlobjectpermissions.md @@ -12,7 +12,7 @@ object. Use this report to review who has access to your SQL Server objects. Supported object types and attributes are listed in the [SQL Server](/docs/auditor/10.8/configuration/sqlserver/overview.md) section. -![objectpermissionssqlserver_thumb_0_0](/images/auditor/10.8/admin/reports/types/stateintime/objectpermissionssqlserver_thumb_0_0.webp) +![objectpermissionssqlserver_thumb_0_0](/images/auditor/10.7/admin/reports/types/stateintime/objectpermissionssqlserver_thumb_0_0.webp) ## Reported data diff --git a/docs/auditor/10.8/admin/reports/types/userbehavior.md b/docs/auditor/10.8/admin/reports/types/userbehavior.md index 6715eaf6a9..e2dce802ca 100644 --- a/docs/auditor/10.8/admin/reports/types/userbehavior.md +++ b/docs/auditor/10.8/admin/reports/types/userbehavior.md @@ -20,7 +20,7 @@ identify vulnerabilities and easily answer questions such as: Analytics reports can be found in the User Behavior and Blind Spot Analysis folder under the Predefined node. -![userbehaviorblindspotanalysis_thumb_0_0](/images/auditor/10.8/admin/reports/types/userbehaviorblindspotanalysis_thumb_0_0.webp) +![userbehaviorblindspotanalysis_thumb_0_0](/images/auditor/10.7/admin/reports/types/userbehaviorblindspotanalysis_thumb_0_0.webp) If you are sure that some audit data is missing (e.g., you do not see information on your file servers in reports and search results), verify that the Audit Database settings are configured and @@ -30,7 +30,7 @@ By default, Auditor allows generating reports and running interactive searches o the last 180 days. If you want to investigate incidents that occurred more than 180 days ago, ask your Auditor Global administrator to import that data from the Long-Term Archive. -![failedactivitytrend_thumb_0_0](/images/auditor/10.8/admin/reports/types/failedactivitytrend_thumb_0_0.webp) +![failedactivitytrend_thumb_0_0](/images/auditor/10.7/admin/reports/types/failedactivitytrend_thumb_0_0.webp) Each report has a set of filters which help organize audit data in the most convenient way. See the [View Reports](/docs/auditor/10.8/admin/reports/view.md) topic for additional information. You can also create a subscription to diff --git a/docs/auditor/10.8/admin/reports/video.md b/docs/auditor/10.8/admin/reports/video.md index ac7459f416..a5d8ff27a5 100644 --- a/docs/auditor/10.8/admin/reports/video.md +++ b/docs/auditor/10.8/admin/reports/video.md @@ -15,7 +15,7 @@ To view reports with video, navigate to Reports → User Activity. In the report filters, select a monitoring plan you want to generate a report for. To review data sources and items included in each plan, navigate to the Monitoring Plans section. -![ReportsWithVideo](/images/auditor/10.8/admin/reports/alluseractivityvideo_thumb_0_0.webp) +![ReportsWithVideo](/images/auditor/10.7/admin/reports/alluseractivityvideo_thumb_0_0.webp) Each report has a set of filters which help organize audit data in the most convenient way. See the [View Reports](/docs/auditor/10.8/admin/reports/view.md) topic for additional information. You can also create a subscription to any diff --git a/docs/auditor/10.8/admin/reports/view.md b/docs/auditor/10.8/admin/reports/view.md index b5593ca4dc..f16dd3615e 100644 --- a/docs/auditor/10.8/admin/reports/view.md +++ b/docs/auditor/10.8/admin/reports/view.md @@ -26,12 +26,12 @@ access them instantly. See the [Navigation](/docs/auditor/10.8/admin/navigation/ [Customize Home Screen](/docs/auditor/10.8/admin/navigation/customizehome.md) topics for additional information. 1. In Netwrix Auditor Home screen, click - ![reports_tile](/images/auditor/10.8/admin/reports/reports_tile.webp)on + ![reports_tile](/images/auditor/10.7/admin/reports/reports_tile.webp)on the left, and in the tree on the left select the report you need. To speed up the process, you can use the **Search** field, entering the keyword to search by. -![searchreports_thumb_0_0](/images/auditor/10.8/admin/reports/searchreports_thumb_0_0.webp) +![searchreports_thumb_0_0](/images/auditor/10.7/admin/reports/searchreports_thumb_0_0.webp) 2. Click View button in the right pane. @@ -77,9 +77,9 @@ of the report. The filters may vary slightly depending on the audited system and The report without filtering: -![allchangesserver](/images/auditor/10.8/admin/reports/allchangesserver.webp) +![allchangesserver](/images/auditor/10.7/admin/reports/allchangesserver.webp) The report below displays changes for all audited systems made by the CORP\Administrator user on the ROOTDC2 domain controller for a month sorted by the action type. -![allchangesserverfiltered](/images/auditor/10.8/admin/reports/allchangesserverfiltered.webp) +![allchangesserverfiltered](/images/auditor/10.7/admin/reports/allchangesserverfiltered.webp) diff --git a/docs/auditor/10.8/admin/riskassessment/dashboard.md b/docs/auditor/10.8/admin/riskassessment/dashboard.md index cca0148269..a6709a18fa 100644 --- a/docs/auditor/10.8/admin/riskassessment/dashboard.md +++ b/docs/auditor/10.8/admin/riskassessment/dashboard.md @@ -27,7 +27,7 @@ displayed with the color indicators in accordance with the level: - Medium — yellow - Low — green -![dashboard_thumb_0_0](/images/auditor/10.8/admin/riskassessment/dashboard_thumb_0_0.webp) +![dashboard_thumb_0_0](/images/auditor/10.7/admin/riskassessment/dashboard_thumb_0_0.webp) After reviewing general risks assessment results in each category, you can drill-down to details covered in the underlying report. To do so, double-click the selected metric or use the View Report @@ -47,7 +47,7 @@ right click Modify thresholds. **Step 3 –** Click OK to save the settings and close the dialog. -![modify_thresholds_thumb_0_0](/images/auditor/10.8/admin/riskassessment/modify_thresholds_thumb_0_0.webp) +![modify_thresholds_thumb_0_0](/images/auditor/10.7/admin/riskassessment/modify_thresholds_thumb_0_0.webp) Also, for several metrics the Customize risk indicators command is available. diff --git a/docs/auditor/10.8/admin/riskassessment/overview.md b/docs/auditor/10.8/admin/riskassessment/overview.md index 43260e1d28..298d8f3c8d 100644 --- a/docs/auditor/10.8/admin/riskassessment/overview.md +++ b/docs/auditor/10.8/admin/riskassessment/overview.md @@ -81,15 +81,15 @@ To verify the necessary settings of the existing plan 3. Go to the Audit Database section and make sure that Disable security intelligence ... checkbox is cleared. This will instruct Netwrix Auditor to store data to both Long-Term Archive and audit database: - ![edit_mp_store_data_to_db_thumb_0_0](/images/auditor/10.8/admin/riskassessment/edit_mp_store_data_to_db_thumb_0_0.webp) + ![edit_mp_store_data_to_db_thumb_0_0](/images/auditor/10.7/admin/riskassessment/edit_mp_store_data_to_db_thumb_0_0.webp) 4. Save the settings and return to the window with the monitoring plan details. Make sure you have at least one monitored item in the plan. If necessary, add an item. 5. Select the data source you need (for example, Active Directory) and click Edit data source from the Data source section on the right. - ![edit_mp_open_ds_settings_thumb_0_0](/images/auditor/10.8/admin/riskassessment/edit_mp_open_ds_settings_thumb_0_0.webp) + ![edit_mp_open_ds_settings_thumb_0_0](/images/auditor/10.7/admin/riskassessment/edit_mp_open_ds_settings_thumb_0_0.webp) 6. Make sure that: 1. Monitor this data source and collect activity data is switched ON. 2. Collect data for state-in-time reports is switched ON. 7. Save the settings and close the dialog. -![edit_data_source_sit](/images/auditor/10.8/admin/riskassessment/edit_data_source_sit.webp) +![edit_data_source_sit](/images/auditor/10.7/admin/riskassessment/edit_data_source_sit.webp) diff --git a/docs/auditor/10.8/admin/search/filteradvanced.md b/docs/auditor/10.8/admin/search/filteradvanced.md index 0f8066743e..af035afe07 100644 --- a/docs/auditor/10.8/admin/search/filteradvanced.md +++ b/docs/auditor/10.8/admin/search/filteradvanced.md @@ -51,7 +51,7 @@ When you apply filters at search, you can specify operators that should be used data you want to retrieve and compare with the certain filter value. A condition can be, for example, Contains, Starts with, and so on. -![advancedfilters_thumb_0_0](/images/auditor/10.8/admin/search/advancedfilters_thumb_0_0.webp) +![advancedfilters_thumb_0_0](/images/auditor/10.7/admin/search/advancedfilters_thumb_0_0.webp) The following operators can be used to specify search conditions: @@ -71,9 +71,9 @@ When you add a new search filter, the Contains operator is used by default. To modify conditions for the selected filters, make sure you have switched to the Advanced search mode. -![advanced_thumb_0_0](/images/auditor/10.8/admin/search/advanced_thumb_0_0.webp) +![advanced_thumb_0_0](/images/auditor/10.7/admin/search/advanced_thumb_0_0.webp) The image below represents the same search filters as they are shown in the Search field in the Simple mode. -![advancedexample_thumb_0_0](/images/auditor/10.8/admin/search/advancedexample_thumb_0_0.webp) +![advancedexample_thumb_0_0](/images/auditor/10.7/admin/search/advancedexample_thumb_0_0.webp) diff --git a/docs/auditor/10.8/admin/search/filtersimple.md b/docs/auditor/10.8/admin/search/filtersimple.md index bd2c8e39bb..507279a038 100644 --- a/docs/auditor/10.8/admin/search/filtersimple.md +++ b/docs/auditor/10.8/admin/search/filtersimple.md @@ -31,7 +31,7 @@ Follow the steps to add a filter to your search. **Step 1 –** Click a filter type icon. Enter a value you want to search for. -![Account specification](/images/auditor/10.8/admin/search/add.webp) +![Account specification](/images/auditor/10.7/admin/search/add.webp) Alternatively, you can type a value directly into the Search field. @@ -40,7 +40,7 @@ Alternatively, you can type a value directly into the Search field. To search across all columns in the results view (everywhere—Who, What, Where, Action, etc.), leave it as is. -![Filter](/images/auditor/10.8/admin/search/addsuggestions.webp) +![Filter](/images/auditor/10.7/admin/search/addsuggestions.webp) **Step 2 –** Click Search to apply your filters. By default, all entries that contain the filter value are shown. @@ -49,7 +49,7 @@ value are shown. | To... | Do... | | ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -| Modify filter | Double-click the filter and type a new value. ![Filter new value](/images/auditor/10.8/admin/search/search_modify_filter.webp) If you need to modify the When filter, delete it and add a new value, or navigate to the Advanced mode (Simple mode does not support its modification). | +| Modify filter | Double-click the filter and type a new value. ![Filter new value](/images/auditor/10.7/admin/search/search_modify_filter.webp) If you need to modify the When filter, delete it and add a new value, or navigate to the Advanced mode (Simple mode does not support its modification). | | Remove filter | Click the **Close** icon next to it. | ## Exporting and Importing Filters diff --git a/docs/auditor/10.8/admin/search/overview.md b/docs/auditor/10.8/admin/search/overview.md index 083d6b4090..9e2d5b56dd 100644 --- a/docs/auditor/10.8/admin/search/overview.md +++ b/docs/auditor/10.8/admin/search/overview.md @@ -49,7 +49,7 @@ Archive. See [Investigations](/docs/auditor/10.8/admin/settings/investigations.m ## Browsing Your Audit Data On the main Netwrix Auditor page, click -![search_tile](/images/auditor/10.8/admin/search/search_tile.webp) +![search_tile](/images/auditor/10.7/admin/search/search_tile.webp) on the left. You can add any elements (a dashboard, report, alert, risk, etc.) to the Auditor Home screen to @@ -76,7 +76,7 @@ the data you need. filter fields and conditions). See [Use Filters in Advanced Mode](/docs/auditor/10.8/admin/search/filteradvanced.md) for details. - ![search_filter](/images/auditor/10.8/admin/search/search_filter.webp) + ![search_filter](/images/auditor/10.7/admin/search/search_filter.webp) - By default, search results are open in the same window, so the subsequent search results will overwrite the previous search results. To view them in different windows, click Open in new @@ -87,7 +87,7 @@ Use search results for your own needs: save, share, create search-based alerts, periodic delivery of search query results, etc. See Make Search Results Actionnable for more information. -![search_nofilter_1](/images/auditor/10.8/admin/search/search_nofilter_1.webp) +![search_nofilter_1](/images/auditor/10.7/admin/search/search_nofilter_1.webp) You can also use the **Search** window to examine details for the selected activity record, or watch a video recording (for User Ativity data). diff --git a/docs/auditor/10.8/admin/settings/auditdatabase.md b/docs/auditor/10.8/admin/settings/auditdatabase.md index 002ad331d1..ba6d0fa280 100644 --- a/docs/auditor/10.8/admin/settings/auditdatabase.md +++ b/docs/auditor/10.8/admin/settings/auditdatabase.md @@ -32,7 +32,7 @@ Follow the steps to review and update global Audit Database settings: **Step 2 –** Click **Modify** to edit the settings. -![audit_db_settings_thumb_0_0](/images/auditor/10.8/admin/settings/audit_db_settings_thumb_0_0.webp) +![audit_db_settings_thumb_0_0](/images/auditor/10.7/admin/settings/audit_db_settings_thumb_0_0.webp) **Step 3 –** Specify the following database storage settings: diff --git a/docs/auditor/10.8/admin/settings/custombrand.md b/docs/auditor/10.8/admin/settings/custombrand.md index 946c4855ee..104b8d6554 100644 --- a/docs/auditor/10.8/admin/settings/custombrand.md +++ b/docs/auditor/10.8/admin/settings/custombrand.md @@ -70,7 +70,7 @@ To restore original look and feel, run the script and replace"_True_" with "_Fal By default, Netwrix Auditor reports look as follows: -![All Logon Activity](/images/auditor/10.8/admin/settings/report_rebranding_thumb_0_0.webp) +![All Logon Activity](/images/auditor/10.7/admin/settings/report_rebranding_thumb_0_0.webp) Report branding is customized on Netwrix Auditor Server side that means that all clients connected to this server will have the same look and feel for reports. @@ -103,7 +103,7 @@ db_owner role on the Netwrix_CommonDB database. After running the script, start the Netwrix Auditor client and generate a report. The branding will be updated. -![report_rebranding_result_thumb_0_0](/images/auditor/10.8/admin/settings/report_rebranding_result_thumb_0_0.webp) +![report_rebranding_result_thumb_0_0](/images/auditor/10.7/admin/settings/report_rebranding_result_thumb_0_0.webp) Follow the steps to restore original look. diff --git a/docs/auditor/10.8/admin/settings/investigations.md b/docs/auditor/10.8/admin/settings/investigations.md index ee62652be0..a8b23ae4b0 100644 --- a/docs/auditor/10.8/admin/settings/investigations.md +++ b/docs/auditor/10.8/admin/settings/investigations.md @@ -14,7 +14,7 @@ data stored in the Long-Term Archive. Netwrix Auditor allows importing data from Archive to a special "investigation" database. Having imported data there, you can run searches and generate reports with your past data. -![investigate](/images/auditor/10.8/admin/settings/investigate.webp) +![investigate](/images/auditor/10.7/admin/settings/investigate.webp) To import audit data with the Archive Data Investigation wizard diff --git a/docs/auditor/10.8/admin/settings/licenses.md b/docs/auditor/10.8/admin/settings/licenses.md index 1eb4abeef9..4cb6cc8f8b 100644 --- a/docs/auditor/10.8/admin/settings/licenses.md +++ b/docs/auditor/10.8/admin/settings/licenses.md @@ -58,7 +58,7 @@ folder\Netwrix Auditor\Administrative Console_ and locate MSP.xml. For example: -![msp](/images/auditor/10.8/admin/settings/msp.webp) +![msp](/images/auditor/10.7/admin/settings/msp.webp) **NOTE:** MSP.xml file must be formatted in accordance with XML standard. If company name (used as identifier) or service account path includes & (ampersand), " (double quotes) or ' (single quotes), diff --git a/docs/auditor/10.8/admin/settings/longtermarchive.md b/docs/auditor/10.8/admin/settings/longtermarchive.md index 90aef259b6..c98c9f891e 100644 --- a/docs/auditor/10.8/admin/settings/longtermarchive.md +++ b/docs/auditor/10.8/admin/settings/longtermarchive.md @@ -10,7 +10,7 @@ The Long-Term Archive is configured by default, irrespective of your subscriptio you specified when configuring a monitoring plan. To review and update your Long-Term Archive settings, navigate to **Settings** > **Long-Term Archive** and click Modify. -![lta_settings_thumb_0_0](/images/auditor/10.8/admin/settings/lta_settings_thumb_0_0.webp) +![lta_settings_thumb_0_0](/images/auditor/10.7/admin/settings/lta_settings_thumb_0_0.webp) Review the following for additional information: @@ -23,7 +23,7 @@ Review the following for additional information: Setting Recording Settings -![usersessions_storage](/images/auditor/10.8/admin/settings/usersessions_storage.webp) +![usersessions_storage](/images/auditor/10.7/admin/settings/usersessions_storage.webp) | | | | ----------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | diff --git a/docs/auditor/10.8/admin/settings/privilegesecure.md b/docs/auditor/10.8/admin/settings/privilegesecure.md index 2009b80f26..76b163b883 100644 --- a/docs/auditor/10.8/admin/settings/privilegesecure.md +++ b/docs/auditor/10.8/admin/settings/privilegesecure.md @@ -72,7 +72,7 @@ options are available: - New/Generate certificate – Create a new certificate. - Select an existing certificate – Select an available certificate from the drop-down list. -![npsclientcertificate](/images/auditor/10.8/admin/settings/npsclientcertificate.webp) +![npsclientcertificate](/images/auditor/10.7/admin/settings/npsclientcertificate.webp) **Step 6 –** Click **Next**. @@ -108,11 +108,11 @@ documentation for additional instructions. **Step 10 –** Provide the security key you got in Netwrix Privilege Secure. -![npsintegrationparameters](/images/auditor/10.8/admin/settings/npsintegrationparameters.webp) +![npsintegrationparameters](/images/auditor/10.7/admin/settings/npsintegrationparameters.webp) **Step 11 –** Click **Next**. -![npsintegrationfinished](/images/auditor/10.8/admin/settings/npsintegrationfinished.webp) +![npsintegrationfinished](/images/auditor/10.7/admin/settings/npsintegrationfinished.webp) **Step 12 –** After the validation, click **Finish**. diff --git a/docs/auditor/10.8/admin/subscriptions/manage.md b/docs/auditor/10.8/admin/subscriptions/manage.md index fd81efb743..b7e25f30d4 100644 --- a/docs/auditor/10.8/admin/subscriptions/manage.md +++ b/docs/auditor/10.8/admin/subscriptions/manage.md @@ -8,7 +8,7 @@ sidebar_position: 20 On the main Netwrix Auditor page, navigate to Subscriptions to review a list of your subscriptions. -![subscription](/images/auditor/10.8/admin/subscriptions/subscription.webp) +![subscription](/images/auditor/10.7/admin/subscriptions/subscription.webp) The table below provides instructions on how to manage your subscriptions. diff --git a/docs/auditor/10.8/api/overview.md b/docs/auditor/10.8/api/overview.md index ed6aab34fe..cd6bc0dd9a 100644 --- a/docs/auditor/10.8/api/overview.md +++ b/docs/auditor/10.8/api/overview.md @@ -22,7 +22,7 @@ Integration API provides the following capabilities: - Data out: Further automate your business processes, IT security and operations workflows by enriching third-party solutions with actionable audit data. -![diagram_thumb_0_0](/images/auditor/10.8/api/diagram_thumb_0_0.webp) +![diagram_thumb_0_0](/images/auditor/10.7/api/diagram_thumb_0_0.webp) Netwrix Auditor Integration API operates with XML- and JSON-formatted Activity Records—minimal chunks of audit data containing information on _who_ changed _what_, _when_ and _where_ this change diff --git a/docs/auditor/10.8/api/postdata/searchparameters.md b/docs/auditor/10.8/api/postdata/searchparameters.md index 5f5777d2c8..734e111ebc 100644 --- a/docs/auditor/10.8/api/postdata/searchparameters.md +++ b/docs/auditor/10.8/api/postdata/searchparameters.md @@ -55,7 +55,7 @@ Ensure to pass information about transferred data, including `Content-Type:appli | Format | Schema description | | ------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| XML | The file must be compatible with the XML schema. On the computer where Auditor Server resides, you can find XSD file under _Netwrix_Auditor_installation_folder\Audit Core\API Schemas_. The `ActivityRecordSearch` root element includes the `FilterList `element with one or more `Filter `elements inside. The root element may contain a `ContinuationMark `element. Each `Filter `specified within the `FilterList `must have a value to search for. The element may also include a modifier—a match type operator. minOccurs="0" indicates that element is optional and may be absent in the Search parameters. ![filterschema](/images/auditor/10.8/api/postdata/filterschema.webp) | +| XML | The file must be compatible with the XML schema. On the computer where Auditor Server resides, you can find XSD file under _Netwrix_Auditor_installation_folder\Audit Core\API Schemas_. The `ActivityRecordSearch` root element includes the `FilterList `element with one or more `Filter `elements inside. The root element may contain a `ContinuationMark `element. Each `Filter `specified within the `FilterList `must have a value to search for. The element may also include a modifier—a match type operator. minOccurs="0" indicates that element is optional and may be absent in the Search parameters. ![filterschema](/images/auditor/10.7/api/postdata/filterschema.webp) | | JSON | The `FilterList `object includes with one or more `Filter `entries inside. JSON may contain a `ContinuationMark `object. Each `Filter `specified within the `FilterList `must have a value to search for. The entry may also include a modifier—a match type operator. | Review the following for additional information: diff --git a/docs/auditor/10.8/api/prerequisites.md b/docs/auditor/10.8/api/prerequisites.md index 295b0c572a..4c4dc21b5b 100644 --- a/docs/auditor/10.8/api/prerequisites.md +++ b/docs/auditor/10.8/api/prerequisites.md @@ -26,7 +26,7 @@ rule will be automatically created. **Step 4 –** If you use a third-party firewall, you must create a rule for inbound connections manually. -![Integration API Settings](/images/auditor/10.8/addon/connectwise/integrations_thumb_0_0.webp) +![Integration API Settings](/images/auditor/10.7/addon/connectwise/integrations_thumb_0_0.webp) ## Configure Audit Database Settings diff --git a/docs/auditor/10.8/api/security.md b/docs/auditor/10.8/api/security.md index cfa2b4b0c9..aba998bef3 100644 --- a/docs/auditor/10.8/api/security.md +++ b/docs/auditor/10.8/api/security.md @@ -14,7 +14,7 @@ The automatically generated Netwrix API certificate is located in the Personal s trust on remote computers, install this certificate in the Trusted Root Certification Authorities store. -![certificatestore_thumb_0_0](/images/auditor/10.8/api/certificatestore_thumb_0_0.webp) +![certificatestore_thumb_0_0](/images/auditor/10.7/api/certificatestore_thumb_0_0.webp) To manage API security settings with APIAdminTool.exe diff --git a/docs/auditor/10.8/api/writeactivityrecords.md b/docs/auditor/10.8/api/writeactivityrecords.md index e7d5b93331..3454ae85ae 100644 --- a/docs/auditor/10.8/api/writeactivityrecords.md +++ b/docs/auditor/10.8/api/writeactivityrecords.md @@ -145,8 +145,8 @@ Date: Fri, 08 Apr 2017 13:56:22 GMT **Step 4 –** Check that posted data is now available in the Audit Database. Run a search request to [/netwrix/api/v1/activity_records/search](/docs/auditor/10.8/api/searchactivityrecords.md) endpoint or use interactive search in the Netwrix Auditor client. For example: -![apiactivity_thumb_0_0](/images/auditor/10.8/api/apiactivity_thumb_0_0.webp) +![apiactivity_thumb_0_0](/images/auditor/10.7/api/apiactivity_thumb_0_0.webp) **Step 5 –** For input Activity Records, the data source is set to Netwrix API. -![apiactivitydetails](/images/auditor/10.8/api/apiactivitydetails.webp) +![apiactivitydetails](/images/auditor/10.7/api/apiactivitydetails.webp) diff --git a/docs/auditor/10.8/configuration/activedirectory/automatic.md b/docs/auditor/10.8/configuration/activedirectory/automatic.md index 6cc89e3cd8..c4b32b69f8 100644 --- a/docs/auditor/10.8/configuration/activedirectory/automatic.md +++ b/docs/auditor/10.8/configuration/activedirectory/automatic.md @@ -17,7 +17,7 @@ To adjust audit settings automatically, do any of the following: [Create a New Monitoring Plan](/docs/auditor/10.8/admin/monitoringplans/create.md) topic for additional information. -![mp_wizard_step1_ad_thumb_0_0](/images/auditor/10.8/configuration/activedirectory/mp_wizard_step1_ad_thumb_0_0.webp) +![mp_wizard_step1_ad_thumb_0_0](/images/auditor/10.7/configuration/activedirectory/mp_wizard_step1_ad_thumb_0_0.webp) - For the existing monitoring plan, modify data collection settings for Active Directory data source, selecting **Adjust audit settings automatically** option. diff --git a/docs/auditor/10.8/configuration/activedirectory/tombstone.md b/docs/auditor/10.8/configuration/activedirectory/tombstone.md index 129c170523..d49208ef68 100644 --- a/docs/auditor/10.8/configuration/activedirectory/tombstone.md +++ b/docs/auditor/10.8/configuration/activedirectory/tombstone.md @@ -40,6 +40,6 @@ Right-click it and select **Properties** from the pop-up menu. **Step 4 –** In the **CN=Directory Service Properties** dialog, locate the **tombstoneLifetime** attribute in the **Attribute Editor** tab. -![manualconfig_adsi_tombstone_winserver2016](/images/auditor/10.8/configuration/activedirectory/manualconfig_adsi_tombstone_winserver2016.webp) +![manualconfig_adsi_tombstone_winserver2016](/images/auditor/10.7/configuration/activedirectory/manualconfig_adsi_tombstone_winserver2016.webp) **Step 5 –** Click **Edit**. Set the value to _"730"_ (which equals 2 years). diff --git a/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md b/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md index d1624e6d6b..b4899b6690 100644 --- a/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md +++ b/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md @@ -78,12 +78,12 @@ need to configure audit settings manually, as described later in this section. **Step 1 –** Select the AD FS data source in this monitoring plan (top row under the header), click **Edit data source** to open its settings. -![mp_adfs_listing_thumb_0_0](/images/auditor/10.8/configuration/activedirectoryfederatedservices/mp_adfs_listing_thumb_0_0.webp) +![mp_adfs_listing_thumb_0_0](/images/auditor/10.7/configuration/activedirectoryfederatedservices/mp_adfs_listing_thumb_0_0.webp) **Step 2 –** In the **Configure audit settings** section, select **Adjust audit settings automatically** check box. -![mp_data_source_ad_fs_thumb_0_0](/images/auditor/10.8/configuration/activedirectoryfederatedservices/mp_data_source_ad_fs_thumb_0_0.webp) +![mp_data_source_ad_fs_thumb_0_0](/images/auditor/10.7/configuration/activedirectoryfederatedservices/mp_data_source_ad_fs_thumb_0_0.webp) **Step 3 –** Save the settings. diff --git a/docs/auditor/10.8/configuration/exchange/permissions.md b/docs/auditor/10.8/configuration/exchange/permissions.md index b57b688f8f..87bb3fdd25 100644 --- a/docs/auditor/10.8/configuration/exchange/permissions.md +++ b/docs/auditor/10.8/configuration/exchange/permissions.md @@ -64,7 +64,7 @@ in the root domain of the forest where Microsoft Exchange 2019, 2016, or 2013 is **Step 4 –** In the **Organization Management Properties** dialog that opens, select the **Members** tab and click **Add**. -![manualconfig_orgmanagement2016](/images/auditor/10.8/configuration/exchange/manualconfig_orgmanagement2016.webp) +![manualconfig_orgmanagement2016](/images/auditor/10.7/configuration/exchange/manualconfig_orgmanagement2016.webp) If for some reason you do not want this account to belong to the Organization Management group, you can add it to the Records Management group in the same way. The Records Management group is less diff --git a/docs/auditor/10.8/configuration/fileservers/delldatastorage/cifss.md b/docs/auditor/10.8/configuration/fileservers/delldatastorage/cifss.md index e8bc5a5023..972403426f 100644 --- a/docs/auditor/10.8/configuration/fileservers/delldatastorage/cifss.md +++ b/docs/auditor/10.8/configuration/fileservers/delldatastorage/cifss.md @@ -100,10 +100,10 @@ Review the following for additional information: | Auditing Entry | | | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --- | | Successful reads | | -| The Auditing Entry below shows Advanced Permissions for auditing successful reads only: ![manualconfig_fileserver_auditingentry_1_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_1_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"Files only"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing successful reads only: ![manualconfig_fileserver_auditingentry_1_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_1_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"Files only"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | | Successful changes | | -| The Auditing Entry below shows Advanced Permissions for auditing successful changes only: ![manualconfig_fileserver_auditingentry_2_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_2_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing successful changes only: ![manualconfig_fileserver_auditingentry_2_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_2_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | | Failed read attempts | | -| The Auditing Entry below shows Advanced Permissions for auditing failed read attempts: ![manualconfig_fileserver_auditingentry_3_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_3_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing failed read attempts: ![manualconfig_fileserver_auditingentry_3_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_3_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | | Failed change attempts | | -| The Auditing Entry below shows Advanced Permissions for auditing failed change attempts: ![manualconfig_fileserver_auditingentry_4_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_4_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing failed change attempts: ![manualconfig_fileserver_auditingentry_4_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_4_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | diff --git a/docs/auditor/10.8/configuration/fileservers/delldatastorage/objectaccess.md b/docs/auditor/10.8/configuration/fileservers/delldatastorage/objectaccess.md index 906687406a..942646a0cc 100644 --- a/docs/auditor/10.8/configuration/fileservers/delldatastorage/objectaccess.md +++ b/docs/auditor/10.8/configuration/fileservers/delldatastorage/objectaccess.md @@ -33,7 +33,7 @@ node on the left and navigate to **Policies → Windows Settings → Security Se | -------------- | ----------------------- | --------------------------- | | Audit Policy | **Audit object access** | _"Success"_ and _"Failure"_ | -![manualconfig_fileserver_auditpolicy2016](/images/auditor/10.8/configuration/fileservers/delldatastorage/manualconfig_fileserver_auditpolicy2016.webp) +![manualconfig_fileserver_auditpolicy2016](/images/auditor/10.7/configuration/fileservers/delldatastorage/manualconfig_fileserver_auditpolicy2016.webp) **Step 6 –** To update the group policies, execute the following command: diff --git a/docs/auditor/10.8/configuration/fileservers/netappcmode/cifs.md b/docs/auditor/10.8/configuration/fileservers/netappcmode/cifs.md index 25a20e78e7..c2c7df71b4 100644 --- a/docs/auditor/10.8/configuration/fileservers/netappcmode/cifs.md +++ b/docs/auditor/10.8/configuration/fileservers/netappcmode/cifs.md @@ -39,7 +39,7 @@ Do one of the following depending on the OS: 3. In the **Advanced Security Settings for ``** dialog, navigate to the **Auditing** tab, click Edit. - ![auditing_entries_netapp](/images/auditor/10.8/configuration/fileservers/netappcmode/auditing_entries_netapp.webp) + ![auditing_entries_netapp](/images/auditor/10.7/configuration/fileservers/netappcmode/auditing_entries_netapp.webp) 4. In a separate **Advanced Security Settings for ``** dialog, click Add to add a principal. You can also select **Everyone** (or another user-defined group containing users that @@ -99,10 +99,10 @@ Review the following for additional information: | Auditing Entry | | | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --- | | Successful reads | | -| The Auditing Entry below shows Advanced Permissions for auditing successful reads only: ![manualconfig_fileserver_auditingentry_1_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_1_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"Files only"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing successful reads only: ![manualconfig_fileserver_auditingentry_1_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_1_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"Files only"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | | Successful changes | | -| The Auditing Entry below shows Advanced Permissions for auditing successful changes only: ![manualconfig_fileserver_auditingentry_2_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_2_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing successful changes only: ![manualconfig_fileserver_auditingentry_2_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_2_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | | Failed read attempts | | -| The Auditing Entry below shows Advanced Permissions for auditing failed read attempts: ![manualconfig_fileserver_auditingentry_3_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_3_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing failed read attempts: ![manualconfig_fileserver_auditingentry_3_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_3_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | | Failed change attempts | | -| The Auditing Entry below shows Advanced Permissions for auditing failed change attempts: ![manualconfig_fileserver_auditingentry_4_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_4_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing failed change attempts: ![manualconfig_fileserver_auditingentry_4_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_4_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | diff --git a/docs/auditor/10.8/configuration/fileservers/netappcmode/eventcategories.md b/docs/auditor/10.8/configuration/fileservers/netappcmode/eventcategories.md index 5a196924b6..43a626996f 100644 --- a/docs/auditor/10.8/configuration/fileservers/netappcmode/eventcategories.md +++ b/docs/auditor/10.8/configuration/fileservers/netappcmode/eventcategories.md @@ -111,14 +111,14 @@ To configure logs retention period For the backup logs retention functionality to work properly, you need to specify the CleanAutoBackupLogs name for the newly created registry value. - ![manualconfig_fileserver_netapp_createregistryvalue_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_netapp_createregistryvalue_2016.webp) + ![manualconfig_fileserver_netapp_createregistryvalue_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_netapp_createregistryvalue_2016.webp) 4. Double-click **CleanAutoBackupLogs**. The **Edit DWORD Value** dialog will open. 5. This value defines the time period (in hours) after which security event logs archives will be automatically deleted. By default, it is set to _"0"_ (decimal). Modify this value, if necessary, and click **OK** to save the changes. - ![manualconfig_retentionperiodbackuplog_winserver2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_retentionperiodbackuplog_winserver2016.webp) + ![manualconfig_retentionperiodbackuplog_winserver2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_retentionperiodbackuplog_winserver2016.webp) 6. **NOTE:** If the **CleanAutoBackupLogs** registry value is set to _"0"_, you will have to remove the old logs manually, or you may run out of space on your hard drive. diff --git a/docs/auditor/10.8/configuration/fileservers/nutanix/partnerserver.md b/docs/auditor/10.8/configuration/fileservers/nutanix/partnerserver.md index 5b6aa1a7f3..d6156b8b88 100644 --- a/docs/auditor/10.8/configuration/fileservers/nutanix/partnerserver.md +++ b/docs/auditor/10.8/configuration/fileservers/nutanix/partnerserver.md @@ -32,7 +32,7 @@ server will be opened. `POST /partner_servers` -![api_thumb_0_0](/images/auditor/10.8/configuration/fileservers/nutanix/api_thumb_0_0.webp) +![api_thumb_0_0](/images/auditor/10.7/configuration/fileservers/nutanix/api_thumb_0_0.webp) 5. In the request body, enter the following JSON-formatted structure: @@ -97,7 +97,7 @@ This address must be visible from the Nutanix File Server network. The request body must be empty - for that, enter empty brackets as the **value** for _get_entities_request_ parameter: `{ }` -![api_partner_server_resquest_thumb_0_0](/images/auditor/10.8/configuration/fileservers/nutanix/api_partner_server_resquest_thumb_0_0.webp) +![api_partner_server_resquest_thumb_0_0](/images/auditor/10.7/configuration/fileservers/nutanix/api_partner_server_resquest_thumb_0_0.webp) 9. The response body should contain the list of servers, including new partner server name and other settings. diff --git a/docs/auditor/10.8/configuration/fileservers/nutanix/permissions.md b/docs/auditor/10.8/configuration/fileservers/nutanix/permissions.md index 00b5ab7ca3..c4565db052 100644 --- a/docs/auditor/10.8/configuration/fileservers/nutanix/permissions.md +++ b/docs/auditor/10.8/configuration/fileservers/nutanix/permissions.md @@ -18,7 +18,7 @@ This is the account you will provide in the monitoring plan wizard at the [Create a New Monitoring Plan](/docs/auditor/10.8/admin/monitoringplans/create.md) step; it can be modified in the **General** tab of the monitored item settings. -![nutanix_item_mp_thumb_0_0](/images/auditor/10.8/configuration/fileservers/nutanix/nutanix_item_mp_thumb_0_0.webp) +![nutanix_item_mp_thumb_0_0](/images/auditor/10.7/configuration/fileservers/nutanix/nutanix_item_mp_thumb_0_0.webp) This account must have a role with sufficient privileges on that server: **File Server Admin** (recommended) or **Backup Admin** role. @@ -30,7 +30,7 @@ You will also need an account that will be used to connect to Nutanix File Serve This account should be provided in the **Nutanix File Server REST API** tab of the monitored item (_Nutanix SMB shares_) settings. -![nutanix_item_restapi_thumb_0_0](/images/auditor/10.8/configuration/fileservers/nutanix/nutanix_item_restapi_thumb_0_0.webp) +![nutanix_item_restapi_thumb_0_0](/images/auditor/10.7/configuration/fileservers/nutanix/nutanix_item_restapi_thumb_0_0.webp) This account must be assigned the **REST API access users** role for Nutanix File Server you want to audit. @@ -64,7 +64,7 @@ format and select the **File Server Admin** or **Backup Admin** role to assign **Step 8 –** Enter the local user account and password, then click **Save** next to these cells to save the settings. -![nutanix_user_thumb_0_0](/images/auditor/10.8/configuration/fileservers/nutanix/nutanix_user_thumb_0_0.webp) +![nutanix_user_thumb_0_0](/images/auditor/10.7/configuration/fileservers/nutanix/nutanix_user_thumb_0_0.webp) **Step 9 –** When finished, click **Close**. diff --git a/docs/auditor/10.8/configuration/fileservers/nutanix/useraccount.md b/docs/auditor/10.8/configuration/fileservers/nutanix/useraccount.md index 1cdcc8c227..823248bf46 100644 --- a/docs/auditor/10.8/configuration/fileservers/nutanix/useraccount.md +++ b/docs/auditor/10.8/configuration/fileservers/nutanix/useraccount.md @@ -44,7 +44,7 @@ To create a new user account with Nutanix Prism: 4. In the **Manage roles** dialog locate the **REST API access user** section and click **+New user**. - ![nutanix_user_thumb_0_0](/images/auditor/10.8/configuration/fileservers/nutanix/nutanix_user_thumb_0_0.webp) + ![nutanix_user_thumb_0_0](/images/auditor/10.7/configuration/fileservers/nutanix/nutanix_user_thumb_0_0.webp) 5. Enter local user account name and password, then click **Save** next to them to save the settings. diff --git a/docs/auditor/10.8/configuration/fileservers/qumulo/configure.md b/docs/auditor/10.8/configuration/fileservers/qumulo/configure.md index fd3d1f94c4..fdb7b6d294 100644 --- a/docs/auditor/10.8/configuration/fileservers/qumulo/configure.md +++ b/docs/auditor/10.8/configuration/fileservers/qumulo/configure.md @@ -20,7 +20,7 @@ To configure Core Audit for Qumulo file servers be a third-party Syslog forward service or the machine where Netwrix Auditor is installed. - Port Number – use the default value (_514_). - ![qumulo_web_ui](/images/auditor/10.8/configuration/fileservers/qumulo/qumulo_web_ui.webp) + ![qumulo_web_ui](/images/auditor/10.7/configuration/fileservers/qumulo/qumulo_web_ui.webp) When you see the green line “_Connected_”, the environment is ready. diff --git a/docs/auditor/10.8/configuration/fileservers/windows/eventlog.md b/docs/auditor/10.8/configuration/fileservers/windows/eventlog.md index 0457fedef7..ee1f453d21 100644 --- a/docs/auditor/10.8/configuration/fileservers/windows/eventlog.md +++ b/docs/auditor/10.8/configuration/fileservers/windows/eventlog.md @@ -19,7 +19,7 @@ Follow the steps to configure Event Log Size and Retention Settings. **Step 2 –** Navigate to Event Viewer tree > Windows Logs, right-click **Security** and select **Properties**. -![Log Properties dialog box](/images/auditor/10.8/configuration/fileservers/windows/manualconfig_ws_eventviewerpr2016_thumb_0_0.webp) +![Log Properties dialog box](/images/auditor/10.7/configuration/fileservers/windows/manualconfig_ws_eventviewerpr2016_thumb_0_0.webp) **Step 3 –** Make sure Enable logging is selected. diff --git a/docs/auditor/10.8/configuration/fileservers/windows/objectlevel.md b/docs/auditor/10.8/configuration/fileservers/windows/objectlevel.md index d45067eff0..43c7493a67 100644 --- a/docs/auditor/10.8/configuration/fileservers/windows/objectlevel.md +++ b/docs/auditor/10.8/configuration/fileservers/windows/objectlevel.md @@ -60,13 +60,13 @@ Review the following for additional information: | Auditing Entry | | | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --- | | Successful reads | | -| The Auditing Entry below shows Advanced Permissions for auditing successful reads only: ![manualconfig_fileserver_auditingentry_1_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_1_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"Files only"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing successful reads only: ![manualconfig_fileserver_auditingentry_1_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_1_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"Files only"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | | Successful changes | | -| The Auditing Entry below shows Advanced Permissions for auditing successful changes only: ![manualconfig_fileserver_auditingentry_2_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_2_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing successful changes only: ![manualconfig_fileserver_auditingentry_2_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_2_2016.webp)
  • Type—Set to _"Success"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | | Failed read attempts | | -| The Auditing Entry below shows Advanced Permissions for auditing failed read attempts: ![manualconfig_fileserver_auditingentry_3_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_3_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing failed read attempts: ![manualconfig_fileserver_auditingentry_3_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_3_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions—Select List folder / read data.
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | | Failed change attempts | | -| The Auditing Entry below shows Advanced Permissions for auditing failed change attempts: ![manualconfig_fileserver_auditingentry_4_2016](/images/auditor/10.8/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_4_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | +| The Auditing Entry below shows Advanced Permissions for auditing failed change attempts: ![manualconfig_fileserver_auditingentry_4_2016](/images/auditor/10.7/configuration/fileservers/netappcmode/manualconfig_fileserver_auditingentry_4_2016.webp)
  • Type—Set to _"Fail"_.
  • Applies to—Set to _"This folder, subfolders and files"_.
  • Advanced permissions:
  • Create files / write data
  • Create folders / append data
  • Write extended attributes
  • Delete subfolders and files
  • Delete
  • Change permissions
  • Take ownership
  • Make sure that the Only apply these auditing settings to objects and/or containers within this container checkbox is cleared.
| | ## Configure Object-level access auditing on pre-Windows Server 2012 versions diff --git a/docs/auditor/10.8/configuration/grouppolicy/permissions.md b/docs/auditor/10.8/configuration/grouppolicy/permissions.md index 6da2b37686..93a8350665 100644 --- a/docs/auditor/10.8/configuration/grouppolicy/permissions.md +++ b/docs/auditor/10.8/configuration/grouppolicy/permissions.md @@ -150,7 +150,7 @@ Follow the steps to use Netwrix Privilege Secure as an account for data collect **Step 2 –** In the item configuration menu, select Netwrix Privilege Secure as an option for data collection. -![npsdatacollectingaccount](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccount.webp) +![npsdatacollectingaccount](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccount.webp) **Step 3 –** Select the type of the Access Policy you want to use in Netwrix Privilege Secure. Credential-based is the default option. Refer to the @@ -163,7 +163,7 @@ and to which Netwrix Auditor has the access through a Credential-based access po **NOTE:** Netwrix recommends using different credentials for different monitoring plans and data sources. -![npsdatacollectingaccountresourced](/images/auditor/10.8/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) +![npsdatacollectingaccountresourced](/images/auditor/10.7/configuration/grouppolicy/npsdatacollectingaccountresourced.webp) The second option is Resource-based. To use this option, you need to provide the Activity and Resource names, assigned to Netwrix Auditor in the corresponding Resource-based policy. Make sure diff --git a/docs/auditor/10.8/configuration/microsoft365/exchangeonline/permissions.md b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/permissions.md index aeca0f94e5..b5d061d881 100644 --- a/docs/auditor/10.8/configuration/microsoft365/exchangeonline/permissions.md +++ b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/permissions.md @@ -104,7 +104,7 @@ where: **Step 11 –** Go to **Manage > Certificates & secrets**, click **Upload certificate** and upload the*.crt* file you have just created. -![certificates_secrets_thumb_0_0](/images/auditor/10.8/configuration/microsoft365/exchangeonline/certificates_secrets_thumb_0_0.webp) +![certificates_secrets_thumb_0_0](/images/auditor/10.7/configuration/microsoft365/exchangeonline/certificates_secrets_thumb_0_0.webp) **Step 12 –** To create Exchange Online connection session, you can provide certificate file path or thumbprint. If you want to use a file path, run the following command: @@ -116,7 +116,7 @@ Connect-ExchangeOnline -CertificateFilePath "full_path_to_certificate" Application (client ID) can be found in the **Overview** page. -![tenant_id_thumb_0_0](/images/auditor/10.8/configuration/microsoft365/exchangeonline/tenant_id_thumb_0_0.webp) +![tenant_id_thumb_0_0](/images/auditor/10.7/configuration/microsoft365/exchangeonline/tenant_id_thumb_0_0.webp) For example: diff --git a/docs/auditor/10.8/configuration/networkdevices/ciscomerakidevices.md b/docs/auditor/10.8/configuration/networkdevices/ciscomerakidevices.md index b8b6aeef6e..e241271c3a 100644 --- a/docs/auditor/10.8/configuration/networkdevices/ciscomerakidevices.md +++ b/docs/auditor/10.8/configuration/networkdevices/ciscomerakidevices.md @@ -18,11 +18,11 @@ Follow the steps to configure the Syslog server. **Step 2 –** Navigate to **Network wide** > **Configure** > **General**. -![nand_meraki_network](/images/auditor/10.8/configuration/networkdevices/nand_meraki_network.webp) +![nand_meraki_network](/images/auditor/10.7/configuration/networkdevices/nand_meraki_network.webp) **Step 3 –** Locate the Reporting section and click Add a syslog server. -![nand_meraki_server](/images/auditor/10.8/configuration/networkdevices/nand_meraki_server.webp) +![nand_meraki_server](/images/auditor/10.7/configuration/networkdevices/nand_meraki_server.webp) **Step 4 –** In the dialog that opens, complete the following fields: diff --git a/docs/auditor/10.8/configuration/networkdevices/hpearuba.md b/docs/auditor/10.8/configuration/networkdevices/hpearuba.md index ab3682bf72..43a8e0725b 100644 --- a/docs/auditor/10.8/configuration/networkdevices/hpearuba.md +++ b/docs/auditor/10.8/configuration/networkdevices/hpearuba.md @@ -47,7 +47,7 @@ To configure HPE Aruba devices through the Management Console Netwrix Auditor. 3. Navigate to Configuration → System → Logging and click + to add a new Syslog Server. - ![nand_aruba_logging](/images/auditor/10.8/configuration/networkdevices/nand_aruba_logging.webp) + ![nand_aruba_logging](/images/auditor/10.7/configuration/networkdevices/nand_aruba_logging.webp) 4. In the Add New Syslog Servers dialog, complete the following fields: @@ -66,7 +66,7 @@ To configure HPE Aruba devices through the Management Console 8. Click Deploy Changes. 9. If the configuration is correct, you will see the following wizard: - ![nand_aruba_status](/images/auditor/10.8/configuration/networkdevices/nand_aruba_status.webp) + ![nand_aruba_status](/images/auditor/10.7/configuration/networkdevices/nand_aruba_status.webp) 10. Navigate to Configuration → System → Logging and expand the Logging Levels. 11. Select the Informational value for the following parameters: diff --git a/docs/auditor/10.8/configuration/networkdevices/pulsesecure.md b/docs/auditor/10.8/configuration/networkdevices/pulsesecure.md index 87911f8c86..00ec7f64fb 100644 --- a/docs/auditor/10.8/configuration/networkdevices/pulsesecure.md +++ b/docs/auditor/10.8/configuration/networkdevices/pulsesecure.md @@ -17,7 +17,7 @@ sidebar_position: 100 - Login/Logout - VPN Tunneling - ![manual_config_pulse_1](/images/auditor/10.8/configuration/networkdevices/manual_config_pulse_1.webp) + ![manual_config_pulse_1](/images/auditor/10.7/configuration/networkdevices/manual_config_pulse_1.webp) 6. Under the Syslog Servers, complete the following fields: diff --git a/docs/auditor/10.8/configuration/useractivity/videorecordings.md b/docs/auditor/10.8/configuration/useractivity/videorecordings.md index e44a98d76d..7d513caae3 100644 --- a/docs/auditor/10.8/configuration/useractivity/videorecordings.md +++ b/docs/auditor/10.8/configuration/useractivity/videorecordings.md @@ -64,7 +64,7 @@ verify that **File download** is set to **Enable**. **Step 5 –** Local Security and select the **Allow active content to run in files on My Computer** checkbox. -![manualconfig_uavr_ie2016](/images/auditor/10.8/configuration/useractivity/manualconfig_uavr_ie2016.webp) +![manualconfig_uavr_ie2016](/images/auditor/10.7/configuration/useractivity/manualconfig_uavr_ie2016.webp) ## To Enable JavaScript diff --git a/docs/auditor/10.8/configuration/windowsserver/dhcp.md b/docs/auditor/10.8/configuration/windowsserver/dhcp.md index 139722be5c..3fb268b52e 100644 --- a/docs/auditor/10.8/configuration/windowsserver/dhcp.md +++ b/docs/auditor/10.8/configuration/windowsserver/dhcp.md @@ -14,7 +14,7 @@ settings (size and retention method). For that, take the steps described below. the DHCP-Server node. 3. Right-click the Operational log and select Properties. - ![manual_config_dhcp_log](/images/auditor/10.8/configuration/windowsserver/manual_config_dhcp_log.webp) + ![manual_config_dhcp_log](/images/auditor/10.7/configuration/windowsserver/manual_config_dhcp_log.webp) 4. Make sure the **Enable logging** option is selected. 5. Set **Maximum log size** to **4 GB**. diff --git a/docs/auditor/10.8/configuration/windowsserver/eventlog.md b/docs/auditor/10.8/configuration/windowsserver/eventlog.md index b91c8f0a01..b763d53811 100644 --- a/docs/auditor/10.8/configuration/windowsserver/eventlog.md +++ b/docs/auditor/10.8/configuration/windowsserver/eventlog.md @@ -93,7 +93,7 @@ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Directory Service **Step 2 –** Set the MaxSize to the required decimal value (in bytes). -![gpo_eventlog_regedit_thumb_0_0](/images/auditor/10.8/configuration/windowsserver/gpo_eventlog_regedit_thumb_0_0.webp) +![gpo_eventlog_regedit_thumb_0_0](/images/auditor/10.7/configuration/windowsserver/gpo_eventlog_regedit_thumb_0_0.webp) You can configure Group Policy Preferences to push registry changes to the target domain computers. For the example above (Directory Service Log), perform the following steps. @@ -109,7 +109,7 @@ Preferences > Windows Settings > Registry**. - Hive > HKEY_LOCAL_MACHINE - Key Path – browse to MaxSize value at the SYSTEM\CurrentControlSet\Services\EventLog\Directory Service - ![gpo_eventlog_gpmc_thumb_0_0](/images/auditor/10.8/configuration/windowsserver/gpo_eventlog_gpmc_thumb_0_0.webp) + ![gpo_eventlog_gpmc_thumb_0_0](/images/auditor/10.7/configuration/windowsserver/gpo_eventlog_gpmc_thumb_0_0.webp) **Step 4 –** Change the MaxSize REG_DWORD to the required decimal value (in bytes). diff --git a/docs/auditor/10.8/configuration/windowsserver/iis.md b/docs/auditor/10.8/configuration/windowsserver/iis.md index a294bce3be..a378e700c1 100644 --- a/docs/auditor/10.8/configuration/windowsserver/iis.md +++ b/docs/auditor/10.8/configuration/windowsserver/iis.md @@ -17,7 +17,7 @@ To configure the Operational log size and retention method the IIS-Configuration node. 3. Right-click the Operational log and select Properties. - ![manualconfig_iis2016](/images/auditor/10.8/configuration/windowsserver/manualconfig_iis2016.webp) + ![manualconfig_iis2016](/images/auditor/10.7/configuration/windowsserver/manualconfig_iis2016.webp) 4. Make sure **Enable logging** is enabled. 5. Set **Maximum log size** to 4 GB. diff --git a/docs/auditor/10.8/configuration/windowsserver/overview.md b/docs/auditor/10.8/configuration/windowsserver/overview.md index 70ac3dff0e..0b524456af 100644 --- a/docs/auditor/10.8/configuration/windowsserver/overview.md +++ b/docs/auditor/10.8/configuration/windowsserver/overview.md @@ -315,7 +315,7 @@ Follow the steps to monitor custom registry keys. **Step 1 –** On the computer where Auditor Server resides, navigate to _%Netwrix Auditor installation folder%\Windows Server Auditing._ -![customregistrykeyentry](/images/auditor/10.8/configuration/windowsserver/customregistrykeyentry.webp) +![customregistrykeyentry](/images/auditor/10.7/configuration/windowsserver/customregistrykeyentry.webp) **Step 2 –** Edit the following parameters of the customregistrykeys.txt file: @@ -332,7 +332,7 @@ For example: must be put in front of (\*), (?), (,), and (\) if they are a part of an entry value. - Lines that start with the # sign are treated as comments and are ignored. -![customregistrykey](/images/auditor/10.8/configuration/windowsserver/customregistrykey.webp) +![customregistrykey](/images/auditor/10.7/configuration/windowsserver/customregistrykey.webp) **NOTE:** In some cases, **Who** will be the system and **When** will be collection time, because there is no necessary event in the Security log with this path. diff --git a/docs/auditor/10.8/configuration/windowsserver/windowsregistry.md b/docs/auditor/10.8/configuration/windowsserver/windowsregistry.md index c34f175e1d..02bbace08b 100644 --- a/docs/auditor/10.8/configuration/windowsserver/windowsregistry.md +++ b/docs/auditor/10.8/configuration/windowsserver/windowsregistry.md @@ -49,7 +49,7 @@ access types: - **Write DAC** - **Write Owner** -![ManualConfig_WS_AuditingEntry2008](/images/auditor/10.8/configuration/windowsserver/manualconfig_ws_auditenrty2008.webp) +![ManualConfig_WS_AuditingEntry2008](/images/auditor/10.7/configuration/windowsserver/manualconfig_ws_auditenrty2008.webp) Repeat the same steps for the `HKEY_LOCAL_MACHINE\SYSTEM` key. @@ -79,7 +79,7 @@ object name to select** field. - Write DAC - Write Owner -![Config_WS_AuditingEntry_2016](/images/auditor/10.8/configuration/windowsserver/manualconfig_ws_auditenrty_2016.webp) +![Config_WS_AuditingEntry_2016](/images/auditor/10.7/configuration/windowsserver/manualconfig_ws_auditenrty_2016.webp) Repeat the same steps for the `HKEY_LOCAL_MACHINE\SYSTEM` key. diff --git a/docs/auditor/10.8/install/firstlaunch.md b/docs/auditor/10.8/install/firstlaunch.md index 93a40bc5d6..8afc921584 100644 --- a/docs/auditor/10.8/install/firstlaunch.md +++ b/docs/auditor/10.8/install/firstlaunch.md @@ -27,7 +27,7 @@ To start using Netwrix Auditor After logging into Netwrix Auditor, you will see the following window: -![welcome_screen_thumb_0_0](/images/auditor/10.8/install/welcome_screen_thumb_0_0.webp) +![welcome_screen_thumb_0_0](/images/auditor/10.7/install/welcome_screen_thumb_0_0.webp) Take a closer look at the Home page. It contains everything you need to enable complete visibility in your environment. diff --git a/docs/auditor/10.8/install/overview.md b/docs/auditor/10.8/install/overview.md index d08ad35afb..6d4c4a652f 100644 --- a/docs/auditor/10.8/install/overview.md +++ b/docs/auditor/10.8/install/overview.md @@ -36,7 +36,7 @@ you must be a member of the local Administrators group to run the Netwrix Audito **Step 2 –** Unpack the installation package. The following window will be displayed on successful operation completion: -![installationscreen](/images/auditor/10.8/install/installationscreen.webp) +![installationscreen](/images/auditor/10.7/install/installationscreen.webp) **Step 3 –** Follow the instructions of the setup wizard. When prompted, accept the license agreement. @@ -67,7 +67,7 @@ After a successful installation, Auditor shortcut will be added to the **Start** the product will start. See the [First Launch](/docs/auditor/10.8/install/firstlaunch.md) topic for additional information on the product navigation. -![welcome_screen](/images/auditor/10.8/install/welcome_screen.webp) +![welcome_screen](/images/auditor/10.7/install/welcome_screen.webp) Netwrix looks beyond the traditional on-premises installation and provides Auditor for cloud and virtual environments. For example, you can deploy Auditor on a pre-configured Microsoft Azure diff --git a/docs/auditor/10.8/install/viagrouppolicy.md b/docs/auditor/10.8/install/viagrouppolicy.md index a9f2239beb..57f2f3e7fc 100644 --- a/docs/auditor/10.8/install/viagrouppolicy.md +++ b/docs/auditor/10.8/install/viagrouppolicy.md @@ -52,7 +52,7 @@ Administrative Tools (Windows 2012) **Group Policy Management.** **Step 2 –** In the left pane, navigate to **Forest: `` → Domain →** **``, right-click ``** and select **Create a GPO in this domain and Link it here**. -![winserver2016_ou_gpo_for_deploy](/images/auditor/10.8/install/winserver2016_ou_gpo_for_deploy.webp) +![winserver2016_ou_gpo_for_deploy](/images/auditor/10.7/install/winserver2016_ou_gpo_for_deploy.webp) **Step 3 –** Right-click the newly created GPO and select **Edit** from the pop-up menu. @@ -65,14 +65,14 @@ node on the left and navigate to **Policies → Software Settings → Software i **Step 7 –** In the Deploy Software dialog, select Advanced. -![add_msi](/images/auditor/10.8/install/add_msi.webp) +![add_msi](/images/auditor/10.7/install/add_msi.webp) **Step 8 –** In the Netwrix Auditor Properties dialog, select the Deployment tab and click Advanced. **Step 9 –** In the Advanced Deployment Options dialog, select the Ignore language when deploying this package checkbox. -![winserver2016_advanced_deployment_options](/images/auditor/10.8/install/winserver2016_advanced_deployment_options.webp) +![winserver2016_advanced_deployment_options](/images/auditor/10.7/install/winserver2016_advanced_deployment_options.webp) **Step 10 –** Close the Netwrix Auditor Properties dialog. diff --git a/docs/auditor/10.8/install/virtualappliance/configure.md b/docs/auditor/10.8/install/virtualappliance/configure.md index 53deccdaf5..52fd9b21c5 100644 --- a/docs/auditor/10.8/install/virtualappliance/configure.md +++ b/docs/auditor/10.8/install/virtualappliance/configure.md @@ -31,7 +31,7 @@ the license agreement and then press `Y` to accept it. In the example below, review how the shell script configures the new VM: -![appliance_script](/images/auditor/10.8/install/virtualappliance/appliance_script.webp) +![appliance_script](/images/auditor/10.7/install/virtualappliance/appliance_script.webp) **Step 6 –** When the script execution completes, you will be prompted to reboot the virtual machine for the changes to take effect. diff --git a/docs/auditor/10.8/requirements/gmsa.md b/docs/auditor/10.8/requirements/gmsa.md index b569f7d577..8d52adab6b 100644 --- a/docs/auditor/10.8/requirements/gmsa.md +++ b/docs/auditor/10.8/requirements/gmsa.md @@ -219,7 +219,7 @@ Follow the steps to set a custom account in the monitored item properties. **Step 2 –** On the **General** tab, under **Specify account for collecting data**, select **gMSA** option. -![Monitored Item Properties page](/images/auditor/10.8/requirements/gmsa.webp) +![Monitored Item Properties page](/images/auditor/10.7/requirements/gmsa.webp) See the [Add Items for Monitoring](/docs/auditor/10.8/admin/monitoringplans/datasources.md#add-items-for-monitoring) topic diff --git a/docs/auditor/10.8/requirements/longtermarchive.md b/docs/auditor/10.8/requirements/longtermarchive.md index 3c8da0d0b8..eec8df26fa 100644 --- a/docs/auditor/10.8/requirements/longtermarchive.md +++ b/docs/auditor/10.8/requirements/longtermarchive.md @@ -29,7 +29,7 @@ viewing the Long-Term Archive widget of the Health Status dashboard, click Open **Step 2 –** Click Modify. -![archive_modify_settings_thumb_0_0](/images/auditor/10.8/requirements/archive_modify_settings_thumb_0_0.webp) +![archive_modify_settings_thumb_0_0](/images/auditor/10.7/requirements/archive_modify_settings_thumb_0_0.webp) **Step 3 –** Enter new path or browse for the required folder. @@ -62,7 +62,7 @@ If the retention period is set to **0**, the following logic will be applied: To examine the repository capacity and daily growth, use the Long-Term Archive Capacity of the Health Status dashboard. -![healthstatusdashboard_thumb_0_0](/images/auditor/10.8/admin/healthstatus/dashboard/healthstatusdashboard_thumb_0_0.webp) +![healthstatusdashboard_thumb_0_0](/images/auditor/10.7/admin/healthstatus/dashboard/healthstatusdashboard_thumb_0_0.webp) To estimate the amount of activity records collected and stored to the repository day by day, use the [Activity Records Statistics](/docs/auditor/10.8/admin/healthstatus/dashboard/activityrecordstatistics.md) diff --git a/docs/auditor/10.8/requirements/overview.md b/docs/auditor/10.8/requirements/overview.md index d984e37bed..f2121eb7ff 100644 --- a/docs/auditor/10.8/requirements/overview.md +++ b/docs/auditor/10.8/requirements/overview.md @@ -19,7 +19,7 @@ following topics for additional information: Netwrix Auditor provides comprehensive auditing of applications, platforms and storage systems. The product architecture and components interactions are shown in the figure below. -![auditorarchitecture_thumb_0_0](/images/auditor/10.8/requirements/auditorarchitecture_thumb_0_0.webp) +![auditorarchitecture_thumb_0_0](/images/auditor/10.7/requirements/auditorarchitecture_thumb_0_0.webp) - Netwrix Auditor Server — the central component that handles the collection, transfer and processing of audit data from the various data sources (audited systems). Data from the sources diff --git a/docs/auditor/10.8/requirements/software.md b/docs/auditor/10.8/requirements/software.md index f50c18df4a..2a40271587 100644 --- a/docs/auditor/10.8/requirements/software.md +++ b/docs/auditor/10.8/requirements/software.md @@ -117,7 +117,7 @@ small infrastructures, producing only several thousands of activity records per scenario, you only deploy Auditor Server and default client, selecting Full installation option during the product setup. -![na_setup_select_type_thumb_0_0](/images/auditor/10.8/requirements/na_setup_select_type_thumb_0_0.webp) +![na_setup_select_type_thumb_0_0](/images/auditor/10.7/requirements/na_setup_select_type_thumb_0_0.webp) If you plan to implement this scenario in bigger environments, consider hardware requirements listed in the Auditor documentation. diff --git a/docs/auditor/10.8/requirements/sqlserver.md b/docs/auditor/10.8/requirements/sqlserver.md index 53639fc8e1..55600dbe17 100644 --- a/docs/auditor/10.8/requirements/sqlserver.md +++ b/docs/auditor/10.8/requirements/sqlserver.md @@ -246,7 +246,7 @@ Follow the steps to change database retention after the product deployment. **Step 1 –** In the Auditor main screen, select Settings > Audit Database. -![audit_db_settings](/images/auditor/10.8/requirements/audit_db_settings.webp) +![audit_db_settings](/images/auditor/10.7/requirements/audit_db_settings.webp) **Step 2 –** In the dialog displayed, make sure the Clear stale data when a database retention period is exceeded: is set to ON, then click Modify to specify the required retention period (in diff --git a/docs/auditor/10.8/tools/auditconfigurationassistant.md b/docs/auditor/10.8/tools/auditconfigurationassistant.md index dfd46ee8a0..1a72f8331d 100644 --- a/docs/auditor/10.8/tools/auditconfigurationassistant.md +++ b/docs/auditor/10.8/tools/auditconfigurationassistant.md @@ -88,7 +88,7 @@ Follow the steps to start assessment. **Step 1 –** Specify the monitoring scope —select what you plan to monitor with Netwrix Auditor. You can select both **Active Directory** and **Logon Activity**, or any of them. -![audit_cfg_assist_creds](/images/auditor/10.8/tools/audit_cfg_assist_creds.webp) +![audit_cfg_assist_creds](/images/auditor/10.7/tools/audit_cfg_assist_creds.webp) **Step 2 –** If you launched **Audit Configuration Assistant** from the **Start** menu (not from the monitoring plan settings), enter the name of Active Directory domain you want to assess. @@ -110,7 +110,7 @@ At this step, you will be presented the results of the environment readiness ass - the list of current and required settings for each entity - the list of issues (if any) that occurred during the assessment -![assessment_results_thumb_0_0](/images/auditor/10.8/tools/assessment_results_thumb_0_0.webp) +![assessment_results_thumb_0_0](/images/auditor/10.7/tools/assessment_results_thumb_0_0.webp) Follow the steps to view results. diff --git a/docs/auditor/10.8/tools/eventlogmanager/eventlogmanager.md b/docs/auditor/10.8/tools/eventlogmanager/eventlogmanager.md index cbf8343eb0..d8007f56e8 100644 --- a/docs/auditor/10.8/tools/eventlogmanager/eventlogmanager.md +++ b/docs/auditor/10.8/tools/eventlogmanager/eventlogmanager.md @@ -123,7 +123,7 @@ If you want to review the Event Log Collection Status email, the Event Log Colle shows whether data collection for your monitoring plan completed successfully or with warnings and errors. -![changesummary_eventlog](/images/auditor/10.8/tools/changesummary_eventlog.webp) +![changesummary_eventlog](/images/auditor/10.7/tools/changesummary_eventlog.webp) ## Configure Audit Archiving Filters for Event Log diff --git a/docs/auditor/10.8/tools/inactiveusertracker.md b/docs/auditor/10.8/tools/inactiveusertracker.md index 2a91d2d73c..a970e99d25 100644 --- a/docs/auditor/10.8/tools/inactiveusertracker.md +++ b/docs/auditor/10.8/tools/inactiveusertracker.md @@ -72,7 +72,7 @@ The following variables can be used in the Inactive User Tracker message templat | Notify manager after | Specify account inactivity period, after which the account owner's manager must be notified. | | Set random password after | Specify account inactivity period, after which a random password will be set for this account. | | Disable accounts after | Specify account inactivity period, after which the account will be disabled. | -| Move to a specific OU after | - Specify account inactivity period, after which the account will be moved to a specified organizational unit. - OU name—Specify OU name or select an AD container using ![select_button](/images/auditor/10.8/tools/select_button.webp) button. | +| Move to a specific OU after | - Specify account inactivity period, after which the account will be moved to a specified organizational unit. - OU name—Specify OU name or select an AD container using ![select_button](/images/auditor/10.7/tools/select_button.webp) button. | | Delete accounts after | Specify account inactivity period, after which the account will be removed. | | Delete account with all its subnodes | Select this checkbox to delete an account that is a container for objects. | | Notify managers only once | If this checkbox is selected, managers receive one notification on account inactivity and one on every action on accounts. Managers will receive a notification in the day when the account inactivity time will be the same as specified in the inactivity period settings. By default, managers receive notifications every day after the time interval of inactivity specified in the Notify managers after entry field. | @@ -110,7 +110,7 @@ Follow the steps to review report on inactive users. **Step 1 –** Click Generate next to Generate report on inactive users to view report immediately. -![inactiveusersactivedirectory](/images/auditor/10.8/tools/inactiveusersactivedirectory.webp) +![inactiveusersactivedirectory](/images/auditor/10.7/tools/inactiveusersactivedirectory.webp) ## Registry Keys diff --git a/docs/auditor/10.8/tools/objectrestoread.md b/docs/auditor/10.8/tools/objectrestoread.md index 89c37e4f57..2f7e6baf87 100644 --- a/docs/auditor/10.8/tools/objectrestoread.md +++ b/docs/auditor/10.8/tools/objectrestoread.md @@ -48,11 +48,11 @@ drop-down list. **Step 3 –** Expand the Schema your_Root_Domain_name node. Right-click the CN=Unicode-Pwd attribute and select Properties. -![ad_object_restore_1](/images/auditor/10.8/tools/ad_object_restore_1.webp) +![ad_object_restore_1](/images/auditor/10.7/tools/ad_object_restore_1.webp) **Step 4 –** Double-click the searchFlags attribute and set its value to _"8"_. -![ad_object_restore_2](/images/auditor/10.8/tools/ad_object_restore_2.webp) +![ad_object_restore_2](/images/auditor/10.7/tools/ad_object_restore_2.webp) Now you will be able to restore deleted accounts with their passwords preserved. diff --git a/docs/auditor/10.8/tools/passwordexpirationnotifier/overview.md b/docs/auditor/10.8/tools/passwordexpirationnotifier/overview.md index 8d6f424600..49774cc9d4 100644 --- a/docs/auditor/10.8/tools/passwordexpirationnotifier/overview.md +++ b/docs/auditor/10.8/tools/passwordexpirationnotifier/overview.md @@ -103,7 +103,7 @@ Click Generate next to Generate report on users with expired account or password users passwords immediately. In the Maximum Password Age Setting dialog that opens, select domain policy settings or specify the maximum password age in days. -![passwordexpiration](/images/auditor/10.8/tools/passwordexpirationnotifier/passwordexpiration.webp) +![passwordexpiration](/images/auditor/10.7/tools/passwordexpirationnotifier/passwordexpiration.webp) ## Registry Key Configuration diff --git a/static/images/auditor/10.8/access/reviews/admin/additionalconfig/emailtemplates.webp b/static/images/auditor/10.8/access/reviews/admin/additionalconfig/emailtemplates.webp new file mode 100644 index 0000000000000000000000000000000000000000..6b2ba62a69062332c672f8fed7b89e02f29da421 GIT binary patch literal 55746 zcmV({K+?ZbNk&Gx*#H1nMM6+kP&gp2*#H0#O9Gt%Dg*@D0X}Uql}IEaq@g8qI}nf! ziDPd3LfIG09#<*L;0-gh3+eyC?Ss4i-}+z5ugkBW?$zP}<4=>H^>yFzpY}YxIrIMC z-XGOZ`Cs>ah5yC<&-VlW3H_7(_v<&uPeJ}-|CxV{{gd~M|Ec?P|6kz0_V4(gx8Lu6 zKtH4ZrT^>f+y4*$SNvb!|DiwYzw7__`+lHF+PnXE?-%~BlmGI6_&V!YYup3>pa1{={@@?_KmY&p_W<>e@UP~d)&HaZ$Ny&eDe?cz|EK?P{|WwQ`uC$h zjQpGSPwgM&ztjI*_B8%`{0ED#PyRdp|M<^Re~x{U`}g)g^Plnmx_fhvlxc`Iyv;EKH7xGW#AK<^O|Aqgj{ww#x-M{<3*NsE`&-^dS-{1eB zUs%3Z{rmfW`H%YF;C%yse*VAym;Jx?@BjbxK8XC^`&aqz@L#+?>N&gf4|K_LI5Ay%(Kka|Of1dxz{!9P=|Nq4= z-~Z%)g8wo9xBX}T|NI{jKQ;di|13<+5A9iU%DY*}z_O(_4Y-W^Oj-YhjJ2#C{7tayyrAc9%{%AOoj zZ!J?##o!n&d4_%2^XzJ8t(cB1AfB@k#e@=%KxN`9R5495Oh*CP3fXOD1$7}?(i7h0C`A|#rg`^S9_20p+i=RQ0d86xHo+3_ zrbi^O)arQp*7OEa_MpC;r03!NZd3P21`P6-zRTn8~|pf$-Xk`}l+*GE6V<7bg(PZaop85}26e6xa!#`}66Wll=YCr7l#e^?*}ua#O}3L?_N zSkZZK*w)!n=*Fl8hTtB|K#iO#(>lH9!OO+p9t^scsI1R~Fs2xn&hZSqQG#CQ%esj+n922G~gR}0Ml#ICch9j5`iXIE=a z9k#QPfsjn#qLsY%DGqtY@S0SUN5ZJTEpJ@+oMLGhq!N(wQLh@m`rG#*cA@IkmPqL{L*s=h(~(|-Fo6jF_48g-IH=Sb@JP>b|oTAW2Em|oNM{IsGx zTNTDwEhS@mLW5Kgv8MKgbApvPdRE;Z4P7JtbxuvJ1qY`>VTAUEqKEIZXus{)Hm3w* zcX!mX5ko&|VVa zTX==m-&6yUMM@|u?E7_u!29MTE8TeOLxN0-JprrNP6}7i4Ju&lQQ<1t+NVR2Pxb>> z<_X)h3EW_e*FcAQ3(m@Sni{O^+`$3MdZK+wphcS;idi*CUw z_)tbHC|F)peGJIkf5Cs?wnO}cz(&8_XH`S4s?PX=c~wenxGjXmZRpTYa|L4^GUSMd zQi$J^jG-Xy5~C3q6CiX$Xt=-ITp5~;Ppfj8wf9x9^>h#`>qm&2S&``gy+>g7x6z2K zZM!&&aRD+BX%`)5)@3e9eZ*?f#aeqnUr6$4MhdU+oz6&ugG8@657WX+otMSuJoN!h)(Z*4w}&YZ#%f~Se< zyen>ZTl!RsC2Y!HL%Vru1e9CIkfwLlS<v!lPWUCay|R5WE(w{Dxc z`6#uhnEPA(0VQl%a}G_`>nEP`i3SM-GNOj|RpTFjDoP7z%z#5bcM|t=e!$ODgRr-qCMiP z*7UV><&o{H$!k@RDcb`DLDR=5?tNik)9#(TGPZ&2Si^R8%IJ-2u2bE?Ii3y8HiLv@ zD;37=g4WF~#v%Ft;Yz|LRAll>X70vnGX2FYd&R;JOF_n4aaD9Pkj}G^6HvSloG-@u zN300J1kjLhfJkQW5&l7Yj@VOpYP@YQAjt9hqjjyhg^w~^v>H~dobJur#bKN7N4$%yGEkc#wH)ftut5unJ~E zcK6Ovmm)l)m$^1C>z(LFDwI`G12qnkX0j-N}D- zWd`LUA!yPU3UQ?k4C^WcI@z-E5iA1T|$`bmxaH3QAEjU2v|;BzzSIACmG(Z{S)zQ-FfVw~%#TUV+_gh|2;3i*XeQ;LtjOqrLE9(KikkJYvgh zQ+F~IVMVH53CzpGb)#A^8Bo@S>U&G4m~xH1K;6V$&zhPdLZn9 zUXK{>f+J@8=Q8r$-c)bW#B;Jm_urYm5)2lfx)+3did%j+PvhR^3+f#ylq*!Bk#bGH z4|cYQZcmNE=p>dHM0b8?Fy>SODJnh;Z{y-w2 z0G;O%&H+z_UTLW{-Q24H(C4ys4l2T^Ub{%hv}Fn?+^_ICn8dBz%@cWcjtfdwxOv|# z*jaddz&+*nT(y`8vGIhg^pP^MO@)`gMrQIdmf+EzV7_JyoTK?`ElwTCLGjdj22_dW z1bZ5??qCike_g#JJ5XD^2hz|c*P*rJkrzpx6`sg>B{ON4XG^A>xX4NBGhS}zSUVs| zl-@Ep&)^f7ueV^)E{Q!PCNy1NpIwG36o?uLEV$0yN+#Wf+kvjX06Zw0H5@K%gCot& zqhHMckw4v`THmuwooLNn?%=Xv{tM9FGS7UnFf1gDjO3KaRuNZ*GHgK+-TS)@%=uKT z1cs!%ZkC~NS*oHG5qOB=E0#m*QDVIIyjfyTlQJpJ;D?-vJ1lOIJ!StOI>=>PWL!&Y z%-Jh%Ib#MuD(3Q;Vhw?yQEUI<XAz1#`%Zx7(-wKt_7L9eY>U1y z*w7E);m0&H74)5xxvWBy)0?0A-RQB#4mxA!Z6U~CAcr7DYJoFY8o9)pm>#Kids;5) zb!%4t2=&rv3GTncp`8t+>LhTXKfJLYY#LtmU9OVCJ26_)nRu8pc8zQ<{7lIOD`A3c zs_5TL13`{K)sCqtZAF?TxRa(Rq2D<+Q?0wxK5!NYjUv1}D!*5vuNu78{Ptfe*6E&m zE`OCqi)?&L`zyit=1O(>MviRGirWi80?<^%Hy0X z-DVL|XL@8#7Z)f?1z13IDM533Li_fb=m4Z>IZ_&%l({q3T2Tw(`jvVD?$m zeGH-HccdD-(mA6fDlqAIT1}_f!aT1dh5Wp2E<9pBMxQ9(d)F$FkFOJ%F0a=8Ens;` zewg?sEo3UmqyV&Aq^Nc|7#0%7i~YCBDVw`l$iT3cG+*t$Nk?ZR4}vAea#^6<O+C z0RGzI7w8QQNL&dSe6Refdfj-2BDA(gPPRPJ;|I4~12!ho6EEmNSq)j*Cw2E*%~^3g zftBnsG~THf-)1{rtIqWRtSBbnN_V1ojn5MrJ;`sxME}|Y`}^2HI#KZ-(81^}z2=yQx3A_(Pd$NrS!m zne`vX&d}bcC;&Iw8VLDGzyKoIrc@}fe@3TZv;W9>ZUGufljk0PAm(OJX)>}I1Z0aW z`YC1SL(s`zod_oiuZH&{OD*}E^ZSTIbMACl(K7@5%hW?7JAodM(H(%g^@$rHr>$V% z=Q!H4jfUo07}Kt^-gfh+(f zX0ndLZ(&pAQ{H0jFVd0cG#i>#P{rs?&|9FC$EU_mtPZ(^$49+Hg`VwYt2_&IOW`)^ zW1Wx>wye^wn`@$i7d3@)EBY3#_5Cem332wh3gYGA~H1HJUyd+VBOyKmY-9_#ggi zH~X4ucm=^@f?DY1fB>=3=eJ$oWy5NFdP(A|Mp8Pe9kkYz>yMnQQ`)}gf~jTie0;`p zpn%Fob({r|i6(;hX>QH9yU0+w^hU@i_u`og`dOm%0$Y}k38pdAS=Tm^D)Xxu(M6Mz>U2~J$2Xml`*nDkIQQF zHIl6VAZO>giv>t^v6Se@=V**w{6XCi0R0<8csm%iCU3j+;#AB{PIF6ItcS0Mv(c!* z)P8D}bEvbp^~N(Pm4mXxra&SAhz@_mo;7h{#UZp_nFm%3&`$=en6k!N@|#Oa{%8Ma zaJ*6ON(sZ~?($=n{QYztl$&-=Elj=6z;zXW(Qic(J~xSi#`TSSHCN@6r|K*5kOl3ZbWejcL!w%@E_it>aLZLZ5uiZ5Uzx-w2-`B%-vPKn8HdesdN z)NG*V+HNa5kPnnj8bzNytV0q+{PTm&a~&Se+oyc?tTh%qtSMVLb5~=!esw>SMbnCF zXrQ|;B9opL9KamNEIQ!SWVqR*8R2zxiW+)fHM@MjT5-O<1aLlx^(s$@9p9qpS5&`* zYD~ahzb?gHutU@y=luxrW5-_3skCJt(5=S$#7G`P#kQ1&2D{#=D34&W?HBQUnsLcK zrO4P9M$~)6qV!dC_-DoOo1n*-)--f8*wgVe8oB94=YlxjB`#4q6pESpS1e# zXOlQncX*9{yKQQ*lQXE;KFfLF&00sDmvp={7pO zOg}e!r=A!>Qj(6uSUNl{3KL@jVRB=LtelE)ewUGR%lrDig8xLkbV(ByhaqMJzG~H| zlco)>j~Zcamdw~}DW_DM$uw+GXiqB%O+{6t{~p#_7yuEm-yH$~ix+4D!G;wTgC5|P zkdPW>TL6f7@Q*vRF>G_adO##0oEL5Y;=qr(c0kNPqpQie%N@6Rl^(WZm#*G@OMhS% z;ye7b_YQ%=?>l@?C;u%!=hu%H7E$$z?e8z}GYT6$>1W9nM+BLtzr&+{H~C|CR64ZG zAXCs$R1-JgQOi{&V5z|9ZOCEz`XCFkXnkSqJ)dY=4jW^^~u-fh=~GF$eZv`d`J5xv?Q?P?@{}>(>S+ zOv(nFRMZizoHedXa@`A$Iq28>!%9%iWejkcZmH5gJp}Awx!+M*Hw}o~;n>$hXdi%e27`9b31)?CZEO_c^nc0ZX$DYb z2dl)XqqjA+-+p=G{5OELGfQOCicW&>W z^#KwpMelNCC4xt@l3P7-Cg zh|u(5q)>U01<8|w{oz1^<~F(d%jbL0-@S<0r(%?SA5(&{y#SXe#Da(V^5A_4yGfwy zgJueeH~>j$>%fWz4OJ>4mIxu9N%G{S(^4$}DAm(&#WW8F#HbYrq}$&EOc1w> zLS#3J1MpNH9!y2CgzBsh#bbo~Iop!GfbsY_K?z*<)L6ADZjZ#I1fFuqX&Pjd>xU-i zIQ+7uZK4);1r2IES^hf#4_GFwwE_41>+AX@$5}>#vP*n~*P@c`iaxGi-F8WfK+UfY z!l|+kR%Wa1dJR|d4IHNcNvt=8`yUcJ!L{h4wq=r>y>yd{`vR>NhMLb&NI@K< z$1@-1&%}OE1^rheP9d6uS2+fjhp{I~>h8YT^ZmxlnB%ayZ60Q%{I=3#*_=@-s#&uW zUb8g{bgr z`kTux2_EHDk4_w8&xqY2kdQQ=o(4$@F=|axU%9J^#5gqPvVgQP0n~g&BMQiyxp~Uz z?h3U1F!_}{h)VY5X_io}f#Q;jTJ-q-DiU7OVFPdWcOazz5N)3y<7=s*t&bU%-yE(h zYg9H!)gK|LWG5#!0BJ--M;%rk2Q*2OJ0`8nC?`XD)}Mo3rx--?;+aiI>v}-tJr-@n^U!_t z_Y@%4Fy%7x{gnA83Yx0XGp5L1s=`3njh*dpcP=&D zr-?}gd}h`M)Js3w_VYKWx)1ZqPL+iXl50G)2YrG}e}ZkvO5=DN)2o$~(|_$mEu|?E zJaeUC;tkQj2*qFkN9AJU3stD#+7lx)^0c_?82WiQ1Gh205k&^2>BnL5&}t`i3*6xK zPDzlncVYcN46&!1IZe1X0gY*4LHM(pABXgQ{aw66ym391e@5W5^HWH{b|1*~E&0-s z%{wF|0t>6~UT6`Z%#-If{&>z>@bF7CqtnK}b<6Mm#X{#FfI#OEQ^SvZ;rf1==Cmyg zAs*63;E#vcZJgI5vfU7dKc=bAMo^mR29u0aWG!FVw$3h@Q5)y3t3!4FdVEBiegQ0M9-usk)x}ZRg zh!~%etyZEzgYi+Fwi4@OwVMe)<=ANguHC>ilu1@P@T$Rj=`mNFSOz-<*0(;6tg8_O z);g&pfwKr|6|<}BWErOS70lbP%_HGsP>lC^9smFVhSVKC4=KyS2BJMtTwN}GU|+_` zR2(FykC*ano+|lJIJmreo8I60B>+%sp!iy)cp_#Ir%>zQD|yEYsELpPXHbV6XTMP6 z_@HkNMT(!nl<~-Qcm@)nOMg`!ccl?FZFFK3s+a&MXY7Fl5Itoxnc9}wXjbv!b2zBe z?I^+^2ND7J9z%U<2Sd8cgbxx$VW^Fd1-&CR9uxClqRgE!(E3(3?P#N)h?cgy zOpCZ#xQL^d(u7&OwYqZ?2S*c5?o=7tk#pJ zabCg)Z3ZU{i(P_PRXh#Y{E}5?tW1?QoV+!)o!0Eq@mqvK;q^+fqB;G>=ZW)G@xx+A ze4Q=A%0rtgC3`LJ0lmeHtDd@mJdl5mXjQ+|$Ak$b6p}KyZTT=8#ua|a1)zD2@)>nK z91C|KYfmza;2XiP&D>o)hkjj1aCJ96elS3#b3nWt=9*<0M6P5w(FaqEZ1^3XowDh9 zIdjiF4*xl5C>oLzZDh5^xj~ObXBtqxz!$>r&Qy@G9fY9BFx&t>Qv{~c3>kKCx3s+^ z{LJ^_28$LPXz!O3gW9{G@3Y?isgort5Y#mbxRy48HJVxcmbm)$Fl;0+4iS!ol(9Oh zvb9OC#SZ)t@-%ypO4a6cXZn)y)eRgI%OaJc;l7+wKdq1iutNyB8-ZMPge@%28LD0s zrWB=ks?1&?4WG|dD(HzZJ+u-`$L7?3A`EP0_4)@s%|kekTlV;mMUuP6H1UI zC8xcgR=kn4C5$>~0#)E}o1-l2MrRN|_K^Up|o$Gb>DB(UvOPv9MW z7yN^!Y^B+$Fu42&#)o-8sV^zA*$k)jhFHQOk#xhb{m<+exZS7CUAeQUHNsTKjZ&-R zd9&Hd@~T8D#K!`ez(#X@s4K8&h9V34e$|O%Zts7{TW{iXhsE0urKM=f_{YEKX|ekq z;^y*l)7TFs-5|8Y8@wSS7ob%b^#;X}dweKp$-vKf21E{xq4+imgh`tC%g)`=49SP; zV#}5oZa_A_Qu=fRaq*piidQ${Oqd;zNEKsrB|KRP2%(WO_rMoqkiC3kRCePw;B&8o z-G$+FJUjQR*#Rp^cKzF!=L-{h^IZ`@EHf@R?|LT&gyrpSzpHMgP9g*r^iW)iCXB(9ir@u zO_%X&g$)fY5|n2tF_D};Q42c|%(v$0@ndTe^V`6}1=<0cVT!P6VC zv{2gNMCyVDwhLQqivOJcr{_>Ysdl_@akz(ZS~;=Cd#@|8mR${BkMb%zo33Z4`@PJ( zPgxA#P5TXn&LkNX=`p%b&hW6yG}oBdwyIrFJ&@#%!s5 zhp7xY)bN<1*_sd$=4r9a{ddqX_uAxN z0NCWOd1g}dzq4#gA#aahcO%w{`NO@QLn(sG+m1J3#IdJYjASDK{L=o!*>4l)PG=po zl+?fV)nvbw0&6m3P?fRKr8WJ2#_@?&FOx1SG%-0^?u6{HTV-+-$5|hL_yO=f1j@A; zjR)x2c3)crrda1ro5))&-m|ph>X(wMxIsk{Oiq9ihKSUD3Cznj1E%PVLwVbuw z;Ce*aSNx%Q)816G4(sNr+fXK`zC8?pNhD$2v>9Qnl%`^!FAmGM5o*1=9G&ZIi)84N z*|bx)6b<{c-cUqB9fV|}{E|R5fPqHh zHzHI0t$u`OtUFH2Csl45Ag&R`gNCo>0-o4u?(!Gp{v0`8xZkrlJ2V6llL?0Dn%g#Z zZBRs3QzG*}yU@T_YiS^)1pGqOl+@b30DUzz!lMymdTD-uc@8T=J(u@(*Dkw{TDo90 zO$$f<@nGuH#0|WrC`q3Yf8Gm42p4+(9}GM@zOW zh*BhVw@MjWQ5L1u+ol)mWFJT?wu2C@qX(Z6c_jhk`;qy zg4Fa;FYG15a_2q8%`s{|UNg%^t;p({z{9D7PWRXY@oc$`Z^Fuv+|x$#~)@EB#YUs@*9g9!5l z&LsQ<7eGbWPh`b~B@;(VeyCH}hQ=Z0$eY}jF z!^Z2@*|ag07fii8DQ=CSfD)%LR6AtaEd`S<9L$QLEpFQc?^vD^l~Y}lvznLCIWa;? zbFvqF-+@MKv_&@0UsQE*6eSBKXSpTA!$yk8!Z_o)QPW@h(&>YX0t5y6$^_F1#xpvw zJ+f8Hgp38y4Twt&#nF_e=KA2RB@fSCi*ki4Uj9N<52()qILfMCsgbL?N&9p z@4mVb_@%iq>Mxn7&R*^O)s>eD%211=r824R;|pMp14)dQ2^uHJk!q#>(<>?NXO3tt z9E_=|vhktji@{+4MI%leDOLIfASbG+m(e{FsSQ2G_y7V=roELv>QAyCfD)T+V*tZ} zOc(-E;~xEovNH+zuHp64ftFHL2w66d6Ai=B$YX^HCp-MWsY| z%1(84FM5N~p=k&>tlg%r_^9GYNHd>-5GKM|u|Q}uYbbid-64C0cg)xj(OE~I^&G35 zvsuUiY$>PiVsI!(BC?t$yVP7dq3z*(Wag$!&!TPdU7aoNdhXpsjC);j18u2(V4qV6 zB%wGIk+zs&d2IEc#Q;s*HN2r|?c~Z^L4;L0T-d%(5#!Wy05e6i_+#6Wb}1(623;>3 zX|}`D87mMV8!997{?Iuzw8Xk1kR%UiHm@Nj+zeC;dcmxZnlsB@8N0>#{LJV&a$c@)*NYI^%)-e=*k2rf8 zrLij+dg@u9aq_El+Ayl(ptjpdxmT8<6N%{d#FeMjJ>%r;6KeaB=+#A4xv30_?RUg& zrO}KxmHBevw=A#uWDjy7`t&6#y61 zH)>UP4B3g3l#RF}D@(`b>^D$f4|=?n?_9e&Ii5KeEQOCO5OLL2`zByPuCh!K}?PvxWOgki%fW8FT*VP#hREBd5Ct^6Xb>LU3MZrOQ z!!U56>u^I*UHSxxi} zM#n$2sR4*C98(n&z-#Gev^4AM|E=DKKT&$~8Bz~2!r67I2Xx%*f;gd)b1GH~A(`{z zTfRU#hKNmD`!9J)oV`1!^)V=Z&yiR|q`DikB>i^d$DZm3q8$|n>@A><1 zemLH~MVgbG_rM%Lv#VJ%zm=JT25oILGKe%m8UQlds|{l*jMl+>+RLLr`r8h$@1?9x zo0ryDKfdm@MhX06qnI)}O|4`l@gNAmKDq2`{4jdMcOhTZz5x z=Zrj!pf4S9CRK!F6tCSGPP_N!`T%))qe}9^G}zKUX(yE1vWhA;3M!IYo9xU1RSx7|L^Mp1G&3OymGxrdcPW}&on0`ub$6MO zN;H|~5Fi95+IZ$|U<(QWs%XJt=5<+VytCem)?#(Gu00xq@D5pzLuDC_+M8?s^&l=i zMZEw%Y)2~;W_)(X%aDRc>+O}|pMs6SLN@WFxP7oI z*4(gfR|XCUn8oVXBU9m2Y|)yFzj`W!%8A?-Jfq4(tz*=WttMkvc038IJJ{L+v`QnM#&N$hK`=bg7<(QzCH38q-8S|L{>yi186 z%!2GRtXiOT8%fKgBg@1@ig&Lh1{cV3gAk$QHAgDXG}^k=aW-Xy-+Z0ZoN^iIW3%f- zD>Qp_a)STdAHGSk*B?*&oqp_f7wAMa2iU{^d#{H0lVQrB^VS(k4Na?8ON$BjG(I1A znsl2wu*{6EznZDCdUCmu?TK#E!_6UqGiVGKjUSJe{MGvu8}OjNNG_4X+yc`1g00^uo4m(u07Jy*dZHsgePFq@q_ z{5WggTZsNRn|-$>-*M7PT6IfjKXZPv3f@*=i%RFTihFpa5*tTqQ9#|nM^g`Lq++Ca zTmAqYK22Z;B1U$d!}jgWdR%@?KEl|xd^! z7k?%^mN|hl!5G(!#j7B=ZUkZN?na*Lkg$H03*QiK}2Ylf@&vp|iF z2x(>g+n1mPM^o2sgWb7x{f|wdU%^hkv!NPMVv+S7%0#}*8Nrh3bW)3aD*m*^So=|h z_QK}qIJ?0x{T56yKh&fk_hfd?p4sc!=Fo6>GmBGiG3`aJx`S)UI@2Kdv(Y@~<3G}; z|62n9Ts^1dHYB+!UkM|5WT@i(-q5j$dYGulIEC8t3n9eo(72K1j=L+U{svtsVmoVN z%LV188-feo-*ys+K*A5ge>S(8cstgH03cOrpEzCijeA@GM$RFPX~h(0@F=}byT$5< z2^#L;LIW4_5qfK?H+KWPcv#F$1CF>eCdM2|MW->6|7SFm@__hg?jF?KC#Frp|5LDp zoVAL!BZ%;Krn1=B?FJufPF2txBbsH;A0ux&SnR|Pn@U^%o#dkJ6-j&|e$sfEUV-7H z5;p2=71ub12DcUgK;+d-&@tlOiWkP;QC>*t&{ATSR5-XUMlMws=!Cs-m>hT&v~DW$ z``fAC$(bm+k}E=J`zPJXc-(=M%3T-ZG1q7h3^Dl}6%6Z)Ot49DK?NT>ex$VXx-^OI zvpKdU7w(D467f)R8{|J;e2m>PA>DV9pN1tLP7p*1tFnk!wqa|9cxm6E%yU-B30D9Y6g7PJQUFiCmr8l?<->(Nb^iK~Z=Fvptls;SXk@4U1KW_LoM zm>vs`ssJ1$%<@s2e-Fnq(80zb3@&WybWK)=u|_94`_64?wXdi#xB-#h2#TGXf}_Y` zLrvr8Hhfz&jT%2=;BdeAj`} zVANDXW!>Yg_uiHOxeAlTY6W=qB&PySTm4EZ?DNIXye=RUcEL~X^(@rK5@jd)wB@X; zSk3g1%@mLLh0@(r#Ptw96r0mQnA$N?93oL;&MWvS-P}ysqa5xxem7Jy2&ttOryZa} zwykH@1UYI~$rhy^IN<4Ef4^}TFdaO4fFVYNx6%m5+jX@bdT#Rx0cxe_2Dgr&o{is8E1u}3=sGX=Cmv8|prwj#%Oi!~`{eQsGXUw*Euboyx*uE9zv0IQu^+>B;w zk{ICZP;i?c^WFclAUgl5QvacQ0)sM10f_Q($h#mNfh-T+(l6ce ziY#ZjTtiPl#`f=>wGE{FGi#1+3u!N25YNp?0?~}bM^k=&Bqsu$$%Ds_?Gchfq+=|I z0cO!HLyLP2y5!qk+IcdVwbhJZsC%-=Dd?m3g9q0_B0pAtZL^925XHFIAm zW6)P9^6B4i_JoRHFM^N55N=2M!Tc$Uj|Wscd8fFM5JPrj!W>X)1y-uBjo{;UlQYyM z0Om(~c46Ob9oAU{jba)uGL;u{sTj#nadl3=Xj6!L)?>fXx-@8^dp~E|Uuj5XH5dxc z7_7QJs|Wfti;$Oudt#bC%S~kJ12WC%f8%@;0aX8MThP^ZPhEMKdY}3?x%Zq4mao1y zX8H}G#c3;}Uk42k;|v8*u4iwS>{{iK=I>0pv7*I*hpBO+Q1HSr1i`yYnysl{{UQm4 z3*#KY`)u#S2P8C;qa9uE#iuuv3o1KlRqyGDYAYR8dz;riL@w1~2Jr;{@Pyh&rk`Q$ zJp3y%bUK5bn zTU(#T2{x-R9~YK@>+9*SKGMgI;sv0Yq53mM?&iz z-4S?qhmI}ZObrv@iEU3|2o|=tbefx-+_$YPW**kY0ch!6fXG%bZX|k1ly))f@kf9d zf6hgHSHo1Hr3I-OfYIc6AbaX5ee=AN&|*E^u!`QXF_UJpu#OnRj>mNcLi zILL7Wsp5BRbAma+e@FmY5i+Gpxu#t`hg_eqlr;G@+55pjHdu0@n+k@oo)Pm2z`r?A%IF&F zX8ffa<8rH_%0ixHOwwSfGo7pt;Cy=>i*)LWb_lScM5WDi zXUC-3SwWl}O<>*Da|~fdFs#zWY@IxgT|5X8@b{*DpN?R(EGQPnY6VwmfR<4VZuL5E zsN{S)ik^)-piG|DW@fNiI*1&8RMQs#{!$A;FY+UB0B?7|WCDOMU~3dyaYwt0O4PgQ z**M-MD}xFy;XMbKW~2HtB}KGuT2O>_)*>Y> z&hI-W1LE?~9esTHdc!L4hw#+V-sA>PE!%!}>DSdGf{Z{P4svZQK$k)wwcB=^RjEx05U+$zf*E25V4?wLsBw;!6(e`rq=)QT2AA%{j{K%aDYF}2wwC_oJxPCr&?d~ z{mAzoC!kDcTThrpwieYn?n{JzUvD+cCUr5Z9@1O6{}oGqwL>>G zZe|b~rlZzM_I|s}*Xf1A?^f2j?qfLTcop+%vcM^pCW5MR?VxPTlg+HCGhD+h#8AwR zm8iksok)_{ja;sFTQQ+wFaDdRDP;gAQ(no3tN`9osu*28l^8Y{ZQ=AP^!t-|1oe_} zCQeL}BBm86>G-f}x4v>xhIVIMNt!L6@|5-0i$1?;qBR8&kdg-X%!EViBQU-p$Cd(!cRXu_gi^057A!Ff zUV#|z;KM|!eJx!K+s<$G8gohFR&D!L(2Rq6PLP3GTg{7us(pI7#dzF1IwV8<&xIRA z#@vNHWLc!uui5x}CNk4#VJDM^kDDuF8L0~F=SfutTewE69e2U~BWy5Fa&CitH2o5g z)FBJ7(+iOD=Jj5yl3>T=iUJkPe_B{U1?x#%rNjlRjy1)r*_P|D2Fxllvt3LXn3Y@p zLkITran_$8Tl1(Ib)80GO18e=M+^7i*zyklIc64S&*_;Eti2 zA>yfVNEJPa@rdNU{hx3;{ z`TkpZbh*0jR(pOm<{vuAK&)6o%qhFa0coiRGTZt@5CeG2l-lti66bCTGFH~sNU3Fu z8kI4Cm@GZu8-#Sb`UiOj}Y+lNOR(GgD)}SSNb=MVG z!;MmBK75>cQ;t>@j8>XeMzxP}BmW#A*+4E?s!WCqjsKw={1~>`^f&wr5(-kakyw#{ z;Q?YKG%@Bvq+Kuh))`5c{c?S+_dFG*Mf+v1nUdwqAxxG8<48Y~thK}f%WS7|lDbDx z_q>3^>)CXkgR=6bL-V-x66dLo-xL%O(_>J&S_1e--!bE6o zPj`X6l*VPH?qB6Qd?X^}B0vX7UFv*69U_tF0;yOOV>J{6ld?*EeW>WAt<5zgdcAxqXA$3b>*U!N5X>vp#7 zDEy5M3;AN+b!3_|T$Xl@MI;h(_(jBh?#-r+cZ z&9LeWJ`^cHxYW9U+6OfoPN`H6g!4zwMxZJ?M_1_f3?(Z@b{wnVt}}WF4F;eeuv6O& zbj;=YvP!&|r?$P5ThP8CpDuJQ0x%10$m~W&-&@>JO}BaGj&br;`D=N{FY^ct^9|_M zH)pI41eD{Lf7*DnL6?F7`Qw(>^@}pXeMsG!)Rb5<@@>oP^9NOWW*sg0M1La>BPhUj zS~W{)&DkZA7s7qq)d!fSs=}eo_Craj&<<&3vL^$Uoo@Srlc`*dixO}{-)o-skhe^O z4g!?qtJQg|$d@2DzqCo8^TwnQq!DK$`w-KNT2X<<{=&DMJsCZIGb2T_9n#inSgtOr zDMxUO%HRzvv7U_Nv+9s5;%M(>{Bz~3yQg5~<3TnC>M8}5!nA-Amv%5W;K<%TBmG8i z@@Dfpk;lVd&vCjFcEZ`YT>lk*eEcrqE$(^>S%Ia4xtr6DB5+I}1N_ciE^F%NU7ihe zhKThf-VmUKj6L7UT8T>xiX^ZwwdQx{orOx z@&jKknir&VQoWjCd71|3QoGE!yG%t5<;3ydZ#jkvtlB&U#Iu6F%qVgfJvphgMZGiuhqUHJ%27vR6zCG;8{dB{3w9>N(nlzTqkHd^wFTl z`)I|pyCl5F6{kMwRWLEqShsdOpw$qb??O?ytD(jOY>pJszJWpKGB-^{Ymkz@+I((2%0s`(dWwslL1sBadcIFyJ&n_W&b{Gaqch zKwAx|V1P!QC2c{9swezLRwyOw%k~*Cop>=)P@$6grf!PGT>yU!hk-2WwXAW|4iRifkl6-dWlW7W?uU%(^418|_npE9I7k%7 z+jJ;j zraC9wQiXXR!(qdL21<0laquLDfFxMPtfVyzDkY11b0ZK&3t=OqmGp4pR529LDjqoi zQF@0DOLE8$cCdXz?NYz)i7}+Xl{t{NORYGTR+S(}+zPqd6}vqHsX3PDZl=6)sL^ml zua!cn)O-G`ZP1G5-$`GbLN^S?vpU-X0i}-)P<0_-&lW%g*27qHXvHnznv!7+Pm(Gg zAeRiwedjQ!qS@}zX0z-Y!`?(zxwJrf3FEO>%oCTX8%1Yi!$bJ+(5YP=6gpU;^UNM6 zdXmKa9uHEA=+V(@rXuhlOh*Pvd3HfwoybilEMLxftZRGW^+pZDjkuSB8_i|MVb7b5 z9or#^+jW|MNVvrDlvv;9Z&4WuPGzI~$;G-Iab%cB`Vg(RaXZpO-aX*TkP*N`F89Up zV54gR?m3YK2dD4+_@#(;=Bp1?_pW4Dfuo{uu$U<*32H#5a&%0sbRPf-G9y!Kv?v88 ziaC+@eR1DiVaZ&3i>Fu8_{3V*9LNjOYE4zMVpAz;anYFd=6Q!T_T92Y3;fo|(Kiof zjg$g{PXFd@6!c00HdYmCW#kq+0LWFNLpMAAeGsPojij0*@zhsa)CUqLZdzDWl$Ym! z?n{~9fCS%}=;y$W&$~VCo?3~PkuxldhqpE4>~RJlg=D=2i-9WKU; z8=?QfF)sT`y~zD*%YnOCjN;H{N{*7NeSG@Aj$d{yEHL7hc8f4+LGM8;QVgQnFd&bz zLjqmnDRrd3vpX7Tc(iK>L1FY-XEcwL7RF=DpdYZsV%dTFc$7j!!aT~Bi_}Z z4Z{v~$bpT1 z=%uv=4Q)Thkn(e4=nY)3ApZF?N&>GO)Np%J**70^#%t$Q>ggZW)k;YK2<+#tIz!wi z=7ug;Z2RGo#$c_^O#8AE9gLcZez?zXPz5gWuF4sQ`x}dG=4duSBpNCpSckr1k{pya z8asp4Ib#IIIazpGN8QNnnoi01fIj7!| zc0D*X8G2b0JsICY0hNVLl@)m5w-)`-6NdUX%5(TTezD;>8aGF|=crTE3*+yMHEW^FE>y{vbap9r{0#X%%Gb~B*Rgm}j4Zc5~b^T2%q{(|$?&)S%HP{U{ z3zSaRULDf0avAt@#Ku#f7gom2pH8=^Ep97(S)hSP%@I#|?@NLE#vqZuU?B{{W0Ei< ziV*_d0d1g-IKVV%oU1c(X`zUf?PcJie-Yr{>R-07u{39E@T*?qyf%^Rwi;(Hid@z{ zw^rRMW8EuQqAmQ|Yl(-0c=zQ|WGie9brkP&y96wGQZ!0A0Qb{IrDmKe+la~lFH%(I} z;9+NSZ^#K5d%aCAusD4T#+3e?^%RJy;^Y;O3$a9;6q{#@Z z8n^y_F6(9Uk~AIm3y{2~L!8}P{qZ0mQPGGK!k~eFB0gB|WCoGoI7r|b5#d#AanKLb zHZJHJr@ZyCZ-xw|&rA~qPaiK}muBvkWNi}G<4E)8HXL3qXKCI+q%osoN9*c20%bXh z{Ul^FsGL(fK_M&ukdP@j%a_zL%~`hhLNzYc=0{Rq7c^_GrE3~9mD!JQB<5qN<0CONpU-Fh{LQeO-X@^X3k)R+g_T8S-8k>&HzTW|Wep}b4DKGYj zTeAAq<$aE@?k~B7%J3=Il)OpeI(5@I#%m;CEl^@1v5Ug4PZ&~1)gKG!6)D=}vzUqF-G)N1!QuQd$m?v&L=Bivnn1}gmkzvJ;ntEO+KPTjui0sz7GAsCI&?vR zW%ui@tjK8^KdB|F_!SQ@og?7|*~19pX3`^dsu_6L_~NDmn-FWS z0V3f^tyv(o7C9+n@kZ`7_RCNzWJy!R0^NPK$z<=sGz%JBit)u}>V2`tYHUz1Nok>Q z{wqq*994{V8pKX~hc(7a(kszNTN>Us&*S~jUryRU$tDs`=|&5mF-?Mxe;i+NvC&2P z2k}f=_ph$8;Z%sU*e+@%zUR{1Yq4JtH*%Or_UKuo1lSg;B>;pU@(UgvIzi#qb7fPWq%1IQ5s&@J{}@I-5>0E-Vl?83#FkwD!TJ49G!SUlZ)?Nl#iE{*gu=oV~W{dKDmAPR&$B zmlW@cB&JW)rdd*GA5wIMJM7H7miTl7U^==bKHXoN4m)Pfp&)p_ZsLbc56+CN6)Qz8 zMlKoJ)ioSGlO7LU>EnBy_nV&hhU+>@gnlwn>)7AtrIwQX@Swiv+(ELNKhoc95eD``VHbW5v!<4dRT!g|3vI>SQPNvU)c&{4~jW zf$SDQ?*(iRWe41sxA=Q->3?`7ha27N0!#l^Bh1z{A( zJXmXue>ZEadI|U<3z6~@3jd5yvpFha`5W)aOMG5>PiL-?4HnwgJW{KSt z>AFW$mTYmdd}^|!Z;FBJU=sD>>J$J$7)V=T{z~)a0v0CX@R_BAjjRKndDs-68H}f} zFGM+~dA0eO3xHDFdU98aH6b5B7>$mHgyd<^u{sP zHOJK0i+z{vA|13+)i()_%pY`V-_Kj&6~mNqSC9g!!=Y3>6u(B?Hic{%Mp$(!mYWNr zxD(`6HV_9IGO>z5kEyp2r*`~&No+~*(^(NSe`1G@6r**f>=pmo@>|P|$V@23SIbX? z54na&Cusi5^dZqe>ie_hJ208H!2lOxo=#7Z&qf+MAC&svqbIWG0V0k%Se$@wmaFX^aNL;70+w!Xsv)j4gNSN6qYm1L}o*D6PwGX2z z#&y1(kAY0q1<_b4h zaUFHK9EmE85;ASEzqp4-II(fVhk|r)nUvhe$h@>-dM#=uq-lekenxLKVa!IIRQ@;{ z)gAmtzVI*`1Jc4XlcLAXNUn{g(dJKA^EFNc%SOe(3EswQ`$B(arh7}Y_zCBS1l?V# z?%8(HWMtjOVN@mgePR&%W1_oi^=Mi9ZEh>a9u0TV_a&3D7~oQKnfaSKA<^%v-a+K7 zx8GOkruoU>QE#%4TVp_cU6fxSSH;|7sDY1l76T&_~LI3^~Ug>M+Bq&?DQD2jlAnuN07tktLvZSzN zshcKZziWM*roTncm_>gfmfE*iKBFfH*>CFt@B1X1@ivEkrZKb`>+#9OO^+u~6zs5& zE#!o`6^B*qQ`{|vYUmkF1LUE_a+)E}lZd~cVuGdDE(Qj2IMw&+VmTq?=x&ct39ve( z!0^H!60e!X8fu4urfnM_yOXlmD$jCN$IFrIR1C)`=3S%eLgwv$Si#BENrGx9Dvu(F z`JOb=Oq%KB!q4epKpszPTveQlr4AR?<868$inEL~`b}8PTT!O|Zi{RPXsrQ%DMR3V z#!1*?>WI;^Vlw*}g$>E5w`althx645J%h8;f?z8^2ytlW=|JlyL;6>;oJA_B6aI}H z@V6SklQ6E;gZ;mVSL3qfsw|ardNBYSvsgJV-fQRAM4BQa&a5j$sCC8tnp*=IN6#Nl z^P$M4HOrcV>vXCD%T{1I@@Fc<>kcW>9oI5^0%FJX{63FFjyzzsM-DJNN&t|Ljz&{= zV`SoT62MKg`8?kj((n9$B5)!~9VWa-fvAV2HYy9EpJ)w?GsftzSGZR^$ z=uKy+4FvaE;$-I=^Vj@UC&oU!F9O171ytQOq`cdo!Fim4tWWhWVXY`4w_Si5*`BCL z0?OepUrO;}n9xy4W+%7vGK;(N=~t8P{F3tp*k?$*7twYI`8;0}DR$jAMVIVL;*gAm#mXy;I7)Jux|WS+r*iA%U`I(_ww+ z1g^QRP-wfms^-BZLc;f3GX4oV)nS)rV%!TDYxT=U5D4!S>r6Pl5${O$+p&AU!b<(E z#2*5PK*MwaIn4VV*DGwYGPxOh=LhX*BGj4Soj7)1(|GmV6iyKh_wWXi(3+X`9Xt2C zY7ex2#LI`*Q+X{+41TKzNg{R5pX~5!4VdH7!rlTA-SLltmpK|)3c0aN`;1oyHp6ef`k_dD~QpaXweM4#Op_hbjM|5D&Q*@zpw z4dcB6*H=|%)ZZ_2*>Bm=XE|lLPI()|j2n59YGsog+(*P7ky-bQi}ww$9cOVf>0anC zpZiT=KVbBqncznVB3EC;w%s8`3)L`lKL8?NiN` zQRtVs7@^3M`LP7wh8C-+3spw2edu83`OD?3xUD=!z2L47DFP0hHWW)588Xf_%3)ow zO7!yRguo>ElhZ*d0&z}uM||b3KHpdSV-}c9iOIs{zVG#a?4`%@ulED@OXbutprJZU zc)>fDdfixoLn{+X@2g!#qmmjRM4$|w4( z4{bgGt>oa?0EMx{;c^1#*&ZvRDx1Z;2O~Kj_egC7N%Mr88m1aNyZ*~Y2k&;%Uk@Wc zh5>trc{8;lJ+)$*AtmSPdATmAjvyoj41Ayutak|@O^WrL`5)DUpm2z{ zSLRE?_9Z$0)w#Wj zxvZ2B-%$o^I+Tbdj9wnTNT7uOVl#Henx5f6CUgz()wEEMYXFR#9!uf3beBj&h!1&kvr$gYFRRH*+MOKJn60!*a>`PN z4l9M&I9ot|{9^Rjb-PF#7QhC2vY4)bTZGYw1pacX9!D2y9UmQux?`x;NWo`|#s`$f zA_H@?Y<9!zo%#R0gPsrYveK(7XP7Xrml!LDS@wY8D5^C)GT<_cH=> zytAO;6)Pio6y&z$Hp4+@K^>ekAsk0lD`{vzXDlw(Pq6DEntk&j!s~ z?$Sni>G+eI&tMNrM^NRPp2&GtbmsF#P125s$dRwQ9(JwkHIo94$20M=U^QhLV+FvC zl1xPXIpny=cxRVO!sPL!jFuig-ccFsnTcydbKFoef`_vU?|t(83&MnEV;93w_?S7h zdAxa8Mr5{Weggevf>~0txFMiBIO;e^0@DX$FR%)zV@S%3=X@Q7)B9#iApU()OOfbd zaaNZ^oTIs=og%u2N9RJVPKTk<^{2%jfMM|QS;i0o`WKif1%bZI1pTkF{JE7kpyxm+??05J5+3&LOXM`qKZNuYV!J^=BMhjYveLco1PAQks<74zfx!S8G4P~#Su!yhch8}h*DWF|CYXh>(%5i>u}|M zRuzzMIHdg;dTY`!>#-KU#x zk3-3Ds9o~H`Xx%hJ}HD$ePGRc5`VKu=?c3_L{Vut;STO;{ww}I*MgDx_?wBSvFODa zNoJVV>V+QI&bMI1`?{yVd@jQUMP*dBxkte%IMdmU@o)Zp*h@a29tn-)y#r2%iXy$- z6h;f9ryvnE=YGm;ojT}}K*dwBJ3ky*adcR}USWkf1xhy?ZUtz?4vQcxt^}G6M z?rgPB(2rKT1)YP_2ABj3@Ipd8&oMzPym{n`-(*MV^8NZVL6YL212lw%P(tll(R!Ca zUq>&O7v1lok>#3r*w;hO6u0d@D*(qqb4iW&I(HSUyWr5U$l*lF>pJ4KC9$Wz>bE`( zsGQ95E#YXPOeMJ%HS;Sa^E^pz?pwl6R?7EcIJj$4p3#A zp1!YVcQ};~dMwUP&cV5QCM80=AU6egcrUX!m+_3qYSRa)_6X=B=mZ@g*8EGFiXKaG zbI<^K1n9Ed{CDU+Vvw9$3}JGEm-%hJGWMBOU@em#Py{;R9zLS^&S>7wrYOQD?jTZ7 zK;R4Mo^QJGqg3fB#|n*zc0s6JE>vws*|FDRH57PU(5<;Ql`;eR04x+O4__jI6~jep zjDh@v(U=*riWMJ!nbu-k1>(#hkZmKjkB!rl)6oer5YJG8wM;_l62Pi?QfFa~8Z)GR zv9}<&u4XRNv**o3vO%8Oto9DXxB;8U^4SDeE1oH}aK}xBaKp3@oxx?tn5D$$?3t-N zR|CaOSc*;N4qmMY9ph0aXZFM?u>g$w{xSgq6UJgPa2#pJ{2(rOf(hcC`^JuNu`Kvt!#w7VVtUK2*;B$61?M|Sg(sMGM-34(Syt8!L@|S* zf2zWDXUG#Zps+KfUM#!#G8j508NQGE==KVcl*s&*%LN$e6H5~+lP>_3dN$hmuxd&^B?E?Jrj;AM z06&dleyTUYw<3?JBugoJatJJC8O}+Soc%9~ru42I{u;XwD|Kfk8lKXSmfTnYfX1MLxBf-ccJc_uOT9wRT zPWW8}Hq~c-3Bn3rFF^JYfta}TtK|e@JV}VJ0e1y#8P|!rXe+F?Eqng4Ib(J6MrPp| z%Jsv|L{k#~F62l1fxZ8+LEzT94dM9R+aCVPe9rjbsl^?Ols%Z9nl(hQvmaY?i9NTW z3i~jV5~va%HBO=7m1fIe$*86W=wW7<2f#M8tKYpEBn04F59LdFGPfj;;pkDOkAcqZ zLBH#%0d(v`%6cBJF-j9PRMHNbPH};*z6c*~%yLC6l2iVgX>u*2sw?uL1&VcQDhbI@ zshXi1jOKvfTP2*d^=z_oSlQ7&Df7)A>~TnKe%an8nFA+x{zZv^)5A<9tBAN$GsaUw z-n{10O33=@6C5x*1R`bNBk&T>)2U$Y{Aq5!#!GMKKnn|P?aVZ_!VMta^em=I%PlS! zsL?E(ZPJo+2{#dr75~|@5l3$T95T)*Z;JR;L^#tg@F@%nY69+5BB2x6hzqn-uVx4= zb~gw{pKuwrBhJ#!ETxD_H1^4*OK<}Jo0D^WMrNW{wxknW(CYDo1Mht#1ZN}Z%%T*oebx7r$LT5SAkQZRU zsg1mssI<=W@(JlFUg1R0)a~{MD)$N|hNo|@`6a4D;3OWziIF47NLXgR>|?n7eznVE z3LTQlv&~Zn6~cC3qS2ni4YvR0vu#?ONOVmWrSvI@&rvZ0aR9C*H_DJ)1yU8sdJs@x zs=Bk_0wD_Jfd@(1?)9s)0jslI^1ErD}J7d{fm z|9=ovT>&BV?-()zM*{(#V6;%psH=|je6=$3jEXVjv|~Qzv5eDjRQsD$`_s>>u>U|2 z{FB{U(uB%iFQBh0PDHsq`8GYzpl*SEho*Dtz+eGFDe3_#&$$*H?BX<`iBKM z7_bDXiQs#Rt!Oy_IUW7nH9mBv=0DFv#bpst4J-iYV{vmQQfa`6+nP!M1#15%u#5lW z9(9kJ@H$KOQ7CMY=u_O;&Ly^BRqApSiI8jyv52`YR#DPg1y4u7BTXOJ4B@{e5XL)8 z#~6OY^=1->`QiLTCkr$j!6qKg$)-G9uCVLb^Y8B;m#eF1JA{M*u!(*!`zq`L=lC1( z2v?h`z*(|dQi?!b07eent@?St`YAdNZG*o#?syEyCLP3hTq5)=1fkoY4q>X&GZ@*g zLzRM&0K&(FI;_`V#~syzZTn!K!aMJs6q_3(orq>!A8gFPmC^_R$W8CWsgL?UuUvbAtPN1B6K~S@r(Lb*7sXk~TzA1Ma5<@$mlJoM(sX#Qi zJy2bP8=`(@e|QRB;_s>8I8pj$(VmGmk-o&RQB}sG*8;f&PW&op_(F2Oj1!kPXC3(B z(!8Km&5F$tkZkzNgR%yJ2Vt324y=-;Lv9&T(&_qj|2wZK(NSE$wwU8*e(Yp-l-wj z)%zFs42@(axiYH3At@{44(86XQkN2430^bxf6c$>p8D3BdB_cC?ryKfZ?huN79bCRY~+5nSE?0YS09T{nq+Jci06){D{H#_u@twG z@D9h3jWs;NzFhz#VLbu8MhnF@ON^C8@3@BMUPk9WD3^!U`YrRr01ivGu|MJI{VY-R zc69(Cgzs-@VbZ}{XTA+(iQ0ZC3<<#)p@n-jwSA>s7;yvGmxu;`zt#~<;I3;auDVx> z%#=LGVdvzm^fc6Urrmc-*+o5;A}CmfEcWGG0vNvcV35}S9liHJ1Rt_SqPKKZFe1Z< zI^|sDWT=NiA*m5Fq|j@c9ENYke!+CRpb9Z-6hi@RHncRve?YkwTa=O3!g<9%c12%? z#Z9hcC1+Fra)48jU`(a|+iso1_~ua}d{nTL|74~J$t>%BE~JmL9m>}z(Wx)t-;DRg ztv=|@O?fewzr-;!$Ak_L8amgbXBvIwqulkmdiT9SGD&3=O#HZ!wa)mxoD=pk$44q#icW(I^vZ(Dc@3_w?<(aWX18wi~x zlC6I200`@+0P^?P;gXY)EhMi>O43CW)vBEhUd$t7-$t=rT3%Rxcdl{x{iIgd>tgi` z@4PbWk~va$|HHAT-Hl-Z2maD3Y{bsOWXU@}DbIzL%@rk)OR|dy!6k0HiO>8Js~Wy6 z$_`?^Y)30 z9YV!dUIUp*=rvS?-H0~4xl6gu8@i;iYippx?(m*w=H ztCkJztNAYh9lr#b5Lw9bS@#kSGK_R&M{^`cNDnbKitf@G2v>W=*%w9a9g-JV4W!az zN;HGok3=MUmiy`X2bhYYZvzzmAzpEwg41@A>$FbCtIf-41uzQZ>^$td1|tmKuFx+) z?j&vNY;%u3hFm@kGBG*lRBdCOBh8aLLF)^yq-f%huY^XTB(I}%uy;69ZBM<MO$;XlP@f zf=)2y(Wz76%D03^;^6FBQ^eFuR=63Ri#~dC1I2J+=9E1q3c(yK5UU;tdM%)VCCj83 zk42(QqOi2L8f4xYX`=)@TQ)hJf=eVm__wSx`NOiv?=N$2c>m>QTSMrz4SetY<|zh5 zkuB!Y%hWT?@PKqVe0s{k7pR=@A}y)|3(gx~Z(%cHpeAALyoH*&)WMsCI$iN+O?nMy zmTUa=ohctfm~FNZTfJY-|GoQ>g&ng&Y_hC>8GC@lHR?Gn)Cy{nGwKL$#tlyasQ_~f zk9N%HHsV9Uufsaq*K#bqw{0@I4Vqjb{||K5pees<>S!7OQYWat{E=X9k)wKY;iQL2 zF!2JYu9wuEWlFKLI%%T5aH7?RYp2$MmY>nlblOqNUZWbBvE}}bn_Hzcoc-@56kIK( z(_%lsu5G4r5)p!FVu9;~{&rBxvITg(F#9KVeye1ic9!j=)wO>(OwuK__5RUb%~MxX zN4-rr2^597PaFR{cV!!OV?AY1Zmy$B80-WnUDY>pe!1Fk*MSio&Kax;^gVlcxTAld zO)spXkd9LXwAnoht7owdZM9etqXSv(D*maD^tuDMN;R`9LmhyH3%a>D zC__?RcnGE&I{8zm{QCA2Q{fis_R>~)j zHhqT&2+7(t*d#q#X|m4jKIYd3HCc2jw$h>#M_ub7CPetF8$Du!Kw9&ld#PddZP7-99-mA0&b{yMx2! ziYQHQ7Xlnb9+Fv-061>++S0Q0c&)Q%wvyxDeG|1QSFEK#Y6t~itp4Y#=LXRAahGuH zBwieqkWan0vFk%VDXGK52{8o~@Kq0{kiK8&MimExRlBZk5J=^22JBFbTVU7ITj`9* ziJJ?mNo9-g@DVZ7S7&K6a-$&M>Ltf;&S>37ty$mbQ_%d`cCR4Cy9!_?#!%v!Rh60< zxo~>7J)7`XfI+lD*%-WWKMqJQM_3TiYAlN# z#`$C43rj|mX% z0o=1X9!_>-)V3gB-d!g?w>Qe>6^u6F9j~*9{i6TFu1#JK~` zho30$&6};N7_XzOL;#}RG$7D#=9jaeeJ{`>k~Y?+q?HK$D2qpkP!a41=pIMA80z7u zcLw6;%5SmMjQ7p@OfV^rL?4IbROv;8Tv*sFp-~YW5#%`X35lU&yP{a(HoT5v(hoIQ zAr&W}jSR;%4Pyuq3t;<1X(+7^-*bm%zX2yEGp2pX_&j z;d#q`bly;iv(|Cg32ZhEYH{j6!pqpdEAP6!ZxLDS&O`k{_p|7FOg86~{t6b^x!EMS)0j+|e3+gLFi(0mLh2{Oa1NH`E zg8o#86ArBy05v@Nb_Apb(SK`eif6Ft6Z zyaw)w>8A3(kuzYz4Lmcl{mY}Cf^Y0KNa(8i8R(pdbVo6R5!h=$su)SPoa-H(R&X$SsJlC~8cXJYir^0o8O(D%9kci?UX?+Q)bdm7k z`3zw|LAix1yN}9**So^EgK3<@uKz_-+X-U+pe-qKkRtD_byzP#oUY2*zsaX#gN=m79L>8A?nVC-~Fr9TmrXh>rM|;gBtu zepXPdu(8pr=xC}$IPpS&Mv>Mc<3KdmC-aVk20HubfqcL%LsMl2pOicN0%8By6RP<*U;I0d-PoPj{ zeu*hhvd!2hZ_dO#LZ2%A=8V1Jr%a4pjS6j{n(fCd9ymN#^Hl@LQvkFMN?vbg;k<$A zfea#(F-=5OecL+8qA#D7loN37g!-;7`bQUc}|rAYb%F z-SpG}J)r(m;6GoSY}H9^Y0F)Vcq46R&eVk8_>yqVB$9K$YS0O3+T-_a-BFjfDMHwI z;Oj6SP*pns*w3rC@JYz73s1JxsN$lJnH2@>uBg=H%KfBSJg}FyRO9JbWai!o@(z6o zEu@=2%>{*nTsigMHF{FesGC-X1*^)3yD4~J{9(r>h_cdPA&jCneDF|zZH2rrx8@1v zcnd43`7G_S>e|gl;*0Xiz{JLS8I$yOPq|0p+O{;fNv#tdS z&7|4}=c4x-y#q+GISnLDH*P=Odrc#v>;-rY2CzGEu$6+Mnkm12az_I~iwPj2cqIDn3*E)00000lc=f9j@~628DGPd#>-x(Smm6PI`9CGIDrY3 z3?o5pV_NJiE4`~RA?LYk2kkuR|IEQmyS358zN107;x!g&r!j=#ZYfUrE=zu(-w70w z`8$31$jjDL0~B5^e9y3OVa_~7)4kKd)X1CNDX!3eM94;GWv*#dJ>1&WCct~yD08|? z0Elz6nJrhp3oj8Ydn*yYn~fUuv`t_N5$B$w1d|qNcJr=Z+I;Ui+BL*9aPfmCH}G2EOTj9k+7>{ zrgi%4B@y9-U#itK@we>XPBi8uI*1_UfLi>O4#T3?1>Epi_3zsMd4!eO-7V(4#h?M9 zvs?$~o<>>`Kfg2`Yh;6#xGGBDx(qW2#!*K^$ClaXaMBemzI%cOv)z8jaHoAtjuL2zgF zWO7hReHHfbbIO4=aB`QmKmi?m)2U{{hN*OWaZn5uy;o@+ORa_36ZfgHVheD+&g9$t zgYn_m?>(JIKKwS*up+X8+4cbq$PCFw38#b0LmWiPz-T0)s0iNl10DGT>@Z@5W2d$^%&Ni{Q0`RUv;fdkFBS7qHDSRW~v;eL8`3G^cICv3}E$!~$xTx_uQA<2kNXG8aW{Ee9#5nB)=4lZ^UZ z4T-=ga5NMAkJtkv0CFV<0U*4PIR)1%Q}>5C2e;=S!(?H_fs9u%>`uOm?&=)MXN1hf z)vlu}s)6_|94;1G@@o~3=Hy9FUz>=vyImTCuJM}#G>GB3E;y+2cgnX~nP;6)``$Q# z!VLL_WZY zyGzP*2o#e3a8g5cFKXnLm5^Ey0;IOh1>Kel&=e9Tz zjhw@<@%n5>Yaj)cEd1!8!7eCCxE7f>xVIN~T8hv}hn)14itNp2_$jeb4L#iZd|&># zZ2#@8lg6H<`L#7B7s1}{x>><{MQ@R_!dOd7I3nKf!~0KrW1F zJEb9tmoHnq=7cf(BOVaZ0$J38r=x;eftTV z^-@{}JN9iQaO$cCgLiUxbA!YP$Pz0D1q_moFEE(7qA!HlK9%IhsN-Di%X>MPPoCOu zNiF8WhLz9&oqq$e`v*YEO1uX4JiNWg;fCWYdT!$4%Jc*Eb$`Jms*QU#9_rqrzt*u{ zY7(JoNxAt7hlfEy)B#H9{Hdma?QuXi&jyf$I^uI87!7$Xm``$czpm!RGDwT*ZVn_Y z)8;@9p3};Lfhq@4)N?msn-y zlS1|cAOZ}E}*bA)PEhT_F#wl@>12qwuc4xhT-Z$jBpypko?d4y(W4GNzNcb z-t7#Y|HR2Rp+FpDMb-=LHHyv?FTN}N-Fz(}<9-^~71Xgz$wy5$0~td$8pD!V@-R2m z^)S_{vA0H8fbz)r$3-Vi16h)S6~Ts=WfS|l>qX^t*yM%*AE#^xcX7dvef=uFr}y`n9;s|x-#V<0Huu__%=nMn*tTUOD3H)l(2xf*T{fCA|$mC z6*CdnlEZf!NFM0Ai&zFHe*MS|H4f{0|GT<}7uk(AlzRj~*iI2!)(0M>DT3n^dFL-l zEXB~V_Q?DP%ZG_*gPjrK@FI`aZL&sYa5gxd0?kBW9Br`ZRjfmfpgFNV$HqJJD2|~u z{IZDi+|;1Mi&ziWgDM?n2>QUOpW}dPC@bzKcZ9;5^KZyPGA-yLt~Qsg9I0vf!^io} zfGlMg&QEc;x&C=>=O@)XbPOH5BYL)9+##Yr%qD-Yojlyc#Y@7;LO;Bb%g*CgD+{X_5BfQp zuNhBuMjY!BE`a16J@&!MyK{ac-OJR$E?D0%Z7c?`=+N%9%P%dIVXJR2(8yH^)gnt2 zn0a_Fhq8#9Q`37XA}Dxd=$}{R6cJ;`RU-&nyL^srsTe1q;+fp-v=2gC$|LmZaQu3Z zs(IQdSbUbs?N@1lAP`CD!7!^~VAt&PEhvuy{Et`2N#&h6>q<@gZmJ5}zkqy>2w`Sy zivv2|)so<5`K;TOa)NdOUy?&`Tb%FY)`cxr&RGc#%9sP84PrPAozoeiWuY|@ARfpU zDX{nw80e?-T+vAJ&LXQXwQ0GXH0qS!q=%ckDiBmquu*;cf~yHU;U9bVKK^CKqWm52 z_$+RIt&sP+&sc?7TJfkZxC{glI{E8Rh3BnPHm`^HzpcLdvHMoMii$~m@d&lKC1h1;N{xyMERYCaSr{%9O0wyRv5w${pXO$uqG)RRvJQNeoK#m z0EOqwEg(3Ja2&^@@d>J^WQHn%6fS&*85vE&*S@$Ua|el>E5L#5cq?a@XT`F_!5y*^ z&8$$EhqW_l%*=}P?Rl-_g7v#;dIgzaLWm<*R%+P%eqZ~(IN2)Wh!a6Mn1Mo5OJMJv zUSTNHy99DjwM&4P%NI};P|he~UastC(Y3Z@3XRbcTZN<#HeiVLeb}V^R}`StaxNGZ zML-cVm&60CGX0uo`YSpl*@bHVVJj0Infp7P2n-W(O{s#+r8PclP~f|aSjW*}?rep2 zMV)DmT=?UuwWG3OB^`u#&gdKEXP9WJbcVKmZrhR;$1~C-k&b7vnmp1UQv}>$n8CiP zETV1iPzl|FIVf7A+YFf;O3tSXD2A)cKPCe!L@8xj<2qwwS$|B5ACZ^Q=Lo8<)u2NW z?X@N2pCP_ikLF}`E6fzMMU;G^(rd;KPLdvXPFD(<>9#$$2OJ zp~^JhE0XnzKeuDepWz|doJNVDJ+!L>!xMlxUf2LyK3j!IICE0&%9G}=0+z&0#d!-W zdCx5^zg;AJ{oD4pMHzVWIoaSJnev6&cZ*$Kt7qZh1M%>-^YMUnoe}TY~@<`#h8C(e0?X_)Z^8wFW83Q>WQ+u7IQJL%=r-6ly^~Y zI^U%r+o=Y5IN=;uhUU(#k0BRzJ#{mNUnABgs%g_X-=+DyO_@JInrPeNpWG!7;H;V> zuJu?pDDMs=;pkz-o6qZAWM*-eKwdbC$fNb=1g_nzG~2|8s~av<>1-kzmm=`!U_RmP z2QgjDLswk$LSFGyy*H6WGV$W~4Xh$pla}s*2O|eBGTMwdb*aCVtQ2ny+u;vY)PE;T z`7nFU0q6uL7P|p6)v(BP5#4nC0f7oZp9#njcyf>Q(iY@osWx?I9`eN<{|boLMXPEi zEivdKxXDBBOK9;NZ*vT03D*i6?q7}vP)c!*AjOQaG%;|v3KW0I=Dh4#NqP@lq9XtX9E z!z+k*d)i2oNq$9(@ zYgIN5lxl*2cVO>@`=J|ipBs%@tHHSI6${E@brMPSgGVVWesxPwlw7C2bbC2EjMx{q z+6e}SV#?pve$;_Ym*!>BONT8P^0@MJJR?itzssy5;g9`zuP!E4_xv)$X$gO7TGMxA zz{w~Pd9rfU=EKBjjZHIo^a8&-=g*wnaUar4-Lg`|6Bez3t||b*nM)SNF|vojfhUrY zK>PfkL#dGE_9L0%bPMDygT1`V^t70x`f`$5t`cU7p2HgnYTFK3Xp#>X{5U1uXKojP(y53SYio~>= z#qF%D>(A<3RwM8Ql6uD>D@JzfwD5Jl&KTO*IwP`R>S*NPeIj~;>7~x4-()Y)+etaK z9Ifre46DcAhVUJLqi=;|@Oe=ZL_0`FiDf>UHYYmtFji8u1_8+$v^mkV{Kf)>d8yvm zXr=iMRC}6o)pcl194wLsiE_MqTlhVdz&(u_v-blJ>6iE$!#;NE;$^M$jN;TO5 z47hlmASQ%Psy zpWA|frs**v(F*6=K;_K2x~j9z$p8RwwRr9qRpJf^u2{87BQcq1xF7Tssy2)ccO3hB zyO^wn5!!f;SAj<2QiSjHuYL23a5JpbhO%=xbFc;5su1*%XtS_;%-mflhvsj=-FrWz zQUN?IZbx3L;!m=!Q^nyj@E$AMxowWuLf9|c^JZG07oOUUvC;MNO$D$FYTH9NmH&%4 z4dVP}%gSO^+xe+`wh2ESt03mMz7NFq!u#)`juq;5MhBMrWgipsL$qZ1=W6;{3fyQ@ z-pXhWhkz`>byF0bwJgYm1~~Mf6iiTgI+_d6%F{46C~DjiDR$ny-Y1PskfAQ_{$D8W z;v-r3u-I|_4zS-dZQg15g7_)i7h;Xd*JH4GuN3Vxpuuat;{mMMj0meG5c;nm5Diox zF*JomQ4u@HqRyi&>vlJe4QsOC_JNU8IDB*SfUV!fQ}*$!RQsgp7;!Az3KS$&KqLd0 z4q`|Rzs8=-mXnFNe10Ec3U}+xe5AS))dBpJh=D573Z9YC#J&rWjy}R0xmCC zqGh1*daD=!HoPh|kX2}t6hH=n^M*fyF6^JSU^1ijv(f}u3C*X4dJng`cORq>`I!*a z8!cBkiDl|Vx%b@@g{j<$V>O-$(1(2dHmbVCR zhg8wMe{y~Tg%)GV*WNkN9w^&%Xq>NtAb#6Ykemp`lXE9}8g%T(ErUnt<@P$*BBodf z`_#Yj8;Yalmi<0twT23IdMY78`>3d^ut)4i=OSUUQhNB&#SkN>%eCWZzrO2pW&EbL zo?wo_^cFpxutNp~2sHD(u;C+^ad8ZSEaJES1_{a;zSQD%n#*?cG(Khf$Nl8rGUV)) z-dmQVqRwfvGp}vIDLzwED~HR5S7p(|uHBPzvGbr@O|dyIT9fptF9<1EJJJt=HIez! zA1oI=$JS!!B{#Ttptlb8mUL($P}vK6^hEX>aswgP?p8mv{7kmaj?(003=TXr%5Uze z+kP997{#^osJihlpH#{1{V8=9!}H3kIH69TLe8;{B)q3phmVg z%OPq(&($lTFcD7XXP$UjCV7oAr$~hF_Jy1Zze0$ zo}iY<(bgg9J4T2;e{4dc3o(;8!I^=`X0Mkb>Zus=IXFM6syz%QApQGu7r^uz$Z1q* zo&`f7`h^{8!ZZnVUn$$^mQB4dYh4Lu(R{c>vW;@-^#0U;myxuYeBq@5^%cqYaGnBd zI>7uYIRT6ab&)}7p)35_5V7174NO!?05g7`<{uT5z0A6vzlV?BR^dHOk%%*z={Ir1 zf4zWLM95L8a&XK>Lx2oNs!8;{>f+|C4BWXlA@EhE!sXX@_N;Nex|bMf0Kl_u&U|n_ z@B7YI!f@D4tX-R_Nw*-!1jYp`vDmuvXGeny&8X0^59wa zX>-z25IQuA%2w06NzZQee8C}JH+iE)86v`$7h6+*yU~3H&s}?e`!K0sOBQ3lF;sK%hGwwpONe$iUP}Ha?czs3jS5pOH|zSgzmjK)3fKM6sgd^9C(WDoHTyUfg{!Wg5gJ1>=6j6vV3`@ zF_BHB_zU%x2p|%#+r=L@d%x>m(>sN9Hx*Q7yZetsvjX~D=1S@q2oHBMj zjF7D4N5yU$oKeIFfcd`w9MUg<2l7W`8OAzSu9B=dy_27D8>=C;;{YYP0X3;S_?xgl zs@0|ViyFX9P>(wlf@H*{R6=Sg55j_Y1fDUNA_LIoIuFE8_zkDe6)uprS*QGuoE&O_ z_yK6lo6?H-3}^*vFehNOtHL>D-<@4#fFcvZ$&d~QO^toyONp*fV|~F@RsMrQq>;m{1y6KI>d{dXtg;jwS51n+dVj}C*9RP1L1ZFcHiwb|G_O=r{^4!oLaax~Gemf7YK!u0-uA_4=MMAA;NpCwimq#}p0To}ubFuN zBxMX=IAFPg&>Yru3k~-=cNMJ$@?CQx=_S@_;nEZk7;Q?nu0snn441~58>xna(?gUY zaQ1ZYoOccH7@&?XfitPJauCnSdwGGLXo)2g)Uj*WOguC&dp+UX`AcgHFp-b}_uEeU$g!LAJA8A9$a{oNJ%X5ddzK+TP0q;s@b&mO|V zRDc7WEsw|=%H~HP{*N+1g4J=vdj6<;veE1R3ngmvP-tIhLlJcLITL^leseXl`-oM5 zO{~H#hIVNjCvw-2tPm{)>j#J9mZ`oQuyOaZHVNKTkn1*Ks}Qcmi--Xabjhzm{QKfM z8JTdr;M@m9JTPfk1)F{3Uyw_kyNI6XO1j2RH{E#Atjyh{N!fL_3IUp2sM?LkER(KP zA{|!jtzhWqx^)?Hh~xUlw@vjb4~c&L=ySheLoLSfXC?L(p93CpE~mQ{*p?(|NQi}7 zt!NrkSJ_*na$Bdb+YEp;0N>RPFnsd$~cZ^h4ogv$4evQHSXl?3!tT{t!JFWc%5 z{QzX!M^YIG_k0fCa9BSzZ~=L!`(Ei!TN66k2cmpdl+-qv8|O!h!&zV==zp&_I7s%T ziENej^*Ub}{G?9-cAdZR6|eiKX5$R`LViK8tSm!JKX8VL7&>xsS?_!AnDkI_wl9& zlBA(v;>sb=o_0>~w=z-VSuV7*7Z%!q{6cG@m=;75;vrEiN)7%Pv399eX9lPdXinnS zZxWJRCEc5Rb4+^*YKEQ^H?tekyft8Wn@90R{X2((vNpX}{^AQ~xskuXxce8tuL+c=O#TF7(Y&&!Ua8 zuWxP1hR*s}^A6Z{dL4zrFG9=hGCc0CVg$(b057?yL4w)TWTg5C5y)>d;{J>l3&f|V z3xDW(AO323?D0%vS7wpb%PEYcx&&?Y*l z4`&@zNV72L+XJ_jA9r2%GNX0TAGFA5Bf&Ei?%V;V-ieexJ?_VVD0eBq>FFcGB)?4s5lE%lbHMK@S$Lk}g6yC(%{5{lDcHVDTz9E<(<0%x- zWVb}pJ$x!Y9uf^i(O)_nVJHeLJp5;v34P$c z$@?fY*Nc7Yxraji4+g=!|CV%sg~SS%bVXoNoVW27>nIE*1^&0J*&=&T4!Twm_=8@2 zm87r#wFMHrpf}Ombck+Bj)6}@tLHZD1QQ>A%3U?P<4-VJXjk%LR4Tf6H^?B)a`C5M ztPTY@J09K;Ac_N5R;wY zP*-VJHLa+NOQMflaS4XZt?Fu(5$9HqTZkJ8V?3EAq(q7LaPf10mVKxFs8-?6g0~qK ztqF$^`-FZk5&CoBHN@lor9M2p_ zZHqHoJ*M(RCNP<$c5gnVFA534mu|A!>Cn%tV9UAzX2y)9PKR-+Kyg+hp&wztl;iK8 z06|#7v!@U6+!AWO2%on)Pe-ElL=eW*Uzx6m8L7{|lO$Z%X_%?K4>I3kZ{wTjb^0Wp zC6ICHC8qlzs01LQ%>+62gIkrt2~jVA?JpNHZdx(WGGs?r-humUQTe-|M8r^5R~){U zi`#{m^96-IWq=Q}+vL>$4T4IPjYG-#gwrT{t6ET*OXc(xM89cgB((jCG7KvB#?~d&C*7i>{q6(X zZSEhraiNN8gj31}H)@tdaK{%}osQv0Y_ZZ@} z;`NV#Q?8K}W`+2uyr+Y69FC}>0A7%2SQL#Y!HL@t^^5sJyA})A$xS;OrRKfYdM0~; z3g^0T(nSwcNqS-ki>%I$-fSAvHw++SYk{mqRFFm_jVros{D_es5NOU!e^t>&^+Hqm zr7k;LmQW)%5!(YNx=ChB`qH(Mj4#&J|B`Q_ z;JD&^QktHny!ASB1+XfG5-U%nG9UD=XsNz187aGpe#VbNE!My}k;;^`*!OR$nDDmh z=aRW5!6TXAN_L1dX9BC4=USWIlU-)AHtdEp0ug#`t)ARXibNgGrLk?=n8EusT>AcT za#nSpTSvEoN|**q53q`~7JALL7pRMiWA>bCgNGB!tx?d5E~ucKBR&f0bXv^g;tc4x zrjg>&s7l#uVUpT>hAVT(fK|H0Z@g~`6CJIJaTj=J&_BLl6?KDc%!?VGA8TouMpg4o z{biF$G<``E&bm_YSWt>F_ERbpg zg6etfH)r+JVceC@Xf`^vX%}7KKoDeI5~%Iisahpgk_73|37S#? zDY^bk=NL;+Wd2L*2|r4$0SgFPpP2|+NAecF3-7t9e#>w-$i1HYr2l5cbAR`_B~(P? zB#s~l-G1wpE-w7Q>MWHtm%>+RrNeOix0-l6)`kEnmw$Z;H7%vQ!p=UlUp?7ots*eL z1oWFkme{D#(Y`cDnSlR3V@!2{qqf-P4Ix}V0j%k5f`TRl^o{`Y;-=6t0WqQm%$hic z^M5NTkhG#@;`L4HekCChJi8HV1~E;R)CheOw2CCO4zm*0=$2JtrDv_J*Ps)O&6IJ! z)%ps4e7go;Bg0|-4Iz&i<3bSIoGq|xFa&@=d&794@Rg}QZw@RL*-t5Sumg%n9(*5f zNtf|NFK0D+l=S*Xjf2&K=o=m@4i~AW;RG&vK~K19->D|f4*{Q8g{T->uQ`Vew?fVb zax0$oecdy2NGXx`ioLgzN94^K8CEhpqwz&Twzp4|@IEIJx|5Hr9a z-WG|_P*~JTiKa515u=Cii)xDxI2i_}THR6BeYOUBAqu#3oYTJn*w;6*>)cri)yuxw z1Z1~AvBy9BQz;MI)IQ^&1x|s67|fq;1!zCq6=PT<3TIB~n=B zZSU~r%3Y6I`}!VUa@13swsM<1EY}4b_W03RMPo{YKB4=qs{S4T#a}sz@jn9KA-6a; z3vf+K(B4;D{psI^bD=oN$)?ZHH!#KyWNosJZE(~SdyZ)|GE=>P#@LYqxi6J%t4+(n zYq)KjjClQ{@VTtjfEy_c)iZEz8q~VHrS)i#77pd8ejRW@9i!&_aS66AuB*p)JK$&Uo^oJ7AE?So?v829aW{D#ZZA zeHN~&)kMo)gmYI!F^B_S>tFVNU4+nr@`Ptae!$E1oddI_!h`SWY=P`)epsrrO?zGQ zFI2IRXNkm$(uj9Z&1TEc>vD${BCt#H?QP0HA7TrI<|XFzO8OBNOCMHBJ6x6|j)U{2 zq%fcXR4eVY(D5mMlCi8acVXo-?KWaeK#aP$2IfHX=&>VrY$@mwNS?f&rQJC%daDa< z&EK2jH^}{woQ4e?4~UWgf=tr0)XSOEMrl$mS^nkdBU+HMReIqDg+F0Ik@|q(N6(_I z593#w#5cZo)vdM9B%whaV-(*k&d094E~qF%AgGNwpiV|Mj<}nG$+|9ZKQ*Gwo|^YY zbRVf0@uf5rAm#l{6ms8lNC=On2MB3%7!%SFYOl{9UXzA{Zrid10^`W9t&kdSv@T{y z=DKKLr`VZn4nzfwA?o3S!78OMK;2qAq@@-@->44%ES3Cl`CwfQ2Bz+$yMP+WC^>!_ z2EGd|cT?$sp@4|Guc!y9-~0gOv*d$2#17;O zAlh=;p|4O!$V4@1mYBYC8MIfItQFTn><_X!!aM~MhMWF@mu zEik#V1Q*pxG%D)|XUT!AZR|PS{JBaBNxKU2 z1gJ!E)l^TA2_m?Ie3joy#fqi+>v*45SMh+P)9iYdhxHBDT2%T zEK9r|a}_TT0E|nZJy{)187b$j_7D2ns9o;M!aQsG`1XRUz#afRKbf59ana0JIX;Ip z3Hp)WL%jJv8+E%#1xS~Au}%z3m0DB6*CiRL&20O4iXX$5Pz$v?y&b<0mDnRIp^W#+{SW-Q=TNl|IkLcx!VFd0m)x~b?)E44O^Er5{bA#J zH0P<8TOR94%x6~Tumgqx>n*1%#^FzmIvzXYeu>}!dDE(H(~#5wU88p5rws69DGxnA z(q`?a^?Xe$#*eDDcSrIdVIMKXa^i-RwwaYbdj-Sy+2fcZ!rf65ag<;O1sry0Bn?q) z0skqVKY&VzX2GXZ7g3)>v@*HG1RSKVxSEU3Y9NJX>}shkkeA@UfyWj79~BRv^9$w& zIFFr~u=NE>%j_wU1=YCpBumi}L33+k@id)kY>+X7?MXvMQU)3p&*f=%3H4|ysT&9M zCB8K|Tv0RJU%Y(Vr@pYl?jeaD#YZ{4sO)KKcJOG^39YyjZ?>2{5?(sk0Tz1kr7u$v z2Nfjo$-iud@n{*omd^8zTJVQnE-#bcMpRY+!)yi0WL<3|oDoM<9z>81=!m^j=-$V% zDR}xvZP*d*(U8J**_b?&$lPdR2rvOhG~vwI#lM)%#2Ke+zp7`Qv!5Cn4GEjej9Oa< zgm?CMoQGtQ(#3OAif76hJ;12zpt%pvK=AdcrVGo2Rd``^G#d%n>WKy-agM&^jIRI4SBwgM$r?>jJ6aIi{GoVG; zxoTD}HoRV|P*6UPsan9!ZBUiyT$#gFoXrTNxUbMHkRXs@UB=!s+(i1-%~p_8Ia_aV zrt*?u_0r9y>2ikJHMJgUeGT^DIj6+*q&RrBGK}FVM z7X@#1nYg?Yv%(k~)?z2Rroaja@DlwK@fSO8!6B&NM4~Zz1XN;Y?MFbNFu7S4-aBlw z#8=H}H4-vz5Gz=m+q^jlD=qmWg})m)mlp)q4sO3=mta#Hw*jf0m<@k+361vhx0s9Gp6e-#X#T=)cY~X{==a@Y4ve>;uF{C7X2L#wP+A`ZORvv!)BKfS;Dj5Ls6;FE`snmI8L@6&QEAvs(Lm~2ePV=6AY zLJ))^?QyziBIwl!-Ax^yA-a{4$;@~lP8`QSDi7(lVikfy=%j=eA)$2x!H`OkY5tS` zE%){bw&ly|C*sIZ^cD8HiDE(xX5(a1<~*P-x6QzUxyv+b4MZ+0HX}vV^yCm4HM4M; zX}N0V49}F<=lgjxii)=N8}i{x22T_;IRb8bPL^GK7K@MbN|i+y_`_O#8b2uwnZk0$ zI15ckIhNnjAb=bAZWo?d>>IAr=Bdaj5UeHUBC3Te7Zl?fwi+3y2_v+MwMenCHPIL^ zJ`9_ZGH{D%E9^!crUBGRjCCZ?c8dfJFw>jNQC@Cc?JRe`aA1DWl0f6hvVS-YPBJ{u za1)vF<^5I&395IRTEgK?GwN9e#Q3uW^~Szs2ZI-a`pw)A0I~;s*D!0CHR-mU;_GTd zE{`0;*zkq?_$%M}NK9N9Mv784_a(+S&QxX#JhM103A-9qYaj?tIB5v#s4DZtZ{b3r zSL~JPE#*QxlW+15$E%SqC(-kJckYP}=WxQSo%0~I!Mm{~a0OG^^rM85gdQpiqH%4%GCZARWbyuiC(LE5^Hb_EKFO65#Bzo#(B#x zNvB8c(>QmPzq;S23JvK_Dmp^MHgAk&RnJp9qTf(~57p2d#xflUv+X|>6YHYg&kG=r z@6Pz#P0RiosgtfGv~(<(Q>Sp|3xGe3Pup+Lpt%AM_rAo;qORoyCg=<^qc*#>3-oEe)UnQP+^pR5 zw`stpR2T$A>Slr(z?dDyXy(Tszdq3K)NW4l_a-m_06gkqkapcxcL*NQ zMGH|KSY(#Zs*m7uitbHl2GEaL+gAvNdhivlw2ZixMCA@gJACM%3uGZ^856M>Lm=!d%)j z==?>5)JEsx9kHkDc=!h#^&wVc=NHu9DuT_% z!w=)b_zXh9XxG`^Vsw@ymG+b1Bg5`f=!3mE1Qqvmt4@lyW$}eKg3-hV=VbzA2t1LK zPdUwMchJ8ogi_@C`__+nHN|+ytruDI?C7R_)mq4#VB^9k!&0IrEqACr4;-mW7<_;|GL1Enp_ z3KG&~SBX4Nui8C{=uo4QQo`2gbJy^+4Ad6?{oGU?PMe9|u~xL4LY`!qs3XzfThVMhuk(?((C7rL^%X-rw4Zq^Zfo z<{H$9dih2^;-sQP^e%Wqueb5LRp4?X2O<3&4r18O`UBz-C1k}Vrxzymp?{Sv{TJC_ zPZ{`g#Kt04=#g;LH^e%2cha{5aB)7FRXf;QGFxpO(bcL!+On$PwP1h%01DX2CoIWX z5z8?+_eVl(Q)bqOM1@gGB@>Z;Tw=PbFWdosL>IURLmnsu`B4^Xnixq`HQ*o0I}i>$ z=o>EP5Z?{5f5r`Y>+nsDjW6D7!J;m;Ek!h>v)RPFf210yZ^)dHI(d-8g~bNWVv zkpZma-1x>>%ih`IT45uTesX`RX93c^5Eb+|aT09zcJk}CV)H+3aJIB8DZ}DC!h#Qhg_D@H8)HKFA-<+OSo3<>6^@3kBcm8 zoHToKe_wg-cnruUM`Op$m&<<4d*Vw6t&+pxST)M!{}Ez<*t)m`hOL&|?G~c3;W5k= zImcKZ?51v7YZ;#!<=3CO1n~Ni5&N^n?30|0&al6J9&XT^#H@}b^CeGeA9Lysoy|ZO z%YPT4;xzgic!4HKRW1$N-EIXL=K&fe78zkEs7KzhyA}C4OLUEn{ z_!eBJGkqPbJ?}Mw$IXWE-9zC|CWVi{;jXiL;oV_})Db7M_3IBdJ@*@l@t9?A`oD>1 zNJr`wsh9;Gm;SEMV&kT8@H1^I6 zh1q1_WRpp^3-YNjx1>Q%M}5 zW)-7}S0bxwJ!bw+^T3v>B>O#nw!)N0{9%^C?Yxbpt#hFgZYpkzjoO9Nk@p+gDCxMdmX zXn{y7j+5~FdwS)Ex6Et!?8&voW54L)WDMm0t;Yvaor9VlE^EsXt6mo2Br6WC`?Ey& zleIVrhR_OcF2C=_vMpW3fXQ{VxTw?yUc|#BBKA}R&`%wT%k6-&BHevUDgH((bG1t7 z=%LcZ51wH0JKgH+_g$Z5l6+ksh0p`ofXf%@|N0e4eKaVyd;$>#%-sXdp~S z2AQD~%BQXPvm!e3SZ?E9T-3!FpjI+X;W=sM7KtCSa*4&?f^g>(kS6WY%2i8J=lXcYG#GZG|Q z&ERF}$Y0}tYA7r2CwG!|=BjW{SllUNgd_e54qC^fj|PFis5F5jUyhdVDg!dZ@vy5E zo)62*2`H#fNvq=1oMxS0w#8AWEFfu1(sX9O%u{P6Sqy=B*CwtHK9=s{v*|Ou*40zlT^; z#h|h5SI%P%%gkvJ9RV5ZuM_4)O6spY1{Exz_7q&Yl(uBcE-fQJkn`5(W1#Exc3$675~AZok4 z(g^y@Wz;9JR|T`2F?xj-_LF2Kr0)aKg3IzuStFsn)#i_)BqfpGiEUz17I2z=S(XGSdAI=={;lY}hB}&!0t8T(uD<-gDny#gIj1efHJWJxP7 zdd>}xZ;NyDw~cV@!gojQbTW*@>^qw7r=?fVf_G#zNvJmnHTo45xw*Kz?#Q#QHVB%m zhR-a#m;pIQIfdokY6Gnzs=D|C`k$zKjM$8f9^8tI8t8=kY60pP73VU5TdPRv@mzd? z58Dt-X9nWTZm+@F-asftfSsDc{{xND^>7l!;YyajDWYRzS$|B5ACZ^Q=Lo8<)u2NJ z*^g@`4vcC|Q@$8v-%lq;7C)`#*I(!!v$(usIIQ9}it4{uAw%3-D&u~}#Xi?-=&^+8 z6s&Jt3ZxCMRd(c>t)HAjRX5XzVEpEYlhi2vT5zkB92c-_ z)y8SC?etT6+A&^qRTM%)4<+ep)z(DE4@NXRR93nb>WR7qLc^l*fAxxgaFj!WvS^OG z)nM48yf~ABf9Bx4;!>io>yAKq4D<5<1w94}7 z++b=xbN1NfmRR_BLn4EFKN%lg+8&x6V)IGxkUV&6pR**0L*kyM+Qp5zl$SISe|e9} ze<2X^j^>6UqgCU9CX&nC99gY>xTjJ|TQQ~o9O1iBC;!6Z^CPYjU}vTq;TD2g zSKD+5av6?X-PvCksO?;{sF{c)u;0QbSnpA{A~B5$*6R1RIe_Dg1&)?gPVvvICWEMN zpLSQLP92(0=;yv7B^?TT3%u9L5rfoU6h#ljL%u?mgf-Ax!3%31h7&E~vLeujWFaU@ zV_|VfvS^GW6qrb7>@~Tz?j}bZtdgQh#med5KVx7=a~5=V8HKVB=1S!rb12rAW%ot2 z5sX6<$zCT^PLPGtkqk-2wrX}oC@(ewNU zl?XziZj;xQf{CQ)$|+1MKvW%7Y!ub}W*y3g2V*!Hwe>F&%Sm znjWBwg{p~p7!smySC$omEv`~H>*+e!_WX8I?m=<#|KC0%8GTqY?D=eMeXl9QjfL;U zV^DlH;+gd4tB2v8ek8(-H=Qvo=kLMccPJ$1~5Cs4>@po*y zdx&U+U=v!1{RtQ(oRsb2Qdjn2aJfER4xBfOfgK2K+%0cjaoc$4Rn^XgtZw#X0C=b2 zQI~#r7fuXsb%UqRD{6*6#nMbG_*!_={PrypljuHJZt@$;&~Ke5_nQ4-iz2goO&5}t zYV+XnOVj$o+i65k#EkhA%0Q*QIl1mQ%3S=q{ubpPB6p)xI zB)0O0@;kTH18I*_Rw~g|5GO_p8nJESuM2`0JkLN@jU{S3 zn$X&+FKt9wCEHIk5eXHX@bV0h7NLa6HI11n@w9K*ZlE}yQ?)}hctGe}T)SK>D(S_# z2#Ga4IKJM7vl7WG94d`?^s%{AWn}6FA4|6AiT6zv2v^yJn7A{MXZv9#@WW8MAkM3O zQkj>kt=~Ttec13?%Z@;yt>J@o1_z92wJG9^n|@edZ&r4+Rkm`{u@a%w61;H>=msu()lQTZkGL*xO|FsTc_j=&h{ z{@t~xj0$GFU<6;@zvnk;si}awXTCR=rB-|wy%c~hyK|bE!fNqI$>YKr6g+SNu@ueF zA~)Mn^soEn=%76(Y=7|DNJYIng0~n|3JdW#b6F~(7F^Xz*X0>_KO@{eNqJHo6s5Sq z!#RU29eh_An2y_bC1(b-Am=FuDE$F^>byVRKN;aM?FSk=p*$6q8U1OuShlE(keZ?xz67PBU*s0&r zOyMKkWGGki`&uA5JGjpyBL7zyREU%ei$A^#jhSq?B#K!&4ygO}i{xroKP%TskJ)?L zyyCER)n-7G1L#(4WUHKTuu2yFyT{@|C;mK$8>J3q+Sq`~U|!5WEWnwH#AmuTsI-i6Aydu{X`{%=boa&q+fq zwk^BEgH9o>BDm7C4*Gwr^}VI|v9+%ul6xY}`~N&z!kO-7#dD_iH;TkC%d|0nTh%a& zMd-n)FuU?TypWZ44HM(bJhkOjF602NtQy63w><N4O0RQUIPRL_bPc*iW1<=7D zzhKGwrNa2Tp0J;hTcv0w2YlZ*d7t@*daC_Cv9|HJz3A@zM%r`wqvb97j(xK_$E2!1e_VW`?358ZsHRM( z3na(&G}P((MyeJpvbc#{u_Xu+^OiOHSv+G;Fyl!x@1iCNhCjHm2X@Ij4VE(xffeKI z#brDWnF416s;}@Y9%7MBNjmaqfSeaWV~Ad6cb5B}_#nVg?!fWPNX|a4);y1u9Fyu{ ze;DHN0bh9t2gyL5DHO4+!Ii!JjqYqQcjP3AnvD>i9*F)+tN01W1uA&q9Kg;sdikrh z*q>Dr?e)GE-DRTCPZ}5nE8>AY9CM{LKa%yraWlY>xV?Cz!ya+1qdo*@Y|KB8ul0%U zg(N#jPH|%+_+FCHpuW3RK^o=T;b(;Ob)_Jyc~vy=QPd|Sg4I~!Los3^2SxQyd;_iy zdX%h^ME%Ck!C)}{jHaS&Fl~gr10X*gLZ~xwDwUD7rwxV;2BtF=8z&j2opzR8rl777 z_C33>s+^Z2prQDr8FI+jdz(v_V_Q=Ds4}FYWCMkpq=5<4+w|+44YypPqY<=l_FnBPMnbaS8%?Apv6_GY00L-u z3K#ev7ZW_$iD^zF%97ZImq&?6U*FMD{t~xRG-644m=bMgwh;7ekuAXM5K`EaqhLhfaDgWLtA2Lo@@1>`mAcDGp+G1b7e_UxU?tLyed)E0FwSH_i1cVJ2Zq3iDKvf-J zP3+?3NG5YH(k*WVKds<(s#zD)H*6>q#-9^+?s=P8tAAIHZns$Y(Vwe$uctr&n|QF# zz|f3qpu$+4ko1me`9{_$DpFOKg8R-6<^wl>4C3p<25TLyNeb>o)of@`>NLBX>BQ>q zT5}R5L~YvFG%zOw?LO-km~7@9vY9_LFHYh;bSF=|=?7ldshfnJ_p1f-02!h8DnUGB z%U(_2dpJxPn>?ahauN!(_c~~1?$Orw3Y)eAGtnmHt8WafP~t_7(lpWIS`^Kv05?ff zZHs(64j9(h+1-C7+=v=RXRhSmwp)E#;nLAfzd8o{BTO-vA`plj6_4>Xg7k~Z!i0%) zEt4`Wo);jF2X%D;bHPZ?@{pOK3_Og{Z?vE!J#>+tj(wAgb;59e}f67#7C&lQ992PgDuP0(Dqsv}x=x##{Oe>!|zLiT6h8{<=<8 z*mDdRt?VyXcEfX!bvcY4J!cVUvm_66r`EiNxq2;54R#S$PtF$KZ8THS+0mwv62e3u zw_ov!yT>q4K!te>VjKM7WJu+iMEfctU1O;}+k(%y%~)d|gZe^0$3E^3*vF;NDWMOVeJ7!!kovHLsL~(G3(MI!%X+FU%#eA$+7S}PdkVZBRin#s zc3nkXj(<9QXivm+o+H1+ovIs)%y=$l(~MaGq+W%(rE2BEL)DvDfUZ$g3&%mrKX?)= zjP!29eaZBN0fP8AJf>d{o{jN_l?Ym>iS9a?1WEehmy6^JQv8~Zx&Ws`=rTScWtn!k z1l*BGVAU!O?#8w8Wswl6S~?7f;0W$@NXATTMy$qmvJuUBs`c{i z)}(Fk4jX(A_(lUWgr@ng`!C=JrR+tnRiv78ry;~@E3wps`$P7oOe$RM;u#D9fsNeM zU22^J!>l)~Ah#nZbqBS{Xl9`9umJ>v?vtUN=-q+9kS6#4kHz^biDtgz)}{m$|9bdj zW|0;Gjq0~#N8yAlL4FYkR`9JRh0?|pUs^F~SS5W;@Iycc$o-1LPeAGfII&E93%&Pz^%RhwNT$u$gia+A^>rH&LJvo*u3tx=s zWsIVxk5rr@E==~}ast^2{6}j~Yd|UU=Vq{9Ub#i^n7Doy(a=^1xvVzmD4sy7F7E)s zJ7TnRkk%>u%Km&gY_sIO3aac3QZ(t;bcqnXmYe;IRoNrl=$$~=6U;f6L+oXQE8X-M zY8zr@olhe>CJ3d_tHvL_=1%4!?D{nzF|{#?GHe4La@8FqX{*#G*A<))MyXjYbbGpk zWVsKA07bNTFZXfs**SWwNk*3t5NI3oj{Zg1P;hfJuBZCdG0{{5QTSxV{sx+wegqS6 zu%qaOaN2X{VT;;;xpYa1Wd<9AL9ZcqkFg>>HnP^tl2_0lc(IEWePk36I zeCqbfbhDhvL+Q8cdJvd}uQ%9rsnJfIX;?Yab&`wc$&^LFYfe#i0R?o-7nF8ChGZ%c z?KDy|Os_8$HKKz|2&Z2D%)J-Ht^cGjAT?w{@HlW}fw2PW(!wDM=q?I~#n|t^>VozJ zy}R8@0zUD~l9#;N*6I=qSuHvafag zpK4IcK#L0^mbZ*@XR>5yrp}a*G$XQPjXtvO!P)Doe%AV;qw6OtcQHRKb`U(x?+P?_ zUQNPltZ!v}%~=G^n}RT41-va>qEH?^5&8g~XJ|pIm*Zdr*~SP#CMER3z(fy}qub`4 zt>=dXvD^*yFdDNB`c?A&sl1xcgs4J+uF7XiOpHDMQ!5obh#2O$<%|FoLa$oEut8p} zXS5c7KzABJHH*C7A0^q`E>2LicjC6@vfL*av=>RfW6%i^qUsR(Ligh zdQ*;kg!zct&iN!ND|Xefun~>tP~LoJv`P5A{>qoj4HK8FFtHUee<}m5ms>sv>Vx!v zyytbyM7@>eX%Oh|)PgZ)@&M`MCPuDw77xr*@SxtQH(Z>W3HUW#&xr|dD7&GDuy8g-`+~&IW@>v=@kc%JA2; z!J%C^k^6t;7OjYiAJxqLtiRESgRX}FkXV8+OQaBALpzGINDwy-%I;it5;$j4U+P2+;O%-2Qu!7GxbQtAG>7Tv}K()EHEu8y2d&mMO;lp`RSu!TPSih zd>=ShlU(>>n#2hXdhSd8iGNqA(&HsNbCeq7*Jsj^8)n zA6ISvY*Jz*0f*xhOqSuo=q~{%s>S30Pon~2_bHQ^zLv+hTak2?mz}_&{5}prwNo#2 zUwNGEgil66(-c%jph1#rTEPt5R`iT)E3P{~GXpQNU<@!eFb&W(x1S2@Fwl2MqPlLY(%eE(mp~eq`;XBJV1mEz$3yXZSGZ$ zXn#7E){b`AptLtM&((o?3K)Xc&`+^q9>;w50~F^5!G^#)IrQH{Y^&L3+)`IlkW0z} z4>w7mBoMSJ2c6>cYzzhril#1s+|%$m8R>^5c1zS(^P0CgmBO@u5?5xQG71P~k;qJE zUibIV>wma{ZlSjGgoDccc8Z4GExpUsPgZe?f~G}HBzMoE|0QPs29gVuL#ng+3_0)WCWtGFNFMXAbdSqX_g=W9~ zDn5lZ!a!AFnMn`%U)T1Hd4Y5*o|Z3~;?TIasfZ){_b=~!#C)Sz*jPjkig@n*t(Lw7 z{851RNTp`!fd;#AhLA-!%Mxd-x+Q*OJ$rZk@|C?4AC^Xb)sz3O=(2%RA1^BIon?dw z<+(Q8m6gN%=$I1d&&^-mg+3p35e__HfP5 zeTB=GLEDWN74f62e>9@}X+3NIOmfi7h)Gr3+d+xBNI|xo#dz_gx>L2R00009a9JgN zr|oqJ^;cdYpn6pR8J^pw>WvKpJAgit37-gj@gZ5v73hfTGAJF={FYuoaA2<&N zR|L2HGyazW8J|EuBHy6j4yTas|Ksdu5HH{v6p z)L>uWBp~8f;FIkd<>e_j?WvxT(_&572uP+yqPgE+Lo zBpVv2Hw@@eY?@%S0dYc0u)(pI`32Pc=7Q?SP%d~^G#=3Ma~mPSV)}Kjo2YA&KikL8 zHc?&vx-NE};wtY&5~@=58ptY`ra!;;@(>AzY-c>%hH{d$F;L3HABk% zoP9CK@(gK?Jr>a}#(1BzSj^E>duoUue8@>WdT*jNp*42Q=A3hGYj$(;SgP;wmQ=M1 zVO;8;QRsGu$*L8PLoZgFQ50zp^m75=g!~xcHAd=ENMJ^8iXdQlXzQW!@^=Ly-75xq z-8Nz^CskmFc6td*Ob(qUT#{94|AxOOwvY1xwR+wXcF-sE>~3cua5c+C=5}9}#_unDfC#LSt}Nd{Y@fgnKq+SfYh zY$?Bo*Y6MWU8A!Go|p2%5x-d!xVG2o%X(uqFBdA|0;VQxU!Z zCFk&CYb8iQAnMyUXp(imJm&n8x~?Xq@^u7A)fLS)zrFQw)5q2s{B4PF+;8} zV^VTWcIc>9c=XOP;mj>Zsog#DYgZ)xX*{V`abdGPKvFPhS{?CtuL!g%b0u!Rn2 z{JrIkV*=GB8nvCyq___E4d^qRRv^@!z)|mDMk+l4>M|RlpX|Jf;ytSUq#f5+gT+xD z_yH-r;xgE+#yau41lR5ejA+2%hIgcM0Q|o&WjgM_>^-GEhxcI9#Z{aSfJfEA3gR(_ z(j(of59k>K`pX?3i`m~rDijw1xyG-sdmS(qcx}AAOQG{M!bFZy$D8Vo?BoZQc6CCg zd`yEqhVQtMxs;h?;_Zn^e0b~5U0N&VA$myn-nm}SQ;s_dPgTl_HJw50gAM;HM+U*m z7t_`ufK+N9t?8!}3o?MV3Myh4KoN&$mlYVO2hHdmyKX@?zyZkzOSU_ogIm8PN z2&6K|uZug^@AR6VZGE0#4I;fFC~!O8rM46LC;A7tKJMN1A*fz9c0Hl?$L5e%9`+6} zU3T<2Y$yJL?nty1J5geTbxfn>%cus#&)LKVvngFRwskG4C3v_YjwrB09M|f)P5mUQ znq0DG7Z@i&DP_j|Nx@Z00eOMFA`Va*>o4F;DDjLIj>=Ti0BZKOx0Nw9z_KFA?(v05 z*s8pmeTUyxlu@|j`+%-%$LuJi%< z)6|CYo7J>LWGsnvoA6aZQ0Lw>%o(Yh@paS;h8mxQ*zV-d-wY2e8P3Nj9d@Avv#B~B z&_u-jGV9P{jP5}`R0QqT5^WeurO^xWQ>LO0CYZC2URVGwVlD+n90-AeXP781f_k33 zmfvi8lzs9lAmU$gn`YqZ9R_yx!kP3UMH>ga3wdB6a^XVM&)FaK`n4CS%B&%3QFaVe zFs6_;8~gBtZ%hoEJP2}HD=3V9-~o?Rn6m}%7=n%2Lf!TP;F!{`3*Z#BTh6;v%+`jA zBV|(ECHk9vF`r3fNC*tA6k}5j80nu$iCe+~3j~ZIEzQNc15XN9o5l)(+?sEtz_11c zS&=D0vk>;tMu&zpEDY$_p$E(`&*$hlVP)CEb~54j%Pyi5<}MfB-NS7XaY_u?6IS?u zC7`lRKSAi8M=qmrNodp$>DgEIT%U4u(gY#6^kZ?h-8K%BXX7J-#*DEtNvW8F>}g$q z8MV83ahQzZsXZYt`P_|fHN3C0BmjJo#=QIDj7+#`vV)A=@)?KAtuzOnnMT^U44!9% zkh7AlHAV}#;>Lz{;?1aaw_a_%Kd<8#YFo58y@p0{T|J{IR$u3qA=P&uZ?{ytLgM~L z)S5j#%FRLwJ1IQ4P@~h-s;*nb0>n|cb55+Lh6rzjTy=;W;e7_RZ$e3%G!FKSH>yE( zrqkLRvL6hjS=pqDFsbWyyPeKREbldEGf_%t3#F(+&iJK7y^M3{f@}0oBAAD!jS%sO zD;qnRiVldyT*M_)~=Mt2II=~>d>P@ z#5cCh5v z-Z<~)aQJ>6#e2??p)5SeN~x)4P+)GhE6Z5Wld@jMmCdonJ-(bv|FRPcPNYRALW4q! zV6QK?>%l=YBYU~!L}~8pneY?*$3p{_ySr3}`APr~q8Qm|>wa!jC3o>VLDVQdu(#AGEWczzHNimWs~sD^vy=E?1xy@PE@hgm^_A z>5d*HnpFcrgzZX4&_rd&kZSHj&L0YYy;v;#d4sX9_UHKJf3o@i!tDPfr6v={<#7z- zx@g&aHk7)^!EP)@U9&IEC6@p^_1%_+MdyF*!vAgHzgUv&=~AFtR?b9zi~>1G90pEa zf=IUz^1iGmU0L1G4&MKtHsJqnO1mhb?Kxrm-xv_k&tIY*W*+!FfzQs(mTAnt*6jVS z=7bV@52givbc|S4B~Oh%C7(ZS)gBkZ=as%|{N*JG#Tj#eh{LNGQ)CU=nk?Yi1-}V4 z=d$Ds?r(n#kU%MMjqR z$_D;#!)=Y%aDGuw2cGguxit80%^1__7n!2z4f!tI)_Z8W8-%@8Mmy&rG$0^gL4VL? zSS9skOTZ0gx*)0n=!j$KDCBoAwce$7Zb@N|1}b*fg;Koo*g;o`t!2M0LJQB@idSWV zuYl@v|D~`SVcA-Dc_E*2o0JHs3euiY_wCzsvsOf3$HK@sN_-VI_G>0-T#sI^#YYK# zIU*KAp7uYteCSklfHl`_=`!5OD}}<6P5%R%LjQK7{y^4=NM$yf081kp zF%eY>{=p$tMp#M*7MW)%0E9}kaIJ^Z32S$O2|9xnTvBL)$f9Vyq`|UXO5C!M^Fi1> zf1L_UQtBPb2Xq6Ut}>->F#5~(LV`EvS96&I_afnSY%rOXT+;#*vZsafp4*OEuR%r9bjjcc8XU` zGQyzhdEw%&-)Q#?y_NRn4Y&I(=%jv$18GS)+Cb{ri;nKwH-)op@FbjhVelMByv%EX!c51U<9Vpkc6?Sce zmp2myKGQy7UCpOdAb3^b0}#xNgl{xRNO@{q;T=)J@lXGBZLum3_aX)z%6NVLI({I8 zb10#zDNR&$k$U3!OUxz{j$|hFUc{J6{1U;<56(|BLV@@i|>aU zkAL(EmY}v=+A|sz73j|qqsc=wbG_K=-_P^F0L|HdEMrX#9IM(y`?LQZ>QxmDVTQ<# zl-ZDG2g~Q*Sd=#8-K0S))+A6jFzyz66hr)rQ)IZ6`MHi%jZ^=I{}qf@{S^Lnfd%RP zuH*+wUk6u}LFjj(%sy7{Nn4p$o8R*=B(fG?gETm=9q| zcqsQeH_CHg;}h(7Wf@i$z7sYxJ^J1!r#|MOAiQ~IfK%Ay4B&waplir0Q164#R;3ES zUfZ)a+!Nmghm#MlMdL3pLCmt<<%u}%c7DYPgHE;|p`#wEwt%9nwr zgEtq-EW>kUXzP!-oy%lq$p8T4Ry zSR$A#(h#gYta;S_RfeqYjaq;3j~OOTTwcQ z-CrzHeuJV#*ztmR>u<(JpIFUVWPGX!?TwGGAR6F zja>{9n9)Q&2ZC|*RsFdB^tu><>%Ll=a6YWWXq!gDPQ>FydW9i~-LHQ_>KYSJi!ZZu zcH1YV)!~HLg9Lxx8wE_lPp5}=jm|-CVl>~~J^yCk`^C6l1|87n^R^I(ImZofDDkMF ztRD7dUc90~1cVTO*GZ&tvD7W)=HrEga?i=%6WtsPL2dfZIHciet z8(e46SAIE5i+Pl|?b{-2}F6VZ|JPrJ+t-IPp|z_{%Ti4@`;aGQM2y>~JhwL3Ek2DC>;CkgXFV zQm*4#qy^K0Z(JPsGSzYLxlls|#A5xLNNol1F1+556;Z>fPi9f71+j>K)!Ik-Jy2 zl`o$8H>|rr$!2H$6MSb)!~r0<0$|@jAb%Mo#j00UyqQLrt~AB95@08=>(YzBgG6l; z9P|>NJ@kT`B0<=&83NlqQd+SLa!X*|Zh^}Nu&p${D62R+B4?QD*x{~|XhTNTy(MLt zePETGE-Il`S?T8wvze)q0}7=R*!8Rak_j+<&*4VV^Ku|&Mq(qYSRAAnyHF>91(wyo z=^lc=E**a{fskoI_fejsh%R=kwOz=%H*6c`VaHid(Ii0>KuH+h5Ze1ljjn{nL>CBXlt~N-`^9r~a09geZW~IX|M>uY3I5PB; zAZ@pC^h-<>LnJ2%@fGh-K+xmFg&qtWzWQvBAh@*;fh(k?>K1 zosHvaZdkPTW=ZO`EZn-3uBpA{205Mc71k2s78K#_yf@Zoh9S7COtQ_KI5`SQ*k zkvwJGi^a5CPgW3}EPrMH5oG%bb0}jg*7H~BH0HxIFq$p|A=DzspwvDpyYTQZ9$DOko2%={yXCB!!j=bcZ@C;J_?(q42ZMB zjij7obwlA2=L=+vFe9=*YHxCWNG>4$P&3@|B#C-iMMGEB27#yo0cz&KffN zBkUc03sFbp&T@+lNdf7Yhl(kT!Kv2TZy{!FT?dV25I81bSmEIpKKFZ4gGapZKS6)3Uw`;dMmS`q=(&+AUT$g~>s_3F7m($u&O#G^ z5cqj9J7W?Ghw-R&*vdl*B9+Dws~uAlb{9>$5S6bJVrdQCTbp(?0XWT`exAibYSA0M zRvJF939(cJgdnm7*7+mZdiSk)Kk1cv+fd&!-cSfdPR1g#6v_`}&J@0}4_8nKX<80j z*wd|6&`+*88fe=OhEzLrhse$V$1Qw45$tWzofSIwj68Kyh6ON~w~k16+@^;h+vbrx z9Asnh*DAUsVop087`;E0dX-O}X{!vTtSmZc;q&SxgUJZ*qG8$0goORgTn`wLdKK!ykc6H=Wz)$u2 z+rGgM0`~&}V^G8Vq=mC+Qf@D(2co!y`@Fa1U%aFsSk^(BK?hGKi|%`(@G=kfA_kyYUdGr+}$@JJ?>?73)- zc@GK3cgtJ%pxHzq*!iyC$Eq>S^h#U38s58nZ+35I^Kr#&TyT2s_96#fJx@}?zYSmiKNX^gQ80I!&ZNxc(M~6 zVUcP-O+MdggK9ni33M5|ZLq$MJOF@z9kK&ba6CGe1kRQ3XFCB3_Vc}ba%^`@pFKjz zXxEG>w5d$2onW`1NiBgkgzbB-Tv|8Y+{`Zns{Bif6Fd43JBVP-J_Y5e)(7ZfUG6h~ zVH?NsOcZ*0IRZJ6tHqkXBF|WO=G*N4(qeHFl}a`2IC>3Ii|s-b#7_rkFAIBbNBzJa z2dI8W>9YN6mX;;hC+ZA+r?0%jLdc8j0C6oq<}1~wT?4qTT)&de+DosFvo3mBH%eIr(3?gLH{|)oK4n= zqgiK+i|4R38zN|qgJx{5RPuPfFlCD6+LOg{`+_^NVyB++8jq<)n9P8dRnqARQ}feR}FNT9s)Q z_<2LYB~0=jSrzjr~|Rdk4u9;3L6WB;k(+cW#Hy)$p1bZ$Rz=Nq*2z(m=L z2nA2mW=?%XWdU4TXy55?wdn5A)n9%rNLW>;zzW*bcCJ#2$Yna^_ulra^}iZHHn#U7 zBWJQlRi$nGu%|#7)M}c*Vl&>b6R5H}X)2nsc%`RrGLw3N)Om zyO)n;2TeH@X*#5Zju9b^NzoCE`$J95@|muKMqE6XRUyZF^13qvp{Hk!c!PaqAN*hz zWW9c^DU!dg+iez%jJ~#r$LiD8d#6nz0aJ^N29OE7hmY`l-z6Y#m4VB4DlVpo^V>nA zKrK%lsskZEGhpj|8l7o*tWr-g7#9{EQ%8O5_c`YuhFr8Gc(m{xN<$7h5Y9!1=CMq! z92BsV<|A;Ya1X5rSq1${n}y4%#BDZp^@Fb3^vFJ~wLoDze%)QCSdp)kI2bGtAi-@0XI;?4X^@3=0kLkC@(s=Xw#EI4EY_cs-3br@JUj5} zc%t}gy_slbwb1=Xv;N@*n7@5_LN%)Jb|UkB0V+45ga0wdkkuD!e|g~9F*5LS)B#w- zISFZlU-?ArOHE70VS}72(@0$hoX93C#f!GJBdQqDm2MNsI@ssGq1E2MlW(`u>9j}W z4*_Af%cFpDDw=6NBgVC4L7Xer!L37uImfs*Y~r8LYy`>RR^`FG2>98evRt=sH>#vU z(>`=@kOePy-aBM{Y`T#wuLopmZO|;%B5P;aP0n1i6V%^d78C z)o_T$d$<&yMCsP(#`;(|&V%eNNVxJk*;3#>CdG1q0ctCUzQ0;m-MM#eMc`v7RtwOyv$OPP%rxmX`RR&ibom9Sq(s@YtyK}v5X_|od$QfnC zyOLn3oav`9>Np%YlT_S-j-<@Oh_N`E)wZ&XA6z&a z*-RwN!bVqh9}u9ApL8+`&q9BA&Nhy`FnVvji6pNAOvimUO6sN+|D--ZEAR%@fmv!+ zrlVzpVOE01KK@(~coSG+K!3~cX__I>q9u9g0@Bv(Aqgg!+-=6sZs6X8LkW-yitLt zDk%Ge0p;qIrjt-?Q`=#!@5%BD9p~mCkt`L~iMT?|zo)1LEh;a)c`zqNfntax^VX zU0E$14+sFm9?A2xQvsb$)*H3L?N<|qdcgIYSH^wEzVV5^1i)N2p4M@F=EqIvF(eKN z&^i}!yS|uo%B&$N=&>1~iF1KQK_gjdP`eAQw%5}zCNQ5C-gGq&{?CR{N93Y@@s7kyS z+9QhGEocH`I2|STwA6z$V{Yxg#Z%^OaIuRyp3FXYZ2gw5chTew5KJ zvcxa~#Ib4$2vgOVnQf0b>{~<{-H(j4QJ`%EETnliA23^lY$$5JBUF3m1i|W+U!Kn08NsLDE{UL&8(KAYa=+A z=x?5h%RRR`kCXAhXA|O96cGaJ2*OipD~eopnYa!cCGy3W_=E7U%M4;Qg?|M6X54bw zKBhxtC;1rGYA}cS6fqdUR(4Z$#fx@T=%qGzj5LVvT}UMO9@@B})#p4FA}rsCpzaG9 zBr}Va7O294RdrFi+;H`6RdQQ;32Y(W%^XwI$?3leJj!-j4LYQs?CjHRZKN&lxCNKx_m)_jm*$UWJ zAi6%Uit!7bADp1^I?xUt;Hqk*p>c&4KEffXsgh{yi%YD;Xzug8sbRU@cu4zqYsbd~ z_u9$-PjpiU%X9Q*0OvdtA?SesFYt}Kvk8eLkSpmVzF62GP6LNjT?f5>f#s567jN?H zMa^!-MTIC@wSr9sQjDCcv&(QwE5c(Jmrc0@5OMDdc1xq*F)9n--7{cd)y&pi$0el~Jz`X>U6sQTi z#LiIsB6VT-yUyC8=K;-iwz^c6UGoQB-?6_zz|CoqF_u$SD484_(XmMcJY)Z^hqh&a zC`Cpe2*WQR?(x7@XWfZ2)T4Vb04xpKuO~dM0FC1+wnMe-m7w0xaZ&i8PVqCuP&7zJ ziu?g9!7c2@%KKHN0}(n(@K1nNr8Ze52975(Oi;cAmVbpNtfn-JI_yp+8S0p;O**%# zBZLJLE5|5QfD;!A^F|#_;e}zjq#*e;gBmUHk%xAv;Tze<=%~S@@j#Zt)I7!E(iqY|$BW zC=d>ArOD;deTKG$f)dci@&-C`bRL(!5M!Zltm(LM4Pqxp4BkOTbIQBX+P&qV0t%rj zq|iNP-`T1>H;8x&<7YsLu#(9ztsZ1^FIeI+)}U9VVW(3MuT(?7C$QDi-TUt}uITGV zR!M?mj6BbV)x3Z~gq?NNq@{8L_3Cma52T zXB!{s+vs{#1W5ybNr-R^f#vGO?g!)I$!pER_ z3Bce^mJLdH6JQmoUC$qwrLfZ}Vgue);C&6&HA(xxT@ctO2(8_YqSf0VeV3ux)0BGN{a zILK}xA?}83xVPO9Rt;i2jat6T0FRGCw(h?FO#1^LOY#)zmP6!a%7n?m5WXukByTA+ z00UkTN{#KARyo9>Qu|TwPX7=&I|=cQWZxFX&9F%nhWf&hVF3Nnb)!|X1a#bgXwcQz z6GD#0@%pG{=nc^pY37fYrE_B-6sM#pt20uJ3z4h=Wa7WtE&}A2+gk5L_UqPEwtQ7| zGUd!%(uI#xbVw&+p&Y@hYCrL;wDsR4_`mfV@XgSITCi1jR8;Yls3!Pa%)`79qt?8{ zVWv{#;b}^a*Ssd~^@Z}V!xVLaGgM?h|tO&g#%1@ zT$C{pg<~fwe|yDyQ-&-qVu;NDP&7?b-Q&asZ(2fyNc?V$N&=c;^+mBwmC8*$f-?kD zGm87!UKdUVY>cmj`R9Nov2OQXyq;)8N9_$B4r!|JDYzUidE)5GIJ{(fiah!pRIZY4 zGg(a(-Tv0)$AeE79%;czv)4W0(?@A#(|Z#LTBw>AExovsGC2xnCH_PTA0_}Z_JlCr zcDza-o6f{0b?8-37d%;g={Ltf{EVbL9jG6yvdG|z``;skKnaZ=v_JhTb%NGT7r?)k zQ=dzolF7hpFx)^^konY5qK=MDgy2Gv6friM{HT}I6q84)Mcz%#5)n(`5Gsw}14zKE z8on=u1`MfIJ}7Ot-oM3wD&TH2hnLUv&iHUEK8&h5nACJY;YuA(aA5i&=R}$~6b*se z=5jeRh?=Xz8at!To&WmR)}JW-Q|m>X;TfB)%@}5O(^#%&O~Z?BsDE-Z-bkWBp~F;- zYEM>uVYWtebKS5)iuVW%@d}+a#-S++Oa|7xXxUc`uZ6@~N~}+c-*G|R?&@ZATquXR zib^WZxTEF3k{kxgGb7-OO0UUwU|+r!+xJs?sdM4Sc#TQoj18qVo#hqe-atu}cEa~j zNbT8_mY~1G*ljLiFqz<%A%pSnhE!9(OR0IQ68NiVacJD&)NO=WJ21W=YftOx2Vv03 zXgsVrO35Sqlipj_D+1bpYZO9uk3b3wX_wzTM&QTq7a^OOqeBIz7I{<1p993r%&+H9 zbM|vhm^g^FP-XlmaaH!2qhI<;YJa^@I`iUmzz~{Nx9I%eA8iq-L4AL}W(LTdYI3Pi zgassLBcSw>8X|zs+vhnztt&t~7eD64M~Ze;ZI{}`7;3DgN7Qf=O+o0{rK6$KD;zlhUo@!??2dA1QIN0@H)j2 zLS$Cg2gW;Fa98%<;s^gXM}?Z#KJ_7BAL(!mn5o_7_d~YCC$Wfw=f>I1WDzG!SJL_C ztBW64wdeS!R*cZOEA8|r#8%sCqPx*l=OKnz(A8!f$b5QBnucRiZJqvoJPZgC)g`N9 z&6gIajik=k%c^Ujfq8U~9h-EF$$TrWzp-d_ZNpgvx(pJ;_^I=rekZe}*v>at&`PMwfasmx z4%cxBP0dtcg8XW|@qh<;6F=aE<8vqM)K?CJ6WaYsL>^^5FP~G1xl=`gj2KP2Wvf!U zB&o~fUY|CJtM@|v!P6ulwu71M-ty}fN}+(^=0Nb9#=$?8)&M3A$&PPz)@sfA8CGx@ zgCE!v4|~~dgm^{hw37w3(q4n9OQptPHwc0BR9Tx8z_eXgWU9Td=GyBukt3Q2dp7RD zOYjol=>bSEZg^gx3hpa}%W?Xtv#x}7mX*yoD5s^5Ptd3d8i||3<(~_|{}9Tcky`M; zz2fxoJPJ6RTa(M!eeZ|LC3ji5m#u!G){MsymH)xv?dLBn%oSWahnV*A}4Pw4+ZFN@*nCU9I}WE{>x(?Pjf=N5GGJn!p%(?y9n(u z8dE@vh3y5QFw}iD1dj68{41ypN! zeKC0&r^Y^mirw+t(|MqmUhG5x-~LFYz2OIK$o3LxDr3A^va6H0Y+PLIlL5tg^!xXB z-OdA1B-zP9Lm@#Z5!I#goqs{uqd?o^99$hgmat-5bfYH{Uw>~=n0w?~oE^rfEDs2R)f$$27>NJGCxY$*f@wRI>Og0rkL#u5^ZiDFaxy76d%lg;3G};SqJ2DsCrV+8UgkM;<$=m&1dawq8=L7)dm+#&=zd^YT8X8@9-NQ2 zd6&FYS6-Gl4>ok9M3D@a@MuaT+hr#w_VCvCoHBFuPcm$CmsdK$>?3Z^h1reQS#t(U z!tB_p0ZG7Ig?wMW-dDEyV9z*l+`bP8HlaV2s`lxE{Po!Y!SJ;51nSvZr1fMj8**vs z1Cy2Z>3#9*)LCk0_?`C7qE6=R?#d?w*u-JwxHO)gpG5o5J`U9VPCZ&7oEr+)pDN%X zJ+Ci}?<=G;M@$Ds(Of4+&( zg*pNXfy*BxvCy+Cvx<=L4p!^M-vSab`XuP|i*iLIMvEWu%T)IA?7U}3P8!&LuxMoM z^^8{qwWcRtyWK#sy%30OPD%mkMd*D`t%9m55Xi(J<$2a7o2Y zlmvC>MpP2Ga(-+V3lZNtrlaGFSt@ zZ`jhY{XB^*@tsU7-kP6%ayHp4Web|!!)mjL6`=cl(Yu`G?0}=6UfLgELkNLLdwK=# ze<(fLaZMwDZ@La^x<|EHUeSVb-tQeY-t~%^k))r- z9C!w`IW7G1kDK(quTRyVm;4*dj~7iz54kamu>~%~&OLOoyyzYLrk3996Q*C(9G<{% zt0@qqb_yVaPvq+cNgCHv;q$!i3ybEik{7uj#rD6*X_Tew3~~P-uZmP=n7_e<=@FnJ zx2*Upr^gfTElwo48lm*gFwfC{TIZBr9(eU3vk!S-e>yFx6|YR6y91C@sM(b1lw}G6 z6-=;4MbhPFB$=D7tAC!Gm@zEV;Eby#ObqKi+@-Q(|7Lf{bQx0}(SJV+ows8YgoQds z*rSAu&eT?AC*b+}km@Z)_>OHrq=u4_VV8~Rc#<`#l$mgUKdZWR4+&?enBl&OFCGb| zq5H=?V%xBNFgv2r%g0T&TNCNzOu1{kQl4(JefEMi1G!C z(f3X>q^vzeF9Y&M+8?bg>L9F0OHa+e>gx0%>m1&$Lg{Z>JV7%{&$<)l?c3G#&L_W^v4i|>fu!90dP5! zDer7_C0et;53syK%R5zd^micoke?rudvd6BL=KgJ&zM#V>|h^S4D&#R5S`8kEBR=T zjjgDR?Jy3iYS44qN*Kmuqh)A~Z0o%ro#z0?JUFSB$4e%Ga1(O!&Yc{vcN6N#dzX+2 zplN}!A=MhngOP1o%dEdk&EpOlQ}f(wg~2uRS-!x%`$QeI3iGLAe;hJ2&f=EGg?j_{ zQaLfqEcfAVQ&PHci0e5f1a7E_^`L6r5v2EOsk0sXPxhXKL4y%ZxCDT@M`(0>Te|6tQEtVR#Z`xe#QR6;@LOPI^b=K*X>MHJZbW9GM#SM2uvN3F)EG= zsueK3x{?jteYP{KBZ4m%O)GHoKSTZ?k-b4W1fOmM2u{qolf;i+BT{xa9p9QO`KzRZ z8zE9%>~()$5iqS+_D?SIKJs1?Nyftn+4@}(i_d2IMt_g?3An|ykd7t%2d z6%VY9>A^}d!0i!f{|2SaueEJ{T60FF!ll^@%EcF zk_e{rUegfdYE z7^JM)>{=&^wR7qw2I*{29Ez|_eWAzeS0jEU!TCR5;xM`rgb4ha{HLu`dS)#?Gv{yD z%jysB-r1r)lvE|~`x9OCR@-3lYcuyI&4YNSJ~aTSu`JD2ZMia@tlmBY2@US0z1^mh zIdx@u%NRXYMEd!jSufZicj1PB#`W*GZ0x}XMWxAC13De!Q{JeFw{D)(lLO-m2{zja zC~oJiE)b7jl*Q)RUrF5-T8S>O*}*poC=;N*Qq^ms#yd}AwaWzeO5d>||CP*`jkUyp zwAlq;U153R0tQUH9ugm3cCqoAx-FKyx+rq9|K z){J{k!~Adwt{()JA7Y;`q{~nTPM_`|3pM$J?%2}f^W3#Wz|4xjg7{%Xdx_XRCL zGV$TS>E%t*{Dx3pZqNOg*4Pe`R~5bd{HH0K{E3S*Iyeax+;$}m^$9;2{s}4rOgHsq zzu;y?Qt?)JGD>XYiosI~B-OjSU3{A}@EYgiYy?l#d{hhsZI5pdr(4a<_7%rK$zG`$ zL(4E-q;*qDAWoV?hE(h(63#~{$uR^w)JrKbS*vM1Fbn&ly$xHZ$r2nts-YcYhc>MF z+S#A=*1$?81fGR%vkuZpL>Eh7Vg0>Ke4@Nb$OyKZJkZA`kB+_OVyMyDT&R4(Us+0S zdxdhl^F5=Z2K|PfR5;tPFDr2{uPxp{S*02qe8l}Q&jMXIB9xxb*?gEaf6#IbrmU_^ zl)@xq^P6)2FR?NHNFg|G^mOq{JWTg>3k&%U9M5{DR~KGS<7b=`LAcHxMur>ZYmU^) z_rTsU#qF;rNJA!DNF$9tWIB1bZC$uetYyGJ=FS7wg$bW=jk3nD3^WWXmmXX|*uqEJ zjvDpMc(ymWmtWE+Lzs)l1R1I*!DZf76>dG}0vy8l%z@`!RLWgH^|fwjX&Hf-N)RAK zjZ1~E@7wvc?UX5sr+@*ZP4*kc&}We;b_O8tj$Xmqpc6(HiZ>ssBDlALHds1gRWM7eBaM%Zb69 zr7`HRY3-^UB6J*NZQimn584O@PS{MA;3M;R#FH|r_p~*28VQc-!34HEo7A?jp6y4G zt>|@C_ijWeW!SMof-2?X|414pjaL=E4lTPSsYW;CEO_0IN?+pER-L)A}=HsCy=%gKpd#{I2zo zS53ekZrzucTJ?ZG1y2^fs+2oUim0qkykwbYOa3b6>Jp||j~G?6;?l(w;lZfZ^n{04 zTz$)mf^J`z({!h}EiIc0cDAWYRn^^7NAN{~WrBsAL!>jq1C3qL3FLFna1@aR4wlbC z%Bj34Ga&2~QQo*mX?O-lT0LwJ@gIh*=%LSrcl>D5h*#QJkZth1r7=0f&|faP2c|Pt zBK|h{{je(s=ka5B^D3AAdR44&JUEzwexIve_jwpw`mCQlq8d_qLD=sggmjKROgm7% zvz_k5_F*4)7dt!|oHG_o)K{oZ!`ZeBca)u$SWdYv2Nwy-nTD^gS=I)<>OC-%YEHSf z;1Lkd)yC094eSqAC2x6vGzAEB3ZY(Or_;`Hq&G@P`+RI)OpO_9uyMNI@cj`U8HATG z)a5AsoKq+6sSZkwyi8}8sz0oALJSnO5^nm%87-kt$0hrakMbvIi1^$Y;vqPO;O_A$ z$@3oBn?L_Vn-I~K6b|-to*MG}ch6o$Z-0(~GDX7);8w#atZk_??5a^?d*ZV#7fURV zz@kQz;A1-dLJ-f$1*t}%4PCmE%j|e4^83(oS+7<@L`pGfz$UmUZ;10RsTQi1z}RyQ z*ksh(Ny3trSPXZULj)|)MWHXbW2yGmiFE42wT-E$i=8wufvgRWs5sZSfEKc>{k(Jv z?OkOI?N?x|C5w7`T?{?FpPXdxn zee8u7gDAnFvHuY@YNP(1%p5{CX~~FAx9zWltZPA{1X%>6&j@`sB$bO_4|72G#{+W;lPK;po*&G=mMoQ7G1S$R0{GvACb~pvXy1W+Zk$5yDs&{H zy59N8gI&FZNjKd^@MTu4UusLjj@?zH8wt4(HxOHS=>8!{Cs2q4S z34EScI-Pe1N2AxQx8}eq)KKu`3uPNFKbQ~AN9n(r{tCcD-2=#{a-S=1_+Qb+<~T_F zXbQgZV5%LbT0^BO0!+ZMRS~9RJIS4Nm8(xnQFoOh};1kAa|G_`HLnQdbH z5~bFXhZ0?w*XHFB7enNc7)y@?u1QfkJKkVcXYTa=9nHjN^UCs&u1fp$#n+V?;L8)D z?<;&M7yGHt$T~qaB2E7Z@1Z|9CK>!mJWbXitVO;U9|zC9eO)n5RjZIS zswnh8QZ*(E6Jvt}K5>v5$*wz4JRNp1w6GmsV7QZoFmYrtDvDd^MP0-o#2q1GEM`cs zR;<(-apz`;{+VldKErE4bpl(l?Gpw~qhv5>8t-R}#J;6g!|lhnuHh5;FHT3L z~y%JK-*7TF}qaTOR4~6CDZBIgD#GuMSnoV$;ftfCNqEf`2 zu!$lfd=t+5P@0pF=~{VD-SpR%i&UA0#s|!K_-ac{H6aAvHx9tCf6kOz4Tfs1LH0xT z7_KdS*>_d*9JE*CwI&1svB|2>&=t)0bK9t_jnX&u2Z&}C9|Z73u21rF$AB|mVuYos zW~A!w$b1_0CuC7>)ywAD_;L^llpVjjuR00TcuNos5`~=RuOE+TFJ+`EE~b%|%F`r8A<8KE9t*b0bxb+&){KxN-3X`X zgN0x=oFt*Ye~QpWeNSFay<7(z(EO_=CNK2maKYfq2WiQ<+c@_|AzpYWo0*g$8SYSO zDvWncULzH4yhxcEs!DZ19&I~84-Gw4uSei_ug?lj`j&(oOcjVh-O|V;$|59=RlN&X zFmOi02uP+fGYFh>>lJMd^@EslKB+_q2Gt{gnscs05yg{NAkUbtSLa%k)X5 zR(CSY?L&w3Rp!aDtyv4_XV(V9A*VEeS`#Ksc$)-l%o`c?qA(ni`Ue__eJVL9C6^NEqnV zE(`Ju3^TmAv&gd^j!DI6o@~wGdiOj$DM%m%(3B$)6E(x%BxrSdNyWsyfLOOwu&|iLYRw8uhE2)6K}MV z8gKpCkbDcq;$~LzMd&?jSEY1?TlL~>uH*^P1(FxYL*Y+Oa&B>3cY9XZ;1LI=e!}fZ zZd;BnR3>_@0>P=i$bWx(K{=k>Oxjpr0(P`#d6wAQNvjr?T~t23PS-5SO#=ku4gh}r zr+F2>FO45DJlE!*8x|Gn_^3ov>IGA!fqz=AG*ratuT8!8z-@&)j%V+CjcCRTiITIeaqI@RdQ#ruvUW|C8ZV94a~6*86}9q#Bd(Oh1Tw zUP*ot(XD8769?h-4sIT{iTWYs_Th%4;=mbq8kUjlaoUi~V2;GcrSpGmR?T-G9|Ku= zG;n&V(NpVaD!nV0V6SqKmf=&{mwT5L?P-+W2ad5l-DnUhBBk3C4~B4$KkZPUK|-;D zrn>IA{1h)9?I41&IK5WDp3l^LeG89>HZUm`Yf5rZJ#YBWU%92fdb_BwH_#Bg@JUKT zVQ}O(-&%gcS95SdufViL@PEaa8`LBv$B=$mk|KQ{5WW&$v2%XZ9DwD)8 zd4PC6BaQmV82VPhZn6?A!S8pgg$fQN0V3NQ%x?s^_vUOvHG8%}5y9`!{3wQSPs%1h zdM=iRJ|aU~Qj=5NFDv8~jN(;j6@fgdWpd7s_KXtY*$0jd{;@1a!__p~{I2 zSa5KFKm@a#+syEWN18xXqc?YckKk0#*Y^cV{z}+|y=Z`v|6XY=Q{=st9tYEEso z*y6@i6qshLp1mM1a zKW5GVv@~_C)GQEx8Lpw+f^1I94Z@x@nW4GPGu`y2b(cPzIxrsTD;s>LyZ0GE=pt_p z&Gz?!dHC=Vq(lg#7%&z%>_&4u@&Bx<^`dq@7I=|;(NT02Mkh1kD-*S(^RP|nH(o+A z%B>hz+5zlzESe%BP98HOyPLp2{qt1LCH6ZgiByx-#R%jKtJR}H zzlj8a$={zCRcBM|{%2_Y2%61Q$J_oklqSqTUW5+f2C6Vp92ab#U+{`>Q?xAE#!4#h}4Z8`)lwj3+V1SAecFi)6kMk=>|A+Hl@hT(%^c{ zvfYt@rupK)_Pv^?>b4a*QQqg3_d55XisUYSsab1(f?nU*$Ar9NU(VT@@e7Kl@~0#c zcngmj!P#Mbo~Ex6t=QtcvN7^dbXYDv1_&uZTcpDbc7+B7dx6KoXIm;MM>H8+LN2YM zQuXZIt!HSfVlsnxSf6nHrd+N|uasvz)A-%R$R^yzd=~`-6XkH!G&Ax-i^-fYS(7E@ z@y`UbE~uMPziW@2JC}KO(yZG1WAJHUj?w-7e3Tvu*5ftqXA0lZX09XHYMao{q9ja&YRr zF7YHUa43Cv&BVvfw*HjH*;GKQKD#q-SCPF68LC(VKScb#Kb94&@DcuASDBE(SiNRZ*Qz(Akb?C8-^^UWF=*EZf&ZYc(| z^BRVYZm5tGPNl;6mHL~vn|}vSM3m&YZgBTbf|2L|$7<2ag>4`GvkXkG8mU-fq)eSd zts;gJ0@b`vL+_5Jj1_!J?3F>5`;QMO!WE?l6swJMVAg~y4(_sKyuu)10Ve(5DRW^C z;4SeyL!!HUgkyb<4N~Q7ET$XCFEPrke@@c#J@ zStmS7tmCmUF0F0ii;Y$rKBk*ZnS!Q4HUcx!EzN}v{(SqN0d1mwdw3%0BM?j6$8e_9 z?a~(ObWK8f`uc)Fj2j~C)FO$8bA}~8yCd@Y|H3Xr=Gn7C=-)SxoVol4ac198orbTC zjwYVBq4eVQ#P7!k{|I)2>ebtU!{hhwaFU+&QTox!)(L_p67eyE00np+Rd5v- zCJ<|Ge^W`OA~m4)=$P~vSG1l&V==)?(*aGX5_$etgu81NDC69t;wCyt)2t&b@93Ty zr2KE#T3r9Oa8x~GH_lORuqB|;M%YF@J#?-y8q*0|w}|xSXjF)bg&vT} zd?SiwS3-|t)%fSLlvN-jF~(jqjNcs!`O59^db~)?ssag%9<_*D)Y6>nue}k;cBgCO zy0h6V-<5gCx6j+VDJxJ@ZP33Sh@+;EDN*SW=p)ocQxh)z`*=0e)Be2HtakuHv5~y? zepm`)(sk8lte}7|D)Is$CPOL*!9EOh)$%B^(eBm-8M|q;7ee>VFmw#WuU!%@+)=(s zwZEU{lu#ZeM)CWryGf#P&^$5axQ^ymB1S$+0?U%QvUgrA>X5$9-WvG;4f39Mw*IKq zffLhNKxQ#L{>ij#BvQMO`72&6iM)%rYoJlS;zkNkN3|tTwl+@#K)A7q3Tsw&y`-S< z-EJjP*mozpROX8FG}FGFY9X-%-y)Y!fuWS*R*s6annc?sPiX>Q*graTa=4w zKH5c#0$J2ALI{Z^r!P>jr7X&Ua-YO{nv4CtHj$> zG-d%{5!SPIs9qlI4Aw+ZV#f)k@tCR|xcv^P->QgEY23`1>*-=c1F)olaSM() zOkdFm8rJb4noA=we4IW~rCXx0d+9ILp6wgp7T9^YtA`d57GyZ1xRmX~gOVhq=L4*d z!9~0>=v<9t%D)4ou)^?z2Fy^WIzWdkqd;B~GD}6BiU=yc@tX_M8;A59WJ?v^uNBg$ z;hPV2Wy+6N-59uP5@dA;0if29?ip0N8uc03{AmgcB0WmvBXrY{l9c}T$8Zc@;X)stry zH^-s8Wy%KF3Q-7N+LRNd5mS-4%vf)YI8=^0%8^XOS6+fhZx7$CCG^*{6yA-g!~|_> ziSI2n+pEO;k!6iX@y+7@K-#;-&5nbQok1=p-%9DapwO%dkUuWC-mpQfwbDowS9Bzl z``qt7F5=e`lB=Mk&rwH-VQr>-yAM3Q%^qlh5ljLkHU{2$TdI@^h49tK&E@%_X5K8S zz~nz9XdTYP)-vs#5gbb@s%&QGZZ4&jvv{BmH9IN}8l${&=c1ol7UW{8@u{Slm0vk<{bz&c^s*OWSv`!tc$y zT$OO}1(>a7q$|V>V|GsJr+g#bDG{barOc#q3urQtc|+DO*d{@krBCt{5Q0C%B?2IXvW8W5&4a0v;UlZM}l{x{&uh7EwbiE-t9>J>(R^64ZP&QP??j0qhybCsI?3!x>X zAA&sWMd8`!Dt!&>K>~db7^_}ZT>oP@0GAd zGtS@6ooJxZ_dAc+n$O-bgwoV0fExpivr}Hh8``Vepi{_q0_cVK2{MS0v^hXRxV_h& z#0yHMCTGb-*Q`=JBN0e!uP^&MDgck8dCe3)t(JM$00J-8ME!2^GY^n$~C2|d{l~6ZEfv@#H3YBiA%4ar znBy2{u5gFV(LiOm03FCi)QuGfrZ940H_7*qf4|F(rF5Xyu6IL-=9?#CiC=r2?l4!q zlGx5Hx+&^1one6zm7fx!=)(JhJ2ieIZoNMrfOQu{4z6jqv^Lz^j&H?LWG(^$ifTGB zO>QFi4bambY7%67gMYyOJUu{Sre9osKM}$(P9p6g=?Cs4M0WqH@+>ow|Z!`F@M{$I;c$ zZx1HI26IH_ZBK~47b%+kBH$i<4Ep_togU_fVnzrZ3V0ykmqqv>oHGy1M-}%^!5~Ug zWnM;|L)k4L-3i8+oaO?Z_M`3o-&B;cgw$C{Q zGEB*e80Ux%UKEo-e=ZmUVLF$Wtjg0iduzGo&^dwz(MZu4yw0)OHqnp+7=dm z2pR$@$%fA8D&sGISBmDsq@hIZm~*+fm8~(K-~%IF;sEi^nF}kxh_r}IqXqNhApISvU4}gNmQiMzp7odVyL%?G_G<`QK(B0GZ9y9g`pSZ!)YVsR-MLS4kLwIs-_EWE~A?1lm=_ zh#$_gU19`{QIc*8lN(24NdS)xO~-jN7T${KqRJRTQjn(KcE6J#(9=>O>ya`iFAy%w zK#2#@A4j_Y0};yoXsTg^23l3Oa zwukOu*^wgh$%={9WPg>T5wR!N=3)r1pmgz<(iiu@R%15Tg>H)-zH_ zDPS}vEpJ#^fX3)&(5Oaa=O3h3qRro<-SF67p8XIy|WO2t|= zW@1C51W;0=v7`qtwaTcJYVwn?xyH$K&ZxAf%L7w=-~HwCn29+u$8AJ}g8AAMT#-AK z*dJ4ymZtb+vu1Qqyee2CJoB5pEOAX<+9`h#FACX{PZeJyNVS%!;Q(-&Tv9?awIJ{z zwh0-mfWKCy+9k`MRX<7Nzr%W$7yf+LSZxka)TP?CJ73#-?}lxXfylh^o4Hol!A%C{ zsK%VZE~``P1{f!d56BR)+Ui zJTa4U#x}PJ-$#+*Bh2QwYFz#iv!UsfWGU53CcnIDUF2dCCx1czxYM167@%HR-bDQ5 z&ROP+BCul*ET{J2#Dl`tHFMb889{4JC2R6?uM7X{{AfW@jt0VWubw~OTW^@%Ns`}) z3EK*%mt-s{By=wSUc7bBxyu3>zGTF6>s?Jeg;^No7>7c~yB7mZQLv4o25q}NU#h+c z%1J3lKpWWA3@?963p5?9c_^lpY*lSD2$_#7IPE6l^{1z=iFL9cKXu>5*F%;5MJbiy zYUZfF1TmYIdorMgPtDBdRfpT4qoPtzUk=x`eBp2gdHtob6^=A=-cJx|`uv#@h$*wR z;Az%!A))r;1p>_~aKSPYvSkQW*ezr9kJS?w@IQaQaCjpqWdnkDg%4YISG=N!^89RFlK+&k#e8`w4hDuFBjBB>FT{`DgiR1V< z59&$?8kL;86#K*MDDSUD{pT2wB!bXvp z8&++$Fr6{_ahYN}s%E96BVP>L!=Q4dfhs4XbqJD#B|@%{vPI+_2hSY3Tj6sp%)0pS z2WJ?bEf|>nDiky{tZ)8{Qk|Yu>$K0@nOa;~B)YBeiTv9e?h&fQBz&1w&u1Q-_kNoZ z#qKlL!J~!wcLmgD^m$b(bf90mRapdIK$eXnR_nqmKf#a)~boDsJWC23HS6;VEcp+f}gsLZE{=p%WRDVY5a=xQHGs>o5N1E!1M7 z26_l-!vy0u`J2+#6WYK^(4{sbi`-|ggGUSU?cPb`7$wizB&tNt?*NsS9=sF<+uo2z z+b(mF=oA@R&|7Cm7c(gX$+I%tS%K;)$hF5td41tq0mvcIfR>igMn0sh{fZyOVUR0s zS$AyQk%z^`w@Vq+Sjc3abDe@1RilI=EI8fF8BuTv+%Av5YO<%Tl}EXzm=Mw%S*En% zq68(S!Jh1hKJyaRc7c~{gRQ8#Q=S`xXs-kCUFIASt`b+G(ugo+fzKr#?|Wg>j3l0( z;NF=5_Y)=lkIk-2o*eG6pGx%A$$222^&Uw{gEzHtd< z0PwWL(k8;+3q;`XNc#mC+mj0hgb~!es7yiE{EJ{bUkr)60R%gtrbX}ksckvQEf4xI*=)s?69R~*Ybkb*ff#LBU~I^+!9iR2!w&_p&G<&5A~ zgkbo1`^4HL)1%6BkaeU}ayUmx-ZOHgw{)}65Xs5-ulWegWS~i8RDX==3b6jwX4=o~ z^KmU_0bojeeZX>d=`|QfVL0}5BY&tmg+bT__1ex8yO}42 z782JCzT#_(Ak`$nxy0b#73HMCRo7lOn$+mwEblpa1f8(`=H>JRh%Ul@r4*F3-EzLX zz~o~JDX((wc86Um{(d<=Z2N-1H=ZF?tEz#$wzCutPzgYJ7hpR>Lm8Z+F_`L%v`Gk{ zPoF=8LvYpJF79NGI*3OxW%c^sv*^Ggil2moB`CNv*;T$y2cv8+>PgtAY@^(+pR3{n z$=o1!AZbo)kG4&+;9lhW%{#_NTVem^MwPf~=bkK>opux@pB_=XFPT?L79m=ZVPFErp)*ltU3OX9`7m}FJ zwW$u{R;V&1Q38`4%Biw=F_&RA@UOQKNOa7a=ClU6;SrO|jdL2kunCQRpLu!HRx&b( zDX=38C8PxbQpIQ{*BgIH)1EdVH~7O17Z5rH;$5d_7enYqqwGq z1&$&N82aa8k;=IXJ3WlhCtA7XZUk(iNGg%e5XkhjYi~FE?!C#G|Y)S z?0K2Njr7^0c0R^&*bJ6}W-PDa+fs$o#a6X*J6V`{n+NQH!X$K~cVCP56F+jHz=G$9 zI}8h5Sq_@ErSO9d{I|k1$QNaP;{h%u3k!q_H$g?ze_0Y`{~}9hRf4(W<01!P(dpLW zs79jaqdy+GaXsMKLFRBh&Fq!%p2!Zl zSbN3^I0tTZO@E3+!8)z$WQI~JuH9xOlH}R{xEmfgU~3`_eVMCAl4`PV=$S0DqJ8P3 z;i`L7_Fgys`SqK%NUib*!g>$E=-5jKI${&(s1!l>m{`1hm;b-KsV`1=r+WZloH`vO zC#ar6tTsoE&4GWU>w}%Erw}GZ3^q*tz$)r~?A##`@b~X!; zUiFw`$kE*r4ea^*Q3+;q80H&(o|(PGrLR(TcmMzZ0000000000004i3IF)5B3NM%2 zYonUpn*|NgdRFK}Vj;8FWRQ}2KQ5y&`Xq~Q*Gm93D|f!_rBxi5(zphomEQCEFbPW9 z+$bP9f(X#(;MwfRd)uddC2;c#vcDgBO1)ek`aHZ%!&$A&M8q2A2U0x@3Q3o|aA$~i zXfud+)NI+uaMIIi-hA3qCB3YOZ`ALX7j1wrnd=p*bOYm-O^olz;uU}GZxI}#=#^d% z?;YK9FY-anFpC>A@2+fscL(fcRi4zx}i@m{JoileOMB#Md@ zo!n(7IjA1humAw#Ap^VZY1AiDVkJu#>5%p?m;P<`_F)4`Al7PddKj|t8-x(mBUqAV zLpu@heG~q_{3gA3k2)&awPE8mhe@3m(K?)MJ7+IPlHI|su*#Z-vbbGK?TR7Iv1TaV zB-7O!f-BGP$ntm;5=Vq;LrJm{7sYawQDtBf6TNTqD|M90fx0vef2}`{L`V0D;0E1- zY2UjWlBpPbE$$SwI0o94Rklsx+sB@EzxGp&En;lzus1#q3OpJ}b?Sth87ww4izHkC z00CA8T2rd$QrZmA1A@V%u-JNwzxz8QQbvvoE(sL}lpuYlQ+ZE=(kS9S?U;enY;g~P zcYqy@yRna=Nt&P(zQ}v|RCqG%CM+SU-~kwJ2@ADrgeYrik?NtQl?|-Dv)1z>vD?5T z>1|G=C($Y?TRit^67wZBj15Td>m=a?X_KMHa=bq(3rZ#gvlTcCoCst90X!LjoQZvu zc%?-(S%K!$qD5kCwliPly*RN<4XNgA-*uU>CW+*4^S=g+9X zkXgXLIBHuu_0l3@MZb);7P47|O6NH=E@Bn`i-)S;EU|n#+v=7E>q4*|JyL&|00000 z01Z+E>nCaW$Z(eD8xwMYhn(!EL>zNbLAG$cF97#CJ=O4*OjNRf+)iY5u7%M K#cz6)fB*o3f}z6z literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/admin/additionalconfig/timeout.webp b/static/images/auditor/10.8/access/reviews/admin/additionalconfig/timeout.webp new file mode 100644 index 0000000000000000000000000000000000000000..b98d8a0352eceff3256c0a83a0d61629f3886743 GIT binary patch literal 33570 zcmY(pW00n?x&_*twr$(C?P=S#Ic?jvZQIkfZQJht?(B2-se5kzB=shFQnm6R@2aIF zB`%H~1O%imCj49NHzy(dzww+Ta1Jmv6sQd_zb$KuBq<3o5!s?ux<6cmsolQo4cW_a z&UfFUyKZezR#4y1aCF}nx6_*f79jH3>>~>xv!wr{{~O`0H`@=ZXXJN4BW zkn-sVDBDMPvH#%jC)oD;>$MEH1ORTZe%t{90Kg9b2(T=$=y&&$1~~qly>tJe06^Sg z000Sb_kNFl-+zGojsXAK7AQddU-w=9jrpVcc77uA;CHIO4$$zc_B#d;UH2UTNWaZL z)2_I??2A~Q+~Zax8HSZeg}CvzRTZfUuhq+H+fwE4}ieW`a8n+;oPn} zpdO(8UH7y60Q2_xfN_AUzE^+L zzq7t)U+o|IKK&;C&9{9(ef@bK{fN8HJM6myB>ekydvge=YpvTr0O%b7s`@_s1jdKn zxT)1$ZMh0)@s4i8tLtU9ml7Z7#wzJY8&3~svD*Q(74TcR<9CElV#g8(m7*L_XT=@0 zJkL+S81>pSh=H?7!J`U@s#7CXVIWI#Tblo7~Dbyh4S zJ|hSTEhB#Aqy=_j3ufYwWLen6+7{GGdGe2EVqQYD+!FcX1{H-k{cn>?0=5(r*t;+dD z?MqxE&V)73c564#INghD_X4Xk&Dm}j+}3D6D02Ux`E2mY3^CO`wlsBysrj z!(EQN6o%yG=fTYB2l4v@hC@2ZRsD0aP0yG zBa4u7aZhjpS8nSxXB>0h=9z2AH{FYhe!KAfW?V{A=&$eL0gumije;twm1ez$*t?{M zvun$Aa!C47GWBJ?(driXR#-|9CUtjL8_k%jvFBT`2I?0;H}d3T6D7UFE@o@Xv0^_s z{kUdOX%}&}Uj2HsL{j?GCGejxQ;tpUe!#7Y?;O}k3jNvEB0#zkS$!8vWPsi>zjn%Kz^97a}Jd$u5*BkP&srsgNeTp;S$?+V;|obo@iQT^|5_GwNvU8`fH$P8{usM%l;D z!TC+k`n=t{Q|i(FviThm_VSSPh0Ll5xa#i6B&%T$(_xaj{x%zs^->hfHUY@6Qg z0ds>njcZW9bKR1yC`z-v4s!?bT<~jbR&csL4X-sur}&REA(9C_m9*iV6|5&%d8mo> zy$=!iqG#|Z=uuf#-waOQ0LMkL$1~#w{9_#j{3XN>8#E>`E4u{y+&b>2h=~hJLcpMs z?aw85J${X5lj?qRr#5pq+pc2t7%%Lb@(pwm&z)}Ai4OX;L9=II`LrGEj>6N%taR=+8lsZ%Ah(1pNx#^PE(yn5bA$n z!J(b*@&Sb_pN42P>AxGb^_tGRS3b+jgO z6?~f5;h2dk-S@$1yKOKQ7~l!#MjjGcVD0GtP*y1w{BvV1cQXKR|#1G;DFcP7xHaFA26U)niA(!Co$|A(UaPZ4~^93Z?S( z76k4H5xd=}1&as-`pbVr9p#B6v@p~ z6Z6DUE=Cq`KbDZUy0>iycrrW3X^nj$f7Vwr&NS$#du)wC<2NBAKMm*(IxMp?uAeXd zze#7A!;WP%LX7ZV!3c=*3o#UC19{?HT$dJ#vORrhz?Q5X_bpe^vK*<8$nNne&yzlCuM`){;3+y1+`R%zs5 zT~4pprBqY=7*rC`Kt9+vmjWATaj7nHA`eOtWh%QM1}c6y&euBEpwCJR06bxziL&N4 zSRD?qaD^O_pVpHYl4LS)-ND2TX{b4LdXlb1Y`+9h^ zX#W#0#H{n<+)g>i(iG2u>ef5X>1MaZ!dG<4TBooQ6#RR2KyL$skS2=TDawv0#qpRLn>b*Q3JcTB-<>tAphi zt7>D6YAu(m>W*@g=`743v}{+=1|~SvtDgX(T+!8cs1j@@R;ACEA#{IX$iu?V6zFLa zWnjK>?7eF|8f0tGj1i=JS5DM)fZa?epA7ccLGAH18%8=suET}lDG2;S0`mph8QtIu4V6xO(JNdt(ureE^O!aYjR0w&dGA&+63Cu4Zu)SEh}B_rSw`^ZTp`2*2BR z2*weS*2*LpcuyX&1f{BOUj>y^gj;)*jRcqpeS%k1>_8rAlvS@}JmZP7fo~dQ|LsHb ztDvMcM1*cW3b_)gnjVOtpGCeTJ{@!YYXIpz;5)Q>db<|6xY}Fp)8QqnU2u78^V^CY*y6?*L^l<lbIV)qD$*;q-W-d4 z0wkR^|7OpE6&DG86p)xZ$oI3~V5$(M%FWXWA@-;Fc1a2f`yp#PViSFS{~Z-dL9sC# z8K~DIBC2Fae#{>LO1Hfn&^=#y0pn|pLELGSA^1gtQVD0bDO}{|M|gn&LHU+=mCBIJr^do+Uq*P8w$4uFncD!4WfnLiz1P z&J=H={V*iP+u{IWfd4o=+GC&*tGJ2v> zRr}n8FY_CISWB!?@wCsVg^(6u95_D~$05vusSve>w*;r2K{y6sbCaKRe1-RD&7Dv> z`3Moh+#OZ92gZA=PNJ_876Bx!>oeD~PQ(kN`%e40&A)4P<3;*OI>@drws-xIyh4Q` zw6P{T7gk#|<-{5|<~_ffGPSgx!{~DtS)WKXi+tH1vzDTkNaA6nr5&*lRQq|7sZb>^ z*Ee6;;7@6rdD{0i(Zq_k6v~oZn`yt)T8WCLCT}#KV)`a-S&B&hcb6R(X35)?oEa=X z-C)VscRajMz?M|~JUvJJ#o%?oz#(H)k4Uc6G-&;hhC7LiAawwS%Y~LmGPEyzFxh#% zTS|f;1pi~u8+g^hylZ}5aRwTpr1fh52ih32Ru6S=D|FX7p?i7Gf#wFdOkZw+CY&am$I=rA87XV z(y##zS2D)tp(zY-hg*`6jyujrupJH?cg+)VxP#tHVNLGY;2 zyh3y($Tv<`u!?Z)9sP<2=3@s(#q8)r#ri@?jgizW@nO^T;awI!QY zF8}xHqOk;Z6g|Id31W{PR}WEi>+KELNA1JHhw^;YrwzXc#6cY-xb0DhPZ?66Q|#otiBNpPFGC9Sp&DL5*YtQny~t?ZM+)OxPtXOEv4734 zby=V;tbHu15`PzBBKjZlDf2e5<0JByFvw;F!Q!hhA`Z%dUzHL5d$`s;?`}Q9n%=M= ztV~)wO%WYw;0R3e=0LlD%X6Ytkc0e0MNQZ6{3Immjn?HeCJO2j^sld28qNLWlAMZ4 z%3gz=VAaK8(C4|-!2=GWUEoo7;;9pIs1BiKRBwV)`(m-8r#AcHR&v5XFSVHU zKZvHpXk>mN6SK3DCmE_dc=7a&ST4T#S=kv=RtsGA10e&AaekhUs(KOs+5w}`i~MET zj?@nqpRa!#CehrHsaA9p;F{O+;fo*^MwU}l{)FsZCmsXQopLWe`DF3=dbkewjL~VD zr;#s+!aIl7Um-)W2<76L_xSxXBInnzNM0(}nWR`Ow+fl+Y#eU_zr7D}5abAKA{xk2 zlaL|h;J;h(QHU>E-vS#p7zsD2^y0lV4?9kc$YzSWT$ucv`E0H}@f%o3obf4|VW1Eu zH?LUmGlITnKA3Rvg*W0<6#0yfcsq3@`>TOnWnwuO;gCk9&bNaWrpJSBDcJSk2unrP zT{>DB-c&i-P!(wp=eFD-|59hl6n0O|0U=R@x5H;~ZKC6mxYvmK=o>+vTyjvmw;3d} z`;~u7_mWS)SddExUOx+1&upi-5F<97n486YWn&L0O$@Z1in*fh7*RL*p!ovt*1-T? zo+@J*;)=FtjaR_2R?z-QlvtFzjLG{M%jT`Q_c(Ze3%GICax99LC)L3i5)_KBCnkvI z_C>dkl7_r(tqyTFP()t*h;}3bV)8E%q!59%l5ZW>VNz5yYC>1d(5yo`LFoY@zcCx< zubgof?xl*I3K2%t?lY+!AITaz!75qu5h>c^Z2@^xC_+R|Olg0+ zd)9g0VZH%rDaq6QUzp<239KB?COl*w`LhzbZ*7lf~;^xw%-UqK*!tx&DQR=Q)j={#0d8|AT?snlkBR?j#uxq zgnW<1R!iQ~5q&)fU*e^4zted%Y=^LoM(=i7K}d$^QOhSOfBL%7^63OPGX zmGDmc`8jIC>o)T;y6*3u!68rT*2WIh!5vIOh^?3qv@^sS@Ev6p+y@HjgPbABz(9fA z=g=E2*SrbHW2zKrMCI^+Y@wr&2TU!VAjNGoTO-&QAv;nodn0QpB9HwhJ-mX z?yFSaqm~I|@>&DMq920n8wIIualLK#v>)T3ilpHV4{ndLy}K|Zqn{LBQ3KWieQpyd zz`xIGA2*rM`RB`MeNR0hxpKgIEoeX(kCeFLg~!=I9WrC|vkpeJnx4vHk_8^Y^A5y& zb<&_l1|aY?vi=}f*yGrQn0O)quskP>K8rs&Dn`?sF=_`klb^W^p%eAa>GJ!3i%HN3 z=E#ccOJE1ClDkd~QZ+ zg$rb8RGV>X%JJjfCe)V2V1Fa3(xcEVH*wy5aO^Km2+vq?D(1KUK@R3MgcrU4tT*37 zx^P@1x_TModn{VW!KISq8qw$gS z@F(Yi1*UYTQTCp<85MflW*(d1D~X`a*KwcKQmETo_Y1C7%MSlqCOOunG^OC+sp81_ z%)$5uDLPf1M;7mF;QB#qvcHAoQVa18J&kDDP|SwoE2xNm59uTj`eUVCeLbag7v_K* zmDL9F?|x}TFL&?0@XKq4ihVj+n0?OJ6|<3^!0AAQ=r{jVL)x5|h;445Nveu(wIP~b zUYn(ryx{Qh)Sj2+b-v>&j3GpJ&1%-f9#L*GT9nGcpYaE6tPe-}KhPHeRB|B*_5<6U z-%z`|w-ra&-en%nuApEJ7-Nnu;j?Ta{_d2H@R5+xE@R;f?9JpFV}GKcXVDYUZG7RjI!bK(;x?q?w7AA+G~;Q@+Ga)y%nVVy5iTfh)mFS}U5 z1^!5~aDE#}WM3~t)CPBl% z6dk1GqRk0)%x_3Rm1)h_15ac6sm-l&GOnxGI&iYFMDr-WZs?<|4t6URgmQEVp#9|zbd=BL%zCp~q9H|v77r-0^@^BjMk}G({xz zlxB~n8-hl7>5lnF894@Kr1)88_^&hbmX3+~w5uXOP-@`wakPhUDd(No7`u7JWO1t( zipmtxqRjMsM|C#%AosHj*7k{O7zVz5H=E>5kK+%|h2{^||GL`0)&I#KFW|Y|NN$O} z4Z;Alasx9qK6gMZL%x%lO6!-&C zEdv{0`Aj#sETw-s70PI48ax#EXtQBmLH&~kKl1VMB@`Ik7lx?}YHOMonJ5nir{X1| z4ZKjF4q70b(KH^LZ=2|=E6Go-i3mY)S;SUYR>%0=wxf*`Eihpn7I@g}radW#w9*Oe zZ@pm%#1^*}lx0*+ zCmqEp+p6d)l=NQ@JqJP4hfN)5((NG5N{3a$R$ApTm)hE1%$O^v1Yp z%d^yCgkX?>M)LKaG34ONMFE`2dm`hMcZkAiAchFf>v; zwX zSa4@=2oMy%+M&9PmPe3r5z{M_@0|~1d7}YC*PW=bayntC3P~v##JiA+d3zW!LW|La ztIUQdX(J6GP}S@T4TsQpwGWX#mx>$nszWXymT}LPrffAt0}u9O5G^#;pxYW{cdLJ z7JOYD@_y}rJxGr}>PK?{=L^X-5^C3hj1Jb({b%`QxE@%fZTOlC8;Rxs)qBgPp7!<5 zjY>H`@+cI>+*spA&5?YCPJDmzjzu?^3_ekx=m4$|hQd!zr-RcAsgG%;uqaPw5+a>^~`;n?vyNLHsE>*&Dxh(8^^czsi(d) zQoD_B1z=L(D>x@_w?OMUAU@N)Mg@LF3}ny^<& zM?L{4+8@t`w%2{l@e7$GlA^f{MtqS@#hNvUMui7h1k2<}5poEptl_^o-K$%W zRO6XEMKzOc&4{(+puv7)gW*;*@-rQ4z|;j5al??lMCCO++@}U$)n6&3efzS_I@5gl zD2CIZH=-SLgtH~7KGNo2U$xjLuWG1}8UQfpW(@rY3fz8}nIm2+?kzLeF4cs45A z^1bU1ieE*vLjN%#RNF$Kon23fqlHQI1Qned9vO#QAIk zWivfcxaRBex~Y-c&=TlY={Sx6GpV842}mTt`O||w+peKz5tLF-R`XUD4GVS>Td%n! zUPO}}?Z&=>FEQnVi8-Vbf;(o}R z2KSTqP3X`vlHF0v6IAzfVPbsK-}3kzOpanFejIS+$>8h=N2$2Dt`O6fGbY2d;4 z&!9V*JIg!i^Rm7!VN6ZbBvo1%H&vIcn6&3N1#rP}bzlQ%DGB7Qu1IU3rTf2%0J>w! zWN_t{HzY@tnA}f*L2M%UYX&wOaKXEnLb}yIkhkw%zp3R5q@uWapNyGMZjAplW^C0b zL&6acg?PGIP&8HG&>>=I6ZO={20=Q#R@as+V@{QNLzcZ?NuSj>%ll+k20{1z&ReBF zR`#!7Z}7;Yv2iT&Fv&X-Jb8p~nWNa>Z#kG1cJp!*ZJg6fiaV34*dYhGJ7lG9LLJ8$# zdl`CaNazpS=ci!3SmY;-lEt|fr`R?v2nf+hL(y-!MJm=YOA8zf&H9xKf1JD;tT%q` z-q}=s_5@6^ubo~HV{I>gBCsr4A$}k7)YI(!8?>RpJ21saiu?csDE)y*RAWHX?^sxf zg7UX~q~hm6B3wHJlmUqr(@#SZ#nt!^-Xffv#L@fW;J=nFOmZfFoeysTV-@jC$v1t@`o1~5z z>~{tb!h4<`26?9^HE*wYUPzHOu~7j@)0pa*AUkx;)>& zbJ9hk9rjBh@za<$x3ILC07Jw6>GVJT$E;&Y^moN`;^sryE%=&zIpt!mB5a93T5^wW zH4U43wk(}Xa9-TU7u>W!t)s-fv;)9CZ`83Afw&F93zsFnC_@asa zGPhuq88z?DoFUnP8ah_ZOI$(c$`5zt&tv7sgWsg zj*4QeyV$E}>vv)!ZjG;FDH@a2sKfU#n4-C{u{6QXmR1Cy?vW4n_xUeI%A60TXC(00 z79*g65Q~;f_#NiVVJ9pSx`Soq-<>Aa?O=zxFKjTFE2Ncj*y6?89>hqa8`DsPJqb^s7HFvr$S^99V zv-~$5`uU4^exr`dC8wcx8boaug*GZ7h0zY4zq^I0eW|2}+C}Xmn+oJkP8N8jTWXm9 zNZT-Dg0g~}T-B@GS^&3XWI|j?aGI6LRTL`aA;QHGoAGyN)2y+bH>kFtq|QysJiF~H z(#c@ip&9qt`L@OBl`_#G)RSdnW`*ppvO0f+Z={bU z3x7|zcra#p9)=H0DoIN1bWr$*!EiCd$|t@n&np7$*}>%fT34%xdTXGJu=TWBiiP#B zGm>D9hU3Mv906CA`#1(D(_1P1{@Mhh^+}z}>`k$zzQTLy{1A`>AcOoye_oYme1{t6 zYT*ok{<{#x+<|KSBHFFqN`fccBm>dx8uXP>5}o=bcRff2C4Ag!!g$wK& z91<0vH+}GWdQH#50m5`nKJW_}liCCu@rGI%67sw5*MYvGQh7gb!Gr&)@!AkO4ypN` zMg!n#9V7p@#BTxcnY3FkK<%!U6hA0g*-PlRP0v|nW%gZ06jH+7=WIN@awL{KJKN6h zfw~G`MQl)TBBY(5*Qv-E80$6``fXCqiyE7z+S5WU?bG67>BB#Yi8?waGl+Wg8l1mX zg9?pO4JH#rg!ip|{&vlW>pLv{9k#kK#6J5_KQG^zf*BU==&jYAG34c#`fj?>ZV(lU zNxx1Kz^GhK_eEWZ^J>;_DtJhDtkv*-uH2r{NB~zk$xFhd)R`a$ z@tId*Cc57E4xq5H1Q)-C{q=&Wej6r~IbfZqOF}jOk`W(@4BL(MQN1x^jRc_(UIZd* z6}KF*Lf4`-jtK=F{6g&c0LFyDJ(@}`(X>ZzA26y$xH#%plRKBws@AP@zMIcV)}3|; zd$WIH$N%~}@}KH1Di~z%1Y69oFh$x{RTIpu;(BFXLk50K>=g`Q9Ces8g^&iN-Lr_M zf?0Z6TZn!dg%-+d;uzzva|rBf^lm4CC%AUTaVh=eU|-|e>sLXb9F7#e5-Vz>C}Zt8)gN{$h;Lyb3&9 zcbs|VTi;8$BltuJ%C&Obr*T6*VCBH>OgSS=Q``{gzfd9~xYi z3FqcU5@6`#*sQ}76oWf>Iiua02yG|2M zgW0IZ3MARbaoU^upVh$%ffi_v$LDWek^w7>`I=@ao!~S?zTy0iI1kE2B90pd?x~{&{l6% zmKTCX7P4{qnW&yAvcj7cT2Jy~SGlsRZgYS-+4&Fa3B_4kmn8^sU1u@9lDzLQ6VL=; zcTG1;L|^%2((hZec6&PV3Y?w|Yv?QV`vIys%c?WVi3QgnC{bq83hgD+2oYJ2%U(QU zU@ic>J`6TXFFa6U7eMJF?=^T^`{VCneAF#m=}zSCvT!d@sR^xcLhea0U@G%U)pRV) ziO}bu)%L}FS#X3{9)Z#w#+32C^V5|1S#Zi(9S=-i=UiI+T)k%WY&b1M@$zg%4l%bPraoi-egJRy%UFHOHw6xuC%; zns9`_Y9p8$*Jf){_azoBL-1t~l(~x<5au#zX7d~{8zCrwTjM%OJS2h7)V2$8?_C4K zrJ$pMtcpse{VdRAKttO_iFy78{eb1ggb)vin~33;L~zrz)Z%LK;3zkLTcdu>H0`2> ziA^t$2nrZ-?@XX#Qr1@o&Rz@lBSgTlpI64AKo6_H?ZYM& z^`PB|**oVUrw}A2W5Y&JNyVmSgs@6i`M?%AYMpq<;%8{D+K-i~xoa%^5I-#FmetJc z`gjEqs`lNbON$yYm_e1mx(lp#guEetEdfmt^E5$tpAu$ikv+>PR|xPOq&MIhhp4u?^*1w8P!IMxs% z-@ZG1I9vKYkyH4#=e>;lroiE1Og-3BkqNDLf)6 z1M~QCFDyBRf@sugB;_-f>z9xx6Y2KtNYn*Ycn^dFUFs>tBP@Wr(+5L+7vMPc1~#p} zGNdr9js6o;#LC!+X|~5V?S;UsnRuhh39ZqB1Ic6U({X=)>GmbAG$W+5_Dr9#)8s%% z6ZOc0qr5q&6!IJYx9-q(Fa_@=JXf!g>2MQlS-=5gdI$zT%IeZfocx4usmiN!Br>^` zhSlU=sf#r+1IjMFHxE;osC$Fms@a0SiJWf?xoT-2%l-@rN_u>bAsP(T_bdD|7&rI^ zFLX4K8G_7*(n%_6kmrl%F!P7$6CfGrk}+lA8v+dRZ7MuCz>lNe7E0bNtI2cmk0uNmnbyhUA_OMaIjt8uRa zUMrJ_dHU4)hRj86az$)_bA=U7ay;Fo1ga$YwZrs>$DiP|(w%Qpdf?~?r$+(vR(LNl z7ih8f3^q$I>%y1dF8*CkFMpq}QuOtFWrLJLM9eRKBY3Rn}Ec{w2G zmIGYV88X*}#s}K@vAxsV#mNoBy?Hq^o1&v!Rv{V%dEzQg?Dv;PPYFCJ=MnX1P4Az8 ztXuD^gDDGFtup(a)~<6L0ILQ^(SxQ^;OKMQmnRQcCHH04Badr}`P?9Xy@@z**U?`N zPb}&XjCEM?YR7|oS|sb%Aetx)$%lLV_+^*pv{+e=1HT08Wtfwb!vau`N(wOP8iU1C z(+VJZ3}$Y}lLBejo=tW-GcP37hxVvbs+6D4Xd)NK*gf#CCXD zAfEP)2L201JRy|NU8^4EbM-R=Tf=TkNwcr%hy3L5$uouqqIfk8Df}50CLb&VmOT)G z^2=GoM=q8nSEGD$pfhQ2eQH$kA8;Hrua@!^g%%+V0ul>l0UF7~T|VZgui%XfytQ(@ z=)Oa{GAd+q2SABkOEC6AWI6=r`WR;OmBqivtz*bko8e zOdf_;)UQ|7vBatEm(5Zr^RsurB25~PQQ9i8UG(vN^~Bmq&Mfr7a76Pkj}0h=5$~0b(@!U=Bpvr!r=@RH`Fsr*B|`BQp3XOEhqFj zPMCXkl=|_UyT>c0^%vG$sV^KgP>a!kcDPKq_c~%QlTlR~jh*Rp(;BZ@MnG*hsI~X# z;rQlh^$!0v?=YL!B+t`Rb<>E=C$8Z}9~`621Kvw>CoHD10QcsMx$qiO_*2h**FKyG=@BEn9zG1jN z?hNaLjVgT0Cug#U=l!4cUAQdt#NSG{D#!TkUBkNhP4Ng5qfxqDa8Q5~a$$=rJUiBj5(&t{T`sMld|6O;Kfy)H zleWmX+jh__iEC$z-$6nqGYLxYS1OY%@Bt$_Uz}?$*lG1ers$p*)!&EbDufEmD`sv54fBWN_x;3vILdc$GQbH50I%?UV%ihF~ zi85}%V@g*Vkxu+#+vOX?*l`ScKPR#lbu_ru@)Y`TNw_OtTrBTg+~RZMObi6V5^4k| z;fI*I-QQTm)rufh__QS$hu$W7}(_Hu~?WoT)#-~o|=kTU%!|) zAs=mVxjMV`ANFM8&}^zfI@4X{^(Z``*CLMD-DQG7@b0~R7@=U`Ii7%iit2-~R&=xS zu_5t=3XYqCi{S>EmQ97YTr@OIh&)y+kl06Kyhk-fQ7-rYh~}%;vY`OG@&KZCM8TBS zyEr`8ygKnKS+7+qW0=IC4jc~)#Y`~~-l>$z6WbZ$ju10tLp@+cU>taO@rV)C&BQb7 z*hAuwNz~ujJlGgiiTiZPanAD~phgiy{Y`4vI-9%UBEx#^clKoPngCmdunjJ$yx*Ae zkz2VhsXy1x+YE*rXs%g>IA$Sx<)+EcE#uvqf+8+hf(&#x(vbZ>x+0F}^d340(K@?rgVJQ}GYC?;+8|WTQzBrXSYYdsZ zw!gYwG4Vjb%FR%Ju!1Ob;Kyg!0}EdQvZ^|dGhsp(7I#T3pJpZ@s@gebR%vIfNE) zm#%ZvD_PsBzDsp3%d}Gg){BJBd{^BqTF$gTcSVs2N{_mrKfjji9NTDo*r2hQ`?qCTQ@XHvI8;?3IPq_e>FriSl&k-3%H&Lp=HbOFYd>9D zcv=K|2k!yJK2e(Pf@DIK$pM@UU~&RM#7mh#_3+uaA|DRq*ZzX_EPHepuVZ}1C6VGU z{Y|Snxs=|C%FV`m@h~Iex;)g@n<@`8Guw4^u0Hy#U!QW*@@;# zxKW;a;WbZaoIU3NDGm3VgRX7frfK2{78nH1O#u+HmMKUV*O;sS5)gSyn;9r^h3QB=BRxU|N800 z7ZI6gkZAp`iO(E}G1o zq^faP&8CgG+hpr2E7n7F%%HJd-yZc>ZBg4T=(6*=$kV7jp4GAYn@!h4!C~Gz0au+5 z$EdekUFNhqkhN0a!#0=Ot-<&tyFIl@rU?7JNMfTtiogtQC2fxG{%7l1+|YuV1CRHoACH!-gsynEys*Oy?L0n zF=X!&!J7+8>Xl8sllbzozh#7t{Nb%`pNyM4AffC3u6!6p{QLh##qQ2AO5GOM`|Syf zCByc{f{Rf)`LwE#kUp?QkgwnlQ5!6V$Yldz_D`69x-Ds1;~5C#MRKT?LaqCMVR_8< z)$>|lf)kpp2)*(du{<|crIx5z9(*Li z_>RPH@7<2+Eggm+GyBf9op#W|(IesnX{vXj4 zcHt1!De|Tg`OO{iTh@zp(h-W}l379}1~t1g+hoAN!@3NW**=gYl1!?7;wv>|5~VX2 z8u*G4W@WI8Se1*n@DHwLw6*mq7g|;Ax2!B71y8@6RE2P;1Zud}?>&-B%b{1~n?KM= zPXID)lgS08M%n$GV2mS;?rurxz3ea!2QToB>R5sOJ>(ap_-NugH~{s_ zG)T5}+qP}nw(Y)c+qP}nwr$(CZF}#0v$L@e`?f!#q9U_So@(#(=R@@$H0}&sDuVZ6 z=ez+p?}NkN;0KY@)P3rDX0f@d=-KiRbm_)R^UXD4_LK9Ey}(%T%N~oWE)Wtj>~6a+ z&Ng?E!MkO&v%_|oGSmniD$+#kZM>@b9nwA{sCAN)cHrwfRJ6f!!))7yJTVRXjSq%j zQq9hG{Le|ql9Au2kIHW)L~j_nWmfa2P;TfWG5@Osg|xiFa~k=~E-226md8xb2~=IB zJlBqD(H$s<(Lqs!na%mJ;19+;zkgxIF*N;#$W83lqnOi^ zz5AWDfCq5CO#lG2Pne1h34oYZDR6Ykr1?vU34`8sam=}oZ~=?@%lD6;&AB^FSAdq0 z9DcV3Jy?$L5BocAVC+*78_hl?MBs{}!3mi)ouytCf3k?i9#hDqcvd<&_j`&QtC`Pf zy|7A}k#v5h{!P5(gqa5H-Ao`hzJ@v`Cc@X)e}~yW-AsZ%;!SvAYoDw3YwFNiph6Qg z_{7wqA;u^*W?f8MZeKp$#qGXc68K_EqL z>sqN{ZgJeL;>wV7Xx1KWTJt!}Rc8u898o}SWFtIVH1LofN30_1S<0YdodruCsCEJ< zXYj|~RiUoV%U;$Jt^L#v{`?ic{sl=+z6*BuW2H`*UL7P8CkA2itF^@+)ZRy3t8}A* zM>S%zzOOuXR2E9D&yta55#>)+=%T|>!KGz^7Q^`hiEkQ62-=!n61$FN)pERcxi(%H z)Zt!l-W$#Qg$>ZGEEMg*of@*VlS&ta^BEfLl$`kk#N0??n_vQfAn6^}z zm+&odWBPw3BV}p+C`gI^0Qk43v3g0SjNb7uk0VTQ7|%H>7+&T0kw6xl^s4LnsU{2= zLzCZ#N=-jte`08Y`hzT>p}M{{rU!GVs9_;e%;uKB-zPAQ#5jh))Ni4t5KlZmA>X~R zFqrjZk#BjAh521f%D@A%nUWQ(kyQIYN_hA&|FQXSjnxHfuYh3UVa57o0iymkB+z(x zy_5lx1*Loe^$%^b`M>K-;~Meg`y?cWfk}o^2rbywEUpmyuQbH`Mxcp!gf3td=mr2A z$pmR`n-J?1_F4mo+yav%CNt}wkvSmzgd(cFq+U$9-Qk^3)1Yw@iX4?MjO@t+x3FTW zMB73W^mo4czqTb{D_}P0`SsXXb3o&g(3O&s$L0TdiGQRw^(ZoRA$Euwg2?Z>NZRE@ zN!}c7@ASF+_3f2f>CQRTD>02<^ozR=SQJYRBCw-qj_BJgSuK2VZzcWZgu3Hr6l!gE z3-U3tW#ip(Ni%aCVc)6h^tT7CAo1mtgd%>!y-K5^KQ@FKg%iEWMbF^NhS2bqcz4hD z%y&q>5t7I9)UxkMG+o)9-7aXNO!*}f`|)XjmLbNC5{T@gU`9y4JB1dnm#u#t>OBb? z80e9A$FS*bH&GZ4OLcX^bk)c!J!%gS67kFG#+swWTD`NzylQ6sct#Xxl8<_VYe)58 zbgB47MlfFa*rfYvY0diWxX3*e$AROPj8FfGa5cbi6vbET~E5| zaW@@Ryoz<$EO(hU5;qU}EhEQ8%gZxNPy$?YzST+vrM~q9a0@^GlQ1Fxp9=(#amHd@ z3Wk`5pSlpo=T2(LfSZhTlk9WS@kbgMY0xc8qp(pE(e6dozYW_oNX6u&;I)EpYZWoa zY_$|XQedrfo<81`xPJp`PEjqXwAC+I^zma-+F!b5dM-Z#QJVSPP&f#cJ#IVjg>jx|V`4KC$a9@e znUT>XJVVHzCa%Vy=P4K95XO!D*Sa#Lq4gfH@ceS3czZ!a+Yyk+D;CU2&7xW%CIsL+ zBW*D4E-3x9V+z!v9?+aZ!gF?9sE2Bj(R>6fNg>$rfPwnDeO<7pwZPcN1*m+!;vY7% zmFsOw^{gUId>I1}4!=dG40)vo8h!n?kyiKqHx^Y1$V7&pzbHj(){iEr3^4l^NpG$) zxoh^fqp859WEVq8ZkJ8yX1&FN{UQg^^CE7wGN^bk=OJ;2{&C-)$$>H9Q&s~5SFu}b z3X@?rp5kSK&&S*6OuU$HPEmum9UBQNZQ2s*_1HFoEFxMgg%rUeUiAfkePs8$&r9gt@W5ggbeGT-7o%9i3E4o(JeyHU z51{^x3S~LtA*?e>FB&U0;Bykf#6!}d~x*7?aBNFF7xyJ`B~L^&r0D8gSiDIKJnwzxP1-+egKG=mf6 zLK^R4YgT?C5j+<=dy-qCnq}e(q?%GVTP%~H{$3FP;$%k+0E_YlJxr%d9THq*ub!=8 zVz~dhf7L+K&{rrB1i@@}SVL{{wqQV5aILLmar=a$w7$6*{CUXGTleuFS;pvXJSfiS z5dsrS89g8XTF(IM)}#Ms>XCR`Ub?u$+RcJh^P)=YSEoK7F@5Wj?$awGv=1~|{PLf( z4UkHg1jTC5pHyrE88;Z=`B7b-`{0y>ER`SlJDOdqU2^8{R5J+z@vW>? z`|Z4dF#28}W`WbR0ww8c&;}f*kb+2ZI3RZ@CvG){ zGKYy5-{I28qN}qHlVQD_Xinjg)_F#t(6!`5#j?6Tac?$ z#l9NdW)OO(Hh)CC?4Gs5pIUr5AqrV$mP_tD~bHT|i?D03hBM6W#W4eMGNgmIhYcBgctO-&h1v!3c740squGc6|o* z*>MFnl-g=A@>Sn^`B!am)P>%H{Z--nO(o%lYV!2v!JEIemHQr(=J~bvHov@MBVF3k z$D$}0aG2q6vwW4eW~=^+bGqEz)u|&>8_+T*boS)t@8Oe?;r3S)l-vlc0wX;}>6m2z z$Nh?$eOZMnaT@%9-RE(rR*^(lhCb|Z)2C~;hdFClx#9!JAsVO{s#($mIK_l5? zvIM(m*#?@dK4{bxn@3OK9WIt00&hE9o5z-AHuQaN(JR3 zrxzC#7J;j8LdZWGsySl=4=K(iquBq`vsT$Xi-(a1R!228&KW)OM?8s1Ll*Cd=<-k@ zY|Wye%*pD`98DR4>eN!1tdq4S8er>lob(W5o@ay?F7#uY25Jl3U}M#9(Og^%5 zAuj&bjf~r}N&qVmgb2KAQP4n^@IhJq2_3Ci^;U+%8CX%mElbr!3p9`C0a<&u_&kwy zkZ-k@LEr%TYDER-8D?BJT!65c}y>{@>AmtJKFB^)bdGa=W!!6eolEZB1H#LN!E)VJQJ+|6G=;;6VA355`Y0*pTW;Y(dp8}5PR z>biB%Zv7c!_OdL(G#SZewFo{odIaiXQmJ!PW0nHrj9Z}y&{}bL$zB!i1P)}PuqNRwZ$hzm60 z9nscX;Z@;z+ardgbD$!4S$6^Tu%(h*_ze(8|8@S!^#uP>8~wnF zD)~PO45ZZo9FLv|N(U8-F*YpW5&_uX2+jF3`uuP4mComAl?;6#-MB<$q=%J6?YBfC z{LsAsgm81Wf3>mo2;KnLbdjo+pT(5*O#p`(iy2}KgK)$ycuFGQ=^4%6zu8q$Es2-_ z1T<`otRS%wE2~k4psy66Fkk4+#<<8Qa*?#Gv3~ulSt%^C3#f8Yv?l`U;|go7oGz_N z~YjB@|U8GVFmu`na1Gd(#?kCs<^-KW7!FTeSlH{bf8EM5*#_5U49pJUw;w=7;{n3D-6HG z&AZ0r-fCrrnY%z?d#_;O!Cr6YV~&4lNVK<2coAM2d(q<5k@8)JgBWBj)h2Bm( z1!LdmMplsKik}D<@U>As8@=!-c2{ZB`dmqF+xkaOe_LF}=eftQ5O>&a$HXDKR?*v% z&vieEgD9a`B?!Ns-~Lt|N%-R6(xr*}0?aREF@OHH{{^s^!ER&uS zx)=0I#~Sv{!!L-em@;VgHJ~gsb~r9n4wz*x@>qsgv`J}aUMiIn96iThR+!yK%J*IW zVc`(F-b`>W1XyOy0DGNAtr6IrL;w)YgC_jFL3upPYN~bqaATz!mDkKO2Wxtr?*!(C#&aqOM?+6gw*~e*Q znCdCuc=$a_D!HO$))I}G2Yn3q4MBSAkkMlw20+T~F^mDA0KKwf29(fgV=8o&i?}=p z7*`VAeyt$qx6gXTrRX3&yIAma4ao(08~?cfCNx=Qv%))LN{%p~(Y&z|_~Os$R6**( ztUpd?h_vL^|{N$K?N7Qh^jB_ zU%6T-GW5wA_|EE04~fSla4B45&WqIsm8Nxfmv@iI&t5V)Bt;!d62MssEX2hSpnUlB z*G2(cvNrTA4dD{ng(-A71RphU!vl;NeT&7Hbhd;B8d~$07iNk`g50U)&x9@gYPnx?O|OqfMLUV!;=!^?J_jlJGAbReft_qgZ;y zAe&J~ZS;!^G_(@qKF1iD(C;3izvd+tp$(ydd9aS6K=+|b>}&0e-U9G0*Jr8#)VW&? zxxf4Ko93Em-Y?mW))hItRJK(BQbu`qH~DLy6J%tsBoJpu5R-)jFN_6geEWq(>Q@cJ zNl5PWd+w}Uz#ouL-GSLAkdYM@<6TWz^787u@SVq{AlACE*eU&u;e@8{XO=KJb(N;m zx336Uc9XH+Om_|~SJ?3pg|@$VW7ks`N^SnwDN6?fn~gw+8Ko?AnwrsawKWp@`uH1# zvltK(-iYW!Bc=sjC1_=iGriGv6aI9Jvn^$EFX?0O3=*hY!muNK`RTweJ2q{T0npip z0x-a@0aYy=&kJfd%zI5ZcLQ7N{4UKb` z4sA+G^cr{U=OCNMZe>L?>Nu}OCnb#^bmgCORQPa&#Vty<@3j>`p~?+i*^_Y2QgI{s7(5NU1&ngjbB&6D{XcLg_Q=&M9Ro$ zya$^?2_j7r_?J%Ugi^-=0qq(}XoP0#RGkMVTGGrHM1J!9?q9(1EXn{T6jyC3<%HnemMCQiC*L{R#9*JS9EHP8#CwU>HB_RdxIFGZOU7b%I_h2xhvKj#Kc&zY9F4REm z5uLTvVI@4`ae@YqY>@#eT!F*+EV~Yq#M()y==w}CWCETEXgkAdNn1nLt+IB_iDR(U(o>QH`Pc!p-jDm!;?ai{8@aA;VvA zeNCTTB$*AcW<%}Xr2n{qykD?HmlgK0h^e`?ZUJTror;*JS(3=?88FSlokb|LPHF!M35I*_Suo*YJFKrmr33FJ9?6&`D?wL%Nh=>t%Mi}St&(5h$L zVsLA4Ju?aebQpvG)!*QCy$f|?+2)j5+zXcd27vcSLYG`jFy|(QvN(hAaWcAWV%@%} zfXCPrqMM;7586?q|CAV+ROL9~>aAij(AT^3bh4~v6>h?q`ulxAJi&TeL=qd?Efp_j zf9(&aN;xQr!G3#p)Ms30YHtRE4Y||T&sN67q0cWus&ne3J*+UE9etr}b`-F8rCmHU zXKzOD7<%E=;RahsIrrhefv@p*l6hVdwDDH|0Dmb3Jx|W;mhkL#;$#fa+VP+wFAUgX z+-RLLE4?guOtdmCIn-xRw@=*ddT?7)e3ehxiJ|c7W-cCX`;p z-1kwBZNVO&wk`{-@G19MHoq0>#%w|^Q-sk--4*ihP@+)?{-}hXwXAQYe+XfQI@EH- z=bj95aIs?X1pY-=!4GCuqq3o6Ga5`F?Gs(Ovv8?ilwttMjOvEyh)f;fOT5)(G~hZX z$S|uBmB#qXg>#tY&?u2+PRG8l3+;SqaSX$T-Mt;s$0A1?w>*bus#<2lj!$SXU|)T? z63$~E=Zgu8hL@0|G_-nzw{*-Ix0?2<@0*mpUTw$L-2sPo=klIO(WvEO;EbGn;$eGo z`g!4SM!+*%mYLtMH-}kD#5Q865aSpBga4Ou-b)Y4_JsiIUhk%D^6zyI9A4@t@@C!4E zrzkH&oks9GG{br>ez9=D*Aj}fLv}t1|99a=_&X!a)?-Z@VAPx~V$<&VFkZu3qh(mP zJK;f^VkJi2Px$+|26!d+jjGJCK9a|Pm~sfc0bSL3zJ=!zX2Pl_5st^a@&e(-yZz2q z>cd)efUm)uywN?s&!!`cO6(>2cpLoXG?-6_^9ht74iX#?^&t8%5& z%WJrw5U=JyDFa2~n}tW!K4o0N@KzbPn;0C?7jyMh?v;|44r#k79YDI02wj!=jT`v~O#_{* z8O>w^;jAsv_sG7pAD1W{Rf3YVn-#rkz~XU0qLVkc6ATFkGd?G?k{+>>O9CD3XJb4vS7}Bq9S;R z-74TP<;ddGembMvJE0@GJOpM~5{jg11(Rg5g5y<#srTtNkoAqQ8ePMM1l>a-c9m>u z%ik6Cexq<88#q}!94T3M-xY2j3ioa+S`K%sLZYxQ0*UG6N=3k}EfW$qvSzFJBJayVcijhCLF5%{zM0V2J+{ESPMC_-f9ri!DR${y+CkFLFZ0(vSzHEpe7O73{ zq17Bxh7EJ5s2{fAF`b!Qi8vUg&pz0W^jqMkV`P+FN9UJ*))vn2Cu1}y*UEpF95pj( zz4gPQQ{6v}PWUbsINfwcHEaGa0ZqxxNEk{+&HHPay9I4#QUdRXxyAB>4x712!^zIE z9vT(9)%I>RiN{Gq%Nk(QOu4(s4;mzRmta9O^LcYSuqU58PO#by@yT!{9Ft0C3_n&c zM^2oCyYfB>I*7SVr@%|y^zUGxfx2aTvZAE%HZ<^bH7#9?j+V-v6yRO(dn+Y;mXDhP z9)KaR=?Xfcg{oGKav%9Nw^*TwcXj`A?pr&Y3un`lZBR0o;0g804{a-8GOQpn6>~fa zLHJ?kHyX?Eit6CsjY_{2TGGSTHTI(tgw4v;m4 ziKb@-$+<+kc z`-TpJ61dL{i^mU~)LdTdn`N)Z2$fgml1c$XxdO15HCbo5dYriTtAyPq0sIIY1y;)M z6vbHaf13Me(VD24+Q7U%<~S;fy~H{|r$#KoWqMKk!;eR0dk)iyxetLUYe(}#CrsNg z_Eg(3c|dRNsRlJ@q`r|7Yuy~jJOf^s3yJnD05HiQWYrXSuY83S`cHc5=?-60CY*Qz z}ZLBcOUYWdU zP4oY+XheEsKeh$3S ztx{j;wvR}A88NPDyJ*VJgU58+MGc-tfP(`336?U&O_+KlYnwI9sp?)Dt^HjHHBzR5 zv)h(V3i0EZq?jT*3~(kJc$3(N$-6AncOxYnVIHLF8A~<&Xy}eBmtKK!W4@kIBb*|&7?yV(kZy{fWxsqvLpt||AU7wgx^>RC3eM-V`3YP!JJttki3fq zBvBXVgUCBYV%rnH2E~B7vC2;&01YFoEyG0?h%5TNw?QV=73#@HVRo+{*jl?4#<#Yj zo5WtZ``GdUpi|L@((4!|jdyGXTO{z&Tv%sqmY1)BbQ~Zsve?MqHpdXJ$tnYowC&?0 z>DC5FSA>yCmHfTOH6Fo2rk!NtXU%*|U)3GS5f0}UO&BDdAlqvmy3dejJX8lClZZueJW9tR#xiy9AYqi%;i>!BTUgJ1it|A;#Hz7sH6_B!#Gk=Ej@`R*-7Hnc zTvfK4zOtf0VF2qvQn9|VfjACFO8s{_xW4Lae4x%}%$N=tNM-s@#Y?xvDtXc-R863=Cg~v z6$EC)dQ6KZJ9kzf?gLOB9SElOQ8<0s8Xe;dStoDUepee6T9K3(a!;z#EJ`1LC(F^= zi!Hjc5#?`M#@n-$)`*4*tSq9!v0iOy=j^0sie`GdliXC_pGp$i8DhT``WbG>E1&nG zTQ7AtcBqIAu{rs8neHLW0%qtPR?BrO~ELN&fMz5Enk14RHF$| z1SQ9NtMg6m>x5>1e}vOiP^sy&u|1PxbCGsiy8#hR-N29UR+FXk0J6o!`>GsFx5{#G zP^-_*)e@Sth+qZtBKpi-O#YyEg&q^|cy%s3FKeN+)3WGsd0N=|wzAvFmT7#Cwdn;X z>ET<=B-4p0`M$U?ilqa;dA|s6&!`WYpm_);2nZU7$CU?Sj0u#d!p&f3)Hg&XTU1|> zDwBWzu^ff|QaDZ78=4z$5JAB2yQHPjLpkOtTmo<~Tt!JOP3YzCoN-ry{+Rt?!}Pi~ z9E-_Rt8|!V8DyscdHmzp226jbf&|E~cqtk)u08k!JaK?j_2?q9o3xE3u5{cX)G!yo zh7Sn|1sG$*$2XM2Nr6v*j0p}*`Cokpzy6p@6l;byTjG?vIi8l>6g-wS7bhdO>W!(I zx^Jzvz&bvUGjUEZWNnihX2oO$wvQIos%0HHHCfOp_aHI`LTMeC^h0wMs8f%m6x%Qh7zf2`AD9N9o)t(n#vv-z!$ zOuQZh`4AeLjR&h7D@&{lkz1Lwnwz^@XG_%kH_EI&-dREr{XU)=OG8=(<@LCFD%1xt+ zrz3z_r#uB_qmrbtG3ayU8OS3Agpu(k?FTv=eF9UW+N}rc1-T~s^*0o^x_eIHy@0PoeB+i zpQM?WUEG5mewC~i^{M_nduHTmar$qw7Erc@AFAuO@0|)uGUd`z&GCHhy+@GFBsVCr zh@y#Kx=7%o=6JiM?0~v4jtQVX8%shf2jf4b2W0M1_6rc4@4)IM84u=gYSo{nIfe9CQ5>z1MwW_@kDtIGK7@?mGy0!jmmucXrgxghEy_&}B;6CRqXnOKl(;SRC>lT3E#|wG8D9WASGs{ zZ{rv$(mFL&N4Vpk1c)Kfq>spK)V+N)-db^vl&?YQ3#d9M#JixChR42d7{E>P_HS({ zvR{!uvVq#R8s%bVmkSIc1tSPQJzn_Okhid=Qv*Qo~~!f zQ(`TuzgirghyA@az#JNCRO6yj37G&pynbGslYa+gqF;pOzW!E%lw&17+iu;q%i`ck zj48SLczvxrY{7c(_iasPG$cao@fn8P^Og|Yj#=dGlBHHgl{@Os5<4Lqbr28iEp1B8I{0+bje5A2oM&)Gq>Nx4uu;+g7b#Yl}a4$78pLdP- zv4}@&*KIIQ6@$s-#qE3V5|mt)9jQ*HNkWH9Yo<>~R4{h;Md%WcZd8P>aq>(9^7V%d zK{ly!3aZtD`&B?3sn+w&%6wL%IRRNhGN85m=H4RdJkCTbwEUaHmbTz_3X-3XlOxuH z=SzsrO+UB3YBo@?!(lUl)Dlg{kjx+p4nsG$OL!dK;^NVy0a1Ug&Be*J$3Rs27<_JK zA^6?&cvUyEm$Jb|ZA#Tyk}cUFa}WfeS=Du$N^TO{d0aHZ+Qt3h+>*gJ$Mp!wIETZp zc1s?zud&Wkn&JN0{4;GKUZn?u{%$iBc^_i^>jV&LWs_2hR3EaM|#OiVY@;+!pyY=xCTW^Q~F zB^tvI5cBJg*rteXp711ElRGQN0%u-^#Q@;D`VcDG1C>{qu~M4-m6-vRbZe*nYITZe zpuAY|NP2`}619-4NL3+;{{B$$oVBk^Ac@#lH4T;_D8+RKPh1w!VNFlRTXw%R94cYku0~W& znM>Ucb7vHWykCegteAdcoL`_fHv^M{e&1=!=9k-4Q=(@LqNJuiQ8!1~S00l3t1-Ty zbl`!i(^-n)wDR@-h=zFB0I?Ir7oQQ?lv8xNd*REs_%SiK9k>M?I@3?P$Go?%Uru{v z)yR#}5M>Reb?OrP0!zU2T;rOJNeLL!>1mUi!lcxFdw(FQgvkFe#5K*Ha=psOY#3@b zP~8sd8P126xnAHMm?2e5zB=kj3tX@FHUkkvUZ(;4Y^O1u!bQ2qin@bfwI;}>=?iqw22ayW+(=m)H}w7{Hh( z^gjkby3HV^Ei%6lBrUq{*0vnK&WC)iW_n=22~9Q?y+64LPo~w(!9he6M#)v48F_wE ztjS80{VdG-SdQ|$RcXO0!!ivYp=iG{h8MaaEhlDCP)-c`uKNe>g**`?fTaoDKyc1T zuqOjIn&0Y>u*@L zyo4usB9>mM_1_VjJ?bZEqY7Gis>#m8yg`d4BDtU?+RQrki0a$nKb+eeEL3sZKBSkO z#B_7@*8F50y}6M9XF`nQ^nwh9kX2D&I+qCr zEn2TE-WTuBLNeW`Zz-p+c;g&UO@b(Z8*&u9wY-zw^(U$i=Ezij|8sVSlQ1{xqirwc zwwVgU-IC%pUjgWFE#lpLG&GpucXlY5Kz7R~pE23p;{Fb~BC+#+Gy+48?0+B;utY{+~13<>;A z9;usACr6?TF{NY^9)&;qF=$#lUHm>le$cR5Y))0QT*V#I%K|7!w20NH77aG8 ztU#<2b98^4%vo1I06KWn*byn$e?l!K44`%rTKrKfGBG88CFR(&7t!qXRNY?@Z=QO# z4$Owt9}LjZISu>f(qVDaZ18Y4%&4+G*LyEV0xL)tiF6yjwtgLmh;GqpVhP80v`@J! zr9#n~Bib_kgFif(SUZ@f1P3M1pTx4Ug4NW2igudrv@f9u18YaYqNmuGEo!1pt)Vof zV{-A7Cy4RRQnFETZ6W?EtMc%u=ZuI*2cgAmGZo6EB7_Ogwmfz&CNI))OW(<7DC*N` zthU`60`)c86QnKM9gUH34R92zwvO?8#)|88hLL6wRzhprmXODHt$(8*X)45xMhcPz za@X6}pL{!6y-589%A&Ys@T8(xM?aJpEz=j4Z;!<;ZIcri-P= zQu`sFVQNq94H7qF-Qpuj|1sPLZJOYvuG-RRr5Z42>OHu5L`Ww(i$!4k>>lkS(3ra}# z5a~| z*VTSsM&pLO$+Sy5&#^L8D3a02oL5<^LA!Nq_NT|IMfZmdg~5)z|4uDO4J9NIeE>df zUkzTXJK)OQv(rd74^Mnh-~CHdch7ou-fN zbDx6_rzEp2!IHjEShA1v#o`%0_f)!4PJ>UFc3>1ORG5HpnQ8uq;@Z2dV%yG78XoCgV$@vytXk|%b!f;NP305~6PozUyr#xn(YSTb~3 zt{v(ZPWQFxDb2Y}HYT_lRB}?D%A^4QKEbOZSY4&!OgQfi*?lMg1=$i@BpE%Yl%=h_ zG>ZCvSuT|GjKKj35TBA?CdmC#X3l;Y{IV(+kD-rbLln#Uyj*()7;h&0`x|muDy$M&8 zqju+D5TNwwGv5{ElvI(98W~b~=Uz@jbxb2Dk0fgcZMM!VYCEB=wf~dL`?yC%72U%Q zhGw~J8*GMTzOA|fdNHQbhe7&-UZoW145kfvUoY`3+!t8 z{XG8EXPT7YCM_B8`LpiNDvmbWuLAwTaKm8u8ngvd>97az-Q|~QRvI#;dbF+~gsU!S z5+#f~{k9sBn;V6T&E1ZKiRR>G#3?rCPKD0RkY@JL+G$3-j0k)!IVF)UACd)pc{4{) z#+Ujkr7wpyAC5?GgOYEN-C#gje8Ka&Yqx*L0L{_{>^%|KhVknr+Eqjt)*Am(%@ldG ze$9G7xb6aYkN-+7tsa#u4wSWBzT>eK&IEdrc06{m?d&kvheLYcxP>c`kN42Tc#Oht zx`P6=sGH&ZmgG^;2kQFR%=+@?x~2s$oWFNn7WQhn{&e<_0WtiD9>((;W5e{l)LyaU zD40@6MOr_(v>45Z{XMSs=anKhd*~tmazQetz(YM;qc|Wrxi>Fbypuln6lYmlrB( zDUz7#xQZ(r*&)9ysW;Xf#F8We!;_ulkIsVp5Dbv*?pad0KJW`}0N(rwy=VNV z<;jQPul#Y3|Ih-I*nbilp8SVWe)TL#lLm>Fvy;RXE*yYh0DT4ZS|wi4+ppLY0gR|4 zE6k$f6ZTf9%U#?C&VyjQu3k)H1vR@kA0DaTq*4wk{?n%5eYFg3+g77}kq>TP2`&zS zckeB<0SXmt1=)lNG&D%u(yU#k*qJoQ-$1MXcXUhu00000EmK&*E`9*{-->v&H?x9~ z@ph>tRfUJj&@hw33RlOr-CIrEyb7jzTL@fm0UM4~DRR;R5|W!SVt>R4 zbK7?X?p^P3F<<^S##4N%!=9gazs`J#x^Z4a>IF;MmOlX-J&VA{?NgsHVD$skXWvKe zL+y50-Zm3ay}?7z-rFc}^<(9U`(u9*{PpT3Rz3Dv@ZE3s9TBJnlmlLUV)ts?+uZ=) z`73~TpBKQ37eOF8Fzm@-C+Hpd-R{%3m*|~eNbt^O;lATt;t7D8o9k!rdGjXqF)(j{ zp5yw_^0@zwJv_N90PIA-CnLviQ03lKDAz-UV5&! zdJPi&D1d@5Q!ibYg+E!PffPW4_mMh4^)?eQ>_g!d@F{rnx#L^<+3{9dma8Xt;N=hG z{LKGce&@VWctr*RfuA9tA+J*JWK*n{24_GU0g#>qKL=pIC*DWwMeMx7Ezv{IFTakD zjmPAdr)R%cqT`0|so;#_y}NL{dixKv0&@e^G{Y?4Z;rdQNW*% z(jhGYSxCrCQu|c&EgBWEtBI7{G6WD_fX_vC0MGg9xE{W-_)q{6jp?vnjFzK!p8E0y z^dl=qFR}VT@qD=n>%Oe4RgA*AnUl<>nwueaSrhw!atc2$QG+P2xNM10OP!$t6g%&iRc%DAeVsd`b zUxT;Zy;_VK7X$FtdaV_x77q`1<@l<`Fsqb!d}QH0CQlv$uNHw5Bvj^yH)B|*On=_sfk0TQ6fQ&xF)2}Y{9#9EHcDR9v{8Vdo>a} zZgBZr4Wyg6V+e-d^!$cMHo>@No4Bi;TXvjD94+Ev)DyIcSB=!~=2Szvg*W-s zG#>~6RP>yfhKmK|@ZRB=>80O7bY{LPW4)lzvC2=twd6z=G29ZXLcJQs+Soy~n0EY_k~#-MRa3n5v|FBJtS&7fCNe~)y`6vg`yMF=I3+#rgoHY?gBwoi z_;X6H|7UT{uIBu*ebslXR&_QEr5fiiT{XH*T_Aufcn%PbI)l7tC2bqppCsAx7>82k z27tJNl)Wx19ps6BW9~np_jbpqr)^H}x!LdN!y2G_Q;N!N8Sj+D4+#qF0(EJ2erz3$ zs{q!2C1>Z-JEJbNNuAuJcsS)A135#eFegVXq!}&1*V@jtO7+|Lf2JxY3)JjkVCv|v z1zUw>ju?I*!l;VPkCkryY`{amX*7b!%H3KHK)kq znQ|DNxJOD7+nM;OQ)7Y8aL2Q~j%bi=eN#^_)efZB6BoY^VK-_&g0d&&SQ0yvoveqgQpm6-(IxCg-0WcVHU7hRW!d2 zYUZe^bZ!#1J_u-PE4;8M^jaGHMH?~#)Tbv1qP0MipDP#bn>KO^g;D!aAy$fx*v;Bh z+-?r{ehZfqq+wDfe$UZd&13t1&+dgwegW=(b5UQI(o!V}T;2AWNcD++a+FA5qrFuH zewYx6^=Q>@O!WT`+-f~VC&8vY1}+|&H|2Lw=W(J>X_HWO;x+awrm9bJ+SD$=|3>it zglW?T9j^8z#vT(K*-nu=euV0+y=#46v8)37w8`fDFZOACsDO|hXl6jAAzHZ_K&%Ml zntgdaz)QE|b8q_n?H|)c$NYRs8tZMwMQBbyHnR4hZeyl|%UFKMeSL4I?KpTO*eF#o zm4ITO0@?^?>Hb8*O(*<9ed%IeOi2J0<^OH)eHOmRJTZ0kD6*j!9#y}7zY1Z<8KKDNl8v(PYmPpHa_aBlm+HK0=Y1`J<0IHr{)ocai=9V1k^F~ zst~Ro-6RIrluXlLZJ(E+rIXXBe!_Jai2ojxKYMStrGH4)t#6+3BisRwj0_w}jyZ>Hh& z??A3*wGta7d=zFkOh#hCF%rl2=v)8#oYns?A^un7Rv-RW;`7B>Dd>8gY%5x|c51A9 z9L!7=z<*2kKgs{~r55au*j&m~{6<(-o5rcB%wpBk;QBWD&%*ww>Q(pOL$%2~xq+y6 zh5aK>|EW^{VTM8ercB=!5XwdiP%{}JR(U&2>!4MSCM1`0!GA#Z&!~S-Ma}r{Vn|(n zjwa3=h}$gfK7GHFUpvW%|5rQl&ourszQCx36orM=;Qk+Cc)+>HdM?t$-SN*lVzfTF zRt443q`hMs)BgqStC?n>zl-jT%dEY|enW_aqlz@e*Ko>3cOC3s1vv@-cR94!V*X%o z`MOqQ4W%3)fmns_}oS zR+My?=3mKdG9slTSD_!0P+>mlZ?+7r78BoQcp&BlLdL zV)Jb*lDXse=iCl8CcTb6{sy6=Q$pMQDL4OYS=gZ%Sx$D~zhd8XhI2PDj|@0Nf$i!r zF%F{f&;H+Nn(Y0L6lvUmA;n~FNhqkw{ICAtKL$3O_l<0XX_GyyD0Z*61OTNdP)ZQ6 zVwC$*&$kOn4wU^!PIfa`rL}6sy{|gpH5h(7fydWl||Be(uR^U&zFqe)MC1JKmypTb^_>~+t1=Ogz{3Hf| z@b4gbuD93M2!&{JI~*ZLSr|W6V!puq7|}<8{}x6Bi7bGzZOz5Z|Kr@|U)24ls#fv; z3c&8lw+na+dt;`x3oPzo5xRb+5B7MpWi`45bN8P61FueNmrk#M7HdaniI~AVCz(TN z1>7Ec38jDu$hT$+gy9yg&9|*wpW0WwhDmwmM2>K`8<%crdbvCug2@2()^Q# zH5|yH-T%wWzZob!59AZL!3ECXM?W9-#wWPZ%iqYqALcDdILy*JAKJ!MG6|K>l&B|qrHRv<&=i?`*)PWCEk?`khmngpBFwqYTC?`ASOYrqVK@+ zAm#*cX?^*seW7T%8OuyMCePpFL(zYEUB&%y!yPcGsPdV@LNv2L;LCagj^>$m9kif3S7>rM91ult*o3pJHMj*+JyE~YzCD2)&Ao zE^acewZirAWWV^UOBb5}6wRMP#6~R%QoY?TNoHgNvwWH#YY20A3rPJDbyV%b`x(ga zX-~}Ie@CM^TM_>I=-is}{Tjm5IDQtpb~xBw>w-?Zzvff)$~Q#pB$KRBFd>i*dKQZ3 zb;Ae!@FzlFx5JAMnB9;WyZIKn#Wp(G5V_kp462TH3tuT^2=zlRo$RMav5~$@hFBs) z12M$8-Gt=>=ab0N@E{%!k5wgKLwTkW1DvnXJAhPKZG zvSsj!YMEg1D)AX~xK%!ep|4se0g8R&fpBhsMWpW*s8r)v(=)*>&3$si7!+Dv7Z^jO zs$a4R7fUTIcKoDLZuCB<9O>peZb@ah3Qp&7tA4fZ!l{C?*ULZ~(tM=>nce}y(bj|i z@ z551+c(ZAHHg0_b!SFL+kzke(9R0iqyEqe9CvJAbCz>KN&!iS{S_Fi-r(LRZniG{4F z5mq(cxKSVrRxdN!$a7*AMcH@uL)*2gd|lctK_(%M02WEQO>-edCp;EeI`GGAM;M&W zsW(=BIpIKacNk*C2ezOvt{$O+nsg1@fn6PPlkao<14-NkM;5W}Sx`zRVm%i}kQw-B zBVAZ{dvh}B?sMd~@7+&=t+SoYvwJ_KP2NwsgNL-!`que~;J&wa-Q7rDa`20I5S<4H zpf}w;A0&E>_6gTO3=&V$9bUIH=twj|`fZd78YBvH`H*7eb;gfFhleoD63_SmN2!zN zmL+$@ISHX)xFB(MIb~lRY!$4b@5z40_|M@gOr$y_E2j}9Kd6icu9s0T?{S`W5=tZ& zg{xY(drL;E&_#DRDdt(Le%>#eb21wZPu7M0g1V>ew~lreo0c6lFLrK1aAeDD@I;XH zT5azGmybET_~x|ZAUwVP@_-?3;ixhUmW2;rgDG>KH5w#)pAO+(=lFb*CRO6-49MVN z-L1n#$LnL20BC99bs6lhUP7Y7HG$2qHGWnJ{&{x#7A#tUAT1VSh=W*+Eb@tr$;!!f z(=P}DDOg^_fvv8-9Uw=^Vh2hEfGyu0jG0m*w=j5*7F9|%D;=@C%dvh`sIHLod zeH=1JrUDrWDO^JMW0Pbe^k-K0ocr(y_fY!$<=0KLlHmlmFxO#H$U8 zr38~sON6HxVC}m@8efwd4;|N1|H*}{aXGuvq*!;YwlLfm0^@r*I+5zLCGv(DnPn!> zdTK~5DG8;4D7YZ1fA#*%-m*ZrsG@npv~d?qfo+B(J-MHE2M@{md0T+};m=?`|0Yz+ z_Lx446wpdX8|<2%ej#h42F~+x9N2B0^sx(WSQ_4QdYbt&S?7j{Sl!MWw91GI9TA2i&>?dYoM}BI^a%gqOuH{uEM;;z&ph!C5+9)oD0r? zIeE&(-9^xR*+H~maXjZB#PS`xHZHzlq~ATHBWMBJ>;+S32esi?Z_k*Rd;^vf((h(Z zLXu{NZS};$7WZof$pc3PwtK#G6i(*(Q)rbZUy!lOb#fqBf@@OVaX22a^NJ{V2t+5B z3(??!Y{c4^r5-wvCI6U1qs}hQjV{n6SFL&IAD!lA@U8~0^h(*of$BQx49%n?+H0z9 zWc>^3eK?|lQ#XF39RRfp1@_2OWMh)|I|SPP5%OLAzyfuqg!4A_N9;x6pW7?EwKsNH z?2+8A23BZiAY%D!e7Z;Lvm5^MoF-iG&dGiiM`c4D>Gm|At>0H4%C?&jx~e^tQ}cd4 zxt4No1HK%{!XQ&tm4uZL9uc+=%MqROkZq7U)OYuve2E&Dy0=KMR}ho!LEu3uc8cq=jm zUvxik5bnE=z~z(is6rDtUl=Vx5-3ozkAU#)3!T5iaFWq(JB*6E1>e4JakvhXxSJcq zmyt-#`v&A<+pa=SGmrl;U-;!$84vYT$ukyU&rN~qz#MeYG<>OUC9fZrRi=Tz(OQxB z0p$n=#YB?%mU6x!=_~Kb08~R!P(Ux$U||B)Q;Eb1u#Y(!BM7XEVy__J_w&@?I_+p+ z${=HKjp)MGp6u<$)!~x5pKy*b(@vExI4doy#On*?YiFAnfTz!W!cWNU zoVtTsrR$msfO`uqa1%zHdvOa-w?`lowbT3X8M+34Q~XYpu1nnNs$66>81pB{Imo zvPgbvu2QQ@uo7?aZJ1SL-L}f)hR6t;2PrSxF9c>CSHAUu1R=wd;}I~5oS-3nj8;L^<#t%PpK@!tDKI}kDIPe;O zQGSCFskNz!*`rs4gd|=ARtd^Rm-d4l@cV7BXvce~+OyGGgP~PQ_J{P*4-2J?xR<4t ziz7uTR!RXfDAe;&jP77Y8I5jN3Nz(*?JcG`CM>}cB*%w{T&Z)$qev=wSJPEmR}_^H0GEHqb|y(1{O z62ILHEuk=S3hch?8aW8ug|b$6_jw38gU~nmj_#`OZ7O6nJ0N8Woy9jPwi0C->=4Bt zB6m2){8R$hi*QT`;pxNg=iRv=8H=djW#jL3UVFJ*(LEREt)Ck6dmwbTLzxrB{QQ+& zGECJUObNqG0{_XVn zdm^4e+LTUQzL5;fnDpu7!>gZ=PD5+YqK{a9M@eg+?Gsi1%hn?`V}wD#4|C{^l$mP1 zfn1Wf7pD753?%|@qQ08N9UN}z?UEZ18Fp+9H+=0!^n9+cbx9|*Nsi@THsEnM3?|=x zL!XNhlQJh<3>UWl_*%Z9PWr+U+EV7du#z^D?#E=#W3b?7>wT>3I*q!hbIDDE zEPscF{CW_tdo2}7xxt%$1ZS3pPWj^-mF)!T^P97qZ1;V~{yU`_bB1&5uo3GTSWIu- z_n(Sj-{zsM5h`2n_Op|^)fG?pnJkrAn;K2I1U!*oFYDf%@kyzEF>fo=DKBp#+eXP1 zYGAsyVrHzN8TFOE!#%p=lgEF-q>PRV>^*%6kY-QQ8#vMxo5@>*q+Hqs1f`q84$KU$ zN8@)(a8$E~uM1Lrps>ScnIWL#pDxZnn@`E~d&hs)#5){OdgtqNr>wb16?3PsXvg2b zJ@bxQcQbtKk8sM-`cO-FkN>C|2BT>KTYZ96;0C$Jl~G2v2pVtug-jKszmtH&91HDK z%(m(06Cvca98nGEl!t1RR}9!Bn^IDFDC>-@TFd{^D9`pBgWLr^oo9#vNN zsiR%qVB})dYyQ^x?j8iYAvxbKL{vhVLE zxIO&Nl8AHUv%@vAF&*`4E8rp*sP{z-H0zq9FygXVoPo-w+UgiOT9nMjW;vq?`UxvV@#c>R>2`W;1DjU=V8LZZgl z?N1J3eoopw4Q?$PP94CBx#K>f4qZILI9GwZQW@adZ6uk@#!1RlY=PA_YYB38Cm13e z${F0eJc|w?bH&Gg><3i4-50}z!o7)jQB2Rt=6*uMm+yJ=rOJXbEnZR1g}FrCR5ydfnpgKLCV!$&8*+aCEeS(&};>XS-?H^um_8XyOBE% z{n*5N5EP#E*jcM8S7+FTcnZDZy7(f#1u{-Z0;6 zzA?!38VA-oG8RvL5qRT=-&(oKa{ndT5b97YdnW7N5Ik8?Dz1NDVm->)gqwgTLgg< znVGeRJk6b4e6FC(8-t+r(8Hab*)dBo!}Y|pnQt_oMS5^vs#fY326;=w_faN4%rhAs z$XI*Pq5j3lnR&(LO&xm6k+=#Qu(T!!D|nDMO|OWyq96X1MMm@B_JT{B&N|6`)a0Wf z9KS+He&X8-5rdUdH+rHcjDW7s_Lw&Mf7{xS>*x|k?~FQi@()RMEXD8=1<*vMqb9}Q zo)(GoKM^fnA-TS4*$}foZVPN7-oIkxP9eZkHL{>Og=d|rLrqFyW1L4 z74)i!;~iNdzWU^jNUm#Q@SMpHAr#YBjOnyoYcvCtGi1V5=_)K%UXz=W`5;Bx6=S&s za!zn#rYe%_pKtg0u^3${E?99DZ=(Bh791Fpn<^cj?f>G1oXvqf1@eJ_&iR0GuU zv6%?F_eR>lYS?8Re64qNx7?ffvFSN6OVuiNVIlK-Nbb6PG}F)?8QIt9v|0;(?il)` zC=|atdiaw=dr?`Sng%q&Jvq%Un5>i@Z&?9?`Ra{uw08Z{r=a2uEqc|C%CI=BBg zpB@cZau1V15cPOO zh779+=XN{V4~pq$n1k<20r~ic%5q(T;{B<~D@z0+8r(a?fNo#YV?X>Tg7Wceu7lDo zy-qL;Z(1iOe?tqN0{iH--*vbrd=2hcKT$8@pP9_Q{8Z6Z#jm=pC>LKum{9x%RT`*6 zzMdT%>*%#8lD(kP}IDUaxsw+_AN#qtaFhIDJH)VKU8G{_uqB@nzxSLra( z>79=-3?p#(SwAm_LQEj0G{ZO#M|;@tzA@pQA)8} zH|fI`A4Apf6zI~T31cm{6XhDYn8fI5+Shi#fXuo1J4M`2C!GzY}qQIDHH{(XKB zYg>scT^SR5;#W@ix7!K2VWTI)(BAB6%~z#==FU5k;v!L{oM&Etzjw=w5!4SJCX66)F6Mh&Np}`5VqMv`A5DgNi5-1 z75B0;YZ>M_*h>*gXT*?jl+^jwpfT1Fmuj`wlO9}-WRM;!S@;T{>qILMDC(cn^}?K> zZcmG)xRl7Mz$rlHB2Ve+`U-mmUbP+RE#R-;=lUg9tLcKPL=%C06=oimtK6of1J)SN zo8_qqCbf3nlj=SxF1q)~(P2`oeC zVVVPPR9V({QPvaDb+A#hQ*$5T zffBrMOY5=p3W2cQqYB^e;vD&5-{uwUMNWI#Y=T;XBILB-?UL|G7V8k`MGmeF%IF-9~t|E`GqU3(2h<(2|@72d2RqVS4AtMbhkl0hLota1#_L57eL z6=|NV8d@}Fzgl98W(gFsdzY!gO3temP);|l&VA`v}AEz#S(k9&2TC?Xo^?U1wBMv1Q|M67@ZPJO{KBj^qL#2FLIqhx!(7}EvrHU|s$ z9@8!sa`4+rk~Z2B~fEv+5Ae%@-O@pz#MwCC_qRjif# zUeO8Y7L(@GT>!5^gMV^7yhDjbE98_>Lpnw85YUO5Q3M143c(Rs+HZfIRaN_d*{3+k z(-8Nq$zi?LeH(lcO;o6Z&WZ8%X<82=*hLc*i`#m-NcQAH7S_6zwXpe-P|73n-JVs2 zniSR8izc8%+n>5=M2kAZ!kUlkr-L*brFb6-2Z~(j8(O8yt8O2`xL>x1>#wh5Ii5ty zj*xVF=s&jTQ!mM#zgp75@~1A$W8emL&K}}Zei7SUUKT6|d6PuX0RbUCrd5jsY`Qn} zL?E#+71~Iy%$6h$ez66TE)C<&@$kw>U9+&gm_EWGkvQLQ}t{j zg{*7s50}3J11(&8lP4{?l)9O}b~kPwFjJQs?8c!!1RF=R(F_R}OHE4u#P<(68`*cp z4Ry3WI<(*PU*>faUm~MA2b30h)Oem+=e{6i+!dU)oiI45HvM5UeMD%w2MY{1+h85x zHfOdO7I{b89k=P;!ib#~Ql}hUZ~KlJl3kiAn$V*)z(-H^e(_uPEYmS+cJCeWL0=Z{ zeXt0hmVa9#cXrFb7K@|bMRdlv+{zH-7rqbYlXuo{C`F-qA$Qq3H5G7kVc7uQi5FRm zQ5-|T1$U?|mVu%Mh>lopWv8TT=)5%#5;9T7vZU#JvRlxbjt7?lSzi&?cKVZFp>iSH za$jqGCY=nsjphw2y$SYl4nA@9+@O3BVj-7go;wSFhZo62w^QF>9-R-}?&s3PHmosM zsP3FrSZX_7(TjqBmLiL7*q3KOK)*v8LHD$y16!s}fIwK)Y+#-xy5QLe?3D=jQ*crY zx(FA`)L=p|dpRWInIh~%w_3#ytc}taD5w&;RJUb5;lbFpz1emgqWfxBH?l*M1^V*R z{Mcz{GSgNds25}5kd5GO3BVZJgIeyD;Wp*h9wZ&vsWgh|yg)$qJp^ByAS*Zsn+jj) zDF+)u_M%O@esnG8KmfvnW7W3u(VT-3vEb zuTC8_O>mNfb@*Jfvu5uE6HlBH{|*SubIyt_0Ir8k4eNo7ZxnoXB4{A7%-uF`N?NVx@WKlzgIdbfU@ z+Cq>!OCkK~9g$RnC%A2cVCbPu3Q$+LyEEGQAi#4OJIF5hH9SGjVSh@wRkr@V$0qaD z5z&Wr6GVo$$}-Ty288$#8n_N0k!53{1iMZ6<#iLDt?3acw(=ly%S;7TdxnvE>(O49 z$~_wIO?Sh;MHM18JA~fUzT4W>2iqI%q(+a3g5pbmo^)IF>aMVTgMvUKBLDW)f3Nkp z(m0`+&`HYabadfFSTH@sTB*#$Mh7~E6L{;c+MCMxp$;;OX7r8NjjN6mpprt6JTHgk zuhZfM@euhe=Xt#j$0uuoT(+tp{XEL97e5~$3zPt?8RSx&I&0=~wSl^mT&_aV82T3` zxUbDg3%wtwnzQpdh}n@DHt*&n#5|Z!aY0^Le;+yT^JDv-B^~uVc>mH3Qux@r&H1Mf zAGZ}FASAf>sC&E{JjaHa(&TlzsK*TM6knn6yjMP*tBdCwS4gAJf39Kn9?`xG$@II5 zOhOSJ4-ppEQ7xUODnh%vFF5Xx@UWT%A|Xck(rswW%X98j}%8S0Fw zb*or11UA*ukTm`Ko zhZ~P{FtwaYoLWKV>!}6{iU{|=n&_IW2T;N#w4|Y=cgwL>#XAX|_ShR`ia~!KQJLmd zCc?)Zu7U;f7uTNUfP z#}1Us_lod#x`;a^ZN|o{>BFhqS|eEY__;wEuXXNzL+d*~>7DhGKtJ5aMAAoYvIU8c zzgnur}r#H?ZyE^Frw+az6LNU$^SQ}31S&vllVBqD5C-n$8XXF$71g(mi&u~v@T zt|^<5pbMp>39t3z=7wXs$MR0d^jyTtIt=Y;zT#3|+xqi5ll)o|@%J=y_?K_39dU#@ z?rHt~PSZD!%Qi2YHJb)TG*M_(q~FYG#Toc{h8ktM&~V2Dwts|TQXeljMYWDdg~7%F zrt!D{$oZ1D5DDOuhxRe8R?-|m)gV|x4(IVMQC?Bna!%k=o=3VM7_YU=73zwjWSr%F z5wwL)DJciK28=a6VbImK)m|w_Zd)Y?{zrfDW;6P+C!op7@eP-@r$;;L)2mp3N#Srq zJt_E`X7u+{;%RNR)jYfY&$mHnt7PEr`A*Euw@iy^s%+gX30v}eLz9Y!cchIPSg2N9 zto*E%0$q-JJr*dCg+{F0+2p`KPwHMOIjl)1JRHfwS}Ey1lZ7i*aiL0akCWQB%6$C1 z0yqpJ^Dm0uq5IL|%?i^iFvSez59b$77jQ{|(Jn#bq@{31p5y+>R`F2 z#U#3PZ3j?zG>v^VphOA?_!7S4a{`F5eI;^;IFnbJy*YaI9$2wdZ}!F4x7u%HXbT^` za~5fhs-qgz4DaQ5e5VQU_ArxTo4H))f-_1tLGMuKaB~&YuqxMfDnZrA-j?6E_&SRu zMu&?O>A4Cc6xZNaBLiZ#DAasONWKO|1jj4YQ8;@c# zGnT~6`n?-VHZEtZ#~zG93|b?E`B?7iAiv%12yC>eQ&dbfBzi&xG^tFpc^rT%qh59N z*Vy$w&Ni3<4jJII@AU|8cR5~QAqunc)wQerTc(bG@%c)%zTLJ7d<~h%IJwjD7V^Oy zeA+arJd1okIuY!%TuTG>OqVxRJx0;lr+qJNpmJiwMCxWneGo>rdtXg`-|P93qcHk( z?VZR!_Dy(=YCT@Nr#$R;5s0Tt$p?F1#graUdh_BqUXkrFk}YZ7_?lTsurY^=@)$ z4oO3C5Yktu$h#_E`GP-FK<*`2K7DuDs+m%t;4_SZY{ocgjWxDzIDG9f=H^@;EnGe? zzRCcl#^UM2bemAT{V+iLFjtFM_=Zv&!n+U0{Uv>0&}s`dkyRSZlCTUz>UR7DS#iVK+=8;QTQeqkD1hGInPf|hjn>LsLe; zbD)A3MLs^i3j3HDecE(uLl0jJF#H(fZ&H3cjYIeOOofU1d19qGE;Qa7Fye4et2oU< ze0-gO?Mz~O-A0S9r@#^x5nyBR-E)vnz85H`FWDkluVX5*F(9Whb8fzwQB1gPH<$QZ zn*uaOUa}N|Qf0=1$G8e$nWyJPC*jN}TMIo@=kYKj$U%z4iiIK(2_hoeERU zDKr#BC1-XaIH~*PC8=f;;}wIl8ivxu*i5FJ3t20i-X53X15S8Y5TrSubnR& z3#N7TbTXj*#JDVEY-WnHV>2CdySmWbwoX3ncjl7ZiNK6yfm&G%7P-12fl2i^Za~6$ z!ZDJp=N{KGjgXAp*nvNhahfG-ReSb1S9ZC}%cixWeMXOO))hnrMM+Q1l@_yNI{&8V zfrM~p`zESdnPLrR*M+CaHtl`VboN^5T$~r43qVnw!@#pRByc~{lB?00Q9g0_)yrpm zUzKW5@es{#5ldG%?_VdS0E3%y5svt^)>>)qi=R&^6YJFJj(B+~d{7%CAvlAD&O}Cy zOtIPYVJD{+58ID}1c|+7j`=*FM1jtBU&OJD)bsID5Qu()LjlK;-PJ=2K@0XnYnpm1 zp18M@UJpD)WA(y_qYKx8z!8%CsW2}sN*EzSs75BylkVN_2{&h&KwaqNy-+BT^0PrO z-mx;dA9;Lz#lATIwww9jlvP+ zdJk!T+rM*?2&iADZDqk-^!x-@twS+wlG52*@Sf9TXFZw)jCuBMYe`}=Dyb=! zxII8*?5+om+Vm^Bg;-~vUSC0+k$wy&QN-w3f_ zl>M-{*t10sA6t?+u}LNgfVI24y5WO5(kvUcEJNlgiqaQu;T50n+Nil%g8kVD{eyEv zr`gU(mRw2(b(-$?SoJmQL9_MO579mZ7o0wnA2-KfdT5kWkj6{&pq&RRGW`*nv*J`L zDK)z+P`nbPeXxEy!3Nz@W}k#9YPNK4=vb;|qY!dwqJpDNI(|DnN9)e^DVBcdOp&WWtUG2r zjj;RgKKQ=hPeSPg*R;1zVoqL;%u1Nq6hos@5|Ic|%@}Qij7ix%(es`Uwb5lxWpplN|HuGR}=q>AdX>+T{t8AVmJu0{KibuA(N5Eg~A){Nf_tpQc!o z7-3kfhLdOwK?>(81`^VR`jas{6x0B(AFP0Y(4$GP@IDBQhll1pBC$9~Fx9lt{Mt+^ z0EGKXY%=QuSfQkc#Rh0NQt}m^3@0JMP zsaM3C6chuX)4tXNWjPT`9SuQKCStM{L^6xk)^~M)Ww3+i#cz z`78ncph|lOZdGU&M|?P3k32_7gK5!Jf)5y=Y*`zLIR$@GEZrRY*8I`U+CneCY;H+TC#d_256mbh9cf5B zu3E0}G)@wQ1Ld0CVwBT;Ba>J*ZbK@Me*niGA^&sfhZ8lI`vY`>2~L z*)KX_8?QoXMVq7Ms?n<%DKGh|LwTIY@yv_`oAkLSq0wngc#j>gcY{vzU)R6F< zj4pT$9LZ3^1L_gUt2HP30GJL`kb!v%^J-AMJY64LN@;cNA!>h*(3T}6=>Z$0EKo(;LEarF@JS3Mip>mD zTMujPZiPX{%lSx1^k!im!>>fqU-b))UDtltm#1TbT{a%!?*7b$u=cAawzA%7CK*RI z6`#0{8e&`%4~P+SaCMYl^fPv9)@^U%8=G%yLhLS+JUCa>w|rm>;8x)N!U#a5&hnOU zNuAlsuvw-4Y}15|;h!Q6Z7?XcoiWaEsQQh0Ils%Ca^%c(cFp%dh+Y{?%5Lg2qGeRi zOw9zkXjCx4He1bv+|ru+EpMDRjwX?UM`h?+p65L$N(vGe8d8y-^OZ;|SQ}@)GQ0uc zBHDSgwRY3`OThtvUAJr=4>t{40RCiZ$zkZ;jofkeCkljKpMSm0uR5Dn1&rifm`>RN|r5trp+qa2k zpXTTDHK|xnE0}2-b~C8QNi2)>9cYEgiSqoC&R`-$3r;dW&Xg4jeRYSfuQN0oX5tkI z1&8y76Mp+F~z(3m{CSd1ro!XM!N4c~jf|A>lr+Pp>0o`rDW07w2(RpaTJ}=6cMGs_bNORC`TFUAX!B=Hwyupx6d8eFCB6I>Y=M|PtDR*D{^Cet za;!AN=yh2x3D!N4)^|TAX6m+sL7sXc=xX-7%zbtFti{2;Qao(Wh^2HAiHqw2;L>Va z^6>hrC+A%E+YjlArRhP^ea2cS$&1jaUF({{bRU@QRhzaSNv+3{9)M$uPdOW)fS4@B z`cg8DRe~OEkcZhdh!oZ2y2^}ldvu*rIjXLrF^h1;$c5!E=0C5tr@@C?p<)wfdy0sV zBn^K+>=X}9%G>XqkiG7qGB24{vMdB)KO zfgU(W@dkQ0NO4s>uz|l~6qn&-8iGOC`x7qb#wDZ7MkpPVgVnWFEwjgp5@^vy2S3@3 z%8_tK^tLqx5`3;5@CzaXzAIrHXs+!$fIY&KK(Ouhk0AZ^1>@fvrbz(0kETkPnkYdu z2S*heF2qkHP+=L`M)l3|wY%(OCB?7~E0jg^3Y;8DY@CP$=4sjvn9qlnk;icRPITuy2ikrY){ zfv-0>?X_cy0IgBRzw(|lc%FvbsBBk*cKo^!h-na`FF&0tWRHEwXlCr zAxsQr%FRG^SAle3hj1aqDRp-T22*eqOMTvXKAv3IETa2QsDM?iYFl z19ZvKuWOS=%TZ(b4QS_x^{KtnVIwPS)t`OyKZ(I%2d@qx>B~D@6}o73ZP$dvi!Z}R z$G?JAOo{sc0i*Ckd>&oD67JZY^BkA@t1-kS`vY*3QRv*DF^)lc7{C-eeDzLsA~XUB z3+^K59GWReEWcS2WchVJK+di8WgvfS=**v`rVnSos4JBSx}@>MkKa zj9Hd~hJf|?vXnr@UZ6T&&m*bIyhqow=}{OYa*mQO-K{g5H^w2H8qa6qqDp%>GhR@x zuOyr-m}s>x;&Co7d~p-urS&HaXsJt5-&*022`uLaxG$E#0TtS-QQ`TJ4dq_k`%oa)Kspr!aiBbn{6G6)M{-bf-S77Nn7`4+@v3tB9If z!|H7wnl>21Y4zBr5Psk7zFd|07UF04Rw^alOUVv(34*L@vKZ1sKxn?WmZYwC)@g{V zqrxj_pLo$d7Rzhnr0b#=4IIDHs2T_n%AHwpTTGxcK$C4ym|$XnfYGkkioK!7o;2A> z#NJ-U&60pp;F#W8v|^9qF1lS!wWmTgXiRp8iFtszqVIFhtQw)5y8zs3eAB$ebF6h- zi!&+wh1v51BahRoPy*}9N#%4IoC~Fa#WOr>el;Mz_L5cCyaB^5q(53##?FcdGn=qtCq%oP+XizeO#GKi%sS*BD_7t7rXNu+gSUut=_n2ybZQR~%XLGVb>$%ZG}<34{6O*w!M`CeWf zljsPJzLgD{wcj zaJI_5DiuIr(vCm^A_Rsha$*LU4wLJ93>X>up?LG0F5#%(w>PcxXq@4Z`odfMuj`yK zQc4WJd1xg@W5LB^>x~Mp_AHWq)oVlX6++M0?v;V(sXJe(kfPC+zB;sjE@RX}6cC5v zMhf|s7AtyfF{@sE*Y^n)7`({efIx=6AWB0FbOE5Tw!t0dv!;a<_^C?Zfs}Dw~i1OP>)~ssGbS9j6BQERiP4ZQ`uSkX4OVD z*7k6r=v18h`cS|-{7Ugk4ElAu5mT!q)Cl00fD3w|7Xo%rif$q$&kZw1zA#&C09PWh z;@n-jjrIhFNx@zv9#Che6y0s*KFAQ*A6+&2aeoH-+v-rj%6K6JQy^)jaI4_1Vxg`% zbv%BO6}@*s&s+A~ECe(`+3WA$(ZVqBj(Q*huDJc~uN&f26&=L}2xVJzoW+9ZuCKcw zwd;6Uh7O8P+TZM$9Zkb(dt8fj@QjLhEOkSxd+~?VGJ^Aj7}Ln<7TiIz{=aIzDM+)X z-SRElW|wVSUAAr8^_FdQ8C_Lfwr$(CyKGy1`ako3b7JDe+?~0YeVIGfTJfwWA~QEu zo@yCLaB^bA>CQmylW*YO$?9tbh2>d46L(T%q2K8?+AN&0%$6~Y(K?q**gF!!?Hnma z+a?yV{c76;)hc-@LkS)>s>JbzbQ9FsUdExA96BoG%D`PNQS$CLYz(LOquMv7vQ?(Q zVOo;C!YM8LOd{@hA}F3JO8K=M>JsvMoV0~ZeSMMyX!Uw<0e|?IU?A!*q6KS0F@O?J zf1!Zl>%)j^-JRN87NVN9{&y{bh#3ZM$(6r~?biIdCEL@haNTUx=G$#eUqP;iygdoxd zSu3iu)1N+ze_~XK_!uSa3?J1skeoQz0ngY+6_~b=Ar6#Y(WPv2#&1HGl1j{@i(A*U zw+8cvc-Ig}7;$W7!At2F!z~!SwUE#W8SBtKVX3e+)OIj7awoD9!lvDAn(}baPDXZ_ z_Zcu?`|xg5FMH@mASamw%^Wl1$1{YY<-NV!6Ie`5`?jq2(fJ>=^49c3Pa=GXPC4PJ zvH=>od#Nvo4(Iqm)zggiuVvAHp!^K05^-UPzZEvW%Yn`4aZXY|9a$rKtvnA%Q-^pA zxmZWQi51YR#W&ZE`CYa+J8mk~3rvRN$T)s{98{m@L&%)xs?BIX57@6;t~cWsjq7KL zOdS_w1+e%8{W8_4a_f02`hl{y)6RP2F;xuizXV-eWMjqkIe7Pml@aUZL$PjCGS13K;p$qgKW7`yN7K zw*E0hylLCqby^Oyz=~FNoUR-}4-Z z^2{{r@aT__!>p~jf&Nx6$DRVd%nR`JL`n_7r8;4r57Xr2Ey} z*xbqo;?o!oORr>!OjYG70i~QVCtP;0+mvgRSDv^Ku_~3v(t6cXuhQcV!BkjCnR$F` z3WppxfmOVhJK}YyeC7D|lJT7mNzoxqek^X#8XPS}JffdhT=H2%nY%9xWXqcN(k{gs z$2E`Nz@@v&cy!T5szGO7f;yi2AkBS<^x3L_KM6-#0%Z~9fZzrCt2-SpeC&JTy`YYv z5T}LD0Ids>$v^mh8Qqk@6tZ1r+Iye0ci8%NYfxln4!ApgG8#TZYnDDS?kjg{I{|xC zdGlx3-yql4Edo45HJ&i% z&@^N`t?TUxOhv`9xi1S*lxRm67Ht7_MDh8D)0NYCi>dn26d7{F_%(jA-{q!$$b7ia zo0%a6km{BiKYdhBy{M?K-sYj<{!|gqBjmgyH}3cltIj8q1y7bvOqlTWU#v|qNn1f$ zy8_h+T%0co85Wt@QiahNsY=o*OT4>`0aK@J8+dt}K7U(N$AS6-8I5M&*cFBW<17_a zL|UY&fN0=Y=#MVmGu|QmI)bxD5|ugc_~w#0DTSiTLSDkZQh?X?dv_?TW4wX@a*jJE zGs7Zh1$wsxa=#Wg8V0OG(pDsLA+Mb**$$C1Ty5~|h1fls(+_4R)-cx>bfm4yRHX-~ zBhx5FY0ySWBSOH6qwpT?ng8RWz9wD4y3h$EWI)OLnIlJoov@mZz(5GO;|yY=YsZUP_x-BiMeu9UQD zsf6cWrt}-1`M9`|SLGouRpU&VVMz?tsqRPtYI@GFS1C9qs?4D_{Z#?0d9Zu2#$9GXP z@m^C3MBfzp2of=wO)ib4z1?{5w-JIk{2(@pbw%KAtrvc3DfAhb>c{xE(m7{8{!k$- zSd*i1*bZ6(BMU63G^$ci(&Ye6IApS2r$>^9ia3^(&NrQvR5-!G_X!oUCSbdF6($M` zO(c)@Q!q5FKNep(yxfMLUz0UcfhbK4C$Tt7%)Q_sV#(#s7+VN<1&*Fe=G9Xy7|I4o z>{UZjpt$sHA1(R56Dbtxswo9kqMaNn(eM7&9$S}GW{L(K!D2Y(xYFQ9sj$S7X<%i7 zhZO;_m&+ChuR*1vWdFZv9UhSlhcMQxzG%H{E0anQlSudl%3`u&O>yqlV` zKl($#WXGT@5tQvBxK4Gtt$Cvpoz4ReZzmTth5U4mDm{bjU&)D*8cGcOLT=-8F^utK zxU|#5xXUwxE9)o^P?-J4XxZ7aJ(PZt43f^9ioD*Uh#v#v1J~e4KhnHI(kk*N;K;9y zTtyb;JgE_=#vDIxENEqW(O)CV{3cBKm=Iuf*2@O+6i=lrJ~4yP0Wcz@{pKEo=z!PO zcf+p|xmxia-A}5YdO5Zy_)J~wv5;Gh0zGz&{X~?RXGxT?A*tL}m z?M`8Psxj-rb>|+=lo6+Xu#L2V1W~!pTCHedT1%`GKg<_=^H+6eeu7HWhUeXHQ}cKU zu{0btT6$|tsFN!MzlRatE24?R_8f5bcG&B+o*RwJ*V~TEv|fBO&>YrniEUG-rk+QT z#~+ymT~En@VERdd)H(McZA)dE>6);TO#r)qAB9~-HTSqiwed~wlBf$QC*0}CI@p3C zZ^==p{>y!zm}eaSM;hG{oF_az)HeR1#Vfx@zfd=fp+Jqy2z$hdF2OF`eY~zoS#YIq z>e7ttX$hrFFd>h2bT9d^locdCTZZ8k8BZJ-qLys~&098l<_b+~1hSOn#PkL)u6{I5!L)wZV^rVdTPK;>GaNTHrZaHKhK8 z4q!s;DPb8pEw|B`IeiiZ8Ug`Y-;VCIygI<;6%O@g6)N$3O+2{`1dqrQV0H}(tZ>kT zII#>5We66@@g$&b$oqWno5@Y+_m-^l)b%*LWw)PCPyzbDT9_4%_>0+(g2w^XsuYc<55Gxs0N^L|b+-xg zUebv`C0X-!u=pkp)lc1P6&W46oD`X92~)dR?Wq&zh{_dTw8kx{lZD`eRmUEdZUSN; zF#YpTQH2<%jlGX##FXB$6~c+c)OT;1XQO#Ez!oqY20ey6N+hzXyJkjki;eyET|$Z1 zOJ@j7Vu-KyaYjr`ugX%_c0(uBP6%Je#~IR@GLCwmXK=$-DpgEJ8Cgkk*=lN`v%3=0 zrYPPyG=l~?5!!ve#6g>1;QC?W$2Qj?p!9}9<+KXYJxd9{phk097MX|d`C=My3^uwM zfY0A?(Z`)CGNP7*{yNm^hL6*2SN?*mexJ38u;Y(2nSHG3X8xmNVVll3G&D6#x=v;m z0Fc8NLF`RP#WF-1E|Blg?Im=+rmj&RZiyScDDxyg{^09V;!r_rNQ@p$9DpnmbXz0( z?Jj-$id-SxvrTHl201@b9$O3;$9#uP0Qq)^ETb43pjj8^VK0e{xe}k{Gcibmmvh_JD zhWP(fC!Qm!Grhnj+v~yG17keN*FOSY7+#Q9*L#8RgBkUChXHf}4K( zh!*vgBozJVvFl)#Fmw4iNyy7Vr)n71p7zUxmLBL;QfTrX@yVe_Qrmf$m3r-h5$Tg4 z66NBxeP@Xz_iv5meF#pBKg=nq9sDZu%%6jPnG6Y<`p(lb?rl+n-I94?++7ZyY*5Aj z);M6^>@pt-GJW;5QmDP~Ab!A+~m`J50@1V0S2XgvvjrL8$;=P_DmiiToaxZbg*0=?; zd0Mz>tugy&X3exQbgGhnO!-fZEqf*vCxd$&Et`fVe$sE75~ua27@@~>2QA*|l`;oW z=qmr1@}C;^E!fnpHLo$1O>1Y_32|4X4{NSb{r9QPI$i%C7!LqL!k+_qPM#C%)1+U7 z?&4`gSQq9u`iwmM`*NVR0Ofi26DES*G+PLLh8p7)S918nDgtJZk{T%BVn7+rWLFTJ z&~#ksEAZZy_q8ZRF#r2PpS)KC-&$PciL}&TJA`Js;4z?ruVHsc?E+^)qJj6zXCv6& zx}zX!pOXygP5tgBP&hP2K{)2n$PZF8QPo{SE*La*#G>72-cgUv`bvc_JnKWD6!^VseGR#?qz@*_cW{Q#XX)wSBKb^gILMC3R_5Y!4*lV$-9^b ze2*$km_|kJ`G7Z&CGx)f1ey?vnpby4@f6vw3x?5Wff0a{l(38#7lu^;B zktE4tZS2HJFZnB}$~WIpkcQK;?xE_Cg%PI)*s$y$inPCO!H>*6C1Yc=k|!`5J`Ela zM9l#P)3ScdnQ8za`0P{{R~L%z1wf;x(cWXgw}xDpvC~p`EZLIlRCIHuB&o`)_%q|} z!4j4(ERONithxyUqs863G-tohv}|yBY7geDq_%_!N!_Nn39(N$k|Koo(F(*Hn z3$w;k!cbBc770J8-c8<5}){ZX+4hKD_jyzkN;)rxWwAgpRRK7Bba_ zMyh(es~{Dz8^{}1Uiza>02rUgMQ6ueN@lN2_zO%l^Z{)^33(SH0T6=j<$U)BJT#`VgdJ5UE>c|7{*q&ItU`*=Oi3wy#7LlHxZHN#yj{rZlHZ z*}Tn<+!s0cL|#xIs4Noc6OKT&rmz=dQpX4YASQ_O%LIm)aSGai$K9MlpC3ETyBD|D zLtd>2?{=?)Jf3@(nm|MXx!d(>Qnu5Jnc+ErJ>Vv*lpsC2>BX002bszivOgLtRiC(B zUCWj4|2mE$lw5LX$`#e@LRMp92tpp z;9heAxD&!xAaqC3XBsz3i2p@khN+tOvbLJ=P5{x#Z*>aPwE{vIWFVFS2%1tq!c~PPz9t0b``B-MzYWa=yw+T1= z{utN!D%0UIbYeVdi(QhT>ycWBM1&IIN1HL`S&o%xDXmej6z|KfgswbV#?*`5B?nks z%zTg0{;=exC|3S#`=N$eRf8I13aMV{;VD+)FN8gj3i;V*{{w9e_`4k-diNE_cf%we zpr%Dh2eDnre!Q#;?i8bUd2ANvGXEy~GxQN6kF&g60jw)}-O5P{36k-?&(+yKR|HGw z7a{IDUC+y-c_?V#cC108Fi^4!?2CVGDsGX!#$VDb94pKb0bY50W1AoYA;~f6J83{6 zGE$TeKezkcHZlQwdd=Gh^9hq>3WGh7UnJk&;1AS7We^s0!^ zUP^76U@cH!b&@8h(I)9T#B^8y05^9aH&|P+O9HfBhUBvGYYuK+gFFo}*In))9vY_s z3EhGdFI@TzYJaq#ZhY!@sKeWgm=nyMdy@KP*JLW$eaVN()_Ifn8)rOVhNN=Rc!WY` zfiDN>-zMow%!{a z4J}!IbB=ZYfI8#*AK+~qW5#!rq7}|2)aZ`Wk=EZBjkE3fTvRM`8lw<<@kd?4JBd%d zd%N97Ihc4_l$q<>Z{)BVaA0xA1Y|Aq6Ioto%ubz)NCs4?(0Ysk-TYVlwTTskYcvY^ z#zFwBsaz23^hHn@i%O9R0uN7j2_M?T;$`KEiFXk*sn6N=7sEnxUQdljJrPGO6z`}x zcv65~qN;iXkgsd-fAEI%WD9t@eP?a8bfy+H<4F=3?YD%SsoQHet&;byE#JxsN2##$ z3D|?Oro_ar2>*s<42JDw$USm%ogi6GeN7E=xyt0U2T^p0C9QV8qv!U@h0pD)?q#!9 zvH`clP-pP{sF4GUr;zc;%z|kL@A4_Zt*i4(a~Nd+4zRAsjaUH%KaaV23xPX38%8ftRK`qyjGf4~=S zhWH1?XPJGj6O^k2Ns@&ylF^(0qR8CeK5I~T_HKXIO5IIDSV_egQ~4JK3IvFox_umX z*Hs1EANP)$rl0mOOk18tx`AAKb+0&|c`W(nC-<5E1>SMy{V$K#(P$|C0b48pj>$Py zx8aJl1bQzr#E7It_5Vfju|xQ*mf_#AwX*(ywkd)NuDrq3bLzjf31$Q%Zgl1nCIyXC zB5V79gPY$I*2kp$MSl`&e#Csu{#0W92P}{d#ZBE_e51!Q_5@`*PYtR}^87D~qnH2I zOV$6R5coR>{;!LK;uj5uh6#2 z4~&-@;40!HNC?`z+@T3Dj5W$2OjQ2my>ey=S?9G)c0|>hj$x9Hp0Im^tB(#jy)Jyd z;{#;**h1I;s>lZ<Z3`7Ny=-rIQH%f-=VHx_=?jK&x-^*g>*NcrjkL4-){ zbpP{MO}zQF(vN^kPW*WqZk^!|&-y&YFD#)JS^cAJwRGC(3|~8{FE@7-lRZT|O%_br zvT{U|^)&Tu9|EDS!UuX+xmh*8hDlwz)i~-NSR^#LwU91raIZPg3$%Hvo(Pe-tkq%l zxStu`(DntGXn+9SqE&KX2GXSgj$WBc|Igys^?@F9AtlacYNP;ZKb?Bt_SRbPI{C2A zb=5ReZ-IEB4HJXGSmM^D<<&it`LNnAi^9%Fv*DGFnWxHD@vS<8o>p*l@X#Ly`wtFp z*~1r3qs7s6Nt3!TZ9^h4s)LVrQP8VHvI+_*UQp`u=PYwEU$LAngmWQN*~1F5e`A)_ z8HLN=JTII|EMKfKQ(;OPkq=rbWU>;Q?fNQxeV1?{yvfKLl7?EEoOx#?29vFVF zsCjSg3E|-&g!$-Bn5VQE_eZr_q-F6MchD2z0Rts38BXA17V}v2M=mC2!K@(__j(@D zsk8E`nzEsb9o!}JetSN09kYYN?n|FiQduYK<8`H3f%EW>%H(}VN!b$7QesM;=zitK zW;blm)g+ZOmv@_rBi}Tf=uZlfm8o}X8@NHF!|)g|5kBFzE6#7{xGZO@wI0gm64W)b zQ}(SjuH-@xT&aSFhKyOPiG|d($Jbx!*cvBf%e*H3#P$|2`ZL(;3dCu|A~=SyAS~67 zJ5^8mvuP2oSwW3OE=AnsW&$Rqw)Ona$sg7;*1ok<*gA?zu9cOz7iIo{87p#W=gFu% z>^kUK(h64zAzxi*OT&|2B?x!7i{<4UHJJg933Us<@_C8m6ah58g(LT|>#pY$=_V1+ zLjjy=zb&GcMs*ohRb5FdUV9Wtwd~ptfP7QQOc8afFhob9!gg4j3o#$`z->pSSLwpz zCyFcB6uIC~3`Vm;Z=!d&$(;{WU#3J-1Vgx_z4{ipRq1eAqxsBL`$R8>l@BQ0I5h$@ zOF(b+Dy&2AR>#+TV7b8u|DhMq`U3@~LB!TRvi(r1XwtVD6NP)0LCf#p4-S{e1IaOI zOffu2y9n8-dys$m@7wy0J9)T{bh&egniC@Xl^rFk)dV4(?mSBZ%7Xko)c2|eMb@5zebFbl5 z1Ey{Xcgl(zrjy#vl#Ww#&{!w*bbbse5gO@{=5=3RVoo_dww;ZQEp!TSetx%VWosut zVq1%UcmY8p(X6q4MpQ319Q8}@iC*IK+^aF$8|1Sn;sY`?+;{2`td!dB26xkRcAYXMM~p?0W2@FN z4|{sYH4e2>%A1mm2SU{x1}J5?zTHgSC#^eGi^R3;4J*>koH`8*>Hx)i0-NqlR(0@X z4={T?Ay*|yv9dD*UEnoRmtY&d@)R7gu>u0I*yu~+^bFs>#SP2VSkl#NdGYrVKGjq! ztjF`Go6cyWNed*33sTsP_ok#dDV={~ircO@0I~Ap<0kaHQ4NBj zwZ9cbm5KM$8c(&R-E*tx>sBT6W;D{$)V`mLSxDI=ePk?4UdQI$*B5B^a7ffF^9V8- znSV5v$}YRwwf+Ojo_W-hI+m^}VJMDu{A#Q?F_TTx>E#z{G5E!o?+Sym+Sh5@9tP;R z`yJ)g;mny!?n+Q{rtUN|aH7oo`l+U|Rw#+N`c(oZt>$BB3;s|r;9WkDRBS^`D<-zFvZqCAz3n+yoLyd+cp>r60(Yvhq{7dS*Trd?&K56YMbPf>_O=wd64reA*DPV zJ#+)M8J~`Ns`7ky1O5>XM~D5MAd=}PbTx!$bS>r)7B=%Bmqi;^pT%D5r}it1u{XI_U;AQhLUtt!f z*2jb?KPKA(m5@`S*ZLJ?o&jidC<;}7F=Zhd0b1nGEzuW}oUpK4fqm8s-Mu>%RpZ|E zZmKo!qYFtQibNaMY53Q}ho@g(lSYXE$fc4A&!*hhY{L|xEss1F22Mp;x54x@%ZS@Cb13h7;ac)1%k^&@?!M~t>!q%@2e>;bnoJJMT ztgP=>P&j0qq9Hf{D`P5Vw&_A`Gx*L*XkGWi29QCTr-=z^Q08llR^Pnu5&{Wj#ihuC z;X=2MxZ+gV^;D^ycjZ|&-{5L3ObTj!t~j~N2rOB~Z$}HOxJf3Z`_5dLXvq!w8E(%m z)%jSsW}IrA8>F7Ox|~O34RaiihebPMarJ1gGN(xs5Z@-)FF!wt9)$1uC$1RAqc$?S z@aE9P!TciUH>YVUY+!kqLYk*wl~`T?DewVzJO+N4X?><%kwC5M41yBnG|*iG8(JvU0ps|skjChk zvacUruYPpfp)B&W1eC?Mf&kHhCCCzHv8!a-S=%t$9%40-3X#rSyE`5dPrmFRyKQaE zC7n5InXkF=`pE=79>7t>Gq!|3fCvRO0bZ^8Y?KaRQ)HH{F?#&>Z(o&ribgunN%r%P zO9^;f?qbc~QQn*%hsqxx6kZ1sxpTzmq8hsg62ZzjL)yVuN@u+Fr6gAjGT04$Pe>Uq zCFl|zsO^kgL#FhKVZoA!3Qa2c=#)lPx!WV)51U_g$UWL6s}%ULbo7g2?>#wrNwBp5 zFLR`@Uu4}lLMr9~r}P^Se7_}TJdy$GPucs~)lihmAEF9#5hbeMN%C@-dy)#+^T+ux zM1H`zhE&nD4d`DWX7sjMefQL`uslbybo_EJwd0-ZEBT>M?RK1c`ZAfDmmd9QGRP4>{IcD4Br>|w{Yk8=G+*CC zsuL_s5O?f?lrQ!j%@dSL!XTxCNQ4sB%v-(-mP;XU%wJvYz?>Zxw4%P2Sg(~%Q=$?E zm8Gre;pO8~||^h+FpW9CYu&bWKSl6#GZ zR_VntsCFMH7-V{Xh%^rtT((uL-v zDubKO(B7x^b_lnxL}Y)^D2Nx^yfWHQl^`-yQ=JM@3w$VAF`;VRPxr;fUF#-}zy!qL z2Goi!n;6eys*ZT3y7!^gzaYz?cS->r;w|vcy-pqEAJYT`Silu4H5D2*B1gn80l(O(m`ocX z4BCendH=Eo>$K;>i&sY^li5RGjYNJ?&?iNOuGelNB~IaFm`z3xL(S zX(QPUMR5%03t{Ds>+~L3c|6RZ?PY{}*coTU5t<&C#_OgFpxLmsTZ)6?XMlVJ(7(H& zccQ0RA7p1XmMl0B+jcpB>y*{DhV||!J{>0ZX$35voY>V6Y zY9A^Ms=~gr-s7tIA2KE3D0h;q=p|G-mq;Qpf2@gSqsr!RpxGlTbZzp}F*l|#wk8oA zD7r3246l<*u&PJF&S)G+vC_Sy?bRGRlDb$YW1dl;oE)pjqA2Fs~My?M3E4! mqB>IEwsiiUrYaXeoG+r`XM_O&P&$?-8-cs!(3$iC0RI6?S>@sY literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/admin/configuration/consoleaccess.webp b/static/images/auditor/10.8/access/reviews/admin/configuration/consoleaccess.webp new file mode 100644 index 0000000000000000000000000000000000000000..9d0569760d3180c0ec8efbe6290181441b6fb836 GIT binary patch literal 21870 zcmZU3W0>IF(rw$eZBN^_ZQI?`J#E{zZQHhO+qUn#=X}2Tvy&%D?W$F)cCA2BLR8dL z1pq)zL{MH;o}EDR@4kEwU=|?NAuu#BuMKOO1PL)w9^s<+sV{7pne8WTTZwK66+(~I z7q|;<%Y)sF+mjO=_eKTB0L6D!Pu&&M7yf6Can2PFKVQ9%?U%&M)(`$-%XLjD{2Jc| zy>rc{Ui<1@^7*4 z8GZPl?-ie3zMrRoC$W#7=N!Es^e?85o#&o)JGLLZH=i5)O&?pI{tsa<@B{L>pO~Mp zZ>dGQ!yIcqrLUP8_?MksZk^AT=bY!CtsXL70Uxq&yKkuvxf}9=nAffr&7XI>Pu|?_ zUN4VtpSPTGIWhQKzRvf8ce7Wycb~m(0H3rUtDmw9mk&Egda1AWSCH?rZ=)ad*BGan zYrfZ?{2#URjq{w(o#Sp`pS&NtpPp~F=AFV^kMmZG9GGqar3{^3_moj8N2``kHk~as zSf;&yj+l@#6o1pIw&5_%Vr){0h?54R4~@u^%;1YH9W;a_m+N92^-b5X2>D%4)8H|0=LKtNKHy$oY)N31DH%9b4d(FRttDb(kj1{O`?-T zwXh#x-jOp#OT;Ao_WgkA)&80)K)c)#pIkdE{v^C0Z@mbNlS`DXcbfmwWN4G5A_{5hq6BnwY!3m(t%ItoL*XMlq`rmc8sc)>3NBe3?3(y6@5DP=j*Tz#-_b)opRn$e1?(Kr_ z!vzW!>pR6%s)p8l_{sZZ_ae^$g!|;MD4%B)wS&~{et(55tr9p)v58ElGWUpQ6@D+Y%>$k7zyvzc!v6`!p_gn!L)`DOS zz4-k;?q|}g$Lea$C2C7T(kZBqN2LG{r?WgK;Gri%R48K9tUY-Bu{o8Ib8QAuT@(NMgECQ zx765Y#Z^PI9z9l9%#IsoaPZWBmxg~8I#o?^^(B9f;@642z~}ig6~4yUFC&k!ZhSZW z)s#d%%Giyg#NV?k1nMWjdIV)Ne<(^LK`S$NFspuN-NsUcQc-Pr(Ai@CQ&=4?H%Mzd zpMH#y>o964u6F86bZbH!@Eyuds)xP|f&O9A<1;t<#XG`{d%Ds&J6k?ZUn?ux26{w3Fo5fckB$Rqu8^JF$aIhMd!^ z1&hJ;Yv4ue+9w7~X@vxAj|f;>cXoVL=g5RujTYloXjqsnTDI7m~;sk}L(#UTBGh>>p@@`P{*(v}!BebpfXT zcJzfC;OgeOr~Ug92KVV}g`k``V|~{A_XI9c z{V`_q1sr4>lP73PP=frPl&>W*uoJ+2&HndCTIDUnvp#+H^FnJYZ59_k0sAnHAE{L9 z2elOfbdQg*>okRKz-+^ex!WT2cn0|=DE3L-k$DDr{$1mVdHxM5NHYd}h5c&MNrcLP^d2z@QmQlOV!nE( z2~zW)eGUgSrh$HY!2Kz9!@o8Oqbhka-6l^wZo+Sq-4cA!_H7pRt}RYWO5mCM!$n=n z=$CjMt>k6&5BEp8@3fg`g7pY<-Rr1l&?ckf{EhWO6IH4yZ;;NCtSt*LBfGB72zURmQ9Utp3%$27>xn3Z(TS%fEDL zqF^JScs+H0_F=$QSv?!|wMfhX>IhSzqvR2K|GIa|;+Flk4f>32TS%%TV<$ zkJSHY5FNfx^t2a?{~6XB)LyYC;~S`~jSJxUKe+$BT(YQc^R-3OYp8s$IJxs58vajN z)Cw&W%2SiYw4N~R{v%9Kf~kdg0?4Wba4DTv&a5_bm#vWWb)HFkNUp}^%?XJ z0smG0{~ey<>b0j<74JXcN$LI%*#0BD5|=z%5Y=c|$Gdw>xfbqBgj31p-|z^KC$T}e^G*K1;PHdU?4NE<=!sJPks7Yq6OJW31imiA zQ~loprF0{t1j}TT_21y*exl7Tp?mldt+#<>>g^eWu~Cbh+RS{s^4n|nbZC>W&kg^M z9-fMB!xVe>5h#j;+%voYN@y#22-9~z12yu7|1U;J9irzbu@N`@C5QNH;XK}o2-hQU z@`sUU?8sjV{=O;yZ_V{rfkE0qnUHAfJ4m~l+(XGs)I(XzZ!Roe{@JSUG_Yn|=p|sy zgMPOn@QF56*1t}lEd44qy80c2qibo#oa#0|Sc(sCTI!|yzmY$A<2U^)#OV)7rz9y! zDNacQ{V9=E){|oT$Z=vhHbh2httF_HzQq_mZs(vp0##m-lSr{fDGQVS7qkB(t;nX) zcQmx62PrcCRgN>E;{&rm(0+h4AJ(0LY>6o9UnT!jxUJtS9{&e3pOODt&;2K3jHvN8 zmCFCk%>P{`|GLRpz&MVvzK4{)z_k7UK4AP0W@69yBme6;E8IzU`jXe$u*KLB=%R99e}7T7Sa>;ZHFtfM929AV|8?7lXgQ zR-H_DBWT^uHzbAI_ni!?Cg4#!@wReWz1U#oBuqBM^UMn#Lc9j4XgS^27yd z9&#yk{yZdG>*3ZFx(I-4{=ZOu9#e;)-uAM z(QO)}Djq-YU#*6Cq#V?JonMhX0{H-oX|^cfSxYdEWKhqH7!)}5dnnhRDwG0?)WJxo zo#^}FM-YMp#2iyEvM2TU{G5fOcJEXkzgQtRNJTT`<{@l5#N zd|r}>m`>P0fQNv?+^|b9FslJrbM5qzqw7JJr=Iv~J)p7bWuu#^mUN?b5oTtMxE@I* z{l+yJ=fZ?V?S?P=@+JGS;N%e^z{k?VyuMMRgCo>B71|4hOWQV0A6%Z)Ekf#mWZ;o_ zac|X?Y5mUa@*@2Ry&&vRj%j06_X#&uUB+F!ni{KX)n$~fRPqx zrG1pzK~e~`Ry{}-Gi&Ax9P8WNnP2FEvC?_&G(BphEJX5hlPt4#G_8R@d5!dWkUsOK zsN#H&omX_5U&r+(Ju*A6P-a9xP6`4ppgc8TarNm3z<=gyN$_VJ?qcVAy)h%6J_0e3 zi$R4|lQ}80z$2AspN4t)SEge{3pcP;TVkE{%c?OFa8hw{+vetCdrg57c~y*Vm4>lX z&`q&wKrfWQ)tvxNNbjwda+f)xbocM)(n=jfx2Zx+k}KqAERlsKT8r6=vs+g+TFZ7|E50-vbJFM{wg-$$(k*bX}_il?vFB z!~Jpq&O>zIZon(>0t#&pzZKFK%2JfZu=q+YaQwwy`^kYPqvl@OI|H6mqOGd(AOb*m zNVR;C(wjpHj<%MKZT1yMxi1Tld8z$AH?Irsvi4YEm)En%Bdc)mqf2d~xMPYt+tqLi zX|^ycppmfOhT!ML1~>2tLdD(}i7MSRdI&3L&20HXhc+zVB1!kKf;jq~ zVpO<>9x@mUYLnS`ydPWVdQ?8Ss3O*iN-iR5c4c>@kpM9D&u-{+a63W^joRqP#-Z5; zqt?G%?ImxTiMe3YFl;@Grxx4_%RkQMIY87x^O1Q>g2{-6p~#l9s@NLMe<0nfKnxmv z7PM$15;PAPfNiGHq(w{2G8xC_~U1v^PmpH0U}@(4PhBLExYmfHE= zxf;XcZDOi&UA4gd=~?y0jhz6Jqb9eyvzvB~y(&N8svpz1+(rsbfW5m_XzUzbwXrDu zw$w+(Wgot$M{Azh2{H<79guv>?o;jW+8JSeEd5zWJ ztwqDP$1!4-77EbjcMfzAuOLIJ3jYbOYzasNHJeolspcO~FX)P$g2jWeHV_xzflHHQ zF0*?u!XwI~#OfU8230LYr5d>9N^5CV{9fW5SZW%IMuBOke?LB$(sY>6LPx!(E>V=y z?HXIoKFRE)2-uj-k-f*<^3s7K0QRe1-i33xFwEpMeZff__q=|u?qkNX4A|_F1X7QS z+0f%+HwNx~mPhG%x7Vx4J0!@Eqx64D&GzP;hUC!W(7-!PIBw{uI5k(kTRT?5Sy&1o zpyxWxpS9st5AVN4;#MJ2m*EYmAS!gl&7IQc>>WnlM;yPf+n4coCBK%L?UkCcHzqQElE zkSTF_sfL&O8}4K1y3wxddr?Dx$aOT+CqW`bn$ET8R^tIFBrD$6;L%SvCoS?L1gRyX z#7H>5ff^3=Qt8!!l?ONbaY6^$Eq0u7bqZf9NRePOMSa!OTlS@Yk8aX)Wvu`1$)>HE z3x!;3q-gFiDaSO9U`|-Ywnus3gtzo?nn&_ zsii?tIBWf$sat$0mkj;W8Si!n)91k*Q{3vC(#8xN%=OBv4n@>bPRG*|#HI6*y|bAt z?Od^JOCXs8j7RWnLXBd~@L+~zIi`Mig8b=t@XlQLJc}NI4!}3=9V2s00AM~qdoi62 zDC}$eUE>m7(}RC_M0SATh5Utj?yK5c3Q*W6A}Wjo&_VU~?E$n0i<5337K-Nq1bS0W z+{Cp%oLXZueXm`D;nO2tu|7jj{f6NFSaj$cp1X$4p*EQF+#hSh_V=SAo;>LE(YzSg zC!8(->#NWgU4m8nA1D*zmpOULMRBYt2hyLcN$)==C0d+Pklf^Z)z%ir+?FCUUe@Hn zGdGWbEv2KWRvNid)E9!rs<bbh(_ywQp`^&w}>an5b!Z+fAFcQc-SglK@)2 z95oLJH_tmDWz{A6s5Z6fq+#ZleB!;VY@h3{iZMyXR@8?hPg#fKgh3U`Mx~k>6#Z*Nhi@_d^!|Qmd~$d{ zu-ouJPN7=%KIlZ?=T20xY(`<2G*3^zSSyyzIz}uA6(6y`o^RO&Z1=`2Z2J`bU57le za?gNoWPlVJ+B$wX*8Wga`6JKYB^tx^;#=7vtq+5MSr7BkVUNw#7IMW~+@)7vTos-I zNrew_ycDo5!wc z6aTYQ4Q`ieAYsY6SshI=XtV>=Y$ITZ9ixxN)4KKHa$|rlu~s+KEBwu^?f$KneC_U1s0mlC>N!&05W%*-44d9QE zji$hy5NOCyTMk`aQV%wRFO!v*=-7$zug^y1ePC9XeWY8(u@|{B84VfqyFV1YYJ%$Z z!h>rxKu3_@uYwu;%H?+V(!dy$-WM$wGLm^96gm2JIX5cjXVz};SUu2sSX~8)g}HXm z=sL7LpD^Pv9|-iIMV`D4KZCJJVZKoFq4;tSk+0Xl2@XIr^MtmYz=%}~p3B5Wc@iaL z&AjU&s0p5|Nz&l(x6ZB5XM1 zPDBnh8*7@~JTEwDiXFpav14qL4Ce7g^#yN1Qj*@PwwiDrKr)0cAFI7$qMaJtCt&akl)29i`VG&gnOus7a|EX8##bl`l!@sxf_IdYgZj<>Ff4X z?4wJKQit?4&f2}R-b}LFBHLK!K;biCgw=e~?{n>lt**6u-{jIrl1fJ5Q00IxWtr6# zmksCtbeYgdVKWEG8wB+?bu`T!DRY00POcg4%2IL5xFFdL!DZ>dNd?V2yFK9wxnyNm{` zg0h3U6V72pH>u2{q1TVLyTb2e7qUcrIt`GdIW>$|JT#We7t3v(Ic>2>4WugBb7A0j z%`oHjdnv_j@5Wu!aQMhT1&QkxDmW-fo_)qjDi5hA1vbwJ91s|0u7vx|zdT4UB;n#L z$tuN|w>H+SDN(Qi&GU*HUBDTtk)j43rwQb@*Q_(SN=6nA($eSfhn znGsc%LwS$U1(FJ<0&3F*2Q1)_?#hH=hdVUt`X1yXa*rW1711)FtDOOwZkj`P+Y<_*|!rLHw=~x2zrs%Q;5?GuH;$zq?y=D zAoV?>QV90n<#+q9R%|;-Vm8}Heid(B;&vJs&D0zer`K9jeDpk#-L?re_Tuq*MKweL z_T&a1e!%~xY94v-QL%}+;M`#vsCVCIbj&FNLb||SdSynMAS~wJwjVQOXQ5+dqHFG4 zdizBd4vAITN_gr*0sx#`U--@npA=OrhK6raz)m~{*3`wBwO!TM^oLf)mrY%Acq$XB z<<(XFV;UFvP*q}h(gYw}uePj#dV#83bXUy-rI?Wf_OyJU&4#?XEM1hFAtW4bZoOrGFiapgz<(|;C+NS=&QqEKjrgYi-rZ&TE{7^YWR|C%Ux_b!iFNMWBgpt~-x zxP;doOvnO8zkgP!o6JUVC5r&M+Ga3B_Wd~J<}(^wk#QEXt&NSn5DfWx8sq$#o~YpmC)V!-dmnfu*_GMDmbr&S528WfhrMcP}ns7nMLJcS@xJV%n#s(|(GvXa@f zxC}vTOW!{54FPR*r zvmwJ)tUxIl29xniSF4B2LM&kiU&V;)3GREi5Lt`?bB>h-UBQQD)iQF^gUyE(4@#eD zM1Fu|S|Sf(LS~~meJ8HZwU8Zu`bPQ+>*#!0_|x*2D)$`-R+y{Qfqdw_xo^8;+z!Jl zc!U=%IUHMei#PDd8t=UZ#oOtzLNvKsL5@+xt`u$9`K<<+oE|W7-MPcucZbwS)!pY( zkY@5m6YKPEh;9e>KlHV@ye!?(g>*{Xm%G$Ot>{_ULd38#y3Mg^RVGM3Cq*k=*~XCf zxqRUs;(pb+l|IN#PO!OC?%|<1vN&XRfo_F6R2{6Hh@&TyGmm32MI4r7?+y#?5a1p5 zjV8pUdvME*&;h}B%!m)`HKI;=&-j?8W@}|$NjFtsKLGM>NqzE>;+|n!^R}hf>|DXefWVRf z`-VCdE#2qQv0@eML@mC3sJ(!6Bo)g$Qn_I^e33F*Ni_oEe+i}^@q9&M1t3U zo7@_mu6V?LP{MY}RhX!Up#_+G49~Sv7DabM91tuSf*SQg1t~#BsH{D}XT=_c~P*7_Aw=j?rr{aN6A?#+S6Pn!F$4)!P(Ib!cu& zVau5pbS#J{Ewe*1LmS^riV94preh3@Fw7EkHD zN$U{ke!Z-l-R*I;B=0>T=k$}j@ffQtg|tg8jYV_WD==I&eQ&TeoaLIv=_>khjNRe! z&Wq`XYL7%B?K2PlvPVfK*&NJh!gwa6`hA^goeOsAv0+p{rx#B#EqZ2pA`%TOBGl|^ z)pqKk-*@Gd!cw8TFN{f-ZbIF4m)sr+hc*L${^rDktu-N0owVOXAnFd$pG&bSjC)y| zXbl*gZ(NS#AzlR!3*j$ZzwU3ODrFZA9zUdw@n-Cp@YXiyw%M|T@fyIm9rV+e!iD8v z72I?OycwaH+_0Tf8gJrW+)zfUpx!J7fIlbMzi6mI_zXDx^xZo{KJ8m*GoS6Bp>z8# z=2+!dBf86I%m;BzlDxN2eLLbw z9;6G?yab_pyXL~}w6}?nj49=q_aM7lL$63=+=0O6}{Xn-oHC~ zYw82qdqo7DV%+*b&G1gR`}Eqd-^D+*d~_V_9%{4kW7TSk?Wa|67r*7a1k5RXHo&d1 z*j1Y=i#O|&vYGm#5uS?EXd$V6Ws7!YgTn18-JwoLVe(H_%S-01atXmlvIu=ygS)pN z3KQ+P>yP;nLZ&qTMgaKl4 zk`M+!U|iYqs+ML5-4w2Q9}y)(yGS<&TJFLbdJ3mpNIz!W@y18E`$fVuK`0XrcJZ8}JiGxG^U@KQtt%!WK%r_9nj~;Jl zgAe3mvRkp{gT7d&b2gy26CX4p0Esx^=9df*)>|e<7tc+1p6Lu_U9sVf!o_D!5Yy_X$b{c{ad5cS?IJQ-P@PWOuo)*fwNlZRP+&Odn_as_$PivD`F!e9B zfT7n?fO0Q(WjEcOEN*n8bM5)9I}>}$uq!au$psGaIO75E(6`5Lp#?-KMz3W0~uE{*hfE6ZcP-aM)Jh^ zOhG36^Up^ulp|H)Ed^Wjrciy>dN$y6!qmjv)_8)fnNL2Bipf+?He9;M;{^Is84bPnDpDvq`BU`}d{$*W4=Zt1wsNKg0D1FiEaqDMF7O&eUWMN|Q|)ilk%!n*VaRFGK#^IKT+O-?A!Sw{m~l0mb!p(2dic05lOw5tWepi8A_ z(UX4a0UwkmG2B@y3Q$DZT&z0htw2qx8LKzS^nrY0-i%srm3)Ot~5?9mTP=k zt+E^I#B_#htg<(t$@rEcf-sWUX%5WQ^}vnaRc2d1^7^?~cJY=pDLT2X8azw8b14rb zh(9C~pY0Xs%wfLI{FdNGsEb@k%Y~;$0AqTD_apFf-tQJPWiRQ#{Y^3H*kyk6wbfxD zPeR2vhCbRzdc{#j?cS&136VF1xc>-#wUevaxd<=E3pjq;M;s=Kn8S;9WNX4RhU0)g zyT>1YCgGak)_HnI$MnyO}pjr0Rw z^^)xsvks-$iKAXk2@Fo1AWbZ6N4Q*PKF5f$?8w)VhV#Ip4>;Z-I0lu#cs=ys7kh}> zigS`%Tz%{Sh$mL0sWOC2w$)(0O`JK>zbIK6SWrrkWik=#P}QbUPX$`g+yD1tiutb3 zEgD453}}V#ZXa89|8SrJ`hhVD8;K>|K^z~D26OGgrhkz^T0&=D`Bi##eo7Mr21n>vn)(c`emP*VoHEO z$BJey3|(0aMC^{7^+WS*TJ?6mO!b|3>5BDqyE;qYorQXiiKd7U=15A1rYUKJK2=@u z>pco>80y3(P-ru?0CEU3c&;{tTC=s<6MOU5E&^E1>Z!z7eodX6SRY-=rGtTT7RD2#12Igoj#38+$hb1gsiUsn1mpvR6%?$cmtY%3tL=8*q$Ig}oR0i}uy)^>*F6 z8*g^a>Qjx_znG*pKELoU$H%+tR9+4x8!w40;ksfl<;tC4Tt<+n$(NmqRsvWl(~{Vx zF&<&JAJ2SC^fI%dp#4q|ok50x*Y5X2Yf_E7ovKqj>z+2c^yZGASVzTNEW0t`qkB0r zwukP9%1;s-xbpg;9-S^)_9>F6ZFjD6m}5g3Fw<~1A|BjjkYhU!Y~>djb2j29pelxc z70xxy@M;Bhb|@sj?MtOPF5G5Wy(ORty0@o4v9lZ*!S5NYAd-1SC0L=D*>4kCF`ngX zGB{2sP(?q0E*HLt{q`uUpXesAEZ_Y_Q&Cpu|GP&`g#^s?Bj`KwHoF*>z5!MYkmTq? z&y-l$|WnC=kvS)2sqA7&nmU`6c(O0*C*|`@CAd=`1?6TRCNu_7Dai zFe(A|CdxN??)v#1#uz=oJu~qzKq{@r-t^ev_p5#YV!xhzLa|iD4?MXO5&wFlSbie{ z__bD}9gujl{!{&)6=2CZT`H-9U+6Zf-%fs+GW=qGfxw8D=zX)cWAO{9)&>U;@rW5R zipZ)Dd^3jo+SnqM;Saf`FEsYSg5V4)XE}=4oR*}eL+qD1wUxg2)53YHH7r7HK9$Lg z<8u{L)$cz3Z;&yIIVJ5+BZzP%C9sru5HSTFfbn0tRaJ=EN{J;Ue$z{d_Ssx#8|MW5 z$QS3&!p4adPd$--G+sn6y%fFUPH4Q?jtRRlYr-qtMNEB92&>!i7-dEE`vfZj`Z49+eF>N6_h96PvLl0q>`_bRk!!W z<_hTL@f5xH`#mlJbnfFO3ENx1w(b69E%$fP4`nTrZ~$!Tfvg{R^APKIat4fRpqr5! zOMr=K^ih*c6g{ZlFbE&#GHs(~)3GQ03)j0rV;NCM(~PIfj-QHjxU{FsNTX7S=Xpn# zGdx^o^vC6q${QTK$T%e|X>R6agIX&B%Z+6LR{$9&m2IkjaB|?SjzPnq`IOK~3nl`G5e`UC z+e)$twHfI;dj6n&vDm$^a-ry=$@SI4=!JZ0|1?l|d?(se7hKXUrRb`MD~Su#f$nGL zzk|0zGsufN2}nPW)kCCp0G}eN1~c&uN;fa)D+p>dYxk>Pu4|@+$6F0Q$N@WzVRF2u zZn(3Pwg&K^?A6WBiYIH=x6_4R$_z_J5UCBUGV!@hIS~MaXlVpKS_egcJ(-d!2<(Eb z&?rwe(S^j^&c&k_BOSreauI_X{g0Zz}@O=HkdysE7|PM*$j{HXtHl_;@b6-=P!oHHFO2 z)&~F>hNnZI;)Ogo(UQf;d_4!P{lM__szs;Z(T)2G+ySb#>5`tvRbc{QSXDiOev7pq zsv!*M2-Oy;c|I+1vdjcgV2GQ`2OOkOjRVj66p5)q?8V~*`aoxuv(+ae0*@5h1>y%V z2d$9tykCl_QVlT9+1sG~#3uo(T2jG4J@<;iaZU>CsdawXuX((e5r%ES2BfhWSJalJFhMZtnx3>1E2&*$X!lhfQNuNbFGrVg3IyZVzY z&b5NVGaGcUcq_v|>sa#GWY-}*5_kB=Fg$~U2`41^I@)@d-v6yDaj9A|nZxzbaDeM^ zij)1vlZ}z=D9%=MdxzM+d21fW0RRex`46x!^Az~|Y@-aqoo(v&DCe~0LNE4_w3BcM z+5xTyi>Fj1(Gk4F%dMFXOMCTDF5uKbvn_yxOx{^#4INf5CVE1FUr7&y(LpR;Ruw-g zTRzJ?KwiSHQ~-b{u@JYF-cYb>@|Qswz4?{=*@knOD{wj%+4_RdNc4h`+0(YKg6fhQD2XZExqlP1bb+ zhKFIxbW81=u`Of@hvC(SU2th9gZA*ci*ipZE>ExXQ`=lATWCWwqFqox-?5D#J&**2 zJuv3xFT3Ybpg)dDlto7Cfat)QoNKqBOvYU&zmA z?$NHccz{p0%3F>E)>fVJvYTuQkj&(u08_w?fpT^w^xN3AebHgQqqElRa#d;jH#)#g zVlvT&ZJJz^`dz>^&gY4=w$f@VW1OJH4{ zw>`eI3P`P~z-u=(F9|b}T8ldh**f(QhQc0fX$uTL+qE#Ka|gg5?u$ow_WxSV3u0ZC zCdKSOxN5-6mUWlEJp!#*VhMOR)@C6xnzF0y=W{hS2)rhQg(rUkE73lIe2N44H1wO! zjFI7WsUr9FRC-SC3Q@Xjl+rotALyp1I+wIk=3Vh#KsyFRaTPGpc~c7rcx@&{k0?di zWFp9+q)GNl10@yy0PO)Np^7@n32Z^l!#3LaR@9qG~!$ zt+~M2Yk}cy%~UOczmfNH&=VLN$@~?S9o5X4M#l@x(+#QT;?%h=Kth|zvQfOmftJ(u zCw7bE@K9Sh?5l=D$CgIpUsCSA@9>Jh_PjrpT@m{cucMg*Tv7GW9b%&M*0r|Scz&sc zIIZL-7|8n?#jyf672!?kp2!CBX%v%GPi2ULI{-Bp&Q`Vnu!=JWf&v)(gt&hBJaKG6 zDLJIUo%;l~)`oYfUaQpf=>u+{n98r+{K zSdJLC4ZK&VHA|}cWYod+j4Msn2^S1OyuR+0)Yo}+f3D~G2kp``IezRInb=i+ag-bP z3Z9&aF*>V`Xe1ad^bq)kf%;*OHw}?>ft$rIW+o0twjru~*NjzgTs5aef94|`4OFD@ zs<3_4&NSeC<5FwKZ0P!Td(#1Xyvd3h6aGZHV%4+C~kNb(&OHqA}M zDgOO*%goBsNP~wIS_2nmYSO*X`@Zf3V^SPIfDNhj|D@(BUB0ji8=2RrmWtDZEN>igM zD()PgmkoD~UJ{~#@XwBYfPfE+>1&Dh=>B2O9@)Y;*}$12r28bw5P9Z%LO%Xg2HtJ! zPuld$!}n{K!q}hb`R}_uo`8}i2WTe-_QM^fZFsy0(qFqY>CW#6sT-@?zJ4%)m+Bfd zB(D>>fNz>#$2%jLvwVV+J>qO*QxwHR81iFCMN)SUjbC!d*VFsn#RHUl!L^fMA-fON zcj9$u=24Dh%+09SI_(ep;qiI#w4?&N0001RD!p+rzcGbtf$a-u$NroM0Wgx4VRGZM zWb5X1?S_$qaHqpu`Ng@#QL1(4397Kabb(>sz;8xiqj<^^Jehg+(IEQo5@*EZ@05V9 zEi!oHyV2DVA)o1UfmGcp#QX^dZ^$V7H-yYv!o?k3>s=bL}i&jx@i^+C5rzt?`g3RfJ zMzy)sa6B@aQ*h5>f()gD?_ZAgAm&)VDMj@D>=+$YFhJ~kD?jQ zul<7bU!0ml3^(UJY;B6hqRq$ZMI6j<0%XnIt5Z8sz=R~`&1;>#Rez;3oqjaMH`E)9 z=_Q%!IMSVel5KE4I5m0BS)D zP;}FXL_qvy7T`dsljQgq#=}34&BS;j)HS+r=yzg%0**n7c#Y$olbqX>ce`#N1FMLM zg-pz&8x*V1f!wY2DgS+ReaTAV0{OG*xbp)R2_6uR+QRX52~bvt?opnWKNVLsK5MD; z5n8g|WL8A7wFQ4}`^npguo5gq@Ue5B;WLA*nGA+{n$5X~8)=os;#m@I=9a`nCT+y1 zGh0HUT!nmPV6|g(*cn&kaTTIQM^2Rp$>P;vT)y(u9>h!>q(rJTuN7)(0Ktm(p3HR} zm_cqjx#45gkF*Q+s*@JUJa9~lJ@a_dX64V>FJ3Kuv?6X<#aL8_6i7S+{5md8QTOr; zzz9@to(*3##B}C%1fe-hel$cNidOlQ(9Hf94BKVO#WUwqS9c0l@;LxT3k!{zu8ICK zeI03-E7LJleD%%^BZXw3kCem4YwCP=%D>qP|8-pnCXmmOwN^3^GYb~RuFa=`ne9yp1Ya#I&EV% zvvBaZrpPQl{Xrw=i!#o#`Y}8&+>M3SjBA&WPQX790=Tq+7D6mBQ{d{Dn;m_`78T0D zGCkteG{lI-t#C-$Bv|pCJ`m>vDg2U>_-el~AG8C{d>THDY;G*e7U!~yheoKiElAb$d{_CFMq$a43z0Fcja^uZw_a(Hwxj^ z1T}!cZK}1z)^P#Zvz~V|zNt^Rv&S*O&6i26rU)qt0n)@oW)Hki;7q=;L3wl&PYGL? zk8vkyH~Ff=PzJGwocC6n{~(vSG$08D+Pm~8Q0s;j2+JLT0qatr6?4+eml#&v=hmms zFPI}g`@1oMHV>8j0RVvB9{Q01QI*$Mim=S!FQdHptY7al3~TWs7m_T7OB|x|cnUCX zE|-x}Kf*s$JKz{jKe-c+Bi@VFEp{wBQe)D+y~M_fl%*9-G<0lTWs;bL=Z&uqG$UOA zuc$)cv&+v5A6IL7whEYI=lg71{E*u?!m+%4@il634{-Tts;*er9o=sJ$9PuQ7T~PNB zbr4OPZRk^?2*wg70y&5hejIbBs<+kT@-00_m->I5TV-Dp4i_CQ9RecVF+#d)(v5T@ z(p@Sc;OI{2?vfnc9nvM;=!n4x=@<|HukhSg=L_6(fA_=$H92~~*jwHErf9cFx|4L} zF8ZK^yfmmt5tmil2bniVjWrUx<_EXRq@oyUnhmpqUPbcP_+b28)vE)%O+oYHNfH}1 ziYN6tSnd2DbiZT%M7s+Ub)LlIbR&;3d^0+M3tHQ5%0E4R2#$C7d`wL1GSt7_J_bqK z)J6y$f12A&J@q1C!bb;~g?PSiFqZfm1oCQ`45B!8Cu^cc^? zyn_*sS0Az5)`C8l{mK?#4*CnEWsrl4h#2&~+uD3r#JA68V%!ok8=xSz)$`;=og!6k zmtZ2`IM%esq{Uw!QZKh`_rdHR%`2@PacMhTC#(6oV>_{{oR1Bku?H0rvS~w|f5=`F zVg2e9KsoYkz}H~sX6}V+lv6v#B7_*38zk*x|D~&5-gXPQk2@c1!a3zA2km7Gxhz>IxC|aM04JL%?hz;fIXm^zv)!qbX;l*pVXPm|6AQ8WZTlN^gTEa;g)@jhoZD&O>(7$YE+66-`vpbT3_bn62L zVoGr~Z_CE642p7=I<>{HQlAE;+i_UJIVR^Jdd8V8-dHXGOneEJnxby24zLeK121jh}t_Gt+*ZpS+ zQua7fA76L9?gw$LUXE;t7Hi(h*3Z`7uoeTa+6~}~eSq%OeSuPzj%T-am=_P>pP{r- zo(u#dV4zQLntdEV0OZoAG7&Q=^G$b%UuC^URVfu0K6>ZRZ(g>};5|>+ER!&!q^N^E3#Cf#v92E;^mdBxATVk!#_tA z(XE%3?x_for}wo)1dez8at52)0Q__~ovnS^`f7HC#ql~(rR;~3-rCYjixVVIoiufu zyv0FG6 z@)CzlEDUTMG3hEDUV7lM%7^-w69a}uvW;%?yUY}+#&$!*C$hDFlF)xB@z!mHI$bsr z40j=f&qogq~$7%yJ1|~mZH5Wp^dM8pD7s{@?ImddS6Ns8-PU%)%uHT}! zWkE+`^OPdlT~!yr=bez}Y6jSF`<+uMP_S;K zmYS+Q77TyrLtI1)I(DzIvivwXgeZ1WXxNR|T@Rnb>(Br)+(jS!5Xsf&E~!W55I?Ai zhom1lm4n`h@zqYnQieL`up7Qj#1kpuO_trR@wdxS$v^g_@qHQ$^apJYnrAhvdXL!> z=~~1iAu1a=&5M!e^s46hyF*b1({29TbN=}z7IBh)kH<)+Dn^J#(7)@J*ar-UN>6+g zceTdJXle3<*n~{afiM?w0lZ3Vit1<}d#J8ckExqWK9639CcT$tZ%pI}DzJ>-K%JUE z)OZ|$b~zo&2Qjw(jl7?!os3xHN!O>>;!B zoP@p7!e`29wBk5^R+Z*vM={c>YQa_1SH*c3_Ha$uRzyG7zW{u{>>Ovrp5CT%R|*ri z5~-a;p%jFK2ow2)f9DC%`}Me?C7{J+85A01+!c#3enyn)Xyw1wx8ZK1qe!fUEtzLo z3OaWQ`0^zgh!R&pUqNcw2=EPV;>Gwy-uAd`uD-tO%H)Wos66yPk-yAhu z{rQVv)e3rqmH_-WmrdYqV=*j{54SvbDj^5EaqHOh3g5lWqYS3p7RDSfQKboNWOI?D z)Rj=d=RGTaG!dYP1Wd=WKafrCvt*-=v{gCYUB>*WWqc2Avz9)dm*|NcCFw^Ue$O|# zx6wO_dJ9QuXB9T9tkLxeKGV#R>2N&C#FdN2-1L+{7QO%<5t*Kdwa~<47Va*G2;I3S ziBXp)g)xTMS5A%|Unr591$?;BaM#?kY-c@iL=Jx)#(_>}&k!ZSLII}Yd5lS4AS~ft z?l!1vqAoC-s`%owdp1o5w~o_pkBvti8-V`H|7-jV(B^oClc zpte|!B<#99Z^3Q26$U10P~)tVNK3UHud)JCfM1dC-%hh@J6`bdHQ-4J04CS*D*^4O z;qm88rEw$e$$pYxBw9tk=+cd~()AQ|H7=2d+O4le%-RVQ9Jw&^hc2Svsjg5joBIv3 zbNGrKYXqS9et=wZdOj6YT@~&%1cT<==1uXvU2I9dQ?`EnYmJgpHoq10^+aOii=~ zu{YwUX{2-;Frf-|Ju>MCbUYx=(WX)OdzX>GPZqnOEv*>+QG+jq$pXqbbgQ4A!GoTd zKZ?Ys!`+0k>=X=ZO(a}n1!8&#=W7bvcu88lncm78!ha*i*WOBh=}?zV#sMzJCp=CH z){2{Co~ADozp-TvYQI~yXrz1s$HVZFj{@Ur-m_J?Z-vDXEWF0A^_g|-+236q!o8jb zalIPbC6OYHr$eDuAr{&_u|c~g%*dylq4%3n7#!DTn~r6Dcq*t^_X)Gz#%rlc@BAfT zJi<*PgSlK}RPqqJ?k0<^hhugm8hSRQ9(*$u#S>9kHYpU zZ-90iBbM5ddx!o!uh4mGfWfD+%7SVA^2pMiHgW;C*VlUuUwV~5n=|)jaCJcbgYRv3r-3dVAk>hyNP2AhBcrRB7Kt{hJTwrD(DG{H7Irf;= zR0S_oc$&~Un;QEj>N~~lsc2Z4^pVvXWJPH*&5{Maqw51jqU>Ij=M?sL>%(Mw^IQV z{OH+n>FTdK)-jIOxwTChn|(&OE4vk`rd7A>#G533=2aQ>r93oRG}5MenHVe|#pz%P zjQaFk=at(T_YJlzE|MVJI8d>IDbL+qH7>@_-vhdS*w(ww8}b+5S;Z10I}Ssz&p-)TF8z~X#p{_5yjq;$N^b8NZWUI=UsRcDBa#hfaj~PNb1((K!)P z=%BsO?C#gQxncZU{*=?!poykRB2#)UTt?@wxhsZA08@Nm4 zu!p2B%(+`WBw8eo`(JS+4NC`V`wF!fRdD}zF6+KO3pUox`MmQos1JK$2a1ql)1~0^ zS>WF-timheWBu;a!<3{LPTF`uuct;j=Ak7Vs!pZ*{MeSeOKimoS+qRrkV0$BS0Bmx zmz8@?**qzPI8>p|0qvo%vN38cO@IEBicuDvwm&OP`V!vZ8s41GOhjI zt8*nPrS0O$0RMNJXx<$=%Q|2Z<$4(H$pQd8mMdTY3bVwE{Uo&a9}M_^VOH8A*_wGeDMe{i#<|QvMe1oRa56Ce&huASL6Z$O{zAmMB%SZi*FCx+x6U-ZY1Ti3D zP?+1DhgCSP29g8xltU#s% zO=@I$8U_smzNtus33_1%H4ogOB=rQxka^0fF1-ZGI1epBgX3;_5-x-A>X04T)x`n9 za$la=UsQyR_pa|eVK|?1=f<>lo(K*(qDeGBXWW=4; znuubjA`S+-DwY=f&A`z2@*S8dfhzaBEI-{CqK5X-=e9;%C~!nl3zky1ozAU}HVV@0 z9pEzMJmOVpBy1@|;z;i7ho=hBP5{Awj9NL+WQ^cxjC@0cXhV;PVHBK7y6M4{JWvc* zLP4h&CeTxUcV*`+o4Zl&O{J4z<$wo*j>mp&0#CIo8D{g>hJUNa)S^kRyaw1&_&Lek zD5qoyB)WEQhPq~PCMtHxtGl?;neR)Q=W%Zf^ZfT^`|5s%XUJa#OT5Q=xs95sVI>WH zw#Zv_N0biVv~mRk8$5le0XLcxUCz1uqb>9>6o^1xO248-@fThr8aC+4Yxrys8nU$p zzyeyQU)zi?>dNo&D=ai2!~C`Z>}{$u&20PZn1e!>t0yFf%!GeDE*GNJ``L%R;&J5B zHCg(XB!05GhJNtgbWM8jbGm~jAYmj$PBE$Ho?LIbi7Th#e87Kz+=)%qc#naa`06>I z=~;&0%~x1;Y-)UR{0YK)9-*N=1WG4NrCDr*eXBFiveRhD6GUeh2E51>7|S#~$JZNp zGil;)IbY3Bk?T)(NPa;_wV`$?IhYeeAi9aas~Y4$GpmHgr6uy4ZXVBj7L4e6p(?qX zE&d)Q*#3!cC!LP3cJz)KCg+qCKhkj~+QbJ~ed_sSIM z?57FnMPjYw#=^IMSIaVdwV<%)QBrQx(g@tOCWGG4ds-xYQNY|U(zG2I0V6d~Pjyn> z5{^ukWHbu*v9~I45G6qywB{re5f&LlI2jI8EX^u(6}1Ws^48Rde+tco20P$d@vC)I zewTMBD)^RXdXBF*p6@kGEg8d=evS2s#^l;MG@LC9uTz)O;hU>0Oo*}K3%lVs{WV!P z6MX2)h-60uk!L?*SroG1#?E2h3o>_LD zxwWb<9}l<*KpabiNb&{J&r|i&q`3kF23noQ+Sz->TY|;CQdJuwF2lQwRsG3$z6u&j z;>z`pZc0Z4ts<#T+gncyGs}6PFVjM==xlP49bM11q}pzS5GxONqSx7BZvsD1WaBrH z%)Q8U7rB=A?fm*P&py~Kll><*)Gf2?pH)JLb&}5>IBYLg7@Bc&qs5%Zur#EZgo8hJ zQ&!*bpdH3+_g4eSGywqdqW}18@%;n0YW5AW#3$jRJ=Bdl^Rp<;vgNjIoo%0O+qQYOZQHhO+qP}nw(U9JefPe3F%$C_O#hM<(Vg8LnQLXP zuIf?{7ZIV;002-G7LZesW5Xx@JDwc@%mSo50EPkPv0_ORCnh4yCsZQu^@R;HvHqlC zFVP#v{!)F*8PfsVXgT&N{G5FLKL7Mop?^4*_hSDMU5|O6dD|Z3-E{Z$vHI?M-@2*! z9x3gi!>i|Q>b~}Q_HpT2@CkcD_zwGKTx$7F`T4Q)x$L>&{rL#~Vf_LA`B|^{NxAOn z7k!ic+OEra@_F_E@cDkO{RaH`sm3eo+3sog0D4_H!`trZ@QM6U{|27t9r-r;7&?DiH+7LXH8BM-fKr~?k0XA#qD77$H zemyuS&rfFS#0%9R%ZL$(St(MTMLeriLZ<6POfdOR0(c>34SJnQ@88$aY00n>`(nhQ zB(;rK!TBQMcBXuQ&yuItk%l^9!M*>C+_uTMga?8Ex2|OGQ2pF>cpChM zm5xs&JI5G#O*SzoII_Jhj3Yo4A&$CQyy!gl+ z1c$OaQI}_d(IGB9!G)-n0M*{GtvB~AqFKwte3J}vjjqg*3L_m8@a3zayFmb+j-H40 z)L26;oBDt=%`q~>CYPH68CYvlfykmw-88Ghv1F0(F9Cs82?7MPo6I1mzifPDMLA}D9HSQN z+>IVbB5G^1roy&RSoHcPX@1I`l^EL1v@_2}I3Q~;rCp}A@!%iu4jMQJc9TNBF)AL@ z#6&axSc(kGI|tk{-zWgk_Vlv@Q$^}$Fo1_za2ALIG)B%&_bxxPB8MwR-&ii=;nbtB zSt9G5sgF#WBk#@(SoN1D*{lGd&j^j=@~U~Nuo~)y_|fsx1Jl{in3@5qf7akb;lPLY zi-Yr3Z*&)2;4Bs5MUi11!OJ1UjA#t)g7fI+{prN79MI~WN{;IGLJkjcNZn~ag-QfK zdCRvuCx_)?&(D(z>1W1f3m3z^D587itbql>wR@<|L2NH+=NP`a?G9(hnep_rD1J3$ zR5tSm^N~I@t(H#**;h<)VM}f2(kMyXt&gywFG>s@yX<~B^q?lr%5OdV#JO8r~43(nZ+a zrr48Hq0l!@Oo$D)ML0&G1}Wb$oix%R)|&NPrxExw4IKrY7;|ocLnu3{f^(JQiQ!&~ zY8GOMCy+_IMU_S}s~wf@5e2O7%}X|YE6Four(wc-6bbSQtOOKmF2O+&)Hb+1tpB01 z)6YG5dCpn$D#v+2lUsnFLameac)q_*p^H%$z^s4aD=6U+aCOCSUrJ%#`*$FWw zhKFydohIp!e?Q8@_jyOY4KVlaYw78uTnSODRGX`4TnvAC5uDpSlQkYIWHvm(Z=_a! zh9b<4hNN2&3GBQVFLAJCT!+H5=sqPAOF7xU%)+GX!xG=SB>GRtEf%zWcM=Ouh23D9 zf7_iEALFt4GTP7CN@GVK(_qQJ-Tn`wsenA}31RKo`rK%k0W-lywy5sOsB39y_LuBJ z)~TsZWgPq1$f(dhw~yP^CssYp-y0t`SAR{1C$TXTo$wpwY|+%``7%@4dcQjhe^C}i zO}SHU@)oRpuoC@f6NJW}F!rXuY;D7~w?|8K;F*VpaQH)N7w+3y;dEJva|6>g?=<9( zX~>QX&akLQHp?9srqq~FP`e&%ISp4{lM+vakPpvvJpw8CEt#qmaI$m0mZ^8 zQrrUY1yo6(GS>U(`&FEvn#aE3gT?o6cm!Ym91`oX$f5w+?3BGdOub@_nHY9sL-VP> zDM)y!{S)6LkHD4~YV2bEm9TjtvVUr;Ttct#cy>!~{_qdjHc}UCaOW^mS)a6~H};}- zTucH?_{OZY+cs0J<0iV)Mt33~98U#?pk^DO5r7E-m^+?1d%aT|Xtl{)4gfW8-m9Ye z=G|JR#8P=2^@puIG&b}KZqH&m)6?$I8opzvl?8~Lnz6&-R!;=MKmAr#8#5E`(&%q5 z4zyO7d5e#xlLFwS@K_dL6SaGjJiG zIPXoqAZF%tj}`E*3?y8)3B);X=oU%ixH5?8%F+MUW&2d<7eT0?{fdP!Z_vJ;@uVm@f8g8&Oag9Ru)zkl$>dbZ=CQ@vENA?=l?)Q zZ#Av>?S&?eQu!AdmcteD`V|f?tf!Z=O`6qvrog9i&A*zR(tp(1zXjVr1RkUv z(s=%>;5LQD{&!pa|Jk)-m~?{oQfG0$9SjqV8xR_4ps+uLZ~f=DL1-Ahh;T5m-~irV zDfM57{>RYZ@_^~fEUYa5!^K1hzdG>k#N_&EY0Um6t9^dCzxYp=*0Dv}T$`8aSq)Pq zkuV|;D6gSzyhH=9j#XjZz4;&V<^vUbwQb2mak4Vh<{V!ql9|YN9;^ui2 zo_PVpB5MWw(xZj$l9M;()3a^;^ApsVB7`I{EVVjB<|Xr&!~gv$Vbxs+y+!s%!=C8) z>VGK0e-F)q)0sJP%ciRS`}+UkYGI|sAlY61XlS$h|GdJgYQ*CIlAHhgIgW#W3&a1Z zM*nl#8VCU3`=`#OmGq|}XU*rWXHDnZ`2Bz-8IW=F+LjY++ZFCuc+Xx%E%(Na&C}b9 zK7r&QOQ1=(=Y|5FG0JBbYmQ!{;x%9YL!uo9uwreuXhB+04*#yy5Y6a>bt10Jj*GEU zw!9?WW0>CgJ!dyR=H~nTjUiJ0ccWG~-2ukst?$zc1ryFsH`FvILsSr^Et}Oe^O_vj zfMCBE43Ua4i7@aD+fH|Q#x0Y}Mx*xQK_wEdYDB;j9waE*{``6fMe(?=TE4eq1oId= z%0vAM2}lr)|5J`zNEC>4YtH11wCnx+8;or70RH!YrR$zYM5^k+9X*<$D*2%w_5mkL z*3D2@yp>kfb3+M0ssNII_gzHcpC$7lhtSzupWECJddXxx6{0p}JLj`fBqOzK`YtTR z<-9{B>9u)z_bR80ZL88c&`q&^WglNjmr67Y!~2D)%6+8NvMS98$r&WmDgPWZ?+_+wYhP2v@N%VN@Da?K- zRI7&cgSYMHI>`Fgn$XI((ti-E$Sjvq`#_>B)+?NUuvVhxZI+e`A*iX=;0u^ps#L&G z!bg#otM0@u41s4Jyg^nSPJTI6cgtZt9O??-w$9^tIruDZ@VOD@oYG;bbHMKMG=~Uw z9Be|psQ&%~@zOCktGPo2%sX3*F5tS769BxCOuM5&uX5jPEJD`(><3$w=fAm)MCExI zq^3LRwXM5a2^Fl7V2l2ODDqv8R~ z-wlrU*b#tJBwF(!R=_S&>gX);NZZ5NIj&^Ac?QCga+zye<+f~LW7;@AZC~I5y+hzd z1jJ&>T{TxjwzH=kVi*ALjZ0|~--+17JJEGqz)?+1*APLe##yozV^>c#x@-0;(8f1u zYLB>PkOklavc+QnusXkTOy~|8lq^&Z)1(7Lj(NAm|6NkRKGHIg5KO3y9th-#B&3M~ z2bWAS|(jgTv3gAq0=R&)I%G=4EI8$TN)agaW;zjls}joP7PZ3kH# z3(p#~k|D%FO|TOkCZ*-;rUk456j3rcB8yDiHMtukAmkpLl4pmp-CgVTg%ypNyWseP zwK^PvBTvAY(u_xk{H|sxAj|1mlC0i?Ai*>ACempYp=`~&(f6i>nYa{`=9|WtgSKTw zZENE)0Nn;CjGYyyl#N-)(xMIe!8S%d_(9YI{l8iuu7McAb^hbSDKUG&UYKwiUd7C*zC3?An;k zJl0IbUBQ~h^8m6%@%RkLh3Wd$Pqv=mNIL_)L0!P*fRl~$5L8-14}Hfw6rb-=r`fI_(7<{N`YsY+-Kc++HFlX=X+X%HhLPSlHEVdrjR9lqLZ97|ax zu;njA6(j0_j&Bu=b({6(WW1cdF!siFm%;_UZqglgIZoC;hy;xzk2aDf9E=+$Bm2p% zh1MfOp(_iEpP*4$W>ikJ$3UVZH>-kpb0hP#>D?iAB}$HnY&(>vY^v+bDL>=t7Xb2b z&=BU}RuXExinl$G2PJFqMPTMChs3rk2-rPLm8WlOd+TeB#)^O! z9dIEQVM*3!TdVeAE-3oq4ti52_+(#LggD;Tw!Ri(!D=|?SqEr3W#;zVxdIiMLbm1A zGg>-&dD}jCA(1>9(Zycv@FJ-cEObXI)S#5=7=-GTTR-V$O%Ow_$u-%3Yul|va9@Iu zZt~2venE;kuMy!JmE&$Bz(7Uc9b9dV|J0z@<9+-3BHHACTECsdY=2ELI3A(lUpDjC zaVn6+Ov*!IPW!zpnpalp&~9@~cC05pSOu${&CUS#Q%b#$*dL;S=Q=N@my;`!or7r? z&a$T%N=sX9#m)C^k=p{r-mZev4|ttN`}u$>PUW0(fDPDxE%Qu1Gw51wU4_ z%x9q!VdO#vJH&a^HhFJMFK;aQA^jjmM zB^URo82s=Q8ZcUb{5a_5FNGU#m!ky8s@Eicqo?wXedx#s?oS$flZcDN@9waTR#c^C z+Or)zyjCInD0wF=MhjaFDX{a(zJu8+I`C<`wX3jg(gzc^NXKS*)%fJ86%&V_UtyFd zbeM%AZu=@>MYV1UVZf&h>ZTIlA33Bi_NdcpHkBT{^@jTLijHy4JLop1)u-hNZ7Ew6k&PNGUy_ zxq{x*H=mMmWCkEThL5LEzt6kSHE<+IL#}3|kXl~xu&0`9UpU+K=d!-B+1vgwiqGm5 zUXH}c0`27DegVj`F)V;w2{qRw${Q>Jnl{FR`5*Ar1rKqnlwLcyO}0pr#g1CA`Fm4C zvfeR+CzJX57%QAIlKKOT+Ilkxr@R$o*@N$|m8ZPZux4>I#)AK(PwXTz8`b!H9a^0# zoowB-bm^q}xMtj!s9{1MNC)Lw`3y)YSQV&Ce;E4G%JdD+4Dyk2<`|90wX4`V522}{ zcP-MR`4*fbNT=eW=C0>Ey4mVJR`c-Ip$AOXd;Ib*>= ze~lGgj7M-aJ1RtBGiuo;K*(_8r5efF$E$H=xT<8| z8SYdi#TPVA03=Du^KkgGs)W(2<$X+haTcC(#SpTh^9GhDC7}Eit-Oi(q49%`_;a&KKv75dbr+h>KpC&>gy{v6y423Ai zxa~8XUI*Nm6;Rgwf?u#f+ewX##j9^q2Y0e8jQ6^6Bd@Bl``waarKBgx9#gUz>Px5@@;b`P{Pf@x z@k(9x#LYyeWF5U2veA*WfJ-nwvhrr(LKV29!xf#YBB4$27L4#|tlaIM5I~SD?qg~? z#$qbN&lH#5H!c2=W6IEdAO6`RGdtN4J;jbcV%L`V((W)ev34t z1|LD>GMbbo8~`?Sh@Iw!*Qpqwl_hJb##*fqjCLn)zSnl6y6p_)!Sw3|Q2`bu6{!x9 zIUshe?4hYBMbD?&`L3@m5EHM?BS-IUA%Gh5crgR0BGuX*7wM?i^TThYxk&@T{D(xb zX-|EqS-$m>MymCRv|J7D{`K-UnD5uWpbJX-6kU3aM(KYHV|+)Dr2?6ne_0kxq)2lb zM<|@$?fATAzEvKXAXnGRAr>!ihl=^I4XOu9)_Fxe&8#mpkOT5Bm{+TffDaIQY#q9wju z8>*xYGaxDUtuTySZm{>#a`Ai}2bjma3Y@{V7;ZWW6pf;?GVt(P*~PWkjp_LWoExbX z5~#u2>hTfcIKnq09oZ>T2ibDLSLYEXp~<|4F?ozr(vIA+e?T9tU1}a@N4fDMKlwpC{T4hZ$OJjZJdKNl zGK_P%Jv?^Bbv`I*8L3##YddWS{07Knroa=2%cTd3rlbCSfbxObYeGrW#EB>QIA}4= zeD6*3`}l6bVPtZgmhUn|gwri26Z}p54!aD%WA~{F(GanRA3-Y(IpQ5Oa!v(Kw+~BV z$eA0bqFSyO{bTSuBpHAccX|G(TVJL2di>*3-Y2WMn5E1rA)#2-z*B;v$(qoYt6&%I zwH=>z{Mx&o1H;>syTEBI;v)g*nzrCfq7nOUNcW7Hv1LkG^b3`&KRta)LTVqjWQhmo za??7thqnOWYeNn9N^Z(*a0S7nLjpZ*r$%g z2=7FW@ieZ9Pp8hFk2JvbX^lDIFL*;0eFS4j;f#Wz{&Uh7dmy&U-54R;^Q+O8bA>rM zHcsm=gL0r1_gC&}AYxk$~^QrAr$qU$1GFrwIJAZp4q}+)xJBt*`J^M9LBIixXV}&a6ST4EWn72gm-ghBz5OeH_OJKt29{9YZ!DT5+ zR(l?w1dJt0BrPb_woj+27G$hH8JtSS52@ruM4rn=9R}uva&>iqoCXF}>G!StCL-oc z>;wpBY;JQ$e4D*n^9$kNV$EkNYHQToS7|8H#OPp!dqcMyO37=mF&nsHWozb+a%8J( zj~aP~;qE0zN%MrrRM*7pbT!{GCYNYO>P2pC{Q-`W>ZW;fPU93$YAhEFY5Vd1!zKm# zMHR6Z6{y|7+xo&6^WGHu9#7Dy+%=ycDSHdO!<%wKj40Ap+Hs@~S1W{0)=Qwuij?3d zBw8kG((t}&A(bm(Hi3GMTbR{TxORDrM785d6MDffk!t&tL?o{vWlo81N&gRAW(p{) z{Qet=T%Gq;sZ5km&;9P%>r3q#Pg#lfT&lGq768?3x;4X5JKuix0txyYK7L`-26k_F zg9@>%p({IB1GohQc&kgU%Lq!@o?4em8q!^Y;$m~gTs$iRL}2c~XN!^Fkp@Uj%jT4| z$sh7laBS_tZJ;bGduj2`(@!OkxvQ8;0M#dP?#UJkvQ&`sRE^e_=0^SMhp6_%eGsIi zDKK)tq6NP^bDID`2$J8;qujYfRmxN)!H4RKIDw{e;-+GThIu9KH9~I>6nEDI34K(q z2&@|?fwG{1JN~$2)5U;-IqSeU#*JwKv~6Kme~KK)z;VufP2>ejqDaHl1hIcvZ{v(VL`I2v-G6E! z1G@2QIn+}JJ$rIGU??^r;rf`_uLWutz&PSq-^RmDFu5&vEr33sIE4qO2b-w zETFT3O$zVWYD88*W|VF3sfT@>8>e@6a$$F@b_@V83UWBgI+a4Cc7k2$Nw(sM#S%LievizWyv<%K;%}UGg*ju?O=L<&p z)-WaVjqucU7vuP})H=}iD_7f)<3)q?Qj%;Ds2U(_DXSXQ9W`rU#OB$6HntBzc2wzB zq)OtVKH-}z%+KMIH~-kIw!RaD(du@TZAdTvP2C^Zf{;g-N{4}dfer&~st6D$_~&$^ zzxQ}wd+2o)GL5A2L_XeMumfd|XK)qne6j$WP^_ge>{I(TpwEE=vXrQfz_T^jV>%Sj zUMaP8Q5_)+kV)_ptA4w6-huo*e?XgFS@E69UMOa~(gh~?7on15rfThbGpvAMdHyd$ z=hi7nT%qT6WITpmyQ>3}+#lbap#o>UXe|U;w@%Pg-RWOyV)Rwa^duAF-9U4*r1&IS zO`{ue{=o60r+>oU6GauPd#>$~j5-F1d;!50G?&YH3V^Ei#7<4%JC@~rsH&D}HdD07 zI<(j%-7p=RZ*(os9y48uG)Ko;C7y*34{hym45oC+`H1D8slT;&Qx7}#PjEPJK}LSy z@4hT(EeDYb^kRidZ#3E+j9FkhLm8c2b5JVbv2?nIGO29^44JodntDK7xXtx#LwbJh z5pE|b`duCZ6d^cL3D=5xU^k%(gr{FN10U%|%yF4)5Z`!pYxp&KWa10%7470DOQ!9e zhTwdHX*kvGbjAD5r&=+N{~*6Hvg{9yWaPNeL>|efPiJ-H;Ictw{5V520BTH=+XrO* zQi%PcG7ZT6!;&(kimy)1H_ZOFje^j7Nbm~J7jjaPTXoK{lF7BQb^nCB67Azod zF)+XrHIgm`ncyq_hj7;ZYm=DMe)}ZWG1~7KcrGHs?igl5Bed`IUm-Ci>98Mr`eLq# z_lqoVcxn&%I6wBa+gZh2PoYht1GQA6nK~vt0?vaD&f63Bn6NGF#~>m@Z|c+W)p~^M z;TkttQdqrG-;XsXICkZKI8!E|iPVOZ(w3=$duRm=r((^Fn&pd%d!m>|;d2zN$hDMc zEh=euB{j}UB>j2BfkRdzXry+N6oigOOtJ$jmo;;H4`(SB)}`%4;8Zc?A-P**n+!lI zsjuTwvp|99p0&sP=8ER4Wy)Etl7JQswnD?b)nrXZWONk3+&bfTajP;ii#Z2iUXkMq zEhV}o@DecI2v{jLlN>io2`x;GR zVSZUemQuHA+JaFpJN8<>oL-S=Lu*#)>9d!ZV~=kt8c21+7k=~XKbY;|4V}Y?X3~<0 z*0@+rKeQ@yE@wSOYV&An(ZE_eoJNh08{XMT)ewsnlXwEESq{(!Pa?0vXxvFIf65_o ziQET{Aq`6R{nqmo@`7yyKd^x_CAd^R$TnITPTd>1enLV16p-s^Yk<68+h8LdpxG`) z$~%&$^vm^0dU%^jAKa$kympj7wE%NCq!w7k&3bcoi0aWDhS+MQE&DDj;EQl&b86I1 z?1X6jl!Gh+_Bk#ffqODO*H)FSm2y!~KIuu(P;)yw1VGT`TbnB6S)3*JUK#fV5}Vq)FKbfy!m=48zbh zP@hXH_+zD`v?4Vd9h}ekQ?Ymm-E;r5V!I>dKqF_06T`Vdm7xQ8VX||B)LmM>41pb9 zkpn9+n&2{JfFG0AVAJq+GYiO7hEDO9!-NPLZ6H?rURq-UpMa^={LA>8<+{N#iISGI z!Lze)_bz&_bJVJV+D9nMyrXll#r71YTnJYQm|7$@GLpwoP~|?mPk|5a!|E($Je8l1 zc6C$AQ7jS-&_@7=fcq8NJm5cIfF9ca5V#cXDb=S1EV{ScyQg-h!#@>J4rMf3dj@G< z6D!pZeB-CagaATkH!1Jh`2L5O$I6&`);T92OpHZ?wY7Y*Hs~r>oBS1h@VQS87#(`X zxD5LxJ{B;sr6T98p_KDJUn}zD^Q&lkG&p5S1OpPnQXB}YM=5jp&nuX&Oq$Y zguEiVwVdfn1*#Y%8rP_1^2 zu+iZ*45q4_OEd^TRj7oE$u(H$RLY|q5y(PaV>D2l0K*#KBwKLHY-A6bC`a{=)9Ai{ zM%5(IcaT)mzLx@W7P0UHH*tfoC=4ck`!hQq;z8@i#VV@|w#w*0{<6uV5Jd)VG5%y* zwL@z#d$bTyr2*1INPD@A(G79(8r#-9=c?r$aKD5(;t|9j^kcEt0+VfQcFqgXpg)WD z>_GT5E5m&U0Wmr87`ncw8%lcups-M4Kz3KdjIdsPv%q!d9S>c7kq6NW$R35YB5PTR zi&o1$UiZu^Nx%>!_OW@vW-<}$4?)`m_QRh)emSc?z8B3UNdb33m&J!V9Tq@~jCE-F z$2-Y8a$Oys3)6!$8h{GMshyYec7;A#Ew^-p3!^RxqK*1D`*cH^YHba*fs}kdK7E@T z=aG=@IJhDpDh}*na~Tw<(6%}{xL*WYBiLYx_gX-?Vo_4rI=)K|#mKqm>aB~4Ri6??H$O&RTi^IvBJ7^+eZ0&Usn92-2EVpc~!cZ>;B z6zGrki~KlBMOlw9rDXmfpEQeWdBb)P4qu2Lr~ZJvJAXti8OHqHlhp>x&lmuOta|z| zj!Or7aFuQI8Hm|qzbcmr#+z3w?y^?k%PGs+_)S75)s$czfI5Na% z0^bKw!i@q$DIAn8AhD$gY%!z~p!!}T!#Ed5Pz7yI=MyF#WB`(STsE==oiPl1vJ8Bw zk{app0BOX>gh)$Jx+z!IId$MOUccA1=czo83m^T(gUM1t77AA8J50+sgJ}x-0%*Uun|RsNO@v;V@2!+oW!1!h8dgr2vd{Ad>wZx1(MM}uf>#d zwq@Am3{MBg{Js}uE=_v{FJsxBJup~D4cI93Ld=9`#jQ^z{mxr7%;~hy#Z%>M9?zzZ znJ3_2b-xOBz|Z0LX9s5QU+wA%ve=7S2*1n>{TMKZ`)E|1LY}b>K`3-Eto0&!g37!) zQzB1VU%Gm`2kPShzc6rH^OqCe1lhd-?JAuW$KcVmB&oSIn!HQQ?0MRJzJ=8de8>+P z3Q#Fw8_^{PynfA^v?3pk>>v47#KyW=SeiP})(kA(n~e=)?<~)s_5>Qp3aR`~xD(rv z&S9+bXOu^}Y5r5R#gvbzl9M1aX}dNbD%2y^gcMY|-mJ}qR>b$@4f5JzIEpJMcbnG( z`C8bG>%d6sUfr|qZ&(=15A%rPSY%ojb7wNZPOAs*3H(s?6-L}y8?+a=8z z3S-9VN&j@Z!afUQp}}z@(UZ?O)iWINFH$jqvVIyrl6PfOf|Qn)XKVkCP7Fg&)x?R= zX&xT84!a(#Y8D(n7^2V|SpR!+ae-piZkl@KK&9ww;O;$3f%dp&(n7kfzK_}(7Y+_! zZs#9ZvC#DS83_64~>IVi%={ z`t1OVsqnWAs*7t2diM@I=*-H5rcR-|gX(y7}uaPrixCu{O97uOBwKCjS36xUpj zQ6xAw)N z*h;)KAi=2EolE`*M!Z5Ix;aJSgIZm}w%1|-<{8~=Xq_V>w zP|H=2?IakqFIsneCCZIB_jBP5sO66;m`irxG=rH&ILnlC zDn8Y^5F5&FRNMf|q`Eog^Z@Q3*_Su%fO+Bbitap1@mag^M z@}w~U;{oukr+P_xVZwtmSj%3F-BxZ>%S~`6Hh1l2X2fYqg2rNR)?S=q;x>Q$UVa#g zs$eO~irL{7=Q1LOGExkS2A_msk#rDC03CXL#t*0sPw z#3c?~QJo(GcB=5_Oun%MSO5zxjpc6GM*QgIb!x0ZHNwD<7_K+LSSv!l-TKdHDfUpv7zvNk{Ek!67heTkqNDJVE7yS+X%#X8_d!$R-z3@hh zfrNvRWvKK+rC0VAc;%Y+d(E0TK)wpf$PSwwyJiTZSv09#8u#L11jfB2UMg>DNL-Rd zCTJ6}TONS)42g*ylY>MD&7j~WTY`awmR@b|UVJL7Y18|tpLS`gvasU3d15sHN#rXs z>f=KytY^SAJ;0Qeyflj1^wec~Uj8|4Yo3xwqcsxw>mrEyWVnp$TV1}HoAnTENg)r! z?*h%s_&p6(aFxtWLcXvRwhuU{zmw{~mm_OOh0`OkN)D!CuuZwl8=vSlt2zm5E03G& z!`4tP>q8%IpA7`VgkAiy8K$#zmqYV-CgmMmLR1Z~ky4w;G1l65D=0Nn{K9}o5X%b9 zRhH6xno2rkzZ;{RH0jnjHD6oH5(YB98qE-I`sKyA6rEd=OHwn3}c%{eS$e^Nuk&7v7snR*fQ`Rj$JP{ z{lHzZ@=dl_AdR}Ws z8s-5i6*JftUbS5&rHi;!F=6WGwoubG38^8w$qeu-~|S({bk1 z!?Z$jh_I-y-|D5ps-c|1=Baa2BwbN7m!mLX6WioQHaiUoSdCq0Q&fyazi}t$G%3xM zO{JQidomR-->UI$UoA7&1q$);`0a5;=3Yu|bx1t)i$DYm#UK zjP)SiQOtdPZ%n=xv>H&WY&~19Zf&MrZY*WP?YFC@@71T_zFf1#iGAz0kDDxDM#E4H zcA3HG1X0R9gU;7+k2#|5jRQ85Q()D53bnvVFz^S`w)>2F$%A@Vb3q?q_IBh_shmzs z@PaXwNA}#} z)ODh_$$AiOaE4e$E(MdPg9|X#WT8g$y3Zo?`Dvs26FW}_#8wX1dTYwA&QxQ$OCnM7s$p#U&>U%*nT}A2W=hJeL*}2*lA@19?SLT zqU$foSl^w1Dr?1Dpb{?V3JZ{Z{oTK{9Di zg1$24nDFZ$6-F{v9V)TyFf&jKt;2f;Q6Rb^_|in z&}=I|1;pHm3?-r702CLv?o6?OKsbf)_T(w7Ix*?Vod_W_^!RgSEK^w@DFZA#;YDR) zmKj$Q0jz^^p>*3HgewrK-UMiLn@+@AU91G1Z7%SEl+@HP6z~KRr##11{#wR*?m?fa zy_YWOle)k8ddmdc?GbGuObvo1VPZ+_LT>%R3F%oTNLPxBU>)V_0+DT!vgf~~v56*@ zqlCCTOUZLDp!(7}l{da&0^lrNZ*J99*j3~?ru|z<4Yfp?>DRr_(5x3Pwu+4jT3R?u zmzuL;znDL(`|>Rb3{j1H8k^txNH1XhX*|sgvE2SO(U&^lmSU<&CAr4#=4pIzzCy`> z)E6|yu2zE!j9z(k&@)9AR1?qO8A?iCO{kG|ToSWs^4Q3^mDWelj3B0Uli@q%qRg6ml~!SpoAg1ovcHqy3k0bBm#~4@}`W z1`6eV4$?_R^~B@&sg>8?FlB@ZPgrJAR2zm&PSRA!G{57w&;%E!n+rWje!<%w&cgg8 zt1#D9Ty7I9L-YpT`!o3coPP&a;oXAQ3XdoJCc$0n_An^zc0D_msT=ih`w~m%QdC*g z>M;_JPP)gKgByb9@e1v|GxI0H`HonvGYb#189Xk*=d5#S!tLV=W;Lowg+ffJF)z8F=z0G{vJ+Qj+@kz|Z!O53l{hq(^o29FSlI%<=Uf=MEQK0-B znrOe)#Qyf+{ter-_ZyK;bxamL?g%l}IPj6FNEWcPa^wfXV_xZ@6N=E82XPi-0#xkm z6=tqdFvMF%j;3b+nT!*>QDWKXm0AlO8WUH{ezbSko+tY zWs>T~q?N(FO9*r|z~p81^)~~*3!Q3NRZ90B08`Fjtj{Z9%kFA8onEZug{2P@4lrFm z{-y{?{5D6Pe)3i#__(8yAuFe_zFiB%)_OFMC%+k3qow)i6=wQtDf*+RX|qa{k}`1K zx;f2TsqWyLWVa+UVrd#~u(6mzy|vf*_i8>_n^i6!p(~{x^h$pC>cGZ8P_a;uPy8@r z-w#}OeVjp(5{DRzG|qLIDHFNT746Is4||7kFYbXUaE97>P`Hj9SXoXEZ_^4y``rWdmq%k^7DPazH$4 zj~8w-`v^8N^-9CjcbJ|J>T@MqixXVsEN$3X_mq+8f#P2?kjZXR(ZBa8AQW zL4@YgFL@s+e;_j= zNCcmt>q2D6q~ER}O{I9L*EP08cUT^yQ*h~k%kO0_85-gKXs32%x`RXgU2GKZY2wg9 z(gkE^zUS9#s0xVpoveD&y4oX0yGHUp>;fB9jfgb`ny%ZnSSfL3GrzRtTZS%D3b9y? z88}DQF2ZU93*XO2`jP)|QL-HebSRC5)%j2BPZS#Apf>XJ~h z>e_wReRc2Jp$}4y*dEOszM)u*YbTk>v!rC%a5@=6B}bwVBzO7ep8~+hR*23m ziV|W+ik4isK4=xR*^=gyhWals&dLcTUw-$Ev|L^HNH&Z)ZdvRsA%S~Pl#e14(-l?1_|I&=5u_>W$TYIQ$O zz$KP|@CHI2jg5Zm(@{16(D|dinDf5C8=%i!Z>PFWAMZQq^G7p=_VRqXV4SIPd;21f zt)GpoldYo-$UQp7W;aCVV?}D*DeJsfoj`xaD))Y;`S-A&Tl{HGCY6f0k|&Nhm~HiA z=2@bT_+@MW91Sw`f{A6)Rh+>^9Vz|UaKpv_qII0}?o=)ZD5e0ZYAFSH#Sg$U+5#&N zqRTD@QmQMydGG*v%iYG96wBL9&9O6+Y0&P1Nc@5&`Xx5U8sC2-7*-xjpNZ2KsE^N% zg*v9pLDIl|3Pjl_u1gY912AhNyWoh$FzQKqrWr#JDKtkoxRD_5{SA;2V|&6tjh93+ zG40>;|tOKF~=5l{VMb3c47W*1Rr0>OAty_n zSXH@+_thCG(Z5THuzCY5*s|&w}n2VaWdBZXSSW;a|ilY@ooTBz%DWt1Lo zvsfsDMya9^HXuUtq9A!jinE%B0mtkUCDNpz78yx5Ve>;yFrj=6Ke``&tKdMM+k>-{ z4pao%GhdxG7-~cUtq|T|_!#`+!QkqAU-r3SKt;Dz69vZ;DlqMUDm-Ops73`2=}P$AYoGc zJz?^Rh!J6CA!u3-ulc_MtQS-0EDe7+_tQZSoI5C(z*7k?>SgiG9c)V<$43~5olH+_ zMFGbJqv{gV=?=8AYNtVXJtQNevK@8~jdMN-EVCw!xFmWP;Jd-p_V?PFZBM7#fJ~Z!7Zj8fASR}F-c}3EdM|*qqdB^ z6lc&k%KaIO>*`YlOaLMu;rZJxk5LA2flIwzb^l1BC~F^^0ZCL@4Af zC^Ql#UdJoaNBO4vaF<1*1MSpQhz7hyu+<_kQu^AuhG_aIZ)^IQK~$^OqQb9pWMR-O zS+YZgwI$1#texp8Q6fSVFJ6}IWb3U=J;SL+SyqhbE~tT7^2c-Hv*~L%#EG^5001bn zJIFx-nXChINhGslcX-zry2cg8*wo0nYerPVL5;-M z>Qq_sZ_^%PpRC5QQH4eo4^VOS0`jknQar`|c7@StxU$JMQR(Sc*&p}9s6l7yBKrL+ z^8hNnfX1Pe^MDhu1GO?HL5rr;4X0l)P~KvqeT|a(%Q;5o4c~@T(f{w@2Qe+OT%2UgwyOYwd?lZ7HAIlsv|MqDfRHd+`w9 z4-f8>)&j9Z#d@kwNZSeLQ_Oo zwp@?>LIU`7#vcVKTVYA5+^N`v$Tpa6^?Yc4z(Hy5Rx>sQiqv%=E`6%ogpRX!3p!D@UR!ucmil?#oz>TZVK&! z$78xA8j`e{$ChZ6q>F*oM%jc#x<=uKdYmY0T#Z^jyrV~>wgOJG&*Ke`YRZw(JAOh- zNF|o^!JOlV`xoDy^>z?&XnXqTNdj{)J$Ea08-M^%$TFIX4#c#8DIb>t6jv4lP-)5y zgxLYK4Ov(Ld{xQdI0irnYV!meu&4-1HAO|ZG{@3E|Dby*$JKA$+)m|L-uHp+$_ zj5sMCP_~(IG9KA;RmR@tM>|JY`}oG82;MS>$<>Bd9(>6aH-Vx7_hr9ROHJM_L);*q z7~bM4rR=7*!d7|fE*Y)Jwf=~F`&Kwl~QlS^*KK<** z0)w3sIYttjUx~cI8~zLk2rFdvoQ*44qCM-h&PfAR&O#TsvMNLU!zKyd#s4@r66!wq znol)u`-)9O6)4u;h08{!8}I*nyU=*LdC+-}Oql80{m?bzJ<0w`29sp;zU5$Nbr1q) zH~FaYK40VTcMU6;dJxs?S&qgf?BB}0f(q&XAw4aE4 zZwJZ~SCfE0Wy4%l|Fa6Y(F$}oi%^RvMH>;KknUA>PuM9@Tkb{CJ*77Xfrm_xU?@=` zv4DS2?8n{QRliocr#+&0dX|C6DOfI1kjoC_TTH-!1H1cELP-Plkb1hmhrEP|ba0=e zH7`xgDCFmbxyyn{44^??schjg64e7a7$Ky_?^I2t(y$7QF#S| zUbOb|JLvP)MUBdP4XRpI@O&0N08~v!ww-dw3k2LhvFVjbPznT%wIUd|$uJg#$ATid zL}D#tsjq`H-aiT{i{9@kD%P(ZI0_9&%9M8V2nd=91zkT&oGn}5ih6h`PosdOpm2S_ zektdmzv;ko$M-w9Pb#vL~RX6IgI!WevQB3RpP@nOBnyA&VLdAKwgbe;&k~p0;dSK4j6Js2P7t zA(KN7xN_*KC+d@dWNCm6ZoxCF9;~IiT={U6BlvyxTNba zX=&|dZsq(Bggtbax)O)(U0S&5aJ7!+?%vJh&#C*dEkUW0djHK&evxi{z(9#?W*BT#Y>ClPqJ-p)}5+_;JD0BbOx!qL}LJ}U%85tO_)^@ zRR{B66^OrOyC^IqMO^Hx05dnzdN>5l5QG&7HB8QeM0be|pLNZ(QVzq56 zLYM#m00000001U@lQ-3vK1~+AlO>Ucy(r!BemV{vXEqFBhsbST($~3#)O+$X)XYGIiqby0kX5j9zH>4M$R3X97Od?m zEoK}v_Z{;BycMZSd9yPIWOvbITangd8x^D_vk0@cUa8;+sqa{i}V-LdC7`C%&I}YMA5$Gh`Mndqrxz#d^sJLq3@0+_5 z_QaWdgk)Y!KauzA9alS8d2agt_{s4kt|+tHr(mtCal)7Wo(yHb#EewwEFD$uSUspOGF?_lgL<* zBb0@B!$!T&ndvGsSYeb?D_frzTaZozGzAi6mi)i^B8|vTF0Hz8wrTqJB6SYF&w4O| zE{+8*8Ja~kL8s7%lBbGXCmez$R1ljSZ8;_qdhPXX&5F}x*hW>?C_Y^n>?#8gK~+9r zeh|G)5ejxzR+S0q;uVIaLu2e_DIL2wigxIZ67w9I%3y(|5ptBDi|HKm%flu4KL?LS zB%BX8+|X#dB`Dty%g@RupCx}G{8!i!H>a6=1r9V)>28m`8L_yw%=3k(i~Hm&9x#r- z2(4A%6;yd~8-m1mJ&kLR%3DgS0?Y5aXg`=Ak5wNgEt;8Gg#)=fdgLTYz(rDQBT9Wf z1!;;oG&#x&%+NfYtv$?lp5jti3T-^z=Aqrh?W&lYWH`sL2JP1eZ~|6-|9cl%aE%We z?t_qSr7*vnANP}w<+oJn2H1JOVCtU+nCKVXfTg&&P3i1(RW3eb_gn;NSuwZ>>sI=s%^6 zkBn4U_B8x9XK?QS?mYz!|3YG#=K@kyiz=xKf_^!CE^dTy{w@{CpVrM5KH~ZTZ(l@h zsVlafeKGGVL1p?0Ol>G6yuMs;NIz|KB}m*C)z=Zo&s}icDI(Um(qJnB`bUPuB)bv)frJM{lyw4dahm7X zz%r)(Ku0c~NrTCtw7A;x#6;Z;Eqeo8C8+~K%e9QM-&@-%JQ^bG>`-fMVV9mmrG%rl zlu|79MV=80#we*widR!t)kPF0Yqofn0hk7f6S|^tZfjwM)f*zRag=>SJEr02El38X zCblN_8}BNG$~;4<=h|=g4ZUI|{)STe{NhKZ)S|q0&nS_s1hM0a zTZ6HaU*BYQ7B$rmny0w3Z~N`+SV;85mHR9pl*o@=W_R{d@atc`>lxz9m~v>FrYE}X zm#~7cJ}N?5=A=#%*4}*N?fv{-!YymmTznx8+#98K;4Y;u5}9k9aR9V(yv>Ois3}G@J&Osq649|h+?@5_{gc&mA2y4Yk6=GZ#^QC^Mn)q!7yeq^WGZx4TI`P zc~p9;l3n&T{CNlRK;~5b;b8%Ueb~kt6V8>J&=;qd(W8ax*5g@MIYwfW%}ep#dQ?vp#}41dm6apClt$9;(d~q_DRcdVgPJkxb0Kg! z-}!GtJ@0LQSX}~ZFdfEtc9HW*I61G!KJ;CJdKe_ZUy+JSsW+YcAlm`J?9qv?`V+#s zLtnqxcjok0YFD)OmqIS~wLzxIxsB51fxydJy?H4Q+BLJhQ6-N)vb#eg*S=4&p+|oX z($|si5Wb(-)NAimgKR~I5~X|8o%;-%>PkGD8XM1$8a>~;kUCGUkUh6t4Jt#jgXf8) zO#iUR3_j>oYm^-a1KNYmkgrM7V;-?6U``BtsNhP{O;;MFUTkn-0+Dk6)gXUNXF4OG zQ)3V{I}+4;O-&Y8AM0?G#eBWG;EMlS5Hf;?b zYZ6LSLcU&l)RWeP(xBnW2C5wkYlTuDgX+!hDRQ+7C;}7RjL*2mbjKdR0SHze%Kq9U zF%ut^z-oEwHf_kKQU4U!NyKx;h}#p^5Eg6z000000P6sCumAu6000000000000000 z00000000000000013kne*+flhj-qm@>MAzAf|9~KniF9I?x`2BxDUC&PBju2_*}O> zC{fDA?xSv!32ZyH>JA!@3{3`dNZBt4(o9RdJ-U!hAxSXfcR}({25t$=tG(a6pai7A zJ$F}#7}JLI7Mt?ba6h~Qr_rJMpteb*wK67JF_C1W;1l}()w}(eEj8$RvPIXdD_AU{ zv6B0j&_+0%cWjd)J59PUwHClNyS=(*Ew2M3-7_n3bbiP?Y+DpIquDVWu{J>R_O{`5 zC~Zpb>D5b7R6i)l-+@0@z$SZeXQ6YEIm@G%{@(K0ZrP(xs(e6vizsqe-$48@R~Eb zN(G2TJOxXz#m9p;h^yGVS4^g{xx0`;+*6B;lHf5BR6%9t!w8)ZJC*Ao7-o=)f~G9* zq)VCOdTdVwH|a0aFe+$za)fOZMfvXAe0S?K^9;Z&rWL(#Wu9Bl>APIRw>olHfjh+K$zRZ_UtCB z2kFbBOD1RplYkPe!B-1oz&K;s*$oSAWwNZEJAAWt1~)|QCYkpB{LAG8EXYz_W%F@00C8I3c8fPr`J4)l<1s9fY6Zqq^PdQPcHDscDR7ZfMg_rmV*+psJ3+bQ)~!rTzx}`VNl12SMsjh&F;2-Z8+S=J)fi_jlL# zb@oSU7~dF7C^2b7Nb>(Rv2>w6J?;9>^^mE6XO(`5Xi%{t%!!Tbkr&KQ1JDPY8tDid@uuuaSLCmO$_x?M$!l%7}y(e#FqWw4wAA z=U;R%3jLDX1%@@L~w5OJloq^2Y#?ZYK#TmRC`4 zPVp>!=H_}r-4WeUke2UFG-<($W5E>)`axeduYFp`0o?qOa4Ke}8)4FW0vUOdRemQPqg<8U>)SFh^EKWBkzK zisbagj2c{H7EFIT9~6ZTg$rVkc!ig4_^A3`f0GX*6hd$RLlDM0`e3FRocNz38Cb|n zh3f0*fGsjfS=jPg&~RO>H2qD`#sDs8@<4Qd>{wr-E|ul0KQEhqV(#e3hB>lyFVBs4 z5B~`_h??Q|j`l8mnBE$ZNx^rGwKpU1drX5Bt1){XAJMsUB98*xnP~>DS9L8NIq`77 zOlWBXexjw8RRKg~{medNJ>`eqI18PzpdvciF1glcv$}hpzg-&FVp;E9=AP!li%6!) z!M-S|N3q5K1H>PkQ`b?OSpwvtIow-pegHpDGLjt2rc%5j=ZeseiZ)$+4cK)PaZc^{ zN1Ok4+-Sz`H*U{grgR#mYAHXutH}5hai&5Wij46{i~dGSqo)j#W99l&!G9*Gto2(M z;_@$kzy_|UMk+e8sxWj_5&cso*X&UKpjwyQKputo*A_@2c|3`uC?oWTe|zeDmDL%_ zCjA>{)negyZAL?uF&o9B%IOh?AP4paP-K-tK^Kk@HfufxnZCo9R5+u{6B3?g5(jO# zKlYW=3Q4ipHyrXTvbhhs>Yok-0hbZ0kmhMGg+bE=F#hkp7HH#u zCBFZSyQKA(jMJap{yp#VcJMm?N?JoRJjTh@fhJUfd@OSc`_qMYkAn&KpB^=)59{boba>6yk{#)M3scs5nmQ+Lb zBIc`=>CUc~ciNhpfOLzU@O1Ci)<%)DX{npbJD2p%b&Qg29sSH+J+rlgS~k+kU`!k3Kt z7$Wr3erMm}i<8dHl7+k5$I+hV+qxB38pN}8y0e>Y)q30ORdB;fj?9hqL4c{vilcj5 z#@A{qmSfQ|#?}o(45gw6k%9!KYoX68vocFeA2_)VGR;Oa-Op({mrYez6OBnJlU)qYqu-$069@`IOnlGfTQhms^jdS_DEC%Q1mKC0Wq%Fidb)W zUX^?_$MycXn(7;Vr&sGT8feX#$XDq!UbQ`W{m6hb!Y7Z)IyLoZ$OG#a(u?RqR1jVd zGSR)9tmDG)<<(bNnY+9*ygnGq^mWwr(J50|2uh9Ej7{r$T$@hZj&JkLn27UP@J6JT(%zqB-T%FXDRseqe zp+5`!vEktx^Np~z7J@=$Ab~0&C2h1`HAPB`*{fv}HK zEt`n1T*X^wrt0!zXFj{}$$nAgqodb5M!7_3C8+*>KTnP+Znj0T#r3uEG+92GFfIL_ zbF#elXj?>cChx-sjf*~NQ`;xQz5A6lwFX$=VaH<|8&;_g`?f@Yiy*l-VJ=t7M6KYU z<$wkh#g<%B6GOaOgQbdYnl2~G$svNO){bEb{+$ej${Po9ACcJQ5%oM0F}s**lxgpq zg)*JN!)au${effOC_?4(Ed8?|)+curdSDB9u=-$@7|1(f@Z|OeGl2ow9J3`|em;gA zM@cc!mIuz5BwuvCsGMxWOQ*-p_t%$sDGNRtGUix%t}$*Rn2MoUhg8wLdy5KnonQYP zjbaWpo>Oq7=!{$iiK&50m-&cPc*pw&Ka@({J7A;D(2+&SBx&tsL+EA&#~{DCc5@$L zywb_Ah4~E$D;a;6Q?`BmSLzqMu+kr6Wo!!>k@N0d?m`AGCpv@VP)sBAUZm%+zjP^o zTdhB3r1I6qM!U%K997klihTYR$WlCA9Qv3R+gx%n+-7Af_|dlzj_uU7i^kfAS`GvU`s)wb!=M>~p9kN;mOgm&6_UI(2 znn57inu9i9E}hdqqaL>{3v%`k%o=FxPt8MO>p0$v$Xi-cl<@Fq0Tk@C2{Za2 zi&Mb!WF6-#%kD5bqsb%aYnkv_-pHo{pKO2oj1anniMfLB!wbN@IV~xhgt3gruuN<& zBAZp}%I=63=^{d7Ch3YTTV#HYI0Y@;LUbJ1kYdeo{a>92-no^WD}-$>?C$YxCG;5~ zDg&}C)N@K^#^q*WoBZR%(`O9z3JcM{*WO`FM!wO~_CP8QMNC&$f|cr~Yu| zc0jV0J^$XbwTr-aO`1Vsn-b?pDWWc|svPFnq`hxziM&Ks&Wfo>dZ&&SoxD4`@OgGO zf3oMUNfYY*YE=f_2}EM(lo}2jPjZei)*$gK1kDxSUg>7*MliKe#0&RY%d{ZT8%UhH z)DjB->x8y1-5_QpAro{B1mPk-?_IQY)5 z$H#`iJvkSXSmA9ZS-z(8bG*!}d*hmXq-7%g81lwDi#;Vm#A=#&srQ?3Q|INLh{J%m zc^XSs)r;=#j3JYdQVr#FfgRLVgT#v!^#f0{`0DffQ#X#Cafh7?e7hKK?dc|b#*R@D z_EHV>OJL*SrP5FOy7{k65SGG#6*F;2Y%X7Enlv`uxoFYm4IKQB5ALM6i`c|JjS{m> zyw};g4xuMMt|YT8a!5sP+$LLQ&ahx z%x%a6`B8P1|3jO=NM0X)Qg9*z=NU@_M65V-4$XiUbzRg}3th21yw^!HGTGq|21YCU znHF%5qsAz%2H8$85_Yv$JU%{y6ZCi7wGM*0&c}19XwP6+g%_GSqf16=!XnfcfSXq(RC2!9Hi7pLX}p-!Uc2Nrj3k39%xiAgy+% z2tGtp>9rN$Lr*5n1m}&Sz}StV83QezE;^YVij*SBJlHj8WbeIr)#FaNtt8e(62&>G z*Je3;103ONHJVkZKG5@Ub?N2M_tqRpTl0umn;P zs4@=6Pk23gvfzD~jTYCTc_x06q}_hPPoz92?(axbp?V_SxZqNDymQD4K!pgZMb-H3 zm;x$OF#Wdbd8x;DRzHKNm)mADOOxOJOp7XotOrX~^^uB=C*TxBTiV#p3~VrejXV48 z`RF6Otpck@CqAd>t+1<)usrbHN`=cfH6|8;PgM`6E3u0b1hS7~W1|m#N;ky%kR_TjpN<3kt z+mLi`6kh(&(mi?C7K#FFpmrUNjND}8GtClV5LwI2>batMLBwHEfPlwaxUlSFv1nN% zYiVQtb2kV6tjH=1dS3WZ=hI$S={FMlJ|1@b$|me$g(V1i+OZ3w+@4Y6l*v#BJDO5A z`5T;Jg%LQCMlPF=Uquv5FEOSHBiLq_jX-ntNYZs?RHw z5xJ{*QCG#`OkYsQ3~YOf^XMQQsGi_B;a_x;2dM-!+myXL_4$NjnD1$zAD&jqge7DLg+p zm|E|aJ?%3EQ7r-#Al3wa`XjV4q_KQt;e zCae^xR;(W%iA(t8`@Tmh%Hhh$!(vA795+rQ*h0UEKzx*rL&&OL5HCHdMLWpL8X|0pc-|m z-k% z=IsjzrcgYOTUS`5-TTaRc@!&P6%CxkpK22PT#)tmYlbD(Lz;=jQ?GEEels!wclSOs?@LR$c8mCFvje5F*`qNW@O0KuwMI~Hd~=rCN5Dl6U$Mly1$|{ zO!o%R(+GRiA9G~@iKI;{9@@AW-$BjNdJvkRqdL#+OBL=@r)8o=A1Tr&4Bb*pMiQP? zk;t_t;8?`TpMJWSlZB zhR^B8vJ*X)U^3hJ0A-p}-2^5WkpA^*0O zGAp3{nBD21ak5q7%go(9e#rx+&iLiUDSq9a*IC2fgf|R059SPVNiO|PQMt0e4DVN# zRJH7RU8AJNc2MG`N_6lHp@{K4+@u|gl3cAo)6r7F<~jyv*GT0$j#MUo2gz7?)xc_T zlp!;Fa6Tr_)8=MLIYbe2YI4E#P6uPp)GDmOBNDe-+YfnYDRXD-RzQspX*#~C?I#yK zu^N@jo{#pUK|p_J?o5L<6s(P3r1(=p{xohAQ>0^nxTLmchG2Z&w)rUV08Z=mxCV=w zFNfA4>U6okS8(hFL#}$?E@7u?B3IqACBXvnR5|N+tDVmoF%fB7v1OE&7-*S!gwMY> zJR4D3{TA|)jh?3T;{kV^se>=--uHd;VVwkt$8Qg{o#11!`m=_)7&ac3(ZyTqoS;ct z;!`pWpUSdBWr()$sF&Nrozjg@C&dFY*iaoBzwcV9=c zi<{Fj1DJkdef(BDIU(hElA_3v(F6PG$`_`UOIMQf-uU%FJ4*D8EB$oiB6B9BaFyK5D4rq5k8>ZNkV*dZ?HLRG?5)_C(U@pj>Oi&?E#7Ne|u9>ff#)9S*)5B+?7-FkFhwPkt)RR3D+E;sd^uD$Ff z*6zaM@yLttP#5IJ@n|%pOp!kH;b+F(76RyWab2zUQUvxd#p*=+mU-&RI{tlx-*9bMvu z=}OseZ1*}G#%g=T3j=KlDFbKS(f670VdmRoVSnpcx4`3MT08`T<%~mGiCVVPcaCQmn(rz3pYT%PnJt1fx-6I%Aq2dQ z2btPo|)WdcM{k(rE2iH+kKS>z>e zI+Lo&nf*OC&FM6;Cy??w$1QxjaotPPK*RF}!>J*R5rJO^OSnHgk6?|)t`+tCwr0VZ z&2m4FAc_!!q(i96)F0?rUwlA@50T_E%{vwVJZIIy7 ziDS@=ywEmxkOkP&7*rJSs9qkA+#~X!{PxhC$KH49Z6A8{>-Vp+rY)>?HDE{FFM~#| z!=<2KbNYNngCU$lGcRgM1As9hLGiYZKI+Ra4HviXG*xKv!?%`_*oTBFuFWoJ9%Fs`aUtBj$@ux1eAp&bjj;OkV~s_?kk z@$A9#EH6@edF%c}V)0cpawvy-2*#^0kGd{;I3s4p1Iax~Z!DU^ z&YK#$YziO~zLGQ%fZ#UgK1i1aJ$BA*f!Vrl&VM-NOeqp-K_Bmw_M-QC!gv&R(d=PM zfw2=8m6X<<8p-y}bdsRE7N};VXrLuL!^b$7A&k`Rc&Z@QOlG|@qh5BcyW%_!+uz<9 z$v?5g4BzAkRtj|35vI(~M!6&m%Z~P;L!%h7HsVhz_eoIEM`_=%=wB%WSfs z4}@y~C(C(NsWD1z5G^YxMY6uxeKZH85@an<3B-3S8P%1LL@}eIZAlY4-~j8%ib)g^g7=VhlBaGms@)OV;d0w`IXBWQjMSa zsLA2TrASSN(tvgkdU`M>C)+!P2TOllMJfL!gSea-l4uMAQ(eSfp40Flyst%DC`iyK z#`Tvq#X{zfRs;UrXDoZn(-+TtNoY@igo4M?cnHLDo{CD_;vJ7UuIPxUl;rE2ug+S{-|f(d|jPt$DC7L7n%R=wwj7muT^CGMSHZ5UY&GNgb%nXj`Z4Qy z^L8pxcE+R}&u~7<9vL!DPX@p3NHj6w6?avd^(e+jjD_v1No06;p7|=4LRz!0(;n1Q#{G8$y=kwR#>I<9e9=FyF4 zKCM_iOK%d83xtc$ooTn-!YZ>c^w1SHjA8<}UpB60-}S!}NTf@SQztoX!65gu@r};c z?LFpYA|D>6XoFM5#uK`yRtUrwt!kT^)?+P1*$?=W6~BeJ62~0V^>VjxAoea|rOF&W z3ES;+XAZU}@M`66g+VRFvm!>dvsi{Erp9AYB{0PZpOEztG+}rx2zY>a2}~`O%K1Au4%{DX~9&~Yca}F0>6IZDcoPo zO6d}kawRJ0&5nwKt6k!o)FbRG%R3YQ-3hL>I2*QiX>Eu?J3 zUF)n2-X@l`#(t3>s}SXW^b-&p51?GpTZrs^31GAnQ?j!FCKAQjVpp9+Y7_ON7)9`Y zYb^Dd!|I0ke;;F{W>9vsm#THR{kF9T1siRy)~b}w zjgcbjHg_|Dt1RgXu;R;Yf8=4lHJcnmptEGR#p({z8@}^|&yI%YfDbxk7)hSGX*rKB zDhPdgTjB>$d%L!i-*}ZdaV7K&cxe#Zr;b5wKE%%^R|CGVL5E7zHxj^FIWx8)77*j<=6n79Gg2r<)&%gajwEEELz{2=0>6UeuwhtI`dU-#dAbK*r;jw;@ zaT0&`ME<-B8X?H%AtU!avA%MD)0xiWTXF7Cd;YXQvkAkFg-6GI1h<}x_w(GXL>Cef z_~^G8__ppk5cpb`YrHYHMK3;a*YTAby=;0bkXEe#a5)ft6-9nr6Osne!rOwd`{!e| zk|>^ld8*dD$z!t-XS!~NXh^#NHm1mBLtGUT^Qob-xA{+Xow^@!2;QRY82!;{&?0&0 zfJ)Ow@}cMo&5}9zH9!sd5KZSg!`w<p{da3(VPC~6IaOS@^#$P{wJU`KWcwp z(JHd#D*dapaG=!dB@)EhwZ`Bvb!T{!=XUw@of<_Z%tmVuzgK70F3d2Rl0ADoQ$8#Z z7Tpk3ShM{Y3EV2yWmaRvu1WPdU81PBDJkreMp#Rz+x!^sMGA;30cIC|6Y}4q9puQI z`xf>nuIP5GtN=t~F#WjFS(d8_Z7UbumoV9Bioo_FF-!ekHz#QUlU=l>R?nQPy`$1RByIg=;Pu28EH3<=^X);AABlo0yEPM~dZugN zc&`Viz9PYfRy?GMK>dKH8c@u|g7x0ZKKQUXh!a4YxVF~*)kY*M%GI$`klJhB?3^8# z3abuyLM`yNFl&Nu(OBoe&R>y_ng!h66}JIeB{M#o{IC zFiScx*Hb;TGCWE93QIFEMo{=S=qrP`v}-Bq@QNKI2=d9w0@R-j#%->SV{z}o7$wOA z0gCG;Q>&7_C?Qgmk4Yh(_Olfr2%Nr=;m)hp9=*|vdj1$;^Q*{sNJU@213sc2rqT8d zj>rfyM^*|?|NP<(KgScn=8yy9Jpi2sB)jUDtYiL6V0Gtq%|VdNwO_m5j>uN=B0~t) zZ6u^9HuP`kUt&KL;UiubE=+FyeOd+dU_CO-KAL3|SK44!;34%4%9c8`)HNMaBapdA t@Iq#xF&Z{)%N+cM)&H3Fq?#@Y`F=@)CbMB$bQhZm?~Afh`TlpL{|5j!vdaJf literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessremove.webp b/static/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessremove.webp new file mode 100644 index 0000000000000000000000000000000000000000..56dc9fd080d8c0c4c212a5bab973ba12c9669a2a GIT binary patch literal 29310 zcmd@4Q+Tb*y6z9hHhXN_R*!AlwrxAKfYe2QDyS)N5?cK=p1lFi0j6F98wKIFWlxhNB_SpzR>mR> zfR8k{`_yCO>>9qXsT%hWzsl(J(|(VixUuaW*hei-d*vQ|y}{RW0CZe2eBFHR82VrE z2?}%qtN{97WjpHM_G@_#xdwfi0GF?tmk2=4NBA|*NB9T8ApSgWpHEw0-~aUm{yXja z0Wi}p{}6xG_tjI;_w@bfgAIrPEPTw|vV4Pn+kf}HZSN9%^#}?)`U3!f4f%P%xj-uZ zdoRN~;&a~>pqXHekK)t#Xs6ZR_F@d61b`DBXlwp+;fi*omw^tIS>K;PmVovwPsbD}ps!JXd)7bfa^DV^H)0jd6!X6F(=DU3 zRuhq9*ay}~(vfDE@&h9TA|11>nT;q-wb)OuBGGAxdh4jdN@aaZCEALjsSa1dYIMK1 zWk>Enx&2A)p#+Hyh6db0nEcR0x2Tv@{ty+%@anIl6wXL&dy3GqY}Rg;r#ehl&X3*3 z*NH6E)2p(E)>XDiIm3u6xhhV#o9X6Uq5zX)8zJ0s`iOjMA;0XG4uh6NGvQ5Q(bRH$ zRlmf;ONqNZkzJxnlo7Rf#_E0y36*;BT3tmr@^-5!N?;W?3v=)-7sQ$%AUd$IHnXpR zqsz5ys#@vc91}8J9iBbnzX>K#7t6PY@;8GS68_YY1&$7puV*kkkvC8K1|OEFk33UG zT`NZyfjvsr3V3JK1)GOH!Vgmby3byX4vOmA{XchVo{=EWcx^Vbe5d(M4#pf(CX(>@ z^fAl82fi+sXp=1iwh!mocu0bm@yM?3(6t!cNl8T&aP7Ex&|}}Zz*m+R$H~q=@M|+~ zjGTS&pDflQytcQ^G<|5gHU(|?!`gn*wcWPv{Qkd&Meu^T&}dPj#EBC5)-onpV=Jcv znM4p4Ay|b-W)VXFYZ&|>FtjnpwUjz(+PG%Zs!f+ViSlRo&S#o=&H;+`QR)0+%-F1i|%Y;?xi3X}uv<=#*-Ys;9*DyTZ5$^JrtFdro zu2TIdieWGVi>ski;EDc3_|J|0-d7&q(x`5cg?JUANwYTBx@_U>v6cL52KpS8B0{cw z!=s1rgO@h-@ltGJbR)0im-wgw;XFvF+g1y+6)~ZT`Mxdg_hDuqQCpP@NFLUbyE3>A zXXJQGPhM9p#_qkIQJZkcS1)RPM#S=O zVaf@57mJw)(NevZs+h#z{HFWBSw}raYKpXzn8DA+7{8YNV^u8Z*m9~P3biMeMP7%@ zST~8+l$EJ zRgiB1Q`Fr{A=tBdMi8Vryg7~&Mj6JtFqt>ZS zN44P<9aVE;3mL4Eg{TxzuL9cXyh}$#P&Kr@!b2(9e9e4D{G2H;CR>V~y@oj66z!nZ|nwL;KJ14P63Be;sP~n{>}2=~f2< z&DV#>-P%3a18*z7xwQt0}p^i4T84tc4e@yf$Rx1 zuTTsfuSHElV)&ykYIpCd4)qOeWc6=W|Aj@%Fm;D9k??6GauaDG6NWd|Vq{FEX5qda z*BdE44bZX1_z``^)3}m98|W-e)sHq4nT;qM%;`ppp#RsL*#HnkxDfF=wAPr zP(zC*?|-A=FIoWefMhKd@*36r2n81j-OY`NtYgA1HBh;R7GP}87-*?qb+94%>)uPM zUv~!PNNX3N@P#vZS087gi+g{I!+#4{YEhJ2o8?U7@nWeB)O)psu+>HiuAh410M-U3 z5cp8nX)m79RPdK@4QuxW*Di|I?r5MN+dJcbK~Fz!Z%gO%dHeYPV&H#}u_FI_E0v|4 z8P-#=A-R(<%kYW~I!}ApDMv*|5p{OZ+wL1exsS2#jx)V8Pj+uli<*L24#>=wB4>Wz z$1^tq0X<_xU`hTvzt@m74nG(>fmtZWN$Niz zcW2g^YusibN5blnj+dHLCR|-0`mWkM83oXk|KaTNhdPW5ji~d#$;)632-DXqot8^~ zBgtI6t%n#G&Xzwelis2PyJyUfBvqgiOt(L2eNj74Lq=dLP?QWY0CI)kU$~e6K2jLW za=N_yn(%tV_$_y{)*dP2`BVRgnO>u!4PUs+#S)!oMC9B4wC^*@&!IE2EYnsq-1(kW zq3=29eH{=e6#6L`J!Qs!Bm7lyVLr#A2~+=h!%dEe(F6IrfmdamA@2H1WvK;V+u3(y zQTspT;uS(@*s!~$HAv)Jh^dt!|%RExIyGXR+@N9mKY+SmM z$Tz)v2}^L%VA>k;T6y40f`c783+GCIj49j>j(1b2gzsk%eKv<{cWj&{<6)vef{bnW zKQ$u&{;8p9_qXD7>RG7>T>9%3Wa<+Qs;}BPsa5cUxbbbvP!|-Y+}_rp&-`1K~`ybUbt^+SW`h-=kVec z-&fX3Rpd@}tBV5N?pHj2a>PvYbV%>V_l@)2Ysxd_KwLr!fv$UbZQR~x{3G-K$RIWH zkvJ1mEB*qXolxNgT4ur`pQuYW8wP}J*SPc!Aw9R#>(zR*IAWVcreg+xa{IB(YOO{o&Bmf5f?5;=e7< z|1qln_4B--Z(7>6zfHr@&wpy=uQ>fTUE%Elsl8}PqsUwD3*Ivr*_rs=_U`){cARR0Gb{_QXW zLSk^){*~P01!1AW2b}4L5*Xo16{cF$8_;<1^XiC!og0Alh(LQ2^oTk29JQ+x8er5m z)?LW8UdjJ{`XHRl1*NDD@c*!$w&Ali$)(k^|9H`?IIZywPgurSt940l+FduGS#T7ffn{#ie-+)oG5C+MJ>Iyk?TN*|*Z+G* zrgDe(lnHZ(-Y=fWd&wc(eKJCS22~wA_!hRzvtzNiAIk*)kApdM+U@+8>7V70_QB34yzCviJ@Bqgy` zF$A&_>d5-}mNcndLa%c`=3Vth9LzxQkSf0+Ak6xF2teH%o*c%Kgvt>oYLOW^orBB_ zD0l;7hXh%sQ*-I{i<>py*{fYI-+vOEBq8Qb9#R%!S$A0v9ZC^QMSjHm4IMOfuKunz zg=^M+_Ea(-MuuzUHm5!?A}{_}L_K(u5$N?qwR!Ii90#gOWHk$0aYe+E_Xl(Q5BPc% zOx9jsyy1lUc=^P~nS=6%8wdS10YTU|CsT>q0UN)LEBK$R=3(^Dy|4Iq!a1U9g>%_b zb^o@syN^M4*ZBr>`q2^pyTnns8aX;t&nu5R2%!fB$}C@bSf{2!zc!@xq*;@tbQ8_o zzVM>4Dtii8Q`8t3MYVT|qP1r7zWNO`r?Np^u2h)BS2Lz!`s*4wxA!yNIPj`;xCqvU zAjSc1!3+QOhSl}msYsGR-bd&*C-SsBkQ0tEPyCnZPFCM5Sc9#h0nT5QFu0DkJY*R{ zVfH0@5VBT65E%kdwVyCrt~)G+4ITUB9MqRYK04pU8KWVKC$_k_=M7Ll`?rk0PVpaA zokx8>g0!j0maXH<4P$)jh}@kK$&o=|u=(Jf70m$!E;N*S5mZL~f>YFDy59%1zIFMg~N3im%z=osJ^wzxNTEn&SUT>)SDSQukb_x1(7=gUg&5IhLEsUZyl zl#(hmq_6dbn&a0rj-Poa2H3=k&TC!et=ATGj0SaM=Q2IFAG_pJtD;zOQMWZ3 z+UkO&l}lca*0I47Mm&(*;m8);gugKHG4pYb?AOaj8~EdnAyg<>Y*MeSx6X0mpL~68 zVgC!sS`u@kdAxmcHqHBOMyLizViID5yf{Yx-1%y^L2sZ@0gz8#f40wrlwXU@sE{z7 zKF=dvdDcrAlrY*f?8irRnGG~Iuh_MS66wt&!0TDY0Tb1DI%{4KC7LB}MGfGcIwXGJ zLjVR8DXSiXZ~d8Wx>)pe>c@KG8(cL1drVf-`cxH6lSWZwvsD&!`XM3Cx*~6B0{~PW z2qzp_7rF0Fo->#n#7mL(sMZLb^7zbdZ4j;Xg0AK{>(e29vhXV$h^|xdZF{9R-m0FG zNHC41(J;#Pj*B?AsuS5z)Oo#?7VCyd;l9{a(WE-Lqw~CMNyTI#(05}HX zYGJ`$Zq<{a3{2{8Eu}Dv=*unL|D{9Du!{UQN1Q)6d-D6OF*aBmacH2BP0lh5cOo8`W%Do>{+)ic-%w#(5#~jC}GI* zhj#w#&--rW((vRRdHoLjVUydZYP;il`_q-1Vsg{V*gC6afO<$@ZCoCeWMo_c$41R& zxc%M`KMB~rvyCqcTY~vO_ z%%MpgK!hf%+Iz9SeZ`$05qrkLuDE1CMuSjBk7AQ+`10m31shh_7R4qtV*^`sT70$+ zx4{aGS9Q&SvL`f%Z&}oH{0@Vmm0O0HoM-uIy8|@VCf23Z0%U*hk&U0b_sB(=>rT^iC??%Gn_52{3h{!HC)C ziRX8F(3p%Av~6Kf&zL5UzHIenG=A5X$fSE|RT8=7{r4c7NxKHFq-3dDO%6_e2ARAY zLn3nLZNfan6SKg{g3r63VPQ2)?M{Ky>xDvUz5OTQ1O$kMTgHpX~t_M~3*E4Wt;Tzh$kVk1%hP97cDPWU+Gf%K{bUc>`J9YK) zTbzBzEL)OlgiR>%SkUv~?NqNQ{Yu6|f$o)fU||rUn>Vl9*`ZAcg8q*x3W>V(zNG4$ zp!dc=?UvY$2t7S-875OE6t<_rVYZ8GW`>_-Ie4u_QoP_Tz^D;5$>{rGLs_}FWP&#jEm-dw?UFZ@t7D=gd(P}(X6K#y%eiXBQ zRHmOac7yE3p~4-XjoIiA>1}(mpW@9)ME8n$6=6ifrVt)VPYQwkz#M>Pz<;1XG6dA` zKxQf@pS6}Z{K(yfG6Nc^3AQN*^~m8*DvZCe{?_^I+JF!a&(84)DrADvcO;92bK|Ew za^72c>h>qz6zVi;?nky56B$)LBupbDHq@A#ZXOmr1M3*>4Qa`}GR~`qx9-6@loco; zg4Cw0q54(VJ>VcqEh$WTo;*S1{~XT}?N0m3XS9KUf3yC`aNFiji}OMSJ_oL2~-6lFEDhMho%-OBTGEO=PYZAR6m` zg7^#skydn&w5u#Tg91+=4=(1Focc2Xf&y}8ew9^|F)fEXtI2rdct?3DU=iwgjsP=4 zX)oY~Fx1I<-ff{{^2a8;h+VXsTB&|Q%`fpcPJ-SnQI(;vyXre=Rdm`AFtbY8hy2xN zEJ%|a>KB5fqS-0*K)cDbMr&L_*3$ORf>`X+zOu{}s_<4acA z+Vwi=nlwg<{NBL2&I(#16^%4V|H5t!YbmO+*4iYC z*}MkQ9L*#Z5yWh@kcjuDBmebFEN2-fAVTli2dJH^JEtb?bW`TARuf&tv74&A2wY*C z?#EKXFAD}N60EXJ(-l9MbU^p-sSuekr=P!Yt6FHD>Bzw4ug$h3F+Y;4kPYI2%w^9r z#Ou)@^hwt`nTWB9>FNdlSQm-1fORRgJRR8n&dfY|l@Zc}+}#<4#^xn%!P?0cQrtK{ zs8_EbN$2@^s6-H@!B|#MEw~!d*<$W!d4P5jR|eoD>-xJ8E=52>KojS8`hRN6VFDkB z^p*pDc@2Byo-!?5+RTr1b|?t!wNWS^3jb~lZt2?c4n`&gQw1>@71;fWOZRLa-o039 zE+tWY8m zI?>HFwz>uuVx0s=Vp{!CzZBXpkzD4wEnbsF;CUmu?cuW8L}8~`F-D-p)L^_RXQ$v9 z*O0G!xJr3`Mi=Zd)0g?#n2EO|ai1B!o%(&Y#Y<^qUGzuQcBnT5shq3%AlrwVp$6^0Wt@EuJX|&^dYHVbt%-T`@4?gn0Bb=zu%}p_{ncdvx&0uyOi@ zZ#7!@r=u@nEdI{qcUoD7P7sRB9alK{S`TPd|9LG70)I~46W@XE<|||KkGrhcxXO>0 zre{h`p4$l}x~N^N7cW6MQ*PXL#^PAmsTb+~%MN~h7++^`UG7TZ-rkS=jg%kne*mgM zAtUL<)uF2iiUgEx22!%*!<7Q|+*kbE)&oz_n?u5KpFx;+*+d!1*pgi2FWScZ=_%6d zBU|DpT*W%vK#gkGSp@aynYRNI8RS})y_r6CQL^kW=i4}s<;0y4*X|inFjb?L%{C*G zB-JbGcXF51vU%ao6A;$#E-=5#x7Jgi%(#~P8U_ab{L-(Nh}H2P5xo!iK$ft6jH(xP zW~%Y|Gvz=e%j=Btl1FuNC;BDIRrNL{a$qjeTm3;f7ZK&+-_3$WZX%^V#$ZlMrpdul zn7e%T3^(-Y{Wwxn^pXZzv9$AJB!3hh*o2hkkHnCcTKhuRWUcAm(4heGmA)w0!)t2? z$Z=%$C~M@e;$D-j(IZc6>D}mCJ4G+G*_Fln$bHOOtVqyrqI~>bX);3hA6=Ht0idlQ zYb`_IFAZuInI89Ru}6t1c$P|8SZVM%Q%F~OVF-El10BvH_~_UhjOvycK-%cwz|=sS zydk@kbU$y(X7}6wkU6gkBJqu2JIvfXEx@ssJ-|!U`>(}zmdWQ`B?D_XVpXw}%27sR zvtF#tHt$aX=}kK8KM=Ht-W{Vq#vnuGqAe@QE@5{1I&UY4Xzq!5&aD8HGRRCdn0QPE z3)8Xr7Xsc%J8sO_oCF8s6I1gClu#aaD6s=`PG$(p*MYmCJ4h_h&h^uV1V4)16FQ}T zCZ245Q@7i@AaNwh{eYCOxJ(pU(Pr8>O+FqXCxLU0S22pCgqb$H~l zHt^5SaXSQe7=j`aODjo>l%&i8l_uD_(H7Oe_Q~!B7vZbpy|D{bazdZU7}UpT2Xd8d z1ety@Nd`Pafv&)hn$rWbZ%_9HC3>c73xy?QPR>Ffht&(!{R(R)t7&Fe%oOS`$xJHg zdU_{dF+a&b0iA2W<5lbAuB1bDx1qMvK|&7ujX8uzPcFu-vZk4xi;n3TVw8MTs5XL2 z3#*T#XcqFTg%#Z0*2tE_={TUH;^o8Yu*aYc7&rX90gZTYHh?{nJ*g6or|@_Mn5O6h z^-K01^Ci_$HvlSc_2=?Qhk%I*O`zM`Ze3XcZ*re3I&|Kj(|tj+)<~~luI-<%&S~ZY zh^OjqZuEutrs(XpgJB7OGNB}0%ZZ^fnO(ZbqP&?9oi90vWkWqY?AGE<=6IEEpJr8N zDB`<(F6}yxUd}C_s!po0`GLTQq*)R046SaF+Gk_k(9RG|JO)VyU zRMhb5fhZagk5N^9)Db(xnu?150=6{rajn9j zHwWx?yierq=A3#*pB^JyL{ciDB1>{z1rjdkTx3D!18l)i7kdclF&zsq=Pt?3ZbHqx zrc2>E?}1@>TAZj`@w0Ane2iKPE%U}T>=R4SeS)^o!-#|!4{2lz$c!{}z@bUcEB(n2 zDQ36{#7RBpYfxL0+hCrb#^ zMYjmp%{C4Du~J85=_n%*ia)A9}1bbH0dP9a1OfuON=D+;xM=?=22`kYp>MnNo@5|8Mdek@Fr0}g7D z$MiagR&pKq1WK5DyRV5~FHWW$vNw|{^0hTBLVg&${Q}1XaPzy(jr;)R#bL%dE16J_BbQTowM8W<_68tQ`DpXqFkd>Y(E!UQBEB)Q|94dKNyx z1YD;d2*L*H)G`iO7Z9B@`Tn?T3|@Wx1;}r-pOi##F0+A5rO9P%m5#oc$~(<3F;ubV* zA1Fc}5Ai(YJa_aIPReE6z1*NC(o^Y80%TNI_YanVXc!eRLkqs^stD4PiS#tC(Q|^X zx)QM8DRT^rJ%rM7q`Ctr#=ST@I<9(l~ zr~Z-sHU`oBu=KbDdc^v+0+>j1RzRqvKr@6pTcuW6{)PgUvSeo(jg2kd&xWsz>)bj` zvTxWA1Bdhu2?*zB;2Js!(HN7B>mc{-vK|NxyU)b78Beeux{pWHttc!#*beKMaju0%>n3;}mi zCyq6A75*29wm#q>cdMM?6|+rHpz&@-d#*qLetpY)1P5o%>I`ADk_@{VC%daYHgpCJ z|K50vP~UsxSrCN~?odRpY9SeQLL;INQMNtGDIGHMTor6}p zq?_RUYacgEqV4>22tIlgP3F>H8MuU}jLp(eS?bCD+vKXET))m>XFNWJ+8e}f*ql8W zGAL{nwWqs!e79&TPybyxKl~C%FgsEh&$gwZ(0>v#g1DB{wML`7#P|jm=a^`y`?)nd z8Tg3wBV!J@&SOt(CezI5i22+Deaqo~4!LjoHuRJoZZ|&^`%_y9GuX5{3hHs3H@sYY zJk=t{RKpW^f^xAG^nk7WJ2iMj!3cVYrT1A3)rietZrWC}i!{~snvgUkx`@^trG6%j z#uYELI9M|-kVfHJw0)USPMzcV~ zj~iNRZ<##BE^{Qta(oUVnme2w=3}t`?YG1ghCD zhGGF0_jfZos#B8wMZ(>bTwKvoDY9ARh4mc^NWXU`l2FJe%Z59ms?~uV`9ijxBRnb8 zYG?yE!B0_Txcgsav%<-m+`H?7&Hl?1u#%;4D>KsOU02AK@&xfyb-5_D1ymOnyA<oVGw1=y0 zI^Wx;wMg~eO%=I*lxMpw<}^B~Dt#%SX-K{L?aaS0P3+#ISw#y za8uh~+MA)p=l3!4qFhP9;B&aJgxdO6`J&Y(hC9CvNh&D#piV^@&ny(q#>-Hm+JAp{ zVKpVphOM95c;)Dar>Jp&bK+5oeM6uJG8Xz1)X^7Gz<9a6H;l>W&az!4nTZdTvRL6O zfFUTAPOSyv`X2rD5{Hf>QtJ*3>{}HHx{afsYSI;J1}K`xF*(N{V2}>Js`%6_g&fFi zy_jFJookuDr0RCGa0d1u~AOdfa&ThM6qtt%z z?=$jU>=KzCc;RZejp_5OD99Z@H?fLbRw85EP_yL@#4AkyC~(`cG+QwIY&0u=b)H`l zke&(((@apZT*CPR!}=Bk*_eszQR6or7;^vXPZ{3GLu5xl$c*mPFf(g|rInKN=YWx6 z@}`D^HFgdCo5NP{{V|(ju)X>_mqy{uSPxg`@Um$<& z`~Z^L59N|7W$#|i?~ig{>ji(itSyjZ@xA%%$;Sa)qrvX4mbQBhe3f*C0>9?n4m|T0 z4au{fsO9k7y?Q!>j2mur$FNg?s~}_;P{|%oK)Pu0o@#h3vU=r# z0N(4LI%V~Hs_215kqdNda0%Sat<2t@eZ5-aMcdn=PooxuQ57aVoTh_=_ij^s4=F_S zZmNP&OO+nbtb2BvMHrdBU>49QPX{24j~*&!?#IJ?t|=v?n(Z&W$0@Oua_F}|dh}!| z%`)z7VL%Ovy!Wa^edy}OKItJ16;HFJcq!r&77YP0Sb$oPMOOJXG+;EUGq!U+k%?UK zImj+>9!J>wT$Y?G0FLfV5eee^`U&cz%5x*FqbRP|bHBbm_lf`Dn#}c}vt&49 zW<=#C5^YvmtbKLmlNT0=i`DTQo2_na+LQX9+E!=*sevO?QQ1DKw$~VMa+-)rxO3Y3 zmeTq0&cQHdkRqWj+tM%i!^t^7M?w5OU+;+BajNj6t%8DxPoCW_Iw66%?YfZ%GUyEq z^~j`xLIKx1FWDC}T{@@tGyI4~;VI;&rvuhoRby5=Xg!-#kXs#OUKO+-B=P!m_u$HTycLr{YY zT*^SCecc2!F*zuxgoB&Txm*o|m!))5T2)eGfu<)8s$2D+*X?JwWis+Rtdx~;8RvqS zs$Ncs_=uD8?Yz^iccs~D$yFm57&Q^y7AuDF?4!_LS#qIzfDhuA?BqJ3}Y25cQSTDX~dv6o|C z@c9%Gb$=(vZ=Zzwldn%Mud!C9R!B{nhYz`X+M27;QU|s7Y}?d{NJYKK6m9Ilbhr1h zeW{J!W;Z#^bZ7s3n4-vbkI+{*lVtgL%ggFOUZO=8o(%I7`OQ*(c(^wcnY&sZqS2C? zglZMHd#WzGVzC%Nnw2^q3)$nSkt{2vd0aOn>l#ZX z`kYyBJm|I>of#Nhu_z~(L)t%==D_2R9=W{X6hv@GHN|{tOrzaIqMo%Jc4seoH0uVn z_2J%wrUdOS2|ZkS{V60ouP2A^9b}ezd?=wv0lg4HlP+sbzJ)PiQUb25-^BPuS`NHR)y23$ay zgCy9gOQxdO$=51@*x}SM1jtCMIQ;VBwi3PQ*~1~>SSZ^MyFvQKTC1&U@|?61TPQuO z3r)$(Hjc|Gx09M%|*OFXR~G3X~G>C;wI`muZf=TZmjp*A$Noe6bWKc@Cfk~~4U z9N_Yp6sGTK1v?I)rHW0EZIrnOXpg4?iJsShLVL$G9<63hJyC4#GaYIZTYNb~Qo9Hi zV1-uaDBMqqZyX5Yt*Z!h;=Ge+tjhbXOQLi(Y*1MD;odMXRJMA)MQjz5}S4{gj=>RmSn68_HaaX zWU8OS>#^H%kY!Ud|B3ck%=dKZo#Lr`$@2DfOZ@SZ*Wg)IHy3i18H5tS-G*KpMKRm& z9LVcUX%yaeW}nxDn>C<6Cd$eXB^Tye8%`x z1*H4@iJ2%R@uF=|E6ycbnyVM_83ZGq!oh6Ap?5dy{FZYHkvVO&AQ!Dn3-eG{6(MHE zmYhbE1jGQzw>&840U(m1**nDm0<8+FKjVC!w>D1ryC-=WzQnHrM!Ky;W|3P9yFD#Nq8q?E%2s^>Gw}>H9VTL+}|7l z==@F}>C0#fg2+CgDrtYdtx9*NE|jn#+um1?43V-tmL@?NSvxIoReqG19i$WY=fpl{v#rM7 zgjX&IDw=2-8_tlC!A5^;lSBTY75JIr8}4;t#ZZ8AVSr{GtRd z5L%q$2Rve-JR!U|lIDE5tzPXX?KZ-Af^~vD6q|v^0**rj$;x3ZWm5;So_2I507h=v z*9xv}0EihsqLJhBCkz#g7-RLj?yL1Mz0oY{dLoaqH$=_|3JwxW)n*cc~z1 zyx^OUszFTo_B}Ib;>1IzWl6+kDCzi!kqWB^g&(?+F<0ibm)B}QnTXfK^tLcbNMyuT z>ANkui4(7Uyh`V!;7*$c^a6bLyC|O#8JMXtl2jnnmC^dC`Vbgfu7opv0m*o;2uJBj zf4xvL#J`g!hH`oBh6o;%Vvw7PX_&Y-WxQnzNfgm|C-+BEH!k{s-|7+}irFWtTiu;z zwS;W2C;|-U68d@HGZh--DAitu15R%V*r#o{xFpvon>Cbq#D#{}zuh@nJlz9Ky?K!u zVJINzp+-|%fvv~KGWKjblq=!>_qWWo6wFb0oQg#TZp@1!X>}m05wa$07uhI_ggT$} zb7qPV*z6;o9*OiLOTjP2DsGd9oSDbnb}_H)Sof;z>TiC3*GXN2i!S{3df`(Lj!*HU z6V4te$(bY|sYl4b54kwY6C29$?RYc5`>tUIrv0Qce+FFh-6yHyja%@JDw8Rx5%8yn zbWG|%VY_d#R}Xn2xA4kdC&x$JgTzXwmx)(aKa!K&+lhRgx+Ms8fFKe=Ptp1v9oQm7 z1JQQC=?x}OLP-PzhA=!a3#T|ocU%5i zghC3963eG^ql{M@iJ1EMy*?A|W8VItOufLZzAwlraoOxo0?+mdUw4o_PrSxWW+m{$ zaL2(Oc^hJ4qpvqx6UfT%{#Qu;l-+vlb~BzdD0AtJKjtKZ_rT`?l(HAmphno%Tuwb5 z9s`tL_n48f2S+n#uz^|T@yZyt8>C+AMdq}a`%!Q!VkcA43Ky*o#0QUvT6<1cdMq+r zi#Opw`OcpHbDq@h^E^1{s%MpzbXoQ%(sFfOK$ybNL>6m+v;*{)=(sq2)8`}2!_~~Z z4-O*)ea2|QA77qd0tO4z%FlGtim7dCeTn$v`-kmZaj41WhnCF@dhHZ7wxOH$PLcWN zF4&?9#}Sh|;~C^lg-#JEos@S84W=7DuS-DVoEADm!r!`S*bJZAdx-?|N!6ha&98gi zQ6DQKac|^fU*CG9&Ydv+5XG14yJVZRr-&CF0%d3(LlzIP?&i}AM;2p@qTrwfs107W zhPvn@&!|8uinG=-DTqObFEw1rZ-n%E-}@$l>7#20WP7B1N)F62SSe-PDBwVqQ}@y~ z8QJ!AA#XhT_sNn1FNxb9A3?9XRU&wkRZb^J(Zv$l6a!H;5GBD2Z&S%TWZ9FS zC_+uIRh)gl%H;aF3}))yUgIbUc0Y8gzI8Jd^N2yORQcax1t9ycX7=}r6*bvjC(n`- zMm@TdrBdQ}X(70X(~bx`a=ULx>pskm8|+)S0!64lyT~?pM6mnm0)bHSrYl7vWLugq z94ytRV(FYRSP(q|gnq*Rxx$hHfypIQ5rC98P@x!MA6^)NU+RShJhPX>9`(|Zkw7c? z+k@Dthr))`%reD-@0U7^kKCm(I*kZ4JdaGDoR8X1AwHp`AAW8%)LT>GZu<5tI{!Ie zsXRFMEh}+-xON`Tf~n+iiHA-XM1ydv?$eA4xzoB^+XqS5@l>Z}6vUReZIhh{o{Fw} zyU$;F8pjJO(=In03J2DRW_F@H7|R=ye>WLj4x2txUo}W%F{o#5??(POY!Pa>N;|)1H`lHYQbx4W>Bb%DJ}O=Sew<$g_Oq9()j|Kg>f3gpwE3?a<5#h3`k0VxSuf2N^*czb$j z(DKO6F&1nhC)v`Z->!lQ!9{*PRtO73;^CLH)x!;|y;*gzeMXnNUS&*6d1$|x*$a;w z|m$Rta`uBw-u4e!Ca<7*mnwvDR zYNWD5dcyf!^m8){ogk!mnQ$t6ozCp%ZiK4(&6}Kg6b|_X6B$_z7DR~|i=!Tl!)!b< zoABZR&TK#&pCZHfdP>@-O`fgI%_lyAv^760>exq=3S@+dkP0tl1S zWUvjijE48@!ztr`;*0I%Eg}hrM5dB;>DIZZ@7Z&OB7gtMgH8E#Oc!tTy~EvEn=3RM zn+7#llQKkjGRWiZDI`YJsX2eGpd4^y0P=@mJkCWv%iU8NDly5wWt`}~qw=gC*=k0? zy_4E{Vqao)lH??}HG}g6>=*nxiU9)Z0NnTz2BuyA0S-S3o^}LBtWi)FwjJuzT`MXH zomrajZ&@6Y)WodJ)djCd9=@R3LidqId|~JPhNhlsB>owBOZbvLot)FX!vxsaEpaSj z%!lnc?{W1^!A3#bW`&ql;b5^QYOC?lRxmzXHHX3tRW1o7F`FR+kS&BDA4U%wR8Miu zlsllL=}HV)_*6-1Xd43qP*h;wFe8}XHj;43U$v5mDSczqT57Z9U6oVLeE#L**HcKn zilm$r;`7DiiHg*X{CA!g-^JI(PiQ)Td>E0rD*ZJ%#*Uw{jIcs5o_;9+Bm1)yI)~hP z8*nD?i*-ki#U)j(n>4$+eNP3aYCjZA3@hvR;QOosGtMww4`ZC~1&`T)KCS;+v(Ad?UiKgVNJ%J(g z#H0VP;~zHHI7|H@iq=DCHDknBz~cTZ7HdO;rf-kbar^csE8~4I(#_dm+0m`cU{S6# z`UB2O>ZE4)z}Q+$CHpVr1@k)H!6c|;61^xt$+I#^Sb-dG_!)K+(?<@3cg46TYyrY` zUEngtr5aDVD-^Zc+pjGW(|EnYx`gc!gvLpq$|2Kn&uP_dY{%At%wa=xHGi+Mfea(- zWQrQ#pf1Y^lp*fvd;bAXX^ij%4!M}ctkpRZ+N|?2&dlmOFNruz<-P=|g5N=eOqg*l zBUD9g_7D$!b4y+z9Kmjy8SYNDhK?ecjZEF*+ADe2ot--F+m+kYVtdvM^r0ZSsEQ69Ef?S&m_*Jyz zyD2U{2#DHcv+k6gt={kF zxY?QkJRz4=Q=aZZ-#?qgpYGtJ;O4*6U*t=0CqX6(P*!`oOg}h9RT|_=40wonKx>&z z4fa24fmtDm-k1r8>gQ^-d4{K!@$8-?A4>||)_Co!A6w1aaY?^2t0a?nF=dT> z^K>OH7>|p8MV2Izsb{Rozi;Q*Z~~E?KzW76sTzG;ruMG$5UcYRxh~Cc;Y5(!wsqox z`J2PxVu^=QW3hI4n0W!%#0E{M>wL%DIbGR7p}bMGYAF1re7(Z&ZaM_#VJ@L(l)6XD zjD^Xq7+oS+z^$W1&C#r`e(Q)kUt=T|=3j_v(LY=0@NWNlX$UFMUTTfm!l1xk#xivp zmB6n4ww_?aI=^l>FVfOIWjWH6d4*1Xx~m~XH_(ga*4S6y;wAEuWY!%rf*Zc`;5sj95;tT44;xqdg zAStP7Q&O6$-%-!-UGl?Am^2Vh`byPntYCb=IH}Y)#>b;#u*-Qm{v49~!@Gkf&HNQ9_t>7tscwy zHL4dljGW8kp)b>OcPoDaT{+(AD+$ZX&Cc6exNRzOaNd9?cEc*!OHCi8bu~8@J*UZC zDL~#={=J)}mie_U^Dfq+aVP)Ga+;qZw1d>tpDfB4a_aq-_x)x1OWsbQSbd3{c#OD^ z$dyRb_}ewir{38g%_7f3)gZC(rkAIF2(kQ_lu4D>y8_`87yD+zH}_n}~&x(jZ3 zuI$K{hQhhn3hjQcq0D06iU1EW<+k#c-|=4Xx)PXpdAlu970dH23XgX*-!t+x$zm>p z(s^zQU-0z=ZgYPFj@#mR};3>-Hff zDSgb>%^Lgl<}F`TXhDyIdq(0bw_LaldDS3@&EV;-elb=Bktweckm3>a+;#k$@Q&N7 zq0(v}x0FdOr3y_jF4($6rj^Z;)WlQ|QjpTBH51sDp5O36R?HA+jV;Z_nt3FrT>(Pg z?T)1vBGxWziD%*}hg>;tCRUBk;ew0UOBLFf-WZ3@5r$~v}kwp z=vh7gEGI(Wp zDjdjxe`~U+ogwZMY&Dj~Q99cH;6Jt}s*y!?pL^>z$~c*zs*TA-{0nbOyl|UFak%a^ zuj@tvswR)#Kz&b2`~Bvmn4?FEVQ`m`&}*0sGL8P=lSfrH|_`+AkMf+g5u{sk+(uaCI3=D|x9;wLqxO z>W*P9#v9R`E`}h$v3cCMt9o9|pfDsWu|SphxLJw&6WWuTDs|)qh_p|5x%%8>865jIUW+t16nUrnGzq#gVc9F?M2~Y8U;YhDDoVEN>k5t zCD#9Td*;p99+V;b0fCDxUHC0YR>9!bpzvqAI6sreBaTeZY-K!9b5-Esdsfo;9IwAs ziE+m)h}Xsx235?-T=BpI<)nnUs%q#tbqK{{EGVSk%deh2>c%zTzPR)~)Zcqy z>r3Us<~(o_CUTqCTVuU$f57=u2w}0S9c(gWDuE?4R;&{3e{W2ul9hGwM2idg31Jf8=?B$)hBT}HR|#O>^LeU@Z&T94QdGEp zrs_D5i$nl}RfRbxmhOAY2A%x2&fnYL3lW)}Az8%j)x5>i1?4r=Y%Avfrm3fP8zyeYjoUXT5R1q;wu5=yG8%#q@Q49!CUAZjx`<{t!mC z&*Qd`_zvC3ez-*^!bYt9qbGQqo}!Yswt)VeLU1()i7QatMjevlPKJ|7%VAx0OOa1^ zE~lE98AkJ^*r0njdgP1b!=vxLG1rgMM}_995g47|!mrH`4DEsCI^HXd z)njYC1te$vdHZvmh_Yk^#djc$QkmWlUH%w$ReNxSf(0S#KqXySltz?pYDs%AFic@$ z%CAILTuWSWy;NI#&(oIz=W8UA+rhJAR%3ES_f{gIE6vkXy|tS?NF23q2N%Jn;L zt0f5Q5mg>RFWc&36mxDT>0P~Qjt8+w7y=Yj&bgR2iT)&Wo0@(9uknx5-;5N(804$< zxD#AEqV(?rC`MemHMWleLm5VFNPM`gtOo8oajC;EV&n1FI>zz=%gvbF7nlwP@d+1X zoD{^DZnoHt3&5Gx@Gct6I&;kCQ0vka2L;)hCjEXotl&0<@o-V*vzvbT5VS~#p%LRh zI&(Xwo87Ex&wZQ9k;oC8#QE8ezuE81kU-|aK1vWgJ^?r!X%y|i?>%)w?Y@V?rQN^< zTc6&R?-S@ga?FZ347WQ(DvPn7g@|Oq?;XJ7XT^f#n-YRc_Bi8KLdMpNQdmoaHENaessaTiXf<-z1 z6DP8E)4SyA%a%!OrqhS!rNBKi8Sn3T%KwyXr5H)Q@3F;*49YwWiO)yN7h90iw<3<$CXN6`@MY3iY(#?l-Z_>5>_(gYMXK1^J@SG&}0;ZC?b8^J)$W$xtV0NO1nQQf6Q&!lL;(z3o0#f^Pz^Rr( zfx&gZi;JPo)$A*m?GrK!IJd(L@k&gHEw!*!L-?Lk@R0SyZCJqET5|I%g6D&czq-*A zCfmPI(J=@s{VcP$KICrDbaXip+$sa z5Dd|PA!Zwb6y^8S5wCTqR(sV(411INK;%+T8Or z{Nk6pO!TVjTN_Bu`kEOCP@>f*YrG0;%1;%_(+t2==j)YG}1n_CzpeeEHWV3aiXdl|!HSI8~& z&(S;MdfYw!uw^wxWe4)62mfjbm#;GS)I7{jA`}r3v84aUxC;P43A#DtTTbZB7G?he zwCHZ!GAQQ_`*!%zNE*w(IZ49`c8`$8^lJR39RGZ5%z)1AC;T;`ieKE=^Zz|loVX+$>E_vnoyU;SDw%~O1L2S zLiE!!@?osy*#Q?q^(Y$dki)+(_vKgluK>A5K`!%%Sz3u4)mAGC7jFWH3DrARt^_m} zpf}=9Jo2A%cg8Dfj5B?7 z8p>v^=u=Y&{Yp|8%A z?OD3Rpi?>??dAB~9p==&O>#GsTuEY^j_MT z2$uw_59S^esad5Bm@W^ztM79VrDL8Zk2|(!%cWwV;_{t@jf@W?esg5Bwa^*4{fnix zjmjj=vK~ofOl4wLaAbB#md1dLZmp6QvK{V9BDGlG4-~RXf7zqeY!&o6q>^O1uBvQL z1Kqho5VE4$)D~OSm##weKo5D+=@nMc)79g`7e2=6R5=Av>vE2CS?l9QK4H5vfis3f zZ$&GPiZ~?HBEdP0VY;Mn^ot^JGmf6Jc5)=uV~0oMr|5tJ&8(ip2PJbIKbiEnqKBMZ zD3YwIH*3Pzg`ty?*Kd9tfHpb*kvdWCLo}WD-~0B580Pu|5tP=Ev+Qgl!n0@N6zvir z^m6RTF7c?MXcvcl@$Xoz_(?`^&)*ya)$nE{Jv3Pyh(rYt0{FE!+a{Z<$`oUnXrNz) zLl$H1Lqlct-m~|t*peUdQmn-spyJw$$J`p|0eLzl^gnVipa@GFtv_rBRsFVaCct7t z#VZ~3$^zM}YRO6_Kv&piCB}{6ySjoSz;~(h0_#UC5mQ0^Rg7=jQu2;3x_O*;hPs_L zuu`cmH!r&C5X7$or-K`Uz~J;LZiZB%&z^;$1x_tjiJpF~8Wi*+cvdZCo#^uA7EY>W z&$VN3=0|w1vnDx#&mqO~{hMv_jXZ z4~>hVzu}yktmKGV61DO}X+Kl1%fZc<4tupH-%C5|S86-3&pjWqYI}OI_0!|tiAsQI z=I*r5F4F0R&B3-h>*iX=HFQ>kx2mwrJsc<|tJy-gUS)07#fkErWp6=x&>d&btDUG5 zOl|LXQ%F6!y3Ezqpn{h=|F{Hu_~@Uaxb?|dD`hO3?`ZZUS0k1KB|*o%a(`sbLsOtm zp;;t)ua^{K$ZE0NDqiYcL+RP%FRM}pJ&iD$uDQ~Gebd+&U3jFVA+$a?UYf9@Z!C$K zw}u%MbokaGjo#GBMM*~=*U|OmmM{T&{3xR~4>tHcN15y)80)hl8w;Nk0Dx(}=@(N* zs1>ogMP-qT)Xa|Bs^Q)^Eehl7gRDn_)a6#xz7A<1!!N z;84E~?$o3xV7uK5pYuVT^_iWqj=7P~e7pP=uiK&`34wOc?f2bKv?qxSTVkogFOg4C z7J194lm0JNJd%%|2rAc7U@4u3@yBHB2=grt;Bvz#Dlg*D+8FfvbKv)hG{v017;9+7 zkj@aO+g;P+4NNVb%M{BbAe%Fknd9t8cgw>0H*UX|PV*cKcss6-I-w0qYG`q~Kas3M zw@VV)I0f(2_M;~g6c&Wf^#Z>MN-y$3p6O6ssqTgq1nZ(Uf>&zt12}Pk&$w7GoZqLG z6+vHfUkxP4$i>d}xM5V1uLYO(dpHj+-=!ucK1gv&vhRO!sR(@(09!AL?+`Qf$J!V+ zGMpO_p4A&66JK*GHhY|wT8oup*q`u<+TKk#HcmH+zN`tfHBq|m*T~c~a&$sO;1nF2 z6=KeM<(Q1x{YGKlMH@2_%dOJuIhgsyU9TIkr9=X$k2&}*s-J^;kEG6#(&s2E*t$$u2NXR>Nf$d9^ z---nck55GjdQH!o8b5xKg++``^GZuC%=I4OvJEKXWJDz_nYRmN3=g#Ng$-T&CF!c( zZ3@H-ifPQ4t0h(%rQ<+z!7LvtXS87FFS@y$5Qf~-0Z9u(mL;o;<8SnLg*9UsXT~2B z#_35IT}amEH%$!eAs^K3G*3tol`x3UD|=F($Y@?<0VXjA7`LcMwUnCU_!SL&eqCK6zG9=KU0!1JrBt7zL1zzxDcLQT?W{I$ZYlp!fzY#Vu&Os1#Cn z^{^AByZ@?wL`YJFWhC5D^>W^1S*C=vj3_7e8~dz6Pv|1BN=tPtb??&$XNA4PIx2Ht z<^j74J;FvCj)DFJlr6rR6BYpxVOX+;((eeud0Ann%U@z-0W}QyT1~e=gVr!xKg@~Y zhYK|sq>Q4D?brlR7W%xqk3A^E!yF-Y!vWbH9o2BTh*< z62t)7aaqg~h$9QLBC~M>eZY2akAxyMpXj&&qJJz@YxgY-_6pbsk{mu<%p@jFWqvMi z+e)RPAqzntTATYHT7brrT^nOInv>DF{Va~SpouokYxXRHQ93citAj1;F$vnVD*|Q* zboR*~zfq>meN&(R@L_S8WnxA-I3ZRMA`cyBiwv)yhVKmh z#$@xms1u-9n*F9{ve;6VOhk7v_w~A6=q5DZ#FNI0)h{Nfz39Y7mPYbxQf>YQ8aQBv zg=FZH3{Q7XsorDg=-;K%xoi|#d^%JnK{oX6Dlg4#hn=FY!4kf&ZSLX68uqN1-VUJ=aaw0S^uCzaR1E@iG9syG9{8& z@xnAoc4hjETVe#&`EufQJ(R~!_LU&S;DnFIC1M0-v5ijz=h;_%`M_B*8WRpzIeYI+ z?9#->i*Gc#|6!CXeaeOqmf>QB#kpAP`3k5kqI^7F`cBR(uQ*0c;*cR#=2|INvZn@X zazmgv49)Xb3h+-Nl#Au{@3t?MezOEwC0S_ekV;1|6{6Bf*{O)wB5GB@MPuLHx{)3J zfY$t#Wu19bemy|^$AExru(vgM)xf%jJhc(od|KZyr1UNR)(u5uJF8kOU%$73n_PMZ zhQMzz;xSJ4iEn_#wf3inUpJFEqph0`kuNhUPF~54s$0;q8R^55iZTO1$W%YM5v&-d zO80UX35T!P*qV|CI5I8C^EVFylqY{O&FHTyy>sY{aKYidaOoAX%e4=IjJ2({>3Qe zIz>$IaZo%FRj@$H5#k*AOY+oSIV0mZ{=FFVZSw%4-FxfNjMo8ZbA5yZ+qAwVJfp(C zk*-^*pz5FTe`=>SNcD#(wVt|qH=wx(DJCIJn-Z7D%I$2CPKYJsBXx(QnjBD83avA9 zIB|(-IyNp5DKe&+TXHD(OB?)R7ERHjt(hq z77=Dn-8#P0mulW#OY58+us!hMf@S52&CdnRt5qn7o4n*7m$uW)!zvj#V$AK@I;4Pb zRPPOHOk0aY&?j<=a0UF-T_cZ8dPRHV_cj=`E>c#Tm+mvM6jN!EOj$!R0Fnuc<4s)r z?_EmR*D@yb!wqsx69~4fbrx3V(swOZcr#2{C9>0=RJKO2P?sb!pPjhTtg|1wzgjqE z_GXH@g>ag0BHKJE@e@1om;p1u^k&O4*{iOf@XJYc9VQI)4mp8B@)-gzE0!ug_RaT1 z7u2wu%V1Pl3~@0lVT573*l@Tq(_hd+WnDHon0gvB;`#n$;X8hms6{iiL!+G=?0b6f z%k`VAh-*90pGFo`bpErChIiQmQQ(sRbb(9YW6AI1Fg=3YY3Q4rKsy-o?{sF_m21R; zwp}mdV|1uEe7?4kwGQW~>2vurMa-NxK|9uP5n)ddrVVJcy4jdp&u}|&16>JVqIFDj0>Do{Bdue zPSRQ+lt~jpjV`iDAcnat5r$Y~Y%0f942x*7bl=pbJlAs1DQkMY{XaAtGPAAEA_VZz zTy&@QO7Gd&omq6H9E;h_|ykCj3U+gt8%-O^KRiCr0Rt#;i?c}S`BU_)T z)jCfCs9nOtmZm0pW>8Ea?pb!ToB&q7ck?E*lipsafzytf7n=N$=^9k-!IXD|B?F1t zBYKPb%272kX2w}>+M%JL&Z7eroP;;xRm4v4)7a&&V&g99DPA2k!#C5haKx{I3)VoX0Ru2{TTE;n%-c$?cIz5SqPnZuV@bIUrs!Gp?Il-InZPBP}}5<1r#pf zdIC1juX_)#7x|RJkDqHiixf=aKWjBcQQ$;-u3}l4BrF3#&cQN5!`dXfonF?u4cVm; zgpUiC-U#Z~INxaWX%4g2pll3w$X?MsO?*C|jro3V4a@BKN`95E?e7w-COqt)Z}4dG zlPC-zOW06CP@kI;S(aci6AvwzSzV5H&<5m@#fDbilNw#KSV=_n?-)?{c!30TpO-V5 z8%IN1%^i|m$MN7GY^Jc;FI@g8&B~CO6~`Q@cAL_Byt=fVnhN}(kIkFW8dK~=#XL!x zrA}Q6pR#GN&J~@#UyIk>32xnW_^MtU^#%B7Ql2TBSzapbr4aFt_=3gXG{N>HuKeOy z=<^`i=#0RB3t?FHGig0>$Yv?^^(gaIt;*j1KuS}>(^gk*m}+KvpbSkKI zs?>?8vE%Drq5#{059^SK?110Uzchb;anh~J<>Q(#*p&|e+?N?)KB7_-iuO&vSF)eY zyS)#OtoVXz<<$x8Q{HLk*uy5GxnFCizuel-CdE#O{FNv@26={LF&vT$24Y_Y_d4k# zVm<;$z*2v$i^`cu(~9{$RO2=Z-}gBYM+n_2tiyh!z>Q0Fz6z0m8PD(7XMVEDw;tu# zxHtNZ^2gu*NrgY*>GVtmF4#WQkIN>+cGW61Be0}oD!nv&mJxia zObY}Cf>oi0{vg1Q58RHkH4NYeMkZ5wcBEr3E4^hWM;kd=RZ1^F666W{E_w)J(D-vt zUOgVX!xHwL-AqVLybSdOQgn&x2sE=IFj#k>4L{WIyXOs(`-^Q0VI^#AJU>!bFZ%>6 zveM(jE3^=gq%BkIxdnb0=U%8=%WQXb*<+A@uVk={x-fVCQN*;iqAF8hrNKzY4|vZx zs?MuIkk?X~^JL`7cW(pfFLIUe+aBp~N9i|v zx+jV_Hnq0}`1Z^LHm*55z^M*C_=^Tt{NFf}DW+}zfpc!VW3KJRp?0%N5<2F2EypLy zcxp>|Hi=QNsNL6Lbrl8E^f~S?kxz#7k;3<%KxV%x6iVcVHisixSPj&;1c#doCtAaN z!}ML1`G_`=0H+p&BR-mWN`1Re!S!8R+`5i*ZmKOM8B}OLc`RV4qpXW!jE}_evr^sy zm`UxjXBy=d8O-%LWERX@i6U-Tg8TmrP4y7&9^#!vK+-1lqxC5o@_-f#c%^AbLe}jZ zIu18g;A#n!AAQyz&w1UUI;}91B2~vbfFLC(O4gvcg`H5(amXk!EoFk?XX2!v*lWAr zxB&<}C!U+ue@RdcW)T!cJGXHDr8JJmC3yfWn4b0D9{Sp$*Dn_ZK>!vp&Bj(Dj%0Z5 z%hAKKgr`~IDCVimywmx_Ql8a-hBvIQmKXm{y}sphJ${C&^&lClutPI@=8eR?#{KDI zdtC*q(tSR|uG`c5kr1N3J4fYil-*4)fjoJWn&914@mMpyC;^$)c3Bm5d36Or4_zyU zGs887ylFJ#H)PH0vqk-gOt@=hcGB9b?Y1sOiO%MW1J~7h<*%>TJ$bxnEJ^0sbnM5K zPLA9e49)}19|53Xv}XKS4Hq5Q(N}`%nv(cZHex+tc~m10 z_<%ve7+j+;X_Kp=6U2=cM)Gn#UyR%Cpfk2g8#KU}$&8uid1~fpOMNTP2Jsi(gt_}l zHNyr8rHbRpYk2Lh*=btHB303`a;a}<3lLeYo0iohq?S>x6ofShu7(_?`~XC7zTf<~ z$_ce)TA1M86v1YXV#zH_{jmclBwE(md}j=?ma&BUl>>x7gk6NlW2w28gni|0J2TRo z%;`G1Z_sL0!a(STNYg-AjX_mfa1DNe5STE4Vjf5VQ*o# zwo><)N7bgh>jSk&;6pt_!(mWQXPoNXa8+iG1ET&5oILh`?U7{W((d>PAzI5LPq&@q zt~&SQemA9X!qfN#=&= zX5)|WLdwFq7p4!w&+H=`b~-Hsns?9dk3cn>(x&yNjxI7MP9l5^`BR$R%s7O5GYT94 z(wigc>3}4S!@rR>p#H~+Rs_CXrvtCuSXUj&WE2=<@h=i~^&IS7M~|jnsDHYNp2?_eJ+?Eam!XpY6&pSqUIehgJ0&pt65* z>X=BVzEw$)e=7$*4`P9{laiMS<##ERVk{Zok5C;JLgxcYk0)PL04|7U?7e?HFN5c9H6{vfyI!%>K5+QV@#Rz<4@cSFz{wd4fEcWn8LNYz%sDPe6l<9kL-Hh3K0;Y zy%mJ-#qdge2Y!wM5ON`5i`yPSq~FOWihCeIJ~pdDVza`{5oNg~=BX4ibF93i2#T}|iuxC;5Ph;cZZj&^kivJi*YX6@T{C7SJ(wePN zIZkIht!p~w91O&_xNyKaH{s7)qT;dKK_si`ZI8shWC{0_9Lk}a#kKj7Zg^)$aX#0H zmST`>i>xE!w#T(3a-xS80sJ-g^B5JmdHW<519GIZMXeVOKQH4|_k1nsR#swYHOotd zv(bv8^oD8XX*;3RNSGRv#x^ahL7!UKB<}x4Bgj-=&sQSjR z?hpZ}`yLq?XAhp5W~tpSaiL(6|DOPFA#q-isSuKK4f&@CkZQY=E}fkPHc_{cX4 zN?87h=e=)WA4A)sAqu;7jLe-d>apU1=<@h!XLu5LL-JS}oxk|V`pE3ap<0!`oSV~vpdr+G((a7YQ% zE4XD`Zt%FfF#F`AyARVH2Y(PBFTlc-iUh?HSFs{2JleL`0|0291f}v##d|-8w6l3V> zG5nsR5EY6*Vv^ii7no@>vOIWV&PRf@bKO+FuTM$8rMel^1?rUhBba`p1BG0wC3kOh z*JNZKXH~S~H`Lk9j&0>fk)R0^cJDg7j0VkBMvRC!GAy_mY<}(p1#*rV8rU7&*)hH# ziQr}9zmR*T1RQ{HKpl_D7@GU5idCx+MsI6@Xb&=%5Ucu0(6}>^8Dq5(cUKFE?#l)A9>Nw-32fc{G7X zm^OCUM4VSp?f^LfYgGI8P!(~<1TZjMHXhzNm0w&gDDsX%u*HpQj?SH`&8&dJT;15s zir%gi$_3hn_noNCbsG`gsvO5ET|7n6MpdI2vyflUivYJ64DLdUMBwupWc_wi4{DL& z4vX7eb-GZZGCXp-w)lt}a?q9z#6n?m)e5mDZt6&W`l>IH-D zs>rb#<$~43)E~ha=@3W5-IW!YKj)5SVf_J{vg)Y8jsGT4QR)J_!*4KFqhp4v5QqF8 zwZ%XCA{W3F1o0nlGXuce!MbCmgkt_DL%Nk;mf;)wr)nVBwrxHYNQexn-6MdiQ&q5N z!c7h99727|6OOwQRT)=Xx6_f7!i(H;Gxwbuzs^rFh6y6w3HcKdxxC0&W}qwnxlC$M3{=g~NZT8R=8XQ7Ai@AG5Rjs(1XM0VuId4z(>Vkq@ zhP}P(1uko{fsb4fPq#ehg$#F$VA#(&#_(m&u6W*3k}(z$*9{!rG@?Dw;U}Yn)Zw{o zL>cNfes{{G5&%*?6od5xzT3?&eqEt?#IqfmjKVqAA0a#d|B18;x=p8C3#qCQzv zmzabIep94*vlh|z_QeW=$$|I*3)`!fh>^AQzW4=HcPN|o-Rq)6*HLgO`K!xq>Xjau z8fClo5DIF~du+=TebDK#aO1pZeMIbz%)or`YN1^w28Nt29s5^SGDufUdTwSF2zB8y zSxg4qZbnSrk}FTv&P{ABN1^w7M|^D`4)JYjr!PphFGA#^@JG5IyoZEGKL036PF1Pm z@j;4Ohj{QZnAY2^y7f$wR8UI(xWil(PJ3?Oj>Q$sOb8V+%7AySzgDZo0(Z6kd1lyC zO4H`Hm;B05c6cq)5GA2PVM_kueMbh9Q`bkXj*;D?NMlwZLMXw@y3o0VKSt}^?dP|1 z)P)4HH_8B`O}0i^gobcpn$FOXC(r3d^(k&6zpqgba(Vv&R^HV%$j&;|_=JUvW|Tl$ zz46_2006Ty9I9#aMV|Tlj%cU&2k-hL+Y#gRJ~EvS#(^(K1^RMM!7WM9k3vvfqEx{a z-kXxSf5M`$ylWVYqQnr;XPf3QtK7xOh56fafXG)dA=GRwc&WZNEByJayMr(U4WEt- zMg}cAw#$k@7LwulR5KHD8Pu)mR=0s{ z8+MqCNJ?`|Ar&@if(|~mCsO@+5RLL5p@8RNQ7w2_{6#28I{~7;;(SAFLyD9hdDUZ< z8io@s!s)jk$DEER{YC>6m80Wcods*iM{*k+hc}LMP1hF{M9cmnl!GY9h0JBuHC}t*Of~dx7+6!9J%5Cd2BC8rsae?OU$p-*1fM zh;+-FAR!)oA+TXDV2D!!4HXuEmmdCTTvc``s0>XD(d_qe643#>i1^Yra3W*z1^I6U zpkxwXH(}=!A#t6VYoKAB#aWb2z?T5N8{X!UCTmbo9=c7CFxBZ#Hp3MFPw&=W_kYC9 Fe*yg5M3Mji literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessselectaccess.webp b/static/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessselectaccess.webp new file mode 100644 index 0000000000000000000000000000000000000000..e023c24a382329fc5d50c68926685ac793fffcc3 GIT binary patch literal 10818 zcmcJVQ+Os__vWA2HlMiTq&w-@>ex0rRwwD$wylmjwr$(CZR45l_x=7e-^}?`9n`+6 zYS*>bz3%nf2dfk%#KgF00RS~oA$e7K4id&cw%==ufbnzuy z3AD>Az_ahY?~e9y;*RO+tGQm7Gw?zya0PUeEsy+sr0X*fW z;Y;ky1WkVA-O8x&(Hi_N+38OCz}Mlvt#^J@&Ps+x+mUb)mF!4 zvG0WRM#*1UBo~-UrG{BU2lV%$n4#}NWYfML>9*PQjm3VylaNdVP8!}J-FR9$|_n6r4adAkzVB}0#`(UO}e@u`X z-3pKupg@C3=5;oG7oLO7c*2||DSlY{j+9fk#(wMBBQUmL&`@PJl0fQFO!gmTkyCLg zjNxo?)LuV200v3o*@UeV%hqR_5UY429@;7V463-g$kue~z5|2t*6lVvwwvgnS!|95 zLv4ba&a4Y#JLiM4r}}J6`HfTjzaq{>Q6K07;Mq6dpz#;JK%7dGsB?7vOtXS`yG?*g zdLk;%=3?#)YuovL)-_WxKn??y)xwM^Dkj}h*W)6)*J@dXmiFgN{rEmpV9OZrPx4#J zjwp8lB3(fda3*IAoRAK2p9~n}H;9#k8KV+MBsw)`ucBbh1!;HIDY}}7_4PF($-C&C zeD9K5IQ|-pVhq?O%0cU3*@R}1PEiedhH_DZD+aI&Iegd_1W09 zI}09~wSAYQGk?7)tjG!9AuPQSOqE`R&!AlKPl*5V3Brm9f{wjKlle8}osuK!=fj`X z)krobKAFdBS`SjxC1R2+_OqhAvYN2VLCkLD52VTFq~TwzMW_6Qv+wSZ@U&z*V}3gw z=cs-i;gUqFl0o1KNH5jS?D?k}rbT@%D;U&}_>AP>!hX|Qj=wbhYk*&5F$_-qCEJCg z`FkwHr;n7BjG+981x1okbjDQGvr*+j#T}-Y|FLp?=|RxnGJ_9>Gn@FtoBY79sK9r? zmhI~f&WLeW4J#HYr=2(dP)+$eweGa7IZ&!|JqUZaJmV+#At3F|g6(81;0+TE0SIE}t zi(TB}4ftaeU5~k#Zy2lDX>@zHvEueC>=o_B9B){K6mKxEz#DYReGH$~M(&v;O;}CStCJE-1AfLu!na`uP~iB|exBpjoa?yK_`~U|*Ry z1@T#fhZLe@`?syg-;#6{vn;$q`7_)bgoZVIr=(v{QnbzN!4~ITH}VjV0&$p^L3O>k zFUcy`73`G%mHMBFn)A29e+wE)RR6yBzv%Tp4hbz%V*fWnpMOxYEM}pB_4md9Z}$m2 zoWi{SDl+-@f3rrk{b}W|Q$7Bu@-I05(VpEc{DYOFHSC0L#_zi);T`!oLE~5(Z=~rFo$+$GSdn_Zf9N zS?}D`S+{jAuJ`*|3vNCriyL0N4kR}q}Wbw_!5rJs>tdQH1&rF z|3vyPr9+NPF*vMl8*khn()M2{DOpo2m^kG=-L?u_5|+ZXQsaYi0%7d{AD|8qfJYoq z#rrjcnMuD3lM)}PuAZ__Y9f89gSRyZBVa+RN5~cux;lAVzdY&|0t4BbLO&{~mq6rm zip$Y)S!%m=;%c%SJ;G^=V{HJNx=(ZUqU?&(CA9I72j(^6NorHW>7V^Q_kf9e^VN-G z$XREc0U*4HK7ED6h(fcDQz$R5v~`#?ZeAlb6T-u@fKMlw$5%zQ_y{2~iP4Ti6RHNO zU`iW$-q9l7efx&Ul6*oebzA=9+ovc+h4+vPTO(=+M&PUcGBL~KU{h_zi>7$3(dVW% zFAahEW~0H`oyB$JgS)fXay@R!6U+k z82io2C*7iC8Um>IEG2gnruMy0r0z?re@K$|)d#ua?kzm8a8 zZa=}o7Ll5t%j3E_Wu>p!zSTB%B-U@gbXX4XiSQW5#Iz=R9nU*Z!BICVV=B?%oZ@pc zYG;c7j0#I~j=3UoAw!URVRdZNb39yj`-KBEIcg8w01wI9bX}yNcI#(yeDhrNudG!H zuzGa46GJ!+uVCM~OMgtt>E7%@K1jyQ)D*-@8DO(IEZu?giAtS!>BnMBko4YQD0U6Uh@ z@5wWC{z|U}@W)fdzvG8(+}&yo=m^~r`P0764exXqjT)6Q=sE|skm)64H9>L@ue1tfkfAvt}PLdn$8xF*RFZn#pe;hI=@vR=_ z=KZ6Sa&Zs|hm7nzR%*x~+Fa&}e2ek6ZPAllmlv%0N-HLwNV=A&jo3$!h_8g_OePdZ=|63n;P)xxl*TZ%KFtQPA1ysH3y zwbQ|LE(|3g581r10PlUA^Gs=^#ZwoOLl9|MU|-z=OU+{q%AT&5q1y0LZ95Z>MoG?% zG9KK(%P9_uPA9+^dhUG=s!m(c`fflRO*|cXIpCP%;9aKSdtn}{vcT9#$s#5z?F~)_6`GPb26yCQ)jW$~_|}}N%|5EetIN3^ zStUhn2PvHKK269=-ZJy2or-{3dYa#SyJ%XLo_iI`uQ_OY;zAW^chHOE5z>ZaY#CHw zNgUN*#kkP!Y1^s%%YX4!r;tH)FKQv=YO`jMYBlJ+Vu{b+!PsZ6Ef&f<7L^l>z^6#w zKNmir7L<-Jun)WbUPE_Id&c8>A(lAKE(aFf(6o9J+70FQT(+?>LPRJmtMY~+wGLKx zj+hQoM>R7=Q0qKnCVtFBblC{lOCE`f)F>d2XA4%&bTc^~4SY6vro32A-|1rp5FWwJ zJ+K88*>o^06Uv#Y5~p2uRbh;LYi<&I?#eOC>}V+9TL4h$K@&3^P*pOj|5V@WuiW%s zfYe{MC;XY96$Rnr42fKmmd_Au1@c!fpXFXEv;)hC>;xcvcpH+l=CCF~;JMCE3w#!y6D)ff<57e>uwZ^7$3TLc_X9VTm3qv?eD8Y zxO%@UG_PjiN7_UGTzTN=9aAw%K_uDinnq~Hfh_j`-q}P$1>++}+}@P0efJe|EttBy z7_20>%-6E9d`OwbLZ2Y1Rl1SNWe|}=g-N|bFuMK_7cD(46}8jEY58P37+4VY;{!%T^%jZWk`9jq0K zZnsBxQd}&&iM9CVM0I9lk|(YG1@CX#W`SCWIHMgcyhdVtdbCoJV}qsNp5Wg3L@|xo ziH2u5`U3atA4mjTZ3QfB&gJ!2Ug|6mcg=@}Z*WES-?O7q)o-wQgokN*@npTVp$9$C z@`+9k$^*@MJMpRsub?~9AV{9|aZyw@oYoZ#Odp>Trs5+3u7SN2b%^4KlVUhcr$9nNWb6zlA=)!Alv!3_qEK@PL0A6pl>BAxo z>^^&*_pwTY>q)JX@Eo$MQ50LltIK&}j|nk+kgK)0~HVQmd@% zR$s&I?34HkFcPDqaNSDQydS>O0z0; z^Nc*TR!UNZXwFqRoKh3&G9WfCtPU+VFnh>9B}Z{#!x0DkdcC5=gzURQ|2CHVM}}>L zJ(v4%?-%DN>4Ki$OyI9Xm12C{I#OT2a3BP#A{`%7=AKDi9o>oiGVtrrO)nac<`OZ3 z%Y)nc_(#*tJh~gC0wa!*HcsiQpnR68%kL@z zHC=SzhVy3_aCBgBn(!r$py7cZYZFlRMlr<0{L;%)OFhTV+11#n=V4!-$37~s=N*Fr6Iv5?$0zBEIW*RT=rM&|HJT^NOINtCtcBtdkO zjxt;V2PjqaL69z)5Ei%ypWVq61Nog-Y2%_G3EJ%}5&hv#Vq;He7zjv1F|jKe`{{tX zCT2P;_tT*h$Zw1@_~Gbg8s4MZXvHm-%d+w|FIpef@(Dj|JW4?tbx!c&DK~Q>8cYWP z8qI@x`Px9FWAvxc%Pp6khZ+XD{LCu|uNkx?Ogb>nTfEtny8iLbnjn#zoA+rrtAoAT zWbd>G8I^{rh*vq2M4FUgH0`tEcNO*uza(-RWfCX@N%7v&xAQ*ofJO4_}&6NWb7D+MTP+z6rn@4|i1(VS-#_ zpc3ZBDgXnfhV?-gdf|6x^9Rk3r`6R_Rx!kJ;_fpmE$p9%&o1t8%4be!mSB~6cx@#* zQQcn;m-Q|^N0tv>N@z*qTmtDI5blh)Jr2*A$$`~8>q-;6O_C?j%E>>|vq9@R+FD=4 zbq3uT)86L@%v#zV(va)2eGuSN(ehn82L)*c0{n!2cyJAzyR(7aRknmdD)dZcCH!P@vwps*sVziDL6LMza|?G#7s813 z8F>chQ{H;2*HRu#D8n_EIteJhE>8!BPkL0`=J_M1zGaX7PVK@e`awPB_(=A84K6F4 zf!es!6lKYLNRjom#GJBFF{{+Lmp~{$&Xl(2VnA*Uel*n6H^Wc$ zTg$q7Ip)5sJkHXn_+Vf33clG?fg`4GE5#8zN~mCzt4GTW?q1bf-@^hyJg~eR-U_8c zUPoeZ57&_m?w>-|5fC*IIQ@$3&esd1#e`0Z?EnXu?PIO!5&mL)QK!p%V^mAKG|>}c z%b0D zDD1FdfMr)wAZ(g1JZuA-?+w0Y1i~Gn(ZAb&52e9(g;cRw_iB&7`!E?CFSA)F5t^1b z(h}iLBcffwb+yr(y=fGIdqYPmS=rva9l_^k!aMbIS0uviee-JnR6~c`_>A$n&Skip zkxTIHC<^$US=qg4A!qaVv?Hx`4#6jT6xESQJYzmjkZYB7Uk>bZ;q!zZQ3Ysm#FH)K z3_mTwKwZ;9dm6$qwbYx{zqkcqL0LKSo98*=BKD9oRYBYSX~;0dBmYd zn6IrLFt+GYXbkbK*w_HmtSez4-rs$lW~zaS@ve?Mif(~V!A;ut7cFuAYIlRN>2XMWZjCHZ0&QSDm&q2HjGBnLXVUY6*T zhDCb1B(ni*=pbav;|y)dw=;%2!9I@}b1ULNm421J1D#q*8PcwjqaubuSoQ?`Qd6+s zFAZ-HwA1U+rGw7V2~BtV`7^_ubYrzcArgZ)3B6vr&%9$lj8vUlY)izOz@FXtR&sqo zOR$=g%_%EHqi^M4LJstd*mlcAV^2}8JS}C$($6>N+B~0~3my^hVhnxp77pp_34hqB z5@6n*G+MQHuxjf#x!>qVetys=;0jNGf2I)O!*@D3%a;6jfKkT$(vzqy*%J@Tk-rr? z$JH=-v{JP<`(gBhdl_f8Xsi<|WNiPQZBo^q0G$W61Vy_|k1rMK_^%h97&O!;v^0P7 z{&0)5q4SI}GGAGmuE>}vPM*c^%?y-W?eDKDLOH1R=5S!IYm;J!g z032#+AC@!c!GOd@h;-iK5S}Yu8)6b{jmStYhjpBF+)QVRz%NX4m7vm?Nj0+-*B!r33Gd&h1yeD#}x(SyuWKt0)G&d#*U0 zAyq;7dP@y4O50t@J=tdkr5{~~UD^tSrLiyk%3cK#dY(dVBCE{!;w5T=nekMy;`PT2 zpAt1#dmf=^dEyGunn64tZ;{lYNL1(S++MXT3iwi?qwGkw0X*Q!mhXabqYH?V*^b+6 z55ZsRC*1YHZ~k;)-d@Ojpm%%sT?CIMd2iZDzVSBig({;(#`B|Uae$o)f#X12r9RnS z4xL11mSNQRxNXvi48)CU7~fy9x)`LT<94KtA2Ap}0qZhYvqJMAhJJCRDWQ=Yyq|6Y zR2(6)(D(0&s!>|g#KA7zRiZjU&M`HhX=)v>Z8GKJ8$Gagba8*3}kW+T1dJHeiAwWBetQ;bR; zcZ-K70NLVD!dI1uzrf@=xG?_d%|HyC>Wt2r4bNphMh66*LJpF37ohujH)bevVlAcF z&o74G@+w*j9+!}N2g+k8hqs}J!J+vt5=lrP}RlGO!$cjvp?aMZ~>#&PR09!4K| zfW!V6Zqiw5Yjegxdk)GnGct^uJRhrGp?6Jg{1)7;ls?1t_8Fq(4(tTsQf>I2Xk`Hg zxY^80MT8C!NkYCFbU#J8Hii5Ds?2}@>2rHHid#%TyZ~c zd?*K&i@Ss#tofL@BQh^Z+OevrpQf$agFJ@TzA0Fe+Emp%7o{86V6L8BwT0F|HTEH? ze)G{)vPLuv-AOsBJ1iyXXd_#!GOAgq-+M6iujrWSzNP9)CZPtZt^)u7FnXnGGR`-T z7AMTC#@hA%1pmcqZl=4@c)nm)=B!fmCShk%txDM1ZdE_C*fhO~5QL&PX+VBqzTvr= zB>62KWWlIgjTVy5_3}OK=lus1MjbDanE5tPLM4cQ2r;y>gfbS;e9bf)RcyuRf-#Ly z#3mykH%BdyK#*%>701%Cz4`6OtcId|+G`E4MVE`>$ex6d5QI66inkcx?-ys_v^IC6 zrSYUnci!hOSrInr^0M9*ode_|gt;?-6-zWtsx;fq26U2=8W(C^*+>>6ITZ`TE>MXX zafUgvrUSHaJ@cBRyeog8mSa*~t89ASpXFtMMrNhs)MVYTOL+FUEak%ps}Wz%7PF~j zD<)rf4AXKS7Yt9KtUILKV$9yWItqU3?&Fr>OaX=!W2oYV!M!;sY|YQO1pw8?qL~uw z5?q_GN~3L3+Z-)CIDRqS7>|#eGfL{%U~58Ra6+tFYg;G3$n^PSR~;zOwR3e^ZqAd0^$NSjr^5^jnSn&z5&q%)HHf zAwFVo2?(~`wZ4qxw2X-)s?BXG_gQq>8`+_cemSwazGClKZVs++@*X}2fkUOX`hk{{ z$|dnMYFUqg4P$+`i%!e(ucUia$(@r`ik3%ydiOPfZ`vR3IH$t(v*&5U=MoGzfa9?n zefKp6ts>4s6NTgZ?`tBua~eO^Or0c}yuL23_m)+N+apaWkKdq?F9eV1tb9*%c{x2g zFg=;e5t8%Bef2wZFM0BivXn5>PxOFt7AI0*-z2D^$t<%CnNHXYCuTL{m%XJ<&+xh9 zFQR^43NP6thk}m@MBattGydY-rCl)$pVz<2rmR3WuimlC!ITgh+B*|5mDln-U)*@P z8&-(v2|)Suenr|RzMmlSxE%avfkulC0O2AG%3F>n5~n$mk+db4TZ^TluP%EEXNl z3YU&T<%Q%)CeK;0P=Kg$DpL228zhv5WS?mN+UF9|bfAFYCx7un6 zN~E6yjz_YVbN*b#=+d{O={vwVhI#i!-ez_tkPbp;3V&psM)H9{)Pif5kpE4bRe@l9 zt~Nvy!S#N=WpMRP&ZP-S9%jgqyZp)lVknzRPkICRZu${CaFkkk?NG=u=xFLQIzanw z6v-#$_zStQxWDx7m1K5VeJvUlA|v5;FE`1hbI67vY(fj{3LNJo_AcFYk372_6h0*7 zqNeIbM_!(O+#x}XZhkBxA}%bWvix3ZxPp}bg;*gdV?g2vF|b7J8)U(D9$Y#WA#J1{ zA>-xXrWp6?=@Ap;vzR-qGhSDq)7MhsksMML1meh4hnGULUA?dxM|eE)Y%K}~M#Uxo zhKI_JVK+k>IJ%>(N7UV z^*&fH`q;H4O{ARfE)#-=3-K}Mu$nX1SoI(Tyauu|n+U$yv(-RZL<@~W zx*nMJB!Z*$Wpc|bV?NLh@_uyKVs$X^qW-fVFzw%9-`Be%Agj_~8KTn-*Fd;lg{BfB4WtHsU$91lu7hj+9gm-o+N$Hj4SP&}kf zN!~=`bfi2S9TN>erqwz2F(`E)=BK4ZC9n9ccHJ6v1 z6wop?CryS!!qFK^p*E~nJ;~g2l@|a=)RXq{pXum5gT7nffL_Z+^Y1Hug2Nn`L1P@a zK;;kilO$15OK}6 z+J4L4g>5zY@CJw(_K4q8M(heOj4fTOHkf_Xs^IjOixpsIy(?g1J5!xi_%<`9} zn^ygH9fTh}zFFJocgtH5VMWb6YU_1OeN2^J%yd4LQD)Ha!(ussf8wkA9(8_)yTsnR z)UDo1{!hO_YttAESlvbG?Ml340Fec!ryI(#GZ%1XqmFaXA34u=Swa=$J`JmK zUqP~v@x9Hj9ve=t9SWYVlVhM}kr!k#OpfIHv87T>?nE4GIYOTP=oY5?ya;dUoWjAT zj;R@@+11&T*ew92Hp-<19+$Up3(W7{aORxt0PNZFO5sqSDFuOdF}18sX6#z)BOLWQ zhSkxM^WJ4yC-k2nBNs}5$(C96=`Q^|=l4wuys`rx{|JK%sG^AI351NcWv(^vSQ9%! z)F&XuJgYqN)|}DW@Y6`y53T2rc$UYHbYv?1aw5i^ z^^LwOye!Zb!KBPF#xIexyVo=Mt?ujBu3|DjbeRf(aGzToPyd}wlF`9v8;jczG9(ioyQULeZw<8vs2)7m7v`(($ zVqI4nZhVc$SJS?bz%0tR!9zcF<9qD&QZj6UuX3NUbI+C&rCqEu?sWTY36UCo60;e) zie7{icLAO8#hpRZkUZ7Y`%3%}To^g;Tu?)JcR%fL=1`pi_KuvO8(W^g1)g2P1wQ|Q zcBb~%ao~4Jic`3D2ks%Mfb-M$Co}yg<}!{GOpmr8 z#!iB>rj&=bIaRkeCXD*_#3Z<+U4srfq1o@*ddax!y%d`JA4>AP`LQ>Hlx8iId>kZZ z?L_aaJ}b=|w)9TfEU>t9O2lUPEg^!Bgpa!^2yY)vINHNlLzrRF-kNQJz+iI#SlxU; zRfiv@?*bI(;(=?oaJA$Fsq>k5AFI{R^Y3r>nB}<2zm3au>H8ENR$^fH+D_S+Gjp4g z8?{3zaDV!{2Hd%Q-t4OTz{Q}9lC@$868ydE_QB2~t)##|Ou49ex`W6d`r;cUh4+Qj zcfX9KV~3R=Baz!{k`Ja7C1~=*X&1$%zLMMOPPKJ^hqDl@4N1%*h$t>xKtLfX=1fP4 zn=Kt3m52L?=@%9g&;+ML+|U?ZY<-7D1e^LA=VD+0z0STQg36gPE9=|7FgorE z^Q_=9^7WTWXmLxQiH(TacLS*!q(Cuh=X&pQ@qw?oHi3yVTUyl^J#3>)xrFf}o$TBA z@yeg>Vs5#Q#Oj*eY)XkQNnQ++yoX`kuB1-I2mF$vqDzx-S)~8`+-0#{SgYegyRP3K%Qmj=@#E%Z2vLBRW6iIC`9h`MT@gcSCCYEX& zH@ryV?Wz6v6s05YyQ;O(u)gKb4g)8MWSz3V_FE)cxvejT&N;1sshuen4|rWk4>@1t z<$@Qn>wcn&0V!Nv%5Y_PPKbLchWAehoM14qlt_$;R?bmE_0%oe2$UDRxiIxt6W8SZ0E8fwr~{xITQoHV)Bt#N;x3t>l= z`<}2oe{fy;xzfT!(beI`S&uh)iP86zrHsD-m#`(c^wDr(Z_}T8)`B0o7x`WG4<`Q? DYQa3{ literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessselecttrustee.webp b/static/images/auditor/10.8/access/reviews/admin/configuration/consoleaccessselecttrustee.webp new file mode 100644 index 0000000000000000000000000000000000000000..14e12bca7055f9bdaa536734c5a5b934c248cf68 GIT binary patch literal 7710 zcmZv71yEegw)J4aJ-EAja18_}xVuh(pn(va!8H(Ef(-8Nu0aO~?(RC1;1J+XK6!QT zdw-p(uCDGry?3v**V>wja&m-}0DzvXw7Rak5H;HGc?}#~791-zf-Ag)qd=ySWK? zpgscv$2f6Tbm(v@T4WrxW2Ec0FdH>_(8fXp<`f3l{_hqA_xR4aBCnw5iL;N*(M;4E z)G568A=Nd>*LYohdV;L)YPW`=6^L<-GN#TyP%G8)JC~FyUs8;+=)y%hPaO1RR=hXd zzaq*R>Wx#%S&NzVC+x$*Hxi2Vz28No4B&6){raS58!b^9v?dCpg(H9@v!i;BRr4aqU%SL0H5P$a6||#C?&> z2#?klY=wf$RQ?SyY6qx7H9ZB>t@LFF@V}X=NW#6TyFB_vi+C8x->0{z^nmOfGZm3k zs4kt_aqO;iSx%Q*2-Qy(ehU-HgS(PTbY+mo{3TH`?L=R))g3l_9i!rv@iQu(i7<&w zIvKk~IF zDE(Fo4+)f`vpc@?1;mq3MGq^FJLek>-#1-jfTeI^P#S{FiIh7@qD7TIrRj|>=v16h zbCX`khR1$bII<@{KRs(hq(vr|7L~dI@qbb8k7~?BoW<QhPMGks zS&NRv`M^8csqz~KPIGkBe=>|rZSGi|9*vldd83(VexqfLr;iGv@IUninb6oPZJhSL`p zlUqNHg6}XWEl-K{-?C=}|4Tz87=24!-y26z(7>lb7k(_o^S8DVZr`V|TBzweo46hS zr8T3^6}qy21P$BBMSv(e3&QU6<+$7VIJNTV7k=l-kKn;0qQ1Gp<)G=l9S`sRCS!~3 z^pCeR5Xch!6*C9x-=)7z&46i*SxxmfrwUD$|IKN|yBwq67)21MGW-LZ#ou>r(GNfT zWsYUw|Fo{IKKmD^mhQQ|O{R+l|7km@X11(RoWpsQ9{*J9DYKToz7`S-5BUAn*EGd;m?x9%?p z`j_p$L#-d)i2ez=e(;ag{<94vZ=>^RcKia8T9qA0CKrSq;O_^VlODe4&Pa{7SPsL+jixQadfCdmr9c#&;<}Y?r-CJ$3l@2*jRe zoK~4s{~+=|P2r)@v{qguYr}QxGAbE)ntvp)&89?khEv>fSQ9G;_d-Xkb zqsK1=GKXv};7^$P3b58=TS5f;yUsr)`A;jWy5^o_{fJ2z%^nN4pi^q6TFkrUw|OKM zO(e=?)NeAcz#pbad)etsGxYy$kpH)L+JXR2$Nfc}kj8g6p&w9ObI>i#k*iY%rooPp z&Lj(VMmTcX)}KC!JO#O7H&0_8`m5>T$&>E|X8o>)mEzrLCB0Y1 zmGfn2*l_>IJL2v<9KtjyGijlO(N3XhEtrLLbRO|Vn}CTAf^Sv5U)+*)&}FvbqGiNQ z2q>TD;LESV8l+-#`}lSNRhC{UBV66ybw8RlZ|4F0(aI{qN&Viq@ZxX2R4TOcTo)Jg zJDJeEF-ny?P`R?&kBuJeKIxWX`k^zSzC&It(#*NWIcO)_4+HV6zRjypFS0(9CF(?m zu@k!ZNTag*5#J`VC^!BOb#xb8OC7r#(^$(_fdLVoS+UJJHzY;B^xv(rxN!>W*m$PZ z3gHf3{JOQNblqp1WHO>7#j8KzyJ}jw%u8_D!vI!2ZQ9p)RdaJpg&v;j#$L*F)>#3P zxv2ch&%QsC;@)k_P&FRmy(ur1Z}Hod`RWj{LZs%dAF^bgx$4-b5Xwd>)m2U=(4l13 zyYHd;_*5BhIFVR4YeNuviPNF7AM=_FeRb{vtDF{{$zRbo#e8QKDJ@A*TV^nA-LF_x zVtXrWC46=zyoBd_d}oXQ=1naA#DE;qJG12`xsC%oU0>kMxm>zpe8*Fnk`m^Q@yJNZ z&lkC>RzotHYAj#k?E1HP6~rHq`ktF>{D+BLUG!y%y$T!GhU!Xte&W^$PdZ1{J2XA` zsjZbc4wVS`RZrdRa2>BXHwSCdYB!pNT7_1~h`paN&OKMQl+a~vNx(mKip#Bq#(3lu z%Sat&bv7cR&>&>HfE3pkq1GpcXNTrUF{q`%~(@W_NVia!F{hVW5A5W2||7vc}RClh*a1$b*p_1oI6c@%8 zQ)QEWU(xm!J;kPCp<$u1LNfm1tiQD8ymDH=J>1R{^!Z~Gn#MJb_Ab*a0`deXbAI}? ze!d|XmO7qUqqwQ0G8mcn@Kc+8DmqY_C-8Gw;=m}K=WU8dKm%$EUeG3Pw~5HO3nJ&h zV`77ClZiaSZR(mtPM_ecnDdK(tZch=J5{0ixiJ_uH%*sWGQL;vXhx415abRyimwr0p`Id?)(C#)t89K#j`!vRdG%o%RVPYEce~`b zWn;n(+!)~1Sv2GfssrR~j9-+jJ*ATHFfoX0>t)(D)4C}0jv@Qs#aqUr3M z^g-8Ud883si8i^NJg7K7+*m<;yu+<(pDxAZEidQ7rP+wmL{dDO&tZXGZ&g5@3t>0Z zX6BwS3A>d}=pYbp8Es2MX- zF6Dh!wM#08TlovU?X7{0)1g~=i8mx~y{~feG4E;E99@4=d%w({;lB6F?709_6;+14 z)nu;fRG;Xacn-Fw#ge(4dm#&N+?{ z1g9VtcR$U;@7sJ;4cw<9m5JD7jN$TlY>L^%0 zPJFkWV?x0>vyDRkQEe-fx!!o|ap50O+khy~uZq(rKfbM4M6Ir$aelKd>mdpG{EgGEznv+dO!VrKe-dA6 zp>dvf&UvG1b@AgFj@FUkyYOHvuM#U zfM4rtP|ZbD7CMYFsv}lI*4do}ZS^;tW_$DYux=!yxb_sHqQVS3peq8bFhgTR$;%;K zM>=$>&Nt%8jI>eLr^KPl5RQbEn~W0{J5fkpeI@I`CCRkxNv`Er7b0l0pW_JtVAhMP zNigG$O2L{KTT5Bi#2Z(0zexil+L!0JE?3(F5G=tA=&TYMn9Li zEOkmn%usl_QT<89%PF!0tLD1s(i!0LPlV1!o{qTS^hzyC&msqykg5w;2#DWp{%|4f zxPfRtNBbmufwP)eh3ol3RT7rLwUPDLi(|Mgok^OKQ%V7!DS793EN5 zX7~1)%q={?{Gf1EEvIp9a3i`$4mRK>L}h#scgcvm2=9!)8dW)tlk$=7b&nPCg2}xx z>GB&)cyZEmUpcC1Ci_L)C}uuv6CVuQNghS!k+%gveAmvmo-j7H3S_UVZp-!FO0eF!9`<;$=lCqe)P$FyyGdmR>`0{}W&|PRW{hOyoQe z*0+|EN5e-><0UlYbAiUIH0_~N4hTAU`55zZb6qW`Dxw;09pH3zyd(m_jH9_>!%X~4 zbMf~1R>HZ5=NG9 zDnA@=kVhA9%yY!jx8yx8(J=Pj7-bvcY?!|?GXL?TZ-tkqv)j{Pt|6EWQ#9oIaim&l z{Z2Zaw=mVdc-L@f9_D6&?X))iT+Un3=S#_)wZ)I) z-mI}(H3qE)W&v35cVeF?w_Y5k{FqU3sb6~~QL}>@I7qPVWAGeNvUcue?AMNW_?Jaw zJ?<)~~-MAc2_e$+$!# zD_-bD&>4+sidf8DUugY0ic4JYt)LusP;+kCUpZ|Z_^=a{o*nGbz2H7y>6JyXDXp!! zlY1T^F{$_X2*x9-UJQ-(oZD}`lBc=Ycwf-eVW)7D7{ZMvtA~Yn4PBkTTv&?PTRPIgy|;@Z4psORxT!eC1bxi1S%#_%YIg0@web z5gFaMb*@G{`Ry!sd#!AmRaz7ZuC9+|B%~-5mLDo5YCDB`92W4&)C}69XDW8~5QEE- zw#R%YXcCUykC|(%OnWYq1TkUkEc$+EQqI_*PL6s<{1i4c_Hq+wnO1?pLkIXmJf*Og zSJJ^AkN$~0V1bMm9lO(X1Wys3uu7R#V<1r1>3SDCJk9bUMl|7iko{|S%=uaxI*~U1 z1`n#~k^ z8}g{t)@B&WQukK;URQZr>E7a56+P%DfviOy?>s5_F4wD$wjSnc*R4H^PFO%&ETe`O z4g>%I;5y~yxB~!K05T~!D=r!izvPFpSG1!|GSX~9z>i8q&$*2{gdizu927)&H~@&5 z8wKIo^xKD4<0?J2z3yw;CpsW+_UyJ<7;@yoahrAx#VIkQP#Vv73v4i?Jpb>Zjh7zlt z)5c(TB761)xV|*^I}{zne~8FOfWBVmPEHCy$jYrZLny@85M=lE!w=_)8_w9CTSH;V zek4mO5N6nY2@FqZxEL0l%qa{@6S)x^R3%AmD*^)nEe5c5S zSB1A@+vsOV7fJN26U;%9&?^^N`CLg={7pl!)jt`lBICkIX!ak!&R)HN}& zZYx07=8)}uH#B990D%`RH0iLyW~A6uZJdd3aK4*aK(K}D0&_eBK1iwb1upnE%mBFa z1cvbMSqZfbkcSPZ43ze0JL|c(g=EVTLEoMGvL?NT4Cj#9?zREPrR)COYVE<%lrPly zHYqu(Eouenr(?PW+6NZ%-lzdQS*2H~w0d_zo9pkCT6gpmi#tyy^R8ktq~nCKf`H0Qn~oAD9kWeCdvt~=jT4BV%@ zJ1vIT^pMAjzzRSPFd70oibBsEpWj5wsUo@eG{bdfI0Q$t7JM~avA$EqHw znkK?(T_vUTzxiJSlUO!z)}L%T352-_U<9E6_`q;ZCQ=Wn7PAzH(vR)# zYh^;dR)f7>>yct;jAg0KbRnXohFtSvFh%ISlq2<@!kM@ z&q;e5(lu<-m%p@KHH!)Ogpd}vhb>x(zN}FnoF15YbmB02$bEqs&5oEaCmL0>#fp>D zdVx#S+U<3#z_+hNdnw7<%Y5Eo=ir%jkVB_HTHt+llmuQbCb`@Ft&wtnT2z?H?8*`?dWrM8;T%LE&3fK|bRgXMgY{l^%xc#3 zE2aJ-!TLioK%i#Q`_vwLZ+n@`?MDyfrmm6|sWo+(5`veARL4k{1a_l*UReMceBZI!` zF=p+~8DI44msC+qZ=2rwAhvZs=3A?X7L90?=YA!k4d0M6XGXu1fH|05J$mVELTOD?>20z?co&CM&wU8eQ?8)f}FQsBeqwHJ|Z2yp0aR+-s&al5qG5k zDS>n!zn19seaC;)S_&Kk*IxZS>hF*qfos4C-vgk^(b)&p)0RAt|8wW_?w#lg>t(A3 z>7Z*#VAI$2V;hJ7{OelPyYRhuuK8&DFuTy}#=1i~@45l@`Br^|zAAsJ0jXZL#`P?H z^L$f)eV>sZxff8&9Jg0z0=K{(-z?z4XXKwTIrgE8GzZCKf9I?uJE)=9nArM#31)>JE9X9yEkx{3E_F->T zY(@tG&x=B`0S&h=t9;!HaN93rr@c=iH%MHYzAj?(f^{HH=yV~i`8CB2HqTI<0#pwU z5$k5p5=K&|??pVZUQ0$w(HlbxDQT!8~$W`6%skg?!#=vRs96O%EHO!#0eK#n`S z{WcaY+5pJwlxQb-0_cpAqufLl_<|LyCOdIy62?G<+Ye%YvPcXUDqAzLd=AfJ2l+FE zBT!KUucwS8dV4-@@M=A4;wUM?g*(H~@ZV3bExNJnEhUWT<%@EJ95@%TcjDBchR%Z2 zb{=}^u3vXBp1tiO-uYX^e2BD3J2%+?)#Dl)k00^^Hi$7D2F^d*XUrI_(fUK}v;ZAp zFH)U*E+(JG7$eJ#%Hs@GYWn}+=>WZBAp15#cX#qdjM3_4p#Y^`yIzZG*ecmJ^D=U- z>?YU+vPmD2;ajAMojJqUsalb5gW-YfYj$Crdql*p8ktv~IK#Te)_-AoI8LEkS4+6s zN4okI&cmvr#Md9N0LQYHznZARt^soI)m}_cYyXTsH1@XGsZA9#fPTpa@!wmPHas)|LyGTcP*L~PKYnwg|N^h2GZPsV5L5dtL z?#V7aFpg}H$8<`=i42aM;<-gSzi`U+S8r64J?f94Hvu;xglhb?V|{}r#-#ot6a7!+ zKgB#GJ}%VAoVSaWCO<-b^QF!TE3J)H_t|H}Tf@k4Q1Dflw_>@Rcaz;AR)@M!qX z7oS-+CYiEMIN(;|s{&GXT`_Vv$L>NGjdmrY7IMcUc9&Qvbjko zRo^Ln5EXA$pqkT)d3?&nVk?F&DmJ@<{u9FpR>^RuTwUBg?6_K zpeS`h3(KJ$w52%Hu!>FzHrw%dDsWQ;@`Pe+)odmMsi)*P%iX3oY6Z&~#7K z_>a6jQxLD5P737(^)ZW={L`xcd}v$sZ%O^j&Xd*u=r~C|nL|1p|B@a+F-XZxmz8eWS+S@^?YI5P>u z8<2>@*4KM;Z2SDY{2Z!3e20z%QF`9J<%-#zYOSQq5Twn0`z8T!UZvRXMuCh3yqat= zbvU<<#2LfMxCe7GUH=bN2daMpxUtQsF!%3v+y!(?`h4Xxa-&oTLyMlFSE#~?WMKuh zhr(_>79j-&stD91Xa!#wG!0oR_iqy4Ndekn|AhFD!1W6e{~ApRYey(wgdm2KaIqjD zl1pU?EDHidpG?KN1|6^bN6LSu;UDTWb33a321p{-hd;T}s(CHHQGP#9y*df|9yJI> zXFHZHzwy)CZ}j*JC3M=srS{uD#QVD+|4XI=^z!y+xGO@VN{fr-UTx)3PsfIzwF#~; z`+_^K^ZrMTLn;1}nEBI36=q_QYzU)Yi8Hb-VHrXH?(01Gp?}=o&8aT4js8WY|C1Se z_ZyW`K3R$!f+K1k$hq^MSh;B+WuJzu z-))sTb99b=TMu3H?1qzagCZOTXmKb94D!?1MLkKig5H zxtu#%Yvc=H#iwQ%dG`NDsr&<83$?!o=nh|rFCCN^FE=cB2;z?;pu z9na9V*@ScD6KA~?fSJQOvsF!S(leF`QfX3%R{)4P!t2Jc%{y*0x81|n6BnUgg0edJ zI5JE552o*zKigFsjAI+nmaxmqU^eUnulF`kS6+YnGBGpH*QYX%DuLJjgqiIy4pBt4 zk3u)O`(h`mw{)c$)1BAAeWkYw8{@lO07>Lm{|jSU;6%R}*%U#JD|rbu&5gk9{(PD7 zaVg>5`h6m*a5QeW`@(iJh-wL<=0wz5*rJ9x59$nJn@ILq0!i?I=iJL}@N~cMH0jkL z@yKHK^NmaAp^VF($l2VsSDS=~|BPV8%q_wl}%eu}R_$21B17a+s^Z@C}O@$>i0 z7WAqjib=?0wSvF{8HJ25mM=0FHT<_wj$jgx1S#v6>#O%v zZ`hp3tP;tKO`8ppK(xj7wr;k`orEjnWw>?k=h@F))oI8x-|pJ`RzDRDbzXgho13cL zC%IS4x(Nry1S!U_au;wXj1^KZmTMqJh}xkTc;_j`NN53d}dJ znt#;!2QEi5E%^IlA{dbXS)&YKt(CLvaOZ99%`Y z{$aA-(0-IMc4Ktv{g|7Wf+HDq1OEI4F+yPAC2Zn3g-1wsJA!n=vo*c2`m|$%5nyzI>Pwogb0MDcE4AU@U z@MBTjsXt4V@mpOet?Y$~%(~1b<3n=k3%zx5c9Em~$k)9!X~+Yb*D~DX#^f&1Mx~hT zcyKX_NOgj-`J+vIC>rD(-?bl}U1eXz#?TM5Vpi;aoG@;nZX5AKS|ni!J<`J$q6!Ep zjWtKo91K9fZkt}oN!O?AT0{|1CQ#3W3asFm+EWxtcWu@$R_Q9*pN zCS%sIimM}14ABZoSDiexFGdE&i#kp3AxK{rQ z8nwjX7ml^{LWH)st~Udt<+;k;7S{(8q0iaQcjtLu`X@GR^Jb>TH!bw8K1#1Ax? zi3xvwya}Nn4tMSaPF&NkSLe%omJAbz=_0M#IvIF3$kiZ}bIy2@+cu%Zc$d z1$dr<5SJ4^EOb-I7`d|-rK+P=$qH;(HER7Yhb+RNMx3cEFa?mP$!Cql*L1=M7?yJW zE@0kx`SAFnd5r}6!5dHh6d7RBMBWQ~yS_J`bRflQU_D`t++aPX#Amh^K)W&gU89wn zNL2hMau<6zDDs0dEeMaCxfv= z?Obh*+K@ilank}V?GF8#dzoxW8=?UW-h>vMSQ%NpJXSw1T=9{D?NOb&U3x!#{GUbA zHa#<+-L9qN&gq&H@#Tp)JSU!1+8G0SzC7G;O#0!PrQgCJP?&T8-pmnJEfeoP>pPsU zx)^VM@Afap-OH@7RlGCb4{{U6UQQz|(Ur)!$2a113nqI?K<_s*f5uG~&O-^ebIkct zBIvXA0-A*3lv_H?a^r?9{Tcyr#?iw~+*uOTYOp)yA;MfrArWdw@!!Wxfxo%*#&ToJ z6XW!>?`3GUk3g|1L} z%cf>eD(vXwf>#~|dZfeiB+vCe zG+7A7k=&uiaz+?TAIpT~`#v-iHr^9r0sywzJC5z?<()1=q;w`KZHrwv`v zrdT#78v*ZtM)IJ+aJO?zLP8F(qNBh8#);p7dd|ydV}sS`g#L%%kKqIilHc}B3+p#L zXUB+hJw6C>Sc4O2JC=#Q8tRjMfo5q3<7~C|=Yp4IyD_V&eJ7Sv3Reye_zri#nm~k~ zzvCeDxnHAd>-->Xr;j!Y1Hrc7zH=fe;$#cIKCB)rJ#p06AxB#uZym8wr-xyX3$J3a z{WQ1lz?oIhqxt1BBcHGO4fO^P?X(>owbfKR9rK+vIgqq=(b;J#QpHmDko){WQH_mP zI%R9&YtiNthqC}#)!|c5G;$0=JcZiwZRt`un7p>@_geDDBb}Kd$gxtw8<3MAd$fZN z(Uv*jcS3@9d`W-WNoU91W{jHbJz^VB4E3N?vlm>TK~)qLt4sQb-n+!W`VJ9w!<@pP zxWCi5d@OaNqU~wY)LbC#x#`}`h#1@eMy2`U3V!JS@u*J&dN4P-N-B}g0q6E z`}5(I>eWg*yZVT3mL7I?`@l($G;#-6F`-Iqlu~u zFUO?QsfG$!XS3iXmV~X{6%D@^_-2RR7+9;7E|T6vkr8#e;yJTm}^swY~*9Tsd}+F5*l1@U@u@uBa`Z85%Vv5bL7VPLlGIn~J~ zS%1L=A0*3Q?Y`%8k$6SoN(bz>mnn|ErfMzID)`!qz=uewI#9$T0N=AYWQ5Gc7uu< z#ck2g54Q+<=$DZAd_D8Z6q9H++L{T($*{UBB^}3!(W#asMG4|#T)!NX<`0Fz)$z2^XwMP&+{b13Q;*gj#1qrpn>YSxl1X zE7Vs{1f4X;$eWtq$-ncqZeo#ILyr@e7N07d`ez45P;0=>0W?SS&nU6?G(Bz^IlbJ5Dj(*x9=(oD?LmFSgcJH#VsOhq?|91G%UzxUJ5?$ zZnhpv8l(b+4X0^Qp?^!H^(sG*@|I3@>;#%GhX#I`Mmw=ewp<$NN4%! zrQr8)=lIk4n(?vj)y#rkt)cAWoqcX&O z*4Xnv1Z4CjsGm@YXj|uVj&Ze2#t=XDcQGonw+%D~a#vUbFGBfA%+JGH%DH*N1=!ywJ^!KiYfb7W~TyigSYMqq&zB|3RR+W+aZV$inS;}OhROH2n3D{H9yP6 z;}RhyZopdO3rM>U+4r*9Xt=t;<+N5#8>X8v_$>Uh>77WD%n5h7xo3RC})al1>%}cy)K@lepk1 z_=%~nQhrnC8ZyjfBfu_NDjld0l;LryyXq?||6NgMY=c<$Fm`%HDU_zsXx}@iQpXXg z0fw^~^5zbrsLMOlU;g=(=FEMpR*JI-s*AjoVr26YKXr#?(X-hEkUfI*%x-FA(H-A~ zBA>T?x(l4d;T0kgikUZ)8_f2wpBPW@tBowi38wD{jh&~I0FI-&hxAX%zs-l#zq-c@ z(C6G{PQ5ue`F%4DnQbSzrE`Ar-B#HRkc`_AY;sRTWR^QA6)aUr*6B<+(hR*?$}HJm z&ne&_l(&_(e_l4~Mk^(SD<8@E>3X#ZUb~SlaB3(x{m$<{`)yNL-zKhc;}xZOOBHW5 z-Wf2%F%tG9{2hzK9=A6&GkX@vUv7Z~7lw$Rs*yD15ZmgN1xHPKnc^DA%l8WC!In9tai;JsyuW8P4+xYragzp^hZv!nP26?QjX;NAXF*jSjmKSSFPKjikw5>ObY|p+s`8z^;-l2A z!>_9@l@VqPG`*&3$>ISG=ZGq{sb`1uD?X_2_O@`K%JfH0?S#ubH#F1@l?=`F zShVbXHSWH{X8_z%=d0DuSk}HYnUZFKxS9fc9hQFkTycD!82K8c9b`C*C=me)29Cb0 zIYMo!PQcDk$;@&1r=p*zp+A~?rfKGvZk$k*bl*N9#=x`U#SG+xmV#p6EW(mbp9bCS zf?9kUVo*{DFM4O)tol@pVJ*7(&?z~(bNiu-5WxgnSymvmFVJ^eq<3;wFOTpP_M9L) zLSmJ8+%kvjRfny!T1Raa2Q%yfA)b&cvfhgWr-{I_Vcjtl%9-4R-2a?Uxjb`g|G zAB9+-Y4&nkN_L*f+3cez9V(Xt9zZKdV)wp6VJKE+;fM|ZfB>E)IrCL2;1^+bdB(P> z!ira&28`6I%&)=^)L=Ghb`w zk7y@);;#FOgp{!q2w`chJeUsokk)aM-;*tUTN7~^Fp@AspYzx`-YoBNKj ze9DQQ8c6&K`z8s*8{V}C1|(7B1dwFfjPRb>?r~t!bQh2=@N_nwO=@9(r8-D8V&vFc z5(+hhO8cN_f1->jP`*CKdSj)2nt@lqo=E55nM2EvG=cu{+((4ee77L?%Yb^g%z#ic za?U)&#b=1iy7TMilyP?r;z2)y(|OW4>HafA@)?Q(39*c!gX{IqEhfA&$@&KY!ad*#N!p!W;SGj2kA|k3rmkZyy1`Wm& ziMk46x@pl=6c`P%rg?Ip4Up`Z!*BJz6eP@Zm{Kf}`f$uM;X{cE2(^(0BM0ftPN6R= zVueT`-oLJo-dAa$&IeiA=90-o+Ja;u#|aLx+o4OMTpe3Ei!<@Rk+9}AV#wWT1cMrz z0>b#zPrT4j>NSGF`LL8SIZoUewDCk$eEp};KDz?X14nsSd~HKn*W7d$3}6>JLRc(Y zf4>BLrv=2*z8iHfuV617b7Zw)pXr$A35PiX4WbR{0dE#8)kXWqViyhE|B)*B_lqV07kB!vSx2^Tg>Y^Hld&)%5K!-0-Va6V zqv93@Exu@Q3D2Aw^8rIx8_QMVa}}#ZrXnH-orweI7G!mWF`?NNseLIA5jb_Ra9aiE zej%9VJKAxQ5%vfX6nj3~#-Omx2GbLyVje=9Qq&1OJ~mGcXNsBr&n5I}4ZF}zCs0Kz zS4m6^x331LC4)OIx1Z*}mW{*pQQ~$%bd?D?1A)X7U~iMvG|s;zY0^W8foaF$yik^+g)7vHlySKf22$bh0@xHT_g;F9E> zCQ9x7r2r^Za@*JJ1FI^F42NiJPsi#ite1@bI!LQ%A?J6FuXi@cDT(6Hdghw7Y`+S^G3_6oQrBa&)`r1to zXIc&gl{7u>&R%!sMyB8K=-QetRx&#YoH7+*)%x|L(zA#;?AevBMz+9t*3cB9m|pAm z+BnX)n2Q`S!S%AL6Rk~O?)hyJcjPJ15%z{hQ9}-+`B&R1qR|d6h_-LGz`}x-XU6i z@F6+tF4TsFIpn_M6@H*cPrUNGGB4Bz$FlwaT1J?=vIuV16ad2?z<(=H? zgMTO*9~Vq`|H1@p?0^4o4RJo&pwIDA!)(%I{lO{27`+J#^Mo9%giku}Fks$i zY;{!=u-ryCAvAAfFT*;q%pQMin6FpQNDF!}2|F&2y{lbuJfBx>CYws7Iui>=Q6q*m zXQcad(R)$XmZ5)~_;CTA`c;44c|RRADb+rXSQPo{J;+)Ub(>lS4Azzy!3^%cHd_T7 zQCX};%5*g+ir3p_Ru@n*{t=rmImR*b9fo0jYZk9m;VkP)A{(!DRN!g4ZLn7Pa+7xg zWVcFAlSCX%WKEqF)nUzjLVGhpV3`+rv;cWn(piEQqP-|Icm#Ep@VDEKaheIH+9H(=_U*_er5TM zZq<53%bI4C>Qp{6_O;@y*U`{b?OD(yBR~>tGeNjschx%r{Rl=7y62^G;)<}+Ytm| z*PBxe^{sPL%ctlPdCY@zD=!ZFs=r0hAI%ih97Lj~+D63IXq0dPZd0H0$+|TluvTQhq++O{Mb&=>5{aCcnv_tIQx>oUFxG6 zGFr; zJU1j0wRw3d<{ii4HY+Ni`)ct$ktU@ER=eXa4w|A2dW285F&jF)!O-%X9_H~oBJIizzwL4Yh^0>bo1=sbhVRp7MMUZA0(7OVeSTi(GcS#= zhy-YiY^;EK_2WQgKhzBFi+u}6bnXdYS0A&%JfjQf*|s|Ipx9NV~?tBYYj*XE`UpDRU` ztEYxqWrc7rtn;Q(9wQVzDcgk~s7;JNuz;4Jur}v}7BcwxA?GaSUw^Of*9q0FLzBS6 zUKncrNN@Izgmva$9k-4XyZU8}eEJ-;h2Fenz~5Cwz}N5m>^@kgW&&Np(#qMHDDkYW zz;|NPn;q(-qD#MI{nfLI8WmZI*V2UrEND|#cGGSJ)bQtteOT;bx{Y*EW$Jk$hRF3q zt1W~PXpJ0V)fzGCDT4F~h-f6Lqw`C(^r|o?*U<5FZB@yjk)}V{cjFQ%l_J5X?Wp`d z92FF_bhUAcUj21(Op&;PI};ou!%%Z^hmXf2oVKaotA@`#MM7ds#1J(n*lBNYq0@cFgf_z8HE$EN%I>o@_jfwcrivgy+7nq>Tf-WQh`hUV&bUm)ZU z1~53_g$p620F99ZZwkJEVc98LsMadPH*C6aNe@-OxQUpXLn6STGuR5k_cur6yqNoG zmPS(S&bq_B1TTjJua1W8F08=vr3#Z$SFQ4~n2s*yB2B7dj>8%4UxX}l0O_{+Mz);c zs(p8H4grf-I4?RJ`%wnuB~7oHc-@=0SZ8JiHiegRP3 zLZ68a=ieUgcnZ`JIwU6TY|%Byc?d(0(j!NWu9os+INbV=nq|4jTh5fPZ)oSxO#;ot z3@SaW_A`#6jExJnk-Noh4oeY}t$s2(B%(ptW4l|75zOe6M3tgi-@l9L_DrBb!)bE; zN_@uk=9UnImZ;FW$cn&i%S!dgJTeIkUO!~F_-YERGXo{h-S|cAS%Ny0G6?m`PHBiI z5;qK{y_haU+6&IkbQGcQ6L#1^hb8?z5aM@TBO0p1C{~PjJ^#7wXz|R3a+jGc;Dm58 z>K9m?A0iv(S{5lM^3o{Swe&CHc>)>5V|E~o3}FWb1nK23Czv;)i_R)OHZL)Gh7S460s1phi60x3?&ijpm9EM`mWeLXRG zMfMFx5^ejTZ+&~ZMbMJxY z6V5pYz6mW1iFY{u4CQKqKw9@2fP!~j>G;Ji&KN?SY}YTBaMl4bnM&VeeL07<0HLM} zl)e9}HMjY6W5Gpz1FNa_rqv03Sf>-TI; z;c-(;>}x#}ahd`}^&X|fse4nbg(MF(N1UfL#UdHl-Y;(fxZNDp?dX~41oPSpEmKTV z$B@b?%(}Tp^ye=-uQCXp$|!9tg8Lhj%56{%bi9$nt_SpQ03r@5a62~vX8FOca3oy3 z^4KpvFiyN}Knn6<1g}?`d)zM~(JZx4C8V;2lb!&J>#>-*AJ&=`;QWwhA)wR3G6^f4uYIHLV{UI`p#!qZwmsv^>xAI`?o>16LJeq~ z^2F4QcKq8~`7D#Hg&KpR@OgDf`P5$D*zt+=0Tk5ER}txA#ZtovlKXr>%(qHl(LFAk z-HLYc{T49(qrpQP;cExG!|#qvgUf}eY8`d*xZG%rv{($+95FuUHFLYwRcNC&jSaNq zQ!lwt<2wrkVz);Hea`)W6U11t?4k@ww=oi6723Kt5u*uBD8B#N&RK6bv0*|q) zL@uV4X5kg$yKW4H6(TCX$5)a#VVUuVMcgHtl@@g_R{*S=xlCDaTTEgTlvtFEZuLw* zT)~{LkNCmAxXF9!&0@Z5wiu}ENP9Qa4#a%JW0fs6^e&Z40*7;6NQLiAX00P{j7s^C z0D7RWVROvMCeZY@qZL^mY}Z5Lqvk?!KUEHDTmNJ!U{dwoW2GM|pbl5+>1zWW(9CY1 zy0HsLYAu=yd=I~J)Fj`^94-Q7K~{t)kjVFggJaV;YiV~(>;Bjd)S?e!@Qw7QGuHQ4 zho!7Rjk(F$u|oR75a13Ct+96BK0b8%tXevP&4Mo9_acAQ}xGs~5eG0C>Qcg8NlAn&u2r>y(;% z?PDG!g*G7j*>S?TL_Eb&1{ z@k?3)WMGx{-hpkv&^E=NX(bW872aE*I@ zD@vuw)8oyn+)HDude&1>K@IQLMXw6G=%i&qC?Tg^3zdrEo;CWb@T7F(*XU-f?!hp8 zQndK0w(@%@F5<8;j|D5K)=_}1Y>W_)CgkkzljHyiXobn47>2W>wC$9nT!p{`?2c_4 z=#6h88MK|y7Tq0(9Cit#+NgG;WhbK8_T912q-c3Hm)C>n&Ip2#tI}4!{wSQINK>*f zQ&{wUudjJbi}{TbG@UX^^m;<pfAz9CdqK;Xbt!WjG0Jn$_BkAQG$Lm zVkcf)KaYwIv;9(SCe8(d9Wr+7hb3z+S8d`w(^`6Pn;&a`Q-XzHb2fQXw%9*N0&miV zYXGpRalRA;+Hg4rC3PFwP;Wge%_A;n@6ws0zD@f8&`!g#Tdgd64UEu63+33qexZYC z2Uks^A8$XG{N|zs%KU}Q?MEvnFUsN!TOnoB+D-N(H*)KRZCV@JR5NyG|Dr+M&_^{t zx5sP@+9u>kJ?<+aTeAFCi+OewqTsi1i5`27ZWX@;AMy(kvGvjZlk^%Ihj;xKE@B#- z&SGNd*=ey*FuYGpFVQaY2GupQomyWbb;e4fIPO>JZ!PQ<1PIAa@ zm<9Oda+FhlwN$(PAo)yQsDL%60x810pwf8(OZ!{i1+Z_w?e}=kzvHh%JiDKZ0xyTD z<{=lw@}J9lT50bNCscnd(Tt3@%*rT^Yg*Q;(75)AUCg9qVmJ@bVCeXUgR2hkaWogVrU?fYsu?buExP;v= z(VLQ2QY~YAFk5H%1{5-gJ3sL`&-6!L1luyCg)>-}zcr8jC3MMd&hyppUiJh_Rxz6M zszJ6IslN_6MnMNwOFjqKZ4jm45ZUeK3Odo;bo-=omT2y`tAYu)rn~h!*lvmgV#Dzi z9(2J+B*?%w_h5A&k4()1^~cS3`;Mz%Z>CL7-DNyiaT5y0@9<|Do*23su(1d`e@VzM zZN(8gCt(v9X<H~%i&-j=g__O7o)5eqcVwyMkHm)9^v)2B$G=P4 ziDyk`r8Ep)kIxlLX+a`+ojIMoKewUb5S261HcGJh*I%v0{mQW*Zg_X;-rSQ%qOVJD zTf5oKE>}kO)g|6c39LJk;c#W)Q$8?$8R$&GH5SC%lzxI$#XXeUj@Ks=N z4P!pDCu(!%UDman^A%j|d|lN3nokYjI^j!SHL_nEo%Re;DUe`$za_y$FFEoi;gw5J zR)KgPCkh7@#PQu6OlPk1g2U?*@z|xB6Z%I>QS5UPbzdp4dE-%k$uDJ9n zZgFe`0LTHF{6HM_s&Cr4D>`>rjC{+*+hIpK5cEnVlMH*t0t;t=6a}74T}TybNP2Ng z7`->cyBbH?a99UQ_zjG^5E7xXHiyT6WRX#c8fyD4p=s|ZCaRS15- zr=X^17>ZGx!*spv^OpV9jp`)TOI!ZcB%QT9A{Be^_>2K+R)xsVuR|r?>Ynzr(y*Apb|bJowYC$c zL5LZe>9$zYZVtyc$kudGy}VFh$#$~%cQwyaGm$1tdwb4446RPl!7?u}#rf``Kk?j_ zj0M3VkZOKj1&WbZmS7(+j+qaY;S%z+m;MyJF!I zPxe(0hVu-@spS_2%SB`STHu5-M3AM3iXAWiiDMz=mdL#%-p6%O2@(=Zw;WRpNp zXFr>rc(r`f7t_!c@u{IyKg;4RSSnt?UEZ2IGomFVGy0P9av+hon3osruw6ZwJfs53 zHuz~}wlHgSa;3Mh4KJ*m{S|CubaxV|;b>2=#slY*6HrM|Q=ZbX&Avp z*4ci;0VhsA5QuA+EPX3N&|$Naz=9n3LSc5FdLzVINRs;5^_yPF>(+Tbv+%$YjNj3K63Cl zUWLXtd!x7H)P!Mei_1;#fHDk6J2sJMiG3Mq0O|n}QfbbY#=M3A|A+$K$MjY;SBB}* z;{4btr733&M0LHEgXnloI5T>WK3pW@|CE<~LbF_O8 z5WcSbqMCP((daP&14^)!Y#NJt39#l?kQUPmUu$0xo#8vGtQqs94uO% z$h+SUgzAoLC#*>@4^mIe7H$=kM)1!*6oYM>`}y)C$|EJ?*rAZE;Bk+i-tgrjTQUGL zI@C@rOlequTWwwzOc=lGigJ=)rME|2pV4czZ~L~PvO36KPcyy7-oSnM2T}qX zGbN6K%_68YFd51;ohPAy^a9EebtJSl5Le{HsRG(H?6x*!m2RG)nsc=o&(Zg|VTxBMIVK=}md}C~)mV zZS#p{Ni$AIq|&+_q6V^jy0r02363usw9Xs5a5xq@>@-=qpi6P>?QW;iZb)GBuYT3Y z^;-gY8PmpKLsDoCEkC7pkn;60{~50pc%Ogpp}Qgc!+fBqt(@ zB&z!Ac>4hv0Y#=X5oWh;1C)1p?szBo;x+j{yG~`XLn5*(nA~DhWIyDnf`Nq#?UMgl zi9HNM3Xj6ci3{~Vx4eQ4-oJCXBdRPi0I0sMuQE>Fz$<%z7tbNnoZ!ay$|)w^a-3}P zu*I{`OC!`D(r$wn-BwA7n7h*I`3GKj5_49u6zA*((x5V+r zH%j3B?vthFeSCSV1ZccEVB-_!E+&_AKjN2IU|G+^4kLYwY*KX&&AKF`#U4Td?Hg&3 zva1_bUME|4wz2KTpWqJeCaollJ+hTF3V@u4BXF1mvVMHbds9$mfhap%^q%JKbIT*D zfOCXHNRcpJv|80Lhx*vh9F()G1Yw+ZRuF-m5nN2Ace^V|KOXvKN|T}U?8o;u(#4&9Mz*B#o9p&dy0ty5_)>Vjx33Z_IMX#H=tyAQ~ za)w36RmjLM?c8HxuSvwibrwLAc;ua;?Eg04HaCHc(=Nix&W($Ue=4!du#Vw0$lcVH zs2iw4!TQ?UJOSwyVn2q@u^VIq9s^q6*`#InJ3hAXsA|GxhYN7dZtkAp`0DwaWk{ z{Yq(ofxf*aGlHoQAyFN|x{%o{j0|fd!g46A?n5FEG`GBW;@tr52(^=#nr0kH0Dz2- zg1v7IQ1790{dLxxY9LCYwiqLn?+NSJ%=o$cV-l;11iwB9!<~QAL3;&TQv<$VlQUAN z235>nL5uZZmlywY4t(Wd6IXid)(!!c1nllPtz{%weCqKV*lFvRP>viP+ArvHJd3O_`u z7X;*Yjl=5EnYdg^f#Q_mef23cSHbDQ|B;bls;92!%QNtlN02U2*HPEP8 z4o3?`r!x=nZhv1F;jP>SkZ&)$nG-}MjIgpQ3;+bWx*SDKE8D)CzBQi*FHilCH$QWn zc1JEOs;Chr2=lJgz> z$~lq$3p7Nc0E_G4N;xk+=Qem@S6-5V_fG^mp6i47&F1+bZ4N~>#=zSsk+q66!?s}q z&M`MzC9ug^ooJm4yZ@S($?9oK3xO;BFFc&fZ;AlA>>XF(8AO-nYWn`JK8xb1-)gT%)$=Gk81N~Dz6#4WI|4g z{2s^?oiGpZz;U+>6)~zgGo_2BHSU+W=tbFz8{?bPC!D~T)eu}>Ddka)_0Jc}_>pgX zFZ^l#C!{aS(Ic9Lwi!MYG0+A$Jc~*CHV~+YS0OxlAGqAR(V}XgM%yMpD#$aQg5yTF zW9=HmTdwHh@Y}*%Z7NJuDTsp?4SlmLj^GMiB^6KG3&q(Z8}@*uE`@v@7Aq3M<{Jpq z2fF#^J~9xa8jIc^G@4i`O&-@MxlH<6zEj__QZkeg-X1goanGQmfXWWDhlGt?2s5lt zpVPZ^cB|1HwLjWFzVo}Gv^?Dd*^G~Qdfjba>IWnD<-(f^CRwW9qfccKDi{sSN|NFxX|VE z|A5n~YKWH+Y-NH~7%2tgN0R-a3m4pmuZw>uzX}U#s~O{{2_K7856Zd#2MW5FFN?gn2t1l1Vq<%$A(Dr@7Je;-P zq@FAgAJPP0zDxg)`NtT$%x19`P%Hi~{+p<@7d5Z1AMUS1r15^Zz+ z>JxL)rwr)ja+F1!3c-mCDM4P_RDuaIS(!#PW=8zJc({l6865e!(4xlte%9!j=wHwR z5othY%+3MNVgVF85)*JzKsV^08nmmZXXnM(MzAIx0QaVYs>d)FYqpe_UVL?8DM$lS zho5MB+P~cAL@#I0@KC@(C`9q3u3u0>heIG*2D)_97ROkA(+Fxja=n;uct4gf7*43M zVH^=5m*hm)m_s1joiFsqgsD2Z2v!+RsE^Y2qRR&O0{?Ie|MFG6P0;NXbjI6rD`vNb zKVfo{L-)+hc%QUxi9G;&zOr6{ex;YRFZ@K;eY;8Xi;z~@@#kW}8`$U^v;=l3hSIaOvw|0(kk`9_&2o_=zn zHKD#AdG$iaj7*9fmbi>)Csv>j@7kT>o`lZNy_1ax8E#4OM3B!>G@DD(_$^V0^}Cg* z2Sjxj=mqo%_7*W=8AdNmkppG8Ttkvc1DC;$m$^BZZ@|D{2|}J3FN50ZLOA8Y)*7!J z(pvWjnA=J)KC@+lFlgUl&D2dSI$qqLd6Ov&@t%`M3=$B;kT%eM4`Kg;hWkcM zvJ@5L7WoyOE#ql-CcenPER28@4?+_OpF=(s*3Mk$GBFjb2M7f*H()HtY}MU94oL1a zeTVPiN7z7PF(iGgV`B5f^~s|S?b;retAmQDt62lKivUw!QU`6!Mf&WByP?2=wkJIA zCFY~er-$zJlSM{9eA0gc#dAb0$~n7#8Qb6HaU8N6pMk>?N_%W85uBnMCFeno0}QFj z1=X~XuNSwYO_Qh4By;Vo4H-sf^necZj;2-H%>v(`mBom8V^f8u6p* zoP~Hp`~e#KXO3f%eq^0^+`9@g*b{k$U0P9YTaA`&ouuUfzV z$*}CmPOp`x=VjTQSeM81wovox0c$>1x}vXArwf6)*DKzqxr1SgX^EOc0%F8}e{p2} z$GrMl1g^tkC_b_cGpX`Xgkm7@CI6)X-C&Os6Y&rlDu92qokVlX_UMGg<7J@+ALtXD z>Xf8g{q%rfQ4I(*U4%v^|0l6wGw5ACGnu1|tO% zhuR=SX%_B{JkYzOEn3%xwTb2K>(-urPGNrj+$4b*LA>uG*f%3MSR2E#y>JmY%8TU~ z4?027VvJC58gR>02O;VB4O+jd+5GNfA2b4A*-oXq=s6AXpcH8ZSB4)?(IvZ_n9J4h7S#n<$#GCQZSbB3Oo)azQ=*FMGp zjN+&<@{CUlyZP(&?~emJJzGCR$fdynEp2rTt`zsK?tTxayDG(%-oNS^`gY3E zqajRcTh>xmnkLojwp+7N=hT5mEQ`X9#Qf>8MFLw@O0MEH0cb*xubq!Q%KJJ z`$YeVgZqP}n<3duJhp%Z8&dt*Fr6*$1{G$wsRIm1^T&RjcR^ClqeV#^6GBJ-s!E^> z{^E=G8_MGKdRy?CuL~9$=oTUY$wn`gl?QGCJgQ*W&wehyUJRjH=>HZg21D_e)C5uuf~$W^i|-|TW3b|%?kLGONj`h z9zHQbxiOsuq3i6!!uBjagI;>?t;d!jq;CO}a4$Ap2DjBWfP2cU*2V5uYx?kc=SBH1ZYu?`n9j2$Krrqe+x^CSX* zKmx*mW(lt;&7-D?kHM+xZ`u_tZQ}Ab%O-EF)v$L`Ua|I6UOFh0M(A1_x<6NCITkol zaxi+_;f<9{l?tG$o5Vq4|G(J<2x{5ors<3S?^I7JU{>*hfVUu93I{*5Sj3P4ME*bT zC!II*YIk{LY%d(#_bViZKu5*d%WXpE?wj=rSD{sRlk7ag3AvUdcB?=C2 z5GY;vdj-xzwYUV48w0AL9j?bDE5QkCq#Rqb8OHLIPJHP5JqgQ8pituVi2jLqDSCE= zl=QM({KpR!@GX+pH)fC{4ucgoY(xOCI@!CD;qall=T#Q{tmnZ^|7Jb=^T<*JhQ=UC z4|n)-T7%Xb#Rg0u#cw?<&B^^1+TP9}ul_(v>O5g!+cr+0kMoxxo^Pxs-@TSh1sJvD!=KxjuVn3 z$Y~5)a@~%87VAItn3>br-svIhL;b`6DF<@Evjl@ukb4wX`nln97IpvuQhQmDo*+Jp z)zU$5yRwfHxY4yTV1V2f?yJ%1 zYPnQRd+i?(3X?p%-$OWcyU{=Z0=eJod!t1y z${im?w>x90vvUiayM?QR$ePm={FbkEZ;pX~tf{>+61tQ78~AH7Lvf?=_bq!$f;ene zljv>1%wIqijF^ngQlJ(u`9}W<*v$KB7t{czjc)*Ixo)v^#zl8dIiA#yAiHUIpbaGi zNcNxy7HX}Ru_fvN010oV!S<-kjV*^m z!|5`LJk?KbD`AfbK-my+8dRu7rLP_FJT!Dr)B4M*q=7>Hju3sug8ncJ?kxGVj;g0; z^E@)uc8&8DW=#udA|5~#8KL88CpuVStx)1daZL`ntPHd9y>|9p9H0a+eY~4_$v!jn)*#>k={~as+Jgnq!ZGnR+M*a-P4aoc znbGNf%fN@TK*nO!(tpmE#+DNi&iP4d5!(?D7&Ho=e)@Y57WQ_>o4Ebi z!;ORh06D^BMS>P?jU=DT5Ps)$*gL+q`&P|&2Vd-c$4zN-ycY{)q}kJydUsQB6t=fy zAZvqB2l+CaH)%Wk$T2U80kzipLj9>im7;^Ei@FAWOY7Qy7B!mxn7;gzQzG{+@sA8r ziqRfwovJG+G2VY^IY-%K%VAQ|xe)G_KVESHGoKEzr;%$K)Lh$U+&Qu}LH=88l&T$f z=Lz6E?YDS#Z&NR)HOC1N{+eF@Q6P}W0+>Wx-DF`ZM&+==(26w>ay9TF59+k+qP}n)^qyZYoEQ>x6YSexvtEajG2sk zj5{+?k`xmwb_N1c7Zp-aQ}{`g{?S`&;?9l1sLL75h8)JAvvJIDqB);+)}AUjcC5CBQ%G>jtp+ zVt7v(_7&(h;LrE1|LS=00t9^|U2}Y#eAZ0(#`<3D9D8f=ulqi|Kz+x3mjGrydi-h* zc2@X5KNNh=zm8w&0oZ_ymxf)tkCQLLubum^UjA2Kz%vkF0r0n2_lN?DePllNUQ3Pv z%f21H0RXnIj(NgiAJvbTSHyL|)%FbF`c?T6aieDv5b}ik3Rp#)@OAu}2hd*Hy&>N8 zbN~*&Fh4sUcOLl@?>90QZqrhcRnI#&MW1D*9wT)3kV@ ztxDO>SdZHORPx_QpB*$bc9yHGZ8q+usql}oST3T(&gU_~a=>GHIqkOMn}g{{MhTxl zm(zblbu=reA1+Zv)sjMyJMaC>{eF8AF2Tjst|8&y+{!fpn?DOI)^>aADl?C38S!DH z8n3S8e2V6nMtG?WHD9n}3Yh%jllaP1ah3`1k$4g%%%NP=p(Q28yKZFJ(cQ#w+V^Y{ zM-$YW5KtXOofX5wK`Lp1kLhgA-f0K_e$G?s{75mezhtg*8?JbtIm()jte?u}1$CrX z@4?9n^d5_RqMos1)0|tS`8wBkzcn3bb9p`BQdM`moz+C z=LiEadgid_*)=<89Evu(C*ifiKtjGN4_EC9e|c>Z5(?27By+A)wNzx+BA2TPeH3d+ zJ>UhZ34xf)i>U|yh^dLQFB0FCNSXNHX+<$7;mA!oK#vyDp;n950ojv+>Ks?w1&t{- ze-~x(NOAMS^Jd|nr_Pw{=ma`AOZ$$KalHsv^{Aw-OoHY;(xv&&)@{>G8v)ENjA#tOOlhvb{;y>W%YB_M{^IlU5y` zVHwm7D;oYf_iI^LJkBxB-jk$uzXW$$qnn*qm`nAYnyWwjZpY)JU`I&vS3$!P2f0HF zP|>F6PeI_ow3$3GLQ=oRv#-}Zv#@u;CCtT^@R`uJ1Y zmEL+9V;xQMHAhR-e7lAp@5XzW_gp=rGBLog-(%%`--o$C%W|-;4iFAm9v}q2fh~Fn zAyi1;91Y^nrBDGO9uF-FyUNH#9RTlJiBC@LCm*9p`|?#=#;^0JCq@)r%GZK^_K;kA zq)Gj$Vy*zSwe;33t%A9f3ne!^u9e`=6lObR&dI*bEwg!9C4;6m8T{}X6I;uP2Gd8W zfjps7@=d>40tQey)zhPucK?kSH9qy}$>?b87Z=|vX6lii{FE8mpDaBIG|v4+(DJqT zZ~IY?4fAW|S^LotV)LtqqWwvjV}uP6^395La2`Zt7m#SmlGU2U#&KBQL=@G7n0E2} z=KsaKf1jwB%|mAuSrI-YnK-idAPMUmrX^S|WDGy`X#M_FR(j^WJzqCO*pF8Cf8$9{ zM@Z1uCdWN*oAOIQQi&x8(es}mq@ZNtZ)f=iSDaU)$)+(L;Vk}}WozBK@eGB&(z+&} zU{2d-?Dg3db-3~T;v>;}@yq?X(TE@#hW|n(`Uy9^TuI4gx7U(RqLcx=GW`l{_A_JI zbp|+$ykR*30vQ3{GM&esv7LG~dTcoh2d|Gs4c)j`g;@;(w+wafD4q}HIeen{?c~;B zcm<;fUMYBgi#7B2|K-Df%b_Ys!X-xBXjl;JBhX<<^t9w?x1<(6bHU9Q^1o~4UoO6| zTSLJ{a4+90c6naG@GO`aHc9adGtL!8lpaEa^HUmyq(J~#Aj!1f#7psh^RjHmO)g#R zaE0$)=`)}7P!8P0eAwW*Wpk=_BX22io?f9cbh;Et$LAygYszx^u)Lsmonnm!&fAy| zU9qkGl5H<9InTRJZ%s%rV+*LF7Yu`vkY^`}_?Lu}=dJGZ%I0L|D`c_W+h2rC92W}P zgiU0-YO#L{c6Bx2WG{>Z&yL>F1p~4$iP~}Ct=2i>Vj!@(IEYE%Xdc-F%@Vy8M$;A_W{2183idZkY47UZ{YIO4iWkCGf5w(2^Byyx5sUEsm4#k#v_NkgVk?o8A zeYpg1xO8eUKzdbCQ`SGr)Ut@R4z8wdUobVy1_u5JM?7Zo`lYSAjBN)EuZ*S%NLbH_ ze&*g{!G~w^E2lBjFroerzyG)6`)>WesO+T?87+(>5bj}5{z4KkX|js#_(ya9#q019 zl79t8&Mfl31^WNva|J+U{{i?vSbrCq|2J5gZBS{|ym0TOEm+C?===nmwP2^6^^N-u zklHr}_#+S*{J_obmWFY1!yFgr5vT$`0_SwtRTp8oQIRC)kfesd(OH#xR=~1i+Zoqq zW@&2LJ3h|X?bd-5jTh9tSAa!#gvGV*60mnrwR-x-3j7@)hr?5;Vs*I_R#>K6&rh(jQxSo-pJh%P^l0J7VcHpJPDMa8MI-eG>*k9 zh{Apk_LH=Nk(_?cNG0{cg%~Kga4C35X)ew*7l}=q1{@7MD2*ILwTUXlK=6hNI#jyW z+JVyT|DU2}xWIlQ$SRaC{SWY2`cajc}RLPAEp0FjI>aj6aOW@|4YyRl_?P&+Tnk)DTNV8 zefq@r_yQ*SLAB_B*2T!+^Nl7Uvf`0oY?~e%%e&?$o*~x%@T7m1=*X+5A$)ibhHZ{N z4i22>)$tgmhTM-K53-4x%CBqf{ExtZcKzYI=1#%i9PK}-Fa6*BaZX8suI~P)wEcC` z`2BxeAgHXWN3l@82zpt44IJ$)5`zM5|!<+)WEZZ`qN`CM?{OKxiZx>i(ZA=X&c$4`8ip5CQ5z9ll) zaO!k5igt@n!ILz0xOT0@k+T!Sykj3#xr-G*X7y?a)R0`JIDa_g^TVVsufM2+AI??> z|7i}1zR<5(exgI{@8`~-I2`4EC+)drmBXkb=fO)o!8@=6{dp%W8-s6fwo_BflmJ9B zk*u5NtAeZq_g|N~mv{|55srSYDgb3nt~f6d1ut4ZDz< z-_SOWo$ku`Mqd^driETMH77q%O++dN39JDZfd}FjRTIM;K8{wzMX=Rn+CKJd10xV^ zL{65YN3yp3S2X6}@SwU~s2Kp4OU)4~WNNiB9$Z6NVOo6e3cI-?=N|jS>B+3oSvSj% z*d+TLwy%DAf-2#m~G=>+_w&@^h~hao;CUj)-+okw&wqu6P zo+jV`+hTv>ZvR4_SB`*``SdZ|&Vw0}uwH|?Z0}dsq_4OEy~zDMiwjc`MiQ)}d;QF6 zM`8g-$mDRa#~!S29Nw}3M~c#mitfU`#ex|BY88|bR&M<6?SUt%u@qV!QA$RdCnMoz z1z6Fr=jFp?#rig53@T%OF5s|Ke z!nr;HY;x3 z2(nqOE&|r@856eI^K00fs&{D{cytV(+lEOT^UWOSa?kAwJ>9}B-gn6_P+?cpGIn6(G87Cig_$U!u>9+LbZ^MQ<#j-=S= zuiACvEKXHf(@yQZ)-T5=?Uo`80x~om0Z2JcFf`qEybyJ9e~hQX1aB*g-85%TI{5#5 zSKl+~*^3HQ`+(Naprcj+Q=lDbYFBK- z|2@5Ca_x%X1JEU8=#hF+YEK-Fu4|K}1@t>HabmLaxl$0>4t6%8U9>b<}<|R#8T0w`{JTw#moUx`KI?2x6l*Bfh-{1e|JQL-g_U;lFxt2g8Tb;Q^%lBM`)S_eC?`C3owe?b)Wcfh0DDK1fv+-QZ(XKa6pZ z5O2ovXWhTd23>+xEjXC+u(L+DOcwll6OvsqRyLeCp;5@ZeTsE$<|-T5d;W}pMCg>3 zvKks&Dnpaop`dDJ$ImeG&B&YUyhH*Z;+Fp;#JQMK2YR~=fKZO?zK$h^`6gV&DTQ|z z96b?1tPI?*@~=nPb$ze{%m19+(Y$}G#ZfS~--NY+GXTj#ntNd7Kmk$Np~Vw+_Dy2) zE|8O*lpl2Lc3`hZvKgV$$Z+9CpIJfmsjY$PNO1d55Paw`mqZb<1KTxVh81XUEHs-J zleT1_-FxU28AmmS%r7xG@ze<_*A7Q(Cr+M;Fc$Y#QCO6zPfmec-!##|Q)B5hn8v*I zJ94ozbsR(NXp`hQ=WtX$JK&MPR)@I=K$@^`h2kpVY63Y#d-kVzQoyPi_t-I$HlCiwTu8G<3_;HxCArL;QK91na;C-^$r0OjP_k7aMoL&;O&YvbY z!km@sxYIm^jFB#sPaoqw@ebj6u5!Gwa|$`b;rpqVjEZiUHh<*6z+nQLIri#x_<{Ic=ZqnuFSTo~>_9XNk%f3M0G*j#E~sUBx7mPczBi!b)Jl1cEp{e&h^6X-a{jsnyU-_)LVB-$j<=ATlSsqyAYt59o+#?vb*+r` zk^=Q84+;l(LN0Pmh4+sxGe(&wAig`&IC0oAwnCu7utfb)duyC!&da0Pjx@Gx??+Zm z4aK7*{u}IVW!K9%-Vhrb48afw+bTlsKQ;iC_=~L1TfdMH%N`&n@RAhNLz^<5cNtdW zUykLqWh_6>4EBe0XoyNVhJaFZX`8)%=qZUZGjK@FQGfY(`WxZ>yyE6jenL+w%rx;s#ql`J1J0 zM<3jPrxzOt^qi)J=pYY0$O{SvqYs*a_Mwm8Yj9srAj>S`d4k|<5zJ>ZTmff6B7|$G ztY^uoPV?CEdH?R{7nrz>5uy4zJjV{p{cF9`D5H)}1U@*)jV$TJ%*n|_-$}D(n`gD> zSy)IZ#MtF``RE0*PSK76Q^V5hN3iDh!nTz3K=Of-hO3&AY>3b#{|)$(a@QQVyJeRQ zc#_{iajrfQ$eVrV+9$QLI`TlCY_4uwwF{}cR#YRtUiNXzt;(mbhRLTBrQ@ab7sE#;j+>MU5pPtH$d4Lp)iy8$!Y1Q14}R&3V@1)AzyC*NjCTT9 zl+s=dS1uDCd$IzIpclhb5si#M_HP`Obu2pC^fIq@+F;B1!+0}>GQ4{|HJsj;rY)Ac1SX$e zeaZ;z-5!K)*P8G-g84n< zWxv$cbH}aqb;z)ks0{R+vd!^tsO=uACD&^t=qZ7sZi!{^Ic*r%S67u<5PNZP#oB`6qiVeiNnG&8#G} zVun_Rz&ztU3CZ$?GFQtT^LC8NeZ=BR3h(<^MvvtYKe_+d_rM4cQ0K5mb1t0OQM*yW zZ`#2%9yBqFI3l{5ZsnmMQJw^I^p5?q_CR#sMB?pisqi%sY&nt=F9Zs}67L*)EKICA zDt;$rV=`oPYZu^ICpp3|SmLC&-`!R~*1hsAM;-@7U1}?NafcNES3f5qMmbvVb~jFn z4M?DKL^a28i;KNd)JpGa36%n$?qh<3aAsw}&Ge|LXVNppZ~P)~N7B(@vb_<2WTcbC zauh^(*voK-GGjgsqL2=U0mUuK$S4pRyt5cK%FwB#eQU)5QR|x;n%c4 zsYMgQQaKIl>R#dO(Lc*5$1-XRVO-unnGxqx5i4R0!AW3fOEC4p0_QO_;~p@I%j)Jm zL#~383D8ueswHD);hui#u|*U_rZ`m>TA51a0_&ze1e#>S2h@?&p|)z`j$N z(#H^r8emrTkxne$(GQy-k`m^Czzo!!Ojs{9YeWe7Gu{Iviy-8(+BlH@atwmW#57RF zy0hvbD&mYTKwP`O?C%4Fnm||90!LP5uyCR8eoFu^lZCnT{Bhk9GU#*Ax%rUsMkbCd z1e$f)B>UR<#y!1Uj46u5jUU8>w*qa*Gy8DrriBvkV_1n@nM_u4$U$Fc>nriZZ)0r} z**b=vbdaz(mu4x~2TBO#;6l_LQe>#OwGE?aU!dTiq-oe=#QNyL57|O6-nIq9SJ}ti6(DhBXa>K*jD20nAMlIP04xtn3cQx`BmAz z9r1|rZv4R`(O=NNT%I}gAkmK!%cIYEp-jo}oE$9ondO<-Chb5_vv$%we$XgjWI$4_ z^6eGX&vz;br>T_|Y2zfTM^nTrGs|#~E@Pfjz%ZaLlKMHqNH!>^tr6bM8G{Rb`E+_GgK?DtIfKEMs8|d5KbFcyOy2O|sc#rya;dNc##Hh(pYH>fNkzeK zN#xn>asz7JRQB#+wdX2Y`cKxbge~dk&-uku0qahTv8) zB&={hY$rdm^+_BcZMZWvc{;h+=y{zg{xW_@co2g(MA1T<6btYx?Ai`oq6G;c%x&7% zDLS4E%1xZtfMckRuQ1ExqSq6CV0{WujYiF%3{2UT-+vxJi}PLUzH+@Re`WFh5%5YC zy9TcAe?a$TP&XUH~EQ(pGawN`)r zQ)X93{n;%WXe*yRQPtfSEhY!U3vo*(RaN)2rsK-~Ym^nVuVS^o#OzJpqniu6lf1?n z%S0Ioi5iDVOPzY1Aj&sSRDp*Q=BHXhVc&oX$4d4<&l6*$mT-q_@F`WJ&)NHDp_BN% zBWm46`-br*`j*V;ZkDHPfA}YL8=@)OsVEf{cn+);+&Ks`^Lif~w^}0wos^2b-g%^# zu1-|^Gb=By-83Xa_l$Uv_vS#n{!AENps*YM=!S4fvtqd6^=*KkO1xo4uKLa&I6`|~ zn~3ffDrCL&P`nQs*|%T5gU9E=2G8iA1DCWR60Qa zRxotgdOwOzbXZJ4hJ#uWqbf8Y=Y)qVsfO#fs?i$901;DZXi2(ZtJ z>W^0|ZQ3d}&}cGJn#~)X@a`;|Aq)&)qD{gVPOZKWNOcv?-P+I%R6a%&pK`aHFxN2} zZrzhM=u+FsX73;{xt z0Nh1U?}nE&S*m9BHN^L`pOV1Z^2NO*Q*X0K33=WbTBL>UePaK}`V3G$nERMCZVWck z_2O4n@iMS(?C*n|Y<2{6zs|L*o$ymZ=|nPU{qdt_sA>??KIkZnjTH~t_yFm$;}JtD zdLW(N#XZ=PxMS}`$EH~a6d6YrDrs+Olkn=g6x`{ISS7$epcI_y%;6h;Rsq?&$X!$X z^|_PH@_CrTPv@vXNWPX)id(Z#5@K9(=f;y%8lzHCNJycWimDDIW1%)Ip8bN~bJ}|p zV_v2;Ea6*~4hUE)9+YkRa&lyKgu;)*BAJ~yYcaoxp4Gy0QbQ1_C)bwf7@kDcUG4tKy1 zx$g@MmW)pTtz45kBH?^7S&gI^QszjT2tMZHr!d)Rc7Sy2=%!$(=pujJ{mYxcjZJb; z5)ZW8d_XzW3&XDo9dS%V6IY7%3)1kT#H<$ONL!81I0Uao!6>i2Y^DiHFc)uqE?cXnmco&S z$e2pr1Sq2lwYO`2b1cwL>Y!SKbAzbl{NaVD9Dz!=juF9m{Cb<-h7Hd*TVgpZytVp{ z+IcC@EBm8+i{hVnUO&Bf0xj?WQ(VoIow1Z4LGa0T2#qIqU)M!kbAwo+#`8pM#Rh|l z`her`Jr2-#Y_csDGl4NvDaZpEQ)K4F&g@*Q!~!zxh)mNJWDV1e0&M) zK)1JyX}$9#xfg7fU*H+rRw5RE;#C?-D6Hz6NI6d?(;@;#@~MNTejMJ03@YCE zxCY%O`EhY4yGaln4HjCEKurdc)7iAadCWN0v|^x#?1sk$6qX39BWV-qb)hN5lBkXKZ--AzG3aRf-ms*>KX!ajm;a%j|9=# z0;Q*H59K&JX7gcAVp1nU-h$X`B2=zM8ljA$`evB|T@uRWB8&`y|29)Mr%30G5A>v_ z5!<1@VrAyFJIVJM4tV6r2{CEu_pfXxu(?UuAcxufLA#1*d!kYEL1NKeyf#E1e@`jEL zIsB@KZu_sbfk)kRRctH$wz~c>WE-P>z3g;C9uM%5)dPklDwm!n*5lOcpE=`~JxOPM zs|Q{sH74yO`DM7N0xMc2QZj}eyJ2TOZpLS$+aT5-O5Y!18LN8786>XNOUl+Z-08s7 z^plR#(mtj0iHo&f=d1>V|=b-|!ixQX>;d0%K z6ugfj-XHh|h(@cz(!Ig6RUhpBPO8)LON4qGM!;UfkfyI(P0z0)>^F>;0o%R+p5<4K zDJum1*w_A2>22(2+E89MnXeBN)fiYxi|6T4FtRcUR5WE+ijz1l8*wf)tcY;nm!Ib_KkI|OEdlx*)S_OajwC%HzqY147g1aPhJdyuVzq?u{CHk|rvi%cIjO=?zkcA6lHaK&0QZ0JDR)+}%h)h%Q6MI8ME*__APv@X!j@Jog? zieS*l>gnU?$vwHlhjBU2ELFigbg z>0G2678|p;thJAUf2x+#R-JH2o`W=f3vrg(@-B?Ze-b}iRvm_4z)AfC7xHlw2tYgH z=rA1aJtr!=vSugwGNO@YY1-1Q*4sD7QZQ;kXz45fe4%4) zehr7L9~YJ@!At}M)xXRt~p25 z((o|}uj~cg$Y%gx3Ni4V-Em<3pfo^$DZ=x+vmkqR6KAEv176GwKm9?CBQSB^cf;CY z)|yKys)i@on|k|765?Mau|WCyc?$tg#D1V6HN*G_@wV$vH_L`&LX#fU1U~mF!MG=V zBd?~H6>g938zzB!A!fhPEw9Juj_tdr>7Q=$Gkz2rv?B}<`?(>&;}YrL%sbr%#87{wN}Ch|WJOLc)`Mbe;Fx$}D#R)v`QxI#>yl)ikPK;O#WcW;Ozb^d-a?=vr^Jc>m`I_CP1Y;T_ z+D*`NWQe6H9mt>aU*Y~;$I)z^({`BNQ(0$XHHv}dWoZ$%18xjmy^=@>--XP(y2)vE zikL%o2Hty@KL@+eZd_Jq%UyJ;9CRsPI;F&&(~%M)#=EhaErIh~>P&_qThT0Ut(g@V zolwk?a;1qm8S($5!oaVQ&L54?MhS0_tfJS%pToBxdLM32sR2#JPI<)Lhqi)4Fz&QS z?p&Y`5hn4!9AE8Ap1-554a;H#McjSu`Q$}9U_52-jU^XxP!iZDKq?0f8>8f=mse+o z1dy@=XW0xJf3JG0*pQ+IBad>?N9K$C2t$zSA8%i$7C8x?`}(5|!Rmxq;Uf;j94wgM zG|K6^UC6ehYs8u-{Af7XX>o@lT0@!}x}ljjY^Rtjdni;ui@4~o*}Embc+6|ZKwGE1 z7nc}*n*H88peZ<@d6!g1TO%qzCsZ?#r-q|c7gRyoh~YH~$|eo6FqSU0_fb{Z%f@u- zv}fq7ZsG|Q?@4}CmL?UqWC@ofEe6i>8SgkL^<*mOYNldQ=$fN@8vR>5mQeA@$j6`w z2zoV4+RC&Ka}DT9*~W$LR0O17L$RU1Z^-PNGKqme+!p@$kVcM2{!LmkyE&SbLEWmI zr2Ht6gyq_T<=9iC@zAKM3mPJ9e}p5-BkR}0V|DyuY^21T#QD~GZKlY-K^6GNOY{G870*0Ovp#=+!U327$!vlWP(^cKL>AT zyfM>WPnO{NSVeu>llmzny6iFi433Wei3cxythN))pxWI5pKP^M7*rXcON_Oga6NX@j zAMau@XXXr=2xKmN0=^Nj*VUZmeTAFy)^=%XdN|J6$_$Jah&YKu<*oO_IkWV?J0fvC>5!0%%8t5eu#{8tQ@TvFXs{vT(*Y(%8FpVLdv@g9XrmfrAPBQNc#g9 z`nkE*i$9b?_R99$23`*#K^{%Iz9}4JKR?zAL)YGzS(;v)P>`!LE1zc)keT7caSr5; zsQqFZCmED&_#)t)u|CxFyV#TAM4eH(5V*=ur4EzSF-`kYWF?m{ zLGOqXAE+}d=fms`10mE{wt)JeOA=4GPp7YLjZsbiOphhAOQ2RR5S(Da@D}oU^7?D> z4+VSOrpz@BR*RMrGTz2Ae02NECiik6f>#i|dP3o(=Gs_rG3HXjboOxL;LyVYqhF*q zMXmJ7Gs>;>e&h6DusFed&9xIMp70NUucK_B-P0Tmt~Wj+yjkuI0AInM zOHg_)RF55Q$YqXfB1k4ACfG zkGAyZE-zuWH8T8X$<|8??{zwe4?6=uMoXYG7b8e0q0`S|I~tYui0qzPS+L~Z4_dDQ ze+vEtf<8c7~yyus+G?1XCAro@;&7J0^D&?W+BugwSLJ!icu@Mf^6Z~!lD$n%^UYl>lY0jE{e|%D zEzJ_AN43QP`L-`Z-dV^zo(}1r7z!T<1dQ>B9zy45MHH(~SJpT$xQCQ&qZq5**JeN@ z0x6>l;g_fExgoG-0LkN7MQcm01aB^UR}vkyaJBlgE?$O6nArFoyBI~ zmwp=vdp`X;L?^o8m5E;pMrpTl~rQ^Dq=v zI`WBO>E?u{el~76G!-SN*Ty}Nn@`5ITovty&NG7cJ zp)Wp^I0Me;k$QkHrhaXV4i0J_49PX((mfIRetmJ{_CBCj5**3CJT^yrb}*5_yQxnj zX_Js`<#)+x(cn^n2hybZ9HB#P=7>K^23OA$_p7Vn8;_P|O%^zhL)nboFBJt5zJ4Ar_X5TaAi~^4XyR~k zUKB!m7rJ=d4!i;Z5jP3FecqUf@>fgP@s^*z!RZ--a!*K!!Q(Oh4)Q+*9+|DU4@cuz zQwR4Ra42Pt$4Fb@l))7S;)H*D?_r8G*qsr#T0dPH-2%BP8q{d553`oJHY`JwavrIP zsNSlDl=6DCd94aG6>2fh3*1c8ydL<{?uXAzaK~5jz~Tj}D*TF6NtzhDl~p=T9#=J7 zF_;4M+|Zxt(-!orcj&2vBQ;P`J@5PnWP&KkXtkz;zz{#fL(p0?0VX2Btxd&>tk0dF z4Saf#5d&~_U%P~kCf-&-*7kBO{d}87&vk(y@Yl;}!BBXAUbus-ahD-dbfU49oL!nv zE>rmm_ZLs0{~@N)l|Inx-I6uus(`kzi6skF`fU+jspXFf(LHvOL}?*8A4#K` zG(QUdJiN*>BXLJ;S$XY0hX9TFlcd%iXd9yWyu9JB2@^|| zZc?GUy-@=ieAl)`3`@Efs(AxM4jtPG^Xi*IIMn%rOOI^{s*}PO3=opvoE) zJUdNDPK4t6nme%xp_nnGoai9GEyp-o5o8AyfwdFNLtlj7B3*U^?J6Xo9!BM2I)e-k z!LehRg!AZmh(O(Zm)rP$lrN;~=RKADqT}43vGSF+i4j3m5=Lg(T2GOnnSalf@*(tj z@fPPq8Id#z)%_i&Td7CXUjMR-xG2fGy_e#0jWYPLV=_EkwsZj!Q$dIf0wKRSN5?8< zZ8g zAe9mUzicw^-Q}K*xt=J=*uArCA|zs;u=U2uGZ|q_iT0BRflZ~jMT2wNNHYM$i*m+V zc`}9FG=&5uVzp>9+(n-`EGZ<}eDd9|AS=sj2F162+zZFUo@kq^A#H-%&yOTX-q_iF z%XaU#PCChwnKFO<&>ahSFV>tMB3V?eQj+l-mNStLVMpn8G2}*>Oc~Be6!QJHVdC={ z<{W8+{)o6>6Y4})g7dy)Nsm|b`W3Gz#DrVqWEG2uOmYtWv|3}R->)wX>kBAD`V@Wp zDous}>m7o{^P0P`?5}hQGdbJ8Sv!7uTBJD?miWv8BEawujWcWzbu4r^{@szA-tS>! zkyJ*JMKx{YRTKMgyb`XIC^$~(S;vtdZ&N)>W45pQ&X3Z(j$iF z(+iz5fB~YLmr;jU%`b2|t_xk1`(SgNoj>bALmpxd*O$Ln@L=sF0#i3;zd>!sXlHaZ zdvwu&qefD|lN>Qpat^?Udv_a|DHmLLFYRx$LU{+xXGu0^*NJK>t2Mqo=;e6Z2RK*OYKoQYa9APsqb&^4DLBZFv3Y1m}A6sHY z9Ran2y}-ntCn>5+l-2-}{)YNz4N-b3PCcG{QI(etzT_e|Po9$+UM0#-OmH1yAu_r+ z#+7PLD=Q7GrNc~{060xK413#mjP|3dE;xDS>JM&m?EteSv*XP}vS`B@UGirzS5QiP z1bON1j1UvzVpgl%YrR^{S4|gQ>Bl6K2NNZ>_ICKo@pZy2PEnai%95>9GSeboYbb#Q zjq&m=2DqWY=$c5$P}ww4vjxJ#x1|0Sn%iwMcl>wmF{f=mFA(de%bjD{3(G?#kriOa zvo9O7uayfjbpB59ez8|@6@T6yg9&NthrTdn#AJaI;`Pky4L|GA`HlP32cNg7Q2Fb; z3N8+)V%ak=e|vOeG_{fb9J;iiT@O*#eo-r{N1J31gr;@S4hZMh zOm}ey=gW(Z%R?l2kfcrf1uC zzc4e)GWS7BH4JDOp~EjK;6|y`4j+9cp&=VNF_6StNnR4ui`iZZSpMGwU$}}UH^|Um zDTXEQ!2P^lT)n6nkbB(#4LxRa$_T{vj;N~m$rh*YnP!xFwAj8}%9Ruv;05iI%(RE? z+7z(66rs_x-z6j?5(B{iDlxmrMuX>yc&#!36@`lIVoyOQ?E~5_cx&J)gCy_?q6gKT z_*0evluCe<=&&gX1SY)mY-!+>%TDS!xi2~k+EFSXss65NL9Wzj5&xhsxh+t5XOhIj z+KSl4l#_HVKbCF>coi^YrAP@3Vsg^eawPiXCl#=>abDWrSHyLAex_V$35UzL*ZZ6= z{XG#FzKD&c<3_9i<-i`=+oKT~iX9UUc?etSds23|5D_pm*S0-lZtg91*w|kRXR5jJ zZ1{^w!7G~2H@b&;=pN)DtPq;qpiQZ9&$nm7!`LaUJe1|bk5<+h645Y?)s-rtd+QRn z2J2lA!qac*l!Fcva>l9#YQXirxdFp7MsT;$U^TkyC%lN#A=-D0>jNTLW z(8@KYo`PC53&~#ij{^Wwjh=KL=@WIDP&M`mj9)?tb^^3q!8vF4=cM2uE&(LPhNZt8g&IRP1u5pf=sBC+b0H%n_!*pL3F;|Gsowf z$ISp*)}S_LnffvUWN!NP>st7QIas7-Oy?GLI@Tc>QSsp1MO5u$H7a(?^@2!yADpqB>_4en9p=; zJV*lFyacJ_ZEuNwuU!)788a4jUYZ0IbmYa~byGwE6vDM1)fk`@qMt@6SX-}}8_k`y zSD;^>=_qnkTS54&p*Xqh>gM9fRBARCqDyb(`&?Ip%1K2Eg()5WUq+H1Az4}^2YM=} zmt(Yek$eU^%ygM2=~Ex7x&M{0>OEWCO3egwPyp@+mnvou4GdOldtv|phNL<2m6q0$ z4gMv)XcSJLXHQtrCp81X1`xQH2i6X9Jq7@qi%*Mm)EqelmIDBB~#j z?v!kO@(n)EU`D2&?zQJ=`%@o3qscu{#%#Uoc~sa9L=PuH{y1?WOcx9-p9+}!;PbN~ z?ROSWW7hOn=%sBBu>uS@8xu0N6xqkri!nKOVX#wH8w=9rG~Qx`o`*R>&#qqrN5;l} zJa;8NPP&M`DF|@1PA}I@llZMhVZ^8MgqaMt#`;a+1mlOx@RNoao=ysnMEJXIBV^ zzmP+JBe0WvBr`lvxSl)C=|rWB()C6+43tBat;5&u?mjbifzPk5{!&zABtg~{+Cd+F zG2Z;xiZsoObl`(`Lx}LCmQI+;qykIg&& zkiKDLuNrL`+NbCuI8)#f3&U0zw%Z8-h}gMI1tJambd1LwEL=t^>nc39^n!*X5ve3p z6l5%XnqR0ReRoJj8*~g;Uw8LHSZ3+!Q#Pp(MT zX01eAJY^MI*jmF&$1IWm1!Z;;nbx)=I%vvi^M@xYJyPq*fgAcOyD^MjcJ7#CQ`3J0 zUTxd`MMVZ(+ou^E@BakAGC$2U&ok>;59Q4yWf1~*wD-n<>qj1kPHm(T$y-|2#7&Z- zd;k5`NrFYgh56eQ3v8oZ&l7aKGzucx+Dq6T@BCPNgO)?rjA3@wO27Klw>z8HzPRsk zE4fg-$a%~KEc(nB$i=5>KlV;pY-#>TGqA5DmQU7X*o)e(-pdDGJ=Y7C815(fXyd_? zpHd%S3QT>GZZwb7Q)y^5Xs%&`qI7)~lsio60;OaO-@oLG$%kFv(#rnR(jpnpcAu#Q zrvCz|97?F5pbz%h|=0ao1bx7So*&0S&pMKE7|n87iQvc$Qh`~ z(X<~zl3swL`2(Em_Df<9TjB==3K(TFZXrH_vf8?rEIasW425g-6hSW^7S2_t8%D6C z3Uv<}!w%;H_AXW_FgSlIY7GJq(^i#3aaj*JVP6w)&t^fx17~YHA`hIHv4^R|#xOoL zb<-bn&pTydT<3MIFp5e6*6MLQ0acDmvw>*{(@BNqv&}TdIi(uA;-4-}(d7Wvc>@#+@fP^N$KCn-)D2=uEZB)Bz7O;hy?qY z;I(H!V|vNo#ig_{A%xJ2nWX`15?N4vNxX~UA_X+sQ0aw;rCC|KT^opiQtu|Kd79gi_tn{r7QA)ZnCPYNW@9m>fG1r zFFh``p{=bM9>pkCqktv=^Fya$Irk@38O&j7i%yt4us$jeBL8X;Y)#?<=YSNH?j7~# z6U)c5Z|g5VV_BIgPGJoxaT6cxNGY0(FqS@UYCOCzH%@B*LYh1 zDu~R(6BBwf{?6(T%$UqA&@Mm3p#a+CQ9n#h2g@#qLItDfD=kGydS~6!6uKjT-GW4S zji44p!z^m`-EXiQwCf3Fr}yy7_GWxWyE1Y>{xzNzuE3q5@>0H%6~m2I>}QX^JFL$# zbj+!pJN&m4jm$hc`VnOClS*zx8McXMWxF#QC|34yeq*=Mvn8;M4%~?pAy;jC8Lg%N z#5>V7@fYZlx_x!Au}xu$AC6m4*oopzhXAxp95Pq#a-7V~Z?=nfRP_v}WBT2E(ze%= zyUuzO4I>taS@7DV~Cz;&Tw zre{N+i(ep-)0EYv@tmMqeGLG>SMo!fz=DvVgn#2DRsirH>HNPgQXtn6IJYl}BiJ&x zVY6k5sE~TK!7WE%S`Zm3m-D&a%ztCi`DOVFY|3ocUxU1yM`a@NyM=nUGsJ;4^;0YD zZ;iZ!_dR~SyOp%6(MkgEhK}IcjU5t0&;ikZWggeM02`BXV*i6HZ)N~N6V79+Oc8SOy!R96}AAvBs5(r>(Hwri5+l#i}0 zX?^y22(yWto4;jXV-RIDwnkdG_N(vBOYaFzAc<)9**EDqBkNTx$1dZCqU`y9)7oX(DBUcL4ywybbCwI6!Ed90MG8VTZ(EN^S%Qx5ul=o={nt>^%vkT0(eVzVT zj9p2SBJJ?#JMnu^YHb!}Uvk1GW-IuvnJ4dv|A1UVEMh`^8& z4}7=OMq>PHg4Tg)@A}<4mDDDn+KvDK00000009l#yLyoE?8r*V;SP+GGU{sme!|oV zT@{$-&|H2oqk2=!)Qrl&000F(2_%6V$g*`;pE-~i#7kgqPrv8a-8DNvnj>le>c^b= z=?M>#U;uJIf24fkn^`{BLCO2G^-DjuVe=}Nkv0Gj9q1`vQBVuv54Khb%&jG52b0-hQ$1KE94ay;Cz~l(2-@*CXDz8b|zWvrqd?ESDMj{?&FI@qJ zr>(jR914as*#)Qma|`@yk@9JPu^rrGDk=a3?yiMiXz|th%kLd$HgbN;BmCoXTaHdy zFbEchcZBX&PEe*=M7ToKOIfD!^DVeTaiOyePYD=y_jWY*erp4)RzY33b=#)pe5-tl z)M<@V;e4?qSQVo-hS*^Gr#bU|5a}1}8TMcD62lX#pZ|T=L5Cb0OY1xxwv8L*IyV&D zLu1>fkzB@Doa}IC24dpZ$aQHk?gj2$RU!&tAo`xwB$3{VMHgdt>nT+QAX0XJ+^HE(TWsZzgHf*GWNvToskpP4! z@2C3_05gC(qb^NNYLsPW`Zb%E^LPPxRQ8FHCWjh__3jc4Nk9D5&Tu$B zsdNGFplzn1pXtC3idUEGaqfVVk+~e@XHCHgj=m3iKLFJFj+(o)Zv<;?)`?d)Zcq_G zE{x|JqLy20fmo4ROtX^|ij7pO>Yq7MYc{hJ-=r}{|J~N-lP&)s{$$%ynt4laC=;2= z8lK`mak942D$j;WAUJIqY)iSZh~awGCCw|W3|sIv$*-z`@~p}IS8j%P$ueAAx(<5pn=^MS(TZc-eE8L%5XF1}DMU#hHuT zf43gFL%=7(m_t<8>UrLcq&Ef0l=48)6=T_=Tr>h#4B2DW4~QW5(P{YJKX zR{b+Rclw1kSY8cY`$`cB@!A>XKcWBAPl!R|&dxNz{uy3sewq(SvY*B3`%0Rsl{zBk z5b*HY)>vv|u0SY~e#oIJ8wtxoIkL+_IP=6-H2p-Aq)<4U(Vc{C;|!=z9U-zuP}>a1Wk~ zN-MMc3#mk6U&FyZHND7fDtV*_|MnO;W^D9zgl(1{FK>G7j1h|h>EMzd{teviSo8`; zh@TGgi9xG_#w}Ot-lJA)l-V8*-Z2qd_$mS%Vdf-m$SGJGv$}<&@W#6MkzD{V`fj`7 zCh&2S>bUFZwp8-cn2s)yx#Xn2Zng=p@$W}~s>MZ2lP?L#fZdzQ=@V?Pv4t+}>x$0$ zIhn@LF>(b0Lym00^!O=`dOgcEKDQEp6w*x-jR88xU7!rhdB_LmNG7G3Zsnq_|vXn{ZSeh6*j7`BMwl%MIBe7V{a4+qtyI!FHqtsJx_UWn@h$=d*79_|gyR$ARRnOf{usLUO-03|% zWbU8^;3rIPC7;Eb=Tr@ArmY!BEJPen9J-YkkaeDh_8GuxlnB|jX)kw*^;SbRx-rU) z6qJhH`*&#!T3)uXV`^&dD$qu@s6YwOJa>hX*2gCHA|sG;x-F%%q7Sv0$H)&(x0^$l zM`RKyP}5u`X0(-b9sNyyE{~AfWPAv~A$Ib6TLnfsI%?Eg{3iSj?UN$k;s)$95#*y% zJR#+@M&TGdj8G%UOshUWT8#g(IFp%eK$6@|7w1UzkoSbT*FcIQm@83~$053-?t$~4 z`0cdDtpk3&v%8V~f%_B%CO?MxUs&=Dg946o8@^`?((Q6lv5J$B!|}YXJtf4d!7aGa z$0&+0X0v!z68;uJqZv0-65`7rNvHE^fB+yMy(ch2?7=d?Tw2Oakw_jd_m$1 zr{Fl@md!Innu}A2$ZY^{5i>?H07fr;WPdMf>3@TfY>NHL{D~eefW}B8l0Z9Sl>0_V z6+lW^bZb)Hy_KP0QX`%jsE(fiN{NLrL{l=EMM*pEyi)t%Jeoh@ryW%3(s%1Ac$+!R zdwOo?Pd}kYDJ{fO7D83US>3mlY0zfRCUrT@7h|9bcl^eZJX^45n17upwtAy}r7h}w z)p{$)WJ9f0ev0*&&2MFsDaossJk!mVEgxU7LADXv-Wom22Kb_Raf6Sl;V?O#I{BB6f_fh(>7f0!_0z}A=SWRxPT+D1N^rqtEO6Xz%ZW} z{?hC1L2+*{7|aQBEA0ojX)cL*;}&U*mqVmx;5S;B1e3 z5}us24pjwBKlrNZkWIA91!~0MWjZ;D`1G2B*&cn>NxJ+fAFH*}L3`(#Cv6jMUO!dD zqg1Mr1nx?b;?GQAH*8h9sT|_ z$z!l;Q$`FvxV*f1-VVOBxhqKb^9MKWlpGOKVquk?5dj_OMn+Umx7lYLCH6ylncGmS zX(6T#8^y_S->%~23HgCS_e*GnzR2JeDIpofK8re%t$az?Q@@OoDh~f1f5{(R&Fm<6 z($<$xW{~2KL!ypPhK|I#JKn#hCx*hw;l$g6>vtQwR^sH~?JNBPJXJe4C$3lSI~T9a z$fafg1!B#5-o3^Ou{^K$JUoYm=^%4mf?rdpZ_l-(Ddf>R!8b0Ng~7b~QRge;o1`Z)jgLY!+C62aX%ci1$U9ys zmu|waR@{`L`APms@fh6qbRLiT3ZDrAIBmm4luK0TpG%HoCob5HKf?<2{)OB$MMHsuKdPR~Pcx%loHxRuI$WvbXZvBy7hzJWe)fP{j)Q)!lv7i;{owz(9Jd-p%5h!mm=7`ce)v1=`K{Q_z{It!noLI=CkfxX(&=ATCbEc z`({j)1Q#SHo<$nvSRXeFFtRRbK9^h{vbFnYoo$}4?DAe{n?;9H5%y_lSFG9iIdnTAC(FaY z1+cvr@vtNoPcfN4R*g&HhHWBnqZTboXMH|6ed^0u-}UJ;y!9kIQ4hE;rZ|569|1xR zDmBV&=`snb>4@^pT-SZPKr}eJ#uTLxM7LQ62s42Xmy74Wm&-(`0oup!Mz=;l9^VDN zH9exP-i8s!%%S^vL>|HGs#hLer@8Ak8OHGBps>{0rw~oX=M%(}>EstLm$vFQR4A3$ zndu5ZamB^IJJjBP`@JMd5xf&|&|$p#F<d?GTd$ z^I{+0(yz%Jvs(Z`>3fJO(gRwtL#g?x^wjBhPiIn$ju34+8@{c7O< zCmLz_INxwtk?6>nhX~RuTwal#-t4)?7PkKu8?=k!9pri@ECks zfV$+M%dXSJT9M4K%F4fG61z^jzf0kgJ&V<66dTPO?77BaDOk5C$HjE^zBz=cdzdqP zikZ>X@(U-oZkWJ>;ipFp$H|-Tt6{6DrG{8ki+du^hf*;R1zhG_aA2RPrPTrl3gYlQ zhpE76R9e{$pBM=LX8?pPY`2kci;{z%tmoaM(*`-ZmVvjQm{|u_k~!jq_Ngs zsTY)^J!;g5b(n={BMa9aDY@am5{YkBbn}d;fI(Cf(fNMI%h{9&n#(H3`YKex~pER#yIWVFwHO1#-SDscNtc~FGb{Fu zuw-Fi1GIW4$iT=>r_`2lJs97z5^NK_~*z~bq8y|EYAT~`OqeHk!96zwI!pa|xo zZ!RXK2O)hv2|r8GiTcW@UE*qNBrmX@yas5lW|E?!t%wmDX^NSLXi0+k8!k1lAmlj5 zM?*t!(6pO$Cu9v0=*9IbGjpqtUrvO%P>@0f&`$iN2{}6k1vP3o!1!@b!}|;K+cBRe zdYF%Rh2aZt2>%)ZS#W|&wik#NgpA5(>LAMgQoiCs(~Q^XRI-@hnMM_#`R<0`8IjP0 zwAG^CuCfFBiHDh~-Ps4W{-h_)RD(bVq<8v3M+?utZz!tsB~l zRt`_U(5vKbksFTqV#Tt%rf;$Zo6y#m`w!(A@lY-Mr|reu#n*R5oRZ~bdr6aoU4o(3b zM|7X3>+hP zBBpYDG7@m;CW30I4`muiy21pOp+3LQ+f?IjpPn<<&TJo&cs_jljfX*7-i;mtN|w5Q z?f^+#B3nz8%rU%qUkR=NQkX&a9p#)%!-;5DhpJPEY)IrywbmE;7!JRP&YmvoIo@=!%0g8TC?1Lwu=K;jSrdhOa15i(q*RjZ2B~0k;@O! z>M4r9Oa3*kd(5U_eu{+)i4WDpY46?zQqojqiF#;<9ovg`dVLjqvJBn$#@drsn5I{C zS!tnOZp~|n^^#cu$mPcZl(C^gABSPgb9JS;Wr^wFtH|NSi)1Fl&-aR+LZK7~`1C-iNs0NBD>fq|3U`b)%lqvvU8`$$_&D zw>ZWzrnLY$)Pq*;^~TG3CvG(AmY^)zLyHDdxR8=(fsp;)mAN&bI#f~qqSFWz0qojM*b6iGtadL~WWk>{X*uNn0AhC{}qqL|6IA5zb zrxIwCEPuFK^*ac9MYB+aow%eBX(bwydm5|{g=137LBIPui$a%oJt<={a-URaMLR%W zWaX<*W&Uy4WfqL6p>(g(^O==kBG}FFGDz0>T@OV8jJoBc2m6zORhlr}m=KKUxjc{v4mxn zED4uNap@zxYw8(l#`d*2y`l%seSgO0p;j4iG&e=N9B83MK_E>8R7K?=(G+MEHEbNU zmQ$j^ZViElb%kYOq)O13t zaMY`%|8ST6^j|f3XBJrjGYmL+biW32tu}0AACYMv1dj}wNXIxly?ub=Rm$hIAK;3XCfe zQMvL6ZMWDLk*&!R{J=iu`B6_($9s(iZ^K}RA^q%SQZe= zJis$A(;09jBGmTw!4{f}}_$+I%jiv}yOsy5U-KpmqTkmC%A4&oA=*@k@%W0nGoP3G? zR^kl8z&Byf%9P&p!FC~?al4xSEiubR2A zy@#PC$Fe>RAtuwk0ly}MZ{Y$6cEti{o>duyA`KVsWugr!0ej^a7GG5PKZx zHo6Yt7Wl7Jf)0>}LHeJ==vx|Xb8Bt2W6?3WU;p)9tn7PW4#R=bm!5#I`S;72$946M zV_KwxJ|7#nFY}IO!#eYm+nV`hxaxi4${#;4JrdmJ6C+r9++IH}P?Im>Sx3KXR)}M?hFE93Na}mYA#fR6%C=4qf4u{q9 zc7gZQ;1B_>TQ>*c|7={HQ*U`AQi@Hezhgjlnk~EX2(ZD^-u`SSq(Gj+=*H@9*G?k@XW|p1%*@~(?)G@=~PhOuJ zBIav_4J2$1PVk8MwK>yoj<{=#N4V{JGb^m{w=n(x4@86B_#`4yP39(*AT-8^b|t~! zvi?Yk%wa$Kly`0JFmwQw-nd3;DZLRET;el4`M>4pyJ)Ww3@mPUjseJi47xw~Yki{8 z&^wY01`Ei;Z&keQlQJ5LCE{1WDrNW-XW_rEV#^4$#84#^td~ug@(Rrw#|6aJjNSZ8 z%lRFh8+aNti=#?U>@wKTZFA>LYCS(Od>%T1jI6fW|lmGIY|- zA~*~|v(DKw7+epX-q|qPZ2+$a@LsY+G0Pg!$2$ngn3W*`Z(w#Sp9(I8Y=RR{DK4I5D+d{Mw86@1a#P@uKKK$q^7x)kmuz4-Y9@tXq#f;>)u%_>{gy zB#+Y>o8ennT&1<~2kgK1JKW}bh-G(5aumGUN4u{}3OKU@4PfQ+2TqVZUgH`*W00Co2~JP)rduYnXV^^v5B zt)JLG%wk&l=rv2_KA#-23qjRtvROMbJ;WJqBgJ=KIb6uy+K3isr~9;VjC9;6;Z{Dx zX5q(1j;S=0&ha$L8BJ;wIVT5RdV$HS;YU}BE|3dg0KhH6 zQf&lxE)x3UriGaZClBGHHuv2oIXsFk7oCO07e-NDj_;+)$ZNg|etb}jgsn`^he)*} zZY$YsYK-WS!Zf2{u(0TiI_LXhK|{VOgP*+)Sh6a}W-35QNP|Hcd?!^Sao zEu0S{2F(mzW}raViaCA`!4E=oVx>^`CMN`+Y}qli9RNT7;nX<(*VHr=+Cn0+ z$4vS<_^2Dg-M*y&Inb>@r87AvJ|&T$f+reKn&bvGWB!H!RXl|+Jba1La`U>MciAL& z0`V*SDPvi92KvQxeW(FLRi!(4q%2#zJ)8=C{CZWR5zERoj7I>F;;C3i>b*;8k>Z+& zrEqdvxsG#y9bgH-4ruGq>x3h~ChOQ&8>+GD^&7A8`w|Z&n}qC4F73-hAu8(d_Q7tmA~0_q#m|+w?ZGI&8P~)iK)okB*1{k??Rr)Dr9+wU5qR1%{VM*BOA6r=s^y3A!Oq(iwtQow3u zUQ-*6SFRI9)&aP9{wm0S3H(}B(=tD;zTD>71}pF%j)2-0D9vie1T(gGPz1@s&{7PowKeZx1lR;;mH)L2lmn=TPoeMuwY*7JF6N1 zX6g7>KlW3{^bKh1P$z`2!!zxI$bv1&)(hRX7``nNpUL#MFYK1@Z@f zQ@i}gRc<4CvNSiTgc!>fLsZMUsy8U&sGMTfYLj!&zA4(e*^n)4ds0%S ze>fwRQ#DX=w2~dZDe>Cn>ssJ0FxffgQZ(-OV&{V?Eo&EP`B0Bw3il(y5v(`()Fdkbq(%W ze(cx)Hm+O=46L!os(q=<%4dNc{@ba^lq&_>P6`Y1ogF;0Sbf0^Yq~8mIs+>Wiaf0Us7Zeb6&7~w2KTSX zj;k7~h5MrbKbg6v^va#SvGY7B^JqtU8$+tyk0pqOikf{&aZdetdD5$FUJwi~q@5ORUJqzayQ>iIk>P!*Zxq<>q_Y7YAS8EnnR{|Km z%hvY(J8R(1QX&Vjyuc${w5&6quifkvL2h|uH9>%H;+e+NsTi_S@y!-ew&k`r1&NB2 z`jg$*h?sZn%gxyO;+&T;VT0~7qIJYkzI$$+TJ;$-icF*y7%8$~#i$4JT)E0~yVR(L zVEfC%K7coef?dFV-bS>vIR5b@|5~Ug)k4!mfcW{G@7sJ~KPHe89W)tX3(?PGFc5kA zE_X8noJ{`lx%(^t7nJK+zbY_-bWGrzlTL(KHDnJ3SF1uIMy}2-`_;Pd`;Y`Dp97dB z9v`j0$gI$uZo&OTJw9= zLE?4-$+O)60000000000006gMdgGCa9otd{{Y5&?fHHrJ*=`^v){v0{I*@^s1M>1aT`m6;2`D&!S;!6M9qDR!sM(vw^-U#&0Y^j*Tfv%H#;mcDyLTp-V02M%q(E zicW9A`uLS(v6X>%YufD~ z9mTQJJD#>KYs|C@Iaq*4Y?>)J=||~{67Wm7Rx%us3pF&Lw8qlE$^KdCjArp1)el;4 z$^yn2dSdv%Su!B2-(eDF-RF^r&C^4wD@M#WObCmT$c&SyrvO0Rc0`HI9wWkP>G~Yg z5^@@Hje!=LeaD@TS&k{ZQxmGV$5K&E{7LC1sq8RzRb?>635^5 zg4FdTY5WFUHae=xLy);!5b#gbtjwxV?V98Hp4R{ISk~sXEA6N*vt<=og@`VMa|>8{ za#`)bh~i~}FJA|NcYt1JO zYw{8GADh-LNlJC_pafSA@F@@gj8P|&MOWR7K@#+!_I=TzoLEW~_E)#)vkiaSB;9+b zSJ#&mTVPb(rVPxAB3IAwf&`5~m~n;=-fNW2KmZe0Hj4${Oofd-`g8>LF{^5lBTFs& z8&>sTA}NA0x?(Kj$@23aD947rD3Wi+!*}_(P`CUFh)?%YtKAl07@&xKTTH>VByZND zkrkHG&DeK8)4GwSe}hBOg)2cku+H)@ywqN#HPQ$k@SoGR zH;_V8W|F{m388PKUn!SRtj+C@eQWS8H+WjaF?&XR5C%z3y)M%=%N->ocRV}-SsnRX zA)q~V|A;fB0<(L!Pq42AJCYxsh6j*)-kd7ywGS;5OQOMhXO#1ZSB`h)m|kc$QI~yk zb>|3mxOJeDmjoVee7R5Jf1Fwq12e-|dG-_w+Roz$RE25qB55s4PVGz@9N!fIu0&>tXtBNAgk%T<%fxtl7BSfG_|60001W3h2}b{XPD8vI#}pm@?>C zSIW}|-ELzZR*FOet#NNbOo)a}Bb!l2iKkq(7_DkCAB}nf)ABEpdpzaGl-5P4!(suM zF&(eKyaJ=O{E(J2hZlYkTU0@kB4OYF000m@>RpG>-OVA|w}2K&TiAi3GR|?+;v-NK z;AX~!;oNu6lOyUJ^{KpY-A%=F+yO1C$gD@-PXho_Uj$%z3NtkT|D?~o0o5SzZ=@uJ zmOlK;5z&updENW~-AV7?J}NTP%t!OA$5DCZnIrQ_bz#L`{4{93=Jq0c+h=NAL!7dA zr{r&O`+8Aj+JAGOO6%d6Cg8SgB2S#J=i5!SCMWs`$@BvRv9X>liw7nEDU5p~>*QLD zi~{v|A2hMf3XoYD;T-V;zxC8~J{hYZF%x{25vnzOi7@%r%Gbs|i$u;Z$B$NbwmA+& zU&&YruJ67m-s|x-5xuTo{b;w-t?UT#+fM%yumAv{_#R|In+g*1f@MM6Z-SiwnajCr&2)fx@is1<@Yv^n)m;e9{V~Wf-R?<|OPRskFom^fCL;%V7 O=m6g;kN^Mx000056Bs}M literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/admin/configuration/notifications.webp b/static/images/auditor/10.8/access/reviews/admin/configuration/notifications.webp new file mode 100644 index 0000000000000000000000000000000000000000..2e4d236ca773e1e76a3f691aa976edc455b42fde GIT binary patch literal 45802 zcmZ^KV|b+7wsmZD+_9YwI!4E~ZQHhO+fK)}JGO1xPJMmO*=OV4`@PTlQBUDrYt1?4 z7-O!gk{1&e-mL=yQW4^pRhDHVSp5As_9sXdFckzS1_ZYiONtl?QGOobt(mVce3*&# zyCvoh?;@~o&*KOF-H&zG?kOIL7rl#uWo|1mqS4Es&*~%@5y0YG$7{i7$$a(e);(Si z{)Uf5w<0$?VCw74XXQ=CkFI0)Pcz+>GsGzcj!3C|AGcd;qrI5dr#u z5Wv&NR*%k|&o$56$4{Oo?>kQtpGd&S+u$|l$I++B=hjR1HvXFr;0?&<003B#ndP|v zEPNPyp56Og=B)9I0e%6nj{*BU9G|RjDK9q9Jlowbo(mo;03Dwk&QFZbkk=eJK)l!R zNA;7$@-r1X>*USi$Cr26EFyXeLMJc*#TVW z6m^ezPJBLm-aWS84xOXCq&)Gw;_q~idvAVF_%H%2J`mqzHoDEX@_kYOgP+wO&BLsB z)o0xg-TgkvfRoQT!0)Sh>KXrq#|HrTNdA}uTmZ0l7#|$~CT~|;H=1Zfqbo(=qIFGX zeDXAv=|XqPa-f5Lx)Yzu6C}$z@>Q0z-LoeSu_&GQd%$?Bun!$to0(KB5%I*^@NgK zt&{>d4hE11z19gblKKJ!E_re47dpd3Ao&cYZ3CAgK3j)^LjxEKLhg5p1m%S}l{M zO4yZ4m&0h?)Qy$Gk+wj%0I7W6Z*int9rlAZjJ5H1ee-+5j-pDyizW7m`B&I3BgoDx z8vTffiZZ@g?ZgB{ofL zm`1K#e(zf@B)&87IXIvCrB|*Qm-oOv)*R&%C>0bP$r7 zGZV{TBNpcKlSD@hLRX%kpb|=|7l(;6vaD7_O^Snp@eD41LUH@>!;6J2{-wq-g64v! z(;)g-?xCPDU_!Vvx!F7G5WZ$wDIWF_5_7x%=f`LL3)PH-HwZVDBS@5mHR~#XMF%nX zFtqkMf88O? z<_DXu_j9uj@wbC?xJt=%2WjWm#`*HG+^l1440gALB=w0ODT8hs6`YFRbr{PYowO6) zkkCp9R>f-p@Sudn&LHZwh*dJ)D~{0^5I)VzJa4iGFr)JW3$p+oPGm;x?psP#k4CAe z;+vB?O>y9COm5sIP9H}L)ijuL%l^n53xVeNNT-nmJTx8$2$!wvDkxW<7l2-y z8i`?t#AV4EMsa^PQGv&-i=y>p-;(Tq3`sO!^k(Fm;ZX_a)G-j_&8Tffojvh?Ou%Df zp$;dx;o=t?L@DCe>N9<-L>>4Yl=^r&N90Y1at< zrTE#)F{8>2(ofDOin1jId1>mfCksP{Q?EjAnmfkT3S9$(wJ(C&IN^n{94`uAH2gPu zG??o0)*_d<5S%vGj!-Vf`6-<{hLjUF=nGNmEt|Z%MQ9aVlqe&8>7|G5RZVl66%98cNIn4T&!nh;)pmw)v9i^7 zb**jmGn2^uZS~3%Y$Czy$scT5YvYwv16j@G`G~AL4VDSF1e0RvXi-zqxn_KC2>%nb zIqUgJHuo=;tGf^#kciv<2JRQOUIR8s6$9v4^6GpP6~8?XwG7V7T;g;tSr*gZVEKFB z@qqzn0`XP+{|&)khCzGpgAMZA(DWPs_Yl57(4ki{qvVHhg7qCgOC6#LYglxC7~lZH z7N-_Do=Ol~k;q32OfX%Jsx(H5=q=4g56)(C(#Yf`%)f5<@90}#;qvYM#gYF}w^{#O zEZc>ZFLKm=aHk0O^^Nc#J*EE;uYVV@8vjcc!8H}#P0>GdX_@Bqix}Q0;_PtDILrkT@ox54VS`;>E+bi>>ok!w4}jmgab?SpCyeah>Pr0i zrlrz1pf7)pS3sJZL*H{4jw z_@=3CGx%ZG3oUPggNvc>GQpKSJcQMXpND_=5auG!6*wMX4AG^~ngT}b2LoW21872u zm{OEFU(-HTP>aI*Cyaa7miGF0#_81nxu*41VDf9zzWzdq5Q?Bk9D|kr#GfEsp;R!6 zi0a>ED@`_Lv8n~NxrsL?H)fCJRnp*1-mkp(&sAY+SOqfbRE7VM!rEOm(VPWRK_NC# zS5h{0!Ot=(BFdKG|8Q-&q)F?9cmTzO75gaq`w!G#xEKw1;6k6U(u=jTR}G-PSKkk$ zwhAKiFL%?_TXJ){>!38&|3mjB`2S)gKYo1}4Dj+0W1wgqa^Cl`LJWReP@4KflM4!9 z-i4t=ZvH1+v%VNPb70=m)4%kXXRTcqPO82o7bwJGvpa7oXwJhNC2GZ4^l}m8JdivW zQKF&>z9q(P7Q;box{XXBPX!WnH~vc9Z8qPHNZ-ujj2`|rr7Z(CGs-58z+T> z+*KAn{eS)6tiSm}8Hz9t3I}{9X3(2fSC|rDM!4al3YwryR?d1y@6lNhV!&z9s11k z6DCwn4J<3>D6YSCxedq~<(=%8JpHdpl(!IX6})k84UraY4LlEa<7}D%yuWHV)5#}r zt)R{5XJz`&I71BOX>99AL1SJI0@uI%>qgA~MZYF@%~ji?9yzxDGwI{%gNSYve{J_q z-KHRa;KlP`*#9SO{Y#;H?ZPM`3YNviz(MV;SCxk$7>jeI+3-c-3Fd^H*>E^GkWdAlB-WK(Q=>)&6`)$bCA9y9oexh*N zUDNs{Ei<-3_Wqqjj<2vt+-sg7&p{=&o7n~`Bm7(m&i$w1DttJ^eKh>EZY|cZ_SP4g zd=t}>q850|e^AxJCmt-y(Kgg(mWNTF@1?+Gw1>H|G7oGzw^Idx@Z#q!8!;gz_fJLF z8|^i(;G)+8@%Ml90p<;H6F;JOHJi|-qEhvCQuPLZTR5se6)TsJ#5JvqzT+5WogGPQehogov2}Y;1Pyn}Hz&P^8by=^o?87U zwf*iP8Px`7r{+)d_vC8q6Zrpa$i7(0BfV6O2b%`y$BZ=o;X4|&I94NvQSCE9%MS)# zp*SDo&cL6lvQHeR8e)*MjDL)s#z}TX+I^?Oz+KkYzVMd)*3Q3MC51ot2z*%jmkjZa zVo?^S*Zq1c2L>Rs4_o=t!z1$EV1KoB(6V*)5<-9g1<6eQdN9-h4@4V*K7-MdLfn}~ z93?&v{mrJ}!H4KMZSw}HS4Mi}Xwva08o?n(N;Q+`1t_qBG;aTg!i$C-qK;QJ}Ox z46v`gK9Ti-3F#!$znY`}HOU`xQ8~KKiP@Dm_lI*BO58#E5}-UHha`=R2Q7^r$5SpI z8g3hV&GW~`$aXk>SxtbU7WhbYV6%k}__Pm?561I-cr;kK6+j~(=fNDNO0L=KFH^)( zr>T#kAkleIPQitAaZjIZL4}t%veT2*ZHF>xyy|x zs?8XG6Y#Vb+nNRyxro87!4;WI$Q5j?-bI?ywWxeqfE!u>SxO!)cTHdYbXCQ2oss+PyKqbFru3ff-hr1gPU}jWKyGAp0E|WH@H#%p%eVfi7sCRhSSYCJ>zzQHVtQI!T1{8hC7HL{H)5MzJ2{r{Z2{Vyv0hbH_z3}U`OpMZ5XpoLTL zMxR4sNTau!p<0^n;MZ(4$fYNtfdu;c%LR1awlHi{c4eW)YwtQKUkD)aS`bTvAjc!Q zVHz2{lyc)u0GW+Yv>9X7F5y1mn4P;Fog2cGy`_e?!>ymhT;2$qScX^>mS0U!d7J9#fmHDHNA3CFX?&sGF?$)Y;2iICD zMD>X_H9(h}nvW)I)ttb?;3UiPR4DsoR!NslOm))@Bz4Jjw*{bGhFSnq@ED~>x$0@8 z#~tnf>bXSG&KPF=<6t^gQA1X;jE=mzp=s%?uOFpbyg^SV#uGPt_x4MtN{w-q#l%<5 z&;7C8_K4R?@8a~Z;wVo6u;}Ac6TZe zh=&_6RD-jUy$_h%0z>ET1)iDa zVttS(2Fb!jPa0=$XMJPzX*SEu@64_P(6ZijpL3-&5`;%ifY!zflpwVPd{d0r%uEbzDkTyfrz$|@)|9=_xI&;DMe z=&zEq?zhSk1dM9RBA+k`eRt0YTh9AF?NV2wU49Li zgjkJVv8Z^*mf^%G&66%78&qmlE0G2Ow(EIJtb1RPW)T8q%2U!JoE4zFl)iH`=j|$7=Oc&dq2fZE8OaX>?}+3i$SUx)s&V z>(0<8&BIoAxp?UV=zMrVf=N&KS4M66jKX!L?Kk*QvL5aLxJRG%{~O7MM!jJj8$@YW(TG?3ME24%+b?p*2Y?<^wWT zFy^XWiOP)^I;glT%vI`tph1J13PF|6wMaa-eBd79qBppfK!5baQ+ViO$A@kN@Z6r0 z{g!e&UTqGV8kCGWhPB(;eY^10WFn#04{T!r+AB=>eL}L44y3B&b!= zAYoa!-;42EOY$wWXJg<{uqsKN^N zGE*h@7*C7e=<^mZwx6Sv8vRK{>SFWW`#6J(Y1}{m^21HdSsZZ^3jvjLbd6AZF0kB6 zp&XcW_fXVP6#+d(&{JRA^oQ24L@Wjhgm|rA>!5Syi?#=2UA$?}gI`FAH}2Uyv2QKS zZ2+5h6yvQT)zA3_dRVslp*;^LD+HmI+^th8jLeUiyLKPn=cyiUP5R2TJfqMuo6IO! z0p!D}mD)`bRJtR$*S@@D;XITaNr#Ka2jvBmXWFjj*plY@_1CnpwRI)$;v#&Ae=D&$%fEMP#z?(YRh4lbpGP!EMH860K? z;y>?V*UZ~$XvEgFitRwI_O}P75>P7rPES+`WEHZ-Yc_&ugp*&bYG5n;D9bv(c%DZQ za5842EPkL|b2fa!y?m8>)zR|$+~I@cTRm!v6^1^hQJSuAA{?hM;8M`D$3uJK9qu64cJK1gaP9!Q8ghA$r1oueA)wEbz(0-+M3e7&7OkhXnX#1O|;< z?Scl{NORXk@OjrH7NzeR>N9hmAKVzH^VZaBMNpHxXUFnkyQ$DJ&d8DU^M1?ffr8zQ z_P_0Hev_}S?r-ReUw>~gBL|j6k{nFWnm2fgmuxT~yB4%%a}Pqj;|`;jldb{cXaUv@ zewql#!@(wdgks2G9zwdBJ??u(HRz4hrxw#yvJAQ#Z9>k9>+g7ReSxt>wC@g32wj-k zK7(L~J(IsUks5leQMbuvNn%Eoig-n)Sb$(~#FLbv@y&L|$K=X(%l;N!7Icy86Xk>> zDEyYjmyr3oaL7}DGetKE*Kq=Wa-E1f>MO%cd2rLK2Lt6E8`N;uj$1_g(epj=Tr4kf zcxaDHX)+x23ARf`2S6Z=uK3+E>&m3m;~KrNol&mln4a`gep;p7Zhap|P$?&aUi75PA;`p_dq0ZmkNaQgAnZxU9Mt?5<9dmbI(WPg zx9_-|;KH79{WnJ)uVjSF=^44bWP1kyd%xMeb2A-&I7@bT5PX2@R| zvN@#KP#0@HQl+cAS7k&<={qL-X#26)V3Jj=3lD|xQ~Y(854dc3P%dX0eng?!0Ts>I z>{=-I0_Akir4NvgKh$$Aiko5hKC10>A{JLXr9aObPY8@e_^jJr+{_i>$n?ji2$N5k z&Q7Ghbz@S;(x&|4=qa#pTY~Z1*Y$u#3{8xH?wTDV*gb#cM)sWA-)qp4rE=$a$^wN; zm)|w^O)SW8cELi|by@Prm+r+yYvpd7R%Tj6@71;S#-PRe6weennOLe4h~XmCMbtl4 z8lSj2^%onZ=@Kp6`yF$F`&z0qGn%Wic;Kg7|RV@A*3AG z`oiV866v1?H-J%55`Y^3B}GvxQ1A&NKyb__|C~}5>MLQNEubq_+F`Aj;JnI)2TuA9 zMwSMt`;ct-9nAHv?>(%Ex@xXkDz%xg84EI|jS6df*4c0V`?wFmqvO}{vm5}oO zoMu+!a|Ln6nm>-n6(t7NlVqyg2ZvaVF!R;PbfW^(o#XXK13TAyKh-+TE)rPMN(Axl zdfqcVt}jvd$=Xv{0zTtI8&xs~7 zO;I_ntP5Y%8i_aHv%Z+NVflQz#0$SkO#t`!OH8W*5L~#9CSN&a>l1? z97-MxaQc^o;x9L^4+k4hU#>1*7>A{J47-r+=(;mtjXFsCH#ekX9+`4q?p0aOdA7LK z=6y>{cx#%8v$I6*6diVvslo4GQbI0p;)}}R$AY7*DCuRI_pJ+JZ$oc%| zW2`I%6R(qnhQFy|o$-$025~V~gNW*OLm)}uSi*$GBPORwwzbX?c#BYUHdKDhch7u? znyNa4BxJ)Fa=a(H8{SP3W0mW;;fFQoPV!A_HJC!}B^PJ!;PnGhUTA}F90RGczh%@7 zNiAMc;AOuei#w0sT14~L$#>rh^;WQ+Mby2^xasEXTx`A3izF*6q8Scu&~?j`je(pQ zK_TfAxgZbIB6&Y)JWNsKzito3tt6MLsTlPqMih-D>b|9GY{`lZlqw)$7wk~64+P0U zG(st)k?66KuE=;JE3V{;YRd$d#LQ>n_>7M|xXI95&zB_*KaOi^e7>z|zBF22JF-|Q z3?il+@^in7?Pz1h8K8-9X1<>}Wol|FwVeN~OkxuXE1IKLUQBBL=rvH(VrdG|OBi*v zqn2TKt4zUb+fL3H<5HY=jI&}FjJNaX~jh1d;Zq2_OSbj5uBaVoAeYG5K3U#bzn2~(Tk2v?s z)K*SKgcAgSeII7Z`tY(5^|%nS zglhdLi`hU1{q2*AzIUu^rf>qsz4h%3ykb@GM47zw0|s6hKAz6ygb#ZN?oPLzMhS3i zM($86Im=qE9=+JcJRtGC^0umZ(qjjoc@hi?Tgi%WU!XrOQd#gS@tUjVW)E7BV+{7K zcMQaHlnjaTJQA0V#wj!$zPq54cj@T#t@22}r2( zFW}6#E=ve4H?dexBn@Uk`|xAzOcb!Y)^#syyw4Aoerl9H8t@6*HY5U5Jx;sw1nD>t z?U=w;D~@-N%f%q;T>5Ob3@Yx@Ss5&Ke(rs%=g=qQdO?H3pu0g+eO$?3QpD?wRQ*bb6SE-O zSaM}JX)odCG5VU#rE?$bm>eZaVgH=AW#8kCdsl!}Ftyq}FYYNjJwl~Fjd*@;}KecCRGaux?tIcBp6&dr{KHA?D%Tm$F)urB!Ve}6bS&s)3=f zYz_+!zj5NWWJ>W)G5nNxGXD6bCK_B(M}mwhC&ZtAH;4h?NC2|csf z_Y7_U|DJg;bA@M^*O-zXckLm);rd^G5KhPCv5JT)|^GrxGUy`Ipjcj?hDC9a0;H7K9gd~8U@y!a}$ETFA>V&~*BJF^xY zTAHuTt0pbd%A4lyL#kDQjmYx(m^nzNWLavq9e;;F!~4k4a^?d(z}KmLvizH?;)|-e(9)$bJ5## z@YAXcLtB^pOvm`}ZQHI)vpD?F&3RhC)Nxk6W%tvkM2>;$6cA)y<{)|;)94C0sH!1R zsp=ZkNX0rKRfkQ27N_Lb_OO|Yr}$mbz(Q1_%{h4^W$_9U&yq_Ppyb~=)}o6|tEqE8 zfJX3kLda%;cXdsb!3Bm}F?KC%o`UOWjk9M4R$carBhw@jJH^i}S3K4;eA_vUa^3o< zruBLv3E#`=kBscNswD5aD8~f!AUO>68&+gw3Ytln(S0YBCudQ~8rlE~q-pc(n)DH!Bcl@qD_Vw(JB0@TN%yvVBO ziZ?nHb1O*r2OHm@Q^p?@dq%@x2X*t={CrHPMaMaP+AyrAS8w#LdXNdI=_N%NrStdK z6-fLaKVvFGOvH^%)Ac=>*~<@RSUzCEcmu5+eS6sCBN=cFT~EDPA{&qG8-JqQ0l{Gx zqvrzwQ4I9de_Aw5ZO;Dwij{71msJpqy6;3CzZL#v=;b^xI#Wf@umrJO$Z)~xkkSz@ z^v5^!5fZs#UcagyPtJRqSnh^)9+<1(X|a0FAI>ri-^#XR33JX;g(^!!r?4`beZUfc zhF+x6i#%qxb6R6ONr1Z-Nyye%hocukjLUBhJ2r^?er(ZKGC9+Hd&fQI&Qk5yD}Hg( zItA;BQRw%g8z@=1o`aEgiz}GX={|ePN{;c9pi?o~!}_**7oMHG{uM%o{8fcsnY}_r ztGGX7abzCeDUG}A15;Y)#B1>eX;g?rcP zb}R^8k+`shoQHF|Hc7nyL!~^Eh{g<|Y)qHkA#gDr?^9;Bi~P&#PvjpVl{it%S6&>+t+`&xWq8Dc1Ij(PO>;Dx0ONWafxoMvLnmo8iq^{KEc@Jv zW`;IeUlnO`2-bBpBy^~)8vjw9ZzlEFsoI;1VRk)^@tqnr!hy{o!uhGJee@{R*6&mT zrtbS9z*pMvNq>}-lQL%m7bqtL^&uEUDW6k6e88t=wz%4E+=@n9K?euubt9yxD+*ngYvr~%#w-*52 zW&BENWzmd!2~mH5r?*k6SNk3H9h0LEE_lL!sc5UR4t_dn;URL`SuaLOdh+b;J`mL9 z99PdG*d$IGVdoG81$WJ;?kBzcQB`qlRb~A~%5M)raMtS|F!}W;zHH!6Ff?fHy6Il&{qnFc+Lh7#?-cN z>Jk^#7A2Gqp|xrl(WT{#xk7EQf?vmX!fqC4$k~*F*dNAzofa)&vPiZO3&mcu;TY{? z!v_qGr~}iH*^XdgpDR;U1<+^)X|u54k1ZPZU(Rfowtretoxn-4=`{Jh)QT07X^Iqj zQ&K!@Ouh)+MBfoj)>GXX!3qB&k9lC&&ngg8qer_TQfBXezZ_%fb{GbZ_LH{5*rR5A zNrHy142yi0)4c1_DU+M<+wMn63Y{{Rds`z6VA$qIf0 zvPgrQFp~KuWZtjHfSHr-Z?&mqa=kxhQCbG4ICm6LHkOQ)f;s4v(M``0z@L&8U4wXO zzzXU`tJxAm?4@%#1f#@^b*IB#7T5qw-3c*Ndo)Xx&s>@|6n`r_$~`UD^z?;IG#h`N zqZB!8+MB7&bQ>iXVTo{2*F&Vu>HLywak6Ggim1Txz~)-ERvQ3f#O!e~^|X20U3BYC zqP}LXmJbidZ9}H|6DrCZ{QxH0ZV7{Is^qlSi?He{Fu^zVTu@P$8`iO6FkNe1wq)+f zV=Q?U@5QyEMB>M>*EGERCb{L_I<_a-0EgVstl|lrn0Ju@lmU=4CG;x^cxh)#D*M(U zTVq_K7n=_oHHq3;^+WzpmhP%UlmA@WYHzM=Z?1EyzQjk^FN#p+@6pq4J@*d`KEB*e z9_f}(8#?%QFpBEuy`?x8WWy|#nbLJ7fgV{A8g0DMKn3h_uD zm$+mfS&Ub258PkBPW5Ikd+dx|(T_sa{#?mb_OUa0G4QPg#&-f|irkFAM-BP~%LqBJ z-9Ve-FWAabdu<(NQ{ndltmoq7aI>0%mVkiT@fD}6|?uTzQ-6Bi-STJZDW<ACp;4pUqTzSf-s2=bNLQ7OD31$ulR%U$}>8z-fAX7!TQ}9mhv3$MzVbO(yKO?e&`W^OIitLj3wn z3TTA^xO^=!tWYS%I3JUO4VkRw$g&+J?qH&9`kSkL{=h~TsCNOfbwSIBB{{pEL*p&5 z7YqmzFIMW2jYtmbdgMVgbZjVWVnpUz6X`OcTPer=Po?of~M-1FkImBn~J=$-v(Te?M*gO-= zZTODM{SxY{O{IholhL#OTp`RHj?#DzF$8V&JoI_$sb9GVL(SDaQO(uBr3Pvx zbwoXuo}E{Duea?$P-}X!Ef2($_Hy;_MgUff->VqeD;9?fDe;dx&LOR6Z?gqw&qMkT zMg&TMtZfbl;wBks04$FiKfc}%oYmCiDL?PTz92kbyJt=Pxc7PE5APu`vDT{wEim#) zu6gIi_iRNP-}OO7ujs3ILkR!&^O#KuQ!t!YVGhyXvjadUywV>OSm(7q<}2o3X*z&% z80qJj6^n5n-d-^-qA4y>x(e@IO)HhJv@S`bgt8NRHK%QG`yFh8?TzH^nU8Js*?n;+ zpcd(_KYgrq!$x`GR2Hb%`uSMv+olwuw~5bS7Sj8(3A!1^o3!?{Mq=p)ez0t#<=Ol| zI&OD=z#@%uu|($Ox2E}I4@w~2ylKZH*1AuXObvJf{(`HnMxF9# zBqDdWJOZbvwhBv6fd|+9D@jOG_%o%th^DwCGB_j>ep=^3bXWN5ho|$`xgL#%e(0-l zSblmh<0+}|WG!{}dP@hLzIzGb2bIsR*URS=Qx;5#RktQ!W7!hlGSW8<(fT@CP%hJn z$D&7{=zB>)!=vITIB@r`jxRLJvHXU5UF<#?U8%dSy8|IlGguix!d9U`uT_x<6^Fn> zSxQzv2Ht4sF64#x(>Izg+FF z(2~=(uOB3(#aj$Mg9mZKJxLTM)N$c5*O}#a!~g{n>^-*BR>&BiI@X^U*<)V-CDgn^ zfk1~~rz*~{nwO-JZbKGe>&Uu{zgpxedDvMsC~+~b=Ey{qF5Z^A3f{W-awfAbJ1X<7 zeVr)|`$b=1j>oxv$TnH7Z&|@_V3VIGTH9;M`RRA9nu4TV`g$wgVE>6)g%HVMIzXkJ z;n^-{nS4sH5LjGE>NJc9DulZa)XDt>oiOGEbv>~YN1;76;^H`P4&cSau+A&JtcWU4 zSysGaYanbf&|!`qH(wmLQjaIVEc`IPX*Ji%aPg_{3konGD4lt;Y3ttKgKW3(Z?gW% z;Bm6O4b9~^V<>0G9-J#xDiL3Me47GeFbd+d#(jHmBSx1HGG!R=0m{ToYXxG2mFYd&Sb62rSz^>OX}SD)lOM+HWgX%MSUw2)yW zD>0EN<2yAB`4K?p+)3>_=P}TM{pF+xCh<6Ny*tL1Shw&Rg2uJ-*!%8_G^;E316mfn z6vKT5se_-5!ydX?%W$FPtX>`s6En|hVl&b_^p4_)0=Y}7AO!~}{1SY~5S)i&y9d99 zg`95I4o2zeQ4y<}r9>S2J4v~SQ@%6nyl&B&+K$k1=d&z#^nXvdfPmJ6fjjur<`z2I zDql`~_Lk{(KMu^7Xym(}%qbU*2I=ZV3`MD@Q^qYB%ji44K0jXIdJhXfgS`0KhYpH} z*l?a)5G!(bkUW%U1gA8f^R+xQ+Z|xM2QkIzZJ+cPd_==u%Wel8;#sQ`S+3Pb3?c_i zb$p>WS5Q#;t{?Zzju_5vriP-hF&X`ejeCM{5JC;cJS z=M^A|^+>%F2~)%~8dnp%o)!+{afdei#0+r!yZQAlwxQXJP~O(sMvv9`J;(S=NwgXi+B>xBHUD%ioQzE zOiZ>ri<11f5wkp}x!;HEv{(}z&=#Cod1%#uF2DRY(nC-6b6_aX_hk-el+7yPQ>pYD z-yXdSxF=xNu?5b9ygdks$CUe_;l1mW+CgN3)b_p@C7P@`(;ZYt>Pd#1sLD}|^H)!N zxZY+JC`pMEw9*o5G?BR+g*un^pKj?nxqTpOF5@Fh-%GDHVp4rzF_3P;`*wwYT~Dbt z;ugU~##;)&v7m%?I6-^tr~pY%K*`}1W|fX9KL}_{kYG0D?kDuX`NzNj7pF6V65U(( znS*6(zFo}~r`px02PqI9<~H~2ru2Dye0I3%LuyJ5ld@weP7O@!n*_0R9?{LdhGI^J zj?qrZ;euU5>5IVxPS@IkdSvm3fXwT>aE|b+(}5b$o%F8sfp!B(WaD<`I@;0c04Wnt z6<4}brE`JB6OM#vP(+haq|lOYtk86Kz5x!+M^qrbK;R?sQO|E|JcRJgZ#j(^0Sw&g z9k>Q^-9d}U3*!n?$6i~jSWFG2Gzo7^oA_-hhoaw%_~?804q9Oj zfEeVVdzcsnK}N-%=f(najcNTMG<=M|7r`ru@#(JZKVCI76Y~P-g=5*iokc{0v&(ns zJ07b+_8o|VYIwulRk;pR;Kq2b$m13`pV%%5GM}5)#DAD*P>E%f3Av+QYrQJNt{As0 z`NNQ^gC-jmJ|KCgYEgUuyl{Qg`TElXS>uEv(BvRZL4Ott`VcxeIC?)$<*fCMJ+12P z6>BUI1#s03M)|VZ6!VCt@OW#~Q~_c=z0^ZU%tFyVfK7BH4dAaG?Jx;w0NxIgK`32z zNmt+Ke7q)o!@I3#N5X*Wg$_OofV(MM(wnB{Ic+GwEed_x@7wHnV`rrlmqnWGR>@e4 zN)$Ajb}>mHPb+l5D!rF9zfm1ZLUBjP0LEGMNx5+q8s7~24JZa}q=(-<7=o#GlK7H; z|CKk;zDNUZc(8vj`~GHR7z=!rNw=Fb=J!wapoZVvu`N0`O6BlxsuDk=H%JXn9TfS& z1Aj?~+G548BWlQxlkKVP=_{pPJ4%F;7#n=S63aO^Pwi$&r?Bqn4@u%NZ0%9hJdwnx zwKsii3z{)|gLCv{7~P}4p^Sp3k4TrSi~C9lN6Syq`1;hn+0?sNtgPmv_i{~+>Vd(Z3+%E9Db46TIeRo_~9{la*YxIikF- z!A@MPcm$0@9he5{{?v40W{o0vDAxre&ksrh>{izWmI@6+M{POnP_306*JZD`R*@t1v% z)vxMpSTi6x_x!-$*Gz~FN`%|n!;H)VG2al}y!-IO`z#&c5*~r*&Eq9oh>Xz)kxw2D zIkeGBvI9Ek&3aotb3!#Q>+z`wQD>8OYl#8~1l|>qf*sEsFv0KQR1Wm&W|;?W_rKX> zhr&#C56p&x%va;NB}5GwFT8|o--5@w9EKN}(fy=VWc3C=9xoE-Xzq1KEhUuYCBA69 z2SUFk6dAO#6$V_@=)c3qF$;p~Sg=L&Hy?vQdrMT4cWcm^Io4sF(arB1_G`q5a4QPr zV{#Un8kvLvE++@@#KeJ2f9&F!+~$v})n-p0VaQP=aK#G}gF)|gglpDQrjcErl_`pE zh~vkPB@|-L8oa_aNk1c_A;M4hqX>=Y))jooTp0{A)vV~zad(gg9-HE`4PFq9TS;GA zg?f=^8*P0Z4BfhiQ|9LFhV~}W5y=hApfc|}0V8 z^%$vs3omrNQg<4+wrcrx&1u*8`vm+5_s7Z63{%8zaU=#B-96`+1iwE|BXzXhQq*ah z1#oBnIu>tp`rL*cjlfu^2M}L%;A-dVhO1W)3u-`c3Vc!l1Xd%z((5tVb#&RCxnl?l zx^-0!i<>==FW3W{j3IKe9hmc)Zyt`N6?0fP$HEux8r!X1IlaDc85wXWr>S)uI1FJ+ zH1z?Y`+({`K2~^ejMY#%qardc+I8TGJ#3x>=eRek>JgD0>&Pj=8(ogNBLLTV-p$}R zP6=sY+)vQ1gP%FTpx<=11f5#KK{@1Ba81PQ-L!vHZC*Zf>+CYF^2`7Y0wo?IJ!QpV zCA$AIcbjF7JFM3~qN)_KF$+xxG3Zc+M#TQCCQki}u1~f6RXFH6UIM&21pvKut3?FGS17 z>&)R)yml^Nvl$;j`lJW19&N08O=0M&IY*QoXUx(J2$!06`kDf5ayt(!!l+^P0LJo#(e*8t92n3z%s-SDGhVcXa!N;M%u6YdEVb%J|F$VLL~%v(=M_ zqh1T~Mtz_xSF|>Y9o9Q|v8SJUUz$L_$K2eEu6%?s(;3_8t8M`f zS(0*$B8aC^0<=?JFGYXE7(DJ7rI@eZLclJT0>4TjP(#g^omf%s@;E!hgZZ8bPb66r zK!$rMOHo$GjFYK3h}s%w4?qOi6)HxsWomTjAp}-RZk~%F{$zw#yO64^g}OLzO;m^R zqIaST=Z&VC`Ur9GY@K{Q7B$^h9lVUgZwL(zQkoxBYNY$rfz^`sN$XJyF=u&8a5=;LtB1*YZR%g#>aRMrO@Ja`mAc!?$zDWRZAUyj-?u@rAe0 z7Fh{8=ts>mP(K=u8FbU$yzIb&5cn22=utzl;}bE z7_e0n?g2w}j*kB{c%ib6+bX*fX_wVoN2GBIbf?}?@&1vbj-|ooD|$MXP=}~C{$(V6 zRp(uT(wi{3W6Bx&@|_2k|GFT?x^g1ubDg>xL8I}h#ymB>7ggr;i_6@qp*>&nB=n1E zq^8!@q?tK2pR3V2EBrV;;wo)E*BM7REjHp~gGo z%m3r*8-p|pnsnc`?P=S#ZQHhO+qP}nwrzLMw7aKm-1&AlHtxOW*Qtt%cuqZeBC9eh zGt1l}!o3+o^y{>Q$Xc0hVa%SGT|)Xe0~~?jWqjQu27ALO-g>95IN|1(bD8MO!p1)@ zf_3bF%oI?!GHg@MZ{`AEHrl^{pWoqf=Nx4N@Oeo9T7molRqe^Xb;eH3o)4=0C85`6 zwO*v}^t0WxH1uGCl%4eDtX=P;qxNn2(7$X%%8F5{kiUMXXT`eJm*X-Va9Op5nDMU2 zn*@`d2lj(z{yqE`!Uq3(-#4C&*e7OC^K(JSw2cg5N7TBC3|F^{6*s69i=Xt0#IR+i zv6Ukil6utjf;}e3S2_nSFb5Wy^I~KwQJ&Gjl-WTCzR-m@-sN2y`b!R+g*U>bQKxfW z&`7AaayE?ED=lrm{PZ~^v9~Jcn4RQn?Yd$Qvorb(hU>TPDIWW8Z|F3++tBJ`VeO+N zX#t(Q-|e^9nje@+P!;YH27!gfIWboXfg2r5N3wB^DA2ik%ZJ&)B_xcB;PpkT)5?A* zPVRwV%S&T=F!yt8I}({a#Hg777zOCwBQzodIb?BNnwhSYz!HUqb0D6gZsEU!MQZB*^=5aQm8d7ZOqtpl^_%F_kI+;0LulZ42~+S~Shv zn|UTGitG!Z17w^9Fd6xkdC%yEm;Yn*B6`R0lEWtVGywgIz(Ny((?I>!FTsvOeUU4p@EJuCE{2jEG0xqIY}yWDQJ`MT!$8Dp8fr`woo&z2~&_0 zWp$AZ)%d)m60|s!7u>|E&(~fls`%q}3;8B_JY+_tP`e7fO*2&9hP5^SgH^0?6~WgL zBc0ow3cS&!0fWcj7yFDRCQ3A2EXieB(6tr226Y;wd1kcE8n+p1kR1Zg!AA|27hJOm z+R%=JiygMB2eccu?lTh$IDZ>~S_aC|f>~_~_!dz2%ku;1*HxS%*R7mR1`1j?ORYC2oDe(sFj^pu!l1B82h~cP6*AYmT z8SSpPsSUo)>M?NfRNZtFle;fUoKXOPaB5!^;ImzZC_*hEc7%)dK#I%!$y|t)a`gow z_&#iz*EC6#;M0pD$3An8Xh#?Q0s<7f9u0bNv7*NH$`Pqo;@S7k?-f=0q3bSA$OShj zl+)@nbjN1O-ure490Y=qcWNVX1Vhza*bYtIgOwGrB1>EeJzhm6)!svwybBPei7rC9JZsE)*i_d~Tm*D7K8HOpv{XoInIJ8AC5Fo$Ag`In2jf zM#tI8zLa^ABhD^T&4;+{?@#nEq71&PBQb{4J3RQZMS-gPDsge)`2#u6#JeDhe^X0D zudAvRQBf2Uc|lJ$8(+;LHdYG7^~I^MClUrCof2@QN-kR44I0N)KSPHX#B&O=7?Hl9J-&W%6~ldNdpg>!?WUmOU&C_4s36v;j=G>ozoCoM^jNHv zHSMH~T=wPRI-RpM5S6E5TuX5WWc=bT7O-oW!#^6d zpsN%Fhj3B{rJCmt0kxsi=L;624>~-<>38TH@Wq4HYZ?(0KiT-J>EQhA(%C2%Jd{`Y z8?1z>OfCE&2!swEm_7&U0rv%oPQL~zY3?QmX%>Do_elqu0an~VrtopC9L8I*@u4N@LLr-5EtnQg>`CNcI^t2xCY7f9sm^k@FkQnwC-z;Y5!mQde|UCL!4-$SM2VkgIhAbnRiRmyU4 z2uBqO2RoTHiwq3kwUFoPqNY92TgXsAdqLrhpP!va4v-S9O?P<_9SJ3e!8^lY?5tn0 zBSUh)h4Nr~#t{mmS~oj5s*nRvy6%M8Qi@#>Vq-tdc%y?&!<3AOQYb!~ND;LF;2t z^>ZicMl|tU)|YDYsb4WjheOo$+tN&Sv}>@t#kF1}Gs&c6UnBYCm-;%_)R!bPCU#Y| zFQ^yc+j4MK3FLBKslp`NZ$pM+sL`120!5L-#*6OK=ft!MYO$-ZGW^%_D4NJ!QqBV> zstspUGo~pBz;^$V_i5|*f+VxBp7Y8u@@vqVfw44*-$-s*)mp#8adZ;tAegIzT?u_X z**zFr!kNN+O-h2{JkYw!+p=Zd)xWg?7zqDPKelhuPZr*FHX}@e8iLf!_M<;Wh&$)_ z6R(%!9z<^?O8WTIp5mE)myV1k3n<77+wC#Qo}ol?3uHGr(dHPh5=PiToXz&gmZ4X} zr?DH;?2$=!Z{!k3W&^QEFYb$x1E}9#&V%4atOw-LASulg@ zYAJ&{@U-A(>)nkFX?!JqnGnfsn!ZXBEs~YQCDzW_ue9UYt4RY#p)G5_TDpPmAmXgY zqYoz2KP@GlgrPkYq>X<>>1+oo7E?? zg^K6zc1$0xZFIw}HEUhB5atDn_$e)G7#fX#C){Xl-gMeCjoSxnLWG($ zi-(?PaQ7{6_gMu;*r>-|v7*xs>y4@jRy%2Z@Q zJ0kk2URpfnDsZQ{$P@s!BWi6v=r#1ybk7y%d7i!ZhcK4dE#1eT4)46T3I%&jkQ@yN z{zT_Amo^;m%iFrOL&2BinM;ARH`^^G3uE&1w>)v`%+9<~qUdV(S5=f6Xs^#Kq~gJ! zEF>N3?Njq%%4TEcYZ=6Q50(Pd+T@% zhF(c@B_F?H-Oy++xkk{gUt{VfymE|O@oR=K$Om`{!3ooj*_pK7n8Jz^cCgWpG$-S3 zOT1Tt)=^*Xy#9V*{28H-4f2-FpF=~fGB&A{UCdA-oBOuYko{0x1)Q1dsC~{@l2gQE9RbeyB(e9pPkz)u-F3g=b_9 z|Fuau$+r*SlsN6k3pJKn&Fo}=g^3|qpps*gTk9`f*D2V?E)>o-c3?LAh@|n%?t&U* z=io+P+X=03+=DzR+DEZqOQDaBevg9hl$4jH($rQA`7vK&@w?h^cSW=E%m2@Lnn zeqo_D#YKVe#t9d{X`2($cp9fwaURyFq31_Gez|8rfpzm5brGQh%GCAwFgQYkfTG5t zTMNMX@+B>C1iC;aJKu{%3~34E!VzzyTvs>%zQ)e zRJpDp*RQVs`r8nBgU|h>7rHoedxTz!Pj+hRUxupP0&|se8T56W=mvCp4-`^RkE$|S zBouV(P!7wgxtf}^9J<5sbyZ!fRhY{|NSmrCIhh4Bzecc%b&3vT1@)W^i5yWyzo&xQ z;;vm%V~8*YN3QO%y-VeWXbkXZ#X6~3=z?CRHR|h=*+kMJ?zmLO*vJhTaB-NlsUOhV zS&pR0{o7BKj~BnvX%KPHf*}Ai8D80wTG*< zTNi!KxFS`ZXaPEn_>XyEM_#VRI_wzEvKHT}ds4oO#XhhaP^aL81A83vv$Y9)5Ie@@ zS=?r5U9v9M>wr52D#nVX+4f3YO|n>sXw{CjexEBLM~lq6j2&|snJ!~4DYy0Kxhgt# zmE(4%{Bjt?L%JeT6)feMrx&vQMX)?M&&}y!S&dRELA$AW0+1`XFyN$3bfRxukA6Nr z(>-{BLcl=3=UeK+pG$aPUWM9)keV^*U=C>=O;=ZRFar`3ed&=LRI#e-7tuSjJdn(D z*C}`8lM?ApC5bHphivehyfRoJe+Nw!rz3Di>{R@*JKqbuA$Qx=ZAgMlqu)ncHoTz( zZ6Ljz5GF9RGvIRmZok3Gm3VQa>d!Ry#jjhbh720x8BMubquou}!H>Tf?Lu_toK=Au zI}~VwlW&17>C=`)H4+8FAs=VhC$Jp(mT1u%*GWP_ngW)o65YOa_T`$+0Z8|%sJqzDGj3p0C0ax4}Qr-wJjqZ-N9F|D)G-rgu;BZ z!;4abF)c~ChMW?24M3`>UXE*Bk!5dnhXoB(HRz~``DLY>NlJ z6GIj*AWObY7N{YaVZ0`k6Ss!eJ?OZTMTdDJ>vU7%+LiFhN zRx`%4^_wi)%x%Juf(X`@xk3_4umnc?K!y`byE?KyAXyuQ1$6jExQ9#>;WW^$pz>BDW);B-#{89{m&!{%CwP4e zK&quzu&kr|SE%;C9uB<`4z1lu#AFnmihyPD7sa0iI!vx+RrHjrVywN6I**5lS44OQ z1}(1weKt$z^&@j>ZHPY@j~rm?7c{nnJ1xeH#~feht8`OIv@dUEC`?vAJ}5Zewj-Z zWS;Nm+J0j;*&|?2B&3a|OBN9rYU?J~mahi)b9TsrBp3Z18%<>K z5)>MD@$TQh8q-)9y4|cOut7T_)Eu|KBe5tgQg%79mfI~-{Vk_RcEw2f*rjTPAWYNJ zh-8jOsFoe|helrRf^jwW1-EoXQC)DK=kDEVC__&Z7p8uL$d@KUdCe=K(TB2wCSOxE zG6*al8s{yiettdFp)%=ZrkIYnAiv;L`M=Rp>mP@QmX z6kkQ;S@x)r=sg~uW|WBfH(c3+h(U+8iU%|M-Qt%ZA^V0fu8Jw~ZK^CKC@sJ%DqIb3 zQxJBG@bH2fB&AdUT?&QUb4XT;ssn#(?3snER-o4boLc*Ia|eMU>yyh`ioUyK)>q z0vNKLT2~E!=Ry=Vvf;JD2|%qToe*sXKP8QjvuRRe)q;;Lp%-T`#t;zeuUD{icRWf5 z!SA_WCW>MTQUBpSAS{|j|0;)`R?@0aw#kQG5!|dDr<`JvJnv(n4M_6ZgGYobG36AD zoq3?}eq4E+%wM<^3dv})bw+8|^G@&-vG2_i9jU~qXR8AsjoF9DgHa?Gz# zcn#ov4vB2wXxC8bGDe(kos^o?=dwBx$*6SF5hU|bFy$+c-WwcW{X_57ReNdWcYfXQ zURlZ|l}IH1HccYCMUCj*Y7LGn7Bbb)P(Nb6USpv(8=xF>6fz6eZDAb_9a( z@MoDwxHR;~YyTkmVT%hwskzO?lSpG@0uqB*+#aidlx`z1BH~x>k19Fq{k}%)9mS9* zD`H|%WzP@!IVBJ+@REXoO|&1{XxcK)A0`Q`pqRg3E|T}&3u~r@U%|$SG4{$91@aw*#eyce9QopM z`DJ#1we;8(k%BS=CWYLKT5X){ITkS<&Rq@+g>KEPs zvoFA&RD(RZ?DooZ8<1T=vSt}t z+D?Hdh`E&(`5U7^c7`C+f!n_m*%HsvjCy~QzShktQ6|3UTE%Y72 zd+PP&@GzcDNsoO7t;1lM^{xQw+d}2qJIm2C5yLV2H7q0h_j4u7tI&pSIscc@amls} z=ewA3i}TP9=>71pnxoB};fynA5khqDxbyhZ28L!|s7a&DM8kLi6!@!^LS)Y>d916y z4@H^zXm7@`G+YBz93b_*07mtrKFx}PR$x4=F>F_b0n5SY2{#=n3I3P{494UyeNM-k z0r5vJrIJ$I5r2vo2Z;hgav56s_rRlNop3iWVTyyQDkl|~h_$QB`4xlD3diB>7<~TT&a~ei zrW@BjoTsrgp(DUi&WLtIsm`&yAO3OggYu18-*vrfqTax1!IGk++r!jJ!M1tm|6_z~ z037kg^QD=bQ2SE!XXl_O>i28gdM3`nAXNfVP0>Nev&#;1uK2bH(7q}+cI-@DnZ`eV zs8QqxlCsEFl3eToG{ng0l{tS=g@JzC2@55r_tfdch6_}#{Rs5PFmGADe|B-V*TXs~ z(IA9b$1xai+pi?9ZZCHTxoMRN&UdDOVz0%mi!rQDy!K!%y)L^DOR+f{=3ln2DtIUZ zlT&0v6;@Tw-D82fX>%fs%>m2w0y~!94$K%$Oa$x~`&AmG4C6OwaPApE=&tztfz!~k zpB%rhw~IM&Y}!>t(gPjiv5I>VHVlzba3^j&!b>g^Dvr?X&Pjs=2p~f-e3_Q@$7SLI zwx-H@mDfqae{>_5+BnP$ zr!41(UlMZdEWFK5@QcK9Rf3Bf3g7g7Y3qfN1N7+f&WNd1lCpe*@+SB@tOGTkynC;3IBjN)UEyH zPB4Z!+#~{2v_B{#%X$j(e2*=Lpy$vkdt*^(+BnB; z!uOc8;~P|;nf;b6*PyBr2@dbjDvBlDIEPI>Gn~}Y5ANcm2^GLWuzMfjqwy;lR(gTr zc4qw6l%GpdvS|-7Y50)iXfHb~tRltG{t`7kO@MKCKd9#&mv%uWs@OYz4OIcAxs2`f zRId%hVYmSXy=SRYdM5ZeVc_B(Ym+9~}=m^s&If!r5 z)|1;}1G|)_OYDd4Iya4ztwo9@Kvsm`#WFSvzZ>Ws&#;I#{!LJuXG*FB*|8--a1?zX z7yYW^P_^Q;t+SX|AfhaE!XWlLCXq&t zbG@umr;ZeqlYUQuErRj=Oe!w+UcG242$qTZ?i5xUNy-{Rc)LJ+$!q{Rg<)!etFR*L zUr<-7QniU4%W<##gij@5hw`{gcob1qC=mXTH`_&o(Hy=12Yfxp`iqMlE5s6|i z1Y(XCGknDjEaem7tyWKa$4R=h4t#1Q)mCe{%eolay_rzZgWLnLhI3yw14g4u;a8%u z3Ano>6oxe`4A9zKPP`Mqr(%PB>5wMlKRa|ZaWSYdB4xN%Hv<6u&Uvb>6-pO6No<^R+blboh@Qe zj1{h>!dXd6!6J@SyFe|HUq4={m=WegG>sHDrEoS{WSr`khgbME_o2JE7kc3zQN1qAaYWWJ=|=M&EU(wvk4-b5_5rpoOkNJ;Yg zpUDCwcqVuPY^h>pJ%Xp|G+>y3w`we(;8`Xka_n9@1_Q$j4KT)4a;O$|#G0ihC`f^k zeP&1G*&Z7}zlz*mPDImNVzJJY@&g4Ij(-oYC{JZre~>32>G>^A*Tl`=M|LF;WYv{I z;l)xQ8*!>(*&Nm*)pHxx(;qY`wnPjr4#{QRYl<^pLU!@l%p0X ztE39*zYk_dRZ+Rg*Bxh(vtgLmwezz{QYuipSL|SSR0XjHM_+K}B^B9`?l6RQoat;)>}QJZWLKyktD%{K zqWYy8nt5G2-2T$&OD}~IN~F@(2oE6Shmk8demK^e`Cv|5UOu= z#Qex#i<}+Ij;bK%;01C@O@n74bDCqFm@}O%vi(dkqU;LwOEom}x^_M{iKS6K6*>Pi zJy3H90y(9o!ILn>?|k|N1u+Ll-*Dz771%L z=xmYgXNn$WSE!$>q238T`N2fYkNlv@{SO@zC@D1!o`ooBj&)-H4;}wQou!d~6gfM% z9aTZh!EdN3H4UDHDgGtNCD~TPf%X$ckFpE2ch%6$%i8(bBqoxx%+;YSJq{( zJ_2yNe|`pN05CIG(8M;#jZJTs!V+|PtxcN&e%i{CmkP4!sK2+0rJ2b2TzQNFx zek<&mZd8}@Ct$3}e$W?|3qS!ga^HOG{SQ{3O_1$grJ2pvD`8>^>eNx<|5PACqtT@*Zi#fLD9XP=i|4c4Q3@UWHC-PWA8*GH=H{>d>);0gt79WY(GaszEw zq(IrTYPX{=-SBf{b(K)_{A0s+B(-VLsxxnOik;sirz30s0pSj+xTWD*s;k8E)n2Oa zw%PL25x97#1~mwNgo{n_Sb>0G8MGZXOj|i~4Z5b01DCG|j=_oX@+O5o9cj80MUx*3 z9Gz;MyRs!!WBLnXdW&BP8)qyhIF={mdh$vzJ8hT3=<1}%0+kOk^AowXVhWZU6=~0o z!ky{@S`6%%*1M~Ie0Z?k&AXCi*db|Z0%S8qSB~DwiH3G>aov&0VE7Jnk!xRulOEFZ zvYP-R9Ntyokq=Y|5_JmLfdPO_%R5p=xBAYWCFXvo&H|z5tz#>?L1SDT!_0hoZ-xno zy9?-|XW$kpS|QJLuD_X{|91exZ4;gAS7tuFH^T(z&7%t9#L%S*4allz-~kGHHzab< z0l2vWO53tb+d8Tvy)eLIj^379eFNjTE$QFiOkUy2j--XaV zn0j~KD2MyD3 zh{!9i_fZ{G#Wp_U2XJtt{{>Jrb*B3Zpn34LW=KCYTPbO!(#@NgGVpcy1Qi>Uko! zbKe-$5M6}r1CzKS-GAQj9D_`%)M98BblFYx+A>RC$l$NFEJIBSUuoLkOv$~{dDUUH zv?Q3hf&Yf%Xgt0;!5ci%1Dy`FO!(;eoi?cK?Ym$))H30_=Oq0f1~!Xi^)^x3xvvaj zh$h1R!MP&;eY@f%`aP*qi>XGVLie1c4Vr5_H;ZKTHj&$@Zwyk1CgS#$L0pmU z4{vyh&i_rYB`;KPZ!ODElfrwNcAqJ^S30jcoR*dZJvZRL;f}`Rn=`y2B0W(4mn+%p z7r}JsWx^NFN!p;g##6IMR&NuzoxhDi4ADf`|KL`n`%fDlqmxOMS`5vCEW3%GTV}}% z8QlLrc^+0vOM;ym{5Kqq#@(|sg25d<@c(jE+1q!H$=lLv)~+@eL`B!Mfd*CY0F875Hxq6zaNBjsT@md?aclrvO=a9Ps;=p zvr(N~tdtZe0XDP6Ne@aA^9jOTcQV+daA2Zk3EG_eL<(auDLIMUik$)1F0k0S#Al*dcv0Y{4>L) z-~?VRkMiM<^ARtZW+9zeWV$KVMp?MZ9~Pzc*Y7cpSYDD+H=U7yrNW@KrM_CFEaoQ* zs)gn1fLSCnVPAm$PLw1%o z`(8>qPn%m?@$Znu4TS;|-Pt3gsCuO#UADSvL`6<73A1JEb|-fdnVobT2T86i8(WD? zJeagKw=o?>{QsDk?Me4ov%84dY^>47<($~0nplI|{~msKD3iES_=q$8w12mA)_PCK zn}M6=?l34%<`4K-Bx5S&eOP|*u21XL+i+6wzd1IZSAjx`K!C-{qHutNw^CB;A-jZN zfKDHASavm!CI_SXfsheN(u;$zofc1gT&{E`h`xhoT<{}UDvPLCfL-i642-u`%gfi8 zVexv@F&%@lEdo2N*6JkzeEqPgeZNzMPrlmPP!ZW;j_lBzHnhE~Tt2^r(leS`<|=xi$qLpy!!BY+C<)i z@1B4Ht7H6#%R|%!G8)-Cf$)~c=ce>IZ;B=%BC{2HDp#?Ex+&0AX_%Yvw4mRKMgt%f zb#@_)ZfeoH3y_zy zTg?QM`pifFKpn_CDd!60-aOz`3rH?lZtzq7y9K^fqa!CD<2g46{ub1VC8{#cQX_HW z-nqf{TP@Zvzho8OD7E0O*uavDatz1rj`pF}k_1(@l_B@9I^y`W<~Dxn*A#SSEYm0h z81lqyYA1-`3RWn{)Wl8COn-*DdF89>^m~kr$Y;? z2t$0BNKjI*t*)Ga3hRXe0-MaoZrT zVqM7EumXY0OTv@Ljr5QLkZ-yUx1H9QYPt`SCyaF60?wEN@*f?ejo;kWygrcv68Q^W zFyoQKWhGG89yxQ3LBU~uTi#lJSIM^@VdcY6@&WGOh6@wl6bTiRkwp_5mJwI{KDM`% zmv6i&XzPX<@v4yRC?PrB6WKoS{}2s|wF zRmVgNZPIeSK*bopP*?5nW(Al&|FD1)2P)JA1ptMK8Aq}AjgQFv9W_2>NZn~^BKQ{> zjX>E8qRa)RTAha_klOe&zks@hJ!mC6+utycQ{ z&NW-01t30@DMg!&nLX>ymm9*xyQjdZP-M~j+Dh_jRR~VwUFY`KFDBt=(bjGMvn`o= zX=jjB(+f^#I`g=q)Hu?nm6T|8?9wIk zTy797F%VkQ_9h$O(UcAZ(d;@j1=hR)O}3BnQfCb{by2pY>MD0X2M4W_AusLd#dJD6 zosHGGhG>jY{I)m#7Z7W%OoI2Zc+EksOjpp0XSxA?5Hr<#LcmAxx1Y$K(CiE}J&h*Mtg_^voku;LA>b?vlBdQshs_y9m+U19T|8dCbnHr7kFfa1dwP@tNDx^ zYhykLuMr`Y*7IW^%c7@a_>y|79kGdx%JDP{eov^!$dV_K zp+f^)Acrk0xs#i4@f+^t`x_`S8-gRhf({@68>CfI{2kw= zlQH(k`{9zp*if+o49Km0z|wPKwO`*Anp)fEdaHG0apZ6^d2k7}YgQkOvE0bon#p z5}lr5lDRVB@3)b0Rqk*u*jRE{PrkEgjxYCyd@s!2`v{6d2zNS3vR{Sj-cDR@!<1mt zDpdF?=8)T}Gs%_4&fmDEz5VcgRU)@6)xD?6RS+79M_7c+$2)o?zlP0*-0msy`C7X#|pXk#JEE-=uDmDwb zlecLeC?o~OsLc{&E{w||-$b!Per<@Apz56!IgeO+l07Qg+o6EEOL9%%M(U(ag0L5n zp+(Rm-0LlE3eRfe6jXi?Y>O;?`Q%*;+&^&hw6UN>UbWE8MRr%nw10TTL=L(~~5o&RJ0i8q4r&(LnX6{Hy1L2|~S`cmCoKtGyh6 z15$1pBBPf?xZZsu+Y#mj)|tRUzJeTmV+#d}pS5HHgNFvn?++CWpWVypE2&G{SE1zr zB;Yw0{b_CNUj?jl<{pPxtrU%Lt==U&U5R|sQZD-b{pJ;|J)c_XAl?r3l_belWKL>E zGXl2KWA##yL-y>=SZ~JpSy>8=9!4{H+xi;|_Tl%iv*?JFW&N?v5mnO@4X$D6DZRGh z#%Dw@sySCmjW=B znVIj|i^TtiKGJTdjwA6$cFr}?GdNRNd~44eGIXdHUp~{pU{k4hGz&7weuwIj4sK|W zkNF@v(C|TnF&^P4)2;?w8V{0&+65T#9M4?azn!{_)_Y z=`*v-^>wmTvsucYS?Df)Fk17c?^==(bxdyG+N276oK+AeHs(Qs_yD6O(K5VtURSvV zhBem1CKQ#zlL<#yERuPWw@O@zECHf#fEtCIjt6-Ty1oqBb}+?F4F-Lz|KFOcoA;QH#i_NQxHAx z*CBNLaUWcUH{;X(!G%NO=%YoFKKJREwi>UT4*NNW#T6jBKXv`PPR8`2yo^nUC#PE8 zngPWLdvs-!Rf63^a2ppX8_<<50QV9;XN!g(*>LBaumvFB+1uF6qFM)`&+;v&m4iiDp@w+s7VF2cz~!e)Igz4N;^bo+ftYwcT*5G}qlynRfB%D7@wGHR zsO(Ft1?wl)>GV2V3rO9!KX8%8F{65m1SvQJYgfe>+VXbaS`>YH-3Z>5)0jsEbsxOa z?oRR19834@(BQHG@xv_NH- z;S5lZceSBxKuF@LU9>z$397aG`K|fzY+EaiD5=JuyBpek1JC>iQN^6yLOVoerbf^5 z&U@6>Rf!w4B*sxfCTjDBJ0dZ8r~#>tL#=QvU*)cv!e&Uidt~D8l)C(Yf`r)Y@`=U! zWprgvjjqel+PLw!Us=c<1Na({S5-_Pyl#W!v-O5KOf!9&-VS&*i|nJfF*fnG3(Wl) z<=Gfd5C70{(+-)d0*9ez^S<95y+#atQf(jtOk)fEFn`mR@y_k7feGLDzfyGbXLbBz z+ri~DHb!eq_ZQ{KO^oyqQLhu|k?IDpPrn1B!l}m=;d7+J2DX~NyNQ*&tFM-Ha#!^~ z%zsI1H5>(FUVl-C2k#3L-NN9x=JxM~1~vUuSSvQ~b6cxp^p zVknFVb6t>GT7HEUZBj}FO+G@sB5F)1oABmyk8L=oXXZ?ohbkSteyOz`LU0(AZ*Li|M!N)MALbbVesTH+}yYbF)J z!bN2LnoAV=kohoiE^AeAd=wq6oq_F-WMh6)tXKibBK z02&^ki|DwNTL6Nvg>cntlNak6wcN>O*1%Dz7wqp#I>e$so&V}w4bMLMiR`3HW4H(> zoXoIssBp_q2JE>^mF~0MHp__4;(8Yd(xi3UXf;UQVN0inN1=ue9}|mZFd) zFM1o!wAnR?fP+8-e)F3YG~CVY1;NCr1x+w>P1B?>_WP>!g5re?I*BkJ(vng@t*?)A zF$?$}i6(q`nxc-C68Q({%}t1i`mcZ7#D$QjysY0naK@%c-F#jfkKH7fNG43i zxlYBpkj6M00NIxCAAxt1#4_J%ZFY=Yh>*R;Bn6ly?%h*cqh?4mz{#dGQTg$sZAhGg z{bKY%dZN@`X{x+ono(5HfpIn@2+%)7RFchkB2%(8PDdYXhu=O?W?UoeX$^?QSHt{M zU!Fcbv8!4La_vOEUUo&)U}U4LT?C1RDCzw)mI z4zV|~6`J5{sqkPB!k62TIu;gX@=GQI7Jk; z`>FHn!im%arIX9uWaC72P_vaj@=Z6AcO@ZGl!*v80a>- z9Ly9Fe%oN2l;#HR}E7OumWo>#?-0e!I4-<*3NdaAoZ|`5m zCXmkV7p-E63|{$)C5_&XHG?}y4<2@#9hVbJtzY-&CMhxuOfQ*W8KqcavdZkUt$g0Z z*T?~b=?%6Tt!Z)+iv-KvSa`I>5DwNKx25fXCG&wZbrP!+1({#eYQ0j8(3fJ7<~*tE z)Q8P|>VZpTk@nWpw&f1dnIeTWpUhxz6#^c=MBn2ZaHkQrvQ@JK0MM-`o;DW5(rbGu zUx71-b3qw_I#~zx^k9#5-;Yl804(|Z3m9Z%kneK(DCTh5*Ah^kdY?YuL5l!6) zpX2vm7p_Slq9-J`+X#R*|E9t#rt2xk_$(O8|Ew7QFc7?Jf0vF(;r7sWBUsbsOr7Ce zK(E!9bJx_8)e3e7H6Ti+={sIDC$KXRVoJ3d~@*K{?u8iif3U4tlX>BGn!kb`Uo;yyh>SWm^DQV7__l?`W# zpgm>?NKA-y(LO$bp|7&$E~ zP7X}~ez@12z%B)Q-mQtnQh;irSuNU4!OcELgo{6T$0{fT5)7yIhoUYpT4DEm=qTXc z@^o7diYg2>kNkwy1+}uT;`_)ReL@?wPjCj|e z?kBkU=kY2e+dg+pT5yyaA7e+lZXEhRz7P%=W`lZ#&+h1#lZ+tPWFSChFTfDlcCch~ zJFd6nrsv5xOc{)ZnsZeV5+)uI$%-)JN?4gz(|`^;`gc>j0$=ea^Uvb{DeWACGmX|Y z9ox2@d_l*yZQJbFwrzE6C;cTI+v?ahJ9aX?&)zdre^(EZ`E6?R;_3KSgQMa z?z(Vj4HTt2x&q>se`KuSy)UCe#9GV z1Sd(Ga0g~N;9^OpMC8V=s}n;`@kuxeX2l{U*eiwmgn%{aA|q|6UILB6PzsKVc>$2w zC*v8XKA2EB>Y~O}dHMw>;dizW%h`!IQa>`mjT;NhsHs;6L7hAMUs^)hp`$eLZ&!Xn zql87t4U2QP)}s-3;KR2#B-7HhrytX2R(6Dae%n%VofJlW3>o!hXhulBaK+Bq_5Yib zi3?y;!GS#TYqF*U_Pyy{;V2EZ_ghk-%}6o`C=Ws?N{2skO=oP6S)Y^TS zb`Xtk8us@!p|GRPTZ+au_&8VcEj1!>sy=5@k4SB_a_R|k*XBqlv_ak+^{gycd?``I z=Bj*CK#M198llw6bQ0gdI0YNR2?v&E9KMu$Vn#3V&em@bz(#{ecpGDgz$F!2rF+tP(#=n04Z4;{!>PD&_TNs?i&XI( zB`UfgoK{;!`w)jO5vPI)J3&D*ng^f=BBDQKSTwyjp9Uh`Ju$*u3tl;V~EXN5nY-+AS#%_d?&gGoCL&z+TBAts(`wxZHFv+w3(+**`vik|YGn z8ekAwc&+k~48jCi+%;D`3H-zC|ZYn_=j1V!!lSUhk!ZITp{?q(W+9+*}X#z@1QsWO~Ugcxi$ zH57l_4{rP;C3l5=jR|Cy5K|yob2y50 zCk%mE+}1^J{w-x(w7oY+u{u#HVB!L4!o<{AAffQLTGmW(ZhC1TcoKz0^ptcgq8nrg ztPq#cH{e<2ov6Ms2eq{v2>iZnmp;^tI>b#T%Y_+@-52y6YlAG7|6e^CD&j9x00s#t zM8fvdPgC8LuUS--q_Y}(e6;T;MUMJcjTvp%7=o;`r@r?#B*bQ5*f(x6TE^3-Uit*y zS`4C!d^C6G>AB&kLUtcuAFACVzxd!2SS%Bxrd-I>q1Dzb5i59uwRiWA1wfH!Jx`h5 z_qvh6uNG4IWI)5b=iwpm8A2C;yw7HOGDi@*Q4X;zYRjoGBm&>ExV>quxT!rL$2L z8(xn}?x%%>D~2{jl+{^E{lrZmX1|SuE~@~QZUi9OuaSR$o`mk*JfW5(jtvngV8FEa zH}{j?g|GrDQbzwi&E_xVt!0ej`?IW)ae>YZb08;{iv<$OANocia*t0p-x^_qrU!zG zeg2K=RhEN%#$H8UmN2L|+Zqro z;m}URYAJR2Vi}+S@W-$ojdgz>$`O0#nH^!>AqY6(*MIO*KO~;L4{%$l%YqI-3ax^u zC&IPg;QC{)$&@)3I^gCl@a8`;28<@S{`+RFIv?W|RG>O}B0$TCZ|cKXp`887LXv6s zAsSI_&%x(4SxPj`C;_CJ{CMh{Z_AqtZa;0)gFZa|8BlPh`VP5+VO34?BRnOejOiV- zlq3jWp!VY>23cein~YpNq)fc&JD%Q*irE61EQ7us8P2p{DLA=R%EfQQ-UYa)^eVbs zu1;#pbgRp#Hzi3iF&`ow%cw}tmnzzk>chPiMau;g>ePiUVF;V0KXQ%zF)4~TxOdYYji;1}>tqINvT)bz^?vvmxg_ODL< zR3q$aZIaW|UcmQyDH&4de?Q)iY8USYd%gGRt(2jC6ZUZ*6H zitu%+ISF3i2Bd&N1k4NIj3Bw1*by2#wRMk`ev{`$*0b*r8CnqNc0>cE80ub(62&MJ zD%8iwp!lw{|0qd8Lbwt)X2KdtC1mn*wqu_a>-UU`orr0Iq6ey<%v8_;&&foLEQFYR zUtcNbDMp?In`9KRJo$Qh6j3c-yckG8E!)N{A>aadbvsU7<4i`CA2~GT;WNpB>9_3( znQjO1P`|12tq5S(4#F35D-nLdjhjvR11x{a>d-DO^-(AQ<| zwtgOa^z6^|a=qZnKA6!!iJbJXv_szc`bZ(kWu5FLNH$%-GPS#TKhgi=2C?|h1zT3E%$O%V09TIDBeEEy5~>4o4eL6Vc#=H zy#7qrzs~AP5|iF8Oth5QqBXneop=nJZSO*(;IE+E>~ULCUZa)c&ZrH)XZSF6%m(zZ z2%34pAu+A2WS2|Eohr%Tw)x(1?65|u%iPkiplOPi#RT7IEc`@4(*z}hkfyYAp0{c4 z!>PTjNVPEXl!b-Z=3>x{S8`=554b?s>S|$+5ko_`l}e7fm~`id9I`(pV|nTj#h(?e z65T?sTp2hhciwM+T+5IOTQ_WEGVbjV*si zXX+QJ+~Ts3gVHv7kGcC9>?J6N&&LDf$l6ty4JrcKa?(fMGrjf zSi;y4&MR9If$Nq_Vd@R>KkmA2SklS0Ghoed5(if4X0Un#$9F z=dd0xbpSNhq4@J+#VVS`W+fSC@iPYH!EEoDjWhAOy9FCdSLC>%N#q7v>z^!|g~&r6 zYyR*xTT@Xb%|B1g2Wx4-lxp9KAX}r#kuk9VuH!Y>_|yWnZ_>4Wjg<(w?eNLgd#IW= z6p_;dfIpcr`4tMx+7oGc_-8DNlRTo<>PU0m6y4~W=dBl~j1PdNK>)wFltbO>@L~L} z>I)30d>bRwZs{=Lkg_tFn)s!T3?Ae~;VE}hho9e+i;vZEUU#O(XiH-?sqw^0>!Q%U z6%f|(5_lmB+my^8uP^;zEPy`7;8I?4$vEC;+1s>O^{CNXHR=`EaO=FOY+RC^+@9K!bqI?I3QS9j~HP4W}}C{2CAV`f?!$nA7GJ8U3NYFIr0VLjOnot*6OnJAx;>O1_@Rc52^^h?7QJ1N$h_?8 z;KErdK#*#1PH^x)j>ty+!XQ}3od&SwG8pqOlx6|S=N0-~Xp|5<-_^^vQSakwLY-4t zLRw|-p>A*+Oteh)raHQfnXf^VgOz}Ln@tkSjG6eoZHxdSY*#35J!nFF6V&krk}N)p z?bwYzy-n{au<9Z!&NAuYLz>li8i+lC+pW~I7sk##{*cv!w>2PPm4dzD^tehhEZcg(z5@Mj0u%0zY!Hj zp8*F`O^5eDrsW~=U%@-STm4)rMtqanSQX&nMb;3hxxt?bk4!RvH?6jtlC8_EDM#OI zvZ*YZ7eGk=y#!uG6;JXv0L!u(z0m3TsL6TgE>tD7V{;q;X$E3#dZA~;#<@jXx z*6}(6y)aXYq0YQP{WNJlIFQ2t)b3*&%5m0*bXf@$w-@1BJW zGb0$}5VO^`z`Mr_t8VOYC;qT8>*=y!2=BEt(7V&%V1R3ELQt?WQ{2x;Z>;EM4o}5l}f1J07e1~k(1q8{% zM!i2tvMFUVTOY|OxhH}3SUC8mq)e~7w?Wns>sEj*Ioun5bR{|;1lI?$Q(%2Sy_Px> zkkaBM02(CZ-~0_~8}HX!jp-YuGnbf|39@F^?22&$E~Wl#kvJ}i@m~Sd!pmd;M&HiT zee@Q?o63)cyOUcbOX+Y&P-sh7kM+;J^M!y=8u@Cf+L{%qXsFBcGO_C`MhNKJzHg)V zJj}G}_ym7SN&-P7!-oY56PB?%Y3QW~eR1lU(|{Yog9|g7S^31JwECQ*+WDyky0vZZ z>m(GFbGWFhaDwEs?c|rN(Pcpp8*~J2*pE2W(xu0h&JmntR%-mR9%9x$3~GSgRskpb zPtB)MpC)}s(op11|M&}~r=PavR&cih39$3AEWEE&e1hpJ=ZY@mMBBCjKkJOAFdyZ_ zt9d%h+g){7t|)azyATxA|EGv@_<$fIIWNCoM+~werLB0WgzWII zlM_ux(7T4#y^Nx7?sM?5J0}3^3C|(Dk8u`O&W~ z;vHXavQ1{^fY+ZT{mie*^UbTF8n2>|`IQ0c8a&59p`a!zI_JIhmL6#wbx{8{8h>vf zQdfbp;M<6ucs(-9}v zIfta<1OtsUOBtR|rV%`eF-=>9z1Hjigx7_Dh5)`E!v-F%?w| zxp5hJ!^cf)Z+ZQ}qmrh6P7ZP%_~Al&E2mbxLnFba33vOTi(BN;IqK9Bc}|Vw|N3oH zk>FzeVULBZ_Ow@23VZD%=;vnly?rGc9JRMXLs$sU2sLvr?z-^?z2ipfWs=eZzz}J# z_rk|7hHS%T?;k0s5a>!dVRSHpuN)Hy;+o_j~j5ZL8p@l^4%zpD=|zSjb%cv4j(HZc-CKn-oGU;WHJH`)Xe@M=lE>M zN0SVk^s)BCZ_FI@h+T~#{33E6o7=^nqpkZjV3a7D5L@2r7;Edp3Kk;A5KkH9)}Dw) z6RAU%_J{}k_{BuUZ@Sg?fnR>}l9oivGh!CCl4;mAk1eepAo|cT4#3=``CT;es(Zp{YK6+oM8<3C~Jj&y2XYz%Nws! z_qWFNzNC!#Y`sYYTopUa%8$6IoVQ6+1(O7FwZu0KYyRx^(ZkX_9>hivHy!&0Fl%q) zx4#5!b>4fU^B#qy~}- z>u>(I7ZOE&OJa70LigmXW*IeP{&<>GSo$$_u)slGtr@XmWSj6Xx-3dQ#1^qG2_7C^ z`b^TVwWT5&JyNJz-pVh<aI+8{wf06!n zq>iGEfyb<1lJG)T=&e=QP0d-FT#Uq)iRk?u;>7t46G50;oi3TJ#vKY9ZZsTZ>jcHO z#RbXi3R!tdmpE0a5seLw)Ep5JhMYS#cv##4jLZI;*58ZQFYH#+crmq8Vk#_Ap<2kP zV2yNbSN1;&g_TNt@3?ZSR-U?vuxRz>@x;ohoq^}r$6FMjAFu3{h#>@dF+_<&qX^Tc zu2O3@39O3CZ%;^Uok)Fpl~QV+V6Iqc#h;dpL;b092g(i_W-q>Lm@mrs*piuhGH_!1 ziswo9PlUm)Fpcd^SX6UqQb&_|;}BYTSH^xM2lZ;PD%mu#O_;Jl_T%ykLP1-JiiJ@} zRtu13vtWn;!Cp>{B=(RO@Fv1kd1d>mo6M)H=WM_Gd@s_Q!c^V-b2D*1t=d6WR6XFf zoou=h&95qwhB-xxuQQ2U0o54RHt`7+9)4L9K6Ynj=Q;7is=O)U1dbE3QO3x6HTvSr z1u)siwfoT4W!!sVe?*_k_}hiE7wUDMpNSTa?iE0|i|3kN0xSlF$;K%#{u~R5VlvIB zn@8Q7rbK0+;o}NBLEw6Tk38x~zP5>P<-$vnXsvYF?KaHH8grEG7OGZj5 z&I^!J4w-9ojbx(7KpG5WL5q^B`+bC9){4nx-LVROwE>3-M`VCX9{`(I90u=o5}JvR z@-;1jw$?;wEda{nqrg}B47D1oud{4flmAr0ZkmdxZ1D8i_-RZK&Sl<;I$BKnTu|s= zi^-ocv*4Y1!FuZebP#RN3+W82{9evQ(odB=5EzmdeVI0(xzMh5)KRI?e;i=`QGqv< zSuBx99rx3CR2V}1xrnLQj_iUfjCacM@DfZeQk1>A69<)ZCqmBuIXQsEKphJzn89XE zsL0ZmVJf8zhsx$9&e=%NU#AGZK}(x7?mfyTZi}$~F#$Q8z3&YH&1jwT*Q1y_Z+4DG zV+PrC?YnHY9YE(f0B(+&MgW1R>*yWhP$Nd@0{>dB<1>?ub(6ENRt8@i;ZbyK^6 zV*(;t>!04gZ=rB^OPa5GbFO1Vkv46_?>^pAuv`?tAlA0Qkz&U|l7f3{ef3S@q=r1X zIL-F&vwvoSIIfDHzk`9IsBf0UnIrTRBi7M`bL}dA%PR-TWNNr}?|k>FnD)?qz%1S6 zfZzN)8=pTCzklG9k@2BM5i|C@B{EZ~Nx!()hf7e)Ay7et2?q!;CWX(U$>Ced(DokZ z4G7P?Ac|*Yg_9Ze=PMUBHFg3fdtzOSU#z%(jvhCR#6+a6m={o}hvwiqybUOq zf+ebbYH+HTsZyK&%p;-jZr$qLf@WtbIDqHQG&3zsBcfPL6CxnXS{$;>%wGrHvjlhG z)iol5^|G%C`&yd_YGBp%%yyMbQcl4ClwJ>U36idP5_=E16xyS9K%9o8YTjroCZCjA zsBR7TV05Igiua^U?;CFHUO*yq-+ATUN!NwO8-7#bikedrJIczQQ`o@Ig_E~zr#>LI zfkx$Zba13)&p#YKVo%cwK%V6*C|U9;@~atajFn&Spj4-`{!&Op#;I*TAH+ zZ6EO9-6%zfrWLLw&b6RHg$-g!KC}s=eXZ@kBjb^Q$(?7_`9Fu;y6CO0QugEi6qJ0i z`w@x#R9z-JV7>$*LE~+O02@K(|7i|*r0Gm61CrTYU`<3{$TgWKg=4*r7|_KFf5tfs zX(eEQucLH=Bq+Cnr#92Pn8NqyXX=-Cy6{tq{TCqmpYSxb-hbzaCm)uMkH*lTdzKW@ zv~f8Wm%_Tem>Uj!20X;i+|)J^!fB-O;GUXFSF2Unb&2A1I+ z_g@%fjBH}VhNpiq*NN1$+D3PxG+)xx(i}zHwru>s0XOa51X8(mj zKPP7Szd+`BPX7&6{}-Drp84}1kn}%;qojjme8B$~Pz@;#z4**XF8JSI^WYTG^GBk$ ze>QW5IHYGFvN9(=r8uQpkfbncN{;wBtNR3g-x-`MW`*lUwAEO?}@}Y^YO8^ks5sIh3ni@4- z%OQ7&AG5m4Vv-gm0OuiJR3Lm3Ee!;r<(}wLiuvVjl0q5_O<#GVaR4OYSoPa?X1ueb zu ztmO+Ow`4uEbr{4-2`9YaqXuv$@@_Vdf>Tm5Ok6PO?YYVY zm9Y?lp@UU?p@W0rld3BDGzU0AP~X&J*w}NcdL17Hen%0U{yutK*eIBZKO6uMq3vKv zY}U|JH$2pH(- z$38Z-ar*pn?x`=J{21#K&5tCo-|h>nqNa*u(XrS4ch z>l#PUvCG%&J+$*PR6e*4o9VBD0B-kaYGz_2zH6g~&H{G|Elc&(LhdD+(D8^JY#GeV zI!>Ru)4pR_jbl&&Q{cU9qm*Pws9XxtVcH z__-}DM!?E(o8e^$TDE-nbJ+Z^w_+tqz|odMtr&jHYHj#A{I!QwMgBv$9TSRW-@1h};Df^}0pcWZS`1uasPN}14j zM6D#E6(j92xpT1#+V5(&AYpsTH#(2m<-__r8=qK*(>pmBxB+X6V=TXm`CkpzNuiVX z5}LsBgm~WG%COc~XT0R*G8!DQiOL`yQkzm`Q$RH?;Q(BwzhQ`!H?8t^P0l!G%P+Hc zRI0ZoDRh)k+LG3DSp@Ud#}tCc{A8!uW`sYh20)Lg$OIgtbm&?jswO-q976^ehx)e{QNCIu}J!8`-YX=iop%v znTa&_8~zJ)!sSRLXwJKVh@RXSvUQn>$UT&H8{;|X&!)MQH?JfmSoCGudA~h16X!hl zG+~l8BZrDfS-YGiKWeP#XEbRa-Di(hJ*d*9#fK@;pAeDj3L)@i;}^i5qcc7vIw$XM zHe_WLD%G}COLLbBMCr6rI+i+u40C2z4lD(U`JPX3eAl@{yJf>9bCWlEd-vf#&DJu& zWdkZw6Z?1ZmI;U(j>l3|+-iQ$>$^-t>qaxiby}Fc_J@*yf}s#<(Pv515ITS#G=y2ODU&r52Z%EOGEUW*DXnS>#R<;P$cvikVh=>?GVJZ_l1lEfmM`qr09FgjB-;UMaS z)qTeK5bYR;%KrMxGI!oBCH@p>>}_$XTlA3@G;vX5U}5f)jtXTI+=M;EJCJi?-{!nl zbHRMC-kW(GU)UVEi8_l`vAMCkR=TRNJ;uqt@*;nahwWZ@RzVEqzW!#I?ITLMXCfRD!7A6Q-Aj;A<{%u^$gRM4Bcd$U zvK&h+JNWu>-b{ZBdJ<$;={i`8bBlY-u{LDLb&RY@_o=guXZQ#!@^WoLM|6J z2_ZK{&5DaL`mWqJq3`lT0OPxv`1|;Io$zEZAih>MToIxVF_Kz}cwzPJP#95XD?am6 zjA8Wvq0&(@$+|^Wqn{7V;7JZ%ZX74GtqiqQmT)}T2|M=1J!-h&w(LTWLyWHg7ztaxw-qS4^vsah^3BE#YxlWtLF#2k|vjVQcpvmYCLd+43*QCj%wtKH?c; zu|%L=Vo!%RRc7-Xd32x1)9DzT2>-VHL{b2XBm zO@VgTk2ZD=mK6mPAMXLfd86c}Lgi{Tq_+1<%ric_P9uy+;jbQv?B6qeKkRR_a0JEq z=lyF65g|-ygd0Wycv#H4wh%D;PfFaXO5>wv&;g6x)M3l(7-lH{vDf{rmcSV;89Q&d z6jZ!PL}@{4XubN};4|EN5;XBm5dii5Puq*Zl+8WySL@o|7vu>gJcT6O0qH{g`R|?y zsL%D*&ZAKU<*l{XqWSB0<#1CsD^7B-pVViJzmty3+BP3AKDo^C8U!FCqWuu{qCNQt>ZebU#VDt41^px>w|qwz1IQsE8B=ymMVx+>7J(` zNR6f!$--I6wo-_aE?4n;T==eRQWT?$ldY3dTrg*27HZTQQ!00(XVrBobs6#Rtk90P zQqQsC%!tGiLQBF4aK=i)upMh=x>gQ1W*J7^;&$)GnL0~}?As31xC0u&zrqS!bh>tK z1`<24c$f1(COE%mP2sa%&@VyjM2K>7BsO5J&zeZqPa}&7&3u{EguAfpgs7v|LLXMV zvYZrnn#SE<LAaTmPT4;Un&Q((WR^&n_68&FI`|-G$JsPqs)IpbT0hVtSQK}57{m8>=Er07f z$^VE|4YTX^3gxyA3KHzDknt(`3|jF zTEZ)eu*OTxVu0u+9fbdW$XcVSi|#Ew|K0?u=&33nu1s(DMyWgX%-(uZ%)Ors-IGBD zIqhYer*iLmnJEzF6WGRTnidw0_^ie30`6~?v+~!#WefQxGjkQ+TPJc`xc(!*4HApk zvfQO(k8g0Rs#5Xd1WV^m(ak#{KhrU=vBDww+ebU+@bl7O3)t zmD7d6=zdBn$LF1a)VZ2TY+O`JXmc=}`##5#d|yOvdw>-mGCvSp zWH;xM$LO>^U305@p5W!Vv;Jvp^#`ov=1G(fi%!79;V{wb%1m%j_FVX)`?qPD@4hFL#l$#Y{@I&xpL{@HTAiEJMVXjxPc-uHpJ&PN#&ly)$#2?_phzpmj+u9s!dg#a;&tku35;G|Tn=ys+{{hVtZ8@uKui4Ok*J-XZcH z^|jO?Em#nc!C;pDr1Vq4pXQVvM=McJ1%y{Uj0b~WqHlWAUSu%YHxEm%{(_;Lv_`y= z;V+qF?+r@k6bU~5X*vfUM8pjMAaH}kuS33$$y0V*^b5@)DIc1Ac?QMC5$s4ytKqT% siI-%W`KeUFpkT5%!f*<8nN^NVeiDuRlisoH<^6GmEso@WE^i?J1DFnG9RL6T literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/admin/configuration/notificationsoptions.webp b/static/images/auditor/10.8/access/reviews/admin/configuration/notificationsoptions.webp new file mode 100644 index 0000000000000000000000000000000000000000..c211d90c08210261c2f4a6abb156a4e6dea48fb4 GIT binary patch literal 11880 zcmYj%Q*@VdE?&tT7Ok@)*Nfrf}(_& zm>weth?=O7ysA70vGTt)axX|WC@mCN6)2xITgo4DGEx$Xc?)^JAK|7ppN4A{C+tk6 zOv10j==bdFOj~O|H!MG50lAO4TkV}5kY7ztpeHoI#Kn_0#FW@iBH-6Bu+w+p8RRSK zsTFu|S@>-Ulq+Q_gZ`e8M+AIF1Iw@2KYL!8us;nwJD!1?zG}J8p0^&*H{XW7v>!(w zH+MQ#zAZqCec%3@hb}>1rtietitEU4Xmg#=uai&LHzqwML%s$e+C$_QRvz%(clS%^ z^W&5M(zX}+{^qjhu}d20xhwig^rYKJ1ky9@+vB?hB)e|-(*5RtB)amo;r&;{w<}Qh zJ=Rb6gnt!y2@HE)dPe$41zv11J^KR3D4Hf!UkcSesLJVo+}Q042Nf@u>LHJrpGSgw zZgRx!(KrKE!Lt|Qju8D*>}VsJ5myDo7ovUbV)QSnV!SO!lb;=c)$bn}hhFmiAN<9l zfG>#sOrAP={FoJg7MOtXas)1oEGY;=_9k{g>sse5DMOJLf=<-f{QG zX;_(qekW5gzrZbS>FoW@8rY;$O7jf1a741JlGVS)0PsKbVZ1o{E2paB-aL%AvF|M6 zA75WwKtAItAY?vs5E!kHMlZ0gaK9-$=b5HH_r2S!(b-eXcP#{dInBSw{BU zux6zXxX_qDZ=nBv1P`pt_4rOHhmn`Aetl?AbXImYVPl=DY2`oMfMgn02AKeJI98rr zADusfn1J{TTo&60zn_17NEuaC;->nSlgk0eE}UI1BINLpqf=4+0D%#&hO!w8ejN?K3!eAe@i(qDI&>56l35K6J+OsKBfkoAv?J?OUU?U_}VuBuoX zHfhT?{J+_0z8Jy-|FM5*$2Im+b7mz?s4~_A@z4U#8zz%QZfOsU*F`Ji(-F8ttg>-_ zN`y{!uwC7CPQ1~bUrpnV0+h>~t)}r*B>Iei|A+eIOkPUl*v$4JMn0nF4h$LpSifDl z&K!AVn8O;WuY>lIq0+XD@rna;8Xu|A|*7yc$`) zO{?Bl*3-Azs`k7tKm^v2l&QFm*fZWvnmVj+|A(Rf%3c4C$RAqxyUF1- z=~O>2@oZ)`gV2V7(0w&h(KjS)*(P<__zLLyHM*<$$KC9|to?_rVH@e@9M@T|IhUMl z^Y*C!1uf_gl!!gi@6$Z{u(08qEh&?Nz=cP1nPrX<6+EEdHanpTV&=ssesUri&*Hz}RE^h+DFmw|$r<<0Og{ zCh{hB;1L+w+JH6??U&@w~44}1pYRj%MGk}n`TyGO_*K$O zs)wOw>5xiH4T`+br3>Mmu@=-4v7&~0?utsKjJv7MUE=(o{o!Nfv6&Ky_Hd`J_kwD> z=U=Ow{6N0n?6~5aqgQcOvBc6jeapl*V<>FDGBi;=VS9p;GDHFXFPZ#VEiomPy?cZ>#vbPKo*9t%_x(8oVNPM{$v=1v!0dy z`@Jdf=bM`MdJ%yu@bl;Xu5(mae-qe~sr8hT9COH#L!*HR!Lx@|xZ=Xev7oqGoxF$$o`?TiV*xP13bcuvcf|bElCE8}EBIs2M zFZE`xM9Hf#%ULL$g5b}Oo*yqPAgj8ZIWBr?@$iIJcXafTM(yE!ZfN(-a8~ysv$jSh zX9ru9<=c@ngExl*3(#-nyFZ|~>IhTHg0l($*`^?}EEQ5jI2v&bp&yPSaWnTkcl`UM z)I32r-x!I6k9)E1ZJ_6WF?8J6b}bYmnn3#JgI6LDgCd9Xtv2zIC#aR=LHK^wK);DV{)F?JgKe=g4*V;_tK^30 zwp>H-r)Tw@t7HJ&+x0i8f1GZ_e);G_tO}T$X!_8&6V6LVo>%N;@U~KX=f!Yq|MVSgNG>jcy65p4f zvqGCY6h-F7R;yRfE>gmGW6jiK0hijdX6K&FQp%8i3en!ZjwF*)5W@7Bwbk z>&ue_hP*p_Oj{C^I}LM(DV%BCX^3J9#*aNssmQ)d@OU-BV*F}&3r1M{?9f~A{|etr zrd5-=n7HZl`OK427%C|=EX37jE(gv2b0xuZeQhIi|16KR5G@N>qHW(fhFnabdY6vo zJz7+G6ybkt!AYC){>TEL6%*yrml(0tf#&BhulG&-%^UG%GOW>XnEL~lU)InRy-dx_ zcrre#;5)v3>oeG+)!`u8WRX(>nM0;b1jt`R5dVdI53b>WQ0UV{c4FaQ0RX2H(SD zXxF%x;q}iyz9_KD@iY94_fA{i-m9+jsHPjRVkhQvxnkZvLp;>wd-_o#k%$2jsZ62= z@04B&Xc#gIyVkdLlgGoS6e^P zLJsdJy0@^(R||u7FxkSj1^GHA0bN&u>`U07aBM9*aEw+<$Pan-!6m!N!E?<%D#K< z&CY(V2*Dy&T4}Lv+nj@XAjl(Eo7o{m+0YVf%~+oy%cCA`uEbF?)bc&~vd~MrsFoFL zneF&MO;GiBl1@E85QIYzC*w~NG6m!NGA9YO-l1zK-(j8zLo)PqFOWW^B7LRET?Un| zOmL{`$#$jTsFT6`>GOas&LSQRBYH0LG!Rx#(;vGE=c%O@pU|0pM$NF(GTf1gKEex6 z_%dYSc6w5LrDnJd9BJ`l%5%+U*lyG=#^lYPO;uQ6V(bf?eE~ABZpor&g=YkZ~3n(1>c{j08z`DOO)V;;&w z)4|~!C;`I_qZuT^34jwTPrzXHz2uo42lpZio_rnNWAPY_Yn>jay8qBW4wh3U{+a^j zq+R%FWK-}BC)dJbMD@x%kf%Ov{KKAb)i(S!J#K*}rwl2)o{O`Us=PW_vA?)aRm0dK zN#yT4%}842w&^NqeJ^8ebKQs0drk+p?HN>c?2RkC-k-dI>UlShKg4p!I#OhU3)F0L z(!;K`?_~bwPZ3Cqq8?IghZ`BFo!q-oA>R2g>(00-UmJMPydcMk4_JwhbPX}LqMNO@NeZVc>P@k`V&}qZ#|gLmqzsFWi2#n` z$MoyKq}axyE1Yoq|mZa=-lf6IVumj7zZV4iMevSGs~={U}H;X%;|_k}`ZCG+Xqc$PgPT z%u}Rnw6{BxyL@se@Q~y4yR6w3Z|EG*3M&c!jyGK2tJ~jQE$DH68y1=^l5Q$wK_r4c zF_|!7UhMVZc6QvUdCOuSGn~hW9IU~E$07NOO(BysFblYBR71F_j)f@xM zo&uc{c3O&uQ?|ZVLm~aVBZ}>Mk`O0G$tOA20>(fm8g6BXf>%-aFjO;qa*S z_COyXr0H(75gD0so$emH_`IYU$7|W zmql#8BW2jyEARg4I-8~NSQX9a(|ZOhk`<3vZ-r7>Ueq|EV(FRW7IEebPeh<*6PeZ* zlRc?S*g)-X=j-t57i^#YM4jqF_%;M#-VDu~BmDfAC5y?CrO$)D?dG8lnwK7kP5qfL zxpN*;Dd+n;V>4#eW}7V3Go_Z0?fMxl_CcVeLcGz;meywf@I91TjOSzHMBkQ0Ne@Z|8Ad?(A*LM6U_9%vDMo>*toG zkm!9l7MtT-uL$>4El#4}=dq}5zOX%qv`p#G46s9nia|ds?cW|Smku_w5OB{nb_G|G zvJ5)f;l%gP>+~l>+HK-l-%O^^Id5-G?~wWr-vKS$w)pi~)l~hi#T8An^V_Jxzl4(tu%Hzbxqp87ko=mGjNN;X ztT}8+)W$Wa!aN110#9gUWS^y;7Q)MGL%62a1>Zb8p5;GI;+Xj4CO#Voj%idg9TnL3N%XA+3dW*TpAS_dCCYTj3ZO*1$8&b zv`S{NidKRpXrt8n#~@+_9&z$hyl5sdRqN?{hP^-rQd~_-|x za2z19@XVvQc?`(}xd%55baf%ozNz22<64Ykd^HJHhUL{=UWi^fG@N|ai zaN8+|3#YyYC^&!f;oxg0kFTyg<$=)N_xv1tI}MKIvE7p$QJ92G&T5PK79(-hy{`$3 zamh{l5E?hg`Ih3_30|OWr^Fd;Mg5_TFT~0-v^^<3Ws>Nw3Xzh+i__$sHjH%PGH=y) zKkvjA?_Q!(Y~_IeBgLJ$QB(k)1iR9(4j|r;OlU{Vfv@x*4<33ld!0*u6h6V7LoE4u z_O%x>2ZwKyeusgcA84IO2h)g9@f+8Gt<>70@N@fZ4#BHRK9T;)5*oH=$>>;X7cB3( z7Cp%f18b0;Vw;v9^LsB|Oh<8js6GVcfy{+T&JCTTN{PbXhO>xjTg|OYK z9Tg;T@cf1>xkf;oNiD&L>8~eQcsI76K8(M^spie)Iv-NGo-YTJz(TO#%gEb<^5_a{ z`S4cKVc31TE70(%T()p2isf2)>!l_#J;h76jO&1_BED7yR$II3<_ScaJenuDHV{bM z<-10b8ofSS?Yju>%||W^eI?1i6U!xKTIpH%i%_ju9izdI=wlJrqxtod$)c%3;_U7% zY^z<8*mzTdg+bcAcMnrYNy^n<`ILNd`!bzBSmy&rRzuj}(I1!dEAW$l*}}DXIb$eD zn?!)CvgiM9otBXz_NUqOSv)JVQ~)>zeVf&z$P=__B9|rw={g=HDJ_>q&zHTrUmT3&u1{4MwpM-x0(YW zUBZ6!jT1RK6NbK4dqzxTp9S6k(g+PJ3>FclhTN-`HwVFY2`Fk>#r*H7*0t4kRNZm& z@&C5k3}UP7VhEEbv^bh^)~sDfC!*|5=?&v-d0@?3-*Kr`Ev=3EF?wSEiISnBm;=I` z4vP86HCk7|K-24Yk)HQa~snAT@E-4sEa@*}d*YRLB<>MzQSL?ZTXy9)1x7IW6amccG%6Y)LPaC;qXI0AZ5?88hb4FyHG9nBUv)g#&qDKoCfi(uzB4^ABVmeE7$b8 zg{E_z0b_RylqaEy_O+Pdg6kG)k1OeaRo#E^342AmmA76|#Vx`CPq!rRx4d1P-3QebD55p7u(D2;QL5vf=D z3=?(5_bik_cIJAD6uj~A(yx}Tsln#vhWQ1EJh>HKX5$k?Ko|?4QOG+OZkQR%SVj*N z7YZjQ_FQO0ps;xvci4u%lpyY*s*2SZG^IyKRCPppS)@d$c*!QOlO1Fk z9-gAX#9uWc;}oVl6ca59h*J_sJN+Z8CIVaN<56rLdnG(gC!)6~9-~TF zDyTL2&k>JK3VhB_qDd~fYQjq9 z{#jkY5s6AUnZ~rWpX#Wv8Op~9{^pDRK?9^79hIkpnv0!&GS7rnCKQ7edHd7=h^-?_ z3odLF3OLkD!s`SF*eHl~8N9!QA5e@47a|Yyfrgt6;t2l1VyTcP*l=q?aV0Fm$ObIj zy#4K#S8T@1mMd%7V`E5zNRu>`DjRpn?lw&Qqt+1BWLSA1Y(G;N;&Rtchc9lJL6+O= zlVRg@g8tH|Rc~c`WLI_zOBCy5Nsi!v|Cun#nPGLSM(9I`t6BAFdm6~dS&PNTX&2#^ zA?R@mdkRLxoZh%ln%J%o-IH}I4pk&DGi)!S)c=&eS-`8Wq(^Exeb&1cU3I+~>Fsya z1HpCqA^iGQu)U^-8^S-vMP^&TkqNfmH+u9fGs~k)nKZO9MPeKbYO#Qw)#pz_ehWX8 zPmtq(QGY`oBA%~!fYyJSt%u?Lx$T>Z{jr3E<=V;(j4iH)d>Sz>CpZmGs~XJ;6^)-4 zLQI^1f1r_1+!%a7rH&VQOJ@`~d5{LbasIyS)1AE1%V57nECeNPurikJ)U9z@YgugS>#Q1b=Ki}XGV)vDTMD$_8ugiEerfaPEk+P$(g zt%coYmZ2FM-@m3JF!j9*QSG#~#`Mxe^y^V#-+o~}(sHa&5V|ux4u8ZF{t&UA`qnt* zM6Yi9N%A|qW?JM0Igo+SLpvO_6vS5Z%n>k3$P~S&?}gXQ!(8A-C7?K!)N#1>*>+T0kM(LjYPWxon?x8*a1@K!go z;CN2hkW0~0Th7NS=L+_X1ayo^zySa*(!(}T&#o|(Ku(W)b#ZuG;Q&YcI*7o?jK2Q5 zBz+IrQxy>kEr(f0qO(M{zXTzv0nd%T=f!6YXvw+_V1-bIBG!ILo*Fj53n@VdP$? zknDuBa;xXtR+xBcttHE@dLT`vIi*Rwm;$1a+B+FTK##qG$gp+PIa!PWkXv`Lt+Z8n z(JL66t_eu0JmmCE!aPOv;lD-~Sjw;}A#6-{%YM!NwL~u<(N33K_+)%FKoD9fm@L5yCaeO4#a zf5waK#UluNJXD!-R?i3P#g;x9eU1OPtJeDaX>Cz);UNGHitvqZN)T&SR_u!4fr`?D z${Zr$62w4rx9@$ZAg}Aw)xu#f?c@~>(7mmU$+?@SNvPddIMPK630qU!p`^shaiPo~ z^)@#P;p;Hr)xk8z>MqIkrV1eCys6+?w=^_sR>$Cz>{MSfqVNs%wg!L4;bcCkm;J3r zTX78}u9v=`?oZo;Y`piQ^0U*C9!XdJ9B~W7`8`i%-6w_nF;se&EfjQsTM6deq+72J z_#1zClFGdhknMUb$g-omo*SWYnN?-J^Cm%mkdT~ry$7GrG9|*AT&-ZhU2yG3RMOrU zM@76?FYktLE=r|x?5NdN|hBec>iqJ?Zl z(Mk<^CY1`8hM4FF4IqdMpysm>fL1$XQ{6`N?tQj&8vf_1Qp=R(3_FiI=K>(0MZID8 zwKyxV@_!H<0VHaF+fk*I&JSC6IS>BQWmc14p~in05>JGUanXrIyPAgVKn|iI2`;d&I!9vNsW${yuzttB@+F>BPRFo6DyY>C`lAMAh@b(R*bz54gK zKT_$%Ug$o<`}{s>{?NMOC__Lf?{!uLi1UrCosVKxRcK0*dy*Jlv`hrhP&mlU_DPsI zkZHhI0u@=$PW%V2y+dsOq zIuE{VCaKM|ah+J`7x6H-4Ep*&d~_OZ`etBxurIM}`lGx+==U=ZgTF$JvCMrSY%~&ex`ZwNd7{F3O(U5>CRt@r^;1Y+H?ewo7Bz*~~ zGYweBm6tDOPKflFf|V-$CRZ@EQ7ITHjqGJ+Yrh|5#yiRFfrDyc_R0i_lpg& zAyQrMx`-0fQZjw>Mhzg{C7G}Q{Kh9W5)df`XdewKA?ZX@4^yGR;3XSepfrBIU=O2? z!S%8}0P@N?xu2A&O{P!Z zEW5JBJeh^tIC@ORPC)pPuIA2r1pFJ4v&5{&gHc(vPZ``DKm~u#wsUqr^=G5W1YDvl zYt1Elohn%ge(rZ@h;D9Q0XJc-OEKi1aSSjpBc|(J-!&sgR}5+8xLOGn&aa?t#&dC^ zBCoRYl(f#ii%L!V?|0mwZ`I@?m;RpavqoKWcdtU(eOw9}KT3O;kP-JE-NLq94{6p0 z+Z9zGyC~_Lc~h@RLi3GlMJ`lO)1OH7_;vev#6~7rHDMNw z3)Vf}-ANi0S*rZ^h%_XKO&yjB<RzP-!FAm1 zSIi64$x78vTdjLc-k~yDB~Me>_(%yklpEw>ofGv4H?LKpA`S>!Ag0kQ%K+amq8EWNbA~FTfCWc17pz* z->Gi+l_EI=Vm^V4=wt)4yT8R!#unfrvT(q@148tn)>U6ly}#jrs8zVrH?K!ULPIj1 zj(pkDCdkh;8fFXFWAOV^^pM}Z+}!I7XR)7u^is%iol4&w=1B}jN761?kYxmWuy9O9 z0}M|hV7R%ZAH||g9}Wntq>{%ei|3(SSezCJ7#^dOn1wC^WG~}54SrpArzK~tNs+^p?im-OXz5c1Z9E!>=s>dp z@}l0G2Uscc8SRvj4KQjl&CJ1%vhF?*w0HLioO>6f33IyYxPK2{{T`53YcRO7>;>)e zV{-WY10#PrU+YxloY`2ra*Xu8GIGUlFgOR^gOiySb~@OZ+?gl#ATR&=PK-GmKn_jD z1OZWH4t+Ss_TG0Cq(f!CYpkP{!#EJ|-6qryb=oie##eMmzc(L~+}=`}ZvISz5s&hw)a>l z^0AuzS>2Jj-WK2gHxDjqBcZKXrt^E>PkkQa&C_kMOb`! z!V2sQnng7@F*i3ef!@PcNH4!?8X{fEG%V-fbb!9MV4HLU&^sMP=AzAE(8&l`LT@gT zfnC<^z>UgNW^>z$wBQ5ZdS{EaY|_eO1K&3^{Yk4w)HdQ%gamo{c970wZGIw<(WfDa z+(!j7&(d~K;iV{_uLH6ZZs9$zk047hrTA~K_{D`!x3cb*{*!y>n?B&ZU1`=zs@^Q3 zx#!Un{t^;Y{N~iBx+bpLEnc?GbNg%Qp+N6GWbHEp?&uAUfE5(mXb)|Kt62aQTQy4= z0un85eQW0>qn$#p1J*B2lPC|=oAFsKbsU$XH3=e!4Ff>0X}<*wKu^@Q6pqGIU5mxK z1_$||R+E3f3jVzM;JIMqdO(k^I1VS0lzhQ#r?09S?y8jHNGK0gy;1_wsmqnL)3P6~ zI^WQrJFYN9DqtIV=(ib+B-F}m8+NN7D7;e$h*e!?g-fbdxkkIzU|=47plUp4y|uGNO!N{lSbL(n-QRK}T1@#p-JQ?*BoVyVGANHWqs;y) zLa7|QIi02C7F4YplXMBi0gR5-st$wPoqJ5k?()*A&9iT&Xjs@pcg(5G@`9!0#`p=O z%k)_%5?7|4fC}sMF@vNh-`T`5B%l+!UZv>0x$f9A&6^GHLI;A1`*6gbAIVWxYEVbl$2`HiTU zX3gtiKtI90uQSQm7?T6}7DeJMD?fd!0NN137AdI~Og=7ndCM{%UxJ-P%~{+hG)hpf z(ASDYV3UZRs=|k$!)7B(nrOqeY&IZA5a^Sl@8z`{%6VX-0JYyxW~G@W6QL>Pd7^Pi(-riAnvGSTnr9^EL_)7i;&tuh2(_Yu|ss zYz$H7eRbTw%=LzW5+7i`VzrS7!Jd`VLGC@CQH*qZkHLmtPfDXVA6#oKOd-yXh+s6l z(XDxmqo~Ki>qmvH!XJtJGGq{{)E3BdGyuT>cHIO`=$T+{qfcR_zqfbe&~MMnTs|LN z(h&>w1bG33QDu(WA1I2w{6${Ze@KeqIj^LIxN}uMAh{JXSSS=p)K~8^=hiEw}T z2n*XUcaN&`ESjRzh_UL@uU=u8o1aj>Cr^LBnWy_Rtz5UCx|`k3-a8+f-Irbf;NXqu zr{?Dt0Qk=H-#sGO^0Dpx@S+D4oC5(qFMyYSFZkW|&V4(5%RS!S5lKP(=!H@@$6Zo^=3Ev}MH9!+E`{Orz_%3(5Q|J>32>M8S0RG1LB>1em^XvA#@>BdK`Vl%Q zdy9MZYwiWgoAPS`EdKz0;$BhD+1~9w^R9Y#elERKzcIezzI$JKfdC79^?)S+=+7TO z*hk$z4)v@8y!re9Ki_HJlK=o9X&?5b3Xq-}m%ZJy`D9S`uC|zr3cEq`h$sGKx9*pI zA$AZa_|<`<%Tr-Mb_yXi1DBR$ccxSs?9D1-3S})d8xxUv1k2kEutoil=kNoC;PkxH zzx?mJ|ep)R-+gCW-f*y7=z?mG3BD#Yrqg*<|pEkOvVQeb8!3Si zVfps9Y+2SoLZQRQQUmsjKvl5>LA=2d|2x2~e{|}p@Pe)yQ;~xEqk3s*%W;WJub|zhWco%AeZ-!YH zw&)YN1=M!39Bu?W6s5pm6Z0?Eq(ZjPl6FO2D$bZ*Fji?99XG(${ds`;U;YWKxe^f@(3`!98xm87Nekc)E# z?%36HcYA!EsgLmALp9>|wAHO{mQSc&j{orr;er%65glk%2mAh73i^M#|A&Kd4MHF0 z$cF{_`lwhprjM#NUNwj7*A`FaoU(mu4#alK4x_`#R$`-0KH`6{}{wQ3?+R$~_lGy{z+54Cbdm&|KTwMd% zV$}YFWd{9@%&zimhm;(J(DBG)(#*Ek+E@?GwzGdjH6OGo6C^ zyTX7JVr!9@_B(ed_ey(4%P8g<1WRUbq6ZvE;6R#$PZP!{A;vs22!As!|81LUQ z|AvJ>;U8DvDYs3d%CS>kRbcK;zMvUInaX1vy9%!yv-KBQ zQm#33pB5gf392=d0dwj_KKPqcz9~Y`J$xi#L{dt{dsekE?r#huiy_wY8l@cnt0CakxWcu>;6sSKiFPMsCXZx3y&3=US5nQ2zB3aVEmN+T6AI#C5bEd zSu4jWJJorC1^DK(usybTe8q$HWYk^$q^bX@Raq>pjul(3G?zn3O3as*h3Gt6jk8pj@aT^qDq5hs z{+D9@{Wv?5^7Pz&gn-+rM{x?h`k4XH-$m+kpgL2Z`Gw#}3v>D5VZ|mX63_W{tad(( zSBjS4|9GiuZwOSmq>)=AvJpX&Fm~j~fy>6KE>Sb`o%SAE?8|o5JLN)h-)j;z{49QY zv@sPzuuyLi^IF2np~d;X&?LTBPl5eAYA+@Kw#?cZ!`~C@?LA(5_DDeFB1dh>&P?M? z`&R^MxsnFPaY*M&_;|Y{Ch`BOe_7pmi(ZQ_EgW)AnLv%d&i^PJ%IF1|TSt!Lq;rfE zaB5dkzcoEtbV^O~cHsyatMbn5^Zq|nlK-NFfgkASSv`;vj5&yC#>*&F*Fr+h8N$ff zqLoV{*@{zQ&5?i-2pw_{WO~HtTlNP?^p7&FB2y{gUQu|>Qp4Ir;Hyo;l$b6xFm*vI zZm*7)sT)^=+*xB3M#8-Mh&!M^;zv!FWlQ?1((3^%k=ELc&ts5AKS1@k)u?zLm9N*ZK(bo9e|rH&4K%7xkC$ zR9Xiny*Fu7Qy+xk(CW*w?ReaacZ*s zNvsU*Q|8tvwc+HPZJY!^sb2e&RL;YL+^Ypny8m^O@>x>kF@9QM(i}fu@}z;4bNfYD zAj?V!E(KGYT`ub?R1BB$^@jqa->MVNL`?bCTuAxI`$Ge-0qy}VgY$^}y42X!kyjGW zAPu;Ozw)Wq-+=zGrW?`lUdR`rz>*b{RPj0Zno%jQcXHg8dh5AM;T;_AA)SUM?wU?Q#r&T_o3;;#-CQ0gs zot{(<{keMw6dM-$kWjE6AIZMPRCs#%p^V@KP{(Z16$_<({bA=P-jMzd zn?x|x?o$g|HISC5>^=dJ-$ibJ;PYhBiH5+mq;~8+x|I4fh~}{+viMR$XQ00<^rN6_ zrf(79Q2ghvptSP(=}za6o!g2JR7)TsmYIY)L-2ncJC{0vCF-vu#vRq6cRh17+Ei7b zYOg!mz|j|#Upkx-crk&pFR;-8B$C1h>7mNzVnITDpEoJlZn8g?%L;Em&`1nMD2{zg zf8`ncxrVCW=PVy314Qmh5zO1rtWZ>nt}+G{{tX5le^x6&3ahI^xdWB$$kBBPBDu$csH%nX~%~&miu*@Fs1VFAp80Ec@UE3uQkA_NA)iD zY|aIs#Udk3jaik)9e2eiQ<#N0lF-Lv?4aV7D2rxoVM9T%>m-Sbz&PC8Xlc!N$2R4Y zDz{q2CaOvE97>{R>!Hj7gFj)-s9M~J*GpmLV(5o1;UAZhHYY7`^oaDCJ?*I4q8!Q7 zIakSV^>;0P2NJ5_6j3bqMp7PEV7+Pdpw9=7GB7i0(y4f;%d$&JQNT32C*M@0*IT=X zi?}n>d?*-A<-qqic0`?sblcY&cjXkPiF!&cT&p#Lui8GHwdkmq6J_qRl-Rv$#B#t; zKr26bdV$0@lY>A$3WY$I^z?lXz@{~HgavtTPcJVG}xt>)!7=y5s?PFY$kZC7Bx@o@=Z2rRY z#}>drxmEFriWK<5uphvc+`ASBVBq!wlXx_@`E`oQ>2gClKT<(1Y>HQ>ZjGlT^c5VX zVqQ0w)yn3;c_(&OLlxLeFx$?A!LJbCyytm3zmaI7)DJPBl@W8tcVz_u^@;< zj*rZ0TtXpzlynXdn)b$v*{E*)iIg0TT=`oCfDv9);s1fdxPZL@X1;t*(d0$#n7LWl zb5*$#YCzd(PqhXV0|r3M$c`r8^wZZj3Ro9X7xrauGc>1uh9+O@w(-9W#PZ&8id~}J zn>+lORR!}#3V@~?bk#lKI0NwtT?jTV@>KBb>6JH#sZ1Vy&xPtXIf;nJTRbS!+M`US z#hzL2rgX9}ngDN40E7;O2P$)Gtmf*eY}4I+S-)@(|C~dwHc6N;wp{I=3$x7Ank?@? zytyJBXML|rOxUdS0i$%wnQ`-lLMb?fUn=s?8~f%!tJrZ6A9$bSLI*y)6>YO(s}q`U!dz1 zqwraf)|XwVIUYO6Pr$Y`!KjF>`_^S+g?P7F{zr!JxY+YI9|f)2xS3h~z`x`KN6Os+ z5kTc-s#VliOMMosO;x|xT%M)1Jc6V`EODr;q6VY{Pd0>6P_`Nf zb47Z6_6nnbDDa*$wE?9j)X=YmDrEN){>IANpfCl`+sT1bW~6vpX}P*J8OEP(Q}jT zz4Hx*rA3$~S&ivO=AiwyfN$$etoHt4az(n!L|=`!2@KF^TstL2o4%YOVjOQrKC>{W zD4;2GB)R#LP|j^pPw~d!vpNxcayPp7W}2Cp~v?uQwH60z-fd=9iL> zf{z%e(5wE#H~!RPI{W4QBEG^JW>CiW5w2e)F7rS>(M8X8#XChXXGc^4sspUEM3WRk zTUY=D>~zN~9B{H*U?jm|IxyDfezIDPRp%hxc5|=+9_T2cr zf=gK)4;eQ-v-3|~KFnC*IYPI-d-b6<)%G9t4t+G{?aUwJ<1g4V)KwKobW<7VhKU{R zxKI7Sk%WNE1e|t@E{PNs+h&Tt9yaDy`l#Xx=hhT14QFZ{ju4et;GLTELQBjywmDSq zV0itB_<+>tFFwELwAX1TT!A2c;r_-_JxKl~ z@k-FISQqAj%+YZ>*WyD`k_GWUN-cQ))N+O48icmW)hG$#kFa9uS~bsO`oxP-4AOfm zhc7A-2C!9SmqV~HaHTlcmQ|Swp5}|Ii}#4I%RaLdpu3Y{TOXf&g}8FMp)|(?h0C!? zzDRflSDsxfAJ0p?e|i5rJlc9^!6X*%`i!^4G&p5LWh5?^-wvhSb~ex(u-$Q_*@H4^ zsZE}hsS5CBBXOXoWTJx4>4s--l3*Ni^lH^{wYhI20sZH|oB3=P0w-{Yk;T0A!R zS1-C0Z3VLfCWuRvc=V$Y5AalV;<_m5WM2FeYcUc-N-8Km0f{*BLbk&ac}5w~aYYC7m<`$?aLJa703_z=Oeh zce00v_>jy%ymzS7h7X#c@t;W(`!T3z?r&Yx@AYwmvOAOslwdBz7xrpi_;j}us8@pl zh%j-Khuc)%Zy(P|8iGbb@K8jasScG_T(g!_ z+;FAK7nW+-eqbV6~&YVAwe$$h3GaSz>o%&xq ze-&H&CiW+j6SqC~Un(T3U3V4Q-SQ&lLG= z=6jE_10{~NkI)*+W;zq#-vj;p3P(Ups_U65qS}#@SnTW6FoKco4vr+P^_qR9Qv2^1N~`3eelzz}NN$?Nw2h%WCk4KFm53B^bbR15j$7+8nL^3cH$3oE zzIK!V#o|IYH}snI2=60d1GR6%q}?my4%~{* z5(R2Es|I$5CoJOQ2){HCGj4RU3HaiQqtM=;|D;p1M#}Du4Xb8Qtt$>|5^&EnC5U<| zc@tcFO+E;^8J>W%UEW0pA&2aXI~;4?ndp{VSrmocTR+tefeXmc%3J=44Q1ySuXKqY z!nls`NJc^1Lh`e8dVRbLPDu8ucA+mmDVT*)XM_g{k}g&88yV8y-62a7cB9EOO-t|W zWe~zRI8|&)W3CgXp#V!1J;H6NZiVH+5t;TNgWnkd&6@CdxQlwXv~FU~F0q@mrUb5c zWuY|_uLJ)|iHpn+`)CUe5k@wh8zpVJwZYbMgr7>Ev5;ZpTrgw>|~*)GSBxRmK@ zDDn4q&ZGaiM!jXtS3@;}tQbQ?r`FpYkVPcwsusxnWAuuRNH^TR*lWP!jYTy~z(?J< zMTJ%GKUC!UMQA%C@u1z-NweNqsI|J2Vy{yKn?rxmv?&6@f};;)j!GbbV9Rs>Bw9m9 z@_+|Dj;jcZ2R4-Af~7lR;pThIh&_&CK6TmbmS6>?N{r+UcDI>lIe8)20Ra9vX?Z>W z^o!TNo<{pBWbb?$LV7>VjPc&nf__C}VMDOJ{+$mlvI;Y!mpCgYg^7umb8mT*&zZnf zHx4mqI$Js$T0!!bO$geghow&?kc`GmeQ#pjn^C9eF_Ba!2xXmYP!*-IHd+1b#hHi#9&4= zUlawCCXE)kP*tBPG9w=Mpc80<1l^DuafAk1m=fRyK6~=FB!U?P%^#Ri_Bd!~TcFsv zpvr?O$b#h!sPQ70xcIZaG9)m;Scy=cDjW3O7?%)QnJ<3vNc!8qWbB%7X0X;HaFG*e z3KjKH(UX(~kxnL${MXxaV*$OhM8fxquu~0RWQbn~hAT9h{Qa0u;x8~RU0pTR0~k}M zq&PAsa(X94GdW=65(@H`CATSD%~el(>$Y^+ADf!x%aLSFUdjRvEjgS^CrL*q!HAy~!Iic95A@R`_=_hhA z#lG)C&6PB$+NEy%YbI5a+uu4#S}=5z>KS&m589{9so?Dm(IUb*HU!Z4IdPGhxjIrX z;i92=A?p8`)REWEo_#3SxIP{dtf8k!+*+?J20lo|B;7r`1UuMxJ_F^Jz%r*340tyC z%atQ5QX!w`ew(>7To~-;#;@~kt1X2a(Hkb)#<_cuju$d<(wps0AZ~D8K8PUZN-39l zRM4!vX~Fs@iIy3QEXe41hzfnTTS>(zsBR5a9P}F{#Qb8Fxj%8y)JFPMYPjFccTQiF zpWqA${dL)S`S+mVl0xI#mAABVeymrGLqF;C{D^A*`#&vC)&h-glV4{o;($i z%QnLBIeT4U9D_jSi07>{Dw-?j*F#8DjhE?b2CD7m+^XttB7um}YK~rd++M=pan!iAup(`TcJ z6?>RXk@7~t>dwubzJb&>fs^1FlM!}pZ`NSRJ@S`%=o;-@sE!BBIiUhlkWLxuTrK0H zQ&p792qU-3y!eN$FK>qty@sDnF4XXMwhf1A6KS(mOW!l&HoZX*R@CgrwL*m&r=Fv~ z>P~Rls|&#H4lFT;6_*=d&h9+fUkBG%437E1ic&njL%7|}aOaPrq)50Yh|Uk897yg8+)H0U=Ol{%-anx`Y4SsO&4n+B=HpQTV~2XjlF zYU>-c%ZnUoqm*Ift-6Fw<>I>j^W=|1C{rTqybUHw-t~OTOdcwc=}U{UU<0x?;Zsj+ z-(gsSsFd4*N*R-ApIvI_ntI^8t4hF<>HW=8Q4vO+L9)NF7js6 z8gcOXypKN{1g2;?u0UxR=MAmJd>1gZQ|QfjC9#rYdVrI2L1+PXf1+#Ax^!K6wsGN~ zfYg1BHV2v)Y_Dwtfng1 zuWFg6)@$jbO_nKMjV|+=?A7lYOOM-f3r6YRFBw#YXy(XI3@m?(3G0y@IlSvxgvj{( zMy7IChP66qQ4z2|RiP&aZZfhDltSQPVyskio7d51kH5Wzy>9Fc7&GE&vX6_6K+T7z z7={|!Zy(8gqMq?`4PC91#CM`N&biL_!byGXmFe}q!<@C*yAKcKT3;GRQs*eBTk}ES z20rdWh9d2Bi|QHkcXp88{e88f=0Nw2cql2^!@u504CZnEDqu(TTQ$>#Q;#Ug&WRb? ziLX;z{8mnhEVw7?*B%Jr;Qs6n1AP;ox!tRyVx)qtS32vDk(LV*6r~i#_kv&+`6s#J zCCH=bz03+krfjhDu3jJI^O(4@2aZ+?WHH@YA5G#`c=ELXcrOfg@xM!+j=yy4{CktEJlZaVr> zw&=IGG#$`V-V>rS=5utiJFZpR5P#hM?Y1 zw(xSNDX=;hEBOI5?LsmcZGvp1MH+13`FY|IDvb*iNZ``m^whAK}h4PU^x6Q%w z&HRlf=m|fJ$Cu$y2I)7?2t1@%n() zk(J_;I+~Y6253cy`R52kc(?hJC9eB>gk3fu zY$%(zxOcKW2e?8XQwx|Jf)#YL)xV$Zz>->B-9NI1AjY}<{?|dQos8`X@EjP53Y%ZE zo2d>hV}3(EbGRxP{g1DulYIa?-S>tnI{0i$TYZW=V-(dOlq7s;P=^YtvdIMbfh*wF zt@*-r2NBkIkMQ(}OTQ`?d^$gdJcOQ1m!aS4EaGlAP4yhh>}%$MDjgs-Y#5U+q1M{) zuaelOn_XO}a!nTyNf062`#4w1SvgjM(t-^J{^SEi7LAshw(R)KBfnwzT6VpL!vdNE z`&6%s!^=1~&ZNrLp!VsTyoe~{u7W$}uKupxUCUht3H%DJ!*hLKp_fi_}3so zHxBj%;(u1O?9)=xgs0#1ySlF~jn^Xy_lG>{*B-LOteR0dbzVCVy+jP8yBVDsF`A9#D=|YVTQIWAyz(3I&+KMsc zg>91JeS6^8vir(2@%?ICunz8pAr$oiP7N4wkp-i&AwXTdm}00>$+)Ihi~D^z|Coue zRorM{b!XjlU@&0^dTF$Mp{8g`2P@=wM6Sa$=n$kS@>rJi?Q9W6&4bU1I(K)*)&)#_ctZEy&au0e*179hwpxN1TDjp z3)d?4%Ei^qo{Ej~I=$FM1v4(XeWnQ)1_MPmXYQSB3foDwPTSKXKZSP^Y}=1{wT3%F zS%JX1Sbb@#N$ZW8mqSKo@SGch14pM5|1|L)y@YCSWrYx$r#t$=$k5=u(onE6)LZ`C zBEL$@22`Ie!8lrjHxxqPM1?7R&t8C&jY3?X_9$KaKQFgHk_4YOXNZ!kiJgC5Xr}s$ z2S#vn{oAVjm@j^y)iXsn{L9JHT4Npeex)|oh$C6vx;|eRp!G#CKgz~Jd#vh&UImeO z=x^7O5J8~yOecH{$wabOE46LZN^?8@-L6A4ReX@$C7wG{K%v0O^M+`nNVg2IFr{R0 z=Pz(}gkoCHQ=`rEUB2EW7iwucE-V_kztr}Oy>Y*1)};zvC=wX^LpIQe)dJ>>VfOKQ z^Ki+tPJK@nu=0Sgjx;%tR|AOml~*NGOE(Dap{tvcsEW%bNouBGdb}hF&UpQ$$rZz* z>0iwk*}`UlLCVX+Adkv;F93`Ym#$t52j0jq1-8(by0hPtvC@AaifFLRfr_;s$(WyF zPP6mSbDDLaaUn<$Zm(MdTGp+fUQ3X@@zTMS(qraQ&}UCym=#KvmV`pJ*pij%EIV8wS?zTNgs7bHccn;#9}sKBTN%mU{5XXm z7KC?I&K>teaRDULs_|9$aM*nf3CwQ=JIECBpZOmLUZZMfyRrJ*gJCsP{B`D1UXaT~ z)V5(-(uRl=I}ZxBc%7?`9dC8cp(7Y3_P=NX$3gd6?F4x_3HV^_JEC8~%S+4}yG($85k$Bnjh@XGdd0h#@WnTsbYL6J<-FVLld zBLc&J^Q|9lDY-oBmrsjTs&cUO0*A+Xiq8#wMFVRy1Rs-No z0~Kr9<5iV&kN1Az6G@*F#*^xR@6KZVHd%6O4X^24$}v9IPA33|XLMVSdO6Ovv4as7 zI(c5zPo~IsY3yB*WtlT~+F#|jv2>HyARj3#?@^i72Y_|RV@H;^TM2Tl*BY-3dXVd0 zVpIp_%itBP^C|410nOfj6;Q+S)Wad;j5sDI782Qn;Ba751y|V#LAR$QGZj4f)G-|> z5YoO7*TZgg^I~2CgOE7DBg;Gk;^NqCe*Gwmv;aMeSl^Dt!NBp-39u;R`IwKjXmE9k z8c3QS!xQAkN(xXbU*O}wV(A;X=*eNJO^6HyyLY*|2FPQ?*gz2RolM+KmnL&j%FB5k zT1Vy;_!H_G!+ISYB}m+_8dkQvx0~OqVa1MzNTGiP*r)~fzS-8;Xk_8z7W>ak?$DV9 z#W)G9mR4#ADCt;mL=+eG#7`PBj=DFRV zNM%hWe>Kmv+DrqM4&gk~n)nt<;XK+alSTx;qaVcE4MqGH+Ks*3!eNDA|F zysFn{838D?vvyVu!u0AesLpd6^eWMZ;ijO~xVDIfVTl8O$+-X;u;oa zmhs1dL1niMlhT^cL}ToRLY!aV*eU4Kd*JGp=#uHh<#6wyv{T-4`Q4K@|`XX6=@+6c{%2zRP;{dHF?5 z`m0QW4Ja91i6y(TZQE>|xKOic^#@%+O6q%9U_Wjly=i4gYr86RTc;$u4Jw+$Hy6Kw z*IiLsUQsozmI`&<1t4>h|n4Rh;Pkw2e36PutGwX z4bZ8ldmKl0E18Ru9r}0#hmAreGC_EG|EQ%VH!}>@qzuu zO@oA^loL`)e%>coS1)|lG~)u&3tdx}a7ty(Tt`VsR#Rd0u;(^^<}5F+F%sfRsig|M zBCi*^w^PA2Yq}bCDaB2JU!S(Y({34<4fw&kn)4}zmr@rsa`dDmc}VgrI)nWd;vx}F z`Mb}?RxQ8?!n7me=NP`|O_D5EQwvt_<7M79)lK{$s=j7-X2alb=_cxXiLIVJ3HbvM zR_QBgg7az93{u*X>XzAP9W&E1DxYkb7P5-pxG(%lG*$!Ii?Mhvy?Nh>i|zmkBWR(7 zX&HuevQafx*C9CP=C_@qo^!LP;bLvbjO9tr9MJZHDCel0BZXC!npCM{@Nu67?IYUN zPq!MpX3)Sa13@B5z^O9789W#KWgC(2MWh)8#j~ zZw31yI@AhBh*Bx0+b8FP-3a(q?D#n-2?Shk`mF`%5 z>GtE~OuDqTvBdRq(-e2)yve^qlzicKum(OAj62uO3d_*G&aLH2;FHkI z?m21ncI*Mc*`0&?`AB0aC=y!a$ZO3=zLeR{&WEn32O18?fDd6lqgu;!DfA@KW-~`* z+YSb=08$r18xO~n^AWF|!T~t{8ey0pa>Q{xH=PmN_v?9cQ&FD9X$X#R;@L-@Jx}(u^*?-S_cp6Xd~XIAK2|6aPJ<5 z=+URWAO|{oN|;~QHb=zEMW@^Y^O3EMU`7;#PAV;vz)OgsQ*VxJ6j2EwRE#nZNrKmt z1jTm3!AW+tXJ8iA(4ek@SSV@^CFyS-`3gP#9$6 z=|KUPCz@PYHvz%Awf9i~QWKZfvT`Ehb?+t&IZX+zRUK}(D(s{=FJwvSWwvd590}eG zQ4!jPRn7eBkBO({`Vkl_(Sud z>Ro5GAvA$=Y0_j5#Md$&@*2LZrlSOd1=cV#maF4IDeVR6YdrkJK*na{Z7K+ni)aK4 z3g}SI-oM@viB+d26^8Na_@@BwT6vY#1U9BHT?oOzj1Q-r?a^DtpS@!DO68)95;n-l zF1wybu-%ghB9X4&K`BgI#exDsF~gtW3Yog*E&oya&C6M~2fxCh-R{gEHt&|72~{Ag zQ)==eqQsDEJY*UKx(-pqx0InQ5*%-esg}nD8t8?^~3?>e6Qj8mV4`$Gif)C&64*^{0uH#=Z){0iC9oi-S=T{_Go*T|liL{V^ zzAQmEkTxNEU5!|1su`i76-GVsmJZM@XYm>N!Zq1ub(<%;$B#^k;XysHlb*1=roLG@ zj~}m8`ZVichX>)H@1DtaHJjFxLq>uJ8>ror5~YokA9}Rp#dZWVp@f)gqK>kW%Q-5Qn!5LI zaa19z!*DS{Ym{{!SmOr*O7Ee;Z)6sXgP|s5Aj}b>j}-FLPy6LA4CIRQXQ5<#Ip};n zgh|4rsOL(#?{}zcUucOvy)bphJ`Pff!)Vo8P}7X)yLpT=u62*kh~z^lk)8|6kbjkU zJOzq8J0&fN3ccw2pYMpXZT#IwEybYHnBPT>hrMftSM_T9AccvG_J#lt9@Mqw!uO;t59X;_EA4rf#5ANSxFP7cGMYU-*lL) zoPqR})cpjG3k(rJL~`k<82)ZG>bV!*j74EN%xI)%S2)BqZGTGc4%jmGzA1jkXd25J zUr2<^?-^O1z|+$i7qos4{WB$)iWIy-Hq{iHVoV$r8G>CtO6k8%|YWaGkw|+ zCQ9R&`72u~IRIk#@G*wpS|}0X0h9TP=?=M4k7o}e@@j9}zX>fBb^6Dm34ObqS|5qp zrbIWtTryTvT+?Ll`=#ksEkD20*`)x(knh1L_z}RD98qn=Rg$z*k zBn)ca@U3RjmH92w`E#w28Ncgm=TP;*!;O#~Xg+L1o-;QH;f~f1mGX5;Mv678X_<8T zPE#~hKjL6+_BoKj61pmZENZQsXz(KL%a_T=6G{!_i51<*B%A7jQb*%-GPEvSF*h^R zujHajfxw=;jxh#W!2B_J2nwTy1W4_u{jsf5Yg}NTLv8=J4Nq9hKVDeSoL?^8arl3k z+Lo>u+n5^G@~~qRtuwGq(ZD4djV*EmH==h&B%E?hvFP`lCQJwe3;)hOe#tm#Whf`r zM(u05=cG7Yt3OlNI}ahjdt>QKu2w;sXn(5mNNnN9&2vgTC^ngc^slS&F2^alK^8s9 zCVHos=>Y@ha9OGtE#>r|eWMoVk!h^<@teu<9yubCK}i_;+Y16c`9>_rC01YV5&kL5 zbL4}tyqDh z0%%%!1StOhfKbWt27_>Zyb&XOkPl9!gaji*6g$fyeW#x30RiRocqNJVpcIt)1saI- zzaeseCX8_>6Oly%_d|ise^5y9{=>Mx|4gpW*b%-YQsOYsUNG?gpB!+$a>pCtG8d)w zR2F)Y;s@HtL~yfbH6OhGGcOClAwY@;Wz*?z#_8?xgZVCwT~ z#BBQ9o0$~Y$-zSmTw0e(ZUtO$Fw}uO`rVTWjbNQ$!d%FF^He{pM(O(SQ1ZIyK3sVN zR(HI0(!jNc3822#|L4nxjH&CXSsT-eqG4zdWr1Z)oc`dimsk6#+oIA9kUC2O zT$LzyXun0!@cOA3E1L$Gvm||g1++i!!dzBykhKn zPccqlyq^p!P7ptT0oS*2P62v(z9ut`7KFaM<{OV&Z4-$V(R*|rH58fkm1KGgngp9o zsMeh#M`qZ;IJE6N(#24icPyEfm^~r3)y>*ON*bn!#e6WOVxhO!3R&4;BBZ|Ak2j~bY?N9Ypd?#YE8R4mqg1@xe!fxf9Tp3ki?)9v|6rhoiT7L0%|J=n_ z!Vni5$LNKv_U@pdQIyw8G^(7#o#H5Rk7cNgvr2XoWgn{SMAej`#e2J5SnZX75aJaG zD+@jUb9wAD_57DV)z=X}mtc5#*kuA!Rl+OXg5)KHm-xR-iEXt>&{Shx6RLnCD0C)Bupr5Jvld167BP#;v~{?P7?h7U%@6l@s?7JV99d zq+`Qg9dy{Mqz6uk40H`cTu4wWJn=7>;wA3&6^9W2(1Uc*g_+82t^n>1`9{Sb4r#7{hV<=7uHwjh+$lmc93uB`a>G>ivIkU8jeZK4!fCoOv}9=r-)@&y z`z68t@3c_q(o(zk|HZr*;;aKZL22V6c!o|E&^hbeaL|Ap^)2mzktYV;_$4CDryY@^ z9oJ!-AbD?~Gy=ais!Fu%PQj4Uu?8rYE`+%iSy_x6|HPOeBbmfuH zq;sTN6ihCI?FeTBLRCLUaLvradXB{vqaeJ^iiz%k0nKfBLUsU!6CUd64~O{g?N7^jH1^)HnTq zq@VhaVo&KG>V1GeTfH zHk+CvNq4zXdlJz`qI|kv8%L-X6>U9S%47VHPnl#6wNrJGlts(iC)!w>2Q`>0p|Zwg z0@DcCVGP5RW8`~4X`A~Zx$H}~Dm6eSZX~kM*Y|S3r77{VM5%`w)L}H;7W7=S2ao?F z`m*4*(8JU_|BHYuhvTy+#doB91N{wT7$A}FX>dH4r5~jK=-^nizx6r{1FUWaZGwL= zLp!#~gNJnp^^?(?7)){F(Xs%oI6R>7sBqA}mQRLfZ?#C5IRF6u+$4c1xj}aN6mBi3 z_W-!R_$+T=sPFN=j`2^&f8f5Xk6~>Ljg|OJc*m@l!-L&eQr9iKF>a)=02L1Vm}RE? z!GSGhS#wne))3ys5a!{ywo)`6vBf}Mk(0XGXNCYhK^FQ%C9F-`dq4+Q;TCU1USyCw z|5iV|p?}q4bgK^zy38!R{_~L5S5yB?o%7S}o4RO_NRIfMy*VvfssxaK*GRK;JfPbZ_SLmOs8iJrM^;tCQ zfc)OL$2n84qK?HJD?-+$a6|V1Y&d}#VR+_Klzv2q?}B z^;&VsSA-n(#&WEGEQE-0H5BOC)QD&2_UiLFY!NcU;9;*vJrM(DmawJ44JV<>41eN- z7Prhv$befshC+WZWdLd1YWnffB@btkmU~rjJs%4b1VfLa`Bz(XyhSIz$*ncEFVPix zM-~;e@7Rxi3?yo%uPHM+*8YFf2jeJkhD%D~`Eag2|9}d+Ke-ZN`53GEUpT!pj$38H+_g9 zCjk8p;EFXr1ght?v6uGL`Z|zA1O+udMZiw#VIS(C9=3?sxYr8hXBtdjf@Pojvk6dd zy|(vpG}@}BffHi!p&|^9IQR9Y7C~E9H)q))`rpBI!Z?6q$M~msO&K#BQ);$EATLfL zd9>AXJ!N!CHy^nUgE+!;K2@zK2rXLYd)sq09r!8R4Rnu8hmPK7kl-a%HNORsbELZY zL^HnFFvq0tDQTV>EFF?&`5YFASY* z`ccEzJy$o9#YW{!?c&6y9+bd>`qXg%2xUuFqO}~k{WG|k4+SW5v0Km5PMNXQ{L*HB z)uJqs(eu#d0bbwF*wPM5iHVi!jo|k`w?FxgI_u;!!!QBAU`6kF`$V_qbn z`nGOU3vLEmvn5eDWl!<*W|Z>IN!bf1sQCfm+)|OR3ATr+I8(h$t zxRYy}R>I?V-@KMJ8J_h zs*G$ep7-izZr7JS{AtPVJo^s3_ri@@4mnm9mpr*k&F7%@OC1Fl=&JvK=ok}-Yvih9 zAE4OO-M5?IofI*=|~y3QkqkGiKC0KlHC+CR@16z0V_r`okj__1b;Z&V{m%B&AjPsV$!pIj{F+ zY;X9Qa9@>77w&?f16Y!(vQsNt~I zOjH&#fd=(k+WdlaPLV>f+y)rAQ<9db?$V0cYsT(@8xAd&5p3d8a^hDxHutCpAAFNP z*G%=wufGo*ToznA^;>Ga zxuT7AH@EJQC`yKyhg`)i*U*JF$C++By3vK;R3@+ZhfDux7qLbPyNc9U59r+bS^5F3 z3QIAve>HoR`O->ToBVG$Nw>*jpJzGo7wNEF0RK!?nN>NRs7SY1_iA;F#PBCsxoEp- zf3v3u(^pxztIMQTlThgdHu)&Q%q9MQlKWx@3Li;BI#&FguN--Jd96z?-n9s`2}s`8 z-$H9lUD{AyT<~;FY4_$;35sgt*AcAjH=nu5=ls>Vs$bCm8>>a2&R*CCyTB(*~D z?YB&UuZUTth3otViC6}Of;H>9Y*ZCi=l_180N{_wxsVjBPb!LuL1u-oI((okaVEQ? z8ppq8_h&kbBU_!^Aqy407v_*f-5{~lLnC*1^5mg42Po;J|f8B^< z?c@cd-k@E>7ADw;Lp5Nev0UJB_?E8?_my-1?Ir?@`O-gs5rXZ4vuiDcuC6k3rBmKo z5sz&n-N64X`r14aK+N$9;*$ZIOQ!&RZ#;1MgKOgcaci@IQhuI2)k{ej!HL<`PnU}R z>Pb(uQ6k=rW`FCZ!%NnG>%o>5-jzQ9ATbQ&O_RAJZa)j#Vqtx|<%XFgHUm#5MV7?ZzZ*v)K| zGb3w_L`(P`N_`wwLk4XXt=!mCHgUf*{=UYR0EJsl|EJZe*E|2=qrvh;-%GSwfv0il zYqSLtwIB8aduA+#`i7vO>NLzc6%zFUgrmAG5gu*M%r8F9eVaE)6~jPA1esL&H1Cl% z5g7g-CO%-#?j%+R*MP3?|9C`^rAU4qxJYvw{ZP_)pbUU{Fefbp;os9z4u^r)6#X8g zL7PLLirp=Qpk4bcJ)`)2P+t;L$&4xH)-;@IjG~NorpF8o`#Em_4wkkW+Z|nRh-h4G zOJ9uYc>i{QnwdX>wqB^urkLr$6kz-iWGlwmI(5jTaXK;?18Y65)K%LKQssCK2+hLe zmBsVi@W>~$o#?&q(#`HGd(E*l|F!b1J}`VseaWZ_IPvn?Zz&gTgH>72>B?r4$MTfbz_S zhY*r&lAjni)jAH$WKQJ8UzJ}L!Krz5@6wnD37tk+lkU-N7x)aFerES*5O{1k17CyL zWPM>zALgI)zHGgU+{CH#>EiJk;^fzNyTqi9XVxQtg5zs}bg-QqtK}+vfFU3ffPR~z m&$fg*>rI^i#iqKbQ))^sfB;wX2oyhw0KLwjiMl}wlmGzXG8!oW literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/admin/firstlaunchlandingpage.webp b/static/images/auditor/10.8/access/reviews/admin/firstlaunchlandingpage.webp new file mode 100644 index 0000000000000000000000000000000000000000..8a419c5480e1b301f2315d14b966822fed272c69 GIT binary patch literal 19884 zcmbrkb9iq})-4*_cCv#VbH}!A+qP}nwy|T|w(acLPJZ|8?(?Bf_jm4n?x{bj)>CUP zJY&o`$E;dQQ9@L-SOy44O+-*$Ri2$F{jcNr3g8@IDiLsd5MCSBGzn4?V&Wevl=}Yg z5oWd@uNnQ)XMS1J+Nnr<*%a-?}^bZRdxaJpGhk zo?rR*;YZ_H+Q+CBM#}dn0JEI_x1T5=<(v9*^qY{0{t__!p71vM;`iLU&qwOp=a&Z1 z0YrR5uI|1NK6xwg9)4e}VZPNp&wdc@0mi@QeP{s^fYvX*lhu~EdA~)#DZt=k^%3=R z^#kz}@s{rl@CwKW{MBxR0D$(oZTipLKY0ziZ(u&tjX-Xk1siN(s;o2lV79#!E&2$j z%8A0?0t(iB_%jux5ubsD>;7ChiV~>Z#c#%Yle~VU4YsI}W4F|c9@C+o%)Z2YgRTyc zb%nsL;FvkzQR{Gh=rV47UPN}pAlEypp)E_Fq{eoC%pJbh^g`k3p^FlWi6wm5csosu z$Rp#t_u9ILbRN$;k5q`|2A7c^H3E>4MF@dI<2#1_=^f$;hD*50wG?StUhEbln=m~w zARaX)UJ~QJtZxg~oSLg|9L(*YdxvRRRkU!?&Mv=LYxtG}22IZ0S702#7w|(>YG0S~ zUfe)Sf9Wp8$f;nPul2dzim992Y63N*0tc_i8P1Ow>a`iT@Y!~>vC zSJMJ6qh6^c2Ab!WZg=Sdm35tfGX!^lcoXFC)gi4|3m6!fFkHbesSL~`cKnZB%Xn5B zJPueu7ZVX*arzu)~H@C*lLdyBC(9a9mP6GVhM zUWiC5@>u8=1w4tEckd;c6PSbosC-qmIEQ zO%m(I8}~rP?Hug6pMU8bu;-;ce~a{r~#)sYhUxEnykow^OSw4MdF{Nd-K{Z%Q@P2erN{V z+4erT3If)i?1!0Ihl&SR0O+HXiaQbMUS3A=!K&S9G zQJ0V`^xW<8h(TX?uwAagmEq?MBAo}REochEvg+E9e9`K}i6;FI1grXxrrB(eA^dhX z*5gsOnrUaT1r}J9M$U}5F zH1~vOoN~bveMr971b*(oDNucKU|B?S+Kr6npLSD*Y{C(Q!pUF^U^AULdb^~0{Kb{q;f;(SSTMX5B7 z&3AM{c`^R(H9*%c5~QM(GOS%S+Js^@hgsYw&@5C;8!Qa{cqV;ok%T&W;>dP*>!%E2 z*!HZ%VXMBfReBmf$JL~X3EdK^6~=NfYKUlY%x+!YmVgb_ujQj#;tOMby^_#T0o9L= z<7L7q|2Kz>FlrZM+7OInp5426Cvqaq6}tVj}@8vSbiT0shFfsB*3?8Y#KL z=!yd0+zR~qYJBf@E%{^i`RaSSceC}w6=1u2wfWWQ*J}5XjcR*)x`X#InCI?vgMiwc zBEFH@L1s%KjtmfIm7d6agiK3Wqvjy~)1$*Sjzw1~b~#0==l{^&-3#7m#hy1tMVk)V zzD%0H7q6_v0O|CfF?!hd!LQ1dS}2YKg>#6J9qGV#WWL7YxjjY10RNGL2N)0Br9^5&8YKrc1{o(W<_xX=OzJRo2 z<)pbmUw1CBUSk>}*j!Mh`t^6OEoL@q5~3EAiU$7R-?NNwCU*HlMmAU~#Tg7{nVB-7 z%ivH0l~%DF0yRniwr2VE3r$Ul<{#eIqdUJ`K|H$8kXQgqy3^fH6b4a}Iz7v^3zyEdKwuv&NjRt|yw-}2VqJy7ll9b*c3>pW5Xf043A zRPe>(L~3YpO3I`mII^FN3v z&J@Rgy4C++@^?T$;k3g44^sReuqRTyq_O_9O8@7n{|e~80KsH@|1Tl`_a^^9++Hl^ zU&Z9#AYMA>@lSg5Z%qCkOlg>azP}}v|2I;qfZP6)?f($;I4M=CHJZ(q%l}t{ zh3hRHfRf!8zhl z`*P-8$E=*)lBXyy&KdL+mCS7W%+RI+;-uL6zZVMsLL3v#*lue#FzXG1&;Hy_cUdxr zcNl&A@jYITP}-Q|8-m`C$)kUriXQ{I!y07W`>WEB30df)Lhc`M(_T(~l#GfqTGdv2 z{Ks`bMF*}Gj6JZ;J=e*d+W)rF%(k+$z?>NoB0CcdaYy|mHkEbBt`?jRO@p(YTjt$| z);0#2P}F#LdpGk=sF53QEV7E#iv!iZA=quq0(eO?LSf#;cvD`{k57ds-EqR;v|9mE zBQf#1s3e+X?j}RmYZTTJz7cF8DT)T6e+#{GQP#iWS^XkPx-^$9D zm(Pi*mbJYA`Ru^i)N|bzY}-It!G`})wEcH~+S#O(N{x5^t6mZ%H(65iuj(tPs6x24 zdThE@es%3>S9G_FgNJ5UtUu|JkY&E59Hs{s`JWhgRzCUv63+je9skF8VFm*F223JJ z{_!DIHP0`yvEWVvIhxVf4hYd-Y@o7ofy@HFZmT5ikgAnNV|B{z6Qw|-^Arp zE;-e}`P1)W1(wGnZITiI;IQM267q-4xBI44et!S*w3~_*MzAqfM-o*SiiJqS^bFuM z7^bX`2(48{6UpI~sH=m6$t}Uu^uT!@3_)i_J`z*PlM<%I(9)`URW1 zT?|G$l3bMK{4Gy z!FMV2YD}3LB(|8|vmYoNe)Sp*2oR(6`iYt9hpzSb1KQ>QI4TbRH=BXJ6T&XO~3ubdwU&?d0WWmJMN$z{l z1!fyWHA>E;yh*LW+sk0iL{HiLx}!C!A4SssO$y(u)fGL9nY(TX4`@-pxVaIS`ri0j zd?7Cng84HA`cgYM29{2s!(r$m7aqCj@s8JNEvGD#$i|AjzZi0dI_Q%tt}|jmom6XZ?s0?) zQq%DPVsq^sXO_0ujLe@#E^SoqmXC!IYgvaVE;m(`OE^xeeH^lR9k;W}?mN?B+1@L* zkiWBGYAPP%7O6YP7IK1Al;af~`{HOg}A zr;=P>lqYDCJ$y-Y6b4z{3);3$Dy$oEVlwEB&=-rokqm4t!SQMkA`|)KNW*t$5;S>0 z&Z=Y-olRE!)Z$b9V4;T+&&0=hwmmRFm}KItp0b*w(JNp4w^MKioCAOT_+pM2lF=y4 z8#;ZwgMEq$yk9CvQ^Zuf{;C4z@E|ghKVIP|f%7`2(&ItQ`s2}QlB!l8dG~Ta7nQ7) znFyUrKOOgSX?0$^D3Q|Z1TEgtaI#Z>!i161-KfSMAj7BK#vRd-#a&2sBv_2@OQ!B_Q*C$=T3Jr|_6I z+Vf37g*L9VB6lWMjI~;Jc;QJ@liym#La{q_{k3&}ovdpYs|w7_L-zfOsgyj-Iuo7L zaeSfP*Pez-+eZEqq6(qZ&_-nfY0} zMMOSyME!bX`e@A+r}>7ayMT0sq+wrTy3jp?`UUhfRw4@ z$&I;9Or_%Og2?0DLNa(J2x_k(a2RRObx}LC*Ka;C4|Sb3;&N9cv%#L)~1a&_P3%M+tc)D_Qj1Hgtc`c#pmo6wSd>hzVGpjjUlKZ-i(Z<&=6rEq|>3o%Hx z>ndJ9(z3#BGIh6_i1yspVnRcBs(q1<{K2;~1Ca1*^lrY*+Q(*#_nT!RDaH+iP*Te7kW8D-UdF zR+7ZN(KQ&D`3Kk(vSEZ3BD=ST|2s5iI4bv-2yuVEy>F#45>ZoB3+Cm|^~qvG021Bo zNX8G3T7>o|eSUAGB7+?}yT<;m)|3z{zXu2w#8Wb&hd9Ku-t!>RJEBC{xsMl{>=XYu zCI&ok?pnb382aB!q$WL#QFY56bag!$`dL$$UMy42=E@O~ z7-Z|9teW1XBei}?m&2=0%^81A;!xvR(ccT^fBcnLyrcjclv(BY+DW-s^#^Dm3{by$ zZmC1j6@ZrOie7a|m_zkyDMnD&@2Q(Y@ajIt-efe=#n+kx`8mlfe``#MG@jmCP5a@% zNt-hE;AgwuxJY$r8Qy~(8k0pc0>0T%Td9j5h~I%^IS7uwM_G>=kCRQU0(JxeQfY#Dfy0=R=mH9;LynVi1O^m7M#WyOa1{6dFVRmcyszuAhhJAhhu zjSnSu*mIn5Fc<=o|fsVe)Qr_)+rR#j8(C$EIN-G?nwLZCUQ zHnE+Ywy{>TZQE!Px^Xzg9vi=<@7H%c6EiK>acVH?f!yFw9NGk-EOl34Ys!4v`QGUrKK00M%2yfe!H%Cg1z1H!%QuWepU(F9IN(#hG}OJ zy&^`qQV8t*<)3ExrqQ5mU&(T^x$rCZakzpjZWiBR-APdKzYW9#>}2+AV~#Ck(??$G z7KP^=Yom?;ddZ_&Y8^&Hoh7$>C8O$~z`kYM;R<{~v-QC`o zTgNJkdzlUkxfC$A?D`t0(4)f#Xu{vsuzh$8b;dHqx)VvHTI1>xMKN1#w5-D-PW6!d zJYkR=z#XLn#BoVWp;CD=*2$d+FnD=svojNAV0Xjfpj}5o7;o8loODfcJk^yB-(sNo z%sykfre~>h6FhocEor4IuR}+I=~Y&YN5oQXAzm@{^uA6wOWjZnJ|CDVon24?_*N8N z7oO+tAL`?``;0#zi?~)JXbw)5=M%qo%0$9Rr< zX`HLBTU0G!w6|m^)32;;0M2nwbxaP~@z1tdsHf}Uke`N@-ubCr-S6-h=#4oq=4kYP z;1CpaGTQsnCFR^>Y$}Z`*7|DCOBU;y!nC~wD@f%k**HpX@ZW?fId#3wU z3bQ5^C5N;WV)P6o=0le%sN4vGbhVcze~Ysjc?GKc)B zo;bH(Dq<%`?kY&ldumn|Lzt+0gW%u(1i{>8I4e5-y=uL;-z;H(#NBmGLsl>(bXWtQ z2ONua!PJ*;LqsCm%s!(<&#coES;pQSjrymwDg>+Udy>dB7l;+vJFGwlY(J8^(n3o0 zM>cYvC@&lgwhu{Y;{ho7VNR!{<(g9(?=xWJ5i3<{$(k2QlL$o*!Di_OMaW<1NZ5rw zIR12Hin)td(LwSuuKjUUdW7gOA$FERD$YKSE)LF7^Jw1&_cw^leopq8k!~d#gERb} zUk!ogKd-yyG!Km&UIHESgEAy(vl(c!G1-Ya+if8 zHlMPmYpxhv_W2TDU!2P#k<3+-h^6FQL(wvCGHohJ&(lOabphVkGddthjAtRe+)qIn zBYpBCUDf1cSr2Ixfm%p1AU2rHmX+_lZ61-Wn@XRTPxt7mJ1?`;InkQRZ9l&2z!kr7 zAC}TV-*E_+?>Em`x18z_k?OgjMtsWgZfkTycok42ADmjM0TF?&gMEZp!=o4WCV-=( z#%*^vgVkAnE46kok8kD!@xVQFGaC$<#QHgfD`a|Bx=MkQUF4d)gX&j}+f>n?Aerid zlHj$g+*K@G)aiOqo)L=0=z!1>LY(ON%k_8KUO=3Q65;_)Fx65}Ag)g5*r>GDw#nzS z-zD0rIh@l(s1R+PQI#RaF>{})#a&@;`p#L8a5fLyfwkW^)cB%U@Of<=;iWpqwTt+7 z4hlXn`^)%26mnsE^{pE_arIIrY)aLLCjKBxqJU1>OX&R*O#7sA%hxkhya01DOsWU6 z=@g`>FT^DNafhh(&*DFtXEkL9D|vDl<9FP$wmF6zbwye17(G)>z120Dw>&h5Y5k}b z{`oP9vFK4P&hVYrPM#AUhic{WJ_)_v4qbW+ zWm=~}ZTCAfoMdIMW_~ya{fYn5n9FVfZLaRzyv*Y20=%v9SIbX zWgY6H|Atpv=ECG;zUxvEf8oHkKBD}UCfm`+XWx9x_Csc{j!x6bt_If(!qNl2{{De$ zeivf^!=sBtxfD;}eB_v1)Wi|ipBAH+BcLm`+#Te)E8{?cRvACxqyvp>EUbntR z+#ZJi{ly1#Ks_}U3^@rZyZXlcdZAbOP#ED3$s!r7VIYaVnWE3=7bqDc^6)%l=CoOk zMPuGYy{+qcHV(%WyeaQwlV25Dm&3=Gg$}iVX0K6?kwWdbilx2_v^QMiM4?7+V7xg$mtnVu?L|TpI;(Rd55?!ToAeap#}TQHv)K^tlw9fJ%Xe z--66VfzTOtMFg>b4#CLSYF#&)#se0(DN@(sGEaYn6bAiVXsuonk@#7QC$^K%x66lG z4`28865`GSmm`x_w}eX=Hg1sUMBh1T4Wgdm6Zh2a@3Lt+V^8<4Cf>wZ!Ki&sDC70YI_xTGc`nfZ6e^WFh1$Fzmg{ z^Aj88TT<<)?u-q}f*;^-Ynd2czot>!){Ahy)d%uvnYSAe;N{luynsXnW#zn}pDKhU z9_Q;|u;)ulAsqDjX{&U&rk0q6d$eFanHgC9a6CSi9ah;;)_g;_f}O|9*d6dLuF@RX zoLrwUZSB9D=vcBI-NNlbuhCf{M<`aWD5YkOBxLY9-d*-Q!NS3SRS_}H(|B%vBU&>g zVUHTsd`TP$SFhU5%L3jxDjPxP8|;*~o?fg3jv)cK1sQvJ-U6o&yTORqcgRBx1ijX-!6)_@3%pK%X`}Jr+ar3wfPz!mpq|2{VMZai&Z8xT|K{0O|VesRyKW7SYc``0)#OVr!5< zxmqfzV0?=W2R}&)#BM=JrLq7tPz>Ft=UGg_J5uB|kc~p6cC5fM{4eX1%k(Ycgi)j# zq&-bib*^Dwzh2zFqm)ww$38NHahlLLKBfJ1-(F3^?Y9!uWo!=-p|RnZedCmMra$6;S16S z(A=VVstF0!xR?aaCp~^MLHl9lX%TuIi|%}ciEPdP0;TMx9rbB*AVH&6mm+0z-CcL} z#t9NTOC=MH47scS!=0MnYI`IuZ08bd#CPjVs?!OLo-K-q#Z;Ud>*9Ka`=S;EPRLuk zU=SW5#gH`sd&xzi)5ilLg?&bIAIV!gwy1q3&<~?m{dOb=?IYT(jx|h{=oiDoYG(V}{lHG-yKW>km&k6O(rn3{MbL>*E_iUIsWaI!+s)h%q zL7pbV$&R>J6rIctiWk0DFD>lMQo}XV12AgrN>l6ZZ7by#Byw6Q_oyfmf9^JRJ}xV1-_#-h@i`14=*4K+RCkG)E}6Kx9jm{S&91FCBGY( z64>V1{kdZMt~C2JGm|tEDOlb-qloI2`tQg?Cqcn*RK+8PXlG!YQ_GZ|_4rM_b)dRf z;~L#ic*o^}e|pd_4_J+c_$5X1dnC8hof!TQ(3`)IeNRh+Y}@DZgo|oe0d56{*k1p$ z)XRNXJ$kFy1#~4_DNf{7iZlJI#OUsU1g;9 ze@n;?!(~%R#_f7}24&?%6()nK=4W=Rja85NnQ*rCu%P>AFsfA?q;knt0lJ?T!S2Mv zRNz^1`6})D8`}btoi321z)KFnvdfJXd9kc(Nmh0k zA044q#$RgGtFu8>yGymW4DyBz=X?GwPEEbGzLb|Z?oXe229sF*Z{Gc)R(>pW1>!@> znGpOgeb^nuaXx0fmhz%BTNIo{&{b(~x?~x+oL&=847bA-?~$`Z3=gNLJ#H%&IwTN^ zaZCjlkI!qFcTxBwGv5<&sIrF6pQ&8%NrRGV6MVkF)b+!srSksdylW6A&Xvq{zkWmC!OjhhbUvH9=)ot%TZe1$0R9hWSd8LXsyTnzDTN8Q)xt3JMvbYUl8LuM-M z5k=U#FvPkk@J;5XU83WE@Cqh2YYk6NNpps<8WkV)$Ex&copcSsH|?FvKqv|!*~)7} zJg66>FzidGnLk2a=8Ld0jzJc>vnvThuXqcTG+G4i!8X~>jKR56ValY3wSZ*>=tD}YP%3UZ6r!q}({T;_nxM<#Q12Ye6HIyM7S<_4`ryYgFHNFnMd8Sn9Z;+bHQjbBO@XcF+TlCF4s zWHkH$wnN0aC5(!!YtRjt2T3yJhg7;e1o!QnQ{db7<%XM-gs|v4BMkZEEt~=`8?YtK zb$R3aEPU#({5(iL?6r^VIo~$=52#>>3iM`j>AZ{Oy*~Q6Fd5Rw*M(JFWLZ7A0j4G2 zkuwqfok+EZU?kH@k>zz3{lfBqMRUMv$nJ;yrlDyYA?U3 zLM`LV!*go{zRoUbg5Fc2`ed(6#ctP}e0vB9zL7BoHN`e%7MLNch{)owkmwo*yUHnk z*>VXrR?;`wOG_yB=l&@MR&Rch1tMUdp38Fj&&nqM#_lH|U2>M}avrCi4u5g8pHI0r z%1jw^6}>jOsv(p##2ZbsFI8}iAFA3gCVE>T5U3z{>Xj=IQ9z$UwOb4imIjO(TZ2`$ z?p7K!4%mHyx#`|Be@yQld}4ooiNFRZQ34DRRFzRw=fgmn>uu7~Rrq`z&4f$|NcJS7 zHf`0;#pu4YS;>(nE3HM7{KBTiA#r{})(OCM3}+Zo59snk>}U(=K!KOm0G>IT(W;+f z=1%3A7KKE&h6{DtSZ?Qp3^?6=p9t5nh?ZE#+s%ENf7>e}jfhLX|GI&@kVd$r-bEsD zr8uR33s;xwD*R9=_M7hDph}1z8DOthxQbEsw;^8`rJZxzP1hPrElGA5C2qQ~KDwj} zJ7bg}aYkPu^JQyr!ExE~D@E!fKOuz+B+^feU8(D&C~y1fvpSJI6burG;SKtJO~AO} z?-;#O?0Qk18}5V!s;@!vaj4qZ8e`V>-cI%fg-iba%k#)vVFU9QfT6YysO)$bgq}jpF?DzyBpZGvEJna($ffKL=X9=&z zmSq-EH!77qaJw<^dj{I|`=H#~@&f&ZKbRKmk)RRd`MSxXjk1b6m7BI;p%5M4f!qILb#zwHq>{Qag!pxW zF=h~jkJ=ymknl$i{QVp^YE|ph(Ad3%kTjhR1*)cUolJlQ|Hs_NzT4u^3Q}kFT!ZVG zjGJ|XML!liq4K)-xhX~_-j2D}ih?ZK4(%Ol9dq@-gKTz-LPY!#xlb$t*|ctWNO>F| zJyhtot6Zv1B}=WyL?7dacb9!v0TR16Z5DOZ@<9xAnm-f!t<%~l$yR)2#2Od%nztny z>x}|J;hda_7jvvs%qC>RLlw|9FRZBDk)n6I)SdpZ!PW^}f(9kur|{rF*@FoCA6%CT z4`NlhZ?;QR5G3Q70c~L!8usjItp@hf^iop)Y?Z#8yHFF;?{ZhuFBCUzqM=;J-^I z4DE}Uk&TR7+t#Uq4)&{`Rg}%&Va|{o8W4myO)PxK5s(--GU5@}6!b5~*U|**K$jxd z_99Aw5#$qCBsXJg*&y{=8hg9NMe|OS#w?yjc;)7;x5`jwW@4E$Rdwxa;N`3*ZI(of z884Z?UYPKN;?rIF&1H~0*7E+@LsJuvajI5Lz@*BF+@~~xnZaj& zv-Y=(hZhkAryrs2s8HgoIn%5PWlslIw?52pHv0)a$0a&yE2X#$AQPgXIiTDifEs*< zL=ENYIjoa#2pDe9(jrO2>qZ+A{67DM`n`uPk4x8Q+_xb9nnq=g>`fty27GNbVQ|(( zBfj$ob7epeJuzb2*LERrtY<3usgphu)bdHE_r#Yj(sXhmXFXzq1N`k{x}0t^9+Pq5 zBv!nTQ9gxDkn*~6o)9CKwkloXl$VKY*l}!EiXIPhrQL-X0TiYHgUtwtijB77Y>U84 zRFVsS<;48f37hGBaZkSf_YzPHrFDjING$$J%pZ~+n7T2c;_O?0-Jj5rAllWTuvJ%3 za#ta=xncvq+#-pMHu5!u%(kTbBRmW1YXWQ|Stav}IAa2bq%_DeohsHPcUZ8T3 zo2A;C3$(eMTm7}pEXm#A2)i}ti2KuahfWS|7ix@*cNm$AulM2T*oT+jq%zHa+$j6W zyZyl!osC7ZhrpUo3+_BTb$IR7fVRtA$m-6^vn;#A86MrDCZv{0vJ|Tf!SXPD;QC!G z{LAQ^1o)@aQUvkv@%enxP;#Dn5fU9_$S2ty+Lm^e`3)p<8*|G2)d<5{-J z2a0?i7Q+Kv*c|QRn_C-Gbb(#rUGRpp9F7u(+hi%#d(d#JHdp)~-zY!m)XwZvjui~3 zNU!N#mX}vAC(yf3I)-XCmN{CHXb=)RUa169YMH#@=XKeA2aA$T*r56pX3 zkX0peu1BK#!mxi|0*O@uW5~x)Oj6<4pm$R@$i~iw8}3E;kj4C&tU~fI@_m&qIzT+O z7}C@vw)uIdeHGqQOyq%~6RtK@n?b0i5a#CyX`HaiA%!0ZrCtp6?#I8XxCedQRedIt z-1pm$${gQPskfIPDRtvHy)M5`&|AD1nJzTYGdHC-yOD^2xEY$FVc0)h;sy+&rL5PI z>L_~DvqrQ7#GGzv<=kxLtaqFp>bnr!Z$8r3B4Q-%lu))eKc9mu-<5qfq}kIJW33nF z#$vAxEZ0V#jYF4jXiIjA|C)Oplc4DL_Wb6XL-;BuCwABIvzc*P6g4~ZdvJv&3A)*- zFm&^TQ|cem7qMC=%!NQ$vcswt`8(DpWnipvpyprPY`BaFvh{DR8Pwz{?ImD_xJe)e z-|*X95qgo^!a!6%Z9^xJWJ#(gwGR=00Z+8~#G}=+75a3hd@b(}@njUjVQgH5S>mK; z37_MtGjQiHd9rI*Y7yFtFi`L6;4apN2|UA-2`pe4{8TFO@i_jC*BJY==8B#E8l6}& zXf)XWfd8+5;CGa%y>P$i^J6KbC@|F^tslx6e@o*}w#%(aDWX)>_DoEMAJi+mq;EJN z++6O_=C)4blmB)_DLx?H2puC=MoB4BJnOHd)eim^(vR{t|FkbiM+oy7507U`oX%rv zAPFG?gJ=~7mRm&7Y?{iE>ZWG+Cb8bM&%`9V>Nn$Tkn~{Hxz6^^!AA`oHK~H(9jciN z31&OGqk+&p=T=U4)^Xt6Lr;gn8D;8PXD5%X#Gx0{o`2goC|(_EHWBO4!(9$fF%wyQ zizoF?T4=P!aBxOw(?B~`7o)ZfQiQ5|gM=3rw!iBeh2L?ksNa?@!!qV-xN)RbqPmJ) zM7MXvNy9b?RE*XF^*AG%39x>)}M1Cp+Z0CjCvawRutV)(r#(KAE1RStr4Zcg_gM*-_lAEwFi8~Ez578 z&V#BiB&JXfT%~M4qJ^tO`FhdpSeGWz{}Vy{g_?brcCbuY&88!ve|=)%2+)e$-%Uuz z|8o%(?`_8-Q~JlBG1y*C@d^8Edw~h$V)FcsjyiX@IdkA2A+HqHDzUG}Ni3=Ug8es3 z))-Bu>bGZ1_92gAcSzf+kYcR8Fdq)=w?9;e(p5VM?_0dBe<@y*+qP1@kC-Eqf`2kT z8ysAHhCtDL=f6Ah($C=whE>y+tTKnihp+kl)Fg|lZg{S?!PT+TMG2)90gBY}bG7#6gG zqU761`2#RfQo8Q6s$!5YRVE_m(Z<`@9pF{E7FUPiBZ>X4OApf(nIAV8{Db$IyQQH! z+Q0{UAF(;=hYGyBw~>#aq1zj3j9nEmg`~v(@XdSgMv$l>aOqf$> zEGJ3*9c{IAVolx(Hxh$(YK(3fqdSwChhkBFDm$2uFdog0lC+OXM1LYbFZ;TI;1JgD zf_FYZ{^2kDblZmxT&v14sV#MpC&nCDSTmc7F5b@4Pr-S zHl%!c3Fhh-+yPu|_Fg;FZYyoBI87BhzSbT21+@K8 zD@g&+!sk1Bd(}5u{ygeYhxMo@PZC;-X)qpe-%~l8@rh3Mm0ng!ar$Wc22E)vux_^J zWAbcG3Bc2smlsd|gia44PJiZ^RKFD-+^4YuyRNek)E+dU*3Mxrb{P4V)HK`Rd~v1Z z0HCD_2nUN-Oi1{a2c$vc8=(!4J=Rg&bbbTLO5$ev@})gzd1sn#X)VGDD!q#TT4GbQ zT;6;Il^)&ado$Q&a`6)~h_v8*ce`8vEVrW5dLU@6P9%vT+HXB^^$L0;tM6h6q#n`+ zBUc0616^OKd(2)yADlAIP7?GHQDTawrA77qK8H@(r!V78`;)+Uj<$w|y43C!%V#}= zP%7Bt?MB~P%ID)tw?@>W{Klb5C*Vu}Sx~3;C5GxWN%lnhMT(L4xhDc?GnSUCXZESWMare-MiM~NP}~rexjoR(V* zb*VK#M%AI{%A8kX*5;hig7F7eOH`Wb@ZolvmK(RfK6xZ@-S68&-*k1FOr66SI_hj# zj~0`9%}2Z|8&%2B;;gbU2=e<%hkaL))0@r@S!ZwDu4M+!&pgP0WcxhdPNFGRi%iZ@ zmcg(MohvKpcGt~RWDq{q=yb4T^jML1J^LbL6_h2-Pqk4N=1)ayg&*P&ZkCK8M*RA4 ze1gh41ni43$**dtMLixm7kJkE`iPa|vzknhqT_1*Us`D~Tf42dVfvvZJnSX39}@|% z$0VD!ZXbp6L#4A?$U=ewEm%kRPrZ&a)``ql@7~y91sV>zox3+&`ajx96mGhm^Vc19 z%)3C4D&?F+iRU!c^JC{%tPS+zB40R%`2Ml8F6e6gT#BOn`38#tTUMnSkjQ4&N1t?X z&+ZQd(j5$hw+B8MOMIta4caRpA5|K-XOcF$%U?c+c_l=r9)vliwPXZ9Ehs$M$_P)X z{UX(UJ7p^`vl)ZP8s}YNI{s1)&%I%(tB|{V95H;?$M;KsE9)}JcrQbI&Z9?Mf+ep% zr2R886kzQRx+J&Eh<0x0>A_A*qJ(}%qkLv``}Y?OY=Ni9;c$N-j{!}IU4a;fg>hBz zmVrcbc|!qoeFdZTwiZU!TBdw(;7b09N9hYmNO?S_2MTW_|9JrsQp!8Fp^jQKW8TBO z3V(lIqv#K@a$C&d9e--=0+8$Uwv zydl9iPlJgI=qdBXJ2n%sQR&a5xRl4=up~gC$|jFPMmizJF@g4boM31!aTs5qVD6Czdt6k@(V!X$Bl23 zDR7|Q8G?i>1)U&JJnz`X2Mn7As(N_Cy?Bf$(!KX)eMtKJJ|r z3`0n2arMkOWAIGrG*Aa25T>yxwL+-bF-L9GXevvW}$#TEd^&iEe z*qV+rH9T2wDh(BWh(7YO*oF$1b_y5DWN_~o{O-yGf;{=j9s>P+>s}fqDAgr&?eV8< zZ9jovTQ$}u3eoCLP(Ukvyt#x}c(FW*b(8gd0X6)hROYt~0pSg4ORjN*4*Z`^l(m3f zwOEGMT_8*Jmz;*#tB2`+uojh(yoGzgF(Ou21q|3z{1#5f;f$;$?i=S{ou;J9Iu&7a zL_f(#0;u+sS+eqhFeS-Rq@ZoWHhd7?Ma+G32PuT=y!GGBtw?RLsa6iK)3N<-lv>4^ zdZzqH1vmv_fL-dE9pH5gb8LRL7q0=&r*7_R!d*mfrCvZCRJ4lQu~16zaIc!R+SjFX zVjSt1V&~vKfc*+2>yx~6S_}Q9FQm&!?-%5?{*|tDLQ%%=(`AS=6NPi8ph$R=hBxX8gI?AMG$+T^>3nl#vyhL{p08%~!3IwSg2k594{a(GnUS9yWJ zt54ZNa{5E&x)B-^IYPvu8w;dJ@307Lf^gaCVyB(Nra4MJpg|WWBa}21&(#HD>cKV| zh2)->5|tBQ>(BSRqP*+1(%#pi+KCLLZgAVswzPtnQkrjz$w++LWo5Q;VrDnsYH=oDu?VT3Eu*HWzCbM=lK_Yu$h`AgmRXBX94jdJW|9CyZ}#ukTp<|q5*ftbm@!~hzel*Fpm<{6NNd*$4!w2b@L@* zqz%Zn^w@(+xFv<7Xi}C+4aU{rwk!OGnP9SW4n?x?G5vMbPd_ePjv6G?Kg?+8#ba5g z+=fQVZ=vy(Lv8!?^gKbwRu2JtnY>$t`>U#EK{2-u>?aI9FfEM4v}u8FczcQ7S^cyW z1+G7v^lWwTuTY*wVWvwbczI?vS*r<+H5%idjVblu6yE{WL5|>N+FGle1r>4H{pfk> zVIJpr2T~q*J)|ZuaeS>3ceX}uzM(dHam~~5|w8ZS%58rC) z4ZC>Rv+GlsZ{p7J6t|JNP z+?GADAE2d7Gc0tJpI4<+29AZTnG_%;{%gfojCm%pR|yVnNy4p_cXjf;pOtV&vk@Rw+GsIBed-}f3I2Z}dMa2mC&3Z%;l{-$J8 zLidXc7I@-hxukAJen^bxBG!L`@rx#=!LreR^=5)lEmO#UiX4&61fkQ3;3j1-jCXU3R`fYZQ0OEK2wTh01{sB^|HfnGvsV|F_a+kpOckPzT#j z|L=9q|KF}qhM(&>j^5H3nAFAHGq|T8u|F64>XQ}-^0fGsA_Nwm2 z0J4#!Qak4NuIhRs-MpgByx<6TM7p7Mc}&9}{9CRBh%ut!NzlpVNp4K>;2bRK>}z;H zq6}~V00Lpx>xF|m0DRU}fq4n_F$g{VCNxkeT7k*AceQXR%tDM&xdbImRJ`Gg;{{EtGai{4W#5n;g~wRPvFT#oS>L0%&;KB%wZ-x+q5 z$~a`4te&%N)G8L!{<4bqJ*ePh>tKR7j{nqHX|p%>L7BfxsIeQz4p2FtI$RSRMq^Zr zIK)EH*=uVm5M@*(Pe#UxCJFh!=J0|!l;JhEl_VtNF3+J(OTt%5R2G|RA`7fN%Gm`5 zr5ZHaT@sjij*pf0q8M*ki}_lpBq4MsA8XcvLC>)j4xBD z>51y`A~&Bqpk$%0-D8Wf5d$S4pY`p)-qD#(=+=ai09a&~IV0WBAfx;+ScrL|;@c`q zVt#{IG8|eAjUX*LR47OEYf0~^T5ti^T6*QV>5LmMR%Y z@_tU@PXKbW;9ty7(f}ow0xDCu{6u&{&|g4;JCBuXJxD3nIj&m(6YiKPG6zg;A@FqVw=VL7fsan>I^@oNO@&};t<;OLbP zSfJs_B2bV308Ipr8YeRiwY9zi4>Ey>q98KlI{>W&10&;VkZG&coQ76)%fPL*OQGdk|vn zs?!pF5m5huz=*;1gvAC8fb}=%*1LM@C%;l{WS{kkIY?u0-w=^D?koyDIdC>JUUzcX zG|K!&{=pHA+rK&PK6v!ZZEeqFv(-ZVt+06~y;{UnBA>F$6@4o61K&e^nsJoc+dGBO zY`*LaYWyivlPY)s#~@e+^}Eq)UU@kgY#o1f5u|*K13UldIBDzQY1`>ZsREO^8NGZD zBNe24bEI$?Q1{FaH990Yg(au93WauRN4U-L+d}Z`Uy{sd=6_*C@qornHviU~5mA##nTyd2Smbsf&mJ$v`Q* z5O@XhL5FmBU_{@#7t6iRL}0}SJ@Rc#_(!Uw6oj=TDPrM{lAK~pVHlzuh!|g`6R&2- zpu*F%`sGZJ^x-XVLCKd3-4~it7MYd%Xsel^Fz3im4+ZiiA~K)X6g0B%UX-d|bEyl8 z-d=)mX_EKZHZ-=cxM9;CD_P7MwQ89B5n+Cr;-Zm}JGi%1ZkR#sjREoSP!w|mnfak479o+Tq72o=eMf9VD!NW^Qc$ak4h2pt zd6YM2+y@{vg1v4xL<6J2Hc(1Qg8z=?S4kF7K)y=yAiDYpJmLXiJ^4hXlduURpB>-r zU_PDAcSVE1L};{g_eJ`GchYFY%9ODi}+T^aNsB@LLx@o zU%J{IguI5Em{L<-8aTK8L>U+7`1V#Q>K7{>96-b~U1a67kt(Kl_ zos8p7jG}1Jpk9%+82{&-J#L_Tm>=rhcD6m$YacP$pEI_#m>3axz~9wl;Yr6&`xevG za;hwV00oNnopfy5w$-uU*tTsa9UGmb!|vF&ZM?VlId|jRXP>J3_pTqa zR@KB9;~CF*#;Tf2SxQ`7mjwXO5EE8ZSNuY(_~%`b6D$XemIty7oZpT!O{$oTw17mp zt<4`P!pi>5k$Zg$2ujbB?6?&%_z-_cTJ}73>*33aVI@jBWCZ&Qje6Oj;Tr?meF=#J_I1v;)BSpHu0 z1pXoRp7x&iRQHppL|_|q07?ewyqcX8-GHuo??Ds5!e^)tm3NU3>_^~j-n+mY5Cl4Y ztU7~ulmUfxP@P(Q5ciVv|CkZy6;EW@VNZzrR2=OQLvHfJij0s<>hm?OWO>soK}|#z zh^6gyG*A=LIMBO2kl8snlIsx9GxBj7&IQ|aoNhw;LVkfj%MKO zg1r#UIKaXq2}I`_{Z(@jlx);-5_(p_x>|BKJHRYA{Xc(oaPh=OJi3@rD`9McVWWq{ zZ#hh>mm?8&#tJ1d_m2GLO6TLLZ~t%35_B`Ogck&n6g(xxp*ofm*_Q?3fHQWCU}1vc zs6jLbC5GEr;8(3OC}mXtOK2nE|BRd96YLAgG$@Ze1?hEfy0tvk+fH4I7VmMi$UzDJ zVWm1zmFqG|e4~*2yjhF9++mY4rd!l`)w)qiakEDb&nx_}W!^Ngpw}l;G#3x`i^n;7 zK?MZXY=&ot~-e%9Rq7cEhRSO;{{}Ml_ zccyhD<>2_gQ}(59Df2Hzi4D%*5Qe<-vM^%$zWGO#UD{{Jk~?l@v>|9h3D*7=%$4w3 zTlcjGvxqdcM@U0#UA_-bfSX^YN3C4GIDs-auJBUf5`W0q42h@}@@Q83Y_6E(UEwOr zxwjl*M3r2H3;)~@VdF6BjX0D58T94hA6dwkR$MT~8q25Tc$G=h2G$D9H@=$TncP+t3iksvw7AeU@mYVR%Q4*`@x_-82^t&;@z`^V6j@`Qa3&RyZ!iXI5lIU)XhvXzQ&8=}4uKz@fSI30NU z1zeFVAr(yYpZxwC^HO^e#YKWUbAbJ)KjrAzc<%O9PM7}PyEcLS?KJf*1)OiD|3i0o1EY)T|oA-{t?K3!}nJ} z@RhFqT1p9McaCfjH2*{E5NYU+buC6w8va$z$+`Y1FMpr~0srcBJUkl94jaz<6Sglp zWKGe0YCjwPAJqS|OJU)*QKwPxJZ5fh*j1}u^!sJk#KiWL`Z&{2e+V|{` z2w38a$5Z;z6@F-Tg0-jqg=qjofX$1;nH}?w=n=ht{1q92*LOM}yPu(K&+OVo6Z%op z2TWoI2QG{F#zwPYI(w{>z{zserdmjH|5B~pjk`Ms+0Ihui0Fs*#pnPvm1d z%chs)oaqya|WP} zCy6%%OZo?#dq|3KK^=)=!ES1FF8J?{CTa&r-^$THmTVWZFjF^4M8xd7I%mYJIJfny z@?|H_45r$X_aB!D323d=-L0>g_p3bSh8d2_r?n7B2i_AkBQb7?<)&{BtOt7CSTdiL zp*4OOx(w>kS3WP}eAcEjdp0)MuicOjK)fFeI9_ctSmysw1iCovO|^B78X)2!S&ViG zs42nRnCN2r1}0*6(UBOGt02k*Uiik-H%;ouj!cIQQ0BSGD3W*YHwsk$$W=&RCfK<| zE`zaxtb68`p5_^FX*yJhdqI~tv3>!`6b}-C{PXrUZr9eQWCg0Nm26HE*HBdNpkRnf zO-hQAkmN(!{9;-P5OF$Z_N48Ln{rDLlcs-#+&LgnC7o?}43tEN57|*63rtWA8Qpuo zSi9YDVeOA~O#Osl*e&QKhJ~qTcOWEUC^feAxu~;|>>#|E--wClk)LP(o+|kBk|Eun zeWXD82v42dEP1N{{?)_$CS~(YM&MVa;k-^E4aAHDcX^G{n}~ExqT?O(X!7eqS86Lv zID+l*@ETaJ&%}Da!U*MQGHJn}q+0Khp+!aJm3jCpIA;1MVSR|P%=y%D%#k4+WasY- z=fm{H{rLN6ekAvG=hrV?U@668s3}ipI6kjS>%K8Qq8454hjZ)3zRVXGmVJ|LS48)x z8lzRO?eJSaEvB)ynz`;|jy6a^J&U8V&TTu;!iszuW{hspP)Ws7aZ67-wwD!z(ga~Q zM3|RfBBx(4Bek%{zw!Gc4}xolQ7^beg;m5I#E-?~EUN_}L^vTW73KnnBG&_3g_9WH z5R=ExYyG*k$o<1NHkubR6fC(nxw}kby(?su8%m8#C)4vygN1buigP#V*>e-!-KSwe;p7i7Iq^mI* zFGi7xIOos+_+oHD@UZ$GSrOek&d4zKwfLWRI7|*^5iGj07+R-=P3X1G(Mpw5t|8zu z)R$x4i!=tBO{Nj$1@9qmwEBN>+I&u8CyK(&9x0ma-xxw5CpgrsJ?+H+eX9y#EZH6& zdSBCEs^Z85pC$|lT|dkgx;Sz^BZ~hS*V&K^yFN|5CmQ(%)YT4V%Q8lDh*V|@UukR3 zI4q3R17Ct+r0x|tz)~*#rLdX%QeG~I0;{FcW8lj^K}z`Z{Q7dSg^$i7vWnX|PQ2V? zL0UKC`~0lSx_Pd{fNU+0 z7-_FX3oDjr(B|M3e~XSkadUSqe-%}W#MjeD0vi&tOj?YS+&E?}xX(zXz!1?xf;AMi z)V~eO?sOcVGjHkXL-Ea3i)_j=CtXp^6B9VSZo%=hQiCc4sR9z7dPq7PO)H>+zl_*L z4+9K5{o>x#sTLWC^XsTPDJBnsFy+-agpUW%e7_QXAd@x?JA}gUxu67q>SQLs%1g@M zKgqG!zAGFn{VsFFN*!t_1R6kr%H8r^JaSTtDWps)fG}5~H;6|)fM!@;mLBDCTslS6c|-OJu}wU~i2!H_+i2aBN#NqsJ4qP^fJe4wu@=85RtloLlc$a5nxK3YPy1 zTA`WnT$`RNFA>6ij@oTXr`KZV2&?y&__FlbWYH7;HG1d+OY->>=11MeXCWm1rph?I zePZN8LqO_KJKJRdVl!_=;Sx?7zm(`KDZ(ZdJJN1~YdYUi>qKF+3NWzcNd1D@h!asj zMYh$SbmB{H!kun`b056++pnr#Dye%>pM5km>L~MHe%u0Y7tDibH~QoVThJfb5?6CLeS7Dpk;%r2e!go4Q&R2Hmy3p5V29S*sj99`gK{en#)7*kTm z*vL%w?_4&_08HQM9`|>N%UvMsjqat=x(FuLPFgz2$`1v#J>sH!<8xT3a%7ak^spyV zr1c;<6qviMRZdJwknel%JYPi7-N?5~pr7>#oFOJ+!*aqfn_r|cybdpFcx2H+^mve$grUcaLnHI{SCM?o2EV7rWZJkRvW}%IiEzId{uNgyVta=e?yNI5jux;^ z-Bw>yN%-m|i%|-h6lbb(6EVUTFC;NveItEwKVC|k zvB&h6m^mS8Pyvl^aEN9?kkZxQCou1fENNoKDW6~E&I*a%CZfCgS6yMY_8%XnZk6nJ zm*XY1F_Pwj4Hq6|uWCi>r4uKuBJk^DC_=vu;-go!G6$Ul;DUSFi6{*xPhYnD0e^d1 zET6nxbvv;0gPe%dtA(P!RbxVc`)1XE4S43KS2-*soz}ezzZw2n37m96^)4fj{o5`C zdp|QqK18ecF=Js?!E17MO@*!7pVGAw4HX0qdMy7>1LK{vIf;M3RX6uj@ZZi9aJvED z+r*<7bf4kMN%m>3Ak{=2No3tho0!dp1zYhZ(T4U#>0PuakZ?LpKurCzb>=+_>7U#5 z!qTO&x56VH!B`r#s;-^Jf>X!XkNdch#50Vo(f8SN$4S9K%edg-cJ`A2+D(1h+0W(n zo4YJ8K|;>JxtYC3zXp^CkqRk(lH#q;^1DWg99Y>jL_@}O2ElyJXZJ&Dx+l4O&*$G7AK=8ymBSVTvVsRPunuwjsLjM??LX>aBav1{ zSo@fc=j~xvo(XBgXh1B&8^u6LFK^Ohz}Z_D;c`YxVEkoKc?)2*2lA7gb4DlJeBJTa z=grylGJ-Mg{dwB~w*DOFlrtc)d&DiS6NRN8-MKOkX%Ko>WvA+;A>ArJis{K-7PiiV z+$x9#*H5istuLX?$2$d;i=TaEDv1s!C*u0~s~OW=_q02B*xBal_qOFAJQ^c-ls8MP z5@ZMkJ~zCfD)?|0`Yw5G>c|>(gxH~UYr;i*Zbe(eeK+I0d8~1trr=m6M0SeS&9ExK zgE<`0Z~w*g1f*I~3*MFGvO?iH5Q*(=A>+Q{i3hI88b+C)Dkihyr)v&!l>^%Opz zr*=p8?KPUbqf@tCNEKL%p;X?r(R6Blx@DeVJ%$EG&14F)xj`S}Xt?jmDu0cvUw?*y zbQ`csh$PhbLIn}&5sV53ngZSrBOv=*2k(@sjd5nKX{BZmw`a1qYj#T?O#Q40t*4(kvwqhfw@Thtu<%p` zqb}V^7Gp(eucc6)9W@h-g-WAc8W z$@%g=;q7o&LmIYS7swZVx~!|lSz9qGReij(bJYxr-_+n{9#@kY*wKA=5jvo#*zfEn z-Vk%TezcPzGQ077Y+pvKM38%u58(V>ixd)^7wmOOFu6aM@m)Hl?M zFx(4{-W@mH=&3scHCUv9BI+V((5SfNirg?>q|FUtoh6|MpC_cOXi#1d;bwnm2UZoH zF|ns_-bAV*A`eEBZ1m8vYJ=`XCR;D3{)Q@!p-2PC6Ik8S%#QjO-qTb4CSFxChIn4% zeslu&8)XBaVvQjQwAn9u=}X!Hsb;axsVpRO)nUaa0jZg!hdljxb#Q@kxl!c!E{|I3 zEnl8+J#nE8A>X-UvpQYx4ACCPctDd}Z=72t{kHYq^Y2{vwRz1j2Kan?5}#!=H1<>Z zCW*#x&Y6=!B?u{DYCc4$0FO&pLiprLOTQ%h>Q2ldckFDg_N<>Wi9cBhe8?#jj*V*` z4{~J$f;8M>%&0k478>;J@Mg?~d!?a&)#?#Fa3e{+S49dsSmia|4`6#MK!m#p16@538 z2rI-E)s}kw)zZLH{8h_zU|HA@vn9JSIiNaUn2L9JKQW4Q+;I1hv3?pi38p_+W8ucE zUxIuNVAbm06_FkAFrp^5j3VW$)~7-ij^0OH(yZ^yfP-24Iw1SW)&r6H?L{Lkc!zE;;?;n>WYTL zxgntFVP1419_V5-}=N3foj4OWPnV8EyAe#8?rQez% zqABJiyFAE#l|6Dy2Jv_gmJNQ9mMjZZE_z_=u;Rt0c>!B5b51~~5PasPoFu8d6{{ms zL6_a=kbiI@gj%F~TwTMpp^ch?vfg-y3PbOXxk^d<0Jx7ts)s|`;Q*zh6jgMVp7dJ` zl~I$M=pV1n*bp*zA6U#G@k4LtZRX?t7X4Eb`e$zLYH$X6!Rf^dCP8

5u0&R+m*B|ESqkswbh#HX&gy_hoz zCtJLw=g$=s&KxY8X|OqR0v5zhsQ%e)45+5=wWFh&qQ?7(i44;E!yH?g&`60k9@-ue z(kZHRzhy~-%RB4A+1iX@UOy$pezT2U#nHQBptt6Gv9Ix^#%fq29IN59-CqDO z=k?IouLEaERA>TjER+dYIB|_O_Bf&0u>_9e!KofVC48ea~7 zGv0h_ags69L$(w~?-L;~N@#2W6MWReMj;JQAo3z`!q9CvP>X4ax#Zx#oIlvy#)Ydd z2D&_YdxR|Jbu>hsDuinN;^Gm&cbX27+r=%Ah_fNxM5gaM6nb#?zR@TRToHW^S@}a$yR| zFD3{}GlFm6B!sP6KV%%BJ+ja_ZyUaRpU< zlH|D;-W)w7ibj^KY_k-XX&1-M$8GIb5i?@HhwY)dH~|;#oMoN9s^u+_1ejaHl*?k3 zlX$&9MoWcj!+k31Mglk3oN;44xHti@I<*TNDtzst@P@Eir?+J_^Yz@6$!Xx0Z{IZ@4A00f*5efY zR3Qffrvm7$Wf6PAA#n2uYsW7|sZ~saXJkBdlHG8q0pjMin@oMo(_a|)ZG4J7Z%i3C zm&0qSJfG1b3ssKArNz^6fDGX*-9e+sX$is8%Wog_RB3SbG@4d&XAmM`3b$SbiG?Ce zy6Fh2w{}yoPU^vO^#@-CfNBTM1i4P-*=cY51tWDxV7zcT_~9Z==qOx{<$HQ+e#+;qk zt6^jW#awd*hICrXJD)V{hq?1?7g1yCgxBGDa+z%9pe3bVyrzX;UO~5!ooqj~pf2Y3 zEj&ADhABUF)1*y%KvB3T=WK5hwE`F=n@b12)$LeFSUYXU)frq}?!5u+~dQ%Hm-$ z-KtlX>|iIv{g^KOI{dLNCOIcm|8=4Sp>_31pr=DTpa z{&PZ=X1zAlaXCKAXN7nm^LNr+L`{xlxopyNsu8TKg9bLzkCkisNZQdNTW(0>@j<>% zfFIgqknZJW?9zy6)IzTAtlNILgXUF08Z$P^N4r-O@GGykq|{OO{xbt17vdW8b$M{% zm=Wls=3z~-d4WY!`)r0@C-v|LQMN7Gby}J@EVt-fxYmJ%&pCp34L)WZwNV(15*$SO zIJ_|`v1xr7rx`G}!6ojqK7PB)WfY-A3m#rrG0$BrR2>+kIB<@<)TjsZRP<} zgg0^{4XbF6WwV=VM=R>Oa=$*7Q3Y-F&yO_E5CaRhT6-4Dhsva9rBz}hV{Qs8IFIs@ z_j5M)usi?U7BhvmPG({r6~zoEVr?|#hufA=oko(8Em*+ukbbV;5vYu9;U_y5czc+- zmQ>xl#cSPUgnE{Mgz>ahZ?Q&oZILaWte@s>a2r$}q2^#Fu!!>mr?}@}sD*VI0J+GQX!f2mR_xBF}mJeQd2kevu&;$=gO=1@?M32!>`9ZjYV(PDy) z`h`SBZh>A$%oL@MV5h<1=$x8p3&+&>mG=$QZk0th`_-vkky!#%t$3^-u9yGOQlfNT}Nn8Jg)~Is)|L1Mxds4 z1>jwA6Nkj;(q|mywdCgq~ ztWkd76NLT7Fu_l&!;F284P}1ybM;NnOSU5tfk$QIJ`N6%9}h;=t<2}+;<3(cYKPhE zVs4p4Nv$PO2qrDrei+&w?oF6mqi)w+GD26^Pg~e7d6wTMTS~;FzBgajwnRh2TFGJC znS1x05^^rdsT>zvkUFr%DEhHu1h>VAl&dMUv3|gqhCp^GRWOhgT1f86??#MZuTh0d zo4n91_GukRUreu*Jesx22hEHy`?Y+~k^-7+!nWcWO;7?R0oRYM{FE!mJp+f-a|b0U zDpAJsy9&Y(*rHjGTVOE0q8<)2ja>*G6F?veZRW`&1c}sni|dd^ML}kYoPm|D;WpL` zO5E2Kj6;`dJ~Y~C+Yn>pjL4CXyWav|sO69vhpnGJv}lY)d3b6X!iNtm$OfrlSI9!X zZSA98?5)q40M412=?L|=+1L>ZGAVq=2$6?(KwS9l*jo-TN@t|~Fswp?6y0%fdbB>F z_xiE^iJLoKX|HGvy1gs)bie04p8_?h2!5KPYTRC9BugG?v=ZF>8=~+`v1*AwFaCl^ zUx0*8uRPO~wN)mhKEpw>osU_+G4;A$% z)4Gtyc5dx?jiR}fM_sbZ1qIRfA6$+|IAw>pAY%XWFo{YV^RJItA;c>R<_9LRR@WMR zR;LAtDxPJ{&|3C=YIoUQ1d3yNHc!GUwAh#N6`>ZCW+;X5-JmQq-r*1*qQ&@8`3sgY z|9ew9C=Ftfj79@wD_Z5T#Z@uYL5qW(xCe`r5{Co=U=*D{BIxO8GRmcT%IpRrnIqE6 z;-p~u<<6Lx>M)?2jHj^f9imYKKi6#;$F6In{Y9FaVICmsn&k(X_qA+8q-{}U3xwvAU zCcVCW7MqOsxJ~J8lu571D#@~1X?X*fNIG2m%XfaoDZq!dY&oXCBpPSLzl9dAAS@!? zWwxc&yv|6HeP+^Jy&V=3iFt*WN%OIvfPx^db^;Ad7!?x^6Y6%27zK;$jj|Wb1eI-o z*{q(6$D#)7Z4`#*HX2`|GcY4|c}Jm$&B6XHWR8Xu=_Q|5+wPr6L_)CTB&nH5I()?#jFf_YH%7uD|fWv)MA_D}a20C|jMNWJFTHV}I zDvx{UT*D#-`}_X0FGKPw=aq`eT;m>u!0s;i-gN^l>m!o%7A(TIDDbly>1~W$d|BBC zmwTlL-z{ih&8ts(|1ES`n*J*~$&rfkP!wMt$RQFs9SiA2boS`3@A{r+2QUx)SPie0 z&H!zILDPt5Xv0xWag=-@t{SOb3J}yF77LWp!E)IarN~i9PIX0d8;CS~IrbrzHgvqi zrc))4m}tqYgv@Z1;jLqlkpy~L4A*LP7aKyuiFMmV^lV~y5|Ges z@WIe!`1;z1Q}=a^+>^PWl!F<5r|lsnJy^U${_KWO&vxlNxy!$<{WYxKS* zq)BiD5~ZkOFSwU|(X_Iz)QvAeV+G^1TZx__t;)WI_Ap-w;^okdlGjIGH#A!4J#`2R ze9sTV_RYMMbGOJge^?NFmmPy7%Gk;dUX5iO#B;axS%$bjVC&`sQNg_#c&m);Wes|!5gyL>->w93VU(1{6 zu3UW%`r$#`u%thL7B9>1iP=W#ue#tS?i~`e21YV);U+BhwWuvpZ_H}GX3u|wZ8EYG zUpz`@eHj>RX^SLoIA$^ZG3)sTn_7u&E&@&9k#1Lm=TO?&)~^X-X02u-wae}(9ze7=p&GRXgrA!O8VaL7+g}}pZ&Y?`p{=$LY+Xm zyfHy%Zk)b@ul2ZzkMo<}$@lfQy%gi2fcEb%y?F$f6Gz!%p>J5RI>7N2*iKm7DU42 z>oGChTXYdtrEA9dYBp)_?+5t|6bu^9#3N*cjzl-ktdz>cOjE0D8yM4Q!GOBNN*8Tn zRjf{|`LVAOMHfCb(d-ob3nov%)v#ED_cQWWv86^vc;G3AgCMK1{f zdV_hEWW_-lxB?im5LIAZBac;sYlX8{U5jot_|Oz>j1VYcCsPLTy07mRX@R?p76SO6 z9bA%Otq>TbnQ0vMiPnsp78>i>3}{xTZr?0it@>taM{+)aL5oOAcE<9 zw>fC0Dr?)bz|y#{&O;T>I5qyXH+OS4CavTHr)>K1TW>!a+Mylx$bFw@vq^3@$Nq{z zPCpfP7HBLSQAMwR(Mtz7y20JhvEn<;tkVuz4fLatnPXF!Vs+=t?lAV5WeyZ%CP9k} zk6CexRQ+Hz>6TL3|CmFE2`DJ71zFbs*fmkV&mlLIG*99={A__zW<=Q~IR|w3$nf@J z_(R1sf*tPTGqDv`Inv_xqBGfNY6d*^y`{A3*UBwqpVXmVAS$0TF{kq@-cPZE#z zonk8^8MKOqM-ojL*|b7rRc^$L2HX(1Q2%Ir+h*60b@)Dj%ss!h zfI+g(=gMMfiNI!Ru2gza{yN7(Hd#2*y52;D!b8#fi_mEP%xu&Ix%>X0@P+&ZNv}ap z!2o*NnLXB@`>EEyT~Yxc5CO!c|NT$OkE&Y!B+Aa~V;$4DcRnt>opD>;G?)F(7Jyk- zQs6a!L|}E6n2X3n&y-2fv?BC*8iyipSfzYL(WOTD^T z&%i@^bptl=$sx>PPJ^vz@d#Bo6jQKTlK9r3wVyNka;$u1CCBPHdqDTcfdSrDFUe)L zr=h@FLF(QxaI$I|Iqnk)6I*S%v-&c&E;2LKS3`EHZ_$)1KQft$dTgP7E}9KIVHb|t z{ssUT`oNX|aPm`_mIcwV{s4%2z^62keYKnv7Uw=I{2-qFpxKY0yDuqkv0nJnXKSXn zfTU3+WH744Lfn>Ikq3^nX2}XOaM1}xf4DdVoK^a`AB@LxP9Ar^`eR>+?m9;aJwt;5Fa#t3?HtS zKDL*!F}$y8KD3H!@+1D7VhwAPo8Yv4Ux-if{*eZBC-eQe7Y*AqNi2SSd@WKWAod^j4YX!I( zJ8>~{bC)NZPsP9jU4JM^QO^?{ldq~(K}hUnyz%PI%)kp-B=f0HY@H(Aw3fo0jzRI= z&_2lNj}wDpRtVZYsGO(7C1eF7QWW(fP4FL$L9F+R$G@!8HxMKN$o0Bq<^qoLbvd8T zs`+#F_WXl7q1{NM)U+?3t70^J`lOj|7j*yhf{jA_nInPt>ihSvnYxPvaI1>HQG*x= zfC$>6FYZZ-OmTIgvDSygRB?3hoPOujdIUWWYm&`DQc7v5~$(TUd^|% zB!^-NKD%=YhdwpmyOWyZq7hfT#9IX2fTWs^LT_2{J|@W6h)mpqR!2T3UjQJlTJ^w( zbO>i?#*0~~l3agHeaFQ%%5~0pIo(E2RHemV5P0!z(}iYKqgOB;k`g0 pi!a0&Mwact9zzwQq)8ys%criuSw+Vbzi{{fZ9Vw(T} literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/admin/interface.webp b/static/images/auditor/10.8/access/reviews/admin/interface.webp new file mode 100644 index 0000000000000000000000000000000000000000..dd997d399d64647300fab04c4210684271d4e555 GIT binary patch literal 45800 zcmb4oV{~QRwr%W+ZQHhOvtrw}Z6_5wso1t{R&1-{WWV~pd(J!OzI*R$?d~7Dtuf|W zbI-X(AAR&Ox3ZMD_-+FbkcODBqPij{;nJUL#8i+RU}{J391wn6_B6?2;=)4WMbG?z zZ;|G9FABbhFV~sAnoSgt%xKss?~Ql8YwurndDeb__nj;Erq%DSSC8>XAMXA|jrv}I zoWq-0g5Q8KKT}^80L?kcNBZl|r{6BY3ZM=!1|Yks{p!6YXj9nMR}^RzXvw|Rf9$pI z9s_s-VlSaTo|BF||uc|KqVCP*wK;c+mAMoMd1-QDC0Tewa1I)+s zUKBnAx&R<~JO0~%S3vwVFyLYd6yOd30KRtdYd;ykrayU}8g~SI{GGmfzX(1No_D1D zabM%F^S1ma0KH#}fWfVz4*;B={|DrI?Qgw80O32$YwxwdiNKwI%#+SX>$Acy|9kw1 zFVlC7H-_8ZuHJJ$A%EI0^Dp;zf*XYw1|@>ycRg17hrDZnjdzf@gNNRyoo&FV{~mzt zTI0S-wUAN&vF45vkyCO0<)e} zpN*gHm+5^N4-A)o)-V8w2b_IjoGHBAyaP@IR=$qC6+a$6(!UTM@-F^tx&NOL zfBV1a@A%L8{|0FM<=S=!%sT3~3w-qc@;`r-{Y(a2z5B3qK`kQK1!CD?^|fdfIzd>@ zZ_>{5cA92Uq}w!#-e09z&9-xwUba>*y}RYPhjlKo!S0 z;^dCLvteh=ylEyu8a^pk7s#%grjs;`my_E{ZB|@|-*bLP<)?{W3{5hbvkH zv5{{iS@hupqc&@`J%EgGEU7ecO$kh7a#sLIRST@QZ|etebH%qBm^*=&Vx|XxFta3? z*kC>n>E(BDtw{yWpaAb#5T%7@1HBQ@!Kq-SVB3-M5jBrh)lIiHLwRFCNh0wJNwjoG z$tNaruUU(l&dtyWWEyMjW?x)v?*$W?@6RttT)epxze}b{kxKD@{l|vWbUfRTKs`jL z6PA^3QJ2tpohS$H+2G*|xvI-$EUuoAfC{vLDPJbgeMs};u;kL$5zgpgDK5;Km_RQ? z&{d#(EckGga{g;%i|lO=O=XsI%sRu^jwGFmxs-7$;QyBnXrJOWqh=QW{Jv8(5qVA85$LxIvIw+UMuk-^TEQC6 zAis`rBXH*_l;0~dh%~tdc{L51f!`m%K3$UrufF{S!`$b^98Mfj>>uP$@36`o7HK&G zz1pGYpV{1}%7y5nN)hNY@-#*SFH;a^AA2^e(uZ<>s))@Jc$LCNvSqw0tlG_}WCR95 zJ=8=dazE}N_R-^*LoVElb(8Bkv%)4Rw?=_z+UthsHuK48B&$zPW@$!nCKLlHjHR`g zr^T8d#zBJtv{u?nf(V3Y(dZx;Vt2z#TeUF)*S22|6bx`z1P`z}P;@}dYFEKK=c!X- z8pdF48HljaX22$UjnNIDX%0Vm1o?paJioxRLo^6df=LwfQ4bRqQT+7Ku+k}B9gMZMYb`uaY|vPl3P^! z<6=@={7fTMM#$}!C$vAh&Fijy0Be{lW=6evudhFV7iEaRj)e=9s(9Unf}mhqbv6D6 z3n^{1;vdY39*R|KV_#b0z!u*Pt9wNulf@kwHS8q$VjXGCDLY zSZI)N|Nrbj?LdjG<8$-$V4&4jn|$-bcLj~4cb)wuN(1Tp6`Zp=i5@!Nz%f}j;55~> zUA4@q%QAgldq)j*5TNXKn;Zhhe6R#T(BQ6Up+3tyLc{R0e1oZjt^n z7uI^=Aj^v{IwPHzKe7-EvVj=}-xVm0lXc(T45QFVf_?U*fKtm8KgLKU<>=Fa&>bs^ zaZ|CBy92(%ozeuF?<~+g2A8l=p+MI1c_a5Em&IRiPyX$mBo<6pIK9VXp&$~7_Mh^0(`Jiix0+}Bi56U2g z8m0$&lcgNKuD$W#IP1qa#sys?`QF}x?ZpDO)Y6BV1s||r%t@)*O^Myw0N9$+${v)f zX8y?4Zv5UsW6;7W{v3qFZwIU0!^BRGGRVheV6*ynT*M?>wsE)`t1(*>G0Ujg5yIPl z1Uq`>13Z#Y9RTaP~Y#TVohEI+)6;sC;NUza8#=sC@ac;raiijj!$r-PVxm1Vh@ zL2S+sY{MD@{J)_RsfVwV#CvQbh_^byUZsrE;Pd4i)i_YLlx`}oqZ|feX_v}&O--Xe zLfpV~zGX0QjYd6ZSysrg?Zvs03aXX7@$AE6Q&y;+%6LhpnM|Q4`>eb)jTKFX5*lN# zU^MgBIY0Gs`9qAGzi6=IFbr>2{a-1wlI?nR=D;*%Hu^JgoeV1c#n`-~xUxI*!p73bv0I2U6#g8;b4?Aj66nqLW8u625vV?oLjyfYa zc5P@;Q|d1LSumFI>GV$}qpc3}z}76;fJ)txHan&GR>=Dd#9S|Nj8W9H=4|QGeZ7b4 zKcX(dPRC~3XM_O4A?xAkJ*B#V&_!{uv=s)+L5v@hC?P=N0L8D{*^wlxwf% zA4yx|Zfr{Z8pRsDwFovkK7Q`T^VevjCfWw}tccBBn)tD)8jE)FOVVh0x;>Z?4!$;n zuDWNp+UIPUh?YYvSmyZ$f*JSQSkaA^XXX9~qhz>iH@)r^__*?0Y>whaCl}QIo_srE zBZ|Mlxgq%O8Vy0vZqhOE?jITQha+IVLvpesWZhI0ljk8C&a{GDvGpI~q_?a!Y6&ZWOB!7_^H zxkzSvRIj|Kn$eRr;=^qC2sE|xF66R69|jUh8_FO8G%S5;pj7Y9kHAi5JT<6DF1$dL z`Ta1w$46k8z{nAHAzYh8XgbraEQ?61KS=#6H>k$KzDw-~{K`>Wvp^RA^^X3K5*uY? z_dKQBkH-pgUxqHBqnIf>h-i3)ybrh@NM1d!_QwqF`v(U8=GJ1l`-H&WSN|HjsnW~D zly)Su-^hO_=_K!VMSfsOhmyOAvG(2fUmW`{q*l){%6q74ls`VcD3t@3QG{%&Q%N6rcF+ z7uo@@TpG4m&jb_d?mwGQowbtns74@@*D@aWGQ7SSd1FNOqDom}d_CmIzDMDm{QfY4 z=eoH&WmiyaI+W-lUD0V{2Hmfqz<&$*mf5MP$kDV(T|cp2~TtTCWHS^W=!%G zR@VFnfF`2CbcS4qhSd;Qwg+_mChzO!&lO#z$FVaTW!JXLPfWyip1P^0A^MrbElEpD zO$m+BLOy_%Zur^G#jI|^L&bbLIWDHF$PIB9C(P#`($i-#2ULMF6GKKx(zclkWMLkQ zdI3pdp<3Zh>K=~3KYlW1LTkd?-r?RyYMV}&1XFjmHpg&hf@N++@vQH^i6MyUM#MlZ z?o!Ob^;LVSg;$Iw@~oUk$5t+mm!Z_E9m>DWEldjqfixVE8O#PmO)kmCHi?UcS8RwYn^dD^K|xA;!U z`DBbPFe-}Z&@-6GaV}%BPq~PI(HG`bMw|4ir2WP8hdnjpKKo-1qZE$!f_cXUt8qq1 zr9p7*m~DFG|LR}03E!JXIU8+!6oN)${g_88Yw(G>Fj&z~W4gFVs80XX1phyYr6JM9 z%18f)NpY+tDtm|i@gfvl{5Ea`B6*;Eez-5jy*cj4^PG+Pa^95TJs$M@yNf%KQ_%nK z*7U#8jsH%6e|4`eNF~+(x3T^ssm&sf{>R=sIN)zR@n5F+FPS44%M0{;7s31A4E#q0 z{&!`IBVsPtUM||PpS`i#1s`=~y$vbm)_en6*s1*-IImmn-FI5E(!J}VVXb$|P19WK zfrs`#-#E9!n!_c*-^m9+Q$-iAZl5(}<2Qr+Ur+P@{@#kb#v)_ZwlEEJ{?)r_U^|m# zS=Hj3z!Fa-i%HSaIl8fAIIZvFiE8^3S9Cb{EI!j-OJ82w-ayWfGU;gS$JVRW9j%N{ zbV{L1RVVLuB>?%KJn^T{{P$K2zFh0gKCk!dNYVlO1XpT6FY>U| z?jQAAT(vyzgM*%<_d8sM9VJ=ePbU47jQ*Bs|Bdyo0oDZlZ7*{@h_p9Gm1VFSORg@s zI}CaHiBMPUg7O5(Z@5ReVyHZ9cZhZHQ@b8$09pH!nh4p*q4enhWn zFlZsrjhMafw|Q-#u!9iPKL*4Di#vWXaL(|MjE`Vqos+0NA#-M_`*zeDq%MKO6!g{vCwAD!3#7yj*sKtNxBHV1a5S5lT* zEbAY_SR0Z+K)?sketLD&bUe*ljse)9om2}IR6YX^5A*%0U>wk8gmi-1Gifwo4ab^> znYm*iZ~4k zJk!dSQMg_dbY2=yV+-tv-X2gTu*4?IY^upQ09a>z z7Ud4zFf0Gy^|Fdc5Q7FA|AzXytA%ym#rsR3& z3uQ3FUQoSsy*bhb-=rq_TatWEcgV9%gZU}u?Wx#HLYAiGro781-e(pf?t=ND?Nj7| zG@rpgWNE49VM#A%#y|+=3gO`xqWLJwc)=Q#V!40_oX;zEhDD_7tfV2tFwjTJVB4IK z9(F7EwA3Zs`x%5Vh8~;63W;?rUM>>rnt7QTLwUMI-?W_Hz|=2FEpqj+>=hVXl0yP5 zCb-Wc%P`jjoL&^m>%bCsM7K`Y?nBx(g3G&zl~RE?{(w-VS)ujm$;SoFt2a;?!}!|? zQbrDe<2hlS4Uyh}h5W#?V-ESUCdZn#0y`S4gYNhAxcx4`gioh@FqBprKOST)j z(+kq>h8@-e=pODMYP0G1Fiu6&6xau{_J}Q^zd_iXq~m6=G;|4-d+q;8BfG(3bdVO~P{@^u&Zqvm`rml%Z?RUn5f<+NH{@8*nID92gO4 zNo_AEj>B{6$^#{q%VbeiWf$H@w`)$23IL^|=MMv1b2TlP>qq*rAbmm)k$xu#d34su z=EW?~Th4kxEnOESTYbsuybA;xYhgYV z95~&oa86>ou}3t|DEUsc@Ha#j`M+D&qI`8*uCBr8rqkLNQdRR*4j5t`BTt2Vf?;a~ zL?k&XRd7I-5tz-VCa(0SX5LrJlo>0;-`kM2u;;3n>q7EIsb{~*Qj*`Gplx6h*_s?y zzPaW5N$!yl-XwGd@i)Mzw$i=E=(P>GvL7UmQ!BlEoH7jO!B>UqvY8d@*n+Ow0o6po5Z2v=15Pvq}3|u0WXLLllJ^863m+)=HaOhzVZjhw7JKMU5ZPH$8z`_L-i|E2Rx3HwCV?G9yTnsj-v@1+08xJl&rkTl z8^R)}s^O^|?@emH%k)ACq{z9nq8IO|q(=RG0^;#8X_0HrhJu1R`+)0$GE7NQ z65bC&Ik5N`YpzJ+rdu$`JadK&^T^|BH+x1{nq6d|70p$&75#i})TubTelzv=bQJ_@ zyhUlZB=E;*F5I7{$$cY|UP>bKWsoUSmqQ=?&Gf;%Q^Ej|Xn;N&nNcn|FM_eQeB}Me zMe~{lfoz%hD^s_LB|46g;aLYtdCBGX_N=)5exD`1iQg8cbXz|$3M+Y;-iLUG$n!WL zb7!@S>q!IGqnG=FGrHbi{F91Fd@Lhz?R(Lzr+vGir><>&0TS8iXpJj58+2oGg0lh% zgI?3xPt|2B7(eoq7JUtYI#8b;{>l5k>`9?PN0(Il)(S)_w6ek8tG0^pF)0zEH2f{U zo`e-nWA9EcMCCY82P7q+@ZYy|#KAjCI~m`(Pm||ubH_m=G)0%*WrYgUaA1({R=%!6 z87S@yGmCL!izKi&qzILMpr(R{Od5U=#TNTk-jaH!YEuZ{1NSYX(GYnqO?~oC4*S5= zj*`M2TFYSf=C=kbB_LPt(gm@U1=KN+H_$k&8u1J?f7btqsFhP$NZRuGj%=i>Rmc_# zxRZz<=Whrb&Z@k{cL!c|9j6e1Eza$(HhP5E1u`9_VHr4mL&IuWhv{!}$xSspua!9C z_GOVn#8L@W`-~_}1jT_a0#^nFBjug3v}XQ+55^N3ciwYt-+RsaeyxP5G77A6Q_K~{ zQgOW`Jp=vJ((mG@zP5TL(PUA?-dN>nrn=oy{aSR#4E!|Pa3WF}XJ#FqGlW=IH!my)*TR(~wn?5DF>iv=JKkU0c#glcssBZ~cE76BpmR3Bn9iI!sPxp!xxOeX2!6OK&} z$W@lah7O9sRDaj2R3mfkoA@WyUv2osZXoo(oX*H;wSu()sVsg=eKSaJeCc)BFaMy9A)aLOTI+5kv7YYoKsjD z=9cDJe+tiO1(|qZRoG|nDhlogTG2?Td;H9~!+nTPEq+1z?rkuGRM}2G8Zuh+^eh$0 zwXhND;iRlL9dK1ffTlg?wy==JJ|@sZb(>rJC^B|%LZ>^x(H*`IC=M@a6vr&xNhyQ3anrePu4|cTt%b$&hu_2?Kg(j-+~HOmY}3@WO2*EBRZZzb z!EIG`6HF&I8SqU4pa(lB9VLj?tZO!D^!v0Ky;(D)K|(LIK_vT}pd)Q?5OvUMIi->x z`c{Jj-QaDMF^|o{RwN95&%<1=q3(#Ti4xu&YWeD&_>GRm=VXkq_L=>L_65;m)U6)) zIpqvMYfaCArPqa=Ea4A7$PElFP(y<-m# zb9g5R_+WR^m{6R%3Upixz`B3Or2#%YSh8xpmWVsMuWbcRCsQ}&x#VT%gA#hrLKc9y z&f9}$k;09uM+4uWZh7}dU`7bzBT71LG6Nai0qT5U-#-yye{3#0&*D+LX;fDT@6q>4 zxQr;BxcCl_99!`&o^BT)fE}Pztfo#JCzhjBJ}wVNH&zb|4pFx<)Aj-J?cg&%vgdb~ z5FX8u4S*GA06OV*D;up23bzfN3kPd zYTmrnx+d#oKk_255m*_gpAHHM2b?T0Kbh%D5D5K3gYTgPWtZxw$(ly3XHrCd8T#G0 zqY!r(oE1Xpy*#%PY*DjaP02n;A*566m5u2bxw+aSB!)KT-N9SQ&55NzpD-=N4+JJZYaUm8;OR@z&2S_(a<-;2gLLU$;w<2)365~|bjw4b=Gx|!e z#UFCow9>aWa9i;kI?(kImzjN7bc1IkQVDzVUlK;|Jp(FQAws!vw>|Q~ zC%Bdk>L^?B96JW*qCNPIBte7E489giY{B@r%bmJhYaH3`+ndqs+% zhSJkKmv^y6?$v1$W4CJv03cTn zwIvGA#<(wA{N$U4JDqf*mx9ECm0YYWJ}1|zRz%31lqcYL@6{xfT{zsJj|dxE!ELGa z9Es9W?1IrM?!PV9u?psj4SQ2CM(ZYVzUSN<&9{AZfHUv2`4DrU9@s{uAG5cZXpMpsOb&7P6w9Y!g z7=3SJ|K%nwHX~boJQ73poiV>LCisB`8_qNc>(q}8#xewP z#*=+z+=x+|B7*5qV!=~KR5#r|b!B%$*|lwQP*ZHm$| zOqR7CRg{e0%%R`4?4-tOVBhDw_dVybwgw&-Q4o63xrsS%xEt^T!>;nu-6JgY@vhd`AuOLsEjZACjn= zV+$DuA$>H2>Q(sr{t$y}3decyHL5ar+pI4c+H#i+B^mJEuJonK_gbzY2#RGVfkMg# z?50k=IxHAh!TlsM-dHqnjPhyI)|t06nPaTaQ6?o1G0pflSHJmcuKVX$^SM#;g;-tU z4>>|HHgPebsbiO^ko$F(w!!S3AzBV0oxf4hY9Z0K4rYd|yw_Cb}R#D!3KO6$e6$$lT%J z8k;Ht+4kk|3{0S9rwF|qRbR9a0mZqPiE&4VZI0G@`E8Ua%)-hOHH`zA9iGS!2VDFE zDO!$h8-Ybc0R@x$GjOzXUAkCB3%l-@y;2JZ)KM5N`PC+A9Z(X%5}WQW?6U$cu{@Oh+i0`-{>S!#VFq@ogC2`Gv3wqUj>^w_q?tJnR8 zlo$}9xSWVTA7_@oP4Lv6A;AJDh?|w6!6&}w>g*mJ<{y>?TZ*B|Cc-DNO5G4<8ct26 z5&ga~BIki_E28#HJ$__t-2E*5wngROg}ZN$2~*(YZjAFLq%qx?R^nrzy~+L?JmokM ztr)EN4V12!>F6Y@%N${%UHy9*u{t{KTkm3N^Gl{nz;6X~-ED-5UUUztPWF7W^zW`Q ztD$N_<}C2Hg&_?mt>50`G(jPD+5E33ELJdnzhaWp1Q!OYf z%%#Q>81@W+10kKaq&u67nGr%qvisrGQ}!)`wq4u6uNtrSw;(M%E&;&m3Ek*2X#>cx_ z?PjqBuM5#OYoka}>|M|kCp~2%8BomGbP>NHptShoPBtyr+oswlnensPXolO}Ei}n_ zIun5jHZg9Qv4?$v>vLFVv6>BHM_&<#i84ly8!tx;-}!WJOv|{;2!hddEu?|0#(go$ zp#*~pO>6Yq0{y=qV1Ly|OSdG|3g>Jr#W$?kYKp7S-1eXIk&YOW2j3hN^FX!G{ z8P*axsbw_ON++TdDg7MSZFscta2Ft05Lqr^6=jk??}qFB>s`LFaX$p80%pGLhF9)X zJ+?jbw5~c|Ph zZF(IG(px zwza2U0Gen%UvSF}aQ_z*yxdBoz)6>>p~LCDzf!Dp}_PYu1h+7ttR~>>)6IDndu1$sUY~HpQS5=`~Ca7Thpe)V42yU6h zTNf15>#b%?xC-lqxC+MpTf1n~a_OhIFe422`F#7*@&1)!8bc?hSlSrtN>Hk|G_A&0 z5_7s7p@j~-RKLLP*eg7@QmGEEnQeM}aZw1VS|BbA`1*5O2isLft+KrO@A{FsP@#Jq zR)w+pjyo`pjRgf&RCzX?DhSQ~N;WNmiIgD$nai#kq2)|)1g!Fj_hKv$%Z5+xy-0fb&n0faEV#8UJDgu~&(y`d zhZ$F=XO+^uvUl}a7-+!o*~odu3qVb}w@;f^;NXbXH zR}^=YKRLa*{b4|vm8=hXP#T<3<`u1qD(rmusBbiz%0;~+4ZPlC6;y9%oYd0Wxx}jo ziAUEFWI;2UhJpT2@-m=FVYV8sNHKE`%`f}dN2LG5EdsN#erJ7p;fDbs5JzcJ_lJs8ye8DL5e1VIT^)4N(Qg77jNXVJt4>^kGlBct zJkndk3);TP@;+LE+27mWt_@XW*fr=;^9Q;X;VmPoVcgJ7pfOuB;d3u)M1l;|D|4+7 z6i_C433L&#kIdVw(}q53SwT%l#Ew5XofrA%zXyp9#ZKOWIlfc2exIpcY+X-Ah06LC zwe{WnCtyu>te^Nr!!6LmK3#`XKg{_oRk?nGP){PTc)5MnMqZJB}6}b}Ob-|8H-}C>Og5 z8x@wIg3U*ao#xtA@{b7eeN|%^?Z-;*Tu?p)zcuCJ*tc+AUntPZ@g$?uR6bdyi14n& z^{BZ?X2U+{*i~HNCG`7LuKl2y1gP&o2Ok4SukXifqH)UR%*w|*{h#H2qDBsnKhH;F z@@P0Hh$UD&m1Mt70uzwX&t{Tt(z@U7iKx-X^Hds4fpp}wj*Kc-PM!*;|l3uPY zxf-8=%!Up=ycC{{cv$g3U@Kx%1CbhR!S_k5S(Hj+Nn)PwH3v*#?_T>$=D58HMwZyf zF&Z-XKb(R*&EQOEoDDblOo7v%R^TF#&yFc8O~&3KABIV)eR3Jr+K+6=`rj`zyq_it zUC0bZHT9D6M64LH!mt|{!uQMs2lkngtEzIu(e!+u1y+imi?^8(dVfTOE>}nHJ;t?5 z90H-KfQaen*O}T4k@c`WjhJNxvzE2u?>@|rKgBieq|bDP3FCxnC(*IkBITM2KQCmu z)Nn`=!j^ehdcMs1-BeEHS(~b&bBFwHoo%wir*Lf$8=Z1qFM_}+_Wbd^8b;s-lHRMcQTW~|A zFdfon_oRp+DoE??)Ev`rj#dVO27xK*anB`Vw*8M}O39lH(Q9y}10-`e?5vG(6-2+O z2w(q=`T!BrOSa%v2GV9)B%XIV1ey_$@AT5Z=--(3Yd!li^WPX&;NZyhRQ=%X4{LK> zYLxmam24;YW<`G-z1c_v8_*EP(@@aH$@(txq@Xrc%*JPsW}W2@&*98mIjqlZLE{B5 zU_$JNqA58+fh|gp9^&sbekV6Tb)BcEz%kJH4KCTl2C6CJcHhBiufKLRh_FcM0+6r$ z=w^%gpixrEVXtDH5__GKU7NZOt}Pd{;8(K4ib|m)MKJ0WmoW7j1}V4KGxnzRYc(xe zHXOhD;2SPofmZP)LW=G)|JWubB-^S_WKE}H56_KFfD~~%IqQ{86|i7i)`ykE6X?4V z7R)`&%H@8{AOtn^l*4yU=z=p!t26H|AT@1^2L#s%N)XIfDVXamP$A^R5XWgwpOi~+ z@v!MJejA3imKvj)4)zYbAKjp=Xk_VTRjCRKF;>CvX5){b9_4Ha@yJI@UoO(nMjO{F zok$xxAZ@Kn9A7`F(iSZv)cbg0iUh1o*w?H3D}WAcn<0kA7^Qj^1YUPUv|DJyGnd| zyp2WOpoNg~4j79p4u@T>)87bYg%4N+KD4}fvt$EttIJKCMl zliUzC6biAWu<@1pG6+OaT&kuN0TH+PHfbmG1+9a!N-Q3$?*$PjsO$WIP~OVrPN5%3 zQOehz_DrWXe!Lpk^<=|B{s7YTKD8=?(|sSD!r|7(hcvsHM1j~B#Jq%|D{sf~=Vn3K zRL+$(fusb$8|FqYM@h2wyzy@)B5GJb7vJ%2LcpC*wVEj9G5h;4!~{)>C6`!$)XbO^7r%YELJe#!@p z+hmu@?GHM5B7}*gV)n#eV`7}Eip;}#qxK7 zmMr;?^tYur0yHxAkerZ72gEZZ?wKIWjr&*;9-<;53ol%M(wE9A?t3&Vak#%BEtt zbv_o|4V4o=@v_(^^-DGQ!!*{oS}|hY#?iG7j4+LZxFc>FnOuAxCD2s3Hs@Rth%GY` zpzP{*&w&PZ98|3AX~?W0(!g=QyZ!38O>MeT62~^eH|C9QleE!XS%MK*ocq~wxcFU| z&SvyGn26GFYe&{2|L+ERpRGVPvtNxD2PWYC8NGXJc&Np_Ztd~lcm`7s+kQ|Yh1%+9tp6e00Sr9_i*v#yi| ze+SQ2;PHQWz_-=#$F|ya>!EXf54EK`dR8}>wXD@i#-lvG|9E38PUjSey_a3FULS;$8|ZR3e7I)_mAf0QTzN*s?`?*`gKJL&s1c! zt}Y^Xx|2e%`1#+XNEiXdgr12y)dmeRyc?cPzmQ~@kBftP+OC~Qb`)A@AlL+3Gap87 zSu?n+Ik&Lf&MSM`ttVlaV^*QX0s)4^GYk7i{XBF>)viehp%78~xFz6IkgS^ycYQ7_ zsEEO*C@_pd4QOo1oxCpLv#-^Tby=(09f9`rn^WN|)!5B=COKO%GSJ%SRb7^EZr)Jb zak?L)8$j!VA>{blS$uI}z3%=mG76TzI>Jt_I z&EE^3n4x;P#)X3@Yhary*^ZnWf%}Lfs!CjnWj;&wx#h`^y+3obx=^%cghUMN_29p4 zi#m&ODGr__DwSj*sqB_gaj$tF?d5JYx{kh-jo0h#EugXrS8U>!LF$U*EKQ)qvR$fm zEva$Eo!6A&VHY48zFcWOVw%fjV;o0>i2AFA7^K4{vh zxb=uWtI7*`0Ay>Ah-9VGvudM4n7Tgqg|+!4UW=`!EXpp?&#E1za2U4HEY{f1c0rQ2}C)F?2*kZZ)0vOQguu{2!6-41WD^%G#KrR`Wgt zMyG8rnM{k(y;UwUyD1ijQ!7p~`(yd*q8ggrqR)^{#>i5Aahw$5^*!V^ZBDJk)4(jA}YRNs9Gu2j|O`A*eVDs{q&X*8%nqln@ z6&fwz5DZ+xW_?-$vkUyH1Qzz#@m8x1AX`^Y_4%`*Qz;Xsa!J?QcCSN?xox(WQSvck zv0RCy89jm9KX4J06Rxv2Q-kEvgZdt`mL@Y9_&#qtW2O3cp$4HDw(=e%&o@EXqzkn; zShExmrm1Qa>38)k2}}bO5m5#*z5w^IZokyNn0ISL@F{&uRcXtJaldgZrtB+Mrfc@Q zTyclu-p3CX&Mlh~j`) z2d(EZY0*(<0oxIk8ncYmx|*H=bFJjsZgdji>=r=2Pq0Z{aIoGq2uk+O%qqwBW({+A z*_s2Z;PI}PN8rNm{xqYV0$Mp zGmiCp1y>73(t3HV4B-@q%DJachImsvw{`fS54KxjYrC5Q)8ZKLObR|7WVUdl0Q3|b3u2HN5enQ={85i8Qc@Q}i9 zuaGl^g=J!2$Sg+fOV#T3$gP1H_>7%WS#r!Oe)8{lxtx`Ew6=u$T28Ze8i++M7$Blln|lqB*BNbai01{dQJ`7#g@G-!y5#H~@Ur80T;YC8kQB}5(eoSk-QWEA|O z<@Mc$0%Ayg-lP*Cjz&=9blR{{{MwA(2`d+?WuZtsan;xmv7_1f0$?pKL3I!w0=}CG zNDso=YcUNxU#;*4Y;<|;vn>;S(yjfq(2ei;*w>827pIaoPC->d!}#GtZ~19*101TP zElP*awMr(sAug%EDw6Et9B=!0@IoC^O?%WG$DM3aU(5AnRG^uDI*(zPaG_jNh?uQw zv>bF1Ff{3+?wN<9fx#95y;YAv#?Vn3uhPYhdjdPcNKw9Po8@f>ljXz*l}>7I4%@@& zw)3EmYrH>@HK3{;#tcAb+VS0Xp7pAu#?$zn6#64G$pkbc%|RR(G>Bl%zxFOmCh^gCOw9wV zn<8})VcC5)n+raqzo>fhlbm`WjuzMYSLOlg;>(WiWCxx|IVqH6=tJs=}_Go z?q0VGVq7SwZO%YCIgtQuJN!F!;;2W2en8b7m}q6w_EE{Qnd~Io8aU-7WluQ4wL=v&X7@93Q^sjyVr+<3+>rhk-^JPF z3>CjO{4{A32XxO#m>CL+SkE1j=fWIxuKP<}ORo;5XFQ3{q1@pssn=w_F+SF2ryP zmU``dMccx3x&@>@kSezj#GxcHw7>M+;HK?3b|cxGt?9>?Rq!hGwez>a#MAh92OOr% zx@Bcn0000000E72s7xC~PhmOc4IA!$$XSHqbPYPTsirK@5FjDt8?4iRl3aK&skpZ9 z5NB;@EC5P_v^+L-s2o0st>KIpjZeI0c$Mubf`AdcyAF{qy?-W^cmVPK*Ybxk$Fy>u zGOQSgx4VGk#|U%5s`wND7Ug}0A{{c_g?E73VGHHuBVj`Wg%O1-7X@JYUZN-;lG;oI zY%Hl6JF>7tb)|==gC=jMeC(}Gd~kXP2ceAa=nH?68#XypE?q2%rT6~B*dvn{r3B)H zgrPaVUY?K&je{Js5`(X{ffNGAQgkMgm3lq9Cv{i3vSSNjeVV;iM zOFu#}UzGokF>lI){v#ysBXQ5&NAIUzO7-0s1JpP+NUwS!c${R8kj)83<4{oDOZqI| z5Sa}g^1@J&yRmct000qy(k-Ge(6PTxrnS?6)?Lls#wFngQ5^Q|KvPJ-@>ycw9op&h z87M9^^b^@vu2kv5LaL{pYYCs5`DA+8Fm7W0%)6HLn8mFaa;*L|dzB^8X zo9;iz00!1kBG9OLc^Uw4uro)cF6X~qJaC<4QJ{fzSx3xj!Diwkr$XpZW)lU#W%THt zMR|!pI)_-`x2yg0sV9us0&g8PmlJ0TqxI3KwM1Z`w+@aCn8IoJFJ1ruKWDr;3JKr5 z^Whqb8O|%k7`u%?P5a4p)CWgLv<+wvzM8f7jKSg%n*(SIBA%Flvg1PK{i_4|SPJ6y zy?u~HcMFkA`-3Q1SFHwum3K^bz1U#V_me;s*CO31D=t1ACr;$jw*p+ZNr0`P997DsX%k1APE zRlo{Tn`Qz(dVGGwEsay9f5$zL6eBJ$2AtPbIJyk%vV7y( zm6!>{{5q-eslu6^vOHgfIP_I8%onqj&~VUsVZ0^sCIX#R@F5Y_t49bN|d}A2*!spAZM4 zCQ??&CGF5H39GtZMG6u6e;K7H3QE-T+lL+}@+(Iv^;~RNvqabi08gu|THD-0of0EiYn*!WhfUnQx%>k&aGe35tgM zI2ZNk5m{juLzl{C58c^#$44jufW4&U>M5{W@=p7rtticsHgP4N${ki%_1 z-9`a@p6x7^_jAtP&CMN0g@kSIHd2D5TwryYe|yrs-D9g{Y2ji`7hJ@c&rjOjGFO}GpaTYzsLnlIP&(iTZmvb+pM~dX zXr8oE97=bSBMks91@1#Jb%pm2-e&OdoFpVzdvvTa+awUyCm{7u|o3uY6J>qcLWv!ewp5^I9eApbAv!KNcr5UU7h8sK23SM-!W#o~!$AN9v%1dojV1fO(R~IE>pC;3s{af^NE>yAi+; z2#<&|`gYi2)!RF(6&LRX68j~JkYEzth3|ej!R?xx@cV)YrzITSab+i22 zJ|Uj4h^0*{(iJ7{Tvdz6#%Fc$M;$9`b=ztj1?6u#MHJ+Gy_xkhUWfo5jBE^M{Dk=_ z{kYPcw_H^0GE0R?8bZZAvWjI8IOS9A;_4fw<9$jE#j3XjCURFU))HxO)9KfgdL0TW za7*c~OQ}OX2)Et3Y)?yi*LRp^gyX>bFMJru9cq#kTlmu>eB)X?$$l*7+~p#%axER% zy{c*rvzYog??^!}SEm&H%nFb<3C%WV8UjGX^!F2ewD&T&9VsP4XZMpo0h$4Dh zuyC0=g*il}(*QPAb3)E$hq^P{M=7wpE&{;WxQLn#ud|wUhJH*B%0kJQ)c7HyEu5V_ zEs_a!Q-O`w2?FAVW^nH1MUuuZL14T5#u{1kCotZ1>7wiCGD~T5-|T}bu!f~?Iz=SI zDrl{VP`*DX56-O>E-t(KnnIuA!eGf|XZ-eNC^5QJTeQH*9UI=zqH*=IYnTDb7;bCC zrv0&CGE&N0LJjvq!j<0~uzXXtt;_9HRMY2)W>;JxQecKvxVe!A5rkrpC8~Y2`v;SU zh`Q?;V+*F%~7wWde+#_m{i*t zv=6;QY)JG&~tv+ey>6U=n}db zGM><-e^kFr=@mhZYeXBBr98!&G0K}IxdA%}2NV7dP?VhyJUAQn=ZBgim)(+;>iik* zgEAHv{x(lUqdH~V6{1Q&7krRKj-s5XUe*gp>8n?ZdD)LZG^nFZLjEOyBBRfN_?0pJ zxB5T@g*Kbya(i7j%ck}3-oUkFgooA^6VxIQRo0c+*qTkC9X3Fl+zFZj;kcc@d)R_AJ(d@q9K~rz}0S32J%k5S}#gmBcAzb$j9d$ljaR-xOFrmv3R%=hxFLV~oEu zG8ZQ5J1~za!*CAaPLbqWGjNZ0jRZ=g-F%0P@Al z=dn5L9J-R77Nt9Xf8z|1^S<~NByAxt4^Bj#tG3^RCMxFw;uNB5r&T$cMkB+9*0%FM z1}mQJmEUg^@ZnY`F(xGShroteQ3fOk8#7_LYdrm2;feCGs@l5*dc0Ca28ou zf$tCCq|l?jD{wp`hQ#bixHUvD<_>X4JdEB1pXMJGLlxCw`ZhJU95!&)9e8wV9l}?f zZ)ENNN+D=upfx*DU{_Af-E|N)s)Z@D%GTv%3>JsE`TdL$n%Hv+yg^Koz&q(xi4d1? zGe>zkXwDf`ynfdB^{GDZxqkLs2mwk_b2i}K;~X*7wg32P*D?;LrIVkX8)C%cup{dS!rEFjj1!V6Uu}kr$t}IOpB}H^%WM>$Lrd9^IjYzBZU3mW&DKcIw z1pI<1{$95CaysHASRD(tqP3Myc6$MNQU2k!nahxNA`KNQR)12%fw80?HS+u-F07QS zy6O7WvcdC3Qxf!ID*Sb7wS=DXv(*I%CB*(|h}Sn7^fC8Xi?Suymcz-Tb2m47~Yc%e*BF(6ZJ22b-yrJwKb;i4c%`6Azu&*rqyqL3yTgC9+$weH0W_1 z^JmeKQmuP6svGxOGQnae2e4GI_7;FIF)F#X*g;Y*%(90fddU+1DcuH)>;W2z*$_vU zZv=7Lm0cG5a46LJjF9GW^+J#A-T!s@gtKLC?FV%{q#2e2t1(;55Uv8-~ zNd2?ARn=gkk#8+iX2cZZX#vG0L-tosKJ6nqlDZx&jT|%(bT_j1%V%A73r(ovR(Gfp zT!Vj7#StyEbYs3p7GjqaoW7}~MC@;}#Rgz^AczF8)AnlEKRZ`k;UG$}>-vICJ{8Rq z_T;P;v`+^GFmXU3t3%rW0)>A#c;NkH>3Nsk=vcKYk=I!79BZfR#W@GUvA4(;s=?~m zc>5n-cmk-Ov*znr7PpqswHP&Zg6Yuwcw^0`03h*&sWBv_4-$*Qx!`jV?LPhB%O6Cx zqMZ(I!}V@w$Mle0y^(gcF6Nnc;>o%q6LNf;Ya8WI^~&nlhh`Nc8s`bcE(46tzMr<* zV?Q``@S3Bpm~+}N8Nmv$$IfM?)evk%_ugo(5TcJbH)tO)mtQv68autf$DzSV6JEYE ztGh$?Z+eVEwSAJn1y#7Wq|F*ZSH5%4ue@#+ofv|~qV7@fw3tC8PM^Ltk5Cu5aXN^GIr`f#Ao7yp1o!=Kh>T2gGwv8-AmzGUIMF z>L1H%xRNQAL-!cjQI_uWFXY^l4zYy)BxA5r_?rABWz9$0XJnIJV0G$FK~}9o>O$O# zbxZ9dvSD9SVtHkt3xs=-U8RG*OINv5xf*)&JdrlrPUJE(zpg}`$X<0FmB{KVSc9yU zx9z8o{{^d6V0CsW|6V3Wu+VKJUPqiim>(ZVLgHR!X^L;o;oYK%Xvn8DHNaQ4p zch>o}2lwMNPXmkY8Y6!bmaq>;HV@|;`eUDCLq4R=85Q;wiyq5GD-ZJ5*A4-$BP6Vu z3t7wQ^X1omlF}_Pvh@Ak2EWVrz`mWtZAoE_xeKjCKaA_6=&u%T;!zdKSXa&Lpl#Go zr?zCE-{#7}@c$VjO1TNS_!(J>?vhG$(~WiiR@_z;ZiW(Wy!uEnT}Dhs1uCnyML6sg zEIyZ3@~1yopY<47yDF}B(`E6a-U8ReYy$RCxx9WP`{^aJlk_TG2?!kWrX?or8$05X zRKPu|Z!8_6%xwz}{anjku|At=Z^~4C+t1lhRuXmLS=7qdw09zD(9}-FIOXe>hYNpXqU}HveA!?JLC?=c2Y!dr# zW))w{Ah!0J2WP;xJ7w@au8*HukSYECfMk5UlDYC80ESV`@ej{CDw0My&Ib~Y`?9%f z&?&o$EMeDqoem?|s^t);9D561cW05J?LKdOZzim@@gJq(O-$?Zy*DE@Y%(+h?`~s8 zm5+INau!0sj|oKu`hPTF-25*RSUn>^JWuG0KkiE!|6jG%54!MQvsl9S*lD3_tov=W z8V$U7Zg+ZLMRcw=QQIEn<_c2g_2XQn5YatOL<1!>LQ3Q4CO;oOfoK`#>pMmfolcYw znhh9ya~++3^A>Stw`hLT$fnOSSFztRj2$dBlPvqqQo7|liWg89b^=}tgCroso7dxb zZTE@SQO3cVC*(=Uz71=X19%%JAhrNR7RBnxFkoGW3Qu=0ji##yMV!&DxZ;*RpinRC z^!_kkVzmH~Lz>MWn0+z2F^TB^i0D5Y^1asD*Lj(>zj)6oY|D=;rf^F6;uU^MB^3RI z4VD|ZYCI+n18>^z%DeFn5^^Lhd8PC>)iEI%y|$McuxQNqUaiR_H|fjbx848!Pj?|r zKLrf4%Y0Zi+c0BwkaRuIR36|K^W+i^^^uwY94}c(Qp@P_P|{Iz>uo2GGLruXKg@K2Z=?|?jqUg{7Ee6(vWx+oAm*y&TJrv^@Z38x;+}0EDO#IVfx6y&Vhcc9)Qj)$g zrm`16fdtF04VD^iam3v!R-mvK)Hu58qmR z-A-?|O~K+zvY`?!DlpJc;eY4_b8yc?Z%0o7Zc2`lEp2UU3f9^o+d=1!*lI_uyrUd_ zOvmB~3VjOlmGdv^(c~j^LO^32?v3!N?W^I#7qO>VgVfEo-GzpYp_Fwl*igab z43nLLs7@>cTxMfmJQ?GlrWKw4SDi^tnA9zpNpeVArX{TZ5bR(x|50+s?$@U!{j>I> zm=Kq>XOI>K!?Hx`^%7WbSOch8-7uUjJ7ozL+YwJ7F7_x??Aq7lI=Ar ztR$-_$~m+VV1|ruhyIQe{914Yp-=Z;s^`OO6jKt^capvjvjrFCLtx4~Hg-eT3C(pk z&m$NcyTQ+~YQv6Lfprt|A_q*|_ewR(cmL+pIo`ERHk>9<_zVcmHUy^s2UymajJFu> z3^zQ-k{VI9Cupae#tr?YAwBhypH|C%|KEY&>$xkIn=h-iI}p)fg{C`&GEoeuL{?oP1Kz!OidEH;giB_SV9%Dl1R zWk7RcjWZ~Yr`%%CQmHPZZ2XA7ob>3Jo6F7{NV48vyaX*+6;GwFh2 z&XvQoSre8sSR?OK)D_%VoIXW?-^O0LSw<&tfDUJZd%CiMy6FN^0l;c{cIUC7ycHC^ zYUgK^EOkdw3oIm@rDPq-d~S4lcpPgYgl>9SQMS2vCx8tki!QVU-6O*#f3Ij~ zHx29+l-M-WNTolFJ$M)hOFOI(i4m=7EhN+_Of*h5ouVF>*dm><-$5znqoJ}75PG8i zkWn^(Dru*|i&?A<&_$|CS`&z4KqgAHo$9|acm96{)V|zDBPwC z_onO?o_ty+^dM8{3Da|+nqDV?I8{Ej zFx9+}>tPqHxRes&Uf;>Bd4xH#q-|bUUQ~;ItO-Xq+`l{;O1wWZ1BF2y3As?U1wEZPJiw%!rtSRNK*0!zu2s z8060od(MnW|0Hex!N;t9-|qm?Q>ZlRrOBAZ0(bC&)~LIedl zWa`yCOQzgygnj5S_j%|5X>xSWh{)uDiLxt=L$LKbF${zNl~!Sz!G`I@8u zDSsM(zRthZ+BEGqaL_&eaN|-6>P(F+PplWN{vvGTvHj>sp z)0%%Y;|(v=vlApH7AR{XO?=a2BOp7YbTK`H;6rBIo8**;^N!YDD>snBfXc8VZP`F+ z5E<&wWwJ;D+@8M^Xuv{V0u7}bAR{5z0KQ=p;O5!)rvno?)u61hVgVts9k7(%g3!ZE zUiwccu8oQX$m3*0aIt@)=n54MB837M07!2ih1j;fa$J==hEfI6o z27#?Gl!%PMDPOovtQUCRqi-R{u%&IHvKF;xy$OPkCE!Q7q#pxEL>1`J)=%fQ*V8mT z*m)G;a-S4C@Mee4cIgaC*bOa_u}m@%ugDYEvRY$=5qgNl1{U6f^n45FHUUH(YN;wE zDIVJa0)K?D-mICnd3LYDsafh6n*(V)V%K>8tV9XqAjR9PU=L$QE-iFtMRlfaMGzSd z2IsA@=}9;yxTjv>y%+=97{n2wpVNnf*1Eimz4qDdaMDInOLSk8(kuv*LJWq^ym%(? z&du)RU1HGS0YP3T(If5aRfBwPRh4NI(xOe5)RArKzt)=Oaonh}i!oX)SAN#eTWcZH_( zR2Nn_h%dF>0UW9&c;)OtEftey?BxI|8Kr{b z^Ja1;eidGC*Uf|54!}Y{|8VNy`Dg#D@y$Ynb29dtL3$o+#KT+=;frj0Esj<*V%?oF z2*E#;w(4=dvk;Su@@{PMg*nuEf8^>=F*v^vcodDDUAXv1$x{p*{MD{FfHUKuIH_mq z!$b!NYB5_hqPXR|jr87blrHIKdBRST-E__*hMyB>?VQL>Q^6*6jvv&&C!MZAvpJjd zv@I}QsYi7UOT^b?<(jHnQwos`lc!5Jt_4=e;M9YqzO<(hq+=F0r+nX`0dVKtM@z%+ z&--A(1S(qpe|PU*)#+msz%L4*NG{Vuw^I+Z|h3j@|l`hdg{T8*oj z(jdEhpm07f*#3l}Vt#M1B-|KGP`X}{VRJY&s>VS&gh4mUsIt4k&(8(SmH6S2GItnk z{rvproM9do`IT;p{A68b87Ln8m!+m(9P;=EeVS37$V<#f-+yG$54P(PyraCOiy9IB{{(%`KR}tyF8c|z_$GFu^gGy$848cITzFH}e2R@*zL^Os}e*88$cGr_RMJ}8x zaM-2eR-_@QV3r(f#S@N-4?zHO0&Zgmq#e;dM~7Uc@dCOtZEWz^=W|lrfBqHcew?|- zC6wqg?He|Tf`ko)RCF9&$%cd3tq%Z~sXJi+am9aU%0Fo!L z)KWG)D_wh1)*vvzosrAG?W?*AYDPPgOuO5P&F52*20aGNNsQkv_=j3pu*;Vag0S^u z!hyj7tuICa-{*J2wxt2c8w28Pu7_owRQB1Qq64Ou6te@USdfof2Rmh z5k&e6aztH=}_gkEh&;{Ng(*7=ffGq4b(J^|0v&uUa&th^vY?OEGXM2)~ zps$CnR!C5spHqSUVI}`d+c?5_=SWjESyCy%|w#Qjyetq@uGz~1z(vWN+Q>5nz zbP!mgN($}CurIa(6is#c&QG@bvCk>!JS)$GU<~{NB?t6nG==NM(p~y~Ldrf6Wpu_! z$8r>`7iPQ$NLRK&U{(u209W0J<^l=e=Yb+RSubiKaM+*!@eX#U`iK_M00006VnWBT zL`Gj#vJmw>9iza$0kP8E3_jB>blVUMj2BMz%kQvmQH&~yq+()%9R2^_0cV41d3&8o|b?_u`h#Q_+eJcwam@5BwR_jXkCDQ>tnuW~km~QDr)WZ8@SRHra>+2BA z`}>tj$mPK_Kh_L=c2Gq5a}TmB>h)$q8{D&VHwAtxv!%Ln@^|SxpXmmHor8%$of$M` zkVpGsuk6hZcyygeuk{*ck(5Qfg0t=I7AZcn;Ht%!{J;T2=;v)}=mnZEZP~!J@Du-% zV~KX}!t&WGpS$ZsO*(ywK);wJEI>e{i&`*)sy_v|-J^Y`LfBNw2uLA}NTl&w;u^sZ zw93eM4dOKXi7hBH(1Ck==;V>fcEV~4(WEWQ-}g`{3_tlT!ik(Ym1nOL+4&pC(ho{f z&JzwO)}YYrIrkpYmCV*Wroj&Xy z4Zhl7gw0(SA{!Lt;Y5`xewA@xn$FIgmCrPQj<+YZPya~zIB&IcjZ-$9TT8RzwyW|6NlobN$(C$EkMLi2~~Zg;l& zI~mpR|3lb*#I40dbR6qIl;xL(#5^9@(}zRBX->5lb-BSPuEGFX^pCdj<07&%=rb2Mt6}JoT*FzMB(6^LijlCQgj(? z<%w>chUZ^b)YB7n0a>|xecp&sB?e=PFKYU5TH^@zC?iXRJ8Bei18t;LX;%Bb6xZMe zP9yuC40YIP-bDpq%OYBKhTGpX3Q)CmK8LZortp_P?%P*bHq95hpWqk6{0EZA~Qs1z8GqL(K4x@j2shP*Uyp#2LA>FjYur^Wor z=dbO)`;5vqar&^Udd%CE_32ap^v1@pcEtF8uw^W>m|r1#^459dc$$qTwB-3~t%iRA z$!?r5P6k;G<2Hj7IIR;NV`(`m83gnBD`CKmqm>T>Pa>@cD23&y7p=*_K z@eAnT^3wByX@06FM%sFNYziARuAfU>n|Ba3X}0Qbz);b*AWYId;{3qS=dgGTRTKXu zRAPBVH`!GwG zekC}Bz5D(6@?_8`TMb>+u{(6*2i^0$FpwbnIn}Pf;m`N>p>1^eNVvSZjww5$&)X$~ zPzrVMUZFHQ+pzY;G{f#ou!-h)n{as0b377|hB4UsO z0?{Q$_ieinI#9Jc?mUQ0s+_SrV`15#RkaX)&VuGS{({S$0av)V>|2=V*gxfvlE2 zF9qEW+T^kBh4%VO9^&x&JMsIB$VXYcZ$J^P|M)@Zj=x|^^BQotU~}f(Z_0hvFn2fQ z)DAq5iS+v#yU$GZaggK8IbR=7aQ=GkQqC5DM36O0xfP0*Mpk?Ln#5k5{AM-38glS3 zxQ+B}7u49N7rM;(g^R()a|Di_nhY_$e;gMpeshqLhmg>cL>vGr0C{ePtr zwy%^;6Z}*S$Y(7J$@VwqI8atWZ&=8t z4yelRfe51u1g0U;@^Mlk--DGqmo?svA5FL9(JPNC9U4{200Ukoueme;;Ezp+49?Ow z_kS{e}Q%UOW0=JNa(=-ASrKS>XR0+R?+4orl1)GRpAaJsxrx6kcNT!JLb_R$M;5RxF5uqSxwz&~<7*$2^>lmvI&EjBW@}EHxFL~P z9sMCnncK~Hf$It$Av$V#IAL^H7W`Zd)q+Q=*@`rfk2wAUV=ftd+FeGK!o#{>1L+mQY! z=?be~?_;r(Ge^xB`&Lh~zpLB=#ttud=Q=9Ni4hKuwbuTOibvm|Jw)I(ZRSIVGYOlB z8g(bRlOiPJbF^s^^K;C@*iViW z2V)!;5@93zv|Ka}Gbsxmho%>IpUMQI(uSw5tAV#lJmRLwf+D}&{7dq9(e3Bctbzi+#46Q-ULJ5|yT?8)Nk9q2 z5$PMTt2&c~nEtrl=A85BUvd9cra~-vZ2&#=2}!Q~DU|@+t&`%p1`~X;pW&uO(l@F` zb6?8E9seT6HR&xuAuq&Mh3zglAejmlnyV1Fo623NOvYCKsRU6KsjIBG=5Xd_j1@V zZiG_*JP1ow*Q~Wo3W}Ar^}ST#$#T+^#YOi-lm^|=Asj$Q^#tez0(XTSjiYX=6B36S zJ4-LPfM8C@^chW(LtPH9(+CW5z78Y8C;MF_k0D+hbAti{>GWs4o5^KC(Z9|Oz}wEG ze5!fZ7Trm?>pEWjm#ZyIM9`VFAodbxYKD-GR$hDRb`MG9j47QDDwg*#N)cMf1ExfY z`)_6joVuGyc9ITEQTEwNMOTo#l_cSgmV9@iON@SP1-Bh$yGR-(3pC)u%f_Sj*J5(j zwCc>a*7lzCR@S?nf!VJgGbYq3P=kk{;_9Cqh7MwCLHXa0os|dLa3}oAwVPb%bbm~r zy;4@ZY!}!t1b|-rDJYGdF>e8^o2_ zoPeH2PKVFzplD)lJWCi@K2{E@IAmc6E|APuw=SvZo z3+K?2k4dWhfVvAnMaO;d(2Co_*>);_h)%*ejA3L0-vZk<4;d02>0Kb~HQ{-omLSB?S0-Oby#Q%zx~ z1M>`ci6xJU{uq%;eVxP*3iRFS+R>Pg%#p2~@Yc2tdZw?vAr0(n@EZZq zCWI7=;v3V&9_X)MNy(KbJm9Dgf{99I8G2{J0W&LvJGUn-YjK7^>vQ&5Hqwer%u_aM z4<^^kp8Hh+zaWrxCGH69uFJw4oFU|A@>$Ygj74eJM9G3cKk8h9N^=Sulr!40933m6 zy$r5KXl8aq61qy>q`st3IZ29$@`V^RD-+sJk**;#957b6Ab{;=jt?%QJx165MaJ|3 z;2gX?A%5MXI)0!5S^uY|0e6;wySSv?1LKY`tqt+DLjQ;Qh=ZevkArE>V+A$w zwum;@(D8ak;*0ksCU=Xz$jcSd2qP#+Qo9uTe!pEVxW_4;=-l+pt^Jt%*6#HIgci;U zR4FE`<(GcBU}M`ljZyaqkPX;Ai7LuqZ<^gf_P>loMz&z4D^jkYLx`4&Qtx36de20) zt7={sDt$IRgJ`bo28QqqUC#NS*sM-p@E&ov0pM9+i-^pi_aZ-Z8XSUu(9YhJ)8^p2 zur$`kcvB;FEhpXXLaBd(uD}qg?|Wr9x@$`I)DQXe5GXt@B?sFu-SoqA(=O(O#wT9& z7@jN71RsnVX2?d&<&$)3Pu@A&d#vm=Sj<^K`+na*ItC@aIe{FXem)|4?0L)C#N$o8 zEd!n5pu`SflU7$L=(5^vas%F(A#5c0sfi&>X2p`*DK)8<5VEs^)|F_j%?4gr&2M@# z(yDOtQoyry=kfMpGAhZ~Ugk3{*HBxgbx!9A&)614;*K^n6mpz@p9@br_V}7zujfW1CKJh?zXgVNbwp@S1>Dwd>;LAjCZ(4fV z4R(6ir{&zdA_mK9_&3(|!ZPsY zZ;@l`b5w7Ab6f-V&cl+~QrM*H#v90crqv-HT%gDk3cWXUg6!z_#KI*G*uPN*`zuI`xu3do~ zWq*aIUVPO+;N~;stj#*Ehu?DKms@7h>lJs{5v8Grmq{2QX#{ez5(6|U!|Zl}GOU0w z&HU@impmAeFExxoJ+V>y@;xB1jWA`1Bbhtw{E8TDc8@v>JrP3R<)>puCV^E zzoChWNBif;&_3)LbxVw1e_6d2^mie6)XsGuS3^KD0-rpYZRpr2V17V{(g)Eg$2kvS z(J95LoUosi&03W)P41!`ZeURN0RRq6qBS)riy_gA7s_Fz&@{5wS z&ECNbX!^7>#{SER`oR|ZOUm0k>Dlmw-HJhrLK`0{Zi)PBiQcT{AgK8w}hlecggl>BcEWL4Rq zMvIFR51QIxrhxOpxhAudoo)6!fi`0^h8u-O4~;!*XNw*gK-{QiJI5Dq35qcVydb=9u0Fye$UmCW;!Xy?g9Rg z0~80+&Q~)#8dP_LJYZ7Nxdwo>nX`K8AS*Dk9QW7&360ARTlj(y*Z=?k0000000000 z00000001!EUoM{_Lie^S8h$KhRd&|+BGZ{CXIUl`{b{zYA7uiDXiMFpY_`)oP><|2 zGK9IXGGIEwhS~_ywSo*vPT6}wg-br5iA)HN_Z4~X$7UWX!R$^a?8&s)#K+-9FXTp~ ztT-NGh_V2$Iov$4xW{(9OQP0bH6=6Tbr_wn@89(m=k6}wIY|UHNA9SRKm&D1fsQ?NI=)1=#Z9=7CZ zU5YG^vmen5wZF?u6+JN2HHET#xUO{ zy6m^qI5m3?zJ<(o%M6t@%Z4(LBn<^tx{r;rA;;O2(7pm>R}QSH;Ls6WY4J*is}(uS z#3gBe*L}s$d;s!+T|(tyK#?3;~{2vGx=A4eA4<8S5H;nW zXC2;6$?N3jk0iDqjg8=GRGzN=PEwz&p`Nta=iuEa*ZdOJl2&XyfoT@+4vyvtv8;ZV zaO21Z^fhvTXV?p9&M3^fD@3TeKH1^}G>nb2miaH7`w-Q~f!(QmUCgquk|Rk3@*(Qo zksEERi^jwx`67Fh+e@4Rui@w&K{bXlj%y2*0IT(-3OEaoP#4BYq8V-{sjTx-WsTY2 zEK$bHFhC5|uX0R;DsXo6#jM_x3QPO1_U!qpY=w7Di3x@#^4(d&I7N-{%kUYzYvd7^ zrq^!KW*auX5g|Ho)Zw1tOttas*n5rkYVE`Q^_Oq<%R6N~L9yDYz=*4DYRX}a55=?{ z8I5oi{=g`v!3OP97z~meS%QtG(JL4mzmALqTsS$Np~8KdqkoRvDX}T?!M=kVjl)5R zEV=MCm#lrZJAdB_JrQZf2tO#aNe0LFDK}NwS1;=~Qt6}x&#s@~KM+la^~5%Wa0G@^ zwn+9UCh8>Ru|&F>fk-)f-aTld!GJWf>j2u*R1^UEZGWaUKaqj`tUdfUfC+Olt#yPl z-YJ|t6L=H2KjXP`qcxLV4MXZT|AI22SA=CzaZ3FZIKj4mT;9Py;9QfS4fb-H(Jj({ z0EQks1Mo14!ibeAzw?~{Fy}K02Ex~HY$?Rzm$(%1I4=%@)etN%!Et`JRtF|fr{RWA zBw_yz=|>1wmg6C1#U3*EOQI_8cai`Stv!pUr9{8+JGqi9$pT?P>^?JDLHvoo`MQ7&sA$=l(;C=KZX}fpvY1~O##`5wmw9sRCuORiXS#|?VI0s=1{d5`KSO!EtNh6YgAblBh zC&JAF-C0&5T>H%}*jJoyPGWGL7d|kch#|8C*h|%M))zP+`QT01UQ&p{X5u9L-o4>x zVtD2|9C*q8At&SMmN=Seh}2A%r=Q`#e6D-X*T4(qo`Hu=)>Z~^UGEJ_4@AEXL}Rk~ zA}Y#PJk_|3(eUYZBV}Xx9f%P()=l-PDXTa|NLuaBLyauL)&rX;MUVhF(XqrH6h_}v ziMxI@nPj}Gl(v4w?zr6Sb}9{;kszkrU}JmA>GXYEouY)PJFQ)uMq&I-`!}Eqe#eSX z!gYTJ@Ma}*^D>Hu!|{dOfPCEs6LAG@AGYA@9??`g=@j%8i`>DiYbH%7Gu(<$+RA^84by+c zy!?v`)jHT#KVHPq7^Aq25+|sU>{$KosZ;-bNOu8`NyQ1DJI}}NkSGt62kyyHlz|%< z;(Lqa7-1Xa;o#tk72E3l|4nh?Z}Q0Eqr2`)N22odeH zmd1L`;&evbh71pKP9>bkp%q8-B=Y6YG36@BvpKr&E0uPci3}2UVt@IB5I#9^9&#HBL!$vs`*9TcA{#G(d+;J7Qxk16&ixO z^qhfv=K47=q2H#oYGQ``_JssRJ6{@ItyNhGpAZlQ@LAgKx$?(}Lmnh-p55hv*Kx0s z7_gP=U@;?z`OYrzxKal%+-D@e*Bt!d z*HcjXBX=n%vGv$TG`JPTitI)GJ({2)#W!;FOf1IcEftW$zN%kSaWjT&%y`%7a4(`& zL|Sn=82#FF=lNZfku%<0MthiDCdsxNK92Q~Am(6~4k#FdDRh{(i>(srBaIMt_Bh;c z4r`mWzQq^+M8;pm05z}*_y4h3q^!VEDo!%-RrNlh2D1Vu0@wS%$$5cal10dQErMda zfEEAKCqRb%fTwJ~sYv#(7cpCw67{B_#}*1^XD30urWf)z|1iA}wP$H|5jwbt_Spgd ziLG@O-Mk^bcDBt(vFkH3%?V2dIH#_myLNM2*Yf#*IG?wGV7a=^{((>W?8auSH;?1R zg_vKSB+h_bWg~>l00A$&>Cx3@VE_OC0000000000005vGbD@OseyGQviB5Vx>vW9L zLyxhnyn80&!I$jkHKAW;WDAggfi`B1ZeWsNk>bjz>*}=T5buE|gHI;)ZL(%xjvr{4 z<$0gCWh!uvE?L)vG=qxtA^Ts?AW@pcb(aYB#6ho$?ChPEyU;YEc==YWk?*ls$O}FIqIWt}GQfO=5o>Vs zY*wG)cr>ZHhG(=iSV_th{_YK1NqBf*((~PIysbH-2l46??k%v#6AfYuRj9KkVf*rE z{k4foH|`~zDDQj_8tfL8)*nq5){BPG=e4)F6x_oww6_^%4wwl#-aIXdNcvrW8dGQ{ zf|H_IXy{Wwed$+F7fy`bSdv2Lg}Wqu>je@3oVrKFjH8ks0K8hAK=uAOOmyWR8Dc== zZ3vwPgH#9Urhi+pw<2zt+-D$UP63Kf$hNPy475|%FH9_=2ME6dO*&)vIxet>OI!gxy*?8S+ z)9YrIZ{*c1X8z_M9ho%OZ!0Lqh2|f37FA0QzDsa8<7!MuTtptIT;UN<^X5D{_^4Z! z_r-L=CMy%GXcsF>j0NnGX%k`WB+IC|7e!e%B~`2szAl-!ezMOlU(UZbFjQ#eEVCJ&TSP$t}j~0)ruM;)1phot{JcM z)xWHGvVCK+h5pni;WR=(^J033`&k`#dE2*&)!Q!(U2o$^S-qS8_|(zDK)+R(QeO+A zwWss-l0v1WLSFml=6l#5Ar{wayi~ac%U(@2oG&qZn=>)A79gqLat!pk&i9C5U1-wj zyAc(StrHPG)KAk#oPDQ?tconG7%=9!`xdd}1F=Z>8^pSE`YfljQLoZ{8|nh^0@mTDM89iJ(~ibb+j z6azsI5BEyIkLIsnMPLLTTP(TM%7!^=0-uu{!*DJU(nkgP5YuNLoZ;k42mDu+*vK@O z+)9bAg~`coFP`nV85Ha2KwD{dVjYazxUJ3;*shvw-`7qI+tEh9BjdED>*G+y-E;6|u0m%C%5)PK@Owkt!;6lq z1B(wc2!r;n1UZIN)_dJyu9MDC>;ll>n%M_aEvtfD&K_NtWgFg@W`koRbxt(L5-#AI z#V*e6!EdX%X*^_284Rlts|v+f39?2fya+xZz_L0Bkjy)yDu&oOGM`<%j4!7#wpyzv z@rn6exW}0tQCkTVpROLvtAE^|9BEZp91_5lw3@ob)^N|<7&I)6e=F3oyf}uI1q#Bo zVyubM2Tpe|!YyXivthl@F!EihjlM6rOOJDz2Rr$a5uDzV0Nw+?4bwDZ`fsWQa^Db` z_8CJhx548kfz)m#2>I3e&C$VC=Dq-tluIY#T|n&|=M=e8E1n?TCH<*GBQ_^5395Q= zkOo$nTYqCkP!eIW1VO5Hk^+FOP&?;NIn&vAuA%E!%|h{g5K;B+=BrqotOsGHDy4Jb z{7OkcH&5n1YvVsKde+gAR7oJ`DV-C`a=9~h2SY}69Q43fUq8}* z5V}Ai*fUk{@4&yAZ2QWTJ{1qpWsO?Q=S5g{Vv~zbpB?#Km}9o^2V}@$i5m?XRaT_^ z17zP-yrjfB6(Uf@P&l|?_23fAO({F(RzDWAK5d(?AL(J~Urxz2UjU=ae2_ZsW;UZ` zK8$I+RRWIEUxkjW++A2;Hnrw=C;{TCtl2+w52JDMcx&%AJ*v#Q6T zhjC#y>womxt6CHkx?UlXhBB+n>OFpF$>*&NPE=2qgL!QqqG13$Wudmw&O{60VLUyl z3nz08&ii=Y$GMLfMQUk}wYnTiccso*6+U)(J&h}-K%T$EZw>!5J5vCx@x8EH9zUes zQ%1y!Wd(*n`JRNMt8@ z{;Im7>sLTi_X8PM4VJh&Gb{c{<*2Zr;SzON@F35u{v`=E>YPJ(s?UDO|6}cVm?a)p zicbxH_V%dHNl}6^*&{1r+8&S@jT1deGRaCi)28Z#3`${=Ia+$_8)9L7(wWln&}sq$ zgkqAL6brRVScoCCo}59wrk;{1+yN8JPn3exA?)sqdlco_nzxwuPDV(l=)G#CPe_)Tt zd>}!#eB`*m4elPn&Lfc)BDu)eP*D{zOTV$QeXGabx@%>t}MujIN_Fp zDpD@lezHm!4Nw<28iT^odz2R5^2uKXE-k9Gng>-EbZx_2%k()?XkE~VceVNrLZf}3 zzEqc(5V@{En8~5}9XA_wKhOi6V^K_Ybwx;_>+s=qS49+mPqt56@tDjLx~J8RB1_H0 ztsI=((Tu54237`r!q6ix8ndKnVptHihhaxpswm!5j9dz&6&5BP{!srdk*E#D+SJTf z+E93fQE{6$&OT+W~i@BL{1iZs`~T zVYxR_xLI2-5z%$*cZJHaE2z>BFDy!Jy^DxY+K70oJK&z)#x`#S5g&s*{5h0!uyg2E z|6d>h4^jb(n#KuT2&M*L0wC3Fxs*dKR_li8iN6SQr0Ct0(irwP@CGssvFn)n;DJOB zuTR9e|Jy%#$PA}=kBnRxY8fpMX6=<%(=zeeHp`!Dj!Pxj%RDR%YL~BdY}WyZ!+zmL ziW8PXX~jg?{ZW?NT!%G%t#_i2LU;veYpf?01gius*CgCg-C1C&26D_Nm%1;82guVG zW(Tt4p?*+zp3m$5EgBI?4_B{pT5G zjL;6*?1Jo&%}1G}LS$hD|82u=z=SjM&}A!NOsTOI_)qV}^hDsntazWFU>$R>W(D5a zXLjTJa{D8n5K_FtoapEhPs9d08)`S&W+30$8@EuKbHf?$S&Z^uwl^ixd7|jA1ubw~ zdOxSWZ??(raKzXLEx`@K&kf8nYmDDL)$ZgG{luAiW(k8r-lzLqX@B}S6u!|ARj2#X z=|QKb!8bp)kAYuL^-O9x{CJAZ1mpN17@%;uB6{D-*d7q?!gq&!ibmm2{$VXX!lGgl z{;gOCU#umVifDIUzUdjze-@1~6Vxg_Yj#>$QDO7A8+(Iz!>rIptT4(y`?S+;40LGR zR+s@7AE8HCUtC}3AzV5yqNnvY!q77sWq>Z}8de@Yb3%i4N^wv{6(jY&SBx&e(z^@Y zgm)B(>`O!jRjqcYsPQr#jb%;{sBJRe;#dKN-@4=l5)>nmd!JMI3q!GHe&|1fz64gH zb)JM1B^RLDuj+lokV@=ngPo`(;P|m3;{D9VHUXT=`zLYZ4BHsT)~OLSW{Qbrw>AgV z!z5dmVsbZAVuAnv7^`uJDj9=u!-Ei^+Ain>#Z_Q|noLc%*imDwA=sdj0ebzd{e4N$ z5dg4N7l1`v3K>dti-b-`C&`M-6#Xw<4SV(9>Iizv>y9V_B<_W5&SMKDGsyz(#i0lzwrv@6*=^^wQzV1Vy7$d-oX&oiBo*OO z5GWBV`5w+h1gHJBP5%7HL-Dnw(%*8N0W)d@5O250KkiV+ZO0Sp%69@v zd?~Q1u3>D6@F^U?8&R!7Q5wM0U2PEvVImwsED*|5Kq+8roji$9@`Glb`4gMszvxkt z*A=I5xuZ4EUg6r5(LZ18g!*joL zv_lNSi9Slvz6F218`cU-s+tD>LW}$LbmL%QI-ixZqB}Ih&!-MhWo?XB~atp9)fTJx(Bx5sW zueQ>OxTiyC-q8B|l9o$k?v4`ekWfPfKmLID=)xKEQ#8CdC|;}0U^3fus)VTtLq%fS zy*o>$FjdRkJlnlHOQjB?(OOsowbRS6e>;w3ct*W!7riNe?64NTGrSHW{Pe8=fwE|; z`8VJe#)`d8>FEh`8{b2qs|_z@?jCL4$#?sjdoS3I%ue8PH!WTm)ULq#qcrG}U_Zk$76DKnf0q4trh0~ApOHA4nl$`k zICEv!F9wnd#fUTq`4$zyQkYgz#1bw$z2V;lg-8SRqLylt2F5#C=)MAc1S4O;pRP`5 zzXBi)!a3gT)*(fGV%P;e!uQK8j0?061VAhDKJFdsQV?F!_| zUnKFF$zT53A-b(iQ|cw6PzMmvLojZbt^vp-Gg>o}lMfyxTohm3EBdQ-tC+sSlq{o* zxL7&jiqe!ai==FP1Pa))@%DX3{YrkZXso4>*fj8iE4X_<6)$~$;k!0y%WsyiAARuH z2ndcv>>;=>VqnVu1Wc2VQ{oiySb3tSxm{ZP&;kz4gO2Cg2TH_u zd}F1TXhCTBH?7P_7A39Fz36V7?I4Q7#QYwN(%>1Od!=XawPuwBkklKZo-fOJPID49 z{GjeW*@uBffTZ>-EP~U1R}|+RY*?FJ)iysA_KTP#58PLXpMuKRIwvTX(Y%jz6! zGtuGn1aHQQgi(6w+hQedk-JqHu>0L)_t^$ajAViE+R7cB4Jn!wTl>25N(xbs7iiP< zEl-$+tCpGwD}w32G_D1GRvkmvl0-UhtaUct{2l$oS0NaGC*mC30beI+NtH<`gb*C= z4cyKIeL94~zh(*76pY?(pRd+r-jA3JupObc1>*D_(|YcfnS_o=e6z%Uz8$8HXvC&C z^ZB_N199WsA?D#QJ;Uo2Y!;yUDP;>xQ==dV&MYwH~=ri8J zS|C|FC&%t7)^bVE9ef=zUaNdp?3Wrb#$;^Pxu{Dk$?T}pe)l&jF*g2&B^0kg%bh^e zAUy5QJfX{iY|2WFc(ppNZ9L#(FeT4Ka=^$5Rx>jIl)eQ8tY$qaJxUe_2SZ4zg5RkQ zNgRTQVt80Wi$`AA%+eb7U-jW^&xVAJ=tw2wA4IADVzd4_8;9L@4fp>5OmXRLZ)vx_ z#WpTz!2XFW))8Iq=b2%&#L;ujij;fc5Gr5l#@?%443OTHUFxfL!-x;1XPsg&Vdj(D z-AXB5mqe1X?`4Cf41#)05@`kamuKI?p1~z{E+~&~7TqE1KV{Na;ld;Xy()ri&6n%P zXkZf_WD>Y0@G^!U@>~b6$ z{xaf^Z(gqEu$XiVYyK^T^F-l+O1d4^<6QVFXb&>Wmn)oZBX=kQv!#LC&PLixWFns@ zUplV-(JoSVv9V-uYsrhh%+g$Nxts<&3)ZpqVoBiOW&s6SH9Oxou!3jp@}Xa4v6=Hd zo;}SnX}3*;F~-Z$YH@kPP!`pc8t?SVAE!a9I?~tagA(e`RxC{=k45mI?nYzGXgb8+ zpe)Sc9TWRr4(=<>!J(t3b1H@`b!sHoyg$00f?L6(ALjKb8ErK26tfLS>l4r$sF9z* z!whxeqC^{R=@0if3>i?O@m>qkwe~opo2}Djg{PwbcszF=HA}aUh=mQB^@`@9FtLz` zLz{=$eRz@VS%qNISLVJbayS=qpe{w#A?rEZ#yD?nB1bdi6S`wWr&AwzQ7o^PVl^4Z zscfM>2Gh9yzcO1rDi}y#a0t|gUfI(;k0O`(xuf$;vSeZCjs|~V&lo``>2uf-VYI7v z#Jv6+8K!uofy0{ID$O!QAW$#bY}8OU3+WlKJfCos+W|DBqg&|SF+x=ZlyCpVfVB%Q zu=shD#X)5p1nO2dT>1}~Y z1KmAIj8c;g+7ONrpgEIHU&Z|JP1&Vn^`21xlcNdP^TVBVy|??-X1r14amEw1RB}#d zh=+rz^7zv*Z2v4GPz45pm??_0f$W^_{x>seaH_8wbQKC;RBCcl)(JI2Gf4DaaQv%E zxi3y+&yuzrcn{X82p<@kEjmJ3cL_m}(FE(F;x{18EE)_fD!t9+et-);pW;FU0pQXD zDj`_eP7PhK-w=;k+5D^(TEAmT2t-~p&Eu300d~Sxj4XVoq(YACdt-@o`PqEZ)KPLE zc%~l+t-*;NBQu@Kr85TJzSd5ue7BhOY)I@s9wYM05MMX8^m2Pzf2@qa>SphgmDmyi zhN1w9dI8@p{Dy1EJgAWd+qy&j&H|k88*8E4B{e!}7$t^7Njy4{!k%^wn67c+Awb?4 zmaO2jAoNlxm$w|j84hR0qAs5J@h4)B?T_Az>oiXXGTTDOm~xoF6K;A5~lQ-Ns?zGYL>o8eer);x_u( zN3Nyx*d42)_vRh?2ajs{n&FD-4lSiQK{m}B1Fg^zM9%Q#PbV5?dfuW!qG0o0D#uyT z^_T&k!{`8LLnI5cl$Xm`Conk=kMDG?YajYF&UK*L?bcF``vg|YsvUNRH^TAZa91^X zT=vtSE9!omA=z9Pko@vKpBabMQcJ$<5sWgszpxMry9a*)8H9pUY8Wgvu+JINy4 zJp6juogud+!&R83=x>>fF{dA8c&m5DcN-W_w_5~hD-QubD z@UqSPOE-VBWQ3TMK5v%!Hoqg5)CiLZ_xigaf2fFv;iP;0;>)Fc%!XJI2dmMXPn|W1 z8u(I{CZYHb5Iyx5QN(Vu;^<|t0;+OR;lFoUu{Xv}2=CqG45_)ydaY~Z|G>Y@_;(87 z(mIEiUck;5V&_UOyNfZ61V0`QZ}uP~Bt7XlZT3jn7ala8Xbo5ir{bXSU6Z3tx3nu5 z`Adfw6W`p)OPW&AkIc>}R8p*oTM=YNN?%!Ek&?v3G0aXOisLL2GJyVU{X+aum+A*; z_Ct7d296UVNZdHnNqTDYi>~FP%_yH+L86<=#?D<_1_mOk3C1~N=Kw4^;+bMTBl!wS zVjN*Ck_~0ka+JKY{5cs9|G}c)totSissI2000B;8_OIeJ1e}W9 zon(Oc8{-?Nr-tBvi@%~ZtZ;#aX%&F-G$eJ<_m zNIo}HE|HrRxGZm5C=y*>)xYq`6bX`D9_9F3;GWK(()#4{C z*)PBa7MW~cAtRZ;sn=?#y=r(L0=UVO+Pjswob<>vGRK!E=VaMKcwg-m+EYo7=tKaYScY?hSl(LzIqPIhO!(XP#l-xp9{^$w zq)+>0aL1%5zd+UQyk@dk{Q7cxv+XYOY4tNd5hSBr0ClLbCh`ZKHgV(DWDC4b4$cVs zfxH88#bJ16e+?(Deo9mmeul1G<6%S~6S^2Qw}Fcz8lS=ooybJl#F7ulD@03k6Hd^4 z<7EH#76EK8nT0^XCZ-dPCn=1f0sORUaw>bY-+ORG8TB*|r>+6)1zkDZqgiE@46?b_ zAz%XrXqDoa?({Fk@b7kGAibYK!WBR^P(Wp0e znI5AV;*mQe`FJ6g*OECSN>cjX>_hc**qH9%7_%>0Y{LxiRi`m57BOrL4Ae zlR)G)1=-^>feEWb#I52B`3cE`dak1XRyC*& zE4K*lIAZ_jLvmn9ykHapboTsh2qco{8dgcb9erj1cui~$&houzk*l>raJ3B&39n}K z)V!?i54Z=;_oNavFPt-agb;2B00001B_jw~r3GiUextrn6K}CAjYs$aOj!!$#vaIntKzem!IIni6*+pb1UP=b>0`#d=be~6>0x*I2I0000E z$L7E_x=1l&imS~xg3QgbJ$N+C;=B%5He1=?z8pH0aIZqYS740x=_fI2=HNKfKkx)1 z06!{Tk^rK^+GShHd=K;s0ae@-OzSR`Id>#lVKAxwc@(i~zs)J>&j z8F}Z^u&sM~qkO2T!eu2{{Ahpo(l^W&5r~lft&nEi?KMLBg4AVMq{%Iq5`sv!nT@LS zFtx8yn93XhwcImwCgYRw(x7ke+ILgzvSPp^B*e;w zjy`ygArZ;24DsUk2$)3x$O8<%m2xXxEoo*b>A}=NAP{!}WL2bGEHjZ|(Z$VBlK0#E z_9kj!&~Sx!#h)zvvSwm4ZLvWIvEzgrzGo9;T`J*eH(fJ%J!>jaky)Sqi7W;eOq7$+ zcjn07z`K26#RRN2Nr5LE$N5mI*aMp5wR zlI+Ts*haHV!1b-KhcNxA!BApCa$&g;ka^xbKMM$?_jNi$4x0oX0>ZbT&IQIo&^qqq z>G?r0pi!A3MG#S>YI9p7Dfh;) zhlZfD)A5DP#PhA*knF^)Ma_&186(1>=y6!Zyl*|Y>jG}NSt8E62#_kJJ+%hytH)fu z%YsDClqNM&d~=2>qXa3LBi-YQNo5mK;6Ci+#-bH6)T1{E6C^qEDr$w^kkpPSqXpQls@-m9cY}%Scj^xan0_X8U`ll z37;X^Rbaet1U2e5cYcbH$B|B!j!?2Y$W@NpF;=gNqHw#MHBv{;5LN>7rg0MeuXDdd z%nNhNMG;DkRJS&s9=Y9Lj56)9MK7{!K7Kzn&X&LD{mc}n9TTQmygv}4dQ;h{6Yqov z4%eVww+a+(*5kxWbDa`Aez|-#psFxw#XKILS;xE)K5dBSoV5bVD6C@~*DXomcUO20Il}s*T!?P2% zTTFF?f0J3 zm#G@~>F}MMwj7eJZ9HPXp+cy(8R_mAO-B2aWhMT~=*bVlhO^Q&wF=j-9Ka&UJ~T#J zf{fXUBYYPyvdY`-7)*!Fs|Qe)&ex=vswWGR)aK@dz6s%!*5pXYA#;xP$zDSQVE4#) zX}=O4{8^^Sj0{oA?X0jzaH#&u{AbNOVQpB?RhXge+X47Br2R;$lME`2$Xi{tEu*!7 zZ2xluv1p4Xj!qBgrWTJV>Rn%)&@?bSoVYA;GFEfTQ@z~Fb-N%zp^*#L%NAdtay=CvfNRD9%_d;Bb8QQx=f zX2TXjP9;VtoK<*Sxf-@P1jdgBskA0G+~uaGmg9-iNBmK#X40DIu1Gup6}5bo-57z~ z0c_v00H~2OmH-NxWmygQt&c)6AN4FBgo^uWJpcdz0028ORF0kgItg)=*hjDc0U<02 bq5uE@jY+@^+;;vs@h4`NzyJUM00000K@ZOy literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/admin/landingadmin.webp b/static/images/auditor/10.8/access/reviews/admin/landingadmin.webp new file mode 100644 index 0000000000000000000000000000000000000000..7f50fae93c6ea0179c388180895f1325ed26f708 GIT binary patch literal 45940 zcmbrlbChJ!mM5I7v~AnY%1Ya2rEOH&wr#u8wr#7@w#|sC*RS8ap6*%Snzg?BPuw^+ z&RGY0|F9!MSxQ{orV#{0LrhpvU6GsE;O~8W4pRxY-}oQ> zUcZTZ+Y_Ys-h*C7-)vyg69(YN7Z-rY0qLrD8Mp!T147<)&T*wP{Q+(uxdGpRZMlcQ zUf|d>1R&_^0RU{M{bT|HZ+*dmm41D|2f)ED(Od6p9AJBC=N;(5j{qD1?tLA8h_-y2yFCT;JSApK;v`cbLVOHUf>Pb z?->cid*Rz3E(K--MF6#HSS!6*z-GV=fC-580(8ES1@e7ud@_CY-unT8FJB06_D{e^ zzg@p6z@(4AA1R;!Q1)?hQ~L`1djW=lVnFLJfkdV)zg6G`5bqZ9bMzhfX@8e@1bp`k ze^&$i0GzzlJ^|Z%mVkUfDxlZr%ex_!Z zpP2$PZ22P2V0yHtDyklP*5!@!P6=)X>2h&3b{ED8CF8bImb;S!hnQ??a5F1KjCtT5+^r$FlECc_Z9%(6ex*T8)DWQ+& z(epPncJphB(Ko&{n&r@Ko{4We`T8ZGswGLy6oapd!y!$Y{H@q<6sJa1OIAFtZ zGvA^jqpYOoYCO%;<0QT{8iSe^cuw?L$d);c48L}fpxKciiC{({7R>ph*9Ek$vv`>q z5UUfos@m&?j6eN*xn#Ia_-SIyd=q`{>3w)@Qu&yjM@EwN1Tnuf;xD7H3VxoV@`#;H z^)p5}8@MkA_zR`PNaxl={y1nToI^U4_&ycYe=4^(Se*hN3{mdVP!R8*g4m+Uii}#Y z>V=PVtRmGZ;O|VIsJxS$DHE_2$zubApyahayyiS zGkT5C{1zl#ytCW?Y>b0(74ebFGUB53U&fYoOJ)4`M{Sr5b?|0v-@>TVYf*Qb>XY5v z%s;9|eswXc3K+W^l>3g{_A7qH>;)El;0;2GJadJ@hF#jjV<54%_;pN~|7ROi1F!T< z*hw`Nso_EMrniMYD3wCH&GmpDeYVHUHe@Z<(xI%(yuWh4`m-*&9ogzmp`FZ0m`x3$ zAtzqr$aGH(my2$7dJv9yB}+8q+{iEWt^{Gt+Xakh(YzmM5#^>RxzfxBU%gnxFPNXh zmKcvPrNC)Z>dAgKZ3&&={Ct%n39!hMQ+jcIkU5?w;E+bP+XGF1yc z6N}B!9NT{s#M#JB!`|*)1h&&CY!hfbj4eYvFq5XH;6YY#18B5*iPol`lR5@@$n_8- zh+2e}Rg;wvE9);GOND((C?TMq41~VP3NTA@n5Qd|GDwf6Z=bcOh6FveD2iuEd~hV4 zwIn1H!csueiG7F4Q(AjC|3T;@VcY{2!$>StJ{Vz4U8~BQr|H3vtK<$6MM|m7Te#UJ zn9BMmmz4XnLd{f`qh(f+Lgb%eL@mnx1yeGfHv^hT{vQ!j)B&qOe0m+2GRE`oF#3OP z+{Gc4{6G8tdXo6P&wZD_isgNSgoYqB5%fMZK7_W}Xbo8KHxfg?=-(mA+xaP58O}cV zqQF%=+whdeN#G$j2jCE8AW37}aQFD`ltsQot z*pLzN-e_=a0921c_%MN)mbz}Cqucc`ho_37L#R1U>jV7w50v~D43?V^|7-Csl_j+z zWF?pVItdTCp4j?D(b z`lS<(iM0YIm;Mcj6{N6eYgr%?rivYozNcW6khNVJA}4=n(T0S`cv4KM6;L3e&sBk= zRqg7U;lq=#AHZdWl9I`C@KO9G`Ab7LYRs@mREsuie=aGp}63b6XV}e<;w_qc-*iK{J0UN8FVS^wu zhG(7Jfn+)-HV+6WQV=t;*Fsg>12gqfN*3WM?b(W&dN!PPbTH8D!D%|>mjsd@Ynamz z)euP&I)0U6p#aM6+-fwm*USP3G$Cf%GlK`F+X8z;%BKEp`&hW8w=A|DAto~}5CBc&&(e?xx=G{J(b|QnIbIv?i;xQtjf@KPKeVmwM0|0nvB?t0^aMKkXx^ zBTx2|s3JwVN6#wLUObZ4vY_5*Md(U|9^>Ma(?I9&LzuBtSgpU?c_W!(?umj3;r)`(LyijI9EB230-A0rM(x_n^#X z`@B-KusF|jM5YhR(b#xQJfpuL^0A;f#C?TeuVVjV^U6dpjRY*4o-WkzVg~kPtxmOr z#njAIIjq6g3VSO&y%bhVwwUl;Z841Eg{cva21|{gd>PE;wZ?*GI^U8D_IQdQ9R~}A zWd;dnZHX->(vwBq&d{2`a^avyWxkE8N(LJv!GP&d;1cLjszN^8{#v$oW^ufS|B^vE zCu-1tDFN992)@=zJ_A+ zh;!A}##~`ED(00l`nWReqJq{5ItdejZ}RiV{xY9^$$7F(d?gzFr>syEY?}#Ruo;0u zC!+Mve&^(QWB%;0-27O-s?Ym1Pp;5_h1eooBZ)*ms1Ba+KN3+YeugR1LT)jYbXGvF zf*zIUm#TTRuR6iv684ipgBRL=Wc8<9(BR1U_}4J8yK*!nL^RE!hNU5(>SDrAlzjDz zw%_EL6lG%ykHLnOV38q;tD>P{T|IUXCZ>UWNr^cBmHYf(qkR3Or`^$Jv1)-Bbo8=` zP@VI%qB(AO?f@Non6w6w6r;o@&`xYuRK&Hqm|B^KtM z2SO*CXVKvQ@yehK$TFBdBEbZY@<%fd?((Dr0}0cnNtHGo?sfcg?LB+YkpD839^dA_ zwSApg_3f-FEEt!^W0Jx};ac7x5CYCw`qEO@NhnT4Bb{$(SH?m(E%jf}45^fy91Kqj zFL5Ga+m+|M^B4O5;}{KlBkKGr$%ZY`^S?+%zpYRNUUZI+0@Q?p*jz4imkWQgqYKk- ztF#+?iRcdH{u?*<>01IZmhcl~!^E#oGySIDRIZiQFm!{&Bfj~I@{O+VZQv<~lZXOgzOwNVL6+U4 zw(=qa1{Jj_3r6toa+Z|6K1s5aS=Prun>#ha6w%@LTNrUy_V}vy$P{ zyD(rd(pJ(`@(bHUH^m=wq~&r*&>O4yKK1ORS6%;ddxU?r-)s3I)VI~(7GhQ-Me?7z z32_CZd9tXmYh{mIQxSDb1_)yxC!q36`e9*qgjh%SCcbk&*006Wn#>Vsp_uh$QG55_ zRW;>yQV%~|4*hqt#;{+6GXFWrzf{%8|HNGXZSdM@)uaEJo>7uzy((vflo ze^eTG&nx$D-8PTnN*}DfKUGB>xm8`X$+Kr|jR(X4dKR-y0w%PiQq6ezHjHU-q29LmEr)co39udPjQ?0@$o1hO@KZhqnfOFrNNG4C^@ z8|{p|;IbC@g`L~}N%sFG;{UO^X-%r9Ko+Q4mfsd9!ZDN4y*DQMCASd73}C9aCVWI$Ul*(!b+xFogMh*p@NB=ss|EfLy zLZ0c#*=8M~LgthDw5P;Go1a#W=$V;WE+4>0}tzZF=)av3%2e;sJ{G%H?KJho>g9V2rg|+)T zbR<@bzBAPvmuR-Vx>a6ObAL$iOJU=0o@=jRdCfeB^QjV!s02QpMk~u!@0iVvG|s70 z;C7R5I_FSV*iGNzEmwM#A*?%motdO6fDF5EJbD;I>N5wpMwk@ zYh;;uD!(irG%XU*w3MoIl$n7HpS9m}6@!noaV#PgK*>&2$SBqY9sI8ST4IVPO#vcQ zPnH^T96opQxdgBh{S*5wisf6QFiYQVA$$2hOPVWZBu_g_mD+rMq}Y!7tFFxWgYfa_ zyME>7i@wsve=RDR{*&wfi~F_^5e+?#p(fYN^)szk{n$U0;HjO0eq>RQJ#;1N>hzAiwDv=?mPe5dG0|MczCx}3pkBJq&0h-r zH(LK+cls~e`~`AZ0_vK)MHK&gl|E>OWdFjp;-r09&fS?*(^pOmJK09(U*tt0@w0r;2_y1$q|9GTA&QGc*l%e|`+bIsW&xFEIC z(H4@c#1pCwesZJSQAGLazc)5n-kF5{7y0M+ztz#d=*6V|F~>J;i&cU}27&2=$H@aL zu&rSpG)(&^V<)tg+;K<-Dy3Cs;CbC+E)!GXvXS^{ZA|vPnJ!}+v}Ei?Zoh?^w@U<8 zx<#Y_5{OH5J#$vyC#)&XO!wpQQn{bCF1{U zy$PQXBu6f!1vE6qz-_SAw`ut;{OmBZj;JQU8yc*k8mYzHd6UT(?LMK0sa6vcmjB!MyT@e7%Q5a8iw-Sx)TmLX)n=Q)FYBU;JN7S<1}0G z`)z(HPMqjdAb>|??7iI$V|-~-w}tljk?TJIn@f_2?znHdqp1HNeO*ZPBY`b|lJn)=qqmMy{#|Z3U#?UW5zWanq z4bG*oBFNA{u;`t}M`rlA-%0ftacIzMImR4A&(o;n!=gw7MXXq@A%n(<8l36Ex5Tbn zkcgPv$R9lDP&SFbpHN@=M>&gHg}JW*@5s(9Qg+B`XaNH-@J&xHv|+zOIVE7N}EM*FK} zf~bA8s*|7~px>G8jDL#Dnki95QXFYXho2Z5F_HUb@`0@?vo9S^L#az2UnEUy4fc36 z?{R_tz7kN9Ec-S!;~m>ank213ilE$ThnAeMpaD)iM9A7v*uk>FnPS;PCVs5?5{AvG zZj^~G4;n3BVOEikNffzlTqcbH?LbyaWaU%no{AZsw8_DNY}Yv5M9#Q0Pc5N=`S3;b z`Sh{$4f^M6*|1%})9X9r7eNXdTNMw!{AeL!4o033qM&ceW9HLV7kYx>jv-|tnw*Dx zNVkz(!>3_}n)d=BqQdcpz5zXrOl5#HXt6oe?iM|hr$Ygv%eV6tX zTZwhNZ0b%r&EK&uPqEy3R`a>iDy>CG=IMwx4Ze0G{<-zn8RvoL3;<`@qDNAEfY zM@IBpXv5s(R`qfxWqCpJd=Ae%nAE`qUG5f83uD68BH01qqL&j|?!72)tyCQ5$c(v_ z@H$`=&o&oj!rK9n$1XO8maM%|nKONw1|ke0+bWXv>7a!3v26|NRo}g@u<+N+w#i8Y zVQP!ch4!;mZ2ase4WltLSC|M$ps80#YWyya-=}l>R_h59H)1J>KG`_ny3aD*HsfaU zZw)^;D0<#m6F=v}dZU-^s836>(bc17l}z{!#wBD>1muOE?cUrKpA=ys~H% zukweeB@#_rB)?S^5dLthIU%jeN?1Pe8(s}#dn1nSEWVNHNIPni zyXJrcUO__h_Dj}lQ5#ccdD+~NZYn3Iw0XuYth`Nd^W4qG9}{#qGL&VPh)F^f*UN2I z$Y#u5ODpavn=_$bt+!gMbAWh;=WGEvep=p@8!wPex)bq zva{V!vlck3S9WepzJ-j!G>FO(&QI!6ME-1xnwUrA@NnV7!wg};YNReF`tEv`Gi2d+wO}Ug9bV5Zb{H)T zKE?+E7axZB>A9YK&FfM{aD2tN@Y$A#1_1`;UU}FFBKHD{rq(|OIQigDIlLt$bVp)} zgeS&Ng_phvsRv!3A}~S9H>yNoP4&P;2yg4h;;sdKn1*$S5#RZhUqN>fJw<6YHj+q8i;&vsH~NXrn0`R=?Fmf|LBfp*kIy&$ z&2`L5<#Rs}F4?F^k3ZTcj4x*$>8X!%fgYm6-hUuLfQ_2qX8_ZjTX({QRy5(u{0xNO zgO{0tHf5c^thcyhn{^$l-@XW6c~(rq=3hdi8Tnd^~kVGl4JPsjn6Qj;*L`NF0FLG*Pu*0eiKc!Wd>6)$f=4p$1K zBt-3sQ0jTLW{#~HXe`y+5#i_kv)}Z6j~n8)#-D!tI7(q)&R88@7y-#~h(|*R^Q5+|Ab?mBW$Mh)cfO#eU+Z89U6ZMmu@1OsvWI< zBT{`k3PT5AaUElxh}rk{j0JYK1b;BA8q-Y6oHY7eSD)QwI~CP9GA`I2rrCLK2jV9I)3vTD&(9P);ed6+r_hL3nT-Ku zUgm9RDZ~%>(WmQ|9GT_m;45_Zj(HDc#+pwd#Pi@@i5!BCqOt!UL@rV{3Z23woZfkXxe74#v9B{hVl-jpBeDRC zcd7h&bsv_D5-twgPfg>ya#jYFqr^ceoB#$uvrI?y8$&Lof>nFG+?KrIGKxPCpJ0Xz zU-QY+%46~&KGqde3BX}pT$WJF}pO9+q95{3L}CS7#PPRx|h^PNWSwC>Li zoO-ZN109t%KwH5{{s0$`#uZPkZPN}08e%YRRGz-RHPvpjxTw`Sn9nTIbU^|Nx!;Yp zD6w66Ud$1>|3`A=_4Kb*J%+&jj{L;g<}WVkH}B7F*|+S}lP7TKKg)>sQeXXxc6T>1 zU)CC=7OMMY8?`**;aY#}+BOQsvDSDYG#>1j5^_COJJN0plWmj_soCnU#=ts?yG6H9 zBl~K<(oY~eEtNqdGGV8YUGJ*{xl6bkHP(A36U^F#RLe3s zqfeb-b!va;e(s8z=p05q69wzy_6usEEmqtJC_8#K?F1-&W@AS}w{>NKllVw14%mXt z5_pA+8&tgS{2^lw}^-YQ78K0@vRi+VRDR2nTasaXTqK4IPMb zovw9v|yZi z`#gi&)sbGF^^$OMeT)%8(WvL)n&9sJ7CdsEA@jpd5p~(8uIE&gmuzb6ML)Ib)Uf*?J3JZxxs0ywdZZQLfh9Pnl z<{H=zxEMdbsdP&5)tOCcXpK!aZrI|bES--7a=DNM5dWyD)S%MKZjMNEo58+X*RG*X zj66{IdqnNU^I-N)zdjeJ!?`2(BGL-X=!3UuZkc*tO48Sp*^$QHy$vE4fpj&91ll^S z1PkMW51d6Tkt+0(Z=&4<5!-Y9DKNU1 zIjaLsUA$)(0)%AZ)<}n+rPOIwGYfyjF+8XmfBAt|*D#elFOZFet& z<%TNP-D{I4*ktDE0QAXF7t zMJO8V{eGm})Ur@n!qa2BCD!ZNQO-)7Ou-4@v{^e>;;>Qr37_B_QtK!$+)lHzp5PVo ztPJbBpks(v!{9A1T}?v*0(*^dp%q)nzUjc}j zq1-|QcBIMX5Zf{2LzmIafvrWnTRuvP()nuMApS;9M z8xgv#v1LM(jvhsButL-})$#7T9^_8)#F1WL_uS_a_CgLm5~I*rhDPf8;=%5rzTFpo z5O-P+d|~Btr5Lb(Gl8g|l{KKYEQ)b6Ou;paci7v)wt{XJ;kY_t@KYSVNN8e$@f)!q zq*9Wa@MWc6EU#*}8s&{ke(5?KJ5~|xI2#M&C)L9GVnWUSUf==X;A8AE7fvp2-2V^lpsqAoSQYqf?UZ!n0CBOh;FN3Coq6{x~y`E!Okb#NOtOaP$xnG5Bp8h2zf$| z8-5^I$oj;bI}d?E>Y zHl7=h__7nbN1B!8z);>4+9+Xq%yyIkffkVji@v&$C%M|@N;)p(po{WA0bE3nZ-)t| zO73Q%_z(wkVMN`)ef8UwLx{*O<4oT~=(4W@RHQ`Zk(34Hk_pZ5p}E39!$k4 zg$Jp1=L-3|lOw+{H0U7(mMvc znaF9P!RxfPz{88Cht5Jq5-E3d;-Ywb@w)jTIo?P~oU=Fhm4lg%u} zRFsWm!4CZIFJ6-A)?qe{hdWsE_USKb0bT(c{FDz10^E()9nf@7LHgA~S`t^fUq`Yw zz_e=QxbsOjb{QH6_J`)DZ1}n}-12iM*nP!ZG#T{i5KXvmX_cfAG_z9QZEr>z-vL8c zbt9FtP%UYq@T0`A*aJ}@Q7Kk@_f!p+TL3_7s)5CNV_3?2L60sCWIX<%Vj_$pG?sl} zPM{zg$n^oYD}?kTiVOyP&t{oAY&6v>r4!R&vYDsoo9>G*X^N0@gYLlgIc(HJpqEF| zCcyflEfWMK#%5OB^Jw^|^|=Gr%f%pQu5J@zg=gXf7nPll=FVa8VFM~Txcmlb0b5xh zU4@qkxnrjlHOO~M$H^c4G?$yLmq0RuQBiEqz7xHTwtgMD=KVM{rF@d$5kOdfO-#>- zl?I^ftbFxI;fO|{t#JbRp=^2h9z_f)_3!!^Src5pfUL%66PptN^Fc^2e zA80z!pXF_jR_~g0N>K;!-&zh=Y$tBCP|RVirQbROf5Tr7sU)84%RT_p`9w!Xa1Ycv z;$EKe_#~X;rM7=ty+menPIUZ!&<$B?ZmqE?>;OvoB}1tHJIr-Y3lo6nc8ne{rCmy_ z)-mj%q5G*HQMTc)+B#%48^0SWp#}Xzed_F?SGLPJjc8vOiuNS=rKS~mrRh57PP;5| zHV4@l=TwcyFJb7HpP(N%1c;?+g^EPs&KO-}nyrNCn3G`+zw|x2ijPdm_Mhor)18jG z?X9DQG(9N$0=s(bhvW2FP-s9%lxuWSmdx;mx4rI8BO6?-ucDU~5E>ZOBkk%y_M|J> z)*I%VlRZKaiHJnW3^bD@v1O{qVlsc4IMa-~-9>Dglji}6NE|ovF|6TKPRmC8eFt?vRFs#DKS5%XwvsY6hf>vakD7&Y z)Ap?yZh_(CS@9ZsPkwy&Qb2CH9-HRA7ld?}Tn$^Yi~dqmPaU*wXP_3DtM=ghk)r3> z@qToVu5&ap`yV^4a&t+2w8(IW`d@Sb{$B* zp`$bI1*Zn9IMAdtXPE>3C4`MRsXL9ni=3~G7omF$-wK6q0eu*O@e0o0lDFN^*#GA0 zzHy3T5);8;O(^ytbh>}oNQ`EsN2jmW7dP9T{dR`$Rz{{vpmL4-M3#sQ>{cA~r_nUb zk9g}9RFe)v9KnEqbIhCJ-T6$&nN;Vqp{3quu-;&h|8_yXfzxns_6>g1w6##~R(5sQ zS{Qe&ri>A2-vi~YJ`ZuRbuj#+O#YVU$a{H@qw#z{ti0!qemj%=VE;7Z6rG0D(Z=hu zJoqilaOH@>Gtt@Zr8P(B#a?nnXPOCNbwQ;`!;{7v$>GkETrBr~R^M!r*+jiQAe z*WT2z*Nmkl9C9gqv0hFAX9{+DbRsVC01&-w;M}8da)D7sCTejvISw8m)-EYpU3*zR zsf3Y4h=bmxj~jAVt`9~xCEQ2)?)xqLykCekj?qZg+d#U^q zHo9sB$rCL+EUi1cXq>cJjEFi-2jR_n(U+K6%g@B0fC3^DQ+-FBbuJIMbp^citiN9r zy*Czeb{@|lW_wp+UeL?PE+%%~pvk-VgvYj9!zaoO3LI*#*A?rEYvuoIHz7WO%0ZN2 zU#1ppI7sgkb7rhWPbv9RMxY2F2Wl=$vNE6ta1sS#V6 zfg@xG_ll%7i1-ECP80T_r#{oistR)0zTr-J=3r6`&D%iyj+RF{{P?IgpkJ1$^~V_k z8D_2UXrEI#fxu0>QP|Sl+ys?7|b6%K8uBE9S?yr6@T-yqBdq?j) z(IAujax~!6%o?4vyjx`LgR4Q<_{=zWx!^ABJ1h+-$O6 zT6v;BM4pAM%FC`A7QLCvMSd_PUaycOO!VlTuHr##Jum7JIv<*7o=Wld&iNo6$rsrsLCpzWlu{j{X92zAeG#RDdweHz`?g& z{G6rIq(u^TuZQ&bCLmdkOS7(8ZRS;tw38;z)<}-r2p_XU?`f7Ivqa zu=8>Nyn68xjQe8J5**F2ip~@qmEJt}EurUvJ9+&g=1kH=MlWQ+ug^iGX9BYKpV~T8N&q_Gkcwe?$S2OX(hJr@TGT&j(fwQeas* zCkDGq*O?pZ)!xs17UK<`{N+nQ(IvOTcW1YKoKCxfL?m}d5>}B^*EZ=qyiX^cCm>Mv zP@}xSo)kL&1+YRzMEJL;ZfdTrY4(qYY{+H_QQzh+&4giIll0i2q_}vVigrVGS1Z%v zX!sUL1+rI_-P?6on-QZXP(za+fZ+4$<}O!t{?biN}j zRQjpN<4wJ{M|5*W+w{(YeGh7_!PK3_DwVMZ6;GSO1UJoBE6uceyd*4Wv=X)qXCEc9 zGLQN`>ZQB0OP}FB1ruHWbDv5NKwMV%&hX7JjEPd)zULyMTnFZBnErx~vzr`Wvux+& zcW-}Qk?qw)fggo>#K(JqbZXC)0~sdS%}Te!W7F2Fv_7^Dvw)=g{U!c|xi>E}A=}~~ z^uNx0ht0z8#~Adzx-?<76!9dXNsg_Q9j8t&a;}M&#_rX*w&U1s~Lo* z-QO0+6@2)_ES>{0Me04D>?_q(N2Iwh#B)6}9d$B4lL2;^8z*~ZByzU0muopTA!5aA zZFe^Ktb#?mO^yO+fgSBTqkrP^2%c33R-Zwc+8URq;{`{$LOu8Hp%Tsgs;UN1*v5C$ ze5(#6N^9DQsHKWJFcRl3DUlL>@jjaqwi6C=-R)mu9nE@=T*zBtFBmiSxP&VnPqXd* zp5U{3tn=kznkCSWG03I?VOZ8iivns-?*oA`4{FP1tlO9-N%{%QrKy_ zrHXqo+)i>p41rfc+<+_;;Bw(>8n-}QVa=3l(1DJQ1CPpM|F303#J5Fzru8o$}s?63k*&n)gm!AB_T6-XH*|T9`*9^*i^i04A&PV%>z<2 za+i9`5|5vp$Hx>rUrw$jsO2l=(ueC=h?bjSrd{_sk2;^UrQQlD^3h6YZEoVgLK563 z+B5?VA8XSmiq>*N8+f_9gD!8mL#*T7JOl!}QhW#}`~yt%bV!5qvESx!**rws7(Tq@B3 z4Y&x^L~3f5N{aEyJ?kylFtKH&Qkm-ksPPxpx2_izhUk~+~}C`4l|k2lmHJoGiLl0#1r;g8e4MTeG&w%z^q zapQ?>(VR?Cv$gj9=o(U6Dw)NUTCXt4I~4)0_{%$|lJ5#-PnqqlQ5xj@-0<_}69>IDm z#3MPZc1^xIqZgeou3V2V{iMGfvLUY5;sfjz+jUFOt)dVaXUk+>Vz3FS4bytkA#^0V z=bL~~v`0)~LqB*WR-0h(Zz+!J-q~YpFto8LB%wqAh-imK`7=uKcuEok@sJa4i3;!h zm<(5g1ktpl6vdoj)X7|Fh|~9SM8*zwp4}O{NR+PzCassl5lT1$R6kLqK(e|Wr~|V< zB%rV`8^sU|Y(c@ulB}Wk(2xja95E>kG-*GDP-=Whq#8dv#ZH~qR!x((hg;fDrL;*d zvOgbwKYE#@)V)3IL5a@_1p#ADQ~7M$jjPW^p+HN0H)o+mv{_Wb zM-d##cJLs8iSbj5k-av|>j;WQxgT$p7C#iCj#TB)u&t0&D@qpAu-iEi65m<$=>IkA zQ-T^C{`Orv|CAR_Xd10EvKMba$-X}V@<&QgU;Bg2qG}|qy%H!w zcAQ$fHn1;NzboO*Wm{ll=8?_j$%$|;m9^qHZczMwiq6PIa|~mV-b;#evxp-etRz=t zPQaquKF~3g{3BCf;oHe_j^B2{rRb(6Ft0J+G_0MCXBJ49b=zX6(o)r6uXeGA-`0A4 z<@PSS5u<)rSJ$zC=ET9Eo8r_1cF2JB_y?^be*ENWEU(AW!f(kN-dl*lI>j~~GCDM- zT%AdR4Fae#!CAy3n6^2$9%6%fv3`~Beu3ILkdZ5z^PPslx4aD`N5BEmsXRL;Cns=B z{S(e>rz}KDJ^)_PBiSgXFpV`W1e~{ue6zlFia4nSd>b$l(_G0tbBTQs7c5Rf zhm#>Vm9lr`+E}rspu@onkd5%VpKVKiIO>fhiiV^Pn{~-nx($Q9}}V+2CqSMeilHxbz%#>B;bJO7LX(1TSH3nevpXwAq~CIr^APv z7Er3H<0vjSZb3!M=M3sV;l(SjGx#1fTX|>cKzDD>3q3fBlz$Jg{gFoceX)W*1mU+?dNyj3pqxniml_u=>xY@p~{#1FytuX-o|U%An#E^T~2rTDGEzgL+bm z*eFPY@mDORJsOi6WNf{TiSfzaggL*-S!%|&DbE-t`A;QUw*l-f0DAgEHoLr_ik-%U zYcn9R)f%p8wj#MYafhyhvK{l5r|D;eO$5hhG-6Ts$gNmrN5|BObL`K#G9_tSrtfzP zcUy_A0#X;*-Eez31^wlxO4%DaRoq~2Msn&*Rfki6s?kUpQV&guR z7l>@^AZ6pfUtJMGW3*sE=_d45J2sc{*LHUc+<)?+V8BreR=cV)E*eAsPBXvY|Ky}+ zD+VmC@6wpuBo-u~6lyh&glXoCw)~K3%tpaqr*x7-NPBHt_T6*t`Gypxdbf{Fb5pJe zNU}xL#O(Dk%T#(cW9q8Xw5Q9z9vgU22OG2faMtzcvCdmOK;;R)HmXFCXp|}ca3;Pg zU28Zk6m?N38@Pq0_EfGn^AcPU6CTh|>?~sok*%1;#Tt)vY=z|?cV-GZb8V3_;2=kvm%1VH`&l&KTBIg?M+A$`TW0dgB01FG`#e?b z*ytm`VXTtYSswz8Y3L1$k$!xw2G8+&lZ3K7*{8aKKPELNQnl9d_Tpg}@5i0AEIr*C zGg4#dY>JTdWjXeHo>W44J{x6LWN^JF^i?!TH8(XyC(qPe=oi>-$KI=nl={Mm3v}ZB zu8pecb{Na^KwS ztY6LzWuB`g)bs%r9t7V+4IN5O2mFTxDf}BM_33*}HtgZ%!MQ$9Vu^zl1v=wy7=L#INuUp&O}vomDGJYj2$%$;+OO{_iTh%WnDY8z+l@eTMC= z)=xhHcyfn59>@M%y^(ERg{$?PeGJ+M)oCVgi z9Q7M5tXtC}Qd|pq(B9V{UU^h=eIaEARyjuoQEB2@)BWRmye zhB}(>egMZY&??OdhI4O7cJE61+oThtsyH#=1}Ably8P5;wJ@AHBt|~r)cxswHMAE5 zuE8$9-ITYgR;<~Pilu|X9DsE}Gz>|ZxEwoOb>WQQoww)Z?I>46d#?<+vVJACOBayic6fyv9YaTK>BL%fT_MU5s2}Osrl4-P0Wuu4~w|B z6umUVEB~~X?^-bX)v=PkVn3^A9YJJn)V{SsDC>Szvl+FV%94X^_#gr@b)x+`u)MF8 zq{=ZJp)9xDt4lq+0WN>!@%J%aLIbw#$!J0K%$qUZmFQ0Rr4od@!TH0U`ZW=EMnNx5 z=ZmkUpBLF61WGn;lcL@-7Oa3uKW*IXzI*sZJ^U{KfovFgm0N|4xQws0pz?zlB*t z=hz85FG)xB^UpIhNr7`nISQDh2&f+M_w}khI85nYX@G>L7}9ZN(Io0Zhy%@gxc1wh zbE9vrmxssn;7a+5mP(&am=VDBwV%zC3E5*UQ3-5OGgfD0n5j*`e(p9E&TM17Uycf` zHw~k`-dR%s`?`PwNZH&Y=|z`4qD^JEGPrtK#N z`S-emJE#;rfB*mhu-QY02M5>y00000000000000000000000000000000n^~s1|42 zb!hgr0?hkvtsd5(S)XmyquQBbIAqibMeJxMb4U8XL@315W1N}j% zuIgBc8W%Gj(b9ILl1$pB$YrJLYt*0zxFPpms1|AZRw2_rOL*4EHTN9O_ zSDrI6>gVmOyvH0<%`Y*zRgYaj_y&&PX7k>lFE6V?fr7x&GM0p3I@zkO$pd2E=dvpZ z@$EOV;@Oi)yHyWPxF8q$j-?72X^qVM!QIA;!<&GYUzWdX=C`BB#AEh9gMDezPpGrH zMk{;u9NB%+z2fKzq$N(Jw=|3kH4RH)4kFjWE%9-pF4~Cck@yH8WBOH(ZZNa*X<h z;Mt;qyCUuY001NE=ju7B$8ekt!j(f;rfXZcsDyZ(Y?Bw?89#zhdZj4@=J2l1Pq5ow zp6$<-rnw!JL}Y|B`XvzKd@^iY6`n15Ko8$2HhfhxQVo-P!>DCvpd!)hMsZmcSvi15 z;LW_J%%R^bmx_2mOjQ^2_X*Sax7s7wJR&~X^NEH0^qjVk&{=JO<^6rN-~a#s00000 z00000000000Ck{ca>pC#tU<;`l;dfUrgxg%v7}}l+foN)^+d(C$A#D)&@en7H%mT% zy&W}W%=zKz>$(l+DdPy9F;0w~ML0aQXIUHeT)RU~-UPKBmolQfowjIE2Ad}KhG3P-Be9lvmIYcm>mEiFXz)QGWKX_s zF>z}|sOq!^XQ5w-j_Y(Wtmhh4RRt&G81Y7F!lOj-2>A}o zjm_-mXf|%!3;W<>@`4x+7J!qrjjQ6)o+1Q(yvNFBFD_i^PX`>Y{v@A&5Uyp%nT4Q- z>ZN-EKXZ+zZWvJPgV=yqJ$?@UMZyF^-Jliv1c^3*JBf;Q8>TyD8lD0ZhSUCR6mt1n z=Cila3S8Rsf?4Ug?oiiJZ!iX{BHVe5xnV7+$&8-P;z?Xz1Xgh9!QLdR6@~coW{&VX zlTne<71RQn(*|I*5d!E;?mG#6d^I_K~GB1Pkuw zu+JR&~84UohtbPx$ z$rQNqF32K#`L_uq2~yYELNRk;@2nJ{kzezRC54XyIx%e@MEu&!lQrh%7uHz$;fwYC zf-~hX3f^vc)_bwc=58BLQlu=U= zv?!gPkJD4v1rmcUm1+Y&KTI@WAz|T@c&3^n{&%VIk^V0vMUQ?P&M6tv055!Qk=rKT z3}yndHN+?bh(I|25ITKY4g2fRoL4?c!s8MDg3~{!m2ODH=KyX=P5>s)Qn6wNm)7pO zs*;if=l2PFsu+}rNetWG(42JJpie;zDo-G=BP}b;!knsAjEww3XTD*%&ck&+not;T zCT*%t(<#+yN+LX(h`tz>z?vh^EOAPsYdN~lkASiZZyqv()$f?1-*TuNbSA{8i{d{y#u zIs7~{z(WHP89?4Q`9d4td0z>Cv^yjgfBbtECb}4>r%7EumTf1EjB+n&n@@aeZfHUe z$KOi}(V#PQ2OYEBv}j>LE3dv6fC{9PoAK96BPNsOx>bZX>Zs)s zOMNk&&1(>7bn~{N>5d1k>S$75Rx;)aMTLxs@f>vGG6!;4yaET^ipm1rlH)0j(&*Ma zz=}svf1o1MUg36VGFe<#JWn`0i#L*bn>vZo)5cJ?l(ZP?aJW9l*ymMvU>{EMYm?YU zzq!?-uy~=>18ontzSmK)9Mg|Clw} zMD3X92Su{vjYDWwnK>tmuXBCSgZKlk%wGF0VCDYp2dPfr!`ne!4>gofqE6~m&k1nW z1SgVlR1^j*`p}lclVu?Duh(Zv2uAW!CY<0cLGCYYSj)yXf3~r6HNh1TW{gdBnF`8U zQwL{mA`B;>A^}*x=jZ{ibK<^&*W6qW)Ew^U>1@Et1q|JCdC}d;_IEy+oxaX%Gde&i*H{N(P3Id5-V^5TE0Sz$j53wTZy3!zx3rCepMUT?H2X`e*!flK znI)$avp7oju}D~GRymMZ9J@;0KgyC4iM~RIUA|({?<%;-X9JY>GRH4$dF#-8ULwrj zrs9nbpL|k1DvV0#M`1`Q{tPGEgg}|63nphfJ0ltz_N(LZLZwc$z|VHl%&IHol4={I zo&(1Y$r2WjzXY1MAxlIPH7}SV^~v>ei`~`|I_~t(?I!v%nRWrKzzTf*wR1$8d5JbM zld7`6+T+@?u#QDu3Ys%nq7qMkQ_5Vth{Xv=Wh?Qm5LOv4g$Efw`wNqa^C~puvQ&wA z5_l_jCe1StP*u3Fk(;!}sUS-fhbkpQ=*M9KKSA+n*-oVm0SU)HdnR;72aFR}A`m~9 zMr~`wyIWz0CpsgVr-RjzR&(S4Eq1(|9j)V_g{!%Cd^ZIybTJGWBCOu z`s0NyrWn&oObXSJaTc;MRnK&2 zl5qEIh-8B4mk&RKe(HHqHcc-Y`$1#_OyNPq&%?i`H$3Qfxh^SQun#^d0BKQJVpYm* zQvumVqq4Of;Di#b#Cur_ki0V{{x>Zx;3jQTBy`1e_U!ExC*kQkCiX(iV~!CWJ(}E9 zy__ml`n!raiA@lY@SK<>CR8q@Zjomx)ZaJ8cLW+L6{cyotYpHf8e2Kh)tGpMxQX3k zExrU{b#emS2EE_W9%Pba9V$@@cuzU31nsy5f-H3{hJqRC5a9^ZlNFLCXM@l%N- zUM;Sm9$5Hwe-+qk97iy$+%`%()z<}_qkwNIj++RX%=kg^?03ecpCWU6WV+8WSak7A z9G;F-!Vg|k8Dq5gkCo`&-ijzj^r~RMV3VQDq&_b^M+49&*zPf&AZfffAQ%A8_U{~f zCfFvoqrAQw$@i3q-_Z^`-O+*Hlcr-DWu0O;98{bH=!}(B@`zwTtj*w9i2;6Z{Q$8* zNp$s3UrmI))c%WCfDBCpHGhDu)9a&CZb|8-M1`MuSVhK)K!LN z#6W}0%$|%Fo7VTOwx#TX=W3cyWJk=xD2l$C!0m+`52*PZo19Y}Qh=X(Rq%-}%1K&z zw<3=}plK$*yD^~t3=3V|jOWn3ie_oNQi5K8v)~8Q`m8lB=EfHhM?ja5&Kf((t z{&z%mKiB0z3I~vB3mqCXgVeP!f`z7W&yoKn?g2~m#ky>Kjj91%g-j*%Z0zKLfA7%u zzX$P-VX9NPU0^}41dk0V0X4eTfKQir2`h~}2M-p<;@tPn zG$&6_GNAVH-3fZ$@sVLz_mD^An!^kyUf3EKp1_+TsTiw7_e7%Y?KH3vVbq->FcxBCx-SLme zk5X=nZ{>^zQHE6>TNU6eL}dM#u$Ss%z@7V*ZPCt;aBJa$aF|T4r-%WvyrD+G8kmD^ zzI=e`OOePCIx&!A1rex(g*zhFB)JYXhV$w6Sh&L776W;-5&(nhx$Ru64XFW?rR^(F zL-7`nS@;fTzd-f6^rh3ik#GJRYJ~pjVh(}nF@Fu+`c9#&3)>q+e;9>B$9XTdf2bpt zbDpgy5HXyS%#@N3Pgo!6+-B+*=D!dka|o~Pq3u3JzmX#{M@7{hFmrqPxv_9a==fT5 zlh{psD6giX)&wM(x#nRWBRHt3MWXA-#`B%KA7|oJ=wKAIBLO{X3a{k~_aRF6yXza# zjsXdwa{zwi>J~!%;e0Vff}M+B$kWx9&*3dunLo_~;wKwG8sC&&oS~UiqeBm0JXDj5 zdP^o+W}8gm#=eDoXTwlxsa_TjXUQyPl<`zzCa8{OZ4-DiYEFKK;L`YY)=*rrhQ9tR z2>F%y8s4vKUKBi~cV2o?S*Gp(u6D*EPE8_E1$GvIoosfI-i2hmdrdk?zMz?hVTtV{ ztz4-=b1jY;Ng7z-DU7SV2=u!Oz%QkD=Ces~bhhc)r?eLKU!j^&gd4*~>z_D84He=G zH2}zDb((rmn1+_BtOi#<)@0j#{%%`M;G@@Iz3kv9VLRxBw$SGK3B6*6)IIY~S2!Vs zYK8}GeolkN<=cWg$Q2&23lh1~$L6)N3LrK+1%{{?R7K~}q!Xa|qz{Skm?P2{ zf2&WQY!^zk6-fb*J>S$7hoBI1WD4c1`YMs&bMX2X)Q!@rbrpTE;}^a$G0@<{|F_q;eiI{Y2BSf@hy zq+HHpZ*rdD2^fud@je$9aiepQHCt8C5!~wMIu(v#S8v{2<~PZCLTYE--s$lI&>J48 zIvsVkyulcEyd}~)CAlFSs#w!lMaEkfkx%E-?Zxp=dC+(^qBW~^P_J`_zRJj*7DGDt z5WX}3(Er(Ie|us4Se6HJbbW`>+sAw1ALSd`Xw?PMI)L)9lg96`04&~f-ZP~Yq3L^G z6bg^*|NEXZum(lTVMfE3KIPT*lxv_53C3L-V_`N5BR(NeR@`Qd31%mqZMYPxkx~;` zDTV7y{HEp0Wkw|t+IS9b31#|8V4Kl9&fM^;ix2H!kM3QK9`ljLI}ZiNKG_?qZYNsK z^g1!6UvgvO*JiQJrKhHzh@(5Cb!d}quuot^6}>$Ifa2 z35ZJ+A=dvg2xdn?e!po_1+oxw)zBHf{kQuXs+d8o_}#&<6eBuBq3m2JkQfH1N<;+B?S z5?@%3SgLG~Di~cQPBU>u_bB4<<1mgWX9)X}01i|(bH-~$o zL8<%K!Cxt%p(yhs0xB||g;;H9e28yP3&5MH*h;ZqU9zFG6JF7J23;ePpz4)t&|Vs1 zx8hqu^vY?ku&1udQ(NO}QMkVXtZac1Esm-d(Un@@Jz z+)=^edd>sk*Tqi5cmaHDt%qYhkOYDqpm&ru=QI1(xV$t6u9lJl1UuR2BrYwg=0#%5 zCel_+{Sw6d`bk>E0IHw4cFPnHZ7w?O z;4-5)Aj(q8HAAv9Vx2iEehLCfR;ZhO=uo!l;icaLeg#PMSFF9deVW8fFY%p!)|t#! zRbG#eGHnp{tZA)gu^O(72*rMv`r?C42-u1NZ92GvD5>qQg}peJa}B<9LN{;FW_C7= zB#Fc>5728CZ%Pw`0hl~e;3E+XieTG!7XH~nJu!Qq@3&C>?H%{SC(I{jn>)!a31)l6 zjarY{_-N9Uk$OL^9L&uMN0p}^TnUPGT7ClFEzh-hpt7~RuLPl_Ur%pi)k&@|JX5tR z!AeS@(VcZGzxDU#OS2j3;G@Fa(Ij-MCW!1rXR=dWOt5o}govk7v+z&WFHw_qLb*`1B?8q52+ncRXr-TzbZv6+MNU6&tmuL*HKU0a~= zPtlA$NCprkSbp_~&Du)U_C=#}VIOkWlA-UD%-%1mTQ?#=bU7S&jW+6s@?m6Z94pAB z)#Fiw#4t1ICi$-w#jXxj89`7e9h0oq z-qwSPc|_UI`}%(Jp6%D&jJkZUgU)BPN}3`N4&l`E3$J`=m6#{B!Y}jCg#U#ERGVCS z_p$#naI^f;tdgdM=;h)a_?S_x9msF#4_}z+` zCq9dAtAvY$Zg#nPU8dmAI$aJg_6Ugk3fYEg!)K~C2Q>3qVGv{mg4e>q!F$h)rwvR1 z^|=C@Be|=y6WjV_d&K8weN2UJi*T4gMOlNzW&(r#Rp+CG&AM59@z#cviE7myFKLzy z&F=9yVmA3~{DxlR2~ivnyH_4C=w!EBl*NFhhN>=!ngJ|_g|R6?S&p-_q+(X@8%Ys! zdr6i04Jg7hvCzBW5aTZLo0vE?&dI2lD2r$qE_}zu-S@K0*4CDMh)6b2!Rl%d^k)<| z@f*Z-_9JZ~98Tib95H5vF!w)j>vj4m3xojPOf#m0KoNN9E;?flo*>NUazpL7pj&!) z$PdQt52F!2)+;WPODb_ryodD`Ybs0yTmgYZs^+CZA2?w%Gh2 zLNa)K2SvG_^d+~mAB~dwS)5Q6co_LfW5zVK`EXmIX5r)*4T25xG34GLkM+ybAOnZL zh*G!8Y&eu%*<)#nf_+RmVr8G+oCa7=@zlMO;vmAg2c)tvFaecOCv2N@@E>QiZmn5@ zG>#7yc*;5Sv$+r>_nL7uU_J^8Lm%Y9j)>4-pq>B$(tZJcXOxZTAaelEMH;5$H689J zIOt;0(B3W&N2uFkO>J}ja?%#^C!ZVgcJdP-gS?`FVpt|~l#2tEUY8~OF@dnyY%Yr0 zi_czaa9s)zmROvzTc-ly+a+p@%FmrHt$d?EAh6|~hnUr0%t zM);F)PSVVaVa1+QDtpxgXyZ;k!vZM$c4E48F7N}%z72K%)39FLsP{3d28Z7pK%3BK!obUcwv&o-7GEL{7 zzWAHoL#HmgrKX=Q12gG5nRbe~4$FHYJeHF_z;zJ)p$8>jVI2oBEv8MUuo!t7D)(;2 zgx2V-v$eo=uP$}c0kECwIfdr5X6xB`nb_eKRVct$9bCI382Ib>vt`mm=FQjsa&UQ? zbrQB)El-MX*sel+w%Gtl73o3rG%y?`;SSSY-|#o6_tqTM62P3GJ|*|^0qCRdfxlE6JoG*2oq8H@(+j@u@ z+&^!+)Y$hv+J8i~gi(m%%$cP&%=?3)A~F%ovPYAlSBPQZYEg`+3nq6mOUgj5i-j`Z zY|~&@SERO{Bb1`|Sr?{j`S8q`spSDA5pd=ViW?0WRe&!HwkH-jZ=PpYL*t-c_-iTe_ zg7HqVd4-GqgLR8)#4e}C+m#g}a?=^+USW97iZE&G`E8>p@eA>v=`iTGQ|F_N{HFBV zQmetHpEPuw9@0Ws`(xdtl&h@HmjVLu;O>I(Ce7Z3U`-AqeM^>a7MCV()J=)eSNBus zH@z78&&vKf{-@E^A4An&7=M4_*XLT%4pT~w!WBXq$4A8;IMGn)ah3upglzf;*>Nf} zs;WRX?tWgro9d7k>_h|;?Vto^Jfd-X;s2t+W8w+GU=1?}Sw-)50V<*;N2>vEqA6M| zUl4ae`7VHf0`FD52<%k#W*?>4qT^%}x0LueZHnfyr@m2d*nMh~3Z;Zf{HlIyz+}7h znvMzy?e~c$<}{YVBsdvD_hPao)somClU%Yx75y=rmd8EroK>%Ge${YbWHoBKcW`7x zhZK7IJ0xgBVe5FRD~B_0*bO`9krV(rB9jWwkJ!6m&RHozoJoqb zWzy$(zZ-4_t9y84`|Z04em$?afwRsJsTize003TjorE0p%t(b;o}EX(5U19#;|f5L zb`2_R9|^9R`R_CSCHLVg74*n%(#ZL%qU$|9XF0P2Fw^o*KB z(Thy{S;v5+#%^E^B%kD;eyZavC&40;uzg=C))IRAdEtjKEC{Ga6E>iy0qKph=_f#6 zl2#Ax)W={?$Wjaa#O%jzTvn@QP`$$I^v+&ORD!^Y?p(j2;*@_FdYex0^=rhpsud=j zs$rwoK0a@JX`eD)1h5fKPLkB|!EW$RU$}`XqOyXq#u}`i4*0;U2+oTs2oQ~=El9}% ziO((tAvZY1>snLite-G8zNvi{p;$C~d}Uz|!YUYzh*kG6mwnx@Z2Rz;{*`#NX!m7_ zhoHx#qsT6}YTxp*xYheU*w1=N6G(r*z$@64_gQv0mIM^b9CQ)kijZXu5(>3jk~G~z zb6P{t7QJ{XFJTyT)O-Zf=Cf@Z?^&|p;hc5X3N5qo2j0b!9n(y4`!3Y(xiech_32T5 zwV1jw>z{;&7Pp@;J5lk{x&SbrCDe^R1vz((BZ)z0NKK0)Jk+x1d_Ug?>0~>rn~&v> zn~(n$NW}*XTJ$PUQn2hBq;D)KG^y+5y>!tzy~iH~hAR{7rGGhQwa|FepzbzCW&Tyh zduGjx%n{(d5MexmP_?mFqUVoai7uTWd?oIpHRS|$FDcF+)l>SKb1dWWm_N9yUB9V+ z=jT(@u=lE$Z|OD6*wf#;sfT9s<~S#5b%&eS>$1cH2%w6uUH{emq^_1a4_JG`u`y?&0k4%!|+GoY>Wl4E5twQ0jvFjjc7_@*=xp@NS}( zQAk?Qn4E+`(;{QpnuybP=dsMmtvS%fjbacXbE4nZ2JEZLT5I+&T24UxN^sR$(JDYZCLdK5QPC3iBqw&dQ-L0RF;luJ!yo#ggRlRv!bEJi&U-BxNvCvJD9{T?k?R-DuFMD;r^ z0I`^nJSF-32A9$f4x~(yHg5*~O6)6_bzU($@&EzK4uw(+uJ6eMQ}?#t8IYOek9vW~ z`^^$zDfn^Rk}o&5ZwhPd1AvGk`C`3uO+hrvA8ZMq`Y>LO>QRA1H^?YfDo6a#>pPs} z1OqrNR)v!uQ%7?Z4QASSEQ;@$25LIoCBSg($=O4B5?r$4qAoD}h3(nH)h#I^PBa^3 zZB7a{y%sHLH*VIyD6dl<00VxObetT-s?!DNvL|0CSs!Rvwj3%g0?A>+7va{?UtMph z=?u(oD}Nu;z?2L`R){TjfGSZ%t05{Gnuj83$?wv-&(KVRfH8mPSTp3l3U(pWtioM1 z)^0cLHnXD3gbfdXi9706DI^43L{Ry^Q{O^ZQ%f)U*Z?GmlbzpFsUsqxe=MTVnNB_t zQdkX%92%d{S-{t&Rd1RjTsApb+fE*2O$il)RBehu&P_tY60MR?;}hbI%r#^|K&Vat zXeDJuPw9rCp=i+5VF83k-EPD?^Bt1(Vi$g_z?1`3LO3r(_K3zP0;`CuiGyDqPp=Yr zLY$@%Xa&$R+ig{X9sViY7ff?1F%~0;pH0vX$w|#4{Nbb|ECkehzTN>enGvq?{Rk2? zde}Vylw_&bs}Q`MIKkU@IJ1-@QE>v!F>+KAVxv5!m(UX<7(It#Mn(6x*HrzE1E_Vd zQ>aD;Bp8iKTIWgd~g>QmD-o% zFYl<&wvZ&_i`6#!p34KIC|6{O0k=6yk5v+Fx8eV+0B=oJftt`$MDkR*(vo+{m$O2H zjkd$G)0c7kV3&%0wQdN$0=lYw5~DS(A=-8VZGLKqE(TCX*A1j|j=9 z2!wdZ8H{xN{wDM3?)}>ayXXzv+Ax&-C$Td(I7HV&@zJx%*{Fi+`xk2eK>G`V3Ld-I z+09*``*1u8^_q}J0*^EX+E=s;XnK6a&<9LLE|)2c0`VOsDySE1*-T)rTJt=mH#YJR zXy~=Mw(#l{k6iJ=a+yevpA@%HeB_9ocqlYkZZ9nACiUM6id&*hI+fujx z4?!qu`H?|EdQW&;Z+%Z7)6m?Zpe9aGF4R&BIMH4cKd4ijh;~5cOHHOb-rbFI<8pGw zOKvT>0}G6I9r$%savU<}T(902dJ@xj0jYa|i~fe?o0iIsNQrc*qpsJko*3^RR^vdG z_&{OEJu^pAB&J!d7WG9#6LF(UtED#QlbT{3)}|atC~96#J^1GJ?G@3U$Ra_H#wvAh zp%>)TimllK`DYjOi`@%57@Jqr&NYs@t^SS96`RHA*A?C zWB?0^F$CXrfze64Z>^NV&Jgnx_`_Y2N2+MlawLo;c=vK-u{}vAC9c8Uk7{z%VkKDc zX~n&K)||^}6O{TvJ#YLsI8eU!GT&#;ApX{&76Bl-+w-(TMGf!XMWc$$-?zxL|{^>y1^=WgL> zf?Ksy+F+?tN6otz;Z6BIkiEc*!m7;O8Ej~4J2zHxtH|eP-N_E)Z3ND3mjp~5d71Y< zR2L=#l5Bw&lVwQswz3L!2ZNv*AKyie>ai>n>k#Y-mLS8rFSf2k-_LEeZGnN{tK&sg~OZq2jGh!?Z0~(_d>?vtGCFzl2>D?V4 zYB4V|$JK}-^Lp2JXJrXmn=r`0lMx&{_iGHgU^&I^4)F{>qPM14lTLG;!`vsgNm#9$D+y?`-kC*Ra}b?@e_D$i!c1e=<7K zM4SmW2@BC@PEM784>4#5y=XIvAOnVuko5@kXLMT@9$@2h;#(RRjlKeKIUY$|_Mjxg z#_NS;Pc_lsl_WKaC+gGoJVpipG+YS`|8<{VoMH~GSexi2CcLcf*xzR75!=Y$4y9+Q zb`^bi(ArW@YvWmZ4PB4$gJOp0s7{+K$kBbHi~Uj`CS(kbeLyMRvB?615%?07G?v4X zRwrR*Lqq|=uL!rk1v4jQylHkWg~wquXSR=j*ILyMS`s?2ZH0aFc0OCz+g6X;|5|1y zP9y?=PBs1>+q>$lR3P!;mBqNG^IVr*0%0iCPMPk^rbBnx;}V!_f(5q@QCPfO|Kq>c zz!D_-n~a;WoZIfP<}qhmEOG*VHZMl~sK+Ko4Tk{$2y%mPsz}IlBO?zi4LoLHn@RX^ zR9M&BS=ljClKsRL4xe@Q(D8vQ^*cx@TQqh^Gu4V7t>K;>`yZu;Q2Q!r z7b+9rzYw9^LA}|S|1ndKn`79xbZ|hlNwmJF6ZG(GObUDwLYeVZxJRDX^V$rgLj^_e z)|pX3_@>;6?K`5I9QqMbC?rLbp*I%Z+=*P`XY=v&4s%q@hb7VwsK1~uHpc2ZLK7Z7 zj?t?&{0_y-;vC8378}+K(Jf{8;8Bw6qERG;+=MsrjgVSti$9 zFD+21xax!Wz8J$aqEZs1ER(6mhHz|qbS}vkG!W}HErsng-UvgZsGgc)%&yn`B30C_x0ErYNrC%p0 zRcOBoNbv1ZzgT$G&6feDdwFx0KuRUSi?TDsr^AbnrSrV3cZ5iV2(*xE%UldFU=i|IJ8-CsY}D%p+L`X~7150WJXVVp$@^E@ zyI?#zOWt21KrQ26wRF5_J{iGcKlsCNO4v_DXOd>XH>(>W00JUDDWC>{0000000000 z015q$q3TE#AVi5xPcB!9!9(5K+_(4|Fh(lV!{(kUCoLZHOoL_xuT8AC8`*5B^!mWN z&=I`<0e%%M#~rS#Ab71nd}4YFUrUoL zJd0I=cdJnDEFqOH8bIa%Z-C9mmN#Xa5oD=N_(YQ;WSqLM`cN-|l|~wPU!g;Ere1>V zdR<5FF+LH|ATI=(#5i?l#)uwrp*V*Sk#ZK`Q#H?lDn`D1kIPJ+>>IQjCcU5dDlK@U zvTPJ6h=Dtr$&tD3h}@*%pP{-Iw^%c{4}8O~^1&*!?5D*fOw%Docr^;U!Tb+yv{mZ| zl#E=$Ea?%=l2cwuYGK+hw>q$EVvPoUNOfCl8!eaqU7SH1@ozUPOf#19x6@jF;GcyjGLx#Kg zJfsj$TBR?2Zmbqwy*V`Cl4?-~n_IX7?XaX7*o(~5-;~#|0;|2*t-cVerS9ps2qgR{ zPTl&gureh*g+%P%B7mwKB^QBxQW3mx6!NsMni?q)s>WUJ)D#!t2b8SSfWfEQ^4hlz z+7IwM$mQATC|CH*ZPpftdr?o!2ckSIN{3#z&@%nP z2}1_GZpcluiR~r?!>E6=O66p}`yK`4qjaxK<{reUq(pD89;GW}_gbNfy1Djzg)hkz zW)o!~K{e_8oZrEC%6>pgI_u3ebaD?f_eDEYT=G-Zi~T%}+))&NCO|VALGIS3(A*XN zvr|s$q=F}cO#x$3g1SD$g?+!_FEo2+vI2KRAGrz`=GjKkK>rc+?cQfs6h?zv?CFv@ z2Vi3Wn#gOjp8AO;0O6_I!@MVs=kZ|m$=52cvHwBpa3Z!@h?z2DoRRE)#d*Yl!NHEw zf)Sv=+p@5Ln_;n!*pZ^cS2H}=K;4jp-x-A0_pPTy2cB~G1U0N798X7wfps;d7HhU?tKfO zlM2XHM<%DK(h=sV28x%IjJ?2yPm&xq+DqWoroq60sujDJwe!VM$QYEexa{eO*Q<1WcmHVdN#Y4V9hqv$z>E1O9}P z&X+MPb?6gZ@Op_7i!6*~9d80n@N5TeUG8?uN;DMx{&oiPJkNY5=WZ(6Fsqu{-FC;V z`EV1;W|5-)zHNp7HIvf1%s<5qnGY6|`dr#lS_N*C`z3y?&OCYWB?ecq`J!+Snd{O` z>3tqNw%4YqIuyRTs|U2YvjorRUyhZlP_M(rRqI&c6fOS=ipj}@RL|GB(Nn7s^^2%% z43jS-c>&8dDdX==-lF8jT?S>_7OC))Az)~=NAczoY8^p%-`YA+*z=159{+6eP~C_N z+-}%|6WT`0AA4Pr9y!B81rV{n_LG)*`ZVaGmbLn|`_owN@d|x{h&`~bvDf3inF7dG z@^%$=4gj9k#ykcwK1gCL8-pzsokRIKl4<-)=>fm^=UQNqDTS;vIUq%Pw1k2~nbu21 zsNxP+V4qgyz-|lrd#p?KvxZxpq`w5k^1V=5K3vJg$m|-lodvk}>oYcI{PF&~+ot&Y z?CskxwW=E!^vLR{V02BRb*68%D%o2t~exHk9{&le%e zH${A%;WK(JC;Lh8XkKU9)`qIlIqnM)Ev}Z{74XGr*=r z_H_qQ;ctHlmaUA}FClY`BWUJ&bLg+e=z;1jeQ}MDc`>#1Hb@25?p(aT9&s{l<7)ieQ#a*I9mD}== zPlP_@n+Z-C$`bBhv1tS-)_vieMacQKaoVMUUXKkvbsuKI0G0zWZIh^shnnb&e!Y`O z9^TWqFk8P_Uz2q7{OqX6E7kq5eZaWo%3t*DL&6CR_y=&@P#;=en(1)#j;fc3 zZxR~g)Dl+f*mQhmvmvb1i)Zmy!RIg=PyVbsl^q^uJ6XmKLlHpfwrL&7rw3?uPPqL$bEqJUm5=+lgzgD6J6RQy z#(_6B5Y)k3wUbQ1Bx+agbJA>)#7Z(UmQcUF6D;poVv>eeW^}&gbL=3>&Rg%5`(inR zZkN&0&~j3B8GuUNiXu2K>Cq~k7EM7L9`Zh7P$b`=q<0^fc$)2HcZ zX-0d`t-*v3%K+HUHk<XM?Zi}ZJF<%T<~v=(NdRhb2jzx?wdfWl{KGhzg-Fgdi~P68T39PFS%B8+xNz+Jm3_15PRiv~ zr!cGzR1#N@i5zHV1!`yp2|u;hH`vn9$KXp?rDL1z!9eJLUwWyGUGVRo8{FI_agukL z*pY|CkJfg_iufN5JUgMc;D6NI~h$udR%g&`QAm0rxLwC1O#+le*Y+(p)VALJbm7)}s#4q$o9B zVR8wSd`igebt_e7Vx=KG2w6nPAx}zJvoODL(RCkadx`KwMO=j*qZZB14Vt>8wK8B! zGD+Ht4Qy5w)fn7rBW*K!sN~OZ$a-2n?$0zp62%Et+Qq4+l4fI=r~vei@v?4(wSQ11 zEdP6o1}M*Ul}xBCb2$leF`y5UsEcZ;?OtD~>dpTRzxm=`V_XM4HA{V!j8GDF+uq_q zYbL?))8Jj~^PMuZ`i_#u*V~*X>-j_$JFm?Bnx`fFEws>{Z{IbPPto2el9K~NJbtn} zm!jSX%{dSl4G(mrbQKr(3Y2Oc?uJ+l`Sz1>`WhxFov(2nm5elurlOMXTq;+X6Fh>KhlK<{9Nv?w$+qu5#IYt<7Mpi^e=5U`E-bZX^); zvZ?Qw@K)oX$9f-FuM&B_Bmx6ZbZCLir}wzRX>b6C+r~lC)9Z>@1tGoL_~P4J*qSl5 zfucQmNbwriTciO|miRSiA>#;?%;#i-u&Rcy9z6V=J!-t;orTydwp1R{sSxn4e9Q1C zzoRm~0-C;0tv99y8OoZSCtAv$HRM4|Hh+qloJx|m6xTBp>^wfby{bYDbweydH%ZoD z=9rzJZSyQqaEGWiP;HOYy?UH=xnrqr&p@*3T2_|7tZfzIytYVrA28T%ZhhOp534v5 zI{)}XyIRjTAB(b*bmOgv_#@xAb7Ud(5DUk@kV!#&7nz9%W&ibzu29jRjjE2_DM3#0 zWl*~Z(&6Ya!=P$!3>$w$ocmJ2%3(|chjyuL4&Ra=rL7oaF(P8`9Owt8spo6x1*D>~ z-i`t|>FysP?;ps;{^0TRD*~s=I#3C2DUnL__+9rZ{(b!;N;a!(omdbKoU$DPm9dRc zAhLNf6g3CfSNAEQelo^ug^C?F0L->E`lc2;)rxQZOkIIJA${4SEp1%)9>S+m^tb#H z+99(H&9uccq0?O{Y=*gnICeFnC;$mrTnH>LC$!!9(c zM<_LvK=x)^lnQV4HY8TvzHAeAfz(sE+*LutN2T1&4u*Z0Q~Lp8OMPv4!WU2mJ8|5Z zfIVXOLoWQ%wHdD0t(%ndFNq8j{Y6ajjQtea0q`W06V`+}4irwdjeTR2B?ol|MV~p_ zF&A!-=^f-@m+YpC2`rvuxEBf%Nhnt`47h{Z5b_$RaZ)TgbQjx0c?JXh%~-#sWEpp7 z1%tthQ(y?SK=sZf^?)fYxKpU##bWZgQCM~nh2ifVTB&^5urg)ZYB{A~aF~ldm;BJc zZz8Znj8{LbWa|;)3JC*R;?Txt)@+xtWm0i27D8rdu{g9sCKMkw8@ZF~zC3gXfWjd{ zZ!qrH@#o?|an2X6v!zoJI7#q~l9nM*Nm!!J5d#;|3`GXCF8F26zu}l!fvifZh9mX% zA}xev?Y#AN4ShGZC_;Qs#T<<>#SnR&30*^-*%n=_xv1*5hA#mqZ8IR~ z;;@iq+N%j3``(Xyy-tsS?@*g!Ruv28g;m99DvFyPnZHq(3ez-*q%eX^fg^Ay{Ob-G zNGZ3Mzmmh^uUa;a(A?E%I?~fw7k<0B*=s~LZ^~0b&499gKwj4kPt7qs0 zlqCM{H;#N`%?02{hWJ}bJ(aG*v*~vT!vl-mf`l~wV&bm!l+;2~OEf}z{mlTV)()8X z&zr|1aVa?p%Y#pJq?!SrFJREv0^)dMlq8%ZM#?gKC!Fo_`N3hKd?zdTLi=EpmjGee z9hSCoTK~qP%k}zd2kU1yZv0i`D42b2Z7K?&`C z9k{O-D-JKMpljY~Zc$7>Nx;t#Mm;TP?t>W|tEm%eSFvpsAlin5#IxzEGE}~T()A68 z7cToE9Rclygd?2zG=?yv`?W5Fw0rUkTfKgK1YVvZ9*(&W{VG5wfom1p_CoBLTZm{~ zxPh%$V|OyyJ*A@3$5IzRUbk%#y zYxtblriq8hYuO_S0w;d}BQNoa(LCdNoSJ}Q#y>_YTXGkSX_xjdS3Fm4+VqamB)jSS zD{vQdf+T)Ca{;AMMH%W3S|r1Utut_vMT4%QuR6Z`@J7uCD--N^dvZhYws(l3BZ_an%_Bz;RfH%|63GG*T*P zW6JhO#$7GG6T9_=+?Y&W(bDl?)Z`w)L&*M=8H*7oAA- zHu$!#NxT0uqptgLyKm`>>8kbj_Mx&36m#u!u@9)1@H>+i?g5%uh8aiHD;|C3#O-fm zVeV|PRb-lqd`NCH9+9B%6s2N?%`?AcUYbiev&g zz+wbY*ZNdcctIsy#5vs7PpAh-yRcQIp8cBWvzy!Z!&dw^b#PfDbMx3P{5_MoVSbR_ zj7?mReci%j7gWYqU#i2baRu!}PE)G1Aruv5|G@W!y9A5=OG5C&wOKO{}uFT}%EJ ze<<3PXZfCCAEA*Nwh?ew>I^`0CZ^aT-i#gYw#=CL9$kdBWF)to39v5<&dk9-^z$H$ zwjp!+mD_z ze`Ds<$f)D;-4WBv1bf*v=!9uBZwA-1FN+H5Gg2x2=}@BeDb&KY1h3KAi@>d#;hdEj zuSbp}lV|?cFDP4E;JUc{BLE zTSLqrGe^@473pVfbN*r16mRDg8qmApl^=nfwG$>WEMCO`0-Y{Z*wE6Sv83Y`W2yHp z6U%>oh@Pu0y-B|v;nexR+>C$LIv-nftnE3~&DI%;(_a_3x7(G>iO;J zxy&&I%LompxrIOgOo#$ghpwpr000000000000000000002=W0hI5dH|_fjOv%u}vt z6}RoGT^6^iSt*e%MPZ%5SF`DFCsO`oev?hGPSyhee@iz_ zvp|7=BV{*L;zm8n3z355bwH*f=|sMCkNT8^~sGwAMCK)JTS}%x&37##RrENLLf^iQ@>LO*tOTw#}s=@2~^MmT8U;mo!*oUzD|d3RmJTn`>Ujtrit#NpTnAh-Mw*3$SW5qxtmto8LP_?6sJVH8eEZ-~DDHvYq zg#US?gZEXOlK`brji)l$_!Y#*@W@V(=2AoNyu?GsPK!}E^?PY1DPiWrYoKVRfaik zj#KU^;T2D0PPtgMwSyKho4M^Bs;odEa4`C&4THJq01gJ!dOpC*`+qlXFdSel`qo-i zkmG7m02r?TZRo#bj_1{nB_@49x8N3zB7ZhuPGYU7J3SI>hv>PPv%^gce~gdKfpwp= zz%KH1k7epDa>UjEV$yQnmmqu*vp((EqRuSg5F&#*tAnBGGJ3h!$0(OxHDDnh&}|6*OYJs8h~u zSLE&WTkIE9NDqNSFjQ8xcu32ud{i1m;Aso<6J%aaO`U}QCl zmJ<+d*{n?Yi*s39m{0sXGwmb(sKN(Lk*R}s(xA+BoipX7%CEY%+@zji`CtAmfNU>* zVm!<)u~fT7(R1u6FX}k(EsvQwgXRV!ue8l~k?wWXUla=p(q}RYi=UM@i%=08Uq%^_ z*SGb(j{>@Qq$_~a7;ccmC$$}51K&hw&`<1Veu_{94t!1Zx%oZRb~;qo>>XlArzEk! zCJ)3@=0V2~44ubQ8kLMXM^D}7K7JI~zTy9*Gk4Zu#!p(opm1MOFpz9+a92`GQa47) zJ{`Uho?Tetx{^9AKaDrw#dqlG`D3%-%+I3{HO*J1e1tF&TZfDd;JP0}TeLAwtiKyj|p@VJ0L5Jf?5rl&XYz3Qs zt_F1fY|0*k&t*@~ruQJxf_KLv3beesSl=#wwynNnp?6oqD#Vur<#VM6H4m<8#51pK^d!aV^=(} z9LT7?zWl@`hP=q6RqlUdK6;rYepl&(()?=(n9 z0(V`HOWxLp265(6lYp%xoziy(4AHL7*W9>>`{Xgdw~Q@XMsvO`r1+iH>4>nr%Z71E zG2+^0Io+sR<|MsG}zQ=;w2fr{Y6D6ve+ ztcZ6n>=8!BC%%+Kz;Y;??3LVavNLx%$1mwf##Qu%?KpgUG9BjgpP%nMIqWG)cG9q& zGN=2u{@QZKIo{GA2&Q`M`(clA@mpE09|=TNtlG(IL-Ju3xRu_ z&tlEzE6vp;AHqBrq;qgeJBnRUr!y#XUy(F)WzLwS#|+?j7W2i);sIUZ0ak$5VZgOf z*esg}WOgu!v0QN*Xpi8`Z>aQxN#!)Jp%XAum4*b#6$m#$|1=Tz-2CVyL;UA$E4G)M z-u|l(jV^F?1;p?{1gI~wbsB<{6t5kftw*z7wtw676JT4oYzbFD0B+VetLPUh^Qr`o z1Rkt<{(js0sqe7Ht~gia9@F^6Of^4*$Kqlm%wZN%1O>-`>3be9uyue~bGL-F@}#u* zh&lp<45WpKpxynV9=oOj%ANhZHRxzyJUM z000000000000001psjbW^y}CieO^uUw;l6RJ77R=*p``vFDW`F^$yfQv*7$0Gp3p~`dgB%%q*+YatDYW?c3XO4U6%c>#G z6RUSk-WAO@qH3K3moG6i}=JwMD5U&M6$_PIhATEdkMPW*-#pWgyW!?qyCr#uRT*j zPy!v~r|T;v#IlIv@4pz{sY53A8{7MLuQ?0%e1ZxBl54H23F1=;+(i}XxILoy;Iqhl zn=Gh?od>!9_PT^sH3MGtNDW0F3l+?tfScP@Rn6~S+2MHLt0o?S!{2&})5es|WCw_H zDbZ6iFY^P>8mrUeHA^py*bLQp)7JRb--pK$8}w2YyKb93zBSMi3z z&yCNN;<5cExZYAn*CNw*vhrN}shl>VVW|HX~W6fdaa&O>zYZF5vKny`W>(w&kzj2i|3rb?%do=14Hdv>`QvR` zB?js@{8;f%_mDpJuXF1LT)r(A6Df(@u%uVZRVCJZkN-^#=UEvS#ld|x?E^kVrr*R? z!1uHol)P~*fJBxq|Exrq9kBOw(E2LAJ|W# zYS(wo<|P>>i*}AeH6nqb3n#=%#5L&!a^S@d8O{F zitbhI0W{C3?+1w>B-e3ImjK*(c@vN0g(#fd_~Mj#~ATem){0Xo$Rup z%l4|WwGQW)$aUXJdER!VS}6nY@#M%I``I2u$C~C^I=uo9$al9M4I3yho-YBi}^m^M;C~$2E31~O1_!d+@`ZW3{CrF@- zVS#8!JK>dj7MA2|>2We|84$-i>C;_Iu41s}X7VDv{toS+-5I}l5<6AqHu_j|@~gd{ zPjT}*^Vi**WqBxDsPmy48g&5o^Rs|b{vc%J+MtD|X6RMwJ0jI>bCQkRD(bS-T#Wc;BOAk8SObz#35T21%Z35=89f0L3;+ zlU;XB-4z6O_!gob0iycrX5sKVru?naTVUiID5 z*YC2?W|%qxx)5u1KNI^Q%E^&M2rm2zZ_!K)`Y*(lmg_x%H|FewpEIuR@99CokwIY* ztm)JUE&YjGro-xzIU~p}cH6OCA2nGUlmmY#RWQ46S>s+k09%D@jui+(74&|g?HW z4Ey`;L4t1UM9Cn}O7@4H5T-|7VPdp`+UaKdHX>8rz;?-RW8|pqYv3c=|4WWFZAvm)wD8S(Z>u~7Ya_^ z$OXDvK8)L8#tt8mn=fAVt4&1V`iyP?BAc5>g*6&<1R;fJXq?)uKbRH{Ru^OKZh*eo z7oMt-ERYmX;`3q5=S}9Ddp+f)G#yE2=7UXLL;m6&_3)L`BF?a|-}M0e@uk|V-?nkX zrrsgsJenyLaum=$mSlW{{en}F13rJ$M-kO(>Sd+h63*YbZ;g1s^Ie1B3Nso0eP_Qq z0L7J~G0>2MGTfNh%Ke_XkzvLW{>DVrV3 z0oCk_b(5~=GDSZ5mKq8a~^4|ORI z=KZRZC_=ViU#hXw<6<5Gm`@brs9RtPD6EhBSA?$ZudiAC4_MB^ZfW?{HcmvAnt!WK z?EA7~!+jxUOP;3!bm?wRQ1caC$WQ?GUGU*P4;?mC% z+h8Xl1aIm?(!4F|Fz za91n}-^I4w5;mgkfA+?Qi3<^`J6p`_zAWL1>%-suKl;c|m~}E|WSHI;SjKq7=CM

_EaEBP zf-@IHgSB<7&I|tCWn_^XY8~xZ(FIvfW?3F}_SAY`e@et1Fr(C3m7%c1)5%qHZ?l*b zcX=&ExleR=8XzmcZc2r?MU$cdj-{9V3HsdD5p*9OF17dV`p>Og{y%q5W-#G;=G?4}gx3P8cIFHef}7Ql_O zr*p_)9hd4Hcas190<{_W_l>QL>J}jst~mFe354ooxzxs7o3{Fv>Y51#CAQ80#q#N# z*Ja|-?OI)m>rWTzDKM00XPr&p(<*$HB9tUK!OMo4y;Iu(6X{-I@JPMViwu4~!uu7U zJOTi3)f!aK#J=jh#RLx>jA_Y1YNxG{pBQd4!<0{-;GL$N(aoj2t~f($Y^!4E7d`x_ z5qMsaf<5p=7NCGw}F{Q zp70eF7Db5OQv2XkW#>j_+UPGXo}P3YR4e$m8O->^mn<&#`E~8|Nw2P6m))SdVc1~r z>ryrw;+Tp_(HAm16T5UP2fzGv>29r@N{tBEpt50}eHeL0<|=2y7}NvB;swpoVtc(u zx^(kc4)iZ_X@4s#)ZP>EemN^Zi2do*fJ(swyThIOL?i>npipDhREs=42e)#9*4&6O z5B6HeX%3e=vG40Dyz1lpyN2He4C$#>$ExJYG084{epVz1_)z<5$>wB>f2$5scN@s- zMQAd4wX%s_CWdW*S}TM3!T#v)ke}X9q9>%-ZgUc)M7N@Z0|FuTP9@xpASuhlXUp?U zk{BR9^0T1ZEtZMU-r#bAjH^*dd#kNMii%dOdLfr`sKUK(7Fi)(}R-Ci|#DL z+)CSTNnwt^O+ihpDl$oq!BQOiy|3}D9zb2fWn0vHWik;gRQ<|3<)myr6&W`02B<$v z^ys2qUKwRaWg?GAia&n-2%jBUmwfYEPTY3_6R1E(VK}xaB}1pQn`UL0KyHiaW=gf^SE zrd4Ul&h6{J46OF7!75rwOZSPFX|0900qSh~&{ zT9g-G!w`k9&=fm*#g>NKy8by@RJJ(`I_{GyS6U#|@rgflaw&fjr*tcI*x6$2ECk*a zy3J^orFp7F&irThPqutR@I$O_C2WhP7@O!oTE_0o4quz3u6BWIe=r7EZ+Jfowdtq4Z~8LxHA33>a-mv`4|o0vmE%N4tN}A3iT`wJ&z%MKtcFCsUx}%QeM}5c5^spK^k9 z-m49k-+l!k(}T(@?P_6TWgw{7KF#|jh3WmK|K_iTKyQc-|7CTGlg!w2sm}uKL<0;g99cfk zNRt)<wyhQJ1=4vhQ>)`NGM#Euec zT%E4FQ|*vkZsIEJKuY>L{nYFa7s%{yTE%6Ov7qL=8XO&8GI-2VwW~wY_Pi(+Cy7F! zR+IkTg*#TnFNC_IURXPtpjckD1nOaZZdWf`6!=%{1Y-{uWcXAoeXY_V>-^6$77;__ zZuU&GxNnv@GTeFZwsV3zN*Mk*eiA(^&g4+3d%BLbik7#!0wz$RtfRB54NpeKX_xx6 z_>(W6e5+A^-gNC}3U{s%&-{5_G?a}ImiR~c(b#w{IrhlivCU#LoqPBvHlQ$=8KPn2 zLtP=;AL;D4-aUL!eh{+_ADJ}1`wEK?vY6m>cvLJCBV2?!ohCTBsZ@*ivJ0zdOHLep z+vpMAA9vS&t#IAuu*y>D2VpZXy%j$Zf*d)ob&X`NEjTdZ=t7^TIf0zse|^>cd4g|a z9B?*6X>se+0~~AQpz*Wa$(dTW;|f=KdP{^sAokMo6E%}yq{$)sXN}FKrZ(d+Nod@i zB763^jj#l((8|cwLmJCqrB`R6Mx|V~zVpZef|4+it+@ljj>lDNnI#02LO0I&AuTrL zNr$TWc?BWh-0HjfUq>)TkU0;)V8MHaAhJ_(e}GDX5M9BXQwBchojKZIvw#GX3b5ah zi85@{vwml65fzKG;?AB~q}%lq9KzGFimO1QeUE%H6U5wLy*jeV#nF!Xlb|HSh^Q0i z>VUW$SkEw^9KJ$?r;D3V6X>y+Q+bAy*tz}4Yd$NoAQO4Uc?#N=4mzPDZfY$w*h)L? z0y|Ha(^|IEKl>GTcosA*9%qBd&#nY!JMASz01MVsXj~Wug}m5I*s*G04s;7_Q~#28 z=cYj2y%=qkCoF|`o!bBaK^E`;00VA#$$ObL;20DV9Qc84*8U2Ep8x;|6MOx*mO_`^ zf~L#BHw9s*D6?Q_K&65C58rKUcKxkX1p~8gca$zDa|b^Z5tBSy+fOOnFer`S z0000003qV;3jD6S$dA|~5F>4$&6b^W|; zi3~EsGzMZQF_zk?YOvB*3E?YiYGrk3R#gW&StN4;N?Lvg3Uc6yb0&3}_|dE5=Ji=r z9PCv2qg^kky3PuoqYvS`v7&^yjhj0zirYlPQ@79Bs5a#x@A18D&u&_EJ^=Z)!#t<4 z0G!oSe?m<0ZqZ6EW$O`5BjtfK##wo;qAs%_Ua`)H;~!yGI{U(_1}TB>Bs^P-+V_=F z)plPCwq46=UFnm(0W1@fAKUmqv#|TEar*~M!mJ>&g`a7!s&}VOEy2}84COf!_c`;E zg!aN+DqG2mPpyX~wHmQo_pEFU#1OcmT7K)ErLs^Mct;;_WDkZHrnWBzy+&V%AU@IE6m=s&hR%M zr{cNhxN+?C;Ty-VGMP3!2xacmM|q9)OXQ`>L2WT;diYV>w0##wpO^c$FuYOoLoY+( zqnEgW-(5r(n%5yfU5&xXmJF>|%(XWEZM=yPYD5e1;EV;3MK;vn_L?|bHA#*|{_v#;`% zxhy)!y}kGXm{Ihgj>0B^TC*)t#iKmI3oGbs6IE0O%c#jWTOJs>b<}mW8YTLg14pB0 z1?Wg4D=)x+a1Sm--eA@z2i4}V)-x!v>#uhE78PpX1PyLfQVm2pXYTS|TytU*ihcGU zK)+9MlcLlZB~$D>r8-;6U;9(|Ml>0KJ$ff9~stx$WIx-KOMeSvZmfA_VDq!Sg%FkP+paCSh0RZfEZE zYKt3Fr4%V9pN5P^-{AATaN zmdnTc{Bgb%^|^9RNCM_+_(j5#I24tqC1th1-8RejR{=} zU3YEU^{=Y%xsEKOr*}@D$TQ(KXjvVo?`hQq=xg8uB8xwSmm*=oDYz6Fr|PNy%HsoE zB7B+Y@#U0#t!J5smiTh3_w(h-CEp(z2;^Jj8s(_()v;c0g!BKvyD#2-Ekrq;J=S3> z1upZea_=y)%c^y<=#Nw!)pQ9?azS{V38x2=h`p*nv#TCCK~Yh!yb3WMV`{;vxHCakg`Mt zQJ#+YGw7m!m37QJ;o23D(pG4VKOCz|E;S2&`Yt^+1y+GuSli0Zw38U7#gD;LOd)@S zKID-T%p>ih8)V-l16QWPB-R~zG2*7mkv>miW4uinXaI8qTbQh%$G~Bv^@23}TGIo0 zqDijmYgO6l%K74LohvP(Vc3g@_@WJtNCav2FZ5)opqU9p>!=ry-oOww;dX3HGuh=M zCD(D_iWy}ES9VFL;84g&9*JR2C#Y0jiLVAXDM-aOajDYsy5|)$e^3S*S<<*JuE5X| zo`bi7P`;A)=X~$U6wU_0W)hYY3G2eO)aFqLJp#q?Sz+o>kEPWDglSL|-P12r&|Y`9 zROXmImtIW@mngI{;r&RUkxMoq z9p%V&t@r9Gs$Bv#_D*0dg8)}PL~d)(yZL&fzdp}exxCWF+QTP_EqIbB?E4VGdJ9u3!LVpGe*^V*v4ku}*m?1Ouakml^3%~yMeTSGy7mjjJ*ip&U+Qae z&l!nm8^V#ewT5|&8fa(s~mHb z%aV*T9<%I+QmvKt(DG7xvx2#5topvxWeH^7R8=V2bZ6Qywe}ZG5VTSE4mT;2Du)=n z$=5Wm+HmSGSnYg2_~d1sIu>!T&|fms*e#tm`SlqL(>lINGOGw0b_#l}Ij&g*X1cEa zN)e=#s<3YlKx5UzZ~kf*OcDdf*r4j!qYnT_@3z5fo#ttGyjW#Ix-#T59Xm1-Zb*DE z6`iPsTz+z*i;0~!pTe#4*0}_5mExY?UE>weLjZpU#w91PJ3h4zxG!wURx2Oc8KaQ} zWebmM>9P1(l1eX4&~ci|UiH*ZK%^NSGoqJYp{>wdqAHIo;;?c|18DG~(aiB86Y#Ys zqt4aVHL~Sj0;jx3uQ=+1chA6blgp!=Lt;|Hlrg&Z$s2_>psG)UvWXp%DqrP%nww)2 zwo|0gSc;kQH|!*r&GuX&E1y<@XH@;16w>>P>L*XlFqzs#&d#N0iPk{uT=6%E5-MVx z6_4n#9WbkokyGNkRu34B3zfx(!D86JfQ%wi517~*Rj@JaK;rC+x8D<(KfrM>vEA<4 zvGpe8)6N7-{t_m#mV=>}^C!k|g~>KXH$^qC`y{y%(D2Lz%nBR_9>m2y`#V#9%pJbe zL$K+#)^M5Cq9U!smk2`e(utGQ-e9ij8})@s`69GImoP>uQmIPQ4~r;21G*-aP&)b& zI#u)DL<1-B24NVt1XvTdPX(|%JHrZ^T%M{?7I@xEfT`enVFbE9ijInyGV_zVq<||q z`>-r%D~TLS85Ai>&v@*u$69Zq{PIuVxL{N7t8 zOQ+8p(ixB7R(Vg^nw<+v2Knc}1e5?&&;;ek9cCscLc@#_xAwC~(Q$6100001sf3Yo t;ax{kb=kIU+phDygL?;eW@6&|qrJm*4bXWXc8ce+(&d67{;3Lpyaqj9ezjKwZ2K>G1No_X z8$KW(!9LAD;clLP5nesF8C-4ObOv`905Tp;0Cj-<4U2co_iKQ`vmYoR&)*NQe8~pr ze&*Tf|FHkc-7*M_UuXOz=pp?46cqSyoqsrfySB>R0yKUt1H2zvZgYPEpkIwX8`gr~ zbK&%z-vO`JLfvt`86U^b*IS5D-Sz$jHwL@$F9dl8ss6M8ozKeW?=!>32HhcCLcW^%%M5^H?Vz{X&R=?fsV4A8BX8YyK(;mPSzo5Z(|DA) zWY-seVql2B%HvuJ0pOprjM}_cI|Nc<6O}|9kXe?`}H66 z>j8c*QkI)u2(vmY$=CI}aE_6U)p?soE;+r_dQBNw3b(W0&>Dc3HC4itXQ}!ejT-rP z#C^GZXZL_GJGaUg>u1HPFP=W5ncb|W}n*J0o)6ii=mfJ z*I%xsZPN2X@i$wo}2CBhr9C$YaV>P9i=LxK-l02*&H#c|+XMaK=aQ(So$j~qKH zY*utP|GziIQ=5lNPJIMT5tNuH$j=9{s$|UXWP@v?%x?9vdjHJ=z8-_d_|i0^U5kQY zNh-Q2>EA7C?fIlnnvf&wehJXwGNgmMsU`eNZ>{O7(9aX`=f`$&d@L{leuNR;EB1d` zL#dnsJXAl2E4z0FmS75gnrCEujF=TkACmQ1FgN_n0)gp_BZ)_y^=biu#oln(2E7QS z!>KU$fR^mIjsZup4NxVl0!BU4-7m^j?<;WjL67{#T6E|jI!bxnTrchdyjPFp99p5- z0=AGUwYFMhg*&W9roV{G5hbVcq@gfNaYlW(1d(D$HBBr%?6TVpt%t2!q?+F907ZHy zDIV~ka7(KPOS4Cj+NR4BKG6@CzN(@#y~hT#Q<}A0#@QvOju(Gn~@3%_(jO z7*HbI;)mDiz3VYh5+~MCBIcL>;2_zX&)lhz8JR%E_nmIzCexKX&)L^tih-#Qowt2VR26XX^k6LiNfE?*SZBab#Os71{J}wB zWcyqwAwh`@5Bfk2+(4;2x%EPya`Cja97v|gCIaE5sekLQfA7iv=9m5j{FhBG<3$mu zi$~0jm4Av3@-I@*x(-ftnCKui=MD5eq^!TV8bAG?GqwW*)>fuZ;iu~ED<1Hkp3IF9 zE>h^1=-%{i$DnK*!bj90lKP7I=m}Z->K>C9F*z=gT5!gmrOgerf^jidhi9|hvi2cM-fI1 zNn=X#6DubC3=52Rgw)-9X$0OS&u`~GJgM@hd8we~;qT`3fO6uP@BqQShJ#nxncX&S z`gbObV(7NtlZ) zcAHfdK4MT+R0u1P-pAc@IpKCfIGbp@LQinU<)jzE%3-(%P_S$LPOr!F<(j{UUzy|8 z`uxQ;?Apxvv{NnH!lmTwTb5%4V|Vq}#>DCMtW=8m!l5u||19#FL+%_c59p1N_zExF zcA*sz58hk)18?GnUX5!)5w90mi`sJQywR>B6kJHNDVIVF+a=!iy%2h-gAO?NZJ!La zV*5}^Iv)G^{x9T~a=bXEM(qkck%8dDSafl{eb$CH%^?(1icd@)zVS`!gHZfeBOl*9GFA2?tb!vGdf& z`+rjQ7ixjURFib`-_Vw)>B@Spzb6BK+0wrtD9@wVc-{Y8O8-iJ{^3+^7CILHR?9!o zsD%!8U5&v1rBMH%#r5x15MVW@{Z}mPdE4ggAGpomYx#S=6+nZnmMF@3|DSoxpA17n z968N%|JQK*PmVY2>yqjDzr^tWp6ZXV82Psp@NePsN9=5q9+Lhdj%#2N3GEN?%E^p{pOpI*+hSg5MCo2(Zr)&JjwDu(E`;2B z9R>2K&S%D^x%c5@vZj9ngMVMHkQ*3Gv3HE4diw(9b=#Z{N1-)=QvX1oKhW~;U;CGE z`llDz`xcf$&<~WH<$on8;uWth2AZwOl~vqGfkd&neXX?zK^b@a2O|GhFWw}h`UEv@ z&jv%Fyw2MSko`**@Xty9_qU3_8RAbw{U3ta2MFj3FpdNS1O#PyiYTABtT&EdfKiD} z>vYVM^t#|7#KUT-L*QeexvH}g8Y&GqVc<>T`(_NC;p<7q7B0r+2lzPDr=4(#6a*6Z zP*^={Y_n258RIk>5op@#~Goi+EQqWngp0Be6Qu61b=(d}Jn;Ad_FGqa_Ygc2Nl+9F)VL0lS2;Dc&YWvt>xw4?m1~wnW?{)7GtRG&Of_ETnva*SrfOo3crV?Q7Mk&g_X7k; z%F1!Wol>N|7UZ6^>1HLO2X7_`IT{-nYE0Tl#g>)6Wy%y_D^UFv{YuNsex5i3L(Q?u!OY)Q-mZMQKtR+xE+#LHNd>=a%IQgA zVZoYXfE5eUGs8kX2{gvOMmtS6K)UO-KBX>oZL1rqI@ciIP7+xBJ<}Jp558H8IYLL8u=ASF7J!7rIN@yrD>1M5#dP)bF zti~{>`e}O|0+*e1zQ6@;41xelY8q~IY{ScL| zz@Ga}XV%Bu^Wrrck%k4H&_{YDccf2kDaOK6Qc}t_Hpgjo@lc)fgUUT&@glq&qSEy> z$8g@QQo&xBkng1fGUQn{o>ty{n!GZgcd=NyO+4(oOqPyi=%H!xhhN4*Z6;A?zR4)G z$-|BYHiBD77a8x*-ZctgRdjO4RVC(PVD8E!;U`;fTpa7&@6mJA)nZnRS}8Su()Ua- zTDAO2P#EnylMaknxOILrQRB!J(&AF~XhPVpuB6FkOXpZySAf zd#kR!&xm|8fPT)-PcPvcRL9S;K{d>=nOA?!`>GoM601Ukv$bpV_aH&e4FF=quE zhU)Ea^SS9LhOF`I$9n|?^dPFbMX_umHAym!`tu=rPP-hru4q7|nW!7$udyRKk+Z;w&y*yVvt*u_3ND%xnTM*favr_>5dF9$Ji&0T^BV2*0 zos`T#f7gU3G`LxF$ zQ_A#tx^mm|I6AI-cDRx&dr<2(Ke)UJ-%dRYFH9{ zES4T?zELkn6(s=6nFNqTD3tBMY2UyvS-v@%%)Zo2I(ObfH9#9m&Hz?*7<{Yh;+mF4 z=YY2T^LQ7yC4*3NSJL`PdVLvP@dVNwOO(c*z3VR=Jou#iHDzQfT6^~!3T~x35FsV} z64Ykk`y0kK84KDFJ@lz^so(oTw9n(#Jp0foKioUw`1fCEm#M0W3f`7bWWR+)W_X!r zpbhJjgajnL>*;`}N+H z{Uk1rQvShVh|C}ti;0^yF4n2d39W116bN852xocA$>h2Am zBw8DAHaj$xXOu-J1H;QCF{XX|t6Th9kyM`J_%}AoXe};lVM^bFNmKrw6FDABpuxcR z)bizlCpxR%*+#b{Pem^1#24Mr?J{gCh$NMgJm2NFo3Zh9m?Xy{HC7D2CxaNoro#2-^jx#RbfdEoI*WdvvqQCEa^rhT zxh~ltJ2AL$KP8=4t&kk(p159;FKg9`jkL|2ugUysFpN(8lRCl+L6CEl)zjEguZBU-~G zQyfsik;O{5y=epfPDTZP6Kwg=0MYL(j!wA8&N>2@p@4f?c%p0)8%;wBch zlb0}6Oqby0^6`!yb*DL#hNf;Ta4tkDF99&{%9vdbkpx;exZraOAG$C83;pk%@XriO zobGtzR`Te%n2TmB{_YW`6rGc}zOZWbiw{oZcc6PpA;ffIcT?DDv6=>=~ z?&FW_KD5 zP08P)84KK_yA;{0u%f;}(lEPy#aR_ch-<131}+p%!ldWshOf@j&NV~aNvl@RMkQsN z*olNnBFHn}o=^QY%r3tUfoS`7n(ZI00`M&jOg8EhBx&32pE#VL z2CgS8LWBT=TPJI<%DA@8O&I=ePVzQ;;Lcp&fM(f=5Tt&(BdLpC3(Jici`aXG+G`cn zVU69_0i5gdLYeSZIW|JGsbwm)kQ0yAhHnHyBCD$He3yCezc38nsALO|3%*pe^k>R)>@R{;7;2D^HGrkwr4L3b zdux5^f7nd({>No_ByW}UHN8qOEgS43nTDoIL+agEu)PKWNu=x4A8OJw$$oLZzBgaC z>>_42JK#rIBeRBZ9Fz*p&PuCCPPp@G(=;77`#=@w| z*y#f_t~orc8*rVd4ECr>LBjd_Qdybi_S^R*J`lI*>hYjkMU#Dq5LKvLOn?IV)u9Q@E!L zq9T#-fMT*$Q2pSN8f%i2`f4+)Vz)hRJCWE(s(GcSzn3jd$pjO_YrYKP*AAblQEolb zIK#Z3?`BIx#L};YIurA2ayNY@KkUBC>HwqZ*Ok6mx$FdjMRZ>x`bJx5FbB)`yT=Sa zGIoQtBIHTQEnI#3`O3T1cnLbl_1TAUmMC=Cvr=VldMtrTt-+)-dA2l(D0oek(g-fm~S=+7DV4*(jo+qnkDdlN3% zCXYP0U`SkuS89~(W3RKuPIkf!s`=8v#C|s-_HEgQ6=Lv8aL`y6Y}=Ds;8*FT19+zA zGq>DOu!v^&c;gTQvQ*16Yf7)fIofZOAeO-P87RDfN4@&nx2)#2T-a6Zye#+MTGo-@ z@fLv$2kkrTu7_g@dSs3PRJjP=KU?(gNnP^tF+LYMB4RN`4U6gbJWyVQR~e>xRY0s> z@K{q%4$P$=_KJywH2HaWlvTO)D*62lqH1F=Kj=nGkGmo35os{Li#rLt2d4A)k>(>) zzc3sPq+GtbQm0rs(d)>t=G#+lHEm%3(B?e`(P{5w^!cf_1YY5tfYDB7X4&-P1~wQ* z*DkqWyH#@Gdma~utI)>whL=Qj7h7{BQbIG4-5eA2^b@-Dg+8jRMw|cEqKV9$2P&^= z8m)`Qj%wKCjemj$G;W^ac?2zH5w!T;*%1O|OF8alOt5{c;n{JLX^0~-)vuB3UUkr` zxOniwLM|I%6&M)yoeV#!=F{bo0)J_ls5%%oc>@Gj5Xv`ed4qmovB~G0uIP=<=(v4T+sycsbKO#gC8Qt7;Gsn;pMu?1iIH zAY1PqePE!R)0`8F(B%?)+Vy8b1E(@K#enG)_rYGEX8~m!It_bN7r4%rzS<_=+WKdv z`})mcbPq~H_&BP~>Q-B*mJ@RfrYyYCYiRff=ShdFh&2s7<%91f3pdEgAJc2bE$17x z)~)1Vv1!5q6@#tLdZ<8sj}tk`{=8C83)b#+x2d&#EB^)?0eqs zE$@@AZ#GAn5YdJOjF=N%K>>x7a7V6tXsbFO}fjF_p@*B=mOc(^Ex1TY9E4AN1hyW zOqnRQ1ly7EL(!0a&F+^M_=JL&_my(cEKVK+1(+(7$SI}9)Lq$Bq7*c;AY$JAiy$^| z1WDw{99cH?fxg3^4eDx)L=ZHu+g3M6xAkTOwm@mO?guQwrTNFj>gK) zI7VQQ-Z)n+E$bwFDyA9OS&m8L31KH>;mLxNXx9ca6J4W`kQGY5KCl@+ch`;Owyc&U zIm8o#pH->zF%4bBa9HQKY$Is_IfN_PEd~Nvm(zl_qKqNg%0Ocbc|%aCUDK}ULJ+%xD zWGHNVMS`k?T7NIr*L}};04!Z~tDiBR;2RR3#OIH+L^insf1M5+otQx>uo>fJ*@RCACT74E@Ej{! z^{s`^5O~@f=-n$^Jyzm;Ic9tH81)|oGweOKGidv%C^jDN6Pwxx#B#>nY0<5zT6Hrh z^8h;;LS_7^BMPEgr7)hKF9Lq%8Dm$8_=Tc%Knqyo3=ix14e*=1zq8sZloe>FUSEuU zg9ZCYxF^*Qnv}=R^bC!j(H?lsF6Y?f|WN8 zgvZtJq@`G7LDD#G>m!hDcF6rD|J%;r>r=SCD$^=QVG1q!HnNNA&Zo2TswA-QV{nwU zu$Qh8rvdwnhqt+FLEk#-ZX*r(yKj;;;@mCHzd?uv=HXEpHf?6Jim<-|x>yHxEEPHF^*HN3!z&TCPU z#!3ol&>pEUo6e8zyH@=gq{m%j@SDCHf=B+#97P0l7QcZpSWh%3LUU}@#sUV*gVtfH z@V!y6hj~p||Ha8@FXF}<#S0WBK&{F7qCBkH9C7Gt2J~4>>rMfqi4$~MRrdsI=8tkh zx|IvqIz5QVWJXxC8qo=XdvZb%+4d1#^}B29OUrF1pYgClxas~`6&Kbo!NS|xW$puk z`kimxcuBa4LVEe9?;J;&j{c=u<(2mx$VkXx&v=h1C2XShWYB)P--n@j6+mi&@QwFM zd#Q;(M+sQNYJHL&Ds?a9(kvDD`P&)aDQ_(J0;{TaC#deJrPg|{j*PkC3&!rK`0|Y` z@JUS!BF|dg3>UGEB#KIGql<|irg)yA@JzH(EU{x`$+7g@W#-jxN(b)O^${8L*R*lD z2pIO5GbP*c%%I8f@n~z!x4kE*bjTSd<68Bkt$6=(RR_xhNKRa;R`=oRsW|c6{LlUU z4+#?Qj93xAC~}tnsQ6aqtIA(NsD`*e6ip2i=Z6!1V;SUHEL$k1<{*}=&MRYIwBzC% z+e6O9<9^(j z8aKF|AFVD2>C1;qum=Gigl#@vJWeI6Ro6M}a^ZciruIWZ)E$Y5P7(V_WcSoCOsoFX zX$%#^#@=z0hu~vT%?vu4oulYe9@xP-OHFtxt+JrW-k@&~?Uq+8~imP>a;d zqh24p1n3yv|71cl-tH%8v%s#8%51?u*0CG&4`Y9t{CVK;6qL{mC?NN+-gxKd40&j4 zb4ZCmx72du0Y8YPiQy?X`SxB(V;Lsb9|Av~}^NW96nn}-~Bc36I*5`-m@wet~ zA@h5c{U$LgTf@Qpd}rUi6A|`}!Sf7>tVU~a&>^l=39!3&p1H>gOj4%KWb|Ee`r{0QFJ}re6IXO-)%5poXy`L}yQ}4nq7KC~B~5 zQP_1rHS;aX{l|TX!lxqjgn$%vp7fC%5!Gypfn$N*yoVs>Fhiii8cB7m#gT8Sx;P+Ipt=p3EH^oYh`k~ z)R(dkZoj8;XnI(#ER1&v$|!chr&3)VV4;HF@~L4OuTdVnJu-_D$i=lg9sZbCP?D(j zu`DROjkb0m?MvASoomPbOi8c1OF z%hZVv843P^rBwDKxKpkSNa=wYHiwRiJC>>CqKk43D242-_{L_-RR+B2^w805(GOyy z7iZ+b;X4wRf_D%Xb#-usv2)+sQ`CxATLt|ovpmv#Pq;f8jsVx{FMJ6Rgkg`jKB>Lg z2nqBZ+?3hBW6aneeMQ5Cm+GT1D%dDj_z?N(uu@;gq~Nl+idVy-5RN1M9jx+a>@zE$ zcAwNDMyeyiN>Z8Eef<~h!KsB@);%13P`%VQNQ>x^VW-c>2qfNd$cX6ElpAyew>hQx zJ-(N?F|~|0S<#XSuUd!gIaQ1OM@-bvV-G3eeW$x)Zg^3)nu3VxZy5Kf<+@REXVf>r zcwoGts-&)tp?@^p3M(lBDDGz)*|KX2ENI7+HChY}(=NmOFD|ZP!>YgSH-3FAF9dJa ze^Ae?WHo=$lmJXil}LOHUe8L7zUx_>?9P?ue4iLEAd}|oqS?FtH36zmL8!U4Ez&HQ z77VM4vRO#Gb&$VD8N$1yH~)}5yL327K!2o*JUC@#_1p3yNk=q<3!}IXd)r`2%jb1X zmgL+DDOXbFmG9ecIU}ZGRAc1zN40oG7fvKsBWm}~2-bO5eRaSp0_REn2>kGI>19T! zvsgwn4=|+0j9*!cU;Byjsp+9f@sA;mLrX-Dr%*-fI{7+JAvR(YK1&pCDVqYhTREocy$2@^@rbXGqi`s4`6nD6-Wo)q$%()gL z{yWoJI-AD4p9tlz7Ir~)R-RfqCc|^F_dcYf_HT^uzs^-y(4Zj5cZhb0$6)N51}2uy z?V2!DdZ0^)TsYXQG=ELtJl)xaE?v7!&eRT!lGsEPIzV9&aXHmKN}z~XMa`n0qOhN# zM&o1OK*|#bXBqUd zJ-qYzz_OPb)~4&?E$ zTkgsqSLheV+%X=S0>!X!5A14MARs|o-A;u^;WTrU{#Wm@oS&u-hm@t*eA+F4{P}^$ zK>rR~51|9o^CtuZ=Z0&4F42Z4-p3sSpB?_yyA(eQ9D1el;yj(^m4Nf(bTt|x>iLkO@H3ml43x3=;_>v%pOIRED={VQ#h(ZJ%1nknPQQ%+M8|5_{Dx|Z`hqGZ z$P!C+rRC%IytC!FXm8WmoEx*QB`Z!TdrCr*md@Ub82Gq`wk|i~v)>A5(TqbY*+)g# z_c7E`j*~=nvib6Wi&tk9FCBz6d{CyiktQyIUL44_vqA=^&;<@;|LjXWt?x$q*zk(P zv4Zjb74lsKIaztmv(ltOL9|(}u?EpEd+l%@&0(T?xYqPYOW- zPLt-IMli+_rIGvRcm75lQ#Dery`gfL7d9#?*&v+>bWgXYI-Ut!-4$nq%J(qbGJ7M7 z6#M~_rU(enwLQQvLK8ZuSEkFd$Y99ph zm;kh1ej{m8J<4bu;U$nl-2;;zzlkMRhHk@;jyT---z;o){c%BG4^vg)pyDk-mz(f{ zl#_1dz>Q#XbAMLh%Y!?K+f*{v2XabV$bpT!Rg@|V@#%QdBaV>reWfx>sXn$Yqy8Y% zk{scQZB@WTYbf_2W%#atNm_|A1OII6+G4%1N^$a5qcjxrkUF4Z= zOj|3c^esFZrXG=_)uSs_`s2_Ma#z7(nph)?Z+k^)sbJ53p-KIsbyTks28J)+y$ocV z&+!=j)SCN3(4B#9jugainzJRpxJa|EAOZ@k<4Ka?fg*qP4lA#9TO8o9XM(>K#88A+ zrW61MhIV&de1^a$6xE7J)nh({_Ve^mO-{@l`>ja#8&{h2tmibGQaJ~ixbrOO2G5K< z?7mxVFn&Qm7gDMNXHwrp7qLI@Rr@O)3Vj|V*yP87fsFfx57nES^*9?@G4qe{xxh=` zVk>hC`HAADE?+69;343i=xQby@YV0H#}Pvbs_gT9XPFotxSLjPO0g0I7ZN912rloE zkb9kuSf-Z;?x~zhd_MS^2nfp%d zgBsgmv$!NEuEw1b@#JKN?is!nXcGEa*fss;!JBsp^A=y|adHU~jkcMUV$kr9CPj@K z3?h_~FSlnG00A3`Gg4my>O2D|jy*6gxjkp@=9M62y#M4m4U?CeD>a9~Tbbi?S!C-{ z5N~h|9YgJkZWC2qsUao2gB?pn=*28Hwtn>;Qi_|2kjI6<`lvLwQHpD^0x{+rJLC~D z15qt!rm<2PCv3|b24IS?UI>%E%-Q>MeQKt`G>~)eI#yG=)&y}hYpKQM8+e&lvS*IK z>jZ%-oMl!Yn-=Q9+PR(WH*ALLLc`>`r?dB-D;@`Knv|pIM1@=1oCrCHUf4OkJhb24 zVp@u*FQmRokW1gv84vhPtpVEKiBVqcc^m{_uM_L@LL^cT z;UE~VdaPh$o;yj79!(gCEaeB9m*^zWKfRHW=BdA6;jR&XGrUzy0eJz;801Opw49ii z&jSuMNb5>2Nf2$dbID5As?zB^c4?<^Iw6V{sPbzKU!D&J*HtHx#v6g3P>qwPGC&p- z5-qr8VBx8NR{$U}w#&a95VMcgTvsmvn>#uvcpW9LzX-nx!jqWdoi-L#?~m~(P0}MY z@-Uh|*pFWiJCNU6S3Dav@to$6eaPw(sK{N3{JT%0=UA66hV6<{?Q6xu)bv)m2MM*u?QbuFBM1973Fv31R5_y9Fy!MJ<45GQK*-U%a^ddwOs+sJ72@o_uBZxHv>>1%KRdg1)vZ1Sfh7MsAxK z{CwiIeGa+z3uC^Nd5glTVW;(xUvjnGc*{|8mnT(&2%&%|ED7a(!L4i}(!*5}F~+&d zr8MOX=%MW-(<&)ZT7xU>ry4>wQsu+~gLGEdK3~alimn|gA*qDhNLD#TwfVJOFM&4C zNsEz&%CED~7;=aQ_hhP}OYyfLgc?UfAir8JMf|530_a6>ru&6G4uOe_YW>m?4;bLr z8QI{EBw zQ+q)waTy7_IZmI@CW$1%aB`nhRB7k$nO%F(U`d!Aan1Uk7P?G5GTZFjjC7)>3bvud zfl8hAqgEPnOkDG_(9O2;CceS1U%^9f5u5?GHn>2}du|PPlMR=NeX6M;ehdk-Nmfa? zF3DV;<^BLU!U1hhQ8x??nO3KUy6zanYZVH2cG>SD^I2QcC!xjE4uSO0c~>O_C{?#Q zfX^{E@7a2SHHPV(2=KQ{2_JdO{$rU=@nPWBaE^$&wV@O(Q0DM_q&3MBKXlLqx|+iW z2OXy7i|$O`QiE?1zlF26kyg&0YH(0ROfuLbw%?B+3y|HQkbisv5S=V##KqpW5pg#^ zkkT*7{72?zE$!{98U*>88^XQnyO`KmiBp2(M&MP3+vktWa2=JqoM7{pl4A3eL$Lo5* zEtv$pXVl;;6~v+Dxu-6m+O86)_JFjvPr@0>Z50F4j~aUq!@TR~RrF{Ek#Zr3#K)|o zB9@#If*DOZZt4u$+q_F3=h4o$u>+nr2eLHrBV%SAf^aAL&H}UG!8i~#YJk(rR;k{5 z;1H|KSrqb;{HqvD*|g@Hb`FfvZ)ru_kleLLZ#=}|00&E##iiB8O^*8+Xdgz;ei8YD z-(v|`7je$$41*!N`gXIK^&=o2G@>7R3ZiOn{ri(ktThhf)q1A zq7nJ^50h0}Hu_&&%F?iekt5_871NMPlMSO*H>f|w7=yx-OwXEchIiBm@Np;TqE|Ue zzgC(&A$0E#d5u6O7|rqtM@Y5;6JK_STS~Uv5L?Um!(oSpp;A+)TT8Snd=_FPf>Ys; z3elJpm8J=*;44f;g%P0L0-y_ipFcGbNQ}R!3fwF&X`s8vKYTu_P?RUWlFM zYiy#Zeiy)1d=Ekk`{g}^NMEp9wm$QANpz@wk|i?Mb+U!|*k5>I7Z8b3zRk1~J*@m3 z*SYT4^`sq=Kk70(I+ z<<~%FL4jl0LlxzdW>!`%c;f%H#xh627F4=*jCjxQI*bk71ye{U#+0`!87P$?orJi( z^Pt`he$-d`tqr6OK$5V%F^AMR{DcbUu@Ve|u8(jCn4Q6b!|W#-xll?XozG!7F&Jdq z@KdYFl&Ll4AtY7jPtjF!317ub!F2Q^^VAr68!qHnbDW|a6aZxq+be3w5a?d zsR`#s5P8H@R<5U(sgYAa>D%i5+_zh+?20bZJHQY zlqx}@5+CfMtH^$c@OBEUC~IQuEuLkT@P*TQ5^qFsZ9e|)Z4fU?K7qsnD@qMI=>85; zlamr}$c77)(m!0B2t*yNV<+|nlTy>QDCRs)z6s}-ce!rdFr3gVLzy~&^@=I%6q?(f za_<^uN0BCcrYG%HMV2#K)eE%|<_$pora?WsTRZ(#V#ygNf7UsT;!vCI+W_TjzuboH z%@r}*xoeP0oxK@f4v~3DlAHdxh6pK3uG+uaj>rhDOE0qtf*MR{c&bNUQg7i&=w3JfeJg=%qViD`UQ~wvE%s%_H|kBz5aEV#l+oA@;)v`d;;}hF z&gh~>Q%)LMqt6*R;c)4xl??Y~LO3EO_dJl$1##30oWh8stU1d#ZuAN$+*#kou*o}C z5f<{?K(5bVs3XaQy7uK7-;#b!*>p-aQ<>mLPuGRh3^sX7wWX7tVKW@H@~vgIsk-^e ztyPzSQQ4hiH}Ub(wiaHFRe-;bC)3aY0g(Xeh65}XP=h)fee~0)z;#it9Tr@YSJtla znRu-&IW?-&Bz9I5U=Y|4FXWpG=#A;Ym6@R-QjrIvS;VTn zoeWIr@Nd95`)`2+8dvUG1Dzt*X!+C5yUnWcl&0-3^>rmF#O4TG!XOf<07^Z6juam% zNhz}zG;tVH_V>qf<_xw({w|odL`ymugIg}Ys>||U^|IO zL8oCk4w3*XNf{P!RP!}OxcjNCKK(%8LYzzG8BT*_citb{B96kdoarVB5Oyn9b*zz%Kh5snDTiL;gk}T82>=&Ty@$%o_hjn)M7bzi8 z00t?lR0ndti&3JVB|2)`n8y5xnmpbEgYb2i6)_+z9v%PVaOy}7@D4<*M7>;}(l_$C zs#RPR`*hxQZBR4tWRNW$wcq@n49sWXwvP5dX0 zx$$+{SsPOksv~`XE6v4TYyH^1R*%4dbsOX>F{djjJFu9Z-6HU!8Iwk*Pe&|_!p9~)?;*?Z1$mU_~5#x*z$U8#07?88w@xVCbrJM$}OcgX*nHF+` zvbw-s!Pc2)>ruJERoQ~b8k$tu!{|?(5K}X*od2X%w-@tjm?U#d4_b-Z@moY}xD^i2R{xGV5(;@Vw4=&Dm}E7Vk-ymcI%@pn8*ak{I5GR|=1hoMb=ga!0$zas zM!#L5n1xO;U?cr_qDdk;kL@;2mwAcwYiV{5d)?-fTNpKg6J2SIhM6tE-hBb%10fR@ zz&-(NKDE8c=wJg$e;Eb6`m4n(;IJr=J+d#(CN^qq zEvrA^LQxQ0M`iQ&2>y~66=KzqFz?S_P-qAjo-TX-JpKRwfcjB6{zl=%*uS&5ePX{- zV?S+OWvq=bJ4&RYA^1mA?m;|ez<#y^I?L&4#sW-N8-xral3$$aD9G-nH?iaar~vpR!wEX;K}7tXF~5aY+kN`%1P zHoOLu;kC4Hi?5{-aZ5g-r2qRAs#UY0&W|8CU#aWJhAvWyH zv8s-~G@N5DjNj=~ULml-u28k#?P+&Ft7s|Vm0uQ6PdeH2&}tCAX+<2GJ$CWeU5xbU z=l?o-A>oi(Ofv@L*~%sVnv{Q#!`jfN0ba3vkuc8=YkeL0nScE*PAFzlkqDnKhRZ16 z{xL*vvD13X`T8z|X#+q;4IbJ&||%x zzteAe;!^fT`f|1qOn!duU3ff1ZF4?Rq#W=<=u&#UYotM97Vw7{-^i!|vqDtbv(Q_8 zUwOL2PRu7B9Fhnp%Ipk&W^xIAddLiZKz0dx8ZP`)a)rjJF3l0N+A5sA1JIX=Y+Bjp zJ{P&|Mi?+(?w5_BILY+0002de_5>q6$5xB zAC=r2G-%`k`k^B@hyvJ>WJl{i1m16b8O6K;Z-tbp+SfB#{$Cy;sBuP~rb#t8fCA@$ zAa|Sq44wpQwfo2nq6`E~vt7Clr17nyZ2uz{vc-Iv6LoIlfLOw8c9g_g63KvKug`F~ zk-qSFm2gyFCZDsWJA=ReRj<=6v{~C%Ls+5}7}sDW@W#Me#{a%@~fZQig=rd9>-kAoZN&b`6c0Pe zKqo<4_3b4JUCYMaiEYcYHb!Jz_MAtiwnYgT{D4Mf`!4y{q$Y4T9bX)7oCO>=Z6x(v zhV9PkW)6-Evj#%x(L+)`u`jK@^+Ja{Sq((hjQIr?bqxQ?Ld+J<70@Z<0=CNG0)PMj W23f`r;0M8o00000000000000HN|%WM literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/admin/landingsecurityteam.webp b/static/images/auditor/10.8/access/reviews/admin/landingsecurityteam.webp new file mode 100644 index 0000000000000000000000000000000000000000..a0b81cdcba929f7dfd00d14098830529731e2cd7 GIT binary patch literal 43254 zcmb?>V~{4nwr$(CJ&kGG-P5*h+qP}nHm7Y)+qTVV`+IZl@wxX#ym;~IM@7cY%B-() zuf1~Z{iULWsOWV$5RjUPpuDO)2hskYwtNgo4)Ave@Kg{!8@5ylGE$O4lE$@ofA|P9 z+YiRn{7W=(suJ)P^Y@Klz`=U#j?(+{Q{GnI_pH1*r zS6V_V2Vf3>{Oa@w`r%iecc*vOd*kKrXYy6>HSxak+#Aamz|;3N^R?jB4_Nr@d8YUR z{Zjklx0gG~+XCEpeFyXb007us{*Z^=IiR+;j{Ii_b~6C zf7*TP{^r1M$FJrQ_vLwwega?(-~>c{ur~sZ{aSsmU#nj8E_Y4=-CqxWEw3OSRj+k_ z41R~bcYeW-v|o13%u)c}uc*(sdioka4uH+)&WGC<;jOQ?-<+Q-02mPT3;@*4?xX

Xy~ltBzZ-zdpP{{{{C9x!-rxK^e%XMFKjZ&g-Ev>K zd%gC6Prr#5$IgzM@A%vkfAMtY~+38ayjoPHvR zq}mEu{M#H}Mfhd{(a79uQhmR_YiO0bu~KK+AXlT`JQf6Y*~lRs=cY3dSNKneO}*^j z49!f{J}qbDvIarK_h5S#;(a2jL+De5x{wU z>*Y@7k=P(O%e7owDB`fMjd8m|SCBY`q$A)u8g=WRu-hgXq_(KlM$*C6vv&w{sG^Om zrr^7mG#gs6Tcg@bR2-&NPjA@2cPvoe&~l(`L}gV*VR1+Ul{Oe-W=VYGiH#o)m z=p&%Y%r5^QMVGTx)V}Ihbs+-=xs2ixwBB;+&Frfdr8pGhRsS;SAGg7K;_VL@G!%U* z+-=8_HK3?R&OzcGAI zK&7_|Tw$udfff+YNn26~Rl(iVZrb2-t593jz#MqdgWdC{54r96Z%zA>D{o$8AZPSF zV?9O_Vd0@{0nzUp2f9w~jG+?QL_Y70j+b0FW!AeC+rCAI{_uLCs5gj0|@>X^+` zqr9Mo#Zb;W#+9G}*JaC}>!V)4q3B>F-3+Win&aFBAYsvINJc3uVjR=MR%X;RM4ncZ&&6KOccC2;$9!*kE~C zGwxu#UGYu`A%%zDcoj=JACQbwhL#aTe6e<+&^W0hR|smH~t2~cYeyC-g~-{ zzotXH=%cwAh;;PT-Qr%jtLH|gk{fCbOIuIba+m1|cXe*z7S-+Lklm(2`o{7928;h0 zNxOdm9Y-R@*^Rsa)VHoHK=^l!ZL7eI_uPlo@ZleU;IZAW*H3cL?|W-6UcxHMnTaP~ z+IS0ND`MQdW7ToFRQ931vwsTDkCA2`d& znt?z@O4z@ezlFhnjOo2UcCKBwP)%v(3WX}JqhVuV?<5(RsQgDH{)6iRwCM~g!0ES% z(VE5@dhOnMDmx9KCK4wq1 ziDt^(J`?#}qz?9n=zQ@Z%WaGVvz@mv?es8AYSk;yfUiB}CrRL! zfBVDW-UNtEwfT)?vMeV2)th^K=k5l%WQSF8<*6A07;`b$mi{`pLkBQ zbS=x6SqHn%#x=*KIo^^aT5GdAmO?-m(xQgYB;{+!Q;Ys^V@|W{pV?-1XPC;}pvo1@1(_GbJMlhDn0w@Yu(y(+pks`9sWEIc&Ct8J zQW!ywL>5)dh6hv|cL+Z+jlf1~{=iJsg1AEY_wBCa2CBt%oy-}uCWn_aR)BSI7E^VK9@V>#?392e+Ws-rzc{AAcm0?%ddu}u z=enVLThtPzfko`X0qhgUMwb2{3LgrsV6AEv;IIb(LKfZGpzy%j?E!e3WeRsR{B55f zN_aV}qa{Zn;F&)553`<8cWGf5_gh;LZa6~}A6N`ig%LP(>Ge}w)suMJ+%G1O_&0r^ zCsC2dFKC;gg*9fb=+p5|fD$Va@aX#cSq)VVe`#o8#KnQ-_m;M#a%+~GxcA~<<8;*L zyiUEuWGWuJF_ux@OM5K3+&1NB+F!x&muM?`()(jTlkQ^l;9}U!-5_o!FLK_iN2ce# z&M`uhplI}mAiDVs@g}?=g{T$g^m}WH138O8Pivd?R%llLhk^m$6TH6P)$F4sEUQ+I zKBh6GH5I0;2i8&gwk>elPH{83UpOvNUo$icYMvB4<8j;jazbq891c9iiRH^6m=!J~NByZrGfMU>5B&v3qO>J#NAx^z$%+wDPcR`0lAtqFvelDOIb^ zSm`8Ik}soBhwpuObpP(1>sszb&M-1ExP6Ng9`Jv{@Lzl)B>@8@eS|R!RzpspgUp75 zeR~;YGNme)fg&lSHp2xI^m3BR`ld^F3Pei@TnKV@seb#k5i8yR>kOtyh0^qWF>e#l z;I2E&5%!6wCeazL%H@z@l@(!-6*e2#>@*oRQKTK@z}`O-gxN@hn3!)=wp3StQ#oRi zuy+ijGTo|!ivAT@qQ{-)YvKNIcbLnZMz=AITr8wK# zO3(*Q=s$J+0jinkJc?GU$6Ei_Vg3I1Ke$~+Iv-2!$hR&IyDA@1>T$oWlz#s2@cn~l z2KVCKsqpTPNbEFA6wLZPuu_mqVkFNJ_CVv0rg>7IgYi3rvGBFH>H|Z)fG=T6bmD<> znBr8b&{y~ix%0VwiY*eP>1B!OBb~57Gzu9IWh(fC>9F79{mfzAVhS`SSM>*o$!?*Br zCOoxw+I=g38QB3popEeikr-U_5(9-9Kqmf2QnN(Akd$Pu#OuAj|4e@S7ak?68uM{4 zt@uc39)5gw`xD|Z`OtsopnoGJ8Lv;Wv`x!CStU+kkWdV@BD9yNRTqE>fp?4T5SYvR zZ%ag^d@}7cBbVqHRDQLgDz@?DuE97c9^x5n`IPK4$)u@2NkI3l)&lGB&mWWN(gw;1 zpHBw<;1vt52!1E#M3Ed)do}HNw}<0r-oD*aYW2KltCRe+;^9ozxr$Iy5m$@9c8-NIkoD{2$FQkTqPP;?~;-C1KbwXDrG7dC+$+mZc)3jdbO@sPUq zp|1U?dHg!owP*I-woL1<^!N)qLtU~|X{$7~RpO;&i)TYFvn~8}CEgIW4*$;J{}MV* zUza*3j)7U*@gap$8C}toL|U1HoqRIAH_ij^ehR4%82~J(p|2XYXP*|2S8iqU21cny zl(TZ0$S8p!OH-(6Lz7|EV44a6#*+yfb%N=7oN+IYF-}G2k1%%II6L8-W%GF6JV=Os zF|25^V|Z+*LLl;!_z0jhwM|Cw0fP7~@Kk%6a{aOB0>$TOz8yr733}M?)&K74FPvrB zjC{4pThD9feG)wqAc-V|_Rhkr-xdKY_uoR1GLv2VD-v!S_~RmI`~6@-9MxaHBU#u? zK02^;Wo>Q$U1>IMXh>F(wqAUASX-FEZ!owX+D{BR*tsO5VM7=r3Li zzL1|8t3I_Xk|5L%L&K!-nHF^&#yF1^iVxktc5$UZl+2T3!ycN9P`W`-D)3a@AopRRVX;;$^O+)){GVX6UMz51$v6^EZgt2svVy}!5zJw2t63t~c zFxxjX(e_)W{H`TF!i%9J-5tKRG&ejmjZCpAqTDx&xNa!IKM ztf}_V`kVXxXz%+s{zqda5B>dQqj(lf5IEl+aK;F)PdCE)MIh~4W<%x>%51-n67J@D zR`ocFirGbLz!uf6b|)H%*#Vn8+?spU2&GR2Deav*=_a3iZ*$m1BIBDrT4S zX?n=h4KVt~Ah$s2HB4$|@2#ozKh-hPh+nKdZ_>V1icL%MTwDG$Xi)E2&#E5&3FXw4 z0)|x@pp9~7A!zhkr=K@&n)I-Xc7oPe84(Fn5PR9+yDJc&0A(9f#4PDV%|A9TD8&hm z6aN&unMi`h^q|j-u_w(Opct(s1_yO22okBax2fvKj(}#`G6~sViy4LN!O^zUSvKQv zMW<+h`*I$3?0l2^hQ!DI3Qm1ai3)6dHf8EEue`O&(GjeAejNkh7kg4HLL1e9dQx;r zizPM$8$S`@J=(Of)vg-7*2m5th)cgSx6#nH;nAo}EHS<2&$Ub*%3C1FnS&MnLpws; zCYj$YNq$Klrr4=<#V@yK)1OFsnLXRYNWNDDk*SF%_pzi5Ryv!COsZ#Q`S~YvGfZ0l zM;W6m{&;|Mh5Dy2!`5?kxhWH9_j9!BL3@Sf&Vh|%ydE9g0ms>I*R#A9kfS^|11mu79N?uTpz_~}4NI&b3$Ud87=JMy2_K{*EAv1dhR76T?-f9vrM|y>=&-vrF5%J{> zp!tSnBKSi)DJsw^ntq%;2l&n9GhIh6C&jfNzHy)mF+Qh_fMsbgGYt6qfG<0oo5H?O zkih`dJgenvg5f@+?h-V2uL)oUft_nWx?=ip*sDkmZY35iWpY1`bZcrCoxbn{5E3u! zYCI)#$RAH~J=(MO#VR;D1&xa ze#9oKy-nd!k9P4e)=pl&w^fgvuJ->vWd)ZG#*}_>N`$eH6^<*t|sYXl~9pssTRU~cFRltzYmK2l^AxBExMy;i8RrWorZhQ3N`?xClEtSNxnvP@5~0v1!!@Bro8uQxvEk0Ik6%4m=P>%$-{}uoq4_g8R@tKF z;$&Uf46r6D>czin>1L@FD|K=FB*BUIKcshld3%^)MuWACBjd~}SBQ7R7NfSHmjWUIHU{KVGrNIZ#JbE(SRw#P!=ePSqxtTe~xzt#eeh|M+=x zKfg{Gebb3uVr9k{wt0=Oh&G^!uQ5#nR}EP;m6< zg7aW;y8OQHby*ZF274+&#|%#Ya(~?kIP!pET(0+H76S*}%y5l?tKvi2tOHcZ9jrlN zR1v&DgyC2$K$O~5iAzz#Q2H<<1p$K&3eFtaStLUf`l0vhQozI5_m{yU-vydBXSEK3kz6Y8{VGl6w3A_=DBLXp7zg-)?;Q6z?!ihn z_hRl>#6ZO{Erh7n(h0HpoNj?hi+UECTVt+T(Me5mh6@7pwu!T#4pfL7@zP*)D5J@( zC%jV7_eMt#DupSt$gg8UZ}vLS5PtCZGuE3_}}67e?RLi{K-+A37qeF&U0T>*X8W zPkBbW_b$UrXA3|TrE#xl=}?dZVKP7-<03;PY9PDlh?fq^dt%fAvGu`QphvH17S$noO*e)j`E@8H zsQa08bbA-~6bkgp2vSqlPk5}?1hGYb`(!&lsD5+Iyz`q`7nnrWpMihX+kbC379M zX`n=KUF9HbNXCum3%*iS=z~EHDWP{T%fkmK7!8KSk5s4BS^bDO&@jA%NbxQe;@qS~ z56yM$DC;i0^a&lMQ`dZEt!F{ogr!z*vk}9M2bH_nDsK-&@^t0!mHks6x|~MOTQ>u` zhvZ2Oap=I%2c{_Og5k^8=!Bmxl{(AIw%}eI8IXj`d#hL-40G~D(9^iem;?AE? zM}~fx+jzDPpp*gV(|V?x$=&eanbf_ArRI4O+zO6wWDyvhwr>$L%7q*mj0P!QCz0}hS?2~{)Gal9zk3zw} zxR*C5a9jBCzoHgrn8j3O$WMG=Ik4FZ+%B~TfdqH33<#Yvw7hR&C>Y9IeV+(N=CpCXNh>=ZLBxPJLf#1 zcr3+ZcAfG*k^XDQs7Mn*LHV0@t() zU$xwEPghzmHfc=GY^_d-2a7Lu;LVY1OV*9*m2$ZiZrG2s6 zANvyPxyv4`>T^6h3EyO6*tAL)C{Ft!v+9EA;B&%!0npU`J;_7zl8 zC^&+&B=!Jw-e^M0^wET}h^6hrm(?9_)yILDWz_mJNZCLNko>-Lh7i2J8mF;XqT3>JM9wf?%mV4ojM^ui~9ABIxA0ItH_U z3s>eSd6twYbh~#r_|#a-%t5kb?+q%XlQrs|M}DKgI!c5 zBUUXwObHMR2jNd;<-u*}vl>(NI*RhOT@EAhsiyN&$}WZh#1U8Nr5YRVbnSSi!Zp@W}J05%e9D*fU{TkmhUwcu$NNNi!b zPy!OMw|+7rJPFBln#E}pV%Fl;ZI#4oM5+kZl94nAlu@4l!d(meHmtw?%lJ7LvI(&QNZkzFYvKnLnp~2RUL|EkGIC0JHvM5InM8PZKy}k$Y}S+!Y_ph z+A$(0Y57~k%2rM|4@}i7CM<4gouH~d&Rj$JD-fA@Ns|7rX5o3RdC1N7CzC3<&)xZa zAf?i#HA*yF#O1hm=x9OuCm7J=Wq|TL0$ub=lY3C>F$-4M^p_YnTD40zF&L-uCsjOd zG4El(syWKNXaP9cS6)VeQ=6s-JF9ro5G8lcuJ*USG%wZYhpXECH%bgn#TM- zi4H#Zu7}?SAq+nl$hB!C=$o7W0W2YfdB14|U_CTq{s>pBj-$5@r!+b(Vwq2(SxCee zN|;unxFky^FMI?Na30DVr3I|KV2shW_UWa2aX4L6QpbrD9b-0HjPp>?hHVlGfUS%q zCFeIen3rRS0H4v#~4)c+#3`_7Cw!*W68p5vnHKW&TZs_?uB%Y-84YU}1m1B1Pp6V?Z=;3><$ zrK;FS!=o*fVO=|0l^*x#7T`-|JqCp3i>sI4=`v!g+5MJiKSe6l4o-Coe5Nc5Lk?m;?5s$AYnHo5|GG(}``hX)Lm zwTTQlaDG8CJE>HTiQ*|mO@d8UUCT-g*&^w!-59rl85=Egs- zOFrTb0SOnh%yc zgN$&s?_czbBrZ)=JAbEu%gfqiuWR)yqqky5W9>M*QI?wSUDv01Mj>F+DcL44vR^ul z^Pj=-VbS}g7b1ucD$z*d(`)LinQpzMGpjz9inEB%#rQRBPP+6KxlT84u41%uZ@9Z8 zqrmIB{@$OR!L-HXe_26w+yu@mr0$2FcO(Lc7LEeil*cA8bIHhghc!1jD}442w@6YN z9}rOtC(yD_%6Q}J1FFJ4z@m z^%Rxz@`M>jm!VhqFgFHZt1-QJ3QZA6KKwt33cTodF*7z>JbWI3IDKe(?WE!c~d$Mq`N9<<1(7GdEE; zY~qMK#JndCdx$T|g15;CVJSrL)K;%dZyPuj->fIA^({sb#$qIwWN5TsUx)SYwXH1u*g|Fg)IXS430r4|W$fYX zSO#rwWfOCa%Cy@7!Zvc~dZg^};Xl~}8!*OA!oZug(IR#8k0-i#gWl zb@OsC#XHU#F!jmu{%%bm01xj#Pl4I}&@Q1kP~`pb+;&xvY1=eu$)K5e2KW^$zg;y~ z;(L`OBM*K~y1m|BJReHWrKe#S+z4<|ti(L`lfRB5p^@sWZwWt|*b^o@iG?mW)a4Vw zW(nId5Dit&ev*yls^|asT>N&J{2-!U>l&kibeI{QG3-g^8qzkPVwrKCLK<(Tl&`|qCPy9LN~8sD*Xf%;#eaWmIFHX|H?&(yziIG1r&YmDy-a%zzCBkQ)XA9b*n&ZF#XR-B4G}8x%KQiOjTNSP`>66|fK4WA+h4lswjK1nhOv!-wU7-O&sEu(qB7U;WJ=)^_B zQ<4wvJkm77-U8hx*znUS#Ym-^09th*PlOavZg;CQ2v6l`m|lUdPqg`r5BUe_j;Ni?*ETHzdObTB zH23ge5qCk%6ICc7CM0GMP?_$?XC+DsE|KmT-j|3TK;IVXz?Q2f!J=fc$2I~UV=CZ~ z$yLHIQxF&MFKLQ-M`xS7;oK=*4exxpL%1d$zLs?EiucaT>{Uc^fm?_d3Tnf5|3zV<>piT2W2# zs}hN#hV`GqL$sA>hrtUZ)9e<*cN$%&*um;_5*J);kzx^eHjmpl5CI`^#TvKck0N~% zCLrP39Qh-SIbK<7jiP#ZQUQ?kI6SHEK1g%kKg~)hPJWOPcEw-w76x;Y+kwA7o;wfd zWmUUFw+S4a4r;53OekjC_--x(0w1E5dE|sNa)^W!7makXTG>Kxp%!TAjB*0FoVM{Hm-&(|76~>2{qqj+QR0A^oyz{sS73XXDJ|K5Bb+ZL)Sm-4 zI@ygnEYL&vqF1bCN7p4u(P!`GB{vK=7t`MTSTzk})jWtGBhfvTYR~{=Yh|o4iHoF5Sdnymj90N?F zK1^_1m44cRN2%hoVsD5hM>G?2Qj$>i=ZBcw+F8=r20!UgYg1|Oq>>RT{$%5fA@`!; zE*5^&^E>LRwu18l^|IkU~ZUM#EqSgZ|y;)W(^t-EP3EY4)m`kOswS&@8wM^SQl-FU>cS{>yZqG z0WSk8$RSq1i7fNX!>fzwY4s}9j~;TgYjzKfsI*q!M*Dn}OC2Ff;v`}5){F02XkJ?f z-%*W7-+mRL(TFhb=l7>5$=`mWK$Yo0U0FF0MDT@6*7?XT2(n>jOkcG&7B-jsxSPHn zVFvHc!W^UjY!qcOHV$2l=e}89dyCL6o-;_O&~UY^m~lvf+U4W)Z1kqu8AxEBl)fz^v_}1 z*fq+T?0|?4pJLcQV*Ih%6Phs(^@>0u1+trL^$EOsmu^U21w$Y76VE>w= zj1B@@cwf>5ee6)OQkXZ)G1t8tOH$++DZdKaFt+?^gz(v!wp8C;e6OcKw|QJlxAKWG zvMvEVU=mHgbl~#0!){!~7(87`5!T$L(46hBL1tau&taEU)6cApdtJmW>L=tNPIRzk zGrNP2D9@lKI0Vw*)%%y;wB`CIy&2L|gv@gj`(S}Wx^SK;srpameK5MgpFhjhE7%j1 zTWm`gg+O?!tj!ZXLQKR|R`+P`eNZp%!Jri6GbapY2v8?)m@>Fc=kVgCr78J6huWd& zQL;5A6N3XD@bawcWqYuh^=?J4NHugg%oHghD9KkoMo{t2l6TTFH=V`4(hS2#kvTP0V(AEebfwb!s*h{(^nCD`vLWLm{4CsR`YX@a{7r=k3x%>Sx zx9ID$qjpCKVq`U7hb&63GH$Q0%mSjA9Ky+`g;N|h(V7OT4y|D_*k06{x{wtJY~bmP zj6&@B{*AdQp;~XeQnOWLlZUQb20q@p9h!&WXi0@us=QHUQ4u(`wJJc%Yt`28q>a+J( zxi2Zw5~cSd~l zRt=pr9}J4<#%)LCfZ`&t@`^;%?s!s~M~m9}a$h5t$;!y(0dTO#DRClv`dOR|*!@(O zy;sm(|61c;6K$VxYWE5DY7zO~)yM_Iy$>M5Gy9h(wQC%wBXqmZz4Jz!UWmKn%O=&{ z2GRq$nmpI}rrWknK}lW88Tov=2Li3vd*1ii zVGfK>SNYb{@n6QwT4bWd0Y6Id&=3t52w|+%cpH)7lM3vuG*f`CxxyKFo||4Ln>6Ra ze%HL^OaN))6Y2`IFRVmVPBUi>VL~)%WzC?eR#F;?>{^jo(x`9s$bJqcM`YJ8lef+9 zS&U_ZMf=ZiS}X=5`;XMV8-ffAQKWn?^nz8FqrjXL7_tMpk(07 zdLeuKpd$_!B-vG^L)_g^gx?CNTm35d%mkLP!WIo%_hAPDP71<;nt8#hw_NEpPDO!i zRPQ;Z9*k-snv1nPf&Ix*8lR`pPB+zk)hyTwc`EX&3iyPc=#t4C%;YnYcq^_occcgP zGCl=RlDV7=)@j6#9~Vwubb_i`)bid?VJ0NsEQyn`tseV-S1hA?f%_twWk`F6%{^;K zl}KzBSao#d8PjfiJ?Wjho|yQg&Ntt>+P0Y*7Nw5)5kHn3AJu2?_YtT%Z7YkUy;o_Y zK0FKGT^+$za-tllf$GMph6?g@ieRy=!@PE~xuY_LtFmzejJ7t5xpGJ8Y(&4!PDi83Vso(BTgUy#%w;70vp-usGJ_^I#WR^e+Wpfr|; z(=K}jQT4LirgYt4BS4R*Txq~(RE2vWrmq71iG!+K;9V>rIrim!kSgI$ZHcU=6vBQA z_!x54HKmJ?7@PwkmK94plMv#^J>Hes3Gmi#aary1(6ZVSJDANo+9N8@fgw||->t%# zs`8570}oOz(x0=pxBTGgSh#-jg2I<)4=n;R1uu?Cuqz-eE|3hz;(F~Bt`2z!wEVyc zf>tjHwXsArRr>G{che@rbCW|u@lRKRLI-9PNsb<;5(LDdG)#?^kI}4BFx$+=Y&-bE z{TQ{zKNkqy4`JBJ!7SZeY#)}Vxw<57m7p6Pckry+Jm}z98bpMkf8?yIWRX+%koU${ zjYiMHV>7{bUmkU`Rmg{&3c!v(OjIID%BiXcJE761W?w-RT3Om%WH($kF>h;^4M=o> zY`^K5ac6AuBrJo7#cv$vndjQvtX?xN5;HNQvXpRdT_SFE@^%m=U)E=^38H($BgVK| zyMQR?xL&SPI^y9O#3QiFhZhgk>AF+tQP=TTCBRK~_v^Lk8ic*U|N5eY+NFoDraP=n zFHyXiqHCEPzm;^RN_6k`&pG!S5df>*4c$i6m1L4R$fetm5R21`jKwQ}M{au(KWZ!c z-Gw773I4obYMphZDflx6XtRETb`MrqZ2;$bMi@Gwi{mpRMQWtOx(l!I@$I=x#)ZL- zpnpZv4{i~|BM|j7S6%irusfI`kjog6IRP#e&+WtiX~3|a@VGu8fqJ^}ee;K;;E?Qw zQYpuGZHiOGXKMbV`3nCbYakkbM&k9(TJUc z@=E&0(NCFc0SMjSU*!XSF$Z(b1UvQmRX+@U>~A$UM&Yb%g?fVbof8w=ddaP#ly3sZ zH+kFu@Ly?1uht#>4Sj#0d8%A$$O|T+ zvDZqau@9i;k|voNzu~uid>VfmRbCH_1a6cK`g>4p*0UqD71gB%l#&~PIv?zqd#B>( zc@uD+Il)W51BADI~6zqN{ncYlv#G4tnivuQD%KwqMeMKlICDkhOs19?` zMh|DZA?@gC(KjT7S=R9HvS=6y(5{Z0(W*I|ETAUMGeHyVAbI;KR>A}Hf zmO;HtWVycxpT;_c&i8#Z7=!g8 zND%Ub6E{5X7oErlHK&QaII_4LT1IIhZ6A?x(fL*g993W=iL^)DOf}T2I2lYp`i{KYCyckF4Y`5r%b&NMQ7p0ES=t`Z9 zQX39st~1{HzeR8v{X)YgR`Ngkj`3X!xlh$Ae8%V7K%Iz6Z-{^(*4^D`Wgp;rrJ$d_ zd~{ur&%}nvtjmpX2fGe`tJsRVv=?Cf7&iHQ<5gg$@yupHVJ1D?tTy=C3~kc=J5O@~ z4?AwR*|g`vsVdA@1>F4-+6v-T4SW)IY!^9kYaYe=gnWR-fq{6s7ZkPTz0f(d``<|_HdWkX~?bZicV&S~}w(DgGRkN=C(!u~dO!6$`=*EEo>IilfYS*4i{jkzvCWQzdAMk=fGF@o***Z%96vxhk!b1_s-9+O$$%P>{KA zz!JKEBQ8&f(hJaU^|t^-RY8L}f|{oI_8pJ!5|nFXy@8X3_fN0f3p`W*<_)*j10`KX;nmzRcreayB0+`h0| zuY36?hy8r7Ne*yRoAR67GrqhD(_VTdVD^VVB{N%}l$y*cCxi-(fEObMloC!Mr>8ez z0}yi13pxcnJEoju{!Nx~qHp!DFiDZ}5D9Ccdv-|+E~GQX_xV&Ln1P=!vWqzcSklN*PS}`a)L>VP&yK@_9J^H9{WRIXP=plY3O{l;-Ztg) zFH7$GjHIGsljpmRK!WoCl#PTCy%btARPMdMNtJWJn|(^r6W#Ud){!7dsIM;!=~PA( zPldH~0)*|;B1LDoS>cWe;UV3i6lP;GSu^#MzjFEr#2Z^)QTZwx`@&~kB$ZKb%H>{+ z$X%dpS4KD(#aD@E{2U{VSNsL;m<)R|5!{xH&4Oi1j+I=puNYz$?hPs>n4x1cn>9te zkUXMV;QX!Um5AiXNe1oj`@_uB7aJeO7i&B*CUV%dV=fhLf{$uVd8@B_MnR035z^oI zv2&o+*Wat*l}YU6xB;g=Mp8>^FZmBw2wh0c%YYls?C3$VI zs+z5(Z-!2A`dMJ%x{i(P`Xqo{ydY2)7;@dNhDRhVTyE^S>Nw1AUIgmaYTU`4ffD#) z&$Nz0TfWZ9U}i#Q;YNkuAi%11O7;wbQ3qU1r8P?ulVYwZj@43Pl}rLM!ym&T@u0XC z7vGL#ztdshO;*xOb;OFjCn&Qo0*O}6jANgBO^=ZgwxECy9F&Kujm&}{wArZI0R;hD2lO?RLnVxwh+J9FZ-+3jU| z7dhcekHsb-7Keuji1RLVe&>nm&~uCkvK}-pv(8q}+ zO2X3Wb3_G_&1cDnU-a*Y$)cHKG9ONukzNsEZf%GG zy))!lFzYPz2Jc_+vSXB78QDcb%0WsR52jO0>G%grH}-^}ez`KNd7`0ct!5hRnO)&)o(f8{1NYI{8lydqbuZjUGW5%e=!B;%Ih4>?M=aYE(T=y|XN$*_K zUH;6&x2d*;5SSSu*6iHgv_8E*i0|eOo!V{eGT2zw)oXxTG1Vg&5=;6Q_hZFQ6s1Iec&;=H+s;?5#I@jJ3BU8+H6fG4>&U}EP zj56kNEU{XlK_T#Vg;r0)Idis{x^>F#zoG~T2(eW#O?W(n-qX^Ld=cq_f+m4ymU1wx z^@A}yJO2enVuy3#n>Dv<6+zJV-B@`c=Smyk<{0?{hYh`i9S5$nC@1zvri@UT44ZkV zbJ((97*&ZcfBuS=oi^x8|8DP1p`I&{Qr4IKooR%p;Z28`4C-*tSoQw^R6wi0iWU0q z2T8!kYgMYh_eARx&|#(La;?;;8)+_@0MN*>@#^VF?vmtXNC^gcD1O;;OTDWnT~}bRf?qN6-jhE6(at1d175zckof5(hou znTYnWo5w8hUX`oHXP6}=V>l>UiZsyv4Yaj{drm1Gp~T>S7lU^vx_v&%I|0OGGOE%J z8GUdPOR6d4Hfq9qsp4FZ(65Csj3cTPV#wx5=ydWg|lvcH2X zCG|a5^fs9Y)u>{3-nB`p`HgeSod-Sqg{`ws&D9<2333a!;5o!h&;S4c0l_Q}`<+>Y z#F^d@yIc09@1n8k#gyDC*QpQL&^8hbs@gcJVteraQp%XI6onw$=`NScprywL79_q^ zbEtJ-enQ;C(?2y%+B(8ckCU2_0ku^(%dcz>`w*V>#d}C}LRX%G&Pgj>-~Ec(CiuxD z$mhJ#$Q!nw~&L2D@@Uo{7GDD*~cJ0djx!gIhBP*^Y2UBKGgIM;5h0U zlT82vw5pnx`jP@<>z1*;3J~4q__+VSLTCj z8Hx<~Nd;?s%;MnV+AY9UItz)O5=4dwyoDIE304|14h4Y>9Ya!Spa2V@J@4U`GS+Qe zQRkgSg6fN`SfCYExX&W=TRLh2UoN3fUbus;iBZJQ&j5R9sg>MwaZ{izS0#*98VlWOzGNu-W&LmoveX$n>yasX>6qA8zCtR5g9bSlm|E_wn!$APSx zqhOXwC+%|OSq$X(vfMdHbk`BOd;TR-!2Wk&s;|Hd8GAk{n zdU|c#AdR)eI`B*jxb;6qh=nR?(PvpHYF}Cs@KCTbz%O@+>sn>2`fa+)bQ= zJe*AiL)3K6?lNaIZzOL}KTsmVQB2yI{ZwUCCuVYVAdir>pd^cf2DPNvicIzX&LthT7B!#Ii&5?y?R^DbBF7#kHi1q`%vf#lG5ito1s<;PYLgfoh z^vM7M?f6P$)V%DK^&G>ymS!@WvpH#nZs+bNRwT~U;N@pJ*Th{BAi77j(RNh1D9;Sb z|8(47QRys+L`!o(<=ZRXnJwEmjCp7-j9l^zbHS0p#{J;YjAYxi{T6YuX3(`NIGe>Y zbKa-Bq+fya5F?H3BHu5dTT%t}_5QzaTg1|*t=&uZ z`ryCj{Vpo2X6i4Dm}Kfo;HdW{un_1?0-*(I^)_tL69oy+e`;SC(4PuH2AIEVKeEUM z1zgR^di~o(cYtiGHLn+fdJKGP$aL06>pu!)g!xyv<6E{(HFt1jNFi=|A)J!uf!+7CLk4Ej8@_;n)<{axl_=;! z$y+H(F_H33K6`_A9k(flmzUS4-p@v48mDILTPCSH%7C7NPiIH&{tsBOB%?oL0-8YI zWj$Wdz2?}?E{1HxJT2B9D&+LplC3VdQ1b;!7F$GPjnSq^pElClv~=UG!Rq7GFdFa{ z*z5%t1MZnmmS(@CiaNp%cG9@OeHW7$xEbDuk-zmaBkJcaLSMZT^4x`qUEXBr4dTPX z9)9aG6|1B{sF-cp`7dNM|7oYF7IR43eDjs4&e?U4fjgH-)@8d@`U)J42fV9r&3!cN_{oOm2pK|Hx@ z+K|XHA8!!*o$?P-XT{#8Mm1#~)t%vi?yVAWl#w*`KBD(yc4Dvnt;^W;!3bq7 z>wkPc>$3wrmp-lz^zF(gCq9w-rImw*04GEANYO&=Ab%l$(#$I4aJ1v>9a3)o#8Fp; zzqkaOcFhdV!Z0~x$xWyL!I^}MN?TV!^?Gr${S&0qPkBrdfi)3OXYdOVb6{yD3xgjk8XNvWg+6iVS0bK(OMLDL>sQ8-olG;ZjD&6#&m(erb4(sYz)C3l!F+ zZ~l}<4vho487WoDNC8WZqCkHpXiqS}ept`x1H`LN6aF57rD!Dq)2N{EFG^8!ygGY# zHVlE5dqD>im!0Qk!RvN~h=N~m@f#gNApV8bDKRX>W1No&;QM~E-?>AHNg|spg-J?_ zP30l8=o~pJ7iQ@9)iW@0QHlPE1PeI#V0-T>h7Q=GTlz1F5M5Y1ynDRHB}XQygP9zJ zv}%F~Ux~d0m_z&Sf|uncpyudsg->SE-z-nbESUzLkSf8GzSrR^A$p4 zq_916h(6DfwdZd@H3&g~y1ZOQ_z3M#@?UTCCVX^$m9edr_Ud$pJY{)*pf6`v5wTb4 zb4F?NEicC-+_Wfd%HQf)7hPnIJ4WNLiH1vlWW#29K%LkMc24!UMVePF^D z4n@P(#BjuXLv~|d)@Q7q>KU08diRVVl<%&;Vfsv<*Z=E6hV}YPPhFLQWn|L#0T-;2V&bx=mo#(xUxOWuYPQ8_?d%0{Ch5?G7-+AQ;1hPHH7A z*8`aVwC48z$$T`5^N|3C95y3RI#Y#OzLZx9ATIKziYcD2 zOs|zdb~%y`)>upEu){UiFSv!6xV)X``LFbk@?80xXzC&ZFDTSyye&z2bM$$BCZAJzu31%V?m%b^R|3xzKW=Sy% z9IB0Hp{1jaYUOmN=nYFbfnaA|U)EcposGvIVAa^9KWuxN-q0CJveafeWA1F~EG_~h zQ{=z&qZ+HF{IdE0Q_Mg>0n2xdTc-QF_19hTKC|i`Y5`HFe2H<9f8}5i{OM|Yry043 z&Nf=0Wl^mRLA+eVELw_5b~hFK8gfI#@%YdAcE+M@N_k2K3EKvYcsB37JyyP{Wt#^}wB__n(G)qBN8#y_6r5RAO(;)pJ%Hd}E zCNqKU(0R=T4yL-1C|Pr}M+OGdf#?m1$;12^u_?-E-gIO(V#MV{7RTPMZ7Wc0e3zQK zS%rART?@-X2B#J{rfZ3BsWpERUVyBca{(@j_xI18d+y-7UX}6!=`c`WmZ?hSsx!>j6B#-%OP`p7@qX|rO_fshCbY7w3cG2 z=4d7|ssE`S7>4i(pLn#|E{QkmA(z_Beb|FpTC*-I7%GEKk!>CupoT>eax)w6+(O<6* zomBo4&1_Fr&ikT5i`jA-`&Yp8z%ssXC}vtQ#Y4kSLTvlxmjn@UE6!2G$QH64`Iu=A9lwM zYCSRzBynQ=n4*pTkHownc<~VL#MX@vv7115ocM1srq;b|*)G}fS8BqE26lh2RlTP_ ztcYa{ywPN6@{d6~Q+;d=8GWhHM4A;FC%LD1H}H|}?0%OTGAJs1_rX>Cg#O)u=jjYj zPKN=Y*O<`BXdCC|N5`uo;J!`rfZE9=5+1Nc#2`F|#R69Pr5M)BpKIz%f~Cqr5GLM+ zG|0e~c&I+=pFYd0`IBOVM};8uy>(%i2|2-$)9FO#LTD+uNedh`R$?>rc~dPb)04m9 zs^f-UMlGT?`E|s`mV)YBGw@gh>|*hwNB~DTq|cIsu%9w>r_@h8#o2gzdFOxknP|&$6oniE{~zd48fhqjcc zNxa2+hMSc-Xj9HP;j)$5ae(UHsDa#J#g5x6BjWH|UMy`;vX`r=EtUHTN`%d=PoIPi zrGI3K*-2?H{pBea0evx@BQ~jkW_VvqX<1 zY)AlY9F|)|w6##w!!{kR<6bp?CO=qGWbrjsn_qN{s6Ri2-k{XcbSKx_@r!f4a!!&| zbZZ+~(itYVjqSF^Q2tfT`8g1yZU4J~Uv7PLJKI*G6dGcc?j4)0F-(d1b=aPKo0elj z>&-^-ZsOsaz+u_Z5Yw7%xEQo@d3hyQY4!rZbkrG^;|YqP;1&Yg z;uo8Pvph)B8_^VV3L*pMm!M;q+OF`Z0V6CS9Hu$=|3)-Ha-3&z4=HND$iG_79yV&v z<>5D`1nhr$f>j`J5ohbfKzThl>V-p)&)eGxp8$(&is=IufZJi5u8)x|wCzZhzovr@ z^xZ!1%Ty*CVvZAj8nh$wOx~un?m$nISiv)W=;KV(g?>vM=3affweLi zvaCUwW8GO8BF5waKqmDqD&$jy^5P>%VqT*{-QBnVn6qfp7!Z$*veaNkmOKKF={zsF zKMqb0kN`N0+abyW2Q797z)?0FwtMv&VR!JwxxJ=A3M@0sQRmiV&zzNUdaPBG=b?9t zxDzcgF}-O=>eeIix5a%fK}40e2ZVtSYQ*E+a9V0aRXl=zjP4yW47*L$e~ z*yvIbOS72`fS8VaNoxV)Q`KDpL#qOG^~F zTW&!T9mVg42}&t-)&NJC<$zNU(fGt23c^@_(HMhkzthC@fpoL|uv$nL{{`As`$?mn zz2>wle%SPFrN3tmB!ceYvLZCaHZ`1FcV=fEo+n5CHXf9`QFEOax3`Lb@XvB z6}6@%ndKA`D#O#^*HNqO9v9x#jv!H+cWBLO!A9ZDl-}cy&bmFAFWWw1k~6>*UAyt^ zJeKWQ51Ng}k`|8b9K-0s2GB~(PnM|Xz%kx+WEd;?Uek+9v$nl5mF{I3wqig>!|H5Z z&9-cfr4!RpQph)@Aw4*(S{b)k9n~YxIAvqWwSEwa5b75`bP`zX{egg80^yMOvatK) z0gC;9E@G7)h3RC=ShFhpvGC9g5@AphOLDc60EyOD^!2!3tI``Znd?v6Mllz{?fJY2 z7-52CY{i?>tlT>@*C=_M-;^jqtp6x{Rgr`h#P!3O+e104A`9sew=Rgs7BQ80-4j5r zs?{;@7TpMp#|iUlkT`f^_Lp=$pNJ476{WjGUK=J|ps=%(1Y!X7 zF5R6H|Jx%r;wTuJzf`GZxcbA`x>BblE1!`^1aArjJ=M#}FRb2YbUNm&oD3a?Sr*%`;W%HJICFQ{>2YV>gsX;G>ArG25}ug$wM2 z?76Q=A@<1?hKWhD0MQ0q{N@X#ZoIxB7`nahlu)^-z<^_^i(ZBgj+UA5&*Jt%ExChp-D|NO6+r~pz>?ld>VhLtXF^Lq2be zz-eDH2I9?AMa^#>w_xp9^iG7-Ein|cAdkpS)Xs*sWEoj!9{en$NeeKO&F6KKRg7F zFcvIz%btPryL^*RHds__lGYrz%AB%W>>zWlj&`!j@xpWK$f|8p1=}H4+c-M7w7csU zgEYf56wPx$p6PG#%J~wRtZuthpX`?ewPO`6le_ZTaUu#59{Zfs%2{Z4)tuRjFI-_f z0q&cED266b-&!Fu`;ElX`Crxxz&Js=%kugKZc2ZMauYUzg+b?!`4w$|_&h=PTc(xP zAm&s~=UWFa3Eehx?HM#{+niQHDBYPdwCRBVEwLZF&Zps^4)`a2smn+mO!Ixk#eE#F z0Z4quPg}x%CbNdkd;kPlLhIM(vNTPmRPvt!nWi>pA5xr=Ho8#7JJRfCvL$kei(@fZ z$cy3e3J7e5Mr|0aIzIjtHrZ}9+QUZ)e*6?E=X!dGXb*8l{H8n+;aqR#Kb1qx3C{Dc za!V0b+>c#>sU7L9jmqy&U71c-&6eALNTx4*KX|eU+5d{8Ux_#+2n{YxPbx&@dcD*r zeC^t$vn>;FZP!Ccfr4B*&QFE;Cw5Qu0skRmrZMT8q!c&y|2GlZD-dTg%Zv$*lLN#R z&wcpR2}_PDLcKU&awyZ_N7g@C5749a#s?CzhsNcYh#2k2jB*aaO!Og=u;s8Ohj=8* z5n-UTBO@=pzTdUy`D;f7QL4fUtFcV}KSOK~lWNH_9lqsSZ&5cZ`g+&1jWB7n2rM>c#_87h1w4k-vxdNURu!tKP1hp zAt)?JdIBjm#D}xVj9!k>DerbB|9TN??nL@4+%GH~<6dsS+}dfUu}0dGrpx`@7N^n7 z^xa9b=ntBU46$gK(Lp}%NKc-7Mt1mOA2xn<|4*G@)&RtTQ&={&70Jx-Z_9*^<5P-{ z==0NqKs@d#H*et@7ieDMsU&xT%8t;xZK$j2eZF!FPRlp5Wr`~NTa;7hpsdfQ-*>?v zt~c2$zx*fj#yO`_e7?Udt%$pMT#(!jclS1?%>uqLxmy?qum&%2>HiAXTm?(aIW&5h z00L9W*Qd($w8uJ-iKKEcfTC-pq(5`kj(R&N~@M`$3EJ699sR=}ew2k5cv{EV~4~5HJ8*IR{7vl1M32 zW4HhXEACo|2wUII7w+mLzkTVmR%J|re_Ee|J_bgag#>&+@$%Zb$2GE^|w@`u3SlH!nHpp^)+?oM2i0V5-reBdxLrl)=e7J2tA19|XADu>rI4$MHN zdw};n$7Q%Cx!X7E0tJtUTFHRS?<@4hQ{=k5)t~WxnU^_Kye}C4Z`4t|ZH5JxoQe|R z<7!gd79E0}&|wraD&1wK?EsEM0CY^D9W*i0{#AIhoEWdj0$8dlO5ro>JIdz?AE z&X8crgRz8B3(*XCIRX;$&qwHU-5Y#r7O#zDl8OQeg_dgeqNeYjXpjy}Vx(s7Hd?6~ zJ~%lM#u4-(adJFU)K+_uYrkn2lg8J%Th1sn|)^Y?md6jr~|JG>yar%4|_5=8^~<^6 zz5=eZ_FZ14t=eLus|R%|M?FfCvfi=~bw zn@CA69#~pc2dZfGgs1(r zqlC@w&L#P<)!F?}R)b3((?q7Us@FhMvv*zw7E#J94wo#eUz&~H!Pbmm0KP)5HOT?O z1VxU$Co&~*HCme=#sa5w53rjJ;T5`T@gQs z-tYcTAw|c|o}wA(tESgpU}74~0I_plG)|84IYeSU_ba|MzylTT3o!}*0&BY}-iXis z9K+iO&JDkLj}IEBu_QyECD<{{JY(Ks94!1{EW0RFg^EP@a`}}j7GX=d=%WS}z)*W) zsTox3!W7MUuHHnk>PwIGevSbjF}ZPkM5~-nY6Ntx$JDEf>aPnEnk47;5R0$ z;y(qT#K11M2JzeZPyELR0*DUC2C}OlaWCLQC!qnMbwqD)cHzSAs;&EnV_Bc9kJLih zZicAOkFd`ENI5RaRCc0hpW(jIIQp|d%z7&rXhkhZtGQ;eyKqD)TW$=frkKP{POB|B z-emS-5VQmoLM&3|`u$N6+-8sNpwFoRYnjd`a_}Z))i`qmNv_zWRvg74 zk&f+ZtwELh&+F>6jtZ~+w(Ed;in~RCSCT%Vcn@n9DV7xrZtEc}KOK0bj65_Hukm-W z?uo|`NrdGI*8ED4qpa+0x!%Brmxsao$2#!nXoH<>kBi~3URX#OM-dLE!)olryN#Of z`b5VZMrW_-dW8x z%}v!D^p;^S4&g|98gPL|<;E&+*#vHP{rKd8bB2&m{%C{L+ol*_s2$Ep5pG^xFnu>9 zzT~QlF8uxslMF*1y0-FfaQfbG@C8I@mt%g*+rqWnkzc_ds*K2V`jVUzaPxoo@gs>; zI2)Sn%`w)ZyBNBA$M-zMRG0W6>O*&PeFx_1!4ry=SCtFy`vul|V)Zn+1K zo@mi8@B+FW9u&X!NKZK(AUm0N<1=(KJ@tA4>Kxh{JF>ww1?=c!yn&M&q(p3sP|8_j z4T;1>k*m4pE_f565715dSrBpB{JJk#w=On=U;qT4b}wA21ONa400000003~~NayoM z-TsPsC_A#%*Chtha@3j#(-lVMGTWZueYU%QLHV=II~aNOmGzSdO%4Z6z_NQ=;{S4^ zGH>6Wi?(|itt`v4P9V?b`2Xll+neMx{PO_&U}a8gRoKipHFK0@DG+|vG{pYNYeL>I zL%#@9;btK)J}YLq+%!8<@O)1kRY}9hSv-ulaAtGQh&uV`Qxt7LU#e&)cCS8888-Zg zt?zBw+X02F!^Rk*N32Ob4(QIbi+6?*MVza*9B!!O!WjD^dh=z+aZ#J-CUzTsvUTYl z-f;+beAx;BuI0A3xrOu$>u~LN?c=G-iFSrOufC+pB$_~+(F#8m29Uub{I<*@^HoRR zYu}H2JV4+ghMNIVL-V@m2cdp?#7nxkk#5|!pam6gd zj~#1RyE_=&6P&)nfE=sj$C5;bu?L)YP#WrOq({~9)Cx`l;pS>i1lKbVez<=B{Dlua zgeZq%2&9LdrbiS?PT-YTUZ?9bxVyAXhR0A%k#*j+4z(HZG_E8RI)WnQb`N_>?RAzG zr)SCrNS2E<=fyFEFtub1)~i4U1FCkyqpicQ%5)*m={?JM%qdo%=uN$3K{C=)?p`Pn zdEn5`#D!=!oiC8l=caf};4p*?dLIp^niQqPBuPHvLmG)~sZ}UcbTr-kOFp`k~1Ui;KXW&cfKGn9L%UrV$j7XS%RcOiB>wK!QR9C?JvKsX>G}MezkgPFDNcAxJ zt$)4)wG}{22Mw5&jD=%c_yFG*z!@W^aQJ>oG_N%aT<$#8t6eWP;zuaEr}(s^uGmnY zM=~#Lw4S`IcJvU;GNN~4sV@LVL3!1Fl(RJ5>m-OmynRuOekpYV7DM8OH#)EB@dG5z z)4~Daa@{`iWD#75F1TZ-$RA<4TWfQz!Gxi!50&q}nORwhTZse~-gGT*#&$w98@mOT z^?=1Ai@J?FRSOVT)z-iMq4;s#3?a=*;xH5kI_I{ewB_^$n?t_fm}BV+9w_rUbU5 zS(d!XmNy1#w{h-e>2=G4Xa%zCAFfu!hNRc49_B3hRN*Zwwo{mt#dE`VG{UA8USyrf z)#Dsxb-&sM07M%TrY+yC_l3De7i}+T&^YLzm=aZh7j0{+#>Zny89hO<%)T>5Dw#~y zpXlcY5G~fs#<8bcS(WueD}0nqQ(lkEL+K9V ztzP~+m%8b^ZsRMJxWvhOk&PGnQxoPh3tr#gG4bW9rK~Sp?0(r=ScJPxUxbRM&X$oA zA8rR~kYj3qF}L&PPa;}TwylA-9^*^_Dp-InFEmNn`h0oXBWS<1KT0c0IPM^p?nfQD z?P^c9W(7S^g{*v8&s8s9Ff?4R2MTPZ{sP> zZ-v^o#AdZWVsR`&)JXrzzY%o!?yNW9z?NnH``#ipvp5qJ4~%kK#uHmh^;0z zGC`mqk?nZA6R#QSF||4AYtj5m=*Cm{=W=%BJFLL+1N`5ho%UHB{d+p2w!9J2zvb#X zvzO1ymv~afDJoXCr3UguTpnw(yYalKS%%%=fhkf{QMru`6uAId z6g9xG#ZOLCHvSl(&?ga@KI#X$qJ(moc$xCh$k6yr=mS}4j*b(sI!AE8agPkXdHxe2 zc-jvIEH*|a_2ydPE84H=qBvs^;1iQ}{4REcxP1!nz3ba3wioFq*%Z(q&GOld5AP>d za~o*mR4n~bZdT50JBYqib$rdUNeuZIk)AxM;p>kOV zZJ0T1b{2QZlTJ@0S1@v)Q7Cu5(YdIJ$G`wed`xH%xI|5JfB*mh000000002;#vLxP zxvm;)98i)G&~qxo2lDp*EpuKsG`KVNC#N|=f4um|WQHGYovukdWVpi`?^wU6Uz`5j zXogRS<(7f-qi;xoCqEPT2xpeGazVjF)3m>xZb5&qb3u^^)O&qJ?-Gz*wd`>)n$-nJ zpc9CU+h=Ulr9c$EEPiWFH*?XBx+B_fanpBU$1+|Fabr5EpA?dI(5PJF<2ovTEFOpg zrFLDhmpI#*WNx#EA^W_{bv9(1@KF%*TixdNIaN{mP&Y%pD;Cbcr*H#ZT0}sjC5w=*opp_ zAy+7j0B9*^2e}skl)x+8@eOpwU2lF(St4W->sk7z_2)*O zhdr?+ZwfmIZ(=BD@w*%LZ?TE0LO8}w{_BbPm09{a0*b3E9QNANP^^6G(|T47IwAh{ z;srpWLB2TZvD)+iGQ2ICSkm$fqlo~T^c*k0qAyG%EIdk^5hi1!p0>_eq2A%@e|HZ7 z{*tNF?^eUb=|ia4vg!(xH8tu3+t2d}s`nJ@ zdH|Y=FKbFG>qJl>+(fT`hBg2?$lApw7ZwV!JJ5uZmFndUDY~nS(pFuNjccl zyLXUh0eIIEp~}5Rdl*Lhy95`fATm9_uT;n*b7`3s85xl~sB~AuwprmkF<3M$48>6i zsKyLOLW^9EGFosrlKuyWXPvoj7(boF$&H~r?XN(#Y$oKBkBsByaPlBMpv3iAiTL7* zRz08xpu_kf$v!1M?ddbt6UEKlmM9;MwH&vEK_T-Hnxw@g*T&>rxGe8h`$!3%rXBy) zG(j|xFmvATAf|=p{Yj}4DIfdOs50aDO3)P`XlgkGm<)8bX>Y&Rwk(o7yq8&4Wc1>Tfwj!_M*IgaOPgjAbC;^J z{jK?SzeGSFV(9f|nV!)+lhZ7F(Ij$X1(|Gu{d$*1t08802=I(KzD9@Leb$mPD9X#_ z-*PyyTC4Ifel;plA%uxb!e0OY9K9!@M5@nQO7Nb4g&NL;sk%v6h7PzhnuzDEMKw?o zqR>DNCv@c}-za}^MCh~+M^D1Xyy441_6|Bj#enCAiRT_ByJ8d)0$A6E^;Ig*5VLoN zV|d4ON|(_L*b`S^^4kJiY2(r{IZ9}3Z((Y${}1%F2I^oMu0tB= zxh7?xj_$bpo=uvEp$ZqNX*Z=aVxHaTqYggtlspaNtUV@a@?H~jF zYO_;AK*MwT)k=?a>alCn;VYzJ4JNNTYe;hI4BL0zbY!=SJ!GOr5$fTUaCJqbB;{n(ikRBF}(27g2-?w|oaIT(|}a-J&fx?mzk z^D8NB+LHy!PGLp&Hb$XU0Fyl9$djCK{aMD+h>A{LA|Pw@=x?(gzJ{|&k4GnqOa06f zX=37&w~XsKf`u)E$0OwlPfG!pUYi2F!}vx2&BJ3^C^f7opk;gNd*vJMZAdh|zojz_ zyhdZ4N3k)L7>4>6kDsFO5#MrcI%MruZ6I&f@Y_teyX9QbI)>oz_66llT zsJwNgj3s<0OVob`MKnF=@s;7UE?Z%~G~4+0 zC@^j8gkgH)1aV+v%g37dFi_~vf{B8?AL@r1xe@S*0=)w&Y`pcqf(>}qq>pw&eI~~)<{elZy5CXN;$)%ZS}G^17=w%jXTH+(bIHbRWJ{~2nhF=*>RJR-k^;E-8g zR`1K3AEYYWVsQ4lOCT=67*}u5ez;@6-aOkztGq9kQE(7`@eJ)97(Op0s0?+^2;MJW zEs(2l7d=5e2US>}kg~Z}_kP}giprb+1Dp(&|L2>iDjjQ6f+}b=wegdHqO9Y=FKB?ra z*Szf!vEYY;t{Ar9THc)9ksLC-p0lGy zkLw*aR@;#Cbw@?OR&EnWlXcTyg1hnd*de=D9?eO)IJ5J2<;{|mFc7(C_)nSIH@gF1 zC*~A&s9Pp@Vmmi#^u17XrHg$@zw!kMuEr)UwFsFc-j?Dj0K?!q_0+P2VJ=m$N1Ke4 zG=2Ndgt+f{LuL}vVDLs>9`%TXFs$oJ2gy|kBiIJXRCTpR+)+97;C;-HMM&H59K9}W zm`ToFs>}Ab<=X8^yK!)u725n8gt~wMS<(SiP9jduP;6$2X8G4 z2$S3k=K%T_W|ZDnP((4~Keu9-PI{XvWH&`5ZP4R}7C-kmW^L{b_!t-n{4ubWL!eLd zBk-A6Z;741(oAXNN5OeTZ*RVeXvV?IcK6T-;9m>tgt)B8((DCR`9AyA;i!0|EwY=qRhJy zzK5-8W?$f5+Q6u8c(gYv=bO!o`Yo3z7+oOyE01~x{;19{2e z0?WUU7SS{_1l?k4B0LbtB+9@$?3{$qqW3P|RWvMo{3C&g^+&&poNy=TT7=#T*eh^E zaDP>!nEr$qQ~@O9Wr0kJoAjnano{E1^)%0PHNH}OiZOm(NedQs3&S)FfbSD;_z2_p z&l3$hlatbFlru!`&C2eVaqYxPhn@Geo~fG=-+z@iL=pji9J{AsRbT&^EKs>pRjPzY zWEa6)jg4*lCOaLX5ad++6Y9dw`KYxk4+mgkrZ`NhV>q50oKNpx<-_Ipt-Kv>8UU_3 zvkCx6r5q-0Zlj6B=TiOctmfW(-PGhr&Bzww$BJgLxB>l_kRkntilj-S?NI0_7iaFC zgKi^?)gueD7iL)pCwq^{zXDNIRg(e@4SPeX#pVdZ)$#6a*xcZ%A%W{|X*6RB=nc*g zD%5j`2@!84T=ypkOfoTCKcpjaL(c1Ov0;`n1p~`7pud>38y?e{y~DWvmV`%{o5r4PW-SgbLR2<&!8+iq>uBMEg$2f!eE3 z(-B%%du?L0y&tKgFa3kuz91tgF}(4@ctrUYdo2sd3i4WoZmKc^kPBk_&+k8N z>aqxfRWQ-hjNMo`;=Wj!jd>AWmMu{;VP}wa8@vHFSkpMaB$M#UI7;bT?Z3|kWF*Fn z{y75#Ajg{y3;NWf@|t|nT2?SUK4?ItHYDj6KwW6bi}*DihAZ17!{W;Afb;xrsO6 zSzFN%1E8|1);wS|cV(#s8|Mu+8!O*$x~byVUThOs&@P-Qt1N+9cobq;0oKN#Su{O* zw7ska!in_?8vwEd8+=Ia8?v^@`9AH~Bc_;!-<_8M5U4H~_us;vHXVbLgAGFNX$_`= z1~sA?{iJdHY6eVO0a%ZcdXEW(mTj7k)B~4}+sv)jc`=2i&FF!Mpwy&AHavZzL@xKx zMc5F)^Rx<7EXjbaPn*BP{Q>vm{ZiaG$-36BZ$%JgklJ3w!OXFNH4-`2w-U(@@v$Js z$ob?a;K2@iyo$__1)x(&*ydQT9J$MB=X9hZ5?G8SoGfG_O#)Ok{7W z(u(wFSS94EI#joeYc+wrjnupWMF|0!UtMxMliIOh82ofT*g=SyWyIz>vP>N{_AV_K zt0K)$j{=@m-_)$I;e5w5msiMi#5p!4x?FP~dOSt#&Y z8Q!_Lz%?kTYzjT>HW^ke^)$EwU#j77Qf9YRCXnNv%2{ z5Ra|(VNP7(J=gd$f5T$t9GnuBAZHlIqW$H}_qt#^0cs?b+a=sJLKj9366;oyxl^NJ z5Em}7PYgP+%MCjcE+;Bpb#PoPRMkQPsz8*FgWF@i*Idv`GN$v)A@6yr)zC)6$9JTc5>XyPC8oPS)!TpdJdK$5c$dV@?z)#U{qZ> zTO!5m#BtR*Ash7tnJqd87qign?0}J%S%@LByGge$W4Z@Ln<${v&y34Uu-B!@*0#SH z!?@q^C@JRj>#m6@2U(y;DV>Q-!b{ly25MGhjLDJH=ZHYVec>X}M#Oz84P z3Sv0Jy3AAI_vDl3l2m8WI_%8y6X}`wksW_gUF=GaOnt7BxdNfhLHMx@WSv(}l56__ z9f<&sj}>wv9yw?FRw7K&xuT724LrhU+Kjb#0b0VZ;I%Tal3=ZGM=sIFB5D%0Jn|gZ zPp8-~bIu!up5+{qYe3-Rz!M$$4Kr+e3w!AFE7TT?r5OEdxDImt zT>TKR$0GNNpZ3b~*~fT+*TjX0o~s!~_%50%JGqv#r~(2jLi<&EuXZa-#VZ(PA3tli>E0Dj<9>2ByfrP#aD1Xf1~}*{KL#^QX>Y zXnV91zxLDt4V&(*hCpktrKYh?_MooY<$U9^h<27gr6PtYQ!+p*l`$5QtTHB0mAeC{y ztHUO8+1ErsQtlf>Gi!G+Ner6%cA%IH@=h1)mF9FcfF`+H;sCnII|?`>`mvFKC%E3r zoBd)8*P3w}uh;U9Z}4$M*wRsO<#iRtPODtNSWgfB_)Jngs#N%<3W#`_9?6g~?o_4f-Fx=%q}t}`&W}1HaeIWLxh?pZSZ}!HswIH$m_xstwA9y~ z%h4u~aFZi+CE~|d2@mFlzCu801v_EJpHz>-Hx1oGz2;)PcAFOonXlZr}7ii=F000000000000000Mzh4J?h(FBB8y#Z{Nf!Gn;ptx?FJMOUN;OR zeTU`a;OF52c6o_e3U_y8fD9T!D<}(DbatEu`C3HLqOw9!hp`k)C+H~BnYHo%0nXTT zT$z=JrKD{E9N7iFbK}p7GGhh)8CH;i`{Zf&-aZ6fNPf)igGSXp9Kt%32Rhx>+sa#; zFy5C&W6**{-#Un>&@oE77nC!}gx-d$dtG8&70-f!)|KSTX&zLullh7)2NM*lq-v*2 zbxJM%ot`Sewt&6BRA}0Qa`U&rCRVYKj$MvV)!bU00FiGpq>&!{sX=f#O;>MSEH{C7gN11>SMH(ffq~nlvZ}Ym$QSBB5<`TuUHbv3y^8yct&QetTK#@$G2Fy;1 zl(d)H$f)IQ3Ef+~dt>6y?IEUU2fK>(pJH&B$Ukipli9?skZ?s$PvE51Qa|QDeA&G# z9!P{qDhUkxUjnej$i669=H$FX?Z~p}wM1p_3TJ zXCgo=qT{pOO`)tA@MY}IE^z*^+sCl}DTkKxDOi=y|NFQl+5yS;zOn{x zbQmcoD1n(*F{!5si7^}aR+?cDh7v21Zc$c??gsU}+I!lOSsf)Uiw&BNG$<`Q2-%F+ zC_Bs%UAeHm%lG9O8GMQRn$#qY*w0sW%ld%H3;KH#Zn@JJMw^f(VDdE)mCkyPfg-#k zIa8*&_{Oi^fYXC%mQWB89m=can@a757vEd^>{KPX>kk?>&es1w6g>YyPkag6!J7;f zF&5HWVYp%?n|E>!>|z~U_kHNzQH7{P8AZCW{c?ZDQT@&Gq7PJq`{QttY@{gbu5NQ& z>(sJ3xBd8m7pf*79NxW11)}@iLoS((?u<0IVoqPCxfm!IN@mwd<~k4dap@ zks{ptFG>qEih?3;ymbzv>@O^Rr_CZ$-pHA7KE_RkC>3g&;Mm>tItQwuwYu6;)LQlU zU(0k`ImK@nlXx*1%7+8~8d9@+!O8=EYZ#r3n4sgnc|Kz!bf>J72Ix+0j|yyQ%3Ka& z3&9jNzavFPI#`DWFy`EKWckU;GUqYsANU(Jigb{mfcSpJfx1bCenJOVF*HYN1U5rY zF*mo^)`_TZIw$(MNBjBke_DMc$2db{C&10pa?#r>BuS_t%{b~)mt3Q==eUs${b+Gg zeTP3R_X!lpRVL^ey293_0RSg0O<{}naYMmH5Z#AEy1R)Nu#k+ zckU@O!U0FT)up`QapU~-XcLG=#Zh1RsyaOCT?iv-;ia7J=SXrRV8@s7S-w2jvFX1&A5A??@jVA~yDoR$1n8e#`e}nm~ zKjK()nFlxj%hxdwZE9v%mQK{;Xg`b`oR^(4RnHS1}( z*m>EbQ}qIP%rIb$6tyMnEW95SN)8oca0;S(j+NMoKZeRmAfOxgY1h=6spQuX2FZx) zcd3om=<&oC@Tx{a&1ANm)$u_twm-IK$~0-CONm=%++7N9*6Wtuz3=}TCSM$lIOE^p zo=vE%-FxTOLDY7V{A1a4++$c|OHOz&(zYoeMgq^AjH8>f>{c_sG;$F}XpGKJv?&@h zME`iqid=(vNA$F~^nk^d6!b<>hY&u<4OBrj5gPA{3cj7=8AeyG9le@T<<>!ev?7J~ z!aU2;0EJv-gy;CJfFXa!6FKi(1N4KIjrWZtAFGDmzwe9i7E z9BNu#)Trw^h4*+p_Mme(>sNXuXx>Yny;q{{ZkDanZ6cD@{`>n{4Q*3b)HeOiNR z%kRvEdzHvIz5)(jieIjNx)6s`;_)IJNy_2p%JZo>A#1ml7t-a)zawORRhmK}PBZ=_ zbIeO*2+?B&kl`%R$dPaBzSko&0|cWFW#!*$r74t_Ytd5$-)vfZKYZLy_K)~FN3wo{T=e9i7BV7;x$%vv0* za>j2h8UXt=ro;#f+oIQmBOz79=>;%NFEAx&rw&jtrKyTP6cpuo^;f1#x8>>Ii&}J5 zKN}El(Bldc7R(eJkfE{8`FrK;J<_ipgEZ>C;~YfLobkp>moM4h<#F=OnPdKagwSog z*rpw0%BPTU4(cb)$*j8j@(lK7#5~Z4T$Do_hhQ_Vbu>IJ`Y?g-b4ST znE+{pf5NrAOCn}jc2VI=E=}zlDTq(Sm_;p&<~i8_Jb?4*u;TP`2b$q8OF-uNbzs!O zBtCVG*a}8!>PfrteJ#E6_&2ILIngkHa#TnMGWwb(e$qXZa-^O-?PGEUsCr91TdY+& zts#r%F^v=&JzX@82Nd@a8!n}Dr!G{dQt2we&)HjRTVvWRtiA?QTK@zMjvak1?BP&WdvDc{JlB%xGSIdzm{%_w~4CYhbMZXr0d2+l1>!EIp%&q1+icMX$PFS`RaGf zl_apv>{L3m0}m`SbBjBEH&Avr%d*Ue%s9s>63<)0R}(~F0zjAyUT?{ZO5EMA9qnWW z^2e~aurXJBwUrkqL#2b%MtztE%G8rD!GQf5Gk%*%GEq`Mm!l6NdCKF5Gh86g_-%HE z{?TvC=pOXu8ADQH5PHvf;GVoSjGEC20n1Cvtxf$zm3api>|mA3hV-jBY;vPOT?{sF ze6Xs_poKAx7y)nRp8VirNTWiBv_c2KaB5@gJHW0SoB#>{dFw{j{(H=)MPDg=hB?p81%+6lRbV+45#8}w!9)Y8^TJm=~s{Isff4~vysz1MIg=ruxHP0L8!Nc6p)f1;?~$H;#b z&~?**vFLeNh(6?1#L)EXaCX`89E+M#EhQZvUCh{>a9KR?4cN7Tj@+Vl}fye?ji(|1G_iVPHrQ^Z; zyu>b8px^7yd}224xJx?tKZ(ry#Y+8p`#M_+O=Nu)*TqSCs?{z&urs8y{3i-+kER_&Q} zx?fE4XI+xp5O1Em_SBz->)KmZWUO;sKBN%uo6VTh>~S=Z9z?@)?@GpRD5U=Tuf$f*W_#IGVJg8Czb<)k9GHCKF{QY zl8z*6PwSMzFh#EJeK??F_hYa1X@4o9nAa2AoBQCtOJiaBfcoq4tZsvi#gGMcyixkPz)J|o6vw!9CjY?)2Q!G zaJ`cJsS0WK(nnG2(9fK&)@d0WJ(aej#EvT~bdFeJN>{lCmmT7f9BPcBrS>am5Rawf z^mE{Yf4aK}q{E*NC6>0IZ(}Otx9dJ4T;Bx61cH_rXX@pz=tTO-mERIX+S8#=#*9@aM>VcNC=R zE`&si0)*Sn3H(&@OQr9mlnf60@D#0@-^FF&NVbQ`?bILfSk$z=u;R5SX8jpMDV$}^ zhExR0RPm)JrXcJ~`wx(UT*(YOk`ma1pXEs*GhEnzwX*rR<&qscmeuMSBw~>8 zf_5c_baEZDjz#f@58w{u-JyQ}GzfoHk4Ne0pzY4wB={!&R=zTGbJOnQK7r?(6SBu2 z6{s{|VylKj8(2FYAz#e&jwI>70ZoFmfgJ)4%HgDFY4cBgG0m z#>EEiVw5fKO+@rGFV#IHUBz9}--kK*w%dmG;ep{D|LNaE z)SGa3?!AJo*>nKB%9q`jxh~;n*O7Ec6Q4G))HsqE_Q4voOnt-zFwh&l5!m|zy{fW` z{lPVm&dhI@b5^z%o-jeRe6a=G5jmw|xXk&_4dE?yT|BCI zVRLJYoc1(8+|eA*cyMg00vb&XvMm4*_=(`JbG!-9VuJbecdtH-ye)?lk_aZBLje z9RI9KNXhG$Ljw>`7+$_MQou=YJmW{8Isvg|`B#rQ&0ERNX|ZoFO zAVNS&x^mHcC?K2~uErN3nQYFdB*H%Eqays^#Q4~cAM`5d4GM)`;89`A{oVs!^%7wy z>YdjeWPVm<%WZgl{Ibsie$!fxSG?O2GtL~)Iw5`{LYNlN8?Xj%NjR${W!3@m+SxLSK%*~Q^MNVJ<4p?N#i7wSX z4$&Sls&F6%FZeLnZ- zr~m)}005G6)^vfGTWnMx$)hH1ii~s-t00*JknU8GIW8F~DJy7eB^Xa1nckCBTWzvJ- z`EmeJogcvt*fM+M2!N!RWja;Hh^>1>UtMg}uhs&HB=8G~JEIInxwrVHgb5vl3;_hm z8HdyH416duRRg*i+)z;GOo?dVS|bmP)B;ebhO`}d(nc)4#cCz$+Ep4MN^Kia9w;`99Ss+5*D6)81l zsc(A`p9;RzubvF2g_5&iM0gxQK((z~Z2XZfiQX8TegaGQK=F^Jp7icf(tf}~a7Be% zX&_5%9Irs`5=F?FHOst+WcLaVjQV@R1@LGK`d_plYbDj2ap2JlIHC@rgNn6toEH#& zE!gX}-k){B=BwN!0bMc{Hf497 z#+8v?33rvJE#4keRz^%RA-kR!VI_DstB{+8e37YiBOs)!q zmJy1)awcV$fD=JZtX6{fNqN+&;aU9o(4y>1vl05} zv-@jTyw_iOmq^{cFn>p!Ee;!U?uD#=z7KM; zN+-{y&Mp2QHrPUJLJ(|H1V+?RD776`EKf8H6zf+hKT>Xh0001`4v(Ix-f62)y89Do z1d^K;p=u;;dQl2JJqRABI(RA0KI<;Qj>puHX-Jq%CPN_w{kZ|+p>VaEM}bEs=Ouw_ zv*@h$90w2p01OUuJCfGTD4Mfl#Art@us+lmjTnRg0000000000000CB?Y&_z&!%h= zKI{BqGIOygV2ZS_5oFKGh}?0(?M(mj4ld*t9Tn^UjyJ*}mi|$I>8C`{U~>c2EeUzN zGN5J*Ep-Q434`CtvQkN3i|o-0$)gul^`%&d?L(^KXV?m6)J617fo3NFRz>`3mP(q= zpd&jOKld&}$iO%Ntg;q*-xKZK&b@AQc_6wBOt<0xv-e9wCwh-3J-?j#KQ*6>(EILrgtn7zs=^izMSh_d~ z`OOgQQVX-ZB+eCbipxp6mzzqtEN{{&B*wZUp)I0RuSz%=%{eGC*U%PyeJ-m`8c&E* z(JYu?Z?R)^N2uYJW*iZ$ER>-aTx>c5lR#m;@jV;#JoeK1Mv%3QavFV+c%@!t1h^1GovMZOHX(f(NysRgH#dL)AY%N zKmWNXOy?JU)aqY0ELJ_ZZlt&jEu5{k;NT!NDI1wc>hiCNY=QUb|ZTdT}4Hu>Td^167 z2Tf@F0O=$*&uE59^lgQO(^FR!W&cI9NfCdsCE&7UbFq?jS&gj9K~iHMzYgyI|%|O zNs?~^PO?KVh@?}CayOEe6wWj%sqSIE!CR0ML1PP&_pGmP#`{R!Pf*+dh_lea+ZI0@ z=BMptY7lZd0XKJtjV-cTiK`k?$!@)nX7|Llm#4Rx0DM&uUd8yLWf&T5bs@ZR`PYFy%QZf= z8ZZGv_&Fl0prZUgEg-kaA!5vA7Q|EEM3kw^;B}`+(sL}$56dJy^k-meDcH@)0xsG1 zC0nt?1MIMOoJg~62?hQZLW|;)UgJ|U>pM#1c9Ng*$6li&$;%}+SGoGWg__WZf{#?} zJh{v~1KpcSP+bg*Br?(&kxUTbECP9d!+4JD*vr0Pc;ciPkC=JSCN1`5_2|H8Zk)On zWK@Dzbv)1&;VhJydG@v@P{}h|5CY_jN9XNNx=l zNAdz1&Px&$XO1oMF_ZYg|JKch`peqKi7jH!`zG!=qlqZSTya(6y$631+UP)A8d0Df zO#V_N04|T9&Z-Izig35k1@N8`Hk)4D9gdWCSl$U2wBx6B{W`IL6-YxbepN9qtmSDT zid7kB<=~4uXH%p33LpDc8U3D%Maic_(sg5TZmR-GVP&wYb z?!;N7V@7}g00Ub1N>u{v&m6>>0PFw>@bU}G@|XYs0GH_boA1Tz0eZLq000000001> C6!2XD literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/admin/login.webp b/static/images/auditor/10.8/access/reviews/admin/login.webp new file mode 100644 index 0000000000000000000000000000000000000000..6cc63b05882acba8e3dee7f804c25a86d524d3dd GIT binary patch literal 5742 zcma)-Wn5HS+s0>v0f`}`yM`EAL_)e-x{*d2B$O^eQo5yKfFTEtqzsL;(ybsO-69?H zdKAxj-uUqD4}0Igwbov7U;q1BT1xWrPe}m)eK~0jJq;mxqo48U4j>1}zK!O3N8DK; zT?xim$UyIDe>WH$W$$vOLb19{U_88@ecgP;vy2~Sa{nAHvwbSA1P`0=Rj8jhL3W5vld&H&H$gv^fM&z( z)z4$DM^7GKC!lV~Ksry}GLVEge!o-BJ(m#OQGX89C3EVRGdH^OZi%pOq92cFs^n&S zSOodh9WB+PbnYrrJWG>PRT9s5gL%T z)3X=uX5OvDF-suPd@&r5IXJJ?4s?4SgX#b5z@ZXs{#MVnT-?&7=Kjhna(|W(E`7$P zb#Dz=V)S%`$B%f1a0!L{Q9JnHo~k*0v#o+ddk1v;_f%neAVfblyydAh$DNsPAS$NK ziBiqTIz}#xFuA^V9WI7UF8$tfrloSygyFP`75~KjDICS8D!PYlil~RMi+5`t^uQlqzt0$~{#w9sVEt{Ws+te99-c1JNWYr=0fOU@d!9IUo6hF~-fiekoFN({y`Uo9=wE zvWI*u!*a4FmtfBdhN%1d?;AJ@G}(8}Z}8tNRN$s4sND)J1DB57BD zZ_VkW=P!YS%Px}sC`6Vgo$#&%pQuK0{~f|y-=00!(IcR5)M%ie>gc8(b&vMR!(%Up zzwt1Tj-L93%po-LEymxvUo4rqx7{SU06V$#sZ3z) z%8K=KI$^Gm-+kutXir#he}iIKv-Ue@^YJ%Cw*&>k{*ifo;gU_0z$QKzd zx7!g{4s3V-uBV@=Uz?B_Bhj%T|0cO*xHt45Te0Jp$ShXDw}_zK`xCXf5@?F_G=BTL zKi6|l0h}HFd6l-Uxlb!fUc=Rqs<(6q%@pqZCZ-bSk5Sag9X$VC zgc6j|cW%r5{Gjm7pn;uDj2H`?M4m0owIG@Dt3;}}P!N5x@4cRO8&zUiR7H^xxuMet z)-5m+TL09;v64YXs7V%y9aamC!byMc1mJ+_=(G#3T1)LZHsPSHkBsS78eYoHTez%9 zURmRCpu6TZf7(+oo!C5`v*v9*2WSFW_#(<{a_(t6@sbGI$cRrl4AV~0Q}+%M2?-YcrT{-2ZAMt8sY=Rz?v9+Kcm zA6orh5C7M^hjHFT4$}q$ZcuyF0Fbazl*{wWyJdY&1n@x~%X~3Vr|*kV5?#v=3bGB^ zO|9|v@QGapfa-R+bNlYh{T;qnE)~YEHP8@+P%7$&%G^Ge7x+MkMCl-0kOsDwFGEYo zudX7gmW5hA-qXLYo}uOnk18DSaM6hEB=HxE_7uhJ=9q5rY`)G$T*$_Z2N9MUkAbp{ zs0*L!i(fYlvak{E#czu1Z&7Q9DCdMeQYt17n|!-EfSzJRTXs*aMlrueGg0lbMRa)I zqrtalvOf{qRHS1o;H8#ayGanZLpauog z$GmwJ;e>bo@8rld* zsgoa8hC_1<;h`w8NZ_@7)kP}x{=jkc%+%PUpYP6c(g5RvB_$?Q^|9j@Z(sZWE+;_HYS;;taVl0X{u}l~2RDFJ>kAFz{;b zyo8hh2r$7GWO6-prUlF36wJHt(@#Cq(bF*<>auPCgh$G};22l!^sh)+pLiO~qNT_X zuhml7l2v*O`Fm9|J{d>xNJka8g01!rB+fENZovEniM4S3Y;~Us^?VRqzcj$sr(NM` zy0^SX^`}pfxlDX%R&bU!_wO7IMUCB8fk?0l<{BVS;kB-*nEiXm@O3YRp;ke3QiMDG zH8Y=`zHR1u@H_8I^xP>6tIquq9Y1rl`sg=(nDsA5aL=w^qRXl%4xb$6^NJ`J zReeWdI?_#n+`Xq$M;kpCs!S2YlZcxDmK2&3X&m7i{ZXxL7?=;Ge-`6l{>C(y;s=XH z32R4(5GFf>KP ztUZ4=1N5RbpaV6hteva$UaN>cLQ0wDQC?&3)rn$2`dY;2$6 zVJXBe3ggPyJX3_;X#RJJag0Wb_d5_tRImqNy>E}L*9T-{xY8IW-A;g=XDecYgcuC~ z4(G!e?G&-hMBWaIwsD;KTH?X_NsXyejkR86ttJxmmz?W)&s#~g0bMOocHJuN0){8x z>XUaf;9@-VqSuR4*W0XH$?j}YFRLUw=l3Q$a460#Sunyp2v0-OVv8q2O&QxBK&`&feK!rMD^ymb`Z z`+a#u@k~-#lMltpbXK*#G}sZ?IZUleOLKFcG(vkfmik)`)Au&vLyK zXBRupgAlPBUomS<>V_HL`T5H576&uWjev{rq(F&BZ_||E=`d#kz9nG14($i?hb}Kj z$ESj%6{~uWqOkOUIOFjcu!V)k|s%S7O`?3(WF47!<~zcAm=#gbhPg2 zxI<$lahT;@?3^5BlEzH2)jv|>j&lM%vL&5%)_Rd zK98dY>woxog|qg-E%epK@pZ?eN5NeKZ{j#UiHt>6Skoq)uhgg^mGtjJ+J@hCB?Gw2 zN0lT2^e?HFB>}iDnokki0t$mB4;bUSS{FXbdv=~RnebD;-V8l_)?_D4F&g|KJBV2s9y9rFOXxmCp?C{NgZdo~rh9J41zYY=V6&+l7+1x9?w518C-yK6Mx zJY0RGHXBXkf$%OQ8msL~4JYhnFs+ms#=~EDqdt!Cp<@;R8|ESS>x73eU3d; zO1FG7@ggVy{CXS2)i$Cza~%U9WpVrgqCAyLjr-s%&DUDgyaugZpxS;P!W~21GDPZ+ z4~UD4$BX;D2cPD_jD~CVJXFra+g#o1b4!wRTA$8L_0?)2@0&J>WW5BSBr9;|xw>cgEYQB*% z&^!`pn6LE)fuuBaNdEJs?3FelTsPvvF)#6=H$tyca3sG^HRGf%7ytk=4d|ii)>Nj_ zWKy5P;)D$FbxHB+{IFh>dH8VHnp@HCb&@^oZXEW0?Q#|A3Jc?MSue|QWyMY#q%3== z^d@IpJqJha*&;-&KuY8PE$eT-$v6 zbI_-*=E9d?fqT=m!rU0|@nHZfuX?bC=}r}SvDhntI?)RNM89(N0B93rccH@-J95p+ zslq{)5OR$TyANq_A+NH0v`)Om9*{?t?{J;SHokGQj8W1zEAaC)zn)ga`Zx4h06^Ph zJD+~=R};>}5izHlIL#x9{KAvInHyV&Ak_LXD>WGJ)tl%|=o4lRSg~hHb;q0Yt;t6& zM~PQNr!L(9u+(v`cRZ)!hV+ylG2w*I*>RL6J6d*tQk$oCm|-ZlviUrmMe7JVpWx(k z^Y*+fQz4z?0TxcDig6W%QNfm%i6h+0CFDVWGJU8(UI&@4Yt=wfjfX7nFc`(i7%PV zsz)9@bhqryd2Tq(-RifYW_AH~TBI3(D=w>(%B`u@pjkSXENe|-I!F-4#7d#0%h#)5N4-w$!}od^m*wXgL^g;|Xm8bob^xe!z2eL4*O~4r; z0CbHB-1zWtU{8t`^~ z1A+QFC2Y6PkG%wG{2^_yILWB)LDGA5QE28*S)B`2AM9|2d(*7==s{lsT)4wihgGj^ zZ+cB*Lk)=dT9OruH_;;bVD&TaB2op~KjYU2_Pq&e{`~ypnInQkS?xfe+%>cHFr@Oa zuE|Pw?Fl@m_N&$~BG|fzW3#DZ8Ijb~#&2M86uG6CCe*i9yU>GV;7wqz6;NmP1&I_5*OvChe!2AcO-z% z!d&KH!T5D&M-1GHfjU$Zs)@F!HMtHfpxZX6+zkriOKBngYh;C3 zUf_ZQvLS{--qlSH5+(765uVHfTKxH;H1ScK?fg`L`Gc6fl-A-bwN OYIygg!SG=u0PtT|L+6VC literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/admin/troubleshooting/logvalue.webp b/static/images/auditor/10.8/access/reviews/admin/troubleshooting/logvalue.webp new file mode 100644 index 0000000000000000000000000000000000000000..35c4af20777c849f5ea6eac7532eef697c7ad76e GIT binary patch literal 22654 zcmV)sK$yQ$Nk&F?SO5T5MM6+kP&goJSO5U<0|A`@DhLDp06uLrl}Dr_A|WS~YCwPu ziDPczbdEq7rs_jAwCBnFdGzn>{CyU&b$&^H`Rf7o7yT#ekGS9V-|RhrKfZcu|F8QM z?oam%)KBcE?BBbeqfhRBpdZ)2-g>qF+5i9UJN@(i=l}owzX3n9KmYxyKluLid?A04 z|J&;W|D)6c|DUy2@DKm}YyB|(Tlo*>YxKYA-`>AwzpQ#|_@BtXSN_rdC;Yee-()}I z{C9e1@;~uEQ+c2H`G3WK|NsB^oBUV&|M4H{zh}Lx zerNs{{%`p&^_+T zWB5U15y*j7JOK*u#(QngRe``Pe#G@AOK60dtGWje*??tg4gq8KC#f=9Lz9L{hYYYG zJu9sy7#%AA4B)?*y7y%#k1Wt7qV2*ww0}wX=Rh^{PnMzt=Ys0Q;cc%{p&HPh#Nes~ z;323>YL;^tMArXOl_v*1NJE1{JG74@o}?kPrAg9)cR7V}nPTo;08U4=*Bj?ZDgN&e|<&Y{*Rq|Rp+4k~TUXO#>D85MYIqE_j8WG*3c^vg1m)C=*@@X(e z;@PG;f+y8msnoPt19Q~hcR9F9rrec56NPw4St_*I(v5YHfB!sF0t7YNa1rMos{fPJhlehpAwjO>q zPcm}1z##JEz4?z>!i@ZEyi3*4j(1M$Y4*NB;f-qA8_&Z7Ywzv{KUlQsauMX)6fkv6 zTY8UnOQMD%;{eOa5w^gX0&BB1+a8DMr^ed-Ab5+rig3K5hdk0YL>Kl8l1w2vd6s{{u< zMg!Bd53B(!>HpqPzu%pG=tYhb>8o?k{sm4ml(NkKJ*x7V_r>-q-yD*w^ml0A;9s}?o7^fOh?sFWss1t&NOAm-m>*6iV3rUa?R!o$w|*Kd-)SO3*XPh z8uF~QTo6ep_J{-|jY=MChK(@nn(_tU5DB9kH|7~qq|W?Bl9Cew5aNyd=6FZNx+9`+ z-!BH$O@kP_q?Sqr#O$#a41{!TkhUjrEBscwT<@&JA;F;?+DDPkQV`&^DKw_AJ2Moe+(*(5!8}=K#d2XTCYfC;Vg_Lb4Oy_$jKv5KKM%*d#{D*te4)s z0jqU|(Y=sWNJt3TwccRePa`=jq$1Txf+m%n{pEqk4~>sI-w6*w{X=U#P6LD*`KF`0 zNb))ALL3?q-ctRyuz??M{XP(CiKEajTRKMH+47!cv0}AOA99FN@U=+{e5>XoD+zD4 zN~7zzFTmX&B4MiNUh5-U2-cYdN;n`q~+ivfUab*Yt# zFz`hJ1|5Ew8GPHHTMbdxVCQU_F!K5$1(@^-*i-ky{yZhk2Y4 z{D6Ky7*TTCc+MgDL%T@wIqE_j8WG*3d1#I6P%2lu!0SVB$|h%N4hYn9iD0 z7`PJx7;8fQ^UTikayoZZ`_v#kX!=t~t#-9;X4ugWde+ z(L7CqWYy8QV*4ZRd_$yn68tWY`h!t&);bgUqSGI8xzXObIPO1<4MigP5;Ek$6esO? z^jN~$41ODa2x)yRfIF~v0D&1C^&t)o2=3B6j(SfIzZw_-{=g*{jmjJcrMWrssy))* zLgzwa;Vb``zMO!Exw2be1uyB@9Sq(cS?}<(MS#8!J{L{TS5`@Oq5=8~)#q5>Sko6E z8U2Jzv66bRAvDi1Y9QYftZ+-EpMo%@UJlm%Qb2$?c^P20(mVuzk=XjNCjy3%r;K-L zft{z2-Kqh&{#XE186~v5u=!Tgw;`Jp#@p;qE7rAB*2uysdjbC1*ZU!nFp!UINv`J? z!4@K?vHSCwjJapwxU}VMH0FJ6N-l;Shc<}4uH~O<4&!`4fAGGZ3jA0jo71%g7v7(9 zk*+abadl1Xed*vjv(xJ$QvoH@kuA{rfb?e7gZ+J5PP1UD zU~h2vev*pn#Zm>O50g?iHflD|N;Wjiyl*jp9;%UxBgYyhO~Y|<0bbYm?NI|d9||1n zu4D9b^LQ>1le?Qevb1j3@M#9KJkMGZpA|YaFB^L~F2$jxV`f+S>mS?4iTO4YL5es;=KIxP-|a+1+#<;O&Y@ld@< zy8E!6it2WJUcb~bAYM9xr;)cl+@MvU)lDdEkq!8lF82>#wJ*G3aEeMzp8^ZwBJwX2 zMoP3`ONLeSBs}L|iD3zPL^fCe558CY1UhnQ0=9AV zvTK&EDG`Tjwhn)-Peeh2P{0J(lU>c`cOWyjbd9zXSX{m#9a2>}r4(L}?)9M6Vm*C7 zt5KVUOuTDPI2o$wuf9U^(UtECUusDSO&>?a6AbAL_DkQm$vr)i@z{ZeIB3KUf5Ezxu_j;atV)pKdGfHU7AW% zi#}bSxaz<2>}+Q>W0R(<6Rb_T(gq4U%iQF?=7xhG^U~__kMqwT4Du#wcCVJE2=-4S z;lGa65Hq3hq0x3eM0HENoRXL{FN~siLmvJz-!Bs107?GB2Dc~2^+-ZSOy?8!Jt`WU z{+?3%_g$GOu_n8nJTNsjDaa5s-lm7P18wfm?5n1YH`^V*-(uJaR66BT5fkM2`lq6R z+9S*mC!bVYR=b*GYVRFGp!Z8)VvEyYQ@1Xb9BFyEEQ1xHJ;jh)5-k*J#hqMdm5D@9 z=a2v%3l<`t|mVNO?MslfeLlei_(guY3~>Gf{XFo_rCI0IoI% z4g3sv)nQKq7) zWelR5>D8NtsP|45e%+F`_vE_Z)$3KiuZ5|}!QQa6YS1xsx|SfMx}eKQZ8zrM%xqI=qK>#C&kN<{omim6YxlC~au z(`2*%XTDqwsJlbv?~B}NOSFjK26XD@Z%mC>?{ru#9ciMA0n=g^m*WvL;~}~+ZR~h!vsU$=oCWvkct30lzjJ7kibN-Z z5qqZt+!|qGEb#HLPH0LDuDE4+TNrKJ&Y}dlHYYb=bW5_$efh`hbLEB3@FpuC@Xj6< z6n41xzs#imZiv+alY_fbLa~H7uQ>V>caKEkFPS zZ?Ru)=Py%>3E^B>TzSrdeIpj(byY6oFT;Kz!B zA$)znIPJN@`}B7CUQzS!a>Sn1ws8(ddkINyUf9AK(bryIh(Eu!Fb}0`DE;oZQ{fBC zjJO5H_`Koa)s4{JUXYP(TO5{e%_P)jmX#qr7|)R^$!=FCBy&utM)q}PgGy| z>W7$7vUbW5ppB5El!8Km;i`+5fhHX-t`UK^{b^{jE`F>;{WM&{KB649_36cTM>hrG zkzFz09yPj7X3kut=X1q3{nr?%9qM+7(AB4PitC{~5`~54b>kV(YpEn7W?bi4AU;FV zI+tO!BO)xgT&XJ_pS9_@_(w}-@vydHg53u5%~bo!0GM$QkNJyj2>)oo?LO;!oHo}7 zvVE_G##uy}>_Kg}uA51BDU#zN|DM~PJDJIONuFa@Gvq*;=`&dbE`jJ%ivUAiA?_n0 zzuktbacQ?vij%S;FR|xF(H`~;QWj&%@p9Zq4_8h$Q_jxr2XIC0QRWH16N^>2U%d0t zft>6~`+lctLDeyv4w^|iDe_C7*z$lPO@!L4kKXeclg(W^5$k@04@a<>jdtGJr6yT0pO;Vd8Krk<&J^r8k-;ptD ze0*INTwGhrHVK+SgU!Lg5xj&rQXRyGkZPMXrJp>{E53Vsa{_#P75rU~TVdbMxr4cd z(#Aq+^o01;5{)1S1k zH_$G?ogPOnyajUj+!d-qN=11ww_&2B5gJok0!lN#={HP5S#$GZvb#iLxcvB&zgmcV zqsu!}@C>`Ez{Y7xiqmvIPou=0_!(g7+!3D2pO&uQx9Iu!_n`Ibn1MpI8jQT0e3h0| zR`lrvZgv*Vc+TH{UqH(|oI6MbE*y~0tQZBrk9o}Q6DKvGWfHQY2L1M+?9bAf&He&2 zCUe)JQ*WEiy}^^j_FU?dqp5lJLgvPza7`&c|0wDkAa=Or!TdlT+!=c=gN9yM>GG%Dl$M7OB-n3ve$! z&ENn4000E=Ea(wmMl1_3WWqzav#N!>9$9rT_oGT2xmadx3skuM@-SOf5QAUZy(Nlw zkqB^En%*?~?V}by^dh&k4*4qn87+wRNi_MPYg8;l4^%E)zJx(VqU}YS z;oAq@R-jq}b>$k-d`d`5BscNbj=?qcE_v&aqR*u)KpaQ&zx$4PLf_`k6)UDj(V;q+ zp?S;E&Ftb58gLC0pXMK;yM0h z0032uP&yt7I1w{e*>16-!(nBWT1$z3w~hvsVTDm$QXCBDAY&!j+uygf4s?2OfV!%H2!$Wa;cW(ZeX@o zjt53fXX4A7AKJ0VaA-l021Q8zz-=6T0I23UwC7%l&B#HF@#Ak@0sCv8d2y9Wo1j6c z`ZJI)KeH)bfI;+%1fv6^1qTpT(^Zjv@K$m2#jG+G{iy~JCiKj4Q;!vCOH0kQ^a$tk z8KKv^J)0-D|IWH^VaNr@5N@grQ0(;KxF&nC*ByV!nSnmIM^H->=4p}A?Q9&84{I}X zO1m|NW2|%7q#=y-X)?5aiy#Fp@bk;NpNH=m?c4ibDx zmselK+`0$AEi;UGL9j3RvhFP60J!ZN>I@KMMDOs8a! zgFru25mkGLASrya@-u;P2_W|FQl$FHr~m9ne!3b4C;55NhWX2AL)SEc^}KC7W+?N2 zXFzd+Go1%sup1VxA`iU$bC_p5gCdJz9Uzls_69_tII;WEp?+FZ_w6F|*G_4aRfMK*pbJAhw%nCdnaa<%j^A!nYgTk{6 zJn8}#CM=u7=Ox@p#Zp&+CCNTXX|Gu-Oy7!18I);YZsk(XghkyOCB^6Qo`G0`CROuP zS0$z9+aEUV@H1)B_Z9;gyvbkH3d>y*T2PQS{c!lV?X)EO`4+j&j*;nnNcU$f9Gd0- zi=&=u55iRIt$J~HXo0=?#D+8E(SIk$69sAx(BM9#qU22hX#01(k)mx3F@Q7a5a~k zJO$RTUuiwEKaauOFl?u$vnP_tH+QlWdphaS!?^S@bx11Bf5dedJ~?cD%Vz7ZKljbY zXDq&HEqYe9Gdrg_8+)P(^}caKVdHnaFZXD})icsF3YIC zY_dcbE+gVR*2iYPTiQJsorb$kXXFU|S(#t2uQSDz6sx|H-H3V-GOGdvz$q_)00E2u z6b=R!pvnw2r31J@@0LDo@Lx;kg@GG&0af=rp-TO506Iq2C5@XP&2q~_C8)}Cn5*MJ z9g(4jx9E1KqEXy8tqhnt;A}pqYe$jOeRPaZ#NmhT>5mo*>42Khp2ELtRZtN#M}FjI zy_?jS9u<|BmL@8?kiC8Q2-W(GL~bXqs&2VNc?LNGR_iz!(!lOYCyn!T?Qv5)BOIvHlbgLd!JNsnZI;q{krQ`(0ud!NCs zsYu>CK=ckGix<16NZH1Er$mp|>=ZwKeIrM1EQ`NgQz*^+1(PAOE>*&5Epb3H%oPsTXkmyq>eIL*n>vb?PkGE`W z<{$l`)^Ezfm=le|m_})PjG#gOpt|j;0 z`vy_Wqavi;9}kNb$47O&PlZ~a`j|EJZc7(3mjRxCk}YzylYc~?l}|v9)qZy%q#zJ< zMBHjrAUedplI77e1osr}CMoXwWd8!IDiZ45DJZ^qLTQ(DanQX}m}2?(1;?pUgmI)E zVT%=_*_T5O3Ev{QSIRADn^mS_z6e_EH4x(kc%(|;J3viMIUUVx*A?XIXX$(ba~ z$B)=QVK;khidQkk@lJNIs+V|Son4xUlq(m5#CiyJ(4VBOzt#U+vIQ|fE% zjM5qpmfd=j zsfbA9JE>h_j+Ep;zT}uO!Rsmeb7h_nI-{tyn|91NFW&>aO+;P*0EdzHEAS|Wx8Gx| zfsn2Or+Uf{@nVqCHdsg9dvqamw_zN0us?yvSH@6omWQb>b10P{Z2dhAidR{T#>JmG zE2NBdxMqGOgT*Ri-oCy3&SS~i;vXZ0pk)vRN@##<#6m}>`U=h1+uLL#k}$X7d6XJh zCh=U&Cq?0hb?=&AInR~ye&Z69KO^jqxq2WT-mG^(=W6o>RWiqQ%wBwZjOzCrvmppi z27E71__zfI2EvO1Hr=GjO}fb0JYt#}tA(z+H&}iRbA+O-YQaG~k|v>%P=tn26H2?1 z&Ze};4m$#k`HGKw_zK4*xapv&2c6568Dajv+FbH!@r666yZM; z)=COf7ZW!L#FNo_$-dzd5-z2W(}U%(-3q)8*=66yd&S`?N}4eU4|yn_`MN6SYSsm9lTAgLIzSHdrK7Nl7Y4$*-S zj+Ih}mt71U%-jyMo4zq=_Kd+{$cz|qOxxq?@r%d_K4h`JET)bCmRh9Eb{`(?@c-S0)0hv6?+bGfqe`yDg1B7#Xf`N z6&&qqu5rWoN4Kqkg1UBOZzj=wGcyz=4Lsa|_I1EPC({b2CLAYT^*}dJo!YAM!V3Ry)#0kgGn@ z!zmYrlk{Gvw>T?ywIAngT)25Yar=1N&ZEUc9IG6aJOet^VX2C}d}-yEMRZWMmvkAU z>#-#)-e|pTFiL~ddO<;TO~PRx6L+OhoBV2G%9zX`J$s~?&|5F-2#hS>pVEzYHMKyj z6>bVzM~<4X>Zh3*L6PYA)TL7QR|<>2o!R+>E<8{$^etUQJCy<2OICph(K-yQ#AC@1 z>d78SBb1dOL1;4%mCtTcImH6G=Hat=*lKPZq&$IGGVB5=7!5=+j+ofwskL9bIL^+R z2x*LQwq??JYm>N?z3^QKh~^k5i{>P}l}dhm`}fEQE<b93dXD%y0tN?4eZ|0v|#Jn&5s2gQ^LOOJh$W9cqj>OA6qhszA zxKu%S^`CW12p;#mtxr4euxEBejztae^QS@*w^>9FieTU-G&phr0}H$-6_#|}MF@$7 zhm|6?fu+(*deNgU9cCP*Fu6+byiUzzj)$Kow^W6X@6!#g*)->SG(YW zUCG=k{4g@lDA@ajE){b+Mt<}go@s;i+vUz&p2hUZ8n9EBC=p36_#%u3x|J>afRB1x zjAIW!hRq$=C3-z|?t9h8-Q~90Wm-fz5OE2JWvl-l-9Abn8o2s~Y0>h>Ul^tJt-(W*8UqR! zN3)rDL!}cPzk$-Ah-MVv0Y>vIl8{8xsKy>UK+oE9s>%GRHnYxuC^!klI;>OK3yO>w zbfhQtw0hcWGHG=qA5y9`eESx^T)1P`^nx+MmEgzMKnW*sAl{g&f0kMPY8GC=yw1k5 zFVApyo0w&ru7g-DZ7wrc%a=jXWMZ7K^Pxwj3;rmOaaWiQdVCe2cw0GNdGfMk4PqPZ zK?}&|o1Ta4UHtYQ_j53p3-&1je6c<2DXy(13oXXk)k5Jw251}p$ZYyVpyWE&{KLKzV^A}coL^Zl@Zp`MQl7DVnw zB-9j(8oOuHM!uHzP!3*_i_0s5zLI?E88LcA{{yGj@S_Qe;BTMe+A|+Dent$5iauoU zP6O(pz%-JTKDp1tUR{ijX`JR~uz6y2Xv9cP>#az=JBbT}@?jirF?OlI281RMnY@xm z=o-SG)+-^YAkcZ5xs3QVA`nb4!!gbKB>4247hqumWg9tBjcjo5pqR`+J}!(=Y*ndA zoElxG`c@PQKix9)jtSxd+>nlWGVM%2aEPgldaEv^vXs0n^gtv<{btC_p#tT+5&CR~Qf*M0 zEa;75dTvaGME6ShW?2LhB%%q|M8x_jxQch8@n?%43g0%PFhLuk;Er2O233RdTT6k} z5=)D3uqc5mCtd<%_FGYzV5IoalGpel55?P0EqcxcGaVG3OYU+Y`jE7ZPS;dVuJ+ zqEYAdpPu=j-;VJgLlEFd&P%5!mDaG&**~pT(H5EfRPk)PX3jUf#TS~ccO08LH-G&0 zXDgl%3q;X+Pohy#tm`kC?Y?DkMU#fcp;*J}wCm-~IOLIBuT=?&;2(lJy zhcE=U$2mLtS41tz_U5=E6wB^I_63dWTDP>!cEKL_y^o+((SMQPJvDG}&dfZ)g&Y&{ z#@S5>Iu`qJ)!@cwnLrtnit4XET9!l84xN?(Sj)DSAf;9=Z|a)_P^vMrJ4t_`RH=>E zJ}j^$4)`-k7S(mzF-KQU^EhAp_LEgR0!aB)s0DFp&tt!d9mqoWnqWMZ#*aSK1?O}N zroI?8r!l#%mZ!M=y20@-U~@=kPiKe|@xg_bJ4`&x{TfSXi&OWqSuy9mejh|Ot+tKJ z^%QW(BV#n*^NI*YLS#=w+<^nY|3yJxyN2EVl{vvH-Gy4V2~yRop#vMJgqIMenN_C9 zfq!^5w6&=I|Kopl<&U4T?qX}ks}dKO@=C0!&`F+&5yObX&@b9f*uN1q*>S*&H1;R( z99jM{xZtLC_VV}(mWa5L2ZCPVv{BwOr{CN8v*%&v`f*kWJ;;Mvc<$-)T^dowA*X;u zZkR05S%eN?x?_;+tyx;q790t1!mA6w4o55*1NGVzIc?HU6VnyLQ*#!er%}WDDCp71 zRUouwgaNVcOlqGWYX;u`XZbwQ!#7*N(Z)@kp|EBs++s&1dI0crokFHyA&>KeSS=3k z!Gk;=)hnd0&@kBA{O9JM{mW^VqVhTrPzkqU=;66^ROsX4uZ=hhdqGf2xg-k(Rg8Qi zu4b(}+Z z`vVOWgHj2B9PUJnaXpU9bYzbj%&_li%p#Ue1VYnUZ_uaiT!hk3|7QeRS9Rl{h)Ald zFa5#%ZYk&7RaalfA}&V0y6fhHzahKG)S^orju6uGh=z}Oj;ti)!4+lJ@ivxBQ9yWBgfb466#v+wMTR)QY4Sqe`)1^g z=LxyrcFkhN8w_UK2)a+@1m{EdD(P_nHMq4PA3u#SH<={w*DlM32hguI-VY5C2Cb`7 zxCe-?-fy%o5#DZLmTt;Pj88?*M3-L0$mbUR0-vO4tcmrdh&zbV(EBvjRVFt@ z(TaO7(6097_iKY=>MzrGG_~bgn3(pKzeI4#53;)ECRdC+phSJqr20^xJz9&b38@aE z`g1!AokA6J;C*KoO!Mw4tFPnB=t_$mLaJSsv;4t1?zVWTLBSm2p)5zxmqI_Ua*b}m zL!Ugb(VVPSQS{*{PVH1&9d4Vd?eQeAU*9;McDw{ft0 zC12hL&?QAr)LXeo9U3gGfg8hRP`5tsq}tT*lYRy}v`D0Uuk}-@@exy>tjs0u)EDdE z7>-r;&8dbIh_J~dE3ILlvVU5wqAfG{sp8po&75y}iZ3->?m0GgZvXl0&R0Aj7Kx(t zpG2agS=L`O(k?@-)F4Y5g<}t@)4EMlXUUNJtdej+EzIYsbK}0WBFI^;9KaIa9OUom zT@be?+nV5rQ!lv>*cLafYTnZ^+XQ>!_CA4EMgB*C^wq(`J2^)tC+yfEiliqFuSvkagehPqHD zgV9_KQ{TQr2%!ze5k0$?5wleI79v6s*jn*lzt+~5H5qtbU4duZ>$hReY<(X@wRQV{ zlM@{(nU!d*6jC;v#Hus<01+~YI8zh6$PE_0$pXIwC-PWmT)#47T|Q;p#HOwNIJ6o+ zMtuX$M~AYM)!xno3)ZsCYK!f;bW~*i@9~@bS#S}R+*d`Gtx!})z#zi=%N)~-Vsbat zZ<7MZBG$FF-fx@K-r+2$V+1943rZA#7}I_hX=t2>hOFzr#}|Q{9~Lu@?uT&G0e*NL zt?d~lOBEcbY-bsa5USO;jWJ8lee#O zyGBT_6Si3^_jSXev~b@*5+$v$1}2Ag=UrweR|rqw;opZjlaBZ46#3bYd>`I`)agHY zpUULCbv`E}9b?Ftu-=+2!QHLcRpN{)KZ?^zqHnGQNNi%hySdiW9uCq+ zzEeCzOMT(OMJ(nyX_a~Mgwwz->wADpO=C9KSrhh#s^?!zisjWw5$TyJ6QUeA$%`*h zyS)wyN{KcQ1c$ow=ix8zUh@PYxart zhWPy_?!2j4rmk(ZAI)2=?>=Kaw-F$Rkx@B|Q+QwK{6Ip($REs2!EICJpW$Yj=91|- zXWNETxVQBY?QVfuL}GdB!8CA7FN2cAkW<^)z;^J#Q=iR31Wl$c2^uILf>aE5?^Kxh zWbTLGA`lB+yoUqSOtTVG_^8+MQPS7|00000RIFdXtuGaA9Ftp38=LAmd~Dj;=-Swh z@OTz+zLvoG9LdP9f~Nhz7Rc=8U&C5dd?z5d9l5wxQ~$FF!^?t*knV(?ICmJzX1EWK zypa{4dcbJ9aYGiR($@H}$k_XBEaH*@7})g2reN?2D}wX%`)<=wVJJQyg9HPoLx)*GxTbqwp_e#6|ppH6k+xBy!oZqFWGKzwDr zafTh^wcn|(c&PWKK9}vEa8@SauG*ypW`ATgD9g_~?mtwr%a&xb;JDO}lsP%U)mVq< z18l1_K!7_Yj~64v(X>XmK;zjXQX#0kU;GGOoMF)6-9;Iz`>EGz*JviDL6M9?Njw_e=key+OqSb#iZ4 z2V57v8QKFY4vNd0RNnie=H=BlUZUkOw?OM?5@tTfHiAJ zkj~?$Y_aPVdDj0_Lyw5>T06kf&yTZ4Q(|-v35}&KV*BJicnTxB9Lv` zW!iHWf@hU7>sKU#$(^d+ex}qaE8^`VMfQ>xtMPacL;n)BG0soCMtOOPCN+D%U z8(hS9+E+zAH%AXWLDHk<@*ViE1;h7|2lok`K+MXm&J9jqkP9n(msGO8TY>B=<=6_M z0#UsPoIl+>z;HTE7h3X{b7TmS1HDh)q%Ik(QPAIGcV`^>klv)fFYn#F7HwCSuDY(4 zdw=_4XnG5EB-ndv-RA#yqAT6V6zD8`N_vmv6-H=eRE<0C787OMvptwq46w~RB*bPx zJc&c4icWuT*AGzv4%BPy2N_6>9Jm>6zE}GG~bxS*N86RJPAulSX#3fPjseh!(K;mP!p5DoYlE9Mf3qBgxYa1LY;U&!%Vp#Mt7 zpI?xk9DCPwAlJ@t?tD*_O?OKDa2Z%*ixA$U`RexDZ2aJEzLycTELP9o3F*P47Da>* z^HLtHGpSS%yBKS&`PO54of==myx)^E;zu&&^Q^HhoM~a1=dtw^8Z9tD5j3KYB*`;0 z0-NPL*;11K;yAgqIY%l_Zgab;`5Jq+##6@BwgLpXdgd)BI5_%XhB4eb_B8*SmmM%5 zDsX1S+k?H36)TM0S}V#w$FsaDGqXuOCk#11=E0Z_#D{pt^>gd`zBS|LWi$g=PO}C= z_|(29)?q6%IAlPm0DhQ=0u@}?4*D!giJNS>a@&fGwjQ&UY?!NwyZFooT5ZW zjw`TSEl*#k@-~*dSE{T{YByhoc{X2l?=qe?E=u6;mO5%lBJmW+T9(SOXH_5BTAVvv z(>ja_B^q(I*}sEiI1@L8!$Y5)^l+aUmb9;SP$INl_}`{jnRuJCMc`BrBz+r-o6ML= z{~AGTsT5=R`rs(HXm%tL%N2j8$~6Xne=DUvx3SL$LOYWIjQoV+c__bCQIW+st_Bp0 z{k%$$hBAaF^gXqZ9^Fe5&Z>?FgeV%jVurogPh-VWS>?H7Nsx&B#U23jrcMW|%ulD9 z9Z0d|{c7@&vCpi@3*VARky{4#FcqE5D=d~pbqqIhNzbb9RjP;C-5x1b%~dBpL-=>= z9v})9i2*Kvfbfd!vyKyubpH&vA!8$;fhZgDfskblB2DdAHSF!EjNx5aLrS0yEhNSv zQsw-|3N-s6H3iuO8ATSslVJ?}zIx5}w7MXJxI`^^I~WFo!4KV3k1}~V`bF8-_%zKq z&hVd=!zZcXeb+cchn(16qDcIO#)oF-I{?!BsqO69RRB4asX7TBXqGyWBwS(jxKdG2&x>(=#xDItw#22OpV5RNASW^oMR;ThWMA+5`k;BELLx&=O z168{>q+IC3-y0;fn)j!viygoe2W>8LU@mzFyoNu@QkAh9Yw9_K5AYJYU;X zhun4tRta}UaD%5i*H02pc7TiS-3asFbbEUg1x`v4HtHSLhxYmnX}k5YDLiRAj9GIo zNgXw-;)HRSQ--Yj9>}2l=(|UwMyv|a;ki&JVBuc5+*V@8`DtV-kKk7`mBq}+Q*5uW zCyxol5d8^)Ya+1e;w4eW+v<=hx2+s+=lP_JrVTfehD?p` z-4fcBwOYLG$l?NmLro$>Bu=JpL{~r;IvBkwL+X)em41f01`RVUQ6x4wIz>CaLD`W6 zGtkKpyq@(fF0*JiGgOReMk<6XG*!HlKo*#39u9G}#r*!QpSU|PmxKB&lu>f?@(G`? zJPr#jvo@AaGs|4_xGL@h$%dXeKolK=(rlaT`WBUa

vcgzT^Yhb4Swj48?b%o@kX z!8@Vg6u4{NQC#tH)h(o)Ji=PSR2B-JeK{Q-^cMhy-puKZCSm-Z_Af+@!QW%~@IdIUD^OBws=Kt}guK$~4E z)d}(&YNx@F>EJU3L2mklLavw4eREvD_Jy*4geI#>dgYxG6FuT z^ILmZ*(XL~4?zDF%V1!nWrS-iE;#R}&tjwD0e8njX|`%%p`+`k`KnGy^h6xQdYY;y za{NNhv~EFr%qf}!736@1}H zWQOB^>%X@YZ?E{mtP1rryYe70b)COB%J=! zr$LWDRq@SQbQ<<-(xkwWa;f*9I!DYGp!{OXMj6#DPK)9ta&-&)h7NK^{XOTpqdHEB z4}$QT5@y@w-|ms^?uu2cCn+#GL$^Sy#%tol}@1RzJ0St*LG$nm5WKUJ|qHFx4bz~;TKj7)v4dr;Uvda z=2&YZs)#1GvoH;X5Rc+Ebl{TK#dC!-iE8m8Lvfz08MvjL(ll7d#mS~=FGF4`{8|%N z+S_Mw{70o$eS5u}J*n~KD`_g3qsc?8H*zf7ZPANP;QT%_n{%XNm=!^dp#H-Kt3SSE z!D=%LS#`V$fnV$abl+35K{JBu^ca)jU!+WC6Q%$Ke2E^ajgI zKG;5sc_m7oQbY~WkgzUgT6d_@zvC2e%|d39TA-Z==HHzaO@&nQw}7an(1#1#V94SjzBvJxtgpmt5UH)4N5>Yg2;qZ_eS$%&8d0akS{CLKkXB%p zgnpTBoupMjF?lI~|1-iSr7HC{TIW080fhN{(wzeyh zj}lzdCe1p!Ule9gMr5c8@6~uHTl^7O?}OC}+{yil5N=R1oWL+b{`ogqqsX6A>v#X` zJxKW#+W)l-OauS}bM3(BK%@%zN0`+E&QsQyUH?}oeE5Dg!}DA4brN^s?jkh*>*xRH zmL7g>8AScc`k_8|I4Pt3)+s?ttYY4oIadSkH2!R zx979`2<4K-w}t^180hDATg)6(mVUim5_&oc@0tyW>mi*-=c=zF%mY%wxSA88?41}~ z-VdV#Oto=Gd7+M=#Zv>j_z=TD>zF-}NgoERab5~H+Lki-{k`;x$d*?z&vlK!!K&o@ zAE~FU9_v^AE8d_$x!M1)u2fKagh+vW`qilI@mX0b?HNDRCUCy0uN}5S8D>to#|L`9 zC;9EQRE`}ECv5)L?`2G+?Y=Re4oqbZb8Y#UOp+gQwlN8@?Cbt6?j7Cq^IM4@%cgo9 z+j%Gt9;D@J(S38kq{9X@j})NwaMl{ZIv>$8n$|@A*vRw0v?(=ITHhqB_?w7K?`v4D ze_HBX@z5mW{H$^Xf{o@A4mK8eXDJB;>+5e>MuY1|+WP@J@9eYQQK7@iMScb+0~mr( zlwgX;8)?onW*_d7_6KO+9!uRd*HH3XfT2m(eqa2k?8nB^?!7#!rI6OI$bScGS60MW(&b7h*UYH1AywH14vtsw-SPbmilfg z$VX+pqh4h=cqv)2zgKHJAz-*x^Cv)~e!u~#o-_;$#E%V#b+!tzIOh!CUO)P3n!8g$HwS~o99xETt8g_hiIUANcWZ2sv;DG@z zi1O=iTFY~9pYk77j`@x5viF}qC@cNn6tMMa2$g1}j3#CxA*csh&C#wdu6K^@#n^4+ zNzg(OqmQClToCuI&N{Ho`&JWSlH|Yl*oiw=@;;Y1nzP3*rdF9jvYngZp`$+9j?n`B zk;!rt+V?AU2f#v)E*sDJSqM%?->XOGaBh<#vAvwnzDK|G;KDAEofXpf-o#l?rFNn| z$GEc(O(EHKsz#o?D_q#DCdH?tm*miaeDY7KbY0vGL%c!X?J7XvfwZt z;C|Y7hstiisGV3xZnscksdo?oU|PL5_LA#UufOw^CD(*P^9$~7;RcIxG3gH6W6N5C&nFw9goZ|acjFg5YEoZ~h47N)>1)I`_}tdd{d zp_RWvcgSXU%{Z~Kr^Dwba<$0*ZH&_i^9)9R!5GXwtuw+<@|K5w}Jv*UmQ2WC*IzU!CF>@}4JDl_N7sVk2#aBpucj8xc?Gc;S!5AcW9_8V-_FoJQJNX=O?5)hZhJM@SLCLopJ4F^;Gk7 z8w`uQH-su22H@n`txyGAaf)vdDVxZ(V)N@pinpz9ihJ9(i^vXX5}lCKef!TBIlVSXGGKSd zGBKFbB1T*lv4l3P)`I8aOmWRHmUdIjMzk-lHA^X)pzIJ^Pr>nLto#` zEkl&wJtI-^%{EKdc0?C(XS798ws3GV6<8^_MLrPG?xO0Wwo9IOg!Oo80!D?QqGsT? zH=vStHRpuf27UQ~AW)?g2imC?QD-*|2PK!PRWaQWj!#c6BBd^TUzC*ZSWCAf(_f~* z-I{L9xQ4+TzkErLD1r*V^aRzkV@`c$58-O?06ZhZ!H>~{{dJ}8%k50-A33S zI3dRpXv6mY037}LWS-Au=_K%j^_+5Zu#$PPYNO>0^`Hq~2*{DD!b_ZkO*3@h@hj5p zLuYS)Ov(cb!sQcO@jnS^Qaaf`!wh2ES|m9_hF*ii}^3OB;8U0ifjCJTBj(d-jilh z1xDx91>ENz34W5}9)5`vr?)W4+MI~Madkyiw1VWN->HIj?#LgJ>J!dGBXV#YM*0EK z$(sIqP^gGV_^&#?5I!o^<%ZF?pDF2M`QKj(M67P@6V75)epcs+N*ox@?URqZ0s#oFj}Y#%l)MhUvf+$YLOD>@E`R3U(XM{al~H7R;2E8sFr`kIf9J% zQsv`7Ep;CDCx%EPsTH_XMj z)`;?J#K1FX_+b_FE_DmLdjJcGj31Uk`OJ~6qejH)c_6F+?br|R)spAYYrtOm;ch-zr zzc(toLbs$(Rh>lCmF$YbeK(GHeJw#i*$c}M#L{CB{j_`kK#lh>ew{k{OJU8br{8Ru zGM3@;%4LmzY}Qsuc04Lf(M<&a#He-RngocC=+FArapJ^-B?#$L_1vZvIs5i$rm`%$ zDu*p8R?DoUCX6@;dBSEt%21SptX*|fU4EFZHZEkg_wg~c`be+pJvIoTN@ucYHdi)E z@8fH4K*(xM$#bedIdiys+}Z2qy5B&C9J=Ulp7p`cZ>nxQ0sl%Xw+DESK>}ZGIu1n> zsp5C^60PKI#4}Kf#11+!xTic8W|t~$ZTd;xPcH`h*Vge|s|9B4N?VF`t7+x5C7X~6 z+5GRLR=wrm>gsCwsIoF{TwG`SSk}d$tyA9K;ouT{;uCx`J1{;vPaaz*<#SN{MGmQx zN*J3H6qM37k21g`6DJpSSmW{|r-tVQ$k}CP!?p)!hQ2V!=TuvidrXyH_eVtxwdp@3 zjDM)R%{the^7?>M$k~V*I%d9LSKPz4)X#lgoaWdi*K^;2wqC^E#d8RVEE#VS(2WdX zxuHF*s&2kd*Jur`-c2{g1_?Bg(@%=?`?L%VquDlX2LJ6k04iK&g(A`gg)i~1kOzJU zlXad03|9m zGk-;AxV2A$iAVr4Z%s*os-U=FZ~`y5!?L#;M0O`@L^9~)YGZ`}fo*@J(CR}C8Jcu{dylZX399iw<=HDhxOCXoQ8WL_NZ5p}@!tS70<82Nc zeV$|n#k{-05DZ|%H9h4VVcxSV`a8`0z3bt_^FsoL6$Edu3a~&FwCAGOf-n#)&|Dwz z3Hs_4`e#ak$y;#j{X>}b)M8DJ64_yg) zH;}r!ECobaK4e7Y7|vm|7_ncr&<|&wk*HUJ^2Xb9J#Xy~ zxN4y_zVhx3M5__prjG_qHFz|DVze!%4t*DGH+SX!)L?)^W)plGIU#6P?ThV2dWW61 z2a=`jEhy?$RPoW?M@W%?&9Hbo2`=-qiO?ypgUpQdbMV3RtmIg1$iL9@=9`~*i!I8q zuaiuz(pi=19%ogxY8rm&vrKmS zGIo2=FjPymjqi_beDmucoUzTwnPLTUsum&HGbrn+Cny`>AN=V$)`MaTay`o}{y)(9 zDn6kY?uV;o0;UnqEE}HyKJn_3FTjmJE-nL+L3~xVR^}wc91bD=JON|PLk`c=h8$r zrbIZ|T(dB(a}5xaYUBY?66}=VdsDtn3J@2VTv`215`0x~u^~BwnINhbyF;F&Y7TcZ zBMvcpp?(DC8Jm>p{t6ic#_3UjH)O}g#Y&A0=6)k-Tj`TY&P02qtJL!|??9(%UjfSv z6aPG=#i#P7h%Jw}Gv=cgmwJ`OB3t7N{-n!5i~)uVg!c(f zk4$08q|<%Q7Chp6C%SkljsedQh^6pEk#w`-fbAW0bE@Q&^br8p98daD8McaQ6bYDx znB4MmSkzGerZS4xs;H*~XmLxohrEG)B(FGLFo;(od z&J6?LIh)V}jUL{_A>M$hL!U8%{>WN3(Tr&ue_ zJ4R+QgPxW%RFGSrnabr7eq(Rve?OBd{0mMU5iL9-as}&w#<1W(R2Syc-D%*;W^eo3 zA%s2!373`}_y?)7m-A3u?Rpj)q?EZ7G?qKYnblVDjcUR;>t2+rw$Z)`dR2w5#C}$z zU$q|54SZP(s)6!Vj#S1pytPEsF325=IuYemn3=xjHCX^#Ua$|^?VN&k7Q;SZVjgFZ z$IVRlkzsfnK1mq%xd=u9@c*#Q+H@mP4K4z_MLV0GU2-~*Ap__;Godn7>KZW_J%~Xh zc|ISp$u=Wx4W7YDsdynf==~9%WS{wT*n8r%oAZ~dCt8z1M9+;E<~nK*Fkj1x<-qM6 zehg6iT+EDT*KI=7UQo^fjB_#s)*?ov=BM*047PiFhG}{%F8y{*<^TXNsg~W_?m?gs z0&7V}edV|s(>iezkzH@QbDj0-I`T?EiZ`%S4_?u@9C0&!v2!2jU8JwcJot7=JVQvv z8{FO>`ON2jZqbXbF7q-G(Q1{N1~-_AyL+H##CJxk`gvcwHhQnu+6{1z!ZEg^iR5R0 z+|Q)Hul_r;!%vIAQ9vZ0cXGf4I)zH>pu+?;5Gn$5cEgdcaP>6KawKU&iV*%9w6a%p z85nD*KH~ENSSBrZ%=$%3B$&^h(oAWG^D7O?GM7*?rMTAhv;ABB{^zs+fQ6X!n%@%h z`yk++t>ld7d7x(VvVl`49Eurmp|dtQ_Xnx?N-a&BJs8y{(G8?WNG<$;K2i19+0-Bm zOkW>Vrg9HP{B#17YE@^Uu3mEAWWXB zy?(26bqpM6^uaMpZcR3BdY{xaMf3L=YcYICIDDU$7D>drbnVKy3!|U7n7=-m9Xnq6 z_CC`Ej&G(tqe(7!Tq>KBfV+Lz4aK6M6!e}GEnN@Jf11VC^tL&!q)+J&zFc4fcohm8 z?4Ya{DJz4g?KJ|gdEIsFgjBJ3P~)mSZc3xRl3cH^|WaNIeosQ)`@Gg<^?sY`^he`>pjWz9|ogIB81A1UuB%8c_=vzSjJCsfX6~Rwf4bzk6y=#mBtV zM&$qGl{{J#BMc-J8KWs!1o?68r>4E(4r0>KhmmkCi>-hJ$qDG!cxS}xZ9vOK2%LUA z#7$XJAyhedga_fM^elm_RzDX+dl*awZZqK!8GNZD|^H_l;zqd<^- zToHm2Z3z5kPSfuA@*!t%CAgCl`V%3jxe#Lm^HBhU?aGPZs&JDE>BsPVQ(1AmYp*3!b`VUZ$$db!hxzbK4q5Hah2D8pLLRWw>`?a3K zEoeDvJ|v_%GBjnl1QW4!u(KYZpR^%K2m~G-;-Zwy1`C9 zQN)WWL@$`I1Un?6DBm8I?Y(R~K8$@U$zSfQcz%Ii7mGu4S=UJmoZn2vZ!dSyVj>0*JK2@1+j;*=w`XS*t#W(^UuQd>~j zLRGnu+(d?DZgVDvQ&6<|uW2Yo4V(Ozt#nGDD-n4GDjys_uVc^ztFx;Rd*g7wc4y1r z1`0!?bbjyoU{*_~snJM%#%}M26snxZqIBhs;X{-Tzso5w)(|Sm+_n;~I}(MV=l^F} zZ(u1(@`m|q5@>UeXeZHk7_CokuIzz84USLqM)5&*<%)EaqZ25NwLOlo_)-KWMSg~cetE3Km-5<3jxmb000l^JV^im literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/admin/troubleshooting/serviceproperties.webp b/static/images/auditor/10.8/access/reviews/admin/troubleshooting/serviceproperties.webp new file mode 100644 index 0000000000000000000000000000000000000000..64a302c761cd36bfe1c1c678cc42c39b84e31fd1 GIT binary patch literal 11902 zcmV-^E`iZfNk&F?E&u>mMM6+kP&goJE&u>6$M^sGpWOd-eX@VF{;S;asDF0J59puZzc)XXeSm)<{$u`g`!DZL`7i(fE`PrNrQ*Z&Pw`*se%8LgKbL<* z{~i68{I~pH@IU|m|NbU^$^Q@gpZX8nA84PP|8@V5{s;X3?Pu60@=xcV>p!~xi~r&N zZ~y=Q|GWQRf4E=#Jo;;r;acWcFCfJMC-#DB<;D0dfng9A$)o_dK=3W#_A4!EZv$gu=>QCbz2I`^ z87#tP-%OKuKcxX#2+NS-yl_qo^O0eKsD|d1dG2skYssHNpPY6H07y?{`!R++phf}u9PMo1>Gb?|Pf0VL<4#=tNv$oRFy6tAdmT*mq@gS4`L zz2Vss|HpN|1w#E7n5aqYt3ArHhrQQwzj&?z2=`mgOY}& zsQOk*LqgQU$izUm<@K5tU$QrCiX5^%{;x0c;tiHkMhk9bKL?e-7kOCWJS&a+B8(_uixn99lbR z6pI9qnleclhh=F!N)f?^kU9+Y7jErwX9676d`u$=MG)!^5hau+zG7c^K36~!85TOU z67;@6UCQp`jswW5E#r`yK;uPcT(qjp4zvq9A~`aVY1oyT^Gy)blZh1M#p8LV3Gw>U zSx?o2xq?9KqEUjkw|$`{8O#!;X=MU{F6Jq1h!lT>rm1$wQ1|<_zKdTjQim0 zTFw?=xa2(*?B6hht|?{zm%0muo8pu{@H~DBh6|-bbXm_*Gi5^s(uM#4{@6i^6OOGw z44`RSJEJ6uS0eK!(Hty`iqmPRwyjC^e^L=W=U@!hh1iga-^L@p6T09B4t434ghX!^ zCJ8_#4vBw$J!w-9=r^~-q3y3<#!#MqG z`Z>~Ao6rA0tnhlY$=VGI!(7rI4g}o+oyh}$P#vini$Hbps2PjLit&RAl7@C$x6@WMal1xnWg>QotW=x=08ou&cGlCEtNt(!mW8%P6ybn|6GhA7W ziG3A+F0X;pZ@+@!dX9X&O>$@JZZY>aaP)dF98K_2ZPc&#d1zTBG!@<aJiN&iGn4oJ^-)7`da6XYwYI%XZ`a zP))f|=?wrAU2A5r-OoV&fn-t_oAA}H+5>q!0s3XA2E6P=CO{D-la~HJk1Z+A%*Q;G zlTz(h9Wzw%QffcD*Ry>q>_q{%*~iP?R_u0Qq0ib;V{^+GC8wNkC?cvbwb`!%rbEj$5KJR;IL%H+6U2U>gBpf8R)8-nTmjEW59Q0EDry%+(>7V(Xja1e#4RkdiMmkDfru&6RlCl&qtd+Dt7Y z55XeNl8J-jHDzixg$(?zn0*7S+;8Kh<3$M7_I3x1J$|hfavR{c?6D{)nje&SVEg&U zvKAv=CTn>A(K^IZ<`&d=_FyA26+_1Jc!Hsxu;`-;Qf6S_5~$6OrYwty9oTmP`6ATzQj;MaiLtyt zBOnJfS#1JxmC`^)F^0+CaSL9AM3r)C?!HViX`_$!yided_>-^~sG3PtTpu0{Q0btK zEl_AyOmWoT1eC!D^!}1e%ZfzbnW7zeFY#UVfN+Vp%y%ow6;d7^n*cN zo6)x&{>=mw{Zj}8Y@xgJ7Z2|f)^0KQPRxT{Q#)67&R@h6ur+0KuuBUkT%5(8WZuCl z1cyg!MTnP*mRrer*buiWJm+~aD~F$;PL`;mB5c9&;}j3$mWJ%QH+RE`VZnD!Kxm)Q z9vVL#m7X;wu}bA=Rk4L1hXS02!M8GWF&@nj*8{vTQI0AN+sJjV+a_0Etb`Gyyu$hO z%(1AOTFM+1i!KFl(a?MZ{C!hSa`zFUN%+H^C*@jAwRuC0m74R-ErqkT;#WG?i_T=_ zWED@J63wH8hUzWR{0Qluv1m`tbEM;h*>5Aw3M`#^y~3$z(yx1-bm6n5DgIp>tClZm zIJ$UAb5L&5&8`#P09$lrn$V!%JYHg&L#YhnNRJvKl+Na9NcH&+E;&^$yPuCWM`t|q z(>I)wtmZwCm5OZ>de$ znOOa+@kqQsH$!OrOv3=1ilf1?_2`$RrL5;Vn_-*4%|wcn6u-@}9RuOvy(B1`$2`E# zAy$LwRsbfV+bKdg0%{q}UZ{bww<+xpU^5_fkoh>XmHXgJjKeEgi;-*7UW|a&qPsR6 z+>B#qGd8mlotCl~RjiJ6UHqNG)g8piU`YrgLnY8yd^Qcq)zYF)no_rr{*;zDY=@j#S3_(WDN9D(pvU$~xqHd)yKF`Tu=A&j(qI_IMz5bjbjgOg!5W1;q+7xY0E`t8hjM%s%kqsbeDTVOfYQvi@0)x zMNAVazE-7BPorYmpv1Ki-)XAXBV#lZSYyFR?r}A-+LqLMYLmj5D`u$+@t-((QR$S5 zlQ@#LJx3cG(xc_o3Z2Y0ejp~-(WX6GNO$R$od2*-k3Lee;Octg9 zuScd3RP7XF6TGlaZ;z;rlvk=Cb1Qs&o}E@oxA;td_A5g3%$kp%TZQ^0dXG-t^bl}D zp27Ykj=Z?QkLfoknm$7Sl@W{wgIqLijcHqb8>%9hv-i;`&F+YD{^34(-*Uzklkr+a zJF%aaylaLD@GA8(eN(4)lk~3wc+=gGM z6T=Md{zFRVef<+17b3@lXcyY}NqX}Q>7s2A4dHPEts#UfBd6Vrm|yjq{axNNrJ>mr zdM4O-cGq~zk(Y?L5d34sFWIsjPv^yEVa&Z@HMu&~CqPz`6;2R05oL&leonK5cBXhc z_ADky1&-xD;B%V4uUYM(Zcpw?6VY&|JkCB z)`={sy?R9MvguTBuTq%d5P&;{{BerKG;piyNV=ICOUv5IF15JBKjk0+(-x7F*QmQC6K@IdN35kwl|74*NkfU*uj z4HN4o==Al>V8*p?@WUPynrVJ>T1z5IBFXU%ULMJO9g@u59ooI9?CD ze~v%t*(=(vKPyammFJS_${hN_|+x8Up`lNfFVMgtB9jumRfH3Mla&zB4F0rq^bJ=ra3`p{QepmA&brq(T?O zopaPTa^q->dF4hOrD&sPReBC2vc!@5)mG|$T-n~1`X0A{b_&Y|62B>wh0K^=1902! zA2}|=;{^5l0`A5BFqPzaxg+-3*n!x|8|9jz5s(sY&J-~!BmJT}8)@5vA7WkxsX7~; zRgfnmZyK+J@1?~zQiCR;e8J#g9(>i|x8!rlvYD0Kf`^4rOujA~jZC^FJU;Fklc{R} z=bI7mcJtD?B%dzGOyt)NKP-ZAKNm-A-3hO6Z?Bqgv>zK%!EDom|Kpm3w*K&yOSqex z5XZ&$`C|Y~%t4{9&O{eLa#1xj3Q(;0RGwyiiLm-E4Ub_fuIy65`D=C{Gu%CyCLNFP zH|t2f8-P!B>LfaNyBdBLWB`hm62C@M)4qmfmuG$A8v<0F5||&sLtAdu{Xg~2@s9aq zcx?4z{_l2$3+&}ER#~BOx^nHSASB#dxHTL7b-2Qzq1lE1wYCd>d;HJd18?T8UHjlUhSwrkeY$302KSVAsI zki-5IL0>)0G8s=2J19k@7i&azjBYseWRa%b6UuaV zl}Xg`M_CLPVr4@J9%hZ-HABhjtvNObDzY-1buuaA<+amDrp+C@;rj3d_w01d41iBb zz2&_H`$81DArQ^T-JZgLxfe2rpho3|>h6B3etxkXzpQ9ZW{K>2VYe^9OsI>1jK5_?+c|hjMDe{p4Na1yDs z@-0v&JB~LzjI3u`z?Y0q0BKX8Hv<7aig!9tJzH4$!*g9@&&Xuu+H8*-X?iZR7_>hJ z&iPlE;Beed=4O!S2B=V2PglC!WAQ1!T_cJIZLCNW4HAU)ABI)O*+?q~;L8f8^|IWB zt(p^Y^o}^tIO#5e>P6fb8Y?K%>s2G#n=FCA51u-%&nc4zT>Pe@0&3uuM?B&J=p9ia zd4f`?X~oV;Q~U*if}5#~@fd%+Eo~m@BXOn*)2Uo8y@d;2@(!s1U{n;|)K)t@PaV>B zP(cw-EPi6Y)RTD7kYkBEwZd-(*eXO7#L}fwb?^X7TLOa@ec{!ZHUy8OxdFO;@Av?w zLjfF!HylPRd4&6C{C)Sh5dP8lk*{%{#E*H8AnY7v;)>$X-X)!SiG$SoG4?VvCx3n0 z`APOyJCNtPa)Pg@ejNI`LPAJ4X`tKY1kEWL*u}sKQ-zpzBG+ZO=lGZLi`|=g7O3sZ zNpMMMp^UR~01}GvmWCcG$l+4h1Us)3gt(2OoJ^QO@b%2OGiF``mISmUtK|>m=lHTq zdakCbe;JqA2nE^k+4)MP(VRlFm=PwXP~v8T5VJ7j{||N>19Ki&o;i=#@K9<1HV?6m+jt*`?( z85e7qm=L|0)n)zMD|ru5JGuBZv!Sa{+M}g(xs*(m1LfSM9@KQqHE~Mj+AsGM2=8FH z%yco`K=KIIdSXto-T7N?Ceb)-Lb&8b;JvUC5%skEw5r`Wz%0)~N*&e^i&BVkH|K9j7To4XtbONnSL) z1Li4V1l)TA%1H!SOKo9_5OI@5&Bd8&586&A-B)GkpR_g&h1R5A@HsuffLvx*&HlA@ zf=?AUe$1EN7m0(FhZ5SArwMI#lQ_@na{L5H)CMWumpxNS*X|mK{wi~bdb8x9fcoX} zL6o+K8YvHnWC!@u8v-|#J-vA$HHh3Q~K62K@@LUSqM9x)-}%7J$bRTqK`9!$6>nHf5aLlakci6Jv8Dz zr22gI-Tb${c+RubI&D{X3%|#{tevb1a(tYcI@Zlq>&efSf%3mS5-K9LnI)y%VXXhn zZEZ4$g1Rgcu!Jp{*^D4q{K*n{U_zQ4uFI2Cx?MTLdS(;Q;p-Yd1oV)YbCDKzFsH*% zl+>>#$QPCP?j7SiaiS?ZdY_0`7%i90wrH8ci?cN%M96L=)K4n0#Q1EsATHS8Y{DIz z(pMh9U=`sCU-w6y`V%&Y^Mrv-)YW`17c0aYVZUJr%3oAkZ869z9EkJAp6*}XxBdj; zpbatU@5pl+T1Y?hEZQtO1 z;a$t;pmZAovd)DGeF$8U3DW3dqQ_e1)E3uG?4}y`$OTIY&bFB)rQBhTdc&!$kv=fV zIDlaA*~KCIy-l-M+3e8w3DaiOo}LJ>YIGAY6_{W~!{5aJzi)2ElB;etdJP=rbO(OD zt%`2x_p_$?Bz5Hgpd4^W$BB<|8K=Xt|i)a>T*|j{CIH zpyjgT-67VwHK&{!D!^m{9(efv`n@)Yi)I?7(E%ffYRO=XG!za@u<4>Bm6)G0Lj5Gl z-7dcMTY-gelr@Rkq?BVj7+S%MgU4h04ynD|R0}6>l6ge}F*BLRg*o1yK`#o^k<(vf zZ6Q#nufMU!Izac~5ChysI6npb#lV7V%-Dr^tLXgvr$`R>`Sm^>@~CXc6{m5)lP;jW z>MV%l3&omfQ>=~)SGorUE_4$0;Eb!eqp}y_FT%)EPH1t}fFc%yy2`|SCj|ksfEnxY zIeq_v7*}VX|NBu2z3n6|io?d{+!8-Fva8=(HmQHYP13Qoe1Ba7C~sRG=(OaCMc27m@V>I`t{SyvH&6r9@6ozB0k zN^>~G1yOghPC~Hpvp2mamE`WdJV&W5?_k5wl}Cy!%uqakL@nYL7^)% zm5=cPzh$B&1`_g1<{Sb8osAF3MkVG&w&8hQs%)SF40w$L!AowN_c1MDHA#jJrfFPz zbcn4rDd=86L=1-v3W}5e*4npcRfxt)Cb4~I&pQEP?UYl8jsvhnhN2agb;h5@jKet& z6^HQoDm>8hmv9B@EV3ai7%KE4qOXaRd0K?AOANXPOuKfsV*IrtqW8GZvL=XT_Np0g z@&Yz~4g>0l575{d!^>0k6`1*SgHmvBw@EbBRZ)du_`w`7P!=j8eG%Tr!V)Odl8ax({4 z>a$ry@#-&m5M7c7Zi8+(QZ6PfQ%jNa3i9Va!aj$eJn4R_r#DcC_fx&{HBCH}MQ8{k z;MrK;52EoWrqv)P)|Onl=cC0Os>S{a!=*Ufo;0!TP&y#n8wW?P7lbqtDf?P82@hAF zK)Ry$f+yr1z%;=iADi|h0B`qJOnUw275s5}l+%Y$Nc4B(Ib3coweottbrjS0Ai&w-2TU5`_R7LsOj1 zF|m<1TB$tXE>v*1Hy`ei#Y~ix1ED`!2JUs9Jb@6Bk$IFy?4YEfRw9%5we0PE?IpbNIR6ggS(qNu#@{N4EvS+*h zLb%)K%RU2e`pWy1mAt+@Erb<^Nnma?>OQBrG9(R&Odh5JKN~@0ha&K4(oGeuz5&WltAlI zKRcJZOXs?hSw*N&fahJ48q4o=gPtvh@A>Eg=-k+Kza)o@edEzIp<}axCTcUK-lvf} z+h@VWMIVvyvL~@Y1k&QM3a;!|b)@L_f{xx)s%etm-TioG!80z2Vn$Yeiu(u{$5i^z zz0J?y0ze}hx5XNRNOy|ZP4$Mt?mxRLKuwD9Dg*u-DH{do%$=L6>5qfCA8dB! zNiLsfFHLq7*2S!#ztX{pR$uGxqzBMP*qd5AmRzP^tJLG*mEE`H7twG^9^FLk)f_Xv zVi=BSP{M^Wh~e+xD!?m_6@GSMk0-p`fqoQ*Ys@mwe14IDr{(K>gG=QDkI|!A>l}>v zhd=~nSbJTNRPCIzYicPDPVe;9>8Yz-1tn~`nc2Ub>)%Uop*mfanw=5WnX9FUy%Rpr zgKp0rZB()<0VOjm@J3I1^zi)z5(Q1d*|IjAG2wn263udG0_T7$GR_08!n=rW0m9|v zm|I~BE3$MMb{~_~gbW6-7f=jgXhKID>}j&(nfiBmgA(nCcULw%r|rxu#TmnLMwj8G zHun73yNh)6<>0Vuw6m_YseVp`{)3Ts2EAhh4J6N8_@CUl)6zWHOCxvb$5v}d z!W<+QTZr1*uvb6;2>ZkmP6vTxr%k@}rOhrd97lXM)yrD(iKB(^&GzMN{=SX3$K|?+o=F;#1++IVozYiGHf0`jbth0ZdVC_YgYcW; zEe9Jrdo9}9h(`5m|YT@?aR;U7jEQJJGWaK7>QWO zqO6%DBigi^jCMHiK!Ci{xS<&>4WWi#=?D?D%*Mq)?_FnL&VkA9DbAp~cS94Mguc#| zUG6-I0HM^2bh3>N*xS*1UDP3+WJMn-O6~Y%|2B1GS!c#l*g5k`d*P8&=^@G~Uw^DU ziv>{*bX{r9boZX^_PjBiy{tCRtpfbvpeo;pf$rW+B+n{Pmo?oFkCx)P+n08^cGRs|nZ<2IfSp9TAuw-0@E4wnioa@p->0i0 zwJT1t98Xf0x5^o7H0ct2BCIhKjm-#1kDY@wpQ&X$dfc}}rXQdpf4EoDIf|vyFQd7* zQ_6$CsTBX&V2PRn2^ERoCy^GGsmm1!%7`e|q1)3^5zI#rgy~@~axkK!HmJI}UnZqq zs?xo`t~g_Gu5+#*mH6F>^xU2uC`x`n@F{MA1jTMqF=rYyb&tT*=3iTgT;#p_E435yUr6=rtO7o!43UBEvvRJuju$RK;SlL<5$ zB52gbm+Df(lguy zetQMD1c6y;EVg!kM$K}0>-h@it-XKhL=ec_1G%)em2yi-;PF(%UDvw-VCdWa_oRBu6TfY(gU zM)tyIkb0nT;gq$mv>m{0S{O__eH9H(37Y#}<=#!(l!J8S1!GcFyrk>L?=;ffS$!0rz`kSu0#y?^Kc}PvkHbltPs;AP*rASzJLK#%!^ZM0nQFpcpy2z=Oan`O4gp&nw{Bu$f=!81 z-#VN#B{V(>=cFE5NIF-8^r9N4UgdW80Wt%md%s{lBGK`}eXn7l7+&F?r84w<_V&_( zb&f{Zp{YyZSd~u$%*i+hpUI? zZ(syEi%ACT1UY8xL@~Id7}~&0?9~UTv%36{L4V0}%B^p$b{!SY zOb;pY$-irR__mU+wD>LmYsYwZB&uB`B6I-8bkIQT@d6Eq-_8Mc8RTpG{OFO&ia z1rL_|W#!--P=+ui)|ugwBg56h^Ea>p9Yv&qiEJMd=UsBoNAt>PzL@BXx4?G>-ae4< zCjNN1`bhAaNn+2RDl(A3wYadYb~|y3#U_+9CxoYHKPU;EOa@qFsE-AwxA%?AEy@&c zpvrx`m|RtNjf`AtI+LlE%Q7A=eADP^76EsuZln*nCf(vR(xnu;W+~%D39bz@-eLR6Cm7+)w7J_GA3=00&y)zwt!W zp0fRTJ7PG1KN^Y}tSEc#i?U%%!8iAKJMMqmtf}?Njk|l*d=sC*tKLqb|P8t1MMDjYLiP!YMj@mje)sT)Oez~7wtHy zjv(YSF{aZ=)T+(nGT0kO;3R=*SkXFNV~B2D=aZKA|L4J^47oCkZAP= z(n8m}TWsoZ-=){?Sp_N?){V`#1wWP@@k6~??JvtT?LL0gYM-uk=v(#rs@E6JuZ*(v z-{~B2E<;QSOI(3Olk>HD9^3ehs->856NpqtmhnJR!RJ66pxeFJZ!x!898WsWg?w#9 zsE&R;cbe^*6my_51+vHg;nImkgJY00000 E0PNFvZ2$lO literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/admin/troubleshooting/servicesmanager.webp b/static/images/auditor/10.8/access/reviews/admin/troubleshooting/servicesmanager.webp new file mode 100644 index 0000000000000000000000000000000000000000..ba7c7f0f9dcd4189da8a81846e13f115d635d5af GIT binary patch literal 97640 zcmc$^W00gv)IZp^ZQHhO_cW(%+qR8qd)nr-ZQHi(?%KKc{$uyujaYo!`jC;4^+ZLU zr%s;pL#jwiNErA618InhDE(04B2xQ1zr_Q~0jBu|y9N=kWl5DRCM7HQo$U3R03T^? z_i^&0dT85cw%>BLh=n=wb1Ro?hubfN|KQ0dhCcpsGvTY_HC}G#w&&^t2k_^k;~McB z_G6?r?}M<4;8xIC5WgGBpW}P$1N{aWQ2CO)b@QsI1h~pO=hx^t@&^DK0T+j*?<-$| z0Kk*~qfZEc9Ka0#064o5k8cLd-vHl)?E=sK&;Ec9ApfuD;csBTLv>GS&!S+xU$4K; z8|hvAOiwYu1i<_C@}YkP+1L~1ll3%nrGEsN_P74}^S<)N`Wk;v*tYHYh5B;y73fM73U1tA+i@oVK1@Kt*+u>W2Ajrak$W_WHqN6^=i2gQ5AEx~cXGywAN($1RySA$N1pdT-9Gv9zS|G!Hgn|}w<-PY^YzjJ-qytbZi!JE`vlSpIYRi^c6MWcmbSjXB3 zv(TXuR{m%iGjEKP$!B`%j7x1**43up=Jl3xGe+|nxkJUqI<0}hw`P#ol0bW;S9mF6 z$8r~7VRkGj9ehAaFu)&@%2>p?1!_$_Z&O@ilfeIPzgNP_xvpIGJ+UFGG>LS3QuC=T zORF)J zjwCjYyGJ8mjpR5Q2^8*A$90ty^0M_(5Tuh2Hz8x^`n^sad>=BkvbFu5ZBCM3cf)C_zPztbiXmt})D%7!DLu(GbO2 zMg{1Lbbc@lpNefpX1<_H=KomE)0EO~Jv2_v)J^@&DC%273mnI`C;)v{s%)Vpx9#;zoK9Z zwe8Tx+!D@m5FgP56fR822~68*$JbGI4eYY#hI#ksz6t#Qc~k%Fl|jtaNW~;n3!as2 zc|_5$`w9-J0>=mx+w6gZ&M+Z@lY`J>_Wf$I&`k`o&y{FUXGNvpj!VPN6t#g!0Ja>0 zWV<~TF|xnInJOm{`1Yq1Gse?mnU4bc#;>}e=Gsy`=DMCv0NL>EPW9DA1f~`9XAsMC z?9`P0U?aeDE}P_-yv4k1L?MEc@p#}(mcU9&f{E;u>yz^`RXfsIhY!o;bXbM{at`MXgt|TA z@DvGdh*Tetacyr+UNihRB=3_Z-0}E+pK7_aT+PE*BQFf|G;RUSkMq{K%E(3@1p1S4 zKw9gPBZs*dXYftM&d+;rTQTeeXK2L;Gc}ijKxllD1mr{h9nP}gTtdG{N^@4~=1JgY zdQ)PKUp@G1%&WdKFn=5ZtAWa%4Gu6Q?n(}wxGxifxJ{4ENIE0|m_D^u)oi6)^+Hq> zex_q<{Hvd(ge+rXSv#c~^ z)sm1zT8ED4yOoovONkhDLn{U*to-NCI@I@S71(+64JKOv!OK-T<`YNUhf*_W$FS|w zYZRC(MEm?fuMfQ`&)9l1c~90AhPfv`w2xNWLKpq2Ow;*IkyZB z9_H}Fx}^E;p?C7V$aH=myTI|E$~fxBNB3(Sa%;QX z#8!w0=`~br?BN_<;I71Huq0Qw{{so~AR?D~pWE1LhB|J`3UXzOm0$He&Lp4F=hz@J zV*Sw!BFB0kJMjePaXDN(Nzx|qU9S-i4@PuP`2AU#@H%-;nq1FZIK?Uc;R2=i)go@R zZzVy8bc`htB|>amfqc89=fa7=_~~!02vBfz_(tEgQp#dt|1IA&TPhGxaKD&0t($y6 zMWkiNGfoB*<}ghjM?nMj#Rh|6$f86qV^$D?M39%IiBhYAy5OK}<|*CTQz)3AD-7Nq z*PdE8=T>JVj{pktN+1shCpcfX1va4!ob(oR3e!K2I%Q(*&Y&t6yx-E)dVl*>I z`i$ck(cojScAZEZb~!rN`O3!-&)Qv5qiP>Fn}Urd#!C+qxC#qmNfsI7!*knUD?ca` z#@Jwxrl{>NhFE8wIU6DWM9(H-IG|QcXTAG$Vuewmd>k-%+4;9WaeS)wEDbrD!IYZf zIGv9hNhy@+>k`4UH%^tQJLcqz7aP+-)mX9$vM{Vo409@cwhkIjC?*N=J0tMM{brcG zD=K1iM+28kUlmt@>9U?|`04V9(1c}RP~K|MaiHWv zbQQGdirL?BZ-N%C7~R}{L0erv<`Z%UHc0De1x%($f-!GV#wiAF5XCwz=7+~3}H zH*n?V{z+`mk=Qo4YB;l2@@}~ivs2UkH=74xYP7SYVwY4|sVtEJbp6Bxmj)JYXg-B1K%H!xXO$$Y*g1W9+<*KG47ACmKkOX+r2 zFnej1VpkVOmtDn%3;<;TiVBvjej`&dN$IBHEhN<2_YEu{)NZ0|P*drIW;B~rKh-rU zwOUmSF}F@up{E&e*8V#$^BLOxO(kp77$F-?6kK8@EAb)xz}Y(r`+*c5d(y!1D7-cM-MsmjrX3{ z7<+!2fj?LL<<`0#FH%v8+R`9(=B+~PRmdh#f7EWeC0+psAD1Jujp45X$D3}!pB_#B zbvt()SQ@^-p_^ZqEd7B-`La*v6TBT(3_2GC(BE6T1Ds*84f9b|n7@(fC-577cwTnY2BUd0VkA~M4kx*`4Z?hX zQbO!{#yL|gf0k9yN+KT33-E5~(j%~tKws;3vj3{!1b=>Z%^%=u^H+*|tMF-(Q6Q@^ zkabazCeEIz4cDeRUT9x>Nvn7U6>t#SZdW*Q{ zt)qMJ?xW)f$6xO&;?NLb#l_sBlWNO9lvxFIw>`m#{-RtlF9}~Lw#`2GERz^n|Jx6a z%;V2R^tVS4bH?mWYg1y)E|9#zH0%ZFN%tua%%uTXjn9)h`3-L6R?q&Ph7aZ%Qzuu9+s^Gi2KGG3pPzD1ix4|L2k@HCj0*-Bd0w8O0c@d*y0FyjxpD^1FMs@C z7g$#thI#q8Ing*4 zWPh7n(M#0vMKaEn2rf8Y);QA(9XyE2#xsb|Pm$=#+^{Hr&_iGk4ZPQ-$~J`gwaS=P zXWR*HpGMqI;c@osThU%nOb5@9CvOw2zoxqn8ZEQmP=|hlMJ;3w&wpVI433tfa_2$) z4o%PA9v;?nn5MTmJjVL0-Qz1BB4?JXdnI~EWdFU1*-b-Y%XY6@JK;5^9xCj5O-TI9 zaa==t`sG@3ejZD1YKACqmS`2Nm=e+_wJxcX{did!DV0gAm{nv+k61U%LiaBPaYD#+ zZ9MsbSY^Vuz(m_|hsWY!x!+R0B9uW3%Ei}`3`6E5+DN4&FvgYec>DkG!oNID z;c*r}1X{Q`KXn`$V?1VCXM9K6_Iy@Op}lj$>)d3f0lqBK(j^#HWnnOgHzQHYlj~> z9~1vX(V-}8?SaO^_M<=nG15E~ z`)L<<6Tlc!84}$n)mom(xJ)anyq$hPN4o3KI#B2NWeH5Ow#?WL)$m_9Ev1vVdxZo32PX7VCll* zfzwOc(S(w=;2BmISHaA(>hNl_({xiDt2-e{cuLAXt+hN&^Ii$?$Gl>{f;?1{I zXVfikIOQz42BDgX>U%TMdM4lpG6v)CxSLlU*vR=}KPW#`794IO1f~qNv;?Q50_OWX zt(b{yh?>E#=sbOw$tU%F^wIwSoWU0Ily2n0mqFStcVtFzfGuOUPBGhub#9Y8p)SqT z_Dp0QmlcyB3Kw{bzyCA@bmL1FvyjYt_4rM!o{+Y&FM1iGPobKM6owkCMyT>9hPud7 z*ob+pmiCbayV4`jh*YG1@VUBSPVFeQo?jViPlJ#`(z|HkG^bd;4wdVA<NR5{eV(r>l zkdVhzam!SXJ93)|sU7ep<)9?;8LMG4P|tr_vTm%%fT-TDibA-r%oT2N0)cCOj6TC? zKF2PC0ennm%L|bvAEmGfWym}63cmCvo%c9=aG9hJSAzC_(!fT5ZKu=Cw*9NophX5- zsR;H5Aon35gLJSnb*jefc%tW~m6(i=jhDy#xrDrdF`mJvaSsYp_z8p!lOJ!T2=@yN z2Ac<_9Yr$v*i9QrJo6MnEcU*jV!nT8;|O%%T=ZVyJ`NX2ic3b2ks8 zJ(iOj8BBV#Q`JlxHbhJ?rn|$>_vBMM%);TBA(R15Zg&*FPL@2h(4^x$+c&ea`O`a2 zVF;=WA5B2f<}D~?gON-(_vJ!RbLY>y#kkrqlxcuUT}8fTvYc<9C$a7V5#@ZiW0A@R z`U<{87v}Hoi9?h|-ObXfSYU@Wl;v*X3{BE7M@OLS{k;#tq6io+oNnULc;Z>(e2;Bx zr}=iaCWJ(fxCUz)ZY_4ReAn34 zVe1bSmDE<2=C{Tq*pgeybALD^W=KWsk}#uMp9uA*5Ocz|IjTauu*BkFXvV*p{+>>~ zJ>HL2o~7I(dXR+2);|lF(Qm=}Af9ehC#zF)_>081bbSKB2mf{`YAJ%fWsy{(BrW#2>%Zguz%H1?8 zCZ$VKNe6oj4I~M>GpAFn+T4+K;H9{*!>rWKxrn*CIv+BiVXo{To=MIpn(CYaIVIdA zu}lmD$_tK-jbry1Y1v#YXwf7<8b^0#2LGx%sU+XQ+gr_&eaw<}@D-5LLxj zJ`p7w{2tc4a)@7}INp;N^G80cRWLM59Qu>aJuwhOcP54p{sN-~*vKT|eVei!MeH&g zC_7CWmx1^bKm+$v!PaW&FUG$wCZq^xYhq`cux29eiYig{@ZXVZ<_^;fIvfj;Wzd3~ zZHt*FC(gwDtF%6W3vWm_QB8b?PHPC5Xzo6UQLTfPq<`Hi;NnQGg2SNfZbp~{obruEc0S2SH&qx>g=5pwjFYvkP|w=X(Io}X_{dBKObiqVy@K9|3nqR7;Nxb)y9ZeDyJks~8xqWZ6Dks8Ehj*0Y_ z-4XV`f>?fMo|7-j@!^+io&?GDuPA!%%p#>(zpx%^M-jalhTqZRPTop{b(kGbLPrny zSWgAOCk9goz5B==Ibonq7TzKB7V%!8GAYCA@Oa^>QBR#bK<+A~K9+{o{KPYAgOE`P zj&(X}awf|{u6ODe?9zfKk~(L!wjqYXJ@EV}#PNka9%)5TdcMLLo8~ZRjEn*gPR1ae ze37*u&2WgY&@%$y&`9xeWOZV&&zPA-9~_-mL;l+xf*Y|*=YIwMZzr7vJ0M`o;j`HyV|u3HEW@FIn(ETMVeAg7)X%i zV#&o&c}ESS`xJ%7%F^ye6cpZL5{_Q-ZUw>84X#}BU93Xg=cOy-&wB8sl_Dh?xiu@G zs=>GK{vacff@Su$R0yXK;73NPpHV>tm1;3U-Ztcc{{+ndE_Liuzz#JGua?-QeEz&E@dy{BnVmU)VU_*o(*Z~k;!}a;3pFNa2Wz=aH~_PqszI+MO+2|QQRPmSKpq@x-duo})I0Ra(Ct+Y|La3#BGVsw>0 zEmtFO`>UAUgmCkiIfho)?!Kcmr43D#D`pQ);bS8Y9moj@3WuR6x=pHfR|$2i8IgW2 z&|)EciDzRrz*~uA>*&hOer@*grh-^J-i6HYnDc#AQf-CqZj?m~IAhqhbapxlt;X4@ z*p=)v-e#`C8j|6ZfC*HsTDz2-=kbC~!+FHq`^Rfh z_Xu_RSJ9dJ)2n(iL+n@Z7-BTLBvxFa74riY#Zqg{H?K5kCBPiLt_$Lo38Ar%dfZdT zVZvqcp+kW`Pv>=74SV~Tqf$tuv`;8Ez}?(p@e2VdnfB(#B=1QC|1>f2id=Au&Q+jq z6xg{{9l>;86W^;D*dX0&up$*<(xHVLmq)<+_IfqYo%n__fb6~YtenL3;94LqY*m55 zUyNKi`#R8vS?hjwJxI@Fh>b6WGW##VOGN*VDj`8WWy^=o+eWgjw;3e<;netjF4Kdb z4eXoa`8kE$fNuTWQ62Ou5RM-BhQVX3oDTsqZ|PTkOSu$jy4KW-*Zb$e?&hnS^5RQ& zb~AQ8C-OPpFna>&zC=DrHOKU0WL;*HBfmksgmOVwkXbNys>u##w~sC}@JF*ZCYl#d z1O5h5=Mx6u0Qu=8g?VOD)0$PacGWzk*(M!9@?iyRUwY!An)LM>gYGMtAW}oWtDoN~ z^PpEya_{rr@4vPC5~SORkdmaVf+$m{1EV|h`d&cDP2!*S^N*Rv^}zlfkwtix%I}TW zTUMQc$l!@0pGwS7F5Ed71}Y3=Q$+2Z<$W$($%XChU&4100e0*&F}!6ovk)ErG2_4X zJ(WA+=B0ywb)dG|946EIr*!I6u{&^fGA0E}WfEx;JfU1YSAp!RwN)8@xZG>j@Nbo< zG*J1MobiV%!B)T3u(5sZE?IXfy+R(Szo7b~c&mHNF0DUfol@{_oWwhQlp+d`tkaFS zF(jrTd@9%O|G^GdSWC_dNgL-AAU0m}AHl=L zcdE2@FN7?yCf&g^eaQTsi}<09o(EeO2n+H8|Me>gHjgMgRz7Z6+^5P&Z<-X0?K(Jw zy<%>L&Yp~+ow_+MI!13Iq_`z92F6v@f4|*`-+_N-<#F{0ExTP&&8WjY`+o(s(u9*z z`VE$QRi1P_i+K@uW1ntcvMrrPB7^XkGmib^lx6{wXjGVqYnDmc`JW1D6D@0Ry@jYj zgYu1NJYdH?{qe9sB9y`bOqEdm=@Mb)OQ}YV$}F*nQCr*>Q~yJ)O^VJgGlx~)7m+~( zUwsytL8`OzS=p8G7q6^t;DwA(%`|FFXI%S?*-J5X34oTaCSvaeq>P2VOL8b;Sdyn# zq~dd(p9wlGFK|mI5DNdH=@=c#))o3I5&xAc|3S$Apq_sU)IU0{5i|qR`=?0(W{sEMlFq}-^0C8%7MKWzA8b1 zcWH1i#JMT9$I5)-ofeVUKxXGH8WCWb1gkLfdc1@Z2F4Y*R*;bWQYI(cg_7LQ3k7=f z^cQITPXqhkrevwM_xBZ%hjuJu51j-6eb16WAdbrM3dbQ*^XRenEGAw8RdAY`O>2V( z;D1hGvsVgLHo}U)Fl#Fy{+Mc%2sW+3@0e%O?P~CDh1t`n8(L43GmBZ0UNGJ%c^_HG z!v;nlv@3su5m_WN@waH@$M;bC&TQ|n;%-2t@iqqf_oGCRhTzF-JBwDYMhvFf9Dkt% z;Jv^)Qy|quDBN~ZtY;P-hr{5TVXs2jlkUEbx_bKgI#YG?tXM7CFZ#Vti+&AeO6S;7 z>RQ)QwXUWaPq``td*CCA9CvpZg{>5ZtAvU1iyBgFX$1*gJo23if%n1su8-)7x5&U@ zA*CW?7)WC!Q$>vOcKK3Pe|B3fm0QyGji)=;*m-2wyc4L zC_?=P3YA^5h?E+7ab(Y{oj4ZlFI~t@Wz%2`?JkGatL{;GK?N%By&D>jyV$$7N+V|9Qu$ zv;q9fJjFxF5cWO7X~?wIi%s|f4&T!diQ#1PX7XnzdE>w$JSVRiFF6~^c!7piU+>?` z7b9v>A7H(|d?>I-dj#XudKxncM3EXwiZ%E3`}Qg?B!UjIb;rBzo``BdQ4A%g_pN^z!(> ztmdHde9ec?RCbjUWAf;?N89N>DRv-#o3QuOXqn+3fA^DW!?E} zF)18_#)f@`>FSZgUgn$B5DN_naBZSAQetu*&e~Spb>NWjAXpIA5rhfZh)c?l_j0I}JXR#tk z9-Jm$u4W>&XZAF6W8m~x9s6YX5BXRT`Y3E_QMKK6x23Asdi?Z@Yk># zMxdv!dzx$?15fRCL!*1+Cr(@lCrd#gnojE5d=V~JxF?5;~#^v0%>gf*9u?I(!J zww&(glGi64LL!fHpeyfnyN@132n=h=NjjEiZLfmK!-oL}co0FcVWw@bqyzez>=e)(1Oj;vQ2uZy1cL|dhFjfZt(?9AgN zg#8Mlc{~53ASx*SA)ECIW`S$>STE9*?himmv?Agzr}b@{s-^+mh#qp)Hy~Pu?5%z$ zv4n@7>DJuS7@aXeJC-)^;r1SkD4mkCGWeIZ$xz3u0U_5)es zql2A%;kh_o#%srt_p{0KR~s!VGr!(pjGT#albRZCtTErc`3uV`f3!XoErfPgIQ^*L z47tmeU0xw+CW0)i`}e5eVacle7QkE_%BXfNi8A4Kq~u4<{U~fVt#bW?PV&3&TUcAO zwj)7=#;(GI24@Mbwq7F* zBxeezApQ`Bysjc7aT>;?&GiN{U2&*DEgLYWpcGhqs)K*f7%_!;CtH|TDV@E6nPX)3 zXr;+0c02H$RnI`?;%*N!Q8WtjtislG23NL^RzV9!O?L&xyuvIoq1GPYL{6~}2ZbpM zSKa#vI=H@I2uzDQ3>|Tm00br37}f$4(q*m`FFF)e?xwK_5rWhC73Smf9`#`}D?+ru z6?<%s-*UG6p5$*gl`V|Eyy-4KsS+R!@d(WgG_zNkAoxH;^q|Rh8(|*3@m$<*uilyOy@`&1_C|{J20CrUCk5U^B zreJt2I6sNPZ>4exnjO#d8)0rl04wJi8v*pQlgXx#fC$DR>M1x}0=U)UMJOi}BU8m7 z8k~wJt}qB3fyV>KlCTUl%5mI>jvw&p)+=CnqgU+C`slKLs~mpEIAsxZvb#k{Rj*Y^ zit~Wx3JXc<;G9H|xxm8b?cVm=GyrsH?l`3|OelrX3>e;v{z-R&^qLF^(rhjbFO8!L zu2j)(7zzZPk3;)$bRCK7nZ-#c!tT#+KUu!|B);CL1uk{eDTyFk(8$j!fA}GOByG)t z8gi}tb!-cTf@So0w<**b9O;Aa~!N;P}BJj@TO7d?=NV;#u|cuXGOJ5 zH?WLn?&T3$K*-3Oo%uhh4azfn9Y!mg=uT!p7pKJo?=Up*Wg01t9MKg=%FY&lmaS@2 zz1=rq80HZmL{oQ(%e)6|S8J3Djob4UXrEy~E_cWpf-Ax3Ds4W~9Eq4+G#Q4^Gk zT)UQ{;^rSYJzd~i1CpnQj8@VJFSn=AnPvoQLE$|cvz1_{jAM} z@it?&A5 z6C2ys)w(}G?7hF57!Aor^8)SlI`Sf<7r1V_GTb6HbTE;jZe$Rlj9`cydD9oKoCEnl zkhmnQ{Mwj2dbI~`pAseV%OkMZRsa$Yf_;?K?ifBH(E%MM#<hM@9MiUa@5drd7yXba~-7Gu}CmGHe6&PtO<* zr!Xvef!}3ND#Ey%o17a$S*>+HLQCFI^BI=h!7$rQ8Dq;MPyzS9#-_YZ4mqI?j=`3f z%dl4J!f9V7ZeUI6oeuUiq32Cpm$a7?UO}1XP~W~ zZfS5$Jvk*s_d)0oy3S(xKPn&H#h=O3WU@cuErlPG!g1E#)E#u*cJMp;r0A97O5j_* zr9`E-G*yYl<;6N~PWIJIIb;%gO@J^?L${~ZC-K1O)ti0#u*-HSLshJ7i+gM+h%pqN z!a(G??~st~$B+`LWqe9#f1gf9)jgjel77y%xQ?F}q1ROwL|mbp5n-PX3K0F+b@a5K zj-;k+3fLWBz;d1&AQBb=?YAW_rrAMHHCLzrbqE0P zS;6R9o2 zZ3hSXm3j0EiIz(N_bFlgDC?%A(2Bn*u5IpFhrv>b=vW8$#}lD=|31&6&g8Lz3fNT> z;-`IqTL?a$20q5jT0Q~SN~oSW=pl5&KQlA1svAyK`?r&^g~ZgUQaMHWXBY?lg2ChqLd$O|`m3Y6$OQ3*=msBH)ZmFm(U4xfSEJQ)FmSLHb(=*( zOgc|i`u7ZKMb8ZN)YHcCKVrf9trXQ^zDN3jr@RVn_h9O_-5@jFeVSum{WL)5i-bn% z8;lUbCSE9E15L(so_paxGp~lN&n4 zB0hbn9ZzG#+~Q5*Qn@EPa%wqeJU885%n<)cMJsyy{(Fz$n9wDw89-`d;hQAzI29(JIhyQi3U zL#TW(g|YmdOc%DgHoMp5WAxQ)6JkHON^e-YqHARDUvlh?M#P?1ejq4Hvf%nLDvK1) zZigmLCPoqfv~bv`W`!{YR2#GY$}q~~8>Qyu>Ly~Y8a0ollDYlCyQd~tUKjj`CgykNhR;Z?Xirz6{npq`rxkk zO8BvAB(eug z1|+8WFDwL!j($ z;mJW`d?oZz^2L@V=Ofb^6)E6be+B)4{(%N%2>wy_os=^6sQXGoP~$@t-Y$TdG`W}$ zl=%MqMRfYhewp1KaCYHv3tNTgRh-y)PbHr@7Xs#zYp7=x*HRsw@2Ar7a<#`!WEA1b z({v(CNvkAk{nkaC*AmU0t)O8X9w=C~`BOu0Aaik%TDUD%4AEdOp!uQ;=t3*0WLTGa z4Ue-ybCqaAc)c@m1DBY|Xv~Jf_=amQ-q`$0nLa<#)NBUahy=}Y@@Er5kC;ztfgZ!E z!PE|Yjtx8ig&F7eimrjcuY8`Pk+CDsx3QeP;F`A9{na>FMY<+K7xEuQH`dvj#C9YP zNE8d2io&rrD?t*-+D3*|Zv9?P+#OBS8SL@gWK2>shN{>K1C0zqBJsE*eFnLg?l~dX;MHfINAV zZxx3S%JO&}YP4qLQ?YD0z^H?u^SYc%H*{*O>4*T~*qP?k?qDdD&?SW6JM<--=nS6x zPp6*4yh{R!$Ng=hkuZ*s%4@p@T_9b^232Xit6h0CD)iaru+`JMM)a23dKYi5@FA$+ z1s?=9sQxkT@0>*q6-xpL6}f>(GpM?R()Ic_AG8Ov^fnlLTcsk#3LRdt*jTbi@vp=!IkxK8%8I$8~ANRry{oMElsylmlzAG ztxJ5FvU6fBovoF1c>WQlyg-;6%Vk0G$OeIAqL)L^_!HJrslD}nZ6}^DA;tZZRoqeGr683xetdd^j;Wkf zB9!oEJqZUzAtL|rSBlQU*2s@m(?vArAmAmr?eun#twK<9}D=(KwvhkS3nl>sbaP)xHKoio(Vg z6$wPFb-($Za-|YIqq#GgrdbaL(DH#a+XZLW8s7Da&7qloQMKmB<`-YSOcaB{)t zotckhQF0r#@)Dmte-3tr3zfQzK3^g}$azUIz6kk<Hxn*3siQ^B}#_t(sCkSoSDZiyRl^{40lk8;RT` z8!5C%2)@_H=Zx*6&NTpAZObTKw-Ze@202|c8#=bsIuU$0LxOP@(T+_oiU4UeW}L0j z)v>+**>gZXZm(GR4@ME@JaC)3eOKA;eoHUJy0|e;H4UPVa3AV&4sRS=k(;$qWW=Hl zJv0jEueq5&P7``D1v@GV&Lr7ebG`-InacXFto<^bV$9+(`|^SThB&zh&Qn?@pulYR#F49{30-!8dLZBMbNp(GDlEO=>l`&IC$)-pVuq=hflj&`tK?yXrcYgz5Qpd7r4+zB%agH!#nj z9hjHBrJk?o)V+KeIkYs$UDp=QJR9sE&R99UE|I^6EOyFtw1qB>f)#hAlC2Mu->_2` zSxYYz_Q3c64vLFQA-_+D@|?4O3|2iNo{z~n8qyEQc;1PfX~doVT;mYfA6w7`&A}l% z9rmE+c2+V!s_0hN4;G1A+1i5G{P}?_*T71jAWG=sb3J6+aPDMH{L?Yb`ix(RgwhQ85BD{^n+gX z1e<$h>9=opxWj`xSj0CojW9nDhuxk?Q6DQ<5NQ>yRvFtPz)wY zus>2=Qof~;q!sdL^b=n^D0Sr)|Mc?PjvxBhiF=T7%K*b$0gFXQWoV_UTwhJ!@~=kE zs;Wp8b8AZIhHw;`|DN`Onv~r^1Yx#_#y;s*Ya^_jv};F`o3&y;o@%neLV8Ux23rIZ zykhF*Ou)f!&*4rgX$NVRf_4x7^(q#%a~vBdRAlTKgZU%x=Zh7^u(pcuK4ob85}BU;A*mqs?9CUX#F|BvScRS+}Agey$FAr1pL zrwZQ06uy%6)pp|9oI)bVaz2ll9)H2H8q3LVGz92tN34!98 z_li`{y0T;YIjT-(KSjZKR(g^d1@>9@jY3T24ll7`N^KgkI&eip%-807)F-YtH~F?Z z8|MYKU1KIV=%}(GE}0b~(Z1LW-ZG{+jYS%aRNK&SUQipX%$fvIYWYnoCuWq1u`WbS zm`Z`PZ5lmVif1bW3C0dBT7dpWxFK8d$ev>Ss(<#uZr~%I%Wx2+>yB-45NEb^OW=4` zn#S+U)t*aXQnQnEdXJW2;?H;N(E-VPG0_|GF6%1{M?e-NPYT%wFhdH@cZ~FNjGN$s9`xTT zGmUIoQM9f@_4L`op>G66@jP+Gl*Fkb>4q_G6ln79!O_ra>e^!O0;jp*|7ayEKHlN*i@G>LJK30 zHMN*Qp-u%O00#rR+Kd3tE-qr|zeC8`RkMID=s}H(R(+<0$q8gSgjQR)XImhIz&Imb zJ>LqmkL&UuIwPxab{{KCqeLo^cjYI|Hb=+IjMIGO5QMoPJz=veZNxj_&~a=2SdU9Y z+604hGM;$pV+jZH&R%*!-Bluru}!C?ZIzpm#E38I>>F00PM>Gpcz$tL_YThqs_UMb zL@Q;+6}P8J1XxbHH|l&GSS2WNsSB=mPdJ)Xmg~JHN0GKxdcYD{oLJy>5lWoB_@pTM z4m;*`e0nEoxF>eO()(uG+qcmmmQ2grwi@QC%q1H1O}d^?^CClN6Hh%EU`>#o0(XhG zy?X_rAK7`K(d(9Ed9RQ=gf{MCE6Lt>#tfew>1_a5(=Phd_G1>tRqd*~HIZ^r*};K` zl(Uc0>5D2|7Ya|qHC{03^ezC$lFQvy*JD2;D4Ry*-t&s zIKw^z?5@#Z(?V9a;_ESGEQ(9i5!Q6eSW+lLx)`@=cbN)!ggCxZFIUPri)f;P#Uqlw z`{2R5L3~V6Qnb*G2B@ZPsJSUiO-Nf+vU^bPJ~kLC#kuTOCrd`jv}tj|_>=b3T@e?IhzU4D@$z>ABE&Bhd7Lei)g zZT}kpK|sF0It;xsLi0{6Afwig7X@#H$PrON_Mq!NtkTl4+;58N;S zr|CAfrmu+}02>N9>I5jqhfsiw89bB^EX-M&CE`5j z4}u!G!bH_8l%0<8t9s#vZJj>0402I*JKg%o_S9Ax(Ao(o9jh;x$sOs@#bkAi*DP~O zL9)&^Ez#piXD1#5mA&SE?ODLg`#|7G{&wS67OFUX?Qge%1GoDB{TqB9mKCB8~6)Bh886wl`hz=J^`aZvRm_L2X&*A25vz<)*}y0>W<9_c7(U= zF7$i#`z4{H1hl|P6@DTC@W7+TvWKPN=qBN(K?l#D+dMF(pb8IaUer^(u(Ji>D2;+A z@GRYG`(H4UD7a?0N+?*LSc(uWmnGdjSpx1Upk4n z0fH)%uJCaPPSRxxTX%brqylUS{jex8eTuIHEu}Pb4ckaqDJvqWD3Aj(A~00A7_K_T zUplH+KA~2%M;A+h2vPSK#SREvEHNWuzxh2ar=_ln+oWo9Qy=*QkBFpG+gG2vVn>@` z@^_^~m^>qR9ViGvJJ@zN}j;e-8yXu&-|4PR9!kom$5Z_W)Ub@$0aFBgSC1y}dO zbNr0K>ZT{?Yy+lLYZ*PLK5Yca_MbPShR)1tX>rPAI3EvqiSFo^ zc^f(tu?UyN=thAZ<{~9ygfppk->Juk`EAxW~HO@Nj>+!Ni`kSaP>$0>K7$hZr%rnPC1R*Wp%hPLiM+ub)Xe zct>&NVLe0}|Nq6Bvo(wu*%|1EnA#6Hk3MuS-h{Sa- zG1xC;#8pA&F6IfC@TCkigeC?+RdlmZ;=v>t!7a@Z$+v9#sI`gl^oBbXv}fB!6$?lZ zumf7q*{4Ubf^>oNGUPc{l+C;hX*{x86Nqax@Q0w6Te5&;Xf9XpwHasIfVVsh;SEOo za|_X8sj`s7ZS91U&K3aGpFx`ErY$iK?}h$k8(k6raHuqO<2|XY_6`fV1&>fi*z|V9 z?4p|7JN75p8=lY0bOaxm9-HnwZneK}Ss$Gk5k`6vF|jLX2G^Wsee5h;&DIfEIIX}N99HwHiBY$!cA4A?U)(+#?B$;rwb<<|^U zVRwd2`ex3sYuMgTp<-|HdLt==I=*B_rK+oT<{r1dPI*X5hz<2Atx5=Z`#|^ve*aKM z+ftwiTlR87Xy3{WYU6M#I2B)gr$A4Gf*Xb)C^rLiB}tayXdzz>X<=eA)3o{=*uU#Q z@Kdv!p*~Vx>1Hhy>A}0xAujP{1ojVpj-5k7P{$*E&+z`+;O!pLnk5%!@4zn>D^$bcyc>je1>~X zhFE{xLK5Qq>(C5FfrA>FQ(>WwgUsuz?&{b#=V@S)I$rUmQE1|R*$$uL{3-Wx{^>OdYPoF(5O@3}Q3wZi;h0wd7F~KI{@R-&< zQuZNUa}jIk5GlTYFgAVxtT0QAh37$0+6M#Kv$FCEKsaHY)Lu`3iw&#c2~FejORL`u zz+er#m~8mk)C7S5u7iOtIMZ7Q?y7}B%zj*7h-`1m&~MHWU!2lokxqlBhx56^&jja6MpvN%-eZ`v??Y zzF2<{JYOX7&KRRQDh`U5I_6<^ryuem6t`=tAW5K;`!3)9Zr0@BCseaM3hfcnYB<(1$jyeql*c9AVt3$j>D}AACJs!Zc zhOjy13uWWc#85EmG!W)64S-NO#CE@ zk!0U8WnCAwAM*Uw0}c3)T{c!v=8CP14Nict{UwHtR=X=~2L$VhC<#GV&p;Ig+?gJe zXVOZPxj>}Nb?4f}^zn_&+9FzC;NSHq*N7%3os(0V`*eQ=;wfaqDPub2%N?g%pqrPj z9Yl)nIK*A8buClZsSZ{KhVI2tbh?`L32dZxvlu7v@$=;{n{<Pn*6 z)6{|z*xGb1x>so2*>pfYzp{sK%azj$!D~UV$j)XbjwfjTgZWbit{*_fIlV7+Wk2oo zZgq1CQ9G$RZnRt$x|HXx_UA$*6g11o69%$Ea-Bklh?1#4h}+9(Hh|fqZWp@(xPC&g ziUjhn=ORkhiFjzYZ}FtR$d? zOr}kduxRC%P$F`XR=|bw;yWL9OsMfA0%O%twPxXmP7v!>A%?jzBh6RK?A(pn+p8uU z^VYc*M51#{Le@?1&UM{amLQ!;1lXfZw7oY;Cs7!|pGwfD}w{&r2WV39_ z#iJ>e(Xs;U+Y+Ln&pM#ce_K#M_dRKW(UC;b*#S83@3RhY-mz1+y{3sgNAzYg54lfp ze8Kj2`O$ini&gQ66Xhj+;32O@1cpr5GIg4!YNm5)$sE5u#Bytq!4N*&fQol3F&K&> ziD#-yS>t&A7MGA->b0>cBz!D4HvC91iY%c;-Nfig=lDk{7G~<3dV%giNu>?y@0M-Y zQ{X>kk6;1Xz?S*&cb+bXXIP`N=nq~Q>M|0`G3|aTq{_392sd3JDI_`7u`#Rd#gm-0 z(p_qvFVuU%E3KC$drwnAxEw1KBx`ybP-mcmIoMvwCw>is8o*-J$JYy{i>8d#_BZwe zDs^Wu7bBE-2wfuunJpPBm8!zJ2cChMWHl~RLVk~pm?cglury?DdW~DuAQ?I{t&r=8 zFY!3o<=9w-9~s0uZcIZrM_Xi&)4vbciqaGj@{4YIr3aq5M1cfSd&JLt5IOPvlkcc_ zuDtkaP0wc#F>p)-p1-% zDzw)-J*cyWm0hig*T7pkhl!Y0A+ zHoFM`Oe-bC|1P{dp^v^SzCPIE*}VaFn)eTtSZy!&-Tzu^*S0gy9fX0k zP*5f4cQO+TGynUOeLueVy7jtwNfYWXMPlsw085Habj2089sm5O&!fc4<@GuF%kVbr z$@iqQf3DXHtwk@>W9bPRzZeNEX1TCr`X$eIFPk;54x&+{!Yc+oDl$f`h9;;XUg}dSpcZb zN7O+emkgp?p`xW|DtR*Rp7Epu*efd1*-}|r1XgP^3UiyLUcb`b^Pe=4TKn^LIkgAJ znP^j*l(@U{0uWOBmmu2s3Nu;YzfAVM8qy^!B)h$M$N)=m>$Mo3WgX6!*oGOGUJvWQ_Zn}A{xY3 z)5TuxGXo%Vz2@Q8p(9sbT3?a)L1{kFS|oYbr`prpXCSNi*tAJ8(hAiBELuEibQ(QdD7++mVe4r5gDi2iL>?en{H~A&37ac)8csR2 za^8|g=*!31r_R^9V~f+D-4pC3y+gs>Ft9_o?dA%x*=6U1eQM+d|Vfda0$7P9$kdvbG7!`iEjNC|Dy3A$2dU& z8y}4=z6!w*e+hP!4@O-mBGNl@Jkj1Dut@3;@pDqnORAvPl8N|rnZzr<^hm4+B6>EN4^!HmX|Lm!m7w+uLnwN@ zFh_r!Ld5e@pr#e78i1U?gfr6N&klMyPGU{{01CBn{`QQJzz00!L}@A5DIn6P4f1Jf z=kXr~o7<2SR-XW4A8L#!d&zT6h_8tUzc)U2nczz_0^2~eaETHnQz4AZ6Da;2)U(ux zVciExiZvHSxyCWIC=#oRhv;%n#-lHwVW9&xO@Gr%xVLRm|2P^Ud0(}S4ahW0{vdwz z85mxqz?k=5L=2FqP@CjtO6&7H>?@XH9r2PXedNq9PT zI9yYsY1cZJ*R9wcjn*l5%IPRINz>uNXQcS74)f$kPq6tJ7kbkOb`Y*dJGLAqpNt6>15aqvm#rH4VL51k zlJfhcMU%#}=_Jx?1L2{(aB*v8tFz%Kg3K^c$+3D|j=_{=&iog+WgDY3h2eiOSEACF zm-HN>-ZRkM-rj^s(t=WtK3Yl&5?Z&D_Gm*-jzC;=9)6tjKTZz^({0}k_%xFt zWtSh&^>EQ5!JJvA2)6Z9Xi*viq-<;wKl&P%i4{m4jJj)!sGS{4Cn3C#YYssRGpmbk z0-Kn53;%j{80_NwV@Wg*Ncv{Wf94WVI}2$f=VvH zOY9aQMmMm5c9r`>JdWa)su>_r1tE;LPbz%=alleqded-D^iL{%zz!C5&_pk8vLk^i zE`#^(V<%~7rwHds=b-n!nbCWmnCwLgXCZo901t;=?XlfBhet~-?o!->{_WFlNUYV_N0AzO)3&%W>ZXEQW=_75u8^ARAUu5@(tqcDJ?Mp+ykFD< zwOl@3O=mAwye^|EEi>e68?Ph&fF~2F@1?xTu?ly)@Yef77{ZrU*ReKGi2U=n+4Q8~k9TamQcqHN1uZes`Fr@_Nb2^?=T$ z8V{b`JWuxj5#{9|iLX)9C|8UC%1>I=a9#V$G=@~g$pCkL=d_(>Qy!u*<(DG)zM zfg(_kvmyWV5=uCs_xhIAj}Y0F1)0(w(VFyh-vFN8>4M@qA-=0Wkp}j8`WIpE7_{?g zm3rE+TNNKV^N#AL0JyF(Qua6`%Uqqe>w48ph8q2G-h}fwDzZ9}yUr&$u;?}l)ZT|H z#_7MPg17dE!G+vBwc0g}pSn5n(X3cbJZ*P9m{T~3JkktWV(0?n{gfT62tm2Cxlrtp zq4nzjJG+ds&280#SZCXqEj}x2$ZWj)23Yk;0PaC`*eQ6Nz9}ovfZv%(e{~nR2qB&o z(c3W8wz2SmXwIX>VXnTTtpZdXAB8207p(HZZCPw6;__~e~%5F^v&T_ zau%{YkEqiny%9w|-A>V&q7ifG8+Vk{3=~87Idw}uB{C8jV;t(UHat`Ra>l3$T-w%& zRuU=b1~v(@C?RQ%5cj2p`H-MI;9vW3sZ{J*GjUnL>gj*McDSZHqD~LSU`}i#;Hpzl zoxccW)r(fZeyqA3Sa|~&B`O++)0?5j-<QBeP47JN8A2R6K;4V*Cx1zyW-Vht$-H6YO?#HCFO zLJTrwmmM>FM9yW&Ci#;OBNCQ^VA@f^t!4Cy+_Vx@Lt>126Bp!3lVm)f`A=~UaP{3N zm1=H{rvTtACi@5oKXWN#RHgS?P@yaMoVtJ*1>YveRb?}npCFs0?gU(wIg;69hk6p! zAF5~?4fy(%5%j{FtmB{^4U{Bd-|>2B?;aH90XlsV3CLVq^Ud}@l>BRGF8NDV;diK@ zdFc{GBYd))RlK;=+BqF8B6oObH%zSiCvk0=y0?DdC_XG~5lzwqkc`GWY1rZ=&LY~- zQ3R0CN>sx0T4KQ2N(D z>7N8H6#n+Bk%|NyJP6mlJ>_V9uOHE+Z9DB`AXcufH}&@QS{HL|P-seA-j=Kw33z65rQ-|y);{a0AMz;BdjSIyPf%d1+aYm^iJ*S;IbM~MZ zLljmLD}X85 zA(m25YUbTn01V{_h64a-dhHXf3QcGMUCx#WQ>=|(004j*Ncom-k93=Kg`oOn{hS^x zI_rR-u9Gm9P@tvq1YmO2?@kbu)G*FJ(Xbx^oyX1I!tVJOqYLikFUvf{KaWqjSP`1> zG|1CGvD}|WqY5B^b%-cjjLSRtz#<#%RANMTZX-m1DCN~!I&@X>t`|uvOHynC9QvNr;_mrBF$0Q^r{s(BT`A@Mj#i<{do8R6mrHf$ z7>AlJuo&s!e0iM#*drRgQuVhE#&cF}kbah@z{mFa~^bZWtI*oumgk0TSMt`7QRfTKB zmvOl8sz!oDA%Fk?1z9HrdrBD|!)F?U^6EyR84|oy zO-v9NRFCkU3h0C+92yFZllh62;g4md7&RXlIFwaBvvESsF^rfRppR4M&s z0>6^xUp(1YzeYR4H|66H6RZkiP$q(aRjbFyR~>4*y{H+<9>r=X*|XC?znC{L&)_vL5dnZeCv+$ho-G{ zDRPxq7qu~zi2RQ-cjF#1>yhH^yt4&Up>QDNZQs$|$#$w=tr*CnX3 zb)ZDXB=i{pf`O&f<+3&QY+^*ADc0ESe*MXAB>}KsgAEc@O@tbLU}sp5$tIZ%JMd;psVwaarb4DVWJqc}n>=pWdaiv%b5x@EmZ-Mw*i@>fw0rLzf3`d z#*I)=_E$@7Z4631up5(0O_;A30XA9Zix0#E7^rHenV+eXr=u*dQYf$-RCBaUh*N3G zJ6O^nvwZKPk8xpWT4CM?vr&h&kPZDx{#f-aa}61RRy@hvNaj0TQ>kBfs&>sxN~|&H zgOP-wcWs}YPZ*4$i0+LSBr4&p0K6eaWmGVm8aS{PaaAxnbal3^npKtbr1rr!m&&se zW~FSGZ9}o;p`md1`NliHJ(rq-0P0fc04r0#EJ6&%68X`kj1{DR==xNzG$AIIv#(1M zU!x4rAw9_;*pIpop*n=gD9M{~+l5cvh*jtf?eI-GADZR5lW@(xl=Z2^BA07l zr=fNTvBoR>CGIw=UOKAiUKL2m<}T*%vFUofj43gxoM>oDVB}W~L8CnEwXg|`B&q)k zyH7pmvfNt4=Wg%piE-_EV=LBR2hhA3z0-T{OQlneY_xS*Kv{2Vugl>}_#2-)_^xUE zVu&*PsJfCflC{SjAX=2}kF8vgiadcx z?AM*0lD=Bq#RiF6=kr4NTfJyH&BLn1u8L)LOaj^HH2wi-DktsCSwR0|IITNXA-ZLnEAR)wadCT!PRK5JZ| z=hI)u1P%frx|B6}`bT#!L!ML5I=2M1knWz;V=iSbY!2-E<5{se8A5imj%t(C zz=`TFR!mu&a+>fW?@s6gj@k7{3c&o(ODge6rnI@ee{IU;FyUpzE+&?1ww zdX^UY0o7BKNtFBKgS>$RfITOuWjE707jmk0xZ#$&lU_f)yQyR(xWaPN=iuf#Xc-9!9DQb5zC(s(ImVNVOTa_fZ2^LJ_GGO@T&>P zq>WY<7M#6d4jaJUNZ32^gJvS8uqhJ>@JsPM-Ks2&a{{rK!#MeNsSS|t!F6J$rxKge z`I6H$4T+KS{oAQm<|$lP*O1T7k4AU(b0*ysvv3CWb%DBh=KL?FJ|{sI$38+k}j5achXp%6sihrpXR%)o-=UAZTD4; z((fWcBj<8`ujq)sU?hE)C=l2mruR2Q-Ytaj0#71RmX--uu?)aYd03V3q^NjEaJ89ma;ByN!r{6Ga?TcxzXmV{Q91M1My`O<*i?!k(gV$j_I z=6ecsQ8#QSt6s@gr|UQ5X6iA-fE21^%|@1O&|zh4dhu=qocY;ZDFW6d1G2uw8&Ckt zqU-Zd?r{YfbGRme1SV@1V+mry;ojv!wBv&;x*E zzIJvyC&kIdDNBMn^22rS5DYjHmSH_DOtanAhUY*UQ_X1TaRrJ!xE>%ft3%)=*}u^L ziG$Cde#gzB<$D93zYZ%=$Waw)mMOdNUr#4lUF?>><3P}jOI^q=iEYPWCz&&ZQ&lLO zD`x2(xM=t$2L>A#x=i$O^F1a?bW;5`Qk%(|w^)YuWTsB5^1&o_!~Yo60tfDo$$)Bq z`Z7W`*xIa48q=;nLJ1kE$-C^fFfj2CrVV(I->a%dyhiZ^33Lf^H2zw-*29AT75~ph zSvWE5OLzTBl1WCb9O#_{tBC7Q{K`r5cUjo69fQ5*Z2Nnipy6Y2cM!1>cT@=Bgg-l( z-QLKwnaFUzFEmisE&juV2{>7FB&S&qP37Eg$H$+F{{xXrYPZd+?+6i3 zVywPbe!7TDf=m59b1z!~=v6y(MV-l(qcBJ#MvGrb#c)T{Bz+E8107 ziVyT<3sn$%$S~q(r*Wgir;c@gQAm3ANC#8~-dYKV6SJJ2;fXrF;GS|*!^bs(d+aNj zYyC_ZJlZQ{_SMJQY~e-|(U?B0Fevz?F-Kwog7aaD$sLwcH&^x(nZoj=#Y7=D{R3^~ z{7l$P{Uz@`Oo_+;#}v|0C2`h2WHcc6dM@?a4je7V3)>f#h_&dDVEi~Mj~8ik7my;N zR@4a-`+>-L?Z*XD25hp)_3AH`Z8rx zk=VMQ{GB>RVG7SGfS}La2SUkt6QP!&*^z_tm=c~HUfepI-&I&0+_c|hxW6{f*E12k z`Zr~|HjHmIy*}EMYnNFSYBTJ$D1i7Y0@S4t&eTdOp;_A@6$lws&z#bldq4ne9+#KZ z1M5eYcAq}}$GndUEC zo)U};OM7ThSl6L%^4yQ17dT<*gN zxZJH1`UyBqQoCNxZzy488Bd7s%=8mlO`cLfp%Y1XBG39u(DJ-fklS1B0h{zbh)NAZ|;V8m~ly$ie-^#g<78&0Mij5n_O358_QoWcO`aCtCC20^I)XrexPaLQuY#I|y7U`JxX8jwI?e zoXP3OV@raDQ>ME;{Wat#Ju|Csvz_Vht&4iC-OA44Fi{FNAW%r%DjD<_geP|7Y+SVO&phTUV@Zk!L+#nzPEd&;NZ>e@9c%5H?dnCf3Qj0=M~w zgVaBl?#ky+L9cjp2MrG$i&^Li^uJ-){1&Gv8w7FT#R$}0T}Dq6>;MiHb6d%f}h-6sAX`6R~#O1g&U*gc;C+lpiD9|-dRK7?cl3Hz0i3q zFtm_>R5H*Ryyfz2N9b+dR=P~b3aqu((Sl`t$e=W9Gy~*f4hv2G`i~GR2aerLax1$0 zMtiP85=AsocA&4z6Lp#c%_#TJMxuQs0_#pAb+fgurGqLx%!0KgkK1nj2k9s5J4WXG z-}tFBGgdFSO9EqMgQR>&DGOTycxl(?RJl@tqk{@u)NDbSkyr5KcRWoFsv6y+^l8Vu-mI2kdAPnB0@+MsYR(j{ z59^a@%grG|?!K`$g8qsQCstl~f=}u3r$`DQAQg(jb=o-<+rtc68T6 zemKw}8}S@}ko+utk}3$@hm8ru$g%k*$IKk%%N-UqQJs^iQM)fZX{Z%r)}Es|C=|D< zn$t%0JzIBIYutahwT*29)Dc-UO(j<#aXz6&_}B0HGrzLZipGX_it0OTwK z?yq6oZmn}2Jc;gYI$xm)zL(JVj54^&k(~iwgmBDp3#fGs&1Z?rlhD-DN%N=A-zh;6 z?1~1nqi~q%Zr8evy7ut25+N{D>iR4sJB|^`k4e8B75*rEb61i)yL)l<0bn1#6UA=H zxoW(xt#~pNCj{For6>yqq3yO#Qy#-M51$GoJ?1FkoI_6It<>R7p`kxSKP1KOq9a8} z=7Qp7qMO7w%vKpnEh17Do5%eOsP$cagkRYi;dp_^YG2xT+cG4k87}x+Mi{0+$;L+> zc=<+^5iO2aPA?fmR zihaL^P*RT>6~q8TTh-9e4gNQvXu(R1MQ;cKpZ&xnh2*^q4^(k%Ql-ftAjmtVb1jZ*Dt5F-ZmGi=o-S^nw0EEOi|} z#>Ti#oJU|t-Z1(BVPX;*;HjJ6SEv;yZAYUDM=Tyj;HoIin~+*P>;Qv^0>CD}^s2u- zl6p$e$iNCm8ev*yMX=n|3vg*%z@}uixM?35fNhUzjzo7U1qA|2b?OF{i93?r-y#-; za2W}0m0Nar5-vF&i@MMqM4jmzx|g-U33+j}ZOzhXKbPg3?-8 zV5sd6Q(eXXtgh=}NaVTrz|{=N*KG33R`W}O`fjd%n)CJ( zpkMhNNI!CkBNtESUM0}0{WSM&8X5nOqRm^t&G*(CQ&5`!vB8I6ArQ`pa5~1;`4CUB zWlKV30K^4e88ElVcAc0Wj2nV|#fpAd{WnmRR5b5aQWR#u)J!tSvP=BX`Q#qPg86%E zs1yfU?kLP3zW+?+4?o+(Jj*X^fQJC(y)DO8GvD21Vz#u<)V^U;Z=Q=)KvwbT2lbD) z$Z`gRp7RuvobZ#JQ_?0J!xML|-*#Dn=m}=Giol=jgi2WnYJf#be#Uqw!zNXlvqi01 z^WQq@C|wJRT}snBK#FiZlsDwrh$RWL78&^`DGaqA@iS!b zpojZSh1Uzz3Hb3ghBFHrC*s2}kVnB0vO<7Z5o;XCQ?E zB$&48U9p(^%RB6}p&#WSRl#>R0IXA38_6Yqcq~gOd+NC4R_FKk^!2(ZA9eleH&s9L zaf=>Ek@~>%(y6<;?9ZBkxQmo%4>GY;XTyK*g@<_EVP zMEWT9%}-;KdDEZjIq@=1`(otvVvC`(c8Gl?(&+2|+MOJlXvgNbm|9_nnTir)R`R8- z2vZT|;QiKtj1*x>)Wc9@9P9l?0|IRStCQr*CE1D92uI6FfKa4&w_8Yz(<#Jmpns$H6N5`E zW`wQG#=g*^Rby3;WCMgqgsJ}*n4no#r^HR538t|P9$b^~s~@eFA3*p6tL1-*dex@#Hr zo8Dau4k0Z{db+laI8ba|>9W;OmZO244hqSY{YV4$L{Akzb6QF!jE3>r4QXneF9+C? zaPu~=p8R@WP_O8@=Qkr-%HUAMzl_b4yL#^Ki>#S z9&`+=XQ~CDLHh`(BOD+O!=YR;U?+x8w25m>7l!lgA=oDA?k4hjlz;KC`Ao@jhq6Z5 zY<7lBxBW)psv9gSPScOabXW#hJmgg(#upF+IsC~teKwJUReqD3n*$caF(bFqDNZt5 zX`uP4vcG=M{)BZXm=D2WH=?h_js(;L9vMeo!t_;ojOB^bFIW9S)!|a9Y;M-@35O{~ z1@XT*z}JRTNi-aQ!UOJWGJ}0H!=zRZQW414jrvGpdo+m6F=}MZS~1-E;_=isO^J_>=)*O&YAslEFj~ zpS-Q`Xpq?n2)xbR{TC5(aWj~A!@0DH4_+`$4Wzv^V%+RT>rD&W7toc8WHf>5nph$? zT*M8`#QbZ#kDoEza8XG#El2Dh5Shi-ks`REL8*@MTDe4(U37=l2eD282R{rLOW%rf*W?1-|F;yUy?=T6G ztOA6LQE%!#^o?Wb3z+zZ)}U0gm$TT_FU)U4$AGLLl^GL(*D=btBy(PRx(?2Oa>>n| z{UGWf*M#okMG4;=1XMSBD;s>x?Ep%;2sXkKxW3 zica5zf`to$qbVMQ!zSj(Phs;0^AN%4-K%N&a}zsPh7H7C?HH2g31N{+pH}dzIy+s4 zhbKMJE64(L_9AaOh@D9~(c`_NkOw8qFIW-AbiTPjxnICsVa4lw%%1yuCLB=ERh_S{ zEB#S}iA=7?--@p($L63AEZ|KbarQ2lwY+n?SEu2}x-eCZc`E*pXM1|8MVZIaW-jwy z4-Rp*#S6aUN!$4LrMG&lrWaOqq`9g5`jRp5_gx*xIFBc7gru*tg`K-wl)wk3b`-$W zGGeS#&UpCuk;L%m*@P6MKYcKOL}EcYTpPzf)9`IVDbrR>odAnGxKrm%AMETXS^;;F zejr)@n>RX={PQj)f{mTu(0Qj@^~vlwD!L#83)R7b8;t{6Bp&ZwMdo+Jeo$}GUwHrh zPXt#?mB{ImLxJNnR|W3-B?UNAG>W8{_0_8-vMbIv79~{JaYwTcRi||G#=ZURLMN9v zbVVAk7dW%#Kb%_~UCwfz3y~eHd350aRlZ)$Z*6{rpDvD`Yrpl5P*`22*D;;#jc0sci zl`(n-I7Y8LZY^wenxh36i+5ErRBB10GnE_mTjCR++sF5~mQxCSS>$Mo#$L!SmmZXn0&Zh%Xf1PSe~Vt;z6==AL@dAqszP zF%KG{$xAe3RZF{^>wY;+O&67s@qQhowJhV`mI^^%-n~BSo?j8{S$t?V2h|@HE`d}6 z1bSp2Wr05a!dtmjSjriOXT=8xpw^q7Xad`O!PRKxrak+^^>E`pOQdKB{3hh z1;MoYQ~Z(zI>3Pp=p=Xi z(_#-oAIy`s;yUyO$Hs*KKJb^g7$u(nmpR5}(TlX3mgVxUS4I!v_WkO&2xPDPg;AOc zt6tk<*^p#BivwXYjxcU>vlMzCY!Jpc5EqpaF#XOWhi7D{`7>9H>~7_Ss;=@qk>pyd zY}SisB>h1cfGyI`bQPENXwM(su;Snu;Lym=mWM~DaMeC5*13k!9+N=c{sK9J=TUFb z2N=>T=DPpZF|nbVkB8k@HC1Z!*?)RUc)qL<))JJCs`t8wtdcU*0Leedh{L-a;rfzr zx{!yk+;i_@#tQA{3NjnYEmtmTn>n$oO*#U=d#|hiyNpuIhjjN*TSwVisHDgD~p1ei+_3Ibr?NC zkmx?-r1US-v{MHMwqZkiwc4>I^Qo_i8iDV8n^$;w9iUhFJXgcS&}N5g<-b^T&GImX zjpxhvXx#1p$j{4;e*_L17Kie1B$&_8)gy`L{WKdaf+7^UI2|~OS{*b=7B!&fG~M%4 zUBpY_M@0x&q*mJD9oz^>K-heHF9mOFT1*+DMUS3UB)q-keHSBa9S3^eIq$YJe5JZm zl8PyOL7aR%EKIX1Z$ygA77Z`E1e_8hN5_8I9Yl3qcen1pQF0kwnY5-tfpwlg`W8=$ zUROr%naq^L`K60cAe)`H0!Y~MRj$pw-B1{R11Y`Ea&|@B8giMMl=p7F+B`7fg?$Gn z?e%AUsEJRk+~evtj@bd?FA}(%xlMZ?2Rm_tk@mek%znWd+g%;tN${^I@QyZ4eZV0u z0#W^tM8C^BdC9g7k@+C#hHgUWE0(-lASp{3-fN1aYdIdiF-O#0@!>>QAQEgm6t!VE zUmQrgF+>_AC>#CX7&qEhMq!K+2uCPT*{?kiVTkT&rBbgv5%TdOU0A5btz@QebmX`l zDNh$j46<_HubffoU2{VlKI|Fb@91B2&Je{Y)X(5JfA__rIqkwRJz6J*U|PJg^~v}9 ztH(LjevZuPWJ%eppO%swpKWsSy8THQ$BU_acXr)7UB<(IU@gpbd;p9A-$6B79oF-O z3&9c%S;8NsURNe3{kC5`!Fw_;bCk1Iu1^sy6(1y7TJ?$j$YU5Esd(gz>UPB+`6da-U(df zVCdVTVeZ`}x(FvpV>i1B;woy#=mR?E*mJm6zUk&qhecKn{sH+(G7FT zZoBux2XHHkUS*e^r|W}47J}6w?kSzw<9;$?cbm{AVpSVy&06zO8%8pWhL@?5()Eqb zW!f({Jt4z7s)+x}4{>CF3=DM(5iRk#yqsZ)ZkbnmSr~Ci(8|p(rDkpt@xT-4C2IN? zJETXN{9c_uu1BkG1PMIzjv>pldhO3Wb$6^{bvRshEW$-hjy26UFkpbp$VMSMVJfP- z8&OU;du}SK3>#-oFOpbVmV~M@rb9z*n4DOp)P&K?w!=lNfrQkzleCzRo)qB9EoIeQi%bX~Iyh)dXP<>~lB&WHU=}Q!y@qF)?MF zcBE#e??to{t+HVc^shBdx*0b8Y8cv4C2AgNvxpWoSC)T(LqPCM%D1D7xC-?+*C_RV z7OKv!_{UtJ6nBYx4;imL3am?A>lk^72;M*9yl`dJK*eHITTlR+f{#VJ=*h8s@gDcB zec2^q{Zzpl!E)Aw=JhYspEp+swZ3M1=(ALP=FEfDz$Kc)?0+tp(D$HQ+yM#<3h;&3i}8%{iUNsX;se#+iVTVk}U@7!0Ud!%yPLLrf?dk$qymjmuLutO_GSr z?P<%AHwNJs(>$MD4-VqxhAM1c29?VE|4Lz!4+0FyXE%BL5rMJOxP~ms+Q&;o79)W#00mW;;;w=}DWPFOn4I%_& zltJ5aLnq%G($Jj~&;lJnm>Tv+|-Y<0W% zXVsJU5?Ku)3EpU3qKQZnVsIBbHqHN6-9RUsqX02BlhmFUR&e6GtI7|tS`VSi7{9Jx z_(D{}JF{q&+?P(i-vgh0wFaaTWGJvzYl>{By0U|?t3RzB;1|xKUk`qpfQWcO>rq|Y zJ;(HbXJ~##Qyw{ABZ|;tqF~X?SJM|$I0Ee{_3#NkQNf_BFPvzo7*df}0HDd%;^NkP z`s)gmU#^cDrS?|x|iAhOJNQA?wo>R>VD=QZTAAb)6(57eFYKK_}-d__S64kqD z67*svi@FvF?YEuW8-*b-(RKve3L2Nzx)rx?w5fp z2;EIoIDY6%3rPd{bgEbDdPnQok!BYEYOaLRkYhuS^tOSTv|nPJfkpE>7gN~k(9cV$ z5si%dd7SLAR;R^3Nz@YX)F#(f>N!MsN6;>#Iq%sG>pU&=lKG|zUV%iy_^kvm+;kRf zRrL49j|r6804W3Xpd5uNiosgDE{ewdP@ZR;1=0ELjkVJmL->gd4V54H=Q<$fv)S9b*d%FaG$w(Vr&(hh%8 z;$uNBhWOmp8+-@mu14M>kBhs5*iZ#C*vp2cFZ#<(BxUWYB$h1Rs&&BwBNy_G_lU@e z4Bawa^)xcxGLNEjlwH5^p%|^R%}Qb6RC6);`}wWoSiiuCQ$UmLC*N?=apj4=NG0s3 znO6LVd2BtoGoxTr57ML)=AvD&*J)aI6pO6lT|%?3;p#s8#=Z}cgVpk6u@0@B zFm9c3077Zv_j@D3ERjXCFYvq~?Pz45f@(q~oUpc1h>z&VSZj3&Uk}c%jOFm9c!5|q z{LE6VDEw)r$^D|CU)TddpYXBR zOj)cypklU?eXI<=6w?BWpfrw5AvZ=sf0mSlGx5S*3ks+pIMK0^OqYkyz1wb}F8j`x z4O~mE_D4guo5lV3eiIE-i3G%cRC-%3@nXet0~mpt7xF2{ z7RLr1JO`27+}du}FJvm3*?YyzjX9LErYcSIjP3X*VKY5)aVx@0|jT6Us1 zGy9&eqZCs6eDCn>Wv>+3YJEkH3l1+y3bk#Bm+_7dzogd2+kpJD3ANUv5QN@d)nzDw z>!y(z3K-FGXy^h;)=7tx*Ki4+k&iSMV(~u1-L=tn0p2GH?+OG|BbiXlj?Rj(lm!!TyJ`tFI2V&mqtYAJGDWs)J zc+HqiFhiwL6wb#mQP3{>7~4cZOvL$!2t>nZ1OAM^jgDc^1BVd=fgPL0=a>S|OaRa* zU9sPKYV`M^SO;#+MG*0SQHr9bo7rQ?S6KwrDX<76?7LB%R@}WQjhpRi9UL-`3W@H^ zTlcdTY;8V4;@9n)CMGScg5?WOi0k~;(_MN*I%o_@B}yFSc^9Vt`21l`0w@W_cySPy z!8%)HjD?(^c#kZ|=1m_gY0RID#=I2R5+A5%$R-`oX|$Fw_|+CBZW#6PcI=fd0LK+> zpy=FKihug8@SR_ODoi$G*_zoBs1a;CF%1dIQYd>$I1rKG8 zoMIEXdje^u4t*VjXK5(OqSLD)mWomn5Lskz4PF+3kDXnH{(I=@>hdVWa3HC6=-tTy z2Lk+C5z5z79=5Xb3eIkEJI>jvMHW6(z*5fF>Q&fjT{@0$TOcS9FuHduspb(Zq8Lk6el`9v~K z*R3V|u_3IT4~MJX;=jbwYT5-VbnicS78f>75oUQtk>B-I1e22)Ru z5KkA>W?Xy+3DS#&OlSNDUSp33NpmczExcl_QUBGnZ9)P^AR80BTVR$}lsM7}f&!H2 z^(rSMGgA|`7YL?61~R7_&^maGS{dP{rWh%!>J3lf4=z|g4rlQajF#o1(KtZ+p#*?a zVsg)-TxpYd+l|8+Z8-oy7lwXoXuN-Ygyew!k6HJk)5NnXw(2pl;%QnRF82EwEL)MG zJAn5gpSSH%H#X57LeOn0{|}mx`_wR5ptt(*@i5%ciU-V{Rwla;QT~Nr(3tOBLbyuL zXR;jd-P?6Yq(U+CQIh8G$Y>b^55Gvu8{Y(-O^G?N=MByb$sREEnBz$9%N2U9BH{c+ zDogE&*6H#w9Pu^XYlu3??iN^>x&b7^>Ih4GFqGe>RI!Zd`gO3r$o1M4;k@yD%H1zR zbrRKug$BqzMY%JSX#3?amU{Da(vyF53oCKA#*os3Ewj>YggU^Hmc;t6^=_lExJrT% z*xU;^7kL%mwRbQ(2MvPvT1;Kbiu%;V`~rS_w|gF@9j!6*jCl(h)N9usrdS=rZ$wGa zUF8L++T8Iw%R?9fI~~3JC^tk+E^7WojLdSRuZM=U^Wq{6A8%_K1py2}8#*ym6sS~` zKJyC3hsIJm?#y~jN@!tO8oMiBK%u7m(pZ4VA?EHW#~Wk$bgc@ai2$P8dr0v)dGoPM z&0b%!?Z{eCe%5rwE!rg$@Hdir{43^}xYg?h!4_bW*Snx`5mxL0t*K5x!+|}C&uW7-K+Q7LvbE=V! z1;;=xP+96^P}p_J`SIh`9xcmi(@(VzSx#qF-5l~&KbBpmw`VY{dsYGhHsby1&_H+j zGOq$Dy1U|sjAAqavs4@`h3!bKBJeLui{Yp+HZm@jZnrR=Cxp{E(Y3Kz?i}2VIYvBH zA}VKa18sYTP>;8+KlPHH;Iu6fnZt05l4%X^tIid1Cd8q>ni@+JD4>#+ZD6da-JIh? zr6>)jJC#!D*go$A3Jt=PJRBp5eebrpta6EY-C@?WbUPN+xTM)j!mPri#dd{b^Qhn$ zlZYdi!dOx=c;=mh9fL&jWAwV`PeS?}p06`)dXe>y&6D8ZLYS6^jnvIna*Q@fOx7dM zuf6I~ee^7gv>c*fO?CW}7Zk^(a$acH@l32;odgui%z4<-0r)Z-K6@dycy)S>4@CE6 zh_MB`_&F12y{TsaAXKkLIlatHHqoy$R-b79Zo_r?EaD6#cC*mpZ3i%15nkHFGNPaN z=CRvch65=VkMPKHLgzdwA`mqk@lVe0IeqcgM&H9+j&1j8Kv&&aFgd5X)K&YAvl zJw5|9C#II1weeX)9peChLW5E_`V_`mLv+*?17@4^=FTiAvHyh!);uFo1gIt6Wihd8 zg+$CMFWsEWm4=3Z?Z|+TK+g8O5e3KGUz^9r23gGo(n~^M&lco zWcYSqq1XB*(VR*bjvbpAeb3UHNW>TKKMHJH7C~t{Di9i>LJM_Ug_F6Q9@sYeN&&-u z1CsE>p1Z2pT@X(w(M9F0N#=}2#220JJZsB-dW-$)G_1g}_JvnlaQ;B2b@ zv?6DMVS_-q=eE<;^`J<#Y0MSOZ>*`=9SBO^nze!m2lK!-+$C`>MUC<*h24F>r{!}G zX+bq=K>w1H#`!`}a1`lP6%Y;(;0is#{h*WRsYJ<^~0f-M0_1eqo_EgKaa9% zY74ym3(-R?!vv=#E3FCd=`ebt4WL=8@n+k1vc%%5oW{knpmyIV7|W0~B04FQzgRfj z83@ZFkO?~Yj$NnztpBRU%28EIWm@vpyRS6UY3;>V3;2qJN^WssbH6q|KRk&1;%%;$ z@IHSm!vt#rl^l4$TpjxHg?^LiGc{!rSR(NwYQWdNG zdErtbXM8Wz99z?X~b zh4W}X>S^W!PZJLIi>RaUN6U&#cpT?9x9;(V-Ho}Tt|g83#l(dUlMySMG3*1MkAM55}eH$Ul zTmJdiD1=^h^VGCyG_EoVYhF2y#n4mo-1KRsYYp|E<{#N6Gz; z5C8kIJ4l&>gCVIw9HX^=l1GyR0{wbhYUozaOGrrA8om4tK z5s=kNP7ZyO172nymUD$Jdq_fGfpPy7!veJ+F03Gc{!F1>Rufr~EBw;HQT?=MB2Nnt zuNE_B2km4=XdjSK37E)6GOWL1o*iym(sRTyKd6?jl{AB?O(92<#W`Z{lLVJxJQ+KX z=ixm~+)(&oYg(fiMU|SJ9{;E@w^Vwm%J$Xu3&4&1)d$yj%sxX$C${Fnm&Y9`YL2!E z8D@nv>)UN(`%&>MZ}PE{S=jsR^T|onvGGx*JX|R|{37XODe6PK<@=Z=OJVu;*H~b0 zz=Fikr<`M_E6oz)_R8x>$a`g@a;SFyyBS}jK92d22~^lkN6NrJDQax)VKj_P)v+>F zbp!u0lkP1SkP3=GY>aW3_5 z9~_?QEs-Hnp?T){{p3|ipyZ~?^UOfK@M!?&E^d;7peFci?nAx$L0#XzOeul7Vd~0^ z2QW91%P7BNP6wQZl9o_(_i&*P;6XY4xd>RsdCfYD1O{6(wNZ%>XE(KF6 zPH+F-qe?#${*Q}=PBl4*^! zWC301e|FP)4|v*{Q*F+}&d_#QR9Wu7pto@!>1>wCp=NadRa=SMCxP-BHMvILE$6Eh zRQAUF5KKI5kW_^)8fWtZMC;2GB*XsvS|_ET81U)Lw|eZW3^JsXa57h?O5$zI>S0O_ zr)*E0FzgVZYlg=(rojCc8S}Y(U}vAGu$s2ETrlsf*h>6i-)Pq|>Buc7*!O?TdFozl z9HJ%G7Ya*%723yxKFHj5subt=Yi)EwLtEGY4h|ikF2@u<;3#I z+w^&iOpX90_P4N7g;m9yvHO+)v!d(dfB{ye;6b6{p{4=XstnG)m09Z(A_t{(AR8c zacM!+yRl0n%)$`<%$AM#gZU5Us+hVZ_mYF;!;-yJ4}d4DGP6fNgVC@}O~5Wg0MXfT zr`GU!ro3MyMQum1X-k&r1qeo^+%%5`2xARjE`l&-X@v^$nf-1Mh;TAFWOvj>7x}F;}#i;`bebXTz`)@w|5KFYGGn|1p--_idW-> z2H$lSVJxsuMkcaQD=wy#4+|&F{}_~TcT|SR_#_x<`LM);Jhy z`Qyo1X28KjwK_nREG%8Lo;V@y{0p+?CX0fM&PK;QO4>gWzk;$(1y$4?$jULl3+~|7 zuy3xAO_sur`eDzmW+rHdEqN7r>3Lnm_HR3g~ z2d=Gji6R&?341o$R*xlg1_ym7TsT@renkGAe@U>E<*x}3loyHH) zgUKl{1RJS5ynTO`Zy4?NK0Cvaw8gO?=dLwXVtXsUzllzFvX>|GDKkm)IIy6tVj3)f zd^5<-RoT!doj|=IZS2kRC}>;^UP2l!(TL`KwO>p&FA(8Mj-DIdYPd<__1Pf$wEvha zs&bk!RoJ}GIB;H6WX2}Kl3t`l$v@*`xgdw1GUYu%R>**=2M6P0G02p-#$S!yi#n+S z%&l=WWD{HsVP&-Og{|EbNvMEykHX(;)gVom{ypJNhJol#7szzC@Rw&wapHoSY%kD{ z(X@!C#~wc}B1*6fEzTI{k11~UpAbCsNRGiga+yx@CX8)mA$?8CReV&IXf2J zR*-m+3j6%giFivooVi4L)so3F%73J|r+{!{=B7Un>T9c;L;paG9pPncOYcS_8tFT5 zka&nTh49Sf|0jbjb6eR@E6eCyBM-Nn$XgZ<$5+^QMm}gNTzi~(Cwh`tg=6lD79o#Pote4*3osT=5v zcRcoCAj}BpFE12|*(6YS&_63=%Wmr@?2VPL4#;(2)haM!#}Mg7F-PxQr+`F22HS-% z^4>l)oLT>T*F}}i=-|b4PTxaR#C3*4|9BokY1EmBk^8dv#PTLq6G1Jl(1ANH0a7NF zvv1W1roaFE1Pa<`cK^o#!XT9c*@(3htafrFOE}R{Mx>Xcv$yLK-jJOV)?v&Fh&PIW zH39pL(+9kG90KT-X#gC-It$@H$0)&1;WXyH8uckb%y1UH=OekHL#;55GEhWX=>v^eX0fzRz34hJ?uf*bdtIv{UG$zD6G~ zGRLZ8a&8Zs%>!dsn^#q0QADZw!%^478jTI4$5G|E4Xh6=1H~l+izX=E+%6Frlkk;V zCu{;m(Nl$)EYQ?N#U4Nr;r&TYZA{0sm1vx;0a|<(!NqpXDGyFT9Ku+1fOGKj$?#Hs zqx}m}IGbv5+e2ac9T+kW*vbP~Q9J`+8Q}Blv$${6oU1&}4`lwm#}Jl)8__^Qq%Pcn zoDH5~G~pHmADC4YG~iqT9aYTF+32N2rpdJwreQJIA{!j^S*w#Lp)4WP0P zT{r6%j)J-@avQ6j80unjw#8jA#CHn}e`1ksJH&8jyrqQ30F%toNqG_#i*Lugs;&Aj z9j1C@u*%xQ^j_A|HfJ~D@v}Jn2SHIuCm8eL8q5OQGCZ~27CSLW_8z3!+l`=Cov+5F zyd~6n<6c!sD+P8E>_&Df)-k^6Khgwxo{2BuTa~@~%o#t^kX{1?HlZjLmfz@oe!~6A zpC;XadoCih3Y?};-CF{OOe}pxrsZbm^%YM3hOahb`2Gy)+>e80yV^Ktaj?1$6Y}WFWTzgpj>3jTlrqd1`aLM0U%OMSzewp2w90DQR>n2ShlV>J z(cHTe0rc$@C4g)6Os-RC4$`4D1Tby+T~wgm~oNQ3h@hPhTIDB4&-NeN&tiExyEl^MK{V z^X?v{=1I_GRt@qF7AIM?Bj+eW0?xRf(Ir^isK_zQ9oeA0ATRa8FPhFgBq%$Yyj1OT zd1yR^*QI{BA>w*EmKVpZH#_nvqwP3m@9e368n^eZS(xw5z$$}O*UL7k8qK1~+ZdSr zwbT`K+6#UgZD~aFa2o?^R!02+r|?l^==K)JrI;qDBVn8z84wX#>|p50D0eFHr1$GmVZr{rKd21t3k0_fn^vDU$BUO|*f{gpiG14`9A zqKB&dYJREj5REGpqX+6}Kdz_)xNQmDo@?Va)O>T|))`1@G|mWuX^;r5K+K|O_5mF; ziH~3|(F>uT9MP5F!zp>vz^GKu!0?Due&@T@V8F|0Bg=s*&bLjTgeBVpVKk49@%Bc% z&Ly&`Lt&8L^emK2VfPe5zS6mFj=vZ{N=mOqTmZR5LVYbre&dOfoYOYP*y#}VnMeHq zD$z%3*Oy={5KW5SPc%2o3p(?S(9ZmO8TBMEjuLyg$4dsCRUF@q$H5~-5f+OIq#2{bK-Y~ZPU zODh3DnLWw?Xru)x+T~fnT#v11?6^yr02V%Ii4rq9-9l5@yWYPPgOyJ+a~M*_BN4A3 zyAYGqEY%7a0+*|)3*&+KRVE_) zZcWk?!U%*kOD8(5?cj~ScFr7OU7t1jO0gld{!rTRu8t$*9!!ogiN!d-WF0?|Q1$2U0d5F)boI-m?PWX=Ux z$2HIu17Swdpf|*jh|x0A&npg_A?@eljm1Qy{q+1`mCPEtUc48F99pP13{cBC$vgoH^Xq+Us`WIxv z@7cgiR7h-|n8mf=rD;T!Xs2;|v(?6-X=$4z(3*4ax=!f{y3@hljMWC7+MmByFKOv8 zXdL!8OpEQK3p%9y|8Fagpz_y<_ct}^{+tnu?J#|kn37t+Blo2I`T1O7(R7(CRu5i3 zweUNNJEU9R?=zIbHroB1U0;zZ-@Ew}*m+x!5T+pYIz9oXh)_|`I~C#a1*#I_5LM!o zr~OYtt2Cu`YLE(e?kHRno1y zreJ!zZJx7`okyBrL=S_sL%C{f7Phf3$x4`80%3mxQEKXoI3E!|WcTP-b3|?)VD$nS zANx+W%-y^WJ%#yPBu&?cxua_oVv73Y!w@Tc?XRiLe1~4qyFyaZqqze{8_icjJw~?E znY8Bk7_C848n+-7U@XQvOd%mS1BuH$x}VNfFL>VAmn+I1O?v^NnRinT&+>28-r(~% zB7iS%x+2#q>w>cG%aEtz&|%+>ZoINFc5~ZDNz1zYl*xBDRAI4B5cFp4Iw;Um()-bH zuoz{bwbv4Z)3CLBWC2@`i^$jc4e-!D$B%U5ShKd0h!09$v*kjjhChs9`_dOt_Z z^~6I)>C`W3@U&<9j`)9kiLnzo z;$DeXzl~zyb-d-?LnBzn>eXapY&B>-p+xw;5fU+w%uW%eNBujZYO%-iu>76F45$em z@Gr{8TZ^hnQRbCiP2v%i{l2tL*(F#!GA8^iAhd|dkoo7NK*sMIfiZe0pa)jmg@U9i z#1U1iU|SOo`Xdc1wlu8Y`-(4>!kLx3UK}NgJ{mY)>kdN+7x+S+qXy2uild)icv>l> zfm%{wG}wU(v7Lz4x~BD+pK;f7g7=n05L^F^fZ^R!3k8wCO)-e|(>L|LR5HB#nC3Xf zD+m=iTHdU6;Nm44i5A0>d}UqzpdZA1R?%hL9(2bus;TM)QjgxtVRS{7cBq0S+}!U! zJ}JxpHYn5hs?DTQt%LMG%RVm>OvOwxb-6mEyM=x7uiG|XGyI*Yy~ka_GZZ~xiOsTE%Sl{A!BEZy=}%R(FIj$>8nQqYnzR!n--+1 zsXMaJ+`H7ovcR&S9%|~+K|meRYhkFm-Kup;){CSyIrg>$sg^ypuRMcU#+H#Lbu-gJ z0xQa(`IeDjHqhcf`LY#LOv>saHIE^z)=1vROEI*0o8#RW_s+4z7>0-4ACt$`4+#5V z1J4opwLGhU<;jUF`69^0)ZUsg=kpKw4;8QGL&j<*!)RqA?GI%l9r3>vBlZ?2-Y0fr z)fiY1@y`5OyHIkqFB<9F-}5mf?Z;0inO{$oOttjzs(9}ZHHAIc@Za))W8Uc2ThA|3 zHq4~QDtsE=V^H^7JWw-ZfmDjKEKPuN%eRgzBZEI9Q`uxNfB<`^C6k(C?pv4Q9VSSt zBU@**_>pv}M=TeEb}2f)Azju8HCJ+bfud9Nwk&SaN=KX(iAoe3#wH)ctbfF*zu5f~4z6QBm>43pKx5>6AK@YgoJ@DBWJ-|>jFg!kuP+iE~y(K5|ZHjxzt1-YZA((@&L}{CZ-y)Yex*MZy-N1bC#xQ>H zJZY!{4ATd#MJV+ZV^fol+bS@OZ^BcgVG#N&A?grY_?m;2ix=_R`|f)h-#%jygOShC zh={%L`|rJ+#QnsxN1*MXv*p1?<`NHY&S51WjH5P;nb(jzW`ov|E!&Hv zSF5#@iNuG3Y?s-eU_Fak;CVD@*JD-kexgc368F(Ew&iz5J7jaaKx?@S^`ul9@jN9d zBbkr5>}|GMGw0X?nD|A^=`vNC4ul(mKJNOLij|C7jhvkMT?^2BHe@esSW^fRY?-U+ zR*H!T+Z8nO&#f68aZKK}<^yc5m-)fM5rm_IS;-1jl)ysgs0Z$t$+O)R%GnRnca;bu zSAzt^=s+rOhi5(faC=ywyFV2(ocbZO;rWjxYj>mfG#o4bYf9sf5N_Wk#*T3-b)&sA^Q5z8kFht42O) zD)kReA!7M`I{U29l-?%)Fe#Ej;L1ve>877g?NL(9j~x9$FG8so)8$h>hNz%9W=10P z+=1V#+tbS?mGdOB1aD89B>~FgJYD#^Am8_4oDz<0uB=1TER>ZGEs=Y ziR_hSl!bvU+dDtyrzwVx^nv}{QcJ<=vH2H-02}EO1s6$RwwY7RO2WJ>X?#;QyaPB; zR?|BWUJeKEMg%c$?ng1PC|`y&qHE@)0K`81nW&SCc3JyJZUQ3PXo^q9&g@m?4wZV& zv9&#!9zD%U`Hgn~JnpM$qKqI`0bDliAUlH8KFd=BQU$gtKDgQX^J%9vGrvNT4{ywK zrv56X$GI#JjSleB9DB>2F{L)1girOaCdjG|nIX1*9!s1QD9D zUnVIkQ97GxA{CfM5N%!G^k5v>w2fS03)Ck6(%MOELl2?Yy$WaB`@Av6<7}BF@IOVA zy;9DB&rSr;UhR!$=b(4BCbbvs3bTsvp#j660o|4^q6FGZV#*OJb8gS{SC(Sn_Tq0T zRAvsFXj|LPug}7TiOA%@WhIhdHPaR&B^}Fvi{b&TQ*kSzv zW13KF-bK=l8sJ|n<+FD83DQQ2rv6u)_6N&E(hkk(xh!EgBZ-;C-FI9w@g^R$FY)6`Yq%1sfa{`DZXa|RU#ZO zr4yDYkqO{er#YP4wq`zX000uM@nPuSQIMFxFcxU?5DtWS;VZ&(fy%CKLRAxK@+GK= z0SU9+>F=T=%i#p*+kaF1h;F(mKV|8` z#Rd+8F*Sf72*)Iw<-Oy-$#V^?SI-CA;~5=(6g8p<-5HLiMLVQ6BqUaT91ATNFdXqo z^;L%*8OuqnS7nM+h@ommfWt1xO(%CmK{3mP)`Z-_><|&k$op2SaV~PJ1J-^tuR!c0 z1;C+j7i!NBkrj0FV!F>7@UEOd7=(*kY|nJELB340v%odX<+KsDv#ZByT)9;}BsLj> z!Zj|IAS$Uwuceh5c6MTPDH=7Z@aU(=P}y9GkTi$oTRIYZ11Bj_N({f=y}&Nvw|F#5 zUj}?k$RYRWyxIMiTTB}0m(Y}+KgeYEBgL6-UiX{&kXP#8a?6f@#%rzX}^0*-;xCq?|_k)K~YmapTg30?Tst!-||I8$QH!Bt)=;+@J zNBjv*NxD%km+#V`7f-4>&_P+VV77JpYPDnm#PG;M%@n)HadImfS#2}~zY2wbhvXxM zIuGoJ6{F}AOc-aCv7g&G9+P3PfEAkd{?nOC>tBQ1$ZFQFx48(}h>26b_<(GlST5PyW z#X*_qYA#q-zCl1mAau!u6>C6XUisl2|M2{8q=MCos|$d%VAYpJt98TS#||+$tS>Un z5-6lzLgWNI5Bg(iN}~ZV(oRur{&QdZ?TXx-O{S`>zlEuCbq_1L0_?(^lWWExLvoI! zi6C3@UI~&5d3I`p>YdNhKf|y08hJWBkOQUcS`tUB&vg$%k=b4#;j5MyV>8Kcbh z3;kRXbCckqI=lJ%h1Wev&{8?_X)-|u&~X<%Z60~oDH&s@)(mO5a?GBCd+1I6sjYkB zxk=y^4Ry<~0p4f?>ANFF`v^QA!`-Wn*>p?Jd@Q{_GZ$SNCNls56dAyi z((fc9+nE5oQdSE>M-0;`e;TjYf65JpJ(WgDW` z5oAK;&{0p+XW)2?nq>R=S+4scfL1v*E3WkTIxcO_#c0M^hQM`|fJxMA1cbD&bl{XQ zS)ilsnMA-f1heJ7h98wMZ#T3$#W9R8#4Z}5s=2w3kSU>3#{yw@5apGuH)qSJvFb&uO7A>IL}ykVSr2e-$5-XfQzZFDG_K*w53Dzx)(StW>v1z%z>xgfuu95*MgW*YL_;d zxMO^c^T8cnU0jLEuVap^TfpHcUgmq0`aKREFX&sI26=l_8>?q&2~x*a^D@mYv}}R$ z4e|1%E+k*E?fyl@#yC?lzY#PgO7pMH8o-L_}mgt1T)m46NfBS z<_O1rYskWOTm8O5OpmO=?BvJ?K;$H*E9~e@krV72gBJ*RfM)$`Dk?t*6^5iWov(a*Bu@MEsQG^o z{H?=sR7!NpR7^wY*8YcF@{?t4t&s|sSq8OP|61JN=O+&eG?T89Wsg10I*$#tMj)N+ z^<5tM{O2NS*4?O?g0kvUz~0TW40sLeaHAP==K|xIM0p9x9qHik2KW>m9hf27#5!NQ z7>JL{INsB%UnpPJNgJCa6|9HTCqLIRaywbvmT?H^LtMzPB@vJoU9q0hkM{4IJO&Ic z$3E$U)P}0#;;IeB@=z+fPWeKSidSfB&*+6Owx=4^A-;|>;vjFD@{ z6md}&-a%y|&ziffhwd^ap&7lr!smWy<(GI`W|Zyoi9r1-`tDZw7PI%Pu2mm`H>li? zmjxVOzfu$=YSSI*DS9ZH8S}QKg-3Jwk8EXkzR?(}DO)ptzNWQ>pWW$~tHn8YswjN9 zKPZI!?$Oh8IIiC~!VztDta76KY^((?UTysto<9ro&=+|&N^HsQ%6Pc?fpYXaei}ng zq9$Op5c-i!8B8OgZdeO)9XWHHQFY5*tLJ#z6J>_KI~uCGXGF6=#hx_mNT}zggm2_f zx>g*9P_ANQ*%Apj&+kM0k}dE+91Wy;8Jt{cuw1Xh5M~l9qJ9VCDQj@q{kwACq#l7M zG#sFY!<;&cFIPDn5CdT`+XSSNNAePlixsK=|6uK_l-K|*`qfVt{&Oie80!(>!XW9( zPst)L#g|gd4KdkRPUr(cvxwaZo2*Sv$il&;V2K^^hF7UBU&-t_=~Y__Zn00cpGzyx zTv(wsdu>f`mRufA8=nfK>Lciyro+VA$(-x^z6Rklr!P(l?DU(Avd=$&?lm z!J!P+#H5ICge?XU%33qV4)#&a)}mrEx6hM@BDng)x-;*Cw_5e_qG}9WO4uOii_R4_{VmgWn={}`%iL_IwumxayH*g zI=^ug$6j}CC!HXn+Z?w2Vf%4FETaBA&Z!tW=ZunXXGwhigD@^Vg^%qZOM*!wl9G(% zU*1EyWa_kqK0%RJ^YlQ3CSOy7Y0#4pHJk^XH-xcV)t6akBq>%iONfdKWz7~V#PXA; zI#<-!-YrqKpEx}?Sc>%hlWzT6AHiD9-twN$MSc5lS} zX@!laAkmVh^@hbw?eRw7E4*Dw45~c+%*z$2og;5+sv<;6`YO+55T5X;K4D3^I98mA z*N;sS!RnlEg3dMB-5OS4%F*;v7G>by$N`|(x|_Yz%n90Ysd4%pUlBxFePC`_kR5ez zl?^YCq`GRz0}|2#&~rAci2j1o@U`U=)X0?K=qh0$q)`ho@cVpIbzp{xd~wuNjMTv0Ucj;D!gDdmYtC$ zeJN>+qf|KE559?N9_>`@OUagqF5ob;qO<@1k#~;F*uGAvJ-Uc=#^jZhp#n9!$w2kv zVy@uwJ(Z8l73_fHOY_Q8mPlO~Flmc;J69%bOPsuYz$N{3C?{DbN_M2gGKi&l!Gebc0+#o}%d{DS-s)LJ#jdUzpq?s%*Q#Zf~$QtcrIf2u*?*=xh zHeoOc;zx*Yg$RYI&*BqF(h;1z1vzOveGPR`c;9pG03Q>q8e~~N?r9-;D*1^afNpWT z7vRSz%!5u={@=8K=hI^==WzX+b4{rg5N7fKN<#ZF6%RE4x z8%ZU=>=VBqP)}TG4vsX=>SLbLrvm!a-M?-tUMf{BaMB?a4FyFl;4}ko`AuNNJd`;D zDeWA9FuruC<>A-xWUZ0-%AZ>bCWL1wR~|`!twPZmt^j?@=MS1i+ZaCjX2+~IzA@NI zBe%w}(=L<58Ek_BjC_A9%hJp4g>sKfZIG zZc)!B{C7E6WhB=t5G7We!2{ipyPTssfFx(+F*?MLnh zsMz6(9POnGwBu$#1yXuH8RB%y@_ z_AdvjF2+~|VgQ55@qQdOhQsyjNQdKQ4Yp-1B$v~_M|XIEz{SjE%UZ$p(zk$2F`;L# zvAa(($Eg*K5`sy{imsRxtGZy)8T;RVEV=N#s}*b!@(u0~ZwLMr7r3t%ZN#x8@Bu%# zlktyxMqRnfD6IxZVRH^2@gAvnBL#ppFF3J4MzyEGTa(BZTe6=y-G#9FccZ+y)Oov_ z8}ngFngcoLSj8CJu=)8(?tjl%Y_2I;s!GXG8GJr%uR?CV3OWo^0o; zZO57M{pan^yc%Ip6=gsa*K|gUcQJPj^J==6!KJEkTL-PY^M5wZ8J`iLMfwr1%43ImDSG#s-0UvTRHOF*>0Lb$!iNEo1m z+z`t>;XxxsP5IGiUP!Xb&o@zF_7Iu-fl;~k*)8sLkkI&0rbBK`EP}`=yrC{V^9uJP zi7tIc7@%PGI2oq8C*^Y>y29Y1=eyY)P(b0@h`t1FVpU(Jc%Z$d%9E{CM9YncaVx28 zZuP+4(lZCf>3Hk99FNx_2oRV~oxeIRl*=n9j;?OQW@@MGRjZhp4PYLz&dMqG9@)18 zTZ{W}2?tXxjca%3XP2OO5v-h&iu$k3iw^wO3^i1%0TvsXwp&!U#Bq#8GK z1nFgI14o?LfNBi0`EcN<$gc$9qxYPfF}edYXFouW&S}pkqDoc^wz|I>Xp$QguU&2dCEzUYlB^TJe36Xb2JQ>1#)!@!DznfWHw0qrx)Z`@FBJNR{cuS!b3s znX__>Qa=loLm;P}X@bbUKx|NQqf;IB734`06Z$n{q3)SjjRFdb^7CaPCX5zeCJ(V0 zi5WylHh2d)pa2HLEM1jcFC!$sWk50Mx03&2mXIi!hVmrhaS|_`%k;La!~^cEB>5lCo?FU?^5HF{NlAUX( zya~UcJvSdkR7CI(y!|=^dc7NjfmqLcJKSb7XTSY{(2`_Q%9y_pax-Ok0GPS;bEePl zd>{%UEzXinA2=&DG3Zv|Yaw=wO_eIko!=TP%b3KD(ES%%YnqNcl^UBxb5?d#v`A`T zNj(4)7*e9SE#v6h`GlOoK)L9SU)i!=NeO(Nb_3Yta#=JgAfW(8PquqHxg~gDC;?Ny z;4rL(OPx64bVI@?+8d6S0_1ceE#M4+R5CMMY*w`=YaXuwTC(itsxGYe?XQ9F=a!GK#9+Zi2Zbd3T?F$ms#W>vHM&{=+%-IF`88TE z9-Q|#sjDM-Bo_84vDYx@Q|Ix&8msT$tdf_A|BYKkfp@SpIdWgPDP$eBdbF8@YH+)a zDa%i)6hJnaR)GH;#5tk42`oM^{!-ytIpeCPzOt3Q6mrgJK{T~R4Z%zrBYADfW}7SS zAXyRdO}mG-E4;CR{>78))1_bi)yke$A$s7D5p(0h`SupSG|DSfq<%6!+Y8IS!?qdRFBgJ_fOsPK-qX$)A&QLw|ylou` zG}okD4L^s5`0^sJ(w}-OYKx&iN;$EynZ6xD{Rhu_$(#A=!uvi}|Xn`nb7V?f*{>)j`SzKS|C{Crp4x zFw3GuB-OU#j-2v)d1Tn>g9V7-Ld>Zu-=CaqWw|CrTJ`fi6Gi(f6@oP<)2hw^BP3L_S_Adb<3G3CA#Z{_IvrPqmDnlUnXtvHB6ppn2x8Ji-Yi&jWw zS+usR>NyG=n+)R90<6i)k?gA$pUf0y9$RVLk+EcNb8*%Kf1w43YP`}!ObS$A;0k?r z&<*6=#k9Jfn61z;XyT#Q70xKV(y11_fXq|3vKF*aIwGb(Qg|_H`HK8qdf4R|=DxOr zy9)46ITCnSyxfl>^a~{nfqS$c?Y#ixOhJSKe1`DGYmk}J=sEDX3wG+Tq%|b&u;82>zcb0cb6f@{Yjt$X{f;BW7P#7`+AF5`Q zR97seFQ(xN^R-vRen#dcJxcOL_|LaKZ7WR+0?-^gr6phvYJ|+p%dxkeEb&;h1G170 z&%YIM)|q^_WmOJ6jdrFYUNZMZ$f{q6M0Y9E2Fxk;ox8!VI}oUI zIB%~vG{%!gh0jpx*t~0wX`;#?O`a^y^IHSOAI$wNKfK@j_Y6aZc$@WklDS@vz;X7n z=x8*QPLQ||jj8aS0I_htvup9Z-h03br*Z8SqChGtV)hziCCLVJ)VCs?nV+B<3+oN7 zWmBkOu>0SIRP{JvIQC?WJ?HfsgU@-KPwn{*dm!U;mfOg?fE(WUBDWe&!<8Q3`3JFp zQ@3LAr&a^~_&g)?Vba`p9(_TZETzYLd)6nnKfqth8WG}Ju9$0-%M~80w(365SxM0u z)9*%~IikEd&TOqvd=M3xE^*Nf6)Dp#cG&wM!87@QCCUePtzJBc-vPaP5 zTWWr#E8a50E*9kHlS7n>T;ACPe5^Y{lf^^2K+FM>I~iDAkSwQ$sN4{xGMo|>v6^+v zBMB`)ey1GS7p#T6Ei866t;>I~$2%5enig(yz)Ikp4S^3zhfzN-mJ%qGm3ZR&a<4W6 zqE}0B6!+V#XmB@tzwRgP`f6GyHB~Vc3f|%kF5rzRPV#iJmS(_6(RnFF-|ZybHNOcN zK&$9(vFmt{!j2Qw8T{R!x&}74m28Q9y1ZpZ{V7`p0&a1o6pG$6xTgK$*1vB10<&xJ z|7CzWje(m%O-G8c^TVHb*KImYi&J{yBJ+s@<&XCoD+)cO!AEg8fM<}cUQ6ZXxMZp7 znzfMj!!;^ai3{0*m5-4AH(-e7yR-f(@Awb*TEvok(WPh4IggGFBIc|`%|6tsV#trn z#x|}s4Vcp)bsg{jrXV-TVH9fcb$55n**+ehjaG~5as?YV1(Iybe*&O-V(}FZUr>Fq zn?V+lNm%8edoJJMSp|S3+ck?fAhL6|1*2L1R`AjmzfOR?c7_qvorth@@>f0hjBd%d zMCnF`3U&~Bms~j>>f2j?J3>{;Wu>dx7%Nx|5ArN|0{h%njKfu0N_Ecd5U4!I*`*F2 zlEZL9=5)k}Gw?U>^t}%O@VRCRkx@%~JH7vat?~YhbNr;GVgw=-~ zd|Rh9H$7`2TN~}lFf@7N4Eta)KFC;=^t$DB=AXU30tPg65rG)KcC14wBQ7GFA_{1; z5GcL@P}z}0#Z35q&G>WV=hOVY8%lvFTLUS0-{a*-WW&`C6Wfb>{bRG(f6)7VYX5SH zS)~7%-1b=*-DnVVhvVnwSOWGhs+6M&)MPd1sYR6vV_K9P{^<|!WOURanrs!WWbA79 z%Z(rsTADeKDap=C5mvz^X7EwXT$~P?0ug-^9B zlfEd?=ZrJ$(AB+Ty)S-R^CB2=e#BbwOUs&6*N5u$<@EfEFizu=cVxROu30}S6_6Ei z@LUFCEO5oIYafRxw>`>QVy+~35qR1^6N_4a8o-jgj2F`hk@0An3YAh^h6TX+`bA8q z;{*KhNqPg9^o~UCv5iJY-DU~qOR6d_iq8Kv!ez-vN9hvSmR#djvy}W%%Hzj}y>ktx zhd$1Tq+_n9iNG{4W;1XQ1{Nd~5zwKV=G(=}mNqJ#2T0Rh2&C)SzD%$>SJZ8&H0s_0 zUO;YB7>?dpgEq_f7{Iqie!NGZ`k)7BaELqz*qh`z3a2Su=NknPxz`;y>2MV2nU39GmTYlK44ZBmGu&VpA;r$Okv< zt&-fZ|KU%}$FBeZ+YLjUdI1twqfNyeY^#d(4(-+Po zpd`bM2xmJOcjbqf*HFqN^a|)IL0O~{9aJ_p3Ku{ud5;jP_k)F& zCLjas$TQ|00I8(~7QDJUGG5Z7foq`&xzc?eoTe-U6g_2r5`$NGFM> zbcSGu;YsP6Kc>Yop`X>KH}W{{eQBrB7|dFi`ylt_xLX4gq4dL6TZIPa0zy0b_qED) z>D>x@^MLdfv*x^zAi(mz00AY`_hv9uq^}C$pvBPzq;}(X^#U)&b+q208y2ii=k8KO zH?iw304YF2v$)kCO90SmKuAqZrwK~PJsrT<<&|N^r7LwRphEj!w`(De1obBf=wpoJ z4Bq*L*VXg-JH9;YT;*3MLLS8HGvownX~5E3JxPNeyEaNQ+hyet=+Ay%nlBYSJkV3h zF``R0?QK!ca=A&*OKofaPRoI1P^tQJNQg&9pRLt)i{pBSCZPpYC2TwU&gc|vRs8j4 z+)qFrI$4~!f1@)`O+mFY6LTEU0F%bvr_OA0X1e`23RdkTSb?@GEY@tR zox^!4jv)E8vX+!m`^hUurxGQ21~3)&VHNj+9b$CL(lhLGSjHUxXO;cI<#o(}4r<0U z8hUZ|_gr@RMqkk}2m-cNmd_yB>zPh__+|(vQ!N#_g$~o0*n3Rtq z9T~^lZYFLfO)<2tar@9d3}oH-T@E$!YO~q%;u^f`R-w@EpoJc#g zU46ZT%ItFC|E9~r2#6<7(e|W<>&!+q!o;Y4qo#UM>UT?0Pqoo8wf)bFb-o-lrjkkj z!VA-TP!=-t;~v!bw15gy0545;no-2zgQKeo@v11j1TB1|GQ~B%|2@D?nNFer@f+s; z&Y}9oq1%4}6HYEWp)T&aQbcqUpWdHB-ioV0-vhPiJU7#?e=fX}ANMIL0Diu)os*cX z6ZpaM(71M*D<_THIAJo^GZ~GcjQsu~cBij<*?rmjR%#>83biqKhojlNi}G@EAH(>UM6G~w^NB^D1J z8gO;YA*v;84#ohm#Tm&@TBer}@9(;)4UzggAj3`#at{d|7b-GQiwU|=YiBG4czRup zicRCQm5w?ho68)+isa_iYT_13N;0M3hbTiqx`1=51LdKRx zLnf&zy-HUKyV6|q>N{eS;kjoyyI|^7+Pr2oSrik5gD!R4MA_&KD%q_DNe5nUb`7dt z4h{9CD?l}TJKHwmRNGeh#|IV-%p3|wLNVyJsw3+Gf%};%6L!K3;=Clx_rVi@3M2pc zN_pQnTQ~AmRFzO0vbUz!e*zcMvR${MK5a}BiJHkhA^Z?Vb{6hxOKQ3f^!BULgGM%u zJlt@Mx~cB_{Pa&YJu%9rnPVMd@4B;j6DdWbP(eGk>C=xi%~$JnO8wiGU-(wQPSG+= z9d=OjA%>%9X3nY{91z(%+`~g6nMQ={ifx&=APUX(76FNXK2(QrioIG}7YgBj zxTa}tp4YA)%x$_-FqJxra#PLk0HbhN87N;?^*bT&ZTXZCcW<%~6XYo73OR->g`9m1=L3$8N2qf z04^lYdl2h{*lZ}}D=++A<`{9N8~NGN7~RxLY_A^>L+rWXWuXWA)t?M~HmuO>cJqb- zY&_6v|Bl&BW<=tI|J7GuSyd5`=L&c1$EYtl?Om zyB@RqQSKCmPqUe{XwH$LG+CIu8 zF^iu=IMY{4v>D1YxJIrFEGS5R^``(dKYPN9Ahd-SkfkdFk|qi?;M~4)_w!+k#$uaS zl=XFfs@oI9Btl;bJMi~B&!(aytg%LZl!5f*bAT63#0D1qzu|^_GLvGUpEMM6>qA{j zvQ}tX_tBU0Es_jJ_r2&pk6jWZ&I_HdCx4KqZ+}EPW=QQ$0196LOBe0qFIFblBz+*l z>kdKY|5PUDN%ZhA{9E!nREVJLiQesqWmBw=`hVdrXu)ra6-Xu6YeG>eGy}V%d26kvt$vhWQBQuA(#w~D2|?=l%YHCn)o|1R2xER= zbG_DGr7d=~fu?Z8p$r6q(*XxECx14iR6(1_0WSv6xTiSd&siVkj}JV_=DVaQdAC2hbFT?cbaJOEl47ewVA<9t-=uN zR06O7?YGOXe=)&#KIarz<iI7EOX=tF)YIOy<;94=wYcR|K< zXe_Qb^A1s+J${e}ydrLZg=p7tkx!PEoJ(QHcyS|<01KH;Jm`;JAD4HWSN2$4jK-$m zX)?(E=x2$PTwdl}&7*oItA)nIL*!I@kcG5-{2=AztVLRrfE7YN+xc2DjT(GxxUN)C=)twr#XK=cpb=`l z5Lekw`xlf$*#hMB4EDYZ`}c)ut!#xB=#=72wAF4Stc@`LBBzO*!OtdLTn|eR`NO4Q zvKG9k3@Yg?ZUYzl!$-QLR-!jtj=Ce6r~Uy$YGQ*vn!@i2&5o+ivfzKL9vOB%)-f-A zRLms*M#JPW8RcqMfjC436{^+sRR$F3riSe|#NyJ|+5*F*PuHPcEviw|sQ{`TcN?-BWEWMU}r>MVZoKGhF6P~ zz(&h1>XzQX*r}pp!Q=*o0dO}sEbjQRjQ?j~?TeBeZ?eSnNJsIi#4IsJNBf*&FmOH? zu~h=ZUcnxo(Yjemj4`ga4{BXZ0nRBXuX?hkLkz3LWsw2Q3>r@pOlDjF1WmWDL+( zCcX~}zqM3)uzcNta}R?_#_qei_S(E3SkDS~;&{LLqjb}Zk}Gl5`}gQ7%gg=q#gxZN zKw~SGXa+MINjKleu8De_&K1;qMl~M7FyQMUnY9DDgai!@XmtkFT;#Pm-@oYx>c4S3 z2hdtl{oCtw+44BZmRhg>Kw2?gI97J)+yA8w$@#xrJOd9WoWw@k*MXk=69${j@dh_8 z`Ze!)>8*_bCrQR(92U{_l@CsIsW>!T+n;YiIqQPoKr$#!3iF(Zz@C@W^}&A=G}nIB z2^34xmVzbGd);j807~KU= zU{54+jOpbQ1-=_;Q4u7+FF6#EcA8Jc!{_qW@RpxqlT{7%ep0=H8Rn!<-v{$km1*HP zR*_5h3>4|)%aKL(L^(B11c%ro&LOK+snv!ZQ_}TG-Aie#Aq#}8#svDEx#t@3kP=pV z`>z^gdY#Gs9sP&}?Mg7Mj9lUOQOOjcOXi9wze8Ms%aJeoI-RS^XASJA)4FU5`;rYn z#0bID9oP$;My`o90#r-hxX^0|cTOQd_}i}szPN6^-T$a$G95}Y3MiY!qP{v=C3Ix{ zq7%EX5YOkCttdplQQA_c_PF~)TN3xDCRZq8(cL_w%bWk@oQYtAV@@2PIVIuctk8W4 zq8XN8@Cy*mx&N_sNM-O0)KQ9?K2m>p!d7ZKHJ67jjU^}VF=0VbR2zjkzQha_no$kK zKPaR zUn!UpX%nkd3goAQn^|W-M2W`rPCJ5z!UyG7hbZa}*ZP5vw3w}A>-wC20hR4b#@h1- z16Z#-hYmC&nM%(Nb~MJQZAkhhQulE0B@PH_KsM#8t~uNfG|MA)QJROYX2GuJZNhjL z#c!Wt&-;*;SOjH28@K-eFFt2*$IS%aq`w4{4;EIx!vNv16YRTZ2J1ishmvIGSI2HfH%KWlOVdg~^r2%g9RPDP8Pj$x;n-m) z(9(ud<)^^rjs8GSgUTPKs9zrd4T~lvG2;q52J?>fOPDS6Lxyx4T!@mBz@aHex35=* z1t09csPK%K@plboa_R*O!7y>%GGqR3tR}E)d^D6}MVbMJr!Cg%EH%P=KB)W8qCCte2#Oh?rC>dzmoXVE z>q9I9?&hSn$f%95hopBr17T^MVa6?3td1VS+U7;#lRow<1kQ+&Oh+y1V}KYpv?LEp zJ*((6p*WeeF?)aaMCYE2V-#sUgrkCpv+|7I$bMl$+N~O3=i|I-yRl6hEVQ*o zz!vgj52QM$!FLb+}H;z@`SQ&5++7EJ!r5!yN4 zieC^_1|K`I^xUNr&UO5g5@hgDofmta^+?KA0DJ6}Yqo5y1ndR>#4MH!vwttG0;bfH zQyIBS^*rx}0%bhUDd%=7;lVwyDIL9K*i|JY;=I;MrL3iQSf{Dh3^XXRy5d9A{r?C?TkbMIbU zjnEa!BpZVdWSPR&ga)#M-H|3=-{hlV?E!bPEjGGc4pv41k)n1_Z~t#&M`%^ZeVUJY z{&h^VH2IBaay3Ac@_kZ%1>#v!or|I!dogETN+oZ01oP!gp+#Y;KtIpX^OWX^r;-Sp zu?@0fzCis^22E2DOHMYjUrFB}M)0l>qH0U}V+-v6F2lYMm~Iomlc$a}Lp9E$X9LC& zqH~;H_bslHmO>QOT{Q)^nT~hFOP-W$QB*^NFpF?eS-81s<{_lgX3r=SqdH6%i--tAf8rXXS94Ngd-b)!6kV+|WKP zre|<#)oQ{-BYozPNr6o*O!|N(yh;=-_ooNbFx4SrdET&{6Ydpq<9J0b*YKPXs2_S* zbe%57{B8w>FCKC{3V^e{O99-xJ4?c}xt5T=0wFI&(>|i}@a-NV%2Iu12(HQfjpcGM00lDd zW>H`~@d?yRj-=trZ>yCgw;9__m1l*z7vES3td&;4IxsMY(+BcmCa;*5cZx))9ia8b z(n7_gs+K7zBHm+zV|}M^nS6DyLm3Mh0&R2}0sZSE(G>)E_=9iLi}TExV@Iutax}=l z1PqU)bqC+CVV#BfNT&)I(-A8_5`IkLBe*4lR{>@22$a`HQZGv3X|cHr(pK842KgsF zuUo~4aEY_sSuf<|SMvoxRog~MP-lENLG=*IiN^OZux8g4JMQK%j5IjEUuFc8&t| zr`WEklB)45(~NTcNzB&n__UAv{r1(sps4fGxi9 z{0X|&+~p&)`3!xTbc!^=-H#8ojUqU@Z>V1pagGhMWfo2&l7Gt)+E{F>^EL;Ls$xob zbH#nVs8tTsncU#^7q(j8>KQ)j_8P|J4Dxm>kXyq@_ON6nD6JLINVZZS*XBTNa|RtY z&7J_lBwE{J2~R6c6Zxy8Tcqk?4GnpauC%QV9JAfqa~qn0UFY?e*7>6!ok$%l zrc{I$4UGD4GpM^21K*Yp*-?XIDx%tZOy9?P3YYIu@1Y`}DF&tNWfX;CQx5x`(5 zkySFQsNOxv6hh33`5_f#sW*$P>FC2dwAH7DLsd~brE|<1XY_aglj|ci^pOkou@n#h z00giABdEbuAMJrb*IzmmO;E-9Jf7f-xYGb7vl@n z-l@EWOGkF1Ca>Y(e?{7&kAtol{$mYeIhe@tB>MX&4jG$yZJ7pK+bayv(w!f&Rpy;HgWk6Z1uIRA`yYQB zC`cT56$=Y*@kE<~hg47J^2i0f;5yU%Cp|l{h^NuSDMrAxJkqX1N`Ign6y+<11EF2b z9st{Suyjhpa(&~GD(I>029hX%UqFL^7{`aGskUnE%4e7Y7#=p*i&}?!a-rVG!UP(E z#dbX12AO8M3DO{A?FI}*pF|30t8CGS9r;FSj=1*BJYdjBK^Z9nJzrA(0^$|BA@ug$ z2WEVD?mx}7YFY$OrZkZ8*V2D^YP)~eXtrxxSMxFkkiJQ1oq7gXfnDi>ltg{>Y3IwI zDRp2r4|N+5wA46tuBZYfEk#xIIkD;>rPjgm*BduK_KX9>l0KTsIca#>Ahqa<&7RZk zwdXZqNR83p!t-m{g=hMCiS*27(t3hGoLd1rPxuihZnzF>=pWh;YNHST@*Y4(uZg3r zHxZ?*%tH;L6Ej_WuZXa9)#TS^ogzvj#1qAQ8a3}kJeBkjrR}w`MFIAti2uBC-2gGY z8JdceaPDim=s0p8COZpi+u6#E7?Oa5`24@tnuF$`GRtH3vj|Pxk)5gn>HO z(3nG41n?&F^z3x#@%ODY#uqzBE5B2-3|F4j_az0(4`?IG(JF3#qDsw}zOU^4GKSxg zNw|5$`2xd~XHP~&CmbQm0q(EGk{!pU>j(+ob9XZZ=;hGeu2;x+=EBsn|Er9&Gc5Ly z+NML+VHLX`CiIy&)7iU&@3mf1)qg7{JLu%0@$m=|fB-?fJ0`Uyx~%RwC!|bei+9&e z`Ub!-ZX!ylONtK6sHrOzW|}ylzxUsQuZwl-`vvX~?DebHDAt1Shw(ke#(7JY!hTy7 zPr?|V{YVqR#`RHpbUw?gl6=8t{b8~ivR1=Hlw<_Mlyy`7+4<<)6h<{PctC;b+Bzw< z*V2?r^5ye*c0(;P6diu*DP0iH>Mrs}glow{MhPT-qlv&8-?)6wJ6Uv+O5$G03kM&H zmP!G%0nU`n!&w7$M(v57b3H5!#CZFEg5K^$ zo^bz=9TrgPt{@i{IyVl3$VmtBrxl)ZP*?4a$mt`kZR(H;55cj^(oX@7B$lRa(g5F*upAKpVg+T`!Vj?yDs~vI&T~ekvw-s zu=b-0s{v6j3bs(7d(1ymEoZxbW83Mg^v)_kR_D$KBHqWIlU12P-~z~}%Si;rZ<}u= zD5W|_`CIGQqi};TDk$iEKbj(H{JpH`ycxbZHKAQ+y*pz->#&;WR3=+K6F^83evvU; zbNOQeTD@drU0joEzi`R{9e~2aMWaV=t%D6?85zgKC~4a%%n@!nTJ1D)EqyF3uSJZL z$ZZFfpL{+QQBvkDn zu3Ek23LQw?UF3Ewe05^>pctjLaz|U5H{W7p7UHZ#<@J4{NX32i!SzYe4!E&jXb~~f zl3G8W-S(_>g%(`!2!KJ)K@{%OJQjcX-a9iHaA(nIRetQgU+L9($EXE{dp1LtOLcT_ zTY)1{ceDVej^(X#j`~&`xQjCuke7 zi^w!=w8xkJs`v!!Ez@$8DkAmFypSe!;C|{d-D&mnb-D13nuXPyqB3cW7n!$3FF;p|VH~FxbS+Tq(@$OV zqUm`thK>AXGfG)%KP5xl=6W>YD!BP>IJ}++i?uhU+rJ^J$5GlpwyU~7%TeT*^@=26&YyfaT+^i8iz1pKM~9@eDlV&ja1zTx*4NO9lG?T&W4%pzoGQc#0vPzb^aMNzQ z-S}x&f6w9;)I4Y013@{sUn#!8LS-Ul2_#i*7j_C*j?uRp3u1NG3WEh*~?mAf2 zH$Owa`FKaU43qD_2a!#f^{Va>-u@$U^A@NK`~s{PL})b9emqg&3D%-3K%AlfTt7VZK>&)GUFR9b4{SB}3KRq0yjeFo ztbq5u`jq577S&EQio!U6mT?ZFZ#Ipf4(H5>ae}6++$pn&Yh@w*4z}d`N-7USd?GXu ztH#3`NYw-9*fG4R583ku)Ppt5_uqpsJbmPz!CEZ$_s2pUR=#@L!L6~YikNL+ysJE~ z14Q4EgtB;~zF^%jrF^_0-W{eYV7V&jvx2 zg(nD`F6!sELvik8$7-t7lVM98i|m%L@ljnCX3?z!PHRE!bV+mfqf~k#|2&i>pJ2)q zW`=ofBJp?j!mFITN)w+7da<=_kQ>hrxO7Fu3wiO^QrLYw9r>}Df24+6M?R0C^ubX* z5Roo|MGIc$rpRB3>vglg>N5V;Hwe>k!$w=19sAWJo_-;+2gF)>cne2 zNCU5fX+1glRlo9>pVdm+ofaWbL#uy*|D%yWDb~jYo98{?b|xcCqdVo5AO-(_!Kx@b z1)ocRGg48S!F87dhlC)6GWC`DSwc+3HN$n6YhVqmMV-0K<_ow-NDQJ;6g7$8p-&jF z5VL4-QY1@&a7y-}3SeoTf~jdTk!0vxfb@utekWjDCS)L=2-^DAfpPBPJ;GO1A(H$S zd@HT&u9cZsAISv1(8g1tP;ZW3G_^T;MM&Phz6@heB9hu5nH~*z>1$3B>eg6{EslWK zRTkXvPdbc5j2@Q&{9|W9vhns28##_Nxw@}*1H}&gU}|(b#9P>n&Bs6S?=LCH#H!>C z>sdPu=Gs$^!cOw6dVFeD9Jx=Y+?wd3Gf1NL1i5>aNH#N}QT8pG4>iqyv>wi-w6pqP zq;c!_;}AV+Gr4x+!)psz0snThpa6`K7)vI!A~1R+(d`cv5YWULi|=-&8p2L%p6}#JdY>JQ-Z$ssr$#eE}K`C;<)xWZ%v$BafnHYA85_}myFo~LcTJ?xD_??l& z_c#gapzoikm3hA79sxXFoTA>@UGl<>+`&W(j7muq@42g|n0m?MP;Dbo(Z`%UI@w}K zt;@K#V4qYLJS}@UT@b*eNjLQ%0&q$}<9ZSieOBV(L)B2PaBKO=b?UUzSlL788?d}hhdN51$L@ZEyje!XHh>}3IAes<~6?{~qGNSEeSxK#}#^`SIQ9WXQ$r#pAHS1$bE)?!sg@ap5`A z+754J^gcYR8pp~iv2KxdFuV}^%BxQi_DOeJk*f`1g-BnuF8`m$`NzR6Y$6qV&2SXD zLjm_-@3d6-ZS1o3qC8Iz$D<(R!|LQRk6($M_ zKwwZ0e`Ex>ff815*6J zZpAq+?#nfn1rS=^2;LkD^!S!t!zp%+Wa;(%eA*yfE!2B8O~a`&L}8rJ}_kyV`x zq3sfloI#;Ks^=|R#Exf!xO!uyi;zV~2M?*B)d^K?D^@4#-@MM?+bK+=xorR8ux|;CbO;RYTAb=+75sU7&S3z0i8Bbs=}AExbO3B?@-G{PjFID8_zIu zdG#^#YiG5;b^Xl4!M zg2mVyb@ZAfv#d9#&?-E2l~t%i4h~dg)7TZN$3kEEF-r#BZgbp?B_)-0FBe9c4oN0g z6qZ7mhZG$M;|)=|wC*msJ(}XREh8-ewMMBLX5jetNsN?jp5OCSgnI5cJ$haIMCeFd*`?OZXoFG44cFZhy z>lpkB-1x`OTY&|;z89E^F0-MV1>176Btr9kz{=UjRU4`RxYog~ufvjZy5rmV=Nsda zgdk0;e4qH{x*az(!e4@kMOtuYDuk+9NR|!%3!^cx4*DWF-6iqGZ*Cr^8rcIYVyB5d zPLJv(TFNvApws@#1L0z!9!y_~(B_n2FA%Er7~3u`!T!m#i3>Uf0}M8Ja;B_qB9GciLE!h_zL{fqdW-KM6MdIE3fSpJ3^7q47SGB z?&6Q&<-}7J@64a+%<>Gvhu9_(@Ej38b2}hiq-7N5(SC4zx{|u0S5uSScFkz^T=@6@ zgV1YdE%n|HI@NIz?O%pRkTR!7KreaB0SzTG8MkKl({(#Di6^4JoIX0?+RUCKM!9JH z+{Y5|PMrz;jwGzV=yXf1vH0br^;Y$?4CFx>guW{tau5W-S1E4NUux6KkL=nX!pRW| zD=-2Ml5t|t_Y(h!V!{nBm}Apx+0(;p&7>P5WDWinhQClAme(1VSp{l`?`Ho%)9R0D zG?v#2&g*paTpT*3`C!Og}Zd&N(v^x>xb`@fSfAn9=CvM7^V04c-9>MA2 zPT|U5v<)MOZtMdP*P_M!H3rVH|1X;7LfG2M7qa+jW%9bRn?z>b&^E8XZEeICXwA>7 zFd$II7wmeo5cKS|-OvK0wp6%$e*Y*|l)!5GiG(rp|iv1s)t7Zwor)T$)Hb+=n3`X(=8*>?FY(LEFWMh1Ba z7g^$wOZMvkm}=^e4{Y+kP;*F3=Mz>k7nUH%E<(rC^k@>lVB)13NY7NxW1AeP9@iX! z#v?~{m2Ki~%Cw<=!#tS)Y;2v}UAS(3=`)Fzs4KNyGpCAVAYjl~t$N0=?&DjEg zq|lM#Ao(p4vQNbLR4WEi1P=_+W`{oIuoq3=XPFgxaC(gwf`l%o2tf}AxXBhk7whF4 zW?!-&&;|C5XdVNW!9prAa^&ISt5^0TsM7? zyKDX=LHsZxbC)nEov@@TGopzlWvZu(r)Y594(Lvn>jT+txy>$3DVF1k=qxhhap@62Vu2dTXb1n@BZ33z0RK>%VOkE}H+@G3)sH<8Gei17JCJtJhF zj0pczy)&Ph?k*DC+7K1ZmqwDR*nDb4a($VLz~HTG5{@e$!RpC{?WVIAO3U~TixW|z zf>H3qtXOH>MaJ`xu(sfTvjh=7H{Y|_nJn@V7J7wq&KodId}o@V0}{#mFklS8f_*+= zgJ0Q1K*WQa`k#<`_IguCaIya<)l;jOi(RXo0J@X`TDM@0DsqZj#nplAdpe)J<9B}K zj;$;NFAEZEjs{1%m7-2QrpOT#{7Ge%w??(Y4Oro6jQ7#>`+nBxm#dV|V9pAEmhbdT zI1(ak_5I>6BKyZ9YD$>)hZNkL3UP(^;PwAiivy4aGb}OeXKdV?mKU|O{_KZGVFx49 zC_IWKYKT~^`7clNkP53RtEv}$8G!MxY|mxT^Wl%UHX^81@Z}&fV_c-8DO5bteeJ4+ zu(eg+?l^oAh%8VDkMPUT>B-ErT8L&=V7zAnSb>tF$jgw2XO#$)VCstm{0@6@@0mTq z5^s%Fi)s-GVYW&@Yzx1`;c;yzQq4J@vn#SkiwaQZ5U zZ%Gi@)hXt)p85bL+vagki$&9Wnl2K|uMXHSTEa*)Aa#I0n#aLz)bprO1}0N4UuQi0 z?M4El#O&~Q`r#Rak{n}fhOe&m

=jdvGpT9+hqs&MO3^ zFm7C09{?}_0taOJ*n&eEVRj}BLPWW;E|%@?TGe8-*W!h0IpUj}BX8Y>uwGc*mP)zP z50$L8lWGfv7ao>6!8wb&l>x&xQXZ3Unf&-!(ix>^ZNB7#T2ZP&jjokIf{g!K*?p*8 z!HQwmBROWi>SX)_ih8SQnG&{C<;RvD5amh&p#!<&uLQW0^f1Xi)NI0jgs|Rqa0Kr8 z%NU5#s{IEq-K~YeUT*q>ojjFfD)!dI@iU#f3_smBKmX<$THHO1-R93XoO6zz8qs4>s^*Ye&dpLKYMjXtUI0(hAL1PrR#Xp?FUo zd4PYgey8CVH$>S`)c!W49sk0Do%LK>b)=f~B_0bM0ZI-R)uW@s99A->F8Si@>Q8i4 zRPdz0>L0x}e7t!5AZKMN^O5V;Wy63l|W(_NR1mZ@f}^$?Uh?J1|CJ z^F|JzbPbc^}gZ>issJxao}t`yuW^Wk`c+Y3@cKTOdG9< zieo__lwKLh#{?*)N92p4l%$fwX(R+OIjJvT7J#rQ6>$+<`B(JWMzpww+(UiiM5X=# z*=xkGerbYk#k5|ue@t8 z#LaAjTVmH`&~1h@BgRzM=vUZe?LTF+O$NNw?)CqNvQz^DIsTrVa}QWGxFzGLk#Me9 z0iZhj@P;(Fo&g1r&z-IT``uWw;mr?7dEsd>&mjD5=S@80BJi~D?1L^O#j}VQRURCK zVL`{zAP$H>)@=yYkwQWA3Wb<0Q1$V>xGZ^F4O)2iSFBaBFF-u~7TwG>8m^$O0aQywV8jK@2Z3>*iWWE|^=nHiiQV<(H^RKX z=Y-p|O|c1wBs^p1>t*u;VP^a#7H@KtS#{vKeI_-J527q{zRl2SmTV^N$fNVRl4qt> zrNgC**aF%Do%@(2wz`dJ-kxM`fIIBl$PXu~%948Sss5Qpkom{_)!NKpyQn8QxXhC} zSKHFXv1igaE!i<_CYI)Gi#?59VP1KC$i9o}=;lY@<-8dt z;qFq$)=8T1B6om-O{2w5p0MAHF`iI9A#V;(%hT=cMGoQf-=x$H$uOWs`^Yx*Ac2k zFhz}5Si-2AS)v-G7pgy1$!&jNwK#EZFc2dE0D-R?V-t8O3GOrDZ;2h0&P%Kqs8N_Y zL*7gbVTcD960PSu0_g!OU62$m9{?P-xMfwvTVhcs%E771#% zcekm#xvOEgSuKjX6bl+2RB;yy9{bq9sNzQ$21Ub$3Q~ntDhA8K-DsK#xDJNdatMp% z=+=fdO^p9fo{MkyoM@j4;9?aYw$)T$&`2hykLhFQD+#0!Exr|>{0_EESN->M+{qh= zFaFB!xr>7zCSZ|jRE?o*u1kTKyjzZ&23dT*fq>d0p%t5Pd z-0+5rAW0vfr!KqYiU0OYfPvB~kXg2bJ300}1*|`eiIimnu6z317u#IMc@YFN ztwCaoBQE{w0u6KkUt~$PB()7s#4+0o1aU3tw^qyaNf+YW>YZ;4tWI2aaD3{QO_P`k z(Ff53g`oWRPUE3mzgk|7h5;Enf=|00Ut5bU_|Oim3wkVRX}2SzBM{FCD1E7N1ATMK z%wX}LdcN~aM<-8YY?g3=9zCZoFYXEQU7pT2Q2Uh9P*7B{j z&K?W4R;iD=O$=@%8I`J7VIQ1_U_6~!T48igk{`QJ56 z>&4uTa9;L^3FzSGb4|AA>wyYsxo1yrx0Ld(tj~rfk&XjY-JI(DpHkfwAcpg!4W&bN z#BLS}=^7~P@?G2*;?g?b^UP?ac2qVIlE^}poc_xU%D3<2;$f!U0e1>Nc1#ad&%mb6 z9WXpcmA`QPAfqN(lgb#}5!hwjs#B)eJZZSvVM*s~C>vE6=qNBIBT-UzINix$v))~6 za2E3KEA3P{hP+zz@@UzV{XPB*#bLrm_th?_bMq2BZ3VBXZ?L0ba)oJ?4gV&i_$SeM zwptGTAB?1Gdvo24Bu81FD8J8Jy#G|o zCGN|dOKD975@f<#du9YZG@oW%LOTty5M_w3mNq{%N6z%*na;dGcZ;nTV}#lz!=!|R zdO=y~z~nva`hPPSK8lpu3+zw1!C^RrhV>`Ye_O6^$M-aR?hi7Q9 z!6aF;^&7}_-fh>2X}wz2sDGc6_IfufjayX2eTR}bzcuI{zLeX|qoHF+0%vZIjW3?k z=RG(sh!r``HGswW_i>x+)(NNdw!1*c33B4aNmeE?`x5{E(pb;-UM>rE^;o&?_}fe} zdZ>n%aDr4nYmwmXDS_proMi@Xi_JHt(l1zrPmgvv;&y-5u z{wYz646V^rK3!CA2mpL!VXy4?i;EY{b(J|;T$WOB#Ymu<^8Y7TSBV{uvzDc@y+g7z zEvPNR%rLlePy703Fg6AJH@<2B3{~T)tGUpk_QfmpUt~CmsGn-!;z(7H_w$AO(vP2h zicJ1q^To>bV~Yp_(x3Xg1c3MFOkOL?mPR*3aHLk{00xM_L7w;(L`NVK*Rxi-44cB1 zjgAr6e53kKeqLRGVz8p#91FBTl(QoXbJ&w_WGS4bB zt2t#)Z45Beb zoGE%LD@Urn=R83HJM9Tgryg;J9*|HisSDtNm~@fxQ;j{Kwx2)4pe)jnvLID?I-oTV zNZ-Y^0>!wa)V!i|Y__e3a*$r(PE>9K;}_CAz^^1#&iQ}$G_0aj5QTR}7ElyNRAqA{ zB+W~NB#=5|RCk&R>l46yUsuBicz9>Yw6#{S&Pez^pE}4YxlY>NUVFM3uZy+s5;NKK z{U%2)U|dI>m#sXNm0{PPkOFZ_53=IgpsT65@OL;5G!{4h1LxSl7nc`EU*3y-0I1Ys z1?VJAPu<0wfuda(LH!SUoHN?G!TWna!Uh>reepFbn#)n+I}X8RkcLJ>OdxSBw4Esr zV6&R70dj6^U2ZYBMUM@US6*?B0S6<#&C!%j-JF7gAp1WhhSG;BDB;s-uF3yLhRk2p zzfGh70dHJGC{eqP#GqGMHa~YB=VpLbSu@wsdHK_9@&0{2T3K)Fxi@^^RRM4|?AZ9~ zE3s}$Ak)^4hKM@OZ#$xhi-nGtK-qj2p7ois9nRI?-pRZO9U_XGsqK$km6bT=R*~mm zUGtHbWq<44?HTqO2Ss_qMMx+w662r5--|BuN|FG1r=|195ZL{HY~rU7ruD`H5dHXu zh%(Nqu7{kzA61I(!j0+gsHi_|x+c5>cG)DPR#$PaBQZ}mAU$#3SXZhV<1uq`oSSwF8t}~| zwGGESMsE3t0vK~y9ZE&rpqkD;Rs(G6EGiMLM`Soe+Kj$An}LW^-C(OHw)4e}^(c(z zK%yxd-N926tn4TnT6E_L5Qr{tpFZ>nUNeHiT}QA~+5)qlJN zWzh+!Y3r%b27=Y-co@M50Ej`1kfZpxZ@Mr-$ox6pz17_Zk{N{*E+X}i_P8|Crp|eS z{Le8%nL->6f{ft8zlw^w8~Yb0a*FtTIweDMGx_p`RT{4R-PW=~R*cf+=l9x4bh~~s zSh>a|@YO5N{FWJ=pK=g{RB9prbG# z8yYdCY!)5$o)%Hpi)=&qzf>zqP}|tVHJ|hreEKrNv+7ieHU%~o=9lPHJN+E}M<4jQ zvFbsz>jK3ieGn4f;Ph{o-lfAlQfViSRy=(1zy#}P`@UO^eDF1^fPE?wG2u0h_oaN} zgwOJ%e*^FW!GNX?v+a;}#d)@hJO9jujoN~%SduGbHcS{YnI;$HA6Ju})PHve!!lrD zhj<(+)*63I()mCV8l~EYI~H3UoqCdknf8h#ZL7!gD|`8WA|Pm;Ia4syAks~Bs#LUf z`W0%qy(!3`2Y`wNso<4Yp7Dfl@j=rg!IFX^?;OeQc}iDMTq~b!*B zZGK>_lAJez!?0d@`oI0D>I=%M8Ene8N}-adbr^ z*Qy3GMUB1c$FHjav%R{3jCs;GBU*Fb?A&Cu-6v@zpM21p z#}q7U^RUQan7Es5q%V>*bXvW827SpI%oR^^6|q+8+{+%U-w)iSyi-dOnvZ;!=vq3# z2<>gPn#}!g^A<#L+EwcHXrUFhptjv$mnpzRmFQb+TurR7u;z!eWnk5QQgX-=BkC>o zC>`AGBrJgESsB?<;6o=3qvwg}cK4n1V9!0+9SY&APAq^}J#&Z4$k3?d@BYJ~QXK@g zHzP7JYGgYY9f;W9Dpi+S@U|wGl+%pOuJQ+9NW0nH7Qs30{23F}GT_RcVG|l=th03UlGuIa}q$01W2UQGD6|rv4Pe z6zLfA20Z(oOm{_b_hsdZ9;6`q9np-S&$1%Wd^~v8Hus323G0qO6zQqT|5#_q-64HS zss~LO%+TC6K^v%UbbW&vPFzW&^`bUh42Wt241_ma46f`o!@CO%3D^b6|3^zOCsR^} ze!$X=RyDkiinF8%49q+{Ay0sZ%!{$RN`_)*MqG!FxUw^BmWXK;(dM?anAOyjH4PdW{?$f3fuXhcI%d~q@Wf2heisns73qc8W$@~7 zm7a>|u#1sSByBT~HEX;;-d8dSE>2k)U{Ze1Vv6&xmK$VtsVLD__rg&=MY(02EM>6^ zv#0QJO0eJdeYua-0U}@991S8J6{JAI+YkgW2ghkX*lM*pg(pWu`_u|H#uHe%)opIeOUtPMOy3OD#>eRVGU%VlYl%_ghi}O?CC=D;K`AvDhkTqLV#>$_ z)OeT&`^NR?3MKX#2Qt~(VxJPro-@NQp0z~)840(n!cScFQ*M}&oFtOGRg7YYFqbY# z7XjjW20DTO`RR30U%vdVHre4S%!->tZcmPjj=5%hs`LjXww-?9w*>U`C6F$@(GrUT z5x9_KvV~!Gqm^|cO`sE_rtS1~b~`?)s-BId+xQ^cm8%nbD|CsH=iOitKwE}#JF93N z53F;fg6kt0F9knlQ&5Y*Kl8-dq&^n6J{PqmPU8ypy^>f>7rZK^5f}d2#(?O8%QI0K zZVZz7?+J&i)+WJ(+*05)@hJiT%eGK`zZBo{n{oxjS|(u9MS(_M1~n2|Fg?i7c(>-sklJ-Q>k zA}K*#Q>R)^5jJYS^Pqo#J-O8d1=Q|}zYHsv`B={d0B!G7r$O09^F>S>RtplpJ|HK@ubI2An?X( zDER6$FKd&-5QiSnd4&$;F6_126b{f$)b&%)JzH_mR_FK+*CMoHEnL*z&jh#-MbJo! zx>R|~LV)4~+8Aq?Mv=&Ylgb<$O%(|scHfdf%up@L=i8E>JP~t^#U3CGYMB=^ zI*I4SvM74-IkP~XYCris^?8JM6{q!KFrNm97nedX+5vCClu3?vCGPL!IB5o+`I8C~{wlEft5)N+vcyLb9A0{# z3p5{XY$(2B5n~!{;t1ywVTdp>>(v7q5pCrGz9SnRLY7j)ueF;I<&+xBb04_g8M+OO zVgQ>Bxxe?gUZ%3G#bzgm3hmnfKK=B?Y8T_qV>GiciKN@$a6xmp2CsT*)2ucp2XF0XQ|$(5`oW#) zvZ7ssx`*Z49>r+~cPBOnOz^KGi5MEfj4QJnz?PUlp*<{~rhq@Dqy`!hPs7KN3n;3U zge(_Q7(IT##r5S%G)A?YP{^G>)kFOWj$Y_VkC4R z?)`zeZcv5>DZ(SLgoa?wguhCVXXb)|5sdjd2jDhQ@)i>Mj8Gu{#&1fbBwDwnAF!PU zu)rnQ;f9yH?7xYsF{Z$@4h`0fXvNsefR#fJfbFt1g>jziN~q@Q{C}5^Z-+o|b2B_6 z$iFCqaMU+DYmOas2q-Cr18cMmf!VM9ov`pYQ?eIvLCydG10-!m_2y^$fzDe@TCVQI zj~mH=xHX;xtMSTtYZej1G%p_zI9^b-r)ACzV1}X%Q{m6LHVs+j7&0!}iugrEj zP&3dhlT+@$Y&!nYWZ4WV#KkZyf6hF<%#dCIoK{kqmi^dP(S1WKK&gHtr+%vh-!c73r@H||)NLqLBdM_gQ zX>?R)8k#o1+bOTeNh*Me>@b<1^#?3D-;hNoX)@yY&r`j+hOGL2=Z$*??lUZ^p~%@E zLpfQ?Ra`Ubkjm#kh8kl^p>3p9>&ElO_=f=iwzr=T$23R36O1|Y(%O+=RD78k;Jw|0 zR`T_i{5mIVoHcjnInJflxqw(l<#6jDuXsE)0Jo&KW}u1Obc&bvDN z9lE2F?iXL|_%B?BKs&VZh7NRfDqB|}CYP!%!e)G>C}R6?0Ngm;Frb0qae23PiKYu@0$1NN88PJQ#pou-N1Jv{KmDYuGz-O z#fw1}O<(%AYg-+;a}0v)OyBvN&a@RAQgU)I9=s`?P3&N-DNaSXw8Kr_U}dfTVk+ znW1;ppHe6C`{6f2&*AwdYy3R%?(h`YA#~9R_n|(;-#^al20ja6uuHVCKzIU++!>s5 z{Un*=yyfvoU{v?_q}P9)$ibZ1C!^*mP|T97Uvg9JEp+S1VXjPb3>K+%`f@BpvG|p3 z>A$}0i17P)ppySyY{=>1iVmIdQihq7JckF8;=)IHwH>cAb<58glm*83tKVa7l;f~6 zSkjJNK|=Xg8L7^D&VnJR^hY(*!C~4-UY}PIx|E`jumG~o#!$^aN!N+8{)L{+;1%xW znF6R1^P5v25yeI&E)9c88n4{-0`Q03rFRkUx93e9OVHe%n>zp8%)@SY?ury{E@`vu zUH*71<_rW)4ICjs{`03yDSeiw8*c1{pj);wcJBpAKGkODdSs*?8GYWoba9n&k#XGo z|3!TRMIk9`bT)|Epyr{kO)uh^p;|sjT(E4M`y;OWtrU`3J|^v7emM+31Qi2tyiq7T z0S$J&0g2@N09Q*r$B>Ao56b`m6;?kr? z37aWf)iB3%U&q0B{i6d9^=VT?tfg)#k9`kY$cDudh z)NQKL1nc!NhJk{QZK_vMYxSPF4?pAyMiC2^^PS`y_}fGKsDd2jcjI@N9uMEJ>doi> z)C!;e$^eC4vKM0Z4z>}zSh$)wLN^6`O#{h+2AO9XM#Xxg`w8;#LfHOebN4Vb6Zu<7 z!6i4@5ySQdJ>$F_(}x_Ky8E=~J`cBqZ;b-#4h20_g>Cm8Ts#j~XE8-Wj|ThW+Bip} z6yPXSjqnGc1I!D2T9W1JceyaF^0=4%ZC!V@jex8Xt#gFOGs5k>5j?V?K!O#jE7vAh z77*AginQZr%1Q6}zF{J;6gi(Y`(1wgk4)!$m(t+|4!1JsgZx$6p)*?YOTe{+p)RYb zW?R%7nI~#v{a?&5_zsS$88Y)(^;cqm?BL98K<^k=kUc9(wuXtA(jADI$8fV6;+{A) zr=uS%er3uLj|2{(Rg2<-jVV*k6Vs=!z?$R^Dww=F5G@GhxER1Z@%PRfV0oj{W5qle zZcjfz;fHR^;44yMe4icA0yh-zTRw|k20N8}1_Ax&%QgS-p_0P~Pv~BH*La?LL%!MG z%OYPvnTRK`fL$LQimwfQ=Kq@htr+(0$XVl^kZeRrbbrP#cA)WBzrQ{Dl0u>OdDJBV zLDVEuYH&$HW^m8`x^jf2JN)94GOtp%+c2L8P>W)%3K=ROb zC4-5V=A-UwFzaX}pj*M~n6-7(Q=~)A=@IlS90`Wi+Oqf;4|zU8-49b&D<(xshHxEG z;Ki~ilgnIi6`+vpN+ieW9!&-Yy*TUOOU`)oa*vY`J~mfOle5^G$?(tF%w{3W5Xv7? z7R2sc8r^FuKWn@n2hbo(MB-e^bRJBKe=d+#j?f1<@pxFe_a}8r*FbFDXbM3<9}KG; zBHcDI#4rtwAAfQU=s%ErdG3r$Y}qUI!~#sghX89(uPOdg4TutDoLs`HyOF0IDd$#jMPI z6%|U_%orDv>Pd|?_CCAG;e2>>l{uU7GCO{ zm^hR}-@87U_qizeI#ls@L;g4R6-)8d`!>?J7plRyo2EJ3@2Dv+7JS>s8!<3V=)?#*r^$@RC0!>Nm+LBO1`;(Zxz3))9~+bX z@=4h;i^}4`m_R@+kfmJ}}e}JXGA!9J& z!wuwwHgPVU0(*&~Ih6T>u9)Jpg4L@1KN{^6AHCmz~pkI#AYB5a83@48U_|ktoL_)wuyF+vFw(s%qxj z6qza#Kq=|s5?GHZ6FX8E5ZTbUDfkQtY|A08#x3N?~sFBHoFGT zKB@m#r-c;c{M~k9EcoY8T?2rc7uZd@0nvwkSDy?qqeU5FtO*xo+3z=_BZ>-@^ZRs8 zdj>(3DV`hmSoL_vfrpU#oUs3*~_Ea=UusdZLX zAu9DwiKX%Y1?3YSXv&?=Iu)rl7Jkyuy_%7GK>LO{dym3|*Za2l(8P|u{EnY0OQF8u z&ir@Ma>1?}o!@&WzlKkBxRr4%Lmht3Iwma3T~@qIX-$G3G%709e6Gl(Xk&vmO2{W$ zMG+z3h!>V>qjEpTl1UR&Im6U2OA8>)63~0l9A4cAx6Ut_p2Z(J=UhkzVp*&GK;!0X zbLS85@F)dZ)Ljd_zmKbwan8GJGLRg+gb<__6$pqKX5hiO$?z95&TE7e{~g8Lc5JrG zn$3LkFA-O`nLTBIlpC4NtQUVVN>Q1t`D{8+*bGi~(+bd`{e1C94eVG9Lu3mS0vsVK zzZ<9~=yBWNXRdCUhD^qy6A1)-Y%!EcO|%LkUAr(MoExD#KfgMxX({oXeUvC29S}OM zV=6GzW8(@b+R6h0UtxQ$=Kuwc=eIeV6B{M~;a?%!JVt{MF!dv$+*77W{#vpG&W-_Q zx7<&GnqkCvKtJ7DoJ6)W=Y<7Rtc%ro}G!Jt^y)&pvgc?T%N}L=QTR< z&y`AZ@g=wA>4kHmX~_Q#;qX%G0!p{6Kr!B#eXmH?At&hnJy;`%G zW0z|`hHX&w<9-9?OFe!u9_oEW&%ecNiQ)f<3kZqC-U{UI=U1eN7?coUL_9b<-CEN! zUNJ(^BRp&6UqgNID@uy+4NO5N0>R*i{rJh~%peKvS3#SlR5lgeaw(k+vJ&NG^qGs3 z5OcWo=ESfv-kIDs%f50lK2SBklj7`yO(!tJ2Y<{MCqwYK3{Se-wzGFv1*VYE7hb)n zv5W+0g!5kAchhV>ndrd=dPBj>8^C8$=+e8trc`*4N&9@~{EwB<@TtT#aTnv{*@=++ zK*Z7<(+F|tCDogPz;uYOtTGj&c@JN15=GNo)R7pDEv>)+Fi=&%079*_CTZj_ER$g$ z5D15$vI(L)7Jn$O=N>DrQUBT)dJqLCMv`eVIdntX+pnuF8k=}|IeZ_Y;5c@Tk76u* z4ZWrWQQ)}ErJ~ZZU!CXC3CqFs@(%zla4dj}5DwtoFLdotV3U-Prc0Px(_F=aaZw94 z(pSE!83nvXuyA(BgF$hvY=HvR`@y_k=F#%rEDl8S$?S0tWXvsC8B~7u{e(9eOE$Ht z%<{6)fm@Q`wAUx9ir~SUI)sqFa=fXjOfinrC>ja2BRXNetx&YQO?%73-vLYtmIr=y zC>iiVeCPU>P0ebEm96$_&fSzu1{nZ=$p*9P>$uAT83_{UO2-+hRvF~~Rk9p*S zoARbJ-MA&{SZQ?QYZz-}j>WcEi87XL7TLRQ;xv(k{-m9?x|CSJhaad;pRwst|5%X~ zQ{(OsqRNRBJTT?E{Od zic^|oZ7?lJzkir;QM#5G2k0?|XC+YFdMfC-M)8_;?AmGPb~!4=fLNS+#op}=88kg^ z@{Bf=juLu*Zs&505i5WNGz!_XYiGUz5?gA zr_uIl%qpN8;yv}~Ity%S@a+3%Gi==syAks6S9N2LC|SXi$f2@QLuD;s0|Mk}e4LVw z&L_8vR?C8K$7fP;cS_rAc7TS9s+?0fgot(AQuAvKY^4d(Tl7(CMfI@Gj4#L)EvV`aW)`FTkihufO@g^@Ep0OrXGPZ@u@ZtQ(nfb3 zh#LV~3SE84MclemXyu@Wdglre&RvF7S^oc~e|3d94uCH23|&=K^5EJl*9R{(;Ap)( z@dtqfUA_Zx3^S9M*k#n~H#{PL7@hd^sb#=O;Wa>pZ@P_sjlXX3lg6VJ8~B$Qw9c`^ zFvqvsf5quj0xfve&-O3U2ek##hZ+EWKnJ7|6aypww@{lY6)3C7v4*{y-AfdFg^H%nX#q5HcDAc4L4M<&ozt6kF-~(2r*( zMm^rv!+I$)Eu2SKw6kyk{P97bH$&r8$2Ko^A>RIjbVg((AwGT6JQa{wLZ%uCk*|=g zwQb4t_be&b)Nm>%-*q(y^WC>HQ0Gd*nQNzts*=aSgEG*pigDq?Np#Hz1&Y12)wN5W z_lw6gnKTf3Ut_jjOmxuv96qJC1FZzM#a-5O!>h5ZU58HSl>?xMdZ-SedLKlM6=TEyuvR4$+cv5tQu*O_C{Mw629f`MgluRJ4r)@`H24lk0+aU&Wuk8iXv$C*@@2fEet81fWu8oI- z+OKa*{;$0%61Lz>duhz+Aq`%PJ@p;4GgbxY+bp!#jr!`+=ZdD3Lsd1X_G9d|qWX(j z#&EiSO)Aw3h~{2)>m`@Q$KClpiyC4c*zDbL=<#4?miQ2=B~)jPl3#U)qK-rVt4He| zj&PAy9YkfjgLAVUSrZ-0mSdIw!2xw|p9gaAtQ-)0!q6&|=|Z0%vAyAL7k5TunPwrk zE2JJkRW(p^4Z*VELdWk9A7$gvBQS=}EXnZQ0Dhn>Z#wxM(W5J!zu}b~J7Wd6B(I6R zmyvOY%5M;TMUe$XBL#VgA|pre=S92blYItL<$5Ea^O$7b&jAN72Ly_Dh!H31nJz$y zk#zw}g<|Cx5|{tM9NQIfD390Eu9A%3D`+6Z*c+sd{lHg%{GT??iV_i4gyP zAopNLb=WU05M1cx}7yovXbb=`ov@&;%^!C4)OfxOwkm`YyW z#35p#%~~zhIOkIbLj6dZLu=`pSXkI1PvmggS0W-~1d#s8cd)~TQ4x0v_jeaK+61ay zXwF8CA~w;`w$D%GQ7gPLB!>eBV9p*M5jErkU%y;{%ZJn%axtA2v0_`)Z-w^)5iHjb zlabk=DOMQm`Vp22*+rjiZIU{!{o4=wY62YMRIDe|F<*b$kbRGkUUMo z@2QJ*<2ZfZbxr}-*RQS43!S>v$k?sky7dLFB`S+pKBi)nC#!JLJ_+7*?p$YRT${%}b9U*OAaBN0fa=1T zU*}pGC3QbY#$a&!rRAnvmVaYUKbz_3kfQ@D2tQ@9vs%ou|BYQ@#t`e1A8KY4y)q$Z zalHF#eXKbF79}Cq&PKQ(QgaYR$zpn7m;6+g^ZTav>^zK}!i5Z7BQcMg{8x%32SAR# zeC%+o^{MN{={esevWLwo^FOEzBk(T}o`q221|)t-+fdfc+E6M);MzxX(`rrM;lKJ0 zNzyeAXYe!h(1W~E>_0E6-`f_T@1pZN)J%WZa|@bxI~E@xsU3iO*ufJsc_%>j^O-wK>5%`W0%{m%Uq8f>37q5mL%SdYz_%fhMAAcJ&?GNrWn#WOlT~j z?~yPnP+OUR`=?!WN687Ur9r47%O$n~1>cyCm-3XG9TVavpc`yHi;|4#o0M98tK3N) zkEs|D>=zEB|F1otq9}^*Va@7MtB?`JN?|%wSelUadC8rdPT)#gIAC}f055fIbFo7n z!Lh5?DEXFdGEDR|*O8i(&vdoBKa{5A(rEfuD1^oxb}Ov{wj~#6iH>Te5SCEM79w&s z!EQoOUafFb=a9`SS{T-=sEtD&$EPlk)oJfJjC;pe_$Nbi_Jd!O4QD(g7Xx|`LA$jULFIx zeLOfjjd7bMy10)-+Lrsla7(J*z-$Xtf{ogRO3kB{HqADV zq|(nt5s`4)fY~yh6;Eo?eg*IG(l+SlLLD=zSVIkPI_?W6%Jf^+WRA3)wnuOp_@L&Lq2eQ?5>WAKKn9$Wb zTb2HUV?PQu_cXy1_NF>5esBVO!`jk7T}D^coQjt>=JSXGY>X9Wn*zL2VL?0&H=5)( z17TBXkoxKFC((?zl8Vw9Qnio@lt1p+K$t>UL;bh3N^PZ>cSSmW2Yf@=rn**D^`B1T zKa?2w&_Pjk4iH8CPLc4)QW=sd$iiC2<+_`m0|)D=60!AMLEuaxz$q~HY%CC+g z8;@{Na3Ie#iWm;JMlTq$K^lJ8A3FgU+Y>9y5DhL@jzv79rS1W8>msLal}4)Y4n*RG z5=g_{uSxT~C5bygeBqI7|EP@~6o5Q8vv$C~IvZYLsB0L?;|z7bRXR(p{2#}1T4Zc# zRwNiubc13auaQ|;KC#Z&A!?8KV_eGxXEJkD#bIo2j3w}jk;a6dTP%xKc&^Ji1pxy({Ke~3A##I~j#j2x^;a$jFX{-i{YahOrH+y9xcJ{bJz+4G zgUxz8 z90XW3I35x3{T?-8!IRGt3#%E4=s2`L!b%Mc77{OHIzTKX7+M{r)$J*e>e^b2#;E1P z6`S-98N2mh;+x3~;s}ZCR9k`Oj6R0Ai$R#K#4k4CuOq;MR^M8Ab@!{AY~%IE;SK%C zbAkzguF~NHS$_)qkvRJRE*LOwm`^ZK8wBOKfBaMD@CsKNHR1YwQ?_zwaa4iGoS{{F z)9AEW(;K4iO}&qdbK^>T=eA*Jz{GTLdtXd9?QSh171kRO!J3}U6y1n_+6pf)LTSe( zQ`ffqy>)c=H1(BZZcPsYO4yfJ-3M$ESmA<=K}7vg%6mgP_YQ-)p13)DrK_xa@&M=` zK4a&706-_8{81QFn^|5vx;V{C%=~3XR0Yn2)qY=9XF#N0l@t5S$Ca5|E6mD4CKVwn$A z^+<8?q9FbzP87>Y_i>Z{TO`C=3cb)gKnknv>T62-tKVO4;uVqzcLx@2t^~S=8pjz1 zbP)*j#ZC}hEJ7DdsqUp>>ajJ9e-~Xo<=fwW)?G$g`&ss9>-K%+f+mgF0289r-(1RS zb(TQWJJIj%<+kQ25eQ>us4*%#sq2ECuGK}G`rXL8ze`M4rpM?xGh#T%s2BWW`+qLa z0x3+qS%km~pu+km?{T_0w$!gNCLmI~$QI0_fXFOcv^?-hPtUA^I^NeHM|Rrk11>*g zWIxj&D>6HP*wSYa1D!{bmo_{#3|H=3W_!zk36h{D4poa(V)B;qp_Y_*ifz*)RBcr( zp!|H`e_*KQ`@+{oufYXoD@gU;fb=;RxtnBeY%0wNEA5}i^R>UogUqn~Gi?oegoEA7{`sv{jnd;9{ zShBqXLix~ztP+g^&T?kAaO@-3DqNdTr*uRn!j*qCP!x*}czf^1>-eJTB zb^@k%JrH$;Anf#3TkPaZt-JN#6(d>M$?Q7_qsZQL)pem=JL=PCd>tz*Vvi{yHPPV8 zymB~VXRnjw9nj(7>L5v}!THeoF8huRb525{28<2{~J(TB#+06LJHVv2t4sM^muuKHvoX|Hv?d*&>Rg=6i1d8IW02rN>paVh&ryh8!~VFayBUC!=QKn=n!C$ z7nXe5!m!l;p*+A=eMieLiQ2mAh)!j2j9h%&hyhiME9Y-#Bj|a%6+}kThaNt!dG~_< zlRA|_1YlS;iOnh%SAd31ypcqg7An^xhX%Rky1_smu8g2x+CI!O?i@`eiUEMJg#O$q z^FL{u|FmrNt*J{OSMBz6fGP`r7Q)?do;!)<{~nZ&HP%OW9A8>IEr>UZW~!lvQ}Y;) zA#*qu5!HqU#IMM8yl&?}+e}xG`*#(n;kmKkp&*_T3qhpyuo#sR60-ln0up7O!|AjS zZ5MdRV<$W_O3$z{tV!xO&b0b)0&WoIiC0J$=_xj%qol0}F!rGI59=p+y#5-+Lu?F0 zkD`JE+(dC||JqY-Uv(jVx{8tM@R4+C0XySrk87~gKEA-QH5l8s^kLNnitGivMF=+R z#jiONF*T4?os)4Qgc}14Nm6(X@lqlgavHG687nzwnGbfOaivJ(#S*xu2>`SLylg}_ zRKBif4)t?3gaqqD)#=Ca$(+~gWEv?OVs?XWFu3jK$uZCrRvTpgL-^Ei)8bF#mz>O~c z6&6fhnv;5oSi2@UJxq1iQJ)bQz1yCvWeh9T_*@;mV4nEiJ1)@(JsUA3YnduKeM6_^ z=WwN~4CiDtTbaqBzRs5AwN8SxMo|u3a`&w+`cwct?-W78o*;r`VSao+$9D!DWPJf-U2RiM2 z5)VhSlPcCa#($3+UznT?(HJ_(WW2BYT+i1HJ9nJ2u}L%61|Iixwb60Cefq zkvjNxzVZ%vS+l?WE~R@Ep9-A5%xo1dD_-S*-8kMMUPc8n(p;MaD7o}md!F>2Jg?d5 zI0}Rw@Z{A?uxF}MYa6wJZNwq&N0Yct`gsk9rQSgrij%Jl;L5ZsOg;Bc8pcSM7(eTC z97q4>!Z9xr`-c8z68g14Id&N|pfHn5l^@B@gslaj__6L6S*c`YkL(Xk2y}{<>f_2S zez<$939t*Rwj8*%Gx6lP=)4y z%33FeHsDB{+ScQ6NKg$34}5qERMqofxN1_LHQ{i2@2N^p2-j zyCPiE?9x24i-%rAS8Imu9+{utC4+})e?u(+gv;&NRPBvoy7J4Q$__>1LgZxg2|W3~ z(0F*iDV$;TFtbR>WrtKSGoWog6eG=WKh!y7oefO2V?j}$vfYY-an!# z!>P$4t2$OJpKH+B-NIopdq~anL6QP8US2xfsh*TjVrHl};(KHYWCPYIn2d7;Q zJ=VNrFON5hBRgkfL?+S?Q&0ITM`b*&%hC7q$TbQYcU6&(cqd}F5$+J6OF4^yG=A9y zP+s|usLUTCTtgHyv1zr4z!)&QzD4N5`?*S2{o5XDClm(h)6KW&!-LI(3G2J?JzgX!uS5aE!o3yNM%* zGzpI&Zj`Wo^{&BIu$OJm!%X#PsFUMEGLR-V&C=Ikq1;Dj5Z+y~L&ST$DlX)b@&Lqm z(K8hQB0Ch+I=;*iE3&((F)@<=A)7Vbj|9C4s?s+~FhUx-5>NoLi&D@-2EV0)ha)AI zN-|6PtX5A%c?JGg0LM23%rWSa!-2SVE%Pc=Y#P1<($f#Fe$p$z$kdW}U_sGmB%0eB zaC#s?(d;Xae0bpm#n%D1b@5s`>Ds3*N1OF$5tyOku^uqC)2EK99rt5s3o5^w)6oAx zNd8sc^oF1H@PGhWdWA^Mv%&hwBK-UvTFJY5ft6fCN}Jg|_gIIrLUZbdY$@|+&6Ph$ zLJd_QEIJp?Oxat_-}K>dKs32q%Z;J2Q{-^thx^j#qmW? z#{=}^s23^FQz(PwrK);1kst3r@Sc_@d;(u~$ecxX`0H=DeL% znn)xwqwtqb%dCaNYn{)Q{g!^iEfqGXV= zt`&<0Fz|G2tOF2JsjD`GG9PCf?lc)^-w)F8mGg_!bQbJ{3-YJM8toE1(QxM3bCxa&rKb;FwB?|qS8VAZ)t^R0xm2I3BfSEgPNLsNIkj}VFXSSOV1Zsm?) zr<-XikNObM4qs-Am$N7tTC~m&9nj9^{mra3F?JDsPj<%vf5osAlbuGhMrJ}SbUoK? zB3ya>+lzjijg=cOu6-Szc6w74r!_DIXaws3PlWQk63a*bhsD*6-^N!HF>{T6@X-5x z08H^@;5~yjAWk?aY9VE};#~9q$*AmlQ@h67skSF5mpUgJmLpJ__nu$8L{B098(wh4 zK#z2XX5s(clloJPd09Q#__4tLm1?y^mj*fU>vP{PXGiDNswsl-Myl_1u`s1ldZj(Q z)!6%u;`NgrmZfRh(v9uBe+?M3_4_C~iT0pr02Az)@dvb@xu@xwJ!gRwlq?@{y%BCu zW$sNhDk)DHxNJ$x++N1byf>=_wLLvOb}ML*@8;K<^gsp;cKHcwT%j1jD+wV)TXCy% zz)9Uign{Xz2*Pa8y18Obqtx%uW(79YbV(wN(@G8RFf`lw0MAfBdNZgb2Gk)N1DeW_ z@~w+hYOk8De_10qTRoTz`rk9EmVWTXPlVozK3C827Ti&O)H(@KY#U3fn|t+*Og2xM zHe1Pll@AM6py>VSWlbH1Q-G-)Ho@J?U>(=S_x-)>*6<02*_Zq;j9~|KAC*Py`6lO- zzDmm~Ng9qK594yCbBHaaRkD_LuZA+rqqoduTjD?`AS`+sU=@GMMJg=@t_@#jU^hKA zxquM=GtS>o%sndRhB$`G&s1<8IC3Md_RL{y&{nFJetqEvxz{f!K3|(SpIaWub~Q)d z>k7bF2!nsg5kr^NsGa5ci-0jwCO7kEjpP>Ac_(&)HoW0v&t?xUIMsAY`ph>0#GwL~9J5wlryk2k#4gOjQW1mBvg&Dtrx>n{=ZB1>B$F#?i!+@? zy}j(*86awkK4HBS-Ib^QZz>BS^%GytE$}-lY&CiQ)FjD&T%3PSmd8-H|2SU_wk#HU0{3%8S`NvUMlf3uOv`Sv27`IVr?thGeo~4=f3hLVdK| zd)mI4je-qtB=J+Cyo|FDuI(sLJo*gZhcglIzoWP%jCilDT75Yah;mZnTL7((_D1{q z<>n(Gf|uJ;KlpI?UR~<z%1VO_bzKz)3g2&HN3v2GEsYzV`A^ zt#ee+DpZSkV!--T;65Ly7=0sFP_3R?3&*<{&WJ&Z2!O1ggviT(k5#2>j()UhkdiZJ z&~~WYwezIB7#^b{6yF?B-N`AsPJ9}5i**G(u6|u#kJq8>K`I?6v1MG{5EEIe%>AB+ zV9ps0{IwCIhM0aBP0<_Ng|yyjE!5ODAX-{T3cuZlYfCKW%CM)b5*sv?+nPwrkE2HUw zjLZM1k*23HC3wWJ;hcuoE5bzCZFsE;%PO7z^kXq_tW@5t&aU`fs}Al9jAd?Y8|P%F+j*CrE8DkC|EDIr z?UmB3VD5&|PTqiWbFDHlxRql!USr2|&l-EP&|_0Eb;mYq4AhAIfg86WQq#Jf$s#mq zFuebko-NSLOwoan9w+f7=_>;9&L3U*J7Rk`%BmF*_pIWAi#rjC!{K@NEn!Hqvxw8? zoDigyr@kHi98;b&Eh5mL5WZ_(U70uZ#qe6pCiM=bkji0`$XB!|r!ObP)c@Jdzv+}2 zDU4qc4S_OOg377XQf;DhOOvh_D93ziZy@>LC|#1#Jzz{q@Ky~kv;Wyd1+DoC$sI_8 z&HsmM5qnAE`?%Xzug{mZ8K7mt`NLYx??zfl>Rt45BQ-lC%vb*U&f@p$U!FxrkcUR zfd|KFH6&Y?74aa#VZ`e;L zfAAbQjW;+8)iJ#o2RpiRYwFC1$Co^QMb2^-RX}Nh7OjdiRb}qYg(MVVbDk_m=xlDh zCN9!e#)AiJ83vR#9+Ukw{JspP252)~?WL;7|V9uq9juWu@`G?DksMPa!O!lh8<@BOt zl!)#5F@kAJI>Ll|Kaek;Kdz*MSZTjw&C5rKqZYrx1B#EQ;?}T-1gw^ws`$7#I>}H1 zm!lDD`T|;O$9g%Wq31M@D2MBecPUD>bp0v$dH+v^(9aun_jJ=NB4#Gzla_>QBdlmM zbHQ*tgVmBoqq?pk%X&l|k}=ll#Y^#gSjWV?kKXIRS3CFhyRGr>RQXaonf@4jSEfl1 ztq{X5*Zj;U!UM1z2qttX4!z{9SBGLS?x=|?vhN~to2kI^e1pPTvIw;V1ZYHOpxmmq zT=rF#qTPX_j{F#d0d{c0jFFJ{AvKbcf?Yv9v!kWo4SUUz(+RyA<|{cz*bEE*7ga zsjD=NH~1cpgRLxmTRvhln_v|JG=j8OB?(@i=OcJ&?<6{nPsE}=%Mq%JQ#;P*(rk^GL2|G&g|Ova|GD2gzQ8@()Kvw!n^vF2A^l;^oN9H&J94;)JjLZ8`HAi2jSEZ6! z9-wiQgcB`sh)J@N00A#`+L_Q+?J6?@bAH%CY!qMDo{d!Mw354srRBuICsu8ca<`QT z7MGGgq$Z!AJ#wko^s1CGKb3GaQhc#93Azimz(Dxg#jxic%&$6d$1Pan0SW}r7G#w3 zvJi;iAr0W$(2*8Jw;?@|X}SyKQyfCjmbkZgqt1EQKBH0DJNJt;p9P#Oel}syJwD`~ z#;i?M)3$NN+GU_=Q;s*eE^o9=*2h%HlgpWLZoT#4p|CO9BruQ-nS>ZUR7Tq^IB;ni zbvl{vBC^HJxLJHVZn=*{JE5+$=cCV`4kLTz?88l0-g-bQ;ZH5;4ozqOu1{|4PU*K# zddmf*nD-d<9){&8DvCe(@AQ83Ykl%z+~~cY9D8LBTA-;rY)BRbH2z}qVRBD!u5D{+ zc_framA>0XJoexIT(3D33wgrTc0W8Dt#M7zMq#b^Ryt%?019z;e-K}WReV#RIGC$s z?shM_qd5(6pbBG7gYgBzgFK}wKbzm|V4W?@^~-5?pR*lhOqO~Ko%~euBT(mXB!d*E zOa^c$fQVsqRFyJY7kMheVw0TvlYYIOA-&U}Y=%6?zoM8%2N=oUy|DK35VqK9U`Jb; z3tKauvvqvja!{(U2J}BgD@6S!fhuJk0PUm1MG&(%7PMIc3Q&m(??IQ0BDXk^T)!S@ zak@x{Ey@w*Lh+)|KzZhR)2Z4MFie4Ov79iCaC6ir+NL8vh(lua5^l}}Mw0l4>A3!* z3Rm*8QVq9sg5Tq0Fvx~Fqy6?#-Yz7)=LER5?5!AlPZwsmKh$H!{Q(cM?^K^Hrhn6@K7(F+^$9%fQ8U%f9nD8Gn`Z-GB_`vbu@`#6Jp&9FlvWvC>16t4&?u1TI2l#xRW%sAM1GpEB z;$l%-u@IDri$J;5I1Vh!R4180ud}3z1i7Xx>jbwdIQ>6k=Tm>1F(~qo#;ag?4Z2LN z%>#CTNWLe~>HeXihCWnO=ul&GkptCrrU^SAAmzr*@;AWn!0V%4jd1wLpnJT)?vRZi z_=0x@c|NbwEIO7nH9`V_w|ux0BxPq{g7Os)i1C^ssdw*U>cb4SxY-3@43O^;!N$ zf_ZLsRjz~ zOcS^EV!*$^KoMUPn4}dSFqFyscz9LBF&fh@S4X`tjR!k50x&&L%`BHKL%TH7;PHs| z_mIV8-_8IM{3lMPqY-HkD&#}+lw=4drLAs=U11+ajSV}>WdsHoPi(;>L!o5OYlHsS zOcp?}myzfGqXkmQoB*>^DgA1rafuMgJtA`Z8?}nJyNu;NBgXb)9hWAZ6I3<|#ad&2 z1pjqFjl>WmRdpP)4Co>e<0=x7U~C^0hejTfRF8G3 zuOxb1Fdk9;dH^s5gi%SQLc;n9FVzd;+;bcE!R~3a7CV_JfyHHZp~-J{#{|#G@D=?{ z_6DcJ&U9BMm6pmU-C_~A&6~t>pD{k=9 zs67-bX*2=#jW=2muZCHbwu*`7P+cuX_99gy3J9iD~m4JhW39 zu9tbL=LTs+i7APHAjextT%0l!LG}B~Va?H08W@3D$XF`%(*jpFUKUQ(M7WlJw=YSe z^Q!kBeCM?vlcOzl?T2Hi{c)RYUAW!p*s!{{O={6-l$ae#+2FarxETDmBMku-V$UIUYbuaKLK`wgB<~b4#W`6kulfO$*CGKm|`)JYS z@c;LqvnZqRq*Jfg5l2VKR~8%NIt?aQIZB5xz4UyXt;Bs?xY0+>3(X5W&G8FSgoDT$ zEYH$_75i(xn!F)EzE?#B9r~c=6&dp{eDYd1EFGSs^G(!&3(Wv^)bK5wj~(jn;S)yO zi+0#Iw0*Kq!^I+5vWdVTG2@a;T#yyOg<9oQpE!$bmJL`{aJ%;d52NAr2b~rkjyXcW z9vV)$MevK9aKGn7Xxi_788}OeZQHS=Zi!DO_a2r#Bj3O+)2ZHDkI*Pbgz{{kig-3B zwysc+cEW#1-$_iy2Wc?E!PozVj-U8Pq2;u?6df42?fveGBsNpxo+7)%c$X=pLHxiU zsw4=b^0&+N=5wgoAZ-rMj!ZT8Mltvo3<_07EoTKj(kklk+LnBhxmM8vpR9~C?)D1e zr3^uQ*7|lLqKiH|smc`JW=g{aG|bhLrDM>ddYA8j)b$o&R253fh`&bUJV$h} z*}`^QmM5|}vsq$lUut*EaRsbZ9BF8XE@K?L3?izr7DrBJxwqY%I;IG4x;j|w!>2-I z!|Zf?RN~k5VhIKAg-g8yXTs~l#vZGmLLOP-l&U$==u&Ew06hoj79EZ=)|Ef(1Z3G9 zR2J-}MX%TKV{!f+snHCy^dIzv2+1hwWQkk?}IM_9tRB^#(SQl34#bn_5gj*6Ld zcdX!lety6_BTys>ASA*5A3#!D|Ec}{$5xX`LIjN?)Q@)FdZBSB=OMR#hoK24L0B(# zMluF;5-ill`VWG}fk6829xl^zvi#aKDTDR(TM0v5P_g!W&l8Ft9omk$SRZ1y*s~sK z>E!BX@SsDe=|3RsH&k&Va#={hiH`81L>6jq-L)zGi{`D~chZ-G0*C!5cMDQhIcuK0{T_;MKbuLF0;6NmgeK)FSnyRY`C+hFhevTK3nMi1ff>W(j z?%{I25i?OQM}1Z8gU8etq7w*`G=1<-25`ou`_&biLn`O~MTC!EbV4xFskpLV(5H7W z$-Krr;L|}=tyUZT6$N=A1ZqUMf2ISKMFvAwnI8`_R0L;&x{+y;F9&=rU0RZBtzI(F zukZ)|nc%W{65%KJ3!@<4$vz~9Mq89~RmI;~tV02Jk(tHDuYY5tV3WdT3p)EknpKyo zU|Ef4V{Ju(tWs-woMY8+VHLa{aI2nQY>tK|d3;LyDn_%3mL0)=+^JCQv*an(jw^!j zib5Zr*L`r=a!xm^1e(0|6xS%r>=(P(m0C^Mz>V)Vi&7~w-@w||N^VzpP?RsjK~9&H z@xOJE&tROaZ0Wlb;d0rHO(ro*Taqy)miaSD(7|#DIu#*LBf&gZUGD7T^Q!V)CvSa9 zLUbCzSXe0iQ$!XWg$sr!Ul^a>NmzN%$s*ueX!!eeU9CVn9CW+8^cltHNWSr8hsduy zpq1`fZ0nPh>Ps#7A;N)=dgs&XpZVz1nGvK>e4ymfuvfx%9M0C!p2tXw!p5@Ot~oa? zK^QbA9BRPKGIq>)oZTt~m@dr0ZIaY$R7X^=NyGijPqye10vvp;L8T}gCJv7Uok_Rp z0>qA)d%^~57o9GrRPcnbUf{BU?CUGpFJW}(46P&gXf!o zlUypB!)OmMKgoI_#oeaW>|EKTk4b;=NcvUhC&EFM+4=sF!m~_44q|mCg}6YXrwl)F zhy!C-aQ;Arbg{6r&z!BYwG4Kd#>#&YENZ%J+)p9MS}M$h7ytt`n#t!B>cII$^VJ0< zBz^qV(F-X#d*Pyy*$ULdd|1{BBTvp?y12rzx>u z^v^OEfj4P*;7TOaS-eR7&2Y?d&jM@n3h?)f^IMin+sx42-JD!GP)5u3t_L?<&d^vC z{2%}#)W9Jpg@L-av}2BX!C*!bmxDKGXu#CIM-rn&#|h=Mqk?LsMW}n3P1K+45q*(H z#|JX}9ci)n@4ZJxHdxQQyJ|3~!hPAnay+#lWmAKxN+2i?-M(quXz2H6W2)4oX7Cu5T6gM);>0ImY3*0)dz*w3e-r#kxpb)g33AfXwwJHjRN*Xx zUl2)ZwqKz(1Z6bjlbq3bb4$UL23~=^Ec9|Pk=JPJ;(5Bi(5Js@HLr`j!jwz-zgZi; ztIiyu>1huv09s!d5296rA%lSqqttS~UBh&zzbeu1?~}9XRLw-#qa=kLgPRBDPh@hdM`|`V3tzed1inTzD875BgKZEfHT8`n&lbD4wQt3TALB9SOGrfy(>!N;l) zBP;}@nN>ovTDM7GEp4XSj4)a&50>PTWxjLpWP7d9WF$mU?7kRVoT5un14 zG^4wdor>?0E)|WRDEe?4W5O4sf@1!0BkjmTLAEV2oJTAg!!HNuu#rHnOc)p^~7mFuS5$2lB(sQGQpv zbh1w5K#!(H9BhBGQV>xMb1z>=40}O-@gQMT?fCXRJ_4777i08ENmR*(nmp<+s^W}l ze;~174R5CWzMaJ`yK#`_taIIt{I2d20bih1kW&C~J;8S2YscknM(D)%&tcKYn)g0K zS2dYAk@l0aO7I^r17jNlaL|XNrXRUUWzD!f1JhS*cUsGV7-AR%c9j9jw+dbOX;}C! zi|;sEdj&z9_IsGDWv5G*f{u8G41@Fm*#$Fhr^bOl$ft$`N{i;!`|`ACi}(QwL#R6?>V!$V+G7n(?4QuBS1=TOe!Ki0^7~{R z_}kc%Zd!Skdrq{e8i1ebxjXUtDW`5t67{<77DiNCIloV99`|e~Mx1R&g;qXDOQ3rl zMAV|V11=S=+yKVj#H_wzCdOOI^z8P)0S?#X7L;<8;@%5Vir%|uyD@Y`qP~2{cM=9g zTYbM@6(tmY0qZqspC9L*j07+1na zqk>4v_kdZqlIHRB^oZe$((mL_N=!I3!bg-Sz}*BfD6d2dRS-fY|F*QL=}-1AyWZ4Z z;HFZ{>141SMsa#k~@7y zt%cD$%l^`k+Sb6bTV8J?I-~1FGcF%p=W@Cf*G_7VFL!)T&}gM__m9MekVs#P z^r-R1_XK|Eps6)DAXnlI3weV?DF-E^kcY=*scbk*eS^koJ57Y?CN<@hBW{g;Y&@7u-=X$el1*^m- znX->C9uf1o{5TtEG}d7(#on;<(0e1d6jF=ZZTCWb)0Q@XF5_zYai+=}8azJ9+qJZR zAerd)SKKnAAVUxWeAw?Wy&qHLKUJ%qying`%ET1(;-15bw14<3{}-vzD(<2h?S2j` zB@c=u_{Tb5KPBGZ;c|}bMB`I!CUwOPSt&0zGS(zojDI(m0_IKy`PjGU11oXSyB>#3 z4P!7Y`j&Al2BZ;HRyajK9T@JKw`J#PO|?qg|7_H zKLXcKl^KMy^rgXTw(lxEOHVQGxiR1C55Mul_H6?nL{gY>1CF|PCy8tw)Sa6M=4kbc zLq{cyh{P#-Y61f9kQh%d08en%QB|jb$h0Q1{!Ma|#Q5M!BH@~qzr!3tpj}~BJ{c`N z@`2wWXP#Ag+f~@ljJR4wV^`t)w>N`TaU{fb1|n0~Kd0+ED^t z7Zwbo-mZu8C8jh)qpmI#z4|aEwL_FEA4%PHqC=Q10*V91)PggDR=KoN ze1yyzM0Zty5HUJaJcz-SnxD0)be`B37c4wuxW!V3Rm94+F1NzLHjty4BWejwvih%k zNbDD&P7oNXG)y*H8!91;er?T>x4kvkm}geuOMy*^%^S+Z{2ZxtfD}_HVM=z{OHYrL zzg8Vg`!IX0`st0Z$)H)SHC$b6TR?!OQNZOm5DOTs=ouxku2u$AX@g%8+{FJVC-%6Kbzm6sG24tVI_vF## zgVdb548lOT%9a-BHKx^J#JX(ZBc>dq2TWe3hYc8!=Gx6DL`MaqjVdGkZpq$Wq1mg$ z*S}^&2S*T+V_x|=o@W7xG~ zMZAhsU4|nYOZ#F;0DE{La{Ub1)Yls8x{t#U%q{OEj50Ndzk=A?reHMtDq|hZeZZ&u zWSt=ef{0y)QCx5Lr$Hprt|LAaGG7C1d4p?W?D~UPAnB}!{NUJG1CY|dX?bu=`sq`tb?aI!uvXkSBQbP_mw4XAw6A*2 z3b&38)N!`Jlp0G=eO6DJ$Ya-3`_Ug=Hc&LSy6=@qIM}x@G6}45AIe;x+IO*Q2QUvo zDV%~@+Su`2zaaXzfa8Q>;mCV?TQ*r#sZx2BC)`4Nt>qHxioiG+YVFo~2ofV$b^cjc z^OsmUK)ums3~VEwf%FK_2v%j=OMlloV5`c>huhgW@0i1NXr_*`Cwxw$r6fkD{o)no zr?a$wA^GZ^p|vW;W@x%W?Z`#Ly_tIzUxTPOZXa4W=fO5|#o!T3w}IxB+%iRfx0;=< z`yt7fqeUk%>aEq=5@RHQp<9uy;M7T>n`Z3&GwRODVNRANuy0|vjnn#H+4Z%GcgHcV z`Zkqp#Q#M0!F<4vA7z~NN}^TixOjrAem5^r>A0!k z(N&F)V5GsL)5$Cyaw9NhINFU7T_!xee%0sw+jXFL8lXDJ3BIhR7WY^RU5J_V(dNc1 z@jVCrga7~l0007pK|(;$*2PO|8KYV;81+Drs`j4bs?7Y!FW>~yUNHBKeh)++v5Irq z%C<-vJsESoX9aa@a{W`o{DZ|W(pCjab|yZK&W3UJN3TWZjx64FCsK%5SV)t6 zA?*R2EA)wJfY2}|O?2xD?q9AKm^13_n%lUonX>?7t)C4PGK2A!36imkojyWogQ2_n zBO4HE4ACi_0x}+@*-HgyfYF-4GC1bC$X-j`9A<7Uc)sp0)(oIUh8)AA>&IEmTaKVx zx`xJDPeP*L000H%ww!PPl>iKc$R|}Kt)R+q9r-i@f5NnvxfL0Tzf0V@{#c3G0%XuH z4;fy)KvKNx@v)H0h($1?Qv;ft9J`yu%DKAOMChM93;8hkY3gpAulCwvP(m$VPcQ14 z^p`%fOr-q855$MHRvt^zmff&jg)?jX~IPrauXbPEB9il8x`6^QDz^wVXdC#(|k$ zG@Tf;0Cngf?(*90&*5+n$0}wa+Y^af{y~{A!{kyOBTy#znL!}^t~mKUIc{qC>o>pO zFT^Ka`E~;H-`gk3@zv3=9Vo?Re((KnPEt*S#T4|ph$QHhW=-3lh*x!}A_V6N+%3A_coSwZVztj&W@|wPoNa~bl%sls*5?yQ=n>6ZWmosW5Vq_*u0f9vQ?840gN{)UEQ_ z_se*NnzB|95)MwQdQnn8kc4Ec053>9Zi#81EPu4jlqa@hrTg3dA{+tRjhwQqNF)0- zDT6rkTvE`W69+o5VyzhAyruQT%{v(0VhT=}3yA0j>AhD+8Aj%zX-U4J;@;|-6hBq`w>T|Yic<5Eqr z4)hlp-~rOUgJ@nZU5VU z)^;5DfLqVy?3wKYwzgq~(ww;O^x<=6$W5T-@UP5lQaCE^Hv$V;AVi7@`ixy8)pMQ6 z0}i8%pJ$|(|GKn&g)Uix>LDK*h?4i_n77*)+9|#@sLi0JRC(8bm2YG%(l;&zF5bqF z0$yPtk*PUnQ_D{a0^!4Z6&DSrb3i(3j$p7@Mmh`Y027IEQLIXSA)C?sB~SQ(Is)57 zes|V1i5YY7Irvd=DDmvOlXh~@IEDaairi+liZ$ueiC!BwzGXX-K(iu<)6Fyj808^a z^Zsy+)i5x?7~ZaoEHuy1KjRR6-VH=pWdW}I`K#sr|475B-BU#*Ae|(4=5H_+@bkSR zqd7__??(%1tiQ~+A)Y4^yw^^>O0?8bXrqg z7k&3ph)Q&0UrE*YNzv_>okr3%?mF=)$d159951>4B^@ItY_QmKr25JhU zGuX*dAnp(JnTL&)ueJ<)FJz1jrD9SVQ61^*seY;j2Ja81PA63f^siJTZn#V@k3qbhjqsYO$g|;=3X$eGam2C;$Ke0000004xz( A=l}o! literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/entitlementreviews/managereviewspage.webp b/static/images/auditor/10.8/access/reviews/entitlementreviews/managereviewspage.webp new file mode 100644 index 0000000000000000000000000000000000000000..ea2a17c3937e060ddbc651a83f159743dc024cf0 GIT binary patch literal 63946 zcmb5VbDU&Pn#NnUZQHidWpvrLjV{|&UF@=LqsunBY} z5ho(@jd-8)9zCWD;-tCFrFxPTQ0f=u=pQ29+hfn3+ z9#19Petm$!=S6_Jbr%5OHQt@seGW)@Z+o@=T$=ZL)ql```{)7G04zQNpOyeYPps?1 zmrtdPCxG*A7yfm>ZQoVDfoH*wnvda2#&`Sg`sakFfLAX*Km*|BQv9RgqZ?4;P;(@> z=l9{)1!%ev2Q)kt0L;f2pBdk~+X0VVgn}1-_kglXV8GsL!!sm6zRfqo&+&8gjsBy3 z4=~a#_qp`3^uG0Kf0mu}$$wX~CD{DA1qghBe|>wexf5XV!F;}YCOiau`xyTefAqQq ztoe-rmI1(b%8xa-Ij4f2f@80uH|j5d8^2D$O95d&`cKnO+Bf~H-*2gQU-<67+qEd% z``rmnd4as~-%mdZZus>A76FLIqwi183OD-ifI)BkSIj4cXTiO0(ykuAM1V5D{1fvj z>b(Z=`*QSa0xa#ZKI=c_ymimN0|Pie&j1SV!>z@sIRxDz z0D3^!`_UWY8e(nEVa{Ur0U!h*_on=(sVzc4w^Po~-*=bqOrMK>Cji5@PYzL2#StOt zm|nN}M(D3C&Tz7JP4pltwiWw)mP6a^R$5@C>zKAOLdm#+7iAVG1rEA@itS*Vi*kQg za$UXyZ+%Pq;bLIlrnYwtQx@Y+KJugC;V0V5Vbag8qkmMrdWQbm%CJE!X;Y33_2+gq zC4hz#d`)SF{LBCAAwMY7%!PU(g&5jWKrrJj7*Gy^7QxQdyEFWT99<+k!5ERS zG>bEfAu?=L+{Vm*TgOCfV}5rsT@5Z6M^^6g!!CwWL`*!g?eLN9)4&_jPdepzl`QmYw z(G=My_0K1;UraGG8c_n{~4)ug37CK{~%+qKgIi%6JwcS)4-X*aF3wMAX=qu7%1 zNNDy`4&*0-dRcUvJ+5%!z7!NQu3|Pzuv3{sPdX|ND_J1C!AHCynqSgaNJBD7K{1mOKAPw9E6omd3lMJ!1NM9TKgUT|aUoTg9|JkZh0 z+vH*je%4%? z1*#*h?5};$mCDZKYUjn}zyO?fzf0G}+}`{%xYIef8|3#Kqhw%6+jAsez=De#QLmQ$ z(QqQfZoRH-sR<~YSXJ^ju{cP~fL>;D7Yg^-YiB~&lxbb#cPQ_baN*!Zw#R9dl7tbe zWXeq!B*x`%j&_p%byAl7g%|6Z5xG9$bYprj*RmVkpzREojrV+_aaVH|>k7bf6|dmE z+}lWhjsdIVLXc^}Gez!qPd(OpEzb&%UQsiD2e)Q_o-IOM^iKHi%(VS{O*7*s-H&~^ zq{{%RCb_q>yAWH5wYL2!1wrdB_;GBmCysuZEUFQqS6$F#;XEaAR$^8INEif z(biS(VmN^g&+X5<(tFSMjgoyNbb9z_(fCZv`g0Ef?3g*gmgv`z#};!W*I!MPvA0T7 zyx;mb#>{*mKEVNiMU)T;TVy+RYS1K1kSk#%eC8bVo7|0pXY3NOgt65aY}AXlF(?&| z@j6hygXGW7Q(*7c!kHx%`=zAy3e<+xw1$kG+L<2p?T{NpH$Wh?@7Ws zXTS=<-AOu-ST_{fym=gYXg-Y*+=iP+VSbr=VHGbLt&m?iC*OJFGtz}N9vL65YPF>; zJZrytpRyUf@NIxOXGhU959T1RPWz>iI0lv!Ko2LIC725R&_&|vyX~JjY{5lvP3vJ= z@@&5oH=3VxBa6HWVjn^7$HV)mWct2Mpx~ZVB@~ObeRN?M90qjj)lp;x<}eH?Xbnfk z1(~>UK&$v4Z7TA5g>i-~a~03f#p$9)^tlc)W^bu*NFN9p(i5Di7*g*s;YfoDa4|XW#P+@0C*Lm47% zK&&MWUmF`+FSU#hBn+-0i}EW)DM7WgK#}RFSmoI$xZK)SRNXMpu$It^cLemh(vn#- zCsI`)qZkRSVZ`{a!i@BmXobd0htK-tl34Y=o4Q-8g-~MvH-*Aw=xnO`E1o>N#q{6b z)5^pQz@nHC1Rc5EkwSL3-9lx8CbHcPuyIobnd|vB*M3f=cWoE;B+=8Y(L&p43|(L= zfVeP^TJZ<(>y$Ka8I597`jp~nxp(n+Qd9fy1s#mZ3X*D1EdN8>=CMu|HN(Oxnpb}+Rr0xn{HuVt; zb-HnZk{tF<6LW?%xLUgwZ`ei&rte#y@ifrO^fO~lVZ%|*)7F}Z)DA>n5ZvQzx2+&s zor$*SQ_u2nvA^&)?1kJ}O)Pw(+n_0!933XT=R>*8J)XTa-i2K$@rgL-E8n|X1_RoF zA2iz*nJHnhe6pnGJHw4o{vpGly!!ck?IJu-`KEtkWJ85AM=#q69m@-I z4M{2tCcH~~=-eQ&{<#KmO964hkY^~E$5!FfCM>rLd&nz7(=1l(;AZ6$kS}Htspbjf zdFOshZUcI@svLny%5l(p_4_CyEa??n`+nVxRJ<4K;dPRD`elS#pLy2Ytu&bI4Os0OZXbo3FO7D?WL8p>e6Hy>*z${oH($PZ9(wif>Pwz%Jm>?^|t+@J2 zO|H}<;o#90ORFBg)bLPZ$hKBWnvQM6iEDV)3MHMuXw%X<PGs$zSRjC($ukBu5>6N&j_v~%!fN1`CoINw|6mU?VX{BFKE#lPDByRcah zk~AI5X=HKh=2gotdF9i&`-NdBD>7F*$!`ax7_=nm9zM~WL`;tO{nh)QbRG${^Rn^N zz%Z2k`IDuN-M|)xdlhgX5dcwB*(!5tldHV`hvM!@R@|}q8FUiJ(%jPh&E2ygMNWY( z_bE9Y+Q>M_r^=??OULy8%-*`j)VXAirMFITp6KSK`banoz2`V%lwy9Z5hE2 z%pc3Qn#cH>?!-jQh!kI7R<*UDc2Pq_i7v%Z=#UxX!*$j$(6cX6!04``RtxGuMvb286ag&&a3Ean4nl)gy)(SstS3S5hDg98d;Yu_RT!NI0lKH?1 z8AX~Y8)&H_2yhdH7%$Z_h&qHLIyi{f>jvYU9FB$EQ`c!?GQhx`$*s)AArzbL&QbLq zk)}#+Ly|)3N^t!|=7LGctD+3+b!0RIL2@_h9mSGL-w@9~tVwDDh0}shtR~lfHTvX| zJqHP^wV)^PeFJd^D|m~69#*MUgMfi#a>aPyCL@HSSIju~*_7X|_W{Y?+?7oX+uV_s znZ3)$^&Aur@jg-BKgM^Xp@u=E*_o!O0JaIOHLOGIHkA4!EFYE`f$zL4!dA+2Juv8I z>3=$bjwK&(_O3=cfsPj6-V(P5Yk>cJj+afFYBOB||MFp!ha+JeMz32rsRLpjLX~qd zOHvq2883ELs+&3)FMQ30Pr~>Z?0MujZ}vDL88v&=dEX2uAa@3F>4hvR3bjkihoz@( zRMq_vm*oT(sVz{4VJb!wfeu0!WdHs{+-fe6QYx4@EJJxQ8$afYYr0b1s)CMYEE2Ln zohmG5hJutzej;vf#y(%S?PIKWuvW+ZGWTDig zL9Dafh*b^|&B!MtOdf*ygW)85Ke)a(&fYDR^_S`|Vc=|V9_1HvmI!xOjn5S-4~m0N zO(|A<$r9c*8bgLJXi;9d;h*0m)Z|(sL7-=ou-1oK9UF23dO&`!f|Z-`2(4ncve=r4j=zMIq6IO&bO6C z(bWe-&KL-v2fy7gF%PRGUyzuLL$@O07sueI8wD8>3FbxhgOG12eg0f8o2C+MA9VMLOl-MrhHvSvf-0BqD3`$JyW3$OLQjX3xNC? zZ)cAyLhiFX@pYF_XTA% zgfw$dlxXTKAY$&#u*ZcZnt;%!^YkMHWzny#yhPIoHoS6@dPa7<`cS3 zcTqL)4o4jc!h0*h5AWlW9p3(k60y;tm#4pol=`F9tLq=en+toc^D)EIN|lUPGx@u3n*JV1x&7+|n7JCwTOtbT z(z>hE_V8{`O{gDH5Ob~SUp^}DXSqOgdITEzFAG==V8xz5cOJxF7UgL@&{YmB8!2E- zsUQkm3+C-*S=uEVd5gv0y116JGUwn@%M|Yp2q{< z1~O;xBPJSvTvynTRqihmZ>Y>`kOJ=0oc%r@SeUHpurPWD0HAA8?PsATMv7p!RhT2>p*@N#UP;Ub{FKL73T3KVXOzQ}8|25miAK zb{l^y_W!1$u}yHn|0gv4i?sehputS%oSa{`CI1O%jj82Iz&SYo9Sc>V;CE-D()@oR z)4z|z_joiP@m0iroNh^Sc&!Q&5Yx)nGxSBAwjbPak=^&VlKNk8-Cr2@zk2is%5Lp= z4nH?az-{(-G48PkISUIdkvl* zcqUOE@rT+G$W@5-n2S4*ByO%ZM92)RVs_337Z_Q>qhnMsK#a09gn*XPcwv58c!ZDN zA(I4+1E;~BLndbXmnr-^js9OS@dhR#7yjhWr}=0%4?M~>2_iNfFLZtAMsxq~KRCP5 z#lygt$YZ&uFNX5%&Q&$CcZbk)?f?)n4vpMl&T zMo{<{bsSU6bOrOb_#4ao+b;S~O#ENl`ipQ6DElO9M%au+!12Y0{@!@e0wv|R{=vro z7p(rzO?*iSpr)&SzP%I_8gqprFF;1Y=}q;C2smrQQ_A^!ps64K7hwIjT>WoB0sy8V z2-%Fy0BUQnatHG!Job374&401Xo$$=DQ5o$2L5m6|GRU<4=hp^a&T;kw@akBU&JQR zR6H{7g{A*Q*pL4oU7^ZM?Mxw`aQrGgJWb*X7zB7gScdQ2K`HO|06oCx$3jK^+q?MZN&Xin z0xJ?s#mDKy4$|tHRH+zK$wGj{fnjQdArR1@$mX5gTGZAprhcy701RfrBEVQkcV@c# zAGG>c@Znowg(I~s5q+OEE^1`ClqbPfLjSm~FLU6e7FZ53H|xr0kpoDgYk$bx4pkMv z2K*O>{wIENhT`lrVKn!j;*zqP(m{+vt+&2SvG39&iY2EmPS#)rx(O0$mo?Kbj8s-W z4jIDETf6H*k6*W$Q z4gstnI+k9r^%Oe^eE0-48mB@5>QR3!jmdyx%cr>8Z_t&zLy{?V6Xej;?BMAlVtRvy zCOFJV#7z}pMBIh>Amamq<55J_9BeBc+f7pNoL^uV?o(gC@otpfFmZFbWy z(vIIs@%L%-_hHrSuO0nwbh7t1()q_hbk_#2;irc|M!=1O#VwG%E*5g^OEo6?uqmoa zL%~`hlU-wGx`NeX6sDugD)08s+$BnLSz5{sp1}es9=^}f`E1B{t$VMVM^BK=?oQM% zgi#a3AfW|*b-IO4YVVQc61I+DXY=fvHlNb&YEJ-e>aQ&p&)b6tq*H2fzli=%TTRAF z6|y?551CGO*zhYy6k1pzA}}z5U%u%bD%v0GY+l|f2JQiE;hV(RUxdY%f>R&w%YTpS z-w)YB6{ctZ9IVt~Sbxar+_;Rdo^65yD0Zo)AM*F||FT`J8UwBPTCG^cslOcUTE6t506Ol#pTH9@GSrtF@TVwX1=y!7NRHz-;gmTpL9|eo=}PalK|O zbcE@!lvlEaMH7%W8ZXN&LaIG(EH^AdUonJy#q|u)cEjyg_RUa^lBn-9RIX)cpboUE ztNo&at}KAUqty+YNDjhT;+|yl+hzS*UgNk)k`g>0;sqK?_~t-;Tt#Qd;;9$XWBHfK z+InKsEI3`@@Ao=y`jy2r zXl6Cl8N3A2EowWDP!HJLEayaNZ~rGBx@nh|$+$UHZDOV<+)c8wHP zRD4SSGs0pDq%zzW{71G!RCizmh=t{2;EbgOY~CsDY*^?l^4GF?`&mL-i) zuEdl{^l{h6eR*Y`$pjfsC&B+|0{&JNQ7oX~R?pgdGck_uiaiRQ_>1O<&_0{LjW|Cv z5Jmv}&L0PlFqZDauuj^sj&Y`XaKBRckMNy%0Kc2Jzs?5w73$Y<{IIo`O6_Q z1VJA)bExC}jgl~5qqcvh{gZY5zleqZFvI@K=Kr5+g#UJ~Er31&MY%xsCt9hPRr~fp zzb{Bl>{U`vY04jqTYd&uLw>6lz@UxdvULnzk(j61-FDRCX)dJw)U>qW-4juQhu(iQ=E4R� zq?z3gaKbkMi{>osX5ye(9AmrA6tq1ra4~S1v`e*jsANHN@vboS$v+{RO)=-OV|i=! z4}CqsZCoet@;J)D{o!v0-XH+Sz`|JVM89X6 z$7|2mA*@}VOItXe(S>KF?k+hI{Z-OTX^oWB;TJ7YRo%KLe7F|o>3wR*jJwyg&di2l zfA@UVWx+?^g98`g2!ikas;~_8kCwfiB@)RTe79M@dod>-Dd%*{YiPZ%qFJ1tsMFjD zl-o1K&TBe{=B5WOG2+dXy)cNyUusa$p&k!?541T2?r`*dH2p8oKPde8hk(o|h)%57 zVWdC>B0p&FF!8I~#ji~wkP$Cey=lXeEHy`&lj7lxa2u&B1!URLe6S3gO4A^Gg{djB zpJ(O7H{XrT2;Rd23UDWm1#haQCZrg{;%HmzGpPe_WLMjDo|-0t-x^@_*seNJ6f#A|UK*?)`Q?1oM29zX2@!U@G0s(8aj zN2(&~4N#EkI4G&VdPbWeRadyjX2-$OLsW62T508X*!^{E&kAl zZ}M$vURJ{oD&w;F$@pQ*a#75pj((rWYx*mq=_C@^;V5?QF zZpK%ZgVzVCq5_|x!V??tSVaYKA9xv>XBxSsO%AFc#u&th@hAc#dmtnsyUHB()x{^o zBRURK3Jk3yug8CfFA@86+DiBIneh>n%Y;-Xy*^ppK?+%I$xg;f5 z!e(9q;Y&=2qI$|C5peY8+G+4DZo>-| z?6Zdvp$zD==u#BS6#hmuQX=IOalWq5!=BYV)T_K;VnsAEl|iauz|%P8MUuG04Nkjr zik?7OZJa)lu3T4(e@Wc4me$RX*?vaV#>TW|;A+8#QJTa$Tj)SB9AXwVF(+u)S)T~3bkJzJh@;MlX?Lsk04aynHe6h)K*O>#Kn1JGD z3i`%=F=^2r!0=ql-^jwoLPn1(crsa2`06KnCv?q)ZSEZ1QQnrLDQqEZO56uS) zUz@=eYl2e-9_36^dHk*de3hrMD$7MeaotOo9yMV|-`sr`e>~@-P$*>$r-hGP6jASP zAYGVdjCqG|@Ns+~vl1U@8V8MRD=~cE4WhQg)J;qJqJCaR3+>j~%C8W>rm_k0O&c)L zKLPf@Sp>eVlWcl;s^lHfm?6p>IhMrDbXk)ZR&+3rf8+0=ulbTaPb8qu3b(@DxuT&B z?P`sP@w4K~vS=9{`o{c$MRH}x@#fB2RnL(~4k2-7V1%s?Epen3^mM^o zW8!?~;B(TpOnH0`8`#i6n0!?)4CR~Vgr|-PBq1hQpvPlZ9l95U{^R1YgB|8rh_XJJ z_h&Y(kuuZ_GQtiWRh-C7(p#{JVjBDr*$|PclS0Js(qPi|ocbzr=9oHVv%emE$na z8L~|dx`nF0e!=M!Zlb=Sm-0{=CI=71t~ZHgX>|*SuFAukARfGQd9LI}b~2!h0GnQ} z3x^*|hB*+gtps)cICaZEODAUdQ93TO0gL$4)w$BnDj^;(vKJ*uhM^L*T~>9dMVXrT z12*54<-|ghySWOLOAFhG3Psj7m%^6LiLaV$0+*tRlv~3{1%R<))n#aLKfpA-{AvUO zeL;+scW)qN9BygiOTl4|Kg9A9RX1Lx*^w3%_KxGd8#J!(JJ!b|6O6|{A@QZt_(~RY z2b7e7vS!Fzu6>6oWk-WIOY8HRJ+L_ee)y792v^8uhKWzyDgjA8-T5rRLU=6mYt98; z&V3|{Ky?l-G<^BoZqh;Z9bVuFJ7uBQ=fjG2E8vV%0ixAjl)Nh&JI2AJ7UDY%6XkNyQQAe(L{`BEHMYT~2VP(Yg?g;qd^4LZerF#Dc73dPp zDqkKmf3cPB%RBi>ojr5RplW2oda@-MoB>yh!aA)I`9uF&)JA9lTPAk8e;sv49Zd~? zkLOIckS+oFCSU>90ta10wb=1X&q4CuREZTsTRs{_`wJCtXEeKMPqd#Z1C2aS5IZdJ zo;R<)hZ!d@$!RC)ntz4w@;7

-+z98m5TT4gxrC-0vJJmH3gb} zaS()!O#=G~l*pk5`wi==tHpFH;9+>DKpebPI4h4rgM(*{G?CBgG_7u)-|Rmen!v~S1b+U@*DfQy*#jDB<^{3(Pxlh#IA}T`%fKe6_MM$lj3(E-|LX| zpc#&CBOJkXcz04dD^uWBXYXyNmq7IX1Y8@%LHDEnsF?6^VDdvE&PZw7q(ke+Q=O?7 zU4*C})$mnwhGo-IK9>R_b&4u~&@Z0{jvYIY75s)#n6;;MCaY5qp_<+#FTb<`!*;x6 zohcD0T>aIbRQHnemu}^4OM@*34N^64=OuL#!usfxQJ|FP4Do}I_6mg0> zb2y)`<_tIGSH3mX;v_9JTYl}TugU?XUBgb!!8Xr-`J|fM?vs#%3*i=|(r|l+K~_+a z{SeJivL^75Dw@o;`&JtYul8_;FcA|cLt|F^)>bdMH^nYR9BqkU@gA!>zT~4de}xMf zxVI6^O9zfXpTU}MC$C(;MCgM(8jyQ~#%?#Xai47uhvl10=!AF>7DsbQuL`0{)vBqv zx3t1<%e$3zCe6X(ZGuI(!hb%m&iT|}Qy`(2ZGy!B6s(-;2Qkkaa)?P8afx&5i#}Ck zCPOY{Ltf))VD&Y?)eaPZ(_tD0Y$OK5l^JW8W?)x|W|?6i@*_b`m4+)DLsNk;n#vg_ zYVPwYk68UmsdRwRR)Nmfnj$Q$RtX`-vBrG)?t_^X;@e7q(GmJHtUpTpi?o^&cCR<# z+Dj3vWyq^Jy0W`SH*^?dCaftRW->!9Y~;9A(XyXYixF2hL9;Din?ALz82SZ2VGAcLA5k|R|5 zP7b;0u$EObwmJu0Xzy4v30ehCRG*LeGs*o8NG9JW)64o&K5&Bk*&n~wyh(G&cSy9R zDAQzH>`8aBgMxs(HL6xZe`5^0U>91nL__^E&DF9FZxqZU5xEM-+*!o(sDRQ&e@Q{NpW^4i1)Uy zB@!3D4x(i4@Fy_tk=%@y()#jqLX-(51Y0QqDn39%uFLfLACc6K0Fd>-zJS)#tY5^wEv=&SpW$<@^i-Hw0&cKg(Mot$$vwzhT0_AZmuN zg#{QTY2OZiVsGL2-17zoxgYm+hvGKJ=|#n(Oz438#drs-q%xTtSINgzw4Uzc%rD`M zl5DBj>^9-Gb7i?9yWiU!WAqbLi4W33oS&aZ59KVo|< z>Q4^zm$Ec@C3`TsifMjips0qgN1Rm3$z`O>nG#>nXK-Ju^oe0*Cbt7wTtH~WvfA^` zWnEBBcT(*-TlE?|Qi#M7ZEI;s$nEJ|9?YEe9_!Tm8?xxXhc%`f!F@*8l}$=w{z9J9^wZI_RpoTJjCBBDfA z@S#B+cr;F*peg%;G@0eq6%A+C#gmJ?qFcdniWspKiNMV|!P|YeOHLovsJu z64e>UWz3Slk(ufL4nCD;W z&OGfDnTV*&%ppz$(WYW`VXPxOs+AqZ2c3NSIezk`)f_UwuSJ0l6DVwq`#WFJndN<` z8u^IREiMUE(b_RZ<*N%LG491dO|WU^8Tm5&IUEoK5Q#r{ z8l?eTS!^E=q#AxLz5kg|D%~%d=GDDu?WCa3z30>#p=c}Z^n}O7PXp3DCsZ6{m4(BA z+?oaz{fE@O4Q0aMx(~nFdn74Ct9fP&4o2t!{yXZ`yp*W!mM{5k?fTP$ zYemSN%sAa!6H?{aR%`E{_>dWnb3h18+k`K(sl7>p#K!%a?W6Y+%CA0(h>K<$oajFE z`e@=&+vJR4FRwYOJU;=*WgDb-6b46yX!k%utluj*5eY%gDsD383e!!CF1oykc=h~2 zV-0L<@3dL`+$B!BkNl6&Lt?%9+qM0mBwiHFgI|e)KnF5FT9`=wjgM6YeA3RSA#7N^KSW(4Hs+!q(6%X(aA3k zi4L>fcPTAu7ZhH-t;~AnJQiN4&4aR!feO|f$acKALGDLQ);VKIyF;n`IT6z10)hn} zSM0G%Z@JEA7Bi>O3B}tRy_LwNZMGay84J9=$SH~cVs%O(GA<+^E&X^18QC#|klJQI z(3UT7y_7^yER=H?yfNcv>IjgA>(oY87I`P5u5n92*#igOms3>>R9F~ZZpz*kd}?Cs zIn1yD4*e!bu$Bc8l-om*JHuHMPcQh!ll3SFc}yqplZRVqwNLnEO$Php;&FJ z>Mf3C>maoGMHx}S^a-h3;SngE{rCyor1M$|n( z>bPhWNpIY$g;7w^j;_+rjgQ0pg$ zw@=h1IkQ@7I-L)d-*wGL7a^1?^ zhQ4Ju3V<0l$bea-MD+aqnLt1jjo~Tv@en5C^hR`0$g^2dsB5~3D0U}vu-vd&bMuT*BVP?E9_k2+W)sXIyktB^iifP_fjcPjo@xrnvKhYxoMCovt z*>A!jPkX)aSOA~k7kf7APoa=NlLyc~^u6sp6{DR=5Vy{kY#AW_h7$H+A1-oFj`+HT6ml$0_|QcR`?qQscpkNt6gVv^@Wv{y=12t&?W+R%L9Au)Vp>C+HdQ_S*xDf zi-&xdb7Pw=%tvn7Y7cF3yp6XlRTG{Y17zK>jdqkiOBB#rqd_~Pj`nTqHLbTSs&nK2~qWb70D9ow*@3Z_9yIaIrmH?>Hh6ghAdeni8SZFAYq3ulHM9)~{K~F-sy#H=DgiF+%Y2X5}z9d3oKFjsMi< z_(3YCGxz>8Stvi)0#`Vn7K=3)>41xHgB1;hCpdGa708rkAEycPA=Dx>iw~*_aK`hK zKOpBkiH&p!$BaU_(Zs z#4k&@hS?n=1&1gsq5c#qBYT~i9FX?Qh%dPYTLZ3AjPrib&pfF(NkseVSiQZuMj=LX%+%i4b`!FqUNIj8uNfU0#y>~b}fe*e%o0vLP~dDN6x_IX9C^}xp1D-bMQG{2y(I>F2@XN(#8ZdPvM z<$*LsMxHIMO{#A@&-C!@OH#RfnL#8>_Fky0GmnH0Iv7*Ac_r<>Ec*B}wP$US=`-Hc z*SCq(_^O=b8aU*84B^)OwApti`u>j!9Arr~Rk8{Rq|FggR9nsCM|K z^OhZvN)!jFCi%ga$_+jG(fuTg$VRjsz+Wrm~{_>oYQ){Cfu@foCK923x?SW-_D&uJqO9wFpd*gzjbAT|?LLdw3QJbVWTq`VkcSA}y=FVuFIM_9 zgw~Qw;$uSKVg+N_q7w*-kSI?+F|buAmZH=t5I-m4E070NENEUyHd^a1`LWdr#vuAx-oLpS+8 zDg8-#{27dwxS9A6HjY6U^Em_P_=$G6^`rtwuTIy!LGl=1-w=JyJH z(aA=>4M$viu}{dd!;aQ=LI`>I1q9tUNOJ%Eewgj0y-WO;;fmzTX|*pjFA=yKGO-@VBq&3(FW~Z*(SJC)@nM8RMgZErm+%<0a#>?(Z_vP${9|J#o3|O{lbDTzg z)x0z~zE*Xv3!^`Qm$>VckxL0s@6^pmmZQe+6;$ioZ%lY7IC7|eG_L3MOnDp`#`S3x zrM?eRA==`>K)rkchs4}a+Y>N=Jc>83XJa0 ztHWjA;IVt)!GHD`q-GSkM2-mO&{0{rx_?j3%$PP?v0%jF8^AwunM!qJAO#os1#GNJ z79C@-g%7tgW#nUOfv7{1ZMAkAid*{0!&40IL*`~M8h+2D{5^1uo%17Z^h*%)1O*Fn z$wtJl@qnzpJd#_^6e9;jTGRu)HG(ae+EwbG42*Tl8ZtY+cg1(I(T$NnE|l0mH+shz ztjBcbe?rvBqo8Tw4_??DN^>`aERk}4g93NM&e;jES3s!LN~8F;-_ZSBjz&xh@2YTX zG=0j<#i_meAio6-O%CKr#Tnimh_$m&e`8W(LZPc2i@nZYr9QoxQXG%GDOhv$D{qzIu1rhlawmDFWu6k8tCF9SCI-# zokv^HT5HAS2e^<3qr!{3dm9zYe}S1Q8R0* z&|~HG|F+8tl1zI-G)>`X@YPE`#)U29Wrqx1y)2`^ zNEoqIFEz`k{q(d`!iRUia!GkJHy4w4Z6?ttFq;;2O@3U9e_HHW!!HK8W@+0@r$Y#% zH}@Ccmf~DbHChSsa}lGp($s8PRlh500oRqi2k5bR{D_E5*sYEqB0ogPW)rvWK{s%@ z;uO02%a7k`>uB5?DCZHU6@h_aAf?2Ndqc@AWOvH1j4idx4x9^xQ}mZPc&;m;TI4@Z z!HH=n)`QI7hc7PYb0wR)RcN3byB}V6O};y}M9+UQI%!CI=Ad|`FOo$W95rV54#?Sn zMJVE&LC8}ird*Nz7GLLG;W<*5ogCTJhfgrDY%kVWE+fakhQPPB)NR2=4lj{|?Dsxi zP|CoA#p^Li9cm({!70Mt3RaRO%<1q$@(#xR1|$!9Url{co%yO0Sv{otAacMqK`VDY z_ZjKvCJ(IHznR<0Ns$mOjXDwdrk}%IKbx5K>)lV`D={B3V*0x%*#*Pxr_c(&i(@bX z3`Q*nn42k1N_nB1q&uKvkM`2*jY)+K`7m$&)KsAOw4HJs%GCEA;ff+#(Vw+y^&R9g z6AU!mTSt@Kz681~oO^t9$jVp(v|i7H6|^)McRiB~jBQGQeimioMVi z^B*+qJ<;tXBcVGJYI$kCG?r-TeY6iE>Q80Z(a23qN(PW$&ei%YC5PY0G28-MUwBEc zg*5m1+DN0hMhVl(7!p%@_+t>MQwYXpQGbJp?X=1ickc?%89z_piO~NCv9ZZ-hny;V3&3{>8zMm9gCA^)VD+B$1c%iGl=SS}~!^ z%_5kh>Ekp^gCCNM;ewpSKN6)jfq4(&y?+HC8~*ZQq1;#3^hwjkpB*nWKs_B~D~vq1 z-OP)|MG9|(4NLY>NFxdM;4FN5EmO#=qqAAiVY;S@{DGKLHdk7w}SmyB*eQf#~hp+}5k zkd4V~Xjq2ww|Cw?MF@I8>@0SGfKP-@>p~m~qcq^JRd8fh_ht^&FRz%*vIbh+5)*Hd z-fX1#{H*-Tu&&QYf3v^~jjx{HJ!!J@r7VC}Lr5Hm?we#mlsn0M%Zo88XHH;5$z4Jy z$O*7P5ZE>yhW~15o`$QALd~NZ0o|Cwk>Txo=D5>;PYIO0KGC>*aw6NFIX=Y(J5XdH zl*Q3xVvNh>YaDq!(r~3+sU22v3Vk47qN4V5tS&%lt!Cz_#M4G`XsT4wzAYDXO0dj3 z?=ksjlzXA|sKw0}%O996%y_c@K3XZTDQD%@t2%&m*$FkNONK0e3vB)lZ(Sb;xlp7w z%dx+enqU7Yia}ERXZ+i3B5+1hMY(2(p^jA}T(yIE8aC2R78|(*1Fupp?rgyh=Y_l)$%7u@59MdwQ9@Kt zcjpvblWi?m2eorc3`c(5-^A^z6VH8~Oj7T{i}Ee8eR3dh`tf_9WoJKYBt8|p$JJA%vmeJW zBc=kZ^;^_D4*7}oqrHXsCT1{#%&j3r9?w~vNEiM1gXlmy4QXb; zT^lTib{pk=0=tg4?9=iCH&l;03O-0{ybYJJLizqC7M9A{d;Ilo+SG)U0u@z9CQrmU?_FRb{nX%j{mM}L{8UWot88mw-VQZA?jc({l zh{uW})JXxSA@Cu~xZUgkbw?Zyp1N^R`t#7)-y*9U+trgD{nGJ2paJ!Q%Jdt5Uncn!({>7``Vc~_arMrBF!G{*@Wpb~vy;F>A6aNT{jC(0A zumJaN0%+FgqLd%!Dq&$j^=JQVvvUpdG`16!j9V)W#PPPVdCm!SqhVO$lx<*gg>s*c z>&gsKss0V2dW2mJdMgRDI_=EC4ESmhndAMdaWqR+%iFDSjQk{<#%aa#lU}#L=izLx z?GTP!iAiel({j?YgL2aoSA4j)&rR$R;F$eWTrU5?hZ?Vn@7O&T%4ws;AhpZ5`0jfr z4pfLAQjzchut`PUya!!On5!DwfgK*{vuYK@DT&!g)~mdqfB?g7|H+WZ2fi=d=DkMr zN}+40>z$x<-#EYgXR#HzM@e~J*Jpf+8N2>qc};@&c4YvS+%X)T<0zX6L}Cj2IUpyD zSNT%>DdT7Nn6GYt(G66I&$@(5aRq~{lK>hC1Nv6I402G;C>|^JT_(RX)j}nAbzhRD zaDVtpf0#JC=k*L5*}Z z;Ih!;W?l=VzDX-CI6Fw);Z2w(7mmVIn!Mk{{RiHh zD{%4;8d~LrO)Fw# z?7ng(da-eN`7Xq;NwaB$5KdG~Atzm6qO!Se%mJ{5?}=&2qm4;>MuEovv?uhhhwrsuwEgD+ zNv~Vh(VYrbFbl)7*K84=ZwG2 z%I=-b+j^#lnt&v}cT@f|r=GAw@`EMNm>0ZCCFJfMLoCjQzEd2?3m>@;57)TK6BL5% zA6tJZ!tbjKd~AfSw%Lmwb|mWHPJ(QC4X$+MJxajCp7I^_R#xOx(CDjE@PnVUWe55J zYbXk6vmbFsNbjsH+@KwZ-J0=3M|Up73qhWL=Q_RhWtX9iE<9kng=ZxJevguj z`6bf|&}q+bk+y$r2G&tfQp(ChKni!J@_$qQlYb& z5@bZzEl=B=eS6ABr*6nPV*tm`0SE8Rl-WUu>D8!CJI{`GPIzL1WmShw7*Cm0@@&X0poD+Yj!vR^Zvfw`lBi$LRX;St)?{4M95hL^Qz~(OvRgAY9p>}7+diLJm^lYf<4n)dT_6cDIHH9^8Y%}+#TT5bsO4Nd z`}6awJ<xSspyux7e!2A1#B_hD+o^&=a4zLpD1(8BG5g~Zuv zf9bwCoL*zb1mW+)-$@61xftC%IoqJ+rJ4=&fCLEIQ%MwMNg(bbk85wP#*L5yq@c9=;-qYQo$NXnQe zXl@wx@+Rt^PqLhZ;b+XXkHt*(w?|LS5spfD&Nc3;;jQwt6FheVPRu7P#l8vf_hkhG zIx+Fy+=&zXZgv(^()lM1kD5E`fD&ID%0OZ`3OuQvz&x`I{^Qz*W{R|I#%>HyB#T<( zNFM1h#V)w%L~?^zv_bJ&_R4Q>IE2i)egYZtZ~We7$?y%ZfrE^$5KxJy2mfBI=0ZP# z^ItfAPm6@>pNZc(nVPD^U;>uXEr~y8uVLcXYD(#FIpKN4lt@3|wyPyNna`iW4cgbg zA+zCTW3pI1v-;xmp%g!uYP(gB#U|-ideSS^l$exeTg`D8k3*FsPt|ZoTy2{Wbm?$n zeOER@7ap3US83r1HogBi6fq|SBUS$;@1}G@c{DSzdFWQIKD1x$B|*!w7 zHt{WnEmOnm=d=whf2Nx$SzZt4*rPZLxkAV*G}rIwhzq7SZOeHLtx;kRr-~FLH&H@(+u>K7y30kT@DE5IU6( zuV=qIVa1H^1Oq#r#d%>S)NqBZ*ikr(y>rb8h{(k9tMt&3xp=lESr8Jk6M}4quKBOG ztbsq?QH$7Hx00!F=rf|ief54F_w;@Cf}Dp6@$lo=LWWx!sHN;*+`oGTWt-F9P9(JP zBC<6mF|u%te57SF;m0!H?fi_#H6EMeS4nQu0l8#_il8;-lsrm`yM*D!h1RfBe7d$J zzpsWE8Md!{^)7CL`6>oyF=>1UD0<++{YJ~G`WWMzu5L?V8R=;$AoAM9;T0fZ6@bjy zYiB?;39Kcca7y0E-bHi!nE?a5_6ft&k05DSC37Gq+H-vPHGx-=&`1+rZw=Dbm~f!= zew^|)q%_qLqpcwQNmJ>8Dk+Gt{3X$sRjJ)MONwcgT4 z_m|qdwc@(6$S7q3g;#+_tSQ^ONVb$`6lKFnE)C~8i<7yjlNuyV|C?-er& z^vQ;*!Gv2bH8l9C2msW4+YEIflfsEr9fR*5aKO3{ho<%;YR3o3 zV0VQA#4I8$-ZQ^iTY5V)V}6uEWq1Y^C!w2+Jz}i(em$Q%SW|bzxXXBF1zh(nD2D7n zsZ!IsGS0Ppm`MDeLHEjZj=3!rGD!*xfg1j4iLqBpyjn+-SCKp= znvX5^k#=>D!wAKzh^P@b#FX?jJK(XVbG4+d^XGP7Aas^Sxc9PX4b;}aI<7|P#t1`a z5Zy>HJOq>fF%}!zDbDIY-D$CUEs|}NpU2gAOhLo8!PFw5tIFQj}!s|%vpyTvw*tA&L+3p!BMcIH)6)rHgnY9Qm7u1g{Z~kau@yEPk z(D8o(96VDY9J`R}-Z8M*;`3^g^BIvV^_NXg#!hCw;6w`h#&*kg?8w>MWQ)*MZFaVT zPB80LKX3D=ba$nISV? zGZzazm@Dgr$&y>^%Z1Ciax?mtWs~@Hnp6^{`w&%^%{~!qe%>x`W=Ilz=c%gwHUq;9 zKZ+rPG2>-6rCgW6_mFJ|M+s}8OgKa213B;7hQD$}IHflmd0F@}9Y~^?ps>eJyF?@k zCh3$Kf_rrwf4?ST5!=t5s~35h7+LF$!$tZA1V2M+C%+|1Gg7konO{WwJyhn08CCzJdy+;{uqKj?UNOa9_CH`BR0t>m7 zne2S2oBxQVXB^>)WL#7Mfd{U*KH=;JxbA843#^sNC{PxE7TpJu%yL zpUVTTcO-%BEwn9Qr1g(gR2k1Xo58q>0Fe^(;ttbT5N;Y``3brZCT4quXfkq>b8#6W%+Kz5^}1}FJj87GSlMa6mPdaE zhMf}FGuJP)CeJUY16%Yg_JMm<9kbPc6pySmcRu^R5<*_cU$2R?5M&9MNW(1mHWRRB zJJ3sTcmyV=Mcv2OL((*PVoG1T@~K^3BuR>r48q-xGQjQ4gR@GE8G5}aKWQk>bRH{U zp{||223ica@;v)oxRFve9sp3GON2A-gwG_t;UI3fm}DU0hfT?u7$u>5YBQJ6qJsY) ztp9%-z((~iS|-RNm&ExxA@YR++civ+ng>$&VwaqkZI}n{IJY1m&^y5jZ!~^57(RXa z6S9$c41$4ISD)kp*H#epL^C#@-YJqAH&1Fe_ZRT6NN^Zp{rAa zySl{)!V!`VI~Bv2DVOkxz7UJKH|uUwmNkvyj7+E#0W4YO;T!@`?mjHRwO_I*2~*S( z)bDAW^RgCtDLn+NMuH5>x#|Ua3v^7k2tKWa#wcb>FcTyXF^(|#ukDZ3Fose-R2e7K zOjq9ovO#E(z{mcB{^Xm`PD)IKMs~32>*gL4LpKhJkU{7vh*2(H*F`uI*&DBO@&6_$AH z%rxrEuf1g*VxodMGq8d*aQq;Qm)pS{KE?wR1PBGyV9p#>GSK!PDUC|bEwzC3;#KO) zY7yuuMJ-Ss9~z!oa?_(~ON-7Ma@f+o8vgexlvge<3Et7U)T@=#r$yYHK{TUa&cq>$ z9%Y<8m8^cfEhR{1LtEVsHI1f%Jj0u2FYPh^)4m<<_!h6`^E?o~&l&TSDT&G4vJSMe z)g%HiWoU9=#n}2Q~@}g1&swMeGTMDx}qj()M1n^N05PI?1vo^$Jfd@@2D4Lh@ z>*jeHc-6qs526SPI_jA4Rv=%=FRhS~blmf6O+ctsk4rnw9T|hlpdFbvs(%T&a8YOp z7TV&IxlRb89lD|fm>hMtkLGeOQV9;fxgCr!BXXX&P9gDcipBOL;U0kK3b7$OGJ*+c z?ISZ$a`v%$cv#*0BK73+PWkF-p2?cnR^C@P5~e(ZxqU{c<+S$y3V%M<#N2O~X}(y1?ikpb3H_QsJdsnq`F5aiN?C{ z?*%%&i(?Z3e+uVL>&==rAc@;wRGD5OF?AV>Z)oTB0rJoJ z-I44A{dDii6m_qmYYS9F2w8x}+I`Si`Tzog=={$w%#3`=X9EOJCP`;b{(}((3ytXn zagvf$46L#QD+#P%?PA{zcbxjI)7|CPG%QoS?#fBmJG&KCkTZkVD6nxtCYba8z4`=@ zcre_JztoD<%|Y)hKq?W!3(v*G$oyp6EW`3G`Q2D+)`M62gtoS9hO_DjpT=Y7%Q_eW z@>Oe%AFe9-l4<{|r#=$DSk*@Bm#fxiYLTja-jM$EICR_;T}QSNOA4KGn0vx5+FYSxl?MF@Ry*L{`@x%wZANcSz9kz;F0L2~UBtwBT~Y_LvBM;AJpF+5xZOC0@YxZ? zH0LV`ibnEA&V?(mcZG^B{?_v7S!8sZH{T!=VEHAtu4jHcZ~Y>HW|9SMS!{<7W=b*k z)lPcdQ#EPhuGmdTzUM0LjOy!;EBxQJ zn_Hy=jkrZ#NJ)18TJeNH;)1E!9sb8Snes*508**NE8KjW7?0h4KbzilX#B_C9hGDu zeuqsqky_P0h%UPdL~9Jro_GL@xLKcW42Gif_rC1)^Jo*%zTx=VAVkiSe;P{ClPIDL z350d{FR?)YgLBY-D}cAz%t?g7IGGKu*#n|yGo^h&#p1UKu>*rz>@DDmj-)`4m&r{e zm;-;~83!6Hra<47UB-ui2_Y2$;X0nRK$v~{Y*Eds_&wJmSEsbsETSxft+{suiHcdT z(Bd@+*g!m6GsdxJjJVmr;ahDr3-5$G9>Jg~On}v!j2cpk^FJtK1Gdqn?NIk)gj)bP z(b8PmkNn#+`QJT26z&{3Za~tR)WJ!Y36dCgzVd5ILQF1d#fNqlEU7u21(aQ8PHxTz zh?VAxGmWB4H3@%MH$p6`l;S4MH!OEdSf~wvJQsJJpwdTkB1!I82oKSD*gF~wy%Ny! zebX)&A>(8Yh_6?9R3%J_1=hg%9o>SBn2CCzvvY{ob9F5{56Z-?Y9W>%w7UB16S1u}`hU3Tm zF?{Aqf^md}pU-LNINsb}$;Re5_AZxVP%93%D#TjxRLt0bV}CJSGu`%~`B>ExXVHpU z5g$K?wubAPc-U6$O(9F^aO^2XTc)o2QbzL9A|~N^OqOEle4hT`*+e+0Wez~Q0A6#$E_3dyIjX76Mme(#|L3WWiKTMorRlZclJq{7B=(PP~|zk+SN3o#?7G>m?P zJNVTz;(Ch3gqSrki7vMQJx{e{%9tB}JioTqm*+QZHNP*ypYGHB+$ z4`vsC=#1E#F(q1e=U#4CNYG;M+)PM*PnSi;S8i>${~-b4(1s@l7;e*)S(z(om*BeK z0eI<8ah(s0d-HLSN7+R~gVw;MgzNz1M=MsgqTV>0pqQs#Hq?ZeUV_ml?uUz;=!0N| zgLO)n5Tb-oy<3+npG!b z==2caT> zJNJr;$&B{WQc(~O)1UUrE!%3AlyA)+1`GFDYTmvD{+ty&q&&l*kvBUJ|Zj)_wA z69?eoW`T`=GghOrJs{8JkZ7_aIx<3RRV>Ih3E0-cX!wYW%uf{VLnu7_rav|cZqKtQ zxxY+w{kxh)^QKs9$(w0x9qxR1OO$gU##MrtFuZQR6ZD+2#@XmCl0wSzFdp=85)o62 z7DV>aj9Y>|J%TJYgwH(nv~UK0x#KIP*&Pl5QvZ%p2bmM)8kkm1#eJXu%y?MPv0}ir z`>%HQOLUaV>vy16ImaQ(KheL3Pk#=>Wo{+YGe_$))rDp#2T!5mZnMvYhvM^aoKe@_ zU%kASkODSw3=mSnwV(-X0S-BzbA}fh-W?AW;_^;B+;e6V4+K zax8rsQH+g>H@)|#10=v%hvPvfT6@%h@EiRYH$1E1S)qDO+pxJaUt?xSWTO+q^BiOcdz7hwg$CafJ-6b_B!D+^$I8tQCPC7Wv$D6WO;m1N%U_08a4wR8*T!n^xyg)Ap?Y>*e#LxhlmE$_2(Ns>< zZ0d1LoyH9JdmUsWpS^XhxSZ}FaVifu$OpBh zdnLh?+8-780iN;kn@DMzedM}&PBd&$;tKrE9QRz5EJZV6CF}k7w&b3Hl(q9QZbTNB zYpGPH?}+p&3UR;@#sliu2z&`R`P2iKZ-Uog@{_ZX!B>-wz<7;Isv32|U_$*lchb|K z0Xq&*&6L!8bO1(0IEM~fy0p#N#3R&+S z!F0L0TKa>gM0jRz+b-2={a#)fNzeo|#1$GJTia()Dns#~8!II*R0RI=d3OP~mS9v#6zdAqK$ zYlOLZT8ipo_G@H>K{)3;aJe33y5Lw6|B)z=ieuE4>df+~%PXQsXtNCm{0GsmHxs@k zY=4$uf6jrA1%W`=w@B@lT6g`%ozKAOXogiIlGMX5PLD1__@aXSnHHML^At8tOM0$5 zi4T7MrcigflTl5{eS_dqyeeE5wH)ZZDFgu@m`&q+skAfR z#u{!IdlM6u1`%+NEjpS&5Y*1-aMM+%Sl0(7D*uwt_cSPa9CfGC{00^HkzLr&$}@K(;jHBN1CJ zrk|Ea`snjk7ameTg*5tionZz~rt7mzg&9W`*RH0(l7eHoxk(p%$&u4fn9VI=JL>iw zBmNb9s(jB`Uv*C82{ej&*tYuC8`e#JnC8%&sz1&qKTH#vZF~?S-B(Ov*a4_N=Sb9 z>W}+YkY(m(Vck`Jagm4kVvo5!w|Y7)Q=>IE|S3?ZEM7c$=4W=7E9i_DsmfFA~W;D;mQ~sZF*-%@E#n9$pEF%fAd_% z$);HpHd)w?!WY6`T|0fw7*ZfKTQ|)ezMAT5#F$Ui2_ARfYuEqxr#;w)YX?T12*!n( zAe1$1HJ0Dl%ee8ro1ohLk*Cn28Ila_t3t5_?xWchbJ!P57TCBwx}wJ4F_Xg07)m|fWwm->IoSs9Z%xZAA*T=Gt-U&7HA?5#_&2nyEe5Gu7)ongxZn*XMm)UO-6Rx3JfJn~%81MQ$#a zOgl+^)UC)*pnq5wKm#j9r%4L4MuVy}$s3dDV2Wj>jiTC!O@I(>5WGP^S+Y}5*hpAbwBMFK{ zUv)`Wx)5=qtMyrf4ASO}rs{go&%T_wr60KP<*%GGC6V?*#z(5#?(r?+;`)>e<#66h!b7|Sqjen@%CJ(dt7 zioBxvwX}2n`i|yA2cn&#r4zbV>Guk4Zv2stOz!m#rZGDGg8HYVmzf{6B+p}vj^XeH zxAi8}yO`?FlOc`rWDO2AGEXHOSLuu<#zCe2nrXdU0Kr`~I`f1S?F8L3@W~C{@B4p9 zYHMxX3JmtC8`d;PknD(Rv{qWw6t$c-bB$C(K$UnuIb#_cN2UHDJ!x5Hwp5B zf*hhg#F~#(?=zQ75uB+NfF)ROv7_XT6bmDZE%2qawVG%aQ##}?hp-l0%Pf|V3O`4T z8J9p&9om`>U)IWWP(*l-I%=aMC-or(Q}j4POmC9;lB-7fH?sWvtJC;ShG8ZfN;fJYseCV*rI)@+grj!Qqk_L`K3h-q)-6 zn&&QyhVmWMRyLO(zyEZ_)9PC)X{m(N{7A?Oisq`Qiw-)Bp)uc?u|md+m4bN@nFlHe zNTZ+-uil6vHKtqmJV!O;-}vfH-g8??$1bL4j9?eKpwT`GH}^`n4-g@=ENMsv6?BoR zVSd`e!Y>w4_XbbzsTv97p>S6MLoUxbGFIg3UiGl{d@N314n3c@r)QT{+8YfxTv6W^ zD_W(<&%C*!85(**@2<}%&8+$cx5Xs5pg4^zV?{k13(tjuYJiET++C_v!>AKAR_k~+ zCBZ&*ez|$VCmit+d&@mMz?>+L7RyH#TkJ}KKB&}dF=5jAn3q0tn`GZ<1vaaNfUv^h z!PkN9glW4Sj+{|uAsXs|-c!;o$y&n1CW*&mh)%x(><{fjJ=&x-&SN@pa@PBg^)MPH z-$8bbC1Rx=Cx_r8wRkqRmEW#1LBXN+*iR_Uc?XDYk+k@`{dk^{Ns*v^H~VhGKy=mA z3(R10UFwesL+l?yfb6S**G%e1HA&}H@5MZ04=h1E*CHJUEzSn=%;$d>M)&>&2g*k~ zVzRbo_(Ihixlo6So;?NM%{t~zXk0Sl`t`Y<7VidBE57S2Ab95A`?@>SNtITP~Btd$x2ep;UkZ96?WHGB{wGg;~|^! z`2bg(xIDq~FJFO}W8~GG4wK^F*Xz`dh;war{Qh|sB%jxZ=btlS;7r9clu$Ru__OGl zmv(j+`#pGe3FubRJQDqajXz)d&?SMk5aoeD`~yHMjzx!q$sfR3f%%{*`BrnF0Zvr( zCa*Wx%31(WB2Irr!kQ3u0cw)95Ds`x@eQAu&Z5l`GHtaBBcY7T?pXLezu9r1D2G7c z;dBD3pv5C^lVR0wX_<9wP2v~!psqjCcg1BUZzhRiRmj%&>%N`E-frwMh|h&8!E}T= zp)q4+_5x97xIlEbE&QZBA(J^(@7t)EMo@9RqJ2=RYhS{u(0{y0SXw5-Ola-;vk=ZO zfE6KiOALMnydR&Sg9We_(=Af@jZyA|si^ zhps8`{=vl0!?C(|u(h!h%9CVBT}yrAsqm=Ejq-I=M~J>>4+gLL?2S>CP@OrbqM$xG zBj17i>rB9W)t<-W_rRU9q8O76(-^zy$=>Nva<8(;3nI>P^%UgsYyj6&aW7bPCy& z3v%V{FdVyL&r8e`5JUzpaO4c(d9pG+T;!^VuP#|uY%q0HuMfJztbMXP@EYUi7f)e7 z8useNVD(Pg4X7Ar8E}{qD{Z^CWah}32hsR_Ab$#<(EFlg?@%qSXg%-5F_GABlsK%e zpRmPFryN+gtQFRS`{c{zwlCEIiaM-4Ab9;d$Jke@;l{yM_-}X*9{1*UqN3V*bODnP zDpHSK)B=V{_T4bFLVB(<@;@&_G0UZxh*aDugSvnkN9*HLLKaAPa*32k7Qw?dU*uV_ zqZ9ndb&Ib8}*-M~w+pNb#`h@R09tW5xXm>gSY=KTj+=ge|K9 zfyn>MVe(~fv#!_mr=l{ULfL^6WDr6Ti>|N(>aC+?(?T$BNWKN@$^R$^=WgoCdcYI< z%|(oQX5NWtV`VbN7!<0>@!&723RS~c{%oYI8l*QxpIF&gZ0AmO-q59gA1<63P@=axDJzUaPqRw2$FHfYeO*MI zPh0xJC~H`UG|znFy>(e_IFu=Y*7zwTI$0b6Z|_`}5G3iA{2NZr^1?}aqGbzmpqwbb zcV3nj#u76haW;WmYGR+PTRl*hPkODVl!>S))Ql68+@p&M-#2AJElc%(Ez`rC(a)wc z`PeI>I-Q0>evoX=sc%nPAHRPtMCGn@cv8?Txg&p#i$6?`1|iM5o&hzj1&FWa@lVOGZjS&TSsh^Lcob~ ze%SRUD0nuE22R}Z5cjZ4yRwwN9^u97WZC`}H0%$cp25ztnH{Z9m8vRGH8X=~sI7@( z-XhV4wya-@EXrmAud0}!Jqd%)Mk1;j`Yan+4i&tpB|%1hfzN7_J}5fu^Zb{UYyt4J zj@>G+_BGjm;xRO2HW)!z*Gy zvO9mhwY%_C@E6-4azV0AOt)=AbT(O zn#&DBx!*?z1;+*B{}GH**CrvIZ==mHRb*)$J-Be1;f62q^*VO?eK?ILesCy9UawXT zuci?suy_ckZ3M6_NnxI9Aq>Wls%cv1;3sh4rjLMxc)h_w;e;2`{*t<+5y&tbIiD;PuA-$h<zkE1lY75*AiP{DdVgNJm?lfpCDj+Rqmgh#6QfVp&H7nxMaEI$cSXT?cyhvWf``GY z|E#clWJEn+#tsP|Um~6{9k!%|4SU*Sfnv%9*`MBmO+^1Ho>n6oXuN28{S)Hp-mFYO z7+6vyT37&Ug<~!>R-exG5e{+ZWb*IdaLeWiHLs?Vx=nn;dp1`*^NK{Sk_Lzx?|)p9 zDS71^ViL$@{rtVI_+3_yH|M|3wBcUUxW`5{p3SOYwwE$F`%#W72Y?j{-u!8?v$a;A zkVFT{mVgNdqq>%i!Th_U3>=JQ-BA7HsV&THW&iQw1&(iOrgj9U^ zZ+e6igvq7V!;hh+&MAQs6H1&!5D3<@Bw&cI|fIy5fA5v(O{4P?gS^h8b z{#fyuKWuJP+(ePz zkKnBp**XDUa?EYzHh#Nc^ce6}%YrUF%gIbN{F5LpD13+=8ys-1z0~gYclzI&x{&%O z{prZye=f5Gz1fQv&?xElq8-5eQ>!517fMsi6KW-@<_G3`6~MT^Kb(7-UkSg&O8S6d z70V96f+lc#w5L^32+&d<{);5bF&IPR!%2F0q&3@$&hr73ZQ36DW!qX!QYt{h9@xHQ z?OCWbBG%oSQ((}kW-JncM?Z>X$ZHN_6(0BqO8gtX99j-0WC+pSRGVR`Oc9&ujdo68 z?(1cAgJ44VU5ImfOfn*#D%#`ffJ4Tem9PuF8p7P5rNxf4tA3h24J)UNhxT`SijLUR zShEa}c5fLq(D<<3o(#1ZNxx3+K~9|d(w&ggVdNDLhOW=3sKst;q7hmJ_LjN}UuA>Q zRTEbHGp?5(+k8PG)MiM}U+Smk=TSxn`73nD{!nt;ATD)`I|%1+`tZ&39q}C^5;L-< zt7SXZo&V_i=OqwQBx3x1(2nvWW(k8{P`Ur_4RU5<{Ukys>J2HX6P1Apoz2U}FxisaL|r6Q$_>+QTj3yK z#KP$}G1Dv>G2!4CfKirciN670l%IhhFf1tgrM@E^eu(mBlyVXGGLht|(5kVy_B;N^j_yM&{5Ayi` z?N~;7hOB!N+BESs^Jj_q1lo8a8&c*O!mug59-j(B1whECzb9DR#5=KY@)nn(F2?RTtg-pOPJ#&dD@*kb1+ z!SXbx8&uSj3J~R%{N}%=pZFiwknl5eY*_I^8H#c5uv+-H5$wUXXz*JAc(H_ zv|6pO>4ufS5r@6cI&@Igo0~wrEFS#0&mK{%iKgunY^>U=u>&!?7(Xqu4*1d|#c zICrX#LO5I@16L$quGy4r2wyGh-nNgNO>PyG&eX@Vdv_z^S)K z`XPC5uGne23tCxgn5(9uAz%S(jLJ5M(b~x}?3Tx~13;}7Na;T)yRDA){!{N=hmg|) zXIlmCB1yx|CE{T_X6OR`1A)s3t<}Mqc@-pbw!qpCooun(Wy3Y#FQ_W0L^i&}HXhI2 zgAWx3nd?$UttCH8X;P373iPW1ux6Lz_CwyE-%MYz=$0i>aLGiJcPy=Y009akOJHpL zsOaxbQ@bJ5wiIEaO9vgV8*DePiH9_x0ybL9g^0zr;}ZioA5#J8oWTE+zimL9e9NpS z4+bb#W@pIn{b{~GOdmv4Ud^MZo&cllJ;PGCy8Z~-v&)3j#vQ%l#lL&sXlFRTAXdPG znRQwu_+czz2lYx$%x{1(Wfn8vnXmCjn0a2AmDyZ^-2ItrkYcOtdjs}gYftdh2^^U~ zjlV!>M{0If=Fv+t3TcBi#j8{?B0e7PxJ_(;B1!t_wF%!Y3)Z|r*v!H}nONWk`Q0r2 z)(iGgEt3|xAo{dY`?0H^>fm(#JvaWDmvcOgso;xRp2G4N`Emd~&X(%7`IndoGPVK) zvU*nl%ju`~SLio5eV(fpG>z{o)(O7evAF>>-c!95letf~eYSnb(x; zqE}O-pU>Ot?W?A;`0ZuvIH|lJ(l3z{9Ed9VU5vb?)b`-kzEKC> zgCz&Dn#WBuT>OLnN>t>A9VX8UqN-X|>#XaKhd8eXF2G^CoQ`xe@F|u{-1WMU86DP@ z`Cowt2Iy80U0RXBr!Om@C~((1C2uZqB&C8!bt8_*a~n)-ySRSK@X*&#Akb2y*w%q) zRAx&Hu0pA2&XhU!EQ|fE(-!@Wog+Lc+&C=A#0raZ`^m;{nKzm0phUT&J_f1sdRvys zRN5xI^}kI3pixj|+R^STuZOG%V3h@}Eo(pgs1t(->`34DeZ&Ii3XJcvRJ;(nj9tqLPwYwGp`iZ9zKdzB zj)@urNUr}B2Bd6h6KTO1MNDa{$Ml+r#q&8{9%ad`mh1{4<|%DNhWbNlsRH;}z^qg(2YI+w8jzVPIg*ZjYeGwV&J ztyUA>I8GYfY->fa9NMpO#-KFxaWg&WF5yefRNAsqz)Nj3?N5YVQOyNxmq3oMx&K*7 zKZ`H=q0}o`M>z=)c&TG7h#M3g+Nv7elgnqbYAi%e3uL*iX3<3k+7`o1a-#4*`JZts zf$MSHRO1W@_y)>;Ov~+iN1E&cNu`~)woH=smc?aN))f=1)^kIs!~~f3vU&X!oVdH} zUm|jBVLoTh0GTNAc8$G+_x5K)rimjoIwsgFf(?xkV9`}&dQ5St#W$yq zga)ZZ{}z!mID__FZs-U)LMf)*`-#3ke?r~L@0dU->-7JUI(Ytj_pMA-d(4L!{wW+H ztx_}A4IwUzz>(cYEse9D4 znE&?wXPDn~{ZnD&Z~@lue*Vp+RVIRULI+;xivyswXlKlsTiM$HY)_JeAOBHZxD1~Xm?$DPDgtdQrhzau!N$FF?<@R423KCLz zn5i7&L~_OjJ`*Kz6Y}Pc97fA|4`+sCEYv|~)m^x%6H_o(fGQireN0Ix4=gjHdn*UBp$u=rRaZ?4gZ1Y&3=|C7$y6-jMmF3sSYf zxbp28&M~*EKCrF?o|dZU?4+_HomZ;5Q5YV)a5x~6UiNhM z6rG@;5R~~x0{91su>HF5cEU{W643>~Eil0fqnk`pFmpF>LMh5-uuLW6KinBQ+&b<~ z66~g%Zu)g)vUHf7V=loKE9;pHq$~im#P65WopV`29CztoobcdS1_)yG2f#*ceU6N> znqb-moQ(ak(%N#Vq^Q0_W~@l^d>%(Z#No^IKHf~o^+Vr{d(&%JqC>0E6|Uf1_w&Xa z2x)i#oeq)&6GtKQ1W;6h;={QrJSx$q;dLMyA zH?siPY)Q%*e^0vM;SadSox+(BRa9;~GJ@eIC#F7G64oJq(mMY|PveWc|HBh$2)5GD zuXC^$a}0#!B|P_+kuEd?RP&-GB27>plq&uT(G!YE&08%IKvfcs@T)CpJIa{(jp1tI z1bm5sXGZHZxw^qiZtxNdchvDViQZIoT3#3$abQrpY$K}n*g~XL<5a$uUML~=9uQC?lP{+MRq){YBRoBwir`gV7}jw=m|qyb(|(ieq#N7_(58{ z1o|OmEJ35qc*SIvTwXTxpdb)B_S`;>w462Y7d#CeOs%jw`aRaTh$HXEE58SH3%u9q zycHPE_G%M+&@#-n!RhK}GYUrnjAdc0VcQ-h6&);|gFTN0Ei~2jmMrH>-~B^e;o`7y zf-Fi0nD(06fd{W!B;>C2^q+sYpc1{wD;6`|8e7o;_q>rqa8_yx;&p^`W?`s@El63L z0Mi748bo^h8woU3f&VVTSI~Km6gJ3sXbnN6`tG^|rsrjar4X5YcFirpmCLd@X{%x4 zJT*)Xds?GGwAr)=FW*nnci|Kg8u|37y6Df_gk99nEd7?4n;}`%ik)}TV4;+7#937p zW3hB6C-QfULGxz&G#;fh)%Exg_>tm_8e3WR@OdaZ&=e3K-gLqhiNR7G!B!PuN5`a9 z-dVhNex%zf%s?;96ROs)?913(iFK|l<&9y&sTAaY%fa~xZ{eZ0-=JC@N-DoQw?hWnFa>uS z&<2L7Y>ad}t?)HL7Lk1E52`{~nrLn`+QB()TP~!RNQ{u#T6%F z^WI6|Ltl(-^5UVqHf=!Q^^LuaTxp>;S3>LbUT}kBn3T@~h>ZdOLyx8QeT0QR9!{QPm%Qk+Z!Dd zt$km-?e`*Ci0CySR?u3Go0<{x*}j3!pBfBBXOMmzwc;^m1gYw97lAYUH#c=qVlgfh zQS}IB3Ee-RKu$Vy@)5bFEFy3ppSB?14rY>xojQLxY)pZ{-o*`Q%`_D?_8J+J*%P~C zVsZYeYBAi8!86PinoX_#6_p4;7BM-fkUD!vDRXy-CG2S>-JqBb$&t}mReDFv`;NW( zZ3S2cubRAhIQ+%AJ85cX#|yzu(IAdcC3&e|;FsrmPe=x`b1ltMxAxoYu>zv88D?I( z;pO$5Mk#>3bC7S2uz!ryCfrjp`^#B+d#_W-vJDxgP+vor$ifSD?lLFRCT%KP%TFW9rW!=NQ zfJ$EF(v^4+u6=d((#mV;AOHXW0000000000000000A9^qI%_;oY^QEEx&7L__KKil z#uz&|vHXS@3W|xymV;4Rg>2Ck)9vgHKuI91c<~yFEh{D1Y)?%3z({bi%qw$JoCv(o zrc_4w7lR&~J94P+0Fq$!z>`97gt-U$wAy&D;<_OwPcn|8M0Qf|N~xfsodr{a4cYtv zuHtI@Hx2$E6`VIq&+0JQokmG?FaKIsW|Hhv%IOSxTvdb7|9?`!_saXjUoBDY+5*lB z48mt}_3V6>FcF^>-;=9bXBm&!;*aTK88nNlz|0ct5$0t;;1C1K>$-~VH!)3JTPJ9eq%Y3N)~UzOlUo#>eG&( z7_EiH1FFd+sWrU-|AgupS&GimJ-%m5~0 zTom|Q3p8(gvB31o+2a$g2Y_4CZxzoz%5Jep(C!{lfeSX|=B2F<(Pn>~A^eCG{hX-M z{K-J+`It6FB6nWZ9?N>iNw~; zYr-D{im(fLN$U#D6P(bBG!d%cwUMDnG}{%w^A%8K9(pAFj(e8H3^GA42bR{gIXq|rce}xGzIC@=_0z5=OHt*tKKQr@SPv7t4vaGhxNDs@V zU?E3f1hWAPh2jq{#QrLw^( zEslq)33JyRA~P~Vc7_PUNC{!??WOa91cr5K3bT6-g7IQIS8`0aJ2%F(vS|?k+4V-5 zKG#ov8Qy*~1M$-bT zZblVxbXfp(yoWseS?y5217mwLIAzkl6p`nhmnYqdgwAZ?NlV4c=?blzmN;WQo_!Cl z1EK}H-^qbFX1s~O$=I?j8h0!CEU7>!ym@+nbR&v0E=xKVw*eYa01;RarUPJHBZIN} zdtQmT_X*VLJ!DtTCTPg3pb(}8H+v(>pLg%D?BmBr!(|>zD4OHi(y9AXR+SNTA826@ zG(1bU$eP9*FKsDp5AOBVK)H3`wd7fs(|flj=KtD-)wuRG_#d|-J6b{MNt!O-^Rzb= zHexp>6xT`u3#C&&v8|qB9G+fA?I@P7n0W$R&6`M~4CYg_oZZRs_!fOPvy|*zp4*41 ztO)7iPijvL2O4|aW;Fxf;vMEg$m1U8yv&3(tIi(jDe=?DQ|I0DYOHsl?mW2N?^BRZ zB}T+NOXo?fU#tS~kC|HJ)*d-GJ#_e_xL<*hIRpikTIorgLI(Wo6`mA^%ax%I44YXP zIn5{6Aol)TKqRP;JFeNxHL6WN|9IpQBKW(dGPHEnf6N_xT|x06Vtxa(i3Bb#lQ&2@ z`sxKj#~F3ZTHJTP3nr|Dj~40Y;6Bt+{Do(?A95T?t9lxLvVv`Kpmj%!kwgq7w01OR zr1PN+%MXR}JN$v}4&E>~^L}v^2`hY1c5ca)_|Vy_0xhE;wrcV}A}Ok99D^ZE&KgX9 z--)!f9^rzF6QI=%Ua%0x3=<+9$C7a-@9t5k;08!n+4wWBMqfNsm-(l#aDR! zEdIO7;-%W@W8pfTxD&V08|tG{x9$OLv}11KQlunTS#<>g2j-*Lh)tN>(BpIrRDJ&pB_mfs=X!$pQymVn*s zWmdl*sXHUwF0!4iJabf3*IdhD2iI@v+$c2~;+nlS4~)mXDYjohl=8&X@Z)}C%@^?V z*&q4MX$>ulUZmPK$3~FF>Dr%+TS;bNw}-?Hf{E}J8X8sGkh|5$2U4Cl-xy_raV@9pg(@&Nod%ALr8=h^JxUH`DWm6wHxY;`EA#g=KUm}bpWdUUELOS`*=ZF0L zit@OUQ{YLBm0F{n0(FFyxpEB_8mOz%?B^^W==7)9*m2C4?FbD@C`Ud778_Xp!CKbE zu!yQ1Hss!H2ydr!BulsP5svIIJP3pOwasCEr_Py8>*=>*xFoD>mPl>#1)i@t3YmrY zY*S(iI$&+?qX7ROAe;3UOeYM`l#eFyu?6VNsYP8%sF+Huo}(QtJT9hF$rMsOm9_y0Mu<1ZD}jU98P2j_6_ zU29#NmCUlFnTbTc^)1#nW%e7j2Ed1&`ZAhIEK1?C+MKtG!D#=fC#sVpll}C_c!TDl zmqgw&!9N&c?ctKG?i*=9MgBc??tR;mhhbM{we+z8WF^F z6Cp5L+EVvVDD>o=D9eEyVdqO782;Bgs%*aMRXyjqlsYequg1M+_h>kNy};ReJc*r= z5j5amCJ(PGeiw&)b_#t!fjWOo{gyO4$N=_-lHc}8`}4T|{(6W|RBYeAsZb?afq_+7 zY2%eu9;fq)>cz7h(h3}mHnI{=)){_PVCCSFAO)>HXf>jOC3vY<7VMtK|{i{WnwAOg+vjnTP@O{F*&!lAr_Slx7 z_e~ICsdj?J>`H0V6CAOc$@}KO3?SsqBE0F=A+kdILILUWJ+Mw=$Z-I$k!F`&u2&_p ze z8hku29Ign>2m_JF#*G=iYmf3jv%^k6PvZKNYyYHLT8tvz{x&uC&m2S$uv(HR2zj>1 zAR^vVk|aY|SrVIx9a_*Zrv?wE?$n_#wpRjNM#I%((J@nInk=}FOb>YrCsIu+cd2Aw zj!Jm+QUHT%&~1FNFL@Ue03XwszOwz*)o3fR$xJSKh1#UL9aS&aMU&ttmZ-!r`N--b zq{e!TBrhce;;cBD3fI0si!_N1#bP2m&{f;@U-D6p%>p+GDh5gFds~yhQ*%DavCc`y zJjcU7pOH7ygW#;@;;)b9#3#&}@&#(l21;@&vg3dXgZn3E^3;7-FTrG|nkszVcn6w22Gg-Aj*Bu;iKiW}fJ&X8wkiZ^=+64zbH8tr*_ zDg0^2bOY~J*Z#H8nc$1u0CH_I9YKH2|(oTb)gG_11Oqr zkuDtB;d39ghhjo?uPKzl#0KS}oW2cU&r(F7ENyAvswGv!``3XxcA2j*bx!^kK1Luy zsd=pFRP8V4YjFs~HISk$NY}g|TY%eTX85~MkaJg$)MWpkpCm10v3(s!aPI7B;IHp) z0;pkJWFGE> z!MCK--P@y0Mb=f$qpfTHJtj2#hEBz9C!oZu=hJ?0EZzZlb$tl?8=XFu*2H4B9Tl%d z!?crKOmVdhZXWmeb$BL38(N2H5)MST-V#5T1vyGFff|`T1A$Ed&bhUL0Ofg2erj_N zDgaQxeDIv?VgJKhc}Iv91RA32H_L&+L4(fN{guo9MD}InKY|^Z{k*l~D?!?LuJ1k5 zZj$B^;leMCybmou*$5dR-C<9dcVS0>aZXQ!!^!(!XYXN2shbe0!ny>mhUI4jJct?_ zWTtl9AFNxf3*a%ErqgdGhA$&fyMI|~-tV&~iyKQd>NOg5x(%CDJreW*0d?qXX9Gjn z^dXTcZ1bd41EQ`Jok`r!n$AQ{t^ORGhI-ZjkeKs`s7^=gIjEX(>lF`njfed(!>Z$+I|0+CGS@~0>=ehY39_C|C;7RcdmQ~6 zAd1^)`aNI16K<4r%MpMMrm@54UBrRqeV2|A-sn4SwDhLy#f9hCj}#wsipNQ*C#QR<3Ie0 zXx*c~{zTk^B^$eb&=lkhHJyHQ4ymUBcLr<1l1YT{2?ioRi~XA?yEz-Z+g}e35#J<# z)0vyefQgv_d7|u#`=0l0Tu~PfbUlr%B!FiG8u;ugbX5RFa?)W-aL`6nHZSKj^$z!# z@{*^f8^as-D}fnk&>uOVgs!?xuA{6AmM#6VsS&R%Gc#Lnja8GA{SH3f%(B7jfiKMz z`q0&hVY%X^3AuQ@R7HK7SF;E;@+Uh2aO0WHujRFz*~IWOYb@$_kFpxuBmVw5#a8-s5tn z%=Gh-TCR>ZyQahX8F$K4aEJ4mGR{C0h6y9L?O-Jip>tfsy8Q#Q*)BY=&?|9aZgk+u z2wb>!*BaS0hKi_2mF9(f<>0yC)q(S0qR7rPsuI>DS@Dp-gD44y8aI#2ELj`EuN$yJ z{sl~?R{XXptDTi{+Xer?i+&kXo?ezqqs7(s5jCC(AkG~4Pg_6wguczIDjj2k>B22G+0qAsLjsK}N(#oRx8O+22QChLih9^Ddn znboIE6l&kE!5~XUdXt#;!M35&Te#WvzY^Q{o#lT)Af+dHDc3=W`8f7^Sgvoj*ka`5 zlI#GbXYdf;(`|1{kQ}@(e4VJQ_^RzKB%8&fvKdiB-zUFfTTOm?a@W@q29NRcdpl}D z_l}&aK%BFJRLLLPG&?VfWYOGU$d-|%mNoB{RI~zRCA%N7l}J&d+B>=kPT+BKtSpO} zKf5+fi+$%LN#3m-e&k2&K7K#q+7_slR)rf+vip%OnJ#wE_D{mdtJTY#-}o%1gr+J4 zBs|~dk3SYE-<`^O9)0-<62OzR9m4HNnPoqTnp#}pN$-nPbI-Gzq-dJSF?5F3Yig_W zG^(o;_v5qPwhfRNagT-VfHVfzuuNsC$A*>k>dd~6DK;q{Q4<5dkE;dJ?yr~OClF;n zLFSnpEV2VW-i(!bH7nbG}31osm-$Yr?k4G zSDpgwL5ifo zwE7DfQ9_?a`c_s$?}KH;jT%FJk0RWzMSU^f+R zWq{Q96)}uGHzlw&vASWTZPeady2wgo$J8sbg}cyVV&Q*wm~)~5QH~!i;uL2vn5FH2 zBTc6yM6e`Rrn;%OOaSWtvr;HjD0s&73JF+SpLmC*WBp;EKIxHVem;u*Pumgh8 z{+iRf;Eh026u@%UD%z>cQ5kDJ_&Y-0eLw#Wi%!o{o9}Jg91e&Mg z-eMMyH|VrRAL5=w>%y!WR?4%UyW@P)=psMTYXATM00000 z005$qfi$!--Y(9Z86)!EM!;lun=yLx-*<%h$xX5|E)t+a9 z4ARLX8r{JZtB%MQ47=L(VK|jpHMhdA*4m>l5s#%aqomj+zUE)HS|(A^Bu5{!#{WyL zgFb7Dixfeg1n~f5mFJ*Rfca`YPOPV@qBK;}Lr=F8I0z;=Yu(+dYG0e@>K)&#Q=I)@ z9MObe@gmQ!BishkKFGdfTbsa|L+sV?epg3XbVQ|*mab>B!m@=a3iG5RqS?-edy~F7m z1$J@Dub?zGEeyIXonNw%BBsCS>1WeQ_rN!Y|7^UnP5_%HPEU9J6HzvlRnvZt*tPhN4KuM0|f)~)yQ_@-1{2^H4!#R-3{b>;KO(dNRf>H4kAlyKH@=CF`j zCT=P{hI#g&0#4GhlsV%K-RIF9f;rN2Cv4;}2Jsni2I38CnV4f!JoPg3iiU?-3rSdg zBu5{pl^+(G510AeI-;q(**>PU79&$WAIG5IB+>cIIL}np4u$r|^@uW6CnQAd?i+n| z)~f64wSnfeYUKEym z7jeJ+EBXcb2F+-FCeEB~!++#@psFA@fuF*D9OM9_Y|HR&R}=JPSf0|TK6`f$Z-fvD_Ya!$X>q zni{UARI2LWw%x`Hle|pJ@=W0d#QuD^lLS$o_N=lOIK;MNqzFIU81jrSl2%LAuL-ajS&RtRr^12TKat!-zM5z~P(yGrT-2&FvCrDYISDQ&qv&NGuKLX@ zWsd9YNXQ5W-~l%c+*qOrvn7*dkr8Bmqa=0~ApE!9-R&0~s2>Sa=(}PS zN_}&Fl2Qj#uVv%ns82)5&UXW1q8K_^J_@-#`h@l4Z1{}v)jK+Jmu^L072b#a0{;zk zNSkz5WA`=G=51ky0g+SpTfA6UBFDgo64tEE>*q1a|9HvhGVuE$C-RMTqAH92{9D#V zu{xvgGA5agr*YDIj|>o!MmaTZV8w9;V2l?a++M!Qd72Grus?3nUt5p33lg82ed0Zk zII3;%~r$(D)YV8sDxYI?`Yrsa4eoU?srQ6RKV6yFLxCnFK6JkHK@V zRS`a|!M7V_A!)v#fcU6Uw9LE|K0l#7R*mll1tcYz4qQWUn3AA)Qy>mty+QQGh}Pk%SCPmvxtvtSZe$X ze#Sc0t4n~`RB@R)`-JiC!`x$wQ@m>Q4N*oL(j&zi8!Uj$*_PZDUwL;!ign+vJ_x{9n!J@)aiK}^2MSNg|okZ_V`9E*1I z5Y}+=!iJw=-4|Pzi4IR6%_z@W9yE}b+nvk{gPJP~1?4Ffo=%PrY#BAuUI-X9{}ryG zTJ^GHYe(*4bx$|4y|@rSE3OQIzM@joQC-GbKcdX%*8CC@X_WADVXbb4S~l#Sq_v5r z+yW2)Fj^A3a0VLe>2U%krLJe!04K-!dR$(u@$(w94Kb6! z`DqCWGftf)Z6$ZMkt(2aq{8?`m25PZ%$g{cSi(!jo$kEA8iB0iA?7cgu8ZZUlAP(NW<+^{??;zlE z_)_~Hdjl8y;;#|ckq0Qhfv2KQw^hy~UvDc+^Y%8s4lot6JePT4E;9xmIHij$ID%DB z6oae3NYdW2#WDdYOwIF9;5LJ{x`S9u8oQ- zjSQ9wh!oyF7E}2S4B8x#Xv6?`3m#G#?2VSt-W$RYI2=+?zG};;!i?Dhc>bf^Nw6>x z8KgqSrz5*c=hv%ttxRBm*i@a?#`@jS7Uiq=jdJZIgF$Fbvet!zBd}%f$#%FTp*kO7 zAcR!r=b^ybu;$Jb*bDyeJ0_BMlz zZ{qu7Mj@F$$5qmXIJlIkzE|9pep2a45Psm-yNwj$Z_or`b?QHzYV$aXGAjm)lz5;S zTYyjreWbAguNc5dG#X^dxSaUI1SBKpI`q7R9|rZjGVY-qWFND!m}hvQOa`&s_N%)@vx)%=0~9RK!(>gB&giWJO;u>Go3$E%)-g> z;rXzZ1E5UTj>G%8ObsG7jrk4Kr~MQoCl#=MzB)V2NbQ!cZir~x>#Fheu-3Cv=Rvo@ ztZkOjdklfEXg?FNe>0kMqIWRrvafaXEgF-(6uD+6_+UnK*n_#U@Wv~#2MCQtgzKB0 zi>%T4;6RYmOQ^`yeiU}iT|=Ow5dw9&tSA#ho!)bdsUzH;FGRc)vyEw%XRkkn2|V<7 zw1bXxr@@#5z#yFtrKRADdI+mfUP=v`557rE=N`DcI`0lGkA)rk?cUAwfbE`4c-zy1 zUoM)Oxs$Ua3J{&9G<^y_Wx#LBfeR*FSmKecpL;Nnq{3 zKj$y!*m}oA@-Y3Edn(W)Db8VF5;#AAbVbc#MJGMq|Ct%69%TyhVg&!RMrLJ;V= z19&9jjSMV0ldD_73s>8khrh^QIDA3+pA5q4;vX*to^u~@*(d%a{E0jKEqzRxq|tC2 z>@u<7!6E(l)R(yJQ##75xs+f(xZ;Q z3!Ji?OWALNCx@QM8UpoO{j&(`T9z#iQVhzRH86`!(WnK{Ze`&p1-$Z!{XOuQfZ5VV z1W)S~iOue`_YN}_cT9c)PUTv1xgYyoFdZQ$m{1mHxI4Jv0b^2PYFkKS3SZVz{ zFf+-U!W%XE+G>A~f4D7E2KodfwQDpREG5CAP5ciuP;)A8TQ;)JQQFF*BfherYx!)2 zAIfxB2<$!_E1q*5L*{&ps?bgJqdRE?_UeZiStPTx z>jgc80N0~b6Uhm#?B1?-jeUWffC1k8_+CVahSjE3R#|Sr-9dvl&94;8?6*5svwT#$ zySK%p#e7m7$Ibp`N1^_kr2#9pd5*sBcJo8~M!^bxExtXeRN2Ii2|be<{bL7Kj(yjQ zM0{z3RJVNFYRz~x>hZ~DHqCZ0?-{}lgQUO9sK z%$gH$tT3!43=nD>2NA#kmVF}L#;58=b#S6e{5siFNOV>9w7hHg^B;(Gy;;P?;uM(z zHLjRbD3*;MvhUO!GoFn_*Z$XZ@Kl&{?m7%onky4&WAv}$azqIR6*f%4!D}cLU>&hE zh11m?A>Tt|U_)2}jG{*nqlKtzZ))J1E4`Nh1Il&r)X9&WVRZuZb&>PI9ddz?uBuae zW(8P1JHNtF;h5~Vj>Azx?m-jBlfXZ#n+Kqep!K+Vu?|?8yO$sZdGC7kSY<}2rJ8nu z{IAdkz$OCJwmpEspL9lpBCkf^qCEi2MmzTq%JVL|%!nbk{dQSFf!iSH1KYtiGoc@7 zTvnAqjJ8@W!-6~-T>YpJttbU`*Zpmpttm@;6>|@-DNs9G(kef05MQ3}$JujwOT<4s z#DfMy%M-QThUyRwg)~jKBK@QHu%A4+au|G{&?nzo3C&pmu@D>D0q^TN7>~n}gPo*U zIBma9UPo*`X|0wC8jzdI(}5S0eaks0U;Nw-x&yH{gSM-4uCYQ--P(qvbhUj{wBp&2 z=!-zUWNE*Xx9v+FX!*rtW~N9UC-5C1+rX@ds2~IS@M7f=%eC-Y+CR%*z%UF+A>Uu! z3XV?T=OE$YwN%S;*-eBX)Mfzx?t)OXM!}e?3lw?TlNW_)H+zLkdKK8=3*3))LnPXY zgj{Qp4XX~=OscJ>F!-Wr1o@UWbT$IOMH#9ylNQUU#Skh+A2DIA<8}VmfMkChjgN3K z=w<8Bl~JR>y|N0@{BOKZjrVQc2q#t>2t;z^w3^6N=)!+*$l#zm?mQA*DR+g#)e z4-Pcsyao{Qcf&>{tZ+vi_80NX8w4Z`sqy$@+yWN+#) zI|FC&Dw@7D6gM3dvE)m$pc!W}qM<1&83tZkO^WLQK^_3Wlg2D#yHKPN6}*~IP2H&{ zIg5 zmEPI-blw)%^Mt?CgL(;3GdH}e8&wv3pABF4tGu@6x>I=l#ET*z&XE5;+V*pK0|boY z|0Lxnc!2uqZtj=6^0z2T{srnmP`pR99*z-~rgNRvVH2o=!@wYin}9HumzZ?(-~pY7 z+5J+_AOFqhQ^;GhvwLoXG{>K!$81OiufaxSr977f2a)f2taH-%d_Ia1t!ECuF`|{) z!}9s|3fh$r6f`ic^ifY9Dp3fFk={l*iNlhQcqMM|NWbNj~C9BY#4`8jtMo<2#g1k$)n3aQNG66`as~JTp$;?oKhQ2rX5|*w9tO zsD_vq39Y*44DV-^*f&i%IP}t_Ue=E=1R7r%!oZ-58C_f-xMyvMPtw-)b$G7eC^K+| ziZjQhx7}<AKrj@A!s> zqKv73LxHBAvV?}v&}!LDa_zs_sD@3=#_hg!f9+PUz;|v?bu7t)@!ld|v&XXTi$nQB z$eP+mB@^3c*s^H-)tRp0D85at@Q7Z?Dx2kqqiA`3q{0ydvx@jn9;g1yB2(pwhG42; zUNZt`3Xy=&WMqR;^;UQOB&IM42$gcq;8H&uq{A-W7^ZbPcgje+EZa?PaH$v#21ZCV zA5~@hvE@?_{kNE7!!|blKvPKZylgQ0-EPbJXa=Ha!_*Yh60C01_s;fGsvqe6Lh8?2Lvr{maGvVp>4bmiG?WRKS*7J0aq_f!DdWhoSK87 z%hO3|R}Ddoo3wkvi88&e_`_=()FH3tI`ujm4N~Pe+)peFJ&nPrPFz zIsBZ2Y52KAxTz!J*mw{pfrUu#?LyoIT0iE&i<@e>!2oedn7j9g2cN8RU#4AiT5_ul zin8E0s}IQX%!m_&SgOWg9g{HkQiX#m*;q7dPsZG=<{9??hC`z=kWOM^)c2ashiQ$c z-~BC8?p9RPmg7+#dXR5~3(TF+n$pV*4>*yYsl=dY@@buP7_Kq~WVlz|f}g8oe%Fc* zlXj|tz0+x#K7=TGw;z9x9Nif&?QllTilMNyy6O}49lLnpXjV=lZ)ghYZ%$P)j_7y4 zDfL&7k=P0P1qnIA{rLwSh^ZjS-wo%W--@Z$gB?@6zQhdp^R{F#tx>s`u})>l^hQ|D zY7-qv_U#gXt@GvSqb+BGeLo8uVP)@zzAFv%aT65|F$CBdX6FOxjpmm1@nn|u{o)k! z`JpfbbH*HyFYpQQ$6^Eb`qdDR^cIDowWEMHS99Oo>xRkM9XIskx6<@?RdR}V3-GM+ z>4!Gjmvr>n;evFI+AoCDaj~c1Peyj2^H4phF@-UeO$czWOYDd(Mk__pnkr{#YJ9`I z9q$76zQ}hCSP$BeJ`6Sz1T0*f>m7FgZc|CR$FHpUQARIosTDAj4tW6Rnk6rB@es?K zeE*x3^qJm}ppi(>S2He5{~}~4YDwcbfmB&2$&UMr!z1MP@|)(r`mzhLizvkk(8`jpvzZLNvDmJWVi&)iwc{f+jK0hxc;Ih+xg|)g(loP6 z|H4Xa&4vxI#?;^I8edZOVrGVylMyivl)wS43&-IXV z=V}^afr4p7u%r3KK@MC?p^<>u)UGruiKf}Q-=8no_1{P+Wn`F@?I{O?HY&IJkDvI$1( z=du#O_S+e~D?&ibLbl6<9q(~GibvzGH)X|CHV?g?^5@Uv2jZMzAc-u49JZPny8X6g zZw(=O&}r%UmJ@$xR2>SxtL7`D|A?We9b&$Uy<+vpL1BCpxf>(#3H~Xo`Wp%Tr3EG0 zqPk-e@Nw~;nNQ8~N*USH<3EoA!mF??W#ZA=dmlPq{>#9B5aAxj+!!9?G0mCQYGxxlkkEdbeVHyn+HeC=cheAF~;Xg!j};tBozZAmGwvC}s|4`tlddSfqX zQIAuwmbp!>C^1yHUmy};QIq5`xB1r*KbMS?n$wZ(w+Ryv8e^Wtso@HtRHb*!&WUkr z%Q)9kgoyWe6w*$hx_SFfV>kobkg+lHx0sH7M8#6W&O@Qrs9W7`7Q#g76X73{^q(76 z3=JZ_jtLjE-3hnfHjs|_QBFSo}y<>3FMAEagZM50LV6X-Wqx(tt{8|wdb_)z;SUzjN zqbksX%1sbWY&b;MBEftkYtH)l9k3AwhrwP__4mZ!_cr29g{J)_`Y>wQ&wPoMHh^2N(P zG;)j9w?<}g)(7(uE>H1Hv!wUVw1iXQE9!idwr>B2SmPu1;9m%ZAsFl zl#C#d*HfB1AN>Lrp*vgnP*6M>-Mq}Rz_6qJG4GR?DtVG4oGX zD+Ce}&)<~NKf#Kmz*AI6VY&U{%Oa4ZU6feE#YZ;FcPhw5SnTX&HMVlq&! z)>6SFnz)+kgu;qTYMVwPY1{RJCHT%gk>TndE$+%{4<4v=;+px_r%uWn`U>phH3M9G zX7Vr255{y@#C)dk8R-Ucm=>%lGK-pLy-dxlH}3hqj9xo&7K+cM=#C8R^8idz^db!uY7%W9Vi;=WxD8h*CwVJZs_ zps{0a-ovSVbGIg;SHt*9Eh2pC`UmZ5r+bH>*b*Es@70=vY8GBHYGgsq}1iHTTP#aUF0t0Zd{x)Jki zAe69w8|>;|P6$=Dk}`3Ovq^mjf^x=_5V)dndx=2%Vzw&nYIo?eGlpXun4qff9bsXl zDVPXg)oat9P_dZky+tUX79N+XWdNm2=_MchV{wsZlgV31PkD{wsDySm>l3zB2G`K)wg?#2!THXjS^Yf-ZJ!-C!kQfRnL7#;qt6|V z)C3@jpZW-M>>(E~>(rzz`6ERcH+!6AJ^Fz)*E`CnIJ0_VGYY=ZXPMjYM#msHZvCwh z;JCx^v?M>D>7_fjg^7MlxH_)IInpUq#CwIdMEM&eYUX3U&}tA&{7-d#NOm(c52i}K z7JZ|vHJ_lLKJKMpih%O?G@`4gG*t^Sm*gI?A*{xGxJB_@@z;T>I`N!Gxj8INpvR7n z!M@8--&O775=_V{TI>bEw$u`8q1H?+?SZBjY*LkiPcPf%gQh{u zZ%)NoH#?TKH((b_a-q6wrs?+tvHZP@pBJuC006D#0|-c5eQ4KOsLHt+4FF|GG^5bfRTUCAYQJi-HNnJ!lda9WNFjl67@BXYC1OaB+sE+7mC)QW7D z$d)uWpblgofBRAc{)fV%jWUnug@Xmuw~h|y7Q3bsC}-eTK*gBdNFND|IYyQmH0<+- z;Ss5Kv2ZUzaCM`PPSa1jKDZ;6f|B`{Kin#YNg(yIgn1R8BbnkwLBSjd$VG1w44%<_ zr6{Y3bqXtA3&-(1{RHKHXW$Xg@}@Dr#gPf&U=~07%{mq-;vM zJ~Rm-2$4{sZDYsznNFoQcc-`?ZVSFh1LK1y-mB3Hxf^li7X+Y7-^`}pW;D7fot4t zo~F%xOflhRcNF>Qz&g})nC5|hS8Y{OtpSIhQP3>hJ-!5`2X9qHD& zIE6WA@J}f50(MUS*g3|m-zHA)xI90~YWIm35OIN@%Qjw6N0j%17DT($luSfqr4Ste z&8Cy4qSBW63R(}IoIh}v@;c%eMH(*iKDLI}%)(=D{dC$RptSqzVL)0ADgtd>h_#`a zy(ELnn0i2+ZquBnVbViJ7)2OqXutAI<{Bx$-7f|yKD29F9&`#Nk*=X`=e^VuaJOsF z#G4sd;NP|fvv=FY|5^<%V9lJgE?{xZ5l$nJ!9nR5C;m3cpTiK z8h@(Psauelx>D`zbXqVR(~%&TUAE3pw3d*^?94l1%Li80R_kR8e8jr6?bQAu3SxIc z6$l;91kR7}Rk)^W_ZdapR-TQ9ru@(r0Gto5_e*p}UMpCs11LOSI2{6$aE2Pd0pOTw1x~Npt$036P(^n-Cg3q!HNKu^ zul*A6*OM6YkcLYKsSh!t_DzAJ$>fw!pPZUxFN&PSj8(tL`-W~QpBME_8bn9<3#i+0 zKH2B>aDc*M-u)2ZQ|_nRG{Wi?{3DTR3nIJS^c#A#Yn(z6ss_?o?MTv=G%2fo|>$(LUi9rb+)=*7_#$2l? zAmT%7&Q2P~eiS{&7rBzpQxY#D-j|TcL=I9+)!J2ekUVVYZ4U8m?MWJEo4V$%hQPB< zzhjvXsq~&@rdT@G%*jZlxdc4!fcrNC0zFTZvk>G?=Jb)@AUN{V{wo$;X>B@6CL#3H zuZoz5hh!)y&J+Kr&b14^YnQn`cIPAH3N(+EX`OqG}B|MwhyQsiu41`>O z3L?DfF2wH<%R#_}NCYfKekQDeREFU3e_jSe<^;ungxWewlPDp{yLvc<6$!R*N+K&^ z(O(;M)9(-@Y9V9tE!RO_Z4=dz)A3S?nQ2Pp3}mRv@J_!#$rzmJ79qXPlRCFuTOOGBn`+D{Cj5yFHm(#-*iDt2ojHttW7kol>)IvAsSEnH>aF!z! z(Oxu%&zHmD+a2ah?c9jd<4N+WYMvWOt}nbel^KkXMZWk z%```R0Z##R=;cQQ&4y-v@W==q>!d>;gZ8pRLgsBj@C8vZZHLVb^v8|EzX$nWgQcrF zpr`$N#-vH$HvxJ;l|3J2|1fuv6y1wzWM`MT;FMMt%vNj;a}Nr=6(hd6EEW5!dNO9a zC-Pcd*=b4!o0+5QJ0E2Xr|a9B)#_1;{-K^Pc9L_TQuHkivRPwvl5br3SikFsvLlHXzld2yx$Hz?_!>y!HwK+q zm_^j9E$mwm0fV%XC`gjzG$*2M<+1j&_&3i`4Ny7cS4~F0(8{t!(XisIpAm2bh-doT z0p}__h%wWsiUJtSJ{saIs;b6A1{X|t=y&DR3w6#xiy{ki%$RiCq`v5vG`novS$B`; z;X?nf83LYaDIS}fZfpPPT-|M%e!__*1$e`TNY)pqLD<3G~y zy1-)PgJvq2@DX>7tx{Kn)vJv`6ELTRwac9JqNp8Q@G8^1h(_TU>c4I*{@Vp$+2H6% zde^9kESuKx?rE)+#<-t)d@mwO0-ro6TYhVKSc1G?)=NtprMd96<0X4y(B{c z>?*t5brm@5VDis~Ey}-`JJSh~;;$noy<1rVkZ(Szr{lYeNYrZqKrlu`QsFOWWLShI zK(Kq9QC!_O70TWT6gwBOve36AV?Yku-xj}>ba#uhh3S(7{xe6)o2~cM9APo0fLZUq zs=mF0Tt+P!+5F2n|0(~^9H%#628;cEFyL6+%L#@#)!HjP+2uFU(O4*c)GER}l{%Y~ zSd0_hpPs8i7*roPyYA+Eke$>jgWgjXOpeoL-Yd^;H*OyYHO1}N=Y9RwD!MBI^Efca zMa!NhHlekH5ExLGlhJZ0>+TXB8g8-25h}^5_mq!*ji-hwx**-PmOPMk(B4?WD_abte<(m4q^-3=wd7fQ^qJaHp zdntx$>VMOUs~Uv-v)$cm|P9W3X`HY^=)PU!|;5YDCNKFTqe1y#GRx zK#XMmwsgg`-b?W#T%r0GrPczDA|+JE=aIE*`{SW3T<)XVJ!2|HJm3O zWFz9eaioYd6Lvk)CNpHF&-3Pa=^+q&YRChvpY|)lORSW_7X{fWhEc?^zX|`tO(jC8 zBDOHb8LFPi3e_)vv$@w94k-!t8&THJQH?&pN9lX6Qn7QsFh5S1Xn2R>GM{C}rr&ri z&6}7Q0VxQ|^rQAT{btcJKY*mC@HAkruHfm*OsHK>$b-i~)J4`|;yti}x?< z$YP}{LjKRemH<1IJf@SSaCj1e$@<@^svazOC%L72O?ErTkg`5ENcS#hL7vNk&Ax?2 zfnNFiyUvhJnCm=v7h;6oR3IpjXnDnCjaT`Tk*k6LvzIm@=R$5=n?_~B+A{+r)WdYNnbt(xvSJ7?nG5z9NWi~M z0V4eT30Dj;jXYtcuP*sqtbR$PLCi-ntvxGgfU#a5(K9NfWb}NxoPBQzVnZmPowck(}*^ij~^J4knrt*Ao{H8upyaviq*DBq)>x}kU zntkq_zQ`iq${?KvOMWQzahRnTvpskB454)EUu~v!3nP$IeWHpYD|4C<1|{|x`@qwu zDrOK+yLKC$w2h1@~xA%@1nmPmZm zJn}X+_jR%d|2Wa0m37ol#oZiEvO|RWj%cJ*}zTis^BCE0`_i!B$+4dTB9Hu|_ ztxpc4A8Ow28fBQ(jDdaAqKuuR_HvQkCSt2dInOz_E)R4?nfW`jIZaTmPJQSj{fLqq)@_Hg{Fb@18}Q4 zzKd>G0_&F^hKOhBAOi~#o{C`>l29cnc3-J^&Vsj@26()tM)_eZOMX?id`iviMTZfy zzwx?FWxPCTt+eD2OJmyoh743a zT`l@<_ za%Qyo#IK5Nn=zr!@oZn|n}?E9Yl4C>77{T|8Szp?wNDfyD%v0Ecigiq=XlOcc5iQeW8!3g!FvgI~I z&}hir0w$h|ThQ1{e~EXeV@M65Qr#4)XZPp41gz|hrPg@Uq3*lCgdmsW=s zX}m{lE9;I(QA5@y8lGnct5IdUaZNDU=xbS@{Pd}84r`|yK-%h3v;i{S2WI>cP~u!E zr+sggOj}D!kxI4kl;-~Bg1=ihmL_zITcYQugxDXu2Ycgk`)GZzq|?H9n|pxSF$A!j zJ~l42g^|={Z^4AYI969%9^=leGKEnHN>%?Pvd9{?B=EGZeSwX z@X)n=e6-@iXFvpo=TP>s8wBIlyjn4(+Sp-)9Qia~UzHD3V0~mZSPr?q)Zw}ktf6$n zUItw-%*=~^P@A5?!Ni$Wmb|(o485e2w4C)fk?RZSi|06-NaCRTHBBM$E;J083d#m1+;{dZS&=}TS22H$iyX>yj0Ij9~(5i|Z=d=NyNAi6o?BfEc$HAt@HJnA%v45{sh z_a_DX%I>gl3Nqk1IES4cyWcvu_()++orA}B=aputkEZ7Vh4YsP9~)uRoNo@>!*EZGAY`eXA6bdFcA!5@6S3+LC_)T>SaC{(MK)4gFEI z&=wMF(V@xD?gG)yolJH@#BT{&NDq>JT$4(kY@ZY7Y(ASS|F4^S$%G6ISs43_+9zD^x(e;Nxi*+00cF2CIN(8pZdo=KW6H(FZtONi{ zHoedO&rcH~=?+;x78jL&Zs%AH_p&B4j-M>Cbcyrv zj!)&;pRM1RzRN7-oG6*eg5w5y!ypQf3V|ROF_x@A9Q(#UL)qnu%M;mC(?ZX#M#d4A&{jc@~ zO(#S=Nv7(ga9`@qeW(L;Id8jD|1xSL;Wl_UgM@O$6pFtgmVW&YKe9)a(R}V%q!62} zuR3v%v{{h{=DTPZ1*a&j{<@FVgT73-gr#c7nm!D_6o9%8m6TCKix$6E5a{*F?@D(J z**OcB-qW5IVWg3P-ArKj(mnf@Kw+Y0JA9OBQtwoR-v4vntx#`q%m2H09j+Kf8DXBWo@j}8K!u|-N*Pt^#o|$jr-+bRMT_=eM5h1MZ5O%^T zpAr-Pm}KMATX)4BW^4CZfjmOdt1cKWupSF7ZUQqC zJj;8GR5d!*X#M~IsKTSz47J4S0J!}IvaK$n`~dg@Z_Yr|DVUQkJ&qZe#pVW}&1-j_ ztcjhsGbP)dccrLDKT&;&bM7%KmZA%-UAfUrOk``NfLvfRkmV-Tc|OjAvxP!;US{5qu^P-%AfwjjFez(eJea>qgdE0|2-=-wIz2KX|b?<+U~gw zN7sDb$~dEFp{ z#1a}gdFi z>(m73bxm~agVjVnLyvRRcEic0;i&$8k*VsVP7+V-L8jQ6WvyJRa{FixiefJVEjjaW zZ(1!BUVJ%E&3DfJf8`xMY?`JSUSj37(bQ&ccjET&e1?m~F{U{Wcvi5b&xu1axm|rg ziZ+TY;HGb1Jsn6J%%sIevI@Rgp0IsOjK)C^=_YeEneYY!BBEN5|uqLdrSIaxfX6yOv# z=eF7ebHpDSyk;~Cr#6;aj)WKvoQ_tfFMn@^Cf;cqDuV6QP)TS8kF}KJXwcjL*2I~s z0#!+_fv0G@2dA;wxI$S9$Nq67JQnn*nn|{kLsE+-E3P4*Xnh%SKM=S7*8tkdHdAVd?82; zHt0JC;htNYH)F;$vjzR~Ro9R5fh?T3z*2j`N;LGZUkD(78Nf&jnt|g&Vp1<-P`B^( zuD-x=NU=wSAsgWfNVT~bR8b=Vo9J=&S{EhSf>0)cq_;TqXRfu%w?K`aLI0H*zOrQb z%7>sR$7Bw>s`5F$e|{M6{{W5QV*jDNCri;D8T;xoIy;6~`W=eG)I1s>Z66`h-Iwra z;@I|&|FhVwnb2_cp_bqoT2k8qHeBUhhzmx>Kalx|>ij5=su5i)+q?)7@R*thcK!#k zH>dTcj|WW#ISf?Uz9c7;z;xY|<2H*XyY_fz88z^;(Okrpw`X6k4@NmOas8iCM&sWz>g;9qr4l5v*hnDuHm*h-u5k!bdABQ## zbf9JMxa5e=JuL%fS*Vr|L89v)okVd~7qnMGJ1?n4?zvH8@h@Uaz|PjpoD_8`VSoxi|fC0sms~ZV{j;m4C zB5NR$=3$r&+Qz)N;;U{NYyBnCBnRVX2l=qK4O~jSCU)F8bdkF=c~@iE3J(#j-40Ty zC2O1MU4#%0oipyAf%G;7QXZCb@_^{lBauEJp**xNm=6`I<1XIGo?)GJFue4j$3Nd| zQ|+EH(|Y%Lr&1F&bss96q##sJpfG_59(Q5tVbL@{ zyF2cH3r|Ca{;fxiW}K>Gb_NXYS_GMiS~&SjbtTQIt$?X6DvlELc=$bYbmc?xlitzB zgVz+Y<9_!GKrgFJ_ul~UXJ_6}THi89__Z3*9v>uUw6BVrRH0N>f3MY~$>!7mIf4Az zWAntgQ!z;trOYT;gk*K_)s`o^oRy69PST3v-|%v?`=`M&w#U-_SqyGR?TARV(3F$T zA=q6v#m254qW_fCE=sA06EyezLRgXvB@srPHTRo^U;?9#R3|I*b1tWiZ`EfsI<1Sf zi|>He=8Epj_WtQX0;u5pnTK~2qH^Cg&&l9OyMWy$kDs$6g-f|b&LS9-0)561G~gVy zX#O0lcC*i_1WxNW$JBIpu%9H;ML5I#>@FA>^jq$sa`x^o*RA}3btcUhFp_czMBuU4 zePlw89EO#)Z3jJN{`$p{aXFzfW%4Dux!5Tf(4=D3u{MYku1FRr1PW(@FO|N==KQ?| zJ3tFUT8>h*cR^X^@#ouHY954OQUazsu{NO9teWe=;^jlQ&9>pxL^?UHt!c~t7?=ecEs+pA^&OGtWnZc5*w4zz$ZakCs3946SPiErH+(}6J4`AuJ93ihz7=le z9f=Wxi{lymyGs?T4x4T8G#x*eeR4=8QjER*G}v2N1M!NIS4%>M}RrE1TyBdGXtpsK}uG8 z!hCAODMDF$Jg%-3QQR&&9?q9Wf_M#}hd#SMqPih~${3adR@n|O>hu1WMs*8|t?V6* zI;Hx8?Nov94@px>en(u5)cuHWy)PgT@|`-8!ms(HqlO+d|9k(E%{}_E;N6{3;e;j_ z2WWG)ICzy={x^5Y&Ka?8;1J9d-bnr48-=R@%Ens#9wzxFb@?>x*Ef&`*E{&(ck9)o z6%xb{x&ZA=@P2g9_u)^A#!|yOn)7!PGT)d(0!3dadLleqI1}!{<}6Nej)N! zcD7z`8yXL_o10iZ;aDu9=eV;%xB1})5W^qA2?DB+{@}YG?cQIO!W&?UdWQ~O)#weF z4nrVr(fb!5lq>+23@cRTFECgOQjho^-A~4T{@zHdWEsxpR)c{JWdjj${aPQq30EgK zR9xlF3E@im{(Ll1#ZZ~o4XUX8zROp~kNq6Czh)c+E7IXIt;Y|EIzvmLa`BJ83Gp*q zZ8ElH;t9Kkn_Z7c;bzl1Qz!&u!p(&mjAL1U8%Lvy^~C9l<(q2C`{A#@Pb0Jx404P@ zQ;5xf^WD$~5uApPGS@Q%VCCDrL9}n=&twjE8oK_DhU|Ouq%2{7Nvt}Hi;!AiV=3)O z?;{l>WAu0EZPj!E50l53kNr!XF7ib~bLGPIkB1)J`J29cb(xhUxN@@OtM$v9Pj<8% z@lVX$eJ>~OBJAYL;M}DzDf?Ckw|{Mtf@cVmQzE@B8x%~_W zyYFxm9QG-Uk?UFsC#Mju4-_laBGF5BcJA zcETx|9B!uiG!iU5C-Zs{jOW$cqqT6Wh@4FcdX=gT=FX=jyJE24jA|#|ECa-~l6H&@ik`F)zA&IT?JZS-ovhaWF*Ql}_ zj382(8|6DD72&dIC;Mw681Ryrr+XtLy@=luWXocJO=WhxK*5bhGzOuQ{a zEv#M(qM56-+9gl^$_wY!aB~vQe~kyHZJ7;^Tu!v`{Mq3nK;Y1&n3`fob8Lx}S#)G! ziuatWuuv+KfLz&PyssO;Nk4CJt&mg1KIYa9OgPX|ci%!@K%s{frK_@{;7sALKHZ!6 zG6K6zXiijWUSL1f>Y|dS+Xy^mZ7ZyO@vTR6k{}P<_>qkrG;P?;0Y{OP)K0N0K#ekH zrKZUYfUjT2KQskXoT3irrb*6(lq9ty;M*#OVIAWMD2R*bvzLigU<7K2&udDp5M3_; zjYkmOro%h@{;kSTnHy1b3UAGT)9lm+e_fL-+|*&x4dJydI}qV-;X^@B0Jg(fHPBHo z#@ZabaFqoG^rso;g5KgwIe2KLG$U4^Sf+%Sgp1!x`*o2WlP;K~r&@Fw&2ps)0rn~i z15aEQyhsqb$s-YP3!&LBh#?OLJHotuZO4opQ7Bv2<=!Frj#CGm*0&E4vPdXxJ}5PvFvM-M1gP9_<-8HR^OmMWjbXRQZTdI7Tfd2hQqr1#?mL{JUn0 zCB{q@%Ds^17#^2ygp21U^&{6bhvh4m85CzJ4D1{dsQTO!5)|Bt`5+efj*7idMF64Y zXf3ad0&1>>Y@+X2QWv5iuMhgs`{xS9r6>O{NChXJpaB35r}EMwUKKk?G29uSK=w=v zvq%u#SJmco*V(r1Y^OG;09%!0BBF?6(^2H>}2-A1-+w$C~vn~))JSB@^ffefaVxADt#--#Ruu_)@8n;&+$}KvYoO0^- zcrxH!dn`k0-H^JMX@}k9wI1ajs8id!r;oV5KF3X2F8{?4|R$2wWpO1^RXW+z|jg;Xg{`;0@kRv!n?b L@V`LR|Iz**z#^r? literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/entitlementreviews/pendingreivewspage.webp b/static/images/auditor/10.8/access/reviews/entitlementreviews/pendingreivewspage.webp new file mode 100644 index 0000000000000000000000000000000000000000..31f44bd295248bb38aec0aa61a8bf819d6b54da9 GIT binary patch literal 22516 zcmce6W0WRMm+e#TvTfToyR0tTc9(5;*|u%lwyU~qn_czX_nmL%&Npjj?#!-BY~t} zlWSlfvsd;l`a(GdKnI|i&jxVU_w*zA>)~s5jrMKzbw~B)1^DSRC|Kh+1q6No?@|A3 zewYLGEptEhyYwLi4|*TI?!1wJA;4r{;Tjllr@vGb6ljSS+lkpj92k72w^ELS) z_yxP5Kk{YzQTiOaS$mVSoR0dCy8~PW#y(NLL9N+O1NDKlK({|()B4MT6MklQ_WR~f zIeEQ_ehfg>&%_tMd5KH)pL&^Jh0mO8uq%vNe$8L2U;1A=uL_R6Qb6`E(HG+vAP_hQ z%mkVPLp~4ggD%0|2p?mgfxAGj-swLcU%&blt_aV7x&i=T8qf%s`z7;9`Bi%hl-?Qj z+XS+Hb-wU!gq`#r`Q7>z0o6Z#J|q9>eV_dkdn0)2_u*Ijm-C$)QDAOc?A8v@_uQ|s z_j9fQ7ypwVRgO%&|Y5B4C@^wshUXtT~>x$6;+O!qL=kAOyXw5P?PBk?u zVts4M0XU@=xD$en7~^P1{`nFZx}pBzEAzppzYf6tAOiC<0oY&q!+*ws^p?Z&u|1p& zUDCvN^slaz3&coK}Gbmp%c?Pd@bn5Cvkt}FFI)X(CwW{u31<5 z2}3GHfiqO9ky`fmF~B%#IqR{QcCk}e1Q-c?A&V!La5geg@^2%W|N4)J4FJw(A;_=c zDgJFC?7sXT)71~9Kmac}FsqykqV0?A9BurX6d~=EG;xh9<0uR2NeyUmLj^3`LqdIG zLGXl`hHvRE8&=Z%57Y2ZGt|Lyk5{-+`pdaj#)M;}u0z@1MQU5C=AA{)AD>AGA&m%1 z774868^|I!;4Bc}+z;R}_+NEENsiuiZCip?(AYE7`6Bke3PSDvAq=|x-`tK1SrEox zF0W+EjMnrhYKXbQfm=&~h_Ez7H1uV?!bywfxpPdSW;i&7HZL~zWY+1~L>v$loy8RYYnNL`Ih~$PNC{! zs;{ZOqWWmk{l8tg|7NX0#!9S{B71YB922{m_1)Bcuo?dm9`JT-bcwJZZSMNN2M28P zB>q$UzRoh&kDisYMf=2!Xg#>r!t9l=yoS`2$siwjNYXMg3?gQ3ElGToCOjijAdlgA zN;mwl`uuA&=gr|G;q!r=E}%Xb7Hc;MWUl)TmG^J%Bp3&ATyID3w3=c+hn631q?sQ5 zOPTFtt62brE1$CV+Y4j2C`aP6|0#PLtw4|0oa4YspbmJLn6t64W}=XI3~a}4StAHA zRUb>6hG@GOulM%++z|h5JYUxYm@f{uy`4W8Wb3K5RNQ%MzyCDz3)xRoQV-8(4_U|p ztB}8wKW}8`b=leFff$Le=g)13mLe>Fo*}^0{QJwWkk2i?e|PI#oqG+l=2p43+xqfN z#@iD>(&Jb)^%<}U*TDKDus%58Fxa_;;~%})ZT>0RdL^*B6#8Ft!l$nn#PrA;Dra0+ zSd>FlrciGH!j&yQX>(&Xo5AsY4qb4k9<>j&&De6%J}h{^V6vZZ^NiU~C+5VDrc_Ah zJz5a-sdE6*A_QYTeGbtRhkNlOd7}iOBKPFpeylKZv>IV^dV~6F14N%wnoo%c{smZszre~uG=A=LFxwA+g99U^b)luCQmL6V+x}n%yuf=y+fwB z6xB<6$m*~SGJ&f;THKW@pYFYEY4@Cojxm)OXL!Alqr-Ny)MpOkUkp23R%yjMe`E$P z$jrMWfAor1AE$FfINWf!Vd^&PqXQz#MdmFND)z4|??oWz0cPr;3Wwb(85c8#o4(sv z|0?ul+QbffDp!;(_#Qs@SwXvwck~Xb&gW=_T4upTph&#<$_l@ z9y@mf<8B0kMWS};!~7q?vLdatW0b09$cfCs>o0l%Au$_lzj|=$e}vAPJw5vTgY5Jv z;s_=`u9A{Oge)wyLM<4FDl?eVSussRYL{h*d$$leajyaQ3#^e{0o(Z1+fV>XG^2_S7rT0vaHOKr0F)I&4R9g|^^?iF*{hS*sgso-eO0 zC?UQWkzJ(4z<4r_`~4kpgcLhXvh~Zr-bO>PXV&fgMl%7`)_|_NGNjLFqGNT5FkiXL z=z)z4q{Y=gKI6F?$YqBhMTqMat%`8P#R=lq<~C-EF)>2KkCv;P&iNmHwnz3L@0uiM zd3+Xf@rp^@>zl}Sp;Nt-USPa`b4OnyAXR&_{tPr5kqS=y<(mKB(#D$vn=>?f-X^}x z_{=0KcM?iiE#A}7%ex)KIGy_ABkxWY%<%wMT}?v1w{xm*0X#U=RfG=ph6IPiaI zCd{JkyI>3SUsB^=3;!5k=Rfh--(9wHE`sF$NSnWf$$xF_oqh9P%9ww)#)s+}e|G&kEHGj z^vxJbEQ({|f&A}<@LJFgtU;xg48dai8JP2hq(H;A;eS>1{;709hB6k-dqyPe6Hi#{ zI^LMobtr9L?&nzi4~m;jK3;KXr;5OaSF>J|A4!?oQvK^Uc1>J2!JpZLGmtp#01f0M z^8Z$y{zJbb?XiyTdTTQWxc^nL;pB6QhmQyJlgfJk9|36(0DJ)_kpKXIBrCqjMQ`%` zl4T8jB59~B^b(f+rp~49UX`yh3Wf7v|Er6D{*d8M2qVaaoN9;XWt=Z>6k0LhLkjoK zu&U5ue(t{8OAB-IPQqXfb++B1_wZLkQ_xNa6!7;xQV?24e&}5nYGsXktRIdE-s(Z+ zD0e}8DEiTQNdnE2^djgV!W3qa_s%UF7)*-wNNgkybj#wMl~^~NW>^bHfG-E_%SD`zAl?j>`peJ#xSv?jBy2qkWH~2262ck z^WpC`cyy-)4yl1V@zUJ+#0g+Dqihm&EXQE<;cqZ@R|F4gzD7@a>TPm(fzT3Zvqso) zagRjIqB`ul+8MG%bU>1gz?OpfGrQ}}a16W?te->OUu&Rc-(KvOcxNpv8axi1>G%B> z*gn$lI{5TH5m((cQC(S{g{RrY5Bm%0t`s;1Sm;4qW_Pjeas?h<09a_eHp&;F?42{a zjE$PXF;ilgo_upZOr4a6k}D7LBS>c+CiRlN6ui@O@>SbuE%t1rR`Ow`BmCY@NBlfH z`I**xuxYJ`4WR9ZS3)6Cy>>h&wnR|4y<+fJbJ32mXAa^LclLKUhqvrLOMrS(BPN>U8W*NkbR9on*4$7bo3^v<+HU875&--`;;5F4pV2c_5ET6e<>=L-L+C`^TE2a z@EB!~2kZKV(nAM??i|S@IU;fhSbl(|)c>rrIk4RkOl^iRboMC_d2JkdV7FRGN03L9wqqAP z&G#OAZ>~L%-~iHdtG)Bz-xw=an|vatgIjs$)qrT`XJJkYJC^k)L_<>0p`B~3RT~|( z#@1Ei2}xCA;X-B#H*`gbm}xo2nU;pL_F*X7JZW4EFi;qQr436zSV-$8OzrD+t_1+E zN|$^ufdJaqn_sv3E$UD)lA>r-@P5>qH6piSdbdq&Gjfvkq0TR>$-+GfS4kRg_a1MZ zm+YPOc+O+8OsoNR^;auITG$kDP6syH zRj!8^E^w58`%b)YSX;_&&AgH}KMO=hf^Ii!kFgv!b5BY;CP5%d|7OZf!5;4$nzir$ zcu2#saR|2akkNMIPqOS?`SwR1Y4>eyZI7BlJYH!Fxc9H{jy^*Yb*Asf}eM^ z`z%X0$KQ9i-E`Y?vh@Oan7>;~9|BfiS;@!UOf4(i@PXJTF_6&?7j~4xQteuU<+Bj8zz7-;Pxvm3f1b zWj6bOj_`AesQIYbp{=1KSx{#R6GElR*!n9`JH`cpUwe6kR&*xIS0IraYg5r0~I4k_Uk#yqB-}v z+>w;CnPNo7tz-nC>uZ?46{3{;Xg=j}GyfQ_AHf-SIpV6Q>HMW>Q;U=c80Y zzu#$#ThNP#MRSuirhk(zKgbf}72?YwO!~Sq+GMl{2nL*@6XwU~Y*G%GOJdBgVNXFp znADJhoxSqpDcdNvJ%Mi+0Mb)*DE%G0CHBmKUK=SL0E5f3Q^!4;8YOeADWVwyHH(F&B-}iO^PiQIV;JIOrhqU&6(A2`R2I?x*I}*2sD|f zMDI8l=qBdCR>eP@_GMi%t@paga<>&ZpSjhg2{n1PQfhEx_lUYoZ*&A!*JBC9tGqZH z%yTW+QzJ>~)%ezPRxF}au~tswJD!@$-oH(d4gqg@4~Xp4Fjg);zVI!w?<$8oGyWJV z5H8E9#||FIo%!{Xu%4(`6#sPh4fVxLBgl#tXSF8QC_!doY!i(+k1^Jf2@(Dlx|T!g zwSA*x_NR6YZ&8K{KV*`T+$6~#9yS@eEvP@(sCDPT^LIMvyGw#LMnuGf-O&XG1szQ& z+EeMW;A_&k{Xq_>5GZr}IoRu_cf8;vXM%^2pn4b3U9m3=T~d z-Ni;mloCluIHpaFRb+K`snE9cnjXbA;CXcuOxof0r{d zttEb%Fnojl&Ql7xTcos*AGXn@Uu>SM;s$7Nqz&}oK3mzFZJ z^Mt7W*OR4V%Ft@PVETIpjkJaORb$#8d-a4H#mwDdx{;rbjlT~BKtmBi4MrOeQ12>D zx4R`Wj7?+ZMwS0kbbmJ#?iXmb%1IE;%h$IAFQbO6^4ESq&RC^VnCM%&zRyVx<)`$w z+}sSB^!Y)CTOmoNG8Rzb5Yn*gE_x>n*U;Z7lOj5pVubht4C#_MRTL;D&l*UaSr4Dg?K_3E0PO5H_9c1a8Ps?P-F92Az} zP{%sfRw6G^n1CpOr#g^Y#dbZGhIFi|gW|Fk$J(jVOVsIvM9Yx1tk6sTahJevW|*bw z8E%~M;MGY|&BV8ws@2fDBKlI3XU~g${WRFP*Xu&`e`cBXc&m<2d!6ipkw5%JpLU*o zGS=}kb!1FkCMG@~TT<~g$9{W(Yuwm|*Y(cJbydV!D=`_(YqCWgOn_>~kLZgx-;c7O zTV`>Ow4>QRv)p!52=LQ@25lA+I7wbukqd*n)6+r;uDO=so68Z8_q;9A9e5|c88X^w z*#ERxZ0n4ROgwv9T}k|eBO|b7m>f-&vR5gcnnoICtQ%L|ipvVdcFqpn{ud z|AoSujOG`mV6PpUMEXgGnQG;o80S0fn9#C55FM4ood^L&%V)k3A&ZPNE6CKV9 z)jd}s-YAhTV;8O*fqih_RF?Mcik{2s8y6>sc{1`CXt?jbk%qh7x@XbZ&s$HbLagYj z%^luqngXG^-^5^&z8EX#>J#E$xiaICxn&jyy=Lu08T-Ooa%NMV$vzUKRPit7`Gc-)VXi&E{8YwLJ0>TvbeHde{o?rrm|EVA+q@0ld8vLW zmCxsT+%34FvwUF|{>Tm{u9L)`(NV~w_>+pRn8nGG(J7}wEGp)f{h5NFtFc_GRbaF0 z@WEw4pKsWR=)k&50|8omw>MKq5ESYtZ2|wsQhOC5r&`kB7jqJslWFVc!_iE4#Tb_@ z8VB|x##HkD0p3OzwNtbpHaCmh&ky9AoE1C~%LWaxo8n_?#bBQ}xGAFhDf{X)yTS~cGnIeiDCf-Fl6c{gtb>i;KgEFSGkzV z5_gVG@nRK|uSx0KsjyD+p9eU4dKOl;HbrfhpX8SDxsLSU2mB{~^B!f?k%L2ygs8$u z+Ml|9di;2;e5aTv8^q(NR|XOIc!*fKa_vj$>q>P6#hTJkPSb0w&n0HC&sNK8-d}x^ zird5T%<&TqUuLM9u8A1u-$1ui%k_Da{+fC59!s<{)hJy0OPwDwPVpV(h?YIbT^;)|+l11g^A zm&b}vFFFi~TOSB>Omy*P`sbr@c9lJ|RZ>l&Au&9n{osvAf!QYNR`Xw)DbSgoZ>WKZ zMc}0=%CWo2%5^PX5`@3_1`Bm#LyKe&uy#@MH4%eIxHJB}f! zEu>SWA1*TkDqS#UYnj)t{@ONnT0=LQu3HBi0fP6d;JIMzGM|5L(4DKcv$?|LpP|N zjX9G}KXSvd?e99#@B4`0N0g%QbkEPFiU*WDl&AP{<-x!mH0U!*EfDqK{NaeelnDJ{ zwO0R9!f7o8jZ2PK!pVwLl<3!W^ZeVPV>Ht9C@`T*E&^Q;95HsK<4hb?85WwrnGFA) zY9{j*dP$NyJ{E?Hfvhw#h*!`bq#0;u#gxU}#*f91&{3d6`i*|f<@z{PAbAu{7_#^n zx@w3h5NZiTiPO>|X~%euD^0jv_cO*ITy6-T4|Iu-5(5Ahto|@`XF!RQ{aOV>g;Hk# zje{sT%j%5#%BFDG_L{3lbs}oOEG|EExD${J+x9Mobd0_7)J$MP z#h-g>5*fL#_+-;ajluG4NyTF@wy-v6W@kSJZ>eug7R^%nJcjddh13*Vo6sxtd)8dQ zzPlY7D2P7v0vCmo{nIm|LdvgGV#6p?WFaLVduS2-h5dUd*$x6s6L!psB+Fc)4{J}P z58yI9nF2J+2nvm4^{6wh;#n7#(&qhI%Tysv8q0I3^LGg&CW*1-@4)Xs6j|;P{6Em` zvXjx(PHXxx{@xEZWr{mJ2QDTLlrg=ta;hy`u09#*=Oym*fc=> zYnV`dYyG9~VQ^0DAwj}^nKB_+Q4~tyjN6w^fLc><=s0u9rs3Vwvb`G@YxS62O($$$ zRl=6)r9a4k3PKrrh@h%NkY>$CK(ZgxIs?5{3wb=` z655Sa`ds|sD?k{24@<;$-s%Sk$GCRYA8(aFCBdHNCRUM!hoMA+2aBRTl{v`;!zCkXneW z{TAAa)aT1XOK?aiHnMJ8;qT2CEz@Rp1-ad?m)*GHlSvdgRH`;~qe$f(A^x~dylLlW zyfmQWA={ zBz%$Q1vCpy@6PC*h-S5u8=I-zlQS6gWKkZvaae3>V8O3cQ*`vtUs9NqCvgsZGe32? zJJgK~7<8nd#I|q~RXx!vh}~RH!sI0(bFCNQTQJZj=(#`+wFdd{TKmb{i*hxqUAb&g z#})58doJYU7vIkV4z|TBT=gzj;DWicZo~^Ut@`77wxhn&;TC27#yVILsr%|bBeZ9y zu{+=hal(Gl8N*tlax-|=eO3_a^jbBps;fIj(p!6KCF{U!Hf<%jedxvh(^f@f5@Vme ztn~}R&Dj9Zc6)3(q+-Q+nn11Uxpmo?2)&Ia?|%)$#_aZJ=S_Cjkn*0`v9+uY35qzT zXFL|;Z)^W#^P71_BuVM*$7BBk{Lr2~R9fj(`7d%}UE z@>|xjosY$RX=KH$GW#@>0_H!MvlyAHZ8Y~Rp7~-A%A(1+o8i6vNH<2MlY5JKzE?G# z7iVVl-yZ&IKyGB8krBJ66TfuD$>_qeNqb!RK*1h2_VFE3%A%AYUaHzCG0DK88Eg+K z)wgT)wt)n{gTrXM8j<+<#FiVxV~osaVpxuxOI>z7m2#6DjKLt z>*_?D42Jc>n2nw8$M@rGM`;#vNTO*#@xu%yqGx%PQNv_DwF1+R(b#daXJJucIxIFT z(^P3DW;>vMvhEb>t~r%uH}yGb(7c7V#-$95n{VWXvW29e$23u~A|U^8S{aRbsYL0H z^NzTu_iu0RFEX^7MV_zWV8-{bj?ag0Q;JP{sCE*t_^OJf0M{q*{9IkRuABh*@!)WZ zWDjKw)Q=*e-Ykag%%_L%DC^$bCj-aRS(d1nHbR~h+i+dm6R<+CWUn^0!yTBKRnDM6 zj#6V(mU-uQ|Gdtd*0~n;`?+EyDB2+Pep94D3Slg*niBnk3f)uCj#nV9x?FMd#s z*nq>%9o53~l+C6`0oo3g_!Ro--m|}11q|ccJz2-W_#ByOMi^r?((SERhcAJID{WM* z<#yzN z@^dGOG_H`9^Re~Q-`HY3YU<7`?k3~J!{KSZ)mwe|UkcKBgTuvnnCqNg7GW-6*3>AQ zu!&Ud`MEUDf({FGjf^q!P|X`h8+g@(0>~2KsRkxwigdbft?*sqUtS*&Jdkf0%C#Z3 zWO+6LAc7{WVh`>^0}8Zwt^Ni*lS`2VRVROjEOMZ^*NuS>Dzx4LrepV@%kR7w?hy4o z;FC4Dy})8XYrB`AzHER}SQ0)Z2|yxF++plFk=!&Jyi^=hdcu8ACTSLVqqK7LnfV80 z12QNyzB|Q8EQSBhVz@C1L^*hNG9C z*sDVWdE%%@ZoW4!2`=5Y()&^;u;@4TG$Kc|iTRYohuNQ;l#B{t)OWDf`!ScD@4Bk7 z25;eDdygNF#uEmO%DJz2J8u~a-b>JXSin_ZhUWJ?*Z7nCS8$*=M z)L%gKANM0(vc7Wqj@7UkLLP{m-hn|eL=WD za!B(OlkZxU+rZe(To?qa!I3MgeqsI4D)HA$pE*@;67-4Qj6Y7Hj#^k>6+z2r_Fa$m`q&-FU!RNdz}iC4pRM(E#V>3rU5@B__x5dPae+Dpc_|KRgD5bq`RmimSb>7-lxTq^p>#QW@cZ1L0! zHJZvdu($jM`ZckRX|+1rj$ddBeSe4BFq-sM( zv?lfvYn-6uGDiw0(g*el2n1u*>Pb4ebBORxx;K_-{ln1ZR)seu+REaL88?1r6fR(t zZXO;P+cJIW+fi!eBSAGJX%TJ4x&h4`#znam1fO{70@C||aM4FDy@FrmBnwg}rDm=` zPr}SXfDp-GBR^N*g+k13`WHe z>Y`JWq1AAKk4ytLMJooQ=Y0bcJ&BAzcj*u5osX=5r!!q}PcoO~B~j+JW=yxFF;>c! zgTVRy6i3aCh)`SoM+m1ZX4ELi3pA_M>ZSnVOL7`U_Kc0#N34EBUf%u`)F|Si6N{uF zhTDh%qh3!o_YBSDEHx0KA>}vuI>@m=ot=7@V@)_9#XA~ zz=sw0Vz`V+L&^B%`S9dY%5k~Hd{*(ZBalwphwGdd6}}fU4e3y7h^}9CN6gr)AjfrG z*l!_d_h63Ck$2%d^VjAbTbx2!JH_4E2Fmtz7N%63=@XKBfRWJzw@IYZ?;CzRNkC)J z@?)W^Yqn&fL*D*|Uul{mJIno@f`@E|ZYg6Ics<8Hr+8W={h6n<^3b6a(5o}_etHU9 z&H9=-j#JP6XGBa*0~CEmNVHjc!B@$zHnWBwTT0vnR;u=1;Q(lB_D*z-a4N;k$osd5{7Vj4K;r(;Cni#Pcpf|$y?-J4I5KQDIzD)uqT{WGJe4*Yr-0C}FSe9L& z4w+UM_zHFKKX$IyNPmPxD8L^a$665Cs5Gs0Z%Z*yYnzD0+rOaYYKLNM8yReCPFcAbFNd}*DOo-m+8PcScL=f1}8@;04RROJ=;qa%Iv+NGsw*FBH8|j%dmx7`6TKg-LI3Qf5v65{&-Vd==(# zq3B4&a-m59Q>#LWUDI1Z3x`YMtuYkMsCKD_zI+yt)IfB8MIHF`u1A;^VzV z0AeqnvjBlxx8Q=oISaZoyT$S8S`cw}HmA;Qf8gNS#{Caq%xg6P$|~0S&^!5Pn1DUkH1Eahg!0bG&mN6-!(s2d z0oXNY$@VB_Jl!TV(96nDF|1OMipP>6`N$yEQb~*m{DAsxdZuad= z`*QP=xIq{iBEX{>T!OmL|tmSL)((;REiTj?sXqP z<)phq>TD$43x4R6&(SZ51p7i;nc6oNhN4So)RyFyU|5v+7MjYiH&I}F54~WU{;&gqEUxQa!fXtvUbG-{tHg*RqV@h-p^qKbkxOX2%*yBQ2utbxU2|B>J zYQ@s0%B(B6%%M$!4{eew*!}}x@rq;O<|F0@+kiGpJvZhQmOoyBc5dwWZc^Ut_ic{2 z7ed(RVthBJUSi~rVoF-q30FcR|EB(-4cVSW+Nf-JNVgBMr73~V(*viNiv=f&4qbQ@ zS!(780F=gy<~0%3dGeOXF<6KFR#mD~{fJdS1zoRUvlA}Ng^pCI@9&zJ$R`g6F0F7E zh|`I7J4ft5l0pf-%~H+F*_||^xw8qCd1E*GC?SZuiuPa~XVk(GVn~oT@S5?)LEb2$ z@Vf=ee82c-Q2Ms_0Xnk77ajavq-SI!9TF77O6B4bIs*3cLPX@8|9+MtRMJ%6LicVw z0cfxi1fPkQ(vJl@k^4!_(XIjAfDL>PxADX>j-i&HKPi|G@5zkCyle;G~W>P)nIPw~dp~1-RW;%eMTMEG2Jy7MCT#NDG7W{>=!`LXFid zUTbVi$(Ky7Zpj1vg9MS$z}rA01r)K9_`9S-&|h2vC>KYUwq-o6H*2lb%%7oF**T4* zT^dq3=!V;7`4}Hv)Fj4Xep3BTTO@SUrblP!c4!vF`HKqQV0PSsHJ>qIi{b7yS^rc5 z<|L|yg)3r(W#hcfX}6Z(nh6QG79EQw&svT%r-EH`WYT4HnL%ORyXlADM1H0tK*DEi zLsHC!o^l)chC6?SK%WO%*gJ@9b$e(}W-gPFQ3@;$u0sjK?^zu!vxcJwKVgH#>AJka zO9+QO@q23a>#Yy-7vwc>Ox0ll0Qk^dBic`@N$!@c8*ZjU_95U!TvZK!aBk#fKtDuI`2`nM zB+tOEn&*)CztVFPq^=46?Cjyg;YP%H%Yw6}I$HRQe8e@-Hr~~5LtuBSqMtr-HaV!l zv_ESDY=^yz<#`z5*l}n2NF5&kApJ_7+}(jEWOp!yC7`XjsA_`=RRN`a24?3?Qh$_VN%B%_x-wuHSLgFcV}w7mUL4 zTdozv0|^m3_k$hJNtdj1)ahKbyOij;dd$fytkWPa?thxn`2-9Oe*WbZMd)f>o(CD8?YDJ zEYq-BT%_1DT*{`!X=$G1O94P|qMaa+-WEi55{7KI(0ZTuY*v2d1r z2m9?_tf(-zG!Z{0F04+K?z#~RsT}pa>gLJ2xyN{OHd{LhTG7eS3kj&YMi>qpWg*jgNtdOBsp^$ZvfA(aJmh%Erun9KOpzz8K+5n{5-bo3AdkI?Vsm=C<_ z?0QC~K3H!ys2E?CnBJ`R?YXD6bnz4@7Sa#!+I)~@g=zFb2p*zv=tNb|z9cm+pG7dG zfH2EK?Pbuy(hYOhuVndHVUHeET?vJLNxAr~$GI2BC)nT}_WEo6h}b5L8i73a^f|jg zhP#Mt{z$BjvLqueTy@hd+EN00JWkL+5DdRd{wH#4@0^xipL&pNb=@$Qbl{M=o>qjK z#YHbYx{S45|3fv>nqHi};L8Sl`4MLDbepxbDo2Y0txchzhBh0h-2i(J>Z||;sH!vW zLrGbUk`9LyHfV`4?m^-Z<+==LMgFNx_34lIj;CCh?^DRQt{kngczt_co+wqtq5>k z$x)wY7z-DwmHkflhr{20&tm>ODt3|Dob5p^ASC-illFYcV=!&Fvvp5psh<*c>q)oe zKYRAre94~R(JB(n>kOy7VH{i~d9Z$B7!MF7wxLCn*$JAQ9vQ(x{5a;?#99hEa;bf% zXEEInxnz^X78BY0Z7-9MKU8}6jqx&{lJ>fa=jLc!Im|&=7IGVpEPo#ze^4z|$$jR? zj?m|^fqueiXtxTs>$wXj%@vJZ z(WZ3bPgH@D^V+UOm>$F|44G=!TrKfQixWND-lGbvV9MzY*jMm4W?`#JqCo5! zavf=!ZsqS#nbpL%166k+nP$W`=!^>h3}<+vduBzlJDDkqlkGefe=o0Sn@xgwp)mGsNEA|4qgl>?V2ZI#k`})Kc~$83=M08d4vV!<4b*b z8YA~=Df~R)Sa9B5DDqs)Nuo=}+`qTAHH)&j@62(f3BXvz14r zSKILF;0-T0%W-aeasDrTAAX6SNf+Pne$H|vK`_!Q!-TylXaM|`;6MmO&hb8<_!`jHQ$+iU5n)2j zt6ujwi`OxY*QEtU|uaUsvZ%T zi#XPH?6%ADW)ielxj=A24Gs)*SZx{ zOcAX*Xx+2W{lUJenSuf~&>=>JNZa7*u#b3sd<U<#GJiic1$Yc^BNFUyhsPWmyAydv7(=#^e(I>2W3 zf!#czJxsC|OENR_lE3e{f6f%Y`3R63_s4Xz!l^k?OmDqyh$F8EEcS0fe)8OPqo&50 ze1^&x0CaeA8kR1Pt90ReaZwUY4hGZ#{tQ*>BcV^-AYxw&I?{LljEZ;~=`cuF##m`3 zL=8Uu-a>P3G2Qf{5F8u|Uw(T#`W0_F zfx&%D{zrdOz#D|(l2L-W`jF!h5-g&X`OAIFhIQ(pBagTAV^}PCtgR z+nyR5GMc!9hT$1@ccw1Ha7%ExVsN*^xvbwkJlEeO8^frUt$tf+&0@g=KpUfqPt*@{UEXQ0v@$kDzrr;!tFS*OjwNJDTbGU}mfX zq3no+NHY6#kzkH4N4Q#>a#W5{7!~J|Oh{(#z^Yu7aGpN(_Y;VKU|_sUUC?i&>_3Cm z)%@4!+;<0~k@Yb}@vm;ePljZIQpZ=80Y7|q!W7(6T{kbt3VgjT1h-<>;Bs zE-)gLAY|4TW`vSpP>7hBjwy^ZahwQO^*;qy_*3UrTCDjXR(`DWlRod3CICT|#-;hA zBzVJ%qv#?Z5l3NPJ9--9qx>?2hFg*&P$1RkCgC|Z$3JA z*?2Y!4W^vJD z#d`nX5HVRf|3W-vI(+NldEaN&Z%LdpQzP?%=ZNNBSb_B`)=MQ9#Y!{Wq)a7uS#= zmKpp3ogmcqC0IXQq~gYh&*6AZ@WzH1A$bbI9QI$3BF$>r)^0QDN*e zy*rLl9q%{TbYyAeM%Itb7V2I`nK$aVJ9pH+%W=RQ9@0=+V8M9fI?+422C2>-I4*rY z#JKcO%<-vmf=b7imnk0F0?_wE!i*10$wobq1}bAYkncK zJ@ca_%9tBdY>8mmMagc;@dO4MxmesB(25|9hU5&Xwh5#7Gl1((30X)Kxk_9tpW(>2 z4wA4o!D9ye_LIxKa|^sEG!wIi&A9kLL& zq-Mcir*i;wd4r%8GeI1RG@lYXfX!49xNlyx*j4KKE^McR*6%CHF>aTZOuS^D7HVt?&kHps-E(;WH$zvGfj2RP4!xPlGRNWwWQW{+81e#tGH7v7kp}T0 z`?r$*_E%6{{>juLLF1w+F8gK{&M)pcM*AV3NCEDqF~sfW9!2D4Axp%=y#rH5@zpm( zfF)^xWeN>C4L0=!DUgJ#CMxnQhHU8ma%dQPc-O#P4s-N=H(qcoqxK%jEvyZ4PyxWD z6u^SV>ZJ%d;Fl){sNKw|$Wc>d9N}FG6*X}T>4N(6GGs@^E`-a-3o)3+7%($CRC~kV zX_F-!>kFjWU=)Z6oSHLEp$zZCd=Iw*I~qt{ncl1MROa1-LR4#9jfGsD$YF;^3@a({ zLG(cno;_7~{I=*wo&hWowM3bH=5w~GP)ejYnTGDH z*G0hL%ro%J7{n$+d(~uMvmzHL5q`Gu1g2F7tBnZz!Grls4M1JLr!uaKFU3;1Lm>a3Sp4Zm2;vraRgy=$ieJd?O;PE{%5rGRW*dHfAB93lJmdd z0Yh3~#?xAIQy0r~9NqdU^$oJW*e)%kDWR@(f;Y9)qfx^GrD56Nd-)3hiSx{zNTkR0 zcyeSLqJt90LiTw9F%?AH!c>AA6-nH!ig(b|KhU8W?&ieRxLj?>Pvo*m?pw_l3}Kga z_pm&dE+uvAcP<^zQxXx$NmqwW<*uq2xAsWup9AQWpB^T6Csg z6DK6s30=9&9Uq{M#GyE27p%xj^$q^WB+3@-$y_+{f*-kgF;Pj8m)URIo{z^ zQy^N^FTScxNX+Sh94ETU@IgDQqV2V6PgA`g)MIgdr_iIGJE!&3AB^XHZ$Io?-B>kd zytHF}5lAtX-ekxtr;W$)?!u-x+GZRK7BBlPSk|di5-YLqWsxq!1R=-3^$V>A$v#K4 znnX}hoP+bq?k_~qH}=)5S?0phqezw6>4!0D>8w`15Z>6UeAsq~g5NHzT*Nu9S8fZS zqvKc4k|_WuzI|~pFhO?pG$8nL5q(GyCw}t8WU!JIf?BitH*WhatTl{1R5ktj;gQ7H zjXBQG35$iQq zC^trJGr6!7t%@v54CBz=KK8nq(-SIFQ&+2G5Q(I}h7$}FI`Z=v^$!Eke_hGDf+uN6 z93LdTQT{Dqc#Khgvf<6T(v=5Yjjf4t@aOO+WFstOS0N|3k{y6O$_zleV$p!jyS z%HDOJJ$t`_Pj6u9-vh$s&VUnLZv7`fwRLE>98Hn1n=_9Ls=M`oz|Qw>;T^Ky1PZu* zjNpp!1K8pQ`Q@x~JuFX3o9s)gbB?Fm+5vs!TS2YUwh8MBZ#~tRZ1|)%us!pV_&Brp z1twE#qTi-0Lu!Luak|1pU9w9Tm8E#f!AVp*9Krh`FRO*bZw9-3hQjQ8o2VYs4_(Gb z$6$B+DxQgu)li7N_crpDMdaFVRq^yNF=S59#82ye^9z!Dq|0)+zdp01&%&;3SjjDJ z*JiD*zX1kZtN8V~t zBPeP3Sud;RsCud3L=W==XFv+#nEY+3Z(%IJ+kP}DQtVRw=&~rA?S3{VY zP|#?(F4;-I09)@XtkD{(L!=KH<@^fN(qao=$8AQg>~fX6C1vB;wiqjX?p~x3?xOPs z5?h=+xhwdZI+Nkx!b<8KPR3*b^oRSgm0mXt}Iw|%F=-r!o|BiKxI>P%LE5GtnZ5DG0opAl4ag{&>qui6& z663AS;0I*gXVat(_&D1DTuMy1JuK_HS9iGFnrhFS)t~2u zWc*?-N1SMWI)%g^za9j6s4DnbrYZT9G@32{`N6o?aLLdV z6_w$d4x6l|alI-=fscpYaU)kj>C=~$pbL7cte&Y#U!l9WxIhkdHfn<$!&5|7%>ye~ zyTcMq5a^2|!*|=_knVFjluV`t@vVk)nLm7Y?8(8cP1vU0HTRD{Y*DpvFg67HA@G{p zvIr6@v0)?gIG4=?{K8mf&;<4oou8Y^nBJO@Tg!2w;LABG>sSSvg8Ab1bB}oo>B5Ux zQHby2)PU(4x!t*4%xAJ@F8Ic&1A)Z{S(viF-4W;cUaT_^Yk{_&2v!8>?=Lr3%mvC*2q zbuCin^gRB8mdPiySma^g`1Ie8YSSGk>h`cXu|TR@XMW5cyX*Gz_gjM|chImDA@QAl z+kO&Ji}wxh!9^qw7Wrkp@MW-A zi#0Hk7{qI+h>Ql_n24z!L^zW^sfi@b$$xGM(k#W+e{O1HzK%-^rWE>S#4u(~*Gs*b zbSssFdC%HDHW-A(o01cn^Z^OKLO5$2n*e_X3dxox-MGiQ?&Y=Vy>Snq{Wm^L;t+PN zuZYuAj7Zbk-2{eT#kn!vxznO!!rX=lv?i~?UK%ttm~}Xy`k)mxI$8$L4^q8>pW2zO z$q4L+3IRKt9ft^k)C3#5W@zGlw3n{o7^cn@f9?tBu|LyaI=LU>LH7}J*I-s8sG?UN z=y#UMV>149MQC>Gd25e^Hox7em8For0ePqFGU9s)`7D$%WiC{ML4aA-0dcRI5#Oj< zeaVyLa>e31Y>+u)=t?1%h-8clWun#6`j?jHXs_+3n6(Ibu(Pc+N}9JN-*RxJB>ggC z@+v3XPb2zV@t#c^?}AbC!n;aztNvRCM=+1Z_jil70n?JWDBi_gEW<44z_Y60AR40V z`+T#)tj+cXt|Hh@=*WD!|D`t^JN(9R+vm_z8L|kX%vf)bM^?ce8Z`k?+8jZ-JT5={ z@O+bpU%U}HmVz$35mUVODwh{yK{xFzv()bjePt5Xx_vMFymXMW89gD60d_OA-jz=0pZ{f&L zDyClbP-SE`I_+JNk327K+UCMIWXG~By`6TPV7xDci*$#at9nChSvhJk!WBA?f&4Kr zwKnw6G+aIFsStI&s+pS^szmXM%qvfVp zF!k|lg#qGZWopOe9nra+fN7Sg8R(vVPeW8eeW&ZYc_-)FSAffyb;r$+`ev`MRQC{9 zqfVQg2S?lkOv%c~O{6i41e4c!HDtHNZF@ocqSWaGxTpC?(El-z=ztN4Y631QpI67m zDM?$y~b|(jFj%|`2sG>63q(S81I+YF@3FJ-(0)35o>Y%iqwiEJWAj5+*1j<hiKEQPp#b_<1l}~}S+z8nktk}jeS`a$6kYe)tG~fAJM?PlP30olqSCPc#J~`I z@g%oE&FD;pbPD*?f2dRCt68iBA{NZ7!=Ve-ZlX5%S~(AWsp7Ip^^1{OJRFC^m0eVV zQgV!C=k0q=hezfez?AsSR;c*sJHQZD)Ix%=+=K> zRnzx_E*egGqLW*l+6JB80hx$dsb}@TumcVH{x|~Wtz}+RVqdyi!tb==l??vHu|URl zfRR{;WsUd>iSf68d(@qH=R8WF^q@`VU2so4L;?F^&uf!O2Y}dwO*9ir| zD+&@(vJH)J(QWMmLGm+Ds4axBmxR7aCqdcXnZKPyeUsG)0yF&Jdv63l7`@NNoBKrb z9X0+ZD5e3oAWp+2AwL&#=QDTk2QX|EQN}DCoYw&+PZ66ycMLmd)A|(X2&jrh8@380AtH>jY6{BTeF8ISgFkY6C zouMtVff}~m#D_0Pj*M&u^X9gl0y+34xb6-jM?wiJP5=M^00003i|YUTQ)x#400000 z0000000000000000000000000000000000006|5~p=_AP|KK@$s$b4!h)l0-W%lMG z@=GgJ1RZ_iU;qFB(>sV_jQ)+_W#bbiKSPrGQ`?C5%I(^!`wXk?fb&G@??w&IIiw|Y z|G@L9hXL_cz)*Df@GR?~1p6FkNn}5O00H%3XwZ2luL{bX>9>&ERDd*oC`y&ObRvQW zn$C9IiO~Vj(oaQ0!88`2d10C%g{|eai;`6jt3aDTWA?Rsv84HR^L_cDi~s}|#s&ui zG>6w;XKXhcndbnl%*bF{&e;klfdSQhiXw$X>esx)0_C8#uxyN%tp@-c4Wb41F%sKz zsQf0J@>(xMP>>@g?>;sDt`hiu@2*k&TCnr2Ut&N#6=$rPw)k;UO4lwC zpW}-AsMNF{orM^A$*l9&aT0t@6WTnqy~(_$vj(0?LSj6O#OK`lhOe=q{uY?DaHe)I zQ|h|J{qcC*=vJ*{J-cCcI5%LQUia%V%(yyNwsvLHo%DsZTT1R?$b3DR@v8|Y|E@5Rd$~3Ph6y;Q`#*8Dy-6rfv)`Zfolfu z)`ElWvswC;k?)I5YN*OfA-7Ppe_y1or|-Th5wiCIQt`kZs%60i*oM7`A$MBtVY?@+ z>xlE{ijaexa{+~8d=yZ7edho(IAp9w9x1r#thUY53NJ)+&*# zHw@wD&!I4u%8x{FHXOehmZ}~;PAc*AO_)3WwttyUoZT2qeYf|&fY2P_^Gd3NwXcQ+ zE;WrJsS1y`eIF^=zhzAzc@KbGw0jfZylPHedI>?gk80kE-{{v$Wjb}@icIj2yj@jES)`dVswZWZH-HXfDx)g*b3*6;cwmW>y5ohc z9YIWlJl(rZ$wGT+JrX##3%NTnd2H>hc;lo{lw6-KXAOV=00M2xVSm9wxSrGJgth$Ja4@uE}s*9j@z?}!Vctrni^Kh7&*==_B zJ+tJ=O+L8W#z}~vaS6^oKOc`Kk_}Jqd_}Ts_m^#u4rJ9{%1KQp&GQSAK>VJ##FfZk z00023eJz%tUR<>3qyGN0^j>tEc8Fp8 zYxY)10hANW7BplyG7;j{Polgp=#k~|@VqPspe1V0z^svh zXgh-{#?5a&j(8%KMR9j~f!=4{NpArk3Qm z?>5yB1j;VYyfUfa0s~U4UgxM&_qbo9WIe9WopG=Dm_J{1jvg_GwOWV^O@-&#&i9{rX;?K*KfWtX7nb{wTjWsHi)BKXC?lLR9wHC;z zq!jjLOq5QVEcOvwYuUzX0p~vG2H4pIzJNk9L_I&j)00000002$l B(bWI| literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/entitlementreviews/pendingreviewemail.webp b/static/images/auditor/10.8/access/reviews/entitlementreviews/pendingreviewemail.webp new file mode 100644 index 0000000000000000000000000000000000000000..4a3ca51f1f23850c214fd04d200efa0cf5b8d3d1 GIT binary patch literal 14968 zcmY+qV~{R9ur)fi_t>^=+qP}nw)fb!ZQI&o+qRzjo^$H^aq}Zdb)`D#s$N+u)lrrb z7kA_a0@4r@R#aEyBsBeRt~d&m3rvjw;swla$DSrhNXm;u=NhGKfmFPyU9K$_zkFl{OXtQ3;G`L>IoS5nR{dU0W3Q#cK><+0FD8d{TKa! zuOI;O?-Ky983Hi4vlxtcum8~>64(bk1ONblTVTNO3MimnH$bYt#-GnC{=51!|J7k5 z;TAvnm+FyVy}!+W9pLoxK1Cpd9rJB+&2a!|1cU-YF3R5+W)&{;qQ9zs_P#6*6DBZ@ z_Qv}g0Y*Q^zjtSHn`ljdc!1U=_@%=npa&2DfCbomTjbPV=dTI42=oR3J`kS>F7nR= z`u+C1HJ(N{wJJI*zfF5fzP|!fYbgrK<0lI!0j6V(4MfB5BNRH zZ!q|dpsx|1b2A;q<9$3ee8VjmI!U@+CXfWeIq?kPEm4Y)(Fg%)Gdg}ys&DVZ*C7YU22oYv>gYMDG!SwVGiOK2-$;v*GUi)7e{2@VA2(j`(b z9v-E?ld-0k@&r@jewf1cvpm`({tKZCUit-K4#C ztM4E9&yT;57mP&z6pPB}N*G`M_xQ2NRH1)=2OZ-FbhY`*PQSw9X-?YDp=EK z4eQXmE)sc&hQ?O@pB0_GoUUI`+VuaTl42pG>NT3eH!NBOB@r|6Nx-k+5}85O9x%16 zad0~N7eVRiDB3SzQ(c3hiIw;&#MiokB#SjAhe7JN8WiSRcRYnjgsQzq(R93QYkLax z^9g4;OOr$6HTw=*K$AwQgjdgg|InK8tc_;qxjExa2TimPdG@U$US|3z-1#FZJfe^0 z%C6Dza5&Ixb4xc0+3x3I^3b0Q%Qc&a!AjGuVTt6C%bIgW8lV7 z6*r7azamuKFsYK+^2DCclT*QUCX7e~B1RX5ohhMQ;aFXFbDz_3%%dSXFg2)wFu98% z+`kZY&hivVM|>UXcq8*IiDf#fwa)9XV7ablydBh8iJ@!x&g4#Nr5#IS?~XTXL+{(@ zF?Vgj%^0f;4ppg*VVbxS1IY+sVlyuMTBy=o{o<1hjjno%+NACHggC5LG`qqIGRI)T zU7^RL_F7rKY~}1M5W3^v_w3)l;-impb)_3_c${ppX99$W9t%Aryvq?%) zH_C{X02z4IT0U+5VtX_Bfca>-iA`Engi9V$Z4jvub8~vQTMXR{FT?gW8GGKRG3HLb zQbGjb7zF>Qyhpqcz%etMKeR1w`}85m~v`v=Cu6)Q~giE zaU-)iUelZt5-I-=lCC3Q|I7D1zf7YF$ESdlBMq@hP{Fp(U}9i%^Npp`JlO#z(0KDZ z>bO*x?T5h}p}Ok-LAk>MN+xI%F0H-V?f;H;@;d&3DHC`KXJs$h!N4>yQCiy3TZC6O zFl(UfM-CU@i`zB_6~lY&rS7t^v(y#t$uX-?P58ez3zN!KLTm&!b^p1+k)=2L)VDT^ zXM>6@L{jJTLT)O4BYe&>NFm;jTsC;E&l$ax0408wqLePe3|07oBg&}-r&0}+0E_~gL;KC)D) zgi&2wFy`Cg)FGgDcP=j4*q*O#T|$)5B1KgK{@l?8I4{T+&nDD&U?4TkIQb8^q`uir zsaj!^CZ5CbwiF9*b>+FkNw6_8MDUGQxAu+O3PC_uCi}tm8fY;r8rrPQ<3o|GY+35m zg%1gA>!LgE9*IYx9zmYWQgvy|oO=4ehaYWKUI+H@=#rPtSEXW7g<$$?v@pT&eWM^PLt5>7CbX%oq{&JhgS~C=^YY7Qbmx51e9M5ACJ~<~YwYj6wQAs%vBB zZ~)11kT4-3h;?`u3cpPAG1m*sW|q(XljAVDLAo+?bH_dh$CEmFfal^Um{^@`*ga4* zdAq%^{8MIkcTdXTm`p4tw~-rXQ=6tuQ4V?!6>RLGC1Gl_1&PG+e&P*zaS=rFP^-ap z9lajnY=fO=2-72dLx_tnB*y`Alp^xJ-~uyNr;~LSR!*CWnIfh5pYy)5<&D)jm#SE@ zlDI&yU`)X@VL`{mlZYNwhZU-G;$8eiA%o|)?=H*1Htj_-rwTf|Xmt5=oWy=;dyAu# zvPn?l1~)VTcmelhbr7+{t57lYs&9(Ql@JlvnD`Xq`cN;QhHmyfVtM`N5m^~hgDQ8S z?l8TUoyXug-OKF^kPbbDqC_@mZ4n+)y8;vlIo!=sf8G+YZD_GU zhgmf79OAM))XEkZqHquo%WES$I^StTP%l)D+jki%{`ZJ#pWjHCkdNYZ5L|u+``S&s4~IBRxKQBa zGtkJ=yp{^!1oZO>W>?V5c4+ z$GjGFSDH9zhkLWXjSS*sIQY~ek-|PBf3ERa0oak(Fkdaf`oZ zKxEkm(p^{)Qs6KgerHScl$Br4Z zVd<`lP|dHaRBk_L(oJMH6rcC2Q3Et_QCB3lsce-PB=(g`pkAdWBgDV?_l11=<+(EB zNISucPaRSIsduD8f@Fe&tQC>tedF{_WPaU3)oj)%%5Guva`H-F5Oc;7L39%t$;YB2 z?9+i(FhId`pN0YnQi1P3eGHK$pwY!fMd1NXu~muPOc!Cc{Sc7 z<-OY8GrN-Y7jbbs+pRQhKTu!Fh)=x+Oc^+!IA zTg-@hEY!*x{|!|yKZ$m?kv_!%`XoOR{73PoZw(Q?*O{CGAuW;#xalJ?jg3}92}i-t zizZyzcWpF474&0R9;R`BNHUF`SNh}4+BBD}ekm5AEa`+la;`AIiN|N^&i4><+UB>i zP4|8CT(=tk%5FcFY{MW-ERsqV3=5%LQi zB&_7PVlU~E)_v$XwS6T73Us5x4?04w17|GyO)u~0v~V1X*Q;RoF%?;Ug-6gY$Ii@U z`zGL|JUMj|s>zUU52$mJUKrf zK!Qc+vec-ThgiP<(SYlX=Vc5$8R$rSj!GkByNr%xz8XR=#r9X@n?6+kUQn14We{!q z?anj)@CvE|M%n+?E*x|jt@!4I15N)X*qGa;D_E3rey4t9^5?H@2lhMtGi={bwjVMm zRdGm&E^8J6KU;t8jf5@RgO9$$WT2)UT8`=L0sy!@_X!kB_My;YTrxn!<}VQ^H%Gv+yAqp1;e1Luan zN@41OQRR1Myc|$bWKOq7m91o6Gs*?)$WE!IJJ0q!#GSd92^VanXj4Tfe7%{1u=EF` zEOYAl1q&|{bk7u2^bNvxMa&iAAA%q4l9qo<0Jal1amnK?C%GDlY-~<)pM(C?puf1( z0uM4qp`1r1U{plN1pZCuF-1ljmnT?+GhPtm12< zDqL&g!P!01p^w6?!D03|E0XmYnB%7re^E2}ugv#JbUQT}>@vTg&)X}3(u0@i$K9>! z3UQ64G^w+pAmALfM;bbZHj1W8;116Ty#yGXJNHpYkEUHP9MymxFe=2%oyIr*fv{9f z?%qMEI3wQnRb710-Zz3V_1}k@(bJUjd!Ugj zCt5Z&y<-8^*y*Fya?UD5$74{NyVTv5C03CzVbPYh23LpSOL=`r4J1K^0I_J6Md-JE z{cf>^zN9$?`7hGfk9NRB5=vuxZomb>163W8e`eTgYDv5>^A1 zTWc)uLj}Lz23Q%aFU-AG4IY(`4tj+?$VSIU=Y)+Q7gG?c%LEa6qryH}NdVS#$#!}# zvYa6V{?7d&`ug&0s$kfO#9i#8L^ydPsHv1-NnguaplA0MkK+HlFDMGEI4GT`G`f9bJ@b= zn&6>DNtI5K>iuTAzKz4az)_#|2o@acj2T@0%LVzK(w{eadsl7IuMF0F^ z1P5`BUn4V#$$cDb{B22Y>$IpEtv2vc6yjfLGSKBeKE*B{AuAprtZEuFn5bzsR$bUaJOllynTBXO{vk3aPdAD8c)rPY6-^L1DqjABFgjwtj3b?xL4|R*H(wE`2 zNx3|)fuyXW(fc3kHVWPwB||->szeZ`r)iNk=Tu}Q7Tj@suL!SIaC?Rr_*)Q8KJOuZ zTGHNTu*t73WR2=d<Wh)>k6t4XM){lM3m_HxS-(EsJ|m*e)9=RPb*OH<;yD5nlWIYNMhVn zZ@cQ$F_*V2=o>?02Q9*0+8N~FS=6MNj-t1w{`~+7_=3}wWWm0CJ55`6iNzQaI~S+^ z0K&PXLquQZP8ByWuMp*1&%ma6n8IoL@jAc|y-bPRVmSjsB~w%g6)oJfau?P^?hnGD zC#`|9c$rqW1DIe_eXiR!gm4^TrW+Xw$u*8|K5Ce!potqn+UNzrIqexU#V+IhQEP({AG#Xkd6Cm^UvT~G^>7I8$H)N`*W?R1(X|?6&gbjH zeNHKFDv?s+T6Jmc&2lYhK}xcnu!j=^yl?o{4zRoqntRM-whxUeD9*M<&5`a9s=rD9 zlW&8>*;5<{2&AS;nb-bz0-Fkw?EHG!1=JTrB24dDkM~d7c4k~NXAx&A`u4xl$S6<< z-#Jmj8AmL6Jn@R~qSTi4K@7fC+SlF+_qBfH5rU}kaq9F79vYa1=)mCFGY#Z{p=l}Q zp<%8BNZyfd>d8v}Q|O>iEC>i;yF5RCGBq8pS?yW4yjcnb`TyxFgj!+Cq-(Oaf`CuI z6{&mMBBoO=au_dX7|Px5P+q?WL8bt z&{d(@j#)8x8X9Lan83zyxlIK%V4^pgV}IW3mw5oCksqeh6?i)p5`6#x@#?gMq{XX> zq}bc*6P3^mD>bs+k|a0=0s&*62L%xNm`ua5*$}-3>>;|+THNl_{Z(0HOabO?m$ptM zlYWIaaZ5C~qtQCM6b<{2od36BUg9r=a0Wt)M#`|9%k6yU8sO2Z;pxx=m(|W_c6DRfK0WNWZ~Ct@gu%c@tWO{3 z4wSUh{o~T~vL^Z3%7&R0tjUyuB+!3oX%V9gq2kg7#jxV1L@G=}<_i4@#t-lQDmI&f zE9?|kzw#lyJfpa9J9cgsH3O=oBnx^?rBRvNV-OnI;x@|NnJ@B{$3@%H2B%`0#yXCB z3~jR<>uORdaX|L@RdQ0!t;TiM#Ta}C^*db9+9koth83Pq%IffU;w9tYsR>^I>*3;N z{cdy$xQUx!l?w3Kr$VA~?g>jppwW1Tg~@-zx-EQ0bsNmc70(mdr`>jIw%W4ipKl`e zm!qg5L#?;QIlWdaFGadIoO@>Hm4EPf+Bx7$> z7o6d{qQoVlFfviI*wiP5=5XEr2jDh$Y7!IyRdoEk7mO~lKh@i<{lVC+L;9ZiY9PQg z?grzQ$re!C#)~FNh>!O&!7OiMX(33?eX@wUb^xMD8j_;J!P+Uz2U-G`TdU;n#GhoZ z*L4x()+K?k^jYEx9b(7=DaLYpeQL&WwXK+=Pc2c*$gJ|pu|V+`-zSskR@)M|MF<%q zf5C0R%mbhpzA0W#fDZ24dzUtL`NfS7&j z|KgGH^^QY}wU<08$694ZJca+hg3BdICmU=v7`+q>N-}=J?8$%?klw+7+{sM=W-U6c z=Ts`>IT85^?jMacoE^{~Bc`nirB?Y@vpUhWbZFZ*dY`xpXcil3M0YJG5lQGsg*h^| zAjgNnZtO>EnzA%aVV1iP|BI=w{~|#A$hi4)FcB?V4E8{Io-O+F5XA~^ij$`S z&^MCPXnVk&|IEvTTzEsb341CqO>AG&RUAo*N2JpRJIQxNrxoy=C!n}-Dr&>pC^cki zRKS-;wI+ARTeG#+2g|bO*BLPfdyny|6F825u;G8M2k=;6znua2w_M$lijP0c7bhgT z<#zuOlu)E6`H2nabveZ-j_rVWCT|ThbLuYK<8%QAk-ekt@7K9TXVr=zK9YoG)4DwM z^|PYyzf?@nleG*<`$wz9X|i+>yH>NE^$bulDcL*vzne*%kdS&`X?l>DXD^tKUQc#B#b!VJqg+(Vv~+zz~$!Xh`NX4IageE;MJ(#8SWfNNsRMZ zYtWxXI?uE{Q9ypV2E=XyvmSZlOdY-YN4#scG?3uUhnoCp=9${u)v}KSt11QWUuq9# z1syxtY+<0`6mr^Zar`1_A$}!nurYO)=$7+9hJNYmncFIhmVyl&%TtHdEx5qW?)frr zj?H>Ts5t1E+8oX7%2Y43A}*vpPZmx7o`QcwuvW0K?bTvZh@e1x2`Pvl%iP`$_KMuGcbiYK2bDUX zWStE&MeuKojcVHb;gL@r8~PpQOl`oz<)V~ z&067bT<)2Ge6D0T@b2%A{H+}BL0?$!WzLX|C$=e8sG3rMuJ@5g`ZB@?=g9ZV`9pfv z2bKf<%zT%-qjiobzPyE|tS@>!H-#$LCjD9re0>K~hzfVqP6n;kSX}_r+qG0n1ZHJ3_YyO5`@`8X z9HLJQ|JyKVtuk=cnEPaKFkL$!K3BZJ*L3^wI0dxn3jlP zQkurUo zc8>P?`V=l3q0nUc6NS$2d=`LhY2r}L9~T3@`eL|oo>x?!s{d`$ZAOT#wipm9;~q5h zmgCw9Dd<-CbPujn54Ah!oX8VypIdMDIp&5A&B4nJ<`abLmlD?>+eHOmmp@u{TIuRuwGksDD$!EaE$|LKa7JsMe3;9zZo{AT$e zP3BL4ln^mEwF{AkdBW^lEOg{Ujg8aiww~MtC?Wg`BG<;}&Xjks`i-Q_4CcEthIY#f zA*;u{v8~R5x9E_T6dn7oYhON$*^P*#t^$%twBy0o2sJQ3;R*6J3ER?mp74Ae&v8E+gN z`*EBrx#DSb2&~ss64Kxg{QMr4s%ryn)J{nv1`F;@(RgzhlXK8i22d38Nb=48A^G=t z@t_sT-(;@4;cV~V<4v#Yn$_&yXlnugoF~g=G5>0u<)%ZQ{+zB3m}SP0mgk;;S)lZ% z{MU)I@<6?0H2u9;i@ssA<`AXJ@+(c9z zOkyy47&uNBA7%xoGinW6G#gl5$Y*63(|z5E4C1hhJWoTQ(jk7UUDB> zfPOPFceqJ_dn^xc{`8#Q6LGa2$<*?tah$YerH?7?bl55l`VQag9ovO`?F9Cub@ zp)W9)kAw&rATHU(V_1m6!gym0=rZ@7rh-*OsqDgyq(x9g6HB?Zjay4#P5b(iSQ%fM zQ>^ZN0lPu9YbT6hSkNtvlK|HMtW@OP+3koZFRFbZEc z!K+=U;5-!@JmE&Ciy(xyIv7 z;6+^eBXV-XZR+wKg2VUI^;;O8oCj$ zL6IANlNq-XqvxB0y~D zO#Crbm{H3*(wrGaDiM*dvQVYRKZa9)t)9$?IeQ>}5AYo<@l8FdB9&qtSZ&0BNVr&D zZ!fomv6Nk?DlV^Z6{z4ix=zZec@kgI3 z^VoRRp?x>Rw$=s=RsONK@!f@GHgOSq;lMp0LaJ|=KZXfQPTasP{RV*`P@$MiIDtH! z*TmL(izZSv26LSZfBvGU5&E?vfzY~fzEz-@wiRoaYS7r%da|&)*Zd<;dJAxbPjnwj zu!8frf*P?Jl@;bB*>+G;5xm_cOzb9WPXBK^CqZ6!^Jxh*NgkswrgSuyinMplc+!vBwSM)*}^{Rhbc zD*m(b!YRHyivh;zoo;*U4@vxwFjL@86Ub^H>!_)nJ!j-MSBQlTMDEdWT^|p$9>MA3dKFJy~Gxdjy3D%vD}t1F<+~b->XMN zHlAL41UK-90E!`!^{^Ie!B)D1qpZ;*&6WA3V!&RV9YA+7%}d+F3r3?g^ngk07{ zKksyNbUp!>ew~k8@hZDBd^R}2^gvMt3OKeP|F)KFX+9t}OYF z6X)X~F#jl;$xA#!9&zQcPaEq_d}DKBJQB~RQ)Xa%$6;a6A)oeL_n8E*tcA3A)0iDQ z_F|(Gt))YxaZ+R5TABx4td|*Ww}6%Jdr2G+=L5NdVKg@O&XZ!!DAfd=7bwY5 zhD-Yu$ZiHc?#jgtV14affu?6$_ewRpqC$)ayTrL&atP9~1KWAUk+!XZBwUjLDNXVA z@jxuTo*;=W`~n12F^Zt?Nt?HlCk>5x{YFNGnoGrG%A`#d$uHV6S4F!nl{vVl>JH&V zDDDU3=)vs)N10{SI)Gy+3CQ#7T8LfZ(U(A;E`L{tMw|1;@%HQR0g89tbhSI@j4j8D zAU&7sr<8Cwwhk&x7V$?BGJ|tF?dT4rLq~gnC2Oq)yV%?Xgd97S=)sc`?hG}RXD#HR z2kg5ZV*+V4qOEogq1XcZOhY^y>JA?1L@yFxh|^7n z*hl#!dC!$-Fxw)0P4Y1AC~3&O_m7LfAi=;Shnp)mI}hwjOKwXk-S8y!VPU_ZW6Fo{ zc&!z~*F-(S$B#Eo=t+1Yz&qLIwBoAFx=iMzhv_-HNF5B$NJ$%16+cT)t!pN?=raeO zbDC=}yBF4dgTgD@tOzcLQL5~fxdW^jJ4p0Ph`d{uCLOd?l5T2o{ymrP0Po(t24niB z7W8CMg^~I|yRP|R;m=#;AD`xZez|jy^@g3TKpiQ!gV&teQ3=(Yr=a`&X=cT^^mm)( za}FNw3~jmXoIu_PY7FYO!j#%x$4Lrki9znr8xG{YGn#TE9J)>n2R@91+=1J4!7ap4 znN!v`T)ZycD)UEAc&E6$C2A+x7~m~gG_+{0gBV1h1EZU9Wy1#uKs7>K{{r=&g#Le( zV-&~Jwo^3nl9lfEiqmLiO-k5}RBI)2^bGu8oc2Xh>E5GQ>al1qI^4mr)({AHv3-rA6g)@k z&C8)5z-&Y1u8-u+uZ=}nn=cz9_jz075sjKjC}z59mc=iTd*QJ_W_KMn+1zW&4h88f zkP_*tAdT6EZ*yjhW>&fVW!E1#4;qawz0(C&1Ji52Q${6oITN35*NQ}FDal=p0N<%l z3lNfsWA`|w-b~US8GLea!~}-rGH=XzVF5QI(z0xbPO$tru;nRh>nbkF6v)0aC%d6k zr%*q6Le~C^t78GR?Rda&CW%&oi!rxZmI2J0-FX~;m(WgYRxSAs(y>yl8K#AO^vZOULH@WFJ94|5ZTr+N zk(W}ax(`W%(dSa__<4!plgj%11huh9QtWe&hvY{KEK^_Bg@XvW*qBJ(wqQvW zaLeXILpRvh*6R&eDZ}6{glK9F6Nds-&l@45DkPw zVJr4vGdKq|B0{p`ZAAv(@caC%bq{#C0F?NooL8%fbXDE(S&$Y7X6_IOG6P?+AS@+c z`KldpC6yT|1g$S!(DU^@CbfA_%HbXjvStP@*Dd(mrTtO-vp(+nL*cqUPBGak6Qg%>lwNcNVUV$cVmV&i zdvZ@)l`Zz5r|;es$2DVnHA3%7dMR{yXCpdP!nm=Slkg#*fHpPgL`WKYfOipNa^lvN z?qPb2$UPkqAApv#7DXwQxrjTd0c9_KMEg$@v;8{3jys53VEFILWmOsnI?YiuZ?fj} z3Y!Gbw(P#SG2bKL(1_9r>eGiFZzUw<-tGW2Y)3k>;**~J0y_V`{V6_c_bZ2dt^c%^ zu(yzK_W|_m8(NbHara+av>uDHkg1wpjsfIj7LO2d&3qbg7Ely(|{F}y#`6s zA}cJ-OoJzjF%q4f#5+R5x77Fzir9qSCDK1B8)C+QSNEo`B-F5FEZ)cv0u@{Hwc)2u z@|MgTO{<9!PXq|q3rIrroUB_+B)c#|?7k$NUgv>qXneXATO@)0mT&&8`|~W`g`JP} z=G7D2#}J5m z1LcfM9nRI-Qw!gKm3xZb_k0z0&=aIE$VEcjobpFm)EWM)=g9NY>}|4?Q3|JeId-X0 zwJC+D?IsO&kUGKuW;4LkYCN1RPqcb6RK<=Rm{?s}*!!BBJzYb^}tkrgVWUS#C{SaN3~*BRiD zBk7YPyT6^{fujx!a*{8zc8OFIKS-hc@brL_)Gsw{V)OThd=8@V@bjH=OS{V3i05JQs8x zhk$p_|F01N3sxesr zS1~!=#&dU7V9t?pS$iI!2IONGnu-wWQ`4Hw`en1_yqnqUL&7gDRT_;c%|D`6skEVZ zZtQ5e6_S916X)SObC~)z z$Qrv3-`Q^Ng3AMj)JwTBmNT1<5MpQkhaCM-`Q*H#T#w9%*|whR<1rv{<;&`$5r_I5 zRa@yeDaD8N8bEDPqBOY{6BNHcCRb0(b>iqWEDBz%x}RUHu+Cfn1McAAG0Xpg`eS|y z)uMG-{rK6HNlRsy9|=v9U<}0i)ag;*vN+=eIXv#ug0Q-Ovsz8~h8Z#0-jsopc=E=D zn}m}AlUR^;KvTAHE}m|ez|@BsKN@>bzyh3c13AoGW{>}OmvFI_1o2%XBwKc+TW)D& z+n>ix3au)t!coU=p0ww&1 zt;518fN(V?iZH{LbnGP}3Z|1n(sco+Lx+nJ$#ok$a|FC3l2b-SM(&T0$|Q1%TfAF- zJ&CaNxnp2nHFF@D+URpw;B7*S*P#_E^?An}G^&ytM-U}Ieqb_FYA~d#<%e@h4!4v_ zmzY{qlj&|-ww(2jFGC!IdvLiD4>yKwe7(N^DV_du2)1N!<#N}w1m!f$y+KzNid=%! zSlvO|S)rVx!rNl$(t?<{qoLG^-|rwVO&`#?GeK&< z&?QZ(L52Me#b&(>t{11)2qabg77!8D>QN6X?r=(bYaVs-HB@~}_`e`SY_ScML^Vco znwzMR(4Am^nj$r}`G>DHDkw1>rAaC;>Dsjzd}SQ&ctv;IjMEOeYGOUf-*3ULiU;8B z%VoGD+w9$;Vs!XUX<4OOw8I#6na$u1^EL{YT10RFNZVuRty8DFg8{6rLV+ssCS0!~ zGhZFos58!4QWK1}pY7IobnA3U+A_W{^6246=0b{eI4Q>_E8`}QTH7mjI5T*2DmBz{lYp%}W;(8u|^b3xW9SkjxlfTW?N_Ndd732g_Tn@zgR>oTO zsSG+z?1OUCf~SyKrw?doYi54cc(iM9oN!{AH8=^DdY2~9Sjpo@$rJGX6CcC}??yu&1<&8I zEb((JBb`ueolPE0A|8_}>K&g!>szGFNc*oU)b*04j5*+7+GiJ;{G{PVq$s%;b93a8 zG$Vdb3opq9+E5BZZx#UoQ^pls>Lm6V^e?K9RM$d)@MPewH}JsbWXQ+FS7R%BW_|fe z`%NeO(SMCAb@)x|`vm_|Tk>DxDKzNRtBor~Av`@*Zta;~HEXUsN}z+hN^d9AA#a{5TQi6}=)n9BzJ^z<1QK*a z4`HjtQpXBfg0HYMdx>$gh{>2-VE$!)TZ@1rBV)z0Mpxkn(K?`3w)e4Gl=5wc0ClaP zJx?<>*~BJNfg+dV_~f5p5mynn<`B9Pbq^3D?DL%jD5Pun>UEpAey;)btfPoBm$5)~Pi zyu&c)`lBVgA6b=z2LG6KMGm(yoamjU!nS}WC_ULJ=1*f>S%w9__my|mQqGR);%?Wihh@p|N&l0WcWOg)9#w2|t5rtgB!ubX8XTcF%dGNRwJ22CMUH*ru|``o_!)C=(j2K8ohu9)ss$fVPorwa25>>d4@Il-S;H((1> z2)qI`B~@yj1+>l&Y=GjuM$Ci$E(=~}t8ZWC`r7gp>s)Dm5~~5GGj9~YD6O_9mqFcG zHp&eo?%>L*^xZp7?Mrj}5Vt&Z`;KwSpbhFZ{#dtP9% z%kz{SAbEn2P&Jpw6fVI2%gIb^G0EKmrjhoRzE~#e;!bV9id5E%qra40bZI!B-&!Dq z`qDS5L-pG(`ioQ2vsz26M!jjDy_!#Z#BqPSF$DvjPDuAhvMC|~q;gU=b*kAkJ(<-9 zk0Lg2($VJ(;wQgHdK>iImf}wyEV?o&sDbA4S#nx|BvVXBfI|(DTp{O literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/entitlementreviews/review/reviewpageaccesstab2.webp b/static/images/auditor/10.8/access/reviews/entitlementreviews/review/reviewpageaccesstab2.webp new file mode 100644 index 0000000000000000000000000000000000000000..31ffb6517f44ce770df5aa62433a3f7d30eb6753 GIT binary patch literal 35554 zcmc$_W0Ymfwk@1?R@%0!(zeY?+g7D*Rob>QD{b4hZQEF19lg8vyXT#|Uu&)aL!04G4;A+gXEV#jdG02K!OW$kj8!p-11juCBMw+tg*qQDQuVBhBhP<+kuQS}K4$hPx20-ScezsdQWe5^f7 ze7*sqpW-*xKG^^WdI+DL3%cEW9}is*TkmpD*~?Sjn?N5+?*!*ZPYBWgoR_IGTr}nyby>~r906YK$fXjQ+>(uI1A>b5n2gm`KzA0R)-dEl8 zy>!j_G`v86T7N`;nm%WbX8(Tr^PMO6^BQpRWcASus3gT`{${7M-O=OW{{(&syZ%4k znw_jlyRO;uf8;OiE_%)kDGrd>v0b(7YKS%+$YQwvoURbQ8|eH?4PJa8MGEW29n-eh<-lvjT-EShR8|5 zt6;qy#Ja^gq@t{N!0qZ1lb4)^brBFozc^P!gApPcw#kYcq_Q4Vjr+^j+FZhJ9N-F>;{Zw`8I$v*3DyIcQpp+qXE_ogs*6<=U1Y8N|> z>Q>Gl-G9=dxsD=TrmEI4BSu$Zzy|g1*fnc?{eNA+%dc$f<{f9E{z!2gCFS{*N|tVa zJn~-8>msrD1=5)UptCoH{`Nl`7)-9&>j?oCvB8vdjvmmbXU%T(BUlnL?l(l4D#fK2 z+qNg8z1!e9+vq~iWYvykU>SArymUOTtaNQ>Eq2k-Asan(*I~y5Pd;eCh$F%7JxCA^ z!mjan`AIopy{NuB%Yy!surN(uj>q%8@#4HE!baXNNF8X4|2VDx8#?6Sa`cOH{~A~f z0{ZP2q-iWZoakgL9(t?4tB=h>xbOe?CaWb2zEb9u!bC<}`I4U|8^hxum?2An64t+K z&;EZ|AS-(YTA5`|aryTa!qQy|_DYu+P?gPo!7Yo{14hZ`;8sqUN1Awa$p%yL&mTm; zM~16a1+@J;56}Q)-F@6Oe~qcMnD^gp(DqPhV7(5Tt~~jEdj7W{PCo~RRn_{U~{Ti~8%K#ZoseiH4sFLvDw7UIwPX2bpNQo+Te z5dLu1w}Np(Z|1?nP>BUVhKtZ;Pyee|TjPE^)s^8b=_tkRAWdQkb#FDDc1g#ye2JGd ztA>J~)&b@CkCJXX*M-H1&7X_W{7GlS1nq*Y25X>zUSEnhosYHaxzE+S8fg%Uzd5b7 zmssF->-5iMep_ggKpYkQ?L7EtdxX1o#a<-Cx}iC_j*Q8=8J}bz$~3c`+(w~<2cz^)cmR;C!wa?NbYQ4amXLIX}9BnE9i2M z8@0_0_(hlXs2MOnT|y-`7Zx3H5bNq2IWeM30w9n6J!NT zMU{pm&NPfrLc3#s+zBbuu?_SdN``}J!JBr+^Rmj?Gq_x5&u_J=XvGrB(i$_#`B05?0n@#>tG8%w&A*Xb z1CUKg<&U)>iUPdl<{aMKjw$A$cfr43KKjC)$j5JNo4?r}Y*e8tWQ2ew;AIRuI}ojm zhnO<{=VIUi+gymahwEI)Doy`Xhf29}*@8ubM#Wz*(7CBFi(-A{2A6n}C zbKB={I2)wt(56&b2WPo(`30juK$q2Y>>dpQPOQOpr}{PBY%%ao9!N*?$yd<2iv%9J zD!LXQ*lO*b^Wg=dgs8Y!Yi{KKOkdt@!1kYu=n$y9_^mT~6p#`}7#zx=xZ>nv?~W$M z#s1cq+rz$M;po*4*drO&%|6D!{0*OVg7WS|oP6-JzjUB{u;X-a=JFbW}wlshRsarjKZEvX3{$F$UZ%BjjW1qi0!Bb|JKWWCtmY&uI{#b=uZ58N2qe zsJ{tKOKFuv`c-vPv2iEL{>)IyxXRU$kcjaapZ#@($*OM98x$de%MuFL<8c9ukKer+%<)&^|Ban)apnSBE~ERX_@Yxq=L(vVXHA8Y#m% z4Yn4b63w@iDC*yivX~)KV8B%*HIGKoz7UHaC~~6NAA?Ftlt7q2u8C1dof?OhM#lLi zAQ1t3LqkF3%w5d0Lu znwg%Br2CN3Eg|M^XTrK%bTWRu*$UF7KfWKwpZ&8?Hk%;lfBz`_)u5H3NCxn^^_^+! zy5#pIi&ssp_Ny3v@y~y=HezomVzz&P|M$`$ zeYq`DwlpT{3?O7EJ!X5!tGA>_FZiA`rn0+BI?^QjM>OoJ(H88cmHh3e*+GubfTOq$ z+8|tJ<#FA^_A1o4MXitd&H02JukNriLL##D_$y5TE6;3KY|)9LSL{+Ln6N)DWy#o! zbOY3rc)jvmUFw%fBQB1Z^FyJ36fuQ8FWW6?Pb=TQZcuarGG~>%O+J8=LFa2t{V)vq zUa(jKJ5$3jK&gdR!WZlexG!2Ot4jpBWCrD5eSAhdL@ z!KiWH=7UBZ+$~ORmSqx3M*IGHAeuSua$IMwP(E2*_i;vHI7#XDr`W&~`Th@ZV#ze$ z1%guQr*F|Ic8BK$Rh@L#RDw!$N9gkJ4w|WNX4L*w5; zoyy|j+x{-?%W8l~YmiIrBx7e5lf#H7Gbtz;&$Kexh7eGrkg;#UJbwU>(sHcj zU!-~mY?mUO;4^mchN>kP!Yu(J377il0MMTU?tP#d(@6x6^{^aWHI^3wO)+ z&_eLBHoZ|A5T?aWr`Sx?Dg#GVyvbcnQ!5QKz&!9trjEzBZrfx}#-QFEN zTKXXXZqpw#Fgpw{kEMHeyNiJZv^w@r0rOvcM058H#i*e74?_AEmY6%m10=Y8fUNM) zP&(7XROUe1q9vsyn3?hL&IAcoYNES*#DwA3ogsl>YRG5fE>L;?p09w#eK~jTSNnJr zsao&4e?g?+fOUg1+tR3}IStb3s$l?aoz271?o;1$}#ow{=kjlX|Q(@qYB9xyGnHlzHwTn0hDy5{ei8uIC{v-z{C zaX_Adb#Wb~f1K|g`SD)atC89-tg&%Bi(DU&liZY7eo^xsPNty=?1l;91FWM1P1pKo zj)8SWGeua6&oSA>aoL-dGAN3*bq}}n;2>9!fex%YMXiD6CP(3a8TucE*T3xi-|HNG zqd?{6tDJR_PjwN|LQRxbxPR~oJ>BhQMZ=~QVW3BW2KC8bh(`XWaHUb^tIs07N_1ue zwa)mna!dAjjj%}j0i8|E!aX@m?<$$!yu4Y(Y9h96yK5J`Q}l}hIZ ziMv5ru_j!>sS_m&6;dIXzjXao0o-NWwR!g-No88G6yBE@9m1iQ5R=N*nICc;Qzsfm z+z{FcFZC_6Cd}iX5$6Ad3G=s@5SYSs=NXJMCUSsQ(PVXr2p=P zIN{(cp!qK)XT5=dJ^>qMKtMpiROfioL1EbZvh~;Jm$mF*jW2F$D*5L4PTXUGWWSIr zkVis&mDGr`^G_W!Gyi<@$H7jUJG8no*@>HRb?EBFXkiUBt zjV%GE&d$$zFkU4p(q5U`Tw6;*XoupXbO2T|CPgxGKkd2YgZsBIqu!%=E$xinQNeSi2dzUgTzopHZLzV63zSo>E**nODc zq#kJeRke_RLPcH2XR8OPa%9h!Cz(n*&~xvN?aFA!3SZu$nBQ}mnV-jV7ESK4+TllX z)9^vc6?VNf5v)6iC+z01+I2DW6o)HK44j|m4L=Z73FgK7sJXz5Io_4aK)s!|!=A=J z?`ql?3)VL=r$;vAVKBhb973cGyUyK-To=@z5s0UUR&!cTytK+YGubUy;|8oMZiTuW zPK^MrcqnQg>N;EaW5fJ~P;9ERu*=LJtVIu$L-XDZW>PR{ieJwIY#KLC9F@n(} z&~pmEq9wEC+USWOgHYR%vmPtmaAE}GzLA$D3ySlZD)YK2v*s#!N1|HRBF_>vpT0F!)m7 zh5lR*81UZI#J!9JUS`%MiJ5b1oXVU_EfgF!5rOu%k9WQ=sSFE>*1!u&3H~zQ2@*_s zfAQr*X@?`UGVVLq{cu(*(Sg!w_mHGEWDK+MiU#~--wdovBV=?o zljjsOWp6qI=2O%4=VOkQV(64xkhK9ph`f?7u{2Lkc zD~rxfO7yQqA@Aq39$8+Zws_2p*LS3IfO8M67utswWdRy1oJu zua6?0Vx_S7Zeff(uhwx>pT6w|Rc?w&*YhLmkxSk16k_T2o$JB$hD`5Y43oMY{Q}7< zp0nbdK19Lx`Bq9kwkM)pG!|4m>aljG+G0<|aWdw-baa9+%Q-Gis z3GeK6z#BQSv+DX-j<0DhyNi7v-9>{}P=|_maBB+GYsg3?^qDgpt+E%EAj+Q&8m1qM z*mxGK8Q*_}FA47koPWx;WC$Sk{ecs4835r$krm;bl@9gndr}&a7>PXRlEEcCYPH!t zL48I&RCxp$9;x85YF7vHIQZhjm^sDwh}%Cnvqu85vcmo3+&nJ5IxkMJQ`k3I%UvrZ zV$mQ)0gEzWy;vNZmP|34de+Dt5z?@EOyNat?z~a*@zl!o*q=9)JLxUJca37u|H4~! z_lf$nLngf6A%Q+{J4OEB;ncK{g;OCARo!2fWx_~6vQ)`jd=YZv&!X1QzYr^ipgaQY zGV5t+t?``Fb#0;xR0;xBwqW{dDWqy>n}MaIC?bbBW;+5_V5&8?MJaLgN)*)dd4vx; zzn#0PVwIQR{o&nre6t>HYW@QGNfX|hhZ2K9CupNPOBSQRN6Ngi+pP#t`+-8G6E9)p zk0jNu-78&So5K32C<^=xV#c*c$n@;ssrwVc)u+yXJ_esCgmUQ?x&Y_+Sjvgkw{URo z%pFV8{Uzqnf2mzp2oP@qs?G3;Q-J6vw6(}r|Yn)prxp`a#fn=grM-6I;wh1gheU))h%8%%@@Nd4hBAwwKBpkVC4I^zOZR8Ru9ntM21wsD z)v+f{3Jt3WCR-m64bFOPjmWW!Sxtw%?sf_(OeFbG65{w*h5IoBtoZtQwjdI|@Puxt zq$y;n03h5r>mb)N)IxN2aK?y=#v^AVeTKmj(7vKvLD6$pXsvC`a;06dOBS(8ZXr#< zXNzAMn}XSH`pJY?s3d_lCm-9TDuJCfX+q5N;fCG|; z#-v@z$Li9chbn2bZe@mXBN}*j2Q^^_?WZ_}%sBvh_3xNa4U=!MwUpubzr9>+ z*)CTogyODNOXMgnHKvG$G-tw~c!i9FP1h0V54Y*6J;bX|BC#I6Cb6z8?lQ+Tn!f2p zsL=#UPpmtAFN$#qSw#<)Z)9NXRlMkCRXDs5_D^c3w>L#Xkw*5SN9O_76URTxK5?Fc zG)M5p?Wqaz5<|8v2sqBb)ST>_y?yU4(+LDOIYux_-1Ej#{& z^zMiGcttCLnn>VwCczrNIl|LTetgP0b3A9R>7E5|R)nU)`y(ij#ZW z4|pI0vYty_Ym5&El5=-|)lXZ7q54c@?y<^=6v562$nlGJ|vBZlC zNJkK6&KSEf!1s59&FQDs1e2f8rInG?-3zH1*seCn{Z_v24J9a!S8SX<*T8BL?XIf4 zj84jknccc)H|6z0u!&e{9~zb7FF>$T#lyoNto(><-splrOPhkG1-Cj7@V*9~J@%%9 zf*I^W3sY|bm9l6pAMc;oM%DWnEtNtppnF)|5qND=K;nE%;r?H=B&wIKYw!=>COtK# zjb>!RnIW&%hwIJ~;O=~NO*FyyDPk|zDqKiBc0T(e(;=bdN$4!4_BjRy zb?qvnb$EH}yj<9mXs-n9(RgGW@3-47BeIKp5BH&s2d?(vCI{qZ z!jPdp?2U||VI*sTh$z!TS=G^f=_iVCpI)Ll+N=}?3^93FR*6ItXQA{rxKtqbYWnhr z>9;J@!Arrl^*shu)}vMF5-BaeQtu>^&EAz5(Q^spj<&;NOI#vGKvWi0fm(ALT3W7F zGImm6$HCR0T$ah_oo5WPg@1*`H3D@`u!Y1!YK(MHcR@Q68wC!@%Tc}S0lO`UPm$=; zbBJZEiMbO5X#XU!~rL& zX;^i*1J+{`_!feB1wHM$3A>2Z6Ggu@?F~<$$(c(C1Wb4806@USBj$sTB|(?bmfzD& z=B6tJ2c4E=OCs2(UG^I)yjoCeL;kHd0*pXehdjG~OG+SiF#Cb;1^wn4TE;{#Ji=U9 zYl!EjRzkITQ2tlGKw!JCsqfI#36U0|nm4M^yJ>tI{kQzfPDM!`84yrfp+tmv4h9{o zo6;L=5aLfl8l0MmAelm1Re^M^L~(qV^i;0sh0BL-QT61lkFf4wRqxLWwM)>3RxWc( zdd!7aza-A2RRg^Ilg>Hzv8*s>wWn5cstJLwb~11H_OzPFD|jeDTgdkbhCfk^P*&F2 zS|@6@l@-Q{u19epq>Up3*At|8VZ$nt-m2xaFr6J(sZtK$aMk&^wja)y6u`=U4-eQy z=x`C1!b)8y*2Y6>mNvk6L0w+~>kz1&5{=VSVR#jY%2oENMg)bFi%xAX=eSZ}BPG|m zQ6p%_?)Ykefw6w5On5{+Ky<%5-(KyA4k4qC9pA`vt z1sD2`hVr2vq+xFy3Of^mhhc5+8Fh7RVX)o`3mXNazL&Q6V{8Jue-yG_s&5V%qVExbG#0&5;K17+m9AJo5lY zz$dZ;u;ebK;~ArVPEpH+F*?ylqjy>8eS$z7u{$+jCkX6kVxO4~myGWG^{GJJ8>2>t zVc8($cNCJ^+xE*H&h(R%@VM{X4;YHxk`Y5|IgA;&p?1>Gqgwr5RErnIcf9S}Y2YWr zjunt=zIeY&IUz`VpH+M*BzYnM;cyKuNmFa5 zvlen|sTS6=vrOn>);CuS)0&sbkeA>KS|i0Xxk4ML)faEG{PEu4^9EjMquGjmkZtt~ znTT!N^iYKt4|1KU-+MfVmW*U2?U&=j)OQxw2eEfNB+Ne=v^9@O8H(5^A!HT2;5p~- z0pvl+(^yYHPRufh z_MK!wLkM8=Li%`wJK@tMI#5}1a3ajKFJhAEx&~(pVCvHogg$nY_qv+> zVkfWg#Byw5U_>h6_=0Yca$ZL0Li9uIQ~t+2#Y-(0! zM!2c{9^3`cLwjJifR-IYC)lgaBU+eK(A=TLYyRa@my{KMiKK@1ZW~tI#V@SkZ?=0@ z;vT2xBy(O9V^y00+)Pk)efu0!TPH%qW|dZ~SrGJyw$MyN9cV#()dejN6_qQSM`(I- zg`<)7nzYClzz*?+ZurJ1%;Xvakzv-J@SxVeiXmhWg(KEk3b{GEMl%y9_%!|U5M@or zSc0fy@Va=F@o9^h3u%H*>^f$AW&G?&_6%w2RX_l=OySa zEC|&eAtAby-8X6K@jBQki1cTLl}o`zU~n9MhBvWldm(~7P<}&Sg8VTN=?}r92ldBc z2_pJZ(D|@J=xM!~zUZmFo8WfWJdgjaeu@Lg(B7Y_alZg4tH2=!#nQsmu&<1Cv{iwA za6X?aA{uz`?UTy*k9*`9PnZm~l4~tm{r^_!6P(q{+tf7(J6^IO#Kv-?#K_phl^ zrWuqTdjmHk{MQ%%xZ-NpoSW;Sg;V)IH3=21#p;A|!oi^ULC<*-e>x?=vpS731A#@j zfv8z~y#TBaX6QGluA>qw;b!E)e!Dda-ft%_nqS2G)t|CVzXB#Hb9`?!)%q;_^E1P&)20Z!5hKK~ zhJV>hqvfS1sR}wG>sW>MKQ^D6H}aVk**_r_U?9hZ@_4=;OHcMB5wv>8b^7zLEf1V1 z#eHK}g5N+W~<__)9banWZNYW*Nv?Q2X z+NgMtJEwV9dwd{3=bfi%a}jMXw0rmrStpp$apTJCXknj<@+>9j|D@*~`=)t1mjY)3 zFp#o00aXjy4of@}>7wL#{TTc{n-@##0TSE#gCxB~w@CnXWqj!XOUq#hGV^%fEAgmM zZ|!>}_ewfgnOA#C3o0w!QIdv;HT|`K%luKDzMEaKR%si&j>6;KueaP;^H6mq+cT*x zfM%Ph5MsJ2-)*B^Oi197jv8aB>wZnk3Fi6kB!6_o9G87G!|bi`Xe1}WQH*oX&>Eaj z1WFsWBwGNiW~nySi=bI~CXMhguEc2%35Z2GXIB=4g87Sn8WF*Nk_Ae$l zZ07V{8?XyD<{#Tq=y6%uN3vJ~In?C0jeZ|u;LB$_mB$NMsWQxY!}wwSo+YUoT{$l0 zL9;#N>C6n8OC;GD;%8YByfmb^*{17qNOG?8cF?3HKZt4b$*v!8)PmHb22YGp@7M7K z-&9T~!}n6qncGH!A3`vm)%qDbtDN9U2pB%pY|ky9!<%8rCCyfzj>lOGAZ&+rrVepR zztS%(rp~{Ya>?<23iX<&CiwShM(7MhL1UF5`@FMc0(a-vDc7sN0_HxYq`?->hO)kA zRyU#o`DpLM*laT!+cUu}wSNBzX~lt2y#@xH`}OQ>H~dJ^_iB%Uh6VZ<#M!C zof0Ip3$Hp{&jCBfVZJ^C;=pNlCaq?eFMC6XwFzmA`A`#5ER|X+2hT3diRLWFw;0*FZN6_W?PqK zfs{QCQ+;CBQ*&S_nwqc0CF4jJRmDPS-vzcRmn$ED=v8It&I#ag4;R`%Rs+HWT^+jE ztQYb5)Xjh;;u2{;Sg6>Z4Bsf8D8@%s+hxQi zWS10|bI0VDm}INdEq+q3P)u`hK)W`_h64B_O+xg!!RT=-pR0YmBsR+ zuce8_d0=gJst+6@A=^eOLOk4pjWB5dTu*~7D9m>aQ&&9cHE`inVHq7L+4<&2xr^!-TwhC9G&M}daDhgOcNUe4HaKIpfkYQ{X9`8U*U}`` zDjgHI(?0YV$i+$TjV)WDdu-N6g$x#$L&2ag{nPBLY&iSTF=f0p7o~zN zj48E9K9j(qEv+NLx?+}o$aNTtoD3>v%t6gCkt1~g1tML~8gf{>zQ zZ7$Qdlt~E1<59(c-&`v-5?-Qc9>5xSa^90hFnq+~>o4}D{K7x%!&@1}i_FXey`ycB zfS)DF}~cQpYS5OVEX% z?x zGmO*7w1DrhZv%}vZ)*WFl-gD|nzmUS#2B(U^NRd<&_e>7C!P7}$2z~R7hM$`gcF!{ z-~%=PO*HQk*M3LUCmfgzv}Yj^hX}dVdOK|1bLtle%Ox=%HX+rHPn~jvv`B@?1yEl1 zixjVk#pM^iofHoxcMD@kCqi>*L)=jl#eM-WIHSOMRPKa!5GZ*(SMew`VKGp*!N|Jt1w9ZgTK&?po&$ZZP*d3*HFAZ#czp}<(ju)v4=jrTl6B1Jb+TK zfNqF79#I17NR-Vtm4YI6V(J1xLFgO?g(shSDHZMbNE3r@H33VA8h5qy?5VnbCQ|`S z!A_{D>SSn%KUbo1!$f*fsg?A5I2vA#A~SY_##MTs14W1iDI^UEQq zxQQ}SrboTh6$H_wK}?);MrvX~r`4vQ3=zs5a=m_QH_R+c>|C;L<_J`X*fWeuVHwV8 z<@Ijf`~*W936m)E{LIYfiBOl*kYzAGlM5zBC(J>AQ}D^R^~$w&^7|2elk}Q6F%NWT za}MMY^~CXDCvqvu-yG#LHoS8bi?>!@>tZohpoUbi^1XhpL z=@li-2ZXbHfOp{WLgUdKyt^XmgZQJ~%Tf+p>zcq72k5c?z#p$F?}vYx>C@2 z>UiJ@=x^&rdBP$L==%1k*nNp{cSr>KxJtc~$C8OWVdNe~yF?anS!pq@jo*Sh`-Z`0 zBDLX0HGSnMuRt0g3bLEI+{sO&{UVaqs(!84#dHwVM#k#PI<|iXjEXq$F1t!c3)R)@ z868Mrfsws=YXj}ogzc)F!qGLwm=L%bphCx(unV`0aHznaj+}M65zG$gZC8bQdGN zIER(Nyv@Bl533WFR1%00Z;P(bwL-x7D2ho-{VI+p3*IB|!Y@HukbCjg+JW?tAqpuy zcX!}5YIn;PQ1lLK#Dw`i#1Psm%>z#8V{(OJUB{)d+8~?sSk;G@3DXZ8&tINXJ-X#3 zYbZMQx$XphquGnG$(lD4A5V7K07h5(dFlwZ+1#^^HRHq>1f9@^K*ZHc=*45C>%WCG z8|)aw4nec$d>O0>r#gLz52_)4WA7C6v)Hqu>+7^fkAw*l-8ZEku=TMg^UlT|C`zf- z=K6pb743vOkKWiN-n+xB7GCUHQ+LQO=e8&o8P6Fg zuU9msMGoDaBWhPm4Zl^6gQQLHSFzeDl-?}GyoFUdtdtUoIFyAynke!lNUk?iwDwzP zN-t)k6L+)-_zQavp{@~Chh1NRd_TZOq%UBYhkIMG!GT4P?}<4klbjymhvvJyn%GDl z|Ei;mbqpSQSZQUBFa=Gj6>p-N?evCN{JOzwpz>nyD~4o>6qB&=o3u;m=YSzFJFie` zUuK?%SJca++w`F&n$4Wm$%d;krw@Ex-cmJQb$?(0vD}VgtqOXrTzB=WGM87Z?Hs;L zKXR`TI#y&(z9#=WTQ|=34>(C!P@macAec-CRz0apY?FcZ04T!a_3p_?A&xID5W8!` z?2Gq~%xFi{c$YNnNDekgqh3IG)4D1|!W?|I+8aW!Rxr&KZ64JMq%WzaL|jal*f$-} z?ajurZmgaa)DLrHc{zo{KLYE^(tW*k zY~3If!Qf+kAg`^mBoC@tg;(##o|PW$4U}y*1s-A%41Q7pvBp(w7>-F6S^}$vCl5r( zAyqt&$$U}kSwMBslCGiV%n#Fa!1dQK_}LG!2ZB_2!hK3vYV`BGB_`6%*#bSo?vgqv z8$X~1cHb>rmo6{-BtY1)9zps@#F1^F{hjVn>hVYkkC4(f>z&@<(4!zd2eaY35rs#T z0%>9vd7a&YDdo1Ps9E zx9v-uCPImgoh2aso#(ho&;y;k## zCsSj?Yh^6H5EG6g1_(cSSVlfLUh_FInl^eCy=e3t1Ju4nPy;PB7gTz}VwdG*huyeD zB3Q!bj0}SUrlLbhJK~xehCAR4CoGwA6S{0T#)acrIN`rOWSf6*Yp!&wk7@qkV@#*T z;6MCj>Rmr5)19>->2v&n3t8XAM&Zxbb_W3vEa8P_Y7I$PWQ7E)UnKDA_i7Bjm{0f8$&`l zW`pS`-~Rr!*)NA?UL2~r#Ygrec?~aL5QC$YdpO|GGDP4ZJi2QCv+O#5ta#J8{o|Qo zoWbKrJk!Rl^sQd<EbbfKAj#lF&f%0k6%*iNgkFo^#o-sqO?)mxxd zeZjCA1r~j9dmnJ78TL~`n5EI`w)Kz3IPCp^^ttodS?;rmVFAqz=N?ShO{Yg&RU4a> zGNl#z*{MLE`?SV;AUjc-9Ww&90F6F~xcIGycLWHvH?#8=MaPx=SPRoBX=za7%s{s2h{BbZ|bH>ICzp0*T+?kwoewjXr$K9vx}6 z%{&TqzIoCkR#3SueN?=#05Xn{l_9)~LIRj3lxJVrSj$9)?)L%1=ljQ4isva-v?9jY zO98h&tP%%mu`ohuN(`a;rGjf^EVGNNA4wbkD77jap128tJ;B@5m}E zt9sV$=_2c|E$h`ye}Ycx^kL_hiwK@yY+Gq+yHn=vGEu^wMno5$rD+%J#E_P+t6vRa zp*1w=iVmvMgp6G|G~E=GA$uzA`Hj5%1vbvn{cd(Iengao^0RNc0>frdq2y#>@32$-)?oqj;~i`GXo##&`R#G0@x@c z++?UN)Y(!-Hc$mYr+;Cy+W5G)j&Hi?Tg2}9f*VOi_?W;p?CWoAzNMK%;-eAQmfK4B zOtMmJ|6^qa8S!&97xsQEI#``7-qMVDb3T>^*aC2(pHsF2%qH!DYeIms(+j9f{~iYv zmi;pbN{Z)(Fs@r&3WIs^ho*3Lz->vpY$ma_!Vlwm;F7$&sv}b!?{x9WxwR(Aaf@AM zye5-up|?*vBd^DzB15CP``*VKAc0cIJsHPyfg+5nJ&oH@?vSJ~g9sMuDSY$j0lMlI zJTYZVnQe+f7#a=V^q7V?-d_G-_$ZTraZN;v9|JN{a2)Q~G0TDfC|fTi;8}$-6Jen&$4jkI^zIoyF2RfTmE=Q#c_uFb}HV4c^w@CM(-xF4U#=DP?Bq zfJNYv6%ToCGZaQ?so<0v5Dw;U|W}VKn6f(FxwoM1+4i=Rc=5U+13+lRP;6 z>iTkCteLQqApd@;!$!&JkJz~}IfUCYz3{V5TeOidc_M&JBP!LIZ&qt?JI27RJ`LAO z9FFP&7-D06HGwN4F0-6Vxx$do>Ft&a0^=AJN>L{Ih7Z+aj95(O=T|$-tn9!CIG-&J zrz#Ap+^D|rx+nNoy5eS$Q&QmGa+RaX;qH*x!?c~_VW=ZWM;-%;pupLa@oz$_R zJ9$lhFbE0Z0k7!Oe)KI&tlH0a15^w&TrettepIJ-^-ezSJ!;rcU@=?qvUvk)-{BJc zl*iE&t2VLgtx;Ya;#vuoTR5YKX7o$m>_sNj$#MP zE~#lD-PXcP?u;_!K#cT+Tip%){O9CamF!nh&u+2T!DKqZHKNyWCtg`EU6QMPHGP-M zToQJQW9+jj1ZaBHnKPO_%ODd~7u{MZ$UIlps3Ks%R*;HhE*XnJ3UG_KzDBgv+FL;z z!li>hza5|wSA#R?+rXzuBFxa&cBtMd9~v;mt%I%tkAsIrsQUoH1i&VLHG!;vSexZG zICw`E^%Jd74SUQUvi-gGybe>=2EP<2+Yyv|-Xb`vP=R1Lku{+l+x1+!*)Bwe6oz9n zM%S?vA0>spt9?WDr;C+e?W@2cF#Iby2$b86Zha1oL$)S~rnBX{ z(rvd<*x1mo+g0Wt<8?pt_Tg;OJ+%7KSr30L@z2)oiw!dfyr1VHLlts=YIe5 z*>QsrU7}{^7MhZrR>3lT;rpFmeWS!wp2l6Xd-oWQ0T7ZO`c&XhVXi+vRy0YTT4E=- zap5<-%vTtL3|tP`OR=2t#`#l$1#Wh+{i7cuS)jq6Y`oD+apEf#f-t)3mI402>S#Ko zgW;%^z!mo-l^_rpRwhvVQfkRv1e44v`>zAyRv`%~JWCNcH=eDsjI%wqU$nZXa{SW0 zIuEF=oK=Z0T2+aG4T`oDz|n@!>-tb9ZmqI%xsrY#3qw)jJSx=4#MPH|eZt>P>5-Ge z996m>e9by3)pSVludihU>VT*&nLdqd@_8}VBK>9R;XPGv8KadyO&V7joEk3Y_+kWL z!_hnjtEsItI2Z0s{G{!9BnWLyaoCWIu)c@0MScUetpOy2JVOw!huMfict_9qhtX!| z53Xht7fnrQ-X{*nfx!1=7;DPl*qy}6gWbIsS=MN8=6^kZ3$5<}4|6r4Js5FRqg}g= zB@0kYPG*F&+4B)u(p&7EH5cBf7=bBRnFjuRNz)$b;VNlhU!Kf6v5Zeje~q!e5rnD@5NPHlmRBWYPSs@IJLwHLiuwFW93<>5@zq=>Av=iL> zL$ExyRxNL4|N=jrloa_`#_S-#^+9RCRf!eyyTRjeG6xM28- zvG1RD*wDv&)#C?=dF{Ga)&a&jF-!-B*PxxQsbPeU{FQ5GLN zo0DcwpU+D0<*pRO`3TiXkbZ`k#7TU7nIMgS#Y>Z*xaVSylly;GZR*FO>iMY3d_-SB zzSxCT*9WXw&JU-$<3Ei6L02}u3%?J-q}d-6q>z6j+o%CqR3q9n;I&QYuozq6_?Uyl zX1p583@&+pWMRBq9qv}U@&X93yFzBToX%h>1 zG}g*?b|mUENL`!;0XJM&ItV<%4T zj?5B`y_x%tA3I(BGuI-x-N)>Lu*9AL?aFOL;f`NK$n{#)$XSvhH(${qmF(+VuDzdy zYPSB*vj2~+bBYxuShMi9ZQHhO+qP|+XWO=I+qUhqZF|n0d74b79y+OXs*`@GuKHJh zYt=VjW@J+!MH(VDuwLPK0zmrDBKnk?;_5>j=K(3T%lJ`GM%@L+Vyq2XMUXb(q^{2K zkOI;5Pwd)gi{tZ@&UrIXV$`>~r!sTvSAZ#VVfMnq(awN%_(%g;-6Y@ph5=h_A!l)~U{>_#3-BPBI_Yg{+<~M7%yI z=#>P*yR>O~2*bEgZ~r#W1r`pbu)dAUo~W)thdeUqNpT&A>CW=D|hyK22}h;CDtYgL)+s-I_~R?)($|2)f< zrA-5)p$ZzN%VE?MKhmm1v=h}O?vdT;yK=i%BbG7hMyxGRf$Z_KY+ufM0|$>Fk+97?~@Lv}3wi6R`_q_$ICYjXzP_q)(xqyvCoWz^ln{>>HGXjy!8IMlVcYS6 zi1Os`nHqcI^1xO~9F^ACZz8lv#E(7pm2h|W@dPo5+T7xikkznLLJ0%9M4i>8d=5s) zuxO-=>mB|J+aRdysnoyCJG7Xfb6mM?TOnw3`I1a3=t*?D_}MuoKY zuxR(~JoiD|h1Voek~0m5sNTzxv(DXyz4H7rO+)N~2Q`bbkh2R0Ccb}6+@R8gkx{?& zLodPJ1n3ngu&B$tS_WrSi4e`R{GHPuZ*G=L=Z^UqnK7fxq4Me@Jf98pbt~uw(s%O; zd3!`aMIF@EY$jf00l3j{;w14}R~F^i2X*to-it2qx%;_ag>+a?ss6 zoM9+s$fH~e?2iIJ{K4S0V>^SN&xK!ffI#S*x0@vs>m5jn0HIXeuBhv|b zf*oT-ze0SeW2SV%_MbwtOhyQQ5KFY)OlL`DJ(ZS$`KCipe>%8YKMFO`Q3~s^PfR5* z#_l}Uy;`Ce-vt=1BkChWBPwl|(j|53-9FdjhmXT?px9bk|KY9eN-9*;Dwgio_@uvx z2}5(xvbfyPLHV>)!q;UfyW*Q`ym8RV&7CDp|u?Ly>vgYfO^FSslJfd9KAwQ? zp^98O7g$C~d{x-e`k{~p7L@>X))L-n^rpZ*-=pmJPzpTv(Zp|ZO{4Lc-N?`=KZAIk zgdCJQVGr&1`|5XeN7W2t9@!{t8${5X`UcLjU8_)L0wTk{^e(ttK z9kJ1m5qiUx|Bd>2;tGw^+JPG;J)c-sDU-ngu1|At)M*8z?qsY}xdVB~I*>H1SN=Q) zK!xr^@OA>RLkgw& zr-AwJRFF%fW}1-_h;0N@5EJ&GXVvx>?Ij?SB24O`K7kBxvAjGp!1L9fpe52B$dT61^TF zwrgov?<|?}>~dL3;{M?|S9}kzs0?PJ7Wy+`o=HapehY;>IZ3K~PU*DE96Po%P2ubY zR>Ga?0_N(aQkxbDmZ0?04pC7;*a^ah=b^RMGfD9#x< z!Ek9u8~|qhuOJa+ExVd>>|X`@GtF-_sqL0DlD(Lc`uGM4(h4Ypgi&j@qHU?-N0dSh z*>Evp-&A(Hf=}f>dY~Z0&kF;f#O$Y+$Yf!;Gy-UNtySb14}Y$zIOm!jw)TWF)Co+f zqYBb~tSh!BZ$0ve{*w?gpnRPUe_m3X$32lnnG-XUv0`~rUw=nyF<&yF^L{O?|saBK<-6%}dl>6NBPL%ue*7MAUP z6J1L*Lla)ihb@4LzgH_A+HAzrU=~yXMMx3QXKOv>%$Xa!{sdO+^U`#huIp}l@1=1@ z^!A0MP)ul!$Mr1*c&DM&x5L01O7@#kYO~asOw~<|{`0eX%mOUiCZ)!pt&E zwdWxbF`9hqa>PIUKj?=0H2m%oT(>AA50Pjb?YKL4Tv~T{SXG?Dpq;Q3!uY~5=V1$yxouMpLJT!HV-mdseKY|1 z*zh^U2<|)YfgumPsFjMo%*^#M{dZYIt4`8yOOp6-{g|QQ%X<0Kkc#@B>wLPSlC0Yc zGMm>di;AG%mmy=3(=-u50pUXLHAr#tbnXi*0_X^cA^`J z6lNkGx(dD8bXWmhe^%(o&JcKoT3oc^zVNruTRFLL{=l*fmkKNScJb3MqbnRuA8M7X zL|rIsjeEWsG^AJA{gA+VBtjI^Q=Qj@IsgFSr9_?VL?d+RsRuDq@`*L~4h~%Fi784R(`t}T zHjzACz1CdP+@{!+O(a?R8hoU`(HjqU6_DP)T9NKF4n8aKcP-vAe|Juj^BQ2?82GzO zP04YW&MVeOg=EL<*|i=RpXVa;@s;LREECdnf$Rb-TOdGTFx965%E*T-?MhGCHEF6L zt`t-7e&MX;i+1GhpZ5Ye+zRpmx!+UvuqqU1J^+(eMn5+=vpPFq^h>aGNBr<3?VP zO-=bm4Y`xaTt6g06aqQQ^2T+yAViyPL_=$1cx9ur_GV!#=h5eAarOh)9uNmFOvL5Dl2tm;<_SSLq_Ow`C+7>#bGmuOY z7xy_#Puax7C!|McSOgaGkk9{U6r|X}Fi`mVG(o&aL=g?NJI%Z>f1>jvYSW!?W6tai z(W7zRSYJ8T)EO6Nm9X*-2}HMl9X!R@r7y++1AAbNH=yGva=uV9(H3HK9169X%boM{ zYF)eIp|1%N%RUBtsv-T#C?!Q!p>)j-om z&%1&Bby>K&H}_oxuzK+i2PW@L*k_(&(k(R=HPF3rrM;CWLRIVZ&Kpq0#AP_Hp6FB`R8Lf4Pr>RodcyAvu6|Ox?t7 zW9Lm-3Bob>Qs0C~r`tau-p?av{%C5LPd#L+wE3h%2)}RT?A%yNmR_ z+8K?Xa}an|9BIBYp=0F|D~HGOEoaBoH6mEAg9q0c?(l8F%nGNh-pC_yZEg}$LujXx zr9T9R@y(AJ^{+l#d7zGZr16MQU746$A86eb3IeCbO{GMJ21MUFOsoFl!+`z~AQ_j7 z7Os)twL77TBTHR_+qoFldx@11HeJvE`?4-y19(o%wYV_c6=XFbHk_^`g~ zihk4qzWc^PmO)kvVI%_pjAKaoUoz4EbSgeZIJn&m1?L3-06>k+p}-iR!`coK1y?-I0N(pU(O_ z1u}(xm>#W`&+9u^K+(DOu_i0X9NZ+{tKz4ly9CK@VRc(9b68r?kzBdU%WR1j2)^=W zVJiATt^6LJfKKcmbS{}dS~FKG@g zwRzj{aoeV6CJmg$(Y~F&Dvwm1kE3n^69y|wXS2+AAk$Ey@b4`^j=8FCjaHvgl3Y7* zkAnfOhQu8|)#K4zkxCnMjg{UFW_TsTm?=!cpc_}3>U$XNeNz-IBC@^VBQji4BIe^5&uQvdls^Ug6EO`%rc#KC_601lR1vcY|W!qvm zv)DpEIs-Y5<#HoFCWu9ELXmhwZ9#C!_MI3c(<-5K1~pQS-DMU9fxyMpz@@)zIq-su zsx)>pcCBI95CgZe;s@`jo*w5Rq<$hk`Tm&&0RZr0K}Y|X4u(GTU}Zo=c#__|0)JN> zy>V--AxsybLUztYsh|{gBSHf*m0XXluNr2xgAdI^#&WH4*ZXW9bi`EP6 zaPu0nG5{OEVomQ!8?Z5a&`f!!aV(N~MJeMAv(0dWVxE%gPz?p&{bjhORF6v>2l1qC z22Uu_)50l#ZISL~X3okwF$o9?FdG(%-HHaV?2ga}U2by_VYWJ=W(S>=RtA{@^7FK7 z_($DqL1xvHl=D?H)f9C0T7qT~UomnW9$5b(@=$TUThEO+Sd}`3~>x0{>*`V*msUfHIm&Eo48NONxg63Be?E+dC1_NPEHJmhI+k1TRga-KXIqaFST{D1VLls7*)A*xzE5;;cw&D07+e}QdkCN`YcXz zr>NL+;2;=V6$?~PLYp-KBzE|XhDKOiV+e!%`Ros~GlNmM!wK$Sk18VyQ=w+Z6(x}Y zcpy?!p@ndV4i&$eUMu%+7F@k#Qs6x)S8)dBr>z@-=hg}YQ@jeuO zdqoA03^qV1cwPR*vEl)qe-1SwpC^_#L@BV0w}lDP>;TCRA9PW;YVa{bF^%(V{YeVy zlYbhKd7sEEIsma+!2)f1R*Wgz&)UQ%1=r4+gv%p-qvZkv5uA;H)$ttjWn#c)iCQ{NIw;K|6rCrtE#VoCs)BHFZ|E_(yG92Abz%XH6W1B zSdS2eYYcAO_ybC@jSf9aWV=CAURioEoefZuv83(!>51YW)8MD8lgA&c+ku<)<^^8A z8-t3rre1g$XfE@}$slq}fT?z_tP3x@v(+jJEO+UH3H#oGS`JS{FsuO0)R8i^4AspM z1~F~o~!7`}7d>iW;Q7U!|@lGJQ(?b<1qyO7L~ z<4kSYLST4;R;{IQ$3v&?c{Go!7vNllsQBR6b+*7HL{2GG$c{4vm0m&QMyNhno2LKhpRb+zzz(2ADvz#Xqj2dLuz!h!vwsMM87czQ*s3y zb!b^I`e~15=~>XAj*8)sMTzcSa84n>7`G#qewiwOjXPz*%~7?0@!51aN=Nqt&Bnft zC?Op;gkas%{?)2aWBdR*)xcd$&Uanz2;J;I@&BBgNnSfipHyFjW1Jc^G}WgMqQY`b0c-PJ=E+M= z{X*YI#j36=k_5HuJ$Ikb(4ia0Vhw#$NU8X@loY5(ctp@#=&}2i$2=iQi={WQh2?vP zmO!(y12TDG!zhcZJ@z8EgDcWZa3@9J#SBf4M}(*y;JlSH*JGWvo!_X#RrUQXO_0Q*LINP3rRjFQ@)~3jj~4N;K6Ww6Or2VUfqiT7aj&3a zCAPzJGeJ~V#49+AGFn!S;=MkVl|oBjn0lX`{kz=eg&8#-13a(p#9Iy6UO}={)WiOq zT5@sPI`?A7*HriE)@g&ur~MulI$Yt) zs+yf45Gz_#6zsdV0#X!sM4Nu4{_PCsX|Au6dipWfe4rh8u0N3pyMPZbtsh@_e~{<3 z);I&Dn7nAhZ)d~kjchvDK{c{5tS_H#J%Q#TZHN`gr>ofBY{w6C{SnE7Mu9eudQf@8dcbp(?ko**OnPY%9(#}?;S7D<=|*IbaiO+q5Wd@UR_Ujk6R!R{}G<^Q~!-l#W#g%rZZ!qJ_b|KH$_soro zY4Co-zTAmVDM6HzAVgkptbV2Jax8eK=#6L?3|vw83n-%z&IrC)hy~(_ZltU5?JB&S zU1FG+9Oq*JVv-M7y*)gE#hL6 zjUL;3`#dsd6Z#K#s7boR{@BO5B zKW@=c9)rG4%M4nT`udaaAQKQ%gk>6eg``HyM0NVe_BM<=|I_Kvb74lqeN`57Q|DNc zA@dZmnxA2Lz)LcIY}3$4|8WgIh8_e)p<&!Po_EFlu!)FT`)gQh)F@A~j4O%_9gH}Z z={8B3%n`GY{<&&;RZNX7anjLfEIkZMngv)1PP8}LA&k4wtbT4h`)s;XDeR0KO=v!k zXYSZmfmbO8qi35+rl8B79xY#w{*1B>6&KXEVPX}ckA1YBLE4qJevwP7I&-Ca%O&g6 z6?(uhJomu8N24;W|oNx{FjhE$7N;oS*?%f9{%UICk}^3k|M*W^a` z%G7m#Vaz#Y78f$0u*F-zk~T7a$wupM8D3j*`sMwRD1AUoe?ikKYs-Xm4A9KTRntfU z>`%R|w@20O$ozxX5Us^^NRtN=wL^+UwTKKK*~d?O0Mtq6bokxpS#wI?e1&>b#nJ`i z{OV8??u-)+#(nE5>Aoxbs!Jvu#?LMJBK`nF*8;;!i2nim8L|1)oibLg5owhhAM$&6 z!ndR4k)9!lo)sUnW$oCqFa-5`;!S1SRH>S@O|)m#7L6^pWU^^mIiyyBMwlIz#Cf;C zHwV1N1qu9l5AF=3)c}KJV)e|&ieoG(sl(r1EKF6P7AEdcjYo!~8GP{In5b%8+Gv&f zJ(PD4l}RtskcgK!5>(D~R755CXpd#3Esp+vFPMoEpPwXx@E@VLP*p3!QTVGb715IE zd?{wnT(_kLQ{xed8{!wcOT& zaA?BQ{uji;&EeH|SXKw*&=+CVYdp^Ml$?gS!rW6%>8c1Ub)DOeK;W)GUS7>2P3!){ z@TcC0=#ui2;DwxP@#6K#_fc~}a537s^P?>X^&tdpN`6T~CBNFfvH+|4HAt`PPg8)n zd>f1*JdA_XcS*g5YT(ksG>EgwbLO{a%M9gre^?X&B^~h~=;R_U33KGQn}c`53FK;lRESl} z?TO{POgt7ip<`k+Eztb{*rWkRx%sV5gOAJXv9RP;q-gic3oTp5fXJ|i5*ULgx*-oU zjp?N&Lk1B5xbQFK9i@hO3T-NCnKZB|p4$-sB}lF~6a(dCvB#CJqTfY-J`Jx;diO~V z53X;+WVVDt(wTU%bTuq`Sib>RF@MAj1Dz5=hdD@9bgi=#*s#1=8@kIWL6qzk;6Gqv ziX=}_3|8yL@tlUliBM9br_bhlU#kD#Ci-6kL`uQ5^7^f1+)g=1xj8nflMdYQ$1(Wy z2gG`n)>bbQ8dyv79v<>&(LWDZSF+fAS~@B9yAlt`?V|P%TM-9A84uisNj3t?TJkd5cOApmN)ZCmvzPoZ<$Ee*M8rHw2f0EXgVES zP1u1hasA01+Xfn=B;YfrhQmn|yRM;FBea3NY7yTBvL5$t(8tk-;rSs~l^kSulvhRp zE_Uz^=1OOweTYM5F8=iAlSR&BjOjv02o?!(lYt^CT@zuGw!b6TjjM}cu@Ftkl7EJr znS0}5#a!g$o1D~IhK}BIVS~43YLL9_QAN4tdLc7Jp1LA2PG}dw@UWf9jB4eW_d;h( z&LNF?qlOtwh`;b`oB2W9uMgHir#)vk7f|T141rpIO(p$NB*1T5b)etWZ~ygT$k=|qTBNQy|}!^JGOJy(J)DO9@_1@ z1y~1vFNO+oZcC0&3k3zq>N%+V(;yGnj1Ot+jS(;WFNrn!_Xp!6R~F$|3}V=8@!Y;b z;-TOdW}7w}8IJ4tP4Kt?B3IUmcc?)I{_P zsy<8XU*zvCS(zOcr=e20UMYvZmz`}3y*Ui#U7s1nS zu6ZZR_f~c~I^Xaw$=4>G2NKW|x-Fa1vOBu^I_wwYwRw#^ku@po&?#T28(S8Fau7r+ zn=p*8$1T~RGwz>qI_aJ?Qe<`At-E44#G6N9i7+B2vVLrf?P7QB(0LFT94MXqW*?O= zpPozSV`oDatLTljisD%<##Nx6boT)PZKb{rUI6Un-GtEhS$Rry8{n;D={MNT(5dr z8=&v|^MyG%aZo}rG`wv}c7efVuzA^^mBP{v0MAlz&DibKAEw6TWMZKpV~UBOQ-_G4 zl+{xNm@82Aowi9$^QL|Dxg;#0Wmn&v6^4^Tzhc~a0IN8unN}x4!bZ%BMu@~O^$~OWi(+k;q4ttLw`gk z!$!+73`NP1io-)2{#%LhH5$GXUD#4K?Qk0x3huK1;%}kZH>ByWr)r^dq@kZiM8=Fw zD>UNJ@Nf_OR-VF59m$sj2bvgGfPiE_KUWr@op3tM=S8%2W=ie^9E|j!Yf99l&2(O7(`n8dB2U~KJHy!V0+P}=uiLb+V_aHgV zXP2gU8x%P!uj(6!#<>`z3;|Pn-FEw1-p7-y<`TZ>{%TScBz(b60RRrrWgs*C+m@J_ zr2lkd9BjjrG=$IbsBktgDbP9BPR&Nd#Vd@2Q#qdRCksg&5TK5MAowZPO;u-i#zP~H zuEJ^f;)8d=%(%G60VJ=GdO1V0&0{Wj5omS%1sdVAobsskd$csv#%+v4!eh$B2|4(P zsBMjywDq{elSbz*ZMrC+Bq{c6C0AakG}U;de4*R+9d1?^{O#)Lj)c&D66~q0$Q$pQ ze|g8Vo`i}$JZJCYQS2=pc@Q*jHAIu%aQaad>_5#ml~#+to~whW;B_=;r9G@IE!I|e6@AJqKUH!i0$R~a0p+j7kI?`_KUC3+EA-jVNZt-O2QL&7 zpCOGua~n;V)Iu(=nQGWjSJSW*DBL~UEEO})$U=lF0zjDLVFddg=H#MXBpdb${^KA% zCApqZ;F)ViUCuz0i5r=k&cg;Nxbxb|9t7u$eI3*qi9qw)`%1y^D5Bf`?e7@RXKr1y zDo%v5!od|zqF6Ap0Jc}Q1lp}`bH5GZ`vNmJc?hL@m*{U1x|z!IzJ%b-Me)w9y=Xtvz>qM z02nl~q3Wez{|`7g|DHM0Z;CH=WY)^5-{;a-bvVQ2T!9`KsCmhtQ-EsulceV2(zH$4 zY?(R$KmT{oE0i93^@z z3pDD8M&;(uHAUZ>xFOvVWkiBg3A(1+(^w`42S7_;Rj{zn{s`W3#WQOjcH$&x)s93V zt=!F>=hEx+->1a>NHh<=W;y!y*X)!pG}=X%4l7$VQ*l*3@iz(wwI`{AIgZdPep61) zKg(E;$DE&j?<>kYVC{mU7;M6lf1B0>VP!$1`Z7$yb-$jKhlSfLFfk34ZPjIUv#;tr z5!$W@Fz|N^Z)AvzKf8gDPW>nL>hIeg5eRBh#bx)N6M)y7wYFuOL?`5f4ib6^21biI zbF3&RmomBAAYSdV`y*@yCp5!A2ThR<_2?<1hD7W3e%BS_IAuzsDaIH$Jd(51OaKy- zkTdCmNWB8*knIzzx1Hn_^brP9dO_TtK5_Csv1N0 zX|kFAeP4pwGRAr>2=GjVI>P6%7If8SXV2>$9`tPtpS__? zVLW;w#fhLb=_B<=tsP&g)dZsRaQyRwt4WvC9TQzGY<->aDwl5gOmh_q!0nSiX?n8M zojaw6_1tZ{XMSu^A-qOxWVqMEH;27kmF@&_O{N~+anJ9(tQ$jFk->GA5kGIXw>-f8 zUg}lD2DH&6fS%-!kM@39B?6_KdD}MY_dtG_6|4iGRtKT!m0TH`+*JoY+$~T)0O0N8 z*f5Q-cR3+5+M&kmTR7=pd$+J=jr&mw%~%*EZI+Mhb-5=lwE1yA%dUG5p*Ry$g23k$pNQ^AHw(}^)~;PvV+Mt(E7z3v zZK(RS>TgK-(~%J+>7&3fxx;1=Rjx3VGDO&9d=xONbpF1qB*tp0Cg#6>U%mcLzdbVW zMcrdBT?oI9c;=KxYJ1qXnRf=ZcS1)ES;iZhYgtPWg+fj$5knZ~A!b?^Z7AL}IKn7_ z2wk_qlX(Ivi9;E4!WGwZty-VRvBJiC@Jv^5E9%9i?CWb>F)^ma>SzW~uKzsm5#%n- z8K46L2AS$5*>^zZa&3BNC4azi2b2+PPb zv#6x0*LQcFWsRV$0&vwiwsVoR^Vgpl-&8#kE||OdCuUI(@CT*qPG$0r$sE8*>ywll zjAvgdpABng9_%@eMSA1iw|*MUt)75M3EYCAu5DSRxPuNEKDcXO-StnmXI{Uuwdv@CaPC$fdL4_YfQ9t8e{!mK`t%zE zc-y5p>3|}EHeB#`y#1am&A)Q;Usv&I{-x>%t2Ebe$$m$CYWf0PD;3qCF1H8|#}jIa zMNLla4&zmm0>oqB>7)Y#M8cmdyeJ;p_nHPZ{alRL{eAlq!a5N?!;mgSP0O%I*Ee?9 z#R2(OE{-~|0M#2Awt-8pi=e>$j)%N&Sd+!?0@j~nUL)-R^}%B)tiT zlDBhb18DT4R=G&Fk0*|&ZAPo*Kw%UoNQ?BZXLWt}21P`PLPt%MW&79T@-F+Khn+xE2oi@e)(&Y(1fO=tKw5!`>obdDU}rfU76yQ5(>pA^hfx0MUkU3qDS zW?Y5G@;6*Um_|!)0D2ursv-s)N$;k|SyGDsyAZr7R+YSpf4|iXB)R_M`HvH*fMXz4 zX^emPXa5%Jff^P-CMNlIe!o)BVrUBerErLPn9)z=Yu2(rEQ>(hoC7pt0((fWctTS< zH$)8;PpJZ7xC=|x?_=-uMDGY$LmWW!zTcHqjj)kvvb~zUf(wovzUoV^rs$Sqc)u=P zgkDKmJMyZQVqHA;g=4jUaWix>+xI}P@>S6BB|1L8*x~k4Uqw19jc%7!RXZ(P% zV6HL3zXLxKDva~!%3^OGEb~oQfl$T)0_1iGm1C0rr&YQ6tsG+0gHt$u|+mp1uDx$F~VW2@kB&dEFzbSNV*tT*CTubb@)c?W>^obU}ad=?3yt z;UVWCHuKx1a7K}4zSZoyll!--^lN-5lw%<9?_mo(y~mpu1$ZxX)Xpp_El$YnPSLN~ z$6ODv!zMSZwU$t$STG-KK_HchQ?%hj7X>ycV^qz{6gl!@WcX>Ef_$TdgX5qa&R$ZS zAAtu1c<5|w5X5|!hkByqFVL$gfO;)2I`g3sW`*x?G*c(jU37drq`;@6)8_FMc7E{! zns;YY%Tzix6GtVnoei`}-z;Y~8pG~QKRHVi0v66fpX$}itl2Jts6AB`41orz|AmpM z^sl`Uxd05M5Rx&RZs?G|53(RP`}+;v{xSN{JnX;fuK%!Fa0`Y-itKWL1o}A!w_OLT zwxEL%!fZhq8j{#G-4@N@en>{ph$dj^d2|ar@DFR2THZ4Gb@`(sTaqjF{-3|%z9wgs z{FDZP`Vm-&`PypP`VCJ5q1HJdz zONTK+;6#rvl{V`1LrCT4Ck#iXPm);d28gHigC$?G_`%p7w!Z*4VO|%;NdbZa-?sBM zMlap?&y$5EPp43XG#|a{&MKGtt(j9Nxko%gc9GTZW|06^9Fuwyf*o)i3mQ&$A_INk{2N3o7p@A3p`-8L z?4!kA`$TB!cO-USXt2LbGv+H_y0WY+4lz;zhZxmXr1 zTj4Z-`khu|^vX`$I#^5emSImN5YZ)rf zs5nwm5(mZTb5pr|K7rObBFPv^mf!=(gg=}GCUyQI#T7e^wJaDjk>D7+-QiEmdXI;J z>pyrPq_n2Atfl#4x$tZkJQ&rDaey?(Kvxv#vGpy*v;_V{b0$ReyEHsB91uhP!@c6 zZVk#RO$+_^+X2aXhnHeKa7p0o!QweKLj22c=IHFSHJM7wz0gPA(Ub27q(1m}NjMVV z&20hSr#8NbeWz(n0YxR%cMBUDbY z@YGaCb`1>q#Z?f(gl+Lvi~{zYu-2OZz5nQ7E6%qlj=mipaggyZF)uQ0Vm{Yld{RO> z)_giLy88#CBlj=d*p2iHx)%wkrUU0_zP9%DYG>KOGFu-bCqj))jdw~w=FHbM*=B1H zp`|+#Y|A+mfPrD?$4OE+wfj|CiHSy+G~M1ZK({#jU4Y%qT(6-gwhs^2(dKUQ@1%sk zfToj7a@tLpFaWD^S|Iohcq-m7ee6>c58}$=RE=fbr7`Q0S1-LVLh_x|w^@L!#W=+DzJ5syuyT+HNf43%OvxBCtN^Zk(VR4#)9h+5Tf$RdDt(Z_M_+nY zq86SaU;4h9d~HQ&pEx~fsNDV8P@g|{o63ItGq}m{7^AwNx(v@lTg&NncOJ2}myq8u zQJ>TS^?>Vn_Q@GuX3Tk{T8oPgM&`gAZ_*!PwLRkj0HAVL3}OWZc!m>f66Y5GrYo=` zM@h95=FaW0KJ}5HkCvlM!=P{?Fr9VRqx6&&{J02r88VvHl6<2N2+j{pGg0jdIX^v> zoQt3yCbF@@b^n>+a*kQanPY50Xu4TBLtqw3bV>9b+VJH!B3&y+1@Xdz-E;!aeUPGt zZ^CqnLX;RvLOJn0gLNERznpy`w0#P!0001d+M)rqw^z8w24NpBMnBa1$Dp|pQ?TWn zllJg1bii^SHN{rDLYZzdHKy3LC8maG;XSg7dyP=3?_T6~!v<&@p*f2UIEXun5H_Nn zePM{G9-@}eQ@58qgYhEFXyf8oOkQnbJfmznw#@P4h9szO2lTUo2$o$I;Pi|?K&6M1 zl{QTp{Vmc{U{CzTjG0}$q^aK%coQzH_@}B)xU>ZOV{h0(`_)bWU)#6OF#mnP*U2RB z{T;yu-Z4E7t}R~Xs;!gvfCYN}a@5qoHN?i@L_e^Tz>`}BdfGy~DstFhE3f$Om&C;J zEiT<-l}Bm!22Pbl&3o@5z$(8k1#a4}V5`PTrk=K4^yu0wl+qQe;hq_;bl&EEVz1*F zO;sLIMUog0Y58MVj6q%qtY? z15FC^@ci`|mBle4QvFQb+6&CqoCRysj1>7~T<;>S>xsjuh@R3&2dpLPk#(um$o2G` zF}|7=?_|*GVZ1};$@c}@K-rLK*+z(9QVw2Z6rNT7PVLEwayqODB*_%&zW@W^pl5o& zA{L|KKC1WR??-d!$)V|5UdtGl7X}ySX|3@-d9IjlFs5Iz0k|gtRd;y0jI)iRMqoBbt^Q6#w*#kln z-Y4eq8E4}WB=~KxoHR!C9{*i^lB6Lx}{>Qc=z29{Eya`g8xajMWs!~n{%(Z1L28HZ6XuH z#w7}&JHNsT|16_f65N_uQv2g{;J5rEl0zzij9ZVzpkG9+#cC?Xm?!>47BZT#mxYYX zMg{6BFD*Bj)Z9KGFp+4l&!>S2jF{8t>FF|uqRrTez4g*`{3-(G`|$U%p}Oq4MS$Jc9otu#dbtRRYF7HqoRej$R1nAK@Kx33ymy?}bq2gZ^HC_Ha`vfs zL>2x@)=;F2JN^}C@kE5+Y>;>Dxy?M$7mC!L>xv>J7EJMF1V%>eR==E4WdoVBJK(8} fJbO$Bsia7}@Z7)%pK^|QpGaqJZ{Pp`00000IL<9u literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/entitlementreviews/review/reviewpagemembership.webp b/static/images/auditor/10.8/access/reviews/entitlementreviews/review/reviewpagemembership.webp new file mode 100644 index 0000000000000000000000000000000000000000..af6f4df080226d7eb76e5abe26f09b5a4c7a2435 GIT binary patch literal 32372 zcmb5U1#}!)vIQtv%#y{-Y%w!4Gc(I#X118YVrFJ$W@fUOnOU{nJM(9|=lA@c%~Pi; zD_&N<%olNQ+=xm=2~kliA0Qw#5kYxXd3FN*-}dF3zhnYaZGnY?@LIF}lprC>%Ojjm zRriAnGqZUYec3Lap8JI{eZkk^WBfe$>+|)a`I&EB&qBBIMs3!I?sNPe^I}Wa7Z~t; zv^mB1^kc-E7eM&=w4(Qt{Q!9M?%^v2SbhWm@Nc?j#IEp55RL%{eD}VcPtJgtH}6ZW zH}p5YRo@3ag6=uKMZn9WCm;!M_Q}?>{222L`0VWWO$DR@UM{2n)lY#t$nSKYe7}6% z5T5zoz5V!J-&B2p0Dz^d1%xxcxX*W9zE`s+ge$!UANNnTyXvj(7C;oh;uC*^iQFgZ z1OH?C-lx!);7#I1?-Kv8`yAl=lJrLR#&^Bd(q;WF^f~+JmmYbi($Bp?2d6~ZZ?CENJ2YhrtBi!LX0hV7;0em0J?|QY_xd3;7+!Nm;@O%3k z#Ou{ncBk*YFW^H0z}8214LJ8T>H-3!0PF!jKIJ~h&&}o$?tP#6rhKbDS|4X$>0YYe zeUAZa??Ju{pN#%WXy}5<%UhSt+@8k>}}Uf*L*E%XSdPoUzk_H-}hC7DrH?k zvWRs-u{5d?rOe3sFAYqg@R=>xWZ=iA({nu+Hgo*v(JmX?cz1)sFQF_r8qhP#Ezqms z-zqV;y_$|ijLv6tInQ%N+VLZTct}6NJ$ZL`vZh;F%<3;`G0)#3g8yhhU%pUYDL2F> zF$Mh^-*v5xfO?(2JoJV4+a?3+sXkEO`k;9+iP4Pk@hiAR#ReLv(nU1R?G(`Isdms# zFgpS9)S=M)04ns9m))6Y+3v&Q5?ebDC+yvm*UPIZTyd(HL$k*M>Gg36SEs~kfZ>kUBsV=RWYXa zPAE)>mBVT_E=`{(gqjCj8`o)cSL4=PAnQ{t@HZ9XQ}4z(teXYmKbh+0G8Ff?vV%gq zfY=oxZD*uulC27&=#Ybj0bf6SU?05)e_JSfyJ@oxZKl;H^uI8KSPO$}fDzifbo{3y z{^uN~?!>c#)Bk_hGsgAuI*Bxw=wi~Us{MFZ=EC{5AA8>*wK38S2%uG^zpb4-P1moaO87gZl6MX%ux1TZ`8B?SfN8P zuyWritGa#5Tc88I>hMR1mkgTTPWm$`%OccUF+yf67~A4g4R7;}(!qY~0Dp|lEA~d4 z_!eumbKX&v@$PPskXM@24t=uPh_VMikrss4>PXAX*3sB%^?n3s3Z60w{G; z4ES;jf3oNZjyCXUgoJz7y_<7$sRE(Qwx}#3gOW0k#=1 zZ2&4nO%#M#LyBlsj0E2SQG8jstncHv#u%^VnWc9Sd&P`M8qF%9 z+}>`Pk9CFGoF}&Ph(hcZR&chQ8MUvm?x>02jX5m4<^}b#pbHIdnrrNiEGL2rr~W!2 z<4iAcWo982)@^8t6W@c0PDwkO{0}}5F26x|{6fVr+l|FYcSkVoozm-GjQe5_h$JU7)dkaFH*YJ3 z#t>d8lRB_+A!~k@uV@ER$pSqaV;#8P zu}{Rt?$f+P!0X%b(a`fCeN$VDYDOb+{+jiz5!(O=5Y+$^IoV18-z26WNXRh*I+tFA zCRTr>rz=YU^9sDDfc_8Zy0L_=1)Dm>OPsu#rey#OCpz z`J=ePW2`ikl;{w;Zvli(4gtTIhbm?BU&E!eBxq z+{5U-P9$|G;WbK^N_t1qWt=<_{}Qjq_`3;VLv!_7`G=%bHzT*9U2Y6_2V!`m3{6|o ze86eCSz?In5SSJ8y+uwWew3qAB98>tY_E_|?%XW9xrdKtL-$~fPG|i0eb@~~LcwL- z^Tva16AIA{VQspw;{QD7C|$}6Y4>1JaXXWhp0h;kIH_J`^E#+ z?T&UM0W!H09?c{8SHXhyJbe*H-p93aB4JAm~{&psdy0c^!;sFF1 zmD~JZVRRvPVT2>XC;ikCz0O8pl#S3xnmEc~rMoUlkaS#S5(%g6PHwzifvUZ|+Uh-t zNdpcf25OJMZB{2;Z>Ro9Xn$t7zyVXw=it1I=P#8aw8{){yNffz@&obYak8I6qt)l$u%6lV+81 zM2yGg!H>sod=G#XUYG5GWOa}@25-&`hXr3OX$9x>^G)i7s^1pqf>h>uR$Ow#!ffY< zx6hx%C5Xg%RGv^IGc;gO6B{Gn-(R8=3NE4jH(~Wpr3DmKkSEhmeisxQ0EJ@y|^_V3W+ zO?)+P(U0(zwY5j?6HxhPcuUk1rO}ip#t}@!`?S~X z0-ks+%tmNoTYf7Eo*gC(_t)a{5AxJ1C*c|bsG&ck-B`k_bz3v1MqLkC_N__y55WER z82Bf=yG--&C}~Tg_3Y}=O9~a=+Lly-#t@s^rk?&vmHt_#PL52x@tBd}dg(O#I`QYr zeo2TOl%tv>9nZ!9mh-F4IDYbUv)u&!s$J7Eg44Sek@Zc+i?t8#PbvM+2>30>|85A8 znFx@?!0mASJvv(X;9+jivDe0BDc*jM($%m3V50wUL;vKfXWv#aLNh5Z0W@|Bj0|=u z6xU8~2^ULwP}=54wwLiQ`$JO%Ik{4?12-a4`}$pEnNL<>|C{ap_Z+q=Pug2^5_DU! zReG2;m|hsbFJi#q8sEJ4$jH{h`I-7U>bqwXq{Xjhn|}NLH)Y5wCsYsq%0FC{u;i^i zd$~N z6TZg1W6X1TUc-MX}pBd`^yRI03 zMt5ODI%{P&I%bWBJba-g`=g-7dOjJqlF8lt(a7QSCN?tnYB9~56@g@)wkt#jGNBH^ zlhrDEIlt!L1kBJ{9qs;b`g(X;-kGzP-^G@(?okHJSS%3_miYE;fnQui9>K-(Qu&IE zGjIL&&wG7NP=|2~9!=;yhs@T$t&6GPiSge$P0Gl!NJR!_#Rk4ImOo;QJnY2Q{MY#4 z15mPIcE)APXk5(~Vm&ikpJ|X;;Pn4Y)HFdSaZX2e2Jx^8)Ds3912GwXrd4sN=SR2d zK~T)J-xe(=*@kgI??(!B`|FDMUlE#3Aqc0qf`Zi*?#Q6WEV`c=4}9%%5S+a07qHhM)7#18W1l{*ev;8=mO_wt&R`+v4nhN-uL_ zxxcB1|IltoPn7+ivga>3@{cSE{AK-5&4Yg})nBz2T7`vuROO#^ojpt9&h)3pNBj@} zJ!}1ieEge3*qRNZX;S)aste2viw7W`pW@xPPoETsmwL04<3J|@7MEA5xjlE5_(y)yrZ@U*tQ6|!(&NO zyF+)=6B)Z);>x))f~D#>2|XML*F@hM@gUlU-ZSu zUs#Tlgp|I72Ibvij3?SdE~R{28+ebc>48iH{{c;s^?!7~{wIL9X`xBFG>o&J?|c$wEqUda zwJ=hf=a-)Ui{6|Z5YQ)JgB=J6m`y}P8j?fia0Y~UrO7IUgJaZT(tPCVTdrdu;T2 zq&HNB=o_T#UpeKLkqVvB1f||WA+ifz29I;n%vuP)(q~vyLL~mQ zGa?As2ti)g9|zJ0u;LCfUwaeTXd-yoH!(&ey0IHf{3@n6$K*hob<;EG1%ao+kBq}T zZ;}i9UQ!kU!RSi6%{SQN^jX@HWh&NX$WlhSuUj7Wa&N(77@(zSMu{VzZ<-}cployZ zHMHLCEq&;SA&8S+U2|BPinx%M*_XU6^&}Iut(xtCfbb^W{mVqfML!w>LhK!DuB_9Q z+-R{jri-1Qb(qnIZ?aMWg9Y1g(eoc~YhlPSPi~95Z}@TZ?@=}wQ|i%%UvYQ)N2qEv z+DE}_8eA=JDuzh%tiOE=ueqvv|L*d*?}`w$L0HFBohi@VwMzB9PKPU5O5pMWY+nzw z^EoqH4(PHeB$14{qzjqBo(MxgrVhgfjA?)z@l#B7i@=zU1-|DI_2V)(U|cqZ@90Ou zgH3sQW}#V6ANZKdFza&9Wy?D?q3LW->4}ad!FT1)DoL>EctAaIHRywwziVvn`Q8~R z+C4>Y797B5XqFyBo&Bd*;t@&oQuDz1{(I#)i&n1^%wu~^VgBiH3vsk~Y^o|dXay8r z@K!&L=p&W`ufas%@ZgZ5cY+c~XDgYUG%}Oix@%;6>G*3~&rC)Hi~JF%qZ{;n=zIo)4$;`8REWsKVBMH&YIccnNNz+W67&<5G{I!i{7uz2$VsjcxagfNZ3Je6mlay>k zkg@k?pz;l*%giQsSh%z1;$Ptd+*!d$OL7rr5IQZ7RaBkhvo2+;LVw9QVIP zraA~%=xY;s&db$7@TTt|&!^Fj_41E{boJ;vB_Bf|Ad*{Miz`Bu6|%H*$MX!CV5kt> zG+n*sx;F?LTa#R$qa zFStxbo(SlQI&nJfNUWdTNRZqKko(wiqefb5E5My)H=Jp{(W8p$*L;ERDJM2Vz0n}f znqW!J>RqTRiy1z%ypH9Yt5OjhAjYREA3Qa>atr9O>b!I)G!3fIx3q5@*L-#-NcW2X z1DpPh7O#kw)DNA5(p3S}CZe0cp;l`sPBea01w8@-Z&ohuks4;B8S|z5)+lweq-hgi znCkdJXd=3fG8^e3)G>z`f4ymWXa-VaFi|YIj%>_lMm_B`qtd7wY`$@SWT!|+{Apx= z9HF$(hEVpDr$nRZwvi5RU^F44$gfF_j@yQKA#fa;C&H>HIQRFXo4G$1*D|7JaFCXN0 zg=*x+&-uXZ8teR(&fHsCU<(8h0lVnMCCaHrit&VA{UB~qeQN68P*yNEB?E(+QR!8d z`zEcALB-x-pBtRnuq;WUYZ&zzU0D&}yb1gFd+o%cJ?3Q@unRcUJUGzZttpKQ4)s^k zbs-p=uU2l?#i;NJa)-d6l8kVMFFUu{*{UA$G8*gnGIu(iFZ1tY29T7vme~>P6vmH!1sbtUpjUqlr4k@9l z;LT&e;h;UIELJSs&f_iKa+uO&#etnjU^T?w+s9bt*H2*jebW&m?Tg zrCsz=5|5&Z+oyU(25> z@omd>bZiWxbrJXL2C@|)TQZl_3*vy8dC$rBM~R1(C~Ha^H0yqh6>t)S}xVFv?DAxtPTGIuVrlybxl zLpKj?f<~#X4#Cnpl?Q%Mf!9+B28LZfr7LtS0+Z2mb{cp-wmhIOnt1cUw?weMZwBEmDppwY0&$Q&tADV1!N;aOaE=^sc&|X zZk83)k#)MYr5(6GF}&zSUV?0IZ$FX1Q`_3EPy>d-E8T4H`2JM^TdZ({z7g<4g zsAfb+n7E|%Zeo^#BWJ1yCFnw^reA%?xPz41_`ErDR`~5_gG@FQF-aM^A2`8+p*(Bq z9jD$ogCP;n8@(j0**2S^NiRA*vY_lI3%y;mAuaXZDs-=JnZlY&N?*8Moo=l>(zD03 z0)e!9nm=E9uYYmtzJn&(r_(kNrURVuxp&4Fp4i%B{%OQKk*#5HxMAL2mZO?ga> z5980GouyV+B0Zng&KL-Au{E<&TOMQSk@Rbv!uft$&bFXxs6{lN0d6Pj3k|y;Mq1p@_st`}a^rH2p)Jj&@s=*UUDq zrZx(t!L;ib`Ihk6VTvO6d;;$kH~l^lFRW;VL42_RbGiw;hi#@WleG=VwfaCnIE3$M z8s5LfVfOqmtr~Yv&v#g(1^&F}HGPL6X%oGnu$bYM{uepnvi0u((w5%$B(p1;Fpy5c zk}fv$>`127FPr8GS1Kl5i7yC@C6WUnd5Dl)Zyo8gQ)q0nag!ms3f$yHy&9W15Ucyx zK)1#)*!__QUme3=Ua@(vBi;#$K+0nshUHo6=&;7rv84T%pr|`>*^^Y&uT%$+^$Wop z5J%y9h|9bW@N3C;Iw?^GzJ=r32YX(N0ANkjm$9P^v>kap@3#n<>;DD>!YgO-%?hFl%wdOHB{Z@;2I z7@A&})|WfKZ`3RH18daZi9WG!0P48ekrK~JS8A&|!Tfn=OjunF^+nX|h+T;zC#PrS zAThAw(I30YTm#$idzBCbvy4N&SU3CAdGwdHE9eM- z0S<`7J)p{5*k&fJGpA^bUl?($w01z2Sf+~|pRvSsYG~hkw7q!-zi&2u=0jT&KKl2d zRFUoXQUGu(tr$;oc-@jy=P@By^|w50M!*$>+w-8slvx?nEYR{k?ker4jge}ha=s>! z%9@okj47>($Ob%`UD(eaAh)}JKC>8P@)!(7fd6gCw67M{3(W6Jymfd?`dx9 zat}8%`)T@&^p`84i5kEAlDNtOl&Jgc7GFl`6TZzttmJ5Ax@0?sD<&$V9ZJyx{C<&T zO2w+9@d>!K@&ha2M5j3F@l4LH&qM+AsMTYzj(|pQ!3NtCU+48bwxLz=F5*7)_M3uO zoo#dugZhkan(*oN4QX9F)NF5bR&7R*=caNH_+kq@P)+kO!o}&n201+9xgA>6^H19E zX}VVO6LXjM2v)|iyD_(DgDA1k#lsml6j{bZU*grQ6)$Gukr@09z} zO2FBEh#3XeO1nli8LNl~uP0wne2zV2SSb5ehmmQ>XpO z%IM4=$M+6QsZVp%6;H_B2lcDe2oTU<-ei!)!v##2iJOtnw$O!s>Lfn)Q^Azs`F*#G zlSaMyOJT+jgkMjha%&M(Xwsa9k5Eja4}4W-C%Ij(WNS__BleKe{UJZ4rZK-k5r%wD zjtg1D9Epx{R40jj%97EfD0G$}m72L#fX61qIXlIF;&gRO^Zmk2D!%)HZB!kOfagAX z#7MYP-n0#^BAxH}?_5ZjZ10(wt9FW7YEAPMrvVDLu#FW`y!zg$MK4 z-M+qxp`Z!pSY!>Z=W58LXFv?IOd*4sUTL*Zk=k;m35)Td6S@ixccuP*JCixiHA!gd zDVw#+gAg&?`*)cQD;LhDW}6L~9w_{+XV&qr_!fb?UgYRnq+M_w1kKXj(m*2C*4hv` z4T;G{&8SL0j<>KF$tS{3iKM;m_EWibQNB05W3{JrEi->1ETtzVn;JyMRLFbr7rWgB z%KVBxNe*+zRp*lCo=*W%fKykV(dM)TT_|{Cr#0dn*oZj|f;xNYf-LFW-@kM_!VTKA zyR78B6}I|ZIM$-`bNkotx#b_5s|15F8caJ*$V2J02Y$wldRD1+hklFbJ1xuXHI2az z#>`OgyY0}wUciO%NP#dUPz1f^o+!JpXd$(-|Htl*bMS~Z@|!T#IS}&g7hfa4-zUxg z4&zuk7KrN^2~p04KJ$E$+#L9Ojns4L01X&Jh#691ahr>&#Vkh zoU8$-%#x}-GZ+t z9t@=E4fVOVc-EX8CuQ2_i>(8laVWMNL%d7o9Xx}F#t5vgqwP~N=pxY%EpcLjgl&?j zgA%+}-?0$~dCki{4y=vLZ3&}9)eyY5FB<~4Nm|XcmI|M@tUGhFf&WuO3Kx8Wo}9T3 zwZjGbssFPG(jeC*#FPG!kCL?1AxQztcZ1~g4*lR;b{0tm?WJ=ONMUyR zD9#Yd&Zk{W#R5*eMWf5HAV;JKwM{_rd+?CfSsxbT3(~Bc9tUQp{ueA6b`M+Q!E$e+dQ8-<^8d0 z`}*D9%%)ErbDmfeHmbezxjbI^WkT{H-_@Myu9kzI!Wk+{ok-9mg+f#1Jg0e3D;2l$ zOM{71_ar|I(z}66sQc-|gF|&0pEcdtqQQ)ZIG(Kw-Du$H|*AlO+X_*@s zT$}k7u|`1Dvy8LS*$!&-y%%AY6d-pmyk@~4DFrK&_|vYj!wt%7=Wf-2l{_qf<)UqF z!87+QIdT>A4Iy-+^&7*_cgCdMJHv+yOM@fTy-be32RFbJ7Z#n&7!4DMT*fT$2d-H9T`2kxT zQR0ZU9SmFfnVXSFQXdW-U-N2rJbWVrd#t7IQ$UR!N`>IExkv^*PRI)Lvb6NZi^fyx z)k6vSc-9$?YIQoOOa2>I+M0>k+?g8`7;NEq=-^usQO5rX^v`5zrj=N2u z;2S=$A8Cf^&V(D2fK8Fp^l61G)*X6>9})WUw%7Ga<)Ghuv7Pz8$aI8G^P5DSrc)kF zFQdqc&`LYmoMWI`vLl)~ax*k4a-@8KtOM_D44=HmG^Jso4k9 zx1@5PU;06Lga)Fn3+`oJdwRLiVAbj{_c0(j0~?t#Pr5cVXZ2veV-lWn$Mv#nSi_it z1{Pdu*!Pdx#h*-psfGuSomFKapHGzK*|mY;$VBkS9mlieklp zwJjzodQ2O4CIg2`Z{8#*0fnx*ol^zKh+JcGr+v{jPG^Z#o!7gysg*D*)J37;{n$+A zlIkpY(qxK?EZK(GLqECUV-Oe*XzCUhA6yNgPkULFLmwDyOH-EUY+!*q%geV@#9z-< z4Nkfv!TVKSly3;NJFfnvFyL8-{<~s1TgU?`jMSILHtT46Rvav}*7F*L~*z} zjKS^S8K@GvX=+C?Bii*cX?6KsgI_4qq_AXL*)ZzEtWRu9m0a=JX6AcFWHqzQOtlij z@>F#(*SSp5FzNMH6!gK%3-aQxs2aD*w=mYK*UrU+x@%X{@F*cb-1rEw+J01lk0p9>m@RZCt zDb-mpC-BLKP(`v@AL~8sXV~MaJXTm4N~0f~&-M`Y+a)1eZepx<=38_#BD7gK#aXCm zQl9nS^Nq1OK#CRLDW1eXx1QqM(s=uu;2P>u(Xt&04Cy}T{WUlma#?xulS-Y$- zVv-pZRTAKl<`*`jeU@}MolFmcJ>!OO*d}3lnjxWP+9S6MiBp*(p=Xj^1XsHEu~pJz z%n!l7MI0Z|XGUDy`HecKEhHm>xg&f=w$8CNt^MGX46(+2llCwOt^9oOg3c9N30lujlfyZHS$PM)6WGb~+1US`U}Xh>65k7wX~ zv!0trQqi+Py4SHph2dS&mN8=kY-5UPL;iFFXU68oGu4Gcf;N}=^b267 z)%*hy1VcaBqa~-M$tqR}cg&QiDYQ}d{W)HfD_0t8>hQF=z3!4X)4a{qzxTYFW0`Vn zCgL+rG=HmjiFd;ftH_ZK032|kixTs&a~Z9mO*lYu#ym{_wR2M@<*8O5%mr1lwyEW( z!lJLv+qAe&m^-_*1*hPXkV(`pHj}k`10r`>BDx=G^E0TR!2tsS&*~Zh`Fg#*pyVX0 ziAAwn#&Bn^*FYS?Rh?}=XxJ?(Jp|M&R)V@$vjrJ)GoppFX z{Ow52rz!#`L%)iyq3t<*dC#doFvhvF@=3zM(tlzla67yYf4utLI{0210XAR59Lk`I znvYj-No!5jxYGLpKYeEp!OEg;=DQy=0W&k89RllH-v{L>R50}COiDq@sq##G0(b`J zbe}NWsN$rI)>$A0X-MtGr*e&hnHqnXt7{=A1d<&+C)(pvlY1I58Qia1L!uij>71t$87ali6EwAM&ECcpgcKZ?S7jf_oPqC~#dv3t<6J>R=Ul^W>Iz6DOn*)J&;; z4fvL1z^~c9J^CC;P6vjc9&b1&x0`fK)v8GtOsZ&ze1sH;0-M)XD0CIN+|9Q%888x< zU8&w%s+AiupAn(-&{Xg*9TbZ8W+qH88H0%Tl1aPC=_8S`Xkp^d$UavkLsAPS;`Vps3(;)4MU^xXmdway%cNIMLlRkRJ|3K(_t#xm84C) zu$GWN}A6)HqT1Qxc)-m7!Y538v(dI6~2{ zteHlRw~0$ePbQIXopG{4?ev@{+bz^p7*aC2{7{J%4smYl*+QF&vn8V19X6?0%Uf zMe|_+ek*@*_H|aM{dTjFB5tL~raKfaTLKjeK6W(_Q&$N2ngzU-Ay^Fqd=Qd$1Ow)G z@CA=fl}(5&$lh&gJsjDW(~i#Rj9`9+hJddz9RPe_TKMbBw2s_r5z|V6S*K|C{vIe( z=DR-tD9%fc6;vc>zU$>|`w4p&o{#)WJvHNu_H~i=|hF{Pr)k2$f-O6=fyuZX{kXg5NU}KHfWa4a^+*=k9--Ha#IIQ}p z?1CI5fFt$Ck!O;}eKji0nBe1@Kb`I;&l}yvQ0KL&4e=;TUE28oqJF;kkid)JFVEN$ zYR`M4_Ip&N7c754=qo#a1btCxW&H37r5ExfLvY2}j*R6V}XZw{Rd`gw>J zTsMZ7Fki{7s!os-S|_0a66F|}Xog{*LTD7G2(A&R)k4?0<8Cd(;xw&z*8mW;moPz8 zr6b*?Fhe3pi%F?LcG}0x^p$aNG)3cCWuA=+dZ0@r0xA-fk318_@>@YCN7;oWnKcW4 zzD=cAY9cD^A^)>JN^oh(c)02Ia4WG@$p{@wZ78xrVgh(1C&%%!%_xO2lg8I~0q`o!@usWl1k8ooxH8ADwGUy5)9X7|V(8l>BiO7zdl=sa-Fgv#sZ~$uNBiN|mO{lUx(ZvmOP0|9 zSt8Br?P2yD<~fx}0am}@Bkaxbgg)6||Ld>Xrm}BA!1Gca{Aa-e(T8iSSl+cEuTX5I zBl9pHJ86zhW99T%Ip|S0%_uG|Vt1loI~wR4`2?>>!Be~)co(?AxRML#D2j67wN|q8 zZUe7WeS=9&#RXJAtnOpA`#+6h8es!4l^GL|mXq4kF%?x(!k%yLDx>tfj1pq4^${T#0St+(zHzAm|OOjM6(>Y_RVSH zd*L@438RE-Gli4Pgy~e-!SFz(WDwg4vQTcmL>h(u`9770bPql)={FTiF^8jbqqSzH z&b${>Z(WiAT`wC7ETKqNsWCj*2ig;Crk;TczN!ffP1E^yC|0q(HRr3L|jp1tebV@4L)Za&OoxXmv^Ilk0q%k0e_>(4W& z`7~bmu zj2oF#&vM;IWPpSiux77s&tjUNS6cx`X|n7)Hy2W8+3=F7)hbC{Rt^X~m46IB;{`%p zI0j<309IN+d9%Zyke#aA7G2k}Q1KRD_b=>ZZ(DTfDtchXA4u@hudN}JfcB8beK_`^ zsU&{CuhBrMY{+Z9yVJH99HwOxj~9CF9=2xvzI7uIQjEVI=4W&|SSPwEG|pM1^nuYA zO{HB+vg#HA@I$jPm@pbNw;_h8Axx|6B9bzp(n{3mu5x6+y=!4GNY=WCmm-m_iTjFzRh7GSy)3 zYIpz}!sFJHEtN%@=mp7Vn(V5+hNO^wj2jXf6otS9kbXN%z$M6BqwR!|$&KhQsfCac zla@YkW3vd~RlY@{b>`aG;GkbVn9b4K)l!J`{QV2FACrv`qV=tEUAybbfI07Vz4rBZ z>_B@6H|aRmhv0F?#Q}A4g>dJ3iTI0Lxb0MrhVO)u8jJIR?ZSa>l#$jx-JBemaR*6u z;8{0Nlt8~dv({r*FNvdnV%N{QDBM7&rdrbB_uO+lgs0|YwTT{(o**s5F5%L|5e}=h z8+=&iEBVUV6CiBW(jT|#>;3^+EijqE3nKEkZSuLGRQ$=HXL#wnerKU(MvRRBm2{8U zI#mISd4-D#cJc9mMEig0m4f7qW1r5@IB11b6fiBAP=ZZiBL2rJk zCi#?QHqqCxe(_Yu22 zv*yIKglm+f^NNMPqx|MZfipRdD(x3$uZDrP%ZLt6lO{HlSNE1e}^r)GLB)DhwEe#f2 z?ukmD(2>Cesqiv6AmcS%FEyaRXw^`gdfq3uFi~liVgXRl%V))DWXiBFTe5mLd9mia zgEa%N@mRfgLjk{2j1PPi(QU^scTG7>O<1}JYM6WDk|TzA6ODLs#e7H4BFG8Hbxqn= zW!paPhG9xNwV5n1PO7aiykkoA&c^e_e8}+DJmcOhnxft#L0fqEqVj}Da<2q93A2$a z{d(Sz|5KHNtOfEosKMA7h4=grybqPxA)XwMp&PwQN*ZUV9wy!xk4R%5B!e%iCLBIv zA&5zYPtUue0^k1QWQL8OJ6i~JQ-`bQ_G?3P8fJ-5arR3~r5cSI{xYLu9G(O@KMkQ` ziB!?G0Ux^NC+fAtFf*EV`qoRH<*Jl*#$)%g$5I?4Q3w4d5m50j@)ydNVj!+jqf<)V zO6o8iiO%bo(qxMu4sc~dL>8fwywhDzI&XfyJ`+zl#v+^C#!ex=q6+Vc1W02V-9g3x zROvlBe9{soUhR|L9<365FNy}w4|rDLvM>q0P>%CD6I!&p;YnHZ5C{vc_pE86(gwN|2b9Y_?YlM_<)SKA|SzNq8LkK|-y>h%2Z!;=9x zS-gsl0#;W`2$A`=mX$OX^Nd?|FV*E`gH^CbLy^EAM#ge4e%%&4jqVzQ6TNP=s)C6E z(41E(+9%f5iByGWyqA|@%Lu&I!6c+RWs#s#f%VhEn+EQJ>vad7Vw^4dAUaS4eh@S{ zaa-tj-WucPP{eAx16@5J;?MW=BSGp1Y8QyzkZzybehomR9BCFMcYgMJs?BI-u}uXz zN!teE-6Cu}Eu7E${qr?9A_0ZN{icC+W&ils^S5`1Fz!(%U!&1TW;~k`S7LOBnSTud z0pZ${cE(5ox$Ox?AN%QK*jbn=q@KVqEplX)PCUq(l{xY#rJiO?D<66k|E*CRgTK-y z=w_T&*ze0K1ag^JHTF6xfffhub`e7QmdY|wE|cDU(H@(38?iSIILNRnrzQo%65E~w(&ezuU> zL=E3!6(xUV4Nee9g&rI-ISdot*f8ckZv|^4k8mTM_EG5g68IbFbU>+hI17b-jGb(X ziuFq&<1AwC{D8R#H*u>Ig;_~EFk6m5k5K6_%O3LkhTFJM-{jpldSZ=&F18xcKm38c^3#8Dn*#``KR7>#+%5rA&-PchMV!RPtUk~aHG+Jg*57uof4StVe z0V3k8bGd7DOQtPu+v-3fE!5CTqy-(#P!i0_1IOI6#`~0rAG6ntE~;(D3&wm@Zd1P8 zK`TuS!q884=s+yvNJ^-=B_~yBKdz)(Nsfo&vdF64d{4$pbCVM0IfjDg{+|HWHYv%T z0hT(@6i5IIwkYW5=?JqCSHyZ7-frBtOQg~4IZ*wfzNsplPl``3ru#vKpg01g4&<5( zFdBvsu?9U@L?MKp4)HAd3TpZ%VcSX+UqbTB!Z)^ZIOG-e4UhMMBR&3IwzW0vP1NpV z`(<%xeI}fEZZ4wA((aD3Y%(QE_;7}$NJ}8iqt$E&)Uy_cKH|d})HCr1i|3YqB%$GB z#d8ckK3H`5)IS#6)Uh)+j%UeM$ArN$#>3?QVq|YkHFn?bG^Vv=gt04$xLjw+#9=Lz zZuF~CA3A>4s!|*)7Olo2thMJYiJMx>J(lTU9BA?;%hx?lnDyAjPKkL|#yqmxq#$Y>Y<;69Lb>%Oh7iAXLN*DtcMkMjQ);Rc ztVL@2rzrm)&qx9Gh0Qdj@iiE6Un`A&_C@$zT8d}yCxl5XCbl?Bs)#^?ASkp7Sq|^M zU5?U^?-Qvl?RS+JA|C@eL2F(AI0=`%pJy)=4W;DuAt&5BOe1iPkZV9)yNrGqu-$zD ztG})&(D9Oz7ZSs}h3Vjn$J3*H(&7j~IrtX7*fFS4WP6`YUJyDYqkjl(VyF`hYAP1I zmdO|wXnLUdIk)^Nvs(znZFiWh!Ox`-b{;a-7%G~Gzb(C+4uaPp!ax$$5^~01=Nh}} z^n$RVNycnoiJ~a1${g(#?U1Ma&49nqtgI)jZ4(H{UW?W*!$-cK0FjI}p>NNY1y=mK z>XjpE7MSwu4${Y@RNuRl{av9Y95GibEi zxr0U9TBQZTTO%@jxvh29q5zPc`|K1oE?huc~rq@xa7h3QNPnaw7v_B7{ zTqYTj2>{$oqQ1hZ_A36WNlcj|Z3?2#r~!C6-+#LVfyDY8UEq~jL*KgEnU{e7FP9?v zZ3c1!A2_WJLx)(7lIJM?xGSBNbwqtZJ5rh=m!c(4NY`TVT~qajH`LqLCwI*M=})26 z4>YY9h((ig&^j7n<=iU+R-URsQWtPc&g~4QUd;JP3Rb+lp#y|zv`XTs+fxAW-^5KV ztsvI7q3N+0S=MQ=<}{gdf^ z+HPM=Abxp?v#%vx_H;J1hj33KplHpg1>{$}p@^9l?`{zeB<$9Rbm-;ls`;kEl=4yJ z;(Dv|myRYI<=w-QdrgRasUBNqxu@d4c{lU-guH6p6kNRSl z+?e96i4v3TQwvJLMim-GnpGHQ)?OH&Yk)4LUijIHWYPFXE{1ESL zftI~G{D7YPscrg6Tj_%DhK3Zs1nA>GpbkOm?qp$)t~CNJG)3_Kt3otAHctS6WnSD5 zgdqpz>7gx#vV3+PVfrYh2Q`_~Vgw8J-;p8Zr$G{9r5-l*@=E(O4Vd?$@sqd-7jBAe zvzxwb_RzK@s_RWbs9kHqEx|n&#LidNu6%S6%mUmybELyXC=^0C_l9I%i9VwEG92q9 zPwr5YMjM0)X!6t0y4_ye<0%tp9(mVd$J%HnZjAyq^)x*M_+F&m+eMIz8$thxFKD7` z8@xWnMQbtgbN$8b2K#k_4rYrYaSG5y7cQc;;mWkG$pKvO%i}3CYFC&9Bgf{nQ-Ecm z(x9TB+BCW_{X&uiEuYa6u0!yAstg=Z#rxSL$ovq9e*1Ic2;l33t(uV>d_*tt&U!*~ zh6xBvmUY2#tGkAD%@y3hv{wp!FNnr314Ho8$H;G z(2DJ8@8uQOhgpg8${|o?n3ONjOPh@s$>pYisQIWw-Sk!^(Vib4ZrG4uM5YwstxKhW_@W!6oxD z@ML94BwA-xm5}5myTTkz^@s=A? zNd7cJw0q2kEQgP#LK&t@glXoXX^Pl!JLEA z`Ts+tVn&r)v`1BPo7*BQI~sV+aLSWeH z6_qQga&rRe`qwO1z%$&KFN0N>+j zD3pG`oh|cyD~6}(@rD#L%;7Gip}sYommd~QwACnnN)82tFyXO!I|kJm(OnwDAib%5 zPeIvs%O!?PH-kH-PH@sCjf(X&$?|$ z*S+-k9UW#C8FMLsZ+xEuU4!IDGhbY7JMd6-#CWD|-pz%PKvJE}qC@*;clia`8p764 zww`{50i$of5{16p4`044oR8ptoCrbT`_9rjA(T&odPv4Db2E2)$j4A*u_V%MaSp~Z(c;4@S!2@U}+T~cxZAq^gHV}tCmzm?)(pJ?8H zjee8&k$_&YX5@0gosn?MkeN(RtV;j@0000000000000000009mGX}@yt{v4scANkJ z4s7R)(8LXO)oW5#Rl94JT$Z=f9O_cRGoAJ^*6eu>s<<$UC#W>8KTB9&l-%|~m0Cq< z%FQQCqt0NH<-3EE!3yr6uZvjj<|&ZKBsER{S5tzHE6TrRZ{5UJ!@k_zDdU5KtiT?d zC-5xAW`c?m!#{1NlZY>T_m1Dbv;-x)au?sf(1o0OmXtPQDD?6mifs;@B%MG# zKY%y~_i011s#28*|9^+W)7k`YYP+>8tNO@p!#adedU(sn#l#h%`HSFE9958*6;?=6 zbNR!qYeWMf9)J+!%NYuy4E2wei#k9UKdCGEfit_Q0B~F>>F={;DgDvyPLNw>F2%-* zixYjBbUh!n5MFa*#Yj4VCxXP;Y2BQ5GC6)}Tda(Oj4CXMalNY|EEPY6=-puXS3wU3 zxO%4J>ek=rW+GtkXs3_eWj?Pm;h}`pZYtPx%x|?1^jF9VE>G+!4I?usv#ma@(^K_$ z&$zbQIB?^jUFF^_=vBREX6&3?LE;k~R{`dsxZ3Dl*y^uQb#!RCnnss|nq@Wv@sKAI zCC_x;yhU&4iw_1Htp+n8hy#43>M*)_OezKS>lZRpxEQ(uzKq|?jIj;Ka&J2Fw1l~o zEco|6PtisK_tt;6R$#w0wy%r*kj{FYFG+>&WsDVczd~t}s6ncM%-frUozxtQX!XkD z6+Lt%<9WxFtm2D3zo~mRsvrGj*5D#;gbLljEsaa#l3yn>DpMhIZUdYS(FDaxPKyJ4*_}sQ)ez+|JHm?;z zCIWHFanmI-!0Va5>hi++6J9ZDG2gL4`!GCr2}Lf`&&jOWA6*~bg*vnm%_W26D)eZ% zeYG{{F0YLr#x){pQH!7U6M68@o0#a|qc~ywvoHD;CXqrh{g9eK#aaixU8_0C*=8Gr<;M02poni8$lES#4@C?kl6ncJ7`MT$RgNT*^$C{3Syp zc~TARpNXfBdq~;_RQi-wr|=HxG9TMcbc}HhgC?9s6MS`>+QFu+l9h%e9{g;H@WkK2 zZQ>`Y(7HYr)`H^dX?m_mkzB47@tu^f|J>lqmwn;dI-vjk|A%N@TJ81)xRY?Kv9=@X z$@nnlr@&}e-rWH;h8E3ZFYpy{hz2V87>@j4gp!#1*LvWZ&%0J$dAB(>SnR6+KDQ7d z5I_neel1@+L6$8fM~%6l;?&w{T)K?BDPsH$vx?D+>u#MfyL)+ku*l2^w~WbWDy+~a z2;VzkLySsA&8#D9t9lCl5Hh#Jx2Va~fiq!|H5IC5(PwU*=JY<;NH9R#22agiHAVId z{G%wp02xg>#~JGLFGZ3G?N4e(U38UBhjE*;3elKv2Wb`T-N`oP5?|87_ET6$KG<}vx4 zhx##h+J{6Uio&vGfRA`^a_8Ipuk|qtowsE11%jr^vF@if#H(+2+NA&B*u-h3!3R;y zgS;o@= zq;Rj_-UeFJk}}^VR63oFl*5}!K|aMq4tbYoTI0o#4UHW&WDi#)s#Oecf_O8bv=B=N z*9s)vzfYmbZt98AS+#>IXGl@_p7nj?GqT z=dEegc2KDz!)=h%jRX@OI||$;PYd+9x^>6i4yH5fSu*vi396+08P5MZ6uuc@tZTEr~=gB(kCheqbkD@prUGfYlANklfIL%}R9B1>} zj@8AYFpvxzUBB&#ZA~V70N8f;Q4mDM6$F)zG_F(;xtD@mi_D&oRpMC{bx=uNk>}bW zDEi1LRlWq86u-8eoewij+CEW-6-3B*UTGuP^8B1TpLB)^A!BN( z5_&O4wwMzL7pmD}gs;a7So)K+3Lx5XN}8y&;!iX_!}i}WU&vE&B!OrGFj|S~rSwbe z3BidzBmn=M!m?6(>zo;gk}fshySr~xu?NITxQl;A!qN8=3n;;>QgD_*WDEr5X=9Y@ z2<%Om&F;lP}q%6N%LV%0L>e-Yq5q}5}p-WTRr#+A*?-Cnri?QqA6eWN%af(m>TH3~6AH=wZ+SpTVAj~#6R9&1&=(H9o{ zy%}m1iu_5|%Xm@kwc{=q-&Sg6ce;{LCDAoGlZ~c+$QVb-?xLvYO1=eEwHxdQugr5_ zL~S(6(osIUj|E=6g*5Hh>yj_Vj`kEJG47Fi^u|1XX4L3v=G@$hUM_V_s8)ow?$CsJ z>SP*9q_zeU6RK$`@Gn=i0T7Tp)5BX+WrhbLVq|s|Y@Vb_Ld}oZbtY{~UVDl3ona<+PV@7w3GLt+ zfQV>dT*~o|`=qc*$$Vc71?(=)A55}UF=NZ)*G`+)kaxPS$9aap!Mj%03!rvcorUji zfVr5Cx|}f>`+K#b5lR2To}9A(>3{$T z?ykwH0GiY(FaQQQlpwJ7C?Eg;0?0zyZ%%2hvNph!ZdSp1HbSUbKvot9&Tp7z=6a)) zdr|l{fP?ZB*R5%(eCUMi3UZ=`P+Y5pRSe|24RL5i4Z<8!DQJ;8^wnBwDFHR|McVn> z?)>hw*1myMkr!fSPHnu(Oq(Q&<_QOTg!k|uP%BVd7*azU8K0=>jHB%i{(Z+QOh-a{uUUj zTn5~?qB317%UP0H#ZeHmYC3;U=Lh|m1(@JXA-9GNl5Pz&4ceezz36zWJ*1S^tr^sh zgx#;p>ei}8^h$Z4jH~^;_gnw~0%)fT=4_sg$|i!&L7dxrQqQVGwHt0olG@$DHsG&u z(-3CAVC?lb$3BU4go>~TT$BR#!A>UvLl&L8K&~h0^W8$&_~D4wG21^#<0=G9>&-)Rcbsc%TR>S@P(w4bhRDsj9y<()B z4~0DQ#qe(yGey^gK~5!SZB|!7cQtillekwip5@w9O@?ZbZL!qGbD!Uw=~9o*Xc`|f4J^OH)XzCrywuI|-BaIrE6sym0 zeRI>*j|@QtH_0v7fx^(yV_ZgrS?rDr7t1IX_eZ(e!Bdv1~H{q}$Pq89CS~N@7 z^ZRMF=$fkGmTiI6!`}=|8pnYaW=gh!SbGpyIs7$(+-bpL8383FD_lj$SJXkK%XCJ9 zW7b!I;=(}PjMgfUU5PcP-;y<^;(!&JzAhawO4`RWO{{e+XfWN+ax1Fg zz)d5(M@&a~eL8WbgYk_W0|I!c1B1kXBERnoyFSBEsJs@|fE)^;-=&oAy6^)$D*hIKP%ml4%b%7%(f2>*3175 z@IrRVGQu|dIce)_w0M1CRGcHV-UBk+^7*|tHsas#RG1-S(>1uzM9<}u>8I|GY!t*+ z*K~xZd4B3GRiSx{pW5ZIXUlH&DD_$qro{Xed9qXUEehY_K8Z}V4(+@3f`SbI?d&On zh!#{>B=GHOQj%hSQd%%nEq9OutVGV`R}KO?j~bA5%@m&?1g6jrX_`8-#e-|Gh7X9% zSRDlRF6Lp@aP08cKV5L_l-x6pZg!O=WLxK~J7bMflpzvHta*JP!pIMvAS>rkrozInbkE;aU+gs$gd zLkBc!Z4v+gIgs4EaOpxg-nrv>TOe!4N61me*xxTmeM`fnWptbqI<9)=QzVh{4eCQd zaqFDxDd092C_1y)%Z8=!f)r+=joHstLRPQd>#9i8DJu`-xS?Vr0!ZU5EO2GFjwIjP z3j_Cvm0)mZSLs>>$|{KKco|5L!YfREx`o3@(=qJH`)J4t|-s8JJRTg6`xS{0} zgH-!CXto((9F|A$x3uU!7JHU2@%IJ7k>p1rTlPZ5EhxuR%Y$8lmKamUir0Kt^I^uf z!2cis9Ny45-AqKd!Ml7DwEf%8ELwh9q6A)du7GBljI%86zYrr5u9E`tUer-#477ccaE5z4t+1e<*Xf&Qb(_u(YQ&~j?({->u`jKV~Ob_wBaI%nL*#U%{JxB zd_>!KM@XsR?td0qsB|lup1J!k%AMP}wRO=UI|3MgG^9Weje}+&QD7!HCI?jJFy5js zlf)@@9(}l`q-f0FE1=t&YF58}SX&k|*y)LAG0wAO@!inH5CECZfHaji>O*!AJC}-f z)(AJ-3f?K&dK~q@wIfG{3ac%I?N)T769m9&x{bk-rfcb^Zn0yXuZN%<-Co9~Wp}=- zYgQw_ASnXlht?CDXjEoYU%!@@2o(ZOLzAt_t9Z2(&R0r883uQnCL4ZhW;Cj`Qqm=Z znSRQ=;YQmJ>)+6DQCx7xYzV{UYU)&a@`f%pgy~NGK7=XxalV68#H-gR9YQ0R5ed{6 zMNvQO0jF(G9;LK{s#Y7_?ZzG$r~cS95>B_?U#1)v2z^5#u*w7u60l=46h$7NgIy1} zIy?EZ)m$uR$bBOh{uBleYyRz@!mkF?MHD88m0C7j&}^oXJ@n*-p%-5Ljgh=uXjCIZ zi=l$E93r!9I%@1BXDPt;a1K+yEpnS4Eu;=+Q(nb(Uk#W`1Q9Ob)%(4qrQ^|Pqz>6+cR|i~3(7!e-{w6;_;d;scuuhiJOzojwp3}=9E!G*`gh7as5Cx8HE)#hm zuWr|kJL8}L0C9ONhhI)#7zQ;$$^x*kK68A-H#5~7quP(bv;-fJroC%TOXox^&YbRKnzp)QTTLRFsx4inUPu+hZ?~pv7q(+e%XBYguiluC1akIlO}Wyy8?$VCjWyG_K#AcA1vMk5+W~zdkF;*UgCnkQO7UA@z-Wsj%*c zv9%>!^8ar*6R?GiCNoKmC#+yU09^<70lIwXnMp zmFFoUW)P1dF|z2)pwf5PYz&?VWw4qt+f5lTl4cN{KsP!)K@Z}4%v##13DPbA<6Ig!y^ zf|U1cwYO$&N>L#Y^K_m>I&@F?-2Ld!zTZ7tzZHUZwdlsO9cfDq&SK~FEU{-alnnT0 z)lMP`fB*w6yQX#GKQLiy-~a=?xIP-LxmAE3Tkwzs#H&zf!?tmthldTD?(-SLjdSOc zN#W#cAP`6dX+BAXlXl*o(xFurKj8flo4q1fdVl~Gex7pEunn$LJV3hgms-FDnFBlC zYJ<09*y|(V;~3{bdK4A%^tZ4G;#BPV+_W5+I>N4qoOph@?T(4dPGZf?hXif%7dxJH z2M1k$gB=)6|2#>KaP||W>4Zt*Yzi!iBYeLL(zi=fYVT|1FDGOP*7}-9Gl^Ejat?*S zzpYV0N`gqLo^-U1Q?1FA_%$iMcHC`+Tszibc-q-ur%|;sj*y!qVLw=0SaIQwl)#mt z(+Y^em%QP;@}eWtEX3sgJ0!x?Y}9x%_}$>}+t&!I%XXvIl^^!g$)`LyrYK614*?(7&W(7AE}u+u%1`@Dz!jfYh9=HWo&ij z{$z;2+|^T2FKerb2s;ooEhRv)0~ic%zk z2m)`VE9D$sY6Mg(7=qLCJXFxsVSsxl^sbYS1y%W#TacMLCM*b%gP$qHiwvqVvgNQPMx~kF5)~6E=Wl>2*c@ChW zCMYuX!2Wr5w}UeLK-L^T6o|O8>e|np^Q>kj^tH~Up4jjYAD23A7iC3!?huK11o9iR8zAPX2h^N(|HLgm{ya=o5lxD(3L6YLX>Ce^dn9e zp0;Jz%xCnXNEzkH<{0DhziF|~)9r<@G~GPQaU6qYVLvr4cJ#m${+blf00C@jzI+0@ zNx`1D^7~l(C3Aj3gRT89o>U?gO{9x!TZaj&;k#s1`1#8u8vrjlnK~h9GqcnZB-4Dr{}BLZSoW9$VyeOhl4X z8S}F%{fe0(&(S!zoHH=D-+QA#aLWd~pgX#n2j6=8Af9*`5QS=kqcJ`15!6^`g`^uy zOS!JH0Dp~`S+n=UcR#ll5CkS8dd8A(T(-99$4&a)HdgXpjx{{EfJ^5+aIU2aD#=ay$MuuqPRRva#vkPn94M3RF4VqJ1d|Uk0X4J zEN0I-)Tsd;NLqZ8o?@kc6X0bDmHl{!ZV|)9NK4{`O&Gu`x-^sgSe_QBIBpyQ=qjv) zA;yF7U)kJ@k@H?M5J)S|ylY?ZZOWsjuO%I7i}$j6TN;`&!DXqIhu_)gB4zoZKaW2; ziF!m8l7V_>Kaf4$`cCL39t&+pu@5K0z0=t5zu5t@onD9$W)li{DE+dgKTC@uh>;9c zH7Rz*t+sWbiVgZg{rv+0eI@D*w0Qs)2|KcB^UK5w4{gTWAg*U>UWCjb`$lE#O$`nH zXwuDxz_xDnZ0?}`8x$XGX6jM%b+cr5WPAC7KPUtOZb40xmI;IU48((s~y z3RaNLMXI2X2z`>*?!+NzW+-Ik-stsgfB*nOn#ibdu`gzN+He2@GZ0}3uK08lq_TM4 z%WBc28U7?|z6VkZJgu0H09x!?see2?w#5 zhg3k%6rLa<qP*o$x5C8xc8dBzjoY=A5P6w#>hJOFouJKEFPOVjhJLper z*-us3;t$^StTFARX238&JKKMI=nZwZs%2DTnk&{fD(W@~0AI^74Mi9L00000000000001hM~uxty0)K2Li}U-ZbKCt+OK$CKmY>^w!5g} zG|=4;8p_8OA4K_D$6#o7)1wE}~Z@ zVc^G%{RmBW!_JaY^~taRAL@~7Rn{I#m`UN~`xz zdw?vEN(5N~B}PHHPpbB5vOLy1o^PpKgN9{1jf4&n_r7N#_5w!Sw_3zRkyrY`wTpDeW9EQ0O z&2O?@&drAB>$M?l$l4Rm2uHUroz7hUBmJ+}nutkJvN>!(`$+})gMF~OAwuKg9sl)S> z@Sx-|rL0&m{PzYZD3I-FH?@g|ub}{ORxp&nsnE$3>R6Ma^STty zWxx!CNa%Iv$6y9^p5B^L*}wSn8uA;)X}4fgyV_{V$PW}jLz^;t?GwI+Z_kjx_8H_^ zTOnQfJZnX**1YY^+&jPb+S7G8arctz5NGBH@|u+CRDEYpJYR4u)m3pe3qO*t!3Mex z`SV|tugW&K%Dgx^&SM-^^o}M`nh{ zsf!L6Y0CDgYz!VD+;1G@idG$-+i(*op|eS)CbtAwE1q(f>cZftymI)50f5@oNV+hP zvY(U;zHTf9? z3v1(jSsY}>?-t5KgTMd+*3()F8Ow_R000`8wzB5PO@>Z2@jMMG)x(l8sNW~46e(<` zf{Em&Mcw4z{N>d=pFb8wC)!^L%lU(Hrc}q>@?Frk9SgbZ&EivyevPnL000SU6pO$T z_BzFWG+w+lLLs1NBndh`)~>wNispl=;4oXo>td9c^sFo_0v;hvI-!4;npj>FIC|Cz z2WfkLUe|#Mi_t<##t`o{9wMC3b9Ksp6)@w>{$_G4&p;!(qnae>gv&^$(tJ^U^hZ7L zLq0}slxh{kj|8|_2(_Vp{^F*I@B&Vugqu@m9g&!7K4>N?6(s8cdm- z#9`T#;-v5rLy)~O0Nvr|v5bsvAEBb{W(=Gt0M45ua~<#xytY==c@U=;V7=R`R=~c% zhxq7V-)48^11(Bz*FS0jZs`@vK2H`DkDSN?WsqKcmC3`X9s~hM)*6 zV>1w;vLOxq7z{q}w!8r+&^HJV-h>)hxX+iVtP-7SupI0L(<3lrnGWS*>m&s?=nHa) znAp-vRE%iWV_@U}I-zdSpZ;7zk@yBP9}n`ewoBi?0@upKqhM4rf^J==qgbH0D#*UY zNE84NvO2a71vmiFfGoY+j^}@wdgnO$?g(~8rzJ7ZDKZn6<5>Y}iK%$AXw~}f1&Rsa zK|Te6$Y+IJE;j(nM^60+?)1lt5nuoWul7gz;6nB&3SnFkSP&oo)G@#S000000DqsF AqyPW_ literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/entitlementreviews/review/reviewpagemembershiptab2.webp b/static/images/auditor/10.8/access/reviews/entitlementreviews/review/reviewpagemembershiptab2.webp new file mode 100644 index 0000000000000000000000000000000000000000..72e07602456f8edcc6989775058a54d8cadc9e4e GIT binary patch literal 28618 zcmeFYW0a*^wk;aAZQHhO+sv?SWY|`QjSSni9g*P-+s3;4+^V{#cH!K5@84_ftse{X zn;f%`KKjH`k(Q7cZ~y|*6cd+p=S<~4~f=SE)B7vL0rRY3kddNhw9t=^6B=_9Fq@@sUXcfsM# z@X0R}5D$AVhxVRa`Nq?sUDaS9oBcn>@s zr^9ebXy-FOp1wJ8|5J5;Y6YR7k&P==7b>JLSh*vr2J%BK>K$q!V8A_qbWEgwJl+LL zoRCaI2U}K#8;!m0Kti*NB5>c^Kj(c+Rcee8#6pnVJnWYjF5IO#D9NXUl9B^pP<5z9 z3p;BLp(xML9Si!FuymE3Hd99L%@h5VGr4=6#Z)qJus|9&^pX@@dSQ{(=8*AaR>!i0 zO!3fK*_8d^551IK0? z!z6CHi&_(%FbI?S)%XfLrqPX{6hOocvsy5LcmPSP^S~|q5qLmr5KbkSfEQ{rcL;e0 zno#YHm;WW?j9x36LO6yX(tP6l{jWvAI=4;!sAi;(K>n*N8NH3-uJzaM6BD0g1QY1t z;_yV+M?LsNIMO-|WQ#w4&HDaaQZXm zt336W)LIHGh?lF4wF$nk^O}a?dH**5gl__ST7(+%?fH1}o8`Rt?>__gU*p+c&Mxu+ z3*_Vf4*Vf$tG=LCE=%Kcb`Ih!VDSlQ1I(F*Q};WB^j{(Pnc{Jm2l$L+``7;u4KLsV zYPlc2mC-WvFMMuM?0&UTl{D{R6T}Angnd`;rQ*fgG#m1a-l=|cN5(|$n$KOdOMbkD zG@|ovnDrk$Z+QQ90v1`E7#hBw>rZYSm+R(9z*zdd>}3ff8qFiki{g;hVB!VfxaJew z{1b@pafe!D9C^^Oc|^QIQ@PMyt8=}X%nf^?;U$a_OYN}*{s>>}wg=ky?<*dVEyw3$ zMpz+mNE0io&=}RVfZ8{Hl#P*}+BtcmU{^lQiZKi{tndnNS;u|h<= zla2XGRM=zK%I!P+J=ZOY>t$J7qq;$j^jU`ovy6)+ZueK#>S9b= zL^#O|2sjsHrqtp{vQ6ASoA>!)f@I%q_#RA0T5c z{7fMGF}|$@^$Iy=m6$x!j+5!y4*jU-w?`jbH4ra^Pw!}>k=qr4m6N!bVvJ{i^ zBO=m6ekPY0Jpuhd!ls;y3Cs||DX(7#egn0uBm@z<{<|iqFESjXFDG`gkH~n z6$l&^`1^pf*eUo1LjHa9VebMbtl{ksN;$zMg_(dav{% zHyx2L_1k@g&qEGt(g5T@UM2f2k3TzRzxt|n`&1dtG$Tv3;LuAFwLRq zJ-!YW+;mHE?2V#AddrRN?(S5~E-D3(IvVAcVnFruPa^vHF)t9FAuKgjQxnH~MAI+= z&KF71Mjn+E+OoinHKNBvZ8Sf?PP;h(2MWr4F=ua-iwgn>jMdS)Eo8zHvfuLh4Kz%} zKNsj8P=df}YO-ybyMgIxu#1qS7SrEn%os#^#@wst&er4z*Y~Qh%CRpk8ENHaw+&AD-wtW;-dZYp2{uZ+p$ZOe+Xu z-x=@mr9K?i12WDe_x&e7MpXoHpA3(95?^*20L)AABcJK7amD_eCqEbrF=zgzLi*=G zgR;BL3njLEkOS%I^gm0NztaY+%sk+xx`SYm7Bf)1q5f+ek+ru(fkr-DkjW1V&C&l6 z0EdsP4!7^3Rv1|o8J<%#>bH}MpjB8h)WACp2o>|v!(Utft90MJQs8{~WtjbyOMoC{m|83Zd-oMPoJ(M@GHF$vX zKiK_`$F6|AD)}j4X(r%(;AcECr46;>)^-NGbl({{1vf$fV(Pva0!K{j0hAEAxze@EBojNHXY-kMX=qSz9zeiypI(Ucv5(9xt_k zG~9RckgVbJl<35uCSoNIkv5{xbcmY#uFs+~zgOCw6^Hr<^?zgD5H8vy7T?oEgj|uS zu;bc*omq(zGQO~6C7uF{<`6Y4Ov~W}Y|=o1GJp6HO9>n)Tg=IpbIFBDS1~n*mQ_H@ zC8gt<(sj$6_?E0jZUIfXw*V^@Uuhi4!@hN`4nY3-8yzz(e>VcGo)RGmDLr*gE4C)1 z=M^V+&Y!75OYk+&2n0vVYk1Y zr`sL?dCFziDZRRci}=$!+=s(D65` z|ABn|1BLTf=Bl(++AZ)iQKfSe8LvAH2D%#6OUWxu{lCbge@}aVYWXCnGY6KpGXqHb2Te&``7jHrDKhnoP z`hl*z@l_Pi%1*VNdRe)xeWcR-TFqflxoM{t<}f>h)(iN07MtQ0y*rPENJiOWuBS48 zI5MjpTh4ZC|6ZuyOtUy;cR|1Dnsd$p;ND?U%|%&}uD#Rrr=0YqD3uMr@QyAMf-w5pxv`>DA4W@(i`kNU+(1V8p3c_TICH~u9~n}^_Mcc&LdljcOff`bq9B&b)e1-xGiH+Efk`B`decj&*%TbjSp&&`2(bwd_J@ zMYz2oII?yk1Mfn$uMv`0cVvq>2Kzloju3*Y+dhDMI_j-E!ys%Ff|G}>~rw(mnFCrxL0&l?B`jH%um7dvO3Ix@Hf7fLmT><2R>^#qIJne>O`bL46-R8H6j zL@fnZf1WnWFHsdP30^MmrS8-|k0D~xYwRwKj*dWwZDx6WG^ta6k*3n(S6Gp=OchPb z_tFYma-o7aWQz&73qsM&YH6AztIpc&Z?d>D7|<9?Rs9Yq(yCbir?t#O=sg{h^ToTE z69_~9Fk*|>1Ja5LgB<>4k>~p+G$O(sH-i9fI1ljBMJMOoryM#mKDWEK*MQ~lw&9}D z-6@#MJv=&XuV*rBZgGVv7K{s=Zo~V?g_^AvC9j_3Ht=sBlN9W%LF7&6ra^|`yNvOsW~l>;mL{xe6!1GamJC!SrY{N0<~DR9SV64&*Zu?)Ac zHY|n9Ud>410Qk?DB&NB(RKy+atXP#+e>09gW;mO99p)U@FGU!u(+iWni_AL^XT%S~ zHyGWPui=n*S$$Nyht2r#bI(X0qsX7%*?bNL^9nMprkcxhh4KM#F-gA>;TjB$kFY-1 z4KrX=Z~x9`!6B_m?gO32S$o zzU@AgSYr;g?Ai1?uS6ixkgfhqD{FWlo|+YYgHq~G4u6v*4PqGygcwiCSjg$WX?DX7 zk}?1+loEf^wCwvh*gYW#e(3RQWP%eLS=61*T^+4}hUxo^?7GjiDg$7p!Ii+xU%2sPH1d`#NC zu3T*cV7|>J(k)YVXN@pc=RRh*(PQ0uQqZw7b;oIqTTptWArBh=Z4dyFqxU;WG>hn> zur!(`j`#Y#1f~*X@eIp^yUT9svi=7K0^ux>x2O#C|*bIlZXFvZwt|@~xuvFDr?{{D#LHM*&btD7q_1 zpvq%?&*9^Sva?A&<6ALTYm5j1W~rywI!ObLzqW@!j>d9TdIgss1gsIpxO^UCo!ViG ze|kZe8p;(0=nl@L#;^2azc{bP%l=r^(&IEcDLgk+h3Edxg|`R^A3c~RWBZN0ux@s5 zvgyZgcbNz5BdSS)v;X3L(+}bqa9Y-G$uF;r#CHu69h}6KE#~!~_SK0p)Wt1xjS)sa z)`TIyJ(D@v$413lzlT%Wca8UOU^5SJ1vo)h)dJ*nqw4OxfII zWz)5nN5u6ptq-cDmGu*EGs)5NpHi;jj*^({?{+PfjzQ`-!1%LNoP22@nbnG}fYvf@& zGj7w!c8_`$x}0UL?Ol$0^w?%~%C2-(6T}^aX2>=rJ%7dP7c&7#v-^3%G&F=Z>tm+V zD=lHMq5vUSMb^|1yIB01Lf2vXW4}hcFp5rjGu9aKeUu+UWG9e{BWTp|*SeLtW*rOf z_lVLLk`8+@yE~R~CB(Feo+5@xloK?(aE(qns@b_g&w!O|Kc4B5Li}7BYLVaiTD@@{ zN651b3e6!$YqmdU5#*2QeBxQbOIeV7U6Q~t_Uu%e* zQ!fwJ0-ydhi`hxm!_stXRBgj23p5wvr!6=~*TP16}NA zuVj6*SBaCNTd4;TkSk+}xpw)1{+&icJ)~~)6L;mU6YR0BccMDVGJ}_*m8z+{AxsBL zbd6ZhJBZey7%k4y3T^KJJlby?)tq0O^CQ1v6MZzHS70M=6bvhLpSXC6Bh(sj`x!`R z=tW35ep8IdEQLpirMdwM!g>CJ|6y~zRec8EQko$k|ETnY2!0ZW6Yehqu@v^#{dAG&Wekh zq>i@oKu-GL-?b1svxS2gPn#c@Se*j~CuQ}xh69`W%;VoB2LuA6cl4{mgfHc59c5J- z2nb=4EQ;Vp6=((TW~C3ot174sR!CN!r3}$r?XoV|SD;=gE#U|DXruKot45GT=*8qp z{xnCto*ZXMYVj$ZjSCA%PG%;K5Y$;%m0DldFtz`XT2sLrAv4{zlq3zRYjyvBh=m3#wkCxpKgF1>9W7{_ih5T?099fa|Ew5dRJF0>}$3=Nc~t$g9_ z{daG}SaA-2clnedn#O_K!$(I=PgU$k$);LJ&i4_rtIJ9JBerHxv8uR{w638L3Iug@ z*qWl3@*4QFAz*D?@{?OeCQIF9d{WPgkZ3dtY1E|Yazdp8?l=V57%hwP{(+0y_avFUsH_9G2+ znI>CH?v=(_5#sNq?Q?ac!kg_wWs?LQ0eI6XOadRK69L#ytdnre7%_ zLCPsW`?6I{H!D2b(qWR3{=$L6jo_dwdCDd|2Z>U7}g4U!)*|UQZVxWlWNICd0oH)%(M-S~U@< z*yEjF{ps+yR#>$faCe@{;HMH$ks;to=+QfwB=%l(K8d`K+9bkh9OZw58UeKroYkBv z!TJcSPWkOS&-%M1ak@~R)9COs)E+Op5;LNl*^gglPY2eu^g0qLXDD|3M1unR#2}@( z_n8UDa<~$`gfw9Gi+4mR6lCc96-^@R-Os)FYBsRWgjm+&1`#Y2Jr*RrqAeqnkn-8vhEq=)-bzoM3=8_sGv7SRG_5U z`w0PvPDJfe$yVgXaa7|q;cF?mPPJcMd+m=}kviA_d;+@N9zns^F|A*(y1McL9+&dY z_YCG8)*18`&qNo0IT<4!jS@(HsgYI2sz(k>&gUzm*J+?dIq#;ryXYlaIl&p)?lfV@h@!{ho~f_UKMa0gSPq*{Q{PJljg6CA@IWEmo= zgUThad@E6NmqG4am>_HQWStT+MMzkI2W8T5#Ds5|x%g1mJ2uj=gt;t{;uVQ@h_>t+ zafWShHZ{uNTHbjP=(c!J`yxwv)7&%juWYZHhqjlbWsuU*+v_fV$vhuKXHX*IiCg&X zfe5a!Ou`_!e?+rs_}aaHfzDsnC#9iL1C$Br)XwRozdlp(I<7RIWjkr>`6W8f;25x6 z+9ja>rabB;|Ka3C9=`l0 zG2rm)y6nyAyQmi958?MgA&C-s-&@okH+1%p<_*h1BmzA)NCr`aCEn5JhPVADlthYA z94}i3?O|$TK?Xl@0qRve4LO0UBH@rOOCY65ywoy$6j?@2N{0 zb+PnfhV!kmxEL7i*xGSoL8FW>S8KMLfsOZShBVKTCK z(T!hE?p2)ID+Z_{ef4(%-wcy5eY$x_or7|6qXMq)DRl>z09tn9ueP&Lithw=4%PMu zCfgK+d(<+c)o^y-}w3-|p^ej0#C+qWIfnQajGV|b=@aT6mCGk(B)Hlw7-R4vqljW1;wpmtqgP&$@;@*(9r&(HtPrkC@# zMcPl$*6TlxAwl{sw0;zpw8EQ6P}i4hlmoKf`E;J$t!li0(`Y8maCXzanmMD>u&5Gw{p))Eb899w-j zHD%94#b4W^z{g|ez^Zqn;xaZ4W8?nTVNrNHo-0AgJWIqO^amOLAg#Da7Mcc$XEiu8HkmQL@0>EBESK?bqFSy(AjI=sD?4PVHOm@0@$zb(?-xNGN+~ zbD#1u`KXLoa@YJi;cNa@9=`CZ^KmG^@~I|z`d?Y|u>C8EA9^%;xfNr2)sfx|X$`Z> zMhq(>{1C4#Y;tKL8}4~+h7gMuo3J*pYn+1NS5q*empXz^xw?>Z>;L6j9s*S?IFAFb z!vUSaakO?iTNd*kSVZ4n$AfYel9c&D_19ndvJ7r279>vXLX8QfD^gV8Wv;+(d|RH} zcR)ZL`3Uvvre-_)G;OLuYbiVuv5Ti!%&|FREy0ass7|Pg{Oi*Ylex~90(R&68c7Jh zho?bg2wEJ9J$Heb-9Vk>kJnh^&o3-CmM zGj%zb<%u7c`LzF{!Ys2ql9pzTwnTMQml@vVkUA-}Ijn@A;pFywv8Kv|-RZ zn3xcpEDSfVt)khHIBV=1(;DxkWRj@`qbftQpR~>ORxeaH13k1G43#s2SzW7%1Wy+7;uE0~|H-^@TGPDhr;&x0*2!ADwFzx&L zVf}G~t)Ux{&?CA+o`^hti_6D3q{$I9=|h}~wFOxNhn{`pvMWSnv`Yp^P8e%a0*pCo z{xYKY{?2uX3IXQJPU4P_*sRO*a*n7 zNoQi^Zyp3qKlt#V-pF60t?262HZonTtR1zB5tW*pB9ZGHu9zm1MX3bheUe?1+bza> z8r+b(YLyR8f4T~XvkdT10LrCXkDepeccwnW0~paZlO{g;O-DIC8gs2OQcDh*5) zl$RBcWPc_%j{1Hqap}kBf9i1#Mfolbn;J{;WNqy5azA*hqPsCHKVAr9G0gY3*%i3l zbI0M=59}y-vgwN#R(!rN@o)HoegC3!Ufe)D%kb_$5a^))X6IBT^cH;z=XkLPBW15T ziBAUcRj@{YXM>smo!ArQPGq0_nZz<$qXU&-1Gs!=vFo|cNgL4q(#q>!L<&L%gnt!J z45klEZ_3Lxb7!-3?&L3z*#Br|(-o$VCYtuQGXW*gCVv$7awlVJH&KX|rFUW>Q1(-C zW+90ZWzo(ZZX2wp^Jpf=DE1q=R;(=(Hua^&tKev}Zz3slBpgAFo(D!XS?(`wQK6IG z=_sX42>X%p3saS!FrWDDSr>nem81rLV zMv}}|MP4BR9ZHG{cPcDo#I>^t)^2q#c;AMr(Yi=I-Xd$9zglAABssCMpon*u0-T}W zu{Fu+T(u@{k7i>66c{bXeCrXs2R%~dJ2eoSL`2fj_X>!uf!Ydc+UR0)ag>r7c1%1L z0Ej~>4IS-8gtuTY-a;WClH}prOXMR7l}Jq7uj+N>SVoDlD;G{;W--~9lJuGkLLGbx z+vvVk{N5#UlwLTNh^@|x^=En5qO##K#|sx4--T1*mGP<9wWGmf8EBxKiI?q-jOV7a z(5!D!7f`1t@fTm;9GF9n5-lJ`(jZw=O4U%I5*<6(IM8jBo*s`$RT7+cZs%d#lU;6> zPf$y+lPN^s@pnAqJdzs(skLdT?L*Qra6Rdy#hgxzNLADueZ2SF8HKqP4KxQUb%U#1$yk^S58Bqoq0==zdb2V5ve2MhGq8bZ z7TP&bYOD3B#p13}j|>%aQ?F%&vTC-ci)J^a>TwPwYOO{-#Y_p8a}){_b5Eu%AFPU* zSeTg4BJ!|fhfV?^J zF;Px*A5{k=Fy@<<6;iADYit@Qcku?*)>iX#$ESe%?f}siUcF7=Z?$3ZWCe>43DVI+ zO$0o=hqX@k&=)BQt2P*Z8h&Uc)LMBi1wS0vR>d`2aZS%rVkwPMHeK1&z{mjl)fAAP z;vW)Xr-@4KxBdNgZ2B_H;whmkn8`$ufS9-PF{}yxS0?EbPb540`H2gd;a=73I>zU7fR15f&R25 zc4>m!RXRbXk4^#=7E$C<(8f??P2_n0(ayrZMOXvF(7XOFWz!2zG}MTIkPkk(pt@XFht@G5y;mHThuFE-S{thXjp3_+%8OI$dN)sYZV_WXQt< z4DXJ5M72)f)IoN+E51`oR0^;yM~=NW{Cx7f#(CcIPZb>*st zd^&5CIc?(G#MzXQ@dnhc(yilzGc~dz@PM;&wZ4))1qnt4vH_wcipsg3Im5T9ZN&Of z7AZzUh~FdbZWP7w@rH*l(ZJ%a4P_E@aWF4c@K#8j?&mj#E&>MWX>s+HzIp656al+S zayE1qdD#G;8$KWhQP~a41&`20d5Dtd0P4pM*#YIfuqImK0;ruikdHuy@z#+?$#l`trgy5Al*yR4@Ko49C=*)JOx|*JC}S-1l%g1*B#Z4Sz&yX0U3{MaiuT)Kg9hA4?mn zOEthDwm6&@-0#3@V;FpRBCOV39#!1Gzvl~kr-t{KtNOf23#*bGmR#E9wk-7IB@5vP zt>~NdRbMIOjg?iL+bUp*BmE%^U(FEpnMsfaJI{tgz;D35xjgs8)gT?Y@LN`WOY6Rb zlCek>BYCjxv^(XpZte(v8uM#2h`WFA*%xM>?fZqL%q{>a&Eo`TA-I#q|NATnBv=I9 z>fBB`6)w-v@Y>vqz!{&NI?$1^&?gli)mm$}`jEu8Cu*jr$#$A?R0#FtJ^O_*0=4uv zjy&p-N|aP5`kG7I63Th2DNAE3{9Y%Y+K6;)kwz8un8m`an;vg0S7Gk29)cCD9x!|k zZ^e1%a}+rm6oUZ|Ep==XcL=wL?c&x;p#q!Dix)0Z@)5rTrKc%w6}jf3Dc(WAdBe!e z2Ax&E)qy-MQ8Q|S3L_^Yy|$}#{A!r+h#58 zT(=xXB^sXhOIZ-IXnOT*V~+{2e$Vlg$txKg57V1HVj;#27U*W$mE*OU`9k`+Wg`Z% z;0`1Un-RYH;LOy$(g(|}d7KIZER0BUyOLHsyRk%@K@$?Uft0KaK>_g_s{Usf6D*|M z0FozqGD((BbEa7W!_OR2x-_F^vxe}goacUFL3q2Oqc2-9LE^BR(FEzJSIi{>iN2_^ z3r)Oqeuqv_bDRAHyVRcHba}ER5OI!fk*is~d;--1g6%P2%qN3)M+M23S;imtfHHE+ z`N$(>Xkc+THIza{$5KYYa*#B1Q@r10rL~Z?u%_EU^wDXo%bu<@l9H;HT!q&61rEd8 z=ulJ4bX?QoPNvl{%xy&9f>Xj4SFzh`Xk22MUNXPAWgoBGG*^FBj2K_AX-Zr@OuhJn%>0G3}D}N{WA9SOj%<+;f)Tb zGBJXuLeJga#!f6I_VZPIGvq)#F=EJo{CO;RXwn&A&YS5@A46ray@UR~7XhCkdBWiu zch{_bgx{DXgZQL@*GpA$Eo;dKTvh)wpvuaVR3dC}8dgP)#SG_G(%J#KQcS-@vNRLu z#kE)_&sbL#TWG4`(Kcs6&=x&(7s&oy_iGY&*t2fi2{T^8L_oouF{dL*c1?Xxy0}() zvSTnMBO6BR@&@{gVrM=K#L#ehph$NT1>Hr)>!NWjA1x(@6oqWN}S6B_>qMTW^Qc)uwh`LC0ah!MkXJhLXF`Cia7OwG`+>YN! z;1JdPm6kX-uH)fFo)`g$o~be<8^$xHWEh3q5V;jz$krcmR|4rA3xa;O8rV$}F8 z?ePV!fp(QR@tE}Y%mT`G?lHPdSV5bEs^l$DW!{rsW)ST|iZOk0b-saQIhm{B$liM} zlA@MT_oHcN{{=hIi5aGIB4eN@c0vQ84TC$?y$TlpxY-$@iiv=MqxI7P3%w1r&-@s^FyyTh}6C@gLc zAzXcRhiNpwcoC(!qNQI(E*V)Q%L^+$hXz6F@XoriE8;y)UJ_=P_$75DfAhUUV8yWV zn*umKg{OFDL@`HI{z7J@tJRCk@uC542?4w@l`GU1yMSqXJLwKQr2YeeL(1jlDdAR`i=!l= zrVtX?GxNR#)-8ashGEfCNIb5GTZ7fYu+6=ob1y_f+H1pNbwRN@)*(O}Y*NUK$-O-T z+gE(6_bzoH8HIqp?_*7C6*CAe`%S$=GA2N$mv^)Piwo2gb!cXN^dfq#{vIM=#;a0}%kpc1NlR}%VQf`;<*H6`rX^KH&VE|h?cT;*1#?x47obm9d zERSg^WqqlFf~9ETyRnVmGkAsrz+h8V@yJCz=lyMN7i_-?>`jwzPFpJ6hT>L83q?e{JRpHOo+k^K9^34*czxj+Oh3gpJI=HSn6%Nu_{PH7Anrwb-b?7(JCa` zSvYd=je57EnC^-6}GhL6tCIfMPvfjw(# z?gLz1%vB^FelNF!bQ?7~wJ#9NdWd^2iJxmR_W5Z6g|fdN!5iA{%J{RTd&4JU2hgS- zwOU;$5_LF}=#679^$I#O?L@ICQrhkODqo%D>9j8UCCc+9;bki0%mb@lFsnwHnG~Nx zc5fmUv2Fe~J!_>9Y!x7}c&_4?tw1Je@&Y}}5vjPf(6nWvMU;WI8y!YphbP1t6Ekne zSOH{RHTCn(iB5-SWp2Llh0yP}egtZaRs-ftT1?1;ts?f&B|Rf2A`Cb9?;mjy+Ar}~ z$FovyE!f9WdGz6DA_eP$49(|$zvxtOjdc7>!&fR~BXE|&umtx{ zV&^cFn%>7Kq0cIKKW-s^VFNJ+mbhAgb#?6L@ZidL!I?jsw7fqK+)acXpX^K4@Txb$ z#eXZ%6KB@2U?}QMpBd{JU2naPAompPES!t0^fr4-NFlkk%a0Q4fyrVWZ1O5hGD26O zieN}-I26(cAO>K&!NE&1goin5HP!F5EeWbtAzej(&-MGbxIyBh#TZm%{cS$Ze_#w* z7}>o+I4%Y0cPVZ9Z795OS^8-4J5Ks+0Vu)1eKKo*zjxj!bhbYAk6KWDp5^T>9^3%i z)@V0-P(rbg4Z&u)kZb*}sbP)y)w#kap zWoPEl%I&Eu8dJ;hOyNrSNrE z5zuChMf1TYo4*=t-0kPDw}oLd0L*q9RJRf5vPM|G!Fz3qmD)TLKZ6V8Bf@e`c?jW( z(QjZg&5;@v5!H=kDjWWI+dmQ&PO!|v0C`~apt3Zu&`F1-Vz9a%B`Q1=l``ku7FWAC zdgS+kz{6dImvmQ#C^zA8>7JP;nl8naEBjD=BJ1f-56^1QS3D$#N!4%hM!S)43xq_l zjs3~wYA;vnmw+{$xnnr~vNK%2CB!tXeh#TpzHpL_qO40Vm?}H~eWLP~=!EwL)!XU; z_>OO^bxuqH+@8yQshM1Qgi!a=-Zd9uGldl$U45b|WQ-gtTTiT|;36vw9%A(E!c%xI z@kYd(R{cZ67h*2fev;};EDsXzrESWf)b+f3b2s7Hxg9N(s9S~7bQi?vMd^! zO5f6yuM)eFw!O-M)?FbRD0fHtE9=`uR2XIRmt9j#e-R9rmK8`ikV7J ztTuhB3Wuzxq5hQiN91UC`{QrHIkpB2@7$ch{@^rCI5_eijqFTICBLn4_t)Idm2^Lv z(O0k~2Xoly;^1JXID1EybtGtuEC6pBm!Cm}jGBphN62EI3 ziMvcQqLgh+tfvyxiRQ%TL$W%k;x7B<|1&ItG`7Fl0>j8M*s^d1#ZJb^uy{r3(l7XI z@w6jaj!@TgJk~-hPW7Ox@^dE>m}0GxsrUM)U7C?bGym$IPjaM4N2_xXaAumCsIK?a z5R5xwO%ipPSB2U7D5;tN6|!kF!3t45fj}1AiVXBQLLPb)Cdk^TDFe@ZZ3_`0MaaIr z;`9U?T)vKr6B1h1+E)a)@pQ(t`+4Z^_Yh-LFc7EGse$ge{Oj+6a|E_iNFAFohz z)_y-j=U^uIRXp0D?c7!wkm2Y%G7KFNN8`~=rMTVD3>f8vC^;H=AxUNtOQwO7Nm#)i z>|*DT*xck^!T179&J-|+Trt4<)5|WjXwjz*DnPVy{bi1|9vP-~sb{Y<&WFn-z5}c! ze6PHEQ;8R&t!2Cvj2U~ZUVvK0>EBrXA-W*q5g7WZFrJ>(nQC@^9^H|k<{+XXfcrc=M=lZshRl=$` z3;L*@$oZQd4?BEo|H}U{=~5qsA^c5Y{^iLG)0BRo29aU=stIUzvgJi0cw=f58f#AO zZQEChKc1=0{wn39O5@=nh`3yVRPzZP6zq3*ExMFu`SF%FRxer&{);b4CJ{Bp=N=9B z+6vM!0Y$VKtiI1FK4wo`JI@V`c9|^7+$!HDWa$nYTKMh?Hs$xKIIN+rn-=5_uF@jK z`2KWUBkQ1RmVjCL;Wzq3!4CFR(lSokD38N%S?qbYB^}dd+FeC-WySA`n78ix5&X~u z$*p)g@}8%ghuT@#!Q*1r{s(V1)}t6&VxWO@=4dCAK>Z_9!fPZM{r#PGYxm3w1Z1Vb z8-Y12cJR*HC3TB3@d;)J{i{1tvrw-VC*cyD%YbSvy<(BMM`6l#V7c}z2N>&FQMc^D zVaN#lmiV+{=Zoa&fi_&tL$C7ifRD)+5b!Va-XK%=r)DIPf>$%D5vQ)*tvgEm_rm-G zH{A3ixAaDa5Z@9(E6EM*=`<>`tL|=1;tIqs_Il5~qlF)`RkDz741?%TPR~7^qK+ui zys0mdkY>cDR}|Dxkp?o*S-9lPI~haE?-$^DzYByCxXkKWcWB@sa(krceAGyV1s28c zwkyy=yM339hWizwD084om{z{G^p%bSE3UJ`&rN)@oGI0eXIqk2TsEBaxgoSm?*`XYE^3$N|a6Tb~yjM6SVKFg>TQ!xzGBlIP?l-zgRJ+ z_{NGVXdw&1I@;ZYcl2sw^8uZZtb_5Z}okUX^}4b@;MivHss%*2M2p3ai!r7_Icj) zf4`XsXO?_B;@e7arS5X#qv%sd`pfYrOu?GOLfvF7wnH!(y)uROnuC*&$r+uiBTNCA z#RSKj+Fwse|MCHL5y*sJlBz#@@wa3Mn}l%h2R+{UoLQp+dZPu*l%hZeWms*%A7^=Z zfRBxWxPULaxlus?$BAhk;D;;oEMU3=>lkpf1?K{|w-4j~yNsXuyF4=k9ADiSDKZ2e@kPt09+W9r&ZD6QJnly= z4SJH08Mv*lLl`_NSP7r=! zP&1Mc$zBNhbQ%`##$KKEtxMJivLsJh<8}PN zH|3F^`Dk9U16?}LO~h0Uy-;Zsm(mYBE+Lp+hUx|GKe?h8sEalH?6XFhD1O=B4yP{a zfr@sH%W!OhjM#ILMx9=u5edA#i^nLgOIXgnRT8Hb0 zPU7R1}ZXzA2nM~ciaeq-Yu$v^WkzMGKI&@(DV{4H)efUYtvZ$YBlh>cqVHOld z0$!t%Lc2}?2h-1z1PHTSek=JFYPXL*?hPO{`kqT(myX1<_k?(QywI}Gmb z4uiY9!{F}j?hbO_NiMe|B`(qYq|H3FmhwL#>ovp)?>6NfLPbHxjKI-oYbm0(w~zVN4Ss0!^& z)TL~`MX!;2u%`|b`N3R;vvaFP=dH7IXkX>9#KAyyy9aUAC{t*Jmmb|8^L12{(r6T% z7(FMFETl`#8{5X36kGupOEOLcF0bJ1kiwqsa;zEgD3Z)RP@7kTNNU(k&(4m$9-t~u zbaIG>ni8|5W!rNX!!hEYse0t2itTJNRi$E9My$iG_=3j|_5lflG}$9#QUu3W78OK$ z(d4?A`PS`QI6jIn!Z=ucA2j}(`#7XCDbrSPjCC0IDBnU>!Kk$W5MJ`J74U+*N(&wK z^Ficdq#)6#qftB%SVHA1Z|< z*I=9?i~{WYlE9WG?}Wv1?_s$gHqg8X{KhCRp8p%t*OADmOj z!)(@yz-*Mbc$+U{uRDeB?PUOcSwPgVn7_`i)_}Q+6RItRmq_mr2QX;@5AI9@>A7 z&K_NXcH`C^glRSe>-KC;uf;hK-j=XbK4T+ld;nsrwDXdVh4BXR+a3Vj{y|gz4nItr zL;@-yv=D!t<&M9)n)o%dLKX^S)a@XHkCk7q(-jFtbq$wEBwjLBd82yZS)5RCR zlx=BG4qeP-oE??FDJKK|ZC0S;n!tJd7E&o4CGhl|RnTk4;bg`6@h?`!)8O#-Vux^5-z{J}tsD%&Sd#6_Na>#aJ&F9;Jd^p> zuQ?vJU7X8v-CD*{`ySY9eq8JvrE;LTAGqK%XhLwcjyXy89pcCJxTuxZMJb&ux>wR2 zc-2(JHj8-YQ$jz@PQOOch7x@gYpeLd{(cMST@B4^)n3TNPeYSNGaJeHD1+D9(Af;W2Y8f}YR1S=EE)KYg0<%~I1w?1hc#3V>4_h@;XCa>JF(XyKsyDywX~Jc8`=*vOc$HKS zaQEK1NBf}&qih(IJFyfXYGdnc12C9r;OQo>ornr<*H)f@Gq47Wm*ONoGr<|bTB>HP z+FbGwpf&*=%Kx5tM_Rw5T<1Na@viGT@@%Fl?$8^%w;dN6e7|}4HC}N!ZPlWvzerwPd zkW!bFv*bKJ=Vyv18`tIh&ms>iv}Y`K7D%m` zAdC@Pu0#M$GV-TFzI3w=&cNI%0q#n$Eo!28Nj2e za>!$!gh27_Trm6P*?FqTPapb~fIgP@>q!15>~#eA!nbtvPZenjVNq>4p&_Y)?56NF zVGWe2)JxO!7~HeO(M27lM>Z7E(wO=BQV z_x_oh@6L?@5Fws=tCV7_kXHY6kkyo13VGu7w2*Om6SQ6X8Vo3%aDaE6f_2e6mItQ9 zKSBe!H;r8Ibrw4?zU8+|_Mv3^ei*1Kd5+4t0B7{j=S>+k`kjEwigiTR{S2s+#*?{7 zlArQ&2?3rm6Y03C&hZb_5*0Y05MEmF&p62OKkXDH_6HFzYo@YSBBj4e4ZGuL)rZ)S zyhhWp6Qh<48=0QH^V=ze-FnH@nyrb7e=)AQt`g~OSKD^jPg_Y?_?lL!uAaT)Y6SxW zw4V*sZ?B)VC8PN=5cK(ptY|2l+I?_e3usxCvI%5m0F;*P-ARxU(7ewg!{vqZp!J^( z%r@T2nzJxh&1>0Ltwac>bop?oG*7x7dlyv5NTPsyht z8Q>NpVdYw@`Fl-+{o4+7Vo0Y|>vB=JB+BWBhK{X~?~E8*olDC*=r>@5G&A=%v-$y6 z4>~o*Yn6?JM0Xu20xfV($V*gTqW`v*gmoxfKRZR{bSCZJ2E4St z{`NZrI}4MBZRUOE(Xe+MTQYc+9;Z4D(>1>QHTV1XqpZm13NQ*M=ZD zBHFgyH;H&yX1QjhFJdcvkE5gPo!AZ@NnWlfvZ1Ex)H;}r7Tjx%NG@kOBVj}b5jO+c z-9&ehhyj?%`$oc$%W5j9a(3);sL|lPxLpSmt!|7qyw?GrsQFzo@}nQLFDcBLziNX%}qfP zpLZ+gMvaR&3&o^3csh}*KV>2;tJ@^sn#_e8K^*f%IX0>IpVoduax2-pD^YmOf+Cx- zbvde&CZuTh#<$BHZJXr`G*J!eC28#hheiLytfg<$&O%rlj0G_fuvqJPJ$rVt444}B zA#`MTEE+a1me$`8ckh0TzFK@Cb2$wOW4pIVfix(o|8OWMFzFlG(68ZtMv+rs;RRxC z65Jl#b%_Nda|W}R7AA|o*rsmWGV7N<8NbiCe=4J*;?w8v`S&Aoof@b8+tvMx)#G|X zs{W?3&@o#^=iswikYi-$qEE-vCtSXXET-?hTS^P1)q}G$K)1^hU^vB1$sHvy#M(p& zR2>MtJ|d82y}&pmZ7Amt9v3=Ool1a%G7w(B37=_fJ+i8nBKTvp@(R1`Pq|^eMz=bX z%-?qFWVOwS!iTX-u^a?-BOn2CJ3NFfW67Om<_B$mo5nw5szA3PH1*_8TVBw!HoXu5nO7Kom2?`lil`J zZ2lk{)bBAL`_52>0vc#7x!-<1gyV)KfFK86V- z5?p;eGc>4MisgE=NGiUVkaHg%=v+tg9KC&0Q8J*UF7 zPKh79g*v>qHaa_W9xB}k)7x_hx3`csdXgt4GU#4ZB22$Bz~NfNUj>SS@@ASR7vaa? zc6Dzj%rso!UyRLDQ|^ci%4XBIlP2<@xLp5 zz61dP5at0HF__di<|(GlXzb2+K^ z?H7xX_n0WqZkFM9b3o>YpfiAl6Xny(QjgVQG>dVOENuReGXg5cM6Z48Gs8knOnRJ|@MVYjpR!Dr5Iy9!TiV%gvz^ zYi=^>?K;u}8-xGo1dIhY1tyN@_3;-``02pnp8~kD}rm5;(i+ zn=Z`u+E4EVzv|R}OvVksc1m%Llvlok5vZ-sl z-+BY843g~o|8Yg89)1K>+ClqA(}ubR@b<~h=TOC4GKYtR)?aF17Y%H)7S#_*C+Nfq zplXY68qgLlCIqNG)33_Y$5e1_BLp`YGqwsoDvrA27}hj^e;p&sca`g5^u}CT*t>gXI_eG~qib~?S(5@BjaSL2XBT19280%M zW=K)umh^_G^R&}%=g7FK;P;Kl!_u%VYX=r&>2X`7+K691GOo8?qfSyouA9*p- z67Q*w1n=GfPxMPsgvp-@YS?};-i2_tdomRmk(+_Ur#p?YF;aN30G+wR>Mvd?9$LLC zjpS;{jO$H^EKR!CFL>i$Mbf8Wut%^+Tx^22J8{$9xcR5wXarPsPIEvN1VNf-D@>L9 zWt%Jj=5UUeoWIen@4FH)Qa+hLS#hKBXzkOQ>*%mv{Fixryr&1$KZd#sV73hjv4jK| zo_q!7kdO4cifBVH^fTIAoauUVD3=hH2*;4MCNxRNV)ykdA7z-2*lFv8QMn(|6*xqj z+Q249(-KG=0shs~WVex|JKy)Y08#9Q#~n^3T!;tV#V3uBfo>=n!V#r51x|$7FrbtT zrq^tzL0j?!9NHuMoTf18JIj0nGYE{okF|H*!Hc}T!GHjRLbJ>1kGFeYCL-kBi23VN zGk0sXjx`U8H$(->HmX9$u%{z-=|PRA7Itik&i z216sRI8p6>$CLm`<Dq9IJe*0hk(iQo+{q6J?F%kp3{V$~2i$8GL%g!Rt`-`ya|9 zI6@8TL74jw0H$60&~f(q-zf)kzIl@W91!woPPlDr0P;LwTy2pz_Q=UYW%k5_2tY;`PKZiM>J-$L= zSHmfMpLOZ8UR4x1tBY#Y%K+9K#$j+EJlsvA-ye?)ghtr}|7{?2=H9Ho~=>iRY@LZ0UT{7=Cd=v`vD|y@22@ny38dC!oE=oGk`kSbx&c?;K z?f2%@rWB$NFJ>u(Jgm+qDa-Aa2T7BS4WXHYXGfN3Bftz#?r8J^WVlb9qNMhT6rV?Q zCDssVGWD3ih2aGAf+JtxL3pkKP9NE?26&17$t6zm<`*noQLvfvn?& zlZ;C?)6jCfmgx@N{IaQWD#uhnQn#nFWik6UX&$VdRz1!oA$}&u$$Fs2bz zWz4b^Rdt_KgLD%5eRtZ~2uVq@TYN@ue=-BRmdB}I)$SNsC+*ROYzmmyN*Y&!&PkJ| z`{cF#VS4h%v-Db4vgbzERv`o9ulA38Aoy?EH3{w$F%+f+P&i*L*@C1B#3NNfpl^8CK_W2o;=gPwd<)fIxMZ#G z7R-u43(;Dsv1E9nC^e)LnfNf)#~1ReO5p8N-~%DTyM<35#o_4vr0~ZVZpGtC;N*@~rQyQg5?OV%&rVW9XBQvVD8lbvAg86)b#(ytCds zS^5v_ZC)1Z|Gg4@QuU+_>dfot#WNQI$yZ!Aiz~M*(~fy_NxeyQEdE4@tHjfW9OGvu z*+h?J=DhAp;loOM`k+lesps5{xPuUx#$VbL4tH_MPek7iX2RreAE~NlMD)ye*hk3e zut&KHiT=G4F4jp_1ZnXG}%W=4gP`n<<2AQvq@^jwWY1J@$NY8$wD;S zoZpJUn$I8lfWtEoe1QTvSzo+D-^v#dLV9^aAc>@AVU?JWS)`|FUhi#@&3n}NO~(>1 zY$r?>5ih`Kr6B|tatD8#}NMBm<%usG1CE@<% z^0$GOT4-T9oR+qE=o7Ds$_HaxV@ii?5+h%J@?1!ZOf=!I3(XcTnp=&&Jt?@m%T2sX52@&4t#l(3`Glf!c(VT*C1en7 zr9Z5w2MG?507Am?4;?;vEvhGhNE{ZIje#Fb+iEKTsDX64)fr7+2!!|SxUmBAq%U&r zZksZxHSKFDm^Nop`ZOoKj5nCUTn#VdBop(rVYk#J-)K_kYjvdwe(^!e_9<fHT>qCst z;j?;XTqOqSzFeV(SqTvvuvb|MZ;#mAP#jGh!w&hGl?TF(1DWG*5OGK2Yy0YR?+_X9 zcsmSCG~t_^Nt}d}q%65RiQpUuqKlMMgpTJb8LbB`fg^r^zpMJ5P39@3?!KWV=r{Gg z){n;UCX!9sDF1}(EvmD?w z+{?uJ23pwd0b<&u0>Nl!zg_Bfi}u4TVd=taA>5d!FPp>(%Ih4Q>QTJdR3sw5$am65 zvP3Gg+9cAL-HQ%Plt|x#AgHc;wW4Bq>HEI)FGm+HA(rFZqDiNi*%IPWvr@MY+V*$J zP_C;M2l?3qs!!tEcJzu%6Kpf`$Rr?0-Mb~^PA49qUaR5YB|XC#91<{kg>$#+hI#U% zs|x%H;9+rL<=mF&L?cXudtdmxJy@~N(6v5J;Z`e{_|8k?>@j;M zd*fk5gsHFLJRW~VEQW{QJzn#n64ck#8JUl4CExm3XRo}oN>~L#zMPV2R2oMJUmNwY zqDf{P`;=vDzP1bWIk8lMs-A#nGZ4HcQ7O zBlVx|xO=RSO{|-n+r0s?a*H{09F!bPjk8H?!w4N8p1w7+7h<7} z@6PX|uu8eI`7X`bpZsWrj%&ZLkPMbx@7s1F3x)q}Dkho6!yxvLWrW7Q2#CEeE~FH8 zn&}UA+v%XD;~^>{*lUmM?pvnzyB5g ze=SHkk8&Kd_5w|V5z61c=&Uk_@{P`VS;znYlHBm^8i$AjnDFJp04l=t?caZ&UnKPp zmU-yLamG3FkH_G5hiZ&vX6_Ie>W;{lNE-Ho|DvY5a;vRYL{I+r2oKQ{JR7ETyA84B ziFdF$Pn;YP+_lO?!v1-vFMR^~ptI=D)yF8gw+|}ifl_e$rtf)#d;yTkhBCXTRIpb| zggnvkOHdwJR+iq<9k-#5{+_fo)^oTjvzfWh?o+V{rM(IG5uM$~&O+xqqkD`e&t!74 z+j>%=t^E&r!4f$6Wi))P;gSK$>yRn5Rq%5J82LjyX}WQ`&k_V-MSNLk`+r8D6NJA( z@%^c;m*c9&6-eYL(VycAgy`nU&U zGZ}kJvT>{Q97dQW2XUfoGkbImgvXUuJ2+kOjY{r0zK`<*05H84b8?=4|NIwH0Jn|B zLm9t1<^Z<;BU=_Xw@yWmc4>xp`WZ5=sb_A0d_xKzL5x8JY(5`RHB{=5ACL&@fR3Y~QNy=+LZkd!t6@^9<(bYYtsqx85E zQ9=%)187m@uvCQ5@`-Syb`(Y5vqW0e|#T?D&Y{ z_OQ~SQwO+`XNnASrg_kH4kHqhRPKOLBFI$|O7Sym4u3iA`UerT`&Q^5{$tnU1X$gg z!s-D5D;Ut>6gkUgL}em`t~34{;VKQ}fM0P99`cRe5Gfi=*RbxcJKm~J1oF4Rcdjrp zVPStFJ9&coWw!S)dnwmBth9__)aYnXmL73I+~>|TD&!K*Jg0C(i9n|?_7=L&WgaRC z*B`Z_fNwrBYe*SeI|e`BV*U5>WlGytY3$RY2$$&Q-|Dbue+L6$eGF;V=p>Y@--CL>!>B&xZPxXnNFoo4o#s5&F zU-~^_Bme+VnZ^`n5g|pf{}r7xIVZa7JQMHb-g^36%k!cN?gb32nm{HQk{%qatQ!;J%`~8-I=?&?+t@V#(zCq=n`gj<+RGmclm3;G0yZDvv+<=C4A*>w~v= zz0_)=_yq>CWj(_6@M*I4Ys+fZXQ;>r1=xK0-X0v0XB`NLx>e@4YuMzuUE-5tFVN<0 zB#B3xWx_mI+8&Wr=xsk`wOr1~5sywnJNiKUQBC$7Wui^$1jcHv;sHLnVZ~V25iqaA zx4*2M1K{U*tg-$qtJ1kOBTVn>a|ff&^t%?J{3)36`j2jNtwi6biDh#vWXJ#G{P5i)vIJjxg+Y29~e_g8;{$5OsnkGbvB|p=k{2-b%cp@)(9EC*z n0Ob{>@BIzeTqRVCYd6*~@LX_)u)gY0qd|b9!2c~Y0KoqMCRTrF literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/entitlementreviews/reviewdetailspage.webp b/static/images/auditor/10.8/access/reviews/entitlementreviews/reviewdetailspage.webp new file mode 100644 index 0000000000000000000000000000000000000000..6554bee75a2e3b54744124fd19ee88f0f9624008 GIT binary patch literal 41234 zcmbrlb9^Pwwmux&wvCBx+sVYXH8FO~i8Zn9Ol;f9Ost7*W54q~xQF-r?!E8+qd&V= zSJ$epT6ose-KsK@l5qJTAes`Q%Ab|FNj~yGK;l`!vq9;CphCa}?Kx9rD98#5NN-lO z0uUoD9o}@)2WhMyKZ0Kkjyk9hbC-Z@$Ic7>{%PTq z__s%(p=IvV77(!K3j;I7DYHc4oQT(+W%lmcCyec$^U*^$hx70X^;W0Wb_G1Fn30|J@V#wI>&t0_^$#ylbBKEKA)Ao#b8v`+()Z^AEu9(@I^JK!bfD z7vKkQ_DT7@8hH3It2{9>s>gbLgN@MX8#;jf$YBmzHo!#mu*U@v8-ytio)@YDazv^w z%nPG|g7i0m>Kv_OU}=;sLT&!A4w8_V0uqA=@(g7wKaJy~&+MXcT3mdq`R)z12wVZ^ z!p%yJd3;VLX78-<_JFT!(GA# zm;DlO8K+^%#XpVBO9+R&oAJXMhw^lEn=oyts|kd`WH9Z1>}ci26gm|k2`AfeC%b4m z$f;MTun?fwMw*GS=|j%*rMqMmcp;d-xT5?uI{Ws5py5q;HDfqb6|N=0xw+->pU(cvweyjhO&2XTYH$eJ)5VmaktBX0Ua+=Q zG6rYlqjK7;vX90@qB_GM7o}{dTfgZ#3G&Zj9+<-H$tE)d=P_OG6B zCetazqQEny7S8D|ma8i>Q97el53fvR*L4OWw&mH z!9wIP);FSBvAbd*u)>|~w6GPH_dX<-n671gIYLm+le^wnOP~jOv@lE!8~4oL6TtYU z1vV$8ff%eZsSG0RIH@Ko5AK-%y+i+thyR11J23)U1WW55Lcl+C`1>G%29Kn$)nQHe zsRf7ndkn{?7VIJ!KeVTjiZjXlm9~^tX7G2TZ8wv^$5?j6*sZlsAiIy3UNBNN zat>N%bWn_;e`S*J*j8m#O3M0A(dVxV&V!(vcuHNGdGHK7L$_M(-`F5r50rtX0i{eZ zCH;7*im3z5h?uR92l{=MRFyMNriH~~A|+*=&z#KgibBw}am_eK@1~8E$1&gi>yZDo zhe^pMdM45c?wuMdER#7l`*b|m=3@7`J+g_XAND=%xr&b)RSx8>##wYWm?jA;4Egu0c0!a3ju1``Xur8s zW=*7d?m>!LL>G+3$8N2J=vXKU77*-Orf#|Y7Kd`Xr2-Q6$RB0^c3-EaQ)zr9bykps zO(r&2@Ul%}QOI4qbCKQ=T~9{TtQ@9At_eiRf3ZcxN~>_z0~AOxe{$|)I-}!SVJ2$% z!`pqMdofa9pF3$rmKjKNke3X`;GT{-@Cz|b8hq7BxEaug;Me3%6|B4HB4;TKu zHZ2qUF#YDo^)uV%Mi}nq%icX629CIi!D0Qee=vYQ?Uv{L+NSUjZkfIcGdVBKl<3)C z{M+m=!GTl^fn zs$Wr<9!OQiY9MFbVRak6`WMfCAug_6gs~Q)nhe2?BSyDHa)Gs5Tz$ zB4K9@!1n$gulyaJ_%nd{vw&Q3t%JLeW&m;iq8L2U0LyVpFAe;|^ZQtnGA%5THQYn5 zI8tpiS<}68*WWdp2?_pBO+@CdT%_ZN6p3P8d$`?i>nt~dl&ufcH6^#UOC=avv$iML zy$1>vgMkijx$^*+UZrrb(!Wi7aP}l__`(#uKpgvRpkTx5;?_j*Gh{@xq;*rC@O$NZ zpcby!{kS?`p>_O=PwsSYS0UaxdL=1IEB6#kXraWB*Lpz*v!=0Z&S(GhfP2~_M?+4s z`*>`>*>iyhqD4aWj(wgkm4bb;=f!8&p!)pmq=Ehf9Hikx1nd?|@H~10rP{7X;W%93 z1U91CJ(uAa@3_;|B@|q?904W#7L(kB6U}aSf z)8P&5g*%yMYHt`VPXkd-drCIJv08X|TDbw35xd6?N*fp$bT;jrp^42Mih$bmKAdt+ zqQ?CTTuL(-b3WFmWCVo0t%t@z%xh;2Ylg{?;?l<2nWS!KwHbmgW}*;FtnIvc z(kGThKbP8vU=Xd2qKEwtUQGR1x{NDEVl)Ar95R^frXAN3v=kW{tFCy8&~e9aw{T=o z#}Mq@-B03ggC5`0UQOPb#K22ncp*QhyfBwO@W%aWhv4)a7cmV7kDEpkIP|$L*3%!E zd}_XTnT+3=2Sz;0P+iO{!;fcbcHYPay6NG z$Sm&x{rY9(W#NNb(k)iB1|`Z_tGaA2>#UPNWScY8{k4@>W?kb;H8e8|w>|aZA##pj zdxhpUm8X_lb#9v~G^srK*bQ)jd4wx;t-yD;DxBt%aY`e%_V-W+1Ph+{W-uPsxNA}f z9zzOtYlX}p`i5Xkm7ZYx4v%JP46MR|&he~Jv~WvDkF~aUnRR6ty^oWM*6G#`j}6n_ zq&uD8!4#g*R=m{@KoP>Hk}0u)nV<7CbS55k4?BeugeS+sjZ%yfUNOfZ9J9N{HN%J1~!}hIjj%r`JGWS z;lDzZ#oh+tPM%geuRL{;;Vw=w@5QdBgk4 zqK$4DAkmFY`2?|Ij-fJ8=jrfmz1v4!E?p2&&LI5lhr($nzh~TmsyJtn@?f!@^8osH z2kjb!?A`myuW=dKqj?($>8vf4Ke{k$X-36e_F3a)EH+@=^^iE-JuH^~oEd9HHu0Qd z(^5IMpYZpEwZgSyrZ2eerio;~>C&r1b_GJczl8AEiphs#z$7DXjG!zM(;R?7VVunO z$}5*NfZn&oYgXNal7^$;>N+W@h%(fZ9DhZvjs9eL-FuTM2RXz7(r=o&toODd1xc1b z9D$cI4tmF2`g)BogZdasU{pCRl9f;v;M$1tM^&Z#R4LrtlesMP;}gFh@f<9`2E{~n z2ToIZ9Tnr*j=Qtp3~Nio?jtW!95sOVBw*MHHto;Fn8AxPmBxd1=8?tFJt3lTM=mRS z%H#a^1Id7kXZPQcYs&uba-668eZg5oVSc8E>j84oUqTxwp%t(5?~3{#i@VVOC?H8g zbus<-nBl*vADWG8epm1R3ne$IiX8tA&;IvX#nFC!lK)>R;hf}{`GW=c@5lV-N=Q~_ zxbROr#Q*qCg7hT*4c7ZlT35pU4H@zG;NkD+kUvdhOoscfe8&IqPEh0`+F1UT@%Rr) z)|i+6tEBiJDenf<7!IF^ z8gPEvJ?e_(jHcrR*&@>9GMrTRy7LUp>M;tv>{)UyC3y2yO9TtA(~^k}Q1Ap$bjspE zB>yu-`EU3MKI{jfy~ElpzTX&tna?9xa@|1U|52Fy)3(uqWX`h~{=j5Ef{Xow9WqO4 z{{@!wLrUuCuZ)uC6|nPFnW^ztX31AbcMGQB-XmNq+YDoCfi@$}hv9r7M(@t2C6*i1QOuLV2KL~WRilI5?X_$MjZZ##Ui&W!^ z7~Q(-bjEmnqv=jUN{!H>$I$uoOj{)NQ*s<-J=f={-;TV?+{=o&O3udoOq7*71HD-2 zGL7u(l;HJ+WY=cg3v|^AMDXQAp5*u^_5)IJA-Pgyf+p=j4AIe=1aLN86isKy3(v|Z zb@QKLljeUugFvGug^vuKt^58-55*xSdB~av|pQfMfyX2@s3{^f$U!{o4 zKZYKzFE2{%d!B`0RDbnEdbpXVH3LoYW0iomDf?^=D*4)npbBhnF%TU-h(k~VVga6KmF)AyjAmLCBPZ8!_~5ky znK(o%#@)pWqcHGPk-c>pLp~RAiIOs^yz@fqhGQWZB75Aq!|rMagAh?1*@Sq5@<)RE zZP1rGV1uLw*s%N>yXDe0*1&Zk>tAZL_>~-Dd7QTE_aoGi4ov1-0L9os>Pexz$Vh?Y66-x?mOJqYWW%ZJA-^>*m_bg zVzt7+j}tohTa=aC2;0L^L#59pG!{KIpqU=L{x{ik*UmU-rFk&eQ6b*j;F)0{!E;fy zRh|KTpD01q)@7zi!p6INDJuvvme9WJ)bC6o@@QP+f8W8(+`ics_enOiCK-SewaqFA z5f^P~W)_ti&V$q{cM>ccPa!MpbQNv7K4*anM4tIY)ibv0dHD(yoUI*+o!30P_*};R zJ@n3-OT|DEs~`RB{9N^e>A6xrn1vGJ=KFDr!?W^FgcT~SBlNEyHU!01doTRbguZkr zWGIo*x^XX3Dv%JjNUD*@i*IlHBPa?Yhu9s2 zm*VDmaW1PuYMGRmpCd)MEPtx|55lLjz4!lOP{dA4SDeKexmdNYo|_K-UQsoSu8YT8?hvPQrf>pr6iB&st0cUsqjP8vlq(4)M2(Fb;O>%BO+B-|3RypZA>DP z!6qTxQq6@0kN&dJeo}$zRKxi6NZPwombR-I)RGSK&dBCPzj=#IlxC)WWNccraY^ms zmSfk-A`c@hVTX}wJmLJ?F5VB`7Rv`VxvRqm%Ll2Kpl_{v_SwWZ_d@W!U)oiM$XZAl z&F3rp>t6Wj*}%uwQnf0;p^*|oC?}yr8}q^6gkwA!^>pkJgrL)|=i{1TaZm=Z+VN7^ z>UoVn9I5j>8oc>zQ(V!ZL;z1Rz&MmPseqJNRZjTZG@)wY``Z~-yJ#xRsM^NjGSfo> z7h*huixQML0`JhnBW&#H64Gg^1kS-XxAE9kxol&(P!zN4<#oRMB0;>x@h|2NA9y!G zY#k`sLm9GmkwaqE>AFv+PJOjK+sP0K(}#UG`IPK^t$ceH_$)Kpq|k zCR@6S!d6bh8Du9PmfOcn322wz4=V^NOpk#L{z}&LvZ~^gZQR-xmg;Y)8rpvNVaF+p z+-bPZKo`TfHrin`E|D+1@iOsBT2Ur>>qE7j^UyD)v@>s8iTgnXthkYlxIg8bYacR9 z3BgLQ7cY-%P(=^e-Yp2SKxr~UV+Qh1(IV7%^WZiAN-L|q| zSjA!tJ3gLdeRA$5L%dI1sHrsQ7xrBWKf*~aK}npC5ec@)FJg#z_>qwvrKws0)EJ6# zmvA(_pO19J??k;TE?!evC+(mkXx%L+nzYI(?LuSICUgJ6ND49g7j&|fQ)6HLRakvfP#Md>Fd$u^&2wITSaUP6mY4B+Q>6Zh~ro^sz8fMIu;QKVd}mJ z+`)|aL{2I-Z!)N5!2Hc6kG~b9mVI#6!qS@vk}PK}5ENB<(W6mPe3px*{OkcItK*Q) z(?%Du<}qubkKphr6C05D`Xf}jX@~op7M3Ku0T^B)x)F{4g8FBZ`8ab%$==HhxpjcwUJrx zMaS|DK1&O+Gk1_nXipeJ;jmKkTVWluCP!DRN9cgo^VZ@I@TqdcZg}2|_Mh&~A-sKv z{p<#R#ngs`6b9O;lh4aUSf^OH1tDeKHRpC+-9ociW6>4kA_e-cb#NM9n`(0z z8TO764>f%5yl1BjK(bR_RK4(hg=G*9P!n)4Q8giHiA|kmz^Q^*rttkBb4S=4j^<|2f|s9S7>Ay1n_);AFhr3q3@VQl? zHmBSP+_2G+5Uw4hw)MVzTn9o5(el@}mdaWnzsbl$Tzr#jQ)jg1Df(Q&3U#`$%(1Fd zT8z`z1AXBjmw4eRf!{n^1KT0?S%ieLR3E!=IO5*y!7(G$>N!|F#m;gbeKW2==h;-s zGg@!O;=zZHr@D@kDog;O6o!oFdIUpXJdYCJpJcp!{gps5ZC9>(oJBBwSlgZV- z!qz@P+<-rjK05!ZYXJzLrbUde&?2!ZrHS01m2o7ICiGTwjn?E*Fyf%^$zhAYQ{p{q z%HxF(Cr*-fx-9^i@ljg!NRq+(BAy?V7B2@ZnUnV{lthast>kLce)6N@D)LE5mvO}Y zbat=A5VN-+`>o-ieL~jPO(egygIT#=0`F%lbSZ>^iRp&dYpvm2{9Y>1U>y?%PyZ`c z+Dx`g=1xp<-Z}S4lgIZhBzD>@d4i?pPwy3YF8Nc*{E26g%Q}4GPE7zqMhph;uRdsgIKVU2FCFm})E+OIjy{2HXQ6zGX34evX zF2v-p#m+19<3hqzPFfOARSs2t8#Q&Ok{74vBBP6f6sz zZB<+k<#otb5H@OD!*KR1 zGVcXTgD(sTO;_UGt8PNfh^E93IOV+gdx2x*aW`w4!^WK2&y}vk#0zd{?oEMDNvA%^ z^Bv%yzessq>OYNBO~-IgaHx{|pk175tw{t|Z6lz~72_o_Y#J@}*Eo-_@Shq!A*P8-5hd}bx14fjMU!i)Sx-~K*U6V^~ zK$v4^8^Dd$wqjL@9qH?xnZQX)gw2d{B$Vyn)nO?CQO4eCqn~B+nmHh$cz7JbP3eor z_uYh%Qq@s?S6w_8t~gR2dt8R34b;1f8g~ zi8g7P=-z9$fNB^!M-)b{mGiK?fBW5@4}T~xC@+pq`UvygeBLA4+c=N-nJ)@e%9>N~ z+|8@UXS2i6PJgni&X^5>sSb<*RcJNgf%nXqZ{_eWOoJu*BUQG}0$YgLyeKc(a-5B`;2d@BbB-D2;>1@Y#Npi9}aIL1ds;iY*l^W z)BH%y-9`ySL9S0Js$9N&$w*V{Hf}BPstTYKTXCx~qCi!(97S_kUalUn~~1`KFw2doL0o7Y6x3xd!K-tOrIRG$I- zxvZp*FRB(UFoQhmOs2qse?S;v-014VfVKmRGjZoW&#x-%24n5>UKc)x$?ZyEi~CIOMA|b%CAz8 zbpT%9)u83=!4>;s^T;rW8I5#Zy-1SsO3(Lm*9fE@?)V2le?(&75Ga$mhAq*cXv8Id zu;k8K2ue-4xnQ`z2YtJNB=L+f7VX%bvMi)z0EpEH;%^QwOjsqf*gm7$p{5wJ<&D{+ ztwIRe3-FkONv#W+y^IW2uO*Gd3l{ z&^24xB8Q=z$;HbSNYMJf4U{cU9d6rpWmhg>$m0ou*!lNJ&>J zw5Bs?>|EA-7d87HxfzJ6+o;=?YP8(lkLUT=_AW}SL;TM7sMyYL1>#fDgwSBp%kd z1e-V0#4#7MVg5zTl*7>l^}s={up2;8MBuIsay$S&YOzZr>!lSPdYQ*zW8^fEkT1ov zseMB%yo!GMIADaDXbHQG*z{4yj!%>OGkB)2Vp%RK43{zg6aXOoLofeS!xUFin%jij z^hL<=HsG@=QpTKzX6>&jc6RLQx;tD3ATmzHda8+PG~7u}70OOTlA`=Run&8jMOGx= z_y^QLA{)3HxYO5f-bn2u;Miu{thsc@PYF8uBp(FZ-HYY4iZOB$RHzS)9*}fpp3+5N z)?o#zO)JJ5ns#W8JzbqMEzQQxr$m-a00t*|+7&GbZgOWGMV!#=EK(HN30}-3h~~&C zT#JIv$QLxBG^tIwA<7-0o0=g?;RDA^59A)9TlvpgIbRRH61Jm^8GjN9v)M+@&j}Ms z_{@~_=JVueM0D)RC&#ihr?62v!3*#N(8hwrB)f_*j$MW07uNOp_@NpvSDep_^+%P& z&RhF?NjpGdI4~_I60op{>U(=rJz6Pps2&*^vC4A%LW|F_BID>H!lP0XWU?p zRb=%jM)o7SN^i1v#~%aP$Hs5a?jaGSDJ-#JE>X{H_r}r>;HeCGj6OyL*K*3|nu+E? z9oBs?u5hqgRSVAL;B(M*_@y!Z6ou=$@8=6|xZDxc(Le&J-)1O{<8yQ0hC)crFX`dQ zBT@R(lv7dL_?+wB@To!aFgX{aAle+s{PQ?^9!MzrQmnoGAqql_ecj$`ncOF*Aq3!2*M>)!yg&0}Innm~}NydF-sLS)r{asT}am;#37)eGj+ ztZQU%m~q$35}pOE=(3M#PmabXSGoV{CM?BV%QZ*3 zraRl5>t&j`=JNAdBBGdSZ!bP66yGap+)tJUdPid5NDzt^EV`Pr(~ugZPf3mH3a1UT zdINGiSTH3NaP=6{vo9t3MHl^yL^s+b%s&jFrwcAT2XSRGGx?<WObpbe_0a;|*ydm0qH!TNPzNb9maMe|RQ$h&!u$ZQ2Pd_n*UzOhjQbSqy!zq!lm zF@D4Y#dG5s%0lz_^q#i2 z*?CKcz8)zlQe_+YF{b3H@O=d7apX%owGh+mw9-ro57(=kP#=%D_7xcN2wwb-JLZ>h zD<>Dei7!YvFK3dQH=gRxg&2;s=)koZto8_ef!&pkT*Gxq?`f34BGY#Nt#x4y>rC4- zM1baGfj!vLV=KX00~;g!;Pdy}LQR~8piBL)J#M!hmWofJ33!}yy>C+=w>zhRSCZXt zWzEPZ*A2TLgfJnFHMjz>ep{4~!GoI#pTld)zl-eLUUXYLD@KfuGDMZY#__{gc|@3* zi!!b#^n88t@`vutUypysC*!|vD037$=t`E#&&JWR4e!psEtC3QLV`6LFqtlvAnLMQ z1)%ba!HH_t;feIg`C&~80W!y-7Aq%MZ}5s0H|hmX-qXy)E;DbW#q~`O4Q}DgFLNeX zwqUQ5Y)*3h3!V`diiW#5&TSl@!;%_xHk@1Cm!-fLlyiv{3KgO*xo5mJ=~`E=MfwDg z_jMv%ho!c=P`k@Mx8!HEH~EsUb>zi{fPz!kp+UUsev533u!gS-H7*;4x@s5Q8zMwJ zM&EK-1wA0s)33-h2k|&vBa7=?-(_2Lf)NqS7HB>X+-$P=!?0(dyM2td-d5@Sc!7nQ zl@2SbvpP%a+Se9W^(5F%d%Tt!70wGsyJF^N5>^4EgR!dqsuf9c`83L15L4ZSRj#b5ZPLQxxd2d8cd1RKr38Ew=% z+4IHBaq+acN&DLy+IhIq&(G^*f?&r7I+vF*(JF{(suwtpBL<{2Nrp(hnjzXtgy}`^ zv0n}bZraJoXK-L0!t$JY8*rSA!oUQm)fw^i>xxb~@YP&}v7bd!xhUzFCzUKL=UmdCGMEnuWN^9@zV%ra;k|uJT zLi4;18ioJV6=IP$@3!2l)WQ{v)56I;YiNFF8vf2J;ZEKr?kpH|X_LNS!#0N)2-RgO zF@O%+zO7x!VNvxX+*D%oJGZ*4@=g5N?`lC|5kk)$Z>gU_Oejdh*Oj zbD;a9X?EK#-3GDy5m(eNLVA8D%$CZc{L9go^t`%}vP|he?|B4R3{_}=;&!rTQu*Et zj8;LloJkYuGLK*<7liTAZwJ$%F;AdL6~o$DT*Nm+U0amA#b%x4FA%vag}F5ZU*`_t zpfypUYxJORS;z2r7uEZ=qoA}R62&7Gf1ZnPSp<=VB~-9$t0TD`WGIN8^XNHR-Y1ji z^lt_3`-ba;5$>jaq}ir1{AR0ahlJ!FTkw1{9Covyd3#%BXAu#ZN%_ktNkB+izg2PI zdZM@&fz!R0&3~)zu*6f;Vaj1}U)qa_&h?bqBk~S@W?!L8p#q{Z$A#aBz}tgp_rqMA zVxlj%`1F;@dLL5!h+uBp{zZds*It3mPt0u*NGPh#gLP8p3>Pq6fhOZPE}vfx^*j(55%Bd zjo8Tznap|+tWKms3*(wEC#7YZGaNVdkW?T9AQq6RwuRI5*`xr(W-CS&@ZjTD<4;G4 z+cU-j$To|cmt}?SGgmvs!tOz*VJY|Uv<9u|#JIBu$`(Qhv_0SK+CodUgsz`A9*(io zWE$Ga_DxplpUg3O0vk|P&-+YXs$|ve48M8OiWb@;8*~^f4syPoY24< z{Wi}@?X3;^2G@K-XFa+jt1LBz)ZVD4mSNK#%)$W)F_m;WgwPz`(G(XG@Y$PWbe{4A zYYkG2U1nn~m)_ef=7eP#80;&Wx=HKpn1$daw)1I;A<`cWlA-DZtp3OP&f-t|BQ(EG z=VPA3UD$oBc2)?~d-4L>*o*CfW|+dtdSb)o^MM-%AddL*-CxElkqW~^OYT*sGW%Y9 zKXaR>GoXhHre)Pj^J*5s1*pe4ZPaYX+z7O@-5<0@dNIqcr)ca4P0?S&>6Fc^st5Va z+4vnV6lWWl>!By<@yM1b2FNkX+t+l9=?r`EduPkli;%Eg;iNUeaCVd&&IvaTm$yA3 z-lDZg5ZVkb5gIf*hE2z`YVmKuf^-O%VP0`gUVPjWJCgR34Sy1u70dDG50}}1^shyl zv|X2D-6Q`hu6F@&%(xmvvwvs=Gca;I3tstw$MPAAx?FrmYS#rVrPv7qJoKzg-uC;;7srr3SWAvMUBz$+ng|=1n&_Y;vho{G{dznY&;_!;^LoA(_#c3jl77RkrHw6*J-makcrUg*c*L=`}IB|D%hKJC8(1vxanAkFm z4w*PJtwkDH_b;+s3#XOeENYyp;wV~=wuK8DdxlntHz%8|<53tLM@L@j2)lNOwLPald`_Iz{C=HCCbV*T69Z{jimyd!} z$gW5{8*+T170Ik7@5VZ0WpX|7y)iByle@=MWaNjk%28>jP+-1 z$N9M!m8qR+k#_CsywLp^t3&UP0sA(g^D2X^P$@-BhMH@*peZ&&f1Z$1u^#2t_u9N; z_TgX)7AS9l22taQJQ;=TK#~Wd*||v3fT>jZn_((2LTD9DqZse$l8=EJc^&?WaEzvb zqvf@c<}s48^WdT-QI3vlaQBUuW!w{Yg3HO%s>6EDRA<$&4yUQt;qlr?aXz5 z@t=adL?#p}#Yx#*`F%`>RqZK}!*Bi>)S zRAIE0A#L)tl_6`MBdeg0(;h{KxAABr<=QBI4$Nz&! zRQHeBBRUWlmc%d-y#93Kl77cz+w{Sa0m0$lKVtM??Z4qM znDfWS_ySIl%)aQm|CL|(La8FyQroj z1LGb~b(Vj{CI-XXG5Pq}PLOwQP9I4+=*4g%jXgpGLcM12SU|tHqgVcr>^+o%Ona*) z+US(G0AtuSx(mx4bg!I@-Et~W--moGSTOa2CMA&pqAv1y_2wm}jiXsYuz^Vd$Km?* z*l@=N!fwrRw0Ng&s3&+hqZ1m>nl3k88Yz1f>BFioZ^qIq&dQVrE<(5}C%fgwgv6!H zmH|~D?u57uTUWB{!F=oZyKqUeRq7PJl%G<`v@!_q$XRfy2ZhzjB13K{9EvNA#glSQ zC#qx4!{!2!ui}+z#rVgMlY10rjjsSg{oX&D0|+8;^H+d=w27ZD=<%mA>cg;?+mw+F zY$(CuD717IKEb&DGaYuk0*iCb=>oEmcPmYOp};48);m1;3#t<^@Lhk0itN?7F(4kP zbS!>$RRXiD>w%p1v=A5DbIpP$66y0VrCykZsH9I6s6S-|m{h-}|DylQ`D|%W_az;k zK%}J`LDxD-bYo>;YuiW#l5T z*haGd_m^8N5TyImUCrnH;K*;|QZjwi;@?un^O0DHxsV{oToN1QxCzQ~;b-T@nmB|k zz#9=#XL_JsNH5#J8o)^DeDiW0Ly|)(qQmRMr^xllnF;1$lMuor;OAlxil`6?ow_pP z*rIkWN}^Lf8@ z7dW4{D{e$RZD-cJr4bPl`IQ1V9^c3kpS{pg1-Jgbj;{yNb~IRL*N5MD7sPlN{SGo{YkZ_|3j1-qEtI!InvczM{5{(N`gfGQGVo7bTg$b}&s*j8V;>gDQOFR>xlY zm&koj0%g@J=9rAiA;StDJ;>6!p?-?Q`$?cdI+?nKZBcFB%A}cNyUWk>rM+XRCaXGa zNU&2MtZ74?hz|3Pv8nU$P730IPi>u)pjFQFhcNQw#K7ktU6_L54$$q|7A+KNuI%28Y7stmJn zjtSl7%V$Xx3&&YZLcXf}NTPi_!y|Mw)bez=#(HuKcery$J*I(pGT+}51=w1*dbXmH z^E*i=@ZocZl92_fW^Q+7I)>KCGr8SznFJ%oAzVij7BFv1l#v2n z^Ygo$xPwMhQo_*T)Eots0*)(17HZ$vcOE6SQ!tXdLB`yx7R!TJL1{GY8TwK&7JHZ| zY>T5o+Wb-2A)vb|`gI?!8$Q;fS<{RB&8}ka*8fKg@%s0Q^ z6HxI>UA%pUSgEeZPjxhsf+n0fjj~iFRaQF)8M;fB%@X=nDXj#U*rmV{Lf%n`6EI6A zdSMs@kku>!;CY>6!arFbbkBe=hPW(@WLB3y$#F1x46n)9+eqvp+;C^{Bh^pICidSn z*qeaq5$0Z6CVS9yMedXDo$^i5{y^H8EZIQ>9KNR0rXDS?-*hWoN$jBtsf1{B>gJXMSI7`c<27^J37cjYWGI$82 zJySEIcFX0NvMY6})h|wlE)D97~nc6@F&N z8WYz1EbHOIeX?ooG^OLtuSH~1GJ zTkNjdB;*aTc%wa|+4WwRgTctbi19>a4&@o+uds?amb~DOceYj}8M+A72vKcv@TYc{ z#Px?I$BqahV9TcL7ixz>*5orrdo7aJ#oqdMT{9lOuPGD!o zaG7wd5$eCdgTw22;pdw5s$KcW?r@wjRsULqx>C5#Xv-c4tcyu3Dj@IWUWt)^4N$fp+cCr__`U!JBlauYn*IFz zNGSwqk(yj6Nqtcxh;vk63`NAIn_@x)jJ4_VeOEoSLGKg{)nc)6+~e7)8>+ zJx1%wE(5m%Omybb1_1b(Y;H>V~G_HlMdHwZNam~5G9$=SA@ zSFX={GtxH#TJa^I%>Blu?QPPO3s{H3I4&!tG4;yUXLz)<)qYWp>oQ?sigx!}mU0Wv zbqB${>;~Dc8Y_K6mqH7BbxZX`cSScG>Tl}V$;Q!z!A$$Adx4KN)$=p-^LuC_6(oZ7 zCqY4nS9wnAit%{py=T2P?gHLjGePw?uxZbPX=ghFb4NjwAGpf57Lsd=kILG@JaQguqI(Y~f1_kzaKdOfsxG3P`UG>#mjQbL)Tro|lT2!D zN5*SetTw)M=4ZUKIH%vu4_MjU4Oipiv-OsEKso+8{=}6y)K&j0jO07pdv!+g;B3yX z+F_6UpBUf{3!)<{QfW7}OFAY^2;rGu=B;R(-X$l~K(xPbjN)zCSewa*_f%8)PBa{^ z3!u-pVf}t+X?1ecnpl=ok2_1$ke}Z}@yTD>#kxAl^3k7?VcvIY=e8u7URrebKu1?- zr?u@&cw|UM|6DO2_l+(y_5Nz46RUU-+Xc^}arsAts`61New?-ulD`Y?hU7{`DK!aY z&;S^fX@F?U=zK)MJi&tzvFG;Ck+7^vAKTX=C@S&KxMm$x4x2<)b_1dCDl?A@7h)E8 zy(`-~1>mNCpa5L)QT0 z(YQv8tdby=m#a}I1a-Y2oG`SD@fd3$P;0(%A1FE;m3q7JE-q#n^s(XgAL*sqi58;_ zJ)cV!nzpyvvliVovIKic_4C2C~gt~8dhC~@SrtRd}!!m z6y^M%u50MhlfihdmRm%a@J3xxTMSAfw9RT`{doz3bjEeh`uAsce11;FUcZU-sf3PC zz6fX|tJ5spjL4?J-1kqs?6mbii0%lH`htMEpe+sxym#-y}I@9Z7w@SI7`& zELTbIjO|H8`GjIRbpWZ#C$)Or^zLC}br0>nHRI+7m)hZw78uEC#I!7-Uu^_XiZVVj zIXpuk=uKKf=-Yz!piwAHgnOivgOWCt9d@&M+h(NA5qd>vk-T!}tlE+Xu;|EH^j&VY zTyU@p^CfAOFI_*3W{i30Jk@2kmH67o(D*IL?#N)s~-7 zlrBA(#5%IF&a$w0F#FUU^dYm>Bj#O3lAmNAL?1c%L;Z%dr1v4sd@%#yNI&Vp%{-f( zz_>H5N&qt1m4^+yjk&#sZsk;5Z_u=Dt2s<4XpiGpjNA|0H5S=VPK!X@e7%=9cOEsq zppc*)^L(n$%|5uadOu1#IwqQgDCKEk@RVvpQW`HCB5p!2+19tk&T4=wZWw9)nq+Q< zXB`p)TW)B3kAfQ+xKPP?+p3zca}Kz;{6hJR1=-#}6z4w{^f)kYrU>l5mXkUlRM=dW zDT9U(2;p(bJND9kqesmC!LK(DxopFT@?PS4Bi&v>Kq2rt;a?(PbJQx+(zo;Gr5WVZ z3woGff;L5H<4}m_5&8O6UHP>Pn;E=3B%Ik-75k*LGPJ?^vdZ*U(WDr0OjpGt+b?T{>V%gho03JS1&9dPHrp94Qb&Ey2{$W(f zgc2Wjb%9)Qv)B;5Jm-5W<=R(qsG zj!rV;ZqoHMSzod-(ob0mD2*gwqh6=gDA^Vp@{B>#GN%7O0C7N$zi`8T%;U+KcxfZe z6^WSWFn-6dUCGH`&ldlz1l{dtN(G)uGd%0Kk`|`;S!~ZJ&~^L3uk?cs-fyhjF{S@i zT^d|W@Tr;hF+d{8=9H~zgGqq;t`htD{5_8_90Sg-nSQQ3hUti4J=;JQ`Sj8iTP(PX zslYAlQ7cktG-0}aK(dZ3vEt7VI4xip033YB$xEVk1vYKVPgA5qHsDzg4eOP*L|Vr=_5vl!2+zwGZ)lYm#GrYkifE?L$Oj+9kW;X} zHgU$rt%yJq1qINl66k2IsDohJX%q4jq(~6CM^cBc|5GQGIcXPgCp^7f@=kM%fC+F8 zjx{!xapRoJML1oek-HLa=1kHeW|86zLZ25N-Qds_pHElfgtTm4Uw^>G@jV`R(^I2>Vx%a>IW}J7lvkX2zY8i#s zVzUHh`|it~@@ffB6{nmghuQ9wK78jj?cW0EywXGM(iFtifRC>fy<3tb**{=OzyYhDAS;bkvmTp*(6g*TZ>s zx_hUUyS3!r)A%x*q3Kbf^fY>N(XKp!(8$`7{ow^QHS=yp;>ESg@&{3(G8;CFO6Q#C zcg@L6Cqh<9Yi=LX(C>%c*ltgj4MwV^O_>ntYjOD-@5wd0M!&vw=ucUpyngo_z?$`7 z3@_F@<2a<|vQ2RK@=tTXekK!S1t6EupYsEuEU$y@Ibku3Da^q<06O&SJl^a45<4=F8S#!e82%&&d%+5#JE@e4b>y( zUjVP8a|H3Q^`ya(q*aj@QY98;YVV3Ij4IH3X!>8Z3`9=1i?Dg%l?Ii)$gHgz_9DNNLL~8>n7~24(yOeJ&zZH^0Fo$%M5Qr+&B@UN zh3Jd3n~hQy=0kt*@Zd#-ni(1dA$;hOqtTuWj81e0)ki9apggcQl}@-e3k) zgHqNMDQ5>!rN)ee;b6@5(i+h+%j^Jd($oF7a57y>^JW_+;USb99-l6HX4WUZERyAW z=$<|`%^O010068+eiIFmN6^3o32peJwM&uVo-J{=eF%h|dgE|7x$+($vY?P)FbQKP zr|Gfq&A)ZX=p? z-KhRLKDO=3XSvh7ES7;Msl9sq-%s(toS=F}by2G0bICk3UuNha* z`3V%D88@UIvx&|CXU!3_%g{^n8is$D39)jLfs&BNrML0%>A~X=)I3+)Hs!$`cA$@V z46RpwJB_4DF%gwe7T&0pNB{r;0t4Q)Hc>ited{mjq#+8Xj9kdi^Ttqvxx}Iey|fvh zfR}Bvk}}=DhLp(!A7}%km>l`xu5;YXk!+0K%`Bd1P~3Kgn{(K|Ehotw>xv4!^905L z%c~rKmzkOiAJm{bi@_jAJiK8K37Tu}Na)oWaJj||E(YFF6{##B)T5Z)`&e5eQHRvt z5WhdPGNR*UL-${t7|(9uBKm6=&Rn+iAC`!(TQOul3=}<^y+78JttI6G-XKac62*K)*Pb)hw#*1-nYut;DiZNE4 zSYMoX6_+<#)R`~mD@IU%9a8)Yo{{`GQWfiL6cz9i(*QTj7a?QaxucUu>r!el^h(xR zkw!K|kFoV8?gwkW!{uQA;*|QKSXdJj4*YpgA^4H%o<}5AD}vUz`;minn|X4o)Hz<; z)!QwCW+j~doI^|o#nGJiYBuHt6yWw1LVNNJWfagQLrQQNHC|;L|N3C^NX;2jejSz; z2=CkuTI{If^`bfYW`c=PAdsTJsJu|5oUwQvVnY zI^;BZtD_?K2~O@)c*Bxh!7&nNI(tWTdusTl3ZP}*@)9Yu_vq)@2s%V^P`=w6Zo5>q zhxN8@sOP`m)cqzX(;+_k+9`(o6BmJ#U`5!>Z6`WIY9xN@MCz-?Ceu=3NO;zxMuFYg z0CJ5n{Qa>FK=H@;_xYS-T&IDFN(9UtvQHDI3W~PnEy;!Z(09a?CVYmuFozO#lgLwI zloox;JZ&-4&bR}%gUXr`S=U2Gf_qO246Kma!@x3l9iiR{-SLbdYV5ZynNh1c-A|tv zq{dp8?z!vYb@H4PiP!#~YD(;C5=SFRk`DR=srG8y`GpP8cl5Hvdi7Qk+$ z`zcWO5WPA>DlzHu32K>Wa$*Z)Oyw{v5@niSn@DIf&U54bJ5-nyLDbb;E%6h)4f4^a z+MC4Zp~u0FNjz%1%5VGw?xjB`AR`1|q`}m~tVoGnd7AYr^wI54i(hQA@vmvW=uvCf z&v+<%nmHE(Lei!hLF!?OJiOH)uX(VM4QKPUkPWGg$3+f$@Vm=4(jWO#J-4>YFB0O9 z3SXJMSII#IIt$)p3$hFJLhS(zpwc7XM7=CkM{B~P@5335dVLM|y+5?LyYe8<3WkYrC)oDKOLWJm^Pq$HnpXU3q%=q{(-)XWs>O%m_swRNTm{)zS~#;=1{Y=ggoXd3ucJRrX7j!_h(>}-HtO8<=f!IHWC{uGMz?`^Q z4_WkHYE8Qe9y~?iyA#kY8gJ3>V$1=r+HIw)RYnfEd1eMN1=URxmItrPHM!L%#sAa) z1keS2(gQyvg@ihEP=c1KjX@?im7fI2RZ)8sgy7JyUks*2`~XqsZtw&tN3Qwgs6m;) zcOG`puz(*BP~Gr8v))f+<`zR#kBvnHcFR~a*&%`t`zGa_VB8cOE)OSLYc)4SC3AfI zmywkXyu{Wh^0a6^W@$?Hwki$-g|8khxl=${ic>m5d2Ph?e9^#6lz$^Oh@Vhed@J4#Oq1yrBqhA}&n&^9W1i;1=@E$?#JvuU|nH@$9>qi*xnJ9Dq zTkBMlE~f*vw*D|3zzA&Mc*n_NsnkD<*`i#V;Gnp0nc!GDljRoX#Qy5*P_F27E(|<7 zW(iO8MLV~d*DwL$r*LuZSw#o`%-tTQJ~%FwN>_{~Uo^g8bSa2o!fZ{c9FJ5&4TC5l z+X<*mAWC-NXAMIiBsEUoAQLuv(3t)aa+g|;0;Gmq3<~px`X9vhH27AthO#DmiJV&c z(Ft@pU(?KwtfTc2u+ZDf=XWG-hslq4TjizplGMb_?kug8B{W88VhIz1sPX_(&r*Z< zx}cnjM+{gjoRj64nb_kStslN~N?`RSoy|LFW7qr5yj74~946eyDXETR*Q1Q+Y88D= zBZ9`6cWb!J!Tji4T3+yoUK|}gKteDCyovSNt>RlUs^Fx7o(`}=hNhaQ_b!>DD6{)NlD8GsJ zNt|ayAq!^*CVKpTO`dJD95D=N=-L~V!xq?S@~_XH$~?~YwgY?Y$)V-U#MY_1Y*h0k8EA#^Wy-BTDuArv^!lgAHQ50doVgg+2D&h znMEmLxgj}%|-#HW@YAvTrb$zOHY6VB%(`Ve`$N*|C?xZn#`8X}5x3%4U%=kOU<>)D4G zkRXB^HZpk#@_BHx5M?VFpdHJtw#*D-= zku6M%B%0_~27j!q9qq^9_Ve>Me%`a->O|^5Ry=wA%d}3SYD4yd%OZ$QX;c!~IvY?X ziQua~bCFVIW?~pV6w7nVl>gYS5IL(r{qMnoPI6)cpgJf*A(CS+pC==@5qG6ot1c5k z3Jr+=7kAOHi4D97QE!9#pNKm}|sDRVZ6K|6i34IleO}ygTcrCyV z{{1NJ-h%AdYk>*sRK=69E@>?Yy}mFxNGk8SoMKdLX)3(eY_9bm z6=c`XV){JO(A3g0{E%fdc7^eKSK^?h>N??#Q!J!3Vk zKCo$lY2e{^nG3j2uVW|Zz+vsYsX$POQ4mzZjIA40QMLYUMcoQ2#L`^;zrT!8iy-~2 zgPk5f*l`~#60s#f+TS!;^6|GRP7S=4sQ^>}*88w@t&=gLPVy^{u;)AtvIcC7dcsCK zsXpuwte$Oy?M*al=zE*QhH*(=iynu6YPKbM^XrT`k8Q+WkwuuNWDG|tzsT8Y6XKM) zjC(F6cH#}q#F@iJ)0^tH;Lgj&|L~>~Q5u-B5N@@JPoWSewCJz;b(^OEoGoUStckUNn*olh z@$rvy3Q*(<^eBVHdYybQDHfEZgdv%8uCK3<#Ukba+WVG+WMaS-M25%P?+@ZrlHWc= z`28u`uPb6AtGW#0{Z)n>J-5<5+o}|{Lt4=q1OAmMro39lBqbPw6?fcQu=}J7GTSw) zuGXSk+pO)b>J_&Sy!Fw~t1z4KYPheqEWx@RgTF4`lY8IOuj}45IOoyu1Ly!}&}>p* z#;5<0b|j3ZvtFvLeZxkp!~S9dXshiEk;p;Vv?o1}CK|QwWay?l`_V|SvmHSlL0e#QJ$tGTZ5Ta-(x?9R`WRcQ*m6K?; z1#9!FXw_+;r`!o9jgZbY_f_qLa{mTe{>*-p^ID}>pem@Uz}@l8bv$NUZg1(a@Vwyv z(c%)~gkRrVe{owk7i-X(eG=&xm1bUpw%ggBkXD_ya!($YPjX?HT0E6tbnaJ3Ik()F zMN&%12z9ecyM zfB*?Mu9*4r7HXl6PNM)1p%r@K=>n53jSi9k0H;0l26|(EYCrrR?hct^CXeBdiNH%1iUrUP?9jS)HU|CZ#1i zs72UI)X|3Flvk*EU;l&o%0YMFrx{q5W&~efG`)!~F5+BQdcLm|a1GhC6ytQN*$!Z% z_?$MB4aUTU0dFB%!k*c&5{|EL!Wt}^1ENXr9_qZH*mdhV<~v0EjvS}K;5++X5q*)0-v zlL>lxx*-ZO0SaO9DrCBRZ0q)bCW#H5c#yLoWe%m83e&{zo4qIQ9O6-^u8fOf^UKc; zlI?syzP>|vRUs@jWHGvXG8XT4Pi0TBXv%OeXjXJ(Y4-q z8oBzMs6y8_koPMr$vVAgx$ODMS}Ky2h<87%RFwb&y7De7NN(*5*guVrs8o<6(GC8S z?2Hf~BzkpRMuAxUTrP2B&PE%AD-}L?ZKc-3KWPSV_R#_*g}*98}D{fCa{q zcV@u(BLU?GOsfvSlTx@7>Ndv2YC!{SjAisc{&3DOhA=I#+L3_^m=5OV_&U-!oz8kh z<>|(q%N!)xLY)zEQ2E!=kDQ(~yNpG-Aest+a5Q$cX|}6JfaSk|9pbNqWbcB5v#QF$ z`N4Z-H{owd-9ucHH>zI=ms1b28vE4J!Z(9~b9!spJjk5EitB+jOI)q6o*4o3#)1Z0 zIOX~I2S`3?W)CzEv-k-~DCfdXI|TlOPG7|uQs`v@pJ_W|sJBK4`LYf)e^*)cJ&qL>5(bShuNJGHC^|ec3xy;XNoWuT;#*JxKZ_eA`TPjX zujg%r2QJfg|5jldj`7jA9?oKFGSc0}u>#FJG5-h#NQD4L$8<6f;e~h$rfWo3@y~4X z3gXe0Bw~N(0XyFu*b3WT3>fSgTUdqyniX+1g`=4)ueeD(|0#6iy;Ma$chDcC=+!Kn zsiUC03)bTG*&oNWE#B_Sh*9$|wd0~tB~aH`x0Td=!Y_V?s%aOAy6RQlm-0w&+~l3tW&S)+ zzC?f1d~QBiU6zcfn7c~N-6hE5sHr_x@+}IqM<}==7m%am1QZ!5t?OCsZFOp-(ph1! zn=Cu)sd}pi`#@$brPo@tP7o1^_oQrBq9>i78MAWk(8I1scX0HFf+O3od(-CxHqgvJ z*$Z45{G{i@3<6d&ky}y5;b0|2{3!P+4|<>*H22K6y=-RPryOtf_ipZ2=oi0=Ih9Hf zJ#29=2<(^A5kXk{U_y2G5<(7d`32fk3~Uj+9_teMX&OKl>)Jtny&{p-&)4hF*z<2= z>S;y=AA&ELcGN{VjiSrKV~5|Mb{t+*OM-qg0!Tt#0tL`E#asb?dyJP`KS&MiZ??iN zT>v#5Ej3l4Hf2lU+?JrCwRE|V$)x+6$7wKR(N38{Vew*>-x}4>?Fj$VQ_rshT5g zoVO6g%7gD@lS`K*ENZQlTGbkC7f0tCH)|?2ZqU$ss6ITot1!tPPCyn%0k&#g#N)wO ztfXu<;-(CaN&*FYS!BCs)zcm1u{c_M*trB)lid&u=veGweB@D}SGJ66lTycFcgGTH zKUI&%pB-yLBHbI;iLPuG*B^p@Io-l9eb$E92#&Q~)N*C55la7B2>biME6v}U$+S&H z*_0_z-8SPBUKc>!8PQHdHa>;8>Tz|VoMm>;kj}h(S76L9f_o6ZFW5DQ)9>|FPxJZ; zH(zH4=zgBD3bU5XU5hvog+bt12Qhqi(*nhshw}|y)=-)+`6OfY(biK<2?Uc}5nYJZ z>y~p)AH9Raa79mbPC#sHt>~W>T~;$!#eFTR0T_IJTv9j;+JB0dPtDFp+)2;%SW`U| zNiJunxJYwCY*_q4t@9Mhjm4w1(*L5H|pafmP&Q!^nU;EFoq~yMtF5 z<;}1vd?Jpr3aRQ)ZP;R`iNlX^+;-F6P7*%*^z}0@v4IcvpiyJ*E@~%s5u9v$6)AsH z7<%g0X-kHe*PSjo)3A?#!+k7MGv6#FxeCQg5Um~i=1XOE!(J!X$XLvRB3?IkiI8fO zrbX8PNmvfdeR?PbO2gTl&QcBWZj`AUB)%D%BI+@SC&_P!xLI3AkXkST&;qy|$w)KC zAe_(2ZiApt$dn%p`o$AdzQ#uMn2V6<{dgPA(8d2~?OY`#)x}BdS25@zJD7hk0sMe< z@?z60;$3mVEPU->m>9*)if-&*C<;MZN;9ELS1S3od;T<5QMvBZjzhJWwqx%-4$GaR zA;1IUPY@k-Tfd-|SF%W;w21zmy-q z=WCjDg>}#(NDz;b6jUL&UN6f>pf$Pjr z?#!B8E$WEL^Ant^Tp^PX0LDmtqWWCV;Ky<|ADT%el`NYbmy;!(p&DBtj@loXQD-rl zu^}p+f;7?zbK;(02wiH++ve@^ZmTr~w@eyVp!o@OFM`>?K^3jchy~~meY696VJ(-% z*6p+Z92qrOGGxIy<|#+`FT#Sr4sPE~&{K}n++uqvWs9luG0_}5Y;qHnp0es7SOcrK zrZKxx+(+ag!+E?%onXvFpZQ|yOD0dttnBBveH=1Id4E0^?Q;W6_ov2{kYLM+e&iGZ zv~N%tD0wHP!ARy*=en-64I50CL}6+9#pf1u(9kegY+sZ{T}qKTYj;~dS+SP->b4b5 z^yrJU6-T`)i>~gwqGfA`3kF?ChOshI?e!;HCo|6QgqEkXoyZMdE8+Qs%@``@zs;z7 zhS$k$7T6dnKJa$a5KOon$lx3Yte3wTjk83gX=1{p>I4AdU=yXFX>M0*YGzM=+x4By z*y&@&`SHa0d#d4Sy|Pc)7L8t4gqA`15^ON*L4j9_t8;>NH0?#YB!~<+@bp%mPf5S=;s1nCJ8K>_4k$poes4e$&tc=t90RZ;-&n(&-jxOYqs%gA z*Fuw&*zMrV;sFVGC3LjEYqiBF!poft@{CUa6d0Wt#Z+Ae%(6ct$8CFdx%UxNf(bmOCMP5l2dCW9mh7?fjB_&9mIJ}1v9-34M1(2?J4W!75m9S-63() zk_}tMv?W#fNaulUc34gmfSL$7n(`>{EipjkBAlSZuD38o5G)W+4?drtgulmi$TZf`2a8v-pV`>yzbQgTNJE zVXLi<;z!fFXyHRu2uYhsulC4XN%oIyd@r~mzZrZKxho}?HS@Du8V628|JUuFAE3=0 zDIjl+iY^vQmU5UH{OOMonWG>_DItN3zDO;`(Uq5O&%}t?7#F4ad^jwz(fq8-h6`I7 zmb6jFeFVvc5<{RxvNS$Sw+&wp>0F;@mds0G6Gfa+5K_y)7so+Xx=w}kO8PNMGbF~* z-CEaM@qwF*o&C^iIE$YxuxU8rIXeuKLYi6iQTY;fN(AQko@rG+Ws)bX*}fT&_zm3& zH<9;}!?^7~6KE+81njys_=YOJHpgGc4-X(BhO=~!Dk&&7jPWFF(aJrDTtW2 z@GSTy@7>FUFFSv9zbrLXnxvVnEDXland&Zidorcz%q2C`{=^~yiFMe+@6!@i7`Rol zZG!X=SNTHLRFHY4ToQ`(YgB%mWp!G1p={^>ltI98;Y)Mo3iW0%8HpU+e)h6e5cUd- zgBWtR^_t?W64GoF2@Yz7tR{ci3G571wY(**W5_D>!g{4_0n(ah3{OoAYoyaN5o@r6 z&2~zn7iO4s|gAL zFx+j<@V`;6_u-0yjUhLS)^}-++3hgtLAmfQqyrJQ`pc|+6dP;_oWg$z-S%ao5j!R% ziLBCDy=WGy^?muFVf&fOBOooI7B5o{8TE9bkYuEYWv#pn9Ge*oe|q>*gQ=s1R$|gR zGUob8#s_UU@QFvgpuj}1@(zQl<~xX$3cK^K{Z4m1{aYA=uP~2YsP`!5bhYr{VRWS9 zt3_!MuS-asc#AW}*bYsnPJEXnAc)LsW(S_0$zgJezD2RyShgiiM2!0)N`C5myqV-O zALD&*oS7e|oNCj^A~#H^OOER385_3%2J7q<4Ixm9*&@lUKi{+r8N2}m*_?I+e*&w? zJ+y0lbvT z!1X`DnJnd`-2rxLCkMxZuR+Ndn2*c=_n*>{??{0Mz&0zmF2Gf}jLm6%p2qFhoXJ5Wkj zr?2x$>LdFny54JF^j?y(?b-N+{Kid7A&f?{Cz*6WK;aedq#C28Q83ut9DI})J0G$V z=cad>DA8a^)zhbRDKG&}DC_ZZppvyiMuzuQM72-x`>%3kEVe%f+~pv>1QsYK@t7KU zIUSlPxEc3oolBW$o!h1{ci&Vi4VOPzg1ij@1Ne%)_#M!|MRlAtQAp>Yw&52L?w4~> zuRxKbhW3Nh`}zB%UYz{I#$9(Cqb-Q2oIdK=M6~=4nC8-`(VB4kBT}wxOZTr3t`35xUc}G z05%N;=r&RzM!N;_uM*agXEZ77osEg^@j^q;2MYuX#Mg*vXBH;EvC4)We#`g;*4zW% z&8L^$he;Mr?^coeX0#e$DK?Uy_i@pUC#_@r_ayRV@1o~3xqNel5gO$pv3o#rJB_ty z;K2*mozaDr*-~S+$-V^m=22#)`!sL3q4ZI}<@8Xi{z{p2JN04ovk2qV8XuRt1JQg7DgQl!a61`Fuiz-gl1A0i2dT z)<>YZy=IuhmKfqN%%W^(k0!Kd7AMM+nj@XRL>v9a%S)#K@r!n5+6-iX+nVFB5sHaL z^NbuUY)ZLo!_jt$dk;ACkgyW>kukyTIZ&a#fUCl)E(0)ySzrvZi(lw}?82`9B(=R< zxIj{R$&;&_3nR zrNq@mkQtQG00j_uFtA06l=~QdEq=VjV_rCDp|+Zi+cxG0_;eN~L*eP*;t!(+$-m(O zqcB-6ub~djplCujme_F+7)Eme8@7P>Oh}lercWx zRL~u7!iR@cOG@mAnpaF{&O#(ddOBl%^8ebrL_6TRik6>&dpYKt9xWc`1>f<&*bZ^~ zIT_t?=UQ<+R^cSaulTuHL?slS4rG)n_rT-g-t2WVPk^Jy9-;+dBV6gqNOJ0LOYYKu zTvvk-B(j6c7FiyqBBj|G5oHHE^a=Q@%6-oYe54#zE+CzHv#SbQCfyQu_xC}7)l#4y zW&$~@5DaS<#+JsT|Deosm#2VYzgqwvT!%vb-pfCNI@acL#3m&ys$E*G6& zj7k4*3RbY%rKsyB?&^+_M_oy&YaR?q=67&Ii7Xe7^R~R&3KjDADv1bbP=!e!!Zz%& zzHeVWh&|99EAN;qqB-bWOpv&hxnP_b?+gF{0000000000000000000000097ySd6C z{i5R$PL8I59NwjS>k!p78Rm7<8bZI<;Pw9l4L)+nd%+ag1$@&YhM`BTm>IGv%!2wn z_dxSGPk}QP>B#4&r31qK=|E*o)1#HX5h0@M*2cL}A|JaeWpI8-A2AR;xSak?Tr~jZ z*|YGTR*nuifoL`jgzU$Vm`iV5-t4G#2P%iRyUdit9A4tt@a<}*JIMzK8eI!TN33`G zx#C?H;G#nXpE5T&X^dCYf`zvyAurkvA%BE-L7?NJJ7WZ-=Fa@yvt&RXECUyyqydMo zlKpp)rjYWmH;4K;{ZL08`f^(Uewf?!pRJCqhewBNCBA_r^uta_!{_y!TWuqN<~)_v@U* zYnaSGNkib^h><;R1`si;=d@FA6VPyTh-^oCL=iMURN6Z6V5Ev$Hu4*W&cDS^@KAJ= zb2meqPr7_kP$2ZfS2*Rd%hW0g%lLhEp?hg%O3P4ECaBsvGlc3!|3<8dbIPGL@`2~W+#E6ofoY$ZN6+A!B5~Z?)LT;iF zn@@3!N=1)O-U#!nWPZ#EUsu{%=%}4!Pip{s2$3UQ9+A9GQyAkCV`7eGVgq$-Y0U(h z0tyI54mAnkoDhSEu9wP>PX!XSGL1d2pvIq?(h}M{6NzDicHlIPwW8lgOcTW?Y83J2?jtJX}zK* zD@7pQZfAx^_ghm@ga<^#_z-6Ax(EX?Erbi$hDo}xa(XOWIw5WDBdc1;_53FNG{cGd z6Vsf;>t76sw%G+`EKqIgk1`47G2i7$W```y9?81X|Kll4omH zgHxo`XsRZmQKCsHX+8P`3Td3*a~G!^CdCOCwCZpegAM?iDJP7xqpCeRlK+rwXC8xL zivMMt2Xv?VT4m!>EABjZEKa~&{sSh3w!VhcGsw>d3)e{WM+9h51laJ|{P>3h+I~>3 zry3KOW8JH~WJx!6C=#Sbd`^#rx9NQKPB!Hl&b%-Q!K&NhiwqN}x0$Qbcp zJ@yDxX>m)>X&oh_6#tcckSJD4k@_$)H!3hkB{L{=UA~OOmcN)2dr5P($7j*A!ysv^ zf9!-%goi{Db!QU8DP-O!-3`F38w^BR>ADV#__`n~zPRE;+bq(rW-qb+r17>`(*{`d zbCW_h&hVGS5<}XwgOWKlGu2?l*g;<}oW zy2tX6@keslZGxA$JM>7XVdrOW+>EKHmG2ogkJ)uq+A9m~6Y)edkqAj&2nikd+5@e;s3$G`S~A*<&S7pzT#|xJkEd+_*{? zLvyR8UV3)f2q0a5b}47sqzXSXf8XMQx6@8>jV6#G1Rnpdi>WNi2@4DmMJA{H@W^!} zli%4hQLY$!0GaY*HOT z+Q>l9&uk-N`=%~Cy4^_6(?!@O&bm)cI52<4JmVT8EV9(|N%j2gTn+l0m&6HDc0vcy z*ul3hjMjM}y7b1XI))@efJaoF*x4|JAwA<(pD*hbHd>5WEep*&y-g9yscEN3-=^T# z6$3`~+!W2ul*oSfdiG{Js~hBSU^R9I;w0Bn`A_%}7nx#(Hv#-RbPj5Nta18*zpWmR zAh1Ce-^NM|y=+KZ)K7ulT%EZldw$2H9-8ct4uUt!)3?(H<&Hb!omT1~T8bSBR0oT0 zfA^#hfL8-Hc&@S}LVJV*^|(&XJE}rf`#1_#r7*gbg{+e`F1)!gs!)}4cVql(r(#Wu zq$iN_ME=^Kuk2ao69BgvYxfn(-tf{yZ{Ev``-~8%msj9dm_9GeIn+ObP|3t}2(tDL z&w9P78?J`z+7v8G!XfuQw5A1P3+392z&27l;UYgNZ&dSimIyCF(4v)5_O1WIhN-|c zohe-Rw{I+5q}4X8L#wf2uw0$pSjpv?R|r`_m~}mu!e6eI$(%^NJ78C=zwp0NQY)Mb z$1M-b;haXDD{YXf8#-tsZHC45e(it%y8J=5kCSh1O#pvSI#Fib3`V1pSS-YX!kAMq z8he`H!n`z{uEkB+J5<0_RiJ6QypvA7b4w4#;E{9A%EIvZtji=K#ik}U7?QZFU1_{9 zf!&h@4wFPFp4hhrZ-iVF&QUUqR@gSsin_`_@CbZq+O$^@kF0heu%bDjYUcU>rQ=&Y zC)qtML}9+~wyMzG7VjM?NW`KrqHb*^MQITCa-HA6c)Ay}p2MhKUc+@)FxTePSQbcv z@#XP;^<8duF(F;eNyeKqDq46F4hAPyqWIOq5kyPCmA zu5%=bB2y4GYW{+U#jdJI((rT>j%Ta`L90k8ycj5FD5$e#6LFBOn<)wW@m5?Hqs3^A zUy**=zalT)3pO_I=r;f&9u zX@|z$RBT?PZz^lN8IjgQ+I;Z}eMmFFYC2`RPB|+hv&*F6A?IhabZZT7F_XbGDsy16UKU$7jtcO^J%&mEQT<&#B{}nhtU;#d{}gK0~o& z_haCw0$v+W9Y)4H1`X5#rSUO(+KJ5n2w~YLNQ*+$<4Y;;58PTI4<6?sWTF1`CqgYQ z&o`s2<@E(RRpPFKL622LrupaT6i2}Ex2D>Y_`I9xJ}~PGj3;1UEr{YSZ;r1|0A?G~ zmDX|GpheaBMM zfz2g{apBZh*csJ9dNWYEL$s*a1 zvNSH+h_%1urnj4@a~yEvpWny=VcQOs0Ymp_{)s5pqxZzv0CE4?>6O3!`3|3^9uDGV zT4t{qK5Fknk3Gyf|l4_w0LF+n~4*NfKG)89K|ns*U1&d9^F5f~?N zq_4BHC5Zac5gTbv-?tsp{)>(bY~sZCd@nMHU$oXj+u@x1MpRifAmw}|GY%8Xj>br% zeP9%8=$aN34s!T*31xHWiBh{Y)CgqjNWIA;v#FnhzjaYdWs#vMlYZSGc-)BTFAh*w zNNMa!_4AUp7Mfr~eDE44cqbQWiAigWW)>}x$K*{wJBqX5z$QeE@0@da8G1SXs_|`a zOah<6HQ5nrr2m8tw_^Lh9))}E$>Pc+`-o47M?O4txCV}uj~2;|5>{c)%PxvKn8Z~S zFFu%zh2nbr>29Gi))I?|TccH1P1>iuA+k3PQN(VLB`hpia;)xsOEQr^e+a~t?gQBo zou3U&Z~@+2c|NDoqe!cAN-E~E~qPg@sj)THQ{ zl>7;b5Aii6IgHFi7d)V?dx*aXE_$~rdC7LNwG(t2DB=TMj!7GH6i*hxcR&s4gyL~% z6Zo{BCEiG~viK*+n<154Q3*4*!IS8hA3GL@w`8!d7e9PQ=%$+mtM_mZr^S{oLvu|T&sNE2+B>1C$7Ug1c;Y3mbqUnoX7ZDZaz>ycBO2Ewih>;HD{njh_$w&(b65q7)qRNExpUwy z&Au8xmXe8}NgtRsf!BNNeeuHm;pPEJm}A}qf@BPGk#W#Np%?las8EdTkaL$6R8(yX zWrMW`j><&`Vekr=C$uc?>P6YmtVM&4UBX?j8Oc@hg8)W_h5Bea2jK6#kAiBv{5#xy zK(;bSg*m9k66uzMQn+3khy``Bhpr;WYd_MZe?FNZrHM*p!Zy8HkH5T7(Fazl2AXdY zfiEfL{S2+bc0Ha%4~E2JY+?z_EMYU|(4108Oq{9<%+rgfGB7E zyrPeZ1iS;pMNm1Nr6`z8PHVY2f)8Z*A4Z*tdhCq(l$tiiR(#E0OVJ`!o*tkqY_WbO z4BYQf4fw$hWh+y^!;Jzbfm@$1CkKZvFjFJN{&Yc+rVX0VjjOT}nmomeOd-CY%OIkx zBXKFaMw+qN1MBpVQB{858d=(XKz*?B32_r*hPZ76UMIILyY){(-2@h5SQNCk^g_lS zb=p>Nu@*Q%tKmK25O+l>IJAJsKg>uU;bQOHvs!ZDjU>3kuuvOo#hKBD0{Q)f>~@UV zhB>DBV!1o)I{JWSF1}UI|4Klf5T*$JZ-<>eeagXPfsqh`a|rCG z{$K!cgdwFmZ#~i$jkn^SLZvy>4_nA@ng4j1zK4KyE3y2^qFRKOBrqyMkcDR*MdJ7k zP8w~|qu{0a%BO;h;`kXJJ{ zep+F+pqz`|zWKxGf@sRO<`*(3->v$O7qi&4{-Q72$26p%=c;#0J{uGI?5XsSF&?|VWE7$ zS#y0=xOQRm50sZCiqf=d3&bB5Qii0@)w)_z;6msllS(c^ly1nxaxMz2?Xm@oev^rfKc->mkXFVpRqyn(d)vumb=^8=XA(=dqOF9CXiEWWVQ%?G3Ta% z!v$QzdV?Ku7Oi(9T!M_4ScM}!em3Mvc_^5_j(mhX1!Xaka#^xlb^Ib94B&nA)}Ad3 zFd7O?ZlhV`9fA|%QcYOT1RpN5##=gE<^oYr)a_M$%FHb5M+US+`HvHnrbUdX7Ka|O zj66(#tr-YhsNvuQVW_7xA4Ir-QUueChy%#A*m(g)sm=NV>jvj#;eH6`?pd|kk{4Gf zhNXNFvEKe>9hVz+-16KEs!0|jqR3>$Z`Dr?`^Y}-g98#pV~~)r*Tk+XU6UG4(eweMK|ioGpHPrOs>Xj?2ciyK^7?XG;A&NL|j^Y8kOWGOhAVH zUKIZ?w|g#XZKHz{yiB~;si;iJueYwwLwa>sRH)me zNbk+&u#=|4eAJ4O?^_I(LXKG@+sg@2uQn(SYHR~XY|zWeegb>ptiZ`vOId^S(kp!DNH<%K3&$;!fGDs!bRdZmnVsORMbPgd z6{iUcA5A&TpF}H#@h?9i-;knrLtoXGNB^OX`xee}+D*3- zNTl(=)SK7K?$I0e>lSSxt<;p>55RX@K@m~$6Z^Ue`F+g|+*HJ+)}G28j0zqUV6 zl!mcirU}I2Wk5bBJEWUdn=)hX-bT;8P2NYXzqLi9r1n|9o2KwB6ctL6C5D#%_+5tN zO=w zKkZCCYAgnxf+sh9P-~NQe#^~u4Bh=BU^%3kD-B&~fOd7RHw`+8A|duW94@)ykLyeM zGRH*Q6D+3phx#M`iCRq$WJLQJ<9D|;@&gd8Cw3TXG`K2ThNgZ;i_dRe@(Ws=K-b8S zJi#cse|4w~5@YQ9a1HXlkVlgV&vSP{8M!EhJ)h@g+C6sx%9xzxs_#A^zarIuj9k}{ z1taz_KiN*vBE>U(hD9xqTY<53ci5)71&(!a$QRN733qI_aaYdKsWPUq>G$fA5`%u9 zGeg6uEx@+G_^&eo_gj?~Vk(Y+q8sfT)#!-ZV+V;k=?$^Gk$E$nz_Q%f3yf5X0HL@` zVS$DHoLdm>!0gTKhIRgz?et9m*(b^l8xYsYL8ChnL?z3%uw_?R*cuN0XadoV$*enN zT)4ajp8(wmH<{>V7&>i&UhpP~;wVcgzaQtg;1^<4t3comUkOPIxYQu9!gX?(^vJVE zn>3exsfKswvaIr8PU}^;i51TxerCs!6Dzdr$8=lQhwIH5A8=|7w$9fNs(N~~S%=lQ|7T6>^qg!BsQ zkT^_Xq#pXg>&_E-EDKIA;h^A5Qa6d&fj7oUchjei=m$dJ3c>=<;|0XZG3U@Bxw^ zSYl4#M8{*q%+ykt#8_A27Tpqy?2T~i6GF3in4`U`y0z6TH_qbV#CdXadVZpRPuQ#p zMok>zuC|C>fmabQyugIq^_j>BA!ijmloIi_1X%(_XJSyXemxh%b%528)N(?6DAd&A zA(2pTXZ=C)va-fyM~lQ3&*Px#kE&>?6olYocC3pAWoBg`HzR~i{qoRfk~x(-Ei0W2w4BO;$A!2+tNv zWCEkxm#;F)XPS7Qoj$L>EFGyK*d5dZT|_}B&%ma4PV^kv^xL}BLq@IfRJ(2NMm8h zl4@MS7~KA9>HKso`8aS>iIbL4ffA_FE=$nbJu*nKWZNP={|g-KZi2?D_KUNMJsLH# z51vo1te-%!sOI|p-|!dCs(4|m9On&gD>0`gtg!qqZx-IRdf+O|wP4Ia^DtG|obzC@ z$pOXh7%FpYH3#^uh;NIV3zfII(d4>wZ^QGpY9xsTI~UN)N0M7n(e`HHYd2!VKfipm zZky*%`y7}3qrkPW4)tHS#>DzZK4trl{LlXeyK)ZFWsp9J!5$k4pdpA@m`Vou& zXyU{JFxVa++H&Cq@8R9c<||GN@8WCth;u8E4qi(oUuTxB31#b@LaBQpye=X6 z5MOl1BQ0BmL0gjl%>nH%kX-t$Lx7Qcu#nIJNza@eAu}Bghd*f#F&d#U6~3E0H22O^I>sAY?FL6o_!nDM&`g#H90nLF1QMz^e9T|Ry;z}Zl7ZO#TNa~+VQKQ^PV4v1L zVDo)LDU)y0XV_o(`oO`_IFN%mf-9k?<;eVi+!m&dr-U&nIgI5%|7nWOpTp~0QoS9*2i)7UQS7%;cs8*G)~y$ku9j2^)*2C16W6Lw<+zi3&uJlC1T`2dkKAc;L{s=ISoW8vT9!3GKyAB@f$(AwsP^R zV3n$v=u}!QmCAWoUY)@b*z#&Zan%0|EZ}k)Zx5|1c z^JtKkU&~h+vJYnP&gI3|g|*&87ix-wiLC`yaX(JW0-5$2egV&P!&u4UwD%Wb`)jYE zE7GlGkP=>UuB??2ploni!t1w(PsNLoX?xP?(iIc<6TyRh<_Xf7f=&KNz0 zo4tlgSOiVFy>jp?JSPk)`OEo>v;y;-2#_2agOPc{szhvEEvV>m8WC za@Vg9C{4H*2Vn|xpZBp5TNm&=THb{DP1KtQsA_+IpZEK-L%?e+5r)F8Dq6Vbd}xLD z+YSm8e{Va>kP1fw>%8&jZKS^O-ag$}4^U*pC~1e6&o(5|7~ZA)Y9`B(e@9hRauU14 zkk6T3-e)|XsomteCmLaG@-e9HuvewYbgzB=Q`N<>?{8tfhCR3XU_{^x%)@iCkSeyX z((pA7eq*T`)&NB#QO9;yLTnR;c<)?);-sLUIzFqD=a4YW`{O(Zh&D%<&i{_UCc!2) zI(1YlfnLc`vvMKoCn3`&1FyR<-PsXi9Fp2GFeDp+B98!Zd-@KMXn-j0fk>Fk7n2lX zzifk9`id3<;@vWMO6k^rnSpMe7~ghXqV!6O`WUW8iR_kozm9sfyIe(_UiZ?$*B!qZ zGsB~oQ>7})**WZ?*JGqgahB^(7VXXB`?Wu*B;6<+sU_RbM4P-O5fm4Zc%{six1=<+ zMC3~rS`Fn*%Cy@`nVKEbQt`sO-?YAABo%Rn4rUiswW)3_m&c0vi0IAN6{ckOIIraz zfJDyKV3g5c4h)FXdy=dfikB{PK8^h)xJ#rTn4ERaT{CqS3hiGrL>8Kz_@VG_-Rg?l<Lz?_Omv;Owqh5i&KO=kO@rw38GiJOH@*fDa{ruDwqQ|zw_eHNfeM`J< ztuY0KBo7D}Yvd6HE#f&?1K7ghzrp@?V5-8_Ub^PuV6f@&>xB+Hya;X1kvyKz{7VXu zQ)Fu=f=?`_D%MLh^0Z6A4>fSJxewbiPYt#g>sG*WB`%qoNUB>lV6F5r*W?Nk9aS0G zP2<;bvN>@+Ux|B)g>n1#nso=^noJR*-gs;TVY`1U18y}}boo$SQ7bb{Sa@Smj|DY< z?o>&d>X!eF={HB5UzohYeVoN+Avowi)@SOXT0FW%d#&t_*_xU4hp^Xzi4`LES#!&y zxM{7ZU#5m`XO3FGRYn_sXJS0L{y;9E6RHQap@{D6MA zEkxN1|gafS#O>;dbT^gGV6R9EAbtE3`o_v8(h_vxI8mPGVQ5 z>xS#?A|7lwAM65Pt;w`|FJa11JU+Ghq`uE?5w0M`C=0AHSZ!dF4vSIN7d%9&6Iv6x zHbtyq8MoV;-wAE@BKmvz4?I9(Nw3eFWv4ZSmx(JfbJ@l{qLuzgo#%Z~Rb@pxvt?#9 zPmZFfk82tfhVdElW05v6C%e7Di<a_2}PEp=BZBf*r%w^ZtOOC>671PKV|10Ec0ONI9^fU2k021u2Gi=pZ5hNpjjWs{8w zsigNMQ1K|o$4=$65Sdi1RdvpE@AZ5_CkV+pM$E0({)pZTPizOJGF40G*5h;{a5~)yzLzuBC@ z=@;jUlY+4O$JAo0NF@0u|3qgz(T;NkI(y{r?!=#cb->YBo5e1v_wd-?hjraf5djz8;ynYLGK1hd9%OSRt>|&m=LlexrU_5Ycs2Z>N;5g(|`?R8!v3+x0 zsNnqf&g!U*m25w+3FTmB23pO}Ht(Ip)Ng4e{E!EVlb@pMTo)bDyn zusidE3?NQtm?kySbHp{k#_;RylayGI^Ikhz-Saf-P(v_wgwjha{f9kssU@n#bv6L< zS0xx(2S5bUpM)(V^x7lm!Y=D96hdeDFqz+@31^zgPx2Q^#HHe@1(NCc;z;|E1X2z< z-dVR$Y|1-*2q+^UKq8kde)wnwGJBb&PJHUIn~Pc9mezxz=Gzsdm2u*TQ!-&1p3OlH z9R5*D^Jcuk7Ncobl_@)ygS8Oche;+BAto6Xry5X62sdZ0f%%Fp0jr{` zeY$OKAJaR9l;>9rJ1`d2W$euhI(J&+^@CAtTE}5b<4w^dYXs-_4Kl_*da0LZwvJk~ zCpy%D(H*3G)eVUmgI+uLJDg90Sq}v|`k(*E9WN?7<3+jjImclsO@6l!=4Rtj5dt9k zKmQ;UA*CUD%{b?KlTfKPxQ9#bj&yQd4&UEzi2!x+^BWrc6d&?SB$h16*WZ2D@sK{ zTAN;y3B&zMrX!BVLaV=$dgKFbxlN127J-7vb!>u@&LAMz1^7++UdF&r%id zwuI)TLx$hazSQ;|NnetND9_o@;ca3IL>T+Pq41XBY9wQ|PwvgoO@E>bpXwquT)pI? z1uX0ax?Yr7IjZIbslm$a%d1YmW>?yhOe7R2K?cb8Czo5Kmgm`|ibbr-S1f{kUASepx?8`U2} zBt5FR1~@)vJPsZakzgKJY-I+yO+I>KYv2u6BBnbDU@YlCweep(bcS?dm&L~T6BcS! z!OUHGqRtDLyDFr>(%V;ofn*Yrz;KJ|uqs z>RR!oMhe5@6@|w%3>#Fot@jd$8--(N#!^qq0n%QdC$6Dh4ksCfy@r%#TQRJ&u}VaCF1h$RnqQX80V%T{Gg-xC>q98=oJ{?%_a|^rqF(CE^BNt8 zhw*_3?gN#&T>qIR53&&C;|L?WEbl_d6RW{%VK_59Z6t|P*8BkAeerDnH$%o2E5cNQ z^2dc8LHW;F&vYxz_LH|TeTd1iNkg}do&IZ=#+21Z8lM!5&_HQl^7#JQ1+ErEGuCmJsA7s2em``(|ZVsh*8HN-axVv>lgbCd2gnt+Adf=WGl}Ei-MzvPV?Nx$UabUspbe~h;&|&2~ zMvx5YM$8Qip@tX-#}|o#q#0L6zD&H+Sc0$WbR^GfPiR8h$?F;a}($Pab4dImIF$A3#kY$XwR7{Lr&UP zK+@zDef#CRrNf82K6dr}h2TX%-^){9Ur63>qSv!9sn@(~pTdj0aDU)?T=AOPtJ+;0 zzONB5sjbfo*l+|spZC=JQ!pKv_*wM(3n1iEs2=G#?vAjd@7g;Y2n!TjhJGZv7itGw z5?us1`i%m0fjaMgK&nHe*PGWq0O1VqBmfZ5^@0MZ08|0%+NmCt?t}n+-T+GAz5m?@ zR)8OH=zZo^>hl2*2Q)N70`%q+0Xq-gj6e47L#A&|g*N(H0Lwtn$Gp3_EWpk?4Pfqr z3drOc_bfE*IsDl7GhiQ>{lxSNy}>jV;0{CsDt$;z&#m{(11*3gK&5tEpn)_CP2Y2r8!1uY$fIz0>zHOo7 zfFD35;MgbC;@U&NOTa9!>a**4;f?5(=^c0+unAc83k_fcbOHH3xZadD_i}}RfFq!1 z01&wL^7XSGI7}0q8+5>)SeEZOLtb%8$RIeZYdV?tERLEkw@F_lAH$rf; z6;i&l$|)4Ke#(fqixg(USV=lv)2`LZ`HUx0(m+37fc4 z$BIErivv6~mm}5!Qu+O>CL8~9W`CKk-N!_xjOK{kH?IJAArzL#^kI1uN)|Ni?=j+| zq^AGZ4a8-SA#`a3qd{%O^GHS9)i|m*( zICg`Zxr^@eY1xUT$$7DDUnrz*3;@eu~slkFD1i7~tmFHtH6C;Avzx*M=|BrdP0 zIrZlfi@C__+msB>&vmD@=5gjSEV1ESi)VQKez2(1)6+IGE0<4tEE~&^4oL`U5J*;f zkwuNJ?T$e0{ff#tsQ^6DsekMWqb9&p@=O=500X^(iSBo+#5pQ_?nPSIHbbTdK>l_l3ml<*yl~eFf zCJ*z>h#TIXU?T*@R!ai%HFT-Qc9e}mC86O`SM;&R-$&20wDuDFXvYJoUmGLcLij!u z^2mp|`Dd`9UUYA*Ao>s--sF-;!MvJ;BM0}s9e_0-W6s-=4Z5U$UE}I>I{3o%5W<*j z&9+nL92qP6J9#PIAS;AOMPXAO@8l@?#(EAkWn|OzQ+FvB)X87R5CjZ5aFK%0y6{7)z$iStwVMSLJ1|CAlBkw`ZbfL5 zTR7D*I0#S~h{C_wB_B|w>)LPb?4AzPY(5E`{B^|wsIi`&q+}B$o$GzqA3Q$*SFc4s zC%feyDckkID)DMCPpb?|55eAFx-}CkHMeW>pQk0tbtE5Zg2qhlO{EZq{q#XG!@-OP zSpzb$|AxzD<|TpLEOiv3xBe%v`rDDtLZ5KnwBN9`HSgggzS|pg3uxc+;c}3qi73tG zyz^M&))l+M3vk`NVl7ib5jywPqMWd?a*JM5RvSwVzVWGyx5&Aup~amvjG0ifOy9zaGZm zrhQ~6-fYR0qmKNC1cvoZs=mP76Ac-i`>zyF-y4D&lrQRE zWwJlAQJSWi;N2?6O){pYUM&Ym2ay@<#I-8}nZLH%AX;_AW$O>YvWVLV;u_V(u;HKo zp#^)JS07z&werXH72#GGsQ+K-x%?V}g%TlZ-h~bB$fF103}ZogT(s|x81tzQq*P;S zLW*tqDg~b3iEw4914~|O)RhT3J-{`c#v?x%C3Xsmmg;JrLqXXZ2QZL9*3Cv5mXwHq zIj-~5a}DuMdI34}Ss0n1q{>>*)Md6^f6Ir6J8T$pR8g^W-xLsz2Umg~9L(h%ZqInE z{n~Rye=QlWe;*(dqH^q7qrkd_7#TO$(innc7~-k?M}AFy<%y~P^4eVfOziAt&&;z{ zzzX&l73QlO(Iw@|%rFQ=q<(SHgT_enL%joxWCR*DmI9WVB_7+PAEF!yLPT?b78(ur z@92<8l`mj~oh6Js`Kv)hUYYtLc!a7Q8bNX!@GA@BzADTkZgkkUpHi(U7j=_h|&^}^WD?Y~QKH`Do} z!yrOUN~Nf_$#&wTBt zR$KA)7y3rv(=MA62MfLgX7ls9*ms<~2qlB;N)@wZx84CMo8$$Y#0hZ2oiIhqG;%(y zmr-~SI1+~)&UQ*{9jzT3A(#b73M*dUVgYs(Zxy97Wakna zf#s5?S_a8P`PTrNO|(-xf5;9?1cB9pUvp*f{F5y)wYDY^v}R~H)B@0hnWpE*uS*~G zOb`bqhnd&;890~>w+{(=k-=XJ7BYe$jZZ*yA+E{0ewQi6lf=~XIve3^LS2Cz*PE$e zYR-^5H>K)CK@6m(%Dz=+VRd6-mKhm9?rH)$>OHEGt;u?5v2&KaH#y1RNS~KSS%L}2 zSk!Xd;T!2i`8_AIoD@CcBIT-0L%yBo3XlA~=9-(pyocqvFUkh_e!NnjcOA4Da=N7X zVH|(=wGIKxpXAwkZe%HFJE)$gL;$zIVS4@udZfoK}rnnM^25TQhK;rxg2 zmQ016GGSvxFLv6^76S=&2cv%~copI?o`{Kl<=TS|FxrX)coZTl8`R z{+oD5QLelE%ZaJ7ZmV9FNdA$}mw5#NU30-LwAh2i|EPx5&@te$MKa*I{8(;{iLo4r zk!>Ah;g_(S%ew=S8Y%*Jw>ZBje5q}r>;#>%T?FEAs6*oD3fko|g)QK-g7w^-AE0~N zfo*omIgWOnQSnM}8Z!VUv) zVffn{J?9+dVc_sXAfSd^^VwTPbgNoWl&2M{zkQsy`~}J1=&}XQl*V@#-O6AgwgVt8 z2kquot!M|9{sPj2m{ydkJAN9+7ZOMRgx-!7lI~8&93_)C@gQjlDc0ZXNr?pxyYbJt z6Mo;ZFeK=kvjb|xiaKV~o0x{Zl<40|5T$H>$F}p&Ns`$)?G(mN-mc=(J zM`OLLFDn^^_TA?U--2iK?=L*ZB0*n(PrVAttT86zJU-%$?#ZU72(Tog zKaYgumjOeiyYVA~Vn1dgajFQu#WS!DGuOuW7|729kBekr6DF$;NcTIGkE`8$D;d;j zz|eR8$c%rJu&pJ6Q#w@^Tx0ip{HguDm}@{ADZ62Ev$G=+XP{x6vE-w8pY>Iwr_f1+o` zgKi&}DxCy)mx86Z4NUqNH}Han)^d?d;Th!249k}8?*u6MjB5#91m}Kv)Bxg5p}og3 zV-(+%{kC*~JAY8fbM;nQcXHH0h)`H`SaDeumgDO25NeX($jYA%y z4$)h;5$cwsWD#$fG~}m^bqv^2+f*)N2R`^rktJ66K;KaI_sr&)B1U}?P!BJ*?tO7< zi+jWv@a0I&hmPNVb^ZVdc>2nnbW<2Cqa4=+0To+X`@dJ&B%Oh=I8fYVM#xaQy=iH7 zUu4D;YDFYMEJ;Qe8B63*a`3DQ15shehDmNz%oSJ~NSN)_%IMhc{=pv^g!Kw{-U0{! zK^vtboawr1FBg54WPfO_Kf!%(noNgbtJGgqy9K zUfpVzAmUVX&;!zK)Fn2n{EKO|qA8`J+*-bRA{}~pLvnDT;GVLB%9r2&zN3-2AK_y? zA;Mp+xiyWT2fRw;)61kHVKc#qW9dJ!XWSy*&rNE^xx`0T{1{~iqCAE68|wsq z?IaJ{By3q{=sj~5-ZFPA##0GbmtgC?GETU#vXqNyv_1FaR8*zXyuQrEC89#|D2#6}4Kkk(n z>l6iwhefguA5cVocCl#zq=65R{X;P?MerZ!mpF(j+5(P^=~j3;LhM?bs+|H>rfc86 zo?BiL87iQS%btYEaetKsR-x5$Hi#um|8A_{ZB3tPDB&#&N8lsj8$BV@m@yd?l#ScA zZ{HE7%Fq-2Xe8Y2P1*8Dhjk@=^IPk`lKr`>&M0~d0s?mF5+z40^ZUf8#n1V^C1H@jB%=_T9v(Q5gYY_r(!b# zXDpb}5jrG?dV2aM>1H&iw;tVzwR2@@yc9==$A+gP@T8pJd!a=~hgtdK%h3fKT5m~xX%<#jZwofreX^>T zo$x%iuejeLa&-Ji^XUo6&6uJH>dFt}o$*m&Q4IF8^Y_?u+F9}<*a~YQ$zQv_4Kkk? zQa(s13V&a5^I|UD6hm<#WsZ@7x-n`0Fugw;N5^NG`BL~ zt8Ic4uQ>YQl?lTumUDEKaeiJ92!cS$NSHZKmyb!D6>KPG^rSPMKex@0acK@@yO)Zp z!xr#3%!oXoeeSOIA&aXHb5hY$MEsgKM^jceueX1OvQQ{B&;N2%ICiIu6M7J ze5TG1Bri+~R$Nq!fDM ztpWoYn?e&J-jC4Mayk~zea8Y`S_sDy??+ZO&k0i!>TW-VK|r9!#L8o!AOV~bzm&_h zpB|4tj{Vf=7buZE1idYO(*)qj2>qIT3I;4K;RrTTB{1{6)9XKrA*L-U~MV906+!A!ml_|E-62;T@W*UxQ}x=ssBFux=F%s)u&PDvIMEsLVk+>qr)n73L}%k zp^ez{^lLx}*qZC_JE=LvHR22LA?ziS4ROfJ@K2mdk=1$&uA#Zn?8q>S%GC5Z?`;2% zC0>a%C}8VRJ&Jx(%tZsql3A_t7&*zY=8lb>m4MRm!yx_YeM|<55z$=_o`Rn<{cnx1 zT!*%>+OJ%UNLt8?Zr|N&zWU+&;C>m-r`ELKS5@nfbd~TSYgN{m6nCFSr2lD0ASd1p zGs-lj8AvJsc}kf?u|9$)&;o8V9*mnoL;8qk&HfhgJVahSKLon}_E_Xrq`{*)ky4*r z%8U(ZTeQ$!mbHARB{Z1P3sT9B$F>{Yw^jk|TPJYIBKjO_&hyzr?U9xtVA%MqHetR1 zr6WZ7YQYrHQjaz6Tq7&Dwu0Ccl0VM>Rr_8mMbaJH~jK0m6 zc4$ec*KrZQpfAqxH~iSA$M1kIvaYh;iNNkd8F22%1kPI`A#+^ijmREB^9oBZqhKJJi?O%h*0`$-eDXsf#$Bt(NNR@@XOlfh+`15a9!-Ahj^_ZZVz%wV!)M9X-;F;BA&!1XSGx40?!dqf!IY(n8M!oX55p1Ry zt`B%fx-jGm#>uo{CQ#eiL_)~~CY0t2MN|cP-(HY2s21L~OtEzZYECBD61vK~D>zfW zS;X!s{Kis8-V}f~BY-7MFb||?F6hU};_+f*mEFHtX-Vsq3UUv7WT97L!#a-Qj$)Qo zk2szneRix#I)D%#1)U6QJ*|onq4L6M4QZ;OiY?uGJc1#`7427p?NvFlotgn=k8)B_ z{9Io(qi@=tjhSKNHhAZfc2IM8>Ia1~$9eW+EO|h*>+VF|W%ypSI}$V{jK?b=VI(k^ z^av-k$LM+1rJ!jiO{!kx3x7(3C#={61X-c3)ZO?&Co*n38LuJZ#fSFk)fWo8_eGwR z;D)zu(fq)E)E61y?2G&M{!%Db@u*Ia<+|`H6zWfR-JE8c zy?uaj_p{~NirF68XsGN`n`+X}7bBCwjpCwAVu55vi2V+lO6O7Mp9v?fnKD7ru=0J{ zV%s5O+_R=e04X_|zK23(I}(i2Waa3~8l^IKA#jaI3Ic@y7OA7i7aL5NlB?x*z4fsE z&rK*%R<1esAJ}jX1Pic98DWza+))jv*u28x&jY_VfQCKp-qG9`(^Bf9DMf5|dONPB zZtS;Ty}s9*!xdoQU<55WBDE>eackLy!R$Qh0E+D$X4+82%Wn)*)c4d1yMGGhMz;q% z{YX?)ACx#mBvgxP@|zZX2|pWsNFPm}%ty5Cgtv(tw0x({`UzRw@B1@z`LZv%RH>D{ z$Uw4J0`;SShm>MPAHmGAR-*zQp|f=-g??4t2~Ox38V(Ye*ZsROSbEQfBV+xEaTDxo zrHsFT{vFiueHc9=>sC*d?4JL=7z|-(hLY85AMO^l{R>jW@8*i&k{>y{&qXEQs0=CY zAsCoiVEcOX7IlB|mj?86|}a;cHe=iuM(M3(jT>bk_g^WGQBSzvZj zhApWgo`GGA4lnx)fWI{_4rw}1w-B%2e22$obW$r31|aV!s&|~U`lkQI!}lT9;%SJo z9^sZ=%TFSr7Bjilg=4r|bi>B(%j}2lN8p^L0$7f>41~w&Qq}{OK0@Z|)%u5;B0sJc z-Wpv-R)a{X#eQ@qcNa{|wslGpEwjryFZnIB53~!74ecaPq0>H{$GkTN$!kSzYarSM z7^h7+L6C~?ARcoBx8%f|;-(6%hev3uz5rMx$FxnVmGL1}L^!c`heyhl4LGhEdla#d z8wg0&)nEYpM9*OQ1Ih+m9sGE4I563IEPO{8pkI0{ zIetIH9?R=A-Gsl!bL`^y&-haaz5Z%V)GL3Ub49~OaL*mxJTY=xS@&BWs-eBy{y*w* z{O-^wR#<7txh_*{s1+7=r7F7?52}^_MC0)Rb z_(y1eeKB5BSYOz&dVg7ZTTXdKH_)^Qg&ncP&jGIwVgkcSTligbRd$K`q87Wed6=WI zf!jIQ`3-iP#QhFadk16P>2|&vFhqQPSXv1U23og>VmO*1g<%87F^#dWMI!4V$By*~ zh7kJeluF0qz9Q38$%v#hPD)nMX=f!?VSYrQEluEq%i~y<)$1Vw&TE zPaE|puXh)NTpF`4&)LlhW@-$M9{1CqRjk_I#d2!Gxf8w)pnOIq*dS~?`A^IuuUUjl zRv2hu{PDAh5Rq}u_DMfBTerIrN$k(*gOK2w9}E`e=+{>^Lz_5{GiRHbd@<_ci8&aC z92UAfn*nd`47PB&nV$SXA+1Z`V|Wur2cUkb2x-=>41d&FEGbWl1Ag z^#kNMB*Zj^UJ+h2Z|ZAHq3o@1%g@#C4{jB43uOW27K>*q0w5iSXyl!2}h`%fmf?yOC-K-R#5{&yD zE^vq8YGRC+a`ezhot2wI+TpBvbjIwh6$$T>K7L;4*Zj0uEVo5bU5P;A!>yjC%%~eQ zb({;zr9jJwi)wf}N^Y$>-f~}Jyfw9H*<+H@GZZi6>&ndsg^EO_qeCp!y0hjUa#@sU zK7G{^(sGSA$&SWK4!xgq+&>$o=TO7y-4z(Wu!=f}wr_kUJj(0J%OEP~dlWW{QvgJ* z&uG%o=H*Psrmk&jw4#$tA2O$=AS803vNx3?M?7`fo)7W)gl&A%S>%=#yjSFTZ6{?? zzN9$ylRyKi0;P$_5!PthO>=hcQFOJ$VVcVCnQ56bM1sbIX)@L^XWBBdIudt$0=Y%a zt#6JoXnIkGGNwn5NPeKA!}nf=<(wAng>ua0f(-_bxClri1P`Rtv=S_!>S3Q+@8NMC zf4`otzTX;3Bx?n8op2S}J~)I+SNNbfsMI6klZl4pY-rM(my22&O;#bw%?}%!gP0Yd1$M9pL zscAA_Bj$w7uH*W@YeDF4p|D*2=59~mVR^ZGIfda1UtK8~y)By}6-`;_`uxo(<7d5f zqy!>ww##zztV<-H{K2<^n_W;KfSP7I1Q*#A6wBAjX;%1_E5aAmPI6y*i+S#H94ys` zbx5{e+^j8BwYpVc1rr?EOrQhpq$021A3>nSg8FuMnGrU$)!THd8m`a6<%gvAW<(yq z<55jj@7o{AXt#juW+FF+yZG|9Y_k&yPGM4H?6-lRe%%V2j@@Qsx<<1EmR4an$8%Jrw3KK) zA=XOIF-hV>G2t9)EOEIe>5gtLI`W6P4!Agh&(YFu9{Y8h4~(k--OhOo2%URvYaM~A zPsjX7m!^<@-B|s1c{_c6ZAg0bD`&LWPDKEHlBTrf-)S1nY?wTe~@;{XEJjE0Hf(_$0Kg#9o? zm?(OOU%`uH-)?)|m^iZQ9xHNqtu1^PnzA5nw~ItFt&ybeMtSaNKu#(30=LJ}MZyxE zmgH`yle&BpUjmwMHFAq*;POlex^dxiw9~ock_V0c_mfk0N^yE{LwDmX?im$33JXc) ztUZNE%mHo8rpC5fF*Cp!qk6dGU9D#HnT!ie^x>`ejh&FqkJ%K;qX;Zl^`ssc8VSF8 zK{^$ovMzstyqOl+6z;c4G;p$lqi2OH?$$E!)fE-r1v`UnvR*tna#4Ik)x4XN%hq8U z15BHQmRmK=UxcSq^IU0MhN8qY^PW{Am}K+9Be%U*`{*7DxD7ySS6WAsQ&ueBSwxaV z@&k~BnczS(W_2AbEzUX^9zycf6>=yY3O=ODGbxsO=)$;oJG8s>!ff@(bqE)Xp0u*? zcRW0m_8yomG^`~3W9+!{`%ycrywec0T#T+Jr8=%XgEFmMpP>mBy*bWnQ|5nhp8oCP zhi(=R<+pU3@h$xYi3gKZCY${ctvHvsinWRQ$fKHoyp;6 z6{YHSpnWQh<-~fZS^)L8U`CZnTWq1$mG*G+oZ9QE(hBG3dUkdGO6g-|Rf^7!i{@5i9Kq%;zH0z-KTmLlN5O=&3o!(RCFj zpGQg0fC>jveHN_ND+eoUJFinHgVipGxsUcrfxqA^Hd#`uLli2HxBE-Tm>5w?;2%_(|o+P2kHcwvh3bq`w|lbNA?mkWEZM zMPQC*ro6Twq@r*?1ic7+Ke6wSI}@TZRUY+j)8yOwH__v)KrY{4=as!|*}Jj3&v^&R z7YAr8H1T}&czs@^bb8_PoG8XCq~B-DbxV=`2Y46kd;NUjWT#(y=cQ{#0wp+_YW2aH z9RaF8;ac4)sjWd7W@(hmF<7eS^H0!1Oh&@(XtTaaW@cWe-O1_u9sl9+Vuz0l%;s)^7_(~xhHM%Z&)GPA%L9-#0 zF!$1sBoL>H&9h=AShPpHYC=_aG7%HEO|Ru~?j9dHc8WZB{Ft*%E~~pcOUK?r8F6hc zX{5KO=mnovZrSA0w0V7D_W~r))h#1ODJA5^O~Zj zlb!NZIJLrT^@Pc@Ou6b$vI$@;w_vEu1!F%QMm{cmXXl8nW+z*i`#GjY@mhOu7D33( z=&&|xFZC{(TfXxh%NL?=bP%&B!i0q&o8(!Q5J1JZDRR z_{PPA2y2jb3Ny;L;H186&YaRj!Ccci7>lsDWC4@h;Fzhz_HbFFsYzp>V`=?K{`_7zbnH6b&^UqiaNfuz6eZFA?VIq>VYL56Ia96;TY; zHz9!|=UaCYEzW0>a-CWe=?qdT2@OVPe#0$W#_s-wo!uQy%u#)X4mJGaOYlAmKC$OE zB{8N!TsWGU+jEH3xpyRI$A+C{1{aUph|?(#%Ew3&={8ynw9)AWNhZ%Fzk3h_!#%Zb z6J-3?_F>jENp5Z}xTxg`CKf@zf)-Di5QJ+fsV@<0k}wd~I-wO%W^CNhHlZ$o-w{s; zvJc6TklMelJ6scO&Y1iNpk<@V9%YJ1GsO;@4o3!8U})NLug2V_(!wNHx3p%^8Y!e% zD|Zq>9Wl8z@pkvAK{cRej#MkOTWEK@SsWyfX&%!__?I=56U+NHDAy$kg~b2D~kzY zVAV2FuaAO+gx+QL6B7Q3JP1kbYjT{nfdqVGoKWuS#{2X{5JaNKH_Z+1YzYrBP%Jd~ zk*ZHa%_@+0vx7rFJ7bX~c)qj|&u_7|h2&4YZH0|dROo?c3fbR=Lt2rAT0+~tbwd_V z6f>nQX*#)-nAF@-o~D(yJkglLDBQe+r!>ohz@G>OK-(8o3lc(y&}dwtdE&={gh&1m zFMH~Fpy+qO^AqEg^-G6lKjT6hn`i6l=zLM*+N}wxjp)_YjvIsm4WImIf1(QEjDSVQ)2ui)6c%{#m^K126X!p z`^?Z`#lx%VBs;DrPf6s@1w^2W-_IQ3YC5<#40TiHFV1*32wvNI`SDYY%!=HC=DqgP zm(!(z#4gTJfw)v>t7hBEskt??zogwanwJ9I$TXWp*!Fazpe(V%q8kp8#Qk1Ss`%;z z0u7^KZk!whdi@%Fl?sxr-;b8S<0m88( zEYpn9lKtld->@S4simhSaO+&dAD=J2)fO>gJrNYQObqodrtMt2W5n zbnsw_jm`QkyZ})XCn0Ra)L|TyhTPGJ(}RXMf9}o#n@;`1mr{;-3#6mup2YnDHfK>! zh*dibt=c#kecNvObx!<9clxBwAShmjI^b)FMvE@?b0&{?|7p9CgQ{ap_9o@-Z6a{1 zL(p21N}cK;(<=@?_?hYJHpzA^mxG`~AI3JA@WR5-YPxoDyr-#eO-djP?}S6tjp2s^0xnUC#8{0>bo| zXcvnl>Gm`*re^02ffcrs-5mUnb42Ec-&#czci(&Jc{4;q&tk=K1w&I!5|`hXDwXa- zpC7RbN%C1IeGXRdb|LZdrsKLi^3E2GD1Q&?!$-m2R^KiTkct1GMOs>{h}BL{VV(=S zm8If7W?3w|d3ipweFwuycxi9IEP-%4fS`G@UUg7law0B03PT474du2hD#<&l?R6ek zd^@Bzg+Dhrb*V?Y729a0k!BT#^Cj;bE84bP@akv~o=xmOy+`Td+pJ7+^OFAjW*=H8 zchF9zT{D0Myf|ub)eCpjxf&qPj64fPFJ4|ME+g_%lzaF*bLH=idHS9j{nj~jLMN|Z zk3B!2J#Lhn%UB-{ejDqWItEv zO5?y8ds=)W`ISvw@7J$phbgj4%My(PtrIQE$&3&~Z zVTe6oim(6j7YW|0tQ;pYh>`{L1Pk9iKYbN0MpHxl>y8?K>PrkTkjGCF3 zDb<=b#UK3XX~M~kYztxS@$)^SeQEG5%UStMxuN}9h&g;b@ciqsILHRfszvtHC#-pP zwl6Fw96~svM{))Olcp1deyQD4v$`a9jr}2vcd5O;F(S961O=B1`Mq3{|8>-NH zi9K&{>YA)v#^SXRBx8srf{-|s3J?izf(bJ`6m!8?0N z#srCj%kKH@altDyU~hDXrNm_9z8ISz?{00fF2|NK!w7p%>}1JJPFi z3F@{uTj?pHKA2%L8#>GQd}x*;ymks(ZTHi2PY5Ku^hXwtMU$`JCW3 zYye*xH3+WBgw-Ri&VZ}?7I$q!Wi#|Cq=M;tt-~YQnyH@o{S>ULHcK4$veYCr@#mZD z0OQM(VBAjq422WvPrcTneYBah-prqPt@GW`XDO(&9+940VzlH zgfbq8>!BCW7Xg_+WLhYidpe3_1*c8*i-RFBR%7-`>-!LfE?W*@S{Q3eX)Xuq&zsmls`F_sTCRVg1V%>68Yegnr=rscZ-5rfV8h&%i zFm6~8@uP#hBz4_DF@L%(Nlj+*RoqY{E1Zfu9wgo=f5}Q_?1Sm9TK0L^-ZpC=^5#kY zqT}n4=Iq9fA@(}C0TfoCEmUz`-Ei+bsPZ20adELmH*}Iv2sWjM*_lQ#ZL5Ae@Z(8M z=OHhI7Nfe2Ob4f9n06By9N&{Y0|L@j#T-HC8^fBY*(rz;F70Zvam(0W+QQ)JD&x$F zxg6#T;E3XpMXIUg_1W}hidp74{J0DthWLvZ0au*w_fQ~G#t}jJeOL5;d_*RzF9|o`)w0> zhLog8L1a4Rnt|g|x;Xk@{{JbcWevR}03n;UV$OV#8=zPHkI>rk+a|aRPe=hF zzW-_aH{t%1yZ`AN|Mx+6gFYHg5>#~c)Ec>nSifdKCQF9F4g>#V!TJ4#(>EJdh}Cc% zFz=;%N2apW-}gDJWJt-npDJ_5XEIK5bb>ba-PW=$|Mq^A;g;5_z(DZTauUuutZbL2{eBqSK&%~Sfj+(&um-5 z%sPY8cB8ju&FXVZuT91A)YY6Ksies+hdC!je2NP2`o^8qCivMj_(M_Vse@TAzAXGm zG&6hs-}iB-9~j3RNGZW`_TOywI#t0AaAr7l+jPEuhoGEQk+z#eJ&F{150D_+136Iw z1YEYIeHx%pgVn#A|1nf6bgfv-NRzB-)BRgGdY(32t(;4P*f!x{7A z9$|fUHG`~*9^DH=bJ+pl;Al`jPNg`%tF$*^2lP|VXmeE6C~lK zh=F4imho_NJue`>wUd)%;s71)hubNhqZ6Ag37fCBT`A?h}d%qI=vQp6IAR&7l-&E5Ys8mX{oiSIf{CR(XDjt!wOu$FUA7&_LRT46N;Y_Ox+xj`ZC}pPG!h;0489_?T$ju2~ig)o5i<`CLigVxN495Wu zvP(8Wt(P1gu@svKOiS&%l!z}8O{^g7WON7^xw0!t^ih}^tpM@Ydi!Bq2yVHcIGOB0 zIvq+{TFyX4m)d-qPHKMYQLq1dqaD{xt8;*OnK-L9=;CKfUr9{td+lrxW{&QPU(1Mi zVn~U)Ey+B?i#r|hqj%S}4#$FUY1Cc$oOEb&7+(!T3hLW1l0_8=t9;J^DA-w=EtSfd z8ixS?N?G%pTSmT7Y5kAzr;07l-4*tv*GhpCyC`1Lo5&#MVW-?2#~=C3u(lA&Qi^#j z0qQ@-QBbtg=j6fgV@vOIdI3(LjR)xNDa;|N4?*H;D|$2OaU%C2BpgWDt76trva(ku z(8jsApr*&V_Qo8&-#&bmt*y=@;^Rhax+}-nZ@l+_7Fz3&u)MGK%={LWE^DCn&ItxG z>M?w5)k+NWfx##dXzZzS_&=1Jl)eXd9B)waHYRcU<(ae=3m)U zFIM&Zese+>(Im@~j%T*D3xhCtj5fYCzWxrK$RYa*F|V}5bptaTf|U*1QW81UxQH2W z3u(Relg5w81>lMDQfNNIIq3DfGjOL9vVHtrHb&?PG%%aPmFXuvxsype>G~OlYQg>P zRbzW4G$Jxbf{A3Iu7S6ObQgw-Ems8U2J(***4bPP+M!5j_Ui9}TyL@&AVS%DLXw82Mjs|g-i_;8qAY=&LO#Z?$$%4m4%SRANHY9l?VCA)v`GF?-0tEH89J%>MTF}&xfIAhBYA-eCs-Dl8B zEmBOE$egx&EvEMwS!0=@K2_;YX~rwAr7j^XA(~BdiSLQ5bi0RP^82gW zDcNp@&X&)k^yDb9P9LCdP_22lk6@j@zV(W zP^H&P&LK>g`k@S`tnEXSb`aFHB{a@afx+!PzG8obsi> zs_TA$i6s$30_od?+|)-DQaD=AoxO+&?s1bx~&X_d4-nOyKLM zN5|*K0sXGYpKVhT>cu%%+6?Fd?ILcPfAPQl@}s&CtM5Q35$TX)xOv8AfB}d!7Z$dO zDCdRoi-Cc&@V2zmm3NHI{)8^GVGttW{^OgUvYHVbHe6`X*nGLR6<=^1M6Dk_9mE?| zFzOXZsF@2tvJQ$j`neM67usH?{t6MGXSTT?rnQ$Ua-L)@rGcSr{Z%&dOP)?mjWW)b zx8n5S#BF@~;XJ7zVfJt7#Jrj1_}@LzdnhcKqUs9{9`BLC8At``97@pT7LCs0f~`1O!xxkpH# zxZW#LeE-wFE4j6(Eoo7Y){EY<8+93oW%a0L7o|o$at9_5PEipT!a2~eW@Ffo8!~s& zC65$&REouqYnFQJt)?zaeT#mROPrCJfJ|gj<2hqN^@N%W6RXYvf+fL7q0s#bPg;UG z8^iK*F0fFud`bgzd+OoZT$x8D*wAvtMZr$^4XTmmwxMv4B1(f&aBxtX#8SVTa;+Cy zQxekz1Z4ggWub#bNaOQY>Bob-5m7DvO*1vn+4gA4vX+|8Nw=978;VX+8w9(dchh+! z`U{)q^49a4pnYa?wB^~NY-BV6!lNs#S`moa{EyEA!0OA}gWGIOFa%R5cTmkCsaS{Z zix3aWlnXi}IR8;^bhH1ALA}BGEl)N%?s|PV=*IO0m81N;cOue2^LBh=uEV&2zu1|A zqvH~W0z^zaQSMRNEaxn~Y8ZF05%ZqAnrKTSTZzFckU;pCn^8Og>_ZrM#B%$btT1Zw1HN~(e-zAI z)A>I}$96j6Om{>|-OZ`K#H_QOu{BZ##OF(oeg;(=33gNm>3Ec=JBYqtEmmAfk(%LZ3%f6&$`W#otj-iz z)!SPksZ&vVuuc(tv!p-wpfQoL1^Xhkh5DXHZK`A(lVZV`{MK!|)8gz6+@4#apK<#MP77`-?86nG_xns;gU-H4tW!O6oI zA2#>vpMT`yC0MwoxIaQUwiFyC}u6&suET@2$vO(Yjn24KlEz*Z=lkVP+} zVo$ILH)pFW1Nq5KGtLyQqXyjiY3#r7rSoUaaS{qiOtoe1xwNOcmF(<&`TP)s6*BYu zzW5%PEeiUwq)P`@CGk^m%a??F(j}JN)JN-$jTU&nO+}Fawj?4~KBz7WO2Gj3lYr85v@y0guzfzfru$4qu zb2J_;i6g1li70CZxZ@zy(qD}aK}+_S?x_gtoGfN~{4 zOF}Dx63(_>iFQ(M)Irg*q`I$WQjh2E{?#+;(N;S_wGpo{44(5j^`17-?s2XF#?uS@ zd{%nQ06i2{PyJ8vErsv+P0^mlyK1YwVhNpoBDN7@M?GbJq|TE}Ar83j1Pg}sBsPY| z7ZasRcfD82oLF?hPSlbls>`_&pe6CzZZ<9ZGY30tF~q~*mE85)gxJgq9-0KLd4pjy z&pTG^qL=C`c5ketuBl%BD%qXQw~}v)3!TE@S&lNEukGq|O+3LF=+U4HkAz74LNCIi ztgRGlylw|SuRP5Vj0Z6iqrfC><6bsTte^({d0qzRY3QxB=;gp+d&11OI_4Qp{54>!G<5+xT2YbpXL@sRYix?jF7(?a$IQ}oDF zTmRxHR}z~jANcsB`+Hc4ek$Drz#Z3!c}^VNmB8=QywX3*Xvn)ucXt743Vhn_GHRI_ z!>(c-uz*y-gPw1Kc9?lFEz5R%xojx9%Sz^I?$NR{YNLb8PZ0oli4!lJtyqi{u}lQ0=<|R(3s{-GKg{a`!RzG3Y8dnpFJk}- z&+6Zx!y0xym(R}scxSW85Q5W6m55V%7*G90ntb7lsI;GPHaE(I2 z=BfY{Kqs4isMf`)Wd;2KO}zk*QN;T~KK;C@r;X;>i~3Io_b9L)QCH;j(VGMaFIaJG zRu$Ffdd#%%(IKBuXbqqqY>-d&F9uSLwU5GzZ-y(M4D@|!XDuW;6cmBBgqaLxFZoQF z>SL1)TDh^fjQS$rf!)I%W_OYMj(?;EO`Ex7E3wh+SWrevLPRlZHf6kXBHB^^gl7YB zD>mg~O{T9dekl`ETk%sqr1eQC8@_76<QBOwbz_^i5ytd z;6(Y#&c`P%fj^&V)$w|AxGY|ES|&gpwwQUy?1vRrQpSiQnnDJs0Ik2}T^W!ps{f$4 zv&V4HU0#g7pJ&YeHimF70qA5Y@-y%*0yols=fOBq7#9l4m<>>Xx!efKa@D52 zY$o_@T$`(v_J%#K?zEQ4rr+X442;`(#W!0lhQJ6!JZo9)?dCYmvsO~mUq~trpe_-* z&Ut7!BYp_W!_(?qrzUMY5=ZtX9AQ}o6{(5rzjbj);U6e^Faugd4Xvj)V4lnjn@QWl zf+`w0$GVRLx8O?``A#nThf{Erzfr=?(ze<&ID-f}Kxn>sfJ--faFG-zY1bM+)%?KM zs?(5KgG&^1lZi+-*{*$f`3ubkJRPzo>xDM?K_GewV{`Mf|FJw9s~^8J8mRjO*ByNE*&LF>C3EZ^>!OW5!3<>MNGDR~YY}=#a^py94FZcK`$Gb-r_SOW+zU!9kP!jEEPoOmPainD zPcR8hrI8~>6*hrZKe!Wlggf?=+PUrL%v{sbRB$5eg@1H`N;nNMQT87!Vu(pIOkqj{kh>PcFTlRn^>7uH{XB%O^eVqL`oHz~)?<@*{rA z+%Fp7%&`btk-{%~>%xZbu6{d9($~f~Z6hsnQbU)l>zio^puNfu+CLs`uwEKqE|?*SjlTi;M6;Nzl^A@a@X9^}y;) z0~}DI5F5$Xb6no_TUs*iuKhv0_@7V9P%+id7esdlA5Gh19>amYvG5}t-9udO@!L)*>T$G|ym*pB=<2>_|6^!hTR65SJ{-_yu))a915Cz@Ew(cX&5=r}RtvO0*r9KUbl_K#ALaC^)yu5CZ_&zfcWk)DSP$4nouk*))(}VK_tn9VWE=s;r#dX7%!scM zO&yQ(z(VJ{R1sV!zMcv3Wm5G&13o`DouI`Oqwx2u|~0W~pANP$J2IS6$>2 zJI|fFh%^BB1&8FghXrY3D8*I|7;lmct?=O`mM}sa>c6e!3z18#v5o^76~UB^YVSMIbualyQL!&c&9fJPT;M=ry#0RZ zw@jAg!`*3Abae-zAoA;09Bcyy>T7B|9XCt&v?lo0UHpsE_uHU}wl66Mr56Eo>>w&cm0VC0^niA>#qgY*^!S^!vVFyvSz&*$c11U!-BZHi1GQ!} z*WZ^qWr{%{HJi573WqfL>(y-tSNTs8V2_BkfO6|Nd_OayYQ{YpIOxTT6cSPHP z#I-K@-L!=$JF47!_HVt&@6S@Nk{K_$s-4V5jpItVQ>pPW_mFk2p}eedz8>{~Cl!?{ zliOiv9i0oiJ-JjWYYc2ScDmu(ny9ZcGL5&xzh0o73Y7c1)umU&k4|fs8qxwSbDmc( z(>6Wrs|Ji(2#)$@d9kqrJTlC})ic1(t{Y9C{u6^_kduHA*vzQ0 zl44b8`=TKTy(7@4jAIToH}oR^;6x>)jV#&K;w{L+uSNb!n}m+iQkXz4#ro|{{keS_ zy4;g`8TWhQ;Lf<4s;bMZ&#$NUFS?ifX?h4P9yTeqwf#KgZNq;ca>NBbnNp>7ZtPqH zSbAbnAj-0j+8S?ws8J71dLdmpl~tpj*+BA3hTi0|M|Fa2xP4Bl=a>3pwY6zqlOKm_ z)n5c;*5>i2>0LVPIBF1mPopy|(vj@Qr%#SdQo&yM{|SQ}{0w6}eW;bts6U)s>X_?9 ziio7?&%!R-1wPa2ybe;krUr?VP7$*_=uu%WJ*%i;fyL(3c2;Ih3K1ORIKnhL)-OSS zHeaym?ob2Z?)dhR=h5O;f!;y$OX$O^v&bMnTntBN(1UVIDGqeUMBYrCPl{k|!ButiCM@Nq>*EXbsQj)cqSp421e3z<_hLTa(}CYrHhX z&@tQB;Dc231sZHoM-^SIDqPb$ejF#OLkLf}S(t=3M_3qq5?I|Iur{KL%rw1ci@)?l zu!ww)8Hi!%BJ9j>PnYvkS2&4<60@eLM)lTOQTL4o@{}mQ7|m3psy?0SO^rL}A)9e_ zOhW|TyKj6Qnt|z{F1N#M!RfzIiR@G)j}p@;WSh`_!9S~-t&e(D97v@lb__^%3OvsP zh}o}OL`y#7(Gn^ikm4b)8j59l_Ge}M0D2}Z)t2;R-P_r>ys}(Wc%80Lgk0yWc^ZeH zuTInp>q?c0NT-vli_S5p)8kzh2&%e3S~^g@#?FX-H{?AWZ437Ef3%?7e^l z@})Adi*N@2Om>Q~YdT!0kZnIq^H|fSeYCVM(e&8s@-W}&n{9#X)U7?Vd)GrI=8^AQ z%gaULP$?pjiYY^5p3lFC)WWQ%t;@u*l^u`H@I?6t+gGxa%JNv#MTj6GWL1vsm-b^1>$xmVMlI(E zF+A6-XSda9b}A=D0JJ0U`@^wDajgF3JTbm^rL|i`6h|`m>je#Is^uw3&A7Dg3Id?^!vqn(#!81^UW&`!l9 zgx@1|dnFnQKkJ96;SOpW0+b1@By*c4#SM-|iB5)>Z4Hl<YpyQzzm#9B^LhBtt?_Ab zRLQGUQuU5qJKiYZaF@P@3CT9n&2Z0({N?I_#6s8<|j z)y*o5YW6=t-|g#>xld8!X`^d0+q2K9kVQl46tt&|BB^*QIChlCeOlXKPdN2KDO9qk zj^(ysCa}h9iyCKn<4&N-UfFg3nGu*X4Whg&xaBJ)Z$0!kT5tAtu7^3rL$50z^6^}9 z2GKX!VLRZIRzxZ z-u4rQEX+p+&u-C`o*wC}73s3?C~0oN8-xeOX6mq1{Zm(^+CM(7I0w?4A2N3Vgh=!= zKP|wl)wWUWH^cx#6&FvD6s zQ{n%Y&>p+cQWt;H6F1hEbc)B=tS3}=l+(T2Y;>8p5fY`Y5K&K(#G(khYLYGBs?>?W zeghbNFOZ%7tiFS@h5vp>7^yf&t=j>Ou@8%0V55K%BHvp7FZRd>Ct^2^hR_GfdT~KlZ+?z0J+MCb)`0bS;@i|TZJn0&g2kp z90R&DF8}iRP=5WF(}=uQhQm;J=aDS~Q0LehRAP3F;!LM1ADD^9fy0%(QX5YtTbNqJ z=$B6iov^WY^j90>%{qM(S1FIg6q=lq>|++KBX#NtBvTQj+S95%L5hz0ld-y_E9jO7 zPk22^2^mVDPk|~SKJ-0*D|h24eqNX;-QBPv5-GN=t&z6Pn(_J zd#}6NB5{6dG}ulEEY2pIF;2Sht(AC@#IM0?1ld?xBCKVQ`;D7+T2k0Ch8>G zUDx5D1v~keLydCv3}}9yG9wFQe-;QFCW1)TdV(8GEppoNm!D}b?QOQh3+5qF?4s$G ztK(gi5_OAs5K7)4V*&-2V<56OKD41IT>UTzS5q?>NUf$}0yFsR zw6^bYS2qZY$cgn!Q&HUYtIMwp^|6$I9MOqdF;W-x|DlevWSraqr0X+>0mEIww!)~4 zQ-}WsNk}HkFR@<;`Nn>=b`q~^XReISHHJNOV}BY|rtKs?G50;ivGOI~eE1O}P@YA5 zj}dhL)Jj#tUO154RLG;YV0aVBNGN@vIF0N!aMfMW_XZlNow^N6S?3{ns<5h8$m};c z477E78*^#<*RXnWV~IT~Jt2-p=}fQ?7E^Jg4uda5RblL2Z}11bcFZB>3vb8}L~AOV zv!hcqqvrBAqd=kCf4xP6TD9Okar#AiqJzm7O@mj0@q@7=uc`h2AI>6!;j6t3%WWkN z^IxWGYStb-p`D9vX;dV@fyNl#zbP8~M$y{1Ewjb8l5cQ-Fjv;_jzAd%!7=9O7D6UO zDZv7_-LQjv)Wpx(gt;F!99|;9(qmaqu2QXSV|G*RW*gbLN@ewPqhx+o!hj|3d0Y4O zDH#E~O;!v(HXM)Y+(Q@hU?eN9W}ao$SJFCP6^R93puVLdML%Jv$Lt(bnJ{)zuoCC% zK`vrHNGW)`&E6lPofi1_y<#8w90IXp{>U=h{1uMoJM2sWCFgtzA%-H!v;C(qUKsrR zLy$7LMI}doi+6~`4|*rDIzlAau8$zu;EKQ3^{arX{#7|sBLj2T$87SHHF2F>C9aMd z-Ps4=Wyfb*kEIAg6PZVgOwE|1?p*Ul}w2grZD_*pCx~ELo z+z}XGlrHN6FF-Yt!dhX*I0dt4|L%VzJ?;V`&h?NAF4p$`HfxSV=*?4WqXS3PH`);F zXZhlIQh?nU4Z+7OKqile*!Y}C&J;LcB+S@7LQ(9!+u-hyj>2$wNQH((i9`@-X0EA8 z7L6a*8=Q9nS~EZ)lgUEm<3}f+BCl=#UFsSw7JNI1ajpx6CGLB3j&%yv<3E1()J1N^ z^~NEAk_muLn{Z7s#{CK>a$oj^I4b5xEsxd*7eg~w35YEoD!$=cdM9kF1hhPFVJv8^0&Ld%5*9NQ>l&#mc2?2p!K$}On^MY(hWmX7zv zKvI~)L^dJ-Znm4*XJk^#z*ybZ!Z!@oOT>wT3Df>3A%RpfS4%H%n4aWnOXA(J*^DO5A*?afTXcie|_G zr9ko)z`dZMYBijKe;$8x04>4VkFs+B?}TEWB0$)XGlDU%4&Qj36%NDh@7N9H>lj<~ z5JBTcLYHkAE-_$WYuVx{z)B?>44|PgB%GokyK(X9>eHypG@~hz=yWDifBxP;5FJ=Q zn?}cyG+zb)g9TVj4Ziv4`(nwq&jT6_;n<()QXn2EZ!+1?4&V=G)sWPTaN~w)W~J$7 zj8>s5jUT`9!>eydf@AyVH;W581_nnkXDWE6s{#7~pY2+4KZMBAS?Aywww)`EGhWFg z3V9=)Kk`^}44#m-kvkQQcj7MNWkjGkT-ah*AN33f$hfii`M2JCjmQ4uF~5veAc5Wy zvA-4bPCq3#4b9jEOTOfwjl3OW`Xxbc@a)>qVB(-++5ciye-DMmZ+3S=<59YXEt_j% zf!;t&9D(SjUSQAzGe2t`X^P7d5edsWe)maUitQwu*rX?c;=X6QK}0($GaCFzubg+g zr#ZWwBgD|jZY?cNw3&F)*PKN3>&OS$FzOfPy9UKesHxS{r~(j@RbnK@!i@My!;msW zmB_7Z9c+<`H|!7e^ZQo4YiEl1+L8*$d~l*UR1|V&f@_(DxkcF7odiMQwN5DUlt1BF zIpcLP7dZF}m9Fe{$6fce@+>XmHn z`1d-MpjcEO)o2xAhS2fjPiw1Z%yKigR5=J#DY2ilDS$(QK-EG&u;l3qAWh_CM8(7S<#J6Gr6A4G^gn0b6F=+rjz5h z#BJ?hOTp)oAp6J@6To{ag6PfEgJK>#unkHq7ce?BbL|zU`TQZ9ZIzz4xLdxHg1kwS3B=fKDJ!9*aHsO?n znloYBRq8I%_|(n416wh{+pdw#I#ud9kv$!umnuogr&n%V`2A$CpAB7OFbbf7V2`Ht z-)cM8h+@6iiVf10iDM zE3HY+)M9AKRWkdT5YuK1-LSHa+vPPx!S!Nm`_-Jq65pcuf9wWef40~Pbo~m@o&5Xh zKX#2M)5jr-f{w}T4!|NW1d@DPLuZ_H#TydOf$bD#Wk=1EZy-49GMUi90)&&cps{+O zUf|~Fku3EXceP8+cwS>-u&l7{;pfQAx!R3TR|uMpulS{nXN+T~XN$Z%6ARr25(PnS zhbCUaQh)bcp+ghygaLp0I+MpVZq^VpgN#5;;8tz_prGyOqMDw{NkyLHaRd)9KF-rc zh!ZrLJpavH#ATE4#{15~2D`QO(F(kAJ}kUY3QxsD&E~V=3e{-#+^!I}m-@II`a)|{ zK!X^t%Eh+PFozy1H~Lqx=j-uxJOM%`3ATLNI<4gl8>N=@V(W@U(ytS>FRhB{x6WtF zk0OX-1ay2#oOCwZJC&LK#zWN5zPv;+sx5epL=nfZ%QKky7s1yV)t81b*D74CT8{+r zqTX$msdyPK6N7IQ_*nfFoBw%|p*O&GQ!dbNm1lEYTa=xssGtM>yewu-FlB4TuE& zDXkLz2@mpQ>zdPwa-`?PItV;XW?7q0Ec{@adC?2ZSjwotv_5!JVnov<)S9juq`2@| z&~%QxTBgsYh!+PGw+p)j&XQ^g(g|IUYv~hKksG>V1LNz*QtfyfFqK+|2KvjWk%sap)ey;qg})BM+9wsnyVx4@fWQD;^lJb|2ejMs)o?+oxL_fIA`?8nf@;!3X4yhqomx&> zB|h-M*kketC+sL@dzLJ#D_kTWK0_&knD`u+gi6|gv%yI7AmX7-qyc#xSkQCY7hRnF zRo@;Ah%D%V2TDmphA>vYF23RqF4p$e6jlcaj2CV?B8`K{jhs+;xon`oqm1-COe*cw z13?4F^_-e;`LCMxpVx_dT-1VqX~gp&x2l#C?sc04*y`ZK%*SA(zs&s7@qYN6NL`=f;SyMLES&_ozDr!!XlkC+v|amiF465l^Se}!t{rv z_2@&L`b_^kR|sf^VLLE``b!qeSO?f5bP2Y=Yu0H!T}smueKd>vOVz#K{BNVb56RHK8((|ih1-2hxH*EBo2TKxgPeZ=+L|qAugG)T)CKSUv%f}K^nXf&FJY^^s=Z0F)UDmL zi*Ux>v*bFr)dLtyP6_~vqti{DVt1o7taOY0n}2Dt(RJUuArb53^TQeNrM|Fyc0;uJ zryVIbeZC-E9=VpF$bvfQ_z2>wkDg~UO;I=Y$QeekhjZB(WB%QxEx=rk8IYeI!dq3Q zYJ3HfjM`w^BxdXOtQOg~uIY1b6#S{@Bn0dM!n`|EKqVii6#i~3$G)itAmvgiMH5oC zNaIMF;h93_yG@xAOIe20#`8{0$kykB@1J8=@=fpTbE02Srh`mb_D7$Jf|ntI;T%N@ z9BuT|a@VW4WuCk}0I;wB!`3mjttYBy0E!2s6G|vd^hhnm)f#})poM)h~3#N&|Ej+Ma3 zoZD*|bcY8KtEF(p#nba}m7K+g63A}btFyt-l6Ie%6~Tx35c$yOIQ<|Mzw{$Y@&KM# zsKpN5H@>TaGGOV-mqm|AfeuIcYxIl^ama1p!a%-Kn>chgQbu6I&zXQw>HWXuZidxt_H zr-H(1;Yeo(V_#NVL65fD((*wN3m5ZbQjNqvO?|9Dl*QBS%Fafm)G3i0nU{Wv$65(< z61H<^BLx^yLk05pX87tvAT2yQTB2iWx9_yW)z)BGkk+51eSfW}+$B#Vrm+r@!X+EO z^uNH!)Q7mugas)MlYff6FUPWjznG-}(uZPy&db_&R0!DxDi?0Atw$nv_Dmo;Z(!h0 zREHuZKz1pV z00000000K5jQDF4$mV3RZ#L^aS6%Hk+ek@rdo%};A(b=}sH_YaPsKNQ^7?CURs7OX zb(mn=?ivbc+2eQ1||cS8qR&6fXcosC$|uS)fTe$ z3r4sqx5R`zArpZfHG8IiE?yh|Y1^C~`hK)Ut1r2&K+I4Uj?XZr-f zR|$TtTwo~oVsQLyCVz%IQ5{#dPwU`n zJ?fgZ9U^CK42xHy@hl?A#JW`jv^e_ddi@xT5N#)^1?c9xwrmwyzRbX&O0T7L0l{`0EUk#FbNBRJw7Fn>AR@)Q9Uang7V|(vP-i=<8Hoy}z4q@)g6Z!`y zYyrZy4!QRxlc1E+$GEB?wSe?~TU;T&FquoCm+@YL0hVOm3dygmUp;AXlA`NTus~b) zr)Bb8P=NQCTO-pAzehk~vwe8Nsi+bbNh;Per>M%_g-aif%C9TcFWQFayu|Y_=TpVG z?JGZPwD(@>g3&C6KM~|oOtqOmR_C4zM8b3(H0*k6HdYdoDf2M;TfW|OGc6je5E)r}5$0C`60L+O zO&}JyMJ>lK49_VLFnh=1{oV{)$7-6Ik|7R)++dGRIFj&18!>lE0IV)~BC#kqzBg6> z;h^Y_ZYvXQwgn4W75FIQ9xe~uU38~O#?~o3WHT#2{-4MS z+#&R3WSy9C`5T(i>bq4fU zOwH`>4=P{4ZlPC|sSAw&n>pWh(B0cb#IR9r#R!A`{tOa(H9T2yM-Q}$h>rtOCi?B> z{&lEgF=8);{{)kSe|ypMCCrAKkHRCjIiEVzoq}jP{3XvQevqKU^0{-`s3dXj;S{Sm z8c-a=@3;EIlka~=Z!-Vz*n3zG>j*m|D{LaQLDb&@0nS!_|Ndk6&upYM3ZvhMktiK! zXn9!MUc>QP#K|VJ<|tO9#hao7gamV8OKV(>*MRs?0gu6&y&TKRQCWJ$mQBr+lk zyJSRLz7&h2a9aWtx~pn8h5c;QRK6q8+kL8 zdHB2R$@k&#OQq2Erei*o>Z7sJ1o$c53vF;OORuPanOhl+oix__oR!P?YS4Z|Hc;s~ z>sAIHC;C#~v;X8s&7eo4j-VR|?I6m9iI4%vsK%*Y)i)41cu5zO*j~w>{6dD-{-mQl zjCcb{S=O4%E)<+Yv*$<)&r0QlQ)Wj{9fk1`X%19~s*5l+-H?CnJd%N-ivO6gZ}a>m zu;`9adfJ9Zi1a8(ACLE!LHRIgV*A@thC@wiY59EQkmJo*6tn4{>B^Pvf}Y^k6yZ_A{c! zm}CQx(9dVXsDFw6e%3T!?s1##p~uP49DkKv(Q~1+@;9yj&#a`U29$8@}I2>Q67M1#a%4qZDDRukJBv=L`#JgLp4spsaGq<^sA$=vvx>9sl-+M`o z%%|Jd6f)G|UJ~LSwK@oU7k}#RRJyzb?O7<9bKTEKt4W4)|K6=91gWpM(X0GqJmY%= z|9;KqDkKvC_NOuuDp#Yl8h!@&$W85PX|JGjfJ3GK1XUnP=Tcm{Yc^fnA}7n@fJ|A$Pkf3G&EvzBz}0 z;TG~x#d};iE6WM$zyf0uBPx}MK@m6pS7NLC9Uk_V87E*MQSl=bK2eWlj_A~b?4Q%# zi8Kx+!t(sz+4BU4k36N(2$t*#+-zGZI?enKKiHRt$0XoB7M=)K0Y`e!qfvU>JlK)Iy`f0RiqrsTL{i@(ydudt|)H)*n=4KJ{P-h zTP_wC!8}G-B>C&p>6_Cq54Kv5=6#)0Z4x7&PxcG~so5z#>9{NT(U-PIFM{#@|ZHDawN{w<>qT)dslD z+tbm_gDA=PfR|=D-v!wrPyU*iq0DpQW%n;PF2+;=v|^P2=_c{xB01)k&_7-wo9ode zu&{TW(WP7;$lO)_bZuzce=IasxDWwZE#4|aPN1iDa%;mpoWE!b(&LX?#A zzH9J@VeZM~m=exN1T!Xr#W-#uVQTA!ui(dQSdU60ih9NN_7BF?>HYzkUM-okoaO6A zy>+ftQ{XVW@L^V{tRWkutkdHyt4aQU8KFHKwKy&I+MV`wbgQyiv|)eA zwTd;E9C|%LolMlo2(tQr3?_T&n^!IbOI3ln%SqyL^9JjUXsb{1^_tS$7@8jFGRUm4 z;&})FbNIv$?TACNh3a?fHg%iO^%CB{PQNBk$GixYJCttebHobnj%Ww1cZbV|*5T7A zJ0s@Nds>X`FgZ0xPehj0Nv#OqyjQ{~AYub+v*pd_Wf`AE-8Dwr5JtI7t)qcwtToA1DRS9RP>F4>IMLH`E z3tEHi9U#Q6v4X>x6|Z2qqHX|*`8&!fIAx@|L?p4u^~k}>Lcz=bop^(rmqQut%@{re z&_LPmh$|F(xZD@z^0*zV^wL0-Fr^iy_-qy)5|d>E-6c=CwJ2GT(~H5rUy5QF;4cUP zbtBs`N_OVb(S=H#He=J2na)a@v~NFy%H@vaOJfrBDAVJL-6s+4-6Z2#c^UvZSwba$ zi+SS701heLPtoVf;_#JziSfD1c}#lBueK=Lf0M#LcS?Eg{$u{1)A3GPSD=>5ay)A* zZOcK_fXON-e}nsQ*X&512PfNFc;PQd9;U<9Wv6(|OQRJ>q2VZS?_BG1&**GDASX9g zGqZij?6KwU|1L#9rbS7U{-cou@T>=MP5*8J;AM+yMCGqwroZiKmSUl`KvS>`yC%Q{ zn-PFfiU0rr019G4>|+2nrE1Ey_;!NgyY-%9iT^H!nSkuPeftluLOxRBptHNm=wcCj zo@>MR^TQj}2P4rpUc`*Gk3eCCOz;7(ixI?{FAx9|t2 zf?;lG?=Sv(cm%Av@J4nNameX=@>PpNsDU=NP3%^d z(*COmy%(Z&f_kxdL$iOCt^A=o(^B}Yv12ZWf7k7YhaNZME#Jk5Y>ITf=gB^kjS*^h zfP3D^0E@;CqMzM?)q$9|UTr-X*;*)EW> z?Ou9zCqW26!6ZEj1?P*P)kJU4DgRFZO;{DMQxxo&@?e0i`sM%D-`e!if5zDKtfabB z9vtPQ#wC#~seMOnNiXwYPSc6iE#g56$Boui;_SvDK- z{FkIR&&_Od?$`CU(??P&@T8imWO3bFZU%e_(ue-Z2Z-sg?^A(C!dpGM6&e(to$uZQ zoZxW9m%fboF_aC{!3logsRrVWBYK9WsHf$&ZoN zco-}p_>t+&a^qTF0S2y_>UmUQ4!EC6hNM*Fyk~2TvG14~BMtKY1YyCe;^1fpN;Rd{ z(oRAb4>)d++P*9M8B07##$tdv$jxxJ&M{?MD+kxJR_F+m$|7!{A>|q&9tsvTk7|eD z!LD!v=N!*@9wX$~pE^qjQyE1_PDf`n}LOi0< zuGnI&$($o=I1ZT7=-u3P*cKS-InI2+f^10&Du(0rQo%1S!1QP`*CfgV20l)mVv1GK zu+y$1WvFC7iBDD~SGv?kAbIrxoDr*63?Z@y$l=m^h@*BDbN*1E2 z*e9QYiwYfOive4cBs#=u) z+o~{0*p@jIKX;M>L$Vk{=SlNQGMX^fuj0xsn!FIbgXfSahbiKmroJzU^{r&1c*}dh zGk7?VthV2(q z)h{OF%MaSf5pSzBYtm+Nwr@XN0!PPu;<8yJenCB==>w+Z7WK`btN>|Pyf6Hr6CevX zT^_q`kwq6O`_V*`ltYi?$t0WjE-}u9K^W}sRzcd<%qSw{8|PLXSI{@$L|5M6!izHY z0+%|4qbKKLyg;zJ@%{S>+CcQU32>wFdZVfpkmRJNAMv_^A97uLMkwCH2sQu`LqQ0M zkK<*r!T0r7xL$J>D-q^Bl!S0}8`V$HyG3*avxgoidHvQxEP9+|k*_As!|Ne5$1cwD z#y8mT+5ZKlcug7?ZCz!X9AG3G727Ta5#MNobLZOM&O0!146ew+s`+$BMcT&@Sg@9H%ClkgC4*(JO_2 zbei0RS$qMIMhAnf>jW28Ou3H#w75bam4Uu8vM#QT-xeO5FR`$nP$d)X1SNS4xZ2gt zhY2VDfVE3czO3J{BE21HE7e9(%#3hASP_!Aq79T27zkQ@x&aun&;~LYOvE z`jkcuUU#V3owbq1GWE6RTbe5Mhx(p~cz#0xE6w<+^>6?3HMHBW4gcTJ$af=mZtf?J zAJo0If~>zP=@F#h@pCVzTnf?jG|68}E`l-`OYyZBO56>6zd?Re5--Tw_r&OKv;{es zBmvO4m&3{>0?jJk(DxeIVub$^A2SL72_7yZA?`bunCbS+Y1L0lB*MSXAYXy#w3*PJ z_fE9f-)3IOh=b6fuhk%d?pU-Qkpp|ey6$>g(TRvle7Xj1{)9(>PrWL1e32t=W}}*5 zKTjL(lEsNkVQ48ov{2I@#`O#ks?l8ax~R!9(23NOsK(y?@_O?9mtfc}h>VtAq~nOr zsc#X82F~M1#9+#L>U8u`un{B}<8mVb7_03xd&LJwtj8wk!kx-A;rw-DiFKL19wMA9 zz=#O!F}us+)_;Qgr@}WWe4Mm`{Kx9BV{Ei|ex7tLTSb}Mi<=@K$1oNymME&>WOw-l zpkY`0ch{&8fHXC{I0B4sY8H19$66nNQL2$n!`E<@C_8O^>}VhvAruiY1^(VkdA{VQ z(IkVUt3@vgH-g4VjKtfO+#<%K7lWuiK_k1OQW(b0^6u6+ z9v&K*L)5+TdY9if53qti4Z`uUsTQ45JK*13ci=`+F&{2Yf!_Z67XS(jud__^VxJe1 zQEwGY3Y)kY8ACl=m;iOaSwPP?HKO9O6{NS|k;3g#vOx(iBX7YKtS;^?WziK7xVAO) zmK`wDvHXCg<75V_T9?4F;=MZurRb)>7(OYw^k z3e9YPaT8~BeOhk;U>&uX>k`@~yn&zK>A25PVG!46u0icmN|JGxy8-c`f3G)xM|oN( z@bft$1aoTRuNr~*t*jFY`oP&#bWfd%=B%%Bjh5t+_NI9CcZ$UYA3*qfz?5d}*(2C0 z1AGFk?pqD)H=k+S$ z1q7MY2GdJ{;V!#e4%>`K-`P}YFy~g+&{1?o&4ORc$J&*WVBv?X4IY2m-0DN?4ZN0W zhbs@I>-XUrq)~b6rn6-uJ`8pjUTL2Tk(rPn=Ns!t4*r(gZ&(PSy(JeomdqUpqdHuudGNuPn8R05 z;6o^zw__b|NU^u{DN=6M?O z{9?2s_rga-XuYQfOXvA$nS$FUPhc0L!fmH=cPWr3sp{=5<)3*AW0z!aZ3C@XDxu8U zZpa}1J8~wQXcfj_e9U+1eS`!FO5GD32u^eERfQ9tGuv-s_3%p6le99%E-?_0pd~WP zoo8xfG(W5p%~q2#>_did!8{)*HKT_#bKW22v-^P_t#@2X;opPOky5#i_V!G2>a7R@ zeU&VnzeOLKevEB#;Bfi)9#`a3Uu++h_A02mcUvdk8qhES-e?5YO9&2JnJ1w1>B8~D zMtvh0cbv0Tk`5+rby|aKY8>*-2LeDGbn-Wld^%&adzE6+GeIPk1 z5sP`k3{N%d8SV92U5bg*IuiuC9NG+SxH8T+-2DT&Pl{7lEXeZwA6m5>U~TdWV>@<5 zrAS6tQAW4hDY}hGNyeU6qoZ)hqo&!()%5xsY2qb6!nI1K7q%H=o1e~lBOSp&FKWp` zy)AF}LWH(AED>$JBkr_ceOv6AYuD3>?o@)Tule(!!L4O+!WAJPVC?gcX)RwvLQdc z_C^?R+H|`i_{8la$(zh z{wR#LIbhMS)&SC|rw}^O;f)tlv`D-u;ST+KXPczP%sW$_!KGsk+cb|3We#MG%eQHC z&LP-TXulSJ_;EiJT-r6R4%_gZ{dD9COLKF@T2BE!0fP#B_0bZCLQ;h)HBmww4a)Sw zGbsu?uwVE$mtN*HoeFC;JZt9?vF!7rI`O+#yliA>4t2Gy!j)t7mfDsfBo=YZa01 zq>A|Ey`KdpG5b6uLwyMBycB%7dRT!$22YOp6Hb@^<;52fOg`ETl}`XGSBp&ZWVZp{ zr1N|;45|+Qbu}gOE8kJZF<+|(2*u1kDlDD_^%Mf!IvrkJ>kACv@rcx<}W{Uuc`x8m&3c%dFg5uox_*eNOqcg zXu(vdLr1TMd9Par^uDzkeiuLum90&3)8U1X*GvdC3i+j%95lE$C`&tUPvzgpj+#0r zaSHj#Jt#NjzXVe}PX0)cMcJzTPl>^*9Or%V!zO`>Nzl9GQPsvQix@n-ibZafSX@U-M^UX4S`b=E(=CSTpVJ2eH77bma!NBhVP=6l z&u8uEJGKDXH%-8;E$JiIAvq=nh12i{J3!vRlI$qhqhzHZ#cpLVWFcxL30!?557aNB zH+-oq#ChQ=tzW}>lE4!3vtaMEMF0Q*000000001LhIeF4OIXja000000000000000 z00000000000000000000000000000000000000000002DNi4Mzy)^h1SJThJ{;bBQOo3-`xm)FtpWH%bH{+neztnzu{`{YWRSf~Njmj|@0eJ`; zZ|bJP!+x}B;(yNOlPnm8WJfs5f}j8Z05*fx`+0-AZbf#ug>FqAu7N*{Y_`#Fm&cKsDrKhCQK4Nhw5Q_0RZuoR+z7B zjiaE7P7=mQAWO>hhNCi=k8(xnNps_VMRFYyDPKWP2jI&-d}3zMf-tUT!%}fSte(~K zTZ&F2(ol_fO+7WMeVu@tA8|cB3k>ynnlv(0xpF|3$+WBxk7gMI z{x%`T0dg82UVWl#`Nj+Qyo5!Tz5CKiO@VBln@ipB&M-x|*J9^Im=owwmKHie->|?F zfmS7I%sHQ)Mi3s#6XPJ@jqeqOA>OVV=zKRz$yiuh(^PUJLsyC&8wW{p+FCPbQgQ?* z0CiGiy?J~G5Jr+u%fT>H2IH7=7?ygLssaC$DKNWV_YMyCud}+?*+B&=Z95ZJAI=0@ z60||e5#D-wW;^#3K;;JYwd&3~#6zCkqHc2<&kHF}gAi<$*ij@I^w^)BmCmQu5 zX=}RIEwNf4`eP7mx%?J(1b!;Tcr6j9VZ+z#DAl8QA7HP^5NcuTmbqe6VlJxKBwV!P za+1~qh>KBK6N%KI7)S_gN(V7`yGk&Mqgi?KstC%yY0=?NDgTZLW}_xb9a%I}IDDqb z#B+gtlMG>~I0xJ!1?=-xu-cIn?gF5zEBNJD;A{L_jR)1L5UPUphFtFdF^`XR{L#D} zET|N+%<+79Nst1m*1i@jjcs?AmT1$>X;&|OfGP3E=shu&JVf{)Q;9^@LNXiSu%-tb zFlI$sBq#s?Bnc3j5)=(IKC}P;1~w@Q6cpjGxQtOLhoq5=RYLru5S4B>0>Z4OzrgtgZ>tk5Sl`I$VAq6l;qziWBEl20ovdL;ONJq%p+_%mcJ@nN-; z*Cc7%;JtH>&oCYf=NkqKi)`NmlBfb1dzfv)lf{WvY6OU97406nklJiC$9;l=V(WT= zwsPrT zX;hPo_?<4lMe7XGwt*%TyJKjdMKVB&!IPHJWWKK};*2`VVHZJ8z>SYV>faqmo_d04 z$M!;>zO~|O0zrze7&jF8TySk;i*ZehnX(z_u6^#OPCtVPtd+p86}h2-7|pbBYzMqk z+kqhnCuOB6udt@(gYRJnka_dLXm(G~HB!E&=gyJ+ULiZtY+LZ(#e0NW`y!lnNI}!! zZ6R-IBr16(25biq4{mU>etYy23=(RkI+dn&D|&-VIoex}WbF}E!@z;IRCK(z5Y< zc*5#PNlPQz&V(&~hRJS6u1~8A7U=Y3lSnouK@N{_l_&|&KYYzp-#c=etlrMr+3*jn z+LSoLb=M$uWMdMqployk#+2vT#=Y_I>EC8MK{DT-P6W7+vlABk&j!6lTOsI6zyJUN z##>Hw3>8mqut2cx!ksQ~$7DL2& z#oWOGW_&NP1q`n-nwn-aTq}UUq`jAq+}sz9NW}tFh@p`|q^o58JLc!pqu>n}UR^20UXDBCBdy0y4@$mre(5{f9fqHw{uN@nkf1acVvDvVWahy@%qn$qfu}Lryfo1jKR;a5|Xx!8sfg&u9&mrkI%Of bwnov3{}{jk00tsp0^OJt=7vB300000s~I1> literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/entitlementreviews/reviewpageaccess.webp b/static/images/auditor/10.8/access/reviews/entitlementreviews/reviewpageaccess.webp new file mode 100644 index 0000000000000000000000000000000000000000..d37118c8b38e553105d6f00388225a0a24a16ee0 GIT binary patch literal 37992 zcmb@tW0YlGwk;aAZQHgp!;z6;+qP}nwli!y!?rT)44ZquuY6A3sygT1_SUc2#%^n3 zppQQLYFkNKLc$;g1Vmk2OhHY7heYL%@f0Ai%M z-G{{Mu&E>+q(Ais^kXeBoBG#IHW2hZ{IhTSpzMR7S_}c*0 z-<5&nhsbXyufjmUJn^0IhyVBs4qzPc4zzEVy!U^|2lP|`9|6}N6hLp_!29ggBaj#v zUJnfvRzL;{I)2Im4n8NJ;CI@5{G9-=@BE)Ti~6H}-XGA<@wa`q{v+=S{>l6F3&2uf z3qW|O?oi)enDcY>tUc`PNegVz_>pm-qVMTB>N%Pm!@u(W-wFA7N#qvp6EaRQHQ+ z<<}>Hgfhy;)8gHuZ){*UICh-?=KnN>0oq^JWTVED$LY53Z*Jb?4gzEEH!K7;Ro9qojBH9{z zhZ^Oy95oFxa)sd-VC7CKkqe7lW`tXQ1)`96MePYkXXY2=Kn(Jt(PeeFjklc>E8_L; zp7&{)#nFq3&ioP|qBMmO)!gZ-HW|Le|BV0_-bK{7=K;-I-VotwF&Ff)BQg-dt!})# z7h6|=nsBhvE&NM3WK<&z+}_h3PKfgA659=^1GWdZ$EM;x`Sb72_-g=^i%1!pR@Y)< z=*GenY%l1=1QF){aQ@=L|0+&a)&2z)t$OA)`74wpOPZxKCBb7`vEPppE8tU8>SS}J z$r7;XY4y_ilEg`v)RcOdTq&YNbgE0ebk3zQ0y;Eh9y*qiXhEGCQ_q|$DU`sDOz9U+ zl%z@^CnnVYm@HB1zfPko!Rr#NX!e)MR0n}Vp-EE7icsP$QfH~d;R;^_;Kbg;M%{b& z(|Ehkfp@p9MgKCR{>cOID$7Cc=iXj}tZAH_pusO?dh3=p;DKK@cncBL5;LTV%APew zQ?%uO4HFC8Z7W;Sk66ecR28>VaLG*bA?&YyQEI@ z+2}$YWKKy1%7Y6+?(&d=&?h|jV7}At{udM4^1$K0F7ughB-MDy`G9``0c2{qA*vq* zC0~I53K`6)qE<>O+KV`w{R=EP$F;`IH=``F4C_xg3v&W%=`p(GWa(BYG<-QCofK%4 zTM}d)+89#8$zvXmOBVs|C+9m-$@(RDa-C%OGI)FtovHu&1EUL?S#qcl`ZWP7V+{s&^^uMVP<8g0O3 z^nt1@@ynkP?@!T{Ke&eT*pNWnM8axDcpy>O==LH%9wVz${!Xv(;w#YDk2s&`8ps>& z$nd0mOpSxL*`h_#nH_}I$gyR8VLzm7Q_#wbN%|KEU5DBnURj=TrdlJGT9U%&#KQ$` zqD{Z#wPezTiz-lnui~J4b!u|lgP9I0Y@Luf zzMjc~P1`UFJqNzukieymh6bZ%@{i=?Hp%<>Ylt1BN372tt3>o|GzF|*HcgzesRf(B z#lA}HgtR8DYDDDf;WaYj`>Qu+Uvp|*=FeEuEJ}A!+Yu+o7fpPOrWz;(b$^KUeur5r zB)6`YIE~j4l8ffyHBWXL%`#$7YX)$(d@R6%5Yly+Lk5e83?U^_G*<~jB3$H3O08oU z#-9@#pb2uR^3CVhfANzmj5LJ{vAlWpGh+-p2KF1(B)+hCzW8fVp>RI$Nq;wu!#?) ze&Rs0s(yZYaQ%-@3uR(U6*ZtHPw(=A65eLJ|@lsO3Sa-AClje;0&~w!oeI;e_Tk# z%xy@)9V?L%2woPzeAZ1PBVuX;BVJfsKG^($+Xw-K43l*&-lRq_EeJqy zHKO`1I7zOYQKMUkbUUGcrFpsW$27nl>BlOc(v6pY&|pbF+K`Blha_gF+!=mdY`pVw zL>O)MooHJGC$a436ZeWUnuqig#*i^}<}*gjtV)6Gqm6vNT}RyBTz0G^QGzlGF7(SK z4g{5bbe@LN!g&j98A=MCLOI`#XKB=;pXi?hhnQUh>Ao<=tP^=LAZqLHC&zB*jYQfG z7-iyX(QwWbiSe`y_XwRteg1rj?*};97~| zC;l-YK`&98N=*JZ7ws{35rR0Gf|FPXOtp$Vp|I0{@)H9s8P0-wN3`BGYe(r zE4?+)ACi;UKX@-K46%l+MN2_{p2$t{eBpXib|3>91ulZW{V6L*ms#Vat@lpCJ@%8LpvF3vQqht*7- zgYcvpwRZ8>fc>W&Oq`lH%L{}^Ib#6LP2LHC^%>sB#GwH5;@w~_{ z5O4N_z%3c9rVARAP9R6T^7BoPs|jDHf5`24#QlW)R~L~#Z&#~>_Sk1t9z+eJIRlY+l~RlDkwI)#*~i@R z)89SYPtuK{t^9gU7)6A$-{#%AhwBjp`k~J-0gD**U}RPKtp z1pIe0@?W8|w@kkSb2iBBy#I2WtxMhb3;4(qVFu>BT~`MimDp$x{G`D~PWWbVV2?86 zQj-D=)m{o`Jb5uk1RXpvxbd!y4`O^^!wr`Z)M)?O3;sWu>SbRP-e3t+*?2wUN8#Me ztxY)sUGy{`(7~B)+|-xLU)H-!XJc`~bZga|VDzQXBBpFa5O@rm zKVbud2$^P&T8cj0*zkOu8K2gbA+1!8zS+(!Cj{T*XFr`81e>ZhA=+t><-dhcJXLJY z)}q#wU_$+B=fAeJGnxm8H-IUnQfDJxzM}Pzs3USd26BXbI^)ssJr*tkXP!#Tgq}V+ z6SPJhk0vrFsz{xB*pFpOaj_KX z=js(3))-JlF*)=3OGURQ1zV((4&5C}=6=uW1~;B7L=#n-PuH|bUm1uknSYatTLh0n zbHl8jCYgOvOA!TpGe087_y?*$tfev2ZtXG~GQ^a3s4S%iad|B$noD z_%N_Hu{1wAQ?R7EAo}a#%re2!+y)PQIQZ*$ny+3ecz-Nb29b2X!C75qJK(~Iq@U3w zs76sfOysLZ9l88?QG#($^ux$jrn!>uPm0WQU?O-Iepk*OF#m}~GgXE4G~(JI0JeDC zsSd^F1YibqZ6Vu{483LBVfxn$@Gk{m_Ds#&=U~1uj0bvvJ25lD2AR;Nw#4FC`>NS7s3U|;`f;) zcmKqlhr@w?BP9KS-&V}TxZI}VWb!p;e}yeC@I8IYo?5^0%7sZo)?EJrAM*j;MMb@I# z^j1Y!vN^ixBrX7W>oP!XB=5cu-4dnuaGQg1lN<&HNt0;t#Z<|}>>ojCBMedx$7xU+ z8r^3$gc~1Q-E{;D?;@(p!O1rWE)RYKb>Ylkv2yr@#SnElXzw(nn6}UBKBMlR_}qaI zrPfpR@l@*u6#bj@`OmTWhgM3*RWgQlcurl5G%&En!w(&1hpugP9`0y;g z^B^48ef@(-(sAnP!#LIxO}D&-bdYA!EE0qV{YOpq9~;Yg(Lo-&WG`{IYHZ9)8+>4u zG;Z=`Y;7~V#`DB@@ZD%({SUEU-gNyFkKCCp7Y836v32? z6#7`0t?|egmp=p0KbHRw8Zt?9a%-Eqvw{ZZwu|a%s?(gG4Lf*CLlfV)V|(7eR;K=i z04)Ln08XNS{PB=)Xo}a0WtOdBTM5hB$rLV3t`s#`>DsQNbS4?`_0(H`*$>odmdkM_ z+!5B9-8pXo)8i*%W(cZDQs!u92m47T187Zy@o0CQ6L^K+&W*XHI133vY?O3<%0XhD!uo;#jA0 zGyjOHJuIF7W`Le?4n`&w+(4D9qT~26_xj|&lzv-2(qq3LDS9woAI%CTnhh1>I9#++ zuI8Zb18knkbg!dPAH34>-8?yhFG++TffwVMY-*q^FBs2mJiL*BQeQi0Q>@CJI5oo} ztR~YYBzdFaV5MgV&qR#)d9!;|;Qq66ekK9`LzwAWFkL5AIR9vB<30tE5_r-T*rV$r zPOv}Gj+)zKOuC^3Z4)z2>%L8HL4f5dgq#yqw*4n}n$CR(|JmY^dBWCri=D<}-cV{n z28){*o;?L&kl38>aagifLYDk|CVFdUmxGYJlkO{clup3%`4z;JaD24N)*%rnnHj?#zA%s zpY8IYlalRK8f`f4!}CC(LI*R&jJNx45G30g#N)eDp1zRy zQpahg<4eHYzI}>9gc^r9u|Rmc0E!^9KKkG^Ib-EyrDV69=@z60$xcy5W|l|vvoHe_ zTzQKDld{%v;5vg6#dpUQe*aG^v>}iBI>`a}Jq%bZ@BJBaA>HjYdnJ~ENVv*;8xp?O zfa#vpH_PSi5RQ8xOyG3wC8w3Z5#Znq;X6Tme<^5@iqJ&8XnX#b&yYyP@Q+*9X0ovD zZKLRkVhPmFDYSdhBU|eep3>xa{YPkLhy@eIhmwXW8K~1x0msr#y2!h2Pw^errKC!x z@_?QcS32HxvU@=Kp(f&w*TyHdD&nz|%cUtFlRbg!Tm?1NNV89gUtbNHAnUU|! z97F=o*bn}lLw?Fq2n3{7n2#UmxF{bAve(9feGLDRZv;9uJK-+V4e7WppFX{lSc6+% zGnZec2oQ|t5NNZF50V1w>F=kBX*H{=+7d!>m93oeSZBWrq4ES9z!?Uc=R;Taa7+`Ec8hEZ@ zDP#iP7lkbFW?T0MM;n6F$*tLyQ6wpmwn)1VU7E_7AgC&2C>mif3Lg-|M9lft-l2rgo?Mchi|yNgMNIs-l#SE;2X8z#v+!j?Ox+! z$nL_Q>z5EguyG6H^S>06?~Ec{G))qSTVy&8s1J zox;fOR*3s)A_fP23i&K2u8WzVVX=*wy?BD(z3@z4B*+v0wFI#P0=TN4>Sk~$V8h4d zKbs<9(9e~1>L&j zfv^>W&8hG!uu(Ag+b>LARK=1=F#S6^AZj$T!v|x(*D0J?hDri%7gPhQ zAL*D`m#oEXwLKHHM@bjbKtiEFmrbVrS0bCksB|oC){8TcX0Ro(KfWUl_Q=GJs|hdw0*dTCyiXI581t&-M%^CoApjhMsFv z!1}Cm(|HoC55;ELEc36gtbHTt>^tiFB7M1lj}XJvrV+>_c+~(E>?&yowg(b!B@FdDbZydfCpq!fg?9x=`A zJVSSs;j5r#?hNDNqB422^84jX$qSah6(7}4grmh9_4ZbjswjN{%$IMOFK{Xk^7%UtxAFY} zsyXeaEhQWRtB``f+NG?ag!=~%tp~-sc*mj4qcUD4RHN0N>?&?b%=+w*@L)j6J5^n4 zE2e$3(nAHF<8?*}#G>gsqm1%7WMsY(9D9*f1ssxbW{KYJ=k8N7;qMyhy_lBpV@6tJ zt2E2namaeq2SaQPmKNLl1Y|qbcfK-~tSGD) zbOXNEl69xpp;RT$P7z4;H;>KQYKeLJhWmQWEqre%32HR@iHabWQHsJJQ)xpCc^tWt z0Zr{!p7q~cTt5&5$yRX*YYILKnV*v@8g{(+p0B>%*5{azoDY0caolN48sc!uvmG;4 zy4G2IrXD*0_W^NjwRairGuJLN)w={tn7jCha3R#jDS?Ir(e$^#Rw-2wU_Ap5^Jeayd`r+L?S2Qg&Y6U88LpRQt^|&axY@*l3Pp> zZ2-@yGxw3b7o~L*!Z|3||1nTTBiR1+msoc18`b@hv?r5+FLYesYt{;hM@-DPD30}~ zcrZ$*Eu=CQs-n#rv)P+JRaUEMb{ddv-7U8$;~2bKW|D+>Zs;Qss#DEFZp<)-sx`JT znFJ>w&3o+VNB*;er_STh`~A!B(hz2WpEASgv1zy}6xz$a21+Z0;Dr)wx4uNl9HQ`@ zSZDFM=}eHF<#dGN5W1ZEwR@{B)-7yAZruUQ7=XA4P2?LGO#6ht9`{RRW*CQ@Qjz9=^5H)-Re1MKzI=mg(&cd%7V zV|w~mid>@P5+K%0%}st`AaIO7NL-WO&;*5|(#Ziq6Ku#3vAHS*L9qnnV^nCl!UUSu zLX<$u+GT<>&{g38bw3_1one~Kpn-^f$J5ICS_l%dU&g% z%DI=+pGc3&hpUi74}`8^fQ(Vu)+>U5V2WDA8?C6?x`#(xuIfN_wr2^LH@$^;d}QXK zUJ@@>{fP^Lz{8nUeUh1~v|H3r7{=aZ%b|gQfMS5)Qm~{D zKVX<14g|E@qxiyguiE?hP~d{nd{(8@ZuCZ=5?uE1+)LWxA%~*F%i^XqtTW3#@5z>J zl5(Ncss)W12F2Qvy|LJg%i&qH-lXp_9~bOa<2u{ZFU_P3)M$>=AtxBLMT=Zy)X?7p z{x}MqXK_eH8~ zP&my*5z|-sB4gd(z(uomNdCA0UZJ6YbcSflKV)gwtY<7Pg?rf%<~@UKov`Yb6LSEm zVDk4?bCRh(4cSU9aX^sL_CtwK593&Zlic*Q0IAX*uJWgU1mP`-L$?uWew{1N3=ckn zyyzuO>Jcy+B+o~xSlZOab~o*C^<;=fN$o~QsETazT4kDIrC9(+NzOBhLV}qdz7{oCB01sn+vnv45^*=2B^S$m%4IN4EwucJsnYe zu5W_&CbnOej#{&2R}arbS;>ZE?w);#hC#_c5~H?2-`?Cn_|4tn=ga=~_pd)P z^?UAG+2ya2wFe}VsYx#Q?v#n+k4gI4K}a%-ox*JEg*k9o%gmwUAKG^FXRqE}bM&H; z@V=XIMg-PPCS*|zm_B0NiH$2hHA}=HD1x%Le2H$uCU9i_I`!g&q17r)s%>Ep?-dB2 z)2mN{ZP$@s?vGIXa;aAG(KlDDTPBl&7#VS3QF{2%ImjM6KXfXY;Eg?BLe(Y+t`oYj zw*|xTk)kfXlT~T9Mg&%ZDSkqkOtYx(-7F8$VKK@3MR(Is`RDdLXB%5}&(w zv}4oOH=hv@8SEV`pu*&kyVWf@f3sjgDsFF|Glx`H1bw6DyX^i};~08n_&DoK95jy% zm0io)P`8WKj*V~cQHpCW=-!$10SzX3S+4W7Bt1mT!2}oWTn3YU0J{8J6bIW@avgpfZy~@twfr0}EtF8coe)lkBdMudi7v#(1V%wjHq`NoR zQ$iVovm7o%a2xe>CDy_T7mPp<6-<@}ZY{rwuuNV-{a(o_IR<_rz|ALL8A%(Bxa1*U zlHvu+H}EEOPv7?-B4kM>TUq9bq|Vd!XQN1xcIG{l3U)i=oQjZl&w+0)6n$}34Ujgb z>hqoIg`h;eRGg;ihMz%+STo&*CW*TWR$QT{Z$DmzkmKPVxMKQ7J(8k-ZFpWagKvHg zbK|Op!CvrQwXYeva8Y?!rRrBI$J}KXLSd|S}#8k%|I?)>wCp!>!<2N$Y zdYjUDo_yE0B2D|<#uFLDlI=kIOkske_`u#G-2_nmTAR|^Nnsg4_5(w(YG2#$=%D>< z-^xS)gOsFh_gyH-y{wq@keLWuBFqO`wNOKtC4;)~jNC09pE?9f__tCO=+%;Q0K`ql zF1$wdx-2!GiX1t0t5}l|wVP@H>2xkM%#p(Fiyk~uPz7i?$1UuG8$J&6V*fq*bOQQK zWa*VIBjj|{nMUK?G7=kqpqv>h?(KL3=qPjMUH$Q9T_UK|8&x{|ToUmw=QC)#<)-Fw zl@v9L^)HOa-}>nD=T)6*$#5Awz{{uu{shT?d*I!|%Uiae2@%UvKMJ+mvf239vmAJr z7L&+e`c=!nFx}A9OzDrr<|?qRrls+1(M;z`*qpPQD`xY>tS_0(6mz-aHdRdP$Y}Jg zaw9=`;>=8U%dFo4;@ikK5)>eqQ189>zA-sWFAoaY`_Puo;C8l4PG5&|bPRE;!@Ty~ zl%?~So$nEI_hKxZApFuHKYkv}(%H-Y5#qD`qAZ)k?&=Vqy#r_Ie9bSqc7Bqb`@ylc zVcooHS-YsKJiNRQ0hesun#fQa+F-AXMF(k$c~-9@cFK86*nD@P}>kIqb70!Up>D z;(J=r^C(2x+Nt6<36?;tgqN~*Iu0jsSsZSuawdIq5gQO^jKUI$DYR1p0q*5N>@O+; zhp`xOHyj>$->VTa4q@O=!wB!e2HKviy5wxObEIpAAaABom)Mq1UPN{<#hhROJws2K z-JPH8Z=2FGR$PHs&nuHNKFXsdE*@L0ZCmO+Wp%A%K^h&Mc^@!_G3+vJ1*S&%IFmKfw7C3 zgHHK@$uh5GjHYO417GSB^rx?*anXZ#QK0d~W_wEuD9QV49E6sByd8g; z^s8=L9GTXykPv`jC}W$7v8S)NsI_%;IR5Bb-^d$I-H^Js0W^E%YX_~8JE$s^;qvw|R+t(glv zk)~-_dDQM-?+gE&6AVNtXc~6TmwtH<&PhIkrb#wcVQH=YlFuIIb5bE(mta9=Q)TXMf9uM5HWp)zjw6Cx`Y6 z82UZWFPqMkYZi`2NmT$AEzE$)6u8?(ffGo97&J4<#Sn~%aH#d`tWneW?P=G`!qyh5 zaz9QQxp)fXg5!XYASz*6>MQON-U@kh`UjfahuK#z<9XNWpa_?I_5k&K z!_oq@1dc%3V`c2hUGO$02N?^tN|^A^Wa0JrXnmoTCPLU-vBFF8Eu)My$C<1wO6V+h zs537b04#JQBpGA$Q-OmN>U@4b68Y=7hXh7^;Lq%UI*{9D2O$u$mW*bujuwed5~h&s zMdw>#f`)#;@56-)Z~$D3h_Hr8ehe)Nw7rE;@gAd7Cg}{x&qay;?Cozec^DB3sSGz= zddI+HrDk;H=Hg>VzP~|qvPpyZ@OPdrS8p<+ z6hbY9$kqQ3C3bHP~(_&lYy2>2R`(CENR=_5+NBc&Iq@{lrDIlY|>e^av zEsHgn2-~%~hUAnce)7`Wh=35;X+trF z7*+Kln;mmfCbUj1OsX+|DcxZJ)np9OpK8d{>_IE$@Ss8UWXYm+0*h_5f2k^7ou*cA zjGJnm;_o>tsug^GsGR>oElFS#WQiphOwUlyeOEL2UeZdX>Wi;_g;p8C*Wh**{)z({ zZ?g!2!dg9R8H}@O0@i*Hsh#jR;~MtT(>LI=N)3K2phwbBHgFSJ3`K2{!Aka4GGCjB z-J(rk{6f52`oY|n7jNnWF|b&52y!-V%5(2$6xO_q?Azb8qme5@K-8-YRP5O*9@3?c zgoCv5C6x@*^s_D}Y@!)88#~@K>lLcHsWfX3(lM;pnvfeEgdAQ~0oFzVC@|1gY&dkCcUwTVo$(Gi47mzb2`5L8;P>;8(g z#Zd3a3eUXQN*s4SR>>%{OrWR7M*Picnjt64>bFmmw81Ns#W;VjX{a+K8qmgALF?4*BcExn5WltY#=6rap zmd3AE;k`27&m3h|UGEi^&szAPJ@1nJW}^}rb6(tyLpgZa19v#Hz?4bYcOTdE z0Zr2)6fP8 zh6HSx$OIHG%u5ptyjb0#6=Gz!jSYgw5Kvq?Fa;=6u4Fl06S3!_A(X>;)5NH&UqI*Q z&h$U6OSww?+&gZD_6U#8&AT#J)9e6MwRsyY_obspr?ER12&c-j4t2_*O~cURSN{q0 znA@{lixrZ~@k@Hc8I+cppG z{@#!73xV^f6$#s)gz-$MR1wD)MACE~Fm{n9NwzR1sP5nP^)Z6NvyKl#XQvEt6H^a+ z_PZ4TFRit;{Tj-pZID}#FtM6|V%H<`Pk)9ph3BNz#$^9tvnziBCMPpElr+77eR}Vo z)NYg;VSF()Lj$qYJu%U4O2?3tC`P-A?O`6LQi0rfhF*T@D*AiKqzC4arnK(?AF87q ztF6q~gZ-qEb+$t74vUbQPZjKDFBG9~%5d`+%!lQVX>|$s<{Z0)KCoO$Xh+)iel ziR!SO4I0^D@_lJk2^q1%n;{2Fq1eXufY6 zD7n~8-)kmwK0BQ-UkkyLX?VVM5kjYG*|uxCxqOiNzmoiZYRTX)Y_gCIAtx(F>mn>k zl3JL%9XWt?Vr_TZz2P)%AvBY|+IuND8q@`=39Vm5$KZXIoh{OsglAlO5NM$DtyEbc z*@B^)=!X4m<8$A=JaaH7J9vw~!bXR?-gk-vR3dW2hOb*2OQl)24CM{gM&szya$Z92 zg4Cra4^oeg=?2B{TD&YFsl>QCdB~QqgpGhLwZwIGip(fPJAJLz=V|6XVKg8w)Wj0M z^uf}E!m)Pf&;dV<$2vfI@c^={`gNQ(S_V zU%67yvKFKmnv$C#BEsFqIJUWiKqjj!X@r2*271RSrjvqkjx?U}l-*#?LpXONR^d)H zfj%^Y^pOO4Fi2+eZ`^-PZab)fug3B_F!G!|4yy9uM<}7G&DG=dwJBfUfF=r0kHUh` zRkMV4YFy*rMxLK|~yBcZXZ{*fXNK~nGe z>3Z;-*M{ubxrm=l$5EO^c&1*Lv8+Xmo0`!wnC?jMljS?J=+m*Bl@A$NDAQ@xY znt>vHJmSt#_8<;gL(eQ+$uL5sp=w3KdNRsL23(L4V!Sq=E&OQL0<>uBaj!nfiEM1p;ofEC}Y2G{FIMbRRB+NM_jZ` zV2xCZbac)~i@4V&MX3K0xW;rl3Z=2bS@?iWmf?m_5r&0wjlC9}6v`x`D!|Z@VyG_C zCtVmW;S;oyg2J}V)yEJDu?Y5)5M2nv@o9MCK-u)(frN!lJR8pJiw4Kok3;P0SQ)3B zQ|t;w{?(O3#oxtA^dWPX;O zLo@G$I=fipH`wKk3cpYZEf<6AGmyCO&!dQUu18Xl;XQ(}F^@;ABwv2DY6hn7ORP$c z3Fx7lA=NY(ngEE}G4_=K{Q+DKt@!I-&Ce@=+09~3ahqO9K3AxG6yI{d7hb_Rd?wHr zH{iLVgWNGHh`)wtB#|Ap62(J(&c~y_)xgli#`^bG9iAPUpW+~CN*0-xmx&y#r9c+v zCi5co=hVl1-+%+vmab`)I|2B9?^ocC@`8+E z1Y6X8e7p_XkFq0@taY8L6JL>oLPyqQQ2qE5T|*K@)yMNf%kYBRyaUYJqf0=v z47Yzj-5bQ$SY;YqFj#u`8hEPfsQrO%?^d_Yltk9CbZf;%f1lMiLZ$l*xo@DSge&uc z;@uvZN`)5KlP>Tb6d`S;2wIl6tA4^Ah+tAm;7(U{=$h&r_4Zuj`yCg_j(h@TPkU0^ z;imSKq;-qRPUMXy&6JDCnu7-uMn?53T9(QrQwa?dRFhc8+LWA=NuZIY(F1~V+ z^3;ME7fRgcPE{py^+@b;2RMr1gENbdnZ&upY*HxETDiZUF zPK%`6K<=|Yv04tYEp87EZR}QfQ(AGDfD)+qfTmW9y~H^Sr49#o2f*~{;**er_H;z6 zk7xzR!5l#r#$uN~eB`y-hwJiwE@K;$## zOGxO@8^hjou$)bhe02K{aSv~DP z?%Jw6E$QC5{SHH!3)H$;lP9KM;BC}~QE)`W(&gn!i|Uaa zZ6@gpoomyEp}dbXmE+WjR_`bfRe)D?UK?eKUnQL6;L6kT)Mxy~jz0a!K*v3ZBq2Ri zw~%fb`x@Yd_)W{gEYDc}V!%*_EJ8Md|ckoV?NYb!0pNfRWeXG3n{3UM=DW?j0 z@}~6a1Cl~M3-{ZJ+sp8$p1a~ujqSDfE0~&j`i5r6=ziz?8zPGPiv}q}OC^jNwYvPA zT7=17KT(2DjVV$;tSW@^@D{|nDvKn7{$f$|JLa$|iYG}lw%-Ci9Q7P#M9V!_!O_N| zSVe-EY}V}puH2?Z4zCu-(G>`Esm(`w`A{fteamk+C0(K)mTz~ZI+ptLv~_1PxmZr> z7mRMW+A{3qcqRP_Li}ZP5G-CEfcjYwuQMH+bYqq#A+~kx5X>}xnoRpr!J^jc8(r10 zUtq8*0r@?D+z6!bB`a@L>HJ9O7`!?!A+;| zM)Ly;CdHNsJu#oqBGz9Dnwhn{ZMMGObV~~3GpbZZltrcZkBMkhwQFGRM~uI++*S^3 zWLmMaCM~+|@MTV=O)-Z|TGy+i7WqG3DsF(@(5936B>>1`+DZ2A6l+?NynJ|Vzo-vK zR?c&jQ;5qh9fki?xVC2Lbs4>mJC zSzLvQxxNUJBX2(Ay`9LpKky0nK}oa)fn((Sm>L8@9}HSrWv$-8i={$CnCO!B#ryUO zsYbS83G}|KbtT0tw8J=M=RO+iYi@{Z_$D9f;#5VA)<{}b{GQTa&Rk+YK(Oa!rj(_u zm{)y8%4ae?9&wU*DZEK{O1>>I%2ddKdfoFvo`J{ zxnKCrxfXO81Rus*IN#lX$+(@Tx5$qua1u2js?|SyvS!oPlp6d+LTAiy!F*9<1^)Te{({^Pg7QdHj!@|wq%rn^yIPNG%iyr&5F(lTBrmcctfApJO3{~`pv_p^RvJOf2Uo-B^oChs?Zs7TC}|EAp9aqN zlWzjjQutXykbce|DDAiS`mWTgX-u!vDp~uHxkt#c|E7^Svv@K)90kx@b)QfS;mtjM z_i44II8x|r=VGqf!IVa<@zVC_YzbVhjQ_Any|-5lo$DpNbC$%P<%GsYf`W5E&t1az ztwjz-K4d)JPdA8B4iTG9p-_9Q8`)a~SBuJZOw_=TQ{Tr0KnUWSJ#>tfjBP zAZW7KU)$SI312E;!nA4eSYv@VV+L}C^`)~{u{(|^)7FF09*=dpgX))YvI~1anu?_+nyO0{`K9FoewJKu$jgKY0fc~ zY5I5cWec9#Z<+4;7UbVN2_cxhL7MzVF!D(ct_a)4E4+7|y$)_K;*&7$b zM8w(H7;ff$!!Nnd643!n7G5RNwnCcSG%?5`RUqH)GFDzwZVgajjtsr`KETa_j|Wq~ zPDFs8JA4|)&2}ja5NDb3nUq?QljLtRF!YGF`4{n^yWf={MWhfY{YHH7zX$C+4@IJP=wwWSTb(#H@n@YneyZ6H2iUhV}6{Z$5eUr6G? zjCX(jqco`kA<{-Ugd5Tk>+VASnm#Ky!d64@z z)MImVbE@7sIm;_-uiL~(!3ID5FK!ifB^iiC+r2y!wEgmaUm0(b|35a~F-jLE=oWj% zwr$(?%o*FZJ!fp&HqY3$ZQHi(y!mc&vyzoRy&6^jdathDwX5K)Rhcfn6U*^FBPEW} z9Tp7|D5^+8?#o~{rSc75v*Yrs#fBd2X>XzJx=~Z>20~WDH7i16E;HYvppaB3;bc(Q zkTJ#WnPnsS$tU*?YO=MpilTCTZT{~xBLJ(ujo2+>W)*>-8rbQMXpd6k|2n#_{vtsO ztSTOh9dcf{S^lOzKGD8xd9+TTV%98B@iwImb!_bUUCG0eCd#(C?R`G>SZ|)tggrF( z`K{(>P8H!?|KICcnwjYur7?3Hp4)E^J-6MDhpzu|*!8=dcU*=5%xqj)k zB`}lRUnXVF;6HG|eaWjwL6QOEpi0W>C*a|#rGa^$XZpj|0 z@PB6&*`%hdjE~Ss=N5#c*eUAqOZ-|Mh^!lEvlCAw5AOQwsWOsFMxOGLMnV{)mO-mI z?3eBAQfnEtNF})4{0!N_GQM`u?uJvK^H*c*v4wG-kZk9>&3qz50}gB~AB`Ji3w#;v zUO5?KdPQmOUv+b6?gLU?dY;azAD9lzF!sP$4yF)!UH(v%|254RykClVMZc^Ne-)RV zkKkNgF#yAVBq@8CxOBC(Y15b8I)A@CO0 z5UAcs?MR3G{U~=+WvPBbj@WQ1?}PBhmCazpuDVpiD~(+^ck4t`Ih!D*pg2bnO{|kxhn7tl~fKF6VO0=H?#Xin^nqKd%YE)ro39{UdT*Pd1}O2 zNSG<46I-3_y-iUZC`+f#gr`)~HURWPaq-7D1!0{lQJ@;1A9$P*;D_?I+8t*+VOqie zn()lmchGhzRrgvZE+Ne z0NCOL^H=nU@N)(e{)8s0f98h+b&Ue}je^jHiW&QX`cGeJvY{V@hBVyD_zQaMSR8T7 z-gi|>b%-@(X_CEi8ARDpmtoFkis>)6e>;w&y_86t6c^Ty!GLFWSkZx4W$MdSFOHq~ zWRCMSUv!O@7Nh%m-}}ag%^87;SwXuvZE|=|@imp2<&;F-~Rb5NuhVDj}33L!0Bl!|+O_6>C z>e0zcU0N%@vtM)Rl1d2H|HGou6ph4W{xUccSJ*la0jPh0u;Py`?tB*Z^7HD9`&RiE z%&I@+A5=YkHu@}D@xg7ywWJo)LQabxYNoesi_uj0LGL~Af@hv7@?qxmi6sf&vH=e^ z+p5e9>EoSMx4@ifj(V?C+CIPUrR0dp&F&}^H=z?q#9j!015+}6BrcX~p~k~MhO;q; z@aUwQl9$#*o2xiXsF(2gZdU?*a|)%A0N55YVKC)?8MUWO?cvc z_Gc<2i=^oORfA|G1kIdCkarWM)#zb8#CAF>!atSN4HthqDH4M)>`5*Iy!Z=?6wJS{ zi|HMpWxr|u#lh62sI2}S^8p>Yg%u#OhBs;wJ9nGstmBi#@oCU!f9QSMz`9l%yAVdv z79F*ho&+O9Ae>xUZ~O~uv!3Le${5vM5yu9(H%uf2B@Mga&Rv5z9TH`^`7h}14b7#_ zNSTQXWSLSv^B@e$O(-UP$(UUyW@G+O{rGM;sW6RqPnu!Ji6^BUUWC6|q*gsua)72! zoQtg4uvr01*|F&IV~K)q&B$FqB~}#lj!{329Xx$%FJ(z7q&kh!>ka}ujou2! zwcD#g6n3`UMdU-2r^->m{gVOi3oYc!KfhB)h^NP#*(Upmj@qpgsNKh_ojao3cb&0@ z>t4`zhO=oNtX(}>Tse{@Cb0uWe1Q^$?LA^mTdu2b7|D_XZBzd;JI)2pHqTAX9X4Hg z@3kO}ZEB3GnZ;e)6lj2_a-=sT&`j&Qd}1L^zX52@-iy?RD8Vd-<|<;4i%!Ek#h-r% zjLBeYiw8@DNMZcEaT815=-LkE#8bo``;4JK8Vs!0jE@}PGuF5%S^L*z@vaaC)xzQm z4CD0A?ynrCQH0jcm_a?&W2bC`EGI#mw!)Vdgj@-4r!o0rEopNA6 zat?b{WUIcaI7*hesO%PYh1IQ(MNUqEd1A|}+V3&T>RQ$TY^tz&rsIGim6BLynm)wF zotv=1KlsLC4$J?@Rx)BK@0ijQHuGXeg&J*AFiBB;4sR>Ab;6T_hn{l)bJ=v$Hfs9b z)!xZuDiFL+4u4a09sM;`v;PoupkPhTU;b8kG6LD&Sd(2lkAEcVk8LFLD*$h!W)F<2 zr^P>qcLC{MiRNYcHQ*Xjb8@XHUaKA%9HCqzSklRTt|9K(B(cuQih#jT$v<G5#vxk1ni@n_zEPY#E}yt4)KiY^eO*CZOe?AEf;R-}s$%)tF?6JWv_| z$^5gL5uVYsR$cJ<@MM?%f+xL=gDH;@^?Rh*PzULV2YP658bRf*2|r+x)(Iojs-b!y zvJ|<>?Q>85tKyT%#k>{?|HX}lwcN!@qF{kjZ@;H+J@V&$wYF2d3F>;ksArh@bz)x| z5$(aQ$t$sc*6o53>gXx*OvzI_Uxi(SAk4+*b43|7M`Z+_vpUzDC(&KpGv-k&Og2Ju zI8`p99Np^m=0<{r(uOo1;lGM8#hcJy57RS2g}4xp5GB<1jv8)R%{_bSI)Ri+PL_{? zcQF&Jia<77$x{-I;((Lsw@Gr^Uy8J>*;V#)!YdfQAIbrgU`|peP@3!H#i1_Z}`)+1r zdm_NZB=8mVV15gq{YJ)I1ZrV-Yc#VM>8G}fKjS>3S2@|UrL5@*x7G_|Fk_{w@R&a! z=ud?48CU5p0yheJ>9i6RBy(31u8D)*_%rc`Jw3MqUr2I9re(=;|J*wB@6=&eAmr>L zZt1orh`|>55Iy?Ka)dR-u75Zau|zhS;ClzJ?^8yMu#M5N-)g2`EEc7c&wY|R7rr;4 zxR!G5%u4n<&ndm*N+n+r3L9d+jKVnNjRaB(bi1?Pch9O$L|q#GQg(yhiH`;HuoPdE z4DQ@*?$fU;JqU!^NMpaK8@|C4K>{C^Q#LCi{b+&fZft|+1wv+{-d(3R)YFyKir2Bz zW`W&i)Wq)~OC2?4mn-=aZUfaKBX)Io0d*0C;q)#N?e$b_iOKxQXK|CLLGlO9mUlDy zluDXIn)U>`nL){GFrWU7MnP@-$n2rz)e5sgQx>ahgkmTn=k}-+D#!cxyQB}D&|k>w z#qe@)62LY0F z+hJniiu!BQQ~B?_`k?dxJ?-L$1Eb-%X^?gt|Jwf);&9nShpCTrLStn*c)~SuoRf7_ znvXIH7zst3a;OX-_n|2V9vLErKp6E!)B^Xi(~V=xauX#D_IjBysG(!5`UP{T1gRVa z>X9U}wd&!;SycugZ-Gzn5s0PUFl#P+xHIFg*rdi+wS&cf!pf*1LW(|2D5LHnW!y+p zmZuzzzNR^L&5(3(3nVD6#z54d%LfKg^u>d=R->p1RFH@OG851znJ__lQR|>b zeZ&$mgL}7ey(QNDxvFiaSYpt266|A?{dtVlLfcd_IlL0Zjj^2i6OGyyYJ8ED%TO#8 zFBlgsR8QNxS;UaxyqXUEf%dO^4=2QFj@mgU4c%oI7Lo6(A^T0P%4q%^qNKtMxx&Q@ z+o$6K829|0fV3u|s@#3#Ue8=cZgyN$0;vV^pVe3BPvtA!|qHXS1IKO7d$* z{2c)MP1sJH57RRZxp=J37xVYFC$Bm~eUbF>FLl)zv;G1!v64~<-k{DBZ;L`5`e8d` zXLjDV4aX)+I!*1|$3XQ=3$(6>)_u2WL(v~-`E3_q9@7%R;wbr*O09OX)f$+ zJQft%X|&B;M_rmr7Lh@7o?gMu&wB>ogmn?q4F$(Hu<=4(|86rS5XQ(>M?+Vx&-IZC z*-1wHzumh__D2JPl}dwe?$2qdrOshH3?(qTMcJ`oj8w#1*(D+kn!Cl$K1rr5gPc^0 zLC9)2iA7TJayA2f#M}l!*QO*}t*6DO{^1m6BuLfm{AI!#{dj;W2;{0Uo^j1}F|nfo zf%zEU<@7ZtShEPRQ>EbjEvBP5=y)b;>%dnKr@9WFI>SuboTsw{^9PLTQKZ$gJ9^A$ zoGs_~BH}n7Hm0adS>jbU_#<#(42fa|Bs(vcvzv-TfFa+c11TBVml!^}?>ETI+n$!3 zs;=#Z&HCulo=#TptQU8e60!McAD(z_;i}_pezQoNPJ~J{r5~<7EIw+vlL}a>2$?Lg zE7ycXm799K$HjFvlj$NyY8;_SXz(94@xH{@Jxr!GXdI(yta)Zqkb~Y-3}JrK)W8;! z|NMS#zjw5F0ME%==g>wSrUF7##(44v-b$?*tdiOiy6_EG-F~iD8OkMwH# zz9bQ1+W^WZ44qWp4z6Yxv6Azf*EbdM7#T-ifmm@S(6=I5sJ((jXOTzyWI3NW2e-(0 z%hXwO9hGf~lNVLbDQ6h(1xRo6Su%ndOQ_wPMfL2>k$Mrhby2I-M4KmNQEp@``vm8s zN?}98NWLCpF}tUk%SD|l|B#ZWUE`c=)KZMOnX*p`t z`OeEoo`*n}_i`$GT!pYBiW3dOm5FzQjii_6*r>01oGTFeJlQlQ8Fga6h#4C@$k=Wd zScB4B=Amo#kA6)*OV8e7yXoN2VIf|mA3LNolO7*T&IK38MJ+34qD8w5J7H@Qv*-0e=O_*qJ`r&RM5 z_0@1Nbiy{?!EA>dT)>>}uaAVMc~DJu@`i) zc+$UOS8)^>_PwXG=i#qu@(d9k9oh1K$VPimkML3I!S>2|sb_PRvR4+2q;G2isHF-5a?XrKXOYiT| zX6c8XQK({yQy1lp^x$sBSg!fs>Y||=Sczgka(IN%PrLo@g05`22ZK(XccJJ5kl)ccen^To-ddKUF`vmAV3f2b9y#@IL+KDw< z^?Da)6cQ7Ua>#^{oFc#vjF8tTwR9DdP1*gTn*#qXqfsC-;7dnlCp7y0H&gikOw9kg zjm!hp4gcp3P_ncX+!t{VF@+x?0yObWJDll)HH~q-o=qy8UnAkFkB9%fDS!gpM6D(1gUI{2?haK%LKSvP zaFlp`R6d?g%h`Y%mcD*)ICjekrFEe(Fd6uS<#4bLfGE2DEA|v9-Yy5NaBgqj|9oIJ z#y0SHmmMd#l~TmH_GmLbVJZz+S%T*fELPbfT89*KKCa1BisdYfO*g#HNa7{dKSukO z$>5w)UtVzB_OH3_$kpqS@2eY%ksR3r)@fd*{+UMIzipJ2G;j?n&MCKGK9e_tm?V&}?(i#(o3%6Vi(qIZ#gG2lrW!~2gdFjDl(!@Asat30`XcG&efB~?*q{QCX*d_Or8!Y_&D)V zf`r!UQ5P~GO|WD9D+lwNceT67-F|$IMtUMby*v>h`^{#CFCd1(2>|%p)`)a@%f!6i z9X)FB9HW}j_ zF(w9~i=A+fAHb*}hx$}aCER> zV#^gHHq>}|8#J##kw}vn7E<`P=jwR*?{u?PCEZ z=g=D>e0RIrC^M{GZhOPT4ca-@TaaEIac_s+z}Mqmxh=?_#cjGxx&r^x;WV5Cj1kQ7 zY6<%F$E4-uXdwy*(+H`@9U?KxjbB-#ek!KV2O0{hIM5#iAe9ys(EK4S75g+1Bz<-z z?#a$9uWQ^=mxt1d0^Rqj4sja$fFKBUNVrZPH@)@Mxu_Dv(k-v-DDeq-vR)8Cozkg? z#Yjx^)<%rgXS`AFV|Ga;XrvrBHmFZ7`nKkFRG3KKMGEHUWDES(JWO)vMAjLdrvy3N zEt!AYn%Bs5or23F7Q)q>P2a0KSa0el8T%`L-nQW_C{&)N$yh_#8o=lB!t{RhfS+Rm z4lJ=Nml)lRq;9w6TQke`M59~w8=Z}(D z*yHLr&LYz(WcQQ?dCaQSX8f~cM`xR6sOV-TD78$;Viax?f={}9CI7Fk6VN(n;}Qf_ zm3eIqlp#I7fMxfd09uSE@DB|YgeHx5R@ z2&ZKHBG_;1$5@87Vb|^G%=%v#|?N zle(%G7$Wba1(^G=Nkd_fRtBf=bEJvag3@~1TWkgM z8x)2YWKguVdd$T_Ed$^#7s&O_V{Gs=}qYwv**Wi@bW3G`U^%WAR!=8l8KAjIqc3Tm<^CYOS9^KmFFqImx& z!~#-K7gTYq>2os45s~2x6(B*ADROrxRZ!+ubP9~)Gp{w}DH2%M6QM=@I~r1gb*848 zJV%8z)k5M8$hG4}@||MWOg7zS_%ZP6KX8fj5EW+;Yuis9Wu&xOR0<_B_)Xix%+lF@ zQ*5@3j0M9!eXrmnBeR+Rk4%DGDRhG5)2f7`MP=V7HW@H-G_e&uUF(Iz*Fw@=z07m{ zF0QVHtOp9AY`S05QevAf8jg#c=MD9t!)tfkUtLz~m_bRAMc_gm%@s+sW`>{?m&%4^ zTHqS(Lwg8SRdNY~Bkm@4-vrz-^m>{0OR*=`#L1M!5V(fBjjzbW6(sVOL{S>egU zg`mJizKOS)J`Z>;5*o}}Qp!r)TTfF;P0Kz;Q*#GG!frfzbjWEJ9Qjx8i>1n@H3BWn z9oTIzPQ@P3=YV!czD3butMRbyd|MfuY+C?%Jf_rIrpqVvFJlj<1k2rvQJ46_%vB53 z1}eqm$+C|@SDbbyy-g%%KPZrvdC=yh^mDq+tx4=d!m8R_OEW+y$&MU99GcP~25TL! z^qlh|K*55cFJ34=hqm~%t?om17qd>${2{vuhyR;$^8kyx}AV7vX5g^Y&QL+uXD z=UpXrgFxwzZvvMUm0;&9neQ)iTo@JlN>*?6m|PN;CKH(?-t;9AX7lmrFY}|i4L6Pm(k2wG_ifKl-S24j;I|X zuVk+GFuU&oYOW2D1_?ZY9}K^oCP zIUuLsP1a;Ch#|Sn;q9T+c_h09l`O_jTu?SNzxz;Tdf>4up|Rr0@KdNve!Lx;N(S6RIv z1bSWYO``AQ&0k1h=O5lYuq|g)s{aj4n}H|9Y{2xLzXatd1%g7hs2^ZU$Ijz(agi2i zb!y=oVS~%xyFM;eI4Qp{nQwhbKVJ#Y(iVqb4=YHDVRq$Jd@l81rc=IU8Re3UPF0>O3Gi!az)q6)MB>b=lzE6{hn3!>-SIVO-iSJ({e5g&oW{8nb7CO%(cgh9Y zH!biBRW{Zz%z_an?JW?`XN1t;DtM%~9tumV@XGSKo<|tI@^%tP)-iEV4G3d7MUuWikLAITbLCYY-<1f9jfJH6u*0Duc_X)$=U`%PN} z%m5$NY`ln7LI3iQ6^Q%WlvXelW605n1kwQj0A|g0^UWbC*nASv zbTZ^S1o=;Pi(o#oPEOwa~k;5g}E?7so7W8+4Mw=d|A z;EQ0lEY7jBD@86t&k&wu2zHHXG8$Y}e8S$IskmN3AeC7+^AIJ^7mFiCHuxo@dVluE z{ptzti_u24AMAvcP1Pb2hFbbY^}E;^R+1wxF@WEt1|~Y=U|_gS{obozdpzb|p~QD> zpZ(#XAo=s82YaK#$^3;3_@A`qSv9yvO8+Ly5wN*gfDwjI*wjSDEOUjLyFjuU1GV3S z&=2e|Y>>f4tG~O8G0T8%+(feY&mMh+1mU+F>A>GwW*pCj)4+{L3ThI|wE<)2UG7p7 zvkD64RVgls+Tp#Pv6A__%RDQ-89e&llw<-5C2F=O+dYT)9O?9F4Fi@U^0Al2DZnTd zeV?Rc*#d$6qUp&O{TQt?eH#k-dgUL-}aN?qfc`iu0 z$HoOr9A-Cn3mN9DPuTI9w0iSl#>s`=hHTjehJ6+>`RE6xR9iUyY8Pfu5qKRtU#IS9 z_{&7n33=$i;0>3U8&}j;t$Sr=BMnBWJ8hC=5h3`Qsswm$ozy620+Zr+CcWxAjI4={ z`Cr`(S2COI-CT%x-+X;LSQag=G^RA%>z6F2oj2d`T28}^$1G3RaXerBj&W&biXMJvF$2E3N^qRr_Bp z6&wV=!^l=l8NH`ro8#$H>{RwQ9}UNEIe-Kfrm+0wH8{sR>{Vea@BcYAQ`{Rr(35>M zM;}vQyt?4vjS3{c2WmopLV3I?o`L&l=aie2a&AsEVSk1ZF*LIYsXqtZ7V-r81b77br&<4Ff;Y|tq1Df z^_09`-ZDxk*(lh=n9u#mj3Agbt^UV|)}1mY z?_o&o_8o-ApAK4B=yt&y?TYV!$A~YuHUykT>>Mp2!BVh=RebFTnmGJ9nKh4!J9@*u z?;0Y`(3bA5(FgXdt1>m@3x4cn)L8g?R%fwb4H%kt5XH#&*r3Q+@bhKNS|Qp3uKawT@AFQ!*Ap@gNJY!t&(6p;V-LO`wKE=!>) zlB{ugMlV~GOMPxUH6i5!`WAo>@ z18RxCk4DndmPAg0wCLU5*f%c);T~5C{};w4(wW8v7n~Zt0zMwSA@Y8wk`#zu0jYyZ z{=L(YykS$_`!rtzk_$xpGk;9iG}S5c5wGnT!lvKIYls50ua#8@OwkJyP5#3En^G7q z&23zJ7iYi1jsnz+q!A%tE30}Ag>}=*4dF}-rLMW3nI{#09u0vPOI?n}lSev~F?|t*3dq@WtfDM z;z^UUp_25M@Vd|zjZU}sP9 z42S@jH~A#F;dd#oT(nxrVm`=|udg?0x}YDXSD_U{EheeFAve;8t#S|SD?6+{LPi7O z=ps5e+ZYB)gcFPe^@YNXPf3a26F5{+vzJK(_PiDTBEkswo71uLl{@umL7VRErCWc619kkZ1>>tBrSuCP=Z%iV*0$nFanRioNYmb>fg>6A+wqG zN*Im)oRaW`Yxm)G-Qw^Y0_nqDd%W`$RWEzk;uJ>N()t<4=(2oQbjZQY<~7{pVz$`2 zvG(h7B~ZwXoKGXryL`QE`@%~Z{8-c5FVM&2j9Fzh?ayiA0&#&lbcmI*lVd#+j}(3=ga4>gvi?c$rS+vx zP6~lJB&#&H6w{)MXN@~3b>1Go2;_skC>V(-guUogutBuKy*e?qgQ)>_K&w!TZhxP{ zA0#DJ)>>aV_P#8v2|NWa3nl@&Q0LAv|MmbA@2uFVYU<`t^5pteil0Y-6!2PLB#N&DjZL1adW%ag%}TT@mP}B*DG3%}PW@?u!MQFYeAA zwFdi${O3+y$Op!ie}1ZVdCX`!jQ|t83#4?RTS3ZoW7U+gt4olp z8BafyQ*CvbgjB=Za_iXhfQH#4#?pu?zQAaZ%9p5AjdTkUy;nx)@IDX1>xbK%DSkmS z4uZup(=U*2tANZoBo*Jfy3oB-z(~iKfzVdO{S2-7TULl+i6lz;N1l>f8Hxg&MPmG4pX(~!Ae(z-( z>WfV@Xsc}Uc=^0)JQGSlI7zo=e1ft+(di&P$81cL)TUk-2G*5&?Ri!b)c*506AVb7iNhi<> z@R|0%WQ>)FdADUe&PW1hq!o)&<$*@uUj4I_&_Tu{9_q+!)HyMBu)d6UdQZ8MR*A(n z%K7!c2gR-M0aCe@TxEcI$EU#A?b%K=bIH;~$@HpN`umAjalR12`*ACfZ&mKRiLA60 zj9Zy%#Y~A0;0G=$1`N(IkZ;NPVAjP`o1mtvn;~Q6%1;ut3W>^-%YA#((0}HL=*OOyHIKjlE?QF> zz($mQGR3Qle)}_tYxI(|;mcEZ?MygZWxWX3mjfBaL~_7X0S#AN^CL9RK8mi5z3tl> z;@v^gn!*Z7|HrY^&cY4;NJi&)A&wNRloKmyN zB{q`dH>DHqUzJzg{Au`NG#096`6CY5mX$$gP{@BI&V0YK=wV}dlq+0A!KaXasIs4CEvVfKVry5?$JXR=0z zKN|nHU^hg;4|zY@E_(K^%j2FkxO~*6H>K%rPjD5E5Z*m!I!DJFwJ%NvdssQaDS!M! z^C8*jYJUOV2skhd)$PgO-Ff@-erm))_I8PXRq%y zZ5gU|lD{3vmZaS3P+pDbg0v}&g~51S7J|ExSpV2kll+G$SnyoEOZeJL)}dmthnqumu;+7!21KXTOS%bu60V-aW-_NsJHeZk;-Of!db1nYb zax>($*!l#EI{jTxy@aQ$XqYVuZNuLXRV>{dS|LSi#6k5#+`3Zvr(GCN32m63Zq6!$ zBxmWJe&U9a6myMd{>qC$hGtVY`j+)#*x%RrWit5XI69LK?xCnzHl;*lmDKnc~x^^Yofs@Yiyg8*XL~A4UkXc{2%SJ?{Dq7EDY}7K65su zllSU{$>rc=1%na8nTuc!xL}O(=8LXQnzRHl&~0{N>z?9h=iT{&w|=pw-S<=&joIZJ z@?r)AULYpl++w{n-~1n&^H@yGPsOOtX>&g?pn*G;bWM_uBp}Fv?hc(7Y4X1~ zqm7o42eIH_^=&(yfk;^7&T*iI6nLrovz!xPGbE{|nu8{tM%Rp3kFQD$%c{5DCCCZ@ z09c|mO)ea`Xu?z0m07rPkhTB7*}+d5RxZj7RUn@Y>W^}X`jP?~ci z4eoHYC>&wk?-j*)59cLyF5)sNAeBae8TScjRq!h>ZLMu7nnC_Id;WraBGJ`$5~)88 z2>0bN&{>U?uB}%^>fK3t8OY;GTyYz`jgnFibhAu&W*c_k8U@Pw(Us_0^bUL!W2*a4 z(}HGvT`X_-V1vkajAaNt3l)SJW9sZ`TmUa##w8mP0UEkv$#fy)(C*ic1k%fsD3LkE*~y9^c4H z{V9A4UwO49(~Z3Z+3)C8zPc_(*U5sr z7qP~~qxZkGWp7A8$Uw!oeK=jKauDMa7i|}I^VEtQFE}8M-$Axm2rne-Tq^(oq&~%M zN|^L`t{{L)v}gTxENc+hVZX8b=_URF*cQ&RY(kMfO0^ZlX(G<=HOY2d$oilc@*KPR zO4&~O(cYM|Iu2%Wu-g&kI|``K`Bs_CJ&I!tY)W;2`j5#JiN;_C7F>472(n(YJg+cM zf;1Ko_05IW(P_ow%e+@+#z_}U{@uv~3GsaqJTG8!`5%u%=qdy{ut|qH6FT_Ey23Xp zuY6lQw}AT=&FRnZ24!Zl+_;iTd{o{-TCa^ifb8_*h}jEG7BA*Q(k6@;ZL60sJMqxV zP%=?PZGvPLemkIXG;6F95tnksB$NUqYzG0#+4?vmr!I8a9I_YRLUW6zLdx4l(^i69VzJ4iP24c{4ZAaTMf(g9V}=GZr-`WZx3d3 z<`*#T=FT1t6hk=D8FX6Z$BYgqf-HxB9|^Wqq5cdr%!J4ILVy||ZgV3deF><`@kw1he?AVJfF|nnu<~G?l_kP(+A7&LOlRQTIZfQaDzWx2XAYsMvjlj3V5fHz^P}b_Ao+Opu}DWjf%{p}SU?lgbGjz z!45KvrE%FRW~J(5wWB87Z0*Tp(XN-11owzw3HObXfZ!}f@?h&zuz+o&1s~q$sAXTm zPE;t;dajOn;| zD*J_dD6T@5?2RTvDfJdOkLeuhEL8zHbaHSH320|0A@~m1#=-*jInCL})!k@6zmD{% zZI(-p7s|4RU9-io!~}!UVSMFC{Fbd|H>l}A1Q*`Q$JN4!eQtjXnD)`YmQn)*0RX5J z!lQg>`X!hZxD?6o2MFY4Cai~^-;8ym!d2Y@l42V>mj$Tlju;rtUGlU4itPY!?llm^ z^Su)F*+KUqQO);}GL(otFA6v(t#DU3E$*tJH^XzaK%D=GxQ&CQzpi`pGd( zg06Xul6*EOpte_cdA#&HXZi$!p~Q#>Fh2Yclx*5rJm-vc^qfuPhvx+)Wlbe1m&6sQ z6FB`;+Eif}`UqPfW>YP@FvyaxeiwehkK$O5ncqqGSCw4US?5?jk{QXPZqKgN$*I@G z@9Si48CEKPQ@^p8p`AQ~bA!%1=Fjyqx)b&d005S1bc!IgC--2)>!#ElepOH#Q{j)H z$UEF2v&Kk}Qx(5hBO#vNFm?3L_(7@eBCoB-hSKN*RF=ZBC>eSTQWVQr@+-&Y(dA&n z`L80f>RUll+~dI(Vh_-AR)n;a=&VG)M!3As`#Xv|#H)Xvwu}?7;xE5rq^6n<4(_P7 zS+D3zP6p3E6?+VfNrw7em!~d@NQ%VWpG6T$oUJ?B$4g;x2%DzWJ#K|UqQZLhj+8FK zUEps0*0aW~4nGJeex@L4%k&N!4lj@^i7IntKJa$F#7VMF$}P>;qNxU+$~I38HJitG*4b{4z!sU64#1 zf}NAE0iIZPhX8KHZX#9zHfTDc&3uU}_k)L_^{|%|4qyHb%jFFqw0?q!d*h9-X@3(R z_07>~rd?O!W)zaQB1c5V>Qw=FTsD5=sRZl+Q(UsFCu>n2}i36H--VY|d z)X{UoS6f((*>0oZ@C2!L#FEX`hW{8KV?vHVHG#B@L!xOLrAhH~91*j{sp>Gf(5l)) zA8`~_(685sZ`Q~>F4KHkA{6hZ(-4Jq4mqFs{T;QcJw=CDNud5ifU1W$u{BQ0_RF)M zKD#oiu>yRUF`(fGbIIYmt%RGPao#~giE|ApL^Q{~&(h=uwx|whqcZ4bA%8F66JEM% z!r=YFU=+DGq=W7t&j_9M&68@4H=?8LYZQE0@q;qC{Mua7RSuM#6GnbjFsX;aLC6v) zmd$ykuv_2a(hPGa$n%d!peCXY|CG8L;}Ih{>tpOrW^YlE7FmLR$K_3eEXWtsjzX*w z$;F^mis0m-2&orfxa89);q_+^MKRpfMJ%xvciu;VxFpV)q8k`e%16^IyK4O+iU&d$ z0yfg`2}|xh4x|e-EEnPGqKB)a9O}uX3lZbLc6G9I_d1WW9GKnJbd{JlJVfCrx!9=~ z1*Exx+TnFEYPo?fQ}~#s2Em^GhPY)XW?9*Zjsp?i7Ab zR@<#!Orv1GnCiDeAsp#z%baOsq>forsrse(EFB7A+oJ8jit-T~;xqSsT)L{NuS?zW z!UJ5zcIU70l5kc!&tJz5N-w{GUs4kess2Img}ixV*syi2vXKt`vWGEabp`nO3{EMF zx}EEt$OSl;`KtRfu|oNeT>JaF(}|QTmj-E{hj}SSC34xg^y-3jm*_4`yJfN%Qz6H{ zhOpv$K@KK4L`rfqDPE>Kd`1*v;F3oeL+u3b`QCSnep|1q+A8GEq0!S(xk}SM`&d7x zhQ`H@8TSU7P z6ze7`L^jT~WlEermzr<+4&^cF71DZ}2TysqS5q+cc9+Fy5_ia;jb)x2DATnb*J{o1 zV(EP8LOY6Y3T)ZU`_k>@s(C-cHR!3O>w-Mt+`LJ`D@(GxX!nMyPB0;RV&9Lhe4jAq zWY~V4@RCm$(C9b_BIco3tYZj3p|Vyl2PSE^s(Cgx8X^8SV|lxCE2r2C#374;fA{A- zWI`4n>jup3q2rMJ^x-5+Yo-=gTPkjL8F{rI%i$Uw$lNfwFh#m7{H#+o#fT*VE+9=W zf~blYCFq-f*6svoH3k|>W9+sA_+n1T3^uc@9j*w$OG8vh2>)S_GGcjH+`ICMRu=Ja z6s!-79yJ&MfB*pz6x0V&PDq&hFQZ3km^AIxj|}>(j6amdx;9-BC-|8zpON;j4A1ChG@9Z3CBDGs+o_$|Sy`*_qP}&p_F~DMMe$4V7c72i~h(HQ@0 zGBhq(LR5-8J<8q72Ms^u1^~0PH1@MB?_sPmrlkIzTvXT3!ysFS&Tb ze_qg2vLSi-I0rFWg8!KP&EwO;tm)~uY*ppEQvV&#OWNkoY3ePN?rlqRoF40vxj7pg z26ZDr`1XNze|!eFpq*|^w~IGr4_F6sS7)ahCBTpJB~%&_oICQFdl+F~>mcD%*ejJ5 zrpLXt7Dw;Iba;NVHQCK+Y}1Usl%d(ID7Dc(c8)@>sNOn$s<@*w(<(rB+)*}bdmxXi zowa})u3McL#_9d|l=GN8X#GC|UJRl0)0tj1)(o?f0}U00nUW5e%(D+#C?feqcs_J| zW8;%?8s=3KH|dm{G~3q1dnz@+p5ZYVmgo0<0SfM$5uTq5MIn_tJ~-zixl^{|*}R5B z;#BwTAC}}^ScN4B)Mx8~#ks=Ld-1m!-xrRUB0H#!139hJmN-60N4n8`!vn@?nvC&! z?wK_;KjUNh$rxh8CwiC9*fKyTgVL36N6bh}Apz833re)?a86KB>ui$pl`EiBA0BZ@ z@&r6>?ARWc+8{*cGZP2(RM`rD)k|0VIf9?&FtJwpgU|9K(ip#&N>+=_fvN5#2smb?c=qZ zz1gVE|JlHN=S2lm-dqOT-XxDzs$Lq+H)u$GWnPTB^S?4W-sID@U;qSfFkce^ii&Y) z!kKGojFtQz78B=#P8zgS1q9hPG4 z>}Eyab);4|*{IIC9Pp$BRpw6pM5*s6qy4zfA}Nxo3N=HX4W_HBo!rKO_csxEVhuJu zizo?%l^TVUTKyJpwOU;qWu=o%i=z{&XxPUz7k$ zX?4Z4Sn&#Zv;6O1k+p5+>x~4s4qRjDd@Y#tH{1fL4nJ!mU4@;p0PM?ztzUg-K687@ zyZ1UmD{F+Az4nqap1!OT|2HID*mW^N>_oj7r`U~DDp{#+!ig~~4wP%?1knJfe0keA zX;c97eWohU76j!VI?;TD)&;1ZA;~h)47i=U5fETePW1&Cd)=?(FaR~T{S#JIWzr?- z`k6{iJozt>b>d-WHtyvEQx&)Am(+Q*+f@73!OYsWb=Hejp~7Ne&O~okbB;%Tt(c0M zwyj$1c8Dd?-Wo0{d23sv+1VT#3U+}em|1B600VrIs0KsnAI~5F7=00JfOcsC5<7yN z00bQ7AN)&zU;qFC3h}96000000000000000000000000G-Lyc}d;kCd04+2>WGNr8 zuaxv0nREw!kT+fu=|fG}M0SS=kRc{XX4S5f3;i6~1LLuMXK(-j00qjRf(ElcBM+i@ zee5Vzn9rfP$4=JD2ibIxZ0arbBD5f*^a;VTQ-qBxNlkKybae;A)c~04VTXY>;hfXU z3nFi`w&c}D&;S4cDE+5|;OpkKOl;f72!RL|K}<6^H1qc*fl%&(4d%(XJe!xcZIlfA zFfV8kNSqiX`BMp;HaPepE9dM%S8*{ zkFN*($woy!+p^Jwco^W&HSVm^GRbb8Y+1MtzYCf8I0`g<5ea!?CLw<|mxeERg_dCf zS!|aNht6DZBSEs6l7M^?LJK`e${Z@`#;4#tw1&K#waMu6<(ak6Ai!a;YHDvSIzV#U zk9Y8F_}(p@Sc_MU=353hEd;vaslw-2TSenG9Peyr2w>fYTh#0!H|i{yQIG)MuC)Qn zUZD%Dbk#+4!Cn@BI+KnX48iwPqbky2>t)@uu5$=!&g*e9+qcp@a$~|&R8&zMKWRY8 zjEsyui|EXE&qLBZsoP`TPWSdhY`UtaMnMT1$#ZBb;M9PWJ;+{!03rOjU?=WXDjm$*Py(J(g=WQL6>KkP1JEN z>t1DW7Os>OCky}MkK+pWGH`TV$y1Kr>`Zk7X++i^5L@~#8c8`Py+EHDvRl?GlaeN_ zGi*0+uBpYMs@uo}D>`Dv^C#`+{oS$E4lg0L9m$+Go_6c=b#7v=@<&To zST3Tf$pfd!kGkjOHN33f);LCDrjcnqe95;u#1ACy0SIKfuBb(Bu-p-(FN$1j^?;D|bF zlz21C^5b}@!4XW55g`X~>(`R(n0ZQpUYh$<8A!Z5m*K&|oe00`aKKk72CrD*%81000?R z5$PsbLfAzm@nyH(3rtS@l)5n7#@0qii+2Dh29D%VJr*<+oG(?0B_XmWu#jyp!8CYt z$PWrh)sev^%DnfK${mo(;v>gwHXym$_NkjS8Aky0tE4Av0`Bo94x}U+zbMXikPhK>am*lrF@@flzGJoaNp3s+%M<4f1{e`ag zM?R7tj@h$^LS17aC^N4kqA+7t**;r`idA551F6w>TO5p|OyEHHccyz^PHmwprZmci z@Ayz|KIOq!Cu62RQ<~Lfa9gFaiEVTljRH|9oV(y|Ra9!|cNb^pD|9uZU z6Ws=BkKnd~|B8qiK1c9j<98SuT_)^6P(~6N5FPIq$97o9jBA)v6upc9U=k2n#$unI z^vx(5H*nbRPW2xW;emBzGH;)AMdYFe$HlE%WGFkmbx1H<1LGa5hHO+o-6P{?n4kHv zVhFpB-^}gJtN*p-IrF0we*G*Uq>*orMK}#4a228vhI57P1_;kMVZQFZK}x#HHS2$g>-D z9M@2u*K3@_0000!B)q(N;!HwuTR}<#2ZDj$xQi^qPm@Hw?VpWQ V=>VRrDNh*m!J!}k00000008GFFqQxS literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/entitlementreviews/wizard/createreviewresources.webp b/static/images/auditor/10.8/access/reviews/entitlementreviews/wizard/createreviewresources.webp new file mode 100644 index 0000000000000000000000000000000000000000..0fbb58aec2201ce4d71654c910cf4b508fc9f856 GIT binary patch literal 23406 zcmafa1F$GD)8(~o+qP}nwvBgf+qP}IcWv9YZEN3$-Ky_LZB!9Eme|)sIY)YS<=BDHp1NQQx*r&C9v#g zr2Fn70)B&k!A*3VukQ>0Id603viqIa>j=HN)AAnEe1!1<{A1?kXX_i+FZ>DmoBhlF z8{Yx`{AZ)f-EZUx_Zaxu`GtGy;d|r;{LjzjcRv1{-?3-&Psh*OHRe~?cizv>TMxj_ z#LwK%&vV|-#>c{~?Kk+3`1MHd$;-^^&(D`X|IfR>-}8n2*~kn1$c*<7*5}WA&vV>5 z{jFZYH|2xo}bBAQs z>(8xU2mkT6Ko9A+>^Jj={-JuM{PR~Gw*3eG>vn#3t@p+k`SZ^se?4Bv&ahw1r^74p z1OH{-RZs7?l#l-p;djBe+o$}Y{)GPJCl=q^x7YW{JH0>siT<+RiC@5v;D`KU&1c=$ z%su~kk3Dbox6ils5BMAYvp&JkL{HVv$PePT*H77d+|SR?_mkh-N5R*?&)bji9`m#H zk3plfi*?mEORea=PSjx=`j``a;-Nn2Xt#8NcN)R`_iBJl2#!V^Lk(Dbs@atcd1M!BSx z`va0Sx+Y92F)7=!(kl15#kVk6$Hut&4X6Cq*Z-}RIoqDo9*i$UW0>ZHJ+%OTOhPa^ zy6y(Z>6t!Qwy4y8d&^gD*uaj{f$cOIFK3~05d|S{?%_K~jWSA~5H=4~9P`@$_<{Ig z+Egc3I8L{aGPCfgPo162IRC3Lz#ASklia?7f(@PTtrG&cA9hJjzP~2L$p0^ei%!0= zz`9FC1ECQ{Xd-y`SudF*+QFF3-+vO?w zKy)O$Zddj&OsyNIo}U9sxRQUPA?V}>>kxz)Z^jKjslLVPVaDpAS5`5`!++~nSbFEB z<+!!F+K1uPnb_a5aI~%OOL(g(#j*I^(?J2Sp5YUqd%$&F(Q2i6IMHsQ;+Z$Ladl*9 z-v&o365Xg_h%kSqrHYEA^C@7Am#(eJ5WW!^D?*(C_U=|caV=gx z!;4uQYJ|WTP34Q4oE@Ge%v@j_;n>tp{O3BDej-F95{N`1kVqsF@aOB|Mo_6#gTP=g z7!3OUivyj_7A|1!LV_vnC0@QDs6=$sLp2+Zih*I^I$d{~GzSs(>7`4EX9(2$crBb3@$Ecr zFoTM2($em~a#C!%Cf&f=y)O}3p2Nw86!x4(hjov(^|sD&lrJQ`3q<7Jkj3z+rDocy zpMJE*CRc4>$JF#Ub};w4?Z4cf;#oBJf}z#zBUQnGR_V0J87t&s=#cM!^Cl{6EODC? z5N^CKPLbe#3Pj(Sk?n(|61T9%e}cs=PXHzLXOiZSUq?^khEs-a<7}K(Lz&AoIiZ+1 zvAYp-(~n{479$Ka!e zYIOfV8JTi~iR-YEy&Q{AUo&0?T6;BQv*g&AraOnjJ3%Xij&800 z{^uZ|vc1#~wpZ1+NAI^2Kk%$vIU!valkVhr`Zi7rHBJ*NFfkegYqS#L@=4`~r!(dD zrl2d@#bd18G$4D9OUGP>VhW2k>}k7cag>?^>da{qRJiaj#*1QgzWwm%iXk$ z0ezZqS`-H8Vg7TMZdBBcuBkjtC8FEg3;%aO1>%CG7-Bs2n(w0q&&U4*eioRY4l}6l zT0$otF!zZ>R%ORz39ynrN9bYxWy9{(z0FioY4cTgC4X`3dPUJ3N*t!@nf(t5>jK_I z!M39jFR#w|hdTJ)bNlEl+ykk57<`I2{}{*BZHI_8rzKCABH7XfC% zzkmorkamc7HJPjtG28Ykq*-w@@Tzt-GQ8=sB7Zuzp|^-CMj!KA|LtwbTCF`7LnDnN zs}RSE7Q#^UUKPsaz{XC?fl{VUyjZCGfj4Dzb#4t;*aT5+C+wjG>z@tjA~~iKmAxw4 zPGP(EH<12X7~n<+U@o847S{PsS?a(h)zy`p&QaW(EJ^t)55V_iAw~~`FO2~Mnfq_V zToJI$(2i;!xI`2@I>5p|O8YXL*yB%YOJ-1v`WP%#M4()|nx9*|Q1o$NE@|$F%`S|R zW4~FB)P>Jc+n-y)_KsD^t7 z^B5?Dk<16}A3urPPf#-WtznIx_DZUDVQ_H*kS!(ip}%%+SG%{_@u#%2E?wfL(I`JU z+v>;^P>!7K7-;fzIjuiV-tfB-M#i2$q9Boog4shSRR0C?1rCAz-nXJWUR3FS_4BBQ zRNZSE?_#drmi$6Csc~c7q|@!B(~bD2t>D|=(CAP@cH+lgQr~!^#&hUjhnKkfTSe*) zT_FyiFxDFB`J&r=x}GbeA!pV~9u>2(ew;7NrbMcmHVJp4t%N3zcBw%F2-CtxI%eFp zQf<-5Fgz2lgYi#Sl)-~+C>4?+AuTMQg&`&Q*+gkz?LMjl4e`bFdAC}8jH1ow4sj#L{^n< zZ>9-F9sU76_dW|Fbc>v|lnRj`ZD(Bu{7U{dz|%glWp;a2p2==b(2(bHXZYl2fTL0T z2RG5{4V#Kv9Nc%Q`Wjmncekp_pg7@Vl)u|gNg!F^)06M6=EoCu!+In_g{#?KdYkHT$Z}C#_-27g$q7msdM|q_&R?$ zvBnF(X;(Ct!5I{1Kyh8QRL(sLShz|u{r$I-Q%TRrAt;k)LyYzqZa8ZA|Iq7JzMldPH%+W ziQqX`I-+6sr5)FexO+kLM9?#q9aA5&`%mQ~*7I+`=)hfb0heC;;$!?S)MM9{Zk%szoKe*~U4Sta8NHv(w?=x&aIi!h!B}EO&}+bq*Xx z9wFw^a6i$U?>?SKB88$a@B?qCID(8Vk?BCiGh_PSg>>NQ;C}Cqx^ndp_E=I zS*=P`SjOf5B-m5z23&IfM%C^3&O=|jk8=Ybx{Y;j?2El#mn-EV0KoT8761SMpxS;t z`m_iG&2u1GIn?Sa0A$2XgY0||_So7G22QY)q*gMCC_|Wn6$S725J63!C|4)3l`p_j z+o=hBG4B$@T2M zTDb_h{%(PI`}z>h%6eaA;7E$W3R^xT=BaFp0clONGoPg;I3h)RA|o#X6q-#ItuE4y zFeqwHL)(h^wmKnm!(F7QPv==jdNy~u{rx>Bsj9Vw4CIZ`(Yx?sV8CQO<0z}FY(Y41 zzP)yA43?GoKWixrwKw1Aa5}S{NA4g*OqB>W&MMz3)cn+byOYibhBDxf3kFjXcD_k0 z*&zb((g^-*!zwl{kvECf3?aw_RWod@KS^DA076c!WgPr_qJ)NYOQakA|-$1d=nT!%+jziN*C7Jj zLeVM_d|VJgRi)iHs&x~%K$4N~x5kQJ>%W_&UEIKp+vM?!q4Jore7A2fhN?{sfUwb( zh?ra_-zPmqCC-1U*l(L3e?AM%$fmeQA>Y|2U#Y!?F1j1$SKyh*r7I%<+3MJ#2G;;8 zg>DCjCj%@?gtQK{;vVPZy)va<2I(%OJOTi)XY-MaPDNUmi>MCG>3zd!I*XO&&=<2d z0UA6rGOgg@!HXAzm+g9TjtMOWdaH+XOKUG%AZX~p;dlw~Qx`Se*lh;di%+^15D$lU z9a^pf?vk}NV20|P&pet;dbNO4KM7lIxKgr1qh)@5{bAlKfE%6?e^}Z7a45YP8%b=5 zNIuO4f%wEh#yHDVjc&PtS*(z&!)l4^G+n#{vG-{KE%$=@V3Zv7+Pu*U?=HQyV{L<7O>2ffk(-h=m8|K>!GNL<+s< zO^kN%^8WGwvIyPi1k^=2H@{r%3W^*GxGk^`O(*`_(L~+`$#VS@)^de`$f9pkSPE98 zJ~27W#gCBQ+|cyl_*PgQ9x) zte()Tb(e#iqrkPrj-7O7m4||sLv!9S-kxh$0a~FY)mxAPZ+)|Yg%h(%U*b>YXRE1& z%mFph9I%&mF)2J<1O*S0mnS~BI4h_#%f_xM(EK_?21Xn`oEVv9m~+XgN^PB!qS#ot zh-;ukmxvvCs+M&4&5ij60egK&A;Ejmfg>$^p6+SqD*|JHaF!xSN;wCh4h_MjgxQg=}5n1rmKW{1#X6qgXTc%;ODbgZmRI{=;^aA-Mmchc1N2Mi}kw^R!3KafIcda z-YybpO2n-5!`fn)b}F1DKDLXXH@e>#>i&7FZzm3*3fZm=zzAB$n^Z?2)2UEZFp1q^PM*IqxfzCFi}5R2QLkXFE(pg0$aEc0ne?rMLMeqnIZ^iu{)g|3=rT7Vryzh0=!xN`kT zvRg+i{QB3c&Af{Qu13#!8Pmh@OtHJB9}%p}e)w+Dlf^3MBIG5tKvm-XnI#8n-DL* z9N8LEW9fr1rQ(lfDL!xUg?IDn-h2BvjxbsSK_!l^1i=qc&aLSow+SQR#(ZU!c>dqp z0Fd{t>0%`)N#L9i2fCrR^&J*&nw74Zpe?`3HD_3bkjvU<+6ze2V%Wl#RqA4#mMlt{ zQgVJlqTEV6lZZxq#2HK7Gf1d%b3piobyr(kAQm-Lj89t->Y&$o&7(xn zt`3YaSx_eEZ_cw>2j2qp8*i8QMLBj!o|d*&{VBf@R^t z*{W;4o~Zg={<#_HjmMM~qRr1)6E2&}7N9Jp@RR%ZWY|;;F>7DZFnsF#oR9)3?x5}! z#}d8JuH|Wb3+t8FbXt?Ow<=1!K)=THr>U^VTmLOe^K%nzoN(>eXUbi*QzR>Fb(3j4 zpEig!zpGuD6aD&RYFQF^gVfsj&4-|5q@yt0NfDrPne(=1i0Lp8qRV}jaG58&-G~F$ zPEQ698P0c}awVtvr@x%isi*^LCQ5it9o=ox5P=GPoDjLu8J4zt5jz)6EjBuKYIuuB+FM9w_`|5pPD8w#GQ&7&I_i%Q<#We&D1{-N zLL>Zi4P?HDVooXvB6Xpr0_XL zAlfguLk(;CqSK~IAQJ3asGNH*TAK_jwN10nTvnDwN8b%;x%FSVvv49~ME@qnU zKBX=PzxWo5dT2{pkCkmZY^G5R21R4DF*{A!{3k{vBz2S%`Dn9~)NKp#lKqoUL)3)u z{hpf%@nXGnN_%+V>w)al14UV06x?@8_VNUgY?-WJD5Di5a}B+Fr9_1)7UZOn8=6TM zigq^JE%rvHw2+Q?ZMOaa8hhEHYFqts)l!YwW7))4LuEZXi}4J#_zeNvPU2D+qd69v zT+|Gfz`bFZFpb`ZlyH-#hGcrs15WO}i37mlw)SQ_Ey#KP4T%N(>wNH9YwS31Tgu{r zUBgpAQ7Gv5$63P`<#6QOjaXvUPkidzCjW3QiF_Zf#Dvi!NaJ#TYa;r_W!SH3r`9*w z&!W7gLYxC`j`z#5EoS zybfv$hJ_}NhhY{YwT>kmWKQ1gW(CZ3u*D6UYIHH-B674AwiZ|k8vVp*4H`r0(RR@c z4R|TK#>NaJ8}V8tq2(#)1hYOv$4G>LXzP%`>wSB2=g*RIQuR153dE@9L|^E2^s{P* z16Ni0#bCw|03-0~g3$BuDLuE2MXZ+w<*g_U(W!9~2BehX$Q@-yQ80>WYv((JiuHD( z5xg(ud{?6rwY=CKlKOBy;J9;UuAkxxrr!{0Xjz{WJOXe=3>6NIa=`+;Bli4+zF(-D zScVV6ZtoE$N5g9#3ef3kmMPSkLoMBX19Cd+-%LA$I|>9^=B8uMkfhGi487yP zGCopSBD!LqNFYHM4Mf##o12?OMxCk#)3Ky9168uwsnXY;%g(bZui$Etx9ZCdnmnqG zJ8mc$Yu2x% z!ml)MsP@OzWINirN2Bx|K*@>vWjBo~gxEo({v`i^J!fq?bSBY6#H{&U^6cSyX7L=( z2ZTb!63ybkE!Qn1U z+x$`si39hDmEm4t`=JGY^@3Zo!73&tMZ_wx-9{u9fE*D{N`qXN1fNOT_Sw(G9|`0x zDGa75#7avg^{$4wm$y3EP(~`7k|I&T4h2ZjqAd2V6Fd`j9O|Ie65U^!LsXF$vLLc@N)S!tdboCOkQwmi7K2RV0oLX(x25Nhe*AlSrVK0 zfv5fy?;S%_$j|yO>&GvI0(=OwBKmX_n-Sz@A^CeubrYkN;I~&-Ge~O$GU)7ni|%WD zyD6OCAZ;SiF^c-RabW{WwEWRDppNP@7S*Qwp(R*_Mxmu0HB)FsXl1{fWRvynXZnm! zL*+_}&m_4h|7cz5!sac55I1={j9d@UAYCWcRLMq+PZW>nTwhad z7!iA27Mpp7(T9SH8mJg}sfhXC;!-!lb&3CiEgT1ie5R`!fg{F20AM}dn%YC^#$$eu zS4t|EkS;kwYqMM<5BvdJHiv1o*A@vc(kyWJ;k=MHhcm%$!bbgueCgH_i2^A>(nb*g zq+{VZ0eJ9GQ_flC{j)MiTl_~mIzm_^*@={m+Xzz4zZwkqhgoiOtCOJ&*Zb@TTib{L zUu8o9UTRx{CfQulLMC?RLVGxP}{g)I+-{anD z4Njq~esZ${%3x=Jjq|0TkyYNyvs7Bvk(7Qv;|X;%uCfu(VB0nCoI_~NkmNsUd^66qvwSV*8_KCKRR z7%O9NZfno0(VJTP^VIrxY6LiWO-xLeX~%y2p|3}6O6|YuCSYC0W{Uq1dO-ziC0D3d zdy0anOAV4yUGcDUYP17!+fV46|A-_LWCvDYU|r>D`c+8q^U{fb9uJgh3BO6SXTvib zq?fe5vc~q>947Q|wm8!qNj$9)VZl%~$4EF?&DQ5~r%)F>XaI#=N$Q|fLDj_1bQSbYHaKp$Z6bH9aY-XYcL<18Ysff%EEC!K zZE!t!(pajv`tSvvtuuGIGAAGTi#rVn_`rmACdj(;a_& z8Q(Y_fF$}v3vJJlFY2+AUjn|&Mr`x3F7XCslbNDikskXOT{>KGFRPNx`#&{8IZU-x5UtG!V3EBBaOUCXC|%DozZtRZ;g@_>`l zZYQFub=GrPJOwtE@wKRjei3z@X|xkxx+q}WDE0{=uW&OZWBO+l0%IIfn%O0z4=)s| zBV~z%c$_#Dh8Q`IuM2#LiYJ^?)m~x+_TLE+XLZbRwY=# z+GNcmbMk)W9fRM5IYHjaaG+!QrZT-Y3*vOJR+Geb!`u$%O$(t?$%1wJx!X_z0@lAs@e41 zjZ~L~AhE3HZiok?UOD(O$=C`+lvR<&GX*Ubl3KO8(0a2)XkLqviy5-I7N4>c!DvsnKqnmFPSf z@Y1EpU&>#ci&wHsKJWwXwLK5LouIPk-_g^WN(FxK^v9WBWSp=VJ`e*gZd8Kfr=4A( zDYtS@nd>0vI(kD-!ZNqBV+wbcNP7FB72ZDi8y!fC$1=&!-#TM-owp*`M3)%Nn-jf~ zjVMEFNXWktQxP2ewtFP9MDDI-G79`!Il8jcc8D?dXkqOhb?E%RO%5ESbv${c>-_{# z8#iC=1?8Q}&VM+w#VC&d=o69DYEPL5Yn{p3&fx)v6!So}Y86_-;O{@3e!A?HF-Vwt za@*UF9Vu19DSSA5IGXG&8mt_&F~*MlVBq)=IBM#5Hmw=~S)f*rJ)IIudUk1Wu-ov_ zCVL@PS7e*yGBJTu#l%Cj7iYvovXN<`sPRHr@G=l>y?Z#J!y2moMfFL}Y+Sd6CZg|e ztW|Wuw+&I&Yf8d^cf(=4uPD@yXX7oSnz%qc*x!~0xwOaR&CZ#SV;9S8 z!0;m^PVe5-E4ec49o*02_bZ6G(MCIq3a_2vuXPV6%vJ4Xr10w6kiz^PnREMjxkgA7 zs!nO{A(04E)y|ZSvKn`LByovcED~$jcN7-86cJ-pTsXCk4@^m_c?Jh_DjtMC zKYI_b&z;z-n5uNGo&|?TcmG{<18OM1Ml2Pj-M#r*9;BFkiarps2fO}c-DQ^Rk|S2U zoViVmWxgWre%@zYS5miPOuOp) zVrQKbgPXr81l!`KdB)o^gR0Q+@b`7LtuUsAlFW@oDGRUzc1IO@qvC&hF%P%i!P2~c z{=<_2qlO4nrpM_TRl7XIL?lGen&A5Zb}OPH01~g3lA@dwal8zjch#P&$}-{ql^kmH zb{6Rxcg(PS(6(EIJp=aS<5-p5jFeeT1ruUk_Tbt5Ckp$5s0B4QN0pl*b&!5cH^Zg3Izy+1QCh|7JT^6t6W(c5Az~Jzm zWx*9EIX|ss2st$a+N-8ZtBhMlvYL+$ws~73&Zq!j+WLGzQ~jVG=ifj?BpozC6EfFY zvQ)36NM>*bzXFL1alQtIFspJyN#z%q8vrsNCrb9o$hr{X>E~rntiv6>9-(C_w~U8x zdjBT007!ZRO@UWng$8}Od-2z9erG%|LS2#rrZdW^J#&LpV-}Fs`8aszq&7QC-kJ*O zcP@A=YIYT-898FD85P^2B&3HjER$$Yop$Mqkq?h;qsq25Rl>XZgQx6y)Ht_)>nE(X zBPgn;OVu&75Q`9Mbs-%Q$sgk7ur4qZ0A-O1{EY0kc4xk+XR6glrs5@MI-?5Oy&SE0 zrV!;sPrHpiO%D3NgsF8;No`=bB~;$x|E&AfJFg&zFS2~aeN929ta8WG7+87N zW|PBNQs@nrCXJZq=2l_O7g8+xE}!dWK4?!#SU7}# z=HuwtFot#)F$v!%sIdm-pCeR+b?7+`%BRr==5JHyiTr6b^ zUoEhP{3Rl*WhpgB;I)aznUl1)nsAS^Tj^d>)ovRuh3@A;CI)imN)&LN4sA@Yk98G~ zmxVMqumz@s$;EyKwheHa28M>6@d9_QWMMl-ya+it>x25DFMq%2SGO@f+bLgj= zEklKQM-aHVAR&%K6^lpdPdlZpY||0sg=}|RmR7W5sSePL+fG0KKv~G{#@)iGPZ z-;~V30IRaT;gA=31+I*b1Wa**4%LJtc&RWuPN#%Rab6S26KoHM2<0Sl<9538#NqZ* zSi@N{r6g;Rz!Ce`l{%2^0$4_7rtY{b$)5L`_fGNT`n=@tOHYJ^iQxq6DC--dK$ZMo&!TF zdTM^Keo5o+>G84=0}^%!9D8`wm!S7RMAE*0&H3qD-5F0+369gD_uZ7s=%)hfGNV1|(5y=!wTl2)lso{e zDp^;BE7#wpV+6Uq8aTJ~(*)TH)L{%a^dkI$-dqi@htlDhsqAov=b7L&GFDQAv>e|! z9|6UL#b6r71hCOI^F|!4bBY9mbkhnjk{W2x-=g|ioGKyY z4x-2KLN-c%C!mf04-f_b0967&uLD(?Q(lM$xLv>_JicVLm!hFgHr1b$fHSu)M@ZPY znJLnKtkDrFK95)CKN#P*JW(@!=;10>r-5`nz6>ZxKW@Itj37tcU^4Iuqrb#%;>+R? zDuEi1j~V^0HjM+rIxnfgf+s?xA7h~xNU!VDl#7$(CZ8>>|uiduD6!WlB~%4XI<+@C7wuw`a@!b<&8pg!AM>@mhO8~LKMF)vuo z_9EkhOy%?(#p?G}Ia&8NkW&`f8_BGbv;$zpd8^w9r+IWoh)!h;5$8~ENnjVHa+-1~ z|8#w(cad|hrueqefL4u$Of*$%-I}qIkNo4(Dc?%m6rg1)wWAy)vc%x4Yw(nguN(kB zpAAzgQkv)W>#@QZ>r^kD_beMSRt^3$G-K|0)9l@^XP617;AA0AT%UQ&Q!an2)OlHK z;^M_y6`CzIfH;WEU0wGlt#!(Plo~u$muBt3Fc@qeC~m=DG=Ei2f>(Boq*|XhsHtL; zIyYt+K}O%F4MOw==Y{8pLx}{GH1USQn3r-id#a+EEKiP?OA+P``cngVM-Kq{j$G$_ zTBmpmM=->JlARC%^7}#kG|NQs(6KP_&&yrf7k*}LpNIH;HF^)zUWTKQpO$pBcfICS zaQzih*K=-FY9Ey~y}NMVL~IizdI> zw$S2*wBI$E$3o`kvIu^VP%pd?RVILYQ+86W*3V0SdPR}b{=~P+*19}__p335U!&;h zfo@H+)TT<8>-$JFz@%<8n`?==IoG~*$kAR5dNc`Faw*$wq*c$h<_}Agk;+`#8Dqli zndIAgEZ@`8kcD2r)m#HuMZbHadsCuzT>hD_(2%$#op~uKYyyj-;3rE~=F>eZEh-3O zL0kVG3GIetE?u8;t#F7_$?FhC^M{M4Um#q*s+86?%BrkIDrLW`cHt!a zKr;N>ULpTuUZMy2G#R*{nIv0kLSw}JqyZbU$g>-~2Ckt-hYj!_xq~FQ>&bU`>bD>u zz4RkiD!|#O+{|r2ibQLvVqf|V>uhkCV#4*Grs8BHX4xP`PB(?vLusFe5au$P+qh?O zHSvZe9B)aZ@ZCN&Oc7o%gpAcq(tQQo`&_k==!i6%s6X&(V@#M;>U0w7C=n%w6qM}F z;8X-JC$6Poe2kzD6H}sNlsl4p^=h5&vQ_v2whuxG{3n_Cq@dF6T?CUFd<~H%2auB~d zzrTUXodfxCdCsU?C5`e>Re%^gX`Z|YZ`*6_=G<_O`1KdegiaWW<%1_rxk8W3R|qQ% zx{V=SC}BK?LAtmD#?~BfIn6pR&#S%4WV^f6X7Bf!Memw9GWMe{3g=Havwha}2U|*2 z9D1V6ExpHA?yYzzqf$O`LT3#!<$^5Fv=SlZ^e|^7jG(LZU91o}Spxl$NuX~E?^P zNuTB}1{@<0XWJj*`Kt7Z%mudG<+ac;4_2p;dTnMXG=dyVJ`GtM2{~2ZX+5 z_9{72rc@HGL!4_eMIrD$W4pymqKL`B{B+)#k8H|zeWO{ z@Wn0hBg`M%dU^Dn3ZanRE~q%7VcZNMZ#RS7!Gr_A)oi3DOZxtrVLpceAnQl{Bj%7| zjf`Km>2jLy-OK2cQMrX;$j!m$gqgmNWzqS7=xEpn1ztf}a;ZS?%@bO=g;z0V?<2Q^ z#2fc)WegiJ1OV;+put0+q%vsIUghvF`T~HEv2q|!3hNtrZo3-oz`&LHmad8e??>ZI zQNEdTxM!Y8z{rqU)+(eRpB8K>JgvgAY>ypu0;?N@jWHQDpNR?!z``}KX<57>X0vqc z#_ozkyp+)Z){o4#(Nbn$$8MyC`FfV+UT@A^+^NRJl{}BwI~)(Aqj|>k75#(@G^QNT zN20ma`*pK)#dPypiuB~+>%P)$nBZ}f^L&t1AdE6e2?Y5Eqkk7xsls0;#P81#OEkao zF46cS>c)2J!Wke+C5*|Ehtyn#3>RSnMIDRmxW-ieSo9U|^*Sr?J%(cv+$Fq&-o;$> zb!Gpwa%;=yQ#}@q{1}O(Ezf5Qmr51C9p6#c4!F2ogtqw(6P_)PlBZidvK03!y@6!4ei#%(xlNGKr90z<#kbxvfoWCOg{ z7$bAK6-%?k zTtl4JSWtcULw#y#*a(pALmpmVf&n-~G(nsEUl30yoN)xzL_yqIzmzs_?DT%Md9~*0 zEYmEKL{_qNHvR@qz<5r&&VP2C^UjQdk>=OKBlRkzbp(%~0pI95yT&jgs#)SiQ^FXJ`3BBvb4 zx1jizgQYT+H8+&itkIp6{cKQ7uQqu)^%41C-Gs=h=cC?$&vKL0pOEEt@G+L(-6na_9RHNq+un{l%kfF z-B_#fQk#hGBYt^}a9*+QZ_J@54!6!6uWIk3e^mJM>I7a-n7lr%BK@c62vX47Q z47qew2w&8-*eh9Dx(e&~$tYr_!rpcW`-Ch4q-)zO%n%%01cqWk<2Zk@4-GZ+5L(fi>4;NZa6W>= z(n#lNS6PNBgQAJ7R^0EET~#Ak{gs=8dag6rA4yD{zM}XEuetMgb3`opookCBOAQL< zU6R7G{NApt&L8az&7%bwrX;wag+Rpg^Jxu_%G@s)+mvENjunI!U532;CaQUO+)vCs za#Fy@=~sDoP?Y2GM#8>L9^P8cXZkdhUyk8KOIW(qJ$$oJav>wpN}@o+B3qjz4VUd zE;zbuOJ>+nH1XRkhIDjVn&py zo&5G@!>DTr7_%IACJ9kN`)fMBC1mogVq&RS-Y4oBn0`A*EEI|bi&dT;$v*gS?7B^iqT6nP10EFYRS4DFBceuBJqG5!3JyF5$ul`IamCwYZ4- zzRTd%JA-q4%m-%DS=cyA1@H&oM{N&dYEMlbjzER@fRybROwbz@8p56vV0QEv&$CBS zG=JQ7Ym9Wtb=B#l;tRzt`5OcDtI)nBpzmcl)|EM%5$vr_CdE3`C!B`2R z?`)V{5$(47YgPRh=n)+mfM;~yv@*{t8!VxQ@RKgk${2+v%!UBu z3-2rjx>lxWhn}GONH&)n*KnO(8f9BCexf@gJEt8V_0ezN4UhZycv3&~j2w8uJB-nd=IAmZS&SB}q_;k_d4&vdU-6 z{baT22S({>f^FziN>90aq#83G$cBASsR9Nry>NA$xK0Q%*H@UY{Y}g`H&cPAa7Y!u zqMdoCgyxP1QVSs316ClD6cg7?SU>SDZPduv^qp_4P-Cs9*(sfeOo%;-A$yAsI|utM zu@T!KA#e9PeFvfQFFTtiK+K|`p3A>mNBip8dN>??qdf1uU4=mOZ~%tmHAcGI!ZTT3 z2%8m1Vipo~>sh<(*BJS=m*c z`eF~c{$#I=28ba)4xd(_Y5j6?Z`9UryqZkWQ+XUrp=wt-;ph^Np=O^p4;+wl4S8Iy zRxJq&U7ueoh!UCz1>A&DAl(IA01fF7?$FP?-@pi3C1M%SOIJp;*EMW`!DmzzeLs4U za74~huMD!$w?(datz`MC)RK4P(H3#OZ6hx`?<85+*^RS&ZYU$znlD=!IH-^|Ud-E6 zVexCI@R1P`jWfa+JBNbGJP;8=TZHA|J%a0reA2Mom>|7FUm;0V>N-*vAwQz{oX$0( zBo`r^IMB2A|49Cx=bGD(h><}=!OGZttPYg{&+S3HeOTT+c`8YBJ%RQu;Oeq(C> zz?3_;v(>Y5PvwG;SU()r_ZqJ$1yJejd_N6$Y10uYfU~x@6yY7t~mY zjaVj9yKm>CCS0-L0&_Tc8+Pl}y4NfxkO(YZhCRcgAwHRX;#+#TolwThiv zZaEn1fM9z(e2t_A&J-MYeLS^eDe~P6k4(z8n`-?j-*Nf|(E=64jR#}zF5Y$t&xo^N zf(OTN$m+0E-8*|EWhs$#b+{OkLcrnOAS1$=jHC})BI7oL(cCYw~?eH z$P7$*C4#aO)qEUfUTFyUWtRmj0%s9w$51u*jQW|P{O3l>A++3zX(-gTLuV7|_svJn zSI$Vw)QW+bgLskm4{odtDx8DmIPM%Q~P*9Hqqf=~3jJVSb2+ONv{OlmsZ!93B#{|N$ zd*xDD2s-n7U%>;C=^eqT~_(@gcR4yG)UL5IRBuKh>ad3GIgG)=@Vf*S4I zIluf6wa38RlVAPoFOdL%0-)GHp)+@Tn>uPbgZ~0iwu$5Cj!366=+}tA!&3eAMOlhg zh+#~`&CNZ`_W!>0?*MdhowaYLfnUSZ+<|1vXb(4ZlGcmWM7*H`z0kR0Vy6#dA7SYb z+)Q&d{eu{>?3*hh*7Js=qb@vLO=W~U8|9;OlDlCewDT^dDlf5-#Jni#&b1e}AU8GO z)~MR#?C7|f#UXd&>uqp(18y_nzHb3f9M~wX;C?+e;93=38Fst3-B&?j!q_rl`z{q? zBn|%u>`(}*^jm*hW|fVlesU%dvh+P#)T1{zX5OC#3h!I^iGV1_7+QMHHih-Rr=g16 z-M}8$?ab$QBQZ-^Gy^N2x*T#COESH&vgAS2jJ#^}nIei6zqKnDc1xDSd!Lj6@a!0w zt-wA%XU&`rqgHFwmzWB{W6;;nIrI$E@o{$v26lWT{s3a;b`k=ZHdjrk+mKp2e2U`(Vw&@F!KfnZtn$1E^b?X>1tgC7*4f}y!L>7kHjR)Vi-!Kz!)m+rs^}|_VIkA{%+x-ls_s(i*#p(Ct)sIA?;AQv-K=I zziVya02f&zTdw*)0Y@3Q=H#~)D5T{?@uX+!x$yB~ZHN{OE119jnmIdfQX>5pMyHZL zhmArBUD>MT@Yhb_LsW%pZWBi-)bI@T-^x3tNM>U;r1>r-*t8Tl@_^q{5WF?#OZ8d3&n~hjr7?Sz`CMWAaS+xI8eu3ry)i z=@pBme18C|Rz6~q*0rp4>yqLm$Fj0)BUg6<=tpN52lFuY@<>6w@b4}ldjRP6(}PD| zToSIZ?XQ@Ys3%4?2Zaz*5N_RdC;X-+mr&fK-oC9{)>2S#Hy!&}lKAuV$#^jPbDh1D z*tskN^D%L<4Hg;)sV*GSL^bm0yQkpKf`N{L$I!*X(R6q>K7a)=|8&;r=PB81zM@%# zyj?3az*wVD?6W~isIA5tg3YQwA&dhdl9p{os(8(t`dRV&R9iwlM-jTg@B8&79-Xk(}GdHuMd z^Q()GAuTFh-Jx8z{G+<@MduuwfKqS7nRZ_GPqDu->@osI+54aQm}*t;l7_Y zcZ#p2II&et+O$ab!yvXUoQr8Lij42>e@_HeuHz?}BuTApGY$8e5*f(iUQi?Q!_ou1y0Ow~Zlh4bi$dOV4BjGwrA8!a?aTpgjqm{0K7eJIVO(~hUR z{ix^y-hbf|)A1=G9h>+@lVBadNh&!la{ha=7T4kmM$~B~&}m^ktazFmb=M=aa1A7M zzJg9EE1$njzuryxwJ;b^zm0WghQi4&+Sdh5oMBFiGVPbTu23(R#Tsjx{4N5p9D{{f z{vpxiP4&wQqT;>SznGh?Kq#$oM-Rd~LU1n5+SE_XXCnh(3;2d;WC`J8ZCI0q`!K%i zx;;{$DfZy_NMk5|AIs%$RTxm}rJxh8!A4;mFXD{*gy1IcG8Se$Ia!LTE8@j@+GkN2 z{Ii0s*nu7-tj23fWWvw(Lg=%a7w$Jyr*V99vNiLxHrqQcCOvaA6?qW0MoDp&thOt< zh2k8qSc(rjn)+G;OMfIDInwpV+Ac%`4j0m4tO&fzNn z4Rm`YiTN{&w?7Az*(LS10KT?yEoWeBNVC^m2)v5M$H%H0(~%?mTV}05YBhujT6m;1 zneRWQLHcIsO@q-G$%G#0dOHk?;wWb*q{(d>Tcd!&LCNW~ioC|axzVa+qiEZd|1&^! zhXr;ne~6F&Yuk7z3m4nJMGqVcLY+Nkl_WQ00@%8(_4pD9PGMU`Or^$v0000000000 z0TpIM!P<3;U^SB3u^j+<5^7^@JQGNFrg&)cqV%2W-~s}FoY6L-k}xM;OfiWgzUent zv!6q4iE=$%zRztk25n)IAnn0$jUK?{aOG-(k4uNlW+NBqD$-g}7R24+y_AR<#3;&WAPivE&=})Q)tV8G>_OqqdLNGtA!Bqs;NoYs#%I8y z8BhGFvQIp}fC{b>%+oM%IO`D*G5=iihJEtEUkTn{! zohGW8O}ezw`b{*fY{tO(q06>gVO7!DI)IHSTn zi;@9b(p@_CTX72&n!yQ1b=$KkkiU%)fV!QR0M|`^J8-AW zIC>9QKsUs=HPI52D=(B>Vp)+`!5Do0+B=eK#$Qkg@)e|?DK?zg#b%{vuw)py^tF+Vo+ zU2Ml5YCDluWx40YHYrg+Y;(KKH4SYzxABFC*7^8rcgD;i5jQ$sPTXeQK{8dad0u~O zj#UYCY)bsGZLqGY+hVt&UdZmhhO)rVnWm9%N<1=#_ozyV3=rO~LjMr)wA2N}={h-zGt$0+=cQPE8=v27_-rvM`YK;7{;yqK;gzCBx z?{>H|Che?ye=QM#?-O`ZfbJ=%qN0JNerz_$*_kuxFJ3X^GDAR5ZHOrl-e+*l;sCA~ zCU7-Oee`idp{rq>(~wyc3mY-Q8*(PCCI~(Y3ka zXx!A@+meXSDlXxD~lg?+xUEykIJ}N;!d?=_HlqceS0n6lYL+&dm5QfU4 zH@w1tPXLKUN9Lm{(L;$`lQ_Qi0|)s2<$H-`r%FG-;P!&ge63P(#7S|dq!m}?cOQtC z=xGxpk=pMwy!hNj-fudNO4X2=n}q#b=wy|?)k~(L8GWn!*^80FY2T&Vc78p0;-f5k zG>T?#G#Lfm1VGcTcq|A09PO%St_VGOrxc;bM@IQ7Yy=ibStgoUgN(t|V+obf#4~Xw z==R&-Nb(f?;dXGTS~_Pnm8zcBEd4T#2%8{wEykU1M8AL+7X_Ro96hWWjgp3oCH(|= z;2pI29{$ErAlFsqJmcEKzhb)syN>j)A>%6YA}PsQtsD=48tqUtQEC(Gm80d)g-*GD z>{+ldasuvM4cJ~KR_kXPy!73M$oXO ziaU~<{wN5G$zi#RI4tOdfh2Rtapg9e?Mj}w&r5?*I=Hi%ySm>r{rp@h#9B?=HETyk z8~}TM53B+!p2jYL0=tVt00BKLrjj0bH%0CMah?f`*R1qd|tU1?-XDFAZ-$eFQ5%u9;P}6yNZa~vhqJ{nO$)S zbF9O{aG^|4Ef|XrTmS>1{&r$-Zbrr2jVF=M{VYFjM-Ya*L^R5zVj!K{1<&e*Ril zZh}9;B@77@XFBEf|L;tqX=grE&8BghVf21e2PGOiwL|N+A|Pz~MjRV4+bQ0m+~)6- z`}*e;3p*G_DmB~b3|0jg$T2KJoorcDWo>xH{~)w1`elngV#@09q=X)vvKKQ6m#fs; zme6(e_w%DkaOC;32&6?Qs;v?S)>lurHJA#Ql~4-=$LGerO;9lW??X-=Kd?U%4-Roq z@wB0e$u{WvCzA7ZDz+SU@>>|8eUhc_v#w3FzL7Gv4X##MDQaX=X=@}`xH0Ur$B@S( zK$Au#_po8ETFQYM_NwvD=!V!S=CpL?-5KQ;F%JIO0`fdE!Agw=X)#6jb-TvLDv5G9 zP!Vxd>`F5t(%=G* ztBP&5nG;bVe@@KJG@XH~;o<@yF@%`KtYzu?>1co<-pG=2mt20>w4@rIJBuu&<8EKX z>iMNBHl@DpN9G;JX>s}CuR%0O9!UMC z$>R_D`S?v9R43e3TqZ845;_P1`9e2AhWf~@d=+3;N=XwX^IVJDz%AnWzAr8&Se6DDzE(+I zU5h2lHgUGMujP^^9(#H|ANkCjXFEQ*g`1mAUf%B^B1Oa3ZfMHr3)aviDV0_lEJtUH zWOeb_0!+mHkdA1esY>h6R8WjD?XfU)t=M6*wPd}RdGcbXU(s;Tao!%i&^R z?CjlHDw|?<0~ztbNLC!WyS91oi>f8i<5xq73&RaRGhsvunLK%i`%ciCjI{E9rQK;u z3ctr^(^|8LHja6i_ryJ?;AX7DDMoXyTh}638+KJR|7$k9`XUs2OCD%n*1~-!6>|oD z6%y*?bjf$^TxI@3lRECk$96es4_1^xZ6FOTCk_O_xaC^9Evc=-qq@ggRfT)mp34Lf z2MVqaU*l+>*>u$777H9_Y`%xf1pXCJsr7R$r)fV8-+TjXO_4roG|NsIeXC#wdU&r+ zdg5%kwNF9Y1MdQp+*VkqZhcv0U@=@7S)@+< z1KlH1x2=|U>j$RZ(PX@a8x6p}%%|r4d{0n?BeMGH+hoqV04oquVJ&0LLO!An@3SI% zrZ6W-{#ZGtNMn$C!&YPegOpp`_0Elfhm)Y$?mF-plGH>@3-M^a(s~}~r0;0QTx<@U z=20Yvd_3ChzJsU7Cu3~NEs1svysr{o{fpHQyiJ~hn7P_XgMTZVN=_+Y_q?Uv<)G?9 zmnfnKUBN179x3zT0UiDj78*rU>o7Ey=cC%bAfRi{ji`~Rz!=ms%Nf5mj(V>U8vOJn zC#hgqgW+NMAPj;?wz0Ns?9+SpOqf7pKeow&{?{wxpxsas{e zQ!?C0-pAakcE7l>eGRbMuo`Y6s5@&tVfAb>R&@aNE}{r>&J+MBNzQiIwFkvxUGd9m zwgyPv($0rT;E=6Q!cJ{d0kWiX#>KvQ|C``XX&gH|HBFVCy7iv0d73QB_-@y74z#$a zd*<}V#1DfCe=jsGBy8AIh4Zh7$Yy8z)22{(!cB~4e2x5I0$l(A00001b)5$A01YI( z^n)p20iYi_s11z}01d#w8C8Pr2^lZs00374DGE==8^QIA8M<_>;2-j&PzZxQdZZ=x zOa;Q286VNV6uH467zU*+#6yk^V5-@AgmUuQ**}>lcK}qP1B-r!rf{8@$p%X87taCw zR;+94XVcJNus&cVF)lDfbMXRahD58jk`F`@iU0wQV%&5l98^5E{w!>hoFy%_EbU#o6ed7vI$i1L{-SCl8xW`L|1xXpz#$N$SsU@K+iuC zV^-!I#+@#B)Ehn#SsXB~o_$OYi%Nw|?$2hOf8GC(JZHQFze)c9Imh zH?KGTseIoezwQ*n{kAmRlMeNUn5(a0ZLszwLS2|IP7O+}%1jHm|?wF*cNzh_?8o=;cRPJxI3|n$NQ% z{^Jrl5vf<1EJ>n;_Ic(ce-*jo-qn;&|AGB;tTGj5xh0!Z{1~^v1c&GEY|9_pD=BHM0O#u5W zd-f(q9%o)giA)p-LiW0eo#Oi3`fgn>J%@eKD?`c#QH49b-AzQ?j?-X+M5l>m?hsPQ zF4Xbd%S6Y1dKG%D)ORXi00>KxGQVAd0~o9lzd{BOXA{0a<~gPC1s?XO*t@BC^Hosy zh;&lY;39-Nx53AV;ntCj2k2Fi{t`WtgP6_zmzh+>r#YNL$K;Fm;pqeip|S!NPksr-4C5SXH)_ zsl@Ts47r*r0HD{tP8RV2>+@y%ohRYGlJK`)Tgw+b@D5nDKLY$3&WP&&?cdo{DG)hQ zTP85+YI`E+ii^$-gXyK@r?-NQI|7g6DY~`xQ0Pr0qcKBC;M=)`z^r$%^kBn z0W=oNz!ql{zzHIJnyO||N~HmTp1+h#mUQmUllKn(f25)$g=+aOP#r{)CoVr2c^m=P{ rGR4IQr~qM=xaGhA0QsjB5EKX^s0V^rO#lEQlLb$iEP4SVMt}eS0m*-b literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/entitlementreviews/wizard/createreviewreviewtype.webp b/static/images/auditor/10.8/access/reviews/entitlementreviews/wizard/createreviewreviewtype.webp new file mode 100644 index 0000000000000000000000000000000000000000..a17c0313c142ac75799a00a3ab9e157f856242ba GIT binary patch literal 11160 zcmd^jWmla+lkLIX-QC?GxVyVUa0pItIJmn8cPGI$1a~L6OK^ARoSS#%j?dir0k=Q& zs#R-sbyxM?yZU)FX$dtQHGcB2zcxD?L>>gA0<7ZL^bA7POe$g3m=g zg~x#&4**c=hwkDGs0R#ob3Wa^27=#$fNWs%GkI{%%H7)tC{cM^4Gjz`Bm?|iFjjxKksq?0tpd;U%1JT+|X^{F8-UD!3Xcz3fQ!vzX_DdYd3epC7UE(d$ zy_qbr(7m@6;?-|UfPo;*cOc00(j?M!ADHq$b$4|Qybs*!?iI}dYlDM7?pDzrw%~h$ z!3F1VA5iajAhf%JG_V429(V#41sefaw8hYUdt3S;v;pF0kjwBeS^y&={Qe3jWIY<&g8J$p z@`qrDFvw~^=n~8ibi_(XG(FsQF~)+CD;nu9kvK~8FOO9AYi!BYWmjtm$UgE^I6x!m zhlB2b6Q#WKO+hv3c6uj9`FU@9WrNx5IWvQ!CCZex^VOy{{;k-8;=dfN>}#Ye51~={-iwCmWSpD0BYVM;wJF|wM5tf1Bo@u9a|7a73Dk=rwY6-x z1VR_xxMe|J(f<&u+cD^>==#9Qc6eNI&0I{_zdmZo3eZ(0j%oa)GrjmcAoO3%k!z61 zb|nng9Q?9A)#f7J9j`~Y`TEBfE(TcJP$+0kAtYAdHc6ysg4Itof^3NDe!`8@pugv{bldVoImAG9|E6vqA z_P-(ia}I13`8c-(PU_?Hh$s#ZR(1@Jias;MO`5WUE|d#Id}y`COD_DNEqc&O!Y#3V zm0K-|7dDfNSFkv0FU=%72YgqXY!k4KKEP{1n_tk(Z=q58?B9cck---ddLbi20Sm*g z5M~8HV*J4QqPE)K>)y&g>WBzjVJOlXz+!d>A z(J-*>?gO-GZ!|aLh0Dm`wzW*lG-Z?yr%+SKrYAG%Tnh*h8IId0ZZRFiqSKe;DV`X! z0~S!ck-%=MLO{xMlA1%L5T~7LqbVjLipx=i^4|pa#KnIQUyqgETSlirAWCW@;x-!W z7Wz}mdyM{jFc!iKn;Gl^{$lkJ;d6la==IBqC&ObB`S81KL`-MQ(OD?HMO^X#eowoa zcLaT(K`e5-=l2x0e_rw*;9YfZtWkBM(r&^&ebisI-kiSkObA;F(@OpkUXLrqwB8LnV@sHX2Z+NhfD&5>YKJy! z{-+>~{^SoKG8qVHDSy#6X;botmLEW_j67k;M#19z3#|ZgYR$Qe4Q29}eyq?Bo1g_w_?eAI&D~!X5|HDz9U%}_FANCJ6JB%Wt!*F5wJ_%AXgSfp=4(QHmgcCA ztECwE7dml@vAB%EG9fLsi&=5|2fE?bDVX7lIberiE~ssf$$>`6IfF-?4SvrFc`gqV z%o@Q-AW2lYTl4e?!=YEv!i|oLiwrQbVGQ`rPYir2WD8c)AOXhP7ffPE1`fc&{xjC| zW@JbE_HF-h4Ji-~fl3PndW9NnUqNXm|H>^CzI-x+U1U<3e~8K7G}C)y7Y90}`0$$^VWa zoY^8`DjPaL4KieR4WW^;mDZ)-ziJ~CL&-jJ1@S-RG6J=wFLw~$ z`WU-uvZsuBRw^@Kv8g4HeTGp@qI5Z(a4|SQnqr;Wq-EBajGXb`fcbAId%%wT^7rWC z9{xf9ow(vHXpsD+rZLRi?SB#7e}pqtm-8IM`|g1!JNob8@qh9E@c;YvB4a?o z?{VKG|D~n~4zqmhDf;@=$Ft^blZF)dqGLdeZfg8wsGC`PS1vQlK9bFZ3dN_i8VppX2cvVqw;2VZVpOA~LAyu>^P zTJ-3@>*-qeka6Tl#C(B-mvb<}-AceLtKv^eGv5;ub8J4lq&>bITf*~egEAc-1FLe7 zDA)#f4Ka#kd~rbWYq6s_u_2j9zwH0R+u&ac2?OmAIAWco3dcIfNGWVMt z004nk{?1=}Lf#MRpwpCP--POe|FC?(z)iM z;WT*4!l0+|oPI~`pF>k*MnZ4_=K9WLUgPD+|2A&yn6NAtnbMQlK`K}DW7@r-3sUOp z`a)Z3zNrppdDe|xbD{M)=2#*BqAV83yYSO}wOr-xRhRhn@ua$L^SeVd-k}dR)is~L z|He%UVp$#9uTdbO|AG@Q)K-{m9F!5tD2LUl%k!AWobN9OxfNS+yXln9iq^S5yEPoV zPmI~t&WJ4XO6bM)n;EQzNySc+kc&#yYMWZSjr||nnIVQ+`J6vuFH`$NO%vkyIEobg ziDIrLDneI+?08J!UR6>zy)nm{*@GH(?|uY@JlSxAP7LiHQW!a@3KhCKZ$0rka2eAS z63{XQnVib9<=bsqb8n6=vXclc`FD<+7j65K$+~teIpfhs$95bDdj_4n7>19=J%R#c zT^~wKP1DfMVUWjm#hXp?*y3K3J)2%lQ24HP3R}C^E@<5Mh9y=X-QVO-^!0h3>(b#C zjuNxV)=fWfW@1ImbY!%$JHC($#q|sZPnXE(NIp=eZi!zNUa9j>Ge8aG@kd{m?RL?; zdRTl3@#X6luc}6_{zYz3dn;S3aw?ItoA+}2WqQ_x(@#ef*{Bc8tZ7JOP6#6{@;Sd) zz`a{stnsV3du{4HPJsev9RqjI_m_|-mLBw#-gpuX40(cZ+sZM-_Rj~^*Fn?1?GE4q(Te{PUj^`Tm@#s*p?llY8uzJ?5NV&ZRSe<7aorz?vK`_+!JRML1MKwUmhJJxP0*#z}|I+0bZAqaOwt94*icy5OMGrgm6v>)X_&|_kYFUo?cHN$!hW37uXGIc?~$i0Tso%V#* z-7~HSfbbx+SNB)0m`(KTWGLwSO1Nvr0sn1R;FOt7?K{wFKU=5u^anou)pvaq`MNyi z^7-Y%lFb|~bSpHsVpE@U;WgyykK;TU4A$42+vhkoyG@10Z&&iY4Rter#)y8Nz5g*J<)MV;Zq>9H2V`1#5EjQT6Sbo~~KVX>gCMpw3iFq6H5sy;TE4;4}#LrxLL@J=3M`tu<;U*c_^d0T1iD zQP}8$r*(2Z9yXZs#G)urd_Znw@2DxF1kDwEa9}}zljJ{gr+5rzcJ*;&?q+%(<%N{V zAZrU0j%6=H@pzpL{F(Bdqb6M6J*iR}TU9qsS-z=Z$$zBAIa)fkUSU9vssgxe!}*P? zftxJ#Ob9h;7Jy#;OORLo{=00$pvW;kn&}5z0RkUb7A_MS(#6lGlNf4*`q%}HIJKx( z$W0{@a5MIa7+U2^N{g6a<%Y5@D2srsqU`F9B{O_!3}TmZt($rffMKT}N|#5p=FBL& zzbqZPuuj#Qe^3+{Ad)OI`IQ;hDp7O!km{{<8qVIlSGRasxLLcYA>wM*ueVw0=Q2x{ zYI7N>gELe%2(rVeMnkzXBL93W1NnSvsf@&Csf&f~t-7K2wBIoqA&r+VO{kIXHKr@_ z(Th!7_O);O8;wB3`RV(eX2LydTSM#dtU}eKfbP8n1yv3;yKK%rsoaB)A;?sis^l*G z`C9=>mY~FF1in^urPS%7 z5#U*qR;+Cc-(>)o)k@wh7MxU z>n7cldu2g#M`xxE=dpq@4NhHrP~W}(G$x>B(O zSh9Ih-B~5!0Jlw*v_k7F2j8`)4qTVw0X~9PZ5)E`b|xF;Q8f+>+GzFGxHg?^w|&`- zjm+^MCKg!^@wJe4>{X{H1=})CIa@?tNgm{v1T}8u{1%%NZYcAC@oVjhAQsFD%*4=4 z0-=2}RptyhCrnqlvVz)Gtn9yOTD3c-LHaWksH$DkNMB_IXL!RNjSX!4)95uo&lv(m zdRY_sfGgEAdh!R08!a&$dEl8Jn&hCAaQBBbHK2FC*IZuF9$0Vb8@B%Gw|QXCRh^EB zz0>O4L?#@O*OXGwGOx3$w;Xu}J8HFFedMH_S2loK$BRf}c9+an5gYPq`TnDRjlvU0 z+~EVAhZ_}FeGYYyJH}(0WPTyW?)<>YAF_wzZ0SbLBRjewW@@gW)nL|iR3vVGr4cBn7bCEC#_+)vi8Jg?DMy#Y$d3xU{Y&gcvmls{OOY21@Z<75q(Z{F;9k9KhLa;*-XtOeor5E1pU`D@A30j7&@Ixm zLCbyiJ)(!AdcsV$73DY} zk0|J`JoK}(3E^fB_6>qQuug=ukuAPtR=-(-#{17DK@PPVGE7}FvkNAXqN1v~Qraqo zL{ML4lu#-BtQn61b|I=e+AZwN2%5cPYN%)o)>2H);RHlv7WMGJ?Rg&Y2diYr_%myU2>Da- zOO?ZYv#bP5l@srR_>3bZEMg@Lx8YP}@4oRKVK%HY2ML{cB5h@c9EBTMjJ+NqX1HpR z7H0+OZC1F?&#^%}@2zT8wskJg_k>+ele`yud)rAX8~|GA^-$-`-V59mXF?;W`3uIo1ThlU~QKOmqA zidp?+rd)>MN7$sjGO*!}-@fr9CGQ4*3p*FSmP{jlwRKP1Iy`C|dXdKYCEkwXDt*JG z+)`%CZ*E2v@s4mokys?#e2uihOSSej&9#50+nxV`Jau7png;;n0vOruwo?@ zcz)wOLibOQLKMkcmSs&OLN>i&yO+9hH-;Ru0G@p5$|eXInuJG#i7M7bA6ZQ4LdoOe z!FM&1?)J8gM`*60QP)w9v|TRMYKWzvIuKM2hS;JHt?@AZlfg`PYp7EMifJy11fJZaa~`(9nr1u_?T>!SMnlK&68M& zH$F+T3M-nEDl;~==t*Iq8@)_Y3$CZu0_;iJoL<8*em)8Jit>7?5(X=nqM=0d(2}JZ z4^Q)iyfnQNf;bxIW5tfJq33e-6F7)U#_awSk16wvLG=^uX_&X5gAIoQz82p#A5GYf z-JK*P{_(AVlp}E1|BNhh8P5E`6?shldjzpR`95qDiK);{-lmp!ailx!c#gVjx~f(8 z@n^8lE-40UMkBp1w7bm^89jveb<}Tw3Yr+^`==fAs$*JD1Q++0mpHs9I=f?b&GS+X z3(?0Wl2evWiggD`9R#_oC66;Se7E#3TO;fXvJ;I8cl48%=Uj0sDw~q4+lhO9ZCfJj zU-rI-?IqH8Q>*iSP+E6cM#xI_jS7V0$sa}))>+4#rC#Y~#ukx9Rr*J9bZn2e${Gke z@u7-oX1sxiff5FH`|Eoq{GyfvL|4-3aJ2l}XqT<{{H8<4v`;juRi~35!*2|E22<2~ zm1y^hfD5~?isQ9gsUrqoF5>+1f{gKYcTGowfuVw^qpcPg)98+Yqk=d6t}h2|RM(*5 z-10>8D!2b|bMrF=likgENRFM&`rht86W} z+edY(X&8MG&(IwC*+~%=kR9T1i@j1A{VXM(-V=6?LNv`c{p@j6@c)k~X6#Lt`5@uz zdndy)x?0mkkb&;I;ssfPt*BPUD{j~gUJf-H3a@;>QE5a|x@Nn3=5UmXHCkAjT_PJ2 zBMR3S{mN8^<8+lua)Dx6^Zg7w^*nANtxt{C=xKwSw}0mSrr#CmTo+NHO?rZ^m&G-= zkG+A@GJ!87OF6Whwx>_=#yoLlP1sy@rc^}ZEcF6Ck2Hd(MsT7tjN ztJEpQ=CTTRHs*}~IMbG7h3N&;Sqa`XkWb1Wbg!`iGL_V)pFFe1D%1GO_YC8&jjj4$ zm&RAEmJONyH`fH|{dHUzzt^%qP{zRneeFfptj92~$WMGmxgTKELvKLYaARSRiG$Y)vfe0>l9KHt>fWTJWn%3@^7 zpe35flacYJ0v#UZgJJ9lx0~#C@fIhn1oh6Z=JX3bxT~9<%#|_*1Lgx8P!Z z`7WeJkEnG*_Q#x=fm5jQ;9lly^HlfFaMfQuqbzwLHrQi>?2@sZ{_nP;Ckvpp*C)G& zq9c0>^~K*dq%8*;e%T{KK^tn7hR;Gq+yQ&c7i+5pBC`atrDwA5BhbH+yQl$y+NM-v zc2n@UJ>_%}YiI zX7J$W980e$_?^^QJZ=O=9JF3)kIW0y*1#%xFR<0Exn-T#a%vH7C!LtMG}S(I6{A{? zDKtpvXmakia*R7F%#rMd{vJJ@A&|>A zMcE&Ad?YM>=b3Pg80Vs;G4Kb@56q%dXZjqD|| zJyNAj$?{qunx9*pJR5U$jYc-kVE`058y?*+)Z8>Bsm3n(Dk$8#oPvB;g!#jAa;C*t zJkia99~zTTHS<0RCJ2T!!A`qeHXvpDFgVO?1G`N_)$-f;)RU}|&fy90N9rl{^fQJnQ{`*QeQ z)TD!gKHkuVx#tTMBs_=Vgdd!;6>lPexllxi;X)Eik2xyr?{{r!TG!mL*iT<5cq*IA^w;RIC|JqhLCyLZ)Iurk=~U(9TxO9GVqp zJ5Ou?&{i&W~vR&|nb{20uu#B@H40{z&%21RGObe_a<6_3x&m?x>Y#!cAEdAKQGKD@_o zgBXz`0T(4C`JN@sgJBpYWpM&K+Y%%7O`MGxzcDk4qsq9YxqrbLN#g1nA6~Ba{4q$@ z*AC$i40FX&LA{8V&x7>|B*F9JvQsGojzMDOA%2qY=2m6hcy`oDD>=~wdHV2*TJqcZ z%OTD0$(Pnbv1oJNgL(8hr+YTK*9E9&N-LbZWXojcwz=1R@2D4OEX1a{v=%e;MQ7U&Pr(FUH}VaJwOv zhwu$&!K|!wEnU}F8mT)ua_Vgl8dVu}XKWDOUQtO{K$O`sJ`UCpkU(Ro%FpVOJx9CpDOzGYhDf-ICOVoA zE@e}*#nR5DepfpR%GP%bZuiu1DnxnDWx9@=>y$0X%J4Q~;7sG-!=LJBtGwS5&l5OR zE7usI*{vE%*Sj$6`u2rbaek>2)x2q8o4q9*W9PW2EQemv1{CGe7kNjR#1fp6wj_M3 z!7X;Z0pq+&CHdq|x?xOnZTJ9MoN{YdM@mCdbI`d2)pgi(Tt;;RQu_EbpN^UTpjVM4 z^{WyBP<1Ig>D|nx=?grsJz8slFEzBwYxi<~0#GEDVMud-~sUND(#EbCwc^ zE?)q_I8EEUX|_-0IY3&TVl9plG{WmTdy61KCLk)lGIM&-XO}Jt%D`yzjPcd7_yLX5 zTFJLx1ILio#bH!!J66XkS68SrRhXlQS->YVCrYKXF7#V|%v|;R2Y>3kucX(9$PN5HwPxn)T(A`abaVuu98>?o>1xOt& z_6->A)8dFL=|>9K^NZ2(2_k7c!k@BvAzup}=I6jKRp|e`OV%Im0SVGfM-99aosD$3 z*>w8}R68;I;!#>T2cJj3)v?!?bw=hs2s`OAb_=A39>gj5erAj7;d`KNfC}F-7VnBV zA|At4v6_0%H?KDTJn%A`rZ3p4!Pks-HQ_@-j?1;yyxH5`Jk#%8XMoY zuX+q*0qUAxMXo8F|FB!A*z1a{^w zF4LpgEEyKWWzj@+DibAlNN5HN@yK>)_&aL)i1CeEw8*<#CVr*O1&3`0z%9s_>}Hn8 zmCfiuYFwLUy3hlKGhp`9nf2VhvQkM7yZ<`XssPsB@2#27iV`IiPH-erYzDL&TgC2@ zOKC1rxZA{Vh%dUNKCs7?6nRMyUDL*Hp1<_#4h*%Dk*Q~+GO*fzwsC>VKJ9(P_@boe zMp~c$d{}B;SzCAYl8gKa{Tbb2V9m#v#vU81k$WU5L6#+HIj@jDSjWAwC0^?lK#_mptM{&*IpqCoGlwd~S}>KxJUf+2W8*4fMfGJBqrD4!=$ah;o!yhPe^88X+=`qp6yAr)HsEH zA7_~!4sLfKn{x4)%$hzLr!fB}E>3P*U+k0z_9R}ydqNV<>S~d+>6Il+4?TCoQ1peqe4dd|?$Np*R#4 zd%}`4HA3bhoLo-z^kPUI`0kAw`qR@8sI0yJPOa2#f~FvsARpetiNb)-+RsQNdbvxb zvp$!{t?F#^ZxNB$Rm}#ozJ7U3py%bysajuRZD3mG$fIcHcR@<^At)Z)x3{_Cv$=Jy z!efrtpAHjtAW+4SZ837O)LSDWO=T!g%!}PMelm5Qx z|EB>H_bhBBC&x;5=$Rls3!q;(hmJY=Om$I6H3k4cRsRsl>g|6)ofAVF6|ppCU25ZL zVcJ|mJN3~OP`5P!S`qq zDjT?T)InNGBEGsnKB0rI8S|{AEHGa);iG&}u5cBDtK2Qt@$}R7ojB`VUTh9bRW2yv z0zK3TAFZki|0Zh*)on9Goa!ZbS?b(b*VB|K>1O}R-xWOhZeC^iCvDY&-K0F0?e|>6 z+4Jc~UHHSFJ>~;^k~|#cr9AFzi|EtdT2~Y*gt;Gn#vNE#9k;_D#O84#Qr=tO&^GSyjUTAJ#TBpv*b-6`>V4O0mn;@y9Vw#v zgMXOrX9Ym1=M#h-#+S1+pIvIrxY~)``&fMBBmTWhPGvuSUmyC-@d26DGG|l-d3I6M~v85i@I9TWbioMA|%03a5essb6 zV6GN&GHynZ3NaY}(MDsq1Kf=SCEAjT>0tb}KP!#n6DrRdrg8+o4%_onGH2zStQDs! zbLpmkSkRUI0GHwsH?DWu-g$#BF*ipjHL(xaB+Y0U8eawKLFfXsV6z@CINg;_gseOL zKke!oljbTevPyY4p9r^b9%`?U7C$qd-<q;Y^eEA$FrkiBd_GOFFfmWo2OiGB>AwNdDpNV?%qSD(_LtLu`&1iQ;&$i z(~(_oQ=$akZGkP)`Z#C_owdXg?HzK80dkM774i3pQqDp>*KYc?`sv!HD|4X|5NJd+ z6tny_S<~e#t6hDcyLt9UX%96+8g$e_ZQ~ej^~xw5rn3q5qY%5;mI`vH--r56%GYY z&s$eZRdw~<{i@1HO0v)c0Gbk_%Ab_ENhp466alatFgjUC8*oAUj~Ox)WQ7GJ^SH2q zNKw`fuXMO$r*t_NF<;*;Pd(4-5_h8?DY2_O1AOn{o~xE2UWJ4m&p~&eh5hGzhCu`O zsPB9W5YI5rb(%8|d7!sJq1u3H5a5Hl3ebKlTBrl|HG(Q%VqXC7LT}h_ zb!EgC{CI-5?-R@DPwBseUJN$^sC!dDaiFGmsW+wbtrnr_zOjH+5bYJxYuR)9%hvVQ ze!xpWCg^v&^j-G6-~uJMF)xGO!19x$oS7(x+tbl@_2mA8v}wfc;<7l~$Zqm*m|FSo z^4K7SE$_hZN1QvC1CgSNEe8B1dd=GN)#bt7!t3!OT$WS>=BI^#<6e|BLzYX}k<-Hi zFav%P5tpPI^&?1cIR**Z;=^4gTYnpQqLSC^0`U()v%E0EM}!dhZvQH^+Y2mY&85=r zccQ+sj(fXg>_(7GUA@s>t35Ec{X9iRy`z+BfOwubjlt{xo|xSf3BQf~HK3d~k~9PZ$*wxz4l49EVpA=GetYq2c zFmtV)KfHYI-EwUE{}&r|mLmB_)YtycV2E6H5?Kkb1WoMPN9UoOCXsAnq!lX)?!N7o zcC|F(B^end>$w%s4j~fH#Lke|Qgs?}K$YbBrOg^UIPQPhaxsn~js+9|0qHUH`6!&c zebW&O5x^z=EK*N}n#DB!hnnrFxx_%)BB@(mV3udVFe`Yui}3;}<`2Qrht2*i-wNzpz zPwh;N_St!U_ax2yJ(fGg$gDp!pmRk3%TthSMWpZM^yhHqE}}qs ziw7EH5^3nMF}_MurdbcBRxziWNr=FbLX!ALIE~klCNZalR-^82GJg+=$2B4h-FsxG zSQPkMhftJY6j4~=)l6jMhu=i$v9m*y`A0dX=cD}#k7U1)q=tT#i*kico`VU^to?mV z|L#AIkWvLV*^na@UCnnY3@?)>?&s60jXX&$5nWt=%3h*GyDo0{C>|Goyk3w!>z6#X+> zWa&l9*MAbY`5(M2bu^{srpBqjNuK?>%>cFV^Q}6Fj&sm8upV3OD^y_T-;9S~MoeYg z2w?6!{aOeW)8PI3icVPIC;zuo=T9Tt$N|DfD!HH#aNQV}d1WlHX{Ys`r4#Q!l?Vxr?U6hpS3kAk|H~kml(K(a?Xn zBXLd5vXUPACO)ln93x3oP&nWHiWgWtHp{b4>tHtFeVG}8_r7h+G%S=$I_mWd8|da(pywgxK_=(EB<|&=^}MvR@^(%{ z`}$6@$^Zq{q{?F+pfDNkMuQf43A-H%_;BO?^4d?c>00s4WbBo5=o-E17;?wX-cOu8 zpYe<$*f@1~Us41B-a#uI008##29M)sP@wYc+q(t);4I)u&5T^|q4tO~~7X4moPb9D=z^%!hPozeY3C-3*+!DGk8ru zdvyYI9v!xN_C4S$a0yB%H57MmxYkWR*$=$irt00ZJaAHHU?5Og8B?7csgBOqyf*wA zDlrc4#Sor`*HAoNa4x<_W3P0R_InA$C8_8a-P$y|wldH8rRZd9N8evM-Ri1M)!roq zx%BLXK2TR4^xW1KNG<)&;&iZrPH4Sr;HhfVWmk8X^Kd)uJgif=`5b{OQa5%!4jf`$ z3Wpy24U=iGg0m@K-xadjVAo2*@miWVeZ#vMX>~26t+~1{7S~YDsuDG|Hs0gVhE3&^ zLPmYwvt_N9XV_2-#jz&kPVVsg^0;6_@waC-bm#NqfZE`}C0_DMKMCo}a@B1ks* zUwHQ|F+sEyWFdWdo?*Zaa;i19@l=i-(yJ`U~YaQ zzeFRheMC`{KJ*>ubYV# zP9d$=NL6!b)t3arQ&G_>n(T-ER*Lid>w3{d*CYmY>T4UZL^IA({Ge-Y-Dzmp(acf{ z%hEZCHS6t{26~uvLu}s5==^Qysx^r|Q$L-r3>ZXUAUno8B7EAA`C9&E!Wg=f#Ym5b4YkxUTd80m9lHa&E$bEdlbgQK$Vxn@3 zzj1cNkN6T-(vUN&tHmLK<|4?kP*E*%bg@hsC?5{K7v^!+I=Cj}Chk@X{jK z1~k)ueH`Dq12rIyKKGf)LmH=9=VcQ&Ifg|<#UY3-a-^zh9$Z8UA*!K?u?mDGDkhpc z>z6Ae_Q$E1K+9>ry>)(^#m-}J_-O@oNeH@v*7?!lHWH6QPOXr(;qPje?Q6C@a&(iW z@Bf)AZYpS5ymLh>^4OTIlorp4$#+vgXFsG)!#e3Rk4#!_@lt9SxFnYlG2Ig>ixLOa zjG-CJ5QQbw7d#RMpm8Nv)4-`gFGFmVumcRQs|rqyLKC3Fp4Py=CNxsJ`lYo5mA2FK zIGwN_00}>mNN&aP7*k{fW#pZkJBF1W4Nw}JLB#_fr=nSwULg<2A&w>?B|zze1vuOL zHZ;M@&EM-ECR>8?p!))ISjY>N`{mrE1A?}h2*JLQd5P07nFp9EI~Z#PM1lDe6ZMT} z7RBQQMzTTYPeKZ2vrbb2X$~xo$P2lAnC)kp_YILv6RIUlhuLc(cp;OsYJ>se_NO2K zt7D3h(_!jS=iJZQRML#Wdxgx6gsAVg22;?`b5Ycn8Zt~JsIS`A%PXD&R&;jG{bMev zh3P>fS3jz5TGScNBm*c9^Mv2z>I1-wdP9&sScEyuUYjpRwy@-RoaY>TY+=?N@UH!d zCn3cH0pFcCAsJU=NaHHL={&rhn*Oqw)khHwu)vHt;ppZAbaU-htM}BPF>1KC#Yuwe z7SW(2?mypHHIC973ly?(?dm5zRPbEL_}za^PsHlix-xxxp)^CCM+F|^e z1L9d5$^dyKk|4d1jJ(8oMnhlH%akIoU({levoGIu#59PypC;QPIHdt~@l<5c{N1Zv ztx0il6h?Z8jDO|8|M{^2B31MJ>CoxXj6G=EaJsqSRez(kqFma*{C3{PwRr&e^LB73 z$XM2aBw&DA_5lNyg?Y*br4C~z9tIxyVtoyf(J;sv>l^{futWFu@Y}BkQXsJMi*F$f zKBnqcob!;?F_(~Lo`|6WYR@Yu)}M^5MVim8;^3C<_Q7)^mgQd4pGh(O&@H!b5C+W9 zd+o@`sj;1l-_IgK$d_i<SDkXIn@LpKHU3c(O4KP8t)h5>U} z$mr4oN$C(3inO-^q}}|bD&;}&MUPbNeZ~4ETO*uQvDSI3){A8s(b3FN&EqE<#cg;s$#2y$kZ9Ik1z^1^mc;4546&gegMrfBP(ZK`YMC zhkD*_O>^9@g?BmM96E;jbyn5ig7HwYEC;{7p-d>bYgtUxU;Iwg^ZTz62U%HVN%8l) zK+wfIS&5C!X%Wm3$R~<=8FI`cZ^tLO$+7x%Vk6BrX=cw~=?8xguU6s;ES z{CpiWhnrN_P~-nSu~1>AC`9r*BF3_t7LlL5Zi+IhP@SsYiES?bL^qBc_31aH009gA z4~Pvmb0AJdyDv3M!?he5=huJ;yG9kWP?^gzN}8et+UHy~N;WdcAHXTjlyVyx15E-9 zKJsK^5<)@Zic+`0f^-4J6GzR{-l6J5`Czeq)#8Wy{4`U^jyLHu0RdwM#c2 ziCSR!5tgUDO!e%dU}rSAQ+ve}zF8C%x+ydBJ{O&KHY>g9nrB7D^P+_C+a%h(e@Hj- zWMc)Xb13s_6~$I&(AqxfdleK|1OI(+!3oVIB-hodxv&l4j5I**Qq;g~(pUou(&k6C znU>wU!Z?ZVD+>7R_d5biRA1^SJV;DJF-ae-zR-)0Gd%P-U#y_rL~RX<@CY4F4A5NA zgdy|-_9|AG)i)E2Cpqg%9G!_-pYZ05VcrtXTHoaOYi$@Bu!Qr*;bXM%aV=7wa?#ur zHGt-D?QF2kbbUi()#y-SNOeR}^xygiNiDu@jJh*g@gwP1fZY>(_Tbq+QGxTU^t1J$SG*dB{Qn006)hcwGQpu-VvK6isVv zCNxi1!E2b5D9rJK0y(4dz_uMp92o&W!^bg|B>aK8ZEAVgBL~KcD;IYnO2#|WxqM!= zify`s66Nq&QTQJxF__!vfnp`^d79mD7*g333}_5& zZF1WQbo%J&m+enhyH+j^Vq&gN<3L%?*34=X5=18MSyjf)YI6R>rWml%@_tXH(@Eff zRpGDaB#~(dEMZymm@&JLtoFhH&wHtaz zQq5~;VC9WTwC`#WcrL&B>$Y^;Hu{pP?=1QnI=gXD$~H3-&@r~`xITeEa7)vX+0w%6 zANeL$RmJ*oR_i+XdS6jgd56wwZnUYBMZr}mj}+^~GO})BQxlGxz~>?0h=>Fei@&u| z^Ii%M81~>2g!uzPz63v^VcwiUD%5LmLH9#8C7Fl#Yui$BLO5oB zoe3q*c!0NrIfdlXt#{w1pISS_)mU>YXJ59;q-V3BIXyfO@=k8yn3>)>r0^g(qAm2h z^$z*)PWMW=4fSE8B^qimq~~>f^L$lyoBVNNTSWIXkiBiMgid1CWVDKIh!M<{)%m3%d1f z%;Ce(R7Xd&||2uKOlAp@C=1+)C1qO(9~prxH;pHGl!BpCwiq^2if@T+_3e%;I$KG z0KNiqF;n-eo$Kq8JyHiCf@Cm`cwU$aclG6abg76vZs5e%3>mfUZkKKQ@wYYV43set zt&H+V_d9_2&eWY%XiqnYhLvqR!o5sy^qr%sg`fz-A?_ z6KbIU4#!ZxV*c)M!g091*;jQ|n%jmv%-4;o(COTo`ELDl;!;Pc*E4m>@D|Qb{j5N^ zCeitO(&$Ea+Eg~hij`qA?KOLBefqbS2KFsWo+PZ4=N>VEjM$SGfo^Sa1(g%r_)OIw zfbvwB0!NOId3$&FZCrN6wSL#ryjUfnNX`bfz9!;dz5vRC6@+Yn5S{JZ?6j~KV<_@2 zc$d56T@46%?j-_OW5bWaYkfSEVb^7b2apn}`^?W+(PnDO*%KK$f}L@q&-LA3v+lb2 zwf3FnYgE8kk<^{Ok%w1v5ya!wue)&D3^|YOR3ZKECP5wo?HF~c(vvs4wc(u%!xy7aNNGp6j`>|DVwmp3#h$y0Q0WERT;IL7{`ms zMP8mDdYqE45%Gu4`t9G${?o{v%~^l~O!8B;iA+F1kipL%aUZbvr$aJRHK>ZQQV?t1 z*Ik^4Da+y^UIYm8$3hPIrXohny@Tep9Wd%?yX7NNuwIqr-_@M_xs#y`6Hd-Zg>DJI+SUnQ|Oxxs&AIRA6NULnik=av0mD*Z3V0X?x zds;B~E_)h0${4ri4pSrGl;jp0R{phl^cN{R+IKUoEY=d2M7oTV@(o3K2Ai~d*xi%w z)9?^|h2AW_rl%&YtBR3XgJ8<3FDB=tQ&Za#bBLJh>V$!Mc&6yp4?&luy6c4QXytA( zVLQ9r7~|5+$h;6!IPXKV<5mv1H~j=W?yJ`Lju^dm({!6Z=KHol>uQ_T43IJ#Wbqvy zqk~ju`d+0IYfg6W~$!Ir3z2EDxkm6_t%DDDM_M?JE~-Qwpdj z)|P|BhmqcWWFZfkAA;VLvXPt&S@R0MZ%bh@TvCDYJry8Bw)G`;MlrJQA#F_O>Yr0* z=XuoXq_6U1GvXAE^qG&7jh2Jv3>^=mXZNhjb+9ah@Gm9r*NiCwNGYjp>Q|>~Khx=S zsHAmUq=0N-7t~U=aP$!5OmkDDh@RT~cNBE9)T%jm`-?;izO(?Tat|G?W6v^UH*F!j z$ZjSC^Y`a&3OXq5Fy%@IK);^x+nHb)Jgi^>lM<-r&m;mpDXt4Jyb$I#W)(Z|`Q@1}d#$`we#V79kTd8twfGZ zWEHc63rRlG11s{=m-)RoK-{N;7>FUeEOH)6=(5n4>2fjC zNd}Z%cz0P1+)dF0{4_M&=idf45e*Zm;?LcfWC6z7 z>l~{NY7hdlG(Vg}IQSb7dKRO20iY8vP1!k@W{T09f>CjY+-0EUq@GS`Dx}oSKlftD zh=VIyzHqvrNtgu746!;x#paTl(YMjFV!a`1Li1lx3s$rQ+hW;LA`J*UvIl=0*9T%r zxLXnuZ$dKL+65$Q5aB(^l4i_(g^Q!C11786#_qw*e}}l1F2r;^MK4s$j?RLGAXHfqjTlwrq@EesjE1&TW?=qNInBrYIY@)R z6>ic)&K{8eDd4_r<7<>KbkPSF>nB7uX59_)z3O|R(a3WmR$^=zJ4xUW1zUO76$0S+dIVD>QtXP`rlRWeT&%WzJnLElx@QO zxaxU|sDAL|hk$(YN>Mt@a%>k-{?*ARKeG6{9_wTK$xevAR!8Mj*x?X$iQ}ch6)nl} zM(6$bqWmf%)KwQgme@ep&#WBaYwKn(TZ(2E_^dv)*eEe#_IfvAdHpbNVotdi_^vQ` zup=N^$RYKkY26hfhucV+psD#B?)hSrhT&+kylP}sA|IkuDx@vX(Ej*AE(8zc$Lr9PUp?D<*(?V@C29m#JZhlTsi4y)-!u&BmPG+a z9741eoaBB`ufv^6fO>xtPqEh8dpEs4Y#ENgY zL|YH8=dAEo<7gBKY}x?ZpZCwaA} z_6pd<%K}>k2%PAYhseT0nM_D+wb)lr7Q)bGZPA91l;067K1MH13od8j7~D&7*28%! z5hH4tif1D{;LTD`3F5`b0=@GLoOxAbUQWTUn(l&1sylx2BtOYiu?*G?_KG)XhP?Htj%2lDYu=Y>!{4iX{zw=#BW`7jafnBxEQQpy zj?zQ|g;v0U(-ByS!l88)Zia2JYv4!Xt|#gLyyx~=t}n5a}N zzkjp#X}l&a3t5m~J02@xFPukDFGjc+K{aaYdSy+-Dq7V=n?DN=CvOm$sI9vpJzx!a*8$Z!@Bam8REH5OpWx z2QQM;^a#&DP+Q_!BhN%SWX7Rf%Aq8NE9aC?K8U^KUh*Q4*b2U5s-b(nh>?pBjQ3M2 z(rRKRM30kOB}^cG2>6?z^_Ug=V%j`pyI9PE3qr>Tb)0mhY`hF2rkF5l)j=YvKMci$It9><_V(iWbxXCMDD} zC$Mp%Ac3{XCd}o82P_N0ns^h@8fSI>ekDiUx3EX;vp5KoMLtH)k=n|j1Yw?ic*8^q z9>brX9;N3(%&48I>ozUmFU|?8pM457>Gt8~jnoAlPeY1x>lY07v zW=zD=R>t*h!t6!7BZ~J9jwkm%JTL6R(}kvp;}lXCb1Z}aeAGg-%4%)=j$S>yUV;Uc zgn)*ETF8Q~lhYRXQ-Y7EYxp@Qp-%kjypBtLp&80$3FBk_!TJ{`ew?TBvi3Tv`TC;1 zw;g6+v3AHEh{m8n5+gE6yt%atH8BZ|;>|P-;l*0u9>vJT381Kx6>s36k;O8%sU|<* znaxq326l1Xo1@Qh-?%m0hus*jOLyzsg)r8!0QaU#X9tbymgV=9>7o239Sm|LwkZo5 z3L!cW$zdoqfL7A>E(g1OBr~EhLyV>jGycz87J6xjPt!h-B=?J-az4rfFTe92>;J34 zO>%>uG*eqb%XZz|AkGuClljk<7H5C&<40uy@Pi4(YEjX@>?wg?hrvwT z)a9`KSx?H z>T@k>wU5bcxCrzDBug@d$oDu4j|B5k$fyA4bA`04=yKM?uewvDMMY`Osw|T8t2$77 zFpT|I(RW6L;)!8H^%Oi)yun#D{Mn{Y%EyL9a)p$bFQt=PLf8zUKUkXCj*27R6cM6I*l zAxt(_@-kloH??vGJV7&C{QT8V4OK)p1-h+ElM^vNfx67{#XQ8Vr{1J z_W?6ixpk(zjy2Pdy3;7DwA-VwLcG7U!Yx!tX;l>q1BMIe^8;g2Vbu&2#o`+A4I^WI z^&!dgO2VAv`IKV3@r8wr3PZ<09+~GTZs1P_j@Y1zSlkcy7X9@U$Xs7 zSu=%?A?M3_=t6xU`-u!!@-+C-d(fRKBB_#nd(HPW(UX-_+kM|e#tr-PL9mHN(|Vh$ zJ(~TE2I)?DxL@20M`_F+ZVh-6Tp-7R$ZcNwvMEv9dq$$0Y%lu_P7 zR>3+A&&ji;N-vfoEwed+@|jklQ`lf5F8%u z+qtU@wMsoJX`>{};}ei>NB6ZQ7*)I9^260~FK%If>_%gB6gfG~xr^N)bJEo9bPa)@ zBtvI`KJl~}#+I;|d&$jS&$%dr?@|rTp{3i#h_ik#4h;k#3mm=*ZjeEStbbe`@Tcj) zsG2v}mGr0C(&QMkvU`mz;QdsJz3+Oh#FzPQ?B+Vtq{f7{Cru5tCy>;M&xIT&tz3u@ zY)F3kNLg({sO|vH4q%Go)XLqzci|YlRgfn|C%7VMTPE$rYi8}VHJIt<@W?UkO&Ue0 zS4ly0+uHGkQh+simkp08;917?)sF079IRcaM{K57DK@&yFIYUAmHdk4{TQuwRWRs{!;tS6B+Q*I>Lc+< zqP3l=tx@h=JI_dFJBBQ%Q2>*1OFyC}HEHvsnYu6fCZgT#5&Lb=^7MR^P+}nbH@`5F zTHK=TSz}5C50Rbml4m=U*XfOoUAB2R(p&^_rO99n5rAle9F34Lyx1*3K4J5YIUi+k zW}aqx`F=ct_<%>JGcv8Aq141un2qt}OU{0G(ZzxH2}vUoBd3a{K!QK%>hUiQ{Y;-q zjb!>kgJWAurvL*X{bizTxV-sMm`*sDnyim8o1yxDum>3Gx?Mz>XtRnvA5FjQF8rA`m{x!v3%8 zUSG>sPHFV`tjdPxe(l+bfa8PUB1w8vd`Qifn0gayzK zC%@yTCP41$^Mmu~_QgRm0P`L33b5X9-QVFO7T|KEQzp3of%;{0Mfg{+|K|kY_u}(i z9tr>xOnV0Z3VD}&W4sRN>fiPgap$uOIO7NQvw6RL?|&fd596@JcqM$?J2yB9 z;OGk!ObFlwD8KLB^}p{y^|uF90SaD@Um(A3KP|oz?g3|l<^rjLg@EcG+Hb@g$_~K1 z-~?a;K>a!WBYH*pZt<-6+P~Ys__O?V{>k#a_`>=f1!%&4X=S~yIMkIn<4ms0z}j)6 z0loISIClh8fSbqst&`(Wev!Y&Fzh!T-)OLH9#-A6*U_{X#l?L?j9l|>_Q+3~vPq2H zH_M@?zB7)>@w3VD&5+_~2-cO2a?t21aOo2Ax3@xP@W1CK`K|?+l_H?R11{Kc9Qfh* zs8wqYhtytP`*y#vp3u!HctO5|EK^B_Lds*%1UL^tL0&V@OyHp_KeScArG6nX>@p%R zAXG*2?MRWHp^ZuDWR?1IL&_Mbg_o1ud4l_&(hWBW!?Tn!b^{|1ssb|)Cq5xYlQ0^@;G79(vC#ioHHIVKnJG` z6%u!wkz{@$$Ba}-u^MbRl9^Y172e@jm?8{hFk$w^xKCiE@cx`X+{#?YwY2r0{nU*=Sn zs&debf#MZoP*VqE#v&i~sc{!$NLgUs+-{yYrzEWWh15FAzkCm-er%jE`F3Dmk5q#8 zTyvF*iC)Ow(E`dtTelQUC;tq$lM7M+J00a(W9~F)P8(TGWH!=~fpYKf zu^_!6kpFkKzdnTW$t~jBxT)h0oXoUVH>dg4PENDy0?b9E0AQCnEGbaX68-VFQX>Yd zx7ER(JxzS<5Y|NP5T!h2qXP7%J&Ki<$fk1VCDF?$sMaY17xupyV|^BN%~jGLQ(ejs z`G1T5L8Jd4i20Hmtc^@THje#r)q8)^JB=B*n~iGe^bRPQJ30qip$K(1m8) z8@oT)m~2y{H>cU%es<%3oNKz)9P?&w!!wv}#()S=+ zU&!LrCKl}J|6|&JTe++~tA>$2kruT9VTXXmtz`c1M2qX=Z4}&8Y+rD*GbZ@=bqhC{ zQze*QWXzu^*UG7kx}jPxlcDFCe`N||403;&^t-*gHr;0<{O|c}(lRHOH9~#!M_h{2 zojt3j+_0)duvfrrroi4uEA!cOdE6&c4S|8EL%=Um5bCGaVE>Mg)^&b>ax2G4DSrSP zg-Q&0oGBPM$bczF1>7}HM&fGB1A$(!2Quj@lLY2^M;`~J{Y@F%^F~Z|0iRq25!P-_ zinG1ct|+KY$z%0Rc=kb#u8P)Gx&JBtzi3sVO5wrDw)npkHgp8~dF+`cKdV)I3*09Z zF$4hBDNDGnRzN1J;Dr4QUHBBFj3-6h;qQk<`HMpNc;jHw7@H2hW|!sIN%Z{u^5zF? z9@`dZDF(TJ>Bx(Qe+@s)Umw z=-(1A2&r_b_gHBajWlENQ zy?BFU#djN!Q-omaVNWwF@2IL8*K*gTR+#&yCCD=FP(exU^!YM$y5$qZPISvf>QK5A zL4;*W!)x;7;tE7dCkflJ&bjJh>!29)ibQ9QPH)mNS30?v%xvYS>(cB>S5T2Z z5nn+U_sV=%roa>-KOA-hKlwdu6UC74Q^dSTsv;*sOo4_=+YDGM2~cTN*+FW9PD7Mm zbs*z4qkpz!LxMJny*DVp9xh8W$0MVl$F0EY`I*OG%TPGpAz+8WD{BhfHw4ZhbP`Sa zV4HyGY0dEHX8@9-VR~-H>l*&dxV>DWW8<-k#TeGT0d7e4nQusZ3 z!9ArUuhI1M62j3R-FXI6If~OTPSRuYII1pekJ>a;dmT*QxaxgVI$CBmk458P58qnr zrck%68}J~}!hS@{tDVuV$AOPGNLQ`|8S5c-dig0bXu~j5ODF3;YMwq;uut(7a9er{ zH(k!66?td3u-WTFvkT~?*XO*`BbyI6!t1vPF_dh!@I4Z&#W7rwErjl6EBJ%(GYdAl z?enAoGAsCQKc_HM$tAqD=Xr^6hBpTndM1m_G+p>* zm2RDSM3TXu5z}3Y1Tx(qP~ME{wdiO?4EHD*aX{?dwdwSdk^}qvSZP=^wl~Z`{d$q} zl)8R1)8*VvOLnF7SfMQffe)stiWA600tqR2_Q_e7AKHFMa)4vZIb0&WqPJ4LnPH!> z;1sVbQB6MHBc#Ia>?IL7lJng-`K4mL{@Y*iCh?72cFi92<4s`s+3eLj(5t(y>+#Pi z77HX%uq^vVjUy$20M>+`B2|tH^f$cj)nfvep2_s{Onh>8G+4$THPv&NFmiYJ?+W1V zC|WKhBGIt3CuvYtU!kb8p@jpy+CYgPZM{8uAnL5ww=0LLNf^t3*N~W#M*bDN@*SP2JKX&RF8MB(P)`pPjMF zJ{R=7anZR4L7$sNRwd5oDi+=aCu*+1ihSRzKMwM;HJ$Q{#+Z zu&KP#=&go=NY*2z-n!(>D+c_ex0YWL@5;(fc@;$j#eDE=Es{_6zR1Ksd(Iwy%GojU ztL|mAU7av(xAY<}s9}X-5kOF|2&TVJ{va<>Y=5v}6U(&wA7Zt09{aE9$-yORLp=|x z>zaHnDB6@lScEcGjW8Zjb%G6(l&Q+6XFj!J?y~VlTQ$<#DI~TVf!*a8dUEdnCI;9(kzhU z^m0lkHH4T&rF8;(h~s{z(~gl;ev<1B=&xAM$(2m0^=iedLhh3R9lA%AW+r#m!iVluomd9VuYp|mx+G5H% zj#TL`s}>kyxU{OYHGYkdX@D}Nc+IgadSh)GlYR;+QC`?WieMb5|?9eb_3fHk3})IO*!@r#=>q)Dw_FP|C+?QThTDC+*kJh(_ubx3%OAjTM9jeI>C`~J@e}a; z@(|rJ6ji%tpAFWy+n^yBZBBEIH+{=p}aa?lW{PUBD`=TZ>CscQfEbmlpl){rp=ei5n5 zAaf35H)ll2X<|{sLvP~VKzyxu+7zi>cT>>xa(wsQh+U|-78{M9&vLCfRcDLdFXGC* zN`mKJvWC>~2Op;u!rAN%RnUy_)O~rn0r@C3F>f+c`V*$Z!vp&fHj>vNO9cR&Ha!7L23coM7a8wk7U5RNh5F8AI-G%Up8-K6KoHtBq z1>4BBSB9XE!b^^>y(L85h zdB;Ye4mzKupUhTF67S_(jY`G@L9Xek5;)SVOzz9KJsx=OhyJ~PBHQ$m2?VA=6ysqB zmLq+4YNcRICb7TW-F1ic=gFhGaP)WGGcW)#>FHJ@lk1&H#vm&jxotJXRvkKA~zR?DNMi3$)Y)?Gby;z+?F@lXZ+5_;u#U&^Zvy-nkc= zvOGUznvxol9x<-Ag4DX__)SeA`nU$b{Wt)(*%O{*wuu20W76v(3nklYaq zI*rl;Z}MoG0jcmLIw~?W_0dz-R633gY*_{Eug`*v5WF#NVB8C^m;4~iH7hBqMHYh- zsyR6F9i*wm!@N=Z&8?lm%g7cnO@Ec#$e+jT1r^oQI}|u7rS8D9Py8E;4{8y*8tFe5B!*i*yhbXWFK2Hff*gpoe<$6 z(&{Y;Jfu!6Uc4q!6}Ty^vBi&(9leG9d}aqH8%b_v%=u0nr3@Kl`e-l-W&`J!&3mt| zwpqz)s)zlnF`MBwan{6rvt`Nk-jiw=C0(>?$QAw3mc>H4kT!><7EaBj-0@&l$*>6A z_LL7+2W0<~o7g!|L@3dm>i}iEHaqyh*3FvGGO!MJcB3aej9o?5;XBjo*MWOW+r><>jT7 zHwRKtk30Nis>_*hNE@%GfFZOa$uTJ{b|kBe&JI!)m6+cKq{#FBr6f)G1X*ZcoDo=V9yFlP5h5@*Xhrke z;O|c(j~DFbRWyQ-GAOqqDsTe8_|Yrh^qUdfJc$my;57j+v@%o=eQT41fVBq?0DR5k*A8nSLAdYgZutpgwOEEvq! zej3pW*cIo)@#L0u4odas5x65V-qIo6jipgQ^JNH_M8EV5ZL!u6f`f8>{8Z=P33Nng zH3Zf+jV`aC{Ed}0R8OHE2_dh&?&YPtKMcX&Ff)OREQV#2Q_bnLVlJllN0}tJsCMEn z*^#HEmk+AgVxP9)$j?iRnb7DNak6WRJ9}n-JL`z=YE@6OqpvvKu#rrr=-_HsAOvG} zSZXu6Z)GnAjEYSgX$y|fIKC0PHL)qSvUaMl&a3~`qP)Suk<6PTW_{^CJ) z`x#o<3oPdsNeFyD{-oBtN`biN7Ga_SxM^m*I^=ZzId%Bh-N{^-dirB3fGHbO&OY5(uW=)H zgx3CB#SUUf(;j72cD~`z>|7TjoO+Y)2}r!Epp7!R!oCF{mv;UWB<;8}eJw7Z?ti2@ z{D%yQNG~DTs;Ze}fMWtdshIVE!ma`zA?~fRl=HJcL)1lD`1J+L-Y%7+ zckHKjpN(*k0jc2;ayH2yho{)OgyEOdHKpoX`d}14or?RsKU!lEZh7qQH~bhr@#TR! z@ojsLZP9{nJNhl{JufSB)^`BTXv3id&22{Ld`_D<>`c(_nwB13s&Mxs_~@Yi^Wfdz}uwdSrZPp zeJi7PE4^$9Cpp2r{2AD+8v-AT`J6xsx!SuIP?6ev#GkqL?#SOFU7_ z0|e8jQi9n@yO}ED`w$iIE}c+t5fpVAdiPw7?kTTnC?^=w&jzmHCiC{I>oveG5?+ub z5aKEe$wKjLuQaq@g6WT6`Hnb1+cDGU(5LZWTieO+SOJSae#&pDRWF_?$*>%>c#Eya z3`LZDA$2^jLTmg^i4SNdj2cOvX-jHt+#uU|@sp<)*7*X=Gu)}`4o-V3mG_9HKIJ3} zp=9ap^k~y7T~uE!DbAKHXK$;DcnikUSNzNSG#KSkf9$}Xs91fKF9UXDiFC*Hi&v1T zJ^ElfF>m34VYaQ4ORg0Z^APIJG1+bNbm5W8a@jkT>ZJSaaNaneK+f2RSg^hvhKxX` zCBQjFXBKOR{gc3iqGh!9$z~9;B`1bVOK(CIY9nD$0yG-Q6cV;FcIU!3@;f`O_4J2$gh3KfW(JtN7iDvx4(6NsN0CGqX|$SE=2nbTcZQ{^Zz~>regjg0AKqTgIk+*a+Aoa%~AF zNtRjB?R;Bu9mY}BOX4533l9D}im|Nu4QZH8rd-SpwKK2qFb_!xcz4D^;GwkGhu=lH zn8!u}iOjI*5KJ>3&sfqI{^IDZfbVVaZgvxd`Gkh#$ABbwM9kPG?9z<3Hn+YeRAt?RX2w{L?*=( z+eaz*7#hsWD{bHpgSGpUHCa@jj~sw9&Q2af0mGU+^ z9!GX7deVdx{CMEq$G6xlhfp0qBW&%Weo#z=RHWta<-5?Aq2*;yxy&Vax_R~xgFs^4 zb!N;XUz(QG85SqEjM|UqIKZg&gxjOCtuQ~1@(!2CC|)DU7un~FXWdIm3CEex3{>GwO=9s|jVG>~>Y!IpA=yw@;m72GB$#ta;< zx(umld(BsTYY|`g8+zY7+wyQ;2qb9rKmq~1@26_nH$C{S7d2YrP7sOEPj`eM?1q#h z+3oJ*tVQG~6JoyiYKI#`QY}A|XMs|0kK{I8LhXYdV+Cqy z?)LLp3Ae>K7x7`r^M2#%b;OvIE-uSsPTe>tmO|CnwK%ghxc;$;w(yqn!{>D)0nN?o zd6FKX;Rgj{*l@R_-*&ooy($DM==ulsp(kMTc%iMuqR$c?d1P3~xIIu>VgMXW zi~(5Ut8PnS(LM-`h!5tUCzPr{QGY=ytIy&hv`iDBaXkEP6d8v?ZI9Akr|7!z+5iVU zbfe*S-?ZL2plQ<#6PgiWOd<>d~r5kYI2#6K2n@s0jTthuB+x?78>8=!D+?O&F7;Z8U zMd8se=4eAVT}udFY4!-uY#I7bDR4g7_xYc;;*WqC$2i~eKiyd=9EX_LzJ8XtINk?_ zqbGhp@@%ey3C8jnDgJ z5?31t3&Fff3FuCH&N5Y04UyS|5l2}(^ozy*G%zgo+eprC|r3MkM8 z&WdG_%skYIT+EC_{yb#4VQfl1N6v)|po7B|2^*cTfGEYBO#kZ4HB^E`HQhO8C_2+V zzm(0o?TD}ENrbgH&>cckDRWDTR$Qg2ceF>>Uol4Q<8~K@n&+jit2cbr`NSW8p3<4p z*3YXh8fKPkw6Cexwz@YiO%~3sxJx~l`d$1&JjUKXTAi*VL*ShGYNh>^4V}YB;~pJ8 z&BxU_&VWj&GGnHcD$k;9#LPL2Sd&F_di?70W{K{S5s0*r-2|FQcNOv%0uD5vLBmFvexSKD-&cmYD= zCQ1$SGcbfv?SkII`w|(e+xG)@+Am`bU7-PLPAt@}=aUx_myETQLx=h}FE0z>Fw*eD zX9AU_egSD1e4p- zgv=$aHvSjU%R~AQkW{)kP8K0@KBL|04_l14MV+eZa73r477~{6=;l~_1bRv?pYyG) zt!bS_+GOf(9^N0LZ|m`I@YTT`bF9p&TpeH>a*YIT-S_EdoWA8b_1A2?z=2;j&ZLrKa( zj07oT8*}6wj<2c3rL1&*-X7<_XqFdh#q%<&Y@nCxnTM_7UE0#$o|ifB1eO@krY$Ja z9JEi(dw^~pwOGT=Y+p53`I(#J`ItZv>f-9Rpc&d@{1 zkY>+aBd^X_hW>4MSc!bgP@c0E{yc_*ZFugme`-CP^ZBuU_)F;r?wJ-y7Ytl{%#A6H1}Z4ZH!M}0Z>n0V(;HS6 zObdl+(G4dyd|Hu_{0kbmiYraQ7%n90aBy<7yXxt3FMo1MS9_$}D|Hub9(@|r|gQA#ZYVS%XS=j4I<_k_8yby80s6QlypFoXR^fW9YE ziwOX|Z;-@QmboGU#&#aTFt1ihsUF??(1Z7nY6M9!`DD72kSZq9jee`S1G5wS-}Wp(N2qz&0F&=iu7 z+u@bvS zv}tH>bkChW`QEQ$OaU0E2L~9KPhateL~tUYS`R>r6Glu*XPHWVO#13}ODZ7C+KL?2 z554dBTBrOS$VtF0h+)NF6?;(oT^-Dbk($xjDXeDXBwjib7h|J^)N6{9E z`F-q(Mk{$m_CM;lmRRm91qjXqXRu$E8_bam8P4_rm*pc}Rj6|EjP}!a4Ng+z)+oo-A&VD@^--kq!(&ek1GP69(I^Ef8>w;16TiL&usN_sCgD^JU_-z6>5J%q zPU;n>^t-QE3g7QPmUxV;nc{8p=8KF{iLudY7fg2Xqa1-SAkw%S6n9Rb?2o)BZMSYe z-E;AEB;ec>5oi3sXF^;`wjptx*XcAoauIIt+^zBPL&1VZ(V?LhJFUkDfYl#jt7;!@ z7xYhR5ty*eLiEG_oX%M-c-b;YP(RL6B4PXq9Vc9;ab+OCS4n*e%F?6Ggys3BsrIuZ9UMOghP}Ikk5=sQ5?4r9IZfDnn&LmCNgc?j0 zA){x>L;4SqkK2Jn%Y|AI<2rH_zXFZ*mC581gbd9zDd9m|DdAknB$>+@9wg)0>Pk6iy@BMLeycgj$G;S;GBAJJhJVGZ$6es+Ao59g^VI(Qta-#RUsrFp zI4-Fzd!bC91%}`&=-fcj8OzC5lT$yKKoec9+w$qA5|Q!3{?mH|zu?VXecCtF_@(|N z6~#rK7RMO#A^1eicmP`XaEt`BS7w>y3P;kCm7fgEY(; zFBL(IU*z6Y;^)ih3?3Gg{v5h+#^vjR3FEQ9o%RsD3N9PZa_CbwQ2q5c&``h*k?<({j+)KNNI-4oK1N~YR<>ZUv;yZSs0g9PK=qEQ6-@8 z7E_4v&^QW+#hl@wCm@(0w>Kt9iWix~bD!N3IE-@!U?8BKQ!eR}IaMrP`?{*4ePve+ zDyWZoVK7!iArN4U~BcAT{ z4-jx(QRCdG*gS8x8CI-cunC-D=r7?T7L`tck4@rIKC_@YnT*y3iJ%Kci zU?HHwvhLoCESRYE-&q+C3gHx$nVN+liVbkX=+MFL+Svv2V1~qL;&^qoPVkO_n%<1#h%16Pp;10X9AqxV-KXFv!Df>ZAI&k%XxZZb{-?X|#rr3HUw8piFPKdTBtxn?>3x{6>K`P(oo%?rI=7`zyx7pavSr zbyZNcmL37dbVt;spsj0@KoQi|qqfqMT&ZXPmx+!eW8=rxqLthk7Zm2(7yKZq`M7ye zw~xL{F@YjH=uQ__!6kq!UR>=kd(GNS77__bwrm^;a5Fj21zQkhI}afd5cIZ~VX`EZ zF~sOr&;l!H}H%mWFWhiQ-=?Nyxc?-Vv0jS|bx zmA@}h9}PhIak|f;G2mBs8w+w&KyWdzXA}p1s&HbRw({7y;0sJJ zju4xoI zKnfdyh1G zSBol7Z0jdhh;f9P&UNKk_)JaVks;qrm2uB_=iP%;morAXl2#CO*EUMw2MzmKlG#lv z5CWpHGR?izy(8k?x1-NqwO5p2e#FH&g^`*4*OMC2IC`z1- z^Sb3Zp3`LT+0s4J-fV#_K>a(etv@fxvu{LKF3x* zS9j00n?qdQEg!P)T+)O4KQf*|-Wr>V?t|4{U8Y@*$m~SnK59X_Z$&L32k(@i?Dx*6 zknzt{(=pN1&q(m_TiWT(M~Wk<4>$qr^R#Qmsxe>#E_%zp-hC;OY&;+2>>q!BdsBTW zx*7zCj)s(k)Po=1mhV_!Md4fqKXX3=z+`(!FQ-qRpxuK(8gS-d!Dl~M^1bt#x65Vv zbNqAVQyd)e5YfcE3#_c zb&Lw>Q?yFy7Jr@F5J}(qxBy7pOP%p=Z&+;3|J;mb8ReuX9wg!H(FM5CcyElwJF5yv zURY$?S=3CssqiLlbdP!%D?8Mu(|C2)hH*OboCJFx^aq#En1+WxjY zz|OrW(vl4uSD%+Wk66x=lsnSa56W%WNF@r>u|4PWAL?DD>fMsHj9sG;bI-MNrp<(~ z0cGXK+dj&#f6geJK#vEpk~j|={fVX=1s>0&%iT`?{U%#`{wK8LAEW$lj7!@8YgM7Z)FO3657kvUR!97qn8sWxIanudeP6EIdM3- z1dNegACHY`X$sy?7TZ2%{OB$?T08n7i&Q~IIHW*dAA7&O&h@nvE8Usq_wezy!vLa^ zUf}0Z>XSc9AB&nfFv;!r$L8x8{D+@R^h(42?52#Z$Cgj=sZ$x95N&C%hr+gFrTD%u z&IYQ^S@hG1Xn>V?Z};UtDa5G;{THQy2Dehpy^f__U6Rpg^{|Ree2EqY<-SW3(DE#o zLcsYcAukLJ%*+usf0on4K~HoQA8!CxtSPa(=)^&AL@3Qb;nc5!{LB&w8}e&^2^$WLR)I3#rVH+fmUU5wjBn?&fxA7+I>^o{%<4H!hb!IFbiM*_1>Y_ z{y*k_7n5b2)FOX#jAwsJ`2WR~fBO%H|GusCFaIAf|B2fn{NFftbp@&f|B?Goz(3f* zn4o{9{I8^#O6-6CoAG}lCldb^|GyGog)J`rH^KjQoE%|cW8;O;_3HBd$Fakuy?Srw z(8Wzu@ALe@67TUpR;&pHpXkj0WwJcx5n^mgmjew8Z+NXvSu6S4ND6pxuh-7ouIX~X z`-|9Yd-$Npg&wQg8;ea)79slo#IdWrZ(+1p3qmb*1%-Y+hwA{3Km}`Vu&& z|9P<-@2@odbPJ1bq!zZPQ%TqTVjB06V)K2at7137Nh2hE%=YE~b$+%)Ak=SMi&G|W zZ=S((>`}RN^JT1txaC7%cw>iJs=>1u-pyD$F0D$lGUg9c}mx59xP;Sgah467YA_8KkicS~W{^P7B^!HoZGQmr(r=p}Lb%Gt8 zVqXU@^&JbUPu_nT!qdFbS&3Ce;q!d|GS;)k|;4~VX%T`D08A~5R5*lg9R3dem+<(P(yAAR3yJ9Ofs0<7BH$`-iC?Pdzj zK}KIc@Q&R@)BSqaKLt9fE%Z($GY(01S$LgY5 zam(i=jByQAT(-{}=#9sFI((x;`uG$~V(HtpD7%K!2Dun!bJj^=MX-+6%|p6)Xbim+ zd;GJGvqw4j6gGou6L0)k)`Rj&E)TnN3I+qg#S$K$1#zcvQ@P?jvKR!yY`L&n~&t@gROl?ur%#w;+@-PWMe;Zgn^bjr6$!bZQA={gM zZV#V=dd6UBbe+OCqK5_v$$Dzz`)wl!1V)8gHhatZN=}JR%Bx;zpD#L?Lw7HB4gGLE z37RfkEe~v(iTNa&oc9Pr|)rP*;W`a z59{n;fVN0y0$^6{_9>FV;qZ8Ki)GB>*}<_*Ed`iptiBrT$SZdF;2585UMj=Erk@ub ztjgzk@7;md6ZGf;Y6J5gi1%C!ON=69?7yD1o91od3#``bDR#Qp?V4A^UBjD{~#^cEKc4IAEJ)DC$d^%svmW_9*nT?q_V_NV(Y9ct+-)-t&e&g?@z& z4-&3dOq)%XnPeT%8M|13ApL1}yDyBvY11ELLD%G!HaNg*VIEmvkDtDYO5iXD{QLOh zD)d_Sw5T$d6H8c__2K5|Zd=Qr=>f@V80)GP_YVouZO~MBnaV*z8nlhT$NbMy&7^mY z3iHR)Yj`qw3;R*aTE`j^$xF6ip$Zq^#5t59o}Dk?Jj&J4_crk<~{sGlZ3cB^ME&-)M>xqsD(wL#$q{_%#B z-6T_xg5MF1yx;QAQE8Z|$doNa030v=IJgBwt{%&m7N=>F<}`)e+hEe@}pf?jntT7n3y{ z26TK+m0uiuD@!gjhX^kj3ZAL#WJKWB?pt7Dt|#^hkAM5U0>4#k!Bv9K`$c=%!G)C@ z^kZdN+U)b|-o_ne2`Sh5P~*XgA4aBecbz3qFqA^=$f{lCBq-@@&12b8L`OQDz7b>*i7_AktcH`0_ zKVNMD4WsXj_GoT+oT$@6Y~`%$lVsbkfJr^o7m?7=C@cpwslfFNx$wKjEWfnoBk_Rh zm6cSHB1z&YOkT9W8VMv#4=-F3pWVHs8<}Sf1`^iFqrm5a-k9qw-F9OIUg5dr9fpI! z0?45B2Jd^;=ACp!WARB*`)|ftuLT7-JyPh<88|U&W@Bq~=6oj{W_NMDnQd-F6EUWL zEKA*+m1I7sQXF9rRRqK+eBH7}K>J_oEIigJUv^P*T%fc;LK?P)4eN~+u)Hg+Nzd6V zisH128))q^>dcA4F&=^v39%n;Xr%hv{EP6qQ0L(4=72G9G@Ji>cIY(-lVjNEw2x>l4il? z(-Jz}EMAKyu-uEfELv(dsdQ#}Hp8=$62=kT`s_Bb)I#41PbuVjAJRw8!F4MP*N%qY zf;aLr92ULy(G6|x`~}{d&ucyMZJyUp;lod()k+9fed`#mMCj=E%D06Y z<>R?OR``_DEX#L@w-OFzXB29;C|AhqC`2${%h}=H0#%| znqxq3H!UySG+B`V8KN6t1r4gD2nx|hX0L4X%Abf2@@7$CGU#zG5$IX4X_i-pM8p|LG^JfP7U-rcWN1dn>4#FHvVy$~Wo;_r zVZM|^lL}k4cse!k5;1;9*qL<^rW7GxOyyy7ZoxysJUsoFf2mGqqG;YU!wQ@8S!O=? zm5dHu7om<$l19%zK=Yy7)H2nk=#szq$_OUIa%u2a$oDiJx+EFE{%dZI{ znRoaSmD51GE3e6NXZ(=f@wVr@ihRn74z>t(bhMr~es$;{Pz78oTa%Ye(yMhDz6w^- z0+gwoz0Q(ZgTG2H0DySaT0&1mTz4{S!$tSR`<(iAd<^_y?ERc3AOXjhpA?fFmc>Q` zH)>+=&;_*?jl3sqyJV-K5Y?2`8Qls{lg$3qJT$^d`I!;>d5o9KttHQ1wx}xL6!VL= znI&}&V!CwD$ue)_>1TMULf}fZu4z9y=PUs0qhy9_?EZ-|v~Ju>3?ZCprG4W2+j?wG z-&jX$wMZTW)+(CeJLz^zL|4m#7A>=`NC-jeEyuwRz*J2x39Q2S90Y~Eb2J4JFbPmk zSNlxUw4f+do@&wmjkY)qdh4?4$3TK=4>E@GFbL&Ta09E)X zygEkt=A#|gKP%s)0A;r9Dc$IDAD)X_8)5hq0-1)WK*}Fagoeo4JYI4%3xiD5W8iNY z?UA@k_xB8A+M;FJ_+;~#kjD)w?A{QSgKrAVJ;yiJ!SUu?kN%bP>uMBvBT{wAdu`89 zHH5O{-YH5pIfHoD_=K$;SA&k8$@!>#yY!b+SQNgnIHX)k>L`E_HH112YTzxk*cgkS zIoojrUQ)p^RCgo69~q~?(7EL>6zJS?pkR*lk9h;HB+_^HE-y2FRS5@$aDt}6NOtv& zRb9yD`5aw-6B^NTLG8%=-A?Dzk#&up8?L^Ttv)KC89m!#uLq1ZPsbU}o9Vo>IQ3?t z=Tc~NV+$IA8RTv2phNTDd;11V9>(20AhOk&R@zeO+^|1nkI)p!S7`F$k>SoBJ32#g zJ)1r~Sr^@L`FR0LDz$j2u4)+>O*tl4wPQ}+Ogp$x^`Vem^`jI^)-QxUi=ON1 z4vA?4zQm3?zu}%keuAa{P9H=;lAUH-UgaCLIm7^vtk4n}JlqF{8xyQ(3D3IhmeGG> z(!e%`P-{Z3?7mN*iZU`3VPjUtAAWK7HufR?Hodi~KH#jz_c#l!)TqKA^-6Ce#K@?3 zi0<8<8ym_(z@w-fK=f~K`*0YG-?|k&;+gM?I7qd=44ckwXMaO0DjAe&>DR&_+taBA ziaQdVR**c(W=;nVR zU!~;^?Intmr*ib~wCGk`^jFA`RY%i2xE$WoIky{Mg zkxEz^!T_ zt!;?s$Cb>xmE~+uhYj}~vRr0&;Gsccmk8kGPup{8h{@mWqArJXK}ck>wSh#NGk9nH zTZsY6Y{G9}t~6Sz7cuSS8YJfHe5~%c(kl!W*A`qjio<<(%cB}d!;_<+*uwQJ_qVZcRzIPh*suiwAEnOYm z!1aDfNNkJrEuG5nMkR9*XDHr|Y5kIpXx9ROejWDr(5f zUsdV-7@jtMs-^840>7}TiZ4(q2gm48Hiw+Q-DWxRhXdl?z;Z^!& zUneuW0~V62#z?K=6lRVb9ZiGWdUp?i67Ut!>uI4bK5wNeu0Tw+kMC3j3x2CFy)PeGzSspAAjshIQa^U!)T zRg03>xFiuM5A}fc@DpWiZ;TC>;t!!EPrL{^&tN-v-Q`a^ROfQw0UEZp=aB&wyS3sa zpK?Fu=E5%x&x(YwS&KjrHAX3e{E-YT(x|?Iq!t?bTl~#K$m{t+$I(u$yc`Zxs~TM1 z=A_F=L_neYaFXolx`(avBEg|SjE@E{iCCEG;LGu^J{+=4hfSC({=F*G$qFxO?jX)! zrlCJ}a586{dj)GrbArqn;6%*jDJ{D-l$t|SQ*C$00YBBiq)1!#*vh;cS1ZL1NsgMi zOZDc35>uNr7dwY~n(?h^j8%aU3$n|tV18$!w!nBr)!VNFRLy<47IO2@$`|r9{k3l& z?=x-*g)O|~=Hkf-Z`Ky5=HAjJ-}~FoY9h7^SjD}P$*95Qg#1TPY}%874_VkrhA-`r z>MrnYF4;bHEyhchk6V3+Dd`zb zwI&^-L|qafFMWOGk1#LGjdqqgevPz66~{y^0%2kGuEHRiy`iK~vBg6SKV;1+x${O+ ze?E+h*Ouo(I5a>+?~aKk$tCOF@+ChC5-B(q6|^uyqn~rucho}O{w%idj&bb)tZVe6EOO9 z-w{uzla-z)%*dBG|HWV}<;8(Y;qf&V>n%6XMuM`u$h(NzTlPSz3`q;(^FAZXhhV#p zkn@sQAb|H1FOZ=37PqgXzLKutMz4+>q)>!DEPXd>J5oLq?zEm|@QZP5anf}x#ryV77f%a#?5Fj(A=?Yv=iVH=1Atf57dsfy0n&; zK7Ix=LgagSP5C7K)WM46mo?w~6gjkgvkwn5fNQBc@HydcH9eFc9j(@CgIn++;4Sy@ zJsE9{656op3#(mc?!j_%??7Mr%k$Q}XvnGxqUj)thlO3sfw`Z9%wmm2tokL6-`9`_ z`)ayTTr|fU0m;mYDE`zr^oMYOZJia91P1m!MzF37LnNayxaRKd=ICHE6@XZJu~SMT zZ|s{zb4GLf)H70nap)iVy2&rimrP60VC@X!NRrv4wLLL5a=kDW3EnTFU}1i zoqJU8Q-*$j^ny?np^=+@&8z35ASe(yu4g1kM(T2{YNUKAd@{5=jqM(%lU$)bXG-nbhS z=b3?H5YTD8bU!bh)075vAQ671jkfy3SJ$E{KmmtU2JDeEcPtYZN&$K6*wVTkXf}uP zjZ8b4JTVFUUUEB)yp>;(>zTCg5CUWL$4B@OAA9f8#glrqoP_b^N5&rac@8 zN8SA)`Q({$kY1n%Y&m87*Xdz#B>P1rm0)(e#4)n`~;gPLAhB@ zuZ{OR?v?k?X0$RrHJ4+MrEvMk^Bf2$-n%B&)p?z@Bt2tgO%SMl*6k~ZX$dqkdTwfx z;4CQY0RA0B{CQ+AmCt0(IfHb|-n?L=TKP&yS8RHGbBg$Fd8=9Ne&>3M(uGcd!o3*) zpuXwoCNma~7%j$3H=$;E5(jKba>^_JzCx<%LQqn;WU;wpwr4Z9?~?Eq*+%@#!z_8?>b8O_ZD}^$EQ#e-hWi!Hjk{kM~-UPQvMaO>?_LLH|B#JGHqAbV!&6F(eysV z+_QSiXejfMFD%Y{_C5}Zpaf~L-XCp)+<0bnkf#1vb-p7x4p8hUOu$lG>lW8{mkuO9 zx8FF31`Cv{3`N|{M#K7VP`rI5jW$(J8SQ(Bi;46N5VB zCG4b+-BaEqI}J`9vQ`?XfbeWYXvI&bGaf6&$D}pck(9gAh<*B*FRac&_F!AWjPAPF zb|u<((<$*D!57l|V~ZHHNZz>xCd)o3e?qsyYp&Xj>*)IYEupR;kQ3T~Fa*bHo0&3- zZ(;0rcYf?QW9AIPx?-)0fMAGwUp87Hgv)7Zr$eLWHVZ_PnN_Y(HO@F9RE8FkJbjxJ zG6H198Q!2;mHqXoux|U-)65B!zTaV1znZk#g6ZumnAFINStQQ$E*2ZP#txTDnr-&l zFwufK-3PjHK~{{#nInD)Hw&;eqp;Ad@3_Ls(WOpddY)gc8nV3+S!6zvQ6hM7()+#e z5C+vm9sr@)7^YMwBJLxn7NEx86|FXw3Q^_|OY~_5;67g6)o`Ts740U)Q&=iF4HpA( z#}$3Qyvs0B>GsxlxCNNAY^J8OQGX-LcH8|4Cuk#@Z6s z`@NUVi|ho!`g55ta(mpjQs>*i^vko}mAYqw)!Qf4LLt*$fT! zq2lfIKe1}%TMMU zm2xg-@Z2Y-(+Tz-e2Ey2T%yr!KY zz%KV~0%$8q=~wxVXL&cn69rw$&G(2C+d&omtkZe@p7!gzvaj=bFZ^WisM~ozgIkDR zL{TIG&|JW{G=@QS;-QjeFt}GpeWOapuJy}nUL%-MFNb`zw48m(JjZOoShs{Ld$}9N zEnj#mu#&xL1u~!oMtQV>k}uhPGmqMYODeW-@DR~W)#BA=PE!p4K(@ocK@~#~HNq}l z13)lowY!Cw0kl6?zNwi(#(r7(85m*G=pqIXBzjd^%x;Eqqa{j7G64TwL~|_$hz-Vp z-wCw}uIPEy>7{=HOciDEvx%MlzylDmm~2A<+k5r81iAAb0L-p`(tz@0`6JJ|#nA>J zdjb%o5kc!_hZ31qe0dK0q+@uJuuXeTBwbhkQpn;moSB)&GSc(&)(Xy$O2 ztoh|zEy+N>*vlirg;U>4cX-ecGT$l$lvDn12y&O=UU1sNgmuUykz<|br`!?@&eyBQ zAG8S7(3w!;hA>=^n?EzI+@F#06!jluS2b;c2ojjuo$@jcYre;J_$jk4KTLz_%+#iI zDDhy|!GdCm(y14;h7vX?P0@GV@uP$hf&;xWOg8WY#zmm)h{M;sw8v>BoBVAzd8UT+ zhwl+^9}m6r`0ui>V*p+?q#g~Ju)uAn;(AX zpU3Q`NEdO7#2s)fU;gGUNLfJC!=dC|Q2WDff{e@CP0DQNKE_r!$TcvmAw7LdHF^Wb z%F}?2Raw6Bb};X>i`hsAlt3Gd*>L(e57CXIAd+A=f-c@`Pp*)m`!-yM zh1_`Qg<}~N9OoZm!xzJ&pDSl~XOYqL`6|(QJEZq7C~Os?RH*T6`Z1+|Cv4|_QH8fH WP9#zSNo0Q+=JfSO8>4^Y_= literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/installation/installdestinationfolder.webp b/static/images/auditor/10.8/access/reviews/installation/installdestinationfolder.webp new file mode 100644 index 0000000000000000000000000000000000000000..6cb8fc700849d3877e4633bac190d0c378bbc910 GIT binary patch literal 13578 zcmY+qW0+;ZmMyx|w(YD++qP}nuC#62Mx|Y8+qTV0oBLIte%<%p__e->8Dqv8BW74x zN?aV24FJ#(6IN7L;@ZTxleO>}FNA_TzutSvda_-9pW%JymqWeP$$dw4&G|KX_4+S<{dv*&TKsZ2 zxEX_b%D?`u$-f7FenbF0fWE-wExb34msueHlE6o=dk<3Y1n~TE3JClQ0$g1J14`%$ z=n4#Y72N7v0uy#Ozlc61j*04k4qw?on7F?{7K8mRkuetUoHUf;YSi4dLk4!_60 zLp|L*6YddB_!j}|zOO#kzj==99`g{0{D2BTq)&^Zx;3na_^aN#-mY&k-=9DRpuwlZ zhrqj+zW|h__1P9edVFlpD$J?7*B?V(TQYFOmpXSyeM@Wow}==! z+9bbdO}G^f{}OnZN!DG-Hv(Q>bAG| z$Q+{=L#74G>>$xd&OZqua!&)d`|E~^*?XmesH7)FNI?W8@kphviZm-?_FBQWwI;|Z zUTxGHk{J9gbexIe8R~l#^z_>=E|Cm{8Tm8gB?|*S0#$>T5CivqJ0V{2&;5Np3Nx4l zg?cXl` z?ps~{DMmvGzK!Fpbpy97{M}`s$ zB~8=vXJFu7&lHfv9qk*H_6A14Pd&W*2oEiT$+0zc%J;2z`^7PMDfNN>?B)%-bG`s& z+BCYldG1waze%B)9uJ7<76IV3#j&Ts0P z-1k${zK4(Y#*0jHnwJ48EJbiQpIHg2zhaPqh{SPnbWE4|?jCdbhvu-f-EBwD@2+Z^ z8BCKe3=7Oqhe8HZ&kla&OQauBe>RuL21_Ds-6(#9y~zr}C?q4>Dx74Zk49c{wh}J* zzuYQZ`}?-x1EsdB>{${EeQ#&`5M02ZBgD%x;&+Cc$vyA(;#h-fPQFPk1oB$@SE(zRi3mb$nihAI-&7>XITV|88sMl|4`BW>mg!Ut!!Jv+)RQ!S?wICJkPP!5a)S~5g z6&i>bGc5~3^;@m!uR)&)+XrtEsT(N+y*WVRf~omuYHg^D2+e)UPVNZIob>>gy-qc< zZfV6$of8z`x-1C&FQ!La1{Ks|r%c9pYgYw$GDGWhEnw`b@I@gGFVoL`5sW%sJKfjI z?RX*O;k z`u3?%I%+@YHFdPz40qKW23YnV9ir)TD|mHLyrg}A z@273*6rPt`aEIs_IzdUjHQelspGw~Hv*(%bH7b_jPWV9Y_ao;UlsbZ#68z zuK6M?>^jp&clAtLXoTXio*QGO4W7^jqYB_hEko#qE1YliweE-G_?nG5avQtHqP(Lm zV}m%vLcQ+p^I(&ql`e`2;nMNfg${qah7I`H>6-;&acFN8$z~vx&b&s~;Wp6^5z~nm z)i`AYDDZqJr2u@J@QyuJCzHA#92!c2N6z$b_5#y}?XwxA0Ae6TK>ah+C& zKlk9DaO3GUU;zqS9`EYcZeA3Piv;*{NGs!uPv66JGSK)oO}lvZ0RQB!w?5qp?fyqe zh|b2!5lH6qpy{Z<(yl@9XvWB3gM@5+++Ehr?01W0;stdw;ZW2H&CmAmLIvK-g>`7R zUus8gRKyKBMQzA))-n!8_gfQwF? zpyv8E(uwyiH||oWXW+w&on()3T-y8XV#o3$;wsqtkroKz>FSxbO4c7?+&UGKJUald zJ$9;kbd)KL<<>$?;lWZ}pxbQVn>-4umm)MB#AQ98RKb~D z`}u`J{s2>C2?HhI%Dh?q4(<%%RJa*JT7Tv>&W>Wm2D%hZqqA45{>AN8kHXj|Yf6yp z$bqXLHl8Lf_N9B{wcU?2vQFH7_Pb<6kW~S05RdEH-j`nqacWYzuik71ED}=_JX&18 zD6h3NfAD(a_T$1gE2LFq_HTwJ+~ro^+CILVzwhN+b`aFz;vj;_lP4wJl&Y&>rnvq<+?Z zf7o~@4sV>A?C!;qKxWj|uFb)aGnzw$MU zC|S@SXYgoh1eNbfvv}i0d|0BLaGv5DggKu{roL?RN6wj@kN5K$GP6X~B7VJkWufXP z#3z}X#GAevAr}8tp`J2FNXFx z(1h)K<6fI31Er<}g${(c*9rO7zh=)SO3Tzv29d%oS$LYIybP|$#*I!AYhXFJbeVG& zIc}f-VAY_+ZwFn?LSZnaKuv&|k%7WI(>SRw;e%QO`r+a-Q2`aA7|Q}uIeCF^UT#4Y zma7@|js9KH>raSz21E^wQ=&}2x(wNgW(bu7=)SO3gz&%E?i6b-32PI{&1m@+>;N** znE|*jUxGVL&!xR_iQ5GfOV{w1$l+<9t%sv`GP-_M*}dc!0tIZC=?}L$GmDbUDqpwr zd+43U8?Gx{t*14m%fl`GJgvW?2egv=qkL5R?y5Sy_153sByZ1R(c|l++bV$D9DVO z;)H;sl{D`~mDngn_w#+HA&V;E80{OfI%l+LeRN;}Yo|Rg6{)BK!|m0r%+)s`{A;{q zVw+vB^37Z?kftOo7fZ1M$dMq#YWm9PYf9GHDC3Fi5x-Ou_rmh03;ya9D9 z@x{|(%`DH#DqFT=!R}34Wh6SLO;n0AHBC3rP{~D1)v_2>;?ZB4ggm!Nph_Y~SwDUa z5rWwYk({A@2^9cMYj}Qu6-=@iuNzF1Tfx;z&H_iILnjcimM^IfBIAT88BD*=v$_-J+Z#m$qp`o&&Mj zzjYO}Z(;EcM@vy_J>Zc?$xE!4*{vuT%r7HLI6Z1(GZZt<&oE62`BR;j8FZEg;St`w zN!x7$!OYH?#Iox3TV2y^Me%w2)dMaJ%yBEz-|_~=twXIg!UMLiPQZ*Y4)H^O;7uu% z=Y%q?rpta38Ru#X)0z!7h-rPX-(IxwA9!S@e0bu?U)w z)3I|6j!V;;qi5U$v!Hj|Vf4d!?rNfD=CEXs)^1deCz0>;My&8wJi)WAcgQurNNnyk z7;W-`rsmZgBn@aJ{X>*@Pr_v9sklk;#=5Ljv9N# zL|!}1syuuY8Z>A$+K4TT@3(c5S!re^Zy$Q|2F+l!T!+gVT5S}%Ef80}gG6(Yg4i3( zb(OB~fGl1bS<}5{HeG~ALY*%$O-N_jC2-5rgLJIdZ3T;NbD zmam!Cw?+9#p~LisFQd<%;%&3c`l2G<+MlsJbbA8EcCkyqJ4A5`F0hSv$e{|_%kd%G zbEjAPnPz`um&v+Q$`YF46wOBt8b~8`_Ho%6Vz8=O)3g*l7!I7+X> z>-hN{W}gksfqXRD!KLRnA((*ht4S;xi(;{|L1zri_#?;{9EOt$VS3%lEJEL5Vb7m| z;nGIcD)ieD7SP%@WZkUp48P}BhA4{3exxnfylD)P09d~!` zvolm1%6!gWI2WD(!B8hkRc{5S>~0x9=ATerhm`%_d)$)R1sCsxxzy>&L=Zqo7*&{I?H6yUR@(_f-b!Gu6WE%;VUm&-&&g;_U#$*%X6T6yj zb$*^G`W}Odss<-==N_;>rUE;Sx8pG!o3vRTXLU>XwuKJJkKSg?6N}eS%JZW_}L{L ze2xoUkG5@wdKlJ~Z7>^9;nI2JHUI>5N|R5bL z2rhiu)g!%1xNO*@sW^aV1Ol z3gOJqf85TGPP_VQKni{M4Ru7d>kKC2Qz%1UUQvFp1VV_#P9x|+D8BVB6Vq+m%QiNj zkdM^SE-n{KYP(p3`1NE!r)NRvdfdXV5;(N0)}2B$&Kj18<7j-j;?Y^Pm7V5GXa;C) z9W4vBnamAk>q5jubWV&M&-(h~2{dlTPFh4_*iR()5%nbe5YLdnIZi#f9ws2|#3t2p zt8o@;5N-iXJ<*mOjQ89OeD}fhh}phJ^f2e)93c(5ry*d@KH&?BPK4RgdhsfcGJyvhf;)0c*j;^Fm;xcP3r-8oW)c<=7;rxr(n%}I= z>*n#b?pN`w_hU6j3`Lcg_&Vzx0dyIB^}7$QW5>8sNyiyN6fwYaW*J^9$JQ_lWDG$j zTl%#7Hzd4Zsnz{TNQYP!r2H@1vtIg#kpnuA?#_0F3nbLA(zIo2c&*k9M;|o%K(w;= zG|Vwget+}mG1NKC>=_YzihzQ(;KA3PVToG(3~h&nnKB>>F-0wDLmL+uQRz?u7GH@j ziT#vB3@GOJgK$oMEeQexp$@AIj!-Wx0-DBt-)esS8^%>}aq$7&c3vbMF%sG&NwgRZ zkMK5_xU82UTk_sc;O=_Ss{QZ#@ZDDUV>$M-7ywrLo_HlN)?<){mzi4k(_-f$A?C8> zbUiDt{DiGD=pr@1hJjJ}m_`WB{dFxRPLjK|Gtvso@f%CN@@b5dbC>5^{Tpkt=-q>V z$Ai&c+2*>aDCnUygo3!P9E+#dhRE+cCsogab5=tm$4b#OTg!ccd29EVhl)D;`nfhi zo@yF<@oH{y(Zx&x#&A?`!X~lOJXr&%t0YEoQyg9qjV>Cy0yC03CPU9}DEM0!P@?I? z737DlultgTHF$7Ze+L7!>#8-Z1o+u+fXyc;!LuzL6MySmWB1&Ju;WyuF=V7-v=oXX zCzpeF(w2$(b6RD0Np_xBzx3G-Shg$UDTCLLqhZG^->6 z-g3(geGTZ}H5mKg5zSm{KTvXM)GJu=bW4l2+vNknkf)f$Rg2{R5rXV%!_Y<02R8P? zOa?x$4`bmWw8%)gLv7g~L-ROlzJ@uZu4%0WqX~El*CL*SFRulRQ#7di#3@%dT9R50 z4c?8%!B+mlMGkG~o^~#vHI^Dh$4_RqWlR}eR@gP(V3_PfIG$ywz)ZOfpi14~nhuZY zyB-9prqE6E9KF3yLqR^>@e$CwX1h?>Hmrk~tZPri^W#Tozv?e>An~X-2u8l}t!a?t zOnWUP7m7&Pd6Ljj27vR~hjbS);aZkgj^EW%y0eoVVu8R4NYfB{4l%DxN)v{kSz=N8 z8oz#{NztWfe<<@-l^BRfF1ZY7=W!XW-GoF_$+ zwHIQ&2H_*Vf2-5{#>@GJtQdBCszYIsXwvS937#AuiL(!LLMU|Ph*Y^qCoFyVc4d`r z5^uMf;o5A#C+YQonGzhzxlF$ojJ|rO;<)ad76RdaTRfAgcb;&Ld;5qZ{5{=1n~Lkk;Nd=omFQN5u;iJB{nl4!ztaDLBBAsULkP zK>EB%@A2KYS!yJyj446qzKGXOfw?h|m|RnRYNez`rD5q(V~32w#zr(n*LhAcH%`yPT~I<>L#Wtldt;+Gnm+=R?YIKV)Mtb__ip!GC)5)>a zgwt!K7;dj1;G99pB&Ow{(sPS2vEx3R)QU0dt@{C0TD8>A z3*eHSy#Fc>)?@APo7Up9ZTE;6PF~-mzY%flEJ(Z%;xp#fDG)1kGTQG`BU_UNIt=9FQi0l%fw3j>N$=EB=QMidVDhTgFwx=8MRZMIeL_2i#?cz97l%S%{J?+ ziIU>`ptYAk*N=6G^+k$8NM%+J#{+soN*KYOQ{F4tP2XRCx1@@+;k<+?_JmT}>DF13 zfrjO|Xx4-0Dw25hlygExGgxupRp3jMIB#nhsm<{^P)vcV{-w)}{Qm6(tBy|jc-Jmq zHuo2)+~5u0p8pV{hYpb7NAedP-|U_F{Q1!r!XLR#$z*IY-ECl$gDojV#-A+k#M{g{ zF<$C^2l9{*8HsOR7RYi^PrXq{KXo%k4~9>jvKXhH&vymv2?eoX%Ua|ek&&;PJly?< z^O%goFDghaMH9GHk!P_l&Ad{1Yz570_)}^|_@{9eEMqrd09xeev0(PRjh2U~J{0dL zxov$SpZH1sApZU-eRgC3JQBENfmi!-{2iH*;rD{vEKeQW-t4!VOcO*BHqZ`g0sAbE zly4rIflQ;OmuJ}V8*LEcy?(;Z8(NIo6bAPKP)2qDZW(Vyl&7puml$D4E}@@!jUU`G zesgEI@ks<1eid;#(mnvai#iChm$kmCKpXC5gzJ*k$B8r@|5;Qpa+y)k1Crs2oe%=y5yVUf3(X4zE?_JerV7dyU%E5GDeIZ0Q zT72rkmIq0ab(S@XXCJyu>D$e*8^vGNFJ@<==s~=l=qR*o(GJsJp}PjtZd@-8 zO-qyzFR%)3L~W*rL!hu_p3nilz(3jIPT${$&;{iy?*So+SiQp~pQ~=HS^fB_NTJ=> zq#VT|P^VJ!CRTB;9!%{o+$Ax3lXh2AfBdC3_19k+6y~&}qJxtX=o7M?S=fsMoR11SiJd zIEe~;9t24*-z(m$i-IsJ-qwuui>S?M7hgW<<6QLd8}Q=LQyj%ku}vOYEd4koa!l#S zDKItVb7nGM29}=}Rq?Yrhu7ga<02Ef&keFuczW|mm!<1PS=#10(nnM;Uqp{0?Xz+X zxS{%r_4;X$*eYH3ku$9h9<-%7hdPK)vT9-?dF42!JxPaUST}Vpo3;@-7z- zIP^xEDn_oEUUL=^!o1L8>$oSofoVcuk47--HOIr-bBeVEH>NOK6$Vi7IkiTeDuc|x z$9PULPEycXnMgA&+<`^(aF1!-96BkifBBT5fW!?<1Lt6rP3Iv9GQZp{zcOCm2Y$LH!qztUvEgE7Sn9@Cw}^tbme zzguf%X8b7w`t+4NiYdMBSm#IzlLqNG=ac`_nAl~~Sm?^jd{3(WGWQzaMe4;MppODo zqb0gv^f+3U4DJj^yhATb{5gRw^@OFD$LKC$r5thjj}u(EO%FM85t05D-mK_kt{=?T zxsrUNFZU7PLHkL0J{F-RKSCI*qB7jQ)a`YZWTdW2ZP}Cx^W%L{dfj&^h;WkVciwFQ zaky3cn`sH4w#$f?6V_tm3u&j_$-b`?${%;%h<4!He#gz#v*rh6*DAsA5W8)VEcV_( zX%Y4}m&LxvZM*Tex_&=BYg6-fyy|vd${(m3XZN^Ed?b=VhVO3eWOP~NSVX#WTBb1N z%h8PI=R-7*tPt6@f~wPUh|j(@>N|D+V#aRvzYO`0 zUbmSWdE5GQe+%VsPbt9e^M7mwY1o~&GEVbX6ouaAbAn@y3=I0LL>%*XOr6iUb zF#)(XxvyfQO9E(mF;Rdm%p%kv(0YC@u|G>9#CUiPmpIQ*f?#dV%i`bVNx;|a1Od(? z{xYib5D{yi79Qxr>dLDxM=gSPv4U|Z)6yGq8qn>8*zRMrlLK^%W7s!@Uc5$a?&DQN z6{SRppS-?;V%|qR!gD&6l;GTDOq7-10)JQ+pHv#k2+u)()~)yio3MHU|Mb3OlV#f# zfw9LhNK*-JM@YilkrH z@D&oltj;}sI9kwE=@B{rLx{HZ-Ns(n8%!k$Fd@~5;0kj|;U?DVyW((v!a^D+jw8Wn z{kOZm`RS7aR8_uk5L#&72SSzd3Y&Js95$)N6{}S5Tt}PYJrjlLe8xoZ`w){f&~0os z^4cbVo^r6oCMr+l6~b3NGJ=bA4;n3yzExdTn5EgunqtCo6wUHItKQksve{RhxtjZ| zKZBctJm+U~sJBb!hwVv>iY?@W27aoL9NopR6EUvmI3^J-r>*!@r0XMgO~UT52P+E; z+qxOyIhS2N5fE?I;sx_|vcXq&cC(XKYNBiw+DR+Mn5Szv%U{9+3ZSnu>YE%{ynVVa zdjbL*#%_okNuhe^TIz>r$sV_SvNlh}DU?SF#f!)LK8~pV{9arR?O+^_kDh#fjlaz0 zy$fZIs<4!~_>G)=&$*%ti^2TSFN%mXTwQ`|hOvtohp0|Jyx|co@gVbqdT%xXG&qcw z&6t@KzpMM^O-pd1xeA9DlNytH?fjj(w?0dU4XT#F(WC;bB9qA4 zb%jpSa7Voq>3lan{Yx+|1SG#otL24#8kzIF>9K;zCSUdg@u}lsd1*^%?5p3iDv|A26bOr=8B5l$FLzNT(O~+c)KtRgXMp`NQ6W%a zh^XcuAD6~X^Aw2ToSOZHj`2a%WtB|sIF9pzT$|R$V)qDsNeW7{I9EDY1=A8foS=eX*zeT2Y!R4$vr1)-k>SxBFKX* z?z`PTKguWmv{&cd-y_o#QxtPVGHYT?D*QbB+SVbZ>c)b5K4-(CT4jB@4YIF_mC-1N zQte=D;bAjmGh=NKh7J<&=AELRm)P3Rh=&0$FAP1Z@5 z%)^>@_-{Xj;a+zJz2}j6Pvd4-*n42u+7M)<#%`)Oyh0tTGNxr=}34diVLYW1Jgy_*XaaPOYK5_Kj zfn|PG)3UExK;X-3wyYuYCG?WFbQ8=)e1{@?NvILQnVo6SJ~1$E&_I3J4~FqLOtqyY zg|9!aAyu}`LikRdz5N}E)Tnt6?z{5rj!>M}G?8lFDzoz=YRd_Q)dVqw5-fVmWOCmrFqh+<$op;04}F*6)LikV{#B6 zK8GeTRCbBsQy4OX@T15sx62yoDdBOe#_LS_{tS?#ZIjsw8g~i*@4?8uSqX>@T|WaE z<^hJ@W*%8A;bqKopCziX)}{zuNO9)LC^a`(ja_mb<=Cx6Qhu`}cEX4P7u z=tB<_SdGwP^Oe2n`EBcW??Iuyn!HWe{H|67`R(R;J+1G*Mx=^OtkiF6qK_Wp!&wNj zL5Z1LsL6xD8>}hrdka1ZX2z}Nnyd}6eJO^57gW-DWyBAi1XHdOBS7-NUNvb-d?GTV zss13wHW>)2*mj9{c*vVs8>^A2o>|o~8;~JLmlUq9DdKI?o*5V$lB0X+1(&tL-(Gbh z_I+wUH(M==;_m6LrCeQ1z0>;GTXoNl4m3;a1Sy!e#Xl0oi!)}N1Dg*JIIrA@nDw>g z1$(xf>3$nul@g|4;cP`(i%U9e4MVgZH<+^KxR#~ZDW@RoZBSE3HZSQuYMwTta>JH4 z$F6BuTirGt@i({{%*1?j-SzkU6u|oMz6wrtMjm1y2(9}^04xjL=oKSp_??<* zY2a3$fhnW|`R1;($XI2_z8s#^b^R4u%{G}XGbMp^tw7XwupJH4!NCwsF#cWZ&JeUu``^Z>qjCN=h)ttHh8iZ0wC!zH}N~%7P1*9Z|1UiY5EkYyBX%n!;h>C_u&Rt}g}dQ0@k48tyJ8LcVPF zd0%8?aH8COt_9aI^5%#U4M!EzJ85|vb%&D4B*lF{1W4o*GuhyJu$uc~>10Qf)OohU zC7w1mRRnt1lSKxlinW^2nGqJYiyF?|h?GFNF?G(#A1vf!w>5>5&~`!8g)`(k_IH(; z`qgQ$EjLbRw-+4`LX-L3ikqNuui1Lf(H2_RFrIeksgMw)JPWIFDh zpsvqa@(t`CMDnOkuBtT$YXVSl|XJoBuIzF$U78Y}>nHR|I2odCL#r|h0IXu90AOQ z5T-Z#_e4rbov!|Fet_$uO?W4Oh#l!nyeD(ueuU!I$6Z~y_;WYP1sVZ#sXl^S%&I+1 z*!*LMQkd1mabWo%+0|I+Aqc0Lpjz-UY;M5Agof{0^)0kMllJ(|W1be7Byf%}Yorai zv?hyM=#Xos&`i_}`omBX6$_tLMCUKGCD^X8kT4_bUNWD)vbKn6%b?ZDcuXZh zq35i4Fpql!>qvY6>)>A+BUJ=8ojgW8ZSnvYyma=$K0AYCD&S5jB*^+NQ{-H+-6B8- zYW(9ua^0KoAga6a&ROv_=vHAw3HR*J^{;1xqf-6Lq=@1XRSYYPX!x9+-NM=)46Hlw z;J-Ibty^rX83L6~Pkn}NS%S?Z)>P+S0gnlzfm10u*>$kmlQ9QAVdsXK9GMk*FF``| za+W3Z5A6iGfo`k$H{l;GYttOX{q7K`d)FJzUp1xFk$ZDk32k+lM#7>pX^$DdS`jS)EA0DR<~FKSY=q4vbivnB~K2}QRM zD>|j_J3;tRg+G3A0KItuQl%cgfbx}6K^*1}E;6PhSaieIaIL<7GaW=KOS77?BW0=r$TgyoYHN&~hnBRgSOecX0 zmP3zC!YuV0z2X4Loi{G7nQ+0){%>emG~F9c4pZ>oG<0aS1THA850p1D{V^-JblCPJt<->aR-VOt!0`;-(n!#rro3(#3Z zn$GE2p7NZ64#ZHgbps~ueu%MvJg#0WCGZ>=`@>*s68GktZ&W|yc}2}Kp8`i*;?>mmJ-Wg(%AZ`YDvlyhjsJx9U~-&4)N!> zQEc9g0s?3N6p8)mS*=ZS&aP==%CIXgkWHye4alft9r4KwZ=yk;lBGu&i*NbMF;hmOjiA#O z%@|ixJh{d#x;7z6%&s-xo2)sx_8h)D>^-9G;W!wVX+m|xV#4JBVfFCcboc-nZ0BzD ziNG?u?$HasyV3}S4CN5sIP?y|?dVtJHzlu^B28yq`EjaX$Jdw1Ix({_@;ZT_vnrSRZn(vFvis+`4glhrBV3U0#p#dk^SD#gf?i_bJ(E}r3m1SC z{q5L~qq3l{LTAfd{47fC1Z&9vw!EJk!=%mRt`rM<&D*ogfkPw%9Q^AxqaLv(l_%eX zWC`}T{_itv6HJ}s(7KDQr^HUPfMFcgOR~=?FutyhVMBno0soIp4B%q$3l#ml*RJbUF*VZN#sT6(kNIMU zx_F96j_)k7hhQA)OO)xtp~xtjO0hnC_cQ8|9#bNzH$YJ4NsM%Jp;5vMS&km3V@3+$ z8nM*kFMQ-dyKD3gtLHpj(w==2ojEi91=gZi9?nSfSu>p-ysy4eZ@(Rb(Vxz=Xr+I* zf@b`OJX6Y1;%-Yf?bo)U^6U9=$W4@W-*^({@ zw)?>?@UEm7MD0{VoTY&Xz~%_wX8e{NV^v5r6XS=%D>r76tIg=kbIc2F=eeW8d+Efa z7L~^8_BX@8ojIToDd2~JEIzl?R;Tbj*)zz(cvxu-iCLoyQZV>q=n+F>*xD42Ro>59 z{bNsGjBYri^LGt2iZYzoaO&#ZaXHA&TZ(W^S(umS>w;bIl+{J`pFLcQ04O1w5XGh( z0+R#41w*#w(^d-J8U`D|rJ|$GzSO!`sWZZLE#<=9Z&i}qwWBrX__!;X34(DDE?0Ca z(vTf#OAzZM4i|E>jgFUtgmQ%(2fmE=p>m0%I{wyf^GktWsSvxeU%8q?lTh@-qs_z6 z>ClNhgn%|xQcl;GmA!C?;V{7tRNMNOh{*XnXyF?7%#y9jFlg`WpA=H0y@Gkk!l~an z`22Db(z3>25GU$jvQM$0lPvhYLlN;uTn*Cy0utl{5VyYDX8;di9riMjDO#3kHUt3v EKkLPimjD0& literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/installation/installeula.webp b/static/images/auditor/10.8/access/reviews/installation/installeula.webp new file mode 100644 index 0000000000000000000000000000000000000000..2ca4365dc627e239823d73da97d40128eb5309e6 GIT binary patch literal 41940 zcmZs?V~j3Lum(6b&e+x&+qP}nwtdF7ZQHhO+qUQ3@7|mJvB`F|lBzsOb-I%$RnUcdkq7fbWzKX=0THhZ^y_WYOM z#J>x_S8oKr`s41edk?uad$#}ppz|H!cjtExu-7jCg!th9>wn^Z@Lm8oxla0J2iRAO z|Hc7+`w0NP6@UQ$=PU8cuxI{pe&)SmfX?sD7vs;{0$`+9^$X**?{V*#za8)hP<){L zev6`u0hs=}FV7wG8}l9g6n&R{Bi{D)@}v5v0T4ep&+kt8tNs50Aiqj}jgK)N04Mz0 z{PloHK+4b8iv1VhZf8v!<4gVnaP<@DtNAhZ*>|&d(s$t>_iX;l{>^`<|85`LC-OV? z8~inQJhzVcNN}!yfDnKY;QT%IdH2hI8_tGcM2#>LVS?5FA&uH%1wBp?}x$qRn~i1-VM z8m54{w~TcSh<2w3YzP-RoQUtr(X~SlPwb*da(4msp}2 z5t)c${XvRA$5)IM0o9h~S4&pKnd1EOAx@-8==l?F6qw!UPQd<*@r}N+$s8RZ!&?y+ zf}Z-54jz=AqmEr%JNOrWmm6EW9+r)iW@n(s1<#tk>i+~sek;=)7RFXe54DeGx|x{H z810M`0>o_c1sT+@08F9_?__^he}qoI{_X@g-ih-ty6D9HbkQkwIUD9Q)1UnU#%SkF z-xbF60F_>*dL&Bexv(+?Nd}C#6;Uc@#TmGYre%?O#zM{Y4Bq&DHvSN1_HBBZEZ|a` zd1WO`-}6OwSQ8E2?NRx!R);^8=2ujiz0Nxp@IpWK#M$dAH@P;pdE)qA0xrq4f8)kN zt8i&LuD+8kSsaUBULD}3CW{xx+OUyIEmC)>*P5`h!LiFhl*~r~33$LvtiO;>lwu-4 zFL`pzNDmcg3a(E8X09bZ*arzz9>Tm2k@#tw>vyq|v#ZOLJiS#@Vd$;yBk$bFb;N?p zmut4pKJA@Uim5f~7J|oLTlUTB zm8-2Aon3%`ltR-ae-}TXUwpa8YAjXvVMnYts6i4NO+=-r{KpK191Ccf+68jy% zF4}ZEe8%5XQnScu$h=pQb2lT9ejWH)F1MASTV9)9%08V|Y{ZV|qQ82#SF{0|C^ zS~hCz(DobJwK;Pen}m~_cly8#+X)?=ptzlX^#8CHe@+cFjBJ<%pce`X9&rHa03?3xpc zuheEXb8{fn`NK}G>3c805*k5Q{58OI#GOcnp27y}(-zK>5lBGXG1c79?C?soRfmF} ztpQS6VCp>c^({BW#_KTj>0)K7^n{|(u}p6ps#0p_^{1TuV&T*h(&-%bB{0K)E>PJ1 z(F&TlsoK%D>?WJ7jUtbn@`G>Eom6#kPN)Y%`^lP3fqI2&=BKF4nM=ilgUD^kgd2Ea z)P(@vM`gYi+N)P>tL{A&kL%BFCFd5OU7}7LV$_S^0}oXT)Y$eGFPc%07`)L`2h zahtR-*`5S;f({${@lK|Lc2mCR*aysSaF?LklNGdJcYdABBHv@GV%M&!Au3=GlmZzS z7w$=fn%k?$j$MAX4}w(gg}X2v5%pd69)9o1vIV9qe{NXig=`r^*IsGEKH*gAT|Zg* zgNNL9?k_k)G0wvO zJ*WONyexSBN+d;gQ?O97yS2w7^%|t%f-nV3J&$FG7isqGV@;_)=?B0r^zkR7V7`#z zJlVq)YGZOYfih&u!sn3hDJV(_6(i|E{7txcuP2FfFnOIDQ3cx5l?+(M_j%D%2DeAh zm?C0aX$|oN+iel;-5cGeE7O5Q9V$wo5+}@f)xsFq{JZc2qJAFNRC++9HI=ts8=W$X zM;6c`HP&{@S1(b@y(j}Kgf|${WbQp1^4%3>E{?`-tvBTG*t1yZNSt#EWBcskppnkW zyxz{^9&%o_`8&HeIHA2z(EPggC_|s zO@W;F?tE`4TTZS$o z!}8w=(qep`P8Ivww$7)GY!VChilHk7n{paS?(luwLyo!EtJO&Ziawcm;43BXM9>?D z(3#^1XwE6kA77IEwO}^~dD!O7-TugU+iwn-j#8?gP!n>a2Bl;p-z@m`+XQ&IGxx<9NQb>Q0K ztC~cTj>jF1oQ6DYeCaaQG?EclwqUc#`Y~z+}LGk}0KFa8V&AAtN zM#}>cfTusaGt!=Y=V%meM^(ty#9@Y<_7z>EaecquGjb^;Y&_!R^iaTFT679<7>Sk( z+R$YUvafk*-JQ-4J@H?<@;ChQ{%MX@t3x`QuC7vaX{}~@&hIeq%v7f|_7Qlp2fahB zle8BW`nQiKr+Jxqi;alSS}+Q!5~hM^@1em+_lbKO5H9r914@dr1Z*5(moOqWrx z`c=MFd{G~Lwbd%6J(-U>xEu4|2md>7Y6Wi|jW@JJqCHGW#_2EPv+ayq@t(6of|B4u zY&0Aj4SuFYuYc!+rLtY;uS31TM}7oTsVe%VagGX134Dj7wNt2;vAo zk{$gPKQ=EUXuvOL=VDiL#6;Z@63lP)E7P0*-XpGleHjkb4FPWvq2b|MmBm{@(_D!G zr(ge+e&o$fJS@bpXRNvq3N&`%7eoLk?WyxkiOy2jwacG5WskH~`=tI2bej~VM5L7m z5apEpcQ3}$(m?wGw8=4Zv)qANfQGBw>LHL3sJ%ASK^r`xgee`{>90zAvn=&`Y}YphxG2hVZr zDpU|eIB`U*ajO5Rf|x@V_4am_RR#ll)u;1=l{gf(ZBtS}%zNDO)KFg;vyGgBe^8l5 zecuMR*ab$t!K&+CZyk#uikxIvs9L6i{{gtRdfL7meZ&hg7Q856MO=XBj*MuJGgUJWpbAo_Z+*u2Q*g zORm-3pYSOI`P?fIuZ`V#zhI;0O4kGe$t;=ADb{mz6;o{4%+{;fMrvVGqZ(9#Ri9I` zj|^x22Ds%=gQih930I%qw}=0wpnv?kgLw5`n`bk!o4zosBmkE;QtIdAKHYYV6l(wj(Ygp`^|48s3|K#i5z-g$}6G4We%gVv<+K>U{m0z+7 zReL}xWW^zk_f6H;dGDzRj;^v|y3%-Zog%7>>|M(FD_X;9M54DT_O>9FU81kH zQVq|VIg&I2%TYSiQ#k+DDTtPk7>L$Lq|pBjWSgV7Jb4s6m#6=i?f-vQs@yU1;CrCo zk>Z1e2bfjr->#3D$d_Yc+P-1NP(mCGh-Kq0tK`wt0hc{#)3w6WZ9Kk^2d~R@D@LPH zpU6T)hF^r&-DA8`N?f4j=xIxJjZUQJX@SGr2MH2u6<&)b%IF$S6J_Zyk&GbEQ?B;Y zep`aYhoJ(<1PHT-tvHvbAW3cG+kf$zx&*;8nsYTef-@Tq-I9VwP z?6(XiV>uAMtf*Fb!x#n2@n{(P94XN`#(O+Td(ZCTSXZ$&xWPJhCX z_~-UORkc&0?mK3~#ROf$v_@q0Rf!Dfl0=n%uzz+SxOoxl*VC7qA|LF7(&`6YGCL+B z|9b$k-F!P7uuzUxj3bv*D~p?xY8W@~V%vnx1ADNPQiJ)4NsJzJWBaZhNi8LT zMqQ1~xCbF~(U5u9$sX&Q@6gl7J8WoFZ{a=hE2GWh(@CfF2VMa;!h&#K(IVbXIRox4|s%WL18G15jfG_r(9^ zg705~i$OFa*V@*=3JC{yx_Z_>MrqCy6JK#%p9nv-Ze}oc$4Nhm0D>uH;5}KB?8V7e zAl>g*1yu@Fd|iB2V(=g)P0S7u{2WSfFv3Jxc>bN};4sB^`%6Vm6Pv4o2E1xWbg6<8 z#1fOyVDw2}u%Jj}1@CR2FKbhQ+bt#hofm7(4U|6N%0|jec$C)F+dE|9JlKL(^Yi2m z5p6+$4_$}cpzH)=AnB?amLvWmVg)(QiLGWFZ@&2&)r6_`W;nwY@X;h&eE(FtHExFn zV|hGglsVH>@g#VNl2a?+!kn|}RjI;gZepp(QLul;1e(V4-a)U=ckz*G`L{|Wi>{Pg zZ6B0p=>A#s1FBUuELL9f0eQ65{ub<;?s~djk2wiquIb}T=8kwa$dxr6lo)-VQkM(V zG}zyIUdfPwIP%T6wazsNc{k<6`hzct3Dg@{X@@iW;;5!XtbK!V=jO+?6=)AAh)7UtGGf@PH) zqH1&wx`?%4>)=!MtV^%!-&6~Nf(MEiqDSyA}Rtd%e`*zoVYuA9SoeX>lS zwqz9R#3lg_mrsx&frA-R=8+HN(x$kh4l1I+(CfIbPid($5&4YtFKIz*|4y0=|e!P9&A1`24$Y)ItE(3P`N94R0uktg`VEF zbvv|Mwtg3OTh?#VHt4B!-^c(KX6zT)X#{wMqd~`1Hl`l$D{?)(|IyoRFs&>a^1@t! zMk8S0aQShd>-PpO@bt8U2x$kikbrjh+4sE01pMcY9J@IelInL)0yu za#@E^+6AC3PQbaHr-{H~2ekxb+hCW6)dnb*ORn(2F{sUc=xOg)bPB;k%nIJ`y}MmE zcop!!TE-00U0%N7tDswBl& zKttH`rT#1XRk{ok?HRO!6*Lp1KdRb%OiQb~?_U-il$RmTMF zPgsr^rRM}9?3gfbi7Zy6Uzioq9)S#2d#8`hao((VZ6|n!?L^l(mZ4e$rCRGiZlr?J zd+mB-k0A1=(#(_yc3P%hT@uN?OpeZt(oaaKRVvHliJfSux0@DEibuK)Z0_S8Y zv%yJQG#?NdefzFgVQZ3aYGC7f4Bz_K8GK44tREm9Ve%I@O}NX;skdy)|E4b`2!{Ce z##HtDWqDZ_WU^c(&nO%n4}6owvd@H7qGc(sY8Oo-npRCk60D@m@6P)nrK3GaXVgnI z#s8$!(EbB@WF4}h5JsDT%h`Uol_FESSz&5kZ;OwBx2Je4D>p*tpCC>^c%cFw44=J7 zYsbH+q^rhxpMRnoaOw`TlChs?$`TGVgu&}M36Csu82-G?br3w=(B8A0-k=y&()TTD zj{b3FSi1x}J}eh75#0gu686p3I>7;KR7#bQb$z6N;@x8l*B~I3wVfBmZVWXEg%%W|xOhVIno8#Tqi`~bo33!u^ z%uNi8sK3Y*0yzmj_@(<1OhQFPPK~8(c~^%#S)v;SvT`S}pYsUX#-1r2e1dOJ4@VU^ zngtN*v63hGEo4n{asU^&2LYHhpubJbZJV=PyMIU)n+rIos)CwkTe6Wkk0)wJFQoqN zw^@45r#p!Elfl~VWq)dH_KAGWF4U0P!F^X;G1u2eE3l8&TiACKPE4Pl{zypTNz%lb zV6#Q$-*kv^)3~9-*xc(qhGw!#_ivnjp@iZx>r`^qswn8sLj~KPOCEAr?K&lXI}@F? z0{u_hGdnN{-di8D4T(R9NQnzX`s*$Xs@V9%ErsEHHz9s?@~ACGo??{~(G(taI=~*9 z@n?XT zCZA6-=n=Ew=k>h0TrZ<{Sj)x-z6;|;f7P5INiXif5SmX$3JRhH^Y(1`)i+uzs{O$0nNWX zT0*qgyiY9-6mm-$s1xjmmpFf$aQfEczYO88i{% zJC7rhSqdY2^FhHa#{CS-dXYw!3kp}$4387xxpd(D9Cvumgz`r|yD4BG8Z}`A)aTm_ zD;$`v>KzkKwC5Z~U3qk9w_39pQ2ZV>asof;zv>`HY?&X?1o-Qzh%lbQsZsC~0Q}WOOiuL~Og+@o4iZu` zBu#M_5?y?26B${61ZC-}gTt%%o7j@UbE0_jGH;F>o#Ke@e{GtDEFwG9bdl$^Zf*rv z4?YY|caL}$#LXw45OYIC@f-!BoC5Ee_tB!s?Crnih?4A3ef<(!CTi0ic3ZP`Gm2I- zQ|7mZNc1-OYMVgxjmq*iEi)fQXk?e<9ACjp@H&c?zm0lu{UolhbK8{m$c@%OE?o5^v`*eo{Z0_(=^Fbi}~U< zLE?KJuYL&ZYJqacfWOy#krYFzR0`wKeQiOlO3dn#StT)qez8%zBkeK?fR@-6v)T_^ z%044G$!hyB6`ikh3po^Mq>r#|YFXmeC!r2a(hC2$w%f}{9wvwt8Ab8Cj-nV{TlF8m z;|||>Dm^S{iWXSj=5;3D=vS8gB_BPH}dj$5BIfLy1pDAxQ z`!}#qzM7>J{S%Vi6AO|G_w1u_i5uYAvY-bhuJ`Wn-L>5ha*=QMlZ9)=@&0IP%dS4y zg8be7m|)aC7GRHa_-I83ZXCc{UrN5E+6rmN8-1dBp200Ep(<74QKV=E2A%|4ajvC9 zKu~e_9$%lu>n8(isPcY5vh=!b$tSve&R2SlT^L_##i5d4LKlzt4bwC{)*RB4%l?vp z2!qqh_u3wlkZ2MsgZ;)GxySHi^g>+m>2=($=`^J&^m^3iNXMBGl`G~m*|;K#SET(` z%|1Jn8AOzWfJn23p@oXvW{z3_q@7X0h{JvhRQ&u+KO3_fwr+QW3B(@JvMq_K2x~(o zO8?`E_C?7wN5Wqa{BBfEmhN_La|@Jmm#gMBF6t=6{23y$ST>Ea4zNi^(^mJAl?=VsBjE6M z*OtzV+l9ru^{0MFvMUgv_7E4N780W%IsS8)vT_)rmCXNwfakF68Z?IoVJ$M^FUKkZ zN&ZO2B^Lp<$|4jQdTt?NWd0X!nkI5_Y|WwfDY`R;;)PR~FW%bMZZ3zB#~ljjb9LdA zDFB;04;6iS$V!uxImd$`#rfQyRNruM3AygW1S?42k&vR#PfARWi5{o>AFYnZ*iGy` zIt@X?8zN3d-#|XED-#6D8}P09Q5C<7#I~8Kk+lD{+37m<8}V3gl2a{AK#K2Fkm(2P z=N(+^7&->SvWH~1G5O$qe@)#c)ed_GilgWKA2Qf<75TMz#Stu3?aThORyJ_2iEfq6 z9hqV$=jH0qRUO?0_ov^$m&&f`>ftzt(+Ph;$*bSp0vT@SGNW(gj&*S6RIoypYo+bK zKkn{W+{DeUY%?Ak8_t*%QhU5}n+Q?f(u0G4X~Z7GI8fRSNJQ*>N&Edj^OrbGpNfQ# z=8Br}Cmr@&;8nrX?-Q5j$j37kmjeA0k6$n-4Sj);6E)$dX-r}NS~+xh_F~3T z+S6L2=^hkPQws#2LXpFuyNV@n`AzywY#5^m?Y(*SjLnE&u2zlE(I=4a1^--XbjXFUeBwXvN-Fd#oCig8hj1iGK z(BBlk4ojW{C5VWq(ARh zQaiQVi$lE$UlyZY*9;jE839UXpP>LGy)H7?75z?gQx~t~>0MU%j9yk_Z#x)#()_Fs z!=?UFWTjJQ>P*^1nV{#}*(#^yi?VG!aHCjZXn)Bow=?6)?RK@(u(r7HPK729a$z8{ zt#C1DdRFG+we!c4&qkicg`U|$v@E?QLNI#^9iF?CbU4i1*G{HdAH_+|VgR8Re~ANU z>8uxV#5kcwKi_Gj1Nfc~ebi1AJ(x{oFVjp~GO4w1S>6L7i*Bn-+p{BQVuUixIK{e2 z-X4rF!iTN+gSb7F9f+<`;z0T=VJ&8yGixoQoJ##2=tggjyhD`HTTT0Ig0upHNSlo< z8u^5cPf=J)VfuAm^HZO*vGB_Ejs>0cnP*@d7}9s+5B(n}m$21YzgtJ0P6^xgQY5oo z{O{eZUe)UcDm?ly3?)Q%Lg2~3ByG|mlB~hQ6>05l1pkl_Ttm$5YF>8Vg&mB>axqRn zW&B!_oY2nzH#R*tq7fSFnI;Jfqe^UTR8S_5$s5<8m#oxlgt>M!9)(*r0pNoUlrsfR z3YeZtQUKnLhy()A$2GcMtZBz-1nrcdKs6+}Lz-gWniOzFKlR@JLV(;g9y*7U(U`z7 z(tV{yh$XK84k6@s3{NA2+zZ0@`K-%;b@3bqZW7P#@RzW5aS?=b<|DhE=Vd}rNQMoxbRa?AcRvEeu z71=dh5&?(&@3uc@Z^{5{z!3fW_o@9sK)_wIdH@{#rGjatcbGL7VW0-8@Pi9^ z%XT4979KVv6m;`+eO5Cv(*FtG4XOM`UR-t zSllD)(10TzFJ{XV2lmU6-)n#_d+Cmv7kj?mkxx%lH33rf(F-F_@#${k9y>_0viH6b z8lwX`R zo4Tr^GU5(tAz>)7TLf$A9jfT?gsoNG@&y9?g za7XW{9mGfhnT)JrPyUSQPqn7s4>7&Z1`cv5bHtP}Pp6Vz+Km{E;F@n@?ekx!trI4C zpluKhF1(rxmhP`QJhtZI9FQstgbB=AFbHo!NE>IMbSCrzwXf^L07D)2W!(6Uy_ePH zp?BlXRrTd@!p*v$f2;wa5d-WlL@j%QFwPB7`R1bs-n?h|z#hotC;rEuxPR-^cxh{< zAyo1FH;DP2Fy+$-@QVcZXLbwFxAewrAph~<*6@}%Hi<~5d`H<~b@}wo?tT-bX*;a& zfUO}4E8|&`tB&sWr*U!{E(Uj!#4CS*43n&hWPZ4I=fulGNH8>Ih%DulgMh{W0SBy` zqR%>qyh2rJq>fc+jF07EG7EST)t$Y_5VG!hrjbBpBrj*nF1~=U3*a8xp-IJd(^B1D zC*NM82JyiUiCf!SQVs<9=$koNz`%% zn_*F6l1jF14uEGIiM1GohEFYq#l#5D2ufS_UK67|%LdPy;g;=^!etZ==ro_^z74M9 znkt*x5E-c||BlBQuB(#;eiHpUo<(!ngbN=&*tH>Xt!!oaAfm-!rk92ab}?*d&!zG7 ziY6@Pqgj7GL3>eCps3Vh{tPa+tLNfVI+}^hP)s<(A7frkDCo?BXT&X+UR}n&FJv@Y z$l{P1Sg9gD?tJPH31_&?b@M=WYMo`MqEUR=SL9|fY5oSfogRjSGIRTJoQ6cFPRPgn z$GFh5X6!Qo%GtGE_<~pHYSVUiVRLjK5a2<_h$I;xncBfUv{)?|*MK?yYM5M7j!tmd z2L>Me#W8u;eH^SRf@h7Jw?k6iV zTc(e%-#$Paj&ukA>nXsF04eJ2#f_y~(fwrP5& zoShBmb-BVMwCA7U+g5oJZ#O6=8kEg_GP|}c&Q`MYPj?vXf{F8o0`!FOwr_%*=u;MJ z>v5#YvD<*q0r&>>T%|UWu9MlBr|tq8zi*G+W}FAmxK*b5hp7Inhy=kr0QHXW{S|lw z9Oj^0^#*c=#xt7j&zwlBHco>;SPNFryaa7RahcNw+il!-5RoxY2twHZ)SBfEbB!PjKmSzK*z?4RyrD6%>O1+IDU zlJlFH`5m1(4EPTQ;vAkBQwD9%hz0|?vy?7h-8sv`-cavT(+UMxPC#5>%bF?W=eH=P zpU#)}Rtx0;`XNF+;-fX8pC|mWm2ye|Z{D)qb|2BzEp_D*b9H1~GKhA`x2;O6t4*DA zpm{a~vGF3&9T?jUQ+jrH>b(D+1u6zS`Bk2vcu=E*-426vidt*RJRr64eOx>XD4Q+1 zM2I<|$}LikT_!d!Bk$6-{(yKQ_W%*06Z*=x<5?#nZ=YFF@D16M;Ml&WaVYu9XQM1e zn_IyK9%G4^QsOow2-Hc-;Xl7f`@SR@IzszED7Gs2=^hV~AOsAm;*CQsRQ%m7p&WpV z4Qb9E&H^2pCXR6v(u%9R_eV5t=L)oicDy^5gb@){u@ZmXi zKe`JHXRj+=5P9%;+^;)foH4$5(&x_B}c+i;oeH^syb)y_Tky+Ajv4wi@iEUMO|(rdbGdMy22(=Gbr+!;Ymg5`Qj z8Fch#yayjNyX|pBOta(Kj~mDbj3lTwpwb#0nAiGGZh0HXe7jljpAz9^lwK%V{hVO9 zr@)*9g>`LC?u^z|3O93_o5e*y800D$K+i!?P2e=J9=HY-;$tOtf0a zvW=mfJEtK%#Vf{!!xJToQ%D}1{%dX;U8l(&)koTd2hXJWX0piBFBHEtf~Zv9wbPcO zT90|VAkkQlEhYbGX>=C}k}IHl8r1lyac5pnl7b_lcq`I^$Vbs(pHP}R*S^JvJts1? zvfH$F`rxE8vw2Ph@ zJsFQkkY|Mv=FLC=hMYaPMQ{X+WJ8scP3yahQ7gtp6#^)PhMRT@GqKQ0fcqroFwT(n zzXDaw8E)WmOS1z6PR^i51<=FYw9S+r%j*x8dF~~4b?j47UeZ>~@=aBQXeZn!zJVF? z+cM*DP_V~98#lFy^#ug}Dd;F|Qa&|iwgVP@yi*-#?B|-3r}7yBXrXh%U%~%0JIQ;G zDQMaCJm5AwUO97xKv~>1m|yVJcEI3;ICmW|Al930lh{=Hch%d47l3+IEO6s9WC`&u{nGY?Zs6LAkEZh*)Ac(L*kM+aa$+-3*Or-&ESS?8W-myV z@hOpNII023WNnqxEtiQxT?1OWMt~c^lfOFNX3UBWlzwv<=&}RYhvtU=Rl>3or01{9N^x*B#;EDLT^|q+ti!QK z1#a+nNm`|3`S_qp&O;D0a*7!@K$p*>_sU5d$PG*WuxS_)vB=ja1wN9l9p&v}9kE?! z-(>t;9i?%k){d?{y9YScd8Gv3fG-KIfYqCWe>o|J$mFUzsvX)jtYMf~|P~P7mS77&5t4gxE3;{io8Z0v&qm!hUgsc(lTFDg2=~HPjp_ln! z=dqJWjNZBxwoM`Ta3I&Vm@q5Dy{qpx#Vn@U7FY-iV7)VYq73scGLCXgZ}VwaXTO-FYw*&a2)OGPrl~RhxCzsGo;^8`p0zI+ z7CGz39m~4O_u=krXglL!`W|!}>zSGy*>xfQiR)Pv$cC#wCXH(M3L|-p0nS_kz6TZoxd=ALIz>IullJGnc;8tdcBFRUAHcAa!c%K;AvBeVrQDg|tX!q`VcS-v!= z6bSyna@Bzf0yiRk9eFo62hV4=eHjUotEmtNPM52o{kk#nOqHh_TowlExqd>$h>}uZ zMMK=Sy{s$Ly_z-VyH=0*IBAEsL!?GhvGY8SZ0uCdB1d(Gtt9XTNlq{5k`hR1?*$|Si9pX@B%1Kr z=0RR&8Pf#z^fjNya9*fi;{jbXD&~EJ(ou5dJXPkjJ>?3MR$+%;UkR+W^DxIefHNTT zu?dP0jdtelVTINKZ6IbRe-7zuzrH)+`}Q1Tx4^Rp=i?6?1cJut)5R@L?}YWP>f+BO z^&irbu5VYgd{qcu=V1rXE%m@%K6OlGU}j*r3^0k!{^x06P`~CLZ(ek7np@v%`IzY4v`6bbc@(0_Qv=0qmEN zj0W9p?xyTz$!|`b-oG2dG$Qb44g7_8TL>wpevvO-EvT;Qrsbo}cV#n{E%m*_+ti8` z3QD%ls*TrlgA<|_t3__Xyc9tmr-X41jUROlgZ61TExN-PG57E(yx*50T*ASl0%5(G+(5VWE5~z;Fc68dA?o0+|v*uu}KZu@(E76XE}m zxSShl{#6}Erkr3*g6BX-CfP}5pBA}<&* zBZ;{s)1&mKmHj?)8g7o~?d<`6g+zD3L_tSi+x(VrkPmRy3k={mW;^q|V?X%Qhgu*I zZ!clwpfgOuOcM@S%vQ!JrSE{~+P5(X&OE z8B!rX3eUU0$BagP8abWeP4Saw6?Hk6h9Ly0afkGafHO37a5wp=o)Aw3)i}PjCn(sK zN+UyXWYr3$Z0VA-D3Jk_&O$t`>}g^(zR-~7&F=(Qu5U53~`n< zhA*md(3=(!txRPZ##HM`76lINhS2E#5kle|8-EiU;; z|0)muN}cu~bv{fW5JSkv8#U=tt%tz8byFxja6+j@IzgQEQ@_lbr{2(eTn*l1x#jt_mE1J6u3$t?Tb+^YjKt=}tBw>a z8=AfX#3w`XQAK$uXr*8}Wb7K&d1dG9kE&%fulWbWF@hj1dzD5*e}o@i^D%!Yc-P}{ zh_bmgzF`jNrk~$)y1)BZ$!ne*|2lPv=b)sx5$vJ72S$*3&gY&@`8Y=!@4n9hZq4%@BXhx2CXBhEP*7FU2 z4%H%xtKx#r^|>*UPC(^P6_SDJK(B8%TK}dc75AW&3)^QymT<`36y_LJ(K8Rm&XZ*^*Yh@Jimw2XZ}oR^E<-W#Gk>gfMRe!4b@w`gTG~N?_Bfmd0+BMJV7? z1(XiDvLhU_4dJ+&^qDljp^j6A(}N`Hhk6J`-S>=Stl z(+YZU*rZVpJVYi-CCzdTRZ18Z1R~LelfJqaQumoz5*<~BZSxgo>c9UG?KgR4`8m?h z;QTh4Il92ImdsH5;#n3*tzOiSKxv6I5qB8yJL#>=@4$w`#TvDqDq-oD z1qtKXV2p5Tb)8rVIHw2rX#9)r)p0yL9On17mw|gf|=!&v{20qrbjY}u%eojeYdl%%es~c z+q2d1?J}5GGFSWk|K?kLQSGZkhJY>jFY)yLp+`m|&>hw(R9)jVn_K}S!yfoMn)hcA z6KV(?&k`sbF?*82dG4!Qq;wN`?&OQ3_n~7fUYU*n|7-*21y!u?l%aqr3CC?fkO5h} zg0y4aq{frnW=82+uEH6e^LOuf@e!eTS-~YU87_vK@;l-(C^5%OD9J(45`#zS&5>%N z2iIOZ=b46uRA7f?r$79%jKn9eoB2pE@fc80$IS=!R4`;EI9SR!9-LSVyomCudyX7H z;CRhOmk?Q`h91K29N!xWIHP5|aMpd*+h@5S+uK3wYB%BuWuO%6zxJhda}W?qpJ`s&fgDEx297ZDXo1#Tp20r9SC7(}ov!+3HDOaO%63=DQF? zb_#hzI>FE!e~o4r8{Rsp;gbDV;E}x@0KJVBjf-+IW27fjxf(?KLjL^+gq#}MPhGtL}9U77R6)v;4&Khk@&|{as()l+~8?BZHy>|3R(fZ zAE+KLWo|w3#g8{{nSrz#?fzew`hd?GL2p{Y!=L|)HvQiWJa5ucuJ;}-%D;;M^g4zg z!ITL@jIp~eX3>n=)5kzKCA=_#pIxG5VlkA*L@0B2H;AUGPrlVxz_f+^I{wP9%~-F$ zo?l;(6c5LgC&a(dB8)~ZtCCvmWzkP;_s76V2Hv~7MSD~VCh8SKv{GWN zJCWJ*Hv8!x1&Hl+Y(nXKtX(W;XutrDVZD5a6Uzr;khTiP2}H?XwXZnf)J!oN%=oVo zF(U0FCQ5E<(P^}cbquN2nh%cVGc0beoQ#~z zrLR!Hfn{bO1*r@hZ4LJnWd3L6*<azkJR6_19-FNvCVIalQ_P?ERQ(X zap9T|NsH98qObLW5(u5#OD+|bH20YE&Ig?45RXL!xdPBF*O1oPTD%vU*-vvMA!QN# znN3}S87Y8US_E|%_}VY=VjY{40TJC{xpYJRc6?zZyFIB;{k5ki@Tpji*JrCeA5NGZ zf`wrFmSxyep`}C=k*3~HR^%B{O})DtW4a~HDk=+dsg$d$BYNd>=!#*%qq;Z8Z*Joa zLS-nT57EtCQYmd>O_1x&F6P(w7h-lCjjr{*s693xk+w*LXYBcQLm64QWwYZ|^fI^5 z6N9o~YiIm2W|E&Tg1?i;HIz}N^{x&!B5>@|El5y&fmt;_-SG%wB8h_cbX}SHqkD8E|aGmW3aOFSH#4xK`7=q zO8=v+uVh~T4*)$t!oQcHV>^U2mNMP+N>g%P3(PJKU3b+|2k$3{;%lud8|j+u{6jlG`5WRNqtAmNpGBM;_xMORLG^n7QA}c57#i(R#TF9Al z-fu_#>*$0!f|#COt#;Y_9Cj)m>CS;qhF!SvA*uM?9NS0>-3{)knHQ9RUV;3WsxGk? zpxSq=H~6KQr+piS^|$Y(Fl-u^A}LViFqIKN2rw;Y*S|9C%g$oT)^>)}D-C*Z+S(54 z&orfN5bAn~H)`j6J{!^Z(*EQ2gR+cHq0i9$>80ze^I}+_KTO$^9=t=Q(%x3@>omhG zHjVjFC_-p`OD92qf9K$%JW1bpeoGJkx~O;)?2AbB#FknO7$vB7Z;A-7F-y3T+!Jg!wI1z z8iPMe|J@6$k1z}y=vE|*fwv3PV|f(n9lt;R8a*$ySgOPPZC12qZr7`XZ8_-VBNYiw z4eT1pRw!<7!rZgEWzU0#$O-OioC-08-Ma8bOsw2}iPJ69I==rIAG?Opx7_27S8meO z!EZD@xHMC8W@xTdn>RmI++Yu!M-o_iH;P@J6keKB6hGH17xirzgF`}KM zqPR0Ka#-y??tSu*lam8XE2&pD;Cw8%e-p&`IE!6`WW?lg?aY%JsFau6SYW#%6_|qu z(_kO)tqa6bu_KO718@6X6KWSu*F)5sdUSL*Gxid%|uI#(-Md{3ENA+#W*0|N0mizdWw9cbBrp zFx;IeK}HgRZ~M;F%2KMW=Gi_#cQdGIoKR%Oo~_EVGl5a=u&Rx3i$&%@`>%dXPPt-n zF`78xzGE&-fZ06@XiAX+Zm|;FHU%Xer|Af=^SE;NWtgFtUFpTi*9giaOD>ExnSj3 z5e>3b)(@w?Ki_`J*mz1gZzQbq5A*|f)RWn0B%%IGlbgbHc^;|6r(YL0!#2X%ngTm{ zaes1%kGwvAmB06gNKWQiQqDv8!_I4nR|wsf#Xi)D&MTyR%m6A5Gz)T3utR@HsBScK zJ4<~}&eSq!8B)nQTjGpH0|zrExJ+D+Ee&f1u@|V5E?wT=UUR;)#K^fw1;i+}7al1) z)a`R4hAJd2{c<-=wWUmPHMLg}1#q@LwI|qtYKqh2WRMkv8@<`jAv6}yowh&LnV$v@ zhp&}*ypM7@ppdy^TdBd`&9PEyLO=1h%GMC&ux|o8df`*nCEB2S(T?t8*w#qI_l6`( zrc)3f2F>X$Y0f#UZV~-2&s8gVe|NVzJ!brkB0t+VLa)m1nWVLlGiMAu5nMQI{5JoG zGIeL?HOOr&JSz=i0d<;T`%sA|94dfrb7OzbR8pcY``Gx1Q0j$qj7!ljHCC=IT$SU* zkK{;jn(LvX|AJ-l)&houz}(H6rGg#UXoAS+o}Omqqe@DrP_*#eI+&dTQIOQy9cZ7P z*SE&ekLFILgze5qb)I@gnAinOV8WYs`7O+@+4e=Ua|tlb2h#-bbNgik&o~GX^u{E4 zlfXLK5a5|)H-^8we{ri}pnOv|8olNLuwxe4KSVd~JARHu^>9x)49q(7BdG%}MK=L6 ztZV6IxdJ*K?Zb}7loMzOzJHkg{Wai!}xh*}#5br#Hi>DrV);mA{<1H*z?~R_hCnK2+~ zd^1cPNv1xPzKteF?0w(bge}~{hxRlU2z`CfeMdj>x5~L%y6;XHDXF#;)wRrLSPn7v z0|;h!lJ7zo_Jwi2I-7smFg|rZI;-Ip7Rm9`RYtE$jPkS5%j4Qad4$2~;)9f1MVn4MTawh)`8Wn~H|@}iOfKeeaobLQhM4Q%+5-=L=wZao9ua*F zEshdK$rQ)0bW$U%R}CD! zT^J=&+gp8TVLceMN46NHT)x8PzQ@9Shjvrwj!95$x(aIeU-erB5si(~UkgroY9?M} zp07+pewRvIY*Ufj#LZR+c|cjAKswW|N|##QQBU^vSL{R8erh zdLe@5Bjw@9?OFz^3;Q$BI8)F^lHdT79!*q-a>jPyc&!@|wQQGuuQHQZ03`+}hqW0d zhzWOl4!Dw^aCK6?P3e#MjN?=P^Ws~^ul+R#J!@U&`C^C2O=X7>&;k6U#|U zk0!V=fAhKJ1JiDIKy%EyFL`=Hg7e@_h;1?1p}zh%Dsdgzx(;*fvQ=}%KtYNHIerYu8q)P7Lxd)Q3X2FG4Hnq9$EBij6?>(FRc9@p9gnGYSktV$AZF@`=5x$ccq zb1fjWmEJ%@uxh%Fw#IEd^?T->UOuh5aBb#V7>FUW5HyY&dE%88>Fgxz+HPT0H7sXk zu6dXB!=cmR*^EgDj>o)!OcM7!9fob z_yR0dsu9O#f+a&EI95NQ(@uPoT*mF^>z2-NjDOJvbXyrq;&CnA*2U1iy~{`qqe5W# z)DQKZ&TgLBEbOtn5U(iS^Y4tGKokHVyE8B#bMZ2+PL;!)SV9u$Kzx_;&i?jaGHoy% zW;QdvzvOOH*XNgKn~~)-n$N(^xA+qG&6I^Sd0`Gy?_1@u{IQo2llUCz^Q6A)*3Hdy z>%R2ll2>G@Jd1*`70JL*q@Z2p^87!=epGK&OXP&Y@C|K+>l<|t0QzROmnG}$BBCuu zX*s~55nQ6Yf{M7-oFg@x<`1?P8_}ppMQi)~u|(!n#gnTQLh^>cd7bR&bjF&IiV$>G zu+|KYXbgdS1=kWt1LQgT-Lcm?NdJ-rl0nw%xzAL*8;N8SW6#;)l&}_O+lncs zi#1?xhZ{*e;<&i|rHb%3t0v zBH;QY>tS+&>*&c1Y}u|pk2b1N)Z?U&3dY-@?-Ke1DGayQpT0h&V_szhw)%@g}ylAPN0YQ$a|B51M98rXAyyR+5$F_muq z#n{&x;_lWUj9CN(!gLYQ33>_vt}Re41Bh0Y?vwfhfgVl`+$sr3VQL3jq@KPTlmYbY zu)9^Pkn&=$^ZQa5I+Vd)A-TG_>v&bA=@^lz2Cb&xd7p|y+hLP2w@jnrT>T{o(1bDn zE^G}v2kbSy8o>GT)@+9Pg0AdwsZ#@jv1vAzxhIC8c7>TY4Tl!~uU8ie;pW&3%aH-EUOEuSy_t`K|uG#UHk7v@)a*;(p7yO*Z%)dn06~p`PM(_YP zbD|9;#PaJcY_9mAqp`AyvSTktsmNgNrENV4F-I#lry0Z7vmx#&3Tp~(G}qcb`EjZ^ zG~Yz?`=ewgg&>+kTn;S(xFLH8M4Sf?2F*E8s1D1ddMp`TBp7ddmX?rrpaL+aEIlChmI4^Q5iQ)B&Jy(j>Hbsmk8 zQ`7c$hIYhF!_zVrD=UWLry3CD!~L~^x4;7m5;Hi)D_En)CRkqdr+4p6XENC;$c!13 zv%D$G@C85%G1vx$rStysQPxFR34^Z>M855Cv0p`nQRi3JSelAm5;v(=&`{Ek_M*)` z5kmgJhg|*%K~KU;lJ3^_f}GSY;ALcikJuGD0?8lk-&+8CFiT|#{Y`PdEnQDu2|_|UzI`0TX~@k)IxQ@Pg!9jIZQc6>o~j++06z4%Sj zNJO}jt>Fq*;5d{VW}?`84|~Mu8~f+y2_Cv15)boaBktw>k!P;6iyv#Fe2|6+nqrH^ zYt&|9KNrZ5g;5qODuF-4fJ}EBh(m^7JJH``iNgnV`GN_LwKd^Hje?6VF~19yv4e`P zI&Fbq6efqSI;gd>h-?lqy$o10vvedHw{+na#lGzD-jQM@ zss}x4!nAjoWl)P`6|S(S0+RV%Gtp1_ZZk^wvA7|UEwoRr<2yuBq7WtP7QAX74z=fW zvMmz~Q*obAg~n_njr3-OeAHz_lDM>EeN=%GOw>B)$I~Pr-bAUIbmGG=T{P__P)9C{ zC6KJXA+y88CnKo^tPwRfJVzHzCwh`#P3v98NZH#nB7eiNg_v=bY&P)=`1%%aK$evr za$|+^T9~i*QZeJ4_)aq~1k6qF@e~;HE*4^8VR=A52iV&~%aC=kF%7n#mjmS*XSPLB zt%PcK9*v#pjeV!-EE>g1ndTQn0zx5cc09ujbX?OreHKCg4`Is7dS0s%bSu!uq{ zYB<(MA9E(Nh8ZXw+tLrdZw$b?xe;Rm7p&14(msMGSPje1ozPMed)N!T$RP}> zmf~-A7y)WJB`yvmPkce4E=y_6Q=t}Z;803nhWcuD^Vmz~D~!Ww?Wud_lCn(Cxj8IY z)NgS7-Val~F5|W>(UqaR{^Zg?H8eJC%5~qu%e%4V!DQkm9tR?~r+Tf5?j9ThD&0OZ*|2ABV7qLtX)~+9e5{(wOy2MK$##{>z2FDU>jqX2 z-(CLN?y6H`V3+sBPtJz{P$g>dj4}110$(VYB!y___GCeFMWS?krC^2ZEXqw7J&|u! z3VN06@^7Un7bI+}Jn5e;k;YIX41TmmVS0R&2U5kXv+I)S6RUd3A^xZX7wPy+bR&p9 zy~(z(%olJhliMPH(vC#?@V>#>-2jj{k8uFnjlXwDUv-&Gxm*LMYVG(^TrQLW?x|@e zypNh*Q#Mk#HSLDIzc;$`Mh6T>!G2hLaLd}Fv{OTtBLcK~3-u?V9dR3+>uUvy2mFyD>IVvX2=UJLSaTQH z3v)l*HKAShM-$-p{VD^1Tz7D$ymJ90$6OdBS0d-TL%?^=T+8uol@e0zDCVMe8Sw@0 zo$b`)`e?HXIC4Z6nw~~j!l-=xzds(_eNF5KVg6O=eE`pPKz^q1rRuACG+uBja62Ma zbL8M&ZemU`SkImZu7HAG9k&uemBA}JgMSvov8okIQ#|h%@hnw6B-hn%k6#--mf2iz zsK~E{Xi&K?G;~^HI}|FC>r69D15bx0^>mEBIGdvycj^HKNM$Tp@NQvBFM$3pL_SVstJsesl_(IRUG*?9!S4UaNgyE9rw z5%E*>O!tmzih4_S;%o?iyHrZk7XecPaAo2`p}~`iEfP=w@aLSG>g9)Vr^}cr8wOOP z=e~rrwD!SqERBz+>~3o@&%K%|(g>~ijF7t^6Lw()+P9l64ksVHmkDZ1A38JEtVl?r zFMq!C33k&1Nu)JR+)+s71LRLrHNEuE7h8t(*)5!6nzw$FnNF=uS2L~_RzH$Q^xRfR z$^+Z5-IK=9xWeT7^ecg2*d3^o;Ip{;S4EFei2TNmF3+vF+CV_H&aWTKH)fwRpw`g8 z2}5}v5ob(Az!!PBMcMPstF!50LxRuxD+EIi&wr6QOv3SOt|IomUjVcnz&-(gla~J9 zIjW8TpymfQQj+6g+g`-LYL^rM@4HH8f>W7|u<_g0_dVVu*<;lfNDQfzJ5c;g4eL*X zM@NAAqW1lntR;`11~g9`W;c~LzdTx}pVE+&tG0j1B}HK`$^L6{N|RVEI;BL0umik; zgNdJC{AMBjEUBtsVVJ@OPBZ_!KUpI zrE|ucGxJE2jTOkI8;tEu7%*KB{BjE+C*DyzS~Vs;0#;FcYg%Mk>m{mJx;s)$*FY07 zneK-c!j*QoxIeBe%(zV>&t6jX{CC34NT#_rotpU858({}wug1(^a-MiBL;_l^eV8d2KnfAv(6Bu#n$Kv4WBacF?|x_ z&3K9f@w2~1<<)RwqF5CBN5qTV^%By2g9miaK-9p@Dog9 zs=_z;$4ifrK&f$fhwpfJt z>h`VBT6-po>EN%rNSs2o|LkEG0vd~qiuM%g^FuD-amfVlPcaXK)fV)QJ2UMVjM`$5 zX1z;vWi*P|4%fiDYAvNfir$bfmkM@|b=TG8g~br8q{8pFPPOfBzwB~If4W0O!)_`+ z#@Y2~ps<3l9^(DRNFL&iwvwh?B^&-tcE7Wqkc478Jgx*?w;jGnm`P6uLAKSQ^bhLGvJ{cl4V>|3{Oclt0@8_b@1ww{`T&j9SxvfBx10!`k(r~7$J zH27^cRTa8G6JGIm)eR!3{5Gtmz8#KK;=B>n=g&K93^EB3`8}m+t%7~-=Y7L(;8-oN$iMqnNw#9{>zY9$yHYe$jPp;y1;L8W z4599M_oYS2sd+bcr7K6^N$7a70p74zn6P-iR{OYo{3YJ+u#duQn}y;18Rq0AmbbIQ z0Ow;5R@D|LyC;PX8#}`e;`x-Sh!CXfZr5E%08z)YsTdL!$5^1y{V+p63K(s|Py;E_ zXgF|zy$Q|x#cdReGv|n2rC@!a=6dK_;)mH7{do<{q|}}tX2Wng+_KJ{cmeE6O8yrO z(j}QbBAAi29fi3PR3e6lck5MDZYsNAmYl@Y9c;FjZWbl$RSKj1%MtR@bW{)cWV;!f zzA;O%8$lz=kFiQ_2IEyGnFjWvZh~OOxmyVlZe6b;;i!EI;ZWOxCrmZgYDI>!P+e!v zN~l~CDoqxt%ZqQj?I`;@_bP6@qO+?cEXY7CUZ$&|T)N_uK^wBhBRKwA)gIvisrUgq z>nO|{tG@3(McO%NptiHeH9b>zTyZw!YQPK7AUpS2clphJ+zKD-SxC1}XRHI-_)^$X z|EFAKQ&n#T15yXFG}}A*cUrv6D}=I^F1a_hq>kpfAQK{P1Z=wwi`P?F61o3y8=(*b zvaZh4^EcIFh0m#jb=R>U`MPt7P&jdLbis!sdRJKMwDcaEC?@NXMdBU5hlo+ybZG$;+(eF)Ozx=@H+=r{)OfQ() z85%9@EuZwOM=#=UkJmI?P?swvBZMf~V1pmMMuzDf5gTPGl`0Ht)2&BP-Nb~D)vL%3 z6~mU$+4&e+eC<_GowHo|ZDsZMrC>%#i(v;N_+m5*|a-V!<2i2panOjnR0alZVhD@(GZ(@q@f-vSzLM=sK$@(3M-5#M_fEMS>rm(0!pCzz5_g-gV)1UCiX?$IC^{ zS&`{RwqwG7?tYhD$QCOz6#wfZn?|SjeF8q23n0o1HE#0MOLAKRt;f|VL;T)sZn={R zC5pn;e}@Npb5QNHg$(TnOOo+&*m`fE7uioZ)zTX%vq;K_Zjz$z5%8YYl$~m@;Mamf z0wXq+l$@zcMtAUlTAM|VnvB(6frL#51g|_X)632h6~V~p+p$!(413mFrgp;_=IsAJ z3cg&wjWw*I4tl0xyGf=Tmw_eAN~16k2!x1D+ThG*r0CZ`G9TESmRD?Ssapd`tHJ)};p+CJV5p~4KJ}@q;eAz$*`ii4(M5Oz z>WE$*J--E9FO;Z$$R?+Pi#x%fZ*I2b0zse=mVMI zh1h@|sD^QXN#;zW;CqemySLJV}KsKjhNAdoe_)WPAdL^RyS z$h;ZJn(4F*f;=vyO2~5OZXD9lC{m~Xdc(9pfhr9f)TB!lfm309(VSlul7_MZ5U-1< zmrRwVd6w*KL&F44YMK+)9tc00@$QX})P2F|JaG?SBPYojZ1@{y^fWVr(mneC(sKEA z7k*3O1oolY04sTqqD2$ z$aAtHa@L$1HSv8H6NL74P&n*JFRlhXJ?;B#qrX zLpkcGHHLkHR*Q4gq>LcT(i66`%~5+Xb8GF}&{7+zL=P0S9qKf<1OM|N zMBu>_r7tslKAqm{`c1!FA*&AA7OAiX=2tY7O#sNt>Cjn$yiv9JuzXWpdWeRo;|KzX@_8l=Zjva zm%4}B{b5LL-b*-qqJV-oN~=kA9QXpkPI~JPP9v0!95y^;6H+`2)w|*$r%hwRV()SP ze}{v+45C;ueO?n^-`Au7GmLioQWHBDB-`Eyxkko$e<5$?$l8JVy`l*^B|JLf+m25d zWD=*H!=59d^41C#UuiRxp9P+NfM$lo3uk;CVHmc6YMu>_3fM-pR(||eH?DCMaee-E zdD=M|seR$Qhq*POHcTiJk`nCrkM@_cHH-NOli9jCbto25ozojW^ImHO1T`yD_bZ3S z)yNPpjZ^Z-c$ObWF+SR8%0Duxe`O0a`GV#9L7@r;k~Q*%QT=I^yfzNt_mCqvOE+qR z5eLFgcBN;dx(g;Hp>2Xzj@oM(%v?!BoNrveTCp)(bhUR_f3xktIXRam!qu zhRcnGAt7nA5i=qzsw51eB*U#^oOeFtWc? zNk<;to!t?5!!2q<%Y2vfQbG2XCme@0u6`TD_5h%`Q*Dydic)3D)*C-peIK(OtXg4u zoMTk)_3hSV3iE z6ugp0-nCyW4P8ToDL#NbENP)$OueOjBD_qld5jrTW!R|9x}L7nmf#rH)#Z!wZBsnH zgz4fL-rWI1)IPBXgXQelXt~ARK?@I5#$~mmA8JqzCbx`*nmi47B7p$Xl_ckTu>Kus9)D*~0 zrqw$lrKU`j6Doe#l6#m-!|zra{T0QNI}P&ctD(UC)4w0TeTb&eFY&o$4;#5@;ohoDB3@G(!-rUf0eV> z`it*A>ow!_s?#tr<84t;KHTx3ILUcl?UeKf^Fu+9W-mP3<9_uz;M0_rxwA<9x zngwteo3zzB_yNjlrPV;JhUw?O+1|ga4-vouA#5C1*xlYnqA2`+v7tdJbVT#P6T2t`{FS~ z*WXVl0q1)&&lfF~hzOw}Jt15%eQ5xdpV_kDLmn^tfrP|q7|V}j`ZauRm;DKjnKX}DJ7ndW#zdT7F}B@+VM^hGPv_fhbi54U9`N4>md9PMHJ$kHSxm#C+IQKyEwb7JD$0-^tG?B z``&1)Yh|p9nVTiI@a>%Ij+6JO>0cF3Bwj2F9efOBp(x@(mrEGb*E8FQRK1B7C*)5} zbFf7)aOjGbb~!^km87!9o;5g$(JT6frBZZ;A%;DSO?4~LfQL1tomt%ZWa@=5nACQ8SH&f(|i&b zo7o*U1UhwMg0JoeDPA7;zpR`9?~Z5g7zN|XXfF+Cw@ZKmd|wB001mB=FtiOEw5eY=N`Po=tZ>Si`fJFcs&J&RJqaDT+_Sgo@}}zlJJM5XKC1Ng^M%6t?1=D5$mNKR zQcN|7cnv)$n%Uhe{@EiM5f|xeaK9A&m9qpln)2P9qz6|jk%V=u5jh1s${2c)ulA|8 zp0V{UCm-#!hD#6^&%i8(AM9An(CCBR{L?<>^ll z;p6csq>euK%}e%)kpWw{5Cv>TP7`fp@|@2=MjApNap>*uIS_ol6Xy1SDH=Ue;+wd?) zVm2ta3e`UmiXU=1(wcQ2B*S?i6W_U~a>+@0h!O58x|yTnyhEqEF(d+<%!<-ct{h=kSTu8I0B1o9Apa$Mfq92blCE$J1qF@JvtVwnE zn_j9%EW56ce>_`R9EgA=oAV8cz`#3GVsh~pzh5>W5Rl0Hq2_3uM1;N!LukPHgys3V%~;AJRcseGR6-oUBAPS@YPZs zI-CrBZWC2|gPJ(aSf9bZ&4sj?oVET~eE!NzdOd{tUUNq`q2;XJ#Ae{z7ZwLd%9*o3 zol8lg4751kxBY`!1 zsvDiX2_8X@YvB3labAMWXunGmpQu`LmAFdKyeaj?T#_lnY4(ZfC>#0>O8!&*-NQaR z+^CFkuh_TBrT1rM$6IX!oe7BXCkituVzrxoEO{u2glrgtJti|&10zCan!G^^9QWd| zIdDZ*Aq7+nD|QoRJHU?XeskghdpKoWbC0n2uWGP*+U^2yc z?A#LP(hE^Fz6&|=-}N$Gf7>xGk3NMOsX>`E>&3@YYcV3=3i8uX8*1SUj_h2@*GE<+ z97O}MLVeBu38us@8N2-4jM~TPP~4A|FYr(k3~DHg=Ra4tFcM7#6(U|tqMW~&0F0|r+^zEzcn1=vhnxpzJQ?ExGQfmA z8do>dtI*C@xR7;dzeQ~GA^2=Ca5(WKgPYtd=@d$>7Ws<%jswwYOXNB?H=T(WQ8_yu zI_TNr-&T&pJ4P&R(jiww*I_Dd4Ly=Em_?GE6qi=HYxh}(=gyrvx<`f738PH>?Kh7Y z;=!SUV|GWBQuILyh?Nb=EkLL=+5(025=8GzZHaUfgi-i1GERNB3IM;tLW5jKo?O$+Np#WX(yPYi){4AWJ!HT5~w zWCG`+{x}y`?Z7L+;=mDZimAW=)YnyMF$^FKzDA=gx#?~Fe9{(P;;URW|=x9n^o!*x**%i-sR@6vb>0npUgRu*;~5uBJRto=S))wG;Ay*!(4EqpV3 zUb1sk(4MdpR3L;S8s@1mt;Y?tLOPwrL@oPnKx9GD0zYW-;ElHw(3!jB`#EgVCwn=m zqLgeBS~xoPJ@OGt_(=uQL6lMtj-d)>Bud8woP3npQCbVpzTy?H&jnWeDK@sV+Ge^^MgTWmk5+t?aVP-6mFpsOTQR2}DE+@0T*y6nSnivF_QL8+- zSE-sxpUXkpwtaZUjmEUhOoF$Cbc*X4EN{?Rj(vpRPo;ZBA}r^pvkY5J4IGF_IU5Pw z+!xlaadIJ(s+0C9NIG`RrK)X~wrr4vUMJ}7yqKn_=i>`N5nMI^#vs?SCnRkWaS!T` z{D|hxsjSKA4M~SG6$rln`Y%e0Bg~TVtKN@9K6a+RLm?=x$2r_i2tlk@YquiQ$_>qZ z2ug*)06!Sj{`3PJdG>D#nhaDR6~h3u*M+W($#XU2GlqXy#s8=u!)On(7x%aI)*9pj zRa6*N+QgVw3*wL^0o!89s(B<nv*6*oK8Eg_ZzN~q%qhU2vJ{89(er7m0nxL4Kyb~|=MmI}WT43I>^ ziJw4b2DvK#$@lb@^J;=Lg=w%*GdahS?hsF$=`w7PJMaca`~Kl1$tt^K!u86<*!%y# zy@*NKq_zmggaaJG7*?r$Ok&_C#%LZ|>B4G|EZWaicd8{00(zZ{nr4-Pk%9=E|mDT}^?^T|s)_NFA*5U*?gz$l{V&f~EO-4k~;&_bQP$g{-}q z4AlRKW)QoG2VaiQ?_QzrYD#^he;ylSv}%q-&Uuw<8}2n$J6!e4m3djLhsDF0kY%b{ z1T}f3xz)G?h=CRBO!;WBrA|@QvdU|k^5UOd(m^F0F%-JvWB$7ed|n>>OZ&>=i;uGt z^G0KHIArb8reMNl8N~%0nlbkD3Dh?n;JC9rYfrOlQ)!Xo&<`i5ofgmg{zTSoy%LHn zCsHG}g|-r9w$(!%CYdhD;MO#?cT1-^0ssl0aIbP&BR1(~Sc#-P1H`Q4aObJ#Tt)I!21nOS&xsMC)**&O$1-HxjGFgFFb0bAQP z*K}nCr$=6o1Hf@>)~oh6qv!_CppR}tr`O;V^Q} zu*MZwI?!b;?|8?%x*WA4NZVv8W)n0TX7fcNbA6P{JXVIgf^*@(_vJcl2&lk*eyJob z^8X#B8tnsBv?kz;AAi41p9(+`mSRF6G0}>IxeXTbDi!B#*RSfrGdr%j?|^nGI~q90 z#K2&WK$TQB#yib*ewO5N{=KweHUqlX7ir+BaMF%e6(0v$f~Y*X&R4|fu1wYQX@(1Il^u9FzBa0&u%wd8?RcU$(|*rXQ3{T&j1NA0cm6x4 z;umRUc!mbB;gb@=C+z3N?TOsmp_*#$+MofJV^b$xX_aU|4*NQ(;{WIfTTvtB0&PK4 zd_SLr_7>)Yx>|%3nJ4zoZyK1;ET%(_Ie;gdX+ zd$10m3rS;_u@IygWw5v@3e`2*t2egR(J%xb7l~V$W4RloiuuJF~DxT)%LeoauR#zy4?kMXmL7qd_+7(f1Jf@TLzAytS@uBhWXK}XLJylq(H zgoM{1f~zH>+jzH$u(Xn$lcuY5TZi$q7z!S%?e4gnN=Ekd&2K0pNJcsO3RUfB=*o2_ zFztE8Ye{l9Ex=ojM!I8;#VUgSRW_6ch;@(`&MAnH|24ev^b%Oc3$m`^V8FQ<2aQ`_ zPTT%f>@{Lc<^R7wKWhPyt*J@_Woim>^($0Dj?8Pjo_#BGHSdh$trAjz8|O0w@Zr8{ zNaKBC_Eue=XXyI1KTbm9P6cKJp_$#v&(wr$8~YZZFc=zc;mIB_An{-Lr?58|+09vW z=|6*T?){Uhhtoq_V$ioR)m@_D(rvor;mPn)kMHl zs?DXXo+6^*G^cxB36U?XUcTJ!3^*%_uGXcO_@zA_4K?eiv`RCE1(~3b@hsZ#Wxh5S zE9F(GSd{NLO-4+pB;EwwOtFe$=sP76UWpFuIy{Llb3z&e{#leyq_l|X3H-EigoT6) z74Z$A{_F|C{pVkU3H~@t;%z`Z}VN{dky1JEAmdrcro3zL;Lu3?7zpNG_&$ieB&5@PwB8>{_Q|57 z)F$mosJLnSiI?EfyVuM{99$mxJMbHb@dj@4`wCo3tWBWUYKPLCSP;~*!kRal$9~_W z%fisNo9%$Pt)Hi)OrstGsSRU($Je?;n|`pX@!31VjDhn`JfrEjX-p}Q%BaT5+~LJV za=kGkhJB%j9dh6INX{F0I8zV&D=sZ_fk+{ym*AVOGGg{$oBH!pwg?drV^ssFy2BdkcE&N`=g4vsvHN$@PV_AU1b#;pYx9i;pZNd zhQSDe@Qa!9Q|!oH@1EzG_i^1AgHChL>T^udBnJ9ofG+_5fnPCAP5tU_sO9CAAy10F znVQSEw!~3>bRj+|t%mToi@E-P0?6L*_R=qW8|cDwIZBXbT}_IRp*7)x&7oHvC5zhm ztjfCHB~_S-%JG?opC)6J008pMD-PD(yjutXAtT=0QhDZtB8mpt?dg0*Vp1xlTUO}a zo3j)FQo$mJT8SZHPd>_08Os`Rav@kdSMa>24&m3G2ro47Mp4VsGhO=b!g}`73yyt( z;^A&5BAGxGnbbvJ|1k3ObawE#xkk+DoH0wE$cv>Ju_(Sy0><_Gpon9`#Z>LNDj)v1 ztE>AXNMn(f*9|lgyJ6iiWsqEckFNH@vsx@^J7Qnkh~VWzV+#=Dqp|&!G)fB=C9$KRk;ntZw0Y`G#*)k8x0Q_lOcC2aLsbv| z3bFtAgsf{-5wo4ePf<>P-$$C&u$1S-3X$-)sx3qQ$A(w@*4XyuM6~IgGMJi#rhwYC zFt8BXvd?Lz@@FksmQ2#RAq)Rj?3$-Lt})9!DC*NutC#;>d|O&v%?+18)z!vj%edzz zsT#`A2Yurg7Y6FMHSK}+JvPCtsmf9ff3z(`h*p^NO`DQE~9ZVpVK2e@+HvZww>(KIf^(>G;rb*s50qq7}p56J=7e( z2QUe?n})LnK#LwO@4Wt9EDX}5vYam9VJLuEYS_eyUC%@`_KX!sqKz_#N zdS?7vt^T^tmXcmIWRGGeZ&_67KUtM<820l$up}}`W}2En82C*CV|M?Kxy@Zp;hHbD z+nRu8+73wB7D2I?P;F@L`k_F!5!(s^&T41d-){b3m+u0<3Mbo_g)PTJqp=I~oZf~V zJ2^%H)BD%6ofFS@F(ly%Yis;O6E7h3#k(DGDfU2*rDuCe9Iio~u>Wc;eokjQD^}GD zEp~n6WowPd1kQES1pj*r|A1i2Xcz5FPtweMFA?&XHV_D}z6?lI+Tme5kb$g2C)^ixDKh%Z{GAp_LhxKO^jL?h7rj@z&pI)R^{J zjvcRFWEM&~^f>KPW(AR}9PgL}nVF;oB;h5Plyg4~>T*FYLzYRf65!@_56cN<5x$mS z2L>26T1&3zAjd@%)jkMLrlY4fMo7@ zNlBV}&!OwCgcjZ{1JEkI5=35=LaWDUF8RjuK>`4%y@2Z5Y;T0n-Hwe-ClOa8Z-pio z*>*R5vLj-I;v|9SEQ;s#{;VZTlvN5v?sW1!GbU|+x7}yT&Ozlq*=92)i;j^DA7x@-D?pmmb5BzQQ?&;{nUqzeDbe3Z<%J)I4xYkV85V6xrN%%FfA? zP(kF?Mf_M(h}+3`k>Ry8g@mbs#vXHgDWjPKvG!6lBPrW-vy0Bb+)X#qLUK&KE7{WA zw)w#eGdZA&{R}D;l3S~7-+VH54b0qoPt~94KYWi6Jq0RrQ=OlUxuy_&-FJvSk4k!Z z@$E)Czy<)Agw7{xq76|*5yRS~0bAdb`Z>Hu|#Jey@k%)R?<=et-%usM|n%^9FKpMEAY^yCmpM$3&hz>40J22Lk-+6}4 zeO>>lvL>HbV=*vdiY?SyU|?bXyV>&rp`c&tiia`ArT7M4`sYtW>JQ>5>0Ou> zNCrwaGmV1C&0j_?I$J6Z0hNY-G`)n!T8LSbGX@%~9ve zNhEgf)q{uWu7Wp4v;WY)h3}(eaj{btvgpa_)56E`=N5~IF*UkK?dgyNK^f#7MdfeT zf&qN_CGOrc3;UD3Uz0jl^LzBqp3VcizR=~M)vF2rd*4>g@3TXoW7(+mT#qtbY&x0c zzRt5Ec8n-D9w&`5zhWU7eBD})wY0C`kw*z_?#vz3jtX8sF~|?AGsWgObK>mzF<1nLdRxS4{5W_4)2@ z2J{Xe+C~3n@nlDe0#`4lePqh zLN-(ZO?-zo-2(E+ys%zCeweB*1>NZ3*^FvUWu!67(UOma|Z zHbKgyDWd-Clcz`8aP-IZcML_RNXEwpmZTkwjnsL)BTOqZbE2d{`$XCyz%Lp%W>Dx& zw;?B3czb1f%W@hWKOIRXc)#QnMqcHREZs+k%<)1NX*f=)sYDh!in=bJLdIevf$Hr( z0D?LEEDY7R7|4ia0I^*c0-=K-U3bZg@qeb^e#RdK5>%8Iey@X9v6OO8QZ>_SetFa8 z+PxCUlG3`CWv9fO4CTjvsKR?SGfIpN2T}49v?_64%&lK2c1RtowwaEY#an%4tnH`X~< z4e2$(h$c-e?dIo*&ub-iBi6A|V+~`6*tl5iAOekm`~>i_`*Bsd^Qhu$HPlY7q8F3> zL}kMy0+_<8*7Y6QO9LKxlKUR(m3`l~2CEFR=+j>{=2USd!s_mbw{JZpT|T^9DpZ10 zQ|mKU48MWIjVRB#IOZ=$;m8MRd+Km279nIGso`oIp?!i5xC(~h)1v~#1IO+ml*)o_ zsIJRD!(ROo*evZ?yPXz~UBUq2DiM za{3pfe>fGlQu&!NEIZ*r|4hMk{^xAc&=QrQ_{mf^&1;4Z z@&fKwsyQJ0P+TKmEi42-+jS~tJ3c8V5gBu&5o9*xr3eUKKWDYU-OFlW>gv`bXl_S4t(nSii=seaA=VMFDo9ysw*ZxFT9BigJb0 z^N<3C+%G932~hILAvk@6DCI{)P{qVXs2rxl9P_utW$9_kMGPx} zs7n_b#)`ArZR4wX2nsIB_Xy6hMy;Z;YK0(N4Z*-1c0`s`k$L!PDaEB5j7_|*%EQ_w+{J=?b zeFFP>_D(kQDD5lnZNa58Bo-=Otj3v2$igkk~x`%;NJL`v z=UgVrOVK?K5u#~kU`}WR3nm_8>l>#G?n}5k8Dbr+P|AGs#m{(>;1^4Ecgg@uOYy0g z8h|I4=3WADNa@0eTny#3(p|{7RWzmJk5-^N*LzY^UTMRAE=1l3ICZScZc3*1bVwZb z6iShhDNb6Qwe&ztw&Cc6z9JE=8EZVi<+!H0jgBER+YwRa3_S>YFK~QG?1}`V=i%B^ zYyz?0zdK`ja+p<^9ILMK1lan$^i$@mjTUTktfB++86JYYs^Ear zZ*%(}eF&Gu^87^kA(3Y3mb-nRtxb=}*M*>j3N~tZfiDRzGuQKJUo>ZWHjnk5h!iK4 z&=*g1T7lB7-W=z0q)=r#FYqV%^>Adc;!l=SAd=x45ThQImXS@w?H%ud!1>j2aKxo; zL`!%TIlv??n;%J8Wj!FsrW55>UT+2J#cH2;*i5mlQ_ z0RJg+yMfYXdP*xu9k&AV5mOH^;vIkIT_0f8;tFFh;juBspPw+2BVV~iRM?1RKb@KL zwLF`rYFJg&_I;+p|cNH*si)of0yP-+AFitKw_YaMkyaUzi(0ovwoTpX!32 zUjjU+z)FrBLGrwGiO}&^IJ;VQq@cn7>&uAP>r!-O4nu0JWLk=j;ZFdb-*sYB)$f`3 zwwH|rXXk{@D6vV6HBIO4epbJ_iCw^w$HaBKXm*E?otuGWPV_z9`i=JJn$T)K1;j+X zn{nDa)m8vK(?ePQzvw_VZ9Q8mB#(d}D|7!dSq9<1F)CDlwPDA9Jn{FuCjAT2A?~s0 zIHO^zeNC<8FwIDk0$9S&ii>$FI3|+l?1|((QYT)4yG%L(@jejf*Cz8-e~PB0oO&?E zplg>%Z8?*83G7n^8XS58;u}+0^bVw?@-@HqE|a#{sKQJ1IVg5A36xZqLjUM5u%+{z z2?wZ+8HoL)ceKF!Nw2T9Euc#j52sIih$HPmU(GZp1@{$ zsMriYETGEGd!Vhg9OVYm%?^la`I!J?_bG9woV3!x=@?;C@|&>I8!p1P1{TBzH1FNN zpyk)gL5_J5<7Fgg0P&#qD*oq|;wnLA7HRTza1gIOL|OHz|6GU|)httzOzALbF{<{% zT*QNf;Vx5OG|iI8_wEWMa=ImK6C{cxg$Rgu*8mSW0XE!`&lPl&LFYfURVarr6t6Lj8b9nVKC+blnx58b|L)2S)f3teOt=`B-Oc)(aW>FEwJ^kKogJ4rJFcjiZ zPw~unOrwpDxP*xPD#TIVw}m|0h>97<#+l;dhp@}if+7~i;kaY}tBoz^k;+rQontPb zNP)Fa?U<8e0TG+0>h4vIj{BihDw{M=3XDQF*eR7(lUOZtOt1l8Io6XiSSKS~M{Y=* zDM@|TC%{y{L&W<5V!kaK0*uxL8)O-``(XQfI2GqksZgSY-c$N_5tf^Pr8{%JQ6O;G zSPk6uR|SwclNy+~AV0So%l7xme+luE|RB%UzZyIoi_36jx1Q^?X zYONZ4O~lty{xBwq7{5B#u(AB0;~B zsLYW0$;LH02Sb|-s6TEb7_r*YvLtaC(X|womqduLoOs2U$B(vGHvW9wcNd;g>M3D) zKfeuQ!q?6ZAUXU}IV>c*RHWI{BKn&$6!p1}bB{?l1%uQgKEzp(R?CKoPH_3-lx7q` zj$BE#NYgf>G$IL#R&$#8?iT2RvEcf4B6*6K5qyF-G!4SebF?gZpJE@q>Qo~$$C6KUjSz#dK#ShQO zC)_l8?~;{r_EZiO|6e^et7!<5R(9t+Ce9fV{d_%=vAw=e`5x=uk^AfmOoSreE(j!z zk`)S?PFyI@wi|MN?{5BB7S&ex?awS9pMW6~@YWz#Uu_)+VE*M)*FC3wzeFbR!thAW zcXZeU`^;N0v`(l2Q|)Fb>-hz<^?Lss(c1V{@QGAD zUM$xLOc_$B%P6HP+WJQ<9U~b4{*$%&lx*yx#PK)|Mcx;)uX+b#MajcIT1x|$b3xP( zqAtdu000000000000000000S5!fnh%c%c+-sdmH<(=q9&TufDxrpo9^HrtF8bg5w? zS+qn=#$~ztV#ZPGeInP_hD4FZk;*)jqx{tFGWUNoxowiTY_o**!w}+tgcwusNIE}y zz3`key2%v+=v5IAJGC4Zn-=P#I_@Dt2Z6iM1cM*y-W-za|2$3t5?}6U!FFtXf4e~C z#aqzK>aMUX9OcA_YRkjl19Ug&lmi`FRO#~4EOdEOwXs6B@z7>ayFc7)n>!uDd|IT# z9t`@Zsi8r66q2~0aFFmRNQynBoJSjbG;16ysE-bA4C9{&Oh-qM!J!mSiZ~9fwku%I zuI8CTcs!E4r4h@x^;UJX%{u{cMhq@j4RQU(hcp*NsQIOUN2GQ~ECJ)VO|%qM=CH862A|m7`m9j86x=#;-)D{*OSe19#T(Ir#@k^O;V930*N3zZWqvgbbRAYL#jjd9tR1AfBQ|I*fQ_#h#UN-YKaf5vlgSdBr5F^gzl5jrQ#E2Q z2V-^af<>lK-TtlkIyt0Uv>ec^(@}uY*dquQo53rqqvYVD`{@6grG%MS`lAgO#9-M_ zvH+K2`IL>I)!6NW=_*iXRwa3mlw#5OM+es%4J{0HajOrmtpbW2@cQ2v+!t0oJc(>M z13AGyU0TG9nC_%@JaxoLa@k(B*#7;6=q7;w-Z}17jL=B3-(M9M$s*gAN&2Tfi5i*g z0#hqTX`j}VXA;h(6|n7yJX#yYs4+ISMc68GjX9Gmv|8)?f`geLw&S&^@>Jj_TN%4) zqlJYA8A#c8*zoD@_1TGx4fboDOgV2f#~bh6O_*Ps32^`>8M2)sj9 zb7rLMhyovpBS6P5_S@5Skw*b1EjN2P=Q2jNWX9oK5EC#=fv~W;nr(CeWi!%;HTF;b zovNqKEkC5h#&}R^d{AZ)6>Mc% zAnT4=O&EfrOseT5;7?LJ8w3cjUtlu@rsq&OhKAYB(C)i7+RQ3yi7C<#g72r&oBH^m zX$2;WG4oc%SAgs;71zUR?zC+hm?Pcd_@((3c8i9h&YVux7YC)v1D7ALG-W>z-P^jW1ERM?OxtAH=m zt-M$MaKq046(CPtl1AS3Jy+T+cFysznrGQ&ZVR;I*WmItsOQKWwzLY0`C<5?snjHR zXaZBJ!}_#oDi+F^OM;|8U-H6SGYs9+M$PZiXd*p#ALHJPGnX3qQU%m>OFG`r$8u)1op zR|`3p{BL_Kwlt4?J;3}tO7MZlZrEX@!E*)yRxxd*vEa?&g+&Y>XNp`{W~-cJmF2t- zTuUNGiH!=%6lIi)?^E9c8{P!xp>sV$Mw9JVnP>~uBq|^lB8{$FjbB0pq;^Bydp>N` z3*d=QaOWe{K6=O9%=jBAO$F>kPLUWpP{RtI;KLQ}Yge*w)c*B0tYCgKcI!QgTlEng zVPd9jR_NgBya5hqJC&#AQ5z}rD(cD+qP=B&F&UE-mHJJ+MUcCb4Gbxrez16iH#ZNy zkust%mfWtybuxh#j;H_M9!*Lkvr4)ONJ7w6ui5r?yZ$B!00000000000000000000 z00D-&9|?@33VAF}BmUq302F{s;@|^D0daM;i$bKLjdH25Y<`?~3J}}S>fzF9mG&I8 zJ0eAAT^j?us-DRi_aOt-2pwY14>TW#xhjef*g5|u1FtLVNb{Xp&G7-X-1t?I>6`T1 zTwa5cOe)88!%W4v()gOL>;^hS{I_!$VfdB8pJvuXU-FilJWK@FMdzM&>M<~dp<9UF zQj~bEu!`{Rh5y5}-g%ofwcIsWAi-uXT-8J#SjH9U8s^;4Qi-kK|D`d#&d-dq`}|6q z5;j{rrpiR6-Et6mapsP$FKwH2{JNH@8n4MLK@IcI{Er?bmnd6Nb!V<=y8)*Iy5+Zf zqp9$h+wU7!xa`R>DKpO)0+Q1LRt3;Np8*}(xRWW=d>xai41=~#^H3C&Q(edg!Wvz<%K&G>O?Db6I zRwj5Kc^JGju)@0nF~K@9K~@2{MYB66PRx=A;x za<%Znh&d?LBpPZaKhobeGKoj{-e{qkg%(mO$p))P(hzob4?>#+BZy@`fu(E}eDlxo;#DU!V6a$;@qMXo`KC{?WU5pKUBq zLOmXl>Zqs8izMn|M#Kc4;;UAOytKhlim#iw7q2!UNcgyZMZGm~0%kE*5J~aUro^)8 zeLu4yKzoL2V#zrE8e!55eI>!MKMszZ+(mvCXc<-2T-u-M=A_;Z0V*`x01HYpTYP-Q zzaVf8ExcB0N()6ln}h^Z_N$CRP`Ud%|_ z_a}^p3G0fq6-QG7l_tA*bR gwWv8JyPp6600001P(f>ISik@PQ1Cwk8?dzi0DQdIv;Y7A literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/installation/installready.webp b/static/images/auditor/10.8/access/reviews/installation/installready.webp new file mode 100644 index 0000000000000000000000000000000000000000..8658437d3db2afd7dc54f85bda3f658e91280ace GIT binary patch literal 13488 zcmZ8_Q;;S=lWk+#wr$(CZTGZo+qP}nwr$MU_Oxx@`FHQV5xezNk(F7Qan8wyOl2u? z@d{QTAPq5LMRi3^!kmBihAp66U}|%a17Lnz_6#Xf65=AFCjd|YT%@_(zN->a9i90b zd6hrtg2MNU0blCz?wntefSPZx|MC;~57SxoB1DG&hW|Q)yTWUJYu>p)uUCM->^IDwdq?w`w!N+Y&(BxyfWXtgh{KEcbN8pX zh5mLw`5)Iu|2u({@8+-RXM>OVR&bg3l<(mWh)RJ`zrL@R4~A=s*L;Wm#jgP`j9Z8o zh1uP^UBdqOAJXr?U(GKxpAzt4ncwpZ7_0W#{#D-(AFW?M^X_j3qWTeDH3Rw9NeqVbtevgN%HS$6U!lg)ts){r-r#ev!#yuTH z)jvR2o)`jZGyPBfH%0?1mSQDnL4!;D$BIv{>N@t-Fi(-x9Mle6R(vU^tkeVrI|TDW zCNJi$hp?r2W>zlqr}Kdt#F#G z1BBe%z3axNsOV%X_y{O8RAkc>FNyXI*HFhG2BsN)=yT^(+KRJj3r{J*042$49gv|{ ze!yp%W74OLnz<#hl?g5&zP3-kz0a;a;T0^EtSzi4_S=fU=#HA z0-UwjJxgr3O%FKad22pOzMhk|Pr-9P9ZMHbUd!iOSkhtp4oE2RF^*s$O8T^)4e-qn zwRQBt$4u<{fy3EP)uSFbV1GjiiycV-*6EK6{V7CEGH6o%KEt>NxY+XLtsN!BF%>`o zlQwWfv5U}Tpw@n)Do*8YPp!rAo)_=3&jz^%l?LttpMo6XM{$Jt$^=lx08k@M&OQz0 zmfEEcG9HJ3*^b&>NfS#PJ`fF}PtohD{oB$KTu8aQ#ZMGO>q5lH%aV) ze9bvGBLu6XQ)^^{XT>jCVlj^Cy>dO-lsZru|6@rxb4QFSwLlkwi57ApDCq0$JczHXHsSX6vVtjxJI4_( zK|CeZb37#_$rLo?eNfPU87N7p0{PBA;dNYK z{=anaSxfaCaxnj3kV$NcvUWlG?~eZ`*Zmam|Ar#o3gLA^Sd_ZghFghHFzy97-CO$CRK{JqwJf+mRP;Uo>UmaUrzyi>`RrkEY)$1=>~td1{aX~$H%@^gIK_Q z3gNM~imCowg{Mzi`%7IS2^q3Ks^3!Uo0_2Z>!8DK<9A>vS}O~N9U>n1f!;&cKBeo! zJqa|p``LdHlAuyL{`FSXhT{4JpL8xi#y%mGmhU{(`Phj=S=KH@P&xq+W9x$aq8Fbc zT9rGo00R1c=$Xqp85_^4TEqV@Lu$^ixyferpRCt>3uD#E?~1e;u2!AP^9!P_yZnC`1IX3EDzWrv#jJj|Ok`4f(Gr zW{k9cJS7&nMd=B5F9%R2?CYhTUfgDESsDxHW<8{S-L^4LWq-vHAfg;*?8|D z3x8#}ed0!@tH*kXN#3lmKP8PE2i{vmgWFksRW#iP_GtzhYwW$;(I0q~#plWzgvj?z z&adp}<%hRPdJMO-+BW&f1z+)-V<6!n^RMtHR|uZ~iMLMis zll+lSOgc5J;k(s6W-v9`%3g|nplAL>(Y+PaddBuiNZ4nJDRw3e+P|r8C9;j?I{;bE zBIm}Yn4T>0&ASOL0xTQny>K=wzq}Uo7VeWI4b9%X9L0L`By3nWn^I(&QRce2sN!vQ zfPe1QxVrg#O+NfJK(_Uw3f~{gb%LT0I`nq-U)2IwSul((>Nz3{({R_jj1X#8PbTJ@ zSQD4@XJ?|5;2seU${Qa1+|7|wdYi)};!_j(zfvb%u~;Q+VQt32p=rW8jc{4&v5E%l zN+$aC1Il01@1gSGwtYF9)aR4k8c-#W-^IrlT;P<$XD`*aq8-NH5b`tDB=&N4eSC5l z(j~!fJ_glp)yJ_G$Qnp7G;@mwEu}9z9QGflO%a!tEAwdMYk(ZJd!$otA^s2@JVg%F zb~Ursr1)JMrk4kcXM(>6hrlY|EyPC7=M~PfKhA;b9g90re|mQ3?}B zyBN15fu`#q&M7^eBy#!85JDQQ-k<9Gh@g#duOj6wU*g74}23dmn z_AHvJk*eDpaPyHel7Ar@v?P0usk3oGK*y)dxgGb+&KAyAD&e$^Y5KL6 zkk66pZlU<*h39ore~}x8!7I|nKzm=jgR=rwCWIsYFsCsNtnGQAkWO|PrHx)Rwe`Eq zw@XGuAq}ExIq6*TKq%a&L*+Pyo?xhX23U?RECbQkl^PAH+Wf~xlmRa1y)#uyeH8WR za9XkStIOD4==Yw&?yeQ(A@xQW{h{jSpXkx;qqo6ZWD4Ey;O4u01MQT3|2e^ax3T%g z?n7T$w%YMMGTh?_-MF_w#BLE|lBhgut>otn!J}yH%NzZ+al3FT^S}q0Vj_2Be(M;XNWrNFxm( z058YS-Q(__C|`ydRw_;~p3$=yntm1104~neI^QGrPKi80S&fs-&sZci5q?h= znFA&LaJV8syG8|!5|-B3KJ;B2{G!x2FXy*8jV{52Nx~z#m;11-&~Jjx}8Aw5XB)0eKF$lVtnQ#Zur0=-p5#>~f;_Nd48aaZ>?Y$cnR@1Nb} zB<(Bup*!XuEu~%mL{=cVz+uu|rt7%1z<124M8Ar#geaQxxX?lS`fLb|+(tR_y=Nus z-mJKkbmE%Io)=H48vvB2o0|u^nN$2R_^R7Jsk1=pmk>lIFQOoity4ezaq@UKL9^py z%(wYz+sR5oy5LC+lMM?j3M=`2C=vdOAtKFQ#WnM*y&0(8WmK|=-}R|DWpBT+!{Lu* z`+^W5$_CgGd%-%E&C$j5q>TknQCbpO9tNWrK!WgVJL0@Fo5+!1%f(rQmL=SDKHr`s zHxq{cU35By^wRYjIPW)Hb&tqj{3>R)FyK;7bp!u2?%3*B_;7`K@yQ_&;;G3!TGJP_ zUShyw3C?kzvMtEFe6#yAI^GdCayoDjL!Ux1rmo|yQOgp4hIB8x`%wO6j=p>3-^5D5 zJx&oD`T4smsvjABiQ?nmTVufFc-v;Sg{ZDR{p!rhlpK=R_qmsuzVi}08wiLH!e!X- zo*l>r*-J#aBwWNpL-qhFE#tQ?kwk(~>Qd;`^;C4R8OVbShaa?6Hns0Hkz?eFpMJ4x zhVoEeM4SCqjuQCK8K9^41E$#CZH>H4TP=xyhdPwJPpwp~8?+ZvMH7@&_28V)zTYu7 z^oB4zGN$ijkNpj6R=Tgo zEd44M#Z@f`&y#C%ncCMAkRH_4_%h+IZ=@!@^rT97Rp{W9ncuipX`x`nqEZGotH>j% z3d-nK11(uMfTZfqWMq@dq9mIWYxq8EHE!7n*zJl9%Yoh_X)ao5kV8}blZZ5YP6nQI zR+S6Fc8CmhHFb#-IOhlp>Au?!K94k~^Td1w6{SzBxWw{T9ZScDVf`%46H55G*YCi2 zLnkT3yS|`OmQd3E+=sZ*hdA*%HZ_fCb)#MF;Ft5TOAf_d+uAx4ove4uo23KMuq@O5 zTZ%*cA;w?PTdi0gA=ncQs$kH`v?oP8G~1i~(~GV9{R}7`X%#BopRZbY#hB=V!a0%R z>nhy+MfkrA(Z=77V7@O0DOf|W8ntlKoH;UoM_cqFtF=vyl?KhY1}xWXCUsC*CvKeG zLr8uUo(SbbrKvGZO72?YN<62XT=Rr-r>fTKyARffHPC%WigV>8*xgUw5rQ_^gs+-L z(DohQUSoqRE(7piJ1unx0*A5F|+rSWbxE~6W}xSh*|A7eAMsiOg@DWK5ZL@EvCN) zf7Ky&x{zxl;?5jSPD)lT+!#QgoM{o6aQv;3qonDsnt|`+8fR3e=A2V-!-*~-UjEth z?iO5PHM96s@Odhh^h-frx1h zf6UQBDe4u?VlSUt7eH(cPOenf*&6>`f&KP(t^pyEq{s;9!+p~_u*Vbd-3W9FnxNxFhUAQ$^nt48&AnjHaidGM6`mEvY(LI1jBoTHg*bWr{TS7OH#+1#bC1y=d7xS$wQ9IJ2Y(b zL+lIKb`fXx?y&EqsF!R>B06uBWKncRrlB{e#Z7>6caK-}k(M3WKHk+r#7z(0by&4o zaH}?ylLjGNDSOE3p;pdN23B}T#WI?Odww`a4-iA>0L;dX)oc)O2s0jT2k-jpzv+z0 zL93bKoE*L^77c?AM7z)75emYgV>dL@VLoh+5+rd7GDugZD9%MrSZ+vj}Gf z|Ii0xZA_TaTY!~q!P7%tQ5s+FJg?oPG_uHFV)u zbE54$-Xnn1Qn04+^ruxG^Z-4cPb`1xZc0%U4dOguU+g+Hm^hFO!q<$h9FP#gU4HXZvJ7^hA4xAeb8r?ucEw0eeWbxn$T%3ORSKeFtkTb4sf8~-nQ~jE zs0I;p;-pWNa2d`zc(@Man=BDUBSggN!hjyGDvbbv^-u*&Gq9qrTXJe~=6ib}SPv7- zVoz6-LFFy0$TpM~%TZ$ufy0BVSPF>5{A z_qMHt$)TblT&_jI+NTFc#ueeQrlNHtDmigdYd$ZeD|k4i*hJrWp|N!G;ICXnlE6h* zzzSCoGj~n8%X#2uFxXT8E=P3EL!JSe8s|?Keq^(Iye)#QTFb1YAk0yo(&>5r?$gZ| zJv|=vY2Em9*Msm^K=O9mZ#P$-Z;4|+km{mB8;P!DICNotSfJ)RrB9NFG|9s)|Ca4` z*Kch5N4~sWNSWURsP9IOJT(YA$7z>V^OFs2`Q^fz%ibA4Az5YC!Li{L!TJ;_%>^w( za2Y$d9T6FnxwM%PN0gk#gFF^!6H|cd%hSI(ot{-AlD*7OK%Ve?J-@e3AK1u5U7sEW zG?vxsn8VJHWX|ZDJn7!UP4kuTv_dpG($160T|R+{f=j*-1}Qb_T{d?RUezVzQ&O8@ zvIOQ_fVFvjBjP0h(MbkutN=vcGPa)lT!&EFDM++yh})L3lY+Mk3IRdd@%NQLx?D zJQVurY-{H-(U^)>*oIY>nNQ>8y3RpGnunJHb2&_g_%d#3?$LT)6U9&28DNEWtdiNg zn|a%T_lQ@9XKqeYYD%(PRaTS@WdnIc^Q#{UFB{#5EGb*kT-gh~XoY-Ysi^Wk&tpX2 z$H0>z%mcOZNOSRuB&}siS^2pE0Nj{%r?W=QVJ6~ST0_dv+^Nz}#NYT)`Rk}J`D<-y zxxc7L+_~o!vQqt^x*`y2zygH`OY6u6(%BHPa;@_q9D1Hod_+g$xAkF`K`2t%;4LmG zAbTE*JyLVP&3ff5CW?ZWI*E^yE#7w=d{*N(pw-jIAs<+ey#`UI`w*P!{?5777{O{( zd6(JeJfxZmgsC4l7(7)>nYu!+TK&)=c$PGrmINX=(@A>9*@tWU*p5F{({ID#l>F0Z zf`Ncn*k3qelRn|g3BDia6aV_RSY-8B+XJqsnsl|#d?0R5&#gn*3_&6v!KE%SOxv=9 z&KIR;&e89<7f@P^lO*TG4`0u;QqzS;mGi)JY{Bhlh}&A(#ipo?H8i%O);RGkncV)u zHplz{UY2KnPRI#@Y0(nHjJ7F9m%=q3&pXg{tgWPQ;?_xJ*Vr&R^XsENguDX-h(4RU zg~M!t9pT0^84bd=(P~Q44AB5??N=jDNZu%0Q45&LD@@yZJX${r=UXl)7swC{3Z{O3 z(0mpTc+t`>(0W%qg*V%PP9yH1Pj;EStGZoQhLsuX;G%pix)_D*1*<`CqVdF#8~DD@ z>W-&BNjnBKPy#FIN(8r(7rr~CRd4c?AZ=QmAl>`)1m!4Z9nI?64yyNN2X}4bwnqRp z2+Dk|7aD$6(+m?F?4!kuF~U5_Rvgomew7jQ*3!QTSw$&N^SWcDc7p>1h)ff1>_SDNv~b5SwD6gv^sksO2Km@7hSf!b_A>jF_C~?7&y!fD zh@#Njn=M_wBz4;y(wiumd8kl5}lKy;xjM4AQ1? z@BWfhGYdf*7d_`wmAHh3jTPZ3r~ULg$#&!k?BXxv)YQ0s%!RLjMkUg#m)N}FGMm0S zK;=%TJ}DLz8}S#EMhonU3fm}4!O1ojBNyGv(12dUw9sD0_svxITOCXD4nFfVzym!BMc{k5lQoXU z@TjUN7s-&5NrKtJRqISC(ZeoZh6rLXJu_9-@Qw)0kVUL$SKe6_cY^Y0PtdYQo12v$O zlov4QAVpFu-42!8^$9RPK5vt$b)^RGefD;32>YaTx(+E0k_=vlb^8dTRI~%*1<2Gw5nB~a~VBw#{T>4gpfkVI# zwES~Yf4ecANzQlNJryov9>Ve)hfF+cdlLcb$J9nB{Lz#wllcpDvd1)adC-7-YSR*9 zyLHmv!o|NG^2~>Gt7TRM)?gTce$zco8#XDN4^j?}N=3vMtQ0Sg@!p84$pFgmV{Bs_ z3RL#>RS=GZOGlBTnPtvl{SC?*eU`2jHC0dKkFv`Iu zp1zxG-NgbZYX+rt6yRi!i?5i;jJtJej&t?4* z_qq7nog~_qpI66o5OtIkscC0@^;l9SKA{RmUX>hJA;>1$Z8~P#Udu2|^Aq+5K>Fr- zWBa1DLlRQDpf_?~WwMa%P?IiSLut%pk=aNCl}+(Nac-l_k})m*dB?!q!(s6@8Uk#h zkP}*|<6^#H4a9zJI-izbOuot%SX}!M1jo`7VGE<6yFDzf`vLhp28~Yt{N|xv?aZQ! zB&j@+mUd(JrpqH9FuOS*&%->k-wG}n3>>jnA6j&ITSsRXF+R-ZB&Co$hp!gcW1d8L zMtPKjt2C+IBi@ho=q*1JNaOwBId`Orm3AkO6C2p6So^!^n@6jd1P}EzHAEROi&O2h7?lY3GZ+hLbIv4B_gZ4M`ou9<5SKEKfn$Mbw6QI zP6GF(nQ0*G-xT-MU;Ts`>>2>8w3C=+L%$01?FdqK;$u+;?k8k|BkqcB$xwH2z8(3a8`5Tx*u+8vo0c8 z2QH1rgpi2=(=VCk(6O1T<8?hQpR3*fFf>9k>)eZwkw8IZs{U1U;DT3pwoQX8H;+Ys zcC-75(DGii2E^?6u~AY>e~kw#S_D?tt*Uld%ybv=gl<=Yrod5}KRGacRcJafnJ?(7 ztfLVb>!OtN*uEMwal%`GfT2T=$vsG@0x9`Y1KrwNslN+cPkIO#b@YUmcD_ymJRQ8f zaQSWkR-3w-Zx~@CTm%Af$+O4cGKs&Jrfd0$ea&VN@oZ`d@Manh@gEY<0>pauU1*yF z6{S=FVgmyrlPhH_zxqb#1bdsFh2XwC80ORo!^j_v9UIgLhK;-k)f|zugJH(KP}bcp z%@U@OkyX6L@k=7<*smGNN zim?#GXmoGxQ%hbJn7V)`&F*AiOi5DS8-dby>Av`Sj)XkVv$$|pxmCP)c8m_9bRhWDZ767N>|`9&Y;>QfQ)`Ao=| zrR%z9*GAQg++K!vSA3T+t3Q=W?SllX8JlsBsQNUumQ&E0XCYmU`5lr$ZYnE1Tebwb+*E^H4MKFIM zowSc)3X%225A`CS28R#CQqJg1RTX}?L+Lo1?I*%PoQ0k{2Z#0HtawNOrpz;h)8j9f zY*VM~K|<3to_xq(Dj4`Yq&Vlp zq{zExLr_jyCz6vP2w{k57+|g$23gFgAUMNgmcuotI!b)ntikZ2u63$%_$(0}#wORNgn#|jE2(w1U*`-Sc9SY#!LDhcG+iQF zt!o+_iPz{|{ke4-l_*#BqAREuEVO5k95g0iFW(^%$<8Mt!nMk$c6@F?o1CxJYiRBX zVChMLLUok|?($=Xh&jX#)@8A+e-}`keyIeQ8WOiq?k1-@z~`|8I@kZ)>w0d}6O&13 z>Ynk=)Cn`+1<=n{M=aNaYtrdZdj7$LHu=Q}UVa-GPO(T9rq-8n9yUsQP6Zq77AuFm7}&0a$%}$+Fs`k&{vFiM0`RKnaZSZ+N8F6!t$wt6yWkAwRcF5=XuNZf;rK5 zT#lc~eY%E(2bFU3S3y?!&F6<|i$>N`WhEuWR7_e4Myt5}% zph;NF%f>Ss{7Q%F^mJYZ&i1-Qqgc55f|HpO87bzNPyt z2sb-+su^>aSdawDeV91)o1q=rwnM$&IXFI&BSix8+$K?*8 zxW6lb1y4=USAv>eVrBriJeh{gKj&a222m;H7{T&dO!3yhzW=*?fg(b-a1+vfoI``!~qWQ%$2@eO56@ zPwmrYTanf#RF@O=qZLwmw@mrz9V1m1t0Iu`iO?_v{Q9B%-jRZOy+}aUIuqJo69c|^ zB>H}G!%LZ#xm0_!IT%>0onOJ{HTQqEuqgEQ@GAU76<~%?^W6V{Q|#`lEWu@(K(|}b z8@Dc757~O*6_)yzKAj1SPv425D&XhWq|4b-Z0xd^;hV1zwb+lNhi2^>pV{DUH<)Q% zdnYL^ouGmC8g4qu5J4KEMvP~FaR&Q`?Ym@@(H>70$PN#FLeoPUFH6A?jZ7nV(b+im zjj<;o?n9l02|lnXb`&S@-fs+fs@f$BVnIP#H_Lqf>Ipuc8m7fJ>`G?bt#(!({I#W+ zEtH0_Gd`9c~*&TS?ux#AKI2X-tSQ6fnothpJ%<-1|GCHF}Tesm{v!5Z-5oT zZv40WY&U*7+G((Lc!H=Uq=nRfd0GkOf#jL2UsqjHi{@r%t6S|z8oZCW`BE@I48D=7 zv1gDd${Pv>VLp$4?FWC?%v;P4ujz*hjPD*~w*20O(QQ@>V9fpT<)sFX(c!x!t^UxeS!qB<^t;tGgFXbIxxe3d+D^g=9MXnJ z3i;>QwY4m}9|9!1)5OM}4hX1l0EeZQY74YR#uqN)~uEjG3@|XK6*tu zsBDHIquNEkeQ(V$wKGvT*xhqs&wvyPg!dR_rh^8TwR?qn!^m%RTA_|pUb8?4$J%Y- z@S)Jeojz)af+)l1!oT_Upv0}?E|#jJ8JXWA6s3zD^w1@jzfVkDQ{J(z=pVjFn_>89-r{vb3EgHU$%vkcakr=1he3FM@O&~!he$t(p7Px6s8#$4|<0lr2(x) zRC)R> zJAn+EAwyVJYjb4{U$kd9A-EqLc4)Ujd1pThO{Q5bXPmN@R> z^DC~8A?V`-o+dB@O22KT6FOH#wiDZjWr3sBE-(bi@;Cc5k8*YPp>U1*>X zpOQ2XA-d8QV>f{@E-J+U5lzMn;mts7mNYq8xlG@ZPbYHL) zx__aV?6k@!V~Q(WvfY?9a;?kP-MCchhCZEu#B~t*prb2IqKu*@%x*xk+Ss(i-l&P< z@Wk9UHTlPRb3&uKvzQ4~#jnEF9_4!K8MFh8cS4ci3z9UBW}g8d{z{i3D12qCtRJ8- z!jT-$A(Bk-;=Ejr_Yi7NVJ>^V=+bCR{0eBFq%r7(G7O_+42|7JpIhu?L6W?=RuRHU zdKR*?7D_VRMU1N?2wm-~oKCrD{kT}QE;LN@CyxXhhl|LM1Y#43KF5YaA}<~EJrSwA~;$_CKjjBf^DIhzPcy!@*0iac2C8*?fx zry6s8yF=*>zVSx#WaXFAkP|u2djww4ybGKeC88f5ATgxrr$pAa+4OSDf=NVg)vz8`KEj?OfQ$)4?tm`!?Bu4<<+*?@~BH zQH%siR1U7OeBW&ks!kSiDoOK_s{1hhmcU{_i)+CA%FQHp)@+eD!fc25O5t2PD@>)UBbKAEl%K;^CIPkfGzIR?1e>+2T&%Q zE&{Yd)t*kkyh)D`)kQKPb!oYlrCLaO&uUH0Sb~!JVury6*I^CkaQKnc!dU!dIfui+ zpGM}%iCYNQOM1?(N|kF3h?G>)M+~#&iQ`wO__IEDrCyuK?P%^XJrd&`UzU*yEz)UQ ziZ;kss!&}9kPZaT$Bn@JC$perlZapmEZk|m38WnRzuP#9ikSh19kib7^F5d-kuyUz zox3(;=rJa|Sm!3U#(y4!ox^7ZTR6X4MbfnfJm*%{j07!pb8Kv|px`D>Cm1&Dv} zzabO2qjr(QJ<(cw7OUpdBz9?Dc49I2xIymS)Z<%~V&pY%4i1rJtJqR$_gBbG3!iY_kVr*-;@1w;ypY<;s#iX;2&3lwWT*LAV-`LKNPVze8FIMh& zV{^#aSZ%8+tIH)2KIKJE%H_o|Xr2c6bNwN}l0Q?XUz&3=%K7fIg zCa{#!o#MMT(2*(s%5*@S=u!STj7`Av6wW-b?>JQCr;KVwvVK%;y(jU@=sxHQT&x4e zX5mAO{_9WTCR>>g2#{Bc>EM)~&JfmkcRsGuIn@}?7!+&jFBwtGcso?T4n{C}A6-SF z=B>qx&1y4NwB~iR1+Zm|5eP?f0JSt9Yb~@t>mLbOH%;~nc5SJEtS_-od}aTdJU0?8 z0iVaOrJPT8-4>exDrul%Mgt?+sV;mw+4^lg&=r^VnRYvB}~;s9Si4U2?2N{nDX11FJdkPl}=~ zm++FHZcgsoauA4fI+bIj^KI5k{hFK^pOlWf)tD2nCq^(2KErGpM8b~K3fQ~ zI{Pu#n{Q?U664VMVJZ0fVZM_>h#xE%5BQ+lYL=bmTZ@|{5itMVK-YJwRx#vB3$(v>jkOr1=-7w%ORg2%R|P?4FLM(BCKZ4Aiz{78(_ zX_n@BPI;b7hQ#tPTAhBJ0Ajkm!Aldvw8gHkgdWELaMd_EN+Ue zi%g_Va}5;F5S7L@xU+6zs`w-9Dy*L0wn*+{+9VGYjl+d-c8K4yzm{jIbT5OiowZwL z6qd6kv|#wHY#|DkP>)bdVLT4-);OO)sl3i9D^eO?_#IVi`4qkkI77#a*P|yBa3EZD zCs^ly@Qkg_rR3q+_mhW^QdR)Jy6mhekv!O)+PM7JhOocGZaRQaqo_b+#W|wH9k~7g G0sSA1^+*{2 literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/installation/installsql.webp b/static/images/auditor/10.8/access/reviews/installation/installsql.webp new file mode 100644 index 0000000000000000000000000000000000000000..eecfa7e93d306c6e0dbb11da809a55d63a52d4a2 GIT binary patch literal 13130 zcmV-QGquc8Nk&FOGXMZrMM6+kP&gnqGXMaP=K!4nDrW-X0X}Uumq?@|B_bj;iHM*L ziDz#5>$o>Jrm(;9O-uD3-Ad>4ZCHL`p=VuxQ{%VJKP}%=|69F=|KIfh{_*_h*N>uK zF&}K+@W1vyZhg@IdG!GPr~LQTxBeIZuW?`OKkxtf`+$Ee{=@&r+Jpah?+3xh_`mz# zx<3Pdx!?c)_IrST^7R1!$=4s%U+Z0_|55yJ^M~bJO4-d+5SW3U-iBe|8xIw`v>p^{MY+G z`_Jy5mp@8h&41SaL-~8|8}q;NKlDG!f2;kS`v?A6{agLt_y5W-2Y4r5JMF+7IuDn!f|O+%ARpUw6~6)HQmJIq9zZY$_Y5$#5DPxmB1*j zC|_n3e}KJaeMm|xFT2bX$zn;vQN&&M8$2&o(ti2a{b=(39trp3<9bu~lyFrtyi8!% z$=|{A%$_Kp%?>XtLc@aqwW*i{*IS|6#*l2uE^bf1|`2eh~4|o`F;ILKxyPhbGvLYx!ITb!uw}-QZ6fpwSuC*X1))(2VPxzkdXFzG;g+oz(qk9W z{8b_#R)xVJX8pzU-2Dws91Se`M{CV|bPs8;V}0gTk0;+XeeH@mjSU+HBnLa zSjLd>VS$dTSVBU`WZdnii*6=9D8K1IMxtCd$VE6zlP&z$Z~XEqd$J{vV${747BmA( zE|igF)#Ov2^rvWT_LpTI<7FP9ECOdNkrT2|114{%c}6ejB>>gY{16_We^RmR&mh2$ zdw_VjNZZ|bU3?Iq|!2Yn54}&WCh4BkxCoUg1?7z$> z2*zeEKl;K@N|D3h!ohoed?l8o1dXwg`q!x%7n{!TqzPkZ>Lvi&dNffWtAr_antdgp z&RB+b%QcT&2P#g*VF?aDL)xuLZ+Aero%rwf4cs7b>-O&IIt1YUog}i<79|V~+#}kF z3ttZVmU~HRK4Ss2JTc*YRel~r3*2yJ1kvYX_skS|Al;#L404&`+2?O}DKMLFT5uDOv2 zYl8!oCf%UhYP6FJ=}sZxZ^G39HH4t5BQ)gzG;fKvvWc%*Pg4N;6<4{y3l?s1Aq#X+ z35TEy-R!ZBs$rT0w$^N&szsw7Fww)p@-R~_F1h;`mVPUv_>oS z*$>}0Vo=z888T14dAd?s->bH*MBz3n)J9D(u2H!DE&3}bYOl<7BM$u`KR7ah8J`O9 z_%ea~y!)Fe*hn8NLp$Y~)UT@RYzFA5+-z?UpeOFs( zG=_|*;r#4>vy<%@IM>%V&>s!Ra@21xMJi-+Nn#pw@=ipM30o z`PhdIZvu&z89YDKpWKg!GM!5wx$o~xL*pcmeaP4Z04zh4i610u#S^~WUBcE9lg$7p z%cuE^>$YUVQFxUcyZlPHq8nm;^RfHq)GPUaK1_&0v@Ghr@NBo$eO>*IN8^6W{Kry1 z8}?u3I+6I_vi~vD`L$jE0RHe%V@YiXnezK#R2_fnjARjo6R>Z#>Evm;Bg1k|gUe0h zh7~^(FdH?+o=iqq<>mFaYa$jVSwNb6AvHa7q*-A!R7E8yE;9&LYNYL^)`400m}A$+ zJ|a+mqk{ivO(r&}5Z29bY-#zN^xvcNhQ`ZVY3~sdD}hB=4#US8ooN>BdHrm4y>8T~ zkPj*W{;e$T$;&js<_oE96R`GDy1MiG}mHHfC5f{5skm_-AsV@cCo#0LF0cbVVEjERfYVuZVTd70Dx8@Afo21O0*;+%GizJNX;Phcqzth2BKmcjS`r^+zKXc(JLxN-zFM0J^j=EJleXQ-yqfx;W}8gs+d;aKHyBcRsR=ZOf0reD7-jrS2Dq$p zr?F?1s^43*A^y@||9ha})LB10spj-$73Ik8sX>os%U_EuwDDgS8?j++PYcSMPXUE| z$fx+KV-@^%C`VRaJAJj^AJ4~sS}-_vfcLru+^ zH9@9A6fc>w&RvoEzfceIF{`~gb0=uBfBwY6N68B$m*oH*|kg-|o z;%{J`T6c3UPI2_L3}yUwC`VRm{5Y7NK5gly4*ufgB!(AdagNLnnmz|8lu}eGHJ=#y z*gd~_w3V-(xXdE)>Kmrp<&Knr-7c{%$~=LV+YVK*j1BkBC!%Ob_$dK`L3^ z>8)>P*=yptcudL@uX7Tx1Ykiv{_h3;OBNum`SmqqfWY8(kvqn~q4r6MxX_m!BH9J7 z#i)=%{3GZ8H4Dg32RJ_)ab#rLz4L4qL@!%(iWlE^^&q0$nBVGv8;=l68I#7WQ^KTh z@%xx%nA3H%IUxZLKs5sR`piXhJ6STi*C}C#9(zk*!x#xy@mfXI4vg9jzag1$Aw)>( zHoG$D{qgJa^$qXqG48Md%(|!uC=+%01y5ZZ6`6%URgR6q6^LlGRWdScmHd^Kd|*bf z>Up{PxjqFqFe;ZJ;cV|P4SDbwZb)Yj12H(dWBIvQ3RMNmL#xhfM^F~x5thC6mX7b~ zBCeEH1nIzMPP}p*rrvK*qWfOZ`QsYM`p9UWxC|DE>6eoyVk%>xg=JT-hCh*KIf|t9 z$9DHKj~r6nlPki}^aE&PPoQU8n5 zX>$(3`Rv>R|01Q~tw|~xJE?;^%?$!Zd?#Ja zu($N6wME8$Xd?Ffx-S@UCXNy|)LS=7B1^Z8PNO(=Q5vg$@ zRR8nD4-uA?O!Br%7Pt&4IF#}x``l*Bc?xs=g=v~K%-~w>F}^x&k-rpBL|pbAi%gq* zQE4QlmSnRdU!QXfwjRbQ zS279hd`5uW3x(y%)qGYm&MzwNd2;day03A;n;-(A zJ-w!G4!ckgAOW))xrkKMN~nf*iSCO11AtyHP(CD$pf53;wve?0_o>TtYB$gmbLy9L zgp>+tNrZY|h__B!TO!ZMh(n;7E+=kaV|6Zv)6)ek!*QIJi+TiP`FHS;~O^zQ;LG;s5xk|7|r>glKf?7&KP8 z8}X4k;^}O=>;$YS+Zrh{qp(ENyw*HsvunhZrc#e)%nE`y`vrftJtd=cm%G$CK_wsH zJ;4Y|UgFx9H^e9vJg^QdxH$Z^n%)}Rs6_w{1I)__(+`VWH_GuX+#e*QqHuGFFUozu z;XGto=J+B)(VI-V2M@;aVJ_YZldygm^Wt$3s@E5lF{QxB02oG2y(F}^0Jt!x|io<|>vWiMS^ zl1<)|lq_5C5bULvCoJvwEiLU1=?y@45ykS+CW>()@x+}ty*0j4o$wK#kjs5XwMlUj z>G*HM>}jp(Cq~Ei`qX{IfLnLlZ<2IdOv0QFyiKfiol19@9LZqMbgi3mh@|sM8=7nj zE%UR5E4DZf!6?rx#ivJz_zK1hcVBj|Ewr&5(d2CFPK3mWitQkW-(azMBaJ#$ zf-MQbtZ=LpUFiuoRr#8sO=y9l*kYofS;WF+3^Rt+QM^un-lY}e^Au89DGfMC z2wP}e8Nkztx#aruleH@U&${0ycc}ooiraH&SRd|NoRsR)np(idi1%p(wn$P^WsY-D2>-lUm5nNX zs2Fn|t{92^?cPpRiFu1s#{l&t(i4-0P$Kc;5dosj|31r@(zXBQ-pf1%Z=fUn1H?&+iGS%;QhC9J4Ojm+`A1#2L11&M=f?fYE8 z7Gjn?)j^HU*f74Fz_(PC^@KMQ{M8c;cpyiK>Q3LxFX9i1e{&JWckrQ~IHDkPMkagl z3Ev9~6?`6D~UCbeaIM=8zym$wBwjy7(rUg*M*>QEf3NJV0WWW4yE6ImDkG3YUP{Pzd* z>wdisV8~&Ko=9lAY+1H*T;UopfWWrV8m@AnqVH-t`HsbNzYQYuyfs;ERXpH~07&hT z%}VVt8d?SyEM*aTgF0L-y>k79(j|`!CQI={0p`g* zhX<3al;+A59w#K1Fij8361NYQ!S4&FhFMEJpW-W1X)3=8U=lfS?fT#%kGN+{;h!y? zVFg4L8E05Wo9fRXz|Qdag^^L>zr-Xvm7%1S(kW*N)gvB#fkT5!Oe0szv-#*0|7vif z|GJMdWf}`XnZ+kVSl{*YVnIYv=Ak+A<}+>GfzC;D=GzUez&R7*4m7h|-n!tn3is>V z#ea`!TfiF+)zcSg!ND2C^M;8NJshT3v$4~WW;*y%O1aISySlVl-#Hr@k54oOW`im% zJT<2zU}~B~k@DPU<)>R(#J>cVPbNdgNd*vmq2sw#nHe0~D^Ji#$6t4^8{9yk$vlJX z6p7X}?=<|Ghq5RXmFZ8Z@}OA+z_qfz#78tN^>lxV6R1T}C!tL)?KyXucGCZ+>H zBfT?F=&ZcSxTZq$z!QMnBnP%UzvSwF;W%g+eZ|(Wt`uw-U|m(%4Bl%bd))S7+~yQV zk0mv3u?yo5hE-UnQLqzo)vm&%mLmmhnpVh_z8ic>Sq;f_c*eL!JS;fCAkbKkY!o}( zKAA}nR0^yIG&6O95{?A1IxnHZ5wS2r7Ffd@(ddokr4byXj^!|*Le}g|>$4_rD6J%t z#OJ`%&E9LJ;gzowF-l#OvHrpXB^Ssr^nlKb+(~~5YF>)a%~@i`l4ej2fpdCaQ26wo zq32S3c=a0skxMVbd>g^U13kehIk>qSk-eZQVU7Nbry<}wpBkqH2L;ke=Xb}3`Qhs# zLtFUlsVZYe0^A(JY@nTagiQc2WxQNa1oEG%B<=v6Q`yIvQ((uM%DczA>^vYL?br}Sd3j}qWumHXJR8}@cv zIWsnC1qPE(@L*P#Z0^Sn45|Q`uK#=aRzn`&s8{KzI8gVJmT!Nag<-l}D*`HGbw?k>$k&^#?`IeIdqZ4qd-u>O` zsQ5t_BsJ5x^9*t>!tb~I775#|J%1mMY9RZa@=8|&>F$BaRV&OTn9j5 z4fT4)I0?6bxP0VzV1!t}9?y{wg}WNLY)weC5xmuPiV zCHw#L#OxulXKu0-l|^{f`h*Mr&j7Hyv79H$o=rLc{iyn5Nj(gJ8K_)Mh&gK;OO8PKIX-j58;Z!->I*HL1|u5F_fIOaL12U~ z=OMKo7i=2frQF;p^LIPF6ZT6wspzvS>w2}NHJ>`ojvg`%mCD7C9=999FmK|f=0HRI zg&J8e*o_WMR_Jl0Byi=N{`A{m_X@z3n5^wme>DE%r0~cXs7vlM8YWsa+l622)C;_I zI~^{Ik$ILYsH7&Z|1-Bjl2h>A<>8a_Ud>Qq0{VM|uz~>Eh-4 z4oJ73TYo*bDw`RaDDrte=@E5 z|IgMul`A^GN25l_*^i~Y_|yF-g5U8tpsEI3{-T~pT<}E|wUZP7Uge&ZN!Ux{vGa#X z5}ku|<~8)}4GI#4>&*#p|2YT!ZZ+NoH8u}e$*?fp?g?B9x|5azTKhYoPQDDgNrF*X zJvv-7)Zv{NS=rv%Smci$sN}7$V0CxhH9rsym>_1`X5m1S>OGig6Qv?jFA*)iC*s2- zo_ssAp#=^)4IJW=zQz;9A``&0bm)W5|D3}@%$?!mUe3>A?`21%6EVN3h(M@B@i^4H z798|3KNk1sHvg5JL9qW(xIU8K(r6e95m(%TVTX+q>@&PI-J>9iCm^d@CQu}yzE&^h z*5v{J>u&T4Gt1_oR^vHc&d=d48IggfD>v-uB|ylZLBzC z4+pN3TJA%4f^3DfF~1@^D5hrOF_CtAk`A?488EAXr~TjW@q@62N2*F0EWa8&6Zj1# zwlL^BV2w`bLo!7OL~8OL&!Jre!#yT|mb{Y8J-_F0F55RsnY)MZZ+z|@V-^YrJFBmi zyqx$-`hUL_(TR6}HFve2KW8xjcJler@V)J+!*mS!FaHrJKA7xlx{R#)l_zbMQ5du* zr`H#%n%!7!H*5_ib#VjUDI(i+kDprV3ELzyy;bI?{Q(5xJf)THXGOO`iP%cFo zAL~B~p=Zhh&o!IGA`=)Khba`k%A{>7`(W&9s`(ZGm4Nab0e!s1l0ju(Q=945%}x(4 zhOR<62kirKL_e%a7v%YRJRsf9NiqWSC|oK!a@<$QeFA6e0F9!N;{5-NzZzeAB91>y zSzKbJB9}*|vD6qZSl8#Iw-y}ScQPQKz{}jw7>_dgYS@|ofR_5h#n4&V=#qa=o4bGk zQ7+RNz=EN97t}8=6_JN>?xMW)77m=y6mj=#XyyUhK5Dm&Su>danf|IcpSNGcOwVFw z%AQ$4y-e#^I}ByqvqQbMKU+VWYYVY$_eD{GK%2yVrU;qFBWrzR(ivITdNznB- z_8ZOJl~kq4mqrUPIGZ7??Rc^Mh`hlB7@!BH(uH-jkS(F+S1w?H{)Q}GCO9joPO!?F zHMlWO--gTL!bp*J!5nSORsp0bceg`6xlm_Hw@Q=fnXG_e@Dw5{HWMaxrdwG9cfv$i zG_jIf!_vWbQUaTj9C?pVFlz=^{;~u^o3xtV2Pn*BJ~{&7IQp418MU0e-~sIfUwv_^ z9Mcq5)fHt(nvZBpLqw5o1CDO!$d7)0yc+z=HvAUCI9C14;u?6{dzvGX{fs+*s0QyA zOUahc4}qq7w0CYp-HA+Uzkv7ccyR@12*=|CzuA&)1${BW!VOB)^wKUsDW{6Prr&zS zcP{=W(S=P-X9fTp>4uD>af)zsAh@H)Lk?tOhJDZTxN!!7O+1+LuT8t}R2PTOm;0lh z*U$9KRI&`Q>OYHV)Aa^vd{SPagaOqay&nthXr1ar)>8TZ;yp~h2}Mb)MrjfPbn8S> zsNFzgtJW2`irR@_gYX0IroLpFv7hCLVs`z5_;WHJbPNY~pv$|e8|ROx871!b)a*JV znyYkuZK*k*+t^1^-;c5Y3T~?S1dG2RVT@3i(D*Q}Re1BP8ir%G1G3eN>zc~^Y{4-V z&H^n8geL#kM?o&eug)9IRG$D67c#cKqR2zmVp-j-0(R9PH&)a4`leBu&khlC9L7Eit36~Rs z2@&W300C_z2M1S}>Ezp>>C0h3=*0zK00566qx=bL>xeZgo%k8%wz ze648!nu4{az%Kr2RMsTc1mwT8AI1rBW#&hLkipY)D)*bu(>IkoJETFX@AVAnQUu3N zFNT)3_P={5PzA+wyy*ETmqC^q#-)z3@ie>K>EwX!%>n6U*NQyu>jWkJh>~b>R2@Q=vz^mOl>bXKI~CvY*$zpmE>^zHr3Q;7?W21;(1B! z<=Av=m>s`*PqcfDt_$;xSrdeR_*n4{;X|rq`Xq-BlX5S%`HESx4MhDVdGaTpBoR>M zfOM|;p^d@^|CS<%5IjW1bNYi1<@cv4v+aRU()9C?t}Kn)#*|0PP9si&b4+ z=2B3`3kDn6)3D)_IhfxDh@T2b?5r{vfT^4LRhIb6_$pQdXB%Zp&f`|GRBPgECpdO% zHKx>0LOQt$ZK3L_UGA%Pzh@0*Kx(Jd>|u$pbv4+$I!2m-*)N6`Z6?fp#UdU=NNPScCpLjQHXB64Tnb8^)@-p4L<wCuDrF0G5|IW4sC3La5wx27}! zz4U1S^?ez6zAt9dsRb+&qSp~%Re%xeQ#48KW21S7Q()>Os0uF~r-ADgt&$d3DILm% zTFw305RY(&Hv3`%VBE#vU#+fGKK?QEWMB*h=i%XlxgufXE-UgH{XJ)(?sIDqAIZf$ zf6-0fibtkUe*yg^Tt`NErNhwOYaj5Jo*Dm)C?CZou+JEs3<@9$VI_)0Cs zOPCuwyh3MUFiliT6CYaeSno}uYiq>k{~cw@J%O|XLMaOPyQREB(idw1M}6orMDtv7 z+^V3EVmSTylP^>ZRt5gZJ1ht)4va|o1_;>;D$qhiI4(fX%(*`xIjt6LVByG4F1{F3 zPJR)wp*M-A28)4~I(O2FW^#@-!)h!8ZP^6b8cc)GU;qx%N{8iR-byDsS;%NEkk`SU z`bhvu@v8|=yA9^prb-E+ts!EzLzA3#L3_vtWCOc*S1WV1Gfq~+8Z?4i9RHwAxPkM5 z!+kV}z;i@s=Jk+{Two;N1+;;4+tq8Mc^UwGG_TU73zX|-6WZ=2*(=Z59^?rhi9vk2 zyM^_gFLyvFDt2$&dA8PJ@>01)nK3c|f(OzZx821;VVH39_SwOKO? z`nZcUO=DNgMV7X@#QRv7rf&6(gV(@0)JuZ?GMbUcB@#!=1vg|AOwgZsxs0?&&+=!v z@s`$ZbC$|S>)~YSsVG;6=NL51Ec!V#62e#$#DlNGYbZ-5)$ zN^$Psswl?_Fy_AMw#kwYoM1@Y%H!SG0)--V8>OEtt3}c}R|2?E(EPx{XLhb@P^1ey z__Km}`Jr2~8G!!CS4@Q4p3GHa~~#3cj3O4*>4e}1DJ1yYhx z${)WUfRgW@$(S_->{@+CERG?Dds&K^u7+I&7(I?Ezlupb@}sA_bFNVjSHdb#j}}j5 zJiH^1pPui6imph6a4w%g*;derBJxhz77TjuQ05xulvJDTow^__&eZAV zB+ZJ^j}kqq&=lm~#L>y(Na$%wKrFOPOhCr@A@*-ELF*qCDiO_%+$wkv2bln1qULse z@2ElHvkl?qtq{noMzm*p^5HKyDuD<}#{aJvE!_R+>5aP{SDlBeJ66#GZkAXzd1w%4 zv<>uBIjt4aXq#O(B6#eT*ALR=Wdmr%4qq6Y({E_A2J6+A+a+Z2cvanN(4^O=&+0!; zVSMIzK9P;%r#jKFixvAO{l2eX8IbpW&anYktL6eSy$*OrSg`PoyW000000BsVr3JvJp#|0Su zwk=1jWCx7&w~i~OHqA0&NGG+Y33Iyk#D)<-XeB0liR3R6n{`r&4#m=B(Z37pdLz@M zLM4m$1+s#8T&>I%tnDW?w{i>5FO^{DP>pB zk}&c52cFz5c#XAPj&Jjt76wr>_v6{&LDh7ZVPA?s0Qiz#=GIl7Tr|I(jM6<>g%Ixc z7-slJd06>Pz?k9WTh)N|R;Cb5aaH&q@u>iUOT z!#7US8wz_5=yX`njHp_(xY=>!rn<=}3O!v6z(@2szyJU~;(kW_8_x@~hlRwQh}gea z`;{b^4qxTX=R08Y@rd5L70SjLCy^+EU|K=W z_(%8b3N;`XB-gZ1se3@H<@#j7;B7E8U|8!0@%(r_NqoloOtcIH@O6e@>)O^s9x~%O z#xY5$TDA2KpD{g1R<4q=Q0(8W>wo*jd=)TfvGVu)d)Jz<;s?q&qSx9L!(ZaWLv>f8 z*w*iF#DJWIu?RIC1t9U#g#|jyQ35@oqoX^=lIh|Bp~xrrM1w@qpc($6K|}uzF#$%I z0cBXn4be)P|M_}C!I1dX*bQXUwXYFyQ4m$&=YaV}TMqOu>tnS(Ato9Srlen$sfiF> z!5YEa7m%%}g=&7lds0>!9B7$|$xgm=srD|IZ9xPEah%KqzXn-&Zp-M%PNxUPob?xR zg+;zTMtzGJ4rTp(R&jMSmV)CHN^?-BXm3!M2YFelx9sjtCb#UOmOK+PR^e+lTnKuz zSkDxb3#wOS&UOEg+skg%#T2Qs>!y#Wb1jrUPu?}>n9mIKz^vKB&r!ZekV)Yu77V?EKTA=mf(}Bbm1Y#W^&royTUH*!bc)tpEaqn5-9ah8`KEhY6(oV4*cr z9ZA5wRfC$8Ll6~pS-AsDX@b;kEI`_a$Prg_H&?jZLndx~GblCatDtWlHv$^JR`+rKFC%^7o-rt6G{-##QG<~s?<%MDQxVX>{wJrgL z;Znnlc(f$!%r+tCkiCBglcpxl0D$00XCfMVFHO$zrRbwG0M)T~$lKWY6{2@kFSvUI zXlB@~)ke;pj}7X$vj0_}@4GC9Bddl>XqP8fHfRD|(6KT)IyIs=2Q6dJ157mLv1~UHm z=_V+^xo%cK#$VqZB*hpPEy~Ck%lqS`n4<#axmg1le|&V46kuGpDHw<9VJ)RFWr?xO-^j`&l!{huR(s`)Bz1dWUNuVG#+SWku zdxMh+y4ez`&)32cml&Oe)wU8FQtssmKRCgJW;VF52*ySR=`dyu?DH&QLf6el8v7y!??<#O)d zjQAft=@uP&S)xg1fWk13=L%Pfat-Nz1>)k+___hz_ttV#WWENoAKl1y2jeHfaw0I=7M{1!pIBUWh~Ig~G7mbCgCb%*mqKBx_mC z^L!3+CoID>lxp)e>g16U8xpvZeo~A~WirFC>D;T&l$4n)+nOVqJ9pnAv+5Oi4LOm# zr?5UoQwp9ea}A^xcG`m^x|B$1fxRxx(Nx{~+p~N(5dI74tW{bh=@(u_lr>j3(@c%o zqI=CrhO@6z#QUw*&cZsR(EjkDgYA+!E;jk{g$L6aEnsMu9;roq^vc!^jYOp${Bd2M zLrw^xN=RW0i->X^Z2?rOlBvZkwC7m)3+akjR!X(__McJLjHHA?X@MvOZ^Ak)^ZSC3 z;!$?alJkHVsmap`>yiRm48yynbEgi+vU9j^I^WaA5ngPzV@6Y1~nDpa85ake!^eE|9bym?P={02!s57ytkO literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/installation/installsqldatabase.webp b/static/images/auditor/10.8/access/reviews/installation/installsqldatabase.webp new file mode 100644 index 0000000000000000000000000000000000000000..efbe6247fe58110676dae75102d7a8b00b1cede4 GIT binary patch literal 5196 zcmV-S6tnA6Nk&FQ6aWBMMM6+kP&gns6aWBFVgQ{1D)|As06uLtmPn){A|WHTIVgY) ziDz#7PdRbvnlJYjDf=FyKNlsf?)J;{5&u7@Z=nw`9&8`;{Z{{F=}!MY|F_&X`v?1< zU=P_ZTEF~$$iL#h^7_zv0DtuL0RQRM@6!+Dy_kPV{C)FZz8{pmu;fh*)FZN1`8NJ%Im@e@g#({m=J*;;!=# zxPPto0{&P1yZ#^e&+s3$UrL|Sf7Smb{&Uoq=KtkC^8cOq2mVj}XZ|nu&+|X}zsdjq z@lEJs`uZzG0?UyRU_T)xT^mb@khi@+E+X{?jEivE0-3uxFE}z@aAdT(A}sBDCjQ4v zHWup5PqhK*2hzNOcFj{<(h{Xpvn&%F{RGed+U2)h@CH{2Db^%K-{9Dsz<;2&EzaJn z{*LkQTM-q6HP#IHGG1_D`%g8Kq0IO)UaE>lDV!NEI5J*vWW3iwMA-_WXm+m5sz^o4J zO}f+X#E7ud7O&7v_F-+A=w~H)>c;cxmB<|$VQEKf@-nEN=x@DOL7rh!L0JMhj+<-p z>4z!1f5e9pM60{5T1B{b6DD^4;V+<`svJhPH8yHrkhqn_P!G3=F^_zw>$>xY!?3-hD9VJ@p2hwK-OU?|J zoEa}TGG1_GygvzhG;!fMGN*sMr)Hw zGzHcry9+jT|CON@%;WimulvT=2-jFM;K>7_E`6i-kSqDVn|17+5)@>L_KZBH@`bz= zD>4l(%Y0u_ka|)iyx_@s!IJZC@@+Y1B$uZIpkWQ>Q5C+86OYvd0002~>>!<71s)y$ zokNJ^A6zA~cMDngSBq)NcKJoTi_Ua9f2yP`Wa-pK9o@!fcrLW(hYPxDh<$viG&8|J z($Qr`?#J^kUZE3StiP@FcKJppyiKkGj}HINtSF4m9E${JOZjv=0P0T@$5#G8;1BYF z0~7Pj-=v)&Bhg+&vi!5O%46SWm2rki0zgA^l>VTgRY>a44zt_B4rLxotk8I1z1x+FWh0uj6$1e8ezofNi+E)X zaOOK&Dd-ZgQ_hPCXjQ2)S^j%prt9(6<9M#s>!0@*5k8pw4>T}!<#xyq%^{o6PnQ?$ ztS~Fy(_dpxGq~FaSyM}X&(R`>PDT=L7%h!(#VeqzLUUzk3Vo}IEUQZ^upt7LHH(Y# zipR{e;_0vbJ1EY$0z-8pctl9DDSFV=>$m=;V%aaGRo#_wyz#74qCt8lXy@6!c>N}o z_{EwMJJZmM)^#bpZ@qXOWUOEtirS+vRZOJ{^LDvSmf%l*N0`UasrK}z2mH&bQb#J9 zeMSnDLAVdvz>`0T0wg4)^(n#QST(ZMvT6p2 zNZ8^edRdgA&C_xZZ~0u4TUlPTfnW>hcHf+xe!GhsyVyMfcJtflHo!ssz+d5W^g$5R z*Zrdk-4hGy;fM2dys`y<*vCG;EG{=ol5l#E8FlevY6yfs&4T4kv*HkvAdbB8mOnv@ zE~mSdefIeTz3o!*HU?0*=&8%ZU<&$|`R*+uClW^6rXxb_*l0VL9HIh%^6{nTyS9<- z%;tFm*gl7^z7A~W!J1#IS74Q6x z|7)W+CjZ2bUEpYXDDVNW>K06&d*`#{h9L7pDaBwp4EQ~@?)&dVg6C4p#($6i%$jt2 z8NcAZWZhCRo&3ER0SHs~KQv-fP5noYc6Pa<$ci%02Z$wU$Jn|tBf~NV= zv8#Km+Z=QAm(&>NXRA?+17Eg0;w*m+gNuV>HG)cysQx2=zv(tC6|gX-_J}XsN0H~w zU_{wJYwt{Yt4Je`8x<P_I ztMm`x0?4xLkA_y|bOSrsyW?yF#=)Td$OCC%MO7blbOXoEWuj5K$Sc5+C3oj=b|Z>= z%L=v$e!x2m>hpqwe8YkqlhJU7XgDW|YDCt7D;xJgDXIEDq4t}Wzy4*w!*Qf34XFoE<#}XX#avkTV4r^@lmXYarANV+G3-1D zI-9&IPO0I;Fs#4#TwqqGnr{4}dSE5EAg++5z7KA0%>8%d6spTeMb=Is`U{raPjn{C z3QD9lDAjz`kS?d}jQ0@ed)m$V(-D>{U3_#;?$vFraOi`p=So!mZi%W1T|(7MQ+pAN zCk0(0rfk@@bN#jea3(gK=E&kAsFJU~9O~#*jg!dvbK34157AFDbhq}q$B&qJ2VsxR zRxL3MUY&NuR$X3%i=UogN~iu(tNY%4dE&NBZvmKRKNO?#w>Qqj+q)P9a-uo5mKf`D zoVoRE-~3NjE_)m$kTv|TUxO7i5NWlqZuo#yM2*B!WP^+g;*alnR*eT*)aN8 zeBCGJH1Ucxf;gP}#Ux88{-R&8o|5jBwKVBqX=sYf>5h&fKYW`k@S8t|u~y_-x;>jA z!^!=hd$jxX$XG=8TfHK&Y|LiiE;rJJ`EI+(8ftSlEdDlUjjoCGCTl}U=qoQ`a)*m} zyhT7x>A`0yG`jMHRc-$I>}mi-`o9k`l`_|@wmVPQe#KosW*)FYWC9!vV`1GC*-Kzp zX3c7iy$q^xxpVDFAtFgGuJHAiXbY=*rYO5@ zxBuLr|KPiBZ*s>ec|j{4C#b=YYJcyMAnvxm?v`&|8lGh`zMK-O(QHsFZ7XnK!D(p# zE!2OBx`$+c^wyw5)>v#%gQ2z%wT+h{r@#3I>@~z0}ch5f+@!)Hq?$2axNuHs;lRbL0ypq1Q9-Ocgov+K@-vH ze~YR+FAwUv8i~D%;!>KGix>Y`=tUQO0QK-Sj(^IMs+?;!f=4eiTt#j1NrP1vdyyc` zKZ4P*k}Za*fd_(LH+>qWPb~)r#|V~LnJ?}n$$xSM-CHHKmj}mw;7(dQ$jpY>APxyM z2aDz!vlkA(JYLQOIK&X_zDUv<~i5>#VXID1+?O;x&_#)%)f{gekznSwwVN03{5hU_)d?#X8VagV;$fclX*CvM*gmY8(z_riC``uj%LlcbrNuMIBL}!_Q zpTN`Y`7Ktkdz=w(LFzQpZ9-tes-8ax`Pwe$l^JlFC=d6q_I{1;Q2#AuGw9r@9;da<5{{+ES+ipS(5A*@*I8;OyS(g6{?oaa2$YuebTj98mPJ z%~tq%C+3@GSDoR<-QwC?a7>Zj0f|a@doAhKkA@l;WUto!*Xq<6MD%oEh=K^s-ZsMj zsLrp98B-jo0h|)F6X9e^yoZwV?#P(RcCF#?#=5T5vdrWk$yR%Vy#4|LCqYcz8FfT9?|f zUr61Ae-$ajKPUXgQGk>=p(gK?18eI%G#txR+OcH8-p7yMFa!(2%uCa`L8M8aSbpRC zex;(njpL#E;~&u3h9V6cBoOyzW<5@rtMXr|ZMIIT??u^81d)?vBCO3qVxCacB1hcj z57G&vj1{AQoGwAS=)WcNPfbB57VAWzEH*`_k&CmA`$N^mTHKP75tB@T#ICbn#XK`5 zF&4#Xj!5u&pI{@DB4#v&jKZyO>6z*i3uPm`j|96p+GC!_C}YcB8rQVoM#5+Fm9o|P zt3XG;h%!X-Bm6h%BNJ*qm8FS1)+!P#@( zeVuUaD#iFoToU6h8(tiQ5}NAW>YW?p_n~k6=Ac~PJ>CxKDWkjuSSfD6Gog?}-TmtA@o#lKObzhQzYODvg(&1Lu}p~qw|M;BJDNmBF8AZxkBAdSj&RKHU<(Sf z)OYv~Z*FIzucqr5^K<2HXBOfhc{^@$&t@}nQjTDai=Dng;a=OI-WEexd>TuW_hdk? zPI|v*`@`JAE96v?C%Rm${s+#I;iGEe+Os%Ari2#lfxQvd1tUY12CJ0Um#+M=i=s_) z>@a2Q@T2a3VE;+^c<%qk`T0P^-7o$5G4y&6+6zjc<3_tV#t8Yr*>!PGDRjRwW8g-@ zaohl?GJyr;C+0dj!PsK5OOsz^HpGlT-UQ?+I;YY}F@tpIKV?~~v$|j2%$w#_IHhIn zE8a20;#M}$5*WdN3?oP!iL%?dXrf?OZ;?DdmetVTixE}>RTAS_ zQS!7XVnE4B*9vN>E(?!oT-K`#8mz-Z}#t{fO`D+9Aq~} z>i&=dZnZ7&F|#ss{IUV$I~uUGmKTVj`CMt#vF2QlvlY*IBVU7#v7SVc3BG6wkmw+V zMNq~cNPHGIvtMqCM1NU}MTs~m(^MM(g{x|ns zTE}qh$L%M%s}#N)z+{jJ*1Svr00000000000000vcE6+m04us~l|Tbb2o*xT;DhI0 z`f4xa3w+yuBtQXZ0xG!TSH4q-fP+q^2+|bgqOQ_6$O7xqW`7DEI z^4^APvOZwY#KXIcY@Y%d2w|(iTyTukCDp3OX?_Y~`KF@@wRG+?9B{Hke z$+XVGy6ta>ycV?--czAs?CalH%=BS8g(5#>I5xAE(y~DasK*at5eN>}jDXAf^fKsE zEB2ATsqK&Vgh7uSl7Xa=-crt>>*UGe~_CPwm*rT{G~7Dv2* G0002^F-iOY literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/installation/installwelcome.webp b/static/images/auditor/10.8/access/reviews/installation/installwelcome.webp new file mode 100644 index 0000000000000000000000000000000000000000..45e8171d784483395f6a8bcc33860e2ceccc75d2 GIT binary patch literal 16386 zcmY*=Q@AKFujRJwvu)e9ZQHhO+qP}nwr%Tdd(WBw&dj~jr#5{^zLl)>Ynm!bh>Cvj z0RX6p2+FImTzn_k;+mKH#*>Hti<|8O>*4=x`knD=_8awSbgT5K_8F%Sf1kI`qsF)X z`}GR_GxUr8+t$wZ828Bc*;Cf{>V^Fq@!NCF_5J%3_xr04|C^hS_xW+~G4$>9KsMcW z`aAzi^xNdg^;R~{r~k9`N%y_Af%X17c_;Oa{8KcacerQD2l&1B74|K6m%Hkh{MGRo z_Q1FN+xtE672wPD)%3adytgxVt6Sv7%qsV!_sG}j1@tlU1plbF_v^wp^g-lD^&|G` zw7oaoSLPS`^ZhyTV{{GtF85gXjCbHi^dt7m_vJn91Je15f>%)Sd}|qM=WPHq_RLGB-|~wLZevr94HuFZ9#uyC(w5 zZgXQXV z6g8rdQ9-oaY}i^NVqNkuAhA3B!MNtFs{=RVUFuEwN^wn4kG8;k2E{n7nF)A@SKv#5 zfNp`RRBXGJk18B6@%A^HThT|Xx>E($fjSiI>Mp9U1a%dOMxH z?tagJ*S{qPZMbZh^EqBGs(1pf;O(eAYTg>ub#31SM9N?20{ll<6UtjdK z*lZ?e!_qd-zE(XA%+F24BE5r2yHE2@n7`yWQ_7PJ}O?p$*=QT7`!Gw})b()eDj8zd$(3s+S`5Yc>}KoGtO6$D*P zY5_nrY0TnkdthGVKOGL0sq2GOMrCxlER`f}#=Zhr@v&ib49tObD@s`Xb`7YZen$EJ z#fzB!b3P`skiRp|)?w^z*k(EHf6lN)Jy!PBAIagI8SXj%IGA?G6=FxqSJa{;V7)}Y zQd(U&9bMfRYaN>a_@$l0BOv2`s>F2kje7=fgWflWM&hPhG2sf^4cpMft}(S4Rd%tb zf?g(1+p)k;HFwzz=DQQFJ)aW~5C~e9QUU&YDhT`T0ES~{t;W2oHnC4Cj?GaW%z_&H zZ=7$DkuuOec@Nx%3QTAY{v-MS9r53O=`;GE)*ViCy_A8#9Pc@|;r`Q9@_yw<9PBDr z<*NRNYH{LWwqCGtJ3=%W)0ZC7cQROB1iJDT(+4f{Iw=N`+j!>SPLmIE-p^OHa)y+s zsYDJq1WJJ(S$vq}6k&qc4>=Iej4$;+u>j=-$pVFQi9I8P{HW|2_z1v!|3!|-{C#DL zCMIzc@16FXn5uIBha2Hu9gf7aRnc8oudOgx${gmRU8(cgYVaw(!Z{5@EYQqR!dv-W zUz{Q5og7S9wFZ$rDq>!k+o)|aGN6t|1frd28YpDF7}1I z9o3k&xILrws8DLryJ@6%zb8Lwx^l?mu?)ur$0#aa9Uv{=gOD$3QTXw*lht{5?;f1; zh)9cL8}(CP1^%%{g`Ve49QAuXY}SbBhpkI7QH8bM8hw*^1&iSE0fU-W zp^heGF0R9kU?i7f!;S(W^s4E#*5bms%_0Bltp16Ju^u`5K~|H^AL*gAOg)FOWxX(}-$?m;`V zJ~7YqnAF2{?d&|U$Z&%+@A-a16j9foXQ<#*Koe5#E4T0ZmdO83d^~NDrWEn`Z!j_yK-4 z9M!p31}t}~DskTgWZt|A?L$+UHToyb?SAohKdpSJFe(iy*J z|MGiUAzdvSP#(((Cz3t+vTsiUWlPP<&SmvLmMZJWA_v~vy%OAa8sV|FBpUEsdRi>X zk@8EQX}6L^-Se*R$b>r3YSrPGI>{MW3jEz|#o<-{%JokWo>&v}u>65?dMgspi9T*6 z>s$~;p?&UzsE!?W;}2JIETUTvcZ&2NzPRtwo6xo{ev(hdBY(U`o0LHhc*>p{!1S-+ zWM3(Yi;byN;6>hIBdRsvL+)2t|4qDLTSQUIR{bQva4PNk{e(^}p6;~0RjF1CkQ4kn zT5s*nDnpu9fvSSVWU0AuB_3QUf))-C*AGk%_26r!jesRja9F?X-u*(7c)60N0cp1* zDpaTJm>&bQaJQvC*+hEgYt7HBT(OT>^6gejK+rfv@vu`f6%(kI=@fWgG>qG_bzmbv zn_q;B$CU|aYwj0Et(Ulugnp=MJ7ie}4&~bTfM~Jy^cP~(HssAkNnTmFnAsJupG8dq zQ#EzI-oKAZZ{8gb`33p@J`k!kVO2UN&JC$(KyKMX{ecLDz{Eq6Gno%cAbNU2_`4+E zNMK7B!qQ#Kn7jkXFV>nZ(wojES-GNgepK5lR>oIn@Fbz{hitNRe;20r^OX+o25B#2 zS07YP#S9KT52|kVj(%#c=xDAADo-*Pf>BcX<`Qug<~uPEOH+Jwf7Pe z4+8f@a>^Lfx}U!Q>AluA_oH~5`v(a?yT7s>8P2}jYtW`k>F<*9vA0V?vg|L*oH3LB^-jIuuF6`YlA zGJ_h!DC!iI>neLlDWOt3S(%b3?( z3{XOuI@@$-CVrecapAr8nPKAO%^#+*U5!^FYM}~7V3q#$uUoe}0{U*-ABI0gWwKsK zMsbZBC_kv~FTXsw8hDFDB}z{EfRK5c7+tV9D==7?gEAa>7SWiixd(HeYyZv+3lv%9 zHQEV;{(M~V)odwP@CaT<@J-}Uz6OHeVLW#)rYJ>`6tGSQ)=~mxt%jbp6ypkSIWcZE z9P-aE#Jq*HhF5hNv}`J+OLl+`64Gu#sR?ST8D-F)jTua?I7GV|-pkBkj7zoU2 z0IO~tBrGx9l33wNV$hZ05Zh)KT%wWnPZ6A5(9zBXxA%ue$~QoD$8)343va4GW`mBP zgk-@>k2zDQE{*_Tud>l6ah4U+FT08wGdS=lzgoWB@FFH555~p?vG%bn9Q?T0s0#&Ef!k94ogtSON zF@bG5W*L6`H%0|C2VK1+&!DHnC$0b%tJ-M##06Jme8F&m(F2!blj9$VqU$TPUFE}3 zjIFxTlp~$Z$0uL1V*p=#99CPHgN4OkEraiJC#;?kFM z=h+*+Qb=D5U0m$na>&L97k||S7JJV1HNXo`g#R*lPgD7r-kskI!9I#kxM=o)3uTun zGY*uJnTMWhoc7p_OACJBnhl)W+`IQQPoz6I$Ye4b2&B7u_VwBoul6 zvbZS09C4gd%D7GQ2=;d0%hol;c9A*8{<5v@2Q>)P3|+a>yV>;&&IfkG$w;E7n=`L{ z0)zs+YBQ`vzxmq7ls1p4^wUGKHy?w1fw=FSWE| zI?3H&6wfnjnI_vi<+hvxWTnMAiOq}ZzVjt+M_d1sO8A(1IgS~Tfn{Q0W$4GN1jBR~ zLrQ{5;Vf@5og|MU>=i!8Fa%WNh|nr5%x1`b!SG78&mi+N^v%S07(n~i=x$TYv-2z- z{3u#^?i*w&S$!4s&+n}_HXWe3STZsDGh(-uWgbWvghj7?)S^^XGZ2atj&+`PXmu86 z9M04&l8LZI)Jf|`K3Ngl__0>qoW7KavxVDpRw&vr0xFUftzVb{nvE;JMg)6Ea6@sm zsDVb}DC{4Mx1M@VyT1gul6Vu--{wVr(`#bxUCh9vA^vC(oeI_s9&Lfh%0I^A?F^n$ zymXUe)X$x!!@hV>r=C7S<%;a5@xrUc&1M{Zb|9<7>_9LXXXZPO&>{SR+rwuL@;VJo zsLLxm{ass0?`iBtq7HwK?$$!o(GA21?}#bT0wgOnS^=W_+A%kRNDP1ugfmu4V15IJ zDbBauw<&@t z+uzZnlzO?5Gk(Rnm+538K)KVovpJ%n(|$OXw*`L^F9p;``tx#H!@Mfs_7W9pd&fs? zlj!(NL(jIH-51l5*YNPw8eG78#S&+zZO)uED@CLOp47l2V|iQk@kXlhe`p|IY}q~{ zddQ!_rPk_lc(EJ4eju<)b_cXYwL%F*bUuTGGflA11)CgHJ{2nvXYQS-1e@QEk+>2Y zcV;fP7iMu5`8i9Lznycwb0P>lP6yNs?}Tx+A*ys=i3OR+ll(QHs8$%Td1&d_Il#MW zUWJh7NbHs@ad6yR_v_NUX43{tR>9<}l=16GJpDN>x~a+l{%ZhFyK*JRIaXIeU|mj~ zo-GQ$u(ELK!=7~rq-hx;PNN4jS($B*1yxbtW?<~T0M&OjmHla3#<>YyeT|Sp;*OT$ zT<=^=yUQ(bXG!50#m}`FJ_H|xu7x>CNXI5Xf=_3jWBN9p>bZ8SmE=^(BT{>Q;3WlN zR2nKBjB^PFL($n=J?!U_D{?6mqROg@YeCtDrm{|-Te+BjJ8=sz6|;7ocbEWKS*UeC zFWh+z*IPe;r`X6hG<;`*eF@Z>zLQyDd}bY1YuSSdj0U1AZ5|!0(1Uj$&OkxoPKuoQ zV_!rCdu|=t|7muMp}wqiS3-<@Gu7C=0ZJ!fDe4+pihNO4hI>}=xYwGo04+StlFK{& z=pW%*kffCB`>0YdPHk?uvcR(tS-w{i7M0E_D>Qh_3qi!Ndvotcrm7whkDa-RvjU5d4 zbkQH^Jv^982as6y3&Km>KO^vkZonQ>0>4&WS$(@l`|L#fH*b{7)#Mj$p!7^0Vuuo8 z6-q+sE%y~EVTL(DDRrnNriCP2OlsLu4H(}vtTPwY;$SU$_>pBWLWe=OjaY_ozrKlY zX7M;~AJv{Y&hwiPGuWK=tCJMmG%+tX^A+7^3reki1>>}|1EhuI{Ln8gXBMb@9Xvmi zcX@*H{wS=CIV+6TCxK>oJK<#+hS z=kE6~zVK+-Nd!=d$C~)YCuWfwWgv!1R&s{79qL0qce2XGnWCf=x77t!^$-1gK><-e zGB{sP*LiFXqGyp@sh<)nuhxSZ_|Q2hXN|07zgJK^qxp_7L8_l@A6@Fk_0kK8;M(0W z=dntolQ4*2+uhXu+=|{U=HmMaKFmE{W=Qx_Sdd3;O|ALrjmvBtWfb_nSIiodVfMgu z$3>6+u#8#d?%UjYUxC<|N&V{CI9i04ecob?FtICG^d)ewr*N;4Eu{?UI{8!rOPWVX z*3H8ZpM6Qg<^n&Xvfq5!%vQ<8d5`0SD|v$m2{M?)62&)@b_#l!1~~PGRx!UWLCa@g zjW9OyNTR$mw`O;>w6N`G5+Y}>#O)6uQFv5O5r$A_!!Xl7_;n7Arn#?jP)9NfIF)mb zn@1XmAu|uaw7o1*MbSn31LbD!R@|cxJ|}-L+`vgM`G4?=_mJdLW(yR0*m8uw`wd2I%jw)yz8V`VZT2$UG(+JU~!-PM9dS;7&UQpQf|3o zlp;nlh6X1}HI;Js$9jRpG36879tyE%*3+F0M2RSo2-9Ymt=@$%QNY5TIEU zkmBt{+VOcxyjW@J`5v`n=Q9F;$9*0wi1d=8AG z^%w{UD*ryx-Xw3b_OH280)>&Kz<;2Qy!bQEy&*iShTHt0bQ=0`b~F{GG&$Q2wx*$?GA`Pf`|gn$P`AXf@^gT>66J$h zmkPfXOJ{*ZuSThH_RT>2?73jv1HW*SDffcI;Wobi)uYj!eLJiRzf!cMnOnPHxQ&)j zd*(!kQb0GC3U5ghIi#Gi2yOd)n1L6kN~k-7h3$8^vgS&Trwsa$ z0XoEPe^K`UG}yijpcMu;xuqV6h0(?0pMYL%{vNlC0|=!HB&O5Xk0vWXRGK>O;vi5K z%RN-CWpNkHu2>33N~GbNgajB>hgF62Rcmn9^t&j@S8`=<+xMkVhTaC;-|1yjg2!P# zR@SsR7x6+^Qu6oxa-|arraL$sWSZ^m zY&l3ju#u@o;5tnOgf3O=a|^{oDDJ`h$6Fa!fn?M6s)Qyie^g z)tIm6D8>vZ2tlqk5+C1Wr2vml*|5XF4szM4$yqW;uJQ|`FuL}p#H9wIvE1Z4`e-?X zf7(^ZD?_-r2Yb}p#P#SM7t?cc5}~CO&WTq-ve$0{c;?9xP9fMKvq|EkogiVj`wRrY zKj_g|T8z!thZcLnKA?_)E#E%?y>rTA7qi0YSZANNSCl{Whn5m7Lc(b8;hg=l8MP0A zQEeDj6c&%DD${>RoQK+y{d6xPW!OoR{UQMa!PP8xc(|KXGRv76Ni@pvzPE;4M+2&L zmA}?rcB9!Sm-(#7ZO;<6brI7b`+X>$+F~ocf0THU&m|$JpJhk2RfP}TSa#WH2fi&f zv`9~Z1JbmYNsEp7(!08Ruy}KMOIDQ6l@txIQLYFyPnNeCpwMCC_`3X>-&`;Uey!tCjos@6U zTv%me+FSmrD?P4B8r=*FW2DJiV=|5<8ke;qZ48qQw5ywna!|!pPl?A}dX_ZIOG?3* z;qD%6uV+}j4o<2ky4R|M6Ar13xuES{zC#h_{9diKEGkp07L}d=L5ru|I@JjOyn_3A zRiJ{^^$fyiS7viv&^*Bnh5t45=Ve;3KDmpUjaR^pw2I~FVBOdsF)Y1~X2Ks*<$k5# zZ8?0+=A5v~i}N^}B`77Av$M@DV&LrHM`x0JK`h8QlzEYci)6*M?huAYM+Mjdr5t)o zy4_=!O=l24K|W+v^#K@qhX{5LxrO|tG^sHgl=0VZ^cp)c6bS=O?oBiiv00;tCDoi> zO5vYtbt6HIYmam~*b742TOmtR7H6HHe6KAtDMgVl^mLplAnp~vRQZ3in9RC6=D&O$|7W|U0i*i{5$y*B;D`tyN> zz+Lq!TP#JkgjqP3Y44;Yrp(g}5Wl2A#ut@pBKYJl!d(s~IGGCIz-hE791GvMgasUB zM~iMjkJH~Xr;ccLINklBgyq?6f|J%&2Ejx!OTL9B>bxt4&MA7s-D3rsMu080lMiy- zEh#f18^rhy=)47AXPyb%Xs}x+ahz6Y@0kWD9K}Wkb8Lt*d$qA8W~k}F1Fs(tj`}(K z#uP)UM(9$rWtts~s5XUTa8PX9SbI%WTI+O(vBh>i)`y!b*q{!63oIjU6$j7Hx z->GP#(ZeRnbdj_rrticpxzG4ZNO&G|EID(P7t5iA8fi)gtFQc!a-YiV6=yX>xU5Ep zvzahZk(1$vpov9dUt`ffDkq$>fa+3QGAy*I4@cX@oCFohflzDQG-l!#-m4T{GnY)zZZvK=u3J z-sv7A45KJ6DIdeyKsD+xnZx`OEMp}yd7y-+@9Jb5WMWfxZX;#IxBH1|9@bZ)HBJd8 zPQrL{5!CR9VM0ivOdLdk$H9i6#)zXvDpN~<;^_wV_IyfBASivQU@E*dD1lj|VLQo$ zTEcn>%aDd(_%`*hZ?&2wTq4u8ZTNy`Ib&9Vml2wvS^|if*a&q&M6w`8Sa7S7%)Akm zOJN#o6GWBv)THge>q-|P{bZkIKh&R{;_u^=yyR@NJH=4@bIL(0SO|4ImifvA%pKvhvXx67!Lb&nB<P#hYei+ zK)0k2zA13}wSMwtju04hxIEy}pDB98xYI-)Iughm;kc15Kt;;b2y#g4MN7wIqdl&v zOlpg6+)e?1>o^S1r8{*TkM9#{{;VRiMwf@foM^bOg(vqW@#ueLe6VNV1WC#OK^1xy zkb5j6hZ>^$5N9YR=F@do-kD1dH;?9Nuj^7x$^j-$qpbMB=Ly9GN7_nX9g+2>+1hV2 zjzlKMluCbuCv%oAdwk`^22Hd$9d_msE&Jn3I~iZhG5Z2$0_p;)+v7v}BEqLQm=7@w zovQfkn_t+E{Duuv!(r*DwjC7~|795RxFDwz^cS8dGZwHA)XJ~jPeO>Olj4#s>~D%o z_Tx6qo<;mL#!lvR^$(w4qPjoPd+TO4ht^R_Q%7ss28KWN=25XUG6AL!`S z>rxIta+-{(nxL`T+|R~b4l9eQHVN-qjVH?7&6D?4!h=HuSKiT!&GNE?l}%>5(G)-< z=Oytq&ywHHYA_GQd$LBcKm!)7*%2F0r3>03sar;(P|cEm$B`oPUXx9R27x&mp52pG zv2DCpnV9#6#GgHBW%x6*0%OaCwX(V%2kqB!N%4Phsa?m0m#{ESAQOihnQU^RRb~Bn zC;EAbbmX`B=ib?B(b6#Zwkl;IF$C({sHW-*6tuPL#%Ml$S%zUBY5t%P4r(AzIjwxL);|_{K>(XZBsplZ0WHLq3 z0@vMyDVkiV>{Hx-vvvrkrc8KlK1kuR7|Km6>I;b?-iN6M>S|UrZL0s!x}RI+Y@yz} z)bE@HUv#=>4B-oGhs_$EF2fVa`0&OokKYzlTFx-#E)=$sz=Ouhgk&qy1?z$Eg&f4+ zdSB|o3nhfKD_9qZRSKz$dZ)rhX`E};T6eK1Vh79^>^z!;I01~BhvI$bi-#o$`@bVP zV`z6WZ=afEUN|}C=br%;5klZJo>Rt)^{e|rm;%Hd-w00y#d=eA<_?M+=Sq)#vwIw$ zNAm`nYXZ%J$qTSHNQ1rXibI~`H6o|?eX>K`VwaYO$e1^<9f4DTd`a^bc-kt{^^g|V zidoAC6hWJDUNG*2f{A}eaQ`3>^Se>toEvADa$r`g1cBSa@|YR13>=>)E4VE@dysky ztVnZBd7KOCEE$J4Q4j|6!Y=$(#P-jkhB0Tb3Vd;cN(s_BQ7Sqk&@oE|9in{Pm@ID; zb^34`83?$kChRX@3!G18&z0zeIo!^O+0NPI_Ww^!3`7IrziMOfTtHI$eMUfZSwp*Q z7P4=d*s*5c)FEy-kTc9d*Y!QkerR46kM@j&)EOEvFO0XJ0|a%b2969NdIz8S=O#giipCx7uZDOy z4gkGQ-@pg8W%o`Lo~R*_Up2XyAIucrMy&}wg%RV^q+?grl752AuGy9NEB35sT?>ial; zp)Dul`PJN7-%otbTLq7&>%}@o4DX_QS-T~R-SC`AxLFR8G?*^7uB?aiGGfl#M||N+ z9hzq;%cm`UR(8(*VfZ1?SC)RNTA>7#1EAaVQOfmF`5L!h+GD)z z4_*?P$3;+VC^o4fMY{z*5HBl31>u&k|5v^+NaCi0BR4- zW{qjFT|Gvs)i1BJd89$4D_|gB6Bx{W-s$|$Rhx~?Q5?RHhjJ}wzH$Nx)kXn zP0WX-#jty7d8#5v6C57C+y@0FIhN;6KLA%rq%QaFkF&iY(u5^uXJgR)K=h<3QJ#*! zYUKfZ-KuMSuX-W@kcn7#snF-}(&}Q9(JR=4vgEavV!yf@J@x~u^Q11vJ&+x?AFdMg zneIQ2DOWJe9cRgpjRyih6x({1IP__Ij*Pb!{+r|wZGf1i1#>5q8M8b)-N)0sa&zR= zXUS}#hpKulV9$R)FNj}*l- z+Yu`DLUHpAY8Wu9@l~{Lg{&PX(A5#Rkw%BxahI36Cf{|4Hnispk8Fr?DX_(O(U;;=lkjJX|m5$0(#rymMK7%1Ig#rkdLwWmfLk6D2MjP3g$yC$H5d zy?~mojHmt)osQGU8IdnH&`TzL9x(#&BdB>GTGY>K`lblwC9_@kLZR@wlrxpA)}K^| z+;VJT*h9%P^@WJ?`h}g?9$IQT+5&fenJ?Pw^3pvcfh*?NP;oq24#6?BTY-iF+K{hYDZQ&!iu>|k&tk%YHOlwVO9?krFCH7 z?x`|e6RYt2$kWD@1|`V?0|S?@^6AAgN&XwMM9?LGLRtM|6afiEbpxt_VF%WKNTIw= z9m`lGK`)T$zB9g-a&X_xNgwYb^PQKi4KD1WYyduj55YjxWGom-s&PsI~l*GlzNO+>u zbFZgJqvisU3dIyZUD{Q;$Y&-PSEDkR62AT}T%)D@{rh)nMu+LPcM+HfoZD4j(*xgl zpTsLpf3bT|lMQa!F$qk0ltE~awh-_^4O+CCy~H_95`+BFVh;9qb?i7>?%KT>2c3!L zgd8gYJ35tupb-!Uzda+gL0*_O0T9i`UXRjSOi5242XRDSz!$i^-|y+b5n9g zoP@_1N!t|1^kVq!=O{gA$4g7^&h4TV@)&sE{ver@nOy|fKPpu@fgXE}oZ%j5q4S9eL6$k_}Sw|3tAo+ zhK%kuvN_jIa0Jry3}wIE2ORyPH4X!AuqT#!lHoy=)R@^L>n5D`zC8E${I6b%ws5)$ ziiVCH7-edQ{1$vnj>!~c8lR*NMAsG^-rrtu9sUSxsG`?Evld90ZKD=F>JY=1x$&Om z)vEXMTCu$WUja<-c_4x?Y%^uAg9JH|y?s#(q3*_(UGHV3t(`pjIvPd6M$sGXfw&YX zUgrZBN2P?;i5kAYz7|pKR#1kXTW)87CW4tUKd~H0pSjNrh0G++W&}#t{v?xn6q{P# z!5Z7M(!c#GhsQm=8p>jo2iF1KBqd_IqiK#4ld#caSoLE#=Vgu>49TV{IaW_*cjNr` zeR3G^z66&~v+Wbj$cR#!a-e?nLC%U$&4Oy|kX=69IT z43%R5K9V8=w&t*!ns`Qic_UqI|BxTm4RIU9)_urk_+@Qg1-ulmHe z9Tb zWiTR;4%%1724N&RkqDZDfiANbOR5_BrtU-O($YQa+jm)@ClTAfH=(^2tq^+o8fD|Y z?V)cueu37^6sWOPPZh^2{BUdU0)ca0Xj_|psz!%CUwm#_p}P@k53?|b z72%?hlF*C;QrcY@#05L!flHqaH(uYgKce;<@96&iy&F?M2<7^E*?}<1DN$Z-btVdV zBZ{YF+Dp)At|^c)qdq5+e!{=t@rwWs?&Qp)u!o*+g^xGwvnZ&zMnh$E42A-DRUxM= zmQ($?I+$6<_v!Ivq~JlA%G+=Th7tlu!h+4T-qGU{fpwsnLf;UFMN(OZEAW``t{6My zqK`187u$zOUr#KWWe0oUIb}=Ds!=R1vAiDZMd^=)@6M-HA6=i7x8jI)8o5AMc>q#( zQf4|cml*)0e^RH6Ij|9T%HE&hUJn1p|_6S@|KB*bm9XIU6;Dv)^j z;x>drWZ|M5ixe+felM_6mxO@nJMDN0E}t1jx!yYq1&Ut-2jJkZe0(((W?FR&;18f3 zKsDll-XH}}>QxX~gHwK+v3f$#rUZjY4W%M!=~l@0jW&$4Tzf`IYOtl1?7ckkzl2&V z1*bH9XbFxWTBq>un3N;J>>Eo3Lmil5RF<0Tb83n#oWlKOs@?PejrHp`-&VVBkpH7f z*u<(y{<+Ry8kiQwchfrZBPaN{e5CBfG3%uRn zmFcM!2vx8aAQ#k0mxXV(cCl4-{E%0*h2^E^K zxCna6XR5nY#cYM!ptYiUZ0{V%=uLY?ve{-o+yhT+uPYFDg$ zRuKU(Z>C&Z)^KPr=r~{PPOt?)JJiG$Y$JaIH3J#xspz=|vX+OGq_(;^@Mp~*&lEOq zaDL-gimYAg1$IR=rpnp%!{)orXt%Hl){cC*N*yMO9}4p(`A?waRiWlN)6O*7G%kvO zlsk{0;{j_rw07OB?pO&znn|} zPkz)Hx)qbE{5M(zK?!uPwTa|wd9+z0Jt&C4kyQHjYGP~ZRK00EuvwST17$ty ztPa+d8gVS}yikM^L8Wk3>aZ2~rckU=oB5-)J*4bSWl@7=sb%2+10>hM5&?TKgUFV$07}=4`M|!H)yhIBq+6O9B)iJ7{TfD(lBr)f<4D?Ln+6&ohK`EXF z@pvE>Es|g|+>IvjWtlqyYo0v&bO(uw{`jF@4EDD-8%8)4|9XYPVFC$*v3kvuF2ddC zE@plndEpsCs_|CuQ!@;)qWeXvnw{zUY!9`+u62I4D*8eF_gjSIINlV@|9o?pV6|<` zlafu56L|V{+ZL(+gxTSw)s`F+%Ed)=_LqKViwtzJe;8u|zX#Nv_ zwo?;D!P%J2L*vqk=h65{3Yd z(bM=$66CvbF|~tFy3=SdJ|;$#=_kSo7uT-US}iSfW8xPUPXqP$`K-v4FIr^~duEG> zHQmXbHv!?$0VHVA#v!F9fE`N&TW>xoyemZT0LpGnP4f=~jn0(CPnIo7aRKbD3y3K% zUhvB3a|Z>_&4+wpiY3wPoA?tr@USxJ3gDvhcBlFgAfOc9Pj#V;W#9>WZh+$DZ{M^5 zy_t31y3FRHE~s#kU+Mv7RI~AobtPv#fcD{Q(U63N;GmkU_%ZoM@P@d2lUcTgXf2HV zbac+E=>dfqt>0jm<<$(^2WQ*AN9hQ2qIkUX=#92=7h{*9;Nu&)!!*>jv`4(yEp}=3 zqa)*3Y=Z(7T^#Z3tsXJ!<&%>Uxw4gY|Jf;6wwTZ-{jfu1@7 zpGIYpLAySfMI<_=iEAwtQNo%nHKTI?p~xPt);M2;4>{#ZjDLhrN8dQ0ZRI@-(BxjJ zp<*P)M>xBWNbCoUDPhZ7x)R2Dfz?AjkA055&_Zbu@BX=wi(`IkGzwpUuZ%wp8u<8| zE1=`w3i&oMe#Lja=n>QHXr-`M$k$eXtY4MHW7%VQxI`1*#~sZ|zTr0W&hf>s#4 zEJ9ITt+YOC|F^BYC>`X)R{VhMOS#JQd9B@d;0pg!bnxZ7&UBZySMY~?uXKG3_STj* znd^i^kZuuM=GsVg@j$nh(BCP+MqM2UFGD9KV-Pjtj%d0t#io~3P=2CtZ`gigUho7z zUge@RJT(K}o)GuvxbV*yoC%77F}zdK?I5;cyJG#o0u!R@EC7ZajJEA2VwP4 zICCxM?3e<2Quj*-U+N zbh0G7A(CT|`rSq|$0leOe+QYOzU=Srpuy^xa4AO=2WPOiq(}{BIn(>I-fwA~mj#d( z=blxMpbr{kA@3t6`hmE?LiYugd1TW{XYp^bdeBntq_(rcF=ejz`0&2&GHyaFNW!MS ze@JFc(72}A5Q8~B232TvcPr0bJey%rT8BqiFYw`EL}vlE&W5bA{A%)5*2Hx`BbKZM zRsYrFK;F$qvLfZqv0><&N$v+VFvuj?MG^qpR&*GA5iZPw7%P|H72JBd1~{=!0A!2Y zdP4uwZOa`d54RaEF=7x!L%&t$VMiu8tyKZlYWrLtM(}_fT<2d73@}Nj-c+|xG2FX^ zw4#J?k|2(=c^^~HosQP8wQrv>w3~&Pyh$g0F_)Ey3dLYen@m^j&yYCHFTCqTb(wDO zz>_}|p@-NDgOjG&kxllh(x;rXvR)URgwrZOx=@f_;GPNaBU@DMh;|oep0uJ*tKOR- z2p`2cnPET5S7SZZc1T4}24Sz63mVf>G`rvjW(;F(99mb#9+taKj46PJ_o~z0$abNL-2@KBdLcbN2aUB*_=w%rGAeCfoULN) z?0PCm{q?NS>V{_>GK+sWX@)N)op113l7LD$E+BzpD}6@jTmR(d4MS_e*|^D3kTi6) z1+=il+0%R{Kg&I)gOQ-+c4i~62YtsdcJR@=i;(YXk2-I+DN9PHvw}oHY0fm?PC5C>oxNJofQT3y{{yN5=ST^=(_%K!M6!&U? z5m>|U=Z)Z~^S;W#EmNRZYRHW+ZADZqs}`M+)=l~sh=>uJ$hRfF=};6YL)pnV&BF*=g+pK|+?33Q;TV%y zOnDh7n)SGa$q*?XMY(cGeEiOcaD;oj-jIHys=0q9%YrX~+g}9anRNa!=p^9&!V-bS zdR$l~n0;BICVO4L6rb9p9;93GG!!m_tVjaTcaUL_pj%a9AIrd*DE2SNl)>>H-lEl= zDA90MfuL3Ce3|BigQH=>@VN)t2AHv@h^ zqvynrNA7}C(5g|0ZcvR7%M4RtzRBakcbx@fB8&?8oz?Lk zPVkP=1#=t5jGzUFE&C{5W5fe>X=;)@rtg891)54cTwH*U4l2642x!LoRfD5C`6Ad_ zm4Q^6+I9~yvM;LgT;hOYgOX%gFW-5lUQsgmo(A-H}0-*Wu{EuQCuiqZQe_Rp{}-~a%A zOy@Y^N>0zuy(MrQY->j6qjb+g??A~4phy}W+LtJ7HK-s(3)JAG_CTrh7~ES+%{n3= zdvASy8-5evvB!z`>>pmgs$hOK+spKe!+2oR@I6o3WbpC!f{7(9!DOs3<8&EMFFmY9 zTDZv>J%Kns#QA+ZQ1Ue3Yp)1DX6-tqJ)JH!Bj_?};y`k;Ff99r9PYAsHv+9w2v>!Y@6~ z%d6EBw-kfS7D5t7D7NUrkxWTuz~I9M_jqGasFKbv#|XW58ew?xPPa-V>Ek;FdYnWSHa-w}PCxtgR~E^#_Q=YIEB8V~O-0>jOgIgmWJ9bZ1x$jzirY zS&*`XRRa$splD-dar?Q((i-D(-xopBvMmtdK1a6!{O10=Nm~;mRvp+Xh*5TD@cU0E zuphq$?^-f!C@}M_+A3)-EVNvF=D4gLsq59@iR_^$b75H9<)2{m(#gi$UZjmL#2AJl zOdm4X(z}CcLMF9uSWV_hmN!5HMy54N#2uorslT9qGqOgugtOZKv9xV!?}ZlgVEC@2 zOXm6*EQBZ75v4oug<-u5hi(`5H&MR`v%CF>PQK8sW)t9i7SITxpxgvo$7p}D1%J=L6Ob{>3R$PRDf;L8{A*GX@Mx*I- zZ)x+|s(S}u=4SJxRfGCjot`81{%brUDQi+0K+eb24 zjdA|qCQ|`kWdxaF`KXZ}cC$$0Ft&~k<&c9{bd4Yy>hOe9bMfvZPQn_Zn9>B=9sAc8C(IT< n4|q|!SqyX+qPg@->$3kZm1Q{wA57bA0|0ed=dc9u|C9VLN$KLG literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/installation/securebindingurlparameter.webp b/static/images/auditor/10.8/access/reviews/installation/securebindingurlparameter.webp new file mode 100644 index 0000000000000000000000000000000000000000..0577ed625ad8ce177bf89db0a51d8a89c0ad34e1 GIT binary patch literal 18492 zcmV)eK&HP^Nk&FANB{s=MM6+kP&gncNB{tk!2q2BDz5^+06uLrmPe!`A|WOds@Q-H ziDPcza()0Ak&0_CHaSWEL75J^{!hjl5q$^$*#9^F>)MOcH~pVf|F~YDKZpO4|A+nq z-W&fnsn6gWJv+p_oQ`7_hH~;@&5B_~?{VV>J z`6=&X<6oA4Jp5t)+xs2uzvCYt{VVb_`%kbB?Z1+kfrf5T3RCtMO0!C;$Kd{(E_U_22Km;lE@* zfB*megnFCtpX>kIf3bhD{;lX~{TKDm@E_lQhJXM6>+~PwpUywpe~10X`T+h%{R94Y z_a9pSrvJtK|Nrmn3H6`vzxKbv`~d$Y{>A>U`}g{P{vX;tlRsDgNBzV6pZ*W^KmYyK zeoOt2{kQmU^Pl-Y&;S4Y1pYz%v#6^@7w5a^^g7s=gDt6 ze(RV}e#gq;=+VvcA*M(NxyN5o)i`e~9Sg$$NtTDLSk70i_wdD3P zZ*pP`AgW8lCM3OF&q8Lt0G#Vz^p2}kf7(p2`1XM%(4O;~x;Y_-D;PIVVCXe>@iAg( zwIv2;FW<+FvJ!?*Dl1*|r(^A|&6_s5bm`NlPMtb* z>C>l9ojP>syo-mD^8rvo9ER9l{jf{RvkuXFrN*VxTr|DVLCu1p;ISpE2cr~g3yTa* zVMe2YHS$&>w=_}t=V}ED9f+7J9hCCD%oxRFVP}_bRb9?ckCp@k=%C%y^)9OJ90FE$ zWb2|(lrw&h`c!YPP=15N;lY@|w4)QrL-k%23Z=KF1pP_QL($iOW%w`ak6 z$Z`1S>0${1$Ow`6%00o5?7G$ASA;F02HjJ(yFMjb)sAZK{xY1*ydZ#D z{0tW*p)x2L1%@i7w7T+|2XV}?`sh-2;daUwUDL*`UXnKHeC(x>I9Pyxh?+NF?Iw?@ z?SQClCB(tIwr_O%XjoeEr;9uF=3%XCUb(TGWL& zWWgZwd?gB&r!Y?%z#fCnmc1>{bm+-TvWXq{ z%_9;gLZARm3;8F#8$A$lRjI2}p^u~;S@_EB89x)8#y|D(BQ2n^E^4A-Op;`fNuIIA6?NZQo!( z?hz8mnlhHW&F3MN`6{obfFm}AxDGfJlAZGICxIWTp`GaSy}TT2**Ro{mFAUNGzTF{;400RHoNCSroT z4ToH@zPFKpjUxb$%}g;SlNB@(&k%mwBehr&{*9fs7v=+fzseWr$>GR4g%&w2z;(_p zeANg(Fl<+WP^&MX#?-U8YM#G}B-Cxh&A8C%c#PRj%a{ZS1W5)Q22TN$o1ds!PPRX5lIjoskHr{lHU1y z9(bUEBy2TGBtIn=LEuUnWq7e?_G}H{h^eq5rCDSIwsvTVpty&(B~ z*VP{+Pa)IQr%Y7@DC73TO4$rs@iu?H#k$jAt^SSDmdm5T3Bu`8P2`~y%S)?x#ig@L z;Qepf8OPEngGLWjX=#zAzumblA-Cy;BZjy9SAlP>?GPirkF22}AZFWBbmd{vz365ir4wkEPv6U!h{LW*IkFR@_2a6$RCNYXpt+6kWnqT$j$? zKjseqde#57PRy|{OIQ0zN~t=2tWwW6&@Ws_4;NjV&ZThD&w7rFXP(*p0!wT?St11q zt4wy=qTJ^ylhuk>#JcQIj~YF&eyPN=pZ>TxBe@_fu5jt!S#|e5(=uBR9=>|N4!Cqt z9WQoYd1ID$PAd}M2QPtte#>#(S7^u)JAH@wGg_CbB8mRfXYCFzJ3BKS+`cPs$_6i>xaw$Sxt03{3pFBw~@UC zU2Ctab5c{)wg>G2|E7N?Y?AYlx*l8qo1fVVFX1dm91H*%xvjz^w~U3fDnVGUiss!R z@jYw>pw!#hVPcLp zDx_uu@Bu8A*vPCs1ots~a1((m<>>szFU$pe3bh7dNYj(F{vTZ9%)RebPSzn9q&Lw2 z3JslNKI4P|EwE{Lj#+^>Mi}D8;-7P0#*w80q`i5Q5P6X1Un zr_Y>D|03mt?%$(Ku2Ek45f*%(QrI>@-3D>emUL48BL_K)^5{sA(4&`iL4}bLR)SFA zaHnpN~W z)ugvQ`UoOQSpqtNy&;hV4&GlfE|iUG=WxhS8^t;$g6+tRt`w?pF+0S2q>K?Gq;thX zBq~W~1MUcGDZ0ca45^n9RA`$!S>}hHX(X`OV)-m$QO~zQGhv=JF&( zh~rV1v5!*us2z@}`vKKu=CbOm7$(B5`Gmd*{Z`S38JvKdZ~lXa0&*lUhopj#k9dDl zzVWps)LYW?vQ_BrMG#ulbyYx+0w|Z*oDOf}V=c$#m3pyC7@UO?{@t9a0%(`6Yr^vY z{WkC=NxzH!<+=NJ${BU0TC5@QXc4l?0pTNn5#bqaOY}yQIn3P{Sc;GEhi6+A^pxfy zAGlI{Yh#Wu(S5LH@t+%VLuK=L4M8vUH?S|@RIamk5#6H3kSW1zN(y8PYCy_U-3997 z#Wy(zyfUNV5q@WMV^cqKx zGCDEooQWT>`IH(DeFCjGEiH-@BtUija;+iz(XcnXa3Lm^Pf<^k5XxS;O7@Jj^55Ld z@^HpZ$>UD3`}*^5)Bpe>cm>NaM8By)Waf$pCyz0JLxc5;BAiXl;#tsvm8v zfr(01s@mogbCf_ZjM`@Ho5GEK917aWrgMbKy%0dA-1WOkWDhEdk z&yU@Y!W`TvJygcy#Y4%RDa$6p(4}9bxc3Aq+##JI@d24b>7MR8Jfo?e02(h8&4d2p zwn+^oz&sLV!kA2@G#DQuw2}wtOx{jF1%rSHn26$kJ8&p+ls{Znp1l1bBV&H59>*r)lQ~j@4}~(_NaT^;e1XyP}EZAMKee+ zY63$_w@f&E2e*muG^X|1>419_mrMcj=Si|QmwZyuQ^a|{Q!16io&o$pecKlw*=R_uhg$Ym4g)uF^+V-T1H2 zX>#E&?EdW)uM~%-UDfeUCbs21s*vks{~QyEF~dzkt=7vnJf_f5f zD+4IqkTpEmnZSC-0A^ z7tb*P^)=kEDt{>zz|OXb^wiW72jjBp7Qw)o$i4iSeN{*F7B_saWAm7&J^G| zjK)*)Fpkyr3dK1_V;%e@OPbuC)Gq5l%5tyD8YrE|?U^|cC)LX6&=G<=W>inRw`6VRZ9Eo5F;^B$${rnnDx z*PFEM-k(}CpRvZ^*js?>#^FswpOG?bd7+(OJ-bA`X3rFAwlKw(Zs7T~Q&$9D-+#tq zE3g4I7|4*2j;tn7v`p+B`;Wr+wkd?Mv#BP=mIZR>NQEht_yD-jcr19Wq0prTBK~n` zo0nQHQ!`gk+SFukFXG^U{FDO_ZN2}Z`%87SDLx|yJQ5}QBUhVyq5yw(!Poma*Bl^( zW!u$mQL-N7zF{i$K*}5qW>XQG(+3alEu&kkAPCx!b0IP@B=`04M-Bu!BI?(b(l~1x=9izS6!v9dqhv07qF4c49W2_XJKI8?Wex`2N%Z*G5xEC z*BY}epq~f;+bpd7!&V}gJ$~$D16tds)6z1Qw%SM6K$iZYd^f961=pcVUvJZNUTBpH}S-K~8s zz}pFueouJ+>iiq>Ra9un;}p!!a_i;ifyhs@V|e@LMtQzqaNC*DOQ4WWy*Vb7MVsBD zZzM#Ov;Lk>svQeZ6vO%w{PgmF8bgs`i#5)QkA8IOM`Jof-}d%L1YBV|<`6{5DE~y!L2#FTI)8L6JNK%T=HIVxx_hyNxEQhXA0m3og~Dcw>AEPM#QAv{P1U|1_daCxG! zu_jXC$QHU*)8wBNm&-YC=Q_oOV+kEBV1`dZv)Td0tlQ zZ@r>RKy^4GER8~V;b5s@v#t{{rFS`eqBtHCC*xUjxVCfAI?slOK8br0p`O}V+`_+5 zR0?pm*Rxx6na^nKT9DQ|(>0@_=VLdCEDe7IlP+O}$V)L$NXOa0e0xT0OIr1~lRmk! z<15~wNu0jQg1P1j<>`qoijfMZsA?!>s91lCte{ z!(;&{;uG;c%FjU6d;AoA7!_l~Z3S(V)qIPr95ObkNq;KwmDU=tmqtc%m9JA(LLyfs z9Cf;9r^K_UV0wbrNbPA@X`_ACH4fC-eHQO~e+D&sVr9lDy2gVlJenk+Edol4o`fEF zw`3VxR#pE<4n-6T4y|2^09E50ZJ9oZU@0T3fEB&wGA&rBYq5fNlwF0Fab8{2Rt4Qw z;Rj!9wRxee0sD)a`|zpi!K-a*;wc*XUc#P<`<8td0QB%mYaSD<;6LT0tfk0z@=r-2 zZh~s;fdc1_S6jwtFvRd}7l`}#YeTA@QDu^o#(=f9hXW>?bMg>W{1XX`lzrarQ46JAAXBcz zwPca_2qykQ%1%X#+Z?oC^7QdY1__M<=(q30#oz2QF8+ul8*}u_RpM;HX`H;>^kL1H zMR}3v7Ft@ix}yi~+E8Ofs6R2Uz|mgUXOL3^FuQPGP2gBSicYi}+7+fwnKpxtxQ(lO z^-g0Q?L?s33Lb@OKGQy@e5-P&e4i*X2v4>V zIpvIWw(MAE@(`u_v0g+H_gfnUV9t50?v%O5KF5B1JoVBaJcYqd9lI`0I14R{1>tRv z3W|D1UQEDRauv@!COVdUu8_>7mB=!oTysZP{}=O?!d}eaKIm>Z$}*~EqIv4P@BDWI zh!w?l5~UfYa57z~>LBavfz&c(t#st~Vd6dT_TAi(cSjdAQL<4suU(Gn*rxe#KE%Ew zX#)J19?79iGzV0j1qwD4>is+ysjs76O^;%`*<7^JCpUUyHI-Pbt%D}C3+u8i40b2= z%@wSzo~g?6f+Um*1qo5Gi@G8pj0S}~48X8fhT!u?xWr?MxR1DJ)u_QMtg)WSM|q7K zruvTbhau>}&Qov=hIc^4;$M=#862XXgD+(nSAPLZ$d&Dwewx-);|G1!UOAOuU{}p6 zo&r*%f)O+*CR65t#erq4R390xV1I&r#$W%Zcs5J&W$FHmY{~9k!y@nKg|AD@W>OI` zJ(DxCe`V^G5{K#53f^~t1biK+k$v+y3WskFph0!Tjgxa1T2Ls}j?7o?c z1wZ~qDvo+K%}iCr_oFC4)>3CH!)vNl&isOzbPvl5T?S8iz~t4aO684T z)i|V|qPI+&-modYgeMJ~c5o^$7*e?wbgReH#2)Ebo$C>ktE`31{rFP#SVADX1qCRx zrG6LIqX{_#p!YAXLq|8d)AxKi%Z%zl#~RHCbdC=XTDZrhBU~p%ZdiohJNd zpPZ|xezcHTXWz?z2}m*$tIpi7gqJ0F3QJv_t?i$zK*gZov{5G&3llJc9^1(Nx8HV@ z588NUgbP?zH3Sv0mM#QwU(uf;nJLx!nH^4zMvk1(tz?WHGK*A{im-R(6LK<#KhJ7B z`M+rduR8d#(Qi2Ga;~gg6#@9|+{VkI1&x%OZHJ){Q&S?-f43>Z1 zNvDTDMG7S28GKGn*s7!v_GPUIAfUAxA;XiB z##(IsOz+W#LrNFh_q~c-vAHPa-n+Um;2P?~Zt_pJk}V6E&}ylWC2g-1cmjo(Api@D z#f{#=-Z_IXp1X0tiC`V3N?LX@v=G-<)Zhdy^-EPUf-U`srw81UELPs`$0-xh1@#9Y zWRjaFIO8wz5(+axzYOqRR#wjADva<-nL2jkh@ z+Jtmofya#%ZtHV(gA65<4+4gZK>X#GYbaP_9K~s7D)k@|w9G9=c*u(HZcEIEQoeU6 zh?Y=^YRh`gHmyg5Vh!P@b1Rkp>ws35H6g+Ux+5eHtCW(NpsH*&ON`Okk-ygH`U)%k z_qU+23$HgJmbJ&2yvDmY>C1m`kJaQCYm(KmOjygj9w-DI0=kN8?UTu+hy1f8n*4l* zxv}_G%Ls&|v?A1$rQ+7mOHsIdV>%jsmNn-rGdCjMA8uF2q(Y^1tKy#X80-kV0Abu; zY*TcmZSaOrRgM*avkT_LixI9o%)cL!;eDijn+w#Lc5c^AiEKE%ZiKT#Qo)ZgP&S5j zQ8ll=)Uh8E`Byk*{VHd>(=T|$gj7R6HuiY;*_Bqlu~6m>Ml@L@$WI`|Feo*TQ*zjz zb-T$N_=JMcAOM{Uh-S9J0L}7oWT-{05jIkbts|p?>s8y#aMjy{d}71rx-rSy*e>z{ zKB@dFE^CXFz6%Ym-ZHrh0zCGcqQ`y|JJtxs^Seyw1#xlVyG~8+*O`x<^06ULn*a4 z&$=sQ4?*N6O+fL~2FuTv#1}Tf%T>iwD1@xdV(&>SX~P8Up%%l|`jo-l;`TVmPqU!I z=k$!QYJp~*drxPg&1bqQa8{SscDHGQk9s{HGr?>;Yc`kW9xePOFL52TeehE;|BaO% zjvZ^RKS~ib^MnZD9YMdkmues@mHz91R+nY3qKkiOURvo&nPX&5u74NYr>4s5ft zlFXL|Ih4!#YE`9+bvJu)fO*cCQaDE^cFvCMVJLR4TT(9wPTHy72}s&nHZD{irmc;n zGhVe_xJSk;K5#_Sjl1I6!BBcIOF7^Y5&94fh0vwwoDKg}lN>>@Ld2kWYn$yg-khLe z$$04Nl&=*281RM()169VoiUQHo3XEg>MJyB_QmKc<)(}hUOG8WMC7)819sMF?wo;H z?oURKwo0!OKhGSDU!WP$WSe0Da?_1>y5ncr3mR*R0t?eaf5S!A`XA8Gv+t|bG98t* zwC%q(#lzB5L(w=s*d&6WW7Aty(5?ngD8dH6#jhJnxB)5`tKq5Gl{hYam&Y?-Mto3| zTpn|sf%k=J0@EBWl~$>RPLO`bF~BMdT++H(_hR^_yRI9&&nut%>}6K!e{*1q#FskF zOe1ZyNsmgL94Bfdngo66!ae#l)zRTR%$iznnhRI~@12NCS`=LFnQLiM0cZi)Nwd_| zDT--0 zbXHxsp0qLu=t3dD3Fu5QlZhbE*_><)eV$-u=5JSTF@`2Z)V4nx{XjmV zMt@@i>P{`{z%`=&IjvN~Qy&cgqAUeLp?~!KK{-Z#oNKlkiTCGqV|5 z8{PGyglYA4TCl5tKL$oR4C``;z8Kq|hGNT!{bVd#X4{BFtbX;))vh%`Ho@(kle>g)>9K^9!Y$lNgD{t}*|JJ7}Lke6CM zpHr$D6H#vcwV=BLFvz0uT=Nz*!!3F~-4l0NMktT%I=K>)Z@;oA8nXmw8Hsl?QOqV` zeM_ALZ1PEw@8`=I0pdXfBDf<)cvMrBROv%{{gxlg%Ki=70iBs~-E zf8fXn+wLc31>Rpq6O559sFlp zbXpTw|Ex>7>>VVKiss2rti03WdhN$QROrf!yWy?NN`zDBC~14IWyh7vmKz)3Q+Y#et*c-+%V-W zW7O@FuFA!+fK`T|GATX)SlEeWdC=cs$64)Lm`b`%gEQ_?@Fc0J^uwkX2vtQutsv+p zajkGU)>2*`dpl1MQddshCsE(m0hBH>J^OI_tU6HfCOd`cYl_&S)jECS{?D`@`}Ot0 z6PmGR=QK$#mD&7!fkEINm##Hq$Q0l;@wFmKsg;#}$#QrO5cTkrUF<`lS#tROTP}rV zMebiRW|%*Ip?Gn6ZVrUPnWFd-mAytWvV>b%`> zWtIz}p>O=19T|l<-EFbELPiFEh<&++M|WE^vmK*x-eD9ypWiIT&U)Zx~#%9)U zZpVZQL2}*P_6nq;4z~*x=>8Z;J|fSgvUx+DJ#`02Za@G4SSoSHD9~d;+@?nqA5-JE zIMJI-Rh2ABz3zpTp1hDL~y{`?c52Ij^tW*oWKgFPL{?9OnN+ zvcpcTmD0?u2Z05vS_EA`2ox?S33O**_Tj4TVDvA0zT`DV4E|qHlUgZHeR}G*=rdka zfkk@Q!hMH_y1{fEr74Ww%s-}N=c;h;LS!lk;_R;qDF%)UYf<3^OWTOyzoKCX7+#M} zh9$h!WOqqgq>8^B)i;b~h1bo*dhNNTYLY7aa-v?VypC$xTy=wl^g2HxQW2barnso- ziA*d1?^ox`458@?+&ar+pHuQ#Oz-n$8Nf>{Gu5%@RwyED9Koyfmn5tLl6UR0y17S9 zh%?D*LOpXqi8%dl6-s3SX^ya|2Q8&XWUEUY$wI*G3yV#(g=*tR2$+(kogxEN561Nx zj-i|f6?Fe$ds$AB#pagX4XX54QVCYYRIjS$E^GWFNyUPQSjzjXS?{zdl>o>}Q{RHH zHf+4_HGqoaGU|oT`>$B!xt1#vd*b@tW@CS~00M@f|NkKp?7iBErI9?b7?j+4W=Bk* zbTxMpzGVoUg&nCjxEw8RG=MZ@VLbi(uTc)=WI8XRfN6>*x&FJWJ;YduY@ceSpFtK% zj^`zL#ix`UMcrlo7kL8}IOI|M9{m^v8mwoY)Ocuy0Bw2{LGD2sOvcj*veH_r56ztF zyybDJGG+#^Bl>(Jn1FJm4Z@9%JQMUe>?L$nvyj&F^%RDF{`^PRv2zyj1gj#skgDGX z25a;^qQ2p=>F$vpev&8@WiVqG#2}rk?`jZ3DdzepS7lTJIp{wNC4GW-i=4!4Av{za ziG&$3FMws*^Tb-1mie~WChZuXjZ+HaG3BO$YxmYJ|)%#Ij2(*mEH;kgKHXk^H60u`?AWx~8JnxEgVp{G-wFL?2k?%|$U4ElAPnIw%7Za4WD+6$t44Vw^ zUWumL&qeni;n<)6b@C6TrI3-E*i!%;N_uvH%oPP-zwi{zZ)4CCrRqJJ#-apIcq{~K zGlbw}4M&4xzOBWhY+oLwnZ+%IfW~W~y}q=kAC9J#7 z?!N*fIYQ~H6+x18L`LC7H*um7Q5b6nxGe5G(R_9*b*_kgZ4PnSw3?9OC zBlfX@#3-CEA{iR6Aj5-yL>6syz;Wt9OU%2~0pug@JxBD=@ejF!hJ(5H`L=CA5Y-ry z5lKk@hN4mx`Q10Q#yWsG(#l-__Z$lt`%{QWA#~4O3D}9M5MVGHsu$?f6{T2DqbvdoIEuy-L?mkMS2u{aCRe;ib@} z|E6-Bth8ftSHRfrVmdFNJsdY9T0dMDK8ziLp^nxazsGP?rie;`h!BDZq1uXxjOP)G%vK%Y?ZmkZqidLO?Ww?n z7>LZTwWdGH6d0-m8p_<1I%C@G-FIN((DAG%K}1)?sZ)$SlbMr!S_y-guBQ8kwJ702 z#b{dyhgese&hRBl7BIL#p>qAF_D#z$Nc@9v;#-Qr*;a4_@CB+@e3^SoJKT)BLuhi({2=E*B1}$zN9LrVoe@ea9&A6U$_|jciP2N5< zSKghbjKXq)Os~-J-@&e3_Q!MUNIttA7Fr^;;^XzubSfhE?yUpKA4^y?e0oU9l?EPh zK#qX3pjVovX8e;4^_L$E?47$QJ)=c`0OLEzeeV5s_UaH`us3AJzxF%SN)3c!uE#Sx_hX!W0bGolpnXyd{3#2-S5oN75_`kWsA%P6Z~E0}wB7j(zL?tO!D>xD z*TBMybk)06@d|m~4PBao=t~q62WK(M&B!vIGg3n(gWKA_?5LRO3rW}mnxnsnFHwtP zUT})CCXoBRp=FS3jNvx`ow!l()q^+X@A~d$!p?Nx;tNYlauk( z@&Eukzk){dK#EK5Xb1P~aO}h82KSC)>D^WWO_@RTp^`Y9vIc5^>3bt|L^X6U+`p7s?X`*{zhJCIRBsL-lw(3TN5=;0c@6GUD?^@N;8wi- zEI5w#?1QL4WM(LLWHgr1>G(o==Fb?9j<7))e@*oWS}aI_#fBnc>4C~`iT7`~*nn1l zg3(vaM9Xv{$^_nNegcy+ufQ?pMDn--$}<(Wh!9rLqYn{-E3Z3x0+WH!4R=>n+s0n9 zZ$DK>=GxO|lVl?DBOUzeC zyUF+f65IX5Y&eToeMOCw(?YlnwNLVx=3xdCUh;>Clc@n>iVrd)F|%W*`H0Nl|Ec6` zLY`b5narCj>RSX^s@t9UCDJ%O%$^f&+{+|b@bi(h5~8{*pHS4yc5&!p46@B}Oz8Qd zo+{XmbeKYatk@ulc-cceTWk3f?#ge5t7p;RF5CNzKNw|0CQJdi_xz$1_+tMe)X0Q3 z8fshiy(3kd9$!_;RQ_i*dRXppe3OGGoj$%HU%%`NzfY&mTvJKiC)ip*x${O9 z*J~U<`!>SD;XfG+0bv8+Q`BPBg*gMG+}^590N|Z#V6M7=W~zf6JapOsd{u9YE2ri(+8-C9;gU+8~Iw7!Br+NA~j9hHv!})%|3)lOZrzMTug=B76zFuW~ z1@{sDU6SZn`+o<9l(afwPonSM+*iv?^qjX=R7LywjXmN_6Zw3u8Z#YFMjC9^HUnfo zrS0QkmwAo4PD%g(DwU8l)8kC)8)71d!v9e`@)qFST+|~(X{SOeFo8EvX`G!Uy2@(`zwX~@_HMH#@2+D8@ERZ)eX4q% zmMrIQsieC>;4Fg!G=&`B-9ijhy*VPrN*8q<+5$wRt=p6YPU2sfIRKkR8=~Suxi~(u#OS&!MdJ9 zdz7yJ6pKa%sv!@#h(Cj@T&aCsV4#idaDfsQb{gp{$|b1@$X72-Hyg5UKN;p32|vDn zVLh(Aog+dJgDYyvzv%(Ylywh8^d)F?E+y0T7Md910NRNv(#IdoAW-7X5q8+Zr~Fx# zwah~iPcbYDV-rr##K+~TK4ZCMe?mt6+%yeGH7-aO>-Vhj1YS>7K>(FjL2u5N*cVfb z)#Nssr}kv%SLOcuH>fWI-6Lk|`CB&q!FTC%pkw(#ZxV~`93wujC`N7%PX{#$4d|MW zH*kU=GN{@=ELdd8n7L4gZ;48CJ4)S=w8QB_tr(MCQkr51K?~}YvRxMhAb2P+r5qzk z2gEBB=&dFTbztKwSfbS?-?89rPqQ&V30(H1IkBn{@uQFb$e5O^imn=#-_@@xZ1DWo zybs#y(-xiT7CqTR5i3^L3o<1QS!2QeizaNbIj23Cr8pOANjF4C}1omnbx^mAEhjil2jxhqmx^ZT~2AEh|GYDr2##n)~hDNX1e~|zcTi6vCi@ChM zUKIDtp34btXyCN?YIL)ly$M>H`s6EqHJFEjT6|qQ=PVYV4NjJG&^v*;`t$zIER#J> zv?EV2>7r^JzDf9y;B;qlPx))iW6a~No>jaWQU&_en_4TwRb9d)X6Lv%j`H1 zBy%h?uaC+x>upH}$*NthW^h$xtJj1G?W&1`JOhO2$P6SXU{!a|TB{**xlDp?1l|`) zW?i2=g-Ll-YBCerYfL-50{q?2jd~pV6Wcw~WF)k7%Gsi>09j_(#ss|=DTGOrwwVsR zEc4hQ@8*bwi0X+2D;q@5t+PcTMk!2LgTiOdukUUxBMd{SOK9Lhn>t3o-n0qX-M}`T}`ZULRCbcubyl5Dz-|&tW z|CCLiReAA?!22LC`!a91uv{w6#TjLG*~>0q%P<@R)30wz{q@TQ;NVa{T$&G1!r>SuHqW#x_2AUqM3#uf2^VZ*9S#W zUp?UCyPEOIjiVAOZ>Onxyno%$=q&z0DxgQ66B@bj6auN6;bwsc0KW(&ir>ME@wz4; zW@S!47{m_EAehr){eAXHFt`SpKaACqz$-0`R_?mUcnVtm7>Xv<1keI2z4Mei&fqPqxZ+?^NO|q&i_h3 z(ovWybvi2aQCU6KYjBL%o_4P@^24I37I6PxS3AagY>odjmKYl9mxE4dXt|bx!`idD z08g%O##H{K(@Y%DZvxoYy-wMU(jBnppW%nh6j3ovLdp4y@{Jx9sz7x5ospS<&%V52B$RC}7e`;+ z$a^Q38NEphLeej!x4?`_x+*$)GeR!HS_dYZoW)0Yb0ziFXzJcMf(<*_30_Sj0qt4w z1!uT0SFN59mfT$?7)z4``l$>&1ucGzL_Bc7ru~{eF?en{krJQI1U@2V-T(rq1jr!W z^)F!bqzSpaSv2M;oeczK&}zXQYtAGdiBou-G%ODE%JJcW@(_e_Dz^-!O)1;;%GQvrcjed99v%xWd4~Js-d}Ii3A0Yj6sHimNSGT79pE@tRT&Sc`0+|-7 z&jB|dO&QGUV{x2{CxSFEvb|1ErN(TDfls^Wf)KZgV@y=M^snrA{;=~dh zHq==_zyqxVjxNhmUN+h#hm-#v-c~9`+dc8Z2{CB~o1nL8VQ0eUEuknk8L(zXdUm}ekfJGP$MlE%`=f}|8f{A;A2^=L%0gOG`r+TVo^RY zB&KVp0*Dl)-#NI;r_zLpeWk?tk_1nFbqkjt0`6O0>8vb`6@o}7&e{-$UFjW}e)`w% zi4%&FrAGzmrR^{VxQ-#;PbU~6P?G=(!r{C`YBwFK7#NHS5}F#Q5QI=)n_PXmM#E3- zMEab8mK0?!Fs-4cXb{+jX!Jo-3TG6_VRg`OK$APuh%*(Lb@ig7LEJjnK{M2oNOab~ zU)~Zwm3;bi0805@V2oe(3MY)27QeKe337LIsPQ7^S`VicDXWf$YG3qV$=4@bopNvB zRFZW)L~SDqKYA9%z>LC~_pV}%vh~b>Dci&^Vt@ciLqs|PeHV7euJAzf3QMaj>ET($ z9+VUr!8!gq1AM;{TSa9}#$Ln#1vJDD)DT=~&G_Xns^>QZtbdC!c)N7R5hX4WE3$r# zJ;#r<{)Di_8uaIhC{;*JiJp4tk4#saCsHy|0YIBcCV4rTj4OR1~O%*MVhe zi##aM46;cR))#KbiM5QLWfub$!?$+2WoSNVv+On*1B67(AYW4R0%2>_f5P^>1YXE= zMIEC3zfouXGpn$frMs1(4ZHLNm1;mskf&kP|CNS*f%X?}3(33+|5&@X0Klre7{2lo zc_Q7AWo=nk{UA7mMvZGEVCj@u2c&d=q?w?~?Tf{wr1EK@nFtCPd{cZ*hb26^$2SKR zvZjJ4Zn$hBjqzVeiz7(h#f*z&(^h}rjasfx%M!1D6qQaB3AXE4i_U=LEoymBVN^~i zjIC4Ux~!<-Epce{ByM0Uy4CUG&QKYF{U!+&*wS)Pgah=>@d!aQJtP@reIZrGVmp|3 zS&$Mx0eQ?<7R!O_c1hYp6{Rm_05C2^Za_gx zL?W232ze6y#pPJ}riTWnZ4yEL>d5uYrxi@C*nP-p{_^tmc@R;g%;nBDmGQb-IcpZ# zRI-8-6U&RgMk6zS{-=?C0rN_7dF?R0Z+nJHBl#8+#}x{gRP_p7+*egY2E$M7@Fhib zK6uvQ!iz|IwxQ_;rBYOhFxtJc4&0%z)}qqeUH1xhmC=YdNZ&>}IMSl<{M5$jB=HGY zXGU6#;Fa7)%Oxat0yOsF0j7Y_vPcW?O70_OjN*E>|7N*M@{NRCRP0$~fxj;!wNzkB zukD~?*<7^JAH$C5mefZc&x?OD%$wJT*VkT-($I)y^m2ca?WF8A(pi*CQWE?CbXjYM z{ItxH2M@Wc57)9J$EVtD?E5602~0c$$63U1Iwcll1|dAS5YUzvZVSo03k1?ksZbjO zI5wHWi?iLK;3MK}c)ktVCpqr_308|@+UK4xKMaJgtanTivx_-rRo_ilg;%Z|Qa#p*;)j(Onxu;SM9Tz(pyh&lXF4I@qegl3NyCHLbeic1fHEhK% z=^{A@d3mV)k6z=^8L|#2ex*|_Z#RxAVH62sVK-ow_v`#)C9&*Rdn=ZjL>q%}Ic+vF z9Jrf{lwJ$5K+I>QMQ$x3TBM{^gTE-7nE3Jqgu(qk zO&`yUR3INjA@GX}SkTbH1q7d(n8ewuudrXs>GI3~)y@|Y;F$($0>r5mRG0^l>Fb0# z&*(!E7a%0ySV{qObX|HrU^Q)f!~kaD z0ic{)J#6_wX=T~4m=~?1O_}NM0*zMRkouuPseo|_>0E5Nr6wPM0CJJCUy}#0Y!?cL zHzn57c&!X`1%ga;k(@oyX6JMnDoGq4ks%$LXRO~4n1YWDry8XYZ9%rb7SQ7(B5ib-cy#3am9*j{4}jzH2Oi(>u})6@JOTBj;AS^*jOkw5sp9S3 zzJ4scuI__g+FIsmdBeM1QTc(Qi%g5ALbI}9Y1yp4nQ)-h23r(+WT>bQ@m|m%*(d=J zy05ltg{wFmjZd)w2ptg|Z|I*pX!ur;2_0EM6CpLjsB*WQBxS|3F3y@I03D4@K^&`Eof0i6JZ)2WhKFvS!X znHmW!{mXPNOP^;aM?v&wugUm@d?J@v zOa84nN-ag)-Fv|Zp)BKR3N@Udl9HJRpG18CTSk{u2>(#|uMm#r!R@UA))u;Bn{R-& zu*AcDB@k@W%`C~jf5!-`)49v(M#m^A;>w)aBU=YS_YaKZq+QX{N(O=srDTxvR;b7XnVy*i@RzBId$u~I2R!Y4qEo0)PBu!HMesm3~wjDusBNl%8 z#F6OeK+Ve|L6mitdJoBGPX-i_jZ$Iezi8qXG%@?6%Lo2*NP)0qv;Ot5x*vUQ&W4`| z9wmrYM3mk=t5BzAil8`3;^Sd&DEGOgRzzRi^=*9q8FR77QLQ1MzH^A;HtH_V`V1~g z5S@61;Ydi>9F6CXfp9#F+^$kS3m54A;iShALuqn#C;SW7oo8JTM~)_H;2#QRi-B>D zkRZ{aiSSluchG0W$X{1V5@b;WojS-(T^;6Y*jLY@wa~*#(7EYuBmao$=ZSQ2vp%sH zIH?#1#!~ITSY$^!F$8Exk$@6gnu`MV(7A`X7G__)x|zMJ zrKwm=1mvAlKqWwGm=y)_vk0(H<47tG|EaQgBJgz#m%C~%aHAMMj{*3NFTg|rknv;# zWHfGB2=Py~R+Vt)Gd%Zb1LOL;_ vv=O5(1V_TRD9jI4S}{P7j!LljUn$>e5^$}jYQs4iacBp}00000g2E9r literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/resourceowners/email/confirmemail.webp b/static/images/auditor/10.8/access/reviews/resourceowners/email/confirmemail.webp new file mode 100644 index 0000000000000000000000000000000000000000..e5800b4d388870ad810257adf47173d8c52185d5 GIT binary patch literal 15106 zcmZX)Q;;r9ur1iV+qP}nwtKg2?zU~)wr$(CZQFK#^Ph9$#!STI(~63G$jVx|s-sJ}LjXaSz`uD*cKLgZ_;!Ae07t$tK){#(2heZY z&(TWJF9!hdp%2uz?6=_ucmw)X|5*Y6n%{osj1eC4zW74=M*MDGfB*-Vz<|42zjDAt zAMW?)uj)78bMC6_1z|(L(hubW;<7JAf4iqg!1~c?V(*v_{Fm%S`_6A2Fy=S$yKx=& zEf4nd>IZiT^Pcx`cO$UX=jJzVpMRaV3Rv`|{RZ|7depz$Tk~rL%=~_w6Mfme-fhh} z^ilqn{S-Z=eb=o+Jmekk?F)4HJ^*Y1|Jg;|<1Z?KIzRwG@L6|4u#WJUcb<0wXaf`h zhJLF4$748eTVTu22VnfgcYXJGcjI^0*X36RIQX>!0QM;!=1%u61v&unfURG@|Gf7) z_W-}!0v3RmuT0-sz|A)R@XIgBvH$#Uelw}R!t~p63_;umu7VdjRe!YF{{JqIS1xIu z<6-6v%0SihD0{ZiY~Eis>-u%PnW(uY5AB-yYhmys8Z*XZH;zv>asjtBj@oHA5Pmn@ zE!;g8L|t##n-6~q9}hI<<&`3lA0=W`6~AdKg?hgu$|&9=#;{w*dF~(~L%@gJqW?pr zfeM1f{HSIxzNgmo!)_Q_$PzKjC-{M&^cCY?k130r(XdFnpt@Y#tK-H|G3HWIUMcC* z4jG;+p0A4~Ml}8NN<@9P$EP@6c!mFi51_{Evys6xFaZK@#PpeaA1-a)Ur3GyJ}Yg@ zkA-&;a-5I>NnZyE@RV;l#>)6-=?rK14>;tE<|Q;|-UOcGF1R8`QuTmZBeNjtb-5wV zH_i_y+zbitNSuKT(}d@v>O;@?1k?89#V7682=|?_S>PP}8dvl0>q+vfD%aHEXjxYE z(;XE91XS=v!9tTwUVnMr-in&~?STz9_6$ts{9Jk-Um?HBVf|z8%331l4z^3Sc+y#* zj*Y|K7byfsDoS5P`zVd8vXwhWGW1yA6;7S%nZrjH_&4sQuyjE(;D~QD@~-)(7^{5IuE1i zZRgA+5G=O)0a8I6Scd25D|_p3TIZv}7cM(=^&8wUE!38xvK$+sFv4hZf^b~VsgBZ? zM4D&ZKTGvmw>99-1fn`ck2aVzlW;Vlqno+y?dv8aC48)+ z;t~~zsTbvOt`hi#2!9DgeP1wZLaWX$Veq8$$9`>U?IAWlC9&Tr!cO9R<5%h?+jcnq zLqm1`qQOkQo2h1|MY|W1YdZ?~QTDkz@2|2fa(Vu~cHMoO-LgKQ746$2j zYq(Am#qVRCc!>0*VI!ri@RG4<9rM4b7`ZeWRQ_R^P)5}iDDt`T_OV9z@sFRyBtCVpBZNBzSELe75{w*?3>Xqx*a+ zNTx)AHb1f>jq^+SFY}Z@zjMG9Zz3pwew@8`u5WuFAo>cUvm$%c+OW%p7&z*NNI$={ z++qR@v6K`mik`#pBt$+a{`x2?^m;M!{_VJ=6G_V%ng)I)g~WYY>{{FvTog`L`b_i? z8Zv6)e<6g@x!FjS&_q=}N17)fL=^!{A6apLEw=f5;}_qaTFf1pB8LgYn7JKAY@Uqw ztXV5A66pC3d9^qP+JAfmV^Ua~vVS8{mwEewu&}#ZI8=vOw-W7Vur*oBQ1iY%hLk-- z6~g&~Y0BT(1Lcu|YCn5qG8@@aLN1qf^!p7LTK47bfNCN;hC){Iw51zKrzF;gnk{Xs1J6SCkm~c2djJWD*)2ixugMxcCb7; zN*30?3cSPU4S=pJJr=lLIV^O%x_?4yzWW?ZGesibHrJY#c%G~;j?4;RD zX_q`0O%|-+pak3;d!xnN){m;}#QjJV0=FH;7@r0Uc~gt%oI92{BR8&3O}j1VjGFi+ zR#GFEBp2isH$zB-nO|0K@?BbPn#J_|1bys*tpG3`3PDL)?1i!&Zli>?D8Z!0*|X0r zg$a9!3NS7qdifGla(omFUjMe2F1W+RC8eYdq&I)A1Lb4&Vu&o*Bb!Y}U8y*eW<@cy zt^HI)t|MW2Jlg)Hjf-y?b!j}_`EY_SIg^sJ*xplu{jU$ktNwH2q>($g^xH^l%^&0} z@u%)Z7A-+Jh2ig)ldWLyJc)-%m<*aVyCWh?)RpVJIt+hre-Dxaz5FZB-HC_bM1r@O zvMl3n(l+_(3kVM}Xc86q_$+P)$WEbn9HAQxvBSgRg9{!E-0$bm=KOwL zY*~vTE+ORr$Z?E<9MzkB{0su#LZS7VugEdZOZ8!m%{OpUbUa2uKWdTX9`#Ro?k+M0 zM!6xwIF7iSUxSweMI6x~D2v=_`S!p{n<*}S(u!dk(fvRro}DQYfd%gluTsHxwFJ63 zA*Q(P4kgEM3bA2_Z`+d&ki@^AgNYq!2ZFB;2q)BMI7^=lF{iko$-1jKr>e8LBWejQLf8xf4S1xYf>SpDh|q3;z=Y>}JkFh8>cXdN-B0nlF~ zP$omN$WCbK&7j4OE5*~+4`Ny(%;-*AJuX?5(p<1M5QMhOt>f_eU?b*>4)@Iu_fNIk zbvB_%D?f=sEEyvI-Y^-!Nk0|L9{#4H#MK8=6l_R(>%7OucBRx#k{!B5nG5jHK_RUP zzeB)Gl=LT=gaq+BF%Ff;h``d#syN|L9n#ZyUHE6!+5@>&&h`@Wt5+QdD*7D|H_}&E z%#-v91zeEs>ZJLmTE29#=CUz=lv6Ni1Z^>lzH{vQYErmXI2X3<-4MmU@uCUd3**6N zJhqOEocelo_3_O}P50B~rtMzD2_s?I1)UCx^-Uqw^>3~5`033FEQ1R_rXr>bCRf>5 zV!=R2p#SWT+;C~dIJILtmDW~b=BXE{*WNn#J<+3Q4z9J#_+9I7F+#~IP~*nF-JENH zq=W^pf}Qig`1VBOC#}hP)LRkSXcjir@cwsx&%(ppA>S@Rob*q_b<7*tik`7F&A)ryq#Ci}0#C+pFpk549 z(9)b8eG;bsN0rXd0)|q<^)rSpJpR?4VUElE4S{vq)!sZf(DP$R`-k+pWORXYJUl_| zd7z0?Z7NK#6d2Ez+B+>Um>(Pr8}E~;sFQ3QEM54g978G2gaQ?A=G7~}+waPDl_e#} zubF$I(f-GkcF5k9BL36oka8+v6&QQbgYxNGpccT;Cr zl-@Q#S%Kz1!Es(kr|ixaTPOvz2_HLzSY>iDCh@oEyaXRV2wi=)TMgMN48{rf+H^!h z=H<%%ytp@sMFSnEN=)MvqNr>gvPuWD5i?n9~!0|X)@(F#ON3oduWGZ{5 zcqGh2X4T~+`AL?=tj$Tk{6%A$r21$7dQel*HQj+U=Y7l+6)G4Rbv;Ai5vK&D^#n|2 zvzv_vjs3k`0wlH~RQ~t3v{Dph`yXcMIx46Dal9z$<#eJTSSM?l<41;0t)gk+#zQYmZuk#cx_Vep5!R3LY@>_BWi& ze8b=7Y#U19$psZBIbcG8<2XVVE+66ru1tV`h<+9%=c+g&XGUg|vdh-Rf0F0$60|<`1zCoh5@UB*Mr;4 z>SH}umi|b%Ly@`j!AcIqd0f!=od-%wkM^6#@|xPuh3Eug#@8oqX4*ci{CxXpA4b#OB|>6>rEfb3aoH=^bl zI?B6XCNC8rzk6WzsEv|H|JtOf=WdXvb)UV+i0q?8c#E)xUnIfPP&Sko26_bxX6S4H2NM9y7M2oK2z3y>?zPuF$y=8u$*QpRe zep7)<-#dG%J!DpbQk=P!h87c)xJkdijdPf922X8+R9^SRR64-X0=h>R8hwT3g34(; z{k8Lf2cM1cs@4axIrIaRwAXFcjrPn-T(Gt-$e*u`95p$*9Z~ADF6r2&r%{7k#!k~E zdHG=#i9){do~mCEqF2S>zMr9MU~9W2VJP7NLt&I477im`l62A|3h3N^nk2E794Fzv zm)VskOGU z&B+no;PQmcm`O9?^0<)CZi_iF@ILXC3H!Qasc?3;_DBfRPMgow)vGLEyM!KOcqPfv zOOS(F!Tw>QL=sPt&q)Jl6zk_tRKqbF2598lxU!xhBj-=)A%Q!p?)ix0wn~AO5$@Pj z+&|7pqhHoCzs^)g#E^1`78yWA4#a=@f05tGVV>ZWEfS6|&sTW2= zbNOgl>81pBZL8_R1evl9iI%Q)MPV$L&_UQtDTHuB?@Tt-BQ?BMQ{~pd@kCIDiGzQ0 zB9Qc6yNd$v-&Yr!GqJWqT^IEqJ_xeGPdB?wqf6Vh;r&ZJWszFSj)8@MFqSK3wP;j% zf?n@wZdZ{fpIHtA;K*~$xmzHwz=<4rE}6WN55$BV4)IHRhbj1DY^*d%s%XKYs`jC`hKs1|kRH4Kz!lT)!03gEX!-Jk zSjN*-npOcc{M&=mu5&6{yfxZ zt72CDXqZrLc^wov1@>T83UGoQeGSj@d_X_|=L4;rGPTTQwV0VF!r0tY5Id2M6Baor zRCSq1T3uA(Z>Cd4B%LD2KtrS5#sIOf?5?sM{jnLGO-cQSTYmNSlH9cXGKETxH*&2> z3l?hZSgPzF@8aV<*kc6vO@^r{|4XZgJU*)Gbfw`-T|3L0G zK>EWzpb_O|ZA8ph)$ThLydo}9K zAH#`X$X=&k34Ia%wUQjKAnSO7iMjM^*Lmo=yWbVqgXCqZ$uMjIAEwg0_y>WS<@%xlOQ;-rX3vQD5 za(A$QX$nv3r)tYU$XaC1s*CMWTsIWg8cyy;kyCI+JSfwiQ!yVfv(t>HbrlbGC-2>I zuX^VpKC?E(ovI01QyFdUg~{$~2NSgCuzP$P0qbXYv{yuiQm=!~mvM#U>fgVCkC>eI z2I5qhS8Y_te=aws&}t9wt8-Pu6s4deAg6S5L?66pJ2Y?9Hn ztoM40K4~2xVItgG6W?1#EPuPB#n3thUfJSC>3s03A!B(Ezr*h6Gi%x<)XkpmlTaMn zzDy46aq6kVsWLe8QI1y8@!99vl`iBL!H!REiRgQus80qonfesB&k8?}aqv52?m*)s zpdW2M5hR>^Yh2ZIs9hZACy2U#~M2Bqtl4?h1FZ zln2kzo%;rk?@pH5Qi2lX{p^Y$xpZuTaYt?v2y~MC(ZViz-XQIcG~y^ZcBwTav4dc$ zyjKlS!$rE_dd<^?-VX*Vzl10aGv27J&3^k^g7>+%=*wn_Ksje3xa4`X9nUEve5{o zMhMETTGq|P!C=D-!%e^(6fhDxsJ|?RAZWfUr3f1_a|ZLPHUefD?{!Bw!0Uh3E&}My zLM|j=snhx`bw2>h1;6VyW2>QUw7f|ea#Azo3rA=3;Aa+1_eDY~?00iaBD+G9n(L@) zXlj;!Z;Jb$?sb-jC;b7pQ5gv{mc08D<$HjU`JXwlKPiCP{;xwuEm7ay{OUnQt8l|G z+h`yxxEz^kMrK+v5XOJ11i_$xs1}k071S0D$oFfp5GUQDmL0{ge38AdSgH`+OVOU` zuV2O^>4&{Rz@)xDC!4CeFtSrpA{OvyLF6Qz8KX(wCj?t!fDLMkAoOPG(pXqo*dWCxTvM;FwFFlBy)BMunh!HzQM{8OVLeJ+q~`aR6;@j zR5S0|*LAE@8Ll9V#!i6z5U7nDBzvNx!b~1(?KS3xM-;aVtYqAI$!<1|sp!a46U#>J`(8O>egBR9G?v0D+D z2R0HMxjAi>qd{&_UQfQ}S*9$$yrT~i))g(y=}B5s$x;&BmP4c|C}*w$8UM5tKLz#| zi2P%`Nof=yoBPQxFGsR-X6UTuem8UD)!%A6+j;aPO#1jM49`}z%$NGzFGkQMi(i$A zoqU@^yU_`>3+RXqLTtapV><>!y7LJ<$GSLC@B>QJ3-fHi?+EIzh)<{;B(3}Q)+T;M zN=*b#z&mub;D0xtX)13~xJ55OHwZs^kPnvAo=}xei8f84hNv%{K8{3M(iF0#txCX& z(x>@)8(xkgs%aCU57mW`Z)VMX7MJ$hE_oR4|BXv+P$%}0Grdm$!B~Eub+?+>qcXFY zm-E=f0EjB4`ruGuA)sy+2ncl9IppyDy%u$Q0fZv;;@2<_51}FSzN&vQ<+kjfVf&w- zWXX;^N3PDE$?DlD&oD9N>nFsoKL>QNm4W<9M`iSKmyg2HPJLj_Eo zD=`X@n3op|p~~!2-6b!h!4NanuhC&XDVt;pM%`_jnrmDR`?thH1m?|qjgv_}R%IuZ zlde-X*CW*JIT>Y7vmRR?0|+rpYMrplCIm-2x6By9<5q!2@3DRQJ5kdlLCrK=$Csz^ zkqrq|5%Ca9v4TtKd9gK<8=EBRZ7<_4*$0iuim9I$HL~Qe|B|O&7Tks5mBbG8FK!pm z9$=YvHF600RO;eU`O0g5zB2X(Qc+}Ztx9o?SdmU$Xq93|(yBRq1i4dOl(Gq5>QxzA z{i`V{EMu*WC`;c1hGgvVC(8g$;<&ZIPU$d%Ip@b#Z2k{tTrq(c|voGKVr$Ghkq`LW$2}p{sX|# zmc#IyJtFf05qQ4g@WQgE#v*`{dSx|zS^Sc;at&F0{K%TJ7pvSm!i5`O*`0j ze|;{~w$CsEC$}iI5e2d+rRl>Ceh${Y|7g0YY7O+KB%sx|xliGRP|q)Shhn?e;TUrW zLQp;3T`O5bEWqD_mv4X>^DO=x%M!I%+Z5+lnxAvYlgE~$;&+}>E0#4cX0_M^ zqfp-YkNxvB49V>Kjevge#-!V0KBkR_7qh239sR)Xk-l{JlVf`{5q;A=BWJAl9YgsC z8e6QZZf3r>s5?rkdr53Bwn^VwLv#wtAM*~U6!2h@-3M6E&^Qhbk_w3YFix#j{T2#f zd2-VgUr`}$a|a;u2HqQBEm(oy@GnlV!kT<1ALz&MdJ}b}sCsFfE}N_f=8kZ zIahApN4EmmJ*KPM&4VU<;LB^pbZ;8EcBGAty+itv%LwhEK7>o=)dgkho!;u~&;spG z1ewPQ4A#9({%heHd7Yd2m|>U~GftMlI_)EEmhtR6Sm3giz-Gb+Llx^|j?B?9YDhF< zt4m%33xR|0#ueM(0nSF9{z8I%1+2SCaQ^TrmN2O3n4ea9H)QA+cIgc!{ceRMu*=r# z&v#r;&x`Rg;N}U6i1S8aWCt})z76fn%ZH50yvmNdY9xY8_P^SR7jO*+r`AR3H{u40 z%~nbgnWSuAt#7lvtnZ{YkKa<_Y!={jql*rGgpigOPjuKTn*k(8DO7UsAKMMF{9{XJSo!omg4sY1D`#D{1*T zBSibXkjj*SpfQDdM1*mCi|IB6+?GaQg@#oh4^Ug1n>vqmVM%3RhcCbTR z>hg>l#M49c`vUw>#W6Ib@oyOyznE%I+rU@=~iTqJ=yn(bqxu+l9v zF)4V9eG#*3=p&~zAQ&L(cHo*lRT1P6VBMYvW%i~=qe2SaD6HMoB`57avR2pdCeMMR-QyR19odlY74&mkhNKWy>0-~ekjTk4;<^4xx~ zJ?(jxJa;JkWLpmu? zdTRwJc%i8INL#F5vTNA5p!ItZvwQEMcNjVFn~53jO1{$ z+FPvi3~MRh*6@U5C>{>D`imz7F#|>n&k37-(OeH-_RAd?J#P_1BOV`?|BW6`-IXcx zR6?LZQe;}wMB&lLxWJuNypla;nbl8Np~JLnuS6kB6e|UJSk}2>+*88iVRxX=ow=0c zTL!1F@Mf#(iM&g+5nr;2x--7rmpmWnzeCz&mAvOzinKS0eF9gSeJN&C$EuH(j0k7^ zNn;M*qxs>AQ$NzA9~nan7K+~G>{|SnS79SE5@$NQD>(FqFwGpq2esZ)-pb?Z>s_`5 zcOPVNotRLaFKFDCpyeMGu!C$by-;(5@ykDA7iG)FkEeZ2iHOz98Af>r`N71*1Qs`B>-!ZqwfTHSvUu1D zW58%k#ueRz1spmJV02kznH-~3MS8&iC)`V$=u4Rf8Oq0B>uU|IiP`h;dh$W_-1#yW z)%!(3Yk6bVBG#qI#S722`0guC*cep8By>bda5Yh}Dx8;Fv9BI|c3!{3Y>;r^p+-4J zi5y3`r@K}}_?M-&^FWGpqPJ#l4Z|VLJ&&z;1FYNkEaE2>_d3zc?33ng3bZF%3S*yix>qRUo9e5SDDayj~jZ&C59vnGB{6R~bkuvX^Z zJ-v(rW4mMDMLFMjMBvo)xpaZraSTs>1D6k$ac{g$xWua`c(WJduMa3qAL8xz4IVd) zxxTR)HxWGR8BqHxOmi zDsT+x{b%kotVy_rZp$u9qIR;LJqVaAvHySG&Jei>VAbtS>kM&T>3n|<9<^=1X%m-_ zgzKGYJHQv>9119Djh+03kPPC?FNur1PjK5LAXTX*Fe3Wr4%%S2=nx4*|c`rvaOaLbt>U#57~e*?s6rEX#8t8kW^j10+jd}W{>1? z?N(w`P%1CuhsGHq3hFz8!vQglrMfbUa|uw`S?AgsI!1Lggu$7ARXG`l$8Fi)U44`i z11Y+Og&RJIMM01(YNS1EQY&8O&XI~lXosdcrD!C`0tuZV} z#&HyFmz3F<{&9I8CcKWVm2Msnv(Yl`A2avt>yPna-e32h^_XVrb@6d0sPH*V8RAp@ zhLe*uYe^8C@!VVkl$JK+_YWDy`tU}}tScfaDd7|gf@ZDMfGR5*N36cT=X~>-M)$j& z-1abRV63|pGu;vqRw#c)3zz-N8GT7YNF2QHQjlPY>+*nIKphfg+>w#X`>gA#XSK%H z{ph;l<<2j$5;`L5ebrWsOY^M7H8NeksQ4{j^{%nZ>d3(3E zKZrn#Ya*B;KbdwfYPZsP!Pa86ji>mhndUdK{_@G8;-4J*8pysNXFo%ncM3EBOzfH7 ztB;bRm8;DfdTqemHW{Xx;pt53)l_>Ct{pox-n`ZX;U9I9$;pmL=P=er&hAAa?IxUI zy*&h!jIQK#F>>3`LdIH=e@rQO3;xEAe;qr$TWK&l`rZF}$ELnD9T5K;BP;ysjcT*) zL=`tNTKN5n*l<83_MJe5D7>$(^52gYOBpTn@8<8kE<}A&pYcGtv#0dmZ2uzGG0;fb zglLmKgAE^%J0N^aWFXp{M@aiJrbj;tCgh zHij(v4Wf2ccaYm(hQaH+;4A#IIc;m|>;zGwsYc!g9Y@RpRbH&S62n zCFR`GJls(k6DeVBO?BS61ijiyo$)w-c?Btkzp=UsCpqp^B7U@aY;|5n13}rj`+1ny zE%a|nY078ZvN;jgxuUy*+Cd|&-Vb(}kOKG=)~g`g-wFSea=r!F156$TFfb)s>mrzc z3p@X}H3zHj_)LSR{$C8_^cxRYch-nKbPd`&UpA=C)cr|{72iZY2Lu_F475d8D-u<` zG7-$9D(Hu>FViZ4xDgqK@H^i6CF_SCm@+Mfil^_lY#~&$oH?Df;ZS=p+>^l3wmp;@ z!zsricnZkFjGGd5o`AeB%pJ-PgknJKWma^^LUQ56^)nmeDFMqG9+Y;;GUCC;vp){z zmWezA9dXRM0fpU?(v6sr_%&$^i+kudv;4J?6c7a$_GZn~%v+uMZP+0y8$C~E=p+jo zz_~q4bsjowF}!O+rVPs-(05OKOimknSbV5cXhIPNa!2CC_>~GcssBv)`p^(b-f^$N ziF7(CR}K}&!nQ2k>mGixG#DL6nvjG%<#POobg8MhM`>lojATpShlV;;6^Vl8xxaCF z!Il8+5z;B$kKZ7(c(}ikmobM1l|n_C>%%R!ef3@66sH0;djN633_ zcIKbVC8JUTG?b(23x)UQp*!d$!w#X`stp<(y9{NOk_oYO$|WqhU$O=lnfY#W6b|bf z20nnq_EL2Uqu4@Wl-A>|oGDXutEuivF72O>)l$LZNf0}>M?WuAbM5Uw+S_ORcVZXT z9)*OXE3dKx68n>$x+w$FKPz~)B;9^(gpqC{C3Vy5!yY0wG?%(op3*PDYU=j@ZNoSM z6n773$`T!_0BAjrl^#IL9ls;^FyUGD4b8VDRkGQD8Fhfh8}&g`5pRY$KObr1xJ_XW zmfz-3^od>@U!^~)#L9G?p}$h=ClH!glqs{(X$ ze=BT<_pd48AUGyUlve5$&ZWp{u_cPuyrgFxZx@zlP)?uH&ul4~cG>oQHznncp7SQ< z`r_%M9n=6+um;xnU#vp{bom?ITNv4FlPAjaWy+WIpjBD}y9nVf1Bg~Ya-omo$xa+A1`rw&0aI)ynQ=Ud(O#8|hc)SN!Y zW+!Sz9Wfd|VWpGJyaE;=ywwCxBjJDa;z?wn@Pd;HwB1J<2eqf1oZyffnJmT$q*Mu7 z@YIRv`x7U}TC+O)Z8tQpcc)fLLr)!%03&C20$^%L7!>FtstsYqpMoS;G36CM_w(pYp!q=}qe>dF~dx97m7xBIS;TX-Og-{q`eL7^@SX+K0PpeIP zEPQQ4Wf@&vNUTew#$dp(pfh5au{QB=Neh;kV-ZT9M3Yd%B{oU>y%&aZogH$GB{{Y; z|1oupz8h5nLMPXipi&fwoJWcqEUs7B{D2LuQcI9?pnVNYMHO4BGq^=b-P@>&!?~Ph zwTSNnSO}`6%55nWV)#9#Yp9j78wZJw?xulD(orU0Vb7Vo}!D@74O)s2u0C zKcIL2c0!wn!Zu!uO#uWqdu#KGd$;G;?Cf6?*$XC>Jic(ih4%`YdelQ#p0wGMB$(f` zLBWah08tb~#nLAku6bL8S#Ja?I4n0Mz749?_7P ze)vF8!E6~T`StgLPDx})wtkR)mV>VNPae-d!KZvb6C;lM8EPcvSlE0m-0ujolaPa2kZ1yIJ1v!WYk<40KZoPR9I0HfkyepJ{-~k%IoH;Ow*)`8EcgOfx zPeAk-D%$t(0-*esPS871BP2~Ve?Z}1K(6U00oqo2OBAqefnsHi!k|2R z(e~326e-xRRtL`Of9;=Y#Lvn+#_(gF?|-gGMHfG+-gLrW3I^!6AKzN8}#!1Ahd|ow+r0JhzeD_Xq{2qcqWr` zTN3>)?QPmX@%B{HvR404aeMoo)3jxYUdsGqoz=R{wz6Z=H$^L_T~jzud`PurXZg5N zh4O=%4)2_h(S zaR8&Jlqu}V^Tw7%jw%XlmEvez*T&LtxtUe zRoFN4U(76){-D4efXroq5!IZ&a=PI*Oaasj59mdkS^%3>a8 z7Qr1^mC=YKQ|8B%;Y;~eUH<4>fA6`lh$ zS^;zulubCYRrGG~eHa{wYS*&vN4iv^?t32R z`w2Lb{MTOF_*h)KfsHo7*c=i8v<|0Qwn;q$Pjo~;>gsa@L4aQk|CkQz)W6ETyQW6{LA$QjE^RsI5G zeI`aoThbZ~p*hp*17S%#8tiMN&P})5m$AsH`0A+PGdctWH4Hs6Wg#?ks$W;=>a8>h zZeBvrNG(5n-nRI!?Za-Rw+MA%CC3hCd`!^rK-qU}RS|S2^Y9oWYGh=OBaTQZZMcAV zRwh}*dEj4tgR;c;ET=9X%Kou>uib5PWaki)cQS2f{?Qrnz;P$%md1&Cyf#}C4JJpA zVx-`4hU1evc!{tLZ-vcq8u1RLjoE^=aYjECtq%uO;8BMbyM8&`Z)yUXl6uzKcPvEi zv@TC}ua%XgewEz{2RxNbpVL$hr~;Tx3~+Qa(M^`Pg?)SYf!PhT=$A(O=7fqd{|G_? zUz9hh4jcL;2Sy^vw*pHNAVqSD1i$Vp{Wk;$d=eh&IK>Fg`-VLIp0*D2~}8ae-_Dzu37!v5;fYeJU!Y! z7I*myU@26Wnc3TN8|~0=rV`)N&J#~zKl_b>Ii#6o4b6{a}{sAVa-Th(rd7nsP5QZ9uBd#AVXwpL^&q+0tvo9!nABj;n8)6n>EyFlN=#2 zj9533mNTOm>kQYk(Y|K>fS?dL#khV5?Pi;K3pp2)yna$zcT;Y?ECO*v$M!AA%lV}X z#=mSDL9sw%@Z2VWrFSwYQPZ;1p_wLW zD(u1%EEc<2+Ai+P3&7OV1v@_&YlQ1BlltzY0Sy&OSDyE-kRnOq&EA-N`poO|MXt3^ z!I5B`^;{TS6+E*jQ$l1Sup>w~vMz*m>_w*2^VV4#3xImyKp;l&Ayop7Xfyhzl95-H6{xI z@bRFOb+j(-@XdKwhKLElOyC(=`<5U?0a(*ZcgJcxb^7wmwbKrS$^wh*)|?BOu$$WqxDWkCY%V@R;+*t!T_%Q8EWA0G7%`kpSpKXbMCtzc^~~qPed96sdA3t`0FX6@tn`uR8VZyvaJ1%WtSMo=a~WJyHjnbto4 zB54;5tXk#y1E2VRi5)b0g{Q`sqYX>ts~gbk2u3Mih8KvYsb+P8uE*GQ)z`i5OtYsYZ)K`q_;c!QmM#{(Nx>_(}_K=Jzl z%=npvnJZMHn9kZJmX=zW(<~alfct5qHrNrSx~c*T!vGbY&Y#eX@=4+jLInbzCN?&o){tX+C&!E*@JJn`; z>da^G6JvWD#vQ$-+?v+uBS9R97TWJ~lJMq4r>?{urYPSRx!^2Gjr{wHN$DMoZfCeN%ZSd7MhmF{^v8&Rmg zxAOUZH0yz4TpA&OqK_!rPfykduc0)S)!H_heo%WG*s&7&&BF{yc;vO?b5efcJ98lY z!C$p2)Lfkf$9`xMmCt{-8?tjwxUMci>>sR4zJ1c)kLyrQPegw1mMLKpw|XL56{&qc z-gY9azoM?_WUc`|Zk*R|OH$#linY~>Xsw)o9oJ$#EEg`f71zf#S_V?orj(TmXF(QfWIql*@IT}4 zcOZJFfMvknpchcm^Ul9Iz@5NP&}OeQ@XaUJzXy1Tyg z1mkRrDN3w*q`qbPHiV-pdcSju8G8Bg@0?`ZNmTA0!xzfI^PtG{ePTW9^&20}h+|ZS z^%o`WPkgI(nq@i%q~TuD`=B-ZX%|zBC$cle@^>6rm#x&Ug`-ZoHNk}ku{Qp%h6QEI zLa7bC5w3TThVZ(^cF=<6dpJPtBoNZsNt_~0akB;98-R0j8!5@f6hyz#*XGyZ9KQ`QlTEu-M<);E^EG#KB;(#iaS zEcRtvyJ(&tY-r?KnDZiPcNn-Ca5D~RR~Rho_gYFGx;g~P8tg~F^UwgA-fZV!8&j<- zb66*Jxi>uz>qptN;TQ|143!JkV_`Zvf!cRW?`LbwQlsuSroQl2OC#btW$c)Z)^=v1}qW-ip=pHAs2LOOj?{beuVRRLd1v zJtrYP)-dr~;KWJZg^?a0m~$`NomwW<|JCxO22e;Qe>7(6Qae;h5az^eP_V5=4B|qz{BrLB#A}I z@TLD2^9Ql2TVQvXLATLWH+fz?JfB`6nXaX(iK%J^j&J+4ygN;a>PB|(Hceg!+TZkm zr%IU^WoQph!D6{t?QR)GsAsFLz2m|5$4K{c4hrN(PqgjZpD_Yx7wX9LIZBx&icRAk zr8wZK&qEtqlGX^Xpb7S?_7?K8;H__2G*%u)Ez!LTu304gQ~tFGsBs*tc!$SN)6#A- zR$n(L(j#kJyDI-M)=%(u)mbasE&ZNYKslBc9rwL_;usREY0x_%x&1MZ;kkoZgJ}u6 zLjAF2z{|is-xV;`%5l3I$_swwZHvK5r(I}lzWCAa%~%x{t`YPUy;kZ6pJz6WMo=YC ziN1iqw}$mX4M=faW}g~L40D0h)0x=XkkV+1A5#JVDuWS6<`v0&#f-x{@_phBpnzmAmNGaZ+6;>&}|HDV2dTxsF0GTURuc3dbCHyzQ); z)l=>Z>6el^M7V>}$Cf>cO}FjTF6wOt$jAE47L0!q`|q5KAs|5DrFsYm2wu4RRF$E> z?fP^(VfK>5Y6F??N#{8wf8U$~VYh5!Rkx`h7Nl-?^76_MFbta5&NxpT2_FJv`}J!R zrq&4O_PLvYX4>Fa*;k8?^ps(w5mhJ)vuYFsiW{hvdom`3pXJEUL3xWPl$g5A{ph2q zn7P`+DeW{lG;LzY;!h3WztKp;(lOpVH0V7w16{zma z+IH7aotU{Ij1CoQo!f;OTYn;mmdvRE%MX#$BJS6>q@Q1eKya3FW$EhaM*J3kFl8cW zMptG}CVfm3w?u_FzZ&l9P#68mDbI=1#% z(@P;oXVJ;1cnbwhU5bRWE8X>9HYq101}F3UOjOtDJ!xB{PtE*s$UpMX|HR`^mmM4i zY_6l+Eo*W;BzbIGj32X94=@0BTwc>Qwx$UW7Bd2WYN2xyyGpARe4dERW}mV};QL@J z8A1yu7sYJ5LO8V`PfMG~tMyii;6`=c{^ezoCzEJ~itTBJY`}LLRhnGd`MI~!kavI0 zFJeb9N8peB%Fe3%;Mek;>3Lt~x>> z+2?vJ%RBtBm(qP$OlDJJQ}7Y__+j`Zxf@(#-OAy4=^f4C&rDbhk?Rj7W>L_CGroy!f_K=A2Lc zMGFPwf&l0M@nBq%J+FA73GsFpS_J)bM{Xw<2)r5!p7*%zmAafg!m$=bl@NX1_w$1& z%0HDzM+tFVOGfH@3i+@NP>*H!PKgt}QB1+VA3Dc&X-%cmB73)D98YPxETSp2VqF9Y z=GY_{m&(qGPkI!VNyPeL0P?Kpry2?QI)j3*StVAC*eSQV8RSF03*}-!mSUVU%SA%8 z79B}CW>Ck=i;of;6JFj5SkhF+qTy=Etk^lE-H_N!|9wX1v}l+aXd$;N;BPp_Rt9rX zL}4L77qFyGCp#$ZFi^KtA#2xDqJ%@*XioaQNWk{F&VNd9d!{%-FN>G-&t@J8+a4@c3DPnchNBX^AT&Q@w7iV3!W&W_wE8Qks z2tUNeM*Vg@t;|;57`!Z5oAFbA5Qw9vJ3&-5tjLC6d)$Tmr>nukciei2^ILOfFjIKx z9#MqbX>`4qy7rr@Xt^^RdBYSK%j_f&YFSM~J?28$U9g-uDi_qKg2^$un_nkYse z7GD4&qWb!x$@7nA-KdykzZkP(4JB zFVXh4Sy!YGE`FU)wkCK_X=|`0f9CP8$HHu~CAScf+>V#7!0<>*0xxiQBMvR;#ke6M zl&J38GbTO3HeHIS;qZ6UAwreOFCGF=Zu|>!xv1;2h^{P+Af>~ANBkd18=`@O=8J2> z?TAAC_u;1n&M$9SEQ?#Y0=Ntl9phM*YWRi zi}&MO75S6dbqtU{&+}w%reK507NR*P4CYXSAZ;U8wuSlo=`NPmt$f8WQ#PL+NUugy za0V1J#qGmkjlU)4qBp+(l#EqbLULLOLeP}s*n3+a-l%Na;2>UGjfP(%_%vhwV-~k| z5Yi-0Z45Xx&phEBL5fQkMQsbN@vp0iMt0gC7xG@9njs}95qkCAhfU7ZHp}~dX!l0p z%^iR|1Q-$xl!Z<3{MC4fAUegHojcU-jpOZWb3&oKS`EF-a7V$QT!dL`YeOL*|&!<7z|Il*8^<6lc<;ES#+v?cZzbtQO zA1V4tY~&Ymo~aai7*XyTlRdXufDtW?1hKg(am_>uH|Y$%|Hfuo#cL>&IZ zco_`0WP^3+cms?W#z)cnHVGU1-yiBrl-U*C#%5U0cYm0z1Bm}1E{3h<+z&j++PqXG zCNvh)>WH08Vko%2z2!fG*j1K)f@L@6R8Ngss0qVDe9TUgIRXi_UA!uP2%A0vl5NhM zmNqCVlJoDgTEcLj!euo>ZMHXX7HAz;2vw0-d+*8n6nz4IT0Zt=1NS@vIt9~+z_#II zWXns9%;)%56S?_53LI&?p4E&)-KKMV6|zNOc<3sW#As&Dw}o>r9&XZN&ulM7e0%L; zY)@B*+3(6+$KTjq4_8w9-4bT~ot|c>j?qUdnN=z-YkA(x0wonUfO~I=%$Z}bxiW8g z$HmH_A)|`!3KhsRfF$-fOXWB?Fo$jtyN#p{5_*p1q)!qqT7;(unF4S17>;s%KKhrS z{`>LwmU$9|O@=>4Pi>!6gGL>8a&~6BlKsU= z5QP0E#m0}G#qa(bPEbrBe$+<32IB`5i+PBUfES#0ae|*$VRuAdpGF_>nT2{rDv{}m zh)~jl5n;c+)xbS2VyuI0L*jxf?XFSY6LJz}4>fEqyxe|gBANVA%Ug~buVtLo5ZW{$ zu~sEU7LGOk`^Dij&3bE(x+p~S7;g4R7aP>|PWy23y86oh^t;Zv z@KiEV$BMchP3kb3e9Fqz{SN~b?(czL8GBLJ2ZlB=rdyut~w-QwbGPH}x*Qj4~aQ z8*)JKuhIyUm0SlMSJb+*Y8N)h_N$DyuHosnV(y+RtwSIeKmewh@LXjt1_P|79c&;U zAXV8qz*T|A3=-}%&Z$ckY9<5PA_}iuyX7={RbhXGDh=jlG+7DyVRdm!zALkZ;L;b6 zEHD>bW;rC-PSl`z%brAf$g5Y_(? zqA+=DBimgOqmWB$%xUYYU;FjxqDlMZT4Q=e?(jVW+NP>+vU0{h*S+@}WZak?Q?sM^x z7*4U8nt^2AF}$C``0)i^FY{xNVVIV{0h}1mEJiKFX$VW>N@Ib8rX22E)W`HZ0cpR< z2`e#SY7=q5=XjQjm0oS3K$=Y1sco72tOfsZQKrX}i03z|<%kcSG-&XEu4?`J${Yt= z;f7YVUiOB84{A$JY!u~%_h#r}@2KyofBXtoSs~mI!Sa46gQr)Wp?k~>3FWcs@pg={ z3<^G@{;stQJK|r9Le_>2EWaMhARIz`>U!Z@GjjNB)+X;NQ8>|w$$3cf{8plHq8~PN zRJy!H8UZvWj_}-#mbM|%3#7VJwkOymi6)25=p^X`3)oCuF>(~q^41N37*6b@0>HjM zV@55ha4h52&xeK*tpkxomS8f!5O?l78o@wcFH=P=9&S_g#e#a8jl zv(to<#S~Asei_B-yOF=qqO6|Wh3Baun_2Hmnr`dUuv1|}2T32~%huRrM1$T8>cV$z z;(D4$LA>EH2FJ#eg7msV-GBwV`NlcPCrv`xSh%U=fPZ&AY%Rw9N z*WMsR zIRZ3rMKPHiH`_s@f zdth2G7)l0_A$&R7#$~2VR?_undg_L;&i;NVEk~QBJX7IA6QUS^ya*GZi z!;~#q?&F)ITyQ!3nq6uYT&O>%Eo8HDna^Hfkk^csC#3Ro49B$bH?ABNUaQ-}3y)}V zw`Cg?p2pNj%*cXdEy!XSl(@k!_XMQx;*T7l^2i-qj@0NY~XW|>$edoM7jDV z=s*b}dNw#EwawytO0p)DH@V@F?!5GI4{>B!ZKD>H{e+y1!M~}oi0AawFum-ud66%9 zKC(X2jfYk+inUf#=uf$mALg&*#*&R_pB<3v3&1M>^z)yMa5UG8=!`Ce@lE z1`Z;p6HT7A4fp-#yhovbW5L+n8STLdYG!dDX%c@aj@B4K+qUfb*~eYmg)m^Z&Q_qA zcMA*JJKprpWtbNc_k?==h`N@92+H?hRX!o>;wVX0RL9g@duEvSD38BI|eow$}7h5i53V zmjy^cMx`C4Xc?_RHY&}(X;pmVv%!PV$s>uKO^>Cl-R+A~z9WoK6eT7!)x8@ph$;Oz zz8Mct&SzJEcDI#20UXQfI(S)+#k;f(a(W-$pS5{fy2b5l5toGQukgo=CqvHCP9+_{ zXuXFv%qRYbRcoOZ93f90sI#1PrKpFSj0L7Z-meP2)eS`mV%F5zSo1n{&a%i;@65X% zkeVrnNGsNq(Qap~Utz0QjxA$A5a%7F4i2-LiFN@8611K>0zHk?tj%PhER5D>!7HNr zN5-x-D7j-taFL{PRBE1Ej=$y#NDuPMdTWEYd3rUsx|&a#|F$B31ZttJYFZn-JHZt@ z29bKSmQ}-qz+zb`XD(K$G@tvVYa!h5#|I(!eA$n~q&%r8GJBa7B-u{3Lh>yueA$gP-{n$Wc%{h0naE0gG*=a2{^2HWpb*eg4ggIdJR}qW zi3nkqq_3Jp8;y9(an-p@f9(`k{+6id5AH5#!h{JD=Lwz@fd2v>t?HnZ0Atg5V&k+j z^Pe!8*rnwak1&H@mDw$2PDQ(Hjx9*!0@#Xw_sCl) z-6srQ9-VN6(C)YupG^T2TQtV(MaReb$^t4##*3=c?AawWX;|X>IN0}ztZd-0sf24P z2WG&6JAGPWB`@x}UHUcVjikIt(&|?ztlioktP{8@@m+WaKc)A{4(GjOisaYGqnt~3 zdKKklyg!w*tBY0RXpJc0<=4F5`xMs0qUc$f&clxRSa!;rbHZ2_!!!R}x22StzH8-)KcEALtd`wpIDMkSz4H<`!purhPeddPKHfF@Be7*t zg2>Vh`e$+GC)>ub3{0L5AY)wui-O5$`s!|}YYLJF)RArfkZ?%O&FZz@J(yrUQL+w` zK%+t@^;xHAnk9e5-Uf^UziWKU2f?BzUonnlY2TA?QjKiDDYdtA>5d}IW@^=S?@l~a`>@5 zpAsy8icppaG|o^L_E9zTEtr14)Vaj$RAddG_7>M$2Oz zpJkg?2{GuvtPw0G&uRq6e05Iifu&v2i@v_PJ95XJ`9@HboVe{#qfD)NRf?3Ck+Xo@CP!AKP?-hq0rXWO!1#tMX2S(T= zju#m^J+g>BZzu6m!kWz#2=kD<^LjMNhx5J`G;hzMWuZL#5K+TlL|2GG2vaCy`6JY( z5VD%VR_BxuS^ms-j*7wj5UU+c@dXiJYF*`xlD691z|N6qOSf#XnwUC$6H4R5qa>CS zCY6`64do3WaYGQMV_e-FTto;EOKr&W;cJ!7=NR3vrmOO5W*BjPV`5@jKatU){K`fC z!Y2PsGWQxj*vQv#mY>YW-G^=XmUi$P))n{E#oe<()19RIHcN4196*&Cmu4xdbwBK? zdnOK#cj!eDh1HL;n5$bUKFUsK(Vbqpk9*0ci(ti;*8NCu)?Dw_z9+E!-GlKc+=OoP ztg@;&9?g!-$AfVze?L@ws9$YaE369_4F5%=A%2X!u)6YkknM4waUOL>9d6gUi1(5& z-Eae13^h`e0zwM=g$MVZ^A&S?qM_^5#ox>kf#94=7c?N#I-Hc{C&b68_~F9-9VD|a zr>H2@%mv=GLM=37)NcYt<3yEht9J?sKPHLzN6Tezmi-zB4Hwm%wx1>%A;E-jlzy2H z9`)-=z0?iSRrN6;pi!5BRSbS=A6bSwhR(KlXm+=UHZ*47b7B&+{X2`;?!vj2!6W%V z++DC3odV)|MP_M57vmwtBLYS-qW-pL6aocpr$Wft(6RHA(w?d1UsaNA*iABJOlXXJ z+zl$~e|@jpE}^oQeru2_PXtg=JJyp)`paFZ(e(=?2t3EoxN%FH(c|1uT}L|SHMgK6 z+P{1*kQ{Nm`F@C4kp>r`e97gdD0nzVX$#3XN!PFG7I&x=Pp`~QX`}c1o|07%rwd4& z+G#A}EKiS=>`H9CP5&k1u%4YB;0=$SClZfkVys8Ai#649FD~T#JN1K&cRew}{!eDM zF#p$!THnVWoG6FQbADJ_2Xfd8Wd2glGL>y&EsL~|p89M*$?OAlbEZ$$`o<{XR9UJY zal6K)>RZ5woUox=1LhxzADoQJ68j5Z5ECS5s>LsSr|^#NU($Y?@L2h5y?QF`yOLLr z!uJ>Z7-kF~h;V%gMXkG3)0l;XKFCQ_&r&#+g#zPQ`>5HdpppenEXm zYrL@N!$I0G}cxG?(U7(qUAN)xgvF5H71 z#V0-G!>^kNAmQN|*=OxNW86{_Ln(?`S;y5Fj6kfET92=fGh83Id zAD>`r-Qf^>k8k%Vt>S+2xC$jL&#Bw#q-iV@R7l~i73ogJ3~W7dBeo(l!Ha3n!WjX$ z#!4qtJ+{)y^4VycaINMNoq>#$*KirmK*jaV;iIu))GiRdo|eE<$4l0us0{=qUa^c?AhizLo+kR8gfd2akl->+5IGC7fA zv7PTMnQ`#mc0r;8wt;QCUZ1X2%mXNGVie#(Is`XP! z=Q%OHk&}H#$4*RCpUPvB>lZHNu^Zyz$ex>^GdGLBc9&w0pJPCo*yE9TRzW=84~(h= zHfmk%8bv=oN+)GER%w=)A2CC|v=HSwEwRT&141D%gYJGzO0uns3Q8vokGtl-Z-lpL zt36+V?_s>ngW8!2O@h?9qBUx-Q0}l@TlUa`s@_XZ5Y=o+RA>aXcsQav*$rvsg%M+R z!wfUhK9`Yf$0M=$;!5&O_Z>d^sqL7%0zni`w6CXI2?F@lfGeaMs`EUrohzG~gx~27 zA5i7edlmU|N$?5pE6PXYMXzS^Y;hFOqq1=+6jY`)s;-=zik<`jqDtXY-HCf70FF>1 zN!bN{O_0bxF(y-WpHB)=qu6>KRpKj{mhiUm(Y4+^${Qo~U3xdih0Jgm;zGs>tv%l& zPImsSF`d(rx+v!i2vdvch-|NV-&}R7{cbV1o-OVeG5;mHfMX7Vytc{Hyj>y+b>tEb zNfxg5+TW%4)O<+sobV;1_bef6Q=U2M_DHYn4sP-2F&`uvNus$)^BE=ZgBRasSiJv< zG+93bWW19(K*{h50xA%^@v4^(Pvrg5@)6Asl3jm4*n^2n^E52db6X5~%mxXB)4hwDeJL$4ljWjC(FT zAwozrkdPN8gilazFUR(vU(^#;rq=ncTUj1VSK39@R>Reo`R?VMus3?Bhse;f_U`#5 zYh4{0yGmj;S=rDfJUaN9C55o(t!!4kAJQAK2_ zjIueg38oe}#6E(#i&FYuXb9;0u&xggB}FNZ$)c8Qcxys`%7_w6mP7+f(b zWzz#Iytn<{d(5%OH#V_$dg`>0+{?Y{hXF*CQkwV$vkLQc^F3R=MZV&Y(weEb{7I$C zm~5*Ceq;| z<2xjKfrL{R8l7Q4ErRr3j+6dY21Dsr*(Xxf(9(+8B4 zr+z3!)aBYhuTG4@yjhPa^&ovq)4qKxm{L9#FfKFsD{g?q`2u746E?HeBCCr{HZ#eZ zlx-pNrQp^8n-l^0HjC>k;sCPWfbO%kO?3(TOhF!N4T-*3_!F`K`LKPPD(V<>g9#h$Rt9PKHH8~e|& znMw7Vi&)J)GdfpTQtooTxl|8|;RVYzw43BMZM0`x_-DR9AUI?cpkXw}HvaUwEae3- zm5lmYR!mte(yS|A$gV9IH$N!(m$m3*V{E%wvd2$;mT#>3*=ASAD#`&1&W!&&Jt?@b zAB<3iKK|Mt7wp&VEKhJF80MQd9(b83mdDxXDK6wE&b-no?tuE(zdg!n+vg%BKf*>=s`_hkFe_`4j&X&3kQqeqvv)*&9ovZ^3 zLe%m>c;`sJFPo^ zM%}j;+%er?@MJbR*Zv@is5vkHtUaPLfu^c)*B9b-ZQbK+&UDhuA{zTJI-LCJ@6g#$ z8^jEb09veUd*}7J;cCFQ5xj=~#b?-Bo{=^kcJZ$0?g~%hr1dT|(WH2g@Vt68Imvrbgo~Q`Y&{Z%?;aq#u+^X`PJU*dq?KUPxc-OXXv-ANYKyp zs=lX@0m3bs8vH(E}D^0cJPBnA@-iRkw}5t6O@)kxi#o zW?C{!FQiptOQ)2YNhd1A(`Al&viMTYbg%ct{w)gh?|-qY>UPhjBAI#2CH~juK#}Vd z2A!oF)`0>yCYgotkL>bh(Ej&MHVKmcxV4SHs%ru05qoeW9Uu^rCQ@|$7%kP}w z+-XqC57PA-nKmIs=euRcH!^~OLtaZbE%SFqyjk<*bo$}Ygs`60J}BO!g*Kv=2)y~} zke(D~Gjx*@cB>zSmZuOc<1&^c6#NlirrG87;@SJYaYTGW?zte{yKT;oQJh{IM)mT7u5tPg6$^=Brb5Te``j3u}B&8^#Bu z-JuD_jDqF+@fCbQlP~{%QkLt!F=-D1qLxTst{M{eMd*aprkd}Ib8BHf@%`*$y~>nl zVqmN!wk-xWg9u6_;6|bKI_8izmFMEPhVMu|1#Fh2=7Uat;VUV)H#dyyc}3u{bT8Te zGF#+vfvlSmSz4H-Sqy-H#|nUeK#vtw83XuM7QL&X3yC4!8d#9I`~bNIyBv7S@Tc|P y>dx~^8Z^?p6ZhDK+o*??Q;DSw);mVt4K2{)-r=H$Mf|EQect;{^`alT)u(klQAn0cx6Cng`xl*JlDaiB47Chno zQNqpbcHJP54ZB~DoUaGggL)nR0G-=TavyRE?H_^V#CyO)uRw6g-StV(1l*Zq#p5f< zYL1i84tVty;Md~S4ITl5FUa02KFq=L4rqJeRUr6P33&Ft^27_K0SC=nFF=7MOW{7c zJNy#C!f&7}wAbbPnsqb*Al5VJEGIc<8*CxSeA8m7KjPQ!$Nh?TiTA`}0$%WtyheM~ zSI{5pNd(4z^t{IRJ=+NFy##ne+}hvhuK~S;+Pql7RVV64z-{30d#|rQkoY6y19aQ4 zoAdmE0uBPppTWF!yb8Ts-jF10f6o~M&w%ki_#c$lj*o$RJr}@)C%6ywcl8hMCzkQc zOnvaj3D89#7N{lk5N5dLTTnq_@q1*AukInH@?XyB9gBCmcupzSj4lL`F^S=Ykozgl z>N%0dtE8IX>|$)A!wk0>L*WfPH=(=#Rx88IX&C$-Vx!`#Zd?Sdo|R4c>ulqZm{A%= zG{XHtPld7G7^-T@;d8v@IDZA+FWVwQRhjt6@3ukaE>`gw@pct3T-a7I0Z9!xGYc1Xlir zTY`ZafT4x0n=k8yql_#)g4?ceoJ{{WK3C&^fmI!j(wkBuAR1F5;9G|oGvr*z5eRne zxMETJ@C}hZ(0C5DG6N;wuPd;f(x7r}7$E4=A0w6%;KD*nV^DECdDs1OlBbZxpWi6zSwbMlH?LF7&ihUW&q4>Lo z?n)n{c{TN}Y+`LkU7-5NsiVdvAhl4fHsGI9{U?ncAO)g~@kCB%N4{ew0Nxc%an7)E zFuo9CZp2vJxmPDG5bcPDem4V0&xz;mi@+w{?$epX{N?Z9DzYs8H^>DrTPkxbKI&f0 z@YyvH2Gks}gp2k_(jR&wD&k2A14&JT21qTfv2e-t2GuRAr{Q zQgZ$7aE!8zjgf`pM5Zr+c0(YSvH(~wQKp&FRx?z=RH^T-c{wDmd?T@stovH=gGF*X z`7sE*ReO}hIZ`{f%4#>GE&RgCB)I4N0wZY{!mp=SkH!qm5lA=jn9A~?j!*yLq^k)M zq+PVq+{>jzVtnlhZGT3t!k;p_l7Y>re;8ihVX3J*q?7F1&PDfwGc%ojui+d*x_akR zY%WwS083Iczx}_(P`ySI?jlP{^f>;OwcgynHg>RJF$i>x9AZO$Hav9f0NqLPhit~W*=`~pUH=8%p2vLm%1*}bu)yIZ9KR|@E>Lv-IBQZ zPA?)~*i~GXOQ#FtHJcv;^JP7JYgyWO=CHr2w1QOO^48cEl9B_8RQwlvcol>|BRea6 zV&11=KQUdT+RT6-*$AYryI-C!P$&WG^Vb$`Kb87;1}**OnOV1u`zWybSYXrHc;xS( zoTW_(XH9)qeQZ}@jAJm8NBn=g+NQ01CH_#P)-E!L6WM`OjxDsJTRIkNOHCp2U+DLx_8jo-qZpgZH^hL+0c3 z@p>DQli?VVt0#KN25A(-UlCrbgtXO&mQNBLsAl9K6U@%|SZH#}#I;m6)lvId{S@H{100&w}I74Vru-F+TD*5n@@H2>pZcsDIpx56Of5n7&rW zuYDqpBr?eMqZ+tD-Tf-_g2o%Q4<~#Y&IWsoSc^nS? z5!=1?r`l_&MgcaWC|i&Z2H~{Qh6*g?VQ`_gRgIg{yykM$1k_Y3+|oXpG7o>Dp3G0s z)X)~_x`Q!%7UQY+BhS8T=p81jVs?771Grk*sR$4HJPb;7(9dalMeX>wj^{tm5g>`5 zN2_3YI>e30kEK2Q$nyuJ=sova@`sc24pc(|&S^)t?g{^bb3sjp z%jc@*ZF2)`CA{aFSQI$VL62dL<@SNsy+IxS)>NoZ*1H}w^JkO}MYi$ynko*(d6d=G zx3r~XU1HC;?ysX$7#9vZq;jD!_?g^ySrM2s(?n7RDr2Lt;X={#2;1cD4QEj87{zlU*=Ce9hX#F9jx z^j*xk#|vB(zITzJE=6l8_8Y$EpM}8r&+n7BclqW8yvSEg^}(NSO^3eZn8iU- zvQu0s7^(u1!Ejj+u!jpKp9#qh)hJQd0)#6`%cHAFO2$I^(PV43x6#iIO0Hiy%-^k( zzD1)un_>Ih!+_lxigxRWt?+8}Zf|6@#%4y!yIYIXf6j%wE%z}!XEAIX{m$g)_QwLQf^w!Xn990#KytEonY)&*~xsO?M=FDM0 zye|GrHt|`{4#r+BgWW0#) z7b8mH7p7Y3rXEE#8T@N*PJfGGpQ`3N?+#@Tw`rJ2)^`fc%Nhp;$c#?QB%HEnx7+AGAIHmpAJpV1Q0S=IqkLD zPgH9*;$nUE6_UhCqJ!R8k~piK!*B(rkXa?wtH`;1o)WD-o%z97IV)JLCp4>laa>?S zvxJXBY*fiA!}}?t#Fg?Z6&%&3{0M;^=R9%S1>!4T<@sXTB;`+=hcI|pyZ8{_5?E2T z|1pV&P#zMNTtSjn&ZDkL+Z++F-jKw^k=JyS<97Ocg_~hO;G>39Brz!++y-+*h?L*?fbep%G~fS?C=rRTcGqJU^zmh+h`j zY43{bMqb1l2gUlRc`H?sv~v|Sh++vI#o~Q(%A=hoM^*g>??x}}bAtjdw8;peGDpf63>Cw=iL&kHst|z-zH&CZ zZu+YJ+ovDM-i^<#ws4S4d+hk}pg5MH{RXP@CKtP|*+VZJ`BmL`*LRMtUK(evbyKAh zI&=$oPP`|oKR5cGiV=&pp-)A>q#z8Jh5y^1n3F(ehjGO)@`s?%JbsCk{(Ci0DbbHe zs2qH5ZjzI={{Ux6u?hc*=jhia2_1iX(@Y|!Vl4h1>-WxsYH)lP;OV4{Pa$v=%0FBp zluhUlTxIa7gxU>s8==nL9?px4HCvL=)Smqvexsq_bb&N8x>aLLl)}_y3ufC~IEBGr z7Bam|NDeR%Ym6P(nHQn%o11N&w(VcVS2O_KT4098`O4@{ME7N{TXAr2;8^rEz~o>9)z-)^SVvK~hglZ5Bnp8AQkY#Wl+ibJNsh9s&H z{^bu7Vo|&L2kZSgVhN6=YrDv_-~$F`^B4BU9RLEpmWwYFCoFlu6FIKtwt2uZYMSrh zMd}}UC52Qe>9g(qxRuqO{j8dsfKL$)%r#0^kMSXJhajVmwgWhyf>~ufGx6wr&{-a` z(M%wvPNJJeb&KyjXFVe&Ys1o#W6^JX_`O}_H`Em0!%es{zXkO1k=D%i?b#e*a?SCvggE;`#j-PCU^bE;Z*$&*vNjrO*>GsQt*{jE%MjX(5J*n~MR%-PUN)aQ`xQc)|SPU{I1wD=!l`xKAU4R#Yu~U_xsTp|% z3YS^OjMRt#q`O_uIL4IE7qP+Y`T_{a%_Hx?p;C?0Xv)0yLEqI(r2II zT9)XeV5PPyAW;uWi4q+O`-mq?;V1Hx1B9(_@CGOy88E_d^ruRK!cnjAqNowL&5t)2 z+%6%uZeMVyop5}%(lYa@8dUa~65Cy|oU2x3H!t(#G5 zv@W$zvbbe4ogf(WM6c!eRVg2HWf8&XFtiUHk;eXxrDd7L!O;hA@P+-;WW*wbFz%yt zm(_E_f|qNTb47FlG$>_1t|q~Jf5)bFDX&3#bBIN1qV^7+_os91o4AuEq~-fzS>R_c zsJoF)WZrQP-+{$04C3=}vR&hkZDKwO56ENQov*@&G-9kxA#w3;tJ3~6ch_r!RccHU z`?B}2I@Tdo<*0t+4eW{PUy-N}4TS;!ZJ0rMe2j~2h=Es@J!xp+zh|S}yVcV$sPDKJ z5X1Q}%zKj=a1$;Z$p8P2tnDA-?GK?M!kI1iG}H=P9JXKsb`;7h=zphz{7RlW4#CCf z=EP;)9p^_zH+02U=={D8x6h(o z*rcnKnd3`Y)+UNEFtWq0e9OQo>GQU3K^HD(*RJitX9w&VAt_98uk_u@*PUem<896eV`3V@7^YhuREC2??GB zwh%#2^2KS?<9B$Eh*sFvZ>A9t+#^ShaSGS7EBH+j_mQurybsYheHt;z)u-Gsd^HEC zFSFIRTqF!IQhZFk6NLG+6hnu|s|uu@e*mDk3ACQW zzv_C(AZQna>}CIH3HtM}rw!F+`jly@_}jSGU+{4RcTl5w!B0QMT31gTPkVuV7hhyR9IxtH^!Vk;MeB@Kmd2b)?0Sy8KxAKU73Rgh4yHdUyFRKWVpqm_3<0W78l{=mT64 z{CuMX^7>K<-ft6sT&@0q%AUlc>{Q2&qoNE$Bn}U!r~m4;MGAXeDjiG~ZVGSztEs{P zwxB5T$vJ_gxY5xxsGn$}`i8ThYLWomHSbO3vSXYkbi^|E=1U>_C|3gP_pa^TYPVO1~Sl#l;ROgy>Djybw_T+dC7B&qdx*4!rC)d9e?v7;7~DO}VQ3U2$+4c;584DI z-LW+x%gD7wmp%8Kd^IJvfxraTU}bK4ZW^lAO14ybw-T@Kop1eMg9ngYSX*@2by*U*WVMNnpN4(r&9Pnj<+SfYGPQM_aoz_|&)|E<(Pgght>2tyH zLKfj)e|w}FdB)|^5Hr04W-0dDg*{c}$ve$ir#DmBo2kh8w3Ex}>M}o9Db9%z`X7O( zScK);Sbv1CvZ_3#!c}S{z(pYB;@I7^6^X#lY>m&NpAR;#3Q*GsY;$AZ!f~Vg<+afo!%j?C? z;Gv5Y`m*^ESsI{y#=33#;(O2{KFjz(KdbyTFYinMw_@2Y5Q_xJU~eXZaZe`J9FYeL zttSVyD7a`ntDvUpn8gKGvl&09Xdk=2d`i_+2h}|k(ycoJQFo>7moLn$gOYJKLoz4R zb%utCLIn>>3T6qv)x8G|zRa7|M(EpKDkqY3dWqurL04;bETX$q!nR?3KCWqAV`K2h zgb44pa&0NzcxFynIQ_J>H7RL7SP!J4cb=H-3g=0l6%dq+e03w}z7$l$o=+p9lNAni z)lFzPK-YN38jW~{gk`REMl2=PS1!aKTzI&<(u{S!fi`%Wr6^-K`V?6d=<=NJN zpLRm3?!4W(Bi`|wyoRiiEa36h(Vb}B!|j(9`eq3KGh*Ci>dcA#b4(Ri>O!q9t)$fyzShY#hxjPjSX(+X6|7MPN_$_*{naUzG`^r9F*93 z2Nbo|(E?>^ziEC%7d|`*en!D@49dn3crQ43+bL)xr7rM1^OYt>7dv;*R2m5;Y)REz zJWz)Z7-@c1YNfrL2VfI67JLf+#hDaE_TI-m4Z4_z#gkebR7UiLPKa8D%Hl5iO_W2! zRX&cBb-C5Cd{$ZSH~~LlUO}x53%iu<{)1^|PPqNEB8msJ+!y6#gpE>em@|eLO{;Yv zRHoKTk_?t~kl!6d`3IF;o4cS!Uh!QJMwLlal22|A{+%h&Z2N-YlI^{n8t3HUobE_( z#1Mhq3{Ch7E4NJ8>p=UKn-@t`l2E=TmrJg&v7TfwE?&B;h`9j228gcrptsNvr~4AG z;hyT-X$l>G&p}C=AfPkQ*szPrzcM6*z+5efTQsgb!*Ka3vA7Lw=%ZVXTJ3&lG+Wir zB2_2iciK34x+`H9sfHt$o~a6e3)MY;?qEQX&s6@0A<1&n#X0XmNN2pAOe@XOoc)ge z(TD9ETV`sOUF%%XRbaz8JBRn4*<#mcAtml*b4_!;zi#y_xusL>VV!VbF7}7cxWt+9 zYAjz)-G*Mw(}JwXq)0J#lqzYmM}A%GRbQznnlC-ZyGy+PeZgkWSO#l@Pt_+-n4hDc zZk0Bm=w!Ty@WH>G5;sI-7xhTplVEn~C>ow`=7Zk-2$q62VPUvzzTTa?e{{cRKqbb& z*xlwdW5{KLLb@a<)7nFA+PpTx$v!%T(*Jv_4XxX&>P#CRFzGeSwZ{rR4k{AbHe4X( zaB}jabC(?7Z*SQeIa9LXfZ}pEYT2|ak5*e5XSzRzNeq!Md3GP#q_Rqu>Lpf|VL#D8 z>nm$Q!<;K(|H&WE5|0;8a|<@1XW?QY>MA;|=vwRM*;3}Nq5kc#W0MkoW~l^ex#Gs} zHk+ZWKyjv;iqAh<8l_SQ3_Bma1twBwVf9K%Ev~sRK7DsS10noG){#rr@HIkH%2q-Y zL&DmeT&>P#?v8xTxVK&pZ^@+l_3Zt}^*F)FIyy2zO-;q`tToh=gNP~7vqs;q@9P36;3XlC7u_ftb?hbxoghJd zC-OmgkzM52F{e;xr0(#vH`dmmP&2N&%EvGR0@G`N;(~^e(;aWf{O8q)-?c`%KEe07 zGNaL0ET@0|bK$)@gl_=l`bthFWRtLPE#u6DOE?faYo3YLJRdJ~WFJ~S&zJJ{Z2Sr9QUtQ2E8~NXm2@)l~Dx5;wNJ#Mdq0nX$Y4%2bLYQ09jM|9e?Wo?sbU-=E8{cjR~6IAnaXUm&qDma1j#cK zp-Qr~b(N!J?M!A$<|`5Er-sGUr)b+3X(OhR++WD6I3CQ5FzHI+uAN}?#CToh(C-*X z6;@@C=1y$w@7sv5W;2Tb6XK3xJRZpu_+LIkcIoA+C*E(O#kEPrTO5a;Ln_Wzs58Ha zy5K(*5r2+-9HlU2QY_hiEoE6v;qg~U*{LsNtnZkzLG^w~M~;ufoGUW5=+3zK>Fo*v ze?N`#h)5IT1IRoS!2=+{D&O`yN+S8$x8RzpJ3((u<7EN!sdNTdmzsQ*hx!xreqr?3 zv&tbAFy0N9=?fY=LY3a;?nGVJ(G7HYf3<EXjgBHS( z!86GCX6Edbj2S#QxB`sRYUd_bvxe}{+kg?dk}qF03%mz45z@)L5SJkaRgL@3@j8c$1VS3-3mJrmrq4z*w63QpK=siyNuOFq1IaZ_-TzztokvC&h zf8M}aU=Ep81aiuc{ampD5|_r7l{tVRU+*#KZ`sbIJ@grJ zMXNCB_jTwhTzxbrrF;`1CkqRKT;bShb2Qj3%)>fYlnBPtXafmM^wvZgLMs-HxobN* z%qsUFCd3Sc4^HPq=wi8Ucdn{ntbs-&R!8ngLyY%bA!zj7?F=l{J754Bw8MVTDH}K< z{0WzdXiP1wU9sSFj5C%y40K0G6O#6DiF2HFY%|>GVn}NvJ&@TSEs2wy*{~dsbZErW z1f_vf{q5TP8t#S9uuy=qEa=3Ij`<$}d+Y`v;#Rn5ChdM36P>|o7Pxe}tt`_dIn32w z4~)>K6Su$CU(Zey(CLOz!aOHo2~iB!t($`#6c)O0{sVB+$Lh}!7afc45PfieesBpusVf0TzXvc zp>Km4r5ceqNdFy@PS-wtrE#`GHXH>fiXkPm3XqZlmXOP2Po_y8n2@6I>S#7p_lq>8 za!!zz4O5Pl_s>gMd&-X=$1__85r4saG|K2N7(%oRmVXoSjOl$`o1uCp#fcU}7j4q4 z{|2>z5hz@z1W*TC8INpoZiEK+)NbVhVCO?46dCxshT(FUwZ*wrdC}&QUV?12b)b<} z2GoiSWij9{^IX!k3kF~kry0_KwE2n6!GBG|VH7{DcqI@O)9XbFXrKTU1ZCCrh{-ohq^JwM@KRk%50 zr^(;=5@&m-2^n$N8i;r&M2l%M?w{C_>K`%EDMeM3K_5N-8dv>W=TBCJDVtmb{qFfI zuaak~wwaw}P&v@xXcVg&kJ+`Pm@-Tlq%3#@U?2I{PfZkSL`WG3`*kziT!*bG#=Kv< zai|~F9X_>nqmn&yny0{-%mGPeNDAu*>|4F%WSX)Tc)z=yut2SHKPCVAYkjZuptB*^ z){>K$J2hpA|M9NUpsYjz$xDExPS`b;&|fz%t>?j~0D^~nd*-nyWg>~mZ)AC;COpGs z9UG})3y;+ErQK`d3}Wp@xFk+i{@$n5o<$LlU!!7gZWO3~@hld_%WBCc{ndeJ(pH0- z(R8<~hjNySva~5!%CwD_gaQB%8ZE0IyNL+-+te*x(wg2Mm+ literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/resourceowners/email/confirmemaildecline2.webp b/static/images/auditor/10.8/access/reviews/resourceowners/email/confirmemaildecline2.webp new file mode 100644 index 0000000000000000000000000000000000000000..542c498eb68a737f89b214cdf69399104fb33c1d GIT binary patch literal 9340 zcmZX3Q*(^!Lrlyz*&nKeQM+~@il05AL2D1GC1*tdz&9S9p@K8K&cjO+3bhx)e z`XP`@rVp7*c@SV(UgWXu_eL*Z1Guy!0+!-<&nQmzEE6|YXb{Er}wS~fm=PG05Krtr_jg7o5&R++)ULW z%K7#ba0+7au?t~1!g+ss>>b_?0y2G8d=_2Yox{HH+}Az?6hZ2){okHmm5tfJB5S}c zVD!fUMEO4Nt@nfN&gdB8;9nTv@=5ZU_aYML1U8z3Yy#aOQV`IGHsn9>7VhtL?uEQ% zeRcuC*iyd;nkRc-RtkS^=h>wJ?`k9)dxeQ9xI*@I`VzZVW#iu#IHZ43GsPBfnf52@ z4QxGs9Eov03=HlL9HP1|gTqg1#2h(qOC=$YDqJ9xP0bmO~>cbTD z_A<(;LN%jQvHh0w^4RVL;a`&HX2HY*2Cu`92U=u9S78C?z(M%53{!8T zm6>=o=GOvXzb?Tsm{A5Xo&3_csOK7U{0G*8B2AT4aY}#PZvu1F&Z+ok1ND0)75inWWg6nxS;EvU3WAu1pvgkJJV=~15Qb+iuNem_%XzMB32R}Nz8@E$7&K8Dj+ zWW{A-qI&GhMp@S2ra7yp)21n8MpzbSVg631bq@~-H)z=FLivBFx(PS9HbpgUUMTAs zVJsVIv-JLaOCw;7J|8GfUp_r|dG5Aa_nb5KuWZIjR&-;svW*K=VWZ0XM8EKJPFFi4 zOIh-BHQsZ}ig;k!+P#a3pnW=a+cZ;UIB9C3F|?1DjT?zjIe23XT^;?g-`f{L{VFLj zW&B6bcQ5iF?pq5<&Q(m6^4_mrQJ(G(!eHX$g(j9J2_v_CTt1&4VL#3Fl)j7)4t+Ib z4i7OqXmLtLDDBY^S*;^Wml%y!hYhgkbZ5tj;c6Ztb+>51NU7NtYsov#+3sT*dSkGT zy3jVEvErtZhH+XeEjXTR+t>k06$aP}u?~kJCDRq6e)Yh_j5Jl$8+6ZZ(ZYN5l8Xgl zyN(D^=N{gswYy)sBjk3EaNWAg~Sd^|>s(2g=~$FI?l2Bux4rPZ|u=e~sHy zHvKV{4u4QQ2V#XB=|))v`2RJ4%rs-qYLIsCJq63P%V(ioaUr+d&-)cLfFlTvg9=;k zOu7#XwEk6p<3q(=T+YI%LfIfXzncB%`MCo##M=a*igeM3g8GCc*FizSCy^RJT8o6J zM|n_WNyYtlQ)ir<4ijWP$$d@(FEv%(b3d)Yd1lm}yV<_gtiEwS@w$Hyb1nA(>*yx83g zN8oH2%P)5TTv}S}X|PA^sk&dySBU5{YvD>;?*L*Y@~BtZ&&O#5n?EJ-QFqq_l52Xt z5Vj?L`$x#L@K@VzSNZF}_oi0GS(l|_tWBh7N|U?K@PKEpsGY^D3I-JqcrUZdw;dP3 zweqsrK$~#bALLXk%nfK2?-yv~VCw3gqi%@)Kn%;LgTEzZ?CU+t!N>($y1*8f*{8LA zAACrHD1mGgQ} zzq!$RrC1$4ny=DB=xv&dLTpbUpkwU9Y%o%YESb~24bi;%j*&cBcz5^QzboHRsWIeO zDhTj)VAdpZo#G_BAVS4+H_AoXvHylWcuojUgHqek88ba1Igt^?kIzM zml6bI*p(rk0kws#o~_xgO)z8s9l0|YUG$7^lPycj>ot4dd8=OBrym`7b29WnJiC~@ zGM{s|P}kod$+FH>3GY?9n}m1$6S-A-4bT?<@FP~ug_XbG1#24#Plac$a`bXc6cKg* zHWVle_`$)N-NAl)FQp}V-f$+83$BWn0$Gy0L!kMwl$V_m-JzU&^NS4KI$I(x(GK)Sid~h_x85^;j8aa_ zGD@ZbevbVpp2mxakJ>Eh_ZO(~HdjDtMYgj8Y~|#3{q#}D{GLf!Q)QT?o#gStr|Nx#|0V7<*-+MZ zE%zNIzdwUo=x6<(8Pq5U(SnS+>ZniC0e3)Yu5>sCzoO_;7ML`|K z8X}bV{CWwKqD*bw%COK#a~c+c5hkPm^Ky*Si1-ijw*8u+@z269uh~ha>SWbrv*cac zmMAva)m$AFoYrSL>m>09Z!Iruol;ol4! ztt6a9D`(gCuBm(X8FMu2f0K7;O*v=C4}X~YEpi~UX0$(aSHvE@BTbA92*KoW;|f=5 zEtwRALi@i42O@rUPu+u)X%TG%l#ElZwPuwIxMh)lcM|iKpgVj2$7i zuoPw07 zcRwqE4GEttS4ma1c{tk$wNevpHw#zwo<^>)Rd!6HhSv35ZmLn#@cGI~IYzw9*mIqC ze zN7v*k;!=~J+rCxB$KB>9!;J=2ARp6y_-mG!*K_GEq zv<-^|fYRgU?^Yqv4kRt}(HihlBAU)&4fS6zK%;9z^Dld7uHRP?2J+mW)6(nrCUaC{=96B{kK>1o%x_He=*8tE7q82^kz>F z9B2AtEiLsYbt?A2fRHtXJ#y@-WF~SqXKfDyPDz8rX2icjvvcfrm9$OxNEj9+>-M5X zx##!fWMkWd8=!u!pd%;Q6u*6NgL0yUhC2_cWbKm4S~*=Rx%A^9Y(7hn2<56|mkt9P zMn6?Xl}^z*bRB`BfF$Yw(Z2?OiM+Q3Md95#zE~1b)T_462w(eBL*DoZ&)P*LC9id4 zNM@UHpvZSJMV?U*=24V{T=#Qrfdb0P>ZY-fKn6Tnokx?)EDL$Al1>)ki$XS6$QwS3 zoh6ZX7!B_z`C`hIG&&jAJh(1BBWK2}(p8v~ajPC;B$Mx5W9)UW-Gy|1Lg52*c>5dA z6QCpbHcUV$vGdK50=?7*bi}3FASbXeE%@}Ii6+#^or{U`j#nac(!y&MZbViw?CIp3 zUWi2Z0bLxj8%1&|MbJNhGVO;|s=cNXNxJE!N37eDvAexb?22_haxa(b(^xDAFJ1AK zCR<}jJ*GC}q*Q0SeNa@Eim~D!B3hJNg!E5}Q=@AhOCF!8?JcPg zW%pF(Oik$6<5SRK$`m^+%@tYgPJr9}FltC0W}Bb6({DU9xEhW6;FAzba6AuSQq3Uh zHM9TtL5ZYm$j}*K+M9!r9M#-|IZ}>*KpGBv?j(4cNo@sW?nj*ESZ}4D9M?N623uAA zfz7ub!caBXySKVoj@9X13%W}5CB0|;Rama-4a?BT@X;)p$@$!*nDF<=+LH9EYP z9}BXfAgiY*{pl_|hVrbpObOvp#4KHk)a{or!R{EO530%PgKh|^I$Sz2g!;44*Lpbt z%^x}m1w}@RG5>nWP%fGrQ?o9@lKT&~XsauFQJqo*@9oBr>ihXAw!|YTN@C!D3<+g= z?!UH#6r_%`ZirhJDy}Q1mH7&&7~>#aIv|R-bwwTJ;zKaY%ntcJtt6IySVlSJrvBTK z?|(JyQT;+lNp>k54*f3+ z>H<#9hx+b**)^ORjZcFGgkq$ZQ(fv!v5`7?EpWuL%(p?XQ#xJl$JFm>qkEZJkT@sQ zbDh)$!N~7fe;zLY^S=}KJ})$iA+rI}w;A?$)7l$0ojpUU5}-XRh}!fZSM9+U?)240VRaqT(XWWNmTp-vF; z+dFSs#Wt+%8iYC9edTL7c>YHKGF>TEm=KyOWq>ILV(rN-j5|x<0U}Ul=w>~51~jqX zFrTfS0nYDk18guxgcy3T=&R&&&ovN6Pi-e41pj8noM>Sfl9uN+oDg;oxEGu4BGz}7A42d8 zoM*Qtg7puaW;^DlCO7?@g$~9!E5%u~8dQuCVBK13`}@$Jl1eW$Wm$2xlS%xV88VNe z!$p>!(e=?Z-3eNN@A$sfRFm>}8QhgB+umq+$SlkU)R_BXq_RN45{HJ48m;nq94K=B z@-%VBYdP-zsK4B7UeP%(2g-5tcF{8yoGjX*&be-7GBVoO)o3oTEzi*4RA)LHJNV}q z=yIyVyZg~m|6^I@j*W#Zl4lkvjnu7=?Q=|EzUJ>&6gvSFHwF~=F=&(fOs$t=@&={T zZg+TgNT$60CyMNBY{6n_GduzY2mi^y*grVyMN6_CfI=yDYvPeBrf*jFshF?rnDU9zLsdKt?}557cxxLs>eVC zBdr=UzJxpeF}U2J3dMXqkOHkVXtS1)VX^Feh1SL&*s{KtS>r~;IZ78%$u4QrK)xJZ0#RSV>){!&Ia z>_JqcaoQc{IYaU*G1&dehCsC6eZj|u=@M4|Hcq26i6s42+1NGpz1O6dqGm0o(~6U+ z=A-1st(%E%c#hW7NbHR0MK5pW?xx@x!{gh$7mM0ZCGZ8IbUNrAP0@j`fi9faVE_Py znK|pO`*F8}S+81!Y=Vr8CY~%xDgIjtu4)kJY6LdmF*|1wQI4FsEREL5&OWi7iWr51 zH>id4A1e1VwM1;)Of{XS*LU#{tev=6;iYaEs?^~Yxyd)YXi;wrBkwDR%;jz`y{p%v z0X(v3SuCWeXd3#qHAR0zD}K90^?!-Jlvw$D^WOSsk!{VO1RJRNu6q{ID zN~&jGv^if$hs1nqQTk`dz^T1S3{7`wkJsO> z>B&DJio5#-%=67|xPykwUK(o1|9?LDl8q5&Kw5s%$*J1C=9??VVR zYMg_6hhD>Y34-r*k>|;~lG4ng_>M8XL%tGESP_JsddwdWBomEN&h_vq<}ttWAG-#T zsx$-s;{Unen&<=})TAeEE$(Dh7lyL+V8WW)Uv$M`AU--sf%;!?=roY3GT>CMx$4l*ir%hvBv1@Gj2NegFw=)TQ=hE0qAc#@e4tEJhvXgmn(jhxlcmV(t1q=6@G92(n zgjW!!4@kWFrT^iF2F zZq?{JuV8hr`m~7kMEe;$&h&GD^p3aBl^LA@lu65uPIG{;wIxtG7E!JAhjap!MO(*A zucOYz=7jnIwjrccg+f3w+(A2q21S7<%5PlC4+%a{{p!1J)83kjQrHg*`w!W6Q@cJq zd9Mn8K!;@XHrPA6-bj#2l;|no$dbzk^_02_eREMuy>rk?j;xte_Qhx%t_t(Sm91rl z8yeNqR+8c?QIk*Ztp;uoOO`ktKYv1OKIVi{=>X`3{FxBvAXI%l$YC^u(2b!YiL1cF ztGj-*x);}& z7(0U(OiefmFp%~y`Y{*jlj+%aj3%srI zulz4F@%r#Olb>eE1XkQqL|C`$lS#xyKhUe?AaXE##d|5Ul6;n;6KT#(Pmjxk@GJ5q zql81G&3T@w?+~cK-pOg8{c02u`{PHY=eqx0`{_aDNZm>6*OGTVv0EaYfSp6f*~V*> zFuCJ^@xFF3lzr5F1s^`p9;%}B%;$)A%9IOw>2mQ`UH5@!g{$KWYZ!(UJXsr&R2E}B zK{Jfp-6X-Si6-iE%W*7@3ltLBJmh`3O%UdUz%I+58Q$XIz9mUE;bbR!E&)-BGQX<1 zA20juAWX>NW507gn0LKqasgleqi$Tj6CAH(>w?$6GT87X*@ggO4*FOzIhs4xN=p#q zxBN5Q$|y?l0Ooj6usRdWGbw$k7b^znxJMacCl3P`j?X|&`0~FENBoY}*{Sjk8wl~? zf9t*|X3Ke|Bs9^4XUpN5DYV2KB-fv8of0JAYCfbuL+3zWDeBDhicrh1ZBzc}vMIz7 zoG9bcY#9vz%bKuNb!@#_b#=@JJw~D@0*SDa5iZ$bhJJmT?D(yzimJR0R)`Wo& zt}MYbT)a7XdI39^oH=q&Np@XF{l)k-4v7HgVNTa6!ACqov(6vU_KpeG%`wWM=k$kV zG&tQo5(^kP3l;or+xF9ng=iRw*BN?Btx@E0qR(1%ECQ|F?;KO)wY z*F(KT)ymBYm&12MnKF4DFjwpGoL^4S90Blfp(-MUP8RH5M0AvOUF5qGLosuitoMA5S&EA=Ut{3}S+Z$t$fKq5n)C}+o$Y(GP+ zK*1(6Ff1Hb2s+@8vt>50$fE}xIlj(_q@$@fS4z`q*pEJcw1EEW0r5zCBeY@YxfPG2 zQqZr#@3AO>gQ+BGN7%Z&#QgPxjRM<5_^6B~{v}?n9eNQJF+=uK9ieX-aW!!Gkfg`d zo!2@tJ~KX2QXF)4x?%Etl2sUeHE7^WL^B}&IE4--p!>*gK zjOV^|GF0$G6KbAxi7nkAw$b;~3kk*+NiXYz~DiO?D_ggTN@QBR| z(Lm(=QI&x=fuCdJVwzT^15+yA#h@lcfh7O|jzkP#WL-0QlkT*kt7C&Kqp&!| z-rNUT#6ilTHV>lyHe*vmWDZgsRAL``S=KkWTndjjzr5aBlT^;^LTMw?J0l-MUis6* zC&B~hro@)W@!PEAABHI2Q%A4M<(A5rC#Z7o{#MexW31ocj(U0*PtelgP;71!`@D_H zE|M!|Z3n5^szW!Ub{;`Unf`e_f!O1&~@ zlB(+o;-)TLmjv zsqd6Q3u|h-2ZRUvNW^ZBqJ8Gi25P=u>U;Z{pm8FXU%mQDmQAMDJWolx3HFu12qy}o zf44kW>aIBbXi3$gy4cdcc9ipQtcBxU^-*J;;#DhDaC}-i(G#Z z+P?A%{)aF!+=Nl~qUvcgO^Ve{h@axA5T3hYlwd!|XX+pjuJ5=!1juCxc+(M@4_sId zQx<)v*h-$Pj!8lp;`m}yaVrFG{x{{1>)t^EnUGFM@hgSjcYHy+O+1ur*AcAY2bK$_ zD68nD6j@s?Hxk&2#uS9RX+OKCq~&3=+uZ7=nF6;%Is+grh2lW&e;!e-&=!;?DtU@8 zGEcD{BP4Rz@Q(zw=s!`+{bF}7JGiQmj|c-a>--8-)B|vZQ&R3&@L*`g{et&9;^mLH zT4PE3-V2=jKF)dM$EPKT*>G1kNM-%7-qXrA%kI#=g-8>q-AIya<`5*&!=ts3{}yE3 z{@wZAfI7VqJ;t&j{>wn_ELhRe_YBLmI7-zflS0CEol7XjRz^wFRi}yX0_4V*-zgF3 z+NMPZ%{h@Z(4qC-iP8A;^J6jO*q$E%|r&J~KiEYe0}EKb&N!*7_U$ zx(u#uwX8P{TR)-qCa){2_ph!HHRK7CA1fW+GO1t+E3O*k7@~MVKSMT~+33l#ERJYd zG?1x@j$T}PV*dA!U-PsgtHUdc7!`VGR1D;?v$dHym{5k{(D*pf0t5d0i}1Dihvb)k zM;2rQV4-g-meEmk}V{{1i1++Lef2 z$Tgn_NLgY~u9g9XOZAdn6M;m7SsiHnDp4$l5;llka{BkVQB+pTgf z!Skr5j2Xp-Gc(}$V@UC6r!pm$Q?w_%~;eR}P0Dhi%-g=Jyo&Q7B7xNGBU$g%2f9k(= zJ;DEf^#K0?=`a45|NpqJ_5b)k|NX>y1r6 zsCJF3xBWO=d$UmDnuM1aw|$7P#FxMt@{Lp+MFRQ!6h*dB%yN96$9$if#1ol_kAc&4 zR^U!$6!zR2d0N1SAX00F!43mEF8=>P``~$+F__RZ=PD`Q0``E-f~K&FZ8oGU-8sJ^r2nJ+yhuP3V^x7l8~I8d_*dbu78j>Aihcgx zpx{8HFGLVw6FCk@~cw3BS%*XKaAS=v(uQAjE8@lyle5iU}@Y)!dao_*|{`u?g zZXL&fi++i@vU0&puPATe$5Xg*x~ScPNe`2hFP~DKGmu2K)~sPLT>JCt6}wBra$pjy z>!efWKcr`H582wFX&3nHb{_gu>nCl7MnnEd{ZVU~0zHgj6h?pZCF{4c%<80rEMq5N z1Mm;~m6!cc-^V#3XPjx{m&@L5rMR{+t|-7>oCJ|rGmr!Dy1oCtAa#ju!R$0Jg8d2n z`zY}H=z5C&pDsr|fuP4Bm+}rGhta!fv%t8x=ok+*0`(r^PDE? zOjfP4bHAmV+3(wGCQA!NRb+5bzwxAlvKu?iB+TW1vF!6>v)KEadqI=V6k(7T^&|S7 zncj#cc7x#2^dX5t;=CCo)YkyJu6P8oHu}J9d)#BtJHie*R3umA){4h42}w;7dNCq!7~i{Geh+q19njQzb7Zc~{a8KF7F4nI0%a4du80LM9= zgX=L=>Q=gT<7zaHh=?%KvX$eh=~+CPmVT3B{n4X7!AS9m>=L*p2&&`a)rE<5008G0 zi)gVm+O?h3w8abPqLV_{YZSt77hbdOL`kyc=i^B>#+!?sJTT5d4y$CB(lbtihK8HH zS9;OZo?LhkPV>IlXF?Du386I$;`KxzxD!Zhtjr-bYp9c?hdr^mez0}buVU?~^U>~K zvg#?`m%#NFcogpFKyKD%DS&Z+hwP%a5wuG*PnVSg@S1cf>`y#)k;LduhJ0XXkaw(O zkpSD@FawdFi&xZtJFo9Lx>Xu0eZZex&jmsT5K@iN0%CU_u)0=LIA%>(+#5>FnYy+T zA5W=|S+X3jbD)mGCrV!Wm2G@A7=1t27WwwnZg0#{|Qm3WlJ z>4!U03W#gm1gLV6N|f#9yxalhXEp99povcC1;AV%dKL4DJ>xRnsbFAbW7cX z$A=Y_`Qa>3#E#qjdo?ndn(Ip`9aPpLH|(5o2*?*D7+h0C)h^;ya{=Jms6oQm>N<`$ z8c-0*{ZBv?52!=GGLgIQa)kiSxZ0u%l9ETrv8N60wH_#kVfYaPQwnBh!!Dm}onV<2 zc$9^id@J>P^|~M!7@FMs#LvrQW+?H6xKz*q;+;7qB@x&)t55F3duRcs*&fMl5>1R; zGTY5|qi5f$0lB;^#O7+(;S|sT{X6$1H3hRTRZ^MQll46`Zl1g zIxQRs<^BFB3|{>iaT<~6`=6<4OqDKSy^Y-!)%G+Nl2z0&gm*{TRC3c+nMbwzH0V}b z{Kv38BJzuQz{B+&#z{#c*x0{;!8SJJPZ&{1@>1g8Q~iHQ}0OrkWQWuFzI z5-j=bG%qxvX98qc*HlCV(%!wfca|XFZ(c-|^@B<{bKN@?ZF>*Y&KIWE%zjm0TW)Vh z1PHqbZX5B6rWz0sDRbr$4tNyrkFjoIOwPB+W#0Mek5pA=xfwCGOq>6@yEFIlVleDFf0df8Cnun5d?f>=$_L0)5d;Av)8Ag*^9lqb;^*7 z?D@(g%YIKn=?-7jIbfwwM4z8+t6yN&!kdI%abwLNoIOP858`mJY_*$g7|S)$wKwwp zQTGNKLxtNQ&%;d@4Ka)b9}LG9z;eL0O&r*t?pH@-)l-aim#7_Pg#jN1xT6@?K7%nb z@2FABpT2!P9-oUN9;MSrR=)3V?Nrm#>lQG{hedknf8&!VlxEn*zCSo6aBU+Z;T5*P zBYtGeCIb|W%0;|D=zup)PG}*Pj^gaJ=`tNfDJ<=`=uu*1_SnTb?W$N?Pq#yaUq}?D zWvGINEKO6*l2`ljz8t{0YcUk7SacuQ-kAfV2gFvhTZ^+GpcjyL4@`|ocQ!0{Yb!x28RxjeAddv$*>@L&M6k30eKiz^q#)N8ZYB6! zMHqhqaoRg1#%C&=)82uKOoIF=PYuoSx@ciTl{s_K=6W|vS5}W71EeYm4~8_pOCDzOg&2F|3Rx4Q zB@Ok^&1gHhKmN*teuAY(_lx$0XeB?!0`SlO(@P9k3wH4B_Dq1-7Pq>n1q2nG#{L$! zRuQSJa9DrQAyh$6gC{Pr_rt}jHO8+5ZPmfLw_=XDq5V{-c#}cYg+;Og{>`9G&7PUK zEl8*j?^F8~hu&m=$s%w$_J|CrZ;t1Cnd5wu7_@mZ}C30j_fEKZW}3Qk>>jm>bd zVqU{rr{?-$@k|Peu(>X5YXO1Ziw(FLGGxCl9iE`pvm?1Ax*JsL2U ztAA%UzQ^(;1UE{$g_s+aHosKn=Q6qsxRl~`S$_!b)Sj1IxJ4y%O65Jaa^-xvj^JtD zB&(@N|Gq?nK&3!Gf*$z6ozI>lPP0%COHTTA4WyB&sMzfs; zxChR3)>otGET0d}tC*@Xlz0_Ec?UA&j3lID6jR5J3JeRHDMa9iE&1P%W4|-?*b=vv$W4%9rtspj?Nf^#sj&RRkvH(2vYvQHe}bor(gO7< zO+Be&QH+u>O_IL!fWze-Ie^qzy&!N&)m!%oAU-hyE7pC~|A!CFm9Lo@r;vZLYwo?5 zQxiwmNPS*5J-YzIC#9!(aQX3CT2DzBx_h)p_f?;R0I-jUI`Z)G&$s^GKpgw3gem-^ zZ4r)@AEL#wP->JD45#XdX9y6>tgH=vDUjHoO9b&6mfvsF*H~R3vx^+oZ83{)DrX#4 z&(l|v25+9Z4-@{rVHX~7Qp(A2t@IK*v&@xdqi!w2L4$;O&>x|`o~PipEIgtlY(%*oRtUO1E=%~c&r z`ZH<(rQpcfh$W2jO_k+qyL}rJ9U3@E?Bawa2qzO45P>;YMX!8s7C zFxS*5g)Hm%U4alZVg75AG-4&{%yogFx;zNf>_&`Ue|&21JE{M)dI!pc___UTKy&3u zcSX3&ZZhvAkb#67_gD|-H>4B5p*v7JBf}=s{iq51)?#b&B|Xgy2vT0ly?dxq=G zvgES3LGk5OHe$rNCqzd)cpCSo_oyau{{VjFE7EzJF2}klV$3Z4hnBNI&Kc3i{;4fZ zBW<$=g+pQki4s63(sjG5(f)|@wQ)sTh(Zhf(Qh!6rcLLXSeB;);R6+BaH$KIAi?8o@d)d zD;z{~jN+lU`VnVP8eq9O{HZG`_dKgi54m1vI65j*(>b#(?=PoQmqp)4C~a7|q#CO# zs{u0l)|yKE-B~6oovrxl!tAXq_gtK^C$#^B|KYwFsccDmGL$UA+WWzVAlrH&k>onZ z?s*WvlW;mx3z9(-_N_(?+P1TruY6m|n5i*ypQ8_(wWaxXCE!M246}>AtLDQ?mt0&4 z#t&q8usb)?1me@~X3LjE-9)a?t?VXC4~y|%IVG%ndxsG4u|@re0-(7gY@5SrW8285 z6>PFkpCkLXT(l}+V3| z4I@<&wG7}Y4GdmoIAR?}y$dM;w~FNHCNK)td+;A#008TGheiMZ0037W5kN+r9{>Oa KT|xE)0002*?Orbc literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/resourceowners/tablestatus.webp b/static/images/auditor/10.8/access/reviews/resourceowners/tablestatus.webp new file mode 100644 index 0000000000000000000000000000000000000000..16349e590b778e9ae0f92344c85565b03168f93a GIT binary patch literal 30586 zcmY(qV{|4_+om1cwr$(#BputfZQHhOTOHfBla6iU{`z^|nQvz5SFN>cRqeWPoM-K| zOG#2(+{qmXNL@@sK}~^+$n4+wd?IizFikR;EwF$sN80ZaQW9d)=MAa=_()T`FOTLA zj$#;tHq1xFC&Hbsw);K{zv9o^8}oKXr#JPxZ-Hu)DLwIB^N;$kJ!}0vz%3x`74|3n zE4=~oGQXbiQ@_P;-@nfb=qLXt|K)OL>qq@&u4C`g|EebdkO#q7byZ`~7uMNLI0sh*8Qi4SQ@$b~v zmHWPF!FqrP0QtxG6R}t@-ly+P@LInk|4@Lh7vpE>vprn?*AFRx@;zR$FZSE(EB^)X zAowac_9^_M{3(B=UL=Un*Z6b!_W1z*PWiBRzqbw`>lN-reR1w&l?6xws+VEc5wrcv ze$Ib_0q*YrCwpZ8>UaBV{43x{exk1dQ2B3!^+ov#^d0gk{|T@MAQxZ;Xae#_Ft7Aa z`kwu}-hh7$zpcN=-twOb8~dd62mQAJh(F0Mx0`~ef(QQh{+R&dPwyAluj-HVFaO*8 zGk@DY008hg1$e!IeWe5dzHUSHH|haJ%iKlt%`EQ5=I^od@vxVSkNCf|aGIHefkxH@ z_X-O_hQ!Y&zzsxH^&@a)KmUzN5@uZd{u)z~IN?bWWL{2uk1L6vb|rIEKdKkvixId1 zrz@=OB>m5I;RzNE(SXW)m=p|o%XM0a)cR+M2a%wR3ZB*&-^a$!Q{&g!vD@7EJzm0I zH$k8C;3%^exjV{VpyCZrS#|aQZtABcCKb`6(qp{(FVJ_skebPn4;DqtBfZu-w;6F#YCKAz^yNv}1nxs&L zto;Ge*n7RdK|sl;W50+W{FwUcL!RhlSjp(?uyM3fmuhpb`26|GZ$RqQGqmsc&otZL zoV&t_)S`HZu)GP7PL#~<14+2pELosInmo;g^l3&zGCVzz^28cHmt!SinHogvyU5br zn8Z8KcJgZ7L&z~z`#62c!zqhF%3^aHd1L&Q!*DQ4kHL18><5RLk_qcUhOU)kfU!w8 zZXFH7$_6SctZE+{KbEJAS%PPmxBp7pj^xy~8i&n(Ddx&;j=hYC&mxx>kLUGvF_V-$Fm_aYq3|PJf>5 zPnu|Otol#x$ngG!**JtCv9btIh{jPs79ZS~Iy)`uPm>FgnH4uU9&o0IgzZOU-U@!0 zEJPWR@(bnI@i(LkzSgL~(=Quo$9}H7s7|=`3Cbg|R@hJXs24REkoJ|KOl0SoA?*YU z=YM$?*DIGl*0YJLH74}A@_S$Z{!j8{(DxD?~F=&f!###h%zj z)mEbZ&CM$^{4#aXwr=WkXYv>b1*C-(WGZ-u^d*$}?*f6NOvD3SQ{a+K%x|KVoN=wY zfTq9CuwM0~y!0}RA8&OJ*p?pmIcLyl%9!(#dX=H~Q^{jZTBU+5!#%)Ud0=f+vn%@l ztz`M8k#)|Ih1Hl(k?xRit7&xS6``-zGg+UxN|}f9nv8ERtVvA6n_t?5)w`)kG<F*80uT>qr?z``@*t(&p!$Us z#o&9LUW5B|H1@En-+#ltB{UlE;kV*I#mr|1F!87VPv?;$a2TIY4orngOYZ%qo-7nN z&hLb!kX8^ z-=Mk|rLq8qf&R12LtMO4oXL8B>BT;V9SI55-8*LBoJIaFI*_RmbwzHY1vS+E7gplf z9d>vW_6ruf+NM>W;7F|Ttm1w}f3H2W(1#+^Ug85f?Jn%JAN*srBZTIvTmsE(%Qi@1 zPWLEJN08H)>wO~JLo+g^TdlPXpxt1F$j3;%MTHOcH)qS!+ZC8qP2>=t-gCp%6`OWH z;K`%HrH%1_!R24s1$9)O$`JH&t+|sReo~5OAx8ZdVT_F=Q4@b%WZ$aBA%!9|xU!~^ z$F`|=QLKU8Acd_SQf%cwj{XBUKjX^(QZ3{Bd7}1!@T8_U?*WsR!ff%-4SjIWol*4e zI(ah4JGzBcHEHD8Mbl4gX`q2CEqU6$(zp{hMklRw@p2He=(`X2INT@AA~xmR;fckk zp8+Y-X_o=Jt-Wt~|G2aMJEH^7!<7(#bapp=3$ zY!nKA#1LUBc4h?{D1W4|1sm+1ZLu|{VX|zBSYIjS7oD#w6s8p=KzZKKAT-quobVxt zy{-W@Uz#V)rAHc_g~#MWGvW6CMCM;Z*1B#|h@$^hsP~Zzo;!KR_U9&xpLRJPJIWA1 z#vc#!=~}~o3vAhI0{kE1`(9fhht-*K^S!p>HO$@9FF%Wy^_zx1$AMbjQA zRXWyJ4t$lIDB7Nefce2KwtfAYCbYL}sX zOIfc%F40hMX$%>$auRMt9NC!9e*nfo52Z5y0_j5dg19*_Fh=QT2V93hc`QKXwJ0jh zSPaa|I8b-|EM$;iqq{{fsha?%75^)rqw~RZ9fWu{M*r8St7nmDa@8y01W!L(ssI2!oWvu9U8nx}n_m7&YL2G23 z%Fj3pDPs}0!B@M|opg=(5lL)pAm%a9f&;`?hY){-xSM@O&~Kt6*|%>b|NG(ztU>p$8H%W1!T-uSjJODv^o$?<{LqT`>V9 z<}kfSLdAUl(A8Nha{Q{Nz(qPBqj_`#bz<5Q&$nzAF-?B5iF&+!&kFWlt)ObxzCv2& z_5W8&w75>YZ^U!DtRw>A2m*enOl!e?yWLrR)iLp>_mf+>VE=EU^4~z=5t^v*;%;b! z*!5}~?9R|BNb=2~aB$chNs*F&lXpfrrel`>wMn?pKvzl8#;JWBN@F`5#TVMwykb-k z&-dFzwJg2*XIZZN3JX@+T0&+}^7+2)?p_EoROSe%`(5r>f8t{l5*jQ9eOIaeHRo(`=t2KhAL=fb8FXqJ)4sZ& z<9|@iDcJ?E-uJo(zP|kn5;pb!+qEU+9n>p`(qh@Qh$u*KrK>TU+pY+>(njBx zMLtMlBsH5_!1#lI_cQ;DGw%m%K`^ilfqL`j_j^0$Z>Su?UL?L5wEV|qyf5B+`o}`X zDSzqJs4E~t1>z$(AmVpH>ecb8aPeumEF}D0+T@cZMGK4 z*ChR0+pnhX%A){cr=g<%sc@=}zO{)%t>|6oE+kl9?`b7ANSD2LK>me#_|Y-OQ+ga! z|8;?k1CY~El(DZ&hO$g)?0Vl{$$uH=)j1T{(9ej`7x`sTb7xYn-YzuyLAm+*J4&{h zXpFBx&-{2^YvSQl-pQhY@qjTkoiOolZsFvdA8hUo{|*23!=ESBn8`aJARq`obkN9( zdVV}AFJKdaT@Y5Z>*TbMXPp&vIgxh5EsP7khx}fI>QcBDT!#%R)SxRSDS=3Mh;Eg| zlb|8+0-$2 zADqF&bQ;P|$XTvY`Vsl*4%`APG+}>p2A-YYfwcE?tPniZ4Xn}MqJ2li{8PZn;{T)Ko8?h8aRjJlT2+KO3S z)B|Qvz5m`0EP1R|gNgr{4oY`FT3BW_Gabte2kM{Vz1OXe&Mv|;K*dD_VyTE~U@BAC z20i0PjP*&Q-+R`T^}!jNW$8FX|MuVWB+3%(l=V8M_~b(Lb|8Sj{bd%?8sTpUUzxvP-4Wum=;u=otP?8HLJkH63zwWW%*^XqBTXx<5b>dlE4Ne;?Y-zR(4t+w z?OK!Z6+m0rj2lif<26*I;z&#Ip66jr&+$jzKz|}|0OfjFqke>KVN%i8bf4079bANn zleynhC^@BZwvTMU7&G#-kPOqpR;(3*?v)k2*<@S)7()|U`RbCCi|Ig>lrpn!2cHR8 z^a{y6LdxH1UNAcMeoZ(mt$H$+lA~V%2kaY47gzl)MkTWFoUGPLRJ7`3CK)sjT?WR5 zWTDk>_RamN=JrL4a{UubOCBw|oWfx;(!e&LuK>z+kEcsc3bLGivCbF?^u`OCDx&xI z7?=bc_C3zO#>rZv@bktquJ0=oa^ok(;N}36U(HkG{w}qr(X=i8_J7$weJp<2hmev& zEAW;-8WdI+Bt{+Y_1(d2*8Jmy7M-P})o?l<(O~w5(|Xw@IizFoMmxI=7-^;t> zGHl{l&{C`EHt3pV(ugdP>Pl@VJ7h1=-^%u|n`R&~FMmMq&JrVtu$P?oQR0Nbd42t5no5RduSAP{%TSV@_jtq|7-H@COAH$UZTN07w*M z2zQ_df-ym-OnkbiNbBP)XyGjK;sLEAMzka$(BVQy&^KC1|QnVl%t{u zCo<)dDd>xPXhnxK#bcO$Gu{~xFeEXt|B>J{hk`xlZpBvt6@>RsYU*~WeSkH_g8OX* z$z9KD^c{1afh?j+_<%?0WH4WzyxVCO7guA5+?$f*oF`2zcb4JBt$Cw(yAZN*!+ywY zoEk<`N&25r%#^eP-G^&0zXz6@9>m>BwH#MORB)CsTNIMED^adXV!Uj{__oBiaa z?=|0+nNwx?V?M1@Rvc_cc8CEZF#5DWv1Fyv4%zDvAvJ-j(bk*`f@q!Biqt`%!Q$T_ z36A_7mNzE_gvlH&f|@Umd)SX1=KkCpUg`kzW0%SY#k{!ku#C~1X+*@;QAfEtFglP= zT%!h-@is}W0iNx8d;C-wV(Sy1U%y?(;y84J2)4LVua~?jS9ai)SE|P!l=H}mmb?v=i8~`dkPOmrMZzSV`)^2QrL7!m!u{?ejHTr37Cyh^29MOH{+!14?v&u;OF@H&b06^_ z;ez~hX&cui$nda+;n0R*cuFUj6(O;6s3%m_(Yfo&#(;S=mKWtBD^z2#m3DkP z9Qf$=*lyHwUN#4yyldfXW^W%Xy?BhmTl~XLe!&H(0rzZ#4*dM`VNcB=AeRbp%q={a z*@frG&Od+uomDalLnwPUx|tsxiZWbawIpfG!1cBPJv)!0F5SS(P!&$DsL&Zo+k zzlF}nM~;O@@av;?SnNfWNn-;~Hl0MJHLQp6(O|MRZ21hh!NWN10`8eX`VdAZmoR;} zlEQLI@V>l_eGROx>rJBP=)f*g5iIaHjtFvrAk)J6J3yp#h-a>BlOK&+4qeDAG0oQX z%*~R*M)#>y_5r%)i@?KjJOfNGUWsw6-Yh6slYpbS0#+f(oH`v=gr{uJTijYelYYMW~v#n+`p#%C8<~c2#@grZw1%nLTlsRj{CmL4> zfor;F!|?hoFQs6tKvy6I!6sMK^&>Ioy*GsqNFSm=r0NS)<}4sb$${O+>ie=LokCjZ zc3I{pm~O%*a~}@H<5;H6%!NvbKAY?w+pOPDN+15?@4+eyV7w~h`dQ4B_Mwb_Gr|>g z6cv5gfJ`HL;wqq56-(4k;WvaK2^WD)Mj=pfMDHd19u9N`@uW7K3NaR9s`!-E4D8Hz zt_4^W&75W)8Ogb&7i>a$4|F;WXr5Qvn2CGmMiNa|? zg2ioJDrp9J7HNc0E))tKxyLX2hRFEQ%RN0AfC^|5*moX7&>?DiR|`eKi-N|4H@RI1S|ZZ;z8iO~SEVL0%fxAp{kqs^Dh@ZuWsnFvy(yAzZ{5*x zY}r*-?_yR@Gh8!AO2{82w6tSyk(dX82$0`HV_80#-{KhCIEnCGjOCC*_e~hz!b(wp zX(EZTFZtqfKI|)ua1R#xNZ;w`Y)$oGD6VHaS8C%hqYl#>2lFj%5O#$a%4t9wMLfT0 z_ezwutsfP(RWn7CYI2wWZPp$qpH%du(m`wHYWJnh$`?GGg!bn|QBa0G@MWA65Ts0J zY9NM+s2Ge(NJLJFa8j416?2$~Wi*+c7Th~T^SmP5j$I=wM6GF|$<@7fcGRdXr0KZb zZY^1d5y(fF6|zRE$g3ohv12k<0bbs&{^G>)Nv!k05S*rZ{Q>n2DX zfYzsMhvOi-evE=3y0*Bc0Yq;JW{W%wUfQU6Y0dVRI~O zNfl_;v$il#r*eNGopSLn?=mZ6jQW6tJK1yyd;pm(oLj40k@7BB`Hm28>;#>p#3DNH z#T*(tE3?viVo9x=bkFL|WSH_lXNIE9Ir&p2^(BAf|_bk7tJkEo+ISZfR2 zNNRu?2aOrrXZ8qE9lNZMx_r}Pbl4}xVIqx3saNB=Rz>aI0S~y%Twi7c%Fa)_`F$5M z7*1k1)(953PNGnd)Ati1~UFik3mwfof8nxkK*(`Xqi5|PYa11y8 z*RMxBp@v0NELh4Kk+7<7#b#Uf9AH6AR!R;Qsj9niygGA{mBE0Ph+ztGMm5nuf)(X0J0k-0nszDXgQk89^e`@zw_Q6tS z8-y*YBYAlE1tWjrIUn!wP}s|nyVZ2Dq*+1R_mu|#P-h1gL~h|Oco+Lnjs+PSDo$ilA zUGTlj()X+K4c!YodGC2hNFMkS7esOzSTmzwjTGnQtx{DFl%L<5Wvgimiya*65Xdai zmI>+}>%BqOahI^Y9N%7DV-b9MX4oXG@9F|^F~DnfCi{|q{v2)qrO9D;QyzU6>#&{V zlx(D2*|9)UpbcmYSh6(nsTq9!ZBsj@qy$QWz{E7PP1KU-W!Zxk(vjI#oN#Q|n3qQA zuwt&N{F*TmQ@6sp3eduOUDUnsMu&}gO@;PscUAGO0a6K3Q&n+A)7~s`#t@ns2qcYJ zf41>NQ4m$Tn z9UOrgphv>op{jEd5+*L0>Y6Nbj6f#^kdO_jHo-XQ=0IwqlaqChX$y}WZ|VbYcw>OR z_du3(VgjEpo!Ua9sp5ehP`LIys)TKy892A}ugLQnt>+cf>3)tzJt3J}F3n>M zktQ6c+>Ps{LGLP$j+fxbE|7h&x2qzLK{t0ODzTbTMwjy*ol&OIuc{QB;+FHwtSXfo zs3;^B51sl;@=M;8h$^NJK8{zCtX@;Hz!gE!S^lnD;iKAf)3K+cj6u(hef?ItFwxbT z<8=XIII<79*LmF^lixnzZo%8|h25B9_)7}!5C&pWVGaNS5f5ynr_2(GDAvLuFZO^0 zy-l^(|102Avw7y3bj<+*`&+{SPBm)y2i;EdF$gk$Qb}%9nvruJp?#XiuUKur5v!=7&^`rdnp*< zw#;Gvx8p(zwMfgr*-H4SynIGKKgUdzm&9b@O<9k2ZNkC$NQdimpwn>GT z%}LFl=Bo`6_IA(7=31U|C9F-?o&$kNbC!zUtN5-8Cy1|VvHNCAhYdCD*luJ!K3=P@ z4GTyW_6^-G7(~7pVpmxMvG3Tc20hRXPdnOqH}(lvWv;eF5YXkdG+UTOVBm5O5c7W(62`G)hs4Y&M(kOjoKr$lu=9|NNeKnQ{D3nqdxRd!!!(cX-9 zKpZ$!5#DGMgi|y@!)ysuwmB(Hib^aQ{N7Xc2Ikl9OYaNnErs4|GVi;$_|O1L!XBaG zk>!-bjflO12%GH*{{i%SBwj=M-Xr{SN(NOXnEBHdt13+C=fTKImZ9)rq&WWBk(Ihr zy=giU7`v@yP&jV;`)jU!X$o_<7R=F;e)RFGAPW?il*{rIT2$gfRRU24YYp}6O!5POi1UrS- zJ5zN*^tiD`wt&2l-V>)1)o*`~YlPTuIYHx_QJwh{ubkS^mjDC9b&iG%nQt?%@}kNF z$E@U;0{_=Ult(||K+@DfV02tBh*BYr{%`)!Ra~Yyhq|ZN7YkLgvs2V`EiwIZJKV20 z@PW%e(xZ60)VrZrgVc{&JDT{#x4g2>{DxfBVdtBKf?>3sS}P>Y#_L$r@8c|>z^wUh z#WsE3_?t4{7u)0oLsE%dkps8JOVxEFh)W_2t+#q%aJ!>~?COrSOo-Q!COTrGGySR& zZkU4b*kX^hMjz%?!8y8Y=rqLgA9DFfcJOU&?~c2^G=_v}ET^H;$OA2T4$Nn2$r)?( zeeBslNAyt&m%9BIgfxlO#ura6z^} zaeH{VxBHL|qT5P-frz2L!g`zpk67%)#Gii)hEdM@?Q77X6WiO(Et79c;q?Gl@b|G?rcQWYOff3JL0Z<#0Be#PYM%hkm)?g) z^-2YzU{*H4(+6ThW8Tx7Y$&vSN+@*P%=C@%pJwJkBwIgf%^%L1da6oA&*8Jh`Pj9LuwW!4lqK% zC3%2Ne#r0(iZ!8T;!KXdQ^0Lc&ytD1Bdnv#G{*Q!6~Rua&mOB4l8*Y$f&tAwL8zb; ztw*rn?IJHBB+y2FgmKsM;C0JZUdpf#`FS}9oph6$<|2cT%f0B2yqSP|QJnJ0H)C4P zfbe!c+7}sLdUn}x1X=vW;gAm%*U^sL^5HcnWPPpm9=2MYlOe2j_%A|p8eU2{LWnK?Z zxPjnMvX-aGWLies<#G0)7XhFlM-AnRYd;Le=>`qe+xZXc20 zs;vezr0q8l9NfhZhI|#%Coq3ywT530A2|)PDSLEx!427qNbuNoq5q-y}R`h12Y6C2>-b>O-YbN2~KDd{-k*f1$iBEYy_ zGDq%SRRm#$flHgxPMwy3-fZ957~mQM3pz(q*CBks61gQRKj_$9mUdC)K7G|&T3)2e zx?=vIi=u9fw$Ayem14CyC9n!zcKR6Sl!XZVuejNZq~?Tp$Eb-7?ZQNUJ#HSo4J zTRnuxyxUsx0`#G$2+O@2G6Rt0A>lNC_-g|&BeYo?Do8{`!I1#9fB%^i-$(JOqbgGV z8N{Ys9Vg{-(Z0wm-7XU7u)ArLD}XcC*WW5=#aFfhI#ZdbWnfx4)&Ob!XLGI^6kKG)(Ix)G|Q z`0@L^^V-NvGoD}LtjV&|?|kD-9%^W`X$uZAH2Rd`%OSz-I7_yiAB)>nQ7aj`Q7nAImzTuMaDSJ+~fnt$+x0oF->1zPv-2kQ-*QI6mZs z0YBa6Sgn(lxwcE3H^uFyt)ZOV0%WqH1(G3u#MYAs-6@t{=k`hs&B;=yI9mXFI40}} z8-7H`hK38UI5eg6-LjI1xFI2KE=uj4Yyvy5@m6dk2`uJQlW0ToaT7lg>;WpxwM+@Q z;16nc9TOsZgiEdVam8lQbkp*!IfRt8uoHhVMe0t`Yu(Rkbj&1CRCp``A%jXIWIn_D zX!b!>mtFypyRX!d(JM$)vg}EWtw$ibP97H)#JcBemRyjw%9KT&>4UZybN9xaTPMAr z^sQu)&hklIr+FZ7z6sBu?K+Wl;(tF#235|X{lvXC&j2!SjfyK$AUnsw9xUdwIXZ$N zMkpE14y}BkJjqfW3(wiPc+2x8aGKR}KI=X^N6Ijb^beQ~4;JOjZN zM@|17`fPIP{%RHSSw56e;f|#(0?ML$Nfq%l^?F#wj@bGO$`kAE__nxGq8EJRML@gz zLP^5WsC?7(oK3tyvrxp3y{z2nw?^pfQ-hh}@nuFW>#wiW*c&`D=sv?D4`(1ee5koL zsr(z5ZZ7@iCQE5Uh;dlhJ}dTfE39^Wl?hjN`>u!Je3}kv9MaG~r5He!Ay{B2GuATo zkKcEb%Dhp^@4lAp_Kcyv6IqXB}4pIL6p-o zS@|GIF~@wukV~haGP8LvhIqcOb1Z>BXP^b>OphKw)I63FEB;4o=>o9Ph%D1mI;PE) z-cz8L%}@7cs~IQ#Qmc4-@F0~uvabR}CFxq)-4nsL0bhoPQAlgQOqQ!c$aYfhQUT~TIs`OYu3nGXK%`upM_y!JW zpOQ*JoymdA^{rv3afQb2gM-HFmFI832@NMft_Z(3HB><}$_lv3JD9YHBMMk0WUv+V zUM0#zYi5Nf^lhxyw)uI{(8gRpVm=NqSiYAhZet$N(^UKeeV449Lt1mybI6rFC$mGE znu~2{iEbkGNp8Z}kd7OfRhYO$o3^;g20Vuk)Eq%yiDyP8j<^bnMQjQ-x3^h(YXFxC z_)eRJ3S38566T+NLly57a-14x3`4~*gqp5pN6VeF)&Tg*SwXoQGc?^lPu8Vb-UP>Q zLPX|N=Y8R=9#!$rLxDU_vj6&XdJ{vL&%WOdy3un4wp3*_*)#O-Z&W;rP{ZRi?X~v=g6>No3huJ>HTg zyrJll!Ezp>iIFa-aFWl(YU{5yVP7K29)we$V1+f~J}+KES3Ea+5nQOSB^zNY{!+K< z8DB$>2M`cw>*{+b7!pVEN#;RYA5td)pj*|yADJ9R0|O*wq6Mk+8PeN8(v-;aEPQLDEL&{Emc|wc zxA)CvJalXUI4^nIDYs2-;IkvXHns)l_Z1@5TN(bYS>xT!Sdf)KFRNG;?y}R~Lqcki zO4&ErCcBD%n63jcg~Q+L){bwvprCQ%73>WWVFbMJ>cw}f2VtDazh+yt^sJh$6Sbg_ zh>XCS3mBj_SWqNupbhT7d!UJwI4j@Eab0`E&!b=wQa*_2!Q`Ck6_KI_@vGO`lcW{%woGa?T{z zwKl3T*akKNc0bPcY*^8?0{Q06|51(KaR=(!1 zJr=L><)j|y*pt@4oxEn37F_kfts*jZLXS*o_ZZ_Tqfy$(o=W&r`3qSTB%VM}j?cJh zH-1=~XkTzH?}1!f%dh6GCu0kQE5_uaf)mr8OO0c>sJpoz$oR|t@K#ehwf-p> z96_F|vMH0Djkc+|M>bZ{B=|_&6kt0dn7UcdcT-oPb zGVRX9qaNybhK*f(&SW_DFH^Vut?HVVE#CJ6@g(PMptyA~;5;CrF9NuY0UZ;`Z3W;6 zTo=jKjr6PobrEMLr2TFO%P8G=34PeTUDvLN4>aQGJQ}$*34bV^MbN)=-`n}W(h%qUf?6>h;27#LF(*nEY?fgO&m)!2o_u;Zre+=G)*g8^)Azb`KEZ$ z7-GqC9i=>vb)yv`xg6AbvM~^gaeg=gL7*Q|R(NC!wC3Y%G!7MC;H7-$X^3Ro0xs<8 zoaL_4wEt*l@mD8@67LofqHlbDYYa|wy;w#T)uG9u>Q3BqS+ATA!3wfRTrG3DEzHN$ z-qZZ- z9Oz*;$EcG>zzA|A-0Vh$r7ysNgks^{%?S5^NKcs33~4pcB*)us`9*>)g?Rb3=qd6C z?&C(^<6V=w7W{s7Sc-$|1|YZfs!^|DMhU0e?niFCF;-*CALGDc15w^2RF$Oslt9~6 z@&q=ty8UOkB^;yPn&p;l!pxtvN23yg8huZmy8s)XG=+NEtAbqtKjcy?E8iK8`^Q_h zm~qgIG>533@O@&yi3HWO<6UyCxLJ-T_b>munJJ@dHemxQ>IKN*RoJnvti(=Nq5NdjPu;ROoMn>0r1xsG_p94w>aJ`>eD&liU z^*4n{xGc8!-zEwalbk5|aO~%`*q|~gu(G!J)ZR7g-vJr<3Ydf@oFM(^ezK$Wi6r3R zM)quX&(&)Ic`W;Hws!HX**v$>OP*{aEN77u-NYNt=4hZlP_}0%_{*t9yztUNR*$%C|IXb z`(YKL(2R1L{}xdtB2a$B|JHoX((z3Uhsdz(dZiJq#yETLF%A@P!NrWGaZE>dPwT$5}Mb@W1amzA!3;A|ea!qK7+80M~h`_Zg0@REhbF=Vtc-$={m8yfKHSI`$z^Y|)n+)MDV5QpDN`a}uxpHphYjT}+6VK|j1@}R2s(eu z71nz2qvulTgj;+F;YxU4*~urnGQsOeq^(OkNJ2;Ttv>qEqoTdk|Y!l%0=d zKVT7pq^ajMei2+zEp-taa<4CDOG}1tH@tZq6#4WpUFDC!Br81OIEHOIG>YaG@-DMh z4(xJ#gqdAE+iO4>!Y<1jo;3EkL@2zBl1W@_i?eoIrQOnRGx>N`|2a}{Y{9vkJFH|Y zmu(aoEA!|!qnDfz0kuO<@<}NNVp*CS7)_)Sr~bR2fpRT6!3J(4D4o1LMlY1uC{^MP z#~~@lRT;X5&8lfGR7_5LtT`M$fcGi-6_r>z*Cx*BtlR1f=G3!{`#S_mgF>s}BWDZ} zdcT(njsc15HZ(Y{5t!qS76QlDb`pE31`R zSk&LUE0c`gXszr?eQ7G1yyk+fVNpD;C?E|DSyA%>tfJfA@BvV;O8dVMz8lJ8k8Vin z?D_ig3s)+WBwCW|flSW7%k9VJdk!^;KA8&5f^SlWhg+icJ{Nckx%E%6Y&8Xv!-yV- zrbXZLXFZ97!}o^d!32eoz_sn6dY-VrPQ3Vgy9p;s>;o0Zv5<9#A1jL1Tqx?3b)Wc~ z-0aRAdoIw)nIHu+$laFvz>m;BHR9h9_JOu9pz|Y5fSldut5#6BM@-M3OUo~UIl8{p zBj%WPjfz1eXxB&jC-Q{)B)U}du#sMIyCxGLWd-XvL3djGFnZe%b`aDHleDSUfq(>_ z^nHf4Js$ah5Y8RHP*T^0E91)SSn3i&y)miBoSR)!>)Ep0h-%zx=!%wf)5(}@b=G6E*Jt4^n**jp#z zPIjOU zg^*tRAU>j^@YLTs7JAX0S32Jawi-gz2gA{cnbTHoRn0dVYMpzltSqz8YlzC1SZj0} zFi2v(MHizplA(Xunvp7Ub|lFqiLG+mz^87#sFD3bz|d?{n8l%k4i_GPNnu6^eoNRUTd7`nOZ6$OA#ez#I_cOhb_ zxEdxL5DX{S5Uq$5t5^Kv+W)*OOgmS@oKNn;dn3!40Fl3+-@*~g!~zPr3~}YlX=dhn zW%ewWsb-SHGD-B+lEPMzv!0FU7`pF4g|X1&S>ONjttq5%^$almOLsvrg@TRXkEOK7 zvsP2cW_}Tf*71#7ZRSb(=a`hX$rwi^45_1pR%UC6=!dwNZ_Ntj#Po1r&>a#z^bh-h zh}xBg78aj6j77FB88E0cJHt-ikQw z_e&J!y#=#bPeG=%s!xxYt zPyi3ZB%7Vk<0~8O`FqJzOD7DuywNq#(I?A8f-k4;Sk;WHnsvfkd}a0c9(EQ9Cx`TW z_Y6%l0ja3-gyKO7_Pjb~VCn39Vk@{S5!p8jdp%=tT)o%a9dQ|b=myJ{LlB|SvRJ)o z5RnjSU=>iru%uhIl48ugjFoRjv83dV((Xj-r*H(8mRrY>+~aU<%HyVoTvZspNWEyl zFs`7C(@YW_vx#K$a7BBA^xW zC`Tf!SGkdlaBOl$f7k|jSUvu}1T|PE2{m&ocFX{$zL66F}PP86kxPFWFvX_|r=kmI2%vi}yCd~EOz)!SC7sv`!jTFJP5Yzu! z$#4h%kuGM175y=&2j3l%Oaeqn>m1&br5iG8k}3{;lQ4^-i~aMD;&97hZxtQk*f|Va z^jhy-JEtk(Q(mNIPb9BmrZzo0j z$rc9T*nV;pl2-TERgL)M(#{5Zc>!6_PA18_Sf;?1=9U`)q?d|ZV3d9_9rQt&EJIm2vrvy@z9dp9{{76SZE2>xd;xlU3~PWF}|d=4`dgp&Wsvx zLqcnno`=F_dCb1|=_&-}nb-Az>~M^)V0P#_zcI3Pl2+knSEx5kJ-FTZ1-e6q`i6yB zB)Sm^(Hqjr+-$9+4wUd2OON$9o43|gIF#5EVrYNzUWQgkHI~yKE?z%NzA22`yffX8 z@d;1G>)74fI@^vL2yvPGM-29>0jBo&lJ}jSm$li&cfkdZQ6Rkbhg_Zwbp~YjdyAw< z(MaNNh#8fOmoF2TTVV_<}5jkirL`(pZf z678B?>u;Bxk7$p6Z8HWboY|X-nOc}2v$}g3bXwhfJ-|SiCh-v5Bb*D1dAJ9-kX_W0 zKv4-nYN5_9-bg?5b-BEWk&b@<4W@}gW#%Bdj9j$Etq%oO{3PqWI?t&U7T(uj(}=Hi zQCBYZ`{LDD;H4fTORaO6X=%A1{!-54>1#V`1nFU;&Q2?{h3hj{Z(SMGyLumy0&?2- ztAq1+Ctvquwf)9M-0`b9wP$oW)KK0p#a;9b$RR?f6jaE5s?A>ePljm)Mwg3JFi!%w z8TF^77^E(c1U2&SFs+Z~OeeTVXXFLT`9o_lWS>+bKz4&Xq}4RQuD@KfzNkvzqpTS8 z&=&&Dj5==e zSVpa$_H^55Q3Jkr9hDfeYA9;+L*fQgJZ|CIu^Y30DpTMyRlqe2gQ z)0h%{b)){!oHEZx(gzLkJlD(pbF?I_kL+h;2@Bh~od^ws3-DpIiuJtG*@#QfTWcYz zh1cL-3iGX`gY~K3LWN89_eFnM(GW6h*Cb^yc&we?W@~4$p;}7*VgQ;YQEQG`_XYWc zBA{uUp6mLbY&tiEavgiM&z?Pxwgf#(LMd+YadFwcD!6OpyBZQv&$iS|Mw{e}0=`r# zBQ=ijdKIUzz<6fLaf*B+cAc%+#W7E64&eh`A4I9-jgIr2!}vdY4OI!V*`H|K`UaU!&D z^Sc)pCubbg@}F1!l&M@gu(|hiKgs(QdP;u3;|9Cx_Oz>Iu@ugG&eW$eIcZ(^t%h)m z;J*rdyZWSn=$MSqyDAqQhcQ<5(h^&{&q*F??1Ga}1PSi$b3vS!_h*y-)}nO((^o5kPZG2hlXyOImxfM)>s&9zn(bR2M2v7YTzBfT8Mxb7mWzw zptQS^H~j8MBVwvzv>s2&$9E1@>B=bk9Sv?2i72j$$ojS<)mcX0GRGrxhU&LtgPB)P zNM095^Sq@$Ay^-qNl1-B?;j@&sSs#IENA+~f`pmif@=06TT*%a?%pcKCy9^5)$wJL z@j}hY*!5Q{UdW8Gax`oH%!T}|cCTVz*^4MVPotts`j^Qe-XVM|_V!v8=C2(lrCyxG zdjz|0e$7Uv-9;2h+ElcA!ReL#kk892m0VfPrJADQf)cKQ{t#n7J>0x8!3Rrfp(QNj zHHHP!mWNVn+VR6InmO2O$#wPZ=5b-|n?>0>{Xaf>G%B6K_E$mrR{ft2&BqH#;8I6z zJUmtTSm+O7tBk3|m+TJ}boOJwPhh;!Y}3FkLi|zH33e+EEBt~47DHUzf~^jg&EHEQ zxeeC%>f`OZxwK=SV3GvKb{rg@OR2;w26RkOhbkFN3W()QK;Bka90Ms70h6S+Dn8~# zV@5Yh$phzgh?A1A zVMtqTm%mo9&J|;=6V%-9ykr)9HcFY+ME?98_H$$g_I--!7nm!J--G_-dfFJ5XL>Ol zodesfBT%I=8JB)rHoPEe;%qUk6wr+CU?Pd%ZRRfku2b+Ks$@Np$Fxwu-8b6p3 z7|v<4)l$XV)q3(=-_LAHhD?6pITI1-nY`|Egb`sH%R!bsHm@4(O7X-JO}#UMP=2_7 zwMM2VrVSLFqjR3Qza1My{j&_k4YaB0DC%Mt>q(Zy;xPUxmbpYuixcEMR=LQ8t{H?O zRAJynV>FDac@NoX|Lj{7X+hQu{GNO^>n~U_3nw4hy&{mq*B}#0S&l`vyP~v-cHPl* zg*OYwowOnN3uOEPNQC?Dvf*l|9Hn-8-N6%6J>MT__Dd#9Gd?a@`XV^&+KfrSmb{=r z@H%RUevy!Z7KZ|yV*@<)I&TN)>sl({cP5YgY?B|09mwc&{(WWzU71N3Ynit>l=+4{z#G|1<|Y2q>&h|aO1bnfi;rPZE58Hl2m^&a0GMCl-u2wZ zOl4exoFfO|aij?(UVk4a*jk*)K>f%1l@$_ZBZC|5Jgy+rUN zwR#|%Hf#BWl72VeNbNpB2dU^ycY&y=c1f6BO(Niy!eN9nx0#p=E!c0co5@4Hjzmv6{u>YuXlR}H zubS(t2qXVbk06wj7(FcM<%3WRcbs0;+;w<|j8S9v`6vpeTMyZI2}eg2{O zQQNUeK1OM1lS4fB*sn@EQ0|_qNVFr?=Gh9d{6?P%bnPJgmAIZn1JHereXX@ zVBHLjzkOEh4;XrFpf_w9OMi-=X>AjORM^jJ?5JI|=`~Vm3cbCWd$4>Uen~CTCsfn@ zM;s3lVAk-k@^_zlYiTqshnL7+5rWPSMsrOuhJ>>WNfcK_!SBUpV;t&~Shns4@sm_J z%)1|F4XSg^UzgX6rt+I#>Mz^0gu5))1Is(R;m^vN8pPjk0uu>{p245LMor(F{`H1sqa z!F6DIvd2cF$**nbYAJ?CbV#0k@Tk>Q1I3?!GwIoKilxv~i*yK2)IImB;_@(GeiOP@ z;7zKVRk)x0oxfEKXY-92pH~v9R6~3!1Yq9GkS5?Hxvn{*nO0i$#sJ$Drrk0?O*exr zMYNwbkb78>V;bc$FFm%>Z8Cp;r42bVQ`t%ygt}(g>{eWU<%9$j`OF5=G-GzK^WLIk zZiTHPS3jVCR>Vg|zWsRq`5JhuZV@QM1b`mo&bY4Gak_XB(PvTf{$UZM7CQrW*CY_v z-39yj;KWn=<*kk@frh4{3N|4cOeIlQek4gI6T0<%fVX+I7NDyv`6CY1#0@woPuTQ_ ztHeSd09bVi85sj9VfRLQ`#(NHOBlbEHGjF+Eg%Rsa?ya1jTn3qy^XsjG~`2J(hFda zlJ~?s!j#zx@s|pzr&Nf&Q_-8w=*?&Arc49^XDVjfD2F+PM@F4`cba-U&R&7we4>hs5`=n4nbB;|shERqaI$)gfT%ylf zQ1~apHpI2E&<7D?n{d5+A1Uu0UoszuOB#B#G5Uo6Mz$GF2qRFB6A~UBw`(VGMXEk| ziilujIlCj>XyjibQM-s?uyg)S=p##{#8sI!I-k?M2OxEAha|85Y~sYBG$e3^6a{5T z=E24Khl6fCCpMD?c)kePhd(Mfwo60=fj)&0(zXN{gfe(08GzGQ>04hsQIjf%c---> zd>Vx~cKSl>+U#p=)>0!&CadPJ;V?nX@})>x29ST*e4X+#cjCzdf9pgmm%yVkqGDW` z$kSy*e_i1q*^NDXKv8@g%hV~}PHXTP$tu86kiGFx@s2BlS$T^i8#(;I3KwE4hXxvf zpH}?n=1?TR1el3T)_BjARRMx9ERs9CEl!3G*Eq>}lad;dg|-TAC?xQ|Bo6M>`SBg3 zH@QzrRqex<#pH`=drA*eIK0~xh;=BEBz{*XwOKODD(1`O7)==YaFScLm_onQN z+RuA%b6l0r@ZSDL%DW+t$NVEh|EF-yJ6bbinzDjtTpW7!=Y)35CXhEy3;vKYxQGsM z?9y1nOeVE5t^q+LjrQ&kUyoAmrGvDFxSKGe9U8m$j~5f%76%!?6TB!+Vb;*pI0C%| zCk)QpaFseD8TBp4vcd-3-7O^R395*z)WfdA-LV|XGSm}_D(=4|b_YyeKK(4#6(mtH=fbqo z%`{o8JOHjE#>rDS@s&yIbGH@^(S*=!6`U(mlDRmYbE=tQ_oNZ|!BcRPK`R$ceO<#F zI5L^Oxh&mOY9OL*9(E9RL$K)x3Mw6J2!7)0EyXyQ2$T%bovjIxm2`|1-@sBwAV{OH z*%=4IKA=RPo|)2~X562oU0w}GHlGG|>~Hz{7Y|E^K9v-?rQdrd?(3X511ZM8TnoR8 zFDzTLbs@O_?5{ z;K&>j$MzT6ahsRDiukr?84j@GKvVnBpwogeSMFcsZWOeae3qwS7C{d-pHXm9&jt$9 zjmAwHSjMkcIgNoL`w;fw&&a+ABADG529gA;-VV z`W~VUEN80GuGtRnBSSpjvTH$AZW^L8Nkw+rG4gzpy1%$6;(U_pmH1!ZbsSGR%m%?d zid?_j>kbhq4h5eJI3}&S8oYnos z`@$x-Gmh-Ue}ISi;i6#1?3pR?j5*#(jy`qRskW_`;Ou<7`R;mbj{~^=Y)dC?%L5hu zSkFjd+)JEz6+Q0RlFTRe^Vi8=K4{FKckATpihXqwCZq6l+5+U7#Qd4|b{zN}#z`qQv-wUh3 zb2TEhftU+!M~{{69W?hK=|OlC!g@p=7tgBg6xh)~zqeX<8YAW6X= zj)TZL*IsdNAttV^sO`UzWGI}=Jow5S%dDSZ2zAvswRY}4Un~3Cf0!I@m9tNjh zBy0|OZ7<2qto>I77=_FJ3mJZBw1&t95TvB*v7*MO)fAUdN zgDsqN+7MWc^E~+!wXNx#e^j&v zOrxtWAR+oN+fo_)!(@v3Aw#uZMbd8Vf|hLgQ$4iCRHoi+x#6FW-3iT0^!KEL7Q6V< zn{?4c$Ae5wEQqe8R?g{{5B`bMz$<(%pkLm0fOEv~ie+bZVdbnVHg!T@rw567{aRvM z9hZz8!dz`pdeqCFCQV1$+_(jE1=@$QVTDb^@;;fdPWfO}OVh=2TUjwBHlY!Q*#ryJ zwM$eOI<7KxCLbi7L>Oa;u~tOP#L+B1$_M4LC;51IP7A{HunAgxsOyot=TW2d$Qu;M9|wMn^_YCTt{?Npf5C`biO)wAQ%tkvz%_PsZOBbFHFiZ){!CIf-YqnZs~cPQ)ra<7 zWW=PQ;|JK`r4smgYyno)eyzFVi{rSaBRW!QT6kpt6=5toiU2k@lwz3v$2}qhuGY_^ z`MvsRs9NSzolqiLCk4MrQ{Erih8$pRm}l4e!2j?b3>2QW5wLpTb1_EX5#IYk;X+;Mq=!hV6nS_0&j#UET7I*9JH}@Uv>G z$uTF8OTRD3DzE79KgGXrVfQ(ubiL-!rFgS6pjE&YrtVQ~CPWDpnW&H@ZGf`)A5$Cr z5Au8e{{cDx;HE_YMshUnVD*AGNA=WB1iyY#IGweQf`~0S+SS<;>ADUq(M<3yXqq0h zG|=tFETxdrBJsFkRu2+kk$2z3le36yXl-0P0#RAE>n#gGC$SRfjmty)C)TyMsVdRM zrb+iIWE)x)CU+`?Y`7_wEycfXjCdpZ2bJ*Erq5E$fZThnkni#Mdt~>PT;x=8eh(lQwr@u<~ znL{O3=40;+h&6xMx`}P^2h7Mzqr`lCKM-9 zD#;8Wt&kLyZtxihbV+^h=#uYfnL>XpuJF`sMg)@+*=>!H*rlNNibsupY}VF?zi-k; z&q|V@c_YzWQo5ec(A-P+-;;n1U6su>VzPSQjF|ETLdX~Qx&q1X!39Hpn^qPpo=YGO z2Y~`&j}EkEVN6{Qc9OLlTGPBDjQB4Kexp1T_Or7MAy@3?9%=J~1P^rM*xS&Ofw;7w z{-*C9w@tWjsWEbncE%aQm;sXBHb2UrE*m$lzfS^t$g~0=^62fg7O9{oF!j}jk%n2w z-7IbV#`xd5UzryIqfhkktE>@l+0OY?NsLwGH(Gf)1nVtG@xJ|GjcS0Cm%owI##5?X zW&A|PWYF*(-;#20W3i7}5*@||W{lA1@{`imD*FOvlCqF3D9j6f3z5+P>A$(F$bN)PmJ|y83Y8X>^Y+l2OV)` zxAfev>Ew@vs?9Q}%|&1)0~M%Z)u3MFu~BL2I6aB+EQ}IQw`1SYbDV2Hrq^IaH^M8d zQs5k0Xxn3V>9?cJ@L~)7MhES)cq~JF-IVE>{HMA2o8Rr!z^XB+o+eq*ze*r@Y1Y>PN z9sGl1G8}Fu_d`66aY+{YECMdt!qh5Dg1g(LF7rZUj;^W(e9cSC44|`nGCEhPYqq*5 zL=E=T0YE0y^+q5?v=S+QV6GF$ZAY<8-J^l5K=-98I?t7v1l6qYN-$Ln2@I1{&3EA! z0$_mjL$YZ0Fz!}Xp6A|O39Y6%Yyzs*)S)3q4=YybY%{ypm_mBWWTx}AyPV1nu!%yW z4y%0Z07qM+v}dE_bxS-g8cJ4e%ab0dg99VLA#M{wsG&EIxgp3Q`*prQJ2*35HV8sh zg@t#fZ{;XP*!D2(gT}t`C_5G^U&k!zz1j%lur`nNW|_}#&aLZ;Cts1ZD-1d7{FqGJ zzbFwS#07nDorYgO8X*d3GK1nFr}6k7c3^oERIp-$HEV%9D?7^)nGR_m#%$f7FotO6 zPeMnVz@9t?8!X1?BpK{%6*i19i+-t7lT}opvfgi4h7Thl9cIsCukMip=vq}|=UT$E zx0)W;v$XJf4E>C_Bd)6Av56`XkCRW;zMVi0yC0x@`v?J2z8BV{vTRToxbSHSu&j$Z zqH`Kc*8v^F6pRnl6Ps-(1C<%Vosek#@*^#;;zI{e%SguzTXNqZsOl?Tp-uh*|C7B& zI%BKSN?3|*eCXIt0VUZ-ijX`Cp%Ml{#*CLZ^gmVBA;TRgE2<*hQLfeexvVaa z30?Hc+AS#w@n103EALEquSE!nrnl8RQOPACakqcQ58!^S54apJb|UV``k4l}P`V;@ zA3#f?df7FFMsP@9TEmI{liabLvBj) zQOXQD#+JvSI8JJGMqnIJdH$3=6pZ6c^R29=T;TI<*xOmfG@aoNEEPt>jW2L# zxZ*UK7sqc_c>NgNQz2l1u1MsDLkd2Oqv7k&pArHG4+k0Bp@IL|&I4L4rXqtwXUD+= zyH#%KK2%&%B5&EkdwrNLs!@EnSDhoRwyK=}*te@#nDI5?6yOF)W3pMI6SCvkygBeC zK-NLMmc;L)GKgUAQ1Zao03@N9eF zHn7nbp4pZoLcM?;cBKj)Oodsv5LE4s>Q6||bQjQ5AV^df42xwLBkX#z{@J5uV%NJ5 z?*dtYxAoU1o1%p^Bqa?mxm8ItI|H$TEKg<7*qI7fIz_Lb98f4og*lhRVSD2S14X$s z#Oqjy&168~@A}@Zm7qH1SSD`MMPRIRL6Du)kmbdd+g@|3*RmoP&YcAX@yU)&q79bs zr?oe$S0I3h`?cSqcw1Ic&8$$AZ2I+ZKgZ~bCoMc;tsCSwH=f8uE_!%JJUxH$o>};O znT}?pkn3p%Bl)gX(6@1%Vnmp=J@r}2vADMnUw4sc34FKhASOrLT$he(8e6Qvj)Y={ zvF;MA8Qse{J5evOX5P_!<$?G}!_zS5tsou-*?LvZf5Ocgi?F(*m6U90m^=u|(Hna4 zKO^eU-3GngF0Pt2{f2>J*t^%&$-OsltuWc~0a^jtGhA|Ot*R(_Q_5RK!IzatTcC>4 zf9*h--RCCz7DCUPpn`oimo2Lo@FLM_zTKcukOrCFOfY2=Yi;*RjJcBwz3j;_5eJ!! z_ti(j3PZMwX)ooOgmYRSm}7(B;c!NuO(!E@&z>KP8{=MxpwA*%CcIVyfm%4W17hqm z2?rutshM_4t7~McS27OI&6eh?8UoPl%RRr0)8sl`;aEsxDtOLD-(Ptk=C8jd2__Ai zk6(qLgM3v~29m^Yrb?)2IFnV?2pIE$2o3%kU|T~I7oSF#z3j|AfXE`D=o{X5=mkxf zw@U1~q7jklw%+kT8M)+Fk@ys0MFGcy3@j%be1b&uP_CF6L>4#`w*tN_@GDHm_2LtR zZz!sP3&~P=2+%rkH+l-jnJZI=0#AG~=(NIG=`BBec3eC+QD8wiv~}0AMvy-@-+CmS z7nub-8^x)c5HC=MWHI~rQxoxF-2chEc^x2MKR6q&3TEvfqGGF*8JP!aB1KzrFAkoD`%H_QNf2HCeMxz!Yuv!3)8-1cY0Ftcjh9jSyRi$ zeFXH6-I7dWYh38wCm7(ne=3}8uyUsK%7TOxWel1fNHe>KI6(rpWm2J5EdUq@!jr=V z8!DE6faeCkc6@#sr(7&5O}*YOImrLc9{-(@`ybFWH6AD;xDySEPBk`h7(Tq)s?yk_ z^GVU|tz{EejbM0U%VnV5T5&P!6Hi(-ql}cTGok=sSz|ama}iiv_+XF< zhhIjk&ZbnxM{dA?Qs&ajK~wX-wcs-WybAL7Vg#UPA*;>d=jPrDOv_WUw5Q1^?FowJ zvoEjWw|k9GBzs^5@8v5D=Bs%;p0{gx|EiJ#=np1PyqS`Ck=~XXXQ$g!0%7i&Y6da( z50|AjewMZ=&8VBL8>eDAagj*K0ucizQ?~jxF3Lj^;n4!o^#>LEa> z45q&yzQzk#u+9WzeyqSY=hlBAX67>#-jlzDD#TWufRbgE@3Bn7xGNT3t2s3d9xO<7(4TB*)p#@q2xt`n*+ zR(iZ5k=jKx!Q$nKdchpY#JjEn=$oeH(aDC{D)x)$F>$F^MstfQ*+~gJ&?5XO%eH~#ddNq8s zfV|P+Gs$tiRx)`yVP7jnO4~(9&;EH2nMYBs=I0E-K)UND06}{|zzyr2u`%nX{E*7L zb=|G0AFk&}C^NM=N)C-)kgN%gVw@a>k;Auv7aZ59=LeMIhuozK1H-*RwziGur>=6G zKkQVoSqLfQr-c*H3*1_)^|`e2?HJUu8qpKVUhlC^(KzE7ee~8)=7PSFPmI2>`eEzR z>Z4i^fe@%haBJj;`aApz=LJ03J z?D$tgUTw;$g-p5Lyy-C9zZRJaCOE57Fa&jsk-s-gc|Kp#RdCCAFj%;%sk1z{7xe)_ zT});Wf7Pdo_vtBT+c|eeyvl(Un+o0wIPgH8=ii`7`lMy!sKO4LIJoFtoYDJ41ie`&9grsFMIe1mgiT(My)uf<6h-*haOmo>9 zq&56FiF-Ys{;V1q!((L@>3CoJbP#fuL`wP=H3E1Aa|& zJA)F>gNOnTkN;q;i*1_D>`BBunK4dy=F~!>`=FOCz|m^6OcCvHGfWg~>vxR`k{@RH zjisulW!)+mDlCYXFk*%C+*hLgO0@mvPuT zilIp%aJUsHzAx}+a{icU@IJ9h!i?qy8800^LNp_r8p^06;5O_uy3{={RXoCBe^%N5 zH9DwFH3A2|qKoq>m9uv+6{JHwS7em?vqB3h_iG(C?xU}&!HV8(r219t(rA|^;^TL7 zN><0`%P{4IJj|uxl&FDL1>Umy0FySf8<1+AY8@I+KB{r;4u3PNgA39MwP%5QFsP(A zPb2#DDd}ocf-NbSi(D^#J459iHSJ5aI!KV4gX|hi`4B}=-nv0(bBHS3FbJeH8%g#p z>L8VCdq^x1#p3!tzNk3>!_p^A0jnhH-SkKetn zfY)z|j_G>}>|J-?Ht4Z@7h^X~#2+W8M`Q2$pE|c9z2stI-iWsEgd-=xfP(yP9T;kaqROlu;w41lk%^7d|91P|)Ccd7QVKG^Cm_{tOSEk!g6V2) z1fS~i`VJtyCb1ZuNwZ`iXSuiYkn}f0O*pfxYaxx3*<4J0ohPLNywv7{ zY(cVG9Hn{oTL_M>FD$gWc_?R7UjY`g5AFj{5rV;;z8UwJUpb1Wp^JgB7w<|kj|WM=v5T+XX>Z={koEt<|Qw zqr?qn0!G0cg|r=*rIi5rt!0LdAxQ?0RQO{R$Ivf|`n^(xJ=6Ft_^R-L&8794SweKg zXMmdusw}RT*qe+Aq491dj3S7|AIhnpv1_SPsy+=vPVmlAFXQs&Cxm@*1k~>7x)RLk z8xRX^`#c8^{qZgRqL6z#BQ_s+q8gGJ^#JDKvLi9qsE5?ZHG{?mUnO4hsFzzn^3=0v zFJuf$0m|z_${atO)$Wt1%Y>mKN=$%N_PS0|)@yan|DrqZuS$7E5hX_UmQ$fo4lkXdzGMzT0Vj*7I3S2X)z611g*hnr;u1+HkzH@?m5w{BxBrOBW^3nhp2_--Meip?yJ~Q>!lSMe7^^<2UMI- zT&o&f$HQ^1)B~e{)3?;|AeL-{gWvwU3-IJpj&VQkMrKDX06|($X4=;pY?K;@+p_*t zPE0H!FiuZPk4`6wiRbniF+fq?rc)Y|vB61j%G52y4;??%xEUEBhHy~d1Rkg500&9 zfBMm9o=1gT?1ia$yuPUX*@Z(a#O@{^^AT^jNwsayjB^YL8(xfaw8=x-S(zlW9~)Nx zvacQT#$WKe4ZL=u?=s|sBl6p;v$+YNV+Itjl%7r{FC#In zpUHa4KZlFt_g4a8D))ucd*jTQlfNceZ_$mmVpbtq8Jj&lpd%X-p#U$#JBZ$hLe(4e z9icw88Up^0If28doV&*vSP2>4>7wRayE$I#J?^yj6?_TmiwZyV~2^@o&T<8tAPH&1IY+ zYZm-y(=mF-Oi#fDQrpWdfe4M8Mdj9Yb^rx%kksOq6KB8E@*OK{r*upwB$u76|=(J-PMaC~&@m{J|ml0>Y&WVu0-0}+OzUwrE*kJvrDICCeyj%le=WQ6T=811Bp~09UX3|c28NglrUpytT`(`x+sodWMo9? z(@>5`ux&eF6BQfka7$ms+AZSXYHg!F#J(aP>r?9AIzE2fAF}UC;jYgAf)(h76l&ha zDIbhjh3~57?tZ&`k8XX~5zH=@If92fTBUo*M3Fi4v9j7Sh`-PnzF2VBTe>%s>mplEa+U}rF+y+5G{zw>829GL>O(5O?Cd-W5kg*W`PeR zn-+r0Pu7ckt^Q7SH&y?zQ!}Sy#i!*;TuU?YRgDP&L%RlUm35uhO%z9+mC7hh9IyT8 z=OSwc3>w4|yfZBC(KNf8S{ZR36)bNPf|-M8X>}0z<_T*ojKw0@x9`kE=xX3M@}~@H zs=p$L3G}STVMw^J>y!luROkrW4y&5Zp8XCnkrk&gotO2kl$pb43;;7ULQnmDV+X@I z_G;ZvlWVzV&w?#DGlI%)gjA0*)CrW`#`>3oGf7^29o;`EvU7qfVqg!*h~6%z*w&q4 zkmV_f_7PkR19j0F>)7>2L_YhKy4NaZAmZS7!nR@HbgxX4;&b$>9{JA1LQaO z`K=!4{@_qE1SZt!I*T_Bg>wfEezoLcvGd(Wtnc&FwYNn(5NtkUe=3XCrc0zg+$kZN zlllQnY`ok-j1}Q{>m}&ksF;)MfSa9X#i5>M8eW7UHPuqtn0D)nseYnU{T-ijB9-BF zWD8s!A(1NZBMA+rqx=@zi!1cqugg<}z6g;0e;g{IS@8WRoEyaim~LiAI) zSe4uc%BIjrs^uJ!2yi&XauW<@k9u@(|f9lE=zs9 z+}qN$tOez$`KEKLyF@_rp~6}2PG!APXL!twr9`4$lbM;F`D%ZS^VM?I!3^049`1__ z-J57wVB+)~Juv1&qR^4dpsTHuoLpKym@PPN zJ1=Tn;l{L=VJYT!<7IQ78Roij2QW)Hj}I>D9NmXRqNGu8#{Rfhq^|j%P179Src~tz zL>;j96w5f%snc&B!iFZtkJi&C`xx%C$i!Y?!J#vQLRM4XjM>VEP9?5%hq<7G&YM3jL%vd-72R^-4WJ$felcM_{OQS)mTG-kGn8Hmjjudx!* zw`DT!_uX3{uPrp-Q_h^Y?F;zDF{%|p(zZfPadoweegVgVm|s#7%IS7dr#2IUAJVxY z{rb1ID@4H@Gv9BZ;a+1{7y`bRHOz(g=+|0@!xlR!RCAg5h1I)(JB_V}$bAusLYGk> zg|?s=Z!9Zp)C1^pOAr$$T$5U|uB3I8*D#DmI^r6hO5Z!9=HfAP-k%EpTBOqBeN$5I?FCT(UD0}XK@elu$Z^-Ei zSU%->_}G_Ulzy&r=D8lui08qNIiFZM%PTOOkzu){MUn3h&-IvT}#UU8ZGx(2Dcz-|@M$!^5va+M1q| z$`TLUEApWY7+p#Tg7%uuVL?vVH*7qOe{tEe z#fY8Bx(hzRczk>=~`{~i&miGmNcjdr=LR0crH^?dm1wp450q%Q=*%@BUrQj zvfLm1WqCFuL6<=|^h6&&t9I={cxG94USAfPeW&s^AHG1ATO1q?eP_FB$4(IytIbPObqyASmw zNnhe=z=j%AZ=1rRs@YUQUiX+{JB^ZxgsWonq!`u5*j_|sSb8a~XVe5PXw(Nfw5cS2a3N-bde_;iqbjyNGz zwQ9&1q7Y7i=G<%PC_jIG2m$~@1vxDPEm0#Z000Pnk6vT|h6Ko}X(_S% zenY~aL_}jIK9YCJ4>du%kJ}H8MBML5BW@=`;a7RT9}!FL*ud}o^tr!nc{Tz$NbG&c z_efGNgwvFn84C;OFJFHT!;Nut-}0FnxjoGCn#_(@4|Se|b@nPE!VdSz061j_%A7!e88;1E;F5x(FeI zMqM8l!!&QNX7h3prI&FJgTFQ?Lxc~}ZbhypuEbXY&hB_1A^8^b503X6kj^z8(X%T_ zth+jdz$(hE=C2Ki)F(vMc?Qh#UfN1}CvO39f_Qr$cBcoIh7aCJ4|zCu<|0xMgYeQ# zs@uU|RkxCFf2zrbnS0R++xFbb&}^Fp4?LvZCKQE; z9CwcTFkN)o!)-s)#UH&#yNt(Xd{0a=j*A{di31g+ICm1*oOJB|Bw?PtCpG*@04-GI zgiN(>)wxe5WL;veldZ*4to*RxqE|pUV8(j$MNHQUad_in6gLg@#T|Q8#nSF_Ja#EKvv*E6u2pyF z-X4)&(J0+}EQO{YD*gx=xgXRKICjb8jnUVcGb_14=Oqut+KMbL<(m-fgJHIjtP^fm zx@>fx6j1#gxCpfR4)%7uWFQxR{VZ8gtUS@gs)}rHjvMmfC;BONfRLnLG|%r(3-|ro z{|4x0vpZi$_b14$16#PpJ_ zC4VE{<>AX5?0JgFy>sE`P;C<7zorO_zYnDD01NXNL}h*h%Z@2wwJ7!Gi>z$f|7M>j z#4JE*zTk>!Lh^IAr)qEeXg>9c2`1N3h!o*sMlxB~8u#8ME#wz|$0N>(J;czvirJq( z$EZ?!(_ySmtBuryOBBa`<4`&3EX1dmi?8q|T$y9?@KhwZ+{jHs>sp8smUliFJ*ADH zm8Z@}sd$?`DT=g6cSC>pGm&qIEV~OybdCRweerwd@5ooL7j)&3DkFWiDx9AQ?AdlL zT+~u*ub<|s;YAGc(I7}MyF}ci9Ec)Q(>>@4d zpBSgS0=v|)FqgCKHzaB~b{B2@jYhxDvfzDXhj*O1qJN3+pCp4**dI6^YmNQU$X|hK zWc^;k1>WgtC{D86p|(BF_$Nj>yZ^#3@O-Cwmp#=q>x0%oi0CQFeH^Y{xa*~GB&+nA$l3`>#vM~@%&AnHeF-|WX+C$ zLlcC}X`yJdJOu*vq3zVgYWcObH-` z0#ILcuERS)02z*SevD%}ckKkA-J@(Rk~fv_PXgFbjNWQK55uW^fb1MU%F1TF>XQt> zvq^{7)&H#v$-w|;=e0570NSw(W+TCEG;FQQo zd76JD3%4PR{-LRE{QLj(r(qUE<;wod;MNIKk+k1tR!mEBRTmwpD||vIxc7}&Hy>>q ztTdk3&KNZ+`+UE(naTiov|Gz9R34#qd8(|Jz^=xt+9I$2L`|D3zS+=(jpOHxGMz?3 z_R?dcbYo`qZLxxh$#+&{P;CuOl969e1Jj-eD+iEyRZJ^rAT3G2i!C)Jdjjt9yLKdMUZ*CfD2N1CM0WVJJ(A1}!YWoVwPHHLO8d)Q_k8YGWmFQ^7GD>cnFJsfQUlK4Fi z9xHG>pmW<)X#}yJ=y@zD_!!QbJY)O2pw%Z`gJgk1p zl{m5G*URos@UAcRWuY;wcK*jqN41J73&XloE%RMxk(u((*QAeLDVb&pexdO4XTp^| z;W#n$9~DvjVSb}G?qj|WQ1Zd7>rmxdcL{)Zf-F~aKJC>>Dnd!I4uK>(d5Dyl==ER{ zTgp!J(KPkYp!P9zwCqFUqX5-;%iz>~oVKoj>5Ic5D5&Y^BKmMI-9oIkLij>Veev|_ zo^$*-UR`6Pp@5U&u06ram5`itTbIglKVmZ8f}?mWIHey;8%x}fRkklW7Xjs$C1Gh^ z1?k_Bm7hg;a?^ZYeF}=He?>G-i*KYUE*6eK`r@g;S_3gh$@F%q)faWzsF&x#YG=^Xa{3omYS-`THw%hB^Dhf=Y9vnJncS?^@UCW!A6gg09 zvlYWeMd{7yiBk|=rte65c zzGH6tY~iJF5D}qqgkjT;#so0zXuj3d%!&nhd85*Yi81tdcn<7cYg3A^p~)w{cb~2- z^O0a%!pYeAFhZ7TW@Wq735Hp`K(E5+b>6K^tEFrUW`yT1-C5S+#5Y7%KImCx;OAcN z$8x$54D|_g%=-yt+%+**h9_(wAeG6xj6*E(Nhg(>9a4$iZ%mx*(lnpZB&UHkpboe= zf#pbZ&syV|40`1JsOzc63Po5SDVb6#j`d=N1v+>V`x$(D<3Std?f%8^^y=ByZnR)O=aV)6Rw`=isJKD4gsSqlMCLAI z<+?bPGqMWF-cizyi~iv4iPU?_aijB({$d0SEjL-8;D~<7RmqHpQ?z1vr zTs9X}_#*`X>||vqHGB_<$3)_7xNU@SqCvMZDP`d%A!Ye*L1BPp$kz9{BZOTSJEoGX z(y^5ufa0M&3{7BTvm)%~A%_JMb4~}&$^{R~@YuC$TLJ95YL~EUOpHh=D`&f)8D(y> zzO|)!J?^$U-VnaY^5?m^f~+w-`eo?O7s31<8iZ zuRB!cyhASqS%)cZhsLtVwGlnjFZK<^)ij^j*`i#9U$WNeYq@psJ$p~y+Cla5vH?tK z=Or|b=PBR`>qR2(fY>bU}~u8V-A^}FAV1G;rl$eL)5B_^B6>{ z(PRl4^RuVI=-6GVC?<|MEt#CX?woS4J(PFRrgU^u0Rym7&p8b{ z!12Z6hQE8; zBzL14_W!z8MKK8TWd{j(#a@jKH6!K+n#w zg|TZw>PgbEqUe#*J#V5ve@laaG>-M+U9k7*Vy-8xUdg|6IN#S+$wqqKYoU7}UxdwE z4WJeW{LD!`&&KeTm*G;3UiYH*gf5uPkl1edv$7nR=pvQf+fzg;2Sr#*Ef?B+|jM3x(2rPEJ-%s20}JgS)SvLq;7X^%KX)XkI! zF;G9j`kJ6eHTq0{QUmTgyC#L$?32dG9me5Ax$x{)hLda4S{Z0Z>E~$lld9C!6RLCi zVXaS!Wa_W3!Xb$zX-KPww^omdzmEj*MiK6oJk^G29b{f*dhKF-t*kniu)^1z=01*e zTpr8g{1D?u`FNoDRb+yw$6AmuIFX3IYMkBqb)wvT3OdBPVDB44%VTuLV&-him~{pw z(*tIQQsM9yJ$p6xI7xPvV!Qf+$?bOsjDz)ac^h@F4OW>MGz>tyGJ~I8aYYj8 z__eJ}_&0xlVB@R{IwEyc3aB+X@3NffHghIFH%RlQZasStmyPb|0)!ywEtvv=mIB3W z(FTkdE5|YHhYp?ck0A5aX;^jXtfyx|-s$IX)9Dbg(a!6aKer0?X6(e|=Qzr-%FTm# zR0{74(}g)e=wt$=CgePeGbk}S0u9Y2!c5fXDWlgdG3xe}+(8e;!??C5c4Mhk%F__J z$smx_2ft^cs^BHKcoH;6W7y2h#xuuQ17z5QeqMmHT*tQcu{<7LSD6aovOUi76WUd> zD$&Tvi*ejD%6pL)Bx%4%?&llZR+}fLVaNZVb-RLjHGhf1a<@Z3Qx+nVf;D<+)#Xoq zifKVqO}5)tLZ@ssSB_#mmBVgCAu(wg`5-oc^yw;LE?Fyio>?11x{-+~=0N14-Bj@K zS?O21{a{#Dw?ejuVDc{=rNRoiVJitsk;5XEp6(7I6y{6-tm;%fPfOY~T(NjN(KU4+ zn>c`doA0e{5bsVE<(gJ^%goD+YuWV_lx{dWQIzUobk0? ziLpl6Hs0!|v+F z7KH^Rw1!ZxHuCl-UCnbyPj0J zhC9Wz8Oh34h_~4N;q$n6$Z8veQjUUKi{QrdNUrATBQ!QxN_x(t1ey0OWF+Sl2Vs7= zF(@()QYr)q)-Gj-3#2~?SkiWW&R$ZN$lV?CpJ(ga5RhWy43Bygq&>cVoYy3-^eriK z)O&*CHQU1y#8Gx7DV%~-G6NO%TD-rm^$)|18nHmZz zr2jSyR&_x3A^7+Nxfl?9x-(d~7Nb6)yQV#?;ozOc5ks22y?7gjVuBSf8ty#$b@TV7 zf~#M222iAJib-^LreaOvmR|StL;U8+tZhGuw!-gDDA2p{ zB%fKXG}9*T&!q%~ZJaA{)pG}>Tc*tP$lr$I)tGwbO}nHX01AYnaM*S~avhJ{{BCJ{ zYutrYu_q2Lg&i5L$@lceBveLLhNUnAD&l8q5-^D$ z&DNc@Sgwetgld}kV=jKBPS4q}>N#2&6xxn{7Gi%EoCwb$a z-0FE?kE{`TL=eIFVJV-HnlWROACZu2e@pDGdhiOzO#ei;s5HaJzV4(?&iC^}!(&0o9XguU-xVvvC;|tylE<&Ou$H`=F(cfB%;eN^#do(V44lWTOD%e0^X9N zNwnS0_883%d}5AeJq;K_m`F`jc+>8j91A_7B#15#{?!r26yBjg%X{Psa{3bSi-PAv zcE6E%|D_0@&0S4IEazvdHg@%kpr47=%F~3CdcC{Wa?`s$% zVY0^!vHKZ%|_B#Vm^ zJ)()GB4^vd(>=S_T%04pv7TC1K`D`+d2H6-l}8B?-*xoEq2WI$eX?KX6?H!weUa*!K^`3`{QgtG6~w)&+TiiY43Xf=WedUe2Tkel87evY? z!*7)w{o;fvqd?m2jsLh6rqWQ+kF|)!=Dz%)wQDkI2JCU}{Y#G`ChcrzcY2)w^xl_D zW|068>5K*fuvs*K!Y&l5Uhg_CC6!^+j`Z6wY{upg)kBKZ#k@)uCe5cCFG?Zur3EAB wiN=#xu5Iy4f)uAOA2!0!*(AjKvn^@D}(C*dVmG=;Qt4`b*|+2efyJw>~8L4f{9k;^g_eTF}XXDHET| zE(;A+Us5cVp`3K^zg-|4TT>#|mbPp#n2EaYe_eEo18Mgv;+-hJetDkv*NmMn(z*~-( zYAd53VY3xingtY^6&f=LWBJKEK+sEIgu>kW+|Rwa%)L}u&Ji#`dQyEQD1swV=0qgJBh5hT4Ny>A0f0W0%K8-YP4Rz zyL_|((to`Hb-CQ?c#Iyw*z(|m*(ci555Spil4pyMcv1}U!U5j91zg&Za>flL_(Dh5 zvXqZ~8iuNkS&r<3CMfzHl1#KUO2M)iqrmi&eyZF;kARZ?RLl5-)st zo`(;lZ4FCP0T)YS?IObBI2)g&$JRJ03@`DEM_*a{oUcIDINH|4-yq{9_AN8oBUtOr zgS?Z1V86o{Z%}FKxL6jD>-_ftHE8xL<^6^=Sb-p0;#}StWXHqM?~yl{dk!;-n^YQo zN`@~Q%nypNGfISFo8WKDaIyg%>V7ERP2sFA5Mg1)0K#w`GCcfWPN47?-ACifrbf36i2WGPmaqZ47xc_Nl@^}?J_E9g~Rgz+*7 z&VOsmF8t*Ar-~K9e-B(@t)g656Q!2Xe@e_t`%io7DP;fIXO9&2=cY2u{|?Uj=6~%g zeEWN91H-q?{seZ@{(Hv5`91&ZVS-nG1(oBoA^Ioi^!DFOFgrf}CwMXBZz>pUyDS@j z>n2Sk_=_P%ih5uFBzvm(@*frc7e%nqi3VmUnGkN8{$|d5x2NGHURrbS-T#Z4KQo); zvc{22Xe*gN@HeAo7Uus5l=lnd-)N%l>m9hP8yfZFXZknDXs8AXu-pUtz_^ZXT%?PRxdS0Jh!nMdiwQn;py*Vpi*ODtM+Ibt1jdaz9ThPGKf&VUw zHH}dNMeeb@ZYuzWMxhehh^KH29BNI+X^Lt9^fvIR$20w~R9d z%4JRb9x5mwNn34k&iOag|3@~_b3RRgxBEd0Iz!h$cXEILnW{(UzNxKunR)K4xn7p68m;eVyfeP!lABGHo#)TPSLLqQ=>M_+A-*gJ9 zmBEwQLNIJ4`oGA?R!A4osj#dQX@CaH_)L#G+aAriV-SGZoM_9CXl;c&<^mS*KwJ@6 zMfQ2Ww;egw=8Y^z#}SEUacUGZ65dX&xOXVxdm$zED^okgQvQ5dKuvoTRv*q#c`F&t zya#c^t@9yt~{+)wQvHtxa>@x1d}You7y8$4yf3i zST&F=__1{JDf;Y%Ib(m_TYgC<&+u+Kan*PY-Yt7YI3bP~$t~Hfr-k2?zQS<({YygJu21pLN~1bYSIp3fJG9TmQHk&TcFJju(7GY<1mF`c!nSNn z6H2iZdUSug&r)}#na6xEwd!g)5yj3pCrBec(d>@6?d8|Md&3PT`N4dZ4QZY1M=gKfjXom}IDs*Vs!0Z)eN5v#JRils&xOiRjlMjdMI^+N z>x7<@guzE^`flG@cChe5b*kauE1+d2_>iML6Xq(Ec#wWwU`)vq6*}JQNMCfM3uuHMp6PLpnXbn=#AXOv>qgU~fUw1~(Yl9&scLv!R3aWAyf zEw~r=A%l7zpk7^Ka-%UhiR|S}A8@3*?~AHBY%b3pQ({K-tp@0b9x2y-m-laPX(FT{?MfXWGUN5k#(po z_MYr9Bt0KcsV&Is8jU{toi-<7w7!rQBZ^uxW?+}dfW zF&J>xfOIH-KXLS5xz>>16Lb6|Z71^$bG0>@bGQ@g67L}o`{f^c--^dI2EKtIAdZb| z2wvUB7Rl28L>Spi-d9=!r9>}A#=UFa9z}{a#Bv;?&Dbg9jYGE3E&+CR{_J35Ln*gx zs!ZMNrkB_S#`#EZp_UirFTp$l9t<6lttsNBT3n*<(Y+HSA}uH(yfjX9-`r|D-}$|D zzmF~BkqzS;HeCLd{LN$U`SY67FquP=G|4kbN_E+d7Ws2a+I&u0?=Q(PWUuwWjF)0B zTIc!?xLA|!p~(I@@D;C>(L-_6(^fy0ea_ma1P6)Qh?T#EO4^JS*uTda3*A8W;*C!! z7S?2q(^~w#hLD+u!RxROvm-xUgrt>)tGr6kkmw2 zCAbVAfR*<_`E){NwD1$9@|CPIenmBbQKVj5uXd96fY|Y66H9+=ac)vLKtnz&>r3%8 z3I>az*wERW%O0+L<~mQsu%xxr0|`VAu_K7{GP?|??VuV*Ozf>BPZ2X-xDXL!I1|Wp$fnG8T9Ui7%ZqD2m|KJl5?4~dPcGJY zYB<>A+weGI^ySDR@zT-Ixe`L_8_xFh_p{k#Qyn@n7*$<62z~KHN7J}E5`FYx=h6*# zbkA8?{kc$LWD;);E7!7|PuNglJ%@J$ZM&ZTlV|bk*`T1oV02uh6ErzOGhS6hTyfAm zw+s@;WzJmi^9s+ruR~8$&}d0Bqa)kP$x~u~f#o$|&(wCiu_A4ZWCeXLY-~UTPw(>C z9wRTYG97SL>v~&1{ z;PM6iWm7?4SBP%%JZuGg^boFS}`VBMj8 zthaLLW<2+3Gd4!eCCxI__a~>DaSm4`&63jmm{USiTZV!e4j%=wVD&UMnQqUq=EF-& zjpq?1VnCORBG!=4a3tD-Gequux7}Ahw{;Y;PW-?Ldjq3ejWT)Jz!mVTf_19eBjY`Z=7c43+}2XG)d5 z4qzAh2FSN9)rhhD@qwN49aGc^#({X-Y$|XP9ugZocZmpKEuNNw=9GgzECYpJ)aBs7 zAJY^8J%9@q8Ej6JXKG7MiBn)XWij>~n;SbiaT)(fsZgr!G;)Z~ITWhu!z>5J*wAE* zNEw|#7La?e+T>XbiUc%5kfXF-TS4MrbuQWAb(Qx@sk6GVFxVl20wVjN8P=U_h6M=| z;-33)r%C5|b*s52CMDhw9`aa#^5gogfPRFiiFF^aLR)@4ZcSC>SN6&_`^_8GhdbRA z{u*cexB*j#O;1PPMnp|Mt1ikSbSHlwMugnWy&Vm{`1fI^7S4Ri1nfmTs<4pprI77O zh5?$*Xs%z#KA*Pla2`bu1b-Q?thmz6J#ZR~PN|RD?W|XPU1rbWiNC0MI;7{b z3!~1fWvoTS&ei>8b^o-$`}0^66r{w;wk~VStLkFAh2?PNXG!5IT{8p!?M}fP^zfl~PI6^DF>tOaOt8CRA~sES(oac0ZD*rMN%MFvMD1 zn-j&bk6)IroMmpDAn40&w6=_bLqTp4cR-LrlWOb$xe@IQJ_o2d`)Kd-eWZl_kvFU% z*#u`}LeK?`MQ#@BL#2zvFKV&LBZ+`Wh!wL|RyP`b+Z`mQM8U0J5|u#=*zk92YKEoB#%06ysk79mI|XT^ok2d!Ac~K?`!U{s$g8| zOjkufZIqzVP>cB-SfMlS-s^O4#69fz%j%!+vFC2VZ5spMGOr6lyP+D3M8tQ3?!z-? zO;#evs^xXpJD2BuDh=F(YRFqqS!a#B)W^Bs!E&AN)KiWI%Z|vDzU=xS2me|C`AUEX zw92GW7upGymc@huYRB1GJ%|P{b^YviM~sf-jC$U$V{=nhIl^T6*ikIgZ0%#=h_oF= zrU?mFit+bByY1J*Rc7Y2Z=JO}j1Uq;5lSvj#+21;yEfOX&g(WT1nnW8^~MT@8L1OZ zRl5@C#JV}RGy^|*;E{bi&v)h{hvid)PcMT1&UqU6-q_@)u~@ozuX^*m9Ra zlJJOX@Bzw?x<@1D%$1wmLr}ZX(k8T5KiaNC98Vys{KJaByuz3kkH};SUgjyOKvPzW z+Vltlq^u;K-7$sxV@c|sb8Yb>UjR4lki9ha77)Odi|K>0Ht|8+0E~q(=M(`p=0H`k zgtKjFP`RdB$)`ZYi|u8#Ke0L&_zqVRddz6b;FYeRC?n(#xo=MMoI7wMfqfh?a`4*i?nJYoEh z5;mYv1j;@y+jnLPI{KmXyr4k|%06p_+y?miAGanMvcU8q<#ijto< zdH7&PU7Z#{?;?naz-wODagNHDJ5U4CD!KRS6j+Ws0q4cgt%;qPZ3?ppBqdeKgF+4%Lap=|1^NZG`eho&?NcSOZ!}GQ7Rz1P_NH9^|8EV2(au zbLH-x6n}`e`eH51X#JR2u2^aXYN}Ub3Qw&6bqE;nf&cOi0f=PXU3Y79%()T&$--4U zWBa%n+67CycTW4g+S^N!=*}JW0rDs_+BtNKu7yY|@`w=;djrZF&+3+^b$jUdj+9b1 z8Omb`I20Z6?Eva0ok+yO&ZVle2)&AGfhcu}n>A~+ftWuewKC;)L5Y~Z(5>4e% z*(H}wB;N9n&VR|vnL=O#-YHANKmUM}fzzx{Z(%w+f`x-|Im;wK6ay}_5JK(p_o>+Y zhI+4E9ZcHB$JJJKjb%(>fT-d`3i^m;sX^+2KanL}@|8zq;z}v(G&$Ab`oNMP4Nmb} z+?57|;GP%$MBm~>V3Rg#I6b*z5tWVWLsOf`dqU>*d< zL|9g>CtL;O{cf_NQOojwI5TCyRg8Sm-qF#cuKyw-`xYXJHoNy^VV>Qej{0VbS}L`- z=l*-}cU5b@`us*eJwJP>KXZC+^a(u4C`^!62Va!8xx?*}TW8(kPvCp*d-U#ur+zzh zkF#?#REnTHs_wnP3scx?5AIIn*QhrhR~9qfd!)X1H7GVO)1ql#5Xj%|%_^z%WxbPr z5u{mr&0(4bgy;-gIN@MiQ2^gK{htJ3npi=Au4NO?^ka+nq`m$%HA&_*&BE=)%|_{U zquGT!&{8N?60q6zeg}helN7DdO!G{@?08KawA)h@3$ky-el@|#N~4?ZY5C0fH7(!M zw=O^+m~PB6HkZ@NI}$9$u29@`Emq~wEI7%8y8+;?4l(rO`p^&ft5UvKcAufHU=5h! zqmnAnyKK3reS_+}1?qvFU=;_14Z*nCFZ=hJtENzMnESLL1wF?%IUK9A>&x{A-zAtd zOs`d8#gFxq)4m(JdWjJGqs0cWPJJpvl`*A`m<%NG76yfwKX-0TnNmJQs62BTo?%CO zFiHg)8`|+lOR_5?{^Wal<}I0nWYnYQ{j(5qEG_FpmrP$tbePc?^>S z-$8o{*D{K$c*F_LHhk8%5<(!gWf4eg%8YNnKi6yioIsmoZ9TRC>SaiQ=5JqJCasPk z?;H71H|E;r1e|s)#+nE(_#Qg7a=8@we0XIC16&#+g{-4+UP|9)aE`N4l_`b$^KcS% zSHj7Vs94%lfmH#~0m$d1(etwxv>eTQpI-vrjpDArpLX91e@b}g+qrqnE-d#eLeH7v zlhNihMONWN>37Ti`d6C_)+?y@N3zvZQh$@7{E9w_9=(ec*0? z7~k1-dy=%@l?!-lfE<`SjAVIjj?oPvig*|=Z#1H$%vW2#;4JdTkr527xQzy zL1U!QmSzPsezL*5W(CcKQ~(rW`bP2id;*f4MCIo4wzATIzPACNBIbB*!D>wvhf-?l z+&B;LgM?q?DKtNL`_7Y~{4w|uhY{m;nY+CCr;W4qYYEKjw|QC#Hu^e@)Lc6CSok=^ z$zTW*(VQZkr1%EWr$YCU8h)vof**LA`Mql!;bPXuIF`?3o-cnYhyUrw768ClXF8ND zhK-w!Of?FEH`=kQ^URzpK7lI2DOhq?T3F5z4gPc)RzSp(B5?H8`PUltTK)cOdG`iN z*KBfbt&+6*>C^`?gICf|tFkcwrZB7-$I`BoI=e#^VhGVS*_YG z5Yk#{&FFt^o*mgsEy(Rxnh-f`Du4mpxI6$^Z^s29)%ad@{Gj3yjV8MoOKB<_5#CnT zN^ZqovhrH1E{XjGKWO+>M3hnUUCQZ6ug`CdU=Mzpi8LQlbuZEbD-|wmPupH5Mj-Bc z-sqqd@)C(>(L$k(?T~JRcN%RAhP_{pOg|`fnT~*?anXqLkUSP?v&9OgMi(uYkN5DE zdz)q8a%|WSV__6WJ%c+Jn83Z3ZG=c6@$1aViGBne8UT^gjV&l)+L54JWoCpAXf#5A z|EIxFe?(1#>JqOE4{$~X@W={$rycIJD zPb+RYSFuNCRY3JPrGWp9;Tjd+t%Elo6etw`kodf~Bml9@wpoJlypzvlKQ#4*`N~yG zk}9h^jC>u9bTeYi@btkw=-eAM>LaCVj-1FtV zRbS+zyc8U~GlAcL56rY=I^wR|!hLB($c95;ke& z^Bbh{3x_*VvE>E{e}JG}svs!394C8^^FV0JF8Z?0nq;xI_a2I&1T-Z3agX)Owr2bN z^y|04lWzIau1X8D(PV}O#@fRacT7{x z2($LW32R26Hi+-a5?XoMYkVxVSb{*@@(!s&i(S>yEMbu~kO?|Qto9Oidru1|-`}jB zFddXrN$lnkyIS;Bwm$j+Op;05{wH_c z$})myH?^1cW*=O}o%UuTC9A<*Y;;&8baEQQ>x-Bj_5u0m5lO)3t41cvZR9Y98z5=z*Xaj}L+s$$iD#l5 z9i4@drMgnwCxf4Rl>7}WQrQvB+c9q>FWQv1F2|Sn-{!4QgP9 z51DCc#Y+1IWjxWZcM`p--mN zcn;S>W~@?hC$NF$=HSXwyFf>j%t$92+Ea>Ij$Hj64};)gre7M2K8A+vu$xB|9h8hd zxS0#yQ15wlFid`wh&C3*;f%&4pk67k^5Um!jKvV@NI}+hpLP7$3$;!z>AM8Vw)}GQ z94&0DSmx5OEw2NbTFNco1e0JF?#pSn_i2-v2F9I`l3d&GM+LJJE{aME3hdaO6{GXX zL8wtk2c>Rl`(}eO5CUA>PdF|nt+z8>`VPd7vI(gB2oW-YF&!{Pmz7Swykey{Mvk#G zEUR>46|T&cTOve*Dbq};Vx_vrZrk)ohwqxNmiy{ktpOuab(mwv&#Nj+2gUduRXqch9-+J?GO~pK8rH z>#4EE7;Dt?l&Y+hR5l#|pd~4$tf|aHlKA(Y1rjU=jE)$>5nRZgD_xd?tgwJI@f0=) zDazVmUjnk}t1+U%##^AReav*A*Is(yOtcO;%Rbe zA9!5hxISxy@@TjtXc)K>2zo~TtoQ_hK<&(Tc^AY$pbs#JurPL;mz<*AWjeAN6Mq&bDpyyNnctZ zGl=%JYQVi3RQUk@gmRL12I>rueWL(b1D_Wi=L6e7rO#lW_CQ;pV>#$dfDDBDxv`4z z>iJCkYWN4l`k5A(3+nl_1O{F!wKC84O$Pog-k^Ot0u2YQTjr^XCHS z9%T?_+K=mOtPAx_Q*bpxwc%=*FEzn~bn>#SDNb0YKlt7dsq=q}i`Bjj$i={N%ozoP zmH3`>{>#w5h1pd~EJ^vCTEytrBfExnE+&DKZV{L0YsysgZeCvXx%vQVa7byqs&p*V zG5<&cWys50l`=3y_%geag1y=4FtZj43Cc>?bJ`F22-_*K|AgZ_7JLAk9psE;F!LSa z_$3&c5022qixPLuNECM<=ZC%li$>##Z8*R@PEk!`;DUcN4PFL`NWDq02!a4#gvTvq zRsWdtD979cRmgU??ce+J_46(Gs;5QdT829#)6LkpFX<~xToS%2P@{2dx&KhV0pkVE zU;*`8oM+71cPXh-l&rl6rdp0Bqu|{^s;wD5+n*%gf)E);SQ%72P)I2EAJp~MqJpY1 z|H!_$IoQ#cB+`YJ(*yQweF8M$aOz zO}%6~W3fji_>-BK!grX$cSa(16o}c3V!5N@Uw<7J!X{_gdieJy(980!=PyK-WqA=% zgOIK_$OcH*B`h)I-o5eacwgfgswS3$E&IZj=-Q=>Jt?ELe<%h^^4QuzD5NdoxXs{# zi=HMu<^!-U>9-qx@Gpfa>R)_f5-`4M=ii|*kXmm2OMnLFIhP$sa*8c{g+ll0o>0+b zMaD;}K^+>KpmkH8R#`b4unAt8Wt@iqo&vFVCbX@#}h+H@bU0{@Lfl&yf>sSW`1dCMs{nkESwEC>NAHkiQsnMjFPfT-C z)vJ@NH02*lBINyyhun}&)8VkuP_3BHLs`FyDI=amxc@rJ#WJI6!V!xE&Rwmgx_4aoJMYa}rZ}>0KhiUlqU}u%d@XqUyzZ@!d`TL>%OE(I;eS^H#j(?W}gz z>{@HcDJKgu2S~F|OxKz>4N&!>ahX5Jw2EZ2tQ^2o1)}xi7&S8&X1U*BddWnVZ!Sy! z>nO$t^qvpYqV0%jT_A)He<*4ii;23js+mdPamPY_f8|S63;Jr9(v!*qdHBk|rWPcI zhBT<4M6axk7K#k`!#Y`n5Qc0|1uw=_jX5r_vaH%-l#de)EOq)Hl#%ZAL>J-}+Drkl zVAS4(fgS;j|9w`5?vyFDss1YQC|UJClg}pqGQ3)OM_$0+N5AQ?MvA=Fh5yn1cW03- z?`;3?Xm#~JSy5v8=l|Xjlj!}o@Btz5KLPVUS@O3ZOy|=Hany_NVL|cl==paiudX-q z;O}T)(tk%2adI%-07uShL?z?@zVu(wl_NRz{tt?Y`PlzTk?;ackQUD0j=A~&!TD$K zuSfMl#@*?OckoF67ta5{g;QIaBj&u>Xkw-I_|Faj(EnlfpTbAv|0U($W&OtwI8C_X zt6@PEoBxP|VZI+{OqSdK_*gUczcOf;6SnNF{qN{G{l66WH+%mWzVLwPuOuMA{C~3d zY$TUk8}tv+nNj@z#q06;b?HC6ZXf(NuYVoL9XjVB^|IMV?MvqbH+g5-F%{j)XO->n zpMLo-^ZZ@lKQv3lj-48}qR?x2ue|^nxccG$a{vE*Cl;%1 z>tIsSC;cust|6CY%@#=16RZr&)YLnD2P^pMsgJVsCRg2y6qFY1LAS(VJ^_bt(y=ot z@h^Ga^1c6M!e>Q{#Yh8>*e{Yq$*)5%F!uY97I{iPeNw@19bR zoq@T?y9zb*A`Lsk5Ysg^z2W1H69C{7G`s`Aa3gyVF+tQmNAO?KPyNzopS$$YBu9k_CR~lpA+Pi;f-uEh;@mGk@i<~C=G&Smzl`veE1xo# zlEUom05ZXl7FN<4KT#Clef2pX!!M>8__|p!JL{LnrXfM0y%NRj@`>mD=RBFI*XIPi z^?A_B*4QF5`;tGlJJw-wn1BNWJ=7Zv1R4=7<&1%zw&#cW&To;M*`!Bsrtr1QZ+xlP z{RU=lG_}aqV<-aKzZQG-x1>mznZ5* zTsB79cuiFnDFq17zyutIbMG^>#5EtbA+C_4%I)}}u>M%~-WHjl`X!j!rUK)4hXlc? zpwMaQHL*NHMZxQ5)%*Y{c-z8v->YtOxtigw>3chCA{nmr=lNLRI_d1PWLNC9C+yHq zxs1sg=#PgGi0{y2dq|Oc?DNbFZ32uF)LVq~a47%1WufT5GH6?BY#B52eS4{UH0#P(0KpS*aJtiB5#$)4_oKq2Lg?t@34>ykh(Oj8c3Ds0C* z#n8(mO@&AO4b$bUJJsI=f~eWm(*5OK7q$?Ay;#i^8?}9o;p|^l={YVuHf5$+SF7Xc0C9P~3>Zpc zBV1loJgm2(sJ(g$l8w{$?5Uzb(+!6d6udh9jJRI!4Ibe;|*Zp)aKb zg(rIN*oB+%z&iY#gRsbGLC+oQ_^b{nRDg9HPUtQXI8rMhuOMHfi@Cjti%BL?H$!!~ zvatXSR!{GU=2oL$O8#hX{{>X1O&7CY8Y)|^?~QLl>$7s)dz9C?bs>^E3viwFg!QN?X! zs;7>m7`QBRdfy~5TW6iNS9k9Mz^U^RyH{&l3Q|&jeLfhwC$3Lrw z^{BCfs}5Kdf%9sd`j3f-|8#oGbr$f1z>1H5y7A6kEGT4*BM7(7@ zdvIOx(^A+a|K~Hqd2M5{^A^n45wccSlcfE&Hzlwr0TzMiMc{;bzz+!wn(S?{O_Hvt zyzgVm++Od4MrX^w1gm7TP!6XTLMhY|ZZu~oo_X5O{Cf`VB$H;_zA72EW)cHoQeEc- zh23cJk>(|8&KYt#L|GR6HuI!#>utiQ z$^C59{Ep^FaDG>#OnQV@2jt!~r*l?f-)4;OtGep#(kh+xyI9Ik-fq}Z+V&Twn>F@; zN=k}Bv-QcbOsZzAN0K2$jC~!s`>o{I>Mplg7p!Y8(pq(9o4BkW)7Rx5HEucQpL?Dy z!zGcPd@AzamDyIPwd}{Bp5Zt357jD$3;U`I>3Kl{>qLHNju^rYl7c2?^09-IrIfF+ zn$N9lA<0!h1e#y@?_JVl!>-4V;90`sT1?+Kx!9*Vr{}BEKI);eVtdse4K!wn^_J z<0KXV59?M5&dMX|?Tm&*kP8^@xcYYB+wP7e{p>tww8f}ccYhPV&Udo=R>Y+@fUT$B zyiEELCPG0rAr@*PNfw`t`kh;1=Tho7b<(oe_=i8Q zu`@)7y<7gh43T@V(+5lYOIpY)$!EB1@oCOTz4D{+OO-sFi!dKV0UP9N7Qywk2;2B|hBF^h z_U8GuaFe%|EWF1t7xy+j2ve;6fUi;s z$r!RjrJV^uCL*S7lI`$4R82VC9&HfJS;!q1$U(*-<{wRnB4J##zKenRZ(DzGsJYFnWc zuZ8~21lva$?{1y9uA6{--P#f;_Y7jf7iv+91{Y5y>Xht?4>vkdN}c3%$S&C^d4R6u z>>~l2mKt8ZodoZi@9u_=>*1(OC*G--skiEZsA_hX&a2Nfwh2pRa$?*nzM6V$J{JNe z3X>y`R~r23(+I5&FV0*k1LK+bl(} z1hFvfy!`NB+DFZjrDGKipALW5S8$b4Mmj_U+IhcVkg~V z(eROS8ardE>tKn?5B1b74X}tD~;> zIJni$v6-Jx6T!L;V|?Q+vSzof@u{!wj-(1Z7~K)P-Sm<@#{B3_)J40uwKOqsRt8O0N>VD%cwq0Q;&ovQ2_3ORb?Yhl z@jVukzSDPboQ>!Xr84GE6gjGE=E%ji9E;Ml%U<)v~w14K|>YsMHZz1#+tWQF7_YZY6LCddpLu5|n z5q?6!IeR*FU&)JLeG;~;(lv(aZZN_%e}sylE&3X6;twh=>i&g6nvRk(eYIHTO`b!C zo=#?yhWY#JID9b|>y{rhR;Z3|ga*a<@}^?}PJzH9n5~GCO_j)_dnFe2BR}~r5eKAo z-zdX;jcAD**`5IVWa}~6rzg!3wQIxNFNSf7?^+_b+uI*Yfh98Mf!l#q-44eiPc%^R z^7^AsQ?VDhW+FVzR9gtC$)YhOXP1`;1=M)rFz&cUB4t2K%fSrqr?zCE;L(&k2a5eb zyr#&7P43TdN6ecH2G`B z>J)o`*-AMPHuQ;^G4g!J-qCE^>Jngi6rnAd^$Y|{Yw14C5!u628b(y5kvHZ}OYQ#& zr5#;s&@qF(0)UQO`BR2Jq>Wvw*3U?x-83VH3a7{xJm)etZ1C*(8m$5W$+B0KDtC>i zj_`)5G`-b2Lty7DD4lQ_9}_GDI74>IROr&CJ++JU+WT7PAL5G3F?sip?_`4*|Pr*q@Hd_71FHpuix#TFTF^t53 z(Ras6>RbHjY6uT6Z)d5U;)83F?O!|j6ed>_T=6LnucdcHI3r@4S4=TNlVA^i1Kj72 zFG-dz>bB={*l|r3)gvFf5L+-Bk~TD~k92!u%;k~XYRoUv(w?zpI#Ef%BU$GD)X}}^ zQ4&dliuv_T-_lc-FHB+4es=>ve=ByohsDD?lmpJyYL&W&Y=@n5v^&-!4tI~{_y@0bgFxNe zHzT)nm|}ZXODs$olOOlfsmzaj_^(MLHvnJKZF7GI6S^rqH?E%np2HRWq2Po5;P((L zK|l1&^-%L;F|MANkOTZEy=qZZzpr&^H>})_8uItljC;XzFmP$uX?hZ1KFCO@gn6e)R_giTu`?qNRvH(v(?zkK-j&(siZODgi6Zfl*K&ZIJGOSJ z+`0C>V^ES>3n;1EL;k$N_EE&hh3TmhpeEZs*Y*ZqjzH9D)J$mto=X%?x?Zsk4J z2fr4gtoXxPlT(=6;|C(3EhW@k_*#0bqPYeZo}K$Mr*savj)+s~l4T7QZzl~P40i*8 zi8(OdF{F@4#5^}@%vuycXSz;FNdRW4-4D-A`2)97*=4WwkK|_F!th zP{Ci>P++D9(Wm|9Ik-&(g6v-UL=vf#5c+oI#2~KdTqJy&6rTVMj5O4f7>gUzV_9#n zVo_wMADP#lidG3UNX&<40WBA6$#dk)bvX%96+H2FMMaeXn=KH zlD3io10PAu>yS3g*@c)F3V48zF@XM&`EBVEt@D+OjI0$BU(Q0`c?4d)Q8r%t^dyAz zv~1+d5p?=^?Ay_Lq(LV=75-{j#M>xIzGiN0Hh^tS&wguXDYAh9nz7 zDbyN_bk;7|7jg5A@vZoEdXaTJup)S}`T4flW>4<943s437j2Y&>+7G~pqW=Ab6tkw zBj)lan*@g8?ZmR=`skgHed*Ikp5lWYfveF8pKUs3xsZ*S3~Cvh*xe9%4O{m8SL#^v z7Rd>ahMx(WWVyueM@+v$jvGgmQ82^yb-D}?1X;}TVYl5mj5g%ASV(41{2dcs`>nyt zBE>;Qo-E+1EM*k(Z%iJRovyjvZ^2V`MAiblsZslk@{RIPyhDJgpG3^G!*AKrXwY7m zDK_)z&q@=PfE*jj}XcCcAtwQ-&f7wyBucfdu@{y18qVlSAiBp_oD4Kxem(~ zA$H7QfsU-D^E@tA1@nex>YfrUOR3Zg_t$N8N5@k4z_QsE-fDxnQJO2E6Qi&R1K)9g zh+0*Sj0k9p>Cx0cO&X~$DCASBY8B%cOU=u!NMS)~ebqL)r|6ySe2&N z2!0~kWmB0XW4o!eswhGph+Tw1VemPUz`i$UG9j%NNT~Qf7RL^@yI(yYwGZh65p8J@ zD$ISeD5WX6MKREw%i?KHX@}+_NQMn9%#9Ae(dj-ZN^nBqj<>U+b}I4@MPP=vWV$J8 zKed6u>YC{=@xE0kTL6N8f_WjQRt09|3FD+`5N9+G2vO!5dGVgW;K9uo&vSe0QD=U_ z2(+`&g2gTWDIIB;ILB^6UkPAHsNt=`$$WR*Ku6PC`L+AIrT8)IQX05Ikt{iKz$>mt-QjFdfM34zZ@R8Uak$7@q{Ur`INvaOKuJB>gF+QX#j z1h<5Bz06^2PwPUr^et|}mf6fN?Fx9lR3%9vaRL{v1Rn7z8@TYe3b#i#kO;Y%1~e{| zfa?i`t|xG_me8Q^wsDE{c=Oiq3y@zbE< z(eFs{$$$-pqv|8jH?onO-WcWukZPw`eB~45GMDWmPk^Vo+dLnW(~Q{9Wka!QRm%RB zxis;RuS=;-efJ`tb_1?RMhx)su5Bcf;7Ra6x_6cFxX!^?1F7x`@{!-)5u(}HlQDTR zNfXJxZ;_Ngem0BN4YZn(fbPg&t%gLr;N221HLrtzd1+i(LUQ|IXMyIbX?6ip4BFh` zA>Thptk$xWCNf8boS3S%wggCI>x_k^jeHSM^IH+BM9gsyIBD2Gp?WayQA9$oPJ3GDzm%MLh0}1eJ9!uonHWo zXvNH2-z$^9sOTH>A`Nqf`_{+GyOix6I|*pVTVz3Sj*8cTDYKvVHTvW+m`??KOU0CW zFo?VOw89@w&4KALFIsyEws<~ACx#l?r^(N&gKRA_%3&%aw5ZCRu9b79n$RpNBJ*Gd-2Gd#jiaP1q0 zdZkKx313h{1U}ymQNAwO z3Z}v=Hz1tcVo<*tk5s);JT2hI|OH^_f3%FFHy&y`O ziB%#VoqCt7IN-{OyZiI(_anT(M}LcIsLnSTr_@_+%wrXvL~80C+|VI6mQN3U+FUw8 z)q&EF&|k*_i{$#^{gkxPms82BqnN&Kx{Tp@NRy{@_{AO*~47*m7Y< zHas7eSiK>jVMvsxxJJM@;70~C9(!6z9`~`~c!8%r`H?F%?jCM$UT@oT9O@p$lw@G? zoKZuQWKd=wZj`O|J~D2cULUHtLV{s)^K-Ktvrm@F#tB&Wn(s31L9)c)I%SKg&Txq# zDh`_-qxY1=ko-l5lkuuyH|*gp(wkr~K$F1Oj9Hw6 z0$O#m%e#h`Y>t4q6jACn_K8IpaPL2`NAZDso5W1QAk$ZslEPm|iz9CzHVBq4Bt=V&{hol(@A8&RQ22%j}zkQ~XOW+WU2nMeF{ zsFD{~&xCVq5#qmKdK%@+i*HNEom8gJ>B~^DV+h=b!r1sInFP(_bp~YU`o&wOn}6TX zR1%D77Oc&(avTO(R5`7Qt?jZV3zJ`$H(wNvwbmh{#2fLQ_z@_LLV#J6XluIy1(MvO zgc`|p`k67HjO&YgOp#%2c}+Gx7$G#CpMFv`aZ`UJ#-PfGzxSR-wnujniQwHNY$dk&V#Sdr;5>F*Xi&)xS{Ofs>+9L7kK+M0 z1T^jy*dHc1nhr93Qf8C-ob!v$LE9P?X=TK3_-I>SpqG()=(sLjDSmx$*TEW$sYI!v ze`p>E6+0U#H?HRmByga9U13pRkLb^qg0ru>VlgsO&@7c_$^u1jyv8MMkeBM+EJ@0j zLZMg803*T?LNu-EbJ@fa45fROr!wIpCa|!Lm;?y#h=X$9lqHuMAmKkt-G^!-?HJ_l zciAD%FD!Z5F+Dp*ugc{)U=kY)T<N5Pi zb!K-inUVkgmqx!pFDoKcw|_Tsj6v|gja@%0{Msaq*y311*|)SL4>65P!NC4RAKUrT zVI1kL;b&JS(TdA0RI@jOZzu-*nojazw#-{M^xumHMVEZcTS2%s{@!@qW$MH}DX`d%Pn?gFbro;A@NGaYZJhiJ<` zYi|StRh70^fOeghe>|CTv!{y)F(F@eT(q7LX`*7!)lTMw@kGA-IoG&VbGo@php)&^GpP$@I^~f`Q*mb)xj%c(V zjbKBs79w;cU%pmuPYr$XQg{D-2EDngSup6SmbyS*w7O6qK|c(10}LXj-JACZ_s0|1 zp6!LCDq+nr(x1R^?MIySuC6H!>Cy3r*}il|jb=$V>ND!Bu$Hz<3G^p#+2(|0I^`sF ziM;C)P^c-IWvNEnN|6ciG??CxjC$R$)+Oe7@hVNhI?xLNmOj^nuf?Z2XC1BP5Q`%CdWVOnTbKP&5A77%~oqV+`#EA*z-sC5NYi0A10@XZ!uB zO*TEnunlpB2SRfasn4EYvcitQnI#{rShW|4o_8Ts!z7Y!vDVZe(TSc8B59t!{Jrk( zM^O71c3Yx$@&~yn$5&ba@;)QB76H3|@0v+3lQ#TicayR=u`$@Pax-jaPb7ks>T;u& z)21l+z8(dE5~nFrfu0#Q)%{A~ssYD7(k1bC&8*nFYGC)^bE&3d%B@79d8^o+dy_$| zbmknQc8$HO#$5Dz;MU)Nlsnnb8U?n2MX!4Z7Ndsp?Q!Hd}N%@6(@)byno zMj(8w%B}f@+m9Xv-(Be2w5;v+);%`+HW)H@D+tJ8#o`g(X4LgU>G`Xgy+e zuF4??TW2dg^nLeU&h0w@4(*#(Pro~9x}TXzxiNQK&~^2(a;e$1;idP(rGYry4rF5~ zRBdt6YlO!F0|Nb3{3*280v&*)3P{rUD&eKzS8?X~;xwH{^X4^WN*# zZUe8u{1wD$T5ayYN~i#Ln24ceq#FmMXN5I2ppXuky89J>AVQn$?QRL z;x8q8_yo)P(~l7&3Cl=| a`a)`w$UEb6vf?~_+QVOiyRhW|!2biFE>q9| literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/resourceowners/wizard/selectowners.webp b/static/images/auditor/10.8/access/reviews/resourceowners/wizard/selectowners.webp new file mode 100644 index 0000000000000000000000000000000000000000..2f43e000b3e649ae4488444eb61fa3609f6995fe GIT binary patch literal 11896 zcmZ{Ib8u(fwryZ2jytxUbZpzn@AY@iJ@4LIuipM^*IaY2Rb$LC z$E>wgq$MPr7=VB@#YL1fl(>k@{=OrT0p|kK5P~{^2-vfwOOufl6%o(9c?Q5oS~`5< zF|Bo)^~S!LFA36a7pe4Uz6fsKI9^NMJMbCy-VGk~?R%{}O6CdP7&iOu_X&Og`PKdi z{~CM(K3)dcE|ov!DKyaIgn zFNyEbci?Z2zMG4DCxNtY)`$FEK{~;1A1ialvihPg>2LAp>ifPw08f4kfbpJV@9a6h zP#@j5{ozX@#iQSS|)+7FYIDl(%M^5(i4 zXd}uyl?8Q+0$(RrsvKHYTtYR32&O=VIW=1iFBU6z54!O@g5z$Tw-I=MV@-hZ1h}Lh zB^j6uEy`D{!%$0~PY5PGG(2ObUz1a+#;j3pbZub_fL=yk#1!ValT73#v(ELdIB-%h zKKSUp=YKzTVoXR&_H0CpXQzl%$CGaSFMuoL$AAcW6Nq}T(;DW~)10@@C==$b(DvK+ z;^=W)$O@F#3wZMo4lxEKUFHY1RH`lX{hilF)ijWelA7Nb0K4! zM=1$}LPi%-a7ESeRqmNoU~(D55Yai!uP#e(6(X~<=td}>s5*!B?UV>?9+OKEgre%~ z|IbG^5CU`^{1iIZXnI?5zCx#9@~mAUK?Lobb*GmsAepUcUD|YtAIc!sVo}~ZIcgv< zrZ2RlpmI4P+kx^bT_gtF&#uL0M zjlC~dehTC|6$H(EU{M7tfOiPBYIBGY+=P$8LBB>KP_xlDnFx}qSdp7vZmvjsM~Gfl z^eNY#P>xLN-Tr*KjX#uxu3h1Nv#qe4Cr)B=o^1`m@Z&05>S?^Q?Id~gszgbFU=Y=< zIK@({G<6rX@d?Kqr1wf?9$i~1v|>g?kcAizMgWlRfvx$brH=iB;EIUot?>5AxOU{a!vK)44>0M-c&&wcMi?(yb~A ztnTG}IN9yytjPJ=T`%yn#}HdH!$(VldT7gnss=0RY>e5F{loy_ot!fm=2AoN?ZBVn z;_%+e0OI?tjPaj->z6&w&^_2s^k$;|6W4dk5bIm%MMx{{DxZ14iu_TNm|nvWde*Dm z|NQTUywTdByQ3p0kj2n{#VbEqpJlENJw~Q59ElSuXE}!;@UeP>#ygX+rMP`}x{arS z^x`7boNd-*EL;hS`2Vlm>rNS6{vP$@xr-7h&0lVjs&U zs!Ktgdu4CP0vh1WSkZ)rvy$-t5b(CtSkp3VKmroM;(4Hf%NUm$P1a6nkh{jO684H> z1S)w{X)G1Uo6&alk0~uTKASKtC7?EeRIR>Q*BHI>6i1JJyO+=UeRjMx8VICzco zd#}#UB`%s~b_7VpV1abn9(zxcm{#&}U~E5UL6ZI^S3@Y2|HqyFp~{+z?~&^U691}r ziT{6C=8XlnrO&el2NAk<@c**3!SJaYzlp!+Rx`Qr{kPGLdOE%3-mGh_1*lsf{I3HL z2w8hRXmOEXYJM;M+Z6vf77~AN@Ytiz+|&eEJ%cCjuT}m#`qw?Vd}m%RYwUz*YW>sD zUEVSRg3UrS_1JbuD7ULo@=DNG;W@`5U#f=6OCYhPdUhK?UjB=(@`K~T5?4SO{7(2X zo`KXFzfc-o*X_H%?AMz9Zs=d^3S*V54vovULyj4qri!D#geE7niNRJg(bfvnR#F3- z!>fq?*2SIFk;wv@F)qs@!ouZ;2$?OhuV#Bu;Xl>8f(bGe%c3-xO~EP72A3BXFp;?^~k>x?Qsz;kzyC?IO3P0t;2ErPxyZ-cNjHw1_z#)6;2 zVii|+VuSa8Nd@Cf@4v_9Kl1=VXnW25Pr|UDt$+0>@a8~cw7R{r7bi&x`U;-Ry!d}6 z?7v4xloaO;y52 zypg>qeE@n(B0Xfkf4FtXeJ$Gfzi|J>{4cz~DlT#|7GuWGk;+5`I)m6+YFU(8`eTn| zh9~;(y6HwhK;L`n=h0+4!_xggz{=1kAXLi;-#lyZW6d9S$mXV>0l>W(i&xs>oo{## zTq9Tc508KWzvnmOeWA7cR>a*s&%#BmBxeRi#1wip>vbNR<>>H}JTw|0M4U>&Uc5w! zqZ2a35o%;~+O(x54J|uPqE*RgkWNXON(ZxS(R4IT?TiRyMlbj0c1|>bQBw}v;zKWN zUU>d9wX%Ls;a|mEJVV8(!^hp#z9?P+M~cD9r((iAgaWd&1^?zG`Q^o*j{n>|WGAh;d|8}Z3X2OGW%Rr8FF*<*OnKgeJd)38JSm~- zd2#HXI!CEy8^Wfps3|kglKobEk~Rk1y$wGS>@bXH+|U3Qg&c?JhI-_1?FB=2RMh`? zApLztd{3XV*{Ww?6~s?FHuR;*1LL(x=b#p(Z~b)jNBVYj(fr3Cbw^y$dXv*Fa+{JP zIw_+C1-oFK&gJompzED-jojF6)!MHVKCuaD{1{M3R|$Vjd*IPj(cQ&tFYa{-Z zcLptv0uIG9XEcyM-6n?%PJLP z{d2!|%P*b#j^FJ)GIp~mqm6OfH@?miEw^QaqSbCa@es!Q#=Uz-9KH>&z5^W1wCh?b zqGSv{OyP0y^Rw#^N3zbT3zK`qdA}4{etYk6R5M#xyC_>fpywpSleixA2h_W7(jFk+ zyjP+&k32emWwlM`k-0h;;l$l4^P*<2$+2vU79(O-g-HQ@YYOy2v%Y)4m3W*dpZ*BT zSVgoaIz=T|WG9wdApP1aeP&od_kIlEo%wvWdOWq~f|Qt6SZs8sW0V@X%r;ok)-M&f z>H9D(hr2*Fc7hQFyjk)u$%3w=jA*uQnJH#vC&`_yA~mz-8vG)LD-P8A77r{NX8avi(XFJFmhs9dF`pb_u3=B_V^FO1PYDd7jNu;V`&J@cv zG(y`sK+LQzw%+r9d@#{2l-84KeQJI+q*`RU8gR@7X~aj=Be z7bbJXhBPb=Uk5n{9V)p^M=jmA9xxynt{r|@Dl(I(APAnGV68{6@YcW+YmT3N`ZWxJ zU^le90NpvjFysXb3Af*g4K<6qt`aOjk|ZYI{ZtA`h1*d3{Sw59jEY=_Iq%)Ceo1Bo z>)0x4!h)lI{xtxcbA_#lnQ<(*2^!KSw5Q0cw?5mi&dW?^XZ~$Jk?JYL)tnkqW1lm; zC_$4yRng7cW}pa4v=MhZ2V19x75l$Z8Grmly20`9$W`__2H62-v@!?=@o+lpU8KxuvwfY%?R@S*8 z^~hAk#(6Rk_Oc@6{iW!$oSx4ZK6wAcedvU%!k)wSu`bD_-V&X+;4r>?FCvETFnA|T z4OYT0oaY$`yBHcjQ8OOs+z^*AHb;uR9yvJrZOu`O%j` z09Vv0)8YC-;2V5AMc-zRWn=$@CFDJ&*O!BCpGZ?-WYrXLZpd_3X4s@L!kRag*SffK zsZ4Dk>D2C-!#mrC?-Ar$N3Y>l!TfroykZkk;Jmy&@W&GCZd{IkSl&gSX;q*^1O0*`hl39<(9c=26L%reCp#>+Mgtv&^n0MNR z0wXKU;V#6dzt{(<8OwNj+fO>>l*P51wXD;sH<@&~H_#TJ+n*wY)F^qV=6*|o4*S3} zT29~k4txb|&^+8gKO{AtUqU1q4q?W^^C}eYRQG>7%)(xfPQ$)@AV0>CYUJQ434O6Z zlR?{RZ@V=GDWc)sCL3~$0w0bvosoSXIxdJIgC{?-e&XqM;q`^vI=EQ!a^yWH<%W=2 zN8`O@i=TlRlyoZ^v?ZNY8=x9MN;QjXsE83DEsIn{Iza)~cgq|CT%w{xUZZGyM$|PT zy4KGml{y6gqn%^U$-vXL2|%?O`_IiSRYV$S~Lb-0)TPki_d-41> zGB>}H?14l_^UFF___auc z6$DhV=LnF7%sE)_jsloHcDof#^txmzGY0Fk$KghhXxQHvHYpombiAIWb*NjhzSapk zw`WaTZCXh4cnj7x$lBUnC4xjXuA$0asf3MK0~T`v-}AYncWo%-@zcz9X(=HV;d>7W zP~S#HC1NwFo;jSG=QIExgG^e!YNVE<_1dg0Aw4o9BMR8W@0 zi86upGW*5HW6#G*$Sb0RSwMcV21F<0E+SKqsJ&=YSa`dAnW1j3;1zpf~JM6ca02`Zmv2`<>e9y<`5EFzGnFPNo;w zsEIOx8?Z_)+^1)yNdQ$4z(MkME7;7>c1}Kh0c$zLo=%TYGrY{Rm(5TDhAqskQgjCj zV|6|sp~1Y)wbT34Wu&0dNuE^_T=dW+Qptf;>x`}qeSlGhxOsOP!%HpJ& zHGwMvCmd=GNWm2KWN*#bqs^V7zBWRwy-eMrwr(8Dj|?AJLQue?h1>XO!iiCx-JO!% zTRR8eF2ZJwyU*8I!&gcgT3~6Otcyb_FLw*Tcs=BjFAuo3wA^@h-=_$0Q%@>2V0IS% zMg0f8=OwC5ti{c<(V7j#s3VdJw7WE_`voDrqk+`6+;PJ{t>Hq}jL>y1@SD4=d}~Jz z4Y!A+IaUs+CA^Uf+HcC0IVm0?=EdmMXKIkmu_tsX!i5ap`A_$2>;?bYLdyO974;B70xwSy_w{d`@o)mk6Hlxe`e`W5 z3kI*C#3p$STD-$9J~U(;tC-%Uog^39#oFSTW1FN)VV}t%Py`{|nc;2z+3nTj`}ux9SUa?<_#|m^UjK_i;0`A@L+5^;xH9;) z@V46I3|)#dOdzM~_2Lp5d1!O1o7+n`jfNgi5!^!pvl0&eVWR;V?OGYQ;A#m~tSIr?+yhcdR>q;Jz~v ze244Jz09;=5SH;gOLPNk@$XJV{L#X+IWGRl0t@8#BvDc*zAKsZqkgI@ijjZW`N?u1 z2^h)nsvFJg)CyRl>+vaQ7h@v)qn_3?p${Hou zR!A)Iwb%)zO@JU&kAIPvO_{st)4km1|L#|H05plbWD2Tf5x~d^Gp(=JxJW}D!zmo= zG3Vxjpp>y5BxH4Z5fc}1HMJN!8N0nBi4V`}bSw(Pc*$1`?^M94PZe!_`tvKP;$kS` z;;CD&ViX7%s;=G)MveGl%GN?+Czl(DWu33t+=n}!D{7?Agcl6*_0E$?3S`8J-Nfg; zZv=9k0A5J7;ieP4r@hc8(d;Et9Xg|z5yubPHeCz)g|rZ-R*7rDQXDXeh^VviULh8a z-0jJYfiCTnK~1+nR9-7GzG#&^7MFH@8cWw@Z_&G^-z-m|n{X9EDqH+Qd^*B|RF5x<<(~(Z^o55>?f(^pe3} zbno@MCJSvx8L1kX&hNrp$ekTRD?@7wY;x424y@vbqS^Fn>&=j>bn@N{APg zmjM2JSEE+{Y&M2e6M`@xPd1fGs8Z}N2HkUY;brfH)>0&~p_xBvpw*smt;7BfbMKS( zgGq()*`Wf7&ZsAwOFL9&_W`Z^adr>;w9MOn$`?Dvq!CMyj-SUmDHaKq5uu2&x~@1> zdTQTtO&|e~kM(WCpao-{;r9-$bXsXICEcRX_C<~!xgVlI5D2@O0WhZEMBLM5@A0_| zd`0V%V-O9)2A*2eUg4;(@h%?4fFY*v47-(MQ3ihr;>yn^u|h|7XWDcx>D60bb7a)7 z2vZck5|kiVG#Ds~zTrFINklkyDd=_G_as=)ePf2WpanWcl)>ty%3CRL1vkas1naKc z&kEm77!w*QNT5wE#I4StHr9j35F|?7ca0A%8_NpMKQJ+rs-rFe8O)`F%EY)#DO53h z+X3e^Nt#R$Ce_jDO)Kh`KnM1GsX8BpA2tR0ezV{}O$}~ROw7k)HP3bmYaeWQVPBnt z@Xd!zVlU~hwS+^0a?8w!r?LN*12PYNOceJ_v4@m&4X)s zr$f)9Bgc0?=C-Zyv5LANyqv$ddUHfj7{R#TBxgLpLPZp$bp_bRT^?3`6IL>|J=4W&}zia6t9$5UvkG7#-wdjh1 zPIIJ`>yfz^fzCG==cN9GF_9oEL$gUy)Dv*krL5-u0mTBxa%&&F4G zIu=Ku;-a6xMTWsOJ&4tcH3JVGOA7u<@8FNw>K5*dGb5yJm@}8pi_nc;Rhan`%zo!v zH2)jpAdC}rXmmro+ivXf#XZqDV-Yl>9I(i1VCL6=8eIx=QnWzyLD%06w#$8du#xY*T}Gr?N{tj zAfa~zud`(WO6Lj%B`3D>O2K=FgQ>So%AdJ{)++NSx=+u?Lu|#eZhhGL%7k-@F(^r+ zayHEeOM=#&tJ#vJ{LSKhQxWc~R0z3)P$Br!dAC%ENiHRrt&asyQr7}!Ap#Tr#f|`t zG?+7G;4(7!Ar=~;Q;H*&(G7ezCA~LM?U+7@_q2_66q|<~Zd&lIzwh_eow_I|AbCv3 zP6dfQ5RxI#ZJpXG@HHGYjtR23JPp+di4HzZ(5h3+w zbpDg*S>D+cPxAm)FNH;0;UKdu-rII+W2a)1VToHV{PngvB^e#y1R8G^Fys8Fa)5Tz zzF!yNxqIS!tyc7OUHqulGHG|flAQi)TC*%PkTKCkL_^Y1;8)=bI!Me}E*J6)Vr>JN zxb3({+IcO^$ZrK0G0~f$g3d;I3mo2ZxN{u|82);e3o-k0oO1MT-6NVK-|Pxc-1fh> zb8qnp4+2F*!jW{X%T%u;g08LG_lJphNuCkZ!7eM;a;G(JsXk8{Gy>UA@iJe;H0y+` zN(UIGg5 z5Z}X=KZT({NcaySg+ob8M+e+N!rh!}2_4My{J1Is-3pjnqG{!7=I#B{HT>5oG4W1v zHSE5|z(uz6$?Jigl5c^17IHt(z10TumnfeaS*9wzgD2h8{kcGytjc#CHTO~62E5Xx>U{0jRqpV)yon7kb~`l}2da}$5>+D$S0-3lskCp{{XRj@|6 z@7P^Y(3=;ZH2AI^gzR$0&EvuK$`Bs+nfN#+Hexo+@iRyF#j$G7Dj|RtujLRyWiF#Ea>Hura)WMGx|9u1XU$p(MvImPHkRtpa=<3l|0#wYi1_sFL@$G1*fN z5O{B*-as@^Z%~^nOWQArjn=D+`4N7POnBJY=XX}OU5~H(!-G!xS-u) zYl0y@wYOw;8f+vEY+_N4aa7q<4u^LJ)t(K0xC|FTX2)Pmc=~^HHDotdCtvu@?noso z_32wlB1^sxeHbp)K9giTlMjKwqtWFIi2g7xa!$c~Y+o|2O2xAcX~u?$XCZbQKNfCJ znlzrWTgZJ52OERZxHUEA&y!03e#26^@9?ds=<1S0+Ft`@b12|QpQ$A+snxy&cn)H2 zSm>Xje-LmaH+QZRPTg+391R}Y#v^?>%_g(`HvOM7h zhRxu&+G6eT4*Sv`H?8MfTJ;|Fs$cLZty$Xu<~j->%vKM08)vAVlFz1CYL$7*s<}#u zPN_DKt?U!H)vbXL7saE%=#+ebOYHjZHp*xoM{y}VeV_RPQJdE02w1{4b|_WqKehCs za$D&se>lKr1p{`_3D@4INlm@GV-FjT- zTCeWCmgI4zBy38LoR_dXf7enkqHieHPGN2E-h5tWW5_^|jW1YDnxxB7JKO!BlRw|Z z+_0bHExG+(zRV3+?c9Ok$Fed{00II6Q8hBy^B!?m`T_^)6;evSu2+GRVw*Q2eh6tk zk*BQZqLOEVdg6?6iV^~{lb4A767&3F!feeyl7;sBtcOpg`=3p~sIs||39RGIfGe3e z?BHtR9e(+elh3-ph{^0(5KX3C)`96VR*&qfS70t%?56Oj4IS05!(MPWK;NFgqb*r9 zAE$^og)tEnP=(f1de=vD}rljxGjvF=$aa(ntUR!`<8y#BHvn_V>499_jb zqZJ>JU@;6dRnd|>+Y=S16-$NK+V8EpC5JPKA^~OCZN;luQxy>_xJi@}L(ECg2@(Z7#Zc zyb|+}G;k?XIvdg+j#Q$di{_M6E65m#9f*d}V>1#WSes3jEC_}Z{rU&B*|k$%SE|Wt z2M6O8ifu|}HuQYp8~Y>gskhY4*mWTil#^#}&29Ln5bH`NeL3RQu@Pa+ zIGvL1y&Cja#93Cx9-k10t${eLFe07iV=fywbX!|~C=JTh^pj$Nr~FXXhVbTs+W=Yh zGKf|*kQ+rO*bvt-SdJf1WxYta#AyI9t==Fw9!h)n#dOl@+%nVXi7KYjn?26jC*E+N zgtbgQ3#q$_rs{I;NGO})#PxwxJ|LF4ic%KRHN@^zQHmdj;{eJjM4H$Wg`pmw#&*(QnjnVD>}J`@qkGKBmJuB z{$gUENYu}1Po;apb69NT&hx6_6DiI_tUSMiRnp%wT`@m-I9V=^&qT|}X_;Qz`!B4+ zlEUwjXvN3k$}Ot_P7Ga*co;VwsGMGR z?k_Af`R+m?S2S|=bnSM}*fIKix!rT~ECObQy;;tFQ~Vf}qgQF9Nur|xMhsYHU^MUZ zR5v22!#E3OM~c}iBthzyMryGqFkTO2KZAL0HLo0gg4@F5)6|jz`9Ud>ie#5%p} zdR3pHC`AJvJc=8V4)UID_7n5G22AF)vn3)duCH14W3huAhuu5A&RpJuuvH=wb~)5= zsi3Kf8IN~Oc#Y06g{&A3+Z<+TBR9x%wz7o-HrSPejAr%9y)xhv#!jScu;}K;b~?YY z;7EU=XnDgPAuHzJziF=N)8aj~6zFwB9dBcELkSPGDO1Rn{z=dH9_Bvy+Niy=2SC~N zo==84R2lY~ST)6=Z;8>F?_1B&Jz9~ZHk(pEv7jb}I#HeHClR{NIY#~@hBKtaKO9{< z?)`3dk~Q22Nj-dK@EG}$p`aDJQ@Eo!j_^LHPr8E}E6O^be9n2NmkkY{1WOLzwGdQpM{VW@bfybjqztN1$(K$lXQKt`zV2pVu1fq>b+mj1^6 z$3v72Qq`@|EgyEst{tPQ{i6Ti6M>B zq3vo11SWL`AqkJ0T$--spy?&>oyEYF2vP?xF#pwVSv$OW7y!o(R&`%v0?cBR0i4d? ziX#WUcI!A(1Wy=A%T+b@2QXE5K?umDKZ1rqUSsXl;N@h(J#&>@)QPflVa0IoYL2ce zW<|KgN%ZUFunnIYP7k&NIBp5p?_`OjYPrgBEzO+??sHx!Ta4_Y9An@%M|_5tJo22K zD5l545kPIsswzJp`adn~0?S@t;Mue53W9^krH*dU5_axTm)P-2UxyHWp0av(LCN*< z<}67nCkI1V5pFsV|0ux_IIDX1fcV zm;`B3a~>dv8};U1bWu{CgY?CU;fLKnT`$=rA2v*$nu45zTjjzRB32fZ6kq}PMY5r)mXB< z_~r+A4EUkab z8yGk9+ghmh0mzK80IW5Jd!Kj1$2bNEqusaUHY;yvD3oc9{q4je;BWR=&R%t}*xnx* zQH>SzT_}?#Y|_C0CYNo37@xo|+H9z`5aw32$h= zd)*{};;6u}rycSD=BOsoYw}AqFOj-FpgGO6Yg&4mpU-H8M61eD9qkpXxR~ezy;8rI@jz>8aaU8cd4Qor9GY6!);^;U0P`y%f*X zOuV3xsWY>B54ef>E$45U=aXy(`SFXVMgbbj8;EqTJi0`BoargrA_b&kCAGfkagJ)3 zI&R+wXb3Rm8lCspOZj*_&wkPH@~MeSKBa#oZz6rPJ^UmNukv$=hgL1qq~B4G^vq+u zFD?WZg5g4j?dx17=d6uff!g;nOcoXSVuR=D=;O0vq}-Fh8{;L$y@k|HmUhqIizv%zm5Ay3$L4|Q7&4d%cF^e73*=xz?XI~ z5@nPmKsY%j}7 zgNs&?mXHu&1pqX~MU*s@xQJQ)Su@dss|<+?sa>G3{3)(zka>1TmxTv#d}Y`dwgy_}W%r_Y>$>=;!Fyub0|;!Dd65?aA-$Z}G3mr{@i<6X22H9kB2P z`pfjw^-J+Z@B!Ee}h3t#C^$UE4VzHv1kP`7Z;zGG>ijfpLg+2acq6gSSd_^!DDHX$S@W>3Uk~$Z5To<&J|D9YuHpzbT2S zvbs1_eCkk}&!f0o{!t%$!xH2bXIU*K2J_xuMG~|w8;zu)j^ymm&xq( zC#4(?kJ0%5^=5Tg!-ffI_Vj701bZkEtemHDSdjwL4CE8DTBzsjGEY^GZj2wKOo#tc z`ZA5fUe>IMurFx}*s4=V=itl{aU=;pMkKSrqEBn(&z;zwaG!$jvwxv}Z0VPBe@dZlAorZ*4Gy*SmfiP4%ONsfL(00C-u*c`Z)-$G{d}@^E6n zby0AOZa!NC%02|`<0}M_HcW%#2MAMKLeXyatLJx>eMR~^zQKi77-l^#?T#yn(dhrc ztCsAI!;Cqj{1Z-XdK}!4Wq8Rh&(E0ov2nQrO59evHbc*3zeU_`*wD*7`C6QHh(6Dac^9C|{9^g1Umc)M^iyx+6ws9c@~DQiMj>R(c=_=_s?^-GDw(O}m1?E0hru&> zzAtI-Eaw?xju8P=3dl+5G=QVmT_mzlQIja*Gp+}`$m~6mOcv`kwN49?_H}e2@#oxh z#p9-~KwrE69TBnolMXkzO9ZgDuJ46)%8ud;e~bG!oPwN^&ni9OtK)h~!Xl)X8`fWO z7>X(LGUOT!`vy~Z!D;ni*LtW`(_~=p+4^_Zs%866r576i8^>$Q>_KM$HihEp--*~p zasPnU+h2t2cF<+q|`-9x%+~hpvkzbV|8kStE*E z5+a2atf8_*p(y^t*sB7eOq@LJ9my$bV(l+b;ND z0{F=eU+2J9eL_C{hW;P2_wQ_9Q2PJy!WydB!SrjiAoPLke|45*Ouv{Lt|^?vBVjy0 zbic>y&x5~rtn7!i?yQaUwn{5dJw0%)Km6XYH4r*@p9fwr+rKJECw~s+KVnE#+u=|U z{EgBz2g*q%os$NF*+yT&9`Zp8a1-rUyui zf937$|E2P-28PXj8`3XWJD?$)yrVMObnJghDyl?IVfQ29^=#malzL?U>3R|t6Do-{ zdXIy-HEE|RCHOxOJLUUfpgLfQBa8PHkU?oj)jGlTrffBNKC$^1zzFxRHwf!-PWL1h zEI}*#r9A}tn*T3<)5^iU_-Cr;=!#qzSpV&Ly0g|an-WCC5m?cci3}o_Bx8D3$;gs! z^b((Xk^hdz|IxMofNDH&CDXgc=4!di-1EQ9gXlj9B|rA@FG3xDw#WSsZ`+sIpd!(` z@tV(GwfT5>ft(53c;z$;OJ<#ZMj`q-kd1e^$i&f|m36bN{Q4IN|MA~WJHpwrO(T-O z;NPA*NLddc>AtV(>V+ctimEC2l^#)Ps*%Vgk7CCIUr|gRd%xcVLlss2LV(Ft1PXU8 z0(Wx6F2k`XEB{v!(tCX7wJsC{4j_9(ni*!L;i?pMBI5{B>OomjH#oh+KO0ZgxgPQX zU$>1G11zxPoLT_DP9VK&?L%sI3yFVM91*+mf<(>tubgo+Mw0Y506?4Pk3ApTMf>-+ zq>B4C7>5}<9-;$$?U0vW^O)$P2oSK_ybTr+#+k2c^fcnQ-dx;;7M8wc|Lx01wJ#>( z9?##q4;N%Y*<(lhuc{WzD(_9(bP&?E?qb~>Gusn~>WMn=5Ak}DuX z*_wu!eOMdPS2>}|IYHwjxp>zx@AvJrmRQ*U4THly<8ac-Y$VU#->V-#q7m*m`pQ_y z@k3iSI>zmJyjvH01|5hWtsx&uRVuGet{`vmK z#D$j}fpCQ6{6H6FTo&|%oAfndN!dl#j-^*HtjHwsTzSGavkXfG$k{KPQ{vCowNa&s z3T!Cg^}vsZ-TRAWI>P?_z4?i?wSmH{?G}hv$xfqa>Ma%-CrPQ0&nj<-Mq-lc(DTHJ zEYt+$Njhj&^xMN0X|Dmb&#cG?!`&|2;_X+_kZPh$(vpALAx)^aiyzu!xa?m+b@-1j)iFTH*g8nvdv;1Y=)OG0r-R57PRny@3KfHLdO#9uv`=+T8l>YXqWi5fg zeA|rhgPjJ&9OR%*?>}%Vi?Fqm4%V+Fsm9YV*xf@A?w5@nz}&E$!nM~{8=b;R+6c7$ zx>LhW5XKBxnlI_JT@`YL>KIdHdt&xMsRK{@*@pO16VGBH-e<+tAT7w%a&!Lz$9PcC zr<^tmdKE{w4}aCW$yX69VZjvCx9;(~BhSiY)JcbIK2=M-IQ6pF`Zx}yJuOjJ1Xx^w z-Bo5<*-)=uuA&?uNKilp*ukXvp~p}oR!c)~Oy|t}%gRMCZHgaswEv*fvI*2TlOMg5!!Xy=_1ZSSM!4ndvi zzrXpQR$?S=>GY~#-xI{2EK+qX{*e2?G&y2O8@1^qB8rn$LU`mCRFXY)F~-B!6I6Cn zsrQy}K%PpH|1!x;z~D-{hdH0{X>XB`2j5YWhjnemEi&1kNrIq-Z2IHBXwFU5 zGE8Y+gl=EKJ6I&Ig>SFHY3-|1lv&YlPzY6LUn$sywghXEbNtZL7L7;Oqv&}TMweWX zHiFV3;3P{q0h`u3HFJwcCHSPA5V_Mj4DCjhJhcN`i+M05bDFNvtW1vMp7agzrCzaJ zHUJTw^1=P^&Q&yCZt@`*g9O$Yye5h)MX=XlFNWtSRz?(uh%rLnXbwd4%lEAN>@YQR z;|E1WLF~h8#E{VZsfr&0Z5lJwBMw51ouxy42*7db7mz2I9!5g1;h@_OP-lx!N6ZJ% zrqp&-V4&usY|!bk1_8xG6*u?kF9GPHT#ovWO|@R0alb5O`}Bf(KAp!LlwPx2*dP{#Srsjazi?ml?r zh*+PbDh-p(bx|CrLGcXglIW$bL=%nwo?nA(eP4BSr}`(0csx+(G!bNi5Dz{R0Qw1p zDBS7fPOEv~4f__@C8%o|8O)5k{BYQ`BNG>VaREMC?JbA1j_pRf+^)ossproP$~@?I zbu7eD4zveobxV_n+7G0q$EW3lB_dj8OLe~)yo2JRa~nKuD#tT!@;SQIC|!bY3t|LL z`5p*yyuYyx**5YHV3^(?osGTr)BRJewdMASA}(reT#@9NNz_}RIx2BM&gY#~ra0|D zT}7AM>q_yD94#&t#Z~%w1EFP4#qpc*D_vsQIt}wi=diu0+b}Xv87CnS@7;qwHNurR zL`fE&7}_fOZ&O)xP0$$6HGUu&?FSxj?LBQHfs23j3{zFrzSJJ%mvSh^@Bz$mPpi1#63FJI(~!y%f1}IxekC9 zr>@*xx9{E4mnbXprC@J#T^x=Jj4gcFaGqUJ%FU_%FnBXc(f{&Q?&Q}#(9iv&`z-wT z%)Ag3m9|f3ms0K+R8G5!bMZ2^Pk4(hcd!N)-9<2J(@e_jNNhLAa!|RMO$wxC0GpD# zI3#MN-=!mPJ2&2U3P-yoD;64kL8|PZL{NzmD*Th@~RnmuZ0SCBzcMQz`26MnWNZLn^F-bA{_q@ zeU>6oKxk9aIV36~WWZz%&j3S`l{{Eds?c97f8xSD)D>2HO?+)^JNxN|5+&hM__I=s zi$Xn<6zO4Ks&woURA++;@)2sW9LmgA0*yOII-d4Faqc_4^ftqx^k&uOnJ z9ir!VUTWH5^_O{a&@$-wEk=5L!9UtSz!@RAEBOmZ(uOiHC;1>q0js?1A!Q$lEjgab*CI5ZS(%}KniwVaR`Hx9$euIWWp#dvU#raX za@@nr??VRU@myWboLqzoykka_5x(X4R|c-P|Hdj2T>Z0nh{>IRit!6vw_doI+^=|u z_#DDKDMn3>Mc;x>oDM%Jger>G@i>>V+v)nh+Ry3x*p50@V}ldfL==Nb+@v$bo!K%lhF z6+8uN$E~+nO(q=e=TEDkW=fBALw!=e@DJc}VtT{ZS;2jjs9%e;R%Ts#{fOy2lu4evLt0QM$=z7R6FF7+ijJh4^u0gbx(}7 zv@Ct(A^zmu^-x!c={&oItZE=K*MhZO@itckk^>=XgK_Hb(?x-pn&H7b#wh_Wqh<$# z^@AA@t7c8;zAZ5NOR!Aaa&Mc(hPh$M2&a1KY~N|dwnxTDp9!XLf<~EUY%iM$E-!7e zZRG6OwSguDc1ced#%&X;6=}XU{(zPX?i!Te=Z=Fc8dm}LkXQg~pzN~V1Mjv`(0Wh< zUE-K`NRcAr)DkHu^*&rCmkA_VF=fUGXtn$1yyQ`5P!EzQRoF- zP!TqsO>nfrWG_;zZt(0300h4c+C|Ezn3fmMZ3f_se$8wtKGU>j=SyC`a^Z)qwe`Q z#mwCt1*P9Rj9&W@P95n6lFJx^Tmi}o8LU2(PRa=`wz^hSz`Ysy-D+n*09SP5Y9t%w zs$IYj=0B98w(z*{O`RL%fcYklC~b}ubzt=#qHG$cbM~`4E-WD@S@WBH7`a?EuH7~2 zofjV6whNQ}oec=40ZUQ|mpk#1Rhc3L0MXXXKaxQ}oqsA;gG@B74s9zuk+%6_GA4=A zQr}-G-ZU)Wch0&D8NH=<0c-R5c3Y{_{TuJEZ4wOoL3iH@Gld#5)D1SJztO`*Mp#JY zqk3vQueA^gpfi5VmCN0aZ7l8_>pfG&fVWVvSa|7dG0&zjmCYV4?YDJl05YbAQ6Lo5 zZ=q6K^-1a{Ka7fG!RVXiwRBGl?JnC#TdEl-Y`XFM6egj=vMNn^qA#5onZ4v6?an1< zuWu@X;nx}8W}W_#jV0p+W1BZr@W3^G^Wrx<%TlE4-;z=*>QqPxXqGV?*+x@{NqZxx zd6n8#Pf?{rw6m87CZv2kv}VB54{jYitiJ_`=^!FeZu;qA`ULJBPoDQo-?R9S_eb&Ej1x*2xrZ{?G(HPL~3<@-HZ z)sPf64Iik<((D{t$sJ~otjf{33rQ)!*e|4^6V4YyrShSV!uSlH#D6ex?Qto4(G$7e z-U1#U^HTh>0D%4FviLdH(>DKkhc5t4gevi-vChWLLx=0d$9MKce;?3YkbBcNtkk2CL2$)qy^PW(q6JZ~RKLpIji^{sE_B7T z1V9MYhBiH&yukPFpY-3&V!KP+Ihe-hwBC9QjM#~TD^fcB(M^8E=U?H ziZo`r12!K0|f(Mx2rf?^%46;49gv$ zs>f5oRnMOA$aWZGoG#08hLe=kF9VNLP#fgG9oS+MUsIzk`EdicB!w(D8|(?8Kwro} zU1+$>Xeo~I=0ci#m<1&jm-a$%3acdYk|b5RSc%_d zzbbJvye3uf&;C&9Xr)7vWwLZnu$=9cH#8pzYI!AR%uec`53#()8+?8K#<+GgKXgyU zwo>Z3RruuF%k};Jx^}*Rqm(QYzecpZYeJ`-adE9tB!En_;mY%+if(Gbc(r^|Q}C2R z&lGWyCvALZq9LqBp=BgSW@KCaHG^z(h110MVjs1nQk{FB#n@0A-n3WAZ2G{)K&>O_ zXP;#-Yf%Z_rr66|LO~v> zo|D6@x?FbtP zMZPNfYk76~1Hw$%t$0bEgy_*35%T5H4i@sk@#NVNy65Adu#Xd$mo+_Zc_wFikqD-P zZeav{e>UEEuQin+EQg&>NOm?x9V$i%Pm4?J3Ypeim&VKDZ)@KteCLlBFo)RWJbbk0 zzYIm<=W=x*%slS2-1ln$fUjv>;(!^r|;dP4yQiE!aa*_}zK|bF@9eSxfZw z(Sz2dO}=~zFmS&A{BU=|y;9&{Wga~uO62kDIqe8M{_J?3TMwe?19pp6Y_F^|0!kU> z{BXy4@`^!Pqr0=+1Y0&;F(xwbe=@E*OK~)W1P%DCKK9xafV{M?9jQkEr{f<~&^pHC zCBEx|31OpCGrm#{HXwXxA3XMz&V5ZJ=I^SJ2`eui!BcDJ)F!WH$qBLKre5llmuLqY zg1mSv?U(Z94qh+gB5))HnCjD2o<|jTEcX4ZapM_0=Dh|x3>ikFhDJi@FVcP&?rH{3nD_-w!v`ofCk0jp zT~_WjtZU;uyZVFSx7e;jQCc4D`if?SA5|rMPBm=j<7+wxnbL|+;| zqn-$aIFZD*t0T8(xpmGsE_A#Hj|irr_+6h-4?c{GEeUz&@WMbNeUxvLRdd3uc+&&`fFZJw0_v>kw1p7Y2djIq zQt0_c4at<25F&&j?${~;5>}7V5eUpc80!|ZYX za3yDTY_8(7b(szma`^M^M*&o0K5SCP|=kC$`5FW^f8B^T%14+iy z=T^bHYXHI@Fn_vkvw~w_;8j%LzT~RE!k|VwX%pD70lH>pbx(U)Nu1->p#ixv_$E!- z;Pw~qo{l5;52D5Ojm+;zkwjf>6s`GBA=d|v14WLaV=w#LyHrq(Pi@%q#??Neo=p7i z_E^F#36ObsiD2SNSKJMMU;97dIc%)_M+gpVXsm7Om(v)r;xJUAhnZ@SsC2P_&`c~t zkDND6Q?4;7RBHSwrXFLt3ZyA_0_}25F^3M(A-%>Yy42Ig?^owT^p6(BLfv+wh7xZ) z_MA=VnIzG@4{B;N=e2@V7Iu?wDpfi=Lu?!(8b9pdR1t2Qb`^ z$Sk~NCwBYmpgOTUsiHYrhHk7h6hk#aIwG%sx&bD0;XHhihw%<0iy+)e3la(!d|q6$ z9U&p$`L3{&(NlVt9ecV|KX6B1!g(da~3Z>)CC|xixS9zJjeQtjY2U1Z>Q~^43XHUOLkJE_N(J`T~iwJ&g-@ zi*o`?+XiJ)@ht2YQo0sKizsKZi%_%)mQpwBM0JaWgO~>AuaASdJb*>?WwLw-TAw#r z62vimn~>bBM1?&jP+GExG1zot8CPa1+gtaj8{opUfBO5z_PWm?x{=vah<2pK4&#w| zRURLd{EG~K@eVel#tji&?Yad5FRWq4B2IJoZZy#KXD1f>7?A+n>m16Gg_$b)u0Mf; zwhc5?fyhYIV7qT?ZN?9xNl!*~qQ6ow;Cd~TCAuJxvAlzHp?%)6c4LBF=}qfdlH~q| z_CMdeZ5q4RWqfp~cMCj3o%M#E4xL z_eQDF>6-o)YB_8!QJYzG*BN+m^AejJ&%bTHmA!-C-dC5x829{P8e~ab=T1cyRQQMu=d@ z-g#C-m9>RyxT4~~He6N31s%J6(uiH+XwFWG#_XOky)r|%z`C0Q)?!&BRg5z-k-rR zd@gnfV#^sW->4+9lvQ=yv(8lCjU6bBt4K2}-vWhMc$Dj`<{nD+&I%Kawc`moRLB5f zMnyS(A|Oj?_6mMrDk&7Ft&6tT{G)J0a)_qP<)~8;`1J^&P@79IB+f{Vxf;sB6k*PF5sBX zjUW3?kGo+re2B?+En)MKY?O^$OY*gRtw#rGN&-}$kMKQ~$++63o$zW~_XH)AVuZz2 z1y2o}AwTEP%UHzrpfD4{Ht=P*&jyQz&LC=a_h>&QcCDEsH{(6Hxot~Z2ZEXOVvYpT zrM(nm#g$`h3I@%?fQZe-<_$N?DHQOszLtHv$T~(iTuwZEAXDYgV*rKtifq21fIFt~ zOQB9bAChMl;F4F^DWVCo3%Nx>#l%B)_e1)mj>I}anbfTv&IAhS<5$@ZOc2#o9I@g< z7JzTAbR$0OD+J;Tn?oQ=j$pBpSvIl1KO}B{R0GDc0b6%NrdgH;GV|IagP7gu7s2hr zKVORRusMw<7}yDh9}Lti__Cf=7LQ;Jgq_&SqB3 zjz<VQkmb`)hnni_R zo)m8LLsf|NuyE=C7M@CFNQV`=qHRf&@8sK$N7(1+1tANpyypR80x9v2fi3x~cf^I_1d>NpIo8ifbVV*e)=@pmPbMbz=v z(nJ%d+zmBo&JoR*DR(K6g9x9k0o<>ni9xpCJSbZ{s!(HIms>_|gDK95!o}|H$zgh1 z6e!jjjz$u^Aj zmI&`oqOJP!)R00+U4uz)osDkK;z@#m_MhPf=24>6J>JCT21hatEP0&Rx3*Yi=cZ$v+Ch7PN1{#}&OZ`6^UxPZ6 z5RbO_@THxi3oR3iWryo;ZqEUd=Gj1t(;9!-H7YHi(agBG7lo^d^C(!G$h}cBrcWP( zvJPVl)cXj*_4-D35AT&3h<66;Q*A2jY_0vQ1VN2T85=9y_;wGY(`7wvA1sGJL6slx zlNajs@Y_|G`yLGUV+zp?1tJ~*VNjq61XD{(F`Ir$j4PYco1QNsk7Aba}VAN&Xt)R zKE34k*7q(YM$hGT`h?2c$^f>eYMht*=S+lYQl#;5;A~JCN|pHByt>0BBPG#1(|$R( zM|xpDSJUyvGP&1Dy=@eb&WY;US`q@`lt^mkM^1#)FD`6!@-#$)@XA5_gH}dQYK$vDu#<2-VYeG2p z-Kz!56z9ZSP){VZGQsf9qvdOYf#_KuS#PfF+*zbdRjzt&`=UzPlhBCgysXIUO^bL=b`J=+>8kj{VFbb%fA>H{8kC8E1L& zITI8F{t1+%+cFOKy zx~DnLl1B~SzN7`K3MY{*T;*b=-Ewo)F1;tH`F8M-H&FMO58mXF2-LUCKCoba4+&HT z+5_`9NDr&&qkmwPlMN)nms~ft=vw4vt@pj72}(kM9{>OV;bwus1M)Z!=Qjv?_<>!= zD3~&iX>)WQ-49S-#|6R?g%3n}_3ugowBCZz=xu%RCe z9Y;YfgG_JPZZJzHDbwN*lHY9RIn4q`9|PmDm+~}~>2AX+g={?f_Cj(lR(oY65#_kX z?)+IuNyVwNxAngc&NNiaO`U3O;UC&)dDoo+d!E(zy1Vi}tP}IIrCgV%SGv`D(`EV4 zA~-^TDkE6XlbO(F3b1r7V@&xYuZ+1Fp$AC5T4G&X4E>^= zABi4|e>Q@E8&(uE<%pq}_9xS4lC0v~gO;9QEy|4vW$toOPz8PLf5cP#IjVJdrXZP= zUuc!mAWluJ`Q=?l*;-)BQH|m62T)bm+?_{<7|Jy_la31OR~H{br=|V}Cm;Q_iOOTbTqAUwr6Eg0DSPF^E#^*%3^n>TcZDK&jA)?~3l=6J?XD$k15Hn^q^ z%!)9~UNu*Q^KlLf-`z=M1sLRfkASZTfJm6Pj2=`Cet}duxXx5d8a%;sOIakG^7%oy z=n`A&KB7s>oP#b-4WdL-__1U#j&HV{Mm7++I^_BXPJqM1d>R^vXI3tn?f$+1)+IpG(7J4ee-xj&3-5mors79TVvJM zxiV(z&p;fjhln6P-*C=zOh3rVk4#Y0F}bQabPthvM3=7OP9?ry?Gs(-(4vSVNA_KL zCdlg?I9UXln3=b6v+SP|S%&Up z-%Gt&n;LEM;@b^ha@XjR#OuhoE2xc{mvd2^0xo;Z-_e;r4 zbF9=Mb$WkCQ#1TD17*%su1j=FwLu}xsXAv}@1 zu6k=Kt;DTglw@k}_S#2U^{)bg-vs>Q6nN83iV{9RPsCTq4?A!P>iEv^nqC^jem;F0 zct9#9{8ZIQmQ~3$$*gqipRE7@68`rKRX7E%h+|6nWpaX~h`Fc+euB>!O#d!JA6NMb z#tkF!F#`+^ZD|kDt8n)zwB^H|Q z=MX4NYZd_nkl(0VPPm0likyc%!^S{S^LsrI>0^SJo|}#`LqWX?&>_(Bl<*QCd4)Zn`p&(m$7abW&?-0GEJq_q;wQo z;Td)Db|btA8fBeC)LS+}>1}fMAQ*-AD3K;>U_(Fy!gaCaF`rT)7NOmMNma>0ZMAY$eDm2uN$W^$1J9#`UjlIkKBQ2NGh1iCHX3UV$OJ{fwNRA zL`ilA_^Wh#)Pu|054F7eYNFalFJY1l8$M|*I~>r_I}RElx|fxhuIdiRa*bN-K_am) lkEMZ`Xp`#Mc{dXHJ|p^&Y7nYc_~!=(9+271qyPBg{{c_zdV&A| literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/resourceowners/wizard/selectowners_2.webp b/static/images/auditor/10.8/access/reviews/resourceowners/wizard/selectowners_2.webp new file mode 100644 index 0000000000000000000000000000000000000000..e84e6d5eb0395166a4322dd1826820986858ecd4 GIT binary patch literal 17094 zcmZsq(j{89xy!cAUAAr8wr#t1*|u%FcG%t%B=WXzc( zlqAK(dWC?1)J269)D$=g8~^!7k^{~GrVa)r1L3n}Pm?4iE+ism;Zg{Ik2JUYlEq~X zT;;SXaT%@TIN4q4W9}Ar09g3`eMH?T8+haMh(7{Zk~<#1&12XBn7uar;4CqGGHf6^ zAg<`I%KQ1>`U<@Ve20G*y+#1iFSI}V${`;K?soy-ss5LM_g9FYCV)Hu(9UsX4**#8 zed~AlL+0)CKl*KbLH=y|f4l$zPA`A~yR`&mfF*xIUXY)TZ|#??&)br|xUaca#B2Wp z{tbY~%gWF0Fl5%x2mt46t{gD-)9)G96anZpUbezvsR1<@a`deSQ%0O0z>e5(1f|F(bRKlFF_uJ{T5A^6#S zw|~|r+@0#H1dIZ}f8ux50f3*~ApQ>jpPqGoGkySI5^Y{+mz*y@db;HXRS`1s_ozm z0b!$u*eCuoe%_J~jmJ{ku`?JC2FajOQ|K?C>;g7?q^&5h^QG~eN z_{-0qw*5HZG>XWkuvjd6$-j_EuTJRySziI_&ML~J6JC_CT1t-AUaDl&m zx2sqxG_iQI_a>1VLoC_uv*Ue9?_FYw<_PvHO+u1Tn=-F#I=C=yeKFkY|8?mSy9LR0 z%T8YAPS@JjkD|nG5}SlF!S(a^o?zYfA0jupbLfM2csy6e#5Qa^9C}a0S~i6&a1q!r zU0uhu-$A#79d{b`+l!=g$azOm)hYAwk6CFx3<)+XqU8D1jQ>qH}CdShC_-B zwd0o;G;1%^!&My7)WD7sF7l}p;}eRd&p(o3U}1ja-R@MR+E>*=I+~zWJ2Q$RebRg zL&2BDQaZ3EYoYF3Pl2G+3(B``Az1Ch=mKu zpTo+#M2AG^9;8Gr&rzSKQBUm$dT~s6`IOWFHB% zx0Uqk`kqlz8{MPsZ83ajON&lv5ht|?0Ks(Q%l`9-JK|l<7od#(a%UckB%5Y&`W3}=dRUTjHRp@_+8%}=qz@hOyQ^YQI-UaMQ`I_lL_RuOu%%rlx~XkCWssuX%ysNP-G^r4fbFLpyTAU2;Vnc=@1#^8M z77l>G*IrSGY|G%0YLK=}9yVX^zIzeOS=W0)#~24&T?l^5yXRGcQ|*UEorxP7Zsfy^ zHqEt#^EP&nCSfK^lry{i6mES4Dv_dFh&#xHip-EQ)u2Yq!YR^n=%)j9Swo22e0F%T zf&zQtzuk2(Jzb9qh;ocD;4h?T=PL*$`J8K8*qN~Id++~M&phEcWix^Zt9QlDE3XPIOW8FyDQ209b&t)&OV`fG9*W~}8`oGZA z73#vA@1J8G;m95jO3}^zZ@~XIuxeQSC&%To+a}`wr%FMj-W*AM2a}x7Q${uF0*o(w zz_8C_8+)#;cXx|9&8u6cV4Eg;VS`!$+C-S#Tu}}Z8%kAL%=+u=c zW`GF*ai-%eCQ6s^^TpT2O9Hv7Zh@~W7Fqn$HtzxB;0~R9JSPg?@MVIWV-Q=eM@Az# za5Wiuofs>R4OvF_Pe%POYu6v9u?Lddo-t0BU=opEo6HO*E^^UyyR?RrT~j=_Vt73= z!oloxjC;WT=!5;!{{6pXRBYj5-j4h~P5~(vv1v3IBB61p5Nkw_{4o^uN^wx-FYD6- z0W!4z7k&QQoBw81H(AVH-ha50$I(W3039k6NmIq>wsK4jSInf|+utbZ>Dyre)+gh? z1dP(JAUaSnBtkF}`)rpf>Z3Fd>>7geLHT&@1gUWO$pTPRCY1gU4*cKOjbuFk44U|VE-?-yigM23eqPX_d@>_9!t8ie9wxN*vWYl2RB zwPYe(e#ieq{r`4?z>iEun)?vED8D1z*C{&UBW?5Spl`RYvXZnwA5O4M_+Y5-R`maT z&ip4Hu+XVNE-8pzYd}ChfIq~-uqwwZG=TR>s$P3-^EaRf5>Lt#FqA|W2-UPKld2zS z)E2;zq+4k4-)%Faa^i3N4FrbY4nhlY8JqA`IY z1)w*wLqLrI5)!?{ou6R(6~t@=RDDw8Q#M2Xg+38l;--IoZ(EAWE`% z>cRN)!^{=q13WfUGmM>;+C1nhj;wgJSdLk{!@J$(d@1LHCZ+v~y8Bi>_{)90)|^ zDR*3+9v4!|q??&ZT=naZ2BUHuTlM-=4WA`JQamMlhgMnXgiFsYk;3Us^RpXtN3RWd z1CM4;uug9DHeTZ8v-&%<)nLQhg((dCi&er0X1TD(eadDiERfv+q5+#{b?`UiDa#mWpUF!$i zC~OSBNEW`j3n7A;No^%V=ireof&@i-qH;iUgkS*y1@KI7rYGVjp`edNet^APXh0o2 zvT<)QNQEnz(hg%fg8?YT%xoPTx7(WyR@Zs8Wbeh0dKt7R+n?g!Dc5Pp*FYLLbpW!{ zFkumtDbnp0MSH6u1>dl0#*#FYJj4zoBt&)e{(jWKoC&_$X0h0xS~P0hz)dpjK3-k< zCQ_|1`Y$3W4q*=S5r|WbVok!|N*ZT#ky!*7fRVI2d3WwVBj~p`7}3h($3}lJETc1C zqnD`+OL?1vjW*vC-I$2)oJqQFPoqtqc64-*2{s$1-mc~@M8xtvfONO2q zhb&~CvD>XTz#W>?-?O%4NnNbK1cKs`kW&N^un{SB(c@QEdMK?zGpT&B61N;gZlf&g_b=5n5P-{*V`hs4O5>g*M zUPw(YMNexusV%=3YB<4vk=Y}_c34Hx-Q8FADpD1&|FQAsOWThx>Cj@tBvDGI8itnz z>}BVIE{!Vivt{)cnQrEWru8vklM{m|pw9)DI5Xd$yN!74Qp9P*wvCZ(f5qzO$q2B~FJU!=g`SH=%Wh`c~h# zE#mL-JmWLwP_>H`BN{&%mJ|!(lT_NtlUS2#5%j&Bq6kiOPGwVOk%vn-e;Kk!@rRhg zt3_*OFyR!?4uvHB+4n7&cm*!kBKN6s{hNSM4G;N59^+V&dTgzLy8NVegmt{`VlIsa z`(;3Tod7(=ldjko7;P3dyENmF_o5=Kt~Wmr)k#WVzzqasMHY+PpPao}*JEJ(I6p;T zx-4v$%C|y+B;ha}o>{aD{21`!{@C9OmuL|{167BS z!bXvxvQ%#mOWSy0_4Zm(T&JVYDN_t05x}3n|El6HWmylMb=~Xf|CA$Rq#(L^?gt>me;)xh1g^T2ZD0-#* zvMe*lE4W@CiB#?-vA_6c*T$T562iV^KPZ>-kY`#(mt}GEDiYsqw`H5ahN-$jp>D*s zuutA{KiO7<2Ew`?9yaK)vYjTXM3)F0T(IX2$dnLszAq&icI zRBBhq&Y6HWm!&G4|cXM#Em|&M7 ztKPa z5g+=E*kYQKKQ4FYKg}2Isd7b|;>nLD2Wxs4)i?kqEA{q9QHZO25Q}nwU0k}>1Atw< z^zw9SWu(E)qn&-5&`4_vst_YXfXC!aW(k!84F3qcpEGPa3iw;41Zx%WAg|N$l2nB{ z*Z4D-%_)=eM=GdIknu{EGmN`LRAuIwu1>%UjuA0 z#V~4V{^fqtP36*iN$Xp33ko@akaFdg>e6nWFy3!5v|*_{m?Qw}i( zc}-aa6+f%AO>lPhJOgxmIhG8t_u^BTWa9CS!$fVEY`PHDz=w}#wwbn%0#va$(QDb0 z$taQ$eR7+_WrO$=89Fx|evZ5NdTt^B6fgGXSsF%sq-HQ|(fGC;hf$^iy3!uov_=`Q z%pgq(OK0yu43xccR%4L2D^3gII359*VdD1{vB=Jnm|2kx_-Q<=f_Kv5k363eci#p; z+{L@yGRJciCSa*)+8e?Vz&lF{Ff8%z6IN`0Q5p>2Qs|tGkKCJcL7^NBQ+ zb_qES*NrsaPH+k+yjAAIp4uKyJKIZe{s6ZMC{@wQ3Eb=ELnH9V+K^I$Y%wKl1HZ~K zs>!;$wV;t6oM<4Z5VNU5nxsnxU>4L~t~e{i4x^2e3njT1Nl;COn;95a<_J%Xn~~~N;k_4iJKw5 zH{|{#g3V0Uo?8>OQMmM|GA=IRDHtQ!#L5HWCU6X&9WF|lrLp1ZWL%8JI4Gw?L{VFF zCu;GV@V%7x`nyvs2VbGku0M9MbmxG)4n)6SvuH}`glLCFEdYZ{mpEHg>sc+r%tu-<=Af|Aja+B{Ari#Au+XQ;iA?Kub%&LgeeF;J zT07A+E*F*V-8ynmJ0S=8HeCwr=lA?rDC6DfPi7GGm%5UL%_8Y-!@*HbgYhe00jgae93FZB5Vv4!v*4BaxaB41Px7tW(Q@wkW;?t>rdBIpIdX}!IjW}^J0x`gXMFX@paGy{I2l<=#JpXeHqp5 zI=tnc6fx`SJrjJrK{gRQpOq9em*n^$i2v(8#K5FSGJN<&2gvF}=`rTcz#Q~AovMx% zYeaI;DvKih5108lM$CAL-1H2ab%Bpg(hqvHr(}QFDH5yNpw>PK=*XW-P!35UO;17Q zxd=-yNq^i3j80o$s9dGWU}=PUhg8V)joIjk!9?^F@g|?NMVP4`G?kIcK61vyc9g#v zfW<)^@=+}4J0;hceuI^QOhP8K-0u(aZeidRMg~{)3C0AyCh_0-9`K?I64Z@0Qv$w) zHP{q4uQs@I)!;>uZ6p}_8Co*vR92N#6&GLuY#}_%SW~L&PL8nY;ZQ)|D@WF}^b7yg zxt?!Lo1(I|)nx3}7Pl%=T4rlXFMipEd^9yz?ac$+Ec7Kf2qZiTQP>o;B^v$aM>7|PRMK8%T(TXd7_PEIFZf6>4i*)ZQXe+e`{i=!GqUR5aIbd@WgK^H)%hP;r3MD6le5)>T_j(T97*kXa;Y??obOfwSn5;9Lx;o@x=`$}b1UI>kO|Jh0qvjtCc( z)%Ij&+%~OKHZl2YtcI@t^m>~Dcx=`v#X;`s2l6J3rP(TZGv8=rt;VaF_$@=N+mEWX zTx8k8ZSKf@;<8^2&Ci|CAtz2}#Z5KDDS}(I$L>ZhyI_@8tfl|4!o~6mdhc?-b!_jv zbUm4D(=Isr+g~_sC6^49h}^_*Bzw!>$#1EU{BuazKvOL{aqy1gOnLCs`DJsTa0Diy zS4M=LA+)<)kv-nO=srqr%WGuP^e#SUIT$cw?-n2Ag0N|;bc3*eIReApfy9@3G zAnId<+jZVWL)CZub?RJagipR?=JA^p+F}GtWp)py9XU@9zs<>PZhpMS!w=bQ0397l zMWMgyOl7>J=ty1}U);3R?>l`-Rh8#)b#*sy5lFMORH8OXh%33Tp+@ZMXS-O0ab^jY z-5aM!Aau+t&jfUaag$FX2NNFS^7KL|l@b74&C~;|tiJUf;Iq(Mc?>e$x2`O&kI$?O z>c(eyt~uvTmAqrWHW_FoGV!a?F^WqLZ;z3j-^bqq6*(t(G#=Ua{8@wOE)&~0I+Lr+ zsA{O~P(Tw}?C&_2jtcI%3&G#p(dFrKC&4oz)iR;Ui@B0NId!dwcpoB1O=HYNz3M0I zH7hY~Zl9e|)z+R*LGws1C!q?oR(Vuz)CBRXKAO^~zjD!!l3l3k1CIZA>dkg^_(0OI zOpi*^^}2%f28ydCt`tnI2C$BwWgR?={X)hjlMPL!e%{Vy`795M;}=`bA*J^VX6>~J%*pDWBkh?9%d&2X92?Ct@ZJ1lP5Z(v~Y zJ?=;%$IY`BDg5NwkFyZJUJ}Jv@*d~aB_MG&SN&}%H_Z?4+MrB>MT%?&bbA?ce^cWH zTn|@jGYqfHIlstwMHz?2)&Sk}Fkz-95ur>u&o$2Tni*^r^R`;kd}DnOO^OqAex^j+ zn*~7*<3VSui;rJdCfxKd*8l`Jm^UrN!W37QX-z`!ygA;rKqWHNr@wkB15wY*uB3r( zvga2(xxlCInZ~({>N>)vmIMdd*ThW0!Z-39cbV2c->do6@eNp{romhAw3g7ekriJO zC~y=pH}iw~nRl7)S+#ZBB(CA;iOc6KLNiqk>mL|u_Q!~tl&~2g$mhx68^j_PN`6{~ zIClvz=!*k|lrnJGUl8yEgngu3*d*PCY9HM{1Db68x<3zL1qzt7oKMdrH4b5sz>8Gn zh+|Rsl~Gkk&^1WYMPxy%=SU(nsUMNNxpW*SE7KtUEh(`~ekm5NFi(T^M(^jM2pwS7 z9!~Eo#ZSFcjN-5sQdp-YM}k5&fBiPH$F1JMDjsB=*1lI^q&s-bFg>|_pkL3;Cy|by zpxMrC^cvtg5kHSzhV)jH|MDK|y(;1jE0v*-r)=Wqb!QrCG`~wexcVqi++6gL~7H9_tK6hrPwb%QmTgK0*!$452tt?FNA7z>B3f~w5Pv6b*pj@o&DsSIL#!)Wes*!9A|~} zZYC|a@I>rm%5zn$tQWW2dIE(}5%4AGmk2ScNb38kQs@H~Bl%2_gN-r1cgo;}h1@Mz zpP&#UCmTB2XsT-H(Y-0wisp3Q9X#6fYIgT;fsuJW)FH!4(7N@uI4j1(92*f?0 zk?^q74XsRN_Bk0^mu~k=xXh&>8!IgO4`jiZVsrbt6_lv&su8SBas1YS_#A&q2OTZs zZG7-xJ}Ok26Fr(-zNC`+iBkD|b5;Y{12S!M1FY{i>%mX$(lPVoaBo2%r1m3i;NVBk z+DScc_J%#_v6%A~8I!1WaAr2Q?NMkYT zaP*qP-T4-`(2K@#EfBb1-@;{&@)84Xak=`5JzPDAtuV$zS!ULGk!5VNc z{z?$!UftI?ERs{KlQMXS&tX$k6J!Hm_5jp#ojYj)R~H(!{okEiI7|IUqe3qA9;>_C zT;(NXKeI3za6(e)vMnG{$UcYnsEnfB|I|mos&5nrwM1Op6c^tztb2j}``NntoqG}$ zw%L;@y%@7&8i;d$%k+e6yiz{vbt*@9p=Rh|au%V;wg5XqSnfemGj^Em@ay)txOJqx zsQuI$sBxL|I~Ik7xUJ>n$kFwcExJhuLDhgk)~m4l*HNlVQs+~B9Qr<$Qie7fXu5Rt zk=LIPb9*cpWF7Z9LEH?5xA6?_iy(n2r%P{(afQL7;lkK zmhR8uuIG8iLUzfDUY4{80y*D+bxz9hdmVES=Q&OAH^#kqj>dfKlk$?o%v6fy#JCt|{{mIiay`KI2bwMrgoRcB}1XK{|@&~w%sCPekokxTk4MR(yLUqI&fEqQUyC_9A zHkswa;3CSWK^(p&(|ErZFn`K^!dF`tRcg2b%ZfszbvC*OokI_TlCjLy%r8j8v*$Qx ziiVWb7boBL8b)Eb4ek=HJ6$n8fk^0^tE~&LqgzXHB=%56xa|k0Wv@|Ed(2!pX*Thf znD=tFR3mqvx-D3_?vM^zmncLWJtz+gr%q6+2#u)izw(EEsERR28{QrY$1s@cZt`9- zcWT$x8CZoV*k*p|8x}YWJCOqO#D5F=GHD&OS#hVtk##j(!T7YE{B`ZR4`eSa;spA7h^0Ea<@tePfoHH6zFjw(R0`~0 zS<1Eo4qB}`VD7TOQbG#K|FjOT?NO&7i8AEC(>$Y-l9>HHxgHFVZTg$zWV=1yF5syD8hA!#380r)>I z9%zj2iK$V6_fNzBy34L4K<~Z`i;(wY|yOC$c}_dZWGnZtoo$bu9$Pwip$v)1g>o zj~W(CWY`x>0bNicgUKizo?5Vct9@F0F%5)Q_VVOea@R5~uwI7jh%ZX`1(fqRK-yYG zHJW#a*>~oA!8=&@0-O9#HUBK~qn8EV1sOAn;#7$!;@Bi|SYf1)8S@g>Rg9(v_&biC zK4aJiL6=y|E!y|&ekLLFg9t>CTpv>*U1z6VDlf|-c`Ul*f~@n?k7vpe=f{a7lWxCcDRjI@oK6KkICLJJ;GFbjx-Ok5LQ zE&4zz!}`vQW1xo;uApmdTybrg4o~Q1*oboxedN4&xb9?|_sYn6RZ8wrkpw)Xr?vM5 zLCmt@_(E}iaHWe~y}Y7`g=h&s-((bZ^O3W`QBf-+m$_WdwVsusMufT(1cyoK@2u zq*$#gqd)n_%aka^&Q7sXT4w|X4vbt{+1+S~p&Gxw*hhdI=A7)4aKBM*QgCxvah{ipL2d!+d&j{IRB@J^CG?LZ0Puga}zwp`s;C}C!*jSQ$DHQl!vZ)oW6 z3A~=5MAbATO@<)Cu8fKBZagzeT?xTbit}!Y{c)zgEEj({DQT!&}mWtVH^NL6f)dHtd+J;=^vpiV!+P!rym+uf#xY z2P8RR!zyNrlUQG%hlsW761fZ5CJYyq7;i>AysQKXS%TcZyiUxU`7>dnSl8I@<$Mp^ z>uQcQa;jN7HgP?j{k=NzazSgP%7sn)QF!rxM}1bt>GRk9T#;o7dEEnczTqi@OdXH0 zg{j!5w61oanYxLLi>C5 zu6ImB@gL0!CI@q;csn-E0!)Xm@wVJidYIFbW>^zh;l7IN#_vHUz`!hnQK{Z)=DG0Q z7^YgY?@ImL3sdv5CmGyrqq+7`2NGZi3LYusZxNVbeL^Dw->`l85@u@vP+W%bb5rlo z#%VunOegB_w~-*@04wZf_M6De_U%Nsh6hOOW>4;6TpB6qul6XIaFB?7!=uO=xZG2q z>C#$+pBhzmq{gjY9GNO)u-0ks3x<9uZ_N2zc0HYnA1?wPV;WH9`sEA|KLwd2Au7_5 zukZ`F#oG;!B;Y2(p8=EQ*&^x~sGgEXX*k!-Z~!TaP!eU#O|jIx6gM_tLfkLe_M9C0 zp1&+?a3$asK*YHfTf=yNqXFXL>tZ=zapD6TG=P#5 z7x_b>xGVXsDWURYlKAj>hM0GPu8_nEWN+KL52A;cQ@68Zw2ov3PEz>eVS?<3n}^G#fvt$69Jmz2*Mg9q~~6pUKS ztrfUhC`UzkHIWOuSAE#~xS8YIRLZP|mMB;3VWZG>@iT7;}$Y3C!+xwWRCTvuw|O^wt8Xpe#4FTHyo8h0k-H;miyr1XP|C z=Jmv0yXquujMn)D)q_IcaUbD~$1O~=W&5Dvlv(-j_X;wI&FBXp2Lv9xz^psI_*-0& zKS;rnDBpNv9P7#l2iJwp@H}QU<kupSCL9`zr7zZUcxSgRbes9XFNc)^- zSq1=Y;>LYVnqp_3Z>m9QgP)18lIA&4Jjd1{%h0px3NKi@O2$``2yKDYhmi~N3N>H zVpO{{JmZh{);9|dORiRJ35jF$?!8;L-`{rWhf5cVB{CMc_lpAd6#;_DywAzq?V=-z zLF9zJ-TgSK*;gLJQf@Rf_1JlgIhMB(IktAozX7A%F9TxUSXu?J(#eX^y`B5BdyD>V(@IL3v=%VmN# zx30hFSH~5@f1TR`J`^Lw52X}py&B(ctjp^OpC#T*kTM@*ML>V~IYxdOMzBcBf&oK! z^E+dEukclwPG&+thc0qY49@`@bQdI|e1C}I!pr2DFm7mGm9qxdcFsrW%7h_Q|3XU@ zTN({TZQ+eiTLgWFt&6G4Fxb47M{_lK2#C~Or`of3g_FRj=@5G9(W8dz zauVdd7!1ebl2OkSSz)Y-5X-nA%o`Dbo7WzJvpDcR3#t{S-xd?NdH~RsljR1hI@}`> zE}0q?yGg6gH>q4z5&7I68_f#u)u`5^%L4ei5R&0}#%qy9kETwSgdW;be;bMxg*^KQ zd+L~rW9iy&tv{J6?KDE`Ty`!ZNLcKoWq0Y%D^}&EBoJZ^aTA@NH%!mb9@H@GgB)*m zbxC`7JQ(qr{w;5zzktmHGF6srNY(RrK;TR69;Q)H4L4&Cr8Dt32lIV^i9FS*K&5R_snS{6Pq}pE z@L%Qy=i5$-&NxM<45@qF0HWcK#lv73^178UJF?OVCLJ?iz8DI*n!p|t@>6a%xFZq- zT0jYm+|GuaP6E@i$7!`lQXRs>aiF}staM`9fE`Q5e=w?E;LPirz_}STk7gV%S!YTM zB6!z_(?N}6GrR*q$I^g)ZtW4f%ba`bfxg6Gs)xh#@Tv%`7shJsTh#E(_3y}Vl2)v1 z*v1g#JUPd`=@jeK@*P2Yx`9-cs6ys8^*G&Kl;h9wqR&=ob~aFY%^&8+r4RV6 zkc=05G4a1DCC(zLAENq51#nm4T0g|p@T&y@daDJk=H9?y%5{He>~{pNXoA)d{4iv1 z0d?jlH^xK7^WUtEr;r~4SjG~V%SuyB@;Rj0dmb)=5%f8N+fxbyE~ z-n7-mG{#N*e&fpDAd!OdG)8z#vNXqvAZSSDnFqt|B${i$Q8JzxhLtln-~S;wQY6*4 z9}$260WM$q0{hYHkpXj=V)W=(v)vFhoC5(vX~fCo*i6*)5n>WEM>yd3rV(izRGt@JuXhZ7_>c>dp|Zh@y1-@ivae+r262A*bX4G)ERrwDvwAKZy&^>+ z0>^d3Q=dNt|A>-mXw{!cI?z)FQ4wD3Q@Bsp!$FT4xnjsXJmR`SBEh4_hXTQOB|BGE zv!ok!c+pd}rzSxcOxSBiKie>85IqEQbvOP)NT~BKskpzvg zOeL#)&~6B~!7yLe7u9Zf9Fwa=`l9&eat#T2HPRq4jO+*?Ko?)Swh!dc8#12`O{TIY1IZL_4$J>wy!*4%q(Vslv|tyJU085zu1M)LN} zZ*Yq|WqiRrw8{$1zZLTaE}a~AhgaDg;l_!o27cqL{#r+uVBIL1Rp%f0|fzFL=0lt9M&NJisb8k8xCl|<@;9WH+w$8en z9HN_MulLfCYJ7{x3wN_@=_esA78UBML@cuNn?Ti_FJ88PjDvE4Mm3U1aRJkUcNv`p z*X2Md{8XEhF9RDZ*)rga3sC5oR%-8U21K0}h0)k!X@ z-tKLj85hFHP+*d+p!f<65H8`pU5K#Jzf8uRwp!J}j*fwqbcLjq?)iR_L1!HIW(b5;nUt zA<|65*$oEDeO`54A@E^GRlbP>s^7-1jncO>9zhRT_V&hh^lRRElo1L~I2R56&d0NQ+tyg`As1AhlE z__Z^!&y;nf=u-YMMXIXtorxW=a2rJ*mSL?C-+i@dza%^&hyaTjDQsKB4fG2&g1bnU z3uGk;6+#8xOE>KxdjTiO%?rnIuhADo#)VQ&LGREaq6Rgf+P%>gP+^WQsB9*X-n%p> zY90lNAC7wyO_q^?ER*ZxHn8BWFR$!;(VXKRyXp&!^gLEEvyQZz!L>8vc62*PpdPb} zvdJetLDD6#fAMk8Q-Gm@4P-bY*WOwc=)g{N;L%!lKX^TS{y$1EjO`Rx{DbBBe~ko! z07$CgKVSEU07ahx3V3xiamWA@`&Rt9N|suhYEvOd$6 zpGfX1*b?4hYW!P9rCzzY_p~kL?=v4Y6e;O}r?zPMk43k~LBS{CPt7~2Ar%cM(Pzjq z>ji}qi5p05jCxzkS?DOx>9g!;iNOJJJN02-@3Dg-Z(ExKy*u7cR=_Z^O6qZci=-mk zu?4(j$97@q?Z_Z=>AHWA*%M;&+T>jr{ExO7%Nre~uz2t^%&DdKCax$6Uv=Pi%B{eC zZ>-Lyk95R1&^<}31rN`MPW1T%VvP5T*ha$=el{duME78X8iu{8VZ0ckAd1K3@Ep1^ zfK0ahS6i~J?&`;IlT}(8iOwS!O(B4$L5_i-doNUDY2;eF6is_ta*gu9g!qw;>Ad&X ztddr88s{qav1BXh5g7&dTTNpKUSj7Z{6an`ivsi z8z**?Ia=wz#K=gJkq?*IdkSN|d@hQi_#9BD)g}7cLc~K}fL7CZqP*_JHW1ED3lnq18*?Yp!t72BHw8At+p3*48@oXH?(X^2%V-bEXumV%T1 zkp>5Co3%f6aKcACIoi`gch}Gw9HVC_0wh!i-XoO^;dc}u260^+Ni6N#EdXB@ohxvW z!HNVX;lIK~BZyg`*cg>tGX1VD+{gFa;bn?o<6rx3R&D(bbF@F{klWfv3Yi@DG)};r zS!Oz0xmU71TA%PrazlrWp`#vU>>l4mD#NHOHgK`Dk+s% zIf!O9&_$=jkNxq=N$k-FrF;sDj5URw?j7znvkWC$6MaayfPwWoxygD10-7}VT@bsA zFb)K?N$oZe9uq6qAi=LE&$bQ_4h~-^;|8kc)V14lD`GI)WuwTd#{~kW+5#eC{22=q zll!wqg>)KG6DWY^b&tWFt(mj@5dCFQtaGOQWc2|xR{rbhL#7Regn_EJ+Ac z`3p*xe}6R_rWZ%6o0SV z5-YlA`uTL`%RHo#m6nNICo!7@G$gU92a>zv30Lwdt4csoDkzN-u{($Z>?ub#rr=5` zi@Nd(#|4E7*(*e4q!w>J3|=2!WhLDcxU!E?=8K*;GgAR{q zlfM0K3&AqXqy&`QEsxFg%aY~oc!C%%LZ&%Lcfe0%``b+aTRw#^PE#*Xh^=WW16s%Z zoAbDbNn|L+r*VPa*Fy$yUk}SHJ-3~ao7X|31#XP zScmd)OFHZJ`(aV-Tgfi$2L>`>B*}G@bF(I7Wp{b%8b-5@U_!xHIni}eN0Y%exx+%Q z%_`X+BmoT0lFtH$8-$ROSGGWc1^*jXlqm9#h9>vB3IwF^SWrr*`*r7#7XPS5j|Y_^ zGcA;2JY-PfARKAD@Usr41}6)gB~oWXx-l%H3gqUA+Sa5ep2Pe3@CXKthJ9OXdeQ%wU zv+F+G$GfWjRrBGmnsbivjam;&OHod4j{*SD2TE(`X$a9Q{jT3G03t!lsHt~ zIStTG>RK_ojs?*ZZ%a|{XU+@i<&wY-r>Dxxn!bS|nAP(XbpJTx3$#dL_=@*laCUV# z#O|^KN_{gy5_A)Sbbxd(amjhUx*&LJd-{`j&MiMA3JQCifMQJTLa~oc%Y#Fn!=Ck< zP%fzVLr$JmV7%-8w>5XrPP4I)mXHk?(mn7B{8aM{yIkFXc|L=KKR`vGyLS_ykZssc z2?#6%CIXv%W`eqX50KJ#7JJaRGsrbM)MT^VbaQ-dg1QvBwpBv6r41??+@s-g7v$}*HU~8=s;Wnz$M*w|EiymPfv(H$*7q! z*1QC8L=FEac1lNcC9qmNzc=FN&xVX*g~bWpk4%z^_yjF>zM<%csuN`)9p_El4-&uF z`h33T4ZE(zXlC}-;YO^jV_~UU$wkH)QE)Zwy&4aXQab{bGp;-5fD1Y*3SM1)N1Ly> zbG6x7kNF#(UH}{^%7${WO6&UKJ4s6d9sFZ~H_^75K&OF>;T(O%c`cK_&Qof9o%F|XCL z5zoIIXtLxv5YQff!*a2%pNihvq`Tc+!$D|^I%d9{+avZ@d3o^j`-5UEIYtqc9`FD4LIbc?!TTveQoD?~vv){1Unw^n*e?CV;iFZt&iPXOTdCn>8KeBZDvO$~ zjmSBjXj`(VrDeTb!BIA&!ZAi#`RBnp6Nvw(H$2s&v7o*R?3}ORu74r-)r(GeMr*n5 z$|(6anSbQ*w_Tg>9@yFysFZRLT+V0@WNMCf$JGLcsQ}xTwpbInsAPkhZyJ*%SU^A& z+d!|IAxB%muR=sDoqS)D=fXDaMEgS0yh3Z$YJ(SOn~WBAFYvFsd7Lp z009soO4ea|%#hJg1~a{guLW5=rajnGS6qm*RD?ZSC?VploC)ZWudOah6QrfV z^_VUie1_O`L*J<2vd810P=^JUCKDn0~`gEV}x9ee_%$7Imm)`7M2S7rfS4uPEwkWz0b@CrA z@m@0_u;K?%TQJWRc3+LirCO%EH7Zw8^vn&ULf$XgWQjIAHk3?n7hub`1AbCH7~w^5 zuKuE%Z%m%zpqV8KP$lVyFNCu$VbIF%GQb*IZ-#Z#~}A4mNqe zF03#ZsxBdWn``0y<*msEzGK2qt;WR=d^uBc1J|I_CACS}{M<$rZ=+9j1F8c!{dQyJ zv~&5yR$o=o(N2}&878|m$13KCZNGUd1}lO>=NHVK=?oC{X`>byq9}ly4esoZd|{s> zp4!l&x!BsG;HAYoXtj!apnmI$^a{ZN?=FmePwdN)%R=Q!aSvt@w>%VQG3RrTGS1 zpI*`G-i6hE%&#@VWNPx<%^lOcHnd(~20C+Bb?sM(%;*U&Zd_fcX;dqRro=_baYfcj zCW4P!Wmeq9v>-7!>1(@q6d|mNuGV|Tcc#-1WJ{GL6r#!5`d~r?c}LzCYX~=vy#ghR zCHy+V;QY&@;)ftL?D+7ty%gey+Ww(zC(5p9+@&@8B2aS8@L3WVuPxK2MsB(d`J<8+ zb7xsB2iy(zPfqRO9JLS0Bof%oaz9+Nby9A}<@V&4I(6{!EH7)`=Nw@W;W$PZ9*&$_ z^~cZnA}a^-9}XrwB6o2+-Yll?^hVknx6kBpm{Fz6wL@_DFg8tx2v!C`dn-9wj&{^V z;27_P?8-YSf-W{278+EdC_FPR)0SRbR~?vpN&5Gorj={waK?QclGB{D?pxaKwpVE@ zLo7aiX*$tcmR_qUa=k}*s>LhySA*(vM#;xG>L_}WIwNQ6oY&oqJ>EF%@la#~OoWa$fejc-cw1R1FB#hQ>4Y(AyGrOBjF z)v}-KZgJ&bKN=zT$m_ZA`~+-)0f;k8xLt`}X#_4f5Kk<95}k35N4{g#Y)a^aHG{aw zgXi++g{2;kAU5jp78D?i=i)9{>TIG+9D+`fIf^-K;pA7U;s@~@s4L1&VbmyA2CJ7&zS26Bce4R|F zb$ijM{N-G7@aXHPp(A*s=y$=kFWCZJEQNO98St2{yuR`)f{FdkOg?*8zsKhEKrBaX z*Cn008J2&OJC>`L)~T0ms1PU3rI^Xb*NMU|o_{IxCgY9mgFe-Nwf<75pE@qbr^u*_@BSkw*A+lMEn}2AL z+VYN|t4F22?pPx-C)bqijOb+p079f^y>&&6d(jl7z0f#joai6p0P!lB&#}NxKqFw_ zEp~Fw=>0muG`f>6c{vE9lbn>1U1)vGQQIz2+IcTq{W&_}c#~feE!M{R!f&MaJzQXv z4YQKwQ^clJbEz)M+OJi1;n>MF948b>xZ}oe2lJ6jB#9<*0RijdyxQmNw?KN)H+gY+ zHJ?K(LK~{i^g-Fvb;Uw}8%gbc)c6Ue1FA8RN&xcG6*q*T1GhkP5J^`rQ^?a(5fjyi zjR36PDBfL z{{(Y|LcT0IZn}?LL2N|mt%xP;RBD48;XBH>=$)H!)yb`k{`bMW^Wl8)>F^$UQ=&cA?*eD zBaY`w3@bOZ$F9a=w29H;L)2y+^SiMxVH$KiN<(K*A{J|pLnhp>MDB9w4#L1k46fmy zjvK_rsufsX$5+feS=H%d#$A&4#k7uOVBK;8k{gBEad9CBZGwbJt0Ybevqp?F-4fB} zEw(_AS9M%xLeov}R3zB5dE(tq-wMu#T(R2qiave!nx;S!{#mxPs&C%JVvRgKo;;6Y zCY=IKAwCgz0x!dh0uiNCd6T5r#$H^qxk}huxwl+OESfzYT|uSzRoR-=-$K*XByv#gL!HA{dR+4s#M729yQO6RhsJdmD_r*k>k;5#zeA1Y| z% zCojs6k|&slvUc&f(vFL&0mits7qaLh<9w77(&tKC$*JRM6v?Y6tuhbncNZtU9UB&( z42izwHds2tL3ssI#A!gH7{l_or_HbY#TxhqLBDX8nZ6l#M9q`LM)#YNQg4IYmyz_6 zybc33;5KL}f~mk)k23I3I?N%_dPbHT90#$Xr`2&&`DPfGQ+^rh%3B1T?r}}9oQL1w z8dI352IbO6=1{c5R_7xogJBF891mbIk?)%i(f+;eB!^R6kWmQzlU>ftt>&lV4#KW+ zq>61l523qHjG!8nWu}@u(u3k@I47z=H9-Pj9UJ4sh>dW2RA3<`9EZ`p*(*~zlqwR_ z*p}w-h*lw*l+frXoxz#Xp@I6~>PyBADG}wpTWX1${jQVDTuk=v4ESAD`?HVe2L$rnghi>pS#P>~(A$vmH7m;uR|jlb+7jnmHY#SVTPMfGmQtzg`bD z(Qo(TCWX|}H+`^NI-~o9*EsoMrrL0YtAKO2_yxVBu&InqNf;qM|7}xV5ZQBE&*tIN;hk%`xIe8dpsPa zW|`R-;c%k6mHBh^tVT?B7Vol%r+n)lj%8W`@5XwG7qJzQPNdLwf@FzUkZ};G52MO} zNol94%}80!Bw})VCqam5nQBVRB7@D0)i-4Ice<^PznFwQN!FYS_-DwYVScV#P&Dzp?6P%R#TNd3p2F+K!}6S6gqa{fd-ZOi+< zqrBhWW)Bch(k+FlSR#71$Z-aqI36fyRX>(&BXOL$tv5D4QJ^8cIIP@jyU6qd!>r)& zNSYAXetiNKr%ys^O&e}Ad@@a@z?f-$h*Q5g3ss2s_#6Bt-js9>srn`5&VINs$66rDg=FB6YvBj3V`UTwq z){EmF&rR&8Mq&>Wzg>MjzBvdbb_2e$6A{ad-LZ1V>wFT2CB0csA5;@WW*9O_r}#I@ zG9>Ymmm0h{2?~Zi%~dc)yJ}pk907t!EJ3EygQ7kWHuejr@z?ppb_d<3lxTt?htyQs z_bmI(G{<7eHsUS8js(uoZaWE3YNnms&CT<&7fOwu6}ap!N$oSujvGc{oKfETxVL%i z5%%bq&q{$$$cWjC+{6R3-HJnL3v*|$+s22fk3nn#^Vafv z^NaYr%i7V9iss$x`wWtF0MMB=(Gbj3PjrD>`Fh@Eja8)IFG0Cix#JBtG((tuotDHn znjO2kAl6#PJ@Q%@)^tL)Io1F)&F}aUCie-uU=TD^Fd%dA+NDUEepY4ytS#BASH#kZ zB`A21y8p7%pA_Yr;fbIqklSxyytTIVX92b(am1JBFWO|LpuWP^ONd#No#%Pj7s0M+*oK8r4@J;8YN%^cl zxWN{Kae_Ie60yTj7v{NFvMv8=Q+A*`bC4gh@m|>m2?HyXJ?XV?6UdGOIw|YlU;_x8Mb@py1*f6qyUId>w+F>Xb zv|YRil_1m3wcZEd_NyO*it$U|D>HR*m8|Vrry`N?0$QFi8uU`e&q$_uq4rD&Wkai5 z00K4^{5yD(3jhEh!g(hEPoQaS5u41GG@_^jcoxt7mE8k7BM09OZQ-woPc=gT#56)} z08sTBTPX$${4nTy?*F;4K{R(gG{oXg;51||n~IM*RwkbO-Szha#4DX6Y7{ws|APCV zJwMWwz+UEXf}?bX8SjHQy3bjyOhOr=qs@p#*ya72LmOnT#9@6;JG}|te<~!HoV}*6U}%b zv#Ro=!ZSxNt6BZ{PDq*%Rs*4HO46}sohbmp-UH_a)wxm4)q2L=sRZyG2GF-P^cE>R zQM@fY%9Jxgg$Xer7|MXBZt`o-R0Vpd)U6)b3hXBpH?))@3scaP_*O2QaUF}wQg(ir z&z1&4RMNxnN>(%UXw)s~xX}qheF&>7rO00Lz5Va~|Mxe1>Eg!6os5VduOc~|U;Agh z%YjJpmPO#Uzh!QE-f|b6BB5{RHz1vU8%y*$pFCfdnwku6E^n>2g~2w9 zn{A5JVfXky!(?0K;h2!zhfo*yoOZq`5bT8DuEBEgUj8_J{6f_78&+|0pP)%N+I+55ZEV6w zbSad^0w3sTn|A(_z83aUFB~dm91(GADv!U=>gv?&+OVRt3(a_#%0Y_h6a`z?zE`Uc=j|LjkhjcSlBZy3 zHm98*TT5oZwRQj~Z#`6Rk{XwGYR@Pl`I4rnbz2x69hoQDHdVbmlsO`|pS=e>8tk}- zzhsja8G2v>!5vY}Xh|}<3Oh9S7zhbej05BoP)N@3YKplf#K^5{>)EB~uVl90S__ZY zU6ib;>YZ!hRie$jir?bj@+8jtd>xJ-Pu76ZFcp4kwS^Tts%~0ZrG*Aib$2Zb9M^{? zI|N5>xW}s@N!!o$2qHs{K1MiZZ8&U3N(ap~j#WVKnT~%R)pvGy| zCv$Z?IIbz7F1C)5-+wM_Q6f$S&8COPx;w5SIY`e(#n%Fqec7YApNx4eDto)c%JGCD zV_U5m%!(WNXB(TFw(}bMO)Sr}ULTH-4K5dCS*C_)zZd{E7F)puO*8Nfmn_Y% zchMsk5E9jI`5eHRnoSlUhwi_^;?Pbg7au;v&!0Gf{4{?cy!_BGdB=)MtP?BB*C1_V kjVw7jpTB+r1Y$)47sr{}W(nU*5PVEip7MDA>95rO7j~|j{Qv*} literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/resourceowners/wizard/selectownerswithowners.webp b/static/images/auditor/10.8/access/reviews/resourceowners/wizard/selectownerswithowners.webp new file mode 100644 index 0000000000000000000000000000000000000000..c04d7893ca34b8d959258e509131f1e9d53335bd GIT binary patch literal 14822 zcmbVwV~}NAv+XW-*|u$V*|u%luG(d*yKLLGZL`bjvdwqSecz3^H{QRueyy0fB4@4~ zImVbVm8HbRw|@cv8e+nV>WW-M3;(>=34&yU&=7(-g7VvOq)L&I6ci9Ql(z-IM_Sl_ zuqMHif1$P!x|c91BYAu{TmygW^EzLT0m(mEpE3Wu18z3Q&xhXxz9hDxW)-e?8n*X< z4c{S8fKQ`az%$}8*cI4T?`Q8dRNM8r!9{m~Kpk-E(fvF3`+Jk}UE;m=`}^e!Adn68 z{r)~*d~d!n`NI5`sIvI@Rz&>T&Le!`K7R}SM7;CpQ#jw*1lslXylK4bOnf_iw0^x` zbf@*SxZ%8Ft|3kUEk6$*Jw6pe`M-OMA0a-XUnO3@&wG&YdwAm080&zd-!h+npF2Mo z3oP!xBK!?LSw9`N6xN{b5zm09->vVkU!7kDaT;5|^>+}U(AS@Dfe*^p+>P8~gCpS8 zKjmt?Ctd;{2=BgM1ZF?Lfy`g+-}yef*o zgVWZi3*8{BdrW^;KQfEekNuC`@CcS8!2Gtbw;a#XfE}>J4S~+RDs2IGEKu8_?1{?w znU$5dS*NA^>1l8|{DdbHp_}@^eRz_?x1yx8)~$`V_Oq_7u!mIBfL~kNj29Nd1t~v~ z|HuEOA0|IP#oO-n9UN>WYcJ6Cc7}(3Zt^l-?d<_Q5MkfjJjG3<`ZIQ!(2i@BaRYhg zy?3dLX57Gdw@nm`_Yishchk(L-6uYXx_DD?<4>&k^nK>gYjg%c@)b z+)a__*IDSN(ed@UIO>mv;vu=@>*3xH#&-zhU+z3c6MJ~GZx65IDSf?o{=XK*faT2L z4}m)=(|{f7_9haeS!sS!svP}tp5Z2`9lp(>ishF$ScR!x;asoyMJ+gcY(WKq<=^l4 z_2mQPMsd~aeA39nhpR=1wmf9$uy(dlU4jSb6 z7x?Z}-aZyyL<@LSDsq-8xlZhR$f*771JQl=c1ARveLcW_8U_&{k|}uH)=ER&^^_`r zV~7nz^*oV-CL65bosV($o;vN}?aXJ~0~n6*-?brHU4dr8IoL6x(gA0QUCnwArriK; z!vNeO_SeU$-x+zp5iJjsQkJnxeHzA38-}@%iltC=NIczbLKNTI{h5gT--7T9L{PFw zV6G8>J*hnxFBb}8s*ss%D=^n{Ni^`~2LxR?Xn6kh!GW(ca2Aw-^d)`j!{d6LbvRdH zg8<|C0Hs!R7)KKXP$BdQLzhf!<#>YFJlwNlVn4d*L{AP&)m8m5cVVW6CgkK(>o8@T zG7|?MY8ePYO}_1w>w3zOYLd7hv(7*_E=QZL&)!)4D;&BGt;U23#>K7^cZv~0OFd=F^@Vu`u3tTcnIe`>mv@ow)(?cPYSGhtINz#5e}a~w-><;L8K zjALvBlWdsC@q?zdr-05-h>m;2R^yOh$e+zmEy~@`({tKro*fspv0|!z~klqFWH+dDD-3cCrnkK$PyaEqD zB;6R-#>eaoHb1ek?m5qkhg?}8%?8H`BHZm)-m>MXqQ=}M*FrMpVQ=FI7{_kRY8ze|%aiR1xc!I`m%If5{w3+HTz3=}G*QEUlnfesuc^xY!+HB(R0MzB z%v>COdmx?Jcj-vNx{p%%{4H|Z$8Uk59+^oaQgQVRV<9##lZPW$Jj(!YM)ean9fxroXpuP#EH|nkVW~CzAM*T9W1Rr}TN|!> zyatWKp9zTHuG{4mO5}lH&j$hF83c_*M9{nn85(^tM-f9;SS@-pA^!|R1AwLgXZc_c z#&jk^<=Eke>>XEwI33@AZ&VL*yYp#@P|xdx?_!jbn|MN`g&0^3$`zMlhAuz_8J_$q z9ero8DM%6JHMLNK`CVEbtWsco{I6XSL_p&_CGhOl8krrW4+~{HDep7nF0mQ2JUfCZ z11+N83H?#hg3O169a1Lm4Au`s^MR&-|AI2%->KkyvXkOS1yU>d%gT3u<}m(?@qYq> z`~n6Emg^-j|F>5*nLqK*zo~*asT+p~N@me|LRvh7m)7@F=Tc^oyfb-~-%wgaO!Ui= z>Jni>w96UAHqSfV-tuKqB{70Ah~7!Wpl4S3ek1s_Pr7QH`8ED8+bd7_UnL1V25c}Y zBcu_58wL;G3%SIDQnOT^P~D3jZLDknBt+G1|BGS&R{zfkjRCe-=C(xmrp<|HWo+%v zRf^D%Mwvd6=vfDfmk~@#wAK7;>REI?Y0H}PRK=&}H8wfKA6WB~;Ghc=eu|~hsEIy%) z`&pCsH;I4?4T??)J5uWgkT*NXVqw@=d$+REMr{-O9*= zvH&;t@o}k-(dTd#_sX>Onz<9`!o#ewuu@_K?fL<%cz|=P?gIG-X6%rNUzee;R<_M8 z!z~J_pKD8A;)0Xk9;O6+E~4NT_a_hu{Z@_%J-o5Ovs)Kpax`xodC|RuCM?YEa{rJ5 zSz*tAb=(MpoDYxUtz3ATL#WR7E+!*QP#o17Q0Ru{hq+kPA4jJ1wmp0g%irUP#;IyE z=!vvW<;&}CU4}36cY(2*^D@kLeAT^jNrLhNtBOR5fi22lZ2KopVCw#E<{$jOmbHZM z=m|9AY=N$U($?ZhvJh^UrVtoWYV{BYzx_CPP9XWPuuf`d}(l=&RddeH1x7I zb1NpuA^U3|^Zuq)%^hx!gLKH~grWQ=HR--XoZ)hq5PubEYk*TX8K0KV1I`v{cQ9A< zhm?-G_EujAI*qyB^4V6MARWbg>Ssi{p^oO$7;ls4qEtpF5SxwN&I28KuL87byB_d9 zK|( z^zPiyZ7-aCH6`1*_q+g-wMAwkLR`fbQZ@a;sqY*$qq3A$D!rHb^OwS_4i`~ApQXIC z<)(N{m47o`TBzRA1z->^i)`~(Bj{1m$v?{}o)qZ^S*uCM{}N8Rh}Sajr z+ms+U_+Fi_PIap5WQtpRw`k!wN+Pze9dW4Dt%!U_sK3mx0zo*nK!^KmbZ+ODM%|j2 z@yP<`BeP)xV2WF&^G)ZH&Lw4G-wsd~lgU#^GNJRRB57!{x@H^Nxl2B}tcLzMs%34E zUfhWNH1F0sjc6t{q>EN$`@Hb>v;*yB<1+It$lMb>w@B%|lRK}&L`(AU5&Px{u1~S_ zBuCq)M0IY2zED&)5BiPSjYpjw*ezuLHJ0Rx)J8DC*oKdTVpc+VcHCnTi0#qr%t_YC zijpaIwUO*o^7@>~rLlf#eCXs)2D$zxs8Wsvb(>25I>JNXaU0@%O)4^)gZvqKb=g7i zNBj?}=ZbK*){6?8LGyC!o%&SR#iB_6nWWgJF17?mdd-X4pXbybTovUBe1^t(*7QL* z0bRWhw7#;xJv}*vg0}c3po&)gW|IcV<>h0mt#UrPy@XL^Rlv*-ULy5U&V##|7u54AnU6+&a z!=9fuJ}jUWn3R}@R74I?M8u{ZQCGFHXB-dzx`xYZxf{}D*+j5h;vRmMweNOS8&(wd zA50Y8)xeB;;RWY3xv3iXOZyzV`YGf_QY7}1RaScNcgj&syV92D!dsLr7(~&{Hx~#$ za?&& zc{JGLzL7260`GpzKY*|_1d9}*Cu@&5__Ar`K0p5^+Q#8w*dioEUJa#-p)cotoOZv%^xBQs(n8@ z(CP>d@Z{>$(hb^l%G4DnxvUsV5kCeE3|EM#vRJv;zWeE?wsv$GDMmM9%4Ez3sTNGY zhO=d80?KN(`=|KNM&IHU7nGdnv}H#M$C1i7P=Rz(*Q9_?E5a}vvKRPu2nEO${bvvI z{1+DFEas|G>Ff8Q^9-7Sz;JYiiJwb?zG!%-0>K)i8zSC;n)B3*oqxxHv-&myM5C>D zwi;UXSc6PPohvI&#KL*^+s=@^xy8O6tBZY3zth~+2=m&su9U6eC^IaHh{IbMLF$5r zE9tezs_SE@#t7k`>`;8_NQvn^8$&VOmE3;G&7QhV-b8w7AV4%b3_pxB4 z(R(SN(9*sde}k``opY-e)SS1rpZPCmz-l6NHE(dtnetn=M21@Nwg&0cc7VV~4HUg5 zojK)S_9%zONwbv?c`1F-|T3u zn73n()o-26A;nh-LcQmc{QlveU@djY)o$X4Pf|h?Y-0Kn_pYs2<~X-@C3|RBKK4l) z$f_}3jpXU$PNm)MdmBWxiW?uIW=D&1>R-I2_kN43O`R=K#B$**PziTc?RVtI=jWb2 z=-;F9)P7@Azk{uHWjdu#YYpu^HCw!Vw?C2PsOTg~!xka5>r6DmSbB%__afhV3@kGbqkG46 zhpa9g3zG>VX@5>MoHEsge6A0~U-YV6_c&)(tJFzinRtekM_RT~J}hI3>kNwwaTf2e zr^-XGm1h3tDgEBgkWuEha_P9KYI}Qn%8SQ>Lt@sM{JnFAASC=oVy2*qN~-B*?sPKy zrZ9%nZLfIj@fne@2^nc1mPfzMx-Z(4K8V+oA*N%)b0_>!=Bj=M6KD43bQA~-}L~! zfyo|N{mI=D;~Uu7MnGq1sxL-&8cJuAN9%w&qnw7a2vyOH04XVlcb6q(Q(i3e`gULU zy+{@+tzx~e!Xk%{V|_Q)>VCi&u$@CT%@4XPYKW>O0ao!<5XI?cS$7knaqM36c5*zlAlUea-4sZhPyAnFHZteh zaxx9`(aAiQpzr-kpN++}t;);7#lW+!-)$ewsnq>7Bya~gp`K+&*sKQV*$SY)dnQaJ z?z{!E51`N%PY>6tjs^G4P*k4()DnD#xWb4@gn>cK`JOwkQ1*yP*lt=z;YSrg9FT*D zQ9Yj2b-WU3+*4%DINDMCOtQ4>!x$N}d*1m}eW!f4auI;=$&vzQEN-h%ioxj}RBN5l zbg&0Ee+~;@fVJ#rtOmB;( zuj~Xde%wjgo0AI+Y@;~cY`R0k>WH*DbWH0}I)-J>(4tUvE*TApo2X!G68QC{cbwTu zcDS*0Cfk2yIF>SB^n9ic5-F1RDi#06|E7qH)@T-U52L5?ZW5aB#$JLkXH4pjgQPQ? z{Z0aR3iT0MjZ-M#Fb7%~q0rAMANfjB(O=*RQ9|AoaH*2fLU4QZXxDjs7e-X#b7TjJ{+l_e z(8>sgc<9?OokD@rK^j=B%(7bm)o&ZYkdX=yi=c5YUIh=mc-_it7gFLLRNM72sDJxgf1lmD4O2qnqk6wvzl61ifGM$dfjml9khh! zH5yiLR%l~{$yVuJt1)&0rpg;Fuk@~>(B127P?xiG6cy3ZlR!v*hc9Jh>k^TF=Ytr z?eY{6*Ps>^)i_aKKdmEzG1nV(8v0mPg(`*4sEfP%w8ctOPDhZ7Zk$1pz&i=q(g(zXCY7SY$6<6P$tJd8ct^^1?ZFX%8c4eu}F(3 zwj|hamb#eA5%i)VOeeXZ&S@A-=0Mh(8(1lB2O=T~+Pd=!#6^j-7vA$(f_>h2L?ww( zsEVC5yE@-K9G{>rcETw+CN>Dc2xZ?mjZFjAyc|%+#2}>CMIcv?~v+WM~t_FBx!7;==gf; zh!bzy8o{Sg4@2tSv#8>}uVX#T&(Qr_h2G3tj}27T2_tHAnHblcSRZn>Ujpqx+$-aQ zl3OUm#SH{fmHI#qw(NmWKOee|CI6Bh3eF7GNccz6l~dsjy3nWglS3P9)#(q&G2T|{ zY@R5KxIC+wGBSR;TDL#Hr~HDH4Ii()WD;X>x%;t)lJLolbdY&nmbNI}K3iQ{iw}0R zr|vC`nGA9ae9;2inyAFhtpv7aGiU1;qFgB=n#07LyO&HeX!JQB8xi}|6`gOvt_v9j zhbIh5sb-!K@WE&>gzuSW$Byf#VC!%^{2*tCs6rwxRayRoOCNm68wEbN7UX?J-*F=0 z%9wK_XL#qLI65uxZ4sU+U44FmtmD(RtkffK6F3xE71_2gp^>zrzG!j>`Do{upOM`5 z1cDHlALYw9@h#kBjNP+d2GedGOnBe8@&@8%6$(u+zpE<~wuy0Nm$AfoNZrVDli8kx z!A;8DdpOsEy%&4${ubeWa`Vp^HA|Md_1~Vo#eP4rsF8&D+7k|enozN^2<2;y3BrD7 z{RyeI{H+~xD=;be>+7+?QGq{GZsl*p;6vjZtDbp6gUhXzBPeF4YeJmF+FR|0azDeN z9Mh5d-filZ553$RV{|K4^KPyd7Ln4-8NyTldbfD)mTNL$dKKeY_w4H)>Dik~u@Y@g zAJD(Q3GQGuyiJhi;n0ZY$Q*Wuz7b=fCl_;Vd0fpeAIRPPMHY;kyJaRnM!WWRVR*`D zBbz4zcVO+Hwie;9ve3!B26!^;V%m09igXKzT4!@;ad;-X{Ci-um57);8%4WGG13kC zV310KTbm6_X%x&a`~!%6Gk1jiIi5|bj69e>&#D}cVCI%=@@o0*U*dBd%~ly}guPnw2T-TWpbIQtD)p4nv4>*$UftFB z`YbR?a4uX5V2h6nqx7 zRoj>4^E1tkFh8kl5K*#d*|X-(qMYW)#5mSD%i7J_yXzKOL*trAyKUPT`$!lkNLmm^ zUh%WfiojGDpsU7QDM*xYoY}^_rZ0*XQe16*nZIDCP-{s&n54FSuW>-+d{X;%Yu}P* z_`VGQSIA$eze?f{Jas`o$Q=5jBz0MaG>>HpL}Eh%3a53`kaGICasBH{-(u2lA_rs! z)pBcIKd7G@ut6nAxNQ+V3q{fX%JJ_h#$RxB$5;(~%BnEds?3H#L`i~dGGL@L@_Z}@ z^T>lrDuEuj+*}Hs!ML!>B7%W+w^1oVQp2Q{e@>CGPuFmx^#>J<`8h?{;E1~(CFEV)Bx2Hb0=ES!FcUE zOO6pZI%ah=ADH1DRg~HqADdCF1aOrKezfo2NHJ|qRk*d$naNRd8`Q#~jLWz(4K60#I<5yiGe-M0d zZo-pN-0n5jkw0`CN>K2F;KuHt;hfcyppnPb70D#XwFH0RC7VGqr;*kl`Z$0J>w_iF zplaJOODbbs?iz&rcz#30>Y2?4s&;^dVNgYYp%;*mRp^yqi_Px>0MSR4^QO2_H6Jdh z+)O&GzMalAy>SEm&{Q0&??GIO7$n6kyRLWvX)VGtuy`J-6=2(7t-^LrO6Bm8if_Cy zF%9CZYlJU3hkLDnI5Kd36w4ArO)23NHLuT@&YQd4i zJ1d7uANNd4t&yJ5NOeBaW}XES3iV3d*pWA34U?o8^M9^vpcsY?G5yKa^G=4q;6z^c zmWqxjE2`#6;b$rZKG^)TtNIuC5VW^t8eud%9OvoOxdsE^G{QOR%tBrj0cDU>yE+AP z1q`a|7kI6vz%V=AwVpJbebq5PPoVm1(DO$~fSfo(Ol*Gj;?6q+nwQ!BFhe)sU3JP|Q5)!t~bo3$>(ncEkPf(hWBa1~M>gnm%(7q4#~we79E2DjT(q+1Asm3c zrCj|ZB}8xn7q){39+g}Oc-x3gES+mSoJAy`(RT&0+Vk4(+~SNH zyY~ry6UUa>cj`PV9s6@0N>(y`8+T0wRiK~#=f$cxGvWl!fammtL$IODXraq{XydGa zMLac*IGN3?B`=h^VM5kguacRu4&y?Goz|#qf_V+!I_2z*@pso-I#*%!piGk%`T!M= z2-15%aJ{aCHGMk1+Va$LZu0V{?Nc22b-(6Ep|)~$h{}71@$c-F06NRJ0+9g^@Q&j# z73{)jwlkf0fypfVBst`n_hG*3)Dv<-oOq1s*hJrC2=~dHSEYm2@iT%l&a9uhIF7ko z381j4bKQSGV-8V^>X5{FCWqDrv%=E04r%z7w!$0-AV@l{6mI`0`gn45pCM6Trqz5G zX$R>&fcG~)>e$vMJ(kDK!=1VS&leV*0>ikBB>(QGFB!Q+E{*7cT8a^h{A$KF4A->AmQ=^O7dPxAJ5+ygZ+N@s% z$|BbprD|QJ24V6Oo1Bg^546rR zw~jX6RU23it1UMsxQ4CV<#frH$hU#TT$%(#h&! zT7u(@oIaDm_a>3U_Ioe;2u}hfv1XD3bVvNeRDrH|rU_rDn4lxYz0inIq1a*}ORHKGTyR^cs6L)B0Smk%7n9MM1S;&h6w_Dwzph=7O}xB@cqU;n}O{;%hY6FbU-PX z70*%4-`_CmF~949g1}^VJ50LtA?XqMT~j~;3fGD_s5d3^Aw^8vFxow>Oq4THBL_}h zEMGJ6uLAFm1^0LcpRQ``)xvfn|S?Q+5Yh*TjOtAt~cHR|dZN#^_X9_wA1UG8P8{UiM ziuW1s?GJcnit>%GxFqwofTAQ-+A7+Z&xw=uG|;zoKXB_~%B!$yc_AjyTD( ztkm3fU33;cv*@*vej3!`w-;YF(ahRdTf;Sf92oZHG$W$bpsxGsp|r?9XM8{uRWZ5o zYu92w_C+d!I~mlfo=x!RLs4E{65}bR`?WD&#N7$NGpKN>E;#-)r4s(q-(CE}nM;93 z>mIyJX`l=wGy!ZiJe{bTC?}o0F@OMv?s^qsVBV?%NsQ$n8RF~yh=7nQ#;O%)nwFL3 zLj-^hv;{vpJ?A*3%E|p!;xk7kukdxBtQ{@VlK!yh0%?S1Qrd-Olxc0Uk&y;cVx0YC z=lepO%ro_r#3kCJEWztO7fJuCKG=;TZKxXTq`<~n-$P1+D&HNO@VTvb+HeR1sLkQB~~l?=VHXL)rT3fa_v8cywowfNXlylnt5Lm$)B#SWF&-SCM7214#NH||1J8tVH_XklNM)qNI4g5NQ3jWwx<3L zDyIq}>%|L1#bEbUUiebFcb}=b%`Ql4{|eZxO2|v4Gi0VWW2bL(KQPp(xDX}N{6Tu6 z+UiA=ra_hUYbQ2TCox+r1hYW>r`5UG=OK(|1f*+8ZOvXBZcUkz{R_|eouv#C@l7Ns zUdYs)s*}1PA5#RiQ1wl?aU&gk!nkq|G{2*C*fOUES>$5C&tw!^X*(acy3y0F7Hb*K z(i~yeYzf)-wY!Qt-rI6fM$&EvA^fxKPs`{{)OD7zMYiVj4j+6n9Hk{UJxz9r?KLvK zyEQs#EpCZnKJoSi;U7}?QG1WK?3&Sn9C+iq-8GU)Uy)7OT#wHyRq5?WVgSEtD6_8p zekqOZsU@=X1POjFzp8pqcKUtND7a9l!7@Bk(0eE%>Qjn14k0Gt{mY_5kg8hQaH{QY z-&hFLWY#B;yj7oL0<=+*3Tb-HKWLRd(k~C6DjpO%Uqb-K#W6NTL)vtmpJOOW8N8%I zT8*#ji$CnLEFFnDi4?o@!}hXN!&ju0vURW@@>)4=@aO`q?ugBqaN&h;{1|SVz$!y+ zg>~Z9xC}jH0~nAPKWgMT#!3-rf_^E{b%ZuIM{+DE+fNbtz`zmQBZ?1oPOFUj(wfLX zbhMbUehYAT-hY8rWoTPO>)ypvaYL-d20V)nM=E93=XKhAyp6#=8)IRhvH}1ytM>TC zwepiQKSz5KX>Rhx;ZT2U)rm>yl;t=q@F*|S=JDmL=XB~ws{&QwTfX3SX>e*{7ykO7&131n!C!Y-dGEq1MZ;80;t?nLHH_fNVQT5)HI zWCScE=3-sFxWJho!w+xoX1q8vWh}FVvt@^{h{eHJw-(E)PCiG1Gd$8z%~&UqhL-4Q z1VCGI8A_wJWaQch;c(azHfJ=PT|28KzA{yXrhOlDZN0pZ;9fF7CIIQLm4;qyNB?qP z0M>!v-~h7IxT)K;U6@n!AE9i_4O$ajG14NqskXpCWFA(Cy{AYul_)KUOFeDO6ItlS zNpR*$*wBivzh-?IthswkeEoAH%Jvl&%q}-#U4!vMIl#K8@XwE&h3rSwXJC5T{uu07I)q8Li)n`2`vpF{I(Uj$S~a z{bI}~MHl>6$~ESEV^VOKx@G@H^c6H3BhjaPJyq!Xu7(8u(cE@6nQGjmC2}z)8~nYM%HmoZ zH~%E}b)|>A@9@M7vPJ}w3Ww&72#Va(yt>L{f~H&Y0K0+)axwPY@D6*9mR9HL`DSbGTMWkfj~ln^hP}Ae8$4K5H4O;tFXS zBs#Ok@M!Q|UrJ%PPImD0ac#)-ykc-{DR^o3;?2e=Y&lk@J^cM8y14R`K{a;pD$l*j zxgadgQ7%QwS%ac2uOn0XaS(IQx?tmgclIrDu-ae!nCmc-9{hV$r6#EAicTDFW+jw}FnxoD7?7v8s#FuhY}P#*X>@=$~uuIptGj$W8hL`)m^8 zr@v(Rq`STAu6za1sH*Hk6A;1ZTurS9LEidM1rYDbPxeU!<-W+~im0beg z418e&8f_7*?qC)7j6tC|H4m(E*-mBYKgr#H_zc
}<6sKDq)E$wg-;0*cdrQSC} zW6*lAjGrs-WUmk&;w(IN1gZG$$?3{^kCxA(Ld*RQmOZcFra^9s;G_N7$|QK|3vl$c>mW;Sp~k(Ar2C~-q}a3;Oi z?*ag!Q{h>lAH1tDN*_jfNCtUJm`o=5?@*6_B>B<%q*Ymo9V3P?$3rf+BlMGwkZ&$K z;a_IBCIc+bJlXgxP=lwGTA%XaT_nlxGWk8THI=H7$Ka}XN5pCM#9;;R2k$^?s2#Cn z(q=8SsMYwI0dJZ z4O;hm!PPTL#It@#{892L%d`z?LX%(ten!^b+|>l$nZKJDR*Kx3kxFo6azUWwR{qu; zi?DjF1RFSlH3N#i10|h0HGmlVAoHvf6_ol>E$kQo003M99kY#86EIz_ev>Unmn{=y zo~r1-#9Tcw5cUAX8AS}7vM-388SA z;yX=V=C?E?ilhvrh)NrOigKph0Ch6vdD*KX7GPRZ@>+xlkVI1@M)NT~ZQ)ff4Tmfk zc(PmD0uW4XBML3Pk^qzifAxpK{m1|a5b$W7MrwkWBvcZlaR!QFqlrtD6p`uOt=;_k zb|?`A@lR%*uzlLwRPm>Sg<9nU-D315DiOEA?lgno{>PQN4@68$R4nCpeo9mE2SzDs ztR}w#B~wEvU@4n2>fvh5NwWeWx$Edd3I)c3D)&q-&jjo{MXryASGw8do0kO)2SC*D zkWqeo9eQ5C+9~xQXg}h(uO%3w@0{P;+0W)-!C`f0BZ{NbfKo>GwK%))(t%eU*en_4 z(!Bi1;;BzFEY{Hx)tsRwp4rB-l?q-LTf#*)Zu^O_Fe^hC%~RKc0Gl3*#QuF~f_yQq zeb*)yGJnw$`@QtHO4nN?Rd2{l)vId$8}34f;w!r3k@ys()<#^xwa(aP5f*>bczyC@ z^8DAcq|&lV=um`f1SGw&x;qPeC{0S^-G>-+4`n+JHeIHbKBc0uY z`H&Km%V@fP7zNDMa)S)zqSkHN$k`%ClH7FfTf>)r>8QH~IX(d7E(q>NTu_*Isc=YG zhbfsVS-@d8K7d%gjI!>$RfbJmCVvwCDJuW7Q;PHR8`j78*UgPWwWW;`NCnIm%Nj^z1@Y&8)oOjdvzpof;f-K$Y|i%Y*2sN*8MOVz!Zv+xK0!|7kz;{%ZFzqWf1tUp5; zM2gX-)nhuW(yGRGiH1O#SD>NstiPcb@K>?L+a4fH;Y34*4UdizAGd4A+Hz-Z!mKop z1+F$ysth739~Y#|-yuj@!B>8hrNLV!tLqAm?mA7cWkI zqTuvNa?AXrd5~?gjRw5k3Jl;Dop*bLDA)h?sVeAkkdhROp?ep9Y6W`rTXWJbl{~@r z2HYzgDGcN>z=h!@R#yT#kLgTE^~e~SqSbah9}=V|7Fjd+zMU0nDxlpUK5mLnip(Sh zS#2;R&Td~i_ViUpg@eRKFAry*OF?1_;9ELbKMuqPPv=qaFhYJwacE8f+NX zP%T!{?VGnMy0a&{_xV_(F+e`$J^nn*&65!>LL$}cGN+zO>^$tMR zp9?|o9I@7?rQj*Wy|zF715I64!v4x1D$JT-?^=B~ z`lW1FL|kBciExU3-#WgU6L5bzR-;9QbM_Q%FATNz_yRoh_F27VaWxICO4e2_}0M@ZS6V z$R2@G&l1qyqrw`*R(tIOi%NxI;X!;z_HcK7Lc);@W``C~k2S3#D71?IRbA)T{8Rw{ zeC93@daPG&P1p+>=`y}eJ|OHE4ROrmuJL(8>z3(1Ynu<@u!wcL_#YO zhsxPdnLYjkj}5`fZ9Yj2{79#4>M_B59GqZt#d0stN>oc_n;QQb-?%SUl2MLdpXEpn zG?y>6+HbuNkKt@7#Cx_o;>5Na0_i6 z?ONX9E#ZGSkBX3V_A*x>%`-c3lxR3PK@)u2y&=BLZa%<26$?Y>4aR0p?$L1vt%7R1mq+=)6fS~P7fZJj< zNL}gDcm9`lk@pE{ou)N|dwQ0`Vx&T2+$BKVJ9{U82328#dy literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/resourceowners/wizard/selectresource.webp b/static/images/auditor/10.8/access/reviews/resourceowners/wizard/selectresource.webp new file mode 100644 index 0000000000000000000000000000000000000000..3684df61e784a4baad771a34c6210bae5fd9ebae GIT binary patch literal 9856 zcmai&V|*svvbXQpb~3ST+Y@t=Ol(eU+qP}noN!_%6Wg|Pzw_+c zuB!U?Z?&?NgoGOf0H7`|qNt|GMfBs({R}urHV6$7m>sBqHAkux8A(9_ar_CDA40f= z&26l^|2PHkVQ>0z`gqydTm8az*;n(LX~jPM#77X{(Ol&r^S9nBl45Mrme*$Bd!J9Y zPoHO>Z{tVd6Y-nUImpM>M`)Gg>oo9lM{lk7z!Tt0^SJ{AF6Ta}Z|}XkeiF*sDk2FX zeQvmXNPc>*>OCr)eX@O0-)?OH8$XwT28V$&0>-}NuWv637lfTYHNM%`X1jz>0(p7~ zzRW=Um-e5|rM_9f{8P9y$*JB+U%SsIVCOq!zT{2rPPgRy+AHu~!4BzgYr%I7=Zyo|Q`c~g9zi%W%PJ3I-kZAPR=HT)t(VZ52A9Q$_3LWIYK!@X zjd#hIuNDo}Q($=|Wl*J}T(x16A(r-sxVl>Alw1r(?=C#; z4?pZzOaxKnHfQdMPJPWoL|eBV=94x=`K-)Vv|Rmx%8Im1WtKXfPZKzp9%uj~^;jKY@tUok$z$E#3A`e$`0-^(8+rd5_s z=H(n5$1W{zL=Ucc^OEZy1E-;M>UA39c^GR5+ZoaTn6bI(vmG9&^}(!2!a#GGpUFUkJy_LN(%ZdiJ)9co%3B_aW3K=|!qR(Xnr1)#vn&z}7ood(+x4qkP^P z(n?+v9Db!!V#TQgMU)jOMEJ{3_d{$n=H~0jC|fVLfN~;WiJaYEQhir~am3 zZR@)L9exWTr}Nf6g|4;z^N}M@Q3z+CvMAoqa^mRig}C8sOM!Sq{3AMdPYtAekifMf zb_nJv4l2<0p)TkNcVzVlzh?PN%uuwhvrpt`B8*0^S?jBRp{+044RWjC6-+*B7$yLQ zE;?cU&HFD7Sn;6cAr(id72H<4IvCI1wn_1SZAs(#pG&kFNzJd62H{Uu>#%(V1RNbE zg@9tduI(TTU=SdjoKBH_(JmBaIJl5De2HdOFMX5m7F=~c`JAs+c+B?jZ91F(DAi3Q z8h^!#3+T>mQr|h#8)syBF&B#uPEs*%?h;E>Cd(2_0#?$!!S~Jt*Az3Ot8f&Hf{vK@ z4Xqsx2{RL74pn4DI9~Dz2x^n0l0YaEi*GB*VwASl$y*T-{Wh|hZ*t4a7?h)9u!ax7 z6=dBa)BAAwBFw0|Ex4UGtEU*KDZu$%X6f=OY={BZ`nUf#!|h>lx4AqTKTz3OKgFVH zhaft%#Wd zwSDBeCSHU+xvlH-8|1%SDMnM6G0e+1rZoseEK#L29=mxc)DxYjfm? zz~dlwPBD`94q}YSS?C&@FmXpG5!y&zGYRaYG7pjczmy?lSp2?hfqncx3^EH)v^S6= z4*&n`7#hRPjGez+Ed68se{0*72s+^(c~fcMDE^PSXnEQR`6sNp|Dkp9FaHq3V#@!r zUJ`UpDElLeX|%Ze|BC%D-NfCg`Aa&hjgS9R#3FR>iG^?e#LSz$s`;;e9gej1!M6Gm z@)s?*|B$>tcwPwO{~~0m?D3!0-bPQ~Y5q!PKz)tq-vap$nAKNyqE~EdEL6ka{!y*h zK7C{v_4OQie*^p!_p98rCu9-va@Ud%}fZHlqAK zhRrNHtjmYADhz1<_uy=x{!gcOR{vAN|4#SS1F6C!VYTenKuP5jSvBx+wh&5I9QER| z4y@+CHS7-)Z=*de9{YvuE)-u>R{)OfzVi-5>?FTFt8v#D%vH#^%9|+JC=Ege(>i&l zEp}5^TfufSK(nHb3NPrmHeO-!AD@lCeZCgp&94NlS0p>5{32G({-NB^=VKO2GhL2D zgZ2<=IB0VX0DRsqyks20J3V6q>UJToRljr3;1dBOi)(oITv13?v)WPHv-M6YmO#c% z3;3s?Ht{|vpL*_huhpRAe{((Q_9)^c;OR3xT&?*3xKv#P7iUHsf!tSC!_qSf7-drQ z5qQLJh&cFgwotv@Ijs5!bgL44wM?G$)!7No&~|a}1bvk8>LK|tX&zV$9hI5c+8cYX zsl_=_#o@a#1qZ9E z<{%Fqs41adK;oC(gKnH4@Se$Ka-cb$86Ru|4a}n6Cjr$dP zI=|$XT7nEJ7VZlG;T)L#ZXdPs-wV#w@A}>$H$30QiI+j2>wt>LK~@xU$X9r)pB!mX zb1NWz*GaY$%^lmoVA`NqXywNrY?0fCJY9F>Smn;V%TRGS-{>fo70_M`R8+H;I~`OA zKn|vgu;Si}b$V%Q8*+G@S>nFMn$e#ip*cC5tV|!+(4GlIZBT&LlLo=2MYskGi@jB& z`Fn(R>DeH%tqYs#Gr&}mrH-0tg=8@c6YdlOD=fw4Z!;?lgH|&Qt+H{5i>9%eeyL`7 z%?DEPPw`hE1rO0h@o~HF>%G5KRxet5C;`NBf}PcFEF$YzNN6_Oj=A{Bb?8Mo7NG`( zLLo$Fq3e5ee94yd-=tPKwaJ*$(Au~Lb43JH&;qSov#n*yOuG=ze%+N(yIqz@MsneM z3wD_Bnl|R9uiTPXkMPou$d!;kM1K*OvKrN}zIM1=8I7h4DM#CYe@u`+D9$ulXonlb zl0sQ*B|9?9yW6fR_GQWJ-tKsFPwL0Jq1=n;Lt~J?7Gl@ z9tZGTVCkgquQ8w`EaAkCJgo+fV)0LL)dH%MlC0x)eZO=e?c~fMu+Hv|b4*C6WnIG^ zD9#AgsBxJ`w32AHtyzExYIbI_@k2N&w?VXeJi1S3H=tdT$&bkmHGTFGd?7NR>7_?I zckO>rZ+`KPoeZu0pe^tESd6efw_3j`VA4iT@oEw1wWcWvs);wtX=25zNaX&dwFNuN zhv!M^QSyV`eskJyg(X8Gej0g&D@qmKcJCCCD>(5vb=QPF4N{#Z@RT z0@+^XGTfevbWGmlOyb@(Kgk#sBV|+?rT<#})sQ>H11wQ4b<8IEf(_acq83RZ9IWi5 z^Kq1IR`+dbnD4p7PdTc2# z8d9Uc>N_G94Ji!60Ml)J7a=d0RRxY2`Vd&E>#-OUps47s>ouJ|+um_!evRveD1c@+ zohTLg1Q24p38JPHgP3gN*~G|{&O?Veq}mM!T~~Hlz?l4NZ1K9EVhoauD%MRDZLw(4 zi_m%Qd{kS%Q~Kq$&@v&3WPm=nViovH7cargeGKJiEv1F7)T9A$I%k8OP9 zM79ZiodNyMaqyvE?>Ph@RfrYp5xSu-SPuCgWd=R_g{P5;a5Khe||Ipr8Q`RFQ-#1)qmR%5@?I( z*~Z@j%WSt04L5)#s2LJpDL+UWG{oN;Y#f!*dMb-@!jLbqk^{gZsDj=j#pNC++6kRH z7(Bge0XgF%6F-A|Q^+u(71oY#K`{`n*wmA#cSRgon8v)B@CQf2ZiEk%*LLdFR*7~{ z`evgDPcWTl#WtCr zTT1>Y_9E8}KjBom?J5Xf74bprm2bvcHy#x>iE?#zp-&0Gxy|*hjzkhMWdmh{x7>QH ztetV@sd%2Jtyl0+xRlZ4T<`p3VA47_ta1{9JN(^i;cR$6-2Xr}NR5Jp%X0WDMpf;b zXSd*W;XZXoG&B|nFM*V0+JRLs7{FPCGhQhY)C^B(?h+4pj_<0rf6?Y3NuF8+!%eoGavQ;!4|QkD6N;JlFuGAsQ!`CPaiJOOXc zy-X|98W@WV!^3lT5ABOWQ>xwsA!elhA*CZCGh*j9OpbSTSqQuV673}M2uooErY#!p z3yE1L)Q}v+a&G!slzP$O7em>WM54+LW?&0L63DhM%D0Fqp{Vr(GG1l`*Tv}=iEUd6zgLZ+UW zOAtfRg#>R#qkbsT(hEsJmjxp>A@l0IXK4ci^Ow`Fi(eJE1>NAd;Ko03zzOX0(u|p zDI)f9N~{D{cBp3bOUgeiVd8>d9)>98EE`=pWSF}s4`FVyCrJOCWr7j`kWL&GX)V14!WpJ~B-JagGlwAY zJ9o)sR**Uka}vF(C9M^9V!oemmK=??JM26m3(azVn@Bjlm3|0t&IfBFdtCrNW!4ol zyl||LVWHJ~by(pqZ;E+yX;<6!H^uTD3}|vDXneEu({tlu*Y1ot3V8$^tw2TfY;LeQ z12bbD!jd%eG8b)Lb(J-cM=HPAFR=9Q_{-Gid)zDU@gC;0{M@pvHjzAi?Kv{~rBGd! zR+8F|0(?$vaH%2$Mz)K^y&n7duSUuW-b6Lb33*VKx+dIsKw>^dQ*kz`(d^FN1*r{7rRCuPLsDZO_2=BSM>GTp#Y{LM<|PciNg#Ye*ph692%_e= zF3%=ARP&p2pan*PB_WU51L*y{h z#LKR3G=l?`R`O+o&kIy{+iOC#9aPo(7Pm=Svs#l4AAJ#f#zT|aEL|ZvR@eA= z$#&(|_NzJPtXAG!gB9u%B{~(fzI3A2(TS$U&MN#-pU&$L0EWI1bep@A0eM_#W<=b` z28nk{ifXEg@M{1_`J`Mlj zizK}%Aq4jB?5p{V7KO-D$xGBea`YXAeelyOqYNOXX5M$?b2jbY?YCqnOqdp6B%|>5 zaijxTl^bry%@~KL+`X|Sz|i>J_Qh5G`LWOHYREz4)T}v^XNd9>ZUKa*Dk52Fujv_# zh#UEZnRGSODxTa(K{mS57LQ38%(>1AJInU8t%-n~jYoKa5ckskw_ctvq|uQJ;7#H* zn4wd;B$vV4BIEO$!i|^HX6Vas{O{gLJ%vrl{N;lQ+53~vwoNnc4Pr69>A-{{1E+~jX z&yUf_?g`l;eK9lLCUSd={EHXGY~)1|C6$GBCOIYo%kbR?ggB|`-)DtU2Hzhb=D31= z64;Wp#J;A_QyN0*+*{hCP&EXW3S1`C1cW@GBMfkOrs{K#;EA+WX;=#5A5_4l7_Rhe zK8H6Rx7{g0V@F!%a15>5kr5A@pLxpY4t0uN?PTQ4qAK^@JxE6s4)T%v`#0D#URviM z#YRlQM~3YAAot0ZcWX}GK&pe9er_O9O82=oJn5iHl-)#U%KBg$!zmx`O)sF(DTS%DgF24#et?+wbbhqnL5V z0MpiQB`nJ$_Cv(284Z%&flhT&fKR&zaVK}QivxQHPcH*W)X^qE`-%b*LYoGFE8uLE z2U9YEk@Yss|JhlF>UZ@r0MsQDrd&Z=%kqizo>oY1k)0NJr>jNvqlz_A#o=q$pC^0* z1qrcMsAC5fH-8nj;92^;bVCK2+`Y8^JS{j4uWd)AtF&Hnxb1KJB79dob?qJ~+*hk6 zS(1`Rl=N{e_I0+M8;>Ggyc7Ah&E@HSMW6gWK*Tov zGq$pyo5+)B6SRHA@8Auo0w`R3Z)q*m{~BTxI+cCKns#`y=)n%aOXel4f`3Rof0EAH1`SL7iCi zNd~ph<@2w8k^6}Q@`%b-d`vz~=BPW(^p=|jZAS+r8`0xw8M>pc{&xYT3MnsC-B+SO zPQ>P1&Vny#xsX)Ud18*~iba*J)ax5D!-KG}m8>QBlHz8xkQ?LAnHi6v)Xs%E5JKyb z{1bqmd(e#pMy6j==NPkfn$wG+QSq|oln?n&dAEiVyusen+&4xxTD?|>;e-sSk8k%g zwZPy3AX2}{0yA-Of~5KY{-mDv;&kr36YDJK$$a9LFnbUv9b=(tM4OS^G$1$B52|T* zV*Av7Afy{ly>0dryTnk&Mz1RPkj`A%4q7E&M7*dpgbW`Sg^=fVoU4m}rB_}ZawrW* z1tZ3n?DF^O%$L@qB_W-II~?dWimshOns1b!B;JDKiTLw(T=|}Uq&sorjL)4ur6B8L z+znvZWQ?ggYA*{NGn%|j=Q#bq`3;vu$#>V2cD$-T#5sn@_He5*9_et%zarSURQ46! zScog0BkQ)qrlm*qjx1j>NqDVuqno<|qL+-> z;->&*B!Ybu%eePQ)2SPY$aOgiwv-4*A%{gv{ehc=7=`3UII_+z!KHTKZIi_td4Nl? zzNc~5UhliHEbC?8!xO>+8OpSPKLYezYG(lO%{!HaU0jB0pz-!}Ku! zQtx*^ZRAw1WMH}!7JM3qIp!GB4}?6vqrxu_^?;0J8I;`PjY`?r!25&UT?U#Xx*s67 zLc8=_`nQOH+w{76gOb+)p=ku(eN$p7b=q88y}1`316bueCU5q$N>cv1OeHVa{UV1M zZoc<*v^Un|4G#ZH!i-KF>C~BKREBp-qIRneAG;0+@(B_ghdJookL)#c@Z|F|+|Hb392FH-jr5A* zK-Gq?`b)o|-6+AMPxZ#=^h$})gM7wC<}g1~xgbF06hg%Mm(g~c?2lYl^p+N$rle}J zuIC`A-zJqPvFr_vu=X+N4Y-cO1etc@CmVgX3>?(6R?`FP_%(4ibE;6M&?(DBvyc^X zW3hX~&(>}!3d18D+B(fnD6=5^)1#%G;iUFKBqCu2xo+Usppoq!o@IQz(1XgDSvC-{ zK5e6Y5;Gt*5e_dI(RoP95IQ%yQJS0Fe&8AtBnmUJ>?}=0#E0NPK}|`V-%8uf zz>lYWDLUC{8HAD+;4*aZeE~9@r|Wo{h44$ISP!}n!@*$mX&B$>x?mDi8Q6bjPe9gl zr(*g&t&vclzG~gK!JPYStX;L46OgHC$#|#bCwSqdtDatDEWD{_x3$D{*gS40o84L! z_%g#Uu7gLFa*$LQB^iHM(yp;dZEQ}zXo^^(4v_9?t8)yg+n8zggAiyrMb3x+6fx7J zJ`&QkdD|nOyC+18ao>!+leEEhMaJXw6Ao*fY-xO|aBP;Q0uP&6DyzR&?29HnD$cio zr77O+57S3s3bO#LHIl*wO`g#4XwILj@x&=IE$P0m)7r0)jKJr#b;*xAS27Bp-uo)a ziy3H*NYs~G()`puMc1Dm`(CG(l&2@=8{?}g%X4q?Kr5w;sF%fXhZ`Y0ni*bHpy zb!n5pL7nt#qh}C?_i8tiK>(6U*$jMe3hH=SQ&`@fXt+;iwb%#I8zhUx+Nc~kt?+QA z+J-Y9Bx?$P@@r}Gb7ve@1_f}^J!eZRq65fy;OP|NqWBQEug}lU@w#ZSpQfhM=0enU z`Uo>I4c_J~oGLkXXvLJC-a(8CN5{qzC8@)MT$+SeP4Di9LO?90T@1u)p>xup0~*S5 zWAjc!H}MRE?rgQ{x}14=kC-O?Y; zg08sipuF?(mWa=qirMHX$;ZBS2_3AjXUDVh&O`WC4=J>GVfu^b(n7gQQmynr&$VPR z>IVMN9n$UGT@%4Y^1y@dP4g;}L55N`)~>oGl*{#AL0_=OL3hG!j_AJ?xhx*zxA6?Ean&btS zf#ceP%OS%!4Xu&9@hJXm0}VUFs0RATjXy;S`_ID*VU~H~C@awsZF)zZbvZDN_a!60 z=!>=$cn^$k4j~w%Nv6tfge_=CAUo0No)WO<-}RcTx{6`|+0s+lAhw$yk7w;&=JB

?B~+AjyUNcb8^ zqPeqWFkd|nKXqPR0yhp%6DXGSxM-md003xs-0P|xsZKUmh0mvn-XNH;al1n;0B4x`RzImjCYY$*= zP++>h8S@28&^%Sd?MI4l_cLxkUTHTvv8h_3*iA{Uc7I=L@3 z{`=h1tWQa7Ov&7HxGcI?becIAZcHY=Elp>$xf05qrL*{S=FgG&7fkfAYDbCkhqpK1 zO(1yWoejG8%~B4Xn~~}M`2|>pFY|lI$+7g(`|eOl24P2k2@(qT8lgDX}j-%uVu3tH)}VWGZe^Y-l4;4BJ?_I3y?JQhpnf3j@#L&w|g%1w>(~JG}E57AV~5DFB&gB zSB)Vv3Gk+FVz_ztxlUZYUKgluBDY0*>xA>$3~cnRz7|!zFJ)iZ@c7qlQgZl2UwZt@ z(2=E^iN?LSkX^k3ZGr^kes5Lv_@etKBc4s73>D zTf24eE_k6A*S5bY{>lBnFBodXQ0Ga24=a z^fAimUs$)TWv_^PLJ){SFt9K?8+R@@@ESR@w8%z&3V|m?)i4&L85*GsrS^T9!jD$EgV7lQ9hwPW%JNJgl7s|Bg}&P59O{>0 zc04Ndzajv$SgXWd0OPg&!bOIzeIFE9xHSPrL;-hq%(wu8Y)uFchV6!g9!YIg!hrV@ zR@nbat{9o#<~D)v!SbSf{PKgsG7M`v>UbCV@Rx|HeZH2RsKu^pX2sk%rU4{P(vEZv z|M{Ks`ef-!`L$Icn1xZtg~t~;1Lxk#%4LTKi`Z>ey~rvEwBEqCwq0e$xLB&NK-}PJ z@i6Vi+-b#Es0nl2L3VEq>-*tMyJE@uP$=795&3r{CZ;!+7<;MTgARnm?(#OyBv3Ja z4wGO)rxVPIzvj*j(cr(^e~6u$l(Pn~X)y#Cvf=g?s+lV&uRG!#8)kOj9(6&s)t{7b z&qU$G-{&Avx5+dtm{O|7+F!V&YqM_=nsphoa#Iq@l<35de`0&R)oer-3G`lcmfqaL z*N@Ne@D?eR$|WOGPu3%);$A;G5P4%#)~K%!xGnfK?;o3Xx)EpwRp)-lwNZnTDVERN zO@$MDTHid{NrTIyvC7bEVSI`9MeQ5vS08lN=rXV*Jb)+8H{K z#e@nG;+d}Bv=XMNs$vI2K3Qo>{7u_d5IT8+T(WGm6wJnPb+hx3*5=eMA+UOsyvI~I zq}i5qtnW)kb1?DBbSte-qM1zz;0;tI@b&6*-!Ktz~JpxC-O2XSJz;Art5V7_=1y@}{m!SAedaCl<^Lsc4)pPq1Cav1 z7Na`-yw%io=sWuA=j(Ov^QH0iwQl%M_5rUqy{apRX9Rzv`^H1>&CmDf;ph8xR(#U^ zn6=>B;w$>md{^Cf^{cbxf%db1Xj%Ft?%nl#_|Uh<=lZqx)AdbmH@S!pu{-Q7Va?F*ORZu1NTer!*HQ`(zop^>k06w^x^vv zQ?_;SPU>^_nf#c&jr?--+AoGzoq~iupNXIQEx0+jQW;u)K*m4^2p5-X)74vSu z8`gdIe=e9>S1Tf3(ooS|g@~Uib)BLV*l(cJzKe);r!M7TC%3xvsk;3Ul8D*)3A?Kv zAJFOr55xy=>DXVoiMNAU`Yl=VC6Ja1ePob@%2$JSPRuEXMrgvu+OH%$tmmmDafFK5 zlDe$=JaE)Zx%~(g|5iiM!}W?i6Sz%z_mlHFEbHD)wKgWs2rdw5o!@p<;nfYT4-&4+ zxd@}QvflL|F0?Tb?RsW=sKw^wJ`m&>m(2rNBSvv_`8YQ{Su#sK^>t5{ z*3v|MKd`%_CgU^=)F#i6gC>Us1)*vSWTD6YZbm3arr?9N(ES7V#TYrXDwGot3O;ur z%~tQ)n9Q?JBt2N9YwpkiYmb0~CfE7@I~#w~HSUqiF+*En-sYQ5C+YE+kQG5(I1>(I z0clY}u_RCu@8G#+pg1A)Nj!SUMw-WX3mXTN#38dN;L3p4&+EKBme)mllQ_av9J8$ zBt-vA_=f}wavqP8Ce49A8`x#6RPibszK_Ma(?F+E;sE>nwW@~und}saan|RR{N!%G zJlK?()qDS7gF*Vq_^^Sg-+CF%|8urNDcAaJ5mqkNOMQ>6{p>GTx~r`&|6Z_qf7qm_ zb707)QFQ}OA{DIMKehQ-m4KzQx-KPHxW!)2$6orMM7sa3sF}0Y14V$Uor|jS@lQa1 zg)SvnBpJ$|T~~lBC0IWGkLQ25dFsiPsHi;(?6(vU{}8_!{>O}sLZq|R|_K&(g2D)*6{R4JE%(8#8{qHRl1LOydS+|SBS9u~* zQj2cIT7Cv09{9(-0vC~*cf?&1<^G)uNgu`C<;1il_6%DmNGmpK0Q(`Dm@w<#@5`um znmv&CT72^#!um7un5yh*t_%A<`Y);dd&&HWWa6SJq`p0-&)Y`wANcKTFhR=pQ% zV5P=dA^dN2|Le@)B{cNEjJbPj`z3lGkA)5d_hzQ63D%E7SDn+iG`HEN97~rqc396p z!c4bwPa`9eVDP&g#B~NkQs3H)K0h#Bt(~(kU?YuaH><#`$Z*yzQ6rSz>i(h69 z=6CB>x<9RQYC1|8$E_L@$!cI!aU`s@^wJgcP}15jV86+A<^Q{RE@vh?{L@`QI{$Rn z&ALk&_f;GK!xjK=(}Bk;+1`2#*8duqsP;tZ>7dT!6=HOQ@>xdz8h@k+z6}1(yZnDP z4!fE9I@=71y}`&m4quP22UKg()6B4}uJBwhmme64R&>@v;+SHJ7!nQJ;K zIH5BxA>GBd4~s(Ke%#3hUja8uD>uEI$pZ7&>5G4NM+W`!zQm#sHlGLO_(1UR! zwTSE*V}kI%76`h?T5_l1q_jrp?~{%o)z5+7OBx$wW`DEi{f_2fi&L>KeQBV*&796J z{y;+Op9LMJR~g^icy-3p*WC}zgAhSF20E}@J|9V z8dEGA7z_)SNqNSc6yb&oRxaTXnF`Lh7U{4$k`6bf5AyA|M(~=_yI)N|7M8+CjHZqC z1C?7B`#`WFJaCuH_nnk>p6}=!OnI-?v}zcZN`yizKfeipQBOwVxK-_X64=4V=v9W; zu4|HjPBapa@LH@|v^9mo3s>^_7#9gmyS`-+A2i`&;6t zy;h2yZ{Y{cc)gY3o6gVhu?EiP+b%05{P%O%_Qc?^MI(yIpZ`c=kNu*cgVt@5n&%>{ zf4JE+U(qBAKf4WMcju1<(gSIg04#BvnzAh8 z&2=FBlf=`9$)+obhtIDI4`R{{$fC2zea|zhs+iZnFXNv)NV9#x`*p_SZ69Fr73jp& z3Kg8cKFbW_^v3t`r3Q0~4FeaR9xp`Swj=dH*vLh+aw-F*ZOaCfcKlb^P9tX_e=x6s z6{R0b4|NEqL45I6rYnF$emO~8jU-E8JalHrhe_WYp6tYi%9@bcZ}jVMo^?Herg}@U zv!wo7Sa#u0jfc@uuxvb|=p zbwn&g|4gH+W80E0yR7t*6}$I`&zl?uR`1%h29gJCTlB$@S{AOpG=3;!Tx`$-qrU&3 ztYX|_nSj%qnQkek46ou&()+5xNR^F__Hh=sQmBCW zx~B`IL?6(OQ9F9ZC{<3*WiugWqMvI|iGSnh^1G->_Dh9i5|xu5Ne+2rOO4m-TA2 zF{|C=6>3>lDCQU(?wmCLo2BH*O1Iv8u;Yq$uP&r!4Lc?vPjQ1{+`dZ9lY@flZiGMYK;2_e!PXq!DSn^0c1qvNDU`CZgHp@Mn^b4w0?ShB8 zU0%z3GvKy_f;XC8mi<7oDFaz0k&gcNEz9`%CMKQU2Zs1Md}e3~3FN40v=|iwjqOhi zcJ6bQK~gIPa901xCVFPl&Ow^%h!EpCZ%{p!xoH!V`pBAnt7mW9>^f-pG$d@^n@fzM zSz%1#qLXsyM%$Wve4?SlZ{v)$jJksWXhEz`gA=Vu~NW@w)_` zAZ!)7u__oT0BCPwWPHl&wKbbCL-9(sz0I;45 zp~c~HXqh)#J2}edC~+M`WfAX7^4lo#OT2_Ez~2EZQCeIEgtvm&*_fzUvn;~Jety=Y z6##=003YM_s>b)`i`#_0lbbO7t(-Cbv()$}o1?Vb=dj5>FGn`1rHwtp9P(57S_l-; zyeR($8LhNYrEC8vmOCuc^FrLBuR9)-G`%NHy$})lQl`zCZ|F1Q@+w>KA)EsZ=1!JI zA1QsJmt=jqJ%Y~-aG-(7$`y`Bpic;BW!0)J1bELFn-j`mb~4V#G|KYJ5|)zm>k=N@ za#nIo%i_u7&DI41tEYL0khY;C{imOVS%*Kv1?M5$9_N_pzTBFr5BxxB1#xfpDa&Q5 z4k6!)=G_PTbl92=QC<%%20JI4^VYHaH*4`_?md;WRB!|uHLaW7VGG686a663*w*`R zeauAc9|2Tm9TmF@w3(t-%);awM!y~uM}~THTtJqh(c5n!BR8Q7G>B}TtZ4Y0Bew6A z2f@I@r-N6A;(NPPj?#<0NeZu0mYi}2QrCKhRK)Q4VeM{rpKv@|+PrJQG!XA{WT)Zt z!8*amRM(qTI8CMAbUVbf#eSMQ>*UvzlNlln$C@E;ewa}D^&~`+E#uQ1tz0+Jsta@# zp0C!#%RoMQ11*l16| zk?XGE)0ujXrR0^X0ry>VSoQbaK}<07O)mBR%F@i_P2;b?kLMo!7j}puts>(KHN$tt zm2^NI-tJNXb$0hj5WmjY2NE5bOltb0P%9d&XcVE{o+ z!mm&U)+?<$u)sp+rIUUMSgFXzTz2fXl^vW2BbNJyB#WS$dQb%}=^P-Go(tV3l$LVI zsCy@>yGVvrgZvTHJbhW7^Eg%*?|`p1D*P95gB@TYs+{Ge`6qB*a@epZgk+E};3R&P z8ut18cgR*t7X_wee>57KF;b6f!h_0H;b|REt;Tlp)U%$*q-JAe9ydgXrSm+~YGB$Q z8^5F(~@X^(o=MT=CwI4Yv9Po4aklK2Qn8_6U>o0C>{Dm|myK zP?g2T7b7^u+XSzT1aJ_&dQQ{aa#U0)8grBXl|Wa8ymGh+AdmG($s9ZXy2s>1gW^25fc3i&wGT4sDYL`Y31UtF zaQVe$Y_=mbAM;vvZE|8P(!?!pJY!-B&(LFSo87Y^$2C8@R7dEeR~Ho(FYSjbFHG-j zo@O^`UA*g`t@4ZqwvXtl7G`_iV@Ev}QfFoMnA zO`l;ZMP=nHbzoHl2Z59tS-UO&q;&3&2T9fqNnUB2y1Jm;D?sh9?2DJ^TzF zP0R~aWna#s>TL1C55O92Nritg*QZev$BPiw`bDD1))=#1ALG6|v=zz&AhUNt=;FMV zBwSTMO>C1r@nWJV(SHcKf=$p&@B?-(kTtJCrG4llV61`<)Qz&j_In|@Vv*axV;0H1 zig19Id%LUtb&q3AZVo!W5p+}6Ii|k{#Nbhsj?78-4T=+I;U4AU{EJXEMU+I-wlp|O zUUF^lW_^CRl)|Nkx5ILoA5EejyH_FSd(R0~Oi>11*)gwmZg~C*qi?ZDg`x6qwv~V;B|YTrnhXPytO%N*!O!`>^8Ssj>^2KiX~u(9A2??51gZ#|!p4Y5nR3 z3o~>}^0$a88m7QAB|_piCOdiXJL{D#5Yvbe?*@%T3}|Y3NFVz}u(;1}WN+L@v5BYP z?Q8@MwQF4*1jbgreV^HDB~IoW`_Y2-NQv6fb5k;H836`xpwa5Z-k+&T?4|Hb%OpH( zanDP{mT(>QBdtmA0#J1ZJqmWPYYT4*#tT{6 ztoxVX3k8VL8)ujtkA;&Py@PA&Q6mMb&JJXe?8A^2CTjH@)5(NLWLaY8`$+vODV5gGq(h*B5wEJ)<6FJg(j>KhwQ(ufIb)|WE^Yv}IX1_CW%o_Gd^<$#aAtMg%*`jFV zyz@G21lx3%C5aL=#b3fKZQo#W^X}2|nWSYJ6u{oWi?hzq(!t4X)uYEaQaND zzgzm!Gi4r{)S{7P*tNZy1v$pGoEruy0-Z0WWd<`PXdjXIkPJ7!AvBo^QLirM*SO+y z<(>@Vj~SwVtt{J(cq5AuAG~#_-Kyjs3PU6#GV>wr5ccPBB&K4PH}cf5*5>At5g}vt zr|LYC#6k+os>O-*OLajUsai5B769Lx=h7Gr(b)^{a~{pTpY)l6GTVYr*pfpy5Mz%Z z$b<;XcxT{b*)z2aAG$qVaiWOHH?i`LqSwwcZh}O!AG}tr&h&@F^qRcC?>40uos*Vk zNR4bA?#Mskw&!-LVwx?2sNJ9jQ6Ylf51sOI=T0aT>ltNwM1Kqrpwo*5?#Geo)HwV4 ze}3r}T4#XmNUDYGRCamD=~)rTz=xN@;I%_s!hCi*DLJa6>#Ob8X@MTe;Jh|qs|Ku%uyFs23 zP!)dGyGm=GjR_M?U(O&NKjGtXi*z|=;PQ)v0zNrjWSR{&28NkupKZ>X*v`DZ!jqRp2r3c$% zXU5PnI*>n7C~f%OY<{*qzo%`OWO9#1Wnt5&$r|-LK51vyC~Q<~<0qedRKkCUMZhCTi2gYr3z-7 zmN$$>edoP!%RKbI2_3+XgqewTY^+Gg9>4eolOC#t8dq5^!w|g6kF!~)k0bPyruB0T zXjA96meZZR2Ua#+6-e!hh`sDDu>A4ytpg84ZhQju4#F4hkS5)tcG8;&jZm-Ol5Jd6 zLiRLJT)k-$5t*cvPAR2x+FF=q9?XRW(iC7@A>r_w)4ruhDwQ%xoSkj=!V1FqmO1g2 zV@e6fcY;)=G=t{`L-mipMxB_iJ}F)5R0~xF|xvs)Xv^!&AvkUxfM@*`@s$pqw0)K8(b=xXbP;j8!yt37 zD*A!?-Pmbl&^p3;q4rXAyX@fQed*?!wsvf}KZMFVA1iD6ID#zFKJ?IvBf z!)44oWB3eUZ|0$I5Mz10yxEqDe7Wdj;ifo^JNpRkQe04)`#-xOW}Cgsc?9kn)O~rL zRo`ewe(3PR@Q7<&FQqTrIrtFW5J_Ws+b!`_jz)%_6YFnIu@x-eR9^R)2@JK}IBNmf zC?cs(-0mDX+a@RKOh?nIy}ZR;Rm4jd-7meXnAV6ej1$y6t`%AeuT~S0)O>uu|6Vv* z&-QWDvaE_wG_Ka}s!YL;V5?$uSV8O9PqA5`FWhzqc#ti4PBJ{O~PAJ9QBHf*Q}uM1r7%3_{D{%fu2Y2~+eTF|{x^N<(L_p`a!IL%rt zExF>ON(=hO`t9J0^fFaIk>fqn-h%DOp{14h+b**~gcp%c;4JT+`3EFN@o&j^)vrVY z`YAqH8tmD`Y-V*uV)75sw3$?|3pLh>r9TFGKw!TWrYj3;kD9=En8M zrRQber%-j_H11pFtUAM222B3+Xby$S|7&oU=N-OSbPWy$WYu6l;$&E#Xpj znBOm2P~lq_DuHY1diVjIngEdEMN|t2xQbmuCyZ%)XmhTg0`HHq!@u=oiCClCYf^_` z$`!1j8SC?v>s_2I63aeh>Tc(!_-P=m3#66$g@P`obIzj@iin`%y4u=y6Nff8o78!f}xh8xV_XqwhLN{2hhZ^KK~ zBFWPo?I3cXb`TeqJD(`Et0rXgcq?%kp>iAUU`liYKpO)`Pf(Crm?d!#Ke$!!CV5?o zDoex_1Xu1EjI|X0g!`mb8ORt))PZ$(#<*wLkavM70)A0+xuNsV442<7*Ys_5Ymp~v zYU<`VIP7O_s8iCEt-2PpJ30^yOYWBNA?cTliV!MxeiWYvQ;}Z$rh|R$*+ot%o|d~- z&0}jmN~~X)$t_GF+yj6PAcRwML1k4zeb|??$g?O1FWh-Oq__i7`#Vz2&#U;dRbW3i znyTU6M-x93l=1BV08~(N9nkM=jXzyZ`#d)~hfIzSlFeA!3V?L>;cR@_V1XF~KN3GS zy|R_PSQH=OenUYO6QemMv{7!)UBY%3k05LDwUj)*o*pJM-A@^al;`(6;&9Fh^%z&S z3pr5@$l40_rn2Q#m0}%Vb9{REXNFZWG=fS_lr^czXf`^|J?XQp1BK8!yunKFzQ&~drx3HHb95`{HDMfGMq z&MiJX8ACBArBx*H0Wfus8|2nO<#97{1 z{l>7xha(tW&Y6(C@BIYx4bmuj< zHD+mp*i3@$6Hnkq>Gv)V0cRdW&;cz+Y(qS=i4+3J`J#P4JsE8Rcc_0Z*oAn;If^3j zdkfAGuDqe;QPsZ%S|aedmax|DETaV2n}kNfs;To%o)!()5n4R!fQ^DT;sdbnq=ijE z9eEh&{Qx9CHdH_=jmYuHc(H&U_CmXZ=7gUyE@Eyo18!$%nuTIrV!$j~>Q}uU4QURp z9uw2dy4rfK4w|zWQ=anyMH`$P50AsAq0DiLl^|QF+fiXXAw`XXv0shJYp?<-h#YQO zB{Qxi%msa-wR?*~92h7VB-T=5gTdgSu=>p-*3;KPvN^rzHeFa$oe&`ni}Uk{-U`sq z7VqI6-b`cfEz<`HHEQpCHSe2yx7}PlkI&oPW%ShW$4(qyC;)gH?^eYCzvu>|!Ul;A zh1Pf6F3)T9-eA|6UcEkL2o0BPY0X}8NK8;9t!i2zCYmh;}nJAJn{%icpH=F$U?9F$O? zQ)9_)o>$kCF4%rnS>dJM?}z9MFR&j)DY~YhhrO!$5nWQU$T#Vo?gWev>QH?s2*$Hs z0&H>^;AhMl7kJa9k;PtIqTd#w!Tia}`a>DXQkgr%^!PXnX-bV*4HBb2L`J9jlUsyw z32lnft-zP=#xm(3zC}9GP>bWhG0+%A)m{f#W*ZI~DQLDb^&2OMrINpa$&*z5Ew1-7}%W$Z8lNM(PAL_Cz=ET7}T)&yH*M?i>kp5}J0PfGn;5{<&jz|k^FS%%v@&UAv6&UfDt z8CfYsf{ahxYXTE=+ZJyzwdKC-q+O7Nn4vsw?szp^wgwcYZtx)pzFG}uwnxcpP`Jyc z+HQ#V8f~Ax(Iju_h3gF9mrWxzM6A!go_herMvd*NW~m&#Nsy#)8l7oDEQX&|Hh3{U zSe0*Cv1}AxU`Npf^lJjYK%wVl-3`k?6>jm*;sg227edLUgJ zvC^HzyJF8mv1{u7RHU&*#sWylJg7N;M1&%g0}65;O^<|IdjkRh0g)5!+#bM+dQe1;vmAc2qeJ=g^I1@zCHPpF=Vd$q zR_t)MQ@7?B+rn-8T~h?0-}&CFVy7PH!}?-!`XMkkckx5)b|pE>&H6Cph@M)7`RPj_ zgKKT(XtgqtZmee$bdxvUE5!~6*e{!keTd^!Efqo?f*ODA=W)0f33J<`-eyQ_9th~?3?z*F(79?E^ zL*vS>h*M-!N%tzir5h-y%cTi?+4of;UV%C5{u~Jxwp;{X@hYzNuPNa;%fl>cupNK3LgU`ua9iWH>ri5l#XM@K^Us~>tmhxyx)$D(d_YWG zPgjky{G!Ev`AkyC$#>3zapOySau+_A$=And{cvgf4h=R6fjYY@WA^FpdgSadbw9@1 zsgoJO`!FW=5#E1@%`5UaaMW*W`n!uoVYyJ+YFExsUt!^mtN&iicNqE^bcJhS3rFH~ z*RgJ&DLn!rOA}9{r#{G4Q{W1BzYm{4@2;U20FPi+OkK{Lp#oME^x~q3T8Q>KF}cKD_AaVJn3USQOFQ zOw2^=y9-s>1C|rr1J(D)!(d?LxKAhfc0W7ixF3ydlw(VT$23FyO)MHgSrSPTxsfJI z`gb~A@vD&NAZauH1;BSg5M!y)*bj#w`2J zN%xZMq;AQvLU;P?a`B9b>$fLg4B;V{)(sP59GUW?L?=@O_(p1@({V(kvT|D`aU7nV z;dm{)L=^Jac5>mD4Dc``IU6*`$vYKH@ZDn9soyCcCZf}pleh0up<@Iyy^LTDy!2p( zWPy?1bTXYYiD818xNc|m^<;o7jIfp)6f%}uBrmo(J*VJqmg2cqgoSn%ze zvzj{M%Mbvm$46J!>eJd`E_AFL2A=04nd#Yc6gHaQlLKxQuN(<`qNs#2yw*6O>-D%) z0}8g363TAo%{d|rT6M_k&CKXs9Q`EoH^`C$hr*8CAgrOZ{znsmUr%I1T-P&IiedB4 z9c)HOSvWR*Vmyp<23LxITE3Be7Y8gWd@9-ld9_^A^+h|e>0Cw7+DLz9x*swdc#8u= zXY)!4^NibDZl0rza;dH|7a`(bD_>uW541g;*s^AC@@* r0o6pB=Vb{n)@CD;rT=X{OF~it*<~*)LH&kFzoU43Euzi}@B{oW$*m)n literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/resourceowners/wizard/summary_1.webp b/static/images/auditor/10.8/access/reviews/resourceowners/wizard/summary_1.webp new file mode 100644 index 0000000000000000000000000000000000000000..14508660437bef6b0d42dde3d04e429281219541 GIT binary patch literal 13400 zcmb8UW0+?>v+&!tZQDJ~Y1_8#X-wO;-92sFwr$(C&HtJE+0WT$Kl{92-h5bBs&b_& zl}dieT1!b%OiY0l2uNL2NI^}3lSt%my%rld3z&ug)DDEthCNl1j3hsg*#1qx4?f)7 z_S0*TfbEwB!iBr}A)x7d=tK9wzMIr_k3;*d>|x|nUe9;O_sSFG0qFZ>mSvLhVdk}` zKKll6?d#+{<{R|{^sRn+1E2)}S}C7zUiH6t2l!38czC0I`+QHI5&#+JzyQD^D4;}_ zU%sc=N74=T>*B-iNF6#4M1HTl zW}VLT@t^os_(*#B`^bK#e)_(|j#lG*C4RZ)VpjIB00h4dUP3=1TV9$0X#nhV`J zz^Sk6E6}&-m-$!AM$fqZ`6m_M#&_U%&wGs@<0;{;?-ii>v+rHuTl{{l}T)@e9DBy4D0+{r4=mWl%e2w^Dq0(!+`aA<(z^`F9F+SxRc!fjZYNIWN)LH}bzuNBLVpWMoMw&~mtVQm&;R~&k^z5rAt1=yzXTUWk(gsc_ zThpQ~+gLs(Vmic_)Hd+ORos|npv}*z2Q=U;Kh$qbO^oC9<~wI}48muwUd}_UB;J}1 zAFp$76-_uF8EAX|Jsy~>v+P1Iw4m#P{AN#Csv$q_wJ6K1+))QVh9a}3BnT?tFuhsD znbhKYv115}*>uf)1WjET;-yHT#?gegWRw`I|2Fksp=lJV&yc(%NcVCre98w$w}zVu zB&@hIRf0>xxhBH&s>F@BGx?U}G#A)=2_Q$;kkJ3J7{fTffnq@^{{FxzpfZ{aL>qL= z-TRp@j3#<2jhKv2#VKbIH-zkgGH@g=g&@?!a+CK9aT>x<*f2g%tTonvY_=6Pgs_MY zTgx+7tgAkA*FY?Ht(411uK9<_KEu5Qr5wo(MS#=)u1Z}eLIL4+JUOT>0%*?{E>g%H ziwXuWZ&V- zme8+q);tV;Us3&6mDe1ZGqN)sdLgW1EH{gK@%?gRHy~ykj$yP;g#}niu z=sb7TgR3wxz%_j^^(aPDbxQ1vr}4u)FwuAQc5fS7%Lz*=#$iR6%xBmX?k;rIbm2)6EQ$IJML6d{vC6pjCnpM2z*+Lb7n+JvWlgHe7H~+OQAbzx) z{gX)H_n!nj_-KR6VBiBFaB|XHd=dc@68zxIMH%`9ogomoF-a(*9Oa%*3_=6Fj&6;Q zElZN@OKZ0!f*5cIpi|jh;{+AhhIEl!&8?m!0t?|??3CG?0K$L&+#k%Vv;;&uT8`DK$Hh6zP zbS8hThUu2;peOM9>y(f4I7^!$(_7A*I<0VTe{~elIAo(#>9sTZX20G)=pw*I?f*N| z21C`?4f+CI0TeLu;-JWGx*sOAVdQe)N7=L*|G`hCGlbE zI|W;lxzgPdrJA)%!T-ZlFI0UkIvMk}l#!#*g)UQJ|6hrr_ax*Wssv(G{(q?a+Xsu; zLFli0eX!2|r0A{m;lDI%_Wv5?e*-o;wd)@ZBHTaI^gsA|JDUBMxS$a98viec|Al2H zqr;%TVC;r=`)>>X>b09X_K(KCe*ZuH;xc;tqanchU+~_G=OO-QWoi8<^9_c^p#CPz z3+120{+s{*`2BaP4@`&t(=WT;(?1#>=Kl;TaDc>3XulHMLDq#)eNQycWfP~>`xZ?r_oRBvyThO#b5Q6P* z3S?-3E&}ln|H;5V0=QkMMngDIN_!;SD;N)9v$~QUNq++Y zeFJI*fWUrBU-vS>)9`>fmLtU`s}Nz-e5c83_jhOw)?_5{a`7532@jqR={B|#fn$kf zM1VPme2BtxsTEoIDxlJAkCV~GId+b*AXLb}LXD9ts{9GOYO&eQ#* z?m8%QSIx^-G^kkR-S&3?6=DV22imzz_%U+K`oZibIWacl05X8!EA8skEAt1}lvvC- zX$wx#Q)+Joz^T1g423wZ zwnkem>`Bd}sgk^MW|&uy@k5(u9iRVP;S>?!n^)$x%Iwvt30HdW{Lm=a#6l41j9%>( z$)O!B=RFmXPx>?`zbp3207*%Bk38$AwCvxQaWW(u*!puOnL6h&i3&gqLWTwRKfoA|wP|#q-^DE++CZ zH5rqP+_oh@;gd1!OXmjkvh-WU&$Z;q)*MlOQ*9NiH62T>c-H%h} zLkkKarsKg_eTs!HnUJ6amgL*K_HNo&$miPB_3}BQF*d^-isSEBPotek2vUF>`a8`X zqrCmdu=_J7-bw$ARaF6(vpZ&?YXJVvDD(udaOKhF3vC2xk+D0(m22)Y#!siUQnE=` zbyU$}Ub3BNZybEc2_C*}fG>9Lc!ncAMS-z8OEFN$B9;!g4kAF-;3VPVk1TcZXcY5_ zZ55~C-uL%8$-PD7bXHKdrK4ewew(rkL3i(aMvs)V-t!pJ3+C5P%Qd9(8M%xpfM#tM zQCgR)e#57_HkvGzR7;-@U#3vEC!=xe-D+^?MF6YC`QwQqBEMG&S$Vkk?>H@kg|*S- zKEk}UWmXU|V=OM5C_TexLiW_Lt&A2lDmuJfDn4}>C>Bz!jgRbru0^JcBr*mviJ2AH z3fYgXtyw}hp5w&4)wrTy`~}ROAMhZ0G%`YDMx^X>{PY(N%2{9&bS@kKR*i&E(s(5eTrzcz<23@q8J83kW zc}H40K`5v5l(AHp7Ge!c>~`NoerPH0lrGf6+aiiB!q*~p_YG4zf#IFJ|7b&Q3%0Nb z`dOFH-O9pHKYo-H=aps;?qCaH`v(y&COdQ6xjLd4XQ!i(W(wXXlx-uL{LS?4j4-Pji zk;nd>9<0Si2!Z?C4(PX3w$-~?_=EgUMA%1pwgUbx)k;GO2csG=Xfyn1Hh};P8elnt zjh48K1ViLWWjv-8tr;0Lf(-IIllu);uK|(Syj|K7KaY-fb9}JLbBKZaE<0G8CXR?V zaGD;6%?yz&c(B!}uAsPCrqZuR9f{IsfUZGHDWp9Vn`oAp!0;uj{KT{qbw=RDvDIqx zZu*O$=<@snNtkxc?Fum3igs*tHE-{xW1$2>0QhTs`VZj^Bcca!J7qKN*nIRK&Vkhm z@A-z2c8?$XeaUWgn-cx#FYKeXzBk_DF-#mlU)NG1a_2gWJWjz>Bm4DOl_=`PpH)gQ~V5g`uz?lNpuuI z*e7elwamTPfySD3=L_7TmBg<`9MF;*I-M^XyTwI^39l@D6n1z^k#d<4z8)O1gTJ%E ztx(0tP&agSa~fMZ1I2Nqv`sY>3JTV*VqAu1p_N>rD00CBFUk?9_fs`53Hp3SXspM2 zMD_#)44l`e4E%AP^NTsDp$6SIUsY{ikJpyFb%xf}H7g3IX7>^Z*))KF$#9=Nj7w8k zwj3D;_KWT9m`&5%A};uW^sv#Y?|}t40Kdo{7yJ*M<(?<5N_FzTuoX>Is%fY4Z0OQ$ zu*A~>Uzc7yoCX)~i=<0(Yx*kReS(#KT>;a9ECY!sk4K+1idvH0F-VIOD8gzxAlja( zS=&qfnTO3N!1`F|d)!Dq_GS8BUsw*91d%^runvrG#Wwj!msEj!yA^)*fXz*Qg1OOp zkz*ctJ{!5evWY(@H@UhryaHBgGKi z1#7uMKW7|kyxkv+q9bf;9g;y9#3aQQho-Mwx*+vcQiBP~rpV)}QRLJV*>b}CWWUL1 zSbKe;4g#*3u(4F?x3xg4UmKmjbP{G-a_TJkJOzb*_6XL%^};Gibj(6SPS7o@sz7{- z4EA4tRVzlVk_Dunz#QaS5uK*nv_wD1MaQ9iQ!s1wlxpIg^B4z7~`yy9_M$-7Vj`**U($Rj* z`|L8|7xqyi!P}Kry96#s1v*!CFxOMTVy1gCEDL5JDlhPr`zJDXRln-0ikgT0Lp%Ei z+ykq}BE>8}-r5$SFD%^Xs#Ul?Dtu6RzNFL9PcX8Nh^%>7M2gqFga;{Yyvj;qx&&vS zfxBY5B)(jABRQns%1tS1?lwlV&Gi_LS{G1UD1)1tBlvn{9q|nW_HK)~91Bn)Mi-5h&MrUvIM+0Q$e0fL)*yAg8*_Wd=!lEdw3uBW4xbs`Hi++h!s6p{k6*2ULld?bH~U@_Mt(LQ+9=ux`Ps zF!2Xjgz^VN*i9Zgz%_{OJxED&+N>I})OBWGjo7f<5zeito4$<+NjbPfY?(p8w(ouU zSDKbe=ZxgcRl_{%n^bjAJ0ljPzETv)*7slt+B4Maid%b6wF2< z56nMz%n7Jee^5*L8Rx!vg)yiP%17CyQyimDK{nKiL)yMnEJq`j=JbA_i&KlXe9whZ zzRQYvr$MtNC--pE^(bZ^)kk{ihDrs8w_CE8ntKQy)jwDWrCkGN_1BVg)FH|Jc= zd@pD{-Szpw69vterA_EeiV=4#4PJ(yCFk}w*LySm z*q;K5?k=h2qyS7|J&({6`j`}o9lC>44H!%Nb%h_>aG)H9-q=TG8nH!;gk9VDEk|pF z))B4vgH`b7=DgS;paGc#wnHbEetT$+aV#uyao!M&n3z)scR)SXqQ2dkIwvI6eKrvf zq6an-Ej%**?aRk??qE~VzRsZWVR$9qILVeqRuXIU&F zgGS{uEK`(v;0UH!E+)2WMg(ohhY=M*)unI`%Yo(d_cTP)$A#e)RbF>I@xq+G>ldCb zeRDxptO-y`%A^;8A1`Ly5T)cLecEKrP;LHV>B=*~%mnm&u*$=VtWV_=1L|B=wuV(P$`=lN8h3L9hh|{aOnopbX|rLb~Ks?E3Z1zd^{+A&_&ylG0C)xelP~@};pX;Hp8*2rrw$ z>+UR+D2B@;^O-J7JwN?uk=Hfl#?oy3uzr6E#skF^YOt>Cp}#&ar#wZ*c?1uMJKre>6i%HcP9DPY_z; zA|z*gS@~Ji!=%(K6yjlRU&ettGn*WEYo!ESoAoH;3S39Zb{sxmUtz@I^TyM}v_cBU zmW$G)_&;C@?y`Ie-LZy#9V}V8&&Zj93Q1IAYuzl!j;Tx6D!^InNPPAeMGv212t#pL}fKqLo-x| zjH5`DJ_zG1wHC#|`H?#St;P8hlUg<;Ks|_S4TL7Rs2QjmrjWav(|FZ4yFh{~l;ScU zZ>7%XP|2g~D0ONrEfC{rj^JG%0NAXR6jUUa}0ZdTqV_=VB{CVXu-FM7p*tFCO1O&@E^(&(XQo4}YXvg66vnQ?FPvR4J+oKi2 z@#{KUEAp+T)`L(Z#^j^UkUG z_L1eBVNI!s{?8M~8%M6a=>aACpec=G<3-{29*5e31~>2%y0>{&6E4MT_hY$0tjZR< z<~f6^UY{7g4rAW)I0{R=7ELw+CkPt09&aOY_?? zZ4*3D$+iKi_#d0>;Ze|5z5>yF=FrlwWE)Drd(Mk!!yeizf2^GVxpY+_pPcK@*zexu z2g1U{WY|~h*7{gDln`&VjrX{&RI1*JjGq&rD65job8fe7r6cjnAZJ(2-3ARebQf$l_2WfEyJAkSfI7|#bmVx6Y|4kc95eKgH)GM)JWfvS3Hy#vpDEz+7oYf9 zx77~l0M18fB!^jreD!Q@wiB!tqv0?XkSzuffza8j*V3^Wp<{#5s& znTj8|m&~`yWI2lLMq>pgUNqb#EPB?diRzafeD`>689ngIfiJeP2tQ&ao@zhoBSmfI zM{7Fl4SEcR2&QITAHfB6s}w%K5V&KAZ}FFOJrYedunCa>-6+@{%@qGbuV~ zg-J0Hjf%!VZnH#u7!@1Wt!`5o(5rSvi}P_0FiHJk21;ce9L)jl;gCEy-64%My_R(t z6K67#CY!@o$(XQ?Nkto6$1J0(FyNn5Ny)TKRJOyygFtP0We8x|wu1A~N{ zdnhQZV*d`Z^BFZxgl@6IL%NZAs21yZbMOOI&b`=Dcap3&hL5{X}tH}m)z7#^o!oZvl}1zyj4BM zq?$jlK|qkrNh2*m-{_`j`*lV<*DOQ&X8Txym8HYvcT*bI+Iwy;v9e zsmv5{L{>b04oaxa^C$iP_e>j98`)Mk4syYy6tL(Ls*XU*2g2T-?mrdp)-hU3V~G@#EiWLwR6HFG)J%& zJ3cnTc5@eBOJ`MXf8Q)aefFGW?WzOcmMrd(x9S0&)e$&l`PHcu#bv*tL%pTOTdRpG zQYU&A9VfcdUW4jN!928hx>&}U?YaK_L2z)}~0e!+c8?!%CBHqPx#e+5u>o#QwGK0DGhuV*jcj_hZiOta;Jgj2p*m zTeNHbaBo`OVopl(uKJhVeD7$DyVRuTdXbq6a0d6^X4ZP$!H5_@Y&&Wl8f@_2vQ0q# z(=%XOkn#9C9djQRV^XanBD3U(wE8`onIRYNF{=vDolcAckY+?txo6yJ^&43b)H37* z*-}$vgt<{7vTL_>Hlr{TL>daLJFu7m9z91MBj+(cjoKWvnFCZuPLMF8kCo*$z{qk* zQ^s-`^TGOjf#4xdVOvjglpYvy%iscg*`VUyv6tjbN+TpZNEjh(jjO^xLiH@1KGxLI zrL7F#jky^wm>sz{>dEBi#!10v$J>!aUb&QGjZrx1ZOh-nTOdoW(Pd`1^T{IhS8Q@H zBeUmMj#sTvB44$e?RuMm@=oI%M?x|enea?qACjlw&F~=^SB*NN}~7~d<{N+EafXHMi`^@U|;EMs!H<82MYe7GWgeRp=vgu zK+sASlVl%D&a5J^aQL|sww^LPHW`USafS39tD9QXj4wBVRZ85phq_&JDq?Bvj4@UyQH+V?>xztoNs02rxCxlAHd-QM;TD(rO4az6EYX zT2mm})EiBD2OjqDo>!iQBs{6TzsKjD6^fS`Fo z82tK1-kk~-_pW6hpqAZq0~b;;l$Ctq6H}8}$u*sl%a{vx*IlV~z~7a)(vJp>I#B)g zZH;uaD%Y7FAz~`@v3yWKdvVF7+pfqm&{GQ{&yG!MJ)ASLsJDo)*6Vp-t`YTZi%~(6 zrvQ`nxaDfAIx`U}-IG~3(iu7QhkoBB1xb2z^dV8B0ROs6V)#max#TiC1)?r>iUSVE z2z;)0qqb-AUthoq%cyGYiw;AcSG5p$!AC|5s-bBQU5|Bv)@Ih4N|^A|!LH z_Vz{<_y7Wj|3E0+18kDr6%a|vDXEg;jS~U1?1YFSysF?CAE?>|^m+msp8W0vWd6u2 zLm!|$`uYo6=K5gQhH_QH>x`;$uU9YzD`t9sNgSifN3Rfq>I2)YK>;r=R#n$+t@mibsF405kezEL~awFP-!`Av- ziqlI-;&5zwoP%*F5m__XIeGS8`(0A|I$Na>%a9RXoKlNy&>}A)*zB$)*Quup!PIoA z4`c~@=NjANKPwQMWJ8v@F4rM>pVE289(vCHoeXM;Bi@yK>sstW=sghCs?xm-Rt!x% z5J$Lh04Xvd3h{co(-vzRVg%C<1tr#Z+aN=;AXPlst=PJl^;0cfpcGrma*5t?yI)oC z*FjfdGAsWPWUQhFqWbq><~=!83^PNkuWXp|eq2zCi-wtY|^0zrZG+lr_Zn?&IE3{M-%plV`c#QJC%rj|DqQlQvSZCR*j1e-cIhS-!6z9N-PxwxC>{;i&O4 z3FYPMEMv2Sg|mq~7*-{1Y_@MH9uNu@ltkV5lEDc1Qri?w)BobqrY5!@r^KsmLsK&a zZTqd?&9SM; zlcB}Sk)t=wh4QfoAn&ho29&q}@l|?&o1i-L2oE4_lH}8i9R4vd)y$lBUM+_C{uxe3 z*9la*#iLNi^3Opu-t>C`z8?M%qD%uN+{3pCnv zh4W!v6W+fQ+h;x)J|Jv3Z=h$~rDd>dCTVR@(l$i`ljtVZx1JN6TkXij#xi|Jl2bUx zJq5I17JT@g){?ZA|LU1B#X6avBZhpukLeqNZOEplor+n^#h>jUS$HD_yv^v0X0*S0 zM68j+p(Djdwcd{}dF=-=7=ZC?X$J&)mdM_TrKSMUeu6YGa4@04 zF2p$UWg(Ek*F*mq=>0w7yYgtgc|I7w3wbQAJljS{_b4%Nu4Rn09^)I~WWnMFJ^(u$ zm8nm=PG4rrKfCFB_Q9x7L|_(sQLwT84d_@n)Rte`41%a6E!YSfo4zv`HRJ|n%y;njAlqs)KA2Iw81D|7E+Wr}#B)Mh^D5LRlHuYUk_f`UmKHiPPul$40v z)Q>+E%kHm)>QE-5@8aUF>Z}Ip;$}lKzr0b$Y94$PAIjGIa$wM7^UM^bkY`bPUVq%b zti&hlxkC6dkzc^LJmXD!f zI(p1*a&TSoAvwGmi2xqsWU$EX@um3t$54XQBTiNcbU)Aw(no&bwu#PoSnEQJG!+k` zU4d&ccN!NFQZ*c7Oh7FQY9K;jA^4Ks-lmQ}t#wK>JkwxA)RVs%mUVm7kZsuc@~wsj zjJ>Yqdl9_Vs@OQ=#rw=7iaR->RWcOo78R5D*rhQgM`RolY8|qKYWdC_OZh`vTr(X5 zeDovNYiq~p`BB`yzL`5M=Z5Mwr!MsQy9B<(55;jqMMKZf!cFp8-)Ro<=SSjhP3T@+ z*&dv)exzl@YiMv$fyybDGYh@mz5{~0KVD@A@Q+~eHkORyOKc;Y3*P2NQ8IY)5zggs zd*iG9y*NfZ5>&xpG~;l~H&)K$B7(pU1I|}Ha_-tDF03<9S?)qq5Q~!1Nq%e)qNw{e zBL*QX^4yes4y@&0IApAAXz<5;G=^XVZ)e2N)=38i7l^fey+`<@3uMTTKr`j49trEZ z^t4Yf1QS!D?htMsrTw@TG`W$-let{=atO=>9KLh8kj4bV=dBwD;aw!eE({4fHIyB1 z;Ev!5f9PmEncc{_HUioLUf`tMI?4xQt{j-+;0m&zd`58_gMg`ux)ilRFCiosyy_fA zX3{g)I7i;jk`E;gi4CxA;`x_cRzUuxIM*9aqAw6q7OJbDP&QvrZ<&w zL7dX!hrum6sm;ugej_}PvF(^<_P6{2wI-Wz*r#bwiqB;+dTduMnCjV&Cu~rAS%w;6 z3>)kh(HTHWq~=Qe98u3X`}F7Nx-IxU-o6Y5Jdif>BZ6Y#iONqPupmpvMvX-7GAe05 zkOzwiUFsS$wU@Gm6sC(v<=IxfK9sV#2Q?Ww6lpBA&4ck46Cz~pRkDZExwl;EQdtz1 zny^$sVcSqoO%w~=++wv`OlZb{)QnWdi>V}8S`ps8fphO9YI{xTi;JYI@VG3M!)M-0 zF4UuF*B&Lm-2~SwGrCb~7xf_i-E-wb^C>p5?sUKe%Eq9$h?`?-T%wMGgVko+B%^2= z`b}K6$x~9GoR!%Gmo9w?bmIeeZ2?x2Yp@V|0LaH`j2FJ*%-mQ;L#%qvJ5<-ij@yr0AA4^ODTcT>Qiha5B|) zDc+wC^%yOxRb21E9{;p{bat*AvUYU%B$XK@%Al9*AtsZtJVYh{YA)!p9anAINB|!G zP#S0cx=Z#UC_&6S=%+Ttn656ySo zMp6^pG8LIp2uBJ?^}_-t!S_Tfy#!~&=Fl>I3`6<62oWR2Rf2-K8XV|*9Zn& zlaM8T{vxRb!Zj#;gGUXZIB;SnbOI)1@xh6Ak{dAL`#!$frsp#E=>P%~3$081-bn?b z{(ExK`2GE~^M5Qz7-wGlzOs;7@~l+BD=ZZpM3nU6@XU-M6$R67%$oT(=aT{i-OeaVt&Ako+RJ=ff9){ zH?D|0L(87=$5p^lVGk_uq`tbtP5)}3AjuneMmbV>*0DpFy^FsSzz>Nb3o+e}Z-^s~ zlKopdV(_(c?^LK=60gMTMdyfAlwwz37CDv2wz_{r8QQ{$Z71k*@fCNa9L(z1j0#e! zJDVF?0+P6eP{GC1!fQIN!NsC5=x8s0&SsK9gF4Tj^5AXnAgCM}6gzZgQSjr(?q^_p zSDqd<)P`Aod=B*}3+jgZ9O|PmR2I1LgE|&uFJTi((Xg)Tk4D02xxS@SPsX4grDk2m zYlc;E{?PDg$)^OXZTA&c9BR?{`m%jkAtZ{_R(u|VGW`*dIaq@qTW> zXeEx7;m61ZUz?btvdJ^2oew1DOVaJaR%*`V1jKxo;?uG-EAD%2q=*j`QsO%glL$u^ zpVuRky0?%?DTxRUE;#SQ`Pu9n5G?AtS|3rLhUNIgo^Y7`Gq_dNRX!nYv^`j@lNq)U z2k>-2)5m&~zhK$x47XrCX^EpglQBrRtldvgBm(>pS6jEl*~eUSDyE&ZMm(7--Scys zYZMP5a6;0a9<%|?G@^v>ekbRxF_&YRs7?61!cp-*?PyJ%RsojWmN-uZn-h9>q_=I{ zLK{ce`|@hSblyAwdt0l_wkGq!t~9B3L^9MNDb=IuDXh9sWqVM%P{`m~5CQh*!OAs@$lEdSztt^oF_KgLn<#GN603 zY)QTSfx{Rw_F=Osq2B7O!_>pNW%)$I`C;u%&1ppeAdIIn|B2k6K3A(*GmDa(!>i|> zvt9SkdYV|_eDbj5$zyrjnEh*rOH0jtC-Oh!3F|?Fnx2hhjA!z0_m(?{`4UnPa%ot;nSjWhFlW*#15ff*BZC4~k zhy%&M)LT!o$P!R}5mJ6#Qz^+i(hFXA@{d>a^5GXnK^bgYX)_b-M$P>6Nm6zJMh-+K zEMDm0B=vl9{DmbQv|e@wp$~AbDhOEJ)SkMd7&VRgRY&4yI=Urh&wi*mb2i5?IoHN7 zrR!WI5pKu_*TOGk+B`7NT6)cI%PcTs4m7GQ?jod{#DlYbUyMleh}xy|?Wc5W<=j!# zfN|Fxc#Pn2=VWV>%~4>&^;)qY_;bS%7lk|*6kX0=U>uT<45Vj`pXUpH1;QTl)%i?l zE_>q>8K>WJn$=Es86lM*5 zt>PwG+KJrf$(A6vNJl4)h!Sok>{|~rzLty{_ literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/access/reviews/resourceowners/wizard/summarytaskcompleted.webp b/static/images/auditor/10.8/access/reviews/resourceowners/wizard/summarytaskcompleted.webp new file mode 100644 index 0000000000000000000000000000000000000000..e86a37d78d89e718fd5980933968d643e92a0c02 GIT binary patch literal 8044 zcmdsc^-~?&w)JMi#$6NKT|#gP?i$=ZxI4imKyVH21PJcV#@*fBHMno!<(%{Gckiq3 z{ROXoST%aotU1P-bFS*{YGr8&i7zAofQGopXZ6qAq?&*5hkZaM6g@GtJy5`wGe!C* zc^(;Q4Q-P@N|>b`gg3SH{2>?b=xcK1rM_D%5uE{cpDY0@#}rVTi&@3U0S*SOa*Q;ZljaTXlk2iWIG#ub{1Iu z3uN)PBD5{d9?@mHW0QlWsAecm>F5jDX(`yGPo*gXApR(H=_j-?8hyA7*1|EV?#E~mS6Du#7{?EJeYO^? z*UT@%m%bwQWqF?rur)G)4~Z%{d> zhYZWQvHVAI8{p{E5nZcLWY#4(#JiAFZpi^El5wAPEFu7kVfLLiZ_}I(pq%K70%E7_ z>wo$&3h5MpM`Fbll~Jhhro5aLG@T$TmX8u2iTGE+e)G=E;(RjK#-JN1$;YgjBV?3{ z7mwmRSi4?jycU~kQELm(ES)TX3AP?SOo`M6wh-a*HS+&*VCcH@sIJW;^*frV;ctXP z3XKCLEkN>2WrNhTMJDc=hDdBWa|_9taj)Bcb8xbM3(H7zq4^BIPQ-@l=W#Je-%s{n z7Q&vU43u^f2xgtfovx}Oud)eiSQjH2WwwcuE6X~Ak0Hnydi{}8=W{nuRO`l~sm`IM zt8+Cb!shU@kW`revG9YS%I?Q8P_D zHbB=6yJRs-&xH^+*?;;1Umsew)6xTl1*%}3O&AN9YxX2fDd{?mMjC`WlrX`IJ7C@$hrSz3OfWVA?skz7DGScc-Fj z|1_-`0LQM5_?O4O=gz04yHW5DOb?;E+y6J)oNJzf`X}Hq$L&AaY{&VkqCew$BK()= ze`ojuY$vt;8scEc%YU-w`!KG5Sf4=v&ws?4uaq%3|E1Mr{6E+<+^_zBX{EvaJMSL{ z_e9ozyRF0h$M3%c)ye}nq8op zl*ek4SrqX*JTHBmv8bJZ>x#B_+9^GoT)oqK3e+I36vOU$GjS_V&PK)QkV+`z+G4SC%V=WpRs?sO2i=9va$)zf6m zlEBr$fIZ{PcxGeJ_KR1lL%8h9iLrJtV`qBoM2IB5^$*k=dzFLla$f?}Dyk=T)801F zDY+cP9i+bFQXrAC6cnt!ymULZF}!|1Cg9hs4DxVw&1Gm5W9Prl9t6vaHK=1f%XE#q z5Zz^Lv25RCUuE3A%f=MutZ!SzRGvOv7WO8lJK$m41F6wxvtZq>RcbML8eSKd=hmho zKL)nZJzQ)1qSe2;*n2&n+Hw_JdiwBU`!J6Ec3L&0r?$Q z-qX83?P!@KC0kcPs7rM;v`6l_@zWxUug8RAdC?@Cgfm9}Q>A=6pH!nx_o6VP$`$xi z8_y)HPn>GQbiRhtI?PX7nXw+vm#;2?C!4Oc%+1M#5e7K39mBOPXFps-CXcd@QEoZT zoxxCDvN|XGwcUQ-upSbuFJJr)EI=p8bTZ~3;yW;>q!JcKqFxWiylHQi*{k>B4avCU zJ2*L3+sJKu=q8grP(2CN6RSoi*h;kR+f?{HdbyOA#v@ua)nR!YX%KL$o5|o7#OGA zVs8kHc_{ZwH_CYRo(AxEEl}d&IuLVWm)6Fj!Vn8n;OPaa>e0G@?r@XOj{e~M7$nV$`lsw@Wz0V?#sPGcI$fo$BQ#r}y0?4ht`BX|^ ztgyO9!lTkL>vw34J5X;*K^6HHMvu)m!QL?threq(ikRCFoq=L0TM`e`7fUWxz2ELw zopBN{0UP?Nx;Kg*ax*=eUVz|hz}}*I%HV|*4`*OPS4$d9CCpOYz+RcoMm?Ejf=ID@C z|5-eqe=adAW+5~{Sq569Uodk-C{J*hyIDRfJ1Tr3If4>D`I zT?>>F(+-?@?adw+s!zmhR&p~c)PV{uUOUHQe31$(80yp{41Y_?fIF(z4y^H|vwr#- zI=NsVP-n9qVeByAl*pQ5`IIlhl7g6`mL#g2}0HlGtpm#WO z{(!$OE}5ry*hkt}ba)!iAIKb0g^P<1^_eC;%E}J_;MR+aJu;4E*s3C#TtIb#-;@u{ zM?Awi>wZ!_j~t++5Pq>dz#|6kA|56X(MJA#rWcxEztD}c-O*1GNL(-6%Ud$}uqv?sc!mo}= z9%)O9YOKCxq4IzV>1w^&5yNoF0u<0YzfBKc*b$g=HN=CBu^?{2o)=Kbh0yF%oUFz* zTbCN2T(PM>IB(MS*HE>_x9bCSo047v^v;qRlbvHZ6au$5t&uR0MA|l38-oeqiDd^o z*e^7xb=Myp9h~x02UW_Qphu~qc!Z)Sy5&((m zpMPB4=@zQ1LdB<3w4&MAKDhAT@>G{M6XfJq?xyk$i2XVRWo6N$G?KN_GpQI{&M=bG zsW!&IP6SZ8t&ZijjNA^2X*C8#bARzm{>56-V>iS#XA~XgqH02RguCphjwtv#5*pIC zUe)sj+O+LP=;7<(1&ol@2_ZOJH?(zt!CJo@3+M7tG;uzEYqwfl(PP<*8P#CS#A~xO zs_`Pb#D=P4=q_5?OYcjLp)mqN#V(gH)265su--0aR7sBMZj`cR$?{tIj`6+Glue>f+4K*im{~A>Jtc{IO5jczcn)n#{Q!iJx3@qr@IS4-r0Rz3vXv}2!Ne!CV z*N>ROHpJI{DG>Fitw<1P>|+l?n1tc@Q{)jY1?#|sS=&U6HczhH=EJ*1 zhxiC1O)Fkm6#jDw+c_LP-5vFpi+Zo%hxfP=C$3pjpKV2cc#Ep-3lmX2JJNL!dF(l7 zx@V=!zF-^%%|x|^cx1gN;DTas+JwH&CDQVm`pJfMq3fYGyso_4n)pF%X2AOv8e?C$lx@T6*uH7 z1%it>$VV*f+0+t7S0i~!UrB4UeS-0{_#QI_a*70>)^~>mhpByZ$+^363y!;q|o>^}48FY#s~hy{7Z zBM3)@cMRuDDh$Zx6uwu&{n1g?o&3jHbgECWrJXuWpbGq;Bq$gLI7VUJ1V124TZx zK0E7{arswsFGc&8+PoTv++#AV4nex=6-FbG~O9Qh*vD;-Ow!{V00h z%&BpC*R9Kz)T>U%xOmFMzzr`xj6Hvw%P{j=KMvCn^ANt7v+sgWQI!RWZ9|dSm6O zHSVYhFsaTS4inYZ3jLc;IyY%5qJmC&dKMC;PGt2Y-P*RHE;{#Ns5+rS%|`#{(;z=K z>1;d_i}LNLBoXsX);^1O6>P15AH_jCkoO%zijppnxK)xx&JI>AD1I6`;hg&}7~wu+ zlW<*X8@4HcNVgKb&e(CT#ZALyt*Dov_#am&iZ-o#_;ZnnJ z#&qaULKH#u$`s!3F&~yyzU&G>$)*Q5l1;K^yb{o%>~v0B$gASJ>f(>=vNs(FFQI6O zM;{E|8+IS7GFl4!TMKN_^TRxfAd9PMi=JIKrJU(Xlh9s4} zDg+70YVXRMK{AN%H2YJT!$Y`h=PO(tJa;XNi!}O--+rXKy6UHH?L3@6(7EZ~cBE0Y z&x$P#ng3jy|2ih1xNDNGz8SC~E&)}y7Jun=fyP+yybqE1dGZW|xuTElzwpz`F6Q3; zs3^f^qbI4P63r&fXxyGM;ud9KVvkQ=EY<-D+yi9T^S34psy`zH#N82wCY%j6m_Rp% zEswjW74`vT!_A7TU-w(xA-aiV=y@5XKAlJnE7-U*Q*Ol^_oqEoP4C7hG8~i}Fup>C=l|g~E*Os@b+^!n`^FdCS(5!rba5D?Fn% z!R)9SnzTl{?or!f$iQ$>_Om0|+&tW&6jT91E3x=WG=cZFgI*p!W!LU%6(Nta?DLL4 z^tQX4!}GNU$KcemohD;h4dm>2tS0#Gyd7Px$Kw&eS(j6d(P1aBh=u8>)f4v=#3taAWoHbe(;p1-3!5zwEY2%w-0-w>L$K?|wGBtS42XJh*yt`jUfmAgI__f?zNTdM)3st1F}yjezi6}VN>lN=yKWZU_!#|FG{Xw#2r_!Uy!yylDUYWY#3m5zX)2*ar~#5>Co z#uqnM!b#AU$4L3mC6fGX5TMz*X_$vmNe@NPLh(`4#*C2kl=5l{Ik~!K{AhMKJljbP zL_OF_8yU=UG52A|9PZT2wtKZ|&O9Weh`Y&&d#gL>U|6E7+M+sCb`QI*F)^md^?u6q zRaLqKOrT(eoTMfeK4!Q(T0mil459ye>9Ck37R_bV`sOoUVqCBoQ;QQOjpAS+0B_fX zV1o*Jo~9gxVA%>Apm^4kdReV`mE?YlozP_|CLy6Ru%Sr2^H$a z&P%-spVDRiazTZMP@oZV9c;CVZ6m3z60>mYPzn5{0I# zNR`CFUC`~R0e+uCqbIUW38D7|`)z*@#iRQ<4Xk4)gF%-F{*U_y3eg!MJG(>do!Q7>{pbbd-42%iDw1)SZyR>3noxb z9d6*{|Agl0&tl%o8@?IQ_|$~?NMs8Gen*l9(y-EhfB5PDwA&F|Z{jSNZ%X#M%!y5* z=XZ->6Rd8{D9JOhl$LzgE^`b|}-4adSU?CzGYJEnurd z*4}B0JVu_nvk%&IYIa!JEJn&l_n~fP;8fAOT2uZWhDnB~aA4{dTuEF(ndKsr*==z2y-b_D=Pv*CMXPv@aBfZ7PKkrH>sjQAdTc=Yox?q2=TB0gwtO?xU!IJ5dxY;o89nn4pP3VMnA;5fQ*}i{V6$(+Lvcwg8Uks4<5xPDV&Kf%lrERg+GfZMg?ELir*%aC)HX-b#D44W#PlF?;M~(W z80}UUBBTd%J*~Y#7y?{eZ`y zQ}f5H?&|nU=!k%hkb?G{nKGqh#iS&& z<-I{j(bf*HPCS*TEJ80Zv`>y?J*1S}C-b#kW9`(lm&XNlO7{VU1iM|m-hF|iclhsY z3&3ZglG+zXW5j#r0XXZm>3-r~u>Bvh!H!Hn)Rp z@c#~YpKq7~Xp(<|D@U6A5zJ z|xD33EoZ1E8J7aPc4{cce#7{_o_Q51nIb7jlE zWV4N{+sV;qd-JZZ`!v*dX{_G%*$oJY=g$Tth6qij1YITW4#B-GbbdJhXhrf5s>h;_ zbrTJ`+^b{Dg%%~d-%n2u0P0*Z*Y`pHX*8)E;pm;OG%g^Q4o6jTk`hi zy99UCwMa%gi0N=@HAIon_cO!+w4 z4dt0a#+f0GfH_NVj#khHB$m`4b z273dC>6jzfh)u%UjU2}K5zGGd)s{mPp#_L{BeU~C`|D!?zJ&vDgzY~Svk%7zJt~qh zeK4>|&G0A}ZRF3~`oIH{CINkLy&+2Ny{68oBA7;Bmr~Qk~X$AcMt$;rm`K}m7 zO+$D);=eWVKP!a$cnFg;IIGLmks_`C$oYRXQynH(R?)0>fN{pBpl0)J=mRI=U;OJV zcm-O`rt+j}`Cr!kJ73wU@)xht{!^GM*G9L0t4XYXG74|2nOu zNcq3_u^XQIHxgRV82<)PmfFAj`WI(5z?x$!fNDYiOt6}BslSP4Rr)Vm{dZ~0p};>> zAXun>P=jFLN6$hkn(ajk?f$ccc34rWqnI@dD{9ogi{x+0ln#kX73U*G%?y96%8eG` zg;JVl>zHNMxxTB@C?&>flmFEH{~0!sj%;u(3d=_($~W^R(R* z%19PeF`@6PkCL)af_uN%T|#q0%miuQjm>agv|wCYc9zCx*uz+eFu1r=ufTs7 zm^6{^T0(UL9`1au>OwWwaeY3G!S9Gm?!;0rU@@I0M@;90(jdZHYD>ePr3Jr283&X8{8iD zcD9nF?)|w=Xb5@FT%vl`1e&xQ>ep4#1T(q3neH{tN+lJPU>#fx_8{#L2#mi;v?FxG zqh6O9_<+)ZjXVzT%jUN9=%Z)*B@`xjw{UqWzL7f){kgnF=^u9aGwRNZj{UhrP`f6( z+OXInPD(OvPTPpcrQ#e-Td<*1l%F#j#<~WnZG9Tl16>}@m@W&?QKp8ipRhRI5@Lku zcF{Hciwt!a=TL-xit-cauf)5Ziv~FEmj9w>joJ`53iA!1HLF+|r)$N)tBwAZeiBkP z#JTS#-qS0%Pk{PMw~sw_sS97ZL#-FBQgD=l2<#! z1;bp_jClEofMM^}VyRKRui^L8_u*vbItvJUVD1^Fk$3#!zI#+1Ht zNhqU2@pJs@QpqTxto-k*Z13M8T0aoGTge)8nEw28!zHgq78!W`}A|b>07@(sUseAX)kc5 zkYIP5v4vKBY-lDx^F~)Rkg+x(ILfLZ=>5me(J%Lg5T5lZU-KjEVl;%0$(gA?FOhpE zv6FBiL1|koC>IYK4yH@4G}&q12N3(`oe}JVO*%BgdrY0)v$?vHsz)q2)015HCJ?1! z0lT8CB?9R=bKLJ7NoH&}VzVWKS6ay~L0m8BLrR`km+h(FmS{;Ka977MQO-RHr;OlT zA!|PhY}0wR)SineG?;o$VQr-|>%~)jEzUDz3A@=uo@oBW zGG;NPCeVFUb4V#%`C4%g!hfYOig`fs^tXOLlnv1Akc4L^_@T(Az34ZmK;$|2_FcK& zTe)weYvzTcdNo^w(?dY^S^NMu;Bx=kV=f)yM~Q>6FZXfMnq72P$GLNZExmdGaw{*Y zlnsbUScKdAF!Dyq-E{OhO~5TS)fde|GSrM(t>3-{k_T#_ujmJhc^R%4Ir4D1cXfOy zylvZgaJimdec&~QDTf*U*Zu5fo>hkw20tjCl1X1Af8cW_FFPL}6MviOMc)o%K>F={ z=Ums0$+l7DW-hbTwfQF`x#b>X_dOOrU1t!mUa$Jfn`C=;=!?=w=yo`s_p!8ot2$C& zl+5lBGbh?JnPCPvQ(3j~%@1bjY_;NYenKBxq z;wj-8%xTTUrQL6Y6sf`F{9Til)W+Q|ub%VtQoTQzQ@>8$l*kFk3nJ}L@||sVL`sX`5lv=B@CPIW*v;ZwWL`cdfq#M8hoe~S`@AiRa6_+i zCDA@^M%OOu8dlbqQ#_)ZUB-CO^o0r~^;as<22t!s39`~hh%Hr_> zsy&|j9GEx!sd^LQd1lyiv4jtbt(iCNT!K5P`%7lh*RLxRBPwYa})NqHD6z#-Y%fF%IO;|KKs4bj< z6+a+z!P{;eYASo>-$}a|DPmjeaY=F)Q_7vB!BXW0lFh^KplD9~G``?2F>zAI<=C13 z{8`q|BhUth$;MzVd`XItjU28k$UCb}8IdaNM7#(HxN zsgVBdeg@n5&;Uk?b$qF`Si~Sg!4>iBM zP3%AA+O9L#OB~?*Op^~&Dr%X%ZJ92jARhGloo(MD;gh~7IDEtMnrwvfkcmQE4HBoi z5Ngi0f~E9lC4s$-H_s(1DKD1mAvuE*MYo0ADyhC!$mRi~da9uNyrDb`jK;h*q@dJp z^+J?Ly=-lycI9hQ!7ZRjjL8wrRT@fE(L61z_0#Oc%b;T_P3RB34Hrs6uHG*n@CIAq zr)u(3$MmdjhlgY{>gu$yi#P5cS5XivwgO%Q_o;G3i4rBzHAg)y$u zwG6rIY?wuz_?mcHIzKac%4-L}00UuQqq-y8<wTo_%_+XiUgVFz8+!hDZii)oowvEi>)&#}f%`Q)sViBw!qr zV}VAkiVri#S{Ntbg2~mUj4s1BQzSu>%?mDf5+``{5m8zS^`*PEstH4Ql>sIlm+4&>3JJVCY2vc6DCYr?g?*U!bFV|2=Da3? zB;#V00*+5fIlSD# zF_@fA8bz*AmKpL1s-40fpL$DLMH7tf=aaFmip?7)S5}+Fpc}2A$6+} zg|vE=9h9#e6CFu?1AHtiy_JbqaGVN($G6r%KObo% zD^6-Ug|q%H&X$qv!Q#&1__XYW6-j%o>x(U$m))kZ8`&ByNXtJ+kXh` z*T~M;c@_jVc9ml*+v&u%u!a7E zdAg+lh$aO;LH~>RfIW^(C8miNW4C<^!f2W6YE5o?o(nHl%lumSM(orgUH`=w8r~~aZnWM;9`|fGn*SnI6Bs*eMUIY}%xXtMg9+NdOCcksp zpNYgOVVcPu)P_*C^CFqvq~dOJiYm9~RW5c-5#{;AZRa`Or3KA{xLQ1Ebs_DRe?8ql z1@5gGy)KP-uoI=k^X0xtPdgr3(W1I3j31WeV5dcXC~qL{GJuG^EluQn`l#0ME<8N& zA;)ucO2Yx$J$ZmZKhyY+Bhl~k9{BYBJX$_Zl~weg8f zzu0{&k4Id5Y8NG>SdjlsBdhyDHit{ep{*iLupu1qxZn@ekflm^LsIc0Y*vT2`yohL$2hP`Q#j23&jFatIEQcTWRtmW{`l(EX zH$bt($N44TR9>5P_tl=}N2t1^WwcmmMR?@sBc=HIVV$2;sKYp1y^`_6wizX|T7j5N zKFNxJHjiI_H_EEN{z!>hUHZufK}+rCNuHlBpe=+cnO?Ddes)gA-+VsjyuO`@e9w$h z`1RB=Fe;&nF&O?ODM!nR(aF}(Zsy6_u)>8HRShW+By+hm8-S0W==Q)5(6Q9tPEq!C zcrV7;q3RvZO z&!_V`?m$%)$?mK4KR%=u*5;CRYt7+-0PT`XJF5vpx_hPjY9iYVksi^WKKxAOrZVw* zcBdLBx;0jcn2{MQ44M4Gp)|Shfbj!C;pb(w1;=J=pdpTmsX(3SWz#e2(_5$M*w+Tf z$>gBaDg`2L!ffIEk`fG5I~+Oi7Aak^Q%!;^Rd=Ug3;#&CXF6FDI?{yb1-Y!4$+77< z)jXBd5pv)_D$MYnYbEqhoG!VsKEEKtupIEm0{83woiG08yv3)V6KhfENF42oFppTJ z>zeK{pQ1hvIGbqcG&j4oFY!sNYC*Gg9@9qsz79)CP8jN2H$If_^DQOnR`b<0@C-Po z8I^BpQ+mZXcwFLSzIg9CTC&P9-lu&#-6bwRZ z!%e(16FEx{CRv5;(5@&UXhJj6uxDIl8t4!`E#?VcEv^&T2-JFs_o-lDiR5F4N2E!g zM)Tr4B5$M_ZY@iW%~hLR@|q|qOB!+L-oGY_-x4){>Az5zWsn%~TiAkZ1?CQCw>rpt z4X$_Elw@w!@S~;SnUk*`lGPEbv}uWx;jHVsDDe|NwaswZp!f|c-t<8orG#p~5^=s4 z6c9vrNjv?RpxeQ!xt4nnzd8ypH7Y?BnzA%1mO(7|Ui?(){0Wu~*R_Fzg|2>4sOrbh zbAEax5N)h?R3Fpny6mDqvCD-d>Zg`&t-e_Z&r$ZhTRgGL6pXP)a*1)q&p5gZq%RyO zk`wBNJD4cpA+;-5mLf86k+3zWG%F3f^rq3N*<*Q4{>DoH2=3nL>TH=ft&?7Q|H8wv z9pq_YFEPD1nKlx>V<;UQ_{5+(EWgW`*&4h(NG^a4v@y1K69hL!)kva}uKtus1r}BX zuSC{^Z=+}l{usf|_3+sJSoDYEUi(KTuSqrF`dE2`&*<}ubj=7nwNgyBQ%bQ{?}9Ht z5tR#aZ5tLk1GT+l<`9lxFE@S~O<;`$fY$OIr@{8nr7~43(*F_R7eYw$=O_{zY2st- zkdxAzx7O_97J62uVijRDWsmm!7ZS}S529f8kDF|4UI9^lc{$@*KJOPbcQwE`r@}MX7LEzB13-pJ}3M z$M~sahB*Qc>2B>aX6jJ5P#6Wbv83+E(4OTL=^is(?Q)Y9@1rph@pfBB6D06Z7_C#J zgrCFs;2Ht3EghXp?AWL`1P0h2CJ>Y7W`v>B(i1&XLYY;0#pf1L$kD%kwZYHo8Ed0G`v0n0#@xWJ$1^CMcO>@k!4dPRH zwcq6;nOs_f^v#|8X{T%f6MuwzvgL;_hU?Ya0-oC36i(x=tGCcZXaFLTJ?Z6Bx z-*aS6Ll3ARO`_k-PG<#E7H~__R?C_Bqdv<`WR7G=Y(3QmnLn@hn4IJ*n5I312oYxK zW_HaQC`cotIY%sMBf>v zg3w(4E}RHN(0h(OGu>q!4nsRM>?kv49;bBJzUhSDFQ0 z&8gKFRHsgREIV(*t&E3pc1IH6hq|Zv9hIN|lU9{@T7kw>=_M7a=~`}V_mw5l*O>=un0MljTQac&XI%voZS2Nj#aHH2{HkBRa}hKSgox#xs; zb=V;SstME}_R3;76eA#jEbEq>19-sk& zM?_XhbyWOwhPEQhREkqesR8s;uoCN$S*lDy4F35lRvbrn(FyL;Y3Zhc`Assu!>0=@ zAu~e#-wacFnm1HKwD^M7HbwrxSe@++p6-S^pU{x|L}iEI>K=dW#69fHew98n3dG;q zidp5y`b;7~FMR7tcPCeZAO&?^OLOS1h{RLjDza|zI1<|QQI1$^!D_G7lWU#4p{z`y z1w~l%*fPI!^gU#DQdCsRZPx4=b^=GW8&pC5so7p?PN&dBX|dRh>Sw@2L6j0=4=>)u z9CD4-8jI4O9-+D7@ri)1w24s-YaO06t-YGtr=8O`U^n0syZus!!DRk}FKMq%nK07Hsxk2vnFUT|K=53;@H6rlK1=_k%O z4sn^Y1wnZYsG6%AUB;(%@5Hcoc@n2Ymw9RK0M;dsBlxz&<9UK$vxxn??6g)o3G#_r zcP1@^*_4&JupynfnUgH4Gnnq__94|EcXxVtflncFuNY@4(mB-$3ho#UskX0q&8vF__MYI3&};iyvTUBd32JA^lkCU+&@Q z;~WZE&Q&DDx2;jFt!uz5hilteCVmkV9)wctjeU_3A;QOeH!!2(vdO-zM%BJ@pB8#6 z@#<>mx6vCM&LzWhCC$idt`SztDV0#!Y5XCB7%ibMBWA5yyprDlo1 z^_1_8IkR3_iK{^9cHo10Un>zbwj(a<>RR(KWm?-noXW`dz zrozE<4|;{y;o4yu2!B=DqJSM-*@e$d{cvS_XXJBQ+~jUo;yp1l&}in+{_vLAsZg}} zQI4e8NjfRlV}!>lCKYOCdu}iQ?n&wHIkMNp<{3}U0TP5DgI;b601lH(Q8Ii2AX5!V zJU0}~{LW~I%~|g`=yA9@P%&le5yu|n?q}Om?%)WWQbE4Ox-nUtzWb6@z!9?h3bpb3jrl3?wK{2Z3-tF;F z8DycYq8bKpN5_pLONd?@Z=D>Vz&Gx(@2NR)a&B2cURcII<~RIzTC;q(>(WJ`ggGnq aAg|99sLj%%5K@P^v~ML&AGZH^^1lFp{+68p literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/accountlockoutexaminer/ale_new_results.webp b/static/images/auditor/10.8/accountlockoutexaminer/ale_new_results.webp new file mode 100644 index 0000000000000000000000000000000000000000..cadc062edee5691b4f82c26a5b3d4009a9d208a2 GIT binary patch literal 27878 zcmZsgW00=B+NRsKt<~mg+qP}nwryjzt<|<|+qUiQXWqSMPtCWdCco}V-Di?3S8^Vy zL`hOiY{v!&NL^G&K}~^!XyKpl1WVu?U}{cKTo686wsZ;7UnImu4IM-Q@R8O!PloSaMgQsE*`KY?M*p^F z!td85(68DTdriboy#f7ozy<&SIKKn_R6Sq(Y`(Mq!37ZB>~_U}=P4k5>mc!i{y2a2 zeqcWF-|+!{aNp&h@~(R8cQ<`;zvPefD*);MvY+_R);h$;9g?om7yg^P!*8)4hUfGf z{uMwkU>E>?dHUgh)7!pd{dw|(`gwZ8-p6p5H_G4UZv=n^uz!h<_D%sJKIQL?mU@T$ zOP)cVi;nVk_^bSV0m(l!n^jYQdVm>#_~-Bw5&%f>C;SQjA^gm{<^PDULp74RC+w2LOJ4jsS1odf%CV z+0TDOXSL7XKeeZT&-qEyaDo#s+~1;Vrp_Sn86;Iq?ST+e$f}t-eZgi>l~Xkaf{kFR zX6nC*)`O@UX)=&(`q4FI<@CFixynl8r2y2JBstPpuV>IQf$L}&8l$}eQYHvPA4>wz zf@_9&uby^D5^S2Q_7=&Wd)aykAK;nb>vZbS)MD7JHSvB<$D4NYSh;k(NtL87WsG3b z=}aLUbTvXuIWtm!X>4HJPX3Tt^}xj;H`__QSXg8cM0FypV&;=EL7FI67!!O0V}-Vx zO_iY!=ic7t3_ujFeYrIOeTLP#hn4}TiLEFZk)%lSi4LqiSDdI%+IGT*k#zJ{fe7H}@mRpwlDRZ^O;&k)^QpWHT5|UG4T~GG&2v61w=$9MCXjYi@-eRshAXf;ch6f!$vJnBrH7N5Hu2~ z+S7}knB`O=@od#P3&tQhwpIK~kt%G21smi%oi4QNUI27O8kf)@X}pq_2&Tw5sP$f0Ae^DO$PVVh!_JITRP8VzY3;m#O4eU2>|)dEIV%&?jox?|!i@ z%aJQs)idJPw8S$jE!sk!7XG{vHe7qW3Qx*Ee!Bjtu>YCpQh}=|S6bukt`@#Cj>zX= zlVj#rl#Xm<`gKl0d3ZZM#!)k-Ee9`@*8!0-#J9TIRMs~td%c-odG>qSUv-jTPFQ&2 zYr2PceLe)W&6P-FIKmFe7G|Ll9E2f=Eu)WG{XTcs>=C+%{z!R;2%z7r9rP$Eu4-6*4o!fiLTYi>@@%th%sKw} zbTw?75~Yw5MXD{k{;1H4as{t$(AM*tb9iBdj@Yxn5Pl#??Bx3PmZchyIX(r8YWK6ZMf$}LH7XhLoxSKF$x06x zPxvP=+iTsVR$T7+YnU=Z3P32Hd!^s&UTpLMn=gypgHtp>y%8)TuJj6A(2>nN*A8d) zBTQQon;b1$xnyjqWH45ggZ&Dh+Z^-{M%@@cbfNlG^iWk*mpXLP z*i5H0ZL0zp|IC@d=D(eWut>w?wNxf>-pHaax>V>trZZNiG{XA^x}8X% z(-h0wqmIoURxNOhuB5HR6i)6GKu#EQ9NYF)2NC`IHT9vuiE61n-tRvqA?EhCUdW8G zYF>*9rF82A?5%{x;ry=fd#S|S;JuD49;m}MU2~aK_AFwgX~#;n;LdzOKn=<5tPj#M}C`r#ZLz3i@XD8V$ExoZuG+ ztz|@)YofvgcU=hw;m4~8#gPw{!E`+B%7~68tw73`)Esgc4Z5&0$g8}dpS|SJ&p3G1 zzGhc1PLrzc1`c{U%nOucGw&B|(cy%wO%5}QG1;j8Ue*hcULLpprYCc2j+|)Df!L=S zicvxWyAEaC&h1Od5WdSHxAme3(mHuolXB=YX91=Rp1NU*pq~E%X`Ur5c%7j9^@>Mu=48yciaGUt~8pv5%YEma;R}sPzQyUd-*iPH5tE%08Xj``) z#}jI)i0Cv*Qh;B=kgnO=8Fl(3=0cW@-4>AvwGJ}TPKuqm<0b4NU|)D6QprL_+P6|M zw^~P-B3@;sB$Z4eB9`lV{J_w`GStKpPEVvviV}pWkM}C2vP&pQ_*Y_UDv^9OUeDn4 zl^~4(mn6zW|1t$8VY>gvuw)M{%XR)`Tf6@QN>mBl|1c3LvG8-p4k{eNQY ze=Gj8wl$&ti>3c(SrfT2{51Su^8F9VKj1yi-Txo>{lAib2L1a&b@1P;{BOm-QH|Py z_P>GsUy6TuU&iYOM>p{QNAeHdhXE@BHDi{(Ps{T%!%0Beemkf!F`lzdc?2QAakKa3*L8Xp)dZ(WW(&BDy{M-(oCEG+?vG zjU@Y5gua;?X-U$71+Wn-vHw=@b!$KI8{hSk5xM_JSUg!n9xPO4_sSF`Gli5&)q65! zZ@v%w+vC3fGy4DJ;SFgEn$aTb!C=*Y$PDq37%xcpyL3!HOppX+B`4_)>%ADsp%4dn zMSuwY2e!e1G8AhB{Plve{ko@hez_YUhLCaj%k=06Zb?X}LL`u1>&fD~`5$W`_?_%E zFTix3psjh8^V%OUSBV&u1tRtaa$dw3@c*8vGSbQtQR-haFYR!#o$rrL9@jT~JyVGs zM8V*jm~sVgb`RwByK0$=;hPkrJS*G`*&(tLA6Ru#f8hmd=2`s0OBh&42>|+BLN0n! ze%ClU<@ggQjhHt=6kA5%7$)7f`+Cu-nXnoHmh?oR1z`*Xv_!O_Xo+@04I2SNVsI&z zi>gYiSCq+%eTp=OLT$4P6`VBgx$2**7c?Su4S4d~co=%5x`qW@@X%b+2^K3VyL`?R z2w-eUIH6P_)oDk?VP?)M!!#46@M=o2H(@M>I1Yl}-LG4^3jzSozM$&5_36^YEFktRRF^)&hn z!lO~Fjp_8D11XpNA%#?h%-GE>fxP}bZn&-sYA|*3q+9=>4u%v5<*fFUVYZevbjym` zE}~E*ypZSsX-&&8XP{@QV4UC1}dwuaXyZP zW4J?6o6f(}!eZPez0|C$v`z|{_;jxEn%@laI`=zu=lH##&-%p17PJBbVLAF?D4jlo zEY$Nj4&E7l)F!XXOS?fi5-j;-<1gJ{1gqIBK6d=o$p?hCTPDCv3|t+EMaO5YrjIn4 zG{{4pROjPsq12$mec9N2h&RB76cV3^PfV`oxsqulBpg{x%ahUt8F(lqDGfl;xYPSre0<%M=?o z5y9-iMznXTtcOF&2Na>jb{dBnp9JL`)nC}U(iXqT5F(K4|4F?k3iMbXq|e#rjj_YX1KMZm_*9~{p00;mTBE*Fr~|t% z3=&xS2tw|#(4Lcv63$9&sDTq#FLKR7FGGA5zlL&uD5>e9)3gT`P{bZk0!=XSB-L=; zfeVf1T6Pz9eTFDWf9lmaXLWiRpa+61ZIoMy z(%xT_0SkJTGIgnKU^y#KEg(Q8RqJV>g{S90rpAZ*AG1V(z7i@VzC?NNN|y)mx-rbu zWMriS1G>Vvd5IX#^bF&AT%}Pzkx_(%6*QFF7LyoMEjgepP7Os9twU__TFR%2^!F6Q zN?nNT%aN?i75@%bF*8`F>F=ikMtH1e3FG7Loj--U{gq)EXtxSNZUN+5u&Rg=V-(n`rh&HiTBZn?NXWE0e|MmqVPx-|9t;138Fvh$d zz~+fhG@T!B##sti8cx!Qx|Oh9SXJY&VC-W>v9+rZd{BQ`w*#elVODGHuCd)ehGsg& zI=GxKz(ks@-_M)W1nH>_u5+6(EA0pOS;Mxrno{#ikh+UFqf(+?#CMSut{>_sv`~S=MIzk5O z2@4TywxW7-c~4Jpp23rmtp~6%+~stM?{975RKk)g&QUU#y%^K71btQHl{)6WDXo{w zP*_s#uv>8{)ORTtI{5e4F-<@*n6ocRK zRPn?(iVp=i%?&gim48b z{F3ln1owDtDsI50V zU4HmQJ*fdNl8;{sLxQu2>s)$Qy81YI1W{}T;yLfmSY+bk_=qYZUiRzZWO#V}?j?Tj zmOxnr0&%VdF0NwIjx7c8S+Weldv z*}WUswtsZso1k2K(5#GNz=&Zg037j^^x4j_IOVp!p8F;>Ppjkv=SP(UJcSW!bojIF zw|v@VwJ+CwgJ~waMp}?62RXRogSO&1Ly^Q~wJmUQ;Rd`a*w#_ivmb4ql|6r%Os6c) z);<54%3?+o)BVcCs=6wiHY7g*j^|0d zEwzj8P6?Vlds`<=o3wu?jj$6K(qzF?xHQL=a)IS>Zs8(dA~NqlQjs~@ zVKiD5s~C}%tdf3iVkY0mYOYL;PQ>$8vz|)hlE5OcCv_E?Qe5VmJ>j+@$g38E&4@qim3e!7bbF# znrJ#F%gBc;W>59B{5H}enEx{^ zqVkmQI*cEX_Io*&%m%DD`}BPKig5CL z;N|sh9lV1f&ymQMYg#pla~_V;&r?;UKZ2l=reM-$-EaH-VgI|f4Q=g0TJ(YDp#f)h znN?@kmX*&z@iS)i&{&O?iKT=jJ?(W<_=6<&-r#EP>x$GGv28fxtd~|nKMWl3%%t9g z(;Nx|THOAoRFs5U*7AoPb z2IG;QMeH1+_E4?nBb@ksvGZJd)|GHG`6wHQuyGx+RkKuDX*cn1yyI-1mc-@dnnNx= zYEG4CqRyq-*~wz-aOra+_Bz&_lmN4=q($ofylE`Sv@HyW)JR9(8K+a?RU8q)mg^W|NmEi_~bNQpf~@9*f6<8jnRoC+(yU ziU|$b+f6g2>Cm1hQo60#=~B&FGAcMEb6dWlBn%ymm%if+rov+3Q&si!;rBe8srlMF!yBuou+ggOqcxKk|-fB|exOc61%0z&^sg_;%yFGE3xjE&1|`IAYQM5o9s$77;yQb7mX_sN1)5hB6z_>6!U7 z0c&M&D?cV#%~c{I^c>GUJ3Vk@9^2@;<$FU3*maV6q`B>s)s)1BAy~+LdrO8YOU0{F_ z=XInk?sV@oJnm)Scg(Js&TBA?jeMb+tT}FNy(GmDNSA&v6`p#!JMt&yM`LZ?@0N#X zbOd5ihR?HPFq)Yx_azr^G|8| z@BV`OiMpaX^CyUrOJr7I6Vg;M-ujE4w5;1_+Q$NI6<@IShvQ2t7LZxR_i@h$lYW+~o#PadP0zAhD#>YC1rEC2bL_*J$|!1#x) z*nZRe!Y-z!L>)<&RgkdO25w*?RpesnLu=iM&54a%6u^PIE;Lr@aTr-(I>8psmbc`V|TQ7wSVgFW?3`3Sqb#(DQ2%B zx#HeGx1f|4(GvGN|8rSYI&n`_r9S8n%NU2Z2F@&>2+0?`Oea>mOf2yAVz9L^8Ps1d zxUAnb^Q!l;LG5B8iSd3N#94AA3u7}B@SwQjCm+p*{C0z)-)KAL=)#s#U4qwJkJaD9 zUmMbSxrg!Sj{--7APg?Ue)(|xa#C24IsOG7DTfJ)Q(5c9NvI>RG%QrPM!2IDk<({F z*s!w?FAJ6Smwy*7mghyVFie6u-*<%+FoUMX}ja^`<$vD z!(gp#-MTyoCIafKHqo;WQU#G^0CFPlNy^`0P3k}HCECgAv(X`k9q_8;g>O3C_ODvcKj2F8Aelh+4Z0N~RgM$N0ffzh`zB=t6On-^Ys~%C+a< ze_C?$HUr0ooI)`%QWh9R1?YzKRVl$kf_DRVKUg+0@7%K%@Y!f~Gh|AfPn^xYzTJ;6 z*K>m+Wg`B4PWzQ;48HTFo z8f$(;|NW`wdb))3L)K9Xvip_Rnb+^UpB4Ws@iXgpMYv4VavTPIX3P1a*T(SqN67Im zQhdxGX4{k95m}{@WH9uTC${VUJ<;Zk;FqZ^U@3J24mA1e+XNyU9xO{wWTQPq0 zZ?Hyfx$yQQW1)1YY$hvMiYZ=p--zi8Ftt@CPE9=8STd%~$MeT@(}PTyYzR=B5$=<^$r z(gg~IaG3tX^p;#rPCZ_QZoxnn_XTRA8hrV-(rnyToZ78|X(EGPUE|$cC$^OBE(MKFJxCSEtKC@0v0rJdf#%GFyX+UW_Pje#dnk@<}wyTB(*3OS@Q2Yj+YDQ zsPz=%0Zs~`Yc#T1SoVIk5*>e8e*PdtsS2((t$VnR5DL6DKHrgpmj0k?V-+Kc{7O@g zEd)g;#`f*>$dVIgC_8Y;!C_*(;^lO* z9vvcXw;Hn3@|XWSK}x-tm(>*B50@H?QzU`Z)Y<>59h!Y1g&=S(Q1txAqEGC_BX=N0 zDj>3bwzTd$88g^}D%y>aOQ;#BQ1D_@zn6?nVG_v2bB0hyq+Gu+@+W%;Qpx8w$Eb3k zgqPLNCD#U(^oi^NO^MiO3EUh{3Z}?`a+xeIYM_610pbWoRfw~|<*`xZB$W}u=nS~O z+re8Izdb8FT{p3%N0C88EVZy@Yqi$KAw7CprIsXGPnX$S$kg#wxmEbd-GQT?`-I{} zu&%AtXs^`Q$T%r`mXmQ8ahXvpOK!ChhJb~~4`=gmw&qA#z%R%X3aFE0q;k7>$(QGC zd%GGmg}xA!XAuBJtE?vF8`$&*`}XFegM-u<>Xj9`3H7+%mg_ z-7Z7-_aw#mp+wq7{b#_hHZX`oeVlVD98;b}F4gkAC=sx+% zt$FVPO-62sAwy>^hv%=Msl~V8yPpI;ydkgBT?ERZUHdliZ%z+Eu_%R9Cs%kw6S!cC z-cX|ym^B?pwnKLqfU9|kLI+T-BgiW`eR~KUJ?8Wx+|`SR%szpmzs;Lx8%e7G(@AR= zc=Yk{5yS(FOAM!0kwNmlSsLpFkqp-_;o!G~#8BQ8&V-mdP7o7r<9@TF%xU?I>Jwzx z=gHOKzf|=$stO=01mKA-IT(!#$3{AjTteh}3y(9$&FM8iwR#i@UsgvyAbH+8bZ&LF8SnbBUbN zP*Ki7Z|lt*KX7&QQK0H&;m$K)z4<1zTs_enM7LL+E!1zy3g{L3vKS;nY897dzln+z z8#|GCTGk6ur05lh$0Xy1h7$=^;k|&r3yBtA^URBdE^#%Cq&F= zU2m24VMAqE?WxBo_oXUNQCecBHcG%TWSv6B#(VWPkDt9C)3Zxv6{>|G0WmZxg5URB z))9*wf>|H(O6u<^W77flJ1fW;@}aNc{+EoE&7#1i@6OQzm%en(zZ+e^e*;UBouE8b zA);h_-Tu}IBg09NL$_f`sF65ZfL=C}Mga6P z38R_me8fVwI~X5@uORiiMp^gROXL=aJS+%#i+^6rl>0Z9s>MyCPq{+0N~rH5emdKJ zZ5o%DIPvV!9dt|yO?^G6OuCE3X`k+Mn6Y(8yWt{4(#UBgAIARV!Km&`?+0A9)0JX& zW-s&a@ArJ;>~cZA+Z0Wvn;iKVq~k zwOpPMRZ~p_itp#r12wV~u?L;cf3|>7ST|<7!TyaG1@x~quu4YUadHY~0s_MBay(WF zbVU?v$LRab)L8d7Zoz}+S|!}n2JCDdAgbuG>C=|eKj^d2B3}FW4k;`mV(l{s>MfxW zM7;Y_sJ#bYT8)S$7+6Q}8Im3=zdQt!kx<*ByA)nvy|W-OLfLs486}i zHi$B#g&=GtU5_vknd?YOGqa9_mJ8Udop8{%o1pinCfT~79$1qcadRKjtEr#I%flNr z+f}D!_Iul+Y%d^BjXRn3NSc6X)Tbn4?l3L{5yVpOT1xC6ex09fT=j`aD;H2mhHd>K zzV2hn+}bvRq7Td@N_9#qvo1m+iuMMSJYJ|HXFA}$2mDI>W-)f^prXPybb77-_z5=%8U8z9F%Rhv~TzF7V-9F;r2 z)hy24J{SKA#4;Qc-RG4^PBOGg$19U*;?d@m(`bRkstnvMXEWk=9#_4qlH0vbIF2|D zWcr=xdJcuwa(t``dprN==g`^2^%5u5@#5Q>fq3!bx1otpl|&^oc2REm ze!&M{Q;d|2y(?f{SmODdOF9|1;k;bdv}g4oi)EM{c*$de@0Z1WNItI}@JkaNLGjEU z#!k^p0>{6K6Tw>D5Y7%y6U}la!SD^z26^(G-7iir39QuiB2w$T9eCWBl+kxcTY#n{ z2LTEcj1V)0d~^-Z*h*N5qc4L<*8_#2S=81wn)MWj#b^BdmT!Z>!Z%a_->3oP*XaOS@7$Z9O?EK5GnlhAax^J?>CK{`G(~%_dXwo4SWhCc6=6c;=SD zeILiJV_Oav@qNThS^a0r8&$@atA4=&fUF!k%cvbf>SJSr%3H!9`^JEECe>zIWHs|Z zZ^?f>l52E!u%Ual8!6hIVus%)e$d?=(6D~iPP}E3g%GvRQTyqESkhq7Q;4k5|1^+7 zU%a8=#2g7@f&J5%ly@n0&eUo=zAW6J>K9v)KoCm~BIAxy*N6*%H~k~APo4olx4>lx zte|M5e_j7QY%#yZUZo9!tZH2I2m1{5)#XuMrYu-1UZv)VaT4eZ-Tqp*AiHPy33%~P z$iOc(u0RUll&!O~3^a$aSfVBb`vT{{Ux9|*By%Y>hKRy-CGuspo0bm`j4hJzQxs0Y zx}_iAec|T$=+ruIkKFOuE%p{_vg83(7p$sd|%Xh&FWk{7GP?D|OwWD+84U z7>2o%eSy`okv|mZLs}_aW@B8nH({o`1n6|YQO}Ug; zYdUQz43Vq(b;jgWx~Yf8>cCi>((O{fU^qE{-tC0%h%IIf@v`Iqo0hHL4tVk8fn5Ly zNu4K47i71*~nd z*cUDm0YrU*VIvvI9I=Ru^^GRiL9GpE2FJcZprE!Kk(R}g3N|V^w8zj{C)^fJ5*x56d4(B=#6k!> zG3)xs0w1W{OC4%ZK$$Il$lv)&l~C97mHbI%3bk{J)5p_1Oid(zRqdej#<`cSE~%6A z(CJXTpqn?v_U+Ca<3?X+CLupYK*Hc|PW=PdiM!u{y>057ke(vCeVOMNs1?ERN%#WG z=6YBu#MC9G?-T$8_tYBY0HUC>^Q2L6^yEuxjF`-rpVJGKz(rqrN+mV}gy{Gg&mDf^ zr@zliJ`IhzT!hMJgi!AVW3)ib;o# zRy>$E@VY=g(>uGBz!7mN`T<5Fz*9cEtGzj^-_1)kyrsnt{H_e(dGI{&V_X!;Ljr5> z4Y7ZE&!x+WTIo?uyQM~T7UenZxqU@Zv)UeCQ1JisOJM7%(C^q#VR#DvTAuq&eGdOk zN%&e05(Zwf;Hx_yYrN{thn3D*y~E&kINJB8GpZuUU#5j?OpP@Zl zPtxUy4W7g9W(L~1B0-cVoaODr(G?2)Dk&BzC$%+Lx8O%6EiQgOTE!c#_dvbAJ;a?v z&m5;-=MRY+FSpr53&$BPq(ArzuMs<`G+2C{MJ%>)(_D<>3m3qVH{+Ae6U9n#j{yqkb*7t2? z&V%$uB}YDNJ<~T=w|a5|3BF4d%uw5Bz4zlhmzp_lM)+psk`4zt-N}CQmR@r<1E|~5 zsiUisA?fQYShanyKBhvbYFuAu{TA^iR%9dlJG+(k8-JJE_D)H9H5@=BOY$BCNh0Ed zh51uUp2?cMAW2jP@TxWgbQa6YLR!gg#)l?~iE!CVK0>)OQsy!5W41g5vO!HL0R=Ii zRzsGV^g{a-rHt=1&!hP+z34Xj(U`N~VW&IUdLxM3%Vm+m1zD`wZFfq9WPKUt5bhy- zjiDzKnt{3j+&5R4Ai6JMRCn8FI`7G%z1b9n1(4e0^M({OvM(z)$=PqRo=tz!Q653Z zJx3984!@QEIG8ZW7jHh=t_TblwbnEZLHFPy3d}UJV3!~VOmIHYYWkKdkzRRy2eEL=Hgy=H#9Zl2|je1cfI*X=|&ozT$Hacu}Q; zaQFm5PFTGb>4ebXNc_`^*y!=9ZZiw!w0<7$8JMcuq=?anh243Z86g8C^Sy+4+meDI z8^W5{L`>lyg#ec-sS1YA50vBnoRyCWesC<`cudOJP+%Lbr%jlIR}eB2&6p#=_fVdr zw4r$z9lg;1!)an%KDs=o753WoMHpJ% ztB`$gS)lkGQJgUx_Pl94o^&J;NEPbi$iH3e{#PxU>2$S1zkCk0BGwl*30?)lIM;A; z7+{p#O_i*jxtwXtb#2&*Xt}fy|DlM z`*D-IAcK2-GpD}!bLYRp{-mPsUnJgULG;DHA(U)xcYlhCRjz8#DfC|xWaUveeJY7peeMO_=WedeCXb;H5 zYhx~>*MP>8{{_Pt3S_EOhAi(4=!=f}_ah=d^B+DJv+fqm;9^JQBec(0m(1(kiY0l$ z3Y5Q?F`H}_2i_9$c$qP(ko+^It@zeJ>#q7MkYNg>gve_aQmDKTT(%6tkKB5#%Nh~o z98O9csDJEEz^xHir4vmU>6%zrvOr-^&g{6Pka{to#yu6!GZuISMx2DqHUYBOq;h`+ z*55}*A_M~=j<40|#}}=D%WfYfniO(j?UpHv_QZ%vAJ}y6{BK!!p{AYlu)AIbhZG(I z7s%aX%;64t+$wd{64AWBte!|2L%OAIwcwmBymkSaK0GKo5sPxqY>HoYzqpZ*>s?NS z-D5Ny12yo&pk{i(m1+e$L-h!ko|@e5f8IJ*P5JYYKrX87wyhfD85{H~GEVH+z@gFn z>^TRu8B`KCB8WK5tL0pE)7$+k$k5$xO$;rZ4iGZ7={aYLb=as_K3{HR9r#&JUt-K1 zmiWczkU&Md9O+>yvf=jyppAwJ0ua+GP3Jt^|BSDuI^$6(B=J zJ9mAbmAZ}TGjF275*M^$QuG04mF0N&6uH+C{osHWW8CdRe!~#~7{U?|g8GBng*PA{ zaoMOEQSQ-AmZA^j32g1RMH~7l5@by8-({|oRW}S1bRJw67cvEs@I1Shnr|F-YEG^8Fpwv`qLlpPXQ?2H+sJ zCTolwR?-7hBsWqj#`Cr32Vev3yw`^Gi5UU~KL`KSQMXNEWEW$eyM0jWuBv6{@7L@& zx6vtykdYQGjm82+#C18>BP`B7P~n8oSULbr+LhO9$?Sm6wi~DO&3o0 zX%2B;ausYRC==5vm#d(F6FiX6u}HTAuo;{7^jf>*M`qM^N1(a5*fm(qV1LJ!k+o*~ z-Ffjjf^Lh>Ip-EOh-U4Q)l>^}*epug9R61xG)UMC8_#}QG zqYJKO>&xD}5}<)wo_Sx~f`T?!LP8&*k)UZ7N}ZT}kTQ!=_8i=p<fEpRQGY z>pb+N(rjs@1P_-JIe9aZYX`<78RP&$v}PlTb^ODm@<#GqP! zr~#u%H9Csv)G869B1*MGZU~CF#nYHaO2hcr_3(gBNfGwCaz6fP;}MY^A_L!lg)-jH zp-`<}lH4dXSb9U&o^~G{L&WbT6PFud=1tin-&>b9xGT#3?vL1YV7lK(x;o!k!-R*?*(oQa~Kt8HwJ}0#J~JS66ldYP1uww zB`cATr$^tTHne~OH%Q=w%{n7uOr9~#%?P2#i_dh(q9>vLo%{ zwa(t@h*R;9-WGl!grf=hjg%XCn=Cu)b{;D1zlP|Y(~Fq1W|sSTG)!Ua6t#~5xlxde z0n%vYc_(XyZ;_L-IjnSZL~Pf3hGsw0C! zcF3JLd4WDL0$m1Fj;0HxUx>T)oMv)g5%S(zAEeHzqLMOMt0`7TmMQ;RY@O{bYY}djPv}Gu?tc=aSSMl4wf~x## zs@Vf|<+O4f%pq*5iOQ>0KvMEE@`F(`7On68K;Y0v)Ohga#2XC(!ctx@^r)b|0&q%t z%no{+zXu!@46CR1mMqBNOvh0GqaE=b-A+ySe(5ET6MYM1Qd3|U;y1>f06BBSUE1ea52!_Fcg@Q9lH8*#&ZP5x&T!RM|)_aeHgQ5UO<93ajan(J1^!^_KKJ{SaT14&IEIp3XFf^Z`D6|es=?Da^mLF*ca<@CHe+hI z_kwSY?~o$Ev`W1U6+=&ORI3>r?W9q#>F$?&w935c31j^0S-Yz|3C)UD*{NT2B&-6T z7Os*ScUbWvd|ptHfZcMtW$;cG8o1rGp7CBy&Z^` zLzs#L=E-hGV0+UCjJgRtB$uJiLV>NqG$yM!kmPq29wUaMfR+BI2S@wWO*_~F|C8uQ z9yOOaOYfEW4Ty!(EH1*D44#HPyk8OT1`EV6fHTss>SYsYNCf_LRn(S;JsPOHUfL*e ztj1AU0_f2td;yR1Q*Uj*7>AfLx_<6C*>mf!c9H8w%@hn#H0RLTdBiYWHIceXr^+DX zBh_y4O$v~1pr|aT)w58M#!Xf&uyvnRQ+wUZFS`M+#5bgEuvl(nM5dh%Bx-jTcPPOJ z6KpZM2}i?NqXerj8NaxFg*|T4Nw$Fw@c4WJ zL{4pHz|yQnmqN^7h7{3IF=s(BjIRmRcT!;bHpZT2&uh@1szM9&Njzv3L${AxuNX*% ziOk%4Y2-hGXTLG(!0R~Qxm>lU%3c=ZXw_7v2?zN56^=-uS3tudG@aO@nauSQrQ}sGcKzS#M9y6o;68Og4|#rbp;H z-e2iF8ebG7+$ibvKEPkstR{Fg9rkS?sQ+tr$D7XddNEg@gatth!SoGrVOm zKpSb0f^`(M#d>Na`oP=eht%nMVZ5PNG z%W}408fN@D(g4|D^X4H|VO&kqfEu~RcNf+0xAnCFzVZWGAMN0G8%aKU9J8+E$h(0d zL?l%~=LWRm{cWT;{gmKs#G-#=S&?scyb?^+HgD=>oWUlb7$Sv&1XTQWvSamsqy4{pt0bwDo8U4FXwSAH$cnn_6KMt`a%xYZ>jha{ya>op*tcNOOOl$-Vy zAws@#;f~ZJ9|#CG+3+cTsZ?|+Yp(Q|&S7TLj41i%Ku82-eAkgcwsr2AS|`x9)~_;- z7h^c9RtpKViRyDf&FYQvNLy=Ze4kp&DKB`^!ZUEoVt^~zeDmiO4Ghg*fwLH_E84zo zm@_=aX7d=`Qmvb>Ik-76>^D`w^>ZSL@I$yYvV8Jr1ugrOKvQR%>I40`~Jl0;<(+q6OT1eWC= zh42P3c5%O2uJ{I0tl0(Szh$wlm*KX)7!@Im-efI1Zt2SB{=IQLO6q8M5KzJRnhh7| zAsZl7qA~DBm73#l0`HHYGk_(&+!6|uVb1-1n6pe)A*gq&JAiBAB zPFZWMy)^6fqiz?Qg|2fV$d-65==4YEhh2HRxb1W&LfM7~S`M%t+n1 z$jJDzSr_g$k~|mZ|5pH@D__)*JZ!#P8jW5T>JZGrj;F#3o3oR&bt18 z(R3F>tGgFtddfQg@2WHu2;PVygSHWECfAP(B7^DHCnII%(CkcU7#vUKQ662p854C- z0~7GuuON(ltDYY zR_oht7_{^P=ry!PsOls;p8d$8W3}>vm($jXGFYouzAQ1wEt{0GOQB!?5~A{_@4Gpb zlNc>@#w}|8b+dq-(+SSph58v~z9q|MkIdhpPW8M@XJecT#~C}ed)ypDI%l==+v~;~ zp|8wV_p=XSfY^LUAekH**EI{J7ZxDxFWjm=s5@Dsnzy4nN=4?kZ?F8&b6pZo)jSLD zjuWjr6~BAyM2N`nx?Y%yoErF*$RMygshftyd#X(kIhfW?Ci*G;S@B4Q0hx_m9M-hK zfz{}bR>QXK<)!l?h}?jz*pyEwr`2Z>o$9<_YobI6N)}f(`c)ltkvATqJNTg2eT9L6 zYY851O_tKXwj^XiLgrs&>ixt#TDmsCHGXuPw5jX#KBHn)LuEH*l~*);o?KFGQU*$q zhyHOLp4b;!n?)DtubW@Bo6qGl#@veFPrphEoo|aYRAir!>ZstBC5CgWU`VZo<}jyQ z&)NMih6e1G0N6$wff8Sh6oyn7MxQZ zV^U3j$oS_4LikO4UofQ(0Dy%Rfs}q*5JGGBGkQeW90{QU`HR3{nK-ZY?K#dMu~l!-}Al&v*h zjJ-vWZJ?LIv$ndSn`8-OX*bF}OIQ%@2(p>!(Uv(%rzS602PVmy!vP2X2FR{}zU!=^ zUl7-XcrypfDe!K!I&%Ed%g^~3@kE5#O)R^ZF7*{K*eLDq_M6s2Q6PgPm{DfAu>$&q zA11BjP-{f$htMXLO~6F1;SnKbs|QmGjZ#%9Ahlw=IYQ4G0v4_%zv-|n0cBlb;)o;&oIquQWt*FDcNOxCV~;) z7vzEQm7_aprLHS$g$wX17N@HSfzii8%5WO2rukFw9#P$u8E6cgmEI&aH4It2gkFN) zLhSGPG=ht*)J(XWp5uz%+308xSUahQ70M{BOQ!q~RDb|-Lqy88g?3E6-#ti$%$G9O zwz5zbbLfS((CKOgI?Eo)M$n66<&>1P^~c_=VNLQ37(=Y4=bfS@S?6)5ZNteWlU1q2!4fB~ zq`~i6DO;h+r@$Bg6pRgVxc5zBGRAuk^{{pVAUlR#o$P1PJqr~l%9Na^=FfzVB(>(S zKSVU6Gf9rC*ICFllcyY=>}`ft6%mmjdlKJ9QVv*4|K9>%Ki(+d~V$J}88gNf$ zPocX(=ex5)`*{;1>Qa!hl@|_bA(hoQ$sy$8(qJGYx#e+Ze9V|`0EAtOVvc=f+jgm= z!mRY?&bX`7;%7|TX(e;epgRE}s!d+44hZPFkD~ZjzslK&|N2SipisDe3?nNSxg9;V z#fhZ`g1(g}p@g`v|6=(71BjZUH1H-x25GD@?87<_6>wBycvF{1V85&>AsUEePB%bO z5yOGXO z%iwsTYbLJNb)&JW9zgM7uJ(@xsKHf|d-fols}DpkbhCyTPS(+a7mns2eX;Dd9jZIR z-4~IbA}m1`f}$H`e6<=CvRw79cs^>vL3(I8R&kx`y?aPXO3LnM$b<)1dXMc)nu6j0 zbhZ+%CzO}k#JaBte>Ubxlrmje02dTopIo^u z8P>cbQ@`AJrn}w-NGR8<&*#2(N|~hnQ80X3s5nRIeQXoogBUFz;*dhmTBb-`b?S|I zHAF;V_hJJJj>O@nXTS$|g2#$l$+Oke+@ifZ z#z9pnm$wSHdoff)NzWA0lR#)@zIcFo5@goIKLw(cdnpypa+V#>rjg8>pbW%ihL3Hn zi)XX-mjZjV6>g^Vo{Ys&NWj1>OAesg^=Mp@j_moQ^fYR?SL zc423SjnOF{oYV8i<`xTkwyLn#Z}NP z(*RZ$bn+FNA>!c>44%{xb<3?^B_e$-^@%qy9pKvSs2WsaKNT4~IGfC%LLAO~OJS<) z;+%)dt0tLB zN96fz2n!;vE4&bq}|GA^`wvw=2Ku(O$J44!SspP#WZg zszG284>fL2o4)13WS$WVN^NE=ud5pR^}*wX#T{33S}>Wcg8A!jIAtr3j-?wh1>MPJ(UyBi(0+6h9t>$EDX2X+hAudGRz zd}-&{M(`Kl7c04+(LT0}y3329 ze68>uIF`O=FG&M*1Lw8GWxkiA3_EsLYCEKJ_DM1o0XEW~zd8Xmf~Arw8H)#V!H^Fw z2$o2v-H5yCZia5mNG>B3cRH4%Ib9KO=Jlw5MMa|hOSKg&5>K*U*gyLh7+eh_Eh{83 zi2GfGTmM#laCB>JsL#o2fvQ4$A8r)uc39aB#1aEM?isHHDsKul{420>ZWYwgZa5lL z&EH^mmUi@ZLZ@RpDfy`I_W=qLx04`PaLU|wDLi7UGTYQ0pDzBWpT1xJcP`vBYlaB2 z;F9ArRE7M00nzyw%@L?hBQEL#yPU|LKg|AXb9n}Q-fW#)^faN@^-_er7eGJMW{|#_%vOZjZObeSMU->DX~DA zz{H#tM6SaVd@y;R8~F9`>_A{3eH99CZnTXjKuW%XgPsC*1uPe|Z(fi_(%;&dQcA!@ z12E`%?A@7-WM(R+VSdnki=hl_6*Owe5o`=~O8r2{xA1|{k&xkqRU;FT2EGp9L9&e7 z&iqy7%)-XuT1IV@d;dI73uz&NUC-xlt#TvP2`u&9f^ zbx{<0{@eIO7%P;t>n;x8jyjx~o-H%0*>El5^3s-F661|0nKf+xDy>39Pz(9ZGU&CS zjEx=X{+FNY!)^7LFx9he$=(yVvZvEjkd)EfxN<@D-{t(3-eTN6eio^Ser4NPskVs;#$=G<78DY z6pPxdWqLhdPBBJ_&*_WJJiH)gNnWMV6xxcJ5$} zq_gb#wn3#q7OB*p=T>Ll&HnMOGzvs+-zQ&|>?!Jn$yPakIL0{(@3snZi;kRL^gD?- zeY>QlJl~a1fwb>^Iq`u}c_nNZ==e#PymUv-@CPM0dw4@Er<+4PU$qA@CYWCac|~pZ zAWjHy>t5i`J6cE zlJ;mE`9(I#kJTrk5}EEWGK9of8(52tS6+kRN%-7&omF|JVLS^CFt-BNNLUwV@ItLY z8vUpL3d|)m5gKvC@r6Q+qdKSFCjRBpJFw`LZdLj*kKeDVi zDHBzaD0G7nM;(}axM(~V`xW6N_1$h6rRyjBQx4qos?JcVI$_FW+2|ranmk}rKB799 zS0%t^{@bv@6=5k@MvfJTG;0WfAO(n5FA*IzZEN-^HlCYf#LX(9%bvrCoiGz{MfU{O zVtc{#iMNQhqmfDurME`)lYlEsG`vkwp2f3$Ml3;0207kNra!NM!k84FkZg`6&WU4I1Y&w>fxD{miOuNn744Ps2YU#om1WdQ7f$ zN&fJzn?|7D$kkn+0y=v%#48OS~uH5j=uti)U zL7Go}9SWR#KGiZH7{^M7ca^I>yYKTDqr3(wiTA}Si>=dtFl%3nxPqB~<FcvXpmVM6o%N5o- z5mtQyLNWohQ08bd?`L}k<%=%5LaQc}DQFV%pAIG9?pK&JbIw;SPJcWE+9UyPfz)i*7oen(}i4*{J=#4jH}5F_MIQXh++C^!K{o1N-Y ziuH9D&m1e69MdxV;)i%728r^%MDmv^_|a07jApcEUWrIWamLLgkAccW&Vs{ z?2i@7ZX|f^Y&q@v5T(h&l+yh<7m&R}09!i(e*Gs7|Ir26PKy$V<>U5F(9(xXnok{m zl6t|BRebWY_o%1m76u*_TR`_=;L_j9jWYGjCp<~yfh|8{-xw^Ob(D zF#>5#Lxf=w<YodVkctV5iqHLDXp{fwtkx$@k2{AXVypg zHiNLCq@|!nYuN{n{=K|42Vcr&lb^&4!cX3E2IUb(bo^cnF&AMuGQHvP24o;8=5EVl z5_P+T(J=;%@kvmT6N6>;c;$RUxMNMU3IGbZSswt)8DRDI^#O>Xx>56L{ z31_bNfmH$&?`hATO8$*P35<^|LPXtlYo>Vv84z%O}IX``TpL$C$4z{*!d}))FDW zq!Q5T@|GS$!kN3v4b|l1qT)p37D6)7>=4N6`&Seh>*i&xQ=Z{fj%p2AZdHLsQF0Wt zFU|(YI~-9c+y#%9(MI76eRLN@x?jo5o3KxVFXtjpbYR;@jG+Dc+Anf->|IjUn5yoZ-HKg2;3ynW?xmefUi{D39V zW)~}OR5cr}<6_#fz)F-Szr3;1-!Bi0>ai z=)AHLmz1cy$TA!li~|hZUQ*v9x^H6c%n;?jJSowS+(8J$B<0`!%QA`;oRR<;pFAi< z)R#Hz9&z62M0rp^aV`R5AI3Na!d8RLVr}U%A^L++T@?>3_z?RPt4uC{#dKuW^yKQT zO57S|EuZO8 zmJcnG@Z5Kr0(uvX9@6}0cG#{_BNDRbxU9M!CGu3-cyWGXJz4m@WfPaUFco=Go5#+F&o~v;>|&ip9UTQM)@hzk`sZ$*SQr@K9} zZt&8LnEc-4hPnSlFBOHNWNa=Lpa98E5Lm!w17=I<<#EgF#Ye5j@U>{^H$^E!d{a3Ymd?^V6pl{%lPA{w_^$B?pYe53E29KT@4v;Q97os2e>!Z%gW)Y+ z6<3KH2hY#bnq#MDj=A6Rb~;bptDH=iO-8xj|NS2HbY=;gW|a8=ptj`dzcy>1oc|r7 z8-NS}?@u9~&sJF8dW9XMH@@GDU>NMzJ&pCX?>1(Ds!Kv(T^TG7kTpB%kc7R6AN|C3 zQ1+<;6jvYI896|&JveyJ@_`Gx;*A<9*4fbxnc3o5DZ$YX*WybzKZnQ2tU(=bKe6J$ zq28f2KX|H8LN^iEaTf0Iimf6>j;ePPZrWK&p~98KY7?AQc!*)kpeK<03Z+m5_zWB;Hizh(@1` z2w*n!+K`$iJt~+hr2UxSamwFTikxi00XOmB0OuRPRDpsj)T@d#yj| z-~kkM+o5`}l+4|mVKyDf7DxTsGu5iqP@{u8D@9#CeddGbm~x>-WIswL?c-sF69gvU>ZjCRS%&`SK~BI3cOXgVFaG9#;G5$c$tXfWrcJCj>mH z5jL2hIf7M}Ma%F;SI8URyu_O_bZrgV-5eJHHN2etGF5w|)2VcVJCk1Ipj+%|Q6U5H z>EYmIGCk|UpoU~RBe8AU4kLG+{JfMMNKidsZ18Svxm|dzRo-QO)?$(bZ`Sn*z@Y$skpPZj49pd6rLt*>S?Oq`C=L6xRx_Kavr%`;2BrwGsj`;LKEw=u)og zC|Jf>4@SFjLXynVHgmv4-WR#@a6Q7l#=!n{4%`Re({#XO{*0Y;^F=Mlg)$kxcnFJU zxhQ)}s7Qz2ey~0#W_HD!@&CS7%rZLGTt+@tV(F1(IqEN!?Bm0#L@e(%=!ssX7bU9= zaJc|{2>eLCXSg*BNpYNC%hl*?*zpV>O{TM1v?tI`Qky|4%@jpCfgvN5PmBk%ijJKp z+0+*PKgTX~a+7kHDt`lLwr)+=vV&7;$@c>;4X4yLS#>&Cj1iGqcTs+KTKga?uSq7W z$wa&R*OUKtAm_ZeB`o7Tm1n>~9Zwi9NEMgS()5IhViUxkvht;M4-BQJ1QxrU%v7*k z^;pV3ZRkr%K*S9&1puFepyM_PmyFUoMzAWlYLqYsaM|`HDhs4Pxd9`92hx1RV7a61 z9E=rF6Q`UyVR`=G!LRr8pt!*V@h<*Q%lnBc3A^pNg}e=6PWdP}(eh|w<8C|5yDMAa zgGMiKANDI{Ee+qGxP-EeHN|_hV7XyQRd&b59iaT!;rSyspz%!;YC?x&|4SQIsA5N? zdR9$8?GOYnTx*}T+Ph%+Ew3MpOGXC->NEs+ru@TWpPVcKAs30J*lLltlu_~$rNKY~ z_jE;KeySfEny=8l1OBU&unkrPIR=kOPMWYG)_dEUJ32RF=L_Ks)tAw!1GT(Ezx49x z8U3hd-U9RcUoL}NL~4#;lS2GY=w+#l#`);A^v~UdX+a%SJlf|9{#;qsUCdK4&(OpC zL--5|q+GlTd37k&D5#h~(_{ODb`|DT@P3y9!ZUMlXr#h0`C;F3hyj~^RHqhPOE683nw?2xhw{P=&EioK*)uAjk+xGUcw&f@=;6iJnH=z~a9GjsTFj^M%FE z+~L#-U=gmX3u!5Hq{t?TS1@lr(Zlw_v>!)(bZu2>r=7~yjW=3p`uS2dYCq=P6J}lltT$*bn?L) z{~R1o6yyi#Fep2v^)?NUeR%g%68w8xf=mjk z2ANQLy7JEjRvIg0ATPI{OrygAtnfy*UB>Iw6K;? zndo${@S*VLXUxcT!dO50N*9f*KbC~v-$6vMK+-4Ut)9AIp!byS$I8$YV-R-Ah0%;) zcJIa~^-*tPwzc2tSfVI5r@A9qZh11DsvJ4-8ZLB00?ZE&paUMOKCuGxOz@-C|m|eALNd2-ObhO;9s=a+1C>3@pioBv9TYo5=6~0?tJQ#8oCUL=TwU4 zcWL8q$JCf`%I>1`JQ%jmaJR^PO0GNZ+;*gu2=f2iFw906X}D$7u*p49!s!C^lMzRW zJs-aboQ;V<)&E?%u(?!wmUc`3hTw&a@E*GN@gI1D*0*=weYzdTOnPq*peBoTnAzPI zLVN_6@m8;b7uXZjkjc=xp9ha-04@w_qk6Ib>Z2t@aWzn7YXhZnV0W`r7HA3;Mr(iy z&mK;AA>};?ayq$R(|cgzIhpRSZF-5Ns^lt2x7(cwZL_v529Ml%>20|L2B#@c8;~<` zT1#xcMMR9^gba1KPTzK1rQ`t&RemT3bPBid=#+>Z`2k&UXxGRm{MF0=mCU(S1vLn6vTBD{^Ak~=;y&e0@RBk}!tsALY# zd4+|(XHG|FLCaf+L6gyl=Yn9i-?|dxt^ffVbzW=kxSEV7#hjI6XLAaDIGHe}x4k$E zEL1jU8Xavt0LV4J5{Fk(TixA889P!WZjo|Krf#Qw_N8Gt$SKw%R8D~s1K10A9YDjt zJMJrnz@T$YfiTd=|GPF0KM>IcUf$P-2`k=+^2ECmMr?o5;;12ReZ!4c$ifP-n6djP zR~TyQ29k6)anMMBekZLJ4rF9&V~5r=5gi8b7)$bUoF?|%fTI?8gAn&wEGuC^QvghO zAR%nmX;wAL0GP3jeu#Z5RjJRwwhsg}anwgmPBE&1fecY56`j5f=`c8)0?D7IWe`3{ z!;yh1xm9GtT}KZq(@ZFm+x)O|8nuX}am9xb+E|H8!*H?_q~F9OO=fHEP_k;yVxFRZ z?M~t2#7d+0=u&M8lD)iIMk}sli#sJt55)gLdb)Qc-qY5zr2hskHUu%tY1mu-(_mI8 zm|WoV#1%YDr2q9*;2yF6u{U6?GLaT>j6|ySZWw_1X52hM_tPjEWU^`vPRG0ojWUDeIksJDCifaKOjd8h0A{10X@(|^vo<an%%E)TKNKp6QaC*yQ@DY>yBxkxS8=U^ncx1J+=5!I$%J?szt2>mK+(vAl+P zYyY>>Y4_$DXxnDvO7km^Ln>t!Go0#vpIQuMuuX9^6FbH>5^q6FZ?+o|TmWLPi#xV< zy|eMaEa9O87QxnH$QOw|_K7g>gQQ&i5d$slb(?Wd{oKFw@i$)+g+lmC&TLrUCd5q! zm8T55h8#f4{Z0OQCGcuH9z71+y=1m6KG7hPCw0X zIvAU;&AMsi0Pzb2c$;zJtAma~cD&&`2z;&xT_QphTj(umgMBdP+Rd?;<;g z27;`s`73b);rV=pM>S~StF>kPXSUnd2~s2KQ9c-Yy4qF7=bih>d_nMT4{#oSK`(8y z-X1YU3(q;36`fys?M}PUxz{!Bu34fHKFc!=F+|m$=i)9Mnjla%3KE7(cFnFB-H;eT zB#=!sq90&-bqUMkPTs|G(ns`57QUa9fIo)bu2I`&CtOUVZZ?mO3I=6;HI+ymW{?R#;3yz;X*Gs`uP$&}_8=?MRoc?OEajv@h zy<_{h=H@RWW;wq^N4*(ShIBqRIw!u#1A7^}k8lgW!f`?zas>Jwqr!Ky{8t%>Oz$2PZIKpzDZ+At6S6BtKPB{Pxl+}!o7czfR2MXp(@^ejOw^n z4*lvMR{aUY&IJ9gQCj}6Cztkf#v^blP+Ma|!u;dk;{~+jxoT~J3e%7rm1?T~g~v4= zC##DXr0HLL?W-QL-Eci&2W!Ktvj*;Wc>!pU4lz|4xpf>$)!WAG#ZF#hV%vZDEp1b%~H4Oauqmz?bX)A<@is8==P=KaF2{aTvdYQdbq2|fb z_P!j9=2+(k5ekG=0M1N{zVyUVH^1mZME*iYbE$;5kw>mM#eD(?*;2gM#3`s3sOdP# z2g>!jp=1nY3#$kA3o@;84|uQajn0Qp#k^T%L@}}Wvd4jrzZAQdlzvOVfT4b)d_epE z{B#c|OWe!-VQ-z$TmSx5He3VX2m8+G#mZa!Bc}1m!O6kN!O6kN!O6kN!N`Qi#LN%$ zJE#!9{WQekz#plYQmyDgbSs-@NLZhc{Cc`(8b@khcB7M?@c-@O>GD=cPv)2KJO??wki{8RMs%SfmD0XZKPce7525&iht>Fd?Bd65ITB> zSvih9H5wH7lZ2oEm8gz65zAk(AHoXzhTudNNu`g#X#ZFaB#cSyi1X??@(B;0`*_F$ z_ygqLE}0?YEc}c2&NPaZ1(VtC&j(#f_D8HqRP!wm9zvYztYcNFcGc22CL~T>!Y$16 KmGf^HhKK+rc38~- literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/accountlockoutexaminer/ale_new_start_thumb_0_0.webp b/static/images/auditor/10.8/accountlockoutexaminer/ale_new_start_thumb_0_0.webp new file mode 100644 index 0000000000000000000000000000000000000000..10a3e51dc1ce3198d839fbcccfd175d73fd30fbc GIT binary patch literal 16292 zcmZv?W1J?wwk7OVar$v&}qlI*cJ!{}GkQ-2HUe)J zIUjoOds}>Ozps0LcaQnGJ^{Yz&IrCuR`EV|J`KKsyF?RyQ}52eOK-eyukW>w@*Cz; zknise)>o)+U>mT&@Au=t&dBC>BXH*1@p0s?Hw$?5)%XJTDcB4fNglmIS5^^s_uWSpaL{k<^BXgAn9$X66UN*8Q#+9d^$?LfJd5iZyoc47evAOd z2?|wAKHCk{0H+tzG&Z;$EP|ABnm2$cdM8Zs^E@IL?6J^>ney*=RTD#sw&hRShS?T% zvw~k06C%r(18t&RQHgDBGW~%1%MbRSSkoxKkMH#WC$aplZqyP6_kuOU?rs%nOwF-H zKD$M4i08GSt+Bu4P?>&bY-Y7se07Tp>>=qW%m-g_+QyA8fmEravE_kqX% zA^*pw`q1#!Txc8h!i4H@VY%}>P$AjekF78iMsI1BsOq^cyiF#JPMPIqJSUnfxC#RH z%$?LKq5+aA7#-{**kTqUg0K3lg{Zmz%CuLfZKaK207(o6%8*gwq-su$f(Mjq;Xa@o zeyJsU)jyQu>&p;SN(EI1b3Ca;TSB-~@0s7c3(~Gc+8Kq5K7=Zk!<<(3y(4`PN`iDA zzI5z`fh0&Y)u_&O287b5acV5@*MpPA2H$4JGvT*dwaDlyaim3XyubHov37#E3aj@5 zc|m;VMsz8XTnu>t=oPBE&UBIl!hxR_AQ3${HKd`E0nSY0ALErSIyC_S-!WNRdw!rV z$5cb)k}hkod$m?8C>;Mkek8j(TKD;{jgRF?YD*lBGcv63Bax{^P~oD@1csVRO*~C_nNvq%h4!oGHGHFL zIqXcP;&VPw_>jz#i^%?GN=ZKR2kV|%CfL%XUa=iS6s*G=bvWr+G~|#fsx8cQg;fLH z?{babLSWi8Rd@G7FhQ;eMFD*|9mrL|(EurB4=aE4#$E$85{;sQu75>eZkf=3u$#^l zRpaWf< zX>6<)3bH&I<6;ZxKf7i5FUsOP!gIKGmI34;JpJBczdJk-8G3xK$yT-hiKkkUp`>KR z%@0)PDu6WXzi8zvWNYMK=bBJAV{(oy#A<0KKpE#xuOd!-f~92*PmGYbWW0`MDHi=E z-PoJgo~ANsONdk~$l+uC2wOYMjGFX`LL*929=xn;9jH0CnnfI8 z9_I8%6^T!r2*BVIv934Y-^NqW64p)pX~zQ;4P~rq;!vXeX)kMgD)?GdtSvOd$@om9~8(O9; z%s*THKeT>q*Wd)dxd2s8j2h*S%7gfstV{%P!TXmBwPs?$G`2m2UVWGnTfN-i|CMmP zN7>7%lZlt}eWHV$zValmt)9YH3Bj|$IEvd8`Z?@Jb6#Ht^2i?Bg9Urs@zeUXi^C{c zf6^c_C;lrj&>%}Z9mT_yjl3c?=A7MxzBdk9!R@DAHdTK_G}$5js7hq?hu2tyC@uq> z{CC07fdG@^hA+V$vVy5-`~_f5vH*qrwupR_7auU4h+T|9#5FhC|Bu)zfOEN+P2q5! z@TxFO;DX-|>-<-BONngQI1p-WBf)N&b!yS>+2c})0~xL}ZvBig{%u;ruN_Jm$7^K$ z9v;*cjz26gAI0kj_2Bk3pUH$%2SB4&zp`8=k&M_8ae2M3ls1@@>~$gCbo^^rr5W~c zg*xFtJZiUjUS6;^-}Ee~2NsMZ@MjWafTvYaFBa#wguo}{be_S}ufnZ@{g&VF-<4*V zS4bF*rOl2jZayyk!^>Iua959iSSU3ks1oWWIGG0NzB_vZ=#{gdmqzrqK4FZbt$U~t zI?}Cn=egJLif0%y@1WCV#Gg2AWi5Kw`~kpxmp}%1R0Wk~{b`TaG|``vXyfNuBp}Kf zo2;tu&k59=mhA1*qS?m1zStc$ff<5t{m3o;W8c%zAx)5qKnF2~d=|flKoVP!r0;AL zI7|4v&)slst`QHdGB}uQLye?NwQ>^z5k#BCc? zse3nY_alCM-}CMU)NKdn1OC-;QTIR}7*JeZ9z~mFs$v+qUy?<}STyhF`qF+J5sgmZ zKFPpk}YtwVZ{Y>HGUQIp)>#G(;ZP#k#OhtgV^~IOqELZBAKI8aIO>XBn zU6M@3Le3tP=In4as`mKR_RwNUNIz$7LUsEyOkMw@BRv>U)1x!gIqU4m3$oOSK71^7 zWz=Mk7r04)$fOuN!}%tZdBA@BQmGyR9G|{ae+0esd7lN2h;4+>JrkgGJXEv9&H6jU3t1o4xj}Jvy4%}- znLEDT!yMi2_iKO8Nf!PbL-tpF9S3#|SF_(-d*&sU^}>^CnD|coBua*Y zGeUg7<089(_r)b-%b96(2*zHA<;gpp}pP9tC`T zMm9^b3G`WjF)7bNk}b7sc^z>jB?xQduvcHKTx#7T|N z5E~h)+;Kz<`@-RjKFabi-jVauBsF9~#I3La0IYL~c#^MQ5cB|Wf?8>ZQp1x!0q=o? z{Am}t)3<{d+%l(ywJPU%AM}11WmJi+o);Ozg{i~0cp-}CBTy2>E7xDwWMb0B$vmex zuY`xEpB@~6cFjG!$v_0qrQ^0dBM#S}<~tvWIFNTMvztZPb?l;V#u%Xhp<{#GbgWzN zL5k8{hAmMtM=Slczu50o`H}5;dhlL<@GK4pqRuk}4e4a=^s{+qHpaHt?=-U8{A(k$ ze$=NuWDps4@m@XysbD50Ywj=X$ zDk&!6^dRd-BAG_zuX+&;5%4t>vIn~M8CsEPfZYzV$pYE5RQK0@MfT#9wtw)7#BcCV z=qzo!rYp(BI}Gl!$}^JmtA3^?QEZb?uXP!_K`?tsvt6@($-WfD@+Q)#bVh4F=(NU?UXQxyl3yvmb${Z3<4EnnH|%T} zu_Eet&3W-q#~H#Vn@(04P;eK1%uUIFOCtt2a8PjckdGk*QsBPU!lWMb>~U5YSS>ED zk$|o85b$N9pS?Jiw<+&be|$amG#eYe^adCbUy6vq{R|kN88_GmuGtuJ4>NxqPlg3_ zulThTTz7qoPccy`^7JvQ{}}aF?;3=xazq-zTN-X^ty7LpIfQVL@ma#r(wc!Fu9Mq0Kj{Y>HYXv)j2J-(c+g zYN?5FzOMY2!#D-0&J~YB4DA7Ll|#Z?8#hyrngjcUz8|_&b->pt6fC#GfkCQhqnp=N zskNZW<;pVyOuq11s70?uJ_Zr&fGWg*?d_qQ1d~EzH$Q1R`yp#+NPbBbX5O~OkK{cO zEZlAVvjHUB$mFyq*@pymmMz+5^fxOLL@)Xg21L8J zJEGFuit9HYP=4F8+Y)~=1-lURQf>g>z;GTJWLY|sK8A!cM%zlV{Hj?V}2nUM}n2FJI*r?BNwhBG{zE=y=*RKj> zo%~NidRAw&JNbQ~r7EV0ZWtl&BA}?ZD-BOh`-Z$TuX^@TZ9E4cap~QJ<7R8d$v~U_ z_Vuq>nA3R?Q85D_|K5Vc=`?2py`MhmVX9AHxM1d1=C>&ouaUZW)sq>l#z+DTa)%Frr_YIM zVphA;c-ORlm;s4HWE&>Q#!D!6ksSiS{)-ih0_||o1iGQm*82lx~j_zvElMP__})Tt); zo%tg?4DFo!H`goNIE5SA7hg@VPSl(ap~JQ(0S&HC||h zmp7|XPy@6;`@j-gER#k#m3?#ubg+4i&;=6g@l$#3@XZZX#!~-pG0so@Y-EXjrCkI!P>TC)%2B{?7_d)n@uprvuY*qR@VD zShplqN(5QrmTa3m$a1n(x0dJm1lyQ`dj=^jC56dztL-0NIT4JcYOK@L-J3tlEG_lA zLm2+3AxbYFUF9fmT8+EuRiE)pk=t?!5`f_T9FrLioZ=c2c{Y8t?~j*~I(4TP3$A9E za8#GIy*V-a3kS*EH&>F|+%}QNyI^$~-YC_gLWr0M!a!)L1^DCeqRA0u9Qswj9Q#Y@ z%7*i0O0}7tkoM#gK>9>ejt0--N6w49a3+Q z)~?9%41Dy0Ub+|VcRmr@9!zCXoMu|p5~oh~zI z&hzT<#K z3JxBNb-fcF#Za}mL2=Ag6FCv@idtU3EX2;-?YX30Jp@msa_HK8M123!9UA1$gLit@ z1+d=aT^5M`Xi}_2~jPsfy~E7QoF>%&^}N96p4VD5tWc?;{(=<*TV z#6ci6Heh%fUaXy6hU{Jv3mcN`yQY9*c1J04lU*s1YcRv_VhT;W9&(_TYm-;(ayS`{ zpO9r>->9+-!bsP2cFgLF3Rbh<(}u`b!5qd5WAZgmr2?LJ4h|cU4@a#Is*c@ySET6` z@UNpjXpNj{mLTghL77qJK3)di{B+)}o?kql-W@eO80IruoUNdmPuoQLH(zrJlyG^Z zQZuxD;PxehY~%AY+4AJk{&*-2HSM3LDa=? z$!F%*dY>X=i)1xRsS)(=iBgnWNv0;;ZEA%BE|K7m<|Y&9kYH$|CX>sVc!nRbLip=& zh^JLZrAE+ZRt_8ax;_2XZjwG|+cOW(@IE2xTjdJ+{9a)5Yz>i2z9+HNEC<&uFsw-M z4Px@Kwb78@N#(jBB~fC>nOjs~VlfJ#6 z@82-ITa~mgWe#-7gD9hw>%iS~GL!QFbZ4Vi!w7(8f9rJV-JMfVwk~CzZ@@@x^0(qt zi&=EZsgk|CWAg8oZP#$MQhb`~7lafn{;^ut9+Vr8o^tM|!E1sxpU-Z;@xQDSi%ZNB z+?-#)xx4aoVQlc}b5zZdCV_zlxd(KhLuQH{>nM?3~-PvF_ zGeTP~M!FX*?$vHjijqgTwrWX1!%!hDq6(XQ^M#wv09{j~8^HMiyGP0ae?|Tf%wpfa?^G9G`g7Zkk2Q^4CE#hdpz1j$LU<*1&0AN=bLy^m zd3w?CdF5kb(SBi9m;#?uOl7%9UEkQ`F1cXTD? zg2(#{2(xOaR}4-gZgvM*)-D+1Vi~?5tPV7*`k)YdcI`44+Zd*%7 zb{?1nhzrhXtvJF>skOv3azn|BeiTH`GHBRJNI+W52$hEH)!2L&yTZmd98}j#wSz*3Sv&q1RX{e~56`FOj0r?JigzrAG1rfczu-`xeAtAq2H(dQ817 zmJcmyFG#r#uwVe5a02thYZAHaliSoX%r1V00iOU27Br(UbM!!c}`6f1I)q%E#{p_mKv*OF7{7%-o#J2eVpudUqBqfa@~b?nY2c=9Q7YCzs-YO zYa#db_B|Nu<8(R)n1k*`KR-nJ`R-9_(!n_OkidTI2ewNOz2$Mid;5bvG5y9Tj%j}iZ%-Q0C|a6?(R%`)}@&^>kBN+jB?x3*U=i<@&fc9dQmDi!ZitV|k0D~zkfD)imFz-+7B z-J`u4vZ`@x2zct_Qlq0C^WNByht_8vrwT({E564$9ouEGYPRI$e_$b*e9*k9?NJjW ziZ=}wA3(ho3#i3#M6o1kh<-m5%SjL{wIl5%3w-Wrz=Al;P}~>i9wOhT~oC{xsPUMQfDyp$nP@C+mZ3aKlusq_FnJgIn953gMcImZ!@$5tB zcDi9@lD;DoH{~|f3I`VEL!n-sK99=g(Gws3;!_$F5 z@2jfqL@y_D9M<(ht%Kjl^&k^CBz?UN!GrIKdSm(}G%%qxbtM5i6{)&Z6QcnEr<&Th zYZd4Ok=%&b6!|+c_b)Y-j?S!Rn#A5#0^g#QIarLsUEaWnoA1g`W3;!Pq3VWJ*?nxt z)|VVYqPdj>mc-S-G%hs$)8LwY@jb?B3#@{bDGlk=EjIE4EdX%ievMc9#YU0}E2q zlMC^qUI@%3bPGw<@TdfWx{vkiZ5Xk6^Mto4Iy(#{BLJsv*OI|F;Sw=GC>bQZ7D~g_ zn7`u|;tzMD=^*Ms&-ziei7s6X#j2kEIW)BtkC|uggcRn=A|e-YWdfnPje8R6@jIPX zpWvz`WQ2P54>$~CMW)!zp7e*e1EqLtK@BQRMLZfCC&|xinX?=lOyNf?w!PK{bB8DY z4;r|DPc}*%f#@j9Isrtgy8_a~6edd2v`ySGo0rzuA8tH7bk~|6w-pE<`qtF;0=nOp zLVIZU9!g?qvf;04s#a4MqBd?$37ferj+;90tfsO0!BN{q;{FVGvHOW)|qgtGNLtQyXza zDz+8hJRtCPX!Y2=ucCjS*T>cNB9nfPLiMA-oHia122LE&;*mFnin5YWs)mQ$-}l$j z5l#lLAqJ14aVKoehb6)S%j=I~C}>;?Pxb67W(!n_#e65JY7^K(|6Pp$lbSW2?YTxXc| zXlB1?Q!c7Nni9J91aG%IuR!azGUBZ1+`jyN?Ps!3`gf6P&?C{y%GYpRyzd$~d&|h#m8!|-(k<2G z#Q1#}kh8*HsO`FRji$W!Jl^`*8$Vn_@FZI_6TBwYDj{zJOQH99zCO|pkxcRg^*!0k zbhNbs)o-?*5 z2iu16i0_>p)#AAnG)i}Z>|PI<&Jh5BcySbrhweu$u6(LoN6Qtx>H;*V$iQU3`#)-l zP(r-pM)aq<*Sq%CC9YSFG-4Y17g5nS3xIhs#~qcZ;nLasA~aM><-wgnWbR)@)W-ai zSyb%~A0eC|R@!L`Xih+h6KmOCLH zQc@H5=*H&b+J7`3D@H&f^?`Kb9#ecA&L*3l*fqzJM6qmfyC7(+^Kx;#DTyX!9Xw!lmnt?`jK z*_i5xogk|Ta{Tl>w@%J3hX$*cP*yPH2GZC?UiUh>3UvF~F|-n2AWiwIbn>Zm-S0|p zuu{>;KAvJnD7{x(`DPs6D)wVn+~#+T0>M;a=6L8uX(&gSLuWnt;&^2&wC*N1UWz$H zfVZ9HSdsqj>c39jqiYe{&l3@+n^V1*)qruOEz5@vmy`sp&$p2)EsSHN0JiHX15g&o9sFBDx%L8XJ zv|-DzpEOyI4TXIs_yoyS1P0M3*5L<{$2iLPg2+*6nHgUW8_M#}om?eDDA{4<;0Rc- z5J3e7qmNsR*_GNE5STU;5@TwZAE3dbk+8T~$Of{pPyJWBZ`1JQ2kK9ZhjL@ZJGU&$ z{!)ucd#}6|$HEY9pIAd_CgUGBA0&hr$rq^d3_G-Lp$qn@? z+O?B>p()u>Btc>8FR|?rHdE1frb;C>%ZZW>+S4Vioq8n4KZ_gd@zW8#JZ&6>bwv7t zoakm?T)AT?CT`D{$X6Y+UFB;&-SkQcv^QS&uUZRHh-9fUj4Zsd8HhErLpg)2u~D>VXJ+%1}jqTJy(MILaAEg?qp z`#oxF{|cT=b0XN#d}ffxKT6)s-n$-~OD=bjNfed`M}&Br7fon|4(NeLH!nmd+Eh!e zd94p;Q1SRu9o_E&bCyEIEjbIZQ+}oW>91t+?mV)_ROXxmFi@!@lEa`1h~9WMKC1iK9xmx5s?vqq~f*o(5D}77~4Y{od396g@%`A&w$lDRnG?s z6o}uhRmej)#1_yp5A$Fh+7lImgp2!Tt1?@3Xo(SnWG_$PhW>AB8GmId1{*6Piv`wF{rcHG(aO4CD@;sI*hpV!Q}ps|BJe-+^-UTf zc%9B>eqe!;+66FfxV~ILKkSH6YpB3+k2E)LmSbJeafb$gF_Lo@4H7ZOtHS2DuIi;y zk7yvoSVr`|V4@*-?mlrl20J=mE)fpm*OjDaSSv-Q#r1 z+s`S<{RKAiUXhhTV~L*P_`u3k|7^?AS#x)tSk$}6?aN$EV`{KrDdRefYIi^RMwncg zK==d+frP5Lb`BkQDuaDo`LJET4e|h4!Ls>n?z1I|yi?(&+by}yNqhGSfxW5LskI6h zQbHTa-b4_k+Cu9@5=VHuMAxQSZ`mvEov&}JpdMvWR96(A=4keEs9TsC@TKeFbITO@ z6>LM#J5v|sVaQV+0n|+_N2x2wD;Ky|XYxPW%o&J7=thF_3T-a`z(NnMdPlir+HW5iTPixy!n!hIZ{ ze>iUhI1q6o=-EPgeFevR{Vdc=^@I46HDWA5jJ6$K5^wmM>j|tn?Edz_9*i$@XKle> zlLzJrE>=5G*n|WC+YV#xkLnLHauS<>ScaOF|0z?)9wKxU0H52(m?bR^P@94ZAxJ_g z|0Ca_9k<#1#d2%{v0uy_$yD3R^clW03bb1+=u0s#bSiQP#I8-oV3F~ zsnx+I%Rfn4#^Z3E>9e$K@h=7u_NSE%lCpd>i+O}J(XS^OS?*n%J@$?jw530^G z6*k2+$Ru7 zuPq^0EIyM-);332FA4I1HG!-Hg+tK zzyX*BQHZ1YediC%t}%TpQwV0hQF)S_V=78PWV$1-A{kZARvYQDr^41R^K@lzP3#3= zXH;{Py}bXl0HsQp3T&`K*ALic9KtsoswEW|0~tZxkku2Zw z&r%X(SJWhLCGfLY+SA3oV60+8%|Q_Ek#g-Yq}DotTfXVIbuKQYU2tS12w#3{I#kpl z&hP*{vg&{CusOel)zq`2zuEmkPEt~A)vV)C(k8x9SguiJo8+gg4e6(HQ~qoC=BWq~>>Fk6HzxSa+G(YTC6jXd zsw9Y!^`4keG9Y^fcZ)6QEj&@hvbs1VMhTeAKxfyQu&(D}N(_c2u>)qD#w_f;M2CZe zIzyJ?+RKvHhEF*g_UiJwE}(f=)hgd9^tNbR6O^pE!>(vSQ)$v-`XicjD%N4Lx7Tbv z)59@29kwZpnYfXfGT@gr$9yTkVWa7Ha=m1;bNH>il)<)%&EwgAhE%9=gS#RTqde92 zLc<1yQ{MDE-}`%S7jyZp9?+#K=x2hNuBc-bH}=~!2gYu%tx)1SO&;(r(PpssZ|x_` zCI~?eh-OiFAgl^(Ehl)@zQPNtB<{@{4b9}1wxDx!^A#saJTPOiLuY{!1}KC}Iy`GyVR!sBBRkBOfN!C$nh z@A4(ax0VQ8w*K$^{X-Zs{!F}BQwl-s_WWZ)e(Db2>9SkKab1r zDj0Melq-@OmT5U3L_6@DzmZ}tLwpnJBQNZ=cZX0jFW6U2c(fAIoVJdugAT>O^Ro~QgZ*TJ0G!7AslY&Xgi;I%HM=zLnPQvH@p z3#Wl@ULN6fR5?(ZBZFpP*sUU$Gr2QknUW5&m+7=K%J0ze&#+18;K!&7)`ZgPG1i~{@@fNXs$IMP~ca8F<#i6ARQ`RQKC0j zMbW=P{`i}NW#zCZ^oq&aZhRO#ep5b^!WvV)cXoryH6{I<{nef;VKJV@`Chjh?V$2J zyH&@HOPq%nae34J5lKFcNHlqugYI5H^bm<3;>zTq{93|u-ERKpFvadtKN~yNdR`b5 z?OR-Dd1@dl9%JR+tsDD_*#HZ?H1|`@s#}}>)um5n+b%?MCS`3wV0_f0xaqhBWwavL zR1CZ8B=G5oFdBfSIT1khImcG8)f7eFf|q3@jj<}Z2ZK*`*`9s9J_CY#8JAK#5Cs0u zLl%UbM}8ETZB!5~R=}k}dM_-m|iX4l2#`=_%Cij3ol3(74a#p z`9|8Qt?j6Tb!`puqQ|r2P!bBG#J?cSZ!Pt+wGa#V-$EFa+4%DUO7n$Sf}xarq7GT% zM8f&iT?u6KA7eB6^`bAJLe}tur48nY;WbSLW#X8iHIdQ(RKInFXe>g2?=Dt>Omt-W znZq;F;d8+45kDPg5$|N+dWQAj&Z0Jq+<;zSG?k*VD6|b4O4G5N3%s2vsI4Oi4o^V^ zTP>77#7$HmVByQ9PAQ8+y)FkA%{xDid&+qL3qiO9?nnD9rf(`{cQ^nhL4GVKsn1Wp zHrZ|4+8AFG)Ou}(9dF@ICDFpaK(7*74r++?Foylv7qo)bdN@HVo&u2F&+mEErOx20 zoG>*IetGkHLfVTB4*yrfIynDk`qY1yy))x%03I$6xao2=nwNw4=s(5ZSr?9 zGNTP)3u_FaSL2`@wfMnO5R>U8!r&w$_e}Lje|OV~53a_tdwt`l22wQdU(A zO#*5_4AWN!I1cAL#J=256b=N?<7dj0Y{Q#$SQrbj6y<(~43fEAc1k=3Rukrqa0a2U zEM=^Y1WD_dZh!F@t$%NYt?O0wL3fXW#d*V{3*IE_R1l~0u#|vNRxaLaNJTg{79AZ@ z6F^5_x~noaO2V!30RhJdQ)nBIHGf$rKNGB2>wq)lF?+n*3s%1Y1tCf z_l|YL2kp^YTSystQU0{)8p@pgg2=NqX&%JOd;*V$?L;@!S`d{g5+(D7?e=uQD}?rO zo$S&FCR0e-J&w}1fsIprry_xBwn}z;=akP$G;(mbe;d=C;6+hgc!ZxwDD=}k@lXG{ zVq2}uGIKnlcE!3S=2+aLz6eW=*|`K^B!ZbVqogO_$lgH1e08A8JHfTzLlx?Z;XB+g ziPgYUlN%AJtTV2&T)*>+)7=_XDv|snk#z!!b!8~v=mao@W=Svecb2*^9hM4yZTefk z%LyujjLgyJS^&ENIKTC0%#P#c5TlSUz)M6JlbKQ1y%Ij*Dl?JHZ6D7zv0huCm5N|6!VPNLZLnmq9&_LYvMl525Sv0KqXg7wnNm{8rAGu$YP&sxq z2pQ#pH6|h(Y&OrMrexohVLVl`%ZsGbAP{A$>jn{6X8wq7`V zvc#g}%QeI!~m4 z)=BPaltP!3gBVSZmu#^NhT{~kdwEz5&g;!o zgyn?{Z=MeQ08pR|-M|qbEh|sBlMCuozlhD_nniB1<7T_$84_+y0UMinfmMIpGD_U& zPJh-kMIjrZ_|`^ADlLL&%QB4#m~h!g{jAryJcAaI>7h(P>gkb82QZ8hHD2uXn5&c% ziA_9<2;_yyn%3+{&iY;;#{l1l^6!Tux&wg8xfqTt@ zo+`rE?%cC?J(3+SzPw4~hzEPvm3P`sM+>Whz2I+x*=smozO)SiVus#q+eQVy*K|(?aTKZ1Lzc zZc)(I?JW($!^Qj3EwqVMKrmS~0JmV~Na+-9g#UP>GD2SqwvVu1S|D$A{`jlfXLM)Q z$wBsg!u5QTTQtF`q8HxRKsyQb_bSMLWb%!gT$P2yAVL;8kj5fNOX@EutksmKIlR>R z$&P!g#ht5YUHxdQmyZy5(sG@@jpjn#;HCo5fUaVXN9N-Md+?cVcJ&MQidH6JLo0mH z)VwA3%as`4nD2z&y5i8^2KJaG*8&BJVmZWt_$Eqfo1ly;YSUkEKltcP4|*2S2X)yF z@pdqQ&?LePIVifVI3wXYIz&3jf6wxaY`Uv+Khl@vPk6@S#@u?pDg#3NRSR5=TJA7o zIfsJbQl+m@x03g6{1+?c@$m)NRu8sr&6j?z;x01{;gQ&#$S&KOhX)SSmfyB#`qT!j zBR_s6?&u6wPIwlYAiYMKSdAX*L4USl7WPj9pJ<~VznFszy@jeH*2tcQCSiM}L)-~M z7ZW&-=&CozgbGhKidrkr%o{j)S8tsR2boU+k#a6MouW+PGw%&)zz+-OS(EBE+5@2{ ze=-3CNhx#*1YMd+U_{{dlFfI6b@eEhF5kpY!b=!q>pw7_An*3?#6T*Za6A@D0?VP8 zQ8Tg7IsMh6{soDr)z{;JUM=F{M2dKb?*Q3f8LoJj4(1wk{@K;n9WmvK_>2{fA+GYd zLNtHu1baK`r$<2=e%a-4Se=kv5d{BeT*5aCcam-MJD5KbZzI#<&^=&f?IEvFetekyMTpWLNo?zR$Qz^GmJJf$Pbj71HD4{&tZ zd~Rc`nuR^E$eZ=do4r5*CH(zf@?L0#WteHmeIe*5MRBisGOo;3t`n}Ty%*%gv09z4 zYc)O~`eVj5-vPcLT;R%veQM&@x13b_FKbd4eNa~?af+g`BM4{y(Y?lrhoZl|gSkVG z%vteO6mlkl?lZE75c%;%;}uRsXd1RBEq)arYhgOSA_V>%;@e ze;jcr=w_cH@p&7S8|o72chYRu51Da}nJ4VoONwD+G)<67-$~=deOy@`XqSDJ2re`) zP;{q_bL-gAr%jiGq-r(u6-kArZk#CG*s%>*h;dH=1caF2!3CfWKZ0f z-yzx5L1C@eJ~~jQOy!%T;?N!bx(6CvHS~!+AoiA++7oa>%sgi?RSwSOkr__imxS%+ z#@9wHK9$K4FJ?Bw((W;}aGJe}J;bDlXY^VI4 z66KopgJ)D|km1@>4(qvo|BZw|t5{;C;c}WyNsFdwnD3g&Eyku^rI?=#A71UnbT<+Wp4PxRqS(6{n4 zjA0&Y-j%FVoUCaGhW$pX+|t&lMH6Vsl|kj&)O*rSWWyYqip=F)`;WQ?`r7U&>W*9VClBKVstgIk_NG7y_9qT$_zjXE9}HSgXVoufG4DGPG3r zBO`rD(~fo4nE4vrxd)eeuX1uY=@58NgQ0~C?eol-{Zj=QDntW*X`O{<^ohssma$#6 z&LYSL4Q`b^OeEZ8CrX2A$R?T|DStl1d@Uq?Im4X86q4p|QMJG3K5u+i7IfC4VQG|r zSTS}XaKAJ}Mtjm+zoB7C-kzHUL_vlutCX%(#=}0_j#S+hfSQ1)>S(k?B@Xk*HIUw>i_FoeHSVZ`hyTGDa=PF{wxJLn&KiF zjrH?j^cY)bkZIQ>jJM^I!?}@3t>h))EG$S|;>Tu#I^}p!H+bz^CnV~b>r8S5`+W;+ z+9YrlRDOHYF*NaN`p2{r{Ir>FLJ0N-WxUYNHk<}6LW;ptzB6wPlj3He2Jp$RJuv0> z{s@Tgxxl?k-JU;q4$K0sc!OAquR<*D3HLH?KNgxM1kr=f-V0v6L4;*L?%qpD)_!wH zaOm}GfaQKefG)o&4?qv%QQ(R9p!bSS(>#b6LvLC6?Aw5-7ZarA8L4RZ{H*me6X%=e!hA^(*$E2DCdmnri)O-PjTPN&mujk`-Gs=4@-kw8&>Vc%H=FhD{xW~DZ z&L;w>FKo1ky1~fH<}2O@7{oeI4e8Lzk%tC3c79|oCFe8!@y(g9r*wEBXlG_t! zi5H=wG0bH;)XRV0zv$6GAg0IoeG>@;`b*J&4g41fEynh+&vC20YZ0axmb?Xh{90@> z=*DQ9ZQU8=Zh7y_ykZQlFV;ik{bH5t<^Qz%=Ygb7TOHctjpTaEIKykOgg=oI@Gm_vM| zKx!Qteexf%_&509m?q(<6n^>3L;u11--x7E^zWe%GhHR(oxe@@x{D;QjL_du?-JsSTM5C#>-4_tJinJ(HcP<&H zPnVTLEE-cLe#ya6afnR!e@nH#$LzT={Vu}Dl8drBGk<}FYX`$_rk9#O?kqWVPW5rM zhZD#4xLBRaPMB@kA|7pR`qNL-*VKsWfm>!&?Vw#vf@(-_DVsLLSKgoo{E*nD`+h?G zrQy%CRD@H1SYckus~+Ph?-E~5T(LdLQfnQH;uQ9?!aJnm;&)&{RO01O+L(rxHolC8 zmJ0vbS%yWeuhNQ!+T8{voD-9cD(%+%+58j~)Vm4@p9-NRukREJ=5;|W!1yh#c&rDY z8aO8E?Fq5j+vskjvd!qAZwL~extLL?@n(`jdf#YF*va|7zltM{uhVD$#Oc4ghjqVL zDH|Mz`~BX|4x<364>6ZPH1Iq5ql=n2e%i^1UzkxAny#|rb3pE5!Juc};{#(ACu*p_ z9%yKU?1k+@3HB7pZ<8cYijxu`1&T)r@-^C@LsF4O<(WCnt_1!qWEEX*AVBc0%4#bw zW`1h102iuF(TwmrXC_jU9LWX>A4fydkH$Epk z2v?W*XVY5uAgcLuq(6+f0^ zg>(@plH`O~K0X7U7*aIr8wUmu$7NEWH$T}A7;@oQWv>dOX~O!7$qvf!_O-v{esQp& zM*~IW3MR{F)SH~NR~@1%g6MKrw@Izjw4n`gCd=?CmPjP>x-(qqir`@^J>HO?;pz| z2*XFZvhlpJ!Qz&en3eevqe&5>oDNc9+9528`#m&2lKJ31nafELPgCA(LLY^1bj1iX zc4pvwe;^x_Srv5VSAY())V8N=Ym`5)8&+=Ln=j^%zeo!trSzpGdHr7YNc5|Zx>q(7 z^hf^@^X=|BJ>nW5lA>nB_Wd^2QJ9;lI1TR?w{6~7ohDWYu~*+3GL`K24OIk8LSl!A zp3QYMX%G041SYx(u^)ut1h>yJG~~*(-bKI?)gcJ}IYH-ChG-*U?U zuqXAhNKyI5i_cNl>>LwqpV28-WL}r~4;)01RH>*`O!aBcMB8m6up5U2mss0J55}7y z)?oJzBh*rTYxr_HT7Vy?8m#c)D?vrM8j96J4IluWl2wWm0#v^mJ1$yK`mx@Zdwmn) z@74tW;sn;0t)D>C4HMsA+Bt9(a~W3|DgI?q#fLTh>`vRABA0>dlPYXGqDM)~lOxW? zgTeG+tj^%os+KhLy_ED&=30%wu(FUg>%k2Tx8;+2w0st8BUFg7LMnxO)>%wTvg49`1eCsW7X zyfrhp(0z(-s8b6=9vJ*HvV?u%*8GpxhE%7OTFC`Ca3;drvPRTq?JfUWTOXFY`_cuL zKsNG$zz!is$8-AeLtCG3%lQrn%r`78iJiO~KR2C`F?y9L zuWKj`-JsFeA6Zz$mm92PNS1PHGCY&7AcCx`Z%`)THR5IG5wFFdlf{os`W=Qw;n>@KsIsE@Zio*-_@U;RicpSOEF`t@bK0P zy?P!1Wpky52jN8!30nLc&7S^Ll@XL zT8^DOPeX5@yD7xGf`^{{MMbotq3DbI+AMgTdky(gAFlc|L}IXT$NotDai1zI`2r(1 z>j2&TH)28s)O8bskd-Iwktgq~CWWM;gDp+cs(>JS1K(#%*?a1`PFgp9sc5q|60g8= z8?5luaRP0&Q&f+$F{2Bw@X-J(Z!z6WROeBr1B86q1ELp46JrGCEWX>sFZ8FWu=C1* z@()Jrc)WS)`=%Y?w`#c3`O1C)X?v3tBnYZWIAC&w0a9VD%d5*Yeh`O{4Th`ZSmaXoojC|uw(X;FT6oSh@+JHaTzXopQ^;1rd z&=#x+*o2~H8BUXDRHNPNE}8gw!dIv~M}DOrynuP5I{dpoj^*O9LcYAbVTF<`r3=LQ+j$`oNHPx4IR-Nl58{FUpYQXpf#F@jkj^WmBQ`*x9W z%Dth?$oUUu9(pS~UX}SzIxzJX`F98dL*l=O0`HjO`t{2l3s}t>3hQwO2^h0t0cy*S z^uW%;4(5JM@_0g>xI z{tT<~!r<tRxLud3}{<01#rP1sIZd3qCcpf5@-24dZDz{7`3dA&-^L zsisXnfvML`cJo=LHAox3By&ifi5vE3Z8}y0fkrZ}1Ol%Hs8z}ZgHh?j?*t|K#`D$= z(;JuuaevCvmzU!l1_pzhN`N!%^E%~FdAh@6nQ5Hqq&X`FC!(@km}lO(8H19)Fa37n_9t(`c zV@-!UjGeIdk=OIsigs_oBlDo?Ty(l4n7X>da7%%2juP)0~Z)( zy@)4cfnk}VAVA*t225aq-ce(_o$2ntb1JEYXXGYbx)F4cNR*OD8! zrEddUzCd6L-M~{}`^}@&!Ew`6FHP^5iIP~2WO2AE1yziQiq7*Ll`G!^=1q5&0$ckA zmx-MT5oq^3#D}^;hZEh584~FVbJZF}Cz||mc2x)|nSfVon!hl|P=zBjLezFVAfI(X z9p1f|tLF{QutxI%m-{>R2jN=M%I`R%-d##I!Lc_F{kgaa&v`F{(|JGe65a4jsWFM& zJb}abda4-C6wRTi)vxK_`e2o5SVF2E8B=lfGf;FcPvjdD*Tit6#p*V<9wd|93d6(-o6J@vvg&mBnh z%Y+_gR>j^X2E}NQpu+YVYX`!xEyoV;vJu?Y5U-P*WWuLrB(IYm#LHF)_={+Kh(`v8 z-E%Z->8$s@9d4T1 zN5eu?-+W?6L-5TXaS>~GaI5FKP?kr%I?+Yn7~_y(qoCUv?N{A?F5VRYe#nGAwb}f=*S?j{ICSm))k)~Ao*eR=Wl`nF6Ca>NV z`+1DqJK$Aqzy3Tu4~bYM1HH%V=0%tq>5FP)%r`2A>SyDgiOFjt~#H$L+xE9;7L!*TfiWhWf zad}==D)0Dvn>iejD1V8Xk|H(beFgpQuIly436D{Z?rbJC&1((WL31C_Xb%u~PC{-KgIhT-rl>$2^aSX_T}ayA8!X4U(6v?$V$dG&@NlnQ$-?`-#2`r#wQ(ux zI$caHF*!&Hv9PLNL7h`al6!PrREJMIWd<5!jkY2*!|ZPAwpP&XPSUW%GG{Mp?9^KL zW1IFCde+!TQA_S)#aK!^HH*gT;{-soxm-h7$8fqMO}EYrjoQB~->m%3CQ>!EYMz8B z>1W6NT>6RBCnCNd=iw(MH5>>xXh$foSkm}F>Qb=b9UdZMVr?ong8_wn7AZ0G^%ZJ5QYU1OWB z0fPr<-g%_s|hrN@6UO@G1XB)!Gl|WMVb^~o{I7n-!%kF2yj7IJly#v$v}($P|AS4~)r50# zC8;t?%v86(-@?h1YaMLp`X*1bbzHeal<$=W%LKsucGX$palAEp2^cT@@bgpJjECPZ zN*%&KSkg-Z>V}~`GXesK(IXAixJQ!)OYq$-&FFPUf10uL=_1mlFX2znSq?EApCl}C z#X7!fTny}4x+ZN{oham`-sRl8CYI9!q@rgXP%|Xpijm@eV`pB^7cNf^b41xh@qtI< zuUjRtE?-pkY@gr~jzc-iZ!+9O3Pczs@TsRbL`&gPRObjFg+#%|Up*Ql$4H3=z0-z6 zbM{&INq*hTFOCy0y!3QbPB8BBa{T_I#qMeq4&ZkMlvtzomwPi$50X+n)O1VGrkmS& z8NF#}Kj8tr2?Vaw(%3qMluTvFvYj?S?l^N4Eti@{CZ@AeK@jdQacrS<9OGqzH zp=2$SM(IjDyVLIXCoXUkE3jSL^&t3nUlXk(8ef-&^2#NxtF))FqXpRubfS|`*?u&t zDJo2ei0Rgp=<6rSJtdnK5_b&OkV0BGD;t;A5UkRqB@Za?NiNd0atpQ$+mBWe2DpVb z-$C+`pGi(9yJX9mg#G%&ei2u6mRK6pg09JEVjBh6IQzespgFHuEo~d^Fpfe<0tW4~ z3;@8Akr_tY7pQ<2eJ*^cIC`O*f+YT;HYh6o8|ea(wmCMQYqGV?fHyyV(|wvk8sfVO z;^&X?jxp%vi(8-@iTRM3cq`UKc;$ey!PzUpgU%kr{y)>;*K^1&f#95*-}m#E|?F(W`-l7 zgW96cttVHUvA#HqPz>ZMk~uB#nSk@fZgPEy+^%HgiOVVee6%^L@>R{Lid22VYq*M_ zu|%9(eZs?jeciwXeWg`SaBj}{r29$CNvQq=Q9x(e?GwgYey30bl_&Ekyt=+X8~)`T z9@@d%BX2IqWv0IoK}a%(@LLVD4E9}}_tmLxn{Sbkx-sjjD|sCBG|8pntS1TGVFE28 znT2t`?|Yj}REi#RJjv{$f~bMk$)4Hu_x*XE=BM^53S_C>NZk3|0~|XG0@Wj$x=l;1 zKm`0H1$ysoqY|dk0WGQV#pFj^a|cS@^)=Hn0_RHZjU(U1cY?bNvo!NEgLFuRy1DfX zyH@yyf=t^i0_FYhi$3L-Z-y!#AjzFNs@7osqcP zcW!J9YE6U;3GT-_nI)m^B)1}8j309AM*u>Wd(5_*jSdk&hR5rm~zq0(0!Sp{B8C&Ej@|Vk$#r(|zJL{Nl z8@tFACv9?252rodqqcTQrl`+oThe}YQ2PcYCzT;BF9fa|g%VHSIc8#KvQGlE)N~{9 z#}I?$)&TP#wE=9eQzY4bk+4x;6ucga<+m?!6x!sfQvK z6$nuD0;>b&5Uo{HwtB!1A%dCAOJj#nry*hWRF~9=f5-&avAV`m!0WyM#j}C=rj|Ff zeG=Fi2|)N65rls^WqVZQG=RyeoNr^nZLkj>B~)UwGsL^m=nPs6lcbdX zJ|iyuz>aFnHYs?1zHL7yw82LUWgC`w=$QONDg{&Ab9CfNJ>{jC$2h8Dh{U#~px4T* zd+Jy$mq7onKj*X2ub86e1CPc!HxrkuTP;M)xVHL!x{D=LxY^sz$}Vz%N;!D#m*t6% z4wg?y>|^NMvVMt1DH(HO6Bs&yym)-MGTN7YiyCNewHdWOB6ENs^? z9exz1A?-H#eP&?}5*pw6PfWAdc^}o}2CU|+FJMB?DqNI2NLMk%u+k%a6CbhlbTWk# z;#tn1hmbZ`CH6yoq0?|cxSZUNSED$^etg{i@VSW2hl8*Playgq0x-@zk^%?23q&Lf zRM4WKNKmz_Ay9^Q&QM})g%SiH(qK#{J1qDCgnig812|}xp-!lm{|CV4=yS;os!*X` zBw9cXQq8kSLHkX!(8CccRxHZRqL&efrQx%YPznQYc6-LU8^0<~OXqEv z9nb8*G9QNB(!Pg0&9e)%2|baF>hc+NjC@vcN0TLh7n@- z)ipEi2QVgYvk3vv2sSQ4W`Aa3?TN4TeeFp1>d@L1)wgdt zwdS#Xs!@$xX!!W#qaUyp6++6i9`8Zv)7!}Y<)Ml+9k%gl(j9S59;TWOW+(Tqe)~Ah z0MJLf^|QqJ;|6kW~^bxg-WBZD6->x|rx^oc>XrEzqCLfKDX+l7}L7b4KnN1+-=P zB)3GNLS%78=hVHNbUX3Gr`Wk~fj>6GE2Mx8wL?+pPig8D`F?%;>`WOr{7iHOXl+q66PC zxtN%dp{C%JXYIa7JOSe;4F{n%mY{93D7~fZq>;SCwlkP{LOQauU7>;SvN|Glstv_1 zpCJIC5>=a9OFmM%EY5@SU9Eq5PirLo1yidjCiM$fdB9Y649&pDKZZ5SH&m-y`cLoe zV0LuN0W%XpxwtP3^#TgJ{?*&TWLX7Y6KHY9O~{69!hWzmh>zI|*Zuaevh(q#Hq$&Q z^yh6D-$u3{Gr^=vqS*j0RZK4PmR0OT1Oh~kI7~=CvpPS%K;J08Ud`K>udkbuQqiCV z^??oZ+R~AfwpiFXLMS>ubdz z=2}rBF$HxC0?g0Pm#HDG+*=bNS>#d=g0{n&pY~cc3q+Z?vv#q~9)5jFACtCz6dO6z z+pD77Ctwwx7m2P57N~B03Abzz8=b}@LXJHkK!gJVR2a0KsW%O2NbMh#0!=vAVx&Ib zd)Wf*zp>!uXu9B0ieD%P7(1BKG1^n70ZW%M>|UDkYSpGqP{mKhuf!d2ghSIgm64?; z(-_9+P`D^-Jvv9i@dM54hdqI^+@EBHDv_g;^CDtv=Cjf(@7vh*5LSs$Ea;?lqV%(c zmGefmsA;m0yMJ<%Z3=%fPFUZ^);_%tt7r6dZ$X`63zT=zFRKgz>8<{pqzK-pAATWd zrh-+h>2n&pFk+FM?buWe&1dfX@aZX8gc`0HQeu4i{#sXGe02ZO9Xme z^&!P<+^q#bpNNQjQ$GpM%{UDNMBZ+_K&F_);>yy))BLk&649$ICa#8(PlVxXr74G* z&LE?mYoCfg^}LwE>Fz;j@~oQZq40usL6_#LGnvMwzR1rLI-QqmI7T2$_TpmTopq3*(RslpG&c1R;b;CQXg^Dyc}lmpOMNydXI)rqTJ+5W1^ z_MDDSSvp2E;3s(yH!ZKZUb46WP1XfG1)ql|cl^$4e|H*V;ddmy*GmT5B3)|*PqsZM zx0+EVe%08-h%1UpF>2VYDBPn)+`Z$a;5oR!tqv7UCZXhL+V%4KQ)w$ zfxk8SvPKx}n<)Z)q literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/accountlockoutexaminer/ale_usage_stats_thumb_0_0.webp b/static/images/auditor/10.8/accountlockoutexaminer/ale_usage_stats_thumb_0_0.webp new file mode 100644 index 0000000000000000000000000000000000000000..3bcfcb9b00de0b16e767b7909733781b84d3051a GIT binary patch literal 71456 zcmZ6yV~{RP&?VTmZQHhO+qP}rHgDUuyKmdJZQFJ~`|ixd#J5|&Dk>@}B2Q*i<~fz6 zA}t|-g$WF#DK4UbM87I>brc?;OW-v>6dm#@bv8)vZ8)5pr3H#8vy8gLH=RZLqi27-ME8n{NaC|WA1RQkBJm)_O9`?=r z9tTLM9_wXC~ZTeCFI(OZ75_k>> z0s!8DzZE|u-}A2xPy2QQeE|S~;YGqN;8Aeq_rr(R@9L}XYwv;ZFTluftS=vs^Lz2D z`^)&Y2LOBrA_4RPsz3GLbH9Q2eE`72H{*By7v-1W-QJ1d10dzUqlTVQ-vLjGkAN+} zRNyfH@xP_H9mHS6IY6#pi{M9~;BT~`CgAXQA@BzvWVJcfZu~rG5is=VJAD)t-&8Zq zB~c5#fmnvh`bwC*Yl$c4o@zln$Zn-D?$4B&-*B}>#EURmDJ$Sx9j)%`cmDKIXRd1<>(FYL+u|a`+r>`a3Uttq~Lp z%ZF1|wiPN`cw^pKp&a`*ZWpQb<4E$jaG4ssKBMUEQr;QQE2M7nK{Tf?TT5^pK_UOk zM1A7GK>i=5F|fj@hn@Cu4q`Z#adn}kvw6Ln8d2cI6_yo%&_>O6q7Br-!NwQ~cF47@ zRStf{R)y+dVPf}0KjPw`S|odc(_c?!~q^koW|6Qp!xCQj}VL34;nH8c>a@Dr11GaYS@xP z2_5>nltL>i+@vB5wmaFCeD^^3BebeDuPg0WJh^afMqYpY14XZZuZfi2h1Eqz1?T#G zP-u)g<~%?r_vh9WlIC2-cnrX%>;*{EUiKBpv)>v&C)jZJk9bYV6RY%buN;H*gmyre?ZioUBbi_5n4 z10>f4a_Qt|w2gN@8hpXhF+#LPSJO38@j@JVhR>H!LBxYA(TEW0BM4nO$A>KcmxB*l z15)69j$qPPoDoYB%uRIvAS)SQ7VIcPT#gh!4+kWM{qgfbWL9#N@Tkqsa`2|SA1ezL zwfzrgRsa795Da|9YrT_C875U;hHbLYkFZ>sT)D}5Uj<=qs~@wM9ONy_$0yZ{u&bpY znPJ9ZazG1$JIqkL(*@@*aD3`O$!OzHXUuv~_eWK&_+)Ty5Jl7f4Zh2Q$^RTNQ34ic zR`w}67N051{x{)&+VFpZ^uK-lqRUmCc9H|!<*XtPv}#-;8Mywm5%He{0+?QAQwZR* zbuMzIYo#nanm3{9cSa8%-227xh=^8(r^GLxoGa^B_RC{hK(7bOmdW6dJ9PXwNsVw zFoCKbH3B0Vc@(n3#=aWocRI;HX-A@}9nC8?TnZpU0N(}Ub_Df_e3yF!^<<;>>oQT% zN+(%fC)M||iyghMRrP#;AVQJtvQ|T2M3mDcSh{geEtP?PvzQJNukE;53_QC9reu|kZ&gBofY4q`W~lmA zG5kBM$M?57P}0{m>bG!&d^g|im#)qIY6HovFg^oeRDIiVP-b+}sj(x;VW`itA+#bKc zs^YqAC_t%p_M{cwZr8mZs>t?XWARX|;chaL8YAZZ+MHna7&fLkMigPQJxrt`1sGpO zyucpqxz};?t)LdmvXWxcLDTGRqr=f!#zj&4li>wAO|MfgCXN;|6sccKJ!p^vTz^re zd=bOI&<-7GZ?I+p?uYr&E#Fz(Eq$vVEtuziYExH=UYq=EOoJqz13RJ5@^RtWKsK{? zH*Zs!0lh}Q<-DZA#!t($kaFiApz+8#omtufigvjeORJYoW-4d$*B+_6J34Xn&kv}S zD{rgnsZX8Dk=@Mt?@>OqRXWo+@AtIjWY6|*2~qVnHYPN*1{Mb8oC4Vht~Z2Ih3zt! zp2kkcBcrO#yttmY3TthMCSfYvIFzUpd#Ie%cr(sqC! z=PsY7zT_BDyA>CemX73-wI;Mv{VFr1Q>tvovB~U!!E0nKeOiEKgHdS1KR+QjrClwm zvd0o8;WdfmDphZ`XxIwMRRn(@eEEBf1;qq)Kbj5)C{qttgP8`xOymkR!qB{4bq6iuSZ4T3)a3Gt2kq~N0VH3(7{S=Y{(&G3 zX}b_XCl0INJNU7QY|KEaHKhy+j7PwpA^h3peA#*A=;RwwY~ha+FtNdHieWZ8EL6&! z-){VV{qU*u3ts-(x6%j>!vAF*{cqVc5{Z^>C_R6N8EbS3KoTtb#05Ez2%k z?myy}cR>|CNuQ`oVLd~A{crG8Fcnuyd%uPcgc^$!T+y^SYMmdhcHYM9;;IwSIn6uY zz!CGuNr??7au1P$Dd$XNhK=24RT|7Q`l2fq_iw|M#7ZcrWmOaV8mx~h7JD!RZMbx~ zoOkklH(iRT&#-0S-%f{${tyU*j<0V;vkB0>{c???PGK)NrqOBfG*w+*AhY3~Ec?2- ztoWk-8EuX!ym%3WBtF*iP7V{u9osq}j8(7mZBy=C-OR}}#xTT&%YQ}Dpvu&k=WQ6Z zaQ!pDO6zc_;?J$Nm@`=uyP2~P75pSd$*+O?SUs)+?4tsj%89K-$*`{L32_G`da8+? zwws_OLIi_kpL6K)6X@o`z?y*b8yG}ZspD?LwsW}41tG1~t3fQorrcNmj79Eb5Dr8A z=#X+k+uPgHrdM7JGdeupG>BJVBRJ}>0xgd<(QtyQ0hJ>O4JE}T0x-nqnPBv>xcJ4D zprW=I-tsSjY6gXI+#58QU67MwVl}}l2)x@>??R)Nv#wq0PXAj#Awr55B*8BHla77F z1&OyN09`k@%UX;vk~M|uOqURz`2{+^+IWN0TlZX!K(xqfq1G@5WPMrqfkurCRMLx6 z_c~dfLzfeK{}{$F7!m%J0sR|qbL9ttk7g;*JPD=UnX7z_3dg&!USg*n{ zb?kCSM;{3LR5|4%O4ss>{z;0eKAcDuZft7U>v;~0aNZ)j)b{(rhP=D^{u_tX7=Xg1 z{qQAtbs$CHc`g=HxB&F^Po!z==^bxYeh2ZM8%!|NjSqHbZyE-Dj(+xYa{+&EKgf|9 z8;U)=jM5~5c|PUy-ov_0IpxI+_ek#}mR)uF4`nWS;(XePI>~R-AXHFqQ(lGZ9O22m z$oLbV0!X0^^(posJDP{dGmBjpvZ8ugEC^*aT}WkCYJxR>G4OWCORnq^+@thUU^%n( zw1L|Bl1Dk=hZkC3pv2QtS&U>rBSaZ_l4~*uL=|M2O1kF3owEZ`YY*exqSo&4MP|=x z;I&s~$2lK>=P3_Q@@0P`H1=$%g%HvYTGk@rRvuGuj!hy^mtx3~7jT^r2u5`kMruER zZT)cDE)`k^&wHFdfbe2GwrL;GWedM)iu_uwn5c?5K`j7r_RNs_2xuJr7yFhpI*!NF z*k*d~jQw{8^Vqp~7F8J5pp@Mr(C=|5SPvK@xMqG9K;I_GpZQ-E?qi%MjjKj3VlGoG zOG|Dn2J$bYFQ}!j!H?Z5C(5g`S3D}qG0n0hO{yoCRXE%v-}K&(Ty*I5rsUx(j;zJK zPXaxs%W=0LgLuM<@hBLDJROMY4sgDTM`iRy#?KR$t~(c@ht{6w8U?%*!(s3sQ17(B z!BDXG?}S+<<&8(`yAbXb;>-OjYG!B&2;}#gM@9{Sb=%Ba0q;*&%vNfuUhMUft`fH? zZ6fs_FoQ(0-@T#sNAUrawrBsZR=s{lR#a{X$)7FBlt6U|ejnE<3fh0+dUOW=6}v<^ z_hrX=R^ML*@Dn7V7uerP0iXF)6b<-TX`A$+>57#DZQjH?uwK?@Oe|neE7nMJOQf1uDmL#@YkYwLWdn#b)6g)KZCce!$cp&S3)WSQ$ z$%PeIt&~>x;~k5t=dT$0Eeq8X+sKmdHMnZ#z{ybdxfDDcVfu8Yyo|=caxMxty%f_G z9KiC#u4Jv$cC#5F?qdBHw(ujV|2Yjb$cFLD{KN*E@nn13{%Y@Da7Rn4U@eQum_!m% zlKB2`_azV}%WD0=Twn~EZ)zzq(nSB4Lo2oD!93(1mJk73grAbZuz~S6Yq++2ipn$U}W_(pLuoup8=xF%k z;2Ym;&=>4AsVv8!6=iAgn!b|6Y7m}#8jRt2lp@h7FqSA=kTvNQffbErJ(U|OQ$ryY zlxAjG-aDSqi#Z&)cf$w*S9GX`QKk(2WzviCCjSui3j2R61_}lSOx4A%PsEG0r$z}X zq00e0Mr#ik4-Z+k;P>};>>$nvN1Kuy6B-p5KBOHy-<_Y@n~T0Wf+v=;bmEWX6S#4O zrmdh2Rq=RyIa+gdG#e~p-T~4fFM<`eoc*|ghF@VnVq~Y>#KTgc!Gd*Ir|1X&rV*sr zT3R7sNNo`Q!WkG$ks$HjPuAOG@+;d6O17OTG7fMf^8^B03acV@d{aR2&FkdlmAJhc zS9SAw|GgKZLS3p_*ITaadnv)u!x&@0>$hN*s~v!y`DL!s_$j|P(LSc6nDN~CA#x?| ztQF*wZxNu?7}SmSQPJU#Gy7RZU<*nlsBehH);mCHe)9lgpG1#{zyz+`fjhHtjMELd zvi0t&-N}bzz}9Rv%>q{GMJEA2x+|PRN?j&l5*M57j0t8mIGqGPSh!WFBB?6@d&p^c zFqli+uS3XfTU?G63e{HOaj8XY8Z7sZKJo74UdJ_S{q>fQN`wkDP% z@I}e||EmZz_am!QT@XeJA%j~PIn$hZ_61cz=SQ+)8jMf|fCu{qE zX>F_7^PqaVT7U5}S`A)@*R(E}Pp^oagzvm%bb@7&$N!&gUD7fT6Y+Z`4UbW;nqbII z{HJ5+$~Bex*Q5L|rQm;)wg1hURjJ3npB7@q6t2+CiYFA@>%+w|PULTo*{q2U+rbk2 zk5hIbgP(4PLp0M7(nn%!TTtG+dA=kglBs5+d1yFJo5bsSJs_d$(({LzYIrunw4gbw zKuxM>h4~MF@zmD;w4%drh9;n*uGmlK(da_{$14LAy>pzISJg8jpjHZbr1~J21%0?% z&%IAm@<1)#XV)%uY)tA0-dp8590tk&>~<2()+0dV@~6e%M7@~nz!jRfrU?0_Ci}SR z`#?WME|x+wqQ%MH@FPbaQ~dZdKaj2i*Aq*6=3M#x03wifIsvqzB7}@BOyl(EnB-tu zC@AlIJWLZFiKl`w~ar>YgGKNuWH$n!>+cp?BRjN71w=8 zy({LxHL>ug%FacFlxiWf>LTBxtX$?xGN+kLWANDDq3)38|56oX6p(d%9LB-Yt38-r z3c^8*D?vJVAF$7zzZFco_~vHsyy3(QD`@ zzEHN2MFQUEBFD5tFpC7)luKr*G<5DIzyTk-a6bYh| z{(E-A{+YU#`oDH5iG|i5a~`*3-xDr8 zxzS4~p1AfcVW09*RR5`F%-E(3MV5Y^vnJZtpQIs<7;(S$DkF__;T$BBj-)>}^0}P$>tm*LkW=cCcb(9Q&9X|kKpiqvOpJ%nqI@Ch$4SO3 zmF2}dtPv^BIV~6BVij6u2TI)NDH-_`{n@jS0m>awOVRfmX=t!app_v?8jW^)R8u%| zhz*84G^}!?f-l^co$QXj-Ss^NWRFtzefZf=_5FOj6z%KOY(=a1dlunlw-oSae@pX} z`5van4x2h=>yox=5sg!IB!a$Td$t43)|xpp=>A}yA!sr-$gD@B`eB{l+MKHrT}GvZ z$PUs2wjBi?buBSsR;emYsC3qT;my%zxwqIt6Gz5eZjoqNV!e7Yt1A+Be1Fc}!(k0FiHy!jx<+-NhiiaW=FK=Zi5U^*>5D^y)noigXy zNC43;Uk%K%#H>^#Hm~ijz2R&9n{7aa+Z;G+FiU?2i64Fm$%4yCJ>dDZBrK zFNrMr{N}xNEHR80BtJf@tO&=$um${@hNk2ea*&B&UGvwib%-*0;Z}HTDL1{ct6DMn z51R9?MZz})*l93gK-dMKmmiv0L`yR*@l)gs$FP zVuXGtRXw(rjPTB7Vo(_++%Y`U^0DTWx(&h||J2EyPr58#IIl|TR5%0xEW8ax$juX3 zH8P5{ga>bg)hF1Wd#tzqdm_0M{zi!3{^h^)Hn@1ybH;OMX_6vMTbS- zcf|Wg>$F|xz~Ls7Ai9tHc2_LtZZ8zw0T$I$d|YC!9j0^iBBS+{8|T&+BMEa zjk0gTXOm9ng0zB@qohEWVmwtk+!hG$tRFZODBKYkp|ey) z$O?7-htG&+ZCjn60YkCQr2w0IOgd^&J{+`O8Z|{jKZBC8Bh2M2NvXMZBr)JEufXL# zejK|k{eSkVqF`(f8f?cU7tU~P(;tIof=aUFZM@D*il}*j2*xR1VY*udxg=|igqX;F zx3*tS;0I*1I10R<4|?_rynP37a0oGy`A z?wbLl-Xg2t0bKEm>$6q1QHfRgdByUT^iK<91OfVgJNO~Zcq;{=hxgY}LVaYyP8*so zxd=SVB-N>vI;-)BEqwY57(w}%5dfy zF|_5$)ynwAAlb)4XkY;^J3Ez}vk@J{(Ya3N#iD3i&<>A_xiL_|+Kw#=$0FA@hx1b} zH<}M6f?EXfm*ebTJt1HIW~O9ygV1Wp*v02&40oQi7#MC_Pz!Oi!{qTmDaP!U zWYf7Vk4e&|9`rq>HFa`&?*8+-(U_xI%Ren$v80M&;J~m%_iUnkkH+u_ykEJI16qLMZmJdqkqtkayzY1x~ey&4pgf)Gc4nU<#FQ>bRaAIu0XXjrJF zKW{%i%p!^i(??u;d$LgY)V$jxk35q}nYTSi_fvkAU+OI?x}g?IQdU2Qkqb2Nd#>AR z?941{C?+blh?zRtT=-l8OH=`Tbb`CDqUMjqBZ}&z=^E%bS~UebDKy96OZf;h=;N#r(9cQ?KRBrt?zvm%h3>xkaN0z zGH0-dWs*;GgOXAZx)GK`;5Y6}o0Dh5!{Kd^L^6p1i_P;W1fygGp3UUf3>Kz;9zeoP z1wfrxU54N`)Q@TuC`?rq1S(2JmH*}mn6sF$a-o)DH~|fghLuW>U@9eN?$4vg*d*a; z$PF5GU@8ZAnbxXt|3j*Hl1OR$rEZ}EA(42uwd(gHF-l{S{};IIAm_j1Kj5p%YI?1a zHw51Q=~brCvH#^RoU?I!#Za(y&EtY?`VpTMA~o85|API#DPL_oX_I?rAp<%oMY<(- zmZpmKVC2rl8d=L+lc&_`%niK^2y~SYsR-cPj>41U&XCwv29MH@Sa#OH$6aa3&eqzN z(CjU4UtQ^A!6~zoJ3aExCjRP)!%`H@l|8oBG`5MLELoci=NaXp^H#)yoU<5kpe+F{ z_}$P|VjXTKA9f6y>z+h;N@---0?r0GFVHFK= z=kQmy84s3|v3bF`Zc{QbP7a}L=zu+$7U#IkBM{dFN(p14@PrT~6YkI;nYNaS5BuZw zNA{^1<+FRMRXM(O2QRE3RP%&zm0HS7axb~+Izoy{XcEM)9@0(hM_4F|B2YKt6zkEy zB4y*d^;rnHOawFeUbAEl)d9=;XE+Sy1~&k7+`B89NZGN^`N+Cbzj13P1&;uM6J#DY z(gNHt<)ozf`Cw#gglf(a+2L`ifmF2|=2S~9Du3SK{!rcka@85xF+~XWA8pVAN&>Hp z;8K=id@wTeUVdqW+EQ@b^H)zd)Db=0XWVhEfhuRkJ z;V+{OLY&^%g+=ok z-av3|Oszb6?0ZrDBos;JpDs9v2KiQY^ObP2E^c&ITD^(7h|1}Mge@gSBJ~nN&=(1% z=BxRjclTq&Bout;qm%XX=a~R7MPZnMMmIvQkO4u493aP%74RC0xj4o0B<-QdEA&G+ zMy6S(cTd+LWYvWzQ?)pv72j-~D8?-RIb#R(Hr&KWPnb0APioZ&3XW6Uq=(!i#6!=0 zp#KK2ayBYxD%8MU0kOkgB2MFA%M9}a+-<6VL@*x+oLC-)ZK-?BRM~ke3-a!fSpMy{ z=k&!NK0d~`7?5&Uy)+fg!i6K!4s}eJKqVi zQ4mex?<7WTFRNPGx-%Gsuo)}&ub&zH>GozZM9khPt)97X4{?z0jFf$x&iqqs5Php$ zwPlSFMhe)^RX+6Rz>-MwGjU%%`E~6`lha$UX&46ixuH`K1wZoDHUwX}*$ZCK9VQ1y z0uKcnr>Q2mb%oJscBskV?G(ERFnADd_5pTL`e@kYT$#^Ftm!EcNHT}@rLB56%q!sE z$jLoH@=P!Y$1_x`M_mfcU!?opbIfcen$9>+5E)h=9JSUl>w8f+;3yP)39KV(gQS01 zUsm+zWKcg~oeMTSd3T&u4Svqz>F8#QMvwO@;DOoCY`<%Z`ll7%g-N@BJSukYrZ!6> zVaZTRe|r=G0h;jc#ud(gCH}DYPL{S=j*~-(jO85&nfwEjb3{(2H|V&-&)M^6s4*m1EDT=$kX$K|9gK31w07u?0()CDG1P} z2|Rnfmu8k;M)Gy*N5*$fcy{M#RgPbc4VBh+>ao3ar;`Qr0ZUw2d>NgD_ZX;Hv|#$u z0zZ~N7%#p%SMqSz&AgdLz0p`7?GC4|G7j~@9;r%XFm^_J}ce_21e!l!o{cmD8QH(^yH5eZPK1|sF~Ju^5TY_B^P!Kp&jAu zzZB$V7680zc)P^DvM51Qz3hpu3j(r11pOH;PLZth6KlJcV9Tgo97|h4&N8tm0}~et zc%?X#^Z2L3o@a-Xsjq=LzFn`dA`pVrs(a%At7W)~<9rqPFSb2e*q1BvAC2I|v1m3L zf#-#K#yrc+jEa3wRJSK0(JSqfmAk@uB`bnq48$G`R+uHRnNiD5PWN!Mp6tE%beY0V zAjd&-F8_$^E}gsSccV#Ll^Tq45AOcyxyKPm(pm1dUVEfaq=X1cB#c-=+}fE4V^4cb zZJ438Xo-4qiOXr?f+4k*s?*}8>}Xy*fM~zsgVvw`)F}az476vcR4Xbm)?zn?*Q_iB ze_n>#K=I-qn=Eysc{`f##DT2)HV7Y(u-l-wE>O%H4F~CTG@>Qk(3i)QZ)$L5jQ9WAz~voVDcmoz@v>djBe*7it;nJ z-aWEhcO}?0YR(r_Gj@CkjqqA%SJAroGz426swjAt?9dz9@jUse$d^78kuNoxO~>Ef ze9-yze&AlT)nm@uNQ_ z!M7HXY*IR#pRfA37gRkvU4Nwtz9s%@XIRNM>uFlEVg3RUizcLw^KQIj5wFH>&l!*q?*)U(nV_r&4 z-&j}y!cy#QZ)@0v*D;X_;iUqSR|_4XJ=w?eiXgfT{d%C^9cHLvO12iwHL5(DKWql$ znZm177{(e9s$GAZndxhwK)(~f(n&Cf&`!DtAnui9USd8Rvi1P>*0m>G$ufDI06=&{cl)-*^s@vk(mRh4rLcA%L$1h+C6w4Pp0 zIjenVqN~Aiakuw0SYEYw_K@@}$WT#pAYgEB2~7H)g^gU<@dx=~|l-=kGH zP&?2Gvr@_FEat!pr*Mld5Gt=AJO&Xkp^uNri~MdBa9j1!;Sz2&ow$%%+yD$0{_mh# zA&F8HsGJzew#wY4k-PGHsHULfVEXddVxa0WP>y*;BYrF+?sJMQ0ZM>^>36$X7eS+8 zcgU>g%@ALSJlbt^42m#sMf8Czu>_NYhQOM-cJVUnU(WJR&e0OnaJM(fnSrW-Q0y5p zpiq5ms|~VRs~RRGRyYwQM(xf8;jzSTWwfR=ND_LRX(!soUxDX%`WtqA|@4M zQ_?x$VwtONtI?jCz@4TCWX2JD3(lDkKzl>>KO|>&#hjX`B{AOTo;emZaFZM93bIL7a3*u66pqcH;|s%@la%2GhAB_# zz;mF4_+WzmFu;gxY(S^8prsVL&D01G6*rzT&jBGIU(vjOCCj$ma9q{wkB4ln#qoP zW~WPIrNK0AWN`0vny9Op;8w8qZ6fJ3AfmF^zL-yzJ6`?8r}I)rZuWGU{OxG-6Mzrw zpWz!)N)}F~7k>gGI4D@vP?R2lgVGX#JvR`clCiQf1Ezny3~cw&+Kp?d0mP%jNck+J zU+%@%i7hVQ{=?@t8V`fA!Z4mW`iY`Wu8zul3A)$^BhCxC;C8bwnT0}L>*wO@V7=(D zDwg{SjxikYYnNgm3J&ZJ-2q;~9?(`fTcjnU6$NRaAqM=9S{#eRbjV^v$}cVe0Ue#l zw8?!rIrua@(m-pdvxZ^4g!G zjK6j>i*bysw|ub=4nI`$F*w<2!Ts?%82G*n;+uOfcmq#cMcaO3nQJa82DOB~GuWA> z9b0(g{@$ryu9n_pA`-bg!_#BtAEAn`^z$!v7dzhhaJ#kt$@u(=`1LjB7s!R;QcQH@Nh@(H zLLC8!h&Ovx?FBcfeUXJSj|zk)y_F;62IOT07f`DVT6tLuF%dbpC;=Ob6sF;xoe~R~ z3^%ov;x0ElFp_yUD>_s&^yVK0rw)?PL zhH(Mn5`mkzbp3^JWqbMoedlW!5Wh``qb5-iuIrj?9}%h5=T&4PaqGRaaG?TTHqu9| z6$cgw-_RG9c+O4sUL7)O!P&Yz1;NlwHT({yTWSU#-mMZnGX=9tpr@hNC$2NHhtp}C zw?+o;=>`Z5z>6PN)#`^ddNvbFt0*}(=2%8T_I%8;&J_RhtvclcauvN9J3%-&QE044A$1n_0FW)a`}>LTG#+F&eFqSE1lkk$w~&!Bl-U%<%di zM)3xMsEqG6_pwJx6FR$nfpo4sQzZ`1>3XZq+$Xq&?d^w`@4=SIEMFz*j6m?v0-o$7|Mlm^` zCG<961I#F8YH{*hgXR2d;Z#otxdC^D=?lVPCXAsZo{^KdNZs@24AzJ&g5GFy-#nk( zgWG$JzfXeHs}J86`5f5D!9@(~fA&!#Yk^Tk$Y-e(zv(;ehw`#T&-8^z9)nqEJ`4XT zUH8kvl5~$|tItw-i9`LVeldMbY0qK9ZUlA5&sgJG0TE~_fBu5ek>(vTCagKTLUYE< z@$UOS_&P%~#9<)%aLm$&_J}iuxj84$hZcpGQB<6Yt~WGWu*B_-Meb$Od@J9>I!sCJdQb7y5wFz;0+ zLrVrxpCMGrd$|*Rb0GU53!gK}^F~)e=9kDIT=i>I`HRZE|7UE|Kc1B3_1YP5GOsTS285|YlM9gs>S%PqhH#|N8 z)0hD_t$}7^!iP8gZBS6sU(D^;RH%Y+wV}o~5W&&KIR!R$I{no)+Nri?8p~jEE~i9i z(fb_iciyH%X5*Of)$L*I*8)3VdcmuP4)w~g?rudi0>;#NY!XV>hA&F7EgwGPRAk>`>k)b&VJ9&HQntQSf(Y=G|%HBZLrSC zFeMjCeKQtL#CJd!7)WehZdtl=t!te@tdPV9A?lOT%tAh8Y#gQH@}iL5Xi(?V$j*al z^UJFA^=vCb=jPr_v|E=l4;nqUpipjWR|r1@GaxmUXY-0U1%D12fCjA+sXce;#}M2g zaI#j>OdprRt)!EJp!l>>b`P(QiCe3pO5XPKZ7aGrCt&tgk;-EbOv2LVAqryEVeua; zv@B-?){=OxEd{I8;{4>P%0d^;$5P0&(eQ)U{AP=x;{JCdmwg8XSpv*?^-Zg@lZ;8@ zCWs_J;vf6bt@%)Wb|}8>$?;Sm(&L~TBE5#HD)eBohUOa^3m9{r24+;}dZH};*JLP4 zFQ}yMB8)H0;W1;hplNCr)-BmYptW#=UeYVKf@`*23N zm|Zke=2ocn(am`sd5ww~|C)Le&A=#|ZIFO$S|Zu(|+xRRe!abCPjbMi47cnB)#o%J$sg4(^+R- zq>$#3YSB-V2k&wf?lnJ*21d1qjrpI#A6>?Z4-GWF^}O^zvQy!I+fHDTmYQ8C$F*&Q zwY(5Jh4;N{xbD%v2uosgTjx`c^tW94pa2qefKBylRC=P4}kVF5KRESRBrG`9ht zPr!eDT7+v=$NoOgeqDp5OJOKNn+HFojM(3#;T{h!X1-C}4?l>r8btr%8DA_B?F8UT zh3CH+vTguauA2-jA1Hgf(inZ8V zoWkqb-Y|IujocU;pNwm?;(vOveEWmCZ51rooxs-Hy=Ehu7*$H&>gpNBL8VI`ZCu10 z@C|P3PkIUpf*Jf@@6(ZRaPL|tOmQ8aGrz+7Q}TuU!o@zD=7yUF1}GPhPlr)7V+m^? zQl-9r@1(kjQYVhQChh?V|J6na6=JHUR#y3I%4p!hJ8#=(f zkWv+1?3WW#oEkixV{Pp?(T>jc^v1WeK3|(eO3Fd&Qc-yJhB=g(_yZOhRK=VZ<93E3 z%k>elAHvjrQAiWH2EOnyNgKh*?`y*F-&;biOfd$>rkP8EiYOFE#oYrHZ2EJCDJXuF zKW{mWmXy3f?Yhw+MvWO6PlfvokTipJ0^a(+N1D=Yg>AvuDuox@z=lePJnjW%6TX6v z_u^2uo~8#!waO!ptax(e-L3sLK4Ll{*9cGiMExANdQ2nxjukJBS=pTCe8}%m2guEi zliP_sK87noHQkzU8FtUXFkqd^Aqvi?_B$bDnuHGBIU%Jzrmka__1Bq!n7QO!QD?#? zi`OP6&g%Fg^QB-kpN*iad0Sy3u%5-}6l9u9Z5gjiYt^=$4qo1sSm{z;f6v}|Sv5GD zVfLz12GYgo&1ZCoL}FD~_b4D#Ww?NoDZ))2^SL95UfAiTDD1YO@WMC&XOr_`6W{Hq zo~;3=UF~WRJ|pS zn=NR$B%E5;z5o7)?S2_0-tGEmK?k&N5z7ok23a2aDcF?46Kh9@b+ovtyjEvCoKM{! zp*mb82YC89sLZ6(Xu%V&QbbFGu=@5-EK#_&RrN4$_%kbg76s3@bxuWQCq`qKs^$p; zD-^D08Qz#TU)DdJ2PRwxB3?TjzTJ@;+?fmHk)wne%=W4_t{DEk`1qssG6FrBAB4AX z(kSq(QzUo5?}4i-Zx>+8de$k*_pX_F8{*7<#VLRmjR&JUYl+O#SkwO=RMJaBfnP9Y zivosnd&$Ya27$)+z)AY|I4_9IX8}{?F9TOg@noAzcK~E*_#7ToK>hdA*Ltd6NJpEG zucjoBcjyeB@h5}=ISMfrl4}8qaezsjPzHeeH(7PubC^q)pJpDBJXKj@^V3!nVX0Nc z$2xOPn#U;g+_b`0pH=H@14*d40mOUo+4&4p)$6I5=qdtd{)0-xYDP|VuMG)_ut)Xd zYqLv1O$(MVB$(75OPHQkCC}x2=j$a+JHkkm6j+m4P_uJ$;FmdnVrV8@^FZ<)IGr65 zjZIyCGrP5`Arzjcnx6SG;hS@|4HB#1Yv0?S14~;~fzbA+Rcn8NnFQ+Gr@SUcl*q>8+-!=a7;idSM>ppeRhHs6Ix_B2#1o zy9!kzSqfX<3QB;=A-Ukj8x~UKMyRdxTVt+@!4iJ=BJ5p8Y!3z!(F2jf%{E{2u2zrTSv85&SN9Xi7S1e{g4pwvMp4>()g*Q7%wqm zoq#Gl#s!TIB}j}Pnsy8v4-Udup}*UmOEYPEJ8Nmh2HmGC57K*t$&J6GkLuYWS3~9Z z4HGO#=+b?2_oO=lMQY|lwsO3(4X(ckkuW1*C#&SOwR%I*qeIl$CrMUb`E>7v2A<ENn?20^356fJz|9a|NDTGxE+HUQI%Hn!v zHbE~Rq|Ak9TF%yH&D;>YEK8JgZbm)pH+fs(Rw8oNcWWZv=%_wc{j~<>xx3{Q*bb#8 zTZ=mv7r@l@=>QsE(7QM%+hx(LQgm-4iM7#ccbSOm>@W8L==9y1E`V!T_;&F=y?u{G z$LJZHlzYArdk#ZwBV4xLP)6*;4SsocM{8LFSIr1tB8 z0d3Yca*V|gJuw_8+3yruw7h(%ImELGVc2nrsSWB#+orf{t#gsKUcwW)=6oC3!qfii zq!&`L7LC)kKw=61Wky)qWvz>t5na_KBo7RxiG_E1Pstd@WuGlZaxD@*1D4c_{x8?~Z_meLxK9$84GgH~+l{kpc%!iD zg~A{>0f^+G{Hxqd7e}iRg}^TwW8!FwEPG)2Li@1YHu&|@EtWW!>YU_OS7h|?VdqmJ zld7RM2y9&XvPPNM@E7&W3I<7_cWLy;`r+FwmzdC$6YL#CV z_FL6a>5ashp$|vH*|Y=X5>nI9`93yr{om@LTU*66j?P;w{;C7>imE(@>&eJd)TOqW z4og=Dp~=(r2hZ|-4vg-Chx+%5nFJW*CFK1vOLJ43k{_6GxK=4e-gFono@Op75ybYMd>q>(su52IJjXS?a~Tet)K|)T*OJXzD8YQG}p$Oj*&-uLTDWy&Fvwk z^0f;T-bvZ!t)N3yakN_382y!QkwQFf2cib=gB2y6>Z_1xseh0KhG~+i-`nb*cn0bp ziKuB7xejbev(qG-q2sa%uvNnm4qWW8wuYjyo=88S7?I&P(0A@U*!7B1tpXhDUFXHm zV>WG4uyvA^KmZgOme(PFs1G8`E_p{@G4S{kHh1ep)I&^v39F(+9#=c^q3(J^lpo(* z7u{(VjJU4U$fVVGK5b@w^*r|5>olkpn^)6WI7QLmFKCUx{*gV};Oh}XXL^I%Wb=)! zXYMr{{KMLtU;|xKL{Qu$KbNpN@#;g2k-Nqgc`&T+J%U(iCa!OO%n$4f3v-Q3wVsQx zWVKXjM}+OnD3_>Q(hK-Is8Jc|2VSG<>k|d>&08ShVkcQqRyUpho7j$&7+5(vT_={` zcpTi4ppvL8O{A8%XHeYlsuh;7G09y$Ysx>vP5+`9*oK26LEryP`yr2vr0TELqQHI8 z^52C|YjOq2p5Bj=+)p~A+iE0t|1^Pn`TqbRK;FNpxn^1^P?mJfe&+^m!|_~DG)yO1 zWt5Dx8Kw21A}a`HGv~A6K>+Q*?|hlQPOPPV|DB?~CN2$|fK@Arg|N)zREl+LFQ~`P zYL=e}-5=*rB|#YSswrp`dWq*Xc?KyCq?N*xzf%hE`iHJyus$3^gOQphzBV4fRw4|{ zZpXUszE}NR_G`RKptyi-+wM`zEJ&jjQ=SQTk{S8v~V@X&iXx!jOX>kE7T~v ziG}&Mx{EaOR?NpL)j}K}LR&Uyfo?93O?Q!pd=WO6z(=rvPTnXl?M}SY?W8!o#K*k% zp3+v(_`PflZuL}nERLRCa09F8gEohI8Z`Oyx$Y}v*D`qFU0sic@9Sddl%yt~Zp+IM zc^G7ASeR(4t&EO^*5P3l`U}h#Nw;fX$dUQWh&GmOYE88*ZX!6E>@Na$+cmRkzNCZy zkjWI0!}k*Ybk%Ca#r`C9(eGEKm$nh`R&5RFc9KC}M+s|c?O1?!r5!GHYJuy&8YMgE z_U_*eruPY4!w#eOUV&@ubvN0c&+B385(8{@EmL;gBgRFvgi1QR*XS_{p>>yRV`u?n z`0L=Hg)>jwbgtp0-MG3vHQq)Y@Jz9`c_{QbZ1ksitU;oApxHy)xD01z9Z>CZ}_x<34iZz(%I_18%wcy z?jvV-oMk*$xF3{f*BWOFJ*lZ#ge$7|MsVmeb(fj4-72%|ajJ zHAQ`gou@4L{gHBR!`%Xm^Ugf1)u6k#9EiKRM0|1PdkLQf4oZu4nExv7xoqbvaEPL6 z>T>bJhd2~@RyJM}0x;|Hkf*AAS(bH#q|GP{jH5=1Oq`aYVzk=VLQSnpt<|3CUJ+#5 zX*I(2#8sR$=!|RdE7lHBWyXC=O_ltT=JoQdTyP`w>TnA1Nbm`w?w0~`nQ^Ak4vkd- zzG9A1d&^x;gnn_|v0tGCFnzR@)i>1a$CKRb7wv9x-%wFkb|XSCGK8Sx{Anx8Vc*Mg z`Y`33Q}z*w3ZMPx=hy}Anv#J)x=+z+iSiBk3br&?YA|chN=`W+#sBi9UfHAlNYJWT zSmaN3Hb5_qObr8EK`k_Qs^_?+Z*%KEZlY_S8dI>YYz*K9MFYH}eonCwxN1EkXH|Vo z6`jav^o(&uhc3JL%T~*dS44*SrU7@lg&S&Z;aUh`v^N>ooV^?kOfQTELrrYK=uwV* zo(0p-jk1azO>;(Hawh)gyQakyf%wY_YOy8MIa43S{}NEVmCIQFr9Jk#3@(w;C|G+~?`$9JEMJ>yiKpNo5pj9SaRDU#;_lM!+?36!X!y636+!({7SCyvp|lug zX~fmjn%vk`F{~4^NgFdT+S2vhfalmZ3QoVcsdGm2wLq4eWYS186^55tMbQdR&djZ~ zfF;eol|Mzg?=coIf!e*a>-s@heSzx_;ghjY;mk<(sqbXIJF6@IxyRBTTXi+XdAj!YcbN*_=6B%XWfY!Pc ze$m}2F4|-|f3qxms<(jFcMR2}IdKFDCZ{QNU6)wdN)S1XJL?VR?SH=4mYq*AJjTt4 zs7-lNi8Bd^DB~veKintfBhN5?S;;C4kt^x9?_Wo%@G2QH)tg z0h&vHO+#zO1B_?O#XirygdVwm3{MQ)pM77gU5T^q_AKnB;0`-! zg|5mV?6vcKgq1Fy@WQxoJ?M&8(KbL4Mu5bdEUhjPGNrz4KW1q+56#}CD`H{AtN%p85OIN7Stbh9_q54eD*bsM(v zH!s?>T4zDica600CkBnpk%^p{~l{9?|aT5g>C*6;#{Vsv7`ejAz1 zq`pAh*r-?i`Hh;*tX_OoQCAARPHr8f?C?$99>3)cng0qAy$YFn=nAl1-{0q5-@1H7 z;>kD3+STK3u%->W35b*eNXa>GMf4N}-34>m-Z>~pml}tT#vKu;CRXai7WB{`?j(&i z?xODM=)`YEslO}ar*1+Ie^L4j1?6h`$`0Zo!a;Hg8-^1E(TY|!qeq#}>;unRt4{|(wx4}|Rz-&pj?Y67c6Q+(#OQQ4b_Cl37q_}?NrVT&K-nA`ilfFZEU zk`3t5ZbzgN^hDcsY5+;V0`|FTN`o_H-7-#gS~mb7ftYF`+!0IT@7J?>5vd}+8THf} z#H0tDJUuo+9xhxcVpIYar8H;78;^Xud^iT(T@Eb_M+5^wR+r6!oPjK1#J+IL^KY@h zZ+j$jmDQ!7xZs$v9bH z9&#mdC{+UT9A%eYLt?a96ATo_dJm)%5wEqu1bg1?Ee**B<;@DsA{bp0@rV@kXA~#- zwwf6ZgRH={#1P@giPFM?1R7V=)oqtQ0=?{*!kSPW+^rRo}EtZdT+qh6c}t{@Tv= z{l?4{;Et!y+M7#Gir1i-0gXPo%G9tmf8N?8KTPEliMlVLa|nYgK}{Ntq4X~r#e3B(sVlb&4#8H(JAByii!Jlsx-C=0Cf(BFyUR_`}oJv zF;}Mqt?GDTsss1MC)#NRyYu{j&5+c(3Z{QIwM$^>IKjLGu zZW(uk5`)OYgCZuVfp`PNC~o*+zGoTPMaJkBQd=lqN*{W4M{Q*IT z9h^mh4Ho22{#LyC+i;mA02ZI!<{5l@iSN`Jf8!pPB*b4tV%mQ0gOL;Yn*Dbf`YF-5 zGA9+mO$+I_wxS$B&{)<>v4|j&v#l(}b@d{i3>-A?>pU@ZbSWUM9Y-G_@sGT9lm3}5 zlt&fw@OloD&FB$TFJEl-!!dnWfkN@AX)|A2?&C2k=IUbk^wh#D$zjdEwf&H|Z(uV& z_k2#@-C72z%FK!-VGz#aR;s1O11O*%VRg3Z0$;nOTh7YLj+g&_Ay zUbTjv;x~G_nRIip4Rms_AytWXMfl>HFky!Kc+%7wyDY@6Pj0MJrlTfTme+H#0``Bk zY~q}gtd_h13PIXzk9wya`2}M*qZS{nxtxR72PWB~m)s(N+EMc>qR`5O-3F(IUew;p zO6H|!(Pmp~=eJfV(@~Qdc7W#NOQw|4Sevgks9Z|@CU^fXW*0pZrea?V>A;hffC6pfb%3aBn!X<-ck5RtHw( z+6y6D$ckO2t3Wb#JCT|Zdf-xKNCSi_BEk9K^d+9^|M$6){3OIbkf(Fji(d#67hY6C zBX+W(tj6m96oyh4>p;7icG~OndG<^913sFJpwpQ_Vl|mnxH

zZ1lMxwx8gKfY z8DgVOu+5yboDnu>gvt;g&t!_Bkf6PH6qd$aqOOA2<<2PK8h`=tnJd~~Ilxu$AHwrV zpYoXyH_XbQ&%}F0bLJNt!l0zps}rh#LO?BTm`>!WJ!33vjDXQ|R@>k(J@sj|&JUn1 zhvK=VfF;yl2VfA<5Yj5^W_OMx(0_*K#`lkLZ|=yVyhlX~N0}qoUj@LKO};YVvBHH_ zAGx9S!oY25d&Pd4uv;oaEhYGEYJits=)N&3xGah7)i)yvmfLG$!2!aFw+;`DZUw2j zlvE-Ex_>zCjyTz#$b+B>MO5N6Kdjeub3} z!Ukji5!o+aT19JnDFcU@!qjnucdyo$g+PF%+$Ls=uG84v7lioR7 zCO|B-_pAvf@EGI`gf43XPS&7>_V-ZoVGK6>;AwB*L+dl4AhEbDZe=_?8ykY_%nvd4 z6DG>$w7SH@eJJQGmH6C__YH1NGMh_#7ky1Zt*|s zFa6eTa@BbZQ5Sv!_v-&toddlS2{3tUsWZHehH4q|CfHl5(P2t!UNn{^>F#K_DtPqu zz&Y^o6@sY#D@}{O@cfO?8#VMw$yH9ceD)Z%XHI}C=91(!-u8~MWolq05XrWkQq=>G zdw}~A*#;0nD_(2U^RC14f$!ga?A8<$+G<2YqMOvvn01rlnEEb~VcR3c#y_TQTwf74 z4dl2>xHLrC;5@=q4~;=cNCOMl^>MNnxVs84D(_~&;B0Y5{1OR&qYM>p^4-^7Y6gJ& zP=<%9=KI=sK6fWb1i{;RK1InQ>Z(gqZ%$(iR zPk$NLs@#72x?mLI!1N=p{Q05{UsRt277Gp}pJwzsv^R`X=Lj1#VL-r})~jGuuwV^A zZE~JXgp9L|Z$6>yJaX7hdH4(e|)m4-P%;-vE9w&PV-WBcdpZqgd; zfM8UHQ+oTE^kjsyNB4QlgY+rEpQH zfz#D1F}o7%wUQ^h(_IRO_6}GK2LcyBJ;G0Rn%8``3*q_`8^NATBwcZH^POytovv*` zjN35V%Dp6qCkRM6x|NDZo85FfyMtRDAvGuHx1iB+LLDlypo$i?`$r%U4T6!~BP7J< zltV38F5+lQx4OZVbn%$Hj3?946$X*@z6&#X>!eM)7Tvs?&d6r%z4M(ta;CrpFCd?d zxrO%OzFm;{vj=0!VM&86ViMDmpxpZTFL;1r8o0oq}wCD5E`fnYzF0XbO6mzu!0n z_)o}f(4a?s$t zhZjSk2A16UEu6JoG?ALPhnIZG+*s~<2QniiaK=m@Q1(u!ju}Rn0xC)xy8H?XYVlgj z0xZay4Ef%~KKIVmEw-(VI5@8x-du~!SExL=##WUqr>$#LajOaQ8J-}lJ^gI^ARj2G z8Xol>wdy?XdT-jy$#kJgXb*}y5ehvX0;u9zrPq0OL+MDqag03JaxY-kHeF^dzy1w|5K$kya4{a)q;cPo z=X*-+X<-e1)&{rI&ah?L%yQI{ppm6WQi5*mw4St0j9ub%ZRY&)_KJ=TGK<|BV{bqe z0xsrlma>Xh@I;gi5QlRW48Dl0UJi&rpOSIsyeBmeX=x1$Nefc>H&%lYwYmWy{l!;R zH@X5febR9rE6h_SA`qr`p^e$oFa8>!sa0QPCqZ;MmMG zkUca@Uv(td40pRbg7K~9d!<%TqQ$)8=e+p;6uF7Hm3V-0%SII`samuMxU}s6u1+Mf z$G=m9vI;97CdT-Rz{?2ONDtB{AbFRf=3XBUxNUK$s67mVhMK{6>A<14jhYeth?~Pa zd6ZUWzU}wLD223DDhWsUfwa1IEZQ?Bb%_J9JyCuG6a%}LzrSn&u(8@15vvbhI0g|J_ zU-G&SSCXl`LK)wReTnVV-yP+Mm6!3u%1G5AR4GtSq%#0kUF5Z*HsejS93dK_voOYW zl)CL68*@SbNH-N~dJT&+2<1%qSg~-koi6J~VgN`(hd|nqBy%fgq-El<-11sOG}XW_ zr>Kh=Rn{*UC^KhVag1(34<6U1QkiIs3!7zzAyZ6vf4o68XgZWrShnHL(9(4(HX$vW z!E9Unv3?V@fW^@0J}lJ;y%Ju~Bl!6KAmKT7(JyzvOWmq#8m)n|?_+A1eAYxD_Urf3 zRgp>%Ut*LJ)GRn@6Kt#jJq3%O*-B|UML=5!O(eQWt|Yn^yq6}=Yk`H>4NlKhV_aro z$t`j)rE;c-Y?x1LT`9lDm_$}-3W{woTlL)GP8*2R`jFk=9)FmzRHr^TtxU zq4S%Y90NhH0Li&vBp4%-#H_jf#jkStGtn7E;u zlt?gu)&SwxVM|=-#_{Y*uxN%$iLs=f>y2(Zc4d0khDu2bj2hRQ=p`|>W3D4c=Z`Q4 zn1vHPZHiw3iC0o>Xjn|$*&QAEdDX<1d=W|#!b=Onwm?zk$o>5Be(a5UI>Kig4X}UR zTX9ia**mLXP|KC)evy^z>pEqqandV%O>Y!bF)?X3nO}bLx*?)uWw8Q%glXk5r%Z`;bCj_n|IlT43?;@*LT4?nh!e;qPPz6%Ae-g?6nBIcsOTV?DXL zjKU`W5L!ZU2|b|c0XB>VhR|NyIq_HvA38|8oD5=k$%m6{mr8_95XjwjNPY}CF#sP~ zU8ZBylB4&iB*u%Hu!nLSD9JJh94nv1})hQlqS=uz+-KNqEp5amyL}tBHu%O)&3K1f0aR!K$4TzF^E+!BG(e z6A>XrTy;dVK7t*u4W{wAno}(0$0|;{2j--6P{BB0mCpSwnU<~*?wBWo`rrjN$%o+N zSB$UHnI9|HT-$punj*gqy`W?7Kk3!Q?aTZKv|3ya+gg^CW-vhATgA2h5Uw1X^8pi@ zi~ZnTQH578DPNl*o(8c(ow5x%DsN!N7KIyD^X8=d zBYqwg=PY?XC@S0lS=>s3KhqiScD#UaWM(y3L6V*?NIl^?)B4~l-+Nk_h&H<$y-oUt z;%Gm&S`SGfd^K&<-X~)na49b~<>(F6B8K2w{nVJYCT=t{cjS@{nF02XCy6oHx?e_8 z1|iS2qQe*lR1+oFtMCU^= zLa6%sY(l^B)`4vUW5GL?^v>UNBF-P^ijB_Pc#`Z$9;Il8mOcaKX>zw)^_sUtR5o-f zT&{ZUoVj;EFb(BGF%fjj0o>7D>Vobt!KL)C%~REquH8gs7)9#^`^h;3OGw8gcuzfS zb6lNsBmZI<^TGl96VE z1w!`*=3uA?_&vzZtT|8K+^94%P&2ZqGEnt!ZAaQk;z9(U5!A0qRp8YPve#rNg!+86Px?AGS*em8uGOdOK3FUiZ&z5cqVmt# z=Q>G`kot+I!%s&Se8Uucv$i^rXT9X|E@04W1n1diJCi%2GQ%n+7a3=To|na6BgbG~j>H(37oOgM#(spB#bQ61;h5 z*;3!$w_B&1qfEf5M5bm}oLOcXz|tk2m%qL91}#8}1~W$DYl%YL33E0KXYIMX+4yUa zjhdKv&0!8`vzsD6Kmc75hrv%QH z0q1j<;U#{xAONXbajY?D{!diE4;+5dYKYE_TY|#MiRTECu>Z$^BcG8Y@ypZ0u>2D< zNw-$S=GWU~rmpR}X*vTmW~TpfD*Erjrb7K>pf0Ni_4T)vECrr6`QTRxr_n~b&o!w! z#X$CGZ{4H8e|FPM)W9F4K@>n`1K5+o`p-JCt)2IS5TFmvHr#NM{4<=CWO-=_eXArC zHnhWaA|p9a{j>ewE>0Pjz_+39Fpqg!L*vlwBT^^H)^PvKPM#Bnc4sI!`S$5+*1WuE zIK))lBDPNkp&ni$#?N%d_Q)fG-nfOn`v@rc|EpD+Eg8;{WRs{3I0i6ne-p_E1y#27 zOrGeCbb#5(Fu#KRzmPw1gJ@t?>8=bPD zNY%i6i3^=P`n{fz8%Xb?9V~oK$T9~{7t85oyZqC0K|qQs`w=y=-~Tei0QA`ohGpQH z-vceT{}%BlVZQ}ZU`{ip4;s;2FWL>7-|ZWD0c+pHIQ%=}%RIS3P()UNFdwbzy;c!z zm&A{#48xwKbhc)u`ajx^EGuPgcq$cyMqp=xh;&&9ALdb?NTWB3WEuOJo@+oFgFn8R zWt&jqoyrd+pb9i|`SPZ1IFf}d#J@p>>bqe&DC9=^r={{dBgo+9a(zAuyC(O0z_KN( zG`T+w?0oQ<?5vER zc&h!*YiSPQ8FSp78_~PR>_s3vjp$$pqE%4^rpmgXgN>{eI-O-||Lehn{XH^FRCsyF zEEM*(aq&9j-33d)_#6)){*YrAPV>eF2cZGq#OcN$OJN&&u&rx4O71Pxs71iI=~u!? zTEVdHTju!AB%`l98iXOSxoZ_FBYC3ro(V(o#tm~HqwuG8zXTv8yzdo1%*Hdfq*p#8 zb2r_-*cm|}&noi23_4RKnBEfLP%O|ugmP_bISk`L`EO`60Q|vK>fg7S9OJUq&c>?u z9-|>&tX}d0mI}%PJN%Qkp+yO1^tCgZK%&Jahn$lMYF znJHg+4pg4f@pf{!#l9iW{+Hw|E3F2BuMUCIn#*sE|%(YUgilaN6FBoNjw1yMd}SxH;BzxZT` zt6~^hwoDT`cUe;ohN-NJRYu4_LyDXo(jefUCX7SU#lB$FBXd=2H_z?8S$lI@d#;lvezh$JFzeC#uQWRyOJ#-j z^@zfml*a(hH%B5EY2!QJ3zfS0eVAXjFkJBT2*{9Jm9-~dsN>Fbo$kK?fFW_xI)U2r zqn;vUT_G7l^|@QhSCcGOsHp(de!!N|rK9zq&@fql;Z`%da6e(HwnG*)M zPOW}+a(J3(qY0xSH_0lbGT|J4m;TZ$uG|eQ!v}wx3d-_7tem3iG_Gh~`)Y^E1v%w1 zv+GYuB-KbwJdna2;Y^*cOF_9N6^|GnJ5r>xowdv(99<(wnM93!I-yZ0S?Y!SBhabn zO+(ET-Ec#cyJuoTYoxwVs+L}w7NBH47*a0$>m8rz2^R4EZGWfRr=MTLk18{z5v zAB2dpnoX`C)4VOlK$(sdJrZ3$`^VXyddppRz_iEbqUGJ?fe{wgzb0yG3}(fNpWG1! zTQ!S5`TG^vq2$y)<&XLj|0MK?fzb{n5)#Uh^RldQM-5x>tQe;Zy6R(v-(uo?@bb=H z=IW8X_T`zu!z&um25&UoSt*hMA*K2gt#!>e;8^{8<%+e)os+>DpvVVAq>ZD#MJ#KQ z`*#eG!dhW^amCH#M^Ih>U%O%RX=}Ixs5Xx`)RdO7F~>#6rVdb>{Fczs{P`U73#e%! z2TPeU8L`9&bq&HhQ<1qEMToMHO=Ei2VQ)mQDIwvl(RJ_g zF{&>@V3TPgCBo+fdKl$eO$;2aIw7dKG97z>2uVw1FPEvZNMH)Xi(ab&IZ3VjN{-Vw z5Q?)sQtV#VaG1I<$tqWO-;YmX%V7O=y;k{|XWD)~eebc(GzIppMLU|&?&>0$8~xJ06>Orb4FUTQ$4!-*6rW z|21vML;~seg<**WXnOCgkh0Y+o0HsN?_nS{wp403>Nt<#z{HlW;fd%3>dm(6+x^MD z)#G##PAZ#BxwOvKv?lk7R()ytdf0YRWsgYywSxZL1$YBdG_Zl!kRn6dm%P*~d!tqv zn#?CG*&hL+(aX)k%F)Mq?{FQgaxDLCNh&$=*BV#-aPuIi)?+FtJM<3lIL*_a41Ftb zkweUudpu6MdrQrc9~mprH^1XwQKWL_?kRQ48mnO3k3ZZ(rvab*+TwPt>|k`a9ed+E zTdodpaydPVEad^jP}WTQnb;O#8?mELSSiY?N^WMLWP`Y;*HgA!LcBiPr_)U(b0vL# z@=}_sr9Z-Yd-z&qlf${swSKT%Ls_ulGW%%=`pkjGucBp!RH27LKVybp+0m|t?Ky2l90jnC!&rp};7dBzfu|GYl zs$B;!QNDi2#&dvM1+1VWQ#iOK&7ex=%-mK_qb0wMry8OvhZ6jYr=dfiC_(@;eEUX7 zo?Hfxf!~O0bp={vIu_=SP!q7h=sq7%`hE3hcBUlj?FwZ60#!wU7C}D2yK>Q%t$X#3 z4FZJ3$cCGsNVw_{F?=B(06^09oh!dO&zOem1J6Zo_3`vB{Z@`EYYq!_NCI%dq^0{(52|Z`2TJ#Ol4_7?v>}qp+r0u-H8n)%uO5a0>qQ@TZ|IX~>^?TGF-nuwc;%IS4|oFQTEA zZX+e?vzUPS;_&=kZ4(=ReyFjd)K9M+A{MmeOz|lrDp;)HyWU$;a#>)$__}D4g zu0`b`P65pmsf!@$w4*h_E^&zuO#oME;!L?SZXS@}08pko6&$D+Ij^P9;6*9I@`Y`e z@(k+i5>SV0MyteGx_h-m1BQp0i%>dQxas`Vo3!2wQoYq*Sz~gKAyWW(@|ql8Ro_VF zVi{d`mL3me>?~wmoCoBC=`lv<#ADO#iEe{J{>lr}%CtJDb2WQELRNy-$HKL?ouD~= zB07`prrCjszGuy+^@+x&&@{iKu^N$ArptaHxm<*5y_>86khLv)7)aN!*>0B3-pgHN zt}>20PTa)=HRH2OcGvOJfY5#)z?=T%quA~ZyVKkL>)AOKpH)K*BCwXjknN_gXqXMX zdCI`Ddz=!+fD>cO-RprbyHXGKgv-@lyEu75_4ju~)0DmGn>4h9G6|=<9`rFPr0F$@ zIGQd4Y@Fo0r1_8sDW!OGgY=9ana_V%TZt;b)s^vQ=P}lq0!Is#%U}cfI8`J77YAIT zx#S?l=#^`41o0~QYZW$KSW35lK2{Ewms$z$UI5W-PxqN!>bH9$wt1&H>o(Dd$u%*t zbL0tzG%5ys%c3y>GBU@^b3OCjY7S~VcH?QdKaL-o35Yzo73AB^Hy3N-bVylX zgUK$&O+kOOyAuKtyyiDT9Jct_st)`RLrUGu5)2|caVM8THMz)m zAq%Pq?(HsN``-P$A*9j(=Y(#k#>>QaOcR?c0#V)M4Lr~D8k7>sypy_a;M?>1R$G&6 zc(U8)K#x(}B8u`HTO8a%qo>iwhMB6NlIx6O0hjw)OB&#{HB|uD{j`Qs5c!h7@wi*% z92?mSUyc|9eodw{4}FeQ6!$un*;X`i%6|9K&%=xh3|X!1Mtn2T0zCB_gi#s?5Vxx? zb?0tLyr3bSh~U={MNFOUa+*0FTu4Avh1BRe3@vfVtXO|EnsHYdjsaoyu4znp4;q~e zz7m?!De*ifqENG6t!wM2Y^GZev6QJZ?^gZ3YvSE{qjkVki97uQ_`m#fX`jQEEEH*d za=en!O4O)NgPzzwnKvPL6kQLD4Mk!NOI$uOyS7ny*+br6?L|f^|^n_=h&EqDcB|d!~C_N13zv4ZJxUw4` zr7{qIy@yqn$4uxkO^&Co&V|J+Gs}_?)Ors~rZ$ibJial4dxwX~aq)7J%-25JlujbU zgLee^HDHyl09h6n9DAw*inPOjva$V$GF+oLpGwcjdb=(*|4tYx43H}SNx*~2K`NE9?73q>3Oo{^fL&#tyu4;^AW1r40g%ZCE}&_IWq-zHCDj{RJ|a{vonFsM2$ZS zn|bfmeuEGT<^(^?=4kUwPx5DzAFsw4@MN$@tVNXppZrsO~ zE;9NCmvj6R)9_9ua7HK>G$A&=ZVsrkP+Td03r`INmNwMEm@&8&EC%ICJOk{SeaPo9 zXLxM0KW&P@!*sFSnV1tzz@P=SxuiH5KsP#YmmO z!aACV$b3e4Ue;{M6i`;CJqC6EhjcD%^YiG~y0V9DV0^G~rw~vJ!Cbkb|A${g9$xL? zo?WBI)s(&SjVd(QtLoXwiH!oKtd|@qXIHY8UBk#WFM9Zi>u;hx`j=Kl_YBcpTKe%>`0t5N>5)boAZ8FHd_Vu6_YTHddOJ~*-Y54tGZ& z!U#vSCc?TE`}j4K%l0Wn-`v@z-&|teABZj$tQ}HMe0lX~&hOtAzHx-)FvFa#S{ZU~ z-TQZ*634CkJ>ZZkY=RWdqt%j}`U1-C=Bi|;eRHCDf!z%siT@m&*_{V?z=rssMn$vx zj~H~V#s{9|5UmntMY|b7cP7%{x88sh_!OT8t;ST*MYbiCf82SU@XFr&Rm2x`iDyoO z7F%MXxr&OCqvL1INyohj3zoPqpOu4j*03tTzpTY^5l@y;iy^^Lu|^7Pk7O&JkL3E$ zaZ>rLJq1qs_eP4EhtZLj#z4u7qFH`z8D&^i|Exg`CO58Ic~wgdll0;U6;sI(UCZ}s z06Bf30jxuP|Khcmz$ZSX{glferQgb1p^YM+x7JGrl|bk{gZrb3&k*aK6o+P`&P3fk zuIUNbhgZa?%PSf$@|RMaw5Cg~QuxtIB3k+m$L!~&-yn68PxtG>(W~14njR**+jVcj z+$#qq43+jVyZ`R<@Iq#m>Pi&;t?I9tCn__1iwvtx!onXDGhm8PB9=i)XnNm7obK&c zH4;?JjrWPM(nn+JV^-8=?^zRmnmS!k6QG$ago!Cv7IqEUZJ5qm^mO|_oZjrMU~Q-h z5+fafJ!P)h5CO?twHhd5%}12dZnZia8l&V2b(gtG3_YBgUd2dP{V|umg4k(=i*v^% z+fZ9tkxn1LYxONhv$}Oz(4yzvhjr|-%@_cd8aMjfzrnuFFS>2iVcx-1vz4zia0m&s zaC*d=UGkjZ)Awtbg~oXOz|U4T*rb_o{ylTM_dPVb{;uPD*6+zfjsYji38~_2;dXNP zqRo*aUbL=aDGfZCDn2)Gr59%UEVgY%v05Lnul zx-eNPa5WZbYb%YA-|Z`?2PX_fMR2bEz3`HybyPn5XBTW%ul={CFie1onGbzQ=v;kJ z<`vp0pLN4pf`9&OCBn??^gYQrE!&s%i`D?^H)orRXsOG=>{m;-W`t~ zcUY(@5+q4GdJC}nWd+N<8#;yovP$J2T`cIH+^U0+9rtu+gxHQSw!q@&((=~iP;NT9 z&3Lm=!#bNIOyOUQmIX+^Mv~ow+3-3|^!I?WkU>b(s@@ZTaj1?zusACOLvmN-`knM| z){WsvACe&KKU&DLzaUqd!tqM6gR;94(@1t8Gt#(y5BHxrADA1~a~cNSpk7!(7sqs{y9}c+wM+ zAuuw0Bx%MnW$MelPh7hXy?wzNpJ7RP?*4ENccbsjg~8o@HM3b$$IJmwBVUNinmISl zmE`Hxue{LvZX3(ldPO>jWPSZ{Dq;ag#kpI(aI;lJ##4JHlM>DNmjD0Bh+?+bm3Ra> z@(^%GR@yD26SW1<((8K(Dhg%E+qb9el4PCDr=sl-$Q?A|UM{VRxt(h`f)NQ%q>Gb1 zBR6pFo0wu_c*g~rEAOwTC<0j#GZaR1Ttc%9){dzd&ijgw!(T*w8J zQD1)RNIVPb!~pTkcM?tJ7Uq7A=UL~I6}DD8b1Zn^$oL-9;Da)SWMnh)w5DNpc}|gh zg6gDLE3)=h%0zO!_R}#_)x!+n39GId%aiGMMo@W-GXS7A*~o5Cc%Sr3t74c;e*5O9SX>LYP3O60#$?r1$lyZw7p zw?uQ(pZ$P~D!RH=cNmOT`t{=}D<3{k>(Mkd45exIvZw4&L31FCoN8$_4?4EIQcKJ> z*S${uN9*cqHB}%*j{GVCE?3x&3$~xP%&l9VVN14)UsIJ)E9vqigaCrn0reSaxSNhL z=E(;K8E{XfPATJ9(qSx05L$$zjsSA=MkZ^xbK1Zc+2~)mp@#$WmD<{v>Ztd(m~?$ z5f*$Os}YBR6i_F~me1N**~Pt*EoT*lZWX0Ge`2l;u(ua6bG@q)L&{G0B$7t2ZC6ZX25 zGd4<2?er#r#L@frX$pNxVI!Lf4c<*N!tb|dLm-ywtZe_7IFkNIN3gZB`@21{^8)e-aP-+d>&sk0^d|Kj^6MC^EgwWaR9i|(<1m$zRo}R-pX7> z=~T31>$DG(L_q2mvBOYh<5w_O5sO#7AQtTCWD?wX=thDHv6na9W2s)&VA$d9m~Obu zywG;#E**@UW4tMZ0-WnGMy9;=Y2x^9;*sBBx~Y`PqFz!{PjwPb6K>l6)K1ZK3M)pTqSG9T!Z{O1 zVN73?s{woC{79+@)>BiA-VvI$0x+Fx$MTVD!kY?JFqMoXDjj5R0kQyU`R(iV7EXNu zTkBGOB}#~bSr0cJFMDckYc5SmzSu}xxn<0H@7^-PDLl?4sk}l6KYv{ncN~bN9O-RHPqZlDombE82=QF#^il4m?M};iz?rMUc)ACw`;Z#))LmW(glf`J zR!IF%Rs-l{yBMk-1LEWP+QCiQ(ktvwsL4%)*@8jf^_n*GKEUFL$lT!7F)Z_5@J%=$ zlD9B&Z7|u>+7iFvJSjZlE%$;v9R9!W%KpPohZfj}~G zrpt;FQ8Meotliyc0>P}2MNQzXB>s~J{AO3;x%iVid^_ZMvHB+M!5|<%=bw&E+7HSv z!1JhI-iFbj+(QV->#iA{9;FH7yd-g8S{j=5h9Fk1dLyCWeR-22)W~H*o$Z!>$L3+JFEa+to>QCzjh&JPE3A(kW>aBE zk?&-QO(XGU@8Ni%13+l}FGz9WwtLXWSf2H~fPCgyErD)_y|TX8RGR=HJncThQ7$K@Z&1GEdA6o0mm3Bj3Nlot3VXwP2t zk?a$fjb>S@Pob&Oaq{b^oI2_`$pGp~p{A^gTWa5e+Jn0w_NhEQ9T8~`q zf~0zxT`bTtQq^;Y#m4(N*vLyhOLjLkD^&8z{=4M$ ztW~5beuDt@A|}g_?MrqOB%8*!2Vt0*J#YxdK zv+fK9?jz-JgfkY(5yBva1nI%xQ;~y9cE}TZ_{*OnM9@2X%kwyHfy9Rhq|408whjEY z6x_Ze;7!;HO;_n7pS&o)On4YSm`Q&z?cjXXZmf)3y>61VLGEZ#oKwa-_YG8j5(`-*@`R2I; zU~ge5%$Bq^4h`H=tfnM90@N*Lzb3;gR}r9CLf1^*YGKaE2hmqnTWonLn5~*1Igv9( z_chg#hlrBuMh|tEWUpfnY(lmk0S-TqNaL}`soFwyPuH=DlF^2cnRue8%NGrQNH$ls zr@p@K_VU(Yh~{5V6VWe|HtZLw0p3hEh+l$NgbHkW!n>UC6&X}g&P+K`LASA^NanlT zNiW(vG`&Y0QHz>4Zj-wd?(uekZGIL?V)RJ%UmG?<^%PIB5Z&68%A_P8wz)s!^F6z7 z>;E|+5sKL&lsTfeTvF`2>pCN=l|###Tt8Tk3`)OEoJCEo@w2Zr;7ia1~X^Z{-fjS=If%IN7oB)~+ zAJ~>S5Jif(h!jWo_LX@0_jsjmn-PFJu=E!Kq{Tc8h7C8g6k4qf#Z1wkBNqH}`Ok|B zW}yOapYq#~;l=N(?e_Cyw`Es8@+KeYk znBvIYlz(bm079aQ0)(i;TJ(jwl_O9E!UMq=7;-)Rt~qV$N4FqfoiHg;Rk}x?x?}?3 z3w8j|$Pt(&8^yzcjGr{P@ak131!7+%jiTKvKrtwQ{V1E5G!;G>e4VYk+QHkVcy%K@ zJyZ?WT#A8{xgPmUUT<2Fq1?DBdmfTHv!RbzqDPPg7P~8))pEMPN&q%G@kX&DQXVB1 zmw}blv9p>L8*36m6C++(NpqVb{n4E{!fAs|Qm4D56L{S><**^e@dWiXxE90^#VxVg zax&nzIrrFsyF3_oV9u+F?vLp&5Fl73Re#dJcez6Km2)BErQnOGxSbHarA6K{Wq6L9 zWs^ZT>csRALCW0dy=y&}1I+`6*MEv6;bYe{*Aour7acZ%3Wr3OCWV(y4u1xxyz-vc zUi3LnS-{Yn+*bY9xdmg7gOcKgr{8omDEB5Y(K;`9!NchP}{Xb#qf9~G?Lw&7}D^SpRwe3XJ3{DO_7E z!UMd}h}N>5P;!Q*FEC1eRiXf2-CO+0h@{;+AD7C1{V&Pvjx7#b9& zkY3J1<8M+w2L+ATekOlMMPn2%+%q9G<2*jo^d^ZEJ-Ni#Gs|{UE;71pHA!NzXko0t zr=p*RKGNK%jVerl;Tb3sGC3Ft(>$BI9;DpH|G*y?={%L=Ml1D!U+o^!pVRv! z45T4coXG&*#MTx{QUubUaVp95W#-bRN>jY%^v0AeseoUeP9q>(XE*DhbHq?q zWU?9on8zsALEM`THPL5K?NL3%!bo9+UT{^~FI@j-Bh6^+{-U9Sl$qt%f+<*-flBe1 z@#NI?9G*EcYKRX`yPIvedGF%d!846YIO}J`Rh@My&Sk3LY=OznA3(%nPWk97XsPuD z+{{;x#@YfK0XE|oWu3)94)Zon*HF*t3e@Y~&nfMkruM)o3*(%CCo;{S)mJb&;xsRn z5km9rL{Aif8d+PVcS$_cFHr5!9&#XrOoW18jRGeA515kWqWO|ag#Brxa^i0n2My2ZIi=S zOs)VSF$wMEQxUBQgH(>w-(G8DtDjq$Rol4eNSYzuo8;01S+w8h9iRA;Y-zmi@a8dz zribESE$c&JQTwJZjxD@*aPM*NtF;hipBB znP4ITczmrRdW+g(Nqv~bkWa>z6V(G3KFtZW0VOTf^}7jh{Ig^19)OSiTj6X6&!cQM zoNkq#pNS*n;KDXoAMdamQl*829}-LeWXu`V%NhloMj1-FVF`h?fg^y?gY>wlix!b| z<{OqUG#KflM8sVUU0ON%XI8KG*{_u%ta*|738=zFyDsN}TK>B~{RB;kAX2iV<@{i? zZqO3!ob9W2=3`}r!)Scdm>A4AkX%~gTs8=`aFkpIL!0$0izGAWX(8IS!fwbwjnHj2 zZDBQCa2}^hOgBl|JD_KL)a`~l7=l(Hw6dTpX@&8+7lcZ3&)?&DS{3r`bsy#$f&XyXUdC?dok$-JfE-a`3pC^t}x z!dcR-MU|^HaoZ&ngRsK9VIFjQq-cTp{FFY`IUPku=NOAn%9$%)9ARyWY8)StrsgpO zbMk=F1AR0xs9c@xoTuH$Ue=+zw4D)bPSlB!Vi~9fk<@nb-P_s59;tPOGcRiY%zPGF zo4D29boj{Ke!5>8`d*Zs_{nw#p~N+OQ5TPD1cekrEOf_K>%xcd#;O084Gv2vSib|W z*0QAD+ketN@gpDWuk8=w2r-MYbY6hs$bLu?atxW6_cdD!lw2d0q4k{aD2ipHeZVFc zeqcb0gb`}toF2uSCaAo!TG;6v_|N`a7MxI+7Sk6;8WA@=i%YKAl@uCeTpapUe(c|b z1KxzS5sT4&Qdg=V{5F&na?2Cdt|Tmv1ew$n)0;DF6>SWhP2v=5C9!WRiEM3VwyX#& zM`ny}QvYm?Mb3T6hL**sRIhx^4_p_cdFJjX(IrEhF+(3hq>PY%()hIeQ04(CP6GZo zfv^T$R7*Vcw8jcB1M_4q@C@avx%vg2Rh=-~N%gwG*^YToykHpLrS%69w>E?wl8vMA z3q}}*YubDG*6ZG4%N2+xqII-m(SroL$P1BY-awUPP(x^!CyYFhtV~6M^odjKtfhCI zjY4nOxi8t-rC4pa18Y}FCtr%^8jDVLk^L3ko3}~4Rt$VH^u_y;y>FamRdy%Ro=IQj z9{}i%u~`twdGy9=E*q_|z-+=)8yCkl)XYSCA0oTU3I%HT1;5olnANK8{-UlY(U?C` zFT{Wq`Ik9;%!K5ZnTcYAHe{>al?HIAO(2`HkFkPB1%yg5XyxeP(VX=*La7%;wv-`U zrK#W-zJVY%$o{lnP>7&c`IqzMu?0u)Og`h2?e^Wpz$8I{>RTdpTQ~I$ z*hMZrv7~OScPBN}3_r9ACi>5gX$mJfTgIwStA#Z5o#rh}(PqxeK{cLDBLZPvWMo7C zvz~m#h8{<gDV26nDLbFlSY{t;O;U}+xmsNW@EEhaCur#_J7MSH)w!v(vHqbLQqS*~@KlvMXC;)bN)1nI;Mpw5LLOmG{{wHezILrjzU`=^fv1S{t`)beg(*ppH=~ zFyX@?XYds$f2Rv6@&c;RdCM%+#<0rv4fBbX3?+13t;aox9~lz8RXt)MK;pSfa&Y=X zZZEdCHUoQC&@0zaVXl}2>cFD69Kc1V>X&ZX>HCq=?pk)Xn1uhkJ%=3%%{7S*wR{(BPynBvr!uV%L^$nc_ThV#_z1~#Y{MC%2hnsBNqx$lm__^av=$2}PN%#9E4aNoa{va#R8KP$ z=+!c4@Bj$rKWc&$#(57Haw-m3xP}NDDIHI}nM3v4LgBY{Ax+=f^B|Xy+a0NGKtRFm zrHF0=K2iiAVk)f4S3>of{0E&~3@#R6&cJsAN^TW@2vhmHR{SF4*f7XJXi6zV-&&De zs2(Gdp6Jygc4=Oq(R;c|=uxBk0$O2?Jh7pS+N@RQ$>O_A_!JNxNHHrOdkN86!WaSjrxzmev!d z35Fi?coFURkKprT^b2VoSR-|0^ufO~1cuKjY*kK%u{eOe`}M6h^k$QLUn_L>_p}5g zEDI((1L{#vU-xUNZmMz$7iXa%^87yXoSKqHiHai5$RVuDNN=P_tbv&vodyB*A(o9b zoXedUKLxZwj`fQq);-RmWns7EVc|(z&I_3CYczpS=w~>O$3zqz5Qy!??F26v-VJ7D zVPks>8Ij+!z7+1xX0!&Q_~dC@8t z!|D$LQWJ>7VK3J)!*mdJigP!}^XfdylR2*|oKX&DA95@m(9xc9PHoBl z6jRx^4MDz(IPhTy1!m@d#xs&Xl)WC@xb# zzeq5AB$~nSa+*-mT3Yg0$*hEdz9m%KZdsYyNUZ7<%SM!zC<<$0S4*(RcZbYWDOhP( z8l^v9AB;w^BVv0DTvqc0tE#GLtiGB&MbXv)6N8o-VS;$8jgeS5P`CHjwJ0JrVsc8P zlH7VG1yU8EVAS}tZj~Trk?ni8-%h`CRi9kxf@RaA(Rx2FI!?p2w0=*W z^m{=Sn)pXBR#yArL^eUTg>y2Rj0HldQZ|B3dMC)Tp7+6(2$Fb#Z8FyRgnWh{a2&sXHioA16wcLFf7z1&P@FqrT9Q1c3|tGC$-$o7 zTw4$!LPoras^qjv+qRajRFXSEtXqWVR+42}rRPEq`oCL%gJdW=xUJMRBjg#{JnVq> zS6%^0^>`nL`1n~~>*JZBpMz;sa$}8g&CDl9Ps$Yk&NdN(M~ymil8nlVcQc2zMEoXl z4kJjL7+dc~#evLEJ^j9oFCJ3yW8(ZSJwk3o$KqP5Z0#~Tblz{aXvz#e5%t1M#XS_R zc^{*xq2h~FC7J^V>fMnOPRll%$s$xV;cTDn0|;Jj&{Ll-T?qdu{J+}hl922&G^|WB zhnPoi$|z_R_K+iF_QD+oCf0#(-B0*;f?RxrC6moE>o^lCmq)jIR6oYyyA=_+oJ$&Y znT?=w6Mb*Gn?~+zY(D-Q%2Ee@u!KUp>>bR*Wo;+FMt}SfCOVJiVC6DqjePG}$x)G_ z1r@p>h-n}G3dHoiTs(;CbmBcjp2Hqq?zXj~As2~|S=~eh(i$W0aD(iO z#6U}fl=3jU!a}e#s@12O-G_0hCTDt3HTpR~EwoV|onbj>P!=F=)d3Miuh^W!X{cm_ zEEJPq*~-YF_jKm923Y7%=t)Q#L0lelF_A>wzyj`GjSIm-hpN!&0zX5KfrxEWTLGf* z;1IEOxOB*9Z9O1bj=;HiQj)=_$Ug*uC*uXnfP!}YjF$#L z(b1=8iX}Z_(Q%i-yLn=SiJE_s5AfJ}#3; zw{Y$gWtvvi2Z?uj&Pt4qw%($k`6wzn};X? z+7~z^Od%8w$P1;+MhQKq^7D})2#<+!>V|r1yY{le;@Vp@0D009=3uIeN*;zSBiYUL zEUwk|(B)uxH<&(i8po>(HY!8OMX`X=MDJ4+)fd69sgxH(emveW4j=EkbO<$(Dl8hU zgsk06%v7&pLSZNl$XM*Q0SlYr<(D&H}7h5M{ml|ZXLO}j8 zOD5z!x(B}pW@&-+=voz#U}u-J6k`$Y-g)l&3&N)##J_PKE;QFXT(3!`Qt%*&2A+#O zS)plfY7rx7T-#7sB&|8mBvw!m8`^3Cfv*`vVtIs4sJz&WWG1iwL6w_2(?<}k$!mV< z%v|ck=swE8a>_28;w%yW%tRT;CFCN$bF%G`L(Oyj;ja_br6U7T6-%sF|9{tUYh$e` zl;3og(DAmSf}-vCuo9Kp$JS3iMp_L8WeU}aYV^z_*NwyDOd1TkyG^D|HY-HPUAp;L zq02J2U#RhzC7lXW&eWefSp$%E&Zw(PfvYO(KTtXwlU(*iy~W?q)5hizUXkctcM=*# z;{2qnnaUi%01FWS06nmh;G3Z9jB&2%2ha3!Si#65xf(^Peee0&*1yQO zEU+a^XD#I{eI2|YN5#7gGl}rRqDx)AUF>GamD_6&?fINhxnt+(Tm z(Sosupn-zn=363-$f4peVjd%PY7_(Nk{NtwZYV= zJcL%`+_fkG09yb61N2XbUN|R1-uNL4zNeNv@ADi%u9owIOo34?itnHyHE~!d(u6V; zfQ_{4iO$19CsUr(g0o|a(YU>~DkU^vdeZ~Ad;1w~nLMpot0`1y&( z+uTvlL@`Z|ER6T&4M`A>cx_rr{+wUIglN*4ghCCnP4KsnXc$8&jVs}^^XU{!&%JC$ zV1+zm(aHKvI#@Se2&fRVFIw=_Y_~DlQKHQiM%`LUy8CkTKFJWiC}+q{54)VeX;ne= z7%lx|m^ToKiFfc(sg8I{CfY}Qsr5+|A2$2;OiQ?grjupQq{wg*UWB1Q>~AukwW>fBdMTJMA+P?yN)S8=vFaTb9QI~3|&b(3o^`W zGCBNrAQSA{YeyfFoZAOqbKgVypP)EHd;r^JidFzoU(rTRVErYG48ErUYqavyP9E0; z-adpg6i{)8b17Y+(D2l3&r8F3ZJ>z{KWG>iwKn z6|a-d2w_j8j65CV7`wMqILc;3;&ZFkT4dE=<`-acX=8?gnR^m!d>1bh7QEQ;3UXdB zf?3_F4NTM*SEitzN2)b&|Rtu*5DLrPm>u)Ce>_LccT)Ot(jL`Fk#}T$HmQEr$ zbZ@obS@8ZD-4C7<4C*Lp=%W8C4-=?nFijy9%m%ec{)7gKyR5~fw!^Kl2pjJv z)IDmAq`=(#?459r-qVQkuGP!e6`cHs4OcUBT9X8-LD?{1Icf%**>BR{-LgYM`eMgp z7qnNd5SM7qpyo$%92FZ3nbB`=Ra)8=oRgyeY+=yCJusp6!Egz6n2e$r*5=II>BV$3 z6~NF?7?Y5jc8#3vXj-D^(Jpy81SvH~wGWALBMmC`Dusj5;129#UBU>7BxO+|6UI>j za-&}E3cx?o1sdzY-rWx+7L!q-1gl?qRHN5j?LB~>YnhCC&qG%5kS6ngiFIqu59VBn zmcd3yhcB#SLHPVrtJ^NdO4&(RCqRE%BqfxtgyCr*$Vi$XAD;)z1UFxG{MKV;Un_@_ zye!E{eMs_|S+;TlSgz>>51cMt^}#E@zv-5<2eyzze}$7YyQvDMN>}vO=Tz~fzsHy< zWby23x$6w(*6m%8?9V?T9s$ZMu)5U&N+YxEbkfkII<=sqC zzSCn%eLyntMf3@PYyF!(5gNq}3#(_DqmY$D!PlQr<(S?@?CKS#_-l+PTOEf0BD7}XdZI)q=Z+;2xZBI@_S5i%=KrCg9D~HPX^;F9uGw)1E zOE%#U*FpR7GFM_&_e^t2dvYM3|8hI-_Y=bmAs-oA-8NG?VMczzI8idSxntLw;5x7z z|6pPLi8R#?mGHnHU*cYS262aHs9P$lr3?_3+{lO$kaXLw_}3o|n+F{xBTs2G7FX{6 zhCs7piGntIKcCFAw$4X@^lq4~<-m8>OTfIfji2Sj8}TQjKhkv_WBhiaF*QTEfiK(i zZakxbFb$g7Qt7~}?e6F`%Hcm^hbl662u!VK5+YrAs|5-w>z;H5)eQ6u`La|!f_G!# zqjoy$h@HK#MH25t8b|+eAWC972X`LtHDS;o^5jS7AA9oV!A&0gA78Zay&Qc zt%eH(?RDbdL*NmI=_MwVEDG;KA*(0nqUTJ#h>kIFmN*K?RaIQ8=Bg9s#8I|4*z$$v zHkaqi-yHS@?bPk0YxR5{%tq>a*CC&4p>i^`$6>w1JDY6jCRzIrBn9ygof_lhv?u?^ zWQ0E4zGoKw^=kHzA_F)f7g)zdrqKjHIyGX+cTt=X7VZHF)Iom{E^d?z2{$>gQ=RjG zdj`?GTjKwl@Xq^%n(rvOE<9+sq|YWYbj4LvZ52Xd)DB z9EUtHrZ43rFiPQe&2Dcu zR(g=@Fu?@4e*qJaUZn$m3xTaOd9$$X)JJnUisPOZVKiG?1XDUTOEap-(BD6>F~n!1 zo;x)D#?N((hH9B%Le|ZzKe%qN`{tN){yJkq*`nRhV>3HU z3mphzhgU?T7-Tv#@mV(mfT+s&s; z%TZ8DXhUR^q7-CyGBQ)jLymc~Ggg(PSP;1*UyL_1F-9Y8V;V1dPkPN5mRlRAS>@gO zt@5#E$FU@Pwc@sTc~xY42WtN030^-->aRr!tzp_EaiX!hK&T)uwm=LA-PQG(C;NF1 zkU;49k<%nm`-Ogtsi>i9@7+H^>+bab7l-(1t242jmKG5>Ti*6`2Nq2-5G(V34cVTd zfd)**t?m<_GQQ{Rj9-)TsCJ#;Q@7xQ$t1i1cK(pI($stR3l;-JRe{vEdz!;irYhO= zSLtWTDgm$$!VD@R{-Q(;mMEiqcF1LYj-VnU9z{1QLHkps*=s|or!zeOoAGKh(sv}b zdyT8za_Y2a_r~Mh1Cj05MS3(6Xzx~z=I1)Lg6$@3dv&&+^Mbo zdZskiu#GXwy+?Q^&e zDhIP(@p-9lu?s{jHn8J=a~BAECNAh9XPAAgcsK9jbG;nHxdCH|eew;QK#pS8cM%vD zh?36=o9~z+G~bNs?+RloRzXTSfw$Z9x>>4~$~YS4BSndQjHw(2O?VmDiAkFpHO2%B zNB04ePl=D&Z`Q?s)J0gH%T1<2pZL+e_uhH1J$4wX!HmptVj%1wwj?fK#Jb414?)## zXSV^b^@oMCRLt6XYuN)Y2slIl`^t@LOZ9MNjT7L%Pg8tEfGnUSQxp%oBY>`TnE}8c z@%TCV55VCUNS3ZymytDOzj>l%vSrelnTqKA^>juFjnfV_O)tPP7(pvZ>JY_*D5DaX z(|f63TY&^Ey-oe)<_YS={vjH9LpH{Sf`qaZvg-;IGV<0E@R_|Na~1QREh{Q8>m4FM zYE8SEK5r7#+?qmb@mWk~Pr@&SCs*!*ZJpQLHDhrm^LGN9@7!a)uaVfwnY!h&0uUhr zb)H$f`(=Tp{~jyLf$2z|rkCmf%=5c_*ty#IvMtcO)VJ7%4-iB2+FSm=mcNwPAf)Wp z;Ch1Dow)VeIa|aT7KrqW_SjxWB)v;O!@#E-`pe`Ul@ZPr-W0}Etb%Ry8xfef&*N1t zeQ20Sf+3R%lUgClPT3u~NJVO~Pr%tob9e@5R`vUIW8wzpm=SCjNhm(}3Mv%MHy^-; zX*&QIaAnGPyjI6gtk!G~9(xY0-6Jp{YvJSbONU9vg+P&^R)W%ChQGj^lS@vp)J!3k6Mn&psy%AQcm#&W z17aI+uo3KV6yIwgqK-+TEj--0l|Kmlg#LxQ?@rw-Vp9$F6Q5D88cc>zddzB~2R8?D z@gLQf0452^LQwHCBvpa~d!NC+zYT(siLX#8i(jatFgI=#=S?gglT3P7nVM5V&?aF~ z6M|YCON_0uEP8OSndJ?P3yF)LslHKBdF?KjE)Uld1H^&5Wfc@`P%N8yEoW^6%&n6) zE4IVo9SIdi(*LNC80GvUo!C{rxkK@GMl~T!E-swVkoozfcpo+y{--CggGui_b#Y78 z5+!#T-|frGBB-Vb9awzxOkC_5m|2OS47~ssQz)CCCM&_aiu;iORa}tyEdE+JhOX&J z6PA4EHa3d3FVwC@(vY_*>?5L8jci0K#e9rhF`_meb&MG^f;+GoIS#^Iw~OK(K=A{J zh1pzImByZjw=nb7SeL-E6W7ljNyid@mV*d3pd)ai&t;Jo&S}kUP)Cyk1GD zC8b#5aD#4aq2}y>9QOhTm#OgV(P)n8jy&w9ogeqSOh83q`(VgL-d8n4F;E~ZPrbVT zkS1hA)UN?_PhR{Rk5e5*Y*Shzm01e>0mq`p@rwy`j#Ftj@Ftfr;8n&CIUUiV`6jx1 zw*r$3BW%)|S!%M>?Z!@1h7PcKr%}v{xOL32qff49Te^QQ1_(yQx54`tkyq37Eb5$Q z?-PJ|&KZKE@tR+{wP|P8{QY9**`MR>!I`^NpAjh>8LF|y7pXTF>OjMJZ~|q2@Fz}?`Y;8(xQi?5uFZlSEJYh zDgh<>>rE?$@cJn4Z_7Gx1GyxUo@z4)7ttd+Q4OchX$J^!RGh(PZTDq)8kfA>t^`!7 zc>nCvZ689rRrD7!IMtA*D8xvd7dtuj_QPik6x-LB8w#H&1_oZ}hdN^Ib#io}hQO1_ z!hKC(9{KG7dn;1ID>bOFgT(3=tw?e!C6$s;Q?6(EzU7XY6&oMt41;EIAq`oRYf2t=>2Iy$9fR{*0}2Y!#^=5YcB zpq|tdS@LaWkBtePHML;$`HU^mt=er4mNGC{T+bcE|Jp=0#gS#zkmsQy=#aC+E~s^@ z{g`Bgq^Vd@F+v1}ob7@4* zCwd@q#NF=kaDH*>GLe9(6A%(YRhsr1G7gQLmpdsO`jJ*K)e+Q!MwgyXqBNdacVyx*VLz8UFTQf#RIpwvm&h5QOL4RCg zn+t@_m7{v+Wn(e+L4KqM??f;%O!=DAq-evV-+r>iN@|Cj+Y@pnT1Ak<8QeSyPkIZH zmrsNR1un6eT0Z_1fzQa#EpO>88W=1$d&v1O&jN{zCq>qxjpAi3>&i99Keg$&kNXk< zj7w%5V(JvXz%=GS8PymuQf_iKk3q=0r$vEQ)J%fm*xLLfDC+w)Em51p8x*jJ8fRF# z>2b>wD#dSV*C9uw>MOgyrGD48Cid1a`}QYyP`O*U)B;8Yma;AjE?G{qk}SIu~-IhC~C;2iSM9e-LCTn+?@`}RMO?QR-T zAG61_JB>?KeuC69nSI=WAlu*b*GD7DeZn1s&?jr{IXQoY^;zjMt(V4=sIe!`x?HW~ zd?VuOr!f+z&RZFu-FTZ=!F;}TEmx=1Jkd81BSvGsj zC~%;3+pTA`3NHya_rtWmNw0_$Fio?D6S^gfWY0piKcm_Yt9x@#-8DvQhIK#D8*-;q ziTXsPx87OfgSXj!V8!$owL(IoaOX42l#mSiRw@1HXr%)SJNNE&hBFBL@)IBxZiY~i zQs!7O@TR!t3-?a)3l1XZsdD>K>r%!cmR4QUx+p}Ydy=xZ5RlgDpif8a76!#L(u+({ zS#Hst;F++-SAj+k8+CuBoR)p@Aq0rj9gV^HJq^vwW$#mOx114NjVwu(Vy{QL4#pGsF3a(^fLfdoi7XflC#}cgN2xCY$)m74 zGH(JkdC_0v93W*rC|M0KhJ-IbTrO^{CSi-+dxyxrlj68`j57JtF}pr9Y%%J;)`WN~ z#>II2I6rxSN|u2TbS#vUrAIEl_jtD~FVD&#!m^_~TcuE}c-gZmZEQ|e+r#v6lqpO| zC6n6hIPr zmos6KdlwbMxtQU`rL1sJ2z|m?2>ivN$*-#;wQq&qDQtGwEfuIV4QIW6B~@HkD!TqM zH0&h3zkKG;#I(b^@&gl$>uX$0-7V24mbVtPJ?&KO2ISeiY8w0S$}Mx~^?(6SvCK3* zkdFPK8XiN54VVb4S(Q>_kgc@XFjw6?-lNoN66gL*SiTa_Q3-Dw(^*=x2R!hj(jV=GQq-foaAJ3LyL2gxSr`F^Y7S zA(3HP*?>+m`9+8dAmR$MHDOp_F&j0GON_~$I$d2}umCAY;C9T<3?fQftcMsUZho#HA*bYc3mCq0yyd@DI#t##x>6 zUY`hirPB4Mh#*L7R!b9DVtHoJq!@VaqIu!1=^aIeogC$aF!bo0SA|bWiC-;)4qi7# zJD(Ns2($=Wg~Tp4x3{jI@gHP)?#ptNGubX=R)1jt>v7`}oD((#a_S3AhTdJ&&tU;? zsPV(j^xTg&bER2Poiz2^_O0CX5g_IC_Q-sxPT>nPVPHAVy&-~9(v%O)GkzN-S!`z# zx$q8`tNY;Ueg=8?R@lkUB>jDO>JOyXDxd4agYZW=0EF7?lKt^jzTkDxS_bPBMx0RC zYV&ydsCiV;S3XS<2rfT96X&3vqzd)TA7T)==SFXU>`9!cgjmnL$q&ulhXeXCq~Td3 z#TvEs;x32zzQsOqHG$9V0AO*L=+T%ANegsRJe-kvXxy_c90)(p=U-t#gL5AMm13RO zm;%?Sml1VS#^*%|TKRrjYhZu}@P)i6vz>~3UAq}Jp#Jsv7u*O&oRz!8k(Beuf)Y4+ z2$t1k>?>+6(P?Ey^+^MQF2~jC@QxwCG~7-0+72R^Q>QhHRP@J zA}`|bT1DS)`ba?IQs!CfT$se(BBmCt_dgBeq6_9Br(i8u->}&V@rp5sp!`@p`-y_- zuIyw9-91fR#-G6S^QG+a_vQ`gNikhDdOBUTzDq$xGyhJ*UhXOykskXN=MrP_o5@hJ zS}iDs%QJU4e+TYDA-j!fc}pn1;<(vcWw+4w6@;5t46keRRhkz+Xqm)+avaq(>S2kcn!89I6y{3moq+rZW04wI1jJZR1U`omRYGpNvd5=O2mw8 zbE@K3oEKIt!AtD=ah38^l-o|Ez4`7v2`|X@`PwTDS?6D)7t{f=xEC#krrN;IWY-7& z4oJHxBb=}3&?XF=Tus&xpVjxZXOcKMWt&`OW{|_4Y%|2e^gs8#@JN}*N+~U%dfI)2 z=y!K?c?h(Q41GhTbScytGIjEquX0Z5Jor(a(V1eKi>gQ<$QrU2pRIbb#!H*}Eg#za zEf&fb!Ib}lA@zH$Mee){0MK~J<4k1*PK)Sh>$Y^bn2Uf9O;1$TLm+s~i(34077dl# zw4LQF5ikZnVnnJ_O!6my2AShrZ-eQNc+YGW1%|>4n~2O$gApu@GC!xtiJmSj9LY;D zzb6~M0c>ziWesR?FVp+5d-689$KA3syvu31TXo%FN+Feh*qE-Y9>v)!JUszlkU-&Z zH6IE_b#+pMn?&*TQ)i+LnXAx~MTy4gcE%~L-DhX$%ZUD(oXZTYJ13R-3PSGQkr0dKI@`dq$ZGB+%(iG;CyWRCVOGa``E>AW#(m*#67-}^fY~(MZmY~}?_Uv|g z{OH}vj}{EDG!K>Icl-UcJQYYtaier)fuK598~!v=Zn=%n9_Ck5=W%Lui%QJq=b%$| zo?Q2uBDKLJXa`H{PNOdku*148A`$~CwIwlA*ZFlg(PNG0gIElTFO%>&Jk2PP5JOl0 zlthRK1o%hA8B&19x0QQVS*q{PVh~!0iK>i8%|$VDel$yCmnSIdrPNAfqPAY{vMoD! z$$1f;v-HsHDy4zDzJmJ6>B@VeBr+PoV`6Ew?g4joAlKz^F6e#W<1E_aDjk1+_EAc` z{qBhrwm2^tS==Nz0o-eYCDo8=s{7S27+rmh52p$8o&lzx{*}+cves9dJLJlFpgRpw z=QlEpU_(1aNDW6caF`?m)@G`cdG`yX4jC!v1DpYkwsLH4>a$s9JUj>1gyU&s$H9he zx_&NPq;l{Ym}hM=NSRf-5L%n(PuXOTuk2Ku`<=)z&f8+^qrxd{kBnDz`*EI0;J&uU zNIN)$>wz`>>7F!}+hk(i`dkHuCBf5#WG+!(JbeO2{#Ue*yYHai{$IHJxAkr{Flysw zO|J!F#?(sy{CF|Hb?qc%mfB^s8^k(%V{Oc427f1V-cAv51P$_OfjHC!0N0r>?lH6! ztia{J9bdsw0~dMLEO^#D4+9;ez-SW@($58r@ODxh)Kk%fl)vi>%R~R2t~N0W6kRTZ zfW&mKG4B~w#5kMn?R8vIcb_q!fdnji!I6tYU1DuGdsoLwoT~Y;O0Iqlma@Fq;BB>- zy{(Z9(gFXWm*3Wndzw<7&%?5+&-cGt?8bPv(dqf69gbd&|M?5AwZ@`d8qq0%NJFda zkLmfI85KS{6ri_wcTYYPU`6~AoolcHlCu_|@d7;3_LB>IFm4**w9zr8ZR1^gC}ype z23}N+T24lLfO5S%oo7HQH)!cl+%zkHWmT6T`du})H%2f>Mp?q1Ueb2E%mrgNh(1$`_p+7nIg()GIpYqI5v0R5P-Jz0TYtj z^KboK9?pY}QZc{Ewlb-#HZ#(-9-1uW2B@!5kA@_8>e+Q&Moeh!P&UK?f<>_B^k2oc z0f5;S62yiDBwDm~IO@)+Bb&$L&JZe@WhX1`TgU~_z;G>eVT0tA_zCi_1=xbVOP<*R zhX&U5B-fn86xPS|(uz@SKjqwIzixd#QWBUzgXEeinB~ z2u7Niu@I``mjNcA7oRd8=Nq#3|`Ia$3+T-JrV_-_JL|skM0m)%jEf zifMAYj~6?uEqW2cJ21=Xb_bF)Umf2}Us}-HiiiMxWOHmmKzI3I3W;n&a4C^pgWCI% zmXVBNq4snQ|?)y<*K-NQ)PM*&dT)mKi$!g4ERN4Kxhoe6X{npAb9#xt7SNKBG?bosp zR0xS)`TPy(i10)8)x@CFn-|dL0dy*7Sv?vM>H*;=TPGGY5(xY)ymCZj_7?CibQV~_h=4mW;=|*qZlLl+0NhM z1XSW7?YXET9?utTmTusKOFX7%x%PAX5lanChuK1gion-z$vx2DDeXp%N8}aSs|73D zh?n3%@gF44UgEH@?Z_FIdhZk6n-G+&J$zs-;nxh^oIhK!V+bz=XS0ejdjZvub@icU zXJm@Q4&tC;_gO{;dQ~7+AN%CDR_09yl!GVdw`!0w!)c~VGuM>* zD?lPL>w1=Mfn8(`G+YIk8c#6&q^9*vX?^ymlOqwexEKVp;o*GGp6KgohKPx$6Z1I-0I^|rUcm`vjoX|}Lwju{_fo)4HtB!V*C*o$c%s&&pIC)((X{c= z7j=n?EHC$+7^(KZthkrMllg(advS5=*dtlRks%fBC+A(zVtX1nB=l9EqlujQJ3B_! zU1z5Iz&YqWMex(3_k@a`?s28XaCvC5-*JfOG`AU1m8C>m(A6`AA49Ty=^^A?%pRjT zGrz?PIHHVT#of~*DX#%5y?%9v-Yh@~vV$tj9h5f78`Rsyfy-zM#c%p!-uJQ%Lk?U) zr~r5DQ{RYsnzqHL8z5G$sX$eE6l|OzA_M8ZWFQ)A;$xfOJ^<=w^-YcYgf9FKu}Kiu zEhiPq)YOa3Ra*Z!NTtr-(kfCw8%iEPN7MH<(n6-gTrwypKtzfT`(0waMh=hY}FWd!c8_cX`a^|`#t0g#KWgXEc>GX!~uyjRLnsUa%Zpe8}=k!&WmT5tf%SGqtG(4kisSF}9 zhxciPWT2XWEfL@KVkKUFxj(g-!p4GR^FrpzBy*Ym;$%dM?1f^z-opS8iqkWeC@^Cf zVbhDE{ou`XlEmNaOYQR8@~FISHgMMt|IMyhCABdEsrNQx@ZpOh4NTfX=|33X3Ii&m z1u~jm+t5Cq{~_iT3hfp;1J9meh5@;&Kk~9V-NXt}=5=--=9_;Pg;C+46@YEqEUTBE zv@?Y*2JRZp*F9_WDX!*U>HX_nIA2RzJ?8xfQ1EHG4?71ZN)p#2b^tPx{}xdINK#5* z^cGR2_8TJ6acNyM!qXR62F@Wren+~wvGW~!-P5Sk7`|)4TcW53>TA(uL;V@ zkQl(QF%uU=!11aa?Ld`OEf!qXO=6C|D`}c_#mH!kXvR-H3wg`D(@mix=MbS^Bi}rK ztsxK8LcaigILm6lC%=hPG=s@~FSs$nXOSnqP5~(4O)mj#VSt5WWGNH0qB9spiooLp zZp_pNzJE)hn)8TL@5YQpA03Kr#e~Z+f}r!XwsKj%mI$Q7msJI95+N+tl2Wc7^c))GQZa~VVb|=zKHqPEmI;0 zg=R@6SJ;wP-QS)J=Gt0OJOLjkPsy2EfN>n~KmU<~@?(|7io2Dvw&V9FTI{SaOLEHx zHNa?hwkX9t*tC1BADk`7w9l%pp(yp5q#`CoLZG~1;rFI4IzUn+D;;FKZ2`$qa0?pv zB0(U)7A)e0y6-HPcM~QrO_08?4W4S~XEkxVpFEb%Zb^u#K_v5TD|AGU+B%B5_NJ;O zg|WYr92cdxj$@(dq9(tr_myn{+5H>cn&uB>AZ*H)MAUFDj*^Mtg1$&$5KR&NWO}5Q zUkTtc+IBd3Oz@AVc-O+-5bkC?K)@d{zoU45w?L>+E>sM0r3y2yxX1?heu{Exrs+B#TN8Btj&2-2Yu~^IVJ5(7+elL zq*_$w8Io-{q)w|+`HWzEQ zV}xt1;hOf&{Q2v+bRjk6`t{0&xv+4~jbUlP0_0Y7z(|&ciUHhpBfRAuFK}Elw`RL$ zBg{cAH$j!**PC4s6@R!l4??HX5#8Y~lM>LLCVS+144;v#{)zml=bl4*NN-QtXH5S?3;2B;} z{Gmt8a*;f8P40HK=8w3e?GVHW$qo*Lw`dy^MF}U<<2pc_CxZWh@Rt`3BR*AJKvIPoRqGjo0cwQ zo1`jb+S(m?KeJO)18J`l<3%xc?`jVivfz zZ;2KR8yT=pS$Uh8=pw#$~IfWzZs&j47)go*m7JDK`C_8GmXMX8_)>k2IWQR zCl_|WHVyA)jzmQ>bm<~`BD*+xePoL~dE5vf{6a&j{KF+~T86FklsiKYl^DhFWqPEY3L z=;CA#Zvl+egV=_k)$GPCjKl;Y*t0DU$$n8YRKAu3RP@e+5M2kozh|IzQZ(GNh3%Uo zsLrJ?T9ZE>FijOXA(R#8hg*FiuHC*@TFlICPVsBMPfNPfjn!bLQ3pc4OY(zPTSr*i zRz#)^xps=f=WdxPc?&Y4++I2>O&CO=Uia+hy&89d#M!uWS}_6j>0wUSj~wzyks5p~N2h!5a*Y zoY!k6*QoD(B#0DvLk#ZI;_Jmh7aRo(s2SEhDW;sow#DYs1pCjyzI*JiYohXUyp8yH zP=4$znWlC&meJpvkWD?N=%yx~y_t$RfL5k-o2>O@F_(MHVH~&}MGW71;!HLy$vr*_ z2a6`PnoSZG_gU<;b}$9h*QnJBp#rG7ktb0>Te#zRpv5pp7Ys=1`OVoyIe#qJ;MC2# z`YEhB0xE{tn;#Oo_%9lU?TdbQ7p6s#{OUb7w)F*ob*P}E*nco-|DdYa8?}&=TvqRG zCJM?zgO2$YB~Ube`e`O?bI*af5)sTss(@w=)2X$}iaUqk*glO-o2)xZq=Y+SZMui{NR=tbcx~Z~PdzaV zXF^yIzcPlRLP-uxMKK+~dEImb>DmAQO+Wwu000PkUz`uN6rBC@=X~k*+#DSa}K3M$lKaoAq1!ZQ~ji0%$d9`@`jG@R-v}smOIuXO;v{iUUznudW zSU&#v=F?~ryO&WQcg%6BM%D2)mL=XfXH!>MM-#*&TAR)Sv|uH|^F9= zSK5OZKak}tGJf0}ZXBT5rmU5ghSIJ#QHUPIAO5tXG(tio|8wv0Dc;4Ssmos>m{EDh z@w2PADtiJa`V!m)2!FV1{|UTM8M?1>oi&WRF(RE4;_u_-gn0S^3)6_Jq;#+>p|(d04=i#%*{_8;_qO+l^^CvD_tJg^5C#cZu<0cmJ-8}h7#$*uV-P$yA#r; zdP<`gJT)*rdyK42Vq@C~P~`a<+e##u)}kE&HBNa%L_Tm--IC&Ehh6H|7CXZbZJ{&+ zWf0Dznn&@D!VWv~vx*DO4*M59z2@T^!2D3=(^eIq!bI>>e-nkq1TXtdN zDcddh3)g%QkeC}%SJ_$8bz_Bnr*^4R6I*J3$sC4iy0ccw=oU3J+<@QZc zj!{%YA%v#e#X41C#pk6A+IXuf_@lZghtldG%O*i>y%w`pwvRH7bku+@>?+pnSkE?!MnG4NLx9`*ioR|m?Vh#`Vp(;Kts z9s~cI^757Y9~3?RUM~ZR|ET1_BAxo~)PR4(W;3bl;b0gl__^8wb!qPszTPGCv~Qyb zh)o))0%b8-N}_KpsFHR{P!yEqTh7gtiOGh8RAARRisP6aW-1SbPQm0U+Nsf?X^wz0 zD#8jAaPi!%1(x3hxTKuRKEsQ463w4D{-}QScVpM}`?awHS=8fzI^b*w%oXgCdGfYc z^3?W2wd^!719gI49!uZ3$z#~55qha^)StEkM0^nLA7)U!78pu)EnYF|mHc^=bdv!R z4VqcuUcCnu!Ui9zU8O<|k!XMQBE>h5k!t&;)W2DnU&RBWo$7pn?P>kCUkq+M3d;9H zmx+?I&uR?w?dYfcz_dQVBAE3goG(W7?2Y~MP(#3vB*rxvJ;2VeXEce~k@VrWA2heeSvZCe?-vsAYUpv;9_R<>YjRSc{HuzuuZL!r7m z+(Wop9HrQeTTUCBiK3u(GrMXzqF*`8mv$t8x*%^p|M9lx)?sr3KWW|i^eQ7VkDC4S zReV7KzfNTf{30S>A>GX3O*zV<^#~JZQyD`3J7aBCW05YTq^Xp2zvWNOxw8HPlu|FIVq-kuhC zwLAjoFw;!&hdnUjLNql`)}hXHgoYTtIjx^-iZyEh`QR7AIPXd?V|Mb`4PIB7vGlWA zW$D5&=JGdx+rPh8 zetGj7s|bb9XcZgoONdp=QSi#N1+?Py{Pq%B4CqO#O|^y=RD6-`kjELl9SSmlhtUF$ zVXBdNodH?JY-b+WXbL%Ffi+ysUv3=xkGpUWj(L6Rw(r~)iza9ZL5x`O+}mXX+4yhm z(#~p!ChXQb!$x6JE!sfC;N|{s2EBzuDyKtsTM`y0x~l<9`*<#h0SQs47UGTe{*?(* zsiZzT9rbFd-}xsLF0%Rmt47_E zWU=UeJ;{|V>eT3iYNPxh(}U|@B)WvNpaj))hd{d%V2MkESLdG)b{XpFi>p=FyS+cU z3dQ+oy*0tCl`8r6%&D9WYP<`Ce)mDN314a4!Of2u^sq!^t2_>f~d*hoPc zqJ@JHpznlw$4ra;)1_zXiP#o4$fppZ`f4xJtOl}VINMoO&pcY_D<3cSlven}-1i{$ z-_N8LcGOo()#PcgXI(6l1qVFXjlw){^#>ROxv@SC5H@B{6k}zh7SwHQr7?&pnAT%e zj^L}l)tI&6H)I^$XMG!fTcjg`Pws~@QGOQyCI>&SD7vZ)%nN$>EIwvAe=yewr;wyzj9w%LRnesu&k`ZGripJAS z4;@=4(qifaep2nA4e?3Ol1hbKf2DlT0(@*{*UdTg z$4GyYmk4(9dqRbX`6|9Q@kDQcxSzf~G}fokiHdU%u}>ODh!60#0I^uPX_)#DvVZ2! zqH}?EZoM3A*&EnYzP#GZ4+{oJZ~QW$ z&jNOx2y?2WypUr43*{4wzs9R;=V^OkC8Bp%g}{Z5e?_B|3>y<Rw(H?bDkv&G@2d%&0C^2kqo~iK2Nk|NwvA%gTP84kKgeaFcb>zVV)}Z3M_74q*QJUp@O!EXM^5&O@3c;b- zVj$JQzlC<|S`VROL-ubYK8jR(G6ep>Psb30mre z$`GWCMFao?K7qVsl7t?C29FCUbRbQd zN0Od0GH~K(hct?4kcJF zvom;*DC7%D57jQvEW<6c-L#$_S z7HXJmw*E4dFw(~f%k4JKWcAd!{CQA`&g=Qc3FHhm!K`urXptyk40KQAHQUt|BZ&QXU%FbgZo@6#jmXhoY;xV<$l=B)taTaO$0m(=2sT7 z@&%m6FM+6;Q)#36a42)PA?-N>wFAJpV&+V_8GI{N=RH>DsbIho9+AP+FQoK$vbFW8 zD^2~3!e@#|WY;!*=e~*1v+DP+oQS32$}(del0`6xPod8eaxrD&B&Ao|z8r_DfI*a* z@V$HRemTTgTP8XknYWVG{x$U1Hi93y&XzwTv@(cna|kZ;85W@YH{euN9WOk;TxaB%9)a|^Y~zQG$4j zDzSo0qz=4fdTjZTE%ejNNgKSDP~>_fRJjvZnJ*!k zL9ZXiL$=Pbs%(DPZf@RoYDR{D6m-tf^v>6q-S^BKEIe<;M4XqjiRf0N?&|o) zwk9Tj=%Coj!+gF}zxpI!LVr=2k1SkxQBlFim3H?y(JZltfTNc-SSFmWf@BU^is z_1x_QzckepwbJ*U@+T&=cnN++0F&X|#k@1{KmLntbjY%XnB?cWzCG@pge5%XY%jQV z6+wj&hQy*bp!nk$x4K@&EV>#Rjk?LQWpe8lEg~|VuN5;$ibE^kmB*TEB#~`iXM2&1LZNzGAYZ%m(AdlERR>OAD z3bgXUHa+b%flNL<|AA;@VE>0 zn%benYW@kj3ele)NwIi)UKqqqG4YpH2~zGJN;$Ro=9~d|NsjpFt#EOF>QjL7Ehgjv z%$#4rAE0hg`(ZD^Qqgv#9lOBeyZpXJ%ytcQJurv+4?uN;pTy!?esHmGC0{Jd`M zN_(-|5veq$vIX_?IkSk~o5q0`t9@j+S{EVe3VYIT2VCgg4x6~}jCgqW#%%nsz5C!J z4eVb<&;<(aZ}``Fmi`i<3iX5|dZfI>Bx=$Gx0(mG%6nUURb|YdjQ^^^?=%{45Rmkc z5uBea-H&34zRB#5uEBw_v}HtTQC+2seMqD~~I!N7~ap*5xiNX}M8t-jA$>Ap-0!xapiG{Y zB4J&ntiNMliNTod%Sc1*SsFxJ{1(>HUnEq~DDp#y8l2THPrYkvg$4 zu4a_``cyH{Bgx00MD^ocyCS6!`2~0q!DmZ|KF;hWkfsZ>x`AfzEc3+xaeROCIj9nj z6CZShD!pj_O;2~?{J`8*&?#Yv#sw%Qp{W623TSrQZ;R& zaa|2p{6!YOO$J>NWIz2Y;LIc_vUgM*-eoUP_I>BYw3$~5^NC#YE*-`hhy+5FIdq%} z(_5nTDM1qFh=Ly=;gKhXp9dFNTb&ctdL&7MI_Roe@P~3;GFDEA67&n6jddrRrq(oI zM%_sv0k&6yV$VCsYZyh@CWAvQ-SIdj+bDe7+13DzJ}7gtOh$SK&T^c_Bv+1XT0Vk( zcz0BWg1F$Q(`FIR^DG740PaeL@$#1%CEV9PwlPu?U;;m)ZxslarV9-M!X^b%ojTHL!UJTk=_9XA(N%OOaO-%tjNuKo$S6|6GJz zMkLKIiKnr~#3Nfv=|e@72Rd||E)&gAE$IJo0(;BG8~GcBfsNiX#8J%LmfJ%dv3+w4 z^mG6dxc0@`lQ>gI9GeP&3;+Z6ExTE!dXLeX9wT5sG5navznc8AC-xHJsYh_G*Zy9g07)JCI3^f-Fg>RJU?(YH3Yj2yjv*BMJlGmlD)Y1z z0NDW3n#!{OQwfbxfgbsP+_>9`Nz+^=JS4~pcB<(s|9}ns8>GG@mAW*_CLnBs*Wui8 zj3wJ(_89&9My0szO`;dM1FL!L@#CZ(_`cVYwgE&qnQKiDyOe(H8_h9VZaYRDmR{u( zX3M`$ERh5@Rs*FJrVmO=MUq}$g(!+)9VpG4(`I3<4p{3Bj_+r4nF$QGMZtMJ0W21!Zk%_(M9e(>DSP^8)4obO`WhC}vWTV|j_o)a#K zrje-sa&#{0pm|wV22K|P{^;NqJq&=yg>C6sof8ns&}^xJnsE66Ih6Yz#W}X4JsVW< z)l!?fU)Uo)9}F|AM>Xa&M~V1CQ3J{(&FkZ3QHUEC60D+tYeWv0irhyqsp+Jt;)pI< z(9-p+xW(V3@ZQWe_}RD=ZL3>Q(`JAmEx={;)24@Q8Tv;TIYWu#ITX(%9o%q#vdp7; zE{av(`&Ow`D(pz6$|uRr?a~WD}L8D(AtfpRp8x^b2YZFXXRl4A{gIIP9?sd0dq$EC(t7 ziC7WjZdl7W$i*{XCln}aOwPK-)dqAvJWIhJgs)CCDikosXGDKxgY~9_b$EC0B^9|c z0j^-cUuJW2)mCkxw<&i7=57y9Y|vS6LU%mKxq19j1w5z2*`|YcP+pn9If=B9ptTp3 zQOsD~**B^|Kj$fTal#Mw2)-`GoX!|7HIkO{y@w8fX>kR6gV9V6g9aU}HMzRo7r@*+ z|1Sw!#CZW2_`+UAfLKX4I^4f=2Dp`Inu@twn0mloQQ@I0vuI{(jgZUx7)~dO?a6Cg zkO@8I&Kx?tt9!gi{@NP^Q{3+9b}lTsQk|1)JnZ?0M-x|iVH`I2dN*O zJ75n!(87WpG1+UP7MxGS4nbyK(I0C?>81NI>3czK1HKLI7rLtbv8zxyofo7muhHs< zX-6a+a<@b9UQlIcp_s_tYfsES@H>xNaH`W^icyd!0}QyoyCJA zO28ZPK#$q>{5Je4#4kst8i9^aHi9;Iqi#86J2HpnaY$50Dv2a>t|t9Q zy_dGjV{Eu%lT$Y!tn^?T#ES=5EY2d5kb5l6Sd5#4ypr^o`TJG^s-KR(CqTMS{eu+B z%DW{hHUw&c^_@r;SI*`#vV?)K3Pf%N>TOP5eQ;BhPZC4ft`MrO#dq}XvhZRnrU_@n*N7&{QyzqD!ln5jFHDTLv2h`bB5Tn0cWz#KF=;piCD9Nlrsb6{-h9> zhykzQE#T}YD)Sr?ee43j0nJ`<6_}z3NB~b<(ME|kD_^S+D)~S7&pON5*YGLn60ibv{E1UNckq>49)v=ZsyLCLl5tlupOs9J=qtr80UMfMRwz$lkKipwRe~j6r2ZOG$PFvSZH>*PLc{8e$%eN2!P{tC1zR4zwNsVJti*rNiRqN={@V!x z?o8Ms)V3>kM&lOp6u59jwT(2qjn8!g$H8Fr6Qw^ercuUEv?5)p5gM^oTNZi@*eDbB z72H1b(z38Y9t3hoi210mkpQqH$=SIb^~*Gyz392%FeWoI@=M^qjqQkzpKEA#hrPw+ z;Mmz5S!h!UHKp%Zn-V;DB$NC~V(z+n=(+1!Kl&V|L5qCA!^~j;$B>eL{eDxy?zb1* zp@$lD1jE{YOyKi+i+Ge>aqna`&fumr7E_tSJfRqwkU}-N1yE1ao2OGouUzCGF5^li zmar!PdjRS8bKm?dRnw?V5VY;oBu}|CeyLYem#o zT^IOp2dRX=VKXsY-!1;WYv$QD4r@jE6)5!`s{2R=4JHEGP6mcVDfRv%GT1*dz3z;w zk}|3_iZEMSVfKCMYWInvBXwsB7hP&k`27(FHa#BVrV|`?#8MT?AiLs(1%832?#on+ zwv@7qLrDX74|F0iIWZa3>4@u02-X>9%VY3wjGb$P4-WHcZVRbOob1iCCR;zwYj&f4 zk`rpV2Y5)en=%NI0NJ=vwCw@IrNt60fY7^Bb`>e6VT6@J9R-?Z;5vzpdGgc@?Uw%D zz3l&wYIi>qj?(NwcrO@bu|bb9E4_TN>K5eh8-aabjA_jF{DZBr=ubX*8Lkze=#Z3N z#0OE+B#hI&wr8R$x|j6yMm8|QNGrU^0bzLqW~yTc)U9v_mx!9pc$7?f%H^v9@}W?N zJZ@7937e$n8rcd4{px<(%(S*9g@#3h87p)pfhkxvM+Z*CgJxGLhF#iRG#5{O%^@2K zM`AD6d3?>30vTFbAobmGiBI~Em>T&!3d=9{4>FHfd1e!igyJ_VbNdUU$+=>ZJ5vmk zypPmZU595c&Zxt$`%)1@cP*`Ef0RKW3id5=d3KbP-oC188LrC!ZQ%4aUQpg@$yif; zz66D!e#TIs3h{=tIuF)1oqZJlHHe?u51*^p?*0qgUMbK#kf2ami29<7{!b$U zGU%*CHk>#$4;J;(#llY%NqgWQ^P;`78bE|43vL}bK~=xq;A`vbD#FO8z&8)d6o)S_%5@JReZpWo#CQ{qX0IL%$yDYY zf1KBmnLWYm^BiiCB%crogYI`SwfV}Z_#3)UjE@VWKSW#a6|#=1z>AHY@)t=J<_h4e zay$w5A4{OT2hI<81V^;dE>Z}EqMZ7GYCF$R2gD!OS1g;=N?`?4Bu1DoC5@-&fMc|U z$Wz$w9Z}IL37Fphqt9KnQ?3KVdSttjb3qV>#Ga+B`7QE@c;d$Mg}DCq>f_r@P@WHM zD3l1No)0#TML52-M^FYG;cKEB!|IC56$e{|clpUqXD-t*&c7%sW_O6kOqYD(=q^;ub-XmlYVFc&@Yv`S2*AXodALm^Hy`ND# zeqYktbb=1-cb)RQPh|CT6#$gF240*Pu#(X<sVf1ayq8+YiZ#=vTw zo)wN3Aja*7S7WpQvph0F40d9Qz5>pA@Us`^xPgL=YV7OGt7&!S!}8K=Eo|6)Fwj zj0{0}wAuu&<ZliUDC0P zDw_(1a(oQ$J%L>I5iKLw9nzle|CVET_hT8K`x4tm5t7CB4R7PSW3dsE6=*kmPB2Ui zTaN})M1S@Q7Sv9?3$$lbHyn^S=#PuFA_+=w;tQw9@zkU*#w4F)YM2D@?5X!sjCO)e zDQ6dN(F9?M@8HV@xZ>u^y2V0t9x8d*0ye`dH|t`UypK*vWiq1k8WK?@F##x+rXj$_ zmvvw%9_vCgTW;^-P^QQ~&PHs+!2JXr1Pz81UvAQ=a|R4A*S2el?gM4CKH3;NJWt?4rfg<>711@e&K&R=Ee3w2oqeeV(&~Q$d*iX;jjgeDF~dQJOr~v1 zM@-(_TQCT7@p-ceJ9RWJO#B=ZNI~`WiGsiUrnV{1&hG&jx*r(Dj1XFX2-zRH%4)*! z-icP3(#3eD9%N(X3B;-|uUBdyp{_DpS3c!UySjezCjlzq5L1>lJ8)b~hGN36n2?%< zeI*@T0osQeJQlAg7Oz0aj%A4L2IWy_g~nR1*Ad4v{JGD2PQUB*;ch!6Xkn`+I-|>^ z{fh=JG~WkW%&0*`qDxt=o1adXY#JV?q!TcRqr{6pQaSoc7W!Ogrm$o!edb7T%keIr z{$tOn=rzW%rEk86tZLOPAjhUt=7kmj-qC@kQ16nt!hAe0C7(ijg=|mca={C~2YJb_ z9RZ;j8z=8Dv*~((rBZRmgLpqt5h8N{IJa)!Icp?s+0?yEkaW$ODR*z{RU#~5@XA^! z{0D~gX$U7V2IZg5wZOl8Q9YaPV62xHIY^k~^3uSBCy~#7cNM@^LC;8tnTcz73UfZ?s9?wBuY)`z!hcF6+WYWrVkw|U%n z(Z}OdTiv)X!22G5b)oN6S|~DpkHF}7*!Pl@7!Iah)`N(#*vjE4+xfF)E7+DwjkySc zqH^Ku6EaXXMqQ~U!7rqiBPIe<=&P$OxzOsTGDJ&%@Jx{b*G-Dldr%fhn0r3e1dNpq zZ_3x6g`IC%`=BESk(#ekx2vHkDm5gtW;y>GN5P)<9t2 zCFkoxDQ;dL8KD?eux;2t^zuGvttCAU;jBVbE3wFiLDN~ai_J1zuSfn(KVPLStJUri ztuN~_9j_^TBfB+Fj^F^Te`PaCqou}E4dqg`aPu$^0?=P2Ey3#B!S9d2Wu_4AFcZX) z0No%#gktw@eB<74t^Tf$w2_2jLJWt8S(p9#_?7{k)t$8cT_bU_AC^&A6Hzev>8D*v zlnc{P5b7!Mv~_oXS&iB57vd$C`MiEV#21*U6RCsYE(=r#9PhRKAt!dekIro}=*E@# zRYPaG0Ft1;vbeH5JeXAke)B5Sf@?hsG*$UK_aV4zdyRr7ufUX~$b0y(N_B+1+rlFl zCgY)$avaCBSM1Wzdg7QQggZGs%Z8lb@Kr(cmGq~p81HEkl^A4D6qhwJR)56BF+Mua zI^qpOtxta&ZXeCrpq6~i??@RM_LY8KM*gbCCGT^IGo<(D(CfAc zt*13mB||x*J}E-(&yvcZ(kwSYK^O}KegF&-tD*CQuqVHR=$@q-5-G+<%U}^a!ZQ%u znWAM{u@G|$m0O6=sf0v|7}VSC1Is6L zyE@>mJ|PA5wo;ZvCSVR}*UXRTQz+dW`Q`{N#!7RWa=tvenB{JceTfGoUj~2V0U_ml zvsUSSJfJG|`kASFR9B9U47s12#sF;B8hNF44s?gf9EQvfwSL?)B+6O@q5!wd1UOcC zH90f^x_O|uWsoGX(5UVqJ)GdZUHq5!8SJ3GFFlWH7CF46t!9+@#G{f`-_51P^IDw5 z27~RCukrTVJnmM7^iAYt>dcDD{bCfm!2Z8IH2!FM8KYks)Q|V&yIJO5J=IF?+Po_PKu(?$E0Jm~w$NYySI7G*1 zXRRePea_@MG_m(DIoy9HWtFtKP!ehBwK(%EozZZ+ywZ~N0niA5+K-y`)Qt_IS>XYA z>n7>hu(z06d?-+uJRZ(LB+^5FF3$5m-X9TdI&w|d%u(%?MW)QNXz}??xRW-ej?%?Y z)WZIw-duAY@zNl|fDPu2jyWg0vs5v@CXteyUx#uyR>kX5T$rZ2&X^;E`xEcm#7eVd z6v0NGM(@HngR22=k1Xp>akyN4i#o+u?XXXu;S_;GvRv#iOf{EM2DD%7$nL*-<)+UF5||Ay}3&ReX~mFm(kQe0AV7{NHRngvv#~wPL=}2*fo6a zHkVba9xkGrB_hmacqFBoyY{(QgCwzByGqZcm}@9fIHy+pX+NR zqD%sV=mCvJvbDOi<^N%Qw}jTWV>5^m%x-sU^S1B`rVgWw5OmE!!AGtw5&`KI7U~YO zJYF;lNy?srAMW#}52vW^EGU&K6^geuSa?>s<*_eb!wL;0{ZrShZ z&OjPDyC})7Byhlh2!>s|?EE(cR=|7es40(?!u>59#0|>FPaOSISuH4cffnD8P?`9$ z4Rk)R!?4VRrD2!WY~}D*v-&O{NIPv+CwnI`W0yPwV1)-A_+O$Mq1N3l9q@-egfHM) zBDX18$+ijBfE`#(+=vQ-IvJC1Q^j5~rpk*{4mB02H93+kRSZ0oun!C08!UO?Hdq!4L`|dR?Y2qYv zJj?0d_mjc|3d`&4Y%`QEngvXso3yE<)+J312U4!W>&w0pr zrAU?a_VQsvatL%Hkd6T_g9Qcqw}LP&GW3P4_z)mmuoL|yyNm6HV~Fd$Q%GlYIjh;T z`Nhu#MGP$wH8Vc9IDZ29VvV%yU!J35#a3JZ)JKkhQB*a3EGvm9MjAG@b;rJ!v2W}AOTbGn!=(~B!x@i5X(3Drn_lbIF>9^*>Y9hEa`J5K%HjxuM!tMWw+C^ilj>lgl&WI?DpZ-b+(E|!HZ*zp8ZQN`QvD#~DrHmOHzh^lc zR?kb}QSMFx29lEUA_hBSE!Xv+JSgym3lW@{rs7~#;g>wsDS5(Blvp`dkd=|Etuk93 zDZmJ8GX}8 z<~amCWyzYNWFyItT4!Pqu2V!o6-b(+@q;Wm=YFS4EcV-JKmFh<-fMnmh6kG>x##Mo zclEfqSk`lylPNaOl-4i_Zi>RQ@88)m{JS9p0zHFXZKIbzo6FVSK2j>BPusx+EDqIJ zk^NKZVJ|?>z$0#>3#4XLasLkSM+`VHv(d#E$1+*?q`&u@;CD$+LHz{o3F+OktugG) z{0B7sdX2GwNn_C+U#-Zg%_ki40E(7+HLMf!DPCTagG&NCo5^&SSgxsSl6)Nh<`fYz zQNrB#e*DUpAf*j1Q5==hKTGS{H-N#AnLCR)kf_52(AI_hR!o#rrt226vu3Vt57R+n9$lK%UhphMh z+puLmnM=J!dwTtq1uHA9b-PA53Ubtts-SAZ>`rroe8&e1WH^h)^{Wv|ccAI#Tea)w zG;A7(Ajj4Vi~({nK++;p3Rc8#Xf$(GLGifN^To1M;-T;Vba#7=URw!I5rU>n()rlf z_gw;`l9motQc=mFIbes(0qF^ft_hP%aPRPl$uhjA6}t8u%Z*koxb1aoG-PF-&*^PlDao3VIR)fIXk@%o zwu$k8vErPVV*v0m#Hd2zT&=VS(Jnl+GrkUzwcC~rennZ}AGDJL53Mrc)M{cXwIHw~ zUu1d)w}bNr{w?P|uc(BlWvPHwQtda!0YWg7G-pl|N?jojPOmiqn-epxNvga{6B=?# z59qJ2&2VUtNQj41!5*U>ZMTixp*lr2~QX0J|lNobuyY*pQG1NKA-vR*b( z*mM_jSX;oU7xXG7iwSli#qQ-^9 zb%%y9F$loLwaqtexxZ$>@(q#EgUaGa#!pvHV!AmRFnH#=#| zR&H2-zRe$s-DNJ{z!817Z>7Ini=AofMe3sS>a}W1L~-u8A$F=i`)HJXX=P&Wum|0Q zc!&^=cvQ)SE$z^vt6@17w&=dH(viDV7pf0!_(SjpF$c`{RJ%)tXwmu79tk1F2aQnY zY6Pm3bbRSsnj5hLZQ5b&!{cURM*p7;;;A%nWL>(My0)I}x-K^JnB|1S^gGSR8(glk zd^@A6iU+Vg`4z}{c~DIanyF$fbSjv9yOTvACsfUjo5R{^mO+uP9P_lLT**>rOp!aO(}f4B3q|FJ9JY2g7$H<&Yq7PRhC&;MorHfo`X(qE(K5W(vqy^p;$-UPy4%*%ghCH3Z!L);hLM?{lv_?kxBCbvm+OhUEb=lEn1joUY$*eqO`CK9*}8 zL;-7ACeKGJg>78Yo|C$8U$6uu3EuO9(mJ~!i#e4r3S`*oX zHq}SOZmqN4vzxNBDXys!Yk{YbhM)zcI02%=W2h1**{$1+F^P!Pga%WD&W*kyw6)%! zUcWU^J|WOexSs2ToB_H^2*W8o{bzAKU&}WE@wuBuiVEhL;C~HOC&g!5dYKj)xj&BKC&pczeWV(@gd(RNk-ZL#ivY1lC>X+Djm9T zVjP1wkg&+j-hoh4aD7KY)5OPERl5SbxErh6>LG06_5euwo0n|rHSw3@Ky3t8;`tp` zD*G=MR7DSGxD`qZ?iKnqP;C1>v(z|aKVa34T{xDNbc%c&8Z@bD;%H+2&@Oa zZuuwM?9Hgc6`GqSCsDxt@ZWJf7v(r1h70Y+<||4HQY?$0fOH+DpVQ5w9(dRyM~BK& zpR9^3h`9rXD<3%`fA9r+vQJsB2t1C-UVvH9TaY6cJZqk6pS&pZ>uDOnhL8Pw=%1# z8|kdUq~K($G}v)xr;1&Fe3CDo;4iH9^|Kvl62z#TRktQPk1v48=QGKJ4k8`v!B>XC zj|eq~`#CfdAOKEV_t3;O1@aH(onV1nTtNMkl)5>H{Y+PgY2XHI11~F#e4n~7i~vd= zL_|($;R-uqDD7~`0Qri}$<4*o@pTYkf!ik%wg-mmn!c$zjxNHuUDqdT5#Rg8Lq2C)6q zqGx`m88E?dg;RFqr!-rH!L%bK8)pkpu9msj(%r3`=>pqD^#I)eD9NV&tiz+F5FhNK z<;9$y8-UxH#2Z95b@8xY0B)Cnzrg@AoEB(^uVfR>_c~etzxFwjhmn6MNcc;6LK#Ii zWU5=}Fu8@WA#%QY5gV8v)qhw=PF+?iT&|2C;_lK{E@PObn)3hfa%Bnrh5{GR(mPFp z&~eV36wlxfS`21X{d!p``?J@R2irryEVmVN>PNs1BqlAZJ!0&q$bvxt9`rfdjE>GR zn)`=g9N93q;TLy+DD{9CYZwHdFfRNh@~u0_HoMm{=UDZLUJ;kYF)Th8OY3T~ zYc(!HI>hNB@DW>V%ipQDbwLTQT?T{IJh(aYHQ<+}3LizefPi|&okvtC@ zrwg-J4vF$-+|noK#2LcvUElvXbQ=llG(VI?&!jlBDQ^WUj4hGKYuBep`-R^L^>kPS z)Mx(!TaPW~TbTT!e3f&&kcQK~Eqw~bM6DU!e^^z0C(YA7!ebYXloK-0y5hliP)7w{ zM_{~2cfTV5>w^Xz4d{9&Aw33yam8;7Fkk=$Xkv;bxl2z!S6K4tH#O^o1P%QD8Dn~- zLamG16uq!7cLp6TvraT&MFnp>}u9?CgQyJ6*zCVp#s0 z04*HKoF4CganWg}nq*-}=`p{6U7X%>;cHJEhy@rt16vTw`3z-W4;1fn&5E)h1lG3HoXzRJyTZZRuc(Jj1Rb5CE$QTwJ9UPACg07i zB1>8jwrRB`5S!fyZBryEAu%F>PupYXjxQFpC5sG9mJBpiz-A)N-K;%9yW5Bi8nH}j z2c2l{X{V2ifSq$iv2yy;EsJX(?6#!GsU~VEnlx;b#i1;V7DwJ^qAmG(T?Z>`;IB7R zh!F7)n47^;-s5Z(${htt!0+L0+s4mSODQpxIS6j=0^PqFG3+Uk(BlS#bOu$r;9LUl z7bX;Ym1pK&T&aqL!C&oK5}VY5oVY8h8hg^d+))knCJTNXvqcoFgU7O!_80_a#C+ZD zu*ciLzrPb#y9e1sa0czqDsfdCX<(MdErf1ZujS|@KQkjiC&T~_Tx6ejcq$Oy8yY*v zTxz}2@Vbd%+0{#^t*C&&E;D@zCP*z@ZI3nD|3mY+GRs7aV4CN_HnA(~lWMYf(r|sJ zW5X5mjXdB2GRe;INIjH8e_N57U>_&#={8s5CfU(e0Z>x$sk}j+be+gm>Bwa18Pr>x zKQYLTo6MGlbaS2`ZV1x=w1PUkEh<0e@KS5S`RUemXgw%aLBbQj;fGN9-V2gwoSIwq znH}kRx6Tu#ICZ7pK@Nm%l7iT%ob_CpepjdT+U=5`qTGjl>qBUc_1xA^j&pL9eNb6U(V( zw7o{y4i%2VaM0=|SGm3B*YucnG%M%{(+kDY!tW7n+Xf`hvMp1j50_}Fj;}df?Ff8< z7o(AgqsNNM%85W>8z%#R|Pa zN2r-`UIvvI+?M`_%31E#w6CX-`_f|_&N~qI&kKlHLp#b(UgWVD-ORsJP`O`E$|@tU zB~gg)g0J!iO!sb07RL=nGbXOuB&6jZ39_&XH@Nq!hOmJWg=eBkgMu7b*1VLSHa~%8 z{O0Z%-we-KCQWB+UK>t{BC;F?^PNV`E}>0Ie^4O~tzs(X^sVJ1XL1OEbEaPr5!+D>j|PX`85rtk9E2{ zgm#yR_^4H+(z;niF0S9_qC{vFK(lH@8c(*w<$^q(?W@&*Q+{?V&oit~5yaZD`};Z4 zRM(xhVr^^~7IrtMe%?`A4*AtE7FbP4yX%}uKilDx%W1Z07=-+(dD3magbCtEzSYxU_CUkn8S0j u_~;aIN^D^5r3t75JT?e_E+PhL^l6aA?iQwzWQo5@ujLUzl`oOozyJUZB?8(2 literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/addonstore.webp b/static/images/auditor/10.8/addon/addonstore.webp new file mode 100644 index 0000000000000000000000000000000000000000..fbe89ac94514ebbb380c75c646921278e92a8efe GIT binary patch literal 52366 zcmb5Vb980f*7h6Qwr!(g+fFLBE4HnQZKGn_s@PV=wza<6`|NYh-tYI`d)v()tM#mv zImVb{_R)XO)7y%&l(=~41Q3vhn6RR{A{UY8?^qE5G#i*E9J~RP-86U|jV19JfFR=&^2&Ya1Xfi752;h zJ<`W#%a$L&?aKahI|=c6`>n^j8xk<$w+DCu2yB1?mYY(q5dpe(A9SB>9|Di4TdBi6 zf}b59+mD2ArA2hMO1NvXH0I8pa?TFd{=Fg}1 zmW!t=002;{ukIW1IscCNs_?46`!UOx`H}miaI<~qH{$pE<9q#Mzcs*$U)X!r8_=iH z2knRX)74hb4Iu#VZvD86!UA?4U7oP&NE zz1>lc>VNO7M^6HWbdsoMqLfo11IwZmEr#tZz?1euOiyhR0;Dli`b12g=)&Q0<+Hr|!(p)5RXvyq%80>;f{_A|grS6>{vLvm73{3brAF&h%Zw|s zs*oEP2n`>M9XKYU7|H75Yfv*&kPW8&@rzW%{}PHanpU&!<=+gaTHH-U=j9kj6la+v zUl=30Maq?8yi$?tl!{MDIl3np$=eRUW~x}(%9S^9lq{@eDlZXPj5a{ZMDifXY28?L zk#mxgOt7v5T1`i(olv)7V;E*Zixrtc_FXG+uo)_q;{UXvM#xXG7soCamBHP3V`V9i z6&yJBa5~|>a@O+GsGcS!@@onol;}QGN-NInevKz1cuHJeFZ(HIL5gb@Oh|1wVP)%= zX(@*A%hZ7MT`CP2Z>$U8ORR!`=q2P64`u5i|5 zeAthLi%35mD89YX-tj@wC_le$iDZi1kw z%FqH5Am=B-36#Fn*$*r>eXubOXtkZ2CUZ_-{~%CrP$i2 z;Z08zxhPAkqCeNY-}(C%gwj-^fxDYFbv3c)uaWoaS?C7%!YL}BoAeSgo%&C>7^MHysuB5k+7 zw`-G21S8v^rUv3Z>8DCDR>)dXKH2Tt3&JAVt*fq(A?E?@~`SgD{lpnYhR0#ko;B7K&tr zk`avavistXKSF^P9ByH0)~=l5VmW^tdk9=j#lSz&)VNH_@i}s%4F0Oe95UZuprVpw zX$13vP0C3AuO-X+02kopy|kT^-lSsf%{W5Fv!lL9#0ex7P(-p#-U!D;3=;H!~ZI9wu80xXUS6EOwahlIYq_d9SEj)(UxXimFhO9s;14 zeT$`pcwV8XwVP2v_3Q7j(bK^@k$U%T%~S#*E}M)Sh)3tk4xp6{MiT#h;C8`{^fQ)C zfCk5p4y90+uam$LmKbY*4}PrFh$ZQiIk8ACWYO<9>SWoErEyywa<&RWFrQh7Py%A?j4d`uE*I9U8$mWTlp5sdN!+|petqZ!DC_k5xwUoC zwJ_-ms~H*9JYs}pj~6}=Zd-WeUgKLc(3LI|i z$u;p28I)YuWRyZ*5eGsGM)0^P*+5}}hm`%AefgquA@e}`CSKW#cprZc%1FLTx3@o% z{H!U<^tM{J)il1U&10b{q-O?4lV#lcMwLT~Q?|>Oa2f$ZK2qgZQSKeArU=mx=uw0i zQBBN>?X>r3YzslKxs2Q@Jane6=PTBSfe1JP#L}EEtI;VLrqYF>)a=zcR~#Z&d&Sn1 z8N&Mj0TG0DiO}76hr6%jjthzsun%$sF4Ofj0EPvdT9P2w?KnOcDt6u&h2c?bXLWwf z3J96mBvZ*ayRfoYg*gGh~LG7@zhl#7i1Y*{P zU1>vfzE?6UfzH?ovLOBtt76Oo){Hy9$Z0U1fkdk>UffdxWp+z@-mJ~t#yO=M81o8H zd_Vu?5DnS#h7voQ zmqm7Z@O%%JFr2AK4~E9C{}}=L_|b;eyU_+Sa2b@C^?5dw?M6iUKC!b7L5N}^{1FkD zLO>s_=kGJa1?yR3=jZ@V65*KJzY4{i45q8TBXqGPesv<~xMa1&gj<;Wa2F3(`3v|U zJ$|$kb$%@T(yLiLbbrUrig`Q_+k+9=d`Q;vH2fLr@SYVeSHApT1oYr?TxB`cbK>|< z9eFtaO-RwzYgR6>f2aQ+HB?V#xd-=e%=;axgr09^mQo^Qnyz+mn*EL&TNKS#y5lJUG@qe8gSw0WF_FxR3S?DH|3BTo-mS0PGX2k;R%O&zQSrnen$9 zDc9)=0)aEb-^s44!_9_2dC*y;&Z?#sKR}%v2>-9dArJqp#%ymW+WacP%lY~GdH`I+ z#G_;Bg`Cp=0g#Mn*>xasOqH$&DcT$;g<;VDVAR&<)dABVkFW{-nib199dq>W;^}{t zRH}yu<1i14|E0-aq~dZkg?7FatCiP-vfuR8rAI03hiZl%@7*Sq{4L2~vNpQB{`sI2 zJp{)02!G?~AE;Xj{w-NNIym;Et19iVfBDg*i^8W^{+1hm@p3G=BMwbEkq9DvFt6xi zG`M1_H0!jY0{schipcCwU1|=LBlFWsKepArDMpWe;{>uwe`+p-w5XI0b)zl2sj7-I zqXBnb1NWi@Zk_~MJkAN!lol-pmILqknz%Jwc|i^2NO#tUoyrupzTiVc1sCf4zm)UNxW6ma4Yv;&xJ zkrYwdm!QFcSl8Udd-rxZC#RUxnszw7E>M4lz_9{4vb-5PPOyGZF;yW-IrU=Git6xk zL*QLI1fdLIW&lEXa)#$`k?OD}9mpv!5kfuE2h9Jmf(wZ|H4i5%IAvK4UzqUR7+U^9 zPYgU6GH|d&{Bpi|jFhQI0q;&FL>6ijo)^n!CR*$!2O(ay8c4+&lTY+mW!%Ox34OqZ z(r|^&PIJBs;?yKg6i!8uOZ(iKpxdNe#jS>rYIA=d_N4^Hn$>)+W(MAM(Ejk!?;=;#=fa5N zP_B9Hv}0~#u)c_r!f0ZCw6+3IW(rvzX}}FgGOCiQ-CVRtQZhWRx(P|$@3SLZYW1-F zGQ+q+LP#@Lv;SD7OQN4yRK1Za7DOLacey*-C<OK76L%a&V{?x(dzYm8t|#Z10^VzhcXzsv4r? zlvZIR6mKxS*6vw0C2}m8D5m0zXO8&m%Mns0o?DvxPSu}j%pdB|an3UTN>kaX^+#X` zh{ToLi}|t0A~d|%7wUFHK_0ZH$Wv9pJa@6g%`0n`tiUbym!XB+9JW~$!$gP3s9El}>zz54 zf$bqmS=hcR@kfdNGmmAWX+!%VH`iy`2R;5>dzD);2+PI7E?Se{3}^mgM!D>7lQ_K! zzmD`rF8|FewkP}#gC@TI+obdgL$J@l{fjAoSc~6hJ(<>D;ooQe&$s?nKH`3F=KnCD zQ&3v}G;x{3zYUlgm!{b_=)a1_Ut`wz{^`yBi>y-k-)yq={$ENH*T1m!9|joxW>DJt zu3S*>-%9@PP;UR%KS6g9{_k2pLGrh=E-MuycxTNJ_SZ`O<)M_*emkPvdfaAoVvXdgT7UL$AhX=;Oc$jcdwoAz$+udO031l(=Be0tzyX zvkMOo60}~22F21ZN#~N}Kf8=(TW=>f0Y+rF6Ep&Q!{^Dt+6VtuGhSSv>Mn%Q$L-cB zQDR;ejg3t$wy%pk_|IZ&uGgCV+f5UzWTp;Q|D#I(X+ya6Xnt|K|4(ya`-kbATy6P( z^3?y>ln8E!8&lRP!0jKX_{YNB2_}MczZe{F6ea%UTK={G&xVm7LBG>vOj~X|8jUor zWXtIvPr6*E4Oo)spS_AKkl%@Q;miN4dp%L=8I;EdIF;a!h1`U}5sf`_!3$@j zZ!6OIx54{)%viR7@bb7|@@MhBp^FsIvQUk^&>149-|hC3vUb1r z4Ak2sV#%E?F{qyn@sEa5CQbd$>P3Bbzytlu9vdHa=I)kB2*ZfJ2r=- z7#Z#`#fl)y-nJtF$OS`j|Jp41BL6$r*HOSSok4vR~Q(_b?ZaRv<&P!_l6#) zqf5Hl`n_s*k5r&z>}66HNb0X$Z(8m^gEDMSQ-5lW98>M~!Lna?G3Kqgz5N(-w;#$m zuB;GlOJvA_zV6_lNlRQR^tJWV1H-bA=coo0MKn6r{ z__w>r?&#=vXbXOg;1t$vL_P8wyrldv#cDC$jkKSzgd5$n6P}x66jN%ypL(#h%@K6^ zg;U{j0&hYJr8MC7Bz4p#rj%aRhq|3_7DF&aVC&PsZl658BTXG<&q19WLF#GW|8vNQ z$8vP*&Ecse4xkhuM*C@bbkJAd&E#o))YwKBco|+04%ZYqm1-;hO8nWwpn8KYu6QK91$3 zB2*1hnCDyAxa8?$7=}TBNh`?5L21>~S=z-RDr*~gvRIw=C=Aqn*1%0P9WrP^?GFnH zZ(|s+Dj5hfCSfz7^pG+7vB|OQDY5SsutO!o8^3;2>!QP`~!c6nN*=7#Q!GiA0Uh~J|zzb3(|#L3uq*{aVfU} z8ke+Qoi%7%wm)Cf^P$h_tv5K17Wqf{`H!LtaTIN(yWDnt5qEAjnx{% zmwrONw0}bgb<4t)N}D8v9xCRVE->FJ%iWr(_1*185?;;ar@fYw=@lamKtlgt8l-pvw!ehLbKsk_JEe_ZKnu@#qB3A zuhBfF_4z$F5-UqoLqrmZLwZ*h#-g8HkEjQ0_!_3Q2TnK9a?PNqeq zR8(SP`7o7%Wm|~C=&aI~c8;l!8FYG~IGs58Rroztos*c%{WF)fB_1M67}H4te_S2c zn?U&Ok}rT`!+FS^1%x}Ko_Nnps=S-R2GW(ZgP3A`1Ipri996@m?rsm~czmMJBt)Kv zEX^RIZnELb59n@#npr-I`V3+;C7rmHV z=q%t8Vpxm zqsDkqIQ$PF9|etFFQyYhkS_ep9@p)`ZOGF7@2&PXrB9oPB@>-*F=Z!9ZDwe;ImM5 z6vO!z<(uk0qSP0a>y!$9}D zZ{4b|kDa0WxyP)=gyGYog;$puBDj*}mn_7PTfKGg1H=yWm#4>*M_Gor&~uDdjXrg^ zy#CF`enZ`+rR^SHmbe%{kKI)g0d#3F3x)S4$8&$}tI}(Yg9}-LOwINw7+9+X=&qE6 zZj->2P_=3|@#Fw+60yr|`!XgQT6N7ip2fp@To3@vyF>K@B0HXuP9cfkL-4V%gjokj zw4P=2vXzezh?g0t;R+N8arv9w!U<-??Jo>P#<1N044GpwF=YpwroJhhJqW2vo8{Ya zFsx4PM3hD)BFun61b=C(V5twOiN0%El6Mcyf)wic1=S`#_1942lfb# zeQL2K3_&BYra5%)yL$kE#$zw915+K2;O)A|E#{q$GXh%@CHcl7T?r{bm z$*`;3Fx=)K=GQ^A?c^{^DxSI~3&saF_s;ef%;;Y%$|Id*z))j;x`sw}M-_(=(AHav zOIJo;suoWZzCoX0*w|WAnR$faWm~!dleNSyA{vmxV3UwT5ogup_IQiF8~{Z+Nt>0} zMSR_yDd=Qze9`&Xau%b~TTR)Nd6&;FXsSR(j;d z+z0{21CF|nZ>-t}^Xc#rQw4tsYFB&W^mvmvLXUqB*=g1D9;z*JMowRwp5|}L);MZA z$=#6-m*|O@R*^jCHnH3}>C5NpNX?$52Cp3nrbehDv2BTT~$D)I|svB;V%C;ivN8=G)I z-|mJ|b9qpvtc)kmZOhDDOAAujm+(Qs_Dh`*_f(?kDL@|$ggZvhIC|P)3IdnVnRCo? zvn@ZUVx2h{z#hf3^g&NoYap-E(qtR(gHNY8!-UMJS=?8_;i7EVNM%Qqr)@utB%Rh` ztV-CQr9GD-jfydUK{_0m_%dBLsH|eVJ!nb4rr7|?P1tLt1T$D;o2D2PPOZ?ivO#Ji z%9YF$=Fd-!7vJFdE=fpf&1>K&{15wb4g~mI2w7sq;d0KbY?s;?| z8Escqcd$rZfZ8aUzBd~|=xHDNT>$ht0Vk;S9Pu+|5t9gwB)HWnr#@@LDXgr0WTTSf zjgMmDf~<}82h*u_083#pB59UtVRagm0VWZK0TnEBU1`E2p$~gWca=!RFr+n`)}2XQ zPz7g5(1xP!McL`cz3=GZHGc)l&C~Ywhe&K^P4Oo>qRXaVE5}!g3}F4J!j6@9BDu`~ zCFcXqmH_cJS1YLTmtBtM-8^|HFE=8XWdp=;Uf>*#`z!1&g<&4sL-VABhf~S*t8WDy z7OV{XCB|w-IYA%0T5(KMZw3pLEf*8DZH4^4=TJ`tzrKl?ZI!&@#)9uJ#(mx#qE+*% zep1u~hT0CQA8r&wF|MVgBJy{WF)Jw>NYz8qYn-v zbrwnb6)Owoit^vRIYUe81DlhTan!UWQR2bxpVyUQ#i+7%q#?02@=LHTEZ($H%AoJv=PB$M5eiBb z&jl5F&yx}H$tre*O~w}=ohj$3%tv7rn!Cjvb`E~1@<*lhwbNb()tOzsM>WmmfMs`C zgxWfthPZidYA@y_arz={k!)nizF~^Qi{u9n?tC*ZSb>=f*olPo|c1$@D zE7QVmzVt9M8(MytuPRw%9dO~N0F+aozMW8mWtt=fp+J!5S42K--^T{b2Wed}h6Yy# zom_T{HNeeyVq}<+WNIKaWn3CL0&1asmEyv}3xKJrS`1N{0*RzunjlUR1|9-ZP9i=^ zRv)&>+tgE)kb+$yjSFS2qN^=0IfZN5%B+0n6mVv&%}Ac=RDM1UwU5!gPi+VrXnJIV zqsS(0e8uTooNMHK_Tg1w;nHgWNRslfU5(?Lr2oK{gQ=Lt6IC+*pRGL2O*2pvXLSlHvVSo5%&X%;q4Y^&QQu6;Pk5>O?ITns-`*;EGKG3a z)|P+HVeO~0PvBSxgH=|DLa>8Miz!%NquT|JS!Poywoc7gY+da$TMuJ1s80uw{+Ex9 zH3VWK2OoqS)>&b5EXv?)<)yzmIAlm zl?U{%A1F~XN^OEM9LS21eo>q5TufxM_%~u4<}8s!IHMCWVxiiSk8~r_(YXVT5ymkz zKh|d+MQNDuFOJm4tfM!*yTJAXd<*Hs-kfwI3Y)DnZ}1aOX?Q07!^u{6yL|--vaOJ6vJ*`9s#@xvWt1JZ^kek(P#q#?Bgq-rwT;i z>ZO!%(?=)O)%hhGF8InFdPQK!7x-9#E)TQP?PP>cTBEHe+A_&W(_Wiu9(!#^px9V^ zRb45b3ct=r!@>`=peu9(#S~_-1vR|msw$W@!HC08xsTBCydCp@T2LP4j{98FIHx?@ z*5!Pi+63PZVCm1QGy{c`#)RX-b?rDsJ(s;L*Caj6G{mzTJcc-0Q|`$K-6KKACdM??aGU;Y|XgUnwc}Y)= zX1+#Zl;-jk6=V=X~N=+}*JN=KZ)v``!|+KYb|RW1y3C zVAmIP2MTr(&^Y6kJpKbRuA^fKC*^pvY3-z#;#CUy$Kx_wdr`z$v-v382z4{n!F)lr z#XaXV?^nffHCc)L8hND@qXed!Esc2!j?nC?n=>X5W;}+BmDck1I5`^dID58^I_g-P zGjiDMbz^TqiPnbrE+X<#I0tTW)7i;b-j|Os49@`A#hs-l)%1dD~~bdepf+hjxVg0+pgIVV~e6bNZo8BUBEo5#`HdyQo#86AEHQ zzMioo2B3|BGG1J4pTiQeDJ>$&u#C#XuSZh*@ue-X)6e~Kgj0BJ!SderidhrHDg+FMCYmY*_TOp!ahIBA-XI5zzc*xB+eGJL(qi{Dm}M3^#P#ty_7`6^ z?|#cdy?<-(%ctFwT-QV*IfMX}M~$})q%VcU0(YEQJjv($3@9K7{UNc}2c!!tvb@TV zGOGHqF_44l>>BYn?E5REGeE0*rYt!V(9 z1}-L7HvEZ}jVZJn{MD&!3q!Y#u-eKlJ9|f@j}8lL;dcYpE7-S@*#Ac)chF=?A6IP{ z-M8NFKU9T~kP$f!$-x3({k>PTnAKZk^riz^o6bP9>@jxhNAQs&iwc(1xGpGMfI^y8 z+6HgYSaNv+m_4zXa-=3_C6U*75xAou6gF<>dDs{;m-{a->KcQq<{~8A=T{T9Ui4zn2ME~7T~ z1h56tvNN8~t~el@p(d%=EivL?$7l!PZ#@|I(O$Kz6=IcaQEMB3%2OLO zChvehgB2;@(R0PX*T|qU;OyZy*;bf2i0DTacCWrf_+MmA$z{5?ZVjSeDn08YBx5Z^ zq78HU(DPx>K?l6Q^Dm?IINFr1yX}N8-&HDjeQI_o4+U4%uA;B3Dq6O> zdgB9gTF&0)e&ml|V+}{<`XVUhO7~@I4{+90ygw#G<#SWn7BSNir*^;Ggly3#pE+-3 z5V+0-L|US#8{K?G-MI~m>*`Ab4A`gDCcWMG_ejQx?g};s$cZ*7w8S5fF@ebV7GXj? z2$mJqOdIZE^d2oO&hRtIs#ZK~ivn_FiGXR>;mmlpu#U}PzPm-51e4#T>}lsylv*Ys z3DJdbuaGx_`&%>!@FihU`}^i>rXRF$60nG zo11JJhL)h^exjf6vhEQ9G5_?U&mE9oTQpbvfM zke2n_O5+*R=bPEwI!X4UPkQ1qrydUaMMdm;3VHhmhBLI7EOhn_Zqa6SWk5 zrfj3gIRbIXQXb-?LOy1Vqe#3+xD3Mf{;?K>*he&O!t)X!HL5C0dzQf8iH;2XN|`Bq z!~JaYiggW?h?L%>>bUm3Ux|R;ByQDr`yI0yS{$s{2Bt_$rHv1V;N!YG5>|`X7H!aW6*w z{S{lTK8y_4S*rRMDw=dm8W+P(aq}ztwKwo|OO!ChSrDPkaw!8*TB09mB-Ka8?soYD z9te{$2@8GVZH>7`fv!7-xJ`a3K6`*ro%KyRIk9?OdCAOXL|SZhD`fLy=ynT+kpsL4 zlU*SOyVpe~9lexBs->H(NYAlHha+#Z9O|`o{%rbZ7xkCib=&4{vLhnbdeXuTmB|XP zRQY7~vb_ldFW*7Io6G=^l~vX7NH*9PRc(cwI|j{iS*d8OYcw^B!s1$3a&QHtIug2H z-y-PC>>id8NDW-QQ`u+)2AoY$9Z6_Y+9JngV6yiM$-m?&y#p`9cLQVzQuM>eJ98gt zPDx~OgyMihy;3lk*Bi%Fbbu6EMy~rZvF(Tv9LNe|>oVA@C%EP)p>rrcdt*F<`ShVZ zNAYy>XgLIJjJB%2Wl^9*RR&eEconY0Rhv z;srRjC4{mAszBf(D&<7K$ysoL5M`veexlqOC7gvZ-2tw6gp|zJH>lMo`KPvm-hBSs z{_Sod#-pAnl3cEr#B~cKs-w@mUOD;VC*9zl?N$s8$SvkcB_BuLbJC*QlGQ@0IL~g7 zD!RFwf84G2+uGQaRR$&)zT8hdJ5u5Me&M4FivIC>vRrpcWb8b55Rmki*GDE;@wT5_ z0hLS0xSTF!A`B|O2)x|xaO+uPSlwMW?v~g^QpmKz8#I%XjXVq69Ikw4`spK$H0b=l zLlcY|cc6SF>8(6^C)bOM75!yG<w8U)3`{yx)o=CkPTZNjeKBa<%uWkAw?sL_ks}56TjMzwyM`^9|xwq@`aO zEZ>rv_z<-pu9}QpjvZ&OzVQ-NqQe_o5$8<|kx8ua0h)hscdIEUtWEJ-XkZ-j7m)6@ zsQQ{z;shwxr~%43?qNyOa}#`-vFsOtA62*-E5sH%2umT9Kc2yszHKjsd;Y9+I;lLP zsGBZnsLUAQ&zP#W#(TB?^8fO-?VbP--z^S^Amo+UMkZ}>2iKq6`{Shx+tMJ0MlTY_ zrvB#^=y4Rw9PZB=`V}A`5VxJRT9oymb4CCS`Iz{r1`?CUyyb z3z^Pr6}+YLAyp)ue3bTy=vK#u%Z4*YrP&#DpQe5`Vu2BE9-#y-AUO7Un$ciI1Na?} zCa{aMHCzLUjSMd;8*6BWTJpSOz1nA4->>tJZxctiGuRCI@RlZ-%5B=4vOY>xDHet= zyf_wNSQ~TYz-pbG$NA#k$w}={9WMIRjq?%|bSs400wG|i!_mzs7n0%TuPuGVT=C(I z@VYzyFJl%Ylvry zNKFR)Zq2c(KET$A$chtEqgN-Y<7CmU#U5w_1ZfFx>LU!Ed*{o z^KE*QDjJnD5btU6V#Jzf0oW>eTk;Q9;~Syg$3ks!U9n@FQ9#e`Q1>Q0i7A?MfoyV>3{d{PT0K_dB0 zmF=cX>%W{t+fUh*v}|%JGvh8u@~K});t|FlOoLl{^H?9a!HXC$0ox08J96^GaW_4L zp%_L4FXLO=m6Vyx&}AYrpj#%OBc3DqDXniVJd^Ajy$;Q&BceAn<%FAG;aA%Q?FZU0 z4>f?MeW=i!%6O@+r7uFxS^n4T-E~1~(-D)u3XR~cu9ImTFds@Db2e)-z#R#9)iV; zv-q%mX{9|qIsJ04WgSG_VT6%KA0(7TtqpAoZJt-BhLD|1Nev1XzAN_y7c%by#MMig zpxRHDHK?|Hslupuwtn69gHJ6MbRuHAdALT}3qlj`$8DnYbo;{+L^K4cWfCYOXf^`8 z4ty@|Wog*G97YDH=qSFdKCrd*md+L=Ot|h^;A;^C->mFmghtW{s=bD2xeEul#9HMr zvYWT$>$epzcOEetY+@yrq*bJQ$TdMQgO;zvEBN9gN1JcD^>})C{22?OP}*#0>gBvo z1XvM+W4H}m`S3E{oJ0y|ldVU09=_#t5ipLg$=(bk)V;ezM{$)ovd_!$X4cd;rrqD> zK6W`Sm(rDY&zFI)=__k(D;6Rs8b8*;ehcUV=-{ZhlfM1fs2&Cb>iS_Y$CdUp9abJg z0^S4z%I2zHboJ5~I^kMfViLVJNo!%)md9fQ2MdS6FJM}&@E-icoS-A((otb4UGC!U zGaofaNoV^`{dr_`MiR#ua*AfOz+Q1Fp)G zF;>VP5bY|sV1Rsm?LX1G6{{kPM>X#x8UNdvqi>eIH$|;CW zL10kl=YXYIK36l42)A$TjkV(_R7mSe5YlUlG3iJk@$dhgu(GZZ^3tvsTJ3;gNjw-t zZaA=)n0y&QI}3EA@_ukJ1!I=H^I|0dMALxMW0_3eeDz^*yDTvKj5~y4WQKF=NMl=+ zU4o1Pa+A2vp1tDUR z-7*HK^7>flUL~+{K*WQ0Z(RcY?zIcL6|orlzXeGNLMvF&5y1G(@E$)Xb+@#~X=J4< z%_=>vpK4d2fNW>uduI&>IKD`_CssB9Vr0Bzvlh-5zm<8+H%6Lq&Zpx?kpDctjB_zy zdl^TAWoaMft^n#`YghS5K`w4$P*=x0WtGbLfFyM zQ35xtDn6bq$|yH2Pz&qh+E~=LsjjWIan!s&A_RpZB#GvLBgX&8!#7J$+i^+LUSe;u|aZXqz`}NuRZh4|fF&Rh4d1LlXdJocF?d;bIm4t_VAb2Nex0M$od_AZjQC z-O~O9$2yNyjO9LIrw_xAGF*U~QnGgmX!+=CTZHFXZdT^$g&@YqvB3e!^VpOJ^xVzc zF-;+?hPZ&4sWaIpMJScXFD&oNM?n+|WQ!XmsQDhDZ0W$IU^OFu3IejHMP85$!Ev17 z%km*m29jV0h^<;qAIh-gugjZ@Ym<52!TQaVLZdS7;pV{hZggGj5z-0*J#XiM;i$!} zo7+TRS%LT=h=n~B)M{ov+atCQ5Wk5XPd>yq`J=5z3XN%C3rmOf(Z>0{>1VHTc4q1^ zCO&tFodZr_BUwVx9*NUZ%2) z+@9!Ens>r8iqb36G)a%z=q#?HbKZ{X#5kIIk|Y|aO%@l6Q`4gs=N|Jmht{0m)M82r z&f=|1zx0T~9QW@^a|068S#21N`s_7^+9maq)qN=XXFM#C9|&s$$n^Q?P)FAqcA^jxR2j?bx2>M1RjlCa<~#59De$ z^dt71POFQ0Phe2437P4juy6xBSYZlgc9l9lXbkSdr&` zUG*h@e>FHTUOg88W%{}oCBeXVo1)l8xhUjp8#fjgN%fuLjptRd*#RcWgjhcg={e_#!|6&sYAfqOPMdMP5{a7 zfG>}PEw=X8hK-*v7EHbWGsAs;6*)KTaRlmD{DqWgkxCqt%dV%T#4uP2@MC{&tgmF34qw1CQ~PO(+Wyl$M=-N1=f|tkMTJp78o(&5a zf_rP0t{)sDX&hV@#;9x}vLWZSl7vKsF+)31aI81UBnlV>5?j=+9@OQ!2bJ}cqOXw9_AmOH&)uH@`p48>L z-uqj7ys{?>O9tYAqj-@rvUulQApM#lO}vF`k(3LS0BxO?-3;4uX8n=PCy#73Itl)LPW_!&z%|LZ5*w3i%({~^DcLzZvn%RYo za0)eHvL8|+qm%=tj98Qw)sF!Lwq2ngc+|4o)p)XyLB-87v5q(dKTnj_fl{*kbnSUB zOjsU%H$)=q7c9TRwS~nPFL)@4YNs0TM%XaByG_`)1w|wYAD6J)5#CIjxxPr$Yij39@d@Vr5g|G;zaI#l1k2lwFRgZ59 z0x-Rn@XzY0USmR#5zQMrtQtW}ypgNS21yt@K5F0QXKaL?;H#FV(PV0EpL^GsgqPsh zAA3h@c}=gzWzJPFMQE~XZ82-H1IzmKi1v;#WQ9@Zsv^c2h zMbaR1!c{9d^x^90N>+<%S8Fm`NI2o+D47O+`&~_7q2{o9n7{7aDctOhVKIT);b_!EMiV? zYUaw`s1?S@ftvSht5?rmV(MEii-k;S45w(zVn0iS7_qzwL|MK)%J1eaF!}Xdh;v2$ znfc9q>m;cR!urNsMONnPL(j&u-x%l&=4;*1{Q&nkdbrccnWx*LWQFk$K)tO3mh1fX z&lC!XP!BAt=*pevde?*6CQ~Z(We^p|jio}TD@_S^cEh;L2vIJ~=Zxayqfw#Y3v%~r zZ62%szR*n6pfjHCh*OH&+GxKo=BBPnwFP-Ytl0;a+0N|;aWsxDss|A`Ea+@be6hpf zJZ;+34=i^scXl#5@b`y(Angweava^2ea{8zPJ*2U{)1!4nIhqOBE{bG}zet z1~1q6{-ZmmvDm?1Z%yjGqxio}yrqM?>WPp4VTKKV$Ff?4Nfd8cjG!$*RffW~M43(Hwds{tp02K(@b0*NM*v z^9d@iAy zv$Y%k!I2y~X%l$;p*8-lQ0(eJ;D z1BT%cWul0kU(_W3RWfu3zu8)~GY|!MX7W=yh{_}v@2y+OL&Ny>+|c7IBTwn*VhaV# zl^MD!3(2g@&-a3LTg!h`?qmr!=qJ=?-!Gu5WLw(M2+xEbp_F`INzqerMwQUrcu7-e z4vRr2cO)A(Kq~zk0hT+R3ck+<5phEYjajb6CCN4r;uUL+)+&E<6DxyA(uX8dHH;Z= z3G_IVV4(5id>1pg@I$A1LbRk=0+d3*hcv*ug_y|PstvLNT4-@|P%+`@BrWyPX_G03 zANivdJ!L6<@Pd9RZ#SKmO&$1%1?6As3a-4_JoIyPj+xD&kd4!!CP8tXh&LC~X$Nz# zhB1S9p9<46b zIUxVn;o?}gL(L?e5exIgrX>$T;3D|eju!$zBuP*{Tk}K;ox&X9Hh>$$>m}M5=2X$+ z+X%A7=(}tPzT0qSE#IX=v`IQ}GyCIrwaQ1P#vH~CRx2Xh%CcP;1>{G3Rq3%p7t5MF zv4(j#IV;Z7huukA#GE@b#j*wFaQ(@vSu3nwP)9c`F3()ajlcVZSB#+yZnZH#Z+$^7 zG~9yuf1S^s)_3WXIqnx&E*lY2`?!8H;LT~EdWJO~y*+&ogVPCVp~cNW$AasHiKQ)_ zt-6%n8$&n6hT4%$qfA5Yks`|Vk7d%eRF+}yZvYA@62BBW(4+1pk3ZT6mw^b^R*nq^ z>mkb-nptGp)pdFja?o$AmZL_;EJlUTxoS_UeC>rh0){~hvTI(N=qV2q;QSX~ z&+yFpv5mQb!B1Z$r7$4X?@;X$0fFOBCrt?q_VABF#B{t&SffrS>s+FC#=-!iIg_1Z z!;KpzO6RSo9?o^F9j0W(DMqSRBT>Xv!~1D7>$2=1=kO<6es$xIl=M7%s=k_o_GSx{ z4hL{Aa|ou9rH^O2qYzM5@(L-U`aOSh6WMehc?q8(XpD4;YwU!8Tj3(hzPnnczoOZO z`-<^(L5?HaF#|ufdWj}3CQ*A+EC3u1&%uo3_q&u-|+y-=*A+GS&;i*zUkQ2g<=>hm@)t>?-f)gLyb30ildpBwwy}9;c zrFsl5yCzX1kU_3TLk$@po|ecd0I!lzxhEg}kgd5kZ(^eQrjiH~gDoVUA)y@^=jJE= zovsi&se@@na6~f#e^C!?9a#QFGL$7jjDA3K3K02m(DI0j z>))3oE=29?Jwh2ax(bEN^xRup8N5k{=UeGIsfX9iD^`l%jsu;xdi{dbmLJ@M3GcSF zg$clp=ot^zsSgNNu`?JA`7C@VcHHUXJJ{@w6_Wh*;WbusCE?q(%jk*Q>d!XEEA(Ml z?2f5Bs!`J_SW*~26x3~U3^^uvSx>30vgWaJq-ot`5si{=TKO z`O~wOe46t{m)N{Qug(Pzo;Ny0GQHycNQDI3CqDsufl)K~Xl~e)+1OCI#O0-CaHJQlOItBpcUDFA*AzBdKd1QgE`MK*uxGmSAEZ zPLLyr*SX}~*Fk}WvDb{5lr_By5FC@Z$pFnz^{9}7xvWtjY^TqQY!263TRZyL6tyvg z#6>goY2TcQz7vBbuQ=*iV|{#2MS7*gw*tdDtl}5{mLq}Qp#G`{Vej^;%L)VEGna?& z!HgC)KUNNag3JqAl;rpV?KuKFqYEy<^L3dK^S#^v`u-;g0Y%?-28y8-OY#oQQ=+Q- zdUtd-qM3 zc{3ey&LR|4UyicNNMTC--GdulQMwbTbM}zI1~IzW45K=}h;J{ElFj|fW0HMslCkkoqmwCsTUwlS zwBqGL{sTrhINm}i6|i;_+cd@uJtN0^!T!PBqJwO@yd9@k6Rv7}Q@oJGF2j!z>rrU` zHC~9AYm#_8@zYlJwgvN64L~gM$F#*nZhTNkuu&|J<@{IAU#IK0ml{i)`z=7g?}8aT z*Y)_{9^KLaQ`@8ezU{BsPWeyTOtKV&N-*TQmVbxX4SRYZp6Rk3-0lls?-iN3Sgb)= zD^QY={0f!$ilm(4wH0XMZF=j*Y2GR=!Z~C!ZC5SWwM=8z!OHDKjwWBpW0yW-X>Mq0 zKJ?F%GT$?O`(X=mfrCqIBATLNwatmtQ_DW2pql-`hW? z#reSeQ=^x}Ad2}$;h+71DyT~qsJJ9{WaGRYC40|A&x3swV8qgmtM+|I+#}JSK0*Z5 z$vWf^mC@xBk`Wz7Lw0!BjG)3dv!nlJ%ofUX<^@?LVYpbWmRMz(9YjJeBE|^(?$(LC z(N>44;>nz?FCBaZ7cj)~r`bmhLXA=guyGW~;8S(BO$Kzo8xn#b4I3`SZfCK|3f-?V zFmIcQR9-hlPwHDD!P6LOR48C+td;}L6pNx%rE^p@kn^cLhhbu@hR5xGA13#i^hx>pyd7foZj7-Js zZW!2=C@}UJ@cA8=W|9hiug0H zE)d-6p3e^&8rt+AGEMP)j~UXP>hbWeB*99Ki<%Pshv;rYy{U|{WZ^An8hWypGr9s6 zC+h?^GKUsuYb!`hr&Jm}q1)XYX3LmST=1WB2sr+XsQ7`Aje z9C5_tc~f?@blj?BjLN?GBlt^rNf0`yQU!2jh5Wz3`0pH{%6$}V(6y;AzEp4N7xEu( zj?bgA87A0NH;nH`e5@Z{qO&!MS^T^i&^{}I%ez-zqb5$P4b{K35&)#%6Ncnf<>D*~k!o3&XdN+Zn6-wL}N<9$I8qWR>y6X7sEhywI zh%EROuW;|DjA_jnIcCc?vUrId?BuQKUbk~Ubzd^Lp#(JaDYk7_~h|R~` z7aoBg11j+-(bGu{Iy=o({B8s)4|I<9LPdbkF^^mKBqt>f)<_VK8rcb?fF2otMzEFT zKb%M5wz_sL{=NAs2Yu5trky3nrN(|G0oHe9CPBsuS7?Tf$^Tu)`Y!gb*Fhuo9G~6s z!CSz`SLe`l0EfjU8^d7qD|~Prwv)Jo5K2HwQlk$@8STSA^8C!?9n{Q%r(Wrt%o#Ej ze<7J8Ndx0{{#&@cL9}~Y!_-V#lg(G=X077%dQ;^m&9vJv*_E}Q+dnCY>s&D3`_+1# zJSPZTFpJMjh-B{}@zJ+ryyHXN82SVVb18;?(#J#YRFBe)7D9z!8ZBsK|7?8M4$hx4 zA5*4X5ty`cgq7iUk9pFJ^tWSC)I)(OWAa(P`Q^>A@u0LJKcFDhE!_SAt%_Jw1 zDJv#2P61gvMHbo8%)aA?H4m%UVudV&QpLo4we;8jiQOJErf}Dvgv%fdUM^S?r?!d; zZ^=mGtR)D0g*2H>;zBrTm`aVAMstqn`fogSAKc|b(FWLa>`9K0&-&b_aAy28Sq0c8 zKiPEvlH^@y?+&vl;7Ki~>dOXW7h;`RSZ!>#znuk)a0OPn(2e)<`DDg7rX3`Aj2;FB zjf=UZ78K9SUM=sicg$7$Y9iz_-ZucxoOo8o_FI4((x?_#Za5$ndi8mbw42_Lsg}8` zdm3MQ3oNRtVDA&Fb2j#K`drx4UpurU#tV~QH~Z6IrK`Fdbey-GX^HF{zBxq(h)k)L zt)Vh~VhA$d7Qana(rXF0{}S3R{VNLEzW{z@O0W^LOQd3_O z!_8_aW(~v9SiIV^F~4FZQr=-Obp2G3#y5V@pXZGAxg+Xh#FD^wb}}m_bfrU9bnODxj~DGI%T(j>E`T(+ zk(&mWdLg{QNTAN{1=z2H17|&_jTBR{$Gh_~ly)4jyS66H&~9?q+GFy=&_*Ma3+~X~ zUbCy>tkZu{(4eX+;Pa@t$o&vvXx$q`ZU;;W^)`%Vwg9ByPG?}y2uk$&R7IGr%w7ft zdnSzJinRsA`C)oxWzCyS#HZx+ z3@w8EjKYQ&@!KvxmRDGM>P8D3nzIpIGPwp_T*qPS;6}$5ZKx z#koAN#b?ZNR=)81B?l8#DwOnlsbb@>dgdeUtPF#Vw``=V%jMg{{!k>4yu6G_A%2B5 z&-}&_hklR0h)wd_%3Zw&x83S6@9RE8vI|bHULX7&r5APfD!4|SFDf8OgMD?5?BQmG zD<_3DDG|BC|> z(RxC+VoFHOMlZ&Lb0URy6=k2|gFxXcUHtTIi13IfcKLUGio8uJvNy3=m zRTXdc`Xr!w@i*&wOzvPGBS7YUP~fc*efPD#zMYla){pqiv1X_-M&j|ubXS16`H*g2 z-&Ut)oNS1~N@{-4J#D2)Qkrg`(4WZ!sBA|JhDxqT@^0n^y~5BH8U@^Avq07)TjC`s;TZTq@Z=KVEXfQAbXw zO2E4-$2%SkKm-ycfn-VZYT>UVK6SSQwB(vcCU{Jf#7p|y;IF0NBE0plcpJDWVT&Q( z9#j&))mjc-k@6<5>z*q}%}IN}I~5Abk3V4SMn#P^y>3R(ukKqjuIguaVigC>={3~! zPI0KWv?!3+&bOG2A1f$b(c+-<$Rw#z9T|j-(vOrY?!dl!(x4;2v3gRcuul-(TGXES z@*|EDmARc=T$(Z4g11B87j=!WY%#1u{l8Lk$9i*Don30Y+KtE`Epjy>)I*4zn zTz;3N#ArxXe`9sN0(nXsrXPLO`;H{^JjJWzX<20LUAmMCd^Geeo@;pIhn_;Pu#8>N zj$KGy!uz%fVW3P9XvgNc<_Bu%xtj^pw@WN%BsiJf#2W|mwZ$9V_U#%+(jg))B4Dy~ z|7+@>Gryp7F|R;l3!?0$RY`HpneuST+Yy645!|*D-Bfs?z}X(@pP+-`_19-AGHv*O z?-9@tp86v~pjR6gN3DdAmza7X50wVHV>k^oAs=;E9`zxQ0msg<~zS+ zb=PO~{-{SID)e6v2V(y1ko9Y0H|CoA*~!Sr{jkKlCO!^Ki*WUY8cLRDRENKPqBY;S z?Gnq%zesZL$w?GI+7NDV)d^+uUjr$77<-r6Y&AJ_Fsw%D1=pBPpFW*hL47iA86w-7 zhSheVgzLtA-m9F`x=60yIgd-DyET#h200tQUYvA0@6VYQpx~A z8*g;Uj0cII6V7^<4FC()?Y?^`z(?d(&9BK$!p=WRRgPhlM!*JwyZ0J*{mq6YAO%2U zE#zLGu-z1ks=y(u|DbxMwZvoN5%-(`9gk%60GxmD>7E43Ff%Nzo`Q%hKDzAF@skcp zw$eZf-pw7G4cMR-m+$nOyi+?I{?HOhpSbjD%a#?xs>T)8-bsT5S{qdtJMW6--G|SD z>w@!rf~U|Q`o>+H#bnH$GC@5iVdECB_G7~hO9d8V6*TOnpO=xSs~Y^ zPJkL*jEc5%(*?qLPx^{J()$fYb6uFckAiS1-Qt&1_3-4+o&2{{&o7bq;T{-v$Fnz| zEO7lx1|$FN%-2haO7tJ1DdbQF0kx0eiBVtx002WYnbH?r@M^-`AsA;pSN63oVg)?{ z*A7S^VU;i9c>;RyUk$(N<)>XAdbVNvP$Oo`vtAt%j+_KW=?dVi>W0Kc=~_7wJH|HD zHei`SmNioQx?;s8f`YzlDH@W1)ZwzpYQsstdJNOn;QBgJTZF%l#KGOshbxuAiMZv# z06#K5kn86nW%lh(+7X28KWo@ua0lC)DsO`D&0GP;BcjSoTlJ zv9~BW#c~_2UV;RLGwEo|*$BOy01ZjPx^*V02y|h{x&6LxRRKms*>1o2kc3^%n^dU~ zP?F4|Ch+;6WJjQN3%gl!=|p`tbjCe2SX1aA7Cp`-k%*5YK>v02xZrjV>En>Z7q1VT z3Eip`!feWNvnvOA5&n<0b>LYyY*xm2$HJNw{O>Y(oAnP+PzF{h%{hlKGw3y>p!FG8 z;|9o<^c_-yDfoWlj6|Bs*hMogG=dk;fP$6ume}XLGaMsDs7+TUL+LZ zWMZ!{?2V4$Um{Tu!wsZ)hsnS;c108@ro72g@dJC0gpQ_ekgVtgUSPwZRBNV#ryx2XE^Xv)ZIOP%oN?N z`a{J@L~vlR!((*dom$CWXxto}Spe&ziD(EY9LnJb{L;hZjhKqRH zrLA<5>NFW~`DaTRAU8Qeb^Vrfkz~4|^@)IgFoJ9YHIwHa=s{(#|j&APvu$CDom`j?wf*aub4pJrTam0d1Cl`yGpLcdC>c zqH-cQU4D1`s|>fMPySzZR-a>Y9Dy(m8NGV>yeAWKH4C!26(Q1DRMy2J`>v@QvP

{zsq|2uR0HDjscFH;)NT2*jyC_&C_)0m^bsCtea z|G5d%ouN20hJm_?K6p(rUmXy>=E!7cqf7@e#&hnj)sG!r3a|Yf>ch@03u-$GX1y;x z;2SVA!UB&+2^xVl?FtvW_Ha85Ss)VrILZWtqy#5QTH=5J00009WXJ#j0000000000 z000002%vxf079Rj000Rz$N&HV7Z3md2vhU`004n`W)J;nX7wycJwi&J)2SPP001kY zoK44Bl^}+V1Og^F54{s|D|B<6axGa_)*wD@>U^Eu$J8heOdPoo*qRz`R71IqLFPSe z<^~a67?_}iNa)R=Qkdkps)SYQ)7Nqdb|C?4u&~7z-$_Y7>#2)wC0z&Ca_+BHU z<+O7t>*uIzRr|eERS*N;m~(w<(f>*?CjM-3Fx;hTB4J~RSW&ze=0-To5s>Rw_O4aD zcwiYatkZq2H!igzg}N0PTMLARQc{gHIW^U1GOfY zMeFN!K0ClcDH@fANnHKmDAVIztkAtz&JqmtA;tGX{t`Fn*iFFjl26J$x=KoEz>7y9 z%GqXtj3XNWgKz$vprj+#>W83f+|assH_9@Ya&Jc9PktXj00YkPHSy~oCZprGl>2(b zS%qT$D@kemm*RAzI913g4hG3V&N%`Og(FGR(=EV@i0>r!yTTzyt@3mhlhZFQ*4?0D zI!_WZ3LAo5&B0$|uqp!~$p#U(lv%=kAR%}@jYS+sdpz0Hs5bq9@F+AD_= zJl4_7Xapc)qM17y#qoTxT2IUqj=#lOE*bHMf{|9_?|%_reQ$Sh1pMKMb`g1w)C{`R{68H z{s3fPVD?N3DpW0KTHdernntFWZW+Y_WHmlrz=jRf001GCt?TI=&Rs682#IFOfU>*J zl0CTI((;0pFwyCUimG(+=PMl7mDCkNzMXVyd${OkePH71L8C|bmMiCka-LMzK&ED@ zc?_FW>+jO%s}WLGOkw!+1R2R>)DE_{XfqCJNcnm6qe1B4zUmwI@W)M#7T=_!lK%Mo z9^t0Q79X?SW-=^{teA0HLnLFbJ#9o%00BfT+NItAd|{|Sng#^|eCP@J5N*nK)V&NJ z06+g_2@miXcT zFCjLPg~}HtumA~PJiV<%qw^D-9Lc#iS_`SqWH_84`+4xl$~BQ_zqH3HpuVzpB#MG?5Y75RG+vDqg%oc? z+FZQ-bP6L4SFkt&S1doKe0CmXP}0)#|)95Pnl4LAMVN~PLEm$ z$CnzYO8Xr-hm3#!#ykIF@a;KCF#|1mA?wlJil(b>aPm7PsS6~X*4?EzMbrKf2Z(7C z&c_LstOgm!%!;xJ4JKy16vH2$#uDZr1(#L^pxV-XmZ@gkEHy73v*JA?Tf$Ce&eE$x&&Z%+3>fhefh+Z>?I7pTXN2R(v< zm*RC;QHVL_6QdY2S;r1N*-pqyEU%j=mXAX8l`cB*#XQoQwaj_W`#JC3)xG5t0I5U& z02`d+<0|Dtbp25Q>uJ`L+f!k&bp1vb*QiTyrnkr0WB7^K?Nntr77kNtH!)oDya~}f zaCUrVXlVN4h-!Ctf{!czAFZ6n5f+P2bZ^$R?^7qGLs$^JkD1Sz^A7r&s5yjhk&O!!*sxWp3f6xfdL_r{a(i(JfekcCnBP z*r_0nPOAX1Mn)h0vIwp*76O?89Vp=+j!o(yQKb?pE!liVBSBu>uo^ekr((QA~~KAMh)n~Jh>9!*9U5CJE< zqEAJ*w-*-0DE=iUn!Vi+L*)oT+#YjtJKG@QNl9KWbH|R6oG>PfVN=X~?!rIR+7bMX zA*D-K|9ahljwC7nAIZJIVjVL_C&If<%Rytp^_fjheU z^LGw#gSHvy^A?2*!XsY8`X6XR;e+qca()CQOd?XxmIF->;1H;dJuj)xdh~fUOh`$; z$Kkd01G^74qC>suNcNSPBb+HKT%N3Wb<~#jw0uj7Ri50yEns#oEu@%vkm;;Smnq^e zJQ~=;X~T>_@UeDW`Bw1(_DJIL@1mGWd%qkSOS5)+^hVMd215vRkk^qKAlpx4*j$zM zvY_P9UTN-9dgS08nVDHrx0sAYYbQ6x@1AKGEM!`ho`>8DF*opJ>bjJi=@`r0t}|$Y zNwktyT>S06{+iO0P@=Hb`k*sXRR{#Y+G|sfs#Qh`u5CTpQL~)jo(O^i-IzKD(l4Nh zL2}z5lzQU|@{9cv_BdO>rok3#R+ZmW!~>@cX(2&gW=k&Xjh`=+%@=O`n)ygHuO*Y5 z6j#eK#jj##x&iJE%EjG!VC}W;4^WHe^l&k{73%dQAWI*`-~}FA0dZe;4D$rEGXg0AlSxQCoXw)Th z%63wkc&SxhzSFFmd4{FWyYN9EIq}i@l89;}iy{1nZ5f~@w2YGyNkYPy1;1d#9So9* zDR<0aJiPI5cH%=w{=%+cssfM*Kl;khX9UYQPXBhuY0<`Pc$#B2)#NMqY*R(SMx<6p zP7tgJY9J5yq zTvrV4k_x`t0pS;TRf)=R7(8*hoFXwsek$qBAT&5J%_-HGF%7N96n^iogN&jvz1Bah zV!@%#hNojyT8S|(g8o|;o*ky1WK;cDY0Vbba{#w}3B1Hn`2CGti}u-%AQHMDPNh9= zZR5FKF$I5|R=z!Rdb$f}Y%6_Ki)&=XEs}cOAb4$!Hss{yT#VmaJa)@=U%wQ)(Tip^ z#8jwY3@}%v2lCWccv$3VKH`^Bv5oN$!qi@4drT@P!pztzC2dhumVrdbFmRV8s@RVSL1wl{q0~5{kSfv9mr?$0mJ2 zFFYUQ6+l54Vb{Q|BPc}ol=F2vb$u?5#7;T-LXtF3Px&YSp6`}&(z(sFrMjVC@-VQ_ zxM@I{_)rjUeyy#c!$)A%37!w3Y5hwxohD7;>U-mS(sY|uHLd0RL-X|YJTJEiuk*oE z*r60m!=M#M7140}-_bWaepd{al$s3WHzR;NxP+&|?ZP>;NGRD@8(C93ls5j3#jZf3 z0ZEGTsQL_%_x`^5hi_N8i;=%q+QhR(-qrivcZG`%v%!*r;N@#0tTx~TOK5;NYBoTo zTEG}#i*V)57)ZjedHK|)tgW~Mi+$HpYc`CS- z(je(h_$-*ap&o3~x!n|RVAkCC@n<2jJ8L7{E_4lOWc)sBURe4wxpGi9ivR=5VEYq4 z%oP=UfrB?~LN!n<3D6YJ9=sHZx4nK(0z!ype~q{c^B3EIP9J$c6+&(gsn+Ws6Vhx3 z?n$HZwnWd>l8}g{t6YGF7EUPe*w31zyY}&9$}cOB9bU;k?-VKPc)r3$LLDDKY1ZF- z7f2}LNlgNV`p-`i;NOuTYo`3T@+0v*jz)D@&G=B<$GJ?MDSG!6^Z&x}uZd)$)qWcv z-#+9jtLosl{iC`ktc8_`>^oArQ)s|DY88`xX;QVd@Jlagi);!0gKjIk?AMavaRX+N zTs@j&M;jX}25)KLU{dQO+poE|wri@8B3@MFjsWw84h(~&TQ*?!!VHGXkr+)`S_Duo zDfTy-FoJUn!#&MhKC!~ec9N zpm=Np1#2Zo#% zaD+8FX-kKiM6rt3UCUhSd#qx1sRyH@SB}l5Tt{SV-Wla8Y>?WtZ!>lwtKy+gVM}d) zz6a!Hy5jKrrE!!ZU+1pg-?QLtLPM0c$I6&45I9?H^%M=CNJ*GEcMqiWUt!Neq-sd_IkA-UBh#bo z4hTBTV5Ob=^4Ha#{eQRWCvyWp^&=#F59gOQD`})1Nq*g#g$D->?b@Xm`cvKk<=4eJ zp(`=GS2bD`@QCQBRk-xYJ|b zkqdF8uT^R(%rC6A-WWVjXfO{)H|Cn>Uoy3cQpDx<z@-5i({N7&aD8Q9?E-@P3OmUI4Y}=Y8x#bo8b~gS_T~`{?Z5=IJQT2j1IC zv?tbR9DgX5Q(&j3-(LPW`-wMeaTl>nm`QC9emO6cJq{Z5{615MSWeZ;x>9=vHGy0! zo$l=bWQ1mps`_QfRvrFs&J+G<>?T`sfzm!gn15nXE~=ce+Z^Iopee2jO-y|z&Q%&R zAv!q022c$>$M}e^;-O)VW>rf;y=88>k=>t~u)Dkj^8mqI(FcZ(4sm6bA{44J`@m@`Uh(mZ>yy^Fs#| zAQGV1;WX4s!0Wj2c#yHkZDK0~2_u(yc9as~(Y9Q(@)XgKuBc!(tDo>lJ8G$@$ua9$ zbty`6pH$cpx;WC{zwnZaC_~=9P*X6Ej=mBkw6Qom(@^#?V0qTkIwL*2_U$sS8A>W(-$;-A{OBzAQ z)pKSvv?_jFH_Sha*KSeUeg&KyK)z~pm%+eAQZ5QEJ|_z!_CV;)uM zv_&lS$zIKQZCb}Gok1AN*{jv@`e?H=yEGd5!7R6IbZ`Pd&dK|MR;RU8nfO!$MezK! z+~OPU5FQF7G zFC7DDWBl=RX_F_CdMuA=3(QdwZV82br9M^u?tYEQ&cZZ}1zh4W1h|&Bp@buLoWL|` zt0y*!0(j|4@2pN-k4ww}^I|pP?$DN_{n~RZ2+Ee=MQ>C_mRrbmlUkkjb3F@m)u!&b zI7mR@-@{!kt5(FJRm+sgRMTs)J=D>a>gRX;rg*p^Qv)0&BM^)!2wZipVXoD|H8C5& z{iQSd7?g*s#*czJ)ac6rm;=e+6eC^=x2S5WqY^*M%5BhOr=9c%L`mhl8pWJ$ zb$2CP2Cszxr}?KWaD!ONcUFuIvqN_r&U4KydKDdd#Nu$@90GBK$?`+{r5p=#z*Zk@ zL)wM)bag{DmfjHiwagk0vpBtQ2LZRMmh^9=l*zmEs~QJ_JnBU;>rZX*aHBbh`3)^8 zA6C=boC!epAa!3aa0aiQ@PaHGE21OY69~1LYYjty-dXe8A{Lxg8~R{;cw2Ne}}~W?@Xu;W{{a>0)~LgBG`1 z&Y-6qbwR6F`jRf_gA!M^LX`dr-&gs}WSOED(S#*h8*W&5UcRmn*wcv>rvDkx@8X0M zP0f6XWpq6DW9Nhxx&sc1PwC$SX3j6#cavZdOev2gxbozAl0C$>a?uzc zzTkMKnW8<`PaZ(&j&^(VH${ex+8PRoY2M@Dcf^d}A4)KmITzm^QScujGsAc}tS_p( zHN#4uYeApPFl>$C8z3mb*aS=*4E@b50Ng)S`hmAU3JRh3S*5zcemV?~NeDiq<#Be! zD2W;EhBPGKWjOI+y{4lO()i%4ESud3rQfA7eLAzQnoollYT&iX=|w}{iAH8e(8D{6R>y$Z%RI#toNbx}*EcE>G^qXVsB*zh>mz?vSP zfJObW5YGLk=DJ8Kt1tgTcnCv*r5&;W2--aCOcUQFbfL@Pw74tQwoQIyYp(TyF_tcF z+aPNCg(x#J-IKNiE04`yP5EGFOz(ebDm>}w3Y-*EBdI~VnnhZU?Kc!+p3lC>k@QL8 z6aedSQDq6MmcV_ukJB z2IZ#@q=s$R5^6ny!#StB)-u z(4X=5tleN2@g6J?oieM9+d<`3haXksrP2@-m{v5rA{?Bw*Zr_j&A_FsWw!Ey~1h+aXoxRF-$~jIw?_VMg<`y z>-xxhL+eHVKpFIj+q`%MDH5l6W>j@K+8jr}LL(5VGMRc8#mM4mY5eGh!@?~+xXsXrit61AD+_3^V z2g*d*V$F>I+)zVX2jh~?PYFF4QF#e;>S~EIKa`xRzOXrPZYY3v zL#uzO9I_*wx04)Q72lB1f<=p8PlY%DRQtAiNVXDB$PawvQs%#w|Lb|05eO=IkuQr)C4x%!E*J5Q_J}P|E!I?v&7m z(@7BcvE(bp;VY^D4fe@X-idGyIk;QOLF(JbJREXWDi3q`Z%2?dIu5DRIXx8&`-<{W zcOh7UUgqP8H4f`mcXB{mB2f5RZu;9tKM*2+wKA&7074%uaL8R?NgLHxfFDz4ZX=o9 zz79cI^3q|Wu=Uye=^KGScxd9tSXjV5%P~wxk6&T@5bVF6Jf*56K)XRgCqat_f!gxX zP_i9f5#lRphX&1$^VSzppP<@*&pToN{+g62C0ot~Z$-MZGl?2c#5RBl#m|Q_Fn^Q> zlf~7|>#QGcT{OL_r)uP+?%<&qday;Nq)@Q$7-Wv}0t=m0W8y#thQBL8pUrftlb5EK zaPE@hCno$4ztL9r%_a2?Z_0eI&vn~^C^c0xO5z_I17GfczMs+QbL@4x8}=?(SfqHE zxE)Y4OV%4V=|OZ{&S`HqHyI`{II>m?GZS$zi1H7wSVC}tVD~eo=2IANO54xbrpQ2( zU9;?MlEeW%9h!uA$eKh-hH2|ct(gOgu8E*oE5{mCK=C2o&Qhr|?ILW=8u^=)d>Z%f zeft3xvts>$SC)Md@4cx7r33s(2UYzK{lHWo%V6ylcr_wA5RpXZ}$4)@kDZwo~$BD*8(ftCcc0ly8gYx@$amcikk^BaP*aK@q^wA(j zU+y`c{-@WN1;8SxRVeA9Jfpwhaa>Y~Ga#n(6zKQR<)iYkZqgo$lvx|h8(CPkRC1nM#C^<;c|VQwfpj_%u|Lce@RUt`gKaHY@;yeWnbl}-hiZ-5~WTk`#8es>+oGY1mNq&$4OZTzvKKT~foP)MYO1xbPMp%kTua=JQ6X9IR_XR->RCFKkHXXy|V;!-rp z{8uuJ6Xj_bfNf4ieFBqGgO{c8)sW zuM%PMvQ^6226hQ-&1!83U40+i*es<+%>2SlGZK@m(r;JDM@VCG7D@JV)3#^k+a8K2 ztADKe<|pu(d0b!_6@D9+MWj36UTc+dIB&44S_I^`VzV{Sc@@?^2b71r>`> z{QU&a`k9VYcjs#rQ?-R~nK?>H_enRJB8@O*{hgznzSPxQKa{*`)ZH7`O&PEWk!Y4| zXbBN@%HAEIwGacSj!lroa1iju*A3T_t)>K0I=8u^{EYruZn0k&AjX|UD#&twK<(K|6>{)hAHIKyb)kWSdzy;u zu&VxRHXGq{^;dcVC?zA)5TJzxxmx$ihv1HVNerdvWHu^Rouru_HMQ+^z{aCwp5WQksD@|GVikt*;WW7HYZ$TY-NKR1mi6OE3 zHt6vcWpiJm~Z8MjkSoglDXcx{czqOkhL~(}alP-Tfb$Kvw_K zGC??u^Imi-K+@<6`_1OjGYv{S(z!$-Qcw;(sjzxPxuxpING}_a9bi2TKi1zW;o}3# z3d_`fMf`a}(yn(;EF(g&TACjjHi+3RV ztsiF#0favxu)fX)x6ERqGb`$g|slvL; z>=^c7-bA!}{dnPm%67e3e-k;H986az1$ci7$d5TYgn6ZdR$>}RIU2x-#xo7e=!X`J zMY7JJtwC2}+{Voz4!Y{6C^nu?I0~m9Ki%;(zf|iC+G#G8Xq)Njv5!82(MgyD-v?cK z&AiT(1*U9eoB7HMO%ZS@_GSGt*KFItsD|uNKxVehXg~ItQ9`@+kx=Z|Tj}O}%p>*G z3BO#r}cUz%TfaB1Hc_ zY2ZYpSEHjU?|HaP`90|%FZ0C$_EzkXV4#lhp-5g>;o&MT4G?Fcp9V%TZYeOyZnZ;M zm5f2OMFJmYTfORv?QIZ%Sn^>j4sYKkM((OP^F1$YInRxfWEv=V_S*1h?ptSNQ(3(# z`xkzms%G7Q4Ua#xSC1D1g5M@;LyD6(Yl|r<(a4ACVkNSY+85&w=-0S#Q(qDEEf6fo zQc>CTKU%U5QF0QgU}x@Xrw%gk$`F9tB8YozS#gLM~VMD%gBuyfJwi) zZBg=N(9*R6WPnmNkzrXRZy9_k6D|VkFgI!j)J>c zWqPE<5X<=B!ccDbpBW#a6psbOipcWWkLHK7-6ukNX=Hm5p{^WI$`Ta!3Nr=vEjpxLyHRZ*c+VS!G76~>ld5oSfe>%aG zFPt)!b%{RK{j(eS4AoLZWAEk~?Ku)N*qsiNBqq?m(6TN2b}&7%WY9*Q2&M&2YuI_i zy#LIASxm>yiYAv3KzI;FNPAl5%foHyO7=xSb8HOGj4_Np9ooNUY_7C->_d$splGF{ zVH20}Ozwy|omseBZe_#{cO!*i!>C9;CPv47M@{WAg%ZIF#kyXvoT-lL39`%O;4PaZLd~UD9mC?05_o zkosZEjxOr`zPc7^Gx`P{Ev{mo3Mc?I25(_(Ts2X~?P27e!s zi9Mt=WT{BjwYDm?DONPtu)!24#lqf?(MYMc=~@bK&E_J^gmF6f{T7w=SnQVoRR+Q5 zQ`kD}ZEHdqjFhhNyGmc73}MH)a!4EKji@7vUO+Ww*nEkU=i+LyHa@$0V3fzraIh)M z%2nYeuLN)&Ep!G@C`-q?=P9L)VOuL`(eEV^7+;^oX5|a}7dof}(cg+e(aqEbdehpi} zeNetkb#v$hd9O;=X3eF*|7qY6U&|bf)@0N)Qd&<&;BWtapIx9|q&f6V*g^hEy-JlE zp`lYJC`f~5QH|3NYE`psftrRby9%9pFS%scjCBEs>Kuo?k>ja$W972^!R2bIAc%8X zSHx7@-<;}@&u3u}DCn%-NYU|T=G3y9CU%);ly?@*5|3z%&~@TVY_9yCuC5uZcSDsUjHkRiC1rzIf;Acy0c$ zlP>oRzZ6r8JARJ9vco>}JLp!5@Bt|Nd}P2>zyL|3P{8wZq<;86?VyWTS~cI(?AX8p z2=s_i@|?mI)hYLNf)7qV`G%<~BryZ%?;K*B=(nah6V@^gfe@EfN25Zn%ryNz3ZAjw zX@aD})z)SgQ5|DWZmZgrNUjKflG8vXRvmQ?q72vH@T|mfQ3Ax1cdU?v#?Fy9$G$$O zhb=O)c`(f<)GEmD>x!CxDED^I9jl2gzUpO0%$9Iw6|^&inaOIbnb=laR$p&vO=h_! zxr<>oMMs7Bk{frve(t5PRc#ucJBBCH=k8**mq=TlEPkM_d8!sPf!>OXkVSHFwWMG2 zS*cRUb!P<|DJNlW2xFAL$BM2?xz$u}Vtp-9G=_otqmbiI8j}-Ml7aqvVGmjvgGCY7 zkj+p5#^!-+hx$Yq3K9`}fvZYFkeDCWMETrcadsNXD(Ts#C1rN)D~Y99JdqRMKU!DM zu3`G1PtQuy=5!HSmd3i_oLr%>QPz(FaVxJ@w_OBI?CCSLvlU;W)tS2@KmlhM*H9F0 z!hwjWBlxc~6}-I%*aZcEY0in1voV=BV|-C3HaE;cZhBJB>;$7lEr8nW>r2rcVN({b z9wP1wEuN=_ZMx_`+ixjT^wTsRu)kf`OtFUe(EvtZQU01 zPdW#w1z}J0IJ&*2m-J#6miLo$sg1U?Zh8+D zkD6*cB(Bq;q`}H-ld?cDrSxA=eU$qE00000000Q4C60ZD7t@tA##X)MAS?UNbqp+Rbx2hD;Y`iEFqF*$Skz2n{EJe zsUD=QfCJyRGBEu~HrO60RLrpf)5V-(vHjEAYfa=BKU^1zsE<~|sk2am$ zVgOh(*>i&FU^dMIFdaZYZ|`9`3CP>N#tvYajO2IQ_jxbGSh^z&74s~?Nf;%QORh1* zX6g`^`sF{h4@^V%w46VZuo{ta6LVU?vj`8-Lc;lvPM<06#fM|Kbf#%&)5@^r`RlyB zD!r%1Un4zwKC@*Mb{>lC9{KG$bH{B8Trdy{fHbDNJoJj!|L2$w<3WyNBgXB(tQJJC zf>-a4pJ)HWdbH{pv0JLa^U$%L=={SJIYmp3-9)0dqDh+dmaT}{W{HNZ=}@&SBe-<( z*3WdIpwz>>!GMUkDfefw%FZSs6y;zrNNur0(_W;iJB*IO2LndWGDhuI^HhV0=e|0m z)7BMNxOT@bARZ?jv-WknFQY%3m*U}1!oV~*MEA4<$ZKoh`{;H@_pqo9jB1nGT`&~m zV=tujgW61cA86yxrUBK(iP>!a9C2l`=)7JzQf?DlmQHNtw<^Eld(_i9>Ivb1nTow4 zu|97Z)Ek$JNJySW4SO8>3YZxKfw&TCxQnMb&qS%YB7rvvWlH7svp3OG5#vJy$=UIO zc*Akz1>NqlA-kRM`Y8`x8PsN-UhV)zn2glD6skh^jLVQ~Va#uy-#l&)Q0Fc`y4Gx4 zoU^zC7r}wWYXU*HaUnI_=FYeeKo;_?wz>}wcClhJ?^s;eO#zYq&6_nFx7aAK*g@%A zFwa_x&Gvksdj_&{*T=!i!}lNP+NMJZtSdE0b%)Z=FhtL^1uVx)j9hQS-aWzf3aDaJ zQsCK<@!)?c-7$6PG$x2-efpd#-{v81Qz={@T4xn~<&U(60s*Y8-z6W~FYO7Pkt}CW z`uOesk0yEptIE1Q;=>EU0pMDCWge6B@aimnhVD=pLz3$2g_ivZG?l|304WwGp!xfP z0000AD7+#zM9|fY2d}A!0000IK6O3aKmY&$00000sCGhNRyG?Q{Ui|*(4jlw!A{Gv zJtM(Q=>`A;v?21h?m7Z6ea8U1`VcFXruAA{s+BWpJrJj!r`v%NhW$tC7B}C<0|7fN zH$q=~Prv9R;05XuM>(L&1W1X=vhc&RA3E-Bb;k&~7E0-#S{$JMI61!+^IDthMY^NR zUh)_qa)S2k?{ISh`@d=D6k>>ee9HLxW(5Z_<3B9M+{3@0hGvA{DaIQfRt&vY1FP5z z1RTxMTWgI#ga->4FfM*Wl~}`!^2<;2rZ1I;{FA{FBOu2462_lg>^5dUfe2GE5~Cw{ z1D#D4{TH0t*J2ZbhrhPc@Cbb}fIAI143wMH5^h(cVcaF0PZbg~ zM8B--Y9Ybx{J4kyKc{ElM5r|&L#X34*m1LUF=9o8;4M@@i*Yhe+P}y&i!yT+eRA|k zOMqdGZ<3@)3UzXPQ6+VJ=L3YPs4OmivxVq=z0t=Jl5NnQOdp-`I#~P9xP^gse4>%r zZN`&=WSO>dm{wu5>wBF01rxswtDY8cf0!z4^$3yoruLbZdqcAHaGdBIp8VUZ zCIMX@IM{!{T!ZZ3;~YyNrTo(`C{zMUIad@ zA;PXKu%zOsCDb9DHgMG<_WMfkpw8`RMVIlio~SpXrT9QUyJZOGN2!xU(OX`+MDm1Q z)hk^%E=8r+7D2Gnw<3^9Hl?&ux~75oH7IGGKYPMHGCW%9xv_>n$zaw7V+l5=OITtq z6MVgB!P#pIQ0D~W=5BZNQ;S3x+|%knyxPRWjLa+I4mzRu(%>Lm3$TmkGtyng0F9cO z*8sb$SzjNNctH_gk64;6k@2AsGSPk@md0#xlPXB?2{|YNMfDR&Z)Sn4$eT@T#d~{X z1{Nh?)y%t{M60j$1c+7X!Ytd}hE4ZmXd~b7n%$A4kmi)Bi*2o4l~n3x`uDiak@Ij+ z9zRe$Coj$PNc?EA#)^zgnqL9kSbw`KVLWLqM+GkMNFbNedt?Cg9kn-n{Z4j8G>0UE zPu19~fu^m?He0pLMqj8H++|;$pj0iql3Rh*7*SEwSGoq%_!!79=nbOLvM+a(Ld8>d zq*x2@JuY1O=HOu;XlU8nXTp7~2Xw^MUxLicr9MpB8b=>2zdNw549&;@ps$Md2v zf^glJguV(qN(>v#^K@Vx`J9WpTNnYw)rFD2aD# zHu8MZPBRb9Uja#0DbawUTBy`lPTH(*=~63J^H>Z*nE|}mXPTvk^ zX@mhy)|K6)` z2P3h0P6Fcj>Ea!O%Lur}SWlzhQEH@Kk5(J;y?cR%SS0jhq_=d_ z4wq3;lz}hVMtNN!nKp^{MUfs6@G)0}g(@aY_;?476H7SfAto$oryZ~v?2S}}K)gc) z6BR7zTJ6m$Ll>|CJnk}{8fp6+S{bQRn_*S{x}J(pa}dV=v#bETiwjD| zU;m6;c(i$RJj2t~Gzp2B74_Uxy>=@!53zejW|EvXWpCsW>e4|E{n4)CK+Jf$QFA*w zXZ6t;T9dZUup$x33+0H5;aUoo46ykX`)@{kMSfka4E{}gk6A`^v1|?D5nY$3c(fD4 z+U^zF>$_;klu8_B0@f`-t57LrO~Ni>&dv{t1Gu}n+4}U6b_zhqJbJUSz(l(K$RNk` zeC$^P&N1|%)DVEyDIxrrX))Ctv;We@iwRLr%QUX^oiWCZ}+>`)z{Q+OU439M<5b|ow9DEohPXZ>~ zEtsl_@`}T9??;9$U8X$ZCslxJr6x1qb$s36F?*n;R;P*H>2{*9pwRKS%cqEH0!QDE z|9b778lOf_|CZ>|N65kfgh1jIyKET|jTdCSa@yb_(wCpP`V{H=C8=K9aNv_2l@&s4 z1XPfu*>VXU18Eb?lm4ImtYZ*MVjt5!35UB}50b+LaMd>&c@PCqLG;2p8RR>tyaYhu zQn0nEh~2^9#PKYoR&+V4Q+iR3=|3C6&Yfv;B}(y$rJ-}U)7uFBU&{B^os#j#UhHk8 znIgF})bc1J+NbBFs%!0yL*i=Cs-~uomVHIQ;sFazb`khf|=+U22 zj6mRf57wNl^IZSaHcs1twn%G@8&U=-$*x_s`Kat09%2-Yajb-G(oXL8jh8nt*#cgf zzN~~F)Iv?F<6`Q!tK;Z)Ajd8-xKtu8?ta-=1!Vqa=|KYRTjigC{~eh=Vp^M6(@sW5 zk<``~CJOvhi(F){xSp`GUhg5}8x{n*A+&@&MbRmqO@cId?<<8Ec5y&q0-5eId8xM5 zq@W_kb~LXtTAkEbcA|k9OE~UsY@|%Z?-}4bVA0KhgTR|)52AZ=4F~QZvUf3J&l=Nv zDOWsUe-UyQS;AS&%m~gnyD}iAyb?e9^f5q$Kcw}>QTkyguXO%4LUk49GTytSdQZdI zv6Kkjv+t0F?nd_T9MO&OfIE75K%C^mWt?cOZR>;XG@ATeUP=c;`A4D|z)-?A#e5zK z)?x{>yI0Ocd$vK9l{(cHlo^=Bt9{9%sVWz(LFUihIA)7}r3o1KxS(7EG2e;;##fxV zd%{)~)FPKrGCk797wnhjR@5rVYi^Wy%reaYF41xVC#L?o8nTF^7_wdp{EBx!WKZO} ztG}`MU@-(IK_}S@23x?mx*k!OGiK>cR|otns2xSi;_t5#Y{ZC4Iy@ayl5&@Ot&-fY zAVZdSy9xp#XbW+$y$M#;U8VCd&)ZTc8G)&!8O~<4~NHeqmt;F@=ik~jOa-gKBpA}vX2SuE#3jbj49Xp0;mwd_wZibXk z!n7QCg$>HY*Da_Xle`ECoTnQ$jlAFy1kqcTQ|>%z78(d70%mgnH2GsMel%0uFWNq5 zAc%;9CMKauIZKezy267G9ktsENCv|e# z&#{*E<`yOzv5vUUjQ#}@R^V+kh;J~vWSdY+H%&UFP&#On*pxZARd=9YlHSruzsl%q zmiz{5I0*X-wJ%X_D_LP%LEmTR-e9UP`M7^6Uv9DgR$#C$-5kvD%0>+(LW6j5mOpAN z!9W1eV&n|acc%l+K9*Pc1pr?B^u4peu#wG~kV)nEMAe7A54x00DQ8x$A-#CkAsQPr z!1#-izEf_+E!FR*T7b6F5g_ncTZ}-QF28zC0XhE>nik{A+B$|b7FwZ0C6M!Wxuv&Z zg~L<@Gzl4eafET2SDi+qvHF0X-&w4g<+U6g93r#RL?<-=Ie=xxkU-P`dS02J00001 z$yyNxc?=@)McH9%p#=7LK7y(jYFMX>_tPdm2@3(|r!qVHTxRqqzz zE0}MPd=4m7aQ z0(3jaNC#!J&|;T~c?T4P+$0Um4#+*AxTJAVeEjWnK&DwIst;H{);F1z` z>;MLGZ(Anxc?;E8sQC{SZ4?^7??(I328K?v@RgXg@2CuPy1Y0HN z@fBR*cvy5HI(=Ozu`z#_YW2AZkcu2jvm?v%tATrp){Nff@NeC}?Z~$?YT#s-Tksqa z?Lskcp7q@(#RTd_T|Or83Rnb*N(w2wlwdeJv~g{$NJi6e8vXxz3Op+noz`HhAc?uDi>f#a~-p7#yvUj~;SlDg2g z`5m|lgbdZUaw~v@Ag7)~%F7~S_1E%T!wmJDSm!4dxLaRl?}zRLQX5b94tTC&e zqdLYH9L|t@=ygzp$)-ks2 zCxU%~D4Y(NZ1EQ{%46G6DeIiyI}y1A?o+VM>(5E6IlYVc1sq2$LSyE~&Rr3Tb>lWw zu9S2djIa-}+-X8&ds?QPN@qZTpfM9 zUxXqfUfaqpKL_c#r7m7Tcjc=MtWPI#WI2R~-;3EXGM`P?XsgM^#s*g>G(=i777~Y5 zhYZzG`lZPkirX5*-M^hFUuQ1hmeLAn0S=C zVweXgFmSUd6yi?7jhnhjuQOZrE-SD_Jlx$kO%r(k%;BSoRQ!h-QU^bMBp*&c9pMrz zy$1*x732yddPr)+M$HkE9sh=|dI1F=_e|sGGcwanuC(MWb#jTCE|jA~0tUAiNq0+&hKpZFSfi^*^P+NOreo;mYl9 zEHI5#8?<@&O-3}M+xFWk$&l;No9LqS=w%JG{q64(FW?}l0k3U^f42vOc|WC-$MfJ`}LHy;-$ z6`mUCy`c@p!nK+YZ4Ts5h~L&mM!rPG)hQPjG(F!WT-jSpAT9WtK|aFKm2R9!0DqN6 z=y-*ZtBSk5fWe7xjZF00*0O8$=xV|P_{txr-G&@r)z+1D?LU$qvV$#pR`9@GRK#CG z5?_>5EV7KHpk8kprDA}RC{7SIZ{I74H#{{u#)nMX)D&Y&hq5>VB0L#?C@PLhrHAUi z3*sI;PNRM{%A;JXWv;Jj53`0*4xTJjYh!l1Z3#gGnJJ5WKACscB(M#A1z*&2gXvgj z=@t|Y3x(ZhutOjr&X2R-JvMDUZmhUwe$kouCqQ&2>3!gtXT`{ zl^gI&Y?7x%QWoR{*g-vy1BeS%!aSZkXH9{7=v3n$PYt+RAr*BdLpFQOxjkBPuKZgz zYy0AVLLYT1Ua0I?W8wpk^DTq$+sEFEswZGN2kwvSM9|s&n9F8R=^o(Q4<|>XnFxfV zGmxj(%A6i1O86$7HA#eq`q=XAb?FK88{HJS6DpA6bLR zpYZOI&PKC=IqXtqZl)RE$zSnDs|%HXQETDx?i+#zvvQQLM*u)&BBzZ}w`k4f*iowj zXZAS}KIC?CwU%cMv5eJ;m6CgDssA|&lf!j)-NikM#Uxi#YS#CCduH4_&BejVi?i#Q{@vHN zuJ~BO+xJnaWw4BgQ$~U}x6$Ja$~`Ncrn9t!_ti>09Xdf<{v;|rPfe2m!E+-1#j-ON zFdcB}NjS+U0^`UfGv6q9Yi6kFFdL#$oc zn4UBSa{VxEt^TvsFz{h(|KwzsK)`fjyq>M8>2PQLiMsQ^w^hN&xn5b9AVuc$cxfPi zB<3VBiADBha!5MQ*D^(wE%Y0u9j`zUM8j20l0g4h-fpCuO&z}gwQQEWH#|?vORG2I zE3X5ucw|?;fS6tmN7^a-o<3mX-|7s{?9dg4VHF~)386s1I!UKK$%2})%9aK@%A$1D zQ0~xyA2;9#ZKNG;0uueVWLC|8xY<%LeOAB9kzk99?{=W{a$oX=fZJ8#w3;%7=u}4%eg9XN9hNYC|r1FCEq@~1H)ub~^uhr%&c{T@S_cL%f z%^bT6Jcr2~(qlha^k*@}aY=ToB7Bti2Mqdy_>fGB#JwEh-W2}gh#G02*~*Zx8GoUgsh6^RZMGf5eOLQK{ze^Gfo}`{G8r?a6^) zt2HNWW0Eek9N|9XPb^8%Rp1nJR5`3=z=>*K_s}9Tgza6-x>3V5r?M)WK`QR37UVzY zl|MiWDFB}cx3j{Onlr;lBsfl^*)cPwz8&T{)D@&J{SKN@qZkzb3grOAfLmlg+Im!N z7r~3nBd9GR;dPI1@s_Wval<$BXzKb4b#JhYXUr4A;?d}UaU1;-67Z=B&N+Mh2Y`+) z(_+iss}5|6)tO0VDeSo0Uj*3bHOPu*Kwt>p*X57lPDbLD3m_7n%$RL_CG zJ*UFsj^fxA7bVC9Cz_E5^?ZRH<~7nXPxhWO;D@T)WovIx7+x*f$_!p23Cj1Ta^&si z1K%cbPbexFV8AH$25axJGMghlF-0{KRq52&7gmzG_&mQWx=%vu`4oP$IXf{s&j^(x z{^5YCdq=hpOrY-P2M?DiAH_f@hDt4F@-j0tYv4VX9spWVZDs={ijITLXN&a`YDtal z7e>i+q?5Y)?cj;1KJNhG&QbnqGrfzI-ag>*sSTDfYV1@BO(_cdvt1(qtUyDu_c+$0 zKreR5K$kqPZ{<=V`DO7;3w@^zhtie7)|KtkLOe!UNQe*W7;Kt9p7KdR*kil&0Vrv~ zWU(&46%Du39kE8n98u4%9Z%Bb@<%N5AyTmc5AZ;WHrKi~8ZnakLhN2mdy@l2j{Moy zjLhMX(Mx`kvn+s%sDo%Xr{5F7(KZXq0>FAJvA`}nIw)&AM%|~57h3qQ%jSdd;}*Go z%a{9%X2mo7JseB9#q-~1iu7>v(e`GG)a?3GewS)TZP4@_%zPXFhRvug+g!a3y_v6# zxjP_acr|jo?B}5=u~48Bw2dJGeS^EY6O`E}0zd4hSsx&Z{i#qZ=sV^I;x4p$xx#Sx zH2+5D{(K3^4ChLxKNuaPI;TIAHAt`rjcNVLWrdXc#* zs|9HG6qER;Kvtbc<)YHSqV*0CmKB+Us^%mx{N#KEs3zJ=v5+CDsH3y9)&pHngl+FQ zaauGL7WhwPYtbQV3_4SC2Jh0yFcNHJak~NA(ZSWY2NAHvw$-wHz)O8k9TGF>;i7_B zeA3k$SQH)$PUEFo++7Q|>Vu@wk8<0<K%jyXLrQ+v<%5 zv^8f^aS!qPOYzd>X{@?;&xRQKUw#f7!mS4j9{fU~zL|_%_x@|t!8os z6Fr!o)){$pdA{2tVYC9i>T+WR?0dA7Gx%6e&V}rDq5_^kp~1Bboe^aIb^4DUOoE%dib$rpdMBh1o~|h-(~E zz~G^(kPUZy5U&nLi*j2|JVQ@8tjIp`cW&j%EufvyYycMHn?xx3rWp6LkV1nEQ-9Z< zHk*ujDI)zkqaNj9b3Xxy442r+U8a}79r#N!CZlGcG{l)YU>3x)hK!oSmv>(?Neiev zl*2tN4SFtk8+7HyWJNSm})t0)xHph<9e2Nr8PVFC(iBc)1@PzAa?z zwQuRA_IA^8LMI?x4f3ZVH~5-&cfABFoy$6yG$`N=^4l9ky)`Wu$y-z?A?KR>U`OKa zKIkT-(2M*ltny_Mx#VI+7xakmLmV|%dQL>rvtE)~>DwAb{I8)fEPm!FUyF)NFIIj8 zYv9wKEyfIYBa{!pO1a=VrLCZy$#^MVPNTsKZ|_@04%!9Kgd_Nsh0m&MBtCqO6kF5b z{)UqDvYoBhCzhe-*DhicEH)sO4r-cF$}S84Zp*Whla4$y#$j^fRKQQ}4AJ$>T; zgKCCMQ_%cAHaKpugkbCyV!&gQ+ElG)zmvFGO+S`zNmg?CV*ylU%WAZrqTWBD2U1r_ zBV!t7g(P~?`_ob}{$fMkQ?MCp*U5vucHkFE(QgogAioa$ip9%FvRWmQBY>xaLY$gmwy}2?q2vTn z5V{rG-NKfT@;)%X{HLzk=Y7D6iKCHy;u-wZnDi$2Aq~+pX>>pD8bj3@6>Eb?_^}s; z6pg4_Vb~4c1T;;`)%mXAoi?ShOW<@6?cEK!(ehr9y<5}LD<5RCc;@o$bzz@cet*1j zA=3xX%~){EWZwDwYT7F)Z1jP1nrpPcB?O#ZczyAolx=~|TCU@vZOFf(i@udNZ+F-5 zr$1MyQOpz12X{t(zKi<2r&8Wmd<1_hiBF7N!}JK04O$e?k~p8mWiFmq%^P+1yC;hx zN98iAAd5}MN`oCl^G0%hxGxaeXvOrNh;++E~tHFouNfzR&MpEh1jKH>He+1__ z4!K66PXItlA046eNTB;M9_@_ErREMc@GMzGQ_jG}5*c^IR-)n8)<>USIh^Hj^*JkcyGbn@Pa*;?JL zw&}_2=mC52*iM+#Jfqf5PGY=jr$QV0>04NTnxi6Ct;}gIBP4@(-qiPk^KZVvL)10l zLST@+4VVS;Z_+J~A>I08!6->MLz8ki+jU}a)P8GeX*I^Mt{{l(zhLjBPqQaElPwSN z^>6m)ju0muHiS^FFpLF}ZDg(l3Xyo&3A-&H+dSvs{WlvoRIq8xSTW}s4n`-eGZPm_ zktL$}F|Yv#&vC9lKg^Ct_eN^~s==HzOlX(oxrqR&_dxhF_rEJ(xKw8|a5&9Lsmuqg zPWST-2q`f z+fiUf>5ku_n3!h&@kepI`vzFx?JMveQA`Iz>I*#$r;fF#>v|0BN%|UQW z5@JKI9&W6!$GX(hTn}BgcwY6FEnM!{ z0W_t2Cs*E7&C*;Su#L^KIigIg6uCs^Ta(<(e)d6HK4Y8#2P$iP=XssXv92<4Ko|bV zPMCkEV)`$)mhg(peW)x_Zpyb*0rUT%+LE40REkJR=uC}KMbxu?8DN-(n82m8MWhoJ}6mFz97K(a38P-W4@HHD~35rH{3#UL_?pu0@UTi@`5YCtiNU8!k# zvTq@Rohvo+w8*|9$wZn(@ep|Q7gdkL=(6-|OJCQ2%H^febQ!+3Fu08?s8jp&bx9Y3 z(zxE58B^fK{bjYhlJZaxC;`n7 z{9dX&gR^3c(z5Xm3OTX6nBg+lEbQ(Xj>|Qs;_JXftq{HHHd-b z@vBF1xi*Lt-ssH_U=Kdq9V>LcxNbK)^)dw`aTk0{wV~PKo(EYq7?SIzZA-GZgyFTC z8s^Op+cq1fG-OWmcXoyR9l{uWaBy3OCw&R3(niu-BuEFnpVS4z7Cp$)!>cwmI)M%r z_v3U5`f7i4jCB{qlfk8}GvH?0P4=PY6jOjN-e-N%_?|tg94QN|e;EqD7Jv-klHU{i z&$zWwpa>B7zJS7!m z!XMmh!TLNbZCY8xOv?l| z;#u9j)*li|K2r}sh21#Lo>gE-zo6OJ73E6(n!(z6WTTXy8r%y3;h(|oT>(j;2P@%G zde{qmrtozI1Z?u*K(}y8_%{N?q&TCj=kQ0y$xa-hhaXY>Ncv$ZkO$j%>QF%gpCqu= z?9}jRg3d2BA zrTv@u7WEhK%;w9!0wEA0NgoJyjA6dMUtVY_0~LYYNLT2!7P{$Fu{Jdw2Aj7Q)_x@l zn0Z1>DGprHTCnpNK@Hk15aWJRrw(S}t3$l>RpW)Z`Zc_kC?@cV@cKElx>Jh0Pw-Jr#+%#NR`v{v>N9Gv5(2m4DmrnYqF2%kv%8 zBxFuN^RRmq)V&UZ2mrs^br$**9jf3>Dex7{ODB*R2-rzC1kJk6&>=uyyj$|@hy73` zx#n}v33cJ2j5C?5fh|v_E3WXt7N;6>wJD-aqbZ(+Md7dmEJhfD-g<|BY_?8o<#kiG zuZU~W!|v?(u*Vmpr?8uH)969lu2qG687H?6u9a?y4VkHG^^-lDm!6+xDl21r+r8}u z4UqWa9=eCUWPYY#(d?t)n~%gKfM(_NE|Yc&4CmKI)m2C=XVoKSlS;Lcas4Y&~JC;vQb=>iyuxk&Noe_ul6DZhJ zxDbpU7ptifQu^`pIG+&SH5kaZt1iTBoCje-=1}392EfAUZiOvx3tRMe#XU_G36K9` zxyo9y0K0W%MVTMACCg=}2yZ`pS&puQ2E|5#{*mP69yiqzRRW~ZqNN?jZT;rm%I*M4 zDX@t|_s}QXdlHbM=7q27Y=ZwiADGiw(S8|^tcOA)OnnRc?b-_K`K ziBpS0vm(#Kw6M$8Zmpig4_02K=o;}7`&;!)tsWQB7&We>E>K93AP=i1)=Adb2ui?^=h;S5r(7vcd#g9&BinXfQ}q zcXeJ~7lete#G$(Mp>QdX$3Zjq;%@y!q;6F@fsylK?OxH1uNBeop5v{5y@1kMifVD| zxDL|@KyD;JfJGg>Z78?fcy3pS=H(kF4fV2|3y5XKlx(GB!i=`DO8Z8O6;JD2?e9erKjbm7-obC+bNw zq0bddbNC-K4BQ)t05?W|7+)~$zS4s*tm}ew{>`)LdRhb%e0;0381GL;$Z+CJ$@sZv z-t4x#rgn(1?w*SB^DF~qPf}LSM8>(Ck1)N&hP*KTGbvs&4AO(++?<}sdg_V-rK=*4{aD=wIKz(T>xprOxv~sC`ux%4*?L5AF*W{s;}zO zLg@l`61y?)gwUAjp*{E0Q}Ka0&Ql5JrvOWIu5QSQ#)fd--r*SFZ~(JVXc|S#<8}G& zgkWCY%?dAkMze0ZQb>>>5n%X1H=D6uU%=KEHE+}PHyt2A=8-~t?KicuqLXk5SWc+9 zMKqljx*4ftJF(Y4mPoUA$^b~rcHILoEy;}#SLY})g8Q6ogQ}%=Q_3#>Q#fWwa6mRv zK6>gDkMd^@(%-c05M&kQ*`cXWk1DI&w-yk?U`P;Sq}IiKj#e#v*KiO6%W(b7nWUFc z!vCDWUwS-myKNikj64@O;2nYB0r^ImO zF$4(+$I@6RI(%V_pq%2gg-ACK&yF9M=FTXR1~P>?YczDUd)=1?#vl=}B(GdoD+YZ# zHiIOGVCuL0_;$`g3-(5P%dKRY?#6J5D}T4fW--F{EuZ@Abs)yH=b(1!dgq^+;2~C$ zL@eF^>OS`>+%q(%xyaqJKts@H{4lglDYQ}6$V19dTt**$R|$b-z(>!<+xJoNCou!j zIF5rj2C1`*43BdA$emjLcGAca5S^()`o}MN# zZ&A*;>cuTLXGGJfL-aTv$>Pnw&GO4F|JW4hWaCFn*d$sZTSp$Bh@|CB>Dq-kMgbQv z`@ixN6y`PRY>(1mt9IVj`P`-z>Sr?vt}DGp$wWHGY{qn;S_h;`^9c)WiI_fK&e%3% zz&cL|-yMg!phDD|@vRll48gDOCS~tk;CpVbNkYF$_h<8MPWtHO6cp8kYdkOZ8USk3 zg`F8KD7dtXqjJw>l|yxaz1RQ%000000BwP7cYga>iIOR3R$Z=P34UG`f+VsCk^{3O zfh5T#omss2YtBRnf)@hhthyLoc4O6>EPJ=n-OI#Vw*vfm&2kTgz|VS!Jh9Ic+JQKM z^JtwYD=PWAH}tk?&wu}nm=|ppJ`x0KG!XVI9{{f=)pu;;y)RhRc%x8U@~fsG-Sv~t z)-a^XI2RRJo?E^4F7fHM>#f}oCKtOFW8D*?fyo4Nil~nTmi?IWMGKM&kt*9y+|`b< zgp(s29|c^RG}WFe^X5T!#y;pp^xxjG(0JWQ7l-wcnrLnb29QD8t@8Yci*pwj%c5GI z?8jLN3nDv+#rt}>4JUC@OKM4=8E3TDDk5{Syk3!ZxCHg>u;f@3q&_I7FE#jS5Yt8K zz&Futs?M?pL<(Sus-ue*@4u*hOSa@DiJD1kVhJp;6CfzNKo&^;FQ`l4Ewdc*vtq(z zn7D}D{Ll~>NyrE6yKx_;jI^p#6Hi-#rc-#!C#unH?Ym& z{YI%wKz`(DsC*T!`{sh)B!B<_DZco?);ix!>Ky&upl~{Tcp#Qj8T|Mq4~dpc@mL1> zO4cJnDL<75-KYC>wR@*3(Baqr$&Y92z3SC8|7qU4$<`)capm9Q3^43>ICArAAiD1W zd(ca{3cyo`jhi~svuQuQaQ@X<+G*R<_uY@yKfN*FoZ!P>Y`o0hAY&JuAj&wlq)@}u z<CYproUng_?6(jYPa4VZR-sb=L znnCWr7e9{$$pi7HQ)1P4viWv81dW%M}Cn=}YW7i&TJ`G)emu)a`M_#44 z_C}Y19-u=_R=HT8wYyxV=8~VggNRn}Y!F>%_c!MvLWBdw!#(|Mbr*N4c;nY)q+sWE zP|1L43*TwYR_oXccGJMFNBZ*oj(MWcjZY<)b;14|h(~|#StEx-i?$TGz8F?Fh|wQG z%8R3${JAUMh4Bhp9YS&*_DP8&&&HQ@3~>(-c5(_C5_ua| zhTWW*^QNP(U16RK*Dc=SeRZt|@*p;BQ_m*9fM8MnoNbZ-YB{Qp#?~ zI59(h_*$-T-=VZd?WS3LKzhuI-l$6<-0dP)>=h^c*Bt}{7h2qFksopqeYO%*y-cXC zq5uxw@8=f0)gWt)2g;oGB=utm*=?D1$AmiZ1&MI)C-ujv&SjH zR=4Eq29#aU<*sDgzdEvv-z9L$N3;a>H9quo`a|ZmuUim95}yRlDnGe!swc?nq)l;h z@#2-D1mq`AuimQabiI7A7a=kwVmw;TO&nYmhPIzZC@l1VNnNDsFo3hO@DG&*9UDvfzB4foWlSB0000000000VXQh1 literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/amazonwebservices/activityrecords.webp b/static/images/auditor/10.8/addon/amazonwebservices/activityrecords.webp new file mode 100644 index 0000000000000000000000000000000000000000..613cb85e8b94eed32eaf629937e74266557b2c6f GIT binary patch literal 27608 zcmbq(Q;;akl4jes-F@1&ZQHhO+qP}@Y1_7K+wR`~&YjtqhnaoZ@1YV^QJED{nU#@I ziV~utb5;NVY9fO2s`BgvL;vvh6@WQ_l=dKrfV?)$DdNRMg(M`(SoZ#~5hk|3n_cf; zpJf~9arYtnS2dk4(OTu7vcj4(=Xp*`VfnX;GRQBp#~--PdASQxqgpL~okzEGc`x5_ zev{8)-?!hZ^=z+olD%(!7Csw(K2H>%Zl3`+kH1W>QrmSedau3l_yoO6e*GU6zcatT zzgGL`pZMSSzdr}~bABU!zb`Gn$DalFz&}F2ayPAAv!A`cAM?N5-wtpo0hZpXU~zm~taKSrN=b7_0{n;vLyaa+HmAIM)}SNMB=^*`6YJ|CptVsEq8x%8h8 z-Y~O zpWruUFLJ-X-@Z{_haZ35Z?AT{dbfM}_+ox}ewn_1UuVC>et#=}xBW(b;g6bMdhdT< zeER&7f5m=fBEiu|2g5e<8RRq)wkOW?4PJ@lyW&kqpKfFFEn^Eq-*zRlb^;*((xLr{}owACz9V zs-gQ05eD;c?ubaVf`njjTA5XQ%}7c_NyQ7B&z2=-Sc38)u1{&UqzTJXV%+@f&*-23 z5qP~e2oqZj=O3BRm0+kYf6P)|*Ub1}ZvFl&%WZG5Hg6ga)s5~Br~HpdGAaDk=uY0g ziv8eVQtxFJJr4J~I!(cEWE;8Ncqv;}cZxd5nD1>&yj;m6{d6%K2mI*|rCH7+eFdhv zd`HW4-WaC6PzkJgc;Hl)F&Kl(OULSHTGtOhOoQEcDj9U`nyR|rWrp{kdqxI1 z*cEWNEe+uYcE1`;}DzAuF4v098#u8b;nCYgDAdS#^9Gb=7lL2q8Id~#ZPkaqU@ zVwjHLCRjVJ36jT2#k*qrussiNyB@B9$wL49^4fZXds;`C7V1@!u@R6qZD=fGM8W-R zcYmxxl5m5pNhzjqVwu24_{TBztx~UfndDhd!AR@>;8xH)y)tU$-_iw?Ie>PI7Qd03 zVPjfWNntwoVblRS&|uL&GtQ6g4n z3k=dgO4a`dTUTJ%4iPsrFr zKff_;7dk*d>G+ty&&g`x`OC7xLUd@GP)F`BRE@-I4Jgw-vzw|9dMpN%C|hEKR*j7G zPTvz_q7EuM$J$=_-p5$nhi7FeQXT2m+brR)JytBgM5zcLccb(|5*=Ym65U-ngq23^ z5Md|8bAR*~@G`0JBhyf|>Njau8wz?a%I}JMcvQb`_@uIycM+#>$LkPd2ae1ok~y8|VUkSWuYXDZko!O{-IrYLhB)8dC z1njSdouJcpRcdN#CX;tQo;#$3CijMH@Th}^CFwPvONCzBx){2thHuqOsZ49LSuLdC zj&iJ2j}nxX;*l)H^_Sm8PLY0kcNYs zc0%tV_5rO23+}+5ELxgTdrg36XEKOuo#$6lsXuy=lfsAdtGzk0eqqWSz?#x$zcT3!nA6%&a@6P+?6px<&)*_rA7vnsq6qp5YcN8Z8CxkB60cB5g+GT9@?`vZ zEVweDbOp}L|3-9F%|0=NJ6dH2rRVpfyyg`v8`qw(^@WJ`omq~B!U?0*>b|meHfhYN zdP$jNex9nNM2Ta1%8$&3q~gRbyqiaNEN)fxPP<X2>Tp; zj;x?9mN`^OZ^OHv1ZdS?*v`h5fT>shDohm+*34HMN+9Dbgz4~bwE%CMu_4nczC+)8 z9vopUUrrOh;-*NaDFFN@eYDGp1-0k&&63QOx*v2R(P$UkLqLPuh1NR%6SdtahYDX` zuhbX_2b>O%~MRf~CtJm7v*`z@!=$?ee zT6oRJ%D0B}IV8SOt#4yDhCd4xZ6KvRN%fVm>O!rKAo^(gLWb5)5i+vwH!3@lsw)wd zD{_{4g_lm8@#kX(_*_+yK!o1c={Gr18Ia`6kcjPolNBnRRl`;2QcaVLN&Rr=&PeY9 zq(-b-)w2&Fwu5ec_lx?l)W($;VKbHWq6YP(+i(b933!Ur!fezEPDj1npAb&YBhZpF56{#hu-gEW%l?#8(IROX;1Z9UjSc%OYT?d1 z`ezY}0OWAV&S#Dy^hvbf%@w(%(&v2^-g6yxZ>(lVHH90Fcy zdT;c+vVpe^92chU^j_n^*x*mPjFf_|Ol3xkzu?JdQtVj0yv!Xzx%Iq-U5Y&F<2#W zHvIUlKmmKOTi*f5r?;ME+Ii>R_t=7a)WIqIe{TE)K2N{iS+iq!Z4@TWVKF^ZXcNTW zYIm_ph5Ae`=on|Fo#@?r%ROI85yJV6M2i}0NR(X#>GhzN0BDQ4LXj(IhJ&{!3+7L{ zqYrSAHCA#tmkm)}m=fcwf{RaYZif(Do?IO#Y9835n&; ziv_+$6#c{t9UV$DYK&mh(UojT^*%@5g7Ef?>lKC)3B=u0&i$v73*Rf@tnT`Fu34e(P92Pm z*D)W^>R`r!K&ef#4u(@0O!Wd$QlE1*<7w+j*qj2GYg>-$GUwd%=HAU*wy^e{C-8`8 zD6kubSld+)6ed;{b`{smOa7*o;=EpmOiZ(;C>7?UP3iwLmP9uJZ_ zQ5GgkwJz1wwZV{Vd=gAi58d4HT5<)8w>!S97E9D-t_J=jGuSb&o7lutM~VHXgf8CV zd69!DIk_5oF+V+M(w3d~qRbU>C^hee>ksCA=L_hJEy&u1KqAqmE3PvC%7*_`9RaF_ zG5>n+D-L@+cA0|`wkvO*(-WT~vIKc#Pv&9}ja9z2n4C?=RsLNp`fh7H=>0qU{x1q2 zZ!f?q3lfpo)=1V}y*}eBdEx&69o@g_zeYMXa*S&u+-jrdXxE0=6^4xwF7;8X|E_}8 zij!de3;I^#W8ny+>^Dd7xq|dwLNV7Q;cFz*bGoEyW$Ih$Qq3M9t z?QDaKgc&|ZSYrnQl`lXQqZ#*`sQ*fpTlJ(`qxk&+HRhy=%E%~6c;gtSEOeys`=u~; ztsC;VNqjHd-Ej1h3-q+)^_GEOEERnt8c?Pl9IT1TLA8Z9r6t^VR&8F83io~nG%DeY z)js1h8nNVg>vD~k_3m+_AGT$Dx8+j_DzJOLG4aKB^g65KGF^aY{Yi{Q%6U^#huyg; zO6n@AU#t$)!^t_u4b3q|dONx$zhb^5NE`j*A!bmf0n)?4HNgeTIYxRvz9R)XEHI^~ zny7UpR^5?l3fC~^vz?o6irekeadZA|H*C&^xMlS*o#xOpd?vIqb70iwtR9JDjQhceD-Kt{n5#a%n&ZFSmZsDdaXuz zlDDpyD|gYUtd_c1SHe3Pf-<~J9>@q(9VF{Ztp?z_H*8VL8=RMSmfajUCSZYlOF5aZ z@AGCo*^ztAGD-2t@6S}yA3tsn6rVCBwH(7&6Mi-^kWdwpW6tN1z5Lml+hrstjg!YJ zJb6I82EPS}isw{6J_T?41N>mSUe~qo;AR__=)CzW)~Qs6jFy z^;1cs5)rp7dt-E8>-jTRf~g8!yAM-Wy(1eCU$d#;y7F&^2x$#9~J9B1z|V;OCJ z0>N23u=`p_gC?v_?9N2y*}o;I7aP?FtfNQRyFgUMct)FtLxn|M8gyxK0Z-=astNm# z7?h<>X7uy5>``YZxKq%1)WiBOz>TjX&Fd+bVA#PBIWI4T3ykGZHt69r=K?42^}#c% zOYIH5*Y}n9)&zlN)|O>Lxl*T=2~+OQ<5g3?3D6QXv5E`R*uzwxj%)|33?$ueseYKH zUSBn%QsVU(sleg3K_IHXbazc4)2@Hg;l=Pg_2ekT!HX+_!kS`rwW9qxnuoc`FZOS2 zgnQdyFlPKi=%XqHF)69xA@5W70kp9CQLhD>YX~M*%}4~?fdQU`d)?Q@j5n7<8H*4Y zQLI&Xg!lh;;mS#Pm)EB3<2)2SmX0dKJaPwYl#SI0G^=+b`priCqz|O6; zTnON9)iY7p)^kA7P7D z_&i&5n2)yZ?-E9;psgxSj(w1!QZXYi6Khh$2$u;}7c67VZi}Q))>dn}h=D0XVsi{E z*F32|b+JxR*Q^;IGEB|aUBWST5NFXdWC|<(tFdzk z;4&%R%$ZKyi9FrHSB+@gAQ%%eJLJ9kb*joZQCmr+vjE4xxL3g;QtNG1tR`dB((o3w z4lf739W-H`;U<%%)`6(Y)g(3aJG;}Jm$?2?<({#sbaj)5QwK(oJ-D#}dY8;1nY(kGP{Yx`` zP+auMRt)3v^QSmArB(0P`_QO7Q7JYThErbKZIEDvINM=NS?KnHA0I|*k`p1qXn(}4 zxI@+cjjNBF>3~;z^9j(k-1hrxQQYXyjm|e=h*80?_{dDqH)T-7O=03PXEC&O*2YE6 zoPsl(D``XSc0!9n3}6ie97HH4TlD7N+&_J|*?>Rx$6JSETL+ULOCnO$sp?{9U z)AZR&#!sVR86Z!`wme^3CQeD!jOn_le_VgZ1BS%%r_Z}xTrF3VFWXRsWN+?{5}5^u zU{be=L@@yp?|lX9HM#;a4%X<4wRDT#0n9R7E9E^CQTWZsYNKyXtbXcrJUTh?TFB#> z?W&F%u&O%B9uTh1{X$kh2|Oev9Fjm*VU1IrgAF``20~JK0U)Ign6z{8LE{5_ROhi_ ztD7hUDg+byAA-nRgcb1^P65@7H%P7Zgb*X?Qg{YiwouG5m{*kGQ_shuEriRwCBYl; z>lBUA{A%0gXmpPz{+4_0cSGVMCUz_yGH8v>T9U>|9zXZf8SC5nVVE6_!=H>h=&lB5 z;tH`Se1+L$kmOKW1Z;##j^ARaRr=>ckIgf*ivGXDK#C&5?6CFTV><)T_jvv8e}q%*4MUG zYMv6k7_c@(XnC#q1IX z-pXV0sHlNuIjfMLv=NObTn(hln3 ze724oM(r`{k|B3jfFj3p(h|A6p{3C6Z`;$unmlL~)ZB4PAISabJRSkf0*j)4-B%Pb zFhVZ(pJZD&I70P=07=?AJ-CTmJWo|H&ChM6P(cAEG)J|%>ze$vY`w!7dh_LXSJS+m zS@y4sp1St5Cz$mIyBC2Q_=!u!9L}Ww+=h!|0j#IEB4GM%Wji)~X7In`P)mv`3ETlc z|AFTG7Ch4ph6h+l#(+wts+yGKTwM}K$uo~qdd537D2}V21XmjNhN{#Tfr{+em?t?Rh8Vwz*zD;Dh=M<>9mZQq3Pf{1Xlc_cS zNQupi`d9+o&VNoKTpS@n@vqjXaUph(&~N~1m$x_`gc8KYLMGWFs9>Er@RE1bmchL( z&FV6BIr;H*Vt}eomDqC(60VAdIKg5f6vfSgOZ;8?Yd_QhTm0g<%6ILvq<1=P5AO~# zM8tc?k@q&nl^~^oVX+Ng=vXH_cM`143|46Fxy34nIC$<({1)gK(5Hr;0xE2%6}f_I z5T%_tiS5MBkeaKgzzodzOx2(uCYp)8Xm43g;Fo8(<*1qL4~nWhRM_YwrDQ-LRp@>W z4cFmraM#|}c^loVQf6QCH2}MmdR-`Lh9-}-*NflWE%)(9=S2WFF@|UuHu=okfv14Z zwQpqH!1Eka`G>Ln89v5JzY9`Q1+nO6h=pNn2s#X~b;4lKd1m%CcBMr{)5ZU(HYde6>56%`r@88z$~E`;gj{#bJw zUp&)&{tkP@;ke#8Ys15+gx+j)(TNlFc}0nS6U5aBScRDf0SWc?BXX4Xaf!WR!`&>oltk1(svj-clXx#_S1?;Oy9PRJEihdK6 z23piwE%7*t;pzLHv$m$B@1Xu1*!BfoeX3#EynYQzAm!r-Yl?zEOINf`Y$E7wJ zQR(?L6oTm!-bt8o*uGKX_|oGFm(;nNet9>#UJZQw_^bKWCGB2b>b$o-H+CtaM+HEH zU?VD({lJ=otf-W#z=J0$w8c+(^z~N9t&K+?b2;aI5mK89s06E>)Sl42+~N`~kk}4R z*uJ&eQ44hIbvS7g=-x!!Ayrqgq1sn@P z+}`qZUSnTQyc>9=xb#d>J#r``(F`yqRK|>SdFWf4bvgsDqu@*D8F4`@}dc0*el33n0YDub+tv-Yc zk_@;%jFD>+45$XN)ZA5oVmyA-vWdJpy|KwD48rT)kHugK%n`1!S1Bgm9>!Sif`h5D z|5glx*XE*5mnUPq&fo6_Cy=pCh%?fzRnKc9axu4wh`ynu3x>lo7#GGbk{y9+qG!&B z=eCn&WNl?-`g-WY1X)vXJSs%RQeVh+-3#yD}}=%W*vm{FS60D2IbYeNKe#5m|zo$8S=YSZt}9COeiL!=A!De<~Rls1u0 z5@jHBIOB?#{pm$Z`~s!lScOfhOeGSkgzl~kWTx!{P zTR%gJ+drQzC=i}P??4QenXqd+x)Wm7z_Q%GUT5Ma3kR<-QU%my6xXF>V@!1KFI*je z96&bxZ3}p0Y4HnIXAcNyVM?17%lla%JZTtXI9sYQ-SIsZFz&{I;lg{B$6yn+bz6x< zi5c8*b&NI`&^bSh2{O zrBzJm=daLtSeAi_$^0~nVXT_+wTn=Gqe z_UE=mgN8N77XL{1_(KO6T8nM0H5=2pQ)+uTF__yJWy9tk_2WTR9qvyD)$@L4 zEgziC^v2>%+(7Oxu`fnT9?i%{2b(a`{^`)ddV~lhr~wgGh@~b8N5}g!Jv&oHq9071ZuBdn>Q4)RR$}^qG`Y~B6$!|iM+vX17G?Zs)x1{&6 zLZrdT9m1oQc~%21kl%034pKRay#+RAP50ib_YhZf4_ex-KB7$I_(k~MDLMe66`L4j zp!&K>#wzhe_~aJj%POsHO{YoBsjh;R&8_Q%B+tq-k==^k`?qZcjg&hr#c~0*h5#oG zCu&q^55sS**OLWwzrJ_yF(a!njK3?5aeA-N*M_w|DirlYWH|=A>9}mIftB!Faf^Z?OJ~UT;8WK*3vg~UXeheB z1V!pEDSyLUV+`--pOV8JzYc!Lv|$@x56&OYT8j|S4Uut^odxBLaNdAnvY+5!l08)z zQZ)YC6z35NH#?ZeK`dgji?W~soh+iW4wZr&D~{;_8p!R=6xvSE!cZ^cy0P4mjOW%A z%_{bG*!Y+)+k{qYjAD#G2F)tni2-lBidOOMC=1e{L?n<;=^63z49NoF!Unh+gx}^1 z6)J2~m_r<@PDSO)i$3s#(qh73DU(QXIrP$qp^Gq&A%@}Xwp+a~q2uJoH&c0SN*>xj z99!bA`7T@{`p3l-vUEPFmShGKpd=IQK)B09kv5M|W-~fC$=@>(`?diU3%!>g33I_Q zWsdmYgoSwi1L^yfL#NueDI&Jn{^07KU6M;OVYwhm<=VEVfo5^&nkIA;!u+PpTZ`nc zes-?0#H)I@V*b2t>ikXJsGR+C1~upLFJ79xfb5nJjm-6&H+e>pR~BcPwXlN;hPaoi z5N*+!gePdzqVa!zLXIT8Sq_qS^s7vJ?JqiNo^K0^&8&m#5xVKBv_VKMckUlGZNEe? zZZH76>VL|A2Vrf##8z)Ixp(i()H`5!goAG|m}(&CuTS0Z zhhOoM?ib&zvN)h~8F5R4k7KzUdNv16G~`wW<^+6VfVA@7y|)2Lb$Sc3 zkr21O1!on=$K3+>zW`jWZFGE^idl`p+=%o)TQ^Mx)ioyqu!Re_??RT{KKL2_rLHWv z3sFHL73Q@pkz#d8?*y&81F$^<06-VT<&6gb?RrgbCsFhLdo{Dn@^u4DpE=i-`d6qx zW)8!!i&B+{_R8Su`SzZ1NC@p($f%2t`@d`hvXV7_@Z+>wedxn>_W1fNo7|2EnVE?}9rMfnv`vU+FN@A8obsc`qM35VV3(j^fO{>7a(C>OBc~GsY;gt=< zYh8?SdS}9K-eLIG@D;1Z2Y+i71;_aYM7J~RMNcf!RQL2BZ@WhO#ztH_Xliw)BGuk1D^) zMLjevZXJoz=tZ^;4`R;mjK6U^d1`DZHS`9J@{;R@E4!SX^V;S z9Jg&{C~>`SzX{1?oAT*)HYqra+igy+VG67vWHa06}IVvX|zhRsUM(h$RWt(k|+cvBWYYqB$}X@UU&fLQl|dvT@dSA-m|j^K)J}g1ogB9XiBR<5F+Szz^Fsv`g!N+S4NP?Lwl9o*O~FD%9yR zl|huqU_AN(JU_;i2yZwv&XOsCql&a|jDN9_6Fnxj0L#s|15hIqeg#L!G@!TFv)3e0 zcF3Fa&jsOhw#rg2tPFood&=52(W!5JNCpSmC7WQXs zi^wc?DV&R!P>hhtVVtJ0BnmrU_kE`j9HP&;GK}6!ne4z<>WvLvT<|W_55qrf1QgwugvLlIGT|mH%P(PZgXpPk7ABH7SmydrOfQ zI5<|Q<-^DqV9ylLZp|2fP}1u!t9!EH_(~pdG#uH`YvYR zx)x3EXl7%U3NFvfq75s`u5GlUMf?qPZ_~^WhX)OQ3EJT@0>}6tdzXKThh~xbf4=<` z4kbBmg{3_vHwkgeP%#jR_5P6`ugJ7_C5+a6RCW`jzAvhkkBImJna{b!MLcxG`cXZ~ zJ`a-MQ-M-`Tn-Lj2TTiKt|_)S`a|i<;>v>2q>bMO)Itp}Fw>ENS`bh2 zO{K!wwuBpotCqbSpul(`M_}moL2E@UA}Cu-(wahW{q)^p1WyVWkoY~_M}wmJTn2iv zkH&=gWcTBpd9wbat0eZF4{8FcxCJIhTlC5VRu;L3hP^GXh}k_^qL%s~(fkLEH;bY* zfV6j(cG=z@;Ikm#Jx|a#xA%~fP7torPV&Qq7IDtftoP=n3}Ur7U=Q2CDl6hFvhMKJ zD;pohYwfP!d(flXkLzzIAu={z7LA7ffO--61o$NiCaiiquOF^XJ2+2btFNS*Y40(4 zrl)U7YDZd%$KEvS?u!TAbHqp{XBRNA8($ef1N5>k5#3eBuMlnh)O(lV?}x2fFYGq| z+)38uA>^F2q1gV^{$U@TLeUuGsw!XYVt4%9n5aD^LBHteJxyR`l z26?ok%YjBWv~P3v_)3A*JNnHn_PXLoKp+ZW>uS3*a~~(BM5`0UU*)su^rN@W%~M-R zX`tBMK#ba5Q+sSeI*wXuqd%i&zK9`>TU!%>Mz z(ns7&1uk--WO%sIn}k*f7bkd=`vx}pp(|z5P5E=; z5j$-w-toK#GUwsh7l+D6ZfP_nR=i08yix1Wz&y&ic>c03QQ3;ET-3Sy#z;O&Xp{>nn#PQI066O%q8~v1Z8LRnuL9RKf1JQI-w@i@h*e%}3JQhb<0+duMw;9a!yTd-#Y2#W^LR zzmq0)kyZxRSSSShzBvWiV*dIk=G(E#W=<%hywZk|3tBnuaWe}rW+j}BQ6mLYs@2dc z^+_3yU={8BshQpOCm~ee31APPA?ne3NnODf1x{$9%v%4_>;HV zT)&Y`6l&|t>ZIARVY$X@E$IVJ)6`7P6UQXxvu>~hpMqe9A%Ur?z|+YtQ;F3|xT?8}*GWL41f%T-S2a!oHG5*($teRPiTvPa@$>M<+wV0fNSnN%PG%sN z&N?nca}Jbi)k)Mde}_rEH&aX?0- zw9_CYqCxZ(d+tg`UD;vz0EqK#VodF$;(8o%{JdljGbQgwa03ltW6oAyHnvQ2z?dj#$6- z;v@yngQCCpx3roYpugKWby}`>QI~<>NCq)a@XiN87gBq~gKu9CdR%AUr=*=w(3Vov z5o6Jjvgd@4^C1qba9R*NJe^6!FAsyWIaK@^uYXg&I>@4F+lzI;`XA(C%JxG3zEO6O_3vD4276-KI*RIR86zQtq7ZToMoEPM&+g(-RTxnqdl-jujvx7#gEcB{PzW?@g=JD zxHV1tvI8RV2wD8rE;WVgfb&s_Unp_S-BxyMp#)5VKn02$YC9(SbS~25)J#n+4V$35 ziVxAcESq>LA-;I$E%}vHFCs4$P5`UT#NCHPC@R7j8F28^p$Iz(dZ=Y%UU^vDK&udH zt8hD0l&jEh9%P1xXyYhnTX?XU9ZqpRX;Tx7((6LS$Q0FDxu22RJLo+sq%5(DAX!G5 z=MkkX*KPk}%Q6m*@R%elZd7uBg#1=nWIbQgzQxXIJ#P8<&!)7TL_*po6U(2i8n1B@ zNt|!azVIVSSb zIS;9s&R~Q3vf@xUEWGq%i35whJh|OL35C%}F`ybsR|Y`002@b*!LSM*nc{fNXqt+! zbvC`eDC13&Cs740+R4ci@O`U{&Ey9qCa-B`NWA=e2U-%FHJL+;%mYzJ9z?Ztjp`~C`o57PNK1_ub!1nnR zPvE%+u59_0pwjIyh=gSL zAsiUTTW@Q;pyP+x5GmNaY9|lw^?&fK1YdL-5nolB9(O~*WUK%NCS*M5j)a5V`!7Vy zc3ouH*ikEnC8z-DjH*F=Kn;$9OraEDgdTUm`Y#@7Gdi@wxMcvNGIc7Rx^$9aLAl^)MGB07s*`a3=>~H7b#9-sKpLGabV*W8&*0x+ipX>N89*+=mJOIW-ULAlCI zs~b;Spe7eIJR{B>`Uhs}WxR+aOldR2@`E5;+@!L+aeDBRLtGPGV6Xci`KoRInc=RG zvAzb2?EQuc0*ss3>OD^wElIsv-0Oq9J}$=46Q=GZRqGupQ^J$kk$at-guQd|p+`XQ zY8KMANyu>4tGnQJ1?PSI`(8-4VQ>m;xYMI_tw0Czn20DN335C7_XBmTn0wkIBO=1*g4x_mZ{4YTHGDFmPQ-E>71P* z!2YFKn8RQnGF3IF9MvgYQu2FLzG_Q!DLkIwQfNHZG0$kMW1ewiRH$E^<~D}Y&8hlE zCjqH{JtKiTSxTNa;u5ASI?;?r`@>fOHiw9c3(aGPZ!9SA!vOOR?`f} z#tGI*;O7BPgx0JC!0I(*DsRC9l3-_?9dB7ly^qs9#U0hzdozc z-#UfN!|b>toxfm?-udg5Fz|-P=1>Clb4rHE9NEQgTksr@YuFBUK?#Yfl89E}qmNqe z4=9{qTEF3JFHMcm2TxM1rO?8SKKOM{XA3Hs_s0jU3%_2&QUU)2meev;83P`^P;9?Z z){uSz@7*x$_Qy9GONbuszH{FD4ldI*n3njZ)>`$sn}d3F(cZB!3xKHLBXgp%5&!@& z6(}eUrABc;*Jqc=!gTwD>^i4=IwsjNL>ryT>-F9c{@fcn&a{SfSP{qj^&Z}IaEx%* zd#{M9$`^WjS)ka2Suu0zcr}bdI8{@o_nLfQsgG0+`~^=@NH}W1Q06k$6_@%L#7Pr0 z#Yeh2c}*&Tnh@@Ja&P0J!~qK6gar6}-@{ovZ@+fn zMm4WN=x~4*f7{8UZs_H!3ZlM%fQLFlKxIco68Ymfg@!#FqZ|A{lVrKp9nICZa4GOR zoAG&m3vwA|AA-{sn-C)v#*dFlM)H@*;E#!eVr(v61_YB`GSnzG zDax4j>nn0^yA1P|R}}QLg;m7^4-3H8^*l)N25>b6Xl8r5eya5kYd_J&pmLqOV$5F) zJxTW&G&>5(unYAi+^F2*wVwebni>b8%*X6T8?DPsyTU^k@mw#fhMmO4+dVE<8$2(m1w3kUE=MaqRyYJ(E{ zByUbM_7&PUF`T5AN33evRGoTmHrbt3xMIAzm?T|JLUeR95pbPDY}M*h$8=!2DCw~t z7924_dNjw(<^sd|>LTZEHP!rh2T>JvPjwPDYSZKl?H-%Ir;m2lYnzfWuLT3>1>~_Y zbOy;L=J9n+MrJ7HC<9egt}_k84C>z4_^*SD(ywy$33m!O;W)`&yZV2B;Qa+kFlD$S z_<*eN4V={dKbMtqHxFI;Vn|_#ntS8y9z4c_wF*S6QUSx$`eB|$ z*jZbex$Q6|SPFE1x9tAHR5O;&hF*8VOnya3j4?kbMincw9<9AtBwJ|(+CihPxIu+5 zA3*_6duKVd@O?Nm2}FhI)ps3T0U!SyS=`lrCv>KOv*>+2=B_wKwdTN0Q5B5l(Pt_W9X2`m<~=i53ocq819`7 zB!}`ZmpA=g#7gSA! z{o*_taE>ZYtK3clsFW+X* zhm!xEniDrJ6ssZaA_wPzq-8WV$u!~G0UanxRPy~DHV5DLgN143Ds0;}{tA==<|omu z?r61d+|haZMK;=v_;E%dmxREQ$LVJ4%jGH<&yD;xfV1gKlawfh(`!-%b(6Wa&iC7=TLlj!yV!Cc zovQLe?LUWT;jFgf2g@+6FCoX1ITrCfsr&+deK13Gzej1*7k6hG8+Rv_oP&M4qBv@+ zGyz(rDt`Lw*h}Y>&aub9P6pOR-!1*MPe|!!YGE1Tn)L`8awE1!^ zZ|6OQ5_}N4ypwOK%m#s%T0-ve!s?#Q+&SVhWF6ft612V@l>c%{46NJ!!enfiisaKU znckwZ+_*1#A1On9XC3AZAmgrJ!Avh9P8~wi66Z9**1+iF%!-24hrLyrYQ$))_gRQ) z8ml>nUuinB^9?=wCDKQ(wjfI_>o_4H zGs(gUW!Jh*Xt06{bxth3Ut)GsRM-vj1?kmZ+kLcFT9g$5S4{tckRY=3hvglg~$HEwv&`?W~O-Yjgd&z!)Yy zQOwh!Pk7a8z&#YGO%fTv<}@&_reB=RM-e0LA4~bxF?q@+S1?7PNlUoL=VS`b-ee{_ zaC(I`$9T|@+5PL@XzEIa)w9r?6e2)EZxp$tJi?KBXZlChX1Rh=!^!B@fN6ANe?Tu! zQJ(?U`-Nqo$Fs}s{k=5rgu_vD*boP=QbzhBD?PMehW}5d|0z?8WOt6cMcI}1&6YzJbj5si;zQa51f4zWP1D$W_u2?DK9Kg0ms5Y@0QMyCXg z)m*VRw7owUDL77>AL6;{PHW*QXJdetSi(&vdo5`VN@xheU zn;|}!u0Qp%|9@TOQdW8}S@8_PVk@7k>Tv(6!LAR+pCT?*AdpSS zIrYy!9^eoDhS8G= zE}CN_W~VEdKwj={(11S1EDPsGI-K7yHi@95YX8ZIHCP@LvW8&eHo*WWqh6!El{U_( zISXL4zt^)Z@nWR>50(=nKucX_=1W+)vrc|zIH8CGoe^<>nULFncxXbA-xq~=`uHp# zDmQmL7UpOqE+0GZ>|+M^LDu^BLndV9v<_%b_kn;wNUlq})a392Wn@~t2V9W?HF~92 zwY>)%h%&>RdHcsWm7^EQbAim4@alRkcw(dG^CM`Ofj4N&75!Tsi3cnUE_AW-#xzqD zb`ZK&2Er3SpfS>m_+A$Wpk&_iymf_+CtnMV@M{YrwnH9HumXZc9teeh3{ksl?8QYt zj@{1aQ^G7Xy-Q<>4)XE^mMwRC)8GHh%ya3D_wvLJ9Kt>*-1BYs8xUH@X7duKv+tT@ zTpb)P>^zy1Dgs-2PII+Ez}7f<)**)V>@wZ&Bzigg(b}DsQ$5VR4}`Axh)H1$1c_ky zfyaQdNLPZTwc2KMYyzz+|LeC`wdjX~5>m+WyGyE=RVN5g3s)ASrueIfh}Txi7-F{w zuS8WhW`BN{ZGC8tt(brfTo0fG;?P{@Xo{ov7k!G^N)O0+Gc27-&MH0<$Rw@B}4+GWdAh z?JtHsXCZ7Wd^e^fRLK0QLJm<-sX@5TqYB-6Ns1 zt%^8jJSQ<9U7k=cUuj7&v;Z{nb+`UQNo(IC6*%F4BriY^9cMp`Qg)At82w4b3%n0Y zQVz6iT;8P-C6%5a0gv$6p#gd){R_1B;jK~_1ulm6WH%zVDK=F{x7yK=4WIl7g;7-a z(- zW7~4G*AKWk)UMxn?W(~^GjXd0Ls?wkF1tUr2Z6~ zZhQ(i>cCiLWEs5dBH**mnR3pnMQ4h>AJw5P4jYOuAl;SK(t~fBH?s$~%1I#uY~JW5 zPt6!biZ(jE>~8{{k!Bb)fM<{y5cJ~J+x3`AeRFeAMk}aDsF^0*t|VOWT^gaQ3-Kk8 ztgExZYHCUApdwThtG|t0FG=NNh>iU8VvwWda)H)ze3zMs5OhUz{!(L_OUJ#p({ynS5uvU9>PkGkjK%ktqLMlWH89#so=r*pqbTmA z(T>P-QG%@3do510Du0iE{7nB=PgT95xB(c;43Y7#bVx!TykLQCXma>}e&93-2}T>QjIwyK9smI<_%q%*T;y$?FvXEiuKe2LU)$6PQ+bS}MRZwX=dZ9tw*ga?|6h zI1KDu@gi^!RyM`=^e8Zmq%+-TRmm?=(F1=|xL>BJz3X>5=pQDY*{(3@InD-W-+0~PN*1z^KN~x{jsUK?!Ymk7 z3o{Ky^Z+rd>EygPbTX@n(3p2)7U2Z(?f}Y%FTs%K2E+mbLe1Z|er_*79r}u1+5Ydj zZFA}{+N=%;PJd)fOLg64%wIu2fK&UVJEx$)5t59h=x7P%9D>D$WNW=1Ol1cxj<@h{ zJAuFbR)nu})XoEt=@sSbOt6P0qxf+{6jOxcSaL`}&3hUh>@A9w>4)zJs@&B`<oefmvwsn0j{5}y3jy(;hwM@%34qy3{IQ%R$I#w<@k+kIRSSY5fVc<`F zU+qQ_@$uD)HDCGMd@hytx!Rd`cfezcUtn8v<>R&L%3ItVj?rn|#1!(5PV5}*ChaED zOxSIj6l^ojt(HV5W(w&Mg*@yF7$}ru#h8u|s5gl~QX zT*!m54rB9OQ@ru^mD&`c*CJYmD<_9Y@anB3FX#f`7yuf3CVn7O_WcS=zuW zHoHXE4TS4r^r4Ck2oVA7P>Y#P9bjP=M8Y4@=CSYY3E#+ufyjd=7*%fzkhh`ix zQo!q?1Kch{LhNh`=QfwKEq%0y(?+7rfrG&AtQOcj(_j_k(Bh6}jxz!N?rcBm-#_Dm z_$Y@POZK9nmj!MB8TKYY_GgBCtJSgfSETP|c4L~~t{s#*ds>txhZ`?`h7jJMoL1|Q zj4%0UvHFNdrN6Wj68ZUfx}w+VQ5{-Na#WXEuT%ygDZ@!P?nTT*g1Jv<>mq>1j#o*UQ}H6VYJp)8B|1)m@N6)LNl z4}^tUzS?($x+*A&1Z8>D(8y-V>8iM5YD7+QL#7l)F0TgXi|5n%aVVDp8K`y&+Y#H> zo9c@4i3N@pc~tGt3|$F*R6c!(6a~4sarA;Gg6r&PL4LqtPmR<`6PPZD`kz2f&q?oJ ziSxhYq3z&dek_fKmH3^pKSHC;{0j-F_WW0~WE8IYAOOp~8SM-a<{+xn?#?qTfoR)v zkt6Tyq%=o|@WP^=;^eBwIh>c1!2AkiGQTKlkk={^4})j%i2F#_DFTx$Ly5=(rI$bcXq2gAr0q z{JkaNocquP&(3w4u-~m`edGrIjXZq}af1K;}40-5`zklrvc9czx8E-4|v5K z5RjdIJ6pT)M0u@s1X$)2yt_9UdQT$GF3hHOPcWaZ5RDP)KjuIy+}Cu9R9b>yMXayJ*4>jA~yk+uJG)Efw!PS%_74++twnAp=ejhdd z*>aCH4hPOlVAAJ9(@;pGHj&CCxW5#GXQ81un$`n0tn8rC`41~(Buij5lF48l7N{u= z6WBC!jZiDr3hJyFDg0tN+6@OC{37QgPmpW&x?RT%uxlkp5N*k}*{oque_F<}>wN;+Ftb(po1A6CeDWu;f6ycVKTA_h>CQ0UD z#B+v^BT{{P3UHAonjZ;v)==mlymx9(xF%F!B|XHr~KS0JD`_(Dtz+e{Vm)% z4J%<-?X^HiL*oD{isG5Tia7`*mP|B3UnQpu4F6Fv4sn_N*5Hlu%eMHNc>|@LzccdH zzgxPB@F!s>=g|?E(b~(ALUo_StlZ800+~7qGw#Wt^u;QXcf-j1h0ohCqIts=VQLNX zX7~}O2{@N2?^U{HrNz^ZAlOC}WnpWoZOrxLoSf=g&>l@l#^9WbNl`WM>z6I6jP=u9 zX#&c&`jAjjy~QaX^V3;louCyifGIcQwA?$qn>kZ#3nE!?=2o8=TRv1_dNRM9C(*OfRh9jg9JBG-AXnvrg zjf`?!o+xB)Vbn~LMH5zX97$ita)8~iY>j7KH;MtO5HzzZW zJVEu4F}J3vpsP>xAD4k_%oxc?t%Q$DYA_r1@2t;eV8){`^>0H{m`wF~#MK8pbPd<~ z643%cp4nw7R1!6AT-mTiAgunm*zYthNAWGYMZTbf&$)5IBlN7UC~EO6YNI}; z=@=KkF@+o4lN#4DBAa3e9H0nXbb?DmUA)(9^7VDGr}n1C7NC%RM-9&wLx5@1rgWot z4}bo2n@*l8e1V3lO->PwGU&lRV@M^q!wrBZdOn$aHVF*3{yF-1d|CSoP(Xi%i zl1d|{`qor$k$dn%TK1py(4KOjIDPY0dEon}K_C&?Qh!#0;rosVn`cmIPO3n< zkA4RCHU48)pRfqjA-mBitfO%g!eFpB6ey-vj)aZBjoFY?jv4%FoE6CUYUpE1;79&= zjXv8c$=En~=4rb$e|koe;9huiAt5zJ42j_^HQaNlJ79{!K57`KL2K!Y&2}0BqS+r{ zC<6`I2sxCRcWO0F#jT*=d(0DfaZzG7Up-i#dIvo3O>D7sfNxP*mTg zS8kM~uP+2i%mu->xR}RspM9Z-5|SY=?ZK0+^A-cB`&T2CYr|LU_c;){+rPuu#yWRZ zAdHmaA3fMYM@K@#5Hy`SDcMNElg$FGPrb5CqdJ{GTfctih!tl=oq%!D^dU^VbB6TR zx9JDgV5$lpi#xczcQYU8n|?}OR9$%8(kR&_)f+;ZCS=;N|Dkw$Y%*WF!A)z}WbQdD z0z6(r1Vx7a2F2B}Ia{13(j6hQ)JrF0_76*eWb*Y0u3vE^p*W=VBY-w2*>!$jXL%gCCwb0SzIl-=m zU*!C7gGSDy)>>A9R3p>uG!gqD5ysZmf!%;u0v~Y9Wo-F=7@FgJPzf&6$frO&0k79} zh8$#GJ{+Q+xAKZ~DvfG|a>@UnRA~}KCpE$IS}444^&XDX(P!}izsh3Yi9f{{lu=%M z9tYZOg{{1cS7qVg5r#{NPi(rt$OE@Rmp?W;FAN0)6{+3YRhfJUDcC97q&0+g1|gw8 z?SkD!&jM7a(0lPeq7Rw{G9p*56RW~nn@Ac z7BR4%f%0pF*+v)#b`GnkbuGIRqNPqKmTZMW)3*QEM)a;m3NwIi462npbQ1*!8^_5< zGWP>ifr+3zt3kP-HD24d1E>_3SK0uzGTS^&k z7*-cbYz{Z*z*%&@PD)c#B;swg_Sh=kHTyGco5l|;#y#DsakwFH=730*JN zBf<sXe9$qCns*C}&9wwF1*Q}(2LrqGa0*kR@BeY#rQ)p>1#c?0A&v$Qb$ zvyu!qFUx#Ci5IR^By)SO?h`g6(FqG*dy2V>Ux? zVNv&U3H;;Rj_WX>Ckp+@i-U@`iCBI}TM;W0Q)%DDW<^xq{~fNKrVI2a$`tx0WMu4z z-H}t?0+mlq!`Nlr*J`)I#lEo$RtqMUa1&tNx_Ew3h1?r7eLtbogU^yoLoZOkil4O8 zY>!N-ZlAZm_7OfSZ>v$G6UJk{`qSm`jYXl7CdlPsnD@yCF!7A*6S;bcP-KZHdd9o5 zzfUv&lr`0UMRM#?jX4&i?CmOu<@g}cW=S^wfss>HmJ6It5>1vV4v+?8rn8h69D{`s=HNwTwa|3S6~V#n{q;l>*Y1It$ss+ z70C{o-{q~=w^0+@x!OL@E_D4)sxq3*&x2F2)nr$yh@4@?udGti?}ANY&)f?O_Q!v_S`Yf6*qqne(#d{bSOM5x7oJpo2jt z2Bw8y{DgMB0HX^8*$4vNeQ_Q3%!r3Hs+2uqcBs5#@BqA(bzskSTf+|6A%aut*9Z=GLxL&HQ3dXt1sOs=ImY0tV{r zKMca4vwD=I@Y3yPxQ%uoViZLaX>L%!4qVn>H7cwnMNOGRDZmvFC7Nhln<$;PGZQTN^@L!F zL#091-pOF|K=BcItD}w(JP%7TTpho=2cz)7?f(;?RGEvD4_CM4H2myn^$2sYoqVod z6zbVsj%=@yHk`5G=@moI{^~qW{b!X)0}+E5B?@(jY`j22xBtL5?TZP~Mz2f*otT27 z8o4&g(K>Oor|AAz9Y=iCs%JY6I=h9DRy;V}noz2j(4*0m2L|2iqC1n431cE%0fW7} zqYdoQIB-fBK0ge!1vlIgIf9P!BG%X2H#c|`H2xgohs!&&-}QLC#rb(JVcf>Kq1^*2 zJf8kJwHkgz1D0}%J7bv2NuL@MTSdyKzK08m-@#%D2~{R(mQL`oubI$pS4?WRzQz@9 zJuvKeQn``Uit61QJ^=bSYIx>8FmCqe%?-288f)B^NL>>l#EqystfJfs(A9$0O|@A5 z=)>Izrrs1f*cv!WLCyTx~C849!)d%}v0ZqQO~$|Bwe9y$X`zxs9`Q&d(YwfpP>h zA0DhaLvI84qG=D$SM3ZdSV%dJIS6j`0X3*D(Bi@u3A|5#Z?77m&+=T0F>M0D!&C6zj}G5q^Zb z@@0hE)Bh$d8v1I&>XFXv*2{mbT5@12a|W+g%TLX!C=rxgH6!*{30*g7s;%3zyR(Wg z*qmYL>RfwaUPpJu)U6U^00hB$bl6k#n1n2J+?vlL&{_*^6@JKeAdY3^(mfjIqk zEq8tqp3=445#^?M$XCafB65yXLi+%(XLQfhv_K#tvXN=G!&r42&j8ERvDp=ig(n}Z zDTzGO=mnU7cL%fTOMHqO2eZqlF)8jA0c;D!d{BP7{SR z91nU?P}}uxqDvAX#c~137}~Y4fs5mTa<>^>X6*4W8O|+GJP)_~#x@CTi16_klO;wW zATdv(kO-5(@YjNr=w3x_NW`|5?$t}ZvYu7PuX|09;n{)tTgLrOF7b*mqk)HdVOz1l zW>~M_T|{zG;8V7RH|p5-h_-FWt&hM!>y95U-7^w6(z?G6t&L@VN#W=+$H1UV=dn=a zaaxroz9T{BMGX!pKQs&6l>9&2hFt9R{UEFkNp}h&zS4A9o_VVf)3dTS-?m|GlCxof zzgevqCw>i{XSHiZ$U+2}3L^ZUogE9bkXnC^YHx4x`jHw^UW{@-U2R%lm{MG%6(g!E z4EX(Y&SZOIZxcv4Ggx#LhoK;!lT#_@7&p0E09l5X;8)g~}CG7@7dRDAyaK6YWblJ~6O!?sr{I1^9hpGpU6v%$E zsy<@r^=8zp2%Es(NZd6iisSu^@iOW9co+g8BgJa&y)u66GiyF{lZfzMs0GXr_=P9R zU)#r{Z<1ENsU)%hL(ZcV907=xDbV~u{nz{wO)M8FxRfT%cU&gN#mzSP;CP&4z1|1v zUYAfU$*}}5Dx5S}B0Nj%VDhbRXLuL z^xaE*TK0}AX_Nb>T8z*WUv#~0+Iy(8VYpFq>N<}6Zdi_na?_u1+58;WhoM$DC5$5z z>+H!DmJBsTD=I;w1tD^;(%K;@tX@1_9G6xQV~;z6X7|57m%29b8Mk7ClSsgBD)V74 zN$1La9og`Cu};ykr>7G=JuWQ_#qmBewMM#_cA2#Kzg96y0ZaN{Q*ECsR_d;w&Hq%= z%+H0eS-sfY$4TwK`L9ntmmx+zm#$`0$|wg0cjhTvhGtR&#{iSx&HQK>y|94*G)`IW zKFprsHi&R97~9wp9D#qUL7E}#thBZ;drCrCU?3@(No$1pzaDJ*mva%1SLiy|y=|5s zoAxxF;Ql`&F(Ke;Q#Z*7I?0N%lNE2;<%`V&y?p=LxaA|kv_56pPP4z0I`=12`3S6L z;usGgRtF1p#iM#IUO6`A-=Qj-2a<7T(gl=jgio<+VZJx&Hr}PFpthrEij(XMwKw@5 z$`NHnWuUE&P-gS@%Y>3-^GYtKl%kiuDP0B*x|0TG*0-P~3CB-oZ=454Et*iAMM;;#wbmmQz?3XR))cdx=3{%42|;tH03+{t+_n!k3HxABF03F`g4Ine0tfWgTncQa@98<>d4E#X_ z%p4s63Ap-4BlB^z;mK%Hw|Zp3bQ1m`LSkRT4^;S|_;HNLf$eN>Jc%tmrcFy~SS z{Ulr?VdsT5@*1RK5KFr1cDo+2IQCSnPlj&7rNEpF(-RPL!Z8VD9ngFp-PQrwd4{9H zu8IeWfTfk7YOP$&xLgPc*9U=PA;pEi*`+*7Y;wZg^!)B7t0c_**qaO6aia-r(X^B- z2X>x1<5wu`^+`FhXp3Z~n4MwpBU>S8itf>UOOMlYH|fEbWjJ$>HhrN{QQyvI8DWA} zV7s?LL+6|C2o8f|Mpfe!M=*zg9s4PBF82pDqd76b+8c7uaO^}w(Oll-yA@H+3GPkp z*J39oVp8QXrTvAeVno$%Eaa(yx{VOw9NiW6E57Rz#cg+ud4FjZfF|jKJW)mo%*Ft! z%L&f+)v{nfl{Uz8fswus%${lX&~9oc0)YKO8 zqtQ_f%?)Iy2DlYGmbZ6OuUz!-AD#QMyy0mZRD`FYfE^x{f@Z;N0<)!ONrW4Qvbk7g|VRYxI}rtMz@z|X+E>i^#I#gzfO;0f1i}VazV2JB77@pt_#%&X8VflwGZuqG2`p3hH@~*8{9w}O%TjEQk5Am!{dMqt zU7ZtOIFjZ@t9U`BY^{-Y+~Gra-_5_Hq(D+oZ3>`zH5Qu21wKL$Z+LUy#)%~Z9W2lw z8sx^VG^|-!@zShTsljrlMdc zlS(VQ>EKe3UW}93Y->bEMwmE>_|8 zeb$j$cZIu@-g5n)R;^XL9KAdRsTYKm4h8n!KDL)*(~wcMKfw~IP7}(IJsX0&qTY)) z1TCNrn!g`hIG?%PpT(Ym-FtO3E`NrPVylm>r6Av*u_3 literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/api_thumb_0_0.webp b/static/images/auditor/10.8/addon/api_thumb_0_0.webp new file mode 100644 index 0000000000000000000000000000000000000000..df03f9e8a437d8ea295ccbb0ec32fac06d8c1754 GIT binary patch literal 30950 zcma&MbC4%N*XP@|ZQHhOPIKCrwr$(C?e1yYwr$(SZ|B`-@7;al#*NsDsy{N~RG!FF z=ljXbQ>h{?A+h5Q1f(G@qNJ|Gr3nKB1cdbO2?qrN0s#`1Q<9SZ*8;{QLX!HT7hN-m z2@eMiNidNb6Lh<|4*yXU68EEh%LBas-`%&<>-k_n|NIbH{_|O%37i8=69EbgB4ERo zDpgEUSU`r{(dQ2zVQl+l&mE~3B9=**u*2s#JKY=e!?>iM|9}CA8wDiZ$G_Tv5bgtv zx`zOc0Ol*;@5V*S0{y$*mu^wtdEevD4!@D_#aH6*q#w-d-ag1D#Zy8|wUH69fQ#81n^)vs|`3Wco4EJ>SB7P#i z5xxl?@JIiA|B${^eYq70-1|lTY<>>k!M+PVDBkXF`VIVydD;V@-;4Hw3jKlr!tece zu$Pi!fJJ}_02omACD=w-1Tg>k{M7yK1pt2R3jC;ke123v%5Ks=5CH&x!ZE>Izs#S< z&(R-70N@)?3>fh10f>GA&UT*}@AV%AXMGjE{Q>wtc|U2N8t;BzyZit80es1Q&;B63 z?mp%<`_2e5|C|Fyr>L z1S)7m03{GIqB-TBKRb}(^h`{Pt^VgvNGSW-WD{aeX@)JXqG;^g&9CVh$G4E^5o01j zGLW5GUn%fzov(OU&-QmBjAy3@A^MBcBmdvav*SRmRe6cPb{hXNll(g>-qRz5XkVEL z?%}rzowvN;-8QG&sGWSSOvt5I{O*w7`KOtBp-{lSTl(Qp*mc@cwM5K&-!rKR+KNhD z23fg9$Wx7aS=*G@YHib@j}5NQ{km=6Cz%Ll)x6kz(L{c%vd z0;&;8SJRxRs@8aSM7-FdF0j(}jeN*h&57MH&FX6~tO?SWG3rA|wb9=i_yOnM;WXS# zYZT+QDbnmsH{sDi_ja>uYP_rtnds+-8pyJ8P@0TKtc#Y!cIhV&G6DUX2- z(|V>SBTpA6N=lr!cfo$Py z{x1SuN3I$_M0T494$^%;5+_y!j>-|F$z9Y4D~tR^0Fz)>OOQ?7HmiE{IrIPT2NaDc z7=WN?&q=Wrj1*M$dg=~Ue-B?UhBe3RyvEWch)ELDbLC8BYch(-2&J1=UgU%V;b1H zl_uG$7Jk1%@B@`KbL8D`IyFV)54@le6oB06tq8YNCml#zh%U}>S6Id5M+SoCl5nt5 zB^fJq1|zsX!T>RLMU~|A^!h@vTn!$d>VL_%xY^B^QB{&`)7hRm(-QtxGEcnG7HrM ztjd^+l(*DOt6uCXlu*pT$c%d9%%@>bmQGYp2qz{^ zA=8nb9LGphsN+!<9W!=g(NU-9H*WsT_}zw1zImH#;2Gwc{0tc34o7kmHC%iJb>e04 zDUO|dphQdk?6KqoIa>b)(oB&u9kc zZLnOP9Su;HjwS;0H?#`lAp@zubHTdN;M~IDhq_EsDFA*afP*yNkXL4-(x4se)aZPJ zI4CU?zO8r9y*W=p6GrMzFBDGQ-|@Pt($4F<8-wH}kx^FI8vCxnP^D9D+%+;R1C>+( z0JSE-7dM2eKwB(b(CmZ}bC0lt&tx&ahO>h(geF5YNI!Dk=6GGK(77E{3-s*eSX0wq z)hc$t>(@5R%O}50wDmwK@}+==M>2Q8BmL^x=2&iJ1k*RgA@f3zNyCX$wGlO|w(`#S}_$)Mi$T6dD1kkO`QG@=!V#*4+J0mvWO&capK$RPjF0aw6~0Kmc~k zq|X~Oe%$|!kvIwXPEV8qbgwH^4zk|^E*&xO0h@^se7{DWUIp(1#?D2LCYZZ%i^0A5^UokO#n$pw8u{Le4e^ zc=o~MI%YEkenrQGp8sP#xfLQ3c^Kixcp81m)+~tlSL1|K-L7_PZ{0bBYA&B%M6;Ss z6~n5aC{jl~Fw{1xZ@F;Y0KH0xSkd?>R=_I1k)!z~z;3(WE?|Id=o$`q<2Rj;PS*cH zi5HGl$Y=85&^5t27??FbJv1ZDlx#d!v}E+Wh#xL9i7Lysn>GW#km?vxJsf=(8So)_6Ue@Xx$fB|`b10{>dl>= z&S`Z*2)4H0=>LPK7mk0#s^N&;bB5Sp9w!DY);?Lm^oqhss30(HMh~S&Hp_+guFVk2 z7L3v(BAIpxIAS%bfO@$Lq5p5h{m(wuHXU6w*A5>cWx?Y>~cpowLWh0m6v`d1h|2rc8^M0oR&6(5&DOZMI)Y56()P_3@^u-XuW=@S4?teh| zpCRiFZvsg)ITsU6#dbW8q=GM;}pc+#|TG|L6 z{)?^N$bWo0CvcLxY|xl2=hBiO6pK;94$zk`&?80>Qw zy^GC~61dg2@%@%a9{#_%=f62!#PIRwD*h^a>sS1bR*qQyuOxNEqH}sHi!U7(&L|>M zBU=0*=JiA5nMFGELqR2w@Y@jdjyJpzl&*kH2Ucf2m4vnH$=8DNh|x_HtdMr zxLo;xU^zX$YW|c@pjeKwKrQ_=F`M#2M~BX7b{0O6_{g*E5j82a{zqenD@m3p$dFq( zi8B|RbLQZ1;4i?1JpmT`ENGJX9M-I8;#OJxp?%KYL={zNn`qO%RLCR5ImTs55>&03 zl;}pN=gX`})YqfWc2wDO9E*Kv9CgKf4`$Wg9Y~97z!lj3a5tYwSKsI(nyP7~X&02m;;PWNGNlN0>Oj>g<9XY_i%7HrC<^jWw z^2=lk1M#4ph#}n3@XNZ~v^VQa?e7deC*0SH>RoZKvqYqRR_9^9^}13143613k8^LQ zuCA)fcxLz{YFbjSW!}4REB%-JlVV5`v!?FDo^VE*xBoB0mA*Lf)BqHTOy>L@_BB@<(>f`}9 zj^b4Z7~#W={2u+4)viC)0dcg7h#gvUkvV=uK>i~(AcCnDv#T{kO1w$@gw(Tb!Y-Lz zMf9N`J9h+K=QGR!puBgQv;q)dw|F!3vbz;;9o%it9}^i_mAbcBz^5TD75m%MLp@O- zkK;XkSI2sfv)Q@-Y!@On?T&)ym^sM{gwpA34>#_PFbc@TEAuH(;O4`J)**f)-of># z&_+SkN+(J*1V&b7f~`kZ2j@(Ju$?R*!$qL+;S%{CU??Hpx;NPb%n*Rr8=SwqvsAnN z)n+n>=mWKgWBk;@cp{+l^COXJ7g}=?TOU0Yf&{nluiS>c@kl+r|D$>-D>8NB_LEG> zD!>m3z*U+VX;SE+7Qh%^b9tK0U-$|e#C7gi9Y;@ZVd;>?G|C?<(}TW zi%alUvZks2lq-&DAn2p6H|z#OZGBc^6kOGN?4Vq|kgru;fS3643aX>BVTvE~nnfxU z;hqj^{KP9CTi{ExNOG(p*3%Fp%o$-bXm7LymIS_v|zl>2bhTwzZ@$rJ+d)hy?(pBjHo7R)kc)^oXnMbQ+Cc z0*?s7hIO9}n%1Ov^rYj8(1M=QDWaCt1z9B5Mr~%u7<^4|X1p2opXOgir4X`i2VM_` zcw^<@YbL-ev);MXf4~#SieUI-e{-1^)NC(rBVi($uH4zUh*A)+tO5v|O5|pTtadOf zbQ>zcKPGq4WB2QU!CLUd9mj@2aUg~wTdFYdcm~E7ca+Xp+r-Moo)Gzct0%vzn>Nag z_!;2xjP0WWB$f?anxzSGvyY}zn}C()_JMda8#Qq@Vm^&vnkbO-C1-w5XtT^*ML8Ax@Zmfq7$-S~ zO8OnyF>Hcr8y8s;B>vs!8VZaR39C$tkUW*ZOOn9Me!=M#nyqxNHSfS0C10uM+N{{b%Ez_4ScP{BZMSVH znt|HQ^e2(hcV7R~{A!f0`M&!IZ3s0O^y7*?LVu0oJ)}(wfQ9TAb?)I-o6!*J*((CH z#x~SY6E_!25;hrp*Ra`0REfZJ9?QY(_k9tk0yZH8ai&Q(*wmmaknEmpSA$Q7+cJkRT#ml~wznQm-_ zWSSvg%BR=|{M2oy^|ot?w2RaUcIB-k&TW+e4SV@Q8ggR21tO?hFZi=Ro|04ti>CVT zwUS(H$$ND8oNOBW^g-EWVIQ)~LiZee37YbqYXylCY~c6v)X_GvDY6>lbjMO$)y7tE zp593s#WZehHK#m_+5}9|z^gN-ElHsi04BPAVsJVDGq)~7h{=}022xMd%x$fMZhFQx z1DAVpBCHsf8*6dHVm_Aqz_(mu5&Zs;cd?NBD7MJ)r=ON+&3W`J$lq9}ZphR`9FXai z$Fx03XWxxf*Md<(FdO*m$#9t!0}mxg1T3uyJI7Tha8G6S0lfNIxVOW1$@%iq&75oSIF%k9TGL zDP*on;LF!lh(-@I_SV?HyTpT7K?~9K(0xhR(wqFI!*rZ|$IQKpgTB#F3?ABbrXrFB zHR$426J-QrEa!osw?$Vfa7p7F-c*ocThhN}T^K>AIr!fcV0cna->e3L;3oiTxj6@< zT=U0kI^L%_ZG4O;W{tT4K`XSKO{eINcK%*?cfJhqyHLsVwRphbQ;4t$oZ;i@vhZ!V z-F&GUX9ZNWM=s~3%<(d!%GA7qz-LXtmqH-JcaNp^HE9q&s)yp~B`ZcDRJA8!!o+cg5&_&sc%R-0*+(Lj36 zvT7&k8wU%JR@{&-#8Vif7hFC7wjRN77ByU``Z_F6)biXY25E2z>n(*--FeCv~quo zdBrXr>6V~R72x8HkR+H%lCvBF0Sjx<-@`0O851jO~kSF zE9wZGSvjj#NmoD^w7w*D>1ER0U{Xop>u6EE+}#FTt~Bny$U)v#p}VsL(uL2cIlEwa5)XSr`K`JoQIzWTq}y*W=1}i!Ug;}7*GjBA|nx# zDY!DW=S}hd_BM7c&+8VQ^TkR3{gZKFSH_vnj_4h$lLpQ}W~>Db}*Sj<;l`c+RC}6nS+BL9g4%$t0N6!sbf1tBRKR&sgdel?k+n3ykP>FauuF_xsMt`lM z!Y)BbhB#PSbRbtsi#kW~Co}$yZ~j`fw?@oqwXFQBg-|Bri5`*nke?b2FBF(F-mv&D z_Jhxgw_ieb+E`pg;KK081}p5oCDxzKC^$n>mRmnLB&=v{|FQf@qCMmx<6Oz&0Q3Cf zKd4k1H{$LdQAC|OVIXctR@XSOtju}Fz9$Yy-Evi?#F`}V0%tBeBng*2Xt=(lf``d} zbFS66_TE8$l=Ii+Ksad?hE6W}Js)NCny-^ej7Zl$qspANHp~=*i7jaK{#XNtjA?fD z*3PjL{LGtZ4X!c-`OOFtV|z|gkWM9EKz{KUnpjDhDRM>h9jw&u^h-Dhbay7vjKs1X zU^kynJmpakSJ1dhA!uO|i&i&lpiTN^%uy3~PeyGFa$oEP;=c$fK+!a9g8k79%|mD` z&|(8R<7uU{r)=WpCkV4 zW7FT5-w}wlI$21@=p_vfTdxi%ugw03nMmX?m0Ls@`4=?9T2RzzTcnM)ABmYRQHAu@ zABKLFBLg5?%yi`cx$1{$n08LI=B#uE^3Qz#-}?Y$&^e40(YAXD^wC=wX19f+5NBK* z|LVi&6IIcwvCMCXtUv%VCQMgEs^7Lbl`ZU-$w`7Eg^qt%HZ#e-MgseL+Q51xY`3dZ z3NktuKM25*u^vn=A7oEW&Z(-bvs8F%EM0F60_Je=0NZ}Cy5``DXv#Y$U6859W-hi16RZW7 zK+d7(m%S>yQf9MaE3(0?a$LgPE_uWkx&V@R9(-m}H|RS?d5Gruw*DFu#16Zo|4GIn zFRwwq?PDtfD)Z^e;A26tXLLO$$LbXJ8kZ^!v^kmpYKWn2^@2lO!ML0Ea-W2zI^DlQ zx!!RXQT9vsLADh-2|6G2M7OZw_ipJtfyC~OC|^sVpj&K05i8W$F0@5kq2zJwvrEU8kjq5>&OBo9Ih%_>Z>9 zYYFprrr0k^6u+1+z_WJz*W?L!E|YQC;9qO@7*hAu)$ga1cvYp6<|^T=q+W~Kk?b;`DzY-0qO5mzt6eEL%b~`_OIXoeUaoo6v z<4PPl#ErWOa|XLoaKa0>N%@@E-dKmYku2dZt{B=EFl?IA3O|HNG`u~oNN#UROQHFU z1JI1TE>Kby*n!^YLgE#L{Wprf=BLP!yvn1H#r1FPYf9=J8^2O2vL9oUo>vA~iwP1Z z1*47(JW7QQfuR^PxV{LgonM=_Dc;_EwV{EZM5x&D)8rrC+9YD&)Y^{B>~fGhrk7zg z3A3ehUOdvtMKs&sRrkf>q2B1vizswHL^Lm3cV=0&^F@L_B>}-IE{>nrT7?|TMl&Fz ztaKr6VItn3)*%ud8oFtGtfi7Q(^E_^yjlX7BK&#RZw1cXonJLyV;db=BWFW70yNwt za&Cpt=KdP)WC2(Vkdz#ni9ODFXo%R-67B`l&;PHE;E)_U4xsk>_Nf*(3RZJ>^OvRJ zLGi^(ApE8GNl^&wdM7BJ2^%d^$DLXdUuRm zvGRr*|7T0UF$gPP^)HzFfP|Z%WwhCZ6GJc`YqiwE<$~Gi5*ZF~!@uHo$E7`qp1#3% zx@M6k!izEsh6CAwKnEqVS(1znZY~l-ore8i&p-%#7VYOx&0H!16O ze~niGB~DeYbMdUR$QDt5N7K_*&E(r8(d{V%tGmX>ujW2PuF?6KzA4~=HbtJ1Ox0{} z>-bjj@MD32s8GNigA{J1<=da_sia*g9Wg70syGcG^R5UJlv}A(d_H@sz{y+rh}HS} z6&lK|^I)Lx`GCEh*1%;?M{7|xhBqBTrr<5gLbgBB zyA8fQ>Jx7XV^;`szea)|oI4_c=WRD1{`?Mm(dvguu2k~jJ5#Dc6;nlaZij*&Oo%`% z4PxlgxPM*K-w2XeNo{2J-s*LixR#WMM_9@FviE*-v@5S)f<1c9A{$ zPv<1C1>Zt|2k*a>>$u5$5wkAKsN<7g*UoEV+ac+xykJ=M5Wuns zgtFp9@(?aw%l&DBZI?l~ef7&00f?9d;jUW)!TFHGARE@Bz(-aD)dYeR+poOaj?b!5=WUh3Kz%JQ_0G0c7%pX7fhiw|ZW!YiuW@*g6*T8$!OP7C=tn*K4CC(p? z+7+y&0M@N`(>Y7HG!&T-m(+u`M+>oUo?V&N&XCt39AlB;4JT@%dJ@nb&dGvqBR|Ny zo50MJV0y3V(03Cr%q0Fv?HBn&{-o6nOWLq}e+ckGav@jZ4tpH^|4W0w7D&vUx^`xl z&DR_TZz$>6pD2LANI=dawi4^PQ2mNZWR zo6+MJvPW{jew(<9MdGiR6&SN@h3;kB1gFWVND+8kjNrvb*{D5(WOP>|!%-BXkBKIzXm~VGD-t zD0p99P6vkX+Ksft_|y>2?qE1JZH*1{BdN!eEpjYyFUzezqv%b^LKz& z;gmr%YWlsaq|iJ21(XG&{&45f6!r?H>la(`E`RMhN{M-N6{D4cYECySYb;EX)tvIR z#_n@*LJL-6gC&V;7g!aFjJKVpl>AeyC#r~!`T zp-x(cfwBZl{O(gVmAh_$PxIXq2jom1ufYAn6_6W5rQA}!GDQ(P4=7uCfo1J&qTT<7 zfRNHmgO9t#d%qUMhcYmgKZ@$wB6OwcIT57AqwUf3@p-eLd#(Qj2D$HLD$=Hj(NCz2 zaFOJB>eH}<>VGJ?KFPbOMlOX+kx+09+JGp>o0$hjOuEEao;v^T^DjSQ2xAEpALFtx zI?z%kH0UqDg=@aNMVMhg-zP%ix;X;^;%!96^7^E^$d^>Dj@Q{Tsy$QHTZKMFlOH>l9ddBY!G$o6AJaNMsEt=6l0YnaIp$XSO>? zr=vck`beMhCsmm`vb7lL>0EGr zPF|_4PWnc42Q$48-7(^0l9Hd{Ym@hhiL8_=S;v&-x|1X)`NbCQa(VfAHspoK>)P?r ziy$%3KD3Ohx+__p^zIY-8|uh>s^cty=>%twjCoD@PY8?NX4d2&?5tSd#2ubzTVghR zWGp~`Fuqq|6!qoENjwi(f@(J%y(LZ45ACy2B!eQ6po#7)>hY5Dp$^qUx5LbigLlSBDELGlvfm9RUeVc#?T{tb$Pp%i}oH3h_*v#>n+^4 zp@>HIYCo!lk>*GJlxx|C*~_GdlbD#bx%)f>HFvXFJM~Y-hdb!Aq?;rA z>yL};mOHLuNhU#fGfTp`Ew>zw`-qe2Ne9TX8h^J-i?)DvJjE}ovvdx;&HWbvYE1$a zrtGMvxP}x5`KsE=?dhv(1X&h!33r_FNyJ}&P%xXDI5(!e*pNyoZ*(H|;D8QRI?%a& zN@WfJg<{?e6OV^>C|E!Pzf}GuO!-asa=X_Ka|5x zBGJ8e$naA_z@N(3giQ>qVh%(K$lPg~OUTG?`>VI)Gw!C##;EGdLo z5H7F~+XUP7_aPTRUarIdq^!}fu(q*%M$3=fsx&u-n`TR@X{iH)+lDFP@(HqSljG-Y zO}&Gn+kz_WaqC^h?jA%U&^I33MrriHc=8c4@5^GnHHDw9m&SOv{Z%G;8#gM{-iwA? zyiGsidnG2>!%hYBg5eL2C2tuy9cQk~T8!eR89M-NGj)CIT25D4kL9^&*)NV30`*j82xL}0Ad+F&*$8|;*aEI|CgyTsok zJSwm`-Pj|C>z}*a?rf38zZSq@At%P}3f%_XJMz!_Mm-@OeFqJO^T<>unnt@ojTi&C z6!2HI@ne|6ETd@S+X5G;p#_i^{ScXl+uvPx7cmhHt2Z-Y_4)D3a_Lkeu`6A<8f=EF5pL>Xv=3 z`LNw5X?!;Y8Q60i60-G^k``?4N2%I#mQXLfLdGS(2@|JH;rw$Qjx(wiCBn{F-~15Q z2Zi&`@qFHa!L4cYxuLU455kZZfE7PTVpTEKA& zsCMI6AuNmh*}q?5?y4&LvEAzDyCp9F3atQF!z=ZT#tVJ9GD}4v&nA&25Ymr|lQxH( zpwlWxm-23&sfNixos(tbQ0pSyW5{ZPxtth?Ep)#$-Ba#%c7>ja)D3cLFBHn$j0zE; zW$FzsdXO8My_`UvhnM|+=c*p|lrcONB?NXIF)CsCI6Ib%R%0r=^4famHQ{W5cdpua zF_TVSJK`y72nBwNg;Q?M+}rTL$lO#~7&?UTIAVDo2wpY|ehEa!=KhU3nU>Ig!X@eK zY#qFsy_;dh{MYw!_{h`Cz{EQ4XP&Pius?{C0T$RhSPEuGXK@&3M{f>93ql4zQh7Sy zEU@~Q`ri|{NLT2Iy&TQ0f5)lWZ*9*u=Qq3h58L5>sfziJgG;~z0h!qwMF=ml)1{_5 zj%<;(pdDJ=D-S~2=n7EqZ=QolTW=OeFO8d9Ex7~2L*_?_ zPcC?&85b+1C%6%+)y{)=NYQ3QB@8&dm*p_`M>3g%l`Nq{sh2EOKq$z$4&?ym3Z_j* z3oEI%?n zi%YoR!{Tdl920G}3T8yrSe!XC{W6AXry2bUXS&hxYje?`l?twj_f4SfHEsqN-%zex zFik?3ssxhi7X+4aVIyQ*>!Q`Q|26{88ebr-Z5o8Akrz5p#&lWH=O_6R1wNC(Akm*Y zE3@moh9Rufq|>s?T^!qrqFePjuF-O*pGNuUd8>f9Qt~lWR+&MZ}_S{Bq z>F;f)h8PyEw9E{x5AGQ9vjeYdue7wr&WO%2n#0yS6U1zoc!WIN^5YsK&{4vHfHd%V zI&Kggg_+DglgcYkOYty|0P*aTI(H;qX~C_QOIWv9GBvv!&+&1B80}RM*(eBZF+Yj@ z_rr%ijIX9-OKMF~MW3mopS)>uyLg{$P%8c}#=9|_fwGUd5iWWYL+5@vQvII9k}t)j z%;~6A2O+I2DQ=DCV;D94*sFV33(gii06bl!|kq4S;wC? zO~Lrnw*;6Cx0Rg5beJQAq$%u5gY2O8Nr+LpqFvaHI4y-2hryIp>t!>uV36Xx!Gt^? z7rgG6RSM=jTeRQnY(t{e@k}OjKY}~n?ZK!b@}zXxm^|IGAKn(qD99GH!IED=ZVK)G zn?|ZaGa*>}xK6?P^cH;I9zX_eI14TFRZG@f1=p-UXZ_>9H{9W|YD}j2hQ=JH?%n|j z+rLjZvy1#orA1Hv>|b$mjKMQ+4v~JlEsE|nB;hPM0)6bZC=4mZ817YUI{X93A=D|w z;|_Cp$r>q2tKJ(r@p|5TOEX;I%^!{XX)BA!CoK5qWX7*j^FDeH>g}8pbpmKxAwysYOl7J`9$i0(3@y@+k}R-y9S;#l zXGM{_0PaZXMw&kTcT6u`&?KuPV8W)G9hH~&_TLR(FnvQvvuA%JI!-O0o z;nKAk1+a3@q%Df)nKaAf=ywDBAp(oXfRhTYQYq{vg!P~C$MLJc)wJRiQM<#-HXbPq zk@ZT;t~*OUV-*iyw$gAqn#z^|0g_;m{{I*(>WG* z5WjJmLm!~PR~mZQlMR-v5RlmaRTPi$yg55$K61FaRv@{Bmb>(DX_8(x6LB)nwWOHo=hcXgLUPYHI*BhwCp0-eAKC$ zceljHduyiDf)jA%>fjs&B?F-Iq@N}XCM~0!#B8s#6WHm{m2ybt(=OBWqX~Y0CEM@IR4u0nPE%T)kG;xPC|IB@c}xUE zM1YQK2S$@ErN%{qnwu>W?DOGDw3%;w)Ufa#_Ge+|fbTT0O)|^3w5k+k|M%_N(thFCl+QwO8hK+J6 zfNm5_m0CtA9-E_Z<8&808nvO9HDo81N=K;*zvludPQiFcQOa$Hlu%r3i%1z4G{#r+ z;qwnm;>Py|0T;WGP^?dP!tIeVsZeDoVNEb*dEWY4&NcXi_<>BvF$*5-dFX0s$lF)Q z_&A!9EY+_lf}f1SH2G;9H}|)dT^ff3M$(pA>9xB4?n}&(LfI*$aJKd7e^_Lh(y+tFH zpR2BI`gK^#*zh%vpSmsWN0#{-(MI4x1`3OYHx&3Prbc^kke42-&Jnk#1a&s2 zMZwruNyJH*u7TYJe}RzaHJXcl=IK=l%qcO2PUlnpN&G{+Hi-}n@6W+DLen_z?|t44 z*yL!<0ep(0O56#?tP{Der)#SWtFrcEk`nCHSeMmoaG?k%ENhgUzM{y~cf+rSdyUpa zqs8NrMmvQ&U>aScj!~M3jNO)87$d*8i$|;sF;Cf62~&6ztY5=K$Jx&4WhBPQAAfvBf_ z3(xd! zNO-TEmI3GRE&W2}mO0wH=0CL^`kOk$l;lHwv)2>h#s(jz%^N-w}!IfmdB~iX}EpDU|K6Se-=v-Dt zk*O^wE!MbeKrd{h_*8n7z(ojTcBxM5-yJJEY>p~^PAJ3RV^pVZ0l2=e$k-3+!C&Lm zjwSKVyX<+Z+CR(~i9gUoVyJhF4?Do9?RjD^QKpzi(o;jx$w8@oo|n%(nZNTCew~z3 zN@|PTMi7bv>{HHKDwbE7tknIu^N-6#A*7)&pc;Q_1Cp7RBT8G~2XZ3<8@| z&=cEAt}$5Tk)p$5KQ=CySmOi~b?X*6F1vis+TwnQwN|jKsEvBGdQqGCdqR z)Jjv%a4)2=#h0{jy}$A)bYgJn#*>?=*ftfhA*UXD>*TJVq}Cp6D1-L_PqdY={((Ya zzknx7y?{ThjyS!btZYJ@kteZ%aC~4U2DEPi;C&Z&zEsVgIc^V@DiZ4Ft|$$`hSC=X zoTY`~B26x%2Bb+U4D%E=x z1E&nzA+kA>FZ(L#x>e+`#B8e&$ zJya&5gz=b(y~qdAI8fVmtmRO14I0X*%;@Z5CK=8qyWFo_B>X-UGtOCPzw^+3`vb|` zBMgu^UIw2%^IfZ*Ww|BMi8DN8N6G_d`}CQNv+K7>A^=gBQDmQK)ti|}-;HzXMin>i z*wiL#a?`vguq%T!E_E>DNUY=o(Q|@}FaSm@FV!J=g0N2T?`a)GS~5xUG5|l7NHGsF zl-$$#eOQ*JiDdevV830(R|m!N(G|vS^9nU4i|>)FC(M(T#w=xB!Ar@9Ec+&QM*;A* zBm#PpeIO?ZZ@<&h*I^;ByCgSy)k$d7=f{JrVjNsNHb*OH=Iw_7+pdjK8T=dLWX_YZ z3@dyO1wv7QP~>O7iN1c~6sk%7if7G|b&LH4-C_Rlh>Fm&@-5%2nVPu$nv;%8A*$@R zFE=JVL}u^YZnft-QdM77akqqeIz10_6s=L-0_T7Bd|z@ZedGtuR>-FE3gVss)#pl> zrrRJlx^FL`P0{iU%;g@`B*JBTw)$`DieTry%EhRGP#|s|0@e|hEm#lK_OCitZ@4P! zyVPu5KZ&wYvV_TbdF53T++wFTt_nC~FhQT!Xf^5jl)coZpq<#}HCi1POMFxKXh4U@ z$te_oHja5HJ@jnpwzt(uQp3p2~*CN|ux!vOx8U@9h2j!`Bj4A?iM zq2?;ai-fP)!7#5M3VJYcCKW|=+#3Gcx3TOOM2`o$mQ4gL7R!JwK${E~dp`&)g!vgS z@DDcun;WyKk=4cDPFYz&hV4q_xcj1thfkde9{O_GgwhYdIpGQ7Mbh!CBbS(35NG6p zk;fdH(1ZV*a0Hzx8@+r;0{KuOs~tY;17``u4{scWQ#i{-d^8rbu0-;7-#V6{(cJ&s);?my@0$@u*%Qa&=s%xB_$oiHiEDHR zQaDe2EAj~g6M<%6$;SzWrpVZcmu^Km5zZ8#r^gVCZTm}*N;XUK&1?D6SfAtN)SY{! zXp^UW_*L^o0D2VOdYP0MYR3+jwYHYXv*MK{o4Uisv4s#Fw5EfFXb^5{P_d944a5GN z-NUsJ$a`-TinfkF%S{XIa5DLPVYn{+HiG&!oP8Nod1TL)!~=%eBs)+tWTd~_!T`IS zzQ7=Arnn;|;3Z zAr`i!jP{BEWTEVtMcP=4iK?k-3rf2}4r}c812ke^o)A?c?($Qz+z-zQn1G9EXQ?70 z*CZIc`+qjeYelIIBPp3Ib|=au8hp1B6+15`DN1SE+E~5&J0$=HzMo|Y?uGt!n2kP0 z%;ZT4xE&0VJo2)b?jfc&nk1sw_RgmD%$|tTg1#8`KZo8uVCP9Z#8`eV;g$!PGSK2w zrRdkXddq~TqmVy>Ni=9wLb!zVM#&EN%(nqDhZ1C9QSj!uKjG)Qx6*B4x<9F|XqhO6 zI(kE&W7n_6Z_>2yW=+XQ(wJZTL#sxrL z(TuJW{Z#)Wq&Hj0M}$!~TLr6DI>%kzmOm(!TVl8+E^B*I1C$jTPFC}D(G(X*3dPvu zVe+|YRdS9N3fM}}$+fjMeod5MWBs|$9ut*1!vGIsYDX~}zLj&xaHdfc3w9siYau#G zd^~FqS~ywofEEhXtSxB|@?cG*u-Jvtlg|+GEnR&6=WUJ?YXtNh%R}D|c16#in$B<_ z56X*Sa|iS=E$tbz)?Txq&jFgHk2N3Wh{`9%=cB;#c%Tim<%V{BxuP=VI$vqJ2O<6@ zmHP>9W?W--Bud+40@4J)9B~wFP z&HD@-Usr@n_xYGSTcZjq(MU(0sN~~>3a4k*vaZTSv&Cvu=yNY=4qFsf=^SYq!^~4M z;eC`LAv7>+y%upDG)%EEC?UGSp{jP#N@pphL7)qxkq)Z2A<+pngHR4~$H-y1~ct%47#v0nqfP2(2@q zrJcM0UO4M-qVz010Lwbc)vaY|OakH#>~&-$b?j@V^dP*0L9;7w87LR>g|e11dvV>& zv{IU4xTI(pq@($-Y*na!$Z;#mT*<0@=F1&Rk)8lfgB?B1Ze*sQ5J<1a&NhSkO)K9b zy6YWneDDEn@0H=zA_D3WX|{s*GuL{UIFrt_DojYnngQ+96SKLM!mnj?ZWS&ikQvQI zXYztR_?Fc}~sj7kXl|Q##7Enmdl! zEG3!@+pm3x33`5%sg|C{;rEZUQAcgX!FEDIzAf69%I{^yUvfr&k9=&*E70r_x5a1p z^9>DB;Ax{`0&ARSGp#Be{op_d^%qn$$kXA{PssOHS0XnsrO3~YL(brb)JxhQ82v3B zp<0}s6UGmw@-Ol&RhVPRB*v5&f-EWVHzdgkj(W2WU+$E27&_xStQ0H=iHBl-dxGk1 z9%&fjFL4%7>CZlaK>^($4CKA(4J%Bs8-vRb<%4Codm5P@s?+LErp8%`70yvEpWCXr ztnn;#dpBekF%TuBx=d^%LWqQ6W_#BOXo(i(bY>^>1nbwFvWzgWV;i#yMw8JyDLo{Y zEdEhSxRB1?1T$bsgT%l90000000000F%-9PwK5%dUN)?ZUKvk+Hk5U64K2B zxYDo^H>iR5sLp7ZXXjYN_iE+o(y%!^27SVul8}Q|UK2>33vFs21-7%}r4O?4^%=Ft z)ePF>>V{{wK7Ye=f83<>Z&Cz}oRK`tS{WBbx z+vbWh=8q!n9L@fu6T%S;VmG>2`(2NpJrcMdp%0vR zO=oL}bG+&f8R!P(c0oF0bU`+4_CX}ql0$?x={fr^nG6Mt)j3epiJhD^6sJSY2C2hQ zN^|6$W7RwGF_e+ObN#r;`)DIBXoS<<_z*Fak-&5PxXAlxBQ9u!)1YH1BY^QFtNpmh z{m(=ZE70SzR7Wv+<6RCGEBr^5N{+U_WUSD`cF_>^xKO^ZM_flAK>Ds9=Gds#GTE*4 zC%wI|2_maawHla1elq+u}IOUB;~KGb)4JYusX7B#9PPhUFqmNR7#=SaB+csIwAIlfQ!1 zZrbI-X2Bv6q}RzwnL@a9yk~MX*nj{Fikk);J13$CwLCVmc>u%8v{Q;}`}eE1DQ4x5 zpfNaaVPTdRqE<_@SChJOY2%egMPfL=Ht&CW;oV=2jPM8c@p zL6L`9Y5#VT;i_T=n8p5rcTR?OUK%k^T33Qx@fpGN^!6%L;D3SnIxr@=RbA#fKi00K z_0h9<64Ag2`XA$)#Hvm8Lhu&N+>PyT3~(rh7=ep&iV~M(cDCr? z&ibq(E%4Cfk?Zv)5_}_>=!Ia#q)DEJ9P5dv+7e{(xGv6xByWzPJ_Marh1KOM^1J^O zVO9)VAZD}cWE83=R_V`w0Zs&qwo@v~!Lwmm_*RTA`eY?+6gdT90tgS_!+vrXOLSXn zzLj5qHzJey(nrFtRv{R&U)YCKjT(!~y12jzt~^h;06Q~?-Pb_MY5Kfu78FXf=W`4A zFDF6C?5wBzV>nEdX7;E*f)PtjfXw{}a40tBUq*7XE60|4qw-0tT(Y;JBf(tFo(1`jxd%i_-<{6 zhsRDj(QSYRaX>NZD*?7rAs`T`U!S#Yr8~Aid46*@6HCNx4tQRx?>GAsVFNH^+XF6 zUf%}0Sltr)w|oG^lEZ5R0S7fkz{M(#tUqKnN=>gm`R#o$8sjwSv-M=mxe3~K0Na9f zq2>s3V4z_0cn=$4b@SMBfs!Tn!^A6!&d|aKXExf{kHjv2TTNyLJWfk-f;Z8y0LbmAu2x@X@VX-uHK+I-$t zMM4{HZim2K+u4La>tQQT1njR`xVBKsoZKmE{LnKX#ieS?_z6e@RshLVOCZJv?xQBA zrIA}LMu~$qHZ2=-2YG_@-HS4{T?uW*d7cD1tn*LA7e}l+Df%7X5eZFD- z+8|(>77HO%IIRj5UCa~u000000001HUARG7U|;R8r#mI(xH7fw)Y)1y_Y=C73Cfqi zB(hb}=WJ;z)q|n$zp8=!G#9LLItn~x}TQ~?Zg$zO-^I8erlUJZ%IChvs82g$)MU<|Z+U<+Svb@Al7 zGd^eOKVv-@b!_gQmq3e! zot{Id5Fjn?gMb+MzfZKXsrKI3TzlY`gVTQtTKxI$r?#J_B7r*HIrKZ@*D5T}nPH!gW(8(SKmPF>88oK9U|@YtbK(3?-=jEaRx|pQ%r#YQ00_BTlaO23 z41O*O7ZaU0=oqWY0UDXzR6#w7tlA42I0vJ{tN-UzN;O zMcoj+1@YeJNF>bJcu<~|%{cVra{oaE1;E-%U-CO_@|R86*4umwi{8;X&z@c6o@@3A zoC;Y+y2+u^z~l_lCQS^QDy$2Fj?g;eWX4wQWc#)P> zA!mQ|$r$&h$5n*^4ZLHUhYS^oZVJOP!ac(#yfN??t-b#!vk309+iU;Q6%kA%h3WeY z^YL|s;Ts+(JsrL|hE>Mcq%kRWu;~$cK^or^!#c(|tPBZ`VS5R(_pQRzG8g>IG%PIbsq-J)fYm8R{R%knI} zrHy2S^Dy4GRf{=@Sv;sH+@RNPkt%3wyAD6?nbw0`%8iBl4D1%b2J;$qEa}JgpvbcH ztJ+v-AE=v~u^lMz?BD(_lP0Bn1WY&^9`+x4X4{cl9DJ>e;~|8gkbYeJYc6THWg^-f zWDtqJ*4y4MjVy?g-ePrm5-_CqFT(P9HmKGUYjK~Wr=%1#` z3HJeBQ=C_azFR7y2#M%&M?9UZvTIaqT=xDC+I>6{=L$<%l(#sCIiKK{XhUK9(_bn! zV6{Z@fy8&2gn4$_efjTGj#eIONez&iPBAS!cC-1+_sDzDxG5Pv^hs*8nerMZ1IP^b4V9b*nHC#y(QJ3uGo0E2YjloQ+PfUJFov44Nue`imjH?_~ODU zg_4hMP>Aiu>Rm?}In~+_Qn)Cr7za z4q3p{fdV{})em+0)%KEF2{vS;C;d&DXLufxvy)~+ul$x^^%2!mu@Z(;LbDBtrAND8 zDDCQkHIM)R0000IRReYe)x4WwY@Abo>id#;%$5E6ES6^s2k4+xABleo4-rd4U_0Lt z@#LO($z?JzDC7bs`?5?{8;x9ybkfpnyf#ko`2V}M@+V+ix;}C*VF-A7`ZZQn-6mH- zaPbT|i`7RP*^*9xtR190y8eD3L09eXAtLMzs?TINyC}n3;$vpm0@r?Lxe6QwhRL$o7o+>?L-IP}tY{#$ne z30hJO8x{lA#4_`b0H63ii30{|AV?(5zYMWVAS;h^Na34irka2<>qWi4F}^Ygh-kvw z7My}A0qvOyxRNdlUv}_uk=qo0R|D^$Zv3GDNa4A523eA}U8T;BMwRHZ*8%5iPi^jESe6GUFJSXQaK9 z$idU62Ofoa|ErlOboHiK&S!gVM%%AZz^$H%NrQC+eG&+Oxc`ESs3cQ-TALyO{%5J8 zD3AO?w++YH&(iON_p-QC2wU$X4W(%tK*0q+SW|LlzefiD%7;u3@cIopkbx9y*TbfW z5N^6ehNgqmWTTrT*pd$k5iNDuoGuJXxzSo5wLh~PkSb3+?_P{7(}&h zkLU?W-eK0&U8H~j000000N{E@9B$_P*$$$&M|Iq$Dkdohnj&rjB-}v@;vmc_M!00X zSlAAW-vPatJO=eKCWbB(>HNW>vAR!7I_=o&b#X^tKT}#6sQ(=yl)|-rm>Oz#8b&uN zkL=mBF4+)0ZI@1W;|3;jubd9qn>I=OCL~Ygrj+u~t_k%P7H25%&&uUE|6t$~{pso{ zAIIO8Qk~Tn`6!XbPZ|L%E?Zi)u^)SRD$~<)gERccy>DHn+wVH=Oo1KW@gv-9j3(g< z-R4DEIJBZ&y*zHX>8Y`oelL0j7IzA6B}X1`Pi(zN9uByZQARoy;eYPP*xM#`N4?;%C~o!jUDjU0T%c8cG#1=CrU_c9ZAt?*i)dXQ>;WdL1!KUE zK}IAm1)Yx!%}fT&uUMb`pr9uuNNfQCt(y0#XraR|u6lkMsM+KQ<5?#r5D23}fH{Mg z<#pc`31Gee>wOR~et2;AKD}TyKX=~rbIoHcaylRc#Yk0I8-uObfq zeFY2QqkgpaUrMWxQZIoY0|^!l;2mtSqFL2@RJ^0D0-OPSviO@xh}pC<>`-VQH@Cj+j2ZREwHe~V`~s!=H36uZ96w4<;A@$U_xt_aVf%} za_Ga$WLoS#W*$LJueQKA3;ErRoPu!ZF#3M8puxkGQUA*+BwR)8Ybh(2ph)y+6%6rXb3oIV zV;6=@PCY3D5l=|8Xa1l@@!D}FUzG$90Ie(C_VyTwK=qLgc-_!}36~Y}8I!-Kc*G4R zra&B<01k*)qo&1)in2mh7-^h+gr-cl(PjV@U)TuLa*p@u%h*XIX`?n`v2hJ}3=LDU zlGzgD7`29gmP>xxGyC&od9`mq<@t=hesgTE3B$aWYv`~?$gyW4E0y;xqOs!49GSwg zMZNGnfIx`-`#70o8R8m(feKuZ>+c;t`i^(Uy;IDw1@U5|P18PJBnh_9hM;Q!670V*jQ>!O>VqE*`sS$2ESZ>%wU1u>9a33#ARa;P z5Gr1$@+=+6Bu_@Oz4kt%51u*V9?#onhDzdRPjQYh@!>ReSQTgy|W#>=l} z>0_Dhu;M-PIMoD4Gkaex@a}7OX0NYXzF4wEkPC{?P_c}MX;*a3CQg9*u*J$${R zSptL`iHMDeIE)k)2kNzi5Az!~b8to&v)H)+H1^jEG|lK80h+Lx7dcNffh1wSFJsF{ z)<(6qMHi`nJuA}*bn*jY%FU8fyf;x4De*-EDxBithWRH2X>for%JYBw=uCYskf^<4 zMp-eRi+#(Z9~03@&zcO7obO%nGJv%Xomv& z7TYoH*3e-M9DnP)AoxBQg)Auujz2U9IrTTP1rk>*mv$E4(`zX%R6j*Pao%pONgVn`(1IX0rWJWJBIC@Qz<;_%kzH7mSq#gtehSD4_Z+g{&UGrh6;bW{u1j;0 zVg_t~opd#_ukq;g@09|3GQ=3PWl9>sWoA^0x^Fyt z{fH~|`Ye0Xx4TM(kiiRs4q~6??l0(o5?>N@X!)2Mn9~m&TT7r(r-^7(s=2lW+s@Oy z01JEd{JP8tWNf)5>hWAZEyl*7ZML?f)kg!YFIlhapF7e+U>gbAR=rOH-Q+Jr zG=1w==u4IFdElcd$R7ux{Pmq;Bjc^(1y)r0&I`L7#*7+aVvoq{Csq4^0ySRp0v-+& zfsolT&NQ*783tXkfR(YdWg2v9`m|~FVgLR-?IiE%oBE^O^aGG@0LwU22 zVOL6!mUmjEb%dO9(D3}x`(f4mGRFe1{SZuO)y5xGFtO@W8faHU0U3w67?uF96$l`+ z_d*4vP{7##Wq*n%3lRE@q#ddC*sQdtttlcp`H`qsQfJ_(jA)7)Fa}oFsKSq9wsZ=A32f+5!1`-omlB7^=fEq{_cD3zHf(&!(HN}qX!U!#YV zxf~Ow)gRbE%@jn1-h=vbFFBJI{t7`t2#{`_l(m4aYef`9YVLk)Iw%v!yxh(yfr$wb z?ZW|{6ada_h(f33V}y#Pt&`2*cZN-ZWoy{}sog539~ZRU^t#JjWb@*%n579if`7sC zq#`h4+-OyY-g4qFWc*jrje_H_;Ifak#i;;qlRyGR*Q+RB_@1`)k{o#Z9EM4ZhYVJu zuZA%iSlrbr-Ho_K|3W4|fsh7~!)mp7SCmbu2P@2jvmkN6bV5*~@-l(Zwyi>BqUtW( z>zLRGA@hZB~^Y&T=n z&vY4_<8YEz#=Rt-UWTr^0#;=p-k(dNSIln3d_GO3cwBESAVh8?n6-8;v zpzL04fsr9{>TF?BJ(wmWY3;{8K{Z-pAF+x4LK5hnd^pS8f?&hiX z!4|51r~pMW7KLD+K7kp91xV5uY^7O~zcHf*m{^}-`kt5r{7$`P@PK2|b{lgT>m{1d zi(A41CG~}F!D28Y?-Pwg^ZX3}aiGT|7UK=_8!^M`nt)CC&Puu(v21XNaME`J4X-p9 z^f4mZrlxX>@F3f^%EKa{;8m(XKH^HBD!8XC_d)W3tV|i?GRE}L0^yg>i4V#+f>Xn- zjg3s^hQ>WQgCQuQ>vogUa50GL+NfCq0U7=LF}GJdECiwvs5&rh5~dbEe6Jm{ zG1^8Rj7s{SWkU!>*~1gv$GTf1IL(&09;`3v)atxcIxOAjqErKhzZ4z-=ar(*Yfo002HJitwPI?CS++Ms6cC7X+hfpR#ODHC zE(oJIS0G8@>@hv}<@MG5G?~sGYDih%<5+29=HZetu>Bt&s7G189zbnPF>F)4aM&`yTDb$anQY{1x^n^fdTBw_3@m3p%Iu zmy8qnDUP#`GRDdmPkFh;_=MmVs^Aj{9o$)VH_{YDUv{KRS@5nupA_qL#n-a(LNM3^ z1%@>8At#c6H-uf44&4*hx3(Z00|XEOI)iPJ*KF_|QwN$h6*r7|aW1dy9rjM{;)w8% zi=GNvND!Usqjo{|dh~*3!9rQ!g-uchMdpjiCd}QizT=CAp2k{y2&NhQLtCaghUyl@N7GvuD8(e$dzWizr+!~ z2{)V;@dTuE6}Xb)$N&HU00NsVqq_Bu(`LCu(FpmhZ558Nt`eP5104c&Eag9xI0v{T z*|O+aEekn)d`G0&G_%&aI`g+~bn7M&K4N0WRf*LgInp+aVurOv&46B-WR=+n7B0)J zhe5`pnIc=@G>YUKuk&p&4)S4QbuX(c`(0*dnUfLgkSDWZw0 zZsCw;rNpUe_&S%{!)6nLw(p9#kUc!ctd4{p zoDA3LclY?SH1~PikRbmX7u&L&(H`6~2`=;FOV%`MPyk5lYj|v8iw@bFm2ZkYxj(iMPo4uA*07NO=D8^c8$ngju zVzrn600_bYZoc&A!9Sdd!^F)S9nA zUl>=SObgw$>dRI2lrS7GP8qwHs>C}k`g~kIP`l^}Q4q09;ZP0r>^C1OXaYI2N z>sc~FMB&$O?zPNr($cZnpp(BV@}IGl)yNS|BF$gSGGOdxz{emkf+d&~kcDLFA%R+f zT8HKfuxrZuEpCsW{a7*TLQ5GSy$>|fi)^b5#FM^8sBSdK{l0+E zAoxV>@UEVYAzr=f>(c?W3Gsvj)u()@(HxNo1@1Hqb z>~VKMS0?~|q)s(is)angE0FzTm2yZ@6iS@_Pi=bM`7cjlWvjeU@fJQBmB`Gd2sCWo zOnS+M+bRdN{93;>7zAi20Qx}22nlf2ZQ$R^Ggp;0dH+{jnqhe^Fc{32KQAS#mhiT! z*Wm^W(RgDDb0KWsu)}b>Qr@C>kUerD3! zCiznNMTOnr1oMO#G_zyP<_k_vLr}ziJM8I6c12YY4}coL*)lV{lQv;SgPo#2`ueP8>`Wz9vFU<(6hBiY3_&zlVR}Q{Xbs>^WHWu&PvaXwogv zxP+)VY;DcO7ORCftoQ2IAmxv@QF5WNyYwRIsGlNrM&;vY@VLpt2YV$g=>)n9HoS;i zzqRME()+qAl!xmr&XYbg$uiN2cA(vbC0|l(QZZT^rn)`*`N4u1ReUeT=^?%`#%MOi z%GH-ONIe-pZg-1^uEnl!nL;@$tddPv_aJ?jG(;>Z9HH3OoTZ+bt5)SN!%>qmWiH2% z8&;T8^?<=eczZJ5*rHu-TEzhYBV@~`V15_}c0qZ6owmkVsUbQbML?rL_R@KW_l5$+ z1QOz5F=ww~O{3twpB{?6k@uugq_uV&Vl?X9B}$^xGgs#yY*lQ-^>#32KJ}!eOH3BS*oN_YJ2zzT$zuEoyQ7Fqv}ABMOpjjKe5& z&Z+-vAdq}tr#bTIpnbi%hvMgWd$g);zBvB-LQ()DLuJp-i_!zDTFW^0?1Alq=3Ct-kF|de<^|926HkoXl)}f$W%f9R;}$dP zRYrY5C(7H-{EKoz1{MslX!2ewv`;2a5nyZ}hZzS$g&Snu(4<)2y*vqO4 z1JO#Bkx4NDd@f%$$Vk_COS@su8#OW2RuNCADf_%7CqLKh=~5M42r*=a(QSrjXr+th z%p+2~L;z&%1#!G2OlX zqDR2ekgw8?sR(Jx{ROlJ>#a`s-+Np%4Ex$^B)CVpK!b**ljPWjR50P4?_8uVh3ELn z{G!ca7>?}ckpBkn)M$FpFj_1z*5IK%ErVmNW$JLuudZy8%ko#}U2NwmiNu2VZ?3?t z;pUC$W)~(lGQ)>)wsF4b71pTyC<8sPBULN?^E7+4QLtUs;Yk=1kfMrpR56esToB*6 zhSjz{TXqnZ^wcZ(V5c%6el=INE_!Z!SVX0C{$%!MMVoqF*y1oq0wH8=So}O-6?=lw zYk~9E&JtpHXMo4LBQeSxRbCqhX3s>Q5Xy!eGrj;{f$MCfu?S*I0(7wM z9GQvs?VZfNarA5H#pH%Co#t>=wfObCp z+N6I}QO#R$UEY+mbm_Zo#;ws@xQq7*DleqVVLl5Los4XmUz-~d4!)yQHroKU@EqYl zN%+kV8u#dgrXMym$IYf7UioVIT%@ni8HB_w(M{Nd0*XKw>j5g0nOJ2H-2P0PxLwyI zVm91p-EAD-77PhB8o=4PC5 zO)M}UWC$2MzOT3HXt%W0PDkjMy+;PpGp?#TQW;}NCnWta2nO(K9Avrif>?831@8re z^3(U4*GBO$pEyAAT)QI_TB8S^k{H#XKYEvM$3Uu~9pBt55+{H$OR`IaWP3q9Ydu({ zj`uu2QU^c?uk=ea&k6tuWlXzRb;Mxv`k+_$>l8(Oj<;zv#osRSRo^S@_5dKS>Ic}FH8lp zcXb*@-c^Dv8Rftev=U2ka{0p*T0RAHxEA%&8-SW8uk4^Vpv3xmjc|+sacMMw%fI0O zcl-4+`{1!fwdgmrLVTocg)I5wO~DQU@&L2gFyG-|`|H-Aqd1Gs)i#m8G%{=_+rFjU z9p;gMI6jvdwzFVHaaPYj@t!SaiY z%v281C<-$*(ENt$lPHpG5_r!C^5MMRE324$?RzCUJe-i4Rh(~DZ)IN;pflW0l?jy$ z`6C&E-C}Ool$8|M-Z12bWW>_-B{`w#RoMVW-;)tb6)1Q7+jdeMi9b0n+v@&B!M$r^ znHOJ6ZJ^dWfFH)<%R=1TfEWQeC=ej0kvG2Qbs63S+xtq7mu~wTP9g)S*o0IjOJa4N zL#y2WBd9LU=RdQcoapZ?D|$iTqIRQ$gAqS)qQO-1a}+G~7KeIXID>!55A8I=H`O0@ z6Tt3L-6ktoK2hcA%B`i~d+oMLB%zfe?t=2ja=VzAc>SA zG{}typOLQYRktR!z>`jBdF_8PA?S?Xh?+xz7dJFz5s2@!bTOprlwqaHvM+%z(^(%=s^n$Q&KqRGyj$mA?CRrL@z48=^4A8u10OB&bay;}Qc}e~Ex#KMZQtxDVMGM?W`LCT*CLfA2sL z1Zl62yNx1@??Jqq_@h)*X31mOv%uri60}H((!JirXuO4@Pj~4%k{IG4F)Fig8E0T4 z6y^>GU?n#!ntCGvH0eQloA|T(?rK5yqzNgw<=UaCxVO-hF)aK#V~k*aXnxv*PCzIW zjr$3o7ygy&RdEOt4vR$1@#B$tKh!@5nB5i|hYh!7Ii#2eB2_rI9`L+rdK@(6JJR<| zRO^-<%YW*y`^v@Q{Wd`Cj)E{C<8oFvK(KTcf~)Us#ZXFi{F;9;zu;K|!AlsTt2S>) z*@7Gz=As)n)T9xgOa_`pWbIh=27#Bxj2CQF5^$Ms-o+~7aJ5JeZgY@DH~)jK2Z0t7 z&7dQ<8VD$e5`2>t4we6q*gBO{7Nq9CkDB_B8)$e(Op=7m&Y+iL2XPdX%5<4bKL(!e z8s(Qp`i%p7_jgSQnA=$O@4?k2m!oDaF&9pWZ*VuwT0(lK=_*J7X)ct>7$~L{_kOg+&-W-rrF-rG?S54{oEUdCyR%o< z`?SN3=r_^KQe2glgW->fGCJi!gyhVgy|rxgXvv?}m6T{K;9=B2u%$9%H4gJ9itt(HcdC^O<~|Q{Nb$^dWb6vkELPc{v(WI)`j!T zT;?IWLh!X)KrqEDI>4o}vcKd2?j7a*dLaQdjdzK7DR@%w8t(Pvnn9OqTKLW?+TYseSGvUW4$(7@_B92S~JGNzm-wZ&F}w+l|DT{2pV+= zXCLenG%#y6$a2OZVyibYH7Lo@Sm$E{r=v~2nXcqSlFO8xBHQ0LNK9`RxvoGunEvez z9uV_P$N^i{Kp#;X1V&p(g(0J)$)C4cd;n85K;| z)I9uKb`M1cMJ&mPNgUhr=koSEQu);QDvo9Mz6+LJ zG)M)+lF6Ge=s?$Fx?XXjM(xkSs90VFjl{Um;e3Km#v;OI5D}n+5psK&)aY%t4F$I@ z?1w4}JK1JUk#4Iu((q6AidbZ}?b;&i?s|~hgW!#@<9`*Ds}B`{B$YJ+Xfy>K()Bsm z`~Uy|0000000iwBc<=w3^Znz`-Z%5>@Spv-_5;@A(u3A_O_p8WiTbDZf5_kL-j?{B@xSd~v)?U0F#NmZKbSw)e{}UD_|Mq? z$$wq^i~5cGulNtQPeXm`e&hDt@&)+M@$c?m*#8|qjJ|{Ymu@bD{iFPUs28cfDE|xn zxBP$p|M7n*p6&h%`}e3{m48G3Q~i(f&+G&EpYwn8|JlDJ{(k>$|0~B2=U>?W*nf5W zllubxPyGA*&-Rb;pZved{YL*c{`>qN`fuD%YJZ`BasP|{1N_hJx7Zi*FX-Rxzqx;s z|LOj#|NsC0x}W{t=f7>g{rj~3(0}@CPm19)!(`br;Z^GVE9hcexA26cEC;YgXVXqf z$qlX@AP=M15lmcEn}rM2(zqgoj2$jFoDbgGwom`FMi&icDIx@Wth#u~ldK(nPU(80 zXzy=C2uGuh@=TrE+>cw%$=c`3sVr8awRaMgYf`7o$W`+;7FJ__6wa76Yp_cqkW!ZVRC*%0 zX4r~GAl`AXQ<9mYe&Gx8#a{r@W+PSwB<`3UJ>lEu?!A!Muci@s*QPiYDZ%2@Xz_^5 z*HLAnq?aDU`6ypeDK?W8a`pd-e@gj^$Yw06*9^&uQb+rq)r7oRz!?^x#=EAOKK+P< zN_`ovStG%bE_gzoIz#<2M^CK3GdPSWxjig`T|sMS6Sgg#aq*xY+R$L$ebDMI zy?)>3M9LTobdH;)@ka%)!Aw8BKddxAUGR~qs5G9@%U&Hq#j~A@f11rqkUdG9yBjBA zWJk)7j53l?&Ui-_$)oI#RGq>rgX@xuut}UckPPW6JEHq6X=Ms}VT_OCMjx}@1dU_& zd=i9@DfbI|?>&JaJPk-2<3ITbg~n24;Hqcd%7m92L{^2up-c*f8(OGpm4ZLQ@cnNf zET>}nDl#zGM%w0CAQz(C3~7n+fCsl5`ffHWIq4N&#Wf^d_$+AU{5dCO&t2Y^BHhBq zkJ6b$C-%FQuNwY?cB%PSZyEF8a>wCUa0mIeJ_!aD@j-p zG_+}CPQrROo_LrSm|g1%GRiN?TVi;}n52Zg}`S)Hi*|D)LVhtK}1fdQQ^15K4mPYZGGj1BT!4_lgRX=1v40X6ajK@C!S z(TM%b&HXx2J@uTPLBOAY>@U>L{9tX%q&7+(W?1+kI|tk7mZ4Hh)zj9{fo(cmoCiqz zG+N)_+cA)U18k>`0rlM4bIEfGh*qF6ASZbQgzMbH4=(sQM2SgbHC8d7Dkt!laM%7NrYwYeu0pL=r>iXrbBAj#7WlZxFJwgGR(l+9xrmo^8j2s4Z8k5bvv;Exi zD4o!FHCN36C%M+(XT>b+`*5(9(_KK=Jks~!#c=Z3;3?;=qT`5=bfPuP-Wp^@F#NDTpki7FuiTQpVAdp1SCZIi@ z9X&rN;LLkfdvx09z-kT9-|WahX}CW00#=`2nhWh{hkDN-JQrz#YI-B8)Tjojd zFVhi$&pX>DOy6=)>^owKjGRym$}t64Bv_J8CPervvQA}g?DL{6i=&t_atiHkg%-+Z zO^oioi8J*{d6SurVAk7+ zPW5$(vg6l?{vz=+EPEG5F01i1qp~D?HnC=Xb=d%qaQ4IA<_rE-!)*N-x-#U2L%l&CGqYp zEB^b!F!Md}A{C!Ll?Qn^-j*R5bR*yQ!38?*b6;CZr#`{hZjXu(l&|(_(eaJ`9i|Xh z;Tbz}y|1M=SHQV@dQLz}j2?c>(|uZpF8pq0acME!*OIf}n#g!A5`wt&ekie73M5IE zA7C>K4+j*?DNhuiP?QoQ9D>g%PAcvx5L^xpDjUdSt@-8`*<3!$G4yYELAi+;YNzyh zK92HoY(gzdAGM#UL4j~Fw0r8aTC;kyx2WpiJ8_|;$rrzmM1~Jx_*3YF9+(}>n@Jy? zBw!lMbXoedyP(+2vHcd1qGRnd?dGP9eK_pkP$rZ0aQ zHC=1wt*eSVrWt*h1GKH1+WL%1cb$It_oMh&V=)1sdsb>aFL`{nXha<&VlUqOh;i~A z(!m{tj7xUfGq{h)p-KgPp;U=1a@bfI{W2w2jlW*!MjgH#vwq)tB4y+kZm+gniYO|K zDOEZus=w*b3PFDfcdM>y{xy*$5y>NW1 z+%If5WD{+T-)EP<#2o3;b>nrrj<3m}pu0W?R+b$`?7g9XnszzS90;=_5u(v+7+4b=wnGY&X?*+ zqve@Wt2J6V3&P4~W?}9@R8C|UbjI>Gyfv1&izuN(8#eSZK2Hx0Nw+M%I2-1 z-X^zSJB@z}WR01dGTlWb#G1gNHvRo7SotH~$ZeBGS36Oad?a2T_$i}j#qiiVj$Lyg zwPY=;@rSbf7rP4rT@v?leLlKm@6)?XDnjVoQ!ysI`=vr|DzLb6dHI94V+5g`^5)mT zV$y)u0%c{hzzi3%WF!Sqj1)nDsYAdZ){-14QabrGp(Lgrua@)+Y5vV~ryCZ!(!9)w z#<+Cx9#n%xA{X`yL*b=f4DqUB0D3c^y`|jhm=xk7(Dr~0SoIv?4!n+?I-OMw;NUa6 zlps(*eru6jms2i}5ab&5BS+J@JiX?Z?C#W5exEL(DBp}!NQ{_y4LhO*FlnwdBdT<} z%Vdy8KKiG{ZO}3(=?p8wt~h;lFuw~uXsd>nzG6^6WKGLt3fi5zPJ+&4_D(WK=b})g zIXH7|N04-6!%zL;ErYARb&Dx5xSpKCD(atIT~nwJ+zwLJM~On&mCe)g{`60$xQ~JZ zhsaIFMe$3-!y_iT&?jV{qtoIDB|37FtbYUP4O;`>jVnawW@moKf&-{1IJ>@I-yhO7 z$ZPiMOTG_8_IEfjHPvN~C$x4;mveEReaAU@l;b~!gE&_PNgQT&wNXt^`9&n1S%ys2 zjTWzqKyUFat$baSyid$B=eLtgP;;7rK8B6Wvm0q3k`92D1AYVn*C7jCX83Z#9$E#d zIu=9QKoXip%w&?3WS-?L4u1(r!Q^o)bdWes_l~kNcw!OhxuQVk!`|cvaOm==(MbMpP3}EYPhShX->Z$|pQRhZ>O=#UKPa`aKG`9IT2yD50 zta;5BCU`^CK72y2asir5#uv9sH>%{wsGZU(WvfLXBXo(JCCvDig3-JTa@&2y9|1?=1Pg6fugno4qT4Z+=(F!f5z zaYw*={2r76Vv6(4hg}%~m}e4fmRUX(mB@$iYKmjxB^sk^9vttrMG!jKvYPt0u>cM? zlz}8&%q8dq;|E`|6>7r=mM8WE8#B!&% zd>nY3&$Ma)FF!-Q#l&Lcp5h3@C@Opbg;GPk0>GFIn~!kFkn zvV4y=Uos7ztBkl1Vy^T4@}K9JLf`Fu!bU~xj*;7l7Mf%~!EnunwaIQAuMe)W>foLg}Kz}X#~eB zr-Pi&-mNn0@gtb1z{oe_Ef_ycHyci@4*~&6VkA8dTkS%{?2rCV<`2FxWv~o1yJr;W z%9kpih>`y0JX?IghZDVEonT^lXc1I7+~DBNA}!S!B6ZSF1mW3Qp}GJ zU8d9ss4l(mq1b_S(rG)V9bQf6@p>1Gs=ws(_t|bNv@zE_HMegA{@jphG~^>n!}!uUfGmZaJ zsEGe`AoUVD1yokVA}LWaDbo<&>`Jb6Q5ke8DxbYtk$r+v62&k>X4F^9=0sYv+wkG9 zX*9>$)R;0lQVd7?@WvDWd<$Fx1WAFv*>6tm%2J{GK(Z<>EYb|FC=H$6tIMmW@6yx} zSfljXjT`x^ppU3Q52_5N1i0k+DYm}5!HQ`tLUjV81n`3#c~A9LD-rhtp-r{Jptp14 zb*C~hi>|K#4-EiDfA^Hb-Fn2KJ5goDzM;n~QwL54_SZY$ODrUWitB2F)8*19pT2I1 zt1fE~faVqWC_9f0cJ}rW6ArqdhScC01vVzaH%HwTMm>Swg^h5zzHdJMo0-be>#7e% zT5f^M9{Uj~xCq96bf&z=>ZQu*s1z?tYR&XNxg8sfd+5^W6=gcrM;)@K2`mLBN!UL( z*{M=!Nt2Ws=1+?nj-2M69A5~{g9;Vo0lxBHJtSj&Yu3&4Cc*(&wqcvOYbV6(i&X*htPq|KchPb5=dWC}JA%r_?KGvs zCKl#VPmCfaVrZ?j@{G^Pk?h@Xz4MC_ok0)*lk)Jqey~%KlvzSycAUghF8sU`drqC& zZcflqcm(|jBHBGGwZ%fw0?H8AaR|xYl&NlF@j6@>B+v`K&_2P?4d@WtDuH?`_d zU9k1;hE00rF6Ngpx^^^lGQm##Fh-PI5Ov6<`iRQr#~^E;6J88jk5K{%!A?_H>h2FM zGh>!91?@#ie-~JJGr~{PZJJbOr>p711(0g#H|pu>68ATdI=ViXX8LWXA1-5Pm?s za--NcHQ2B*1efj+__0%^-v192GdU6KBcc%|Z^m899m)`05ZVWe9yk9KD97fQE-hcPdC%){Pe;<^q^v~<{YRe_Z|a)PK!6}cH6DS1bag8`jFpVSs|?y><#^}Ot&RS zwY*(JHXpP^X}USu*w`n^pHEPVX}cAG=4t7v=DNk_GzpXj33oEL;B3jygTC=` zl&w3wPt0zU(&yO3(sP4hL1J-f-nBY3fe>p=oJ?RBpcGFqa_R1>q-L>IbPjTF+ddiHz#iONLQfm-4@1EEY0000fyDZa9#jBz5=L!He2LazGFm zDSZuERpjrveA}O=|KGEK0RwYmwcUP0z{Bbb_RE-7k=chDfyCp z(~JDa2Qkb|Hp$3%tIDTRiFTCqOlO*jSb?DezYc9XA!${^lzH-tguAu6P0=nbYUJc< zf1#@{6#_0kCGG%I+q_TtkQ=8{aW6(FAD&g#o){|_XvQ9AjLyGXa0e}aLI=*gA-mvI zAZo4Ncw4i&arDlG)|dqirDkid^ykk8-ib?5zB6zdfS!S>m}H@AdbAg%B`c{^w!p@zdlKpY5+rXxG8`q2-MxVu<+oK)rRX z<$F{yzvss7o~A64J%gn1nky|jrF$3)`Wpx+~F$XzKWf-l4X|+j%nDcn_@sQDjFxhMPX5B#Z z;YOVTAHmH<9t!*f77?GMRDx(5j5F-|Jn&f$74sZUMX z+}f+a*PZg%MkymLGt%tIvo44-O^rdnn{d*8=bmN6-pd;nV5{5FJWgr&gV<3UWj>wV z8{W=1l3ch(Abtd(eecC>)4R0WuwK#l<7FJi{7Qh;0Z<0HauHi$-O;~U<^T&cGL29fYA zETjf_K2VOsIm(y9U+Fxy)2Ff@{cbMODgI=?Usf#RfHvdv<|ET0lZB?>WOb-|g!|Ue zY?+piGQ(sXu*#xw{z=*ga@8&Gf$pg$JwzZl`YH(_#>5QZkSX(kx)Z=oh)fFoW-C0{ zvd49p&XB@B{bLap@vvZu?ibpBgtpWpD^{@qb@<8lpl7|U6+gGB4nBoxWng=AypT)q zEqK^|iwViP9T!xM3VEv2G2$|Z7qa+}`VgGjnH78sf3H`T)CF90H#Y{ZehkK2CadlaJLqqnFe zAa3#%dY5f&+$^#y7k-gYG*WAO3sl>@M4ASZDU-RT?Gj#ML(h3FH)SuRlpk8K!isWy zj8GGUG~ry=il+c7-XKk1Pt{Xa1KR+Q#6e8r>wa&x{fV66qRNGUZ_tIvj~0M<0AGmu zMRSv$U*nphRYQUCQpV_AecK#VT6q%Q!>54KRcIEoVO!D5?vLcJ)q5zMsolxOGZA(0 z-NKfWbKCH@48hv!CG4+apiwoOxLKOO$KTh@DT>27<<3#;VNY-t7y3EMQ@5j*U)0pg7+Xn?#wrP_WUAW`454-DhNJSgf30X9o+ zRU{fmeY$j=V!h@M>Ip5Vd-8oN2&nnVR!e_Gdk%*xV)hoM4N4cKrYlCVgGN zgh8vcJ9n^;9TagWVX5#(CUiHVg&;@NnGwWrbs}+L$CU}IJLdoLsM(FNoBxLFQd)~P z`C_8EGHV-bzS5&jMH5w#lFqphWWzx-gRLw7O}HJo;dTC)*e6M_5oR0#1EGRN=ZZJ@ zPmJcGIJ_3wSx3UApQ{Wk?(k3bLV{;tpsH>P1|nO+!nd&S=So_3SxN_~$KBWW_mRK0 z@nK0AQTXSTweI%v`mx&l_M$A&>gZjF;_IZ`8u%Imf0sq$3yIh0xbS5BB%x0s)wYY4 zJUk?w+eyq=`4mH)o3x=gpnSsO*YR+G41J#~*+=!Kl$-3?;IAA%eRk-}^)IfQ``ne1 zS5ky|W85c4TXP$IqNe2`VV54~eKOi#QE1*jVWZtTmIJmA=&Ry(c*nG1`wx|^vB&*! z`mb^LZE^)DbQ$fv*lyJkH6`@BUYZMeG{Kx6X1jAk_eKPURI}&gO98iSGchE*!`-&H z5p_v4Ioa;%Taa0Sx09C=_g01s1EnN2wc&DsETs1m@a~{S<*T)ifu=OZ&(mll)IPiV zGS0PK|F|M$2o%@0gL2U;DsiH99(%c0O2upk!5`;-yWd?GHnN_eBA{@7Zj6HZ~Uk+Sa}OkPX%f`Hg(oWl`~h-YZ3!Gu^D|70+QzjxE9-FTDV1DQD-E-2;a}B%k^8FKw zrX~_kj$<)-#u72#y zas!sMLLaDievLHe#v8avRTXBG)-X-TCc|gHA5VjuHVuVXW*pa!{7(p`OUMq~{w!oI zRvv1y>FNW&jW+!|ZU$V|qp4MPv8h8-_uH;N$AQ=#z&_f(k$bTE*+99C=F@LZ0cLgv zlwRkqXfSV^u|;Rfd$k8iZE%G2xAQkW76gaRZmSkJ#`Ra*=l>BebFY!${nc|4hE{sT z1>gSGsc)Z$RR(My5P}7OQ}L(eKAi{+>Fz7>z#;HfnYAEuN>(2P=R)BeT651)r@Hhh zmQG}F&Ox!@|Lav>TRZ*8JF3Shf$?>uE(Fjc5dCCrb^?IPD*UerULLh9d&%hK)%omX zqx}U2rFrDz6QHTlyJQ}E@JwOMUEQQ*W3oB0dH#+EY%5Wi>=XFatC*WdjtCjb2g(;* z1knE`sQ$k|A9;&$`{GMQa%t*Ny|1??T3wD`?@T1X3MhF#CYTUSvYo!~Pwb;ovVWu! z6W{Bt)ZbIqhW2+rI_i$?jNntO7`^-zKX8lyszNq_4`9@?HhWxYxSR4m=3*7nfpog* z-jqJ$Tv^k;9FrumY*(KA-U9aGlDn=O0B{B%nl|~_JmW-HE8KlgFXG-=sMzV8(txxZ zm*Ad}*SuQXZ~h+T8HBD9;@7kX{C@XY?|k%0=>xcE91cR|PYFrHc5^acq2%;mZ@}m5 zBR{}>WIeE*c%HUU!qd&{+*SMW;B`uY@CLsjQ(*bo3H&&T4(_y!#f>h!2kOZ-!3Tn+&!M9@OjCQGjSy`>>TVp2rsq+r|wj2 z)~Yh|lfB1=e56OUUf>(FS}DMp3O#JLs9dZUXfujI&FT>+0}9Q2$cO_^tqN}`F#4&; z0lyx^=S1FQx9X4#hts5L+Zy>&+K~PNRi;G@UaJTy&DPsAWb)E`%xWBB%;Jtuvgnw0 zExyY@!-Whc8r&tZH>pGH>BPx$S2vnC9 z*D-3H>laBU5}45Uz)cSCCiN32&bCb$vE1X)GOEO+RXE+~QlDH&p`Jn}O0`WB#o|YX zr9m%?rJduBKO@Ls_Vr!peAtM+JxV-7@?j{U7&41u1e*w|5g1^((k>(P1TQ){?^jxx zX;WqNAD>Kmj6vxRNQ$c}-G2pRK({*Y2s|H2IYRIOSYo_tRk5~p{LfsdilZ}997=o1 z$h-lQK^h+wby#=19EjpW-VMhu@rvILReI)tMz%!aRI!7ya9?FCqt4L#T(?Oh5D+6+ zss__V;8bG6N&XIXC?d5K>sMJYgpr~)$Hj9NtiKgUo&Ib(aYXdiv#uk|6Y zl4gT8(gNpDz<)hJmG0u@stJ9MA~o!QjV>i<#Ys;QjrBAtnUYI`=*uPdo*>)5o!I6` z7y4=TJBWoDQumXkQo3Xfh6Y;xkW0^1RES21&XP(d2=0xl#uS|3G>>g*manjHsjkU4 zQHNY&TX7)PW9j?tpnU3$n>jU1e#nq_uhdm^Az~?@4uIQ0$I>RNJ{tyyOWuOYTZrP< zte*EtLQ6n1Jq*+l?>ZX*wt&0Pn{g=-y`O=1UyWJ+P~y~Z^eMCe`x~e%I(Z1uVgTK% zZF{66V?YRe>-TV(z5x}AjmFahV&-ps6wxvdsJTL=2Q$X2LVCivQe|wUXn?UCTY`u> zOlhF*k;e7vL-080Ve1C=DfS1*PaxF0)Z3UTO_r)Y2hdk1@jrWrH<0}}npHu3;B zSp~h#;+vW@o}xPSniZbVG~=TFcSd`xO#@fqk(mu_rN3~ z6QsY9xo45t0i~A&fFiPHAs#4g77@mHHCju|Fv{_at+Z&8fjp@ z2GL_4p<>U{QY_Pr9R`5S>k^-W0?-lg_3FKJS%9&x5wcDnEAz$yZ_r7$Rjg>-xzwKu z2dSaYB@Uc&BCzD9${MyxP^a4L%rv+{miG-C ztrB*{Gv7g4Iss(43@zM~(5TCym|AD4sz_c)NeBrar4tT^4-)nVZ|6_XmzHxIiOf^T z2&txrb0-bX-XXSQ{SZ1f@4=UC$qWLDU6?x!B~kB)4TDp;Zyc{xc7vd3yo?>Q=h3h& zvH@{UR(v$Qz+aS?*gQIc;{<}Z+|{4t2|>m}b8#+9KYrGU*)zR``nx0^4sTy}47FA_ zW##LwHS1Iw=SI(Mu3$UJuqmzmU<=&a@97VNx^h}|n81d=1nFSOdGBJ|?N;g-uGx8~ z*HXR_c^w-x3WVc}`<~^j?m{YR#54NG(p@_$>0)T=ADu%?Or<@u$v^*Itx_aor~c?xvNkv?=s(`2)Vt zD$Cj~xVZ`Y_kCTgQB*by;i^G97V>6=f64%QddO_y2aH`2_)J*+81gdDpmpJ)VV0>_ zFv8GX_-=J~Yoq00+?X(ywKXl|L@I`3>kUv7X*RzP$%{Mpsn#oXAu#9PZ2m?f@*ap8 zz@(w9n+6Dpemj?}Ik^%GfK-iYtb#Z2pU4p>i~xI^OwCcaqO0TYW2A)UopWj}vsh{Q zxtRT15ici1g9p@D8}aOCsO>2ddw`)4I{8Kme-JhX*aeI_XbrQsc#25xOR}(myrtez z7S9)OM)8}AqFqGxvSuP{MP(g5pJjH@mbKLaHdLT7C8F}ohs&>Vzdd@S8No58ghf3s zvBa_D_UWJ$q9j5{_^x~m@PalPf0ThGW@Sr&_vZe&R&QX~0~Wxi24zN&aew#uN0O=l z$1Kuwq8=|!;y&-)cNdlH$HLJ{VnDHOS(V=mISOO(bn_t=;kdIL$>5A)1zIB5=hI8_nKg5FP9i!iT>F3JBkiNJM6QyRJI+){65#ME& z^Ky^x7IPunEVw1YESj$dL&1+L~t35=K zJrBdMA-X`CTtfgIjMTH|kqKoP8vatIt!H(o5j4ydud@3S#VNYaWv5@ZWyY2`_fH<* z5S3d+Y$yRH+%&QoJ#PH%gy)vQ+~O1D_xPlpoA{r;b2F~hWn`~nziKXzC!u}7q4h$& z-!Mg3Z67RlE{+=g&c)X;fS)>iSk%#4fp2 zOM{;9e_vTi+ORKLyKvi^BM+ewNzmVG&{&jnY|C1rGTv-%hF^Dk%SXN_GEyHm`6Dn#msPgx*{ieg!Ax`z9H!aTl!{{fGO zSlWr@takx6agWx1H`_i$mD!q`9pYH$si9}@iI4SN(l1`3vuk0aSBXYkpCYcf6Mi-= zP3%UWci8Idp2?iu1d4T#ZTm8f=lAK4Dzlyz0u}&=5|tMdD?aTcXv%VxVtpVDfj)#> zzZG~0trhGWrJQ92!Tc=lW>YbAGddZQU(zEmo9QE%fZbGMKTg!P^qx!01ll{deWd%(@rb1~G`i zN`vn*cZeoAU=G;CPuoTvRcD$PpL$FRc@3Sdf%qDZYXQOzSwO0%z*yz`AghgeX{QQF z>d6Yhh;dCimFXX(>q)M(ip5tu*vwj^_hk8l+e-Z-_t?Pup|~^@gNvdn?1XIp<{Q5; zb0Zmml<;0Hq?HWR7Ntsv1nuwK>M>oG2K@_j-H4thfqru+)~3pjt$=Xwa4+`Ct57Hl zb#sziTU_5P4k*aVEy01~N%e>4zF7-nJo?Xn z&fRDRa;jI2e~Uy}nAk6Qs)h^JjVTXm#aCcZB;vCbwwiz3N?*^%f>LbdOC?PKTSuC3 zPSx0Ctl}@)CNq`t7jC-o&2!X3#El(=f;sqIU?1Td=@LMo45B{J={t;T(!SFmmDC!@ zlK)^ufz!HqDP*vOZ72$&0^(@J8eP%uov_>cQ3#75`mRRA0{YG*)?#bX4;A?|_Y%x0 zbb|M0TVlq4hla{aGwafy_EAbg;JKLH3wI{YfC>E7PNqELC*ag_BNsDzJG?z5jAHWHWLw-QL@CI z)0@$m&@-t!X}8QVCobl=d8?I#sg)q;UEFA!;w2nby&E9Pp$*5tlX7R`q35UtWTUFbGzx4rMVgq zkMpJa=A5ZV-f7<<@ka=?`XL-(?egooIWt(XL)~GI3+@d>Y|G>4#ix{fi!2+zZ~7#n zc*5mIfDeyhPD?t7PTjb!OHLPex1DEn0R}r}JXQ^ujpaaDjaq~Ql>p=3d5v@_7vCQ` z3pSCCcrg4QV?m+tZpY{j-Te<;ZnCW&lAPflPU`z4T_&F8J-vumAu6 S0000000000000000001p$RC#g literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/arcsight/configuration.webp b/static/images/auditor/10.8/addon/arcsight/configuration.webp new file mode 100644 index 0000000000000000000000000000000000000000..7a8134a4dedf97489c218dfea6021a260da962d1 GIT binary patch literal 11568 zcmV-0EziK~Xx=`QP~7P%xYON$f-Z7wuQL2m0?$9*F;By+D4be#(2a z|H}0#{hQPS^+VPZ{vZEubHC}|>_7c~*7yhhcm7ZR|FzftZ{4qmZ}PwP{V@Ok>s9@e z^}Es^(!X&2+4jHbzvI6w{gd*m``7JH;Sb9n;rQw2-}t_Q{~-Gl`Ty;|y5B87asM0O zzrmmCf3|)-{DFQ|{I~m$_Fu=pS6z*|pZTx$UZ7s4{EPfI^`G(IvELzniT%_3SMJC4 zUx7b7{)hfU`?uuR*az}2=YQ<~y8iKhjQO+v7yHi=pQ!(t|FiA`{L}i!`j7A5HgT|L*boS^uOI9*GhD zPK{3aWhPK;$nlt9YgHmckyEbLP)t@&AS;@h}^!^LDK(ciAusQL*`oTdgR$xrQkK_oBB{;1lP1=7p^ zw~lk`Y35xy=lsizl98x<>>$z!;jBo1MK)B48!AMZ+C9;(@=Sj9Mh`N&0T#e4U^_s0 z+|}vsYV`LtdV88Z{MK~vGJefQO5z#KAziCyeMK;TO^x^8*iqb8D8PTC?w69YSAM0Y z_(2=nDEh@QP?f6*Ng$7U1L$(@y{fs?YdEx$M_pYZp>VZUC>V$sP}IV{a_k#o9Bxz# zt}eo}@t(lv=A^~h%}en(7^jbt)$A7mz&47#EFpp%%ZLf3f3|rVC;)MCjdQ-;>b2tPCQ|FffO>c|~eFom5=9-*iF*6e}K*=8y`W$Lnf)c9a zmyh54N>-}>*tNK5Ybx^$;(Kvegr+%=8Im%b5`RRt6|-ZPoBD%Ql9<|gT|UVIdG!1U zIJ=+PLL-Ab_f0Oa&i`xz;!o(7#GlbEi61E!I<%xcpd66n$=`jnZ10pHmtPfg*SC|3 zuopfCF|@WO0e_7Y*!`l6Ted0GMr83rlktaOm5_89lOYKtEIF#K=Bm4zs_ts5xvH+_ zs=J!1?rN*Ks1CZ+AhLDF!kEr+%gy~_Kk&Ig(u>ko&6z{y!~FJZG#-vK?c%Hj&w@$3 zN!eGY1P@QgYewWyZafMK{nqhT0_VXcB2Ov$DW<;s<3*dSK7`{UTOx(FaI`n$T7hvK zOKv4LlnvKEqFWMwM77Sk z4=#MB%8v^fFmu5qfu23r#dz_I_Eg4uDq}gvFE{bwL>axXNl~Ue(A}jS zXDdB0vS^rDG)u^XQ}D2}So5QMbhypdsEF05XRR$1A0h0#8n2iK%|!`(Rl%1nWlv>H zXR@W|&J}hK0AVihm=(UbH;B545udFQ-G|_IiFqT3;V!QWyQ1DXUw<$t( zpCF_w+npd?jilw2+bwvcILT3LVV!m>;-1)ffNr6*}be2u;xn z)_;#meatZ=@4v9u>i4Q$VLHvE%J=ydC|c1@Z$IbT{T^}((t%JYGpb?g-%--yUf zbx#wK$PeUE%+m!0-rPC@S(2Ae^fX?6DZ{+PrA6Ap7*jvpc)A?{>4k0PiH>&i#i5 z5z;hXwdlx(RtXm43tL<1G24FF?-`U)$r=)4YWspe#15d4xW1JomkE{d3_`Zru*Y>G z(^bK{!d|#Wa$qir0DmwQ^CSqnr4p2$6QXHOyO>L!!sxZ*4#R6*7y%3a zCVeW7He@$so$7qW@hp*y!VUZrc(CoeDG2-P_-5H*p_!K8aRO$B-%Q*>{_AJ zUExeY&hS6yqVy+_|6~w0rWN~lo)ZYz0`#r}>Meb2#%z+zLg?Pow_r*$ZOgjVUot4; z*%}>S_o=k71#uyzP7zhL2^$_-fuD!eE2mBdt}6%LL=`ZD+z3=64!r3>boQUVw(bT{ zj|#PW(Z1pyEnL99bvZ>l&X)#0CDN9_Pw zTuw9)Q!{u9!NIOPVKP3Amt(vY%Iw>!pOkAyMtyY5tbvTI4e`53p+ywc8ac$U*~pKX zCvOg1FikoP|0|0(a!qUUbPoq0AL~5J$y8V&P=PE@DsYcCLn2Y0!7Y}d>D@HIn!Hi; z?m|OZrAe`?4DWYSw{j#)|D%j%P@VeVp^bYnLw#Yu_2}ue9_?g{%xgn>LyTWl=JVy2 zvUD%-I?RIV_afwoK0qxb_Sd(4&+*M zqHsrk?2#;XY6$Y`tZD_2#|ha>NQbIr+fiR>!V2qPy@i@>XsO@#cTAgn8u?-`Q7C%2 zh*PJ|b}fKR2loGHzcK#4Dk~^6A?59toCmi)`yX2`TG0m=J zPfafCo6$$d*N`q4!{9oA8%E18!m8fE{UI%8Irq!o6W`x4!z~v19@SGeK_w>CsP8f( z*edRtLQt@a?5f+}4H_qdIoT{E7@&z^GFFcgKN;)h!I_NcjuvOle2V;zZ##@~2;brm zGQiuwT4p*G9uQRM#}olB;Q-i08Dc2EKlg4d1}_g_v+&)v=F%Z`NjG2hm;9sevz!VZ zSfn~`aLWCI2kd)3iU2%ABP+7jZ4YOkSk&gD!tfWpexXh#tfuB~9xxVy7kX(^m%ASL zk?F0Dzc_nfv~n)5$MmZYDm~iE*GRe2J#ybRL$_+TAav;QVS!%Ud!K40VCq?Xq24&v%q@q@;8NI^0lL~w+S5qC%z_XqEr z_NQbBh+{f%E_p~Hg`5VUx>N{Clo>8kT96y;h1#6?+@cbG=e;j2Y(atIUFq~*RN)z zI;k6IUWg^d#f4&C6wJTAc>e3l$fXIKz%F@Dg@Q;dOWg|~lb~zHTF;8}+3o}zOj3<) z`T!I0w(smUpHR+?sG$f7jJCu~ z3@??Pt0n3xx}IN+tA5 zWs6Bh>b-&YvC~HnT;&@z!o$}yTJ*LDOn{n(geKTSaEkBU$*y%m%rnOS&+UjJW~9FnwI6$KsN~Hv%f9cRn<(H@N6Z+ zpV`!PqJ|rK4XO{XON1(6ZH<8CuMl+VWP1_eP~tMHJ41gy#!=VoqPD^*Y-WSg3tdBb z=gSIydb*L_^|wE(l&Y@=7tsYVyqjOJL?nf7xo-t92x25DzUp~aKUfSGnj8xAhGAN$ zjP?!M6$Z&NK2Lh@sTl}_E$}6R#HXk855P5uYC>m#!7p?-ij>-Bd4Kp84dyo%+6+HV zv6SHRO4wU2N!pW!UoGo?oemBl`!QvN6SAI`iJOu&&F@bb_`$v1WhjvIi$u4s)~lEs z=yt6nEKt$|zL;kJbJ0larm4UZkz`&)sjI-sD&p z!EQb~(JZgIIG#ag{u_>nM>^6v|DLVp8GXMW%#582nib;K6;!1~oh|BMElq1%&^B{d z3B|hU)tKH6&l#Yhz3WQjQmHE)h%R@5Ltw{Ii&9W5;mhLyEvn~Z%?#F% zC6fGF^a^yaLU&=B2&xOs%P%7S@lB`_nAE5#6R64q+cIkj38Biv$+1GBkgRabOaD|H z2gn@@DoOZUQMjbrRytJJ%N)&(Epak{d9?OYcNeSJ)nUmu3bhd!(Qk2)Ka3~qxNP+o zJFTcy53%^>M5d-i%^wH&qh-b!2-`D-?*wuZ8^xtC3gE@@if|DB(x6n3K!yA%K(0&3 z6YQ39ZY+~`IG!dJlit6Bxo3cuAPe2YfZB`^S`q&#nfK*n)p}s1kqDmlk)XS>@p;Av zzk~+HQTimz={5LzD9q?OiCtU2oBmmq33+Fp9kXnO==?4$+!y29@Gz?bxYY4q`X)(b+$iP zE%clA|3E;4vX!MZv>qC{yFP&3*e`{fg*aaihA=kRr+0@tXq>P9=wfg0VaM=hCSOA* zS1SJnnW6urjJxho2O~hiIR2!fJ$pYaKM8820fHoj9Lk|PGXAtW=^cp<~k|-z||Z8013Bk zS`V7hYiZAwXI-oePI+nR5{`ch>-O|wu9AntY{Kc!t+%%yrneH^m@#g|Gxyp=j*qXnulPAC$?4E=(|!+FQ)Xmp;eJ=RZWM%oR&aS#YLIq@I9%X6pGVMUGz@vHXbr&`+FU z;HUO;k>Ed<`Wur!$IpJ9M&Ee*@kSh*YzU{($}sB%eB0<6KfH+#!awBji@DFnNhPR7 z7Wr=0Gq&b{>L_&9n|C0bbG-yxyPdsy>RDqdHtW7&!2_2AOW2Q{iyY2+HrDzOjO48s2sv{nSZ?-n zsR<9auW#2igIT8%4c(Le-I%U5vfts!*Fb23H?l951?tvWVUNCWnzj4popH zDgXv9KJqZ&dICx0%VAizmj4#t+og;_XYW+SaW5;ZcSV`Ss;UIMzu4euUSUatgKfi5 zu5nhvZ9|V?5;<%OmbL!M&ln1rJMz}kN&IPgMREOaol@{g~L!#l|U z#)d@D9W(7$eMWkq$Nma+s$Cd$O57R^(m#GY}qc>I>@nPtP%cOi7t{IFJ`!ZF{Ezxugq)#3qmgaU=e-dx1fOz%<0j_v5; z2M?&3M*+tOUGY*R80v$9E>o{zB0!&JhM`$vC=`9x2N_2_?ZtmjT96kBL87%=1x zzSX;sF}lyq+E*b#J9tJ)BG6?&4#5>%ZM)2UN$&i01m##?pZ>n<*O)EI8~#I`)KEH} z-FSZD*<8gDe@)J~(l(t2-cyP*`37ioK5Q1rbHdE_7BCGr(8)sKP#NKodVu0mA=cDd z;**P#A92cGHo)W@x8U(}qJfW53dp4e_`)PqTvG}yZI7B$scEbQqL z4V2EB{y|Eoa4!?!jUTo3dAF!W?BuC;k;6a)tZEP_Wo>|*ztm@&w5{c2FOvp|V9IJV zK9rcb6SyNRtypeC()%xt{%{RyR!awjTzBtV z#cO(pCL;$^k8NT?pqA@VZ>`?KA87rzvZ-Q+9p+U3&Z9kU&eyWpfG5BRf%H#VflzB` zquAz8eD9#|w2mYW{(QTYsgNB@HJzCi(_V}bxZjj-s}L^!!7%@$uL$XcTQLtQ7(V>t zK*H)Kq}a!WLoD ztU7nv2h`~7c8_pJ+!)8EsC3mLq z;nV+bOiY<%Q)Njp&z!^lid-FjVR>V#oB)t{`G$leLXWdJfjVEwrN{6Q$V%m zG)1Hf{T$JZ3gi&3L$qC*fv?>LeT&wX754W5VqqO9cfG@L)uFd2OkZj^gaTqLVHfbf zu%l+sS+fqpxR<@w_o5xc{7C%R@+PM-d`{!G3rE#>!=UTP3i0i>i^!avGc#3yN|vN9*OLIp+V6kl+d zhtu6DoRM7AOU7#LcC4!xZUDONiJ)2u~s zqGB+p*+9JRBCY_>F%^GCmOFq{J$g&)g0gRDm0K+Yq`rkDwB=f@YUSdZx`m2?s={-QaA3?^^rN0(2M;~uWyGxzDUe9un!JGB? z+PIN-=23R_3bm1RIgU@VPD4ohONBdaMuCcFP^4Y}Y*!8zf1Mv`BVWHiYTWZZfuP38 zgN)aUmZYaSFx&*Z3#X*Uk73+9{fQ<$EfAwnz!J-sPzPo^e z6tT`g6WF36FBW9;`as+l8OS3Ii>WSC3Q537yP0uiAc8hF#()+?*{2EJAWy_s=T3Ho zS#MuHY3joj-00Umr>uZhc+lQ(gVTG(#L+!3 z%=ud~PoT6I+yyrb>q2ET;~GXG1xR&|B%_19LhY4N7K{}~*%Lg-#-f^kpWNghVHovR`ibYku_kR3$>(C5bpPcP7^CDgd_QlK*5utqr zeEP8l5`z66M*&kJ`^hrgvp=AwK<{?}Q^YDQM~tUp>2JZ3SV|W7wbx(dQnF8uq{5DiMlKZNS=_G?K=Y zhtj8T@9>CAtz55lg-4WAWLFFqP~B<8!%9HTQD-!SC^iwiG#r%wUEAXW^2Elz+!g)N z`H$}$(D5ZU%^maBP$|u3lFic7P}Uj7QLvZbxcqtAoV9I1qsEcv4PF88Ax%Onwrpy? zDYB1>@VnanRBcfa@wP2-z5#6d{KUXFu$Ka|7Jf?DH+I0k*p5DjIDLe6w!le)rz7$H zXh9o^Od(kVJRHCfy1;T`Y*L2FnZcLlIK0t?Qd{M`CTpMcl5O_cqdH+=IsZZoKp>qM zg8#x$g=_?#H`dqGO}(QX!sEu1ux7huiVdQ-oR+^v3%>5pHZ`bj>Mzu)Yq<6R5|+K+~qWY5tQ06gILr#4>dh zLVFck{*A20THQ~ED)k`JNE3-)!i`zm-;v11U`K&WYDMH#opt}lg&#Ag^y~N0&lg1; z=kx?BD!l75;@D(^dYVhnVffp0H{pXR?aEIO{5AwIJ16V1$*V!~4F}_ZOYA3Z&M?a~ z9Xm#}9C(s7Ujl2$1S2bo=rbJhyo4grFUYIZopAZ=-SR(A0=lInEVj#8>!rES7XbCS z)@yRLALlQ>e{B@s)G6o$g56+REfIt$SLxMumGC& z^`#FRiBRyS40h2JQ3ML=N`qp`~u7wW=gyO zbl&b@@%ah7)FlQ#VF&s4w7m4+d?5Tadm3N?$9~r(vgjlM$^$WV@R) z&oxSRq6RPuyqdT?;NfuvhN<`kGXMgtU1*#z241>lcE!)yRhtX6r+7O8A3fx`&d63Y zg%46~aZL)rlkW!#v%cQl&{e z1!+3&n{bOE(!Dvk)3*~U#B%Au9`W{hl9_>BFT_vn8(-OqGgcse%nbeTs$Xm(iZ$Kf z0%CxOW>@vimd0Ud>xz#~MUK%d!l@7a{0sKCW&s%L_0Xq_I>im`TBL7J3+!%eXzJbZ zZe6*z*04}MBcsOtDBGjB8IFHX4u0On!5QGS4_hXUZn&yXeJ8U7q@h$M6u{C1Y}Tn$BZnWbT`O1iVT3n2@T@$1<`n@mvMV5 zW=KHw-b6Ddunviv@Bltp`@HoEdV5^Q;8?P<`j!jK$b)W3ng6rZhQlOxoWl4Wo*`>J z-yQ$HwY9C&pLj@V9S%b<*n(fX-%G!7*lnO?qD=HSQG;}UWUEW{4@?8GBcESyr~oWW zFtf+t6~up{0RdyLf*13I4nK|8i)) zs#gBxTl-NUL=>+hk5r?yG!;m`au&LLXBA2{)nO zV|72|?cg865=N3kUx6j*6OEp2b!yv)L$!2x!t(UDu3r41_5J(T&>FJl3pxP1l#(A9 zIrT7I#xzAY=7xs@1Zoc+XW!xV zg5~IG@#-F~5ZWGi1Np*FKshgfLaHwpgdb7c;*h`x)dZEi#QM(L5b47Y6pmDrB{kZ= z&bV<;_mAIJksr^4bt*N$U;~qZ&^OHFN+kjkT&6IM{(!JeCn92)suQTVju2$|#mn+0 ze2ZU|Vk*J;Yx)5;f5C1RcX<;)j?d&5g8lXjnng4X#b_}7+Q0w+5ZQ-P*mRijn1;aj z02&&svmAT~vQos#*YSumynDgwQv!OaNps^%Ug&QaImDG1z;f6WPSAPjoY};=sb?~s ziX)m*DCA)MHY;sLkK>7 zJG9A(04NW}>xL{Kk0xlYm69Rjnpbl&oSg%;A5sR_fj%W7WyHP0?;LI!GoSxPl=AR z*VL3ye#I2{a{|n4hwCKOD;VR7?vD8?pdHznP`_p@u7Oh#jKO*Hmh*U|wL+1gkDzyrMQ!etox0G)Lhj{Tpp1PLS90>C%Nz!o>J>FE#FuqV$` zU#&Lx%trIRF*e=0J@s&t6l_^!DDsE`?$@3%3wU#9}cL033w=RY`g?C=jPt z#Tmm3h5yhwk}QOOhrvE=+b_UDnwt)CE5tR&8JTlDH0Wtvm^g|6;61`>ME}~!h-T*= zL9Me%Iw}4I{#K=u+40T|B=$rH4F;glTeG5R7Gjc66x;i!<8|KMJhkKYUpy!=M4=w zxX4y8kJAW{6VYLtIq~$y3CNQ$gMYm3A%TMB>Bt%}WtF-NsRtdT|9s-&@H^#YndSNVHYn zn1u*#*g}Mfz``NE<-Y{A~L>Q+TmJwlZ3bJu?ih0W=k=|@n4c> zq#F`fBXfWZZ-9e-d3|o-5keGZe2*Ev_~*s!ITy#P-Q<#x`7g75O6}ONgoEL@8aWgw zFheWLo1Id{!_wV~UA0Gf_f9QzuaMneKvkRr$9}`}yz<3GHYG(>lv{=+&cS3jrrkZk z5ec4vriK%Rv2EiI+txT?{#Lg|G_-*sF30*it@X%tIzQq%K6ymwZB_w7vJ!sx&Mp9@ zG)#(DUSVWq+29!i;cpR>Bjl(?bhUCGkhkb?ksPr9h*~GpIx)M(xrV&0TY@k&6|jTg zTW<9}iW#T8p{-~iA3}J%Fm!^4y({qv7_pnvh(cBro4Z7%fAA?55BneV1h^S(F8Aaq z1HzT{%$qRPJ}>+SyMRhXgUrx=|LC1$PrgJoTpyATv=@j6wY!Z1G%!QO}RreSNK z&JIjykLc`{h!5#`Xb{;=orgW!?GIO^e+Um|<*u(fp|nxeDggW{Aqdnfa~xRM0yYu{ z^Q#OhQU)*aotCyUiM9AI^aw6YVq>Wcg!nK)b|ET}VvCjV#b`qUYjU4TSAJy}LO@Mq zNLMI_RE~cOp%rfpn2|?9vj&e|R1~F{i$vtRxxq3*TbXU19EwB{cL6d03l@c>L5ni% zk7phQ5#ct6M23MO(d|xd@pk~KmJD+_O%{P0$@kb#w+@tshW}_)LiIzzmm`mE>=$tapd&if!9GfYv|VJ z4;o-x9zH{hD>g$HT%UU!U{g2OiXR79#dtBwV^cmwyu&m28-%3S_@-vQ3LNFKgUhRo zCK_b^ZChyp!Q6ZA#-AgPRe01jqeD1agXj(A2!?~>O1laD|8#@tI{C0Ry4yLYc` z%T2yEs~;#xj%M!_Du1aWuKHAy9MD!ER$-F^qo8;`Av{5(#;(256ryRtn;*JkZlTG9 zcs;Ku4JlC+ebfnI@8%J(S zM5*tGddbjm^da!&ke0dUYvwQELi$TZ3}M>cu$390n@_o@H{v6oO7+vv;f`ji{)oN4 z#AY5c&L2=7DwEJmvEBsrc;d)VW~l+dDMsT@X69F$1e(5IVLo i1FK^YI<;7h41y*le1r6L@`5#)VMXtQ;!xLXRR932IPCB-2cWm3XZQHhO+qV7nIrlvm-~P4hM^()=*L+ru8ddUQ z!oqhy0RU8le#t7!vf&^7*~feUWCBu#0F?vrSTZGx6%gj-64JfI_`rsmT77t=4tR`7 zc^1V>&v|xJ25XvG>WaYFN54n6RTuFdf3LbDeSLp%eu1}upNgF7bm3il6?B_>@_Ds+ zZMctkPd!qd0DcO*vzB*%S{w4NZ|iQaU#nYx;I(W+W$*HydL6jSyZLy3@7UiTzecU_ z_J3)6J3Tbt!Do8I9=0ZWRq+l#;Js#V)9!o+-#34%_;n|Hm47uapxx;lb)SAHJ$aep zoq7U##=T8nfafGPd@p`epV6LXZ+c&QN524k*?&fVHJ5Ckd|$oPeBpftUu^f_J>Xqu zzwnN{SAFZe8ys(+ReyP(eF1srd3&C_pVDBEy+sNx!iNL7)7?$$HWp1BfnIR4@$G8Nq#t=-bPA1UVe-1oH&);M`mIh~c3T#XO>v@H2JNyJU;?Py{8 zf}Xy=5**>RpnZ_HlWHs4K-SrnY*8-5Oj)YApyiQ$69Y9Iud1+xmA${XD#LjNG++9G zd8(1NYv*&Gl1Na5Yt`~eB5E3(Ud1aWkEwTb9z6$AhGI*T);e?&OG~c=S9U+9zb{2)$an{{5gV} z{v8PpTZhy3(2l|{o`6Wwt(g-_{dNc%c&x_t-&i*Y6-%ruxgIR z!Dr{xrDg8&Bxb!#PAK8k%8#V+Xr$U&%y%B{(JVmAk1Tw^NjVMPLO?$$fVjE7f~UIf zFySw7`+5plxnyGlp;agQGT^tgASvGCU1(!X1Iz1o|H+t>fP#U0rMdy?JP|N>KMyj5 z-Y<_)(dGk-=LWuAQc_oa%_I+{tLuU3YUscqbo{0QcDFPCLd!eX*rUdc)ElKS^^cY@ zh`8-4S;3@F+s56s%*THp+W8STpZ`^)3O6!R4c@6H*0{gSPRFev7p0Uv@8ms9f|?gz4o)gn*AO zH6_<&&qOLvcrld#ZcYPm9uz1Xi6^4^G|J7CjM!r<%+R<=Z{>D}3HS{yiGT89XOQ++xMU+JKqSNsQQz7=%;4=e+SO=4ux!zNsJK6N^P4mvP5S-|EJHoH3w_G(NDy<7*I zIsXUazjQ<+rILT1y+JkQta*d}7iWJg0BzY$^|1Pz*ME}#N72OP>)#Okm$*Z^fAtyj zKUa|ZA87ybGslpWME8HJZD9ld$K`)%u7W+B5#|^CGeRH!Z2zIg@ju&t4G*e-=|3an zza;$u`&i+>E&q#g%&dfeaQ{cwuBfQ(;)b*g+B)Eaz~-uBN{)zHk-UoDkbT!N2A579 zDxY*@uoRHWZ1@|6&qr}4Wiu|v&+^X+$e7U0w<${hS6<%N|J*k%NQrB65$>s$f6&}- zqOvT5mjy_wxL|0G=@!?I(H_(dfwc;kASj}IYL4B%X4xNG zpdE{~VouT2t<1L3QxX5&^3KEm46FZB|1A5brvDiHS4t)SzpVao(UJaN1pM33-b?_1 zug$|KMSfz+NG;-qw=a|Yr$$wNZB)4A-Trpqysv6QT_b%5QxqxcSvn@LfIo>h~NE`+U|j1bm_^MwuDD;1e?UnD#%9tKFk$dQ5Sdot-PtSjdoJ zmY}@h13`qoy!nSIcUMXaTVRiA#_C{0NI}GgNFNcff!|R%_D^KW(l5%I4_FJ;S<}i^ zxGl{Ul9Hm*E_k5B6#ZlnUD+aPUzg*E2y(LFi+g7&>R3wOU#g(r(~Xj*3E{4#NjDJ& zYat2AkmcGU!-Wy$iuJ-nZkBt1BanmFk}_GeYxW`>ksRrM819y_O{XU;t1 zYDK@0$vPSXHjBB{!h{a(T$t6r1tH142C?pdXYrT{rlwH`xL+30kixJ8pBATDlTdQV zqXU@Nzb{dJT4=wx=uR(h%kc;{9Hb{U#1bQivZ(o^^M6HMTl>VK>-4PI>fbl72X z+-bylVtN_xkh0bfR$zz$S`HC{Eh}Q9WH`V4O-5|DlB&_dQ)IuC|2{r>4Gfq-@?&)L zNWN2N4J3ydz4`m>^@uy)ys$Am_TIx4Gc^AGRMWnX^Mmj;DdA%Mq8$4k755DXB}hOW zVB=%D`GGT%!FcF!8y=bX(nj{W{>-lsoA}Q67k+yKRNyRGDd?Y!6Q$822s@ z+tPHxN7)Qa3gmaMcZW0Xq`q7rruB`FqTjSaLhp>9hu;-_hHyWZd5%M91N7{Y?EwLu zF_)bK#v)vkdtQ`Pe6j8P6*B?ZD|Ab_8X>2Ut&+#s=LS6%Ai=@w97@5fb(BXPh}Rtp-^~y6=u|ou?R} z4y;u*=jP*o(xODgI_oS9Cq6iCA=;x-@T z1~2Bsd}8!uBheI7Rnx|Xc!PRa;Rktj9}DZ5o7`8Va+v#;W_X7z1v{Ex2caQPKdyRn za*sx>5{Qhq?ay1XsJuZdos z7e;&B2T!SxU6u2iI2yEhpZ0CK8|)@rl<9&ff*_(tu2u~7bL7GsZDT`4&#=?ETdfax z%EGoDb5D7on-lRj+tLCS*f$LSBbX-(<#HTfLFx0kk}!1tHVf^(k7z~9K?ra0$1fu= z1og|GJaOBDkM8?U3ixNUv7nO!RT&bYQ7Ij=zDGo(O=<^^u4JeoTva+-Vdv zs3wRVA_B<|jIpx|)ugrd+x>`JTlI=<_T&FGlRRWA6yQ>q3h4(Bg6|B8%=@$VYwb7F zkQwr9nuU0OO#+4zcIaR)Q#qU3yWz609F6JRC?AU!edVvqkCbYU-LvH2PWiWSf|V8N zbz&VahXuGImD*gxs15ftkY)Yz?I4mG~qF`fQ73%#ul(Sx{YvyKoB6j!ymlQS0vlu0u!2N(0VU<_u2_<_ zl@D(52nws!d`K^-AQ%2KW;YN;@Mp{m1k~IsLIBF|5oSOp%$Ef5eh`htR+xMxN5hNa zd7X3XdDP#%fOr^-YvdbG1h}b!+@QR!PtQ2JvE(v-Dv(a4dfCsm&N;KI6=ch(jRn#? zGjrk`c&(%>8E+~21jerk({hq>JAxF7m`z&G#GSJ=zNV`vxu(^vMrzFY?GPvUf~R5J zywh*;8dp{q-uZNPXq!%r%QzVZ2;4bSC|2brg==1p9(|^E1!1wf@xbbL0hm6;-<&WX z0$;S=j=2urBoXf$sVE2c`ePHTLcCD}AOuM!f@PUAbeafh03?vqW!%1@Dgagokc z58vh3yBDWz#{lWit=GW}PtndEy-?JV+wAQjeQ_-|hY{hXa}TwzgAL$m1%$`ufP=B- zOMUk6)!-}wpuyUbXMm`D9@4c4hu`-Dgq(uXz-EYX)tff4k;n-S1Ask9Pwj-l!8@qV zvp}rY=C@g=N!xWKnjg8#!v#eAAq@4A`ExdXgm#KqJnVxwnS;! z8vFvKH&(peU)HA9M}!`w02*Y3U;?6w`AU9zLmrW%JOKyRDc0)~**C=AV4NM-c=Zk~ zx^1pYWw7k6TejzRzM$qO?q0J&kGCAr zSF^fTCf~PLCO#!~U3yaXeA~C2>L(+H&1ysQJ_gBnrnmrp3#X1bHZx`~wN(7n<-hiv zLmV3*J@I1q_4S~3uGF5!lk-_@MlDS1ArjrIoEdi#lXZO02dlU8g6`73@v6!xmLHNS zZi@WSk)B(9L@V<&+x8`AIy}-Tp*Bq`^yyY7%&-^6Estax z$b=?Zae-=}AD2RL%A4l`0My&NEC_G_z{VW`000bJ?)2gM@kx!TM*$YUsJ8+PhJ(`> z-6S`a{Q2#SG-oZBoUEPi*NgB3hn;b&8x}88PB4-OTUAGk8>k=kX$? z?x)Xp@0SXEZ^dc(Jw54wze0rsNe`PK=-}4X{D7t?MN?Tt6+Rs)XhfV@r{+)SL1b$P z36yY>F*(Eyr~EDEg7cjD38B!RH&!)O-_ywSK*%b}@UL!XQkhXp{?S@?G}d2!By)+* z&dpCHiWW{gver$ok;Zsi{k&1*OLc_rGQQ!FsM;8}tWVWI?LMwB%+FCPkXAV(KYfV{ zugy^fR0w{qEy3h_%chZLw-c4Tp@Ix-r(4|S!@Iy?hMKRz7046^667Ahb-9kQ4XF3H z21M;<3a7fZ&7x>Xarqd2RLgTl`R_R^XnT>nr*viwjb?ixw3FxW!QOW7)YA%;Cp~spD4dVKSR8x^J>pKxhfy=>2t-+LSKn*`6fFVaDA)gf zruJTDE_Za|e2p}m;VrdRTvHRGpW@kww(rn&h^{NP1;geI|4Z)c=1a=NC~`#u_j2qk8#R|vA}2? znKR(fMS1w{*&36v8ub1fPXb?S%qXtCax~QY6X$n}S7*O@3rUq&MKKQ45|z4gjzHQV z@y2dg2T(wR8ox^6#*5c-%ZO*%eW9 zEeHh?!0(5v_ii8Ybp_@0QeU$@FK2l)6xu{wPk?>_5?C-Eaa(h{9kFzp3TX{mm1+3Z zUkkqz6D8R=TEMurU&~qB@rl*Yndr?H%E<25)0$od#Eyw!-FL>T5i}CMv3=;YFI4o; z6IVNWx)`Yq1(7DuQqw!An|92aT$xy&NHmRWnAd?rJAq!1hB%S6;-^azk>Qa)zChn* zv%)7)=7qSDzWpXd4joCOSl@rKFb*7#-45R1KR~^ym4xlcPGNwR;q*zDk1l;8jn!wZ z(2y!RBjaucFnov*|9PK&AEDAMAHLOuK-;VHgTV3D;4viaSd*Fd?P{S)0Yamq3Ta_uO4MSdpZN^fNuJ_MG5QFP z($yJ)tv7Pfqz=6dnL#l^vN>;8FixlP0N&T!7=VjF8f;th;p495%MX)<0Yg>zxS0S1 ztV#pttCY3zMIgc2dw>}qS`mTE$%I6Jot;1Ul|#YY+skJ#l7%Jv^H<+}z%oL4a~&N= z$R{=g;*oyq*q-TUB_z6zlgFx`7a6Elr#E%CpMyAUei`o0s|2xv)b1z?*+W3k1d}B9 z91#OqjjoH@i8(@>+x3Gq^A?U*2dTmK6}NqNw3iJW#5$Adu=3HkuoNQh%=h>JLG5&= zPJJ0$$TfXdYrV8E9_oiz_nhz>>3Ai>6UM~`D$lU=6(q)AYGqNz=eeJ`KG(&TlTH~$UI{^iHe8i`hO!rI zs8FGs{6LG>em;F9b#a9L9+s%L{sA;*6^NEB;X#uAFqG>oZN;Ln1~-a`t-v!S;~l|g za!+d@Hru04i7lWcDj9Vukh<}PH8HF&MesYurA=Mzdrt+L{&t3=ba!I11|!J{RK!W*X`{$I0Ow zsOp(KWo*4fbpk&9ECD0SPoiMz2aNx;}qt?ND;9fL`**UHKnN@b8 zX5%5=&DXfLSPVLqLU;>2LK^(4-UK>O5C&*@J|2M*MGw_y)QgNaqNC~^y(nPi+jnk7 zfQC%JqrgFkxt-G&>j855EkKLo`jVFGPWHw}a3Z=Ka88%ny`Grm7hGeW@5EU}78%gv zxC%hQK#Iu9S6hE801$e1#pftth1K(?x>i7uY6z(jX`cbyV!v#z1l@_Y32YgPP+WQX zTjX!J3|HLU@yfN}3CfIPwS;X;7Z$=R)I2u#j|`3Uoi-FD$2g}&TXG(9|1}qEM8oLb zq9Lf?L%bUwghDy)j>}t47^+KYqRJ7qvHrNn@AyCRS)Q~E_B0k;1{lfqB)p`VTT6i` z=+GygxJDB%*D2N?6S+>l{twa&s{_¡rOs2deH;9WwiG)IR@pn1H zyeZ#{^qT|YWBMyEo%JUKzIrL2B?fdtC_Z^0{RUc|bgzg`)xE2);JpbjUYSzHVlHn; z_Zu;pVt;orMwIoFgZKvM`0HL9u!A7n`N~mSN+i4ohOq=$G2|u_ntsBv3qu^~T;`5l{}jNT z1eIDdWLKaiQ}dR81whToQMH)gyJKD@=o@Y7Tg-9>E1uW{()kk2En$aq4#(CAn>tqU=bAEBj<*G7RXZr!@u$24Cy%GBn_hB>#`GcOSs6vRRW(8%nS)M)*&{&6<~UNs@4^4yiNt0rSzqU3K3#aa0NMwcMDSg@V2-7CDBYVuc_ zG5ZCg!eEW6e0^&oS}wEwjPn?uz54_dTTyj-QX#kZa9QNuCV79gHYwfGEAQwZP$4Va ztPq=AU;-xB%SDP}45Gm{$H-VPwR=t&*=3*8k=K&!g;s@gqp80TWL8f6NrH-Q8kLp~ zjp)}H@^xwiY5+EwrG>4Yb~xCw`bw)NW5hpqYe&q<@sw_tV1ycrwzDa+nfBs+(?!59 zE~6b0yEzYCS406-7Aivh0p+9(XvJ$ML&*mKMEx1;9XGMv9KK6cJwr#n#uW8Ab(K`% znHix^2i7g~J^R6+lB6dXrFHHeWP{8kT`AKr5F5?#OGx>mKL4)gACCSgIi7Ah+QN_%JKT)UI*Md@Wn7?V=;Ov8^as5?u0WKZ=9&+w5>(sgUXf<&J zDn`NSs=zD<-!xfH2Qyx#!47tfPZxb8k$f){V7SHCEP0R~uc|`GAr)MvOK42fRT652 zE(d(e7uJ{kP%-)n+T2PDRK3WG;yr6bryS{g!nkF{M;e~n_6bt!zJ=JGd#_*M8Bw$C z6r09KiUq}-!xm{+(BUA2LD2#VZ~FK-C?DX-1kkfHF=L%AxPDS*aj;EGSjyKuR>75| ztIM@wdtJocuU>A~#zs!Z4Qy1Z7kX-xfJeDftijndtEfaYG~RRCFE|Nv{7ggl_rb(K zrU0kS1~a?%yrtB$)gbot>&fsYcD34CvJ3HoW?h6$xUhhtB#E?i&WEo0K;Oz5h{pT# zef}&^Z#kh-Tw}RtG2%pZg{bSqq1K!V&P*ZB77a|i*sm+X{^SOuDIPnj0uDTE4`3tg zQJG;Qe3rCVAc`y<8|-ks=XV|pYxavPp4BGXJ+(F)nf{S7);uh12_+d_dCK_wi~zul`DGn|+k)nmbgMhlJ?%Z{l^o2lvtzsfZ0^B$FZa2xV!VmKw zl20~6xgPAiD46Lehlbr|PVEN#b)T#mI*u0Q4^K&(TtTCcv|^kIG&62dS% zY%}JN+?>&6FXpJA&%%EwwT}RMN^P5{4JkPcG^>g3a9pfyE(q2NJh!n+viPY3S05Hg zsgzG1SOxtl0sf{kQ%FS4vJH^Qqwg>eEQpfptJ4w_nsN}B<=lc1+jhMV_A8=C8#1oN zC|-)3eP}^rl;JYio|i&Q{;nykBn<3yB+KRCctA$iO_r%AGPoVcDal6~yLxNQoxDwH zFRs{em`_1=eg+!SQIMB11=j6>!)_s|(LRcKoyI73@TAg639+I($L~%nySWxxsr{kt zsRcrMX42?s24bU^zaTe8$s1#{>jr+#U_SM!{n5mtWUbqz!ymmGO=ll;)9dGcIg(^g zQ{GN??xOI5<>eP7uY_k6Ke>MRzA$DV*84W(+6uWtQ^l8rZfb z3XF9VvMEkgs4*K;R?i2Up;^st#}e8SVZWIBJNDp3=to`c<-is^I|;^t6U@SJ5sYV5 z$AMI_n|o!wE(=o@CS)T6Ma_`$Ze~gD)w3>fRE+Wmecx_DTyyRDk%h_TwXKUmG0H zrvAkmJ96rhnj=~49lOE|LoY+?v_3_QPYt>uIpAJC;K{*!TL9pw~s#=VmDL(ZvAF7ZtR+ylbHyeNN&@U!kU)RA!tM zk~?4sfO0bAr6a7)hr38Qv9H^_p5#2!4B=rI_S;g&GC3u>d4kU%d+WKrDG*LRwKkrU zEDm2-8Uo(Vws~k2rGaw^J+{6y!O3B{GXIW}n$8EL?Q}Oye{=Sc3!;ws{yKS@NW~*5 z1b}t6yEN5Tkf0>;07;)?LzsKdhpRT%!AMwH@u&E;dfK%Jy#sEqyfd*`<&v= z>>%ok9fJV1-8(QU#M(hF7MhzJ--!bbO`3x`FbXkwx2jUVY7zdB>+-lIVQ^-ENj2;Q z9TdY@Xh=K;6->5LW7k){i!?Kki@9-K+UKzQTYZkZV*!C5H-YS=djT`WvgNkfE(GSL znd`Aax}a;)ohwXC{R(inkO{P2r(%h&A@~%NG#6cG5^xGCd@oc`{2_Hxt((3$j?uMF zTcZHCLi!5$B1i!I$jjTy7L1Svvg50n^j85apavKrp>931_&edWW=d8K%A8fVROol@ z8~)*mkBc0XRIhUrkd;GkYGqS_NBE@OO@y+P#9N7Pdox$|FE#W5jeAv~>{0$<+AjSJ z=g;aoSW-oAVSc$Epa}qf7Ps$2xQq8LFxdLMgTt!Y_TwjSnu`ceEv@8rX)(#~G#e0# zArebp+8L3rD+ik-1c3Pvi-1|N{@|uz@0lZ^Egp=06NA+xuzhFFwQIr=!3UWwagDgq z<&YKJbekWMU!|zH+!Kj`&4mPqPB8*yq+YmKyiyH!^DWJ`ig5^d*e2uznGA^Dpyz%; zHXX0NG^hu}ql8bcwBst&SBSO)P_arHGbKnOuEN)5SYrBDp}&)raBR+a_=PEf8HAUn z2Q?Ruym}m>BwgPN3|k7h-q}WFr3%vjU@O399z#XSc zVM5%LmKS|+KPbg(1rco5wN4;{L5?VrY(7mM?BLLvQK1x6GOn$q;P8Ixn&TN4DYYO~=5lT4osu z0maERvaXf>P(nYT2pm5+G(4>Y_v4Qp%WD>++SqNsp`{z_G%=ys0DNI&|AJ z4ETrtS_4X6b|!GrQt&O{j~;wkk(K8974SB z2)7zE6w?FX4giCuDbj+EYuOrxoroMBS!U1GPPHSd2m|_@y;LEWu2lB%A~#`*5B&F`LZ8OmD8!1EC>daBGM~mzQM!#6Kuo9|^ZIIHkHN zQmg#Q($kZ~B|+==#H|mWui5%)A12RNaaQJZmYiANq_cXW!ggL-;>H!v=YVvlowWfA z?t{gX%>pKyx)U?fvt$ca4dA#{lH$9P>Oijr24Liy11OajKncH8h+#!G{vz{p9Fir$y`RWA>qu)G6=}nSP zdUgOF_bYi-;l4KS_*0QERlO@lUtb#*kcAFMuB0i3s0R?@L*5m8W(9x_uBtlH2jC9M z?k{BiYmuo`h!4{%1nSbnOBX;e|JJ)NC!a*ESRhrROMoPE6PNb7oYx`Hb~iS7otS^Z zh$ju}mr&5t-4+%ch8KEcT(f)8Ob`%u6<)HmixTY#`7PJu70IiVs}*ARH~|w5JF`%J z+r*Hb-{UD<1sel84!%a#=3Gv#3l05XtaCG!2N8_v+1?iXJXkJplL+?#STGqtrv;w7 zJUA(}m}*Yk*Y!bTV`fK^za`&DB<2Gp--4ML3Qv{vtt#e8<&p>)O{!dB@B!1 zS=G_i6JxBT1(`qAj)~c_L1PIUjrvnw7fof46Uqlt)%kgP1oVroj@Vam#bKWkr^=ks ztf-l=piHH~vjs(zFZ5-rqZMI-p~XN8vYe1@!DjS*_tYME8ww%>{y~$x@(g!ek5jeD zeOu)P{ZqM%^M>gt?iG3xt4Icnr2Me$)W8@Gv~6mGLvkb(PiM-+>W*Lw`Q4i0BFOsK ztLAjG4?MYF=lvWi6yI$@{;(H&F)jTj>-}2QJH?^k&HsxoFDqv|>|KV}i^#0=N9+}I z+BkvbP9|g#&eil0QC>XcGiiI-=1+H!qcCX9{0s%AcQrn<+6J_OD3Lw^VR*GQmI1+= zo@EMS_A^PFdq&Ze&{BNkrSB5yEA8j?<7zmsZ=aixWk-rGrr!X)1emgRl$C$}+w4f= zs&08hLj$`GD#(%D*|Z#7!&T{V#3SK87=Z-VfL~Jy6s6!))@5O!qYAdCTbU zUs5a9c|PSKcaP^Fk)!$4WL|yCvH5gO=~0Tfk(oa=-hYU?uOAT?#~3`8j>4H5-B2lm z(akp#G(Gluchzl^Iw1h{6EwKu;>5) literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/azurefiles/azurefileconnectionstring.webp b/static/images/auditor/10.8/addon/azurefiles/azurefileconnectionstring.webp new file mode 100644 index 0000000000000000000000000000000000000000..a1d72dd23539c9e859d15a30095711c77e3ca662 GIT binary patch literal 11066 zcmb_^V%xS=v01Tg*NIcHRq=@`PQ{g^;-q5Rwr!l(-S>9izIgBJt*<#h z_FiL+ImTFftI0}BvonB!X-kQ#XsPg$QvX&@l7i=e)9XWWLkc@^r^^_UZ!~xzKg1u4po!3TxIE)(S4W|q-pOJJ&jrXn7~Q_SRhM2|uji3e z01y1?eW7o_pTE5@oG*YV?hjTw?E|2zU#9*Sf!P(Ao5U8{m8E`EK?S zPzp=~S%ECh!CwoXJD)F_Ns>esyrtfH-#TAAol*BmW&+khUta5+0i;tIm%1=YVq1Z|i~s1Zv(`iGS4ZCy~-ZyRQe1x17oQbAZLYo?w&Bk0e#B4tBFQeO4uD) z(#*rdw{HLWLLPU#sr6frzH_ItP52n`qcvqP1yfw5W3Owx@U9p*u8M!L@E0BbC=CC8 z#y|P|4Jq@F-_HEE{-4O%l8f4@vwE1u?gYWvA`ArnwVnC$%(gL#D{A1KJ>KDDG^>sL zFH5brZUWC&uu=qQ`d*I+Pnk72DB6Eb?Jqu{gzKMC{I-9?`yZ@lm4B1=_Y>gLatQAk z2Yl&9^|t+xe+Mu;czmGZR!K}NsT34Ybio?m_X0RGu$KoendeU;^`>94d11v6M06&g zlF#3>Yvlc$_zJhqXJ2)`+6}G)U+%q^$Q7`)@G0xB?ZgieN9ilsFTaK=&TDi=Aqen) zTR9y3CejQJebvC>Me|F%7z1*O$y-!nE{1`qf78eO+ga2n{nok`n=q`9P57l^V)}G6 z#8ZzbcSq!`zw!TBps`T%pNvbEoSyxSHMyTxe`w*~Sv1AfxemocJA{B=ta)L2Ci4$T z+OYLl70tpVMWOvW-M>%Q8_wW0k2-JCJyg7%b|%(_Zl}+Y?Gt4~wa0W49X;>nh2qr$ z&AiGc=k6aa`HOFGwn+8$3ue2|Qad-L|7MYYK$WaJe6|bK9~wQ2ul$cGo8roa43H^p zopM7G5$QJ_<-5H>Z}!FU0lJ+Z<)r_&%v|tHobUP}B05(t;Qof;U+Nji3!nd=YGX%~ zH6(NY?`I^^{^6tlCgU8 z5K8~d#XtK$L6F`3nLz&zDtKD^U(@(!bo>r#?{8B63*>Ksc;i0)mv{aONamb5{{Ksu z{Qny75ZktGbzskpgPXU@xV?)H1k(QU{?k~a3$N4Ns&SPY;J5bjXi6aOfj9Rr;Z*vL zo-=##UBAM48d0OLLQ~>8-v^zDDGSWRszjy*LZFJ;ff+o=%*4NTfl+(YT$!DS!Y7Pd zt}@ai;X>*N#$Z~w{>`adB(*kER(s3Pc!$yMh$@4CW3OX~Fbv2+Zibtzl*!a^gXP!7EXD^x~6<)i>~AEM9$0ocLx5R!ix&bE`n|U ziuHfaqVpXL>>YFz7a^)OaRr3xbzcvRC$U{l8I=(F&MJ9!L=hjow3+ScW*< ztWa`anQf6HiW!vn4}8#?jS`QW8`#akq!f%j1A^B$uk+SLw9M>x=A_}M>}+W*`wzyrfv%eGB!;*M4#^xB1H+e{ z4J1>~9=T{BTS|l|d~dI{)~gr6^srCm`IFHpzTRp{e7ow=@=SX*iz0h%Rf&z~0DZF@ z@`qK8){Ua%ehlCF3Jx@HF^mzz7SAQwvRN$u36~tG{BG)HtrsAL=j=aq_;NU z3NdYc*8a{z*&2@Vfv4$BGpMuNsU$uZK&VCTHUF;ctbNZ}y(r4I_&1wRy%2Jrl|oURo%AdG0^mG&EgdWf!&ZGzK0 zHzvhy8cQ~D?*ZD>p%W+>yeS+o`zjFM%o|~Wlwy!rJ%eo`DA;^ z;qx|}?;3|)f0_O`d=HRKwhaZk3kkcCQ??W;I5snluy|pkZxa~mFKe%RZvcJ1%_qW? zcrP&}L&dlYS<8_LYUri6Ra?A+RDsB;_pM=K@=fm-X;0EQKd_N1SkiqHX%(g9&<5tv z0|jUwSa2}G$?DUdniCK5&u7~OLfZYy^Xml&pC*jg+S z7`jCTXRJERYFdjGz(HT{gX=2gA#~*!z~Eg;8KzJ5aVvq1Zh+aI9{RB(}= zBK}oS>s9pWJ+i)54%tCrZUsi&5lnd!K%*At$j~&J3`4oz=gLKFty`$IuAm?N5|fB) zC)97Q5sRZ_Mg;*A68^)}JV-nlj8cfN#{&`$JC+Os!=%9X>a@@#hm7|~DSt-gH1&dq zQ9I5TRJ1v)#A55JOHdpm=trBL>LX$A6EEQ%-^xEady_X0oX72iz%>${h(vgj^Ei}0 zL`jLQq`Sf-uvuJlHP~&-hSDpFr?*Zfg*F%aK2ynnQ0o#*7Y?K=td1PMemS~cRPmd zGBZ8?kYNZrRTi9XNUNwIW$Rj3+cFBb2U1~df5ZD72DlR zl2a9c6=eAxt>+PPuCH7HPu>t{6&A^ahk*p5jL7_BKNbsG&8?wQsC9r~U`Qku#Fo!M zdwy%-6OZDSIdo^RpHibx{=ofS{8zTi zawr!Q+nO1q492?j9;X2Xjx}JQRD_sMKzo4JyNnn#WHm@gRouh6&whl+&t_oxM+VCB z^pFGoW@f5W~$-{e#5pkHA6=f6CQo00`QvS!-m@4*~TC`0oQ>K z-B)64&@y|$)sa5}z_B*&&SdcxT4~JjuDKgYuQF(Dtk>H{3R5Zl$Pz}hS;B)~R2KvF z+%ye%d9coa?$C2Hj4v9icQ6Mqf0%f+R^Q^Cfo0QYA1i%Ve=9FRSp)hoHn9FGLIZ7I zDhPwuwTQ4+!|M=pGV)|mKl1sz3DQp{o~&H7DU_3O`_ULVWZ@n8YgKw1KieBF4X)&j z);CvG*J(=*Gy?qht}Az(ZPO1^DTOe!y5F$Eo1%1bObwlJW1of-5c2IA$em zw8l;|5oLM$V%)G;M}rDa(T+7NIOGf$c{21p$BMedPm6z4FD_gyLQC{hQ4GR+y`SwU zr!rgp60loB@sJjSMF?-`3pitP1U-}`kR|*3sPEhmz89fc$!~+RngELT9q~o@2N^u`+n!ui2`FWlwU$YY*Q)BxuzKhaC+#g`LIsk zcVNlvT`k#cY%SKF36;E~K*}vJ&B)Wz1Tp|p=yy9qphP;>*Zm)aTsfXdWCeA3W=Nsz zUd(U%lO#q#211MBvbL$kYBqw_9Efne6RC(dC(W<}VAEhb&Q4q41I-#l)kjB=vfG-8 z;0-zIv0g<}LvxW5@hm)__xlj#OJr$Yf80O?e^r>i4!GB`CH<1p?U1=u_luoO-&LM2 zKKr}bS}v3OIccbK1_p9#uD$(uL$PhFO#m`T8i@~C2+h*!Or*%mb}YPZw2E52=iTQ^ zIddJOKx*M|x-Ow=ku1nLK_&;mXz2`-l|aq_a|@<=AOzi5T09K2NT|~tfc91$@T@=4 zdkDys=lT%f{&Dap%x4^bPan&nkJo!^`B!V~lxe@VrXXVH!`e{^Qm8PW`t8ek_fTnM z@w7wXvtq@_uVP|>f`H{+Nga%_g7l#Kb$AbpDlCssV21X{+k`8M$N0Ok)en7l((J7% zT01^T_z;b>LrBZ>3ta=q0-G~1OB5|6hq<#>nx5kB9h2JCzEi+roY#QeUO|&;_4ICpQ~Kz-MZFc!s4dG~IXUAdgSxq|PB>>OK_(79aHlr>$ryqD z#!)onM{H>THQiFDp_pxk43>l_;R~EExR@}0Li>TvHy_#vPL?~dur$cFrZcW!^S39s zdCzK|GK=xCxTJ>fdiWIr-B`8dZY8O_&6rBi?6Q<*be6IZ&sEReIQP0Abc3f<;MJnM zy$(tezD(820n{ee&DRL`R1kG{<-+ZK*h-nq9-a(-AyPb7M9oKa@~nsFCpktbHWEBU z>pmm;Ae8%QT;rKenzM@8Yu+`?I2fO`_X~&L|FR@qJ;_^l=Zn)(C^n2F+$aS%@U?O{ zNXhC~NgC*!1%ycBLXWgg#Vt9Yi1ICrxhR{!ULdwI5-;E=Po`g#9-00$MrXkMIW;ee z##hmGd!1E%-k^Snh&$B#QWcKe#V+hEy|b8bW#-{DdP1ySR#4yZXm7K@XzbyZu>~2w zhu~}Q5mnVdz`ZtmUv@A6uZ+ewh()S)gEXZkXI{GAMiJ3k?CdVhfR@aqAt&*RTXk6h zv2}VHr{Fd5$?ch6Q8tMsm%yNxh*>}7N?AnT%t#QL2aoKqGdUP)Iz16UKw+E4Nenmg z*xB|`j0ie3@yPvZ$vJ@d^l}#3SD+XIiv=>!m4;kt-?nV{ND8k3Ik7jtwrV)NGPyMO zi6gXi+cgIgoTGNzpJG$Whrr)YR+9C=Q1%}IQ zcsf)dvm0JVv5gp{>pL$5b~ZcO6U&EECWKsS`|H@n_=n=Iu7~|p=FQA{d%JBAsJm z+Pn;aYgr;Ob}({g(fF|T4DbiWL`e}QjA>t)3zW*0MtHRLO=P2zhpBSsKWy9o+8QfF zIJpxoT&6PI)sq|6tk@Y;awnTs#~(m78(#kEd6c}?CB1>$5SX5D?=Udj1qQcJh)e_a z+cIG-`fBE~TI$4H{7CZA+=UaIi9F=7gN(d{pmR%*eMr?UamxlQ6*FPPAX}J@7H>+M zxFR!`TL8d%0uZhf{XF*RBAz=#km)lyIzX3V$tu#K@*8jGm-isegm9aeR#Z;nm?b}# zH7bfLOPN6g&ULc-jd>@C7z#5~-#}J-{L(?)M93d(n1K>-#=XsH_Lp0I3gZ}3>aWrk ziw3rkv)=LN1f6%zL_JnDFoWIg%pzJVA#;w?YB?D_7EH9lilp`k${=QNN5gZM1PoZ1 zQa>P=m)Q>dQvQ^N3xNs>RyP2-fRe5FY`*l(I@-UFiBOjKS$GdT1w78X(ks_o~)A7mbh7$jd$!omb zsiiH*jhskdPrt6c&)}!`$lcJ{bYRByGqM^*Ql&N~zIIuidU&7wP@Fg9E(t>2#e&<4 zYLX_YPVdu?{zH`?7L3r(=HKVYr>@X&F8dcV!8GOT3GM1<-k~g$5_nTYGo}6WHIEA$ z$sxtxQREHP29x5lwoH3;7s~g3kxYHO4Rg6D!=jnO<{@9fHah{@IJn3t9;sM^wIB8d z`S&M3k^@jeg6-cY4Sa+tN^>j&?G5yjF zQ97hNFDAnk>JOw7HCQ;y!tl{Y1i|&ujEohcB$;U9V#!1A`^qDI@!!dlUln^T zD($sa=gKWM$Z2#4X@hG)?!5qav}rc@tRCLT!8*ffMv=UPV2Vr1!T*JiNwXR40!nf6 zE+R=!G4L8xjV1W1Z4elkI8dKG8UVKTjwQed&|owy$Bg7(%Oy3e#WT}-9&Rvi(6{aDFm}X$Zg+quAuS7{-`x}k_nXjzRB?A zbt{EytAp|s?iHsTwTr`xX!*l|uSJD1R__hwd8QZso@MIQ7qbMsy zG5#E1s9MWJ`a0?n_B4N|R zHpe>cT;a{O+QgHhIe|HQ&bwD|{!l6oRd{FE_b8;x6dIGUdoep+?(>pla)3ZNHj`b2 zf@h3=U+9L*^aaKB4_|h*BE%fPZk8lZMxlp9^r+_Xk&26jG9hB~$8=f66f>*rfHsZ?lXjmDNKdY(&$8tdsVrQ0U73PE`0RX;ZU^5%j4 zAS0+nb#l18F$!^fXIcSK(OOIDuW|Ck5w6;B^VO(*7&!N9ujBSBXR*n&(f4wTq2VR) zqP08wpo%7B>5PKa@`?$76Kz_tuc3r*L~($Jr9W~JN(X{l=gy7ZjKp~K29i;Okkh;m zF>~4M6%#YfRLc8w?@oVVq~xa`R&l~jJwu>QdS7n7M)FYds(4}?o@H$+QjHoXPhgcY zA67D-kWjn-_b6=&Fq*3jb0R2_b-Acu?qK^&@y@frH&R=>`jQ(9QpG-`on+(-uL=I7 zqWS~Ye!Adq@Ujk)n!5KJ-z_@0rZ7JqEAOS(7FAHhYh8!N5$7EsdxoN=YVRw9* zqVw`;;#UO!yrGD;6g`ozPlkMmC#WnWd?-C#PC3;Jl`zXo5eW(xVfX7@h|-X&QR#5< zU$V3J>;z+DO8MjP9;X36zt(RhC(f)LFOSD3^%Q-uLsSONML+60F|#K>*mcN@8~+$e zc7>#A_2YOY3XsYb@#;g1I!l*~=T0(2{zliR&Xg+Z(>&Sz$U`#5 z>r%4=U70WQ9QW4d?{A9EiMS@4?uK6`iS8vDH4P3Mf?C)LZ=z!>W0vHjop=-Pvrvwt zP=bBmR}bp^$=sr<#41CmY+gTdM#K2r9Ha|oq|qeGVAW$arkb+oKIu1qGU>42pbk?v znd#klQ^I53pMC2`=kZ4MZLOM?X_xsZ$`3eNO6?L@aKoPPVJH3P;Yj$!SUGZdSSW0j z(qxN<*SqE!d*wFL3FMGmjYV_Y)^NeYyY$Xz;@Wn5(HZTSKn6OpBKfkiO^Kq1FE(X0 zm(F{lQ=^^*X2D!o0F%1?)(9;c)c~$>?FrrKE9RZnsQ(GSM&ZZOzR?hcfwLUv89uuR zj`d(q+e0Rz(LkNoNy#qOmPpLP@~d0$sq_RgaC(Tn`}5kL;hQ?7SaftbqDfaSEn!up z#`)AmvJ~q*+!xuFdK*a{WsFl*P4!vdx`FOQ8uFcB7A8kM**1djr;U4(Q0h~W!9vcc*$;Mr>3~3@X5+)`jvE!TKWVl za}WhSah$o*Ucxi0D{)jEXB@NYmPb*koC}FNmXi?*5I(7@j%=Zj5Nn}G$`!%V8A$! z)lLn(4dP6RxL|fGaJfNf{ykTVd|aR9n~$NW)aC4OiT-bhb3LkyC;E^xgW z+_uz){ZszBB(CGUOB1!XN6-BCZ{gSYfT*__8andYWk&9gUvY7e7MkbvD@~p|tCDD8 zlqkR5hAph{*Yd-xU>$b_iU#hvouYR`fN~1N16L2TJ^Oa`{t@ldV2P!`J%%oR9zAZNKMCqb`J1B#vtbAi z31?IWH0|%e6G*xSui^SE;wmyA`pqNB5MJh8E?}>Ftglhz>)Bh%z}q2O3*@kevh7kw ziv7z}dwvjp_vde0Cm?r22|M^ylTl`+is3LfQUvU&!y^w)uMp@Sds)BI%j^OHql(HU zw)T446koJwh?V1ORDz4m6fP3(>^1bR-)?uT@-kx@%R055OnhK{1K}p8uTHu5!f6B= zx=fk^<|^Cj5Y%;*FNd(#0v_O-<@K*j-#N|mP>$jsg|eL~Qtw1%MzML-G`(0FR`alI zu{9RsYM;+|CGD43+IHT3< zBHeufrytk!OUAVDV=tR{%7S9nqobgo9Z5PR&Cf`3ZEDeIhMn_}9R$OM(jf9M?su{s zFLC!%r=AgnxY>;BURT4%~$Hp(G5=o$<@@@h9n5$XwK4G&pYs8o-V zXcdX=Mz$m#cm1zQqbGOfKh5#=GSU5L0M`ODlWoA`dejt_lEdAT0PA@Uhq~xca2zXr z*cEu2n>>!|%Dy+9&r*)WW17MoHIGB^Hb`5Ohsuv%+uXvT*X#D}CeezFd=ecvq+=Ej zMK)(16e?;1FfpP0T3MgHPrjR+Wm=ZELFc^q&>J{3vJ<&Ip@P@-9ek_?X{ z3%jw6R>Zg0zG7sZ7NGdNn~}V<9_n+!O!}lx0h%QGK_8d%{G&wi<(ym*{D%X;TsqUE z>k+5AZ_br6-U_S+HON0y{C1sFzfZLdO=k6@9{juz)os!WL}|sb@5L%q+CEw8PONqb zJt0AlVmqrF*!sb zy}@4Ww=d&?*S5tYQJO-@L;18%&&cLM@?Y_EsXjPdNJAL&{_tZcod&a)9Fm%2zyZt} zgF!};-|e)|6z=rVZ+o&$fKg}-t}hJ!{_pbtSSU&c{MN+EH$Jzn`uzYs`o6gizxSI{ z`;8MGX8#suz%eGJ&JHVqlnRExh$X-AjgK#E-($`hs7R&zFfv>VTq@t-{muH5-GJCn2`Zz zDbsYb zUG$okoaDs58}B;b?{$mjwQz=acZgjp#5&eb1oJ)&^N?gmIqrzpu9lH3jIBs})kR2~ zlw}Bm5xq$`m#Qp{sGkYV?Y4K#xm&kJ^;x@R6j6)HDaok@J;M9lEb_m+5RIVqm=K69TPH;NyNe11Jn9W}4M4x9 zT8uNhO>mLdEt`zUZ!{oMiSv+o>XWSsa}FL@Fh6zWr$)<JP(uzOxOxTZbR8~<^I*;^qhYEc#UaGKH;0zi zu!I)v+2!|}pT+Ec7(=&yUiuj)PwA#`uy4d^uhXe#7h%FzJ7IQCt-|Y5T0c9=?b4^F zu{G!)e!v{Ie<1f1F~~Nm&2PL&#tk)YcbQMZ1)hjo_N)uDMdS_S&mpvvc;2B7uD;K z?Pjys)b|dAF(htyy7z8wMz_WvFiO-stX|qY6aMAzs;1S);uh_WIqStvGpgM(xZZV3 zVW`na&@MkO;=UmA_e27_WE+?Ezl$QjMm9J25IZ4xp2U3D8ghCKq9>7Yr|1K}V2N6I zY{R+!!0)QI5g%FGBro{TJU;V8EfoT;ub`jO>VdpQX7gIdKD*TgNzX$DR~vqb8XMg* z2kS5$hux!k0NvHnY;yGF_TcILAn2S+T1sO^4G6xg$nn;IV7RvLwXB6H$hIOnG9ga# zgBmCOZI(QwoA6{{FW5_Qrt=Er7$QrsU@-dh;MnAluTjV=&;|6+4c9@RkEsA5yKIM< z?Sv9Qi-@|4Ro~9tlukX;yC=qat%c@LDO#YK9PVG3KD(g0!os-lDOgZ{#_|1L_Sc1` zu(t{Gq$-;t!AUGw@E2E~uccg~;lw&U2Ca=*Ds@@8LCOuFU(Kn^pSLPzBz*$+JQ}|~ z8SyV7;{~D%%zL?qk;Si;Bw$x<#Bjh~w0W8y4B>p&_V+JQlH?e@ysZz8M;FAw{tl`> zd7rW7FN^L$De?{CjnD%)GoTAA{YA)zT&3ow8U ziA~%seZW=^rE_cIIimZ=?hab^8?2+ka)d|e1^##b*Y=M@58l7Ze(isA|Nrtw=D*Uv z%71$O(Ek_z|NsB!2l5~1|K`8F{`!A^|NsC0?4R_X?>{{~AwKo~!~VCp5A$E^pYZ>| z|EB$_`cM8J{(t#j_22YA+kgN6&+(V@kMW=Mf69NW|Ka|t|Ns8a(0}E>)PLOneg854 zv;7DE|NY;3pZJx_gnp||Ly+x8Fj+J5WjVw>)nL-_VuM!%WW)UJ8n({phL)y$H0w3)IEu}kGuvO zgg6;?OIjA|MM@gL>-tUrX1{u;&7Z0QvGoX`D(>&y84Cm^dc|=Wuz{-CgQ4dfn~1(@ zNk^^K`-0OMcXkxSt!x3Qlwj0)8sTy?9Nshn_>p^|Fo$M7z*LWkpK~Ew+&q_%lbiPN z_>>x&nRio-lnC|S!3?(8^VV*W2NRSn@9!^ci(m{@hES%Cj@^idR)R8lT*s`MVsE@- z5W>AKl+JRuy<|<7J?<+njeIUs6DAFetiT{Gmdj>bUw0)1+)) zT!Cq2i2anuA`0sJ`v1uu8}wLl|C8PLghm%llX+%DWsdW{OP}Y(GUHMI?;yw;SD>O4 zk6Ziw$^Af^3cT&5Bi6(D=v+g&Qkx-g{SHX&Iq}+TlMxEeX?4|)x=Y<-q-luDV{n+} zSTD+w)-9an;{w$+LAHbgAA(~m<)Wo?G_+dif3-v@;x4w#zSC8|-%YPz$r9bTe7&o9 z?ABSY(kF=Eb6T8fY)YvU#9=S~go2%Yg{5uLByo1X4@iEtc?(qm3W}#ecFB{o972@@ z#?s$HMtBHO3Uz`8bCxO(|s8LN)VwprxV=9Q2Fi6Iebb`4A28l(*gyXTZMxtugB}N&#w3Zsw7!Mv^RXUbRE$qk7 zd-^nn>nu!zBQ$gsM8bB<`Ts1aOf23PM^zdHUtLEZ1H!qQRQ?l~n~lU-;o|^l{0J26 zeIf|#R?V76Em{X$3XeKyCq>G4eHN*ZZCscrD`v_aDaN~;RDp5`$)<8^wgej=x3doYq z7<=v(M0&*bJkH1NSyI>828rwIz`4c{#$R`p6`$v0zd_f3JGFdeub3*`%2$3&A{iFLyo`P=)WugZ&ZC zv{*QapR}z(mlA61>{B_8gU`+8=;T~R9}zdd9~SV;)ZupIav-aZ{^w`dMvXZ)iOW%a z9sevHnj1i(-^kHEpM*D#zVE*jw3tZg-JNoA)6LJeK5ok%1Ku6}gHDS^wn3uY`-u$% ze&W1^R2OBt?zas{qklTf8PakKB{|ukZ2+kZ(EFR)4qYnkqCs zg;R)JKON})W6b2UH~*~zJ{_c#a(`E&9LbSX!wfGS8`RirIr};Se}MgGR#`YLju)f z$O-nrMZ`F|ou#{@6qEYeLeS+HI#!VgaT?M}92wEX8mQB}e)%Hq-ow_Fn2;AtW&j+# z!*-28%M)0I)z!}LKef-n14~m&>Fz9$^%FefzO|75r zQDCX^yz;dW_jXTQuAdPJ=Yw{~kB@>PP45MU&J5sIU}*A^)N%KMXd_+j_YkB9phnX& z>VbSge?Hh#WZf%*n4JF_b{m4i*wtovk=r4o)mZ?GZg0}( z?V5Az-A!lr_Cau95}s5RaE>bCs?J%{G$2mVs%A-0$GbSWgB6T!XV!$jpi<)Gp~$$n z_z>Gp`jHoEigI4GVgEdj_RaQUGbH=UwLqQ8g6ADY#D<>}KITHX3gUf-Ci+FG-^^H@ zWD7O2WtduM{J|zvvgG}ptQvWZqw(2&m<_0A>B&G0+0_>@_#lpr%7wgLkgh_w1al~w zQFlct>94NK|F;seyDPGv=NujwQGSVvHlh+!GL)yr%mbkRBl+OZWA^`n=bs9D;zI(R zH>{qLlFKM9oYmMGv|JqN)O5ALQmV zqxgq;3f>qFHWe?`FjzOI5SG!r(*?0sY7@a2%-#aJD`*x!F3e5&*ZV7M;(kf7BEYm0*T zOC}f1AAQp2_ui(^4$8$7Ax)Zz9dC6;We%=qMArGZJTirgbyT{|2g+a!s2l24vZ|xg z0)fUD#~m(kFEJRf|&~qA3X}TErUVncrpqUXm>Jom~9t$%0K$|h~2ch45 z@6~3h$82RGVpJUpy>+TBB3?yw)dX8~#~%D7A9FP7yTJ_zF4$mZe&kOg;p?z&BOSo6 z%r$C_g34bxzVzK#;(QDq&PCL+AVseZ_OEm)JtH4cRT&F!eslI(8=Y>HK00}gk4Oix z#C|fJS>QHxnUgQimd{+IWk5QzD+c@U+1-lMVp({z1S*XWu_rPHSD>X~4i{@PZGhWY zPGE93H(;q&YKx^^sgrCPz5IautZ4-KFi6L5EqEd;Mpd`Iy^Rh2zPEvpPDUdBwyxjH zKGsk6eHSOn036`&j8L7llv)+y`aBA)noR(EuoB17B@mqR#3qV=GMSRSdXrX#Yr>tqS4pY+% zm9q<)4!?0Il-Hf4)f-!$ool0kPikJzqGRdEs3eRbe6tYas@57Z}dW{I?m$r432jL zsI(b+!ks_j%|IethB+pEv2IjDvCLv14aU53;hR94vKH~Wu^M)`tNiUq4#iq$26soe z^4@BSb8Y>x`cvegFJgG5?qnTba5Th5U8ySRbXuwzAPX-?wt`eLAg0kbiJuaC4q(PY z=4?r*EYHfpx9deEIcehr8HEMO;@dUJSj1v0I=CvJPs8Y5DQ_~Sgy~mg5!eAK`I1(j z2S{1$kB?E!8Eur2hx2ArGn$jBZgXU~08(ql2%UXD>gm|N87Z0*SyOz_8OToQvF}j= zv{y#dOaHGr=o+!!3C?Xx6#@%IY04nStwF`Xy=q4`rDO7vq*q{2RdRaiF6(OMp4CXm z$cF{w*@#@}-z402RjlBLvmdVLX|_i6J6l7y;t90;jy}x;;5G9B;4?Ar@!L7TPH`SI z#P#mWBpC`w7?y)+EH19?_DgGluBJPyGli3&t&M>xxX@`J%lsIL$@1{3MOH>jhb%lo z1B)3RC?XI79(Sm@iwLnKc71X~_1|ZM;*wUfNf!qLDP@Xm;mqCV$=vcn<}0TU9A)HB zA~=5|7L+{DH&Tl1I)ljyxTOeDy{naL{t-ICRg*#&B2J|USN}CtM4GoD8vquFqmuSj z`cKG&8xdz)1>kjG4k~odW)?yAIIj-ib>t&lWrkN@RvFon8$L6kluaBQr;cm?FH1JBD8BMLnDF4uL4 z=zX_5Dxf-aaZ|QqvRJvUwp4AO6Rl=151fs!LdmSo3{Hw2$;pSapzo0H`p?{T5zh8`hj{9#aKrIUXtCdT}1wnH&bgZV+=$5*dYKm1BJu*#``Gu6k~?*V_40E6Pw>#@|iiD;8`%j5`1%ORy3&D_(xRM!c5_KLLw z7{TZvZ3aepxP4qsyy&Z6YM^|us43d+V;*~E`;h0fdtk?~MyI(Y!@5BuxU|H77z{$8nPJkcAm9A3t3W5D&Z2M@vfnX>D)a~4Z04?^%Z~I8YJnWY3aCV` zt!9ef9v+fLJTi}6@tuPimVFu$v5D@|>2b)k5 znoAo7g8Xad=~;e=!D^W<$I8*i+L)g$8gpy0P)nVT=lbNTlL(Hj-NfH^UFiLTk#gZL z2SEW}NX@*_U#EIS`P(P&FPt|3s53k}f>Xa>{k*6v4{P)z_ z`n#F~Ma`T`bWUZ>k)iKSr%`3AHLY}i`I+LB>0JP7hV2-AR7UaF(0+F%v93rNV$Y$& zTLZar;e37VV%e5>np>f}P@Sai-${I&OAh^T+qnq9Ax@S1_vrGWb>%n#&Tcxm>8jCN z!2tz96gd)fr9!KDfRZs0;BQuvoJGfiznr3DF?;OI_<-i=i^|`|MF=}Sf1yiDopVJ| zIycR{2{qfJGjB$AoP_dE9l*2Ue;+7`M<6}48*tW^!snERBtefSC++7D@z%fXcl^a0 zLf%W`NxOFv+6l-pW5-dEE8=eK+V0{z*a-M;87hT%#gB`lmal)TcD=1G$8>T4S80k$WP6NPl+$`+Q9j4%3}me?BLlw2sE@ID((h=?RB`m|#_C*A(rB-`cBnD2KpC8keA z1oq!j2A$sH9BA6cuXbIr?(f8CTz%l0_W^gS>%-n*Zm(0wW$(>cUXxi_8xT;>7wr2) zx?nkbdc9$^Mvvd=4y{9gMuge&G&R85L^~m>cpYeTW@|6I`X4(N42q_BKIUA>MZGJC!5`K&W5HRw4O=Eu4`bA8k&h&siqP zzwuEHPgRq$=2#X8v%#buKsXLh%V{tY1tqKQjuNXwaz<77#OBwaJhLvs7rzOn1;^m+ z!&y#I3FQ!-P}m?5-qjNfvB{!jb7n^o9MqcqC3O}&fO7`}F)AgE9-h5_g4u&(kl|O1 zYUG3Ef$KULL8j{^i49;$Hdj}AuU{gd2Cqyz%o}{k);;V*OM)I<=~7HyS)wWDABQ+H zGle$SYt#D)|B~_Iq(0a4;=7WBkrBW1AH5teGmTk^_isP{y=KdQL}b2}2B!5uIb^{j zLGE6EXlbd~t^iK`OX{{7zYl=(Qx@I!JGZCqH7N!BrCM>`<|e0~h{zi?cjTX|9u7`} z*fN5h1W@LaKMj*Qpzza#XJR=g9P-EkiSw2}JJKQlh*m;Rl7f<~i{Jd{azn{{h;cZF zY{Ea(HV}pIaRyEAj(3{lo=-XDT~4yY7Uo8{ZZ0rlNeW$+l)v?*z}RZ#VA&`OR(>+e z?Yy)hDzMvKwGZKT^YKylMKhXDZc142$bdu?Oh2`u>aq}*@bg)vSRT*kE3}_ecl((0 z4#shzCiP7O(;cpP^zHKxXqjJpg+!fps>wy~M(;QM()b-;r>ziQ%a+vPHo_Zgcze_v z5)-FmUMVp*74KEUu=x-VQ(_cp1%)dW8s?UFOHP8E+DPXgh`V(Zd=n~s>VCrjDDS}O z^%=5SjZ6T0Tj=nqp7=Zc;^R;Z*u|lhGS+}UTq0heSTTQ?iA_!^UyJOMCO@2M7{o9$ zd=I##3D+X$Zw2`AI~ZXq1yD4Y^(O3HlM$#?d1nb!zq=qEEpz#C8YtY07&kk_nk-yg zG?EZnam6w(7@tz|&{vzmSK_eIs5F_tYgZeEx->P;Zd$mJhD?L$(=cj@^R11Ap`)69 zsOx^>P#HVx3#PAwme1Z129J` zVES(B`U9Dvlm2}kN`6lMa4RwYxv>RlT80|I`ytVltl2o0%R3lS?RDq#j;y=33lrM5 zd8|fJ;At7o`9w3Cx_Lg?`K{J5<=q!KZ%cm5ckf^jq@I{Rw>lorD$)@mT?Xuz0_*=->p>5}Um$TYZ za#?{7B(qLqR4gPkc6eV&g(tpS2vbZvY#mHgz^68~79m5D0QBe9Sl;&|wOZ)zD11~q z_)MKD62mlb4v3g zAg9e!-x)!+cvJ9~;ZZ zzjcm;kZm@Yu#RVlO|uwvxa9Pf;NL@uju7qXWClWdj7r*S0F8o+PrN)th;y;vyj2td zo9JUw`1T9-BJ!> z^Gv4Eq;(Wwfi^6KiuW+?LbfP@U3;4mK+!cE4V^UlWZpt%wCecFyBVVPsPc5 zTj(f57P6^&GfIx^)4Gj7`C}*6b-+G{6L`_`t-)dTuGl;33;O64JL1vS@euZ3tZitzZM+ZiTPO0 z7ouE#88RNg;{gcz(?Xk%-bmR*m6;G0b= zVrh*4XXnTqg4<8muv^uUiu%M-pg0T!SZ;5DQdO~Cqgi zSL3p4%HLyx7xs97{Z%WXvveB|M3(bAFdQR4eOKBzm7>^K)wq)_Z=Na2*v#|aD;{(i z>H^(^;7HNH0E2jplPF5e{G+al`%)cR#)yBw+vp&105o8HQo6DKKc5+PsM)H%f1sIQ zS3O=pT0P75j+O&n_NoUsOHwmi@6N6L(kXA5s_8qf-%uA2czv7xI;Lz7jsM!6gXo`` zVcswRmwje?91&#EWbGQkPr$pZ>8Q>+WM&Pr5;uiO53UAyLQ6pm8Kv;ry~Yx@{leRd zh4eGwp``WPHJ4u18C)Q8qU0LAB_JF;Ww{?ucZVPVE7`dFY4M08ZAd2vq_d8;u4k1J z2kW-_pFiVIN+|pF#ieIN!=Dqw&+Ufh#%9tDb3!qatt!iZKwU zTV9#CYu=MyAs>^=o+n6=}VS86qs#NE+mw|%EmkW){w z>ztn{GDoC>1%(aLh1Vl&u_L+}=^lo5Quo$$@6i}q5DDFoUJ!O8h!mcN^1yZVvCUa; zAWzeIw4FVWnBS1Q)F}3?Y*8LCCH4eR&;50raPm^s&Z07H7I+Y5tBeI4tGdz!>@^{_ zaPPSSfv;&Z^F2ZYc~T@h3dpN|NesM}i!*j|xFeu$ygzcg#6jb=X7>i-@t~3p#U4mT zwFF;3H2+80bGftQ5lE>6YZ)lMJ$M(bdg)i`;=0VuRKyg%zhR$qfR}x~EFHwVPA{@d z3R#M}>&FW^xr0)ge))MmekF}tSZawWn#`RzkkW)~0y9hi?(z0H>eN+e_Ce{fnpiAz znlDXhuConyRKgL+>`tNv^T3`+_HfdgL3I3|?$M2XsZ5-ooBiS6O^50Sy19|Fz9qsY z#^-%&Jd_2AjG@GswYbM`z`LT#Q}xwWSxbn2mEJarYWsy7-$Yle;1ZAFX`#yU{dW2& z{aDJp?kuzeDc9A*h0NEZX|%ipP05H?QdI_pSJn~72(5Q#}Rlk8`$%#agLFLr7Mo=_HZvv z{_X?!QbwcV@)$8vcuEtic}x?k?|dez4TLumhuAnC8AD{K0GPacjPn=K9(o;Q>_}nD zZ9u0_QkH{#=|~|v+nyt$KrzRmmU}D8006YE9-CBJgyll9iCza1LqOQXQXm0y4okoT zKYl8hD1YihYZqoE%U0EsE?CKhmQn(wekp;kQ{ajl3t=O*T?={im&Ch}&_m?LTijcZ zlm@XBP)*#1&fF&r?T@%8Q%=ozXXqYa9Pv##i8H$xb(8l^ zC|XB&fC!}$A_DCHcngrkS*MUIe3Jh=YD3#7G`TcDbaLt8r7t6VAw17zf;M7Ls-&`t zdf*ceBd&*Mtj(O0s(Sxqra#(CYPt}Wh*8@cR3J3+<(?HEd~;+hv%&FRT{)c?9vIyz z)l?iX*E0;e(X^q+RdKnH2Zz`pF@&0$9F_qC#iMn_= z+S_neYXCc#5AL$Bs51QaoyL@*Thl6*rv_IA@kaqo`|2rT7y~x6Hfih?l{}K6F1(F< z`-d1cn(O0PsHV;XIA!E?AK7_Z&54o)fr?5bW|j(U>7|&ihmrEsPt)i3OFZ^p z_M90Vv&XJbmrkV{ZQc0?`A!l*SlBjMw^G;y6F#Qusphjh^GNppWnT^d{qR>|t z<)r&8qBcOJy40V9Ekrl==AVm582Z@p*m?uZtjYyjSGnv)gYmW_8~>@91uKF>Ap#Bp zfzQMqEvV5_OfAqTom0A~>R_C8*vKqSp{dq(*BRlT+uDkuor5-flQs9&9E|YQ*>45d z-Ml=PoZM&Mng(MB#|ec~kyEG-QNOPpjW4XpwlwUtl&tjJnoj(J^}$a*twam@FhB8? zmkWj|txcfwwFbtq$e@KKTX%N?HLE?ORq$9&l(U?yi}NrS9twH0Zcgz-a5cjvDaRS~ z{3_=X^Lu4BQ|`gl5cth3Y?ay~&y9*;M=_jN&v*qraUx>0!bpevB{UvtTl=9OP|z5+ zAWqv`n&gR{JwtjYr#oH_Z!ktuh6gQ7#7Te(g5_9eG%dyfSfKJba4-i2&PNb617A&G)1k!grgxQHEcUW;Y`DD!7R_wt@LVgLZ(mxCz1s1ypp% z7Cw)Ie8>Hz&_XnSZj5}2780T>Qv!M_o-8AyR@>MMW=CABRmTEmdqi+zI_d^#e~bS# ztINi4&Pry)o1OczkgVtT>n)Wd8@dqbYUSC-4T`c#+Bx=lyqkSKd{S66j;mwaDw6r7 zlO3O+^dMDpz+2JzAA?og9*BRRwo%1Hp^W$U!LZ7f4_baEEfz|1DDa>h4SoOkm}?W8 zhA>ea1O#r|y

z!Jb~S!;OmvtH zD4RN<{{$a$dA)O%UDLPf=pZ>@qd~Ve6~zTu1*3U00=U5GHQz=WC7my)0$k*J-4d6($zj#gyjd$bpI7HxcH7kRp4&Hn;thrG_t z1ebO;4rpx|TASJ}$iFxi1K2)#6mJmO#`TV8)8ZPld=*Y=s)HPk!0vL}eQd5-g+AiY z6VY7As-5u7pgKlcGSc3y9=(lqwK~^mJW>MNnk7Qnd!smBMh$x?c^@u5s{(b5UXRxF zt}&O+;EdkvpE_{0=t34Gra67wY;t;gRqHm}ITa&*{i5~H$L_qnTmsl#xH@=$B<2sn z_Zf=GBW)*e5G;aRp;V4(>;oebHF(aWNds1YvrRulb=Z6fzZ!Ea9T@6EtgI@6OMwct zI%vPP5k<#X9g?ZZQJ=97_gG(c@TdvTGDZ&W7sCalf1U>{;F32yA7cM>1o*QKBoucU z@(#%f?KSRNwy!&FDYR1s`Uzmfz5PtTIC2T2N)?0PcI0qX{!5sHf0G}B!g_!j_d;PS zgbRMQs7oCanYx{Yw<+u*sQ4N#u1eT@>(Ft$3a?03y4-ur65vAMzZ@6B8rK>8*leWOPkf7^g(^Zspx#3 zzb{p>q3notW^w&I+CeB3yV@S&afi#ahhVrmkVZj6xX#`1Ya~ayXIUW~iip{rUeWOm z;wjgytQj>&$L3?CO!Z8NEjv9&jSGgQ4L|lHGNrxvqW4Mzz zi?Qd-rx;B((NLz;=1l+uk-Q6{BX}6A8G>!F1u})!4oa)1wrwt}yJC)TZtM~G+Ff8! znSfQkvBnzx{53-QUa(I~e_da4EL7zZRpFYGs1TJS_YWHi0jN(>V+&guM(m&S5qpn1 zPj;%P)Vr5?dNn#YO@Qe|=EmgEw`IXts3`h)7+;rSkwN7GsZxDo6w;-_0pr1Z)Xe{% zrf(^&>>B%*;tt*-weG)6CCe3QHoavgAgMjw_#w66FR(e^^q2<1`-5GAi(I(4hP zT2#}1Pr6~k?Xu-blAWceO>*~?aFoW2LrlW&T`nDS{|MK+S7>%77qY$PPljo=wZN3U z5C(H?STS4UtHkOQB*!YjN9Z+SNK1m-gbiikMxbxpKRRegxC!mB1YxjdWm^(knvOnI zZCC@6*L1t+`wYDM0$b~Hs}*K@NQO!=XYxw>f4M8rC3%oc3I2X+T_76*bkT6oHvIt4&TBF}_d&Ze%$RtS9W12U_ZI(GDq z&}zsy<6E5Sa{lC5KD`E@xCY8)ZCgk?=0tKw2o`+7hW!)!k{Y@LCEcqwZYX=)UX%}l zp^sYGl{E#?^g!MR9YzB;8q*hvlP!bNq~PNwoDJ-^haz|FVf-I6mRF^5*qXiAo%1Sy zB0;^&c?QEiBVDb427c_@TeRihmes1LqdgBCr$0Xbw zCS=vR?!_E~qcc+CQtaes5q_utDCs?M2bS_~X? z;4IDGpBRq&wYyGUbhqacR>#bfmKN~Gqn58T_NBArq-w$YT8c06Vhgy?%r_xq9cY|!mdtbZfh#GOcLi`4aOf59t;8GxaXu)MqTYYu@Wq@Pm(gp= zvm}g`2gvhkJ)mKw0hcLLO%ae`+#Z5*iDl_Xb+adR@EOCc=@fZLD>T|BdMD6YC+j9` zEdl0j@pzGBQ`aqmS&9<;^2;V9aImo-fF&aPIZ`$^_D(TxRtlPSh-Xu$Ohq@b+Xv?q zV!)&B=;ZDm6PL7w(RNb9M79;~f2xd~P?(~NiLZLyoJZLKg*DQBxQAy=({}jy@sCMf z`Dd@S99GvpunQpe-ol2M8X4ZWi4j~SXiW-@srfZkXuv!Ij$^oJjr(s_3O$T+IjZ`1 zB;zFkH@AxDOsX7R5ox4oh@d%2rTn`d-zuPUQ}{n}HI$HG>Q+o@9SJojHNFl#= zu-85*U$g{5h^hCQD(FJrOf=N$e&<&vT3TX`Z1nA^N%MWsoZ}}7(}WUZsSASDU$%l< zr5jR!tsQ;5BudJK64Ji7jB~8zV|?6+-TgaXr{T z`g><6d?wT10VOT4(2hfMKI_*qG&qOK0>tFJX=h2J6(Xsacp;TS1S3Q4aykZzSqF;U zo&+YcglPh2gAWlt)=KOinr+A++M4I7%zdurtukqOBOuo3*#+Sb4a9O+Av^ZlRvRWj zL$iIR7h$g*L!!4#yS3_%jxIevbib||-EL^+vl;l7R)f*;KFu)|B{kYvv9QXj6TRKU z^ip)(z$hK&j2WB0idro=xP>63`=4R)2^9R_3(7yrk@4)KEG+EZoBfoo+GAQc?uZNM zkdtTsoQPpM6uzbo7>fvA!F5T~!$uE&wGZp2#b)-nMr3$gh7{2N2-b)Qwkf{_TN2%e zX<$m`>t{s@XNJ`DkeCTw?6F7TIh7zrpqK zGbtKm;Pe$#mbz%w)i?>4gwyP=VGV}W;^guo& zTsn|gv-R)<^KDd|W@wBTDGtgtI>BFl2%($tDd)=idV_g++dHd^f4X9%_s+~MGM%Dj zu3|Nypc2gxT^WfW>gYe6fST1>J%{L@T3!tCKUL{Ot!s4Sqb+AS?YF2@Ta-p764F(n zl5uxlAtaru)XkeCnZS5?M3}Oa5g;r`4P^bA5_V>m0@}&0r)>%aMg%gYhXB}p(w)-% z)O@M=it9IvhSWi`={!MXOAwUmi_45UK~HfCZXX-N7=*8HCfRO(rl;IF0{b{hMF1?r zwh2R$DOv1Ck+UEJn!49qZPfi}K^<%s_7TARb0V4ztX-WM|I-M({Uxe3(nN8pB)I7P z){kRbu~KzM(=U)~(~D_d0MwSA>eK;hLf5J1gdCn5`0Q0riVO#zGdSJwbxP>q8uQu~ zAY)qXZeJQvqIeF{SIEuK;$HN&N5>2Mu`4d0})LVm@J*Qfsi8lqk~(c}dpCw<-XyP8W&qp1VC_NkbFey*p&WSt+4R!lk=G z^>#)zq7$V(ke6z%PExnL<`Z8l8y6z(x!Q2d5%FLkb867caK7*%4p}_yCy8F|=#QJW zIaJOrL;LfVS%NFev_WYPBkoV)wi#)#n`pVY{kmRqLqln}!cU|5!~x#NWhM@Ui?`mp zp4XGgVt|KmLR3kdXnH>Xh8{^oe*tw#1pmv1SYFo;7$%MV;IZ@=1ZsqnZ{r3M)^BDu zeiul7ADIL8ROMBMx2SowuQ>4j?(0IkZ>L{;IyMzTp*nS2&rd@T*~T?2hyiTcjV>$u zH;ZzTKmeH2TP|JFDArQIqdKfCS4c9Y6@4q(O3y^C?d*e)ds0BGe0*MMz-Xat%E=&w zKvzCW3wkTIgTRw}tj9wnV0b&=ZVluiZc19C^EDbjt(#5QDV#4gMVzK+=Meqaw5XR= zL1Zi+3h28%IRN*Hv_`2;F#RhA%9z(k)rfioA%{o9n#@l29Y~AT=>C0}my|O>NjkQ& zg&SJ=1@zuHAjW*MmQCL@Th(}uEoSTEL?En)#56J`+^HkDVcd0J@8z*mEUo+*m$%Xn z!pxss@n?fRjkU<8F~=m0(}Fmy_o5{vsAcW7ny?@@}4vz8qXc(oMT zbyPl*G1&X)GPa5WTFR8ed?G49Ugpj8yowX&N_z~P2oPKQQjrCgf8|}KtO_R7_ah^_ zo<3rf`4(g6z(y|E*{_72jbwNF0v)4y_Q=LCit{PBZ@<$}i-0B-F9jI^I0$q1XmiJ^ z?l>+7LNc|8<3rE2SsVlntkE0*nQ~=jx_mUo61U-iM3OD&Kq?GW{;NTB-Cne%0X;VF z?g0>|V7g?xw6@Fa3^sAsA%u{fV2ix_ViU^o5W9MKz3Dylc5?s-Sdz1wGPt?=*IZ$K zu#i|tqwC;V8s17*IELr!7~#QKImlj3*!`w3k{sooemp*`@8ZVQ8tSrW$aNC!%`U`( zif`dzVTFPQ(XvJxo;WIKy4#RJ@*0Zk3}!Uu^@nWF);precF;idPVluTUQQg*`4!mDMglVuG8PH7jIeWS%q-L)b!Qt#ws<6>lD?zZBoO0(M*SrC z@7v7R_G~gybu|HK%uNW&rv{H7uYzrN!yv*0hPip1x)2obS}6fr=6I0UuUh!R&?X%* zv$r$c&V{{chPXeQqPqIrX;ls!QOV4p%zUi(iP&OCzi!^(F zgCyL)($PjSqLG6hC7yZgp@vt*MXM>E(dl&55@Jg=LHwN&5inY4F)b`@C5GCres>2@ zQBg?nvW1)sfr@+C54%ww*Ix3L8Nc2Ww#7~*L4lH`lR%VNF_6M6!c<6-qhqpqqzCk~|ZNcO`KCOff2P`l}-I!K?ObKBX31IZO{Zj$jHH!)Teng#qh^3!>M^RL3fG| zMcSPFOb|q1meU(Gic6?u)>^=+XHdWk8x_H0v`Q!Z6Zu!fq4$*1V>pbs`;D1hT4cI; z8IYAN(z)J_MSKP$)FTJ2cQ144T%C1$IeLA#!p1>iQiZVZn8|hEcn4*HWV*j_TyS}{ z6BbDn&~xb`Z^FT6Ef8jG1YA7mrBzty3FNCSH z$(m^K9qCiNb)|Uni`9@Y$oHj-3&3i#;|DR0N0;P=5h-Ai>y(a^<-#l($3% zy*5QBMH|`Qrk&?E`!F<7)~#Q&Grz`3s+ADCA(#flq}t zo_J~5?J!VU5i>eo;yU2~6!*5Zw+Zz!(f&MHssuc6I0V;_;?HE9!fAf6pD%q2G_{yp zo?Zc;9k;NfxkH?xqPVs3T!y3w7-1G&D zUxdsYZSHHwIP*95uzLOu|;3UPvkUPE!Vx||N(Fh2X0>g<2F;Itq0+|zW96SF{ATL-@o z|Afz=Rcw}zAC5;E5bI!HE|ewx#WXoEdlaS))cR-RVc%7Pt4 zI3hhVsgf087PV3%8V#W7%p|hibBlzj(uBjL1$6UyHy#Rh_`Q57zI1b=c8>5rLh*}B zYi7)PQL1r-GfxZ)p0Gy<1zR8$_+yHyQRbs!W4($~Pup-dp=eB>rq<*kiotLaFv!V@ zB~X?cjdGkPvUwKT0Jmn1+=M*$0aeEG8XE7Im9uC795*>}Ik5mK$Jr3GL}_huWmzI3 z;RwTV2zRsha#yltD=H(E)Kb}g=q@s24Gpm)lN>u-DcF0_cTx0(K(I_cqEPL?f7DJQ zY9@sZQf5v~vgmatd>Fub>cLmWQ#qu0U|j3G(1#PQc+HhKIIxf0T_+e73j6!e-y$AO ztkd+N`{h5Z;&{Nd||^c-etJvAuV>u4?O`W7V7D;Vg(f#wN8zLLL28WUEeGe2Cl2 zqR6RQf+nO9s*Ly+w5Ns6yO#GuePKC1?=HuIySSh@crC;jOvK)7u;CuRhcZiquuqK^ zCX+`a9AvO;&lh>9lNv8v&ZbqdiYyN54&>tX7%=o2TH8*QD8G^O7|OioNmUi@oLvMq zFp|ha!KJAYoZNSDhl&SkZDRn73>oT*DdCXKq(Iz} z?zsfr31!NQb4v!wx(kLAhhG&H9_pL9{!7*G;JU>V*;kn!2bM|36$oK0eVi+7Js%}h zD+v}JNYE^On3yO1(75g;{79oT;*|7%OZID-QZC&->Fk|}k& zhyc!UC&*}>@iM-EE{KS{47Rfy^+X#oO7OPY(lC}ka{&kQxRW03+ZVi~btxGu3W96` zO~b`WXQ>eye{8zpll2#ZWhrAJedUFWg&XKLDxO~{=3IA5Yq@TV2I%JU=RQCna*3BM zm7wsY%?|hCDQ~VUb-0GJEo(wUL}_*S*Xauxv(+~%`5JzKEk^))F02uW|78CPlG}61 zOs5?zQ!^h=7BL=WeGO5m7&#mgCJueKZf}JANxQG-9vXObA4&9LMY9V!SYIUoxgav* zrD?9}eu6p{+lS0p4Zz)J!yYp#rJHJxZ_7jpB_qU&L^rq1-aHp!bBnrM#>p3P>fnSv zIR%LDJuK6~Mxd9nvJV7jMpkmkU+%H;X$xQ|@9QJ)M!6s|#)*SBkzz@~(NO_)D~i;; z!#Q&_tYyu=L;{k0A+*A7JUwZBICH}bQHkm>#YWAy%cZeW9amwP)ruB?M}_m3iRm@7 zZHPaezO&hJfDjwG*$$FFrb(UnE4*e`EOxxVgf`$j&rFv~P~ddU7-hAcaM71Ndr7dh zYx2vH*0Is~F%4E5JZK%i9a@CC6NrBJ*}*0ZQnA5$NoHbO+^9#68zII5&vR)(-6namunh#lUeDO%nvCc^oI$x{~ z$;3#A)mn-TYNSdzPMX4)V$xt>(Wb!!f5DHCHmd&uW~pG^u^e?LBe{ zdT=a`oh&z@_S6jb1Y+edO6h2vjP?sWyUJNSfQP6%7e8>$7eb%?syMj`Wj?$ zV{>!cy&umQYq}ZpjAWV}Q8yILJaHa~YzHW<+$TRFYedd6r2;hP z=*ETgEl$~b&3BBM*D0~oIaKlK{B?};yMA!ctNj71IfD&eGfxetULDqy^|yvc0}@a& z?5=l_^0wMrxQ_R&D{48LqgB20EDs`lH7jC<2IYQr61Zu|GS)jP$+D<7{l%%}K{_He z2H1R*UTT%iPN#_xEfb$45RPea29?CtI^|0_v?xv+S;oKgrO}I5ZHK2!C47R9aeWr6 zf?rCXEWEYa6w`cWR<>+ZTk;yML1ym2bg5Lpwy2E2pPsVhNpa zID3OMvaV7|%8FWa{8lE)AF=1PhGBn@rBlx*S%*}-;HANGPtt*6n;TTDL|ZcUEOwf# z`k@1$9+m&B7Y<;9j`%~$FNM3u?Kaq;a$!PUR8LqaiHd5A_@2NjW@I@RjlB2KW%3*M z&Af9B6XikW^eeClQHu1qrg3J@o4ri$KIiwdJ?Dfus}M$C1l6PR;hm`KXrBQ z;^;!IGuqYMZ=5cRGLJSWtwhMe2FIm7ahT99J~kCcE7w|}X-7AD;jIcOn1`w&+Au?A z3JwMVH~wtCBKh9iG-0;W_FpG!%6%wZvj47zWz+#&`_3eX@-Ime-9@}+?p)4(JFzsKI7T>W_IF><1prY7mS$V$yMmp%tNu}G55n7516owaG-T%#pn#5lm1s5z*5opQtYop$qqL8xM71EEbNZ}$_tGT<~-8bQ-R(^2Bartad2kA zFB3XLU>W=)=^=q2eqg*W_8yxtTS1Y$8FnoFG7$_$wnjJkWk_KecfPM?DF1Z6eZf?I-Ucr z*L(8IXLG%&)!98(y#U)TE7ggz;wKgKJe?Nzc*RR!;PGoCM6-xeKdI@SuRVJ}p0Z3g zQx^HJmxVMV=FSQTI&$Fm<(6|?CNfewtqIDqQTCLQ!z+y>6M}w8q|jXs&3s}yJua4_ zqcr~c782Ww%({lku;o$&=Rpsgrl$TT4dCyfI&lPghZN;lF2VWVIc_oZjAc^)_q`!~ zmRE8Q!u}Z4`qVhAZx5d1z+4JYDaa1KWEapaZ^)%X;##(YHbusz-#+>R1NWE*OTRH0W>k$$ z&QqW8N0Pp>9b=AmE-j^~n~^*Pv+ea^Ih1y}XQiu(*3ew0Ld7LaV5?u3b-J(?wtuvY zfQ)mElD3J-;;BoF{iK--83~d+W`gKe~#L zVo_R7ZL&n@ou&@u07o=V_$r&RoTx7aldpCmjN=@cse5>8;+>^)U+fH-_Bp58E0*mO zZsLpvW>Q9geIEY_+rRfT>d_8;cU~41mGa4s({UPl*J_hRWx^mFP%(n8$La^5X>rSF z=C8+%00Dj*juL_?A2`9BjM5olpZVHOw_^t!th zl6EfR%IQOsGFY}D#HM!6882rYp_fgrhYg9Vc!B}8~}%H18XXKBH6{MOOY zh#Huas~EMm`ET1Z$ega0%*PairFvtAv!1$={c8`+W9mSJffu+(zJ%RIvt(-F+($#K zDNHe5tZYpM#974*2s6xWTPwx@#8if0G%_LY{dUvjc^+JMZufE`C7qzE&MD0fZmjZi z4AESlM?UBS0Ot&+7mcz{I6hnPLk}R1rMkk}ye0$*=vJELJDz~Znm^q`J_h1L>$Y{l z5XKI?DmPouxlFXWxL1b59Z|8F0f#qXz4mK=xBBK0>2U_3tGg>E#Kg)I+EI6!CicCy12{ z%)RB*tCxXly@TU!llw4!8tV5^EU9(2*(Mxn~f zmP`2zW|wgn99(>Z_HWt|Pb7=PUO*Fjp;?tX;^!sESB{XBM77@EVNP7bVefvdHE|r}0<#$r5N%tc1W;kxc>IQMCiTgW3Qyhb*uqoa81$ z+V$hvv9^ItiYl#Ui_vTZJKw%dG9wyXODUA;y4GJmyi&J|-{pP_2i^r=F;j677PUXV z^OUW#V5mvOa&0;pC89i^cv`+0KqwMGlgk@fU3ec&1(D?=+rgLZYSKf67+jp+YaBpj zeo)|p#g95xSY_YF_i9dh=3YE$DSNVK?TL3y`hH-anHu$$Z$53EuLBmDWiND(UxFdU zkljtvIi0#z|8_ZMgwiMQx2d6+*T2$b9CuMjCL&1?*9dPDz}M=9%w>Lc69}w0AR!&y;XdR)s{s3Y;0i*+T5!1i1z+yws-g3%EBd82SqMRN3CaopUNPVThht67LU*H-i#S+7UEm9t90 zn{$WrAV5*l2k>_9jYCP#3Emg{X5n1dcIY^LK#6*=gl*7gF^_k$P2^!rVaueINnk&m z>k`^(Fc>$FKMq=5tp#*v+N@xApCQoR&6k4>EWMcK;!Ng_k&86yHV#dN(4>}v($*7w z^;$p%!;FF+5-#(&VJ@mp-;GbuynUI~>he($IK{ET^Uu2#v#^QE4>`Yvml*v`uuXQK zZptIudS*jHmU4U9UKU9n=)x6{p%Bd*4TU7lFITOO@k6iY*`XJu2Cw;dVO>Fdrw_4%mlPgC&`UmB2t#G2H z(+`f{WQVa0q|I1@H}1&EfF@Gc`a%T~R*veH13K~#mn4L>6z9xeO7ncZrL@8xRv=6} zi4P%wd5@FYH~G93>sl%%W%>vXMHFcgrQsv=H=moO@l-ZKEHQUKrR1)=NjDW!;DL>D;O}}ms2z-Y0pU$$$ zkXY!pWwqt~&tw9qki&*HQqj*@ol5SssnWY17O^ON-3c2ow61vw<3#g*K`>B12FDr* z?a3S%mp!YEM zT@SqZYlRSNI?w$D6)P1ZnpfaSawm|!2ZYgo*y_AvG5`!^x}2ejuFNlnBuc!p0&gyeClVd-W05BLcvFpn~>ig)nrHDr_l=7Jh_Sof_Qmz0nv{A?Flpv z3xIxCGiAD5Vbvt?g=*A-mT1VIY}&fL5u5oa8HSbdqT>d08EgbgfnyyISPAsB9=$-R zR8mb@D0}AP;X)?*vjdWem$5f~ekv&bH9Y*^ZKGxLMc{N4k*oK?AN@$`4mA@G(}(`j zbIBBVp)O)WPx8o{7kDrF&yg3@`oV6|w=+n+jgG_BokN6~O+DQkYyj*$qGI`SDftAC6Hzg|m%K=#jvLaM zEI{1Ne-!=IZRy*Pb6v^b)JD=yhiVz5EKW3&I9x$DpO6t^C`q_J2Ul*6R{u|NCGx^i z=!lk2efWreb3xv4fSgXs*Y1l$d{B_%uTv!{neg@@!G67+fzO^(`{DZF@;H8{3@V$X zPh`KWZZ1OjMpbJ=y-w`?)P~YcKgY!g&}UpQSSTf!wlq~%PUMUI_5FL|iv2qo((`E) zrNM#R`4dYKpE`*ijn-(_GON_i%GE?)@|?4Q5MBzacDs?FmUUzh_n@;FW#&f6SwxkV zD8(DECh>%Ua*dQQD6VFQ~^0dRLp)Tr;hcR-K#}3Ndnk=`qn;!PN+q#KGib>kJ#n@!)( zX%ohptrTibJt4bJsYm@11RXxb%KbF>vixT~nJbeg-siN%SG^iYG4B7}Oq7cAJ=v1( zvmC9f3IiZ|bwDDTL2swkKXDADPy{eEVu+0%Gtu=_$!Pswy(T@Goj!aami!p;Sd>-Z ztkYU}bBSIfpAe1~ij+Jn$0C%tlV@K^$(pVr`5m9WGz+B!kfEd;WbUO zN9l|LujfIfU!z(#(ozvpzP406!O-5XWn3pj;P<=rT&H(GR`{Xb7ZR5 z6yM+mwn+nBK>!e+Awd}-hO}h876*(4J@QXq)Ylz=S&0ZRD!P0HsGd_P640%9hr*%n zB@v7bQFYCzY3|cJz5R!yj|YwqpuNXf7pyy$cM%4R4X9m6qzrB6PKr`*D8utU zX}I$$79=>n%{L$jtiwbz)7oftaN=r}l7pif;VK7PE72LsW3-+;6y>6sQ!_pRhyVhz zZCQQDnItO!xQKl0{ZJcjo}HA}&49ogSRn?NCR!|6LfxDxzd<0kAu%{I+dZ3vB#PXYANMR@* zkLkxQg@7Fj?jOJ00nl~uSBPwZ$UX&WG@=9Ncf4m(!9+8%$f`+QLEfR_8U#*WVkRr@ zUj-M>E;PxMy z@WYpf7Im1o4~k34z}^q0b&Yg9{Ihq%Z-X?ho95e5Awd-0B3KoXbbVEb@ah>NTE2XL zfzeX4cRto@wfpZ?AAD)U^rqvGZ$V8ii`T&4nK;e?#}tuZ3e>7nPtSK^Fkn#>P$WMd zw=9avwx2J*vw?b%Q4Q2Q5;JP~ikXokiW(xr^EY~!R5yPU-sD?MKvrMxSI>)!%qP;R z#$QDaqfiTTom-zj;|@qDI#nm6p|Yb#Pu44XV)H9niKx8K<{?;8QcWOErvKdw zUVLs=+{T94+*9go6nKIq5zw!# z$8$)Y6HVrq=(C{RcaxBLeH;!hG?0AhyfIq z(cv~~y9? zI-y^6EKtz?*@oW?NR&T8`@+J+E6!EX#4ogEvi_Rnaei|-Q>cF4@GmLIyZ?dfz+|0Q zv6v|%KRKa{C1M0SJacTF0v!P&#z;ectV0qUwd#1r?@;a0r}=He|683HHygt`qiQEn z)vrY*^*T*YpEsUK6&y42z!%oO$5r=GMg4(8<<9>vR2kC|3F$%45_xvL9}0f-I_mt9 z3P8FmR7g{O*!ZYhl=G z)?%zw^;L>C0wJsECv_Qe1vRPFruv5t!{CM%&U)!rKmvXPzxuO=p<=Zo7dBBv>??nI z z^1v7VflBk0RZ))^c4<3V*G0Kvv~e|LH8)DH8cpR2+B*!9wp2w~)-UK=1ndL7lfFC5 z9vyVsGv+EeD8jfG<`4NBaeAaRNyh% z=6gHSGHhV788cg+YEYLDvx~^?r2LXyswQ_QJiv-+<(|nQAnjSbZpQJglj`Ky;sxw; zF7s&Wgd;k#|B+wl4>i`7BKeO2;|4LtK&4sOqP)XA0^p(jjOK27$4N4a}7qfpT3U^R2VORm0g_?4)~)YD`qg%EYc zJ(epdjR2GFv71PU6k6frX|RY6@qOhMHvh6VOn%$LWI+SPDC5M~KFICFD$gHIRq-%p zzTJ{NPr6udV0HUL(RNqOBV$mzQD!GeYTM3is-o}xVS)r0iNFQeK>YY-*-epf+hMDE z|MLV|60UU$T?SK~g2hE2?-sa8&{msT(Qvo6q!+{$BV3 z)Zitmu?1ueNOXm>mjv_PlnAARxS8=iSR~JUUGB}hN(*#F;6Wt>4@U^`fU~KJ%uKYX z9m26ZqtOwf4}b>8Sh$xRO1e^Xzv!?n zPM`#K;??9bqE3$%U&$)h=l1+jI&z$TG@%Kn2bq3qu$!>wz#jQR&u>Ip+|HKtYlVM3 zd}#w{0i^HVBkIo3kL`nG@1n?zTY45k0FGIl8m1cklozQvW;)-kULQa+!pUXF{Ez0J z@>rTp*Ag@=;$&}-EK3V$InT<(yzUBh7jwQi1>9_yw;nd52_5o(*(UMgMUsq%uxc-H zmXYv}x!Uv+IWu4)4-xiS#E_VRKovL%j-E*e8$3mdh4vfgTa9|fIkWTvh$ifWA&;cO z6`E9lh?kjM=WjLfBfT+zz3PS-MZv!JK{r@8L^zSV%WJAGfvAXm zcf~qG``IboJ@bQ~&lzf>X>*ifJD;dqBHv(&Q%%Tfy-NW*%97g(oax#VfH_BmL3Lly zmz;5E7X#6VO4av7XFDS7Xsq8Z&GDm*44+|mEm z0ACtLP%V}iJBJ$uW+2c+jX|x8TyR&{<*Y9|OJ7CmLsO_wNcr(dCn5GOkULdtAj~VO z-BEtl$8k=)x0YSqaoPYJc%r^sBQoD{SCl&ymLtIA>}6sUsj;dS;qZq0H~>PEXBCBW zwBNf4;L$J3cQU)4<9tt@XX0N^feNZ43g|N5RGk&TJ0v0EjE&TVO1H|HEeSFeM~mBg z6qgTetnltex@-s6Bw*rageGI^zm@yLL*0@+3Z&Y183p3fAl69B6j+QNdi`zE2`u{t ze#&;RV1>i%5Uz6ZlK$p6=7;YB`2#HB34#mnWGxBu4A4j)y8XAvgkgw?%ot{A@-6T# zu%vU)Rr?*9Q0{_&Q2+8vWG-UUZ{u~>tHG51RmGXGNkLC9byHDaUe8Z>4tkDp-yNZf z7Ro-aA-7|idd$`|%$*|wIRP}hBXF}+-GpTmTT+ieE9veUH__4DV*ih`Kp)0=oYijG z1-^~-^R?$S5;nq^7j)mcfpiw&%XXSV^bk&P)`ffC)v5A-uJ7u-G5XLj!4Tg6y4H)d z@Fttr{slny4=yPpRdeCpfpax)M`hdwl0yg+6=Vs1b30c}edo6u+E)3BgP|DsbO~N? z`Qu53&@r+ZwlMbxsI)1wvYvkc7G%C)7nEJ@nSXw^Hhh)|9F^c!W+(s_2c<(U>Ce!_ zNwDz|g>(bkKyP|tuS9aZZy+k`=OlccWay^Z&x5)mCbe%8VBt}IWVgsZ7k;4mZ%?^w zIyDyCphrrq`wl8*!DWO03H8$CM!lI7Eky@M3{deqzj0ww5sr8(tdU}Ue{nF`m^CGa z+8Ct+XCom!_BijlXCw5(_v+>@!73KY6J#pGA5et@HF(;92e=KZ;1;bBXF``h#YB#+ z0m@){+!0hSGFyY2o|i0cJK#C;9GK!!Qu-0Tfx%J3f2{9l!BVdPH_EQC*=l?DZVqXm3M=A5j*sqD^<06|#d4G#@t`v61ve>g#7* zob9RBV6emGgbdD5*S&N5BRdbIph4rCmudrjtb7r+;;z&XA1gWD0w57-ZQ%q~$N;uT zwQN6L)B-&Ai(&8rFiKo^J>;C%q*p;&VF<~$+*Ws>31Dx?E!XPEHT_FrplHgq3heW1 z`GNCpT|Hf8E&B9o1?>2{z;y=c0W5Z|Si-m>wmLw$TgD_vQ0tLXel0qsmqziXTq24k zDd)XM&uW$S%hePF52>+&@0L-LC*P3FwZYn4e?s7FvJqkZz4VT2DIP>mz#tVHG$j2b zD*rlK<0Xj_yGa=RmykrloA4ij!j;suXRSpsWYqvo5-IRJZHy3(0r1|O?sf|!(Y{cI zEJY8*NO=zN=J5{~=tRr$oqvT;+)97$l$jTh!Ofofo-fjbueMRfu?hl6?zy_h%Jn~n z$&~dkz%7R5ZqPj>d9SK=7EIJq5t*T<`a+Ip-)2l@muSCqb-p=+#+NmH&}mcBZ@{Vk ziEk=HWMW0t|k#smTx=8+ET$1%jgP1#kx}T65 zqX&A0S>ujC=-BltEMD3Sf|%MQHT~4BP?bXYn?Y&L74W9jOL@POUWD=AM8qhbc<-*G z!CzS(sgtksv4zO={p-86Qx#|CR3f*rb17K~-fDD;IA_Tt+QjUwU2OEt>>qWkZ<$wL zp3{&3kVe}T`9v!z7IDJ{(EWs4w7-|I!}R|F zNTeWLn^5XfKEV)w;QwwAlhaiztam%&vZ9$BTF>de=pZgzOf%7IfLz{zQzrPyX^zKC*xOJ?Bc9?_E59 zHzO)h-dp|Pk$Z0|yZiuJ^eSK$80;FiYP;pRZF3ti9JIsqsX{`Rbd3>@3y^Rn3`Q{>o?r~*BFm!{_2Yb@!w1=-|f@~H64*~&wa;aC* zZUo3|K5$*A|M^{u#FDZMJOpTJY+u$Vi$xr>vYWRQ+x#E_Dfgx231tP&r-^J`)FDaM zwQ95zFeFVV*+x`MYD^C?V(!vD(4K_o2@LDM>eHSkW0Vz(A22#Dv)FU71^RO^dRE_f zW}A)$^+k$(ai`yj>61HkvPQk2*{RI%x;q1m9egOV42nqej-lU@TzrKB*joaG_t%JmfTiRwAP`*W+}$3^ zuPP-Ffjw=}$GMmQ0bQxXG8MxN+B6MJcdIE$D7at%1A~yz41#ea&@5d5000002nR=L zPI~ih@DX^LNoEfDH8uBA9&+`^*o#yNIuYPU4JXOIG3X!E>7c$9quYnz_>e=IZr9sY?W(Kct-0f&;(Pa zDCD!vocd;z&YWBcqngQqtHJBJ2&la#3Wa7EzRJ$KStApqV6w5u$`*D}H!yEo2E;Vd z#M^-Jew9Sg)MDR~=X+uN&*wFIs4jW(oi{%H1AQElQePqB)|%-rk= zp@Eev{yoH*c*VCf9f!ZHNNNTuBZdjzJl!##skQ{4Wl_O{JE1!!{Tgpk*v!5P=n%=S zL54^Vr;CMz#{_eoV1Q78tAA+Ld2BwNQx}vL&*WsKas-r{AA_VWmekzkua{m2Oxi>Y z8eep4chp)UGCORcG3I@66TlxovP5>^4t%a(p8%X%+#_AVA))5g{+dKWJW5hn?+&Id zosX%5ye?ojt&#YZ)6w+GwU2sGL+E+8gWiv>_3}PxuL}{sm6%p|omXJIR>SpCjl7=0 zvHw6AoVzJ)Sgp?JCbXxW^4YM#UxLulk*bNqLNXga#Tx>9QySZ`jZ;uQU%1f$$?#S* z$>=s4d8oeIq%D^hpqs+Y(|ZCaQ|VxK>^f?ut=hZ23$;VTzqc+9cJKQDy( z-7z*FOz*0}$6tv3q5C%CMQK%MLgL8paKz?sm|qOXDq9MJE1&M4)a?68T8mIUY6w~q zx42_2!^K%~Im;sEv<#s^_-&<~8X*7yQaSqR#SuD>Jz2I^XZE*4wW@0ksegl+&)AW$ zAc~dbcfedTNuEHz1LH}o@m(gcS-px?PhA~sH=3qVpXYv62r(j|5U#5uv@&j$JHn6s zZZp*8u080P0u*$@iG(l%hY&%WGK6r934)~0%Ng-Qc!1;zi;NI-Xl(ivK9u_|vFl)V zE9Q?Ky+HwqAX^2x)U;V3YeVKc|bAjo4fb@U0pVAkY2C_og=U4YStzeBuC7n z1=uG|f2ftyGqG57aV`~}*$`ra()tC0}GRyK0PH^zS(r@Fn!$__oH-q z1rjO|Zr=akZ3}ZCrqO^K4{*>7@~CpI24GO|$ajBhOC&1N10%c&81$Cbg(%=ba=;Co z9vsd`d-ZuZmr*8|#zCNmCo{N}h6A6mAq_E)9#yXBf&8S2Pw)Ps2s`R8M~i78uD1Bw zq3fW(2~8VWD(V4A0X}UumPjNcA|WOdY5;%@ ziDz!%aKGZQJwKz9BgOmfgLm4`%y_56ccB0K{XP8$d4T;Q{hjxR^l|-{%+J-s{@?%q zav$(N^8f$;|M&p&x%FB9P3ODn0sr&V1ONYAe_lVh%x&U-+i1BDua?WR}-kkV2qHr~7$qez&$My*u zEKRmUX|n!Tb!LSfUdmp0*7^c-orM~M10&3$S`riMA`%%UTNwEF(w17!VYITEFtW)NSkruMRP z&d%kmkVQt~C*&$%?|XdD3H$Wki-;?d>nx(_+y+-83H#CtcR7OGm4%jIJPJkCrrG4i z+}1*Sw;ElMG^AR{eE<*nt+} zM=mb^J?&vAAqAQr!C@E}y_dn5$q1+VDG4$O5~~121X`_lylmTS8b7OMUS|19R%_*A zX!c}(b(}DgOP;Z;F&2u1EMdT>@#CoPN_2xzqyl~)f})(J8HZ2~@B{r;0Vqc`ax6xmBG(&w)|wH6rDZ6+V@c$O@TpBB05M6%Sr|Zs6_Rj3O5&U{pXbu<8r> zElzu5l|x2q_N(UHU9X8|`~9}EZcY`^0f&%p+p{}=9&WLcJN7aUx~Ql(R--vb!&QJk zyrA`24^?WY{GF)cth-kZ-79>8Fn+!y5pT;P8qi!Lc^jWtFX$?L!WEN4vr{PI>CJUV3V|#bEWKPWGXBe*%M}_SfgZ1mOxa? zi69U~#nZGRpvj39224n(GGaw(j-t!NgN9xt95V4B;g^XBHRYIm3X3li4jFimaLdGl zS)pL28P9=HW#U1@FA@$Jc#v?~{l7yYPdWq5CZom|z zECI*otNB;HWS7)=#N0)T3Xkxr;diKC(=rnh7lB z(Mm3~bV?6?1H4PRH~;|t=c3-ulrLI3UC~7qCCtJ@i^>H2uuf#LAMUu~=?>N9%NxjL zv#zr05K8+I!W~y$Lcw8*o_FVr;eGR3igWw=`0a=Kuf3LbrO6N$pVQ4PS@)Q(?{X&A z)aU{4$=d(BFUS3EWt_!-pH;T?ZYkMURYl?8B0_xDj`2ptn}j(qR6;DB4o9V4wu4YDjJ>Z^ zP66lm-&`3k3%2TSbV!HH{%?X|P1%Nxev{H*72z<->&AAysI(SdU5*7_xSS7)Rq$JL zOcZGB10Rt)?DQ+5 zhx$pAB94Sfd4j$|%B%1CZyj~=aSC0-eQrdk4NaK@-xv~xL=^n1+JJ^F2Ky_L_sU|; z-j0iIeoh;D*1>}}c|(L)6Z)34R2T76LGjbL%N*dzONnF<$M@OuN*3Sj#cjS+61zQl z8MOj6M7;MCh*ZjRPDCqwB0jzkpBcUl_@xB~Y8W?Sbhg^=nGFa^7ksk36J0K6)G0Z`wjW)` zc?_WA4sz<#suKkX1-X1TsJCjY=>hk>uGzIj#2W|soF$mN7C{Js9<~o*>N;yG zozKh1e0{F+&&wXrppcT;J|i;x1U+*IiSx(uu%^p`&OtU`iW(#)fOM<)730e5icPS3 zK8w?DBx7{&qO9`!{5Aj)9CKl`uRe7FpGNrev8%;x+=@|S&);|{Apr_Hh9%cHkdgc` zGB~3%1HauU%TKnQ_n%^pSU(;vHxNc#%5)hx$q$bt-fS{yd63QanU8`>XPiCu;2;l4tlZ*O0QVjmi5fh>1}@i{b1xh540#uz2W+CwL;)-tDjMnd z@i*Km7N)f1hs!zv0k8ClkPcJ=-w23uK3Nk9XB#O6sfKb!AMgr5nkn4A6N652A(AN5 z+Q;pZMgs8OH_flPy^O2~H^f?M>?G)+CTGx03I-WEb4fx{;5Gr^8vM4DQFWs=jhE_5 ze%neFWmiSGGmc=EK*lbXhxs>`BhKtzz)#C@s!fBm#pKbSxqB{ zJfsUBzx6o$1;9oMX=Of}fOF&EuW^0n8d zcqkNL_mKx36Mj`Ctu|nqkJpjxw7v@!dJyXlw5ejJIFQheV0H*g)tzqc#@}{LhThEi zJp4k}B}!HuWvNK6Rm!HF{tR4W%YccW0*D0wgWnqQUWz1i(518>%nBb0JrUSZ1RP0` z`rzD)(h2*es6JE{w!HiHvs5j?)1L@63C5k;UYm4mDOL`Ix!7s~MG2z2|2$t7_?Cu& z|0ED=YcJ6FCDtxnxc^(B!4IZ2p#qpHZMVtXq!+AHVjf->I=31Z&MlF$)+f}oD71-@ zRqOY!ASSEhN?MAgY(M}200000YcZo(9kZEey7VRbU81O z|Ls+wED51Nh|Dts4`de%J2pvj4Q<}l+e_zNfojnq z^7mlB9d*?BH7O^}i7bv2zmpCFB7+RQe#)S;7Uxrl8eaN;qzV<(i%msG| z4Ty)n_np~G(Jb@#kZ}KHm@hX2I*yHc^~r3?O$wrs&nfTLK)k}369n|E%lznG<+Pa(BA@ew)WrYhwN&%*5bEAEPUIDI|pz)RG4;<754ze6487t zUD@074MRx@-p9dr>X)N*79!O9rw}~$pYG+k8q#fOuy1FD7J?G7&|v@-9F?ZWY^m%F z9egkn{j#Nc|HbqL_*q;HWe1PL@SF+Kv zF(%!`)C^q#hyZ6Bz6@%GyXf2QgU4D#NVTX+fiGMn55QbiK7MX?H!Sx$Rc1}`aVCaJ z>EDQp#AP+cfe(A)@n#*cljw@)@X}kJiyL+%LPR&W6p$tBbZ2>{_!sRn%k~wo)Jd)d zo8%at1~S?#Dg@`xIiMj|xY2-1*6m{p&E6sF_#PINKK#mwtcXhBfwx1WZ&s$W!BwGZ zy=nM_T$S*hUvt(k zcZe?pIpq(%w;xh;Cl`vJIHD34_OOFr8pScTOFnbJ5u|sA6xwsSgkE9Yk3a9n(L*z7 zt9umu1Amjc@UaO&vgo1=MCkabRtMO~by`Lqfgy}U}rwvul_)SOwOLo7-- zFE;$g=5qcWy05N7T31+aeYtEMAh4goVX5P17G_>Sgedkn0y|NYa|>4OJ%fz;Dn7BD z|1~4w%&=Je^kgT^jyG)nlr6vJrlc6|d-NT8FJTPn`85B!JjcZl-f;y{tIaFv$UtAV z@6k&KNa>kxHX^B#_R?_xyec!iTf8llDQ{+8kIo`yS8&J#X#|zbrx&<*Qmf^Uj12*L z4Omq^c)jm*tk#k$EwTcCB!E*7IS$I(%B2T{6bazK#@!KgQK!zRdQUjXxB9BHcVOab zlv0gv88ULQARW_dWd}4-$K-G>tHn3aGY9LLF_)Z_qG+)|HE*85TSF$t>f`li4;9;2 zG^Bysvi-hPa0X;>rA)_k(ieB=u81g4`$P(XUxtBrR8AQP!VOWdk9X+k5c4wSxkF@X zEB$R2#If#$0I{T?)v$3glNQA}V^j~omlQ}Igh-&TVN^wwAD7SKPpUlxGX|(Tz#$!L zbchpPI`o46h=H>&l%(SK49AvtjFh{i3w9F z#yAbm+W-#h6LK($G9rx`Div%F99DkPIXA2V3Eq`UJFH=r9z3!VPmV6Pwe^Ug$?lib zUXvEE6Du>!WVT}hnK3}WUAM2AJb~ywhxr^`L&Q+r9^J@5{qG?K?iKX6P3sj zoahWjw5*yfYo7PmWDAjKt7Caq#E%YmB^k5zo+rYk2g*GtY;}ug^`_u+diF$o*RJ5& zYf+py;aqm~w6yY^*qSCbC-+An^t2fr3wo}C{_Z{%ULe>lbRauCX9cDl)h2~+IZ-k)kU|GRe@+N%s?wXY44K+ zO(rD=db^^+oP)$1-UAgQ;OCQH0`7fTlGhN3pf2Dcl}zBVvorzSvG@l?al%BF!sDs0 zAdY7;?>Z9B0ntjBx+iCAj!EqG!!mUc$=~IUC6-R33AUWGNRvg0Wke~xpm(Uqr&_xF z0t;{Y$&?H}GSps;G3}piVqSEjYTb%o}gF`6V=UZvB2D^mbfY~ zk2qq@$kFnYd?EM}*9z-xID$tHTjkL%anuN~s?Ri9R5ITLM3p|Q8E~h3q0D!DgdOn( z7jubR&bLpM3LBYI;eM$U;ZL5JOmi|B+kwRucf+(>t?a@Z5POo}ekfRc!zNCjFRNQK z4P_e~;rIY=Q$k26 zBPWuDj?JWyOvgGtl#G=gkqlZ`QxiUbq6y04tj!u7>Ah1?66c}RAgCjWqj>yH3ra8E zs-X&0yF}RsN^SVg=Y&q4`P^pklvhwrj@76)IrtthMR5%#P|*raP6^vKya)sIBGH$^ zh6gw*fO24djBZ{m(hu#){o+AA#0!!GGwbg=U70v(DN4Vy@yWq{SK%44CdVZ6e1fRk zphki&Ko~h;+E13lzf=o;c`n1qz4XS+8dyEj1JVQ*T6EG)DQY%56eQ!d9koo1TAJIN z1GZy7RBx}=gcMEBT(h&rh>-O&nSqPoO_sjg4%)3!XOfD?Pm zB@NdyCqpgp3MC;MCN>W*QgX@}Anb>*Ol!A3@2J4LviJiwL(m(s{-xPzAMnU8S-^5f zas>-F6MS6r&gI%$Fb*VsqMrXlE!xPP7V?7F=-IGCB{H3>2dZ$7A(~VAUKh$VfqvWx zmY`bkD*h5F*%jB?xxqa&C*1!MDbHvgep#2IyvM* z#OYvZw1!?xgroU6Gbn={?}JVu-}hYitvnvnk|Me6FKekZx%*Xgvzk;(cwyl+4@04E z4G0&`-t`694PDcWw_c^SNk#H%E_0?IzM5yVGv@Vv`aAW*n!FuaxDL{3e(o-2?EdbS zN2itU#9)u(euOqrg%AgrsXt@^d4c1*?*KLI%|^_&T%CT>gmPZ8aySZ{4~2ntdu&lb zRq3tNA1{_u#7Yfc+&>!lW0(aC!^@M?L$qdDSPg!K+PnY(n}LAF0ojLK;9F>q2v(Ty zh9r~%FDl2?CIGw_gU#z$F7ZvlymJ~e>viiXnrBEH&^1U`5)u@fETJ|j3%csv->{lg z7-Lo^oht|rFn;b{7Q9r@Eo$1`*`7y!FK$A@h>2Ovd>vQa0LfG|foveio^v}~xK93TANUb|3Ju)9^1!-8#TjKL$X?L&{2PY=<0a?$~P}#@Yy|(U2ZW>LTJ5qOGe!tJ~1G%_w8kydM z6YBqgo1$*eKm4^AOKjcC8LycM8;7x-F&rG%(fd7qjDgucx~s;XM4B3b%2kBFVwM@p zXg|wCr=OTCe^4l<`=sFJFtrPjp>q&M>507(yO=e_J27_6D=k0MSxkbw#F_NITKTvz zyGD)Ts%#c0yy`|3u}E#)W`o0Bc&=_}<50jhgDs<1Mx+FUP4fmE#$dH+V*TggMxN)? zX&^(fF?roS^sApf5T5L3p}~L5ZWD&Yxffvlngb`Pm$4+bTJ?L8;cE<1%N37;t2!I3 zu)iIp=IVmt5F*UX)$2%fL(YHcS&}w8?zqA>3M65LA#8)HaD**)mr!>d{Wek05*o%w z(Y{^w71FhqM9=Xt7$Rp~9^+YpB0pu8_6>d9%;vAj)7*JzLfPe3h6FzDw#Z}}b#A$M zmM;i6@_%}&l+}wKUygJ8J&0HThPjW3$1Q0>FnD-1AMw^0TLVPX#({1=>N@uaUwZr) z@Yzc{r6W=Z4E=&F{%C<&a4%-@+6G?GBKg6rNldvs>G~ z-=F{xyxsaK=_bNBwur;&g9DTq>ap9a$))}EKI?J@13m*<;UnpSQvq*E)1CRGg;fU@ z1{94`K!#QiydK_=p0hq&E80?D$}A30`Br9l_J=ZJv2UvK7l7WV-TKMUv1FkgQKmvY z02aUvbR{aJ2$&NPdwGH(u2+0OnV-V+R+23W7@kw|aC-z9BjbB0C4ey#JiQV-E>-mE%}|8mMjLJquDJ$fKi?*@sb3 z!P+Zy=6Zar@5%KyHCJ7C=ky?@#PaD7QvK}UeV2S0ot|=!*ni1egS6A_MH0y6gyWXe$2;z_KpEy#5-L?DPiFMrf^L zuZLy_?Jcpjp4OEr3mkNG+s1;m3>jwFg*dSt)4lx+cUF#_OCxs`iO4}B81j?qjr_h2 z!oo+tnP^%>B{0h>R5sCb;T~H|Z4cvUp|pe=22)-ZHssSXCwtblVEukPl)UTNxn2Nz z&Sd73n3ruOus{Vx7Z(se#2Xw({O+?bheL`fb>_xY?32VF*2i#0rF>Fu9>(3Ee9##f zAip$Gm5Hw1CsY&kfR=!G2>Bq%fQW)Di?WQdi~rR?>_1DO#{xN|-8|WjcYCr=`&Jor zot#u#D#D6F@k+ESwka>SH#IY3U$^S6FFHbrON}Tb&|y)N8ky+gM!(XEwevT z)KJ*=qtGjeWd9S+qa40*=bb3s4WAe(tr91WO?ot9uoH^s-0o-lJjPXcklOTkFoxRp z!bR{7`a+&2uL9ZNUf2SMaMSHGfvMAa?XABI%lsa_r%rMLbM0+t=oD#B(4?uGXdIi2 z!9$OQwaxE3HwiB!7encjixo+3pGd?kpd#Z9t+H}JO~zW{c1g;Pu2BmPg<~i6&&lnb z`NFwOnc6yy1S}3wPHV|&Lv2;MV^y1o^KC$a7MG7_ae2GP>JuXDzT&8H1;wZB)_Ki; zhFRt=bJmr3ZG+eQC-wp8&+q(yui4}E?_s!!gqcyE_^l*}>LM?WL8*hA_b@+1EDtk( z0z>#R-VSfN?^0A8a`K)Z#j6M$G-Zh`3&_J^`S{-}F{Z=>0zPShWA7&*AJ0<2c7b7H zwCauM7GaS+B&={}%f7bxtI*$snN-Mhzy~KViH!RXKskt}JAC%<|B|Of{OlRhb>b zLRzc>$IZ4F9d4766V>9JCm1LR!_=dSU;(Qing|1n*j6}uAR}pE{wP~Lox;H!k#f{h z3-S#!wcA}$N=Sdwwrc)ln5ZVi;&8|zTtml^H}+h{D$(#$;P%4kUVclWBJsa4>spYaTPUEN>7xerA3C3_Rn3_H;6?rNmoveU?H z7fjcM>0|dM8vOg|Sc~^F8PF^Q?M8puzwTVGftnyEtOR$$lJ!l=MAz{1ad5sp01pH! zK}dk|CYXZ8e8}ww!vVm%L4=4k`y#4^y}vt-*)Y* z#;9Ko;HM$X+$soHt%Q-L7xYnDd@HJZ{k;C-KQ?c~B*>)|4B4H>Axm~j`+E$jD* zVz#89U4H9LNd_kJ&N(zv{8oZdzIB!`{*=G(NqqnCHiQfo z;9f03xR0RCkV3lQV%DBKfD2-odS4j)Im)ppa0tp1+Z2g>dCd@4i0MxmW^QTvzq8{zx7+;2rjorz)eBYR3Tp&Q5r^?S@Xm+bBjMlD2_rS427z z(s$Wj4i^i`aNEnT1h2_6o{ss$bZ0OH6>fk%J=B^01RQC zva!%T@hxE~^=WueuR?fz(UkXvLY6@s+SK_y{Up&$_Ytxwh(;m%>$ENYxg!RgJdVeU z(5bTUc&1Ac}%RwmHihruYGtk z*=7GjmqPv>L|Pmr9ePCj>z->ICgKtgStNX_eD*yTk{8ujH7Dd?z4 zmNVP!MCd0X#mk!u@hesdOj(7%a%+Y@Bq4cV!?A`OvTaCR1ou-Kvx!dc0jlu?;G3mv zFZ^3o8x~#=h=(peCr?pF`93)aFqTX&1`gR8lesBAF{6Vd z2V82u?@S$MrG{qqakda#xJchkPL`xFJB=Y`?iq6fNggFZan-RZ2L8zU31@SLK$HLg E00cy;&j0`b literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/azurefiles/generalsettings.webp b/static/images/auditor/10.8/addon/azurefiles/generalsettings.webp new file mode 100644 index 0000000000000000000000000000000000000000..7e3064943c110733e29d78c3a585d4cd5c2add8e GIT binary patch literal 20520 zcmeFXV~{T0mNi$+r=9pv5nQNu;4+#k(MIayzaS=szMJ^(=zpm{wfU|*V7C_BF1#CFdeiV@u5EC<> zhWW#XTiAX|yzM!T7;|jze3%`S2K&Z7cCUU7cq?ey#YfulxV`C#{cQSfxMsbu%LBaV zWIYWz~3PfjUc5EmiOZ!Tjy1-}qCVx4j~dUig5{Mf&9&j$c906=T)BjF3+)9?5b z7(fj`1gxz00Q9dV`w?GbKLKsIpnm&+1;3SNAi&c(FrcAEzu0eCkfP)1yX$M?+3RDa zs3-DsK*&j>oWDAr^WXM5dSRm>Gv{o-SgDb=Sg`Z`KCWL zb3;g^ALB;};QvZ}5uM$6ty!jL{bKxNRAkf;Q2BQIXnE8B^gHQ-5sdsE`xv`sJQQ3K zoc5XV@%O{~j{lDRB)oxq^8)}rzN-N$0H;rdM9Edaq~GZG!!77%<@?G<&#m79-~~|j zF8>Yrz4J!+l-uq*4PXX90^B}B-vD2Lo4=k0e1Ux{eJOkszT`dLLj%>nKoPT2KKkuGUMu z;}3oV+yD8NRkWfES;WI_BNWUWHN|9W#_tysKCU(_q=0>bk>S;u`3Z{*XZgu@B@?YW zmYr0-HLJ${krTr1OW;~OTwyXju6lh+lkqhpiqnJ0t9+owVrEL?=8P`qdy*fmADUh6 zP?64BpUm41Q_|x!J6t<3z1X@Wo4zKUy#=nK-*#%Ov3Fwm)3QYNvRM8)u)KEjk-63c z5E=n|1$pgO(K~>Y1d3*K06E6@2VHC^Mb4w`c*{LJ>VlID0gbldSi)}Bjz9s;YN=+_om%?OHBhuS+E3;m_ z^ zsf&8!CHfen$Xud}<)n>jctjPVr$ZDPA(#7e{7-29>CjHL7e!_ju_ssvsX#S-?YZ+>J#Z3k}%9tuyl|G(@!7a;iW-2QJb zFd!5B_Wke4`fmuN{LZX-^rNG4M6%McT^8K_b9Dw7|BB){-$hYCTtmtDoA%EbU|Twa zrkXOf%n-bZ+cfJsG4PbxzT@?f1!J3Uv;$Hbu&M2FB6!s%*%W< zZZ_62TA=6+808|JExxaC9i)$RGp>}m{}IXm^z|2+0{6=I9^uDK+C|TB}M%*gJ2C5v( z3y_sp{3g*x(ubWF`3kLPl8IZJm}@LUzj@jfT)85(`~Geb>WEsziF3+T6hhDzqA-nj z`1&0VYH}nvGZGiyS0y*4I)0e1QIaZ{aa~cwh-};lEPDUR_=VuJ7{=wTx{7!4&_t2E ztdzUJK-y+_nzs4W=r>$`8BfpOIwa}qjKsUFbl%$k$9*&A!!3(Mv3};3Qm<3*AK++^ z>r8AD!Y}me#nvX2i_iA91SbtpNE3$M`}Q8^?tDtC-q3|5&J8-bSJsL{XD7IFTb08KUU^8cW=`(@Dk${ZDy{jza3cPS5%Ly52r3h*XSw0^`Bw>SQA<; zn7jMQ9TwhStA?8ZyNd(4^0sLt83WN>IZT-dQPE9)A-SL*9@uzxO;kAs-`m!H3_H); z?q`dSp}&g*3WefM&>_Pt|n*qi?;ihD#cc3VgxSkqd8#B}KwF2k%@lJ{AI6{&vAX<-wRHX3j{SIXNWt_SWF?AQLnCros(f9E~EFwoyq?=M05 zHw}2`zlDB9$mx3;gZ=ScNCwP;uIbEUt zq5i3pOgj9(=*@b(P9h2IU-EHgjEYU_M#J8ERzMAd#H+y{ahZEA-%mOQDxKBiO`-@p z_K+^#$z&RGCq&0tBtvv-4>vkdlleEY%>X$5p-KQ@!@hAxr@DjZ*#1=tYoq^R1e>&l zOMlf@6vF>oef#`7B7X}qwSOGo?c=Y?{ckb+Hz2^ofQP>$@}E`yA9F!O0Vn_LApR{J z|Aih{=s!~YKU#wS@nUF1!2hCn|C;;%FYj-y)W72<<@bMw9^uivt!(2UGn^;{Y!H&a zvG#IPwUri)rZE41%E{jti#!_O!=~ zILamc|F5#o_@=E9zi0IA$VdBM>GQXS@~7&||FNLAmgoGR3VNS|3g7=J;hlhhz5&HK zqhq6Ce^9`xvyJ2OHwp)mqy4*M;e?^wp!#=pGqHi#Mb1;+sDNfJy~cLI=nuq5);Z@o zbOR;$9d~Qo2lhVfCoN9og+&DsDxt)VmNojgg6zRO^$(Lc3lSi{4O?nYuN2#i3mak* zBK4B$71y1rWw$F@G1oOIqR%wFTv$12wb=bJ?ydY;t5Y?veA-5Ymu>(Zc76wg?p@gR z7cqvVhAhFGS%nU4A%@eRvPZ{)Xcl`?c2PBV*ijFc&^+nB^uL&AJ1f!#TaqV{gi%4l zf@Nk)b`C5HF>jC*wLNCrBUVpeXTSD1l*kiFuYkME*gxI_$_ZZ!zq^P_4 zCQ>2egdppfbxm5i)*OnBtyO~tpD4*rZ2M`agQyMR>}dT4*_d| z$j?gyNktR!&$|6amiC~Ph=`-cvmUu%$zk7Wu{$L_qe#g7SYU3K`T}M88pygnbp=rh>nn0(9!?o$5O-MkF zbNQTsn|<1ls4LgoXFCw-?6+M5!-3n>Qj#w>YE#DCkphOKI;1I?)`}S#F_Oy zE*kMG3n|T>b{pI`l;~}oWFd4z-uPlwF?pnM((KDm1uiwW0sLvqQg?fM3A z5gcRA7fn?)I8ID z!>o>49 zYADe5Y&@bzU`J9g+(dbeK{0W#8daIYu=<)TVtdm*s(WRhaPL>KeOn)%4q~J~yZ;f= z;+LvjW&naEVHj!9uACf$ARAEL9EkbEv-X_Y#gYmyo$R0=jZC*aU`u;_9(5Gl}JX58g0z z5wH4q;@t!J>ky+3%(I|)am_c-hoOEHpF_IJfb-cg?TW7k=SnS9WMY=oE$AxDCSm6ugjPqtB@m=^6D?r zNKVdOqrS|JoD;-Jdp=xx20W_>P6{lhO~O+2CWO2`27YQU+V&>ZMf+aVX$K_;CG{3d z@wf5IQGTYA!zgAI{9H%u<*Ybq9P`{R;xjCS|8(4dS|W}<%Ik<156TG;|9Gi59E)MF zjs$aMzN_y3{jv~bU+r+{*fl(Ci;`}{xwY{j6^cWy68AY9l>iiFt$_yqhx`bhZG#h2 z_Niqt@edouMf~siikq(|@m)@>7_UNDa1;T#z!hV}vg1qY1h`*nqxR~9rN-o{Sm3${ zJlWwk0xD(+^OyhXnQNAV}8w}u&u5{=a9 zKcND9?WuQ53>Wzk7-rR}3H@}pD!e;@#u_RDN%sk>>zN8xV*^xuOsk|s)3`xXonk2an5d{Y?o z=+~!*Q+qQAepNH??AX}%u_cB}ekXz5fI{r37H+|JSp}P< zuw)xa_g=qnGLF#w{jro%|3F}iB6^2liF@mFs?4T_R5yiJ~5X5pLT~r`J zc%EJ@wY~hy9(Ru}FM^CWmBG(?I91Fzc<%d>JZ)!~#@bL?ryQZn?VsLD(s{*0XEX8_ zd#uSb5NJt6H3;k`sDU!Q3D~pR27A$D;KN<93z`+J4;T8Qx)-H1sbg`q>c`?Z5HgQ@ zoJ;jK$^6qts-#>C9_m3@yJ88`NT<2D7qf90 zLl{9l8^y1xg;?;hQphw9vBkWWi>4IX)i9=clgU0AUa)=~%W>_y`hKJ?GR7HzHCG4Y zXI|E2EZs+%C6Wa(dR$Xwgj72O4M+(Ku__haDfWh)?QS`chxO$TaWWjt?7#1ZoCerg ztj}s#jA7iL_>zt}i!emX zfBM~!sTucz;k)Jt+-|SyYZgtWHr7wq9*P@1-{4VxMU*-?WEk3*0IovybWsG23WsMTZ*gN@$PTNq0 zA3bQ!Arx(K!iP3#R5{?9`y7DrX!->aHx%V0|6Tfl(9TZV@Rwm({1HO)V^iZcI00vXk=E^IDCl04G*wH6DcK*Bzi@gB52cKi-;U z=;%JUQ81BVV~$f--JSR>0JMyua?8{Je}eN;6kAcJw8!feJS|;0=Ws6cH%Q({e8BfT zc-}jfn}Y72biXfASX`A#tM1!7nBAo-&;9s^VR##~&##Uj(UyD~Rc9GFsJvV}%y4bL z63Y!QYF1)U-o(PKQoQydQFuV03eI{6n@Befnsj6qKMvKazF_8ZVVB$;mofqU$b0Uw z0!>n?*+;~lxhkrsZ&9{%y`8fWvmkk~4y9#!?AJy=eKMNCK2o-S*KdB7ej+o7BEGU> zzFl@7)t6FoFnQ4pV1!X9sPsaN+e|isKB8r_VH}48?<4Z*sYMCp9(10Ln-L3`hl287$eL4VTllR`(2l1i<$l_DJ;n>HrhKV4fHK zk+{(4NoBBCbxe@I7 zVw5Oq;d*Kq`(t$`gZTP>bM9zvFp6rb$QgbJV?HL!U?yRLWzB)0WLN!Zi!CmCTG*>J za&sBCkpN<>tlk&P@L9D`nc7#av&+aX(>p7X`;} zQ4&nmI%hMr+!!j;XAY>~x#edHbw9|dEnbpK?f0uHi>J&i3_D(8KUWKIwXVUR6NT1p zqPGlk2@t;W9*0w-Ic1R_iQ3(8X2ES>K?NbK~#@_SLu5UM+RyT4Pp z->!+< zbLr5@hqT5i#ZPx(k!K}lGW$LHGk-B@=2nT9N(OLMQ(bQ>^rW$NIDT|oFj@a3T{<2$ zZGgNggE}&dWaPtOr?|m%#i?GA5U=L4iDeeK@w4FRqD3mkCnM0U1dZJ4sF1uP$cCId zHDIV5N4xLbC-v?wwkvEN^i~vhOM854-S&8JdBG#dp$Ywl3jquDg(ONW5x>bspA{vMcpwY{@oE%nTq(LiUGnI z3R}=0x4s$0^{KnW660Jzg?I0Lo!Hb#RauQy9Dj}-H7>i%5Y~WjopFPtnOVVVH>1ma zqXm?o@T?^5dC6ZfV0A>VF-pXUY+;oKi12aadb!fAGHy=D2gi@-gQ9fd&0fBf7j;wy z`rzVuy7ISacBN=w=W0+W)plDVPzZ0^%NPemtz~o?I}cecg!0VR3~@8zTn2|`w02i4 z2jeYtGTt`ZL?vPh_t@L`ab*PGI?CsQ(pF?-#wP*ZZP3y~CdTYTxW@8O2~)qB)7Q2P zG1+6=PDXd|E=TJ=Q5+!$tjRlhF^Jz6>KL+2aBBFb5(bwgPZK@n<_~rwKDfBHe;gJO zI@!GqkS1iEtces*+p&g(f3843 zAX3dY5bSE4B6kKpb1N{%wMDoS@@UlJ08_@k&At5XpH$M65s-%efI3=oHYR1$3f@D#OU;6bh34$O8n_d`l{H)_hy5w+Cm~OQ>o^cW$G+9 zWVj3dFByjz zO7~+`=7<$+HWPXnSsK#&QsH2a`Da5cII#BO`#Tqov2^M4&EQ}9hxoiAHT$}5;yFl{ zB5ST>Nbx*^Awl_u2s0oW&96c0qPUz zzE}38v>Z?bW=b32dlB??Ja?8{^cX*q6Rx*SooQ-q_<`TAA7;N>k#`ydv({rp`3d3} zegF*blSAly4_+G+EJW(?_B{E+b1Ie0$KN ztoUH-9xE*(#oGz@p?at8Ux5l=iosk<0inOROJJJzA+lzF=6qhln(R^zigd(6D;iB{ z6Zv8R4~X@`!T`>gvhWS%#z4)u#(wAL?7DZ}SKl4mZ4iViht5!O6#x=lRMEavll_(6^LP^p zjrdbXeAcX#E2*|=uS-}4J83V*<+ABc_VA?7DXc1^F+BtqnuB_=?Bl{h6 zR=^*xeHY-7d#-3P*kv*A(PGnC>)hFWkOM^FIE>RNBD6l6&L3_#K4t3GsC@$2hj^6= zEam1_s&l-SFX;H&hVZ9Z3YPn|OYoGUGsz}o7zt3BMQx`Q1~ll>ne~8iR-iQ=uhLm* z_(hHbnd6A*#yW6~kr%%$gtM&&L4VX2ZFOc8J0f*z_iop44^_Jrk1NZB1uL$y&&@bC zj#HpnEc8m=&gD~Hnq!naBczs4jTN{TZ4TzJADP8yT7UTFs2=$TgU-x$1pDL4DGq%| zy_vDr8sFkcajrW<|e#Q15BxKsUh$bdfqsOs-T5Lllsk?XJ5dnV{-Ba#2I6kT5t%y*$(N zJ$kc7<>O&*h|=rlr=!Z_Ltb8+VX3JzExhxzzJA=muJ zeFc3`B&~7Eb;7>Ww4usX17A?8Y}Sz6N9ZL^>sMa_Q4%S+$21z2v^J_JxpUuE!2MgQ zjX9UTL7`{0>~7>qiEH0D)Ci|y2$tQ}0G0qwN-V0Z5EA#P~Rh1aY>`hhB4akx{K~2|&_}tu&rJ+2^8@IVU*VdGz`XvyYF$PP-vyN1W z%PEC}*R<(JHa$rq-;ga|=_)1nrdpcOpizk6qM5r$I7whl&IHqBzk*S)67gjX_QKuV z#>ESGTtJ$j_hl?z>@oB9@}vnNP&m8JV&|t|d>c)8y}=A4rVS~~Pge=)P(9r?wtuU! zaS`;yUfQD>dV>P+~YT996f&*N?RcA*kuC-M&6Iu*HL;`uOI9%=yU6CRPQBN5O&@} zlNa3zcSnjL}>^_hp%I?CMpBy&&w9#Xywyc(SM3Qlf)hDrK?sp$$j)Ys>1mWYuN zi_dW#L#=JL^QqXZ1CD#cRaU2O`<+9G8~cq;kw49_Lbu6=%=Y--`MG1S*Nk+P>6!aE zZ@%--pSkqMzvWDvP}Gi4p^6ZO<>CB7JaI+cF8~5+n=*v;75}dj|Hau%?cOf8Z7VY^v;xqQv z4*Puimo@_dfuS_ed{<>qR#hIiD68^9P`NY8?mLhHPyRe^40Yt|Piaqz3X#V<3Xi-u z7c3%@ZlYHDt$5!kt9?E$9I(e`^6F*`jtw=m8vpF{t%FVEQHY#dM39*wt6Zd)Nj;Sz z?fL16rO}C8-8?J0)e{a5ZsGM}xu@$y&DTCRBz%e19z_cyRn`iXg9EYZQNhu-hC);a z>Q4ipbtKdz>LUKk+H#IO6eQ3{VTYJ|0##}sKh=!@}#C5lh zK%Y_6%Y*-7)LPpn!#(@B*pSfzMdUzRGBP`T?x%pqyp_&TL69&Y6G{;{qSSF@WoP_c z2g|oS5?z+|C$ZEcH!VAgMDBxKHW|Ey*&lZ60u&W$xRp!S&XDo`SWNZWkhO)3xubTR z0dEW*k;`qHf~EYf`pE!kX^nY|*)1KvD@Qms5iNoB!(%FZ0^@z|X85me;nso2Y)D2e z*(AtwYD@TcO2btF;Q?=BqO0eSETOL0ruJkX+&YOa&bg8=>&f)y7Si|uSU>@+1BtE* zFTKYDssx(7RQHft=AjVNU7lK#9TN=uT7g*Ky%f4!6?3?gq+nrk5sT4^gfQ%dZ@-Df z?%MSZ6|7AokYR2OO~Dg}#c#12c^#!a;mv|o=$sK4Llzzpa@rbs+GLR!FDcnS^C!g6 zx?ter%{XaxGc_IEpT~B|zI)X4ZQbKx@d!OR#=uG1NVj+Ne5X8Zs+OH(q@!vD1OWe_ z=*sA`;PyTHVzcvK8$yb2d|*RUI_Dn(^~ulN^@=I+)|FwI1hzQsrKh5f_>;WA`b(F$ zZ@pXI9?b;a_VQF9!*%{BDI=@nk8C-gUcYx|v|p4BVgx;a<}{mP;1^+Oi-X&=ndA%{ zu~>Hb;Ym1@uk2T1eX*Pe3NroDtn6WUnA!691H0&Wpdt#>35AX`zBH+SrCZ< zWs*urDT)w~r?Ea!7%Pd91vQD~*QGSL6urr;s6`4_(-=*Vrs4rOhsX6Sga zpdCO>F9}#pH(Ig|Vy0BFb%3XNx}=C5jDv||)`njGfx+Oe1C5KXVV1MNJ4Ch*`oTFz zUB7^u*Xdv%(=nkcNK+i&U+oCY1jEAc5YplZL*!uEqS&mDFg=|H_|1Tiz_oAK>k67x zW9_13iQgIxMkkV#(+J2-{1?ESJvyxEz=kJpR?y*v(4Ty4RhyNIlY0*6JK=mFg$z`u zVvB&8iCOt43sz#~VIrb>TBd|5GJo)Rzqq4xuwbKS_UC@KF$%$OvPTk+CSC<)juIiWdQ1n{mq_COB zsd{x|)R%>dP^Nwbzjq;MbNSjvt*H6$k*|na`xwog2kkSDJ?&DN=oz+1;Taw^RBVGR z&_Y4slB~gUYu1C8%_VHl^7wp}rhT4~fs$FBJ`-T;nvkJuXu)47rKH>8n^f{RBV--} zoLjr)Ja$;;gcS_0${ljl@3uUzf2k=0^=i)&mwWO<(QQ@!z^9FTPf3BD%Jn~QO|Rx6 ze9Ruhf^lS>USdM8-S~;+;OU=bvLq>&A`yG74+E0k2zO$M;k%$O6Esl)h zneljHnbH}fPE-ZUgNSyY%u2Fhcj&1Ms8#TBrAz7{4~?rrVAGA>Wx|KrQeDI-DlQD^ zBsOwPV7@-iN*Nlf=*wnP7RlpMCb(YwWTS~beF4oH4TOQ#%~WPCAWrW#YH6r9=Ig1( zJeFg_qJXwQAEV@FwUO4-X`_iwofJ1}1bjnJE>-tey_L{&8U{?eX^_Z}v1<9Fp({;R zTqRdy?cR8nxU7AuY$sxig~P|qnwm4sd{d(M?quOezcUj~8qf)XljTP~ak2L)D>s+Z zTW$aAHcfwrGh{S}?pqjE&|BpPY+T;$(()ytbKuyE@ehRQrQ2O{QBNu0&?<1s91A?` zlw#~?1Sn^8dhYl|poXMhwdVai>^t5FHm7eDRx%fFo`VLC;ndoc0;& zUK*O5t0X)J)4FhSkp#l%_cT9o}fr3+UISbZ3>V#fpIwNBsD0o;oJa5e^;$r zt0_XDnfEM)3e0DOqUTxt?FfmVKb)4pVp?QmQkyRqO9O>ggv!m%rAauC@sKZ0W7)tG z`+9o1X^o7Xl(xl3V0Ci5^>2-Cn$)l$5PcNSA=zXxvV^KRDUDX-ZR|;P3pJZ(XZ!*? zgQsa&p$1`*d07Sv>bG-oYip_5qat(2yMBN(?f5k(^7`(H?sRkMjuu@2FB<)p?a9Hj z+3FyEn1p3W`!Zz1Bf89x}#Dm^4pF&7sL%2H8F8G>o<6+Q#PHa z*la7Flyc+KQok|hu}S=T*D1t;wXY;^kad87XD%9qPYiE)R=+jK1}8K%Gj?C<=^#eS zH68JWGYww?j!!avzt-b}QucE~%gBt|p0D|D2U=U-rfzG@8p34-3e9_<3MJ4k{v3 zxVmT&G>1-?q+IwY6h}isynJJ72o_54)|AVWn)BgPw2rp|R8w38Y_WS$geQG@0AQDC zRYPqs#>xn1LfFj=&QUe0HcE*AW*FaF;V+$?_RIq-yxDt^b}QWO;Gj{j0t<@Mc`=&0 zz+M?g{87rgN3q>nu)Q*p4p`>u0bB;td`R8=K$3cjDPvmVp056DysM!$x4{f!=^{l#) zOH;BxBGz0lqW?+bM>6XS zj(}RtsJt@Vc*4Q$T=%6k)V@*E$7kMq&|tv`s`g?>bdJD#7kjZr?~}dixime_uSgMU zz2jb}h|*$^e(w`15hqUtoGM)b(Aa zw{eV?nRAKOY_kc@Vx=wb;F@eXpvTr%(~8he>!tzuscm*2uYEr)lI=Jx&9fwa?Imwr7G4hTGH%wz|X6@vCMDn9&eZ^Q532 zR+3b%ej)lJfn*J_gjU|8GS|7HSC#M$3O}WANxm4d-%@zc2qGg;<7iUBM@Rgq!%)h= zU!o9Aujuz-EZnmh@-3|5?fOudD_(2;xY2XlZLWRjuL(4aZfWie$pxtvFw4Zm^Kza{IMuMM+$wgws+Z1aS2e{S&0iE|W6CD)KgbZL%_Y)A zUwQ{0?K1Tf%5|YzNfA*Y6bUBRs-D%1=8rmL4`L-6diCoHw>TiM!aFv&IjcPge@}&j z6LI>sJg$9|I_sMZ&lQkHw5O6@u7E%COzJa>I9CUu3qHq0N0>e4$?hg zf<32ZWdWzk!L3!oWRPY(1#Khkv#A}tJ z`34e+o@dtFvOxWV{WZD(NqPp?JcE@CTG-c*XB){!8Lb z#EoYc9-nqCfC8DB?bi46eY9VR8PB=87&%Y9)*794!Rjh&-&=~BglqzVMFPd`G<8SH zjDPVa#UnuxyW2eq(ZLEqQ$gkPWb0ca(bGe9jHmx;dsZiV3-OhdpW0!>{{7Es!%u!tCIsOJ4$n4D9uk2Sn$d`ii{Rolv05c$ zkEU$ewFxy)AD~vG1X~p`xP%AX-=Q!#HK^onT;G+nh=o90v*9to)({ApaVp@6)VFxl z>wbyN*qPcduanQZG$84mwG-nm)m;%o0pifxvP&1rfny%rdxu#8Uk63&9a+NJS;u6^ zht`w?@(!1eWD#HAjwHYG$Jv(;wAz&0Kb%w&10ERSnSb>@dU6+-&dQe%w?D+XOX^sr zd?FO1cOpZ`JmvSt0#To-HX|iF2KMttt5ADH`d86j%Nb5g&aZ5H6e1?W~gwOZyM)=gx%_y z&pL86FpNdG8O(BA+!s`JzUM$q@_L4Xq_vFch${i%?yxZ3WiA}shRf)s<8CD!g?SqI z?f70Xccjh!r}Nvc?HwZ^DTr8eziOXJpO-Z^&Frug*uzHNyU2>;I}CIvvl;25$2$E| z(Z+=RqofUZ7{$_I%CGf{YcDUzr0`^yUs(e$UJku@!C?yclRgAEE>axAkUDLX790AJ zAbB%d#Nx(!$Vf4aJ&y6IpEOw5<1{$KTe>P3MiD;M5(Db&GH%9YtZJzu6?}k)k6Xh?8_3CD zJ@pKNO+&9VK;aBaC*|q)HW8nWl7Lz3Lo@rE+IWY9%31Ll-fZm56@;u7331;E{WG%2 z_sBUJpk};fY9j_Hi?Z2hspT%NGq$7X3e7Afx4k?j);9T@RM$M9WrZs4JtRKpSVrG& z1Vutt$b=VAxO-amnDv9j$i+!ZQ3`8Won63I_Ktux2Oai)3Ml*8dm70#A&(tCo(n}T zf6NgMyPX;T>ZoS~Hn+wwf~{aCZEBkjH2Mto?So(L^AchU#F6Y9LEj=|oRVd? zRQ5N%>kO;WUq6kFVAO$Z@2d{xUbkWVb|oP|;>H}ZXmF~6f^w{afXsVy<|}`!N(Oe) zP+6Aht6$$$yp`G!s(n5d*%zpz$e|xtOOZmtO4g;(XT!>oyanvyo7Q*$A9&gk`OC)hc zwGK3LOzuAGa2t+yzBX5b5?Z$ZL)n#!evm5{Nz%n_V+q^jX?u7BUl8ecL$T4E_5`e1 z(V$R0-|bWonk6H~) z03SjTNHLOTtuu5cRbl4e^_sPB|x!^>pOVM;8@eQ%&J8irJ?|@`Uk(+T)MN z-x?%a9`$3u3*JdqCjr3VlOU;P1r)uPa+C(DSR@xx{+=N`&UPS6M1z4~0CubP}(-$GDSu_LGnCfU!?_8wDbrLC1T zJ40;5`J-G~gYK_}p%4ko6j^1Mih7?RRPAv~n`@nA5(;&*u@ zNTE$RzfLS=WPY)^TOK&&Qh6GC!U-VctK2_Nzn`33jsw1sOQ<;ef`w5#5mya=U zJ-0CI1Mi;2t!V{p73df0p|l7XV}P4>g_JV?JkJkB5slOlMuX}V^j39k`LIajQe-2N zCv*M?+iyYylsmtW2f%d@7@_n=x7C1s8tCL(Th>M4>nOM%g6x}C6+aVC#>ISr4f=;( z)OcB~QDyQ%*Z>_YI51|zvCHXz0~0vq#l*1ZlI3yEag(ZOf0!x`*CXNa;+NB-CfpJN zQTT+)R9nRNDc?h&Tb2wh2NVhLb`&s!_HyPJuG&?!#aG+?f|=p|gBg4f1#W_5=&!JJ zExY=Uy?Dr^9H}d|`vJZj@g%8?BFs6y9CtVV5aJOb{yoVB*b#7 zgmpZ#Xb`t}%JTimD4;T(ZS8*&wkJ_P%=}`nT|I2I^_Dlw^?cL)igvDr&#s@8IU`GC zQ9%3f75RRB{h0U5n;pSdV`&gsA37L|?(dw?z`d$EAS;$3O?}3t@*b-OvEQd~bh8LO zmLYR)NAeEB?U*YCmCsOO_i3t2%i2QSRP>WU7wn2-MZiV)B|>Fa_Cd2*VYe1(0-nUY zhQM3ZPT=chEb|6dU$F4t^U%?vvW!RW3>sj3pa-lmT^RA+ScO#j+Iyp7)=5Kx&X7LvS7 z#^`_;O}1*OGzVE+&vITNM=T}T{Zr- zM|ydp)POgVR3yIB){@2x!~;IKpH6Y^;V8Hq_FPj@j`OnWuij*S6D9WfK>$Sq%D7$n zQ^O}0ju#)ijA6d;E-xrhz1E(t?R&q>QohxSHsY-q=VT=}txJ2gduTWMe5QU$@t;}%4=4O;>x>>X;5Ch*jc`fMB7~Jpc!Cl+R~}pd?nKv@Cphu7@%$r zI|+A?uKlH8RtVn(CQczc&3fC!T|KQ<_nD3w6`c=n`?3TOiVb=&6rM6BZ8jpOGbOgolFYkh^s= z$Rd;b%yVuf&!P3+5uuK60hS&nFbbHpGgaPRr$wLK|dAQ$3Xw>uxchAB{QS}9Z z#n&nG;5#Jiv&G2YD0WUm0{wk+V32nH(<5mZ>n(0-(ql#Qo+4xiz}&uOZZP#TI11h+ zdg3tMi6#1yIoH5e$O^{vuM5k}2>a>zf5g$(k4O(YT%;L%zF4rduSqXc0`IIZzFU)3 z=HXP1+oF_C-Y=BeJ`gi3Wb*VG=T+Bny`vRJmsWc{laimxjfNGDqdI^WV-X!mu7bz9 z*3ND@!duQJgShN}$|ad+uNv_wJ2a|LL^7`=Dq4S8+yD8=1C`-fZE14+n`mr(pDK%X zlJHixZpbuT8vGXAtCXeuH{+#ZdE0uZ0JD@Z(FBbcn_`6flA`(dgOGQ2g-x&%53hgM zbq-SxZ8p@5#Sq=p&&9-Awz~5Vs?nJ4#|MT}`ODB%L5^}+3m0=NM_X$+7uD~EhjHsT zxTWsV-WB8Rg)6`+boWV(@>+b&30uD^FuV}0E>r{j^fUwzV*qx{ilF;&;ljM=iJFF1 z{>~8ajDXa7+qiu1wEmQfaVT)AOVwehjIBh5SNwGJJoTPpTz#%3*l^`%W{!XqBN@-U zO(@p^R!&))S}=B@)!F+SIlm-@4*hiT5<0Kb8vDmZq~RB2nrlOa8{Q8 zwz+emn=m*AX>DfTPVsteFy?iS)F!Zv&tj5eX22|p1cihCeN&ikT5RM;P1M@r$vgor z!eGCl{1cSJ)V`w{XQHUC>9{~|-fxt#YLUS0%=6bDxM4`c$2NQ~=UgOiJ{qkg#j@JX z$P28u#g;fE?h&7wD)8P!C14-@xHKT1UU=%Y-qTZP+c84gljZYt=DcKl9MVy^{=FUJ zK)T?m__S0iCVrMu&{2!iKlfH~Fu~q9X$sq+&wUGjpS0d-s4sXfP?~Ohs|B*~St4rOLiijT9Su7>HIDU)R|jM$GDES(f)E>ORg7%J^DG|493nOR8DR5L zwDeomYc2aQNB>x5q`;UIaX;5VS2Bj*VscTVjcSd`93qYmDr?#8d;AJx?Xv0DLyQI0 z;eq~zl_f=myoLCw<*%<&g%R(^)EQ$P>#P`Z1L9M%QjuTnB40|uf|LV?KUb)_@_S(G zpjbKeDaGby@qw%jDz8;wnj!Vq3kF5&wE_(!lWg5imr$O}r1r(?PE@zuc!`i=o+-;~ zR;sIumJ@Y@D7~hr=^uf>;wfk?R;o~huNrQCl{7JmAcQu9c33$Xd+n5)9piCdX0Wdk z{7s%PkAU(!5eg!vVu0bz?$Nrupz7O=aFx$c6=d)z*p~!b(9ayWIgB~I10JdpIBqJh z=4Y3F-=wm`%|R1C9tpK#nMEoK5MZ67PDQk%io*>cMHLGzRfa&a(QC0-1DX{2v-c z`Tr2L)u1!es){a)t6Jddlq{|DYnTvfPWalWb?8^SXwy`OZ*LDewWNv*AHYXYu)DCf z4WH9)4KhQ!B{1E_{YtC}E0s8_=F^}gQQ?>nZ&-Jt^MiPj9J0VcGXUe+eJ}8gDcnsT z+8{4G&HCfYZyiz*ydb;G!X$K5g8kV*mF%9g8hvnu)V9I{9?s6^xyy9*!jE}LIG7|o zre^3@TafdqIk6$k-iefg<~ktjEMPu@*TkM;Ktkm$6qZi;77PjtZkHTbBY;bu5J)(^%7$i-U^9$AZ$aR_GtBiY7 z3ZCK-HXBUB7*`=UKp=Cz@g2G}eF3PZiY=YD`)%c}R0_sBlm%sLQ@F*F3hiECUM?i_ zv3;PP23fF7j7C~se@FPyLK~0ax#%&@gwsOBaq8P%DBS)rQUY^0j3o4K7%e!e90PY2 z1Nl~CxOu~d-K+zI)78n#qbfLaXQ!tB^?JpuSfxO;qcb~l6%aa{0lf4pj?q)2#I`ipCh5R*2wNtmB3t}_dgTFab0p&mf z<5G0pXz;F)K^(9L4>Hs4XR*A6dud&V0GJ7xA)v{*kxL1R1dG{-m(M$Ib&Pjkh#m06 z)ue@jz;~xy?$vdjvGM~#FAAu-QF_-Nqe>aF@0miIxZQvCbB9S_N9_4w=&g1B?XD?kzxCi(bCi zO>NgeDPXempP)>gQy%&T@jCPq~3L}g=1yYb|H#dFe3WY*JSuH9{`C2gxfASJ>?*v|EAJGwzONKO3 zAeHa>Q9oa%xoCDeJKwZipOsPC9oLd$KeIpMioN3mvNN4Or;o7E*7M)gIp%B%qeA?? zkwlWQmprNir$FyFxOzpH4U`>QPdqqWG<1rrbnP@NU4^ckr|qh;^_(+U`2E^19H z_1Y8Ndj8Hp@2#*Y59~_bX zo2jrxNp?-y;!g-t)fB?YfGjH1ME~hyN_P?=_VAIYDG@t|i|`}Tb`Wurwn63u+9_>~ z%u!6meVfqrR@o#Vi*POJ(AqUiCPYS+t`|l>{&%*P|NKZ_%+LpNd^>lUh^{Lz2;B+i zb)w`J2Sj7IUb)Wqx-jZh^2IdxsitWlGai$!7s#u^DIgX0$n#V`dL4k3L ztXVtKar?98r4}kG%$u$TYcktL9dSCeeYu%~_JpT+E@KHr?d}S6`1NFKy<{0v<8~UN z-ayUg*5C*lBIAcdsUnzOD4hA96AoFa%R^7T%dec^Wj7&+i4D=P+no%Z5wO>-#A+U& z{o$t#D$U`bEj0JkTN6YGu!1O6=7m>U5Ry0Fi$haqaf_@zg3;UXoG&D{yIB}H-RX92 zJI8+`05bVz1I>>+%S+At+euHm~6J`T&;|3tIa8Vv1gwg2b-yJM* z|KH^#jO$S{(ha`xj7!kdoAh^Mu*zUiU^*VE#3*{Tp0db`q;EhC3PELZtnBC+j7tJ5 zuYjEQs4`E7EZX6mxKbroU3sT&YEfdKDz78V%8GD=Lz|r2MBCxm_TQiU6kPcaC~vtL z>2Y9zq;%+qc4&iND+IU=1{VyzLyHW$*Kg;~U19bZ7Kr<}8fKg@6-j#0bnODu2pRpO94^5K|6$x`Ro z`6wp-Ij`cih^On{1BB0PYz+)5Q2(k)MP*;~HwQ#G>x!KD_uZNG$iTpfrOGf&Vx>u= zTGQPqUto{6tVH=`*9n%LAC{}qq(e=rsjG-D`!Ps&)t&t&nRnk)xdU|3o+o4dpbEeW zazQZ7zaQ+7N+!0&52y>!l{=C+0000LfULNNLKct>aESbm$EEQ4ANmxhxdw+Q0~gi70_UEP|5<=0z!x&4gdT zl#T+{xTi{=tWi^LkQHa|l|St1_)|@-Y8MA^)bxpWgT-wO3m0in+t-WG>{_-Fr*4x( ziCo%v55&Nq{IS{8jeD!i$4bXOMvTK)yIvvT0ef%5hLz8ZVkV@AH^qzbM>p@Sa z15!W#w$on=W-<5BPvZh&E~mO%NCahBieIqFxDP~i(P>^RxWQ6*y#;!gZf6f4yIpvI zw6Sis&7FwS)7kH$!{8z3)sddrjkdw0NyqSu)n8Wz#`Jq2ukPp1h`PK_M+mB3lNH%X zo8@e7XX4x5TSGz~!*!8xQor0h0zvb!n~2D<%_1+uA4hjW4b^E^3#r-4MA3h3ozq)~AtUOq#! zbs+vTcyan7Ojv>T=qkKnBVSQ18w)5^&MBYJ6G};7g)gnFY|-s5Vve6tWWG;&9}CCz zyhVkyX27-e$|TQv9I9}}AIhd^**Mr$S5nbJQ!$W9fIY4CIYrLTeR!&VI7R_oOiw`_K#3owlKm8AI z<__SENT7f;g8K{h0j}I?+hiPCGwO+KUj@1y&gTy3`#y-6L7g|mALza&jjpJCT?;|Z zoE`PY#CoI&04|6|c0dqi2*1JPy*vm3Bq|Q#RAAEaHsbgUx4XDAbD>(d-rBy-jf)>d zdEUs20th)Sdx47jL(Qv_5k_hwe8zi8?l(`RQLm$*0p3z<)Vg#}cO?u@)N)TTP>Q$y z@Rzn~zQJ4z@VIC{z8>f}9s01!R@m7Vq+G-p2@enl!g%~f2Owo^!qUHrn;j3XsQzOo z{ROiRIF4Okj_9GiYCyyA_i;!B1pANKlrKAW%`+?A$5PHaZ2<{()-12vcOtJ&9HW0x ot*$t7d;J4%$zf4=AL;Y z?hm;6p`s!)a_7#q*IGL&qBP`XWb)Yn09|PbH61lRvXsBx*+d|6AQ-+vQ9_A0@?^*t zQ4~^;HLZFEB1hUey-BQ%ov|lBJqD7H@PFwI;C+TTMr|-;R76+Hucg6(b~-WA^h zD#7op;E%)JwSbcV@FUWP_`54uwh8=EyQLZoz9M}R_2_{VwGVjk0R+6>1HcC>@$);s ziE{%!fBboseeay_9r>_+O+V7Dic@=u0PD`y9tPM3@V+~|eJRTOEn4}p`&K?S_kB-pL`<}+u6 zUzV;tKcz~1i?%b8S)hwbw?aG?p(^d=Fnxlk@XG>=cB>bv%p2BHu(Nl?YLlxGknx5q zP5t&jRaI^>^P@Zr7+wq#PcXWM{7%-s4+ASM&+K3M+({jn)o?9F>-K(@$>I=*`$OwK zSG@Bd*$zr|KJ*`BQ)Y9CwFh#PQ-k4bM@??^7jgXSulllJ>Jx@LPH3*`zgcFL?rwy7 z(30nI;x-Q3*sy+znw&J5!OqO+&SkAEmqB4Kc_v;>Q#In;yvD;0+~mRi2>H?Df+WeT z?5SG(R-k+7eiA_lP$%n=sL{svbbx6uM?pCLw=j&H?3n@;eAR}ETk0bDd!eJ`6H*+F zE8>padzA-(anHHaTfWcEsdYRWJNJnL!bK$({nACu6Pg*Gdx*!^uC@P?(O;o_gmmdW zF?Sq6t%Z!1o?OVa5m@*zGiY=iNV#NcR=7f9`8ol36$~w=EhwkIi1rGNU(Ie26Q>EN zcUn-{%KtuL5^TC|@!(lCIedPtpBcTj-}ukFm&Tv&=Gy$HMf!XklmEEDYV-58*|C^} zbh(c*FK|6Do@|?D%*JUDglMyB)PgsVo8lyb+ zLhh1#6k<`%%B4(8J$(of7<}?C*HO6$O>cip)_QOz=h#g9Ux(NDj6_Nx?)%W;uR8Rb zRcQ9#Vz_zoyQguF4&{}V0`dbjBqXI@d@30BucDo)jj}UWP0vr(kHo0EdAj6uhe3W$ z-VWnmT_7;d2zLvcRakUy{r`@yjtxh|1(5ix7-5ec5;dmiv@ep&43UTf%NQcT4Iwl5 zI4BApGTFdaJ(1N3$dW<##`;a=4#Hmr`8%12FNF>cBG}R&ey zP2lsNT~h>lwKV=8bp0oPQRu2NBl%K`GX|e1Li2lYC=A+ayHS%3-mWcGPtpH>u9mWQ z8-tW*`*zsu8W!ns@qLm(md`fbe^qFp$TjS{$;D?OmN2~7e<$8QbkrZ6A(kT)pf@|l z;`wjp^EV8-UZtqtMTuvS|0UYLhySSqO->>S^$?3hvE-jfSJ|)PZR(6RU0h7}zvCfn z)z!yfeZ~5b4@->&e*O=2&lsm{!JPY?O;7d@4gV9A{}MH2qS*$L;SZ5^cNz~*V<0=h ze>3U7OyO^5vJg~{OjU^k&K%B`ScDAI2Y#CeNCi6&1wH>yt^dpH|1p7)Q|}G~I=&~} z+PhHp70dr$iT@QL9QyX3?(t9O{EM~9fQJ9P;KTj@!u{33T>rw(U(F!~qQPiKW@+4x zUp@LchLd{g&e5ofH*J1V;b^XTtJr0m0=uyL-~2si0|`IN<5~HSjZAnTVY49`KsE#Z z(}9H2s=W39QhT3F1Q3I4fQy^64y{5d4R=^PXm>^q1!?;CSU7Mhzpc*qU(MogZqh`n zSlH`ZQro>S13XTK;cGI?g1j2~(;rC>CFPlH3k{@>b#lVREJfTLx$=JeHzxe$Viw3| z`a-Is16fH2b||n4`2Uyfga`om_%p&I6{3BSpZRID+7sDQv=pTVDiRZRTPNGI?F&Uf z+Vz*rk~Wka6+3$o7*@OMg(kZ=(ynA0R)^pwBL5BW3 zl-6GRYY(4%Ia0r<9T#eCGHZ?A{t%S%?I+a(1oJ5>;tU3@lMqQ9J_qu?tFHJ`!ZTHL zGKB&l3dPVn=$Le_J&W1oj-bsl;5X_?B;76~iAhyeAj^1p}9eaDNJvJUean58VwKusG0T1XH9nf4;HYwIQPV)x`Mh0E_UN z=19jhN~tBAdRH`ly%noq&!dPGJ07BSJNu{Z&_Xfidd5m?9TGittBwiSx!R61WFrlZ z6{hob9xEm7U9>we2BFKo|iXu+TbvEX>_^szKRbJJp4Y<*Wa=23jQpf}w(u;v)LHKS~j(AT8 zT#~~?QTiD#=Xa@tyIlRN{(@NwUt<)$@6J`_-k=L? zXMI9#3%|v=PJaH!FyF(-1@)?D0}%sT&jU ze93o6LX}1YZ73yOUyk=c(Oxk@^4eX2rOu&Eh8sGhO;T|diz3cgSiyQ#n|M{U?1olE zeKM&q6zg}knMw;kD(n8~U1_S1L?(XQLfWOh{Nfm9F^kl|W zDFd!k;!ok(5<>h;hKJ)!=}*+1F3BgJQVwRu{ckBB!QN;=!Ur{6fpEU+3x!QTCc~q5 zqQJM212OzD4XwGjvupFwQ6hnjSn5>e>~*BEy=iS$ulMKNZ8W&R=Oq4~^}aeTPlthD zD{P9pqmc~u;`{qZrhL$tr1=7s(80YC_rAoMm#mj( zDQrTH_#H7@2F^PIs&iQvgYUpdwfqtqt8|BpJaG&4obA zgJ5MQGQN)Oi!?bpkA0AlTYPZahxFsbQ%Xd;eQ||jY-{oa1UPI8W?#R*g!W{~`2BT&^WK6qFA#MDX*;>S2UmM%v?fzv+OE2l{+B zqiLciA#b|7gP_U&^-vx)D#fsoR+wJ_fp6XjTamagD-MY{#f9inBQ22B@S%PA;zZjH;VigN27SgGw`nC4N+{ z%Gq!7e$a>3Y_)Jdj)9~PRuSD-f))_i186@vzjgN6(lGsM3@Nt4C+T+mBqne}VJD_N z?}WNWX?y3^>tNWI#2vGJv<&J}$6jYRAGf;`+i1nfH!~-AcA4u|{N_TC4yPz^lW`AF z$aJ!9MBN81SMFxqkj79!|jDb2;`4(+~}UiD5B4j$>`eA$o= zf18fDn=K002I0a7FKm;0~ZJ@fr^jt0h82 z?SdRthmyT`2jCUW000Oo|5-BLxI#Sytcs81(dc#M^Mi=%9*x7nf>_*wRu|Ttx+fT^ zq&~_|UlyfF3)zVF?%;Oc^z2F;inw5_O{ds7O6i^`;O`Fo#jJ!g3r7L;9ju|t$*~Df zX?TmmKccBCt#8TC+lOq%g)sx(_hss7IuFArQh9>#3NN8hj@g{M97tI1ahoqv^-_Sw zDZKjIwb)V2#g7)fWr;$+fmigu47tPXv1y7IAlU=Lr9O#H&iPN~ygjDqr1PDao@|}J zclafKY;umm4EknmO#@}Wc^IF_!#I7>>}PD6&p~&BkGdt5jAf{0%Rdu817Srp z^^k*a&`@E$M^N9N4XPLoI%RU4$cynSRwC%^nO{+PPW!?%2voSBPqR^RjMZM#5ShIS ziB*{)tk`HI7MXrnw)wxuVIK%-&2z5Pvype)sQ)YSur7hi!=nql`X?3lqHNp2oac?XLDt62jCiLVJmpI=|T+P)E1 z=MD&N?_P#a$E*vJ_90?9H}u7?tWyP!xqWe)dupO6E)zok>a@f!ebi9*(4*&fOs;@Dt6PG$frEheZF)Bp~dB8*ST!~pFSl7_#AL;guHzuMUS<88~|SB$L4-9X_v%}kz8 zvQlV=ufO0f8EMfroo^IiK94HW>FPUY8eB%5`WLdpYSl`R$Tp;?v>w4KWPAbS-@Q>7 zboaMe;_ufLm^=pmgpszLh^Z$n2kYYJGPjgl!MP9D?~ZX?ny@(uS5V*(WBznk-DAB< zdQZ($lJ#AQ1|3BEa&9XyRQ_0PT{v}E8W-}%0})GYrR&gqGWr-TnAeB=MA z0P5!1JofY-K_hcgsDBQSop0KQKHJqqT!u#gKGnXFI!n_YhCWwqQR)W>vp@0v((Fol zXOXANY_wN_*G*0Y1f zWK!8yc#4+PQ6~X!w(8gH@E{GPlYMEjLfrk z5Z_BpfLHg25U6g!F2tN(p<7or%*y?$xNWs1FcYv1_tXG_hOko1e8L>=(kgA{x2LqSRL2RgexPkUQ@?!rvTQ~|7UKf#@@1T(t55X_ zu=Q%vbD+9E%L%K?`y-yoa{Z-}Qg0inR13hs>LuF{LIq@mK+bp#%I8eKLq)Pa`9%%} z=8GjHTG?|!CPFMg9p9sEa`6`O5R((#3oK=QNL$@WL(hoKx`H;#m2W$6=8>~zJM9=_ zJo6f;s^G1TWnE>(@A|S@iM!|XM4d9PgMDo}Y%U1TTSOVxdZ6NvWVQXY_yS7CDsZa7 z@jHY$p9HC?*uRA3^V*R-M^Zr$U5oW?`Qfm~aX#)k&%M052Z;R0JPJ!n7Vpwc zM%8|d7qU%a>kVcho)2&!1#S4DR*ZgjCx|a@H(Jouk1_8wp5vbf_{((s2kI#>`EIGD z$GW%#y(xK5QhyyO;h3vaq;kE3ERRneR#-**B37>LHI^>Lzav~SppS8V|@P)T`6&7y4Vkr+!Eo}8C7#8z;+ z&K?bdH<-ZQxNtJ$3jID{r3>Z# zs>YOKUs^kGvETR0|Ae68E0cDL<|c$>Nq(ATizaq zE*+^Q|55MwJk75Rm3}1~?@a}KL0=4j@FcCt4@rE@MJ$xi7#EAPJ2n$`qZ^y(vGN7) z*d-qWKhzfXm*Bx@7`kJX3P#a~WIVJ6hH~wPX$Yeq%M)Iw%s`X6W^~=i7zjgM5rK<> zZkGHay~KFaBJ7KMJiPF6-JgGW^V-}>r|bl&WE9XuHp?=P=CNmgY1zAk6=Tjc0~Br~ zB3yoyHh%D;QYIKe@q@xLf#VapG*g06nSoPVVvN)|fxm0=Wrw**j)_%J_Pg_DNEht> z;6A~I5ekcuTv0Z=R>!AXr;8z!a6!T!vl>^l<GBelyT<=TV77#4 zGzHizhv%_LM8GNBh+(_^A$pmyCv>2lXdG5h z=vWB6@`{v>N-eRnWW*;{ehc%=J8t=)qyf?~MKdKKJaFCV4W>KPOUv0A(OyFjd;%C;MEOcM>aBjfNL(DA zaT07dzl_2yimukgI`~Ua^hD+5KW(vdf8HHAT6%>S*)jK9C(%l_3^#cXS9`}P4k1$88RtGMt$7DzHk~p}kuTbZh z(zCrhD(+Vt&F*(NNv!aIU4uEXR}rW2yn?f++~F*Sed!@34rAi!4rI-1lvv#|Eb=BL z-nd^mpzFRAe;O0lrl4&8cBa(U8cS%#L+?oE^x0HpXJ-yau6v9R+4>$g-D@3fQ>k1e zt;W+$IpjRgbnXijyxc*DLEkL9C!j7YUnr_-w20~2g0eiqgR(BAd-$6seLSfNuX(p6 zk`!XbrZ3h;;Lp|P4eSqVx+a993^h9U!J8C)vn_w-vV$`DG$w(hh|xaRt` zh!>GcU$bo0F?R~{FubPJrs*u&JJGr6L>GR4M-KO#MLK}4s=!UeHLRbkNiFB&n`%-Y z77!zgxR|JoMm7Wy9Dd;e^0cBRF+VSFUblM7tO=>b2qLJ}9Nb+wQj}I=bYCu{e8tm; zf0E$;2%0C2)%Xg>8(JZu6hxn_vdsu|z1$R_r_eMmCe$0s`{y&@rmAm_lb$-@=2kyBNrdh~!1@e@nULAVGGGj6WXHYGoV za>WdM_|4+S9CWE&Q*`TVGnu~Yyg2w zCKDxvWsKErU0;PgRwM=`i4CtibJjJXDu21#Vp6^i1IV4u>4=qnw+3C|>=8G=pxzC= zD9J~R;d41E`z_W_JoT345vz6@oi%GNMR>x4bKO& z^mAv{6_9Onxs#xuooN&(TzyhzGRj=8RGe2g%HhsX5;a zi~r+LtF)_Wc(9naQJFlPxU4~waX`0IasXo`DYfT^!olF5rHk&*u=s?(P!7Na6@f?& z*6qRynxT^O7qe2RKcaPglV@>L5*e?@I1`aj=um-<7JU|z5hd6VCGe7)aC{U6Oc{3yznOhvFb!SqhadX0+D=+X3z2<`kaIdN{5qc` z%axee35)+N;?JCd%}H15QaMT`71tW!PZOG!3*#W$!_PRh+^af@F_J24L2t)D zZl12SJ+wQ*;>_4ToL!zy3btV2-y&~r1nWAxL|(%cG_=XOjwzlFqr;(I1FR;S=(CxNt@U|8_y%<4@79Tf$`JA=wD6k_!bjH|{~WR)GN1%3 zwE?G;VzOfc)=>JSah2*>bJkvgKxCygc^$$QY}bkXhb{aW-)A9vh7s~_Ed4!H8!c2T zd$h5I5P>o5q{cdWE@*6^Fv_E3e9*E>=td%9i!HYuKt-U&r}n7t!)T1G!X`9=9vC#L zv?oy}S)xTPvx6wM~2cKrBoM7O1KPx9WHZEh2U#xQ{b(2 zCynQ>N=O?PyboQif-xqJCuVgm?zq|=l|}{=S?;z=_Z`_IRFpw{G0;D42ND7}#NUW4 z&pLdd|JR=fhfD97TtCB{YWkl7In42Jb`PvDL2KMPKjr&9e9D`Lqv~R}<%wqt>su<= zVJD=dzX5J<~h`O4;Z$+J+(Qv~6&Kbvng3 zsyS&-aw@)@%qu3}cCgeO!LnN=!JkvXL*NvTymB=NenC6oH<{2ZQ$5pzKMC8J(Ldku zY}VHxV0}g8>rMt^244RJl70|!Of~}NXtT#c7dbGMkRajYgNcRfN(=VclCQZ%&G2G_ zOvI0EE~;)Tyf*nvAsa9u1!<;Om^33jBVOS^OM13$C^{2j*h@=o!7elnRbjEv)jzVQ&!W!1CqG-svIL5FP2mym(`7F&xAJ`# zS+#tWs%kzt8 z7d5O6UaBpGfkQw@Q5kiL*ut9S*-`(%fhxck4-?ybLN!+;@yRSTo*KdKPwY(E*Q-HB zJ;@qxN{VggZ5n=S%GFW}cTB^r8xYv1^J@n_X(XeAz53YrnSuM$oFEqzS3IeLNR&H< z5i+J+rc4flpjJg2Nz_0Jg-^WQj+Vx)$ukiqIL$67@ms59ysR5sw?gBVdz}(WIV<7X z5mx+a`zzzZ8P>hE1OwSoH8Q6Et1%2YUAp{B;kRyMPKtAm;>3bv4gr||LWE! zb|Z3ffFHP>Y`G(Bm^OE0)}h^tGdXqPR?F<~-)Xqr*8He^3tG2p@B!3x1;3ePJWL`u z_M3`oVhr%hNM;ky29Y9$tm^BY2CYa+YOaYk1@gTa^@zQk+Uv0Shy((9V#QGV_d(q@ zco;~vPt8RTuo|co5Pwo@oqo>9HR5Q9p6OhBdTJQ6Nu`rl!R?4?G(w+}l&MIi#GWO$ zn&{9Hbn1=!cM^JXeI-?7uE!-)w%7xBxs59N>>H3`T_6cBUX9d}Aydm8d##$de~m-0 zX1}t{J}Y1IV{J`wSa`&v&!1r#))pVc{v)93miN@coxRv=er|M(QJQaiwfC$iTYdX1!Y?TFaLalf;{np*Hhn_|RoE;YELih*$EQ=r1l|4MXoByF*Y<`T z%KeV?8GG2G`7n7-1ZZwiRvVRTT{5Bw!ieTxL-C*Nt5*gt&MQ6+f${+eFOb%1K}7iG zzMfXi%fJ0~!~g)VxktRDjF%Qv9p4KWJ^<{j61AEcRpRBJKgHw(Ewe;be=oBQM~;;L z1&+au(QF_qB$--Qp*Nrz1N#M{&12B>G3}-X+ zv)0O!BTc5wN0o!Lyt~OoP{>d?TrS^K8}t(4LJ_*|$XfHF10M=Nd~>zQ%BNMA)qcO2*f-fgy@Y~V%`rf{I%VoTy6uLr=( zgDlK(h-aakOAU;$8DSmF8q>aUK_8R;v(Wi1EaCK_WzB^efZ!~hiO+~Z*T_YH5FFG07vhg4 zybH(+zcrlzkn+0#NIvN*ThD$%W8C49r+gB(i1;QGz1pwCblFc#=DXQx#r|gl3%5y= z3=D9sZH~%VB>UZ3C?}It;ya}=Op15s)~{y{#<3f#mkd{wF^74R6r!Xy7`n!K$$s(z1aYKykx!T` z3AS^kI9=17dMJ1RqVH5gfvfdWvp)%UP8dv0W|e49*5oj#04zN=bB~Qk8FGokKOdp` z$0735A?Xr#k&tqiqQ! z7$LPU4ziW46j32u|3RI4(OZt-;TsquDHRC&rr^NEEaa`0V1!E@Jxc>XvK{bE z54H%$#)HRSA>SF-Z1-Sewdaf{rKF`?m_NZO7--Pz&DmotL%1}Zd&9D4J?)Up!ntY2z%@!z| zI>&r3fBiV{q4)hHO6#<*&3f?$r3qPfuPMM@cj9!3arq-}HGOE|9IrQpNaC{^vk*gI zxkH_E{fz33>Ie9EvFytJ`xyw4US6mpeB7;HnP*1;G7@TgCpKr%D!{Gsxk!WQvm2@l ztXUbXP!EtY5a*q-*sUh^z_0;+O$}z}I0-(NA!@+yLn0*7<_@AryGM5zPYFsnG)Mil zJH^Y}_RdH9f!K{k6BXC}V)F{ooX4t{CIq23vAbmA;M)^HJ{q_wcwDEFocNd&=Is36*{Tz8Q zjlM3ei@bB?-4DdyQ-ZG74TEQv-}Ufbox^!&=W=fjSTCq;ak}6It}}O&L*4BOcMd!M zy!JO=ObcDJrB1<{sldXWhB}@gFq=g0Oj_&zwL~eu=%j0yEf-^pzhG-y5`AzbTzB;V zbZAGrm$|_yt7fn~&5D7mWbWkKCey}%qOG?m5!a~EN2Addu5ml=TU!VVh|g(WwTE&E z%CBhuv$;aV-Q|d%B#Jh87}p7pBKO+SEXy~VLG@tl!9#GlSHW5A3ip|uM9yH8`bLB6 z3Zfv+5Ak|ViC6m_`RsIZoBratSH3Zt=Zc_n_HaYbLW!3v$w4N+NX884L> zwycKOKCGXGKt`m*HbYtIjFND~v=+xBi=@~7QFW09h1YpsP$00qouV*^#^Kye;NUl6 zDL-eo;cEPPMM6m9B(@l9ytnKH{aLO!>6Y0+)Gy+}ylmvWh9zZeGyzxp%t%7Lr~gLa z1f4~aZ8aXXcbyrbZ59^XEr*Xl+i=>lb0&rVVkLao9$@Nin7kkOr?*=}0DNa*Ll@lE zGPE*PVSKb(W&dtQYm`2F>TVj*-N`&M29`Zq>-jB`M6@Mf_rlV2c?NWzCeE?n$iEtk z0*#*d;jp|E@*3;?hN43hyg8TT>IfC8^DO>!Jg*B$Oy{QpEdqhHUX1pOQlcYED>u+X zYTpfErd=%cMZ6UZJd{%k`V=Js8~uK2`7zogfiq+NobuKBA#l`PeZ=H52h?`+ZT7g} zDo+|Jt4;kee+f{~R0kUZG4qqn0{P8*t%_ei2BPui}b_sjx%me6}*#?BYltfTo?aWozcHhPC#82)Ute zo@Kk0>UeOmJC9Sm9TTg`RUA1wf=kCTW0ed<NdL9Isyn$xQ}{)qFfa1^NIz3znh3LZ${IefdF`OSayTR)Yj`dZAT zYNn-kl%GqG*kww+9DJALOp=RLaj+wK0)-MeeAU29d< z^ZaZ7wxWcnsChgPkeY~~ysA7qf%c#8H`E~6z?42+tMEOKS$sF>2@Zl!5 zAG&}^II=W9?4V7y3xLX2CjY12bI)FnvoFn;-~r|u?mPCm`b_xQ^JP~H`6ze&tBUX37XTP}f%~fZ z8US2>@cH2%@@)aWzHUCG0KY%C0nc|DU!VZCYdruUKIeAl8Sv#h`V0hE0sMKjLVor9 z`S|SRF?mz^RC-r?%6ZT=1~7gleyTm;zlRq3hI>Um>0R;t?wR$qdU6FozCS173x7U; zT)*lm_(pl#en39)-S<2IdOsFF0PiC&dK-3EJ~3YkZ)&eKH-Mxaf}SW}VgTl+@14-X z^IPo14oD~9L+-Wa-ltbL_apTq^vU-${yH=(_d90}u;J?h-~&v2 zBK|p&AG+d-TN`zN#5<+r6Iq)Y*QKmY@bXMpi)kdu z!TX)B2pbbWP%vVZ^&P*zZ;zh1lfJRQz>Y%AUjNb1F~9}Shg;=)))#s#|8DG6Q2A8Q z7b?bgUHMUHpMV(OpE=RFKXwnCm3hSb%OfWkEbaxDuP|O(b3D`haMSi73PM)YjJDFQcH{pKMn<3!brRkC7h5;8F6ftM3@c*cF7j((kt zAj7XGai+%~k*OIf5qvl@m}sc|R_4T5@!W^4j7FBHyeb(OmUjDb3uvQD=AaX*}rQ{G`1NUe%=lu6sU(?2~3Ci zkX`iQOqO3*`hej?c;5CEuj;{77ls_vmrW0IV=-UIM=up51@_bTOR@GBlb{>h00_E2ww68Mb&YwOc2!EBDbgzF8 zCkg+QpYU$vLXkjy%S(BuBv_Ou?Gh`Pt0G3)G{4|fKHz|h^IS~||L|uo3`C1FOn_4q zh!AIxfS@24BEkA|D58nJyZ48jAln_Z9&*`>iQjX1DqFMlH?mgv=@fL2GsQRMlkiX*mU!gI&iXeiZgG;5<4PvBX|Y z6W?RT32N6NcIDu0?C|3UbZ*7hW`yGoE z9ezS8{V1HF$1t=vrV@|I4S;Zgnlq8Yfn!kf|4$14b!h_A=vn(F^Tcsj)NYFy7MZZ2@1UQ7RRR{cdcWB{x7C_O3 z?@O!B{lzF5GxXQR{&T56)pA~P$znbZX(3p8BJGvw<7`W#5u!&D!e{XAfHwBwR$n!U zkXL|Bhi|-&HQO>nt{qQd#rm(Zqgxsf)Dg{pBMO<9^Z=Yipx4ndQa=S7GdH1gT(bRV2zvV`dcap7;Op9w}v%y|25Ghp(n&lrlwk^b2HVuqJ!VMJ}9wF zHjcwrAM%O$X;;Mh=RJI_7Yn`~JR)-6U=k|9M}G=emZS52^6AxjIwuT-vu*ZZTS*v9 z-N>a&?;;@~ZfIby#4U76-3tvNM1me5P*S=pBj*xkXLu{XQkgdhyP{LY^JJK z6P5jsGQ=l+D{!npzrEcb9)MF6m7n*jtF5iR_4lbw=QvtgH)ysax}<-?{*PKV8}T@T z5~y>4HL{hXouv~#1m?Ka=5iakm4plPdQ+B4GTr?|qnS2N@l##!s=XdW$v|^+Yki~{!-7DPR>$V(o z&s3$?$2}5MQj-s@9xfZ#C17D2zhSW$oj{1%Q19EC3Yx#>6O9j=veG9SsgoA8%EiFdn=AB1jJE;Pz|_?LqmXFF z=nm9?D*G^;M5NMw_U2V0Y;gJzc8rq0UBKvt=MHRk3q<2={l%T5;u*t zh69bM*l{28jr^`RhEAy#C@XQ@25-1kM|WVks=}CF%sRoW|7H`WOFD`G7t!&lMcQa7 z3veN4U^T-@5~V6KWqTKod#)C7vVW(qXXvm(bNV++~{8uzpctdu;C6lG~o+Y-P?I>bYj&|il1_HRQ8=${{qL~6}Z-RI9VTX!}t1o5)SIsr%_${%3N8jKEw zDI4HwnK%@;J4D(95axb!On}uLq51hM$KxNeTLbc^Oh4|ZUj-pJ4KX8fXyIzn#YYZU zi6gkGk>z{N2-4p~SWN^WJbL@CUZHi{s`Qi{+=&g?P}J*h#IJeK3^V?%{&?U27$^oh z=0lz`{n!ktFJd`+=idfqvTkVk(lq{0vH7D4W1J2W;A#2SNmkad9wD()?iOtQdP@XQ z%l~BrkRkUTaKKWA|NIRksv*atsH$HKG6Hcc0}IgADw? zY!(qAOHm*+&Dy&tXOVq7lzQbqZHH1r3|yb4p`!vZW;KQWW%Ys~f6N|+Gq^E_-9LHW zWg2DfiN9pn|qsC}YuHl|(VoOHgP_F2ZG-0!Qu{ zxvM6k$_!36b1W%^HG~EmocJRTUzaj;_gGxyb977E|JpUe+Yd zgp8g)xZv=PQr6tPQdE%{n)QG6^WRAJ2Ya{Yj$cB#|F*(EVl7VpcALhltGTeRC&ssz zAjf|#6)+n+vScU#zM*zvZi|E+uXMgG0sKs2DSpNMnCQsMljjm+%_I$hEJ^_3q&S5p zcLUNyy*AekKB`$LXb2`?k3bJw6o@f*Z}sEy5z^u=iygH1=g6HNLjXd{tcVN~Dz;+`GJFiyQRUG8r`8wk>&{>=v_t1J-aoBxK4xDxS~v9*8G-QT&3 zUMMRvHKPBUWppBqoLaA@Z53}-f)WolQzrkZbq(Lm{}w?MxmZUnh73Z4{p5myv44d_ zcXqYW$S__2{q5KgX45{WAF5iHkw52*nEOA_AkTGTIOP>{8XLfhP%>9n0%lk$P!vEI8zxs*@cme;{R7M0I6`rV>kX8-i9ln8> zJ`oRn>wBo@eFG4fN!0Jh!5~2uU|!VO#wHv(V?%Q8(*YytIK>Y^q!5pMhzrSVwtXBy z!O3<@zEG;UpFUTX{hbmB#z5dVq&w+x>VL)kBYa3qqAmYg6n~_| z4fEHxq_>!&;`;v~ZOX;|54XRU&p!m=|G`B?zP%%3b~e^*Kr$>{DP>!mZ+QG=4>d?0 z-A|Cr)R%O;jk{h-lxKU2HebEqp*fSiG@YK%C0t$cRhhw*|B;~JkZQ^WUaNO-P8l49 zjAvxxGDoQ6J}*L?D7LL%UU(gxH&SY?yCLkT_&`z%=lLbm3Y2q|J4||l>1>x2s{i1m z{}6PXVf+U?$pmBThSAW35^J`t`>D~MCw7YDLs_}fasUbuGL~du67y|!U}Tg+p`{T7 z*Q?yoCOEX2$6- zO*2%8pFCjiK1E(SIY$|7=```;cZS{uq&Ts#HGpDiF}?w4{ry z*{FChxWYH{@?J0FxtfpVU;PsTq3?5C;qJvOYi9a{5^p6I9Iq4&uenix7qAZXXkJja zRIdCYIsiG}*!a$!@6F~H6TiV>@O;K+Xozf;KmsAShj-o$}oAWJze@7LK&AwG%n$bpOn|)qF6AwnygB+mW-yCxgAiH&Dl`m*B<3 zR%Nlvby|WJ82ukx4{WiliNMuI-66L}^ZG2CE3@0&>(US%8E-fvnG$|0PI^La_ZIZn zS5_x>cs699{E}_NXJ>lFfKp!3+!&jfz`G^+mG7wu6CG|p`#&08 zsr@HW_}GDaUfFkz0Gaxkp**iB_9VvbH~W^*LO>-sR6P*DR@8L76cp*u76ujp9V_oaiUMZQg0)whzGQzs zQ3^qfL=LfW)gnvCFv8yIJ{KZcEy(y2Mkh?9!m9GwY##G$$6QTrhP@j8Q}9gW#^Y=#yQ^BQU)?SEmt}GkFX6oJ7^Jv$sCBq#R5+F73BOl_n>Y z-B47E8+T75ol&{WKdIx^~VKylwAY?twb!s1%3KzT&75@~2QB=wdVyo=F} z=^#pBaUL_&HL3mC5h!=1^z3Ju9s`+g9pL0Q3HZXKd#)&xgXq6!6%-}(j%wkd&|bzu zW4ew6MRpkVi)_{H5nZj`#Q(H*6Ypr|CehjW)8J|xzBFlsWTN$)J;Mp~x_bznZ*A2y z7C*b_DC^Mls2>AE45%Jvg{rU+`}`_1XQn)N(+@10r$xOUY#!{%@)!KUDUt->$1nQZ zp327vI^Q~JreamLAmaI2v76{rUtW)1Q0HaS9f3R;i0Av>87(0iGnVgms6ajKmAM5-L6~)@6{nyG_eP>6gBj}x zp$z_99lNsSS?KZ`kAM-#s*Q zB;40-qMrHs+ng&+ZZ>TDOjX@|Af1NA9j|_1b2-^}q9o4e8Iu;GX%bk<2m;Ob8lN>@ zP^SI_*xFYPd_PdP9DOPE=gz5`)cAP3!oz49j4wf%>6n6I<;Mc8-^!n_V2duv9apkt zsF6!wFk-?NzmV*t6DvK-h2T+Lpc%XTR4@ZTT~sAz_()si%g4wlWOz5avAa}g75qiK z2aLz6%d`|$AN)+)+a(sF->%fSwe)~5{h}BK8CoE)@b;y*$y)F82{n9kxwY49eWuXu z>De{%WXdNsL)+g{p(#T}a!sj-wEW8j?NE8wV9)f3iFhQYq}Bri>~l#!aB)U)?$=wzH^bUPFqiE-b7O)%LqAeC zU^?oj1y5123-e68&B11X5U5h2tliPp=6r|7mo#OI-$BV}5um@`>a}A!mC!Qax9oQM z3|c*-9a&u#3&w0{;lc_j@oPmjES@CkzkfFwUhiw#->xsfCnz>bg+V&iNr?R94ojHM zc2BI|gf{)iuW4{;kqrFWUysqha>yxQM9wq3*>*!x3s@#II?XeuD*7{dlPXAy-RN=`ClepQf0 zKbMz)Up0tg)#`-v>`b_t+n-x_uoGxO`gk~*=4sx{Y{i+;Z?A;-Tm*82JasZX8-JT* zYud}{Aec7js)76bvy+0q^xTf~rtTF`3nwGD;#bwj!*Mjk0?4r!srfoz7aaR^yO#Nq zU%kp|JJ^)t1BFZwM_B{#YAXF^Xr8iONocKNR=&CL>!RdLFJnU`cjN*pcq}^F5q}%w z#|OBOzX+AaS*@~>>R^+7Rt%O!N!U=mb_M8s&$K*84&Imgl;^bO`2ujm-g5I>i9ZVl*LXNjk-}600X)== zETTQ%sDjBf$bO)|f@Ce^MX7>e>u)S)cZn4GD=vKV^r!$jm(^daJDz(I|13D`F@LLB z=dE~(E&mk$x%tweZ<(b*Kk1=p7U?StDH32EbJ`c0fyWtsf#sfeQ2MLSizN_|A&hkw zL2Zo3$<>T^MKEbQ%4EF%ZM8snu;YX1Ip~}cKgLaIwpc9AJr_*1_th6^b&fWP@0W^+ z`Au}39&NW3l5*gRLGhBQn>|&hOO3_xP0)8c`BZJUzcs^*O||h z_}9?rb+ntgIAUEfGg4~xeu#udG?o(NuLp4^rP{H!MbXmEz9NXb(F=vIti41y$%*;Q zACPq@N&1ut2~()xc2@-SYDsOqMADXV)YtVY#df$Uj~;TNgxtkr-DB$t4krkO)Eyn< z*4PsJ9~k&DUuh#buaO*~Cz}g-9h`@4V(tzSith-}qcfIEh7bAxl^@ad*QHfXE}P72 z5`1`PiXx`4WFIQ-!}U)`;$m{|l+wH0Wb5-uwl#MX;vx+dgM3#)hNL1Im9q0$S%fg-gAliY zW?(cqyu7gh9jQ&gpt?A`Y$GN#49?Ks`Bf@g2Hv#tp`I;tQ2GI}4DD{}wm`~_KFpCs z7Bl>)$@sXd?9dc190zvx-!kN&@83d$vtW~;F<|1hkslDuc^`^?d^-TXj@hKLb-QF@ zrc?gGOlI{k!a~-K6?hakU=;nx2H#qUV)G_QEOXn))w$3WK+47*ET~=Dfeg==lgK-H z+rmZO+=L$Qo~i@&z)=`{L`)t+(6aHk(hkh8;8|$KyM#M4^ieEVvL@TbQlt`|SBg*o zV^L~ZKb!EeV9CgnIG5?^?}s_TfLPOrEY&Lk46k;O64r<%gsqk=YwgP1gysy+;=os= zT*3q4)?~xb&M8Lw^l^j%^0@dzpaUa|FoORkJ#IV4bnZ#$`6+0)gqs-$*-Y-Xm;pIb z8n@8N>2djUFQg}^TA=y+{L8{yo`y3=6vj7A>s*w*LrI)A1hs}+y11>?v1zA?LS^)b zsqS*{R~gdu3B11PFI7=^Sz(bKu-6=& zcQLA`t#v#_a?W)C)_2VwtjGPpJ}N3tJ7i{oicq$<;BqE!fHH9X}*8JNn>TcOeOeDpn+k&S*{_>uO zXr+>Zt%v!j3bXV(y>X1%{Vqk?DlmkzK>PN58SJ{lCR}6B9L@fRSJn6qcMQA2jfK9h zHg4}oW<0sdx36va+Q=3^l}r4`X>RgLliqUK6ZSL=Cr}*F!-l`o{pAU~s4inwz%BIo zV^XFQoTa+{Pt7#GkbX2I6YO0`;3MR;tm%tdA_`<%t02|i3= zV6XaRQN=@sJ=rW!z#F3&E3UGA$*NG%;lW(C$(w9Pp`Gz?uiR`FT*b9CCbh+p{~HSK zUG&T4S!6cr-aQe;N1MJmziSHOHw33D-iTn!A5;;VwP%;Md9e~liZ5a2&1xazeL3Jw z;9^dc^AlqV2zD0*)Aq&b;X718vO>$!s15$zz^K9Q2r=rj*1bMKrWo$zwbm-S4Jprjpm(#a_@2_(4(UasOzp8Nhd_th_cA4Y~6Xs(lL z4JBHLL`F2=AbTtE0cMW?FV9uSMk4WXOC}#vNca-7hLPO0Lkt5OB25+EcarZ|`TeOz z!3D1G94#@r`Vco}-`2s4fOLVK`ng2lpl#=;u&;ty#?b@Qvt%5a4p5>P_@lbcrL~w3 zarQItLoka3z7J0<6JbcE)@JW_#86 zpWML$mDDXQhPO)*w9Q*T{c5}Ftg*%dZ=>0-s*A6YO`}Uvcjjj0zqViEhMhvBYH0a_ zVC$(c0*7D7U&O9}WP9^d=*JvRd)P7>vs0~2r8qSA13B;enD>uSCyijkinivL|EZ*) znC*PmMLDPX08qRPL%D)2)WeK*mWUW6*ia6tm7-p>O1{t^B#DJ@2VjNmDmN++O=D}Q zi^fTvH|SB=BnTK_0_MpxL%=`Qtq~H?%Bb7qM}(juIk=6ze%l6*K0^y%0d>{DaD6dX zRE7yWR0dzzYE@ z-$fo(srjuHr<*V4ou4MoGR0zu%i}1ZAd?f?bldr?dw0qu18M=CH*`2Nw#E;?-Nmf#&Jc;6hjyb4sE8}P>;r38B$=sYSsXfF zYXG1ZEV{j1SQryIqH}^`xg_f);p|$aF5fIYicgj1;EY*3s@Ai4xz|h5k^)7wu9b$I z4j(zyk9`z)p090!bj8ZXhJ)^|FGnNe<2JM}fn)lJH5NJI;?=u$)UZ1W3OZsm$slXYa5H>l+!M1rkw!OrUcrXi{;l}|@g#H;> zDAmg9U3-}rbH59v*6Ut~)y^wTO<-(Td^B-B?Rdc9=YbLLpI94`$9(!0>P znh}lA>}cW)b;sE-P24G^7&y*l-X&sv@$sOJL?>6|>D}N5rn}9R$>N6?>!Fub%;72^ z3d&XHjhqQOQ4AFQ^Lj|CB;RBAzIQWn!x1*IiLnQA6cxOyu6?5YZ$kaXR}jcWta~~- z7M4FSmYLx~I`~DIw|_&PEgh-$eM>eMVJtV>9yBBKBuRdQIIJR0FcN}F9W&LL6f3{C zqT6+UcLt#jx9E@~Qau_qXcqKA-Eai8XA$%w;z`{gB!8k4yNKAb4MxD#OAQGCWu)$W zLAs6|QhCteoYGx!p6o8kWNSG>a{RN7qcbY3ebTF0Sl7e+bjs_yE(N|DO!3|y3u$zl zo!o=f3L@F3({cjtFu;&ilUcF|;grsxRHp*Q4$UP6D;hWksGH1xmgkg=fOSl>-sDPZ z+HWC2YKY%l)lyX^e2vS?roXYZPSIriKx*&-)1(q=YPUiY)RPw3no`u|wO3o)(&xY& z_*E}s(^&pNj5>4R9M>&aaP=wdMu&2NV_>zu!P=I|^wX_7DWgJg*}+c$B>_q^$u8;X zWx)koLu?-3a6|@F_%BH%a5AOi8k~@0X8&IPpf)rrPZKfOM!Y2oBV}UKuK|fcAbH8& zT}~yz>{sw^@6u+sjE`7H@NAzbU%RBDi(F`u|2c?OT%q%h)^^$}D`I5Lg^j(ny`c%A zp38zxLyd)t0(W#J+~i{Dy0Sufs?n;nCR9$3cV80Ygt zO(T&10l%3alI@z{^_$Ut!8#+h_vR#|uPEu^v<+23EP%+cJ8PTE@p*RNQklpaPn%`H zfKgdxkYE!KpC z62`ACIZSfy5FL@vfc}0rBG-g-diu`iu70>=wc#&UI(z9;-pX!zAXlCzGb&roRrZt> zUi6P|*GpD0%Zkp-L+s7%CoyRS{pjJo%s=_02ZN}D*Kw%U41X%3caqJ}deoAieAFqI zECsjDZ5Z)f#C%VWvLfI-k9}>^41%CV+9ACIJ@Ma-(u+*r6j_bOx2VkIQuzL)XL5xW&c`X;3z@R=0f2jJ-m|U8UY}z z(+klO?N4T|fa86j!)E+U>Pz=YLv#!sI*&I;;DQ< zB>MahJ@1dh8-Xb|;F04}1CUmX5dGv`2gtQ=Ubg$m3<$2y%}-@6=7tqk(nVbN&)dm% zX-s#0ZAkge0A-4Iq811oDZHRw53rUgEbKZdp90$!T35auk;>Z`TWMV^=;t zGF>jX5vdW~ZHnKpjvzNL^JBaBxWi;5Dq4;-p83HYC*Wq+?YLT{#*FxGRiIX_h762+ zLeHQCMGe{4L9l%yWFyc`vXXZEf>`?Lh>s9Cx-%J>MQ?!$x%xW!ucnRzP9Z|~OBj7- zjcB`sjCt-GK$UuaAOpams`c+oI6qxhBDt#b5}f^hK^CPqOTArB{~i~}yfc>$G*Z{0 zi@!z??nJVIaQ}H(d9qJ&n@38Vanj#h_j=InF~a*@=;D?z>U-BATY!c{kM2gKu%U?k z{2e}|G7#SQe7fsnSd1S-^&Z%CMjPDa95J7|(FYy<{vTof^J_*@fKhyl2JpFxk`g3#OIKY@j`q$#<9#nzK9c=O5;9AH zz%_rtBjy?*Dmy!Ss)4>W(alLn>rsyQB6Nv;@&zh|)dnENXtIw$)v$M~wTS*jFF;t; zD--Yu*?sVg4%!4D9%%se*-~-9ds;#yM9bYFr*I;+JrFj|X2p*xrkNr&k#GL>%1kr~ zOrp%~Vl6T4BT;>{J^5UxCvP8{@23hsxAS?Z)~&etb>+~8rmfFOvI>SPH_3SJl8=Lr zFYYd$=L!YE>}8n%Ev&yzGSNgi7kNU%NI&jes&<-+Riwfe&Z)h_ zAr&sF-(t`F5Qix^QEfb!l`xDRWIk&-l$tP-#Z4sERC;yP@H+5juwTUUAO~Iu06v5y zlj#0q!$txAA8s?Y+^9&MN}jO5H^2FB4L8@7*(UjE8}%%}SbLsOocDauTz$;dNP1sM zfRnsn5~GODYg*q3pQC#g@j)J~U?o9Vl8}>(7wuQa4`V2Tw8&R`fq)=Th~zj3)9GS%w9 zf1&Ky``o^~r$wc90w}$%1dZ3FIuEEEHj+Jm0Tn9R0liE;szhk<7TrJ#05Jf`#AeEd zs2*KI#}pDtM5Nr>Lavm5k?$2^Nm=e~BITsxnPFWhTeY>_-bQ0sDLu6_zRMZCZX(Z0 zxki(*M@ud_bi7HY?ST3Dh(7v@l@9RdZDEH##k3t9&23%oqu-w{I^ci1Pbogp2bx=; zo{hlmJyXDQEkGC#Ew&QUGMSV<-#l5z!FHm!F0gT#$gchL8ishbD)wbGeI)K;jf=nWg`ki&5K4&onX^p=2EN18%zBb$E=lg3YIENd|cB%fOI)9%Fh>!W7!nz92$g zrHDqf{OX$6J^S~OgX<@lF!`(IfQ;}ONNYI!(+qkR+Aw!I4d^&INqX9BF{j<^vfV;? zgm|nUfMt~n`;Ar~Oy6HOsis>)JtTx;Gz&MiQT+r%38uU+EqMPByY-%`2OhwLV6oUj z51Uk#zP7#gowB%vkmYL~_Ldi3bbXVIDkm}2tTa#Vl#@09Qh#Lo&QE0Zzy)P(Ij=}Hh0JD)LgL|P^`)B^{*n3DbwP?1dr>+Sc7U`^Q3&aty%dT6Nj+7gR z8l@>Bp_K+tc8~>niQkYj;!tI{_yDS;@p(Ck_?hfym(W@4lD?N}Xc4qA!p+5|PZa0 zVwf-9PU3RNJ8A1vAD&`GW%hntk7<3&9D*`3SR(Qj>Gox*1ws;p6Kl zn%~07COQ;Ceoe~6`c5CN(GDRQL4Z_mE=Zz;R?3ni8Ivr968OO zNr%UN^}Xa2Or<379kaet>x=9(;eM#DL;!H(i)pE^dG7#Io{U#!G6X$g8+I2wbA_G8 zA`2!+QCpi=jS+!-t8|8|y|dJdP-+&juKd$O(ln045~eUa^ZN#eLrl3w<#mTeLLO5 zXOpvV>d~wQFmTXAp@>8-^Xoh*5EBT&wwUgdNc^l-Yb*gPk??kiO(%EoN}EqfCj!-( zT_T;VBemy>uXGJQRI{YQ#dnlX5s$OuIY}j87Sj#h7)o_nbtJ)2(MHmxcn`Z zXg3sR_RJq=x*`kPaR<&qOaXymBkId)8^!^;S^E4@(K(eq!0r8k2M^&KeB-k#w+{8ZP3=UB*vGSeqc zxwl`L2ihFPg!`v|KH~buY|J2IX1Z{8vlX3i-$QW4O_H1X&-K;WOoKA<_79|waDCQc_~nwWcC#g^7-FQA zyBo_)Us`I8*r^aamxT2Py{F9XKu7Tk&Tia6=YX2L-W%4@lkqjGAh*DC4iO zsZawZby1Wxa1X>ou^$@O^_@Lr_uS72#>4p*ekL?-LTv)sp55oh;mbvZK+~h(qOmJ@ zJ+0~%$UAE{^Uz`wB+W#mzo~K4Q^71u4f2_Wd2;XzptZ#uQ)@<#sgRN9cLKl~6R~TA zdcvP|;S8p8wPpvYX>Tl680bz4^ZT3Q|2#~B_nbPlee7&<@HP`)*|!ci9+8FRL|U37 z+^H-Ja~fJh&T~hE`yqe=T~&Q@`rXucbywI?7*j= zAu^djWmj$1=QGs5PsL7FIqw0ll!hZR%ENdJKP&&RQyHxgo5yz3BzMI$MGGxuh?;n7 z+A$rVqwPi`Nq?+L6~JaO^~Raq+NbMZ22g3DJZ+VSE?th!f67C@#XSh{o6a1tztckC z()K<3J~tsXwqeid$t&$~hTHsf#97IN)-yKd(V0N5lF}|ouz8!%*1jCem65g;zVKr? zs+lR1Aj1#JjPHqq-V+DgOy5BNhVt1T|#Zgj%7_eqdKkhcpuI^Z{l*< zF;(`IdCrxHNrcV=6Pg)hVasWEPbDiy<@XR5`=;Eg=tFYfXG@@_q`<>O9-KG3nV`x?3j$Td*Pvg>-5+oFM9 zAFhHbXkH#o4TF|F0JlXfkFm=!>-Vgj^EIZ85w_6RBIxV zi)Nigwa|=H?yY3e9GTsJ;-WXN+xfdis(z!2psdrF0imp}iQ30fmRJ4(MoRU&43vak#zVs|=55hNmx z{SII6p+R!HjX8!;)-Z1-J_Sc9NUu;n5Dg0cEQM5zAuh>(pGDo=Jh;-hbXdHUu&r@r z>C~H+89{2`Q87Y5tKz(AbM;N%?kW&v|0lIqDy0zc$f?~yIzNWZA;6Po%0aod(niK+ zYm(`cn=Eeh@x86pTQ{ZLyZ$^zUaEze&!q*5X!@v4Xvw7I1&W zkB%{?#y?Na32QjmKerZ;s@wBAY=>5PnRFaC*LRjKx+ipX`_`#P>oJxwBs5N%^WM=9 zO*=_HLzl&8%}ZCN1TMr{rs@hOG$sp^BcY#={Dz1p1F$Wz7&Y- z45BfJ9c*jEsyUsha0YY%s7`Zyq9ay>28(disOgM6Al3axxD^6j==X$y@q;Myg|5(6A=R8{-=^VLU&A-| z?lNn8kKw2&CO}?0~eojUp>3f}mObvpq1_|Fn_l`aKI7-#d2pk}gojRNgh@7R9|@Fx$${~7?Ph89S_ z_9ckwl{?e11@C2vQ{yX{@_<5}lPbK+@f&YvH^kuKI&<1EhNf(`Iz-uU{yiaHGgNAz zLSV{E%wA7O&sg!*2EnxpYH?1AU>{fwh2Tg#{*zj+Bn-_h$7!wUaZo~?t5`K;jz)z* zSoVZ>dLK_M-F}kmK=sZCCuvi}r#Y!`pk_nTH26`)pkSO_q3Hrf>nK{Zr1whiu$d#NX~P_JbR=_Q_rp}Zfs7v(&xZGf6ZK{IRPGP- zM9VuuJ1bgYIIQ~U1B*RG7nk(5gqjZIku6fFi7^|>I_-jZ9JIM-0t>H#X%MQL@v5zm z{6#V~X%2!vL4%AGd5gq!4zIB9_l>s1q3AG-EU5OntSp_Diu3AGLqyRQo_}Pq1{=!s zBmfOL+NF(Qg_{SlL3i?%5BKE^OKX;m}BcDFQtxz=&l}SXhm@5 z2C|8qJ}k<$jw8yZ#AOT<{93i+h(eyvX%pdTC1}A=T^vXTHirlaaC3{ZgHM~B8FOXIc#Eusf|M7 zJw$Y-8Yx0h7`mb7ooPKV+!a4uACC|uDt~iRXkADo@A%Z=D+(o~V>2l`%T(16%I3y# zr5---Q`Of%K5Cq}FVIEDHVK0i^yh47TI*?b%*^W1GslwXS+=MMP=&sG1Ms&udxJ1c zz&VpnBDBOBT3LB0quwh<69&R{!bY&R3|z8wV3@P$cXYMQZb!C>ye@u;d4QX3TCaT| z)ox|>O$RZo1%XKM4p&LV&Wi9;IOBOfDHvMW6A^WuQ{JLb2P=#vnF4aE3IMGRoB4xl zCWifx$h)dB=-jxd@@RD5opYr4LHJHB6$WpNELCcrPo(@)7kGU)tGOCc_qS}(j5K%M z#EnPa#hhnM6`M1{W#ER=xc};MwOZ&!;oDGBk{5gPV>!@YF+(|oTOv$Xw!2=oborX3jr(kb{CGW z(H{~%{RRqfD##@84u4Z54Oatca}=4xB$aaDqMx@MUi35M}&# z0gWj0(og&%CC7ydId}2D(X3c@F1!%6p;Dr2aXe;`IcZ--%I~_1mTaadrC_S{3BjK1 zC@3TRRlw4Sjk7Zov?YO#Akb5!hBN3%Ib5Opbj zUM^$Fyz`bWxW>k3Ha@?lr9Q9Pux4S+CCAz8U(dGUhoZ(#pN>}`ZCC*=b$grk)8A~? z39$tQ(o0i*#!cV^^AF84}^Z zV#c;P6Dmy(pjn^V4Wdm+Hn1?P3XOEmT1%X~#WVB!Rg45Y4ONf~r2)8-vA|%bzoI4C z9KAitKCn!zacJEz4z%dX!g3n|>qKLAaZQ(Oc0JlY$EyF*5MCU;Ux;aU^@(wkjjc_W zFPM@skgHq##F7FeQxQ7xcbHR!t>~MJ^t_1*j!uGQxhd<0WNCsC9Hid zs@Y+BzuOWP^5G&P((n})p~o))3GH&Z5|dY9Lif*v%nhMTXm6fL%@2i^M+QE`Vp^13qB* z4Mk1lQDg9atspB8k&=C&6i1iYN4>*w*6gZc6V9uxNsckx{bSP#nMKUfTbjSjfhYO?Wu%De~QFAZkhUfAg6c96}Til3LEa zOGme%{)PdDAON&W2g421Qgc+?A@437p_w6%aW6T~_zXlEk2V35-UF+T!*z{jcWOSX zuCG^BgFd#!jy(C|C=r1t+I?3`jm3EHha zwrBR(wr$(CZDWsZ+qP}nwr$&Ie5MGA; zL-umiW<}MIP{g4Xy?(sc90jo$KxRArN6v&vz5;6# zm7G%|qC@C&8NlhjG& zhp)kr!d6CV?^u66pUGFwBVuY9cm)SKmC6U|O>a zT7VOjkl+D1yJU8h7gEF-AOCpl(gc$B|VFZQauI2wtwKJ;H;&H!E>LTjhf+naNmiH5+L8 zlf>HiRsZ?h!$i6awA$|^uZ;(b*9+TDUL1V>;;P@TB%mvhUZIgXaQtd zZBMq5FkW4^Hu&|{bt?F&^Ndz8Oy}w3r8@XJ9CMndTc+dvTCh=6VZ+L_hR2CmAy`o% zD4M@5=75}Z4a#~<{kRuVC8?9XG#a** zy3LPNlBlT0_ZJ*&x5f$-<|pxCX*1>XOy0tp)F9cos|B{E%-y|?7@F*A_0~GcgSNEJ?ikZqaEX!dp%~tCbfDuC5_z7kEz2uqVHO| zwcCEymlT5#8_WvF5&FrWvx>#+t4yKop^Lw1JX051NG!ThSkcLxt!^mRNdHb`u$ML~ilSDLu@gq|#b3Nuk z3?7)MbzmW=gXQII6WG}_6|RG1eN|&f)GzTUdq-3FWUTJnHD4-1&8U$=BfZ|20J48A zudIO4u9bSn=>hGwc_vS3l2^|T6aP{uW32o_8JG2~SiY%t`oNYRKO|Hew{eV^#dy-hgo#Z zF(SwyxS}|tO+t3c^cK)HrEcP6ccXd~>2Gh?WExGgczZhl@f8q3_&D_gj~Qx4BM;6o?I_fk1=}MJbimjN&kO zQ2a4aqGgZI0ta`gp+z6+rN9%r?VeSJ_Z0Vz@v88m^NewIT#g1O(K_EMwETFl{dQ`r zNbf)U3`buovm?7Y#?(-5Sc8$KZ7+3J;-60kA*JI7ild(j%5@c6WD<9>WqTdb*tDNF zq#Y}HTjdKrC3E4Y5}l~A`SF`^K({=f$1ZtLP6y>P@utf#Go`+e3K?D8K-L9P$+k{a z^=nv;Jfmbbe`zkLusZWm{`d>{`Dbvk>1?R5HXfAbQKA~Z)T^2he27Hfl$zJYR^S+9 z3C^U(I&gd+S@Mx9us-C>$vw`Lp+-tyqzjsS(l83;tLU>Vfb@I?Aa|F*$I;D(B>^NY zMq%dV4)M2i;#qjMSg&yn;Oqm-43O#ybhm~2PI{{OxSb;WnmuA6=W$TJY<-7CC1K%8 zg9U{yR2`a;JR}~RCmaUm#!GYjl|F6svP07SLyCO*?1H%QXQ>76<$ABTQ$>3qEFYd9 zU1S71n9-@?PiS5*#h)~S+v$8Rtp68n_wW$h_Y%b_4d1L^iOGwNMg)u6id00m+ozO2 zK}71UqA3+Y!|Ux90F`Yq+*TJQ^Tq*b@>S04EY!*kX+=@dvVr5sbFD4Dp~lV}-; z@%nm=)}~R&1U;X9L!nK~9;rJ#NLiY1tSPMO@qL!GAz6n(SU{&Fmd}mOcmiFZcfqlN z5?}0d##{OlOQ@^9^ymld)zQS5LvYj0>DDutQrA3~;XNy+wt@}Ok>Wn#0XkYHqlYY5%yt{UvO+SRqO8 zF`7G8?B1BjM#lyA6I*>*Ny|b%y?2nC-BS(@`}U?A97p=)6Y_2BYQY{?@|QO`+9r01?K3HC^=D^r z0~y0%4H=1wmKZ2qg(es>Oi1fXUNATYE%K0;UEtNKL`7lb0C-9AoD?W8|M_JCL5}$F z0{|4Gu3VRf#SG%nD$1K|pNPxieUJPnE@=wJmEKG3QfBKy4ZPPa@I32lL@6l{Y`X5* z1Dpk*&HgR}Q?|YpF(EBPnP?6s=l74Y@zwY)&|Ol)ynf3pfB9it1TRwxs{Myw{8cDo z5(TEw2~O#{?qii%gQnd+n@z=;CR^Iim?x>c$3)oImlP z=&u}N9-K}p_!^A>4GjE8`e&)@-CMq_&2+Wn&d!t*$jG(-9)sQbbPMBA6zZQVl^wk{6oHbK0>2Pt0uwg&$j~pj zP;xwP(8R3Hwz+48esGM4{i^0?T$AJmX_s`ECOC%XD+8`DD~ zP#5xLwx6lyhiby6yA59WT)gtLoSW<$wu-|JNYDYklB)n2*9oUWa_gCLG0E0{Ed3fE z%Q<7}qkE18Z?WZfd4#^em*Xb6d~tVx`HyT5q`*KsaauLZ8ML2~MYMUdhiL<})ct$1 zHx@s2(nGk)!GS&l&iSlK2SsN{pfD~!npvd?pO>{F5N3lw0o>er9x;uZLLL1J9FQPR zL5bZSGzuByo#LLN=h-pc*!aX;9~*b5NYl+h_ZcUlFq&B;xtqZCRyrZt}? zNoUeM$}d2R*`?;omN{kN>xqJ^yGaocxkVqurTmqC0g1wjM%%-Jh4?Oe*e@s+6wXTv zGwGVckoC->G@($9RKisHHsWmG?)seDae;g+aF3^^&x4KTZv=J;%}kMAXX(8RUqWSE zh}S7z8JCzm`oP|7)-5`aSW)|A@CB}KIu-0n-3SZjm9fx*qXyIi6jiMeyP58_rJ#IR z0xE5^so=fsTNJXt4;bPb9##*dQ3EyuoM#Yx$uZJ&QX^U!bd?*$sCJ2pO*xS;nDX6) zlQfX2G{7)nLWW_#iU)7%set$r)QLep|rw#|JJnzmda`un+r zr34t(P9DB&H7=?qL!e8~|JQ0Uf zT*Z8JJMg9kk}e#Y#M-CCxWD`^=Nu1K84VC|JJ z6g{?K=BW`Rq}bKEZ!(h#%Zbs`5}B+=&xR#|S6s((+0^z6EvZI3k96mme~RckO+!kH zI^3v3GE`vK)h&R|V`CsJ;#qxMKWDE276?g+B@$?sm=HT`Inn&{ufhViE8fr7}+vl2Vp_Q2W)f+(%Ga`v?S0Y4i&$1>Jeye2%w zfmdpsB+kl~8%^8%)XPYeV%1}REq%*2wdlcQ{>HGrhtJ?Rz2dD-$cJW>o2I;NGEa5% zQu>iB3){)QZ9s8heXc>C1RK=&4K@kdd}}xlqERA16Qf>0$B9g9Mz)T{-1d>cYvR41 z@{v1tyRM6Th__gLK`V!^soM>QrQ_A$wTPvGrfu%LcPi}4`JFMmgAr`5X@E%A1tR9l zGe%!_YnTCif{e@$SB-6vfD}uub&{QE;KMW-t}O}BAzyH(3~!XJ0Y<+x$i^Tt!SGoV zlH63&@??N0dK1spBFJ$r1;*4h={Tg)D4~Wj38QpSK^B)=80&mhb5f6t@X)r6Tv&Zo zDs23U#UiO)(BZoQ26pFL9jApR!kh$4GP3GQV zz9hb!wW@%M5($HR7hnlgySRhvlcXb`bN8BI=`~b${CKn>4@Z$}H1U(F_Y|3mzP+cH z8bKyuF!qmVoi)aoODsVNQ1$!40cH&V86Pnwkj$k1cM}8S-^fX!9$qqKP}F)HOJ5q> z`T4fl?RQYpzqV;Wpr3?MwD1YNAzx25z?p-h_HcTXEPGycevOP5Ns2*sEk)iJ9Zd(vqB~gLhkvY-LKTx5S-AIV+2@~9n@>oe18Ew zv-@cJ9)SG4qE(?BwD>O8KT2zcGJ&2AT0VqEyRMbo;3Lk+EL&D5KKxYbqCkJoI|g(_aNoP$#@cG`T}-jqZASk z10=ARyJwrEIR++Q0-giP$%Dhm>goU6w*Ot3b;ogD1Uc3SfzD`kBe@eR32Z@GWID5R zlpI5{#PFhtyZ9jCP`tHjIcq$B0J-uy*qB2AOBHnKqM(Y;SN$>^7hPK`nOS@np^wu@ zlw%Ed_8;>*^I^ZD%_#0kQA+LF1kCfW54!XjA+kr=E6lv^CO;p+5S_|mMfhVE4}L?( zKn(3aACKZqLq9kfe?IFJAMoK*`kdim7>SWetpm+5I08^)}ME~S$RT1WfIb6)Qb@E|aFU}s6; z?*8$vg6^XU^t#AbF`4!RDZ27c9k-%7%g?<-c{%nU6P)-!0Ou{BIQLq%tjnkm=m?mM zlHj}pwWG}QiD~h_xvVS!*Fn!wFr*y8$Im8dQYCAo(*Mo|Ry;mF5S|J8+0}{)o`5=^ z;`A5qmk~_?L$acwF%aRhd6Y_gl$dA-Kd{aaWp4zm))Ga0e;&Ji@s}QsZBXx~;I@Ax z*xA^#M|{b&4WBWBCI1+Y&qTs4z@3QuU0^0jBewPUY8~&-y>o78Ra#+6u6WYWgj$?x z?uhtT62#MeE;_NuK{iy)$74#uhg62&^1ovQ6pWDWU7t(1z8K6M#<3Mci9M>XJgrv^ z*0!x?Y!fhRwp(92^O_rh1D#Y4tCYLm_o;ep8v;LJ%fM9K+SFrzBu}1Lv0NEu6mGK~ ziuyOXf@2p$2;7aMYEP%mjj~wlPP}Qz+Mo^9LwCiYYZ2LI-*gkP$(Vmb3u@lvpR>I9KX^@2>6A*kxP>#y@K+;={SZ zmWN$pF->YU>5!^-vxZX5oJ1lXn#ZRUPBS?%KA6b8q(b3izEfkHcghWFdJI?!} z`e-*qnzr$#&&83zZhzf5{TYq~j71H$iQ*Py!6Iq~QFmK+2et^yNU!r8z^qsN>@GJd`G(7BEx$);wDlymU(+K{0zFIkN$*iGf;+kS1~( z)c-Fsmbc5R2d#7BwjTO;=^*lpJ~n~E(s#9@5a!Srj(nP*Z7erb%oNK{4Nq?ZvY7n~ z$ost^XYix(R}=y^1lf&nFwpvJ9jA|V;Z47GWgLmV_CXFOr`3bhm??JwyUVjP-t5t% zw54r=96QZ9$7J}6lEm#YzyD0>97fl72#Y;PosW|%hN6tTlI=#B4JWpP|F42)|ELNVDc zY7*te8aWBQRu3u{ziNnQj(hvaVfm6N|ARI7QHGn7$-{+I<&k>xn)~NSUcwrYkwuBHlCom@~5DC*8~6x_+z%7Z$5lPWVBZ0KhZV?AK` zd&tqwx~OoqS#>BUev&AWdHW^a#s=^G_EjTDT;J)JOl#E>58O`#u%;)7Xx7x625h;M zJh+eky49Q@GxRworrSVfn@wY1=Bwlfk##w2rgic?j{1ykjX>;!$myi+r3t0+9KX}L zJ$zL28sg}hwUmD<F&&lY=LOLjr@aa*R_!8qO~?TiSJVxmsXD=A&9HYHtlQ*^Dy% z`lpC`c!HXyp7=~*5rR3%p7AY7$2&HQy6lSBQP6 zWn0=g3ChD&ONZlt4IzG0d%ircGu3))ox30DA5zNcDt>~-}4_Z@A`0RFFJ zMsuW_)-ij@^QXs>Z9KsJUmE=vmV2|KgV6)!J>P~q)$tSPuIP2i7ILwVEg`6eLzEx) z0LNjkn}>Kdg&~+WNx?U4$c;8FrUe?FI6EG@Q{_xWWGh@?86viAmEiT5K_ywOlDoB9o)k2XltBFjIdo zEDD)pL9Kw+q{W5}Ayc2iwv(caFm0vo2A0x|&E>W39t3PX0lqP|>^|MB{|0GBnK z2WGpe2eBA!_i%N!lLpI_5;$-m{9OrxBiDx;GGu%!|A_!wg1<3NYGq$NM^g_(*r+!U zU`S^rVn7QHKmq$gPg+m@^k4P!d zGgjo(-O@cC-62$4!8Na|!{*fhdEY?BK1+z!=^aJMXwLuA$V@bp7S{lEEm4CAC2rHpR z?wmQX!a14uERz2MA=tHp;M-a2aSC=Iyele(a$Vm}UI9AF_!IEXd=Jc$WtVzLMV{ikvq8qY- zK?0*ozhKZ1LY<4-PW8`O5?(&7c3BrzJKY%t+aYgRWnG=GmZp0%8pemgcHXFb+4b#C8W7fpOMW0|ITSlWH@Da`jFb%SiAn$6x8ej!aU=c*o{JT7ZP!tZr>`?M5%`c;eD%9bJ`7iz> z+$|d2+O9+d5lNJ;jm=afyYczT#@}%0{7oJFW$7w}xB3cg9sxB^8A4zhp_2PqX z0ulnMEDLi*&P%uQp@K-_SF-QD0W24zJ*tTu?BmIpyp1=-^~SxUJKLrY`xUMc^e^mp z>p$FPAIl(QlYsB#P;e^i>g~!hZ^CkxoqPNDS%ZA1Xh}!tq4{~l1yvryXdgp(8ti}@ zcdaXqqvx8w@BUu1UrcfKqzm& zgF?79DLZ?u9G@rD5CDJVMO$md3nuZ&7T;OHyAlVx_iqS*WGH7B001jmJIGs9*+BVE za6JeBg4Z3{ZMMGOY|sM89kE${)H;zP#4dB$sDxxqv_Jx2{Td$$8irakSdv_|ch{k3z|fMic z3~WwB22{4r45J@zeMVLcCwQK6VG5MdfuytL*Q*efW`E})Qd^TNdbmx*p}yO27gPIp zo;dX8|3aen3nBq?AD{arXQ0ELJ7D#M?6v#?jU8xp!B zUJ8i{VRR!6>@qVOdo<_s2t6aJF3;vsE}l|wnLD_+!V0!81%hL(fKi(WDWP8_bH3&d zK|MBtBlMcWbs$>K$e&dYqB+B>CER2s5VJX%%iMe&+*?luuUXS zhz)_BL{ppOR6m-R8z)H|!Cueo1MvRJjz`FHY(@{VCQfcv>Qf2e2UkU4(+#?|)HwnT z7=T4}+PfpAg*fI}?b^q$-rCoIt|SQgOYa0+L~(5V^(L-35D{9`7+SI$pr1VQ-nQsy zD2K@Q?w8v5qNSHp4pX1vlquMOz^TzRww1In>k9IzhOQ>U>puLfqsBXdKbqDWL=#-W zJVvXM%hH1Avn0~%&1kZjah8l+Ul5IfH&aB5Icjl%v(N;&Ld1hc1^|%qw@20Q-?9Zz zn~qUN9rwgh_M;-F`&a@1U<01U{To5`Ca|Jr4*=#O*JdQ!U!&Q@@{*sW}rqOTNz;7X76qqkEZ zFZ3~#Yjxk5o9ROEju&~j9ZkEL3QOn}Ms?uze43Z6qrS|COZg<*NH3`A559{<^Y%yW z!cx6!>jTUC^pk`j*T||$$y-XM$PpXf0uE7TJoK+n=uLawzFd;}{GLXvcNj<;j-fi( zwYHv2d%v(gR3GNMKITX*8p8P21)N@STeL^CZ*b)xlxEsYFbqxM_WVVJ?f@?U0Mgl&PcuL2i*I46vj2Rr!b6KUA_3InZA8dLG7ZZugBKLF`*Opt908_no8Oz8;BUu!=qw@qVHup&BEh$Wi`0JJ@@ z#haveNY6+gqZ$J2@nC^uF3%m`Fb6Srtg9MLO^GZNRp}E_aAxRiJ59Kvs)6HPqqR4E zG-)azTDG{=21oqYYaIOrQ|;JR$$`2)vQBm1m~*)p^ASQ2OFBQWn}|B=K3B4D*#M}W z(J%m@yC`6#ajH_-Zs<9Hea}}4_=yk@s!e(MHh$n7dx^-i4dBJgCy&-Ig@mYcXoD!3 zoQ1=iy2WAR@R{}%=1iAK$sY2rpQ(w1QcHDjh?jT1`M<{M;VLD(gd&`tvfP;924-5z z=X)uuirz6_)eFrr^; zyO&4%cL0D$T$+56yo*O!;>fQ##&KL4yi#xkrEoe_5OV4kX!|i7Gr%Cd9y9KRF|78s zMsyxcAo+mwJw#a+P?8>J>=>7f^9ckIoxHbzl%FbzVMn*C&!rF1@E15^008NC&i~Q} zpcMhHhhxZn|CuuYTnI19{*OjEwTU@U6&bh#j08F9L-pl|y7T2Tl)JO#){}YN*yh2n z6u)HaP4$c-ASH*88&$_d6EVVo4<)RrCJPT;FYz7~J_YSc@Vb;w)#6vBhj{M8+vo@ZCO{n=Kktq1O z*6+09u}$E2Eoo57eTQ?2Z{l#fTQS_qlV5K|!*Q*bL6+8JKoF-mF zg%`+HKhPWKXMt_6dKPibRY$z33-8rEWW+u2t^9Pu{tLK&)dvKG6 zsa5q{|1D!LY-N71O6IK=Wwn#-j8)TdVKeEJYrX5UyEY?Te7h~?;EA(TyDa%9=eB&$ zqKAjr`amND<<_NpC7@#po`o1tO6MA|NXyx+QShC>iC~rM)+Tq>+M%E$rX}BS5VJmv zkqQS7@Mr+zgtHqGCF7{$yDC7HAB2!A)g49hkfP$dEn0!Ixs zP6wJuLjxfqBrF#~X;?9z;IK3lm~?SD>AN9AxwfS_{k1&k8n1^ogskb3Oo z{oS`}>_B>bCf+zY2Tjo6!L(1uWeudak3+0V$W_z5xX8KZc}y`-1_f zn7G(crTrs?<0vROg5l;x33x%PF>2({NjYhKntoT*dFdy`dlZZvKnUZ}b|NMbw)*wK zg55YMqjsW!t$I9!gws-vO1l*9aFM3h|D`$pAGG8DK9ob-7ztF~;NMJ=GtpdI_yI<% zfGsYX<8)gTDDq-RT)&^ofBSTq9Vno+0sE&y50#}b+rtO@Vl*;h&zK)BPJbv!3*&*( z5C>F;lhO>2ysFXtSvcs)ANzQ7jKlTPm@xTXGEXx+v>d%!sY zFjV$&_V9x!@zhauhd4w@;#a&OOgXk{#0tXHt*sDu!+KDfox;-Ijzw?s=4$+gp1WdK z-*CbyQ0|2tKgeL};nLK0Otm^cI0%MoBqCU68Z;3lZ6~USvFZ-wLM7{Ei?eknQqE2n zKo%RnI}F|)v*~G(Bpj#~v;Z4+o8FV}*Sbpx`_1R&hc`a%c+D0;sP-b1Vk6D|D|nyi zzlPsjE+&u#ePhN-quYuxA^T(1S~5p40m-D<4>y!CStKW<9|aS{Mex|YuR4d`$j^%1 zPi0Q3#%RprYSiU*g&J%QUgk0o7VK*!ZJiIIuNpyKI&Q}TJXLFJ?%KXO!oH0t9}$wf znhvIkV(B+|r|g3`rXkRpoNhTXeYUAVmF>HVGGSi`;#J15PktH4lqdB!q5 zl$Y7g7UyR)w6fn8$uPtbI&=!EB%81z*>HGJgl`hS4?=WA%LBb3j+wTwbua9=4c%l~ z=Zp~MMAR^xZy~b+2ZkuDIqKOiFpMXOgH@g(*xpcp_3i5adaek(QK5WVamh)A7i`)f z$}LdN6AG7MGH|(^W-TaFm(dE>hK!Es_Zvby2i(g-UsxSPS_R9 z3n~&N)4#cpjiH;&v$xibbP;X!WwM3>yFbAAE_3bjkL_OqO34hEZ)zg1bQ6PI@{~fK zH}V^RI<7G@(8hl1I?JZp08Oj=tAY;*Mz7^FwwNkl}?;z;dLT zl(aF#9z{wkqUtB;H)ADSb9YD)EX>e*Tje|%$ujV)q}4*2{gLA=#Cbggoz$qYM@V0k zr9fP4H~18xFakCo%D2FRlTJ=n0XWu13e&)4LWuy?oXDM`XzvMq9@GZP%j!Gj}%m2}RtMK@MfH64V@ z;V6n|&S(sUueAR22~Lad3)Ucp14b@@^RNa{d^s+6{2!lfCBF1GlN8LuaWA39uKk}s zB@4a9k_fF9pw&@fmLM+^X^3X?c=(6EnZ>}Id!s#j`fPTr$A>SUmJ@qr9Fw={Tv9ob zf-50P7OYeC^88CkBtB}}zNtaP$#o|1r#L!ub3%65v^tpI*oO<^Y{F+h_Y8Imz8*k@ z-cWb~PtdF9tCy^kA)$`q5mp~*>-vG77viQYV$p>Uxd6-!a+30?r{e*9hc=cmKx0yt zqzIcJNI!}+mPB|YOY!(jNmqO%DOeL|Vw52sZQY+AX*amac)9JgcnR=hVm#wP-P~n3 zS!#rfDNE6_Y(23xqW={BKFFQ-6iPLqpeyMsbm?lS!a0R3@*woUo7<(;R7BBzg$w7)Ye*VULsH9s<2 zEbYHylrm;suQSoO&LJ198@}vgR~pl|SW^>XN#+Ny2K85J*;@(bT$A<>aX!KkT*soE z=YiV8WAj1Tl#X>QUM+UZK62L)aJkOLjlG#se?h-@hXI1iPt_LLXib~kt* zd@y3b#|&MrU9=bSlspG=e28y%G2B)mo2}yNUS_W+m{p$_Ppwsg7o$AUo$`5a&XPTr z7>23E3WtzLdqN{hk`lABe70?if5pe!FH;axh3k$rihyH<&dH6ett0il{{aWGUX`B8 z2{d-(E;t3B;@@@wk%kGJd#!9Bn5Xa^CNWoz`W9+6oX9A!up&GGcpIS!e^~1Oc-W_V z3jhJUC$-q6ioZ=_(%?5h)->U1 zyE>WZ{{Cg^o}?@4WyM;&=CRY}=U#94w!MZaHoKTkB({=`IpIRpJ{M~blmrQL%ONaG zgGJLWl<^XnPja|G3A?q$xH`jeahArr^N~M4q)?f0I>aZxuubOl8P9aUH5m{aJk_!BQuIu284v_l?y=12em#?6%|a{ zIb%6vLseXCyFWQA5?h&M*w7HA;j`@KfW`7g?ze2Z4~zly9iQN{Tk1BOA-u2KlwP5g zorL3BAw280lx!{GDXq6E)DLJ_I09$oYz2`nSQA+>68i2XiNl!#I7E=Q#OM_+BtiD>I=NU(N?(wzS-Y*m|9YC$wM4BjCMnVGC?0sL35S8ofnR~-ie z+Qj&6Vd050g$oqLNt0s?ifcayEfxLH<{gA+GEFU+0$;@?Yi4-?JZsw|9<4@ctP_0nF(1SVrxnAv{Rfj_yMWa%jS?hZkx3NFzSOhaWwcYvbq`@6L*4ODScKFZj0qGzM93=*UK~a)WA@(Yp;FO^ytc;hrH#JKy4ynv>dQ(VfKvBCePp zfq#qHK%F!##~xZXg)fPBF7Wdt+cA&vh`Ebe;y^ARUW`&V8RzR2%b)iG0mJ!IvbxpW z9s4IuW$Hv+C?T0zRKjG*7^?#Krpk|2SFhyF4T6H6hlmRNPje$)Z#TnxD5gV1ELL6B zKi2bOa>)m+c4bt<}=h2lNRpOKXP=&Q1>9jh;jBi5bCgrJt-1(TQTbGDtOo z=|neK8>IdJzQn=%mW`3T>_52Q!$GpyzQsqNn^c;luB*3@7woQpe@Dy|CTtece(S+! zX}X}-g7LmKk&;{l-!j^$t%v9M;qmg8(i^G-kV;^<3B(w>s^n#t7T5_C>zgo8wqnx zxKcf~F#=Nm3&4F**iTEv(RA4%#@QgSuvd9WbI(uquE2Y9x@~y)nPWlCUSXgy{?8aQiX%wVbI9$1o$kMWZQJ z6}pOw(`JNSUY*Z6aD3lsCq-w9X^2_}N-svOD9N=j&;bp_0+ zSlNf+kdL)iea1E>s1wbp4EwK$VTM>}2Jm8G+&4OAPo5vdbR+4}KNN?YI}GDia0Iz*H0=EsqgFY90dU420@uSB!0AqUMFlQFb11&wqk_mB!YtGXVfV z8rLZ40T^ok!RRD7bj1&% zBdv#>zDLDBi<M*cHY=#)qx-4aVVTrIls8v%b#XK}IKVz{av(P`rIK8Jr>3}U_ zEH^w_a_^DWlkXi_EJ&7;*E_r{|7R z^~3s;k+dQF`!pe3ikprncnAJ!aEH^L>-W|~()U1jpd0l*m(?u3N6R1SK={iNw`8YC zC2=2B2IEFQf+NCxai(CUpa^yc{8It_+3o$6Q)PqSHiTj7pQ*e(M!TL|`ERNWd z3;ITeMKE%r`*)I zuH3a9jKsjegfQpfcKrjHZ=WQ==NxwCj~Mg#wC`c|RyS-z5&r$wAi4|6W98;kog3j) zw>5vspA4*y4#&^_hadaJhl6Nw>)`D!rKF%1TCbJ`&Qj$URR9U*p86i4N>%?^S(V-+ z!zO^Ws-=>J5G;g`%BW z$SGo=3e(rt{lpZWz#O2xU>bnMxvsGSP0g2Zn;tc=^-UR~k*qKAHQ{7$pxEIJ-|~6w z_i-9KDTtf9YW=#3NjPpIeRFvsfcDJ?0`KR4nOJM&Rum~N&^ zf6uMjyo&yQDuE}Pw_HW?WoM22;aeE8?w6yvnqkKGd`6ky>2}JlM;i4<+&pt3K|a-D z&}YTIjCO$S(?AsAdutU}I6K?;u;Z3a}WtJZp&a}8VMmKyT$1}{u!EL;~sWd#rU9dGJ*-sr#I zsAnm&+0EyP(6AEdp@VSE&q0TbCht}z76P_Nj7eubwL7!@&f%}9>@@s$9T&g6h#np5Nap4c^S&m~V5^zvzj7RiE;F`-eDa zf=(ODp6JXVT@fsRF+k9z3R0%{;e|BfvnYRa zvY+o|5r8pq(OvI@>foG<1*E3|uh^T$!^N63TL@-@$v*XbqVW}2(Ir3=#q z?{_vBuZ_nZRh!b-Vx>yW8mUox)LymegPI{Uc2w+L1T8Tu)Sj(|3RTpq*sDg3$7qd; zttDU2_5KI%Pv@NbA2`>2o%?egu;nOsI1>RM&v&@&^@+A$SymkQ264X*&^i9=yuY;$qdIW=#LIs>Kd!Eyoh6<;;oX&m*(8WXb=EifEoa#F z&E>*;sE$@C^=ZHtc|Z~+(vC97C^Y=@TE@B5PBO=&_r?g*B?Y!ZzeUeAod0K>8tOZi zd=moFxL3<)`nsYCTiTnUKB?k-0o5i+LFF4(h>0k#&9*YjYHssH`htQvXe}D^tnO*w z`Y=Rs8IY_a?UB2y5h^)5+k~FVK9de7Np(hK*;^>>(<%aB2NZlipYyx4eLdvj)8uVi zrDP2!SrOQ9sC>d^l)G!v)U!E=a{i*u>}tpA66AkiRXX%YCg>4IxhfMMno zqDEFshw+VR;WD);{

^?uEF<-&uR$?U2;#+;ci<*ZL2IxxS%D&$bcggEUD4aGenO(l|wvJKGN-=i1>&)+S1sZnqTB`v(`-V$#0+7{n89rh+ z2R`M6mO`qE9VC7#t>Fi@&a-ee^j^|v)#Ie~TEb_DzQJF?qgs$eMGPgQz^`V>PHo7e z_u(*`u+Kd|iSyK(dM3ve6N4oC2E`Ut~Fsq`a!JQGJ|9rR8 z*n;;keJehA;scuEfZ-y70@JtgB9S&Q&oCRBWDe{GeW=`{dD#~gr2PCKr#Yu!=O>#@ zN5OZ@ar#b`S-Kns7#l& zyRt*fBK2WMm)7;6v4gEW;8R|X^daW1onWh_g!h%JY~;^*cHBz0)ZwaJ?;Yl-iHj%D zjggSq)69O%D0xnpu^f4@Q#Q_6%ck(enPr5I$glvjiI9(Zq+N*`n4gQ!Iq&{Se0Zs% zb&)QXcyi}UF%?|*iBrVmM*^hAedLb4f`q>jnxSlb( zg2uR85w)Uur(1nY>A5!q;VD@!=xTCi{su170OXH)O!c^Vn*(c+OZ%tDMU${8(&Z=1 z_W$@g4O+v&o8kZxI3;cB|9SBnT!q~0zm`TIB2O=am&zZdO8PhzXV_HopL)+kTL&Dl z-tLKX!E)Wq4__@|`Qg#hg|B&db_a#z=BPh&xx*s8h*b$2#rZje`pRV)i_uqC4qZ)T z(fY`;71d-NxnI-XQtw{|SSa6WS_rL`J@-lM*2uNb`C}_1S|lvYG0JZWs4Dun8A)ri zOwKpADE~n&KjpJ6@#snJSxGbSTIi@GI-AscoHcuvN+7TM07vQ7>r>B(-}bf1z-7Bz zC%!pPf8~t9WZ`@!|M;qsbW`j+sx6&;W|rm z*Hk&UaO0=GS^ECnOtQ#uAn_!B^$rA%pmGK`eN4gl;ec)>860Lk2&N0KP`6z6`}{R_ z1wH;9UC|-;T@mLgu_jUBWJdqeAP9(+@=#DUvnavpAk&qHPJ>}=M#C@i%QRIN=EMPg^E4ZM$KT$x7&D{`HW44nN(Kn|? z#G?>Sea&zb>^H6DwWf^+z4(*_n(hQbLfjD&0xQk@a3R06nJ$ORK`?dTn#u+;6-JM| z`^S4G!+gOn0RYfpjj~rvE&JtFmKx18-@tY5QRsybG(S|FjWz8o>L?*B2XkT-8ijpH zeFuKf>CHTCdKV>r;y-NF%nUA}RT0X;uwtEKDKhX@i4894KwWs$r z6CxS+qQCK^winSYCl)d-e0P;T!Ta6iIc{zAiHIe|Yi4U_b0zQ=1jQkHt1IvKaU3>q z{vCFT_CoJ#Ts(kI{V0(}73|Xw9kd-w8nfUKzUe%niVkZQraYoi9t_mq6>o1Vc4kh1 zR{kor@U3VNBb&DNnNN`}80_mfdsrmiUyG^3xcNAtR2Rw$5(vHrCK4C_h@Tg5yLM`@ zGN?g)4Z;s^3qRj@L;ct_S1{10;kh2(RlV4Hdn|20jQ|#w>-{#{|7|$|S;)wjSP^JC zZ%}zlx;7iF5joCV0P%?h2k8BUJH107`EAfvA(Ml5FQm(@6>>WMSeHF4Bg^NJ*`!cJ zv*p=Sil`WJCY|Mxs5}h_)s@Te-;*a7gS$<8i3a#ekrZ&V7bKjR1T{3!Qfby7v$oW1 z#8|;av$&+?J{U+j%}eGk4)Bb5(7eH|%^~IhneXCwzE(auJPc&xxE))5@x|tt>g)|u z#YfnEVMZ;|uChit67Jp>!3snl5=u_`NdgKq!sV%+2BMH0+UsSHUf}E0#HzO71CGydwhi!2-4I;hiozS4ORtfx!B%IO{bJdOm1U5o27OVIrd z9!Q7QKWv>C4cO8SB+&^ddY|`=6cf~4&S>Q97DYl$#+15WI_2i$eVKp*R#$9C=uh&x zGRLi3#xq^uIUc%@5O~&Aq9nK%fitMAE;&?AFxj7){&m@#;0SecNX0E}6qTr`iZZ_> zTpZ8kfl5=gwS~y^*;`{cO``Ln`mXs@`3~p(9F0TuDdc@@=p-J_cNA@j?FV5jBAi6{ zpB=%c+RBoSx*~Q7$?B0R?QsPj6!Z1kzRi7?H19b`}Sd_ zT2jy2Qcm6f`^NLQ6NWB2E2DZN@Eb)%b%*ouJ(|nDxF?# z`-sPXzH}?Ng2hMdvP4@t83@miRxG$mh-LC?fSELcU+!+KN^ zFw2WItU7YXc1l2vzdvK|rIVr8o&9M3af`9Lni07fdj`F`X*W?-q%u_lZht_xCIfj_ zKLAbzUhCNvO*W*wt=}%W*+;x;WQf+=w$g?@3L^|AE;M8$qyCtKC?h_XA3{wC>+Hor zXEvEAu|P6E`E#9v(7`;y?LvCE988vmvE(L#gzfo+DT3j-u0t^AMkmiO42s_it>45C(xJPPG;KT%Y)S|l?lh~Et}^X4zQ-F zIi-o8K3Bdwk(*FTAP%t-pzu|mb$P{Ev?M{-$1Pk-K}N;BNrdRHme%(Sgvdcd5&z0b z;0M>hbqCvCEKx(+fk$YEzfNRNcb=J4S@qj5bi_H;vp#0GP4HcvLa4oo8X7?TJChfavs^s%OSpTYnLb-=ZHV&k z83*yFS-1@2qrQ1?3D6b^#L}^Ed{e%gbgvB>L zcJ+Wv*9p0>R~lhz{+T+SC{;Z($`oWV-g~o9+L<^r#zba@8h{ohqreO4PYGOvm}Z{OA7w%*av{ literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/connectwise/connectionsetup.webp b/static/images/auditor/10.8/addon/connectwise/connectionsetup.webp new file mode 100644 index 0000000000000000000000000000000000000000..2192d9287a270681dc6fec68fd6d55c0d344182b GIT binary patch literal 10562 zcmZv?WmFtMv#vY1LkR8`+$A^z4DJ?!1b4Rp!QI^lcXx;21a}Ya?(Q-t-#+`^eb2h5 z|8%d_T~%H0db+EBw5p7xBtJa>pdkTL{;teR&hl^U&;`hXV(^2mg#y}ggJr%@cIQ#v zlzCpEg`3-LyQm;C3-6Pazu8?s7kmFY(~m;>-Vd>8YLf=Hb~eQ4y` zU$m6!9|^BQtUEV-H+^!PTeFxtw;S=F!&xntC2;_eE{rHIsLIwdZ znZG^0Pbp(S^m55wUQS<>-W#rOyOmD6lX6zQ+273f$yy-#@9iI}=lW^D(y!Q0k4yF= zzLqz)Z<~+$gRzp{hrT2ya8ETitk;{X!cM~d?$fSu7Tx>4n;!liGdEK=Ih(#eA)U`h z5S$}~1IT>$_dA8p0tD+# z_=RkB(=-R{>jugAV0||~XI-Mb=|0Z6=bSim*fXvuF0lZ^%AQ z!~mqw&bc*`?F7)t>{cedcI=32I1lBaeXSb*dv=GZuN3;OX{U(lXHoz668v~=C~ccK zE{8vM_(WYdmn>$k9G;Fjgu#AL!?ZQ<>s0UMvQubTr47OQBdf?`3>B~BFuo=L`|&)G z%*4v@n7V0*#Jyy57ms$o73lGbq+vvN((Qf8AIiZ`*w(f|)=)>Vvc9~#9>DV;0)L=J zHS?jOlRw$9b*TQ5L(lvFOneLjHjCX_d7b`W|7U(^?{QFVsJS>aKm1iR&O>K_^0c9n ziWH1nmM0wFZ*i_gDy*;j^jXB!n#X-c9kN+TyVLk?*(UDqP}lU!ZYt4<9^ILs-$=-1 z5*aLiqgx2FRQp1i4QsN&G2u|w(A?|cRH4bX}As>#AX#1)P9X@uu z+sn5}MD|`U;@WF6oJD6AO;y1$n{Pz&#R4xbz?)-VlbGk?+GTa-7Hvt&^xMsJ;9_QK z2jMSww$1jDkoOHHBQK#FKX&W&7}iQtJe4@w1rt4=CAEqV`ui%JodP_NT+hU9N>j(h zu;WY}UCAF9<%=7`?q7*$uN|rOi>K$MFlc;%NmoWFi^@%AYQ9ihpCfdz)knqC)c+Is zzn3>km!UOb}N4ubuuga2@=_J_&N4 z+Z}Xp{S94sjY(7^CV4iSZeC(rYlpY~vS`Eux)o_foES7oaQ}%yiCSe+=XnIYT-L{+Il3v+3EMcw+&Dm_>}h$>9yg zCYQk$2y%VuBX4=#nq{@)J(O8(f?Lt!tRvPyEX*mF325xU6qEn2wDgLeuN%4gU4~hs z+uZ~L}_M3`F}Y49}g!3|FTT}KZE@LFhxPHRfRUH z*wk=J(M!dst;`+wkt2KR`Vm_2f5Z@y`$8LJUt+ykABo&Ni=PUS@qLCiXk=g=43>DB zF6}17!P}o-;4W+2McA$%{l9L6uKwGAJSOya5zS?d$IQDHcGq%0U1ZWvYscJwkgC1V zow2b9nipW0U*c_k{&D?$$LTI`(6LN88YQqB)|9B85@VP8jIOvnb!;hm6 zuH(~q^Q`&PVxH~CP+g%7H@_3c=*+rzVOm{e-?~PLhGsG9-OvzD@-@(!z$0(44f+cD z4+3ZQWtaR<#{f5sV}wElOS8kRhiL(CVG+RltT%Y3kaZ;N9~fLBq^*Q+zoF~7m>pr? zr*e;)p9KX+yUxc5T6c$S=EVG9E3~$8F0N;tosb{hj`{iEJUg7Thyyw|_!VPB^)5+h zrO0c3#UvKQX|xZ?%nUQG?-m~I{of2mXQ)#qmK)j~97U0!Dlx26uAAWm1y>1anAt}s zk4Ud;tt|Tt0(42xKfaT&5?n&B*{ii}j$R8$4x$or?%25lZf`#Z@sb9%(*s9?zQup* z348En^3aKB@hV7`wz~QJePM4V<0FRrx?8MKEhv%n_J(DmvJ$sDQQoo zAYqL%hEkdKCg_aLa@9Hqm@Jv~kezyIaKjM*46#iV8tp32CmS3fH#@F&v)Pk$QKzAH zzQl8p3AN4}EX_~x(FdA_(bvuXiUH0dJ0(_LRu2gK7XeY5HMbFpJh6{W-ose2w8s^_ zQb2}7FDC6=l}mC(J+77(#zn*y0E(b8#opc8l+X@nc@>2e=JH#k53mPAJ}k6{5josd zH8ndUhhBEhqIn$Ur#XWf#cvJB)t*9+9oIN8+A_ucQ98(YZz^X#j&k;&6u*oTSFe+; z(=NIMbR$;w4yXgpZ*jo>It=KT!Ea-PoiS?({7n{EG6^E*Rg2}^2V%rbMm;*8exB5` z^a%_t@f9G{QvvEs0vED!l#tVROO5hm*&P!k-g#m$ck(lF+Hzws*tJd4-rK+C08w6~ z33Sk{vhr+@jQuqeStY*@dGi=}sO4xB@80`Zno?Br?)C(VCcbNdr3d#IjM01$-n)Hu z?r)?tRXOZY=o_Pkz8#FM+7b#GM}HaL*fn?_gK9%3Td9I7LwHMj45M;HN>GeLJPwL4moq8L(rlw_I|%WiObLD4G8>J0Y2Hfl?b5U_V745G8JJM%)_66V$N=b3XIceo(Hug z+yWH%)tX&p7+Nd(?R>{Iow`YU=}J!ku@RHZ5FYf>j~-PqX|lN%Y!B|<2L9k{(&2Oo z=~#;gLsQVOC9A8UEliIpbj8mf?-_i$I4EXw&nWnoiRBMid-O~w--FAXPe+$13$up_ zGZ2EGXnO1Sq7-7G37i!))Vlii1=74|!%KU0&r$Mo{BS1vIm<7{){?I5(Vn5q1~Zb2 zW?o*ZM{nb1IFxh9ibdu(K~s;^3yB5PF=d}V5mG&d2jPpn_Ak^3hQPIUS${28H~kEC zDjZ8HZIgv9FUk_XoT5W%Ah)Vcvle|W@3l`%^|HWg`fW?DwK_N`y&#R3*WA@5fOgga z=^0g*sOM2wNYr^#D7q-Dy>yv_9QlDtsf_Q3fhICWT04G}7xsk1?VxG;0rT_~06V}g z^7d|)@DeGjSX1Pxh_yeRtqf(C`OAAXEo5pl(tekH!4dXLZwo{M@UJlp0$|h|iS%0$ z7==V4W`8FRAP3wTAO;xF0=Z}m`<(uOQge;~)?RpT+CY}RSO)O!kUh1e$FHixg*|A#rSy)G!d>hO!)7-ghb9{;@)Vc zK)&1yGjoQRBWreq2&l4iV_pfTpgOobS0uW(NPyg!mzTJU4|k-dPt zG4LmQJUeKpbW~z>>$3@YCvf9oo2d-(&Rr$L!J9+8i|O{ETu?RG_0sm*xak2kcbfwr z13!qcst5;F6-Q>ZI=jwF9a*(KoVYJV7*D$L1Kc`iC$Q3YyT3z6H9!;!^s*8X6oJo* zD23Zb$DSS}48uEm`VMp?LNTrk+GtgMX-xmR4iz)pJ6?R`+5>-DW84=(cHOfzp?irM z_Sws_B)^pKQEw4Jne8IS%1?S72y; z#>6LWhCE(+Qm_z5@fF5VI;{N&lu(MhGco@WfQC1zw z=cQmX`u&Y`mdkoLE0TZB@BN%80!u^`-C(W6^@7UzD?2Q0O`L?YDB^B{=aiC1%@FpZ zIQuJHJ{yhv1OO3470wEM3qU*?7#u z^}1oC(HtEdv)lk}*w1yq(u`YprEE~I(Ha2o`>Szdaejr4PpNw{%<^}HJ4n_jDpaQMRI9nblI1Plo6dsHc$D72Zjm(;r`wTc5WcjoX07qnDwO1i3;SgT=x74PiS=5S8zn~;IwzHQ{{ zYV+o9?&2jn@i@ATu^@m zO^R6HoJ@=U@XeBxakkZw|9jPlVn3=)HLH%8Bx#;d?a5h1MWkDRJe#)6ef`(y&U7qV z`^tELOj$Qlj`@#%PSMk66a=+WCCLh?VdwkFPP*S2SQtkqQb2EZxyMK{DFirEimN~S z0}}XrGRQ!s5!`6l?7!ZPXEK%`HuO7Pl0D#Gk}cm&~A}Z z$4B@FomlQM(Z6u%2(-Vrut$ZwM3|wWznmEbN#D;$O>zXU{r$RdVU%;a!Nf-K((I(< zU83kLKnPhz*y_G&>L|72d&6{Ghzln+zkC*PykDTPQox&%F2Lvf<$p@^ZMU7&Mx)Q(6uz=rbk>qZX})c1W%{S-C?)EopmWiuX6hTBwm0cIhztYkc(muL0;e%-NK_ zn=rcH)F5BQn0^`MkZg65jf40z9Qyq>3<+U1GZ9Z$ak~6Tz`3%I0jW?HEvy{ubZND0 zepl{yXGbIrMqSYh^+ZlXotly)`|uzdWwod7Dm1cU*gHX`lRmNw)@|A?`!9f;)8$77 zS^hh^0l0-PsfMe0F8Mp&79upeQftY;(}T{#nZT?;)2fa+B(h9s)1tCnN%6m{{cZBp zGH5Wu`3S|fDR>lNg_m`AV-dIRe(Rj;>%}nJb9yGYiDO4AVt#_bX$BcsP$Cm~T74z? zE{Mvl06M^)=mD(Gzp?~R9L~A17Wm-KRQ8UZc>3Dh`VHpIRMQ$?S_KEW_l6dN&4!|3 zXrnW{JK6(pss4M{a5c;_C8uFZ+gNCyN{(`u*~1~s@1{w2Y$Si|nvsyoMKH~Z8`*d0 zTJc^vBPbTiqRu=W@ZN&@5p^!h2n8? zNO?{d_9iPaJvENa?>XCSjJzLn4_I(N*M7>DIWma(3rH56Q2VFR~-zZ7UtGyoH)rb`7vCm%U;o zJVpaSAcE{U_w+eYdDTDadM=I22~2S4XFA3M=l#)9S|>SMxPXvr{{(UZ=>z|uR(!Si z!i!=H&u8zC2TbKn?}@m(!U2J{`b$)Ev_@e()T*L_)FmpQ9L~spaXjR5OlL|u#&LGlp0wL|$qbs!Qh7U~D z%)1RLqI$uTKPish^(h?RDJocWyU2JGtL?bDGIgUW&g|Yc5j!d3^{C((2u(m{;&swl zTY{Z(-U#sZ=A$B6zwF>5P01xv2&yFReX|;$+sMyGqxN!J+Vt<$V0AP^<=bO(9N!J0 zW;uO~Nsl8WW7aif^5}^zY6NT z{bKcd#i3L9hW@*M^^FSj<(dE8-%uGXk1$lB!9BCZ`~6gC^9gH2G&&+33>8(lv14% zR#l;if5zqubYwdVvkO*`V7U~E@`JFq5j#82-*s&-d`;Hmyw>Y0KieI#UgpHsmZle8 zIRu4ZiBH?2PM}f>Jp&?(TOgmLb*Wl=PWq}RTbDlZ&G(dC!y`8unXuF#H{bZmpLT6U@XEYKgL#5J>pDcLPZdD5yn5rl0$$jL%xa&CNn zjEfd$R(B182sHGToKFn53R$juH5Q}Nzj3$2+b-{DD(9uNkv0xdn*tCctGvcrf0Bue zuaWIMaX+c|))eI2-L0n4UfFS3n-7Sp6#L5MXY!ynB*a%1_Brm&^693T!w9%@9!Fol zR%8hPoGPWoAhNMa`uIce*%?Icxn#kT6x`o-0N^BttqB&U$(n}bl5ab>WyFVr7!ENeAi2eJsL zv3*OqPH5`Sutmg#HRej!f-MabPNtF?-3Kf>n3HY^fvyTHgqJ#|Wlb97E~cbesDqEi zw2bq#aZQt#S3-+;|thxTdjpNO-FtAXBk9S zbm!(OoJcI_R$E~M>+YvE9gmbbCSo2Jl+$Dcl(s}Qd2z2VZbjS2MlAzlSKs5zBMwUL zhMVg{7!|{kna$bm-QjI#*Q219;=BlgJV~EV_ToTzG%om8gw>C_PX_l1f9x4`gext5CF`;?_h=Ql5}Ez^we$|Fx6`OeJchnJiJZ|2mP(`L%N6 ziG(w<=nB;zN%$+XHg2A$i{*PaiS9a*oZ~LA!cknEznCA1(ALBJSJb&Sy$IYcbmS>* z%!PX0?FOB`5Ic1!F3U{pJdES@+GZinmRJZ5WxF7XfjjdzNRjMWiM(v&RUkLf^A1{$vEkgS8eD4rXj| z+{agv;fJW~L|S%sU74*iJYqnn>zhoA?r`?MG7gv5Xd=IRL z+Ek29S+4@=cVewGkp3ep*2D2=O?Mw3eOkW9I!ibJ?EcO>drI{q3?}~_(^6~nE*VzK zwG-a%Pj4muHZoH z*>5wF?c)rq(Y7oP9%zWHIGb(eiuvmZMdWGfI8z~%|DfTzTb0d*udTyFCRJx8p*AYQ zGlNAO&|c8OOi>6nF2?!>-`oS@BTsMOjq%4>OSJLmM32hL<4(!+3?cop6GY5ubW%QI zpOrxQWf(sa*JUF*unxzK(GYTwNPo>{ZyJZXw^Wlhkzh5dEeaOkw`3%^g~MXAsSrB1K062E}hGA$Q1 zI2?i^rwEL&vfAyyjQGy%0jJ2gKK-uk0A%70snsa4#$|Go=v>fHc{T;6_yb9ls7VPq2i~le^^%?+5@&ZHatkoAyfhLn_+Yy@HV% zj?bhcr5Bpn-9dG}i{9e*?f5&S6A_-WsT>A4uB)1~T9EvT+}72(xUst=UKh_Y6{dGQ zvf^O4%3SF(iqT~$G75$C_}?0+_FSFSzJRzJhDmr|pN36Bx6b#E0|+?4c&SrfV5HKW zXl%;q9yPHD1e(A>tqcbM0y%Vst+jwYL5$*SVaG^PSewE0a((5!$WLy}Tr=;Nm3u6u z7O;0A@dxh)k7>59PSx_HB4!(b?0`4wEmJC{rf3~=Rg+LXYJEovkFG|+O2bk{ahiwF zfp@hI|7!}Wysj+{AZ(*N?ZS!d>&09a6_J)pVX6zjY!tZLa@A^1H%eyy5lZ2avv5J3 z?2V{D^%C+GyN245n6c(Vz;r5I_>DB(E+Bwx>%?aqex`E-849jJ5T0OvcLWC@qJOP}etb+o zKaQfF3sl6HT^#rEUOH;pi(=9n4sj>EOlkmB)F=g=n^9#Gd#yWp@*VR$G_G1kR=D&u zjowduk>w2lAH`n28ZxOx{t+1NQ~|ReS6|KbaT`nf;LY$9cd$h{erOXx-bnk6!_jMj zl27qxzTuB!{c%b~pc8fmT1>kFjPk4SEr2DLFG6X&!_4F%(Li3uVY9FYVjhMwGT}M2 zwf^|kL9{K?pZ?+gA`OPSCHW3;MXw1cI_CMpWbRTl@=t`MmsM;$dqZ|UJK)Fnw``wl z6!9di4a+xHgqy*a!zu!V5|%g{w``qMVON@lwAp3hY}#@HmX4CSm-cb@sP+22lf5HS zYLMyEvMD`Qjxjgq{=l@!ewbdag;c{lGVcN6J<(Cr^1QpZhr^78y8sp72(9#FswhRjgycT z#4Yf2Hq|r-9h^P3oqColng%8}Se{a7?$CP)MBD$cUVG0Zn3~T;lNW=$M+)48E^D`8 zvKxIbC4W$8>lH4{8Juhf94&@j3bz00PJqQp%lgPUMLc550rxY`?efmWei3g8c?*LupMyDiZ zjcj*E9z#BL8Z*@fkcA+`jxOC%367K3`1vg%7kyZ$)qmTR-wx4YKvs~zkqrT8N9!|x zZbHWeG>8Ua*)P}))lafVLJYz?#D+ZP1nw53xHA;ewsYmmJQLdig zAf@|p6+K zLhdeP^HFfK_--OHz<}9W9Q%zXF@Usg8d19$|M~#^8`rgv)F6vcu6V<=FbS_E>m!=lcWm6klzb}`NI5z{?*uK;<8{i3>Luiw{U94rgw{;9;@*`T#_%4H*O$)|?3?5j=l<5qJ)N zY`Nr9+ZlW+CCN>QN3?Zve2-7ZmeSN9WDG>LRYNBq=7Xz}&KX(%Gb%o8t?Df(Ae{cond55 zWrcH!A1upk%T#A1TNQDUUx@x6u_l^bAhH}E^z-kXtvmZ*3vayBS8O*GgOEGBGwQwg zB(t4g=Mq_at09!jE<~fH^S`Pb^bq~&l`5h|!m~52iA5%j_+CrKk#4Na&rU?Lv=%=Q zCS_%!R#ASRCs0H__=ol%T?X`5sujx(-M4E9eSAjbE&Zk+XU5Wm+-aN6*))m2GK-qV zl$Yqpf;b#HiFJ7I!GgHJA5*9(;oDhbW8m0EX@2E1;9_e;Uc|lmrYX%4+nD#TG|=ri zcePJ`bto950WHR)$@x1Rr2|k6C=xwpVA`cz!l9pho1oKeF z`$iiIZ{f9-HvF~P-Jz|4;I`g20W{me^+Xq%GoqxUU?T40 zkE3JHz?;Vp3Yle48sDVaaFa^XLkJCFa;`c0x?^|Odm2PX@6sFFwtM&?+g`-d-;MdN zoFI1Bl$`84>?01yf#5w_Z+&6rXIWR~XWk%T99{>|eb68Kp#~vV$}GjEH7-|@u<=Cq zwf;rYIx)VD2SQ4IwVLd#p5G>&S$u*pW5He*3ff@3R@_%liFU-zrPRQ-xd#C_&l*&) zi~5x~9>Y4$JS-1_FWu`qxW%!br8Lfd`8VSB_dp(*%zXPElwC~35cG>aK4}7ho$ruC zO`fW*By*6>%l3Co9#c-#ZAjl#twlH9sc;pJuPwv372(2twKE&Tax5^2kjv(p`qG(j zl(Msg;|I>N7WjpcSi2~$_Up6_ZZgT4SL&vI;AholR+E##poEesKR@g8615lCp63y=8BdYgPNdC_a?XZ z1q95mNrPYs(5nCBGR~3j@SpY5e)hTLS|D|dfeVVnYc#ABmu95-w+M; zw3jgm_e5eE*AzBjd-)X?FBIXTZPrq-34e;Cl^PGaFJ^FCqo>Dg%hT7!*?aOYSeZbT z)}61GQwZe!nwm*9jsKj<64i--u0Yr&sK{OR6!<&Vx)Di7v4A*}#&EW}29<9OoOuMM zkA@sGc`-^;+Pdw!nmL$=_ z){KCk7Y$Cs$i99Y<7x;lz>;*y#hF95@nb?DfUCimIQ*NO;`v1GPa6-|Lf(=@e%JF6 z6eRPCbTe;mo%rKM2~!@S+QB!{4&Lzj}gM3gfa1*qTJ-T>&(M5B4URQma_4q4f<-!G!PQfF>`k zhcBOV9M#?4JR&d25@v!-07p&>u3yA?B7!oy5vy&Axy?`8CYlL3R==b_{dlvz!9!O2 z3*#pBy@0&@O_}907IBoJ@;lmM7BWU$#&8}rez8mxRj-Tn1LXCQCWFpc|wsA zn|&-nN|b%b)r&V!mE4d8o$}>}IypOG$}uyZI(TeS^f)WoDUrsYM6IWo1`G zX=m=?G70SaLmJnUF-`h|$c>RypGyQmT$NdgCMRpWy^yHgYp!P+o*IV4%4Yr`huamq zIJ_nnva+C_*qYqFEq>6#PEm*HK~Kq)C2^FBK)zveSICybDcIL{MH;o*f_M&%XRKU?w1C5AX~SuN7;ucmZKvE}>EzyDw~*ne_*C zEJXVz(b@0tM23y;kXMy`bpDUyC!ak&7oM6{vVJ-}uj9w&!Qsd6BUhGHToqokckoZ2 z+w2TJw(q&Ol&|@(>969K>Fw|DZ-ee7pYpHX_qFfhcb6-<54tZK`R}>zmapCS=I@Tr z(Pxb>y3gawm|9X?UiqHUWjL&7n_Uky6&Y;rjLMQzSeJ>&w{VT`^rb~=P%5U?>9Nd z@A%Ku50_W?&Fjl;E)BpcrvOT=wzaM{nC+Z>wQn|yCATIk3U$d07{9ep44Z#cw9JT#HR{dL% zPgA=82LfNJeIYKzFlONLVLPOCsHMz@HcwoN7TrtAEjqJx`$pM+AS)*kB|6=5TXn&X zf4r1pOXT<7`TDFH1Zk)~kz=Md6?}0Xy4%1-G`K}e`|GlL` ztcZT1<)WD#`sz$YI}peZE}{I4t&{*1(0ps}pLm0%Q`IKkAt@R2JC@|#eV@VdHbxTa zs#%n3-4Hg3^CxSKMPQ8{=bp@k=mOGM0~1}M5|okcD!40yr3QMO1$z)2#lNY!KY*Rx zNTfBl*%FOKZZ6@XeF~Hm4EdP)6=rj2Jq3)#fglM$_kOsB9Ql1{W}H2#ow&J8@`Ck6 ze9*0!fITrM1)1*^dfb!9N9nR6k!|<57%J=#Hk|!eXG(26&#ahEwsL`gO2*jy3v?oEMyC;yrze5pZN{{kU zTod)59&GZm&#uV$W1XCnH?r$<*1dM$N=EuJL^K(x!Y98ZH8xhsf#;m0&z0ZX+PNlO z-9;c+c+b@fYx+iK6k$ifRb&dP?&Qw*=Y}&&N?^v0k3YF;C!5Ohmk*jZ+nOo-KnGi2 zZ-S^7PnF~0a0{7zLlKG}vuB`BZuy7Bec2^8Zp2Ce+Og@o8lp=so}2CII;U8Yei_BD zDuf}-Ho;)Pf32Nr8;@N|D(uvcTZ%8NDn43Hqa1Bm?u@!e09_~(gm~|5#XA@^0UMX~H z<+04sp#TUp(pedcmupq|3!l4QPL{sYcVTkyOjKkozL`s;k#?SdS2<=`F(SkD z;q94UgSE(kgWoueDUGHmglM~qiwX6?3nnHrNo#RJn7EwG)@x#gXj-&5ScCWO+I2_{ zKVR$2{FQ;}QoUA6TrKg<}isOxqQC;FKzcr(HAtlI;p3~JsXZS`MsrZj5PEbG7_7Q z3-eV-!gyQF2g&=27nWw6AEVgle{b^g@hHqw>BpbOqxx~wFL+21w}&vn{~}QJ01EBd zVu&*Iuai?BC{K%nf$yk&4Z|KVS0GdV5;HVvXhhyMo;`ERXvjq0=q(WTrXNXtzWZRt z)>&3&o|u?6eC)@#`{-3Dl`_Wep4W-h_VjA{<%nM)zT|mjbL;r%dfeFK4pTRJLSD&O zlnzcW^jN3&{kb9xmcRAH#AwDSYJ8ZP|C*L|p@#u^cKbLh#h;Qn77v=y^TZVobm~=A zQHx|(;o+2)H)EG_0?`>4g{y%pOLPpFrXA4j@&~7Gp2&$r1^hKOh9nggwUZ-^Z`~Z! z8=IPGO^|mjzV7g1%@5~jYO6(|Yy-+{tZILDKs0eD9X4IXdrVluxzPrg)jb4^wynbl zcf?2$4Tau*=C`jNTFrvMvs>p(cfZ&7^+q}Y0y4SLEZsB4ob-Fyrr+Ae5Whn9d zS1u)G^=vNO0dqgAX*l(Dy5!jU{)y+`joaZUG7264-kG6NJ+wL@iY4D92H+DJC>XR+ z*M@D&ve4!aB`v*<*xkl_WEZEuYWYVD$`+NXbvA(v(DVDq02L8LRCtl6AcxSwTZoKg@E-*i8Ww<$ zg7=?tk}f`Xw=SecXqbELjNHVG<(kMvs4lK&z2vLc6=T4EqEAWbi}Ioh85W#;ryGGL z1DlJ)Y<2-+KT@A5HC^w?uXuhN@gO@^e;e`Xy*8PlBm)Xx2m0i6Fr*4_~RZKX=qxf_P{sMxH?Pxr>Xlw8tOa1%S*R;yFwb(^4pa zKmZYj43iqfT;wy8Dtj-o#Li?Rv-)YcXuObCP5fb40GH`6mIHLpb++}KXr)aSfbudo5lT(;T0KHMP#$S`ao+=Ys;4+o1pMg4 zstjTO1>MW3?a^N^RuL@FozWUAD=T2tN@DpZjH2IwOniE+R@)+!^o_dKp^||2BuA8h zHV$cRlgYjaW)LKH!j8NvyUsEY4VUL1tE750sxMD$toA{VJ`)_aaJ`Q!@4@leq4Opn zZ219JM4<#=92^{6vZrTvUC3J|e>=ojc@4EC^hcJJW&poACo#UeQMz05m$U{GFrA1= zTNh@S&clDU21O=89=W@I2$k3WZNyUaH#-Qm#0)IF{}J?G3N>uNPG@M@8$nT4~jYC(r#r`{z4JHoBqOGc_u z4jHmITQ+chqo1ktsO-K4@rxa7k4NeHC-U!k!JEp|dCP6}BAg`^bAK4tk)(jf+}|9X zqn}oXkn(PY#^WfKKmqY#(Sc$_mJJy)6QnqxMgFNcWU-E)HID)DA#6YojavGyDAzXT zw1$#?ps!Q}gwOpWTK==pS{D;u;~bq``gzXGq>*2dHZy5_a$rtx3Z77i` zVmH;Id{MC^276chAUzd7Wso+ml{%EX;|e!E6LMZ6%pNqYi=AE!2;8K=A*F~+rtmD8 zCb_%uU(*;8hxh~dXK)7Vf0*_EJ#^aziMX$&0&H^DIct#{dq7{9bX=pKO2%+0awLCg zONfD;g~9E;uKd`zjri+;Z~6)5uQdJ>jewS@ujJPS;e&B$*D;Opss78}v*-NA4`5e* zNK|5r_|-a!-x$JKLjN}W|J|w)QosH9FE{y5JEc1SUtbQs0RI<2eE7FIBngKIawIAr zbaXkM0AHZ}h}Om}FFQb1rs&Vaj{Dl!bSa29lL$9k@E+CBRPxq76GtHPlURw6-dNH#%vko=_Kvo!Wr4Bz>M<}Yoei}G7LNptQh^3NGA3^Fak}%cA z{;X474+Fh#myHXGD_Q1>;T72P_&PFyTd)wIXH%zY8mD_(mBbxW^S1qkiQjY?Yp^!!K#Zb0|ZHb*`L9=JB#TFrG-z2boV5`$lucn)@((DLB;5RaJRMpJU9&%d1lOxZw+!bPnLKL@E~Y zTB~d(fWJIN^njpALc=jlL@QtFUh&V@#{h9Er{nGV1mAqMQMHTiM1Wf8mMe)7q|1EQ zVS1(Tp1_;upD+0~%R3K*h^5DkA)432tzjRou-@|tr?%t2kPP*L_4;~Mp`!Ip@eXcD z*NUKs#0L*SmmIZy=XVE{O%xH~|Hx8MAIHp~iGo)t%-xMefEtTVv8n@rg}v0kxLET- zZgE8qab3kUf)V~qs8a(2#YKu)LjQ$JcYdX8lWGUDj;$uF*fSNcaPam62ZqBe8ahFv zVljH~El#99DZ)TSG``$QuTQLPD?tJn5)&G@30ocAxT~s8?&fr z`?Q(F@HG2A)#Hx3wOiLw)I@tg5tr`W)y!Q&L6~)7z1@uf%+jvk@M#?-+&_q(Lvml; zR?1Ub`zY1+e1su(&kiIm{-?}eF<|S#8w90ywe?cROp+sp-|&p zxtC#n1V%@z_bgmnZ9dO`mI?q0_Lh4E*OZ%1N!cjVENZslBwq^7aas|JX(ilW$~z@& zir1g3+qC0hc^!u%7LHvBl8Vx_SO08ylX%VuTa&Z{atb?0nC$^^f*2-adh>~UrP#+1 ziXb{^ioi(+&w(^fk!kT!F7Xq@M589PK{Wm7Mha4ti=6-JYi;$-&fTM`^&2-cY?Lqf z!WV#O!e%fkY6zf<3q317*9iD^FYZZjlBvpTAh-n60m~@vhAcNqhe)=`GfCbI<$b?u z*qpS`*fH2925~HRN6@EBIQ=XG)7Xy(gBdXp)0(@8D&)^hANYz)593smj{E#;ZUM<@h^}VZXrkd#{6H zxz#W>9WkHGhtTFvutV;wnsy#kFE&q_KUX7^1>IX+_#j79h3Qj!H!bD3^8RhMgx5Xj zoIDu=We!(eHz8%9h{@JalVNSUwQ2p0DxEbxfpwTYtJdR@)HmLpM*Jz<-91?i$pvoj zYRIY(rjca?W4Z06!c1l zF-XNelKL&(9}OL(z13T#AYrGm zjBkk1>H++>4cnH2l8|V-Jm!s3ml6MmK70F(-(;WEmk~-(n3GM;kqM^Ks=|)ouJFh1 z`ctGLDXj@Q4}T1NX)g9n10trD8~V%2%|TPs&L|!q1!WjO-o>PlF?_;qm=F>gX|9R( z?y4=s2n`F1(bqxNEk3AetSUCclyrVyhtaB1~n1+1?s5({l%S?5U^x zwB1N_(KO~~5CagWtjmSacH~&tJf>fK`1es5D|vt&wTb2oi&uG$mHG34OT3jWFsT2z z>9>>?UCs|^|97^*^IB`9HhWcHR%PW>t)0k=0W=y?bxTCoUDLcF!^@~MfUiDX$|l#5 z#und^UP^%#lp%3e#@GOrNz7)cDbm`5nafSoa=j@cjp9dP1tZs~%bw$Aj`@~b!0*6k zZccZZ=UbB(mr?M7$93{2N>?^lgbrRx;w+&+4!@&_H0!j50W+!j%IENu-jhXqw* zDfOQplwkNM(2gey9(X1WDzHd$g75JoO9KKdgRjoaEhXFVK9;1r7tm6!)gm@eSLESq z!$O@vH=KOA;jtObBT6I_s%h5NSk+1ySTyz~IIYa7JPoL)3lF|13;Dr&1%k*kLCUPW zu?x4g9Ac6fIzs`1`|jUF$!`!63LKH&a3&bKB~ihw*U%^pb#8| zgQqg}l<;mpN9P_dE+9Vwv37EH*80z?5IYMoy~((4x*Jt7Zb(s%H|FO{muE`dK+c3y z9&{B^Aw5AXV&m-MqWxik?jv!me{PJSwDjg`#(J+8d-f4PDAGqi4t-I~*oJ?sp`x5w zFaj8NlPphog4YQK=9ARhq$tBsebz&`TFilDf{X0~W}Z$Dq3V>=2@mnzr3$igw9C;z~iQlEnOw$3tL;r}pi+FxtSw*KhE5Atp3fyb6f8G&~k zaogi6Ng-nbM0-O|czulnJC{&au+jk&L>gMzX^!?sGeibAHQQE!{n?IWV^Z~R@8H1b zt)?zWvQY`Q-(NV2l>08XsAlN@S7#z}=bRfj%y>>ws_{mW5X+Ge-~j8iWWD9U185!u z|83ZR+8O^@I{NBO<9Sg?lXf6|)xx}3-tUPnJ~+Qs)UbT}_(&MLl0-qI(Ge3u3fstk zixWa4R2nBO+e?`x??R$8xh)5Kgqs~oPyWCNX&V-E&j%te>_rHl$RfYI>~Q=aY5*0& z9Y{@Uujgp?f3xG807M|w2nT&lSQ6aM=?KWs$d@>gEqJltJYRBm;QCu#CQ2zls6k5w z+&8a#1-wdw7d)qi9F6yP8qbxgrSyfM@3`*3PP&F^tY=HC1MsnB74_$8E%FXsT%{F( zh5TxiwcT!EKqwEu%pE@BB zu-0yf*eZxeP-X;TZR2b!z&(xI+?L{fE3pt+N${YtVis-16jwcMn>o@!{Qo{gxx!MO z%w}O9gj_Pf&{BhbY$ZsN9P6=+;f4^17A9BWqM~zSZOB+3k)0Tfiv8SH#wjx2gpZYJ z9fh&L?|ya6h|}$DX`3MA)B&4}T4LV_Lb<4`YZr~w+QfDaS0lFFzlw0LkHBIIC|4RWp9RDvL zD*FIGb<(RSB-P7nHK4YNhITz6Fva&nTbwZ_pw<;9ixxJB!W6h$F4~ej9ZoJPvHoNQ zRUs1o)R9_Gj`LWE7laDt7hM)pQyKqf6|=XLAb|FtaqEGH1^8zAdhq_BMWdE!3Xknl zS+dw%=C%iM=y^8~Foq@}#;{=9Eoqm&+wJD)U(s<~+@;R%=+q@uNjUs4u(pYvWsH+Mb>L#KS zg|UZ7QwC#xz%E(8rAv8DCPs&jjt#C%_p}AE>wHlr*&==6{qMNqa|C{D+ow|wfD4BZ zH1NOdOY$5tQ0Sy6g14xqRD775 z7v!hidJqmRR#$frfRdIU`#cwciq;tp4H$XQx8>m%a6z084PCGRoV6DtBDv|4H>}QO zhE)gDbc>Y&31~YK56mR)L@cnr-t-gO)0DtD8i1oKnLCaOQmO7R^C8tV=;aXc7M^po z3Rny%=TAgk62b`f<;|mv`wgU-Qz+dLKIg8on)eSz0>*3p%G&}F8+qOf(2V=Y?aEDj z03hukQ7SNkQ|*F=w+s>$-IAnz;YyvoqA!k{5N@iN=A{6^chhn9s~CyYvrtgeWHixx z1=r~Beq_wmZe|1K#yNJAbc2178XSEO+O-r-j}^4F!-#7tBp*U^<;_FPYPbk4;Z*b* z6*Po&w8n%YLVz>+f?84%iI$A9d1Al?Gi1EdK$e681Fr^#KtemnH^&l$kYZ<;6Ed3f z6t?>~QjMV*9R9)auZ!h)hZcqZVV%w5EUn5RElaCkKl45ZYGafO_~HT)ZRXp3uXQzP z2rJjsmES!8I=$K+c5t$aVuA9putxypcCchWrF^o310QiNw-!e@{cosO@JX}tCXFqR zfh_y2n6pVsk~z}&omZ=0U>95n;~*hZYCKmpMg!S$XwK`}Uza)|2ArhpZrF^;?UtBG zWXz%j4$zQ-z9&cGB@ekBJPqQ=%$*mBQr|t>f{)NmS8s3n+1`8nOy~<6*lcxxmGKH7 zFf*2Cwm1C_-mCBos7lBU*BftM2;eZ`@z&n3aR%#FE}F<8($bfQAyuC*5T4+?R%q9r zfxwjacV>x_wHgYNBjPxZUSc5d5M;PikhH~gMPBk+djtio#aKG=-SLyn#>RRRDpf%J`#+w~UDqlhdCl&}T>VHJgB*;mRw(4LxA}RyoFWjff5;tDh;s6q8@ps?iTXWBPZ*YkB1_n}&>N2JB@fjV zZ0$r!3HAsZrU`=aVN+Ka54$S#tGPpcb(cal6vv+(FTN>x3um{J>VT(fEZG3+OhPC!b^b5DEjeLkrHNWNV_RpB!l_RF`2{#^9sQ1#WmJ; z@QgOhth1zmtrFuh$_u+XgdbRHcW(nMq6^od2*4iyQ5?eQij5S0nfu{3AuMh+>~f+R>*FiueucGFhNI3|L;!E?oQ<}Rz|odWdq1{pt_`^+v=nr8$jT=kMHOjXbXPCta z6vXwWyu-t?J2@L{Iq<09tBb>$>dn#6!QUKKC@_kbIif#kSHjD|!A7$D`T^>UKui5G zE8)g?VQ$xL!DbC2_h;RIo(DKCOx~1&2jZridUC7IGL8W_6TJ)B4C|S$DmG}4E2hB5 z)moOw%=WdyZdkfHX0nj=04(HnIZff>7eO95#Gg07L-9&W%l&?}Mh-O$#vf0-Rf&Xm z()PpY2c_v{J||NFzR1RBGpjts1V%u?Qjbkv&Q z`gyzvSKpZG5WERdaFRQA?yV^LfLT$WcHIhy+NzkSv(xG3yv@-0JJL{ixIRKa;wFGq zvX&!4o8#;9zH2cEo>@8%75c0fwv7&Kug>G88!?o)rV11G8~Zo}&^z!I!gisc3@xL# zXt7p+^V)lTK0k&%ZN;ua6BtX0ZWCS4CS0 zmvoJ6Dg$TDVr~1o0+Z&hR5uXz^lGn#!)T1pa&D0O})LVuyX=8*FK}534I4e2$J(9CizVN&Y`q)3cy73Q9#GM<+wny%o&hpg} zff1>UMO?v=E%;0)hCm@HwG4Gg*fl7goVa8O1fk=RT*5TCf}`*y^TG>0o2Fj#^Ig0R zX7B9ZdmnVi?jTAb5vHhXSmejy4?QpkZoEhm2%X}uX8@C7MbmXiB?q_TFP|OT3PE__ z*4-0yjpBcz(%brw@pN%4t!=J7(>4RPerFwCs*_50fpw80u$lIAuhEj zE0rZJWztjNLNxaB&Y_}CVI9O59WQV!&~umt2Z-T*OE_f`N)S5sCD=0H4AEg;C`6YT z6J+15)yV&P=tEUV!@s2FS{I`r?}HSl$xjJ5x=bz5ga^sqC*PYQ5pn#Ap)PZagY^ek z5<}aej=s|iP|pDg3{XFB!n)Jk4ihOKfSGo>RuAoMPK!mX&YKt^xT&)>@`K}&3a>-$ zZ7Weqi%qm(ok(FYLO&G9yx;;|;Cf|DGx?xS>!PN(@h-wq zw}@7G`B=dgY?3weR@|8YYy32plh`ufVym7s#jhy8PYDIqN74t(;Ri95r||LJ;P=6 z&)YGuiSHkq$8P+D&jeTNdOV7o_eEHf!dCqf-{I6KAcwfl6-$jL&u}Mp@7~Yyt_Yp$ z-kAQpw`8>|R<^E{o3aTyH$Q2FZHvP_eHDqkwp9cXxr!S+Kg(^?V*Dzy0O%BMdFAKY zPgv?A;GIl8iD*)F=bn?KN=`gan#P<}W<*(iseI?EVS5ny_)-D%drwGHcc*kNI1S7=YUXd=) zB82+oLgxmnzss%BG3IaAHzirKtK-lK8sp=?|FV=+ts8}``AQc^`Y_%tk9`3lwShabcTLbgZ%BzJZ(Sa*|ojR?*53RN?1O z25))&xBVL(iRwb192do{D!8+wNOS2g$OSUR=k=`dd;> z&>S=X7tv9FBY{pjX3Ccnt1D+9BQ{R_n77iG4J5k;DU!%6EIe$u7;P%QS{WQ-3Azqc zUc1)XBzEtYV(N*m`soz7no=qZdIX$sFGx<=YL^gy=8I4K$_@<^pnTT_LR1tTBA$~U z2~#~`G|zDjGgDJPwW8=;q>t_AGq`pIb~Qs|Bxuw8WC>3%zAi^;0$|j3@+ceRmlZu4 zNHl`Ul>(tV_^dLaZ5aB;g@5n#;hw$?9l~1A=2^v<<3J;z%F*rHr z9kb4mHPto@7dDZ!8k`&UBg^{rxbOSyO)avnUEk&h9?{&TF4ptZ5OkbRx{Fdd-8WJm zXQCc1+&Ntfb_HOJkTZ9({SqiONg0L!yXFW^PeQJI^zT9{J8eU#!T0J)HyT9*3Ulkb(mi&^oyyt zmrTIVVmW}z*k>&SQmS`p@#i?8r2v@8R76>^d3Nuq(`b}INXFeLdxrUVo=>|J5D%)! ziYI5xb~KN^aVuY=6hS}OXlgPdX!l5VGrI8mk4J+q*u%53zZ*m)-M zuIxtw_p8)y{90CZgTzKw-16FyX&+dfgGC?e(Xr_UizPl2DEhOhCxhEAb{Mv z)649{@VLLgAUzpuCLn4GIuyvAgVPl`OCgq6{UYYfS~;OWX8W@>$eI1}Adc0q7=g=o;Mq*f1%=&6+-F(tw1C5)JlQK|?9T>I#? zqh=Vj$v(6Qio!-L?Kn<$LX z^#t#(oA}Yb^Lefy*sxwKWW?q*EJ6z^*!nprHBKDT0q^IB^we~nun?y38s_K;|g z_YOXEHUuI@^DdtmV0Yi){_Ld%fcv}q`vp$S;4Jw7NE!OQH{E45*moTtcb#Jd9Zx1b zhq3+&C0a$CN~|o==#md*cwVewGb|^_o^e2(Kkv$hNoL@LE1Ej-oino-As2KMl53#y zm?J2rMqO|-iZJ3?3vJ_A<@^2OTp)Ltx5b2a6{0=0QmDXLpgG*yanDFl0JETaG@${Z zcSoL-Xkw?H3TAE+I9q;{2~DoW@9;1W4RV00%P;@x`u&+3Yzs%0ohIHbv2OSAvH%+~AeZ*{)neniPcxN#F{@&wK?w z|M!4TKSmuj&cURJd3oC=c1yV*OX`3*t}^)B!ogX4lq?)?kuA4jzmb%y8*_({`JLd! zP|~0ms=Ald-1y+eWLf5XcJ4f!ke>zfq1MmLoNm!Wff4lg%+S=dkf=~dNt7%rw?G*> zEQhDpRB`DJtrWQw90kZmcYAM+0ywPKTQFb5uB8UTy1gKkU1J`-7mDMJtF1&qe?dTh zViNA5d>RZoh0MAK)$Ppl4s=l6VvOi_g^-kSFH_*}YAXK!jLpGNPg|W9HhZsp&#=ej>V%31y(jIqoNv8|Z>4Bp zS|U7PdQpp)EUEk+@h!Ombc!k_fq32VVx4|4@q1>BKojw%$IjQVE8(^DWs*aczx&A-!2trBHCw_54ZjB%BIsQ0*;KPxz_nB@S$7+ z&QQKOnWmxqC4sNuNyL)`%CEpHN%=5x2O7R}BV_}T=3T^rgjxqxe}3rvW}IMUm?jWa zzd<~d4&IaWS&(=({aFVwqS?&6SM)>lnIw(67}dvMNpZ;2+=<3UiVZ@hT6<3O;Vl&k zNb*>}*)2$uCiXRR;`M>udS*kBIH$1|@)V*s(z1iBM)TTRL>NRf2d#mt` za4RKd#}Z_o7LhQKNnZ~me%&XfjeR+@Yk~$4*f0ymGM&>*m)$A5WU$%Q#`ttzLrpJJ z?jhvrNhR|+et=0gA=lopSfhA0ifR<436vrhljNZ2jS|Eo@m#OXc93<5kNNuBXaiK1 zNLNr*o0`K$*61w>NrN+-fd6z3VqScvvGyb=y?-R)+god6hqT?fyL!Ith$(Lk>9K$4 zbWul|e@ZiJ8_`ix>^-8v7?p4Xx0VGK>SnOFWuqGH^MO+iw8)B$B$?iRNMHZ>v=+y>NMMhP;Bo5UzhI!M@ zgdmL6lVlak;b-|qwSBT>b;BF-s^N$5f+F`Q!^eO(#D16X;?V@3eH~N)=+^X9dx{bv z70v{JMAK1LFYrr;_m&^pot+)8Om5kICL%CgW(K~eQ#5!2oD zX})t7K7X+?C9}-U5F8mx-#zcPkA}ft(o>Ry-hb(a&=D&4%5%cmv0rh`vASJ}=wS)C zcYWCBb%^2s757h}!|z8vmlmch!U&nlT&?aHSKoGiz|k5{8l#J-OI~}8j#0-nRctN3 zJbP3xbgXy{c^B%M7Q4rA_uGw`gtZbBD7mW!pi8HTN0qWAEIjenl1OL4_srI}$G+{4;>^${n5MZ6y>4}TxmhQ-} z$ZZrHdW2fMf}rEP7f+(JOn7Zm3+}wvsqW#=vlYK2TF(GKk{s9GN~T!IOd9k3I;IEV zUg}Q)U26p+d}+piTPy3#UJOTf<5d}f#`H;n9#a|sIe#mnDkbeh*F1~wtW@Z|JIj-u zT1(ayVMiv0kbRquEAE@4AQUqOyJ&e`;6EOl=h+Z!U|DegcN7Pq5jFdTT)tA=$o;^> z!J_JBW0E9acQJlll{O~s16&oHl+S^aWMR8}Ie$ed(k|O?MM6@%uuEAM^JhiV(UV{R zc0K0VYBn$B^MFqJ!zOsDQxOnTuaY~THe_0-U54oMM28IfTtu7(cW8cKyk?tdk(NtUt&w}< zJ1*fHTaZe@P%vVUg#K9=x{b?oAA{RKAGKywAyUl@dm^PqxZvzuTol-{YfnVH|gvA_*ljj8e4lUG%uM)b`AIIr@Kpy z-Hx!bzqn4Z1s^IiQ=~$ga+)G@L@<|Mwk2a+-ER1_X1cdH&ANm(dEBSr3!YFojRgJ6 zo_o{Be~3=AFZ=D7&=%KKnfNGeRHVr`7K)oAvUh2dhiYZ%Ki!29BfKV04iOByfmHK8 zQA&g%ym9|d7YBxf41Nsy@gq562cU57s}+N199=BXkiTiTAXOsNHDpvMKHdSKVF2gkUJs7?Lw2f z4PA&MWuvV(*z$+dC3sb-r%?JYuRlG!O3Z(ru@k#5V!>@(uos#YN*h~gqF$_i}1oz-m7grXPg`wdkmt7#9JiiRA@Gl znKI(tj(YfhAL?qYc4d_`89G;&r|3MD25{yzn-54PbjD`Jap!0h@a`Pln``i+Rnv)I z(U8Xcrhjw8_%+hpu#Y(Pi@^2T)cqL6f|gHA@uo`Pfhk1$rK*Tg?f1vH&dH7cy+6Ly zjU!!tBV;bAA}X%@2^6V)uMgV-KPbbL7K+}xG!E!8e^+sXIh!l)RFt;Eo9WSdEpn)3UBSL@`IZ9$i17B6Kx{6IQb^R(3luc>hg{sgD(OqQ_Spd7! zf;r6L?pp=|;aD*j9k!c&pnFwxivth|l25%Sfd*rRzD1Rfic{8Mjaa|HUGdlF80hUw ze|TDrH&g{EKk67aJ0hxGEBXcLiHEHb0Z|W5`=T-Hf;^T)Fv|}BJY(v6ZRSI&MBN>f zz&04f^U&F9&`!(iguroEi~GKU0i-ORc6m=j z8@?~U96775?k~sXj@ffcFnKg$f^`reszp#qC2htXOArbDxrkOC8Mb4H1Y@sB-Ppit zyO=BEE~-yA5BV|Tq$e!+i6V%00>iXdcU1yWdicC&czJeLW-{axcdCDpvrkTE^e4eZ z`#Jy~AhiSH4?nEL>7#R{-NK7ybj>$VIHlk=RSFSd-~KwJ*)J77>j2r`ae_rg39dGb<2nWof`9@SUp)UHaQ9T z^PibfPMdwD`XbRIAxtZKPtJ2v<3_hG*M#dX#t!0BovyMUwp)?Bi@mXb{c8^Z?bD+B zP)rU4;#b2z-wMRB@FFB2)qo=Uw5+bO-V6CLV`Bz*K2SmyJO2WehZ@w7$SgX*Cw%0S za$*+jKLI1-3qv>8@u{e~^TtWcuqgQMJ$O1Jy9yFTZC;o<-=jkS!|xr~2!gQOsb(ZB znjKorg4h4{KhUQSVEcAoM#M=`&Dnl=wTU<)aBwQ)f>S%fQo!&3dRw@Mao6&S%Q?g^ zCHzdtDMZuu;7S(W%)#jZ5C&)lH7+XNlQCp*r6unVG;V>h%8n(HW}E-PD^7wy*U31D zdVA27U2o4{G*hBqmhTg`q9wE;ZdDKgveW{Zb{b$B-W8Z$Ni4he(+HR|yLsuaZ z<6(p80d9Gp%mTc8eV6~%+5knZ*jnXKcu1R}uH?VaCXxd|mqzZj>;5T8sznmh2Qi zF7|~G$g8NY?_eC4xtw8U{5z5WHfTW&ngBDQ>f$aLe|NrHJsz;?>O6BsZI!O#zYVhQ zlsxAL-V{hsC7S?7^27drbSJGR@w=taAM?9r}OMR#cEc;H= zc`JBOs553ZZkFY3mYmhZk^_sNe4XSWnG@x(c_W?o^0V5F0{+xx&L)(o-af>a(_;=$ zZnKFbvR_;u`*3kgI>=78dtQ&zUXYXgvzp$={xn4>Sz*5O-pMY=)J03a-Pn=`spKP3 zP08`kXT7Rmw;$R^Vx12V1!!CXc}!;qG>^7muX7fXxpPj&^M3uacV)L(&f-daQ( zRAh;8Z%CwDYX(z5MutjjVeo^&hrgTd78}2JK*_-X(k5r6Sd4o}e?1TgV9?Tn0-cby zzq3HWgv}6?!@zg%Nf^`?z&GIf>S|XpVa5tIy~v$1dU0y#KZ*{|Tew6$C1AiS?D#@u}ua&4IE@uinTgbiMXiKbq7?v!@R0OK|&;y*y7~`LR7= zO&XEZZTsTZj-uj zfky`l4~eH&<_51t+guH5SdGR%@SV5*qWa6MrAtS-+V_g28Qw0c!Y=wJS9KGQFs{{a z-Yzj-R&5s-v+N3?is$Fpi}^t@WcP7&Bzpox?h?I~-ad#cM`EITEXMUZ84XgKjZ2nQ z+rX(NwVmhc>Q2DQ>hXUy0R-&!ipUr;S%0bO%P;xfH; z?cW2uk#4%TH3#~QU!z3*!s6-)E>4E-CqyTg8%0=kxGN2qNh$Vf4KcSWz5nmr3ZoT0 z{hLa?PF^4J1-gAJ*hYo09#wsi<@rlLDRLr<8oaPhmPgxnO=r5Otl%ZDUq~o0#6<{9 zp2M9@(h$u&-9{PvLeu=ii80RZZu|H0d7-l=-6RdRb@orj9#F6Wn>B6ln`H^2HmS8G zA2G{n)-;qhT~UrSWhahZxzS7$kh8{F{?RXQrUA;ueius>6pQ8XM_cz?6@AUfkkaAVblBWyA)eV}d4Y`wn?N{k5-6CU}#gW81Ae_aK6j)dci{4WrBIT?r_!l_l*Lfxq+<5LVWI!q)r*Dc5KT34=5cq|p+ zl~;$%uDaR=!h_@OQv>ZSW_*}zHEbv1vPBWStJpRN>3-+}unsbS8%_{oJ~rj`Hv3RC zx!~xRU|Uc^Up{a}zh$QDZn)j*VV_1*^~K1A0wtBA-$PxFuKLB@x&x%!cc7{;v!&{)!NeC%Xxu@Lc5qort{qx@4Vl4rxW5Bkg>6v$7PlNIRjoe#n*t)2wI+KUwS;3n<78l1(|&=-%g- zX(1@}kJ?E7pOh?U>MRYC$W zQh9qYjw#z6v%Dyv-p0H3l_d6L+<>Ts68Ll|Bmx`7@8IclnNo^b(BM)jB6SV9v{ZCw$=Ei z5i0cY5mdeedk@FItte93O3CVPByVmR-bC2}z|+N?;sDstfaIJ^n(Vd#i27Hxnjp5g zdj&^bGuy^s@{|y-Ajff=HV4~l9m|xbs4Ojh)u_0|S$5Hl9Wm^7y$vAkkSiQSZ$ZkH zni)p+*ieCH>qqOJQN8bd&Ao)$>Pgt^3qU?uJi0ywU%?(&Maqwr-)Gt~%B~_L*S?dr z+Q^c&(GUxR!$@cXp0@6C+`yhuJ14vGxe?bm0tG=b{riI&K9c#N%OqxA-qiDdnHH4# zSGX(ogdElB`ik;G&t#xIV_D-K^~Q z->lz3pD@;p34VAnIpnN6A+oBQh2a=E6g@<|CBrLhp04VT-LGFF7ypS+A^l?*Tabqb zo8}VqvPIIV)UrL;D=6{F^iAH0hHUwZUWT<_?!~n%xQ%sX{Y%#U6UT+-pD$hxA#a6$ zI%{neb1w+Gz?LmD^IyQiyEb)Z6!!7u#;&;1#l27;@*38U{RKoSz-_?z;|jYgFY?yn z!x(v4pu$q%KPL;` zk!P0qVwMdt^QqSBAXj}k5vK^H*8aeAHlyYLYJezej5jg*gcAQn8eX+^3g?2JmYBU6 zsH~awF!`=&>GRAbdG(N=q4(YsnW3^U2C>Hy0HbrEf8DaC*x>4rq`(MTeMO{TJD`&@7d$4GrDQ zrWY>1l59F)0f~Wd*TGF} zP1ZpP`Gfyu&`pB;U|UKCwvpLRy4YuN8lM29b?#JY%_(7(X9m8H>f5;*Wx9pxCd8AP zR2y)3&77E#nNLpH%1D%SxhZ*g70M#|hCb@8G%1Ozjrv#C^m%zprqUvc*t_=2SP_WJB>0;AeI~UQ;=>%EunoKNoD`~rs z#2{kMo`8R2N!qV}6g2$db{7=)59UN5WpE>vTw=ykBg3^ zTc|giEY%=F!~y-jfYfW8m=wihg_0mAaKd?+0)4!jLpcFS@5!Wr+zR_IzOgA|x~iw| zl5kgls`wB6nRS^(jr>wL8d|wl**2h8o1V*dt>waC3ELb?uFzpWAYal#p~Pnq;K^L< z+s2pfsUNDmw*C5zh4}beK$yEBj|~i)c^8!oenx2r+P%*wUTJ)#C8v(DVp|k=J*b65 z(Br;qJA=0geDggMIB~#`Ew};XknvmzV?=klS+e#zi`+CgVF-fj?U!|5))JhMQk^l= zmIRRK-O#G`HjI!Fgi>oG%-o+95u9;WPhUTfK7fAPc%AH^yh3=CTg+~DL0D;1cGNfC zS`rvG_4?o7>gP1{{%4SvR9;a=EA6-00@rFg4VBZ5`jF9l1KTy924=kXjYz7b7s8KWsNOulk7l-w zkXD6LZ?vZ0V>JE&VEMLi*eayF#Do_QbNbl4Pj~i7nd{b{W zvx^Q1xUU z$}R$OIMyh6dl?G^Eq;T*cB>k9&y$;688JuTiXw=Wi+P7^L#2(vtRQPv%HqT zFrWugT>kR7HM3XW_)Z!>W0mHwcq24dd~l`6Yn^J#xh^i$Pc?voFeCg@hq+!Uc%b{X z=pI5UOpo-7LMkbMm*)w-wo5xWM++;H7gN$q%(j@;gjirMHVdt(Rcrbf##p5F(X^2V zslU!Xc_NQ*;b$9kvNJHAJ#yzA6&aA-yr8xWLt$50bMM2y{0ni!@44gPeMVg)dfq@# zR&ic3(@MwS?_O7HonT5=4{>aBu6S0$ z*;^F)6)Kz_?RLSpCQO-?+a6^A$DLJmizpAJwyprIj@QSP`;XgWy1Y$Jd@V%9p!<|= ziQB^D?hf2TG9fVU9{&dT6MODM_=(KAA7uhxdX{1JARSBu_XZKv%N+#KWZW#L}jo;1r(T|DJ|Hr|ktcX#3n9E(Mgi6fp0k(mpToz8Cu)l9 z^VsNP=w`RYEk)JCF=2^hO+A50o>&`-I_@rrP&Pq_$<^A3{4y1ziM*|42$UaWy=+5f z1qizuHI|L5=Yzuy828s|$IS9UCrrrV7kLV{S2=5*x+BIW3z+ptXqy|)$ zdtO|KPu~ShKFZO1OG_+Q#{>^v1dxTngAUk0zHS*f|J=8@c=^dhPLm@BKh1?vI`f&K zIh63sIBBRcq=n%)Ly$p}z9-&;cRX*Qov!PhoPAHLfW%-M=r=5Si0VUm?JxymiKZps zOcXz>4n=m2-rbQREG1T=1lCWgPwMW=gawXn#Q8HT{0!N(-^?3w!J-`<}Z0X>< zmmiv$v|TG{-*f%)+iJRxcYlbm4{#EU3y$L9G;-d4b6Yrgcptq=6FLlVa?tUf;a9fB z;Cjb|wnz7k_4a3?DE+45`__DJ0-UMC5Isl;q|sN42z2tc9c1oIr3ZRyV`lSQ`Q;>q3Vz~_N=yff)nPwr1hNGL7Fu{{es z%uY(XY?4ou8i=5TXl-a4zP8lx!{vmwAxgUY&=B4YHWjz9Lb^2dj44LVi`xT3=Ndu# zu=haeMQ1K{qoK=q9_3p**{Mp2>IA&Eu?|^t9n7}aT1djz5tK%x#3RTsy)S%OC%Yhn zS+fGNxDeZEQStnp9($Jk)vF!!OD6acdI-Y4^u2GmM0ph}-gSO{H9=4eduEiM)NP`@d6qJk&KBD)XOtZw^MAl0Kz>R%>-qCFpnD z_zdW?1y`w-9Wvvy`_HgXV-<6jls7g=jwU|!)iTUDG4KZJfASg1#c{s_W5$}t0~M=; zg<){EiDj}h@+a7=xRg|*#$L6tx}!}Lb|s533wO^*;sSo}v$dgVfc#LC+ukyVy~|B> z5jD~`s)6Pq`1-M!I5|aVZG8R!-UdSYkZ?)XDT@tnaap6MLPwW;e%&X<%W)BLbC4yp z6^j}#%Opvctc@bz+mTvm?Y0=eTBeoSHSW`ix7#Og#In)}?x~pm@d|6+F^UgF-qBuw zD;r4Mb_hDPEGO@5pRnm{A=#M@iqRb~*3ImkIK$>j@G3u^VX(H)%|wDX^(+Ob_hb>+ z+DhDLg4^oS(HZ};J4dT2v@Dk4C$EQFUV4dKshfUdlc`H+(4)K3bv&H@0jvSDlUK-K zz(f@!wz6JSLkB2vUg8|x#evt$LC^Hdd;fM{lj9vnz0_ot{*#o5C|+x7I-q#z;zrhW^Y>bz(LuL&!aV`Dj!=TvxxO z;vv$oG*zoDj~lKGpvToa`bJ`8^E$S4SLbd>kn>|+T#Di(7mIb!vW{^AYQ*>B zp2*sJ6rJaUZdJ9uIGd zIfP|A`x25vAqc^48-$fYsOo%~B3wf&Qg`8V7J2h`f?7KRm9&8Y@Qxa;D1&0G;ovz0iCdq`3RPi18ZI&*gJ1f`U zhK`f0o>Lal0Il|9?UUYMzI097Q@wmo;V{2M0 zytx`F6tq?fTF~`(#Mw2YFew*IqN>d~B6}a`GiDc10Wm&9BRiJP3O+}Dvj#-^*~fCc8WXt+11GOa#czGmksk8CrkUfZnrtBFOE~%99UjLW z82ZrQ*~Q8B9IZhKehMU>YbUCNs^WZP6tv4VVku8G(@(vdU?+LrgL1*`)_6eyJVie+ zqq&e+`-=KHe~jtsPUO_`z(UE9BqUnE$qu*dV7K<)!=c7GR;MDm5b{qcx zRznNDoS!MC{WfM-#`u&z{UmX00OhN7KJe_U8g>$p$s$PA{ps5kl#9AeBk-(n0)zW(0+n< zx9MImS1D%*&X34yX$25RT7Mak{QB0B!w*NFj@IiH@Q4fh(r!@MGr$w6fD+-4*V<5b zM5xoWj8JV7Up?2K5Ui6l3enO4dLzEkXO_+Bk~h1b`&ZLr9jrSpgMVEgP(j4=nc{5JYr*$j zO6!j>DvY>D6>dUnv~woOHAvD4$gk4SYf$pyWlR%1?olITE9I@9nYHU}ngYFk^Wo&O z?d0eaX&5dCbrE@jt>j`5B8mSw#M^n58>VSg$n>zB=cizQgwes2*Y#bs0~(~~y4 z^z=hd-4P8Jj1wCw-E6S+M^_6-=b;q7!m~-&+mz^aOcEs=R!|7^M_2`eHoOlIFv;P0 zX6azbsY<`AcE*0yK%CugFq}uy2n>-(Vw}A{#XM?*f$8E|^)Y8>YPN2OJ-$ybAh)iH zvnALFl6(aPVHIzSGn4%a3CF0aN4y5P=c%amcUDyd(UR=&SWgqCais){7K^%tY>F1b z2Ri>ER8ctpi}pQI-CUy_iXqN~XHeU$deVR8^0ImAttGSJd1$A)u~|39yC? z7fc_hf?=On%t-*>cWwgt!jeJ0m~XEwug{Gukpzar8s4U zitFbD4iD5)veFI~zJCjSW15Z)VtsKoLB1)X4upr|kA|oBqCNRO_8Ho=SPYF}nCl2` zNrwEKqC&B4QSoRhy54Wz|8!;9N5~c6#X!$o4*w91KY#9q4=3u9q?F*<9fM~OC7by> z2gP6Y;lB*=pC3Q~xo1}?1O~CuP*vn9>CM}pio;=9D~-Q~K#1^~a$?qmMH1xp95SK$ zM9`EU$OY8rh;*ym4IEkaeQFx&Ws9aBy2d+w)ADs4*tncygYv(kD#o6ftu@22|M2JG zTA)l*-(T>LqosEB{YvfxY%&&jE+P6_(t77L~y zm{8rk!}sxK(%H)3U73_U{)qw`YjI1!3Ou6v*mwN04@X20be7wUv3ancuhg5Tv=Io{ zi2w3iVpyx*m?gdkN3YJjq1Xurrb5xXv77?bNt?bL$sofN&lVMCY)g<)K9!6vC z@CT#Jm}ku(vwAeSLB7IfI&ss3*c{#wU>yN|JfgEvFrpglPZD0fDXCl_hkhJhAI!g6 z<{3^FzX{(`vf$IFK@)=F0j71PF}o`do;ISq6RdZ2fzcTIu-N9wT&9wOo+DflJ)-ex zBmiDegYg?TPbUd$&`eQ?*LK{Ipuheq$MXCc!JW=!R+y{GEc7Q$o%ra5F=I!{v=OnM zEZR=Mcsg>yx8MVf1=ShFUwWOB+!JpQ)q^kP@cxMjpC#e~5*`L!ZX9{JkUo2x^!xDL zADQDSuG6*2G7+3NS5Lr$G6Wh=g=4y3_%WJ;hyCP0PHa4S&z$&`qKc$>uUpdmKTe|v zr9IuC2EoeuvmEoZ7|OtDr{pe_>xAz8ueEU*jo#8_lsUMaFG(L6C4{PQ0NG|z*k87H z+V_)d^o*sGsSgO?*3|9Iwe8A#LBo#4l#e&L9sZAD9f+>{knUv$0kh(jDEsbM!lueT ze_KL$SC)t&^W(}gXIMgOq6~B8vYLrm^eFy2qIxMVGEw;v_F(yPq;6lme#T-CJ_d%Y zB}sO~gWmp(;O!Q5h&h@}pVP8iY)V%OW_vupPdY7zK|31>&^<(;?AY@*(W$JuxQEvG zpM0j0_^n-_5wC;Vuh8YB_v3!%(>IgqfO%e(ojO zi!=Y{hgttF*FLpWm>Dl-m}u{}U;8bZWe&U$@tZvcTw%=QL_g#Wfq9`lda}*sMBkeg z@SC#;npHtjqpjpNECu~f{p1T5T_k?GKujLfTPU+jWqBS4$Dm)8y$`s{wchVGd-d76 zB6)w88sP(Bt%2q9V-o5!7IDo2k4D-+Z9g&uU2DsJcG{PQHN;JIHgfd)rvc5$A7|Xu zJ5)`nMA#dgARu55;r(k2!th&6A2Lze&~+S4HB>i*c9LN8x0euGT~(4kcYO|}pid8p zz-8M+PoEtzd?9|T-;Ei47w&NGE!nn>?%_(b$0(#ZW<01opO0mH_{CgB4YUb_&SFy*e8FKaR~E-*4r_`40VP zp~!K|45+kON9@;)p_=mh?ne% zX-(1$pU0e&XR|s$&c9)DiQ=eD(vNu2Fx_BN>40Ra^dDjRyvG3Z!W5j*<{UwK#3YJz zF8`6_ZPP=mDlqWhE@O*Y!3g*#p%D!DGVIlzB9cdT2m_@F3l$-*Bas&h#Hm;AZ$|;~ zxU+6&!oZezVm3AFuq5?5>|)qZQ;1NqXePsy6m#B3IJ8A^#06XFMHxR8Izbf0Rc;z2 zRXWl{xd23cquZUH?W~Y~KW-?i)ivvHSM?@2j~x^PU7Q*GB+lfd;7bmMG7g~n(+Sa; z_L92Xbf49y&UZpQPL$vIg$ikto8}tMJ;m%%cTjxRzGzrz( z26Ht1bT^`W$72}30@H*k~z4 z`@~-0`H)0+F`u*`hCgDZFr{ar-&HLPWC^#yHS?mi$ns3YXiCli=zg(z{oat`V#>go zeFm#K+XYz?v7&%#uE3iKMfwP8LG?82<1V#Qx#p!k|C*sHev9fr2E2_tm1?JLU~uoO zFsda(T-mZUNzdB7BPTA%M%)K|g9s@`hET0gc3~&4ezXAZ703)6;e?P$Z8R#41Tkb}!$Ml@7c?+^ms z*57(Qr|&EWdael9drSq}-!fm8$9o*VdfwSTm)9+y2>=4#JN9>iO@dKh`|rV@t$9FqK(Bu`;PA^I0QdrQ z3j)6O{XPB+JoRfBa0?gjzhpscB>4ZxP?^8sB{#SjGQT)7>jHl@{#R4)PpR=4=ogPs ztm4r*vC74%s2i_nvozaPv4Z%R9<_q#Gv2x9&&yf!4VbYGf4`D1pNyai@@?X`&3`e& zCM1uYhhMwDOiz+ScCiCWq8LDlyOlb8k_neu6d&Rp|87@OF2hUe!*H1Y|Kbc%z`k@N zU(TQn*CPY5&Z9VoMb6vu&G##IiukuZOohI()=-eGRBhzHDm~nKWH~}ic6YC)mH@7z zr>%MZ1if>9!f#f`bGYF85=!X=p`3amrz`9jH+i~q=OlvvdxZg%Um0}&pV=^fMTArv zBfw)|e}&3*xbVv*(1U5x;QYr&>c09$2$_~7vDM!zJ+fJOiopGH`hcLMgk{r7Ha$qP zk=W~r9s>Z{Y1IK=lbnBh>yKG7V_kW1xI*@&bd(Ki;eT46MBgrg#=X9j0EYa>bEs!P z!Aqc@7A7sApWHz^3;!G+Jd@NUzZHcVDf%fWzds2aZh0o-!`}vrc}0WPLoNP!KoWdf=99=|@rg9T7DB z-(MZ9{&t6%FX_i)AkgCN-($qBvsW2euIJTIq5XV90ypzSw3ob~&H7F!^YHDTI}W5t z{@VjwKdzp07H1KqBlDg@B`{pH+D=%q35<`3RNv4>hNG(|{#8P6RwtG(WYa%huY`fS znA%D}l#Ipvvz{P5Pf`E&DQY>sBLb?Q5&G~M{VqGZehsp@OP;~D&X9-ODh!nD5n)uV zhfsVsoy7=fzCcBg_)Olc;FMD_fj3kUb>6g7kRCn_=A232YG`_WEL{?wE_-(L2UXAzX%I3f(7YFm{ zz$8;L_<+3o%Y9dPCE&`HQ>A?vQPhqeoyt{J0=>(DK$7#%sUt*i_cfvk67&3Pwie$7 z5r1l@(>9Rp_LVaC-TQ0!ZM*lU$&+~9>IzLgOS{1=gi`TDLYtj+9x}fxG@$ODiB01c+G7}b;C(a z7Ua0-5HnI@EM+SJe!)74YfWSdR-M5RCDj{x7sio1kiwC;STrn%wx1A$&;uLjs3+~$ zQB1S!#aQ3R!(>lyrMqSKcmy&Fv{DH&0{1X?ZW@RP56t7!`3z&^;Eo0v@p;T+=2#3S zz@_i^OAkTt>~sGOj=w?5kf2f4d4Gs8Kwh7{^+8jBs-ZzAMS)qDwp^wJ0MqN+ak9lf zfa{f-{0NuH=YjYxY+4+M5kP0(B2tDnXF-TFcb zS>Vj7?Oh8LpSY}BF1+t-2L%NXum3=Tg-OL#!r2Ni@l@=4$d8|onZT7#AU2WX?_yM% zl1;%a@lQu~)ne}{gPv(RRGvZjXH8wmKTVyDe}wU-Ms=1^(~PKnqZKV|v9vR+9Csl* z6o^d1@5xjPa#b+i2dDY=(Dul6{>#bcAtMdh%uMQ@>V(YAnOz*FVuFnSE+bl-h zk!DtMlJ@Bv4?qC{>*oLMXx{z2SioEkm+&`*2;j9}x;eUVnlC-M)z$k{^}8Qa@RHhe zGW?#$*k1;AaEi0Qk&7qg+QfEBQQS}v>;C9sM6k!L33itKhgRSzI%5gLf2+5INr9f; z>=$qEVk(nd{c2AyA{P0CiBAp;=aU465&{|) z2?ya~YuFiAfSpDDUM$0UCY~FQ7zp|jk&wSPK&|eldg?oS2&?i^=Q61J@du<8jM`!x zI!~>l{>B=GCXjFXqFUx!{Tqy~t%qT=sMU+487Q0f=y?7HU7rqQRnx%)-SpW!*F|5t zHVbXw>QENvdg6v*^!c{>2YCam%mrKrf9EJQPnAJSjQt4=hm%bvvQ& z%nPZ9WtGWV!0kdk^elD80RZtvOpnoFsBZW8r9|~>?~Un>N!VqxKle%F6KWqjThMif z*Y!}MM+@rQ;93j#n~eyi05WBC0yXUX(QS_B0c{d(G8aW1I@a#%g*I< zB$Y?Z=cO_KB9z9uiG9a)2S>jDfcNH{_#YrSDi@#m7vk0FtuLJ#i2o&@+RTc78U2ee z zfr4xFaQ+#CD&%3F-0K*1(15x|) zF9QDeihoKz|2lgG@#dqACz@eZh1Z6fOCs^BBYRH{9xVYqM2|lZm%@Wdy%xLx&SyhRPa5R()XRNJWxzWF| z`-jv2C*AH&GXAS{BtC8305aJ4kCS4zUjC3sHKsp~jX=qNQ#vRN*X{rC z$Nz^064d*{UEi!8{v%1OpZo~_^z2(x9WWkvKYPEXIZZ>>*{3AhkLE)N7D=lJu7DIE z(tp-cv4)lq)W-0?+)Kb`+zqhp?oABGm007LZHXDWUts$OOM1PJ^p6Ypf^dbXo4$cw zDC6;bC-^^w<9}Z+J-JH4C@y@SjHUlgW&Zb*|9^DKV*t<>U>phPfBq=tYhB}ON<<{C zTG5qE#av!X124$7`jvX?z4aWF2iQ!;K0}SRH@m1gl<&e8nlhi1%mm_^65m)z!a1DL z_q2Ee_f|-FeJ`DTkYAbhEKx%Q0m#c&z5dP-r{ShVX8|-fCv*ZhZ=v*hvMG!rYf1^@ z*7NbVV{Q~TKnSF%zyPU2<9()81cvPlL5Fuu97qts{Xm_bLZnkaZ4Zp&M)TBoF%oLJ z=jyds$FJu{d|IBa+U;o>S_9IXh9T>hDz*z5Lr2TU2Y2@fqm=5UNC?lm_A-+>1jzoP zeg{qK!Y%)^jr-~~9wy?8;(JPX?t$LlV5w59sGzCy;fx#eTO<92^0xO2;}3 zk$ac}$X8-52@84vqff#eEy&)^rgHOa_utfQ+w{w}iiG9tL>CbXu%IyClp1muAjV`0 zyR``h2~~^@Qu(6qh7v8l9dWqb276`ghzx1e!b)K~*`gX9!{MPe4c@>DMOKg5v|8bp+pV)I$b- z@R|#N^u(jjRaqbn?>NY49IAncBag8_)tJuJ%n?-$u(k^yt(6 z`be3mT0XKxd^n_3QpnIh$k~1L6J%2=322UQVv8gTOT>9~^@l~4An9kIT~Gn1MQ|_{ zJkO91=Ex95wMq_;=^e;QcuHnD(`7|8LZ!WGX| zdU2}=RR21;C@*n97Bxjkp*_}kvtPNz1njJL=cl%`9!@QCB-HT9_-l7zX?1QK*0xy1 ztuiiV^srU0E)Xu(XCgw8IL1f^K(0WdG%AGvWKM_WJTNsM%jW5AR7x7p@^pJhqi29T zQQ^7mmOaQaNP6lK^o3ks({AN_&Qn((Qoh<aSQvB(t zFIqijkXz6g`J)9`WoZ)FO0KzX&m*+8<|00BJ2hyijVtTKF~o+=LMB|GgAsm6Fg=-d zo27i%p$e5ui$)iL&!sM@vs8qJx0E~f5hUNMB=ICv4jPhfV zEYWun{?XURT%6-6KLOzgQfKe0MSh@N{N-QxmJWg_`bxeb1La4%_p?#6H=b(quRWA#$z{knD%wDq7Nmrg%1S0r zVSA^bb?Cg0KH-2=3;!^SQbcbST2E&F6uD9(xNfeN`lxDALG+t2=ucRz1MlOoY8g-8 zW|iAva))wAZ&%K7-)FS}hmQWcl+0UyjEGSVLzK3Jo|&7Btv-z}kJT#DH{vw-k9Q7N zQ{8QiM>J4PO&W6Qf3$ z_f+n0_#|$4XiBc51#nza{Af9z{IWg|*b$TkZ(|5=D(SAPB_-EsHw@K`Ymjj%#SWTK zeHs!VnoJ?MMU;H?$PcbMu)+6-P3&jE6JvV3BgH(Y3?i~BU!sKop@|&GvNFN(*3Vz7 z7?hd^GK>Q(BbNYEEP_wUJdxe+ZlpRPi+B|a6lI4R`RtNZ@U?W;h7w`FV56INiz^ni zWHWk!H}Iz}YJ2;NHFqq4YK>&dd0twyY9FS$ynbuMF|ZnU^R#VMpe;6It#Y*a0v}b zJyX|K`TkeA7{BHkEvdC2=#nYN0C#Fl$^U`l@Z^#%V-?J7buM2RRbqTZ7Y|)Z!hkTm zkvae7+{=3O9amtu=$v=7yhSA04}z>()10OqA`_NGW*DPQt8{Z$jK2TauSPl6^a< zy+2=lm9Wwnm|uKSP_*)Ndaz49uundyR@9H(tpU?JzP|x(pq7b&!p$Mj5pB7=xcNCv zx{jRTw-l4GZ1ziFu@DLzVznMb&|Ogm1|xCwsbJ=HCOoWfJD$-%Eiuzx8&8azG78yc zi#0bNx85a^VltmVhH>)9>h!S5lJnz1&hpd27nw;X2ZSR*<&FUuOr<|%nMkJiT4$Qt zp!~%1*2^l_cx~!Nmxjt_%tckPBy@W3+&dJa9Y8uL7b&^PQinRN;37VoO~89Iv{hkKuTA$-0Xt{h>f*M|orqoF5lJUu_n~DoO`vLh* z3E?5Q%Ej9EHQHAU65NM9P>$%kp-S++^)(Ds+pXsn<-^(Awa1mP0fZGdrmgFz$+#mQ zH(MDh)bfh zZ~_GMa8Jdx(t@4W>ovqh6!V6k&lTUD>U2!+_qM4Z$v*{1xQ1(c{eHw!3tQgf`SYSC#jZ)FyW}Q<8{qhw za0JzFqS5}*xLDy>&-0W~f>cI_8@p8%wL09$S~HcmcWOWz-kQ^M{sJbm>XwWV7H0HfEx_~m|o zva>@5vb`CNV3^43M~WtP=npFoR*Ed}7}Y|0Q7`N&AnGs(G{$x#Lt^PKL z)$;t&g#~Qg_L`19!@lNlcl2n_!~LJ~p%LUOU)r?MJ==+cu2H4BaQHzIR4V_xRuZ4p0GWHF^1G&JKVoiINgMpKv+YNgxFHz5^D@*%maDz$~o3 zy5{0$pcPSKhx7lGmw@2FC4D$L7EOr%H%vZw@U~Z>T{M_Dix+!5%(xNW!g@*(sqb6) zK9XifaKyeT_*sb0U!<`{GPzC!l<5oV1wHEwAjHQ&y{}k6AtQpDQHtvrqVbQ3OVyiZ zi-}xfNcQET*|OeqIMPtI2@8ZH5$p_MIPS>8opa=pA$kN!{GE7p=vUeUgw`f+of-ot z=U%q!)J?&NwnARz)oSYfZWqo0;ciIJN}Fb9G`E^*e)g7f5g0SkNg#{duz84Jg8VeZ z4K*iq^3Fqk=l^8OsGUYWbapL4e&GZGqEjf18tC#$(Q;6C!gUm0W0)myfNjK6iL@$D zgL&i$=S|!>_lDnA-Dm7b=+sN0w6*MfAU#ofv_6^euD^U8v=4>&c4rk;pFEOZvNw`p z7h0uq%v0QTU)xcP5Xm!YQ-8-&e7b@LuYeR|pq3{d!$$v3xBw51JV1igA5U%53y~V;z0w28_!px4`6a1}&?DqW5yotQwNZ@MjyB>l;Tv zUIOhsJUVBRFsep&WPSGW;;($+53uU`C0admP{}Lw0V2KI&k~lI<;KwzfaOA&LIycz z#k+GH|8IrIpern1l?e@uvetLgEU2HZTF)*O+OLq=syFWFhO@pCoRJ@#h10V>oDG_3 zV0Ez)PeorD1_(K0>vH(!Ai(&c99b0-d~K5yu6)o<`ccyjAs`ho`86#ow$Q54H=P^L z>y@}Xd|Gr8@Dlgb2H@&1iSQ)rk1XA-`?eA}R)I$rIkb>Gt7Xx8o(*#K_TSF=N-1(~ zAB5DBB4mZ+pFTBR(mZrxO!#j8K+vX~ za>-kiUmpCv4@-c<%~x900skY(7T#_9f%m<+>*oOpM^%mLxQm-gLK#J-Yq1_BHeTgWC zCwP>dDXO5r^bY=-3i3?gOTQ_tdr`@NV&yQ9scLp~NZO6wgxKW-soE&9^j%cij~Z|o zN2#KXG$O=eDE5k|tAc*b;vV0j-|m{x-pIo?b&Vlbd6xp1i{1ymsCm2Ckx|QxrP!O} zOK5%y5;$ZXwG_20+>#tK{wt&7@?fXf6EXOSB5kSjlMbpXSYySJsyAo-VMRJn#gyW| z`2tU)(Jmp>g)FSnmxUz2Yvcga|$}69zw(zKo@PF%zyM*)A0toV>{{;DM zQJ7LmzKQrSch-T0tcWcUVWsEpRuS6|+w97`9_8T+`E_6Lq@ttcYJ*(FOaDtM;WxB` za3f$b(*Uu96L26wdWUJ$p^-9t{8#Rl1*29FH-xsv-gMx|hVeWx%nEWV4dtj#=`C#C zh!Mu?Ln4sGU*4T*&=gbW@ML&hT7mQjTU2=iXWgK+mn4HFTnDcS-*lC0D)X>T@2DcT zlHc#ygYYW(?St1JzGXN1-f)1@#<&W@4V;Ku6QW~}K8||rGCpxH?4oVbT z(s(Wn)|#b`=on*AHb5aL(@2Q?7s#BMA+%h+H|YOlBD)dd^S>?b={UeT#jxHt zq4P(6s9NI<4)GoN^Ewa;oAN@S&n*qA0z}ETv1PkG#7{4v45rmy`pbz@J@LtnFp_?n zMb3g3hAS%P73O)0)i2wfsgG^zsYiApw!P6xa}}DrVhG)bTL(G4$d?-SPuX6E zJOPT9YH~&G1SIi6znFy>O$cmuNe*ZG>H@Zb%n)(t@ll5he*QoZBSsA^3|S`m@n%3RuIjX|I+Y8|Kkmm3shNp~T)iD^c**OsZRBwl6<_6#SF%)$y?Godqa&=2@8 zdFgO$1-;w$&Wx22F;m5M9+2-@H9#WCKI72WArNiqP!#z3WYf zxOugJd&^P(z*lFU0m5w`dqNm#9XhxnB8V^KL3yR;G%k2FjT?+nT6WDT>E&4jG#nZg zuj~D6GD>~K)y9F$V!9xO-ADb5z~9Q``&Fr>oR>maTS#Jf%+6vlX1G5&ENPwEO%3Gw zuwZ8*zMbutf0*WyLr8`yAlO7z&2d*QDSp z(T1D&V!es@tE^`ji$EMUDh`>-;i7f?k3x*OuQwb$F+fxX1IoKZlPiz^_@voF<% z%>|Z$APsjnlEJO_c9+#mF9jmw*K*(AERcq>^qUqWPc zU!C_ookTSlYs)aJn$k7H_pk8|Vi8d(Pot<~PT6Wasgy~gBN{M0@c{IaXsMf@45FS;Z#^UdmSG)(_0y2 zu&lMK^2TEkb% zOCb|!0#Fen?|!}h$Y%`hng!TMNDKDFtW10xh{P$F2mI>gHUl+ZXhSQ*rT)=%a@^r^ z8roTV_h!so6;k_!Jpm1CD26vXhbzf~sjXG)PjY=D)o^4T9bsI}!5=nPLnMwf_Y+^L zmq{eqKMFpWc0IaSL#0Mfr{6}GcQ%WAWDh`$KvPDzzxWLTpPTMQZ11Lh(!Bh_RPa?JAfO((bJ-R6 zo@4avLfbq$egiD4U!VaE*y7|mVsUb1D-0WNEaRFTa?zH!n?IbO=N#zmw);7TZ8Ks% zXamvPb;M~4z#EOIeg7x?XHICFg#^psQ-u%o=@dQ5K#g}ipxnn0icVDCaH2{W&EVw;i9T6SsKTc9&}_)VhX3 z4~@)aJL@(iqNq!<#QnU~MxGh<9{KCO6U9BfEim15I$zElR&=aQzM1bH>P7VhRG{QS zX{mN>>14y4Tr2PbhBVTAd~ICV@)r6}s*3TjZ(+wZo?@gLbn(fVAW?eCR558;r|UH+ zsSN8iq%n#|2J^!17fWQz?Y{nX2Y8#5JES$J;8^&5rG577J>Y!!^N4$xSp0Lh0g}CD zL9bZ5TCP^_>E%1q%-{vL71hVtY3&C{4j~$_9_M-l^GAY^hm1}3ycD=&GLt6`Wm;ep zbFN|6%dA@gYTIwH4&GOvt8umnX z>&+l2PMlG~Pi;-0mkSkBWdK~}@_H4?`ItVh%>nwN>f`mg#L#ckoSUB*n@gsvhLQVk z@-p$^z?EL^zg$tOc{!|t5@|eTc)mliV z>epS-uuq|0Mh(KI3cpg6YfVRGstHBrhpqeE>>dbC96j|r4c%KTX-2b*bqb>7j~R_; zfGXiVK1DDtri+GW=Vr&#kh)dH7Exw#Wx6asGJpf*wxMitR>;?{{8!!GBEirFa`v19 z>2_WOg5(;;WQI+e>g);!R;D~XnKAk^jB@cD2v@s88TCBw@nO{k^;KtSM#{Qf*jt~0J@aNw}NCo9vF_>5|$z9~tGN#ME`&W)oB z1$U!Rh>jSfCP?wyTon#|sGbIVw8M;NLm%XOVtf;dnT#_)kJwDP88t@)+TlP8_E`_`0I^ zFd=x*kOpHz`*7+M#kgqP+2IM;?+d35hhZr(-+>ZuG_%ax0pCd!H|>r5+V!zWg8Yoe zfheulc*XJ-ll{=QyXEs9)e8i(HN85Y_!(~J`+~a+PV}+KQ#BUMt2c7~gTR5+sXekt zleACDXfCw8PccvmOL7F^UC*h;&IWG8?nX=pji;}}Vsa8ro^)C~sfBt=cf1=rAfbCI zd?bp?;uPi3T}hKpbt7 z-dI3Z&FHp3bqmF=P)U5VeX}3u0~WZ()T{X3TGg6{Y42h@XZNz9;9PIf?Oi_n%mY-( zQXML}1Q2Na#P_sShil^l4KV3YJLXZ4S}h4cZ5=On>JwEFN9bdhvKfMiN0;HFZ%7Iw zbYs>VliEv;3xf?MgHq;qzx|ma*RQZlQDRwIlD48yjS$0Z*dI7~Oz2&lv=w|K9)7yD zeF2i}t!wRGlsT<>FY9+`4B5uA>8x?>S2x z49l$L{Ut(nkQ+OZG5fd(2X;56dv}r-=;r7kB38~XacQ}Tk~_f3l1fc^l1G#)018bq zzlNvq;DNfLp_E8VS~@x<5(zQR$jiNomp-|?3u0a`J`t10nED^9$<_b$E$*qP>HSnB4RDGq(FI{Bv>MgM@Og~NK~Fd;Y@Zu z35)VG{PuxUF8)r|_I2 z-wC@xv7cD#)m`~%>(I!NPVD#9m;M{j0s5F@zQB@>OHIW{_g#s=FT9p&WHe1q*@5in zIjT`_T^sQ*9-ZUUed}hTr7bE-;HzQKtdKPG(QaD}5nAhT@>Y9!H2K1Uq(VMk;wiqZ6+p5iy9RyF&pJ4x&oVh3luPdh4}B*nQtC;@d@dXQXx3dr+iQBL;SdJew3|CSAZU_ht-n_BSO5c63eh zDxUe`mph`mpDkROJ9O1;nzJ25Bb{=zJda`D?0t2=P8pVqg4932cI3gr2>}-F_Fs8M zj{R~1#M(ryD@v%T(Op=av4@=-O*c}FH3jd&Rt~OWjnThO-Wt6>4uvI}76u7W(()eu zzdWp7g=EX?_>f5)TdZDL?62wPIhbG31-;d>l-^0%6hm@Mv(nayG*`(FTq9DT`r_ss z*VIw7rDh?L_*`_5uIInF53a?KORD+n-fk4qL!k1C$_z@c!u0f~6O)(xfZM70S9~*| zcu%kSehsuvL%O?R6CkzCk=sx$Dh4ijey! zl2b{|oTesm@J(P+K1muJ*GoB47E~&gj&e8vdf%pll~ z-?v{ktjOPVAe`=})?G<%X3FCXI;8F+T~%+r%BCvtf&z^s>XtWd!l(_THAD=YCY)}u z$28Z)!Ii{T$}KLJ@xM8-!g^68%3_J|U>56Xg6f=J5wWhM&?BbXkQ|%$J*tm2+JOS5whQmC6?wa*nN+#0JMIj%uh1K^IfQTI1R@WD5hKibXPf846m#;Bb zl5WJZW)LI{v^d~=8J7P0Vtz+&D`h6;0VJdeI-g5BRsSei{s+7Aa&dGXjY0cZ@3Xf^ zB5uyf3O6GK!(OyJQ$YIJW+ElKEx{9nv?PKB`YtZ|CI|g33tsw04P(V^ssVxK3Et-E z1FMvLOF&iug7i_d0@=6<*AY3InrvT1ROYUv?RFq5Lf;E zNXb3gZ!peiLF*-88B@l5ig&Np_f_mG6n{3fLhb#dS8wHWwQ~xT@L%`Y1j(V8Ql9Hr z0*QWSLb_=j>wQbbB0Q=m_QX)s!D1+l4J7i{={qzcpsn%Y5GabvQ@7+=3zXw_Vh}X- zhh!Z}S&%I%sB1BLK#(IVW~SK;lRKtyhm#t%ZyG+}Gu@h4tacP=(EV{q#UjJK=%vSI zqD^-@A`rZ!24a_9yM*%qS1SZ64M8l$(YdP^ifF^yVdtHXY)^aM0Zx!C^HS`oWcqGG z+tdJc#HcGEY`M;}_c9=cK)?dBT)4+!u99Mr_L*Qfh>Cn%dqal{+SmQd(NWQWQGTp~ zF0F%FrjOs1MU_7@U2Et928Ig30hV z01Qt{y9->4v0`w7Nc=%k*YQToIW$tgj8=YH>f=j_7hw(y@g^!X5*j6eDN`B`$2$0m z{2);j3eMyiJJAYzkmG!-0JY1+%v&hLMIH60!>0Q8R(+Z*&VuNB5`&t@g4gIv9MQKP z9_MZ;aL}#k*i_C^dhauf8g86zb)58?Jd6(C(}r#zfoP`4$<&LC z@mR6`_*QY zwaSNen^ds1Cf6E8$qh;SD6L)x{+$hYx0GFFXs+b4Ri;5PwL<&E39Z{d87Ivn_!`_( z*5z|9nc{np54nke?zR2-v0)DgzO;RFf0+&|{YzSdcKD9B-x?x&LQwv#+;94)m|Nq) zEyBS}HoBRt%6cXz2t&L2;cyqP>W&6{JJa0OjgXrNB;ISm>Ubr)%7f>63g~Y!F=W4a zN~b4m1{x23%db0=s>*;w0E4^&WNrbs5odgg$2%&g_*5W};P5H=%;6!gSnRrWtGtay z6KCOD{6q53u}~Hm76sJIsMf zbfceY3&5Uutumu^l~P;DkzTih4(mH)*#I}ps+u;mO*eJwwPpe_XI@lRZ z&^2XlthIYT(u~TxdvqLQK(KUb5Ep9hP*)%^%F&Z8K#%Ya`urxrpb0@&t`~trDBL{S zM7@PF8wGr^OY|Y$U0~su=ND0@Q66zNG%ths%^2AWIi@2pl<;blb%Ls=30g+lIHcrB zu)XsuHGhGw_lgZ3a`;#6#WPv6B39Z)_rxsShrB21iipB<+Tmd@aT|@xELId?`@S-W zsArW=tIi5wtl54OLo$T(Z0KjorDy{+0Ze<}&qXaqe9+ZrWKr)c47N2Nge!bO55hCBpnP7XJsD_nL+F!59Dm#A$Klle45rW*! z6{omvqm}IYwCXqW`4ue$*Y%ptzddW$be>I2>aZtDOJ$A#fdWIM;plw{h_iBR1(Xk< zj+Yq*<&G010KO`rDu?)r71zotLBW%8Nzd9m-RRJC|NWNSp|hDK2Bj4)U6 zWrHeq8~O#zNpOJ6pm7KqTR`rS^d@4{lQ><>)uQ`k^3~a1tlLNc-p?d?*XJ%WYN|?m zZ5LYvvxOsY0hbMp=by1OCb{;MCXY4{G~BlFbMj zd8jI_^LHwC8QrO>V~B@)$7fsrph@qmz>lqSG{PSO$SpdF`0l^9lopIb^*O8gJ+ec>=s6Sv1DGebc#}z2R^fk*vxyhFdh@Z*6P(iSSwM;n(1aesja{fuUth&^AdUMTTjnD|zDZkiQ5ef*|YQ6SM63 z0AENW>n6fytqOAys(ro)f`&B0hzhKmmcguuW;E;lc|39k1)sn1q_4B=t@Wt`Y41jp z2nGh*k>CLE=H*$Gkszv5Il_3dsV`K{H;N4ENTg%WFMnGCP#VI57hqIjq*z#xD_i^X z>bT&dE9Jf5?&HFSPA_u_=NR1QdU0GCRX^!jqbtVY4vA zN4>+3d|#38Kub}(%Fa?zz`{R0Yb`F{&!4pUq1U{?6}HV#o4=re^9vcIu86M6yUwKI zDd5ft|85Zx`a-!NZfin0XnABz(s{05-H)jEIlP>BBe?hzijCY0qjWs+B0jeen)2_ef0czw+gBIRWudwIJ1^C6V|ED-@Q; z^n^D^jUJ|_v!<7lNb$c1{mn(c@3B!DBXqhSgZXbEBR)>P;jJbH!%mhk(e`jIV%4i4 z6~?%6zI^Ur5|(s{j5XJUm?}kh^cf>Hr$_u&vC;r#yq(pOd*6~6wAq>~NXO5aN_rYp zTx;oTh09^mmseTXxW@q}97Ln(RPpm@gEz^5&<>p*HEZ`jT{}OwFEM=KB>~~2r8#s+ zxF-~F&6|BttobuH87YVC;+l7BWwven`mfV!Mu{l)F4mhPM%RJ zSUv+^VM>jUAFr`vTBV?sjRCXsvVywgZ9i2gP^q!1AX+q|Tq1kScF*T@-C|CbE46lTo8&!TNV`=&cugv?rln z31Oql9N-)^Mi6wyj!s}{;*VRNvy0-L#+^7^=m=5>>VwoTs}X@R83LG1ZLVWBpe&OEC>>yo#PNM>V$O{y8RKZghMylW!G~g&A2!Z)e{tFW zdad(%VXde|OGCkULiwH@I!q5%{Ly9{4!yA4+yrYiUqfa2W6^qk#xh+ve&Z-u6JT4w zKn?;$V>RFx`00q$ppa>^zf2`3+wizA(_h$UWu{p8v(G3Q?8|wmZ)vR5O9> ziT7W+{oulwfHJw`3Z{DM(Oq{+axWLU^;8%VAJSD?#AhzYaEM5z%QO%i7Zk4xrxdv(%_G0Hw$d~a=K{?=9=IBU!K z1g!!4%az+fSG5EAWuiMmFa&r13S?ur$k9!q$+bN&_WFei>mtE^RX@mG7uljp{xYzX zsJP5o61Cm*(C-i%3sjs1>-F{rB5d=NX5@I57nsV6sF30WI~g(kus<@-7 z+73c+2fe#;DdG(VTU|@jO#@F<1Oe)7pv_+o_}ze+L1Ia8S4K`CX*u!5*s01Wp>L;3 zI)ZA_ks)u?{s*^oN*)AV7N&r8rqy!Y>^u2|bI+}uEAbDP&dM*95M*8`Wgg4pTqy#X zgz8*_FVf$yLeL|Z%X&|z-q)%33PAZ7pF64|)eMxGWJBc!-#O0JY+fxpw*+=nG=&~9 z0;+P;k#vV09%Z*5w1W&^9W3EtGC{GOc{G`VfUWmP#w=lX^ii&N=mS{U z^o)nwoee;_X06K{?9SCR>v&;|iy#rk()>WD#|3be1{)-CnlcC65FfJ^Km7~`aVXnn zYgcOCc_j#X-LT=gINqsqWOAVnf`d*gB?f^0@~^aB4rU~M)c+cFgRR7GG}fB1#3{A~ z|D9NQUQTEzvfJ9^Rnrd4prWj?_Y+|$kIl{9N=X`aaXMleLQK9+kz!W=ReBWl#`a0x zn1ji2YAtrjp003JS}n=z1e%_;E`w+6m>eilH0C>mKRz@g#RH4YwfzXGkv;62;RBM2 z%4$vthGJjmT&nElaoj#7qnvdrOYZ@&hefYD*ag7A2=~hexK%7a?g8lltgCLgW<fxD_y%Au!9>7OTYV}%dw43)t0>toWR}K6t2xql{-`+YMQ^n!asOexbzKjyz z_3eq}e0`Yjh{>k{-BexT=|{J~`g$mTTgO*1bEV!gEe~7T9{5D0&)uU1$egMccAL8*bP4u?d>{BZWjZGx00A+94RtBz~4!qqCf zi7OLSK~?AZq(d$QgYTVR5*WfeZA*8CRJb|3U@Miy?oQ`uH&OZD%|z&l9mZT#Ebr2H zf9QuosYbzjiT56RgWY@3aR3SD|8MDf|D;eK81Nc64T@ zr$Co*ngx=7xGRk`_*qe|pYNib8DsiH8hPqN*d}lP-dS?CR2H(^O0|^+ z7bN(ro(LHRz*k3+bF|2n<^g5j|3UUP2&`wUwsMMXyWM~$gR(@h<+Y6I93K+jtXydB ze;H1($roK!;L94~uPXGiL(f??l0ciLh-!t5DGw`I)|QPbSKPh_EnPn)jEH)5wcYch z2?IMbMs`6eByN#v$?N(MBF#(@f6tdprnYvOvBk&xlc3-fFBoEP@6R`ZX>qU&+sgrT z6;*0GINP*Sy+R{{{ilr*Ns)c$(m5&P#R>|ZhlDwqH92>1FAmd6Wcmp=uvaJyuZ)Jt z&#hZpp-NJdPW-OFWIVvwd(E=UQ|J;Bp_Wk8jI;_QJ*8qUEO9ZN=kGf1!)muH#+A($ zg5qfpP5izGUdv=RnE*4Yn3h`EAHI2q=-d7-9QX#_vDAXeYlhmOWsU$e-;!sEs>mi~ zKvWyQ&8<|l5Q^uue7yV&KFY6$y?j3n^_y zCJF}_yNBbIFnx?^malsVF?NJ^k|qf2 zU}@wU3ZSP%(SU|=82XzEgl`av1dGO?=-=z>wQQ{b0YTh&olS8z=)$)a`#-t|fdUck zb4yT+z+^`u)iaGuCG5%G%3@Sf5TI#I3*lIvkLnVoFCJqr?C$5k4?EBXGEmA@ZGt2L z6+U#wLW4ssI8`cT6ej=s1;RlubUb*O*D2H<_SO*E0IKGt}VlEtJHStN4o_^pmIQ(Gg0m&u$Bt z|D%>O4Tr*A!}w(EYr>!=yJ9eQGWN1eV>g7Xkrc8-QXy>79K`te8c zd(0Wc`Cm3o!(-Rpj-UUo_Y;(zw|mZU$=D5<3{D%M`DN0x5O|eG7{0W?r?BT}8c*2) zYy^%f_18cQ#J)tr6CeX-?QE{U0~FK*=l0}JxOv`n700W7Eji}zc908XfaO=7`midz{Dk@XV*pb^Ngb*GXn{v-DEVyYEP zYVzVtM2KYE=0195%Yn~2M3hM67!K&|jnj>}u4Ut%$?L1JH0nR>*ycRZ@vp1&$5=== z9OFfq)L$6L4%&vxhR$lnls`F8}%KtZQ;vx~K`b6rXl$AGE&m2ezugTKLQ! zmD;W?<6~ze!)!3kioCM!u3v}>k|_YKOPjoW9f|U+x-lVPo+@W)xBoLS@thu085p9* zkujln0@07l9DXgRrir(}=+s?3x_ddN?mM$kN)6&!_V4Mk-;a^YDbgF_je+vg525Q! z^$l&hlXpVk^3lFPN|V!BW;^oRxmt(rDo7Lma!_=tNLGk5^fYy6dzh6=#7{h+$=ZJi zK^3s;c1fy_hq*RwIlVwcTqiscZ=Nto9xLVZPAPp0(L%)qB}pkce&t*NwfY#`HV(~O zxk~_&KXbghE1gt*XVATL>h>)o$vyfxrZNWGU4VhZ&^KbX7ZRa^OsUz@KghHXPj7MF zct)V0{FciP90mQs9`L)2_>?@{K}m%zYzVq#)bcNCiSCvZBl*TrBnT-KJ!7@*EwX!v zD|Q}NN^N`8A5y@0q6D*0Z2F8jZ&zirjK#fTT2|&OKCJeap?R)zNv6X!~*S zd{4`;!w7jqdST4saR|yZ>8n8-olDTgykO^xj|x9B7=mRL>eL3z!;;-+#bTp{m6mq*V;HTz%cJFsv=>l>gU92g zL#z8upjpF95;pb-@6-aRjUl8&R+ZNVU&Ny0V5!o7}l$tLOZJ1fQ)9-1zb( zwbo+RX$uQLoXvIkSZzqRznk#lk!qTBQwNn&3Xh0WU^Kn2Ab=wHZ~PR&#~huu7@lco z@(ZkCTpgepxe>)G`TJT|?C;Xa-8l}t0b2B6G}%>Kl$siX1jVF#sSLPQeO)Npgqi8< zkZWdGO3aYt{5nI|VE2r*1*yDp=MMX-(cYEr!YcWeTgSId>tX&!;=8@0*$xj!$Zroj zy!F*K;*6x33rt#`ds5K{Rr!sD%8U&vN0+3;rNw)X{V*+wAtfa4K>`5l{+0n?u&~K% zaiW?V^_}mNi~S$y&z#rv-36^v?83<3?I?1dQkA-)BLqZf;rM|IrNNEgvGMbUxz%iYv>)u$5;*voVSPG7eRP;xY= zmP>^WPx|R_752Yc6L<(MW!=^+`i#XS81$#^*+=C>y7q&o4NOeqd~xM>UlZg&G|`S@ z;%-*$yh}L?>?C3h+~Ukz5Kb3$iq7kVFlH-MO5PtZRjhVmGGPF;sWYtVyrAB{o?U7( z%i#UKTxC3=UdMf=jA2QxO?Bh!t{HRjV{W<$%SsbBFIrSH-mDgep3Ib`QE%{>IWt6e z+zuEI{M6l8|Asv`9Tf|SpP1aBaw*%{(p$AkN*Cemoh&;H$M*)_yyLN^i7B~38~l{+ z0c#sh?8qKl4$P%him7vm&7PGR&bLThXlMeU$Ivh9~&6E?o} zuW4hte$ag02Rl`De-Xb@*jrIkH@HYM#k*=N!>XD2@sVcgND)W+LrVo^y$$ksQ&tdF z&RJp~aY{TKGhF|QMT5Uyt}OY;z&H4zU!%?#48<2l?=8X8OxF*CNA6X59tz^bsuOE> zs(~{DWA_Xy(#>zSr_2*UPAcS{TN@4hRME&|$LojKGk<3hA?aK^CCqhq_(k!m8?5-Ma#n)jo53Laywi&RAlea zw}4Hk5l=F0Smm&7#a$PL--T$Z4&>M`r>`Dl&O*?e`=SmO$~Oh+L%Id#I-|D`dX|Y+ z>`lQh&ztG=u8{b(lTyaziTd)g?0%OkGE$W|75x@ineV53j|V2Q;VUEvLq-@t(cI>{ z?7aXD6& zJR6^`DKeNN8M~-5=e9Z`amaeV2<4|gbg`Aj(uveI*`(&)>@;YF=eAP*eBtv#I*@Oe zYtos!r4>5kfuGPoI3HzOcEURJx|pkHbvSl^)NVFk zoY{$`uF&ainUW@TFcQDHz2C;O3FuYiv^Y=~7h(Jm2;0$Fi!h#?^Fxo%YIFZ;GG)?tL$vTPAgv9rIzs9*wYQ1gwdePM;>=Q#jjYzvjO8kif z(z-;RTiGnvq-1kQixIg6b6&b_nB8T|WqoAnd|Zl$sJdGpk%p$fCAb!L*BG|R*B?jd z-3+3&wY$>OZQ_ad98nQ}ZvbT2R?=6eQwrUQ%bLV9aGU_FfwP(k|H8`Lq)!Zg!$5e$~_Nd310(Ga4vx{S1eVE|87GbI5 z{lc089od+7xC)iGGXC~n`An+^4umbO3Olk0thGSvz(?S4To;B>pS|H2=CZo{g1#e| zOK`xI50wQUyaT?+>+pyRTj$!7sYGo^JD2#Gfrrp1GWpvaBkwLSg7n1R%3cROqA|cw zR!^!SL?sYSV^pjygpZL#AW(igjx;GUQj$Uv4ywBV z_(%);Pqml*-Uz$_%f3&CeF4TFkyd?P{)8WGCAT_n*Z6sNFKPDzkDm!%NvCnY-QWEc z_x1r3A3**dj}yN+r!lYnZ``}$KK!@#J`KPGx&d>~K;ISL{ww}p{(w10g)71f{}1l~ zf2!|Gz}kz+p#*^NHf_M*)!-A*?GLhd*mnu|1mxWS1JVEhK%67ur@&w5j{vWx$Gx|@ zV~t+_$ZxwZ_Ycaey5~Jff4tY1E5ddEVL-z7Eg-*#S{ETq5ug>2W;QAE|0F39w0))T!zENLLKjHv@e#FDQ z>And-^w;9|$6o?7uKJ(#{qZREwfKU(mUwZ9XFTp(5tsz{0EE78KPCRE0f@+J0}KOT zzssJxHquT2d;S-IUjS~v+SlKT1M>SO`icRa-w)s3fV8*1zwY>5_5nV;z6Jp=0LlZ{ zXIens831snOUs4yOS$KcFOnw?`>*;+k=u3>|{T?>)H0JItmmoRko!V z_FBP^v!nHVri0n4#=5#7^z&EHE7gslCz??1*|^MrR?smK9%Cn^U2LS% zxsAX-o9aeQbvk-ztLaD-$#OxpSy4f#YiW@$Iako21I!nY&fMe|9hHw^@ZpOLz{=9>QEvcL@LJCsA8r@-KEQTj0Zy-Y!kIC-Pm9_7fzSHxy znKJD#F%H(>M)x*D=MDYf=C4-=mkcS4-IndIKuT8H`ia*kVb(j?>WSssNl@;Qvr**o z@&}*qGhD%+cxi9^KMFswz$h|_rF;aWq*t=fdy?!pG`*BAK0yaYIOISasB#{EG4PD? z5A%4xA>@9Gl=a1*-yZ+7&;x3xA%eKXGc0wc-=&SCCXwiyn zXJwUZM`yvn=osNFjmp!UFqR(vcFWKW+TIdL@YT|nJp2d5AxUqb!zY?Tf=HF9=>RLC zKk;2v_x;`Eo2As{ImqqV2=NN@z)JP<J@3^swjQ$#4tz(SObpU;^Es>0v1KWt{nVbbg4s7~ zeVzKHg;NN2boOAfJuFqRX1rItJ||3fr1AUU_M%_kPxfAK$LRH|oA%eF2{LX#3#>|F zpnE9^$PH0mEq(r?!heBv>rjCRk~@r(lH5cy&tZs_HTx0JFX_Xc)qpATlh<)4`g;>s ze$F(`R;|cY`M__M!lA+VZe7Chh6fkd!@D7_V-_W<70eSwMe6F`(ff#CyygCQ3N%oj z?E({zPZWdR1f5q0FDof%jSPjbJbE9G&DQpT^cUFqZB5QqK3W>nF}(xx(XVN_24_}< zEx$LGwsn4I>Q1TxGp00+^kKR0c`5|h=RB)N>ooD@^sxFkn||)6It$7tj!Cg(B7W2! zb+G<)o~si`q~X8A2i-ZgJ_wS+5{ZMJ1m@Wj~z_NVVq%*Z8}x3w+I9TuDE-a>dH zSG|X@2aUQEi6|8BeoqY~Ue~2n0*1kP zW>Rq4kI3#N+ZfaX%;@_G8?s_E5iW|WliSe_>e0BabVq$hLZZd}O3&x@K)S2mtC19h zO!n>Fu15WA(W<#j*rHpgbxEGNg<6SGI;$|6cT_ltC*isbC~2XZ(&xW8*mJAY<%r^* zUu&_jQLLvuBal9oWOVq+u5bJp8j@Zz>gJTbIrPe&$`0)mK4z~%r< zF;znamoR(hg^I~yjXiw5&|6<#85KROY z{fZ29Z@vhZ*R_8W|6f&d|AO>#C(H;iUxJsBwZyRFqp2#6ry`S?=jVI&;ar7mVvje9 z+|Xi~(Q3Q!N!6-W2@>a@Xarot{x}kSv5t$3rBGO^H1VlupHwgTRfn^M|Hb#EK&fDQ zlJ*kzxPRM_k^B%Yb|-{=u-$CJiEKkVTD*Qh|9?pieO`J0PwPF{T$tyl7(X&!t+Mlg z7xl494i^r;_1J;7pLU6qWV94`2(Fo7Fx(mkTApa1t#IEA2oZ=TFM9v&g*@J`3kJpC z1Xm{iaO1Z=lAJg-fUsiCm=SRflp(C4)I7?uP^f+U@2KD%nD8aQk7}83r2mv>tqFqQ zpSBg>{qqa^BJuGWD?Vn;(P3T0kD3Gnqg8@l1Zl!Q_A&g#LmB)!H6Ybu+LQ{Q{}#Fbff{Z&5LBIpxPQD^ju$Q(b35n{(2S`) zs+%$Tv1ZTtKLaja7%+6r`q=v4X~Z%j+CK;8-xCAR?FiieZn3N%Z)@luUjCoC$K^&a zqQQShO;Y#p|LO66=NFWvRijD&=w@keX6!$_^}pf%A7FR~{l9ec=l_@X|3lk`J~iJz z#=)KN&A`z53}*Yg73iX=zlCyrUkkTW)jYsBeQkz1D(Re}`CLxf|IgeH`Ca!{h>A{r z+~R(lecuv-|G(#y|2@F}0+qddkG%5Lx|_hj$$86_8J6mv@&64F|Ezx$rg_gDtu}(w z<%?XhQC=tHp;Fd~8%OHDr_kWjYbrJ@#tr66sC4oFm_+na@>Fg*Li6Dax(}bJ>Bs|9 z7HP`AW?xiU^^-l?K=1u$04n{?T2KI7%IghZG36TqJxkzJE+8C@-*D5P6!<zJBT!DNk$78? z^nF7}vCHH52a#izCGw1*My*Nb>O)M}k@@Df+HA{W^9QKtOQa zOA{2j40QeVrQ_~5J|2@O@di+H;3InPNmCol9JUes{-z$=Eo*anrc6%5b1&(e$wR;0 zzmw@UX3>o`25(k?`Wk7bBL(J2JKCooWnitUpbCu>8YIYuFA)}Ys{cXAdIXEV`%ERU zxB8QvQr!YVbqN(mz#u7Bpi|)OtgZF}?M^-U;;)czTKqkfr%)Ogq{&xzCU|);I2skd zm0yuKp(csw819AQ0c!+wUY3f3>0cla(EWNrw-p%tMZ@z0cvuXjJe7-;g2nw7cLfU@&S{Y|Zbg$1$A)Q(07+Ou!=nVkeZ9udmzUUaRGiX?4PDR_ z;EE`fxItWO%GrQNUZD<)2XjZ&FJ>;LubASK{>R)&jv*tAt(^aasS?5e6W8*nMZ)nM zhsRPUq6VGNXf{+pm@TKE;;Bxv$&UxbuB=BaM1$l|`pJoNe;v1zhlU`;|dt=Uo8=QxB}2G5cJU+)#^%W)lG zJk0a$dXQt}%h%wD!o62udF~equOwErUKpCX>u>p4P|DWa)xRic>Z$`!5z^aFSKNIVia0dxRZ) z0wB>edgRNvtq~>naTcyJ9g-9%d&8^NOO^J8WFKUj-Rg>r^2a1z1P@`!I zH-m`|r~Y+k=$v#X6kwSuV1fOwJK&g9F!*hD(lS8C=I$Z6r3mrTHa;a|_8p3^gt$*P z25`LO4=n@1<{u)b9nRl_4@JwVb9SpQYvR`^zVJZ35?+1tf`!VS=##0iBzII!5Exm& zgJELSlb@FwpUFj56S@rs3Zjm2dzwInLC<^FWj;48+NRpxd&)(&B*gs$F;9eFEqxa$ z^0J|e2ILS#eb=D2zaw1<-Y~<33i$C7^lXZBz^u8*e)AQevt+fy>DR)k83%GY!0=SP zGuH_9OIhaLILga6_6>00iQZI#;_?PT*YBr}9s6KIRsnUnKhhh~^CYb1i~IN4ovEnkjU`1FKZ!lVKor=D`{)+ej#XvF%%V# z#8pS!cQ6LmRrxqFn{_Nlj!VQT`5}hZIBF?l`?2RSz9rd3T#-OIx!W|CaPlgFt2_Fa zk}%QaKrgZa5rgo^#-39uRdIIMHZ_Q~rnxA%e~WQRD3zb%bRXQ-VW<3AuXoHB!Hre5 zkf%(QHL%lj((Q|L;E;^XlZY|Zyg5)ViG@J6bKIs{th4Z<-K-5C?zOu`#6H*|XItSpmn7F;J=s+0bA@{1vafx8*KeyO{Vs4f)m$a?8tWK) zh63&=q9pP4Ln9ZWINP`b2=g2gLEnFEen0m*h0AAtFm@~Hp&fC8+_JkaDe*#FY=?z@ z?St9&n+|aHiQF6k<+9G(qs><=KbgA0Y#kFw#zN6n;mkwT4QUBFgmg=zl9M#pY^-Pv zCCw(x`fM5YtmrD0nvDYm3*CM8>45&=CXVJTaO6>!)yPzo0l*#c*+~e+n|s}*J-v#d zI`tpDOI;v^R8;ZE&dgT@GLMM77-onvbNnG@)8p9wO>Phz6|gfNP#*Uu4JtF{N`Bx- z3*wcq95qf5yugWKj@+(i$nRI2lWaTh_oRNW)ApkopifIqWSZ~Tl+ZhSNo$t~5$Y+n zJF1t=%6(WEmjgCQ7sT<4T|R41kn#4bl%BiRl_p9l=vG3V0Qv$36Q(v--kEsf^zeNK z33LVJQZYJHDCv~;=CX~e3ukhTH7e=49I>m5d;%GC|Bzcn(D1(I|A3CU~KhnK@`;*vcwtB|C|X zk6~_&e>mZ&Z}~zI?cBWQJfoB&7tV1tMf?rLl6{V-`{DW`b)lf!Eo}9PSla-zfw`k{ zDjI}5$C479^7G9IR7fv6&+e$tvjMgAG~YGBXnE*CQfpw=-EpYY-TOhapO z!|mB_SS;GJovkVpUtpMNLZAD-ddcLx$eJAqXMaC=mxukv2SW%I6@a>J6-iqH9aYh) zFSkTVW2HNj&-+xH_rNWess1;^Q?I*Nf z^=cGFd$DFJ6wi|+l#Z5i&yO88?5%fdabfr6GFfQz?&)FS7KK|IM_@IXKg!Yo*Am34 zfy_Bhp>2Qj>n}c{*HP-rX3SIt2j4TPm}#yH>NYec?1NDTOz&J^Z1XX)QbxAK^iAWH z0~`D%*0~erqd=IJh^?VmHOKZXo_->=j5$4_u_C2oH35lNNsD_Yd(2>IoEsu7%mQ&Q zBhvKR(fj*{_iFVev`jncM9(F5NC)+fXl{-&Xyem6i*pnW5Id$>Ia=l|pP;AtoW)L) zd|KncX)!srEi$V=!?$Hm>5~Dw3S<+%iygu~F@^&0inE8)7QtQf7S}wszom)TXHE#Ez5^m&j3f>%C1cyj( zaLg@OTMR>dF3L%+=9%}>&s{|q{raN>nJ@oV&Iy{(sS=}L0`cwMG> z5A+t~!eu{E;O?F9KbQIZq>ym?G8It)I=6StW-;)A-~y|a9kim*oj;z*Nw_ULA9c03 zpto#S26uKfny4@6_s|a34?e`vm`R*`ZWa|eVuDTBW>K({3}nC3(~=qhoXu`GbNQ7N z3_Z~!5LQ?^e#wZ0UufeAD9<0fr-mag|F4JVJgMObk;FsP4f8-iKwzQp;9GZ|zskFd zey0KpijLDwj;kvqsLb6A*P}6as8Ye36i`HC*!D+Na&o^bc;V~%iKw_R>ti{yHt(P3 z%#Sk{f)~YddEIVwwz=EeH{O++xaY?#u>(DKi?JTL`hRZ9STk~SYU6ZDKy48Tmg) z0oyEx9nSQ_)ZsMX8Z5nGy)AVf#3j3=n0(CBCY0cowU|>K%(?Fu<1TeWl4T6S0fPl- zHM&zpJ(_0SMdeg1h7aG@+B^`*E<+FKCPb0NDu({p5N(-Aps7NSh%&k8V zW1EPkjbcafIvUYgvI?tz)@$txRZXKAwEA2IwYQJz17YZHe)JFdZr~o zzxtt=N2$p@AQ4AXKMm}FIuU}6@LRXwIO7S?!}313zMw6j)It|(R^CLGD9I&YND>G{ zW>AUOzCe+jNh`Sn-lNabTke#Dxz{a#WgXvL+i-vxFGKLjKsXg~kbCO;l)G(~^cpN- zbN2+x77(F9(>!_jL@z>ExpHps`?WK^Ij~jTVuq7I1tgHr%yIf|J-$x3K*zm!gF>L~9uG|@SAvBs%_ zH^=>=Ad@LZVyI2#Bbj-h`6A1Uq-|&2L+=JRx=zye*9OI9f)GwzAiYZL3wQ z(ViDwB&Q>Ro@q&W;T-l&zy9p|U|UWDWde4+xzBdFuC;Q`=2h%G|VCj>#x@c5}b5Hx7MeY3MRd@4lwJbZyz2 zQFE!4T`SGD!fRyZ)LJ7TNzMaaRwyp53d8X()3_xk!*lQZZ9{3d#If8Spivy&z`Jw? z2LjEplT7#G@=9hAnnmO3a3cpsWS+tx-38d4TJK7AozBP82F9A1Jd?uh7@aJZLk?P3 zKgWG^cbmOx8=qOdx369T9?YDH<9z#6ZoVP09(`m{gkx+b$554ndzz@9OFFqG4pdg) zIUp|QE~tA84#k&i?Fd!;&-mq`0wRG#Ehyv^*mvv&aO2N5_{q+c-dSD?JiiuTDQkHV z2&1aip6CV3$%H(Bfb_-eV}XDuXqT&9$cojBLClm{I?u2Q=sFV}14(DXh%HG1DO@4k zk74b$9IomC<}SPW*3hc*uT`SK$PL76T8{ROs0$0^y<^Qzbdm~_ z3utg&hD|bpN>qEnRuQH9A#aegaiktx9bQxB>26s{>h7yGCSdJI$GLxfdFW(1&fk1j zHzW%J!DwNG%6ytNXzx^CI9=>f!+3M(mM`F{&J4bz*5?&iF+n1q=}yj+ENy5!O#(eqUG?vrqqbKrsbteir&qW9iHrDUkjt7oLrIajLcu|Uz1e=y*J zGW{VuRpgqHCWWyx0&DiggZo2F%AQRZx!s*E!R8bH$+@ep_d4ubCh$&!eaK@FcHvQz z9cM7$uS}5({#~BrM`BQhsbovE3&sL(d^~ow2uM>E-;iiH=vD6bLiy~~1rU(jDt+j= z6P;4IgaD>7<8;aO(ES7ci66^+VClZJ^Ih$QIW>PJmDbFV!Sozj_{St0c0R^gX@dS@ zR_xcnHuh%uYRM4G_NNY}YU@_+O<0q{5wnT>;pM6vIg zAmU~I2Du6`b9Y;L_%bpwZ;$so41l^d)Nw+*N|0vE^Z`Lta~O*g=|?8p~Hzb?<=z0?30KLL}MbJyXxkY2>4X z!h*pHB<aSvB!%Bcz*5n_DOI|9`S8OqLi^7nn&H`bJKW-V%(lVRln43nL2;{u zHzwVyc@t`XJH$YrGAE4>&fEe72b@REXS(qf)+i2ghLvCB(dcIO)%Y#@ebr?kbnU0? z`iuvS=zMfZK%1<$#AnuGkHc4NVz0u-T@NdBFGb9$!_eZkZ9Ce2RID|01Iat0+a%?d zC~s!MRl+{cyv03bp!Z3LvZ}%!z=12bRO-8=*_pNz)iH+{6F95%1;=LhSnK_ErwUH| zd*zXTVAJ*R1S!xE40ApyB1VQ~WSQ4hSG*DUX&UopE1q*QI8df13v0>r(K8%MTP#V< zcN|z3ze8Av^IFLq0{>Sr$Gp}cY47vGjJV4uX`GBGj;(#imVcsGchjSHZwxO7Vf+q6 z2ooG${3ZdBK8zHQWq~RwUT?MDLXKhDrRJO4pp0stTn8c$Y2RQTn{RzLYer{8h**DT zn!|9-RwApGy^;wV(sf8eK=>Gc+gb+g@@NQIQ5u~>8fwPzNZVM7RjfmngugpC+~R|- zS`f4lGd$R?0WEUj!sB^i$Y`YJzzp)BWo03&_7f``$H8dVI7jG)xr9&EG1>&z-yW{{5$6b z(YQER5x%)1w8Y zo)0Q9g-YM|E64{eHA_di(YIu0OZd?Ryk?P)wle981wSR}#w2@~9$oag)VkH8C+4(F zBKr`RraKn7!zPtw_kI={3L-gBvbkwQ3kqiI@&S@f#qPm{owu$gWWh{KkFa0G8)%BH zc|4>WZ$jSF3yTIl1=9N6h!Diaov#A%aYeCHz#V?e(v&=l4e?v=UPmJ?=#C^i$lSgD z8}Ifwpu33EN*)ks+_ znCabpaXA#U>tk#odPb~$&Tjp|pO}N-LG=;DPy_vwCkIZwYH*u_y_<$MY=POqc`?}Z z_scVs`hy^gmJ`&Y4=MZPof{v>Apo z>yHA1L8&FRUdZ!qt)K(|b2oT<#YK!8{ZKMv+F}r$rE?jHx-wQ*eSj7hTcsWY+lwd$ zw*QgVMD*#R$qvDEJ5v{y5 zfEg+%Boa!ovE_#87yULQ~K5Z57EN9+>gADe%?p_S4sIvT6?V~X;XC`cpM=O07 zUfw{Yp@Vrib%z%=cW4>eh6Xy+MdK^i7%-GBzLBwom?Xc#;Xv|!o6ag+K^o92;H3X~ zjS_|m-VlSR?5uKtVEjmjnRfr3CS+rTlhywziVn3WF`*5$%C^t}Zi7S)5i7im&ku_W z{YfBFh5I5}B2?zfx>m5If-H86@>=*g;1S@z)`Pp)5>a?4(mU~RN{Hl^&;L_Gk<1@mMSHbZyon{z{ zXDvQ%Li;I0s~r){Gnz9OH!{vOe!P&KOFdMfd^v4kcWL}8^L;ir1%%J&oD96GSVUBw z6rMCNbCpilp}9L{&yu-<>Wv(Zc=sOOuNc-S)^p!IqcEWS_c>Ukd)x#*J3zmEt>10~ zO_-1PH>WlI2A#NcejEd+Kq@LjveH*ZoIzWtRt|5V?e59W3c+^!kOKW89MX$7$F=|( zLewr8o0|Vci-eMfNhKh6YJtRXH`(+ z2{u0M0%g@TBXl)rf)J%`g+QH3+QZV@@D8Kpgzn==3G6IHmt$_N$l|+G3Bq4dKckDK zz_$5fu=|%veI!s>^!1&XN**-j-nxp)FI_Zm+1!G>^F?Am@82qg)S(T-dJZ@Sgd3IB zE9l#@B}-4>zu+9F`j+8ww>mCz<%lkLn@$m?B^?v?p+$_Hp%|9@#eLtW#nJzKgdhi0 zl1VA_6bS(Z`prRJn@j3UjEpaQ;;0du^WasetOyw`E#8yZM|O6sMk)rUfE|RFif1ec z|2%u7UEb8^p;sbV1l4xhME)4p>Wxg=N{6nJ) z!Du2b;588E@6Z==$w-1q%P_)iVwYTeiPUjw{%Z4l1_q_4KuF;nJCddvbw}mj&1+5n zD@MGV#=UGy!czKEMUbWm?b#ld#jyoWc@3PoAvV{#uMT_^`p`(~MQetE93WH~mzD@J zLsHa(i~cNaHw1NA4Abj<$LiSD@~}_4ZrKIMYBrk45y7`jJL*{fk(aoWopxuQxmfSG zUA%1a7(2w+DXeLzFuyZ_YI%89aXb8N->X9a!}OyE890R~)L4i@16h3wzP$HW%eC6Z z%mZj(27V{Epk5)wW4o9sdya0!3~-wq0ly|%)bmU;bpP9!OkES$)t@z&cESYZI21Yc zt%S>I!zO{ec+xS6cEwz-`?1YQ2NCYx9f4WwArOc#E;XAt^=ZD9efy;{#PCj zS5fYTq>9`PY9;d^=KbmLp%SEUOTkpynHF@J4!3h6ipIK;jmh(4d+ohN(1TH=pA)~n z9{l3n!VG_#izWK#YkuVCPmVK_0Kw7pnVOoK8AqJj$^3RH#+{qC^3^N~YXRH82LrQl z0>hflUf;}(c_FcaeAg~zTz&^%HW4ZSY8|4<6)aF{6Yn;##zB_3u4jyp^2ru)peqYU zeGT?2vA2hV!z-*xVE8!$sM_YC zWEIRD^~t_rRm?g-GBGtlA&P+8Yr1neoj_l}zDWB$?6)YWoOKSXV!G%n9xD{az==AF z6-~r7DAFv3=btH&pJo6aNRvS&y=VR#J=|#7PjE}0$|c9D4@_4S&7ZT@iX9KC#6H`} zQ6Y01S%~)KezcjB+w@jMJ%tZLz@Zdzab;(Uus>Yt?EbY_cdx&0E2nQZQILr090bQ- zV?5DcZGJc1qbNPvlA{{M-ii7PaLL*7F&T_EaJNHfcS;X#<@SmFMN>ES5m1RaXc;_9 zHmO8*?=qwn7k#3p&qzWhFu$M~eKy;6ekpr3ans+Z5R|uI3k}?2rb~#!n}3LPh~Wrk z$Ad_|=CwC2Q~P2y0`mm#$G2(RVm%2``;NAnNZnE_$X_3b1ntDrwfXX@BLfc5pOdS( zf>LL6eaW8&cEKP>YhX*hKOPR1tp2D4n(u*}JXa-H$VX8%HXE+m>gh?van}kFgt3TmI&q{2M;%>MpXMb4j#CuMcT*F#J`#_rP?|%NHuV~ zEIQ1MS8bI(9M#ehG~Z+f6T7AZ3~2AX7T2A1eK8I6g6*0ixXl~l&(%U2{2oqYUDx;{ zGkGKmjC0GXAV!ZgaIhD}Gfpx7`nvdTl;GZR%&?YDlVTzecCRLxb+eGSIF2qo23@{k zt>Q$bWP3BM8@b5wG4LU5|M>e>Vs4xMNg!Pym>*B_giQJe5x_Ic{gs+34949xhHc&V zK6n}I5Xw+jS!I#;LJ^6QZDNg@>J)IA%pcWVF8(6gKM9Z&p7O3n!D8ZJz|)@>Bi=(U zc8etSvZLBGP{Pi(hM8hF#4%?;x!<-Y^Vz_>;pP}^Zd&9pJoAG}R<%FN|00{+mA+*+ z-icRW$`w}1pznFu4>l2L$3|Yk0M8qqmpcc!oSFE##X3Gn@oJxjW*RThLk1!?IC`x{ zJf;hZ;1s+&Uo%1?V9FZ9YH~HOwy*m<0i-AP80aFXyt*LVsDq5^P;1DFDV}^Ro^kkY zSvD1lIM^(`gV$L+q(6xvyt6h8MiHTC0y#Hy zsMG{WLZo_i^!^iKGbG&vhHf7hQ)jqNZQB&pmD8%RN$gj1o~T{*EqdGLBAO-Plc#cC zsAB8vtO*)OuC1|3g%y4ggDBNJ`BLhVE^?aRCAxeIA_Z&EvP685%{?*03Mtn}aC+!T z75A^~#~}RgRD_7v=OHV!MOsy}QQzJbicGz4 zL0R5B@nNl2c!~YFYmcxy8B_^>S9#E`-3X(Eyx-&(xL?$5bs$3B&vs0`oS-z_2Ro=s zoc@Cj)on+^w_wPEO8U)ZOeDdsq{$gFXDh|ORnVRDO^(?kNMxm#6yX~A0{w!M!5@*q zJ5vbOlQ_+0khuB}lc3XYZh8K!quqzC$Rd@D>**roJMh9-UUlhBM)rz`Qo=omIwL6q z=U_C-N0CN#Z=3n)ZqtGr`Z8T7awSa-3U$y_BGKvCDyGOE+eR!Wtoi-Un(^SMiH0G% zv0CTKt<;33FLV8>y!d412&gSr+{(F}g`}iat&x=U9=plesML`T4DSzdGja5C))N09 zXmeoeiOPlwa*E)@h!TU`zfTm>oKxU2=R_htSZIulW!Rmq&aZ|u7jS3h-va{}4i^cG z@`Ic*`H=@FFSwG*R*GwQA3!#<=xmM=Lg-Vt+8RC^1{YW*Z)?5jAD-%?plptN(IdjM zAlZzEq}|LxH)g!p{$}!Y8x%QXWyz17Y(K@Hx9nu-C8AN=Xn-7$JUt-hp0Z1Ick+#I zWCav`1A{7tyKvZTyPoQ_*Poi%7x}gzE7WW<9nZ2L3k)2|-`S6-jr7_Dj6bz!QO~kO z4I3JIc$Vm1r{e)3t5_DAuZEon&O={X#IMQ)6k*-7dj;^D1Ysk?t$@k3E{J! zC#Yb}Ji5k9o8FK!_cXS+t;Ay=j8cZ6xs4#r-erBEf6p6+y<%Gl4f{+~_fUW7xzHcy zrjljt)vCPuF(BZmI|aL=UuH6`(=c(w($g&EhGRnQJTo%FPYy%15BBZk2vPlfEEiDN z)O^723daiA_xot^SsHt*ULFkG4cXA+UhyP3&=C)>Ua=>YT+2F&SO3v-Sr!*ucWz%9 zhYkm(EdD(MM?NE*Qp*sPqHQWl4ZV^)DnbL>e^52KH2>b*eO&$GV;V=0V{Nl{Y?gLH zFZZ1WYPlWXiCDFJRBQUvU`vF!dzT7hpXeAYDTPf!|2aw@foD##>e85K#g(cb^Rw$1 z>1(N+UPh8K_f|z%$L#Q>JSe_-MEA-P!Gjz;L`jO)h&uJQDg8qHh*Avk=unVu6d65$ zTV;R%aT71Wa1z_mv`1~}ns$BS=43f(VlZXOu-T|%3z@J};u?z3)DuiAtY&lGic4do zl6z*CX3CX)=?*fCjP@dauK@!*9!kizC%ApL+>MXAN)*-Wyl5rvwLctHlw|O1N7oq;JCHfHq z;(qcAd2=CA@Z}d{FbZKIkbu?L7?4kh;WmRF%Seo5l5=Bx(v5oncp;G%$YDMVRx z^|W!j-_KZVeoxY&!UvWIQTC$R$I=u?OJ(Yhfyp$#~$d3$+hX-NQk0F9Q)x*w16Xs@}x-IiBN zh=~TkoN{JiDn6~q3WPouv$$h2S{kynhbDL};yn7iy=Ye>6ANx&M#WRA?tQfucXrAS_RN4RM=jWB&Et~_W5dkDp zdh9Zi<4UL&;xs=f4!1CI-!T8$gPDANokvTBbHcOhO+xYe9%-x0MSjL_Em%EOHP_*i zqWO<(ZwR0V$vHJ9jtSQzsxbO766uO_#e2J)FIq#E(QaMPh!MnvTIEx@$NRFMPaQhr z*o68|Hc|(*8*+jCkw{&=&-WEYh<6Tnw);MK_0|Xv9Uljd9=y&nL5TcRVM-2ra7yrz z6(GAnCv>senaJe4oQB&x>TE*#R!95Hdh~ZTMZMP z4!!YPH9{~NZS&^z93ZSK2HHSR&#bztXcqD2`o?=AHm$OiB`1fFZC@Q1rq#OLz4z=D zmGvEhJ@DFmxnm{hFTkNP6FIsb-nnDz-Ms1?T|ycjA`e9eCCgxsu*--2W_60V4y=>R z6pw0z*v3Az47M6jtKWf`N!V*A5$wh+E>$d zA`av>sD%`|qrF9)`LYv*?m~(kHIuuJM}mjtY>TWtU-k{Fu5a2ll!tMbJp(^!AaMTu zpT2paRruF|aepQb9fBF%38EM55kI;eLQv(B9MW}JvSFom7{n{^i&si83` zc|9IHcOA|+kuY+9TXFv4w384-iN%Je>wdh|k0ZI&C4+Dp|3%jDo+0>KKWaXl8+M3W zImxjI{~GNqbA9}Gib27>GHQPqe8As-Q2uow0=54l>8L3NpK@3YNfXH_CaSf!VBi^m zbF*s|DS;vMu0O3Ld*Vy&kAaLD2p`+MqaRV|S;PZQwUuch1v&(odI^NrT|`dWtU_nv6@|ngqAOdnwT_5=BE?5CzFq1^^d-*k1ZG!Q zGxYJD$8TOh{!_W>h~MF|LkEG^CYOt2A&*CuJ2ep{iG) z$tb7+yVj)fBhZ-fa4dJNjo$9-t_~hso}L)d0cScC_JVJ(59RrRrXK95UY?Cgw)t82 zz%X%x;Qe5R$#lJ$vN){c$YS~G>NT*D@k%fcg+ERbw<LZ?jkQB(k!l+*OTOp82_0o@ z|Ftl-#@dWX@#n6fveDBFC2l=wr=9C)v$eGv4-z7Z$jE3H^}M>H=dA2{_c`qy?2A>* z`fOK49Of;w&}kz#e7?+;9=Q*kUNE0oT0vggi2x1excRzPD8pSScIWC7DXuYIS(!X$2%v@>m@TCQ06Eb zLIdlVxoU0U^z55Htebm_ZxpKP=0$YfbVo6S(4n0bn(^oK?j79RL8Y?3J~CHBPGOS9 zU1e!t=-@mWSua0oNk?lrZ@g*O3^nnbC_ga3(;ZKIxtiF(Dj*N(*e4y54Jr7ZFzV%-v9ZZb9w4!Wme^rbrDsSkrA<0!6eu$s<)FwrWmCTuO-mp_Sh`0nz8ZJuMe1B%vv%~E#D&Cg^1v0)iR(=}CxjL{aMV*sdq@rpY z$v46>dm*A1Xdb~pBYl=>3~sRB5>pvfX?%>R%G3^*xGn}S)7tM37mJxarlah zzQR@En<8j6(Ax~9520d99X+T3cy4-t3E@C{5>CEz>4J>A?6f{0UwLOvM8s}?6*)FJ zZr^Y^8ufb(;5`Fs(0CTF3!50;J>dy5_q(@W2aTW)X-clB&x2l%E;W+R*nqbB3Nqa4 zrjzDLsu-zcZgI}eF*MFpNRKVztnqcj$yr%_<-V3P47o5$R?iRA8ai$lBn74ccKZ!|*^u-|1Pzu-P{BsVatSvrBOu z;584y+r!1DaQ4z-Po*k1s6y)9H@m@;4Uu&MVA)GY?u)r~RnuSIelz31@j^awlVO-D z9IB2I`l?VTm%+`2Bz#P@lNn{ zquO|3dbj+ktm9;nUk`rq7%&%=`9%oF$&FPmaj z3G5pdi5&cgCqy*V4@BI;2v;hlWLwM9N@HWM{80IH@l)&aLn}^%>BS)odP1>j?F{di z?QCSVAcLW*Z@GTcNW>MuZJQY^Yobzc3TB&EP~z2ihZy|@LS1}6$#%Uz2?rh{E*rg#5=YU(sOiv` zz~uGlt4O}l0>`UvHsXtFMxY`)W$zQ=5Z&0m^UA&d25Dhpfn3!=q1RHk` zmT}(hey&fCiFH!iT{|(^(^XB`L=-#ZKd2 z0`_uwwdH?$`Db)u{4=A$ZaGg7?5F5to=+5CAL}s>mPA;E7!P}BYLt;lWQwadZ+eMn zyfgED;e|?ND(pe&r9Kn91*Lhj2uRCpKlS>CjyiAAH~MJhA5fuyPC-_USL1a-c~v>H2himpeh!%^)2MV{z?u6o)cs7NGoD*$#;XHb`?ieho2+Mn3Y zqY#wGAi3q1Ni`LrMma24zQ*!4(p&A0^ET0kODi?q)>qhagjj%jYO7~7*sHCUx$#$I z%Y}l@6;PUNgJBbfcKepgl}EovQK=tFjJqHfqs_aDN%6d|&sljGV>voppR+?0CED{2 z@E#`g#rtKK&}n$eKY>Xl7`;0*u#lMCy;2N1R@T6?JRP}_dq%XPh_JOh?AE*bzKwE=F9SQ>fL z#ZsWyyUdDcq4`T&;BmakF|Kurka+6+;YYDesmjp<_t$?H2-dQA-UxgtrRGM_KBB7$ zT3yIlYM$FFkgMlOwcVBU_0y)%NEdc{J7i_f-%!8?jvf6LtcW%JvGSR*Q`>_+Wx91)icrClFjry9A-|Dqw3s+W$(Uus{3(zY@(_xVC0Ck07W!hy+DEsQM< z?Hxmc#iGt&#v_Jw=nbnNJl7>#8DYWyEn#Z1hpK0Tv$T`TGB_zG3W557%$Kr1o;dQD zNq3Y;Wuy>xu$f2RVM>8S<;wz2pILf z-bQo?Wjv3_Ooc~&RP-T72Oq@z!Qct|A?#^=Mr#Wm*K+ZRU6`ZJLH3mqOKMQVkGEwe zQLMvr!?<7aF;=AFv2t4Dorb@|E8!=_O!?WXt9awR#m?OA&PGdfBMEyWy6!fc++D$wG z)&`d^O`!#&Jld~1bk8jcml6;Anui19>@BOF+ z6lJ0yf`wgoTQI?FOH9>nC(ni_z=r8$P->RP+TOIHTcerDAo(YLa`H6FMEV^2W9K3N zND2EI4M+jwVeVF91x=LmpaXOEr_O;ZWyk{39mUc^S0~#A_x~ikK1Vkv5)hxif0@5~ zc{7P%m+V?KVBvJf$@ne{yA0Nl3%8?-9Kre_ZRFd@svaX0>9T67mpD zNLD?^MKlPNhi`JWc}!zs6rM)}@Wp|<__ZU@m}7-nRdih&?23mYxk1 zOE36{=D*5xw~mdeROW0dza9_}>a(!d{znE`LX*k}+Bg?nNEm2GcqL#vQE6%iZRKB( z@i^F3iu>@JNXsuMZfFgM5q|QSVamEp;GcuQhQD0n6E-O>$9V}$)W||u-Dr^lwaIc~ zXN9AW*ouzRU6LHr?kG290eAjWsZIaDR{gMkcu?!x(H&#q1joMLbgB*N9^l;W)B!?GK4x<{a4^S?at%ZKtoWnRLFFqv-R5mv9gtLE7 zxgMB9uJuXZ9$|vfZU$-=H0A&*zVyfG_nOS)d%@M3Tf@;p{%m=rc(7z*rWdstBx!U- zVnuZE_sB<;*hZD1>f*Y_FY*Qi=ifidvYS`~r?ihn7P%9wO7om@YUs#NDsmlI?IRu`ohq>N-6`2>ii+f(+nv9k*9QB2Xh$fwd4!mv3 zI1Cs4bl^Re67i6^RVizj9#;@3mg3E;z<{Ft5xnxj@LNLd? zs>VhQf4vNT{~OR_&fvo#+Gpl1zo$UE;#sC0xD)9G{~PF;e=g~K~7mwvNbb5z3snE;vQXKaATT)a{akQ-J z=NrSUDgFo)G@uLos%)-*Dnq3Niw#CHmE@%|&bn)FNHw77JS)X|<2L`IpqV?k(JF!% zyu8*gBJ1!VseimWQAr3>k8rQC>5+B1MRq;7-SK8FNl*DJke%Td+aU3_jc0r^E>NVN z4Sa|0D-XASPD5%ttgaOAIEF`6y}NweShAaGG84*4yG_}JOBAAA^b3dsYFTw|cJDM= zCI=Spfq-6}i?WSpA^e)ZQkj{*Jv5MgEt2b#;qA6Cm>8aFFf80iM94>078ym`=Nl7& zJ3X4e#>Br|=p7-JYt(1~y{KJ@r|v%~L_t`{W23arSN2U|6T>b=*x1yIoe}4JMc=*f zX0Y6Xibn-PuNlf7$gL@%%rHCmsquH(LgWOd6gAnqd|OhNe8qNB=c7iTZCwyyrJPVP z^Z2jEPMrGrm7tm^4C=Btpwhp0q5w7OwnI790vP;~5lIQ1Ux6`fI007_W6hv~G1yP? zHUs;b(AbPCs8JFYJY3Lo>}*SS6DHqZFEzl@Gmp3~M;k{rZQvsVm1bGk3C$@^DRxuf0Lt(%%1>7vf3IzbobCqmy@_Zn()+uG_;V-noX=CU=yOAE@^ zt1dz}k+YH0zh;8?ukAm?H^#b1+{ti5=aj*Rsz1g(x5ZF>4A4EmxXc%L{-U^{$50ES z(jJOOIhEUWxE@9+T+peHW}R#asBQal@6kVCbI$8N@PDTCu4)>?kMtst62g^-obV(< z>`KbV_&(OPCpweyeyi4UL)q_j?b%r#4CChIk%nIA*hq+7SUXn14(WfnCDjljfohty zW$0=4Bd=nP8H1=;t&4tg=ZQG^%71*+0<|F4S}b^nGc@Qil2A9W%}uRcM5=q>I7bVs zOk|uWud&f^eMm5cy5KK9|nUWZEc z8OLsU9+;<+z8sBLG|G{7cWMrOFz^3H)(p3~TmKL&TO&r|z7Ri$GT9R|K|CDt>qE3I?nZ5;WsG>oD7w0LtwBp8hLR%~xAgL^0@ zisv%C{CMvIfNk-`@mhYt=Dh16GkYE; zGcCPNU$Ni}mG!D(G6a-XfBbE^%avWs#`In>g9bY#ant<40H5~j4ef2S)NfUadjEeP z0)f#k2UN(y$O27XR`BcWT%*2+Jk=e<+{#4lq@ual0?2c9KB*fU{SNjZ5H59hQpJdh zME2B(kMh_gW{$c}K(puBvXRncx$N30gF2liF8aB|It!AE!p7<0w!)4XZYV56Qv5Qa zD(nH2pw|f|f}?MLtkx|2yGTF}8tA?&XR!g}F;}1vb!c_v@9MDftYsgc)62(K0WC^F z6Wg|I^g7gitkOTluV1~+N^hs;jFRXYm4ut z0tnfx{Z8SPnxvP2#MoGQREXFsLq> z=CO~U@RaevD;L5Xh?^fCO8;CjKBqe?GDf}nx!N9dy8RuUky;A=q zz{bjgCc#YR5E}6w4a_TnKF2G%K-^A14k^b&vXq6f%a6fCQM3;ZAO)dqOTlzFXcJm} z!4e;ACTcW>YpyXJcxs?4R{z>it?~74UiyYHo0hB!I0E>9@^AP*m?=z+ zfzD%z{$SagXZ|%=ksGZEJrM#$iV+h5j6)BS{mOX9*(Y4wwK{RAKDTW0Bmqjr=|sli zbFa6+EQhd71vp807whChW^k}tIkm^|GbDpi(5VIJ4tiRsYkjTrD*newJitcnGLh?l zVNCswx;6tdS%f}j0{j&8`hud3C}iJAI(koH7DGwVdTfcC*jS$YHa8Ma3pBz4M*ik7 z%7u3Kq1nabz*o)zO|qs%h$k9DL%uopDxkEothv)tgFX{0Vk5YOJ=kR|H;aCTN!SaZ zLr1V=B>Dy*laYdcI*o8f21ZX{_-Z?6pL&{nde5j_Y8wMyaqee=`Q=`V)xPIRD#;E znUrSF#e-Ko9(I+Pc@^jMR4x(EXt(4ZJ-(4~EL?#F`^t~0c_euYc*vOuOrxWK13VQj zs3w6DyB_VGEKNxSj6M*nr)h~Hqdi&j`(=YTLK zM?WgI5lG%Y0);u~$)QLmo|Sgr{p`CoS-X?;r4@9k%3*>PvA|WR`y4$MH17a9r$viv z=zH^mO{l|;(2bMLJ)xpZlnEcT^j-Ih!Z@);$1mmQMjFU?=yco?9&!kR>due1dN!v@q*!kM)w85{ltB@_*JOBZH1N@Z2r@>k#i50OUe;t z)htvhN-wmUi?;xJXbXuL*LcGyY{|F`gZ?)2sa6^w+a8S;5~l(o{nRH)Z#a1&YUc7n z^H(}owA1tV^tS&VZ=+rA7bTgAl&3{vCFUYVZyiwb&Y(Z zqfYlpZUlxR1d!%cu~sGt7z)fq0wfM?jAR*OWQphuCPX3fT1$;*UFdOVMr(gdi--k9 z-PS|z&!vItvnVEm@n=lSEJMPLR;)cu+orz>G)Aef<+Ojda20NB(9EfXdtiMa>_%vb zoC9dUTO>5Sa(*<6Y=i68sx@MEI9G8~a@8KMM6 z+j@Kf%Zd=0B^(Nqop2*~Q)(8nxC=+8H8x?Z4&z%UUmBG#Lpnt7JI4?q*sttt#|)}+ zK$y=NDE1f6@7RzWqwC1Y(sS^`-&RW(75)nPk%nanh=XE3zVJNgaD^vlo(fp208ol4 zRcHD;GD`lv%!mlZkuyRfO5r8KABu7G=48tBTLX6}D*jR78(r4z=%yE8YehrZG1zIl z1as-dArsB?M^+j#JhVUBY;w$%FT(CO@U;tVcN6?1=weT^OCJP(4;vZM76(M@tg0aq zoKaSY12w&%8;x{TcUD~&8d}M5bUs&d0(0cB;Jig$%{-NuagQ33KTk&R==Nj?wYe+c zE`pEjBd(<$E~9TbnitcFmpE7UVWFq|HzwRVe7xt`t(1XaVCM_?5U))l^D^p|6B@sB zhebfWzfu^r>MkanIkboT!gtc_N@sd}LKC0hO;GfoL|=GpY9Z-N)&+7pc3{I>P50Qr z`dKE{*(pR8V*bC@SMI_mxYEyAeg(Y;NV|HB_vR|L38b5}*!8O^-y4TD~u-b1-~ zOkb&r5IsQ?T=Fo@4;Ss;j%di*YXEvbFkuojR9_PPS+UkH$L4+f8?q{qv-{#@8z3<};bD&PMHpmX1trKYW*KF&A6AzZUXvQ{&ZDPJ<%*xX6z= zx1p7`-(NZ+Qan@k4S*54v3w`hqI%P$j>}-#AJrqCvm)Cue_B;}W@S~FA8}KoPhqed|r6*(l470w^Xl@69yYAHs$5TwW zyJg}GwzH?9lZwL3TCFSRg>3O}(Z4fog`$rd4;64P*wO+`-D%h7d7e=Uai{oA5oe46 z093}zip#Sng-g3LlT4NT@{`HKnSaD0Vj#Ek93k|B-Bcuyj*uBH*eF~y<(&3XdI(k* z6vFf+TA95o)pfK!(AAKSly#4{DGV2=Vtdx(`Xrj`foz1J^Qyi#nH{WjSy3Sjc}>k) zbmRB$qElOxs%ZhoVldkZ=Nz{?pnYI4jmBhFh{K2}cV}M|`xE|99na=uhr+L9AE`B4 z=(;zyhZr|%61lR!T$m}z7cfb7_Z|##<4AStN(+@oAojlJR@>aC>mILHe~&wiDGs%5 zeh?;|Y4y%$Gmt<~+yvoR{*iIu$p*FnJXYv0&lf8?%=;SfQpdL&=0=|^T!qJ*?bln7 z^0KIe+!Xyr?YmZm`(;oa);=;zL6tS}?1EKu!zele%=>t=DU(h{-sIM!w5?en@&?st zgC#z#l)6{*(4{){+Y}7+MyQeRnLB6vqc65;jDFgn_&#snf9~&%P|8q<7JooJiPgk) zi`Uri>Sp3zR-I(Fet#lnU`9LYMVl^4%t%{(vOnj$mrHZVZW(-e_STbf*N=7E=k(}L z*p$5gd7wxT(S?&52xuOkalxRe59S-CNsL-mDOVWe!BB7lxn7W_LSE4Ot-Tt^3>Ab6 zhXwktc@1gZ=D(X>PG?cZ184pTsr*uy)AM;~&n-BSh5JJ@bJA)@LMd)$4wkv<{l0>( zEU^9R-=-;B3H81-OCS8@C@PU8k-_TYQ%)AT*@vZLx*IY0NA=Ukij26lQ`>5j@f{&AKsiGb(uWusc~i;m+~vb&l6$ZB#|fY}00^2MUSJc|{g1k`KB?fInU+ZHWONM8A{ zNrQ*hf(qR}YaM5}55DEz>3D%uVWw}NgI7DIfPd=k)&(NUVnkg!NpQtoNTRoSi4T{) z*U+%$=Ix!gkqNh|YQP@}D)FkWJCwF94F9fTH3$LWNYB_SkqK#6o1i+s_J zyWmn1W#X*1UdYpMWJ3B#1x75mRt1!VQNjs}szPnUR!jfTyNK7a{`Z76Cpponx+H>^ zVE06?4+|9`!`jFr@$xK@kxvK-RCua$?n=pa0K9YI`osl!_GYd>PWMK`GjK?99&aiS z>Ziqw{UU7ekJL&%mw8&<3L_r&N9~n*8QPvGH$7FouV>QbRb>s{&B zJMC9$4oqRg4FwVaribo@c6v%R<2^>6O9vbwW0{tN*i#_41Q@<)V{Jqvmho}Lr*m>M<{?yjX3jq&&^FgnJ zY$OzswiKT16(GlBXWEzttMP zxu_(W|Bv7b1|KEu$82sySeTbtbav640-jvDIwjYmw$%FMwYIkNK?N(6!Whpyt4Fyd zI}E%3TBEHTf>fR@jMhIl@V+22CH~8N=87eaG+RbyhKtomS1PMS$DhJ)Ec7aD)@u=e zw4KGCG)w5Zf5MU)@&jYGQ(oaVyeVOWQcJ}9&=EHH97w6mNQPinqpF&JACi!=Ed?{T zsBjAE&tt%)y)?Yb*Q;CZh2imwQw03U=S56a(cdxpxqouo%jOI58LWMmRJ_8WLtePD z%T;I;K`a(qFROZcYB#OH3a4|@0DD)d3|Z^1w~&#yFUKNtStmqB${g$!uJA-9ox*`&fAY{rW4lxt0_E{Y2bNgk1)qAme|#ND>7nx%10{RF>{>^XPr!biM$u7*_DC%Iidv& z0W4b=hd)$TH!%ANpl_9c>dXDdEW(uMwxV81A{%aQx$BKs|SBYZiRQ7*rD`!-zpNcAz7TTVaO zJK4&@WnZbU|oAJ_)9{|9mDtNYsoqHf15{z$;7Stt> zokNIPb!9!+`?FLCjN*58>Q@9qO;Z(h(kv2K19v7~Mm3orPxxsqd!$M$%FF_Ti9*zE1_P*I(t`X(~CfLY^CaC5|NW~CJMZ#zup?6lGYn&U*t6ShirQN$n zs%_61FE@eXFnBRgv!EtFxTvGAR0mmJ{XtS2Vaz3pAq=ZgdVT%m>1SGvQEy*1Ypz3J zBA7_wfiS0&))bERT8!DB;F4bq48~7Xq9w&l6tX3O@sod4p2oHE#0!bxYCuE|GhWj# z#jQ~9zCvlmMEEbHU1s7;O1m;Q?k-`_(z@2&bG1MRY~ps9V6TKv65r_qmQ#DSVg_N4 zz%QpSg^UnBIS*PW;I&IXF;wIznoJNMgpOe-mvvl1zCd}yxwbu8W7&b*IO4zm`NRWK zpj2bux24&@rz(@tDVp}fA`l~!G+Iq3Oaf9tVVZtg^2f`|)*sn!*=p6n+htDwvR2 z9li-~Aqim`Q_fcF@87`>q8r?#ON{fsG>H`&7_@2w%o!Ovj&zaTnIYpygQeeR9Upfv zLBOoOO?c?W_2IlK0@6C;*F}^K=Kf+k!C+07<(O)6C{)7U4x`OT0he3_w)Rd2 z_Abl?CW+sIikC0}tg${rc|g~cU&)VoX|3P8svsQiDR5z=#5cj{Vywh+61#%njjsge zGz-b!m{uO*aM4ZgjU$v9v5`;X92`Cvo6Jenai^(wR=Pr#e+R`4Db%1r? z)(e9l(XP@VJoJ|h@7E#;t?E7u|HIfj3<$a zV8yu(S3tFKHiu1QX>ko<6-U|-qJ;|X3usb?Hb%sMNNloZ% ztZ`AJ_i!`u8M{<90D#+#f7SNJMu0P4M+){_SUl;#41~m&*B#F=eF%OZ2MJ8YUSIP% zIV(tBMcInGD}GfJ3f}AL?v#on6wl`gUxeXK{m%bQXWd%!7jK z03{-`2md&v_IXRPBaF2W7^-U0Vl_@q!5gl_-IH~^vz{3yinQ-Ztm;m#acbFhFYnQ` zt+erulFARMJ7LV5Hqdb07yj9V_0|xWH`tm-PiXbk(8|lDCkl23$;l#}K~4+03O}DT zRP*yedu~DbXqKNdQw9jgK&jZqui)8dcoiL})DhqYoNID}$;=iwdiQg%(dHZ~z~%;@ zf*?zpbaSl;iU~>92h~KIdNq2IN_VNdVQHu~!D}iYW@527f#rt8Oj7VwiXaGaVf-(w zK5cDO>=P8IEn(HQ=SLQ1%h4DW=_p(7s4W#H;3N~iNN7fEbKMxLeT#?rj6Z8QPjD)+&1Iv3MQ@0ASvnF+~7oXRaBjfX`HT@dEVB{{|z(;T>I%E_*+k$?6eqn#rI! z9CnqptN)c*tkei({Et*(rBv>tw_C&`sxuHy2&CxaU{bA_!74<#h|&eD9T99bV4k0zB!TEaWSVk=6EVnKC@{k`js#Jge;jkY4d@sjGz3@I%2`o(YL_58RaQ~8#UsMu0{YUg9W2#^1WDPf ze3id}+(qQ|9*K@i2PN{RG;V*P;wR#X-bFoQ_ta3|7k)`r-(C;Dh&>mXg8ndBb}(=T`9D}iCV52jVMQI zw#VxV2+dtwSy@U)Obj~Srbq>9`hV${x)CPq_?iApeZ0- zT}*Q~a$s`}?S*7>|EMfjT3>KHmo17y>~5Tn=*LMnux9Su#HSkQ_6S2_|9Lb{Pks+n zs5H_eq4i{@^X)P*U`*q;;~eaGM?rx&P)s3=)PENMm>%5t3ei7KHi%_G8jK|R!Ep^* zer%7RDW`b4-%cWb46Yh*W=gXqf)yM}moZ>zhOPd_MKlk3(v)8)%7)dj%^{&dm7ofX zR!hmtj75Fm7CvO(gB2*km->#RSgxjsUYPulcps=6hz{v8-&2`jDpTzp3VBj{fJ|46 zP%cq@^pq3ViQF532CV1YmKVaE0B~{GVcp)@J&O4gXk*eCa!U9^{-CXSLrN+&A!^;L zL_F_2!TD#IJABW9RH$Z{{!WSwA2;OPwvK?#)lh2QnG&{`YHR`8)O(q>R2(Ggv!se1 z zo?Jw|GhyY}oj`VG8uq!yQ-5ZCG64|kSX`#!AXBxAcy9%yf-!ZYz>#5nE_10duX{o` zbSpkM0f-kwU}dShNr-fz>8zmdX*~~x&;%ep^pRslI!P^puF!G`B+b}Xl9|>yyWr1@ z_CKD9-}92IA&9X!8@PBEWW}P!(nxLH8*F|t7EEpf< zS=xR)7+?ghqD9Ztqgll4wPkUVi4G6V;!N9qp+ILS1zj$Mj48J71-xh*FdlutcGrS5 z7t46VhVBd1<`|rGwyJBRN$kHOWP_SN+3H^O7flL;#QrRuMD%ryD=7VxFw@srKAQgV zL;84EW~wR~L>KzGsKh4QRo%CfKZfP2X@Mq%W2;8d3wknh+}W!dr5JR_k^TkF4Evub zNss-6o4(r;>1mp>Xbv(+1NsxX_~#mUO;A_Fu>Pr$n?^%%DZN*~({iE1032|G`O(vh zUWl527nIyVb5k*vm2=~J8>y+eR6iNX-qc(1yg^Im4CPm@%+lYxy zuCjtix6g&Fs^!~L9z0jLbkcJ%xxeug69_d`rq^NGb&H`<}o%8J4v614o(&=pW1U}k0JI&=X`BEuu>32BB^qfuQj9L94 zw+ayg@}1L;Z7K*HNPTEcm_fR!5**pSPfpWyrkgQnP~0zTFFGhC?(;0KrNgYh!^byJ zp9JYFa7Lnq{d)Q=EfJP0 zrM@pWcsM4#KJo$aZ3B>|XaWayC zQfZ84)I6f@SyAdTYo)ltvBdr6{WHjzRADA#(j&P_a?9#s9~wmSHF>-x)qxqd33HbK zp7z2T^$8bJ(0&>Yozb{Ho4R)cpX>?(>RT11zy&a|-eRHf+afn}e{B?VJ6gjO7IX45 z(t*jC=g=~A*?A`D!SIrW$;#F2C4>wh_{yD9CNFiO{N+37Y^R?OU7<_p&on4Q|8@!= zUmx6SF}g>^glwpR_I-_jbd!+#2Hh+C_W?%U@Uk@}GDQj%HR{@TkZ!W3m0*-xHcOtW zUYU)nvlz9`@I_fqztoqnOwC72{TH>lUt9lc*uxg0Oj>%P!6jf^<&l%lKkjD5vh#PT zoRwh@s03%^gT$7<79L7dUsm#Mkc)|W{71cFmWk45;|d;Nhqplo=FG|(Z9jGjRVeVH z7%1QPq1||VE;0gS+8ctO3qyIyrTrf_TI4+bOYWNa51)ReDo%)T`|ojlVK+YUJoSBd zgTg)+=P+36;53#i1b)>1Qor?@%Ma9Z9-zqfBD5px5CO>G7+a*k-6+(CaH5##nvbWv zBd0UUf-SRl(dH?*A}P*VjnQ;hQ$J$3`^oZ!mMhq0)Ehj4UIYWe!ZO!v743MOfG3v? z2>JqUwo4Ce1oWfMQ|2UhbEe1aGUefa8gCD;hrc*HV!hLOOZDA0ny%VN)G)2uga!!D zU<;(mSBTdMun|IpKd>{phlQ`BYriz*NkinH738-pmzyGavA|QnU-?8v`+mdd;nQZ; zlpB4ORSM(g;b&cJAzE4r6@y7lQgctVpycjL_p{0`;BsTXkyF450K++6yYUWjXq4Mo zT;jTNdbr@+M9e~lT2$AcV=UN#II16FTZU#;j4CpjcL|EwWQ=bT&MM{zT#P<{B| zS^^9DmDbU?A%N>Y&{SmId)>Fd6#=#N{u5clY%`5RR{G4eREk?ONL~uT@+s)ATotTh zP7{ua=@i+3?8AFVpb>hVdO;VvWi=~V2G(BR@ z{%%wkE|{ImTsS{|L1Z2co_abj(a1hb-whVe%M`?gfX~VC`sqKpY~QC z$9arSw=ubZYbmm3u_Ss>#bUficcF}p0DJ_km`tH=;_m!&PudFPrKbHwucQ# zvC&%4mL<>{SFi@lrU5Y!J%zfbat%{NuN*rB!E!@=7nV7;!ktbS>Arq|>QVJ-nz;H; zY=xRI#a=mf>d;B|6u@S8m5}M_B;#(j$T0t7iDaEeR@^pRDyr#t#1=EsZ0~F=1Nh_H zlKM#(lh|JB^A>gW^bfNgMauCGOO$L%v>xfOI$Ft8?;aI>s?||pvKN@Ou!z?72l~q> zkFn;XASyuTnCPEA>{hz|l_CMpuN*%}G^BEq%I~GQfqqegpx&`zb)s?j>cK{!!B{7< z!PB%x5xBUVG71W8#p^=+$N3f!BHWmR&nq$kaR+$d>$h1CP${7i5L>;he}S_94svKR zq#rL;E*WIRXL9uUPg?X06IFx1dE(SW%M8SbioVKo{B-GgsK=j}oJN2}wZPsuQlF&J zK^F>Ya^}D$XRmNmUV7Ubq)>Fr+&AN7sCx80L(YTSCX^Oj?E;4y2{YI0V1uA_ST6+a z*h#y1i1BZ`RTTFz}#|PP>p9F9N(+&keIks=#Ae^C%oI?Yy3(CXo zmLJ0W4H5f51AI?{*4tV~IwN-oQ6N3pxM5Aj?4aYbhk%CNu?OwPwFM zB=pE<(2n2|nN#JpL1>5YbIIc3^Dp*-~@^Rpk}pcUR-&} zA?+`o>>+gE91k?{6s5on?e|*o^HD1gH}9wQIl6n^n_oS$YJ`mWW*QzxNxo8odb}?qf+D>OqWdmzRO!fY^|181&QVqKYXOh949Asw#%M@Q>hwbDgD^#;D zSF}NBlU%Lhw(k+;HD}V$YJjIG=q{PQ$DA#l&1h5?hCE2&ytN!tbGHbQ!=a5ZMxAYK zSm#ZFVpGKLy5Z#JaT z=-#-0INY`^!ubzTPsYcPCB%5L3$gqn_-^7&}Vp}?y?2uv!V45n=AEHIUOH;lP0_}A&%GrS6!LG zds#E)y}HS@(U}>2+L{aBw;?=ii={PS0YgbP?I*z{p}=pHmSazzUEpkaOF>SY6iTqo z(AHiAK0tv1+3$Ipp01|vo#Gbwl_B<4rhRu18_i9S-AwF_1T-f00$Lam7V&ux{eo0l zU`om5zKq^if?lu1_PTgKE9qU z8~XaxD`}8KzxmN}NVDZTYN`Ow`NCEx?m1)8qcGP>46XxF;v%oVQ-B&vIFVXMRQsN} zzpd+P=YoW0)r!n4vapFmqI}#WgBhry(~`6oz=DmwYAy4le44Z`!*lM+JUzg8W<4{> zednkz*<~9L$mih{+ES&MLxIzn=4T$(VF{-KG4r{sd=*v%#SL#o2ms1Qq%3x}^+)S@ z?ghSNf53J>J=viYY9 zu8~KmbdVXX4~0B-QZh=$Whv^kfHLr9Vhpo8V$HnQs{(f?t=uH{cfRzny@QR}-O z%;?UP;-CSLDYZaz3}XE03u7->IyDqvE@lM!`ng|eCU7PC{9MjoVlnfOmTt&we9Cil z)AnUqzAyZdiR%a7A_zaiLP^pTRZjV~SARsEzXb4bf{cG$fa}pyyM!@jh+s|;gCE0$ z--n324iI}BAoV$e7_$EVT*${sbPtYmx_jqQmdQ9{F3K!pQfhL!qauVmU8hwYtOEf4 EAKW~%!~g&Q literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/connectwise/serviceboard.webp b/static/images/auditor/10.8/addon/connectwise/serviceboard.webp new file mode 100644 index 0000000000000000000000000000000000000000..9724933eda014ca8db50bc71503162b6f1d35cf7 GIT binary patch literal 58806 zcmaHRW0+;hwr$$BZM)KTrES}`v(mP$O53(=tCE#jX=A@Sea`LMefoZH{D?i~w`1=$ zBVx|EMyyy$QsUw@M?gU8V!{e)3Y|CvAF z83=F$_>DG5072Vl6+q!L>l5@HvtK^uGvXucjqy3}7O>q-`EGvH+v#rzp#7|UhrH|^ zoPE;Y=dFE}xXHWe?E(ZpV!l9b3QYT30f+(m@9I-m%L1c-Zy%GNMW?;Ty@h~$0Qp<* zC+QE&TgD^8T|gxu4AA>Yd04d9y9)RQV1NBM#4q=c0@!~hJ%#OIt}v$gSAOn)iU8c7 zdj%K|1X}$r{T+Tg`Sa9&%D>#d@bl(v`_ueiZqE_^@Sg=N0(?HM0QkRc!e#yK-V6VR zkM(=E*WH)Acf$QoApbOfHGugC;C&T{#9V}50lW(@#E>U_eK7` zw?*F|Z%W`hVCeJd(;86wYX7h9rvd=K+jr-WcEHUiU|-~s2Qd4(`xLNMH)f@@*M(tU z29uQC`@O6-U6MmzJk4iz7Hfn#+8Aquwg3#*0bR}txm1l{lwMNz>dHG$wl}*@itAtB z{?X+>jZs&XPufXkEk<*-wboL$AGtujzm-3gv75BZ=gAc1(H?}>a*^D1+Y;qjLusRv)B4O2lv3oD}MyBQ&}pyt`(L%nHiHkD* zQc|lBAWfl3vG8PqK0HH~8Pa>56FJI!8b7o--pUa6=u-px!1nG5&MH~nnfLq?)Fps6 zo1SLIy@kPvw^rC{kw%N5nTi|9wgId#I~K{YzXfI*#u)G&BbHYq2Lw#v0Dl&x3v^dB z7$&}1!euBFzaHmn*wS8)+Pm4n5!g${pYXNHN;N$+bG5$n9wCZ*zC;RQwcvDW^&`_n zJ)S@r*UFfZ*2Hx|qFfnEWMiM2n(EWs;HqSrR;^Ti0Qy>jdK7XPLNO0}Pm5|-g|E8M zG17*~@_8%Dqn<3k;K2i{&^ibq!9zQP5|cvroAG)$Gbjg;mk%8ohz85%fI* z7p_v@e`S_qVwqZ(q1`y4^rKhqK@CtYmON0ub*WgWU27>iGV;4lPu#m_mN}?ll*P{>0cPVMO4iXM>C(MI@tx0^boI7Tc zX*?>Ts+0)_WbD=qMA7B*6913D$>(A%wFX`Jm7wAlY;J51tBb6R0CxLf{n8-GH)A>Q zLADm&5Nh0&9CzmQA<_RYII^-fzZXTvww&4nDPh@gjkEnkM)N0qLlT_Fts7a*ht=u9 z?KsDMCL*t{qXq>v;Fs!WvFYDB59>h|U#W1${xb^xPm)519HEDai~S4N;8!lkxP88Y zeGm=Fu7}EEV_OgUdkVB1)uHuk)UB#N#z7^1QR2XlAFW6vacFfw+7X6Ih>6!`48+7Y0W`jYOQY#Q7nZ zE8#uw7uT_{-$17xX8b6wkssZU2V;j9A=?|P!qXmm?2x5cMx2H5a?yo&(z7a{* zSXx=_!{2w_KFqy6k`Rmh21H3w;SPS?(O4MCvF*4bRqyLROVhvPcSwfD4}GtW8)9Nq zEO16h91>Q4sEVQdX>>u9i0STc*aiHa1HnPPym`uSkK+6`fZc+kXnbTo^21o&vADFK z_B?p*tcxoCeL$viDi9h$MNUfga;BHj)s{lDC?aWVoXu$L`gZNaV6HD9J!tAYKg=Yb zOH2(h6WOAY&%S33p~HkToPs;Z=^l-2@0d9f&^W)Af@6z!=0{GhFcaX+9C#8S`FTv2 zhH1DxJvWHkBmglR=+kfn&ZHuEt}3=6O_;6pQA{y63o*BJ7b$NKk+3@USXDB^fr$ma z*Y?Q{ZY|v~w39*@!j(C;W~4q_DoBJ5Ott0==3#@?pR8J&oypf?X>Ln)bX$~L$|@5+ zoOQ101cC(raF2OwB+^s*N*DVvh<%buac4Mt6g2|6DiK{O-9dy}W5bo}mAg_NON@gL?N3v!*-N2>a)i9+|O( z@0F$eCc4pk?AJ7|kVvJ$R6o3?lnjIzOCosSM-48e`ec_>MwK5t?2kd|Fuxd$TE1v0 ziIo^foPs!1z!B{P`gy7LZ#1|N@RunkUu3ytx{6|x13&Dwg03+x1frDfBm&!|Ih(32 zuu~c?IV&q>2(E1YVp_8lBbFO=^N?QF* z#pUdtv@s&1RB?kc%Tjk^SAh&93k963a=J;PVfYyEek7E3xfookn_(d?uA1W62Q7bb z7thM=w?9Apzt#BP%wiO%K@#3s2tknDsyAAM-ab*nIfitscL9@e(e+}*#jyl|lk$kf zcA=~%g-#?@H&x@Sfy38=3vRO9>x)+H`BvCxvKfCh2)>KViXlqP33J1R^`Y68gbQF| z3rAiouxn+bO72nG0AW! zsSn#V$ht%E@v(-XTt7Zn-6NW)g%-K+i_f0qXco5k6>Mv!D*;<-xCO{3QMb=wF*VrGX^3j8g`8npcEJjW#LS;xzZ3e>H^vS81k)9P!<0` zEuovY9l7TbJ%zbD3lrR8NlhSqK82omMM5R7TF&CPy_AjhL zHfGCe7YvO%UGSYS@q;TE+JQ8;g?;GC1{H7v2vtQ0zv5GmZnrN+ z=OQ07g~`4nu}Yv*z07BCzzszS8hF>ekc2t3F~sj|^?bK^Y=HFnA06=TD8PWcaZ~pJ zzNlz>zPz)`dQmYp(jvp08k2wMKgiS3>aqQ0&*rr->ML!)*^FhhEsQ%QU%G_Ev;9}} z)WI=hRMclHF-Gb1nh&lUYm*gFTGyGM1>o30e3 z;HoObp^Ds4FU+>ZB`R6;&HfIf@x!4ymXl*M+B-O*@c$re;Ehj$;6M7qH2O|p^c$?V zl6_q_aMsxYAI{*iGyHvMHm^U&qeB^jc=d3VGMc~Z6UH=$D z5z<(p?{E%=M{dxFnOQ={C1;X-OVAtc1LyvE_P9XKygci~DJvfgTR+isr3QX06;qa6 zMMZg8?tkKqXL2g~1}1kORhJgCd)#lhz~D1@CeJD(wS#Y8i{UV(c&|Wt)$`d`x{mN^ zo)1yE+_kE(2ff`KW=E^<5wcp1OolAr0yg4?es^S}0=_T__Y3^?_PU6p+7uV(lub!1 zC@D3j17!zw#{WIT&@->N)cMu>ttTy(Z_qt&oVw+mR(2H`=gpLoA?tm#u14vl_zIvD zO#@+$X+5KrAwZ)tAoM<+uUe6el>}2)tBwe1)11yQwbCV zIm_p}YOk%!J=OQY>T&6pP60QOeFqtX7~!or)*Plp1W%)p1%*s*BO{1E(@@`TI|cep zxW`k&>i7aL5cLZtkIL^7x-V$tDQh zl-%Vi=r2WA11?nm{xY}uwA1m3ADg|(rW>hz1`c#96x7EJAS@Oc^gCnZ_pW~CI25z zdbDQY2@9KAR_uU!Se<6cW$ejvD} zDk0iiSGO@A=${BwfaL_xb7IYi8tX0I<2(Mj#}cuK>%X&8!*B)2Y*;LC00>!Yn@$#Q$2Mzh|P>caJdG_rcTw4Ma8a^7SjD&cWN3V3m?J?mfdAa?L_x z7x2WC$8~!jaJk~cAe_wFm^*Ee^Xro0F-m(nPw#0uS1M6I{r@>aAi=VWU?K7dRy_*} z^sOU3BP^nZUzkB?btb>7%zv`&kCJeP?Ff{97E(XJUcW;6zEDLHUd_C34FZL^+rVnh ziWfdMKE5K3!S^K|Y2tb5NNdEl3A4+MPy(OQG<+)T3DZf+8f zPg&Or7>QO)(*_)hQ%zO_Zi>)MR{+oRkt{#`!#@jBF2CKawj)CD4g7amB_ZJ!6gff! zSF;ejnGF1LZbIyVr>(r?R@0DOED(Ie8R0f8f9%FF@6>viWp8tt>^c{Kc#{+WuokDT zmnsto@#Mw99odH-pN9T3N;5K4->kjZGQu%55)ho2{yD;)C;IJ0zN+s<(-P2BV=-Od znX}FGoJrNamrdWDVk%{^m9YX3#H~mcoEw0F>S{(Jp|x0I%kS&*A#?`g!?G7?8~;*D zQ5lxnkWl`4k+-c@cbUi9)_~xb#%CeUwI&n~xn;pY+)F$;G8@sEN+y%P%0=wm|8pgh z4)};08vVN?;>vVOiPJ;C#VhuK;H4#~fs@p<;BgBJp1+9KaKv=#8jTA%T>Nio{LR9? zryl;r&3{w2>_H6E_XFWo2mR#EAuvYFZqAg#_k#|9)p`nzYP>`NC&QCkfKPXvtAzW1 z!Qz(w|5`gyJ&!64WmCz1B6fPsmNp!?pBlA7+2K}WF>o6lp53+vnzj=Hd9R7kd<8EB zf74%6Q{@TJ0)L&#KYXBK7a=Y+vDl2w2fB%@<+;o*bPG^FBuW@@42H z{-*})V+vD;6E0%}kK7c5mKAkT$RR=h?B5ekWgh45-vj?k%Z410Q}pBdPV2JxGrdC+ z^VxNI+elTxqiF5mK;|frh3tC1-emRCdH63YDc!in zu%#q{-NTJl;Ik- zJ*F!9Oj#0;7tB&5$>=~cJZ|e?x58ys&5Pqq^>LIk#upD7q;Q4{$d&kXtTCWYnh+i; zkDdUZ<4xZ9>qcRFgEva@uYUi*W8;xAb7|n{akZD}cMQ!Pa1pXL)x}mamjCJ?n|Rk> zRs0`(8qCP-(aG~|BRTA(6fZ(t$c~0#)t0LJ?r9D-tl4yn?K0IW_sH0qHl}6sZ$EbR z`lrw%sSn(9YWJs~87&dho_ei`<${Obg=iniD0b-g?wa|6)J!@pWRk zQs!?%`sX2w?5|rKi*`%Y z9A8LOjVn5z^H8goMhEbyWMVj*pDD_W+NTEVW||qCfQt(lti3HQ?Uu=j-CCM~iJJ&#Aa1X&B1QJjo1B5Xk`5}h zRvhsV9tcpEKL{v6j9UBZi=DZdgyKRSe>NxFVk?DOGkiU;AeT2MePk;Sky|2sM3MrL z^ap!=D-2lIGw{S=C@{%D^x#dvtLnI<2uNPdV!G*ZI9@f1Br_uqBYeDd-Acsh?L8AlOw5${+&6gG84Bk zSom@%X-3c;=U2;C2f51t8Ke@*5@#~<=P1#{i@finY{2#u^k_Zhb#mWhCgHUvf|fZ< z{YQ!(tk5bF%}kS*j~OR2SW19tEc)0APD>Y zg^*rzy^H+x?Wpr6UYjr}#jDZIhQB!9ZJbDmWs_I|p>31eY~C_nD^_l*2<_MaX-4SK zM&pLXu*B3RtQKh`h}o7Z)Yj$kX!@u{E*^m2a*e&&VR4tCOM@vZjfnebC8WTx$Jc>~>y5HI@;~etBxrc$+OT4?y&0x%*;GL`I2(p=~F;iQ+j`v>b z1&?V{&Oq6McRj3omg3&eJ^K2JWsu$7msx;dMr$Sxk2In8@sMu?PeisBBebO5{0$-$ zpFj=WeE0s`gQo`^8EPl2@4+;0g9zhdL`oDF5G{!~h~+9*)ANw5WK2L+>6)_fJPM&} z0b+a(!t!Y(75n`W7Q`r%;Xsy$v>hBKxdU^~KNb>&sI|+Dl7X*|klOhOK^5z1Y0$+F z<5!ZhFmTY$N>IJtRn@1!-ld8S+b2YPKH?*0`Oq3}w{+;6Wj+fbcH(sJ53(Gw89%Ie z!7zrqhV{)sLy3iDkyRMINzjuci+LvwygpINa1;yCa2wBguvW!dg{!3vnQg z{I9uhk1t4RQz6mF4|*9pThmUhJnOLnM&b+YuriHtY!*^Sqep{ZnVvE}-g{I(^KgA7m2IjEV%NLF{y|Ox zo4;h#(6{eg*$hJhiFqd~o={W}6EO1hDSehKTHxOn&~h49xfS7oyD_3X_^32A8n0526781IDS6oye8sjEP}7rr5IDwqNJ|rFt-EQ_hI=H)ubu+q^)L01A>J^_BAwfO|syj&yi2d|uaxW#uh4B)KDB-M=m$Qi@! zgFKyXPhg2!IMyrXf^G|Urbo?jJO2nA8i6?FwJ~~V^#YnX9=lj_K`m_k75L!nt2oyp z@vGVl)-1S}0H4mARVFL@9C9swMbKI*O-Z0OpL+Z<0*e+~6Z=;Kcr=eKoy(+oiz=%U zI<=sd&6G-jPr;;A#6^s*jTs^_vQVPa+b9+%)<@k{vCvOCB=>}+DT|JBT`T^>2~tFb zvOBrJomg;_JUivf!nIgrs9TcMp2_U3;3q!RQ6*k_qB)%wrJ?=BXvm;wHWk_1hshgI z805-eFyd)~g@)P&oK4tP>y~QOU`y-S2lD9(-D79PjGa_Eo1zD*E{h0NtGo+=Xpormo1CE#uu&l+dY7Zos$r+Ba7>o?J+x*` z$>s@LKf=QT9ksR+yG$_`byOiMsJ*?PpYH=|)Kk8h3OWJNNHrze;7Pje^x*2pz?F!CCvI@k|4PNk^dD*$^qI_;HVILk~okO|?Wb zT&}#iuqnS+<(2-RqtU9wYt3@7uE7`JZIj;-H74@1uF)O9%`tfsvu-nzRWzGt7POc} zCEw;bj|nRe2<6U)*@u=k#2Ub0zO=$>*VY}EjIDx=`H-4AIIQ4?HdOq@-%WoqM&-m z;-uRGS9deP4}1KEBl(Au05-p!+#knbWQsMXA!O=%wC!#(NR)RGG4vmc5+!aD&^7w& zx%UF6?LH);?Jj3@L^uYD{NAcE{ps4WV8|>$OO#tPPWzw6=njk9;potP9~EM4)us1K z(VUA(jkuYTkswefWnowSV3k!pb|jDrwYW#Q3$^=Ey*yn&OK|cfj!6i2%>E@)OGZs7 zrGlmYQ98lt-wbqK7X@0P3Wce>u@WKk+SArOxD2e|Lz^|TY7ETSGvEEKWtSYMuke6l zUY0u*okf^@Xr<#sn8v1tmEzaw&fqIGlxfz7K zXUm5~J@H)CP%@N9m8S~6 z(Mu8MUnES#S$&sXP`PI#pMb?J(QKQ`QegS`jkg7f)x&FaVLeGCye?NdpoK<{ zvb$of$>nF|m;vAlQUz07{=%Vp2`D*H4I;k9w41`>9$y8;2to4^-K@+|RAA=i2|>WU z4c`hvt(u#{kvYDldJk_hg;U2RY>hOMYN9)B6eTGrc|tsuIIUUf zi>4fFEN;$59-#qC9afF&zKq!Eup|BOjShHSqfu}7RKrwb6;nk)Gpmh}X1u#hJhY)< z_Hn{~k!}5sR0GoP9KZEYIbvkxkeRr;1G<&n1D0W1aja7q)0KIq(CkMT#ft%ZPBF{l zJzF$m=|1ril4R#gPwbro;j(-JcN!Iu?kO*AjUPUR)$CTZ#xz%Z{&n6PA4i^N0Zr&G z+WBHM{z zXpbLM1rB@ELQTALi59A#%d=3M+sZ{fpVzPkN&9+oZ zqRqY@nL{5E1^q79&KTB`1Zn@C?4{{|Pa1>{zbxp3Abkq9Q%EWSS+apJB<{{P?iowbf8_;4{Aa75A`) zV|_e2FdZ@Nq!oKVqct}`4cR}(7z+4QVkQl9C_{14G`2mW-~2%YHlB@Rd!piR*)tAk z@1(uVWP)5u8w&27M%qS}-vo@276m#M3qvD&;zV0UGE{FWO)#%ZpdC3r#z+RmKn+4_ z`|pr~6IO!)aq%b`6|r*7;&A}s{L2emnDlo(I*bXGW+6O_pP~4@?+2fCzv_xx+X^s@ z#hS_9V&)ev9WPx@qD40h()Dg7P#-!AnPwuBL;CvF@tucRm*88C$VV`n+p<1Jr9}d= zk+@>rP15iRW|+_Ji1ICn_8~gOwDc#)V2ARQ8D+YM2Z_qYvo%_v38APl<#&}1H$p$+ z0y$>;;4<>M5XQ7^z@ZxUEfz9kw6wbYh+{cK>nQaCYk-C8VwHlbAQ)JCG?GtkM2Ax%GD2wm3X|jPUZJ*{1AdnK`-CR_`O>LCM9;=)xt%F{ zGDR74Zezd)^t!S!qcxrxOJ?qQHmtg zb)xV0*#n~HcE5{_5yCig0I-avM z5vyrdp%qe3+z_=PLJC89f>2@Y&LH_J(yx~{E$>%jM~o?Bg1CX7khStnJOc{Zh5d~L zL$@Y92??rgOn76WO;gJ=L}&^;5`to2?%)$AF77E;6Cq( zMT5>At1HC8i;RIEM-k_w1rU2i>!W_zp1sIg*giEtEz$2lP3~^jZiUd1^9G-4UHgaX zbY_odQBG~%Gg0uQcddXm0;>DH@=g`7LIb|-nDaSG_82j>a#`6ls?hHjKRX4%(`J*-KVBmUqsXH!G&K1i;Jq<(FBcyRJ5`oy z5u60Ui{sa)yT3>FIQRo>r1+fXr*aP9*q|(B2Lo;eJ>UJ?kuK0!lGC_h(5!b++jGVK z!M0I8Zo9y^%N?gvl@_iCtsroY{iM9PDstY0kwk$ZdKYnaN63Ib;{1e4Oz69*-xs%9 zcYr|1os}!z3MyU;Z4f^Uc}j;}IPm3VZM|QQWOZq%G!%dU&X-2lna7umqL7e?dyG)n zOAT{cKf?TG4e@aZ)8J$fqvUeB7M-l-G8rhKMk2U=?}C%>!8z{5iOPWU6k$4G3l z6w(gC^dcjXj(UW1`r>LOGIN!sWA7LOpao%FpDsj`%uVALK&_DH8=C3U%A9XIOjx{y`-5LRwZLm6GP^spKaz-6jCC{vx;V&UP$gPpy~nd>Hfvy{j-E$H+;BWw zCg9rN=1FjX0ePNmnl7=Td_T|;2FJ7@}lP%ZJ^Gvsa+ zz^eDFADR`bbn+YDUC|q;(&e#VOEX>AJnRDLISTYZ>`O0wb#0n@!Y!i#R685_z<~as zqirK`gvjzvUQK|%z$z0xbfRZAqHG{2y%M)YfD8nP-Wyq8r#DWR&zIhW4wvD4J>=K% zZ&6qY0ZOt{NZ_bYd@U~O7MEEUzOU~K9jb4gA40c~xb6iv{Q*EgWD+h+$Q@KN^c}!XSd_V{T z`0c0o^@E9l7!y{V9H)fC2yXmBe!%J!gg{Nw3(0wF2{q6adS}l5nY)TbVy~>XW?+njlVxpAQ66R$pme zQ~)K5Z&O@}n7$&b4Wm`Z+l8$p+9s3Z3bBFCcd-WXQ#USc*`IPaAd4X=Jb4v3s8vnM znMg#qdyJe*uQ>m1S(ZXT4>3_WDbcE2gZucXR(i?)G}u~d; zmL2l__iJW5S&ixwR%FPn({?Qst2Xzl3jEpAG59d*?%fa8A9V?o*IZ0|?naB@YB!I{ z7Brw-nCnA)ZVQ(IriZ#>hW7WiYtAm+jt|H4-Gu`jWlyow*s#n>_Y&7Q>6LKaC5DJ% zKg&0U($isJ6(|Z0Oi%+~EVSg9&DlIs0i)zoy?pdyUbYnXw;+7>5%^g#1czzzy0?+P zUsvpRgLlx|Fpa#u`HUB9?uMw-UvJPU$o?qjg>lyHXDwPMe{S3!*LI{RpCXghLWjS- z$meIW4#}XANn2PYL6#b0vf81~QP*wF@)Q*PLN0?pV|$q4k`W&H>BoFgCWyq+4P~XvDvwjVGjr2wd#q&WF<{+O4d3_Re zxiuXWs+h{huYCGSTh@f#`DXO#SGw1LxXT^rkNSjq&{7zsNfL*O4Jo7u_kAq15W(379~%bbUE3^+@4)PjU| z+As&opw+&1sV7qq29=qa-$TN|D<-urojJOu3k@EmG4Fsf=5Rc~pDV=!S31_GgE(lT zItK|*E?br!t{KWhMy>du8C$0xXqIr;$t4{MXd{=iE5dHcxdq-rN zy)yOS-Ovru`XvYPXnS}FntAm-p|Ng<7^qXT_S{+b0Tf_bf_DZisvfO`{w=h;&gpvW zbvt6t7q|AxFt3C?qHFM70+nF7)g#ITqfm|X5@Sxf#pZkM91heSA4e5iH zhwNn7AbOoUdIJGLn!A*BdQW6@eovWNDJXaNeH?P-_<5j{4TiBS8uQ8Z*tu+^(i&NO zKT-0$8D_S`*?RVJv5E{1dJh4er`xdPx%kH9(l#ph{awl{YpbS zMa0otKmMhqA=+boTG_bJ;{hoP8FuV#2@HHMSi|WKd|A45bwqpK&R+kd21_r1Qj1diT|dgbzKRG#aHh3DR)uOU33#jIJY7)DA@`&Ki>xhCzO9=|eDGbRRgo#! z(yO~>RhK>C^|71c=%~Sm;C@pYH8M`ADNs2DzD1h4Z_vI;+oaU8W_Fbby(8jl5o)&_ z=F6>0J(@U0m5i4xEFhGCk_hKme%|ouvo^0nG#db!MxPA_$=##Q2p*H@O_V|%p8Lke zj($TnJmWDQD$m?;iGO#<2?yH)V&^MCdIeHkN@@Jq_5iyY&E5MhQk8h@oU)`**i*|v zLl88nq{!s3R4h>$SVtF795?rKvD8$Xm7=pBBEnZgy%5n28x?cu|=BY0Xc9{Oi zKppQ*bFdRVQJSZ@2OnSN&yb%B_C z1hS^UxDnt`bYwG7eoj4zONb?#1&c8`}@*E`C6=~58m2-@8SlYbKfs!7Sol=|{gMdNb_(~e+fTpS*~2SN{K$`| z#knnz1Lwv!@> zFyX0*DDq6B2UPySknoSQ?k$v1&&{zDiv=xtoXI2S#Jf#il8IF13TFBXz^JQNGjNEE zv@q=4q=D;s52%$=HX@guU-*#S?b5#}4I<(iRz1>Ir<lXLg0x2fG| z)s}u=&k=ec9G(g`f;Cqjl!a%k)Fd!C!KE58Jk_^uu!62}$tChLNnj^W$iQ`;--_G_UVp;jueVr0 z*nbIsLm`9p3QFFK$FBQyXN*@$@6jXZ;;V<-Qm9Z-`x2=B3RiYKoQuu|&Cm1n&Y=*g z=vEAiq9c{ls>ok0gokG(Kn$X>7Gtoxa#l5G_hmfW)6Nny!GiVORvlp!RaW9~$RRjh zs4&K_`vF4iN$oA;tp;4el8b|oBypI`zj(|U*f?zY+R*R9H5Z|C=zUP*4w_oJ!WM6%qoyyPaE9xi9@h9TlGjX{k*ZIH%@J`vpmu=(bRn zDK1TO{sjG&FN zKrnIgDK`ma*7HsZ5ob@!~Z)llp>U{R{& z`~;)=_+T3ozA(cf0pxsQ9a}KCd6DcMqNNDGt}q%TbxaiD(KIV{9-TmBp?4VjqqtLN0zEA{ip%+) ze7=S{b!Cg5TYTdHGRbJ04BR>>etv!Q*QCruOy;|$?GcEpfTXYkztGKn6s@v{H66FD z;2)nQSIcvk+U^ai`#)xf^!tIJ=`-|j>jH*s?=M0y|;?SI$Kl(}SvQq?NfZkpWhk(m#gw~Un3eg0+ z1{roh=seu`$aMGR%h%2f4gh*U8qHZ%Sddst#`IU!xrwR8ncVNXQnhktl~?so;+zOy z$#&khNDa5tQ9VK^hN*5N40&O1#G&ojK7 zlk&JMydCscgpmlYg)DwSkG@ulRj8X`ye(VniZHfFuP0!!%y^IVYPB~e6=F%zdST8} zlQd)-A>nHH)7$%H9@TECx1$u@9Ho`x)Ovp9zXHqE1t2*KD^<_7Ua<0za&>K!;%`u! zSw6xxtE|J|SGChH&{#@qp_h`Im5i&0D;V&y zRoH>X|AP9KD}+(c1C~fB4D9ITNdF3eo3MB?Pr6EYqcp4u6}1$6K-hby9DOc|IIRk; zw=$L*Y+EqRO25l&pK=Bm_Zcy6>5o3>f>nsSfrf1WIG;J^R@U*|~}^OMBY1h+Khz3Av13&dPfRYS1Y zkZF?m+}buc6V?GjWlTU!$wbYfB%{`4 z8ba}j#0X;jsYU0P-9WWY=N(2;s5V7KF#3}vXtk5N&EP%N%8W=Lg#MJV-cTs-o6O6z z2Nq-!p_bSP)S&>VW?#)^4>EMU} zV@F_5*O_IVN3MuSms$5|f2gj1bOH{VB%R%%^shWtiSG_7a5-EQl$*}qbvvsL0MVtxM zDHD2EtC*yS*-CKW|ttVY%eTHx}X%xg{u(%gqXpMs;h&olpt|Rnzp3ZQ|Z2FW^iHNxNFo*4hP=xyZOGz6K@V zQeqF*M8%wV}U4>pI;S;M83!Q*2wc z6}?u3wlzmJ(D-x;iU;^8m0d!5Cj=8sHbGdf#AanJhXo0o_znqq^J+y*8wojDQL=}> z3us>ArML)BCILP%3ATH{stY^?sy?`-Vm8Ki9g+0E46+;Ul~8nU0B=FjE;A0NxMfll zfeai@uT(|~HwJb(=#q_VHsaY9V~E?0SACdO;;h82V!e~0zq(p^9eiQK3;ZSUjp8D6 zcEzgx{{cooxxcM3%!nA%aH1igBu-cxaDUgk#aGv{ngT@Sfwu?$sfjw(*oRnioR5kL66tdB1EM8+VI=ss5_GU#O5Myp0D&Veoaajd?rtkcWBqMNT3~)?_e2h zz{&_AIy*EU&pheEU5qGR&-H`)9l zQ>S_S`t|@|j$aJfZF<#Oi+|V0qkM-ut5o7}a4ZW8D?GbA8bxQ9XO->&J3Au7ALbfj zaBwbr26^qJk6MENH#c}JkSr{$^6c?Ul-rGeDUzFUuhG>R6nz~-ylb7tV2Vo;EQt&3-~Ut(1o z=>LE6;Ok^LBoAaHnQ2Fi%U+zgW>K*nygC~m_Att#~?a+Cp{^g2T*``vd!*icR@lMnraZRG0x}Bt}@)Q@x_zb-<|9 zY%UT$0O4mE`0g%DGPKq@Yeg;RJ*y1ut9>oTdyh+*CHUtB91Y|V=TT~f78i*X>PAO@ zsr@zgV0+}&kE5{e*#6VvnWE&KxuBuAq~E=ji)N2#8Hu(+oXR+goR5by4+`wh=e`Tc z+4u{IBg1hDQ1kO1%EkHy|K>Qm%Cy})_a3r<)b+h1nt&i?!Ir!(lw`(>t#h+(^=}^z zk7xV}LZjf#UTXd_&s-UjRkF2*wUcp)so4ekL$#8{dgKRdWU5jX0})o&Cuem@fF$hu z{@cM6--9)ItN6=3aArv;lsK%QiI8@CvCiJ=W)GZS$I-b=JT?<&)D^W1xZ zwB0=S9va_P{_#?fDgKDNERJCF5NJsJ0TjWCE$lrb=(C563NLV7AwHHrqqaY^_@@1h zkL^Aw$Fv#I9_McUPmPH>piF0!xFvZDSg$%em0kcq)DG4bD-HTG-Zq2HK|>-~ODhZ0 z(Wkhicdr=-s+`~`BC`N?49kF8g53jmp#_-}9c+|u95YS;j280}KB>GG2%N>*N0 zMT}l9&j1dd?4A)-c?(Ny$M9sYzQ}HXlo(RI9x241N;Ytqy;P+Fr$HR6=j_>WN~pGx zT9skl)GCabpvy$3G!}D4Sj$A_TH-`FjADom$0O1$007FaUZ|VS{Zb-TXV!r5x#Xv< z`G2pzIi>J83l5$&08n5&7R|tt08SDQ4i~5-}8IpR2+-Cw;*z&yD5Umn(kcd{cD zE_nN`Vb>}{kGU5lk9jLNAc@|=hiv?IZCf&;)pdx8DCpZR=kpu3bDO0&a1D|eZqQh4 zf=uBwmTeOoEDwP+>2Cea?7-FN_lkmDROK)6lru|#_DE9b&O)krc7#f7pi7lF7}7X* z&^wry3gG3xA5JX#a2p_QiZzcRm%Ax;CPp0xA7`nekmlv(4t>e7@~HU$m*V^VI4@HH^t>}AM&RG4`hiXeMXR+VcFN?Pl~ zJ)WP_W1TPrzP5>f4rf>vzP9v>XvrGoo-6GvQ8j@#$8;Fpt~Monm#?3GQ(?yus zFj0MTL&}cg=p67%u-Z6mg9V>cDBW%(23W%-%~vW-CHR$7xSHGrZux7WJn0wvNEpR!puP!iE!QN6p4iCeZf2OF4#) zkH}TU)<&s@D!aAzTztbDa`%YlM7^~l>URV!M9n}mFp_7*J2ZTNJdJd`i8DllH3mk! zd7SF>@biUlEjqBJw+#UmXyFKLc@t}R^{t#NP@!RuQe8@s+W5R*9$Bt#4SH3E;0d>n zx=Ts-8Fbi5FSBi;R=!ypcSy1n+ZPl8dN)zG&}O>FfJz?Eqi)S4sPH5X7W>s zv75)A_zv{URPB(OZXwM3j%`dlWZ7kM33|*!tp+fWUSXU1g>?(ZFzn3QP~r5T+Cc)U zKfnqL<`6s=j%dm zE;6^b0%mwxoFqAZc&OP6D_$kx?;v4;@4+X2UG1MSooWIIZhkFV1J~A!`e=8PPei&| zDL04Shu1k6t=kM0zUMSgx%5jGV(nt-qK5(RxNKK01!-dY?!Al!!u-=itybzwxoQ{{ ztDr2T+-yM+n?q$9QGeD)On#TAh+m-u+YN;dOn+T6d@ew7a zDIqiJ)H$eI2>v+~RIV`;F}0z%kFjup=WWpW7=3dS*HOfjXcP4LKVa$DRX zexn4u&ENvVGoa{&A}U2n8vp>j3G!ogto1I2NfQtwguNTDZFuW7MFl4M%&6x>7Gzcj zST!_jHbI~6MGvM%Hs*h$J%1`W!nzogV|EfwrAW9-;r=^Jz%{~J2eZ8&T$%1dJPxIs zc%M+M%hL-f=%YIiavASg@={QK6}@6*3X!k>Sn;2t66YQRW=`-(sG;V%E4>c>FpwB> zOf2YRy#9dy>Q)1vqpHk1MZgY=(A2p#^%~=;&(`JUWi< z^iBL*PV8}v64m}?#kAHw9P7!T+=tc;s@|!BN@9ntiThkcKwD7CTGw6wu0ot>ggNzj zNC(HLGo+m_pp?CHM`&YAYw@ui%72ql``1!_5I|7p?%P82zS#h5P78UoIxzeDE)>AU zeyzgf-ZsSwph5tiF9krhg(!0RO+MSaO+rKmIE%ACZgrgow$K1D!e6=+UZ)762d(D_c zHY0wmra{Xfi5H)HNpbah{zyYaK=8lBJx-bZMs#5 z?K{V7o{$9uK}VlYAx9`YzA6Yo6GZ~A+=HY6Rt>!WMO9|@x<#VgX!;}!=l`JqFl;jXZ zOvaIg?Q%PezsdsIK*|Vbe!29nzfoduUi`r5bVl=BI)nD@_L#!gGd%Acz~~O-8vhv( zF7c5Tccl6CP>Xx1aLd^C!FNgk?sc!)chFK(9# zHwmONY9;oHlNCT9ynb`AE^uxh%)Uq3!OehJ;EO2A6%&*s{X}eYnRM!RO#e(zp0joc zkQdAAPBss3#@~3GDoV8vs)6x~FYsu2t}_le^0rgRRjI0gfsxRf8yEWy=usSBj0q&) zPQZtXT1lkjS9DWHZvJ?bkb;wk_?k}6_qO7Mq5oeycPETRotQ6*jP+j~YcAEB z!c(-mwj$b$?(BrWz6!KRsX_bYH#rcfj2bQJ`y$-aLsmJzDPVHt_>P)e2V05te3llo zDyr!Q48lyB@FF+RccaONgbQtn3+MB{iR;P3CLo8FHxBFY{Pj0px3@z5;&kzqnz$!g zD9)8@BK zFwiY!)-@w0F%X+ZWpB-6@F*sz7k9T>otm(!JM7SJ66(nI=KOk`wMDi3e~oshgecv1 z+b`z~pvdqBSdv)yD5;?2j&%nhy0OmRsBI0tHl<^_U=#*rBW=qJCC|x(PiGI_ueq+= zMZ-|*zw=WZZE&qb1|I>mpRxiFs_0|S8gzWy8Pl(E>1E)>bvvw#In{So9xn%~f8%VU z^d2k-$_BJN<(<^&Sbw+Rqe;Y^zvv?HPXMm3^Fp{R#P1WG{O4!cRA%- zU6yZt#!^-#LWOuloyrM8sZG*~)cjoDgU=xB^MPGf){$ zyL9LT8a>&+$QHRp-p%M`Q(IBD-tpXW%`4>}&6yn=i^e+j z6?Iu>AKaZlk>07&h1f!1EculI?Xc;J-Pqp3 z=<#hTuh~R~Rm|>wPs0N{tmNZipOZ{VIWfyi6vK2k!&-W%z^`CRO*9i%u&aIRlx=}0 zNLNo4gwp{I;*qsuYa0DN3AH6`L#ALRc}MGnavi3#zy_dmM)7-lE{Fqx>tQvkz*Bji z`b&h4b-wZ$7ZBg9J*}B6MG}^Tnb5ALutmxM`3b9|oCDICAyfm&Z(T?8CM)Dnko7Rv zlLRb21*9h-_XZBPMva6WTiSV7p##rvj{N?m|6Kk6CYbRG4sz_GB>s z#zXh*Bi+T*#1L4mA~M2+X5}ANHcuAG1{LpAoLR*URg-8Mjl((MH+|p_kijWhhT-bX zXfi0SGu3RO|xF<4LgM=m9TZ|>AjpUyX9x3(M8khf_O&2wy)0CSw8SsdEh8i(c z9&Vj$F;xE9z0o*$2<{O`hk}Slp{K(4!<3q3i(Oz9Id?@QD&90Hb(i|Lq#jPv1U`wT z>{5CKW3y3=zpZSy^Xhs$8AF2i3PrH(W&RS7VM=+C>}32aG#oyAI$~_d_#-|0U_F-J zz?*y5BbZ89+7&XotNu0~D=?8sinP-4YxI=DTbgQVpWL zC>hllVuH{Eo~^8Thi#-5KN%q8o%$6sP`R!RB;&1DJ%T9blx`S^ItLtHjA5x~TB4Wu zrMcSaU532}0)ZH+zJpA&J%gj=#76zVfNKZXY`^A`)r7dMqZN7XogD^A>UMU4{EH+D z{~w~#uhiI%XWnFX8_Y!GS?IgbV!(nobNn$OelD%0!dvhVz`{Td#u=6`IWj1?TKV0I zE<@8!;0UlNE#{sHA`5lcG=!OZ=OJyMOw>9(tb21jolug$%DXG^mSNrPzv9DYI1G@> zZ*5?7vMd6^x?P_YW8XPiDjlD(^e_Q|4$OHVXf;KNiemFc7?_f!!=ACv8Ekv9cpY){ zp`04u;bDMpxbp=i;F_@7{U&@GDUo;WUgdrpY!p_RjF~ci{;SUqo%NM?CTxo&yS-lW zmf23FE&g9jZfGf+%Uklr2pcR^mf;zJr3ssO)ssmG;t7TAr>k5j5eF+DlNVl1+nh|oiZF_% z?6e5Gj0lEB_mc%!=<$C;)K%~iq`#|H-#^0aE7R57(TFP*3LUOTNirf+cl7+MN8_kK zY)wd&sQKZw{kJ2K)pc@$3!B@Bw#~a|)<8Q!a`v_jxTpU_uWc1QQXD^`)8=OP=eX>M zc&nJ93w`S$tSum95MTi|<$Yf2wU-y*UbVHCD~9SzgGW_(yJv8PSS%4Y#sQ|ip)Y1(#Rfn607)K^KUb)g0{=P zA}|{36vrF!`&h87r$0HsVjANzFtp*3LL=m zJ7j&<6Xlm+`@q8GiC1{%elyumjSuO7!$E3)x|YNQu+z1*?(ojM1o7DFBDW0Q#A$PS$W)UR>TxD^U=lnNc5KBj%zL^oxwf;z zh-t&G{`MeF?kgq%JHghwH|_>FzS=KQKrg#ada|;}=FIczxUqrCX54@(Y>@Ct?N%GB z#vD%IyH;gn{{`KMe9I(ADPdLbn_8i?j?A7#$*w(G5jDJSKvE4#SvN<>Uvt*v6905I z>I*CN=#M7bis;I&eOb{vudCVc}=6b#|I0iv&Wv2d7 zH85{t8)UWG*^J7|;T_WxJ8BHSpYe$l!7Bd5;5<5Nbw3bh0-HSkF^AO601{L?CR<0mw)*X~CdWDzjKxp|PK_Gru->Vy zKexa0x5a!q()!6P;MW3w?guI{rQ)4CgL+^gaAc0R-3`;`aP$XZ+-lj37TMT+L1ix>y211 z3ubtu-^xa{ckvo*Cj4LkP)$C!dvmyE#=JVexYPw7;Ui3oBQ^DNI;*)0T<;NMWgr>L_`Q%@2Z0@&Fc7w}} z!b5dn3_)Y3)L)}P<B`P=7cj91JHAz)E(3q9$e@%XTDszzHVym4jA`RlL#)jLy$~XGv58fA#ziYiGtrQ- zNauU{(=AtEZ+f1mmr;Qi{fKPljpcLbNHi#nzW{!107$O6lN2jbPS*(Du@Djje}-Kw zh7SMmrx;91h)BBAkTLF@&+Q7AQ(RrVH&$^ST>U^&b+xp9BZy{aNpdoTH1I`WDE@U* z^PJ`UfZ&mnEazXEKT)3M+3I{#&MpY0OI+jGO)9@2?zo2L+zIfDXW@7PpN>&{z)5?O z4er3YnIi_n`X_)QE=kp}6v`7RZc4y<={}UYuTQ_*z?j;ir`z1YX8^#LLTPwr@|gB4 z`@`=hmI4zX=;9SPj2rTv#Wnt*AN#1~SZ2c8g0GkwVhrHlytmIl_xw4ThpT9FW{2Sl-bdT8{kNQ*8(qd;z&pZ*S9z6+VaAoeRA5LQJEQsA z5iH4&ww9JOkdZX|ZsqFk^{W#cX46Z==JM99gZ0l7 zYQK`qM>%jxDLmu+@*y1&?__dBzPk^l&PCt=`j63BJgY+>-~IugW2X8f0FqtbL-(V& z&1^hbI$~XUJJx1PR|_RCih(J*vWO)&-)g7`OM|aZcQ>zUZneEN`+!zcIUX2ZOZ#eE z0&17Zu%ERk%R?|m>Z`MBrvPlB7ScSt{YEmdGmA)tY@UFLi({aIj&aW-h7Os78h33W z@^1d<%yE-nVT=#f-||0>R}%h28Uyai&GXJej?D^BD~l;l^~SkSRZvY_CTb-p^rZc6 z+J5?J!hFa+p4BbP5gzOmsoj=PUuu=B&!wKK4CERf^(?*8pA4|*Uw=1mo`3R3d-666 zpoc?8q20F_*5ny@04H4R^C;~7bK{dZd1T=Sng}vrmvXYmly|#_B(n`d)&uLa9uNR2 zi{DB1#pl6%gS>(=A-7T1+>AOc0$9WTo@BJX=k(X_#0!*4>V(vX_nV|16HLrCN!lUm zD<+!5-lm6)5ONdGcc(<@`JVP!JFXC~Iey6h z03vqy=!BM$p0(!sdt>3=&DbJ^05_>rDfSMv6f->$=H5ZkG=h=vEyZUUi#tV`Svvr~ zZ6Wn>jx(p5JG1Tc5$=as!$fvJ$cGRWO7=QbH8+~M^ka|j%5hxi5CG?a!G9OIkD4I- zy8=pm*D`<{e}n0esU%;74_k%Dyw=sOSn`|;I;ec^#q+x41w=f--~O4>5a(AuD#U>2 z=jOZVGt=qG>lkVGfh#wXUH665!RB;NW9O4B;M9XF@c-Td?3FQ~=8dH~VdiPX<-1|_ zFt>)v(t2YWN0wq(Qrj>*fIG%OP_+QpiUh_7Jt*fCoi8j(1-9)-a~AVZ40U)bU_TNd z5=!l5)^z~*wrMrtISHaSvWn*m&c?#&=_~g}j1Hn0!XDKPeu75Rovl#4$Q$P$uQLDZ z7$d;gcmNNSBe;f7{x5I|_jdOW-arClY(@l4u)$r~HIFa^AqA`KHkHqEzkN;*d~8fX zI_Iw5jL6pX%72RVdq&%E`Dy@<%1ssRtd-A_QUDhhA~;KliOC`Nn2>!8N$1 zbxJ$)w9$;~68;fAxgRU&P>r&!$at7UALsWcE!R^L&oNGL%-7lTGd{EX0x{earvWO<4`UVqH8vbtJxi6XTfH8 za$Iwk`zOkriEx~Y0tY96B8-onq>Qwfx{XA~I{`Oo`4*c5l^@$dNuM(*{8Az!@ZQY; zn}QR0{`N+!?h4%pP?y|Sd2@l2-}X5@I#T(UCXG^O)*qi^eJL9 z3`tffj=%eWHP@Q8ce55pZle?E?o*A&`&o^Y&1qd-qTPIUCHiIoj;{r4*#{rOzVVjT zQssyydRP^;?zr9{$&(H~SAdU{baZrmSIW&c!}8N74h`vgB@vkqUNF3pW1+}-q{V5( zG-)7edXQZ+Kmlfep*n^(0Nk!DXdWTXGv?tKEUdmzH6u6kH#1!T55NEstIQ-Ho44%G z?Z$-bx=GGxDY>KB1#5CvLNcT|Tox37F?AC=JfJq~X)m>}&PWS8W}{LyaBa>@3Zmc@ zbjPszZF+o^2IXgbkl^_`Y~nMNeX7E^&Mb1sft?Cj?L;7q*hc>Dz)k7bX!5OzImBG; zs#K&i5eZ_NC=_tej-&N%UI?QaEPP~x`)zeB9VYcLt28F^SB1VE#jpgv)~WnhCue*_ms$JC^}SDp_(TdKw%#R zeQflCvo56kW5JuKK)2mIZPT-Icz9^If<)ivx9SEiL;z;c56RO=eIDNc0SR2MKvT2x zFwWnoGinV`uel}07(6tqjUEBD>|qqcN;>PC%_HPzuD)iNpw>vZ&$)}LPB5sRybdJd zf$$QyPZt=pvmxvYO$R>_mNE|)2uJ(?`-XVJ_Z4hUFb(VEq>?YIy&>Zs@Z8n?ynG%p zrbpn-Bz5cB?xUbgRw%-d;Xgbc?zDK;(rOx&loykuPK^~6*1HYbe;G?c%K%t|6cx3f zh{KE~KZAQiZJ!jO@H!97P8t?PdFV0>#a>U$QLRS(-Q$0Y3vZ;gXPB_?^=~JGI|V`P zo0(cs3O6CnDuz5Sm!ySKE~XR){|)PjiPQc_t>tDhRb>-*plzeB4Ax4 zH^7?Hrk#)_8IcC?pvnh^UZtymG$G^kRgLm^k!e%U2z&qXy`vL-x{$U`6E zK}p`m-9ejyDWj1H*b5OM3a4{CzbJ1LpD*OkWB2i&Mxaw#KY5D?dFi&OmOowo%oI{~ zE4dz5i9>Fd1i^6&b8eXEq<|;O(Y)n*Oy$U&w)n{5SMfsNi!)dzmV(jvdnq>QE|N(f zVlln&Dz&^zjr<8WqycvtQJimD5mBgX`Z862^;IF%#9hi()k}n}436G-v%^D`e-l?s zDV&wvWpZ0x)l)6FPyqS~Y!)gGPbR`SeGg3ipIcR#4m8fi9yw%HCMug#_u zfbJZ%mCJKr>myU22(JU2V_%%qFi8HMwn3%c0I$&vfSV$~7=hv%-rs}u959vTr1`2( zm8e(JU~n_PRk~c>atU}PBc0KNX(I}#Wb>=~6N!nS3oFIY3wc&?!nR6(hw=8U%!<$x z$q%UV7fDCwW3bec8&dw-6x@IXkO6Byef7iGdy-83HEVeEQsoyPiO$#4jewRkCvorj zN1XBGQT#9AK6z;EYM)xMx1qWi$6ICHy|jbjZyoJjFu*l5{)e)LX-E9za8SouDzQ^C zC*TMIV;3Pfyhekc^|{P_k=imQrJDsTI;F;$a1wt8f&XHAdDbJfnaK*%%hIx1{|eb7NlR3*zCY+gNJMDBRjP}|RYph`77MS5&3u1=kJYV(M?w|g8U{PXb)o$6OumeH7pxWWVLJ3HMGT6wNFO<2HimZvx~ zzik)u{#PS88)$VtP1l=oFWl?(eD@_z^l2HstXhTo792vECK*6*F8L|S1JCl>Tf+q9 z586E zbjYzS1p}|Dwe_ea)J=!5-3B!I&~Vwa)b{H1(TRB4i>C2{1ZQHO<94Z@+^i6zA94fg z-%JKjzCOGdYl&5h5>%jsD~LZ9kcYdy30wu^j{eIGE$a}vtXJlW(7?b8wHW6d&}AeS zFguM;gHV88Uu-(sd;_WZ@Dk+VPIaeD-AIuft-Ahfcxax4uK^?8O@#Y93aO4ERI5s8 z^5J+;K$YEX5SYWmZH7FTsUyVIBqG1y8rQZ$aupGp$V-HAWryn7g{Wm9TML2Q4`J3m zpmCW^JaNXu+&6!Ea?ts^2YyuK^h^aRrLe7OBD@*0$*W1P^|;6tRikX2v$$9 zGwHo4@fvqsU}lU781mq7&s;0eL9cOCPAmOF*ClZz$nF96+_8VFrNfPfvgy|9@|Y4} zEN^zdvb$MueQBQXcDv$=-aW2yxkF5!*JWFd+I;aeirit)Ge%(BTtT& zEuktBY3@AbunYN8o5#1YbD}KhocHp6fB+8gKzbTII^nDSYT{bim~R`f+N*AgNO$uR z^G&)9{I0-UAEh$QxN`aF!~y~vxK928q&4XOp#RJXsY+fmFhJfS#|MB89U!q5bsRAf zCp-Z5E&SrgeLYalmUaVRg7Fn6_2L}d4&V>5{93c6%G zU5(_X2|&@WR8N1Bu4v8{0rLhaVAK)P$E3=EJU1D|fCEXc=4xyxYMN?gw_#chJib3r zQSR%ubyP+9to=_kpw~!&!98eL6)9@F)AZ;iZvg&|HXox85Sl~_M@|OK8E@x5B|y;& zH8I5DkW}1KzfOQt8J&s0D6dBF^c}Q8NFZlNqhTIsEQZ#OU_#7o{zwgvp!!sBvO8-! zKIYUnluXG=W*6f8vB`lQ4LGciI3~tD&5(^TT@K&PuNnh5c@Hxr5mn-?;!0^4;DTRg<)ivyuiv z8NqPGc;TTBwoW0r=2;Xs>lg6|H?M%WGld%{P#?fv%3MS3T9PdyI*G7-7vkbk^uf3M zm@McY2hXiw1LU&fAl1`WC0%y5-FA@}b_DmWE`&5Xj!GNyO*hCb&D{RFWv0cq3yWVv zM7mGHhQ_&;A8~s2Zo$q0D?P7j3&%Ka@um)DesxmL}&k8MQkqMCQgE1(m6T} zD&6Rs#(H3yAoJXGnTmgOZpvkv{3=hm^Vh5uLs?_P4uWuxzS73)YpCKL0s9WXR~)$5GZn*aQF@0j&EAlwd&5X8$&+G4kE(rYvY4D&Tw)4)5%&LgAVXwm{75 zJ9??XYKF$>ys8x69)o))-JNSB(dxn`>6TJH$}P-aLCLQ-W~oEDR`bED+-)TOFIVcn zAzYx3ST6!Zl&~;{N!V#p)DHyDMBgN+DXT66v|<;Isd7PZhHo`C?xjlzTf2M^=StMG z&SU=P7ccjGDsgdi)0s*GIdzRmPot;m8AjbE_6|25Nu~qj-J?i9qnEKbZO1pMEg6L5 z03s$3s66p+2f+i^Icb@5wM?xGG;%QSHebX&J%a?5K^M?eWnVGKyEqx@q_7qJ{a3@3 z=mS;R#pzEm6h5U*&%19T=%-I17XrdOM^@w#vl%j$MAxlNA2cmo!Rw)WXaR+b=!hhH zlxlu}p`v~On;s1w&6MN+D@l*Jj`6CtV2?xa>;xtotLF9lXuSxUq3$Gk(Ba`Y){A3R zDH#bgZK={cM_r$H=psIkWGZBan^#UiiR2LWu(V`5Fi~XHVhL1ELsWbIqv-~*m1{mV zSKjFUw@){!+7Sa($J0cboJ8JmjxXqvM<+AX0KN#2N7S|eJIsnw)SDdA>}RikGM3Eb zN6W7{@?cf1fbYbx=6j7LH=WGOWkimfN9BYqMy6j!IhJ(;QMfbd1mtr_LsNAZN!V&Q zfwX=2-ra0Qkv>K-F>( zU=jvK+qW#&mLE_^kh;qnm-@MSw0PvU40KQ+}=TcCarwV_fN3vz(L|b1j63em9e3l@BlnJAD*=6?THt& zCf16Dh1gZeAvPwo024m;N6D>H+$EACVLx$Y4=MJyh@x=LhMX9xSmt#bn)ErEc)GX@ zh+sf^8*C3Zxc9{J85%Kbpp7BJ{uOIcm!_e}9iOIr$2YSo8I*Q_mLR4qZGs0fKO&w3 z5{wf^+@6x@(NcHA0*Rdm_Sf?$+Cn6x9>?Oed*T3!E*ek@Wxb~vrHqXxr9^^L5GYdE z^MI0*?;3ttP*7CZc{xdN(TDBqQH%H3ZMlp^GPZ1MTghBfVIht99O z=$fz><(d!c3th`hm&~LfTQ7Ii_Y^!5+e%At=TXvc@BoOrFbNNL(?(qkFtPSDFX`6} zCZB!rsmr-m^Ek{&qD5JJO&awT(4iRk!1Kb23ZTzPbK7%~O+<|Q3GiDE5`sVKQs28P z102bpWOc@NRptqDd;5DGLZP>FmGqTvd=+>!!hcD@GV8FYYS#~|;~O*hfqX(ACj?fC zT(Kh&kKfn#<2B;0ZP~y<^rR47Kl|}EuM4x=v0*fMpWH?nnt)h&YF&WLynhpC9=EIsoioN zP9xJi;gy6j!m!v2xA=3U^#c9l#tuYioO|uZ9Cd_26XqU0lawYIpwsk~X{b@KxWI_S+81GQ*|eU3SR02335B>LHP z{4RTa#szXJVAE40%@44e{0LyT(aX|TVua%NeE0WTM~9(+X@IKaUU%b2rnFp0f^Rd3 zKvHA|a*HetrO;T-_mu^6U2G+m<(2XiV4YZ>Id8#`n^|(34L8X{Wmg{jWL&F#pozh1 zA0tzdQ#mlA?jqJ8=T6dJnwth6yfz(i#?EX5jNZzHP~eM?{K6Qq^|&U4T72y!$*tz) zEhYYs00004SleB>$Y-I&A;a}8cR6?q=Q7jEW0$rGb>*2~-c*($#F^Caqd@yEjGv{K z&PfP}qtdFof8^hs3q!-q(1)ysuKvuHt=Sbjn(>qpz)+@IIdC+G-Tn>qt(8AWdx8R< z`96cOOnS(1?hoBN5}e#ezao-+T?)eJon4~XOg_2m>m*)@vILZ!>#G0d@BB%V7wK4z z6pxV6Z0AgAn{z*9UGQr=Bt&C>-Yj=j_p$ne*x7JtjDGWiGF&OYQJ)j4YclX}T(F85je+rkt!$)tI zg4yn09d2huz6$+r17g(=2bYCWk`Rb@G%mYlGwK<^E|Avq#jyyF%pQPscR(V>>BgnG z@xm-kP($J!GsSYJ=87Wh6#!$=)wkvq12I)bryv(PlAFOp%0-0R&BOcNV2-A?YjVW; z1TTaCgVJ8F3c{4u%xbLFeY1*Zw;4N$__Aq}-9($8VFuAC>beVPdPyzOp*DSmTPYNY z(p8Nw6(pC^w`G4;mkj8l;CR$LspSDG?qpT?PqKL~PZ8bpfhIz;=1MYazlHZO+I^j; zyK$+r`cqAMglQ+iq;E=3($pPgGa$3%ycllQ*kYB_Tfl8jx=)wXzmDB2UPCd#XgRUg zrmy0DGdbV=9Ln^oE@u)rg6xoedUuSb{z7&XtevJRa4h*Y=Z#fZntv=Se;~g}SjYNS zIK4HZ;=I*@OB-ncgKzwDx2dTZh7!GEH^%y%7SZ}C$%a8`g@XYSF}jROG4)I~cs{En z8(DLEQC30_SH_M$GOV!D7ey&i2fp>ghxXY@L%?wpEJT**v2_}?6mr7#xFK%Fc1nHQ z&s$amsCWiIn;6Ug5vu|-gsJs~+*WO^1Mgwc09g>@VL&m1w>at}HS3A%v@*x#mv-D- zLjBNbRd-jYQTX@R!*F2ZerXLYYO?Y`U@2^&Y#Y<}`#dHNEBaiiECT*qnmE>pAyrIx zmWx~c2WD--a$e7&^pBH#$Tvl=_)*54aTI>cM{^~&G;O#pgrXwiQNC}Hf<Z=Iey4<% z-wN876MqdE7Dg7qC7;J6J01hEktt~mZ=-L&@SH^&;(9y&`g^ZSTB8TL$zG+plgvO> z0*DlTqs5FR7Z89wwbmd~>4`W$Q&Fum3P8&5M=I_O%9f}gveA zY(6Kn7z;w>axqg-`Ew7+{D)?r3w+qLo-@*y?uN*>Jnv+*0(cll%@F#f70pD#FXw{b zd0x&#Yag4|+D-#DbPNq)HCUG83nQ#DV>JQMHN?d0=OmALLlC==;|Ai0!~uQvrn?1r zxD}4Dx<2y+nugkKD(On=^wFWaj7}1?!1<17)Gv?e5EsEQ(S3?zHGj=KD^P&m)LDW$ z$-%U(oW2>#f@X|NW>Ervxn+yWP$bZQXXZq8r(!lUhg`Lsj!UxDydvYxA+t6{fH-!} zab9>LFAhlT$5o0?NRP47JA?#3k|^^%04#Cv$CYWBe)4^zxAKc%@yz9`%0xM>Yhv}V zfQi;jyyH+nkw^-8h}tvve{a$4}7#M));_3hZ4;iVdTvF84 zQZyIyEru3s2h2F~Jd$BYIhxF~RCuc*xhJ^cI`vxlXC(u3W)xOGuLYN8skio%(Q?`Z zjB*dXC9i*iJIMcnKO-mBHLLkP+%xdwV70R#D(6Ru`7T4#z6uUbad(;CY|DS$j8rAQ zpJ5s0ro*sE0F1OgTIc`zd|s-WXvUYgB-xTO(wt?_q$-6mvSMm^7AL54dr9SD;s@j7 zPBDg)6+7C*LlSpcv|@KKDu4m2B6W(TkW&YyLpV*&B>BEma}~f-%w;18DUWY9MI5SU zY1D>dipT4AHPSiwOOxrn@N%Ad>rwFRFBW`PSkOxwh#Lmy(t8*% z4ZSrPB4Pz|tKtC#PYIX}B0l*y?*N*hTHTSz{fAO}ro`bFooP@5b`l#`F4u#v)m%#e z5c3BIIO7k|HpLb%pFY>2rEHOqnMrKOr4L>HfPBZ|IEbhDtOtx=p)S{j zm~RHQZ;oj7HjUq_pbkJWGjQ(jS6&NIocY9`+e5Ua$y|-Nt;*?Pg%6aubU=Zpd?^R8 z!czi5>IF5^R3;>+>N~_E9luyZLk~eU>HywRmO*K#YCHpZ;UmPSaaHP_H@+c)CH+2_ zZ24_lVcJMaSw*#ifoc!(9_j=PpL$^S<$Gs3*SgNiLY#^ZSi(5dn%F_34mahe|IqA; zoE(Hs4pHs-d|rd3Zk*oiWci!L9!C|rZ+JT8{Qkd^3S^~w7uLRZm+vL&_BOHB6-7bPaoj2xZ zoQ)0hd#NlGK&b7^&wL?ZMd(<>to^YH$_?EJ2Ouro+-5m$5*t(gae9F}XpNBQzCc&~ zV(?l~e5`$E^|sc-V2k!1&S(?*@~ZoO^EFTyuw=vTx+VxB>jR!=yQsfi`;t zONUp?fR)X^Fszvf9|s$NY@GLB?m8a7SmQ%sq9-OO@&ps=0ia7~g);x77zm1Y8y0x@ z=Gtdj=|2Z6E_m8x53%uX#AgO*(tQ}PSqR^i>k1I)?MFRc!-7m)QiB4t6=KS9^z}Ab zlyyLfY%3fC`j6#e?+&rR+xwA!XlGkPUxUN?tKYn=I{dR-j*ki3@B zzx4r2D$QhK3Xl`)eb~qAZ*a-F#=5B=V*fD5bL5bOrfKvZ2#w11(Rc24ukhQh0cld4 zC+gGQo$RBy|MfhTp`$!x)G7sbe~N%v2vMISDJG;-AGmu}?_PhLe9I_i)C4&NM)0AE0$zgaoinuXXljVr#fwTseq zgh}&(Xq+L`O2wt)?OSF%Y8r)jJ_Gg&1Pi49JXX6293BN9tTWi08D(4vsD5+jpS8c} zw3PD>%L$$X!0zmE$oXY570_VoQt&>F8V$V1Ougg2`%_S9t}#g_AIQO+ktn6yr@kDu zilX++iJcN_KeV~JUZQ(AzCbIZ86Bj@TsSG(nlNZg*u7N$ycmV~N&CwgO*YZ0iGCj9 z5k#XX>JUAfTEZIc;yh-|WudCD$(7_2&hSVM-kRB(8EzeUd^&VS9p9?fuMX}165o(n zAlxQb>}V|tdvQ9)!Oq;c0Y-aq;kU&?$NI)69~Vg?0i>5%*rZ$Lv56m5M8% z&1Z*T(788CSnAR^bKA9KI8QhPN*%6KeE_#VE&xp#bTQilR~epW9+G*!p}f2R054R> zqEctdU_99!+H(|I zaPzA>|I!0vY-1aVlq#}qan+o{gy~>+O0P_eQQRWw^abmGB2ry&kPf~uHw1zg?>rZ4p`^OKjaXE$fA&RGf zW`E=Q<`aW36?gnS#8e5IpEI(^d|}n4_WqtRJz-ftL#ht668=Nmp-A7h&o|@8f}^5* z#NVGQ;VU%Qv9~f% zrY1obKW0;(9xU;o)aiDBSq823=jLy{BY5mm$6*WbCfV+@=0Y;_cB8w!)P{+kNn4&t;tOF*y zPMSkINFJCwG>Qg+ltD%2OG7!9+vZ_|p4Rh&V}C9g30BhVR(MZwiJ;lwhX#biPsMbu zzkh%zG|Mk?`(eJ5j95aKoWiP}U0hf1xxteT=o&+&vVOSQi~mHrY0}sqn^iinC3xRI`HL>M z$9D}K@WMlu z#0_sB#cdC|ddoF4wky5ad-{} zU2yQa0~LDQbt;WNF%lj&fXrLY`=SQE@})%VoHm|#Q|=p^YnmDmxYXE5PtryhKn!&z zdHvy>O@+wICB#Sia}hKFgD+`f00hD>i5Y!Px!N@%LL7m^PI`+KP{I)*3X%GGv=8&Z zTT(HniM9CtTNE zEc&l`Ds3~Sh{LbriH6b~&MMWe+f%8j-q~-Qo5j1AN<`raX|0jxIJ0sJ?0$kpqdq#` z;GLfV78%pugH~*j+dOiooP@EpNH0{*{T0F=-jl_`Oq1#t+_F(nc}z% z-F-HA)-w{-?;TjxPAn*rJUWZM(X5r&Irp(7AAU z>ucZSY&IVPoTM=@H>7l92?>NFp3D1wz%c%Ap%DVBzr^G|2V{J4?rpnZe0g!M>q4v| zzOUwsVL%mc&>@_LL+m74V7kfzhY|}l4B9O;30h+R%vCKa7pQ`hXr~s?HmKsw zI02&5N8d}Vu9uUzCPX*+`4|!v>QzJkuSOBJadRL$&Q+G1Iu6$!s_03+?J9@^~JO{GLC@4>!z;<|; zt)D*iSz)jT{z(Y!zr{J6f>Z-=rc`>ZuqARfWzyxw*@~c?LIbKvQ*bscl+TV8(3Hk$EoSiVCJJUCTZO2!K;TSxYx41E7iPZ|k7G0gDnQwHd2Ul+#VruvRAXLTf0&$m7 zAkpC`;O>@qU)yE2m&bf9bpQdXBTG3a?3gR-OB+^MBKjZZ*jcBl&XU}x-Ux>QZ&bSL6G>(XcG zYX}oT{CUO7a>msoKkAV6q3-vXYp7zl zL)u|c__}Y33V5=ig&YE$;4nh~O_=X6Yy~W|dDvz50o>`c7#Rq={#4rW~dhFH{X8 z%Rp}QyiTMau)pa72F4*YY4EO2Fg9dK`##Sv-ckrn&jk9l^M&wR?9CH09ea(8Wpe6D zbb%8zcVeWzn#4-@yxr%%QtVK=689k>_p);Jhpnj1a>_XsOuaA1^O4^ATeIqfcjZm> zl|UWglM1Klh$I;s7y!=z2{#vhTzN_Wr5kQ&)!O1g9E-f`000c>0u}FNJ~WKC17vHWs!%viFygAP$XgTul#(yS0}*@{QE>U;9gug}k3dkl%$j63qirIG|sMTt*GAi2~J}9H0kg9 zvKYfZ2El>FNZ3W5rA^T%`Ps`r`pK6I1$0?rj;raFJxJWm9OHQ5hqvWlPk@$1(MPT- zDGt1+gEmcU+GoE|9U?N(; z4dGTGYZvHm4Pbj>;zJMi@si==Y*_r$Z}n4;3pvX;;O{M!xKR;Dn4r$1UB408Of4Od zuidxS|8S1K0g&bNMo>#2tH-7tNCb$LJ7=>Z6*1Dl#^5A(M^3~Ff}T`bGKSJ zwrKB>#d}&2g_eTo`p`|Rix)G%gJe9e9UY_OWt?$xL2y%nLNUpT;oiF9Aa;uMH@l&u zv#x;S*OwMvs81~hwpWp-SiBMmk#sh;k2d#Ig$T;bJvVdG$JsCUs!G){R2L6+;?vz! z4be@QFCbMfqn5F79qr)G-i!Z!9ObI+ZNxD|0PD4QY8ZUS!VhmDzUDXeZ1o3NEr!p4 zYo*DbJz!{qkxTzc?YyTJuusK-pd3wPHUo;*pQg#Fo3r6pqwUtX^wm|sy&%>*VaSb; z)Y`D6a!?I1P7LCSN0{CWzVcz;-k=MoRc5_}UIMe5V88d6e~3rH3z+rES~hBk=}J)IVg=?MM*io5t)G_(dC@f%!^Vh^g){E>?iBhJtBYvgMo-1yw?Bw_b#7G`JI%AXt#{$>xAVkUzI*_CcASxz^0?hr56khQ`1NKB3_lU!xe+V%c z<~7gfybo7|F?gSYDg?BY(V|i_SB(DDPAXf=mbPk*MlgMbc+Q~ukF=z&aQehObA5m} zn7^)oei`V_sx?_!?s=r(u7wCP4$;J1j;|vGQEfCU%*=c#3)27OT$@Pfi5*bOt}}W% zmH9Jp$S@5gZR597p3qzdDd)vP6@!I zq6N$~9e|-Iu(Td4Yg)NjoSiY#?um=C`BEfRb+K87hHt8PCe~IfNUtL$5%P(+O-TJ< zlbPB(j6R?)W|sV=M18zIx$P0=%Ie7UwP4>2;guMbAZoobyOdhB5Ob64yjl-XaWN!t z8*XJN4`)vXfnz@tUj4cA_Sn@8fMB=x)VQ=pJV8Z8uXAtD!OJRay!Bn$HY+r&*XebP!JhN|13Qvu8QTgytagp4yZP= zQ=vWPt>Uh(fq6Ta7j)}G`5~KW*@w&FJ-acyH3$>-3crHyF{wunl(VMqvq_Xf*f`Lf ze}8?Lt(;Ac|LwOSkF9TFvSg*`Wo&T$S%#}2n_WH?K@3u}K8_HqVe8W5EKJt^=~_2l z!b8EX4d%2q?T0aTcH(kKyy~qQXHuqu|q5yVqK z=(Hw@{sv{}qv=8w^*xB@1@|1n;Ev+!Vt4AYgV8t&qtrphW8D!4dUXrx-3Sp~UYi#9 z4eyoZHwY1G{`T&|06hSu-{F~UGvc=lN~oJPl0L>pB4#-tOupLDhdO|=&7S~ihHr>| z#8Cwh000B*Wf2PnG2FvS$$RP3PbS`6ZmA|eU2&(Tkh0S7EspbjmX41b0emSyyeolj z&M$ym&Nl%aL8@=IL5oBo#7*`y*sY<}qH3Bnd)IMl>KlZya}HJ~`5yQ)>5aUu_V&^~%)%wxbx(!F%5mrlgn z`jb1ZmrLlQ5Jv}R1$AM@RE$!2LLWJ6G%4m;@O|fS+xi@_-BoKlY}?;DO#?o* z+(jA+aepLIS${2!i8lQT25ZqNdi zjm};QrtRRsgVS9|43&3opaut4ydUrUt1?P(6%SwQ1lot4 z98O-7?K>PP!lyfGzBzlJ?mXFtVZBm2%WQ;AN1O^pA}pZg&zWvd=e98@G%0?G*~=vN zVNRU&j4Wiozc|Fr#yZT2m-Hl?B|u-NRY{B#kFkg5kbR)rZ;4EkvMhWOoLNbn_Skep zW@URdbZb~=G-fr&-Pdmu zH0z+P@d-}Ufj0gWQFj6jL9K}55-eV1Y^^(YZGn5VDz-ksT5d zglZx0rZ?zGvDhAom>rxXMBfBzvyEx7yl$v6m;lcl(7GQoG=7|vAZEXbT*F9Ypp1bT zTs`nGGERs@gkFG_)|7h$X&{Zof5VnN(^V>fOz7|Bv?n0Bm*PG#W!iiBtfk|zy=?=G)h5O$D`%Gi{ffjsbx+d z3B?eUNo8m_cdyBG{dNFaltbbUlpbbxoKn|0VklIn*YZ6C{@y7po_yiO@b!WqcTwD) zqait`$Etg`*W;RsMZ4tI8x9oqv9HLAe5b?y%%!$D85g6iyOGgPwO5PbAw2|AFO5}Cp<3HB%wrD`RRvtcZ;!(~Of zWj|_|Xzbc zi7BW@o>jr@GNK`eZas?>!oTD*m9fO>J z0rl`+@B*8=*c|S%xD!OAnN4@#{59Za>uJl_BYL?=r)Z`=%;Ag)Jl*l*VymBjOXv>Q zms(CD2O_~f@tF{S+E8TM(`TdsVc(JQ=yw?)NAHmtWT6a#@oJ|xB{QvM-6@BJco2NY z4I?>8BF+Ww?&d4&vBLlK)k*DV#9kkSCIbC!`|dsxn@GYb{E;k!KB~v#0SBapO$|Y` z5-aF=As*6smh*Bv$K^A|!qlUrZSRy^|K;|-xG!!|0b8tP>nwLon2jw4))P(`1b|OG zwXz7X^*<~-V7}cYlG4a-)!`$#_@Sw+JjlC^JO=I@?LTLH-5T}Y?BA++R6o-@J|XN{ zq0xMVaATzvND+NqRo&6Y`~Gr|VgK$qMo|3r73-kT)^xcnyg`<@!hI$0&;^dOjH*|^ z0|G9ex(Y_xq zUSyg_d)lrHhy^&v6K`C3oNV_uAGVoxVCPxEn6^M5op541tmI_1lG3G*^I;1B0N?!8 zzpe8qX{z`A8;_sRZGGO7z;S>!7*)%|e&)ch#yyss%9VMQTC^JG5F4E*wH#Z(5Yu~u zU6W_vcGcK9A0uwdWX^qPJDUkFqR0Apk|8j?3g zZfv*y@p%Ci=3nNAC^XUx5zHm`WN=hz7i)A@Em9@}ahiLzLkN50Kg|rdWw58>nshPM zw2R2|1T4!!9CiG|B6FV~{A0b~sVGn@x;lZ!oHE>`+wCJsREgZ#)JBn#-*ZS3NO^qp z9l+$Ud#R!;-0CkGtRK_wpH%v+cK0=BCTsKGv6$hX4(f~5;_o_})r1!{C~Q7gxfP^i zN2{&1nkuSlTXV=o@jPhuw`jn=%lQoY=dYz$GP)ptC}OiqP9Cunl=0eZqXl8zZUL;N zu5JWPAK_toa~xUAfe}K>dY5a$C(c~V(>eXwaR`YIdEw)d0sI=2^yNtBX_4o`J85+r zge3Hp<*LKEI_Z)5$3kVBjQdkt1LC0$xN#rRs33z`u^E!n5^gL8fCFT6UHzqn`pC6! z;(#t-bbk`2<^SwNu;FU_3GX}QU@Fuv_N5vC)fr081=@L(SX|uw)p6dVau%YrH7?ol zwUZiW`IeNzB>YMpP20<&AlOcE>qKSFjZ=1g5{W@hcIV`uu~7e=ezvM7XB0Z>+YOJD zBjznFcRG=2L;8LytZtZ})(C&~)#=_V789ywtLzbVCY zyQpCqD8<$F7%Ul)!me*&sUAnK{klkfyXFiZOi-myoe{EZDw)2`>F z^FT2{2w;nzpZ$z{rFuhwJV_uAeAX&2fCw_U{g82bRsaBrg--SIxn7Zg`-+Z=X~Hgg zW^=gYO*KoE#E}`H$b1O&02W1ur}T069-wkD1tJ(L0O0PcdLrK|{VTe~5n@4I#mAln z>eg0(8CCY7uz3??bvNy|gZ1;nNIQ5dX$xsng8+N{`_aY9g*ny`L+$<9>=aRvkb%dq2y6vOOMy9Mdtt<~fGK@Ab7*btK zB=3H<7@y?sZv?-xp4|nF(fhyJMaX=oe5w5{5>crb=Co6Q{5=bi6C1JdWBKefRG|%{ z!iYaImvCyoJK8+BNlED$3c}khtO3`zp(lZwPH&nUj588?u@^SAGxO_p;ra83ADwGg zRUywaPKIJYsF@o(VmU~kLyjQi%x=Xz!wkSI@D-QZ=1yQFAE)3sikhcK6y-$=m8@L# zY|K9S2;~aA+(2+1>?$&X{hb6`zK-!dJmhN0fPs|9U;<-o(f`T^DI;9Vag`rnquj)R z($%v7lagU)I+zV#kl;?WvNxV$_?aYVbhh^;LSOaBysl)2Rv2GBPq!%_QG|v7ge%MU zVIXBUg@3ey=zz>ED^_U}D@ZY5`a#kCP-6_wQNvPbr`| z=Cp_1pwRVk3rSjrUJ2%stJ5QF>}DnfL_^MT#C|bBSvT0>ZQtaKn<~_%zn{i-oP9}Q zKe0~J2UUwJ`rT)pOzk5jWgph`eazxPMINZX0~%oy4s>XhifyRYg`L7_@Q~WlK|dpU z?d)mwnBEWJ+P94`N!e`03nmVgsn3zJuDtOG4f!uNjCNmM~M+7lXRz z`pdN5D_n$`YWTs(@-Isivc8OxVw{q>9`B2$kg9TiNOa47BmKn1}Vd6TlX!OoCsInuEjnIDeqh?Rc6{2hQonq z+XWD)0WE#QHk}uqmrdM2=P1Xc(V{0G$hI|4+629O|E>?e&Jxi7qW$9zcUj9JA8S~O|ey&v)~ zBzf*Z6-Otxt3M=K)3UlYquS9E$XFy)hspaHKVsEd>+xBwMgi_*0B(xT0MCrmusq_WxVff_|&UZ60T zk+99ha!BEpXw!}kf^hi;lSpGEidy#jqAW6{TG?dAlCAXad-Ckgh%TaT_7OBR;|p7u zxJ2lj7pQm!f6qNLZf?w2Y$f%_ykT41fyTneq(=%EL#} zS+zOoRo@9BZL@zd+{U>@eRm|Ws>4S6ZpL>~Yg%52P})b3ua})fmN8ZlfbQ2<% zk{ITD3W%ISgepGkg>7dKG|+aD75f`p+fNyy0RDI$rxcsF($;D!BuR7&bncSdLQc5T z0<_%KFgvSB^|%vIem}{L;38~ezcp`w`L)J2zYMMvTNa$4gJRaOF# zJ7HS~{@0v)HDX+P(G{XW*36UzcQ}tOv|)ZbHA_du%EoF^%YdV=E~fkSAM#g*Kp4*P z)ug51fkub-A#U{A+fMjt|2v+#Pvu67o@h~d{S{^!0%~v_A^Kh*{!qh9?+k_IP{{xj z-3BUMI80F@l|KiMNDwUn?L75_4Y{ z^jx1FqLz1)-0w%uu`$#wr`~`i6(F&mzR}lBwLe#O&?KY0>!0JG?Vu2t%NCjR$;n*v2!n;p z(I@qmYWL|RvjCu4Jb6nxqAD0vL&O>dcOdT+b`4TY2_D6MTJ)n4nbCsDfbP=XV^7y1 zVDHa3%H(F9>8_%?KVno(7wc|kT;m$4=WBM&AK*5+U%b5#Oy%5qFUaU3m~6S*+gy_I z7UzExL|p&zzu6w9o8d-Z91bZe7$VdGCIcD3d0&te%0^xskAMA%c>xg{9Rw6}j=6pF zR$|{ZTSR#FTg~7#VL&8ZCH}d@xH4b>2dL(H7_}$4F_C8%mKa8z{!f%Y7~zBDD)0R! z9<7*K!=rjrJoT+5Ao+`ptq;z}GLe&aLN6mn-{PfLmVG=fUj1=u8O%qiu7^)l@`_ZaXrGAI6hM&0oZUuWFqP!;BdcI}8v<0N8y^`Xq%N zl?DSR1*y8g?Mp3r1b3Ao@uHGdkC~(l`|OF02JSUfF^k}+MLd)uuX_N=w!qoMHL|K{ zdW=K7e);5y?1M^U4sEP@SAL9RzVqi|!1vB_4^2|k^S^A#l1s)|?vuZq=Z~5Dz>oA*J&wOS z7)_`^nv+Jpb&ENFB~^jdw-9W3kfJw^!5UXoX(`y>>WOKf|6WV1nrx7voh`}kTk5OV zWl8l9!eT*-E>}Uaj{9h}A51 zWf^M6WDXNqdf*!(WnZ~Y8&?0Xc*?2!`Xq8~*4G>gSc*i{2F2!U74_tW$);;P^u;GXK!gcQh-5OIejTX-LX) z42?6ic17ei9E=;5r{xtQdVMv4c1HE zlG=M5ViY(mK8+JQM3ngX#G|!UI!4-SpY8@02`W&I@WDssEN-tOEj}fmC}4>s=P&n~ zj58XJ@MdIpmr~rtk^9Nt&Qf9QUgp$D6x3t5~CrsJOwVNF`MJf(1!oGc*CkNzoQU!#t=~P%xVLL0qwixSInN!d z4IZooEtiU&!1vI>bqLYj611uqz4{PAw?QJ_x)PP*Fx@NlQ5fm9K#$jJ<1Qaz0AdWy z?P=6f@WSZYgRs^i%VW2#gpej3_un4+hUGIo9Od&X5rE+>iP`0aQMR*rRGOzxoi9D! z2psBxlqi<_1I4*gr1xaP5e9cqS(d&e!E8BKog7b2%q^OOG8>Kw!UwdmUW_c3fWQ~3 zS(fW1JN8eyhC|nV_&&BF6uB0hKkHF`v$9gljnT2d#!N?!wmXXLRf4vpHf(QP;)Q;e ziFzFvY!W!Z-)BIl`0M?wEJ7%6iwB7zk9VFt^07NRrIBiHD`n7WM>_x_gI5JV9^sHZ zcE{9(w$ha;pvHq&z0T8U;?`<(j<=wYS$`>@9YW&ha7bVV6%7WYS&MgS!uXi{&wor7 zx^hUOi-jj1KbBANqX4U5$?7mptBl0@!uEZg*s~BUhV5chVLY=kqWLQh@v#XdC56fq z{G9Q={^Iu=49PBcVmB=6%^)98{x8f}67CzHXug@`q0BmC!xReB>;&(Wlfi_gpxg<6nHul&F=^ z_1t&IVgba#CU-r-$o>ETE!XgIk*eUwqgf0k=?TE`1zmizCm1#4t(bFS?Qf8QJn<&t z`9_nKZOq!Cv-r(eb<$CwotjW{-;fvarGRgla+4EW0i$?1UuB z8iI^m66SZI0*8_gr}OBGN%69uP1wJ%KLA68arC=N($-cVNZ0?Y@iJQ^7AvV^-IRf>fU`}Q;E$Lla@2H+QV_z;U4r5)fX~#v zrIr~FpTgb*HbLl|pSe4TKiXj-zz$GgsiL z{)ljOG61-56O% zmf=6voeZjf`-SJD)@svxsSU^yOYK_wPIZ=sZ$|JCkh^nX{H%jRwnXjTgpZDTlsO!SveUim84oKl2p(9I!*>Ae-~V?Mq6?yz zu9d6on(zCi{30JqIW0y|@PyQsjXM=0)12qry~8%G4k36)%ho3!bpSxiL1X9EfTRMZ zZx+L8oz9hDPdfIV6h}Jv)~#YiyML7x5v+ik-ND-K#3&sb=vyE9|5RutZcwrkyrq_b z;zTEJr>sbZw19{G{fzHaW=^y>j+5kX=i+(>;B3_{-mMvwa8I53R#QvJ)S#bf!ODk= zbcHIGqs2ETQ2_3fIE!Jws}^Dy)p5IUjMdv)*6E&Rw?XK7OkG$G9n$@+4R`&7_3YCa z8IQEWh2gU}2+Ww-Kr|nm;S@S}8Lc+%9 z6Q7>=dG&cmqW|` zixvQRg(vrYAJz|?$r8roYGtZWJLt{YhRZ+)UEQfLHGFK{H6m7Qf>m@e5Rnge+rB8^ zIboZ;I%?~_g|I4XIP)8&$s1JTBep~CqC`KkBMyq{&hf#@pklYCrO=4m@Z1H}wE{CT zFJdWcFQ?wyH4HVMzCKBSm0@cGo#%bwz>m+-K4`Ys;9|&alA7*+5?}AV>O5H;ELFX! zYAf;Q&22XbM2y{`zeuh`Xj3^2eOf7N&*OO3mREF{{N;dxZT_lg59ILG&CmzK;QUGM zK=su5b9qp@a6e9iUPXJa&u&vJC=O}0=z$rl4FpHXcI+}&di&L5R;@Tl$FXj&4P_tz zAT5>8%aX#jH-1^(XZD)j&fQx>Rw20k6S+^jmo!%GueC=4h*+r=gde5N>A0lDWyF>R zpMg*T2t117;@gg%gxMN&m6RTAYxy01V(fq}`>d4xDS311Ws2=8sra3e$Qsf>EX6qp z7{Z`k%e6g{T6sF8u0zhyNGXPBh*;5rQ z2wIQj!oUE%YMZ?ySX&uFakHmWb;|Q231?Du9zy6o0o)pCuR8h{6&KOB--~vj$|QRH zS4UtQn5zTu@C4i0%DR8|F38N3Ryuh=Aq}If)EA?9qXxsWfXm>asr$noTH#Ug5Z}06 zuC=0cw~DN|ZFqF(6Wk4O4k+aHeGdh87+_n(aAiC2Z3(NZV0jAN} zyDoqcmW_VygDK_#=m3ng!6UTd3~rfTf&rk!U;wqeI_r|Z-~d7+DU84)AOO>ct-y;a z2q+KWY2OS2UP6_@3rXTp= zu?#wuXX1+e7*a{0ob5XSI`&9Fft|yx8~B_-sMaZOkkTKLWw1Ftm`JIVH~L9l;`5gwav(EB zFE?r<^5B5C5uSTMnNR@#`7&f#73b`&gU4oPahiZ8a?rf2Hp&CXl`~<3G+`6&P$A3e z5RlCRU4k@B=ayZ-KeXuvVL&L+H}jN)(4#O%%@?rv%fC{mbO!^yRZ5v7uK&KVYTGGD zCCQ{gq?PshL5Pl@=6}YueLlxY2GrF!Mv(<(Up4hpCD|P_M(jy6a~~0p9vTitwid?r zDMPqPh*mtSI;ecr$z>akrQ~t5XD;C{<}^=HV*@mLw<`zx1Hpa<^R-V{)3rwgbZq4j zF$1>Ph`!45`UwxLZ)?-Kc|Jd*5LkNpMj7k2)DYi#O11PU9OZF>4dten4 zkK#MdNZbM%w=T$VA_l!|fL?gKsy&cpy{#2BbV?2bMR|*(>PikB4_mQ`wabh6?)$YM z06Yhz(y#~j-Oo+@uo#>2!J0YHaJF;F==zvY3h@O$N2LH45MX)uJj=U@{YEwbLef@s0AAs;b!b()GcxzOpLfoaf$xIeOV<_@-Q@ zr2laESV!Cwudh7i(0wtt&)r-=k#-fmV2`Xi=wZAv%M26Ekw$n%%PPLUqpd5xl;kFh z*_Gh{=&!Xqj-_{2k)P5p;ZTCJP4QH|#VBLtzdHB^a!zelF1x`Ty$qBb-A3;4k1e=Y z0&1AZJbDtJdl(Gc$Wiidc}wE_!g@71weUT$4(;CJ-XPG>07KVTi=p`ds>zS3!lA!b z)z)oh)(Fk$X+VN;r$f8sJ7R3bZv-%dRU^$!v)wEnF%v5YL$z1yGK3G-#bf}-_@*j) zh|XAmKeaLwdmU=yYJE0wMP6Eh*1@hk>(`e9mhPSOKFo&<2&&>Pyoc7uwDabJL?fIr zvPVde{o#-?-Bbq@57DkFdjy^xsV`3bf4&W=Oje)7ceNmq(U}Ie)EyOVTAjyDbHBGy z&=X_y06iIh^S={$f3#uV5_a4&SG4xk|0}R4mXm`*Is=0u0W(yLB)$-S*bP*Z>Kr-w zuHk_ppEB6M=k(ikD|uVy62d`{D;9J+YJs`(rBeV;@J=YUOlr<9_8pu8tRA}~589h5 zn}kz9rJ-R>KTxddG5M1Z87v5J0!rI+oK=8$2@kAyU%-Ec7ZZ?^%9{jNr7wy`*ii^~ zcZT7adc=jM=%=)6xccjZ-g3GF<ea0m<6<_0!-*sX%ehJ)k=n{3AEIL0!5T`oQ-4IzE`BOau4T5aL)Bp)4hSA)r<-X zZVMqb8%OQ^uRobNhYgiYwv9VY;U})XCnBe*ZxI3Bg);M@!NerEx%^_}gdV1;fG@fB zHQfR-L0zfExD=w}1!ok1tGkyFK80U!*~Pkp=oh7wHgRq(Od>1^K!vcWjve)8<9hrdm+~Y9RgHL^$Ef z*(>2-sGHF+tk}qBKtX06Yh$2hg(%i2w0=o3(MnPJ2toZj1S-Gx~V0?eSEhS)kAMBX=1n+z4EJL~oZSTon*G#}RFC^p)48F|D{U zYPtwoAOI9W8H478GnnH8%a+bzcn*{6zSZ@YqI!%vNR6Q|6(R*A{|k3F+=LyKn$Fgm z4h>7q&2^(}dDRp`0)#4WuZiI6PoT?s<~je--fj-g2qlZeBiQUTn^_*8qmd9%|tI2kh5Pz3e(=8I#DxI!z|Gv z0DjE>4S-pr@{{R)O87Pzq<0RRMvR{7+9;-1(oSKG0@tM6RlL?wM9Ec8R*a7e{RdR(LI^P$5mL&?8iUtr3Ng8uWjc|i zJi;p7tT6eghek9GFJ8Uob~~v6BI1RY9XD#pg)iBOskYeSj&kEFt4$H%Tf$f#ymQgJ z${Y;9S?;BNpE=|WAc&+ZQ@L9V7o&X~*oaqG)sxWWNl>c6SE>ZNf2}}eECq`8003BG zj%%&+vzXR5Ic73|W>y*AGmZ)PqCVqNlt_&`mxfbk1{Bi)fWW~E-VbEk&@`}W5VS-^ zmB)J`U6^UVVU8W{=4^VD@HU}0HF$~H^oYv><@h`|NFqY0&EF&0F zC=SV&8MJM-Noyclz^C~E2}|axb!kP2P{`%CkXIly8CQpI@iB^4eCh~9eq6XK6}6_G zqMl=3Rkt;|?_5I|{k{lve$al_rs$5^xgpjwb&b}3foKd6O%-AXnp~lY)bHaK%iYzW zNjUshvmT#L`_AG~Ep8lbl{9KZ&L@v{#ZSBEWvKlGWp9dLnF~A)KqSxA=VMZt-L30|U=vDh6|U-yWr)7`u0#b&-Z9 zZvxqCBMoM4JQ-+C&hTPB>u+X9?stp^RCjeZ=A7({y0*BiQRxKh;_4eA*Mpf~?Hh2* z@q?n~r3$xn5GAt}x6{7;G`3K3>ABze@J&TH7vL`StYc++@(O1VMtR*)6lnSO9H5`2 zp6Apdx6NlwiOOmOQ@W8>fLhB_K98NNl7qH&(8I(Gn@oSO1{>F#{4~^y4ZOz-Uj43@ zQa7#;5nwim5i7U)WVxPK@s~}y6th)lhXEsYR9T2`*qPsDTAmejVy>yehn?r~ESlm0 zD1%Cin<5ohW75*N#C0m4>i>U#5NUy$xu$f=Zp|c6|zRmPDQcf z4f`gT*^3)za;Z2{)c1DphGfX#w^{~AcKNvn9iRXJ0E_gAAWAzY9+W=VC7qOEZfH~U zT^%D7z8hdx$Bedmq&UhS$0Rr=*@n*P0P2}G2@0w&j+ zq0XL&ERhG_(f)$q5^p*-!;%L3p z$ApY%HEjmHTt-X_ivjcUJy-wo$cS|aW_uj?<&a8C*O7&uB{0RnLOla52NQ`0a-7Ia5JI3w+O7I< z36%Wgr}!mW^FFeDI@x{03hTpO%#=ErGe@)GjkSs+0dF9X-_hD|mR}`Li!2jCCM*mQ z%{AW$6~RWo_L9{5LRqy1gY+t!%@xvPp~YsbO8E1*9ENvH97YJ6-{=lx+)&*_06SoS z8!A4+eW&B=bE%!6$jzcy$-D+^g5?PM*S{p5wFB}L2WPtY%B%M7ANcfKGt{|GnM7dC!K4+&WjbMkL39C06?y@aT!PqMOh*1byG zo$}pFIbk)$`%w{k znC5&J6xP#i5G5zN>Q9lW;;K$#mR8?aZ5K_CUQ@Ue-c=a&r&yvBHWk^Nz4yZvD|Jwu zBJL>eo5BZ@C-E;=GpU1onP$O#=Wy@LPLZwG(09k*6%Bl)s(;QDAkgA_@D4d5a@qtH zXqhb=UmK>a%bRGZl$RE2a%;dX9dv==5{PQ)C${zOw&h;hlPLh?$a^-h zQU(1l1PLA{F7t>XIWMAQQj*yQ(CCFhv{D{0M=(YVS+ zodC^x6Ze&M7*V%C003b%Zcxn!m8Y{bnGIxKj65>0Xm09WRVUAWt>Y*j%sZ#O^R<}y zmh7+l{K`fjW7o2p5I_ zbJB8UW^zjwk|=Y5w9Hu2LnntKFQ07qi!_XlqL*oySB7MjmgB};wyHQQ!)?+XVJH7tlOyZFU^IuE!9FdR)kwuxx70#wMOy@Nym{sA{A#WiW0#gbP8681 z-mC;4)W>zV1=1iQ>_)r+ac4Sfge5(BM9Q?dUR_5!momoVydP>7b99E2Kc`ErCVR5^ zfjdxe;ju7;mn*@=1djvLq;(|q5e23%=C~^@KwtD_v)Gw!J!Lf$1LTC=7lKFA0MVC zO8sn0A`z*R?g=k7Xc7^B!1lA1lZdYUFFharn5R$nbfr({z9BIyexOg55#wX}X-2I+ z&zX-g($)@Nc~o1CzFqCN@gT3{*wd;Z*x<^zEK0zzaZ`SpP|N@T00GK5uD7j_=I5`q z;}d-H*{EOr+(;3#P_+ehmGcKFnfbxvT_+LDUM-kdgI))KB~d zaaCz`w+?CwdU(e+yFN|u)S~T*%}b*kc?ls^GQNb>cSoF=R5n9w-m-;>9;>WKT7022 zvXu%R8*UE=6Gs6pP?ehTcp-v$jIZ6o?$6vYWgPk!H}R>xuT#}=!`6aXc{>G;{Vf;Z z%)HA|&=D#n=K~G<3!Fb!`aMoC49n%QV<_`d%|VR%7_iQYSL34}m86=E`6H8}Mtha@ zC0E0z5%sSuCn@N1T$z(_F`>qiO4o3rk93Xmg$$&e1(r$EB^}s7HUIlvj6wUA=71z$ z6+AEzW1fdq61l~0fB+WnY6yUePOk2?x+aXcUepC5Hu`=8&bN5A+^{j2y^Z3IsCEF| zy?_7!BQb28*>g1Id(AL&Khg_(rf*59au7YgT+=m33r~(!vwJAJ2 z>3Rl+E*@lBRol<0p4I`J2dVfjrY(R!VkOt?I_+{Y>T{sfUPE5SR7VLsm-c@eMx3ew zN;m!_hKR(Y13@T@Xj5XpmCNIr5@89%$2&?6G3ztkxJG z?z*jC9Xk!e`2T!nzeI(Hwum>uKYsR0UA=eJ0O#6z3#=IP!yACAmbS`)<|YJp-@i{g zG2P1otWgtgi_3!?lG8L9mEQ7z^kceqn=fEMNR1Vl=%N!QBEQ)C#E@RZXeBZ5iL|6>+40V)O z(d;$0XHpKKo$#F#!IEOvIlhR$M2+uN!ucExSr>q%@7KyI-3SqCx={ir_lQNOCqgax4bXMcM{9(3{1V>b+~-gGz=j2VVI``F4%@ zeh?fl@a~LO@5s0dX6#8W$rt(Pk+Sg*Iqye>wA)F@<|!Ro1l`aM zv6cl*D$UnhpH^+?n3#QW#YWZ8Tk-)w-2{q5<#0*s$D@fV|5g4W&Pl8lPjuJ`d4r6& z9>-uCZnW)MJxhV-65PlhIApbswnyha7junyL`louL+uXLFjdl%rajO?X`T4&(MoNq z=uodd^sfAoq~QTEaWR_yP9;?elgq%mlhsE*b@K|AAP6?UWTg``cs<<$oJ`O|1Z?-b zqJ|Q0CG=hy9d^qT#FS`KFXljM8jC2fp~-yFcgKvT9q`i&w2gdA=0&@*akGmjZp7^W z>ru9bTI4>dLz48@tFtm@(eid>fxUfIfB*pW;Cm|KaHIgoZMxR)0zr+-Y|7tQh1NSL zjd9|abxQaG%9bxN&=BsZjT5LQx@&EF8j=K>O@P4=4mcx!}oix1bUl-#MFgy>yr zbhz>EwYaIZv>sTNER=x`rA->R_mS4A=7A+){~^f~Ub6f_ld^qRqP!SSzK?YV1VumN zY{-PKy^rU98H_h@Lwq(ulRPSE8Cxtn8ayGylx*t`om0^y_Qqi?52WjZmhk>i{}(nE zTo(uaUaf&+i)9FObN)54Uf7m^z*rmx-?`YcU9v{r+smRIB4a9u@49boD}XJ(E_}d7 ztB46U1o2|m@BLS=bmRbMXy*idd?=bWMw#A095b@zkX6Z@?j|=6gX2sO3b4B7tJ#P3 znqo~!OkDa5S#(P~WCgbHHkk5c=d2>4I^*9Ec{3}1^;zm_noWn+LS zBoR0+=%1l)allGB4E)4?O}3~6l!5{Q%eB1}$n3iPsE)9@(`XclarS1Ky}62d96VlM+%|rnY!q z=*Quq`3ANlPDwmh5mvt4r@GK|M*78Tb+H? z)%yDPzl^(yN5%Ll3z=D3xkCtt^>a>JowtXz zWuMQ!*5#@;?giSzb-69F+#;7yT3-@)d-qBl*zfFr8;oVrGfB0``^JBBFywLa8M0}K zc(pB=V@NrvZY@#y!X!4^&csG|sj%5MOkNHegwhcY2U?3|BgtF_G} zXI9Ud*}d>Hi;5fk8HPZGG7Y1LBN>Nh_kQH4tppw*BSd1eMAb4;Tn<|6hq$sZXZ?}ti?nHU^x8&&J?DA&H}{# z>mD=?U0%^&8{EKjM`D7*^V-9N@&N2Af5M99SQ_%`87Iu{1}lpjn?M|cr2Y^BK+QvZ zE!-u0;A!(THk9m1lyJF<#xNH3Kfxc}Z7hJh{QFnO<^bO+Kax71bO8NoE*GXg;oW77 zzTB|UrIc@kH!EPT45$Ki+p-}YuT4d>Oa!}$$2b<;{aeo^K%k<3!@onCGD+i%M8Zg* z8aG^r-fd72Aq*eTjqu@N#!t==hzkkzVo7Cx$nD%Wq2dmJgTp`20kE>{bd)FsdyjI$ ziU0rsvN@>VE-6|B@d9 zs0+WSiaNhotWx67K8A#|4sB_=155@aYpkguWrPft#;5(S0i9Vscm4a3X2EqmHX{kU ziOz>F0|JmN;vYB16W$5~1GAV}pJKPL;sHD_PXhjE|I^;+2htr##kkUUQ9Q*5zg40^9 z}V0$m`sOqWg6{T6$lApbtNy9S(|gE;%-7DtWw(4pI4BgTM@;1Tz7}_ z({UzOA1+4zm)o3Q8UOI5eh7!%-)JKXEkCBJuQt1Mf-V#@=*GgW^I_WlIc*5@qLsz4 zInKvPkil1DcKbog9P{dgh-^}Y&855tgU%tnSF)L>FiG*M3b6e#=M#q#XY#-uGizB% zI+5i`c|LWZYLP_5llhKq`OSrSU0C_mUGVgYej67*w3~4KVA;@<%$Ri=Y0k4*T;#J&FBxFNbM)I zn%wyo0^9Q=hh!4A-szFiW)*YAV5rc-4t1SxkPDJaCweBWy3Vt8isVy)P8Ndfp?I}N zc#km(<~rX#c#a9gGZ(evETH91to$wRU3R0{Ipf&W*@Ko?>hbjji06j@e{LYG(p*J~ ztZ5fJWEzRuM=+;qD}|?2=om;6=R1O7YS!h58@N*L79d4;Z;!=ibIZua|7a+H12#Yua3E z3^jEn8#e=ulP=``(D>TWxMdBTs7<86Z!RKHv-RZ!kVR`0;6OgE_+RM2WE+ANgzC8K zMsz@YL0~lLgwQsbhA-Z`45hgT_7Yg(1CZii)fHcSSivodaF|uq<6rwES{BEgSfw)u z2LqgyHu@SWbiaowAKsA22yBbqUmOAj5j?RAF}hF~9Fo#CZ-kLvUSi9u{M1ACd5W(x zMHp&f;qE-=Ed2P?8-!GIL^q0eKGLeFYBGZ>D%~3Mj906vayGJD9DVh*IoE||tb9C_ zAzxGpspK4q-X!Kt5}DD%tGf%kyfnFVL~JyO%2XZ9{Q3-4jQDT`u>s?HnML)ppSg2; zApjR?I^#`AHYlgK6qEPizkE;1U6MKxqNE+>s4U5AET%)<@4Y2|AJmVhBLXRUUH`Na zU9Yj?aQpS-({~Vq{kV6ToD7BgUqeCpA9qosahgStU{ay*AWMJuh~?oO=SIET|% zy&Y)y($5bo0rEA{)Ypf!nmy+?cLd-n9d7+u{7Lq{Y+M(BK;o1T?`G`D`DX%a0hujK zC0W>taxveZwIt@rj0XS!0X(KZA4eIvY0Z*axG%a`q+mi4>)38d?A~f<)4{ibwU=eK zKIP_C2NmlxcPv?dJdfF|>hRKLeDb3yx1f)6St<~EO8pU?wP04nD=NyW$=5^u9%Q&rug|(KoHV_4MAfsCor>PL)+gE%FHnp!stCcKwlRQ?0Xvkp5ev z5Aa-w9maUS7(5}SvqV{{wg!wCOaRK-OMkq|3N`tDSYQPNZ31^abwmO_SZ9f!uf!>N zU94!f>}rv%hBOVnJf3E0hMSG{0@a|VCUWVmiZu$Ue4UbJ2_`Ok(%j?4Z8GV5N(2=o zvwcHLrM2Lg%jCou@@+b#pS8z9q^z&cYQc#Mgj8Q*NS|A*b?q8lv3u$0o_KtILu$K$Ji~5iFCWiwBFW#P`o@dB%{W#@4 zG(Q!voxn%)_zG8Re`CFS!-)sQmu0009G zs{?kbRzD~oTG!}C2&q#nc9*!$c+LT{d%5)pSjDiu$Z!ZM9Gjc-Jm9X~p3Dy-@44>q zHn(n_uc_Th8ZVVVI!VPL!7sr`=sghd@X>lmKauAfJStDAT91&$Gsg9o>zTUGNPFDM zxrObJKY5eOhNPac&_?gX*487?g`nXcPNolGm^7~BN}6YPIm>VYItqT&sTQ$993@{e zvNb-tTU7uU(sCdG001B(n%GQgSTL4jvl3q*Bplf~skK-2#O58v(My()Xgx-;i6K@j zrH>YWw&mMxJCPt6;*;JKXy%v~rG>~R7rk#_h`GHJTm3*g(wV9++k|vShRP#Pj&-JNXr&-gfKgWR3cx8}HS8sJ zw}&w3QnLLc{$2F)2x2(tn%QivQ9x?k2%9~pfL%Yfcl3)2rw{x?(+ArVH7}iIaXT@B zByB*ICyl&X$4<994YTBp_jPD7v}U9%xr97T2^=Kq)x`KUk&M!og}@}w0>B(86aOX^uwnJ*El=rQa(?|4jBG2?%O>6_# z-nY}h#pOI}Xg#PJ=~LUmrRi->u{A{f{}k*)QoTsUBt#&P%Q< z>t}xhV+pbZzV-A4%P^}9x|&sGkg^+o{%B8#f((J)`hg0@q!u2)AilXKlF=P?<5m<= z5&4hB98G^s>7pU;#7Ir%m)|nv;AXATJ{eHk3`Ao+u0mqp*p?W)kQoPxE==OL;lV>*xb|o2@9Vj8512E-VO;s=?BE|w zczTX7C|}Nx2MwhsMj&Y{*cf)2MdlJ{vZ%JWrN+MIqEuZSUT8tW=Zs@ zD;bF55bsP$QQWw43f`7#MIuVB3VV6u_<+5u@p1%+q-9U20UiB^l9Wn44 zh(F^Y%8$ohppSjb)cXQOves(|OK~R-1^T>U6{ZoUE>`e=5PX1n=9?fcE4;dm*J&VWXv-JppcAXEWm2>r3dHBD129WLYe@q>o8Y{x695Gj^}e1TDgdhWxr4xZJAAc!Bg@`}y-a2> z6`Pv@0CfUIuuvpJEd+PM0r7F&Ziud+8mnoMXTaf)Gd{FwlSrrQ=3_FzQZwCt_+nmm zwO{vlhQ%kM&dc=E1*wyqTVL6qXbsH2(8Cxa6pNCLoXjF(kXyM}TiC=IhT)D!K$%VJ ze{XI`l~)&0;` zGLYDtG^})aRWc(kr#Nm|%MJ?ECJ$T5FXdjUg^$0xDuf3D=IhhSG-UlE1gFh7YZK zo6Z>3rxr-zJKd;Hc4twG$GG)pJpcdzl2apwJi=0fiy&X_s#af)HbVxWtcqUdt_+Ft zpws+cpW~2}-~fK%Telsrmqb&+N%j(CZEsj{b>u2B+cXFsyu&O2@~DYW;ULW237ffb*rnQ-SR z?aL{-pfiLfGr14^LvSDYkHwQ*XLg6d2$HtVc(72P(l2 z9vF9;J^chlRcdu5#gD!y000000001aXKL|rGd_5<7yuWiCCyI$5lCQ@J$}!wd(-nT z_ff$n4R!MKu`3R3%;tWWA>q8f@CIPS5{+GO00n3&%3Gmfy?_h=cIE$i&@ycR4!qkt X5$pxr61EkgL_8d4Jc(R{OyB?jv~u=R literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/connectwise/serviceticketrouting.webp b/static/images/auditor/10.8/addon/connectwise/serviceticketrouting.webp new file mode 100644 index 0000000000000000000000000000000000000000..9bcc122d8faae37778283c8593c59838d2ff0aef GIT binary patch literal 11094 zcmbW5Q*1}VnM@sxOq zol>!=tZ-+b;luH^vpS$MKgi2kV>NTmyUlOnRw#Jj*IPJ<^ebo$;)7eHaC1i))Ii)B zc)fEw;Pi7Al=KJyp`2lZq(Go9s~6#?fe*pqAhQ9`+kN202M*{5Xz7yo%kB$U1@i?| zMga-BesX+Ozg+K}JPurdTKfH;|K3fs2{q}Qv?U${=?Bq%0%xxuge|^)ykCN-ml1BS z4~P$f+P}_0-jA4HQth2`AjYrGWrP){G*IN%(tF~U5is$s@tUYKKoVqe1@=++I`NkH z*C?qFB`EyH=^gtWX#9_YCD2Y#{O2x+@geoS@+0vs=p5wqne%1wdGclSQut`pT4+2l zC0qt-{d)c~0!6(!fk2?I+fR?cMbORPX4Tznb&~gG;NT>0(XSwILZa7`M*{v&IEl z#lJtYkcddUnlKhkZVvLQKN1nQ5|35Hy-Wz+ zR{c7r#q1QJGkr+_5;$lp@a>`i$Pdfe;;~A_Wudv1;I&v;>nkxlTS#EWSLOc zJj!w&X}(VAAUL>w$K5e3CrzsP$31PBK7*2maG6lPwQGhRU|&jd)vv^5eJ?=AoA_VF z`G*CBc_ag)ze3tG8Pq$g07{M!cK{rzw9LN}?R_f*pok!)EVi$i`5)vULEK31Z-f5_ z&wtgUecjPF&O-Cwr2h-qe`6^B#7ei;c%I_JD1KpVzmFgu zeF3Ckg#UMI{NoRfhsY%pzlDg|)Bgzlr)~b@NC>X3Waar1VIeG~rdHkC0X#wr#A_~S zG;Ue7YQ60?dJTEO^mIs+wJ>M~Pk!#AI!%?QHn@SvK3Q==pJRdnjOC6@r%cz+r>PV{ z=_E3Xb$(Aq%8*5izri$<#Dzj)eYnSRSm>yZ{hLm-22)Om^ELR*ITRGzBMMpA+L|`Vh2%b~L+52hfgd%=Mi7^Jap?~ zH(zUFsT`k?S(Z%AZzV{+^c)3q?>7%hPT>Hoz3&=As`Jcf>7*YR!U(<}XSnYCb@fLgk7do$i_ zMjCphxFxdwC;>9A2=i2ZNk_N0T!;Evcm*Z<$9ok3PMN+tvF3Ql$tXQO zgMah%mJ#>4VT=-G7>s|r`(4Oci4m>hZKc8xMRv7~V{{&Mb?Ysli+UqaaaPsE5!zi! zJU#M9ZBf}8B(^Pvc@5O5<;3rWw-HHYe$rJCnLh4zMfo+fMHvE2rWKmH8a_b?F z`)q*3dURnPa0ape$n6>)((%TJ?@5z7+m#8Uub+Y!xOAy=FApDq@+|P+F{!`BfWN*_ zZa}^ucNPG}e_2@3s^fDAM34lAT`9=2Xsf(esJ{C4h$z{Z(LLf|j}a*>aoHxyD;&21 z0HT#@A8JW8nq#dB9rRTMB$>^xg|{48#SqxoB@HEaRIU)`kY?iU{oVCAIP z@kwgjZfN$u&{f2mpoCb-lT=srB#wG6A6j2gH@xNM%e(2@%OI|{{N+MgPKAmX^~Q$q zF)YkGMt?$2omT6kJ|?p| zQZAYYRrV&X3Uve;-=@K_;bvyoKs?7a68HMw967t_0dc1HGZ}!H;(AkX4xJf}^qVA= zq}saHb8zeQu>R**fZ@wo9>LOgzo+KH`sk?<)g|_1a3?YcM-^_ZyuQ5GevIDMu8|Ey zR;&wUj1L-84SA$8z1TeDQNdyKhTI_DUmgNFBWSUd>n5a_InNt{RbLCi^(aGonz)|9 z&FlT~MWO&l@b0=3t)avZ6uY+*^T36WrL8g6~RorVA5Yv%2-(hbvz+Kp9u26cq*W1R1lAX_vh^g*dgIi>i zXy_XmI60J;2l{}x5k!2u|7%494fjYzUdA84;MEDpW8NM}OlK!uw{25ToApacjk4$( z9Rg<*pJ6_WHq199lAz${?RMHSm3$mX+PG-nMwePrgpgRXq^@2JVMCXiJ&WOG@C~p~ zs8RGzd(i?G5^$!-;|lY>BZ5}NQm1Y?)oYt98D`7W2!8buikUHMOa;H6W+z}RM>uA( z#{tF2Fb}3EPldfN&HH8@k$%O8iZb1liM#rwH;y{i&Po+Mv+2v=5FW84yrjh3#0xQX zL^~{#esl1^MuAI@CO$%6+z^qFvD~Gg9s0J#0_(P_W=J%GsK9ow#)nBWv||iw({)oi zIBu>fdHgqYL=VOYBlgZzHFyrweQ`Oxfj^8%h)%0KRgKat6ajZ!%GO8cp%`XF)QQUE zgU-(LRF9<05d_-V+PNYaumnEcxpz6=eD&nvb#}?>n6Wt)6x90KO2jV@>oXq4$_XN? ztl@c~>{G71;%qA^m=7R6A-q42>B5II=K_L1xj3HSRtpwnamnx5!le&LsgBdnN3Mcx zF*QV-fqerbWx#Q!Ac7a<^*hUk1)(!0y_*N-y-s3JO_v*d+OL+*vIdhy`Wh708R-H; zpK|~pssW2>IL7TGb%NTx$z|~-IoLIQV)CfhZ*sIRDG2}oz%UI0GK+A+Uxw5<2}wGZ zsgcTf9(lwIo;~k4=!d<~I#Qq^-Pjc1i?VJ;K!G&F41DP-zpLK9XhNQz4G5QJ0N!>i zAdfgzN1E@19Lb=46We^Wek%LvSnwel60zTJs{V>-!(rJ*QQWeBE2bQ{6%#4ucD zW$dNze&X!^J84+*|&I@)sK*PY|HZZokHS-{YzdrDh_981w9)0?BXf>LRvc4%v7 zh`ilo`4+#H;;B_xFPyKcQhgv*d@AlTP%aoE(Ir5_KGAn_%Tdz))}V?P)HdwQ+begf zH1tfDg*wn4MK`9J@zM$XXof8#LOeyJ zb7a27cK3DVbr|YeRvuzSd9Ps`04ME)9IjIZhW!zAHPkr;wj!S9=qUahsKT7j7uF zbW%iM%0)m~CKs#PIxGt!mzRzgzOL_aZ}$Dv2d1yR@0rTzbl!UV*Fjk6aac3-BeL@F zg97fUIb}B5Yc}U(5}vSteL!%(9CUi`J`Mtu;i0rA@hCg|9sI|LGVt_dN!m>##)gWu zyW^&J4Hs=j@0}9h!Yo{op^{XH3MG=E-9^=IsqgsjWPg8pou|BNxz@1M>ErjTxz%#2yYgtpNC_F`39tWJ4FQMz~@d4wY-#BY`}!# z)B9;TAv$5};yD+(K)EpA(E3pVIjQ~8u~L8b3=S-w%i{&caKLKmMDds+lxTdU{haH& z6Hh%4WXDh|Y&HHwk^QPG__dcyl8UbrsjXG&Z{tWKT@Sg5(0}lA`#z9rR!+z_GK}2{ z%~oCw8d?#yJoT{B{e`@VEw+TFmcO+Isr<_JdC}HueHOVCef#a+FR(^gG<1_SIQm{8 zpOn*Je297GM&hv3urRzLHIW+z5#fUF!vM~8DE*1ovqTQ3dCvFLhdX@=LmN@8`S ze)vT|q^(LTIlG1!H2jJ-8Fsh9;Ij?~-Wy{Q})7!7}&xMA;(m zX1=$6E&YkK(^NNn(zHV3b}z&O8cyP7U&LjCHcV}WCVLOJKvuKm1GfhUh%vhyksOJ= zZP@;JYudBktiqEc9Y?3(0MExuGp@GH2+ylwJR0X$6HfM1-PkrERFU5P=^(|w$k`k! zsnjNO4@zPiy|?(v{Aa;^SYVMKtO6!SaK#>RyOE{Nq{%K+!F+9m*n`7?difY6Hg3QT zrMhA;Kkie&(a08yeptuOe&IM4LnPNW)ZK`CO;=;VDVedf^DhXtIyX^y@Ktjgslk_O zZ5H@KIN~Fp?5hpg$O`)!;?RtT7lOz{wh6#EE26TGr)F=JvO4+s|&3qQtLJ5A?H%X~RrPdyvwfTlx0(ZQ# z<(0tu>#r3ayKpWN+%qysEzDaON0ah}mPri`bM~A6Z%dJls7q4qv4x%DciiEOFeGxM~=_BPxMg>WT_)_B7 zR0JuPyWe?{jp2zCVD0&wf$=-a6QWTbRQc|-t3u|YMvY9r(@&G6OErnnm=OXVki09B z=o)yB2XR;BTwdPCVv%i0aF%9gZv7fd%5R&G#qVM^xEAnmmjH!?Scc7vhLwkUzh(GA zy8Ya(W${|kw`dm_-#*f)theT(X9p7K{^Y*32AB}sXAPgPDsyUC;>bo}h1|W{9wG_O zjh0lyiiDSgZ_w158rdCIHL$EcGd8~og|!VJy+fY(?B*XA*=))}V1D6nUlF(IeSGhW zvf1I_poMxI8tHe0K}l5NbH;FxKF@HZ>twmUBIn{GR@ZzNr?NJ&SSDnLab$Fc<@VZ6 zjO04rkMhLOwo)j(%+Tfep-IDWyQW`fIpRmpwcjAG8YVw(u2?rE&5d$(%h#(SElE5T zl8L5CmQq&U(CO;3*{A4|z+Iyc5KJwEmLSX|XdHuMwCbR(+hi7qw6fao1R>Q3j!Zxvr5q5G3@m82W~4!1U4S_qWknW{x_D>>WBoS0k@q`F4V@u6ebwAH3YS7hz*=y zOKmYl-6`?~HA=UC{{C2N$jm-CG0OK>RrV>4RUx-hcWVol;dVozs#s9r)qPM^&53>F z5ap*HN{8`cON_FVUgT24WTNLuiyt80QyH`^GUQKUCDI4^opc&xFRk z%cLi^g6Bud-d?+w4qVjpRkkFD7VO-=a|6S>&oFGicE$v;aap4>+`w9s)@heM-PHmJ z!ln5>X$}EyOVmLxm;0j(b+k9(chdqm_wB9?_EHDYe3|Zt?_A}t+xjkg$YG5(8J1-# z93D6#+*yEK=#XxGib0S!=Sp|6bx!2@i{&0DgWB_NCs!Xq7F$ak7u>-=kZMQoaXi=n=$eVu35 zGU~Z!K+Ujsa$B^=)I1YnUQ;iUu>$SE#5GfZ{0fFyPM$|5EY&=|KD~^G@l3_`pJz9k z#w1fVM(Ci7G^Htgc&jYOsarZhuXW~=9!g+ZJD-wh`>K4Q2iT)Z1;zc|iL;0`f@wl)}`njidU zYM>BXNjc;$$PSE;A7@h&%7dXaQdO3Lg~M9JHBGZq+zM>MKz0UU-;gKR%w2`ZDTJ^aUF6cmFF-juLNoLJ0yzQI~Y4r4F zr;Quqpo6pz1=kSvC1LSR7L`~?alGt54!iN&YY2VJyLsL`3 zc(!)FTaFJ_ng&bM=Fy1+Rf?&Z7Z#6@P0r>Y`Y8=G3!}Ey!D}= z2n2JSjb^0(9lOykx!qySP4Fq>e?~|KdnGPQ`fM}=VSohXvl^}@JU!r8Gew<#LuqJA z#kTcoO7ge?z&pbI6}uFH9b*6|l~tUY9WS${E%|;&LeP!aGue zk5w?2G`E5u%fkZ4(OQ*RH3Mb#SXa2IboZMY&1dh{r5x;jjX@&BiQ8^asjOfE6x>1M!Zt=oS4wdIATF0P~f+X5K6q` zMd*6M1B{xes1>5;Yg`+ zVj$H11p~~Szd8nB5!z5NGge(zy4XitXYy<5RL@wW~Hcu`5qiOAf&$D<(z1)goQKw&M%qlJ? zH{s7+Pn+u;)q2Yw=J;>3MaNQNK+pI=LNSp4r}zm;>1Cm1t}yIl#7Y1Jj=WPsXHp9K zS$|;x>ee-TJKueDDFh#23o{-O;qi8fy}(`v0hN_!_o;cgKpb0;&)Crd-VPe>dx;Dq zrYg9*1&S!#VAAm43;yyGKC4sbZSVVs()GQJ#Ki8JDN!3J{d=e=CgAD`69CowAHD8TP8vYIORuOt0k|gD;KCUOW=$ zQw1sm%z-(H(fC+_+HC5m17K!RSh#;Fs5wgUYXQGunzGo8I?>obpcjqBzrBuja1R#jQ5A8ABnftj z=jPL7M~hrYe#411V^OvKo34UDnbD@xrA*0kWN)pudqgENK6JDc=Q!s~j5dfruT%Yn zufZoT);^BN%idFJ!HIZSg_ z3EF+y(UO*4Uq(qXBsUQ5;Mf_pt8|H9UrV?jNPkT2q=oMS1gm{TRi!W2tQtx0ugUlK zd->JJJsr7F`|;7B%2*+z`5YM<(YaxhBW?cp{_IXe>4sAYFYNMyM^$;5tO}JsGz6#O zxnus~#pie_>!Z58>d| zBUA;kB9r8~Hfy$DzyD`201#*ofb*d-#Avy(`Xmt6qC=f}siC&k_!QCkzz;L=-8146 z*2hytu^u#@|A~K*^wHA*Bo6`&p575c&_Ac#4*<5ABQyMk(%_${8CTYcWJg1Qbcle; z3zkCUJg%Mo3@ zgoV^YzL4@*sAESZK-}I%L%N*PmE||IA`jLytI2kQ7X>Uvxu&`!NXs{=D_m=&DqwBN z>%9gizTHpAi^ug~sZeg^Glrw)3g>KF!&9>z!!L8W;hvbX;7-^@v{{aV+@n&_`^$a= zlEGH~X#^=9$KXXGz<%K55!&A^%={Yql{&jYR#9w9zSd!CYtd0vn}{`EPK7x0*geA6 z8P4E7M)}(M3d9~-DrU13!(oOlxz__n-dcyH!!P+UZ4IICUVna;x#M0Jv}QpqzTVn# zL0}J62b4Z~H3`tT1q8E#P*^6Q@3Ezy#tgDbml*H+!IC`dRIi%{D>23-K?YlHL+7aM z+voFg@Y^Agup?XMR1WZ}bTiN_A=Xs>HQ|}h>ag5_>0H^^X=l`Ck<0F$Scr)0$v;>HPd*wY%DcmZUoT=4^&s?^G-rFE(zxzvzQ-nk(gM0W=hU z$@j6_bs*u;Aumotl;mHcTtwc`<0?jh#z^WQQ0}(S`r_Q^c@34jdQgyiml4F!_cWn5 z>CgG|L!Tcv)HQ3^yU+Dsw{F?*V=PuP!g4bzgK63#RD{7PjYawZ@0ey0BJ07mi(VuA z(0GNoo`?=aEphNBfxx-RvYE$tef~cw8L4tzJ*|M*`4rM*k24ePN;nVet+!$4D3N+bb+z43-V777Fi}3{Q5$~veJ zV6F<5jI@OfqM7LQp+ycogd$RnPOL2bOk~wBISv#beVUXWNnoEenhM;DkgE9p=5 zX6j;3P7*YT57$#O%b6%J)rXSPWMmR%q*|Z+^yCZS@C;s0GuH>3agH2P<5)CI4heJU zki3!3;wcq*kwY4lO{7{?Js32~AI_ti`2pXKb5#{&aN(dss5`UQdyXE9Z{GP^8!idP z5+7mP<1Sr=qKDq9^^l@pG+W67b}(h8>zj>I_O;AHLli))k5K`GYvJ= z+qZjS|Jl+WV(ygaP?5gx8?~(krz_9eB6@QU%o*W9o4O?v%(o{;vBX@!iD>J7jT^$$ zHjau%;|;{}2EpR$D=&mt%ySQxVr%vqov-y>zClvAyZxRq0!8B$7 z);gqsguVT?_ESLito{*XbV49BAT{NSfLr1w(Ym}e)(>?mZ>Y<@N+Vu)DJsH4P_#s< zGz`h&{1+`upZRSu^fmc*DurUwaSNJt9?qQ1n74mG9XmO}$hQ7^m`y+}w!3%EyU?Ks zhdlX@_=~WCNAwq^e^$KY>ca<*gaGg09>bP98Qld&54G^<{&OY&3@Kh_2-xtbK?Zgv zD1T8UwLnXEImCkEB-#clkma|J>wSxti@pU10p6$Urs!PxQA(6#tk3I$j~Coa{#?wr zCYzo<=_9Ol#R3aLsfmo@&fcK`FL}%Wbe(?4azB=QR7J$jpWq`d%oGj6a;GKGW7CNL ze3O|CMv5livwzF-UO`=>jmJR%?m8UVf+97)Vv`_Quo!*2_5_!_Sne`Tvv*>y1vhu} zNhfkwANs$0kY?xM*OJ7kc1f(O^05Wb$atvPS~nf%q6Jta!-5_egYC-%IIp{*^~px71IjQrbkLO6g;Ea+ zYWH}*mAS{9IbWI^yZb&lGLg~BtU%xOQ{F~r*i{WCYE)hH4L0xMq#%@gR-1ea(57i& z0N}E{+kqVakV(Ca{xY~T4chFp#M`cLV6OVLNom=}5D$U1YyxvT#bsP51nL`YEcO{z z!~s7>IIH?#PZIH&E#t?mnl3~q3)#YW-@j!jP1EKi-ir~Sssy;QQZ}4xQJFZFOr9PyugA}OJ z0ZuV0FJADfQ&wpB4wdj8Q222Cf#$1YB)r(i{rp~*G)iy&)09hEqKwAn(We_MAEz|r zm)lKcVDWQU3j?i8&gSmN^A2a{Sqcke+erD8i=m>>CY@n(k!`fW-@IzTo-X~n{Vy7H z0NX-U7pD+}3#VX1WV~D1!e8anrB1O7h+;?LsPK<7kp#qcuOTLUg=fH{12T*4ZXTBg zv=e39WrZ6`%<09NZWy&MUJ%Z0q7%xHYq~nea-OHcA@KM>c({!-N5Acys61_)uI+BO z_(ukwfFQy;W}~}B_H_Z*4sHdTle%b?ZhrTiUph@%(G1OS<9v06v>^Ael-V?CyGsKE zeV;1=H*wa&nsL2A3EOY#?`09t$yBP%M(+hqD75*rObo{b+p29RXfBdJi>VXngjT@} z`Jlv%ev!ckV29)9M6Nt=en!Ej$N-WZOyhJxLiR)M8^>`z|Gef47qPz31PXW!NLy+4+jy zvtfn~TC~9S+(EcNF%<)c?6SXhJSzFkE^tmBG3Kp_6~O4?Xsv(2YvQ0`Qj2O~<84p2 zJ#Ia|lp4-`bT@tPb8HRXtf3pvoXShUlNckl58v;Fm$#wZY90$wj4H$H@O$KTeSSC# z`3I#0|C3lt-}33VkBJi#yzWh+JU$FtDdgO3qX+$)UzCZmNZ2Ap!@pVizXjGZ>_Qyy z`~I%1I;GeZ2n{fHz$cz6aX}!5oiALwx9)fN)yAjT`QRaE=GQi7>N&q+K$(CQDx&*k zN+NzkG(NF_65%qv#LkH+R`mpAR*<44r*J;l0o!Muchh&owV}S(wB<r(8e;FK0BP!A8iv5E@Hjasv+ zX8ovDOGR2jBAN>T&=eO@(oo_e_W!5f&I9s5XahkTK?LkLGNek$NJ+@lx&i|cqRj30 z-J784q0R!TKhPu;KjX&7rkl?CU51;>+jm@Cfei=1A}lu+je#81cmYozfN~0z~-sScY4f zPYsCrzWFBm9)F$}E?Dhb_=f!Kcnf%&zZOh1G$I-Y<^UUjFdzHhg8NL@f^WUL-&NnL z-wvfI~ox@090;jf`W#oq)4|D4_H`%xB8G;0Mt) z(MiBdK>9zs@f$FpW(U%i12F$2puXTEY^W)EaXAIuiclESY)(w-C-Ta14Y4z+s8)Cb zyEa%7D((ooSM>ybWa27GjSnLfk&MeQStf!WNVDDA=w7u~fBJ$dMVz2;Bs-lLcX`Bu z34+W*y9RRb1(N)abaVQSKj-oJ?mPQXGWu ziUxu*cj1;(Zv=%83wy{c6Vy%1(sbHlaK6$y1J0(aiQH|kPK-B$w0m-75RopY##h@Y zcFudr&+-nQt=uTL)RcF7usya*)2VF-GU!s9o#xr)fy~oY7gNQ5&(GVscwZ~yVnN_R zp(ZJL(FWigRf08Lsqf0Il$THpO0fJPX>D&lk!BvnVA2MyTZAvXC&Oyi)@lXYM6n8M zt3m!t`415h&%j~I9;j$aTfDe9HL_+k@! z2hD{d4L^EdRRG_;lK|FeT??!)W|F!T15dryO3{mtKcSnGR0t(b{>+|hU;hp8|IGC~ ziQLV9-|lPEO!qSIE6#d$A7*G4e>m$DGV^l(mriH@%htNsoCL9>lBJV#SV3j%+7V@& zVAPpb=I3kZ#;?ZqFH;1G;zC-1U3(2w%B!cG`t`obZVa*<^qsUT;5`o;*Nf-DF>P`c zPq8Z;ANgReJT~~|dfpGEh6Uh{yQ%?nT`&l@NV+j7VO61mnL9#hXR~HtQ?38m^}-Cm zvOal$JXq=T5rlFxi7~2!L7Qtbj0HoAB6`9rJovNO$q_MOrnN{5B?wJrS=3*%84P6Q z7bIQo=!mD4(Zj0jGWFsiFKaxgq5NIC7KwsSnB3|eiodLo>-au8OpINFv);<|!Wm=m zul#2+yjeqQQm>L}wq2!Wx&6{xzMME$0W-%!W_-*~u`yoVOr$9RIwSuJQ4cl^2|sv- zer*zCrjY;e&=b0Y83_dQ7-SDl$JjVX9r7n(zW&o6!3TF$PRIX=`e;RZ zn=qv z9vwDUFmR2!%*7JbqEwWZV5hH8+;w52e52id``D2B%jO2T%ZYApzSzo~^_7}+h&bsQ zTZQfkN21F!mZ{?0GfWRhMWbd^W$K2gAi_eoP&$(eU>3Lt*~!w37^S&;fH>`v)hoQ55eU4%;pKAr06e}8(#F0wVN z^nWA`{?>?rrzwJ<1;v%}AcS`!9p8u5e0_U)+2IT^h@?yI%T&Xz0>y6!b5&Dur0?|O z`lX68)r}(ISTWA;hxeIBJ8SkzwGrb~Nh(6ElGu=uJ6d*m$w`&8E52@v<&vSD$KsHU zC))WVvB-(bI7(H74ghJl2wGs{5H1Cw@Ex-- ze1)BtcUC2Xh-(e=*WuP8-AVw(h?x{bYC4`ZG@33^0IOrHv8P%+)Lw1a6o z^akw@DqNYZtToz40^CfSB`aLpzo3+h1z=au!781zB!a`DpIS3=Bmx$8J+Gn)Kx#tD zpnhE&t2|4PFAM+xaBl;E2N4$aU14!9NTWTyy@DJ+xYu!+IE`rH72OioR9u*XrDcJ0 zPx=h_3E7r_f$fv$ITv5bpX6y-k9Nxy`@D2p$JRe4P+;s4VgP^!*rPXRr-iJ8Z8hya zUC+?S@ki0D5EwcRdBtj1_bL_O52wnLVI-9n=UtwZuHvE?#UPs-uG7J%x7b%HR}EAr zb_6{FUA80?uB>wjB(Q|ASu)CerT!!fAn1pjksEx`?lk=qmC=eKNcmHD)aA|BYE%pH zyf5kX@2EN}Vc}lRAS}pTK7M52PqbtXV`v+n6=zea@W==vq_6&mPO)6EO(Z`Ygmk@w z1?dN>*Wh4$F*KelclVVRb*!hS@#klMshkQ!Kzt2QY1V7fACIK?TII^Uq`qb{wy@LA4d6{%N86C)dzdMAyUgqLTkUeU~a zpbn}+-lNe;kVmDIlN&5-| z+x?t4pzf$kP3pW;*nnEQ>dC!Q2zpnI)ZOBVMMNaj`HF#gu#$B(dXUHMqDpIr!8N~P zJJ1@N^f?BF97yT+>#O5zx{7If9Sq+JVvIUG2o&aLau1T(xQYcqMX^cfrI@Ibw~OWH zh>>0I4~&<-(ZYOB_OBh|#CJ^FU?QJ-^}17y<4rhq7_(`lb_d)(w=r1}wfX z4_~O;JqKZ5N36cr{_5ZWVp2Uh46~N0J&T8K2Jm=(9<;~n8yT^3 z4U{{f94btr!RCWh!Et{K2JkoENRQqj8B~PU0#hxgMAIbF*DD;GmChy%0c$-gRigY@ zdrXm3c%H0uz!f9#XU75O$H*!?Ln%%`WTTNzTDd*f@gsv+(nhD)C8_(k@po7DWc{fZ z@_MjM13BByJXKt;My=%#9fXuyE?RsxNW$(>Xp+q>{kN&iz{!BRff}x8Wy6HUEqnmA)67@aLTLgUz)|%i zU&to3GYkgA&D0Xb?muu*fEne!*5IKWhw9>)BxJtO8)X=58tv7wGHN`tfw)09vre0v z>bS$GQ-S80?B}!IpI?_=Hr_;MM5l@;hc349;h6VGf9qSnW5e2Rp+-(*^~i5l^%$%5 zGaQCeyzE>sO__nVl|UIl`5f7aN>GP;&=3Q}m01#YI-SvsuUv&U&m(VxU38?z2=SY0UDGUs%e3voGr^V<64HmI{^;r+;bd%AD!Q5HOyXQ>SpzsIHJa)R;chWO$*} zgq>OLQt$&xv*%~4`5~sUPYa)(buL3dUN2*RH1-!^j3~GjQ5LNYKw0NzlVZqxHw+*N zlXPi$O$y@4M1r(|;l^s9k0iDWl_Dzi{8U@lQI?=?Aq?+6aBj%Ys}gd4oqQMbP{kJK z_yasjBV8z^zXPH1WCh$hJaSTE=^6`PRv(E5G|i8p>g&wWR$wLnRF(#kv3dxk&m?(yHQ=qJsrbAuB)P2e;TJ zkz#veMy?tgYusb(r{#mkQkwyyz*0lk=TaCcX-h(_u;-Q+@_UoMUpcW=hoB3=g~CWb zL}a?3hUMN)s8=L8&O}I2h3{dVvXy;!DAj^M44RR0bo($vySuSY8tnIq8sc2#?X(FE z1q_YZ!8+oaPX+R|3+WWh6c)srAK&wVy$b7lH1Nij$6#wgClx6Mjnr!!e!ZV-`m8XN z@g9hof=QZm2g8vsbO#noYM=CgVz2!v*7I67nwZeNfm?qPk)CO<7+-g!PM+YxmE}p3 zo^7sX9ctqCwUzq5zk-Foo{ULPCnfw&RoW$K9-*YY`ctRX^D^|u@BvE$dZtdaQL$(q zWoK6-hq!c1@_L@x*AJ*|K3w0z=UixtG|rgDJ0)!QUpP;VwnEfWf}hUNyzFwA69r&F zY%5^3ONEyl)AuEb?;#&8B0Ud^0!|2zg&ekPd}O>^NteyuavB=BVSeJtQqE%0Gz2Pp z!@hmHDRtF95=+hDGsmEG%~U5hX*pv3S=U~K*wmN%+cZCn&~$Z3KD z2lmF;uIaPV;yP*cYd{WLlz33}kR_$meZw#?f=P51l)H@jCBmtiK>zGb;yVYZwu;7( zFqvH)jo8{oJwC9$ooj~iCA=w|l}f@;9#}Yy#-Bh{eGz-M6{dk00o}YN%t!RiDKFO* z*?sIDmnQwWy4>wVyEGf|x9KKKS0}fMa}>ehmy{j4880K@#D7{S@?=!2J7SQV{<3RG z!x}WE!O;qUijg9u!RvI^9;xO%l&DLIHvgOjar!P~-L+r?arv{Mwlg1CK1@t4ktyN^ zVFV|^HIv5-d-p(>6dn3!a8Z}iXt)P|8Woi#i`nd#SA0KQ2lRw$<2k?rx2cL5p~ugf zlZt!f2KQTQvy6bY56w31IO zWrg$08Zzk%&=&h7wiAFF$66OW;H?uP_2Izt9SVZv$1xm{@0Ec&E=WAs2!V?X6JZ-@ zSkwj?n>L)~%>J}8q9`>R?@a!DC*Bvf?3>6#sN`If`TEWdbS&1<`QAirl(O{g%V@9s zEc;0n$DY)eIDPTKO?Fx_d0S!MLT+?OnC~Q%riw=K>oWxk6fCh&jt+_I_hR*Qou5O~ zaZculhL{ht=|f3e_GA!x((;0uGJUi=Q6B_?uR-L#e@}c#K-$;tx7dDPk+;Llmb6A~ z`EuHk9VF4^FfVcH{^_b5=9|w##9R!|zHWO4>d5;=1IPAjgp+n7_w+dT3SZN!4f?=;0 z%-?1wwc62R*85$i6fS9VAQz{H@)`Gyz4Sjq=Y~wcT$WL)7gulR$WO^O3xwhX$|)^d z@yBl3{yJu1%qN&JF}u-$@Fwq$bMRMD=grekwB1eqZFK*6;c&pG*?R(ww79e$8SV{F zVm5(IDYVxE!^u-S65QNWu}u}Ei8=#`McDu6K6*3>#hJQG#(9Li6e{HhO+|#4QX+*O zF=qiEP0W3zOOdlL(g3=)LhTllQB}c%*4=UYH|bM>Kd7tsp{2A1;8*i~!r%AVyw#zq zS_zWF50q+X0o(YvFbaZ@Y{+)8_Q^)@vV+E7*g0&?1VZNny0Q*WO{;Wjzk}9hMrd&i zev4{@%vQ)Z)>qVN*7?3)!bp|LqN8q3SiH4_@r-bs?+=83U_t$XF*W8T>M zsFc|i@c%%1Yk-B-*7dnGUvNJ`k#`aWC64Xk%19 z&2E$@_H^w#KF{)sJthv9>F47c>T-(nEq%fx%IV2{VCKOyfQf@iz2-A&sK~+O2qVux zo1f;t@cTg^L1P)|niRC?j(j{T5SOLtg=*uv{ZC;pIhrDJA)A-p*XAHxI-j736iNFS zt60*t6jMl>b|gL!M)dhUlY&S{sgc_-w>@M?_8hn=c;!~}PXEr4%+(8_gx$QU^PS;z z5}I_-`DQvn48GM9Nq({@OyI#uGs+r6D_GH+zRcwlQ5qncO-B3qfCNd!qc-Q?Wu4f~ zn&`DTmFZeThQy$>fGClYQ6LWp5h$_r!E}62i%xZ2WVU5wiSQLnugwYlWUQ@ZC|Nt= z6u;T`ji{O|LBlAILrLc1gVI8bWZH@f9DC-Yl+hR_pcr&Na2mH93)kU+msLw;TW6&; zz(m&b9*KFgtNlfkp4bcLNOD1y7Frv~V0)WsYo+G(EzmdQ+wWQ#%s$J(sT%7PbErrK z<5SV?9pSTS+mGg(&SKlC-~J^_duK3n*TCZ0Yt^oxfF6TZXADNb>=Y8u%2-HB6Oq&d zOT5hAJk3^h-o6!s=br#)capUtqjZ%|@>@~jZFu`gUZYfg!4Ix4fi#RG4`7c|C({a! zlZ9IjkIYW~%kZ)S(+iA2T);0@`eyz8G&b0m#i~w{k@Tg9LcAGE*9d~wbnao{9&?$` zK?DnhGNDhUhWzCR$5+S{Shh*hTOS_}Itx+++0?u6XFhLWFvy9O?J#^;n)+Kde+X`=gWH@YySfb;1b7XCEkt-(xn7R$r2SC@qo+LE zw;Tj~)O$=rdBEhv>*SJI4(K>1iFB1@U%wVV($mbZq#|;4ar{NDS9d#UVwzdSBEncW zg~^>oZk^y2xVk8MDm@XKou#6+2jI!M0PbC9f+DHX9C7Xpm`@Hga&5D8M&3c&yPFD{ z3i;$3#){sDy9HrIQlYd8?fUY+1e=t7o;?1H7{4dv#U%K#<0{@-?;Mc*2Pw~XS8e9` zkyVyhw7DbcLjxQ%%oG*T$G7FEe1z1K4pbs2u@UllC1Il00+OzfTF>+&az{BnK_xBA}Q0wB|L82ygoP>lTpYPy=wp7_VC(no_%4N zAos$Uonr{%jA^=4=FYIJ*%LnDm~nK&Lt}~oH!6-}GwLC)J$0h{&juUVt{9zPhEr*q z8};xrB2GCu9m{sp+|t)b&hijqu%>10X1X%Q4K|_{0JIR6Pk9hxx)1kbiI0Qm(hRJy zI0p!@o~T=0MNSXjiq3&(q2D6IRBLP-d2KQfOn-k-Qnzo#il4r2LxxqGsRX9_sO5A4 zNd&{tW|-4vrlg?keC@h=pVbAO9Kk5d6JaSwPwCE`mb0pE zDq%if40Nq|&Hcd2Ajrs+SKa5Z=wq%dZvMl|^*g{6n!a{Qldn$i^T811IjzvzF&#H8%9P{|~@s&@= zzYSgt#goFoPy*K8RRm6`%yU!r9wE`fv8(`w2oc#sZ_FmmOE3?PZJFHB-yg-`|G2wEo|0 zMH;27VnMYd0+(^2*#piV)Qq1XV7YDO*b(!|Yo}-(iC9tXJY!=Xp0+B#k~iUK8Vp{V z>yyd=?vAowE4SZMcyXcX|FXan!u+}HBCTf_C)dc(uDm@m{F=c`Y4axyzd9upO_+Wx z6TFg>GvS&#mYbh9(&y^HTFGTm&T_VO+I@<=YKr62;geGQXQt~UkIn539jQZ0AN|Si z6cqzC7m_-f7bNU@Gi)igm8zMARnnE8Fc0K@wRu5~;&9;V`y~10`lP)2PJB(%F^D*S z;3xmVR!YhdKex{)OvorpEvsrKL5RshR8p{HJr?J8z15jJb(`CdBx9!u(oFq_J#`>i zA<;(4_3h)~ImC^KeQZh;_XOollL(Q-raj=(dqq}kZg%Upj_hU5z#&{a<;Sie70<6% z=&9%>OO79`>Gu~U`uZWyqP70D;It834wJRQN(|#?hfF$2erztErCG@W2OozmZ>( zyWP>^BUk&sl*Y1<6df~CQnh{K*iX!fWx1y19($7ZtT8xj zp@=7Q+sQs5AJUhL0>QF+Gfmo&OfR+1pcTt3K}qWO)xNHEfu330CS}hZDNPrBH#J{_ zhm$n*s>x6t?y+G^=-;CHjTdgpCPQKU2O9VGchdRRtiG|t@k>+Shd|T8F z8PE@kgETunm#hxkiCa0fh(H2Cr}&k+PuByWfbmA|+pTAjR`6AfWH~YX^U}c73E%Nf|!wJOh0L?=CjW6=^bq54Q0zN%kp{ zU#qPoMMDJMyZ|1DtJN0N-^c53UpAaVCr>&kIW0Gdvvz|M>7uiKY08;Yy^CuH8%IWz zOTs_bwj`oLO3u#a#fkIv$i&M5$LjBH7Db9Rc(#4RK<4#qr(m&ibq-@aMb={ax5e&( z=Jp{gw`psL8*+~wlEICdf{u;eH=*#&Omo4r-%$;w-~vcx2L|d%Gec}*RA$Vjf?5ci z{7^c5-9eWO*R0X!wKq?0=3KVh{h;)donM0wP7R-ldyEm!Z}Z)50;IF|_0IhXkkx6) zg9cCHfnlf}6U~y{f(m+namJ5lyy4Oo^n&tZ3l%<$pM!QV?k_vakP$cE>xurjmW3JI zc7q$Vu@wl{_hMHVzr#G<|5@)hYq<1$UdIdAwUxRzHt=qEkr-Vgt9pG9j+D%QJ`O6X zS_KZ7v)~h2ny&iUkVFz@#-3ODI76%Ff5HrLALIkZ?N9lV!NnfnJm^5!7|gaGaKA$KIw^Z48%6K0Gx1X$yc6*T{*L zrv1ItKX#`(HWX1&qz4D&O{}Cq+FX=oun^k_srY zt!N9HejYoE(+x6;;;ZOycXQlyW77z@b-si49*%28>G+*#LSjYW7^zOA;hz{j-P0FP z1jV?e)#je9BgHj3*Ev1t2m&13kCjM-GF?AW=qH@i2er@ZARx?<|BTz|wbiH+sf19J z(Jtkj&0b**Zpo1!K5A-o`Sg?ufq{rMc2OZp3}(hO$^>Iq`F+;VylD~lrV-iFOM{D~d@zBqHyudY5~ z_duxO>HzP19SfwfbX|@RwtWvPJUN2CM^$J~T1BE53ms$?DvkGtKpZG^51uFp>y<{) z^JF}!B1Xqwjv2Vw4|Tfz%hWLIMXtUh$gwad@gi~W)63AnHUytkJ0hM(7!9O1T#xd3 z3E3j$?YsPgU0G7GY}{%7sq}Ark(H#f*Qe^t4eF^Gl7$qdrs1l% zIQd@*I`HP?lf^Y+A5u3A)SL^=1WU!dv5tLMp@qdcP53+5L=T8Q<%_XKY#aqqd?+g z@VE+AuI|uh9suCCXKT%84w`=I$xXg=o_VW5h8k7V{ZZmB(Tn;wETR?tL=3Hq1@Y`3 zM@skqNqDyG$CtNO0LOEg2NoFAK1sthUOl5{A#2w;Vh|mz4NPKUd zjrj2aaM zekcJ(%PNLRuTUVV%9rOb$w4L3F4;-Ll2=W~rQD-$Kb=qZ|KP8 z$6rzsH+HRBn7vOkkAhQ5ljGh&_|ND~{psM)_m=QOWGk)*bMN->mX2fU#$?qHwr6oO zmKuZA@7p5|IF_fnA?gbb*D`&Pfy$Tux9RP%dX={HpHH;ZOI!4?p(M1EX$f*lnhLU*wx`fF5CFx6k@rj5zI6%eMXvqWrj1oU z=DW^ed<^s{)v_ zhg05wzx=v#A#OJyyG5AT%ZNj|$#V6WWGo2`k$-Pl_bPDN9Vr z$LxAHjclQM=myC((I=N0A6Wv9WMdqyY`|H^C{snMzhbUH$OxY@4{mwxl@YA@0%4_W zuJ%bH2L)TXLbU?haCHTQ{6s-`1SqO(TRU29W|2pddAb(I#4i*8bR9i=!j8gGcyMsAv~30OF|1Ut<>rs_!3&v*3FMDQGX4MHECY&!GCPs8oj zD*YbplBZIf@|Zh~?Kukv%tFG6<}QOpM?u^p`y4G;}T=as!cYHorVn&- zX6&SWZ(r}=%t|sQF&9l`ouIX5h+?$l#&^FWpb4|&t(e{e!;}q!lrT-5fR+GZCO$nt z(2jZtj`3sseOTWHIT_-KZNLZh3>YSp58MAC_&3$3^w!32rR(<|mT(+wZLtT0=*r2Q!xtkO6T}R#G2|F)-769Qnm^BIL<5 z!MYhIT!!kr0l+?^bX%zj<-}+g7j!{8x-n+Bl&vmYEu7&jDH!ws`(U4!f$+Op*$P?K zKqa0?{2Vv%2D1=<20%R7-Fw1>C+uRp-qjU8r`dTj9=EH*fcOoOqsTHbOsAnX!duY32#54?mw3oP zt=%XWK5*-2&I?{(c$@d}iNW8@~h{%H@(6b%mpCsm_8h}KuYk4 z^|!>p!$oO?%OHq>hw5WzOq0?&QZ=x_WGl|5AKIt}wBquj#iyt8BKBRQO{C>uT$FW@ z!b>^uUjb3U03cC<)L%Jz8;kHrI`=7mYx`|GdP$knUtQPOj%b|!3c{7u;uf}1-ZDAbikf7+SDdqB0 zzmn?HU7S0yYJRW9)`HT4rz}oG-&)Pl2?iTaoLsyu!-O#k%`Tq|6!%6$y~1|n8hNG| z!4s;J6I_@Csy|oFYd#eefWblY*wXj4s3n##jeI&;lx@Q(=(03v zON<{8Yv4u1+RMXm`295agI?_`Kg4Ba}p$)_jguURsQ5@K713VdB^1Te%mjZ+kPuhIHE+fT!H`IW; zu1Ku?_)YLR?!)qQ5tb@h*I+tTp8S^VWGj=~w9ZBt|Asc@$H=>_XN-eHPxB;#&*Dd9 z?!Z+{D8;(U%i{EgnLf^|jfcvOy`IJ4u2e?q(od-?NuCfntzrjt_*4LDr%N?h!Ss1rDrZAI<^p3B0cc!V=AvLDcxjO|B<^Fd)t+#G8 z9<&4PCM23^xl>OF#9doU9EWOF;nsMDdI8~AJw9lErkhPHCJ=9_Z_+E3fRykF?-}eS z#1j=6XV~_oJgayF&Bij)?VhrXqS{jJzTf4JJfA0MOy1oU>cfRfY*mHP zA|Ze~&>cTXuin|V^ty{O1?|nrnoplx{Hk${NEH#Vy{PyrIh+}U|4Iz60m6pOj{}ja%PlfA&80ElVR7mLx0&gI#U-2g8(vkWA<nuI^ zSW$7+-99^P7+xKKNW2`8VNH0_Cuq&{cSeA@qg9Ad8b~(mYjj#RTx`s~*qA?=T{KxaGORmK67v*L zDKC|GyFPxWc69_c8@HpqWjmrGz#=}r7?7|PJL4=s{n?{F&>VL*T_JCEQW!Uwj8zmJ z>>z>GK`mFGu1j4?2#uct$1`5&-Yn~) zHwzOQQfpSi%V)42ZD!)iAEiI5ahUwEX&gbDL_F#=x5Tn!0LV~8LkzN!CPjuq1s=0I z73d$JRJD@K2PkGSYAY~F(=qSW`^enwuK-pdK&bNug1ju@pAYG`3#*Bo`J?^DgAw^`39Nj0CvN-^YM>W0 zt&yByxfn&!^g7rnCNc36!Y>VYM`q1v%U&hl~ z7lL}ns_qYij|LStEivjh>?`pYW|oJ8x_2(YI=aEBIaHjRMt=1!$k$)id2=lo1u4(A zaX{H2sp#zRvN#6!tfAIXi@^Vjx^tVX$(o=GnONZvQq953LCk#*Rp{jJTHw!?B6q@S zpL!O<+sQ8%1VXlp_}g9@W$VLkO8Yo3xL5xUWSU`A7%u54yye2HTt$w2L(bFFhH*?N z#N4lRTUVtR_CoBzf}2cPL0hIZy3Wk$kYPEVU&$!U(sL>_0&(r}4eTW}UzKd`8Q1wN zcz%*K=s<4&cPW>%Fl71bLzLOzxvRyJ?4tQkd-eSU0ecC4a{WhzjBLydi@9*J@`mES zN7~@uw%50mmvdZsqwV+|?^QM49;2Yx$w=jY)|69yXh{Tv8Y_q+Y}=_0{rh2tfvP{` zRE%sXStTG`b_X<0l6}||rUz-n>q&u3YoaXLOW`&qD{Nm}a>GH;F>!=RGz;U} zjLF!zoTY0=TE2}}Wa&O`;mGjB?;PUDLwJELKThFCw92hN9>`gf&wkD*N-eS-0j%HG zK)`m8!Zc0C%JY2uZ;pzb+kY6eotk=s=)t#qm#yN@k;{p2JdU0>ZyDyNrw4WGoZvmL zOEQy5Wh+5-BR@QkKL^J=|I$usUm{kUUbd3C=(|WQW|!I6ovtIr#)q=VIt>_ zs)eTJpg|dk04!l2t!GNB z{<1wsrgwmLG_@`f`B9%7RyhKcIFal?O>-YS^@#~PW+l~@?J<0Jn4elo3judhX3K=G zDvv!UI*L}+$rf4^dynef0`WBL z3Qlq)pJ>FN?2X4$x1+cP7uOlrBbn-?)VI3-s2AG>CS#i5rV*2-xq zHF7=k4z>bW8%yoDConel=|W)oV8Mh{U3tfpq}0av&1##j*laW%ejLZS<#n#4auwnw zM=7&w*7c5nxM^)k67{vLKqF2~Py%rIHndQupy?Ngl_v@+%L1P3D@D_LVpj(Of9e19 zbd|C$Ii~fvNU|JFlREP^Yw9eEwT};qIix@AikVUa`!>EL;bOe-uxd%cUWj%XLUSp| zit4IJKPnPvCza)QZSPhmWkRRN^LDH|lwRi=C8Y7!6M}jZtqA^8R_JM+7?2gQx^3p( oy0?RJr+_vwZb}Pwx|m{vSu^${B~}b0H6_#gjFHJV*a!glUkel%X#fBK literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/connectwise/testalert.webp b/static/images/auditor/10.8/addon/connectwise/testalert.webp new file mode 100644 index 0000000000000000000000000000000000000000..7d9fe4d5e77090f45f8ce4ee0d5f2969c20d5409 GIT binary patch literal 58390 zcmZs>W0WO9x-MK+mu=g&yKLLGZQHi1x@>nDUAAr8uKo3yIWu?Wem8$buC;e$Mm%pk zcvmV(iiyD=0s*Ou3M;57a1w(29W%Ot<^og0gX@Cw+p?xfln|E^lgxLP7r;fD+kH}L zlmXJbZd!RzGxpSO_ZD3U@}O`+1cJW8k0@fhN1g$*-v-|@Uzn~pC~(qtFINJ0p42Y+ zCB08OuV115tpG)U{wB%?Qj@+y0aOPXM87|I7U2-j45kK=|K`THb&Uwy#W z()a1#VaM&phb`daTmPFFaaI#&+#%mbonOOUUn|W z(UBsk8=`5FYeIA9GNP-w1b^>@zOiRaHdCjKO>B<}V0v?=j*- zHy~F*AP=cj=jB(a=1gxPHI=+-O*Qy4HHr5C!4I`wk@H=a{#s>b1-$%ZD>fvUkE=+V zrR_a{xXkEpcjEnX6?*~D_t8k_eiHWmF=3GiCjDklA2lSasgKC^$>{;V(a)7iag-4H z1blfxWlVTwGTYL1FjX%2wY`RN@Rebcx;~_LbAQbd14x_O)kWaEf}>nL*;HsD43b~q zt?uT-evNF;?v{t^5sLl4p*C#714V8AEH+_}N7E0$A? z*+pHY8R`f1XzV*2%{9!h`{nqjc@iBADE+C=Z@?1Uhlchr1y}&gs-K}aJzZUie=QbZ zwQ?SpJ&f3ZinLEVW#AFTvc*_d8_ODFTmKKfS$|k(7Q9Z2#rR*tWM_>p%jxPG5#$XN z)HRFA7F$H`?XeXnIA@V0VgLI-%S>er|DMR|O;h`68@K6N%-=TSSc67QdNjG7`OK3E z{e;uUR`lI4Gln=nmH?gW-5S*Hm5HSFr$&L#3vE)rB|H!KmljQ7jpO>zp*anakhYAC zdXGOb{V9%dek=I-m@ID(Q>Y^sHn?x*CZZVL&vSj1xti^k_+JFy^8DufJZTfS;ReV9 zDu`dg6Uk7l#A26qL+rsutQbEhF;edlcjYKhr9l+_z4BBp;=1MOLal@_hKU92Cv zbzc0sW~4bai8y7e#f>;X>!dvVnmOnSaFHyvt{zmKEJw6(55ORL`ncY>t1X!(_Wrq| zmWQCYxdxe$0TW8tQp%E|pmcMserJakppk6DKvx;Wg3N%O0l2ZmLVJvHO zuy+Sw&=$#D49j}+##mI7bfv7qemJEhc%Ox(t27geT8MB}4C`}5$LIX~5={8spomdl zai7!-V_;NJAT)5`4F7d*AfhlS^}b@9XCbcE(fUitb@x-GV;R(m;JmAxv{1Ff(D%Nu z{m9Hj%Ty4i!n^yYkrwu0P#*d$d^}z~9P$CzxPeRP$h;?0w219=53eFSn|zWU6j~Xs zNSs{_p0gi@3lZ;Qdt(7`oCjjtc_6Xwwjbol+68a%>M_AFd8@_dn6UYhtHX?Ce8@4+ z@0kPC4YtQtuv;JLXWDBCd7B+u0p>CoAmpHR+q0|NT z;oX}y8|K_NW&#W*l9W7IIID;vwK<|)B@8B*w+S=Xay=oOvEa{vj@#vO!g&`Tv%ka6 z0x8LBZ>EoA&we&IRiOlZtJnfhcs!C8#42)Xw78XY@YN0e#Lf@j`j$@Wy=v(|8WuKU zUYu=QjTi|jgrvuV=vwa%aXDE1Nm_4HWjD!idGn;-7J9Ml$VGv{AzRbplHSk>Gviix3rO`j*lVUH3^7VJH@fWbqrx@}-ZOnv<>Hrs9R0bp zK)#H_C!x;RP4_7T0OocPU`ZP{m_Xy^BCAAfzCdfR{!L`GYDFBz+*C`k#EifErAt+1 zPNrx&al3I7kn|-mR@7S2xl`5^ux=uo9E{n}%pz+Ukf!q8javo(VILlGv%Fy8gx&;u zwv>jYo+i&y5KFOA$)*@OVO}X=gpmi6?TO+=W%PSC^(>E4^kh|eYKcu0F*B%Q`DDl` za^rED;6N{EEQBmGk$E0Xaepu1H2yl(Ln6;~Ssif5GU zb;Tve5~;J*Q>d5{$wH(jXPk_vRV2TzQ5CgCK5MRN@xi&nGw~k^l6!$un_HK%r&EIB zN>p*i7MG2QlNKD9`>-~aLVs97BMhRBDMt)P!=uf}3^oQ2L4V_+t62lSvI;ya&wX@$ z1|}B%0Mj@wC^RxGSTxAu{>{{hVUVfu zOZKm!lD=3+QpQFR<5*R-(tAUV1T?)gU^u{KUmAKV*B3Fwwh}CeDu&?~ zaz}wN2O_iXoqgGsxTY)$B`fcKZ4xb_+#;4hSAHF?!(z0aB zd53OZ0lRZS4*Mo-CHl_;JQ?_e|KZ|)@~ZzZT#Tx*k4xD9-p5#0l?{gZNjN6x^7UGp zG6bI%3L>OxceW_^N}`5cnuu(vJb#M;+gR!KJi!LtZ+95BRB)=_fmKA531Aa?ko^KX zZ74OMCfA!ywPbz{sgg`@CexCs6Owt%db;}uNdI~?p|s~W7SgevT_Ie;wo^a&}ltv`~p9c6AuuNdDx!<41Khup6_nGZ&j;_#U~xJ z$L}uK<$-5mk6tKR4HVR~Tqr>y^&1%r5W|pCYV1ZV(a1$!RyZs#F(Cu)wScf9B6`R| zZgXJ=h>l;b`~TML0ebO&X!gQQFw3MdcdGXvbMv$KVALw7+w$3AZeP3$B?a}vqIR;8#c^&TsW$%;+0fd7bQ}HZhY_dPjDSfAptC7SWNap%x zSe6cueGG|sFcI~3o6qL&^7};fbONaZ2YbE3w5aus|Hi1hkb2(q3R*3h!9uDrx{8Gv zjTnc9@hmoPZycvLYT1fY;wm(3xOfkPq#m@@!^R@H@TNEPodQq-3Bqi(**)J76SoKt z+eH-sb5=XV-)svxAY1>EeIbHvE~^RL;MV_D>|7hJ$wV&oRy_x+F|&{bs5lT|yY1f>z>fOlz- z;&4X|?vn@w0$Zrsoy>)TX_xdLFez7`7$j?(gPLN36pfe-F~!nxj0dFb=1Z3gbH4`_b3uJ zhO3w{i~*QtkAu*(<>%of@fiFsJfGaRtn_kmIo1%#F*@`ICCo?8sF?hG81wU}Cn?K| zk+ra9M8`JN*LwTXTG3xxT3hpeI`7XU^a>}^(a#CKfoWU|`bCzl(oI)NGjeF61PtWN zSCTSbyO5&R2H`hBI5EeU$C&F@DO)3NL6Usyhe5Lci|k)#Dy&*Ev64x+e{%~us+CTx z`%GkUNBEmAg?3dk1>{wVYXH6|`)v{kWWY?pyMvaB?l5fc2oSjyKAoJ;-_}5yl4i&$ zJXCU7F()uak!^j_HlXk^uBn(a(UV=wtd^UFxKe zZZqbQ5@K8iw4N@ey{BrFEY?L^NrznbC&poK)mjjcPfXjJBkTQL=lW09 zd|JLRLmpJ?*|_L1$$sQz==g6xJg<{)EADn+Ydn8H*pE(E1Tp>m zugX08hx@ie!ak|Jtzw{5H7j6{!IMiTTBvG5jXF4ozZa6AbAR30p$O)|*s*=`>P=T!*LFjw*##fCA)X4X&~}n zCwQ5MHLwtd{-Sxvx3m{7$kx3m@Y{oVCtw|x@WMwz-#8a@-vy_U2sE{9k{*6X>%{rX?wvU~}bK#N0}~qw#-b zps4l}u~}Am7enTTd6>oj%|w5z$*&>O1y!v7Xx`V-albs!oC8*%EQopiP|d=TOqmPZ z6{iLCSAID5QCpio4`7ip+gMA2RBYPs_D@(4iTiE`!t2_Mck>4O&VMb~a#+WtK#jzr z@5XFk7Vbmo^?#R%ZFLXO=+6Z=?=PQ{V<85z-8I4`)*-s$0I3eD1G-@Gi6H+NCU?YL!iIN^#RF-enO5)=>hk7mWRGH3~t3YgUebVRndp|vfd zbEB!#)t|lHLRDpIbD#?rKY2<9>YjPVZ4)3&QMSojR92 zKCarKygte{Em%A-$F?Dvns8dAZKx2(lekrg$bS?3@`tQdMLkVakhvEkYm5KS{Lc3E z?%%f@xm4+eUxFzAItu?IWd%vzEl))mZM8~5q%YPsinN9_W0l$9+#4k?<#KNVtJOmnI_Ah`&=E31-OG zrIr{i;{8lVga+wpzCA(>!-IZIiuT`;>YwIptvZBJjiGrq;}Y_>GViK73%YQ3h})0X zt4th@2~=_6nNudaO|u&Oyn4bO)L=O)Xjw!bI-Jp_JSr&e1@iS7PJR z)2_7FLlYMrzMNs-sOsph?`k^e4F0Ddt=9IQ};ZYEHHwHR!j?4G_ zWY~w{>O6ljL+n-gZ<8`&);M0atX#~f>_ungV0E44UTXq}?zY!-yUxXg@j9n~Kk;`t zMWMj8nsDe2=8Ti<-e9%F;8Jt}m5OS}Z*kI>MzOHLyMmhkS6hX6P{auN(kp@0NTzsC z1J{2`m;@uF)f7~=GXIxr70jlvvnE?d&|A_x_A_vX*^AKS64RGxz07oA4xg!HkWTZPF%Fd1 z^o#%6^S|#vd0`2$boO6;9$9{6%>A`(?G&nT|L1qIx|hxi`v-=qRMb&wpZ_Onh=d$f z*M<-Ixksj~ez|*X1WYPY`d^Uj>nmiyh1_xFd635YHqPHt;)XpkiE`q}hUEze5J*F3 z1`K$#;?`BTtCjdmd8q?S!qyDY%)mMm|sJlYA7XoXI+rLjEK~Pla226{wHB$E=0ATU28qSwYFTKP05dRja2rZ zEgh=>0$7n;V*h(9PYc7)JJDt=J-$Y+azW!D&kFumt^xN zNxrA#9%W+TUaX4*IyC43_u(94??CR&rg4w~j&i^4F^l+&r@MI+<^xAvlRsQ7fZ3`D zvK_o&2~9@(I$unL|D~8_f9>Wv@SRU{y9?@j7lfEUR2w*Bna`vI0xx=Bw2K#i6W&sT@}rywe6Q z*hyu?4whYCDIFqR?(ZzCA0kOTJ+_0`Bg2MBwrr65Cud^J)K zpn~2T{`qr?$RiVhd*SQdm!IYINHcPS*kp*iA2oA1yR9}%G_R4vTO_3 zkm}y)#n`G6K9!;VCpq#>XXJzh?TPM|!|9_=L-mYv;A#XgWn0%l8>kvCO?#{P1uh-v zyK>X}CioS6b?8H!mM^y0geq#02{bmsuK%*flUhFp*wa-a&tUSc+r4Wbs>RBsz&!4x zrZ;;KYrrz+x$lI(u+Am{ciKlC@hxxd)9%phSBER?(OUX8HWk$$&Zc(GM=)Qj<%IMsjQ~s$MI*^BIM_*WR=}+ zP3w>oKK`hn6gQ?X%+ed|o{8sm_vgnmkb5E~+4^$2QfxDWYfYz%70#QkCKya$IiP<$ z;}MxFbnMa_-3Xkk@SbUFJd$iYeB+Mu$#L~5hEO)Kuy=A^CLXfV8;9Az5T3M?dT{=9 z5y9aA)rw=>F2PA14&OAx^G`Ee>_0{}5SpbtkMR?w*GL~))z7(PtT1GFXtUXQXt6EC zw5AQ~Y>UjZ>wF{eZO_>^ll+1D1h5LS<>=MKElGU)Gr4Fl)h=0Q$xp7EMco=~3st*+kj{3i$#Dw5jer)0J z((N`9H=lX+a`RP$6?Qy0WE2O$mK;~RiGXn%m`M;J1I-l|d_O0shtDTfbu7+q2S)^m zXln05nXb|TQ3@r2C&z!L4222iL_H)_zuQPR-MRPQFO;-{=_lJ3`;^>VjFxytg5A<__PxVoZyD?vEljo&CJUP;#9IzAo*r2K{iamJW!G*o^jcuwIo+>PtOM= zO#NIT?#T0{73{M7B0&&S*+Y+20Q~r4Efy9w5XagYWSmx*#WsGoM2N7zE6tx>J~v#2 zEM%Pu`mB&3&Z|9o0$2wX?TS+(QL&n6dlNj+#EdCMEe=AbWx9O#V_J^U=UmPZ4d&SWxyotYNIZX4eESSjMf5 zIfKgO95mXLW5<)MZ{-hfVi=c}A0TQaxal7eJam`-k!|4vx_J$T@XWz1@ zlARx3j*`BTY%m_<4>#oT(WlRjb84=cz|TKJe0ataAOg5{C=D-DN{ps^dQwg9sCs+t z@br~b7u;VljVw)p*TZ_ZzNuq_jUZf$t_)0{nsXCaZ;LuJS9a(y*AY@Epl^7Wo8b%M zI$PgUC?zUfj!pVpWU#9J?}E$gi!}Q#nXnkgx8bPB3Et85?+>=JLbW7kbx?deGixSj zP|^c}c~YfN3sUt(L+}Myy};XSU{`oRnxWGzHk)zYu1CL+hw3f8oo`dUb7}?SlH?dL zsi?!@FIpA5e2#Js+b48A>=;uq?>Rot3M+5eZ+sogp7va^8(Vn!Hu|0Ztgo7kzoieZ z{RX!xUt~p0ohEKGkp4wtQfEHLGz()W-M+5U8oO5Pj4NCsyRxNfw;~QC!8j`%q)kd^ z8)t0!l=}hpgun+w`@~hy+wXaZezcOrUK-?ur%qrHgSqEm)21ZEhS@G;z@B#@=;Ru; zM08}9YO=i0O7*dRsrAJ?;SPi_q8gjCMIunNeZ}y^Jyc*8fINx}4!dOPBY7mn%vP7U z6!&$n#@Z(@J+d`?&g1#b#n5x(7BGXIMD7@qvVtEjtS9RT)h(9aT?aY{)KXvzO)~MD zs_tVB60U8|hP4XV5~sX?zFpRqLG=@*5kIwgf~c{IcDYc;?Qmdf`a_E?aC$B_qGIV! zm%Ab=(S08u%lAbJVyGUVu8m1#q%+=R_fPygXCJnUG!3)hNg;} zK|>S_x4bn=OjjXbKb;VxaGI?>l#UZ%Li)Fj0yCM0wGii^x3le58CLXIU?h;BAdBoY zL5|L#;^L6P3Q`+?(lri;!-L8yvPvr3vfk0YwBr}<>hc>BwCZhyjO2F99_r}j%vRHm zRvj<($XS=R%)nx46Ip>;Tzb{}roFwxMtp7~f)xu}+J1)m3OG202` z34fqbC=>Al)j#DX^l!yWxzfF?U0f0xRVK0i($B%PLRPYwnn~|opO548KYE&Res#=f z%GRdFHfjhUt9EC(FJK$Au5-~{9&JgKDDqQHrA?gpq;tS-XgG!+{^sWNc9(A{re1^N z1)Jf9Tqgxdfd2Y9!=pzTWifCcJTFb-+9^Dw)n7!mu(j|N)BWLs%Q<0h?JfpH=XCF` zwoo7y04MRo;ZaL{>IRoUO^T}sEfF`U=W3`nO-hQIz<|*mL`+|o9qyEw?M7rV=vtT| z7b&C2E{CDyZj(1R^BW)LS!uxn&qrawYSB4!(>_xcS;gmm^05j;W z)IPwx_j<-{yW%k@x+BIo3osKnSP_4oDjdpCX92W%c{6I6r zAdj^Crg{2#VGtFxMbI9}&h$#V2+QXw8W$o^Wd@#}RnY8Fg`?3Z9^d%G)_AsjXVu`S zI??s$ynZy5dln+4D)Ia#Y4c2RqE}Zo9YtKpB>DlHOR_nl)e6JrH!<;xF^A=IU_nX* z%h}?@QC9T!`P1*Zf#Jp#t>8{ako9wah~tregG$VsLnrLQjxdL}2)1EOUu5*%Osn|4 z2YxrHb_IyMx+Ur2L5PXVA^BFhBQi`oZL^L3O}p1fM=AFhJp1{0e&Sah`tu|Yd0RO{ zk85FaT>0>4$-@y7nS{JEp%k|_TNBEZ5^Ow3Rf}1;dGnsYoyFF#3DK^Af zXu!+a0*WV>ZUT|X9D~6hvBKvb9_~``&4gicULUfOuQa~qm!uDo6%4vi)x?4N+QGyZ zKfLHoFMk(1b!3iiHu{wcOv7>jD$i5MntW}$gCvCRd zth*1QC$h&LEEj+a4_RviCDmyA#Hg(`jGd)*3_+Y|YU^r#dN2jU=%|?rJr?0Wh!Q*} zblUf!b{`Qe<)7;0xJ*!pbz7-! za|S1(x{O&58hc8zWm+Tdnc zbM;X(!amd|TQi${=C@bX*JsO$(}XcE43E0G04r(I=sB!626M6j(maZw!h8lF+W89v z{;yjpMP2jtwI`4kQmM-G3rZ!SV4q{bmg51BL*MfxN6x~*@`+zJbk9-X=1oc<+8Pw! z83;AL1i73YT&}OBvWJZ+4TG4;dvHr?k7PWBPuzNdua7 zOsy~I3xl)F(nuMJfVKElru-0p8aDpwDKHmw@ggx|BQo&}=-sv7I@v|G{j* z4Vw5E-63`D;iO6k)PG87fI)N&oN&9l#x0A3BHto{Uwb1Yd)Kn)&PB(gsul&cgdn@N20}vWXv^f_=~PWjRrlB{UlGL?xhV2(GOEB zjU-I$I6scV-ngQ!4*!5UBuAd;>u_QkcILv)IZbawZJyHb24o?b!gKE;)5GQXU4ipu z4CG;$dQE)QkX!$`3H4Vl3fKhyk@uHa$PukhKvCI|w*tAtPs@j6`ir0urs-xoFNs4Y zW}qh`;{s-WwZ`FTLh-_DlW0B8(e5un&g^xR&&SdQI*W&;l3&sNUL53{k*5B`W3h>Y zJxe@0W0>t?Yk2A>e#D$}p67-_Xq>DAop0Xc#h2zGvriEl5c44@UBGiEU$2sC{M-mp z7dx_dJ)d+MUnkV(i`_MUGN?gV9Tlh0xWW|dzcG~k+FSSW1FeYC!5CE!mGvV$Gj3VZ zL7}~`K2YK&h>r(!(DUsIL_=#ry-h)kRJ{BsMSwko%a(hf%N-h`igwF~$K0k!uJLgE zKjK&<2~8kpMVF-CRiD+mYg>v1L2JpmtjkZyqjy}zo1i?pLiNr(1?~)|*(!vOC-&@( zj9Bv)fW<-9m02xXM9$C6ps-aSsEE(s*Y*l`$x@u5%YhEU4;t8DvQ;=D5 zO;!JbS_~~HI`xm2Rz$NX=9dBMG@*iqJ8(q*8uu7`?6l9M=rZUy7U-22ZjId4?E(&3 z7g4wljR6g{n-dhWid3pY26KAddDX4Z(W~6gmo2jYc0vd~}x}o7{qh8Zsx+NW5gc$(#Zf!e@tDNAL~( zU|C~FD1FIw)>qG~00)10#|tr1vS1hN0~RI(`g?WBMZP${?tVvk-=DnwKCbyL`-3$V zzt*vG)KODEhXQT;OUlphV|gKCT#w<7?1IL1;uYY6@4tQYg?z**PEQ_k=b=VPVr-xf zDb(8egp@5Y<4VxjZ_Zf>9EGj4!%Eg;A?-6cI?*fgYz?D{zq>2Q$O)yxr8EETW9K9( zuXY(90XnAjRi@S-dHA{NPQaH8nZ#s3x1fJCDP983v&uRWca=USGQ_%?Fnb9E4YU*r zxMzEN);TNN*YLs*FBl(fn&qEUPyC3dDp_|k@^U2y%K?_VtKL3g5mKlbd4QdRFYue& z(q>;Dp2LMEkVoir+$%hjtW(~2WFlN)H(?3}MP|b$bu}MwIETV&arczBV=dBF;~U~l z!zmHn9-r+baOY5IQK#T~ME8R{g{Ny2$Zh(?&Cr0^B5L^D3If#0<%AE}9vmXDw`LKa zf&x2zZLl?(MaDCvaI4U$=t_E8*V zQaeLZY|P?~3g6;U{!0m!&cbT&kPhv5{)j+GB$v=FvVn;>zQ$Oc5xaqiC&nlR+>44y zQ%%p(e|rY4=G*Z!tH~m4}2G{sF?>H zW9AR1t0=cf9@nht%)#%It==0JnEY@zQAYV`6wK&W-sEwv5ZXu8cPmYkK@Ec`m13q4 z0qn4{ogV>u*YsYa4tYO*htKx&S1C%u{W86r#;7R}GfL5*A46tD!Di24kTsT4>7qhx z-uk|ovz!gzWQl6#F~-JTkg`ZkNz~ds2z>ZSfOwUC`~+$=p>tjRe%hZf8dM}2?5L*& zc|{41GjNqwHHPKLeYf?_D3My8$?Aemf%Y~yT+JwTNfk?s7bEEcRivJ(mO*0^kz4Q5 z{V1dn_{(UNz5uIKGj@zkn2<_4VuCIBN#Xzy<>ITn1tJ_-bb|a~N4q)Me=OxDrG9n) zAS$SbeXl+sA1*ou%VA>(44xQjrcu3n%^lDOjRuICee?B2jX zCwFnuf2QnPCC|FuiPQk>dfw_XbET=k0}lr@5)um;Kb^t1d}1q53Wh^?GsqOfg9dbF zD^1X_kT?8~CEs!P9pL8oi|wmoOv8P0b1+UVF21i&kofJU#+!Ag&n3`bRO6P!*N}74 z6387UgvVUE_rx<}Q|A2|vewsXb!#Hr`V!ng{Ol~8M=-C9aW{^penQNjA$8WFY! zi>^OdZdsYxpvmm8{kSLxD0%*ZN044a)DgwxpOvv%5uJ`5Bxro|TUbG7bhvtu0>f;? zUF@LlH<7ZW7T}J`LPVm9grsAYIf_IO|zYNY2>xuvIOium{Hw?0J> z%Upi$g>?UI_gEBkDk)*KjrhRThJTzs-Jqw-@CM841nkzCKe(`+zyiHg*hMq(EO6!_ull~HxpevuXzN_DQM57Tz)Zy>$qFA*GFfj_W)`eh_C4&3l< zMqv2uq=0h!3%3j$0}*D1#C^*j@S0(HQDB+giFq>*Ma%)vXqRPHj2Wb|@vl7{LhdL{ z@Ujq5E+L?~RYgtLErh?wDt3AatnzB96BvZ=yaP{XA1S#ZC(M!)Zf~DhGAEP_%cLRQ z7I2g5arYao2ubPU0DQwbVT3^)VDV{JG2G;*)H24dCEAGg@r;BL2B|ZXk$tiDr|zauew+DwId3-b$Y0F4v+(dv(At4+9y35{fY5K)JqQfs(-}OO*>V7y;cbSxDZe#xPWNjXbiKZ!?ra+ z?}?tWUKIUvHLiwwp? z>*f*!&wqT>4^}`U5IDvLsGG5feyIz0L=&X(Zy&M>je14S?P4z*R+z|9c#O<+$wWznQJXklIe@7L zsp^0}=HJ|`ZIevZM2TB4<-!1W0yvNUkdIAoKQVz0K^A=+8U~BQ1^)Z?w5c#zK{b;VplpZIDFcpZ^3llaahM`AQ zR;F6<)xzNu$?Ym7^v_u68ufiSAJr?crN`z$ZK;!L9BqC1V$-s(!_QG~UEpdvop6$TK+jv0z04ZiyDRE|x#=%(-Ca5Hg4 za~hrQ{=i!bCC98PkSms5;J{w?Y@wy_nMRv`_p1vmtpsN+I&c%-F<>MMtR+4 zL&4mpA0J3nCu74hcz!%14v_n6_}K5_m9x)EZb$xf#}FT2#VB zxP}EMMn3DUF7P@D>&Qmr;e`l?0u&r-4G09?(w`iw=0(L~ik6GBDQhe1FJwrb0rFe2 z@0(w18C_epV%gnoG)nF7DlS%VHZ5bgEB)*C8f;RiO_oZy3IfP!Tk7G_^ zqG+He8;1P9(lPc}-&v`bMf!j{CX zWE;=CtKW zxp}C5UNH0p$W_^d1@)h`Pl`y4VVDgEYxf<(wAVeSD;FG!N=}|s@J9el5?y~Uu?`EF zIr%N#En24Pu^pD+q>EGLt@27*a7)6$Fi@|~!ZgKDG|;ck(=-E`QQZ;!LUy>#>Mtx}%3)ROE2s(~tZz}*I9DH51mHoWNLJl#(sLX+)dREY zFcj8T1+?ql@wZ9#hVMQxNT|6FnnW1sT!)3B)5jHg9V&+?TIn~zA<>9-($z~D?<>w*#X{t!h3tgj4 z=E|r|dgtt%$qX2I7)yDmk@qKaSQA9 zmB=D{elj)s3P9IxX0eg92@rgE935?4Gn`rt$db#_9xqQk6>=4MsZgro;x0wpF|k9U z=W9^cj*mnWt-lJKrIoVq&sb-!Rsv1J=IO0&J_M4&nxB|C%tWIsrs^pXRrQE)K6~_) z7sa{H8hiE}Y=|(AmMcGfk$Ddyjg>8x5S#ndJ~eEi9lKq+khlw|WwiGJ9k5rLGaj+P2~{GGLpYaBOreqk!;}2?2)q8=845G3LIA67zv)Yp6l6%2{gx4uux1cS~WE zNi82bPltv-YB`4y9AwAwUTSN9)YqFUZcDCn_f(XCrnjMTv?p?g>+K!eNsF%~G^NS+ zj(rDe46AB4m!0<^IpcSXHnr}!Nc|-JJ`|m9>r&%}p-bQt##q_)_{$&Hp2UU;&hZ(< z`ax9!D#+cYA*6g0aH0z5CPLJdO1kT%oii`fbOhj3!2$ay)I^Kci}_ydmYqc#(>Q{t zPUWKaBV{a(FoQ`yLn*{yzZvmZ4yC2I38V!6hf1VOw&vj=$MY!l(pcWa<;BXATp*%1P@FBuLN71%VEw=>rDLI_dGg|Y z_@l&9Klp3^46jqZ`?4DK0XUocI6sp6o+}GqLH0+?C&il6dUAu9w9iTi5Od;QL`v5j zAF!UOC7@iKu548e;vVXL&czofVCkZ~!J^!fKBdA{SnDZ}RcsXXndk98E2#jWHzkoF zPjIaK9XIRHeF$4N9lw4A31Pm*rOOA=%y{nb=gXWx4XwdZmTh=Yz_N(bOvBn1lkb5* zWI}w7Ng(R8CV2~Z_RK)kin9@ybc`__JYT<}cT3&RoLw_PzS$WAZMBk$IjMW!FJ4X0 z{+d(pvC~tm6h%7{a;)7-IGQ9iL`{XnAYy^vMb_CvU=_qBc-+GFlH62aQs&+X7Ei$j zPds)=z8`-0dK8mmxI-rW@ukP{b1MixXh$Yfp`Gm=Hek#JO_dbA`s63Cawk2aN5{JT zNA*LQG7jp_;MJfMM1Yv(Sns_Z8HnW(I2FyWJE7~rCA>{Nkb(~p4u7YpW#EPI8QQI2 zD)JqZ1Qe-U7pA-wgD1Z1rfAX7#&5|!mxXJUTE}7@J&wDgk>Wzs&D6$f$2uY9hM!D5 zKrFqTnQ;95L0Obci1!y7ft5b4klYYPP=RYRWT(96^zZ3($pkdfVy1oSCo&sSSq05J zu9CQ#9WrrVYTjb)G7I!W`RR=WuH`u@I*T;9IGvDDtW+E&y5_E1(#wydDyo=?y~sPF zBvL>ng&Vg|?aigb7?4-GAQj&FWuzN{GuAs|8RmKpEdVlkLelN}eAbD|ugSfW8#HC5 zKF!({Hhb2-Vy#GKijdg`4Ae0kpA7TL-~##N(&$8GjT!`SBU&1N_3p za2c<;xD1CXQIZ;&Baytxq}omyGYihsOKT_`-6wBne?JZZRrpGM^u4@m1+`B@as8AP zoqmQWYoC907~u91wepHTWt4wI1Z!wuEKfK14<|wsQ62&O?Q*m{^hsZ3C2P*8J#rD|q(DU@M zO5J>6qx>M2fg?vnHug`=SC5Ek`*|I6{}dmAB( zzPNaV(7AUA45QP&30ZkqCN$j1F&fcZs&qhBYD*OjrA?H+H|wEbx|BO8aQs}`&+TaQ z<8Z5qqFhxrIIBF}fJQ14JKm;MBb!%KC0;Gg_D%z<+>0NOOkgVcvaQC`39Lfnl^Ssp zq3&iy_qy%y<9ec3+8>W$2MF2y_rucDwMsnvoVO|a*HB$gCB7Yc8f;QwQ_Wi)Vi)6X zM>g7zy217MU^5BaJ^teedo_KrM z%iF4>?lz6>Ei7Do+2pPhe`P7qsk0C*^I>aVWRyd}cHp`J5z_cPP_*MHs^kBE07yW$znp(=2n8R*b~eoi4;Tdu^-GMw<=tr) zUxGHri3zq3u~aKv!VWn)FhHz ztlm6b~g@>tVcU>1&p^HlV2ub}tr97oq8`C?{4zE*op;K^d%RZk~o;tRN`CYli zg`Qt)51Fln`%th?{?-yS;clFi$pj>xvoLM}cT^D^~|KY`U0=|dM`T?w0N>9~Ef}1?5SWZk8ohf#Q zf-0F5koWgX94GOy{f<3Q+pw6_uo73+qyvj-tE84sURmAX@Z%NllXcCzYRiEMjxQzv zX`a+a-lNx*S`g@h#VSwKSkPDh{;;Db6|xBgqN`+H_h#KMH5-r?C{rYI6L-`3AwfRN zpcU2NpVf*&2Ox~st|9LE%O`3M^HUNQMsOQ7>_AeakrBS!y_ z+$s*rMB4-cE>hZ`lF3&vO?l+Wu#-H=BUde;AIVj|k`KZNO@2#yz(IsiLuQo}r{$(sfrUV@IeVCz zH~;{bmImfnk*0o#XW(}Nd**XdDGmi-G#!+QwhnUa){A1=S(xh!{@kzR@6B=pUo5+vvxd@Ni(h54AgR%#|ZRsLQG$I$#H zFe*X!{vJnFUG)A-19?I-X=PMj3!wru1y_j)vzKQlxE3J)$Zi$N_uV|nj=5m8Kc05( zW~hxg@-+VPG_T(NDcGWgor@-Cq~--7rDg z%b=1Y5`gl*@4Iz)!$qz%+fD}?rU*HzO&f6MMmHU+b&~$HZ`QjCcI1;)Xh*>a&{1d> zNEmJwCwrk|e%)zh^8nXuT#$?MD}M|f=|+Tu4sfrJoTj*BetHbS_3R*Y@Zh*K$0uU=} zFgMvgD{)--QJNR#X2H$LDHykYV?J~6GMh!p6vJSq84x+QbUf6Y zLS1>baH<04;f*{?Y7JUyztlxoi?HiQo4PHqe{ex$7IS!V zs>!DR%27f~J*xw0Mn^MS*LB0pT3I7PGw{tXLHX8 z#Q*N0!0Z{#6NLmUks1l;2wt@@90Y%YRbcbouatXwJCS$}{GFa~@E!h!R=DFAhaPA$ zYH-U_!xe2oSZMHFnK^CrqhNe;{xF@usa8j*qE^P+s|p8-h|W~(k- zeT~Jk@B&1R)Mwrs?*y0;+ zrIC7mo9Stn+5w3t5y+^P)d8$QgOz8*=5fc)h)tD0glKv_mGOpcJ}C>=o}(SXvpxC~ zd4stUj}%bqG`mX|!s1?2@v-Y@D_6n&(usxSghpS)53{AS11_f03dkl`aF8D+E!)Fs za_A>U5ISjQX0^g*GE>F1Q}D;`^luv6pC@0oZuUc?*SK8SCBj*EHR@na)8p4vpoo-~ z#4=3W%Ie-N9iCAfo5H+DG47Du>YqusXRk+d@}4I)goQ^HTLt`7K#$07eY}d1pOW#_ zWDSOxq@fg#edKu8$XiE)!}3oa?!RaZ-S-W~nA7_BHx(cf%IEP{HaSp}>LwVKGxOUU zTx@H)#-)TTv7JeB5h_T=Gp81`@#|{6}Du0}Z8&^1tEv zmi0mEmv|yhQ1sw^1&C(ElIYrid#5eu#mfU9UD+Hfm=YUVLO*-ZIn=`U6;x@66w>=q z{~xP&BzcTVF3wb%s`c?fN0FF3EbBbr?tLk$c`WL8xG22R*{SoG#tVd@%z;Pv_pv453#cMt!h% zo+I$Wvy{_B#Oruy$Iwto9SCr3zp~rNyfpY7xNDO0_nk>_#Fk1ClGzYmIjNk5=!LOAC3_&}%q&MXEVB*M9liSy?v$M7_0V3B;Jxi~inY zJ5!*icbZ5jIeZzileh-a0p~8gova6ovusrqF(le3P}_2dM}Ee>FLWc6Y)}*#bJ-DJ zT9scFsIZj~VRLh8m zqUylqC6_$yhd)az=+f$?ldnkpz#`-}Kh=a*x7NP~KXP7qgRMWNiHraaY~)H{0gNnm zt<_!gowXM1HcDWC01I~_upkxWE`7-NoDZXJmXy^jVI$QyG7dm#X_CMA2BGkwSX|9Y zH)&xqR|a4yWH2qbZpUixtUg5`6As-m1KW-rUv`nYtvAV#*-|IBkMIZ?=Y*Xhh@0`A zI2vW!YIx3Jt!OLr!kd<26}SbZQQDKUg*honLFgQ($iKt2e9; z3%#^p=fl2SVGeC; zH|p~+ab{uz1i9pcXUs@XM#v_)RYCNPh@f*#jtm7lJs~XvM23}i7RR+f$2ok!0|!OfKkiI9gyCDKo3Prv^(Z^a zmL>+^D&?=Gj0xbN(2Vz%xHD7gen6wG-M6YmRSJtLtTt}3%g3U9B!ICMR~E5+M?vRh zkzF8+=V4P<{X;SE0gA&DT2WMmgV(?lywt_m>>o$c+8&G@)b(q7t=F{(Im=~L9`0Kv zg5+-676&82uyee6=}&|2glrR~wT^BH8H=nYpd#$f4LVfbWe#n|^kw~ne!qw;$Vl7I z*!StW-o#T5t}P#Bz;E$(^H2i8MHwLK#zL^QZ^8SZq==Z?5kBX>(XvXcaNgNeoTp zv?`W!g7}g>^2E|mZXa6Fj&1*=LLvRK%!Wkx!BQO*;?Z1Zv><{X{J1$39s6SzF*bU! zh4aDAR8hJ^e`#G)ZN(7(@E*9Zgz+GVCev}Po&jTYI;>|$R))PLO5-MC$YIJ*nU_U? zt8hg{2Y@c6?B*vPHYs}m8!OWD2pF?D;j@4PVt#wukAJ-<#WNA(dje)W2?{XnXsVRU z!hV7=Ber&-9qQ`GKBR58OD;y81*P( z4M6Js@k7YLR~HFO19fD`#$HC=vVu+AZPo~_`TlrI2WlAT>HG=Rmr}XsWCquAVh%ur!xHzzrHY|3IoS2QX&YDzcy|&w zf$g03e`Ft;m{{V_*R>=}lL$>jH~Ki;WtuBh6~OSTisxp%0r64gi+zo+qw81-o~$>U zew{lxp7m;iw^*Yo@%paX75p2CFVC zuzatre*~wl?Mc^wxL-r+toqZM`LjR-Jr%)+mJQUxCkX5d>%$Mn1se6!#QZ?A9lUJ4 zI?V{XJ5=wZekrw5x`8$Tk^w7#lz~~7^I|u6iNERxI6*mAww2w1YU#|*x=th~f9=z;QZ#4;(6tGFgJ#LoS0^<>p4*_(M zy=B~`H+`33h0mrgHc}{@fUn@@wO#Co)lfhV^tk9-E^?`-5UaviD7+ic7=i7R0I^+` zUm(zMtIzyJ@h1oag!V#0nMGU zpyc^F?k86aIVJJ%f<+%snti%gCkcTX^jAo_E3sIyowY+&;%pyp)*>u1_v&mO=Yw$q z=w4$|%xT?kH!lixxWJ1LZa7ULc^Y1XL3d#duWA&{hSy%#WKg;MDC-AW)VfSPkc(i; z&)gZZ33JL9+fYwf+;k?M8qnIkBqQso6QinWd2ZiOv)2-tUK%temQozrh7Nj{qy;$M z23%2a{a!W-IMt2hT#j$VK>2hH@z|9^q)`G-P?fqCwLrJ&<^qX`@edJkmVj_x`+-;2 zkubU#Y4QujVz<84_xi+333E>0D6D44QvT8`D-ppqGN=CeP(Qq1SYyB}RcG`rRb#Ik zlQ;msrbhI}b>s3MW|Dnw_H2)d)Sa`$Nva`udsG#jIZ~=WFaS4mw03v+Z z$CkDS;nrh%1^n*<4STgPk!rAK?>5KTZbA(ioS`t<1jU~#D#5Yqzxinz|60CGFdPJ4 zg{x=~>!Ka4n&xca(isjeJEX#;w73;+4c4o(8GP|JS*CjJLp_2UC$JfRt|Rx*p8#Ok zSu5RcTrAlgg(HZ`TDq?uYP&+UY5y;}MDprc|8_M-Zs*ojlpUY0^kkT} znb?@L;;3_!Jd2nZr?{kyay6QN1(_y#O2|73Y03X1M?N^H94kEg*go7HCs2~e4M;wb zYuLX*u#e(3Ijgj)2Mue|L!hOQqQ@Cpt7 z!4GL+Es%WwO5>;7nST+uL5R!iM%ZmRN-~*Cp{laePFMkuT*IZU4!#S%?~eu3qVmX_ zQ5iJm7e(XQb~s8i6b*Om&Nn5~u=|pSc6h^=Q`vWJCHP@OS7I%it1_{%9!|uTb#aI| z^27wAo#zL2(~;8TbY^ajCLiiOb{puT*RS9p-+Il+4$sckjhB5?DBT+dUL>^K;y-va zb^kw^L+};FeCTH<3YI9e#PR{GlmS6h0?@=edlw_gSRnG{#4r2#(pksRCqAp#%-)jB ztcjTql^}PH&t~bxkvpzs&vnfGG`{`}|A0w6<*p)1wGgr)y|w5{aW=IreIK|(y|33D zE~OLA7(EiTGnt*g?kg(?_*(d+3~!VZ+dtv0{+DTddt}zsEEDstPUdzPBrgyDE^(Ru zpsB{sKKw*nokfBMs68p(CKY#s0S;{Y~L6=dmv)=zW~w? z;|eOD@7wC|O&33+1Oh$NZ%=`ftePcR!ALhVrdH+{Olf4+d+qps)*v;$S4_o1rkF6_tP8#dI&r+_iN4%_=$CvZ9}Jh=dWJ5WiZe|E zITvnxvrXX;9X04j=2uo5Nl zPX$Vs@1P?m;~g@VEdm={i`;@f-BHZ`Zf=E)-80$!pm~;v*)aVv7)x{eo-J7Dnqd4( z?zI}9f2sqOMuE6vPj6O}PHh@dyc?q}>3Nh*743s=Exjr@PU#$aMP_pF5lEycCXjNG z)P@Rcx!A*MbC@1!C13`!3E@mN9X#v0Eo6gB!x0M~nZK_?_b~dMK2q~~Bv{~7K=YNb z29FmsHb?G!oqhU#yR@vAR4#9y5YLH-e;SD!2I#H9S-Kf3amp?V&NkKo)+Sz` zRNdzvUzb8JY`buRI%Sf~eSWyP;riP|a!X}*1QMODKMK?q&S~DtHJgdly7|=x&WI1< zLCO&oi-8ZWpza;875!sWc1rZ1LjyT1;lN^E-2v2MU^=Uv7js0TF^VQOw0?31wX}(L zO4>-4JP$V_mp9&?DQnHJ@U$$DA#t|=Y&KxdGc6AueMkV^D9!1yPZwuc+b*6wj1m>1DvctyIxLV^eyq$bzsPz zlff~mxNx)7x-WBbi}p1k(`qr&17yywOIbmG5B3<2%TtDN)wr_rOJEv`=wn~`CXlW}=#}rO1Fw-0X2E2Db;|qNY z==QnY(!!PRPjM89&opM}rTe$W+DB%kHy<)!MgU}i7R(V*iy$CK2ODOU7}QjX^+aaQ zbA3c3K~ZZQc7iwfK?Ah^IcQ}^#6QQjT71*cYTEf0$6**;o2w^1@pE^UClX5eIYq3S z2Sv&z-&xG>Iu?p=ayhMh$UGpU`4-z!cY4LDM9Ne=L>ciw?MJHHH~q|rEG?@q0Z;`g zclelVEQ5ZevYqhEx%Yd+vkno6hXK=+CvGJ2G8xx64qt(L)Q2%5VIg>5{qsPe@DI;9 z^tj3g^=)V?xCAF>D@^8#rNDT2cTx$F1ox41MDUi|f1@3(OthR&0%#BKxC3dHloLHp zE=_`5fUnPQ%l_5ae~AZT*czz<@%~K`ycCi?fN*uEip4Kj`gq|5^cY_;s@qmxp_{5) zoIA1IeaF$wm*hE8g%2!r;;>lqNrnG8Lm`W~?5f=%+Q;3>gSl@wLsWDt0>-6`Rs%^H z2-P~fY8J@G2{~hK=P&t3>+KRR(t&w&GO7B8xq|5TQ^$%V&VgO-9b8_D)v=b(Bx5G0Tb zpO$(k#B~55(3d@uk8MYL$6`I+v~Vr(_)I`JOEFo;|8A2U27*h75`GoftB|CAXZ9?!f-nhgn;>ZeCjM> z@ERqJ!KSHP)I$X$0_^^DFBO%orC1K`#!z0BvEzft&oLw#S?%+l@}+Qad}8zPSWRWS zmop873B8L-6q+NAn^`p8vAwrlwR-Fc?mEqYdM=BVH8kf%kvM=A?+-51w_<7hS(XG2 zm>9pj$%?u6p}F+w%W0R3?H+f~^djhZWV&J~!BNrtLbYemP^<-}cNYjJ0q?Irwy6zNE|G zw8>sg%M@nzQSOZPi0Yi{G8qYpl0%<1>P8_ATfbmOW@7)=8TC&|W~{Z=l-!x(Fc)lj znM0982j26~Pa1kwr9i&P^c*6PLmT)ifrj2VSvotX(@FXZyCQ{dGtjjQQw5HDgF2ea z6eD&1B!*_+QXY5e(nMDEu*BRP@MNTJms^5i?7`LO9Q(cAa4}%O{?Nf-*irk@8EBS@bOC z?}@TSv;|B?KZm!}V)g;asc1Y{I00LBJPli^x*L91E8<0&h=NO@#_XpRMVVSueku2w zps;N2;4{i%dy5)LX7a+25d#)_9BtOx(Vv9~3H< zq+VbZ(XqLL_0}O_+D1RaYYxvMGc`OI^%i-b0Dk%JeFqjo*)M|&xpx=jeq5$3G+jZ+1%K>t}*-q#Qehs+d(!`=udvq464Z1*gR< zxx=fic*~6d-TkNcrr4w`6LWeHn15@s30p3E5`G!AIRZTJg)^(0#NQH?kh(}V2x0?H zJ1*x8;04FR#pIRQ)QgqKUx(uzd3AOGVmViq@I>e20T?Lq`G6I@000000f1FOSM%*O zD1IoiGwBz&i(z0A?g%rPxc4NdCJp75QQXgz$#36$4V4FpMy&uHIx5YHEa+&=sdZw7 zned-wPu1Y3cy$V`$iE;?V^LB&A)j57LpOy)xQq3oIcUhUH)>d>AVE7Oe%33(-Wk7g zQ9SwlOg+5WQj?iVEVzd3*}8-#3HK+&zB3J|lo)tE9k-b8Gg6DsBYyVK%M4 zV5Xw$gh*|giv@@Xm$!QlFeb11r&b5U;KIIua1@{M;36RI-AHJutvfe`FlvBor`)n9 zJb8GkAIdGv2VDGBzG6z|-YUY%3y{mu@ieV<;rjFMK~$wY5FSbuDF9^mCef5>17oVj zb-yaQ9fcs>zCC5->>?7_@u&vU=D5N|a0bwj9ofY(`js(R*z~Xia$uUNFAy?Sh=-ts z>v0^qF@*D-L@;O}G{jNXv2W@^fqnls=bPm4Wtfk%=r#oHq3y|}@=FF?;Sg7C%vk>4 z$5ANM!w9fY(%vK_`&H}OD-j5S%Ce2Fm|Gf7A`L}>z8ZicDNnY$04DN-hnYZFx_dKq zsz+H+f!Esj6{MiaS%jwrmek(ih)kWT;fZVvWrx~u#xJ!>JWbJB_i~uO=H`&`ZezD76*4?V?OBMZgACxCV=}PYEfxLwUb0t|Nz7 zx+dsJc=K#Ii7dKZBF%Y{EwIP}-pO_;9TE_$fg$#UsKyj@SA3`9<^=w?JY8|F!DE9& zyE&@`lwvk+0V!FlW&oM#!~$)Nc`7xTSlv?}I5s+~69RSr>$3gRwU@NibT6d7^_ne! z@6!5m9}JT`3o)(v$;F$m*Jw-41CKc62}5vLY5muNgGusOh1kb|N$?hnq8kldfX=nI zrHH7z6BBc$hBqaa=1{D`>hgES8!CKsJa}j;B&r|0l$w9?S>F(%)brnesU!*no15JO~Fxyh$*5 zBH=a1?X{}=+d4Zg0)_BTh|o zEN)M@+LZ4HpFa{7E6+4qpy++f0jnNFq4_D4YcZv>h*l;GPV~0W+J57yPaT(b^v_#U z#7;!vs!2%aALHH;tozktsrM^ArYKODVMW=g`=ht+i~{P0=pGQ6kY${HKu4~x&Vhyf z1Kdsj3A%S9otJ8sI)+6J+ON!;G_jhKEs?p*O2Tj9loe5DQJ1+>(W% zaH(n#a^ep2^l5Cws!^5qzB%TgYq$`2$m`N$HUj%BGq`;ug|td7c+gQUOqw)V@A zh>lVf>_E-YFff(njxNa(2;z(!Cn8Y7Qg1HT&$wO|RV~5;Xs)XxLH;#VvocW6xa+qi zYCu`(j)RMFfbiA3Qcb=k>11t-RqSkD51(PN1j6+xvdB5El9jR-&W>)r_v=}lqrW%~ zH1#9X4U0~75%|(d4mWSJR02-Y)pLLu6l79Hta>zeh05&E`ko@Q0cJYcsE<9pEQy}p z{ku{99LF4usOp{vw8o~XUU2TJ&oSYz&fEm!;q?lo5OOc_7fX&BgFZN6VV=QAhzIWp z(h0VYh3kmtedC>50onp>!3~u}@0nSLeuI1ie{Y5!RQ@Tf4yORjWaYP$W{>u(2;SAc z=_t*4W4DPk49LwRBsHWy8+CUn+r*!avUrA zM>pd1V%Pvs)}VBIcmNElbUrtdS!gW8;QOmq&t5dLadM@534X3kc{wiH>kOGEBZE^h zOFDg$Gi$tI zCkp#shrR_O0;!S=kLwfw!!=7}KuSEryUwaJ{+CFBY(1)qoP|P3)7|bY_hoL~p5qJji`&b`e3hZqoj7EY| z{c8$l>Ia}&2;#Smj+p4Tl{mqDFsVZ6saA0|Heo4B<_J2maKC(YAu|n-wRbhv+a@m9 z*@<`B|Kt+uXpq->F|nB!20v7tFQ$<>eSVdQC>@9dyILSZ3Hm`#4rkuR>^!3VW1MOy zU$>+`jl&5buO@;a)k2Pb$a0Oy=Fd$HqO#he`fYZGH3LNgo>~{N%~%50Gs70~p%?sE z61Cc^bkJ&Ho2s68*XDns%_YpbfLOO*A>KOphe}FOaaY(eK6nKkARA)1W|`!rSxjfe+Y` zhdB(+6ZNmKaEP6_e;ahy)?GjE)gEn*i~qRG2w*oAqrK1e5evwTiRz{nBK!h>_!e4@ z4*R6Hmx9L(xPOsg@$k5Q0A0r-8#^gU#gZmUtETJtbQqoqUpZ4_X%ZGlptZf&6ECZHIdooz=IH&Nj z{M@ZaLlu$;3Gc~mBm8oO?x0dnn_z@1Nic{DloIbDADdA?KBv~jZ`xa40FbZ;q2q)y zrf$1G5v)SXa0%Y$NP1!#sRgoScv_8o{LC?(r_>rd?#{ zUkzqkDA4kMCj5}|Fj}$Q>}+bo=v`zcLz>m+oWsDCa_PB18RsnXR@5b^*x2Iee(+;O znVL1sTQ`u>;{c8C>TPnhar@E+NM-c*+((L~IWu4R>z-*K!MhZf7}pgv3esK|tzJWI zXm$Yx6Unjb$TVQu!TY{BfCG$qa~2sfh7|5L>wp8T!qo%kQOwd*UF3B2g0 zd&O~sV5f?VKUgU(+qb)>zA(wyacQQ*!y*494>0GKdy6M#uqXv0QD+3l+FzE@9f`ka z+wwA}DMGPy%^GpvEl|zaVc_$^!GKfPwp+r zE69G;6D3*-u92F_aqniiS!lw`bXLO}xUQ$hxs+~jC6L6d05r7@ksKKV;v(8>B>cV2 z!`hqPMVYPg%M{-+ZZVnz`Pf-Z@}voQH7Z;~U~%2pKra!N!%- zdOn;Izo%IJQq2gjWpV~ossI20I&2f?JFPS%YB9QA$g*2QIe-8F0000149EZGYk(>2 z01tle#c!_eYY_IK%9w1vJ9M+87Jiy-6dgMVlE#KneiQ&^{@|^|mu@kJ+YVd9;MnL) z%j~_c>0;pT_K#AD#F73x0HZM%t6M#(4+Bhdi!lESJ^I{z6dgmc7CD+~7sp#u1Fcuu zo#Vkxnkf1vAG<8_j)v!*N~n~bU+~Wf7gT^_hIY-FENiZ4i@Kwo%v3W{P)4v5vuK>^ zoy7>$bcpEJYaj#b;5toehk|zGljX|&6O}8`z}t9@-R*`&KXsvI5pSQxYq$&Y;5$t| zZDZ05ZoQQv3bkv4oPOD6#>0-`W%qNY0G28*+vJ_#qEuAS9MypTue4=_-ixKV%Znr- zJnUYN`G(R1tC$8}X55FL{u!`|uH_;Hf9FhYHWpnH>?DZvi>%0(184GOExHkN$u_&r zI8&-1^XD2^PHnuaITzl$>|<0%qgh9qzbjNX?IdP}1U;ITKH0jY)Ptd#ymufzA5ZlI z$5q79tIr12yg(<6(yWO~rtfZsNDlg@jnhz5PA~JN^3UJTE29vwax7z2sXk=VZlfnz zFwMb9kr<+1qHK7JActO@QZ_n48eP5c(W?47TYVz~kc4X3Xq)zCp}Wt&LdD5c6VI13 z(?+{_^L3t)juSQ{OD(zwA!8O>^a1>y;P?~*3sZ3xH`yJTCeM!S0Iw$*t#$1{m!ZDi z9TBjF<+I%%)+1Z7Gp7kPkxVOGZcT*xsSDV6F#CPb1NjZ+S*8<_b}7_Vb^bDSQ( zIstzxdWKKx`C`2L`=pg%&dX)Vl`7J=5hkmWz9(cA<*>^$(nI&BGNcZfn_j>MC45ze z<;Fv#__}ews5`yCqltPO`u8HsOrf`)3xG9I4rMkq7`7Brlvd78%F;|6SyzA!03ND05%8i4zGp59`_( z4Q48UPsE3tr`5n3MVY$ULvIhacveG$w4PhcEl)cY495X?n=0x_XtnrNp?YA78!+EP zV^yh**VbG%PCM2RgeY9ddS+Rh-WYPuQH1P&42Kr89QI>>#V2tdEaq)*uf@|IU|aB! zxba4U7dRI5HzzPWu*O1=geA{gG1kA>`Y1KT^3| z&5|FnjMZCnxxmW06V#fEv+np?wPXeEjJUfc6+wHfl~lq*B)C-^7vf=>GWOSHMOqS$ z$z=qv9%Pk(eHK`5G+^P-PIUU$V9Et?n0l}fD+_}qd~0N8qcJfpk_+zi14FMEE?qex8LJ8Jl%8%CZH46WX z)_8Y1kQm*Uhw6#%wrZDuhWC)%k#QnnHH(jDHpKFGg+laye_51lg1%L)sq?KieSUx+ zwa9sATx>7kC6;Bx(=u)#;fkHokzCOLG#o&*DDt~S) zhgAR}`T?wCJ)+oqCa7qfR`gEyI@7gpCq-v(pqY126q{w&l&8Fjhf3Ls%0tF9U3qo0 zq7?N=mw_3ycq+u_*rj9W0*2bnIjN)$XQi=KPfFz88Qyw-wE1^<^A}6evea@?XzWxa zwU|IHCpNEZx+Gj&)e ze67tZohvudF0afY$D+83al_oClPSi1abf`=1 zjm35N9^;JqY9%Zc$a$@v1OAY8!SnnxPoYM!x8-Ibkl`Dn8YXzMY0q!~BY^Z056N=i zF8Wl#{s00&9se-^56za2>=*z5A<6ruEs5*XX7>Z*Pr;dIItyVpQF9=3Z%-U9`rEAZ z3VkWe8*l&s0}H*d6K6UG4=e!lmElmuCqW>(T?6JClb>E6ZLdQ`DKW`=Hrfmd8b+vo{6WRC z!8gPC=~bT5nP2)CA^d!w_waU*0RAt+D0Gas3s|(}rWx)SMZ0aRMevN0+DGy&p(NQ# zHJ$-&zhoxanGy(V1)gv=7~(5+nhC83eqS?LxQuGRO|RNDat_~>g)gC#9qTSfhZY&O zsklr*StPF&%Q41}pwjQkVaQy6?oqKXOORnZRyKeTd2FIvh(drR&P}|fdS9?C&MVB` zlMZQe1IUV$2P{>{=uzRGEXIFyz%y$aXZ$O|lBJbvTZ2euS&nogwpH=x;RxN8UZEjH z>T$~>XxOPHpdtDtFtABv-Y$dOf>-ah7hpy_6p;0Pdtt{g{m6TZdUMGk0uIco}b}x7Ucdnd z3*E~J*YAfNT)Gu>!p)v}b03jr7c$^gr93mH5OeA3JSKbk=!=bfND^p({r^MaISaAk z>(fqZ>2EBAuLYu^KUom7jL~+Z_W@~}Ug4@xyN}AYERHk`YPRtaLQK_vaF^T6g0;tK zOp?ViC_c90$vg|hFJl1EJWaz80m~cIoYmYzQ|O;z^C<~4?X4}3wJgEL-G+%(XDDhr zeL?2KWemSWxBM0)lfioAgK(PyB0=}vAfWSj04d`NslB=nc7gqu8v1fMQ-doY-ZQf&hHh5|m{`<9Inc3rGD&Nf?mb z*!wH^kLkdiY1U_EuutK5zlDpTT^?0WQ*zBv^8mEv|3QFkc>wmNgm}|AAT*eoSOrDU zi%+Qq10Ap@=OIfZrpUlHk3?`J8~(?faCzT-w6DEn%nWROLLH9zl>hI3$GjsU13=ee zu)XPGQ35|OdLK$8u0;0f&o75eb5v51I-{Oa)OTsv$EvVhfA%TKyORTE?)l6&x=vn& z+1m4!S6Gyn#5pg~CHIb@I9z1|iGODT*tvtNUP-Fp;6{&{#M*iBVW7Tm4le2bhFwzB z50IHJv&um7PVY*Zx!GZbT0mN%vJ$8#Z1RB_?J zh8w*-DD$6_ncC(8)%&4n^I}x#`YKxIhv-0TaAYl#m;Dm5^$mk;-o@X$=WO?bJ+~sw z0t&`==aX!mD$M!7U)znI-by#~KgFD1+MiOCK;hK^h3HJF3GS$)y-AOO)8Or;;_Tmq zI|o#jquOplxym25J|p$;pdj$v`8hC({?6Kt)`>|WsaO!eqG z7e`9D4Sa?CpPU!yBq(t0Ojzjo5>ZM~qrGZ591;zOjC<~3>EGm&N35T}Fa4b!^*=mPeXvzF?nIsnZESjSlQlSfX6Com$s-h1@Ms=2NAuBC zF%)Z@hQYT0YFS_NU#bMs(<^-L{<*k_C_J_Nri$*!2!AY1F3vJ5-y!;CSMk$`su#sp zdx(f0t)jVdS85a`aRq*aYsGKqh_;k_k%G_4g^^XPhJ;;x+E zK%(7tyG)W-&ei3kmI<##-erBbCS2gj4g~|ofxkgq`QR(2Av8mBnFC}xrL+%#RFyln z_TSM4!w!=-5JbTIYs}jVsX`idRwkDwr2O1%?n$5U(fAaw4C_aqwiaJyPeG3haZ{9l=ie;XI zSX5C%n`n>c1dgq&C>jVAl)oJ&30QR%^!4gTyTp9@!qk>QZ4>MBJN>^tmmfUxb*#gG zCT+fOzn(I&VXKNN`Rgea!d~h0F6Cfcs&97cUsjTNz&*Z)9X~HoRm8)+^M)kLJ#sCx zX-yfwEtdk9Sx;eV-q&Nt=yWfCJBi?~aV5U1C}Z~5uLL^j<O(H>=Td*8q-e zEwGRN-LB>d3p9sI3ynRwQF7JSSKz8ZQ#iW4a zZz$CD_CFSy*(N+PODG%rD&Nwhs9&FcvI|R5?1e$+D)RiTkdVUHR@%&v6{3XICTBe@IRoMGr)=rQ?0bW=aHrx5VB}b|SNg%_4<_ zjh2_T!HC7 z_t5+pwhp{t$f}gSyiJ~GW!)RqsWmZJ&sszv9O)b=%v@cO=tPBfUq9rz$@>ZH9++LX zl;{~bdu_WPV)ba>Yq$62-@yky>VYB)sO&39NN-TY7)MPJp3+9`uQdFn$dXJ`{Z{8M zS^9=Hs1`4zq;lOQ{fNgQyV~Pip3@Hd-$#_;gRZQYqg#@B0=jNgVwyJDe6aug)oU+s z*Qd<}m;sJOkwnnVVw@{aB*c{j7_FKT+Pd%jY>XtMI{KaUW4PmkwI<@w`#QR&iAa$k zaM@x>b6nOlIxC&NVkkfA4hAq4R{j}y!d$mVICu4;pc;SxXOzOE73TrapVd_H_`{!N zw~XA*5UvZ$nyZ-lvIdEiz{X;eKVb$pz3@ePHe2epxl_!T)IM12OA~YlLzvdEgi7RY z?^4ET#`*EvEoozDT$`zWUb#oSF_v`PLKV6L?*|{KV1mg!ln>jY`A0ODIy?_5Pi_5i zMgUzvqQ6I3uga;jo)fO6H0x$nC4x6_!Hd)q-+&K`!FyygeQIcsmnn6(QT1=vqD?Sd zFhH4es`!|Yb`N9}M|@p3A8vDq7~G444vGaN68ER<37Oe%P7i9Psk}V|2)i?$rfT6; z6oHja_-B@?Y|URg?0wxcCi(^ux^2t~>=gK|9fRH*cIr%khgVNRD^Suu(Q$s#w7p^U2FqQ?3Ec6N$D!2JoY* z57AB4@L7^_^L9Z=P==K8fTIwG5dDL@-Bma*`Vi_7LG*JAPxha{fdR_^l9CpQ-J}*HNCjI>|r@AU$0#>5b z@s3)>?F)7Z;29!RIcpvQ%jJ8;l*?BS6`ajv9aT`#TPf5&RP3(YsWg$_d!{wFb-92M zR&#u0)Qqp7B0)`!TS|0W}4zgg=o*SZ;s;WUxGY{;*Uf7qvwT*RU4RF54n*_x=8Y zPxGiqzDycZyu%oM#jsBBZEKftU3d&XR5?4Wj0JV;g_u6~onv6$N0|u|yB1C);$f5w z@twAN9+k7Zx4R+fLL4iOXSsv5aP5#CYiQ07mplRS+KrM6da{&gVnSm>bjFI`NZ{#lhUB|6ykif#gzrw*8 z2C86fgSwf({W?*cM*}h3%iW&YB?I8?m&?b~P+S73gmBPX?3-~Unt|UqghJB`R?Hk( z@gz$qS>iJ{?#ovX2A7tGa~tW#Y65L=4DY-SrWlS!PHL`vDrkgi=3Ore8O8akRS{L z#G9uYC+KW~nkE#w3B4FlZG95INJBZ|sDM!=O7XJrBiHpo&a2+W_fgv5CZMRM&Db6mz{vxmQS^ac5Ars=Mf#V|$2Xfz ztcU(?ln-0>AY^4qc_ccqO?ZzZgT;BV{a@Y%UV(_s*#vi597B&BO}JZ1G@{(k5`T#y zU0_qcBFWv%XX|Xs%)IOp_|GH7uc~bJq9r1&~H*;K|>5-4uU18N3l&m zCBB+p19Pkwg7TA>A(H!ONv4G+h$c&!jisN)iT5~;njMNMEKE>Sn8gp!zV z5Nl^OV1N9KnQ;cD{=7_HQP0v@_)i(* zmN#Zd^r=2mo{#H*gZ?a{M~N-kH+36lfnSF1S9$92q$$kGM+Z1jCuVgk-3K?o<8t?^>S zC0hfYb#h7UjQvfR=kyD-CW&B#5A*q-%%|vaT@@z5xok2Fg^8Q_7BhVIzuz}MPOg`X zq2`qIwIHp#RlCO_fU(l}o~yBFvaG^=>cJZT8qsWKqWse#0!p++!6o5dNX*2ktAt?6 zZD2M2aT%i#LysM6UaCCUjac)_pH47}Gt%nnuqc%D#@@2hrgih3c`mfHP5=o#MiB1a zQmpfF)azZcpU-*+>~{-A?fMV$B0F<|I>FCDI|h+yH@I}B&uN%>($<4Ibqonby_QwT zP>8pc>BB343y|Sm!hG?Oq1U>QS@-=JgGXIXPc~E6uo{fiw;+NoFZd^P(FK zkhuwZr^0mUVJuTKdi*Nri0>&o4dizGotsz=K@S5I!O(qtCMfP>cMJC`C~ zD_3llkSp!Yo?#?I!8=#T7q2&G=-@i(%*3#YyjME0E|a5 zG#NL`ulQvCHf)@91O{^$ltSz^T|GK!Hze6aY9Jy6Cvv>LeSY>D5yo<7;!d}gOmK~u zw6JxVz2=JS71u`}0nq>eq&H^qh?;8Uq^f3YO8k?0lQn{dBZ8FOGwEVP6pXk^vo*br zev1%URWrw%Iz)(Qjdc_0zRwrD1QS-XmD)%)xOkJ%Q_NV-V2Z|Ny zbyVff+cW~si>|h{VGml~cxKBZC_Y{12Q|<|UOjJy=p8Ao0Au^<(Y4VAZA_@}eHLlS zsfN}{?n{>4IDR%&=I1W15Xegy&|q1%59^1azQXZ*h3;gBU%AfL+gYZ_m`X;We+J@2 zh?_ryWKigR2WjcpEy|cAciv_}jyM|#K?#uNhA<+m(l4eL4)$nJ{x-GgGVO+Otkk%< zENAy&*2DbUuQ)L6W1OrFF3_X{GJ|@<0$!70?p1>eUsH^ac_m1-uYUNdt+)M(2(aTO zR|A@>Qf?+bEdmk2w|=`(!DL$eWF=@iC)=#Q8i0CG;ok^2BznqGH`u7%dyq@3%W);; z_=w&6`u1IjvlckG6?%}q*^&2S+fd$kp^ztFD(mlRB8@H1Nn-eO@5k~ko6v_bAd`-N z+Q_8a#Xk1YOMJGgBs-3Y7Kd|nz#3O_(>YSbVsQzQZet$F{)m#m5zV>wx%+8j4_kX4 ztEnNVpa21C$riUiUP?)a7tXd_Sp@6B5gKUoM9s@YM&gs!($sqcoZ$liC$?kBV0e*5 znN)6PBY>aR0nz@bz{G3%FN^M*%4biuc?Cy&DX)DxCxev*5JO+kr@~Sv?$WA{t=Y@yu@i_e77gRB|T?NH!DvHb`l)Ds(Cmx7vQm zRP&fP_;^lEZOTE*V2Z-a0uCQhR~C2yMob9^#I5OZ8%<7C_N0{V;xw$FJ39uf(W zkp{YlB+p0=7Wc2l3MUdk5De)qSMCj#*Z04RabO`mh$d2CfoU_P8M9e}cBUO0@pMiI zh(iVMT=+C_h?HHqr1?Nw2nX60QEV;P((ata4EGM*rnf&d>rdkq+E{3mWo$+J%Aq-G zRiPZXY)Gqx!l=)li&P@(q!3j~yu z9O5FXL0fb7@kXi!{}<#je%NDfNG=uZFB~=^-+3h(BMhTF8FmVGVGM(Z7II8z;)HO? z*f5-LtV7u~HbrM9YcT`8Qc5M~)BX0Q{{lhUlQ$LC3G~HqHZD7$h?9E6bkJNP|ci$vVED!DebxfYj}G9a5b-BX4%Akuw=!}6zMYc7DVaHGZV|s zAFQKAlTa7|(GMn$Du8;PqZXQBD$X|m0ANJAmTY-b;e>U?J=C6+T!FxZ4&J06J2*5K zwIyl9aIuT}%qd=VP}0~5f_wTXvw|+!)Ru_=R!|vGh*{Lbb8=Y{^P}5>6K0l^$GS0I z^=9)++AA>(!Ri7>y4HTdiLTFIkSYN^i3*)G{esQIpkA^Ck3fxYBWvbR^J%-Itq}3U z&ahqQ`V)PC1) zuahSF`BP#r)5q`SJCs&cYU+Og)$%yLxQho|V^+b{&fbcFoLSI@q)}uZ6CV5--p4%G zx0NUoI(7Kj=TeO1_)t8UOb_7<9_)R-Z5#?{m|LX&Y$Tr=MrPeo3YhkGr_XH=E0X3HsVwS5Jk(ONhl@%cxLhTFH3gf6C3?$k7Vaxh2=6`l_ zz`YRuk&G1Z6TRRp!Olo^%NnD&%HpvW_I${IGFV@Os5c=M6===qd|U=TF|b{5LEdhS z3c{rNHg- zHW3R+P_PtV^fFnwS!z?>vJ0)oJc`mO6)syu@FGr+`lE?LML|Q`5SKkW5Y)D(zb+Lq z(07sX1~5vQjb~IeN>vYt@;Yr>vH=H$qTL zSa6FtDXW?7`Q7Jhw#{xk5Av>#^>+!c!Qkk7)&YINtKPk<9dnUsoT~lC3KJ@3f^O=7 zK|gjEDu77EEZCBTL%%c78|b&DfpLWhMrtTW>al%~i+k4+gB?gK&PTlQn#(|_6Z3=*x6i|?n=u~1pFC^0yx<2)0Hw>B)Zwo!mj#VKg*huoq@ zC*~8g+=tJWTwGC_oIyEHn8(_vw?KQQ@9-^yuwvgm5)w>DaYTJR0@wfp@smesq6hD9 zOggS7kK_mh{a5TvB(>7Ulg7w!e!ihtRKiujXhR@RTEdxrE~T4hnq;UnK#}Kz;5#>A ziBf5Dy~);?9(iiwMNs_@?t9!r9e} z^b`Ew+noSj+8Ag4u$H=l4y%o+qRX#lZxKd?#oK}zed5`_gcZNXpT^GB(Y_^^tknIV zRoS+G4Hzriaci4xxdz+@V=AM2;J;cS+}_77mlSNxYUq%ehv!$g#W+;bZmnmu_Jxlj zvN5d`HH&-joM9Z(4|f!8yqX*_`ZX$=Wllq=a^p)P_ucl$)%l`!dItJ5C4>&hU%_{9 zfYQ!<`e}==1xx{5-?nuD=cCb+7`w`Hy;$c7Ato?B6>-0@hWIO}5dk<$p4a0^Q0!a9N=a_h-t5tGohDgJ&9OKux!+`3E_>{>PuE?({IRcHa<(Y&7-dQ# zXSAx49anqZL81jwFSb}kHn^o-eSuuQ`eFlNF8%h zCgi=ztNM}PMAAf-))w!bsN+>Cfc-qG-BCyG^&n4E*ViK=Sy$7eW7FfGw=%X8RWn(J z4F@usHarA6`N$s&a&0;Qf@~OW5{_&Cl9KHU1WA6X0|VMcbxnu=y_vFjiJ zs%qH2CYoPwgx&yn%m!Lc#iwo=OvaWK@D-Qr4kkYRgt3sL)%U{jnn<~F5R0m9G}KlV zSS#qDDp9Z)n4Ldy=!jw@Iq&+dw~8p)Prd^tP0|?+{$=JX>RsVjwFrjv{^Y@uwZ2L? zdT_FqyXJ?0alqT(KLdd|^weLWJy_E!!ypID^8u|@__|@vw=P7mv`&C_Qxf6cX~9Zu z@o?LSJaixFy2kZ#BV9P8xt#@%_Tp5uwb#z^^{KdndhOZ!Gyt#R&eZ6mXVHPZ(;q40n_3AEif2*bJolV@DldmsQZOwZ^3Ds! zcLmOE7EO#B?O`|8ujk(k1D1v+*t}zOk#fb~tk_O{$bSFV2PgO#jYm;;)IWEs)khtj)+9ey5P{(7qIc$*}iysr-1kMVl7h2XUj+7IKkZnq> z7X)(-S~&WL-RT_Hv!nYVusCBS0e%vD=AqvyW)Jy`_%VbZ*&h8qlCl0=_RH$!YagU# z%x8%z)nD{DUpmm*F+k@aw`cC!y^b{?%$1yN*7(&&7N&070JpUW-Sq}IK&;$W<8y?3 zJ%qIzgJfJT37|Iwq8YZtA^48?y=zxp0}Z+Xbti{m@o1<|7#EZUzvkEG6Fd;iK}@Rg55Vc}?#x@a$_XQ{-!GB}!V@~I7ke#PI_ z;Gfta5G&4xg;nj)Ce$f27JuLA&pt{JSI@hE_7Uj)CQ|Tz+2nm9;(Gi!_31;8tKm3; zE>uZPPVBYO_;lwMQm`+f)4Ai-8UB)Rbq-`U8%4gd`&Dvhm4rAN(O{fLAnZNAj^U0fvq==>YoE%TJ{-m$S}8cOa#bQ%$7s&i0k{1H zXTHtIxx_s^uYx;xDY>UxgsmlD&CHC#N_OP2Pg&jMV(;(@^Lu%{ywBDi=i|}mNJ?@h zYAiO+n__lr^M_zN8UNnh*i-GAe}(btZ-fpcwOKn=StDt{BNsg<8+?{A`%dYxB?4QUIgR z86oq+-y%+P-=~N|1EP`@G`m(q*-fs6E>67Ht5v1U-aPyPMR{2YYo@)ttHJNQ5`O6N z=00{?U1D*_0N$s4B;lu4*!~otf&djM?A~M><|3YY2@su?OO1%7Qjo=Dd#9PPeK79obARA{9-j)(bd;jse55I397b#C6k94QKjd0znm^#m> z%{FvqpT5ry8A=B_C_=fa%6;DsgWN<2!UN9G2q)xP^!jtG_yrIENv2-rtQKOabVwvO zRF3m@xZC4y(5!a0QLtDa#&3pTY+=~t%dJmp(3mC!@FdWo&Ga5RztW>)f&NbtzGKU6 zg}QN3=VNFDiWfHh{Xfc4W}@cI^H>!xOEo zH@eEe>U@o#H|D|hW9eu49;*QV#`KPf%mTpizs5)`^m6AoGHShDcqGTJ=WB%@7#qyX zyxk6jZ$yI`*%I((qzmC#>(v;RI?gd}JJAf_Bm&m0IdE>j21dt4ZLY zZWKHk9GSwc>=07$C0ddo?r!a9D7C*)C!8z#?Iu}}0s(FlC*2}x+k^wAq%DcWTW{nL zvYe*=3s64bqpB@D!0}2B%LgtX9 zGlHGginz^ZqnL49Y1KPL_eY|>Ch`%`r&v7sB#+rHP&0;Ol$t>8V>~ZB6W~UMF#tZ|lufAeikIzlhgXR& zl<*&H4i2HuF9u#L3lLal)Y_ianrX(S>gQEDFN?C;i^7`T@u#mI-5xP#KpTxOgJXO% zrXYpdammi09e3!zqd181`$lhTogF36rC zRvavH&2TMtbp0D%FWv|}5oFxL6m%z>o8CXcBiYMaD@0!A5`dUqHi7REZ{9&D^s=5X zKD7v_2%EBL2i$q3e(W9q87T!4+z)c*=9UwbUcduqHVa48H9~qG!vrXS$m;$FL0Hz> zcl5CX#I+W0K7r6Lfs_dtwThipR7m|49Gk{PTky}qV0Ps%hl{WfgV5LeybY<18-#kZ zjNXuZI*e)4BKGD(-Gx!xVQNMce^GlIWJg|P{{4HHfl|qroZ2&s>^+KF4^;B>^Bj)C z(;OZ=ykN~!ELXp8LXh`#WuEkZ<)6h!LM|ETgu!q*@IU|*RO0zU#BZL!Oro2*mPj;M zm61Gf5|wu~y5~^d;oph#ljsk9bqU=vN zI_D-k#ke*=5XZxKd3UrCln9ye?ZzYvR!?0}npBI5p7Zwx=Xw6xQ3nv*$Oj+|F76!F zdAEX(;mKun510px008%A_W<(xpa2K!J8hz8Vm^LNHxWeAaYzit63UH$4_2e9KHxPCl3{&uwPeQ^ZKz6m&w>yzckg zC`w`uO~%Y8ggY`7uR!13W-|oLYsx!tRwV7C!m* z{e(g|1w_igwI~{R016-Xy%*2topO^=g!dv0qU?tl@g@AVWyCW?Q76)WX0jHTc2WUp zSacAa&p#=KZCIBAeK0UIqRuQ0Pk@a|QD+V`a%X+>)78ynG#|=4I2xbNIxcma%ebp; z{k;90{ns2I5dkb!_%_ZG>&8{F~sD#XXkyOLGoKwqP!2&&dO!)vXLp=#Orm zVj`hjhv4Tpz;d7Z{GsJTkdMTV7!+MK9rdCe4zIiJBI)%b=| z+uDGHn~HO5_p(Jj&b5`46(dv1y_$8Uior2UCybOBw{R^HVDMUZ{~Ma6`Ty=1^FTEF zJ-c?yAku?>@AF{%0riW$-2xQqx0l-l?|e2#g@E!6-%{6Vr@hz5J~DcQ(TN#{veEAsJyq?TK8II&1FkdovyY(A7H^E-qk zt91939+7XCI;^uGE)uN_xl1s+e6Sd(D z6)3q$bKGeOvD@u#=&9hCUH>9cX(>fv9za*;7FAAcK;3yH^=6CPf3zWc-9-Pd0iAyO z@44sYbr4b~a2aAg*N~0o%yArB2;H5(+%`4d{+2T&BKRtf!3B3{%!DxN1@B6-PlNDj z2_zgi8Vt2p(J=$cag!8fNb>s6r2h*Xo2Pit;(G`txkwaE)x9|bqV6fY2bDa8UY{mL zl@|}uI75#HAE=W<18T$^p*7tEG+uJvYOCx{)?Dn%KsL`UA}es}#T<9`oye zn4svao%Il%$crL&wsXA)8@*s35V-3r6w zVYMn^7DAy~3s?{~L$dr)2<;0dddUKZ^FfsO$`jsVp{V2LZVVt%=OG zWo9xKI5d2pL@(XW>LQEoFi}G~cSW_L^#-V(SsIrKTE>yOk7 zp2d-sAFs4I?)nk8fWvvP0|!at4;TyICjU0G5Y)8W@XIVA27du6fguR?i^?G)^>oHY?PJwLte|si7$G?uhAr1hp&RihB05m0_00000005^=P+ymD zM#QUn=Fk8OBFYk9Gm|yQK%I3-qZHi`hQXS8t#x1gw`rMA5GWXwDvz68$(*HOdE2bU z>5e&;Vf6DSf(uCbC09KmR%%kQj`N~~)aN34(|*bPnXYFIBZH@qxof}=psP+ubAdLe zW8m@t^xL`%WdtepJO^2A&!soRKGJvyk%)VWe0B~}L|fqPZUcnKgWM)MJ!jbD1KIZ=?kGcXdK4=%bRI!g?v*;3zuY;L!^6;^r%6urHamC_OTe55$-`xmEP9|k@r^tZF_ zQb4xx83#GaWw}J*d^duByUxJ?BkfFZHr*|$du0VAi8hZcMO~7?Un6Z-jnT;*iw~s9 z`6#pLnYOsnx{Nm|oog8t6i>*OaD(5cW)X&z>Ktpl6 zV*i~00yBWC`wFI#J+?)r6Mg{Nyel(^QETf*ue@PB(#Wt$xETJc$iU{y7eENB4?v@L z{IBd(0pI$kla|7ZWl{y@2R#kxyKNR2!$voFH@cP{rs?xOZ?K7%O;ls&Ce9B;sJhNg z(BVDvHWxgfY3X$YkCRe#A|4a4P0$s3*M=V@;&u3gM|6ZtgWdMHSGNe&v9`o9~VX55`|#8`TQ8YQw(s)q?*bEnhJSIbZ@?NoCzh#1IeW z4cGb)B;X`wQF|H-;cr%5A7XG6~P>k z*Lhgu6=A;QdOXoh#@RKpr*%BQ!Gob9!pRhw=2C5&PG)?~{oZz|oxm8j^y&_Yk)Lb0 z9AtFW_8Y+W#Rb^4F_lJcXXvRQHxAr1#Z`lN{ov^5#krm^T?HgsB8XKrH!>;JtV6y2 zkyf)NoT6Q%S>9n}?g;o6F_m{$*E(x^p+HP;!=K1a|2KNx z6xF=X^n}b^ulWPd`&ku_oS*t)fznQh2=wYx4qo#ZS;V}|qpJ>x?+sgTr~D4=LQ}92 z=f*fb@IaSZ0@^JlMUUz_FP>fQ6F<(fx}4Ru3&}JyLsWYCRXvpYk{fDru{D+xIQ-5X zRSOL0+=KztZVT`4euAkBI5jY9uRvqGen!2qgVeK}Ki1Cw%RCWLhJ8d{7kc693NRdm z>wh>P@+5{z7+MfEM=*2dEQZck9)+$XbqKI`?{3C9^=TG!&jSBvzb{!0;V=Jijxg7> zM>bucy8bAr`1@%^`#^2{uT$?lg(2a3C@jSA7TsDg9r_$Ggigibw`|$yN4J$0SAXG< zSNgI@XvN$SZkkxx-;ii87>6BQm*cK_+-M>ChI$sw4leYqv?Xx9vhiLp;#X;Adt`fq z^qG$46}Kn~B^bG+tbsEwqS5GzBb0j$o|APZp+0oZ;N)zj1s!E+6DXd(i~cNeL=*>7 zwv$_U=ZC9;iX=_xZAS-hV30qs|5Qxo=T(&k@ z#wb=ec1yQGg(ZcryX5cy000024UZ0EcOy+an1F}=?mw!+ubIAi@W$uvBRp@^KVRFL zcb~N;9mA52zez)uKwt$H+o8rbE*pw9MlV!RAowtXGsEg)B?|;gvma4#;7&_{ui+(@ ztRj30Lj^RLz+*)qJvLS3{N|V)y)2D*nIiy?mzO*vEPw*qOclvheVUO8mGYG)>0{4K z72gW^ZeA_ZH8vAyNt}n?7-bNn*nt?E09cacB!)pJ6(0Jo(O{^GBlAh6ECIKL6{qpC*QawGA$<>vFtDmzNwR&IrsLV{5&hUKgE=5`zR% z)$JrfRJQo0*ney5={`NnPYb|Ok-n{hDdcmCn;dG3bGl?JZy-^CvdX$s%j6PiRyDEo zKu1Cj#ERT^_V4kJZIQh(8VNhR%G2oi?+`P5)U|IS{mgfy+uO>Li^&iD^ZDtIj#@rdEq@5$QDUR3gXmX<>qyD6CKAv~nR?>pYStmSb+iuuS98C_|M@ zum_$seywdFr!G2IbxCIimeD-BdU@%F6TN|(tXk!>7--HA zTO>Kq{EN#6V|)`US-xd?KTWKlyH|f~rt)14d1FJeEwfgWZn-@-r0~!2LR~C-O33*O zzC8{WjhGQ(R*+xe6m)v`weQjqQKDSv$PgRC3x?WHlowm-o5^7XzTCm_z?m?*XGr?q zz)L>`+ZE9%@x*?++%~PV{=bm>r#S2A9{aP<2d_9?_XuQM;gE=s<$|c z?)n8E*BxXlf$;`Dd+IgE23(@5Em8RPbv0AcXcQg^U@ns?Z2Ad(=os^`J@uYos|;A^ zIQb`VUMS?$KAAs#fW^v33jWQ48;!!v8P8+N&m+TQ=Fs}vrC0!W1P@$F5Gk_v@lU#{ z%LA5>$Yz`xHE4*?lapT5}z=00hjd4igQWs?LpU z(?kVqxh0uTX)qT$NIJK}oqVgl*KD@_(jB=+fGFWz>l?l6C`YtTWy zJ`7L*1c0Zb{(W{uQgND9cuEyyS9Y#s;lMId?c|NUQ#@U1;^>xv)j`u!m$1)?K9C7a zCuTS-)4T*e?A=>2Oc-$R9ZCco&GdP|jy~>qL<*8Ul^f!lKt${T*Nhy1o=_@(2=GB` z2ctYf6Uq-Z^Kz*@5u7wBPDq8-F=GXa;1x72@`kY7eStL2u7=71zW22ek{u;z!Wsb8 z;+LzMkie1Kvd0{3Wv8eA-n|f*1u5Cg$?>_M=ayOcR`SXRLeHYXea z0XgKOj*5BuYJcNw6gs|F7nM?q_BHwkpPj)n0jFcdYS)QcxjA2jmaks}y0Pp#eqJXB z&Z0X?>}FBneJY&x1IdN*i`s39W8mgA$;#}SrErzeGK#T$=j9pn@|ppPUoIWNvPK|Y zr4C@glqr_}c(_$$w0F53h!k7fm^ei)Lb)$o4;vnIAO>GnKkU_ReVME^Q^8k`=wi}= z)r{ap&}$U%dOX)lPyh_s*At)c%nfoCHEiPb%H#0d1!Dcoxe`U8$NI2;Ys4am5zR!6 z9L+B%gfWe=2FyJK7roX|y3-<-=+lyI7@AgKD$c+pNL+r76d z+ur7~P(Y_Uq>pU057hN6_~okUyRu4=b>F=F%gdc-4+{m$aP1ZpW8ACScVA!$v3><5 z9PoFUNNBNA!FH;b-GgS=#)!vmK`Ut#tmtN39X43R^b+Bt7BS36+d>{e4rwi}5X_%SY%@MB5@ndO7C0k5sEus(lE6J( z4DhgDH;26)=C8hvWMZ(xEbUz!PlZ`DXNm5r{Bq3M-r5Uyhs_v%s7a+kDVk07DXdt6 z!Ps8FwSizUBPeOdrbfMR(UB=<22re%pfq|cAIX%qr2K@KHI?`imfAj%Y|o~>w^b5% zG?ZquR}cPz$ulh3&M`d0Z1O%_^b#Oc+0$Gd`)J}(-)WoN5jHmxLaGIVv(I1ewS8o3 zmqgNHkjG>yJ^-)pGJhq$8690y4ePbr&fn5*Ze&}w!?@&#vMen}`-vlI9Jh2KOtY8# z^@gLO)ec2=4|!k2LJPZ2YeSAuQoLsgrZ_frBo1@25Hh~ymqwouX{-^Vov<=&b<0Sk z^+21=aFXnP2Z#@zQsdzIY+_8TVH4#5{!1Jopdj?M{TczPVG(=s`JJ>ukM{Uz+$b~V zo%ez(C{4Ps>WvX*X|!=h7=`Zcpw32gU_RKJ1UudxWhB>Pa$K}QL|?p0Vs)=5RBqew zVL{}_0(sWeFkcLhuSMC$S`ERwGB==j9U?txBnMmOUnocgNnirFh|*^3Ou#xh{WcC= zCWkD&enXlY^zz_uGqWhSr@Ls=qPHd&Ld5SkmA9>3!5;~vT`qh(Hc{P#`w@QAu6BIy zgWvyqqHx+0%gX`P7kt1hZw`H=xZUUoG64mc*UsZasMbtOGU)Dy6dR1+>0-Mt=-<7E z8!2fX^;L@#ZhQl1Bl1CCTWRzqPx02%wQN?3b9wt(#cp)r?qOJ~s+>8Z0gm=QvP?rG?faZFK}*E zlcL9b{eWs+DLcPNf`5w0cLj}%i}I@ygs?P3JIwxTA-m7O;TG+%uXFgw98)^RT_lhx&mv;11`PeBma|WCTP#B+O zBu(biUznX_cWIK(0pBuhou&Vo3D+h)Q|3Hh(q=rO(QTX|G6T0v{!W40@@;V??WNtr?$tlGbKdSb%9qU* z?%T!@lzs;V!yKXqD~eMGn)PDz=b-5s9Mx(|yPpPhJyjRf&F$*|+n$Y$b$Y|_DS@9k z@>T=xH;<-rw{d~7A_4l!8tIO8%{>M)BmmuRLO+QMNdzkJBKVnJjC%f{CmqCG3@sgY z6sXfj!uK~N*sxrV%7Z7cqeeBywo^K?q0)WhVTY)u@th`b%yD*F9KuB~oRWujx{?b3 z>%wQi+X2$^wY?KuDsrgQXOev_SBCKbM`bgSOkgQp@LXv5esyRwq#FzvjuJQG?W$*qGM!{I^?}D;K>JgoHwYcH{@Bk} zO5`z4gaU)OOQHsw&m4bvWY4YowZV=8hS&l>T3Xl_#ADZjC7RH|0S1C4Z$K3*-EDX^VK!iiwhjz{YRnj!P^8Q0f)<)FCJZmtWZ zIuhp;x+Em+wi$Mj5~!9z-S;Xh)TdP!VdWbABd0v_L2=#g02IA6AqBzh9zu3o@Mzvs z?YDO+n!qq}ksRBC{NSN-EJuJa?d8K`!)biPfynjyJ6SE=754qfs~+rRb0ovtqyoI1BIcJBZB74aph7S4gRBMI9lu5Qs-J6-VA^_P_T`TG zMXcp-Qo$H%iHKGUN?CM7y%=zH>lEsQMGHNpv6+T45c(Q`=Ik!jll2%Py-C3J9KWe4 zF6^q0iX|_h%EUXDr!CC#!|Leh6Uh^0g6^{u4<{+_c>qbzh;-c=8{pax89ZK{Q*FWPKExPv8v6sO zfIee|$CWCvgI`uM8PrN6%4dv{+k8*OSlmJyZ!_KB_ybGhQUE9i=&J{n9x2Kv&5l61 zE{6O@(B^ykhyAkdEP3td@rV~=q1qfqyR(ERlsoqaQv?9h56}OQlE6MWiAu@YE=G+- zLkAcyAcT3ot+_goHk|8efe18I2ooAPy>INcQrEpnVp~q{b2K5Nm!27R?V*;Rg3)pI z(3DfL?2cSb56S^y0000001U)|FFdwB(RmYPW*M&YC@PydM=nm%MXx@nM}?I)o_(Cz zU0u=3Sr88J2;THXP1yKda_^=KQ>d}d`Z2>b*aAJFh}gbIs2|obtNFkO!1%r~gub`s zn1I{!?BAGOs*N5p!(P`u(2KpW5KzIpfNjv9Wew-Xx(#EhhB*a1oC@>r2ThH&3iPxc z-@&l%85`-#2GwSTbOyekaWm7QCd=CB$73{3=^@1Ycf)+rjoAsq`)mptVW*#kc_?We zsau5ntU+9LgxL!2gj9*_@mRgrx^+ha1hCRBN5kBE&=IRvA5%_wKp}rUARmrY9^Wq@ zjKd(|<-)iHC_V~P_o3b@tCNsDi?zO%#a`d&GGS{9UZk201}k!SfgVq2J4NtF`@T+k ze-+Uck4VG-!K}j@xccpfCOIRd##AoZ$Cl3nZ9~>qR5*`Z6k3|y4V=XrgkEUm*iO)9 z1il@ZElt$VF+bhPw7@!?B`?iIkx6gX4|7ys#m32$?mH}HL(oQ2Xk^Ypn{g^Ivy-5) z^~0CBtC2Nx?sdg?E%fno82K$JanZ9uxhv<=Uit;$&}PibBwVXMO1;27WlsiHw(`K$ zJOpNz*7?ePei2z|#CdDHs>YU?vJIPtsBLPWW$k;TZ11Y_pVkaI5D-KJPYH-hP&jph zJkM(>0?W#3O^vAx4dHrH#VAnjHR0p@Oj7^oH9xP;cZ$`2?1?{<*6sN_0mz_PFR%^# zO`kK&j)H6t90V28X*Ky&`hiD#nD9}}QJ0Jk&eYmbeP#g|!{=N*0`Dim?pL!h63ok_ zabTmmE{dD1j|4Yf$HDVCOh8vhtN*X)m=hJ%??OvSzL$&S2Q^ZG@!UL$0$l0|#WYyz zV70+i3*Vq{(G6dVqCU#>hTpfvuxe^j(4{0%wY;{G$tn zt3TD`ha3Nl7ffE;!1CAHU<4s@Uv)k^l9=XU#t1Eu0fxPLrJTTKNPCG`FT_JB;V8}l zwIE90?pmTI$9|N;&bZ3SIs$esw`UloSos|Erfj*@%oB8%{;)Nmqe{Wlpmj4agX_Pi zC1U!GymvFeVwBjxp8j>Nc(w6ZISau%_yQj1c}F(}Bcze1;Ps@A3HIi4ST^>@{}LZ6 zG`tV`M0~1{0z~i3UXQHIjkjZT9HmexGb{aYY)Ti`pN*O1JK` zf`ZK*^DIZB0D1yWrkH(oaCs{BYdR) zv@@;ZP>(>%lv37`G(@fl)cz+Cncd!&5C{wz?g1?1q*hBKRI3#kDD?KbTQFZ4M^dv3vt(FtzTuM=J9Ly{`g@yY>SVS_n6`Y=j%)yj~PpJzJdk-?QQMf z-do=(SKr|y$N&H=KBkDY#pfj8(Cov#JQB<&k=rt;sGYUm@x{|vWflj>e!r0+_`+GVoAjcT-x!pXp6TmfM9);b<#M6jMHPjJ zUR(z)B`pb6LY5FD)%iNoN>|AjzB@g0{j;cDZokzfQ73_b@b4N&_%pJn|STg?CeDn*65nb7TYB@@%Q6i*&f5iO0KUV3>8XxI!*^@O90XQ`L`%L zg^RM@wP9{yHsO!up=v(S0L$iNKX*mv0tyy(t!&q~L>fidA8jG46<^!$NX&)7bj)*H zB@~`AObS!aP@0FFC@~m=b5*GKjIm|_%-Xp)d`dpuSC4ri+!fDupZ6%SqZX*xj#P(O zvH`ou?yIzfcq}~;R;Ex z{R3Pe`F=oI^Pll!d#g`Zw%7is`OTaH>)Z@^#rj^m;6-_Q!+2q9c{s3>xJ_f?Z1GR! z`d%pn&xHNgQ(^`NPRw>8ZHX%ldsiw?|4nEG>3W!qUsnt(Yfb+`HY_$Oo8-G^9s)^U z8m(_1-j(pY<+Fj|RFd`ksbxCg)6#T4;qbkrlfAAo6e{wqCCq^?kXtLr8ASRA;8#H- zvsfL_x*HS{)fHf z2NV^Tb)nEQ+`t|B#+nE@Y9pCfnxj0BDscUMk1L7B!aYwiU1s02l9X!2Gmkv?mo2wL z#5MwwVKb2nkBv?g2clCeq(awO95XHP65;}FtWDizp;N^WC>xCnF=DS>Y~F)*iB(A* z4ep}NQmcYLr~{QTdZrvcVSg)2RxYIMeOF>nouIa@w{0Re$75n2kam|!r#KeZXV1k4 zvl*VVJxbazFdUli?%REVQXyHimK*{Tr(8@eg`3aSi%wvg_NSnIRY!5Aw&l*G>{YG6 zOSwlu34yWaZYU4Rgi&D|s|i;p%kfQg*-m~e=xHr>%!Dr4eY{W1JN%^-57LX_`;<3= zQJu>1v}>89<5U0h4Hr2~z|P3fvqLK_lhCXzWzpuEt*oPnx5ZDF7CMU?0QssPCIvsJ z2_2R#*OJK(TC+JOj866cusfwq+7<*N53yR{V5X12$o>rHh(3(sn(5?uG7((cJuWRj zFsJSrQ$~uhlzuj>P~u#Sh1M^|84Ni*i!1+(8QlXH*SnbqfJwC9I};lJIBVB{0DJH57 z?i$uNIWKJE51|6@>Z@B;TLfEb|B3)3?Pz{mL_tje#U@2WV*EkIKN*s&VetQxveH!{ zrMNhDl&43W9hJv!V`sx8sq-2oo^mFxj_p3!K`JEeSSYBs=KM_1rKi+Qn{nyWy|oj; zQR4-lUvsfwYhm-fkt5|;a28?-D>3%Dp28R1EtY#eQX%b7yS0dYX%uTr-A>G+W$8^< zfR~z%=aX8f>m|;o-N>j6S@YqmUA1^9?G3#ho{1e@5BhK$02LvipRspRNe(O(m5Mp; zWyoPOV~VQ=c{G6fw0|2K)2+45lI|_Rj=v?qEdr{H!1S;lJ;&O-4EUGJgrE?5M&W;- zU|Xvob1^`etUe$Qbb43i_JoHfnf>&N{IPrwZm}(1t#9S*O1ri@y(vgXW*XJon_q=T zjq)~N&raJs`VLhHeDeVv*t|CmLl46L@X};5uC(*nIbiDeApYf#aOiqM!Sn#7O#f_y z=y#N0EgL|WdpKKuf!{faN`(w**tQRlWx-Lh;vRad5rZoVzfL56> z3gI&wFu_|(o#UVsSW$#46OAkTP=9Ufi%lLT`d@>oN?%kmDzw`KH~;_u000FHR#k#0 zrB_@TQ*wGCE{tRT4b74uEImM)=;jMLxw*M0i~MrSPm51Vepjso6^-0vKL@Aj%PTkw zS{_xLPQCwKd7=L{R@ZnQm4k}RX6PJu+w&a%5MTfdAk2w^F6;8C1|$L%IC4N8NbV`QYq@`h*Nb%jQfS60VN+ zQKu+1NW!K`}O zjSWCk#U|pemsl$-Q7xYso6K_{(DOYrDK|JgnnQY>xnA+FB{8xJ!u|~dDOL%y+qWw1 z5e^DiZF5?v1Mw!>ec33p3BQI#?GM#?25%@k$fQBmgHCn4X9y@z{O_!ZD+p!-Bz#sj zF?%_*>)`)y_*@HfT<#ayq)FzyRh%Z=E>}N)DgOv~=R|pQ#+^zl3S$|?WK;-IN+=Gc zWsa^m!EAYt5CLB6OdyA~yUB9^_kncIS}&=((5`<WD&Q0mUYalVd|rh5guRZ# zZk?T4wT*BpJ2Nn(Z91m2zZ-4uG`bScU=J9`+Vb~+L3`WiIH2&A8QTUHZKLiPeQbn- zx0}wCKs8dSor9kIQk0Rr_AJdBTxg<-!fg`RRq8pKs2k*z zH9o`p1g!>IDJwJ&pSv9rS%2i4u500z9N{_doblc%TB-8ti-pjKg-3-{>_*({K_@!~ z>Z?!7?oL5AaPd{s+iDlHA=89Uao5*Qc`5=^!8^ElpNTt1^HLmBJirj0B>(swxLGyk zpa2!dtWf|HA})$yRBwo*J2!0I+Jxz9P-;#ayPTvO9Avw*(h>%|RpdkH3pg%>|X z1S-nYon^D6JEX;eKRCs>G)HT1D4DZsg5l8BFI86o&2oOMXIXlB_Tr1C+HoFr^mDI+Bri>Wf!h3 zthFyw&03a1=MI?ZZA^SnO+bNeghG}TusNDld(q4(HJY+1I!Y&c7{|Drlk2l0JkcN- zIWT@Rk7kd}qTv{EKY)Kn=zfHN=-}i+W?)x=(H^#{l=!V`+AbF<#P=VewYMrSWt-Qs z`HPrTY8kUhPs_EY6_@$hGI($Ucs4CE4UE|GPgt+;-K0Tm`UTvOwb$HQ7Dj(103PMj~qfn5dV4p2KwX1G`v3fj$_;|}j{aA-k4WE4o zqD#ovPXr87nQ6oCdWVV3P7>6vA8tLPOEDJaiu7)td6&YWuy#LU|CKWZ;? zZTS<+cfHz5>m7Q|7|S@fqt=|R;qw^cIPD@W+$v47?JXfmRyB&FR}fxQ+zV3pdw>Av z4If3unZqEimk2MxD$ZKc{k=a%mLkqA%ncF^lVC4UCp3kKU;~!LLeT?c2b@=kEwvXyyy!Q%W zL?Uh)Q4fUl&g&twcwQ7_e!H2`_mei`COG*o*3pr|5(~G^m_RU(S}rL5ceX{s_A>T& zf~wz!OaQSBTA&%@E44=XuDZIID&ws|3<8iH-_x%vq=99<*XHa)E-F--ba1ThV(^pB zq2PCAJn2$3%B{;M^stkHv?lfsNoJRq#$UJkRS7+~&>ZF78r<~JxBsSMh+vt~lx6Rt zfnyaw=_vqt!U_$>)Fzc06zT{T$g~x=kg1(!_UWoANhbKZ)!L$-#GI?NTN;F<&I0tN zOOThqxn&#`E0$9(DqHotk9av3hb$VS#m<0*9<{#bXEGBr)|xNHX_5f*;})|rM2gNUw(B=ECL zXY>Lq$ICODXAH7)7Vhm0RCBIb3G_K=TyO3pN z>6PF=#;+J#Tsc5nPk7Wnq>p~SQ6kWWK~h6&ZH|TOphK)_)*RHk#&4!a71cUl&#b&E zLj4h52}3W2h;ADz){qHw;xP5Z<;6TY@YRN;gBX?v!<~2?oxW-Pzx<45-CoI&?X^WR z75>9{Y2bS})NZ({u%?crp&<<`?3M8=Vq0>{(YU&SgPtxZ`tQicwE< zd(%CHac+E0%9clx;)nwiB1#uejdu*;hbTTQK%u<$#B8u!lb>__|2RT2WwjpaD8=oY zmEZoCO{D!=F7$sf02%zOH-{`V(ytPWBrkBV3G$y+@QM3z?{%hGy=5%}0apLG9QpHe z-Yu2Tfv5oBLHGYjaB^@>ZhsqJbH13rMt#*qQ#wv@HAeVylHAVdok$y5KdOqe4l1>7 zD8Y?vl(kj+UHP4jYaM4P3w_e|PnFG}TDEe8Y1bKIUOiVC3>FZ&vl6F$28XZyHd|6) zwc`tka5trCy_Ra{9dB~~8qr=qIjMAg1U7lelk=s;)*$W(F2a4cM+uPSSc%fL%kge+ zpq$qqQb`BSyWw>0!gQ#nsuFtOpAO&Lg1j^lYyZIE6jU4KH&Sm(0y3nyg>8(>wb=Ow zmbq|&L^tZIU#L!<;ZO;Q258UhA8y6Wh=1a2KUwoX)wrY?{*ws#uxq}=W0Xb%r%-*O zS%3nTRflfsb@SlTJ4aC5k5B%Evwd1c1B>x+8?>hLRhtL^uQnx$^Y>)oJs!jA%G8ZA z{yr~NZgC(~P^6pPWF4ZU?P(;kjntJr4c$oYHRa1RU35`^g4Q+H?)hr>0MXvW4cpPJ zV)kKROW6Nio(~!;1U6*LrhscJs7GZSwvwEGJ!&s2uKNkEmC3fYOFgGtq&nNz!QSbO z7(}W@2yZB}airr&u_ugH+J1aV;&u(ME%t&EoM|k`BHCO15w6_A*bfsIQf;@&H6$kP zDZ0gQu_ULevsB32Jo9A;mz)WK-4)=*pxk!!!LdvH&ppu?6>E8UEkEi!TF4`iUrMj! z1*wA{vYYjW8{Zwcmic>NzDG#42FkfY+H|WifkL)V*e^j~{OkJZ4ydOJs^}xEDjH+r zdHg0tNw>bUjl0)g@t}4kq52XQLWf!`OO86w5N*Qpq2n47wAzQ=%W6npaLiHBtiw@O@F`a%{#K ze@qMs*x`HRkmagYre*k$N!BC4>NwvH7X(T?2p))0;#3TYge?MasFLzevI2Tct9Szk z!krkIK*72^qYj7wpfqAT4kJWZKkvzRM#|PSpLP;i8@`njo5yTx+E8X|NWC7^2XY2d z7peBq-q3^{;K9C%I0QC&e!D&+sq0h|PPWvwz+O>b*q)b1A5kE)VWKks6& zh&)q;GU#r~#EF?dxaK+^#(!&6kM{QMa^etV(c+RgqbR7KwGuQK??9t=+JEa)ujJuV zw00{Nun(%ZTEI4lV1@^)hf$(J3ip4BcdeFKbUawMxv*y)M!Aeg@3sU>nCJ7|oWojU z;1wTrHWH7h)(4cF_X`Xxxm;q~9h05U^j*kVFTAv~A6*v!^pJta;BS4WtCilSFy}>y zBMdDy#s?3|a=DJ6*y7bKAQZh{f;~s(QD{C>+Rgh=E}MFf#K~A!vMON7{J?1)CJtB5 zbDx_$qnnqMN_12Rl53f&^|56cKzW53=D$j_+71hPs-UV1UIh8;_}*gy?bWKkJhLJ& zGPd)H&3kTBt(O-CjyP%A$WF7f`1xGS3-z4}5;Nndlmp;+m~B_N?A%`p%`wwYr;+CghpPXkEe^YG46uuq#wS&#j7eZ^wp- z-4Ed%_#^P&XYaGpAV?w-@~wEZ!!RF7j%)PGaWWCgk~2v8u+p+`+-tBl>-?`*d28!{Cy1il|KYA zSA6ub`kB%dSt3S@79d(C+y59-w_1?uHKHmpYi^QOosAKC{;8IRPJHFZd;_E>M|Vfa z26tSn^E8r!X0^$Vo9kSoSK2{jlL+~lP#>RCMRrtv)<5;ne8&oGYKz3gGU1e|>#;5P z;f$C14)ou}><(uHhzYlN8dO6JfF2gCl%%pY<8Efs2sKH{^MwA_Q&i!t)ma;nYl92U z!t#b;?R)Q8=Fvm$Uea#s{8@t)S(?P_GxgiHeu}o5m1b2Tm#_4Bs> zjIV84gPhEwZ|YHQFiK3Z+Brl}#d#2_kagjTIM$&s0v}c7zRmTBJ4_iZmi?zWn-oQB zKMhRSEhmIVt*aj(dkYtS(8+0-kz-3v8sI<&a}jYXHEd-oU7fmSzf16J!1d8D%%%n_ zPb(`bp+)`OO=Sv0wqekW8o{ z5CrmSv(3lzgFTY9Vv`hU&&&*LB+#YH#}s9lkt>b|N<<>K4oKW4b(mgtT=n6TE}pxE z>Aja*dXfik=*(*I|7G?SsXjvWzF^MJy|A>ohY6@w+v?~}5HTHO9m5+XW*fNV_pfFn zchLm=k&`7BOa$^n#rSc26())#yD@yS1aev%LD>&+6EOtWE>Q#|HXePk!!Q$l2k|4! z7ea7X@Z~|KS11^DN%DC(&MS4ZclZOCwQl+aAC)qY|MD7&I*Otb@UEhT zY|xhBhaCHc)}P!Q4CjWmKqwiq9KxZN=m2dYCq*~HbD7g=c1dZP%Pn?*U?>s`^;K|y zs&aR_q!P|1)~(y>jnueAJ0GC>6zD8*xuB}fj!Ok5z%=6QoKZy0;7vYG$>CP9aB697t1M-?LWGAkG$AfeK|!PYp_@|rRQ_ad((NmPVu_C)-4Zt zFeHrDaThDzBXaGbYC{jf`!@Js00toax`$)tIn6ep#3P-d5WMXXT-cz)a|aRCSsJ2@ zp?a^^bb0WRdIs@a$90otZv$92v!=ie%3zi}ZG8MCNfW0aJi3-aqIwOM&9v^n8~6u= zzE{|eJ`MCw!d(>aW0F4B?obxebaU^!hL_oMw37MJ+boOD4?11RT0h8I z|50r-TEP<`Pum}>CpL>wvLL#xoARl!p-^S(T9YhSPBq`p`YqDyLc77aQx@WgX>~73 zN6<&a;R>I_ijG4JVW6V9I1?@*MTI_s)i%Wl^b#dB4G2^hv{Frpw=-#&v;mwo7Lm(# zF@~*z4s1*3`0>!J8C2byo!`5KeIA0kjam$isUXFv)arFQolZ;zJxuj;h1)3(@BlZ8 zsFWtug)vw6KO&?$?%uRk!t0gKEBCUDe(}oyUF=FQ2yMp{im&Q4BLC$nxS{-2#GQElqPM2C#G&+c zqRd1}meBwT*)jZpmER;7hfRRK)w~+@W!7F|l!mpU-pXz;*1O-Yr?3D30000008Mp) zaX|FLxUYZ~`Vx3l@X;iEUNWtIrBLRXN>yYpg^Z`Z0tJN=F+5HChU~=o`uOc_;fObu z5x=tehoy=~sW!5g*WE*eq&G6i6W~j#x-$1NcH$hGD_U5R@Il%d2~&bbB|}^bDOpFY zjP#YLLL8elO-T}Hx%f^WY743`7FiWxbMTx#)E87>EV3%X=ixYgs4l3$S!7j(&%$u~ zP+d`gvdF6opM>G|pt_?0WswuQqXA`+Ru?}B!|g$JMgq$stS){NhuVVbj0G3`2OnBr z+dc))!f^XgT~UCt$g2yVaO8L;cm&@^L<*JIwCn^43+5=)#z=c&#m{?bVH(5&@d@IVIg0R#fQZ@7LeCC0X2o)8wl1wCmN1#q4* zmJrJB(F~H;GPynpf_5MA3wx&mem_HgUws9v+uT=sDtu>ZmNAb7O+ zH-v#jUgRhD_uw_k5zO7qF~MPP_4my?*7x=%M8%Ke58gSoltkN7eB zvwU^&Jo}^3K6@eY%`kgcycCe-vHxIO=#QE5z-|FgC4i7^26H=9mf6VZB=zdMNof#H z#yg!k7_BfcEI?$Z{0-C$9iL7ABkB@Oyd*IwJINQ}e^BC^ux^ILH;|c)lu|*oIp)<1 zT{nWFi>`1XUy7Plki@N=Mt^JAh=UA|csv|?i{<5y@)O1nU^cuzRwQ>j5Z>G!+Y0<< zSrhtx`Penx6O2liKGhwZ|gkIyHD6^TFzh4#Xq^nf407JaS z@P{g97x@wOpsiS}1YNAoKv~E(M+4Qe?t}W%JZ*#1D40ui&n4@7a!`qvxyj5j1{RIr zJV&>;=qXJst~IH3k09@$S!F)vER-oDhf1n<%H7=B!0+N>Rlky!jc z&f$z~Y2~^Mq4(HHQ7#wv^S-gqccbc=?dxra4YYXol@BYY*w#q%=0Ve%8}AVO#y%v2 z0AcR#m*>VarfTm=N!r+Uv_FJR)y1o@$=Ta=pM$c;xR{9n*miKiL=>t{`7PZ-Wj*&7fHBuAYbrM~9(KJekJNt99o=~Y(-U6~T1k-Zx< z7JClW+S~sd7*kf1u$SZoVD*@=Azk!SRBovQzx0}(UpQ1U-7Tn1oD$b0oO>bMkDYc- zee;eh_L-pk)AF!W5Zom2t}it&Xbh($r)Jw5jpKw3biwb@Lxrcl5JED%NwnbI$rMxO zE$4aKL)!irmtt5lF)>WEiI$(r~6yTK2rG&jU2mv8m|6YM5#oOkLeOtJskz#llY zKx+ykGH!BE`pZWwpkd&UhBI-sWlklW6anLn>if>Be^N+bN>0rat6B~gm$uraz+Zf= zg)gyce*bf53g>?bvbMmT8hLUWS_vCibu8+~2&t8rSf#dwWji|IJC2oIj#lJgvQTY?6s_{@F}Tn@%kJu(=netELaLYCi-) zwJ`=YLQ-4nk^*{7F@`-Q!Rwqgly9dO2F5aU=Mm)<`Rzny>;D}6 z|2BdDF|lx+xawXc^*Ym>Wp;61xx}LFw`B|~p2nd=>dN zLOJ1j?p4kt552p&0jI%VZ3PPj)+ue-!E{fhu=Kr>y^?i?e|BEY?x{#Pv}eSUcO#}` zm&yfHgUPsUJd+SK(w#(0abXyiWx;iYobOU4Q7Gk() zX?{j#@vZcT>@x0}(@EQDET;cofbUHt#(SDdwlMNBo6FSTaeuJC@~ja& zcF)$aYKdSvA`~Pqw))D=0fFo-z<0h_2coE{9saa}PeK(yxETr^hC$#pl+F5+@YF;md^LMibqHXZ|mQj8vXF45^$4ZkKNsNZOsLzA~2sK*5=n zgt`AV!O8DO#N=WK8Uby0>nuVSANzeKSp0L>!^U&ng$r`QP^eSRR<@sh{x{6%=aV#gV)&4d!lhPe1d3s%{e5TNDE$xCztFg{&ftTVb zp~sW~@>k(8>P(2A!DyMp~&nNhAxZ#;tJrWS7*@=O(6v zxOMwiVY5Gs%!>%QA-k7)Ef;`?z{uO4{ADSa+`@{G&$imMC%sXfT>)q3L?{77e>-b* zo`b6!CpF-SOP>iG>>@ny0_6U8}XaHh1f{V4$X!?%I7iMnOz`QgJI`TdN4o~_7jM9 z@y;(_uQquaZd{J@`6YC}6f+woI8{VtMSYPeigxGTrqCUl^jMz}HucUI$3&Ln5&>=v z{ZA~HIcXk!^;_x1QiT<*%zxuzG!;GyiYm2~l7&vSTyqS*jO{T(N_Qxn%Ru#-AJ97M z26?`zAbe0hy7KzAci~vziUx9!+)vag8R3eQ3uRr!juFqvxt>sy^RWWeSp}sm%^Zbm zj1QTf*``tO<8A*M!M`G>?Y7E8@!6M||`n(U)6FK)y;ogLNF zrwcBsNjiZRy)h_|xeQa2AhEMPoSDask$`2so%MPqra-44;pz`5CA`Gfrkv<=v%}=? z&;08Dj5lo{Hx02$$;mzj?C&b(2pdWekeq(>edpC*W6R}K|?*aQg zGG654-UhE!}+k^^St}LAq#iR;R)(4EwT*-eJ>WQ%8_(QhLQK1!^Y3 zlwz_<+#v0fWS+kC^T^|D(o>03=N;mzzvM(~fINh^D9M(=nG?ue4|DZ>!$}HE^m?*q z!{Tn>C`cAs1Bm4$eam`p{?DMce#*djt22se<8o>w36jojT3d;^jA3as3$jwuSVbUK z$7>IhE5I|${z`AB;O)G+ay5nfmq|3S+Gv3c)zrjlKwN0En67Qbness<9rY^oYRr>G z*qn&mNnLc%j4lu=mS1k(SSyTX;Ajv54iz=FydVGo08Ut;Fhp`Ia11Nnl#mj1r9<)9 zB=Bp5^E{p;DacCI`i*)C*6W&j_K*4>fg}n1*M>V9H^jQjjY%(5CsHyOhTmILVvmVt zMDp*TizX*_2|m_*BP0^6L2t4#V|4$yhC7YLAC_o(?g6N`}~m)b4aU4g;XX0|MM-T<>8TG0JilfMA0W zn9^~EmHso|iVOZ}7o4q;s2Dn)69aV}mHOU41bda{z_25A-?emmEK!)lf%Q9O{5D`) zAWOc0sD0Z5vZQy#xX{2>w7S^wM(jViM>Vr6l!=iLR*!St-9`TIH!Rw}p^6(23;Q6+ z(L@8$6o5>C38A5>J}V;7t-8obR&IIP>mWUJsPDp(^LImJu&pPHcA*7dw22Fd_;HdX$i}O#j(q$++egFktlE2Mlj> z7mMkGpBpnqy4t@TN&k>FSMxLqqvp)&C(n#dg`)He!-{zA?;g`q6P?;H99C>twCIva z*oI^awZ~~^l|cLmTkn42VwljaOO%MpQx}Wp_^tY$l+7K z%)T?GEtS{B)6=FLvj~e@`X6`u{se|iGpJbm14+T%5NdpoiI`=fhSkzVX};A2I(gE= z(A%4RR&&=9kDT{Rn~P;T5Gx?^D)JSDKw91?Eu`St@eotJ9^f1HdyZZ8@-%22^lV=5 zaDSk~R_HD9`twCNV9kSHnO8#!eNd>RyIW}lHjwU%_&$?}qUw(7wz_qLYb2OIVYV-DiDiT+n-d-)@nWI@Zh9ne8oL-F_i?-W@6d&i!R9KjWI+vO}DXlAPqa+-oDOhhB%U`3*|}5B{$VavPsa$pxmn7luaN$qfgQ#;46d7QlM}L zcuoebMxrO=$+-f7;bLy0Pg{OmvktA2(El{7^^{^M82(`yg7^C*YOVkt1Z%H3*vc&) z570V(*Du($h)N1reZ)EyGr$AwRe@&C7#;4z}*M~Vz~BpA2*CxxGd9QR4eJ@X`ZV98&vJ7#W5 z{%&7K65aqYnZ+q`oo8}D*fsnxbYO+Dgn3TsVlFFr0_qS<0_Lak_*1t;Pe~rtf4NX! zCxK0YkOBFoi+a9X$*=D4SnUv~6XhgV@?M3JR(G1Pt&>mFc=R^%^fRdGsGTV>!BL@C z7iPWkhTf^&RRG`_pfc4O3ohR<)(~md=Z8C_pWMp@J}-elefhhZzQ%}$@!Pydc{_=p za(Za%S>I4Mvt4S6FP5HOP3H_PWmY`5V@ns$o_)VSF1p%?V9b(8{T#}6hxre1Fi%z) zlxVJvs&5WEdixElZ;aW3!0ox4{VxXGE(&fT(`_K)F)-r{pHM3xYV)ev?|8dxeYoJ8 zVO5N1fQ&##E*cqOt|k!xVv7{oVOywtvAVPh^L5}JMQUf1EykrmYtf`l>VZI}H+GIn0Ydyy|qhE|e;X@NPiPytPBNNlZ!n=)b2Dcr&`8WoWF=|fHl2Ii(OI?NYM%RTMYG?-CgRSFTR;uKxO~n0{&90`YoV;8Z$biNQ}0et@;(%T+zDFh10LmFuwZvW)g0d)FY6V8V~0(KV2fFP&2e&X)2V^?`$p9lAp*e@`;4azxP7n6&S(nT44RHXa6=<64dL?( zr7JkvDQtK%c6mV@p5eKLtDsXLTVhQQE|n^Y9l&;LE2Wq)92TzgkUhQ^2y++5{)S)+ zy=}J~zO|g?@~E=h-yMNAsr&V-VMeBGa;M@ERI|NHd^!6j6EuSwwI)s%kBmkXPrB}= zs07d}##SXP)o8vsw~>TBZ@IByrWmW zFXi!66u~8e9|OfOktpkQ$plsin><$JdMsl8r_IEp2O_zlFss&v)IF5-36z~@1TCyw zynT2yIZB>50ACKwxb^!u-co7{*OS_f@nxCOi<_n~0^J>gywfM7uupJ}@_>9t2FKkr zQG{KpnLLxMs3Y7X^70%z7OHScYEDmmwQ-Wg(zUERy{qxsa~2P=ycittc*5L&V_de%?-E-;Ea_seQ-@srn+_Z%~$XhY%0%#&D8#XV9v2uTS#6k*>z*QUoy+X+W5|lx$&YBuzi}x7+j*g zWJe5=W(qXk^`9AwNNjy?%u!I%TngWLWbA85|L5Qh0OYqv9^r_lp+|=N_SHD{?qryP zkleYNRX9KkeJB3I+jp_VAGD)b#bX0y10&LwnNS_OX75%b$y^>yp`bz9Oc@0uVwH#M z(RnD(23B?SX4NJclI7~n@hYH_{BrXS0QBE}ve^$5NR9(~lRjyvN~qr735jVWhv4t& zESfO$GpswOs7%dBKtL4LaWrV*>!r>Z5p%8GwS(|TK2>ODjA)SG4H+XpH#|wddzK;& zaesH)HN}ID`HkpfM*mT+aPxV@m^Jh_eXHbtpsW9UsaR5ip)VrOuV=M_{*COM-|ufg zne3R^gcXNAfh)`rCtodbv41D{S~_Hb0SAI?J|;D(9fMEFwy$pjmpzA0BR<@uXUdeW zVHPOk%ax0=9NSZ_ES?KpYLrZ`rbymebHO~9{|9hmo*tYa8oT^7jfK@rmPMetpJxVr z-aBNmRCAJ%BAB;Pfc_0vjwR5Xefn&3LcOSqN8w6UWvI4!Gp1HFlB9(i3c1J^U;QOFw7;Z9&Mr z!XB&xeJYS!SjSVSVoGM_CUab_8z)Fu;EFX0hg{Gn(+2Lk{6e!$C(}z>{3v%{pG#JWAL1Bz|j)}eO$kg0!51?cX644d{ zLA*F>#rxwoOVa%MMe^mF?q*dEZ9U}-5Dbf)ygQLP`5U=C_`csJOIf5wJ^y}3BonVc z-jd@PUc6I?DD|SbAxNq#0?z~G4bbh8W0sw*A+f+3siDD z0Qo@}CUJ#YsNEA+3^kCAwH19~C~qIQvD%gS&Tq{o78q1+d2#JF|Aja6HPxwx`ujzZ z>DmG~;OQrIse~f0XCswWhjtcg3Jx2O+7Z*P*hjH?O9T>?je-`<3H9%e|F!nJGGB<& zi%Q*^g(uBkw0^mj-l6v!+55sP2-rlJG7D|QDN>jsFDv|b7PH3`_xc#<%kb-r#qYbK#7uxThMn|{V{D3nOwrDzP zs=*RpF@j;*2B;>&?T+n<@>hy0F@peZ%Hs8ixJ!W8Zr(-H1(c32GUC*uk{S|F1cpuJ zmhOJXvLCAZC*9_kEF4w#6L*jHv=D?V7Ag7WyPBY?a}w6NZ6rgw-6$ zgG-?0PL{H~!IOs&_t zlMLTlD799}7yy}{PS3{j`OHjDsH^i4kS9#`6W?L*TQ+p~X$#Q3n7@0&zP&C7Q&(Kg2y>y|*6^^67%&f4N#h8TIB|t}MZ0fp#$mUrR{(vruzs%Jo$#4 z8uwZ0Q!6N)+|i7{kTk+i4)pNhN%&f9DxxAqzDvfNl*qo*en#u~Dp!!ql(_ncWzvsh z(jz`lw-LN4#arxyB-;nwI2b4A>~GPWDQlbptP$o(l+G*WK&PMRhx<{mS}QHALb^Wa zt#vPheI09XdFrUz;vR@s4xBr)@^}WgG)msu;khaKEltJ!eP>&((F;zh%6Noxo+TVG zTV;yhOFFDL2UZTjsS~xeUIf!7vAzUCz@4kV_=or|HUlw!ff8^5*63bl9@i?R!YXR6@svT%q)x19=&5RrsU5DZ-AD8ZMNx=C!>kPC6gU&iQ2vD}Xw;p$} zI9R$hvkc#&_x@}metIbPrz||cQ=WAP{6VqFsfYE7XN>2vrv49YT zJoUBTPFjAhn;92pg$IDx(TEKVBJ$4X6=;D#%}z>pk;Q9f3e^418ECqEXRAvgoGx+_ zU#@_Lu<*_2mntu#DP21u5Z~4_%JjSk6UqAm^{XQw&!Y1F0E&Gdjy=rNQItWaB6FW_ zICrQv;DM|6A}c~5wPslI9KS?3)4(`*SC&gEBH95PDS$rf z_Js54OKIpPP~1cH+6qsiPq)T{(Agt_f4-<7Ll16`tl$R4S{N%<$*aC@vDdK;!NdJT zU808{&FC0-eSHe)VW(Ac+A>GEQ;k5Ab zd2~}DPkwikHU(7$d@5l*&KL@X**H896DcZ?7MHPs(Y-GsE%+xygdIhBO9YURV-Fk( z!c?XcidJKIj9hfdTNbbOc5M;-YVXtisx#u#9VTuFZBoMu5YG^DB;%y>n#Vp(`%?2( ziU_6+5`=Qfr~a&{Bu;l04Igzj$i7Ckh{$O}6V{myQK_q@-6F=Xm)XJTuFWfYC>aB% z^vMD=(SfKd(jZ{Cun!nwF_Fw0y70mdvsw-uD6c<8W{jYU4_Fh z-57p!oS4}wdMIXeFhgBk4m-Sva6y0GL7i<*n|**m7jPk~RIia(%T)|HO?Y~$FY=N{ zBC=U+#xso#HN|A6!GQXT1@V}dM15rcGz_;DWg#4s!!p=AXN+fVe~C-F8`?U^>3K6e zxRbb`L7GcNtRQM;3-E3=50(oMgjNN5@WBt>!4Pu?5l+j`)!Xqx0s^( z^0gC2JX!)eB)&X%i>}G+sMWJMW{ACHz#wlm5^s+ky@11?@Rsce+*_)Hhf& zRZRr(dxzL2K6**GRt-&l#DlFyse5+F`Nf3uUVE22$Y(_C+`PNf3%(#LL31^uuK{z-rGNpMG#D-2h?AMR;O%`N^PQZ0vU+;bA%EZAXH= zM(VPa-fYTJm9x5(&zN2bT=Pu5xk$rwPq+z*nWPO}dX?QprM$J`QABa>loBi4;?1Wn8q^F^S$X}LaZRzm@`SKbK?>dga=NYnz0&l<3F zSrBHX1WBWtV~p^T z>Br$Go4c$W@+#T$_@7vRJuw6l9Wxc%K&+pQpO-=6QDQhK9eSb%oIL<-)9S8hI=yF2 z9oa_M;Yaf$+IH@&y^o1ftLzCM)FR5Zx1v8ih6UCqfa?gEFL|s->7wHVxXcvHoU~NO zF@f#qjiDFrF(s*Z4G5r(3iOH!tT6{sCU%%dc1gt~;exVadZW$RlIp@iQJ-R9F7>>S z=siE&RK*hiMDd-_X3*^y`{b9n@PR{B+xB&)>7} zy}CB5v5v=3-_V}m@@BkCWXEUrRj#0!V6Fq}6QMb7DS9LQ$0MB`s>=RgGyvF;#*FslKKfeF`oFmd(wUVCVPdXv5PQ#V8(5eA)J0Vot zuuHk=({#isRwHlq4Vu5EIQMkT_;w>vto7xla7+3<_^f5^bx;{er(Y&ej{|cO;sx#xEro%j2ljkXb+gOQjzsPQBdb}Mt3jh3$C*QX$HYMT&6 zONyMJfngte!I-yi(zB9wW%CvY3@2U47sT6Fu!k#ZlaPjk^$#deHJtk`N?ku@Yqj5M z8#!?Cx}0P3om+bG=D8A`UR}h<1dzr+5!^}?n|X^pKSkvgxT)KA$bopkO<*fSygbpY zCyUuwDB7`L?MDxrb+P5W1Sb~`@@Wb1Yd~1Cd!0}>l);ih@9F|Ge!OG znMy?SfQ7oY)1X&MpFYfLRPGwiB@JM@h;`-%3O=Dan43BP`5YY*{!8|;JVV8E)e{}{ zG^ibUbn#c->WT+o{Vy8#czp!53j7!hv#ulCS8dwhkSPHuPvxz-}iK~p}(U^Fuc zV}m_8!8@$_ieAab(a5wlxBK`V<|LmA zGk$>#eBh#gizN+_()1dc=>cmR`t=QE44$w*1YzBy?UhhAdW2_i2>cTs+tV+0r-Us zXXZmFQD3l0*u9rSm4$SRDjq^)YnP4M|hMu-?< z7-7$Zm`}!mGYx>qTwm6Y)3tB3ui+^YkoMZ)#kx_xtK^-?(>19=>r_%x0NW)c$~IY| zoYoR^CvgvVHGS-?EE~^kNj6vxrXG7ZPa8&~`Bb=elh$d9k#Fjg?;$gp?Q8lH006FN zsP3e)!?xc4o49J`3GxFxY=1p`=|t~-@6^kQrX&Ujrs&=*=wPF2qy@xE2IG7*Q-2N_ zk;yudy6HOLo=_Ycb|er>+;69l+B?6WeP|NKc%mEtKmnHbEXJmtdI(%=Aw0tnc$m^iFiEquYXDN-XV&X_ zsR~X$XdR#PO(cl;g2mHupO+%^fw*fB=LbZ_6?c zBT=i6aDE{YQAU$I^xp2t+Cv7d8B#!EB9vyZ$;>VV^0qzLVv>JgE4Y-faFRM*kl8w{ z8U<>upLlz-vZqDzq4O+K8?ua}u?Wwb6!NiH4%GndX@56)=+d86z4MP*HfoY=i=M+b z5u#3;OA1@Iog%)FA|H(AdXJ?%LlPH0QBjA6^SigUNAMS7r$Whp!supK^;VY_13w+- z(EDOnk->SX!(nB1Y$5Avx2l|*_5h)uvRtZaOYT)Z0*nWeMj%v%>9i^kQwFj z;_p84*>Ml$Bun;>=XR({CJWwxgn5bOLtxnNZ-0}-3i{{XJu0gZPkreR_lW zH<)9`H-`WArMwXr8qXbJN(_j|5|2zY(v{m`1}RJ(1AX7g2xD*R>s<1LiPCGSldtwv z=!Kd?4Cey3edB-iEkeh@W(gyQQ1_aNlj#a&RQPS}eT&=lIIZlhQN{!B4C=Oo+w-Y) zwF9TO?Px2`UFtK2B460%AmZi+HuEld(bq|GJSe`b~o0^!_8&$SN!~+&K91|G6Bqk>x)#S$WhgE40ciSPp!>Z&P3Yh zWFx2>z6nP~ z5baJ=<@%0AR0yclq6O#Y~Y`Xmh2!obR-`oxiUtb5x` zhV}6KrUf{t_gw%7_o6a%_YXx1P%UhDcSY^QVxj)#YWb}c@W(Sb)mlpMFZ)<>!WsR$ zVR*~cRGAy9e1rzDeH;~NeFVmc8Gn{1WLycG+H;Iqg#k*})6E}6ylrSPSB0!R%3cYr z61=0{q?jo6w_S@eHI>Ao-W!Vsw^IX>eda-AuB@?=%y~+gc>JOf(V|m6`x#yW)Qp4lJhjRLmsXB!HKutMV`4a|Fg|~!Pnu&!`eNu$dB!pOP zK)zK;(N;rlXxN4A#yk#Wnq^zlicTV(cXG0Zr^sJ(PuE7g1AJL$<32$l3^XK=ZO8yE zZgffN!&MLSS4{a>qf1yaDmp@bXDf9i`D z6k}SK2P?(I3(QLDIpAK}z13l#UcL=`bf%2imI{Ym4Z;itV63sxJhiQef3wl&Lr*#{ z;x5{Q1aF-)6fHmzMIPEygYRJ3Q>$rO+2{5q43_L%{S^A%!UNT&j2C>x_g^ z2O0eyA(@9kvRe=nO(+7l9V55`B`}n&?y|&%h!tx7X1ELZ_o+tmmBTW~?bG1k2jlMp2oypI>?OJ?EB=Z4u?J1No;8-%Q{>sjWYm`YfpY>j zMCEA@7_Q}^1lA|3of`~r+VDApl6PeCQA*#FT^QVdx&;4k{o9ex&kH^IHSm3S$W~3(BOytkEamqz&fwIkTw{Vb)DsH)Iq6)nr)^Zid)n51~(>$Bu1fy zksFYG1Rg!0?_unv9ldwH#ert7kQG&6Sv`|qj$HE)-^RQ+*+1q)wsL<()Ds?_VC6N- zct*xmO%J>)`1W6aETm(mYSD)DI9FJxMnnF3z=&JssEW>_&jy4v$Zs}%vO(n0kl-lJ zn7u&=S~HyBP9)+<1S18=uz~LCFGAZ-f?K|84o(rKvKNYvhHHQ??G-1~Ip?~K{+D2gwcBzuB z3F|W!E7g}FP(eLAPq}zrU7$OjFX6h4tc#X$V!b~F+ozyWwaw!M_@bwj3eey_fG2K# z{8m7J#q!fpjx2JZ-hkEmb!)5m`{&e?^UIME${7SEhtQZ@?b~shw)x876E)J5^3{2i zKAkx-FNu6jC6-L)T+q zwdFEDG{{{r#y5tx{pTzbu?j<=P}+q7c#c_l6Z*-LaaUz$iZ+`LNeI{Pp)BOyE<;X{ zqsl?^Dl3o1Nd76kXFKXa?-yBiZ;)t^4$8ZZ3J0gCA@Sfu-GYMlbn+zq9@nb0L_E35 zGxzdD;1Y2&1iA*4G6&Ll`d)e2$%;-lgA0T8?e9AEXB<5C#B`jQFU6{fJn6ASDqymO z9&-q7QB6aHbh2H-C@+mu&DIiY_|yqfEx3IcXi2mp0A@OH)&)3?1hw}4er>h4k0y>D zcE4bwVyLX&DM*{B;=*@-iGwbB-G}njA5c9?FYCchWYRNa6n}zRUt_W$tW1M8VhSJ> zmjQAhdL*4(1Nv{`+4favB^vHUWW)22ME3k$5jg6Do!W?ngL{qw_8(+|wm{8@5Ka0U zH6IKJB^-;TLuv`v_vlmuX zy^zuLvL@IXT1Dz=t93Fd;S-U}CR2Vj49m2{ezd`US6Fh;1j1!9N|V)RO1JzfDgN39 zpTnFKg#Y%Rf5IA}`A?Hppx4%mgVlKoRGDZn+O>Q}BhpkJhO+pqIivJUt`Yl<+5ea* z!~ktBfBNU=it>i5{GDZ``Ur5T>H*Jna;|ms|3PT7=Fd5?ox7Mb`U#k?v=nd1pgxns zgxtt)xXN(b7j2;JY>J+}D2_i}cg@rmOOMeo467GXHs0hkfO{a+V`iO87INd!XGBzR ze9(#O(n%Zpf|~l7`XW1LKj(``SgD9XiW~n0OW?k@yZQ1=VfrTHe~iq}zvK4EC5&3r zlai-^=RLoh-tm{n(%XU!D>c06A$3!EE3epmC37qP+t)^{WSzw8FL+QT9!3x^a!I%4 zw3;OY{;v4P2!y10V6Rs;5n3YtD)VCn8?%|sMuW4g{xHujb*<6%%dUbgWHil0I2Jn5 zC8hmJG%x7r7G{Ky=J{U(v<&787BS+G&qEYK`s*wc!(j5TO&ZAjH9KxlNqzFN%T9A( z^;V-!1ASIU;b9|HRCGoR5seswU4y+r45oWT#dID4IPl3x@tLAS%^6UN)!4v+I%ku{_S&Daz15<4}?8tlB;wo?k?S=cOzSf7S!r-?^Z%P zaUW6jMUGHq4DX3EPM@)Uw}xQ<<%|gwh;Q@w5Iqg}z$HYC>f5XJloE(s?)>vCd;v6? zigUF0F#k^0RX-T7#*RA@3vH7h{si!qPQTe;=ZIjLw{IY5UYwJ2?G{Oj8c6eSsv=H> z1$%Svi+F;yy>au{T^fyzsAX$`55$nKMv_`_F^==;6Gm2>M{jRele5e#KQq7ZVB?HrW6n^D6;Q z>S8tq(cUzUsS^lNn2l5(y{4=#X?7XaqgkKx88O1$vjdh?9K6im)R^l}I-~vzDlA?X z<+4ix5#?hyzlCh=#92Y}xSq^?Vv3Ej+Rs4GIn2bLn2WI7$FP~T3iTr%2^{m(JC2vA zL=I?!ZlA!3ZdGP&CkT_`mG9j#6}1?uP7p}2Ofw&fPVsP$e2|Hrr|3UV%V=%#Dym$F zFeQ`(_Jy5;R#h0cCR@;7L0R)*7!+>;8ZfR3m?y=n$#DtAnh^|H$4hk!kp@AcvH zPV;@USx&4oKcjmM?U>|#S)y)7DE0Dnw_O+WL|guQ9vAA)po0INmYc2=2_MaiMoek$ z^910Ki99mW{2ox`dM1Im8l&*Ggz>O*r`gbsOw|eDgl|wA-9zJrZl+|ot#un}q^*qE z$?!lV6gX*PKedAavI<||CWnsUi4zVdY}PA_7ykycuqz-~`P{1psSz!G$L5+r%iDDt z3}xYIUCl}S*7>~GpnX~Ncsz3nPyIvLggJwqNm1f=fcv+wq-<@%zc2CFyrFqRM=R{YuPbz_ z*bDZuLv0Mi7pn6~_B_w^?ck5eN})QszBJZ%mT+kS1tl+KhEiv|0@$T} zOm0&t55c5Mxa+3`cuQtucR}|b5c@L}ZrjR$#2z_k-+kS!rx5Kg_!PdT-reA`Q#iL? zAg&q8mn&CB0^d+SHA&Ft4jOBP{40ROF73RZXk00tI{#89tz-VNvS%+UwltPOFWyn3 z@*jk#AX^%(`(O38;B-+Po04CXdR)0!$_LsvJY`ysiodOl%k_STZ<(aATrUm;s{<^` zR<{i*7Zh4XSc|4ZuFDF9T(koj(et>g(2t?GM0|xUnc?r4^>lm!y1pKw9-NFhGiD#v zDg0qs>+zyGHMBv(2&vG0`ZU&CdI@RXXvZ7=2qd(KIQh09L+}A`H}gh$Yl}^gNMjiR zFA7BV1{n}%n`!v|HTOMl!Z3*Blj;;12EGaW6%?~EKT_V~ksf5BEh?%i9{iux0&iXP zcYy=~$HFO52-~O)mW0uerMp$;Y=-2ijh1T)S>tw7*Sf^<2uRXxD6T4+7SSF^H9rJC zM!|#lImSGO^7kQ-C(3#{VJ)b)ub5=ts=DU|t(m-qGI|P1ZC0b(zGM8m#(j{=M*;b= zL{5ziqGiIpUl`Sy2z`_I@5L0SW#7m22%_WU{Ra(SoYY+eOuS|>*-oz)Ey^9xg`EU! z@_*hbelxtM-+e;C1QG9S-U`P(a295pm%Qv1VDjA}cMzsLl)9$y}1Ti-%$-;tyt6Q2#NDdxjnH{3>eydjf6=fI6K-`EgqKf!^!A<|coYVn(e4I1X zLz)IO+d`G-5C# z7@K>)Bx||B*$SGf#QMHBX)$!Nm6%X>@V1B1mhko7xFrS`a1Gr! z_owBE4rB^3^)SNp7^25I8D(RCSFM?t$q*aguLL}p3 zY>tNZa~2t112SE0`aU^K!8!?%GwNM&Oo}84`TA?dE%-BSt0NVYD4Ss{95;0eP}@#t z%rpwe>!G6^W?=JSTFEDCj^Fk*j%kWTDOL>Y9>ek`e`fTfGjKz$taT5xaL~lS97=Ks zrs>-t**KkL^B{FCjoQYQr=ft9b%Pxp?4n`u5#%sB0Ed)Lmo?G5C<(rTTd11!146ae zU$%#OF)~@xA>zdFjGuk9)*xF@vk^a0bP&B9rL?W~{wO5_WwZ&c5g0tK$#wz!4%acq z7Z2?~+U2LS#a}Te<V6z;tWwHKG03QM1{$fQnAqHMm ztqKrRr{!eGA8n!<@8I-S+Zc#7l5N7)d_ibib=pylIV&*M&}spwst95B`rg)bj*Ixg zIgwV3JXJ;m6C0L$eZ*KQ>XHBK%BO@2r`<{yp6?T^gN?!1BgjrSyuW3-5XGxAtY!AL zxKe%wsbu2p*FVHB+di zvhpor!ZaCezgwQb>k48~!C){Rn@aKU1Rv@wKjZ&-{La5YvG4Gaf{DIdCT`Gia;1+xo(wnq-&ISk(Ox8qiY0Lvgl XtgXXUtrDw7QS6!ls{{n^1i%0QaZ1ON literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/copilot/adcredentials.webp b/static/images/auditor/10.8/addon/copilot/adcredentials.webp new file mode 100644 index 0000000000000000000000000000000000000000..d6c0f5dac76335d36732c6d04b1f3c608a6d8ff3 GIT binary patch literal 16258 zcma*Ob9`pangtr?jcwab$F^;!)3I&aNyoO?vDvY0vtv7X?>Fbp!OWSNd+V=VwQJX2 z^*pQAs^5l+w1kA0AP9)2xQLR55*M-EU&pgQKyyH8Lm<|{1Z+7nq>IT&3y2rBECLWB zE$u#Bw7-l`Oh~5@H|#n;;}2)je)IZ7>c}ViIvHN?+G4#&Apd=U4M<-@g9P|T|ew-)IIwHKZkmM`F8{VT)};8d?Np$^{@Wp$_wAtI@ zxA9g0O#Eyd)lBn;JQlp&`2{TanmdYr&$}d~_yGMHd|x>n8D%=m8xFMf(JP%wW|0 z@~?RU`%?bQ`vg7%A9kAkWdsNPmw-55(NCRgJI8suz)SxWpy|8j6T(N@TiQq7jo>lx z4cG$wt6U=i<69Lsu7SCyg1>fvpb^5ow7Q!;mlRULMrR7%D!1Bc(F?LeW(G|1Oc)s+ z-RxZ&ruz@`e>Ep72EJL)l{fiB=M2T;-H7IZ+Fz+DsKWWz7J0DUYRTHNmrWsjw09Jl zrvUbM0vz1j;i9^DFPxgPHGk0qdPvbU=a^bXpH-NwEuNNe2{V=DRw%@gFhp^_d%6reM_u;B%!El zae1x8$G%xbVK1*A3e80$1Al1dF9Cfr?*j~hAT@9Uroa3?^~mMq*wl1o=J(h$R)U7| zQ0D-sxG{TSSius%*B+pX|2uIzW?5#wPq5+uKTP}yrP((IObtXID;z7$>ZkuS+z7FZ zv@>D!ml`_Zx7_d!kG-rbiN^b8;WphAp~qG2R`G{TPZ0>;4413GyFpReh8y@#l>NcL{F8vL+a%Im|Pj3G@AJ+597sB?DX$ zXE_c9P^O?nV=Qg?@sgp-kq)Rc^4-WsmR{jiy#Qa5N{{1nRO|E7-s0Gk9J=JS18pF{ z+MW+7UB;lm2TXK^q?hY@bo5_-P=be8B6W6_>r+36R~d9;$1T??NiJP1*J~;rT?zMmSP}g$tM3P%=9yZ+>a&Iekqq& z@zb)JY=^Ekz1HhYMA@me=A*miqZq{h?2CrIhkbi-PZ$~C{0e-}vAsj{e=?4Lb~Q@<_`B8p6Xd@-;3hgG^*{3V zFW&R_ATBc{?7gXst|wk+l>E%^#5ULigN!S_LusStb8>l1oAS zZA*g5=UNG+^C#yu1`=UpbN^OpxmGZhK4bqf_BDGudz-XGkU9E0-TrIVRhR=Z7yzhC zb%z7iVMdz$j>V;qO~EF|#oR8*WM9Z_wSm2=eNcppl`qNsIq7@|UITRMJncBT!o}~Z z(ElX-ziu|HS=AKt5OK1SGOgL@0up~zL`1v5rP)U#qYza1aXV76&(tbdk`4yIb zUnm%`s}ctZD&v#utz)acOd1@?MTnjO99#7;DWz}Sp-&4tht zY?Z6nM`yT9&pfAspVtr3;DeB5BYd{#G|_r^ikTI95{|kq^*+eXB^`LsxjrUWwf2rI za-1E+4^Ob>9v1YD2!QJ<$?(|RtgjtI=5|3P*ZW@37gTwQV0a*83$|@{5%wQ_tiCid zE;KqUc8KW#lpd_seuTL5i$dMBR!}DqA(fTAfq5C||2&@cwQQvN`Zh z`W{8biTXT=Yj%|}h;dN5?CkoXOSM`Sqc?%Vp|kZ6&^A}NO~0C?T9zDtmRCx7(=cTjtK(nf=!W8S@D9YeXp z3fL|c5wP!pkY)>#Zl;jsq}+9&GR9nph4a@>{VRMMWgfOHf6QtUlXBwmb-9G(BhPV| zEc&y|z=$Uy5;vf3KGa^Id{<_%`$Oj*)~@Jgl8&eHJVLY=f{J_wmESW?uXWwz&4LAn z=|tX6PD9%0Xk%|s8KF6Ntn=}X2?Uc-@g~+MgZVU3&ArHpjn|b=iN8P71Y3goB#l9} z7L^1jYv~N4-NG@0F$3Cq=%Rh~oS>?j^p52pzsN6oKev!LdJijU1+}L1bVbJvHq7|g znHKE{%6N@plK_Tn>h!S&_!>xFJ*@P50S0U&_(%HeI+S&C-ImW-G!qIvef= z-8CcjQkq#;7v>;1yb><`oan+qeQUOqx*)ay)sIWQkK@3Q9&gSr|JB@JK}en=ft^~w zellB^`*#c>T#eI>efGFfK@*A58#HSyVY3+6sJ8QTJ_tegJLk1j9`&ZNr84SEfmW9* zGlFp@bP&*6N`>@oyexC00J|C?>?6N$x2B3zecCGq4+>Zrr=ioI3PEH*xDvyUy6I@& zpAoPRCy2WS+65AE^;xz{FMcX&j<<{rQm{S(eJaI&#>D7y!zDB!$#*leL@jp6aNvK2 z8j4nm->5C4%rp=9Mf5qK+Mxq6gzDOQ;mDO#tKGaMjtv$@ zx1^MUFA=RX89^(SeKLmluYaj#gJgu)`s3o(V-Qi7^z1p5%o58 zD-t(~n90A7R${HzN#UufkRML)LD0^Yer!_I!JJTI9PPppSdcjvq{RP5Kh_tXt8{WG zN|Ynv$Vi&{lWBLZgowcTO%s1@=fx(MCmOU~jOpqWbD%TtvxN~{O_)Xc`%j}N?k)9A z8nenDEmiT$xqD9@sJLf?2nb$6UpdI%3SP_nAd3I9x#_?xfia7(8p#DpLB>s= zd4WIGx8g^Xn$6{>0DQ@E3aOxyK?OBK-i4NQjw4L%*RY~Um2(QJW#RHZ`p3>!1WLVn z4o$+%R#a+}0!YUJGS&MiBad+fgN(U)kKPnB*rF@Gw7BchdgPeoK@tfeSd^_F2rJb^ z1UMBIj|g_?;C2hP#$Loa^w7^-Xgt>rZ({dv7G^Q`EuT$}MvAy4YNm%!ko*%+UAbKc zqXPumMas4esXtW)pi&V{GpKKJR2wp2kBjm;f?B_OPG%hj>KQM0hb#zq1`(pPd7}AcQ^Z1U=Nb%3oD{X< z{bwsOG^dR#sXiZwdk;mjk?{&x#q0H@xGNw3O(j-y(8)D(Bkwv^9+BYH!eL{|K+#E} z-jg`#^FwHXomt0vpxo-mpoJ)n^u>LnJhkqF1X*Jji(p_R2!%&qO$-OL(nzKr!`j^n zcBJeX03?(nc2ETWv~w|!*%$pnv!^h7#iVgd)Zd_3GB7I5F z4_ho_+7&7O76{Re({3Z1I#;v4*)NWMS=LDLh3Sd$`K!1p9|g=2BT`MnuNbTAB%GBf zP_~9j>KaSV?^4*q2hEVb8#f)G{lVo$9;-sv0pX&fCTXR8q8ngOkKe@ zM&~D|>ZUC$1r|@XYZJ*qQh9bHu2dOft+5Ae2V2kaGiwNSu^E59HDRHybdt{4QsQPq zbBJSBBXd1bz#CsO@{yEj3(-O>c6f#tnkuvJ{=9G58Ae?RY6LBeP$tWUbB5#SK#AV$ z=6f>XZtjJ+_n*UeJx^H!kYS+V2d*zNa1THJSgOnPrm0Da8^4C) ze(hCpD^4#_O}jX#P?#AljFBrtMwWk0kM~c!T$8TbeECQI&`<=YpGF|?3KMurd2_7I zlsc6+p-iTSNP)zz;IUnY73jMam%P8?uZA&fjg#DIaX&XHCEQ{LUP8<9;7J~zD4&;2 z;&+mF&BZc3<)X^DPup{eAIlXK)4-9?Bf8r-BuS@>s-x#pK3L~$no}zt zF_|@r9S*^eILiLf`(6w=gfSJWWh>D-(9GU9sTLhJ;?5Zk)3*$w*OtOyX6)r^d!UAb`+!jxetjTjn{s`lwH zQHly4VTGu|^sU5*5INDAU$dOK-yNhclKJBig2L$!+qAqP!6R3qw0}+t$QnHsNrKq% zqxomgb~v{+a%+kaEC^x-4;`AGgdJR^&rckjGH?>j-{e*izt$PNur5T-z;i2%MLvLi zspr|SPHd@Y4BAZhdABJ=Oxge(rxjU^M;)uW?CmsI0>T>PcryhNR+u!;9NmfcW~lCW zYxDR`bTaRwnBK8#d>0({(T|e3D^aPu4|3=38?x471T!cZxzn_jwa$M(Ei95r__m

>#2D)dC#8)zL;j#;ca5Ff8_a;tczSah9tB~Vo)ttr<3s>z zA-}gdPVa7m(_cfFs*eW_HSCVH$YZWxhD_6D_G)NJz;_?t(?iXoq9l4|*6rJI=_kd! zPt34TdhN>6(*mP_w2mvBLF7#+u68As|?esUZ(J=zw*qtCjaa4rIrbtE6;o?X)lV@>U(&=o@@y}t21>pv>jSr9bm1m6$_q50gY-wGtUS9O{i~ zhN4{CNM5Trg?2o+kkxOLmXkpfDs@Qu1_4C}rzTsdqnIz`=^w*4^AFexB-FMOnD1vwJ#$dL~b0fkNqEw6Mw=g<%jqZH?ajf7f$ zW8qqOJI=C&Jpw6WmaQ=O`3FqlheO9Fee_`xQ65%p0oIpk0`Z~+UC0rDgl#$(Q)x8a#1mO`ogpUB&R^#Yba{%^QtiAs-X0%T zP~1p7$d;N<3X#%A>kyP84E;T6RbA;|{xNQ4lley(HyPq|9#(FP(;&&w58VG-6 z`6yv4%U8xReerckMLzYM7ardyTy@HE`~h|Qk1LR^weP4m!w7fPFji)nKlYV~LrL!b zw5PtZuTKZ>trlnnOoz?zCnJH5-^hk$Dik|i8@Z}1sF{9QfBY1&9oxuTW*mz*3D)Sd zIp6A+?oJ>WW^W01P2t9B7b82MEw}KEmr>>xa5c=c{Z&!G42df4C|5Amu&$;Xe(VGt zxr(k(+T9cO$jpE?zb<4&ehgm@=Fu<_$r-%)z9`7?r_Kn{(w42i&mBs<3!d%R^>@%} zBR0uKdNZog(9CW0AH028-*g3smGn*`HNUE*m8kFWY0C$Pl{h%yO&)YpcBjA##xQ(~ zn>`<-vpV}tV{y2sI7X@WhJ`K{ld#!ia8@g-uo3)T40Kv@HP_Duv~SRKy^nBFuyR_iwsNFC#@}vxxe8jg=CDpCTGy|v0JLL3KB(<{U zBqT8hgu1dm+9`&|tdQ0S51F`p>1b5pPsj?G6tP1J!0HVB(fQ;$wR>DespNWfQ;}uaMx}Y)tND*+epWH$Oz;!6IH@lJi9I`np zxIHzP;IAt@-qSf_=2$*SNynG97U_i4E0=ME1~CL{I-Up4pxgxB4EZId$0$3 zwU)34KR?VFpg#Z30Ya>ZW zgqYtEhHra5Tk}J#AV52BlZe-7Ywl9Yn&F{$M4ggH98P6v$H$hSN$gnP z@B$=>h8l89^iTfg?^9l)6L4YOLa+IFRg9IFx-!Jqx}@_rg4JEbKFnuijL}VhxW-|C zYsin^7kj+*4RUisoUKu#6)*#`;*GnMbq^k&kx_`5P?P8s(O|C&#XD3OX!&Rzn?PpoN*I5|n1_Wy)yw5;Q1LWL zJEA@t3^i2Zu7D?100DfVEma}0G=pWaUrZ9*!lk#@%LWp)z%aGG(pC6VHSFhZ1>)p) zbg6^!kb@Rltw)qB*Q3Jtt77^1%3YG|1u|iCZZ550y^mOhDw6AS}3M zCezoWIL(?Ly2ba~tq+|-u%ov&_;n*tmGKQCnEdQE&rt}ono&ad@+QjyY)ySO<}x#B zHy6L70DZ{EP{y)NSZ{?{PL|T5RAB|e5aZoE<-LG(>tG9PB_b?Q7fFD~9RUY82_Sr;tz6KqxvV`dL7Ox4ZS5OP9NAuc^BY7VV>B^2d4YnhD3 zg9-h&F!)m?r3Ed{Y1DcllFtEG*%%pX+rc1>y>F-0E1(%bA0&oM!xKLgqSJ^Bi5_>d z+Iw6NH7Z&cgdor2Tu*-_-FZ7^Vt(REB!7{ZnnSzCYOj)a_6KU;DFBpVv}9Fqfd{64 zT}LBtfud=t&dNgu!r4pQ$xBm=*rwCY{LT;(tD|T8isIvWa1I0lt+oXQyXKUpb7`a4 zesgKr=^?$pw;qR6r@ySMs<+iaYS}<3u62D8|Hb^N?%wSDM$@iQx}uZ{ zw`42;2-6L*#LI?4U%%QMbT&jQ|m9t>Y=4P5 zoD8UV?}!@hES2Zr8eJ?i9JDWO+^a22pWefuy~ke%6FPe?!wIju=v&zM@Y@h53GX8; zHRb$xIE_EW#|idm4bt>L6Ef17vGwo2-+8xuBQ>!mY5HtaQb)}$FWlo{bR4?d50ghg zk*a6bRiwhR2IKzWc`Lu?r`!g1lZpGX{b-zkVz>4^$+D6&ThnE_&$l5j`o%n9P_y4a zXHayms7nlHfo8TUFpAdk4M_yPvTw;U0)iVzrb^%O;XY_N_~-WvZ(k+IAgY8-X9OaF z9xDkS!J@}9SM{mW5D0Uq^`>+yCGg{YBO!`u1$PJSmru!25|*6Xox(VG+JW9O6a2yz zAph`5cNn~-NMY6zjgCd>tVNsF6y)c7+Hn!EVL3u7J*a=FACkHS1Do>Zlkfb4^tcu< z7CbiZ3+_9XI{M`K5xkD--G5yR%8hRBt(Y^l-h^&Dj#OCW?{48kYbKQ0p5C3D)Zm*} zxaHVwI-~w6bRd5%R+oubZ5afu{ymdE=K^Y6V z3x{;CUq+>YTH3m0z(-sHxxp(VX|xLI4xV|y`jRvmgS<01_u&Z=NJC3#5-&rY^scfr z2BX@3e58)0pKI|R@0Ix6u{{(Bc>m$ct6JJ|!fOGLuG#&3k;CzF{0=+`oX<>-HlHw@ z6h-LE>WZ-MMRPLn0lk5^K-*e$J1G6-ngKE@KQ|yn^L+9`hUA^XY2(%1|K0fq-d<+D5L1D2BhLMsAiLT?)rc3C8HWS< zQvW0#&JW!0x4$gzl{C^yXxvohW`ZV%dJy?(*b?O!PY410O4IT@k}x^;vS)R~kd zTht)>7SK)oiV-+%-TG@r$T#drcYuMxP7^Or8iQ|m!?k->%eVj|8zP^B#Ae~%z7jV0 zbVaWmUI~uOH+#q7Z+IqmOim5?a4X7f20|dk^U&EInL{~e(1pWU!NP&NuaGB!DaL%3 zHncbEO^D3*_tHNzkQDA}qHFQE67K}A3su-56|=xK`$HROUQIf1HO6l*Bo-kiPlbn$ zyatCcUsRqe(+68c=g+~zK<~gp97o>4$NhHg5l>0R?7y%4`lVC0(hbsvy#J9RC7I44 zvb&O(drNSxzGgB}uCR~a6vw-bCR`CsNPNm>&<>kT-tYWnwB9cx#~~7Oj%B#rzy_iJ za|I?sF~{{&bDqv*Cp3h@4f9J-Rx|PgD*6gm&H0v*#nGWFEdLXNS+fk5PAlA}i^53= zG)rl!Ac?-0QqjkdUy@BPQlixFR6#==0Hx#cRo_B)7JTSd^U$oxpuLI>!Ua%N*G<|U z(|{c-;UO#z4(haoFEt`yakBvIu>_cS$=dXard2f<>m0jhGQ9Qz2cHvg^4B%XazPKv zRA+w8r0EevY^#L8wlwFALcflvNkij?s`w#3Fsz5>R0oHiPE~FYd{|+|7J9fx`G#fd zno0-I2bbQnl>o?1&76qsmnizLNo1Mq5$e&(XVTeTeG${`fKYuX&rC(+x+YQ1yS%q2 zq+{$Jta3==;XI8PYd6cz7%Na7GN|=>SVxj2VdDbdpT(bR1(Mmo10g9Bc$7tv4!k{} zxuG7F6_j?4-4NM)@SRxGk(ogN^K$ix)mdbJqxv-YHB6KA38bu&N{fpsx(~FT+c()0 zf&}CYJlR+uenc;_455(MULi%At+|+YiH6MMb4pKG&q{7jB|6=JzxF$ z9e^ZRNuil`%L45oX{fjyBioYCr(a%wZ;9@aUFd3q-W=n$R3)UuST*g~)>g z-5kX^4=L*0&flo}bXki)PU&sQ%Q`tc4%9S*R?LzJKYmiwH^LTjg zB&dZSEq_{t_Ks)845C5NFrz9ZXb9SM4l1OtU5z!$X<`vtu9J^3Ev12%or-~z>BdW> zwwh+4jE}GN?U6C>>4yt(QULE0GL0mMiKtEMWFlBqD$6`tJ%A$VPVkVi;+zYqV$^)f z7TT5iQ%<3ymU(pJC2Mm4@(t>D!r0t8QvdJ7c!DD`b9d%A2`fXU3he{PEPG zy=i|!!YU*0-jW7FTh+dW4Y{A;A)xLm4&Olzk{)!MZ%2`uHAPcP;9D%%Kj+0{xGjmP z%Ehj0;E<@__kLIU6l7LpA|b!_PuAN;F(~ESYBPidc~%5 zTcCP2`@Uuz4QP@YnFv zt2Y+X+SI;{E`gpPc*ctG_$4UhWi_=EV5?rr1lA5myRvAaPuH1{AR+31eC4JoGNFyk&bN ztPwa&3%ScTY}9eHxQ3V>Lsqz8Lb=aY@V@KIkg4>&$}D=wEe~Yf#dVb}s*Oleu$RX6 zmx@hTVYACbw2{bLJaYR^GcdwjU{aNr*r0tLru7r0WB=&L)<&-Gj6`(Dm^FWTcnE3Vf4!04<2Q^V-KUvT}IvDi8G>8tvb=8n=((Z=F5vOOd+w* z6t6gtfEKXHbnKWbZl@p(ot`z>`9}A3>;;wm&aVux^ulD0;Y2D2pC@(v#)H68O%+~N zqXvdRk^0zD@3RR`Leh@W%mGFQE7{ri9)5*}e#XtqglCA7DVNnjcj-g@_U-ZfWp+ux z`1|9LVhB=hm2H9g;8Mm^2z5sa6k_0_qu;D5Zs3Dz`Ia1UrD(H1mFyMzPBNg@Djxc+ z$ebiCF^4UK4ZfO#k^$1=8l-e!I`j0`2TAvQvyvnl(cv*{3~^4b?NFP4+Yfi;df3KS zwaNyPq8!kXpTB$e9p|1^KSE#0UhQs#xvl3RNhTaxa;|!ozk8{kjLjVQEMd^R2h{6_+`teSW~5e{A>#yzeyBVId1w zQHBDtYC>}Ts$UgSlo=xC?OEQy*jt0vE)irM1?AhL`B}xsc~#B8 zxcrq&C>(Ja{OgZ6Mms{al_<&a#MI;X{tZ1|b`W|)uEf^Nd z-AoC7pMt;lUO~jloup_z!sd=e4k|W)tpMfY&9O9Q^_{H6*&y`D^t(!M_QV>b^mU<~ zGU@28lhih~T|@w-(^Oq)mPUs(nRKl6Dk6X|gGulk6~@m^g~y8lzE9;=a$laJHVd1GLMTS-bB zlO<4vQV5}y+nH*ZJ`eG^xJo$D(e64-;i-HrpbzEdcuH5FoHvVTC2BDAu@IvY=PlO} zD(maC<609qVjnGwew2G2{iqSG3y)jGa@{wpuFT^ixAsnPUQa#j{!P_d*6h3hg>Q9a zo_9F9RbTlNgQ@ICg;Vvmuzu#yenM(HVB3HtMv5!i(Q1M73EE_y8`6T;;ev@i=-WdZ zK0csoU9mI5a`rio-q97y6~8DnPedu~v_W*kMsmJ2(+J_r9IYk7VL*c$A z0Xg>g9wAqzzc|}Njc_*`bx9IezKb2Fh-JyxkFLWT4>d=?XV%f*E1)5>z7iKE@$xcB zjuguEh^P>oIgduWN(Sw~7L&7cj&lZqa2YTX z`uvVXg{1EQQ%@LFB0eZlgi?WZ<+6213wrNLt4PPg`(XKfJ!iZ|%2j|Oyl%lxRB%*a zLuP{8o*zD%DlAVAHY=96H#xXv0^)eCTr*Sxhj<@+aRx)C21Yia&-<(6D+cr&KcP^9 z|CdO*Z}Ry{Y07F%8}|SEoeBsAStrK8`6IbNB!nUu?Jfw2F7D5Dz9PLU1Ds+Ffcf#| zK^GP53O>O)jndhq$lQn>*EVcQmMaB=L2Tz%mDgE_FWH}k--;?-AmUXZ;m*PM%sGq` z>b|j*mPb!n87q9Rw@bR~kkJR0;!MJwFjU*!-}5APBt0QoE#K&JVA=RpW&i?^XYNY( ztlY=j+>h@q%YpfZTX^?g?PuQyug^S!_9B{Xd{w zB?6+p;6h$3bH0+cO4v|Qm`lDBKCMBccCP{doHG_U^>;cP9$gHZN2(~IeByz^zPgi& zJ-d>=Qj|0;bo4CVikeWfJhzzt^?Ox{B}M>}1dMSHKahGn0Cf8tesb|M zqGqKHt0XoOMUFUjejX%Cb!B~RBviZKNbtEe&9KeF93@$}*(h3KV-=3$mZKYZ!g7L? zBvL;L?Z<(J5n5k`(`5d=wOlD}dz#t}I#_>I4H~zIUIQ7NNKq;`0Hc#vUHpgZisPra zdPX&IMe}-6$d|*jX$n_mL`d{V%4B>8bZV(H3}%w|#EFnN1V_Ur#=vmdxP6H|@^Ey7 zrX=R$$Udd&Xo#w1#hRwsnlkb?^i=OEm=Kap#VH;uS}K8Z0ZA)^99q8@5Y_#)J8*AI z7~twc=c455d=0wR#Wz-JxIbU5p-R1;^ccs;OpzN#+v@=`?K!CJj(uCCU-JzBpKlFB zulY>4;;-2L@-Qu(n8X!&MRdUYd^s(Ac1n9fr*g^v99VTB*-l8D>nRm+Rv-u z7L@xIo1ALvvnhzj0F(^88N`y3t~D{?T=thAf%K$xA@-c)%#y^Ew(UCF#@ngk4kkMz znxPPx);`RaSkPOKYoYYOM3UV!d3}J2SeF2IoDB%b7I+*5lm6H6;xRWydyLdy%x?iB zDc3fshC9jmnfzB3J_Ro`7|-NHKA~N;vvllIf&DBvo4-pVkSWqoX}qGQG>_$s*lg%$ zP+lMy9hkK zo(22tPF1eSHj}fFETe4>BKnAS-27v)J<#FeI7}Zv;8faYZ!&fHwjB7B>GORi+3`^c zA^cY>dO2fMxy24lK*x4T$U}eY9~fsIzBQ8yo#%l7ehNO1*nkffTQ4^Uz*=fnmkC3N z$AcM&0|?O;Ov%V=Xo@OLTZiL{*{SWS7!30kQfxIhR4|U1bCOULeQ{@V9EoEee*fI& zUz7R&QJ`S!#pu>a>yCA?N-iW|1$rFgwUG33otB}B7ua{h&u!ZRImoDIx#W|6ygS>+(C;|qh}!*C`0Fd>+WgM0x|QEBG53V zfP*sygX@}9Y9i};kGrN@J@G#ag)$nE9*HyI>W^=j_QCHSne)J19^^EP&kJbNu-5o_ zj(xV?PL}ER{H+y_$IF3FwGF@!Fzp(d`-pxzF5bHL9^$fTjEP(NtA4W&FzR453W8pg zreC74dS2MWH<@}f?>l?jOdsO$k+Lw2)#mLW5|)7RVplN#qu~*OIJp&SygBDO4F{dj z6F=C+{t@~&HdhOJBJ1uw1U{VW448lkgm`8>w6fjCLd179}X;G zBv4*)?W`Lvh|ick7l?Hj$xUl$`$NDx)d15< zr3UO+5!eIuYkD{60PmyH^jzt)=`?~GDy><0PT>L^Z$dRWzeoAJ+>>OC$E@(!+Ux(E zsDH949Py@5Y16|}1e}YmiLb!!c|-_|^nab*y1Yi);uTL?A+V^pMw41gYIx0M#>(f} zkqOTh5&Yz!MlxDn5KDC=2n-0qFB&SrI31E;?^Q+oC7LEDg7+|JVlt1eMRU6-Aq62h zzEm)fJ$1kU#aoZhw=In`Lx*ys?G zS5p?@6>=IE-tbn+j$XH4$jx2)BAmZzdGPQiWEp>f#d#RW5u(GaZ2sDt-B}($+ddsc zbw7g3=L>VsZbLo9@XMd8uY%sPPx{#?C7CG}?j^cR1(RpEblTR;vhr>3gnABaPn(jT zMvVRY7OhYJ7%{vS4l~(qQ%-{-(;#VL6`y6BR$|d2s&oa&0t3Y99Uhq&zbp2%mH&Yqx7hX$cn=P!|eCEh@`k`^T4>io@YtySpB8 zu+juO!YZr5JE9Ysc0HSCDt}EM-Xvp~cv33n{vOlSAZ)3!wqmPNI4CCc0nH$2>UPYOl)_jaBx*U!7`+=};-+@(vmqtA$mtl{sg*Pc--Zyu6%O=wFKR(7yHoCCDShzI3WG|${S^|^?1Jk};f=^ehz<3wMy%Bep&&I8}P`M4ckFS9uZ$5#*$J5+nCy>!3 zxaLg_X#Fd`=RQlQ;%)9sDj}c}IPr_@;eN4u5@`K84N`tZ3+cuMmx3T)av$#Rf#<-) zt^xu4#_F4ZK%)k~sTbvY;70t#Mxe;N56q+09U5q3i)<8_53B*Hzd1cs<5ZUcUZK5IKk+r)&6bfaYwY8;8 z5EYCkByXCe1R6^Hic-M+kdAk6-GnFPQNBNwRWo-}jC6R)9-@PwFB$|14UbO#J0XL5 zj|077g1iIDB_Sta-6=szU8>F@hE^e7b!7kc6nRuYFky(Y*#s-+0EDN#r&Y{gHy=&@ zjdYYxLn=zGFIy=ymY1!ZU&}{pvyY1AVh^@fy?z)7X&rP zIEVe?i!F&%8?Xs4-HL^BZ66ez-bolw+{>3{G?U&Pj()fAS%s`G6n!;rY89*ielhP3#>ub`lAUz7 zAa+{TpfOCfz4v&F{&J=)5rIm~>%86n-^Hz2RAe&B@_#9@c^}t;s)=#R_cGO3J1&jJ{wE()vn$h$kk#9>Z$(y-zEHYUw&z?WNmm?l+d!@tA<2t(A?9c==bKZ8ENymWzHxxw0ty`S9-82#ln!`_PFNYNt3AWKKW8fwl6xv{Q@q zqH6f+6XRC{gq2>x(|(adq0hD>xRL-2xafEZVcyR``;dFe12>FbT>D)^=r$H9RJOh+ zq+-{I{NI@S6MEca;!f#}xkX(FMaCV`%#-zw{e1|zMIAd!?;Tp*P6cDMk{w`;EFRSWqmh^6a+P!ud z=_a;P+ZkFfhD%u;3o5BpL?)e;ynbwDmtb1U`lE`qNckSdAa}n#!Trz!f_qIJTzPII z(aD*D1_1}>ts-u8l|yo{91%Gl`5aTrsOg@%XFDF4P$n`59OPY7n09Zx*ep_I9XXAX z0*Qj_CJi#+@e*w2cst1(5(igci>*?3m#&aZhXNN~+7jZnbVbgs@n)1Q91A(=IVx!m zziMhDT1WXZ%_vcduG@R@xrHG4YHC}dpFR`ivVtRR7aT%DEOD!*BasT>I*T_?IJ3H! zNG=Ls(%pw@ugA!JxklLE7rpFXo8!m?8C=|0^W9a-a)mMw|~9>^(gTOu2R%sU0~sF$i1(Cdc8;Z zoBBC>=fk%UV#!7rHcA5oyq3=m=%KvyxwA7dy*Kg%XcxG7$}EZI64o^l7S@!zUn zLGA#0C2TR@u&?^)@9QVMBjOd-KBA@tKF`RXh^m;CiOEA^=78#q%mK^Qw=LpYw8oUe zXBnI@uV-Q8Byq#^ZeAJM3AP{SjwBohqu|$lts+tUL|Qw5TQrC4U1`YvBw3*GZ9fWf z7C)LwQQ>q51D`$3TYt6e!C*QBTDQpY)=P4w5!996c@cbL#WgNq37HC-%rAK#)ygqv zRd%@Y;=XNv2*%WY$=8UUhue74rM(%i*x~Dm@I?Tao{?*#($K3^hCCztILDQf`GS?t z0TagEKqL);IrJ7@eo}mc7(!csjJd71moyaFunCXt7d%Fv@xJVAE{}Sg#WRHr;)Rr| zkqqh4on4yPC>ZcFP43lDW5zD(eoI$$q)OB?0Bo&&Pa4@8n-%C%^>mcYA)Ea437GN465j3`HG?gP+`B6M>rsDu1S&zX^~|i$nB6 ztwSMUGJ?M(b1;wFI$7LtBP~Co5Xq^0DrQ3dp?CwO6?gMUNs4Neng+kvdW&@jmCF?4 zVfWP817dqY#&68Mu0yeRu13}I^}c;1*$n=SImDarEa$1DZqa34u;`xQqJw-uxey+9 z!8LN5AuK`&#?J{-v3%Y=t+UO-xH4>NIV+anM-d+P@Vx?@hi0-)YLe8wUKV+mKQ#{f z-%=cHOk;Yg-99Yh?X)SJdt;+;?g}15Rr2@fN^acil!X(FrBMrFM}dL9^$n)uH}s6h z;MS6<^z>>Nq0P7rAV$Q-tEPuP}!e{0$y(%bUgJCrIGp9l}S^?sfz*bmiaFPuLAt!SpZwvTI5Io%;pT>Uzd!cU3aaS)#v?YikcdAD zZ(@YFWh=Uk&Z|MxE19bu0Z&ZARd}iA1=lK}?2j6w%+F0^rgxiEKl<}dcq*5LiMFgv zwvP;2w(`2lJ=g$G38J(h@$u>n06$()YzzIXJ2LZFXHA4N@=hVY&x~wXL3;f z;iLN_lKc|#V_~u4k6qJ9hy8x2io@?h##Cp?(cUuaTiJpgMId$7^ WJ|oIs5#L> z6^FYp+=iBk^m^Dzsi?(h(O6>f<);%~;FHpJ*XArGwTBv zX~I#J5nYqr9=VpJ`8vfJy(y`RB{0US1zCJfZcnXz@E%6PzMmS*gEgu>Ungn&K6St za0p0P{GCQ#Ul=Y^I7As$5aI;lT41LBmyCn=RHn6l;> z@PDvHjS}xt0r``t&GK1vtxWCODGLbTQZz)Aj~IXM6^J7Yv_7C?D;)niklyMjHZRg8 zTQbr2j)gEbv*VkSjicGoShKsQO^a%IvkD)KDMdb>66B2M2MJz635oBLJ5Mp?fZ_x? zvtYWesyrdrNsnr7+bAAsLN&_8q{)+XEF+0qmP6^?uoLPL`hdd8Od)uw*XUz*+X+FSr~ z+^VA*7n_Z5oVDn^elL@@5HAev;YB6p`FV>?c9|Z;b4$y$<+G!F1RVP|P9E-G~TD>&FYF_q#e?V7`wkGw1LNu5vj( z-@kobd6ZCpkFY*!sOIDw)$G_MCeoA5T{?3=2If}IZg&+wCk{|-QN6>*f~coY5)%xX z7dB0{bG;nwLMqAY);Pc#H;=&`Q8@XI{1r*Ak11L8aH9b<;=^7?5UNsn&9O91gbXEq`+6)JQEFqaW{dR%LU#OHxH&w*OQcIm}2HBI`Ym!D8S=E zQH&+tcbdo-ik`y^`~*eWZ0-?piNN6+`*u*y8ki?;e%Ou5D!a!}L2cG6mJN_p{zK@36nSeDHVJ;>xNLgK)W&2~-du7swNJ-mcB z`5+F8>w2OHS(kw@EBa72Aw0PDYUXQv+#9nBAzR&a<ZHcMcYW4lc_lcfjU z`qIf|rW9wb?KQjTG-HxxAbe3vVndasSqoSDM+UHVDW3$@wZn&J-5i(gLy;qH_tf_y zf|w{J)uj>Yq7*ZJv4{YYXBgw#*1$fogyK?>C(O(e@+UgG=n8}RoA0U+>0rEEwv^id zOjZ)ycN25hLxVgR%)CE5UVaP(i6B$$-A%HiEI?$YrznoT)?sO}s2>Ll(X_FUto4#& z&?9#6umA&ADAqNn(+)-~af%Q1Z`3KBBTU5FtQi`74C+hlav**9!)-2Y?3vbWZl;wN zI75gz&F`xR$&eE=5^JPjJQ6NRl92R6^4`ip_ptd1$Xwee*2$ zwe=N1ZJop%SBYcW<+&Zv+lJ053(=YUJgQ6boTX85XTbnbdK+TQppO+m;{RD+HZmedngNcGjnR)&zVQ3i z0m6m984_lD|?-r z_j87VoZ-tu#xl)kue459nP`)&OzXrFwtj%j0Jl^dKB2~Zw@Z{@^K7^Y5s^KlB#Y&2q)!FA)up&vWFNjF?`V5&`;MD!jLG2bK*(p< zbbSl-2uvF|oU*yRdT>`_Rh+`TLA`RL&Z8jUWZg_fj;GIYBuyzAd<=c2aIJ=WYKJ>1 zZj6!Tupj3yeHHf#co6TIVV`h*3ET9OH7l%elHNQ}z4y$HWjCpQ$s(8+NmIVs-d`WI zYTx0+@ofDSinY>tx8XKiO>b2k{50 z;hQi&tZCsD`2O!BZy=oG>EXHPf#J}5cR?HGX9Z=u$*H}aY^>Ne7#iAz58OQd zvb}!LtY*e(IiykF{d!W@{QfG{up3b_gP-5{mMnXwlr8PM}JVKlB! zF5jwAsubr5tDMd0nD)2?wFi(hJgjTweif!<;H?#6wcU`W3f#BClnSfQp}XU(dZgRI z)nxGNk}S$l(g`b}RFG0iB0Kq9`@q!8f>c)@!EYzQtL<&QIqN`&Tu`giqTbQP$JB}T z^5y+InA8_4v$wI<<6u8z^L6KPJlagf0$+6D#dG!5GOF0ksc6Uk*{d2?5Dtb~Hgk1x z-D;veh31nUlRS}SC+8M~wg*kESy$=&ua~ls_R}!S#C8%~FKU(d-p+gjQkmk$lC813 z(eA}xHoGS-XK!mC(6ORsXTNLt4T)(2H>|QLr>O?IB@i-ptgw#HoTHcNQmA95wee7D zKA?9C6qucALyl&AH2zL7C0wVEFM=|?*CaNVQN4EW(x1}=I{->f`WSp_TOl`tP;!W}U!bywy4ooz2Vi7c9V05`p45;rB4x>JU=oHunL&yC?@jkLx(tWVHYOC`pV zyW`9`CH7E2E}^37lPhXvUYv>afMb7H^V9WaytXrvw7p{_{tM+HWWdy_ekQd-8s33M zXvr6(fh>B|m|+Om*-!O98;5wJ-kFI8p3+V_V$2+xRqYe8GY8k7)@l){tIvM@bmUP2 z;9gufsBgUeqbDRkRtmIW!qXKoiljB&LV-L@6&yYK03jHqF%apacvSF_&DML^3HbZRs{W!?z|wOrR)f zi=ky7NBZOKzytf3(0RQ^0o+R5twPQ!pV#iYQwqDD!xTeVa^lAU=~OK&59t>5qIW#w zC0rstVJPu#2l2%~-Tj;h5RAlLgwcBp6O-^m_fK*{JBABKOl(w!3$L4W@<)8(p)=&Y z#z3Ux0En^fA8ChPoLiY@+c|~Xmxgpb2#?PJ00`MPadym;hR8$4!BZqm<5EeQn&!(Y z99mMo>Ml#Ii-IcjammN{DRbfB_NAQQZUfDGox5@KU{fV2!Eu>(fh8afQG=*+pH?W_ zqgNs{IpGR-fEF_@e%;hJE}!G&T_EQOFz{z-3gO426(>*OFp_+LDu!8^>o>c*5llIC zIzQoj$~h=!d0H(Ap4)=J<*`ihp+a$Pv~#m$cSrp<+t(mSbj@a>sw4uQ_MynoHBcj@C#UhvEJhwro%q3;lkwTsl|yL6qHC&_gHWV~Gk zyk@(PKt%4O@XT*_BGpeo44SldLk2fuFInD@KJQ7vRTQ4}u{}Yq9;pjIzXZWMTItkt zQJx*OPp2Rm!4_E=>XSU)jnhY!{xnko%dh_)%qU zBAF*VZJck4N=NwwLe+!Ss66o;;YgGGIonNIxh<<&oCAdXO`7j>#WMqV0_UR6I_~Z1 zSfejXzuv}3=|=<9KJZ!1M?bJgo2)kcQgA?8eu*h=t~T|-iIh9yGhn(KZhvbmmSA4o z|H55llGV?j1T7$RJq_88=uBX{i`jfetmopX8>Gmc@<(HeBR5Rm<)8Ip$~=3sI+_u? zNk0VX#5pM>x46Hca>Kj$%}DSua|`U!U+5E20<3 zXJ}IiOeDUW0P_!qdXx#coQgYF~b@dz14DDbI%~e5QL) zlfV}~X!&u@L`I9=i6peG<6QFB=r8}o3EMa@073%?Ik%gN3#$mtr0QNIPV^-jfUC)b z7}&QX3ZaGR+aKKd1>Y59Fv>8T2e7g8PI|?GqxdMo1DDPwq(21X@`k!mHAuIHSalDE zAZnd-PL9}wSYEu-k?*d73`ikBV2BK3%N=GNi=tU;hX51t!CXvGyBRX%@g0h(ygt}3 zB$#cmIWf*!ZE8+AVsDAmT0S+yy!0dpyc;GT#4VG6-$IIbJZ|SyON^~r;AyR zr|A;rVK*Xxc{&cF8U`iWb}_RWBhcLHwQ$zYc&vV&vVk{4v6k4On#Lwk}-a1 z5zEW9flY5A?#bT6k534cx0S&`JjhvU`OraNDHYKyU zELPNtv!))gH9d!}ce>2Y6A{PtH3{ZnTp>ED49Qi6&)^b~!oz6I1#s9#;(e0fZMJ-i zPeTw8j?T8dg_QTP33pNrVAt;u7u=VYv>p+qgmEi_L^OxDxaSDV+xjV%61*Nne+10h zX8V2eHlu@M(`wRSesySB@%wisJ7)vULwKNhb zv{CI`UxMF`Lgv>#9ZVT{?{&JQB7qpwus%h`&g>J?)<}!)vun>#cGzC)*+WKHrzJ0Jh53G;6B_A38D zgwa1E6EjJ35QjpoNG)U6+UX=3*&(OQlD8A9nEI;PGV*NK#^Ycy-Z;(qo==XfPV^G_AX$W9n>!8G2oSs(3lVK^e4v{Ds5q%-0l@4v9j zdCcFSe_`?2VMiQC3+S^To}`4kWoHI`lUZ|4HuaYWzpgp^r6+wZ1*Uf;My!AnMPaG zYA)+Avv|@AtD;~GWH4`^rU8WNyxde_@=3LVW{u%=R0hcl76;eWN+l37LwvQA{1G>{ z-^zNj&8nTJ9WD6wNiex!251B0Qh+-K>AA(mn4+oI{yv={g=(5uk3{Qd6|?MY7sY7K s4`}Pm%RuUlhF)vD18vp`VRrm)PxH1?V5gyjo@AdUK@sVi{{Za&0mPX>$^ZZW literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/ctera/configwizard.webp b/static/images/auditor/10.8/addon/ctera/configwizard.webp new file mode 100644 index 0000000000000000000000000000000000000000..c699fced20cb46a760238fc27fd1294edc4d1e45 GIT binary patch literal 28420 zcmce-Ra|CIk}Zn6ySo?eTDZHryF=mb?(RV|D4lvZ_jl1^m(~A zUv}<%*cq7-YsHG(zf_Tykoa%_0nro}QPNQ2Cb|8qf6ED$2TE58Ne}+ro-{nXox^;1}rkC*iM!_xy9*nKR;yucLF++3);5 zme)kBg0q({mx3p+@?P!dI}gDAFC9NvU;z;Pox0QTp7=uW#3vA_^>qbAUr+d&*&ucc z=plX-H0=WciU8q(DIX_2$gc(Of?I+CK;S3#*T@$eFyf8rp@4*V6xagXdujw~0*5w3 z-frIOzx;Rm0fLPIXCJ`VWMK7s0?_jC{@vqaW;5XxNMYCt{OsTK2@Lr22m-uWAzpC2 z+KKjm{qFPj{DM5*FAT(eUAY!q2igh_1pEPNKHt1*-Wi~G-2jn`1t`;&`mY0`fgHf0FYFHBd;lO|8OZh34or9xY^Xo#Ukca=@B<11 z$3AX=Kwy9m@u%PKuOlGvS^hH|_~&buVISOKoGwTGJB@a`8K!(y0S5g>6I|JnVlK?qg7A5RxaDF8B_7k4jga&=FCd_h|W1+O|sJV)ujLrjgidJIP z2zAnlUY7QQ3CE8*m35zYeFsSIx5_^v)7>Oh_G&Lh7F&txoK?O`&HrWA{E$a!twm=T z>Z(*36~$*<*_mDCN3=EBVgu_EHoKYBrt)S2LA1#Z_ZFe!7zzDAP?jI*@-NBpV^-1l zgJC)D!fNaP(;RJ=^Pw!+h)j5!25}VvWVn=7kd-#e!sqQpuh+KJZ*gkk4mLJ7JqbS6 zYiY4&fmLP{>P&aiD!Hyqk%<4J-31um^w_3@tWABu20a1TpO-=(#7^0^Vy=!ZtBV#~ zXhgmDIQrmWMPtfnqI-Lb8#`E2gBg)}?g>S(t40t1({}Iw$Ewr|)Lv@vm0MN+_uIc- zqr`U5(!8VhZto+H&-st%#iN@_z>aE0UpbSXg27wvzZmX`E&B&Y{7d)$8w>t@{QO^k z06pyhz9dZ)J{&4Jbxp6oENl2D)yi%K?Z1nmzfA9|7O{9Q{5}YGbG2Xw>?&`@|EHn+ z_om=QuSFWSXLWMXW?j*6(9bUW;mij9JI}b4ZZ9Tz|F|d?obtur`_`bLDFT%LJFNWu z1SC~m~8bNWYQT}}RU7FYXrkfa# zVU3df3slOp2~E85L}SA`{9E?5Kr zSxwcia0pwqr{lk|EO_(X&qajH{u2!Uwf_eUrbd|RlX|k63U}F+uLyZ{Ka(%3EcpOk z*fFc#V;;m#{rg5#yR(>HyWRt1e>QRgX#Y9kgwP3ftU|`=ZueI+RrxB5b|G~Vyc#cu zoQC&7Mi6AA<<_gMM)>O?;8d8vQFM0eH<;Rr4zGg5z4B-R9C2U&c(HB=E>mWEQtMmE((~!urybA!A1?pT z_`IF{Bm(tuV-m!@{*s?j|5S%=Y zvLk|dn(73Mu_M5B1vtC|KfYhPuLdm*(mi5UY2QMe zuFoo_hH}VjvBhh8|KWA8-W#MtU326P0VdZyRhCWs~_nXLI`u zzor7A9qsP54;3tUU6CGY1|jbED5SN0*A!D-goWV7GTHxE zypJ~MDWdZL^i1l~H?SCXv6dDG8raiKY;7f62a>ml9bOXMN9+Eu-_ejN3rC-P7I9wZ zegw+OH@N{aA|x#CrvI6dDt6Zu=nxN(YIC1!E85$$M5a@0ij+=J@TnGc!x2-7`att& zOhVyXhK9$G_gtAh$}ud)QzG28n7#j&gI90MuGJ>uuC96zJ5uT}VNakQMR3uw%ZHco zW!V|_Y)>wBHB29sPmO;kB0cP9O<4orXQ;bT@c(AORDW*Ug@5jsS=|&y9F5ZNmM3As zUW5+QT@U*hksW3}o8|%&4||uj`V#!C-`m<2(3YPd<%jS?rg#eLH7Bdm;LCvcSmTjS zZLdge4O(jhVq|3juXLoqD*WWT=(~r1p%wl!zWy&L`yZqFKg7oWmmjddQ2nI~D$}^0 z^Im~K9{qDl-OnI(ul9)$J!;kAiZG)vFav9KrGj~*gKeA>tgb%+i3W;h+Ac}%Q$434 z+_m{B?eV??mey9$eeit-n(&7j51;s$Y4Z8_OKH}|$R{%Ld;KDcw%yzdsS+aoHaj<= z?hTa@iLXEp^}NvW&W|&HLWy>EZWcS5Fep~x3VAn}TLF%gFn<;tPLNz;hFa4EoFSQE z+Sd|&CHFR4OagkpkZNbhw1L*9EMsdJa4yENgWX3@SU-+`qSZ=}a$QW$1f!`g6F*Gr zCzquHs#bj3fuDrc=G^lT(kA{wkP#ILiiamKJCA2qm5%VE<`E0Zo)7jd@Hvyb@+X}=j5BN?xJ8E5=U*%Po_TYRM0$8- z2*U`G-*&8?+qeZ!tfW?h#kks|Ek7)m^Cy%YNt@In;fPr7k8SkdRa*`~Sz$2A@*KuS z&hKE^`abus_9Mfqc2-rwGHYZXS(sd6g&kN@IPWsZQ`W_}SiDmIQHK6UWQdG=Gp6|D zGJHtB7`B%GAK7!p_xCLH|9@2d7dcyiE`5i$?yP^A+e{^kma47qfaC5wP_V?z-`3yn zhBMAI;l}4^L^d;USd5`BX|4$Bwp7#^nyTEebFE%cE`qJ=FMx$LY)nxCn|hE>bgYL1 z6{}QDDNxt2@tYP`yGT87b;JjWde-Xs4zj2ZfkzpN;mneeVfb=T;r!dIIF<{EMaK9l z0JO}6Q!?+lz3+pLS$Kj9y;N56`6vIA->dB5_u&-;1uR8Pr(c6iShLH43FX6ADQTXB zZMJqWqJ0+OE$E-SkC#H~qj=WXPIrcLKYu%!kS8PnL^$TfS-LtVT8V#Sa$D%p7f+V# z_;PHqF0KE!azTa(G8b|PH}hc4@6U&1GsEu!h0tHk&)HxZhtys6!RhsB%yl%nvUMTx zzxF0gW=rItZ=NVwXtDLU2{^9eQ1}sdST%fXzs>9+^mjxr4r5JzJi1+p+y6tdzSRI;sUJMLghDSxea*d=oL^>aP*}LnLtQxoMtk zFlZCoUkaA*m5ca@Kd2dtF>Qaz%Yn0pol6=;NL~{}fYN0@n80%~43)X_v_NefMP#d3 zy-DMji7}4VDJh>WPNERJP}zZV@BqIX?TD!^XeR%%8HJR4SLjxa%}Km`__D`nNf+NB zCF6Do<+Lwd$@ku(g1DP_Y4t{LbfOOL>2{Ok&jaq|TLTFD;QqTGYU*76>niLpn10Vh zQ7B}Ku{^i9nbbQpI(B2$3U3Wo4=N(25TG+Nt&{x34?RAiPjt}EITLv8g@%4uvIf?U z$gDY_^@jh5voOT#R37RCSCWmbf#MMq$X=&iWfLvr@;qy0l2Ck~4h*egkoK-{BDw~R z50+cInnQf!f0G%iF@63y^#4tv_s>=Cf0nTSKC5UH_>UW#%-&5Q{YUo8+xT1exL$$w ze=cAPFz_Y7<~jz~zpCt+9FN*RWH8(=Xz-@H6{De>+Yb+R@whqp6Fv0xZWtm}?Vqes z{+ST`e~aR_vsX9epTwF&;BD1B*N|8=fehCr7wwL!7rmafjd%@Z|0YLHCbF};If(Jl zdGZEP7oqw=oIjiP2 z%7R~Y*gWf|q7lUlBMQP|J`;F16rbCV1yfi<)_6^AIxw4m^I0mMH^fz>DTV_VNnY>| z52P=87U*%tpuC~ztXoEoUR**nGS}zKy|uNAV$aeP46bu=ZtR^qQ! z3)GL`-rh_bhg)5B6gI}{@$7I30gh#9u7jowb0wWD++x40 zMS$O4ALT9Z)QBQv;+wXNY<&Tu6o<$$d4ErAYB%4SV>D-~u&nG0efm>ZBK)CASNU}P zo?nj+>Ke^Glx6}a7<_|7qBBw+836b(g6HJfz|P!%2S7K;o}Ub6!EHx?k*g}(^iCt9 zVcOk=Ip3-@F3^P7{J__b$b4=^UMOc2N~1_=1YYWa23VD5ixz#$@COpKFlxea`gI_&6sN*e z{)#B7PfFdRmVg2w9t={43i96I7Uq^t@wP$1W9oF~z;E0C*O2Zwkh4$c5BbWN9u8CQ z@JokBWDABe*Y3eb-l@nfn8Mk$EWX?yKP=Pato<6aPBw;&xyQ4JGl^Y%ufa?3#I zh*yOsQL0`yRI6p{^IkZj0_Jad2034pU=Hu4TlZYakk>KgU%k<@vAi9B))`(0u&Mt!; z?(D^lrJ@`I!pA&5E}}>u-5Jp7MoU{S@JMw7jumFjEbN7uFVYafKWJ|{l$sw}nNLVR zpH(Cv z@lA#P7#9$*@(BYN5r^U+J@=|7ziQouDsAN%MhxivwT$}0r>dUEwm)woNZxzeQQ>u= zJq;OI7fNg7*wj?v0(lMUj4Xrkd+en~#0xVaWKAmcQu*ad)}GVA_BGJ6CuT`0?9_HN z%yHNSoyPSRL8J=4Bw1gI&wQs+5eO{!NC>Eq30^VH#`XZnUbK#WN2(4klee5GhyC5T z9HsDE`ehYPmi;5z)htuQ+V)n-1TU>}*-(Dq76xe2hOtzmk5)ucMfwCZB=J_kAz&vr zh=CLK@d9_i(=B(3oFK!D37x`8mFKh!O(H*E5Yk(Zmq8v|1K~*14;qKiD=ckdj^I z(%TNCE^?dtFIW^CiBmM|%xvFLKy~oOhw~Y#5Ik2dJ{)`VM362P&M{9Nd((cXsZy-T;0|3E$?sekQ^G~YhU`fTAU9`Kd^gMm zeVPqh8Y6y8im;1%d~}a>)Ti(N?K_u>n>ibyW&hG2k272wsgSpp^8s`6&d)?42jg6^ zY$9UI01qe1#zWlt43{r)b~Vv6nU9`cHa~;I^Oyr$-*g`r*m-oe2Hq>eei)BzheGy; zm}JF3ZH2>kh`iY_Kw&=JoBoYN^w)6I`~UFDT>_<)hNpIZZQ2ArKH~ zGaKe3r2fzaWt{_If+cr8>MAarJpQ@$T~w256KEv@?k0Kkuv79giSV3s$KZR2P*K}3 z7ILHJ(A-j^B`WYhysznOXb2iB#r2(q>0DOxFEeJ@Tw1>YCj|#Ei#t^q!;*Km3<5(! ztJaM*nD0T#c^Dm5+!yDs9IxCp`2c+t>K91vz9P~|JuI*o&NtDa+oy&gqIb6?wx{^$r zIY-`0V6sCKN1xDCoTBCue-WWTH8EX)F3*KOMwh|Y-@F?=DDSXW*hBe|7K&~T63-zF z3)Myuz#8D6>p!=&0Z@oeVCU0MIgv4?Px#pC*en+Mgf|c2%dKIgkB6yt{-pZis`iHO zuGmvDCZ|ZBU=-^6{pLWj3Kn94(Y+$O5CRGx9}j*tgjh*P^p2PIWtOT>-8=~B@-cQl zeMh5SzH+-pgI5Ti?1H$Zrex(_Wt6i7d@Z5(z|k9X37AIQ<_B|(#v9;`;6DAn{iF?+ zc06O%+I_q3G3)1!d!>tx!nje1u{V5xs-p9khyQmIY9P~U(Ixn+Z%*;Ip}#%AlRwN9+%&2Z+cE$jJmySoc7j{4 z0Us1+%yItGjYcaENM@{7-S3Q6T?$QnDGzA8@9!rD`ld>w%#L^zb6af6T(}Ypta#FNiGNnmd^BCzn1rfOcwWYk@dy*Z7 zMwlXF$!*CW0Ou=kd({vmi(~qn&iF*C6<`@>s?QNa^7SDfgUcPK8^$UsnT0v|`c)tV z0s=mZrGQ*xa#>;tF*m>}J8+Rj-d~sdD28WtAfrG|B}rO}kbY>zZCGzdi=Fl@$FqDi*h)h@&KhoNf;_1p#KM%y3>iBT|^U$Ee zQErBS$F@i$Gq!8A4lW+pKUUWfiT&5=142jRS|oBeXue0lCa@UZZS!yu+*a4>8}rP; z&e58e1nUlOA=*T(P>p7vHxySGl`24gb17q0;&4gg_N3WgwCz|&EUFxF)$44u7nV_X zxnKAZE2y9Zso0Ic#hj_L66M)h(uv{}aMyRzbdt*=M79tjgvFr3wCHlJ0MBi!O;h2D? zLt3IYAO))Z#`^}vt@Rf^OZd+XO zP!*QQE)Im}IJs6)*rK|j2ZQJy%v|XQ$l0^<9--A6(g-|}XH>hbQnY-RJ}7@TeQB!N z$l;CjgNTl{FoJ4AHmLBLOu=zk%Lu6>6QH(p4{w>|<&vnJ07Gbin{@ ztEz7!)Qc4R-vV>86anlZ);Fhi3<;vLrKXzM>?xVA46*pesA{=J%E_;}2-VG^rHyy* zgDjz;##!9#xU!pm^(*kx_F4YW5ZB3Thym`#qPZ9wp!BoCRTH>A(}5sx>`mqRVXMWP z4RN6Ad{S#w4!Tl)T4dmO@g$kbNP&>KY9k1w^;Jd?>fc>~g(=QN4M{PL#7iO4xG<$* zwz7!k;u=c;73cY_tjaZErSO!5xe3+PB|-=#`4u$1vnIqR$hC=TLD-3#UQNpC=d5pe5gIM)2>>z0qoFX4KN%{JaolV zP1G}EBp9NfS;2(2jYgv_=t70W*VwF9ri-{=4-L5?9ruUUUJ2ox_Bx1i(A19(-Jk7! z&6cMU-L9%Skr?3hCY)yX$VDBYZrSPTlq8(b)G%c0{9^l@(kS{;baq>16*h@B2Knj2 zbv02I{!K6MF+-|6mCWWGLA;y2?rHnGa#Pw|tF!G6*J%iCC&^tMjVX4)Ao>Lz5J9ej z(9gKkkFtT4e5G1_#~aO{D(NVy>-^4;^y&I~5ajoC{Oms_=*fX$b4x>V~%(!JHSypXr6_-XBg22`4Fm z9AB0;D3ufU4zpH+1Yq>nUQq+7t<=1$FJ6XyrXB8MON-Rj-sZyAGgb6P;xn*Hty+U% z+_-Xs1z;Aio^*ALk~_Go;h2dMTsV2G_f5Yi{<2H`Ud=Sl);ZVv!uKX5NT05>oU~yG%{; z13Xlv5$7mJTZSA-vz297^ou+6y%}X-*zl!;TUp;Wj3f)>>d*Y~YjVXv7J*=@yKR`r z%9HTaeAl30D!V-BlYrK7(9iAo5anqO5*lvvbb&O7SpEI$lq*uY@Er!#(S-VMRN=tP zr%2Skuat2RkVxh?3TFIh?j_Y$oLd5K`Ac%d5aNe(*o8&k>X8i>|4R6t2L(O|iXBdE7y+3wWOdbhS{ zDPw27gag2~+2n(9`iK}bKjTCT{gupuopc#|RIt;D6FLvM+g+9_r`}BcNPk zN+Pl=W%!mjdcs7Fi?Fx%eSBFpAdhO?Nl%`P21bn{hmghNM8VczJhjbX@|lt&_psYt zJJ+c5=|~7kKJ0Thb|C>Pa7hYY=yqQrj5EW2lIiHC#S)m{o9Xv~gs;J)3s+peh7btC z&`Sf`;l8QMf*V#F$^u1A_FD`X~A6mOF|TT_$_aeJWiMR zvvOUUR8>(F>D=CLoh(%7sQ}Ve;#eoq+NciwmfM(c16wt38;aGfoDq|rTM`~ruUy`< zLOjzZ7~(e+(WpO#(RSyQwZC3o^f|17uktu`q&pBNi-{ql@H{ zv{^oh$`~Al398}hm^C*3CR6F-Ql=*wZi43Sl8hK#Qx)t0qtoe{Vo>bm6CYmGB7QLf z%_83vj{Bab_lk*B*ypRsYzY+#4kOn!cp>*#N$J`X`l=0X0=|Oc%or3^?>zl zt|&S1GhhAJ^v4|35G`u+px8CQvF~P&>CsHM!~J;iVfyPkvamE_k-L-+&LkM6*KOQJ zLY^oD{Ip@{Wa3108S3FpCcpad+YBIDb@+OPp?(@kRFypf+*UqWuwjzRJ*NDZg^3kV zWGZWCBZ(of9jUm*O07(IvIY7W$xo|e#bNa~5{)|Y-kq51y2#bT4}*I1jMl-rnrej1 zMA3+1nAF!0V~8}vq>;X4Fu{C3Wfjy~5`==*tH~EoBtNq>4 z+8H#Y%6gH++w!SBIB|Z0c=>+l{1^nuFHIyncbi_|kOqOx<@9apGCwc0%ETHPj1FjW zdjXZv&_14hx)o@dKCop1YMIV=*h>ot+b@RP8J~B(-{`Gvn>*rd%Zxxk7GL0$?3@xa z(;4{p*OX4+V75W8rGI|7KhU->;-i?_S53wb5etMZ;Uk<;%ckdSVu4uzf7dV#BHA5t zb#9<-6!3jmuiQyr2%0{G7E`%Ky>xSm+$_OsKlI7Wq%6Z_zQFmqyOK}jPOjZkvhig72piqf`mRmVTKOps^Y)q*C zyE%mk0V{{W6PFWDnc7ZaNt^cKk+8R_Dn4t(n8{=^=Lu`8$(;31nAfgS%}`{dm72>- z8++eul;y2YQBe-RSI>8!2!K*1yMZ7e z$|22?b4_e?;w>W5MS%`}57qgp;=D{p4>j+QuJdq*hcQwsX0uX+L+r{9yH$-Hm)*}< z*Ui%pNIjw`R1{l)Sb-|LFBzratFh#1Xd696X=p^xIu}pOBZ&QKfc4O7+bXzXZ)#{q z5~Q|p3ZgQMlq*>25@E-5P_}-Wwhd#!d6S1I|b4KNgY$#+wt4+4W;Tt0u zBb%|U*d4FPT!y_62nc56k6M3Cp<3U^=7mfWl#bHx3b=2GOBF+$m*Pgh0lE0^W0Ena z#_-ZWrbqP`KGvV5nsDQnq{bMYDIsH|TwnVQoktq>n~0;xf7lD7s_urI;u+z>2A1jz zzC#sm7~u?^R&=Bl=q98Rhz$MIYJyY0Nygxu(OzS;y`Gk?LY? z)X^uvf!A=&gNqhs8o7JK_9XxVl@vU2NP?!2zM8p31gc9JXd3%N4TtXuP51 zYI?>ma|c`(!ATicHYPzRn?@aWS_do79bZDwg-y*>H6#Q?%wO*Z96ue-BQe)-Nz%%R zVrIQ@F_GkcK3Z*QJ&ZGSByX!rb$uM8EYv4qH9Ub|HF5kLAW0aTQl2pFez0nJCdus| zWH<6N!iz8e3~eLQoaTKD-4)%8tj0pl(lfb_E3YvEANbPF%GM8bq(wg>cCq1qq`5ZQ zzsgjS7M#KMjv3lb&sD6oek3_w$r5Y_%-P!&)Bj=l<~+H{7M1Qb-*zE-9%sPvxH^Sv zP<64iw0&CMb6uM?%9|L%*&%f?-wti0o%+TeubCGwS0b`VnpH>hS_PPj137bPjMLJ_ z6Y;&2%$Sb6zk_*}a+&?Uhc~qA0YkUVSi&t)3Nx&s56ZnvWqJn$UzPU=6XVRr+==&> z3$DO5X*eW zVbBqo@rrk1w|bA$YdNHEVyf0uZV+1u8Fg8PoY2H&@Ea?W9r4un7KN<;0s;d>oH(yHv6pg;SqP;Jm99p zAOY}T|Ja@_L!6&?#dE&^u?9s zt!N*{gj@2h^|KyHV5SCCN9F7A7y1GbprrkTs<~#vkWf z7Oa&b*VuU2to7Qc><6yoy{+=dH>zpl-qgH_@u|%jY_-Y!Tea#;5~1b&Xt;ciPhb%)0pah+e)by%t$OcXf&p0Df1SL#eVu()IS*Ogb$}6QUD!lChcK`WN)X-0 z1Jw98(vU&xeX3-nnev=e=2oDP0&!)champv2ae;G;Rm(`OB z!LL)TPJ;{?Y-v8I6x9C0=#aq0n}m%aq&h|{kwv?NQBfw}iYQ`!$o_Vtsj)3d{Kw^T zK8#c&?GoTM6DEG=G~@NAv(}C^ba{g_giO{q=dPuZnJiRts|)iLen+>Z!s;0_T=dNo zl%0T1o10DF#5p7jT{;Rusy!~NfLFN^klUc48_}mrx%D{7jutljYo~q62rYI$)JBm& zCp)=DcL(pgs1<)C=v;38F#>it;7yjxiMs6?(zJoZFLOmXMFJ`8+bW$p{5%bcA9-um z;I{?a;fo!u!^P>%L|fPE4qqDzeo89tq=P zb&k=cP)GbtG87rxDDpSI4N^xYTsD)P)!jDrkQ8*b&BG!lYUv}q%X)0jW8WEWX!@9 z0ZaR)?)2hGUp6Hw<*Rg)E-Hvu^0T`SaT-1h0lSQBI z;s>)tJym2eV#|Z{XK@q(bEW0|M?wlRwzBw`I3pG&TK0Iszu1jm$q!P-r&ujVQJ-?7 zV~5uoe`4Tl;w!P(Q8zZ9bf!Lfr9J}uhzZY9CQ~7l75dnoeJ*8TCqzLkmVQ4sg)&&9 zwWWmJE}5D6yYE-CPx2D8$=dK(Xs4TJS*ViHUFL2=`ot6(5&J#U68m;5Wk+LN5I;!| zrc`VrZoj(u4h03W*>t2~UCd+;eNtAQttjX7Yjam*=2thp%GVcp4Jb-chep%MkW36Q z7wT)?xYxa*-UZ1#6Zm_cKtj*coF}-yb-32G?jb?8^3VlTOL3>DZ5NvYv%d9yNw0Q{ zS@0|D4KU(R$($d1oBvg^{I|wH*~2v6djzPh!)86C@2UlwBNm(nak~?igp<-WsaA(E zDprC{*79x~&VCXaQTsCzi~gKT2-l=#?r#p@Xv_W zLkv)>kpI27ef{w>M-LG+t@_8Mfc^m4P(Uq(w#ACGhn!l@?R}c&q-)LG<3V;I8z%%k z`L|&@eeFcrP-27!Vz^K1pLe|Zw4t%fXtj)bH(q#Vz>*k~QQ&B>gbbHy&+XlYLUU3Yj^RH$Fe|8v9JXgK2<+L7YEN|cBXAgj#oDwlr-L-zcJmE&b&&%rKDo9G9 zrGl8dGEKuKb|vYD?u$k#j8_F`)&JRtElfMJ2`+P5`+| z5i|1{JB22=0Cd~!cb24d5L>u}#T`coGAA%C^a{CX!VSd-)JCUx(n4W6z#3KafaJy;tU18{SLwVJcRelsKP+ z@H}3LT3&m-5h=l`QPo?uWpzJ$-z}OrVb%M7P0zfBJ{Pg|GHICt@?cjdIIU(=>FVkl zKKUdT)|%_Y)&bfuEH)xiIE2-ya4pIjpTxl&861=xkR5|I+T{!^{(n-0h}Z>1V)NYL}ai%U8zlPhubJO}R#4l0zck<)$-0W-*?{q+pZ1v^ZGvH|T3xU@Spjw{D@z~LjxnYp~uYA1I? z^&V-X=D|KrtBBODlcSNjh3yNd17!dV{9Xlzs`a{o%`~ila_s({MJ(XEh($?nuT`;R z?+V(`TierD*N7O9vDA_TaO$6VSJ&bugQBPP%5&nAB|F>=j?ZL>DGh-g>#~7o#4U&4 z+7#)>J{Tiftnnik57Y))BUA|?m|w{ZRGgqP!hHAs_N5o5L%woHBE0m=woeLN8SioO z#7wC;Rf%#C`8n-<$~s?sgoS8|1S?OkW<7Vjz{o%IaGh_iCK)fopvwZew7tW?A_B`a zAg;s?_28#;h{WQMeti_Hj{&_zJ2soo#&>q5^2$wE+tDr=T)wY8?W7uROVaC5?|T09 zzD&$wvI%aV3P??aE_e!AdLjb+=1QB_NFn`bh%Zyd@+EdKku>tgpUiSz{4ECpQJ{Gp zN~EAT8zRCGcq>Ll_}XF%yY>qLk;i#R0;*yO#aS@2tohVaXOp;EVsb4=q}6Ph`6?!Z zi3YpPM^tlS%hyMu{m%?`Y9c3ZCXY6^F~7f0`Kp*1VSNQmS4_|sxz+pIzV35Yw6own z0}GJMgV0vgIIYmm2C_KNe`LlOd(&5sOt{M26o0&m!xcy!O>M-VizjkBe8%8-?A4A~ z(@XVr&{2HL$ckF5Y1R^qS5%PL2qZ6duk*4jnzaNLqgls3NJm9LwA-BTe7$>BFl2J* z%ii**y)xsqJKk&7SqpMXo1J9_!*@-$R}n!188uqgqJ+g^TlGh~H;LRzYfD9cMb4*D z2yzSWVAz3^{<6L97Kkf@KN(h*eF1aefO5J*kB7}&EDp?lX3JQVn>iSb$YREzf!>h| zNq&+)U%a}YV*N(oZB;7?La|Sd(J4xBOz>;r1)P)(DTk1nnE57z9rE zv55iMwPf~+rkja%&QJo(aw?Z~QW(#M;$TiILXC!Il)Ociy`EU|$s_YP#YY*fOQ8S5 z0O5TH*XO5S=B5er`5Tk-*Ddz-e^9Qyo!%%#k2*>Ofyx8r z`dxH2A)?s$c;;Ga-wrB%YixIObCM|yPkgq1SRPb67~y+X0$+L}v8+gs&^F4ES!o@A zlT6g34fg!69FnCh>>6XX#+lmnjE_@MLKCE=++7e0A69%PMA<-&2JUt!g`tr#ft$Oz zx%q?P^!ph1C$kPC86?!+z@8s#`C}wK*=2d!dQ1M%Jqt|Yq(qb0w_!Ymw$aFt=~P(p z3f-RsYkOxN72mwkN32vzF1Fq3Wrj2O7a&I^i>y_-1KoU7l{JSdUJv060L+PR`fGb= zLH*E?P;|Sz)XI{C1e=wf3L-zAJ#(*^YDdg@PHqgI2DxA(JOl4zwGA_?02s~5LZnP=H!^Y?lf3Z!aTDrS4@>D6leNpi&nDabY_b zP!tT^{*DxhrrY1VKZ3q5)q<#@V_c@r_I-slr8ySCcEsm&b;qOjapm~d&0u0sNl?zxKDlqpO>6t}zj$v+P9-0>N1M@i;mN%+>X z6(VB4{c>+_t}o)ze{feHC7eqd0(b4NvK|bhl(!>KEjE#@G=bQL^t69a#P7a?p~y-g z=19{@Om%g-=YEJ7-d?V~ZNQYwNw!H#0c=qqoL*x8o}C*y8TQ#@K+YP2U%%!bHRe_x*M6}sM5;bqK%-we)6 zSDxw0q}$m1-YWt^by??}4Zt(;9*;hI_~pBX1+u;v++Kl28s4^s87MtF;o79t*+%+o z3HkH<_wR(!(y>12`HHNSF!>{ltOGZ&;JIwJbBG(V?}loqh)z>)gGUoYYYw_r-(dUF zH_MExW);uPk&tYm5668pK(_Tv1B7_v-fRTnWHv>4K?PSl={=16C1$)_e$>Y`ynp9H z?N;O{9x9yOxI63HM+F#aS(S;1^C>!-b-M+W?9^=PpW zLJ?x@syh`B12l#GPDf(j1+uL!gB_QCph-{U19(SBpby0w@cj%3~(?m=g`BR^M=Fg|I)x&}D26-B8SNrOGHiiVwh zWct;4YOa)^h5H;V+*<#M9=LB1;xFDPPXHB%_I#Z>5M<)#Yzvxa*7o$6EDLQuk4j;k zLV)qTbTiu>h@0)a3i#`Ob``Nl5X8>R>(~|=X@g7g!ky<&v~ZfoWjQGsCoC2UNd`Qg zi|LLSvn0$=S3@mv_-O(Rm>;fPl)q3P1OYZAn120nv&V#go}!+aC42;kTSA`GUC4X= z+3OhvlTJckj$6sRiLQRFG9xp)lL(GiY7n-6WZHVP|0;p13y;XX2m^cbXgB@ z%@fir+0I}ea-ivn@KXorMgfd<5L zEGv&P#eP~aw>VT17;?&vaMAew9VsbxgyweDmLgU z6O<8zQVIIc-#Qkbt@+z!?o?$X@ zs4rDZ3HZ*nhi#w1Mo%=Vg_Itio5#x23j^ZAvgYzt83p;M(&rJd7@}CLi0Xi47BPyTbq`sL z?Xs+6*j6%TSPebC>0GYmIyAm_@wxX@K0@~%_l+6DC0BzLOSi*EYkig^J*c#l6<}J( zEVw4A@4nm#?Um){aTj)weGU0dMM+>S8(e;1K{nR@8`Co8RE+XroAIpz=lxKF&hR=RoT3lx6oZAgEuLJBrztS*gdepQM1hXweO=6aN6Ye6bZohg=m=o#dY+ta_f9 zqxsNuzaRVb#A|U}Mz4}74T}P2!IZe9lFY5281Z@LkmD%tp49fQJ1tC1-`t>44S{#XuR`{Q=R=s4b>5zr9=gh)7k=`)rTy$J^ ziwH6K6LplU4-U$&A28A>B{|f1Dc$1zA;CSy6aA;MQm5M>&C{I`T~tlnf48wDUay*wNuaQ`3$`rw~ZN8SYjU2)AR$${SO;_oWQnY zA8?V54FFRBT;nYbMcE6hpK9{xreFC?=OOb7)Ox&%cit7Ejr6kGyu$Lo!2aY2(s@Z> z(&BQq%f@*Ix&c*pzf%Qe@o=)eu6ST-PVufQvkO+N=6ZQ~LgB+Emu`1RkU91Xl@lb4 z^M73HX$SCHqrQ%bXz`n!@0SIqx@<>S?lHKDfj0?rrS?Fe(C8vpvCxu7QHZ8{o(;o) z$_dapusa)NBzkP}c4i2+=;v;&wE-Keb&e8jro)@HpK)w^LF`ZTS#-{~pI`C~je}9* z<0WyupD^fT)*Izv9*iqvt5x=)1od>8Oc-Oq5=2^Bn|}Uu5Xqh+h;(tFo3X^wBKxIc z4$0Lo0KZIsVw)K*FS%khSLF55v*dT;$?Q7BkaYXsPQd>53KgFh&NmB%ueoD*7@BCj z0~M6Cj2(Sx8jZJ#=KAvrFp|aUb)__rTgW4yeI+n)Tk@xciX85H-C2s~wcAV=I_;*> z3-;1?NgMW3jW$y_xMBuzJ5=FrnZz!mE7S->5Ma(;Nn84BpE|?3vOZNbMt6=kWyE!S&W4Emh*>a$2!Q|9 zuilWmFWwjm(|h^+9O-#8+;SUsrf}^ zW()d@Hz&;QA{BF#rvb^nFXoQH$+C`q{V=ukp^(07!wC+CF+c}FWA13HPXV0e`;<~% zlU>^X3b83p)?!JPu_;`I1Z#IO80F@|qz4f5w^u5J|Hyv`COIk6TtJ03NsB5VN{1VpxNSL}o(R7CKBwo#`!$N3_?_Qd%$|oJ|{<90I(ypP*zVN3B zQ#p4UUn33tq^L182tYYYq|=1YEcw^LdwCN>l_9#5tXU@{y0ZW$}-Z z>k33@Hgfnz5!$$wJmZmxfx>EBQD;z&7YT=@H%qAPb8Zjx`d{7#@- z(%>sl8K)-$Sy^YXVCJIV$A~tJi$GUb5D~_)U=!dOhSG=%1WyP>@ghlL9NE4=jIvB; zj;I(Ykn2)Wsg1x&nmfD+(Y{Lguc)AO3J9rj#XpYg*?)EDP;tW5$fXYtn@T=|<(M!A ztW#9%&?<)HzI;1s(Zdu{%@`&?R=YTQN`Q|d8K@pI_O1?-qswkrP>BDO?kkc1Q)Aif zx6J#|Gzg5$g?L#8F(YugX@*O%99ssfoU!*KJuuSa?MuuFf1wn~^mOO>@CU^WPLzp@ zL<$4->YUzGDnro3ti;j-LSeuKkt3BkQWD|v=zW|FHDsp-?#lhq*rX-Yjg~O+&F=ilv zXu^hzrgb7Rau<2@{@tiPRb9}c6Zaa+)KHKNmp%*WwJp38?0#P4Uz!>f4Xpbk?LAz_ zN851fhIOS?l>2Z=%iw^IPUZ7^8#}1+IG$CF`@I(x33Hpbeg7oPC41vSMZbuJ3KEXH7S>(tT zj0dC?e$A#ZaEG|1JltW9wLEu;^07win$G}#h$~)7i8M8;+f~dxuH1mij&SDA5x4fs zqY>ad(b>3ttCka~5}0z13l?P=O&t% zRt$!kT|5Y~0)!i*<9trRZ%g1mlPbT>%-o|4T}`=61o%4&n9%aS`PnkR0r6nQ&4N9+ zcIFI6CRGTw>TyNK`*#BUrx-t9WHfDIcap-A4?2w}6ueS;*Z0Br8&&vC`vUWoO9Z88 zxRTaeOYOKi4;k1CnoWD?h@u)-1e3Z+dDMSmP3xB#-AyFivC*m>jdq!63(6y@U%b)U zgQy0oW*3YUfM&B|?6M>PAho1um!b&yf$*2!D1&&F|4k#_kC;!nmb7Md&T58}ZXdUwk9$qeWQa@}bIYa4?M21$_k@9xu4x{fGC-MaPCnA6dO}U8^z5P5gTN3JL+`4evsOjux?gGjcM>dHS&j z%P>XKlKMnbm-a{kn~~F+D~h1soapZk?>s!la*&CtZPHE@~GLZAElb!TM$ST z0~LVu>Dt?^{wFY1X;kpe&@^8`?Nt)oN zQ$9J%6DA^30-=)G9HlpQ<~TJvG>1sPinEbulQZevMo+8b!ZUA8?Rxf~q40hiE>c_o zZV(RRaz{Q2wfZN8MW%OnA>fO8-F7Rbcd&m?#F711qyX;qGjoKfX5u@=P6j!X^rA@* z%+1UE)pnS?s$HQkqnASpbs^43lK%Km<^A|+>~WaGgUjiP_11td`5c#VuiyHsQBfb!4Mv^vhLvT!gV&5t~FYJKI-Vh~Z1!vpT zJ(sMT{dG)0=no@yErgzw!TU}R>{CgBfl&G%TOo}8h~?6L_7!X!Ux$q~5&?(cinNU{ zs`Iy*Sh+W0yG~-U+1@b-r~2mxe1M_+Ie+W?hXNau5QviRKF3)|e4a&A`028PkYDTf z*<-(xy7B?B;D%oNS<&6vrwH#(q>5a7z-`Fy8E}0yL6FJVaAXrTl!qG0F7@x5iR&*` zto6{=NSdzzE2jFG*0LI$$H?$tzi#i~rf_B(eY^D-|7=D21T!7jhE6kt@$2j)LRN7n z8G1!S-_fGCU{k>3fsq+nNa(H;$Jyxpcw;`58P7Z=TS@HS#LWQ7=Q<)DVsG(AXV~L3 z!2t#bs9M94tbTeL#G6}$y6XxCP&X3 z0QpKCr-5#DG~5vdFbl)HZ@MeSCAHwoQwhfvag@pq6x#<>fB7EO+nmdL^Aw0f}-zmt(U4D*S(uU!XUOnL3z5c zxPSCJAzj#wo?(anX+o75YQsujV1J{@yVz{LW!{1WV)vVg*a;Y?M4+7r}Xa_O*#WH!w@dKA#a3>7_GsG`0M=FcXwc`v!)KT8!PfJ7fp9EaXO``S$ znW_ViQ7N-t6?P#$n1^{eei_%)M87Xnq~bRw0Wehid_RTI9whM~Yn^ zC6A27DXO5Op9)NfVbxLcVWVP6c|PX+7>;`J$ZA)#=@|P1hyPj^5{2esv&R^+n)?r- zI2u|0P|hurj)RLkH-QmtHM1!{k^dg*&ZpF@gwd^Z?XMamX=lC`PNwHbg#J*T#VuU9 z)c*c7>Lxw4GjTkZ?I|!MCZZd3al@WI^^E@%v9Pe8b-&IBUv6gAweev4AqMXpmAu$2 zfyQB?c*~nNxyb~zu2iUGn=|tUqN*Z|Qz?` z=ME?onz;1{=SQ;Bv3P=mx;=%EhJ4=|e3Hy;Nc+E)Wfu@(gdsu47&MXGPk42fwnhHP zA1uO6>%CDFx?oYIT9o3E>j8xL<6;`<-I zA?R}cA$%(nFMCvo!dD&{?rbd}^LY=xgE#)9N6D5oNq$j>&M@evquTka=+)eExi6IR zt^*13)zJyrF`j9IV#^Sa-U&)&cN>5ZW0%R{k|- zyApgrxXA+Y+Wf}?T3HmF^od@Jkz0+&eXF1>jco?pmPm{$(1z^)n3z&O*K{Ro0Ws&x zPTW(?tYtj`-vnq?Ywssz-GF9uym z=4`2|`g1u?T$s5ElXm0MBypwd5m;JTW1YP29F{S^?Y=%(m15aOy6O;I?~|+l+CRnP zs7V$e3zINLA5CN_iStAh;WKB_ppu?V?-w~VPup@r&EYud< z;1u+b*GOC%J-P)v1Bq704Y{aYZu^eHw#|Q$^G%XNzs?(>$yJb;D@8e9aeINV@O6K7 z4BcoW|A&efk{zk&dISVyUa%^Jym0mGXLrkILcx4*6JJRm zb-Qr!nkOWY@uxWh`Ezwutgokmk@Q;l#fD9XnvL>$pPiYH#dW+`)6u(cp-b11a<%%U z3Zm8!p|_JHEDs}9!T@9xM!ie1cOH-cnpkFwQ2_nE1DIFcv;ZYUJbcJd1BWbXQz^%4 zUd;c~7;J1f-xYHb5h!@U9;r%Yi5gT#;lyr(>IrKI9J!}+Z;lpSF7m=F&@=YBQNsA#Ny0(PeRLEO5@1u<$UOdL0%}64R zcAsYT&9W(~=H$N>&_?_$&%Coz2cWUeDtP|1c!D1H)ojGyKv6|0f{h>I0rh_o`zgA9 zHueR^WGbAYN=I&XylC8P{8?NYPaic2WVx;vfWxe1_=eAiKrQ_TyAe$Ns(uft^7OGpDQlDXI!--p6~ zfc~d#$5Dp`WVb<+|<(A z!ianU_N$~0>9#s&t-McH8lbn@+F9%)v2Oi9FeGD)fRd_u|b?qGMGrAUeuwLsqtH^_y4&3{BOJt9WBBh9cr>s)3Q8{&#u*J9aYw z;Ftz)@#)bHv^cohSLN&P%y9Be3SoVQg2RwV)Pjz&0A4Iu{(ppCcrFPU;&=h;Q=GsF zWegoyrNk5EI+31m+z}ZriMjdIEB6c6H__=JEboGgRTRlM@s1)-AysA&*TuFH6jMsS zqA~SA%>kk?x{Q1k&2}rTT%eP>(nc7bHJ#e$Ta!iYy-p``xc+}yQ}k4#*#MnMQe)?# zZlh!j74hQ5-U8a5Uo5h%ri8NNCM> zO$FrfM%;{{gsRukjD8}eEdIRQHb?>U!PKhWr?)|cPNF+{`fCJ%8pixe#j6`UN3M`! z$kqWkfDkuLFnTBuv#e>JU=Q~efx zEx2>nyLbPF8SR)bTalea#lMM2a<3{f8Jn8F>Q~&+6^iqW)1%^u7XjsiR3sHi38%9M z-_GxFU}yTyBxwz~s}*1yaJhG5RMHK!FaUmxv?@x1R<8s2WbPV9LgwIrSh!5!ge*?O zPTVNhZN%fv!wKMHmv{!SE4oG|FInb)y-Ur0)XapI@?c@SU=b~McNpKOhjQF?y~U|H zRtA^)o;<+)>p1uT@UGqJVFf14JztLL2ksBBv`eu-Xg^WR&K5Cwvc7;No>LN~HAuUN zt&FBfZ&WBg1a=M@IK49E68*{!W71q;Q&NKitf=oP4bl9l<+o1L-?6O84(?DXL$|K^ zKBS>`!0)0uwltpPTaAJ#h5pUgCwc^Q+I84Ts{DcAM$9p?A5-V^Q7eC%>&QGEk2SRO z`-h#qoj6962VJ}k@gyUCfj2O|!{nzGmdcDtiC%9zvE6lCAcRBFg92tsgK2qF4VWNL z>h66OoFopqr*d5*EJ%u_40Hu}2mVG9f#z}!+2$bY&N`Wbs&i;_OC}I<)(=$E0dW~Z z@^il%b=}nD_yHuv>WKDw^$Z$Q;PHBh`V_wj>_4MCW(wwNzhMD9W+W{s;QCk@j8|p2 z{$qNxDM42^4BSB1`Oui+L3Z?sti;8Jh7h1H}) zw);B}&srX2kI}^Bo+GmLaiQsdLcsCwUFb9>lXK*?aTdp`XcD0bo&hia$;?YpaTQ@E zgor)2&|*|ZN(>qTM9ja*%9Hl}$>5v2ftnB^=wsErs@2ofA~ag$)y){PUh3B^2Q1Gi zj7U$EhjB|Ukae41jnV+FO_@6Fk<9s1uJw{34G5Y1yG8z6G%s=ww#XjGP7wLH(1hl8 zQ6<01#>xNwv}^;YGwH2sYB5T7JX;*56FJ!%UG%pUTI+Dif{c+L@o)JZmbVdQpSxM* z>jh^#bt?Clp5Ae6Mp%~*oQ&kV{unb1F>aPJ-QwLX}vS< zQ@udf@;Rx&FMvV`7x=DWcvG7bgCK7rx#;7<5Q^TTfxoURkk76r&1$z0A6HK!ZW1k8 z(wB^IhP$TQXyYG%4Rhco4oqmIHAUr)t=H*V=|Fo>-Gyt6=}uD0QoBXLJx#*l8EmgR zYF|`K$8dHg#6!eE+!t9$+m;{hbCX44keA-zRuE}0i-MKXd7uCQWC`cYb>0A-^#c{Z zW!#|#xHB7{KaQxh%Vsk!)lii7Q5ex@UZ$(^*R)hYOK1V#fTzUUcA|xS)6EV=i%oYF z{!JI>n^#?(-bsq7BA%KH2(KL1WhppsTt=qdT_>AG%(Jq@j2ZEg_hqy61EsM*<+QSl zG*TaC?fB4-6;hBXz}3|ygcA%0p)hF`@4aU{m8+wFsWqt30YO%Hx?rt6LtR+6fblip z8*DzRM$|Z|PMm{uc7)BK55ncJ)z%dQHyen{ojLXvh;A&7BLoULyRSKCkB-iltbt%U ztECCO?c0X8@HGMG=b&;~@^@b?OsZav4f_!J(`*9z_=$F6uchj;e z8oxkJP{Ew)&iUNp9SxKG;BW*9)xSYp>pA(B z=6LU|4oh^ror(N{;oPN~>uSLZUz2;JR8OQ^8%YJ_rlE5e2WuvLXi|!RZ)y~q`10xl z0VPGpjlH?Bl=)!X7*@xl0 z6&HJl-c_mr|2PC8iejd2P#~uK3nwS3RHT$eF5-iz7X9;T^7ZN%G^fGh^%3xF9%SR_ zUd0m0mc6o`D7VoFQ#0~9n7UDg6>nyl+2<9E!gmm2LMVBp11ZDFF4oi(116 zyvNr5qd@<*3CfhVR~&0a6rAsCR|0j%h8lZJKGGceyqY?>v7~NDpy0eb=j+!M(P;&e zUf%hB?vGX!$~03!*N;_oG$%vU;0%c!Sb>#uAZ}0I{ao&t^irs$89&mskDY`%Zpa20 zIV|fJH^;y?E!um!wf1Y06Y8foG4fUnwUr=re42md+~MAQ{)`Tn?n-Y|ih8Z&`*A}B zZFKDlZ{s|yy}lGg`X=L)3a$U`B>Mkxg;L*VJq6H`M4o`tsUsv{C|(?60LM_2Zi|Rd z$(?DvT8(DDjBJrgJ-d?ixvNqtFg(Xt)EAF$hNuB2t$^`xzHnqVk8xM@qJd`&YKiXy zo+h*)h?-Q6xZ>&)7t=jd+WKchWWd<}4~1L!awGm3wjR{_@1-6;q8m`Ak7MPV`!7hR zOL|R3SFAH5UHxfvI+nc+ysT{qaPbS@F*IRpVdFcAu+&>7;of=3S_8Ql0%*YNnu~m? zb<9f80{R}%N*L~pzdgi5@Fkz4^ekfQrsYq9swbM#n+@jR4uNoU7eSt2L+VpUnBdQ{luLRqvsc-p=X``I>&o zsqFUEgG0%H6jJy3^2l#5RBR?0~(ML8b z#o6Udz1vRh&4Tq9Qecf3H{G+mfcbEJrky)Y$GHu zP1-_{-+iSS6)B(J*_Ns>36_3EOM~kdqX9Nko&M80BJf!TvyLdqoTS#YCxQT< z0NSMrcDn8P0Xjz0#Pp`9aSDz45mf&SW&187G1$H+`GBgi+E5cS+KHf2lePpvfZB|VuPZ4dW7 zDRtbSBXWM2em*^dey|Sa2JPqO`f+kuDzg1A(ssoi5L6VjrVDnL0CJJXbFEBY#K$IUTY`>Rr8HApP3^w!@9hu`ST6+`ET- zH!f<4#%^NZ1vWpMw{l0AJ>Vzi()3yGES3Npvfn05#8~7L#Ije`$+U=YfU}K5XrF=gLbFpc^zNY5sPP1n(NZpW9zp(x9Q*T<3%o3T%BSs9|&3Bx$;e)@go-n8^2;(ggg76_uIcvLb zLwMLF18ficN-+RWJ;E+8hEd!c4ELPcPAu)9X5rS9oz z!cTl?#Ahhx+@hMg>;~BUVwx2$13FT#2KW8eyRX;$iQxiZdiRhF*A92Q4pjskYi+~h z7+0;*!bG~p6V#B~0E=uc7gFe(Q~J1q*`YMlDJY(%6B&7>-LGZ(@)C>7GTiQgt5};~ z^jH*sj@d|huc@2IWNEHjCIQ{d(9QlkR_+0}vq>c^S5u(mvjb%R+b31$O_Wz8jdaDA zXn`z&`RXcmD`3*D6}Nn)ETB0L$^{ZtfWH+h3z{#aa1^<%!}omdgoTF6F8iHu)a1Xb z+!k%FyXZt^w0F&%i&yzysIlZ^Lp^Ui$Q9gcz_z{=AE;SGlxU9}&&gZ|t?R@6HT879 zIbs-Evz+4zdcjGGSn_@+3w8XOa0cHf;Ta_deQw@ND9qLSjiSSWUtY~p|E2&g7( zw6`GLZbBBo&LYVVk9K=ul+5E`E@-m%o~>IYz7jkxjQT|0YDb{X_*b7+aLX#WBAq1M z-_~twsmjMXLv5+h6=cWYmXlcU%Z;C+EEFmU*ytpHRdv1)LAG7WWE=6_H>WhO7%4;j z&q`f)CIZr^AFxWJJ=7Kq@v5XD65fT;9MDM&#%`{_7qhJ@3n702BtbwF zK}^bpRAJoz{=^{Y{Xb5GSpAX()l*3?FU%#m z2@0TDr1LvQwFD$>=r_*mEK!8y^fiAgW)ja^VcuHXg zY8)|InFnC!Mm&n2+Agc^iR6#&avIn(_t!&NE?q3}3v?DEZoM!`eIzF7n^(ev7aPwq z?NWs%rxat9k3~bJ=ie^=v&vKm&)~Cm;OLn_494{EKxq#7#~SZ!isDSCt~Gy0zP!UE zs_FxbL=c#KVXypIp@om#Q^g)OD3#!mt5c9U#P|>v+P3&b6;5q&EYA6O%)C$2nXpeD zi&!S7IS6B*KrRgNe`GJYJ^cIWjRBTQOesg6wWG~a7#zb?qu`ieV=;co2@1>G-zOk0 zlI7MMvJ)S52Y*Elqlfsh3hRim?ya@HFo0A#+WmYK#>e=CwRQuaAip8A{#Jxw>7km{ z2#872$>juKcmXxCnA(3sD=W($2#W8HzUu9E2zeGjbQT5Xe$R9jN9b~J*Fl{hpJ6?zdv+X!`l+C>HFg|z6350Ll{=vlxFu>##h9Wo ztIobTuM}*Wt&%X)=ec|lY`HU^h_(aLN0Vm5OV$1*R|xpVtN;K200000000000006^ zUqvLRLI|A%+(L+-$^*YNg(b#3S1N_mgNirk*yKZA$PiaTB@Xc|Zep>}o6UsYrw9IL z(&43RUaWus00001R%9G#y`;d+v8`8(I+e1`<+_Z#4eTTd-uvR1t`O{&9J^Ng@lVlk z#Hg|50cpn&#a1P8e=L}P?O&2L6@_0*30g)QiAkxqU;qFB00000000000000017z80 zNltMF=}W(p*)x_oKsuOrZskzvg>rx zvOBYoN_7R<$R#?0?Bo)iL3VNpQpu=pp&4WH>K9$`QDI81OF6tz^fU8AidFByeNAB`m2Xdz+vLh_r4nMP3 zEtKK7iO&WFyfA+Vh(N-8`=HnlxrurspSQwTt7;L*(y85=RZBwypJ5&)f0zb~7+j?; zC~Sk>GjH~>V7{S?vMd(>DP~(Uy<70qXe|ATnO*U3$LH2u9~Bsc%s}YUIBjNH8woM5 z;y3ta{lS6j8y16~aKkl zY55%#Q7y2USUC$Aaf+Oz@?&Q})I@)1<}kqaQu|1rf9h`hI6) zXa_-TGL#zEzMA8@&&4xs5Y$ zPD%!=CJoV5Yqt%!&1j_I^~#h^QKi3bL^q{?*Z|M|p&{>Pxa<7x#ha;Ovx(?U&m0Y> ZlPL;kUtc{cgsf@+00000000000044TTcQ8} literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/ctera/ctera.webp b/static/images/auditor/10.8/addon/ctera/ctera.webp new file mode 100644 index 0000000000000000000000000000000000000000..fbc4dd6b481236cb8d976e5c3fbb5aae24359ed0 GIT binary patch literal 76776 zcmb5UbCf0D(k)uHtGaC4wr$()vbt>Bw!3U~+32!u+phiUcfNDJi+ArEONoo`&;SEzhzTpID{>Mpe4jJAf#v{Hr-6Tg@Y}MdNfwjv7m(a_pw7TY znAriQkMkVn^2}?id5D+~s5id;GCN%aeT_U5?D{!&x}OTv`H6f0uD08HR1X-31RDM3 zkLoWCX5KgeX=fsz0v`&73>Vwm0w#R7fSX6D_r5cX*X!r)55K1#KLFs97cl<02xz}i zc~AS8o~VsSJn7l})b`r~d;#(R1_vzfi0=jfz@^{4cYq%&0O$LT=dZj-h0nY$f#)yT zo<6|Q=iLkb*CT)f@cc3TWdKC*DF6Tfo`C?X-#-8w0ck+8AKhos*Yho4FE1aU@YVMv z@FDP&Cka4)MLh3W0gM4kzsBAJ9usck9{e_WJ3Y!Sx6gZ;J)=Gh&dYXsY5+-qp3nD{ zyqlg)KPSN2o4~8WDZvhaMPTV8@Js3==>7Q7{#M`x(Eg$FKK-I_n|I{5=jZo5_V#3y zA^`de^6t;`x3$7hy-flj`t*B0{s7$YZ+@A47QHRMY`+4Q1it6{hI3nc+H(Zx_7(c{ z_rw0O{nB}lyHLfe*-QhC+tcR4`X=k+zP`P)BvfX9F&Y)_)%F;-I8;28ItGG>I^!0HISVfEsO z>ME`JqDzx;N}Lc3XKDbQ#EGyOw#&4!Oz1VzJV zv^BdVU@3y*h4B9vRc~Rd^y3r{jqNGQrJpdm(@lgj>SVrhd=*?l=n$^;FUr5?43aLN z5}s~~yhSTLpHNuTJHrfq^~5auFz}PoQ%&=(5@%sm!g|=9C=PrbRzz3PI{`ivssQ|GJu@<`T28qS}u}3MhIVb?Yhc+Oqi}mb7>-+o)wm$d=wRa{M9Jg zlU^j`x70+`G+?drZs&pA2dRt*{~CBhDD*1ogTmM{BH6?2Kne`(2z?XTNK?b)@0U{{ zl;vz!gq!~7D^4}6Hlr9d;rh`S6Ua%}k2mH%96`TGcJO@fWc{@&{XvqaApp6=!e2DT zT`0@4d;@P4aq(sb6HECYI`5yrpomY(DX9t2QjUhEgi;z9 zUe-=~4`8K&Q+RH)xgPH{=$9BNk--vnQJjN@221k2NK~B)m~qeTa56k4xWx(Yz!j)j z$PS^Oy5pYU;Z(69UcKQhO_xOvOI+kR@<@VZsEX$0YW(?_Y4H%?lVL|Id>>i09wxx8 zCiL?=6^)AVCQCKOXsZ8SkQtCL-INrMZjkiK#464Gic~**^L7@3!aX~-^W*W&uVPfm z(-1yPyC(sTqWV3@=Qn2+Qor@}tpzJQnmmJ=5(;_-L1|NjQCBVMVS<_(e4_zG*ILG1 zYwLf%{r9q4kI)r~b>L{qyly#5&pnTEZzitzyEv z^TbvudYAG_CGk3Ir6} zQ4;Gy3|-~%$&V(+@NsYx_x)k&p6=hCKPRe~)V@IS^}V|(2BL4#iaD58gwFgVp5Vgq4QX@lyc*pYLSWt?$BKKJ1YEi)zfXs&!&2bP;n3CH9c3igcRHgojl07(aI|`tfXOhc ziTm=%^ww!S4^jU@@!`-3w5WH_(Gb~UymmlYmy*I#$a^H&Iylk7)V zA4=h9*vi8niZf{>khJBQcs3$=I~8~W7;;!rrG?PcE@ld<11bGb*H$werAd~O@OPkX zro;g^jE9WCIH1?`vXKKvF~aYFQ2wtVzX*d>6sc!LLdgJaz@?Lx*VXrjn>9@i&p1EV zNB2JtFQEtSW~80w&K|dEpV6!K(0vdm#wd^in&5K`p!eiH3UD4E@*m@6qe}L3(fgks zsvKYO8%9N|0KeluLFD;I>R*8(r#dg0s`GfvBc)E(_&oUcC1x&qm*W1M@GDv|wcT>E zkYVz-RaRS-8chjSi}Kpo9R@+32w?=T`>Z=Q z{{(NVz->DCw~hfyn-Z^~<+?$AJ0T+z9t(9SjwzCsbv?2-9JWksT-2aRuY2Zk!|6^!PhO&_u^thMGWT?6bNwOft z916k|cAr8UJ?l+#WLWC^c z&-Acp&a<{_!Nd-g`4^-9Bx9~F^cK1P?O*Bh>zv<@U`>Arei$>cFNUV(`rZ^`?0hDe z3xa0{u=MKDo7&%;1^@3XGxOwRrE+n+Ke*p_Df(wgMlzlR#@-jrKmo*BN0T-(Z?(aE zCZ&j<|DCAb4FUeubQT9`DK!NIOw0)U#wTX^+CJeEsaTJLK-8+^FDP?z6#~~rjpP^! zqR5u`U}m!t_Ur1)Z$$0^%!eU)RA&u2VROTFjkmXgPFVOZbJ2Ih2LSa^qYJFY&Q#tq z;^?;y<(?Bq?!33pe0EV-IAx1dZuRDSo`6XPw2q6G8(OpFhSbO;&=|{vjWV*+J%^69 zi)Qw7d|}jKgVi;hp#eB+=zTfF_;43BaLBCBZ~jQnl0CuZP#2ru@ zM6o!{YMOVr9v+^2D+_94_75iDQuBVSycGgKp)-D6N*GQ5x z5P1RtL@y$5%PE*QYkwhODwMLxaIQ7H&9##-n7w7)wy3xm)KVWthXWz8f@!5C2{9qPWu^DwS6+;;Ee)PEST&P%ZO8ins@WVC z)!kYM9QO&7*XMKPqHGtkt=w1j^lFb#zRVb<8W2rxi zV|+mp`_Z2pD(o|dd#@g))dn$lWLm4g%r<(d6)%9G$f=6ib=m_aK4I$M?f@nUPKZy z#S=pc!I4gCUF2VN>D2IG2oZgDTOjH*DvBnv*|F~6aJLy81vqrx{i;Kwm@gdhTZBMY znMW4l(XR{$R~>@c8g*#q-O=gDM&E-!#ko~S@n6<@$6vQno+dNY?Y#({2f|UAbn#yG zCCfbtmO;ZCbNZPDdr>aBc%Seo#kPG}jKmqIve8n|>U_ z{6rm3=MROe3s5+Sj$Q+4fHdXQGV^c*IL=qrJ8+y`PyTIT+Yco+L;r#!x!@dud8Iv^bR$_-(U_|AWqnNl?vWQW?EN4F?8hR26~rrt^DIrU2Mq^XncjY zp9asy4Z=~c>-vdOJCv~rH{s~;R8bz3bR;;wTSpKor!s$rB$ioT!bSoAGZ*;3y6#`) zN@bJOb-Fv(OC#WV*8;C78Z#j>)e~eOy(&LNkvbUZrlD} z49&BrS|}&l5D<{Y?)O+Y8vx z=#t_ZMCo!|1*81aGKqAx1)`e$TvKK9c^T}G+<&SZTFULMw==hTwkhz+bXP9)@d^)Ag22-PFSOSVd zP_^bK6~@5%U#i3i&|xL#;3rrP8^wp+WSzh;_m=By=Ry?^=9THv-I2-ZimpQY3y4%x zOg+69;{E&l`*1`NwCWs8AsjhnKGgN(Evi8abV=z{hhswzAV&~$H=QCA>% zPn?oU9@p_H2m>mEyUyqV-?W!j0iC-+O2zo?hzd;lKqiN>m*$a!%)x)>M)%UNOp4cVLJ^e`i{xf4Z6c zlq_%&L}a(7S>!LzLZq2ra0(U1rQAh3K87cf2BS4qN@N-}4V7<{8SyJ|4lJ=R7<`Q3 z1t>*}O-bx2T&7;{JrF>Rt^(0g|0hD8bJzxCK)?Kr2h88up`9E?sW`0si89#m8p}Ex zRi4@MY93Wly!%xxO@1geVWc9-h4@ zd{8dBE%X~F>v%E#>cp_up$@{md;{*kN%41lhyrKh4F##q`(qTsQ3r`H65iO1@iH48 zbK!ILShHVx5KJ~sKo1uJbvRlKK$2wY2rL*w9oH>g57E@a;($Z@UMXGOM$3&l1icTy z=_+mq@gT73HQesBBcL;XbO7Cx1uR-z2!F~C?%kkPbOjBO(66)V`zMcn*XeIMTPUlW zh8ga+>Pg^70!f~`2G^oo9J_(hv2wC?hcTv7^O14uPBwf3{t|+cLKw>q5|c3E(vd<@ zcKaGDH6ai?|8O>8@^dQ+DRz|i=JqHI65kwH^lwvPMd~=qJ#NWZLpF;_^Z|H!1&FmT z|5uF6*4^`lli?jUM*^+F00+0yh~V$NBosBLo`wV;SUqss&E}Z}b)vuG4sCZ1?%pL- zV1>Jaad89)cLIxlGC;JGb5Ic6{#iRSOE4kt28wSw@=t|ehBV%p`kwUXUlnVDUH|af zx!)4@2t)>@CyEY*Z}4Fw0jl>upyIttA_7fQG7VG0vj*Zd*d%V=F$Y-Octm3YQ~ zy67M++N0wY70k^NSX9CH$rX`k^9W7^0{{t5-yBx7b`Cl^RpiFTc1%=x-k_Enhd-K8 z+QS>!#o5_05Il}hA_ryAds$b{KdC);z95!aLkqk1-@U3sGx>WpgBp>FMv<+cnxzlh zi;!XOpc|C2c25^tRy2wG_+mf}?SAbYx(j(MD^`l(6yAi;^kpwYE6#AdpnT-AX6TaS zQ8R`IiP_$q)%&Rt_QM5UQA|}QvVjr8AYFFyhS`#xl!<;-auhxEqCqPL^{PcTzm9 zsuK55Reh~%e~rM12#3s!5tvr#r zqAN<%Nsw}CdjY}0;V8H}ypVHQE3Ijs9_f4F{gBmJ1~qT@P``04e(&_vc#uO?xE1%c zt(HLeZ)xJYu$5Dq?`6l~c4?bEQ2;xmbzZtDw7oN>l z9N(5H!jxe@OSd*>8rb!RQVmu;Cw zLpA$3bhX7jUk|6%6WTU#9oaf(0_2}OAAX3qtemtEEUwglx1X{s8}P6Gfu6>jByVX^ zmwK{Xz_%DKBDdTQpP_wYP$Rbj;?V@apZ6v!J5Ap@EQW%9T(4n)aC6-FYe5j^r}c)| zMVx_2U2~VT9t4yD&kdj2r9ERzAT>^;d~wq!dLS_9fjD9W!tB`0HYG?_9YXE$xo@#F z<5eo{uAkHS@%DT8AmGsTQJ+_4Ppz*{LbN=oc!ZfM=jmx_g!%D3o4+1yTf99#mJ?3C z$GL_Ygn%~f6GLwmDB9@3m_zzM&EWr#CkznRvNkVW{*7FF_kTB0jpM0FJo3oFJZcAX zLOJpy)tvz;^t$id;H!rK=5QW5obxq)+wmJxpS!+A zG`bGp#8DoWa3t6<89(kv)(J+gk8->sjt>ALPIAcC$|Z)@zbSax&I(CdUOUz)wm$ zeL)Z!Xx4uc0={m-Yk_`J9l0%QcjWJt?>Jw#Kz0?nMwQvN+dRTG|1e~y1|m||QCpVv zH1V_2T*9NHk>(Z;kesItSVj8`oWU+cJpd^l!W}ADMF*wCsOub0E<>;hEjzjGh@xqe zBoXNOFZnx_!(N#Ut2Eot{HC$?U4G|0%{1(OlA$Mz!vE|bgl(dqh&e!g9z z|0|&WTjTrhSp65tcW9>a)}k3r)^^{xzls#b ztwp}abGEc})xN#p5QJZsWdMQ&Zm0Oqvx)L|qO7Dc4brx99+~_&Roo509PIVB*hbMu zODjDYb7g{TV#w#fr?1Z}cn;ueyz$CVKv+oPrD|=z=g6Q6PvSeJFe-2ux zA#F74W5tX`+B{FcRk%M>&K`&#O0&))Z%Y?vU!8mQf)eu^mh2>=4o{H#M2S&><;7(A z)G}o}Mzr1U@ye&tj9aI19Z_f!@7w1Q&*_Q(YJP2@uuqc_rAXQO`XYoe)ZK3yfl_$( zW)=G0)jJH(ED=CQxJgoNl*`yW#J^FC)-~m8cH7Jc|z;W&>?~ZD7b|%ywm#C^~DQE>t ziaFUr57)bp9-50rN1qW4Z|WRiEVA~u1VRz-&@?PThL%Bfa`;W(M22ME^D@dY`^WM= zqV&5FQ}YHF{A&M^7J}njcl@Q*SQfzeeCl|sqe^*4fI85VcXtsNi8@YHZ zE%wOtAJKsc6yjO`=^fF+(m(GRr$6&%I9@>e4=aOVzi8d2wKU$W*TA!iF)((L$hYH-D zVsLAN88vAcwSSv8wEFv(zXMfTiQ9b)lfcDj1M6bUA;Lw#Kjo?bJ^57jakvOL2(mB> zSj_S0Dh71(U1oDU4ao>Y*}5%Am0)7(#4b?z2sp{u-m<`={V>dW?r1LLRn+IgO_-Ocb{-*+n^J)>H;*2CLd zE3Y}DYVoa2vzX+TdTdmSQxPRhx#qxEI-F*ku7}!0(?u*Vn@!37SIKTz$=Exr^Y#oFy>*?mxj<0#$ysyKd~SM!UerI~q$6fnmLsl^2G zh(~j9gPp$`q`x5_MniAqCziWj>KqRjkM9C{!NMUs; z?^wKXB(owlK(MjQ$i`jP=h8#JBedlXtcj_YT+o6e}|-Iy%xWSF!yQW80%YT!$zFsV%}8?Zff zQD80`E}qrfpxK>rVOYny)%Bzw31^nbw61{9;3&k1aK0H~`Tj*~SL4FU(&i&QuiHcJ z3TFd+_!ARmhHV&BB%BY1M~#z*x9jn(&WFc-{vAhH7is4e0Nu6;G{K^ zT-I+GSTC_^)zSA%D>rt>8n~>KPoBZH&|U2}*<1X3DZwSdzu$4oS|gP`r? zMiEN;RHT@i1{c4}_d6Q(>?_b%u_5tPr7T2dfh6yPE7W>{&~(MD5@qn{(OT_2-)FqF z0PkWHh37O#Tm?RkQO+ft>KlB7$~Xw*APfy5fR)Vxx9tS=!3lbcn-dR{OZeN-j(;#+ z^v$sAG$F%jRKq}Y0?Q!o86uNw3x3dlZdKjQWyK2G9!}81Hf#C_%j-d|2zlK~;Y(ml z5lSg05X`eFk-5G-Igo!C^>+$GggUX9iAkR^bhaaw<$&Mvod1YX#LMpnz2qR!*aV+& z$EA?JrLTouh&E+y;J`I-V~NNwo?Me9iFdZmyI}zza+7nJ0qWq^Y>FezU>UVM91P>6 z^9*dXgy8%rMjC?^B6FK{QpStx4if3veuq4N?Fnj3X7Ht%tHhzkaZ{tt$ zbh`DO^@d1s&tmA!Gqz5*b23xX9t-5|we2JHL7&Z0G?GaM;RxL}IjjY?X%OxhL`@R7 z+Xu&RO=;Q|)$l^8m3g_c`xgGb%&#d2h9oEjuHJ50^eM|eh^o4BoTzF*?8m`g~ zRRXa`JnJDHL*d|x5U%jz+C2_#IQ%SsvS|p3jGGrS6sUJF)H;U}Y{}X<+3n6A)WXKm z0#9wbEVlvih5B}Z=qW_F6(r8S=1gR`G0_&jz6KP3dTT?%VWxT1duMe-KHU=%9;S^y zVYGg6orO*T4r7$6+rLUb9_aslgaZpHgn)t1$`{NIC!w*jD}-f-zA(kt;=*e5n?Ha< zLIEjgP%xx7>jlL1_J|}4*lhID2*yXRr?@CYRZ&rE*G)G?QLmh=S<(g7FlQWOhjmfM z&hg0deez@LSXllZm=A%x6)C<_FWb$elo)T#rs)BO0t@=Pnx;k97`KXBv+SDOA&RhROI81dZI#t} zZAaA2BuM~`6{Z%y9?7wgN`Rd>Fa2XtJ{$|n-OvIuM5Y#NQfP$ieX%R5aKAPfqLQ<8i_6*L%@zB5VQ>+wbXDq}U#(ufYUNnS(1jfn`KwLc=tQf{D zU7dgw=kTao3S`zB%L4&{3QCqwfDnETVDc;CW*Q$}8@(3p+fb-EC*cv1m@Up>Yqy=! zxT7iEY)U_aNdZ&;GK^dV7KcG?+s}-ZpCd%>#|(j|BO=Fm9;(cP=j$PtgXOnYNAnem zxQ$=$;})wXE+qL?E4fu3;oJB^B|jM(6BojU85qcL+_1;OQSTKHb>MM75Y6W9R-!PN+O9Za=4WDX65jD7mSX;uCBc1PknVE@-aRblqX zrqUA+zA^=+ChH(web;cJf63z1S}^IYLAm`iSaw1(0DcK6m(k;^9TOIB2!*_ufCxr_ z11JLsza$T29hdv7!1*%s3tz}$-@g1_(G+e!j?PHvFrx-vIlk0V<=?zuHHDE)xG zk4-Axf$Ys>^cc?{BhZ;S$9(3hjxI>A#O^AtPCvuXy3BE2FUy%+RhlB!PwNn2peo9% zO)Ql634#$kAqe^kS-L^GZ9N^c>+i^Bv`jMafrpNgdqS_MXn^|y4ftyGrmW#tSMa#K z%re4^_6Ed|XA%=e$)=onREZ_~5&k%CXgs3fDiylY5h6*z!WRxgHy*eZ~Dz zeZ$(Y<6X0tQ$9JnEKAMq0p@;>=e?O%3rF(xnHG(`J^UC&z~4J{0Nx^UpWC>&uPqNI zr-9g%QI7o3|AjPf^G9SHp)as5^|x%JnTujBE-wwM0%t15D>fQ~6c~ z*%V4vGo^QO=;N6LCjVmx3-V1{WGrF0t0df(bp;%#(SnY#{2E!bYPc+zCW*!@8t=_a zB`vDEtQ;(Q#o${E`gO;6msOX6Y3}%Ud(}nu92ih`6`m|hf+Ep#VEyMJ74mYM$t&&9 zi^!7aj%;~k3)DMe6As`35jqN*+VZvYb@KHFmxwd<@p`r`F4DK7Sf#9@=Bm%SWu(+h zLmE6ZGRX2(t+$$VI(ww$H3nPewmRc@Dss(-WCjIxrOos8s46^bn z8$nEe!U9yc9^!9RB8o5X_*d$mEs1$(X%m$-rdZVsoR??0IU)>(6tHx$f=XZQO%JuC zEeUut8vOgFsdj`J5#O~01e!HlMFyc0>s=K|2NU=Lb?&yV9)V{S`hVJ(wvC)+%a+pM zx~Lm83sMs+t=r3500o(9S=lb_b;pJOH71a&i!A+fGgMQqF3Wz4;jNw!)g=YTl6&T? zfT8`f%nVT5R$9H&cMZRi#cmD+E-v;{2c*zi40+UcEyOIbf0G4F)0L72Cf#@w4w(qYj;gX`~JjXfFvkNsSj0|7a zY6KQ}*$@J7M*+f-^>imVjuSj1wSqn0k^$v=5{*^@A>}o zmM~PV)0JjpHL1>wz2|yL-wd?iNLx8#h}NUCyA&JJHo~f!H5mFc!bweua_`Ai?lB{x z6dANzQjMrv$~_UWSl#@7hh7F!uPohxF4dc!!P;1^_xpm-U!Y9RaH{b5LzORvp_Y^CnA z)(k5T;}hP|n$R^r&{t06NG?Ls(Io=1Yt$}LF!{h$d?>nEO%*_YTkv?3lI>Fw@DRZ zesvcyE13>}XjXrzCH?Iq9GxYF^n5EDmkd9G@pIviWEm};CiEZ<4Ic=aPx0A1F4B(Y z4@f7sxM3+}_#M57z z(k!7k0@7skdw_rk4PbwI(8boilc+HJZ6!T!K#tGM()$P&IOT^0lUBW@m^IKF<^wGc zI-c#_2jSp*a=Sum#E)J>K=88!X9j_A)3Qd(yc`0r+a7$V#Qwqd`b!EsoQxr*Hc2%9 z+>9JcgwefF18!wkB1Ps`l<8Qk*(PaX8&@+$EE$#;eSd%w&gyLZgpTF3l9JD|{tcE3 zB5{~A!LG=?B3<)tk9?kiEiN&G;KMMP-X~}GU`Tpo<6O9dL$R>lYk=qk%q#Sm@5R|y?{F7J! zhka9Gf)d;u5Xp8{Hu?OJIQa`jE#^v@Z8t|t@abL>!37dSZn0WgiEaL%>0wyPLI8wT z5M%UIW+U6l#Ayb^&awX8cuQl2)oI{<15x|?>zEY(Ag(_jBHF6&`)WhyWu&8ej?3UD z1aagzwiai2GEI4NCF`vWitYn{d#@)kKSZrZL~!}oCX)(nh^|>R@wdJlZjd>B^A6^8 zqRMp;XdnB#5UqAF4O_eHx1K;f6S4Zk{1H*GD-~Kjy7LRQx;}nOUn8+=ifLBoPy>k7 zkd??47yL(hySCy2_ThBd)mo%3u1vIz3wAbCDgIO&gxftHrdxdY024ZI7{ zZ-#u_INx={r^+Z3!U{9P=!c%(8nm>4x8~-LdJZ;_1(u3IfxhI&VWj)6QpCt>k2@4% zEaamT3X7*yVguR$TZ@8|hp+BSh>&GxR@ceDKf z5+P+JjvoJP_VN#`ofFc#mtK1TIE3w4%;SXJk`T|TS z(k1-}HL+& zyS7veQ0=JK5(a-Rt+U@mwv$Dcdkxt1l}DC#RBfz;YC$I@0(jn7{;>WxIqeP8pDs|LS)1} zl&a4nK|y{t8nk3TMo#sDP?!xkpS&V$Qh6V?GIC8ODi1&&8{puwt4kpBJnyQ%Yl{z7 zzCE_rGTLm&I?pcQu$=i0(V!+G6Ac3`sO-T~2`>e+7jgIq#Qw77RY5Be`~nM^st&Ql zxd!vM?^VY_s^+^A2w`-slh>3jGA?j8PeA=Q0|6pr3cwIbO3ft+-d15k!Vx6xF>(1J_gJS;5tY%G2Y7rO}A#i zMKx`2S7(YT#>U$Sy$|U@EiA%87DS4YU%WNcBlY2a6z8D@&-+Bqfc#Y#Swd+J>o^XpBt92)>;~2zU2o!roH*XCb+aq)V?x#82CO0ty zK&*D#UTY|wS`_QgpSGWCPP*PZ_(!d&^{WfJ_`H6--+XZpA>~RI8dXd0OAZL1`A5!G zyFAjw+rc0xK?Qyexru5Zi`-HCT;CLsWM&zwCim$Nq8Cvll6u3n3S?5_-K9AbEuG zfptSc5-YD0-RhdRrLA9?EH7)P$bE3@Sj{Li^CpXlr#C%Sujax>?t^%RLSV|_DCSL; zL?3dr`D1!dep6?WwnqR-AR!_(C+L!jE`gtM3DrAXP7QU(UtV+T2eJBE@F)sb*1kE) zD5LlwR;Q95W7eNKRm-3Xf|@W@6zyO}uXos{=Dg5uNdpwc9oSJ>r5>EX7Q?MFvfzdg z%Fv}~-eIT4A8lpFoLdImEt%+xY-aP2DEjWuAVT|GX17w9on!Y^LW-i4^gRw>*XLD8 z&m7)hvrau@sc7z8O+PsGKwvd*CQqC%q~RaCnc8+bf8#nezVgo<*T)C+BF55=4%5qv zMcqNf`6k15y?x$*Q2(%wDJaQGz1(#4-gBPxOSE^=Kn6suo4jhYpW_0 zMs95LRn|g9_QLTXd0wRNi5pvsv#ivB2?Ak8*f(^OF*i`_HcQF7H*z~5aF@)W@QFbV z&?t}70v&@dCgadtw{ce+zNN_>v?t+c5=ff}#g!YH%CIPPfstms{~nNGhZo2p=#iIm ztj#i5k!8AHU*X%$6cf}1+__5sIe8-306x}b;+FUJ3V#3a8QT_4jx3Dw5ja*(u|xUQ z%|uydT@@pR+TcZ>=Kvzcy?Iao=cU|NS{TiR(U`QB3eSdSG+L(9nM@RCt;xEe6h@q5 zcc&NzfUvH8Uq&0^g$q{C-c{7&>@^_#^D5>BV8bQhq6mnOoX@6)E#*KEyEu3%36c}T zbYifeXr{%srW{}v%$c)7k&WaDWoO*67)PL7ks9!2*cN|2)=)vYcM%(djV`==ZE=xY z`Q#V2!vS8k0SOJ{MYWxBAtuT}yX8xoxmMA78{$dfk!vE@A(ijr5kv0)27@8}b<`3~ z3NL7r>u2es)l9d3Hsw4cR66z>i3P-l!{YX4vCkB7zPG^WGqI-a^4=a82UkDQo)S~m zzYt+kU@uk%pU^M3qVMo?B`G_>Wuvy5j;2@E8wRp_F_FHWw7NLR?U zb%jQ`e#prFafIaUsZqR!r}gC9S+o0cGFfe25ZDEjh{ZKk2A#TC|Rs#f?V7CE}!Q( zu5XnW>ohe@tSvp#n2Tky?0$quCHTDgltpe1J!%F?dHa^Z-PyfFwYyzb_Ikawg77(?BP`ygD>^7=W@ zFwzWW^=k7v;ww?*P3=t80h#?PB#HQM9t-Kv900F$l{@(7PLyC!nx1DY4gx@FA(ObfdiUlv6M9s8C1v_^u9X z?MT=-@42ky^8_p9F+(wEOGVBKrVCBXm9h{TIs*Qt>8h6)-ZaCwq z%=_|gb2oh z=AC?M>VRzTJtDNi!XJ2b0#Eh9LX(Q;UC5QIh16VgZA!MHeBm|!L_JtD*FS_ayv)nw zLUA(}W+Kc~K=`Ai*isBK$esxJoE!qQi_-LYnFqf(8>v#P8j{4B6chSoz@*P`Esii? zAn23f+FDQ9^?k9{61Nv2RzouJypvFisoyJjCJcud#j=+~ z`yc^PAm>Lw6fI7?Q{}e1Hpj-XMR1EAP`V5@b(_1$>EZ^Xp0^je0IOzmx7Rg0#-&H_ z=77L29`-v9_GQq(cRF;YG4~XBPQ_3oa!H2GK7QV|kiqkCgD|_7% zYK@mTLC>r_V=wjq3I})e*U7pYVXeMP=6t^%TpufY%~SZ!Icr%<#Q}0^OkIt&K<+J@ z3MD0%&0%3$VKv72`qkAVL0}p_nM0(@uaY^9k2HvSTw!K9a|lxOUePWIIo1fh2t1G$ zZvqbe+#LoJag>{}L9TWLQ^3VxiW|s{sXVKLeNA7f0Sy)>tzk?{cyD9s*)#sv6Kdcd zKlBC$F(c%k;Hx5HefD&00x=z9Gu$P=-uUO`@?^)r_-nX^WlNd$^RsDbncLC9_Z~f< zq6?xJ)I|nCzdPbbkFm;XHpRbbXCuNT5sm!N5PRe;&T`Xfg}e8#Vtc+KHPPD?xTd<| z5vu`lz|KqrnEKBfq@`veA(A0dDIHXp=I>$dO?#SH$!B=l2aYFfW#=&Nk+hmzxrl-| zJ-@^JGWMX|ZA^*TJQ@T>W!XA=d6g_3kChgvS_2L#X(>MN)RL1IReRFrDotvVr*(*d z$uGGonSN8LA8otNCtHbqi#DR&QHe^O!!5y`xe=wMXHi12wNG@ugB;0I#>C(6MfDtke&VQRte{k?}IfO^FK zjiVh3XDP}eZ6k{PvYW!QVDF#w&{^^{oK}6R!JuGXK{C4e%a$Y@?y2}|Oa_TsNhd~{ z1>uX!GB$@Op*4vndOJC-0QrT0raxYO@8DIVVXP2n zts~e7IOy=~@WWrVd^CBZ&JN8`PhCEy9}2zVxuY9)moRoZO02~pt6!m8w21d{@^uJ) zm)4hle)1UZ`IBI7U`#G6Eu7(RAaYTrAE25SbLZmfvi^d$zXkz&wtGJ~H)+-7Wn zvD%d%54)+eAop%%IQCs-D0ztD}>KxF?)+guO{uWn*Ys1 z{;y}%IVCuffsm4=OM0x3dKpKhe)^tbrr1yJ0O?!6P+JSJ1EpDIDBz7U@XY{ytP^|%uZWr_q*t&>Ow0Yn8BWKn%+=i} zBmkG{_@(?t+r(5bZBPYEnnw`LrPdcG;d=s`TIK->f**$B+QnNK0tcelwp$XB8IakQ zY305LZf%}#UPGR#&l#YdKFQnR5YDaD6+5g#ga6-W1kJ<SrJl0hX|D;FkE zQ)ipyB|vZ;#SUHRT@*)F1I(!)$HNchf=NW=WVK8|Lry-XXnHvrdJQ}gk8=b$uuqDa zEtVrdK%Ah2e8J5mBT=zB5jM-$^dqUK23%XmLZx@>?MHr_{AY=G8Am6Rb8+rKvQJEZ z!9VZ5h{rl@>I8;&H54v(qb*3W>-_&AexUni{%Zj!q~xD<|Co?Es#>IED!)c3E5RTV zexnb1Y4806s#C$)ohq*{Os-%dE{9lpS6;_@=a@Z_-05NY+r=Fj=(0K?=4;)FX|=E6 z&N8z$hDg_K!5P;YG%)?sa9c|_{Z#UFtjuB2%@F458)ldVKKXY<>-F$!*p+D>2Ldpp zk!>ruxQ>6bJU_l@VyKX zS**{;SS{r7sO^YGHZ&Ek>0OMDiN`I?y0NO0ud4{Q(&8IN+y5N?>MN&F-vD+lw)+kd z^!UIH^9nk<{JYekqOGZb`7*W^O2sAX27#CKI?U7I!b^Sr%tw82Wp^$4O>14CNZ(c~ z8A?3TWddMqA2WOjCCal88IC@+?XTNjov2S)ClZEH(qEO*#3MNT&oHbPi4wcpK=V5v zak#&3D}e1)c~euQtoX~V5^FU7EfpjL^ko~fY~RhcCKs!z^vOWi0of?k(9z9$+3x$5 zk4VLeSM}iJYWaTIp;lq-GVNDKvG1R4R#G0RN83O?ga$0J z0-QFgDJ%Si0M%n2!6W9ef5Un^mtkEO$~RFOZhlNCnFmDnX4V`#V=Cj%o;8g`w3Ho# zO4os^YFxlq!K@zAf;Zzp$N#>-Wv}lo?07^>=aZ*EJb1H0J0*q~wr+b@FyuI@bOKi@ zqbGjmY{*&tl1v{XYOEZ_oIrjf2w3R0$cCWy_@{qrjBG6TjS8$(V3$kTM=WSY47cB{ zQ?I1OD}P;-p<_S5GHqlFD`bX30>!aer+pPB5tWRF{ik|MRe9!IF5+>r67!93i2wZu zaS@$>^SJhA$P!pcm?HUi%A#_zCo5nZA$Lub&4Z!=gFmBn>i^$pyZ(^BWPPn4#<4)b<9|bYUqheH`vvI7Q=`+cN!A)Ja1-?6h3)- z@?;qqx}L6+(}4NCf1t*x9=z)z)KLK`o8Pm)pXuFpkFg~t!X)uMy^r~L+GCgdrp_dT;Vey z8*7!HCbAC=IXd?RT7A(8<8{Dr9g)o4*Dcul zlo6lxAc4*NO$erp)!$-4^dFIB7zUPOuXesFP*~nm0c~marv)!HTukfCqK|I{Jci(+ zX903v242MZ-rF$ND0mXoOGUj#P|mg0-z#z}dnk%S>==NdriKoeLEH|3S;4!@WjQME ziTv>K^~h$XL@2Ctsh~4f8D*L8-EusRh$@B@(X1>hz!~57T^}IUeZfNA-Kb6h z@y?huQ4l>IhPu_s9z1El{!JAB*%w#So*HC&!C(K|mz{Okzs~NJ&F?`;6OqZto&-d9 zyMAJs9+GekDzd`S`Wop0S4m5PPG3cJwJRBIjNwX+Bn@9$vYQH~!EDwI)*ax~)!?o6 z=hPnE*#)qV0=Ic27*X696sBVV6GL&s%e`xtQ*BF!XXkezdcugEt3t}|-%zbGbr* z1sRDzD^mXT2o;)(;^g9rZdm)>!Ii6eWVnD3pSn)L@M%g`}MoT}n4GA`;wp z=5S^{!^d`1;uD4Q)E?~}Y7Mi}Z`+@fu}t!ZHuCvRLURK65mryU5MGN)7m}F-I{vtZ zX924c@zw3Pm%}Ll000K*P9s2+kadWWM~xwVV0^1vXLG#TaFoX zf>dG>)G8R;rC^Q9JLic{Vtg;db&OoeCW6N2lbD;H!vtoO$I;aW!dtMMCR zGN8!FU!HLO?i8S35w0_mBFGmb|EEO5N=F2yhcBVup$lc5`IYU6-*C@E=H$N8b@vnR zQTWD43y;zq-kw&RmvgzhF69{1eLKF=z)7+4ay2Uq&QX*lt8qMu>CEMXi7#Z)C+7s| z!q*gmH5p^eH9EN$$j(;sS`Q*HA5B`|Ep1Z>Ws>X-zr+tMPAfx%;5xg<85-v8IJ$q) zf|ih?_77Gomb&FpZJMz>K&($2%*)@QN|Lc?F&d^%r0FJwz2e# z37-&&_xjLm)`hp7o%1tVciVEyd5qYL?=dpmM&BsM_{tQvLk(^HzhKc@zR6uE^G=K+Nj<*zD zR8pMc9W3oe1s|rU77@Y+8WRL^*s!yU@6C<{);{C_dr1Y@Pyhe`4!{FNIeTi{SU?_y z`>dLXhzK`zwwJhaDJ@T+Mm@w=r0007BB3~2<5E}jH zh9Cu+?fiwwhY$b&|JFQMWM-FqwoVUhvurKMb@pf8U zQ9o#Hz}%Oppu8UyJ6sHLjj_?;I*N_jIOL{$Vz+0OuJYstnJdYNCiOpP+ZD#&WNOH` zow^`9kM31-V9yGtmlmN@|F54LVG+`=ms>3)-A&Z%h%;Itc7IN7sbZzbw-}E)SY^?K zeh6bPUAAd(lDG3OR`}R!xPNrX{s5kwl7!v%toYY|QwFg?kUdr`)+v`%VlGbT$Zi%( z5*x;W*^h7@Y&vfh(TjvPDv`B#rIS9+21hN^?sK6BiIoXztVFsV@(lb5JE(#iD`pm4 zsTmI1)b9z!(lmo^^IRtZ_y3kr>oN{qgvyvdQ(n7F6w!pjDQVh`Dnico#+wyLaWK-I zk+PhHh=}R#r`QF!x345s@{8u6Lag${odq~H-+p`92Yq|6hbCL}D!2@f(bMYFQ@D+~ zEp_P)or3sp7Bsr4Gh*g+g=uUK(P{u;tGceQF82A({AyVKQ(K# z*DjuOJ?wkoUaGgDpsu<7JKa0L)S-6;tGMYe@jvvEBXR@5Rst^e0)OpPWPtc^e6lP> zUs(-l)^<+pE0cDoi|EUmbFn!(CCvj?t&ggKj8R?Ki|Y$jPeKrJa#Afn*mQbD!_*kf zGpsx+$i<-caYO;PQ4=}-=;Zf&Jr(F$VJRe&Lla-!ItL&>-hBw4x zJdjz7zjH?tiC$Obsk>zd+SDqxVbVb+6=GmPU~A5QK>onhfEsjg8&Mflyv$|Ji6J~~ zf<_;-e+vR>*u`zN@h@PPNElWMAZ@98Ignv}pGCm(<%=XnW$?sw`|685Ln+4BJG5U^ z2|Cy?wfKYc5f{n=+LS`QC5)2&enVQ^t|)@RO|I|@3ZtxfNvFqw^U9k(Wn_&piTSyp zB*RtyA&T3msIIPQlbN~ZHL_0CttDOAr~j!KaY`HEcQBGqqT_{_irUW&^`N4EbFcvh zeXTW!IDn3b=&)8yb@B0E9)sXz3z+54X{N@RG2KD8&NAky;|y}pj?KA+nENBZOalAv z`_FhYKV_U?{Uv_@89Qolu$S3}$MOzIdPBGKT?^EbA00I(3>@bawCmbUrpboOKEP4C z%fmlW$@400PLHp3T2NsH_9Rm!bCv(Sh1jgm0cwW{x4;MIISJ$@>}g`u(s|=fdyZ=W zZ{lb|lQ8GG*P;%p3D1@3LanikzPAwEI6UGDW5{<)%|Ph;AG2z(M--Cw+wmYDs`>r^ zA2c#DDnwX#17rv=eNM&1bfOJiQd#!{$(E8^mK?7JUfeqY2bbZdw<<2%{&2XOk;O= z<#lrfcrulzQem9=4AHQek-=6`_gv^mCeMASl9&tiNM*p&%{`aU&T86EkNcetr3$&t zIRGl+;a^YXzurqOkTIu ze*bs4(K^U=QeQ{FTA+{j)?tLKE5A+!%J=HOut-$rOEP4t#WB?-Go9OZZDX1eA^;M$ z9rv}CfDe0OoP4@t3W|nw!ajA@3O)k#M1-n~=x)P{X+*}RLDIbdaQRp6;632712eh> z*ekxc-ZV# z_@T>?b^04-oog{v zeqE5J!b?F%XYq&=Z^hm%Xe@-KANp52qzdUbT@f`8Jn%-ZaCQ?Up}yfw_j2(nF;N8UqGDrfKSASx@o%u7VDxVS8BRrc%9dEWuWCG2ee z*(Ip_)X!O+QU8W*Y+S-(_#8T8_8ondMkkkkBKcgKJu8_i1>zQ1XKfi)JO(Pb1+*!j z!giehtFs%#3fK)F1r@fYUHVo@mQS%%BW~H#=d@VMUy)fCt|YuQfYZIdK}G=FkO8EX zzdf){5d`@A)B0Iqz?|fA#dl5Qm$85=?Iano>$?OPZPNN%@^_0L?tla(vla*~i5JEb zaypdP5orwa7;2Rc1~Z%{I9|9_T_fl4Z{HNSakn(;Rs?ZQR$?qVn4-OgWhR)xiK%}` zXB9KX1rdjb^eCw0g$T#T>AH>@Dk>xur`7n^-n*z%ZaM2{6T)l@iaLnE)uR zkqxTEv#0G7A;0cfAK8loeUbhbbHe;ccw_~fspT9uU4}KS?xQAIrT>{{X(E`m&fw;$ zvEn8*PGHR7K1v&HJT|xjNsar$A?TMAL(7z+!b0@)J7mg{WCFtK85qY3?;!NcW}9|1)ZA3wDhdCRYIHZ-T1kLq!1Su*XW;5tA@qg%>yFA= zP8!4U^=t~I>Mehh+q$~fQz0#cOhP_MBi0fSxgRNq`N}{W*!EZMfuJA7gL*V~%_ zZzY-Xaz_sfsd zry|$<(c06v*9LJVM`A!>w~qlRWlHrMStK+(+5`9dXAjqH%>9}J7EL=G-*B9~JkBsE zFem=-cF|OlYQ(5$9rehsM&LnkIpbiI5`F{$-li;HDczYLT`S&DjR5uerb0RS z3bV1CV^>WZkyo-x9(xvyGGz%^U5cCFU@KKa20GbU7vCwExz`dr$@nxP8@hi9AbAk4 zESO4**4X>ub9um~ZkyZCKnLMMS)>P(wI;nPD$;fHxF9?0hWbW&^vV}wrV)C6;|P_D z%xZm9{{VO6bLDK(s)zp4rL0f(iaUifszGBg!v;0Y-4XgLLeTLX3vXVH^BH9pphaHVW;coD?^3c=i zcMMg+_YI2sIaqpxJ^8TC$M=R`dS1h7gJSz^%#6vxZn%5ceYAv|#$4}tr6;W1Anr%^ zjO~b4(E(cf+lY>;PG0(Oo%g6NPh$Hx-qJ#gEs0N=>!> zsPWBh^iEH^#bBJv;DL2@*7J1Ew_BQTrACKGHfkll81^GDv2=W>SU^t7$2`iiK@^c0 zkMxm6{yWiA>Kjf-?T4fa9VM~)MATmOgOLgRO9~*-M=HnYbhu z_^X6s>L*sKW3`Kir!1XtLr=&DK)F^cALgOw0Nu&7j?uWRf{AVt)=v%(e(}-0 z4F6I_2x4D>teZ9Ux^D2bfY;Z(ccTF%ERIKe*R;WtBz~&KK$*^S<@#|1vh0~LeEUiW z31u~?(ykT?oZ6G4gvGspwMe4VAe3yZMTWwNkl3p88W;|=BBNeidJ8GN>>KWda+X`q zO6l4|@!&=L&MBTw05Un=s7-Ez_UYYemNq5mTF>p>P2CBVBmT>b{x_igQ8_Aq(A(hk#! zJFO2sk-%E;dAy`wRu@kvd1rNmDhWkAMS}E4%k<=|mca3a+hsgl^mgN5`upxBJ;`ID za!@yAy-K#^@!w$mS-e`c6JW6FS0fb+?BwG1sw1nX8YSCw57z|k`xA?6{D7*(u($l2 zN_4;lFVh9kGQ5$>&$PDr;VE(#(w&xF7Zox3lV#`m7kVk-m$+el7M~0x;8>@3Q`O`0 zAaUlaC+lYpANqt%+R5`E-4r(Z z{J?6*gE*BQ$@Qy{xpwI#)MwwOJ1U%HUsDBy-}kdb zCy3OsKi4UPDIK3wMRKE^uq5|~hdTZBmO!fHz$gD*Rm(FwIIR3>bTI`Q9OLN5f@rvw}Gv`bmNwoHRwcGLrp5#c{3qam-E3z z7Hte8stS=y%vLWeq;;Ap&4t<7*9*M|RLkQTUlq)2&AEkhG)8Ek*<7PPV`nj)t7GB6 z7A5CN6c|bDrzGa%2^*p%SSKnTSrSQ4HCh>+g_)P6ORD5fo3PH&vgC5ZnUYkL_v2<} zct>e6G9wot=Q%s7$v|bKdKugV+21vwTe0U_adW0u;;oA#H-?lFxP{Gd?ehUaL=%L{ znl9yFtyHZ7hm#u2eUJ`k+idHXS1k;r$=XT#Or=3mG`~!Z&taE%%AevPf}3T z#qAQ1YLmY)AHIl?;e3n!2AYDxK|Fa8cSQU8)4A;<(V7mQD5a>FRgBTeM9l~8v~>9CC~tk6aWT=6&b#Vzm~lC z1tPJ-cEjBpWi*p&26j;_TGQ6!=`;yD`_y<5#q3S7W@P3Ouq@bhiq#(s6x#1(z|zGo zrBuG`ke`yVt^NqN_}(E22eZ`~xj@IhmfPz1ATrjY_Qbq_Z&ogl z=8m2E8pPUw%$mZTL2fq)M3#Qc5SK+hyrM|38<$1#Wwt@g+p`Bz_Y$id6+JSXdnDB&+mHG{L{{Ix=~~cDUiEuI*9n`0p#R`^N2s^nJ&QbNNVy zrFY*v-WJ?it&$8E(MS>oHEayJ1FtZ*yjP=mkQ9e@9Y|dt{T-7oLp_6acD@^OmN32mbRjPO6O;MJsBjO z;9|xv%1=)k4p>@ZIq&}otxeAXV?j9i5(BY9dNBN;9h1d1HKrA-2w-J zK6Rz0;e<|YW;P8t$S&*01PztUI)r9l>E(nMK*n0*@xU)_*GtC3Mhtu4JJL{mdv+An zyPCatsNAsE;X_hwf~B=mo?|;v9v)LEokb?LDC#*8KBXEL6iXwqWdpnUB97t4d_y~Z z;c2nYyYdZP+P~$2Z(*9~$>iU+pm#A@l{PgT3>{G3RMmNC+J=IR{_v(D zLc47uUt0zp08Z}xC<7=zx9ctpv@E9B7rlp)wiuv4MDYMtXh1C11m`rdz-1vS%Xzdr za$7AUO8&l-t}fGP{MEjiWI&)D>OxT;kU;}DJ{CV%b`8eqkv09n7RD<~zN}piZ9_@F zwgd>egB@JDk0)oVj^Jj~#QVwJOQv57Q%DcIza$O7N&o-=aEXP2AF3Hc4jc=?&Hd?D zd~uD6Rjiz7^;+9<6`GA(BqX{HoF}!u;K%I2f&ULVp~wCHP275fq50k-yN|u7Fboq? z!IwyyLz15-7=1MiCi-_19=zLYpp#W<-F^MaZHSvsF-UjC+YI9fE}TX?@@MR02w^kS zHH=mEy$>b;=Z8+x<_(P2>yeu2S_GI}<7@*D7KNc$^hV&i#xdT&4JYp@o73U%`%hwJ zyJm4kk!s%Gy8B*ATKpdO&Xy**a7jd;<)o4 zS%OT)Xf9;_0=!sKfeS<}$YZt#);-AeR=G~YiyJ{_J+Q;r9#Jx;0iq@l&qrahgbD|| zqrQ+QynHg2Fc*e7!ExOC`3R|!8?ZZsB{XeHIHhx$&qrm>pX~Q5q62EElWw8`4S)!t zy_u1X5#uvT7`h$r_PV(8-f*k4_qWV7g}OGZl3$JXfUwSp-#*^6=iNh`F$d44nS%pI zLN~WTpgaH&*$zITIB(YCp-ekPhmyHpiLL{3d2dB)nsTlCCn2&e9T=}6m!2+4qign; zBGK8lSVM1`Yye{`ztSzO;ynMJ?*U2_*Jn@aO{RhKPF$szN+5*(Xh5Q02OiD{XNhOA zD<8d2B|iRzm2e&`je0A0c4eb|4coo=c_J~CClnjYru`%|(GKPq=(Ew_hK?*It*HJT zH%yAZmc75e7{l>idtCX;U5*urh4Hp77+Xg)geKj+$Y<_mrnoTna;vvM_!Cj_#<48- z6cGM&v4uPJmf(ai17jppz91n1^G4x|Vx0E7XXL+_5^yUGhLkIhAuFC$FW)lRzLBKn`w2QZn!z6 zv}WM39mz8MxqoTY_f@i=Hp9#&>2mb1atKeiqzN` za6d$mY}S`ia0ST8$zTx9(8{$#fpV`OGPLM3-v>kc^S}`sCtcl8LaYwt)>gzEuaWuU z50bNLZt7R8t)TkG^drz4wX`WKh$13=NdleJ7j;be9V3T#2JCh|Y26pV*|b*jZQyn0 zxs;~B*xes)D1b_XAkJywZeu#%Fi&|}my)Gr9uw#`g$yIY0@AQ96kK?`LWtb$Nj5^E zbd?8(M^oq_c+z%Tc$x%o{$NTnWy#SXFRF+<5QnFfb*O2;9xNE+dDS50dmRZY5X_JA z_mpt0U#T07`U&Ydd8u^=tv|x-!gFy@aOi8c$p@fp;Zp_4kkoqH?}u!i$Zm42xGq+l z@DI?)v{0RD&mt0fId?M7lMH~Ok-9#V-@=@1?JWd!4N?*qKQH4qmH!H7Ts0DUs=>Aw zJt`54W2=sm)f!D~M;de9jV_T!%{V~kjX=8N{A*MVlV)J`r6t>R09bSX&+No}S(~DP zL=&Q*5?n9uxyrpAcK;fhz5r$$z1rufepY3lae~;B=|tI@w_-%76o8Sniy;4J5Lx9u z*1!M1@ff=@x%3zxWDUn>b`hzw)P|Fd9CGozDbicVKy8SN`vjc+zx#|0#JW|_OOdT+ zzqcOhdUuxB)||DD2Ft!Df$lU}zAJfTM0fj(+Rs@uL=8q8H-04FF#(B(2liBU%!#Rhg zXi(vcEa%FXiKf~&R74$$W_3B$*Q3b=25N@^-e`3Qgwe{!E7x^=YRS0OA_FZp#B z}u5F_XnmVX--!W8$!&(RX^O!BZ=%gdg0N45HoXdVZs+9S2S`6se-CUUCi_ugv& zj+e`8(oZ1zd}c8j*IRhkf}YE{)0(XEO0p-J2gTMhV0N>MxVQxah4a89|9|#Xo*Sos z1Lo7#p@^ec9$4|>Zl!0!_6a*_@H-r~R2Q|b?@)R)ybxH7Bt+-wyGjV{30}a)0f)JC z%^i**03r>Y-AdN_FUa0f^N#BF`%MKygC-Yt{(K~YJxO_XwXT2yi^6%!q$mIY z000000000000000W)~<9Qy}Z36URIrrDfg80kez~eR9HZ^ERuy_n}!1&AwlsUitwV zmhV$!ps;(B?Tu6O5t_)fG4d%S$XVYn!QiC9&!A@nVsff#6|KZsn~B-1L0`8R@&I?V z>L6}@28zsrqGENhWnPmqJx9Q6qA|it8N#W#jK#|%FXy_|qy#-qb~0C#~{!SlM%lV1yn(=@}+qJx|`Lrg)4Nz;4pudrwji`xfLEn?0h{8Yru z0qQLPF?Nvt-}IMw*&46R-R{Zo4i}Rt-d>p<;Pyq?g|{{oej@q^-A&2S5?BR0)0*aa zAohDzb6_MoMM5Hy*Di1c%?bov`iC=8stCkEc$t%s`z-uo3&+2)Sp**4R z7U)=z_f1{FR(Y||Icfd4qvIT~bk9-ZXZZ>(aDg>)oBE}phZt$~R5%SMw)No1_i*DdYlKkR)PXCH+l3jJ+F5`xcV0BUftH|B{ zoF3CHxuXCw5xsnG!|_ghY?J|fooNoWetIII#&RM)Pst|(i<*Uew3kfDNDhYXq-T)1 z#!^5Ca-eTJC-2OubuG2VnpHvlR-~rR3VZ;GJBK3Xtc+V~LK~ZW&?_WAjxsFF34to=XbSeA zQktSo&9Ogf4WJCc6kd!HzAr^K!Gthzik_AUTeA9nQqET07xrB-S#@J*{xi~hL8ktZ z=+{N)NuX`}T(AEO0+p(wpie2zOXNlt4lv__K~0*0JMp#mlyJP$k~}BsX+euWIjSTXwtUW(BkZK^<*Huj|~rDv+CJuSHHejB)gTc28B4 z^~~uhwKZDV!zyJ}6bQi3o%*-M>=zEQy?WO%sl` ~?wQNcnm$hZ*yT=W3bF#Q<}# z)YQL3SPZaoUjl`NfeN6>8rJ?c>u$bEFHrz5T!Q73w7qD9usv7AQ&tWvDRotB)Te7>4neT)-~o40J?t${MV2c(4~L9y zZ0lx;I4`$oj_BKO5-|SI++z?iV1%N(aT7L0RK2lBYTgwXjV&VD(A(|sJP;9PI$XC^W#HEb$1e;&5mhto1>eHxa54!kg zB^^$pd~GxE{Sy5;Sg5=Dy=J3Rx^s4)k&J>q@qnRz4Y_@*jm;^eFnf}k-)eL`*^P+| zy{&2>-y~^+%n<3bIJm{|$z|nbiLli1{7Qj$Ox7fG^00wX9$Rim^_;~pOB2u59I8J0 z3;C?p=&)jS)E#-%XiCIyzRVdzVf{#Vdr32v(@G+3QMOWzcN&?bF1n#X2>uw8K4lG) z5@#kETzaD!ZuAUD<(H1raZF*2%_7P!vA7lH0iCIe$DW1;VNdOF-rAV=?57f-(=x`+ z#0f2~QrsJ6MZ9$T7L`S7%#Pyv+-e>;i8A)4wS5`oQhekS{V=Y4JZEDS2jDFxCF5bU zIOP`;McpTI4XRto&O6Ej3IH^Ox5#K2&uJ%ua49u#6bn^aN}-jqR$YxDT9MYTQua8& z@l-SJ_IYkeY_yG1&maw9^|IA#(d8NlI>P$DAiY`n!bfoM;eBB3LTMzu9hWMNY0yS$ z|wO}ET+S%04<{gea*5}N}q_IFjGk6Z^|ItN}c#hm02D z27F>2A_s~|yQ@pDQfrA}wj^V3Mgr1;B9V|^ zv&}$~Dedew`WJ~Lk51MKD(bV)PnUtcWn|C7n6I=(hlg64KjfZR?}e_o`f>QoAt11b zqri#8s-mf|ZN~arxRtz)Y>m37{NQ?siqU8oU7YT)u5ygurmKY(CLX;qQ%=m}5SvXf zk8lrtT{a)^3u#tzy|lSMevYvKxrpSz>W7X~th3jdcc5TWZW)1WyI6(CkHvEYsgeR=b52WOU8C3e@yJ@dlM%9!FzU;v9@?{div|>15T%8@|)v zr8d0QaoENsx2Girc4*v-CxFS3>U4H3287MP_TU#L!lXlB76RWJsG$3ua_#FlV2)*q zN)QgfN)Rm-v;$x`T4A`T6l20e#G;z8B2>T!)tf)Ubhanwd$zbR0J5&EO~o)_h`PKW znk{HeJcTM=4={M=XJDZE9}2P5X1DrkN4oBK%m13rjB=KHZ5IB<3_R-XOf1O}kP_Y% z^4cC(adA(8amJn)_xnx@8)GCN`_|`f2GmW=Uer;yHAe%8ryBKQ&&P$39h7@CBR$-H zJz=Lh7|kCW=XwAYCIlz)c~x%fq6EakHw<-G3A5enS%Hd6HfVvFcTShC zcsXxDfZCA zQIe14(=DM<1IJJZrJHa=wBHGwBz``011JR6*!`>#0?$#spe~^#Ox6azSV1qo@WCle zyjd5H?Qzn;1itG@I}KR|cXTceMoD$a*T3evd5xCz6fwU~oTEX$fRsw17<1mc^)yqp z+tB4_2xI8I=mE~<1!8r=QER5Ov*x}zM*4#LX4k?^qb@R$_PR0)m}3E7#HXWo+{5F5 z)4_~t38zu!*Bz>`IDA;rtkja*j>-X#LX5&N7_yV`_VAmWGA8WobRt*}w;m%zWA|{% zVl?b6Cn(6IbRdXtLRws-3FbfT`(4Fw4>}=&U&q3;@;zmCnw;y}W|4eRj+;63?|=ra zz)f7MOhapij9#3UxWwhup=P_j7Nmv31k5MVL`SH)(dscgm_S z8(cJE^!xMBM>Ugm1swyF6q-5foqxheL8!C2$xD7kL5&6w9Q51}@MgWpX|;0rpN>4yjK@XOeUAeRdkN zU-2X&CnQB;%9?kir;l?!qs)niR>=c*@p8wBL;%|yX!aQtNlrwo!dRE7Ea%xZx5F5o8k1U=j1vH zF?AQWs}wC_FYm^`so}ddcM$CAfYgyn#>nIhG)O9Dh-dB-z+=Bt4%!j@D_JAt8>!<% zNl&+lAG|sXTwz3B>qzeN?9f64V#D-WyCcF?|Av+mqkyRosgutE*IludqyyU0%jzNpZE!pt`38IkVhH1$ar++q#*%~=EL&_JA zSx_m9@`pe@W62fvZ4^~TIGR(d$M%#-_6Lb9KDq*sG5?7-g5m?8!Ok~tbCXZmo_v3y zn=*Fiz=8j2zen`+)j|%mNilsym2=0oZ6SYc`BK_;a`FJ8NeE+VkpbBDvz_C+8oL`m zFKcKtjy7NAcj*T#4rz{e^Exg@sjoJS!$ly4 z>}Jhsr&*!i1Q{^9n`1w$Sxy4Ph8N|{GVVi%f2tCa8f%CruX~JS0ua6+j2;h#+y91z z5U2=)D;ee;9VR*)e=3t;lZTxqGU}YbmD59C!L#*v{{k$}RNAD72T(i%QxAFrHo;`+ zKeRimxl86AMydW4R7%Aidq4n^gg67R)bEzT$vhYQ1(_=<*XLam^1S5+AK-2OOPEYY zLgB%FV$wtJ?rRS?RZ!Ks!h&M6tslb-c-CtzU2>Aj%e$4(Y`%n2b&eq)?b+PAUZYB0 zcsFF7vC*H2fXyV~yDz)Gz8(1eZLOR)BwCel(}9%kba}Yao1t_)1^Ys79xtv~3MeqX zg)NcCCs8P}va#>Jci0Ut;ck{}MFAsH)yDbkxrGT7FsblG2AcdjNofxJdK%#wW0?;X zdyib;v*^8=^o036yHoSWqgP6pHM7%(W5Xt z&BdxqUZRA)qy-em5b*dCqmE1&taNL7T5MW%d=5GL&PKw{$7>6J!TZ)fUN|*DI5m_y z98B!04p2s9liO8HIP27%!O@IHZ8h*IiqzZ9^nAOdv5+Yv%#$l`_K>bIH4ZfB+TiTt z&J5_k5k9!Hx->2fQF>Cil3E#C$eIBUh*NAuV!NUqZ;{+S^P zNO=t@)8DzecRUbaWkKWb#>5i@fSr7)=J|YF?2Z@Or5Utec1f|~=@&WN7g_>-MavWp z#YvAR1??mRnAI;Ul40LF`^Hwp;Cs(igY|~rH6&X-$*X(^py7~eJ$P((XhW9nuE%%_ zxXQJY4c^b(c*3kxQ0d7Bom1^@6+ulMRIb_>V%5>A7i1ft3hf7>oogs5QY*l8!vmB7 zhn?st_+!ZW{AJ?eSOp<<(64xNS=3$m`&|g=d1E=}6R)()H+Hc2jF0NnKY=#+jYNU%SDmbI-$oCJ`W@VjjeO<60>FU%8lVr$vCRsqx=dI(oZ-Q4XWiGq zOlo3yQ<`wuh*SQt61Z$84cWY4Mv486d!z9h>un}*D7w8Fpe@l1^gi#P;jzw>LSn(* zWX4OGW>g^#g^UQu0nv`5arW)=^`90@`m0T#0;4U?>v`M zHyqo~zQ$K%Evpq@#Ef@A^QesGSA}@{?EE@c>Sa;afe5GpoU*=r^1&|?>GY{+1eb6x z3+0-PW4$ch${%41umqlyxeSvhy!Q_(O{d4MPE=j)BreQ}8ktk5E(PXQG;fWfEpOcv za>RCjUx=Y{q;4{lmfJhcEo6*Q}s z8S7Qg!`;^bo`20>kgQ~%(%ky1WG!khtUxta!0$0#T!2%}ak%VBNE!dpKpc|GK;e4o z`dY%Mwh%uK7w%UB#B`s<)|9i@&5v^u$_pUwBYjM?*LK*Q5^1Bt-aWek#5ROG6~7cP z2X8xa*SfuqPD1*0(su+#@fvvXaOFw#;|JSTqk?_>u z1Lw*aH@AcbNbPo~1lAd2FSN!G`3`Lj{S6g?{DH;{$OZ2nWDyQ>7fka zs6-0F3t9TtDE7e6=>2TE*E3buO?bnOtavlWh-v|5aQd)NiRD_4!R2BM0BN#=pa1{> z0000000000006KU=pohNhOXC9m<>`&bQz~5Uo#+d#QvdF4AXr&c=kxHPlYSnY3Rg9 zcNOM!G*BV@nQUP0Qc6|mx^#fZ=%ZFY8N$?^3)VA@KXJpgx?Sa@Z&rxfup&4eKe8-} z%q~RG!7=@K9Ow3S)(?^VW_UX6bWsr zwI&EsHfl&uObByk8+dqoO3~-1a(@=%b#@L{{;6{ugAUChb0tT}A zDzYQKH*!B$)PATkwL$`TkME(Dsb|7)g^xdlyTH@bM&X!(64~7%c6sTqmA4razM#Sg z%a^?iJz~L_6VUN1T?Ko&}!o%V6W+35G z&A7!uJe`Om_?2kf0&WR2S?SeEUet1p><2z7ode+}-%1+GVxvrrU43(LTa56-ZFZqz z^u6$(&GDPv0Y{b`mBOHTKamWfQ?qGvZI%=y>zgD}`t#|Pu~?1D2S1V$zy|*kr+yNt zbDHI~Ig4xGR73E_rKN*EZ^>pZG;Alwv-yJHzKe6?9%(||&R3j*GY28Nm;%W0O4(Rtr*4 zP4Sos4MyDkCG6hNT-o}`i9Q1}z|{bk#5c&`r3whW9uo(O^N}Hk>*yjaLwTBQ5s&L` zjS3s=jsB)p-}bAcOKOG8KV}z3b&s9rxkDX$<>=da=B8b4CmaC{qfaIyRbYm`b z>88V!Pq4ZfSVAr>n464kDdxk&YMAj4AuRHL+*>f0GS`Z6D=CJX*Vbi$TC=Vgr;bNH z3xcnPe`eEAHF#nG9Zp^mRm`#ji|Rlf6tyd`o9MbrPvEK}FYK(1G6f6Thcm!F%5H^? z@vXGxD?=>==I2;ig-QM0u`5TEWL$@HR$vhpo#JpI2jw$PIL5Kb`VqXuE$mLZC;2ltRVd`wQ2Vo-Yw|l<=vlFn$*4}4 zM&95KB-f66784*h`Pi^-UFX9iOV{Bz>iGvaQ1iT_ai;z#cE)iL4tI$slLr6ecR38c zSnP0*5bmK{HNz0}ZS&u~o7Ygu1UGm5B&oIR+2OBFs4y%1U}?}T!x`{>UgwW`%+7kC z@fQm#{6ycWM_;__0qH1_Ig)J(oAyK>^6TPl!WzWz4!XiWX?e11Z6Nk?r^h$97lr5wnNit%P2iN+h+)*PREuW{3jH@~ z-1Fn$N#$u{D0sYZ(V~B5R_?+4A%R+q2cJJr^4XcD@PHb_U?4yqDDu?hp)H`Lgy_$E z;P)p((N{Y)#CGQ}Wnv!5X)mhNGMl4j`r2WdU+Jhn$={sw7~!yJP71HQaeTVTALh>7 z*gu}ZD`t<1*9%rFzOG7Ykj)%q$3X-ly;BO-6{;*&60VrR-0Mq1Y*RX>`r*^g+6nA^ z0&9(1(p_Btb(Qaoi;0G7yyi5y-a8U}qwxfPOeBZzVv0yF{H}TutM2)mph1K>y&;=> zERibeSWf53?Vaax?GwlirCt$AoV9E*cWfvDO;6o+-{-A(K>{>f<)>tq5I9!E)#Z1% zu717QGt2RSZyRggcR5h74)5AN<-kmstn~NqoA$e22cVZRVCmNWp^s?H+sSm3t{VN# z^r#Nd>d#q0@3iG*9!sqLr=-HIX z^tP5zL>R(l#8x%DbS*<4%z(biEsW7Kv}5o4f8Ok?&z2Mhkt-sNhx=guOtw-l?Rzsl zt`1S=2p)i_Z$#0t)sv@pta|7YiHk9irH4vEEq`1dyYCy5s|9j%k=mE8;dE6*gTEV{ z0O;6q1WaMivIW!h0I~I$@~xs5K>^-PXAIO=pLSjzr6?f>$?0EZe2P>SoDJZ(YUq+G zjMU?{x~g?~OSpb~!hjdc3>e=ZyDN5HuCsCj=0t#5sWc&(G`7*voCfbOhI|Ig?WA|J zfcX}S^A^^yYNU1fLMGUBe1K7S6bn+xX|Sd9yzu$N#5ZlQ2LuT>bP8xM@FYKkr-Sv9 zviO(GGShMjmFk!IjF^QR6hNZT1ki4hQ|h8%VTfwtI0RPNQxVQg5cduHxI`A3CnsG_ z=ao-=k~*@u-8}Yc(tlKy6R7EL%;01)KB%CyU%Ej?hca^b+PE(C8#}Ctqa&{?Ed5sC zo!92-5T14uX(CmhzgE`oWl<*)CAVw@UU}t>mO;b*kzMG)MgYRs&eBbt zp9GUH%@fsoZgeCfM9@3-7*n(`y|>UKh)!?ct8CpR`w0JpYq;fpzZST%%tafaaK1sq zW6W3;H1XF!#DN5mb5pG}_$M9VN@)6#kR8@ds zAnelLGY~OKD3LR8$GXk`?|I%pt?`3^G|m?7oR)#g+cKiuN!L%#RphV<`5IWX2nc&1 z8Z{WCQm;db4&8Me;Lg^Sua+Nh<+?YN{v8m!?nO}hRT`IufFfH6Nm*Mo!!3Q>DYz)! zv8?%XHUW7sLU|HdVOH{%;#=sNa=VvYMNiymO`A;}O z-O(ACIOfqPcvfpqCexh@6|H9hp|{eRmOZ>{VU6qpjSIh5*d-aAQBJ#2L@VApbM$b? zLE%l5*vm@`Z05e9Q@%~!v3}lArrg4UC(lNbUZ5024lxNoG%X!_9lKJUyP>Cd%kUqx z@T!DRjGDqa6!CtFanmjbxJ` z4~e`(cax04Cmt-`)fm;Ui|f#%7&jhsn~1-&%m83s71na}OOt(p0*8NWSk5>{-6}nt zK{h~b9QOnSGrRtQrVKmSrIAe0IF)PGUdNBkMBTtSJg5XB^Y%*RUl-R7H&5uL^xlD| z3+4CID|$4CH_@clP%R<@d#m5dL>*+fu)Rdt=fMu-z;#_S-}0_5U1Se?yU1l&BN>vt z(#}WxMw+A0=fD$AT1(AVGxq_ZWgiaC?k0567r0j6dvol^{I^}^`aR5e0~>u6&BLpx zmg2;uPZ>6Qn^#?3vY_igwGA*vX6s`!m{ydZn>4`J%#SvV%r^rB5ajtF4{sS5>(q5@ z-gexm&qW?-dSjhVBEC)qf|xH2$swKCxlW9Crj2LGMG_W{#7pIRVSyhItXv8wcB_kfr5;qDtEZwm@`nj9^%fah$}E z_g5RvTn20&|7NS%Yl<=!Y<_iLLxnrn2bC*>pWe)FTUVFF)L41*uAX`e-moQ6cZ6{Q zULVM%d67`LC55DLQ~m17mS zKF7paLO32N6qZsx=irB08!Yyq#E1*a<8jAvBo?I{n1gY?7m<8{O; zu{daw1%WKz?nLlN(<}%Iw$@s^s4LzWUm2a{Gz|Ko?PfW{S+qtG_ShaYEf0>p_2yv> zdlLgqgDsdm@zenf74NNnw59W3w5fmr!jl))bzES=Dv-rzYQ!~QHCUjNv(64(-ZO_7 z;h-v&J#WCxB;-w_X@!g*g9CdbZQBPVc&-?fp%s}Lld4?^nAeLSd5Bm!JlHD~ z&5i*?;_c!LV{(f*L?Zd`ug3x))p*ZATZa`Rg)@pYpu~ zgEe6lR#)nj?eUT0PSvHn3c-2Fj?S_S%M&qy*(EJIUIFw{i=;e=-_pDph@8o7EC9us z>h{r#E&N)+Imi)uKK>#1ddE7#6qZU_?C9~T$`ePBDGO09Y1~8tWd*HjDho^)x8?e# z7#b9-3D`caJszi5k{f{B2`+;`Q`Aw3yZvcRnhMwm-mLO$3d%-|s7|q$D_nSs5gE^b z3eRQ>@V(VkS~b01OCYKP+N~=uQ|*}V9a-2ATGfU4?I0d& z#)LW#EZsRthX|XH5$2c#>rMg(_WHjq!FR?)B&68oHB|R)ln=y=`&FlEdQnaU{?b*# zIeZe4;f0bJx*Qv9m~m;u5^%Vqvjtik56TEeBU6XabzOkYaM-4&Bs&}}zned5ZSU`j$ zQIsl0_#L>Xpp{&2XPyPzxxuq_EY321Erq&T@g`%cTfXJUJzg6B2E%LQOgm=s==kpD zCn#zc%qEXOoUwHrKf4Q8OV4WCVyQj znmjejJ-z;A1F|F11hSJHw>vqgQD_Ul`9%kA0^&g~=*8oK30JadJjWma5IiXW+ZQ-g z#3oq8Mm+G6j@q=&cljW8^t+adj(xwiZ~UV>3cBt6hs8tUQgEMA@<~&}IKu25>eFNu zPd=aluBLx@o0Yp+kk*YOW&H~^-_7Au8VKDte~{R$!S^}sZL^JMq-<;C)}R!&k(6;) zk_zO{Qxz~+d-w*voBmbf+!NZVz_2llWQ8|gY{;Nco3c@=pSCs$*0aP~2OU{@;I$j( z1F06ROmZ`8qDVYt+7z^dY^d!ATrj(2@EO`wZXq*vdRT{ z!gFHhsVu#m$7aYnaQ4If;_eF1X|A3*FGt*Q{K5Y;4D@o)rHE^ocfDL8b$7rBrlnpH zPPBxDlL?(5@TI2sq+Udvlg|NbYB}T0F2|DLkTpMW0X#aP3m+q5k1BvJ-@s&QLIs%R zjYCG^d*sjmNvf^b!HS&ok2}%ol_AtdC5G!@hqE|)R*+;i@3~CW4RZwjtURVLT2^15 z|2XqwCWw(eW@Af!vUIHhm-Bwe^*_eZVmg+8G9cv3c_6U@{F6xgX|YMtR{5r$s^qkS zZ((VKqvhmNtlwzjNVW^yp7;-s=*QR`=gu4GWvkbUa_=7$8l4$Y23NUG6T@(2p)%bVy8!B-d)7=3{dmljZ4A}V2ulHG{7b@t+<`GBjwf+4 z$sbv1r=3UJ$BB@q{~T=nv{~xKRn3(e=7ZUGZ_qwS?h)#cld5DEt5)-()Wz0 zbhrlD<98n+vYx3RRW?@MKG19-wIW0EVg;S`s>4|EibU{VdGa^dZ2B;3Eshb9Ram`7 z{FvbFpgKSQotJb&;0NPmEspPPU^g6(qG*ip$Lpuzu?W8UF!s>~hF215WH`12vOP>GPmKnm&IP3iNk%kmC6K zYX|_?`CDq0?o)zoZHJP3aP1k$_5`3)rgTcHi+ZIh%;{au%IgGFLdK*~Hh4lxCBgd83@i2;GRpKF z72qZ8wdi(-%87hsK5#|Qj9h-@+@eItXUHbRT#+cyZWQwme~amXZr~+6Gd>ysfbY;g z%1;0dLAFKG19(NHH&k-E1dxX#8kqc!{;j+eGAuBeM|d*C4xJ~s>(GQd`9l)`_&l7q z>F#Kw3mp#zY}=%-L~dtURSiKf@g zi6PB))4=(FKlc6BGhnbyZy-Nhl?Rc#^I|j^0_?KhnBC9qSL!&oTmpMH^)sFA8FS^Z zxQTePz7zUOY4_GVF`CJBeuKJO3aVh|T&`StaehH~kgw8E5<(6u zD;^H{MDN7a6eSMZO;t>r3?6~#NhjLe4Z2dVn)Nku)+>Eie~$LTYE_d2=A$Ycm0n0z zF|n739H1+yMsny*oM!F%{H=(pEsjB$(!yA^EPw)j)asS5krjH3A% zXIFmiJKX6fK&&jh385j+dHXblH`_1TSNxT+ zX(X?s->2DfQ1d{ysBjsT#%Wc)v`WhpHZ9z-RDWXXp=R0fbt8v=$r^OVP+bKcmNq@D zrtCG8+Yo}^DAtnrxWZBp?aJpq&)}-;@(uf8F7{ObvN|l49l9XN%qo2AF7F4WodXTh z6tC=dxZY9yk|+1|cXwbK)3c1PLmD=P=ER6C)e+n$0<^1A`J3Xed^lOxUe%7pPWAQF z>9Kn?kSYX&HtWHpDq@|kf5&$4-ML_%YM6WIY^%-y1%rl4>7%81yrED)pQ#M_d+1>9 zGLSndzwgjzrwgWu5?WCs0z^I`Mm8loomM1Lewf6*gk-zG4WmixVQ+a8anC=MeUT_l zr6cbJJ725x`b6JMxC5mW8YYsoexK3eUjvw+v!U3u~_a)fmU?SS|P!;29R&@o$rzTD?m?vFqAd)uUWHQ0hGeJYOzQ} zY|9zd^WSVN)uwtuOl=(@E}9(BGC9}Y<1?xx#?#eTTk=2E?03PW0Wf_RyXh=Rym_4E z0PqaX3h%xH`VyDo^yAGtO>~7GFif!l;=nhmyJJFxO$QRv5mE=z~Z&DjOd;Sd>sQY&CR%C5zS^;9H-3Ff2K8xqw@J;;F&lc zl8KUJBCzfS2Is)g)b3vW)4G|Gh-b;XBM4<+(tdKB} z^g+d+rv5B%KIl|?7$<6IXou>WYn=^1ERKcmRZ&GN``fwmq%9gQzhv^G1x)K?I~tC8 zL_vc2fO!#u?#ykJr{sjgnZkYNACB_lLA+TLAI*(nk)Jo|MFUqCGHIOi%*K$6@ozJP zTi@I0k~lvgmAg|*f9dVf=We>+fVN6%F{2Ft>gvBEXjDUtlJ0xS%GR2F5;3g*mKqX3 zQ}&g_yHlaat#ndNuk8S#sTLm4{=Su(IKm9DyxwyzfucKXZDnY+sG(!>5c%zbjaG{F z`fV48?Hjn4f`iIRI3|Q6!^gKD0&~5pLHoYK&y+L6E63*r?nI6ZxhJU2Lz^Qm-Yzf) zq0z{8kgv(qt^$UF`xKz~rLq2Ej{pKUM*gcSWbb6g1hs>QaP?BIpsv`B!}dL8cPRll zg9YDICB6SLP(}N(xP0`Th}vT00YCY0oTRQrMq-^(OrN=2e;meBX9uR9sl;)LbUYT1 zL={5CZ&M<8oE7Np^H$vp6S^8@iaiQ1xcOEPI`5)Lweg2*5!wLx7Q>9f_^N*&R1i@U z0rIZjp^x9w``CMtdNFsOt-MbRrQGUVqGq)p9dD+8T zq(0%+h}DPXtU1JnY59qRFXe6Gm(-CZN~_dISo}^a#eDyrKP{+HLIQ@hHj6xTs4#R+ zF#e(KDh8R{h_82173n8l9`Kc1=X%J|Gb`*j2iJKeNS@iW;L=EZGkmLGw=LyJbC7}YYR z`jWZ=E}YJ&5sFMgzVnH||8D)js#<^hF{O<}q{AnDZ)gDA*%{G|w?&t95%h))l^``p z^_|3tN=&bYJSX$NBP3jzVV57a(&rt09&-GJ>$1E63+g)Kr&9d!^N4>$@8s;jC~?F$ z5yaTXK-+NL2I`<`;wu90!M9&q>KVJ^A{;Nza7Ha!N&~Y230|fTRbfoXE4S{%%T+{q zhBs=cz5ZPCdXtvBrDW`naL#QMmQspAW2(Xk0n-r__e0v%Y<;@c`0S>Nak1pTR;;h; ziYJ$~IIREOUBzTToYm2VQkGERW^K(}o^(d3R;CNx*co$$a(CLwll_uM-rt51s3$iq z5(*);h(u?c(XJoXinYcZ*&no@dl@12{MZ1Sx?|*$Z znS^f}<`0^5fKj_(MA>fNS<5rV1`A&W=|*DAP;h+IL%&@|g&$hjX!SarWm0o)`IVDlS%b8tmcL;KX`q?&hmn0ps;gcBnKDXhL z<|&h7y3uO^wSfTQZ2dpFDZk1OW*ifQUzuJ&xNk!CD$^AHuo-1eEq1TqD2my6O9@x= zzQ-npLt6)su;E@h18TSuGE`DnOxkdWQtH4Rjx^%(Ook)Z9tdtXmA61`IW5B4{Sw>R zKq1_)r9lXDe{CNtK^GdRC9&Nw#K@Tfo9mF^<2ZOqjX~fk2iyNUT$Mf~@m5PWMM}z6 zJr5Pg9trzjarTpLd`>rQCTqT#kby6Z!6CD^8U!x*25?6A@pt4+JdU&tEk4|yzlCYs z6E4SP#e?)PH$Q$EumNE^DxzW(QG(*h*|ZW+5bnFzPfJ4rGtdqP}IEi8=VXt z9x+dKv&UJ1k*R82wgc)G^N#Vv!k(gbN$ML~QyaY`k{ zj3mqwpk6NMX)Ez9>I@}OCBCcsWYPzDU5#i8U@6(Z2rT@G8sD+kl&-Us%b3<^Lv1t@ z8|5)Ki7pBYcr0`ESS(?{%Xu5({~Y09gcvP2EgUmmCe0*qc!A1)l!+*;m$fU_w#?n0F= zYqy%Q0q|sQ1Z>eurnL%;jgRIol1${~5l|?l~p79a|#Y-2oKMyd*^OAup&ILi+mPN|eQ3_8)eSo%VRBLdZ8z4u;Y;nQ-m!dWw8Ru04S=QWuc_( z3f<)#9)9Dn!%$8W=+D_4rd{2y*s?I=?L=#Sk#_1AK||2*v&y(PnUQfd4MRD*GRl)1jXH~d zwK06Wx?38#a}qZuR=R#8>fb|GJP(atP!|6lc7~E-3U)^?fH7&4>k$k&9Od&Q{k-spf70`ORfhv@^6hnqM&y*I=D#9i-06t4HC zesa4`px+RKO|{MajP=kPKNQ;l^g+|VJ-A_t(kK|1uV~R8Gj>l>ho8H7pq{(l9jbRS zA=`xu!uliKG0rwAh1Bs_0{tCq4TQqL_IN+oRRB3H14)H`jKdRSd~C?)9xE|J!%aiR zd+-8LorAw6581L+vE2DfQtTzMBSJ`&SD>?{qr8=o@Yn@7yDzM?@wB=kHKz08*nN>W z*5C&%zQ9$TTaSfJq&og#NMZ-a-jqjjXTvxAw1U-CQ#l*(C??zP$82Q zwc3rP@=KGSLEnfBS`MbD*iJXJwbh(97)#W_-3{^QxDtUAKva3e5UPzoz&2vOXgjM} z*l_s>aZg?MDiB<-yx3JAR#L-AXqvKL8HcrW!jD=J68oPG*!n#qr?UZ1gRa6abTp&w zE?|IITaFlktRC4#ths}%C#hMT@na%lUuBZLfX8)Al!@nH@}P#&c8n?B_3>5S z?!eX!b*<=o8yqlPrs+KUd6%Fus*CnX*Nd1oh-jZM>^TSR{rXOA5Gk^eQ_{6fl)3;y zU|+>yvH>xd8Qx|#B~%L?Hc^LrSmXObE2{o#uU>_r?ust_HPxhFf>L;8A9e^FVYt{_ zdR&4Ujf?iOp^y{iT9#KVQuA5RuXKZ4V*o|m)Y0U9ofsbaQo+OB$~MnT^xur9?cj&f zdgtYZ{08eb?+ex}jgT^zF74kj;uNNtfmP~9By=A-{RZ@CFgHonS4&~K^_wOH?9L9_ zFS&Tlm^Dp#{z~d(SY_0z789y-p}q~Y!8?pRq@{y2EW6$VeHLtGEDyKp@p}~wjzf1< zaB43-N2pnW-A}3$K$s05$??4gODzGmm$q`)mdAy`xxnkK_sIBB46Wr0RA`A5%3p8^ zhI!{;=^xDiC(lF!d0EYHTuug2ym?nwddyq#Ja?sM#f<288sbF+B?qP7|fX#wsu)D2F{51UK9G>CkGJn0?-17eCrY98GiKCF`1$tlpTRFNKL3=8!`yq z550zVAUvuCT>6|$x{Zt_f_nok%vV;>+_9+&EMGtP^{-7O%{H5w0%OzeQNp#_GgI`% z2WcvC*uD^Ki75^-XJL!xrI1=d~g$Vt^a6h00;})`qxq*?YMu5#DsL z+NiiQ49JrtwyM>?#5^MblvNC@db$v6Ybwa<*|59#ILHsn06TnKB{av6XQ`dezqFHx zYG7|`LU$GP%_e?7J-P?pix30je3nE4Wsig|Pwr1By2>78(}D}+Q@6r!CeImd-uSb2 zM$t~IWo=Z!)50YmHc>a`%?T$17M=Yg>xf?`piA;SyZGcA^=R1vB1ol)C0{qtpe--xuSJ`MpTWXL#JcrGkxKfW-kkjf|+RR+D<;?n?S zV_B)%YsfptU2*B3YPWW0mk?omz?dBDF}RWFNDuf<cHMD;w$Jsw1pV?E{HB4qV%I2)gD zLFs6%LI}w_k@Udk`YEWc+T7zQ+Pfq5X%v1K6BayBfVd!# zKeexgK#^U88!lT(LQ4hpZgO=~*-rUT(bS5_I-qAp70N_tSdzxCi7>gJ_vlX4E0Ws( zZkU?>xj=11BxasonyYP}1`-$&o}D*#n_{KV^PNOGWCr;w0T=+qdASItDL`9gj^1wU zcwgMHs}Fj=q2Qi82S=crMCcEGc>JYC-=ZwOdr+FnFr%<@Sn? z0c3Q4(9vzlNS9jfgG}9^E^>I{?t`Ri>0OQqzI$ejmy>b(SkL^OS=c7O2@5Giaz38< zyg9IlNMr5|J1pTlLSOhL{ykP%{7XU!Kd|fj&^aB-Gd(g$8mQLgNnDpOANU#&9vQQj z&?wDCZ`1PADODp8+WLRs96W^At z>c+FUep`q~7xBJ98C1tBX*QM0OOqki7Rn#=V z;Zp!R*(QO?0EU*%7RChuX{wzTz1tIF^3-LMOoGBdZexpMwu>eQjffn6&^!uqnGD;w?GQgf! z&b~67@$(~_VH~Dn3aK6zXaojDJ^$#U#D|N%Q8rxW0fwn%E^QneOAw`!L-O28-M{ZY z`wtwxMac3S>;wUAaE0iq)j1z&gaVnH7CuqY^(pH&7(qOEz_PEpq!e4NSTW5|+7Geh z{!RA?ajpy#N#T<+t3rIEu1&HIyzC1r#R%_DxO*$m!4OBnMHUoCO6M)0o??*ZHfN@u zoN`w-+LDxsO(XiWew~TifCAGbS7|8Sz*OqC{xymRE9SBiwUZJ(DFn)=FKwaRJ`(%~B_ zkSlgP5L(B`S4?ZE!?$3|LLiQ{`kz{q7!u2A0+dnV1`r2&0>H2`h1mCw1%n;Tl5Xf_ z-Zri#j!D6-V&Hj+eSUyrMIxjP>0T6$2ODWr?(HjkqIxRd6EVwE)6n4wDuP+Fk{8N@{vi4 z4M4EV7I26uu(IvK|M4ajg|e~MPYsb&zF z9M~39z$4&%=F{D{h`t#9y|M8*><4Dm+{vy~rZfX3?A$ihM;lsuxmzKrz97njv_jOI zTfP*{+LS!@ISofSP#8g1fAs*6J5PbZq& z#YGIj| z{x-l^?+B1d<+E18`Qan3h8?gyO+I zf|v@BngwDbiP$`EH+8=OIlAX?*aKagF{zg-(5&#U&j*BhwF16_8>g)*7p0ek*06EK zEO{XPXwufS8Ar})FmZ_EV{;PTH$GVJgcv3Pd3 zR8`;Y9#n2|VpCz$oy$h5S0Ff@rf2cmMQ@d%5v2jbh~3P8vQrqkMy0_MlA_go<)HXL z0zHB*k?WpbIAAcA*GHO7<=GpI))_x}%yk(qSv6LlR0kmGpN*bBc3SOAdSZ1Vg&N7B z=1W(j_RCi3`(oK2%brv=Wz0tE`YH-MJN9-YT(#KK0L0>$>L^J&J1rz*M(c;0T0HFC z1GSMw2l*+q^Ot_G)+nStM$H?rE7(=Idg;0Yfd|UBaMyn#PScfE2cKy6GHts86{hYU z_bo!oTM3n1sFXyg-K4UXbb2L_Aa6sGl^!@K#E@ecpc9$j<3E~%)mF!|)d&O}%l0Tb z&dUGjYwfiEsJ?gyBRo$4M%P|dxa814b^lhZ&NO?goc8lC2gj=QWPl} zbCb?>hJcVvyG;y@_4oXMmA9z=L#!&q8qt5(mKfFE>6C_vS6y!{9%g@>INB)C4Z~gWeoLr zafHZ|FHw5HZSB68n@L=;G}GHS$G}EH(TnD(6D}}Xgku4dtgL-OlSL70&L8s~0W|56 z>%kt`MAV(2CUAa~tKn+)Rca70H*vBirAGb{Kd3*+9?*QrVPnoS?aSlhN5uIz%W=dL zf|WL|Y;gUD2TAI7OZJ4ybkhdE^kz&8c?qUP;^BUXSb)$0%#_-D+ArmhneD7Luo%B7 zVARvbRaAT-9h`uSc#d|j{fX*Q!MCM)C<>M*X&@a%5mBzn%Pd+s_U$hat~EUj%5?_^<(<| zG&sn%Zp2rdqgJnbcrzfh!jdGah_-7KFY2AjP>QYUzXOuFzT&GWt;39!i)Tb@`1zmC zsA;EvWSY_l@fCX`My&<=k_~XBC?@Oex~fn32lam+ch|;Wv0nvH`13u5AGg-LWTB|j z@di%eBVln1oHMINOL`0=CA&R!*>woAY3O$Oe~YdX-!yG1)dz&GzqB=EzNu>6Z%)XS zajJ=qJKoL#S~s}mhSNoLAdLnn%!0j0JlL~uLD>C#v(Bn;imn*x9<^hG#Y}fA@ry-U z!UN?yAYtk(3mozo94-R}GMpSFe{I|mp!G3k+cwKv z60MHgao~Ebz@^O9Vkl8$peg3D3m())DP00?BF*xpb4F?wuu!0B$=vFptrQ5%>}q&> zhWO|a!Wj3Ew>3}&6bf;c0Wkw>T{nK7s>Zt=@-@$LxW;{ayCuX4*U{dT(}b_B&JNo2 zRT?Ho+eRJt(jUF?Cqlo$NjU7zm{Yp*JnsF;mnMlyCG>zTDw$JxM`+%o$kwN2RxjiFfyJn1`4O9(vO1%ILpLTXYyM9p*v;>N9x_+@$V zC9c3f!P*`vQ3cZrBbUuK-KVjMEAM_@QCGW*mF62sKtVCry0(DfKa&OVC26>LT@^|N za$gHRX~yqr27XK0D0H(nIgp|4tP$t8UxS6{GNN!W&Fp<3ht%VZt1@TWTTA1GQ{EZ( zyw@o{=(%yXF->81P%H^k%Q3+wRrd)&K}X*v_#|>C00`=jz*2PGZsf>%gC^v!2VQ7I zMUOJXA#u6=3LvH)v+@$h!i_Togx9#4{Y>Qfbr9=3;WUq2kVL*;A`jM@JhiE09y!|c zxoKv#1QQpqnITas?PChd5dX8 zCsNcUrpE53W`xHPMaUQH{Y;Rn&}zC%;>>|VnZsOX{*MKwWr0kFX0Px6x;1G*E`VzXUdHBmfxy-p4DhVJ9H-4r zM;{x1<-;N$;a-QhkiAe!SWYn7xOl?JHR0i2mbvAPT|qg{6vIftbI~G&s-LL==-qN@ zRDvHw(C8Q9EBc{q{`9WnlcQu#>IdYY;L}u93e2M0L++)u16yEwebaXRbk5L#T;@;L zuJ>cQ2Ex~;{B$bWE4h`CfB#vA@@&0|lzg6xe6M4b>+P_TVF)EqARj`4sQOAzDt{DX z^n^FQIqkSANcaL~JN_|~tBk)-i+c`%QKdPPr%x7;_g)P0OU5=^g!M+2k}ZVU;6*a$ z@3p54?^`wIPU(g&M$;eGFCT4vXEdd^J%g=;_?wqWCDaD}X}LeCT45V`m=*&J;hsV* z@m(5;io_lcDH%K55}L5~gipOdTk)yQd^9Y%QwV_1Pno$`k@vja+@2Q2LD1*2OZ6#l zUQ?_u{*5jkA#)KBVqsdbH5y{~dx8o|?Ri!3ts*-;tGv^;mT=WOfNpur_4-*2SA>*{ z>f>agAMRgO^BQp77gip+wXtr}P0@INw!F9CR%h6@NYJ8B5uS8yh)U=kpq68x<0iH0 zs)NU43>o%c+ybh$ZzB&xKkb)oF@6yV5mYD8It=PSKRA~(pRr&E@FJ8zrIdZ(Q{J&!!lZ4K1FMTLI=G?F z#h569hu3BnQi6}47pf~%^AC;z%A+%yIUTF~kY^B7vEB02Y%PoT4Co)Zh;Y`E6Sc46 zX2;eYm6i^E>)Q#@ZTEOr`qJDgVM~o6f|JB7hPs7Vx@j@YG6lj;UidYB>6r^exn=W* zrP3L(#h9)+c%w<0$U7}Ow*+uX>pb-Jrdac{w+A!87$>hw={u?aeMJal=jR`AKHqkw@1B}6`+#bU+MLW}bZ}3ob|;F<;(dd zs|ER!N|7Vn+}>B^_fhD|ZFwkOq}5O6WoAgDj?A>TfTz=Z{0G~Ay1@rN@z@ql4`)6- zooyDeRd`-5!fX9lKu!w-O|S4ILr9I?GaJRnEq+F?M`yD6|_9(#WdLX;7mAl$YyPJ6juUS zH+eIMbUNNeAlwefPsJI&x@G= zC~!nm(O09YtaES?l;Q~SDWaWyVs?cW_v`DBbw7NxOsz&Rne$g4M4=1ve=}k2I{?7d zNjnx*PbP_6?Gd*dDs=(*{EZa}RlG%FvpRz08lEjvP8CL^S?WNVA42|}0i*jb?lpu2 zOwuIO(Yy9Sg$YarPl&18y+v~Iz>C}1lhFP|@CQnRBy^ScZ&C9>0&v_TE0<|q309a? zb(NT4j#xbZzZyb})|@^{@Pd4WaPgm5dQQw(G8a+w>^MfWH}RQr9El>>Pbl|?;Si}! znnq2Oq9V`r>oUKe&4ZH(l+f%Fi)TzF{f0l2AiO3l^BCqN*SUezTw!Gp?EccgshOK) z*XE@{swbL~lqzb}!5tj?Nbd|;E_nLSthfvdtSP$CNgM6#t{?8hr%x4(^>@Y&JCL^N zjkRtTF{EX65$#OjWJJwEq(v;(e)vy*PUT{oLwSytLy61i_NuB#`^m$YLI=LDU|0w1 zP_orkr66OEBkAqHU*tinIzP<6h`91Ym#Sz{Y@30+EYyO@=mUx1tJ4i^{eT^3E5so} z-f8mDDK}8zpkMuXXgL_`!rg$%Ut`%yKw1*lY7t>az9TiujwK@a-ZFM`W6GF9 zHj%Ays0f(aQj~q5_$C}njx>LxTa*@{fHB~$1&O>NaFw_D@~Ac?XuNi(L)TaNX;MoX zf;jM)lSB}}prD{^uVR5VRdZyh|Cm-9aU7SsMMXf8lG7Z#R}Eahp_?jNh6s3rbE9P) zAkU@MC<~c)TpTmtjPxsRgdWw}($!NWaTPC$!P>^w^;R=git~hNqYA@DF_scpy+1FA zLajwdsB+O>Ay~-}Z)gJBAs-8jv@AxMY)Wykb7O>nX(DY)_|BRU)r`#`w=p2x{4rei zMl`>k%WQ1$CRjM~M;@kG<8jx2Rb!I^` z%i~d81~psT8hX^%(TV!YZ&*{64}GiDD%{XxY_QWP*4iD=iGUTQ6UuK$_mgt}r&|%j z=vou;$A2zy8oPP)f6;bMv7$unmff~(+qP}nwr!hd+qP}nw#~C`?>^oC%}qaaI{ni1 zR`pV;q>`$&<~PTH<@KmeWkB7(X&Djtt9_}ZA3&M@4uCV$$8bJ{z}nN&B+dinu8ABkQ_)plCTao{dunOOGXOA5RN!0?Y>VCB%C`0Yk z$rUIABJbbauQ%y3fOd|G->G5b?CWE%)q1unPi^m_LQ|fNQ<8e9He? zGrJAzFuhVc=VA>P^f2AMk+Q1WdVYXN2E_7Al&+a95)b4AySIojWBcLS^I@kUifzX> z&2hr*H*01x$=mCUZoQ>hD%<`2ZiO6ua-Ct0qdE4pi%mr;V(#IbV<))r&>lN1U);fi zH8Ym|#g1iHVe5m)D*?Fw9B=g%1%mgmCk0uLK$lLKzcHGe&lbMLQfYeJ$U!!|*EdW) zXHWl)OaTU;+?Vp*rFm10Ax@8{Y6K@R!$aVq(X}rGdCD5de$Y(pTWECp=IZ1 zswGw;hZrrIvYliNh3c_qzSgBoOKK=cND3SZZ`OMS(!x*H6dF_it>rvuAxeRbSh!_J zOH;@rSx&K2$&zNjE_!NJ6Kz`E*4peeY-O;)eIXc7K+>%Zm_r0&Z7(NDrFrnabWO*_ z8HLZJh;Bx|A%XlPr~e>@FqeRCO(N3QVka$8*#HNnVnM$k4cmYz))~GaI3gYiB+UtD zZWlY&yd#NB*b}>Pb0W;MQf)s^L@w_3k4^5ma6Yp(>@DdZa*#(%NSo_4 zK7Q;32$O+(etki*M|}j6r~x~Av84WSvx{&7p&tBAYb2?VOib3t@{EzuTC-yI?A1@e zo_!zOb~;N^$@6(RtyX?32l1GTaDerPaU(?gD7e82t9YzZ)tc%G9TE;x(kZ&)p5i++ zon2p|vpDDa-Vw_c5(mLCz-dqa!Ar5R`4o_%3pwECdDsTq#COd61Fk>9B}-zj$J3$| za^jnrTT==P*hukS$Hia?8rd60_OO>fy4>r4Waq{5^{P&9VnztrbX6lIjmx zmX`SBx*tQoGKO8_J;6W5C2MRnxy~EczA6h zf4jfKDlvDX^qa@DsJGR%zIW_k!0<21C!zcgx8f+$dB9}jWKin<9F!uRt%2G9v)0FY zxSF}a+<6X48Los7TJ!Rhibb5`}TX*5aD` z!&dTlY&TWCVoA7AJ7t+GH%LO1lCK6Bki9JA_9}8*EA8=KlvnYD0WY7|H!$-yxh-qpB~U3tpaRK2m4D5O`b+{ucgMgKL4LgbHA zn-}*oI3<@s57S8)f+75}U28EBE}^0Y=eAG=X#y%>f8_Tj`(xD zik;w-lo+dGxOw>9T~w0JU;TdHkf+y%CkoBDBrs(nOsJSEk92?dbaM)w3Wvd z?qow!@-9`^6Kr+Xib=fW4o#<|dPur)$fY4Y>OO8t8ZF}g^Lw-3yUJU~oM6p=g!8}W zmrPYbPPp340;V*(nUOyz((^M#5Ns~~)-z44WW3q?tOQaL8DAbC;nCJQvQH9YzY`NW zO$fXqzOl-wuZcQk92v=aF)E?-MOf1{~k})Cq}!)`f=&81bP%+FxL@1 zanNu)t{o>i4VgJ&pr)t+UX^}CZoH(PBKy7`2JrNKRox<*Ko|HDsPATjFrf3*&rvzY zQGcJBTxcys;8`Y60$3Rg#_qXRC?u}=(%FB=)7xbncc^(3w7xjGs8iHGm&aG(+7{SQJCT_nAWT(!IZRg9G|>3fAL znp3%@50C+o^dDc@Vr-uTR#b(D#-o;hHM(vFXRL;fkE$Hw!F7reZY4Tq-^p%zIue4> zIz}7&!4R1xgFzb($jf#`4JzA*QP&K&AIoJEluIPg`<3HE3T2HhPP^aHAQY%Nn_s12 z;-}cU9|l|yh9bBS{K+FCnmV7bt-D_0QT{jnhOyK1F1Q!SaavUUg1WJMr2~wcujM6vZbWO(*sS^3m=>rEXGcb0=hcVhpJry`^FE)QY=gpG6&FEP}e-e`?Z%4ud+E4u@LcNX2nFHn7 z&xK@9ZW}&9D0+I&Fgm?)iFGU5;j#WTqSFa@db>g_OYa9cJ%uJ5(W)1Pa<~S%fS#~U zJ*m-h^;lYqrwV_{r{^!t0ikJ(w5Q*H2iq8ii#(tP7Ca-XC&(ct(h@NdApVeP1vXUFZF4XY80dA+Z8ZQ}Dn#|%)K@6ifdFHqCT?R&~DprDZM z{C!t>m<(d&@;4_?SZ_PZ^muh|ZD5yJ0>uZkfarHJ$9tjB!)JlZ?B);&7v@dEt}y?l zlf7ftpMXW_5?=W0U|VnjVxDiQUpULX7H7Z`KIIaX9|=*=lQA0j+zjLD!|hjNSyQAR z`kz`P%wtI~(m#YSBz04tYYYYoQ_|IXE{uf90zl$}b&Y`q4mG!*8Z&y+vw{~{KSUu0#;UJMr~=t+K= z^gyFwveZQ7{>5YJ7N4fW8iTqU+cMu_zlO&J_87HrvlLoVWbiH+acjzFg*S9M`sD28 zb~+y#o2Z9cEoi8dUnLd$2Yl=?Ryd?Hg_{hj?^MbDeG1l}oqD>ut%QU-u;Yj4B>k)Q zT`)kC_IP4G9xCm{NolQp+UFM4KfR;lE9P>)k{ZU6N>%ET@vGWb3#qLjNl`l^4m2q1 z*oat>sqsS|*Jwaa9yZU*&uVnRx$|?C3w8Pe0Z8xYibQmOsk;uvT)^SA1(gGwZ)1`+ ztcWbW>MVjLo&z12b3mU?!=^1dB13}!=oWJaeojSg>YfSk9r=S0cJfXS$9-a^(s&m_ z_e+%As22z5f+``of?sBw!f!2U+gK(eNlt8`@hR?;9T`1SFco2z{)XOz*=1m#nMkdz z?sKL@ww`UR@Exj?iehDl*AvmAAK8f=#E{$KNLlpjv}>{*mlli~Xv5u`JZK0>g3L>F z&|ti9g6nT+FTi^;oYkYk!@_8t$MAa^ltx$Wy6UZO`{452P8%Vhevald|Gr}Fy6%Tg z5?9utZ(cAtBNA|{DUg)*Y}EGKuI|&L@AL*D!Wl5Vj4quV^#+;@B@uzB4i=c zs;`0vpR1GK^-doA*<#1gmyBmfgqBs{{U92NCN(OrVwZ*=JAc8HZ(#B}Y8dqaa_F-I z%H7!RLe`*VV4Px^+lJBAC4yGDF>8`v`f7(Vm zzb(bRTlH#bt*P)a^1sqH{4ac{19N-(G;kOTKPl2*s{v6NlS=w?H*DZ2%_Lg6W+Kio zLF=dPz)f^z_HbB~dV1twQa{u38^{sizAu$OVbzh&5`*Frz>v6}cB7<{s;bMY1wmQy z0;Gh*@#rfFNw?Nq<-|W=`5H{nxC{{I#F;~)=OQ(D+gT5lA%FgjIENG9%7&Z`lEII) zeo;;@gAwkN=}^AYvzD7!cg*Pz_ba?rHO0kN^O{HzV_9NfqF7by6wjtAg)oQ8J=g_DpIPxI|EH6e0>CabcO#YDYvaipA6) zvvvDK9ah`0q&garW|JtIt@T_d!*}rfli3x#Nvi891AwD9sz=#kFnnX$zBjXCbcf+W z;oD#XeQPeJ=91-9K}PULz2uBCq9lF^Px3ho2_Qbb4fJkH1A@G*r=9-d?@0?o3G7C!J9*sH5Bv3Hdo1xn<(;h43 z4hvq~(HG%N7Q-X!vx_OgC#{IpS;DGote%~4`KGc~(5aDmP-3V-LwzcREIbdoNno(X za3rmJ*as@udO>xk2rNLnV9sup8X6hWjsw(O?xf$$j{VOxw2mb`pv|)J!NBxII~7<_S@72= zZQn)$D$L1kc%byZaubKD_P&56aeKK@PEL#%ip5#V)b6bQ{oM)I_mYMK!L%zR6wJ;8 zqAHa1b(5MSwDpORFxTG>hd5tqhHUL+!&8k~eN~uUGKC=LWQd`pk97WSg3>CA8 z85C^lWS2ICdVT>Y5?1Obbdn+@c$saZ^)_rN)*^cvB?tKr=aXjQ)EQy`JT8F{3L0lh zunxl_#U?gwcbL_z8+8FriaZIosssuJ9VdPKzCN+u4)|63bG-ccWi4`$cRr0stR%yV zQ=|z`saD(yVuK_=wMgW0>|UH2L!vOYYEBj3C-g_na{1Vh(rv{FN-23hyN;+_?l@&v z`tRUS2%igxu&aJ17u0#_FD=jw7h!S_>N8k)VS*rh5SR;8Y%k}ZYOy#;h5OtPw~K0>_o7( zSP0%K6a}Bf?;evAe1#~;?DKmwKSZA-eCwN!Oi~_Ry_GkvpMP*kvp2PA>1}a~aw!jM zC%l3Kv;w_sk7OSg+y`Y*G!)b@28GNo_W=MvB>WXcekNb_^I8JmX=^__btI8CvoNBo z1|bVqLzc#sO7?7)qyHHxHnlwmv7#2B=QHbzXtfq;?zni zWjk;Ij`onJf`(4s7Tcgtt`z&W(!dA~X}Kv(olXkgBHDrx7H*^> z@NG8xE|~xvg_jfLmqzs7-`TOvf@hrG9Z5E;PbF*0v~F)ICQ(1g^t!H`e~Fc>Cx}Vz z@W@DSlF+*eS4}WIp_ft(o69b1)b8u-=hiOj;5=qHa(UklFMznxy^Z%nG($Zm#^r7h zI}LcwJflcncdcIBc;WQS<$&R276jBnU%Tprl?su(c(wH;h+2GNpK)E}VaO_^?)YDk z0_gOL$KCGcE5fPfJ~5Iy?tDL23}p+Rs^`5ytT2J)8ihKj&cT70bDmX?nQNTF+-YnY>`@SVoS2C%yiB4=VwJ4z1Nbp0nG3Z+WBr?p-|CbG#TIFssyk*o@f*vJ+l1@)4H(3JVYk z18`-_-7Ai8T%R^uYZO@I`rJzffWo7cm$-;b&eAuPG|gu^3SRvbkpRpswUuxJUS!Gp zkEFA2I+r1v2z_T|nrHQ%4;H0!C@&umnsNd}N6Wc2;r0FTZn4X|l`N|5_GE=889)|J z`qiDNuT!m79|h>2hd>~1P3`z=p7Bj3=sAZmQs6ZDK$`qOq^em`QK)7k-WZ|G^mzh( z)=Ti#22-k0^C1sA1CKzQ_S*_E@@OYo`5(24L)G{F>x$)*wtp_{Kmf+!4v&)^^n=zJ z>~GEDDmVD(z^mj}R<3{={z0l5jKF;l)#c1&oacMMhR^o_Kb-D0@tknjl1zvqdjK}- zIGiw+TR=Kzr*>iMVAW$aQQn;AFYhi;GG*;--g1`AFLOfI6twi(f&jdurw!CR(4VCH zN-D#x!f@a0zeOLyy_#A)?A~F5N)d*zF5ti3IPcM0QDe60CT81oH^;uJPk6e&?n85| zW|KSs|6R+L7^K@4Y3sY0vl0f)d8;7Ti}ADTlz9_)T?rIf9wMFJLv>`)0}7Dok%{J0 z)@DO91EVUHGw7$%S)NHUgIW{L=OL0PCF94zY}wk@;S{=KrfL7zKmjZL(Yr4s!u<=Yzcu@&-@J$2@)jA~W1Ic(w=l-S_l9L{c4!DPD*9y*1+vMrh zJZG;@`Jk6q?lrCxrmhl#Fi#z}@Wz!Y|K*uwY4+DJg~)hPUFKYs2kgsOaQaW5v!f#X z1#BI=UBzr3MSJ*R)RPpv)LC+ccp|`U&UL92NmJA9g;2#fdf+B)&BMq?PTBgDvD**` zeFaS&!*jcXQkm9-Y7DXThhf-VgZXPReIPTe;35H=Mb6D+fditx5Ow`c<) z6w{u0$e;v3Rcnc&qq5vsM+FuZn1A#5|C{ipvYSW<2M-gIa4Ep~60GliTi=&S5%Izq zGU8l^gML~|!uNZ|@C>RFt4%{eM$NV8%`hHo#gobqCQ4Qgl!Yy9H4+Hs_TQgDwGbB%QAWOpr!g+zRb z&g%1z42>=cYzG2(gf9)f05l8t zT)Yum>4kHyZRNT?e+X_Y3M2IVhZ6inwKNQ;X@Yd>mZ2&5;1oRJaSlb zuoE>NA0H4P{a&q5^AYnhtSrf-pHM>l&)JIP*HugU(vIkr32skiPhPjtSJ9^G_aMAK zBVdiJ12nL>$~v?a>q*Nj^A~c*5phH_N$y9~0{dIcjOtSRpT5(Oks#r5F z9A9`jhUAtjQ2Ly_n4YhLc++rDK{zWsh_vN%)(wr3L$lcM&FGn+?d{hjB;GkJ4b1eW zFkW^5-_cnT1N5Vy#X;+N$Z5hNffiF^pRF{*MrhTI`wCqAzFQd90q#1+}tyFXSQ5sqn9J&Fc`eqhY)gkO4!mIRmqh(0}Hx8sJqv8F` zL$N8;dsyR8hmT3uj%bLAf`V_k{DG!;c^46JKgL<6rmeISM~yTr!yAE7O6Fc|WtR_4 zGleqWo6bqEJvk^8!>hMLgFNrzLt*)}A-mxhXASkmP!NY-$^O<)6D$rhJ47nl#*5H0 znFO*F$7g&yOr0}+{<9+2SIQ6J3`9Cy7<3gZyLlg+QG-TJ;las~Md>{ghCW8Ysem{KJpte(BVdj= zM2ii<$q^Lqfb0_Hm=(23F(~S1AdpLYi*EsJvWteQsdVJ#(aqI-H!j@eBV7~_NTni~ z*#+G_CM&7JNJVO5Jz=bqp$mSR#(T3^n$T1y$QGd2tNo&}xa!Xm3nRXuGk&2!H!zDiF^JPDMk054#BHse|a_==(t+{TUp8acJj zV(FXSb$f|OF%r{w_`SzprzoVkS+Ge($iNY3u%p%TsIRWw$ZG-V-oZ}o5gt2S=$O3B z&V*&l`*!I;F&YDW-3fp=E22k8+%BS*xcm!dH6ti1qwx>87{YlZ?^Bf0dkslBDC$sL zK=6&Fl>{>~3lqwHFd3-zAmipinJ|E0*!SNREIa7oS)isGLZkCiu!t{BHhNU4_5>E+ zB;iN!4z3aWUv3nNM~p4iPb+YegR_k7!zOmK?#e@q?$)l{ zJ^9G_=fC^d)qWF1@Y>+g0#c{I7uct$uUs-kv@YCOWfrbtTfcT3-)?UvzC-v6SM*o^ z^FwjWIgbqu8rmZ!+u>B`i-F2Mn^`+9qC-T)6y;82v%YlB-{@l4!&CD_oiEB6&A7@~ zE@3VSeK_L-G3w2ue?`dp#ohKUTD**-=pQo#MTS&@Puv!r(5e)@z6y(*uv~rqZdV>; z#zvhu>znB74RR{}Pr>A6`R(KUoj7pk3Or2` zLQ}}*LE2_}=5i#%m63-TeTqx4T9~D8{To#n+!H`7ccb=;#=XeC`qT9nuYR&oTNKPq zez%rz!5bFW!(qcJWaZK3=R3@>^F$VK%XbgwsosUUl zKU=KKuJRpnRmO2(T~@{{SmV-6N5<)9~jHoCVCBqwyQ*eZTC zkeIJg5xXVaS3izlYM%k)(z!4`r_8%1S{KL=v8e5*JeRJtV3tWYNAfLt!D8Rm3(M)) z9+u9aIvk5xz*xT-?lZWyY>s1^D`p(@zw+GoD+K&JdLPbm;*CUCU1jkV7j`asjkBZq zCx4wfg<7Z&JHq*6ZRKs`b6-)*lYpeZtb92i+gbkT69UpZ8TOFc5R=Iq*U10}YmJYpB0Y?;rXm#G>i{|dpfL`ac~ z0yZUK&j+ACvcdgP#^LO+xYrR8hAohPv!h(Zw%@#bbH6%5yU) zL%j%;P4WOc3NK_)#&SRufN0{n;~ zzr31;MH6&r+JNeVCh@`7SflgkH_J}iOgyqfBu=o69qwZ~?Eh~cjdBFi{?wH>iG6|OJ0@fn!f%pD2}Z=fxr zKykeg)0gY*q=9%l!&s1mJv~Nw;wP)vWc5wP11dV~5`f-Axr0(=?q|WCY}4tWIiDfM zb&B_k`?vN^F-~ngUn=?vD^tan;Uzw%i7EPdhd;)4Lj@8#18;s+qTh+XoVAyzwKo?` z1DFj2HJ~^-&DJ5XW7K{DbWT&3r$l60Bdx2}SW^Q38z;CGlMkfyHsk<#QtH8N zBd#BMfH}w!c5z*3JP=wACjX>=1xrj#@~+58UtNX&G{IeUImfU*TW&iK`pik4{}jlq zp}~Dce?y2%wQ##--RDIT^pPMq`Hzb=Wk2_MCl${ciIKG_$MLpan-#9kP{Q%N4!fr+ z8v4h~JV5)VCtx~zsVkVF4~RoAScQtZYPSGBxQP9r|5BfRoS9ot-OJ}&3@y_aj%{f| z#XVg`SB^Jg3z~~QIrv+HS8y6cr+6#jK@DnL5wDweH0ku$Di4Gx;KhgGOo9FKW$5oJ z^?hUD7;>n9&aj6&!+cM~+vzrhcYIaj>xeiB0pM7B)*k22tMF_R5~*bh*tYelK`euM zSc^-&A1!W7b37q^sb|+s3{}oh%@sKTwEN_gh8S2FqPheQferRlgxj;f2gXP3e5mSqVl9C=xP3p1cV0@b#>wG#y&Lmr^U##=P|ZW1=aKa(SIS8^F0uQE_H8I zr%)!wn}eb_p0rLMbc-ug10IMzB8*HeLcA(?npCS&LbqgTOoaXz<_G05F^W2nxcwWz z;kTAJJH9{Hwbo}2lOCezo%2X2+K{%=;1NXU_L^9G8&maw|0Ojw{QEkB+))~1jZrW+ zuHiB2ZHij(?I03Bg2=g{-whs$iD2u$6ZEu)4#m+6^Op|7`~4$$IfUjtSy0>Ty19Ac zPAmBTpXB21l7ajn=QRnoz{O#dnD%&nGIVp$+pEyv{L})kTr4;tcAE|uC3M8Nb()FU z4&B{}ukr()?zijUEVIcJ4*=qvt`3xngeoWeM35e1=?ByOijY1Ckr9E6#cSEd%2n_L z)Et^Ad?Gq++0m>>GBGE+x&-Q0hj~w?#aNxL#8Llma=?f<8BNjADC2Sc?srSxNxRcQ=6*~UM1w!4aX;l*_#L6EMpEmDxQ(enC1gq>_Fu7WiuAhZo(TTv?&GoKrFtypq|?-aq6< zXpn7tPi6867e0l7?|U~cWwA0ft{1%?P&)`9!5;9dm#o8D`b}YU<<49RBwtjV=KN2_ zM2tUgA{xTfKJ7II?_H2HZu72lmK9sYEvFOX(h!85_Pf`#q~D|L8C@)4q+a>S*AS8Z z$|?rOfp0<9`Wlki=$ond!)XxtHE(C~s2%JKTO=d0KD8Fds?*mn0Nwlk15Q^B7-18W z=Y$sY>GouZZsI39r2dWTcJNG;F>NJv2r_f^+Kp9BLJ~z{iCXu3EJD`@W$Ku{nKDD- zCOqZo4Mozk>`a`rh&BfxpZ+ZJH=13n(`Jh3h%7hWX;C3pcek1CzdrXcLdQ{!(QPfa zcH1-(LfVhhqPTEYQrs<*1idUjk?nt?FA9MY^e|d79>%1 zE#SHfWmEa(AN_Ek*eVnS#~m^olz+%(-|zz1UB+5$M>#GUWoK?n7P@GAR6Sr6litFE zr`Y$5!94DN_fu3`tA&wTb>kVqiw9Xs{_Mq^QsK4^IFBL1t4Bf=+}B7>SAc#8rH z<7-@0=xTrJ{BL*48qW?D?u z8nI%o&Pra#BynqL2;sy63!rA=L!~?=U!zGa8+=!xA0DC(26w9qw9s+*^4}1)IaurX z;s8LcDl{Yxf{?vWy0Em5DC$&R!(`4Jj)#*A~ zPkZTcz5cUV*i}rC$`P4jI_qB)O7LYgKfwAf#|k6#r|OoHzEHwp8)l5%GyjL2Fhrnm zj!he)%2B%0P|oQw$GTqmm*fp0_#ZI#V&(tLt23I|+}!k_b~9@H>kbe6?_4IY5z^;T zkQxR)9GRz@RWZzsMbE;1<_q+FMl#dqn{U||c^`S;ZP)l03qX9vX|PGyV^VcTO^EH7 zAKJbK4mMmqNELTi`I-!qbzXF5so8f;9S#4SPu2-No$$NrqE$$HTYsj?9VN!U6a?!@%MhvlblTN)K}Aj-(!jUnpSG5{F;WZ6;cl~%oj*(% zR?T%w+l)fhWynBqDN{32ej$YZ=2PXI>G&>3>reQ=K)AM8!3t0_ZDVIel9J@-GSO2K z(nHP@kJLu;BI25a;OJBOQvSV;g-XwyyviSU^JhMs0K+t4ACR?j32%MB4-P?G@CZJ% ztG`teNEITb2v5v`dikrJbI>R=p?nN$Nz+YGM`)vnh728KbP|UGdlE}!y;K@y$k4Bl z^v|dj$3`LxBeOD<;S_W5{t=SjTS2dhci9vpl!A^58ui+4L|CsA7+toBfBr%0wW=YU z*L=^8Nkp$roy~oI+aJB`F-~S_=Wxgfi_Z?A2s_7=gY_56TK4hS7Mbi_naysHKxF_! z73;anI6RZ?7BGm(LxzA*{ujUoF9^EzM(gAik@4-I?%y9$hn)wGWlZa*N|_v1#-%f* z=;!AVWGf2|gsC!INorgj2UXX^>zZ(4wkL%6-yHxX4-lq!MF8|8T?cN;zlbSGWpNJ{7E5JoHS zB+&6nq}O^De`A@f$SgPCw@DqO{yZM26tGJGLd(nkfltv>mnc+X$;&lwZ@W_BxRZq` zm7sxm(7w3t;+zqb6FPy3j<^Xh?(ulHk1ko>b%aAHAZ_?~G5s{_6B9~d-6Idej3Avy zezQN-CHdfp#s&$Gw$7G)h#38m7}sf3;2rjZRsPd!$9d)(a_Y-;_X80{1^uBx8CzrF zCdfqaB;EgeP{gu_%#*AH3> zKN^YXD5++RwO?n_vzfUYKqIa_F#yF2xB5|_f)Mpk3Q6m5IGu)I4eciW(jtVe7y@#g zxFKRtxFzPM3jec7hIxeQ^bUj`R6XvaFj?=AR95pS+Mq`5aTQ`@Mo6ULKV{O-ab%FB zhH(A1T-N^?1*52siXJ<0`}fm7J+7)t;};!Ky+S0UTf`8>6-j=_q0Nvx`Fa#?L`^u2=pk@nY#7d@=V~CC<0IB`srF zm+2L4dm>i7U%u3|E^HUNu4&{@VkOUtSWOHslH21_Ur4CzxyiK0GIa#%~Zf309483bIawkQ#NjVP-uDfr2$P2P13e*^QQMgD^p@ zRWFD2w0>xXn~6qk|73txCJF5CvLjzQL^&x!yGr$N(66Wl6#isn$;Z5mXcWwN&8t-> z)p50h(qWllkVJiwqo#LwKpkT%h`JLXPY)T~UelpyzchRQ9?m~Ex;FVX^LL%sWhrruPkbX} zN&0`i$!~uOzbsFJvCY-2RU~)r2U+=M&M>$&4Y9_yxy(jpzA53VX~n?ij&$Xt_Me!U zU}f0PvvHv~blaR(X9_zbA01d8UIq1IMCDS zE^{%J(s`ZtW}U5wVHdl^3G&Snw@w>8L-zv4_F+@xaL+U$A>_X00e56@*e>t{R`a^N zVNUDrnAXMfoTbdDrhXk?>V!f(#Ux}a&;>d>hA68?`M{U}aXS?Fp#E*hWno7Wk5Rqe z;@f=T;mrWa7puwEX8Y4pY*i!mX)~}t<+VK=fP$?(mRv318&P@Cz296EZeVI%@^^s!Tvd0 zvoY6z3Ce;C|0R=5x`E|~xm6(4Wu5-6fL#oM)e=~*JO_4yDbsF{IuPccBCRigbjNSilZkCi>zcJb_bE^Y$;}pa5q;#>t>Ez{?Hh zs)fCn6olxvH65;LFxd68w^3gE1wWkaNSwtmGOqd-bEK_gPpICP%kW;40jmkIBhM1D?vwv~uojb0B71Jd>?We50zTWnu|YKEtd%FEOhJb0F|)U^ z;p)hDI$o>3B&1*kPT_RLf@~^;YZ;qB>mZYH-o8*VnlM!EMmt=EU>kC}UHsNZ1vS!> zu4(gZnX$?;c$Rj~XOSbXwF^=eYaDnB5l{2%P2IU(MQDT;wYxGEtqHUC%<;G3W9Qqh z{Ib~OaIn&4zf<81wM7zQ-+BQy#|7eCukfQyi6IHPbg1Az7=+3(rVLg9Djst}vRR26 zK1C7~SJ0_WTwPLBjA@;rzdg4=0&Q{ep2d0)O9;1e*`uc)ZF|jnMo$}@jd)$%A4oY{m&1?b|t1Zd{SiP`|BtwC>YK8pe<6z`Q+Q$`z*jQ%iLAv>@GS$4#fLB zLm>eg&lbAWnZ*Q-JxLrE2hcj6Sn`~( zjBEl%se-&eBg;F*#0$A!sVk()0l4oyrfgojrDW5TCOy=~#AUFJAN`??7Jsnsg(0vh zQe>NH94d&H&d!n1G&>(%Y5w8ldI?C_hh9d<(qL!OVHoF?6q#;!0|f0zt7iQflpE$0 zFvv_dWw8Lz#(hbgbYG@U@65Oe4jLNUEY3}p!G;1bxi@QoiVE7o}94Pe~5lwQ^v&BDoz`~qx|S9We6s~jfkuTD&c{yHfY-3VRW*){>|g_ zw|TmArq!yV%AaBW1;YzMkC@KpSX4|b7Uk^NDjE$5*W}>w&6K-S`w7{TY5H9;=i=E? z5(*~iB8>mUnk~;2enZ{;#i3~`_S}Toa^FFQ^9Jhy&GOH8A<3pH(Gb(C^Wc3XPF-Z|PQzHfwpjjc=vGHE*A@2PsK-@CqF|b!MPI9QnVq6l z-pibiz>^Qv+348cneTJK&BgR#QjlP57Sp;Vu?6QW~xB$L~ZY{^%94pT^`G&YL=k)8>NO_@L621YPV z-h?C%1>*M?V%jq6cxHGB%AKFkXfZnlbeJz^B#`DZq9ve5#>;oiXHvQ07~K~;)L`*X zVF2RR9CovvEGpPcjIu;z{%*RZ2dhd>t!-(!UX)+hEv zDkXHgpef7yS0XvM${;E)6^8ydSzWmGaXPi&b`$6W_WB|!q$GhCY3qbFHFG-38+~*j zvMBX#GPLy>4R`n;c>a~oq2v(`-6x;xg7uW}lgP6ab<7j%8(^{}jwa*K<&iYycdAek zgqKKdvv55M5qWVyyz#l=d}v3{%RGD6=b=%#X<=s%yl`PyagJ0KJ1)7xqtp2rv3;lJ z+P6C3mvY8u6$0Av^?Dpch~7;TfTyApx@t3SQWASy34(4?*Fx>Cm>IO=jm^GQ%Z9}X zdIqnV8xL~g{c<4e&)*O_82?gdSY~d^e0m9%Dj2U>GZ+k{=wFjSKB`{wUkFPPMLC24 z);o~hJc>8~*NIVJt2`Qq9SDA6gAWz?6dx-FZV_e*N!lv3;^{KqW6tMFvxqUz*m>nH z>iCLvWhoECIDpT;W#lC$>Wgbsp@o9C~#jhiXCoB5(50Z2~cPAbm?QI5iFQeEu> zp;s5ClF3iEo3logf(*NQX+Zfuo`h2C%S(hX4RjZ2arj z>L#e_DGM=7B$FDtQQ4O-sYyjXI=Rj0Ipo~g)+E~M zeY=H3%ld#>ZWZ$m$198p>*UnjDFwbORvBKHt{BAo*A_kPxLsqJRZOli2)qNNiMOpK z2UiA0z>4>=*RLG2w%Bk)HMAPWHfS{^>?Ntdia}OTU*dRPP%cVFwmjxXJN`@h2%nI? z8MryT2=pD$*+l%BJ>@U|a@Tv$rC2+a{j;`=gDYb|AxV!;hr(VG%t)kmL#+0^BT!kM zR+iGpdV`KN_~u{jqqEbJ+kQLuN6DQlzKV*Fc{m)1v6^NmY3djMY5kFs_^JZ+_ax_9 zBsM_*A_g%y5G&lc=XKLG4O!v%Bs@W*uY{TclVR;05tgh7J8IrSW^|^-7KWU0<>QCt zggkMHuSk9I{lSEqeRNX#J&K{TWM~~Y_`Khhu*!)IHS%Fhoto-XG3850I47tOCzfXI zpgg|(kv3Fhen$=E0_zfc(|%KAk2I zQ{?^Gaz+Mb|H0X!wJj<4s2mXyG-e>ai<1Ts3sZI- z?S0!dXZ!(xDfuOPRD!qbO*Ix3Rk6Mf4luY|VeQ}6Q`wsCS9V)X4Nh^*2#M;R$m@cl zIBciYV3qZ);wL{cCH97d#%RBkFelm0Gtd!x7})D}c(gXZj9hsF5+s@Oz%~SEydEnF zyK|OX#)k>Ex}NQ>y%&K$yf`KMs}kn?FTjGi!M2nIoFCADyk5>2?~&Mg(5vueXotlxyh@`KtG z+1biWEOT~UTvu;`RkA#>0hYLEkFqoF1nZ`4U;e?zH7eW@(%vfa+$Abif1H|lg)sy- zGWnv3gVU@5ce&qm7^T_WZIa|hdqu)=_{1;6%XdG!(fpQF-zq1-iW z6?!0&3e0iBnec4H6XD5|PWmm0Q>-WbMF<4Nl(wP4ayh(j1>FKF@2YaVohjeW}HvLej!t1MXd~Ce+NCpd-xA5dqHZ)?n!1 zvdy%7N_8-DC>hs7h58!PPis5+tX_HE~G|rNI$J>tbV_MtGM3|ob?PUL$Li>@j$)! zSDnMl^zv5pLcI63Y?`34!^W*3m%ojrZU7{wP^*kMbz3!hjAU-9#SvrrMS-JC<}Vcd z`)_xGY~u}Gv5@BkA=U(~g=yxj^O?$5m63&gZFAk*C*fXEV;&`G$_wh1Cvy9mbc3tD z8e7Pp!5n%tao7ySb*LKZ1Fq}awdSxu%fz?4~bcJnJ=56zy6*6N5KEdoAUSCM< z#VS#D#~JoT&os7lGGQfx<|)PRiSX=I?rVc-TV#DB8O^%=Q0-+#(d-QIz4qRWZyato znX^vni{a;b3U*H9PBtU+5=*pBE?&#&>qUiJL|9N{LwnL!e}-72aM4P`YS=06XU>^8 zwOIqX<3?kr*I2<)e|iI8x|@RI2uS9#m}PSneeUnn-l3f)V2g=qH!@XU>o_eHDP_Cy zRL^-f;e0$u3=?Ias8Bx!w)V#5T-9A3Zy*VdO$C@9ql`ZUGF7K)_uu&Sgy1ti4+R-V z=ccpv9ANrgMW=|#_GP+VyH8!Ul{Xl1N3Kyby%`WLjTs+U+jrF5n%5eBw1#~JxoPjF z!s16t8>NMZkpQkH64ccX%ZU5`<|r86?#iWNTcrlvtv zRI6%EDvOe%d*$cy(bNK;2Ovc@ojl8Df%>&F-3FKFHoEnmL9LmW=oZH_nXsK%`APGW z`@cXY>psyBSqDbyB=Kn(ujeS86oC4k|I-rE-8gJfY~;$&U*Hyc&0CBNR$KRXC zeg8a=*}G@*xU24_=jbm}TOC)YlhorOPG)5D> zQOzW_gafZElsrbk$|Emglgb?Z=Yi~G8-$2s|HL`Ii|H!Nn)^m5J^d)$&y#xG5yk!Ilhg4u3XCyR20H_0Yn3&>g-n^0=N?8PB~=5@{xxTv-iM ztsz=4>Jo-fl+j_yJScY0{dq;vF&^YEtitRbwir!rl|AX=d{DiAT7C}SJ5@N<8z!bU zUg+Vk%O`~2XJdeqIG2&(%36oU<+lHw@F{icOEC*cXL5Eh#>=wt`M2$Gtea>Xp=gtH zI}v?p?Dg7c+j`a)0eW5Kzmti!Ps$kah8OS)m4Bb+ABzg%lBM)aau3m>)K)UgkK5Cu zC?KA8PQfPz;~%Bk6E+#9=jA^^6Ndr1tB6zC{_IkE89xoeclj^TW&dKCGew`@Z^56U zA-sc<2@dlOX-@Zvsj6E95w!{_;RWtNosQZf24jiK=gtR7(t8c21J-IrI)tyMl6`He zOoV3o0|@{NC?>UG08&=S1n6(2j0w->z0(Pz3kKzE)T*5x2@-sW@p;PpHy7aGQT_yb5w@g%7Fm zv_Z@`Sq@y_#?tV1WU@OrVE@s9f~`l=W=Y^ew|5Aw&O^A`U$nD8zVfNUb1ZTGXmQXF zkY?6(VfTt;7}$?5<13DaK!y?E=h^SDky)y1l85c1jzZib}3V(+YUamh=Q;O4!izl3B zyH9me5d+Otd^tZ5@R4}aAriGHMtZ*KW7mnrL&~{rBeo)}Zx^>*y2{7ff@txWT~SVVEg8@_gr) z+XpJ~Jgb(HY(Szh{{6pDp-<%FZM!j#xlW+@;=Koy%nY5>Ggor|FLdN!=!F8Z;&FSY zdxOBh_>*RfF@rrcr8*@-eA?Y~&Sn=B%{pyK!iSwRYq@FPOgt%d#EYCaTxH8jN%QMR zC3&!uI9wKHU?a@=8}R5odpCllAd)N${J}Vp%Vo~&1N?`!v$UQ~>k*tRB}lInSnvnF z(Q-!q*?D>X+Yo=dV~sk?TjeqMJ?O{JKVqKmarJ7H5vgxj|DC#7HMe7LO%0v_xlof- z5L#s(xqx#~FFx%i~Mdp}bD(h!bHbBCC(t2zo2F zXY-HQ-<$S`)OQ4FKU}C0Oe@I^YJECoOdb*|JK{!3YPxYiF8VFElTa-`*+~30Zoe%9 zii_bJHv2lDpYk|1Y!DCeJY$6z;OiX1t>eDZ!tj zX^21WVw2mjUafr{)FmxdR4O|`V2WMNsWqoFxVLa4$VXmT4yA%th&>dNhH=U_n=;yF z()xJj*%OVUF*oH_o$3$3Uy=hQ-n3rR-$M`)!ZU-)?Y`(Zv5S+rFK# zJpJ}WvF%)a0IZJ85I5YUmu(oHDHWzv%H8rO^2}pdD=hjzp<$YO96$EtK8r_z>>3Yu zkx75Sz5IMarmi1N!BEJUAB@X5I1>|+%J``$FpkdWZF+RKL68Y)swRQ8TVROs6^VGE zKB-p2zX&14?gMv@b=L-*gF}>1_1+}j+L5N}1Ew$tPJVvV!Ltz}rvfJYf76!DOW_9A z;woR^XZ7_Enh!gRhx@n}pQjP)iq$3*8}!G@>!+`dt)>2vk{n&gCEH?fT|O_5b?-k1 z6zo|@B?*%S)QI-+>h|o0cy`fQtn-CE96EojAv7_=`(d-c?MdyUb(YB5e2hwp*jiDf zj_e2${bQYg9{#yHjEJ;t_=6POw!AXk(#?vGCmjfwM|@dJSA|04AFf9se=Q)#e+9Fq z(A!LM78eHH%DfB=4hu9(m&CRoJQArkLC@j7y4|66!~c zqKhAPX91yCmiKtR|0C9JFu9WALnm%#t#Le9BFp<#7+rb}S5ks#oA37-{+PXQV_jAH zTCYd=j)sShp3rA8PA}C(4P9B$(?hJ`Yz7JoD^}9ve}H(G_pjb`f0cb);bY~J2(oxj ziGJs9V-yk8Q5nb5#ut^>CgS(VC-j3>8~8d>@$J5b6uw*7vr_wbx-0 zyDZO|Wh?j^b3m7Ea!K+{LxFh{*TkN*;AwSb8lT)OLIYZ{UbrQFeO`IeSR`hcmJ?+x z#|8~meE1K3otPigY>q>pcjk#R!WJjZD@#qA9NY%e3JGyEeDRu@sE$Z2V8;f|}81fQ3&vh*Fe4co+7?`tK0sjvIkSQ;IcnMp1e0Eis)g z%d%>M1zXK>fLQ$T9X~9V`D#!@YudhM`_kXexBbcB|^5Qw--J)s+ZCpA$X?i3Xiylk%Ss2fJ(2~hjzLn5#K!(o_FNL zHjpQ(Tej~_qDlBiY%(#j@YJQq|38|g$nQ&_5JccsI)FhO!jgp=Ah)*A!UrV-RHIKg z&)h;pd6>+(6r!-fUs{2zE;)9{dTrVFe|?&R2fUP@j*}7hRJ+|UiiDM4xpbOvKZ0`pNz`+FifU4REV7dvUBb!Yuu- zR<|FRT?pd`M1QX6EopO zb6RvWp@>Sb>{K8w>hwg6l^xGr!}dQaZp-ic;n0zDnv4Zg*;q82{F6Z=!wNQOQi$P; z9{?_AU&&JZ(wixnn_@~{Bl54{^0E@@IQ6wh$Hmj#s30$>C&GLQJMF}g?*B;R*oYCN zJQ8h{pCWIShE|Xwh!Jm~M6T{}$WXMH_D%E}>25y1Mjl*p!^-T-7ia*gjKM{_^PQb) zS|kN>SmGIjD&K)6loKXWjz=j8s%g_NzpHMKvos+SzoHVY1hl2|8@*HuEEj76=xT>P z%DBH-14~X5(zI0t?=`NkwcM2E>Htn_r#3|e9VCf_r4)wyhv@lVcb4K~4G_buHmA5rWEP<|UPXA!mU z_WMjEguKHD)R?{rpBLS0NjIJ{uOfr^<+zsXP{#O-A##r=KUlPA&pQ;nEgW#WOwN+B5~EoF zY}MITK0cLbEQ-<)rp#yhzUP-z_FQn)vj!R^9$JNkTIvd0*cFjvEj+J@ADwiG@n{@8 zFIF(;zw5D*#b#XQL=nvOkM8fsW^%4K&jRYQ=(9K0ga>)%;tJnrA;)4Y>_?DsY2-LL zILSd_Rm3cHunu^X!>{c6V3ETm^yp*u-l+b-x93p@y#NG1zDjTf3Ja~nw(mr@0`a&um~t1-#2&8aNSRg68l>+J z`#sGdP128V8RB8qNm09)6E7b6z{UQo8~-(O6pjcw&m(AUYL!F}ZUUQ0J_0Q)y?J-o zjP7_o#t~y5G&Trd=nbx9dsrMh1&)^XJqA3o~*Z+ zUkeV^;&Ox(Ui%E#p17E=d%xrqvbCkfYdMD6)7x~r4!4i=RCQxvKeqnmfbiC(|-}c!#1326=n4wK$xfS4Dg*39fjb@ z`hcgj2tP{#@PdwL8k=ur7(`WT$OgkJ)649uvL6&PsoPG*>DJn-yhz8!8Ush@${rOm zd;0MZ2H5uq>2>5U*A$uzt1UcxlEuNmW15wRa3_IPPYc>5CA{k({~8CjIf!rbcJ9w3rL12FJ1;)v`U4{PraBru31pJ_NIn38uj|x z-Z67Fb}cSljk4XOUieo@tuZsffNopjE*zJNt3Z)->t{}5wIc`r3sd|D9J{08_6Y<6a;ExPmloF_A2WO|DT{RgmpZyg|CBq5?;?6f}OP>rt9cu|7Ppr z(o8lAqu>`T>km1il26{9Lq@D9(Gij8a=I;rpKpzZ*l0xQmq?w>qZum=x*-cg^#cdw&B-Tyz)W zK%^3kpEGCTYhaw?rJo5Zo&r=l{Vrc+1Fw-b&S91s!b~k)kyB$uWI1RTKcKjua1d2R zHl38jg6=S{F9rzrjaGpjaUPZ{W`RJpq6Kkw`}UZPY`I*=v7EPhn32nQ{lmlUo6AlQ z&3@C{rNb-J1+%N?ytT+l5oUB5L{I~_DSBb$v_BGE@*J`moIOTV6TsYnr{%Wdm#Lc#`nU>k$XVL!9E0+S_P-VjZKLg z-EsAPMtp8F$5z`xIYku_J1WL>F%}3TEawE3wvGu6Kf<(L5(k-ZK) zPg!>Li?bsXbW<#qoD7O)=xQOn)hN;M5s_UJElCrtX;4xys+y5AVio1+}YuzwbXThEE@otxA} zj4@tV+`F$$@ATIF<2(BN{4lwg-V5yL+XpVH_gby^sw{<7n+9BuR`Ep~CN$;}!u>75 zq@=kuqiM~GfyxjLU(wVztF^NGyMZ&op|*BKuzG5g=i9Jb^FGGq89 zotZ6J1X!6@$_bD~EaL``J99r2qD3_c0B zJ$`9q65P^Bw{1w%N8gSesMzWUO_QDw9(5bhDR`dAm(%w)?atj}6cnmO1{|`R#D}jf zQav6ulf!o^q1i^h>CTAZDyj-mP}N(jZMN1Z)!StEaLHTDdkArwAVcv;C39?Q45}A> zdiXegjEyua|Lp0VgvwBm@@Y|k{Y-l>tLmIe32Kw(p0PDl(wXL4d8e>nKV9)Gv_@E0 zfS8k|3Q^bW?j`{ZHd2Cf>g@$)9vci$h+sg)hbt+w&52DC2uAuJGs7tW=oTpq#W&{Cy8p^qy#R9H}f` zDGeQ&i0-AkG2>{p&81IX%!s)2p5fw;XNB)61;XWnd!MLSG?uJ@B)E(FUIQ&oGg<*C zu6ruS(NAn~KN(98S4|LN&lOrJOb(}P1veb;cdi@a!WWB7tAcL7;6(qI&;-c|A!iQu zh$%&+YVp1VH6%F6pGL)8mjQB&q~EKxs4a`W*-GXJN&$2${j7Vd0ox%Y9ZI;vH z)D`v7{j~l3i}S|+_7A$?zmB_-dWT0e+4tGh=C@NK35h0fR6%h16@iWN^{qnWPaS;#u zH)g(H8t`^@)?#2J4^zWfvtgPx`k+`25}iGl#Yf46BX#kLuC?h>v-*Y&D5;=7iI)NK zHxqi@_j<_QP?ab2Zl#yZgdD zIthB^zlzKDd?j@ck0~Cs-Y0%Gkno{PZ5X*JvLaf;{TJ|t42kjCr=cd6=HHNq;^xtzzDRp3udmV9o5JOx|Vvz1kYNslpU zp(>SXjpLREg1UowS~0-VnnC_@>4!#J)^KWQ9#qIbOZXs+e$3@ubFw7)B^YsrzTJa~ z5>SNU%o(#iK5wO<1UYHx5I9-0*>8Nob<=qG5d5GZfn^Pnz#pM5dz`y`h)MR;tG}8L zSh8{`3-rj%T|SUX;zW9Ha$GYPG<36=q2YTd9?&-tmC7mk$^Q{0+*#>_(i@Y2xlXw-3ZG zLrH5AmE<1J+~4+fkc+^plMrW$etwBp2Varz+i)ilmlI8%&Wn(Z5wHQSX* zeXvS{4&$l?IDGXr@h8Qjv6tb?$-V~_bUC3ht)L~C!qjg;F`G0n?SQOR;Pc5tHEt>{ zPKYbB9keH%Uc@BMcUX(bsnP)l(ZD9PWD5H1l}o##D{-=C9atMx%0^Pp*L&BJj6@vH z&AIWlF&qkRbi1JhZ9*kv_|m*^;S=0DcCE@95T%A+IuIm`e#Vbz5=l>A&PYOKuS@O_ zp4^2cA_jGP>=XR{Yh5YS0j$Lwht;eL{FTH7pI}h-`Cp9Hpo~-}2Q4i_PG{c=KFqxq zVIwNJBIM2K6;PR1>!pW-0Xr5ty338-6Gv~g^~l4^kJ_h7re02glwwzW=M{3u=PL1@ zL}lZ#guM1mXcM1BF&Vi$=9R99!5=6CLl8_(49wGe(osy$(j*{JaQp7!omgw1oyjTR z&%#_T_R-e+sN^{v+RCM~1tPUpr8)G5VG}2f%IC#s>Oj_=ww)gI2`&}%NrR;!DMDD8 zbP-=<^&%&y*UCU1t+>PjhQ5itB+H=E7;IvAgb)I5$fj1v1ssY1+?IXJAq$dO6s-y~ zSF1sjGs3R8nL-R;fp>yhCGN;Vqpq%Am~=f;>TIMoXpb6 zvVOVL_5as@423r3e1`xP7bg!lyDr#r>Ig!`t`4D?_tbrS}F&0PEly4cnJtMtNK#8bAIgZmR-mAjpV2-2d7N zm;`a+3{G&==&RDnu_F@e)iv)vUY(0QBKc=Q`pGWGJ#`s!%d^Yx(bG5Fx;aRR<%scI zgaJ`8WdU0l2h=-ZNW&NOyR(`rz%481(GV}-uPeGB5cvT>k^$F0}7CYw*@%u_;~e7-87`gc!3D|yEpZ8 z#(7!&YM(e>4$B`dJ{S7L#ZlPQ15~Pg+1FkVu+!}sw>7fqpZK#kUC0lgAA4+;21j{@ z#2wG1)c1cTz9m*(1|`WmDcJc>&G9^i7{b?5R$;b)GPjXNbVPZXh)WHc=_KI0Fy0up z{szpHO=&i&-_+UD1dOY2Pl|qTR?IR4CPKhI*|BaI+?<8B{^~0@Z@T5#l}^nxlxb@d zhG3;r>{%pJ6HEZ+o|V@d(c05sp1J8~3ZMKC!Hhifj$kP7kc>w6ODcG8%V)AAaCIv{ ziMseCeMS)_)ra>EY3X2%mYH(qYB}|F(H{&4EZ4*Ln)pJzi1>6Vu<*h@p*qr`H04;f zX0Rcw>w$Hp7gij8p#@w`%hDYRG!t-oHP_u9zDEkd8C^vuUV07w;gf%WRSpz<&(u`T z2Z4@fi$R7W67*$O=NAo*4I^ zeehZdU9tCjFd9WzY(F53k3-@}Dpdpqw~he(R1O*5V&hL{WWU+#<0@z;c&Hj*KlTux z*KY!tF`e6PKitnQL?`VGn@+HK9Ny{7gmnw3nevGN4+FQTB3;&Oxl#x%Or;_#)8H&L z-_UycklhoeOcd(T5kwEeojSCnGS~rdC2s{FfYTvoRRe<*?o?tA@^{NwsX=!T()jgN zQkEsD0d7sRE6f+eSaGW|B+mPUKnUD`esHaZ-P@n~FZ0y*PQm0>EwY~?%rKK3u38YT z&(84)5hN%CH{#q=-xQ$BXPC>7Di@_!>nXbS)6%D_e!~k1pBW4bSQ8&|CZ*WH;n6Zcw<>`DIDc)+onlGD{>`lMISS)u}4Uh|7Vz zuA@3Z@n(=QTQeA4}^cad!axD*{-aMu9k32 X;64KdF1A|)_l9qSf?XBeN+5)w#3KtP(}B1#%cTts01z)TDvdB8MUU^<`zb{rYfWF*DJBP_3k*G4em8ZB0LACYfXW&6FVHE_RYAOOX8Xg3fQqlu zdxIQ*qp!MagLc9+13tXT1Hpk_z-8@se!GCfPejUT?$08?^bB!;1TfI zHwWl_2mY!3u>eH0{QeUBCO9;Y|niIZfxBEf~Z+0I59)f4Si9f4= zH$VwMcMlX$R{;s=ZS&6#u>ZOK#J!C;C2S7x`YL*Yya(j@AAjGzSbQn|0A36H1ziKo z_M7Si=Rfeja;_2g0bPI;K*$f|>(GtlE#NMIQ?ToU^}XN*a2Y`R0~|p5qxpmRDS31H z=8!Pk_76kKd&ZGI6F?9EaS3z9ATOX80Q$N3BfAgS?wbds0-ymtpT7qUOaO=9<9>kw zEI&~{|DbY<`5FKK0DkBI*KdRVqCb+?5&f7?jF$%2fB``5cj1TC&+nhncg9!2HiG>= zVE{A0F|ptnup)R22n8s9Iz46p0Nau`s{nv&-^ML~_|RFHhxq5bq%uDPPYfv- zNd!t5iWrP2^k1PMLzM&v1qMfsq8`QO>JJWSqvgn8E+MMZ#hnI}3)_MNr-4J!$y6}b z7iUH|B@2M*(W*Piu^mh@c_h1PG@0VcIiPV=knoF;es z>GiIEg=@4m>U8F%ggFs^f*JBMYr~&@8DR%YOox;GW&L?xk==P=uv!?DqJ0?esG<2X zc6V^A^NMiu)K76nDi66Apy@`g2+AD7GJ!LSWe#T=!TMj2VL#@RvS4oxgI7=9mKw^keQPv-v$M`l9U2c2(m)BpQw|BFLM>)~5;8Ud1dyMh7L z8)1RnyKA#d0u-wrC1a{D;%w_zrw+MfDE1%Jj0wK>43q;s*(fIl^1uI&AX%&$(vr~B zeej!hHHm(njBKtHLHuz_@hh$w!jQEc3#1(iOm1W?w=rGiQ9aJoRWhX)XPre zSS4Z!@;`6pKN&I&UKU?^eqo1XLPjOjvAm|Q7KZ;jhSi-yK?iyy#H%A!?yum#i_%F84=@(+h5tjCO454O2d0vJeB(1|6KX&;U-%t)4J{|z`@%JbFdCT z*>P1X4BX=xr0lU`DJy{~8y;d?{LAL*sP5p%hEIaj>VUQ+@_ePmY2D-eQ6aUx1a4Y) zOTI^k=?ioE5aQBYUs2}Nv_q)oLr!GaqVA+qg!bHO{U_I)3Vm9N2%|sc@qOYmhF@=F z#4FWBFUmaV5yTMAG8;8&>!+u-uvXoR?|Vr>He%lze8jA@ESoa3^7l`ziRF8bFfmhKS_n{SaDVz$Oy zK#1bb(TV9-QN9+JC%#c9x?w^VVdSN1Q+CV(Lup1lwneGkqWf z>Rp~^yn~bCXe%eh*`VVOSC-%bqo8Qvb_8q+@y|^t9xM{!Ce?I zfl|qsX!!IdDD&E%|A?`DeHR3P*a*F$q(NMwg0Gud@jjnb+tqCO&3LG1?BUaFQ6t6C za%X}BYiTyan#e6~st8B+r95We= zXI2hdI}NvBYx14xi{cj*L8+w9v+EyhTpe~PmP$2!Ti%BP`9uM=I^PU3UUn@p>AA!f zaD$002rVP%NfWy4F)R9zekF2J<2wrtJ=T^(R;VF@pbvxEG-0i8MV z>s^$iF*1V+Rt)jM@L?XNs+d2 zJc9~p&}cooAtI-Xvh4SrrIMYxL3GLe_=*`w)UEw*89}7QULH5c_^e*5oYws|EQc_? zXJJ~VHW2c{|78lz_3v`k|L??{UfV%m_KvS!i()gym++3b)g2!kGL@aD50jy4 zpcFvKboS2$kDq;{)#LJ74&Y5@lUi3B< zW8LKU#UByFHFu6_!~sRK9)doyMYkLG^|;$Lq$4!d$Hy`1=#9dq0UqcEeA3eWiG)sb z<}h`jJS0{KWi=f|ySgOY0h1FApg0qwF?Re5z7?afwxKPBP6R;ZA#$bS$mHscUYA zE+`noj4pbhL{vR;h(w!s90(1Mg|B-$wRG+3R#b|<2qH8|H+IPE2>Ds8IjPlp8}Me&M`TeFb$lq8bk{x3)Uee(7mC%469#&v)))6yEePK+D4v%RdNm?Vdi*+1m;8OmkeayvlTkCwoH zi9|ek2nKI*ewu*(`IP130s)hbsyHFrO$@_f{%;&9H0UadH zP$`5&v8*C);n{rCIH`=HQ(PBVL~&)^uZK&|mOTRZ_kj!@mt2H{9SE@q2!RT0Ts&Ou zIGI~|8Pm0?%(o$Mb&8=jnCR4Ac0AIjIYw*()-fD`s+YTpWBgd|x2(pk@g<@K>@)!d zh*DZP8(2wf0Ytg8$&@Zs#ggQi7=kprgk6P8I4*wwZEUzEYkyTT!tJ}USL$tYBf;jW zMWd#Y*)-bA8*4)KUdR+#M_>Acja6xR0kUaZC?sQBb5ibE&Ytpz=qdSeEya+T8za4r zFoxM)nQ`ueX%)}-se-@#9`l{;t`XNr0qT@=qz~3HUSvY&a43%-FG6Fb%q4z5)?c|)*uj&Tds4@m$JmLZ$!$hKt(v( zLVCP}RJe;liNP3L9Zs!tpa!~w+x>W`xN!fEvb~2HC;-9dnB}>b)t|)}H+E54*rL2r zr!MvhwEpqnb2Fz9^+|eobe?6=cU6|VD%AKYnEP&A+^QSrmHK;(VqYdi^{*0ThU#-q zj$*(MF~KD+lAY-@D%b^80ZbUKHYY3uO3#-?tQN7+3QHm2Xb)MC@!mHd%*TyI9@P=q z2PSsQ4mb!$QEU5BJ^$B@{Vq!dXcdTKt#n9h=7Hy8T`w6qCHX4XS;m}HOYT~r?I@~L z(=~sh;%QSj_R}a>$Ezl2Q0xgNB-XJkY54sHkbJm%iVA^D9ZTcna>ZWveiqK|3x9P2 z@!L$uBn#6s)0vO-ZEn4)uhS~eLLf{ps~Va!N;i})&#jrCA|1oc)>VexCfDPAbRe%d zg{(C^@4HGjF8m41MVW;5{}wDrtf-)fpXzD5f5St0H?J5ZxGayL`BYYBQeQ zF#T7c_BQ=HHT8cP#s90n`Zs#)f6idb|Jo99mwjX8t&}yn+L|>5T%N+6IR`3c<-!kc zK4Rys=2SJAc?m(MCH-$pCmAKmOHsUIeusiMX)JVoKN|E_U%(!deJ91uU3#FN(s8zO zb%-rq-~T}r0hiTJt9JTH;xw5zWFA7RJgt`f1Dnmmd3M83+WuRL_wR+%yAX}x|G2|e zz;gee%B}y8$p!*}etxDRQWDjOLc2jcOU4fY9A_NgJL?ESf%0Z?ysL<*Ah zT5YaJP5p(y!n&U4f;`Z2@LZihNO?p7KBKmH!U`yTrXG6r!_T&F0PhC^5}Xteq6|8# zezkK_u|;pf6{uv9;u=MH1EUg?Go-bgQ4+N1sp_9)J_aS8vkn#kCEYg|7FD261~|Tl zuN& zUpr5-3yd!>F5eWi>Q(P#$L1%`m8Nj2A_(Y3T(;~4KGs_%d_0eaP|T-J$U03B;toPEc!0x&P4VY+p%Z-w*z#8klql#mAHS*7@hP^kSqLAOy! z`ybGWBGqU+S58ChS)qmH!(q7^fje!CE| zjTTcz9w75=K=x#Ni`*Id)w3OUbNw=7?~FBflGUy!8zr$B{eGQdcPiWtrlhk^D=qX8kYOwqExT0un}P2^H&taLCbH6f zuo0#~j|*klytM*;!59X|>ijw3uk4n>hx*qk+uWcJrr$qrKT%XO7G+6B#GRTXvA|V{ zc3NJH2toJYrTo>Ej9*j}b9qtw%m)rpVH@iaOJDwlQC;h$q$c}_tY%@>!@{6Z`P`Hp zFSL;a*G~4LC?$6X*OL#B5$gwW?8#4qsT1`TJz(ZN2-cGzCR=Zz67Jg^7Ro9&yWd$3s+Z*te;laVC;+6Lk;GiH=8FFe|vxMz4VEZN1jjmNBG=za9Uk!({n6qkl5 z&R0GLfXCW+77gCFKO3O4)We3;B4TSvbmwP^FNew7teg)EQSu|(`vyVZFrK#xkixVVqO;qKvKa9Zy(+r z^@09Ezv#dYbXT+{`BK9tJvyUMs8YCA{#-6s>K;3WQArtXL9e8{YZvd6J{8JC4@;fn z6zP~=`2nOdrz&}cnzs?>i-<8DaDD*ol8TOl%Rgc(F3QI~-_dP$V-zHGCU&IlHeq6! z8WzmA73*x15M%X$q$w>LjkEAs)!~6#ac^K-!IQ-OismZ3e;6l0_pGASSH;N)n?YHe zNK`ksc7IM0M72@tc}8S>=XI#qT%7x%4L1G=>9Ln_;BS3lCkYur{W^(xKs{8-_Xk@| z+D|9AAVz$~K>F*TyL?@;k3;43{RNf`|27U+*QVOj50C8v8hf5Kj8Y#fgyiCI>KeQk zP+wETcoM?kj^Pe%R2}#P(0=Fd4O@ zDkKaz|Lf6P=m%!zg1pu6fM?DYme&HJ4XoxAvD5YbFSS+=*NhC6>0>V9RPaI-)E*_=1X!TKefJ698UxlK5?a=ocLC&s zG%8{1#KSBJOR{_Ae2aU=+pbmsMP8z?$>^y44brwW5J<{L@XOSZoSh)NEqIb%6MeZJ zyPyx{CTobtQr>R+{o6rw?|1wIU-u5Y(bfV_0Iyx&dGkpcWYCsM3u{VT8c=g@2jx)g!HUC;CW=GVMs54(2(fK{@9S%yIj1z&*Br z|NhCzmyUNc{9%xSu7_pzNd;l#Hb3*y@#pIkfQwvV2Q{xVCMmRjo;6m(AdA(>zPq-L zN#-f$g=-F5JvzZ-FNgy~ESQRpEX}iUK!LMRSBk=XM&rEY@)Gh)C_|?^&s_PqYYS_c zp3H0qq0O9S`JIei3b-0aAESR73VR>Utgk%A2sc7l_&CoSU$|3`6ZH!-Fm!e1Ey+W- z#Ol>&e@?p=$OUg{4-N=tj>8AywLY!l8r6)$@#6Dc&~!PDkl`F`VnehcZ=s04A&NRK z&<0%!b_SEL52_B|v#ZC2MBn4%(FvI3&<&Cg{mPF4UQuF=BY_x7jf>-6by-|iH}HXq z1q!7%J*JkN{cfO4eAHOPHh@aJlt`)&X_fpKBj}u>Vd*Z)^bdV!LAY-3MathokFYnz z(x4)IB20)!12i8c1<$jPZt1bOm4gCGO*hH5B_OKI5}oAMXy z$MaP9xiQR!QQ&@Zjo|anM1DlhQQc_E(^r-R0!fq$fcZNI(DB74==~guU)Bk+2lO9T zqut=k#DC%c93j91NE05M1-cD~;PKl2&vHi)U$@FwBb5B1hD(b{sQ2YGS!Ssvh?Spz z&jwPh6aINNM(jO<$+5)E^vJ8aC-zx8YZ?o>_G_<0EVz{ z+mqOr%hcDj(sjcM^~XUM6Oynu*X7pcyypAPGm?P|p!GCY}`SxzH;iGcXJmV{x@1MzSzbd;+T=05uWDVSk3+rSHk z>wRhIu4$u*4#HDKa~m^p2pa3zVL;s?C5a{UM>W8LRLOQ>@0(A3=&RLpj9yu=s=cZ$ z4M!~&9q>5`agye2niev^YwRqv#Rw#Z&q9~@AwrkEYbl)NE9Kl{I|Ble>$s3AOZhGf z2s(FFsXDBJ8!aXqvtRXU_JCd!(D#5YRV~113M^IK)ylK z$Jn7Pg;iDIgh&4^`5ftQpFElU{&-+vLyg83VYm33fNAOz3Gr`S%F1i*qOTe1hU9a- zE&E0~yFP^n#3-;$9wlVzMWBm8H!ZowMhjI4q8R~A_ZSC&&^Vgt&MUulxzs_)ND2>& z(UHFuLa99~0u==h2#AFVBsuQvF4;Uui_VTEp%CN`Wc8kX$(4cc?`y)a84`vT_6HfZ z4GRHp&dd&CS%>27(_#k(KOLaa+4+W;9AOI;mji7P;O*(LG5_gTbR6-I#4Y88tm*lA zZK-Wwo)+DcSGWL`jRgmu)~s?VysD$ z?H#M3t1RK82cMFT(PvbnUC)UY9r8zaV=yI04oJ=gZ9fneU1IKe>^cElXxw&{}M++Yfq{OU~`z0IVy&2k1JV;zYlj;a%xsLN2uV;h~lWX-4j)HGg*#~u0owK ziepn|L#}=t1NlAo34OB?iQOw9UO_KawJtnb5h$M}RM~B@Mw0J98ET~UJh;tbU&7PK zz+B*mETT_!tm=HR$3Q@c%zx%eK!Tsa)AOE4x_S9UZKSsDB^Y~$59hEB`)j{eXg8SU z4K_H(T_5?0BzGvhuvhSO+|4f6v!p83!TXhIMr5pB9#psS!+Zd@Hr90&&}NQvu8bJV zSh5uwDx63%8Rm5{t4(tLoKfzmlc7RhF`L~8Ih$7gwu)yj+V;q+jvFGsAI>F#LHYhf z*bSup&N<>S46(mrn;3WlvSg~^4N(B@!-+lMs_088lPi&r{tHP?t&<^$U&n_@>Z2Gg zkA&TS6|!i_S}>To0Eau$dnD#9IfEQtbj1D2eiTq_6JrBYXbMfa>EaX+vtd0s^`0N+ zUavLt=WE*$fbf7v6Iv2rD{#(j#r8#Tc_BnaYq8*7O8 zUC*g~g0u{j=mD%l!?uDdcR~;NWfkXKjE3G7L9V^%DIIT_nj#~Bz~VL9)PcA>1w!F* z1C5@h$)!;9$P*BP2)u&Gw1~;XZw?u40*S8nkHD-29_A!RVrM%FEbgx|&*+*SJ9|{e zU?We3&m!kLdkh6qcIR3@L0W|SHCd$ncDJEe>X!fmZ5IKz9c}>*gxcSx(Mz0D1S8AU zd0;wL^2He`3&WKfaSWE|C-~K+sCLP9^OIaSA>Rm6tBSJ}d+_I+ky~fwJ&J&EKA2 z5tU30C&K!`+;|3wzD`Noivzl+Z3#qurGZcw7p{0ga0_y7sfzg2!s(6)4ADp48H@#H z-2jVMamTrp%X*#-#R3=Uqme6G3uPg2?y5t)saTQD%!vdIQtgw4dq%H}ZYV2+JdKBg z-A?5dc4&kB^EZPF2vpBo69^;Z?FkyN(Y-&X)+CIsMY1mQ+`d@)R{u%5XN~pNv%Aqm zC#{Lw1$%|{iP0sgJ>tT~SMOHavP>4jTZ)4E$mHcbgy$GtJ)92eh?r*#D6hQ1*{zd= zphG=mwyrPEr8U6n3uT)!WI0_5D|uG%H%+ET=!b!~o8=lROXBMxzFyMyxUNoubK~j&twAApOMX0o~8}@P5RD}*l zr4or>%zEEQzht6}ww$KXH>nSLFis)Ca)P!u+}M5o(U_xs83BU(j83NJ&rMk4+e9zjyL9Nb7ENa_~7^(0sN?B*B%^+uE40v zCmLiy7d6Pj9U{@w#wlv|9A)wv*2Lb?NQAMc1Q!UT(d^H2aqnMyAm~>vkn__@ysZ%j zcLwXMfQ7_960SO}SSw?PFI0_@K^|lgzp7d@X9fyNU%e`i;Fl%}KQe1T9P! z2{z>nH)j(@c`5Nji6iM#9m0aI+oEbG7>6?|B<9jTtKq0q#JQ_dPs9_;YPa9$-FmZLuSLo(Tf!jYGi4Vb zXbwes(%VNYmE+uJx4^Bffg37kNVw!9rT;;V4$WeBg~X?l#berRHwJ!4)D=oTdDF3%lQPr zDFn6k#i*Oics2n?K)^WY-hdjH>XW5`Cs}>WseB3(>%6Sr;3X$#PDW&6 z1afD<1sfPuMnXVlbFAwF9^^NoSYoInE}UDPpRS}aqq7;3YF2AHxK>;HT(J0+zY^hB zHg`Ses6Ske>4ut#Y`I8kk%^G%H(!QaqLsBs6dLw=ra)Dyoaivpmb*x`!U1E_#*aDC z0xp7)LJfly(C>$ymu!*NdxnUEBTirritlZ0JHN;W;G=0@R!AOj7ylN*esWl8?gwKQ z6N`YV_j{BUigDn8$`;3jT{pJ`Rw$B`7l1k_VFuXm=TW?CDz9zdfmjZK{W{K>u~cy4&QEs@iTlL z@|7CSPly}BqvSr-njCqZwZ2`blMQ<&EMz zJw??Jng7W)?u|C$L$wbfeuV-ErD-CPbD@Q$oeODIVE#o8QELKmKzV`Rlw`# zZ>;DiAITwVBR7giE7{EyzfF~I+c!!Zhf&=b9zBRtXSvwQqY2Y511z^h3D?c`tyCF` z05=&1?iuxwHuF%iY8cs{4^S#m)r)W;70Jlo|M-K5PK!gQ&{H`OJbQp<#PfJ>H^H>A z6@0IKH8&kbX>CdVWzcv)c_oX*nKY?t zy~L9dnBhp`1T}y~R1QSuG>0Sp?ENcB5R)eme!fhtX)h^F{J8Lml|ajW*{!nNA3=`L zq@{tA<}gh7CbH}tiq8=jfVgiDiLOPKz%SX*mFY$WdfF16K z^pGHtc$S!;-zb7myKRjQ(a8kLzaZzgfo(vH5dV)8KtC?i$Wo*+Ya~Kj@9jz}f$T5X zBAaC*oe>BX>wsXk^lI187bFd2;WTeM4e0RWU?V&uKe;hyNH^=UvdoH8ZAD}X6pS2M zP>?7hqwI*i*le>1I*E5ss--?<(epkYodwJW?W#qPDZWl5vU&(2^`@gz905lIP*ixW zaBXlcUM%oxuxCXh!S%A0YwHsNr1esGYMchM6feYR&_PCFf8MS$P#P5fSkvNnR<{}0L z8N9O0xvI^Ulb$Fhnv4}}*tvw$ zLCa*GdvApwOGEivNnCm81cr@D^D{Wh!kgo}a?~JZ>w9A73>D?Q+(`>D(&6QOyr@XYJrukZkDlmK98E39YbTUV74;vpuKuCR*cnP8OqV(}Px2$-561f9 zVHvYgbypr9IN+)1$#IW5UGv%0VpeBs>%i{0P*8zY_~@a^aLM+^`ZGm&oiS@T?3uRz zk?=Mx{kBLYoa3fCU{R0N%YEBi6FV3fwu}ooDD=Jqr?;&idX{`?^1ZJwN5QoAlxtAZ z^qB|t!bC?RriAhW!WC1f9cioUif|%Z)0!hmE<;|lB988&T4#t8=odY0c86oo)Z)pU zp>aCOx0U|h%L;{W!xI0%irx?i&?QmLP$+ub?s(y? z_&ndEX+NyPB~;(0w;B_gZMydF^~CpJQZ$MRmb{9@-0DG`cso7ufa0*eB5w0Y-?1;r z?2XTRyVc)sSt7<2s!0r}*}#%NqIa zGCtPyETZlyjX(NapHT9v-mEC87NXbS-i-bZ+t=$GX-WKk(Fos9J!)k`+JvnULs0gS z%b;$_AsKk=K{59IQU2i`kajK5U_rhMdlD7XJ^&ZVSSW^D@kN0z$`{zp{=dWQKOn!{O?-JZK;J?DjaFd*x&72_zPin zWQQ8!kbXKnVTSI>jZ&;4$E-CS;CZ8yi9*_l`YJ(%Pd$Yna-feu&PdwFo14jwuD~!Q zRlRNR#2pd%peRmxl;R1a*Nx$Mgj`XoqTwdz&M%BWv~Xiy?f!`Crf}J93i+YM)?ybf zGoIg2&pE@2UnHTtmw@@~ob0IZqNQd8ONA03<07jl@fFH%vsmdyt zTmF0!&Epe!%hz)Sw}^E-$;{30=#9B~rzmEPb^DUW9{=0$?_^02gskS^H5I-040!Vs zGy}S%02nwvmo!jM!7%EjWUSD`YRm|oEXEb=E?kRKY5ADpsaAccCx)jaD)M4JT)4-S zwf}ve?Saqf^{xq+YfUB#)m=AL82wEyQ4rJe7biKDeh?HKkP^5i6@D6yh4y~BcgnAa zj`oA*;ZL2)l!SAr0~`>M9FSpVg)B=kzZ8?-TBIZyB+JGrS0+vMc)2dww!G%kFu3$? z3h4ug@k9Heze7yyxqAvl^L7}W6EPQApEolNGI$`K5cij{BxKV;`3@x}%{Jc`#=~>| zft$fmOz^yNw zsFzp;o(7+MPZrVV0(LsEv}$2M8!?%Z7q=Y2E^4zf&!S?719mKI>LRbe#E7la7WTAT zCoPk8gIw=}=0CIZ1Qf{5NiXZ5g|xb$ua-2uH|ZqM;ze!bQy&*r9SHGVmmtS09=l>)dqXu}Xm| zkCE-+i{W9^sK}EsAkxq_T4d9^H2nSK_j+$92`;i$V56C9V#Z$$!aj~d8HUldf{(G|!3i{Gk<3afX;t{W-TcHA`^T=z52A zqFOfJi$7PTt7#Nx#a7)mRv7&x+aqSiii1(bX@@l%z`(RDPGi1>$V&KO(rNKH=+GV?`704kwnHM z>fDh~;|+)o@K+t!{!Ul3hrUP^?BKlv<>{0{^ZM1>qIOoCM-)JI5lTCMWv^`K1C|@| z{T(wH%8-o75tL$6N|-Nh$nr<0Sr_D9{rTdTN1YDG;g$0WfCAGHn}!HULygN8(-AKa z)-XFqF3_D+PMluCwWTXF49a#)n4=a+S`x;t@+>rnQBc~c%-Ab1*ObcB!NTQ&`BX{S zfXG{VpDrJAC(ex?%QEL;e z0J`ZE&^WB;pypnP4=7-w_8YMe19oGXh0^K#rmqSwdauLRo3zSJLga4rZyL;-`%*sI zaO^l%yv5xY%H7;UQ{sK=scTyD7^=>@F+me+xJmu`D<{zp%<9g7M6l^%DbM!{RH6l- z9F`ZiUJAZJX&9hJ){YIYqyTV4Y39SR_>D63kyI`+h4F8G1!AB^L?5Udvzc&`xRYIC zqj)2$UYMRat9OTvCY`)6#q*e@o;!Z@7VraKj^n4`kQ?^+l5ydhA^WE)77{H>4st&B~4#a8>iK?YErB=>IY2cSLWX^hg;c5 zrniN=CtU*BR89~?oDqOxza7L)PGuuWa-{W3DRc zA$;Gtdh^QOv10YPrJ6t=k~<`M5k2Wf(q9cYdGyqF(51M>HB1bwC1X;s(sZ=bM(yGj zbZNG>JO}OP+;%_y9-ROC(sTlfJo0ce&pgW9vLn7j@%+WL?MpY~Q17TAQm`{EL~4)o?y#NUwI~VpRRQzj#916fX@TDwd-+{^)b2`o zOD#m)hVrqFq#I;vZm)1R?F$!-RUg&`V6}(G@khC<|dzdX3&?MF3*WCS-*5UK|4VPfG8*9)0y)v$w_4ag*pbFZKeu z1N^>wx+;ZQusno$A`m;PY)fxB+ITcoSa@*-uhpPguK{k#^sll;?q3tzK3~O5@K{h) zzFSH<904wu_Y7tP9^%C2DHPm|Su>q3UEAwA>YDKh=w-`xxYZzhgQo~jqA#eP;LI12 z=7!3p+PA>#9IA<9Zq1NlNELZMN&H~N`Gxwp#$kOe@Z@tgUSt(^%`bIi(T6}X!K z(ho!0RAZll*qr2@UO7t}QxzylTn1NQkWkPMZ-!wR*PGdzbZBNoSz0sz#?I z-M?y;?RI=Cq$Utweqvj^;E!Ys^9Wd=oV}d!XPa^Kzt7;YKxb6mpWA(y?tNdZd^R@rR zzEj8QyP4N>{k^}_$3NL=n=3xyuJ>*^VV2Xx;_K9!mmBqpt$lc<)r{w=-wC=0>64@N z_>ca#YwGScWuew_N-F5HNU0SPW?0O~@f*_atE=(-9xg82qvn1ev$ucZ!qtRuA=)WX zTouKIgNDb;^pAmVvco)=SB^|rW#;lFn{cqH4B*A6~z+0tk5%nGr=ipuKXx%`2Yv+ms>4^avb z?Pq z5vVr5a%D1x`5R_o;nd<4M0x_Iw~BM_&8u{RIjv1!po&z2z3bjSW+R`&3B3lmNSLg~ z9MuedLJ{_PMh+`U^9j_JN|mzZ!a|ZxApIvHFlUA^EnTm}22j~YWT3m7CA~*~Vqbv# zSM?DXL@$WF09=M%3606W!^H+4om{E)QbDLVD5eZ`KK_ogd>kCS5`h%+c~(uvJ>p0B^Fq4(Z75 z5fm5YcMPvFa_ny2Xv5K`&V4$XZ)R?*KC8XB_*L^LxH=#{(+#L$ZVSSYp#1o7Jr;=U*OM>Z?4#Dxv9ZMCxmals}x|Zn*@%3B?)Og8Nq9 zgg}K9ou^>G-K=k~D~)@=wQ%t42ow_G^5E(FsH-WOCg>^4sr`wb?`Zo|4naA0S)UJo z#T(y&nwFo6L1naBbJwyHS&r*1!QaS83d0j0X4Uwlj(c8g_^Lo7RZi&IQqESH=;uM` z5V)2M{5^o!w=6*Luhnx(P~*oO^c%@WUWd$8IX!#}{4`q2y$FT-l}NDMSQk5;Wme~q zJ@2tDc08hPFLF8Rn116S+0XCT=E~_mhn1Iy*nIZ~=1oB3TePIs#ToA7S)h@!3>qMT zII>y}uub88PN-2zMTshvulBm1;aQ36ZT;Zd{ScB_YM8J;nrGOG=39OcJv+^YK7U)p z(nVttk!TDG4mut6Gr#4TcJz#kwZsj14G-*HfqR4>s=^hr#p-&KX0`XGr;^Q8P*8?E zl*WAn%?C?xSijhHI2s`SS0 z{Ke*41>h}kO1ji%b0I~lbou^amav*v>3#ZA!+8?d_)-t?Z2-3pSynQA+4jZMPM&GA zWJbEJN8UMefRg9Aw4RTQVVXWHK7`$doPS=xJ&Bx8WqXSU_vE_t#OEH+HHg~R((0wr zW<5xk;G5Uik5EZh#aK=0QnW`Pw$Jw6DT8$hDXz_Ft0P%Wh-mR7tBYqwI2JLajEy;* zWByL;R7p|nkw46)qV2iYQQg(a{Pjo?edWmgP4^My+!@mc-X&(q^X4=y9$=Np_uJL@ z1PNMhxj^>W&xpU;m`5EX_D4i|tCkt_O36Fox|3V+4(^R}@xn$pJwv`>Vz;_LKr?-r zd&8=MVabK7s3X*}(4VU-sd*CCUlra_8*zpu*q86A%-XgoAO@9{lB^6>sz6fb&A9ii8!_o(|CCrOmm2Dn7U7Se6) zriiNBG0@B4x<%tS3~q`tzzejO(bMO4&w+~Bb2AxXE1g_vPmcNWQteTtpp$`Kx z-a*Pj?dns@-`1>rbw-1zqlDN-V*o*`q3JOtxTBAld8I0=cDe}g8Iq%3*=u;9TnOeV z{*rr8%;eChaMy9Y2wv8OlW5ltgB~moB?=_SmsQR&#cX8~U`oDE@G$EbPyW}{|zZA?ON+X_)GIQE}j7_MtWK43i4@TZocYJtox~}UR4S|Rzq0P z8Bb)sACLSJwae0x==Bc4a##`q*{KSh^_&?lUk zrZ|6RnZ?FKGwZ&@8c)Nr(!qYps{M%eSY+5~z!cHJ9PmRKyy2EB{7eJf!^%g#4=4Mbqjr;AAe?eUy2VT;Cu-f|DMmmws`FvR2M@~d0?AZ(>FBJ`% z1ce&wmgAF(CU0E);gIguGv=<2ES*2x2v<%BP0_eVPOZDyXFe)nfX%r$yqtE%6Yb3; zF!bqXM%fA$!~IT&<`6;7ML|d;*@+N+?-2rtmT+fWOh>Q=7O~0o;OC2Uc_Z^roTkxI zGWCydSg2Y~F-RVk8}Omr7*5Q-B?V(O42B^XMh_1M^EFg^1J%jXbduz>BQy1~6&mP{ zlp0=CQaTuO!@>e%OTCKC3Oc!38wt)<3=rJ?>^x9Iz<#Glv%&@)Z8yCClCd49o8{_3m<+VhyY><(C*ilKXXKiC&~P~QWQo>Qbf(i zpv^|m+}OeF0m7j2FLoiLlj3wP+D2@49Mnz?QDRS6Ui-b~%+#CnbFt8s1E6McAz#?> zTSOI37rmDz9?;Z7>mfJhqv^1Dc_b&zL3m6)u%Nl$x%;;>EAlBrLdJlSjaIbRAvK;O zR=dt_1=pUudFXWoe&|5N$FXlrSLpwG)BIQz5#&>p(IFqUu!o75zzQ}lVI!l$0N4m*03UV(-^+k7KD}t^ z52_AKL$6U|#fuWIXZpf55#D&XI{AkPs&3wxRX;5Njhqm!?{6-;!0-a;Vj9T(v&J6E zKlzkUnaX@(vtmw{TistcK3ZP^@VdlW4X$;u)oDhSF%CDIEd>gK=vw%5AW3apmNUh_ z(4A#+#W=+&5px6B5v)inIJ?u*u@D&-zYbN{n9^{dzr^fnVa_14bO~729tCG7mMKTI zM5-fVu4H=?7B7JZ6sycFL*40!Zi~N{%1K}@@mK;gy3;-kvGX0fU)3;gx9%l$SB(b} zT1@Sl^3m-?r_e;ES5twqdhdzSgfJN-;DEALg<{KjIfA&E=_31>#dYp5(FAX_j+{0t zq>|^Fj?0f5jTGyyLC9mV4PG-t@NYxn?U4_D5QJi<;ngeDhxPPmR&0k=*-W$)Bp-xd z0xb3C?OvUSXt|^Hw*#cNZ66`@+qKoxt&4`k+&_&xLyu@&6a zj6&nItk2k4;ikXaDYHfFhZ3!2W|>7-2$LDG&~vk_ec=mzYN8g}IFAb0n08e+>2hsF zF*VxofQk4Bv}cdUPg)W$rNQ#ap-ZNZ6{Y|AW2zE! z(n8a9i*O{Zd#n(d3N2w|NTxq0&&0bFKOonf6Bg=H(5&&y9M!iTr-YPKJS)PlT1?`= zgO|wmKTW+BWOw(s{t}-TAH9X;xS}x4RMl9jc^k{B5N{%xS-WG!>2Y*)_ZSpy`!PKKAMINmCV)Dd6RWOrg zp+2zizAklqsnrGJ>ZnDi#9Cc#RKa)%U;hFitq>1KI_(RC>a$6}kqIBqiw&SyX+wHz z$B4+tB)+Ci_y#wY*vXq#%S{ZCgmZ2jecGFHh5@9s{FYvGV;#Lm*jJ`!sYEjYZgESI z5WRfE;%>g=k~5cCYndcKh;DioVDlu-Wlqkn3C&_x0K0}PsK)t5Z*srzPM?e1%oaMI05J|0_kavA;lyHrD&qt2*V)!Eeos( zRVsNwlza^VPSwS2G*B6W_?&8)A03MO6CGEcV)y5F)yhZ-#fVaLRAS;sB4V>(7jlFum zZVJ-Rvz3z)IdcH`UF<|8KC0WqJtxgH_M$FQ#PfcHUu6fI?7%7Q&2-i(iP<&?nn3@5 zbSOACr4O>JcTif&TL-FLQU-crXhU8I7y8|AD%JB@ zixcPMN9!hTLNy?qUi3&b)o*k=S25;+;?&q(lU8zNmijzVZcEPk)m`;p#Q|v}933!y zTD445noeV7r|aEn0eX7hDzyCv-YwO|%&SXWJ#V)Jaz<1mwcX$uAoV`{%l5C#Rn=Cb z6XY_YE^uWLr#?c-b-fLwb8MUcDpMSjqo#w)7ed5{&2}h~kl-;hefXyXpN|ie_*XNP zE$q3}HBV0Ks&%)3hMKe*fdkhfBP3F#zGjz=WmxK6jRs9GSpIA?n`E)lzIY$PAfI2n z9$y(r8qIUk16n)_O?AMMxC9q0m~#3xt16op`gKc9{ZIsq_b*73q@b2EFB&XOIsu1j z>Zz((cuQVj>D7vM`B-UiUOEQ^x zJsM#`)M)2`GJu1vUtHSeR1n!>g~i;;AHY|r4+IrL+sT4lnbEo~G(ELepeN$n>2+7_ zy!4nSA*%M<0;9rOV@ayJG5pB2x>HQ8fAApy?g59x6teYJ;U;oRc+inXl)Dkn+|VHs z1(g}rH&o4fFrr-{RB~u_U$5!YC17~6h5KLs**keatvXa)^2{&A(2=q6fOC;svgR7* z<#*vPA51qNu+e!!Eu|E*e?*vrMe^CVXbxZ^t#|Re44l=1w}Z5+xyGD02?`dn$00qc zHeq}b&`K9ev&^6uH?!T$r~-#{vUFcQxSgk|Z1S}!0S1jxuU;D1^p=xhpu%4i!N|cV z00?_D{ahQm)ulrTTfT5Za5r5|1uSHN-GK@+i6`u_ghfa(Dw?F->5^J7u=yQ(l%nM8 zyz{|gc7(;Bq2N?S-RU|%{@xq0p_`gjzRBIWamLI zV0P!pxF_k%=^H_pvQ%)3^U1OWV2-ASURKU}opJSv$}sbu5nw3PDxOmK(E3Rf!ig%k z`SgxvcNivPvrKqo@yd89TY0`t+fIiK036Vh22QN9hJ|&U%(++X#WNwF_WRDL++)9T zgL+P2@xlSKJT2ZMNAnymI!RV;M5xw{HBssO^@?D2bGwb8}Q zr!&O=*L3~g3zWx|k;0Z`D%BvN+;wWD-}Bg5`Z|H2MQ~m61EC}5MFd0`zQWJ$rsDn` zTVA};sH>Ps#N%}6$NMzqo2SbYoU?@TsnWz|O*~fWq|>Fj<1+lNz-^=Wzd;V#Hqpq)K#%MiQZ_;T-rSQ@3PA-(UyWu-W(5+p_NlC9ED1>C!zsP~1hLM@h$wV1 z+rFzE8g6Ihp_X~%vg0fQP<~*+Uk_Cd@WmxQNVsQ0_c#a3?INEB=vTa3zH2)qI+_@E zB64p3s%_Jja!uz1?C{wP?3mU}*f^Mbo*|7;JXz!&C9wC;#7oL@19AL;5q9cPIBDWd zK6KSsQA42E+8d+^6Hi{EH^nD>jFCDe#^&4M)a~o>|LHS611O}4H_MSRed54fLz$l_ zjlsWKG{V9$dZ#gNHLbsMr!sqWgi}f5_~WAumXm(gZeF{yFqFi$GF>~NW?)&tIE}`* zDf)V!M-}{tQS9|UAk%9cM~*dkqWy_^grzr30MRo69p%3YA}7S$!wfe^U8-5KQS=-} z8h@aPTOKdnrkt5BhC%{+k%f^+OpeO*IYehVr??~PpjXY9D0dh}OzL}^rZ>(V3AZab z-$-C$8s}Tb?eY!)ts73mft*8n0_bt|syJnSyFcT+EdXSB;S>{5BBVt$L;&&~G^^eV zZSNOW%5NfzC~OwNh8`OnPgoO*o8~q+2)YI;$=f%n-6eyg3Ry( z(^GCuv8VSFEi-)uyO*kNCSoB}9p*+2m0fN_?WHez3uulg#!BsG|> zVY{1&f^mz&x@xWI&ASC(mIKC2kBYc84E{8NCs~lr5vmVTBa1mgU2uq8nUsW{!YdW6ott1vnoB!arr_$ zliGvw#AISH4C3E*8!mReN!A<wzyPmmYck>c8_pvZNprY`08aJ4XAs>Kdv4`yi9#O zUBB5--`+_d65QBsX)kJ~MZ{Mxk(zGK1T;UYBV;UZ8c{ZTpXKjQzmOy?jG#6CaFR5%uOr{b57!9b-)CEbA)U;rB;k|(;f z?RA;}=j#rh!X=BZDoVOBU^&y5o&$bLL>rzHm5x3Qmf3I~GW3L~^9+iQvoUSLbs0N9 zx?iNDX>SKjSD!EBp)s+@czdYmT;EYy2WmOPq#blScmXJX(+-2asY$A+^^a|{%2 zi(K^eyjal4Ff);L7Ri|mmnE*(rV0d7=)$w`)g+lsNVf?PL*MNzSr_Bo*CtKHp!iS=XNVt4*j1)tj zgCt@ny2F)9iXrprbOa1f_LT9*( zSGUmR(7Pt^w{XRd27ZQAMJTEMtFNZ6V4&w1*MoxYpF3L0mM2-Z3bgM;Hyb0($d3K* z;TfGul97Za6m4R5P(-dhi?@U00#&hFjb7c_JEh~}E*_~j`rXl7CW5_6XHxkYpPCQst=P6I%ZM+|82BT|qU?jIPbgROd!;j<6YamHZ}he= zf7=?OA!DXr@7X`CzB857D`1G1`>ItujG!{W@2^*5JS}1!G?>5%Nbw0!u`s^Y(;ry* zdYeMuaFl7NldzmJ21NL6esJAUD3$T!VD6dn(}NX+P)J}ulB7?+Fh1z-|5V=?siK=q z@u6~dLSng7#oqaoikW?G0zIYQ^_r6ft+ZF|QGIBRBC8yGR3=h)>R+S~jHF73|j4fyg$&G&(YxGrGcr&kqzV37BtWNUnzNcD?!l7R0M1Bw@7s8Ozf%}L zcz)+I)lj){nYua2kTuciS_bkG*D$L_hu{~WJs>9Lp>xACnEhn7l_SdTrhlidcl+nHTb-QO~vg`fq6x zCEDs}=RfjK-+!JMWKj=|iz5f;z;1TiOCu2H0>dyf2oPp*w(MRerV8()#C2(}$vHA-oJnn3+=aH0f^CamY`7zSa!khY=# z!xBccCpK%n&&>%*3SZ}Yy!uMm#tv%jpS=7I)5%&c>SdXWV4I14!@p&6-}A}kOSk}U z!}VE0*;H3VcH~`&fGxn?lg>vVA~s|V$6$LepR9NL8D#lOXoY~++^JVSJdML6@KMfC z-&xS4t+Y`hW&9?#6BwQVdp^`h>5x}B+6-Xai0%-xcu%?!}cu9`V6`#vMxf0IY>9+@F@#1 zcDDXaul#Rl;KF10>Aft~q3xDy^ZF{_#I>0L*12ZEc}+;phyr~;<2981uuT59ot+wN+CwQqew z>o7~xSs(zu5aoPPHkC%{^_1ouFJIx*O2QxYdY}MM$M5wWtk$o)U>B|1by4CKu{x?t zlt8L7yLssIIjLt`DS&WsAm(fn!l)~}*fFIN%r991o%`aT2)G-p)qH!ZT2y?PWeT$L zmcd6bx~RccKw|buw}I!H6!cL7)T(fM2gZx*hkD6n(GnhFAN@g4;ErDn66gYLx)~!* zLiZoBv+PgIR8g=xJ+M|4!8SVAu*0u4cfHM0iXLo;P zwSco0DhHx3cMF@ur?h@GdP8!AS2}+d2f~m@N1mdcSp7>6;WIchsi;2L=aqgE>JY(! zI|WX@at*nveLMDkBprLDpF$0lcGuVJ$q5uI&2@|FY=Q=yfV>Cj=!uq)^c8~V*ddvx zGh^7c+k{TpS`2RBWji`5b5LBib4Jy~2|+5hDU~7Mu_pew7%7tCKp*YmEGl1L15iR~ zZs{*dvBCDqv8W`oAp)qQZ?h9t$c`s4$=<5@F?iFqc2$H+?leu0<^bqU+yjrq9u_yi z=*vK2s;ktv@3Sh69)z1@^E2hdiBoX<4E;mBe2SuW5UuI%%>viPMQjug83&m3f+BZY5>#Yc2`iX7sk^I!)j{8%dvqzb zct;1lUpE)Og_{^D&jr))azKi&Y-r`Pl=v;@?#D5WXR^KNc7l+W($cKZ$6-IdZ|MC= zKoP`R1LgzG*^dJ=o2(&-#PY@}$x1rAUXNl${r4KIK2*l7CY7x6e;~rJ@-BV3(q_G4 ztzme?*~!?dHPV*F7*(9YX}3j8tBu6QBN&t1!~@8G3If8Up7})h#?1{%BZtK{6>R%a zJl zJ!c)i7*sgn*vwk^YIAzVdV&qYNI{1s^{~;i>`m$YT6a-WZ#i2Yl6?~K;m}id;8;n0 z(9vYa4TcU<%fPFurs*Tv>u8nDcx5{PB*piYI6qm1kK`INql`ipRA#<4Lt6uCyDxnbqu$-n(;_H ztuyrkedpp9uIt*A-oAGYMbQ=iW~C?}WmhUw*bQ#HNF01ymbc(Fn9Zs5#P`*FzilYU zA`h8uy;rU8NavQ8xQ?|W{0f_44>_bv|5Ku01^|!NzRvM_b{V#fU!#FzAFtk!UNa9vB#)bM zI~eHHoMI$L8(2A7{E?S-e16Xrm`1nbvw5}mM{khSugehwI~DF$Iy(`FwC~AtvDYR} zzQej-#dh_Ve&)E?j-`}l3}zEdm9A`7{1@~++HqREa~bpagFM%@L}L5YsU+osIB@@j zx%R!!Cr!3-K>`#dZ*0x3vYgl1YoX?qy(@qUC(x6_w;6B=|2w-_?~Z)*xOP>3qoGg+ zsqH{TjG4XWC2IjXG`|?+RPlA2n>@R3x0lqJjrA_~;cP(y19LF2B>%wUL0#bX@p*}E z#t2Vk7NUZ!-=5XK(0(G``p5_BW>n+ZIx6?!HXE|wdRjK=78sqJRxkHL0?;ht1cTy5 ztZ7F~m)oWl`{?H)s@3JFhn&{ALPZn5Me4k;RY}}0P1VOIYbQKSAtF`Vh-iVbLVchx zX#`{{WkJ*0aog?hMA3E9!PPfNv&IOGmCgkq80yZC5|z$ko3b0G&w>b3BV_RbJ+W|^ zi_@2%ANe&CQ_BAkzPjW`EgO&8ySSdyuT9@73pAmP+CQG_Xe$fQS$zYAE7~@cN8c;F zyGx7CCMxZeA@q_`R|mCE5|Vb2o=B`UB@f_Uu#{d)o`F)ifVFf3Hz3dY^Jrv!n#tT) zDIFQp7XfZ492YEx3`3I{R0ft|W8^k{H3Oy*LBrQ9j0*{!u4s4(oUiDXZdo0Oey<(~ z?pGI)dPx!suNhfYzHoeCYZq$bk8;ZadAv|2FZ+qgC?CB9oUPmVPoJ%;>Zi0aqENP$ z%BqEHlpxvHSK)mOv)wefvk(ie0^cWz=tdT-(pdw1;>r8#{KV_ZzO$=gh0Qag{teOI)^9MDbDj&_1FI1aoh$9Sv_G2$+$$!(4H*7u>zaTt#PDeUHgnrXSFIgEdgg3OG60HC)xi@sy! z(PI~9{EFgj|}CNM8SfVUQ+&E?|noGa*L zBL*9{QM#tZAg3GA+L(1)(Wao=&^bN_@6S}Jl_P>43GHom>Qp>M@B{Or z&UY2|l_SsF?a*flqO1Ur4Gn-`+w`xhnj@mDYwJMfP63GAS)=cZeo}UZvLn@^Po34g z#&#KDhC&o&1J4+b&y=|tI>x(C`iUQ2Qgn;xMGk+w6!a}-hI>-$V*KdM15WvcdSNysLQ#{C&9$xitF^1Pog=&p%LcV8K$F5S)rt zIKQ49_sr-4ERxfvG+QfDLQFG5Sx9p?fk(QMw&w!L_9+# zq+~|eA!2KQ?zjD3{c|wPSy_<`Kg8|=m#9H6gB3Lh@z^GSR&uz>WFC~FC zdi;-ezjKDR2FBxc*{>KIK~Otk^8KMLmuFF;4nJn=v0LF~s2DTTLWW-p5is*6mH`hY z=Dlhe;OL=75i;KxuLHzZV?4!pY*djYG?@BIG-N_uaveL^#qp0l1N{T)@iLTw5VT10 zc~@QX^Z})-kN`Jn3V33C1vn6E7O(6c-fAw-x~#ph>k?A>8yAs~`6!_dnU&Sqz|f9C z$OUr4vdh;Q6RGqp%>rIbAF5a1)3rfYOR1F(Q>e1hn;GvwlheRPrz|~W)yta%IeHD& z3O4^RQL75t)t^spKKj$8X%O^|nU_nZ1kQZFP%~wN+~X0eRW%Mv&pWdezO+HVXN^vcpU}vznVd(t> zUIf;yv=^s-VS^#o2k$8`fW3k~c(~P3zgX=>7#}k1bBk;cR8c?}T>X7|0NG)#FYLQr zVa9>AT<`nVG(@Aa2NETm>Hs1C3n(Bv&(Md&W?{eoO5(q9A+eNhE=`OWb6; z@~#78ltAQUJ|n58^lm=@32N^n)A_QFN`8s?+9?W@t77fb-vq9D5!^x1a`9U;nqs#2 z&9abXMB&+r?QxR+>-#bY_BbAtnO8s+L&kPLg$Mp~+!OKvMQ`?5vmvI-!mY_iVzuo+ zY{xF_)y=WkEd8Ua)N~+qdF@nFebzVoBY{@*xF@OjD^~~v!@fXO)_FV6lgU= z`~9$P-F}J`=D$rHh5xUfSt_KUcj2i5aazTbJ*)sazq<-zsi<1d8wP;A&f)+WhiAQ+ zI?H*{{joe-E~zR9SAcR*}YP*xLihcptUCH>4GPQ@TQ7N|fV}FEBdQq4rsS@E>#IJGEig#9gTv-> zeG`lchGB+;1)HWbhJe`ccxp~`hxN};X1_ioza~pKRNeqkO);b+sBjZt&FJoM$jRe zS!J~fF`iaz>D)ZDPh%T$JS1Q6O%s}pxR8BXu={GRd{oy?I=c(ToQ=7PhkQONrC>h~ z9I(!FqRIodQd2~5^**yll5;Uk(YJU}b5nW*5SS;`ilt4)Pi?R{oTO4l<|*Izb4GDja04duZOCHEB;ETrfGPtYo-q@G( z$bHuUPyqrw^;$=Tx}Uy~03%&%d(hQV7Nrg3)7Ol5bl@nCjL<6Ubl2p!Wy$+BV@w<7 zo2$Z#k_l79%jnqBHwa%+oI2D$)N+PC0Q52J>7`<_P@e=^&6SR+srK{5l#aLpghLw6 z@X!18{6hJea?fY!t|w`qTBiMus_eRGhA|hYZ`JH3`3pg{ay*xOp&k7oPZOfa7fqcS zK}!XGY0)WtPll2L6@eH-s_x*cgI25`U)BE?v8E`|U<9C=#qtLHO5A`@3$SCQVuSIQL?goG3Y7wU9wV1-%sobs^z1cR(bD6{Rt6cP(;mSSipDt zW?Uj3z>$`cP9pN3!GAnZ+~9G?v1UnCpQS4T4OYM57e&+Bhid%s6SrI4me3~q(HUS5 zv}a%vp^~B&7>U+~Jca7g|DM)MPA~kOKXwBF?ERZ-0)6meP1N=6Q;$VL-oxJMzM;2dp?r3QS zzY}^Y&fuDZT77Q^d9fD{@~Pc6O-*{acoau#w{s}3-GfIp*3t9{tDOzxd6fO%v@!bY z5IlO1eUF|S%c|+>Mi?m(=uRQM1OA*2Rtu`Baz4jum)V6mx``Js!e5)Ky!9E~Uc|&} zsb8`>8J333EzY{WgE)^+w_51)T8jKAwP4l%{jp`Onco2X!?kWWCfX5_8p7Io#Ay*C zN-N5(7H`qca2R4t5ia4e`%>(ryfP-&tanFv(*S|8GP`VZ_^MrG>S;7Du?5}2Lh>1e zRBH630)ul7>_%cCYK!_O9I>$++w7F?AD%Y4THu8i*_@V|+sX9Cscq;f%M55=j1S~# z2=oo6n9IoK=(=R)3k7rnU0Xv65JypY%|v>%kufVqTOP-$+Pa_(#8Tc}CR;%osDTFdEUKltjYfG9u2mq?g`UHFE8Q*vd zrhHrX<_H9Bp2WrBHXL~L(hTQ(qa@;jIun|6=kn8q3pG!?7CSZJ%B<|1@*~a1@XlcR zSREEX+*j#j(N$rcs6`Z6LUgVb!D(3sx_Zc<=>A=2Y4Y}RNv0Yo<5PcOauq9!JX`E& zS1FT(J<{x+JTl)#tw83$TgZ7BDW$h8yn*H{kHF4h=|9iFoLhw_+#D&3ZSB5M8Dz&~ zONa!ih{tU@Gu`bqQ=ulcx-$^p%*%LFl#(L;F=q$sgDB2}kyq69WR? zSAV;{wF$SH;Aay_8%D=sP4s4T_n;WlF?nIiFIt}88h?y{JAvC5H{9DB&=e}OlQ06y zm6fm8Gw_N)WZN*FuWrSKj_G2b8R0vJVXfwcB=KC0pWhT@N893|jyM0s+o&PfY{44+ zxtwZD`0U^RqFRx}+;YhGYhk!^W;IlMC^?$Kaaeir>CiW=E(pbZhlBZB`@=SGQ}Vzz zpjNNlHA^O1Z*PDbmEE`sJ%~bj!tQ}}2%q#)aL)!F7&!lSDha1qm6NN4K5@}0$LOWGns#Ue?3V8T>7Z| z(%16+0Km2~lF;ru+9Uc6b%qDJII4en_|jIn!nUG>`5=X>j-D`5VWz9`>b!cB5E{mQY8~gOmWLnk0D%}s`Q)0S zs4w=yk^-A8?Cud$zwz5a4CA9BNa%~W?Z@R&f^KhdjcOFui{a36oXDY9A2`;Jx|;1W zMk7$pX)l^>*1<}w<&jX>tFjel5mt15C^MW$AUltd)}LNSXgD5y$a1;Kq8|) zewl4q`pw3;7u#50RjLAxN=47M_x9pyPsvfR8bi-!! zjcvT_)Io<16jl(`nu;^kIPJRtwIu9>TmkV3T-AHg00TUh%q{PJXk>$@jeTP)ZwO+M zl3<01JaSTa#}NYkg^>dyGXZS`qEAf1usCJm!$8-K(XYb6az@w~=?7-|x95$k^Z8Y2 z$Sb~7<6~Ui2ux4*N0ZZGpkvlM1zTtX~D4A3}UA!%OXym^QO2V5K0seS^4GLM+GU zL#K@U)bP$UUG!Um z$G`%kQ3K)zh_c5yAc93%jSHAFc(c|F@*Ry9xEaVvzAMA4OC;?IsG)9mS-|#}?rv&X zNVx7E26bhdgPhkli0gBjw62A|)v+5u0!>>cHTJ_XA&itQXqX0qmngXU>4i+UN74UO zazYfSV$Kfw&jZgJteDNO2kYNrlW%HO@s0(dt^yV#UcS+Wt812uHG#m3S>1b-#@`2_ z>@nouNpv9h9N^pY2qFkCPLgc9f)c8LHz1#tRSgMc2^_X^@t<1Ki_4yXxWK=$v(tdX zobUyV=l36MOmxLQ++i#Y>@FadpVAYDKN&?`vqN*q`{>f!9PQUyVUm4C)zPCAgxZT% zaH1g*0P&>4LD%2flzdOTYgq}%M%D~@1U?6~4fmF)i4VY&T3O1Vs-BA9jcs69>;1yZ z12`4B|LNR||M-I*tz`_y^K-!lk}B7axtsI~fUhg>-TLa78`QYTbn!?$@gb8dUIDMA z*_4wj;w0h5p*mHAG>1gb9bv1HexcQl4W2-HUZP!uB2hKhBQ%Wd8A=T^G@R$p{WqvL zlByJn+)K59j4dix`}7TOr>_S5#v(-a_E50-l@*Y&k2b$#k7P$RrMt#m;`uw{-`bG4 zzkoYVF*8IRrp-o$gGJi%hXCGEkzl(Y7NyXQ&kPhlVTb6U6lR{$Fw4+6-{#~|@oH&w zd>-aw6Ap{}l4@}HSWWI;3+Y_|xsJD9Wm)o1ZfDOoJ*RQYL!d5utC1pfT4UD109G?L%z4mv`cFB~aQ!}N$d7F8 ziHtxWmY2k0!PGST-Udc^7PPK-+e~&-j{xtYnV<=w8E9{Ne{aGE)5R@GJ#-eVgyOLW z$tJL~@5<6G;P*CK(*AKq>tb~T1M7knd-5-^g-uqlr)#{W1L=`~DGLd6P z_Z;A|0%_8{N~$Q?MD#obc=tb8p}?pN$(0!vqA4D9rh&wCj07T z@i*fo^mKEa-^OQaEE-9t?_2uyp4+eu8o3kWi`xbHHVX#4(*dRqmMJP@ajHR7Bg7Vl zjh~v#OD(yNpUHUg_98$R8a!~YirSd|YcxOw994>&g3+dQK(JYChDSG-wSGdCpSvH5 z;_#j^DRtfKtL5eJ+2rVI5s09F4SSJG*VU$+7k<^38BWhIK4a$VaDTFYkNi?rPgt6k zt_l#TIpFR}0XpXkFH!BUW5LLmX1niy4efYsA2gbo;__pgOh5e*$ksT_y3`1|RwTle ze~^|Q{!Az9N#_$Jnmw=$UZt|WA{zY5pd~!S)|IlIaKs|?XtBH`R@lv^X#rT-AI^6&1-Dd%|YInhkFD%elPn8R&rA1rL}LP&(*=83?w6o(GktI1xn5 zWwP5m=(Yzzs-0s5{P=D-g8xrK;@vNH^V@CP6_e`42hP-LnbK1|9;tKxtH_6inca&s zA=fDEt6998@3mv*nvfk3n=)%uNMF!5Z{<#=Y%Hi!<|%0M#9}zob3$H|@&cq5kJFRu zCo;ZLLP+^d>fNSIlrmkw!mHh1eVI%QJPZH;xCPOKP@o?$R0?-@6~5$7916T61Nk!g z0CkN>8r!4n@boyEX3AI-8V-51sjsBuL+GBzVLN-?L%h8bF}KS>KV|Bu1fE z%Q1I*Bd=n$)fr8r!=O|+;nT$DO%mpq|==b>F~rVyOOeSq-t^vKj@KG8tP`E zs}Bep@VUg-+w8Y2C;v3?895Dw@M)H`$uFTx{*MZtGh!SH=#w>FJol9q24s7X7Vw{` zB}=>7a*AJ)Cwr)A)V$w+aEa-hf967Sjmuqp7l5l`cl4AY{FPT0qE$nZCV}1lwOi7G zdyu=x+xIh_x;`|1XTCZ`>y43yYRJI8WMLQxV7cF2UA32F8X1}fnvASYRW`~SqvR)i zpf3F+ZRu0wZwHTkv-k06;j~Ap!&TWz( zw5dsAPq1yrq@$LF#pMy~=yg&g5QTi;y#w?8F$cq8Kb8|Y{#>vFPdbwzuL)sM zkFCSngh29h6t)y${U-=Q_0A#)uP8{|F}3^dOMgEJ^PA!1do`+(!P8<}+5w8>2li5U z5`IR86)wvCJOg2j4rQc*%wbkY|XNKHggUR9ohsQ2qLBOX`|Ff}uTCg=|vwlwh~lAe4r=JLX8 z_y`l*cdd+)%dXdrckc0siwlXFl!VuZkJ9_jfzzHMzpxLrQU=|9EP$LVKmg!1QMm~y zxmN=SEsDL)Ja6_A?(;JFoj!=Yjhu47_PpwC@VWWD=ymWtf5HNM0U2*m*T5fyA2R@e z$<>n|!0*Hx%Fh7c0|0!mzt6-o9QEu00DiTAu^Smc<5MkwVyyN#?nAF@>*-V6Zvb!v z000WtK>@8__PX1IuY3T&-m~y0@EhQYaEEY&uNWZzVf48Q04$as^3D6T`?-H!d?Y=_ z{mC8vA@hd$$Z+j<0%-Queye@A`_oggMf+j*-t*!&5*N@D_2KZ&@Njhvc;xHyJo%V- z7ki$0BmDCV`F-Rr_k3#!FyuG#d3Ou@47f$S04)1;1GYXNZfUOkwt7ZBul(`>fPJ-6 zKOX?yOYz&+EYC4la+3hLpFN+rpGVJEcDbyddmloNM{jljz#E@{FZcV^`^e+fo!;x$ zZ2ZlCY(6d!W;ga-iq?q0t*KT!b9 z$Ju+_r{2|fnf>oRZekgv6?f4_g?d>VX=eDXcZ-SK_+&HDiWXRna&S+9t%TbFuA ze2;+4FQd21EWmQJ-73S!*74WnK76u#TL2dy9bc!s!6l&M_caHo+>Oq5EC?l~hcA={ zB}smy2F#){af@a0lqAaV&KG=girRpaWCC3vb#Q=!7iu-GCQOSDWHs%97i}#_bK(a7 zF4;$Xijp`J;G2{gCA`8&S_Vo>Nt?X+t2=>_u1@o{Z_w<6RL2Gko zR3A}2k>bF+c6%8Yo|mGoWn0gOruxlSl`rHvu4M&0bDG-kO!Q_=x>)MK(mB8c128&( z@sI-v63~dew7CWE=6$-s6_ib)CRt;Gg^WJJb6zXfO_CmHcE3Bqz#xJbQm6yS>;C@g zH5b7$hy5JOrLa{HFQ$07X35v@4?!al_=4O`_?^QSx~b?NpQXKAL6GU2x=L^;0>-)_ z_xl)Q{q}&;+y|CsG0jWG_`_%}RjXM_52!UiD&b--;uxYav%!+(my!7CI~uu4isU6Y z$~pRPZ?O)dQR1{wv)$Rz>bnor3dyhXLt5O$25ogTcIlA6YjY~K6odZ`{!hEfpLD%H zYQJ^ACZG2F8ZKNSt?0#jXYV)k+zex`e-Msv(ZVq``yos7UAGiHqgE+$a=CoS)M|0J zk@eI;BlCfyYRWTP)$|vO`TxT}mQ){8{YcVuU6k;SKCDjL3otT-RDGKtwC7-@^DFr@Uu(=mO5}g%R{N;YeNMdc#>d^uSL0 zU?<-Xf-S>|{;|pa%aF@z|7Gyt-RL}ehf3OIR#S8QIXgJ0o4mb|j_kO?-_2*vtE7rll{LTY-7Zj!zzQ0o(%j!Vlf^_ zhR>Z+0$S%Om%?Y2A}abm4uWbPWElV3O$G19>i^FNjOjicU`&r$>#zgAKq%E-+|JqWh!oY-EnNZcM?^WxsGFj$fpQ z0lyD1nn#ZRee9|Rf+dS0cT^;uuduW{|5%}dW;wd?*&k7oT9n+TSLQ->T0cM3&!@e! zC0v+pu&QdE_7;yL{VHmfkC(%(oG2rhdCaJUxOMZADK&!Zx7v8S3Z2`Zhufak8?KfxhdBkpy znvrchXvB*9v%~<;d6FHd=IeHYH1SQws?!Y@VG^4F&&f-eg^+f@E}{Fj@s-zf8|M%QtH2Yt986VaSWtLB%f-VyW` zp@!d}2a0uj%6<}X8?=_>GP6MALSWd4cecLeNxyd$_R9>$FFYJRfvI0p24M4ZMNa>; z1#mimkBMt>_XyeeQyF9Px7!!6_K565FUqO8R5A+}6*-8#We$xZPEz3ndS!SS7&UU< zI%q_*{wv=6kATFuxEaKHs{A9Pc4Y&zYkOuX$3~k!m?njXmq-15V5jNT0Nt~lf{o?< z1$qBR;gy1^KKGeixxH;*82N7ai~NHvLf^jne{S;;ioWvvh}Sh%G*2K_DhH?KV4ls!l2 zODqs!rUFgT{)#bvWA5n8&v4h_gVtpu+fS}ySu^0vE3kZbzKZt;_k_PI!!@*Iw$D}s z?RZm5#TlhK_fW z(x&ZEtT+m;I0Kcm z{LTNfn*J6C`xHlyH^e08iNa*0MBlg(p=*7mr-79!_sDXD2G|6g3eoX&vpP~p`V*m_ zsYTNn15%0uy9_U%@S~D|Wc@Av94roHjBYN7-Yr$A9SuaII~@@*;7UI8i?^S)fywn2 zK&?tQQRK4LhY-(-NO{&wHUYQt`Y0-mKxKCEyw8I}ew8tTe)OFLH)Sd#E{C znGOBZ767Hf9Df+Oq*=vOvdG-K{aOJ_(|b*|bP|r%L&e* zIOpPNjIDE%xUlPY|081s2fywc>UHPm? z0ZF$C@jAma(Hni&x{DI7(wTxXu0ajk}dWs|gAqSTb zDA`%Y+2`Kiw1w6T$iE~{ z)!AQ7^b6wu)I|RyMtvF7=f|O4Inwx&M{f$zJVtOwFYJ2Vbn=%d!F6&mbE;5^ZYTd! z1pfqr<#~7^GT| ze?_t{tg^)KTz%#(Wn$ofEd~(L!erR&2F1Gz(O-1Ie3*Bxe&gTj5dJLyP06aEAdF#l zK`3l3Ggpg8;aO5JrP|J2e_TxVrQ5ajL0sBqgl&Yxxk%BV;g4x-T|!A6=}UM*iaSeT%{-JEE2nu@8GG8Ms8ifgP!w?U5zX5Dq261PcNt=p zhrZ~ay!VDa4m`qJ`jFuhXl_%Y8{Gmc?9xE3*?=y3d4kKHd-;u7xV6*78t7iLr86TF zm7>o*(?KKfDycdU|BJ<-Zwy*7$cZ5NR~nV>RjYmj6F#LtTT_JLYkL9uJw&LiD?{nj zU!6S?MDmE~^osrsmzVJvf?S2iCh}^mpj}ZsPV7%ysd~$c-ygj%ablyt{UNojidD4o z(RSYOkQQVhLx@x(*k*7V3?p!IwBI~d9+w&*PIMqX>)4}p9~b@)>F_0v|4&EwAL{w9 zL9tkx7u5hlG6f-?;^dr~YQX?V1Suf|J&AZzCmBg2>&5}KLr-vgSENz!(y5pH?j6*0 z8pN4rL+4S^w?KAVqrj!#*{srVBSOZlw%0bwk1;{mIqmaNc-8_gfupTG{Iak+ZrrR8 z43#lwUXM;kugf!&vWXW~TvNy}BdHD`4fTDV&hul}BI}=QPQ(u|(J4I=@;n|VjszG7 zu4HSY6Jwf)ZGj+J zQBQ!=`Lnv^9j~fQiBzI8>K!A3yueIUHd$JqMld4Dv+I_|=uYKW?g zJfJSjmj}AIOpqLhj^r?>->;k|!#Tq~M_>_U<LTZ_|BCp3~jN_1wLi4Rl39DmfJ8mx4NbYfan%{xOl`Q+1@whRiaUtpMI(ECuw zmZV>&TemAWxBGmI_@m4tqD4q)-*KsfjEZQ7B%k&ECLs_RCMeYG<=R}phXL|2L+7vk zUn&G4gibR1vj$1DtX>y*4@FX(1dwN}b00R(|EMUw@iI*XJ%EFXeT-#=%JiIkq^!s#dhy`b?YyK22|7;a{KUtT-%$yMV$C0V00FeLR%k9tCCiNrV!8SCx)u z{#}-vrIQ{->coyfEZdPmh}^CVDtKz(eG-S2O%_*-l;1MF=E{xraDnY`l=6W^O}!Vp z#AyeK>0Yn~#C>8mP9mbXJ=M<`6K^xHy%UHTc8LP3d7?aA$mutHFZ7L1i$BqsAqPwV z7IxU9_&yi#Rth7wlY|B=c~n_DdrmsE%Xy*w!Drj8W5Uh!SCywOWr$I>m#3g>PGv6+ zPY3$_x~Z;AR)BL6r8ztR$IuS%xXjz1jq&5OpXp7fH373n2Zi8odFTiOs{d#fb7Pca z)o1@6>qGlaR&rnd+Q?h>GOpa73Ez!Hb5h?QJ#+vQyQ6$ouTQ6gQX4@`xOVC#*1N`9OeLQ% z+2r;?UhW|U2GQ5s7PY2tcHk<9JZp46AZGoOc(%L6NA8jARz5q>6%yHTC!G)})RP)g z?C4LcVNOw-AWZ#gwASmgW&XhE&V>Xvgr3nt$6yXk zvbP(&Q|EdTJ!rL~q>Y;ai(QXjkU0Wb8B{97g|qXQ8bI>us3@XXoflmOU7^wpHsrde zqGPBXsuEU7rX&I=%dU~HiXg-TY1&C|Dd;lQIE%56hmOmA=S}mz#{r-FZ~Sl=KpT zt(j?{Qq}47PZ;TsS>3jj9(%=>wR1ikKw~YyRUE^86W|G+m=wWL`LZow9X|;`3~CX9 z8RtgIvCPl@*U)0!T0^Ye=!5!4p29R$c%PsntO+LJ6EM`{O*Dkr%Z-tr-C|oC5jJ-e zo+(EmX&A80q^=bHA(aau$P5@21Uhs-EMK3)cQ0K>wksj6?SV>;RSj<3&uXZWo%zfa z=$PcU=OGF$2Pns%XPo%DN*i*L+SBcrC-@jDJq?$VY<7sy4@T+P6rt3Y&E%ol3sxXT zN7{z|Bt-sHlIENUbcufvjvNtG$GMmN;rDiEqj{!5do zd;YF#oh;3N(;lTrG{_ZivqZ}fr`oaHg!d!}rP}hQ9Q?FieSHJOtXa4R48UgrMt&J> zjSxGH%RAI1)W`~IQUg?{s}-7U{QXxwGgsfL@$$L3fL!0I@DH4HkpxNL^5pat!@p3b z@y-_p&A*wV)v**vCz@FODeXKme-tKVfWMHIt%E~_z@$BbUhS(ZCd@7!&(05vpD~m4 zeAY5KyrVu3DT8pb*HwGhTTS#)S1b%exRMk(l z`ybe|DCwa+svsm+;cr0K{96~_3T~Sz^;#1*0)sH|Q~<0+u`rh>qIlOC*^^Zo;X{~{ zVKs~~0KEaNpJ^K*Z|w|0$}CJNq&FCKTczt@KyJtYt0g+MNw_9IsXH- z{O|A|E)H*YPq@f`LT#fkDQS(nl(Fy-`CT`>;`~Z!sBNOetNag4F$BMJd7J43`=Ib< zDT9R^6e|Y%%#^+#@R3C1E{h3%Z8xvQFoArIdg;Mc5CdB12b6@|&MB1~(eeEX#f8qt zeSMby0=FrcZ`xVPx=i>E$V={%>U;pelZBA3R*c7SxIKY0n<`6xsVH&qRZ9cQ+7mDE zMRn2XgYy8#B~EkrlZot+qO177iCw;3+UE=W?hiU zW;KWM zA)&{VC15jFpDcxAF$^ z3ytFp;G#xBVu5)!*oa_IOzXL37eYCuarNz65j^zUd@;!tj_+3Erso;Ea+=v$-tbg5 zsmkQ*fwj#^dA>V&Ltn9r>L zodwEB4Gu>lsAo|dD=-n1>I?Um@_(gtS;`$G&eP)FgpLjH&R}I;yh*W5FkFtQ? znc?_zn=y?Bwlkj3KcQ@H=FIn@Jo@^d{QB7Wy&cTzUmFMInPsB5Z^&8)c9X>pt#E^t7lwDvX++)f=6@0+#s(BB%Vs62EtQpt!P%7f`xh_J$_ z2vgPe6BE(1mKJ?@-m7b^BcuMCmE*sl61+)8C@wZdQM&tNw*fUhe=Awb?dgQ=EG)@D zUdUrl{-k-6wt{~5eA;=3-3yYnW@~)MuV>g{;W9CkjGya|6^w@NmRnw~``W(Bhf5Yn6bSd(Mp|D&xj+bxXNEm0T;q`e&GpZ=G(vpAgoZ+QEE0(o2vh0BJq z)_?b<9H$KRQ9-KZaLhwx67Dn7Pz?wAjO+axV2wzFk->n3-< z&gBOOUm;kqO)o){;BbzI?sW5_4E1DS1x?mPAgoL4A+|6zG`O;VXd=rD6tmW$;!-`` zMDlv$u?11U!Ba&jPz`y*j|+L$nqXKLZ^G8L(KqG1nc2batI$_N2Uw5W1YY4} z4*D)8SL|;(G*dYhu(mJEoGk<0XrQcXxN8nigZx0LWo|M4k+YcKyqhjzmV@s7K`675 zWls9Nj^!nBV6#i0VLK`O`9XxIKk;G_U%&5#FmUmAkb#5{&(RiK4m%1;7P@elj6m80 zT>42|@eDlc+k)(SUn|YEyU%xNg^(jUtTG}x{}eHGB8MTKhrte*dW+E*-s z3zU{KOWl>3#JcG|giASwl=lr)v@ar!&gyRML$vCC!X!ig(Kr2fe*C}psleHEEJAu= z91m7vTm=pUgk(91TFDcf7I-Mlyam{P{5ziiTlD<1WBRXv`;T1tmznfCUWUAC$7Ld1cRP+LDqWlx0B+NhG?SdeTAD>0}n0 zX1ut;(b>G1Dx{nS`=MB3a3BDpB>-c1InJrZeGKQ3XI_2oWY#11QDH;Fw}|i#7r>4o z235;X2_e~lR-dVa56PMEj1rR|<9$JL#3W&^IGn5Ugnao^Rh z|1oJ)u>(lvv5f<~#pRPz9Phjt2hL07 zTH?4k1Z=5Pp2D~;qWQRLq9yyO=rsE#%v|pQ?kFVi9cUj;uhl*zq9BxK!hzQfuT3!; za7$Rc@_nKcZ5q{DK*j>n&bd7d>=vCl8V3;~CSCs6h@XX{iUOviTT2R&qEK5AO+dSB z;br7r-HzDWDkng|2w_26y{-_YNsM>(a+09&z&F*~@-P>a1>~DTn8G{Qo@xS#1I+$N zR)nU?{bQ=a?QBiMO-I>@)$9WHY29eG1EeXPGeb&#%*WULg=#kZxHvWiHo}? zK^OjZ zjQXzXU%`H4X83m66TUn6t|d_^{>_cW0>Tyq1w;JzcQ-KD(@Ii0J{Eav($P|~kwkFE zhH7by(Eg!GJqKiY|7wh`VcD2z>keTD}N9+aH34>lUqF*F~vPD%@cPr8YM zgp&;}Z!Oy>8S=n2weJI*Cf0q-eg1610{NhxeBjAOC(ItJ4wfeVF=U;$TCz>fNmE?O z@L2rWXv`q_>G#M{li0I8VWdT~uA%Jjrv`pH>ki+@42c@|fgY+zQOX1pSv0>Oaj4KB zXKRZ~V@)QnVMqM#hy$TgVTFHV2h&V+(>iNmJq|c2XjSd%Z;Qd}yXzZ?Y{w@PdW4`()Y5a|3eZ1a!0<#3 zrv8zpzdK}ypxWo%uoLM6jtj8-=p``GaOQir57>=dKI6qiUtSC9+opk{(le_3?5gQ; zSNPn{~&V+zR3w)zA3W#9PYMUZK6Wb{T?&zUtxu(x!4Ob`pA09h9^uq|5%CfqzWcK$FQY@ZT~C z3tWT$Ln7X-(C>=~(U+9{pyVkLbBC9)?sS}z9*k`Vi>M2A^a(S9BvE_LL3-ft#wJ9_ zNHYk!f?1!MhlMY0E#E+a`=FECHKN*FR86W5-f3m)oTWw^b+av;#E9`E{M%}ra4=kv-Kr$?;G-JG8zF%!WG1nxP|=WX|XqESbume z9+Rxp5}r#3w0`Dml262J=MUwo-Usmf@FAP)qw>+Wvf`Z|tMYVaKqLk`b0 zEF5|__0;L=ueas+z`RT_T#(@Eu?mzLpSMD~=vh;dj@7JT54<#jGqai+YC;0*#@6E+`$3Ie zGJtt9?#cZo?YfSkXDp(hA|~FCKev7VsO#M7z{qK&8)tx9QjmKu?|wr_k|i`F6%EGk zOmV=9{pj}_Ell?8{8fxD1c?F1W&J?eaa}FTdemebC8Dc_{QTieg&1n>stJ#923&*! z&JtLN4CIpBa(Y;lv8kkQ|3uWQ1a8B= z@L5k?0!YC4CvT}sR0(s#oS`hWJ)5nB^NYOp%JYDy3t06r*((W+C!s1)^v1(kTuhrS zG`hvUs!;ih5gn!0Oedynr@BV!n*Os&?0j;WC3M6bnu2O}i;#C@w0YAIHp7NP!$Zik zZF~0JkK5MV6500c1AnxH88ny<0GXgeQ<*nTF{9-Gr0XlySuPyqo_9?wgg*0p>n3?5 zrJzRkl`XsC!>8l)usv?V5R%TjNRi_sLIjzWBN86!Yd}YMZ8?m1UMZ2axZ(ItqLaAl z*oTXdJm)<5IW|%tgUfFs1{M^C0n1Mq4cuP{h4k#+&S}7ylS7U^0#YUsYln%A-FX|j zd<^-H=a^o?AO0He$6If+4rm7~wY8%(VzB^LuU;S^EM3R}xf9%-tWoP|=9op+23HV$ zjc<7I_#c_vI9gI4CRTi%bKZ0iv_!Y0C+QN&k}gc4PW_ODD-peC(bJ1O9xwg?=m%VB zREl8LV3|(hu}r6Q5#}wNND6~B6CxnaxIzFs>&hLtvVL#mlv+3rnq>X>PuL|Y;)SKq z9#&eK**V>h#4(J!%u5_FHJ?0FPp{M?cUE?Z3u>yhqe74gZx9&OEu^&Ff zI@-Z}Px$bLRTi{s*U1~TzJ{$*O$L8->^mprl|vu-k^*xaFs9A?5m2zw;}1uU*tg>b zXz}N;#ebBBEg{2kGcdnN^o{fdn&aqt*)yEe=kiWoP!lMc-M^f%^1hsAQiGsOooj8K z+=Y9U((<)=9_-$Zy5r1FCAl*kW8yWbOk^su#A2r!ve*hyU}4l3iGgK$Nm z@(p$qts3oj%=T|wR!sF_UlF2SjCp4XAKU2E<}%S1T+`mi=jY}WVd={`mMxBB5R~B3 zQwZxSV2y?gzS;Q{&N2Kc!m!gz$O%jC&jHLSD|U@8>|%m=>D}1Kdx% z62ZerdJv~rpnPNTDQ~-MzWn9#9w6(Yne<>`scgYL#YD@K=jt3 zh~v*Mt+P?`;hL+CtEM?u@7pJ_b+uBo>|L$hYyc1t>{~T#;0Sy~Ov03<8+OSpIz&5N z^=VS{9}+sjlWnaf=vZg!fRrP|mllyEhN~KH?^!*R`oIkY`Xwt5A!qk*k3t7}q*5bS zefHG4<|5ZP3v4E(cE>j?BcMd4##pKrhFAK=WwO2=AU`=}wMbwNxY&&-4xHvB*0S94 zOPfg_yz%9l-ewhgDcrZ&PBXK*^EbRW4Lz9Pt7EVfHSG4$pM9)i+PmMcs00AM{F@aC z6K+7KwMV4sNB4zRDMh6O0&PGEBM+|Ssom@B+1U8NErx#@Io=83ek|I0Df?3)3MA#i zO~KzZm?QP}_3^!4@oE5Zau<%#VT1=Bts1QU1WH`UA~42u!QKGPe+il&hjSlvC5&<( z*7Xm%l>WvMGU}afPwzkt^Ib5OQ&EdB4Jy`MeVaa^nm|%j#q>boMl#*LR1YX&!;5M0 z!o(Sp~#NXWK_TwnLl~lSmDlUUX1%3)!pp*`)aK>pER|od(Y0(LLNl z)}M9B?t-e0C?%sTNN3aOa-`sk*dhj@Z|5uv;%ibleZqxIe2WP%#E>Vv9fDH*bm>HR z*ER@UbXJ}a=tyB$wH2efsxG(KPxSit4}#>UF9~oarq<{7h94TamAMtT+NfnE05Q z#F>9=ZnLBHm}-KffgqQDS!!WicC=snjUJ&H_)n6X>;Gh!Q1m#gQh*9(Xw0Y6>R9z~ zs9_?O_F>}vrEBRhlmmp4S4v+r zzTUCg7L&^e9S9I|cBL^Wb(bdql^f);R#MpGXH@(MhZby9po{uMf`0+l1~a%I`^A?D z$R+*7gSixuh05qA|7Po}dg;@Hx5gqbVtC`G9Ew52q(dK>dD9!MO3C$n_E9soO}edF ztLyPn?gUXF+~so4s{QQg5uKkxk8Nfw*xlyAQ)M>#T|SNz)x(JatV^~b*k=4cCB-UbTZ7OT*Q4`|_GPSA?0nS*{Dc_$d zaJEbKeq3i3htMK!Gzy#gi7Z;xjrO_Zw*ySKqK}ewuN(Uiv==d*(-LZ%4?^4(m*vJK z=0A-=z0G4xCaje(50fJrQ!}2fTM3D3z<$p~aa%C;XHZ zndlku+ycw&y+^Is8ji+HcBl%Y^>jZqKc!IOd~}XC#dNL&RDZ%7%g=UASD-CCFN(|# zx#Y$y?1^swdR=Cnx?{V_c7gnaV>itRzJaz_90GHEz(=)(k38j!J zS0HPh`lwbxYru`tXJg&+-0dl0E3tFoKNS8-vOnPNUs%FR!XT8_7G)4 z6^J|d6F-NqNFOU~N!iJ@snKy{F2ReuO%Qk22F9Cgz^uBE zE#;I<$O_;(j)XNn0UdtW5xn!WO963z?hc-hX&58seoCFIBR_3X1s-b6j35gV!YRI? zyKX3CzVm5lZo>BaHo@ypkML-om?XtWpH)#xnpx|j{($%oV#QDduo0i~qREk5@XdQD z&Z$Z7>_S7(2Oiy3JiDueS@3G6H5B1l4fr}<_E8r{94G||P2{i*XXE)PSsdwr_HiIY zJ4x-2bvHc4h%UVfpABri(?tGj-31rr(N@_R?Hp%0bk%m709ZPL;y7S!qwwwprdpw# z8Y}pyaW?9}mw3~Y8`htD5y`^5eUDT`H3Fc~chmUgr3xQoA$}-JCfkGLSy4;goTY1vC3)|MlIcN~`AA)FO$=u*Xh9p1Sye+r7bjL@J zbCy?StrwH4k0DU)xgCHZ*VCnATdz6@5#?^Ofrw-{@SMI4J1Gw;=xrNv@Z;oBnNb11x%%;*LYHj1U?3rh)**9{`E!$@OAnzfWH$Vn`bDUI4~>8oW} zAbaC&iCu4RPXIhqY$MuE#0EMEh=v|7}vUwXI zGtP8yQr@>e_!O9Z&l4_(VueNF?9hE4WXTI?;k?Y#!s-|_U1%-O%-^pzEK3Tge!Ckt z^iITPcbS?ZxoCkK=-uAJzb3d+V=*=QAa6M|QKVSeX+~BX@spr9Z8&Md7Qe$~Ogt$Q zje+_0i$&;4`UhdIC}?HCb@@AYCJPwp=VEC|=$Qct4>!30VO|>gQ>GxO#vKDRI-_#t zFx5+f&v#@J%dc7ns}_M1w7sPQR|bwif+$k~w**aoIYq48Pyb1Vy_WetnTu_jPMw;U zJEsDFxiKYvUNZu|Ai2Vtp{4Jk8&R7G^Q2ksVzf?+p@KgLYK+f!ug#Whqv+WP>}BIo zt}!D3Di;hG@Z$G-Vec7`Wg3B>SO7%fbCN9%niJNC?);VrILgN}1b!+9QPQk3zwZqv zt5@&K5m2j)_zngvUJJES4m~HlT-%!_J_Ws5K2u}5Csf=UylQk!Qviw?T z&`7L&5;)C+T$6H=1#13!w91fgqqsuf#B0*`!AnE1U@=9<$x2HSZp|NWDitf#4h^yR z!8cUEE9;Xs_At_1TxTbEwIM#haLFll&$J7k58p)M;azIy({53A-CH>iQK&|zfsOdOtvX~wmf~u{b zCY4K3c~wRp14TVc|ePvlVu{!-VU?Y3{DarC}h6=-TFO4d%3kn zZIvw1j+pj96$|OuKO|Mu``J+T-}UDRW!D& z{cutF-VtIMO0_j;_*1Au#C+6QJ{Mf?0|2yby|=-Yc;QK_5IzvTf9%{w`AxS`ge^}B zNco68p+XA__TGu$qPQq>9|R1te`aiWr}HMO3QNR=Bxmx{mAo`{*|FqsxB>VZeZ))J5>2m@2Q4FI z8y>}66{DH|hqCp=cWQb;aY}NFSL@q?H3GZ0<-pQbOt63`MXPI876CtOihZhqc9ia; z(E(cX0oRIT$266>Yf?Y?Gm!K*k<#k)+m=IJ5qGq#qzr8G8j28li>09f$xG}@b{x&P zo%x=V7dB5ut?h`b*)d8tz?mU$oU z&%p45#@+U=#zbxe&?bhD5YUwC90u7+c0E0)8p@7qAh;Ym{?m z7H(!YHt?^!%z8ruUGQ`HYCqnBJqAoh&6d_XIV5+d304+Ul(|=qMyd*u}Q!I+e(9D{2;>Gh~5?;Adu+3*TMsn|HKqPp!AMDA9RxJX3sAoF|tBygE^S0KacFg>$e|bO)4AGc%RF-T2x8NvcjgX zRHkF@x(4)DJGmJiwT|G(Jm1>9TzzMI=woI!a&A+E~*bB9T*aH352!F3QAj z5AxU$2{d!&s_cRs4)JEWbdhJJlF)ScK*j42%En|(v`_0^Dl(}I~7_a>b{X6oQ(ApJsy`T7Vn@3jTqG^Dnur$@xbf$_yhyPa zz}D;4+LhdIt+~#QTIz{!Gd$M|Or}y%n@H+L4Qrn2Y4dEz$VIG>CKDlNl2Bbrfl&NZ zC;(+3fHDEInU5g4cuZZyEQCBi$Txl0Frers)YaC?qq9TTYTRac4NxKt#2CPe4F0Wc z<6&-_Q-oW)IJ`J+%R{6YHblVz2%V35>S! z(5PQ@gdkD%2PIo=mW?K(OP5xinq9LGNB&f<;Ye-0;@~$P6-tNgHwPq(-n2j7n{-5N zlQtQJ50s6O@M~b+)TDUAA&!mD2{|L-TRo#!f!b5wGGkE{hcR+4>5s@#W<2&zeCszd6BdF z?m$2Q_D<*1Gh(+09@@L?OtYBB=`UYbQ{409uW1M)wTfO@jX@ymI|3aw;*J8x+E6+D zT`X?lK|q?M+qJ74SGp|e;hsgpgPgY;$MUJ~M@fMi z<=1z$e#vsZdl&gfKdp!W3k_8;%NklJ>pH4&T~~Fq0|std7{|1nRB%qI=?ReR;vsE-(?c7JLx&a^lcDVI?a$GRnyRJV=tIg%E%&Qys=1Ua~as_q4$* z2~~65F*4ep6$f&P5t5dD?o9(SVE)U(sa_D*1drfwSRxIMKaaNOeBG0rj{}2RK>J)x z-FPnrmr+IYCFSPBqw;JB)hvN*$(tZkdxb^km=eQ-4jR7*WK3f+sKt$`de_NMgH?rSq9xC zM9#CvdohSIu}o6f7wh4JK?Cz)qv|r!2yNr=_OUA)?ZjN)NJ7UR+-R~9@-Sp~CR4c@ z{?SC4^i2Lky+qCTt>d&LDMCLZH#d;(Bd13ljH6%{h-|6}RLIovRf7B(W~fKTP5^u+ zsl1qi4wW`87XJJ9+oGZBe4_@8#NfS7+*M`1hj$?nePC+bDBNnb?>{!X%;bB zk?$FUju>xbN-JyPFf^0IT6nasl>s32g`9job}`Kg^sHG)%$78|0Vl{gM*U`0lND;~ z^i@rFi@&h8vz%dQqgAPFxX>=CjO|t4cT``FMnE$|rFjU+&EuwFu5NXYAG>)d z=S`j+CJVV%Mckqr&Q~t#q~WnbA1DYAh%J}7d)fI&%o z)BnGo`udEn`JDg0z2#EQ&ZU<}vEMt{q=HOuCy4DlK*x1gwnvEpp@?AB5Kl^m`ok-3 zU?$a@6PMs_Vf5*u>|LzAIW!9Vv(`ls)$Q4dt6a~d>*p`z(~pWqK4DjbX^ejtcZ|950HmN4cfP!1>(*+i~sRHEx|SQWDA zf@%X7oW~F-vMH7)TXgRked$vQxvoUCkA-hR&nxg3`V){m-;a%rFmfByTm?Se@*;9Z zlWUJ?4zI%h_#A)8Q5OP=9(3MG0fTx4ura%Qk-BdVgMQDk51%^h1xh>+v7i9Nlp=Cn zIZFf4uyr>E9hdVVA6Y4FOdZo zeAdq^S;U~xMvfb4#LoXDzM{UhSe#UJC&7){-Gz9%&X~VD$EllwgMWw7JhaaDG4E6N zD0-UJLWcs8CKi+9OhJ1k$*YLS$YsORpQGG((Xh`VXH3AlJns#S8AKOtXJ0N<4TpJOUBH ztz$Ak+nhs;G;P`+(7KGScoqKMjxMp;uMP=;Apw*QbT|u1YqluGuDdvAcq`~MBaT(A zZ=}+1595p5nlA2?L;v_@u#ON=KUnfYKw#$X_)JdWJN+5CaLeI1Q%uK-0x-H8tP3xu zBB5q1y7#>?ZVwF8m;M1QR|nV zxmf3Jvk(bUFVYUflM9uc_wxZ2Xtn3KJy(l;m#HU~c2J^Rea;^SzwcG{s83fS7yq+d z{T%*^_U85*O}k0#X6Qt4VvZ1Qta|HHJ-LUubp2QG)V$d9jphWqJ02~kEBE(3Y|;uK zyse_}lv0bCykF*La*7WxGDv!O3e-BQ{4QHz!RH!47PxaTNvbHJE!#?+iDn3)dQLhk z`NvF^6nfH~p;VNdGigVr$uxJ5QJ=V$V_n#GBauR_{H!F^5W9(OMdFq2B%e^4lzc3q zXrYsvSr5`7@J=KLM{zK23QDQ^WQW-iz2vn;)>BSmo#ij0>*=26qGUo8Ps`G-tDR%L zGeOR^$M$aj9{^`Sn7_*$je9J`t!2?MWO!G*BnD1Z!(?%Q95)=lp-)>O$9RdxrR9-tZr^{dOslX2oVIYtEnBOsub1euDAqrxreP?gL?%*=@x=ynjHl^eOJ!4p(rD1W^K@}+Zni3 zD7c*F34B^@J#`ew{dd?gX@6Is@;$a1c%}ESpK`1F27|DME=mL;Gnwj?Z zox)p%0*rm>%E;g^SlzXQ#u4*M42sju4SyD4o4k|4hRx$Q-5Fcfp3c$jj(@x!drbKj zdmf`6q=-^HE-btVbQKW)%;P~IDLdcLbcN-Dl!HY6RZgTlyGn(rE#xfW^s+>7NV zJV%=dY~$Ov=+p!(@Z_(j(yk*dF;Db;C@cPVUjpx8E&Bel?g3M?C8H7n9KQ1#y-$U9 zJf{Z3KhW^^4Q_{Eo2{1wE0Sdk7Bh0qO?mb@*H|7*p7ImQKXnr65sR?ti&CP#x5ZC# zFJ}{So=OI04{d0y-`S#dV7-Rp%Oq^wVmkJeQ z6T2g!luJqJ+|fPVUu5}*xS#$RKd7}x(MtqwlA-5}wXE#Javq<0#CIGCnl8)!aXz#4 z4;()YRICWT+ekm{EXnIN7#xmid)z_)t?8~v6SDx>ze==10mS7TlZI&yx@&#CyuxqR zXCGQ)S25*rNURUbZQN=O)Jp>f|@Ys7z!N}|%@G`>2^j;08pK(KO;x39!EXAW@X$sE;c1pI71^V~ z;bnTI-)W7{J=OMIB%8V`Y$9-$q{wJ!yEZf9({J8Jh{ug5gpI6Lx?KXtF@Ivuclb#F@3rl{#DiXOBUPUt1P?vdb zu6sr*rmJnuQn*m!tXNpLI8Xop000000~8utl_m%H+17p4UlCg3Y2<;SOqLvL_{mm5 zY*K^noglr#05P!7F;%88y2E*@+)O?uqf|v+@;L45pFs+aR}(}sv}*;!S4Gbx$HS>b z3a(74^uPm<0~XArQdlb{8wm8!QaXFxKA71GTXcEq=LC%qorIJc z_=%vNtW0S;e7A|zUKz(i5%Y6}kK%3&RV2Q&DNJA$H6+eBKQqwfe_pdR+xGJdOJUNC z{sT^sW8qCX+CXcx`bgg)7x*-0n%CK`5#q#*S0d@A&MbXZd+C(I5sppl_3*N~f zmo1kfr>8mL(bj6PUD3hAd~-8(_-~G8Mw8t5=4R{lRqInvlmX$D#6TK7t7-N zwt9dt1olgkYbzxt8i{Oq9RkI%%5$zU*tMdc#xwNp}7>|FtZC{?q>*ca~MH@{apHhhJm0F)ceEx{Q(O z$yZs+qMw&SqdO?VgsdoV>2TkY$uDDI^9xSXahi+$E~qlyBH!juUawiF+utcdL&*&r zbERd|BhdxA*|oy``Vv|<``9GeO(nU%ibTGY~AMvOL~aKS9Lk8O?t%G9K_T_ zfoab-{m2l${N)pYR5;%iL+VR9n(FBxy=OnyAVkMhf$Ll|-?ERzRpFt7b{d9x7IIY| z5dZF>OWNRHW6MjUWd&rGVJE7<;{sxB*Od=<#W@fjNxFX@LYa zWDFcQ@F>WE0AG0%|KdC<>S$gxa9m1)ZSVFE)x#LWlW8lP#MUF8g_V;AzUj#N$fR6C zlCd_QoJi3r`A29EapmE*ke)3KLk0NAq=oD}hi>_8iC`4Yam{H&qT6tQu4lsXKX5u-~ zLMI~7=H^3c30+s>Ld!B?fbFZ0nHzP(9evtT!58r&$qw8{2HUo_)^^Gbeo6Kj{Z)eZ z*A+Zr*e9-r$qW*Em~*WXw5i8Ki+B_)rF5wn0^O_NWzt87R3FtQ5JSs&hRqS#%i`{g zS*pu{(9764SEBaUdML@aD8kc0cYZ?ir>q@+@+;%XmgxJkC^W_4wI0WZ$P@SDHZoIX zy#TllZ(X;~shLmyY|S1RGV5hNA!Xk6!lh1@Eo(H3H@{^uWEVlwyFKyXXrX=c8_N`m z6}b7vDEoE=d8{b{QL3zD|4Vn=+<=#-v+sU3;U89L_=P=}8tTLj!xGi=pDbj7-=cG?4Vi zY3NW*zkMT&(p=Tf&3a}!k#0Rfcvt%iT-;9zDyZY2?zu0_U*O63XF~STTMWpV1w*R! z{q}3Oiqinm4%+`>X-4@dQ<=E|`6RTJ_Yobjog$4KQo^RtP0OY07(i0kAL1+Sr$}}5 zANXqn$_{b3i4n63Lf1T-H91I{*)+;*k#nsBKHp;qAUq5yjTmX!3yxoFiu-RQa`TZCFuYC`iSJt7~@wHOgJGPnDxU7C~;uzdDt}tI`->IKY1n zQX1jMo{xZ1kzF^PdEAwFGm@xktWSZ}mP;kG!?7Y`Q(SyB=n>ONC8~5+S3=L1?B&r) zuNeF7LIO`mdH839-R=GF_gD1G;<082Muapdx!(OQn>V8>*?uB+VJbScBwRbyF8gf8 zsN7csn`u#Q>=qRO_SE#ha4FQlf+S#%&#R8OF1Z~I0Fw9UYz%R~4xy=A&^txZFbpgv zu_k9z3s4`HPC6d3tr+nlw$UwV!=6E|WSMNvJ=UF>#cB{R6~i zsBOm>-Gjo1%Dpl@vCKkVFUqDW!i_rp=LWy=rr)=KXGkwX+QhVn=N(>5IadXJGYupy zF~26RlnM=y&JR-()a;{yo219z3H zDHSs-lb*Frl3fkLe&eTAo1~I5u~;CL96m|82|45!J)Em7w&q9!;bFa)cgaM~f8xI} zabM#CUqt38Ewj{N0bN`rOi`P0!{0{Ab3HHiY;aUPWyH#=GcR!9;ojHot|h&Ub!Ce9yncn05JV z9D7wFyU7qZlEn5qr590P55b+w2#6qJzx)8^XM`dH04lU@5_GE%s6uhrA$RvEg~j!!#7It+Cq%L? zZ-@0o$HDLIDT;R#i5+^ErfiY_Qhy;YB6^uEgejXo=uF!5o>jQ(Akb#_Zo>z}H+={J z|LbQBia^Ir(E*G^2vdttjn0*fgwW^sd{OkE7@A0ws>oc;HN+9lLuGvauM*_ejj=~c zRTa@lvW=ETPDAeV^;0l7FX;q=;}pNmeOSfIhjb)987BtJlbORIb`I1CAh9jqn8IzA z;JVmSFN6c_U+ID;{V#6~TTThTeQ$ZE@;5tJWT_QkHh^wEXxAJ}7@d)pPA7@tzM(|} zuU|D-(3h9;ENFc-^MU84e6vlT zfjf&vpm|xs@qM!vPmR7ZtdgY^`Ey5*uxWr~@6ceVR!KRvOS1t?zCA(is%C|dJ+w=X zzKARbBIWFE=TczNGbYdp!t#JQ62eOs?v3+UMxGb*fHtk9*9XlPd72-$w1NmS(Lu`~ zY5eOAXmR&^u5dHG9zCgv#|wbPN_B(aNW|`{0#6AfUUPnCl0hK;we>t9v)w4+m7trK}0Q zqY>G>T#OdY>g;XVR_9AqlRlNmNk3nS0?f}brOms)$Zpr0E{)UnKy#5mwv=?#SSDC< zQ%SoT`)k_oDgCE+KU4a`{lYrBg_Lx%0n-tNc+4;&ob*@y`mtR>th|(JrdB*|#GN=I z^*eg)9$ZP2UXb4^$`bPIpQ1)|+}gkJ@2T>>=-s_>0obl*ED^vspGqddFzfuVhvWUs zqId`C9G#pl*=s{>k!qdT6QjCZjI6|1`Btpb9N}C(`D1Ax8qDIjD35AXfz>X*8a$+;pzi4W;!@G6{ofnj0*iT*;}BsipIX6fJnv4 zJ#~75AmU(Zi3C|iC-;XuRG|3>b0oXP`7BGB*SWBJuRx9&47tfO}q#?`^Tu| z?fjZBMlPj~wX1)$^qC|#2X`A|nUX3b|gzFy>`GOJG)nzr#v+sO3u~(Rlr(8@3 z^7i*C0PK;TtNkBz4QX042j2L4$s??`sI@UELU$mh!`_0*4OYBGbtjig!T#7kZ=mHL zp0((yXJ+gU5%RMCa@xm;h)SZ&P1-woni8ci!p7+4v@c$Bbnf3A3J&vV+n{Rp+PRVW zJ*VYL`+f~Y%VDvGzLPrg*|%vV?c7dQxaoA!F^XmSZ2qGo<)_$DAmtCIT|-5Mi-&`= zvFhn$v40*~dTSYX6#S6%b&FC5*QIyVA>Uy7n=I5bzvqT!i?vU4N`Ud8!M(In5Zi*! z6~IUN8uUdBmnZKa0y3#8Lk-)($W1M@&LfdQk9wPrQ&F$bwpeKgjcI(CN&h9qO1*G( zG1iwf?Wp>^=GeuFp^jL&c^N~`Zv~jdX>Fe?NqPH-(oZ%`vscie9={*yHbbWNCP}gwg&<$)6mfr|FNwI)tvulKw=o%}0cx$#in9 zgWZLwq6E|oW+b!l(;Cq2SCitgQ<6@JZlLEdewX>?{=Wg6mN^fZLYDnADmK1mq1Lx` zj5|}&8a>aXuMKv)MphsAO0jX{m&f9S+pB^L{X1<9ui#2VlH6XaY}~s~_-`KP zFq-d;-wleP2iIa$>IWOB;%aIq>y4vgR+|DdkL*CEDV_Cb@_z$Cx*AT*IUx*?TcI zr@zf|@OeX)G?)59^>9&S*{mG+JN|m+>9j{k5PUv{m)l_kSNaltniG4E8CFP&D2#UG zB38&lueAnKaWR9#VH4j!*rjctGrIoN5Pi^RLI=y)$UCYVTpffaGq9f`G>k(S=9Hj= z{2KKY&T|W-jJWZ+$#4W1NlV#X%EoA%4o@gd%pz-LHL-5UK8|IqX-{hTv@@GRX{1V= zF(AdiO^O3!rAxOmMX*`xFB+4*l9TTl!5e7#rZFGgRMcD~v{gv}3-ZIKFq7|vuWhMx z{z)oTYoZ3QHNM|hsSepNq?)o-2u?a3+rh&%dn+~Zw1lsArp_zUXNfm zwr2;K(=gjiU!wP&LbmGcKmhaeD+Wga4lS8IPglS6G}4f?d9ybt^xKI)GzgdtVxgo$ zyw|IcY2m&TH>2B9e(XnVHv)JR1Z068?)cp8`36{M_h;Yw4|z$~T^oL+-7Bc1>I#ye zz3Nta;}{er420L20(9@nDtT3vi<5^?(CY5PlKi*T>*w8jobki7^IWD-i>~kG>l?f1 z5DmfZMiM0eyA1cQW37D=c`hclmi&v3mU=3;SYW=rM%HqJ6hT;fHQ@bb4UkH}2NZ93Xj_=mB@v=c4AP{4>F zn4iZ1H5rGG^eJuY$2_w1T4~E;HfVrEoj_C@VkAbduGX=j9Hepu4~KvZvzV@uAgY=n zmsvWuh&GqP#$+nMF)G%7e3O2`CprYX=%I4ut%Z;4)-0^Si`uNEC@$>6cCfG*N)q65 z-B}T2gZnHS9&~s@{B$4NVV8Q6fTnLrZQa+;7#r7?>6;@^4nF(go;UqE-vA zV9tUM)r>I?S#Y`vQs^t-<%VG9lWUV(F3o|Z1klnC-<#*SA{-%%mI0C1FsoRJQk;?q zFa+@P)~d5OODo^59Qg%YPY%0O6Af=S?y7tp3LgZszeo0+h}OtG-Q)HJH&}?$U+D|g z!9|m1uyf$=`RkjfLVFLFDYn(TuCgwCnaq$~(Ki!O3CkEtL7Dyz8QlAA7b^yW)V?`U z!E{|;j}z-R2DJ9(-oH)gpCm!3l@zJyil8C{Gn};@$z{Fk32$0f7?>fqO7^e1UB>F) z4j5uIOKqG&_^%3e3eUvKUQZFQMA8goXXB`T(@eqE6WTJ%@mTU!4duFBo@SA@9xQmY zO~k!*>pAE)!B38!PVZ=Lr+zonbeoXPjg2r#5i-7?-cHWcR_N!=%HarrM4doX8)76% zIRt4Doz}E}yzZ5yO-c5~xNTY_L*6(an`~0}hCw1l8DfCgw?DC{qNS52(T@S1VXUgQ zj8ivNp-L;Iu4Ft{D3V3kVr7v)716ee+dkw2>3rzlTtE19yKP>c1JnPH#*zRUaJw+a z=zykx5@Bg*$=k9;F$-gPhUJ_TJ?k}YzO=u?e`6Bs+V3;j!TG`Kh!RaK_grLRlf_RU zY|gZ4_tVytbMm^*LqA{}B4mSbLeVWt9;%}%zZt^)u4etV;2NAd*j67mX+28Xo&q#> zzTIYd<|q5DZpd^Akffq_;+^mSt_jx%G@Gwv-%GOs1NUf_q{X4}T2wapyX$9da}xhB zgwF3eYt5;7mbh$qLLy^##qa)+Qta(^-~siVuybv8O}22qeOW6a)@g4yLeGH3AYn)F zWAnSjWoN)(MIIug%3Smb*)QLW*u+wVhLca7>X4ri_+*TI>^f^tC8Er(vi7KAgm^Uw zjN^J3Z}D6J2h_+C@Hlo$T!8pb=6ILsW8<^xF49T`0T;;A&^SakB&fL()u_9DF298* zRyFDmvVwWDLK3mwXcmyO*Zd+}4K^aOjxONyWwrn!hlUs+chVTzbJ?la2hC-7-$+bZ z;@v)ZCL!4XoPfHT2NJA`O%37ZkaJPrTme6Ux9j88;~vMidsLu=6+i}Qh5 zMN_X=H>bL{ickcLCSTLUpK= z>tZPwDa)QU&B0TPz5=={XJUz8vnDX}VrwMS2{xYU8!=zn^Oa!VNpvuldjdlbkQcrw#TvKn@4}%(r~m(E?J97Q-c6$Ly%v8#rQH5Ob642PC>Liwt>F%9npcnSDtKYxkr~ZS zOVg`JYF=y~bxkng3_SS@-TmLeOy#oIS8d%-?vfQ*c7Esni~|>d06T>6z|6OtSYhA2 zn7H(1d`vWNt$dA8Z${F(X$M2g`{#X)q0b&FLuA&XSfI&&ZEQYqX z8e)1ixtw%p-gsT!X43jJ^U61aP~;$mMVCI&1gZki!nS`RR>S&+Dt<<{HVVR4FK#WQ z?uV=`#xSmQ6x7k!CaR5|pQ$HmVkC`l_G-{UVKNeR>)jDg1^LPPKFOs)53sN>x4A&1 z4FvrT?U&0s3kgrfzR^lS{{%O=aJaPQiorpDIK!q&)Ma!MLx#rEOXgFXTQ^NU*(T5U z)h=*%MP=Fo8t#99Q(>IkaKSx$O-TGSINvDCBpjgmDL^=`!eIB3d7&Ge1vd-uDQ@VW zg?0|kV*~|^n5q3@&rua+7O8hq{&-8wr+Z>sSYb!(l0#>Ht&s-2S1(qS10O;OwZbB} zuC;<^so;k2WQ=?1rC__yF8jWU6JmT!yNdLBgsqWr`9wE-VC85{fxkT^WX6r`dU5Kh z_fj%DM+Md$_!a~BE0sW}t;5NHb3a5A#yna&&kR^CbrXp}H5hc05~n=Ci3 zz~Vjs<+v^HC!DOqBCxI*N~2G;;-%&=oEk-iGY}8n`ws8ci}B?_0~;?wZ91O39)x*0 zOK1kdFKFtOD%})SF6V#pPxs_2KZ{-F437f?^lj_Th0yq8=slyr@+}|J+hS<$PS<<3 zWWAsHn$LcA$2+)JH`|S|`z6FHHEFz2{{O95YlgKwNWfA&V2yM(a16a4Oy~)S=hMRq zdp>~p0Nd;3%=Gh<@kMihcegYKEWND@_!^$wUM$RF?>X#Sbd}9o)QyXQ7|SdGUB5p~ zGazsHM1g$6>BA8$2VB3|epe~m#b_urGcUMjsQLhvQS>C(i-ci*)T8m~8+ z4*dTmGL=&hMx9bEmVi{9D?W&=?X3w1ZQ=(DJ?E!Ni-pnn)TI|;)b?X?l(1ssVT8=N zxv9EUD`^}ByQvsXf{rt`%}w$ zP}ZHMAQ^$Gj>acLJ1`MZ3+{GlXoE4iIi61a__p_A0_knW{s%Bxhan*6NXmgjHiDti_9t380D^1TF~JfjQTy9y8XR2ufsywCCFXj~ zcS+FX_b{jVvASnIV#55lWOQ6DVppQ-`wFWh&?>aMtgj^4~8+1TSP#Y@CB)S;V_{u{KWJsduHu0 zlW{rINH|FE;^bn;fA#AUB13-D@@K`$M$(U$w2X`~oAlMg05FeTZ7&pwztNV$<62qv z{`%qv@^@ZGGMFH+RNgu9#_P~c1`xuSc9iOBhtYOY6#%Sq8qoZix~e;F8d8_ol)~!; z3JGj@Vm*7(mlG3bRR^sLGtPU#`K6_#`e5H}V4C_Zu+gB~+NmA<+j9{q)!JuCvb{u5 zu&X0OuV6lNpXix1Dt_5h!^;W@l}5ok-rLyUIXmWgZ?6bQ7d0fX`PoQQAMF1yh=8tv7`-^Ut9gz;^~B2AnuLFP7Pfzxq7ubnX25>`P&uFX1J8IlmxO z${*l3fCod!`?X$|03-4S*qoY6@xd_!9Svz2 zvR*UK2tQF25FaK`RJUj{DUzY|iE^PcNW{_!cm1soSi!csm6EEKflwypF6bcyf4D1# zQ2FX)j8)ZvNLhnWAE=8ATy4RI|0w*N#0goDre%Yl>(kk)N?q)epx^>pU7@x;UtqnB zEhpEKM*uOTektt}QE7``V>}pcj}2VJkE8NUNzY$~pE2AS)QfN%wE+jFeEW^Eg}~zP z5iVcCc+cNq;2QhTV_bM-g6%41@6}JVNJyUj=^mx(=}`G}ktGwBNOjDJXynn)QjZe< zgPB?g2lCFXs)^8>a#yYsnEn@Q`&3ZaO@ld!R9V_9JSK9Sm$G^DgKxS(^@|2ywO#8` zfMmeX0c(axC$3B-)ZHA-FlIv$Ek~X`JX9{!$IQfyH!;8l?Yp}rJ!_LE9CKTCEt9Q( z#`%R5^Vu3Fb%ah0D=}6r!qIS;uzIFhdL7vPqiy%DD%+k=wUYG4caf%=B2Y}KRq{;g zm>_yo#%nnPut(Zij9}H_QI!%JxPuMJ!52%cZqHwW6%5?e%-6+sy8fDBBI$akq9j4l zA*h9B#LajaISncP`v2=QXKHq^W*u3BQI5 z?(ASP=}5!|YSZ#uLxppfAvi~`BlePgu6V6-VZju-4pdAcFB#tC9B{`Mwyf%X<9AsM zau_jr}zgl$U~UtK}4|RmUd3^!!p->O@@;2aCNSaH6hp~lx2-|ge{>Ndk???w_}t` zmUlnK$M7t>0YthRX@$3Axj2f|za=n|h_ z7?xL!C~q8Q$_5|X>E?T+Vu9Fw1nek-8NT4teZ%H>KD>2);p)+oz~I{CNWMilD#1DE zdVxv!cu+$%D9{i@c;u2fW6AWcI+?_zFvAkWb78Apy$L28QTzTkN^p z;FUCCn@?I4J+PfYIPPHo^P|Wx6e7Wj*r8??3Cj zdpU3(W!R@Ilp_g10iB%E{@G(H+%6{fv+fFe5#ZRXA6*R#@Tc~^tiszt7t_v^$Y?N` z-5P>-C}8^Wf6Ugdc&IG2_}ZecaDu?8)(?vSj&&%Gae5FN>d8_t=hf~)W(Qixh`j5+ z%(sWsm*vbCX${w7Y@iWDz?T2YDMlZ)V0cdDF>ch6eIul!6XPPhwQHaZ!iuKw&&&W@ zKaaCN+a+&LIMHg&@~+8dmtFMPRx`CprOOyFv|VuL_@h&*@h; zE&L{%nd{^;+dh+9j~rEP0vd&V9;BFUkILk|;nP#W)>*6Hy->*PFygqaWmKa7ue$89 zYhY&r>TT`pn(|Xm37)O0H{&_TMNs0`HybK<_=&hKAOZX*9CL{`ih0XafFJ}RfhdgN z!TD8&a9!rKsgEdUR&%M3ohKk%ww=y|XXNzIKy^=yEE7=1R0!xgU(Ok3p|EID7Q9{Ipi&;Q8}Z z?mRip0B7xr*;FFjGnn39-))jrp@-YNwr9Sjo=#DYXY9q5wfO%}&=}x^fdR%X3^D*lD`>A&2|8lYNjeu!qO9z#M z%kqvgT)W}qH)2Ev>BprUlRZyt8HZb>gq9=*8~UQNMK)=KDwHQE1nDFk?U!5xTMg&S^aIvv$gBzx!%GnJDXITp8T;X+c#Oh~o*6usXtfsELkilTHA{GRV zyW4*F;n@j?Q(g^`ilucyr1D(BcAEItM+H|J2m%<~c+o~7=z{;kx5Zg@3v+yHQI7z$OFOu zCEG_*id_D^QB1Aq(T)HB6_{fRH&@>r>V@+0>&y37B5oP|t%|16gWl%)`cDGAyARL1 zRHm9m2o5R-P$En97<1xd4JoHXz&| zRK)l>>>Uv?*AYPuMt<(4M^Yzr*DTBs&<0Ms##>VF?PmLL+g?RAs^j?i2Dw#NUt%*Q z#uh1}HPlfaT{>wJy(MgQpSvfi0B=1!1wkIa3Te!vI)t~btO9E~RNitVG(lXo{6%ZT zP|xo)xx7OGeyDyTz@1z4f$~T&P%E|aq8C43+#;sA-Ik1uP)Sps8;)OJMyzQ8raZei zG-7|Pcar$%lncCF1`I4oy( z*Yh2yI_+o?XjH^xT#L@QV1O4(@IAQl9PMw7EVgHXnhiIrb?p;Bbc*`@Y{LVHwHWzdJUFw@;QvrzrP>hH&a=ThQ}ruS>gTP7Gz5O1H_&p|JX`pAHWLl;kbi z%vf`KSH`w;|LrNqc*i+zsB47GO>y{Pjev;4>!Nd0=iBkX`I_q#3#1ZL@bxz`ISn2% z1Q_}vG<$ZKW}?M1URg27zvf@I55R$m(!gHtfDp6 zkhBgYIL_I$QX?j?hTrMGKv#ZdmO#`6i3@lugbHIdg)m%n3+j4W)AH(QfCw*k03p zU(svWky>CZytOFMzy{A zSthw?gzhbN(7R(9sE{-9SO77u_PI625aNb1wV30U7RH6q(bd~1LH2d#>}WT|V8X2mq|!ggq778C zs1t){;}*9>7=boW811S5^~*dpI(@9$sup#bhbeZH4&ve7I7f*=PC1NYmr6w#L#2O>#!(g3qbFbC`dByyEP`O`2i_ zbA$3kYq^cYr(5phz%XvCH}hM-%MHKgK4-$gpMMH$&g7q2Ih

)Xz-{^G@J=;EvU` zgLJK%EL;~W<40r6COJvGrVKn&!WI4-L~i5Pk}11{)!p*nN?Q)a z;T}@joJT3Q;tQo6AX?`eR`PGB-UCR6yg^D@dKP^*k1M?@`In3{0atCf?wf*4rHyRM zdC!#~Z`Mkkw#nu+R+G0QL0E$xO5I)EuRs&7un66Zkwhl@QOLv5b^MF@q3ljF_9XLS zUT{yGkcE7=Z-x>hUd>Js5DuOoU`YIWV4cO&Px0~t^6nR^pO7NAJ;-e`R+l)yO9-SW z2|&L6tSMKQ@f2wMiTY7Fsw`eC#s$v;CxSxQi)OX%lGh7s)XoUaRwhAp%cn^*+?F%} zynDdRf(|g*9hEVY_QWtYBuw|m%@6~~>!3>ULs?g1)d{k?CF1hr@-Lr|R(R|LbZ z`CHm|Cf%m+wF_x|b^77VSPkAnWmS44QxM2ZUONh%Wd9cez@(1L0IK(MbnubPn2*t0 z!2k<(WfYqC-_6KZhNK>BU5>rJU0!3!N#bP1j9C4BnZya&9=U?-Cr1Rb#*CkC=E(2t znO(Fh#IS^QyJWnOnO#9L#l)gelx`LeB3P~ z(Xd7$b@h6jp4JC(CHYtP6FaokZ6v0(g ziL`9}69nlz5G+fJq>6DM*DqqAL><#_AlQnILh#O*0{|Uto7KS_UJ?H9T4mxaC)Nz} zS|g7uVuQJ>c8$oiWwVx4Vgu>R_&c2ddR0mtB#-im)Z`i_KXwB%Y=RK#=zA*qBcc_; z&zrv*=Q^?$=I?nooGI%itt^DNc7c{PnCkR3Lq(33uGO#=}jnB8j zUDa@d>2^LrYV`=SCiJ|JV+*t6EamjG1+C`y+AFbe48RffJA(d*lhL*wwC{TxaHc5U z#dXsdz#5~N8%;`?LI{;E+O;8iDV!r&P+KFr&(;!`pLN~8JM`cW$aDZ1I?Wxmi%%-5 zHQ;w|4jU->Y~Ev+qfeGPrH}DnYSyAOUI?V&%H$$#jh=}g@qF!34b(-?i|A2tuj=;< zhRG)WUQ?0+{YdXquBXlib>q}}h;WQ3w#Lz~@D|surz^&f;CGhEc zQcm);wp1{1m?u_4$+VBRET2HRk2db3 z^EuIHI0aM}#S&6lP2!oKT1$&N-U&%@q9Yl89Wj}0+v@sPH zQ#B?pO$x1ub1S5s&2bYBz(QjxD@~2pCabCWD|Eq%y-L z_jb92>Bd&jMT{nGer+X8Y@{-J78~tgJ0)L;nHgDTckJ|K@+@8^q{ROsHLT{(F+!;I zj}Ry5=nZlGb!17F9Xo!Tr|2)ePGhK8wE^C)sH(UJk_H+{ki8LL<#~7x`Fn_yC89p?%H2|qfnl0me4)9f$m^( zVKyBTD;yuk+(%33Vfu?AoJSxDG9MT_WE(e8l?~FJ_0@-$Pr~hAN&RqbGEvRYG0S_b zOU>-6+DrO*H80_;o>|s1T_Hy+c0XSJt6eQGqrRG$3lQIa>Yx(s$}I8qpJGA&T4R+l zC{Jd=K-a7b4Cfmn|6&>Q7DA{AHOqvnm@3L^mot8~X3!U{Pz<1-@{D~`kR~v@X4^KVZQHhO+wN)iv~AnAZQC}!wx@0E{HIRs z)^6>^NiLGgWm1)TlSj;C7zQp^unRzqS=e%Lv^W6yg6#<>(($MG2ss9MnD`zQyOCZz zcQn5WcH&^({;wyXA;?ggR1m7xWHde11iJ;r z&B`?bIALRQD7iW8IjT!35Y`D7X{rvE&yz<)fZkQv(ny5x6VzN+pfqoDntT= zlxuji#_qgW(X5?iZ`Ap0hZjRNEgb%!BnPnD%j%HiM4$7NtZSoWcCYz(+fDlkc3DMC zFz0aMR`fMD9Paz3Fq-&?R(3DaDja`II=0tqge~{Fg%0!UK)Z10Gfe()|L^S5G}~pB2DuD#NrM$be~FI05-q>K8Sc|W^q|RD9R4MeDs2apM`Yz3_slsI z5HYpdB4Y=4*HfGMD`F>ACJ}0wEH;6vM(Y$ey*sQ!!>n|Ydo;qu8=`8j< zvx0k#Uf>BAz@MTBi>AdaFbvIw55!aSCw`#X;CTP6=^$iYI^IN8{#=IOvHfi+37}L* zkA($c`#7Z!k%F;!;>uyBGonj7T4C!#&f7XAFL z5J3Mb9Wa6Z!314lO3cy*7wrd+Bu5*&BN`2VI!XilW$IQP&(Z&$b@x@cZ}V8kCwQdW z)A*}|;QGXW!My?9=e*&k8@(+?ljHSK=A?xz4o?^7Ntguc>A=!eGno>hf-_1yqGqK$ z98{Px{e~H0vq$|QZ}9CWVvXNktv~A zIz@F{t3=47M72h5@2+VV(XP#n|@?i9al+U&yJiP@a}+_iHfZy6Ft9=7=^}G|B+PVm zoTj1H5neBoaagI^q5zpp7nXQcrn-{yRbf>UP;T`j&rSUk0GNAyfUII zO>l%@%Shn&c#)6u{%7H;)&*3CWntZ>@-JNYV{lLvcpU_~Y3Dv|<7IaS#cF6vEJdkb zJqJ++K$bG3do8!~$TTX!Jw+*{-DhOAc@#63A96R~Jc#hRl0Cezqv-~y11wzD#JRk9 z6RMxLf8$Gew03@S#PcX^9X=MlQbDV3>bZL3g~Cz-GMi-|Wg{4}Wk%3Vcj1eUU@e$F zVlG#y2W(YvA5RS)XEUPj^16BXF}SMDy4f#gzgQf=)*(F72YS@rFy>=5t|$$y9UFWU zC2-xgf<@Pk0%BU`Z>CGT@mbky_Lf`Cj)lepa5EF$)+0}!VL_3Hok9ftkp8rlW103c zrEG@FYo>n&33rUK5%zvw47I`gTGzpcb%TGj3Kip{>#3sk?misp=hUrV-w5h5XqHEL zj^T@|9;X1Wk711~G;UW!`$HN3j6xI~?X9eHP(am_jdSCX5vdGiDC6Hq@H&L<{~lzv zz}R9ED30L@T-yQXDf5mhU`r;3WZRW8f{jZwc$x~f@YgupaZ;KN87t2e=jegn zphxdwAwJUztlBTd-Ny{-s?To)H};$9f3_EIbSKQ|Kr_3Z#V#p^kJzDqhkFuVDFn2R z1(Af2t+ZgCQ(K;)IA)9;+4eKq@3S6f2VK!Z z^$bB4h?qqOIxY+UkWy+>$tKm>tm@{E6596ABtnl_srGKUxlmi5!roZ-X8HI`pZqhp1v25 zHFk`Z4|%WQr?;Q)6t2|3MvnhgL9Y@Lx5sCqzB}`9?2~wOxt2X*1~P=8J@S0rrMyk- z)7D0D_Cj9hHBqjZ$JDYa@dYw>?Y|}6@ogHv62lD4kHG&a#k_p6_uLmBE+IW{Zrx4| zVc}0_==e`ZP^%@CPTxz&Jzatce=yZrYXooiS$n#1rk-8q8lcKdxT3+ML!oM97Qx z)b9>3Y+o(~uObcOX*r0`gB$H3c!Sf4y-+U$yg>=_AxFA=(oHk}PFLH%F%TVY_$BXc z8;stj@#fv57aOl%UItp(SOoI;5xh83#v9Rvl!D{fJ@}tc$f9;1q&m3dg%K*>D^zjl zIhSr5!$x6kq!dbMG@21#S@n2*IyX(+fJa9xVov(U1Lx=8FuXLkXIbyFTJEJU&_p|- zz!o+PF+JNYdpG52sw=9 z)0(;J**)Q)T;J*k7iVEf400?yIkYstQE&?8@nF1#n@Ld!e;$Zed|C4F{FRwaPS*$1 z5OHxb|M+EQmpIYWkPj1vHT2DPnK`Q7Y0MWXMd_dl8KR$a5*)g5>HV$l3x``csQ+Mf zYwHsJ*(9H#U?96r&1jh0Z}$C)^~b6i1Fn6eVHgkP3V5WPkkFVeFu+)ws~ujNA~7p& zT7$XCV@+qojLLk`5&zLdMj{Z8TAa!Q7#jR}V2HQ8bE*{a01R!*b+bhijP-MOFFku3 zJfrrI^z!JKus*}=7l2kvnqJxR@z;=~e5weV3);ksQ1EAGI?Jo5YF%wX`gwq^mTp^}VA07=x&c&&K8J!rTV1t_ z<*THCvO0Nz(h-PFCe^o~Xytnup~mxpHp(m>F?ipii2C4rA5#*7QmRWguzDjQfO9aJ z5$tbNa2hnOEkCPEXNavFJuO;VX3_=4DpwWe$4zr5NaseD?5x?COnl$mZ$HompmgV2 zAuq@sL;N(P3o4xn_V~hzuOdh@hW?J}z|%f^`=tOR|A0xIP`8%>1^HxNgK3a_y zOXsi&HLtjH62;%5oHyuXiGG{n`VEPD*yj+ZQ7KqqehqH4zOHSp+ur<8ibyVSm~OyQ zN7tJLK(mCB1Upwa-ttNmEj2EkJ`x@Z$!>qG%;xw_Szt@2Ix~~3GtBvpU{o;fg0r!S z^3Cgcd_MTo56IoBL}d;MXr4Gbiux(896(G4qf^#AHt2fG_`#fdPZq)VvmAE4^y_ip zFdJZ~d3kBG5Pl)~4i}qcQpPGr=Uz^i0qxB{%FmTZO03&EBQ0D3E-E{_Olba3EO z&rb#g`-^*y1v)f}?%8yH=888RQy@OBe7+JHHy9#y+ce}y9_4x*$)$X8UReayMI2A& zb2W%$s#BXOhvc<|!^MN+U%#!eaeeImVOJhEVdL$}uZb#s=VV&^MOc54(%YeZG@A)p;;MHWbBN0@9=#6nq7!vi9XP@?jWiye_J%`LA1a zlwl58>T`w4aQ#&4Xd5OC4u+arenJo&x39I(K(I}lMqhr0pOUk$*A)@#yCP&seB7t1 zTEO9x4ude>)3)(ZZAf0SZpyo$#CCXIMCPs*^x7$%!z@#?g`*KL6QfI#T4Crv{S6~N zUTVG(YdKSzc@t4>3P**mQU#B06`A+ODkgG~D~YxIMsjY~73O|=E(ndC^H}_3k?J1D zICCQzzHpK%%|%s)rGZewn2>s;y!|bYKNT0Fu3}g$lgkOu=p(zHTVqg83!3yeMB7#z zr#jM|Q6-qb%`7Ep;;R?9emNT7_cXmT=AYE=P!Y)qV8$3IlJ4QiU+>hD&g^4)NS3Ga{nQ34EA8ncyvU^}#aOte?9TX@{$w zmPHlU%N_FRJY!tJ9umLf)l9o_6#)Ano{-;~=V-{al^FeKUqf2Q2LexfNe&V@!dT)v zQRKQ0TD`1F+ZYpq{PilZ1TyzW+1Uv*l)PxBXrw&*W zF^JL{P|=T2B0e4^?ut15%xm>GdSi*~E|I-r679+YN+)Ce;usLb3MpSif?x7Yo%x7C z&oaA_qKZAS0JHYI+z+rIk==ZeW+8Ym$mbm#d?$}Auc*q2Ue?RChP*&L4@4!eM;aBk z!ns6j0~*h8w{Fr?hW|FJ-2cCK?BBrgZ2xoC>066@e+)q@26g^7YrjJ;=m)EulC>3* z$0v4FO~wxfNlL&K94MohsJ_|I;5x`KbTl>D1+{7=UB!v#-!tNxeGZ}|@5ME`(spMC z!K7%YNpCKhYc+|e11Z-<(-9fkT})stR8R{i(DD8M!Au$i-%Ma+$$<dPpe_n%sU=Zs9Z&2`ln1y zd|vGb|rRb@f`75&Rkt2w6oo4fcGz#uub$sEOc z9v0Ggpn3Me8b&SgAu%=vYiXXH=YIgI%ijFXe{aN0^u_vAJr|cQ;}S$7MX>a;-UNY8 zCmu!+ChI_&b+5jN^?L`0l)S*FhU`5V`)^bSC&dkZgkNi*K^wzpgnd zOO#esRjA!qhUp}k*omNqp_!HQ?g}l^>Kr=)$1K(|@h${`VW(~BnTu7s$R$KTy(fl}Vzu>F z_w$z~u6PwwSpIaJ_*-Y`vwN!5C>cFq(s%CFIH)IovFrUt_bJF}AzZ9z>4ZwRGR)&^ z8lRO>nu6m}s;DQ-3uY4b2tY^P+|^EyO@#0C)$+4vVQvOjINYz@qKT%pL#8T1D)_%) zq$-h;mZbKk%(b~qFtBiHL|fID3<^`)gPrFF-g_#4uT|I!z{lG|UfwrEpSzkU47($= z(sn?Ydf}%nAQA!F;%QFJ&!fcmHvo=YsR0Gt13AU^HV_1FS#;uxWfVjPM7uU`D;m<7 zflYcMpA%cwtgCv|)zvf}VJ>8Hl2=P3=Z`moOZVCl%6HCv+2v@3Wj@3A)79`l@? z%iVcjuWJYtX?0lmqw2pS`;I-{ZcF zj%~eLe*?dOBNhuGe)XB;O_f_bN=+O2paX9EBeV1Bd9&`MCPtj{;^`5yW+BMVm#kLg zxJ;CSe8XD4uMF)v>oJ>5#FwhJ~S*3xw*gn^fW>Mriu`j53sip zzpXC>6Y>?XJ%N=XTP4;*-U0|QgmTQOX79Ap+>IxOTE#S$1s-0p&7H`}{}>5dTe@)j z#;J3cmL`!Oq^T~ceaUSpm^Hzy=!9A?Fd z%Z7}rNGjH)(1x)YhifCj@mo;^Nw=0u&Js5ztMZn%u&oJ!HG=4dqjtc-!ES3Mj@SHM z34}2tRP)9$m?V2@*8je6NxrVMs@;7$!DfIx`>Tt%5`}2>k)DTRpJ!t}WyN?yWi-p; zNLTFzxfFa=xG~4W-RH0^gGj86_q_1i)(7R6_KobRzeVnBRf`3uvBHf7M>^mTBLShQ z(9})4dR*eeY%PW+1d1>JZb7oOZH7b7lH|Udrov5w{-7O*`K~&ua5+HLdb6r~4GDfs zxsG-*-V5WqpT_(2Xg9%ZR9fhD+3`d<*HxGDm)bLcvQ*#@@{qbSt(B$aR@EP?*~~o? z8Qi!sq@e1Uq{3W=y2Gmu_GU^226%zyTe@glsylQvAN$ovP@NR|AJ}UL%DcJK28&+S zHFnS>l!n&By7UFjdgU^(d;sw)Ib%5E7YZ_KFGkSnNCz#jH#=*2$qq2t3eLQ@)?I(g zNJdk5T+PEzZywN}me8#J_+Cty5%rnQ%i5XDS+5gpgw1Lg+MC4O4HvOAOLmV5bNiTK ztE;naeAM}{NPy@CTW|ZF6R^3IIzv+CFqJ~IsPjOT=++!np@Z<7gC&-!pg zP0y55@+z(U@EWK{Mzchhnm4Z8N#gEiIHQ6CAo)nA>Rsn|FZn>Vh0jCbU4?0n; zCdLO^Kxeu+;D64J9!Ym2kWw1l2h>KW;Ao#GoW#GYh^M-R_mFVIw&`C$kgotN<2bnt zJ|C0_Po{ZTcN``G!A;L}sAkCM-r7~OR`dts0Vjihg>SEw$Z!FC5gNQt{ykK#n(i{Q z(6M={Su&-69)(K?9x<%w;8T;s8Jdc$kfwOd5xisyo7x3r`4rtW97ybf1Dvwc?VD5b z2vc;2@J_{g9*p>OGv)1Ajh7(7Z&1yFT=qbe>I9!6`w-B;#YSCr?a9X!)(xUPo}_`$ zKbx+%I=@iUC`2jT3L7oCkzD2rZ%8^mVS{=Y2}@#H4}QqQZP+Qqg5FV5CVbv?QgPO- zX_wDhPgpc^BV;k{h(Coyq?N3LwS5euYAX~}ng|z4gma3>HQvhip<1myLhFxl!3Slg z(9AxLGDAr~ua*X7GO;>T!b~XCXi0y?a^piB*>`|_bo>($m%-oCj_rlG&4VU7=RCaS z0J$ms=AQC?2m}vbB)L~`CKSd19lW(;$C+*ej$KV1tpufhw~$rFBkigT)Q8Chdpxc< zH0QJ%zfnga!y1EQm4iVP2xc{J(cS2vzI&X0I`Ix^M#zPXaf_F8<&rxINR-(cn%7Vg zK=^I2;CNPiAYOb~wJc9K_;MQ%JKN84R35gCjz0{H-oTR0jF4yeZR&lw!^5>Y(>p&o z`?d1~Vh0-HX}xFR z|GK9z0ILiy?U4@sFNvarL=$)?8K}jn?$bu-LvqNJh^pYq@stbLv9FD9n}KUVe~l4# zq58c4??ZcJeNeMNjmt`E98ax%%vfXLIqSA%v4L4m>WdrB)47ZsAyO~UYD=2S!PI!- z!cH0hMKGES%#EA}8n*{p?SjTC7$&%1%KwdO^A(+%O@zy%9;NtH!3}zCf&n`ian2!u!uTEI2-Ty3%tQr?ZN=!tx zb$Uo@u(ij0QWA=nII#p)MQt6QncX)rnL>t#|B>(&cqYe!dcDIBceOBP{`!4&U5JkT z{D9;_ee_aS+V#yH21uwB~xMaL!3upa@<@ijLQg!042~UYojOwgR9Jzv+ z1D6&MF?z+boA=O^g30ttMn14^5wUGb?_= zKZ<0{yqXo@ZombNCVgM7C^hi(2GksppX@}8FpH{BuECTJbsd7pIxzS3mR%?wNq;Pz ze*w}D>^mfN)5V6D0$K~x-w-a1J%qe3%M}Fpm?QQk16((z2Dypt5L)eTK~{;tgmUuG zWI4HLi!OFt4=3a&alGW%^Y%b1t=Z}^wPzkS19zIC5f!^9?kr&ecCCzhNgs~QkI`O5 zM89**1BFUtg9f>IRT$6oPC6WY^QrP5>KF^(V$|%`6R=*;YYH3pX;yaq%LD~`%9(OP zxk}+#WjVJx9t6epy$!0Dvx=t_ILqc?)rMU(4_3sg1C|QmQyvL`7vb;xd+yZ$B3J;!(TL!< zUoXMjO_8My>uDHGT6D)rsD9_*L;{>_!Sry^|8>20OrZk2-EXTt-)+$*3e!0@ucRw2 zf-grXk0Ml&*Wh+snDdFkf`qaLM< zCklH1QF=eGXK5G6m`GBxZ(Nod#n|M3p(2R7>@=CIXKdXd6rUgHk(0@30K( zPe80-Zxi~?=ig&-(RcMzPJ$T`S2p7+a}3%1=tvh2H78mv&?2emxRnQoA%5wbB?*j{ zgORoeYivp{KDhQZ)(RC670vv4#QH^RQw`*f(+bwUiK`8rBiQMy`*MVT zO6bLO1+U{Uv?$WbBTKaaGNOwxuD%JX%!)ysTBPWrLLzndmC@SzsiBKP$yf06f_ysA ziakqCTvhiG>UY`eBeyFNXaATfT$=sI1h(Da)1c9j@z^465H+SSlIRErYQ#C4G$7tF zhr)CxS$DSa;7^Jgk5%SZ^j=6D+gP%;jX)K!SSJO8^_CLare#|>b9B}|Iw2-^Q+wHu zQ))v)Y3=$A_;5K<@?##oC=t>sYOJy#ruQ8mzK5-L}Ol=*}eSC8;#1Uj26nlIbqZ8_|defwbfIp1Q3}=TK(C2GS2EisU z%={8|DuxwX@37>y`VwKSYd}4JHCvto@fHC(4g302<7GGQu&H)L+>mX+x!U<Q})jguYk@gvUFX7?Ea3=(Sy}F?mK(VU4pipqFr?@!J&|(0db&!;s7m zMo;SR+C{iFWfZ5poas~#LKZq>KAn`~=+|Z-J?rI3P_$|-eB+So^J#yHk~o9Y&pm%9 zWo2Yy{3i9d;d8;$c8pHFqmd$z+Kdi+>ZAa_kuk;kuYyE~bdXn%C2lr|o=_&e#_MwO z@~Vjih;x3c^QWqx#cQ3;t85Op54)_(_(qdL2Dd@6Y!*(8 z1~+$A^X+Kw{Y;E0{upwDx`3XrBTR!fMrEw(?0FDsHjsPGZDCE9HiFd^O0V7f+wpWs z^uy{M<9eb)nRxz-3;9qKfB(+RzT7a}-^q9r99ZK>_iIMZ2Ufnjw04_B( zemeH+tDm~HdC_MH)RoH=4ew@!Yd*Nv%ukN+?Pq9Uw0fbjxWEY4?uqbf*wIjwrZ(RP z^$2e|wHRz`#EP~XEg4U1^KcpMx`ss>umM}R%LFL0eP z0=`dD2Y=H0q%(UYu|Iu=9Zhe{Xkq%moTW|`vF}Rdh>$6rUm- zawh1XXHNjMX)_KJA&SWHLpt%7FM_?C%QiHMlHZ_#!Pw%uhd-J*DT>}x7~Y3}D&70R zaY+aY=a$Dy5L?_f+^|8i{wz*j0vkg-94+5>!yKee9!8v4D5Zu#Jz)#H%FeQnQ<)n`9ZG8xn?(ry?m2&Lpg`wb%{i8G10!c!+KOdU&I}e z6(Onn?8B*BK~Y*_!8 zYiZrQTvZ#+ha@eT>~YvT%vM8YgbwwVuGJP(JlIgR4){sQaI9eaaS=L)hok7f7j2)x zbt02YT$9rc@4PBcHHt2E#-a@9^Ntzr3zp>Gk~+*-f>yYeHAh$%#*B0*0~R& zrRd&-*RUC#Ts*gueHM@&FCOGYu7upxc$O-dNmX2u&yijkmuiQopZFd03kvX76}Zs9loMk)ZgKBM@F51`3(7p&SjAx9=}Q#1bk2_` z2pQmK9HXUmDnIs)ZBaYm13`i`Mlg*7`uqlciey$Uc{Z#2+bC_LZgMJ2wuL~NW@E`4 zo#T<1w)*>Eonv&5rRN$5a}FZ=2`_V4vt3H5I$%kG=-O)T*C@7<96le$*}^!SILN?n zi3!%TH#j;OQ&x4+XHe{I{U#2+y&qQ>j^MLLLWwZpYP!XK({gW(ufVwrrhXOeSRQqG z`X<@XgaK-N z&c1f#h)aHjb#S@P^{d3qKvjblKT?u$@z0a+sGCj z;HFQth^P^0US6sc3l;2&@NrICSebop`)ikZPDieJpy+nQns0cX-zmMl=zZ&3cS(?m z&XXU8!t`W`*&!%f)T5IgYu$mp!v;TAqDG*!kIiu#%HDZ(DB$PcR@Ky8eP*IE8_OcK zaHr>Eu(#(SM#&PeUk7B>W)>8cy0@R<8$NVF<6}=imfO$MvW$?)keS0N+ic>@N|nq}3+G*J5dO;miEfx7XYzA5HZ zSh@p|Hjea)fbvVES0kr(85*yJF4+<**sYW9&I0l-Bjsmi4&|QC^}Ck(3;^*(vl&5g zw`+v+n>uO1kkR~n(hP{A2|lPQac6_-&riwp-(y~=VG&J9n0-)Tf!iO;hm%46c9U;zNFrXcsD==M` zP_4>wRf&LjF?`l5bO3b)<@F5?tqQ7A2RlEc6^EpKzI?@o31fyLq1r*IAE)QUc`1l0 zpEGOA;+c+n32qM9LzpKZ^yEh7NZ*p93slRYW6mUwi!bZ3$^)}~S#7dWUjma>J;;?C zxln%9`ry<8w+49S(cJl$0bGOrKkr%w%io5!Pj~}%B%e+o^{B#OyO_~rmUsuVAr2yF z1rY&TiYGJ|U$K*^RYHi{OO%KCQ3YD;CP@6O+s+8Iyl znVzP$&8c1hy=hzynHm2@BgR)v%st+zBm800ZoB8e^<}4tLMHe3NHyB zRm=Zm6ma}N+taV);I*>wKg~iIhijNA^PJYX_C+DNd)8M?+14n}4H+GiTE8ynxzSUF zO*(3$YZAE${7MCa7MTmK!rpcY zLEnDZcRMD68Jh_2b?WD+sFTC4Ug_x0*=F+RtaM&>y@0$2%;!PAK;EWAWh^Rsz`I;x zn}a@+HKJDW&bo&nFZ?E50lAE3#7>?^n=+tnG4`XgfiRCr(WntW5jduDAcOCeGd`t~ zO}McAqncZ^=zR4~N`z{}BX*-yqZO8)zNY!Ls{@)HV{tRud zH1#Km_bF`)X)8=sJ*@1R!*78?J4mU9Wm63Txf$uKQ(#A41CG%9%$Mqs^wH4U{Qao= z-}~Pv4PhfQY{aAU1u;Jqa9On6RVM*_V%C>I3P11`c#o`t$w70ZfpTaSv?)$c_(STH z&FPr#ZT92;2dVqd4E_d@76@KNoMh8dr@_3NiXJG6H3vP@LIC*-KCTrz zn)0tyHCOR$2l@>36vZ1z_1J(-_S*M!KPZC#BX*l$c(1Gg(+9MtlBy@R3fbAAy^A+? zJrw$va^`UZvcyr${XRXwh!yOg?E?gVud$eD0OB`-mKG;0n|tbjy;$!G-q11ZgyP|o zE-P=1a~IVmXu66~`#<_ua{OLj*gbGr-7x|Rocg8GeFyZFw9dF7spMT$m-KJE(gN)7 zTWVli*-=_@U6;b}Iur_7Sym-{(0&?Rrc3QCmdNBMe@OICUH;7TftU?NVBk+;j=yT% zNa2;`7^&ihxdpLika*aNO_o=mlr~v8E26bLMmI1QixX$3klQw_?`bA=fm;R9@EdAP zKmI}p9b&Ra&pUOiS5sRGM}%g25$%0idbVo^H~d}5NhGGm-=bNBbG0fau+#^8Ly*x< zW+XQa)xvS>QyknsiyQ{!;zbw-!kQkzpGPi1p2zLep{c9{URdwmP?)Jy{_~DpNI7Y76%CUi#kccCETX zBjvPc9-e*s(9!S_RIZJ48;cKU$!?Yd0#Q&{m8SEsAiagNq7iA@W()%k-`{FxmAzKd z!ofhri160d{y!_Nr??&jWOvpy0@GP@o7vS+6m)}-`}d0yGis5sTKngD#M0!CSwDO; z2&iY)R0eMoIclc*1(>ETpW^7;-IERnNuHVV28HQj@4Eq}zDn3r2SyEjzNSL4f9L23 zb}K}K+Zt}mqEvD`Ib%#N&5(oLn(@CfU}6mG^@M2@pwNT=nHLgRX{~M6FC}cfpbC`= z9Twos`Uugi;)PdNBI{Z!-<&vVbA1O*ML`AR%pNOH=Zmc^``ifv{I5IGHU}{oS!fFk zez(zmd6$v^CfbQ^eS0g6!$+f+NbL?-nAm$ zRme;~*SRDm<@v3>;97UQxlS%ZqcrJzxRNGOQ2Co;tj4Pl9a1l7um^Fm8F&!)`b5>^IR3iSPX@w+kh4N+_iudlE^ zc#7AQcl3s@a}9oW3H#FYzUq?6)>v+SGO)um_R4XV?WH`@SSd6_B0A(9^=}=7+{R#! zfPgMwdSbP437rCuuf3srz~piWrIlTp=@5RkqatDk)CZGkrCcZ47OhzB(`-}pYvKdG zJ+jrELh{Rq#VUi6yXw+vL_LU^O*2York0{g7wAjOjcVKn6N=jLC<8lU>}enF8{aS( zu!C9!Vjrd)^T~U0$G)qaP^r>dNWu!3ItSEFf~0Myv_a z5Pf0~d*!5>CCfjwNz}eNHDCD^Zv<8D-dN-%WMM*B%$oGjg*4ZYL^8nz_u}$J#HVT@ ze5%RXN8G4&*2-*EN*YxXw*uZuZpfX z5fu`iy(d|POvkn%7$bb4;~!-wM#<2VR`#cD^>)>TltcrJJ(L*Oc5|!R=Tv0q=#uI} zvy2xBVb7_>o%$n!!e&(+@pz>m8jj6SbOoz2YBcS0@QhS0oHZ-Cf0gZ&kZ*IU>PDAq zbPhx^ad=e*8)m<}_W!bpo(oow-cZ>GA9e!6L={?o@A{t!c{|@VR?(X~seD$qXXE6@ zV&Ie8DJO$Yp&Bgd#krpefcC`m95NfgrjHcYpRgj1BdMc^5S#PfaK78weCR1tQRnJp zE)2^l;aT$t(uj}@p`YeI!ETFUCxF$Iw3bymc0-9-Ts9r4Pf~6#2U5*@^Ex=yr++6=d?jD7x75e1**EB1S^6t4y^xp5HNgu$4Tk7ha z-dLzHmWwJ=#NH#C*}Xd&-W2T&mgkP>qy!t&`6>Z^B43O7l8ej5U40y$CaUKG1jjRF zlVEg)#wk7JZSJ)H_A2u=^mM=oNG}BwWup5KYDsai2mU^k1V(%#gmt&7<_&{UCX|-I z?$yyO9Bc3G6N(|Dg3aD|3D3Z9?ynGAn3`?wejHdZ_wQ01G% z+vKezYcrVG3S>FSbm<$`<3s4@THU#I0}jcq(ds^T1i9aMmOL7?2Bjsfe1J+Vs;Do? zsazXOR!rDMxch!96}vp;AZH-ah;}StyV{F_w2dGT+1%4_X{ZAQxfYR;IWgHIK#<`+ zAge*AG73ypGC-aEqb{;!gU&@@>3a_Kp|w~$#f6~w*4FKt%&?8~Dr0EK02w!HcH8KRw|AQG2gA`@ZPaoFJ$3aJ%BCaj>^>tB4Nm*Hm0= z1?~J%d976HcY88Li2x0#Z{G&ha~@1uTG5ln*e) z&(16A&_{O?D~PXqE%jX44Q9Y@|E2h>i<)_xAo~HDKK5JMT+r{lG7kw%&>oE*Gr)e) zzPKe!=r=(pV~^gAs>SWyuW(zbfL)LU;7tBBuf+>DpD!Nz3~oCjU+8E~TSDKevLes^ zvspC5zp)~NO>dQGzU0~Wlc_t_m(vq$$vEi-GP6PUd`w$)Y)I3d22^lNy;N9$G}feN z-OKr`(YbSeFPW zps!gJs38oq)Z<(3C2TH{*BYRl+YC%dP!%97cZLT^mXIj}r2;Z^542bRg|GM~-{gqL z?p)N7%jHxV_!q?$4CY-YIQboXozxhxE}Oe-nLG}kJL(ZR8{1Is4~ua?7{b+27as~t$87l zn=NzVo+WJ<4c+m{7WyP-F}xwiR&5WzOF4--{lzVg3Ug*`&&lK zar89;yse9fY|JE*GXSj%1olFvZjVu}#?{;NkK=lmBG=;ThFPLhmju}0&MD-t1YF^V zbPDBJsVonf7Ve)`R@qZdY9cJev~f^T>+?5us4>0(~W+ha3#y?Qc9uw0ds@}v!CD;RE6duAi zm{Dm{96u#|8XNI4VMY;N7A}qhjxxSb76^uTWX*} zne9Nw2#RHbdt9;cI&{W_dI`OemnV?d=2%H97nN~-TBE4(P|u3U4vz^6KWh%H)nApq zygBipRraz$JnXw8LdXE^Us3PU`_$#~K}8OEQ#lZG$w)-087JXBfBz^(mn+;IQJ%0> z(8pW+>G(>DPGZ~zyf*_jJx{zKbJXena1zzz8b4uwWBM$~Qac7S==V*k4>!U=g_U0U zK%6~q33fb+LOvd|!lxORGPJnN;YaWvXuX1q2MjYHtSsC%!bo%tEw2H;R{!C?Gb?GK ziXuE{T_tkPV)4A@&(Rq{9K`+AJsJZXO&o6xaA$$o^Q0C9KnGc|F#_7+Vyr(hVJ(&_c@1kcPXvZ3|MK=lSlrcxv< znRZvN%o$HH04R$2W?nT6{6I|tnG$Uw8kWolc(re*k=5^awh?F`Z-gksXQo>v3khjC z^ z0c|~>(c(e0%Jrb-OaD<#q3~eQZH&*go+#rjBjy&!ZhWHdS?#n$u$_c}+EEP6qEmag2;k;JjInO%HQQ`t`_y(dFI^FR#P z(%Jj`!^X%^?mji*S79Bq8HXWn|NLo6m`R4sG!M+dU)p7Us@TzQe{6y1U3Lps^Qjjz zwlL4|9%U2m;S-gKwtFEB@=6aK)}=8j-I6z~yJJ$CkdZe_##Wb6&m&d{n<#tcgF%$z zT1}pxZxA+Cm_Wc9O+gN5Ckg#a3E^RXOh7b zb_x4_f5u7he#Dd{%t!;DyRyFfw&SX9twLzzfE_6_2p-IFw0U3GHefaN|CiE69~Vnk z${;8;%R@8Dv^;{EaJ*U&1Z~=XlNAfw7n7K%OQ6M)c&_ zowE?M$i-B+GyZ`^9pDLfBY9cDd8R(*mq?#*s8o3`&w*k!!e79wmvgT#P_xHFfdg-L zWSme&<+1h~rqXk03;PG#&~VST%h-+>$MGuV(&sJqB?&&sO$KR{Yu=qy_0yyXgRxjo zp_ecBh25_4jJF|b)IZr9?F|^AT=@i`k881+MJY|j?BkK?pguv&-rkx${;ne!Lf6Xf zK0P@M`FZK~aQuS?VvVh?2U{x&)2tbZ2Jo#(sburc9pyD&uHV4w@9Z@E)M=@*$0^G* z{}wl)u~iBK9p8$d!o!(0!^t?St{Mbs3?H^KC!{g(f1;>d>kJ{$9DK5xze#zH!tS1KAH_@m0!+RlC8a1UB4l{;7wup!Ya^KyvpZ6`>UCI?@z39nL-ItUzM2P-c73Z zSO6S5&pd4gHKZUi4;)me#D@L=0O*iBX8jTVtz6!S?Cs=?W_kY-J%Y_8AYh0TbrU*~JRKCd9ShSXDSRz(CJ7xk5i;rg|@8_=lQ~w>l-EgLdD06%kbNI@X4W^I7 zoPHl1;UDA)!WKD5nJ(u5I~f7}MwTubQ?c zU7FAg>>foK_wR*i?3?MZp$P?N5GbHnGLneENIIs@mR^{r(t~g!UX)F^y3Ti$22cw0 zP5_y0zGSIs@}&OW?0815ujtz7=r=n)bL?eFS{p7nA*Klrg4>D4slT;_bY1dC3~IVl zW8)R`cmRgXH*>n{N79iKhEo01H5eZolU2I+K|CTki^)KOt?bj+((WBd_K&A>`LgR} zgjc&ZUAnYyCOW{c%2PHLj!m+L_!)#>S*30!$e>@d#xGIH0YlG-7!ng`}iG z?Z;;8L2G07keU?sk37ONlTMYT7Ccy&)H1k)YM-*rpJkt$Q!)feYcR;uBq=yKT}!?Y zn{@vsblH2keI=|3v|f+2ab9A}M9c^}07+J88c=?uXv#QABM{&VUp-qx0uXC|d@&A;tNNLXO z$Kw@u1iY)}lr0M)p0j?nd|B=P-}oT`^DbDRNVg8Re)Ou}KlDa8RhrAEySP+Y`G))K zGNZA?Iju|Ker`uW7E`933y!NxlPwc0G?fHJYO0qsUeb2 zwvqM=l?k<;CSmJV_d4y2jbL}+Xu7_~NQ4bT7po-TF(Ujz(y{*&3v|Z0dEc1gla^MRbk)$VI*YXOtRmv8gaO#o-?xFuiy!{6r-qZpYWrJmY+`OEj*rR&rUW67p>r4HamThYZ9k++l0j7L60&*M7xe%9)SVNRt0p z+6TIfuAmjFyD3>=e>h1~V+R~;Q`i(YYDjAA;X|%-9VrMgJ^MX=LQu6?fc})12uJFp z*e*R4)=@N;SOWI0oFyP?k?8NMsjtI;$6D27wDZzYTpE{jSKC=6X4ixa zA~a&wn$F1NX2KCi{j{L2pnJ9e8gEqf{s991Kx%j|@A#O10VDQ7M8v3#N|vAZz7_zI z*(n}I51oJI2YyMsc!pmA>xStv-~T_`m;d{KAeL>h;pcg-G?Og7E-)SNc+Lm9pp%bI8 zn9HhL#yF6|SL>zd*vDo*@Fj8YrV$iN7pz=DEMn>=RRO&z^I!Sm+c;Grl_roT@mnDD zespROp(LYkV#;c*T&E!5`AhSjI8x^JxWYsfa0V2Jg%0Ih(wQC<6@~!XXm9`0dY^-- zu=teDCS;|VgtMOj$-%@u=jMr#doA>qe#HN0b8jD-!l8gZ7u_8GJ=3t(u>Z}lA9Hw2 z4qF+r(U~8p0jJNW>r4-(>Bv*YM@{jH$2S1qgc_pPwC*jkYdi)0&6UK5s{rlr5%t!p zTd)AN7Q`DTkvBXLKs>m5{gVWE6%N$m$(Y>CE^YV6f3H=AaNAM7YE%U*^I6@%h9^G zfr>y?_HR)df0YjvZuJl7tR3fH>*m#RbTnbS0eFni#P4NBpS7X33Vxk!wTeOOCG zRXDYuAYx~|OviGjcg5wp7wUruy5eQkukIP+HvT;q9&eRk-wT{H>=41UR>c-axyiYK; zFCs*{8fFg3=)>R?%4hQ0JIT})K( z4D7z25W-t;|2fll*WdC6vZnU=Ne;MOnRa0#9+y}(QD1_PCC_nKjF5_X=}S#+oGlnv zRVa6QPP{)Pp0pg0G-3!LeJ7oiG2~2Q%RQ7L1?A#F!M6De1?=wEa`D*}*c8YCes~u= zDTR*9RRrow=2@WnwZe@o=0_l1^HDQXBYT#6VsKKJ=AYG7+GgATPzO6S#;|hz?%`R3 z?fo#&c8>>M7)rgl1zw%Y*a&K0DfoX0a8#}jXOOhcBEb0pE9x6X60aSdlelvKhNOcl z{_TQyNs;!w;|Dhx4dS$NvNAJcN(eU9PDdTvLFWA((5wp56#LvYQxzmB+;^#1Wt6gG zE8K_X@=HRR>4CJ$Y7@t8#A%U z!XZ5m+3ERC$+k^o;S3pK8oTv(7V2t218>WvT$-)eJo7idF$p1Y${|z<8`C}dEyNcp z6o|t}BwSI>m*Fqv9yp!n-0Q={B=-cW6G{W#G32QauX}ge3j$iHSnm!1`F9dJCGsDT zf81<$03;oC?s}yvW#nI{@3@&Ad%$0S!eocN90Pi($BX!Y_Mq$h&#LKrJ z9!irsbK(%#hAyfG>_^}!c~Q43M{`PCk*Ta?Nv|(RjkEoaS+T+)nxDJ!{-LpHII5?r zx5K(h&i*jX=T&E)Sf}C@qEtaB0zR01mlE2#DDM2qlkzB~A;KDOE}9wdy;XMYvx zi&d{yd+$>~sI`x5kfh79uEoBUTvvVVPa-=@*EkOPOTdOWe_lIIvBLEv>7!<_DMw2Z z&i4LQE0L^|-#L7KwFa3yIpibKYb|u+)MWJt#p<3SF-pNwVh&I@(p~?`=*RMP6~zHK zKMcW0ii)fHGsv;`EX5cyx%|e~G>ZYx;N&RI+zL2iOIue(O^My@H4gl<8Z6S`tg2ia z5(;HoGySV9k|da2>~gZLqh%j9ry26~(UId?vw$tnlq6@(g@m;-fu+=E>O~t~`naW- z^MUC)2&83l-cV|#t}BzBAx#i_P1$^qaEU^s3O-84K9{YoY?4?Qu-O1Bo*;uX^u}Ai82}HTQiy}v>?$=%ZaXCNrbHjnL}F&xdrv-~AXb#_wCD4U z%-JUTj)nYK^*Bu(r(80lBPouPTnB&qH74|wJc?-!UEh4{g#5#XAZLU7;Tn%}-kBst zDU>g-zGG-$2NKXs@BSRejNvSv+ZDP|tj_>UC&wwyG8twCGkPyhfIrlrtL40KFXgdO zCkoBXbFWS^;Z9r8q$<|X4l9LunH^OM%g9i7$AY>iu0Ze4y&lI{)wxCH#Q=Ug`K1pc zkS`jnu|fY+U3)6tgTWKX;v(p?mVFD7Pa!BD)fb*!Ry!B;0mOV4oCYV~B@c25-u@(P zsxbLLd7H>lB(I1AN>{*Hbc6=vgELc~gNQ#%#}EFYI9A!xUtd5gE790kcI<)bf1%90 zhzb@0Wn{3W5U=uVISV}i1jH&(Y_V0u6Ce30K+n-(Sq1|4+z?un`mdM8v?B5IRa+oV z#d8JMAKQDkp03q2$^9(Afuya1Un}B=&zjIwmEiPSkJxm;rc2wH&~?U6o(AwsT8*l+p&o z_qmGaC*{a9>6;Np$*_&g;Dpx^V@T81QTGKw{<*(D7)Rh#fqUU!qx<9jUTZ`kzf!2V z9F;FP;YsV&riFkf$I=k7yLeRmqiMkgGy+1f-31M<`*SZen1_NE<}pQBbqr2~;U1+b zDu?{&vT!m%o(bGBpJ-W(&2q}+2_rFLPTheF&KA@c(Sf&&bpq|5uc6HQ6_I}DTIM-t zjKM-lx1w)floz}zRjGsDc160M9V-c@H|_Wl-*@{Mh4D+~2B{}D-;8>t zz+F%3OIYS}cw|jb_6_|xG4zedJ$YV8Xoezz-RfGx!x>nF=NYh4)k;(kK-A!X$S>#} z%frUX#-hN2Io7qd>~LmFO*p|?acG1EpeyzZt#6;XA5B(|t5^oJo$jgRx;OcKSKv@6 zUkOKz=tC7IPRIHjH^T1L1ubpspIDWDls9Lf9&>~YpL43gyMxi&J+7O>_|4;+2I)eg zk2G5?PrHemiF%_~cc>xG{wdg$17wKj@GAK!35X1@^}=sNJRyGu0(nPX>z^?uwTFdx z4S;HAG=!|p{roZiwLct99lB(vV#&^iCxRO;bN#MX$ceNr@V7U2D+Mc5k?n3mYI6F~ z0vaFyJv=cYXX?2TTVL(t5*CPLxoL1hCBHC32c>>{rP(3;o4p0EH>20b5taf|-H2ZZ z6&jlGujJgh2emk#9e#~Yoy+96^=GeR_|8OvPrphH4mFdFgV{b^azkSdE>6{v+Y&)k_*wJZOu=x*}ih;}S$6$S3Bnx9L|Eeep zo?&Wyfy#_wV9wwyBDOse(uw8uFE!5$U03z#7x4=77DVDZ#qV#I3W5Kr=m4(gwVB*x zb}xZ@JCPgC+Q;-_z3;a>Gd8}ZU2?_Tf!LX31)AX^1r)0pL$C4zuRjvW^S29B5c7o~q|>7A`@h*&DO`JF#NTJ&CAwRZ zf4`>+h9|jzFK;}vCb}AP92Rpsw4oGU=|$GXXYQ7ciNMz@W!9-E^%T1cq=X;5Q>%cZ zc#12-O~L`c^R?+Coo#K*qYT)?g}$03K0=?^?9aiT}5hj+rXa||EuZp6ZD11I3h z%5jL4U_Xj1t~7s@48}#81mpCVstwV1|Kjb;P8COY;z)03uwLKY!{^c`4WEg#Zzel( z`|++)csN(O8XWC85waBtXe+g){He}toYp;ldVX0b-tWRWC)-6c!^#xo@ye)8<%CoP z)dNdQ>%UvnR8%7UkWL`T7~jwk%qfEoWmii+8e2lNd_hMsQ9COWWdbnsPD98Uj8vo$ ztb)baWj+uA4Gxwtu`ai+hE(*jNEi>1c`*O=E`k#H09It>qX=g|)7{%d;AX-5N%y`v z&lAv;AeHr8@4PqTuR?cca^j|0>fDbdRoI2B2^vn)NZ|3XeGzgnc?8E@6hj+DV|$CR zSzmt7ccAFl^Ke27%+)RSytwW@@-hh*wNzc;SU~^7C{*gLH9mfDRpaxfkUv2nBcaPFAX;Z@2(51qO z+qzWoqN3OV`1&#wOfrdF7i(HwN{r$y_9j%gc6MRWtwI<_dFw58eik|>FV1{p_knS14KjbJ6=u z|1RV7-uF?xF4KyI`^IaM43CWKzpQ7BuQf`1{jpmbE%iZ<_>|DHkC zZB6A`s}{)I@Z|f1dHR5v5t5<8;@On8&yp3%cmfuhTapFx==_W41Q2FI^<>LZ2e>`2 zq)&e%$Dpr(FjzB^kNi7ZfLFy_O=Aeb`t7L|&QPz11{X7`-tecLWLtvOi(z>?%;>~r zR^;+O74@;(v{TGX_*G~X8M-Fn%vtUnO{!^;Ok2f(&#-n6bHY?H6p&cI!VU9*7qyB2@zp-8@ zK+*T8S+!k;pZfT`!NlY>Pn2gc+ndQ3HW_wqi(Jz z(prjk|LLHXB(yG1#|X;p2-$F^Gp~syFs|0Y$=qf${|>H4>|)DqN>Ev8=*ivrCXi|C z+#B5523u=^CfzFD9GClrOA;+FzKwaF+BN#Q4|Weyl*TlcidozIT1Zd)yG2VP+e8y@aCXt%c%FoXXIf%p*Zcg_NB2{sdC zOw*(Q)2i5DR&RUuWL}YsGW%MkB^m{=O}v9{#Ni%TYO7gBL9&X3_)q{;!k9R&&iP4b8@V{RQ9bqhOxFY0dyO&7&DJq|FQUk|c!AmZZWx4(l0$D`}ygrs5V9 zqO*ZlUC%wDJzs(g)MgE2q~|+jRpebvEa;R5EK*0^`>LOIbhq4dQPC?pym>1A;j9Q6mQqB0?Z9QJsfk&yk}wz`L-L&V#+_ECMM2u5@@9)+2$U z;va96>4cpL{#fck-W0=t=mGEAJ&t>_Eye;9(|=!vjZbE=Dz2O80er|qsU@1BFNxso z4Re2*@HQ5r>*9pKpk3qBKWu(!nn{*ppQ)sCrH|I_NeJN^6_Fr?T<4El51WAvV1}qx z?Z7Tk*Oldh6osc)@?-IvPM&veE}S9j4wZQ}{t?af!Tp&+XrE2My=%-Y!$1CpKAZw& zZg1a>A!kM%#jzRY?qu-An6Ummjkt-F(1GcJW+plk8V>;*@~^97)?@scNh5i#SDBye%O2Or!N$|^)lBTN4g5XcCwxoDEo}w3|H_x4EO@Y4 z&pvochk+hq9FG|>q4S*Bf1T&;{{N$o^fENRCUdI-Tx`6Q62Rl@uS3cg# zsI5KV5E$1!5PKMyO2LRx`V^$v&w~ll`8^vUD4T1K6$Yua%0&Q?Teih$(b3Gq)}G;w z;IO3%hssj0QP=N|TTTE;0$bFed^Ln>XgFVFw$fYG^nfiNGWJ9hCr zRj}@inUKiu1%$?03J_tQX$Nq`>Vpm*Q96C@BIZCKwJa6hYnk|vvws=@M!PnSRxw3F z)niuak28GiP-Sh5@t0rjrb%W`uYv(%kw0rnEhK4yj^m#Fm;QXQoSyx3ku9N5_@O;l z(Z)6{+`xm&<~^a5GU9lhA@AL7(8t=E8nIw3E;mRQ$~ z??q<8*2u&AFHPj{boj%K6IxZipiDv6D3aF4zRhvrS3v*dyak7Zt|0lf2}4V~(s-|CVSduKZG<*A79U6kPqAfo;qvlr+ymEA zXNgWESww)CFt%5xpB^N=6ZAE;zFl#+B8wPHGKC0dIrxwH;fGr$n;mPE?)#GEn4{3( z5Y75)F(nzI<4>egv8{x))OZe(4Gym{!q%~Bu?|dCqizk~Z?b(Emfn~>ndec{ zjo=QAXnq)SXdw-K0yM)n`Pnyy9x2bSc?RYO7tSz;KK=8{jH@5~l-`lL23bAI!M zR!x3Gfz0%Mxnz&LqVdDS)30XpE|hv5+#5;Sqiq|71&SMW0VL?!V1tacsDbh=_TgPn z^2q)@PMd1B>@+4`vK2}00oqOPUsifMAhHmAtIoE^7c0P~cv3~T*yN>eo{{JXYfGS& z%Gu%lBOGvGPr|pEft~(yM=A5j0#DO(*yi@qM7N6Wk3L4qU!CKbLnKA)fs|dbe;x*> zrkx>%EBU&GFvUqBp|50GwZba<8LA$=VfeWX+0$joK+DCN3`^or@|QRQx?Iea(s)MK#s?Vt;S zd#DF!Ajj%msa#v^DgLU}>3B$jn(CTGT~L%{S_q2!8Kw601urQN&eIeL^KtXm2|UR> zY_~~9K#|D2pSN$fhXC$eB&(QGf0k^``s~bmPZG|n&vMsV1#4ceA_Q8bWqE9k?&~sm zx!WuZKE~ht^;GXh;N2T>@ypw}+BY`F7v{G`Mtc@|MI@UN3(pq0YcSTr4A;u8d)5tD zuZh6VRqOVZ4`TwS#+mPM4yql_)nK4BsOHWF&2~BoKRucrLzxcZw*CKz%go70k_P0e z_Ll1ADgiq;xrkO-gyscY?ccD6$uRdOAAjP5*3Dp#GnIV7ls=kg+po1J5rH!b$x3_| z#1<6PdfdFpK$Sa0L}yn<0y%h<<>wZ9^l+$~PO7g@2S{0|o_=&Ljm% zE4R`EWlw2jS8D541PQCtmJ`i6LYJWRO_Z*P+VO5&QYExqth?A7iIl_CoFx&Q)D!fL6n{qjO!XvYw8RwWUhUo z$9c&RHYhV2T&Ze{jCwV3Q?wZ`tmk4a%w8|4^I|WpJka`S+VPtVR^-Mry+az43#;DE zy=5c@)X}Es_qv90qI+xeUd*4CUg}oE!{UaV)7A|lhDOy5djKx}aN{lZQ^zc2pKu6; zR*4kE*ua)4*Pc>FpN@@OI&6bJj}XRN6LN!@g+#v;;+9SSAp6$K)KNnc%}b*`7(^*7 z#3Oy7O0<23;uu6n6`RQUul4I*A`E>a#H5;0`{XV61U`~dRL8b)PZS|c%AuAIL90B% z3@|S}v$U$X;p{2NBzkn0RTi7Iy{+gQ&cVnV5271qpL{A^e|aP92x;DC*bxb@5`eI2 zBcWPM@8v;-tBfwf({I!8*L4LXfux~JK@b4X!HSpnh86z{=C(QdIB6w63PUg6ixu4s znc4MrWGYdIFqpd&f3i3HEX1Md%O~49sO~??|`%>VeTK{>Lb~>)mfPIs`eHcXPU7l%=!QZ&P&;CEBRpW9 zu&@9eP7=j5+5JE270d~-mK&UV(>kOSx3m?kgeJ%uMV_Z6< z-E-YB32r$yXP}n<2R~@}M;~evH}LgOxkVlxN8h1E$NG(UuH65YoPRo%q)@i1B3h{Z zH!OxAY}$HHpnmf@jAhj^2gExt63D|>p5$B7lM=$<<0)Ek;GRKjhj2=Es)ig@Wouq2^Fq#G z%V6;`zQ7WQa@QF2vY#A4-!q86iPt6o-_E=;9HdgbGRrvjD*;0ekHC$0HO11W&9=gM zUT=Oy1U3bSpGlSysyuc0WgkA=qQxug-;p$)es6^)YjQE#NuFBL2zqtRAD(0=kRK!+@_D{i{-uwSu3-C_FKpiA$D5n zm%~en7+8umZE%wpOadDKYH@6(B&`o zCxd3!ZPEt{G=$bd@Wfl!UUrMobFIM!_>5K4sN|4}e zTusGC5{@N^9(CM>#)VXlUC+?q{@0P^yCH#O-QrQC>CYg?%yS1)HbI=YkSk2TFNaUE z9I#V!ft{98DNExVLawz2u!2TnUH!SebXt+D7h-#Gz>L+4w2i#bbFTIqsU@}_`fxf} z?*|Ov1>iH?aP5F0EqN$Pb7q6cJ~CfsQ7LX!Ap}hVO7!| z4fosEWQ!`KbK*W*m$}*%|K3ALjIEGD|LAyC=#3}kxbPBh!t($#3^l+$QO%+hNVo~P zu$S7%GEod{6f)A>OYUIB_hP|ub@A!_3sW=~(19heYCeS)q~OS)p(C6+So8I0A_dz$ zV*Wpf9hJlekljoLlEHD?0|7$uR(AX~CIG=Hc2@cu<3Vdp5$+pzl@GdxGs;H@mmJtA z&mo!7EoLU5CB`X&GObdwK>>O`yqs7Tt!!np{492~EFWgJEkHA`fe0a*}Az zXka+$g+2xcuWLt}7&+A`j-`dRh1wC?1KfkRXg)Q<^FY zqm<8A8)Quqd|M7`nWOruNoAVe_g)$mKzYNjakDLpLPdS?L^CgTR~VAXF|tGtCgx-v zhl0A`JXt9Om0V8Dw!F-{IT97owWzc^%7qpC%V2p{Cw~HH_bW#7V5U+h8Q&3V=fU_@ z8LLx3wzu;{f4f7$6*j5caUs7@nQ9VEX5oW1C%;^-z&GzSJT&%1v>^_g@wZ>Cph8Ge z9f3hLPWNz-Wb&uFXGx{XTP ZAi#N2}u)L`pvA9vf4gBIqqNFc_P4a_js6NE{14K zWdqj{gIl-h_Jm!ZFEJ1QlLP)E7YWF98!dVg&-2#7;CJ>(HR_J~F3e!%5C6y_Jw##O zulU>L$i4Jvq#;|Sf)a}X6qzcNhqE!?p<&?&g1s_Mcmv5V{b$oup%!j{C!-a4U3R6p zcPqX)e-d4gQ}(O9-d#4;0kQ4#^1K;Xs_e`cK$aUxZ)1;!+)}ddY9oEdFtVd+hYjkNqe(yA4 zK5HI@Jy%I?`aD?8%F>#W2x|xBeG*F7iM*k8Ss05(|2^#uZb`EpiG7}RaVR_@KZk92 zacKoFj^^gwT}SnWSs~8f?iD3f$S`H;Ln4J-maArZ;KiS~)sX7LLKEnx=A4<6b(y$1 zY6%WX>-=H5{+B>8N17Hj1fY@7F)0yV_p?lQ+4Ksz*`LKFLF3*U;H8X`L+9vWak zTZG0TSgijqL*F9{e%8=qoKbqvtnUYXJ>QKV20Y)O$VXb%RcH-CffFzV>^u>shcXYl zRBOpdn@0Q5-MT%ZsBkinC63tO?&Z(}kZw4a6o#BNiiHy3jz_C%Lmn*dRQD1@Lh3-z zD?iEy#kGT|4-fLp+0NhuB>+4i{gcDTZI0VO` z^vu=80yt2DKfx@A3V%EQ~D*addH! zWGypXRwN~@DlIf^qgU~wjvagwx05E6)0(eQd#Io) zxx1sX(Lnfb^`H|OnDA~XXk&Vn4WwTkB-XL@A`qXk^4#-Cr0sqt-a3Z7EQ3NaRC5fo z9d#6F3H9C&+S71LMNb-ZxK=|WD)XIry%ug?@-+PI(3k=mJ8kSy5_#n_K5eIbw*1wVVtM3;C zKH1hsyU`X2lAe~&1_%dqJU4LLKqHqF{&To0AwC3ZM3W`wW+P0|@r_Nq`ULS$<(3l~w2dw@9%BgjM; zlnZU5yE<`+IIn||b-l{~A&M7blqE{T$JdEvAvGmWsA%z6Tu@Y4gL8k4(WwD4*AQr@)6|LWdC^_S z%TZfISNvdJKK;muOb&htbmzRrO>A6C9EcnJy)7L(#}ZIce0k|W!#mFv3=c<`m@Og4 z_Y~mt>zFK>iv*W}gSV3To2>bz&D-g+K;|jE4jep_9fe@R;nvfe$xzclTn}|gmEki% zaDM1qqr1~0Ow-%BqLVELOb7njdc=u&m5cM6tuH~8r*Q`4)$51zb!hQV@fU?ay9Kg2 z%HrBSg(|ue`VCdnzNItRx$;r0-5PZR@;AIbbgIt8{2JJ}GzlWja`VOmwR5A9my*Lq*X@InEQtG zIfXu+1Z*|Szqnf@!<-27{>AjE^2Kw5r;bh+4JF=7vWW!VIn3ZBo9p^WVESf~x=a(w z#m(3GPh1-vS{sl)p0LiUIuL7r7bWh|^=8E&;`D_wJX^)zyu+kzDFBiEFkgsU`ZKP> zC|cQg6zrnEbJ>Mw^Z#zUf*4wG0gvUb?a;6JS#L}%(SNF9oXAp=rjDx9Q!V)`eb=}r zPOw%asRpOTd?ka?6HT~z7zlG%fEOx`_AZsYmgXYSbQx^=s?-9+au!rJ>FW^CvY#H} zqrUj{T9S~rPhk_U(@+ei3M%sq&u;?UmX4pYwUyb5bg^8ej$op%(!`KWeF*vPZ+_YU zE@0VuG2`(LM?2s^J8|&54MXlh639>fQk;090E6`wy!q&lEMRaGkb;7^cjUNJ>#;+k z4g)MJ^hSw0L>!Cx^O&u2@nOfN|A3BzaTHhVf zIBc`!Bph;$GmxlEb40i+QZX}&*m#)4`^^`wjqJq2YnGEIBXEJ zcP8u6(8d*y#sh$C0(F?dh1!ZYa=OR$D@?ZaK8`wt65eW6cRNsw!V75mS+}@rCk+OJ zMJbzy$$PZ|Xb;W|A1cu*N2OV3?ls*ZG1Ny$`5J4|5_WVBGV30DCfr_xh#io~{sQkD zTkY^IejD12ug=0v9NGLR0QAH(`du1jnaPzO6L|W`5pJ<`KYuyEYD)wEUyplCL=mMo z4H{%Z<9`-+x3#$kcXx~K=MN+(D^a2JqgWN#6f zHCzU!Uw>|9@zLKaI4Be-}(HO zFJoi0tx^iMRI%>N1YTRVD0UCDzpvbFV31D1NKDXTcK_j+BBtmNpSZ6OT~hj%cc;>R zkx6Jq4EY+3CXO%RT!niWL`F2N*5AW4nKkdq^s}^IHFZo=qjz1d zQgTQw!0-55Dwk0vAVpI}nC(^;Er+>T1I`AAA7@T)I!^*e~#xl*WbL%x3q%8Ur zUeYAcCQA@9ddgy7>C7iAk%5(npG?n|;KQI5Yz22_GH6< zjYnVr&s_LfUV#a<>XBffLveiDO!Mbb`HXX41!Y;UN$Xof3OJsg)=eAVph4y2AKZ3ntSFIH%?F)mkJrUo+I^#L5)dLYjODDgR2)T&gRL zQ=i3JqSm>GVtegr`9YpOW!Ja1f4&?V7(>EF%z&Nk$U8*lT@e5Zd|P9HpimUWS6GN{ zH}-Y?)vN+hM;lvGAzM8OJD#C;^PyQp^^_8!#LrW8l)(e@L+I`cT@*HAIAF2PhMe;$e@@)l`Cj@qY&p%lw#Y#FG zTF%e9er-mFQy^9hjzzXJTgZa@&G}`Fr3U#C23XoMLA(MH9vutimN8+C) z@k=||#=Q{l8ZVrL&RWE!7WWkE3j)~htHxtXvtW3t5LhlZpt2N+KGbcbtr7%*Ufgyq z@0h1s%CX|U=v>y#g>Z>?qqH)?Q%!HnkEvl;;3_BhKN@)G@AcS2MVU~0To&QjA9DT1 zGyGF1nC7FOTukrzowPFPu9dL0me^2b4QMRFsyecX%7ut>n?VW#p!F>q;w&lGwj9Oo z&A+A_PqRwaJ4Ong<%rfIh1KBq>~Ol6wxyR zd>F#xgs6v#rNnk~Brrs_v)#CC-kojrNy;3vw7C_sa1`9hgh%jQ#e%>cv#Ag%J(So% z78Q?;(~Mv9^Fco3oGN{GpySR0IVF>cbYRAR(!0_2V*!9G;E0qTgPDRUBp{gy-Toiv z0TB4x`_H@@;@q<*7S&ty*3z?zuIBx+eGGC-f3$?VQs~NJxgztkbn=&d8-0t(Km@@( zV{9z?oBYc9voB>&p0n&HOu%K3x>ClQ-as&90(=}dEFQaL%z4ix>nV<(4e1rNIkR0y zRU|d)09=FcbYR+BpxOz|VxDR(1%6&TsHF_DXj@=xf38{I$&VO^EsW-k`Yzct>0>N` zKwla|06|vdGhBT`(^cQKVC>_LJIl9U6A3!QL7gS0BiFMhY13Ay8>x)cigd#%9f;b1&g|fe<*S2wMn>CmZt{U~XM#v4iwV z(W8UCpqB@!h<_Drrp^jDoOMr}gncP%mn~drkqZxbbtz2a_rgg$Hzvo19Iln1EuI*q`^QFfDY?q-*3k>CA4-awW26fL^c;z30Zs#7YiwL<5INh?&_`Mm(2~`cXZIGG z#7F2n5SZcQ>wgfMf=+taFL#L*EwNq3pFUAN*~nBOCw05>OCsX=JMB8$t*oQ%Xin1| zX^K9Lnu3kUNae^*mcK>XtR@8*TSCH85J6U5N~JC*5q7kDvDp;JoV7)o>TC7V_)lUk zP8$}HNQ$`osq~5`{>}WDP)u^!z~32oAqT!N#(HtcN3B;T^d2Bc0`z3^Q4<4?OU=X9 z`vkmTrFLp#l5?m9X+jyv37vr42#u#oXnmhck#(|fi60Y0Pb{##H5h4Vt*s&J3xBX1 zjXz_tCbajyLXkto^ExKUw|)4DszA#ld7)$lsdS6LH~N_d8tOR@7ELpwwtVDG==CEy z4O+oXez~f2Th`g&_cWoVfBN9n5LAqIT?n?eIsiw7bmC+P>wzLy7q#E}f2Z(Zko%7l`zh%P7=Y$zz9x=mqS~P57oVYov)nEYg>}cj8T^ zM)`RO+;dU2&Mf#O+=-==GB(nend0BnX2(w zeNU-K>si1u`u$4NeYF@+@v2K1+y_bH-CWZ#Icr>}DnpwN6V+rObe~g0mZs}vZq-wy zhbn_f8nt*QTJxG$<0E!MH@Oe#Z@i5LHi4P4q^b75M)8WRXFl_ZjjXky-((CBKXbV- z<2RxjL^3lWRF)|m?UwlRuc40tYszz}BZSveomdqxkEhB;lMSXlmT9&$a@*dp%Ip8; zi`0lGj~W%!ae+8jGZHJ?VYnFJT~KL-S!`k_ntj+=Sc8>9@H&s(&Y*sz%Jni;FV46- zbra1-6vh>LdRk#{tVKVnBx6>IBF1^Mj2VC%wYB=bPuR|D#X?aGnYDJf8qhym7ujO! z#K}>y0k4+a-d1QrNQqa`n+@{z`rje!#w{+z&GlF_&m!*qyvcqgAdDVYqc)h4FS(Sy z`RohEV*derf)oz*KL>!$D)YpKuC{d#l5WP&UEoQ7XY0Cy2_I=!HF;}?85?&kIZt>+ zLf#8PqLx;nv_PtN0gwmfd#P6R2 zt%gL(d*dPOyQ_DNXEUM2k)N6K@`H?NzwYJ~%TCqB2*X5)Ug=NQ!%fSg7h`<&Xr0l%gl?7{4%g1pF>vD%J3F1VDzMA0)h%&$;mYc`#V(pn zaQwKP2*%!m;Be5_ctl@ndQ%^14p+hUGyTf(N9>Np+k_osZTlv6?CyK+3^E(}&~! z6mqv^FBArSA7`ICQmN$BqA6bSm^bd5wj96XM&|oUF+|Smb{CqSA6TJui1t)LWzi=BRZSgoOMN(Zy>1VgO@T}4+eqP8XD6zY7q5=Nk z6R!$Fj_hMf=Goql?)p5wBE?oi?xlFJ>0Skw+AuZIx8W~JBXij-L@lA-n%Ii|=YKM7 zFp8>arc=+$e~o&0>c9Fi3eA0ZrpKX4{0juQnx%}doKUIStb?iRJukRm@ydL4KBgGZ zC}&05AQ=UzBuoE0-p3YhW0LOcttt=`4fzjW*I{+~8c)b9ib&!ZEECU?o{K@}gIOV; zAI&gBr82sq&0N>t#C#{&NdnS#FtbAi#?t5r+-MN%OWFAQ4BI?lB+{ zlo>is$>|4-u5kF2gO|2?KJZUt@T%G}a?X640Dy!a?}K*!f6r?|KN}A;yr=)cjJxj` z)et#N0s|M0$lwWt)*Eqwf)og2`f9z@fpm|xU2OYFDv?*Fo9c#>Y_bSm@UVw~Mu{V z%@19QLxdjGKd}EF(%vyhwy53KEZeqi@6s;2YL{)>wr$(CZQHhO8(rr+eQzVWqi;n2 zS-B!3=D(SdbB=e6XOubq48j0wxQ1#0lpp}qrVIUmH{l)?gFh+XsTI`~kdII+kKmeJ z)meCedAxCpzkLyWGFPp@i*$JElpHC1~iM+sX(aAu-=_vbtjvES(z0`22d|pR`-mLn4S+ZjDp73JD5d zyI$inx~!#!9IO{@z-5g8Qz)NKvMQ+itJyKunD*5T6^(r}iUl0mEKY_Gl7%uAR~Y5i(g^7} zU@lYyD)lGc1n6ko@A#3uC>B+Ht~qMA7n_rCAnA>X*+9VyJ;KMO$2kF~f~ zA*!%jq*M@`(D}u5y|GZT@GvZh-{>gtgq?fm9s8F1t0nUH4b6Whrr^ghwM)(0Qp z{6S{z%4b#jG1|FwZhyf9$mSbqQ>%iL%hK5EA`@l^p?bW~Wk!4BA?Ps`o)#zW@2MIB zqoqh+Dw`cFILiy9;oJtTQNj>^4|_@5N*1BG-D#nxjnmeNIjLG!Fe$Wr<{Au98sP1J zg&3*AC+-HWAP^SiPUwerC3?kCuZES8N*&WOy zjL)fM*K>8joVAFoeN@?CrZuv2>U>!z5}tw`5F(*1dA_AWWx=UIri~bwBN7|D`VH&K zQx&_oq79hl_6om)yz0P8z*>8$wa-l;g2C6ka}Rg#>sC6KN6M4MC>7gWk&!zB|U88XNkJIh^IMXPjiF`e{p&}2q`Edm0c5_RJ zM#lQ&-Fftu8&ldiA8)Qlj-xJVYh!$nUf3^Ka>Fve0#kqqpXf?45gk$CG8+u3r_8ml ze?vx)sR2XBV#UXL*KWu${j)+L?3@QQ+c@`~fieSU%o$TCr2ykeJ0{Rhvo!P3-%0p2 zttw!F$k11{+n_u~>9F|a2}DAR*5}^0!|{p-%|$<+hg|eUXy{-am_OQYja3HgE2)Q5 znY21<@JsRsX<6Ai)5mvV%j0BuLJzIszTtQgq|&+PbaFT|q9?X|qHP?Iv|;g{H_lrD zF*zYj`$BQib$Q*Sa2-G5g;#dVRR;7plSlJL9MobQd`h06{`M@D|(YlB)DR0P?t2x12q* zX#ZE}iv^t~yodxh&a>wnKJQUB*N6a z|7;90Nn+4)|C7K|NrZHk|D$>8urfB}D<7{BMNFKm-ViBJ@L3$xmWdLAMDpRsRb`JfU3hvW-&`n8S97<`;MRHtWAq$Dn|4BXp z4vsPh56Gk7J$nLfVy^an=WBNv0O4hvCS)4000PTp5ST!6qiNAVpQu$zWvF*h}FpT#y2Pi0?_0xGq6^uYm)|o|$fx$Adxdq5=^DiD-EUJ57oH7^WdbLusPhiUgzQE;(D@XTMS}z5EBa+x!3n zjQj3PqbFDOsT?XL;Drkmc>M{(%JV82gP50Yj_u7%ZMSlux2b!ew-vfH1g5O>HkJikLZ#x^^RP_8#23M!@w z|2zduj!9k~4vfXj0@R)@}wWM{xS7WW@_nYMZwLs}|><~sqmy!SjrHEK@p(^w% z-Zfh_&Wjgi+U;GbM6I&l{~G1Cm+Qi7(-jPMDFhO?4NKaSaVU<1W*Y$!a-Sa;NFNWq zp=&0LnNf`4k*EtA5_HzBqP54>^eh}1{JvA(+_mz>r>^1fISTgVlEz27&d8{kkU9}7 zK0~b}tBWN~$q>-$Rm$~(4|kfnK3F}-s8d~z*o1{83u3i^V=jIHf6y?4KV^#k8z_%L_hDhL?#BhN{kz~i;BT4i0rE5FL{!m{@a z`c*i$cBx^HeQCbq=&q6aT$^LclG1f|YXA1zQv<{Ofs=3e*LAyJW+6&rG7?DHg&Y3`*@b=}JqI+;wcJJirX3`xrKHO9^GfNtOx-aJOJaP7g@ekRUjd2BWzeAeQ$Al~BpZc$rW2f3dF^k09*6 z8ThFk$d!P3Yh*W2EnDaD_F5>=B484xun3Pp7Wy;S_)_^izmI}RrJHr15!-HX>8ok; zDI~}%@=_PomQ@hQ>um%reP4ts!u1?$VD5`rT|%8c+biqi1On9Rt(UI65$UnYZjYM_y!9$Mrt|*e)$E@(I@x^(5ol|CU6BOr^*|RGPd8c7XNh zWbbQAS?5ac;!U1JQB3!MYK`QOM1}>YZ#snGLMi`>Kt={T`}?ms8qFcOvkfd~-56M- z3}L??V(<*8bG~~VUFoLG1`2`e*Lh;c2^yb-FKQnv8;it3wygnN+e<8WC{XEwJ%hqq zvNSnq4bafZysGHx^8Os`w5ZeS(Ll)101OTHI^&m#0*%OqgvStkx2F>){$NC!j`KM7 zfO)M9Je`L;^&-paM&>m3k(4H_v6-XaAt|6bg9wO>Uu48i6l83AEzHg9@rW2M&+o)J zp4ypnt&9-u9DMcOr-YI~qTHDF3v_yrM@s5@CCdGm1hbX9y>)5JWrAW*j8ri>+We{o zdJI@60n!5=6f>js@BOOeL6GJY_l0{GCi-M;wbcR$P;I(&&N5nCz3)im?E?3wC4lC- zSNcp7_Sv1x4yGwIvNh_ZNg2FPUZ+5@Zp#^Y)64fpo+b&%`B2#E{dwLYiKT2G09UFP z@~*lBip3 z-Gb{gunizvGC7trpu~C$u2v=}D@{MSHh2zqP9jt&xDwxxa6n)CeOt|o6-AaTxvSuPJ+@uyu`7Tb0N ziR^x9Pn%04`$X1%ZEN$-r(c8z55jUKAkwW z2n0s@FwewX*BAR_WwFe7ckUN%>L;?`Pbs$bmA7L!n``2Vb?*7@~q7#Vag z4e{+>jYh2@is7-KZ~8Z0AK72K4~^H&)JOEE$!=719WH!>2B$uqdnR{=)s2Fw61f*K~qD{QWrxbu(;C7M1|q z20g32FFhn|fEHMsxYJ64gN=Qs&Ad?uw?YZKl;r0|q9LFufr`&_DuM2a3b}Z8@H`>9 zC>yAN_*O9RegB%(GSe!8U5ATSEPkaxnPXrnO19{c_L8X)^lM!)ae?q*nK1{q@|nTl zTh*3rBD1;ngo^ABmZ@YBBt%y0w6tO*9c1h zh%R<2mYdtoz+Z#3u($$=_vO4Y%8@@p8;+E6P=hZ)YmJ4&bmtSS-$A4g1h z*VQN9tqh51yr?E{XFux!RJ990l2O?+Rzz8%a5(9f-=6lS{)&u#F~t>j)2Vb^Bs z#_(FZI{u2YViN*u;uD)?6FucFo-R2jsDo=G5-LX@pC4-9e?n$Dhv^v6teWE6bg)rU zz>_IjBS!=^XUKvJ4u_KDuNRfjV2=}T%1ym`02H<&4qPJ4G~j17Ywy-;e;1Xz!YGSC z_L*!H!27o?e2)h4({6O+>2@jMDkx0jCA>k%q( zTmY^gE5fQN@@%?MCzvR3ojwFG#A9M0>{kIgvg}T(qt`HE64P%Soh66hmZcLvOuCxv^)Kp6-HvNfHcAdP|V^IjDACpE-`aRv5}+NBFjFzv-lu~WIH z=x03xBf;1u7F8lsOe*`L2ykk2wox(BZIv;_mG$-lA#_kja{ovhocyt07OS1YPzG`z zyjeF{bz^R+FornyrOB4E2?DvP`}Xk^jOisBqI2X-GAvHlvv4ejp{M){0uikkMBvEhylFkh5~dvMa>nu7 zf~4{X=-AdkjOL_x*}->5t=^5dyxjW7js7a%q8<3}BoC$R+DF1*`ES47;=T&S zp=0CzIffY*4J9UL`eKjUr_kOeF@FOUd>04aq#H5uXa3u;PN z`T0OP{zp>&&(F-fGGT<@JpVFSTC4ZUa2j~xb(l?3(lXnqTnB7}wJ1Z6S3F$MtQDyq zP~u7tKMi2fLA2{{-4}NEMeOhFXqwvi1DG$+x?9llmPr~>=BkjVxwS&{>Xf#5soc#n z$y&Bl52J7A|3+qCweXuNpr43vo6>T@M9JB&Ois4v8Y<5qwJc>3T!qA4NW7m}O&B># z&CpgI{Qyr(PySo)ma-qUNDe;oKnBnBIjkXO2U=Lma^smKrV-0eyv8tmd!Yt~>I zRyFEszOZIiht2#{dx|d$(6n(^Rzv={z-VOtB}c!!4%o~(S2me%?1k}$QB);Y8h~O` z)oS+Y)4S*!>s(ckkx0%Zf}Il`k}K8rLZrzI?2qjVhbbO)X4B9Y&4o9}UEQrN3yrE> zs$YUm8D1iq3|H|}x&oV7!vYdIM9p%r-k1dzf#D8G#rMfL$Uo8U&iP_@OArH%b5V)l z-G0{CH!9o8W=h8=mNy_;q~2NEYJlxGAef6hZBoogydo$a7lz}LIPrLN@YWV1!_lek zqVI%0JvMff1<#k}a4poDTgyOz<}{v@BT&Qh*h5SV$`$f3DF;piEOS&b97_W{E@kwX zivWuO+blKm23MOkqQVDTff#Tfx}r&{eBL%3n3Ns?itq5e}XRZd)a3&8d!gupCgrbc^+-BRZBwKy$Ol|(EQ_R$ zqd|8c|ItHF0%*)WH)Yz*$ep`CXPel?IAY|&5LGz==7pHIg!wu-aS#|r|b6+#$FGOWY>iY5$BA%WGb^Jqmr&mi>u<&{%( zgND=&V!*R9Vbs#|%aH9yUKxkGhasI#LpBQvWD%nbCzdi0B|a=Wz*M!xg`Q8FZ?WX2 z+9?jvku^RJW<_TL^LyVl(Pv3RIg@f=Jr8(v>+L(1H24>?r?tY^^8`!i)RmuZF5 z8hQi#^=b&n;x4W6_@%aov%!M1Qh#`^C~K;5a~dj_=v`-$0@Qf(-xyyXQXWP~KyAs> zHoM3(dNFiRX(3OljPUL}_ocA3hbghT0FrmB_OKmE&SMp<} z2alW8C3(1$7%aEw*?`3Z2l=*Udjefq6AFfX&vrDX#2|L(lrN$bYjesPEck{^nzNgE z#r+cXWi1+X+K{)-qiK#A|GQVPP^-qSKjEz-5BIL1oZm|duSE<-ayEoMq6-)twkpL0 zAd=a&tcx--h47^*Tp8U(cAn29W<_`FctjEYauboW(wQN4>&b`3DJ`=H-H+;H6=Nm( zwdmQxZxLS+@7e!93)odzC13J|RCMVu=r zW{b|wPKol;=|@y6Q*eLmcZX{$YOjx^RPnFWG$G#q< z!)jX~++D23ZvB0HNE?nV{&K{&^`=gvaKlD6ikexN?*fIEw2W|qzl@uP`eXYY9kGRO z^JEM#x8f<(Q`iG@aBWwD`Q*?uU6p?U%uCAjesmKyo;gBC9K1zk;G+hY2{UIy|Af9B z;%OypB3)`!r2;O5s;JyldptH*Ln3&g7+=(V{#YOi8MjdZlV)>k4o&h>;^EW}jth5G zak|bgR9M4a6}(3VqP)I(aV+aoIV3|ex5HSiS~)C0T}DRGDKPy#Bq+CmHDlZ|ZE7$@ z$AckU#c&sLS6yyV5uo`^&ESC_5J#?#EHyrysp50*H*{o|cA3d4VMDpbQ3s=yFMdc( zJ%duT1FI+MI4#FQ!^42Q5*DS(TL>ZHK8DhhWeCbpWJiO;r(8qGVm&xQ9Z$kt+kefFJc+;IhqM;G02LB8OTmH;4t^axGotSaH@y~WkJ7+q$%;U>)W0BF&- z@O%IO#-Ws)p0VI6#ZaOyG_{hZ@MZNs#hpy~wk7@o#dvW)Xkpb2^B0?G#Lz73BzguS zouea=r{`YT=(#=@Dq8pLo(rhDq$_9Qm?Q@i2Y_!2D^!H14yND!vp{!~xzY=_Oa}Q7qwq1B zI#wc5T)Vg<;P>y~Xe&9i`4Il!r_FUQN(iXQ*W0IBDciPv7lp&8lsK4jxWpj5n%J`7!zP6E2YY3ik>+feRwPLi$2HqORSTm@^=$d2r_J{_q;7L}RqX8e9k^y8vWZkc*$+vYqKP>@T+7h4f2Z z3zWfT3t*ct1Bm{wL-BP#L^4wW6rh;BZNpg@HY1x_&Ld4N4U3QL#1Ob`jQThWS(UH< zT#bo_Lss*B0qY>q3L&hDOY<{h*B6bNz#xX0$^lV+3CGiHn#Kvjwe%kTqAcHbut0pg z94RaJz0_|RMP(W;L@^sq1_~w`_$QfB!(_MV0(+=!#04lRwrP@FnyGm<#j9+?ZNdP0 zLuF&zGh(4xFd)q4?t9lwau5k5+@(>EQ2TGfFlimnIK`ReyVCVyU}e2@;wdN=X9^~p zLm`rsd*n6b>B^Po{ara`_07&g}D9n@b5j#?CBS`8$+!D@YU z$@iG`IsCuUx;a=)u&fO!YbhXz5o#m#S`y5Y+q}I&{{x0N1hdEU#id+(GBe~GrK98K z@|b&N#WD-~VADg%?=S-wU73eBoF?TDaRNXsZlGID&DdWEB}#(B6v6+fK?s34G_Q1k>RZ7qcw$C=KV86lZvqe(RoRIIOZ^O+_VT(i-hu-6Dn8UAql}rD6!e>GCkOV;D6pwr(Rx;hHr0LJht<;+$o`U#fLbzI($gwlaVL3w& zfZSBPHgB@ZX%3nNln`T}l#)s9NU<$fruQ#3r%TBC5t%aO} zHB@gJRBXesv+3SnJ3MKU8&tUSS=|I^%9PX1}(UMLcPJe zrf|DfBs}TJFx@DmcZg0m<6Q2JxS@}P|MkE2E(FbbTrt})Jxp0^(Jb`|lC87EGHXX2 zg9ukUKa3#{3ih?v!IU0ZBe+car+mjKJEY z%L8|~J^uM_!I#X7x_4|z$Fy_Bg+%FEgOa#W;LaQ4hpdvjO97T$Sou8=!eRy4;^>|R zUg^ajRh%g*zY>srUj;Nw9u#&scPGM?n?T!6R>Yi0uRLQfKEf^Rysp9Y1Y$MDw0U^& z54v{kZ6%$J1ru4)ZL%e!R6vty*_$t{8#=BHXdTaghsg$Qq->;}w3StczRtQ;^Zjs+ zEl-vyYR#%L)3K-5mR__KEa)F zOvBXP(_)`Fgt-m2C6BUk2L(-3kjd zc=De1fHgvRgji^Vp|_5900Xkd9RE>%xIs!xlEAUEoE&^bx2YlyDndE|obnqYqjRPG zXv-Yu5ByG7S4B=h+Z{G^#JCQiv7P|y)=za2M%@HR|8f*LQv-wQSPH{OxY(tErt`<= z8jx{X0h1|iFyr&lZ9U8=h`Z7tn>to2gJBsph0g()JlO?hbzpx}!kKk5KyCIKP?BS$ zO^UN%>Eivq66MaIjJL^&_h-Er%7_|ltXJutY2tX{EyT}!X-CSR>H2ZW_i1PWwbbuu z7bRYA*-DW-f=Iv&DBF<3T=!X>5)N)t4K^Wi*)WcQy+Al@k*-5hSa+>7lncO(IBfcP z7<>^Xt_s=?!bG?yI27!1Ifw$mkhMnlbxK2aVVPWXk9 zIo`W7CvmQ7kGD+1$C@8Hfi2KI^! zRtl(5zvaR)iAU@%a?ck64O_z0#onbC4SB2P*y+_)ptNqFA(K>#rsm2p?^L+orQPv1 zsO1Zi8JhsogOySQ?jO669>Yk$2F7L=ZC%^JUWBN`qC$G4hf~OAN)ME-OLP|??6nZ~~IY+FGazyV4IE7q#K!k)MCeeb;;9@{Iil#dEis+^4o{vV`qi~Eo@~w!x z{NH->VT&omN&ue#V-EaKduO^U#gb#(K)M9a8B=?X#yra;aZsN|M@Kl!FqRh2$RNYl zf>Ed`1#CpL%3=+GcvHcZ*DZE*9pd=XU;;k?RuvdJE$imxdyRD{+GxEmowl&l5?Xz@ zKwK7zj?f1va(m?Z=csU1+NMMu{xJZ!rVFy~5ISiqKLUos;i&)+NX+j(v$k@&>hV2v z2_G*zBYX8Pu!EoDPFcuOBQ;05HUz4oVe4jgnu;?bYpHwG6t|jd!OTiV_al8dhb%|N#k=tI9okAI9 zJhe^i%{zU0Jjzg@0i$qIdesDHzJI?rKzfvh+Ub4n2vcZ6iVTl1x0s*P`1YA`ukV`} zJ;lLr2R4e)I5C^Z0>mobjR#4WQJ}##C82mu+@pU0T~ zEWHkfpgC=71yLH|rjGf9PoNRyVhu2Fi8iO_tcF*FGNnVwZdTFP6VD(YE&^F??4Zp{ z4w{^&kU`m@2XkgZfy-k`XPK<3(cGym)S$RznJ#{IMMxw$o%=rF3#m?FH_Tbh2#iXg zRPaMjBD);9BE5t;jpMnI+%zx#^|7HJF5*8)SB3HIgutqiYBUs)vxq?}SN9N_StGLr zXZ2c<<{N}Gp0sxe*bo!viKCvLI2Prd)>7%b2$D*|r4Ct4SBYXB2pUcvxKJDdVp79< z^}zt!mrnzL`c1_%ZhXh8yHH@;(dpzW5{l8uLn?0#4r3-3T#==DcZ(u$cTyTKA+?u~ zCpE{I1K%Dit&3N7`_b;4*ZV)v!o}qIgyLOysBcq|5@^u&CCpOOlZ98ElO(#vW!D29K$jBBY@Gabe{C?qx%-DS2=@=b)D3x^Ad4;|+_|<)V_GEmhOriOmEV$mhnb$~QK3mEuqAKzS?N((sn;9wlK0%JPGNx&rk?H0ZL zE|iGYrm)fURdsO8eLT_mDwz~PH|2xNj4-5-oK>&hoG`(BQ@JmNY2EWoj1B6-HDd3* z8`Wkv1x}OErK^>NMl|87wuKRfF6L0{U**#-*3tJB@0pmqAq7}So7{U99yJ=IF!G+ zdH)<-&Wz#}gfXcZ4EvuwbVWz?VN@3N94|S&T`^i_O4NqjkR<872(3aWH&$;~#h?`d z_#rT05)5wBk*gJ9^db0-Bgwx*IHnLrA zr)Y1HuD}`)SJs9Rj9ld4AsBVdIB!FvrBVx*LzMAnw`e$bc_rYv8ua2GKCMm^oCF8OQq-Txu0~+^MlhNcN=!)Qv(1*@_d@YT*hKvQ-BnG$ArPx2%XQ&= zFbFbt!@Tv-n%hu5VgN9U{`VfSK|VcOljP;5K)9o=q)CTG=lFB6Hkx4NeHRKtrM*b|HuE!e+;ap9*`iOVDSS;NHu@<+SQ-CKylQ4OB<-`)WI7DvK0gc@Fw~$LRm-XeqfQQ8;?F2|qF~8{ zmsmhd#Ux&+OP+&-I{CIY$=Av68l2G5zb5uN0G4$d)hS(8;GWjNlHZgCcWhO$!TO8) z#iN3Z=5`8(gsDyJW%US?>Y0jb5XQ99RF;9vXeFp@0+D$DDr~v-pQjF$iU-5&NB2<)SK5JWOFB=F|Ne?3mZJcuDSL!6ox_lqQC>A>4 zNqB75;aV~j>G8)+Unu^mtPEQEwye8l_ZPO)HWEx6cD)AkLy~yxe!xhP+_R!@9!vcp zT$*s+3*!*m?-SR0s5|GU#kS?o-Qo;HXFL8zAvBAwQuRl7W|CRVdGq0u6x(=KVTtR( zJHEvg3CTvtS@dSa$cp5Eg&=*cuq`T~-f2|j=JxfIJ1~3D_Nxyu2?|^q|0_E0;i=y@ z=2Ux0V~O07cAZ4ytf@sj>utEGPT`;6g9B03s zePQ4I=k1>D1JodF?EhLW0nC{ph71M<6F}F~ND+MPFvFFcD!kI;g5kB>>`(}QiC6t0 zH2=&U>rJbK8>Ihyp;;T-%UIYko9G5!7iZY2m!NeL}u2`4HjbI6R!($DL`^$%^#{e{j@T@Hv3$2kN&jP%wX zF?LDCE)^nhNBEPk8|W>%YcX#Wj%?S8sM7gN^3yXwv%I2wZ`^e=5lz!%SgIWu?Iz3| z+nH1(*Vx2n0to^4zO`{L_T1EXH^p-~keG16z?`v4LB{;{SXFoenZTkp&LoT+xC*rz zk5fEnA(4yF&XRFG!xqUA-KSAl>ljoEj^2LRz6w)EzhHI zv}&I1Tb=KkU^rj2w?Z;T8&Gc49>fCtko9denv==6`m04q6_|4M5prChVH`y=h3?RG zz(85|=@dzz;5qFZiUnNBbpQYoIqF0bIhEE;f!P~`x`f@Ya-bdPE>}t+)lO_rHOuFQji3_4jADyn zU+e8U>hehmp4J!hLUS5VwuKJ`UH7wlqyFA;+Y3$V6e^+{AG#e(rZrW z+HD~;DY3vqa#}XCesbA$6#j8Ygn##yGyh}aK=y^`z4SYqC4!|sdJ`R*IC^;ed^7nW zd{Ma*S}$vgW5#dO=TZ#C3(^7y7rkd%r${k~3VbP%ZgQI?f%ud&DZ7D$IG5F3c1%NQ z2fI|3i}jA%a~{|?dy=#CO?y8H6o&ijNpoy7C|)&+SfzsX|Hi}_xly5X$f+D{i*u_{ z=ZxGHA7n4u4RWL?PC(V)*d#MF8niIqyvqc8g>hrq)LfRG2odVk$B4{pvA-X=T`A#7 zQ38pnIy+z_D6mSls%N&L2|liNlyeBakrY>l_->DSo(ti|h+`vepl&`PTIV$8Q@@lR zQ|eGR>eeU~9kU}VP#TQwy;4rZCT~ZE>8U@iwy*GcgCwUs$>h}-&Bqsj%bdn()|8yv zfRJ+x)7|jD_N{Q5S&-8p56)Q9P2PU1!@p@o!5eb=x19X0>wONgIQCig^$bQR!QV|v z#8&qN>!SEcI&!#mDZaDdU>$d!mL~9wD95;6xOVV7t%1CtwM&Tpk;WfVbLQpiMadc@ z_`^wtcfGvKnzzyN>w|b-1~`-X?}66&O^RZu;Dhx2Gs20~(Dajkv;OH`eVfg}<7FUr zE`Ljx<#gR3z!}cq_Hk!>9$7~# zMlHZc1uVbQ&{qd!PV0&NK&sp%Fq{`cDMci}K`r~w6r?QEZ_nrbb$&P5pRG6>7n^hy zEM5N49gyqHf&e?XX{?kxCM0qEqkU9=IkZ0voH}G3zuv$mk2DqG3@104%*L&9Pk%$y zE4SpUng=i|IMq-n*VTe87LLGKTnWO`@TQB(g<)n$q4xOl62?e^M8fmNt+G>Sn%)aAySc&~kThr(ow6S#_Trg`rHCJ#G zXdM*v)6GP7p6-??_2|8CjHc^iEplR%&ij%0CktidL&G+y5`fQS8d8KqbvxA z`3l5~Xxy4`KIn>i=1o}WEH&o?rOOFbX>$V^lgRxsVO#I7KI`AlU$&E`DTlg9qDin* zpc%COqre*$6{Sv95v~!|`qW60HyM0&X&n7Vh2X?Mk1GoznF2tU!tb{)Ea5hM?qCqyW4yv6S1_4T7K4rp@yy@V5= zEBE2#jzpe4=m}>AbRW-dI7{8##J61k%1Cds+b&!{O2?6aJmgZ zt4wJ0-ETCk>oa8SUwKWAJMGmbBeF`&Wh=!iHcVd!l2A$|t?g>!eBEcqm0fmIDp^fD z7By(LsH7MaSVT@XXd9dtZqTx+2ITi4uEggY#b&o|;+(-KVN^(2oAeF_Qj&O?YH6gh zM)QkET-nLjW+_{M0Vv>^cKbCofd|L(J-A4%4>{WJ^M-0PrtD8MyLg%*$E%<%cv&@frYPew2D#Pd%`?z07KQ&-78FEQD7Off zdwmi5#K@Z_Ftsk_tjEG@#75`_B zx{e#qNtq~J0SwJHAKR;wB;Y65%fS$;7_T;M8Xbi%f4jcj`h&(I7doYfBU<3;t{Uqa zAyZaxI}^Y$(cAvSXQDxEB4;pNC!dI#0mV2M0bQHSC=0uaKg6l1%hx9Kv=>`={-l;L z3=r%rW;qo97t}*4j*7*z$T9Lmus&Rqi1gO00F}wxivA?dP&;QMk4yZG5pO#DJ~u7L zXbZI!#;HAf+`D#;ZE7Td#0{0~zcUBeK-6z~d&!#_u!dcxy2 z5)wylW@H=Q5L+S|SJK6gm-56NFj1%Ki%gKs%`aI9kHET%r?4-JXsX?>#onV3k2=!E8BlC2CdU9uliSkV?C#s#K54MEG6TUMZ}^AvDyg72B~%TO z+6iS{W7@LG5O(7qy6K|9P6#7sCT61^G{7d1=u;y)b47XQwd@^s|Tic918onlVxDOY4 zs*N!SIq2DE%+kbNVuQvb^70f99l50E-eBK-zPKJfu4Cs0DBjBQx+co2u*G#l*yB;z zrZ-TIvH470FD&+!`rSUtP3r6)8~>pfgb5da7aTN=EWAi7aQ~M@kf~$bjlIsuF=5zF z&ElK!7dEQFmqb;|QQXIOoBHt;i>VZmvyVm+LSf6{cV1WnZyquNA>&_0F{L=BDE&M}dHHkv4t(dh3bZ(=iZnKL$ zDFSN%i@8Z=1m~#n!4jxa#i_#GkJ|sOyLSi@C1|&H+qR9}?%r+Nwr$(CZQHhO+qP}{ z?(?1hoY^072X}O9P*qWp!#Cc_T)FaD>Hol&02&UG3Ez4h&7#i$&~B7*rqFB(^2RX# zqbI^nP1pkfW=$ys*pQFt>E(NIIdf2kF)Bdw8BX=@(aM*@3ZOQD^CA&%srUXYx4HTW zw+ag({xLi_w|{JQOTu-RpX)~YgKycY%Ue(E3KstsV061B-@VJMhN8Yrq9jO)iX7en zKmKWBC0WgGjX7%TnajQkB$U6PgPuv>5>@!?<-KmMNw4h#IS7}Nk;2`%Ji)MYF<59_ z7iIBD?2_m!!|v^kRbK>__HeZ~AO6$4^Utq3(kwty7y}sPUS6LAsmu#>_{ced6qNDkWbLE9z8e0yFAVQ!;rL>e)gL|EW5v@8n9te);6Kau%=5|ty#uptGn!W21 zfs3Hv5rvEiE9d9Lx6R0}{Oj4v>*CGSkVTw5BxfMAXX9Uz z{g)CgoTN$;j0jUCWYCjdR6COqBUX2!aJNNfPfH>Iiw&r@%jpQ7U;8~n9as(xPM&I! z$e{j_?YnK~f0GQKuyABN3`;Gf{_>poIt6c3^bB5zaM`n@|A7qjBM=5Fw|X!SR*s{d zeZS2Nr3Bu;gLTh_SoePT;7w7xwl*F#Y@DP z!5f!-diOg%x5JQ@@4nX=Hj~CkO6?GixeEOdAZEOBD_acxfVNnWg$E7!Iuw8>pE+X(y%14Nk~T*GtDInrOUe{VxUd9Rs>=)(7gx zWOz#!LceFNxvG~FWnH&vhKS*jeG*2RBPZoVjp_XO{zQkeltzS~!|vwbxfopM3z7$c zDFJ#4#9!Gt>JXV9O0#}93-NqNTRC37Xpr~LoUNSacr7C@j5gAj7UPvCL#m&^ySU-a zlvu6MyxS=T7UPahUsNa4+D@IizjSjSYBSOX_+BORpBFSnU_z4r1X6ZJ`y>v8ZA5~B z%{#j&Ixg>%MkZpICqsN>j5~%mfC~i6>`h|Qr03e z=K++bMZ3@ySYW*e6fX1rEfn<2GBRgQt~1xhzcZhm376@bMt$?7oJGSOTnjT(7toXfdmQ@RnVmX-{wdJS!i`GyzjFB004(T zk*U7=GX+!r0D;*iMY4DNs@0TtqfD=dRgMEvACY$KzeRN=0Qx2|tWwo3vLchSU1(C% z%l!lW*A?ln_6|}TsK{-(tci01;LSu#UnTUvrVRk$y)h);s}DQ!xpE-E|MpMzm(ou| z02z{B_PB5>dgLZFpA+-}%%}rfQaSq~d>}wnP+6lM{DFz?0lmfZ2yX{8BO> z@1^O^wjOCfjw32D7R(@wl?aMAu%(VTMi;pSoS>bqdqXV!%*NGUj1A5`tSanPxKv{! z*UupPmRiHo-J=C8MTT=e94($dFU|kc{{Ca4#D?~~Hh`yxE~Jir8Vb+Yi|y+;Pe}Hz zyvYaY?e^iZd-(Z$gu3u$tWvocC$6T6sV$CmqD`Xlc)(xeq;hSGzJXiIux7=Dm9QmO z#RyYxgu>pzTr;l!kv)bvgX+RkH>qG?B3@vTtuxMC9sY!2-|}4Xu)qiph>285q1|bz z`mXTd%8moBwBgRMh*bw7cUWCgf|cvb^|2rRRMEFxZHH-8LdD< z2_}fteD}RV{Hxjpm1V8u99*INR&Gq8+_#SzMqK9eCG9+s)N@F`&tY1Q0YvW^%Ii?X zGOTS8$09=q?TAyvkyuzPP3d&^XwV+7fUMEB%mu{wpMbZs5LN3D)kbpylkAjF&F_vHGu$%q13ap=e$Y2j^4p4o@{wQZ zuOY+SkN}e=1<R3HdtQ6Ypx>koHuc@rE(LnH z$y=%p|0dLvVd}QZ^~hUg0y93)XhuFMW!KGYRi|Bq)ZetJVMCYFX!#b-MFc9}foGOR zRQ_)|mboWvUu5+m`do&UK&(QH709vDa68soHK`V&frQyDT9VlM^cHj9&QMG+zS^w`8jBJ;tY~rXUosvjPby@z zYbLjT+KVt}>ACpTDA&WK0IfmbjxubKqU47drx41MMt=pkCZqzt`@w~=8(;8)9H3u6 zNtIcd{Alo~0bd&=O|Uj}9)$V3fiUILR;s5W5n5EC2Z<;k2cA~f1bS+?5B#D9ZI|Bj zjWMq8JG$vmG^rvcF>zLG|@sBhP~Usy7et&_L9bG1s7U4ntHV%tY+K-0@b0%{L!+F;Fd! z2aU}wkQ3)GXiKeL8tb3g-lZ&dXJ8yIh-g|-ya^ZKAlLmRAYlo`^KhTTch;mxu`^|N zxtxUr9?bK3X$cKj#rs{}#DvT*Tb6O*~lsaqc(5~|0; zaBLgC0-7sScUM80d{%TGakRP1uWVS8=!!G3wc~=bCr-aC3Pv+WE`#_xI8=i81n{MA zzF4R$tTl+1mv3Ojl~HOdA1rxx&-F}hu+VJF0QuU`QOBaDmS_(T-8xpVis_3`9FnHF zz|-cwaJ~(Xo=yS+rIVvJIJwzHVGYzu@lVKz8vZWR)5}YINWt~YclPAtqq$g-8&OG~ zR@j&8C-a)X$!%M-QmH+QJ@7o}ayd678Gm@qq0FcZ;41>bhc#VR!oN3mvUg*dL$N);VcoqWU7HX*%O>BzTi1{=mt^)muTcV zBUI&yNokee`ql-n4pGYa0XVmL$AlX1O89%_A)+Q1Ms7}I^?IRSlZf2S5O{Mb>#gFyg!?YBH{+9K*9(`Xf+=LzyYok5M8(0Q zcou#vI(1=#?u|#+UJ{I-*koQiw$kNBz(Ie5(T7m0tq=|+qM>@>ra6Nh zlzYaQBoJ+Tr&F4f$%{s*J`Q~@oLPn1}r{I*Y$<} zY%XOB{yNp$(dCY6;{<%C+oxYenRkEvW=RHTkmzL5;g4!sYfx&;20T>WkQon8cmV~w z@y(3E)0~q{fbYyCa}Z|w(_E4dj1;E`izygC5!Xis&I?xgO!ZRQy`|E81a7?nj~A`? zL;DdFs*P77v)27AD@Y&L7OVRb3O{(rJB$-LU8qOB9dREzzfp(@JE)` z{2q#9IK7huLPoQ}ef>;tZ@+KsWS8g99;0Bc3PWX9CL}3FLCwi&Q-Jbn^(w6iq3}Xc zFWs!tzp@>PI%>j_8edaTk4H-dFp#egU8Nj%$I+_SfL%Hh3FlO=jLgomX#!WBPam^0 zXv6P0CK^)xwMcp1;PYec$*^7V`05&?76 zJOVLY!aLO2S^MkFnG4>pw*-S?TP_|m#tC?S#H^8s{gr9HB@ODQTD0dIy>{%{)9^#U zC>k+%HNUZQ4gG7D$&}TV+M;1H${R5M`N9EU(24`rc~sT=2jc{Mu8;&*mm%0oQ5O_v2I#{{?@(Eh+Zti)d2ebKu(> zxN3&atmV&uYmsBKNGw_=8?x_R%E7hz{H7t}t=66id9aHzQIE&VZWe7(pSw9=vTYs+ z{3YMrRgWyhV2%p+V%VX|^#>@}B$%AFM9EVLgI4Iy3Wb{XwxBp*4zG5gYbLH7Z=;>i zMg3YIF9Pgk4cK&V&gOYgPJ3M8G9Uc#+0+-|6Wglz^H4?*OuvEq0;@EFKNp6xSwT4p z&!i-HzRHvFVE$t44g5Y8ieB0*ukvpj_8RI^g*n(HF#As2h54a6&9r+&9&&T#wrW%>!ogI; zmT3l~{`Y2tO0%*wDN5ILNU7ov{2whZP;~Q2vG1(%%qh;+L3hmfT&#a<)I;8+!75M= zhdG=UwXt8S(AKF9lF=#x?eJEWIJl22KJ+66sWWpy*NZA|7{co0==4!m&u5Hg*U&l} zYc^eGZ@9r<;C;b%4#sBf>nPZd=wsz2iA1n}4i&|eoAE_mZlFVMiji(`NM)_pq+xJy z5n`zuwCV1iA_kFx1{*U%x^cL8ZSadX^a#KI(ZT>g&>yc`008tGQ9SuXl0^Azz8T~L zn)wuzEm5ogYZREu{~1bJ^3Rf_7}7-jODjsm2LOJ-2A4w|sP@nhPD7wPwNk|@6H{0I z%>Gvy7f$hJ4Pc?;-YBvdO4}SpKD={Ti3ljkD8fS6uh;+P&|-hqbs;?$9xJF4)C|W3 zZEb_^yhd#6W<~CrH4;BNHSq|tH?HQF95rPU>JZd6fV8-l3%I9sd(=;FTg@(hGrs6_ z5Jw$3VR|1BA%_@oj+AiUlXL4Wkr5>jUVv(@E>0Ufqcid~BqlAN&X;PKv@~MY^%I*% z)@*LaXJGXC5=}+J0I8k7oT53yeREMfS%nX6H)u4b32^J6liavWMRT|qiN#S+d@eeI zF&mSb{!2u>3DX-1R6jW~*kt!fpcxB)bMdAKWvkhl3*xlPQVwmt>6z84aJF)Hw}g0& zb8gT5*?^a6?5laMePO$?hiB08v|Guf;?WGS!_6ir^ZeCsIg={;xV3gxVfz#lck5lI z>5`+c{8K~oVz8)U^^aTW(dnMZ^>JmMqB?a7Qo!4Gc2c`VBy$`L#7{0&H*&9O)XOVR zTzF*W#{#OpTGQAwu|*jB(_LY`BL=~j6qSR!4gWt;@Kbs-yONv$9Y*0~glB~an z0lvE=^hyHpswj{Y8Gts8V#%8ie<}{xuj^hdD}Al6v)WoXgez}D_9^&czp(!VYKDiT z;=6YC+(H9GKJQFweVw2rdB8mpG4=06Lm_Z?+tT~h{e4b^3--s&n}JhPQY`QmAh~oE z7P8Z_o52wrh#=m6D`(`D;SdL)LSY|xuGQ2@QPYr}yP@?=k@ls5rd2o=E5XKwsZseX z7(4ncA2a36fne>8HXNz^7`m?G(vI|YQgi0WsS(fpwX=hr{ApR8KOF;tpbQ#}rYe9K z{%b^BMMI+{!C#FksJ}M}6@&={z&C(pNrjVqQ_A@Z8{=E*)0U^#KtMvM;4PG%Q?Up_ z@0!q7D5WU1DO9V6ejc5-YZ!ZMrebR)@JxMBV{ZUie#-z;G7aiFk!>nVRE^SfqsD{+ z-ja)%G&TVhTx;Mim*H1yQM29#%88KP43+p?(0t+?p=bHqzHL8oPR8k6c(kWH2>Rq3 zzVEY57yKT5p^7*hiw6}BddNyK5;ENPBp90=HotI~+H=Xq zX3rz|GZ3H4Vu1(2R-4zuSA6ho&QtIWjJ4?}E(MXGP_emAB+xzEtma(p3ZAg>a!-ng z%}BnNi8kNzd^@8j63!&Z+k$L`gQteckGdXGkORBykViZ?ZuH8BN~kA9W?l-te|DCf z0PfmAe&FZXG8(XYheG2k9jZpSfDiv-Pu{!EscP|Rc~{1wE>YoQVfoBE{Q6amEMxnU z>Z+2@^2Pnx45k5*|hz+&UfD)`QLUROBh6C*L32PBreh!!Cyj2!`l7`@eLg(M+|2tulP<+PHD37 z>C8>7N7@`X8ZpoJW36w$c3i~=kU+wm8+38Cc;kmiYq`cKPA%S)uV$>Ro;Yyp!x-m5 z6^{(mJ?Q-IepX6gsFMD;QXLSyo;?T*lIy}svj-2Si-MP78p-A^5o~R`^IdPsLjI9XI zM+96AeYi5c^{;peTXp>DltoM5K9LDd8GFVndUWf7T;&mAN86@GF26|Y9yIEH^ZF;^ z6G=NAaT}6I~{1F;xk*#y`!glVSjU zg+!vr!ut932H8k?q99zCDQ+Sa($Y_0)PJwfvU zNy@<_^WGDWLYe#2@)Bw**rmD?f35ry!#K;gj(BWFkKvRSbkI9{^y_x01lm+7o>NQv z$UyGfoW_Fc)2~0eHwR`HN$)!X65YX)Lhs?Q$8HxCKib)8TA&^y^=$wFyKt>_h9YeS zyW8>O_(}~H7!SnCOmvrLS_Y4D)f96K^WPT$+7^CmzA0lSVeP42jpG(XKC}K{yasLkj z*JENP46k+rquAw!cG$RKi_>HyNqlO(HZJ~{70;>Vwd$7nGly+1GPnYb8Jxs;?E5^> zy;0_&!7fC`{mBk`w#b(FJry)&%nqbIvYdZc5e%XxfxOOPHB)XeJ75gbMq}?Rnvn#> z6hKvIuTHE>{$~;}g&*oTaT&XXWI$1`NV#Fh6sRUb8rj^T{RVU`_nlCp2+DmwZ&YLZXj9ckUM>Lq&LZZt z%bVSb>pP?aAXh3ifit+wb_cFrE;J{@Ftt8x0cSxnLO84%&zN9Ha5RjmGFA4Ta2H?$ zyCrK!bQ=UfvHmn8+tLF8`Bc84GUUJlHwG=Q!^m^cSP{6EtZ9kZwE$+dGITA7W^Gk` z*BK;c0N(gSY*C#S8}|9e>w`09wPlV?#RwJ8-zw4ka7qhFRJT<%TZ4kevQo!x7$K8$ z4}?J6Q_HbgiX4YYaRqIz363jGA1Gx&#GxkaO*W2PpM!ndH!(Rgi%&dIuT?0)9CRi5@A^-D;UoRNGap1XYD?G-`mS1(0QL8 zUSQOBBk+XYmRK*ZHk?mU%z6U}4mR?o8ufA|*gPTVY^EAOeG((tb z4DsIH3DA2%3ew1v3S)t23k=_#lE}yYzcp<>m!*HkNHpK{=>4B?mSlx%=DA;axN2qI z=_COy*@oh`8`C>n-Kk08eScOPPobgtM2@vlK_dLYJQ|z2uawGm)}=1}wx*nL`!gmS zJ$^;k@geAmL!hx6R#{}9!v$xt1^gtX+G(*kU@HbSAU!C?fW*i%ui|{aRtaD$nX>5B z&bosv64)@*h+aKjOm*^5Jh#4P6q9LQmx|%2&9T&+M?wkzA71)4C471_;j>n^>s4rj zbxA&#zkt1L*wc>lZiPdT!03oQ=^6j&bII-K`iE)_zxK+O<$GVWu0p7ffr{OIa?8i} z9KW$QV^KF5lOf+VmG#w2Nd)naSnoHHnWR`}{$?9-1RRv1)#N*f1muEy|7aPk@Y;#! zL1S(;o*y^zvs*dvg+*Pt;aA?YH>Z@7O;2?FH)A=8t0Y(ob4wE`}FB>M7LvDZ@_5Et;YJrm7Tk@%O3|fOtyr zg715F5Y%SjRY^bebaZ26m;Yjn_E}^?J=C3 zl2)R8zW?}Q}A=!<?x6SM^!k^mAiNt~8?Klx8hWl$Z z_Mw9&5(NJvN_(Y1ITL%RAm#GVBRnt6+_@+@<2AnZ9N)}pndg@?W%FGpc!0NBg9DI1 zGPpHw#^G2!Jli}6t9dq*fJh#$1M~jvaKOghbg~Q42GOn33bHL>$jf^q)hCgd9SQ6c z+Wd35?uSVi?xLdv-x{^biIEs1;QeRheL~6+G7R4(v2-Ngnu&Cz{(OQ51u#>gNDf#%em3m)sbLx-ZCPjB`lT;+1u@}v7d@i;f^2ukzH z{4L)KPP@JHbK*~*^eibv`QXw}G<$ksII?9wCco(vd8g*W8ItZWsTZSP;rz0>Lbcsc ze%kt}Cr?aox*;E6PH_yq6IY}kMK#jEF$G5#o$nJ>+P9L$_DF_w&YTuRoGg1<)@=~O zWl0_$*rO@?AB%lo_mLS3kh<@9SH5S7GkN=-$tYNnry81AfHE0G#NPi=X+8UqU_0oN z7tGnI_Q2ab8?H{eGJh#f|B^<{_ihmjA^_hbDgTc&JX?$#HgsLUXDT*}7vfaDjh77B^eU+b=*k$ZG8zyiLioGy+wrqpu zOX+4~+~+l2F)#~H>M}B1_{VEodY zdRkZ8*5lxvnPOe@1)n`z6a;{I>)t>fySz-^qRnZlBjg{lTXLMfNI7-2+h!;99wz{w z;1Moc&S~4u#U{7 z_^JRgl~)4*J%w(myAO#-_tsxg%ext8j@hWC2)o(n+EyRh670T2j)%2c)6%3gm8k&0 zm=6vPg^hW0PQr48(yyPJiPDD@Xu%P_!sM3HiAFbFX&DU&-dc3SE{+Sxm#RoKP+Tduam?&?=(WUrqZ z#n>&Vpr2Lq$!;7v$4vBJm(%0iQ{yXadLq4dc6}zOD5|`tVzwDUa>(F6nR>8en?q}9W&P+i=6W!3LxY2+iJ}2th1u;7HbwbNDe`xG({6lflEIQ z)0)^}-DGpiyVICwfF)1SS_-zF*19v#{$rRDW`g=*FQuh3E0jiHDDj>~5g-l!*nF#v zkcQu#7|8;o94H!G4a58<-WoH`;Rb@%*5bB-m7a^d2bPX-qAZ{Clr2W@lttk0L{})@ z(H6G{lBz3L)Xz}wp?t>D#e}^UN$D|CDb%sVpIbX8xXv8YKzACMR&gn?fRM8pEvC{N zM}<^Lnvt2{9rK*y2Vol6v?0>Th5&{F0I|+rOK?oK)ZRc6-B!;vg~ob{=h91VKt&AZ zBp#1M=}v*i$9f499lV_6Ih6E^)y|EW=|o}1nl(P?H+nBx_BptUNQ)i_8?6q93>Wng zmYP4TUYT#*wT)^KA$%hq!WR1xI|9UQ6v<2A!(M(IzaJU1pcBxY>e)OiXF;z~l zjsr{JJpalr-m)75G;1gHbsyuTxszJipL#Q{Be)T8@m?_QnbMOWpE6E;h%(0UoDh^ra)vtb*(AEaSepQDisXF*%r3X^ zdM!D;{NfvEFCvoq{t);NH-Dtx1*>r3S$(BGo^d1l%Z))^ei!_y?HDQ^ao@mBZ@)gs zU8^kk|2Gzq^rdQm6Q*QIeiqZ_!;HQyqU6qi z6FO+(`~Dz5Yt3dq)&9dP)}}_#eIFviRefFJpGoy(7Mt9?fZdaCa0Z&&=5QmD-=<0g zn{d7Rwc5OX2yL2Nax;wT|2DQtqdm{a*KrSq{z8?lj5?Z(+*Tk`6pv29q$op!ThE(Y zUGS>n$6VYh)hyV+2I3r%sm+dV-9@{pZDRKbD0M7j(l4F5NF*uF1stU4({R#8QL#sP z%Hee=n?A8a@XZ}eWCrqG@B%<7;_`&ci^L|!Ivubrcl!AAH}ofAEBs%ehzR%L(p5=g zdU~5#xFarcG=}kckejP&r${kmMcw(2+gAFn%_LfT5Oj~YMF7K7o$Z?pr?L6h?T7pg zkXQ7cGtV`}hopGEE!1>If{NLx11HS+3+zd4>?z>(pyatAN9XhWJagpbjLMw%tc+wSkk5Fwg7;IKJ{`r?ON6Q@e`Y z%=ea6&*`t2@(^7N_ z2Gy4I+X(j5GEbILIPdvCCoC_I93te=;h@G=D|QpK$&jTpezn9^lfLxkaq;kKOU1KO z&@(9M!rya%E69}4@v{&RGwR$H5Z%CjaL0$LJN;ok=bLv?7`|lR(hEg(9$$%HihL(RjxL2lH{>`L@lnqAl z1XdmYGAF;SLDwSiac*td^5lV#LvX?fSE=~n-&$F@J{Jix)g(3+`A$B1X|73?ExUz$ zh}piTF66;rmZ`tA;I!)x|MfL3OXx91Dqs>iPVF722{(xD!oc zaf+2-1r`I7?+X1MpJ~mViB^&{`lE?pZp|$wb=_Gsum+F>)xKO?4-V?;8~C=OTgp|r z5NC$!U2W{Si*6K)>w=|%9~>XSgYL_aA_)Hz_i{Cb{h$NU{Mm^TDSBG)&Fm6u7WdI{s$ZKKFo$q& z8891;nFIpJ$^LT#3H}wus?j%w?t*x|YQ)TYnjrWTDAFfgtdzI^qwMV57Dw_6# z=aH*7LgMlz5CbAQHDhm9TvYg}CXXYXIZXx6{!L)}QMZPUicsv7ME>sYyQhg#bWS#c z+Xkas7xMqzTl(*pF+=2{j$QGUe98vic2c}t1~p}5>tG;SuA>~wA|EB`@>14m4}CZD zoO=3=9j|~lcA1^?z_=@JIx%8U9s?!RWPlE`0{^#9|KnjOyY%qaN ze>Cfl1Wz`OG!-_<5xu)XFxg)&VW40BP{^2M<3XcqSTf#azKD`ej$jBm1g}Rna}>}) z1jP;oCiD$X%Z+4|${u4Ps|SdDr0sM0YkV$;%`vXsSn=miwnqe`f?>E8-$7CQ z!#wN-6}(+H|0IRWuW*! zLQ0I)A#(ZJ&byq?v1?|_mD!9>m=X9VjvDNxM@$reICQj*TQT5vP7t!6>LI7!V_g^MBdJa%}KV%lp*pxNu8i1}( zal<@5oRIL7L}JAJu%P57QOY2>bJ$Vthm~!Q-5=Y%rUmeFEJtU<+_NaR{A14ei#1Xp zvXE_fx4rl)EFan~FW~SqR$Hg9K+vUuD_4I&glJLM4d=YVCjnCGIQ-$Tz>yRrEpE#5 zysMb!BjvGdt*1i)%F!8wvzsjYR_)ie# zXoOq7RS24EHwW_1uvT9U47tvx57lT^L7bE~wO?(Ur1ZgWBOAyC&4ds>Y^5%-3%l@3 zW27icW@jpLK&acEo3whgP5c~ktJ7BWu{Dcs9@tlV7o25@$k^uc=JUY8eo$l(T~Oaf zUcd~O*RNA7xp+M)rdO2d5>JP%4#!D1?whqJz}>cQoWFPD&_?xUwOv zvLr8gm;H~KvkR`~8iPP_GHVg7KK4&5Ryl%k(FB)FZ4kRm0JvOy#MxaY4dX-vjJ1d+ zG%K1mTCFeMYQe8XE|!94Ft@5;^mC&2X=_i1&28*W>`3IPQ|&5PdC@MHdh0X-eOS_4 zo*f1L8?2{F6W#sABOmAI-z8|5*?yvl zSQ?cf9kmH`kLA5vN5(C+yT;PCDtO3Aq4y;~mlu#S<^w^W#Z!>}lSbOyuGv2F2V}lZ zk5ubdhvO#n_B_o?s2~{QyFAvF)HK~0%z;4AtVZ~D*#0&lVzMvNMeT8GIbKBY=)c5m z9?FaS>$sO=m1JlD6=vq|?wmTbjtdtbZMJG)=*=B^IG;>DP2rg-$6P4EV0@)2V+d;- zFYui-9h`SEV?Tt~5$`zG;^?Zt!NTQwnLYQbjLUicUG2Dp{*5j-&JG@;guD_$0kQrrvBhJ&C=)UMG)?0h6Fb6(AxsT2#+&`XKQ@}w{3J(K3?|`oG z`11^kf}|Q=7pTIep?B3!*Qb&$V;Pkda#H#L>I_tk*ygwNf{ldkdU$U^KQ2wm5pJeK z6ItDVLRF0^TT-!|wNA6L^J37qbMg5XdAax-%p?ibm7t3!Birh2i~`+yQWe$V4`Xso zyWFI@e*ij^X|u%&w@_x)Q8hmPpqBEUa?a|4qGAr>cZ`am-_c-f{I>eF5-y&urbK;+ zGIVN5> z3^;+9x@G?T(8V8s`&jP&#p@szVvfI9M_pAlEaEfuC|HWaS%2Dn}w?vnSUq*F71?EBI%7-3tlO+6e(E!+(wwM5)~; z1`l-}|Eom)&xPSCZ(Im2L`(m#qb=Ya5T#22x6p4Gb}SV=dH~A1mr^|j@KPbHm{V4o zRgDmr)6q`CSDE)Y_jc5L3EeLBOycL;p5OjJ<$#<_UeY;k*H#BBORw-(1lkvz4YQiZ zj??2f8!&Poo3%xo1_%0;6r`Xtfj}U<@&X}7IG)E!;Ubf=Kvo(+n{ah}2@FRfWv|Wc z0Mi}HQ`Jz0Au!RCFe(jz<+kc<{`J+?TcAW)Y<3xIX|Yc}uCH>$nm{K!d4jTAba*@I zYnvxet!vv>(y;#W90)o6IHl~&ovw}mBDc7!;cRDgGo zm!fp}e#xYqGB^HJ{30b}4&H?D$P*&cLr=2l+QV4%3i>~K~D z``)U4Ug#K`=UGFAT*vV0>C6A>7p}{beg+3ld|sCZMNUky&;y*#=|>`3%!8K*gvEc& zF51(0X5F(~#BGjH-4MqFlevuC6kJvB(oI7eIA0GLpJRkQBV!$_L+D8O`pdd0@%Q?d X9ZvZ9%7};Wb%$H@=6_1!f1dvjJU=v2 literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/cyberark/dbparamfile_thumb_0_0.webp b/static/images/auditor/10.8/addon/cyberark/dbparamfile_thumb_0_0.webp new file mode 100644 index 0000000000000000000000000000000000000000..0b62dbaf3ac6ac7db81efd01ad5fa84457d4640b GIT binary patch literal 64458 zcmZ^~b9^pMvo0KG#kOtRHdk!hwzFc}wr$(CjTPI;{XKi{^KPB<%|A2KznPlq>bk10 zs_s#e5*Hu*1OieQ6IN7H@SJ zJ$F!Fw_o-E{|~>1y-$EQ0PvOS9|`FCTmzgPYk!4(AprWmzWW8P0f2A7d&v(l;Anm6 z4HA%N3IP9+`l`FD+p`}A5d7%=&^+^ea$LE$_(y*^KiS{<9}4sUl)jrjT3@Z71g`kS zeWu<3uL1{sJ)a0)92ae?fEqwFfbaY0weFVSum2XH+iwA&`XumBx9Oh;kpC|HdHmdX zfqCn@-}{@l4Y2O(_A&uz{+NG5eiDG%=6$_h$JH}bO1Y7VF&Oi004aY?0v@p2tM|134VG| zfBe7e01WR8_x^+elL96F(LaBGyaAAJ2!MYMUZ0B+K>L@KXPxsc)r>`&OZN9 z?Y!^Jzx|&l)Spn^5gzj%_BQ)Q0XqPUf11vAH~@3seSjY}zrlZO_Zxt4-1Te^;CRV< z5&(=p*QeWq;^QFss8zo+=F~~ssL!b8k)yQym5Y2YFxC8KDb!u~6x1?_+wRsfiI`++ z94ERsTtr$6HA~d7agTQ-moChHSPC2Ps4b!=S+$&v{T_TO8TOjtYTxT%R5c;B=YkGK zLq98@S}Z`ac|-7z;`0QfMJ$zqId6lLdIj9}?Ka7~xZhxu{Oj$#h)z$5w>Esn7n{`xfxff3me0q^h_*b< zK2L%llxzh6UDPVRb@49*E~B7=o~>6%0(LQ7bEi-kEF#KUmR^C0cm<3teZ1ii7})da zTDd0TF+^xb&Fv4T)nt`J&llibLZKzcXF@xLP5GkPL_B)!7(X>t8ag#GGR)WK9N*yb z*+V8TAnJlVk(uEiMUy@R6`1`cp-vV40`pFM6H;Ud6#rLWMk~&uP~tKg*M?~s%Z1We z2wP~EPVYrTfwE+kNd4;IN3lo=c>^N44p;%Sp+(!s2<@(p^;O0#s-uH7u`B90(5*bG zIyThn*Q&0P#*)}^c+d%1@H5=1r+(dYB61&^Pk_zLxtN*oP_1@qdoABYwi9m6>z?t& z+6b*gZ*G8x>_&*4b0thPZSK2Pa)g)niIo!B-`kW5$+WUwwbEd%a%@$&IvyazzD+8W z-}BD|ox$OELX9Rf8ZQ^?VQ7!QLNU|4cfd5mNI@GRnpHhc_-+$&qjB-2Q(jrDqd{-( z%k_un??kD;rT;$0^5xXnyK{kT+U#A6<$V07;{T&R91v5eSi{j*mv_Y6jyjZ!;ian; zE0=AXhN}Q`Iw^e3lw^gQV7$rSwudZ!{NXTDxi8uNwF)%DCihS1)5p_2myQ-oR%J+y zCB%CFSC1;oA`o*P^wtzkRB-UZO<_C-achRLdwY{`h-;DLM=^_8i-&Z@v z!S)U=Bk6JJs9eB#!p{}k4;qJVCh=JyxH`*!l|1bk%$61^7u&h3W+}Uw#(D}#*cW%< zdgW3+S_~^Prn$6u6qR&#w8`ghrD`?cces&bLdl-p>`wd91;Rt!zW`3dz3hOOv6Vm3 zCT;eWWo$yK!mZ$1qQk{tngg{=QJ)#ZhMK=~St{ zCxw)4!IQ)g9o}nZLW^n2CnjiD96E~0CgY3lbu94@5ZU%BijZw1NqaQM2c8{i5F4VfF)@YLlaEk^LnzR6%NgtS zn@Ug(Ld8a&X1n7l`;d{kaF$9r+{L^*Wt}Eiv2B*;yrK3_Nbp#w)YynDuVPu#%bnc% z$6IvwIVyJq>&8l4-PK{=G|f2XWVsz!V|5#8a`j+`kIuXo9LLcb8kYq`st+wx$WO16 z%cULe5Qea54tKc92_d0pW0G*jv{j|yCl;}HO`$Y)b%1qH{fj9~kw98=F~7_~hm?Ex zGxXhYm2&TN`P^0I&ETtJy4$=QjT05r7<1HWoFaq4ylG?znmN*(+~Us$=>vVR?Aw~G z?kn)n8;X?*9)*hXGxhUUjqZ2%hvqi3DIo#^7hR+{@Csttf$GLv+z0>7Q#gm&9(iI^{ePTUG>lj z&%q8BlXeehFqWVj6_nymZ&3~AeotMK(yrBiGBFhU-419kA-z`83W7x*LH#4Is^Og0 zyIZN2LvFY&GJ)<5X7hvw;JN^&d7lKqpAmsoVAQbzbf%t-nbJz(u;PDm9^0vgekZB& zKM@QV#Qh@Ww2)Q)3TNZ0WG;l_q4h53R8X?xM0KO;sGm=>EOh?h3D5*%qGzv4tpNY= zd5dp?%}nerdX0r*bUR&53fi%lDeKG0jNt;wdT6XuyEzE=jOtDH6RHl!JDf$fW`y{h zN7vkgY!~1}n3|Hfd)Jjm#hb?44bMdhmc8dn<)5b{z!|gJ3;^YVz_xbRP^y2;(#wXM z_mPACg0D#sr6d|!+i`3s^p_~n$i7F#_5N3Yp<{??aeRP?LRKD&)?~En06tR_sZi)XDYyVro3LQeHi?(~K09*B6 z2z+qfnFJ5VGRS2Mq(Gjuo^Bu0^FcpEs(m~5hc?I92Cl4X+q)Ld^p!5Ra zj#*-EI1SVJKtf(+j{LuZ`oDi@t0Ul4h_-llo#_44oBBJn^(0^i=;w;7GJ+e2YO;fD zF&Je^=jpL(9Bv8NwaRNP7Sz}+r>tyNBH6I)mRng~GV3I7!K!k~hYe_)F5)`v6P^Ut z!z(3m!6Y(oE`k2Q7W!BIjE_0g6v=REd9<6gnpu?>?jx(kPuM}ck7H9RSq|5@oWyV4R8DOX9KMyx3| z_~ajrsi&TkEGdp!_MjV#2*uPa<|E!MU_MlgAM!zN7mtIZro{K$a0IRjmY=~fP`w+B z#ne5|xG%79zg8EuMzD{f=vDj2^p&|}1oO5VfYSw9s_uod%p~cTRLk-G4@-8*q1?1ex`|1#A0=#Ln_FKl2;HSYG zx(fwN=-gJ?Q7JL5k}gcrm?JQAdO8sg^l{=^=rha>&hY4Oe@Zzv=8r6b*9tQ;h)JOv zP})59RFr71$=c#W_=@&5Al`B8nkuC{RmK-G`EE)dT}0GW<=~I1zEj|)=JWnS`mxu0 z9wLSOt{TAip%+2;`U49cGC474a)F4|198iWLQFp zAWk(@v6Z@mKL^4o-gM&fZnp4p7w%er{gv-B+jqm?v_DPSL^VUN;DS@S}{catYiZg zv7%jKIFJMtO`ctG@&CeN*lRlEoCXG?cDh}df8QfkI=73G(9}LGtxYtm|-$tn+|xQv+;(OfAw`T|2MqB*Xj30vV*T8q zX@>AEb~jYlTFZb@(;_{!QXyH$gQ)%gW`iIuVD2ZD)@oFCv5V*5!FgW~<_|gtH%!sy zlB-Z{78)bWntDF|(5srYQJ@}nwB%?hfeG45!tYQ2<{%6TJ~h&!J$(O~i2u!R$TH<3 zuESNbUncliaf|I>YlSZWWTP0Y6YrCy#)0#N5N8;29a1KJe(y0(H;%G}whlJ6WxwW@ z+`(a4pd3GCs{Y?%X@I#w%+fStNd4JbhCw3dfvS3uFR-^ki=2H`XC3e&N(7l_h8YKd z`8-=L{yi0_@i@az4Bz;l(jIabMGBFo5AcVJC9ZNDrJrzk3`f*NdkVi&v@+X^-RNWM zq308RLOeCvm5lO5G!vC6);8+?jhE}Ucs9ZO2ipIWg8pt7_dbvA3rKEuk30$g66XmX zY+6kTaB+kkW~fVL0&{>7XFgb%HF44+n18l};1}(@0ngC7&)ZpZHkt3|K?%2EoW3 zz*%_2nVe$&AIop#Yd4X}hQNt`WfuSPepB=iz4sas>0LKZRB1Doopk~~9E7&2HHe)> z>hT35_^Y_(qCUg?F+2Ql9;9(>I4y5J@asLn2zGAdf6^6CP;y0k+5a^1e`GFH%F3eE zelK;?xXFL`zT+jj88Fj}H#V$Erp0)jmw-OJz&#`>Gc?!Ujzn%F6UTTh{d#?Gi^}F-Mq(4CV@4)Pc zqXr`FfyueldNU`4s-*Rv+Gn5x%XkREc9>^g3?itZIpS;CTD5SpZTH7GgTmDhL6^~3 zodAVT2a{reF$SCMt8iph*5wd?Z;<29RU1lJhD0&`LGO3D~Lmt)@_s@5k5P-Y435gpmO$o33*~uI4!_0ro%_^ zP1=#uLluGZH7STK0KW1wwe?|b@xW|L_6FUN5|82Kit~XNbV0)XQtxVC71~oc-Bg~r zJS9w|OViZe(ozXkovzYc%a(ywhd;^{%)?qAFVK`r6UeRaGYrGP#QT>^_)}ul??)7D zLQ)lRRlI{RTS9N&Nl$1aeM7DtkPuv!Rln`n9=TWNjjRst>Oej{WwRWX4|@rCw(t)) zfyPmo#V@-J7mG@?IgKOywz#-GCKmK*dy|`AXcYd$m_G!q=%nHL_k0lEC&2UwF`DQn zc_N*j4J_X!Yj+e(HhbjU1$zQ%sA*c)`ENrEBJQACZAi5boFEYO)?dK|#eNl~8l|j4 z8aFps8&9=d^y23kD+=}NX{fESguy($#SC*6TN>yxP?^KkAciEK(mJmnmgTQ(G8$Va zt_9BuFCwMUbzQac$PMcOeHKCU)A^d%3q1?^?hmBunEfEXYKl?w*BrU^492z^x{6U@ zGK9wc;9=jqW7nOH+%8Nv3%HXy9W`wvV5+a^AC7fpvbYfYQjjrF3rLAf`$3OfQMD6A* z3OUT1f8#W5QpRjtql#a>M3T69iy?LK6^3tE)5{q8r@JPn?&%jOt@VTW{6O1fM(5z; z)?ITnUBDH?RIQKV%>gOlXj_J(qDBC;o$zae(ndPH^QWLJ4?E_ixyM zEdu0(ebw^QdJjnQlYG!3l68(&>sQ?sE_?akHn0S(+)D*W@dM*cU4s=2aL_d)dJnVdMJk_sU&a^{;hv${!^`?EiMF*IpvHF+I z7g$6gxT?NrMEp@qVX)Nr1oojrVGbMEK;HQl0V^W)k&qVx8&;%!6#mQ`r^TWl1$(Sd zTU03BQNjs>1u;LwX{X`=u{FhDqGIo~z#tf!SCRBqs|uL;R@ZkE%ag&BpyED%GT!b* z!v7IyULYqYdtNN5(1c|>PSyU4Ey~8c()1M0M|dQu*ZG1G2|jzdu1AT%Q)lRruXEEA zav13RpUp($T1Gao?yloLH9e<1u?W~NmvZ*FYjyaT)y&~;a;a!ikdl0-)JUKtwp!V{ zn|{qy-nCPltM1%SVfUHH8y0(B$pMx@pcF)%)Etv9+xojSX8rh;kJVcW4ws{sfqRmg zCv5Ny8j?R9obnn5E=|+BE zrjErxf9KD)f;^y+lZyNemryy5y6r|$n=|T`KucSzD?(dV6H0#FFD)c$tB_eu6r_qi z7cyZJw^c~*M=lP*$(#OKp+QbmED3S>zQ^*CP3hZow|1(e=%e*?D4WLysz-94a*7vq z!=B~oJm3HU$IF;u#6*O`;Aj6G#Vbo0L~1{JoHE_*8Y(Nfk-Ad*?(E2e+uhjoiJlKS zCU}T|MSc_FeR~I0%91~d)QJL#9~C4Ym$l=eOx-cJ0z{AlxB6}nD!<{IGZRhNYS7LM7^tBpt~d{@&j@0=_CNm9hIb7tzim6@gyMe^R<`}7_g&tVr9%iXx4)!)ZPw%7rx zfPjMa(9{4CMn@OA0{tdL3b#6ko`=-W-b>wC(0z3<_Ky z_^fkZELhBIj#{oD<_nV&MUmDatTA2$%FX$sU!>rcg|Z4}f~#1CN00{$i^kRdO(cDp z;uN$W8X61ZQ6S&rxV>{%qOh7Faw7%ID<(z(#wCaKUa(WoKdVqXhN5wq<|FJ^&r$?_ zIukRUDh$g&fZd=gb{US;w4YfP<(&8T{XGQ{L3{QncR{$OO$iIO-V88(jNvN_rddS{@^)4uoVitdcN&Vu9RUK))`fSZ|sy1C&G@g9ZB_ot}rPds59woTu@^BD-hdi z#GETabmtZhUXyvTlsk3efk~u}l(8t(8_~`S&>6?2r+Rta;~xPQR{9dzXUp6zC#>QW z3+;ZfEWZg23ZqX%=4_a-Y1U&dWawxNqJ^4>^|5NC(NK*F*dbrqu~INJYu(CX9y zp+%lp-GG9iUtDlmXwr!Uie?1Ml1*WqOx5X9^8ltT=k(D9wg6JzPhtS9fFjZm>?qS1 zmjZGt&nvS{r@g>1^IHV=z4`j0&?^nMUx;v#|DY%QnUCLNSSM7EZpJe<`k0gio=$DE zjMC?@hH~LuS#ucwT}M*~q8Q&PuaipUBf~2_&yY3^#|dU;3i>Em;dgB+%kL589l@}%{3!l5 z5X**jVMSD77`(Dr%J> z`JS!8s>`G#F8LqIw9Jg!g3aF;Iuvuo|p!`BFJBW^`pA0`}_n>Wo z_tTU$8;W6^*emmzFQ8D=FUiPz*_{nkzg@%(c5Ps+An9N-$I%z(JE{Y1|8=>xF{d`U z65=4i>mIghh=GiF^1F#V`m9Fn9C!8p{8l17`R*IH=+1QXEC4eSN0zNz~fa-bn zfDaJPiB(F!>1P`GK;h%|3i;P(h7S%(Kk|OUg0B$?q ztMyDx-RH|&&oeZ7CSv<4Q_jbr<>5_op0&_~rwG9-)60~;2%T9J2cPkzKW*9cgmF1@ z5j8d0cPxtS^~bPsii4{02SvN~2w{xEe~6Ai_xJDzD#cT5wi=$GU2E29vU+%ef=dg` zS?K$eQRatI=ID@AKD42?4;)6&vTiRKnEuhv-p%OO&CfvDDo~f zI3yKOjko;-he%pAuD0{~r#w*XWh_n{;GN^k%%^t{o^ImM?V#-A(Kp6Aee4kCTS8`*p#YH z`9uQS3#{d!mhZnm)qz`cGBpPgSV*0}k@8-gw*Bt=zsy>7?_Z* zdcy^0&os$%Evj4@P`p%#nl4bqyB6`5I<7yv7keeL$JOVK+uIevk2_f*uoxeV=MoVF zzNAV5nUxwXd`G^Qn5-dSV#11Z>$v9OCxTVRZ-uV~v6@S&VRU~7!`lOUT_+H5A9UbU zO;V50t~gPZLbrWwjAKbS7;}Uf&pWm0z7I=>ug^L@?H*E|S99ekT|}G6{+;rkL=)tY ziE7)oR}Yo!p)QAbW^a=17yh?%LoHne3244AvfRkl9Y@s=seubZp;UWQkk}_@khg-z@NTZN#1#_*=5;AFDy5@AK|$aB zJ4S}FW{n$-GADVty|63amGS2yb_XdxWD({XU==|daL3zHK_SRrbO}3(KVj24yHYu)uE0b z7JIMyv-n`yJ;~ou_mc)>HF*l!-Ao=+RmkuhfoO++Udpkg;lZQwZmEHFsb;$V(u)rvW)YPst0Y_!+-;*{rqt{meDuO{>4B1|nuhcY1^%#eZ8 z@8KNI&w;lX?3(Hf$V<0;>6Oqu)~~cL8YrCkfZeZZZ{mO?`O$_2VMk4kLw7xKgocZE zhL4GJz!@K7uu8Ot7?6%LWdG|K)}?brj{&`<0eYe@0Krn3LkU%iJf{_cZ)ie)ApTwI z_C4XoENJcv3j)_jCc1J?9a9ek1cWRk@a{wj;vjP%s8<@o5bg{XxceFoN4{<}gR4}o zYXmQoUh+WB0**HKT3$9I&2KwJfdP)T{JH1U!$=t*(&mFWv(XP;?Y0~CE*!9^@qj}3 z6XPDAP!k=t?mZD(9;Uhv-ef?7>QvbQdAkZOJCX2Fe&8uJR<88$(-t5YBU{2I_SAh- zjH`HHIURee;X+xOKC@uLQTIq}N`g$>JgyG{^LO$FgfnUA9gScz0tPI}q4@SNI|w|< z*CvTtK*xc4*Sg?s&blAggGoP(>x* zII3@hLZwciUSp2eX25QKFG{72>E}c_qJNf@GVr*dtqnD}TPn~3XYa?WPjxGVZXd)N zO^NUb4zoUfRB2u+KV<|`%bz2YYfhf6=A;=VlakvIn+S>Ul3+{yZ<+!O<}Y&mcN7ID zr8J~*+iHCTWMmV4x^Xm~O5tQ>-M!=sMk0vM48OgzrS}`9IUL4&wn~agZP6bn5`!x} zJsfFgT;mcBHf5E{fh*`i!iY~_^Qma=3wKU|B8rsp?UTw1UoZV23?V7Y3fgZULhi!y zpUbRS({hoA0sr`Qz5FuQ9Q_o}gr90cHmylRvlMs1YV6A%x&X%?I&k8+fpqTeSHkk^ z6dUbY1wE}g>T;;b!oLf&hr!jQb~O`=G5UE_qz`(SoT ze2Pt=!3f$in2eS%&(6j$>dVmimM0}58Mjgm3Oy7iEUkLDpSi>jQaQ!O3M7?>KcwYo ziTwo^kOv<%5(EMQRgoJn1?|~Ho0p4ZYUv$pPt#iac6x?|Iq(=7@bQ*HtNoRM5*dKG zJayxu6Quk;?ezpOC3pXv!{w``)h|c)BlqFJY`6)C-)W)_t=4ejo!zI*BmA`ls3(QMbWrn?PbKZAlx4uZ6{2 zrbPWc~EvV&j{v} zgKBau(Y_APeK&;$9{q~UPTbf(w1}w4Sy=2VYVOrbRA{u?%@z}tVt=4kd^Hh}+e_Ju zLL{i%h>)m-Z?5B?KamPyun@F%d2k3N87UxcP|%SRHjqS7--XWxL0c2Ew@4GX<5TXW zGcGFO!Bm@`P4_R{f9ZpZq^KNh?uc$fr375nQnJ5N1Wl%&8FQZs&$CLO~TO~ z7KE~9VoRO}WNXT>@kfZv*H{fp-aaA@Ai$TdZM*0wN_`%w(h4>i0k3_WcVOvK(zw-V zXNxRcjopCKk2=`zq^HEI<6`H^IfiEaF<9WC$XLH}Jtg+TcxvwXr%c*x%>|>TxwlOA zCn)yAFj09|0=4r37Md6NRfUZv^A7laR?P2yRTw(YhF9sh?v1Aj6>PUjXzYzzOJ@Gb z`q4rnNH{e#xwqCn`?iVpf#^2w#<^f^R0ldApj9D8jbf;Yft06!+xe| znNk4gP}^r05RB-pmzCpSd=V1Xgnso;;V_f`fzam{++_TSbr3?Spb!V=DG zawT0ra8oquHn-BR_Gt>w2hkkLOHQu&6N?;tj{9v^@bP0Gxb_57+I=(fQshD|A#J-v z7aB0u)IW{tNzB}rQfj@t3raO#E9zt`#h~1p6BKUbY=u?|#trh4#E#|!25oz548ryh zV5PGC;%Qk|s0Y0h!;8Ri$T}kZZ;|JH{0cCEwMLaZXu?9l<-2TmJc!go7`LmZt{VSZ z0Yk^=_3-0lQ;#md-B-gBsd;Yo=W1mb9sU7ZB0>tMVZGa|rnsdNkQf(cxrr8#*{@~C zH1jmzM~Oc9RgLoN+kJ#z(*IixmYp!LLKlJiH8uz@Mw_a>$y8F!pt^I562cFFNMv~W zAy3T^N&eKwu>g!=Ozzpt;yHcZ)=#krs5dEqrN~?`cPJ!2-Pl(}e%q9Cq&9&TzyXA9UBh$`RuyuR1#P|1u}P6xCk&7HP=BZ*Xa$4srE^}|UF|}VMGYJE5wE8xvVbQu_fam`$b@|1n(3XEq)bLv@g~vT8)s(B^>(8;Xf~dtSw1 zEaPg(oTCA}J@yhXdnX%)25>g=-01hr*_YfV*VuZ7!BinphA(8`gjEl>z;69gZ81?! z5Beg|uIQKH)J1u>dBD$DQ()QJ!ncNVRKOy?QZA&J4ssnPR!f{App;

{M){SZ*Iv2|Fn^Gn^k};($qZ0;^Zr3M(P;2|Gi1A;}b| zwf&U}kt114-o^Px;5%b-G4k`##0`yH>s9@P`$hVq{+)IaP4>wV$mFwx@v7 zPN9J78S3a$A64(Uhn_8oq9|sT^3Wf)c0LvXk4#;|`#PN@pWA=}$Yo)VS|Fl;BXk+c zAWSGE;ysGW9!RM&HT;{>em|_=ctZZyK1!3B4phtPqAZo)cBN;oL|nQLq;J59z1eXW zI(h-eqyt|THg1R)OjhK2!PQ*jzN>8G52Qk8*m46F0mGSbmrh6RUfMZKZAm4dE_pNx zU0)o>inUor;7Lx;E-=ykF|q}}ECu`ar1rFg%c4CY6F->#IBz$UVAQ_?=Uc>bKytw5Fa31sV_c)wtY{^KqKo&JoIcpB7g>g^dC|nSw)R|C51$ z9)a!|0~Re4j=)_Ov-yaUp{VGZlyyq)1QUspbFp&bUdmGY33OHvs6;61=S@n5F&XtP zHwXO#h@saa6-YySL>DhihO@C5BbY~U(qzko6hL5-0KGWsX~KSB1ZM+^>vZD=>)CJ_ zKkTXoaCJ=PA|u#;00z>jYOtK|zJ~i7yRls!$7+`*SW5g8#yQo-%$rZrbCPvV9;i(K zD|sf$5--^kd++Z&}5_%MwMg4mF77|5dqO8!Vt%1zncf$r& zd(gQLonokHCS-!bRAL59_0+05s_=$kLpq$x#bAB`0&}-*4RlZwAL$E_7mIhid-Qi~ zR;0-3NC}R|3$=1q??CsdTMt!nRBf1=0`}Z8Zni8WE79b4%<#!Npey?$(r(xQZS5(G zp!OdMforfQ-gTDLLB`e|SZbAWc>zQxD4mLS5yf&vm|wKeIn)+C^v8Czum#T^SaaYH z6|)ou0xUtv8R4f_ug*uIn2Wy#{kPXfvnyCo?=ByERJrrCPmj8ug1d+hH5A`zk?pr@ zXxdhCMq~GHIFHbl6a^V)&3+Its(4&*{pt%dSqk-46z!KPqlznY76UtM09Lw3)@86I4sB-wkT|A{-gwKvfcyt`6o&)A{5+Mpz z1oY_T&(15OQiYaD%)0{U?>5!DZ3RgKTstK{(Zn5vMI+sg!YeAOxIb9e?Npg%_Wy{u z@FJ7XC;D@R88eADD!2E0PB7CbtNecTer}3HuwW604A{=1^5!7DtPxWI*YBz@{d4KL zF`Nq94f3_+f^?p6lYY#FDY?Phw-E}j&8MS761fLOt|3w{2y7Sunr5&cps2lqfXI!j zO3+&aJB(M}cc7=5o)93~6BC=F_@kDxbuoLKu}qS|^3wTf8o7OlA7>`ufK}1hmypQ+ z8@TY1@1x_ktp#FnIsnYEb9ZEs2<}@|!RKTtsM>tNDGe-HL{?Z(A|dWH=oP>1BZ%u^ z$d+ZMC;+DJH$#N>V-(bTm|p_J7gpQViQ3j2a&)DWix){va=V^mSX4WQI<5YV6(SVQ zOLQ2FloN)^cU|9DQ=Z#mm)crvPSmxDpqY@8&mHfnmo%>ZFX%ti%Lto!(czP7)}Pva z57@ntgO?nRp}Lhs4y04eeS!pMuUi}NR6CDm0)e6s<7AYfW%ab%_df)0WspK`uM0-2 z#>V#3sM)2za+2s`M|>L_h1717CdDWlGd`4(B@*4TO-{YoBE=JHi~GCxUNoHS_ce~l z(lg>7T&A-gxzbYc9$V5bDWy;$T%Lc@8DPIgXR0C$b%sA0Su=%~Dtl7^@)0q?{d$AM zsQD6dZo{iJ;rtwYj)}k7603DiXg<&bmjtU(>AUAB;5OIwstIZ+TBU0?l9Suj;uTeaOl zz96zMxReejO#uWMMGsH8HIWjX_opIF;2I~;!dkFNpo-+QeWM#LwvZU$4oPGQo>?e& zvxli<-HJw&AY{_;I(-to88Q^)@P1TXQNVp5CY~ff_@u|bOAKCH8Dl-JU?K0$@Du9h zeARto2DrGLQl{Hw$8c>Qt~)zO1%^+SJKV%m;Zk1bH=HlyxDAW~{8*~M-_MR#G+i75 zeZchrU0)gsOMLF>$!WKB*=d#-LH;g{S+SKXa;#ESA%<;2D$~-tbylfm-a-+AzvNNb z>Z3PbZ~Acq-hzJyU4!I6Qmdql$Dk!A!to&XeYOBTtbyGG!Mpqg8iCScaF}P|?@kq| z7X1Xj0_dAg*;c2G=_r4<$qh3tj;F|Y2*Do~3vZgVz?bx?p~~;n%aJ}56PRS*lM7O^ zs81_o*MUu(Pq(f|-0`G(_+^6u@ba3!R>(HjZ3H7YDkOp*5VVdIHP_UBGl3#~Et@YA z>D%LQ{3)&lF%!5^xw$HP5d({&{-_BEz_i1>MpYX@v$>Mjr)R;g^v7Frul(wU`vYX# z{@@EKWpuc%u7=QiGI}-_wla1R&ApNZbxDy<#k~symx3u}B_>C8{3x++t!fhux(lD~ z;fflH1KOgY26I1B33=v?s6BCXzi zuy^+edO96b>-(^Od)9NmMu=>jz95|XIKhUB@l>>G`hVQ;6fIvxmc*J5$^s*cJ7wpR z(EXAw-iAX@9sp+>FVqLZh)iAXqq z*f(ygHZ#q={_?R4fiyX18agex>wMnm*!jHq>iAW>H~Y>{e_cyMND3W|Sg*?|Onw~= zAf#7U*Te1Y5cPw#>pe*CoI?HPCkU)jZDe=~ASpDbB9h;>Mn{HmwZ5we(UR2H;!t*Q zs`IZ(5~zU(xnc(%f5L%U7DIl_1lEJNsI%0qj?{G`Fq}XxmF*P-|BYSobrpYb7I{U! z_y-o|MEw^~G1JOY6Ob#ry^-LT{IM7T^P4JHrs))=9_xw@)Ji0UyxnRi;?UN1ROS)p zF9Kvb6Lb#o%C1>W+(38r^LG_1*u&`eNu(hdQ_ZiTC_Ea@fxX z{|aF1FuIY4!w1CG;gaCsUrE7-odlw^{3`j7Q(|`<)+n&h?@0U686g~U+TthNdc;@E z*#Cj|UAPo#9GAE_gdD~OiFC3KtqUl^7);ac-S_8#FJ}cD9P1~E+*A~p2?0a@lSGL` zcCBw9KhFdTn##k#rbNC$mA>gsGdPMHCCZ3lFS44khYJ6kW>L@W6OgTF@Xlvt`X8zK zb-wRSs{Ljjt4~*kxVKoebWvM8bXiBhekdksBe6Mj=9VmCUHATC;Fu)Mt7OD}EXwq% zUlIX~C*Kg7zs`39;pJb%(}(Wc+49cKeJ8%1Gfox9EWnG*m=EKXGM$3@Et;txy0!oe zjA@+P6)UpVEH2D2Rf6S4wo&hQDRWno#X?uReHDN z)Z2=q12vcUJR8W;KYG_Xa}{?-PH_StH37*tw^f|`>-Eqx^bIqkiqO-OZiFi1r#U_i zR@j}&i@LBTRfZ{WlmLj2pI)eN5HJI*-sm7ooL3JcNCP_!6EsJpG&)Jj4Z3NHWcImD zDf2sBt7|S(AVXVxpnoQOl_94lhQ_U1G&DaO5cie%#%ht+5aYvNz)R))@1Lzp5`nfp zzp8|0{ihWeN4%`1+%V_S@BM(Y5vC*1zJ1Cj1nBcEQU@{Z9)VPUpaq3MpIyW!E(Dba zl_BCSwedn|t)xEXR#AY`xMRvZyoCOY+Z+e`p-p=eKD-?4wpO9Wp$y4QBG4RPeKnBI zkhj3|9Ux9QsHGV#&}0Bz;n~H^WBZp zZf^0B&ALd8gAU5+ZG3WU1hxOEoP-Qcz4=}Rcf-^YP^srzp?Z0|eHhMSID-W#<~G%) zv{CN}`hf_<>LWdZiN@rx&w2CLF0>W?XG1GAQV2PHoEZYeP$I6V7HtOa;Fhyd@m6evcqNVcGWjX1bwlN;CAzr00cp`(AS`e-!p znDB@bV%Di%RRnnMF3{{Ji2IBB%3@PI@_l7+*7s~yd)Hx6`--u3V?or#pZV8(^_YXY zS@!HR;AAwOpkLy-b>-1Vi=7=V8a6RtUv#{DC9J*N8G873A2GI{h0I#=wCyozvj@L^ zm=7uaP*rvB6%q*ms=;s}!6A~!R%}ps+ck8PKW}Hkr)&H+Ac`y<_hocszUuv4qF{%` z0WE(M_YY>fU@2uq5~bqo$ni*(Z5=px>l^InUONMtTI?MBiS>LH(YMm+v?R0@q0| zWlI?%Hf)?bmA?x1JGqN4!oPIkJHo+Di-Tl4+x32yGHd(@zsYU?wB3IKLbYt#)<72W z>(A?|Z(`31S9Qv}L_V2Yk@vF2tU>p^00@p9^`-QV_}A<3jEf$d^El*2!Wqrj=iP(g zHuwwUupDY+&nkE6!|cwA$e-5m*FfG@7zAtXj6fPEHdO3B*|nAYA~L<^-F4X9o75Fz z!a5&e&fSg_eQzqFz+mjcNMEK}&Cw(WzFRAv@zL$xB*$N~P=-lH!Ga%B3_f0a66;H| zcHPjbvhwBI1l(Z(L5p%!h2LBB;=PjUngW=xn_Zk0%O5f~#jpZ@$A#DxQA{!+e|ek} z*&e>|qWrS0DzBrb!d;bn+qXr8u;r@Nm4WXaaOrezpBKRreCL@=Dp|r^Kq|hF3A28{ zxs~FO&LB{stBxp^ev=zzqy294_~XKm{L4`+$D$S^=)?-DIU_$IP@e;YrOKn;z4jg9 z<$7FeBxbjKSIFrTt#y)xlUr-fDbI5x@Pbwozyow0<`sAuoEdxPBq{t)2?-H54)1!( zypu)5oILseBki4{LxXu{MlsN77+gUC>uTOngiGO~M$pY0xP%Bw7EOIX#C1oGIMv|xVHYT?xN zy}it4N5O-jYHt-9TdR$CX61pv@@(GWggH3?6A6&6`f`D54f5AIXwR>UqxPlcpzJ}} zrq-lcee^dUqA}+;DzfQf&H#hw6x2-U@wJCQexrbthkKzJFvs?nYi!zFB6unpq@~MG~=7ZI!y+le0KrSOLS&DAa$nfBZZ# z2sXM}MTlcuIi&QYDB68eHXbNF!CTMaa%WsJcv3MR*bLZRH;@K5%>a|9NQ3~Nkc?V{ zI_L|(TS~pa<}jR(1;i!EB+oh;tSEr?Fhp%xf?hZJ@JJ}bCY88c&%WC^pJ}0Q#Aiat+YoM8M;(uM> zk{b~2wf+`*N(pdlk7YVIitWiXIhK}0uA}Dub-Xm(*od->*?Gt%y%&s3(4nHP?nweO z5|PbOW^a-+22_wczVy1StOMGM1PGOELL?*-ZGBykUhC@fe1h#;NVOLBqxv<}qV|Tl zJ>8b&pT(!6t5D)&{*g*b^#}$bFF6A;Nwn*u8wW5{ZB1|zwUE1 zRngG#t9|?BGQ?1w0i0s6MiWy;C@w7;pxaD+F2&B`=D{>?bPNtX=j(PA5`@2$Yk&KO zXc3y=hXMQ*(n8Oy%BKnaICKqGFKfN#Ui=i9&qAB|+|46Ox!p8F4lV&SsgMV{`DSHXVJ;!V1n4KXQ7J;%we zj%}~~ycWSv_Z6C|Xn5BcoY*};$1+@>fH^CM+erZQD(*ci3=tQ%9qwC4^`MYbO%}%a zG}L@*a-_eV@yla)$aMmiXFvS1*!3SUP>T-EB)fphHmhs$BYq>sfcR;I_cmaLy{}`& zE=2;HvunS~{Ps0HyY!JvRukfDn!g+(0P4GpN@2~gY%vh#;ZF}BaX%7LiA}u&wUuW{ zrlBOykwqJ11z|=n3R_3SizP8)=hvt-Snc7yhv-u2_Ui-?8+VakrAjfHd!v|gF@8$w zjyg?jXT_&YUbt!hPOv7D+^&~t0pa5#9I#I2f2T^I|e_WtY6)Iw#x@9NuEMM#V9w9FDDG<)t0ol2+sl5lzoeJWA zV!mprPeaR%tvYiTz3_fXwf-*wmf$xWTKCQdW~nvqm9tQ-A&zZ0tbq4syl1M(!tD~Q zVmwMztD;Ciry(Q6_8{_YqR6|nh1mkaUrn|RRyd|7aU*8Deo%B2yWBEl{!y&cH$&=< zI!$b6O@NGSE7-IHelXL zIF=_X{_%yxG?yH=c~xFN+j~J+i!c)pN~b}nfr2oYW)v#zWfUM=8p6W+uaTBXvp=5Z z4$OSnD8XqySf*3(m@+%HSpn~lEjmhFQyw2d>3(-<&7C!RXl1uM4|Iq zrM-*-Dpxa#`>~4c@wxGTI2n1?3(!1v&XO+gE_|5TTXm|+%PEuOT*dA(zKrbVK*p9+ zJhtjcGkNc*VN#c?)SFV`P!JLW3Df%pdS&)>HU7RJ zdQ*qz630$Axq&x12}hOD4k#~+6@T2ukv<`BM=vGXX0EpE1T+4iPb`%+uSjK}LDx&r z-J@MPC5!>CiT@Dl&2`AfL#u`{xkq;J35URS|Bo6iPnpwjWK`HCla_n>NC@1nUe-8X zQcSvcC3lFhK4FiN4))=&ge=1kha`!03uHBc!`ly=6GiwpTbY(-#vV?g+*?U1C;t<| zbBQgsE?WF5+=_whO;C%ZlGE%~=;HgF!OJ(iN$gnaf+j1VuX-s*&q5ifRpnu>2_>^&%-h58<3}yZ%rwV^ejG zc55pa61Vvoos8iMMhgk^%SHq!+wR&387GV8Ia`_JVEjyT>vmC%^EL*3@Gip!#fRa( zK@u_O!r~7gpJPniNe*xKtB>>O5Q|KT8h(@p@jUVk(Z6bORXljLw$;1gfa;eFulOFg zGy`H<_}gHkdp1QI^5>AI9*k9;y1L_Irbcy;|0H8AYQWA{pq`=%R-08^a?LA4A&<|%TkBy*6(o7odTlrJ^{suo3q!SBrt*cb!#jrd4hZdGZDcZd;lnx{s{ukI z;AZ0Vvu=zoaOTJ7GuizM<_gWSnz8(DeHYhea?y(WQtA-HAB7X$Zl9bJ8eV89nCWL2 z;RX5tFhz_WTEg< z2jFKMx~kazSkuv2;Rr3^UX8p>8CcN`)8Egz~n5A%CLCS*Zs94l08n)QBN)boLV zo^#iy)XbcQ@wCa;{_64O9UFQKrRtKT3_%|zP$*!u&3grJ`qRQ`rEx97t{2Ja)a zVUzfSu?cuVv4#DaQx?rtcdD<;H*#;DJ)HjbJ+9aRu$uk7WJ9o+u9q(Z%`ad?#JOzm z79?CHPzhfKB3z<|ewi-Zcb;&*fpE$k3jWI=<~RjJoGiS4s?=I)R_o3vhN*<*@04H< zV^lwltz_{&{{C>9k9{&XdC2dX9OI_X$QpgL53)crc`vGFf%RkU!Y(@LTU@rKC>elJ znVHJFkom53O7&L5^dt`iW+ml6zXVWX&oFNIfj7fx@GN6z#B=UAy@cEV z005J{Jg38O&~2XB^Qu{upDOkpkFeadrVa;|~jH+IuonM)VQ>qn^q z_c$->Fo7g_FJCAIK^w;9b7kayhLY60=!wSjkfZ9_?Wj0DT^$X86VvJ*TgVk76E&`Y zsgKr6Hzk;VN>Lu@37+?otn9mQt!k`yQW_1>dMKJ~1QRf|hTh$45(|doq?ft`01@_M z0SWJMj$;);kG)XZ2PJ%H{KQ8HG<87Jaik$`io$;lr~$r%zH0x4cA9||4a9^A(JpNg z+)?o=C!ptm4m$y;Pz-=OgnKojmf*>Zj|bLZ5(h&Ny#z?legf0ojR|bvhsORpyb}WQ zvJk$^k`%XY`9v049`0WNk&$>O8fj<)=B)r>>9PaAjqm7fMzD2|dw%N>)+6i0Fkze( zeV+Qr!y`2UtF#kcclo}QzNa@HVWDF>W7;4_#c@QZcy{NyN&;S#Iac)vz8* zU@>xnx{FqP=KfSH2AF*@K@`}}mdDo!aiMpCa2t>~-eb7WBlg$kT+D@@aX%(>V2TUF zYWob(&{V$A_xBp@fzOW--E7!JDl<>Zp8M#y~? zF1f5ss|}HA8sQI(4Pv?SW~DZ@Mdbh3=rohKBOs&g$NHDd;LO^V_55hsbfK0VWuwiH zOz0~^F(Spa?~Mnu4k#VHX5n)27)HQDDzr}j50a@BgrgBz=K8^#*NR7=7$gd73_W5OOQR`pv+_z!E&U!M)=W?yJKkj{v>O`VMbu>xegP1|Kmc3!YW zFGPrn_}mnbd$R=e5^iV<2d=#s+pAW@-QOWm3%UB`z*ppdSE+Yta3{-3ua zhHt$!7Rfk0T~q>8KC|6hfFH5~vd_vh_PlY#{fm8I2D+Q;G4aqj>^mT%73n%L%+WR@ z3ee=iWW22b7!L{x3NcD91KA{{V;<(_8M6vZTqu|@)j$lAMHDFwulgCLgOwR3$kG0U zW~jAYSej-YQ=_jJDES8hDt-v^9sVKJ?w0TqI)i% z>RHPxMO|By5ijcGw{%aV$+uM>ip+qmZYj@Jd=XjD_n%u&pGiav-yRp@G4$)~+Llb! zZn_sb{X9j8!m}pnV*d4~yS;Mtn3axv^Z7W@7@rwlx3B@@nC3mU0qBTj<32Ec3oQf5ym|W~h!C(#QzUl2r1|Tu*O&ictMNCFuu;X$iaaK2etSKKZ9BC=^T^oWa(RX zJkZW~<&PqjmuP(`cnAx05e+1Kr}4xS6rF%`d)2hcBSv?;SGVdQTNNtVh>SaXF-S^g zR*7q-=s|O;PlnpvO>P0EF(V|M=DU1_qv@b~H=DALY~|CdlYR*?lMhhh4F|_rLv+v~ zZC7h~rDU#LJ|BT~p`h>+G$$xTnI=HPjG3A79o3qM0O>ou&1E;h(C$(M>P%iuBWu$> zq`!m40dQvoAH_=~`fH7CJ6 z)Lr8!ZhyO!V-_LvzY97k=@2V`u}jqS6X8DOvx>B_@Ia3k*&re0UUZ??9Bq>`jk8Mk zeYm8Ys5X__7cPEkHc5{9({8GpizR&oY`y!bvN976glMT4B|Dh0R!TIs!$b(+Wg`@5 zab;uA$Y(9M%P!)!kEb@=komD%(QIy6Nin5J_a>gJp^3+_AH~JJ?2%%z^8WXF?0dC4 z(ll4DOIIQwk8CyNPr~$U-N?io{n38>W=AM49jp?wumNN)1FM!Y(2Fs!l0wNZx%HjW zCn1yb{8K4fCDv}2(5P;4*nw0KdtLCeEWmxg*aYuBJFCxE--`RG&Cz6j#GlCgu5s=T z*dEl(&Vy-^3F=7NTp_FjdB~tq;*q;x>_u0*eZQOY)Lmx1MLd&HHO|qQ05`Y}jj7wr zdW(1_OXlw&6}N*!P~&3vX4qhz}iKWPoji;o}mST5=2P$aLxha1~Y2XDiXh9BUHn-$L0( z56yR7Kan69CHg3KCu8u@|T4)d`Q(c81he`K?Wzo$GX#90B2QC$zdddw?GDMUt#+fdBI`-oBYTd?6&V25|G_vz~XxRoi8j=gJenTr<}*j-2W zjJQ)0nB9oBnw1S(fY#Kdd^A(8=g6~0Z~4|k&Zbr!PK>!CC^G4}`pwSj^V7HDe#$^n zSL7V>9>>=cyHE9%8pSCWbQI5*lH7+lTdw2s5K!FzKWi{ndXJMfmrshMe-Qd|`b zs6aVns*DO|K z9ixj1y9{Y%;{u^U(_@%nwsa)^CmYzRp3U~mIShMNF#3ts2WA;BW$+C~9u4q;F~OP~N55MEq=b_tj0lzN3XoX-941a|pX-*N1}s z>b*anfy%(7u4Iec|WLLRVZ5uiSU;Yw3bANoMOPasW4S;p*0`oIVe*j>UWj!WiA z6hAmVrW<}aBr9JN3pW#|DQnul=%nxCztp^;gVWro>NC@_vz{}Rgi6`1F^aHG+ki)# z3MoF-$gEq`hYifl08v7nV8j{TEeWoNp$7V2Lv`FVBrQ{SL_pu6vXRm9aQ3T=M-U>B z`e_F14+dBB!!x#^*Hl2Gw@-R+j_{;+I2CFn9?j{ZsbRnPXRMsINaLc@khDy_5 z7jO#QUQh$dwdbjOa(0=ds|40<7yyJV(7#&WVLmB_)ghBj@X1`o30FRU_->(yA+6b6 z`bb8~T+T2F;Rg?vHcW!tBO+JckA-{tP>BLi6P%Zfox3e#tq=Q0Z_&)0Z6-@Y%_!U? z!2NJWbrH7P7zDtq*0o5AykM&G(Ec2pD($-bMR zMw!9^<*Ad!?dXMJf>ZfX%auMI?#&B!H@f$g#13a%W#k&AtB#iZEyQ1F>WHl=TDmnN zRo%6LNgDxkUIm_GQHRYaQE325shfJt4beX^KB{P*l@P#}rD|#9=H~ z&|DI7)EPs6NdCes`e;V1Q!-@yV2Ylp_ZT(EE%^oW6m-vXn&d}QP9~7O_w6)3wZ@@> zE?b+FrOl~3Y5SxKW~)INUZoQHm)dgFyr!*tpONY>s%UnnKLhKi`eX}sd|dbzYIzZw zb&#i?xHLD1q$kGoHHFK`h=tWSM5Wb|2wcF|CYj`~&(yQh zu~k`JB(ha=w8I5jOxsfQ^o(^Mb!jjnMh)4j9r>EQetlTkkdGxG8$^%jkm`z)c`c_T zY|3YW2UI-zF$hSj3=7&T!i`|s3Vk5bZJi10`1nNturNR z@qD)7_TQz3{GCYEsD8f7gFaQRm04LxEA?4Coa}mikV`H#5H5Ap42%O)?NG&If|(Iy zECsXI<4COrWo?8`=F~nmGNm=*0`EKTk4(Xvx3S5c&gaZ-h5a~yr*snvlfJDvlNzJh zD@@L({PIzzfV-HyR!XYxuc8qVHNBEfe;X?nwKuM{?WlBRqyNFTEM-nHsRJ75q;#~? z1}udfyunOjAQ6ETjo~UMCz$95;jgm?ejb(XYqE^C#EaG8me-~sd;Q=l-@Z8kC#*vE zOe_n6Qfn|aNn=~DjM{1#(3fB}JvBwaps>IqxA#L=@VV==fuevF7z+N_Sj(~%gyd9*K}CnJeOC&maVkC`3jDYPKb+B@RM1RaUhPZGWC*^c281AiASox< zJTNXu+qH;2ji$iEm5q2N?Ctvb&^&o+>l9+xWT6SxsPma3Yeuy-s-DE!2py67q1Y<& z-?{aZPB39-u=A4Gb~i zvL16mztY~JysNRs;Pe$R7K#7KHdjx#3u@!UbypL<;(QRLrPp;;%c3;AMtb5NAL9Tn zf9&^>BpZvDLIst?Q{bZ2A%wOK@qB)vO_puRt=i_u{|^gB9AqV12y$Vc`6eywY~LEK z1=R<`laxGtFj*a_rr1fCU|d@%^GsP0pN?`{pTcGsHAf3XmU{pnYW_{=yJd>y(<=nN za;$8xF`i6D07~HJ<~%T>70c`QE9TAK+W*TTO(-}zHiV4kK_sYSVndEYb=qo2R_b_} z=0!+oR3`axg%Ye~58Qz+epuiBe43?y7_i}b@p-liO7JXqpNpI>y5aTZIl6NwFTIYt z*Z2dTSI;ahnqAtSmaQACw43QZ`uhw-w1?RY2s9aXj7N+D6O7A6@4*Y~cAErB)TU}= z9ZPhA0IgAr!}OB9(5qkTFse46G8_6Cb2I;y+H5DnI`kh?SO(3fqeRyYE8c)fw5Z|b zzva=rwLeHSXQ%MSqf|3bQ>LYvv4@jzd(^fKY5xM+7R_9F`@=U}xb64(m(SY;@di0_ zGE1`*soFI?Co^XQ?$%RB#AK=4D+fLsP0xK}qS6V-gR#>d#0)#F5OOjm(S zW4fHxRYGeM)Kb$hH!`2WU8g<_SlCOCEj@UL10zPID(^lT?8|K;@&+k&G`pYeQ}*Zv za`ucO^HAcg4|}{LALdTtG)$C|Tozi^czB1)$5nApm6+r>FKbMQ*FOmC+5^xFn(`+1 zN#c<7qq^9Y(KKIOf;i(Q5X`vd=~5`uwj)EgkI>qyPW z(onU<*QI5hMZ;xrBS^BI;J*05X~SVPM%RBex}O|z9qGI4q& zJv+jiu&8I;kCxmJPIU%0K*QcMvMfJSgKHJ%7tsi=YN13;?)MY45Kkp#`D8vdOZ)+rarT|hkD_8OEZh6R6ME=Y(x@mwZScUDg!e;i;vZuWcvvNE&J-UDd z0!DoWrObX z-=B#?Xo*V|yWL{ninh0#m`E4A@sSuWa1)3kuE zhi3ZYZwDfe-@eQp^n=oyY}j;-#rA`($@0c719>q&Xt6jV3lYzWsJ`Z#4kU`7-EDf# zoE@&90_2sGA+sCm64jEf#~ojPpKOacbKP{VPDo7#-os3y29ej<6rnl}{U?heV{YqN z@hpedqA>^n_jAek+@S33hP2;}pIs7FfW@bum>!nxzN@Xi$RI{(chO|c4>Ku945Pu9 zQt*`q_d+rpQUs@&Ej3`*m6L0%wK6LUX{A1khm+k1Vn$GU$aW72L2*m(=$~3MV>mP( zUhQkRLyGFSeB@7?4EMeYGrX6%?wwvRbxhNY#mFWw2-A%Hs&jfJ^0mAmct$Xv7i1x@Z`A=+kO( zAP)D)2{<&{rW z#!T3Wco%TF?*Wm&9JXbzkRd(i*v4!%w({l1E0UFoM_}^GCvZdiVl@OT1~?pyt@@h^ z#{WUQi8eDPyUWpKGvRCEl+RE_z{4zmS4WA4UDF3#Su(9stF|zzi~b54P4o6b#X|hL ziJwbpa_UWWi(R-bUsOf^ig*R9*L-tj{!8c%Igbz!5+at0=AYCpjmeuJC#guu z4lDLikXQD2MM4vHbGArE=+TxV#D$H6PS7S-@}m7@OS3^uRz{8o&Tz)@=s-_ogu0Im zpjNoPGqkKwTIK*q_59c>vbF*Vs-2=x349OOCqHiVq!2~^d2P!!!mze2~` zCNa7d6z2RvLd-}V6x19cBH#|9g;dJ5)w!*MUilN!64(PNXh)OWB+EX4JNYCmY+sP(J{tz~ zC0GF-L5=y=9&?Hq`kbEYzy!2@s_5F}%$|iV=eui*)+TVFi@^cHPYO;I?*!q#N=?bVMj|(#r$RxWA{VY4eZk7xPj$6jp6LOu;H_pH-#v7dA4bkh{qVAYj>?{y`~Mh=mk)eAaf`bQ^Uk;E|xlgArDlrly-v1Srw z26t|OLNz&q{165zY}I180Hm%(j;%d**1r^bhjlWvWdA5RYgwL=E3XAX*QsDl7vLpQibU>cf2ldCv`A9F-W>X{AYpc>KCW zwYbxg0quGg3XYBqA)|Q^3F?wf{*m37%2BR~{32i0I81M?cb~7;?CH#Eh8rBZxJdqx zNeiA_t6pY5kajR?+q#!-ouut(o1G-((Y-aMB%p}$Drc-jho7i&_eT2(;(z0;;6P_) z#Ad49XpW%2*&s_wlZ@PX3jwl=r@wHI=zmgllN)OR9DBcWNC0+i)_&ZixEYs8S#wI( zR$Q)vAAQ5kxnEp_4kXh||68(b!cp!%oAC#VfK8B6gq1hY>^%PBzq_Q)_)fLv|Dd%t12nlpKlov&N-=Q;;RW`O=-Ku()r%Fg470x{TcW!KbpK z!R7&sQow~G2%RwhA8ywF_1!024BiBjprml@ZoPDh14;AB5Q!n!vBz&uO_Y`I`!<$2v7`tU@F?-vcy7ipaN4m_f+jYiel)o#ckVa~&>+;D`YBy5r7c7!T}~KW z+hd`J-%(p2dQ{j12QxsxVMnKdbI`lq9 zXobEjS8DUg{%o1ly|gcui8o~73T-HRuPT0_ls{-QydRBS*QtTa+h=q-Y0xsS+ zxK?BTtxYp*y8{EgaK7*qbpB%S z;KQkm!K$YJ^a6>YQ)rTcVg3LKW0TN(hPeIRK$NX5Ya#Qtx-7nB>DSQj2h?3hx4}^{ zumoPZZi|gvgMay9Y?izMJ0Z)dOL;+s2_pYs6K=+fW4v0RVEs{O{WwRb*%n#?AwaQ1 z9<<#|0s{tQl1cK#EAf*%F5f(GM_amO{(ex=PDnhkvu#!s^a;CT9!fjI{3X$%DZNZ9 zGD8vaQ}x*r%Dr~H4yq@u;#6qW2+cQ=Ppt*p6{OhkpWr(D))?gTd|ob@32IRVY}Rnc zu0sF~ZCbj6Ci;h#tgs>awU_%BmuX2H8~x)8BkDT_Ls<(10W<^k$bFYh{zZsH{;I)L zICc?;m%|QD?r(1c*Zp56NTL(}x53&jgjqr#i0E(BfibmREqHk^NWYdC#5$KmNjIB} zjnu#)$c(JXv~&jT1YwljEal^6W}kjt+z|6Y)WS7{^YlA&9iSWi?InZawB)lUKn`6w zFUqK_&*X*SxtHU1*Cz6{6!QAZ!8O0!eZfng`X;XcRyK6}sN!-;Ac<-t)ljx>DoSnbf*l!+ z$?Au^5f+_YRs+AWQBHH;W4mTW6L!FwK#>D+;1-Sq z^eO1J#J@J>Gouao%20`y3B^3t(qsH7M$>ShU7sj%eTjLMpwnb|GvxLW2rLl5b?#Jf zO(Fd*)bo)ztXKngoUo{WPPEdA4$h8L*XOX#W5^Xzq~|O^?GdhE-=u7SCb5IvLc~l# ztE1^}*#(nICyy7x_eM9!0F2f{`CL$W$Zo?LyNIahuVE;t40HM{@-m2#bHqYlN-Omm zYOCxe2n9!AisQm{6;A~5X7sua$!1^zXWkE@Sxyyw!~Adjppt6`BCKL&ABQSKE7%kQ zU~6PWVPv)ZMPMsKXB`=`l?Ox!a~pXpeQzxi>F#->#r?Sz-53AlpMj zEj0>zY7pyOT#5e(4n$!CYqvqLQ=pFNxh$Ba52CRLdkvJxcbGwcOH|WWVpq!Bju#3S z?gX8*qPj2jg2HJ5G@|9QD{gyoH&%^f`m)0s1Ns=N&qI6 z%iUNt4o96{MM-m6c4?Ta5GN)lCLc6_25F*bKHoaM3!I#Z{)f)RL0je}h$ZcZetVn5O~gY6 z62%2X!H#=VU_Z%O;fx@Cys3*3ref(8b$hxWD<&pJr}lHHjdwr>9T=Ua#ty&$iySq} z0#UyCq$e8#1mQDTA zxFL;l_zHoYVQ2UYH^FU${HH!9+}O03Svj0H5dx(X3=MMiLn_jV%w^s=r?`7LTP%PP z*x=6)&T9iOKO*Nt=->}XyFM*^qk*(_BOXq-W3rJ9#eG^3tNMilxh6>f4o<0Fi+eA`CuqwZoLNYqd=) zIRQTNFG|cxIs`-kjS2wYyssNMDLuDjVB4q3Xi4T&^M-OR$T9TYps#W{o8VCthF6bK z*7Sj+q^lBn?Dn!CjM(F}tMV&H4~US05%6Qd%de_XD=A2eF48(FzWG5GF}xlX8vY1m zO#|b2!>+|6Oi2||F0vNuGDUz!llAQWzr5?Y0f_QBmEAkGXH%wR;N}@C6Z80;TPGW{ zT!Wjo#4gF#FkiW01NC{ag8yg6gxS`H(o#RiOtUEcgKAKeh5)K=G$$8g)RZ)v}j?M%>W!l-Y`O@!h7Cuu5F zcfmOZP1MA!B?31ecl3e>%)bePI|}~R$1j0xbd8QOgl<3dVt131i}Joe9+K3iyVTsz z!m`P!_s)3KL#oJttrG@xIG(YR3|`=>k|h&2yo+mU6!~pESgenU;P;Nh`vTqg_W>r_ zB(dkty(lgPYzX-LQp=`(Y21)TIedAJV3oaGzonXQ8Z>BsHK)gbc_!=jT&l$uX;MP} zYc6X&ju!gK0VaN9049UH?~wEXFoba$+e@ml()2RfYD(iaHE)rzcz#&xUXW&X zbc^JS=oMvt`|nFx@hyv!G*zh%UU2#pVyB$IgeRioGrL6rrAnU+)gNK+9}M zF}m?a&~3EZT?gjp?x_>vp_TXy8^rsZ%I+Q8W1d|gcfq4tt}6)Y#;W!u^p-ADr(Kkq zw2l{MHMT-P(wKCWG6`S}xNDsAmMt{E%NL$xCsgxLUpT!>*6KO(G&B9Zp=u)eB&{SQ(q_>u>C=#7gkc~>_);Ih;&L>`a{wi-CsC}$I{M}+zX?dy7*UdwaL8K zx6W!s*%TS<{ZUvpIrXpQ7Aj0I3pgsOjcjeMI)u{45NHua7B#)rxAu_>qABkb zbEbz#49c3-FsDQctx4Oi!<+!bN8L%lxq+fmhGfu@CS7Md4cU-jF&j@{3vQs(RtU;FOiv&uR?i=(Cdgbw|bj#n#z8j(;j&(j6-(6{q z-chCt$Z<`twS*tyZee%@?Jr~IllVCeOdPyXpIKP3Evq1^@ZdX=EOO^v3qs2PJrCoZ zH#N*CIhoiv)u^6u82$D(@ewGVIWpf=S0ol9{G%Plw>Xbp4qkWH z_}|@u)mY)h`k~JP)GR9gGxF8zTUg&ineJ|-KMKoyCIJmlbEv*LYBs!Aj9RSffREH; zJ+$BEl8-QRv~&WrY&G5j13}`dq;lF^>xZ=mbw5;BDoFIKo!y-4@;T|L8n%ML6*$VT zOHT9k`a@k)@939mYQO@cFfH)sU%LcoO>P3Ff$q{Q8N0yp@dlPFkYlbnJOy>ZP&@F* zVfzv&sbGrTdYsC@=gc&<&9Nv|tk;zqR#go+ANYj@k&J`z zwws3!>;rhhmjn}ga3r4ErUv;?k36L{1PgK2_)6s>UODoK88*f2!79`6dov~ROBOyl)F*@a? z`23Q$EyCUWes-p!WY>AiX3b2sW$a6(5m55&Yk9R6{8|xTEdY;Z&YuX3345%6aKbS0 zKIpXY-)HLJ4b%`plbZf54Z^uC7F`0d)E~=+gU^DC(Uc8*^_VfM%#XHBwrf{ui;*wl;5DT7w*Z+kN zcVAageQkjJwc~)RP2~CWeMv0MRR)JDN4vCs3Q>X+Kx}4GmNof-IJg}n*Q=H_S9Mby zn7Aa?>~Y{Q`KaeuG00iO2|XBi~U~s65#cXnbhEcj_#y%Jdp(xe|yZL+;8rApY=?wWjZO^{za|b({rsOv9v+MI*@Cn|jt}$a80-IHC3|mL_Zq zBAuoHgXUe_MKAJaC6CX)I5trvby0F9*>mTBK`%cUQREf7uYpbKzZ=KV;^i*=*tFFx z>&Js@Y)X^3$2>g+PweJxPbiBVi^r-eF!sz4@GwLL2s8!jBV%dPe#Wf&KWF^1BqT`H zl_qw_Rg(L~x!d`o&+Izt{ffcrwK#;Jtrn0D1r2v^U$!TuQzozKdIR%U-6UPWu%k#z zTmQ8<{^#*dxIRPW-{}LE!mB3awjnu)N}$}D6YW?t%{;_XF?Tf|C2bO0Y+bbYcG#f> zJ3cLb1BiNHHZbI-=MEypi&Ef5hG5%7D&N=h;OCUbq3Bx=u5`VQ5#hHayozKr7-ErB z7b05kyZKlAd-m+VZa9#9V=9*|G#R90=dl#n;rmOy43y2vYG`3k{^GT50K~xWJK~A9 zDqM-C?GL;bBATuW7<3@tvuqaQU-z=Ygd zRA1grU`tFVMAR zaQOaCXgfQ3t8iQOd?lc5+QgJ}?50;|Gj;{tNfCVa3z|>3TY|a$MeQp$3+KPF!M{8C zh>#F0FQ8s2c&Q-1NmZ!^J>f{qRLu>%%}F?_lD2)p9K=8Wi?4T#?j-E`HDlYhlaBe1 zZQHhO+qP}nwr$(#q~oMB{k+dPXJ)NgGvDh&)w&D2_Pu}Cr9{ib(gJPZ)>NN7X=L>< z`6)5vG)@_kBsP&7F;SrT#bKVeGx*AX)th;j>+7p<|0iQDYQWBi@$&eJ{O5g0UD)sA z#8d;3zYrIW1KHE9zm{hGftMp9nPATS(10wp(i-(}d4D)ooa!A$1X$)rt!wf0*vB@g z!?zsOX+!@4=nrhJ`y>@~qjzrdmNXT*XhLK2;+SAR&1`uc-kQYa;qpR9XMvbyCI$H< zr8wMX=UckeYnCziT>r1rFR?Ko8a*%UWRVVxtqcr(5SO!vsGNhPg2vos2wU-}Iqyph3=6Nu@= znpdyZEh)ZrUbnY`EzK_6!59Hik?VB36T1ApGaQRd_Fc{5S7p#o3^k54z~%S?j9G|I zJX#BXu!6l5S()la!1gQP-3{jksMTC ziB>b|*Jd6^&(S+acnN0w4w&yzS`$lJcV-!>(zJ$?FrEZCN|b1VnzF-((Z5PPK0kaq zj7l{w^bjRzMeWT6*=i9p6C?G?*~VIPq?iL3QE6tdUi1Zh^}@2|gxRRE@Kyw=O9)UK z0cHp&1c!$V79B0nUo0eUMF{j!ixLS<0ULq%3UkK_JA8VK*9$HO@vj+h4|8>^ zBA5m42cqKeKr_F>iA?+OR+G`anD%^U{=NPXvUcZhBD)Vtw~ty8FdX}{0lCa2I0O=+ zA07fTR5f_kn@^fRiCZKxIicjZ$g$hcibIdd@e2RI)53L}3x%`ndED}H8g!$AZ;I-a z3ec66H3q*Bye}pfpkXg{4#wGUJ%)#p##mIlxVU^t|mdxdr1U1OKs zD%i6Nd1Pq7hdUq>z_&e$FPyveT4TUmsIG11l+=?9VB2+riTAjPO27N`+%&%{HqqpS zP|k8>Ev_k_zNHBZbrmQqN|L+7S*vHezhiRNkICfnX`5OrmC9k5wOmc?ykz~&e(h1+ zZ_VHRNMe)BS(QaL`wi%P|NiI9<6sW$;d64B7sVkoh+~m)5F&F^Dnm8~_W#g|3wQGmi%is458}BxfY)KZXFjo5MS7t^zsiv??By`zK z$|N4kUp3kF1lv4vRO&#lqg@rYb(_Zutvxf_Y9esl+!FG6YLFCH@VkYw{^Ln&ISCJI z6EdM;if5l>`l)5dZ2zIHJ>IB^eb=|Dlk3eyq#$^_m+mF<$GAA&NpVg)Rk@HmlusrOOdsfi$(TR#+91Ry{ z*bb&HQw4VQCNs6g7(Wqv*7WWtdr(;%sKDR2lgkQ?=k)VIP>UZ$Px$eho?LjjEA&!3 zf*QY!B-Z2FUJ84Q+!xI^I#W9Tqyo)(GwVjxgfL#sVp(AboktPu40>Z(=xLt z#fQ`c(M{;_wTHlfh_u6!dkYNJu)HYUw2|8dG6BlP z4KNml&E+SaKywj0qgN?w)^GUL=k)~Jw@_*=9ArLVs=#&+nr(0B33?HkFPra;TvYl# ze5!ZzdDq{(4s-6_gg@#d+j4I2{Z6s}s699H^CRu!45H164fG1)Q|_7X_U%{8^dpk9 zhUErNVk_ild}<5I(}yO$-+<*3%*Nrf@<-y#Qlg1s;&cq1*DO|tTQT^cw)#93w;{ZH z0I|z`$Zqy?DHCJYzDB9sOvyvO8EX!Ar}~ZEMym4ZW5EBpbN3lW*%98{+mm08;8J`owyMf@=lk?fXlF~N1)fh$7 zst7I`n#K$3c~F0e0a$Os1}lN3KxljZ7*{G(u(Kx+%IyHL=DnInGtqia8OY|}_k*z{`DL&W$yd3?&~f+F~GEdF_EIxo!4 zTllw^b^IMZQ9xL%-7E*LtHRiy)YvK zYfvF(QE#WTXYdd2s2*!sHL5GmyfV+^t{SyWpsT!E@VV@a`DIt~+=qj?O<2B}z@K}p zsk!^)H&ZpL)EExTwQBt1&ds&0zCw@bP(kK$#;`>mG~4|NW5_{{VfyEeEmnv)?&@&_ zYPJyWZp&1KJhpmL*oe_>ky-ig>%X~qH#;Q?dPLqr^j`qp7%1OWRlz-ZPDl((n;ZE= z^@DG}Q8e^YSU41Lw!dW1wvi|+CL~=tvHJBt@6hfK9TQWG=N>4x*h6qiI1DO6kR)Zl znz%DvK})IF7Zsq70s$#4z{e*f287|q>yWg)`|^8#TXFjFQIC0==<}0H8uHNJig5AQ z?ggl@j=o15zhx8teGtfE#A_^b0`TZ(9*8vWbVk#OdafpWWu}90PQ^WDpz~NpPnp+Y zzt5H6Pa$nI_@8}kEA+Z&4A3mEVwmyOHjKB;0zcM3x`^wu5)`?3a-=tujg6UJocQQ6 z_^CG8m zJME!LT;HD4#9XtUzvL}zrxBd3cfZb9X88!vLaI0^4?kAn+qpVbbO--z#wb#Dw)udS zhLF&b2ii~NoCW`SzhDX(SrkL+jivonue>@+KSWe{?i}51A63snxJ5D(Uc4E<1EG7Q z*2J3DommGhsa$YY-#fu8~oDCe)7NPI0 zpPn1lqfzyi_6w5%m>WOJR@DW}L5QFKO;|EfqG^mNE_@qCb>Kpxw0uvaoyh&&^ZALg zXM%}haJ9cW&|lzl?rB`Y+e2~LN#-a{`U7xBTTcM17mGxCzD?Ep z(;S*vUD#0b5don3fux;?Wx4dT(+TTSFVB}Ci5v}>XWNCeQ@_eV6F|o3&=pGj2Ok?T6&FFc9RJ&<7OoVqS_Aw5aL*C{Z4WTI~RXAe%`FYm!?3{ z)q@1#!M*1JVDVSEhisDQXr1@%BGeh_=S zC=|H-W6Xkz9lXoNoTgYxpzaJPWz9bRIs`Gc>s&eJ&$MvtP1&xCJ5>f(K9PK*L2+94B?AJTO~-PGCPGSxj+ro*NJtbPF+nxUBx86f zk_s%YAOvzrkAk3FDG*%bJ!jsBX4;EltFZnPRB!=udPJTRj0dc<&2^krtXEI}Q}COGOk=K_pl{i>Kl^r=^bu%Tg8{GFn*3LmaO1F7fK(-l$$t0}q-L`;eZAo8bcl#xp0lUSBeQGpKeZRgFhV zOBVb3An;L=tFVY2*EC$azJ=mXB}D?{KQ4rGr^it}`sXvIrL~+OC$-vk3}*=*N+OJV ztigh@qgklLQ_9o)hTRs~5gd;+F3HX4I=3zS!^{MRez%7wWms{T)`rJUM9&w~RVetoKG>rMmz7Cp-CNXkjWf=Gcx@H7OO45LRo3 z@j=nMRZ~O~tu3@>2>fFa8@Tqpzsd=SXXYyt9uroxwF~BMhA%C7&4An$-6Y9EpVg)A zBw}$uHki=3p`o8_Si1-`*r-H_HqiIvB69}~pZ|PN2gI-_a)eeH0resBVmZ&*zBI#) z1S{04?c6+Ntdw!Y2!uLzZA#f|X69Slj^SP5E$=$hwJ&P-^wf~ptwdTo3l{49%7kq1fYVE^GgmeAAV_5oStg3cpuw=PZ1y2cWM8!l$f!KAKr?xn!07{hS z`hjKs%AFAB&4N6_%Y7?Z{SOewx)Z$0ZBJY#KgM(p#j!pI%b}NShK{B_4%3oCychn- zEu-5%yTrhJL4K-+2SM0;frPDMRX2mSTzAdemoh>$j@x%BE~}X{4o-Aq=ss<#N#e{Y z*5^{yI^xq>B%X>DID_O!BRvX+c16QG>*Jh(vw8?&lGHNyDcpA+)y!l+O6tgkAk9Jg-(&3l^7e_-@s*RUKxn^`wmq4 zm>RF8Tw@`6ew>?o3Gd}(6_CLwHjb>jIEo2UzPx>xn(bAa%MMI5b>H_KjdFLS)ZjKf zPV%KHgV)Lgn^H}tBu=7U%pi&^)Uq?EdUpN1;K)#wwW6QJi8*sl#lll}T*K^l&ZY!l zw4JYJSg%mk(G;vPy{cPFn}OgzT8O_DYkNb$+OA)nO4xUk>r*$ zw82_n*&;Txnm2^H+d2VkenIQ@$bag3-7^I!mRGT~el7kt9VouP_TMy*^Q<_-4`E@> zTY5uT%valu|3lq#pAmAAR3}|Ls0r+KDMxGUbh#$%$U}gvH@Nw>rFN&+(y8O{%moP@mdxI*7hvx~4P=__8icNza35+1HaRuWN$VnRvPjAOR&gfCMZgRX?9W; zq-i9nQ35k?ZCF=S2MRUNL-+rp9rI}wvan+ZuvTrs>=GggZok)S>aqdvXM3YnUQ3NP zj>>UihrP5Bl!LuItc3d(KB32YWQO2ve2teSypY&>T#(k44LJM1+V_() zg1Z|eu!NG(-VM1mD~cufCY&w-csfy;O z!_^%!db3|{_t7eFw|?ahq;8M=^d{5Sb8+1TpHBBXK4XB#uRs7x)*E{tvmhO-MiZu_ zUo+z4fkClRWLTm@nTdhMY);K^Ox^3cGUDBjwf8dSK|e^F-Mq<*Yg%IMoQzOf(+vE~ zBLT1ZZF5893$n?WsV-&{%{=~o-RHJ}E>&jp*+&C00Mc7v#obb zxi)|9IPo%S-AwTQFd~OpWZXT?)#pKjSnqzUY(VT_sM`PYYnqV_15EMUc0C^g#j%_M zlr0%=LN2dO(E*I;hp1%nY0kytF^GvzHC2B>b=|Fo2Ex%%BjwCwbDRj9RB1A0^Q>iJ ziP)Lj@)yVFIzEa>#4xO4t)GTJfDVmjXArpLZtVWsS$wBL5$N zMQN+_)fJ9H>ww>+?#$$C530N-5Bu2s;2c_a#8;KI1_ySLyl&UAkO57PK!*p$a>LN#;RQ z%MJHBQ}uJpF5|AsYj^`JzSv+29Cr^R2m?C}OKU<@wTLgI+FSzk$XoVakAX!vvq)W% z`u{kXA{6tx$&(q*iYH+xO6>~i(S=?auvdTMZb0zZXfpWWuxW~)8m8=t{ggMtqO;3t z5H~i;=@#y`RJs3&2hgio>MpKZjf>?bY;Y3LGM^KWJw)$I_N;3&X++OY@nk%@66$Kx z8)k8Sqm@=Xj6DZ{MPQX)fp!=sOp@mhx>i?4j%*1gi5y{}(y#x}GGGda1wPqKa@CN! z9#2sGMdb^si^Yp|u_f%=nVh&B^})3O%CA@?mGm_8&h?}iPg zK)j5$=yl7KFaD9^KNbZ>8cL}V4XPDVU?tJR`GH`4h(RI)a`O6V^Sv%)Lgc&^yuY)! z4y%LfU!`ksose!CS7!BbaL(iS+#Ia-fKeXd`qj~_`#5#ZY0xaZXl*Xmn_vVv$;gZ0 z#?1{IVfZePas&#VF;ElGJdOd*jXJ#ne;=mYxs+ z+6@bO7k~VXL5g)J2Td5bsgxx%E3A*eAnY1@uNy%MVTc3zHjICtmo)pH^(zm)u64?| z@FP!pN1prq6BH!QH=eG2E{JgzkxH(lBdiZc14FH6=6IT{Awics^OBcVR1p!w#V*ut zIb;8~tt50d0_@zH@^=mE{EPKK@VB;HdGuR>OY*WWtrA;2H@P%>ReJbox+* z#na9UNNX4qEFzV?-(SeF&e>AmXpa9Iu32%vs(Nuvlp&stlBR0M{db_Yuzw4Tchhb+ zCrYklkeU2cs#ZkImhpOe%0~Bq!=@K;YM)knDG~4qzH~WvEXW0>TbsVQ(1!wGWxSr0 zPoN0<*V_?o^vJgY_C-d}PF<~p8(#RSirBD`r+^hO~$&$4=f`}wV^f=JILHYYa4}fkVRRUc&K%Gr(;cUtK zJBvECZe6DU)i|pWzNwI8N?1D<@_cEn-+HnL60sjotG1R~Z-=RQyeD;yTUKy|t;5ag^!gUWzSo9xB3#)y)#(mJp9Hz>@;d(SsMwfx9l zP*=4I7d(UvW|>l`n{6zK3zQhZECg}C&35-)Yd%k>(b$^;sIvUo@@hCHdQ7o3k;1G4 z>3HUpe0+B>5zKg@D9e<+a<#2kx*MtxQjMvn4{F@qo->&<6PfW6b3bphajd*0H@;CS}WwJtCU)0pOT-^IVJ^bN9EfXQ`Yx3-_jFG=2DFoAQs+RpYF- zaRyC-`c%^oAn=uF8N+n6Ht|Ann-r_s*3NhYAt6hz9!oV>fWw@&07q3jp)Lg+nTr(e zqR^{QKn!Q0(10;{*vp!ho$}^Ju@rUUqUZ4w)2Cq!Q#pnAlAlUHO?+jerFsU&&Znpn zq&S!*w2+}GJk|^xzGpY%of9rn7B^;9{^l_Gq*UnH6JMob6kYAyBVYm{n;NAmLi$O$ z#z0^Rjta6l!IC|Y4w2R@G2zmg(`aF<=1!fOahHkI<9Y4XxvlTQKV}fD z59cIV(}sNgP6i-wA-k;Z-G&8%Im{jmWc0y2CBZJi8w>4X*zD7}9olDd3v1ua*;oaa zh60F7!+XXM{J0=EE!zW{f_iQ2Ws)K&CQ@dmrwK*w1;~!$4|mNVxw1`Z+rG9uD}R9ry|C=??ZXX3>E5c4(u&IVROx4qvn-;6@c&A_s2?%cBL=0=; zlI9rBHBWh3yC;cEZ_}{3p|7uU$viRX2S$vX&x}^nm~+qRw^Y}Hv0K3Ax+pU`OQ1ub zK&^-z!!aM1k34l4u!zW0u{L8%(myH($xNS z@B0D?DkJeuG}6!p!dsCtI7W*oYq!keq;qD3g{9Zn9V^$XmaXqx&0`-PORhu=YQfvh zN)FjVrDM1GifL>DegN2aKK(UeTjL+#p2R$0?>F@>X9uX*FHK{vJ+*5uLzi@Ylvm%> za>M_K6>|RpuCB@(L;&G?n;&DLC~NcPo8K+W`k64ig-vSkFE&!M_*AT4_c7I6k6bV0 z_n{)-7KY@suFxJ`n3Vy2^%r;ZhFNS!)Y6KFltsDKN08_TG|_{xm!EjJ)XV`V{Sf$$ zdPEHwoE-y4n}C#kO-bIejORKEAMQjm)QTwbb5@X!MM@bQE04ZD1{JK)v<~~>Ka1T2 z`mTSoTn2%fKXk`~U9A}ih1@N;c%Ujnzv16FV)mY=*l9BQ@Ii zbdbb>;k`gO@F^3b;R4t`Y2}7{ooNPQP@+Zz*}9a#(nGa?G*QFR!=y%iz?OX&%rHBO znIy>z@4fHyfy$v1%siPAI9)lhXYp;YA+13VI#6n!N-q{zKwMYz{q#--fTK6mQ~h7` z#Mx`OXpFiYzx(OFHAGp|&9Z3R7fB9x)kJ%(3{jJiv+!E(E7){!kF_o4(aJ@;kz8MLel7>ZhRL;qQ+Jwx}`>JDr{aHCDg-OvHq6! z<>iLYK{}tKN#K^LDt#21PnH8Pik8B;w!JlUr*SID<^tn6p3$h=^ipWnh0Pa=VSV*t zu724id~Um6We=P$lA=zX)ztOL{*tU6TM*f9-kVnFw4H7tv>r7qW?A0h0iOx4tQq;i z;ycT{8(i0RZkYJ< zr?%FwS+gmn{GLGqgA+fe0BcPq;@c23f#AzU4`*L2ecsPFn_|vt` zNAjj$8G-p{&Kc)^%k}A^w=;b37fR`#1$FxQWVL$+>ge%aQFbx=kyDP{Ky&#JxAi{9 zShm811>Rsx{I1f>zV)~rsS-t%xuT@<+1d=vg{E=X7sY4_kUrRy2-j1lvp}*PFWh(G zHIAU)-^qRg@wj>7J%j$v%@Mzv%0NE)iwDTzD>ohRT#&CLRp$CH@T_IoA9tRcqc=rP zb)~3bWm;RKdo?dshg&iG+4_FqbGMq0R`yDuNL7JyAFe?L{c@yK?#WKU99Hi%y!iez zu{eu{$055}$thZ>bnG@?-&f3F=e2txJeh|SwUqOYcT&XIJ2qaNg?qag9{uuz=&usV z=Q8tE=;<;D7kjkuwXdr6HbHUYlf6cxR$^`SCIcQ$lR}ZiE@>H%*_-jlM?c7M{pSMo z|NN352?WJfQGU;zx8GiVgE}(fQlXY`R0~hs7*@DZzLfjGMKp;ZB4!-HSoa%QO$Gd#ep!8>uSEA-pK%B@`ib= z|2y3k08&OPjp>Uir>wW5JN|yV@>f1%Ve0e=n}g=a3uI=*rP)lDm?9xpu!puJzYR0?zts|B}0{lZ5*x?Kx9o6V!P- zih-BS_rgrI{dT3}NP2*O*Gc>gj)N#fv8X5&_@`}7k=*iE_WlXOQ?iUIRks_x@ozk6 zQZN2tRjM1hdR|})Th=dLSJU&jPE5dl<%5!mMOl+;qz*o4C>C>dgT@{KHTTKue8|W6 z!2FKK^SD_>HFkl|VHzqkX01}OsZ61*ZAE~^UxYw` zcIPCOA_~#s?fiZE63I1%!9g)**O`kTwH}qy%=mW|FmR|BRsDeyjlzEw$NryGInO4=IMh-ktSy|2X#j;_i$|QX-65OgQzsBpClmK?U z1{bXeZ6mSJ$Mw!ewR(mOTEXP>ti@nJoS5LVN?>0`ob!g}Qc~)NS}_sus{BXojVLsk z->0DZV0e;}rw=x_twWrFFjp{pJ^duwLY>vS#CG*%GAl^uNyS5^hw^=UM@HX=H?ZKd zamq}=3Z3mG4~^QaJp+Vk2(aW@{@Qv1j03H~fHSzerph?}Gs0y3e~9`=0Bfc!+1mrf z4H5j({&eytU+d+}{exZ=mCQ^CNRr#_lXGI~Lu`{WZq`7FR(USi!xgZT+ZbfIA)n=E z(BYisFiD)Rh#Q4>xwPJ~gP1nTy1Z~!+GkYizzzqZaaJfv+g{1GE1BIG3jDYfaiEZ} zDtFlFA-K8?mOnxxu-E9(YoiO5VJm8gm7`Ux!5Y?ToBj~4)yRna;$S~Z##*$%ozEaW zMHOr|t9Wl|J}+)^s?p}x%U9wW_en;42(2G|*Su|Jo;kB!XFp|r_!p1YCL+`zNoGB& zg5E1SN^DiSiSrF}R_Rnr+iIEMl{L(jyd7aCxMVib1GilXx3^~eF7fFsM;!d$_Ea-f za|17P5>8CmqHa^i>;S#Rf>Rc%L5EzLh-h0g-j8?^bx;Zdov;Kfed#zjp8SbQRHq-o zlQmoYyom=p?_`R>+lxOuMT6PLH40r;#*8!1SQW6xmvh&|+0*dR4g1^>UfbJ-TH=W^ z6RhA5RP&*=QLXQKMs|8ED2m$-$PQ@iO)1!^DI`1k%vv!=^65I{0uHhZ?qkn^alyB)bOYm?Vxkya%SFLk4Mk9 zTQDgkLzmouPKlJuD1I1YGcLpC_E}PykaW+lXfadbM(b!w03)k^Eh?WJ;p(`PGK7jo zi)SzoriwR#9k8%hPK_u##TqsQ4*#rV$H7q5Y)SM3(Wp=!YPyqX&N9WlRurwb$dh#? zM{}M6#TY<#Nqi%%_H=DHWV=iaYe08Ky!j@B)f%YhB)o|AAPG&BB8O(}^zt1ICnQ$_ z{Q_L4Y4Qi~OA;Dwho*e~V1z_KXI_CxCSEc@MxUg($+Z;62{;n>iFhI8LK^SegobIRb5>&ai@`AUSxvy^|FrmiJY@GIz&w`u?T<-g^p2# zu_H*r?IG{ao!=R7?N;g`&661oQVdhPHlrY&j^n^M_%CMv(A)B|=H$h_glfAA^;Z7Q z5T_sHan;mw@J^kZE!`5+cVZW`w5*ifGn+@L?`Gp$qzRFu__j)^!OLn$hP;SP-23N< z`cej{%$%+SHKOI3sRDLezHA7w+6!5%Kq{>oxnuUIe6L1%D>mi)X(5DPh^_;{S&!(r zRgRlN_I=omiC93eUotTHg__dgCcv3kh2QR~DwVztZc8%^2>*m3E2^i!t8Kj3(Nzog zR+Uqm2T&^L5JweW#&V*^cRT^*g1$m1nYj^SsbMv>7VK?{EyZkPc1VRtl@7YC|De=O z&&g!({F`tXXhM5b#HN(|S6YjdFD3!j1|!^jEF~@F?h$x?ti&5P-K0r40p>EHRC7&V zYV^hQWJ2kLcqSGgQ+sa$8+rM+Vw~F0v#zt*mSYs8OExpMDf-u2gT*Dr9?6NE5K@(G zon6!!*|q^HPit!plk_Nz9Z57vYSm7Gu|B?gej=m{HmNgSA}MQe3|$eluUYwld^RTKjT7&fqrI2c+BUTR_d^7|U1V6y}Gb-*}V z(m?XE{9HoQlF@fPBirR5UY`t9_sxjuqs@RmxX4I=k&n)OaVK&IB7Pr^#36tCfU)Z- znCpvxbHiXVnTjBR4IDV-qa|BHXy6w{!Ts*-z*WO#CgA?z3fU zs&{%nH2T|t6o7p7cu+n)+ghA5m zN2SY0+^^{Fn5q$PKM}dzOl#S8&bKj5Tfn?On)+LD?bi4mXdab8!$YI+bM;J5f30wk2q4(A=Jvkhc7&s3S1CvXjG4jxU`TLrrc zl?$8Ts^`dx{PhKQsP)iScNBFgv@t`e{Cnq00-^-=D(gtZ8g=5W(oO4uFipsx4^}hj ziZ@c(#M9&Fae~LlHHRmv=F|_jG*OtHsh{4)21*%dNwpmg(s7lMmLOHV*<+@8WoRzf z?L&>tZt&x<%dI(m#$=~D@`9lp9k^_*>Nq#}6syu66$?7=Fbff2x+|Dj>3tJEXH zAYF!#2POMOElT25FSi|^O z=p4W(b+W|gwUobeWO|+el|b{0Fh(lfh8G4>La`URBJnZ^fXw`bA0jo6E9cxS-*J3b>sTUFuch^PYVVvheVH+ zZO`9z;fCFi^o7hMfBAN4zrp4S$kRu>I+--y;YJSyc{k#g(&;4bEijtSX^!bBG~0C@ z;sLrr=?w~nibnDlV&;TeLR7z)bus~H>jhb(j-S*ZC3543iX#90oRjCYh2wR$=&#Zf%N3U2^ zA&~YR{>Mihpzn3&_;epcODrw%T87)O9jW14QfzUjPRMfy7fJ_5<(8tU?SZ(XNXw(K z53cgTev=r#2n_lm6i*J-bVuzcqAXm6^V*+f#h0qpW3UxcJlfWmfj<_vj!RUX8C%VG zxoZMP-(Vht1{7Yf96{I-B9P*r!ix?BLi@@bO%ieY%+lf&@oX3{4>YVZCK9{0$R%x) zvj4{TVLD616G0fWvA=&2);z&&I?_kWWh%IaKkuq4l|Bz{OEdPUVoRsvmJ?4t-24bT z@H-25@AsM*wZybeeypSl3oSyGSajijHt9ubxw_tWkC4Q8A);TUP1=@!eI}q^oB;$F zgN9R~(OS~6gt|@0T%;ZGCSbzQ+g3>>oMc8@58njh*G6g6l#3$J8wKB6HlKQv+}73W zM7F9*hW8VdBxzw`*J2%U1Y^fosLUaS;HK|I8(-LdLlUJ#3pwh zdk?90szNPgS6$F$1;ycd(h=}EWL`&mVP-}=-*t}gxLSlUK`b5 zN{jirLXpb%(STIn##fY_xa({w#Y}#dT$+#J+RW(Q(GzfUy*o0rxs!SmIV6RRB&n1s z86#eBg_@Rw%6*+70?|nkv@Txi1i}Z7rZBk{N`eX@MG>k*5Y?(ZMq*hiX$%|U#}o|} zOxF+!&VZ)OP+hoqNg{2Eg8r{VodXCA{hR>aTgP#jP0S6tD#T=|&{3_B;tg#f$hlP# zKw}wP`!xDwtLSn7_2cv{RZc6;Sl*@mafm(?A>Yh)p%`B-^*>fj!zwZM2?a-_kkkzk z4tA9On?5qRLQ@btu5`Qwq?htd2GN%YnLls39DXGMaA%{ZWSW~X#u42{ehIC6+7^Mj zhadoWnttm4>}6G7hs=TqOcM=D@gV=xjmSBL;8*`6azX-wFri&?KEvqgtpJW=VepnM zcaFD<_`Z)aLWGpTT=V^<&&N;DVEOBErU)|g47+n&^)0Q^>^8Fpi$%n0e{?(4UF@)C z`L}hLK*e~;b}>KOYPiVs0k58H zFTFh}fF!29X^XAxAnSmXm#UW3O(+W)l-}H~{NDpx1F+t4=%t&Ou9dV^T>sv3x*@eN z1td+lojR6FwN}iJ#5Gmo@g6!k!~WJ2U(p%SSqu32R=+t#CA;zP?(;u8+|sbQYTS-dc-u@wT5j+bpc z%B6e|Dk&UPVEgQE2fJa>QZT1f!(_#R^YiiFf#5+a5baeg&MAL7imqKRG{-}yX)6RK zA1~YbEtmX8tg`cKTU)L(uE-VGAWam*=iUF1hV9myRG)?Ubg;_FZ=3$kQa_r>a{Vu; z@SHiO$w0)a@F4~tY{hVLhzQs+JBKlp1p3or1xo?uHdk0abAwF@fc$AvexyJbBdkvQ z{oMuiaQlFZE789>fB_ddH+W7LuI3BEPj1*ieO@fLH`=e=TA&9=DGIuLHfMtz-=(unF;P(E5D=$ zz#af7FZ;f;36z$&a*~MM`QCpuUTNdqx;IH9`#Au_yHa2mX00W(BZ~W1S{6NOGv+y4 znUoOxt(5bTQrm*Xor$vNcdWENmxwi-X63HkI|;3G=Vr!RN_t_7V72#F(em*0R1jjM z;#)W6r5TfY5I$Yfe>JupPe5r?Gh$seL2t1iBvoR{!`kHA+)wAB9 z8A0*8b}Oo7aM||1QREp%CXvfjbJnZIlPh#@bQyJX4# z1kPf$8ey)V5xwf5D#AzKQ&U)naYd~pnGT*3g|4P_y%>SU7D{8x!b1MK`hU^*=iVU0 zkwP6b^#$pNBLpX3+As#V60o8rfcCjX?!9A#>+ zIbsKv=tU=iE%n=?K_rbQWJ3P2?g@#tG2t8DHmyh?yq6Jr9VyF-Y{A3^_qEVUCLpLo zec#n*#VL!D<_eM?ISe8|rQKB@#1)|};cC}2%+cTm-|Vs9d{(j5L6f6LU0l-=CqTZFyp*RJf`m5@^h3*v^l34gm{h{)}97!92Nw;dOz z&!R;njB3nV`Z_Ae-rONj)ACm-@1D$RM0-Tf$`(7so{ZNHgMBHfR3R6_pb?B~L7Ewd zP&$!pgy!b||B;@Xv{gmYH!jeH>P{N9nukElS`au zd~4BcO$ixY;GvHLg-$_VL$(K>r-t1w#bxvs!%E?~1>2PfP9Lj$JWtD|;UtFi3Bmi>+&v3J%qb5rmH2t-PM8_aVEsODq>j4)~bj@;*< zw;iLpzsg&vk@7Q#$+nmP*UvUJiIo+?{?MU|@1zg6T==H7EC4x-D6!`$*A>hr@ z`D5pjZ}JPD^W)2<*APb`FwwtJ`=NF?q>cQ?bm}01>fos6@30su4g8ya*~4aB$`ix* zZLzq}i!`et4=+h0zkE!^gX=&g4s;B^O32^9g{Q2qGoOv8v_sSJq@iw#f%vOesFr=EN$2EXFA4W@!QZtQuKO z!VZtJN#*wGX!i#!lh*|bFDcU69RRJOIB3D>4>g{{fXbdluY6OWG+L- zAtxnu@}P|Wul{64H(FlFiS&Xtga*=516Y1#J`(>rHEj|C=&`Of&~<=Xdx!!C4G^Ju zKeuvHdTz;Qp8oJ6qU^&9d zB~GCN(Ht%6GU`Hy=8W{h%lTz(*9|gQ=Zol5`SV@>S#C9gG9hJvf4`_rVfjRnZCuco z#V$(#S-NB7#kS#eYmS7X1t=%^X8clKFSeQZT{yCQkh}idTAoG&o!C%0rCi4x(zm*; znzUSyKeg#|S{n0>AIPV&m6l78jQvS5_|Eac9Xp52&F2ytOjYYjirk9iEiTi!SC&_%9?hRF6k! zQ;eVr)7~RGqaCIV{Uzh1pEcD0dOq@$5cC1=E-1@U{^agOpj?=~SkOhG+CNtXPhYug z(`0@psuHzg6Aw_cc%4NIS0c@y7jgfojAK2}wQrG*3io4Gzn72!Wy&*U;ArL%-Kq=b zbLVENZZNT#>m<@#`*2jLOh<0#X6xbapsl-`sU>X%TTsAIb`hAE*AqMbZd0=axKU{~ zB+yuJJ|-ZCi@t0>wZA$)N4PNg%|;M%yhkqvdf^iR<5z z!Abo?^4Xw?8MVSx_c8q&XOw}3cns;fJX3<8(wVNBs(eXi*+DscW%4SyV!+Z6XSJ%) zw`+R$5d^J$>e&G_Xw51w9sgEw_A?LSxSm&SEh`3Qg*++~27*CDsjBI%lmoN|qh@Jn zc|BQz(#G}@gRQBf;yYl&MNG@Pq%8~+3#~DoRjZ+u1S4&+DQyd3nH!N?EokTmkARGL z8BE?dHiFLijJQTWcYAdzCB|k>h>3Ut7Du(2V>DoTfiZZyt4`coJr3_T1Qudr1_ojW znK({fe4V^f8{d}YqJvRau-GJ5a^B_$z+=-gPM+&LX~%|CcMAo%-11r=R>(nmqW6r$ zVKo@eai!Zy!hs{y1$FuS)5@FfR}0w8Je#s#;CEuchhseyQw95&uAlZq7r*{eWeY{26hdqne_-Y*Wm> zDv}*6NTj$M8t<3JZbD#Jcw@>_)vl&ZwTLy|iQp6lXbsdCt2)|~-hS z-D&Dd40H&WYA>8^X>MQMkR2}b^^mmgQ+AtBpt$>=3NMa7&ra1viW?(%`JAJMa5yi4 z=;XUuV04GfDFVa}`hMj@3#Of*UKOl~N3OS6h%c6+ z$m^SDA64_W=pc%@+=+b%9NX;Uy`_LrD2<6C!d(dy zfl8=*kx$#X4ZBSJrgtow9%Gqw`0*8pc69pu<{pT&$Y~`0DjhAraD^F>Q;^uR?cc7< z3{oVr0R2;3Uso+q7UdSKKzd73kG_=#2+DXSXI|F3uE4H*##wDc!-?)28iP+xI?Vpr zT?ST?In82Ssn;+j#0pwl#YG-uUX|uy6-JHvQf{Lh^DC<-Q3q}^du*&MKB1sp93$U- z)XR%t=?K&zFJaq*i>IO)LkOetc?2Z5@$><*c8%mGh$=E@rgc3I17Uc{^b4dg4JWQ) zZf%~YlaE+03FkHK)=JhTcq+t0?4{qj%-VajGbV1pkMkA@z(r5=%$A3eC2t5n^Bb_% ztvREMB@($dTPmK57JA`BS~hybbEq)l9eJLga< zKFK7-M-uTT$E18*ghHgU9rh(N>wtPM1~l3DmjbXMfka4E`@q*^T^B;b^HmMzu6;4k z-?g1cxL^pYFHHaG?KPhm)|RgTT|n(ah6>VZYmhO!ERoGKCE)<1u{CgtIW4nYIe$0SSOaw=-q>}jIF+v1#UJ%)X z$&ikQyNcS@(cNd=prM0~%ueCBizeamxJ|aB*SW$ta2rJr9Yqt=r*|y@ivHy<+n2&^ z#r7#Cj9JyvI2X3j%T_P?sb>xmYcUY5&f3W*&xGOR%&*IEaS$bJj(KEvr!$*(QxTI% z;H<~tGvR!U+Ad)L9c&^L3X#blUwa|ZA39F5J)%>ge|{1Gp!vCau}^UNfJ}1h41I04 z-gz=>P_a%DQMupm#4ZYV2UlV*z^}rDe%TK^)XCWaOn#C?Lh0F%GOEzGhZ+efy^JKZ zA)*LBPC~GVhxZ!|qB9<%a&%b0;dPyD`Ub)->9A%<`2TBQup#&4a}sp%#b=KHA$d6o zg#`+j3CkO!6az=7{u?C^>X8ifaUiX3yg_oqENvfIaxTN9rE9c4DPNKxD+eEKNmcA? z8q1pN!!4jyuF*JUB%kpvFlUwQ!;R4ZL92wOOT@BZ>Qi0(Jf7>i;Y_w2-LG|ZGPPOt}bi~Qq$(w4j;(@XA3^t zn8&zaWpn$Uf|q1iw@l!*DSztk^mSUtzK_O6Zch9dRxFO`day=1Q!N~;S^h(6*ZpX! zefX?^_IYG}#vyqG&ef^CBGT8JldI|>4AkC948uZ~`jQlG#suuQZO=4UCphGA z+=)Oa^1ZwB#bU3Y2_>=rZ@>y?nv)t=)EapC=RfcIpJpPB(1KC>=6yxt%-wdRJZwO?g|_P3?k|;&GDD& zs41CWPeS<0_u`gj+pu-aD9RYaiQE#&ILGF-DQ?V!x}%114=sezNBfnkwr9^YM(g{< zG-C&2uj&3A-^wu>o&S*0WWZxhUDo+IHLp&)cs>2}@3$Vfi6j{-6dq=1oWbFr{f z=1NyB(k8k=*ez<&s-cTU#fp+u>>>t4M`3W%37%jR@iWH+HChht4^)%mRQl$!${#_r2;FD$GldK!tG^oa0~ z4kOui7LhC{jM};ho@W^jwEDNkhj&jWTNNj}@g2G%Bcbs#X=En8`?!$B(9`N!$c3Z| zPnya8HzM6Ly*YE$Jk&q42_T(6CAdKb6sVoglqag+AU-dAuiYFcDR%XpnlLE9m@=g< z*gQ11TmAbUtpZP}!dz^2!=c`|)Pv1*y)eUK$jPbr7sw#=oz%o~08M)Zl!6m{w~hs# zi$U(LNm4}Ooy-~wa*dU<)M78+kQWe#0-XAdIl!DvvpK&NmjAO)bB8A{s$f)wr* zDfR69p82zJmR6>08FL4FvT{E0w_sr8s)D6t*ZPFN8v)I}-NDX$8L_ET*SUBn6q#Ul zkv4_qt559-e~>qZMd(aM;4)n9ldbh2%f^rhPNURH6Ygu580>b#*?9s4IBg`j)9@Bm zA_HR~@|L}RW#gBQChiQTm|!^^dPv(Ci?QeTFQi=-HRmDzr0eU0tPz5DxOUshEoNA+9%OZfFJO!YX>!Qi+U?Q>AM-OIMKu_CLV zOGb-yfJb13GSN2WpZ=t1C~z{7Ui<#~D4nE(l zVG-;GF?kCL|AD~DDt@esnD!_KRAe@OLWK@#;DvUXz>}wudH!n%x7w(_3C9Ph^!%Ck zlUpGwC9NOu+F;oUl8#+w#$OiGQ7f9P{iZ-Mmvb*@aRs2>`-QT-OooHHO}^n%^~VZK zirFOcjCnr;B@RV4`eKi~!#x>6kE+P@Cp{HNN(%R82W0$XxeW^w-oM|XS>Gat24P4h zs!>jOC{G!7(rRgc8vX$CQQTVyrMBUo{|@gxgvu!Qc=o^KClxDr+j@H^F8smCvb-P) z1fK0OSXXPib}Jy!Qr)ns;{CTs-NjtcW&SxB!tf+KYGYl_RTKH+$IdGC8^AZqgvMZk zqH)O~x+s%M|5k)jD|8#dv%9ztJYo3Uugj99mD};zX9y4oBBXMmvd&h7_1ETr7QUQKc+`N)~qJ0?rfP~%iV<>}I_*aN9tkG1+ zv6a9UsOogzP%?p$-#Y6w?ZK}2S#X*FW|a}?`1@VmWe@5clP0>YBt%{wYu8S)G=$e- zAzxWCpC_Q>w9s)=i=dJ>M(jCB2KwCFwuBPwb+AP*nAx93e}3JU{BcBRo6DGk#Im7u zs(5p#hfnJ2E-ZN2Ro+_>coWMWL<0WyN`-Ww^PDR1>CChl@0JLd@pPfArR0^d;y)~{ z>kygEXG(qa^lZh5g3-pI{m+M12Bc`|F|^77_CEpjLXZjwZU{#yp^n7~@4Aa?Ik2s- z{X{jvj^=b_$ODZ#M)6^TLYo<)(i*{?Q$e&{n#4lUuJ-zeJcKb8tb4OP$avpACp@2# zboj1c$~z6$rBYdNh1Osm-Y22lrAZ@S`Qwa`kK^f=Nz&m1 zpoJ*caTXxn{6IX8R0h08z^1y$7t6t5FkB!kc|seRnjWg@nC1wR%JZFLNw1V{@8Zl~~(?K<-s zUg9d*2ZB8KTLxC%Zmth0Ps;{hz@ChkR$v#~JKTq`SOjZSgb7!ur(`NG0*~ig-t{dY`J)i723JF}`00vbl|mu)m1I z=5eIeGld?NPIPbWyib>A$MQ(2`MmE8WnBY6hMuRwZNX?u0hudm%s&bUE$1h>4fP zw^r`R2L(NCyND9g#YV>>@v+T;dpb3+hF?@`XghRnIhv54X!el`T&`X$xb2lsUQiei6GCaWey=?||7dtORLWUwl zv5ka;cG4)tRlAp`SAo&lpU3al&vp$xZCUob5_z!Oy{v_{c4F&$Vk*wn zwu+mXr!QMDE^%K#PbasXND8(v-X)$Ek+a(P{?C_dOK4~~p~>pUB3WG0t(`-<9Tr8J!B z*xFi0{fx4FopUe=m+fQR@bIC1<8KNQo=^^N|G$*Le@)+xdZD|ib8hM^8`t`zcT3hZ z#!PA=-+AN>IhuTWAP~ADs)|j)SeN;6l+nn1^aXX#kIZf6m!9Osn|^}^>)^H5NAs{^ zVC=Z_;4`Nu68vU+{H04b;2MOV+RhiQA$zvkH`p0iVdy@fz`(U(gAQtf*KlL8)ITF zEd2yw`y+Gl2m~RG#W@hexXbspD!s<0n4E4w+`Qb+!j!W5^iS{JX%ew4yiO})b94R9H z=ECCN{dvQM5HHmQXT%U|(U?_7ce+K`>dfTjxjIThuT1)59NBc+ASg7lo#>r5^)Gj{ zsq&q@Pl_^;jTOr};5)CZ8VsnsFqN%!x(+Ti%U3@ik`;#?!aV?N8}3~Gd9~JN)Fsco z#jaJH&G{);5x#R&UwX%iC?`;Gs8f`O5>*;Nh62+dfTNA*R`$;?0Y#;~LI z%{C~#I=>I`rvB1XE5d5HaHpE`uc2sd1X?2peGu2SNf-t|n5~_x3Qw7~3MNfHujyiI z%2@Kx!XZiUz`?_h{a=b+Q1A|`y`o85Dg)%Jk3t+^Ba@E`4sf2cuDFISnz62B*?uC} z_XqYj4T2^W2~;@v4&gC9c2A_PWLBGukb8^MYCCivq1UV?u_>VBYuA}(g%y8vtv&A7 zLU$k+?@-)Bc2w2)>Yfw-BxZa`i<{iD@%Pp_ejf2r6?4oefsEF$vQuBbHnd=bgpFAm z&`3dQ$vKzayAPGCVb5GP;W_O9wn!U)S*6`uMDXTt$0m^z!;WPuBLlFr5(5B$)Yfy* zBpHlQ?CuXXUULHG^#Mi9-qh7Af+uyaka#9Els!@{Uw9B$>AsNm(Fgh|kxj;*yTiry2S z(YeTy(+1po6~o{8<$QM1cOjNRmTlexJx2{{B))MvhI5`KX&8w2$fH)t~>F}y51JL0FBFl(2gB~ZTuuosSNxRZinpX6?wtEnx zA6W>3gO^xeW%eHqqdu&j+Mi9fE(kqH^DB0q;2 zBfm+J;@&ywrRX>M4|W?fo{JvHyV1LR2%Zj4X#&%if9_Yh$5Gs}d~W9jpy$Q)ToG2s<0@RZbrN z&zyBzu)nsv-CK;y8P__<`w}FGDr*+>L&G|}l zYSW4f3qi);w2P829aXv)mg zDH1`eEHv~VS|xqV3cPM?C$j*9$8|NVnK(Xv3t>+0n-V{ z+NralQ6a78?OPAnTgeXy&y7$6YAe?8>}Zc&!EL&j#$vK8Tfv6YLO?owK7YV013;}; zM1DnRmwOX$vX|m9nN}Fdve9L9)2>QWjJ>GWN~3Tu`K!VQ@JCY5jexiv(IOKQ+%-mI z$7|QiU`zXZ?8@A+tU+*cW>OU}P^n3H=TY5#@*hHl?FYs-_KCuR)NP+o>AjrMUbRx0 zzTX`7gE4&m2e#07lmr;u=mwMrELX;iIKECtSB|G~70oRr(JKu@@o&tH)M*Sg3%vK_ zd`!Hij!UuN((F%~-a|)j7{=OG*5uB76AIe>2iIAhb z;MC9nqZ+yZh%k)=G1&lkVi+|zb~dzP=1NEKPw>FvV}2mokzK-!R-?@z`4aSz;x>gZ z)U$f$Q|y`;KdkceQ`obo7C86b#S%pIXo2vBaTfzz$p-p|Jr4S6Qw$AaMBuG1fy4g} zksV$n507Ur1B{mH{^7*9u;`&Ib^Advhbmwhp0QVW0w%B6t3g!R1czi#rcF;Y$$Zmw zpDaN{K6nE zR)~aUDwm`drPE@$kPGB1I~?dE_3;>oo=JB-+XlnOO`Jk*EmLCMK|+v&s>sOxf%hgb zrzaPZi)hKAFLpL_uczaTNOJaLpaSm5c&-@Le2 z?ZmWovtNe4m$wKgVNKr5p#O#{NgV_5>k}~HRn>;;ZK5{hjc;zdx~p&gQ>ZwZ7jMTr zE$a!7pN~kQT`j27OK70w$x|TMZ2`A`EpW6O4j?pzmVgvKXtfsr08ML7K~35Ul?|}7 zmA7urPS~D(QCF)s`W61&n85Gd4uHf%-NBQaTQDOXmbj*PqRo~ycrdr2f5q>rWu(39N0DA|vI>0|G-6`YTzAXTS?^6{)A;Hm1hX=~cKM@GjI0|{HT zB_%TP@4BkR`t528UGkrrXH5?Z&)eEJdNscb*0c(hVsE5u?|?I>6Z^cZ0NUk=%Tt4x zNH6Lrb%Ay9RGayq-pxjQ6@$nSKm*4$w(W$bDO%N6D;Lv&sx+PEna&;RBVIthv5@ALa)Wg1Q3%0ho6T%h39tA;6qfo(*HK{6(DMPxFKEY#6bVbb7Q+ zjA;VI->tL&!ny=u(~`ne9yl1 zjXwU}n9F{|ChIJ+82eF^Eq++hBPu*Ue??V=#Vlm8^HY7{@erf)ujiU1v>6XC#w}T0 zFO0wb{_I(78TppyK>Va~367c;OCvfP&(W(l@l!bt!wg0ZjP~TQ#7E*163@kWj5c3t zGy%Z}Al?)=%zfW%p+{vb^m{o)67x4iQHu=P?sE4)jm&W#>P`Kmfl|!=|S3o3Ws%8YxWT zQfMLDK~1kG64MDBF5`FZD9=8)2yEbCahiL|(5m`~c(%*RT>^et?OYty^UAElS zeF+>7lp)+ZtyUzR^WSIe4$%2r{8xq**sIqtHzh9xJogB-pIj3)$uXX{Im(=&=#iveV9^H4rhZH$FOqd(!ImV}JvN30y&h#fz*Y>jQKcj+P z^52mhsFP9y5A+{sz(;j?35Ej(2q>H-?Lc<%vq5hBZ4wJ15JW3h!cpu5S}lJ~$ShAJ zy^wDXkv`;pUALAVwIz-u20b-sRB)JGlAj75DM%sFYTNw*4!cGbh5Bl?`PPOn_qAPg z2$uO#o?r6Apm9_UWP6abnX7gcyOEmeie$o$mxy~IgxU1;A`gO2xg+KWHDz6R8zbO& zxXmdM42S+6auy?#;5dzH|DyMiQc5^}1WRxZ1#(?4DL!^1n)>_V)T#7XbwTY(Jk zE!YJFzcf_bF&RSufS%5%$L*^8P`@xNsk=7sn;|lzw4B8r7r=)JEd&?MJCN=HMy$tl z?35a4&iVH_6nLZse6u&hhpb7p+$Y2t@8uPFpKbtP$?+quKsbQ|ldy@N~yoH$FTRkzR+HX*gq*OA5`JevtFZ?C7u7eQYLhm@G1 zPon|YYdm2xOF`(-um6L~X>svJSmFQ={oX77J2T4Xjmc_j2>0-^H{QXbe^q>D1$A(r zm6l^UP0wG%rw{4o)Qy3qv$bkKW!1PXCkW`2u;F1Vz4g5E`!eJ&^!L zrRh`jT+Q3BK}w^tV|}ufXrr9Z8lYYFEp-!=8S>}*8ep*ACY;EMI*+S{@r`y+zWFV#$no5qST6{0R6D! z((E1<{OVFC{C4koWoD$yVR64^9Top_G}X!)`h-Eq8Osskrk}nQ0QW$a9B?Hzz`4-f zC)2+$4b^sYP$6oGoqO)wZ72%z?$$QLD*DC_N0O_W&&JvR*6H--28B@AxUrwF+gi+9 zZ3rm9x^o~*Yq&+Rr5ZHp?gmfIsFp#^&obCU3Qg0HYroccQ!5aQAzVCX{R-_PA6(@^ z3YG)xpwbpJW`qqH7p5Q#?4fjJNB;bKE6(^)AaKPq`}*bC%S(|Ge_OL1E@L0M2~jT4 zGQcgjLD5&15a!!rU;i$1Xcakg2@Y&+%|VhIxFRBuY(Xg5nOE>zXQNhqg#G-tFA-67 zq;z~NK{qvXg&qf_Iz3MW?ox3A4q0X02J8>?H>1W95}(ka=_}MwbC{io&@b(B+rQ!c zgRJz_mpcpy;MRmYXY^YXaIoRRE2SopSQD7*ffgxG>G;e`JnU%OuipG5=4QDJiKb!Dy<-~V=bekUoxsMpi-|b7<(7}1G=_I!=L8Gg-L`p%1 z`xzTBz>^)b!MW<_wngNl7$P+nv^U>ZaTis>G_yd?w|Zon5Z@a~dW<+w?pfr}&b3>( zdV{>ctcx>&OU~gJLkoU#@I{QgwXg~mz3c|ZE;Q}hn*?ZU5_Sp3$cT0VinHuV+I zYQo*KVjaoXBu&*C;<~j8$ZtC9Y7XY|6>$`@R!K~PRpWOfvS7*FF8H4v->&_bxS3e}?T(KuUMH zX(8iyb!nW@h0s09;aeaGejU2&8MyhD{I^$_f3!Jj$B>fXs^q+%4rw-F(akYvpi0h@sIMA~%T{!>bhf;)CHfHS0cRdTQjJp@`#2LY@J?#Fo>9KVWDjsRk`Zj< zcm-KH?Y~@{ae5B4Tir4aVEDX7M%YA^18GYQno*~T)QL0TaibpH#bG)$TV53niUTn-ErcboeqDb1r@{3uRwg1G|4QkJuHk`M(~sN!{ZxLK z2IMA|e{T=VUU%K^sWfaLkjspAu$*-V8>bxtK%`X)H*n2w+A_HTUkDne%#d9P3osn6k0DMbrgjubBxJ-A@9T@zoNYZjI+(m zc)g~_Tn;y3o2uGEKxGXA6&0`#D>Gq-hB+GMRwjhbV5PSQ7kD&_Y5?%jXhGG}fTZxH z&Tk)gc*o?bZNnS|-Crs4u0i6UED&WJuo$}V!I7G0Ai^||@jHw+UXU}qHKD~QIYdSf zvx2>$ASCpt=CSQ@C=GF`dwba^XxiNp$#l(crIfS`G7!WI4G#T+jTxwe5zlXw1%qY4 z7MlI+KC-phS;{(+z7oxPuD;c>>@Eqws*mxfFN|nu69AObyyMdd5v}7Yz_Oh0Jwg)a zBO|oDnXy^5*GzSbT=s!FJklb5*ZAHu;B!tt9}B|Aa*!WqaXURs{ha+c$fi&kJ;)Q( zzOxt+#+N8$uL=;O6qw?L#mCgXMy!->)EsC${kV!GzWv`;Olwz)=$QFjYsFugPF+^1h$UcN`QY_p7MBqqq zVD_wWzM#2agyh-0UL%TZe)=PC-V?A*qwJrGX>5B==Ihs8^|eCXe9Md0p|_dWc>E%5 z+3s3Hd`fGpgEY?&Ef4(hszfE} z4Dec7(IW2pdncNprV;6mO~&_0Dw0U-WFHNn-;?Grx;dM zds*mzCs*EcZC?8}3W8rRHV|U)l5M3F&2>TFnnqY5}b%y&B_~NF9n8`4d>?OFU3=fejgv;?sl^uh{4xtAD%kM6;cl1SuhJZ| zZizI;I{8wzlxgn~lj8`!V;5MRwI{G-n;HEll0VzkZcZ44c8iXQCNnCdIgVdXBtD9w zb>$zyZsMi31#yN%=LDRxhRlb`dh7#dKuI~r#4*^on-izgJ{Q$<#E?&=JIQQsLXiUI zRNSRGE$+~v;2xGe-G9f>sf=gO{Zg@Z^p>|!i|5;x=>e2~e_OD!a{?@lv;OUIj<)tD zr!|-KR88zX0*jJA2Q*pEhR3$9ffdj;0}8f z?tefa|`$ z*A`qDVarE6858Ij_R~k*Ro>2lUI$fb#c!Fyn^|Coq*>KT57~%qa_M{ukP5XwXkTT$ z_hs~Fdepd{21rOUM#hrnZ@Fd)>nIKhN*I^WMca}g{G(j3bcIV`NpXlMx`My-j*M0Z zaWL_aGx@JDC_N2-#@H;)u+H(|0rGY;k96=X=vFIVL)P6}bPtT1Trxh~IL(ho-PpW; z)8O-RPYtc|=V%a?CJ~1f(7({!;G;YdYoB}4NU|c!yt?7KpH%1xzmf35Y~)SGVOfW* zc}xn$Ka7;ZKYPHY*Vd^PDG?$N(mklWgwE}(53Sg2IF5z&UHUK5{*YE8xd^Dojg6Gx z_-p{6|8_R@+ptOYZTGwM&f%h_i0mcSid5P~q(Cl2;Cd|I83f_8509yQP+*@cDELtz z|7bnnJBicauLQ%y<7mN|TxSaVuGTJ_1QFYm8nyGOu*YjLLcBswJO8jzaNLf-&kyli zgCb!{b*{f8{6f;dP|M~bGMR;El)=;cfyy9QBq9fmMb{>^LA!oy3|SeW1QN>_j##%Y z17;0>12j@p`>zgb+-6fCQRP_NhENHR(6*J*4*crQJN+Syus~yb$U-GIjJb@1A?%1@ zaV@R1i;=^?44pQxas>~4FkfLyS!erSWyKxP6mG%Ib-MS7G5eIsl33p{3ZR4Zw~x~O zVq-xJ$KNZL57$l}_O^Z{7H1fBXw_aEw$@F%SN@a+4Rxl+rj=^gNNxjQNDY`o(xKqy z6h#4wB_eGg+uz393fNcV7knZ@xy*$jQ6yVKE1>C2CZMxW@H3*BchU!fcnqH3+~?$2SwPPrP;sp{_6ybmD%2SuD7^Fu;%vw zQ{fD)lqPGjIDEMUQ^s(`W;I>^8r3HI)oPA+_*>GWQ;El5?Zr6G!dYKL8Q2lT&$TLZW_ql=C@aoC0=Y#=|l*na!e*Gn#8#Ja2I5XOi6#{^=^4>y=rx- zo6mRB_g9yM2>)@?AygVy_Ee)p0PqC9ms@T5UWmxFX%T;5xKRcDA{C=FWWkTCNf^IN z3rX3!77zokw-V$mTjb6Zi<`sG=7ji+dwaZ=O8Uotqxgh^mpwh%t zuT=`_)4jWE4O8SK<=aLmns=K6oNdKM<_@(nK;h_E<+%LF@YwDc5&GfYU_g2acbon! z)zg^1At7VxjZ$cAAgbz`kq|n;N9Z?09B$GRJ5_dGTPeZv^lr&^`-X3$7m}BjU$n&cvv%Bo z$40!>b;5>2u;Bj+a`K({6k6I3DlIN$dt+IN`5sf!)Hs$dL=nz7-iCM%1IO!;t%Ko3 z307!}KyCXRR%Y)X>~e*v=w4DaR%Hv5m)j72M=@hInGc#fkZ3z;X7Jw^HlTt6%_o`@ z0R$G=!;3cHwZddYF0`j%k4Ui?MwD_kjpbQx19z&HzSPFAV34-=l9B5;Ja4MM11CfB z(xxL;(*|u%;W<8IpW(;N8>ijK++XC4L;ii6-{61aKG$b>P**l|Dlv@c1Uk1agq9)@ zQUR$Y-85AKVNCv;2#zVDmx740$JXb_GkO2@)lo-T;K>BHvm+d-9vxk$)7EpA8|vYq zyc$pm%I~hR zD0t|sNN4)xe2wWPnVsfH38!Ry+k~>h+b#=rCEGRu z1SP9+=&%6^ja&<_yPo6W{gz>lE37)N+0aMmuIpxJ(OyGuYbDu81EN|bKW*8&W&Pob z;d)qz4mu;WvbXO&&0aW>ZiV~?)*lyfQiy}9IE9RuD+bpQ>Z$Yx>^HJ(4@;X6$MZ~; z`;KvCr3viA^S`BMbSB6M6e+Rfh^*`?@8(U(oG`Rn&KTG`po&z+HIxJ>&i!rX zKpI$GBPjBEiC zAB6wB7QIbLw%Rl_=A(Ed78~}VtO4b%WT;*j_26j{VWigc-8n>z1KOvJ^Fn-AFF0=&5Io}c!|;k^vn}QX5;FbR!fhd9faO9`MW(#aA&5tJAaW(53TMM6gh_EtjiWkQgS)Q^(a|a&q8w?mo^h?FQ%xhUT%KmoLI8b&v zhrTkHL1>YG(ub1WH+wojS`$jIxiO@H%YJB3**&j;0;x8{^EaAr#^|_m-t^fDITq(z)XNJrE0=}WV zROZrR@s5f-KC~KLb#|SlkGr^bCk6JY!rN_M`Tz@48Zrz&@OVFRV?W7Z1-cK+Jra^w z=2NbjQ-g=tnp}+j28xXkXU7WHFKYs{W@r64@5xA=YX~V)lGGavmn_@-L+5wWRha(m zJ4rIE1%Xqq^)#VQPzz~47my0%!)@716!q|Wh;h$Z#fZD`GvXu0&(1mZWpVe+xMUfV zBja8(1J@#0UzT?4g2NsU$){B;g=oYsgz>|y&>vji(-4nkH1RDAfVY=U#vWvbbDLqT zIdbvzJ9=0~;Jp?U&8;SCQ=Rw8NwhOYv@Ls@#GX}YL?(U}&oDmgks1_-J>-EOQ&t)5 zUj~fIcM%XuXzIdgiU!@_e?@m0Z*2g~4C5ybVzf8&5UclWhQ1>khAsHjI5fZ&d?x{#&mME*ftrn<&^f@J0zJ*NnGLgK#NXAv_TF! zS&|V8AW1o4h=`I}5?`OBdQ*>Z`za+en(A0xTPmt;`&>!2Q%~Nc=Gvk3s-chMEJeAe z*h+uKP}Y%&7IE(pSs>z>fqdTsTLLib!-MCV4R_iFj9O~PD*>XQDWu$f zvb=-LAOp_KsP^y(KG-YSWC0es4Gme(nRP=0z=@L<=7p zd#0VM7P1%M)ATkW$cnCCleLB7Oz1X_w&4GmHC4O|TWZ$IzCu?99Vd2?QAdQ_uo}+0 zXt9=gK*nxqDjluVS$F5y?i9b;_9bFxzTcYvl7y=2G>Wq39gcFf$dQQ)rd%r$`O}sKu*OArE-PT9WMt0FcD6+ZZ;Y*Wu}4fR=Xu)}|xa z5Gahhn%yP6@kB(7ZtT7Kp%>Wc=|{~Vij29l`1#w|`gWCr5gU*{hRxH}xnY3l=Gzy# zziEI<&eZ)7hAWwqmVc_dxSFq6jloCrY<3~g+zzyeJ~4D4|3$QKUv#?PhEFvB>xm_l zPhPxcfIyTlxvhM2$;P6EMKhynO69o1QTg8onno*jA;@M;V`GC9ljE5T4RvW0|M&U- zbHlo!i8f>gYi>%m&&X$tBS$M3kc6U{La?zBO(g_c0h9`}_;2T@^XChMc(2s5Xm<}Q za=2jd4y8pLJBhk*&uxlS)f=WpJBuU;l5@o1T7M;NW|d=A3r^(RMU*1??s40?jE|u# zN7hQ$i8nHyp?BBVSpbtWw*lYcJJ!C*9S-PR^i9xyo7mrJ#=uc|_DOJz{=;(YYN8|U47XXeh#x4!q*`|rg1<;skR zj2(Mt<~oWJqM`%3KtO6DKjc;AIfz>R_#HbBoCQn+1U>`8XU&!(K}M3FN36I?T zZu7y~E)7TAHKqpo>Z{Q~V@z1<3;RLI>nr>6yf=;{yE-0|(|zV~|KR+^|B+J*d8T%u zmtND_eU|Olo$cH3=n5!%JH5L9a4m&=mV4+0!_^>qjMeolW5U%1Yt+~hoU_xmV#YJBW}Kz`cZbSHM}Z%^_U z`u2alf0+VYUv2-G#pka3&NKRR3UGVn{mREKvM?Y{RJQTrKDroh}mq!#IDW}%j9WH6M>QZYE03eLR>(0 zKR_ZtbuB#P%)dCbv>x=?aVjRQfkZH?f12cNdFOvq8J44@9{GCGx^tqkT$N}n4)IZe z{H4?Y5<{toj98=?0t!_?oGW~Rb=#BQQ0bQ>PHme}+%z^V=>WMyR3;Bt`mn%!`S@4> z{Sw+caiJKsU$WMA&QQZQSsd1A{KL?dNW`*>kJ}z`%`ppKw3F*-OY}ZmD7dCCBKuYK z?_t_bk6tsRA-9ywrw%^5#pC|*65w3sOUEKktGJ=2dM1qT0ZKX-rC?GAllH@ zA|=LE_2eM(s8yhB)oj1>4k4*!$0ilmGh=DwIKdz}lhccuIf;}nsjR2O(J3>Zw2C2} zB&5+$l)%9fdj-iE<-e-}QBt_-zFk`nbUpib1%Bgyou@DI)jCm@U#mc0%iB&6s5Bq) z|Av!wgkS%t2@8I=5ZZ# z)2XR3lIUz1V>8uGr6D21a5cJHuIsZ%8FA@{rL))--hNey(C7DZ`H*$^dB#Cmp}{Cx zu)-TClUC_Ktl@wFP4*aMntq%g)*D5xuw$7pe_GICetP(LXtyG&W>DWA6JNr$ZchJ^ zg_d)+YOcwO=$6+5Q7wCOrG(JbUIe`>5q{dgz6Tnb65>P3?iP4Yl8?)ekqW!J z9x}@RyOdu+0}STMN@l7Tk8eQk#W_8i12gbEM8ZKz(b<>hj`v{n zH#Nq83RCV=lb86(7zTi0=T_14R`~)PDfy#5PqzqG>NycvUYP_IpA6K}vyUHD3HvDJ zuya_c*8MnW`P_WG&Hce3#SY`AH5=%!O>?p6O(EW@Sod&>nTs>296H1Bsm6g3=OSYc+c{~Q)szsabznuvjGSB zc=XjrlKx{BAU89Uf7bDzIZ{;1T^Ee`b9$P>bDb}4$Xy` zKcjCBi)2!~uL@l~l9_3DqgeaHwFjhEP1z}(lfq*~gK-QiDl%o(zekdl!fmXY8mqvZ;Yxo0FmSK_jZ8 z)7)znTELmEBT7xa1<(+d*Oy?)TXdNTQh^!Nwk$rR6l@PHr8T)jCIuJ$f~8qO?lA*x z01jh^cTeIL_Iq;h05bYV&-w=*K+*LErW@?gw&?&JH%l8so-^6~u|4yEKFEP>TaRyB%ycXi@X2E_2RJlIeGZ+fBGI);@=h1;+lgP zn$D7&ZD2(ReU}v(QFM^_ud@9EYhZ$8Hf3*nlG=PY4+(9S#C#bj+YxU+}YQ<(MLZ}n^TofU^B$qYO7eLNCMp&Gj$5|oQB;PA>LN7n<8=pD@iZ$M_B<<$w@?x;%~ z{!4>IvL$*N?&$d_6#p2!9%C6%`m;y;!LtJs^WUD3fuYA)h-@_096qG@Nc$K*s9Fjz zsI>YoPp)}uyOhi_tZ(Je{vF_dfK(0jpN2m|d#%IS3q3s9u9MK2lX5LwCx};26@xcG z)AK(Y^uPA*PrCWXMy~N-{R;eVjqx`z{wX;AG;qmmO0p|Nvj*nWKX}tTpymzAXA9fv z{}IE#r}`(2{bSzKhaJj*i&e@c&iNJ2)nERGuzw1c|0!qwy_8NPa+K8RiX`lDeTz9< zOIUxL z9{wqx{=J@^G+`#4I?krNuU_LE|CJa?*^^AMl#hnhAzf83Bh~-QRr?l~v`vA9^*E4A zhw?-uEfQ)fKJ$kwkY5V&Ip6*$=zl})zl}o2cn%B>7_mMy0CHS_Z@pXw=6|sN-?;ia zp{!!W550n9zr*GKP27Jft-o3PFGHf%mWOpX@3vu*qx-alkdfsC6-^QC1$ zIhUWIpz?@eUUqa1wk=x9PuGKmv5WCEOhe>3rT?wu|0JnD>%WO44+VC6;{Lls(ifWZ zzX|MbZ2W8B!2F*5RpZV6O8V$tEPnN$bkf+2$Y|yLKQsEDs#Zd3eR*nQ1K51Sfosyo zpDk@{GZ2ms8tH7fMQsHEBg4P&=l+-1UtsVNo9c{g-?`;W85Uq^s{*YN)xP5*yi8i;_t0OLqNKtSN5 zlMy0hU!=9Q>yG9Ijrff3HCIS1ETDAVzQHXcxGRZtp)F|T{k?`B`>!HEzc^F`LdnHM zID15mE5AABZs@?GGP__{S`sr;Ci2O=K~P}h-Hnn!YB;VvhWa;&S-hl(P#vodQHa;{ znnl^5qM?YvC&l`b`9y4~j-OvO=lfY;qE9CV^l+njcuX2n&2I=^V~Gcyw?!1_z}7KF zB2BVtcC9-BPcGHmGdbKQW`f77t~Ud|f^imyBxnUp=Q14}q*5XF-o|TRNUP>)gg4@s zzpDFDC1TVOh4~Jib}+1`8QS>wCesu=Tb<6XVtr>uYh$QzFrKQ6n5hXkwh2uO)LW&; z-kz<^Opz@Sk4Ne6*DSqWj0e(j=+_tYBz@a%PHE3Y+ z(u=`=B>GWbvLP>;e<9vDcnwSwy@RlCL)l*q`Sf-7%7#W<4>X(05^D4}K;I5US`goU zKlt2A*J0^QoDZFeNb$AS%xURK-=UI}Zuok;cBxKe;)D~1ks;DIRes(}BR&_@IK~u3 z)eCrN0!p`^&r<`A_!BCGj`er2&^_(n3DJ{lSwUCbNAPCYjEOpj9tcZ@1+QE@C)xl* z!D8Ghp@i$$TTFxl0zlaAZY1S-6Jb)0p?sXOhx_jJW^k!dSaj_7no}%9oUMHY z)r^h^DmiN#tB=HeVM^aV2G1MEC<`lEn-EN&Tt=>$cN>}a)~w4h#>krJ`a{MAiIBI% znn)QUryCQRMIup?tt_a(DKn-FQX51vDUlo~%zTu&PHhJx~i z%D~|ZhPW%vAnhq4&F``R50!UfasokfC*z&tEUV(`Z<8%IOXM8O>R)cg0Xg8Wj_rgC`rjyfk;=M~g>%8B~wD^DR z?&`Im=#0Y%Us$Tz4@&=LtSWKqSxr)q^<^OTsALY%H1HU|ytWYx^aYJiCLkEHg?WWq4e1flLt(e@t;8 zJ6+GBCyh0NUN`V)gK4{pUtHp82f(@B$N7~0<}O1{F}x~7)iC@TmGvxaorG>xE8;;E z8;$>V$6oV;|cr1I6}BwF*CDQAps8A~X)4q;qJ{o6vQ!E`urz$Q9c3d}k# z{#@L&ST{XtstE?(8Nw6MmOGt64+4>BJpCXIroPu*aR2ahJ9evzjY}X4 zfw+`<*k(9uc~T4}z4i7LFVg{vEb z_|-y*+pIG+Wr-9}_LEFuT^{=*hF3~<_3xwpAPhC+C1SsPzITmDK$l9CXC&w2<8(KC zee{CRF||*doFL@FHVrs+c|MAUJYz48tK5$PCpdY7`LV`LVFqAsKLt1DQkG?RXxrO{ zv1B=_K?>zw3qAp(N%$!0VFvnW3jLK~U!rf*5D_%Vj+>bT716*Yz55o4c6SOglE zRF`fKM5+C?{b0@7bRO-rIdyV_r#RxcjA(Gl9MdrE_r}}O)b&X-k8s1{e0{vhHiq8rB$R30GNYVX%h`D8tzB=feY%sKYB@3-E{@AHyuR#%8Y6qRRHv-+- zDcP=*u*Ezr)5#RdPp}+w(x)#ytNv}fnZTloLllPEv>;ej(Cg!X!nS0Cemc>x(5%Y< zfzB0E8#{HE$q{kF=+QyL;tukpVlh{jA2diNH+oh98V+GAxGfE_2L&0*WWsl#^^@ZD zcG+FWtQHjWX|&ZY!-^Mc#r-Gni4N9Vp*DJyBs^pAj|^=zh6My`S;U6qWT}@^185HB zBt|`*$ZvI=)_KyS)`zdp=S}-FwN4qdz8!#EJeAE?(XGf|yJ~gvd{Ib#_7gQltAgQN zaH4KGA0pQ(pMm82K}Q605=Ds}=i*XcE`rz#|3Dc_JyrFzs}$28OU z61QQ8pFDM%mXxGSHCn8({1t+J{UIBGfWYD?lpqFcP)|Y%BNX3ar8PnoSrOnd)lY8< zS#Gjg(YTzn-di+A%F3?SYlpEsZQ7qMz7G+sSAVv{*@rfrciZ#<1b&$T-q{3uBCpAV zzUTc0&KNa-GqdtDxl535N?{?2z|7D6$&)5%Tsg*% zL09ulJ`C+CQzz;M_I7L~Fc9}6GhSBZp~bOry;~t%Dy62q%(Yn68W*g7F8LiYS%=Mm zoiNs-1@G8$=a(A10-iV07Z4;67NC{R)i3UD$ynOj@C*f&tKlvd-YH9{?Xs&cT~`|G zhmsxgNMcua`2r;qRamJ%C~0%Y&w(yQ+%mq)PRjj$>kFi=Al*$ZijGvOSGwqoQzsKy zwC+QEuzUH-zhqY+UrK+__gT5v=>SuG!YfeVcXddMZwn%P3MVd3^BW)D4|KCk7#)|~ zrhD%V!LYTz+NxRvzoH3oT&4$~9bT_1hVdrUI#MZs>z4R#wOE|68q(;0Guq7JLQegr zsyz+LA1ip)UshJ7R#sq;*Mw8lU&$fNn>39vT=JH#9eIq%#y9&e5lF*=cVp&+YVc_k zD0X2}bDi0tv$CnT&3$ii`AJ9<$w}wsdEL^K%P}YM*KLxd=2Q&&SyJm zPsEsvtDV#b+PVAFqx#|6m)EW<=orIgqP!>slDZA`V;npY^aJH?g!&!MCO&@b;m=1z zleCdrb`G*v)@ngy5$7mrNd;qtV@2o6v`$D!{a?!`uj&CXzwa=bCdP&T7y}(+0L*Qg z@w-{lre=zTBfKMHe~BLn4?=tp*6f*41s}&)SY-1$!~BxbGr}COiZDc)B~e4!bG^4Eh#vl6SD7-g^+uEC&X(G79?@^3_dVRI-9fJq6Ei{E z*;DzcXj_s2lw}y(EIMOG2aa9_%Do>(ltCmL)yFEx!E*AH;E#s!yY5(YUaM`7`tg1! zwZ?7tbUgAgi?ZEF*^;Apz&CvwWr}*@Fq;p?-Y!tY@gtJ6tuds>%^ZCH{5a~n?jeLr zTV29ch5u`F#^(=_-Iceu${Kwi>mz{IR$L`uD@ai`5T>v=z9a(U8(8)`-!c)|JAxe8 zcqpS2_HNh+yBMLBzVMS$NE4rnR=^QLAh+eB^#LAT|9hgHz|yMNY{q~`pQkpPuc8|m z&Q$+PQ!5+~f|%9&66)H{Z&4E2g8dAck0v%K#A6!nmlwZ#dCT&pb)p2lnJPJ+9l^>A zzFL|O2UfJ+%W5G+(70Wu`fZ+AYWW3h@03Zub5cS7(Ow^(dty*6V{&FxXqn-@s1Hu` z?AL<;MO{zoG_*sp;FCUhXTnG9ACRm)n+PP)P&n(<)TybGHhk!?22{>r)|G|5jA2sn zKeo|~|NKUBWTq}yU9i@qKI%)?Ov!)d3b(-;5i6g_HPE!ANWP@RL_HSMfmn+3=22OZ zfPFrLB#4t`u|$tN$7EX>nv<9QP-dqf$Haop_G*6}P8&hwt{dCF1wz+*)ONAc-8Mzo zElW&5e1a($`~#tF$DC0!3bE+dhP|hL>AWiGTC{f`psO&E$vnUN_@!HBo|cv+do>Vg1$lk3+_En$N83h z*|hFOFUAU_alri?Y1FTaS`RRE9Bch$QS7)^#0usVCzU*9OPFSCefX@$z9%?t1y+za z%Q|FZ=Eyhryj<{b&&R17pl1oxSGyZW+t6XrfF69ymZh;#bb@J&)uNlUG!dv)qpfnr zx>bUwWkOo8DDP{WYtX0_7;-#v^Z^br=f1;^5kwHbpQQbtHEt*8=SXfouuZ}$V@G(K z1+~+%HLJ&U%`}ti`Qx;i$B~Vc(XD7gmR9I+jM`O48p-*iW?PI7wpEP#d-!i(J2=6w zn6rjo%2HQqPu9yb4X9rnK*^GKy`05;+jk`9B=I0~qB@-}zU+$_^oXyg?zMV9!Jo ztJE_}5YIX<&sz#X!ZN-US>vi3faQta z@)Ap1;m>`yFA=()#|oZQsgGW_H7N4f)4?1sd6xfSmbn|n5Q3ax-shy%(r6RPBDCTT7fn&%vt#v1G8Wh?YxQCeUcsSfSnn<$gZABnTN)+tS5@qu?*CAn(01JRaTGcv*anX8sAn z3Youqn6;C8unId$QQe0;Y2QN&?uQ3*(FKCd!I#y1669(e!1UtRP~P9Y4aY+8EAVJ4 zD(_gtdF*Nnu>a}4cofd+>Yg)@F-6Mfl@?CsMv}Io~ z0=e8=%dM*@_t=H`Ti`r#K3|p&-EE`TaN`+xJzY5SY@ePi0rWs({WSL3P{WvGBLgLF zSM5gyS1<|}NEdhlB?2c9MR>*?fijx0*X9dGDJlf*VMCVZ|E#_~1UkkXnsAm}taOkb zLy{2)3cp$`$x>d~)G(@%17M+*GdYXh#e`$5SEoI%qQ>RvN zLjo`a!W4zo=B^)V#k{X~;ggxG3huLOD|2{qWhEO*tT;W%jx`nJ58&3ESN2+fw*#0h zwM@d|2r*cGqZYHuQ^hm}oN!a*)n*XGxDxD3cPksJ0MwqmFZ3)_QRPHD|G?JFP1)Lo z_ZWt(j`DUY$iCXI>snKzAqdCz&0q0H0%*9x2WC>TJd08AF0x$sn`h-26V~r5V z-#m=9W?C~a?v<1m-Q~}Mz^)4&IK|xsj}NauI@d5WP~<*8(@(O=SG1MVnISP>fq-#1 z%CyYRF;;Gzxz&O-n$kR3Xzrb?qsZm#3PBRYqTeBDXFf+mIeNheu8KTtyJTM$+LM!t zFL_bfrshcA7s9ZtqX_XvcXswfA{pmw`N0w|8q?+?U=Y7~Ct;#1*_2d^=*njSv)Y^+ zEqlqS|NKf}vKwVyP07r6tHH=bv744)B9q}`)12+Y=d1D$Z2u8*Y3D!>%NL?4-RIk) zFIFS!vw+vzsLPY2O5=O0H;o5nJK42I> zWv9Ed0td}1d~Y>$;{_dNxskglPr)c)fgYVG)xZQhy2!bzio?mYAqzfvuoLCt94(>8 zV<^u{dqcizMz9!&B0?$#iUGyoF>f$if4tU>IvTEVQiwKM$FV$F#o-w3zy~tC%q_DU zb;_=l-J-3YZasM3r55(?IPEC#eN5rqc@?ZSw8@KABIikC}Cd=Zy%%{F}ui{$c2qkXY0w{+Z~u%Tnl z9)K3CCixa~qR)sJq}31vv$QazRBuL-$|_SJ*Ur0nJ7>};l{}rp8);0)6RY}AuP35$ zU$-}3(MlizD7fmX23tw(!I0$KbWZ%i?Q2cH#gF@mZf=v0eIT&sS~>%S7KlMhd*lsX z{H+6)s+}90oI*Q|Kj|~)uqU?nB73-aB+S!)da<=&+R2w06&P;Ur!NjxEB`c{42>5` zbO0A3#ziX&VXAQe2lQ~=^RG51T-|VnidgfQB+h+_d!EKM`gOR3_=J0 zwC}dq@IAk0CeV$j#)VWfE30o)D1-cNu)&<%ekwNtg(x!Q*+rCp_=*rpc0YZB0Wm9U zZ<3|+{bbuO6o0nf2ye6I%i_$;(9R~;hWm)eCPx)SB; zf=>u}PNtO`ro#84o(IRx?YBUxOeALLgdVAxrI;jN@c=m;YxQ-L_{jL*IpDB7Sc z>HOuo$MyV=3)E_&(>!VHM%MhcoN($vPbVanjGU>~gY|XQq9rbYur03dAotc{z4igu z3`Gw2x&6)rs+S)zMrWKemMVtbK?~j=Z*Jr(1YFZmbI++QZA^|LDORnR*j-e-+l#=7 zB?mJS_r?5u&(gQ1#u4{gVtWRmNj&fHUQzbJ+6 z_#jYL-Rj@tiCpeADUY0Z8V9`BrAGIdD|P7h!g2J5Fcr%~2CSDMn$BeyRWYiZzyCC( zwkg#CxE5I0T;euXRI^G+70*AJT7uU3Qhb`hbl_yG7Dll){j&N)JraRUz|%D+rHEMv zWut0yg3nYV#))Nw$fX!jH*5MxF@VXi>zv~x_Ptc9dP%R*Jh%$pi76e2Y3k0uH3far znP+Zj<+6f8&W8>JN0&}?a>(kAnLTI7 z>}bm|W${vaGa&N9th$Xqy8Asn$@RMBSxPJ?5-0Pd<_MRL>->z%(dh#-<$_Cpsbgwn zHnT_(L#Iw+ls7EPG8nYSZJuUkqm69CanG1+r`GHa^MCj$Lk`Y75r~j$Kf$iPvAg z%S9j=F8BwD!WSDVL$QEKBXGVr&58zShlCpf^K+oOfMA5eXRQ}0Z~7g`37kQ2G#yu3 zL^Tpr{U@{Gc~R3jGzcC9a24C!2ZG_c$pUc3VpFc~D}wkd_;X-@vlMxTDb-OkdP4}f zf>lHeX4d@sT%wv8sT5PO7IR+RL!F)Vq`%|gMH09W&H|j}cRVMyl~{BU!q!WD5aNV( z$|@7@?2NGq5JNOU*5wDp*)*Qq;(FLeP=V1%NbX)6P4Avfys&|U=(53N-l3s3Vzsn`N z#3NYX2o=t9i%!~Bh2q1+TYaY-*cgraTD{mjiOmC@vv~at(q5q#J4=OoBWHvPMS&zu zl#H7n``KiGE#`_;F)hE2hgHQ)SKuh-wB0h25rXwYcpSglBgP&%M!oNfds{lq-rCb- z&@1ois82Xj29YR+FOPNe*cZ#UJR+3e#HE%42pa}AS${GIDf?Sq$J5mh%TS^=^xj!} zu{m$07sgpwpu^oKCvrLF{OO0D(?X+YC~9RoDV|Uk(79@lvliTz>Kp0zRgR1*x*-L! zFr=LEY|M-#Sm{7M2uDW2?l zQd4Bzl#x=gem(Z4W5QOl0B2uFM!)Gfe6G3aY@cvdh2kR8PQ8}L=G}q{eVy)l!+e?{ za85G2XQ`|_3vxW zutygYkJLzziVa;iM4&+Wmn#^G*r3FPysshGW8~E33RI|GoR$tGu^Vk|5>5;Arpx$! z<4!GM|l87TLSwcNsT}^I%r>wUMFDl8${Q-4@_%PpR{9E7l-qtlbY5PXcqQb}QGi zbyfb#VXD!CXxPT+M{bLfJEdH)WEWA0eT#QWt7FIk1yx=XZ^mV+PBiihcBwc>(PDJ=8&`Z(;27-^E%` z$IrNfF;K=)JM{V0v6Ya#%*t2%4Nr0Ja50=hDlN{He{iOOF-b>h!7mJLX0t(8Eq;W0 zhAcGkaD|3tDqom=R63nf1ON^5X ze9d^v?rT4`2*F*Se#e8a-dLs;?tY86MwmqeeD`}3DeXMqapAW=w9bU-u`@4$YUV>~ zvcVL{fS6T8$rWlw>ZcU*C32eX)sL~T12cRcK$~DX(+CCFCQXY!?o55@x#O|*DAgQ) zZB$M!&|zE(tMspbH^!ElG*P1&-lei+7F!Z=gMRc!wO4+H<~Sjms1C`@Gb1K}MBq%s zx`$S`4h%r}vG{-r4J?1n6TO^o8u}%OnYIx{`+2q=K{rzLapPF}TxyDkNQhzw~r_qgWnjU>eL@fmaOM ziGJ;k%mzGFwXG_L^8CRwjlUFYFUapYF&=nz0ui#-frw4DAL>LkG1GEzSw{&`mNT>p za5u7!nVvK~Pz-nT=xt*cIRo81Lm<`Lg%7?$-`y?;MTai3f}C&K@6rdyVS-($TGm`M z>b+!|?f^$Fl|x!g@~I{F?OwBGYuq0#EM-@o2?7!Wcx3ntK8IlLk(%u55g)ju z0ieoKB+6LNke#XXHGoiM6dhWqGH>mNU2ITf^2r)zUQ=$Y8%|!-p;Sn$=qU(s-K4gn z#&~+=2URZfk@s_$XS?k*oQlW#Dsl?|(&Q;V$WFx$vw{dXZiOA#Dg~2V+7G&?J@>-JK znw@Xu<@rRbQDrZw5Jd;Y;y5l}lIH-BcIE9hPg{DCg~-nz4WW%)pCHtzS-;8jhW* zacmJ*%r90+Sb9nl#c&9|y$#bH3a@JvBjI@dIaJ?&AO)yA6o?4B<|UYrFQXn|IXBql zt#67xvWiMP9Lu+)l)!_Z!Q=L%cK)z5cFByBL=*`W^0X^0Jf%?yxQj~D7_0(dL(HQl zpurLI`aSIsWmf-NuTGLIeLd#Y@D>6^1j~U3CyGVD)*iLe-Fm7uh{|X;yP_xrk{IbsLEr}UvM)X>^ ziwJy$inp~?OIc#Lybw}D{Nv27NYl6bLEwjjlZ|1YbEYmtjV`Pvk9*lkk2ii5Bh+K@ zS9qaO@(|w`Y+6 z!QSX28ZT^R&+15Wlty%2SeDwK35>~2so>?c#R-*2k)-NABi@*wEtL|2pAhunva(rP zN3`|P5^+@;fp`c4-EbiD%uOE#@4vM{%JG2wOuF~byxwdkxOD^2*AJ0&V{h=oXgPa0 z^C=$FEw7f5eyg7fq~FOFzq0(5?s@|fQ8Lzav~_?ymDT=I!T=EZjc~)k$8aOd`l0mz zW%!92ifyrBj5)xR*4?3QtHfHl@(`ORZmB7r0GDH5!0B|c%dodjXyi-wFQvr71#JgY zY6k+G4zO=`gSVFP#^Jw2=*~`MlsjOB-rhr%r01~6<6PIsWjjl|%)D>ImL~E#0vX3R z&~qQdw<@ISx_u?Pa$RUVEy8DP{`7Oqb`^jEdM`dU@T8#N zgJ$l5BIiBSXv{l_r3O5rQ4WEvpIVnJWSoT?*a7_q_@6n`kTEJpUU;wd((2K zRU-^Q@xla0nOG}$h`?Z)iSz$)NcV{lR$+7sP}}e8nK>cvp~>rkg0TGjO3T5V?C4yz zFmY+Y9xwW~qOSoHUN92Mn3Nf=Sc3K84BG+FI-#kr{@t_c$j!#?w(*XDK=y%u##4c$og`1iMFotAqbSBu2>csXi*H$qD^NYihO z6>B&H;_;f#pcq?C-=5B<8>`mrZyh$GL9-*Dt;c+nD0`4D( zXC&N#shOyG;`q`LvAE+rZ&W!H7FoBy=ftqDx`IyohOJx(Y}#ZK{dh;_05u1)#r^KbsHeq6%3$MeCp`utIA|VWWji3i!>{ZL2R69p&j8vZn1!%ygSm&En18qFqvjy%RjbNrG^?l`Dzh2Dhm;}R+w z>~l&%=>Cc1bhz{gt3_xD@ZPVC5J%QGtRB?s!}EaiV@CDM;lBv6aq4IYhSA#nhHCpE z^}7>HwAcQ0{agDF_+7A@BhslL;UN9&*E87h6oBcYm+$aPXg{i;l|Pk}fCOtgyb@^z zrMv`|+14x?1N)mZVJ7Ob;lZQy@Car&ND(v7i&qX^J+|%HEG2P|1SeOCE~80 zTTSGGgd#b6F($BOZ>D*fY09g4MaCo?U;nkstzXDlPEdF}F$wmLMSwv{axgCYI6{MA zGAv+!t$Yn2h@A43*33DCrJ_`9xGfhdRMS|7p)!P#VP?N{>>NE7)fEoI{7&aOlc~-6a!&9(@C2#EP!p;gD1Y*!HRU%vWS%_tm15H`5;0GEJWtix_T`Md3+=$k?&jGU z71XXG%`jx=#Zv}9NBvnydQB#JLyPcSTgR*Ms@GHiwIa~#GFz?4Q!>+a+q@>UFY=ra z%7iO5lLhbDcXrS@o6w@4D26on%*XZYH#lQ`u%``*I*L)VzI&Q>W+RipSh{B!bZvZ0 zqhGYWj1Ydx;FYa0UGM=XP#5CAy-EW|t!8o^7XV$X|z|*6o4%eb$ZLzM$o$p4Vc}j1C zL9y#D3TeUNKRK=Dy9`bCuC8}zI)|7za1*V|G~r_Q55Dh&`aaFtdG?b(T*bn6?y@`x zYk#_{*&5dVdB9@GSySTmwf}$3sE)e<;gzx;3i(Pq5V7;bM zQzbWY+RE9o?h0yVKwD)(>wNrOShB&m4#P$|pvlx_sdV86IwxV|j%*=Pdv)Ia&&@_2 z6U$x*l>OYgZ{jmO59oB72S*WY(_;qXs?^mP(G_>@&HW}TT>>r=SELx9!9VtLT8wx( z+#tBLiMu8&$vi+)iJ$Xmg-7}EWP-LNDW_s_b^${_-=A`i_)-r@J3+B*oBIyZSnRw# zvMd6RU!#+1nLp7jJvKktH_P9DU z-WBZ~8yTB7h#{yB^0EG^{vLxBi{uIpriO{AewTpA;o@wm#rnoJJ7ay z@&H_9%0kDZE`iH*s)aaKkw^V55UJRJC`WC|E2EbzcrfQYF)*oey5=Eo{&=}CB6-kX z{&9cyOkv2u#?+`7-xp`EiY(qsl<$!A{vwxP<|K)CBt1Ac2)N(UHx+JSnCJO)5l<8N znS%^#j)}jLUHa4U%A%NMYmfw56wCU!X>O3;*a7A8N+-Y2yc@}eh|H;H*z5Mt0ySQ`JtGh&^g}nQNMZf8hnSW;|Sr`O8j}z{**WwDt9MXdx%WMI`~wwS|o( zGOhd(q^ytWby?o)q8G#=ndVrE5~a)RW_oUy#=X)_l0f(RI_d!+^Ga2m>$c#%kg}Z~8 zd>;4hc30ob31tUeeg_Pc6@XN5Jny1aYyG49i+!m*?)F6Ah5vCRMzc6GIw5cHOfT?po)4YgeWPXemzPY;mVxJjpRbVTxVDZ0W!!E73%7Lu!%x(m(lpD#Bkd>{u;sJH ze8%O+t@Oh{HKvu*XN98~-iNwx?qSOBT(qQfa`azZxNk?`gkj@T{7o4(grX36PT(0j zv?2qndGJh5`~&k;r=h=`Uq9*R+~ptGP>AL=)D&!24hz{%hSmlf=si4M0jr^NMqVl_ z+u-#A{Q*Buq!;xQ91>1?(-sg0FP^0gI#9wggno(R|KuGzf%F3ddYJ4#N>UN2bP4px zwBO9Z+@yY#EMhetOIC{Ag+ZP-5ol!D*B+BI@zSh04D$t-_Tm})gX1~WRIpqXF}Bvd zl8Ad0L#BAmd4$>wCxgPUVn@FvwA|y80WsJguKcfe7b0fLv5w`1jTu_jEJ8JBI?u-H zA}GEiH{I9xpde|&5+G|mS572`>`PMW{$ldIaY6x&ZPXk+60}&Sn*Mbo9zoyCHS+fl zxibTS=&s}xuqUCgOEnl|b2(yU?5g8PoQJV+ST;@*ytrIL_41ZaoW~cAY&+=5m|P0X z%7>spwkivu8CA8zV1KWtP?nkEc%4bOUBt)}O|%5x=n;(!1L<<8I}bobtnl>?0gU_v zgcvZbEQVoo0V8A5#iY-TQJkBn-53Oayd}yucmR z=&fsHIEqRLQbpBBL(b+hd-)kQX04bj+GF*!ix9Wy2@dOO5L_k|$ZwWC)|bvHo6G%w)B$!Q|4`is+rt zp&OZjwKC^I{@K`L{zNTn4UQrQ@p=iv6Hs_0rMi%@(eIx->(+Q0 zSWbsjc~SE2mH~J2`7(IEWK*`RF6Y{eUClU7zAE>J1ddx494lSuqBUm{#x&YQDZ^^O z2MI70Xzf9QaLpt$oMzD7r%kY(b9JRLiYztYPfA&DD%6(O9{*NC6d*2!3C`~Di%e{j z4l}Y$Wqz3M$`Mb`Hw$;?U6zF^eda+`N5N z7}jX#3@mh1t>}EdC=5oe=z8sKIyJXgk`0x|5 zfIEUZq%NSQNL1wL>HgZLIl+egn7Zrh8df0!R!n19Nw^hh7aw!&;tBbkoltPgZLSAA zWt2?a+jZWG`H=G_=UxldvCt;g3^vkwO78485Wq*1ek8$&NDYEIt*?|HKI+#T+{%&C z8fNraOd>S@6bGL?{P`~I(9`xg|hm?Z+1Fd57+51b$M+T;1|$9FE?*(UwW1-#`aVY)t^ zRfa^N`|oHKK$w34FOD1CSUoXAS{-#;Ql|LZ0%VOvD*Ww_c`95zaEGoy`JnUU6zaQBQ&$AAsHBV~T z1cf{JmJ5}L1K$&BOhYzR6&g>}`dpDA+DA0~Hc+FYXxP)`KBYk$m|lrP&W1*jEu0R9ZUMv>a*v3(HnrqZ-FV|_(%6`Wj;FSk ze5aLKJP7z&HxJ&|5e}EyBQ%tGn=I+%lX)O0^*d+ntLvVn;d5+;7#~^BRJFuimJ2s^ zMz^6oR1apDtx!7kuBv;wiQ=1Ji#}RVPv>1iH`EVVCLQQoF%YHrUNCNd{C@7e`sqbu zCQ6npVm*xf8>CZ;IW1=9*?n4%N)Alh7dPR<=PDdBhe) zituAH<2{cqf(#g=3%huvYJActZ~suay$5G<@h#~)n=WS!Fx9HJ`1zzq_KUAmW5iu z6pmVTM?hB;0r*`^Tn5F4QbFLhKn`MiOXZ1^52JRHqPnoe0zIqCh&7ppR*ckIk!%Q?I?n8lV?H^OgsH`;A# zA#S_}Nv7D}tfZK^!AkL{Fz{Y!G!#{`1V4<-!A0b~*gO!KcC(MZFl_?`_)sITYujC2 zyOqj*rs6L^B3~ao97>zJ4OzOi%rKQNofd?k#Ucr>q@&o+Pe_SWD|xg(s%e!e9!AXD=`d1n~2`ZdByfx7U$ z;@3Q@A4~EVSBRyPi`$bp{Q)c1_#8V3{to}WM>)Q#j&rTj`W*Lovg6G3Gf>4|`t;vb ztD!IaP9Pad;u@}@YB}TdZVkguKZ##n&`nhJCd;-6<`)gMVRSKLa{@QpwbvJo6lZlAfxQS*^ePWnu7 z|HP0*Ebw1;y>gow0ZZ(ffPtHv#M|5B+OZVE3$csjLeNt9quU>S|0mt# z2bjnO4+NRW!L*nA@IW4D=mHc5`5Og}7-7DRBh0X^$=%1>3w>z}2jKNp%w!9AQ?u)B z06X=Tr?;RkNA`1X(zJ#tK!-(glq#Q#ZD&nUq>{JQy+X|XYAqpUkl_h<8!*j0s}YLL zg%^K#(Ap2%ve7-BC8AC4$JH{+Qg$rVI}-SeeMo$pT7{P1hK5EG6mnIRt+a~T+l4Dn zn6U$$YmkSV{c!Vj@zLZgZ%=-V|I{IX$b1STYe?VPld*+-uY*8p3Nx$jg z75Ke|ommuKoPR^bETwF?FJ0GjF{`Y}ZBqyo86)#rOKeAgmIcy@W9i} zhx9l!DjEattVAqT?g=S$Er#$-baxID+qtPsY)@N!*K%N5%%000DWCxUS(j((XVW)n zYy20+v;l5AK|L9mu0)jCAEOrClHN#7sZVWIESN$hm(~-juE5!G4%~+BN!ZiZ_qm^w zGSCn}bASPuX+k$rHs9qQk+}l+9vJ>XAA^mye_QL1HG4ppzyO$Wmqh>}*)Ipx^8kZt znTb*`-1T^1bbln0z?+QT#*Z&{-ZCsya+Yo41c3qGJxWzz@5BF_>-2Kb944&7Z?*lA&#co|wvXP6b#(vFx~963TzY{|b5M zIQuatraBL9ajTx*n;`%bjT66~sdx{UNH2Cl4pu^DO@`x8E5B1>r<{lr9x%6BylISl znq}6BOWvA9|TFolX)7T+!)mM1TIr)hr>&{qC!rDYREt`JQ zc5Sn%*@j03@xE4NKSf+IAjB1!>(5Gdf{lB|-eFHy(!2<|v=4-KFQU;w>orB~>$7=> zH5)f9jW*#8n^*b&zbt@&|AVnY8H1)D;M~{F*HF?qMC+mW(j{-geXNe4$?!MJbdBOe zzmImw_vfgeho4yQ*Y8fzxsv<;Zn-amlrLi89|po5iVn8i-~_T}I5eD2oUkh|3T~~F~L5_m_QKx_YJOB8W4ZnMt;7=_Hq94rBz7z1z4hKZ!uk$)uE@O zs#mBCX|iwMw21e#rh#}2Q_i-Y@$exnk1b~@AdP8PJ4|b&9&04AiWo{ z-=xDlYtDc&XH~%?q)z@}vjm^8GGMWN3uZ``f1;kZ4wG*NmJoigEojQWYD6 z7WuWw5H}I3>N&+ECK<-vXSDjzpKTiBvBqe%)P|tv28Dx~KS_1JVPka0ut{pdhOfih zd^{;ua93m5-?!m0=+zT>#^0g7kvqbby`wyGn3TP5n!+bMSecfWHA?><4K8`j_7OOB z*Z)J)8lim%TVlylFA-@UoV~ngx?byHp`CEihdC(YL59KrxWx|b1P$bg!x>_kGkfd$ zG~&3&{#qm%!pRTySK1)1j2V@CJ_D?iB)z-fGNkZbKxslkl^%8U_{%MEdGg$}i&_$# z$pCR=y&-MwFjO=r0gyU^QO8!SCr*^cLfwW~YT59Yz@b65gDinLUbsv%D(N{R>1RKX zoG=2yz5D-H{U(VVZES%awQRIG2h*falPN^v&OY3ICiRd`?r{Dpwm=pe*K+o|ELpPD ztoHiIpx~D!8J=OyL?0g;9M-1hm+)d{{8dMCmHSGxM)B0fo9)mXhGv@s(tXuT+A zB1$BoofhrVp|jP1?-rlZ!L{v%mjujXW$#gls$$|`HbU}3{c4>i1<|^<8gop@Q<<~3 z`=0#FdDlY%p>0Wa{o#oxZ|A9?V5Q%k#d$5v{srhb)8;of=0IiW=ZnC36l!^-`MI!t z860*IRm-*>T44oNs22ljgi_~dgTpO9IQvH)9;2)_O&m`OquRYQ!K&pEDJGQ;k z3~Z9`?cY{mB{$f@vUL0q*p*d}o^UV!#?rG6pE^M-SBptY{N0k5mt13+W9L$_e}cQCSmY$r5A)qwueBGh8C({dV(_aXb_SDr?<78 zLUDv@>6qC;aT35KBFzts=RdLD&r`_Kf+ZL&;i=b)f~&mG6=iA^->~MRNIOqEONU5y_2s>|$e9C;3jSnoMBz)4cQ^Tsg|2zR`@`5GrhUmvff%@X zj*^&9v-XNs^tww&&!TSf#t1`s`r^5^##3CA7|3sHLF7%IeL3nyOWrW&i83^c>-w+V z-^<^~gwS$kP%#=TU`01pN=bSkh> zGm)vMkO6X8(F>t%+Lw-3pdAmvsY5}2siC;@p)KD7+wpziH~eYwp)ChjhEUg&RrSs# z@9dVTP6Sv!=^`&*^R*s|_#B!E!M_`p?w-cMIxZ5d`JgT<->l17Z3`L@?R0SGQa{)z z{8cRlY$2u00y1l0qGEL9IZ5%KKyMu{_6?3hW$a&TFY`smvS>M^hV_<+`z?Rnzn>C0 z>f|GZ{}t1|W?XP#wiKhAYNnX5rn>~I5LrckX83v^M@7))pe2^Yga#d{a6%spKMn~& zUh?>Tv0}yiVy4|!12&8OJpVR$>shlrFObv-6HR|2j-?yfK8R?^N~ac7BEc^mi%^&# zbV7I`07q)w@t$|UHB+DqI>D=#(j~Vr&V3Hc`>w%d(G|V)rj?8(2QK9?HGMjwEmv#& zbQoWcHyBaxK|*XacPSG`xkTh2KcH!{L~`0r|4V*nYHNPnwQD%E*f$DjfUgAeE-gnT zfUUyY4(ZR{0A+Mx=|!d6`q!4P&GnE^@_yP9xxLG% z`VCu5)dB!pBO_LL4hO)RnmRSMT67O1KLo7PU|FQ7_F&vu=|lz+#@OQ%OtrVo)2bNw zaJ9d^{1UeQ9#<{HJe!S_G(D8C^$QKe1(rWenGa!hg%7RZt5Y_b_gGSelZ)uvanTQ7 zC$NCu@*18h3Z9Dr(7;v*-yj|BabB=EgAG{xu}#Tmjs8&~9ta9nLa0XxKoKftPY`lF zLQwmt&4OxG_53e~FGE`?&b1qvch0`H_cX4)=@_F>3xSynMN!pTcdUOHY{*N{L`c=g z-;aS+$0k3OX9Oq!0Py$I68a}2x*=bL^EcSP4Zo2j0{{RI=Hkq>FDy*8P>>Pyw*2aZ zrka+sAF>^lg#2h@(3Qv{Z_hJUnBvfIvBDb_1ELR}(sEV`{VK6hR>AJh-TeCZWzOt; z79}*>a{ti(h@%;cMvK@us`Ea9H2?sF_m8SMXZGhz*V|b;J&8+JAMk@bpIKMw#P8ep71mmz?l?ToIi7e$hg%fM@rr$Tqa3vziuXY`~|we=S* zPL?qr^mSs0Y4wpz5q{;q_VUokedn7VWjy-2Wn{88=pV&fv7YWo6NfAeFYydTdFgAyRPE7E|Ug~}*I?_z$G@5c2fC9K(vbbmHoHCC-|J1%3Yrcj=TO_N_t zD5t2&!{Wu5!m*w$pd%8$s}cYJJhDkk$nwf~PP*i?iXztqz}-K8WqC5D3+w6>RXV&yHcdx+bdO82v^J?KNkS z#IjHbhM=rnXz$fe5J>Nv4X?Ixcp61hCOuzD7hB1sZ?46(>JEk$4v{E#rX3m6^nD|V zI9V(8UTR1XzgoQlASelU^{sPxo_hDA(IxBc4+xsY2E(6yNTwxlt9*J9R81TJR~g?* zUVcvSPilYRSSJj-0bv>t7=DUrGu-cA&Pret4#y0ZXd(Cfk(bb7zlwND(&dr$Qwa&o zDAw&b8&_67^=z^`JUpBkT z!{!j0;MOSt0K!)fn*QDSx|{fq#}1H{*!`B)8hBT0MD>&V$;s_ zFf3x9lXG?m0vys2tBD$QJiiO>LPWS8Kh$L8q^6)ZfSKdaL^~Mq>xRozeCza} z8?-XegDUb;;5C7fMiB`@$|SLsx9>reO2=lifxD)r(~e6XHvNLR(8*gQ*em$42L8j$ zdcDPYr4#5N2!Ij(CfWO97cI~Ie8mQBNKPVFmbu5)f>|i-?ziTqTop|YDYm^9Rb^vi ze!$ZYgG6>+pMl!@5h5jyrigE`@+elM!9#;JKl??!>J`n)`(7Uv@?vmNK zdA_3Hf6m!$WWETssAZ~17;kbLCOEWL9!C=Ys4_Dita&vQX6vL1z>*C3bf0N*2R{(n zVVmnCv>NMA8~+funH|_PSvzC*8W(d}iK6&)n)*WQgF4UweK%#mY`;9Ysc8OT)1-AK zh^@Lz9g|UwQI`A$wiog5YtxV(HD{E%whk!vBVn52$Ya+y;vV_kzVzt9d1eH!Cjfx> zq>GA9ATXC_+t`{4qZJq02C7AWWaUKkwY3WmRFy26N4%%ZK+TRmgxrlG|5(&jye-2@ z7w)af&vZ7zD1;SUtvzWX37Uv;3PR1MtC(Er?lJpGtC*0HrKa{Bq%D z8ly=3I1*D84XxE3yTUfJUD!1}nVRbid3=Y9bROopV_c)m$48_EAA5P+@@D&M01;KS z%eRL+kZ5M;TTs-7PT}X5v`5sleeY?Tmcy{2WBE0PnLPb!mKc?sUibT#Ly&_s!-6(~ z1FgA}yQ}%|qE6TX9~lsH_$rG#eO==h(?>m`JU8ur{KJ9ZDya~s(=+K08aJ(;A1++$ z7h7z(?zQ)*Psfp*Sw6QP=QZ}8~5hLHwt zF*L|-q-<{DumTQBR0c2v50jY%*Kh5I4M5ZB3~oZ3Y$ulD@AhlyccB=#lHBM3^93p%K* zsvvX_js$7RP0V~XtHmxN7&pP#i%3v2=gW7@3BI#e*LZ=4#=9=3?_x^}BV|rU`y+bhv&FNL5 zHArczK98ey^iXsM@IJTm{y}AOpjux0G2&{}ST7GZs_#i&7+Ij>%u?p?xO){gdyenH z;`I0wrvu!B{rWI1rVaowLj&e7J5S;QA&|vL%vM;8q1qzc0-bD7;O0DtX(OPNOR~k@v?_%6ltDz?z zMc2wrzS>!lHBhxAe>`Yl*RcK>Qac6UxWBLbOp#J{c3nVcbu8OYmts0)-2J6v7r$hH zvGu89YX0+!%iuBKoO6#3MAoIqB*xFD0%dj%0h@cIl9^yl=?57{<`$ksuk{y}xs4N) z8$eoOKo}zKqiWARyj~9mQu%C1qGQ;N$4lMC)O2J&nWLl)MF>ybNxdgZVDh`pM8jcf zYb0$eFa;W-ESX4dxfyL?T+A0Cx$O1lK zBTf4G4YKIgrqeXB2ly^TgE111xfodKuPWbjej)=ZtRF2B61;!y6~$GnR<>YA1q@H- z$%Mmm9nerQduRCs0?o_{hDZj+!7?~HwbJ>71~Jm5h4iUz+GDW^q!|*xz~$XcMxD01 zVm4DroWk02U(Kzg-{sot@sGAd^Z$=F+0t5 z`hG>3JJ~5OA^Q5#vPmRtVi5}o$Pmlm8p@R(%7u7M{xD#WA0?Q5uj~OMC~HS@xE6Hi z-Su{*vAVl_&P`AnzwNwdyhpWk3aVeBWsV#j}G)E0lPxV%e? zdptDESa4$A>{``Z0n|+c)MbML9rZIzbx0%n^TT%pXI_ztq}Qj0cogSc#dq_8ROVDn zWlkrBvcqm~+_VaVDZM+482KUzTS^!q=u(|vpd@<}ExFtUjUj*3remlcoJM!$n7J7D znSkOc1HxVOU(3Prc|06cZ~;(K_<>sxmG)z++TMA7!tM>SQAk#mGSH7zbL^y}5ZLI4 z7tsou+Fmq<10jlv+N+);>>9BaD?|NL`@#doDb-zI;?de_d|Lr=i8m<4QCyl>xPN9A O1Jd@^K12V1jQ;}NO;?2g literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/hyperv/diagram1server.webp b/static/images/auditor/10.8/addon/hyperv/diagram1server.webp new file mode 100644 index 0000000000000000000000000000000000000000..739041ddae11919bbd62b7549c24d5912fe0a02e GIT binary patch literal 14622 zcmd72Q*bZ9^Cy~|*tVUV*tSn>+qP}n&WUZ?wr$%^zI%TEhpoM}|Gl*j_u_g#l|ek`J>^*N?|lpK-1WYF@&Ez=rROF9Kx1Voe_8L`H@P?SW8MS7 z9RJkMz>Cd$(x#u%ZW_mIkCRc*@FR)59cbMmhao zi2DaB)72kg{RUgW>^(zggrLnr;j%UeXx7X6btbQsu7n{pzFx^=PvD(sSaA3`u5&(XXN2(R`|bbEE0d9|6!N_8X#@0^FwbYV zkUIR2`#~a%DN)ze_rD_rx~@mS6(t0LKafRLj_~HM7}}AS#Sp@H--Eo9>vhhY5f>0M z-+%&QCS!KjpBfPyThZYA4Qj8%|N1o%F6hC&>ZJ``i_(Mut$0`c%6P9|U~)e1iUR9l ze!>(xCYpN0BP_Y7nCL4vuXDT%Q{yA>bu@%|J*KR3B4Y?16)xBy|F>K-ZCu(ZGv1n}TBS4)+1!-H6ghAfasT23OMLS#46VmW> zUTcvjn@wywOS11sm)FreAQmmbCyPz{G0pUT7H=cu+T1HVEZ{rVvxnyB(GeEMXZ=0# zetZVxvJ=8ao`9(nQ8==>Dw$aZksHOyqKp11gk4PqdY+~iu%@{DJh1uw%JIAy8V>tI zmwQZtxm%#SW;Ht;n>bU_ChCOM4mN1A9rhR#w&xZ3%@=x!;-oUY zBu+P$X!Zf0Q5)pv`h#ocw)`QAe83Z&%@>2b4yf`8D28JI50~mpT#q!Z95{GCNmjpa z{@W74I!|8sn0;Ns##k$x4sN!j>qv+|o(_b{eC1jP|#jauXBe2`jx zGFG=glx;6f4QroKbTBl^t22PeSGH-JU!uZp4#mXBL2tAZN1N7o$^L1-5c(plCTd^@ z?ayi6n%(}kG+i_L=~_sCi*62wc^93GCGBh(!D85pMNKw~P`y|;oeAgys?&*07p?gz zW*1ODL54{hGdAKCp{WSQ@o_>XYgSe{L`I>P|1{-G^q?T|NmlS;W-5K)?x+H=7LItN zMgDVuyOKF4E8|$97pz0t@9iu=4*VV#OE!1E&^OX!N!tekY4!oMYTSA;bW=MBYj26+ z?UMGA&KC73)T6N5C->+1py+WI z+<$=ozxt2=J1_J9KQ0cSAHXCc(7%E(LZ|wOT}b4^RwadMz#`!Fk~Lp@;J<2(`w$Ys zQH<&8Dl43kyObj2+G`u>ODh>yIg6|jEn-NYm2@Dd)}|?Qaa?xI>$M(R^O~T}v{7?< z7J?8w^3nyU2Z88hm){j|;_-g8s5f_Ej$dK}$lKi)X1yT|=Wm_FOK~WENhJk|E!- zb(qnfWhZAn%^zLb8xYV_$Wg|w;@)6QIC?;ga ziuCAw4#I%SF0&Y|_!jzZrPa=!92WFz_K^I8Xjo&^BN&1rwvl-9&QB;Q)GbPYvLcs1 zY20}C0fkEw#{4?qHu?m4Wd%U_Knkl5YR}I{#}_Hy_VY^En#du5v|qN z<0{XNXgr_1gAV6CpPf8O&$k-(00PUmM8mC24H#-f;1WdWX5flVFJK=bCmmh1YX~?z zd5u*64YDDV!AqWmKO3gBa)l;PSo8rp;C7M>WEjuc6G1RRun&n9vUXzG9Kk=0o`Wfq z2m&?nApoVf8UK=38+%mxa#0<+&-?*^hFQSZV>v-BgH()sU2>rAgScuj=N`>od)%wI z8=ZhTkbBHI_b2nS72c3Iyv=`$wh3w(eBlu`qE?WWk#fnbIU9+*1OBAVaPk}W--|O7 zwK3PNqBQe(6V>CfIeT_aT1Gxo15X!L0QxD5j^Qzme2oR~Q+;i9w)(CeH4`R%l_uLhpi87FO|%9X2z(v6mxB#HixuyMGi$P}5QR>U)i zGQjM@a%@}C*!RZJmVg$MK`UN{RBo*{XA(SWG`DYn5#_PmJcqWfL;NB`=wrnXzDV?xEJHU8-^H2DRifEm0ve z`}4ah(SmqaWq?ke_0X|zKtua4fq&no<7uAErwPTg<>^|RkD}DyA}^ic;zU95V${3Z zw5G)snB|{@wI{YW>iPM0)&CB$D{8R}_UV^xNK^{ztvXfL#VQ%r6uy{>lxhmp@+@tb z!UFsqly%^ifm>>muj4!MNYk8H;f&o5Z`3jk`yQIm%`f*gd2IB<1;w=Dr3PlbH7mCs z&TDYl22@9*z09N{5-Ybzl^RZ=%)szyyvujt(EBM%UDM6)FkhqQV=pQf!(!++WT zD{aq1VQ+}3b8vz3vS|7zRe(XzAq$uH=p1sz!^=W8#Lk~_rz;f>FA)(40W_#$nhvE1 zeFAe$xs^vp&W-=S*S#TJs5md_G&D(lJzku4ZkORGghe@YFheu+%vV0Oe zbHVclsF~|^QU%r}-p6mx=vj(&)qd+I6Ed1u4Dm8PU)RvAl4Cp5Ln#pF&*$Nkbgnbq zvs^N|?C`8+8cGrwq)wn8{9QuWV6<4zh{*tT7wxnpXrvHGCw**9 zZk%w+>3Ol{WfI&x=I1Vx=!6c8K29zEu1#eM?m>RSgBUWm8#Ajj=3gLjxs9r5v*W>X zJ9kHkzFaJNYc{*2)t=0os}6eFD|mQf*gC(b{B&a5ZnCKd0@mP;|CtoYs7EQo+^*9= zD#5Hd2>TJH79?Nf3ly;kB*dNVsj{tl*@z_7?LnGta&#O%o!oSJERb%tbtCn3$YXu< z!IVwFsrA+&HA^5o{Jo`1)Y^9k6HH)yQjL%u$r!&xZ$+_Wgw!1ttDIQDsc$<^ZY^>F z&Tfq^V&Pn_ILXgyccK$6_)V_^b0bILLJmdX;ib~x4hcK85AjC@qcEpzRk78ygG5wJ zr+%>`NU@_+;cY*X4mrpa$Z@a;FTE_hVCXJ!%-m4fLHk|F+PTTis0+_HYFq|W5v=!y z8TKdDx3Jr1x(q3;Iy1Zf*lkTfzzuc&;pR&DpjKv-cGhOOwHZLdM1K*~OAC^w4D zTBE(~T?AyQt6qh&big%w`!{_~ihNzo03F4A)rGu)XlCLWVlkl|m?YC(7H?qtZP&Fzj? z<=Cd_z-8?y<5x`O^D5i+RRp-AY_!K~#7+Qg1|&X}fct@VU`=k$!jFfq2hJ;o$7u=Q>|+K9>(b?oV3MnOH&3!CT}@x76Dtb&@H?vn zqHwA3G%*u(h%zv_01lV`kf3(<(W4mIgH z871%+S&{gvWb&xL+|sHdO;Rnu3gRl{4ovVDe~~<*NLBF;G5m6dPEDwex()WPj5cR= zUk>oRmgCB%Sk{|@RJjcIB?2XV8o~(RG}VCdA3%LM-yd|)_)jI0?H{1#Ecl5wWRlCk z)$e3qAeD(0*eH()w61sR3TaW|md!DX3ioDn$TapZABdJ#YYq;MM%ArnNy2_{=G}Hr z*DeRv&zQrmV99g^HI#ZXSXxS*`swQVV+;+nttW-2xsppd5|)0&(BI-&2E~LBcBpJ6 z7F*g~rYHPn+g(C=Fhl76_?Q-j&TG~)eo)@edbn1pd;|N?ds$?<8j*P~$cT=3Yzg!O zj6^UWhp3{y2?{Z!rP;M7gT_FG^sL!z={QpF1~5R}T$g>!e)637D`zvb5k>TAV3+i` z`}cyGq%@+dgZVp9s}o*I0iDs*r`(_&44?S8P7ALd_gxKM5xWNZBf3haSlsuojYm@n zceGCwkT{?R)mi>7qU6wtr2}Dcr8}eOMWf575p)>oHlgQzKdy+PG4ewP+uT$-OU`q; z%!nH;U{^>M!SgyzMn8rj`z~A2^mafp*vVhF>z>NtHq`p6zw;>!wlatggrXwV9wX$A z|G>(@2%A|-;cvU_!rq=pb<;iRiW?;_2Z^PPukm0fq?UAhABg#=gc0BmNgD0agI-Zz znl;LMj(g7tdM0f~wfM?i4xMgG;aU^s8@HHIplnzm5%U4mY0?5k=zgUX8g|ID0!)L1 z7dF`-Af#3^pl-?V*uQ7(R0V-`^HX;u$zGZp@(k@tH$v$I66KPQii(EmF!55$D1KUuPqH^Mbg6vQQXi`L`%(KB(5nZw z=vBN`Lk>8Dd;ciktBi6IJ&GDQm9FMdZIV-yBD}aTKmR50l`~-vA4C5Uy!Fh}qe8ep zg{U1rCjEkzzPw@&5RFB;z;pbA{L2&e68F@rdC;0k!gl+bjR>Jg6U{}OiL7q-2vv_f z1ekbU5w=52Zij2lO*!!Tq$>{=W|j{$w(;J;_1cR+Q=cK}DB8OBL>m=(y!S|~_o9Gu znDY()VCvM{{H`uI%sA85sgWn<2=JB~xOXU0CLG1o1*)3;{B<&#BTfWs`3k#&y&%SO zON$5EFgY7-qVrL;b^%_w{Uox*F3bb`E6WqrdW897!ubovo!?f$iPL8cChSDZDn`+# zWcUG>HbowB>3~W_UKyLN6(tWY&Cei$m3!Sw%qonZ?4p#_PLN$xZ9dUPFpa-I@>$Or z$~o5agMvmUqn9?zCdkecZc=;e>^7Q^v=cesc>N`zyd+ND<(ejOcq1P+p1RF-PXvcA zm~AOou4pYhGHe1}4@@r!N1BfE))W6~Qm-LHSMj$hcdsK;Wc5BEV z`lu~K4c{JLm8>ZfbfV>fan(nrba8RK7D=US6#6&T4O;`VAc87U9OeX2nR+5He*$du zBMtDE<(UCrWunbM6Yu)kDq~nYZ;WQyIurF2o5CxIgJQhyTd65{EDqa8550q zbYlm4nk>boz-@t-j=~f4H%CuBY)hbwO?`~natRRO*Vch zZ#^Q{v2pL#XOdVvOCmZNP87H{P2)`+6en=D=mYfJZLUG(colSNj&09}v2BhLJAkfO zE853ER#??WlFXu*29fX6DD%N1L&3;_u{>_^*vLl(_`{6ibw9`mSR#PaV zv2v=UV$uQqL^m-+&*d!^>Kx{CcL22;#KeNZgt4px(vc%?DdepgZq>o7+zQ?qy|Y|s7@ zTaa>vsES(y%H7{N6D(&HH*LmOt;JTb=QSvefAw{Q?mBKnOS0&kfEd;PCR$kjF{H$! z9+dhCEDlb{?`OzwL0f@_?l0u*s~%N)Lgk_w_`%+=(`ASIDJg3^!#cCpi36|s4+W#n zu;K8~z7%y{(~T%bWX2w9k|PaULvdEoqu?PGOAK2jf~V=8Y8v3aOc zOcV;a1#Eku%f?gl931-d@m*2!2*QzFG~Eq2*ZhsHDj0}~Rv=b@j1U(}G3~@VJqsz( zJ})l9tc0!Nj+!2lq#`gyqczIZ6+J17^C{c1+^Z!x6KUTw^MLs*0QO|RyKQ$oV>`38 z<9jNH1AA7y$e0&lHJQDg)1mG3kH#02r_Qz|4VY9|=Bkpr7b(=IC>DqASGQ|sMK4Q5 zKAf_f5uoW-E2#*$3O4?rG1;q9%iWBtuL?xiZ%p``YZQf+6r=xP~q`yyaGgB3iPlYo4$kyeYKq}(} zXBiUj?dVFk=`AaWwUG;tqv5DdCTwD7n|BHwHe}-lrddAS4FQ>y12S8QmmF?JIIS2q z(UlHj0TyPidV6RPwV@FoF{d|8zTgwmnQ%@Zb3S53@qwWM@gHuxJN4Q3G;0)Z5yv+T zfuJ*zSHIyl7{pf%CP<#o7>ohJ8BpoyXJy&(Fxv zeg3uBsXt5oLmOzq$kSi-R0c*f(Oxp)lLH6u zT={vs$+>npg>H(+y~5YywyMaki?N``ldU zU`zBcHAe9m+-)~TY$Wl~wsx<$su~|T-vNa)Zs0H80Ub6SSS^A~dIGA63 zRfkUy;!Vx4=ol!6Hm0r&83=&Z!h=u9xSQXiT_T1pi3q_`T{RdVFDicePkWZPwH)z8vmO7-gu3Eqbb1NkotWBH|+#080c*N zr|>)%UD^BJEh1ZwO8r?zeQrfBlsjZmIC2Ss21`zNE$0x2{p=slnSRwtanR|g-1=Z7 zJkJ7*+bI|>_QcPLlXJBOvg?JkEy0BDP2&`GE3sDOgUDjDgwOm~^^VT{V!f>V4GkN}e3_6vc)wK9 zUv`?T`^L={iMta0O|uw}#R~M}WBnV7iC;D)cjwu=q=5{sEMYTY#OKh!%`mQ>`>IBk zW7*ImAjDg)xpy!Qertv;o7&2Hy{@E+{CNCP6pipW<^_9=ZLxd^-D4pU9$jN8m@#f} zD^7Eho*NIi%@y{`CS*OS%4yqOF<;HR?`n0w@~P_jZ;7P7Hpb=}=&`xi6cRp#4BuZ1 zg60m3vmJAP)&Ryjy(M0=z?||^lpXwz3gOL8;~8#K1)M3-l{Qj;Zt=&zA#{2s93ESE z(DCL2c4$vC1!(H7<&;TLt21@pACFEwJ5BZ(652r#30xm;{ZaGb)%1+~?Thj@idA_a z*Yc)pqc>s%X>EJ6%P3kc)l1m-4WJ&o7dbtrM(iE<9=~Cwr&2H};b?%9GE{THwPFd z&?VK8~R@UP`7uNZmkN-@Ow;SO=Azp=zil~MT!2M z!uvdYi`_u%*+$Z13eeDK(>{_h|cVL4>a3|?^4va%!AqVi*}>#`lGefG|*zQ zBMS6xP$$f-;B3GqmqGwF#68cKV0ikceM~sCEAOp?>1LT%=7{cSx5R=0*$}6&w_jcx z2;NOoZ+C)tz9pU7LDWe^`lnQ0w3(hyGef3Y{(JvOTjE6lefnnB{%|ij4yFPYNG|yd zkglK|oB^+8;hq<=FLTa@C0BZ?`F^v>mT;bwMs$0s$)z_ottsdRt{_)$)ChWVqefG; zl;%Bo_|>MDnK!I1-DrL7 ztXEwuyN}4eg7ZEk(5^<~cnh44n9%6~wUNqCaECvQ`y$!Plm;7)P zx(l8-LC^}Ad8#K83Uc*DpOl$`im0g#D5I2%tjJ4DhyKaF7rF)>vJyCwbw>r7Cuo(> z2QWxK!Z#gRB4td>Te0XM*=Ii4Sk}uL_1U|?2hDYoPL#f|-EYfaoz1CSeP7HRC*E4x zWCSBh_=mWP9e)}JH;R<}&--k6_{7P-f!D?0v|K@ld++J+=_p|Ij|Qsk!dsG3aFTcp zgAf1Z9cwELX0r3K;wz1^ePEKNplE?(-0P&j=lrk6%VYgU7K_RnYR@VDHYFvw+q*jcw3U@noslSg@T1njdB$_<=YZoBQ&Ovcix>8UV@> zM`ru7OUGuMb1DtT8t3Ckrcr@QLI?-CKIlCWuq?s2*AnANROco_XLtu^9}6ndPj=bITJY z6wvXI3kAbfW;76F=EBPXopX`BH!V_3?}AtV?AXvIh$v32?8GbnXUVXopDKo%+me-! z=dMgX6<;d&kK-!DZHdS+>8|voyravfooF4&UKcJzM`=QHz3q+d zm=Pb5mnmM&qXBO5z2SWiL%++}E=H*@~@XDFigsP(byvy5KljRU45Kcs{$+}%3HEJ${4L`-CgT2ru3rxIDh0{_QX=qUV7w`-y zPX@kBO!qeRournk9Wn!A$a{qU;Cq|08eB=vC)240?w$eQDdJp$^tQXRuwlPSXYIEj zJHf|Iz8PAaz)ZeMj(ny(7Bww3)MTca&Z6Vtj=xj-`q%KOMo;1|vl_L>+%jfyo72NQ zjYCG7>7P0ix%3|>%LKfWBG!9at35|^B0r*Ijncon zn&LrXP`}faf=r(hXJ!r}n+nMn^L>4Tk&W6lXg2Gr6AcCZqD*7XiU_#bP*~xdY!QxM zRGG{2z@>25La72(tt#giLcy*i$A65&+`$EMnXQuG%NMD_ zQ@$9aBSk(1Y6>hnp#+M0)V*?aeUTK3ZQLk-^@n2u07?^}~REDd^b`*uI2>=)Vs z##v#P@$Xl(GUIZG`lwFrQ)e|Hh#+Bu0O-;aC5Xiu@1!ZJl* zr>jP~c%zZ~k8+C>T<(@4FR_&1Hr-+BOt4t3Y|e%QLG2ZC!b}sECe8g8mr&e<*5rda z=GNYTz^>ef>2@5?r+S`08PzB3mAd|=h?(fECl$+B;Dk{b{<+}z_;fvwC07m^EVa0l zzgF}~715s-Cy@+A8bUa#e&m{Xs`>W8*XExg^BFUuU=^<4oMuUB5BYNj0lqq@xyg5( zs&bleAzH7+kIJ-D3!a0w7BfHKd`x>>_wUmkf8Jf}5+Bw*wI!)F zk+7zsCpVBlT}@9}y&SXz!`fJ*LXX(DW&O3^#w>PDuaE`5lG=hVt!qf>lwYmNSo~Q; zec@uX)|n%YAd`}`U=~0CCynC*;W4ti-&5i)90Y>C#fR)u%+V))B{y7L#lDIdnLpr| z%K(`ifKHk4bS&o|)THRb>}v0Ie0f=Ewy0TY^Z;m`!ms|*gjlP2jbsXBGWTO>-%!9- z5EZKX%{PdT>_xtxv_;gbO`OdSHQ|ZLcG=!)gm0b-0ra(9i4pzP^MbTpjL$B9L4hR? zoEhW#9V>r3iQii_A?m&gWO=mRgIChHhAgvpU|sl{pjwd}ru9GHo&{TC3U|>rf_?On z{y?Z)olSxqi7#ggO#w1vDoOH4;T_MK8b|nVl*k1R*+Pl1u|MEr>i<#gUzdAQ*SPyk z5*DX*@~;VPCPKcv`d%pQkmH>?gWF|Xjn<4=MTYJ6S#m9VLb|& z2nzR+w?MDS&qPApNDsvfAPSBYNoyubM@nZLZzG2OzVe4%Lpm0-&9pUny_e^b@Gaxn zu2VU{RMc>7cx(YIUB)XAQz#B0I1;E^AsVc}m{GMV#kqpFfdRiMu*NmBi3EPjCEjd%i<*@EX&sSBLU}NXyJZZtHYaq4&#!jRvBOpe6xolw;@3oizCt}0_TH;@_Y!#nQ>r+`tu4yLJ z43z$FnXNV=D~keavKkw=m5e9JQglN>za-0;lL|7<yb|cO5Zk z19MO!n2}Y~^JDto&oWV-T+(>c?ECS&f%KUI{e)=osuiU*I7BE?tWq9Fg`kOE>u|wq zSc4)V%*=vrAJg#nMdAV9PQ@=2m)Zb5QhmPHkKP)w!2d5N(<~GU$eY{-L-nrqU6k{m z(_a%A*XU=7QJ^9bpL#DfeunRaVFevC z`mmgb3aKTUrfEhUh5`q^~^?7)T-?g7={JnpDSHCOscISGnewJr%&-9uBmZ$d(WKsW* z-KM^z>##GA{&d9)&+C}EG9Om_7vJj>{RW`f>GK2Q+Ha%%`y1w^_gedhO{CtqkoNK3 z=LD^Nn>4UTBQGKqL`geBEfLa_y6R@c+eI3J*EeijFVe7Omp8r233W*F+4-Er)aEv6 z&X{)sK7WSXKxg&G)zFIdZBl)ZKqgL$1HLKZRkhU?Uov z;Ui2=F@-105V?cd^z;2t6@)-a%yR!?r*kuOF?9wsuEZvU2B)u6JkILQhesY`f#@$q zS+(7mV<01)KOL|;W*x1HGX~D5tLH0J(kLxm+m0es0+M6#YZMi|LMk}HLE~6W;9*(w zTIj53)}nBgVcFgtvRi413<6VQpBCdiDWVIp_G_WFhuk|$N041;&>IBtbD`ec}&u0K^ zZiF{^KMdU}8eazTOq&l~Q`SUr!B-Bd7NsOicn|F~&Yhxj-1 zBjPotZZ`y1wUWLdXGR4jTbKiI^pZmfSXCwoekdCQS!gRmDt}&)h@$-C5hz*jkohSR zp%dP{$LMWm!APt2vX%IGrF3VhH!IifF#WzXkgfPAv_e_z6yZd2FB z*^f(bWIVXY^)bY>E0&6pB$20bTq$g*pXgfAn08X61lLR zPGfF?Uw(3Z|CuE7#pOxij>g&TdV94ebDH3v)yv{qA;7#7PNQ$-yp)Os5D*P$>am=* zvh&^qf5NtDe1sLcR$fKb_Ckr1-JN!)c@3>N#X?o=mA)(EpeNhcc)00@r&k*8FSvH> zyQSJ)xfn307O?&|lk-hh)8r^8^9dxdNMjKtF~}ED-=PQa{3z$VC?rD#DnD~oKS^@x zz6UNNr7lAWoP+mog@{+X%s44&++UJ--k0BLIhC<;vLQmIbVchH?6k?au~TUl7W{BU?rLSKA)_-0@WO7bDB8u0by;&PRFybbxo$anpyaBfL(z zmz6>KUH|uOa^Phgk+2wPUdDfp%rbX1yH!%qK|7|(>lOnjm zc>UOqx&>Jy=?7HRKn{8aCVa9-IhSEB&!S596V$A=w>JCR5baRqjwcth41Lb$Ei1^0MB{2 z@&ie!$7K+SITa!Hq(gDuhAO7jeiX?*lGRP#tN_h~=_0DcXEE}_Wc;)qR9|TcuDu!h ziS&UU`UNkBa*ctGdc*aS7|4Ppauw}lrbZY79Z^PmY>hq|aIf7|SNvxd`bGX;i3%Gk z&_5nhDGO(?UQJr5rcjo3scEV|Q&%y5&i)=}c4U>-3&o@;^loIu{9a>%`~^e!&7m;0 z2CjmeK?L>PTz}+{STry;djO9k{xuFeI4o!f1!Qk!*W=06;5m1D9`)L6dz?HEYCe!JD{!0Y(NKybUpb=V zgQgOPx){542bU`4k=GYckLhvR^5KSw1pzyAo6w7eV0tln=$w>|s_~e`LtP}#A*SIX z9q((#W5o8}@rjOakiWn>OLn$%LUXZkb$1{-942oPA|kJ0eVTaTlv;g zMqB@iEut=8(m~D%>b3(^>E_Sb<5Xk9KA=L_6{OzrlF-H(xo<0RBA3k!WTNGM_s%3q zF^aK>0bi5uR)6%A#rWwwhC|%s&1SKI(*M*?kdnEDJ=E0To#n^6acy8dEx3A4{Ut@t zSYB?2zBR|k0)rS5{a{&M4%8Xo7aP00N<>s>5IILi?i^AU?jKEoo3X^$qNOW1smON< zHhZb*%GgjAYTGm#-fu1{s~6Ypc5kypDPuW#ZEEPy$DjqPL+UWxRm=Ka_1L0&l2Os+ zr67`03R3QjKzcI(r`)5kl}t4s^hj+2%gu!AjRJh*&%yL0$aLB%EUE5K4G+Od^dSKH z=zDH+iF)yXPtIz&X11P8xGZ&yH)uPQbhv@Y(=Hm@wr$(aijx)Fwpa4Twr$(CZQHh!6`u9||JZvUUF?f9#;Kb*yJmHF zRnHn#_0(u(X$c7*ULYWKaS=r|MJ^(zfA4WCfoK-fO<&?&Mn4SAFyk1=<~lpVF_!2iA+wPv4bX7yZI+{~z^k zt9QZg+#lK{&WE2z!B&Acf)D_ZVC7H#CD!-$1^)-@W$;hyEAIj1r}^jZW~`;}&sPpU z_m|%H^xN^x;(>4EkNJ{Y(WQ}j$6Y3k{x!}!L zpJ3V#&yVq$`lJ3z?$wU#uJbeSH}6;Lm;STh4&j^r&(F^{p)c@H>Zkpa!r$E9e?$Cl z+i%40)3;tf`=y_E-y^|+kF=l3&wrB7x386J*3XaM3O|CoKR*Y#R?R-kR$mp%AF7ov zmFm}OwHwv?&04+x`)u8U$9TtkieCI=cpOg|%`rj~O51~Sh-WldCvOrs9Jn_&>^lqA zy*WKgbbSjesCSOZ8Dn{s-!!W(LZjC>O6|saqSsn;ibdu|4je;!w&8u7sQxXK5EKI( z|4Wq_BxcAv+PdifsiK(BnQNUuHM{)xO|Fi4Uc2EECA0A6v$J^^56aJ3R!DFdtwh^L z0TY4`an13cPG9@y&*XhRF}RKL-9!+@G2%W~iQgPobiE03+a4^c`H%zBH%r292$J=c`Kr4h5V;yfOylK>g{+ygzT&Drt0` z{qX*2OJd&@o2GtP(mybwX)ecyh%Q&ZDO9#dU98F`Y>R7cIO{x{g$AqvV40UigN=?1 zgFqC#%S!<603F}FXtC_tkdD(vUWvcxUKB7aU2Hq|hh6>cVGDwNF5GG~L`d!BKAEWN z-%qIhVfIJ$!)e5tiA{J~1alst_sZ3RuLrg)-f0Kj>A=~(IDZNUL1}gqfQRr>CPIFL zmINY;J|@hz$c%1qb0|1^+R z;$ZR{z&YKmW^An=T=tirV8x>HJfL%eGcB##X_M^Hzj+b>`#a}URpdgA|DymDnL%Pr zV)?IeopgM2>asbE_Wxty8Kkox6bT8u=n#Rdx;{WGr zUDcbRCpC3IAG`z*E3aUR{H#U4SimN&gH?9*%8#7}W>v-_R(MTxA0tX`)5YYWVu$cD z^AQ-?#;8Ifn2kuNV>B%D_DI z8Ij==-EX(SsqwgHx2q#>SPwUA*&$p0 zU?g1hHIFoWrjNr8hD35R`eWfErUoX}(a)GS@b*2fmro{9Gc)SnLdcuC9N)EFCn``p zb~pBG2tSre!cVuaDH`pmje9Zh1*qNJ?=C-vh+}eFsu>NqL z?KX_1FFG%gFBUa7Zw8Q>%LIe&fe*pIXb?IgvMxIPo@pt+h*ygMdt#?cS);{q*w@g5 zoUfW3cMo%O?#j6sc?r@p?tURJUn&tT>C6dqXP{#V1SqHrPK)m)30Xc2VNA9(QDusp zFIya|tOKE!x1-L&f$b$5tCIH9m6n%|0U=eqnVpodE-xIXG!$zh>0joI6H_fVu8=g7 zVqQ?NYNqZ7wUK+Ed2;w7p&U@njs>+gTMs@({GxC$kyOCI$HS`k9pjR9d|;eJ3p!6_ zKyLQfk9-(r;VvXmgM|1-&ifbHH27BfiOqR{t_zQe&HWBaM7lhj?N6<$ibDWB`mj!m zjwuluznt~Db{*;*m9>J)v}k_yJM;(BKMeTqS+8y@yV+*Z{TI=LLo9}rS5C=%3T>i# zf1Hx!V@TwKnHBoXldVqz1rW*Su#XMLiq2m_MI2%>Ap7&W z+7pd`6por=CrY^r=W*FDoPbp|N;@!HzrIn`a|mMB6-Y_$_&PtB*lM3(06z+kZ%)`> z9(LFd8k~vjN3W-x_Lg_YH%5jNJkdN6mPmhuXO6N*00!2#Keh2Ir?+v5qpoE?w5E^W zAMN^smW}2iH?{8_EE!J|Ci8!mlO&f4Sp4o>bkRwar`4U^j(2i_Ya@Gs!4Q$(u_B#!wb(q-r2x zf}`+X$^f;Ihgi#kujj)3zhsjC|Jl}kK;J)GTtNR#ghe#`AdCXwNAJg&%?u#r8Sqsk z#}PANSTLmd6ew17eWY8S_B>YgDNjRR5>O@Wu^tI{uy9=xbu4GPQb*e_WGT!XjdeGb z(I9~*r-(0@FMn#^oDnVa&HGS641Ij^miGN_u)U)*AN=Tj!Py^HCcZ>O>I*!o@iSe= zPmAeTk{MUd^dv?3 z5nr5hKXB z2pQbWCe*?P^=rIbxHn)9FyEF<-DZso;UQpi_AuZ1ZHkC#NW$6xFW_rOlnnPMq^G~h zor#s#$VGeZo#s@p{hRU(j52cr!avGK-7&HD4?74drF;{C;>z-Y9c~K=9wG>JwAxCD zhU6{Opvn;0bk#t%v5l|_f>p1k>|rli$HkB;IuwL1TkSpMEZzX|i?}bDOau17l7MvZ zUb%}`Q-_6fj~&80WpxS#0x5R_0Md{R87JH%e%jyD%RJfQYSq55RX}Xn3QsY0a z3+^`J*vVOS(enHh5s~GKCjMx8D_#ZuaX2QeoH@fg&8o(RkN`m zfJ)?qPozG-(i%ib<&;!^-@nTbJQe3MpYmLVX%F0q>v&_d3}9BK*7#YGGYzhO-zsXc4a3_Sf-XM%&jG8l;%1oC&8}S0BK-()@YDB#sj>MWI1g|KZTu?qkC(# zIA=$Qme*}E7`WLA#JIT>uckQE|3dJ)L0Cfd`-dm24y9^-Q;lAM%!>jNa&`=N2kdqI ziwvp~sgy$ABFjdSkl2{4wNrVQO|UMcRx=M_x7?K@NHf?0b{6piaU!yYol6(z*{guv8{A>RN)xoXb3=oyYK##LtD{VIm zLD8~eB}%sZlelzm>k!fdL`-w8IL9t#0mT;Uu1WEB!0#x>sH@V}k(dy&sS%^7Tn58E}nTSN>yzw zS8!90J4$ND#d5!X(D6pH>@1d~NrJ+@(u@}z9yQ7`rf+#s31E2|a-tH!w3;DZ(y`|0 zH2izVjj^^f<=UROALD4`nAGTg);GcId3)3_Aknc>7+24ncA^P;&97=-qL+bVswZoq zF$@eDZu@oRB!!8_IUf;UvUmLJGwkw)SJ`LPw32`n}`4h{9M=r9b1W@jF_J z#rT(v|E{}wpbpwl5UUxQZ<#}_p(Bx_x}d1@5NJ*hREM;2P4napekO-;y*dh-`J6%1 znc?0qINXZCv4u0Ks?iJRrL&QWGT$PN7!)T;&9 zvq!j+++jVFQm%CU?FWy8R#kQKgGx4FZc{YVJ%9(rw`CRPfmIYz*Ks9nn*o&Y7vW8a)yhTPO(rLk-A`V-NLHF_o`0|vf9_jeS~);- zN5s`-&`nD#Kw|&zQ7an8_77=tp7xqcJxar{2x6P;@fl@Gm;F-drouuz>gV zQYonc<$ba`PA1b_aIT;9SAemggV%LHBuMtI#X=-k>u?&oM2_?N1uK$j>BM4g zC6d8B;%I`L)(E*&=mF%v12$)rbQski*csglO)+FmU%)@ra4f-Pu=iJ^!}#giz$*pP|au4Hz7+dKAYMMYOr9w`!2%(f90;9XA$kyp{xNtRXiKrNGvLPkEm@0e_{}j3){H8lTyTM64^bIi-1+`P~yRMD?T~=Bc_!r)9=g?DQj}T)! z^WEregedZUGEYp1uFgnFO#D+kI?NXBoAk*Suca~&KUym9>xAtnudAw^n8R&3i{@uq zhQ3d--l~3``TDj)=Gb*Hd8Bd`g8tad8F7O?7daIc@@GV+a%`0ec)_+au!&KFH@TSt z`6&`&SDJt^EoIxDDBCVo&F6HGQuuBJhECofFX}HU_fCh7tiF!yq@x0}qWX2weC|Bb zvGfTT3_F@84FL}ik;qAaaSLT>;dw%mC1~IMI%zT(luN`6 zyd(lrrCHPK8S3%;NtVs!hRv=zT(oED+<#SQAh4{4d4cfYU37_ZB$s66-mX?i7VBIX z#188wCaVdF#?8`2M|Dczw75Ts8s>v<_ksnp6uqjP)=K=Y`zCwXtL8jGqgPL64G}Hw zrW{OJ2bB$ah!v+S4@{{o*?gm~FnTmspKwmd;=Cb4hffjEQu7;LcAk>3Pr1f43 zf2EROZLpBMD$)G3UIXhZxQrUn{pR6`qtTqzt@aQkzmX;OC?4y;*%0Bs`%33~1g%#I*^@Sb z_Z|@9Xzd3W7tqQXGvEEMz5^vhzNod(8e^s%HX}Gta#n$ zhN$}D4KRI?44O51Klqcwmltg$vC+2!XUlV1qCL$lK-zUvJm}NK@4+#&ligArn=)Lv zF-LD>qhi`5z&kG5qk879?FT#*)|!`%@cZBa%mmS;vHEYL zgzfZ1y?ym<*oYTQkJoTS51t*JadJg?MxA2SZRWz>+uv%Nadv>b$E=&ul2~4#G4O%- zjN2oXboneBAlYs{4nmmT!)9Q!Ob7F51pGH|aDWmC28XOGUTq(QJxKdi&Af6EteMRs zzm|ho;($hJ4(71?UPDG|==Q3OJE`qL<#mM`{EeA|tCkYE^F(>AUc3B^4CBFdY^M&9 zr0WoZiHgKCsZu^w9XlYe|4ldEZl&r4-|w?>yw&`Ks8t4>Tgxa=U;k-j z(1bW#5@C3qepwhrv&DsAy|$_$WKGU!Gj;%n-zp6)3?3>i2N1+8Z*B!MQu4NZ8J>2X z0jDxKb696aV)@TJ3$`nX_8nI6Y&$#k~1YxMBDrIQ#?^0KCB{j7^-npa zr&yd0qvR)&wAGQe2OGkS=q>cT&!+^;v+ys;z|mp*=GzV}8EYrq#oRff6LZ9x+JeN1 zbQS7G()Sp{<0q;P_WE|%;!v#YFjBB8NTERL?*M}z>-jX-w|s?gj5O~r1STUxim7_L zxfu}hurkjktUjf6B>ac6r|u=^GKO(@`|;l?03G-G(Gb}U^BRW!(=F@yKrR-0&U?u^ zE1yGlu(g66&ArIyI z19)nuon#7@=aQHJ@(ydWwpaHGgqB^*mFrDz<|bF)`S2JNqTd#6)QBM3Hz>UV3FYF# zDrgN8Z#S;EpnIVF+ojua_?8uCYC`DC2Z3Qax5eLzM6R30EDOt_#~Kzk@b8tKjx>lq z>4(t*_Z%(U0!YH1vydK8P*jy0*h|$y7_Wjd1EIlfhQ1$RO;k9fOe8!((&VjvmN>|& z0OgKq=zAoip*$&o$FlA7qb^!cJAg|)D&$T5guZC|u8NcsEztvFiffOyGM;_OTJu64 zayLHh7{N&T$NelF*Gj)m`i8g78TFz29JbK{b zK;VEUEvrShenQMqVTbaRLGmLN?~P~=c_&cy9U3?infcWM3tACGRo0t3A8kQKf2W&G z*OU{TOAyI+UOHNgrEt(kMC)+}7C!+H`jYjN4!41)wU?-_E9WfRhS>&kxC2ah^_@S7 z#E7X(2#5E9129040Q7*>D>MIl{Ry!(wIap_=RWCIgY$E@VMxTmk-k_es{HMkbWrzY z;`Nut7Q)vY*0~%5y1U?L@`Ja)(=B+@xE>ig1dpTONg7r@d0SK*!leD+aV?IC&r6($Z4Mi$UwbLgz%}} z2tBx5S0F{O`9hKV(TFWmRAINOyUYnET>e03=T(D1!9gE6`Gu+()0?#Cst9Al z7Om_~XNW5Ww^mh6dO_@yUVH^R-XjM~y}1pD8n!g~+AB1L;~JBh5lLSdmlvf5R~-my zoNInfJ9;7ZkT7Zv`7|_4_wIUx3witY+#Ll&+bM+Fu#2bu_8{;BRBHW%B|(mU+#*P6 z0@l_{CO6>~L}BeUHS;j0(}GoASHl#(2SbGEt-nd+iS+XSxbeX!rnW!yZ+y=ql7Aoo z8Jvc=7GByayON>rC$1I=S-@|g*O7nwi(cA>ZaD&^a&Ye5?|oiW(63+Gyb#Q?7M4p= zRwX~=AS+DPL+pQs;}PAGEGGl9C5dw1YU$0$S7dQJ1m8cuc15cMTGjxgit7R7UaSL% zGaVTkkkmvt9V=4zlJZXKjswfHpPu5qo0@)Q=~?9((L^uZ9OaSYzb7Kx8H6|_kItst zWxve=?J_JeHOYTXK6#AC`PLm{PwZ+L3Uc}rPV8Gduw8fO=7Gk|aoZ6vjfxflNVgya**`vBgXE6ar{5m}^8aX$$u(dmtQ9+Y%> zSHWoWpp%Vy_%O~=J`XgK1TaSyTVKaG$|MQ*q%$b~4as!yGin!RHZtMQ z4;vfqm{{GVXP%*U>8~g4N&A^o9MOTLPA|=+yI{qjXn7AM`nhq^m?a~Qht{!2on}Vd zT$rON4TLCi!U`~lPbrE_uH~{JIh>$ZPI~+yFr)NrQc0IQ>3UO#D|~dzcwxOR=}}Gf zuQ5&STTtZiOaaB3RC%Tm7rvtw4wUb=z>Y(618JX_O=rB{ZKkwgVN?&P||H9|1z_7vP-G zDX}cFdF&X+gp299I#~#JajE$av+rfZvbsZZT`EHsetVwc(zCs@2`Jp!Cg0SL&5^)C zhL}cc*d#n2@>!W?`p^q3a=O(#&Jy;=F%e*=up2hWOt$j+nfCe;5om^9VCV;7K~b_k z!2^qU!>4oVQ7UJ^rP2d|L*H=_Vog$M`k_6xLF8D(d@I#uXd>O>8af7t@xc3930x$d zN0_2dMfKK=?)2`C^1>!F!X9i%O8|gMpfm>r{8Yf`_6dck12AX<#QcHG`zxbZ?8go& z>#h*+wGXzWMCfZ6+O6{mfTfC|)Z}i-sGfR0Mk-i0)w=ZmKnMp5``dPoTCROHGvm7RzdR9Bk*Dir zi$ZW0<_ZY&)P+x_nflA8Yf@`+mzx1ql;bCM=TSojyL$)>XkQCaefKa%>`H{VHzWGL zxNKX{Z8u(rNR9|Cl^zIT<(0}Sp=D^g%%mSOOMgu}R5oxe8Dvr=F%8LfKXbGvd4r$z zJqIPoyI4eKlo1Vog$M_$5uFLaSUPYYV$DxAM{IJFKp%~&Y%uXLx-j;JCuf}yXb zfx`=@LK-uxinJlMp^I|sGMIM8tTnd@)R;vv2-Qc2?889o+4 zU4ryXG_tcQ7*;P;+Ih;xQ_~TINNU$i8+|aws9^kinctfd8sbzOsdcf8qY(u25jhK#ONP+?Ys9NI^?<%5+rO zNq83#MzFem*cODcS&K`^SWal%vmPUtzZ{bBtQ>TYkmeP-KoxZsggG^l!4jy2o>#Uy zK__VWuc*Io5x5w?x-Wd%r&f~IPAaOCAppQrnl~>s=Bue#mc3>qiudxP&970)(N=XP zos&BdK{lpjh4tR+)V?(9dtP*8d#vohn4j6|JW*y-R1OFQ;Fq`=tsz>GzNmTR`?hpV zw@mPA_@k+i^0r!o5^V{RlBIS0{Pyj93|JE6mN*ZMBU=dA?H6wv#^g&)_Sr=bX!pSU3~G2 zby8@$tyU91Pp-a({Zy*;)+@@Sy-cp-x3gsT-Q7zPo??xx26hY5R}rO6_@Ek{d7&V05G}!9 z+(@y!)ZHPCyUbmiovbgJ5Cx^JbAPx;IZI-@xux@H%Nfto#-NzP4S-jZJ%$vWr|JMJeY(;! zq*7zYvg;CSw@ZI3HAh^ zSzXV2WPXQMY5iTD7onClKn}jIwN#9^<6P7AXBSi%1w>npT3fIe-Y)L#>93*_e7)Gf zr6sgnq5fMm!tY~yit71X5!QWbTEq>l1wW1#1Qakwfhng(9p(WnWVdH%>8e*mE~qKWv|r+H|g{F2q{ zD74F$5V$W{*dHT9Y~7O)7}pO`(3sfyZABMm9gLJcB{$BXNP88oIR8GFfu`{q87Lwtb)CXt4#jlKA?>sA=x4c+}?<8HvEnGKU zoqEWmFDk-@QT*6XJP)0fnIWx~Ec3`TzOh9`3IX;Q?bg{QogiW|LCTO&Sf1_-AE_#@Tp|NGlKcS6uoZm+yXq%4DAXus^xP;m2pwf zlf~IIR?N;<0y`BL(vWjZ0P!}f6`<4KmO0=tgeM`Ay(}0si4F05GK5a4;1hv9mdxx7 zvmZ1Ml21o{5cjc7QHKS5&c%hTAbkNvBZic&Th*{S{D#c59%TZt(Gy=U=9l6%zYq*oduV7mL38Bt?6<&$B2cvsZ;9($h=MX`4co}L;p4u10Hcz+{V;z@e z&9X5DvI(S^B9i$Qg4-$Fm z!T(e;GKSF2pp%kAelh)|{E;%VJ&CE!dIz4WS3tpe4b!2oeyZ!nc0!@>AI9wKmmLvc zSZkRgKWeG(wn` zKC=wBu71tUH?&S)dNFiVk5BwfUk>3N17Iff9qSibO5=cMzxqeJ?knsUe$nOj_B%EF zV$16F?XH@ZQc&dd*yQH2ycqWuI=h+frfu`74pa*C6z15G@EtMUAX4yDkQ7840u*0E z87%76YdD-@lxq>rQO|+I2JF~`$=I*nsig@=?n*wRcWbB1sZRj294SX%Y1wYDmNYl9 z3k_DaSAAxvChdRnQIDjn@Z4}9VdZPwR7-8XYJyhR?lT7*W(eDF^(93Ck!&W!Lb`KZ z)Uus`6OsvO{tY?@AS{X7_S1zO#k$t0l8T`I+t@7Rf1uxwddv`QHyuDjb%sdyHxe<{~0C*e9O)QRlLmnYbigh z!kv*Em3MjQq|g%NDmq+v87K9N?O9!k8rkzvRBsQxZbsEf9jTX^cjlr&k%Ev)o}E~# zzZvIj7bS(JfAHZ7qIuM>)s026o&7yx7o1^eDx-?BWnP++blc{K)5dZmPG{;Jt2lYF zOR!VT!&QVrD_w|0snO1i#Jl3B9TJL>z$`Yn<9|lS4DIX@?)<4fy&zHHozf{xwQiz? z+=!z^lZM*9|Actc$aLPcR2diO%kSV*Av8WIxnLuo$d5DYdrpge8@haCF{gz`<)!p> zqw)zGckhC3&>lBBS16t5w3Zc9!F6`4igw8Rodu>v#{DW>d%;^}Ydsus`l2BZT0EP* zbZisaDJYExnk5!$E-k-9?|fplDa>?O@NzX%fw?J@>`3A^vsFVU?}KYENgA|8U^v<2 z;%c!}LE9NjMPitzktGh$V}lFVdKqnQE1(CDSddnhPpV5gmym=+KK1y%fdS4jEf6x4 z4Cp3#*?jxMg^f3yQ^SDzS-9G$W`om`i^FCyhS5zz%2Anl2CqRY4fVpGDj5#C5=2_s zOLm8m^hf%wWn05Xlj(OY=jc@bB(mnyWQXIXr<7>5qNaVCs?*8()n;+2zn`ln+>Yj< z6sMHXU>kw5t#vj(&|IhAN~~3PTwP!grPL_IVC044L+PGU&d;C7W@}=HF_ww7xJ{LU zi1F^DV1m@$%I7>G+kWjdL+mcuwUAS!5KQjgesMh;a;cx+) z-@aoGRLxu4euLJT7s|=BG%sX3EM(L?qV`M^#vyx%u!39Ah` z8ux`yM=S3Z!y;CD{nXt9 zugH6rKw>Ws-m0H0%)J!f2+cF($IJv|7*PMatx+aO2K^xgh+-9>i6=i0@!4|)w+nzk zU3NJ@;uwGcHGsM8#TFQs_}v=I%UjMxlZ5Uq#ELc>hAa?C!_t#T$lh1`f*-F+qH(f_ z3-LT1u!s%@r0d(@i{cZKV4VLDyBR?~1`++qC(k5#L1nO$J%DQC*|K9}xE5kE@n2m5 z*+P`${~$yKuaKxVAo(v)uv1p|p(vQ>R&*oG(|GL%ynA)$btnGgSw`n{=9%@EgGPZ4 zyW*1#$RuNy&SC)zw*^q?|G2?8dzH_lA?M#ElSyi|CQiLxNXq=*IGs z%)do7P@ClKBD^qfc0FDc7q@IzvznVq5A?HDX-jixc_&~xdaL17m3gzkc!S5`5>0;t zEGH!a)(&z5O8GndUnO}4gV4rGNS+FPK~VBM-xtLg9^pM2d*ifV+M?wZAYHt-3uY!5 z=QLmb-iPXTU#v%>dshL)>=RlZx6!Ne2$)8}tijfhx-IpjR%ZE1~QZ%lss)nsTE9a=Z90Gmlqw z-wGOH_vf9QTTI!~blxtTJYU*NWq;XU>1X{9{9%JqGX3Gq%!NEmF}OYwyf0vnk*7pQ zJR(%vulilG?$R{CJTCLU?doJQ9sG4W-STMs4|bE^8Smi!Ln)SWVIN%MzgQ&yW1OG9 z%=h4Wl_PNRo{8iCs6YOUD?QfX0;&6eNpm6}jDskT%UvTSN+0Vm?VG_gItWO5%m^l( zJ)v^&ckPH}d1jUvXM2D-9+V&E?$`BZcts@zA+nkQ{lq)+juzH)`F;- z!W@Z!bu|EDfpkhEHiydJz*qlKx~smoBVDfHobof1VP)$bWzxjbn3`t1pTdxA z@XO4k^b%4gz9z%iLTnO-R-`1yFQjICQMwmhVIA>-*`^6js7KxEr@QVSsLnopFpTYaH53>_t}Chz3=k2^4K6Esq7PX}+r$Bo*f!OxT1a zZ(b|4ykGpdgJffrca{2fzlvv`eXLZmHQSJ(Wn@Bz@&EP5-k;y(9Rqn^7>T3csK)AY zcaP``RIFy5HQSv{K9hE6L+^Q{;zbLvA86QJR}u#Q9*w%IcH0|*CjZ5o#0S_0% zETIUI;&7)_nt(7DJ_~qnkOVpim!OBcYri1E8w=kfv2a<00{k<(BaSXc8;bPKXI#fe zpl5RW>A3A5c?nstMDD7ja8EGz3R;Icx0ReT4S3p@i! zx(8cTv)}lZNmkQx&$KVf=|&2f9Py~CKcRBJmVxkg(W+Y3I)90X>1Qg3YX(Iq!y&Y$ z{#&Hc(pXy&%-ut+Vo~q(Jt**QE1j(qDg8Vw@qnH)x|rk+n;Rin^>dUZ*YGpd0w;~( zln*h?Vo^Wl9Xr?{vCOR)r4bsf2n*ky!DUh1;HT>G_W!h6m@V;w%@d1DYnL18o1H3w zP5HcTBlp5|!ofFB6Z6EO%TBp+e+c#L%(ZrP{+sQ`p z9sN!mlnbj5 zf$Ddcm;G{Id)1;(CY0-N>kAkkog9F21w9m|3C3eh&|qnq6=7)NvmaGh@G2r zLYL-eI)*eo#q8L7-d)RoMS7XRlupoEh1+P&Xh)>YERaAFFAlK1blkZJ>9{&|uHoJ* zKc;`TM?l-Q<~;ke_Jnp_!hQW`^qRo!tn_Gdp&_uonh@_GH6G`yrVsq_Y&f00yk8` zvtsPDbhu+Nyn`w9amCstybHHG;N44pVjyTMLMjg>TUzH`it?lpGwR6WP|$lE6$Ol*9vKIHAgn)YQ#O3D?mC zvLN;94)?|J#62Amz(54o;0U9FPNB-VOgUtfRKbQUz6>H6g1V`m!~g!Ihb1wxb%I5E zlzA@*BAQ0M$SyaoZR~3e%a-ok-D(AqG;8WDwVj5_XT8P)YA23wTpa zJ1=YquQ;{++baD8kq_qBDmS9VjLx=~PA>&q*5KbUJhusC^H<`0o9p&B8!=T|n9kDN zW0n$Hu4etE(sSirdN+jr+;i0M4<`#DV$1b@n(yfr!6g@sDa|GG?i$gD@vV5+feCjB zfEnke+hQRi1d26d?faEq(m1xRO2Y-m;AF4=eM^zo5otUPbRw-QS+;_aX3BtGv=aYu zW({9|{w+E5wC_k;cfYDJuT=fi8F~Ze@mQGhW7G7R&4dMkX%h+y-jBBD)8vB+K=pw_ zi~!dzn=%G7a0+W?hm-fQ59m%+Q)xriZFg7L zr|SPwtxDVxF(`1%_fsRqzdjH}7P4rU%}yJ__T)r=c-U~3rM#_nfK(P#W(yK8k4(@r znV)*e-gub6-3ZM66c+P17eC^|s#9lb#TpumNj<<#NoXQqX@hWVBkG2UBc<97R4#$t z7i5Dd6Zp%XjHfJP_w3!OC?2VP@-BeDLQ26eF6kIbG86L%zhKA zg$qt)O0*&KxGVG)P@C0m-a}D09xI?pd{z#FNkoVZ5%Xa#%YVIx=VuA4hFmn)yz9?l zIgPPcl?%pSGk}u=wMwSntw)iOf}Q#lN?P!gdh~LvWF$F;az23xye)YT@Z^i^!DI&H zNU@fP3CkAiI@9bv{N&!v$HJQiJ~%|?&9M4&32Ar5sE`Oi@-8yssxE-MMKNE|lCry) zWA}bR45oehd^p-95&S0Ev0=x+qTWHF_|`-~WXsXSI4k0gE)y%cIb#da6lY2C)i#E#5+|srn9AsGW7KL385yEhz+pzD_hnwwF zBGC>0R!q9KzvT0>S$+=-44<2s8bbZj?~lO8#GuJlLQL*hBwTm0l&N?Ev;*Yi>{!Zo)M}>G+)#1RES73WH^Ke!0 z)};OPrPbYQ-eMue_!{0QRuwH}S9cYc$Ss=`#h7b2W8+}{dqy>|7=&n>3*G}nCBiMS PX()OWlz)lqe}n!HBOa@R literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/hyperv/diagram3servers_thumb_0_0.webp b/static/images/auditor/10.8/addon/hyperv/diagram3servers_thumb_0_0.webp new file mode 100644 index 0000000000000000000000000000000000000000..0d129ca725c82c2c38288db5e93acb54777fbf7a GIT binary patch literal 20342 zcmcG!V~{9Kvo$)lZQHhO+qP}((H`689^1BU+qP%E{XFNyiF@yPf8MYEbaz%{RAoi> z%9X22Nm5MAP96Y2T~tUxO@V{J=`EtK?iDCWMBH!-EogK-xE(8+qo}0H+X&g z)qIU#_;0_y&ADDdTH;^y0(w7tta;d&>`?CGvKHhnjf5~n12gn`%sr||OUij$y!T6@Po@=X-yrivO1X-S4jf zIq6}cLu2a#yUWBW)D$JL;RM7AsjFMo4_$hraH{Swe&<&$RJ`PyJE-WIm`(tWb;EQv^Htv5fu#%C> zQtV(;4A>IztI*9adFc^!P#^z*-G7_p4SgFk@#23Xu^(Cg-{E)+9QX z_;uEYHEpLsjN;eHr2}IR8ZH;n+ZFC&Gz@WSwV<&nS=)w6J2My%G)9Om!^q?phsu`d z9-ibZ-yZ8~uwYgMBLtQGTmkvcBt6TxaG-l~^rgOdV)+($q17c)9f4vr2ZES58D2}f zLwWaeq0<|G!kxHQ-S2XF>`He9OB-V!R$h-tY4hS26Xg&*p0PcQB#A)CUWn}rJkIM8 zvQ-N5k32YtV7ne!7}aOgql$?N9MJ10xp~=mo~^u~2}RD8y21;T#=_ z*urv5mgqpNtjqglQO9Wv+kU`41km~E5?08_g%Z{=1mbZ4<<+Xy(3mHue6hhyQ+IQ# z>^MzkVF;Wg<_BGz@%LB``>KV7?(FD6oFEX&T@9 zBD+niROk)Q*agDrD>)wZmSUiiJow*oT6Qh!-CO+t(TNGRJ}BwXAW~>;$0*yFavMUa6P{5k03|h`9(GdSY+uzf>fXE zQmQrWCFL=}M9<<~ASmFzL<`lG0izwxsMuP-AezqJS(rSRK)x7{D{PLTi~Ed+{sfwT zwpyaLT|O)acr+7H}=fs$pq zcWFIMO#*#exKVh-WRGQ$S#T&7kaN~0s4xd1Lk895U9Kt-KzwP@v=@{|3F@~qd>_|) z?(_}yT#WqUSZ1!22YWWpF1@0rKS-4L>-RjC$;U35%9&yMdU}5FXB1j%s;|clne9-E z#^QMw(mCcd0l46XJ1ZVi7$h2z~_~SiW=`un)I&pDWzcaT?erP7Pd@LyD%^uJ?_~Y|NZs4)# z?vqCkEXuPrzQ*9rr{{kMN8p-|c7{81ONM5eMLq;BA(dtDbT_#2oCQ4)qX}lu0!g)( zBNBT5?5w%eD!t@S0e14!mTMm?@Fk?deMO)unJhs`)gz%1dyz4Z(&WE?XXw(lzZv^( z+#D&olWjh$)U1N8N$Q5a0PR|6KHA#l>q0QK{LNNk;Ck4xm4Ti!-pk9yjYeB2RA*hp{bGmx^%}8l< zDqKZuzo(;yXDGjIav4`@K#Kz`9!|2=1T$J00Tf9Ky6;Lc;8GUMi(gCcxD-GZ7Jy^b zTnf7RxS=Ax3@~5>em(Uw#=|s(CE}#i4X#tcA3nvSyfN5Rb8&t0>5Vm;STzl>tiQW| zxMgFcBO>81BAeZG5rOXBf*`0z9av*mb|p~C_;)l#FWW*q>sh#a4a{BS`>imoFEL1W zdL9mHI9adeQqTl>_Zng-L8SQp1jMZo9JK2wK7}E6^ws-_r`wyB>25h!)7=>DrK(^I7dzhx=q+@uJR_jlJXs5 z5b#1Foyb|sIVBNB-q5J7T)nptKK64&W`=;Pc~J#-e!(4GZwne3mw{6D0$;YCvzADCj0jCM>#ETm`67fygHKrCtNBn-;6qL3617^_q6c;Q014e z79hA=9?vRy=Bhn=U8N+QYF-I>?aC~TolB)NU{ZCs{{t`R#H)}zT$J2qKPuOHJPY>& zAvD$wi}3#SAL^{vKyj_YIVnVO#*@z(q=hny`QroOc^5uK1da$BLQrW-p&`6rOV$CX zPZJ>bcy^r8Klv6R!6*qvNial$QS=KX_LL<@=JafqQ6fByr-0@^(UzL_Fg0#t*zMYfHZzPocBXD0kdJ@~Hg~V#3n|x4?)v}lG=FD?#yv(0 zp||f)zWJ;!gmKNB5iMCTcLDo6rZw52c3V}1La1^b%Eu`cf$4l5;ce2~4-L=yUe_Eo zK@j{}e9a@1gQ2kz_^(C(uQ-Bh*iCHk@}&Ob9{q26@_&VZ{a@pE0002rKNARlZ~t@I z*OedFM4G)X<|!A4tKhAS9>$(cpO}QNUX;$p?wvXN#CKJKlt)6e#R-ZD(Q7tIRsZ5H zeiqBP>{Mm%Iklzk9jqHjc2I_NbNfkaO%Ie7!!{II1vD~j@1a|CeZ9$N2edOc%YvBA zskvr(!shLvunz5P@fwa4(y2b(diGSw(Qu(DG$6p@FH&~xNk`R1B*btHyxb@ob@2!g z%HrVxX(h@soj3H`x!rQ)0my6oBiIIEP{Cwx0{$_>r8KWn*TFfSv>BFF5hEllvKX;`mNRgSKAL|PF!2o1GU>b*QCvP^;-WJOi|(Fi#i zB)`e3Tp;Z#$GrQ;0C>|aWL^I`0E_1!;rck7fKQ!Dlzw( zWi4_tU3wi*1UFv-aW1? zZGwQx7Ybiyl(y)6r2s~+#)ym6xrPXh;q0!S>?4YF{L<*x9i@-^9{1}zjUVJBrVKl* z&Xut52CE5y3;TNY@3IswmePyuOT|%oyPVDs+E(5E{jUmjJ%k)-=jr79A2kkoEe=Qf z#!_a|Mc36uSh}dtJ_ZX&?RC6QEg!J)MNAU3A*+ZmHyVbFs4l|B{n`+1dNJVrGXDKk zmG4>@Jtw|VCCI+LDbGyS#~3@oulrG>rEmEhpC)F__^nM+V$o8n9&_#V6oTUG)|&S; zzR3E`HXF4+e^hwZ9IUh@!T+4|LN=R8@b{A^M+YCWpN-vfypUXSQw*jg^HHKe(x_QpgFYrE>gIu+r9C4j17^%>chb!qHxAd+e+I3 zn^!gp@k8apv`7kgBf6{O%k(44Qxf%Bzs6TC#lKIFGalle1UwWrL~#xw9o9eL3tM=} z+uD}M+a(L*cj|bD=%qODqM)A!sH?XPXlvQWE<>imV^n^ zJLsvG?=?8P&OyKA&Yx1YGRw%is`KrE)3%HKeK$j2bJx9T!pu+2zVg0Rv1TAA%sGEf zwX~*g0EpcD*oiE?y+5jF$UT}iaoWN29*QHvyOcM+UZOWSPrk^yn(Le_j9H69F)%uh zq*k2y&F@Dh^O3}a8w#xqPxbrtRT*nJ!iP2qBbUZa!PH(rj!=o^?OV ztH3&=FBy8z=4q-=#1#wdOX*(YWqPWB+yJK(Vp7KC>7j=@yatA8cjxxuYRKhPtcjm^ zDD%%bp`4+cmAw3}D@)K@@XfNjwg);}>v-V3o(oiy80Asa{2qTIjMBD(bRsQ$je_cH zrf?wpctpELg>d2*oG(fjuZ@=!pzNE01p^mjZhj8W56l~bV29K~?m|6t3k8Q5Ok z!kfcKR{gPzQF;kC)+nA`qTN;b>v7d9$&Vw1JAd8vo?3rjx$*D^v24ScbNNV-6 z{QjuH7NHtt=_urstMreA0LqP}rI&_1oC6HdQ2U+*xoF8#W?G+A3<{ z6`vTsfdRyF zPjf7?LSO6SkfLe=R7%t;wO}1C?U$I>kWjSOb0rGFfSeW~broAqGSCTSD$E6+g%nP< zFq7G&05pLtzt|EEVy3jal2?H#zyjLgRaZ96w$$q?N8-vW(d01IShz{nl!m#VRQ5*@ z`T+Po;nOl3xZCl92%v9KeRV;C82O3V~V>SY7Cxgl@MnL5Tt!n33Y#ADivD2HaN-)rc!*+!$0 zg*XU=z6SQxDeP{yXhr678QqMQ)C1l7_0aHUI=w-UjfV-jm(TF~9|@q<*jz$K`KjIdSLWQD9TGZFK??Tibb9zsCOt3{{I1nL##Eh$dy4P;Eqp-7&>cMmcTDk&!= z(*h((Pj)RfUaeohQbNZ!`J-BK?mVU=_Ga5!rY z@9P_*w{Q3sXMC)Clu>}eo5?C;xY-Y<_%(a2I10*`S2foh>)~n1Z5B_)1f$71@2Zzk zu&Ow{Ivh7d4|WgJySA8-Xzb|5TeTWwAsbOX7vY6M}Fg8J$37lSgb%Yw4y z4bWtW)vc<&1{4QC)EHgTEro@8r$`45t}3wK;wrX%-Rhda_X6&h$gp zK&b^pz0?iaFks$+CG}wwgd`i}1-DKd8N!cA(0TH5u#*D)p!9gJK_7Dwi8ruZJbh&nWbv5VnD%2-VJyH7MomS4#%}ZSSGRA_- zL_c@AUtV3RUYrv06RS_GF3`;M$ykQ5`HQ!0p<{RVX=;Z(wu--qck)`|{s_mv!zGi9 z^9Dyq0m{L7STJzzCFYIsmB`v(0rTB4#YDBr^U*uhwhAsL68L0YCr|G(Oq4pe z3{-GFEMdLj^l+u_y~vuA_x>bqwfDnDYvz?Tdv+lNR@yHNpANieE7$?JZ`aH=AMFD{ z{rnkb84J+JO8X5RSTzD6d+$F}HsdVv4`kLl?c|{6F`+WO+TMYCAN};c;LWO&YM^N0 zAb~hKY~$<#LKO5Q<$-o1^n zuVKkFl6wdHKtdjP$170$C4qk1*{=49qEbwsSJX2G$~|FPRZ16BZ0CQVK1Y;76;t=f zcubm4OrknM71LfF=;B+)~b3X)*r2V>-#;Xw?)>4je=CI;8j$lP`nx zP0m>&BXaz1*HEc>S{nT69N=JV5)?DSr83xlROvlxZavjP@}r%1yF*?V;ZKg%e zFI7@O4l{vM_+Tu8&6oOvKNwo#49C}r-nST<{0jCFTLDRUC(7B1g>^)m+u8bnGn8KF zQjr;b21O%XSXf%*^ltHoQUR@vKYC_vt$o=w|GjlZ;c&irb{rE3F_U6(@ALOJu)I8b zA65&ST;IEfLByVwp+THKruBW2_=bAtd(&;ngVNzlPJ*5XGgB&MEHoK4t3w|(u|Vep zEr4nD9j8$?`$h~%_opbg5T`V&WI{0lE~4^y7sECtC$Yw2~_s65sNS zw=yl<{7rqC9cTa9$m@1|NE_0l0XlT+c537?m{TxElSe?pWX_oXE(dPg@7#|O45n-! z#OlGN(;9>v0KIXu^U@XE(9^54m5-(q#|e_DoyVVlcdSbATeRa3PGg6EjuU~7rCA}G zvM)m}yOY@!s_3WFXiXD0E+Chw0*7L7T8hHU9Xq1CA7jlBlrXM{(!B4T{f-Evx zowMOvsI1$u^an78g&?+NJ+}z@$_upR&>(1!v9QokM{qi{SYVucj1pIDfaR~>AamcJ zRNEP}&sN8A`)X;zYHI;f<`4(EGgeN!+aDj=_n`$D<|J=>*Qw0D7ma&?;Bo6ZvJ)wc zqZl;_%6fl`pmwj+)Vlkoc>#bAj)YXGoEl&Wtt4MMjc?zV6~ajyP{`=yp?@GQK@aZL zG})JC^2J4(wdMssW6nk`rTiihW15%Uf3}}RpI`^ss1Wl-$PMkaG&{5Tm0{W2*A5tV zc_h0F@V2;GsY1AgQpPHPXXX+%-L_ zEm^Zw$R*IlI8k~ngWh?KDYpkY**6q0H)N(AEZ=?nI&qIgQzaYVWfrZ`qJ)CBE}H2M zEb0&nWgfe}&0}ikb5mWxl76LStR&;fX8RM>{FJeUiD?16IX};Wq;sO$`%7}}UPO59 z@!oMwGkraYTe%?pb^zMS^-*C$I`Du}qu7Db_!e-yekv4ue==(=x0+vVC&QTOZ65zl zON12fn_yCL=l3qnyK0yHtLD?-^00lN{tuU6PbZNs!a$3@i0w}F8a8_ zoxbMdyjqaJp~R8?%=eqjc;|t`rZgd0UKnQQ?nMWtpk9Vh^$g{4NfFQ4K4PuB@k3R6 z2g%*=xedbrVCLrOFc~>k(9y z%lfH+P(0!7*T^pEh=4R4c@>Pp&})|fr-6@d@mBsBhFC)NP>8bd8z`uJ;-{@wbtaiF zz>k#7=Cciu!z5Xm#)D|w`SL>2lIKdd!K*T7UNfZwUH;zF1pZu8ySn-b@2?BgHSBk@ zxQ$=f$4Bb~lEsbfDhAdMVS0Ed?7;3JsvP+n~xV4+^IcS}liJ6RTGSaB! zpT8GJ_G1T)6El%O25)E7g8%Ha=)cJimzlyBOffeyLok8>I8q<)Kay83r5R2vPTemv z4f|+@eVSPi^g3;JvVh-!jv&fSCmGC7CqS}NSrne;uDydUnqnU?VaG;PSUh~Y2>t<2 zP!{@zz){{aa{Hu?H-Flv$kE{xHHO6yF8P>eCZAwn+Eef=u{kE<&Y7OkF=5t#?GSUK zA5p_bz5B@c3Lj6Yp76e7KMOmbNp@J2KM_&MQ&H;Qr*r)}z~xkD=6ccKIa$ar^^4|; zy6F2o!?JIU)=fm_B%y3=wx~4G&SfyDpD6E64*_vPx)($XTz&*-k$l7Ymg^kCNEm1R^eU~W>fWqt za^%PR8uKaqB{XZuHs;l;@LXchEx7-|TRFYmO`tgv2;6vl76vY?G-VPQ1yV^c>u5mL z_<&_YS^Vsyr|8#*=Hv3qH`f|LtTHS72pM#1USC$0+b})KRd*XJj{)ICk)}OHK_wzx zbMZ+6MsrOD4hmymMJH;Bp1c=7mD2^x5rQlE?Yk*)=?b$`nY* zCHt1JSDtVCrN~ie7oO))-@ut+d~3!?Q2GYWQpO8&2yQUkku@K?tJvkv2T4}pp$UTr<4gMu0zhG`gFp#3M(tH3Tkm?3E`lUAFe z07ga-O};>4v|rJqGPsB0GHVJ5c-O&GBIPF3_w=UjRva*`C-Z;&5K~@u(RRzn)Dt-H zK=ZAy63`)qv-~oAokD0Tw(hIvu|u%9hr1YS?5_RdwpWB|n$A9IIQ^04fYb1BH>eTD zm-sQ$pErZcAq$jG`AraWy7c7E9=pRI`N(32IwQrMhep(iMvEV*4&V5%jXoH`FVC>7 z8iu#uA|(@+5^DAGv?s55*MyV8mq^M?YY zeh}*y^^AlI=}6(ul8-Xd<{60HY#fH2C? zXsC+z6!TTg#;!Ta9s>hLqfGGjzT0j&r%1_t5g2<&30OZ z(gD5zBn zL_vw#2Uf|e3l92uLz35-U!D2PmP?+Y-nXY}gZvb;D*-#q}SX`dUIj>nJJP!FV`S|@}r z7*cz|TSZSXSfH?HoR)Z!ZO3*35KA>yV#tH+6a)7jq6+NLe%=O2qY#DKu0hoA4-shn z)j5L*z^Z&n@ANd=N5V=`mN>qS2&$XXr4*hN;t2i_Do0jXo+*UP6y$G16DB_j9jvMK zTjz6^5hM+GF8leP5uM5^lv;=N7BI47#|I6A}JBxySRBJ z!mC0%;BU@s$mN?ET^B-T((&;*X>iyIXY=f9D6EPrwqP=oHcc%`gS{p@n}=?*-d54% zf^CM8*|=`P|MH+9f9@Z3`3(4HU;zLHY!Gdff@ktnuEocMB`MtdVXJ_1P&nuNsSC{v zNpFQ);2SHNF)dV?5ogz|gZ2olg-BDl9Ud+#{q^-GQI_R1JyiZSX*44Z7V? zHt}$%(*a&SKV%I8N$^n9b5>l_bN;0U4Z>X7>YJ#@GX0077m!!|$TkJ+;W^9k%R3+( z@i$&Ygyd9(1hj=ljXm6*WkDEw&C$|cZ)M_?*L2Q)B3?@-+elT_Sm~?KL9LpjXE3$f zg={f;i0*VQLF)hN5&ToxIdfA}oegGMfq`xR{tYf}p*#m&jm5mw|k4*tc*vPOVS-0Ub`|y(C zEDv?^29YM3Z){s`04@WBv{sV7ycZ!?FYq{^sp<}3rmC|4BUd+8mr}wTx0+$uKV}&H z(Kc6S7fGpE?}DxGh&pZyK$@a%Wy}kq`sxx}R=HgJM~C{&a^tI;%rSm#)n)_Xtk2uS z$;lX3HfJRnfl`)lTnx}X3ym(yql`KNiNWW(UynQ6SV3-FSgUjx7jBO#sPYA##*E{2sdR)K6J}@z7pxru|>_R^oA0NV~j?f$P>K;69 zA7#0#LynN+Ao*U6IZUTx@pV85A09(K8Crja_tVaYE(4TGxlp3xrV)><;J!fVk>XpC zST$E@6Nx;r2g*R4k-Aj?Q&9)YY)9dn9)ST`u^EMI&01Mmhm=|EGy@XtSc-LBB-ya6~Nk>`y%^p~~fdP|01%JZ$+J zT$1lvePX@fIQUJ_vC;Hq$CR;oUUZrq*0QWuv#wgmvvn}~z$MM50|j1|D-qj8&TBZ;2!EPYWbAqRP3+zNQDI&2o1Q{8g6S=p1ym)O;sa#ew*KxfL9t z0HGzl!Tp9}DWat8c2x&^!U}W2!#*c!p#g{D*E_>P?hnMvj&=RViX*6yPe}s%Q5^Vd z6suc$f_&dmg5~@UMhzLd@4`>v0usb~2W}4cD^7rj74?09W;apelY}DKCBGVDzVuP@ zjghSTIox1@n-PqZIi;d9axX8$P zYc&vaEOTl@C1tAK^-*!>QdF$(u+Vc!#gYFiI}2Gbn%g4pSeo!yTm^xNJMS2#tn49V zg1pm~SxI%due+Xa5nTTOT^|*=CJjd^aM7W&w4O}A-B2_^0H?d2d}fDNJIXIY9uTdS zzOe$x&bAh`8@KMOH|s=i3~^??i=J43+Wy^%l<3ouM&-Q?m@gN6g@LMq2mRR1FIeJC z3GsZCZjfP`Q4CgH4QiNMS;?y++MS{HK6sCFDMxN68vqdbCAhb|pfrj-;82@T5<|=O zg0Re3w&+$M_$E#r`fh=iiz=z6Y8xc!ecTM{%snWrqNxR54sSGnuz>SQH2J!LP7|F5 z)PtP3P66-Akgn5v^vipdEGAdf5N8hMPZlpG%UL_PuX8?-WJN_4gyL)awKTExn&g9k z_xEvp+I!!@m%$BF*RfL!hxRE-HDnszX|UQY)>&^n|B?HWMq{DG!GPkF76h?Wu2QLsiYvyudCl za3%a!3+VjDbkE*odyXAc#iiUcb-mA-T3&Fw3taI0roLeynqX= z;bMbRs2HJepPz^KpQi1ZDQXDpctPb@NiaR%G-)k@*zckq1Vaww710R0j$w^?%AG=+H?fu!g@4bQ5#AWpi->bEinC>*U?9muZZ zP%cI}|J@>GkpAG4lDXa=u7feVkj>|qH4t#ce66Aky4*iCL>`t_S+@e6zvgXM+&$Ar zBn(H%5|my3{JJ5PvPCe6F&WbJhZ2RP7hHP6WpK^Q`nE z-8vIkbRQ~q5Y`0_YX9M#d!`Eg3ZR8p)pc4EigV-NZn3&WL#8V3W&CmpkLI1lHI7`dNNA=mJ7!emHqw!bczrAkw zfMvNMD6SI-{%W%~clV^j*RnNp`zaTtgv6k)Q6T7CKXmvW-}lSe(<7TR`mw1Z&vm-o z+f(t4Tne)rgY>0rajO{bg-`b3ID8d@aYpzJe@MzcBh+6R=*`ap81Hd zu^fgWioGh7;*`$|Bq#F$jop`|8`m(8A(cg-3V2j7CTQ#!9ZP8&b55GzahR|XzK@@ zI}@7Ca~n0vhkGi#N;j4ZP?EuK>Y%cXM(24{jKE=|dcuhSRvKDR#D4D8u&;F}V3i*6 z?>)hRdAKz#IauZHTrb7QFXFyh)fKKdqwJzlUf|=8QK7M=ydtIxXFkWA$jG1<0byN~ zzybl7l-ZOC5&o)Ksy=Xs-z91}A+t1^72F|dtDHfp%QiKobxnh+%d(F)7LZ*Hc1Pud zzo7qIV*kkh9WNeq^8i#BD+EdNoci9rqa7g-f zQPB-Kn6?l06)N-$v1sJ*x^$B;hqztl2P6rZ76&L(vbPd{6YmSZ6b_0oTnE6#W9}MD zc0+_Bu_dS(*pV- zNx;kHT=BjRAXjA*!Ue$Z%@2h>36O|vpLCDv8tSiOUY9Sjwkn;;WGz(?z?Bq$bKAd( zz8u5yrEGH?ECH3Oa*i?isXl@q8a3ybt}K=*%fZibD?-NdeYjI5L*I%|`mQ1O$e50L zz60L~hGD$V@SDl+^MUDIE2OWV%HBhh^XxY*q|t6D3#PC(WLR-4PJci*xP5jNt-2_~ zN3cZcsSxN7nu2)oU8yuLl>!9rN;DBK7}BUy6sYC7+duWor@NwE?(zICZxj)0wjw04 zJm+!|dsC)?|E~PyGBTy~TXG${D+(~@(rQ4`2CNAyfhL7^iJw&87Sy*xm<8$UY@MOV z9L!hfY>W5qYWH==8C@0Ix7E_EY=XC>{io`UIOjm~4~ZF+GH2W753>#iq&QhylYS#O z93x-PRC(?@U99h~Tn=DM!(xD+ZD2zCn%K5)`0Y-x$qE}mrB}WoP4qm2P6dL^QZIUa z2)Z%7F(OhlJylg3yXT@tK&9-(WoxEG&;cqycir}{f~x2(9U?Vzge#b*D7@Pd3-d~& zPbXxcTQ7fcj(&Mh{~`N~Q&5f$?RA;&hiUm|<47fmEQdcXV3SXuNTB*4l#>U*qteY( zAlOM4ht$Cbki1K%w_<9bN{(zk1#Y-oKvw*OTL?-|Skr=;Me*1%PQ= z0c|q+9~A)!9$R11hKpVhz+GwXa5LX&A`pzMqFq?Uv6l;61Ah#f2^@d`j3AFT;YNES z-~VfpVY`c%im9s#4xdZ=_i>%4p>eokXwj6hnELYv9sgQFI1F;MCMV)J8T6n?b_n>a zkbxbh8D3})?elx^!cQ~msiE@L1LC|`1%OP8KGu>esDt+bH`;qjkIIx_I)dd*5PuJ4 zowrFgrCCUwV=Jy#Md)3Np8x`u(|f4K9%L!B6b)ze>m!?rVv05tVszqMY#%W3V*?pU zp+jcP=FgOGGfGS>Ig!SqkPM?SLKAswdxZKd(N0~hO#jbm%V>OdC^b=!({xZunk)QI z7rY=bPn49lDUk78tD>#Q!IP}XgK_%1d0jsqw|J+b#>yPpjeKk{`Bf?@KV)vk3gr_5 zW#(aE!k=EBGfI!C{!BY1+Su-KttGS;Q9{X=!Mg(6gvjr3;FJ4F--^08Eaw2=R9FrI}7c$ z4xtcr{ZH%NCAYJ6$Jh)Hzet8XQq&<~R6-}Zm`Q~`E=_v@$|SsT`f-ZK4kkhC1S(23 zWCP{vL^1YM%$b^1mEM1x1#(Vi4FmvNZ<`HK9(*>$3MB&MxRCwDqSH+wV!i;0Jl=(s zipU!qSD;fFT2!8{6f_1^n?kBlcyfqoIC~0CF$)!RV!gVgODe2DPn;N{!FsifrV_Fa zpf|o!*_K%F^WKze_Sas_zt`=nP4XTpOW>791wt)Oy{{(xMp0yb0c?K4;|J^U%R{8S zz6ujMLLbf;2lKdtl$0$E+FYScWPFF62<5_~$O=hS32g!fI*xs` zEmV(p|JPAQ)n&{t$DH91#4=Iu2Z03E3;`QnV0B2)jC!0xKrP?@!n{Xm!f^)F(y}%8 zh(ODGNbUW*HAC?E5@hN$oLYNtV62FD9XSY)c;hh5l4F9Xl0PJ$4KWCEgQX;nBd6#~ z>rdSIuVzoeM4b|G6eZy$k;Ql*&0;k;;VEC6VN!+noxFgd$E%?Mb`J-Go3HwNjpaL8 z<-C#CQB8niDi?F00%cBxDZMNpkZ24=Fm=`cO}uA&zK=2N^-?iA#WbA#C9yIR^3)m) z0l=%7S7+1yw)ZG82WoO6PQQb;yL#4~ZI!vz8|>-W=@-JFX#ZsSl~v~0IP?Eorz~C~ zsIlIOw$AQuLmWS50shg&*Hz8>^pC{7Bb;X9r4S=7Mb$18o!K1e&nP3OaJCuY(PTB z%tXYQV8*1F^0q!Ebn!pxF*pEHOOP%5eltemn_ZkHt+Kp6$NO!Ei>l1Xyh}7ly(nL^ z{<~^k8oZNYM3_}0uG>s|uE@!ce@wuIabJyqc3L{$;(cd<)gaB)c{?=kOswk&lXL~SFs zt)9WPR<9uNSS@RM0g}eiKIkWHxt%hCAuNO z*!JFb3@$9pU~iAg7D8ssslHLEZ@_AE?Zi6-+KbwDo^*MnT_&EcS<(X4fD!zY1cUKT zP&h!o0fDNoE&JIfkW^cDmP`q z8T5^;JyXe+Z8_kh>>k=M#C{pj5+bZw{8qa^WN}Q>gX4?F2|iyQRT_egx5E7Kd;ah5 zjj^-fD~RUxQeSw8NoeT&PoU|+9t;vA=xS#tbmR;hSnc;Jx|O-gf-PeXR8l7oW;e1X zFJrrIwj1shvZp)iO6e$ZUEJinHlzt6Bioxip}L0o)37%didZq~%@knoK_nleN+>}Zi-z0?ON=Wi7@92%F!3tAQgRlXf zTW?sF>Zo$qzHbEn63g0iLw3iiE+@;mIX=rlanu(Xq%BNI^ptK0}SxDJkhx>4LO)#Sdw;FJS1h_Gy<{2K4r$Lfm^%_+J0IHbP-w7k=!~&i}Iw2f> zAs7Xv2?5u7mr8>fNze}_F=^ufVJ#ctD$OmM5RHPt_#czKd zQAS5Q$|isY!O85m3WIl-5!T_yl4-31+3+1wqaGR|^nK zcad2+3l8w6YE%>I_UzEF|tP}5`*G|T%k=U`My0KjR?oF+vvR}m5;IS zbRXG@-5l&!2(9B=x;YAcY&wkqe03xHMWMy~dU&<9nv<=-szU9#*MER;P4HV=^#_vH zXymX7$2ImzB1dcNi_@-20vk^6ac4dxcFc<70{^@-p*4E;Zs@QX z*jhoCwql*D`Xx!XcdOCyGEwlWQd5z%GIt^6LOD`W1SVo!hw9V#UMq%clx9*#Pju~+=d2Q%ku&TB+oRR84^lWeebs40+-}oWWf{1)h%TIM0u@B?jCeZuNlvr zxsl?p&$$`5SI}IDbH|wGF+`|3)SVB>%F-0cd<$6^jtGaAdajWk3I)HAb|n8&X_W1` z7hpNy^6fux$2GOpe9`7bCvJC)o5`21}TsSvIsR5J45 zN3=IsA1z>NHaLtO>#hNylEUiN4`9t-FAcr8maz+1_}ed!-sp0w*&XOU}~M0S5w07wAsU#>GVef;>)wjR^Bzz zp_ZN}#9q|Mfv-X;dH71KueY9Ql8_><%bY4`5(S}gc?;z%>X-AvY>+Ab>od4@e396oA5SHX*hi>8K0&N9 zqP7J4@@Iv8nRHq$Yq~~36|}(z=Y%}b-=z3b4@wfp)oigVBk)g$jPqj%Bv7UxJ!}MJ zU0zgLS@H;d21uYuG$YG3_a#=TNq-BOCuUw=x{~MLC|nsxOdS%-#ei87G~eTZhwdPD zMVtW#J78&G!7m<6$!7qDse~}7uuuC7T^}rUw9{{84T4ovMTqiTKMQHxdz$oKQZCWi zizH)t?k@^%HirLC0L=_C^OzVT>1s=l)>YAPAexzQCzMJ;Vl7s(S^JN4g~6L16Mf#^NEmE(3aMl3&hV722v0@4t&*!QQs_2iHk;^q~g% zCn?ZYvnmKq3zc4G07Sj@igLSi%X-T)c*}VI(cI~JOc?%R8op-autu}=Ej@Ovc2oI| zY;7D>GK7Cnn54Pp^jnOq-m_$ljL}3YRoC_J<0<%TnDS6Vo~f{Xx);4wk9#1|S&9{q zu|1owj-1u78!`&!1cX^ltC#*u5cLw8DQbY6Ey2r&L~l)ouO>~K*Y99N(ECKu`vfyM))rni}LaEcxf zEtj3L>Pj_lfGa(M|Mgw8yi2~A$zOYHo+3SNS>YOJdJgCAZkHJe9K#dhysX-)RCmdR zUP5O6L#WMFZk^+@GhG4Vv)*Dd9hCPFLifo}(me`H&^ve$2wtpC2 zwnKdbnpb=eZazlvLkLIxsHUlJLIW5N_F>qB45qDgDg%EVT_I0HOBFpXMdml$BK&im zfTTlnqI~6M)oh^-1Soj>@1uYk@D%zJA06-QSDxtpll2HTY%^JB8+h1S3}=cbgS##j zw*lKHBGW3VwM|D~HHz$h0BgWg&hnC(9KkMf1*~VtsNPm~U34Ef6yd(=o?p^2g+7tl zaIMX8i<<)%C+a7a9TTA+pFVfQ)sVB(E_d+SJg%vZCkK#9;(C8QaRECCLV9e^N z?7O=qEe(nZ>LhPr@G84O$ba;q@R#rPnabHg4!N3b1JTl9T>l8ln1<+Q5swQR#{C!V z_y~caeFq^atpo(&ou)US@g1p@RT+4K#O|*p&z&*wzH89v8KM|m67Z7A6pu$^ovBMI zj{584W@==md1o*uEV-CLjJ_o$Y$sxZA^#Ms+(cvGSKal%ATE^MiAfvqr4| zhHgAl$8GVuBr_{vw4jpwL`*7V_65aqG&%VkWEOjIYc4FWcz5(S1H!HnYJ7Elpf4ob z#Z!l{I$8jg0OmC*e}LT-Udrd~Haf#~vY)2O%??KK=AT1~Y)$1aCaoeT?;JG{1BZ0j zJS9x(J@F1iea?uSXi=5_#`3vlEi_VIDI1#%S2xd1MHb$50boxKFCk%ZBeNJI0mp8r z3MH9f`SJC{FdR8gZH26|Rm!$oIDRD_*Hru}A}o?M2H1+e3uM4+DRLp%RNvDK;uKA(Mm(=%!K?+K>imNaN9>95X39X^2 z^UN+)wer-%CmRk)3NT7${o;nU&5O_L!13Fzon>ywGza2P6;+oi^QCA z68>|4fw6Fo5RDjl#}EJlF*5YblLCs$wlj$JWDqorT&GIZ3{B2#N3b0W z@wN1p!=xBV>A=RgPcx&E${o;nZ*+|b;Xsd0NQa4G)ta=dfNkYvRAT56^2e?eVrtjPw3|u zN$z!5mHU0S-Vq^_KQ48)bz9|CR>1Fa-6KAy5aPs!Oq>1a7?P{_BnrmF8dC?2_pw)L zEa}P9mYXL|Fq7TF`RK~F#2ZBo63GXSo7mF)xk%oDiS%E$+kN2_s?MC9I{I99SlxVU zydR|NvTg>8`dVE@vvjRxUEmbqK2zvjq@CV zm;e9|ddBdT0>*G>)GnRV*oV8ieJh*>hVNtY+@a1K0cVbxPZI>hJ)2+AdVFkg1b=)B zhYKq1^OYu@qMH(GqyVQ)L6i<6njq%(5`9ht0f}zAoN3aPD$@w33 z&5mz9biu8SJ?B}1spSIaK}SbMCgL|WY0Gf2S0pixhj18F6S*8sT9EO;J9tF~t;Q5L zqrmh`-|2~?>OjPIpJcQOehW#zV4CJDrpfDJkvTOi3F%-57uwbO((Ft^c8iTP9#iu5 zcPsj?GmgvavaJ6Hu!d03*b-KqGuo^C9p_k%Ede%ADY`> zK#-EG3FF?%Qcx`RZ!nFwLbJpkkT_L%{-Ffr)c8=WUpqDZQ-sXU2HmTt1$ANLZWP-= z@y1^R#Ox}_&ps7hQjNMmE?65hl!zgrZd-}eOQUSUEPIODWDLLlBE>(i*dYCN7^)!` zyf-q@McV2%#AS6b00YoYC0LReGN_)k){4@1udY01&6I121Pd@IpB z_`7A;;<6bQYo7Qx*Ad6+DJrv0b z>^~==rU)8?HDm(Gj-SoZF;Zr~!N=6OFNa2RTf(`g2Js(QU6^pEfZn|ATk;DuVx{Hg ztCswr2wM0Gd)U>N!bhSd=Cg2Mx$1Uwgrg{18Fd6{ndM87)P*X`j^?XZZ{d5uDi!Z= zX1h5BmU1$WJE0FxTec2zrO4_+m1W0sRjar0(uJ2rIRDjQ z3xk3d^gbmSTvo49TTA4j!SN8*B1 zcyceM8??*NA$jk|`uRi#02PPz+&ei1mUQnUnVXV1866O+9C?!1%C>?qf1+)E4tC^>jyURbD;*5X%latm8X7l4x=jq=~??Rz6J3b5pj z*`5Bp15>v{L=2AB(B@>q;MRo4(y{peLP%WUZU$X?2i}mFs-=*TVuKMhP%!eg3pV;X zE1M>n?muv(^hV;(VHcK;e;%mq5BXCBd@YArYxiD(_n)6mxHeomcxT6a_4;Wn+qyE1 z&o55MTBWS>{i>S;RgrV=)V%vJ6cX4V@uu>g(HKbA(q&my^>Izf&Q{UG;YBUC&Dzcw ziZU+oXh?DshU&nWRFd5WTcW(83x8Hueu0Ym@lGn944tQ1C7SI2QplO2`RFt<3XE+W zw~nyex^Tuz2u8UV_7l7VT30@&e>SZi3XoPq)gDi#4W}S zhpvP8h5ju&zz5?kRtSj|CK&gci1P%r}}g5 zKXqG|0SnIw;KLHcg|<|qx0S8 zBjRE1-892zlYjlQ>mA^W;Irn7`z>bwX}0So=gDWxr}<;%G2>vN*k{2r(1-1_ z>&x_={Z)7B>+8$u>#2+X>+8esW9RGXQunp(YwvMcksLu%TX(2J&3EQb=(ExF3u zdjGNgXOiZ!h7Em_+pn~lhJbuaaIrZ*Ug)N_Kn7StlDXj!k26iFNj}4ajOj|L-qaJFJ*>hTeQ6?t1 z!PVnC1c*91%?HnO*Z&C>0_Oxbl_`{Nb2F^_?kL^@)*>Vg;I8rJxO}QuA?_hi0-}@a zW4US{bGbznBH$Kv#fKXjnD(!a8>zZX7iy%H%7=}1?(f-tzJ$d;EUW9^pq6Lr;tbrn zp68vXwf8eC`>zN8dVE}LHO@+5&HiW4?#qDrXnf1pjf5Oz%3y*$zPqTj)Z&~3hh1o* zu@zuKva3A>WQK6c%c8ssm1-loQ*^HrhR2e{YDvB1d`Gl@c8D}@W6<%71hnETz31N` zclV1)L*?FBNJFX%P-({J-!H1#xFk;nDA=y6mlPo=(o8k9r*T9G>yQhV*$t@~O?TeT znSy=1HHCHRx zQv!~UfdaM4=y-<9ZpHj3!<}N7<>}Y!1(~cy-;k+&4tV}i=cFV@AO(%Z(Ptu=RczDb zP(Yq!oL($R&CGT#xlP4`fU%Vj;J}O8D<2l)*7mNnM9C%=4@UF)`GXpFxo~r(1 z;OeUnBdKU@zL79h4({74dUV*mfULXcVa#$$5)3_qY5_GQBrgdJKvy#Dn_qhuKM!ib z_&F53?F!y^Bt2Ysbt*knht(qPs|VOVSnK)QO-xaDEEe%{nfdGKoSyDTfJHZcYhk$J7;`c z%Gql;l*)@pU&Tw8sTdS7;H)>+zK-ay8Pcbg`Pz<_1auq9xptL;YRPIj@zBcW((E7` z4Nr%t11MPDvyQ1U)SoWFzff#38~T(|`4=wM8(yV`d>g`R{a<=P;73B-JOWhf6ppRN z#a8WPtvCAnmLjIT33mZw$Xf$1I8k@P;mvJ{5zZThjJuycZtQ-`Te!@&r8gm*KuQm@ zrcmErv#e#2CnhIy07e>5TRDahH9V&aADFtnP1=Z_Oe1C<(~=;u&Cs3y(I+?%E3~>* zQz*HK!6YOHvwNW?ew3VM)83%k7GaeqQ@D$crmQ^^lQh4&uFIcVv4y=f9xJl&*64Je zM1NWs0&%Y-;jd0{(i)7POSrQRT}NqQ4ubThTiM?FUAH96Y)@IuuJS(kBf3nYuO4Teb*iI~C{c;4M}v6=Imv3*$+y{9!3Y2sJ7QSgZjf z=%mQuum3>C?t?9!F*iCZ=ZT1ifI9=g2cr2$c0*>1C(;_&&=z+E*!9YmhCaN0%inwt zRVhD*d=ar_0^8BYgUC|>XxFymc^QCq0Ulo=hYVh=F+76M+bmHC&>Fll7J><|LyI-L zCiS(qBpZ|PpKKhqz}n!hy4GI0R`s&#y5(ll4TX}9)xldd1P~hm_BHt&cqHCf-&TK? z8791Y%p$OCb`(CO12m>p8{(LC@cn4p@7z?L%3K+%RO>_#BBY(qaXCjF0mvu8ql;2oxjb- zhFp0&wO&$H?J4=>0(8TevC+6`;9kz5P#j~&qE7;UD2j?>2tsPhlcrdt@KQXDF)Qe( zY08agDvB?r5sQ({FFjot5{?2@mziq}gSay)R7Xm=VXe=K#^5vpx6};a%!+K^;s?@1 zmN@q|EZRnD7CrgVKlVeR=QD?)F<9Fzmu_bN$RA;E;|K$i1tb!j>i|rB-+r^#Cj*R? z+&=8+4=rS9YOP1mnuZhHHUp!(gLC~|_z9@EI51LN0dLwuvtK3GZtm$u^+GhAR`cqT zrUDLvAmo#sBtjyKgKVF?K2}>CN-j5*zUgl#`z_^6#dl24gyreTnoaUbNZwIR$gymt zA?8@EGMQXlgtWs&N@r$mJzcgzdBC~B_l=boP$G3|>X~|936n-&bh1uxP|8 z*2TZ{kNhGAMeItyg_c;YOFs+i)iOjNX&QgC*#q|MgzX2ybOM(&Iu6goThr_Fn$SD` zN1pWzh)EY=5cBHGAX?xwnbkACTEEt5Gk1LX z>|tht5TwfgG)9KCUHYR_GGz+!tsKGYX&9T@)aX!e7>#`p?5Cya6wWV*j8D2V#w=Lj*5*!F_f@CFXU(dklvKc0b>7n{HA0 zn#oNUhkSV%iM8JGGGyH*PogyHBhAvk!B?FU0ZeJo_+xurugJyzs_S;#4?TVyVFMQ` z`R@Z2t^KMA2>VebQpM#&s}BLG ztHpb6xOe_}L?JwF=kO)8-$HnFDMV+?w3lpS!Gh#pGWt8{tDOXq^yGhks7t5S#7ljv z4<4JogVp5SO1gbPniP z@&1Ih3O*?_-y;`VCSYU8Jx`_Ub@w-yFmJJf=!K6^w&2HCHvD{zm6CHe-(=J%|LuEA z1Oh(ceGON0(0eWy9ie*l=l-h=U;PM~Ohq2^%w9;pYg7+Wq{{+PIujuNL+*_c#U4^< zjRilZpm(Q!s&NTJ8&ao4p7^-UACk7SrH(WE=;QkvemE3710to~qNsX&=#+3YaiO`J zW!Xb!&MwhK2ulHyN?Yi-%M2J7><88`iu-iAOi}~~Asv3(+HZ8qaNcT(_?LlyD+hB* z5q+^Z2M1=(4E)3khs}t&{#TK8H4iQgabWu8-&jq_&%tS#R(NFi2jgWp-Am`V`g9E! z#_R}P3GxPBb;|mZXebnZb0sEHVUkCU#2?zn9^F^_PjAfk7(2zoaKra|W{`y&PE7nW z7~r#yvHY@x{MY;9O4|3!|26#IiQfm|Cx@-HG)b%7SR`&oyF0=ZNs%{zTy>(+r$>=T zN#>m)MVso#*=o*0oZ|xm=c%XyEwl2&<@s@fTfUM9rv3J*)7eNkOc6EyI22uQ(m<3A zl)3UvHwan_Ahfg($8TiRc(@>l;%v|goEE!L<-)rBuYH+aDcF+9?Z$JMcguhw-A3*w7 zi}hR4ca*%8-_3IjxNSMpj!uY7z|xashkm0Q1iA2pENKJ7-x&2rFn&|XKiIf^+Z|9n zgV9m+wlSFWSB=0N_<$$3QD_bPOO<~s${)X@otqkb0_V598kwjeepP=tgD#X!bNaNi#1Wtc3WTX#&tZ(_A{e8 z$;r&m7T?j#?{jSsB_SdiPHs)}*L0R`gr@vA74`ltD(SQ22)SsAlkVmR4Z#dW;b9lJy zTN7EcY$g@W_#1xy;-wDdRS*r>xT;TVioQ1J*(Oh)?6vJn@_F2H_ zy)#`;h2G#VRXswn)r+K$)s{YD@2uww!}JR7v{64B*UcFp1&HBn;;R5@Y5)ynj+%}F zw}&9xb$@!cVXo&w(CyssV-^+HIZ&MB`5Ik6R@%KuMsWE=hN8Y}ZvHSPNih{IvrBs* zD4vUhlY9ysY*ZQ74~?g{HktWevu@JA2g#eUdz1)do<&1%ICK6p z!{xbJh^cI!UBwbT*2v>k%tzl-*fN@o>h{0~`3_1RmBzm0n+WY?r)u|@_J9yQ<}ZahRnGks>aMlmK;ge$~ptbH1SY*I(CVFX`i+gGbs?ua29#i?aDx2Ii;q*W%;Bd5+cS;xCYXRzkRLrk&ZwsHYIj0PZDbOy3cD{Qv zb+kM3{M|c}X004{yF}3(-~|{$kQW6oh5&MVA34))JA~j%g~qO1S7W#p!5I?7?>Nq) ztW@k=3&nyh1tx;^yWN~i;%5crwa<2EH#{6CFlQi~a_>IG4r-_tbhd8{;)T zWoINVrl{@(Dx&iz(vZMDm9&b8<&!~`&thE?p?XsEtHZZ7cn;W>DC{6k zwWtBd&S%Sd(QTY$2Ah1j9Q?=BiM7zZO69akWdeBlB&fdq%tmwN#I2WfYf3eBH$QI( zcB3PXe zm&e0?s97eq01VBN`yvINX7JZ=sX@iSlreBstPLV&pizu`Y#4!<^$~O!iJa^1>hiyF zLU&HE-eQ5NJ37*v$9}jAzx97Tu}_UB{7~i&OXu&sb6V7Ha}aqCeteof^2%+2$<~^Z zR(ZV;*ofWJyK%zTI80$Cb}L+V=6N?2!_!qtqMOn?ed&^A?M~%<@4#R<2ekrS9vS%n z%TI-OI73~~4um3JqL1U;6OT9xx)B5>wG&Z4MK=L#a2ACIvU)>sjuh|w}XI-f_MN~B8 zOJ#b?lG1&9+P=2AUv$_5S|p_uLJ~PX)?b{MqFwhmq|e zkplT{ON;0YJlW>j76VhP$&9*>+qG}NyelQ%e=tI)wG3xW4dFLPRUDBiv15nm=E=F&X*v>!+ADYkCByt~KW zmz<0pkCvq}HnczGM(Is-Wv-YQchgLGd9m|Gx%Rl_&IG&3m45xbaA%PxN8QS1xslyp!PmGe;P@E97#x0taWGxnPAgSn z4#0r6C7TSq02&d^!?%$hM^r-}v_?71($-o&BwV)RtVA5kfJmqVuz5B;d?dj^_+)b? zg11`}v?W|WUO;x0bG|CS<-7fN3j^SLxn$(OZc}ZTh_If}D3>vH;|IRzeG3gyk2iAX z_Q^o-IyGgy`*^ngdnen?8Cc|@00R-Yt`iNN(WMn$9WNk;!bx-}Jy+TF3m}7znTT0F z)VdoeFd=sG()XV5Gdu!~4$=D|#d-zog%4VjE3+(Qg?ncI

%fDItb4*v*M28dY6}T>>p3w(nJh zDgu|1_FyjEDmW>XMX&_G1lD<21R`nB^j;xL_?i33rt}tj@tB3q?nr+Z{=G+3*YK@T z@!P4(r6U}K++YZGFB&O0NGfa>)~UC-BiNXyi9V2f zf&jiKKS?}h_O)PFF!L@Jria#vKxA`>_ZapQVSc8ge;v3FZp<+85A|OvSElP(>ltrQ zN@Vwx3;Q-UolyXq0aLT>{Nl7Z6Py}@4{XDrVZ0)3a-EY29UG<+!*c&D85I%AHC)ZL z1>u|YP4j&aaN!6{AYD~2mMF>WPM5-0X?XYFAIHMyMQ?p?ZB7&DmJSGWN>fQED$(mU zk)}@ReyuLeRm_1sojy8_>C25DZ=-JFuS#FV*|Or?HM=Q3pS_u)R~mY2ZZ3L&8|wli z`N46k3(FAuY=7qNDpt9eNo;hO+}2W0q*^?6v~xvdlPm{+5VDfcHZ5WMErJtb2&Q)K zWDQEb&!yK$C*a&T1hSVxf{8516!fq}x;6l~42gq>o8AkK=-Dp#=K!CcCu}dX4Cq^z z0}yuX2t^s|F43Ud^*$db)7_^v(U-2*JYD$~bSi7tXa*Jiq%@B)u0|>wHk$gVBiAel zwa!J4&ceqK#V`7du<8J1%;!r?flcpgMeRY__m%;m9nVpf>_aJ zd1(XB#Mxo$ejbYqfVp0ubFs`{(IbsEz+CKV#SCVE&tZtcsJK@_lM&F1=yy-c*D`Zg z4Z3y!*i!NF9~$ny<)Yt+v2@>|s+8~Mx_=1L(JEyl5NhI+0=Bb@>pvd@pmSlGs5yoKS{Jl}jYC<^h31aG5TLIS-zq3 zktrAoMtnaEYyKp7e0W%C&-En|oGTX$4N$c6jtYJ6=Ht8^i@>t>MfSShZ=Ny}}3q`U&I2wXEF1*62CugKM$ukU>eGng zr!~~z?n%1C1xe0Num~xi^>M7N3*~$|Y12IQo zCRDzu@(@B+D9_fac}lKwd5LHWDMZ1S%t$gYV<*nCp>3BBXp=deMfck&9GZPaQHu7L z8rnz27DgUaV%Y!BD%|v-EX_dMSSUk+A)1Mf*waBUk#OmgCEU>M!tt4}e{Q4>A)e>`tjWD3 z3C)A7SX zAEGdoKm_t3q0}xQW{K@#!swi6$zb;>2p3{d;$(i&tnATGgVDCs68iWh6}dF_9Q@q1 ztaG~AdNiCh(CoG2sNWnVseHyhY9TwM+thj}$=~G0T`wHxe%e5%wRqJgE5$UK{;XRw zNeoP{AZK^_6@*D}ukJ`!OFHbx4ti5Q6?s%C6qaC(@!4G9&zSGIgA+YlUKg7l7= zJ4yUV=NF@d!(yw(4Gq8i9^Cl!!d>e`7g`1d&iJiGB?4?zh9{Q0Z!8ARE6i(YP>xNu z?nxJuXW1=G!)Yq570+)IWsou$XP>xRX4`-BLs7oXAQB+QzM6=D6xcM?pr((IB^!Dp zNkksMWgljJE5m|HcVmbyqChS!^^HfVCv<&fN|cM@Q4!}&=9GRI%i%5{AtF0GZ~8P6 z=Bki#qQ!*6ZVg&*F)kTGw~d_wx7Jv@Z%O&?N*tm{bMQ1yL8ahqfTHh`)-YjUXd*iJ zq2YFdB}`himbxk-IwG?JAlkg2$bLM?ES+bh&u@`iDVt1N(sMrUbv7||x^)$``A6S| zlizHMmcdBn20J&?voXXFh{T{pULr1LnN~3h@v>P9=ulb3&S2J_;$bmx%G<_ z(tWS>>32wfO|<|3vo!K3XW_UU-uGOlFsqxTA9HS56fv;g>NNvor|75Rof&|c@r7jx zy+D&44c>BN-X7w3N;>J5n!k1R?FO_snCv{@C$_D@S-^@}%)z6T3&4%3;))7iEC4|E zd^DrmDB^Q2Gn6b-ARRpvPaU<~IG6>53W9%96j)W0W4a5j4Qxe{=8F@XIez=h_wJzD!df!OKXqh z5#W(_TO|sV}CAmC29fY@T4Vx9=-eiPKc% zqzq!C`M&2jUGRNzMcbZ(KuBddR^o_8g1O%CMH5GX*_Eh0=~4dEJk|N8<{?ncv>co zHl5vFQ98Ot?_ek8Qs9+s)lztm2yv8B#x`BiojExKq&I-$=N3U@qnZ-oM9q)h&P+Dw6v?G6 zPsq?(M$owJ3Jk3{{?Lmo1MIO_SqVtAmW$AR08j|A0&qG*#afJ`-h7RLAqn>0Q<5Ht z+Z{Z=$?SU5?i&eggx)jjA@z8qVi-EPVq6rJtRl(pdi%wT2!qf0DLRfK&n|E<>tr`n zi`rtrI5D()u{fCE?h5B)77vU!EJ4x@)&7GH5)L9y@;gVd7g(dP?;yHjdlb8tgumMR zPuECH|7QEx?7q^ptJO=IS+yF0`9+(oj4&Lx7Q?zk7{w4K)@UzBn)#$DSN8`hY|(jPt6B{^gM*+hg(Xr#apN)7RRFPWs=mCkg+TUfJd z0&V7C?|IJt+y3TMIpLur@kBQb_$>Wy;Rf8!J!EqyWS5&9_Ska5{tY*Ud(W6TOcXb#JE4vn{Y%CP zuVW{zt-=IEi$tfDTAsGykFe^9CUJIngzsT0;cJ$Rv?aYzmb$F(c^)?wt49x-E3mu7^hh&{M^)*0=-nEx=^J$~bd0+`mDq|E zPVT=pzRD#0=ZDs!Q`+$Tb}Z&9&LrT2iw=1OhzZBUtNh1AE4-BMNstW*2|<-sNI#sj zKQo5oYEn{lDeWtj`8teHbP&UAg)ag0P@JTfh*j?;PU-;@I z3w$A-2$4o+nGc-+VNfLXpue4G3tTtTeZ0_8>T$gISXM7^lcy^*tAh!Kp-YD&Z0I3% zJfLN#s=L)VFOoG2t8K&4^$!74-0bC?PLd;&Kwdn?;l1zWs4==@9848O(S*XGpXpvO z4ZMz9c{>aS9;bujNST2ZTMfXq*6Lsd%WlrL?=*%Fnu`IgCJ5X{k}%F4cqJ~X^~c=D z0L}UTqrIH0xZpdHXW-(urSEW`uulF<<7jmbyayGQtaCgBc;spDzrGr&AKn!yV2Ukc zQ8dF7oazeXspkOIHn5z*vW+#h#cNM%u1uawsckRy-hyO$Ily-|GWuM3L5-}ZpoV|Ifz{u-mGkhC!WVyYQdq!wsV|}4T_-Vs9NqL1g5E5WX^#z| z)7`x z#b$#T$Tt^aHeI+h=PI9{S(`h35UL%S?JkLHZHCKp_$Dn2N6u$BW7&Y!K_h@kao&{w zmbv$h+?Bj*eZG&M!~Axy-Z?&ieRUIImpcix4q!mX#Un%P-bQ0w%?|-{{)2%npU6i}{I+{RP0+ z>@M@v-Cx~RiX$d4KQ>H8E0KuFbbsP$>__dl`V>qxhF2swIlwqq7rzdRPpf3s4?|doQ!xor0KXn95iJ&Jw`9lMg zq{)#F5d$^L+`N+b$%cRioNpy5b17qg4c&Kx>;}}?s+HMhBSw5V%^P$MiXw^?mV}3K zkxq^S$2@ifTt3}$N2l<)%c~5pLcAW-2=*jbb!d)?61Xhq>`a)?TZvAA!Mtq@IHe*u zxKg8YF%O|BCSNecB7337*esdZ$kwD0nWrZx^!(!4ix6R$ui%I4;!xnYV{9vMAC(Pq z-H9h!BBo~%n}85D9)CU|1mNGIuUv_Vm8%d=fRC0dibTE1?1UP3b_0|L9nY~^*BDP9ToqfBVuG`Z<+o&dTa)%Iebaf0=Vjn>R*;z@QPrba8c^I?4 zBxE+)pd>}-w{+$BS{|QFw@l|TQrCNe?1YA>uFUgX&B?b07aVUTJpu01p#72eR060} zaY0im!xm3|*ti%&9_u&<6^xM-w@1(6zgS zd~LBo2SaU&M7yfo@Au94o&+O|bwDeu{HhUiTE&Ot3`bK|YZk~ieToTyK|8q{h2W^k zh(O#|M_??yy*8=WJ>b&>Y5~I^N}#Bv`SKJvJLx9X&dNWnB*dErXdVKjN)UtCB|Do% z^=C99+9We~?tpogNQHFx_yOpr8IH*$2Js>{Lfh!^6Y&bFHtP%+i;%|UcI?@qaZ#Hb ze`q7?#sGMqj6Hw|dhky3VjoM0e4Aq|^o@M{MDVARLrm?jhc%O5P3P*KFWZ_AK7`Y! zMVa(s6f>Pb7uR|xjfmUwe@>nzu6W1Xbf{?Y?X98(CNtDvQF2I~H+_0|HtgS)ChxRY z@k4FDon?IRwt&EO8eXim$I2R7crWM-KRN+QQe`X1*pvBA_be?(#X8~zkCOMt$i_^EL`ch^W60^0b+fz~Iz6{Y7+;ZVgWAWRj zKmfX601=W+bK|B!)ORuV2c8PtP|YK(biIOi>9xcCNi#@$n0!44`3VGtI{Y70oJpJR z$`nJ>*yz1=@7iU!=#umc#kHxxT~V;tJavr=FZ{ICt{2_uhZcIrXxmZ6@=o6hK18RU z8ZYa{xtHD_Ni!ufkxeOun0)l=_&15w$cS{Sec8S-g-5<| zpkG8*qT5YpsB}2PwIMW%3HG>5n=PwQJEaZj`1zJd8JTE&K5+6-?b~Dwp^_F4DTq-V5MD^5ZAOJm>W)r?m>m>XF-}es7)C^n zkx@QnhGR6NP0mkgPR%^GxtvcCAhk=sQtxFXATHUowc#mEL{R>H(-r|*jJq$o&s9$D zkeP@a)wa1s6CF#l-KV0Wj>il}rRtt;@RYu!O0sEaS7OrRuwVKJ?^Yv$=au^O7a7Wt zDC`U`fRVY^DzitGUjiCI%PR|?x@Ts&oNcdK}RGADX2y%fazVED?59hN~sV$h7usnpHzOB zU0KL0ntH(4(|mJyI@vzoGoz?%mW`{nqhG}+0zpMk;hQYpbCTa5qj^d?SQZ<_Sh`-g zsJld?R}283&CePI@;)vzL?fV|C9v1D3{rZ9Evuw{fezcfg|7K|20Q;~eQSd@31&hX zPFwz*fEm$JIVtP2b%Wq(4I7}gS}l)f4DY5zGQm8Piw)(Jb}?z$g63EaCyU~*chZF^zh8Otgqq5k7&}$jG>p+#}N&S1@B@#^2kEh`9*>Cdq`zucz zLT!!MESyC!u7Ltt-pX(*(UZX)Hbf^4s2nFbN8r-2Ngd|RehZklHnY|Yu0}mR2U>(8 z2^%tR<+ygi+9t|4RMHRF&OSXK@bFR?agX+;^V<0fPMYoZQ;(sR92LcmiqKr1sP+WS;tF^=n!4mEG*DKsYe2QFSm-=qq! z&oFQV*0iXYTM#UxSp)fdMGoQwN3+(DG{cWtf-<)I)F8MJRPM=v?Z>@dTBW@`&4RD0 zA0VXf3m)OEIBf}Zy`wsnyF=rt*d-h$AR~t*nmNgNbWCb3n!w_WXY#JtuSv(P`%QEh$2oO!U7Hsut#jel}atCc8mZxn& z=vdN)R6{? zoa9JN%01{ZTL*sC0g!H{x|5H4tUkAyC)@yyZfVzD#J`MFK~&;qq3q156ia(5fqme~ z_7aW?lZ!h4d*L5g0r_u&of4D>We)SWqOr$XF!@8#KII&Gmh{;uul;jQhE*^;tf1eV z9tM;Tu8WZF23@Nlfpx7r&l%{6g~q70WxBAIvao-8K<%^np}XurI;#shFAb|tGQD*O zdE-thvfl$sN>I5LIXntvQV4V_tGUec<{$+q#dAFrcbQ>aw;;+x-__CoKJ9&B(k5`K zLVXT31wH*$Mm%h}z?cv;OUBXMyB@9I@cpwB7_SS>v{T+a@%gW=zvN&P2F6vENJZgO zo9;0BFY2#{DAP-RM@s}@2Rt#=24sU4zgntnT8XPss%+(U%J)ns+Xp;iR{)U!Ky|IM zy`SC1WdSK5ed2VCEzEvE`90rSj@6;dv3Dj0gbM_qV6Va|*{}#g(g)L?hX>j;1AbS5 z1AyeXUUAvaeerJobVm%(Mb=uX2j6R*fQRGed7j_&$~3OqOwkRf%uvu{dei5-T6L6upe=)DMQ8V@mtLtBd*}^ zO%u)lYN>PNg%ZZ)KxN-EM@_HR1{leexyN|IMK&aUkoKmF>gAvnVP$_fX=_;tux|^G z&c|Q`HeXPBemqbFd1!JNjPT)E3#`T>IxNIei%J2vvrL>O#KSH397j~-X$FkMp8yxS zR`m;W(5v;N^ihcRIQe`Qj-XL9BMaP%${Z%C{XQ8e=Vf4boHM-LK@q#^DHT)$0Guso zHK@F7myNQWjW*^>e8;;QvX%UXsz;d2B(Sh~VGH^l4HiI>9%^>$LM%&G5<_7(&up#R zIeZaNp((P4g$HeyDM+y!ZwDY65<%*mS7#~ruwr0x-OguKE$sgCha60cuORZMdTX>l zz#{PI_(v5-j~I~mQl_2`8}I-gKJC?`ATm=w@D&mmTugDx-ij7|*zY5|>O(Hcrm`JR z8JCkhr0bM;5v`62YEYXm9(9?l_0=9kI66e2duV{VbI9JGx z=eK635c<%A(dwiFp?W-6cukMU_a4LS4=c&-7cJ$mD_C%Q>xqU5$x%?BHh^nBb6tjM zdt_?_@xaM z1-!|HiY8iRM3n6Auw-fA5cgZ$%qPeX|CL9w_+$s0Dp(YGXvyg<^#q?HuJ3q%8y7>K zcZ?n~u>Sn-Fm$(D!ISpJ;@L4qpm8lN!Br@gwMn>a3sgG(eO}p}BMU$Vqul$Pelh3x zcXI`IhsedJb?z=>yJxWkcEznbwcKsIr_Y3az!WnU)64}qh?BipEccve_hKA+g*89n z()k6T+(!?EMH>}Uk@sEpHqPget?XXKR|=|Zf_G85+>Q|Kx*G#-tu(R}km+~gnh+Yl z4tvG~$My*(FwP>|N)pXQRlY59mV| z_W!LB)vNdSC-36WJxr+IZ=QioGU$^8tQ|vwzbXAL1Pf?1t_Er2+Y;EAsV;bycnYiN zl7W9}<$r}sXy($V5|>H7rI2D>6YiIu_Q_>cJyd4U(=J2bZkTjKE3(G1SAC26I#(^^1kU0wnF+7xKnxZ2oYzXSi4eZrVtO)%6^EIe*k-g)Ea7t2ez{RW=o0^O&MD3e4YGbI&$ zq!0e4Q>|30k|>HB-`gxW+W}DO7r{gVXG{iYjFAiCg>Ox{YoF%%(dk z&oYj_6o29ns=f>&+MbDG-@Quxw!}zZ{khQU+TQ&BdI{D&PIECGzTUm{IVhoTJCl`3 zL=xGr*gyx)%f+73=3)^P_Z@oq=_z{veQ9T_dbgTPC2qklU8oE10(enujbOw~vQIkc z!s(S&G?e80+~=*o1jSgYH%vcJK*7dG8wtoknO)WyPL<{N?^g;u^=Lz}O zPSrO~Ym;s`OJFxCRKDib_NI0PjA+q5(RZxVg|YPup*{{qV}hcDJC3%#w|m{C>d0IcMAOOsC}X+Tm|JDN_6UQsGz z-8VtN?xWaDzh=( z?JGKOxEfmx{i$soO}4*Q8JG_Nrh+8gCIa#$yG?#)i@7nFrpu6S0fI<75;Uk@&SJR) z1z^N22+j2VavvN^spVdbk?;3#wfcOScU=sDCN|y1_@Iz&*satvWs;uIcfKbdMAl5l z=iQLa?1CZa8)zmQ@b5HD)CxeK66Gh`Vc`tzhaNut4YHt-DpqbpsHV~A85C9Y$$sUG z8~o;%xi$N(QPh1#O!}+chS^{I2@*Bf0e-0ZuLx4fQ&aU?5PK0ye4hke(QiOT^IzuT48`$*ZlZd99j1&^c)zp3^0C2eLrh#=y)NThb zMmiT2oI-||HE0BWz}kEk8ar;zD^8$F3Wq7#lgG@LMjC4I1T`e(8?XeyX6uAJ@z3WP z5@6@}1FtNqG&Dc}d=uDgy&Bg~;3&-pqBtr%e+>ZlxQ{A-oqL~Se0p?gKE6DW)IrA7 zAx>j;ONSP@lFql6RS|HPevnBck)y4hw#*BJ5-7iIquljbGoiHm=9M=xK%-f1Wqq$7 zAvozxW@9M4J%i@F0ZD&<9jB2(VJ2N@SDrIY18lho9L*&xUXVG;OjA34SDuLc(Jt26 zVuLeYQoS@^AAe=;NoE3|?JwbjX>=A;L=3{>wU3Ib# z4^xPNe9jj#0M)LOtj%ftd~7F?=q_Y^-<1vH;YGm~?nxnEoIly)Y=~xPOjX8Y9`+U)@qep%hkh@8@voOwb7f+x1@hX|Z2^1|F}jA-(G0 zO+7`we8XRGWA6^PCVF7dsQ=B~31**`%>gX~o;b?_1;#r;t=iV{+x6N;GPHxxdN=)} zRv7@~UK<JOp_Q-J}FYv6R6QcAabA;i4@r{^o=@jz1&G0gzqJZ< zQGBwP6I6_@?4Mx*0m`c38QgIrV^K*>R(3;yCeZDT>8~qS?(f&D5fWfam6q9Y9K0lN zeKFPe3Y604*`4;*=5}AtJj|7Htk?UT^Qv`YS~{aMs4?ce^cnY=jUYQJVc4KRhFIZn z!J=+hsm+*oEfrJ;TJlOtKc*1e1iX&&ol@6!XS!Q`?aaQ0%G}{uUv`|-IeZ(UJ>42# zD6MpRWQ_lUlK<_!73C5lnVO8C4!O`?EMbCPaNP4=E2tkwB6kiBnN1tv--=tr!)IAs zH#%zge@O6G!OuwxaoJ(04#M%}@BV%l(Vh4_Vxy!$ri}d5W1$_Kn12jGMni{f80jTz2{0C5qD6kqD7e<}v{LaXG#cL!P zU!UdJEm=*F ztlz>(y&|^{u3Go#S?FZ&yMH7jdg0@}&luh+ecIEUBk%>R0Zg7qcaqET5Tq5TD-z*;wQgrB#~_BX9v5lK`iP#HwwJwJ%VK^BEXgQT@cV;)>@YZA8E|&RvX^hV+ z2l>1a@$sip+t75$Sk!9om&q(Zo}DkSR5(1$ zuS2#PBCjU$Ij!#}X;v@M_jWdh67MJG>!=CT(c+8n+5n(q98yYm(nfc?d|1-;U@76W zXzyaGKXqlVub54%hj~2j4ke}Joz!fOj`c$TBnfPdeM6EccpZAb2`7oCa!u)rc)n1I zWwnNR*1|Pz4r*x2Yq6pEUoqeI4RUTeb2tAAJw3q7mr$JQ7$qPUqoW1Mxrc~9tDsij zk{KRzRK}uWouIqhP8b3`$_za zuP`QWdJ_5|ch0dnDlqELM(%V^wWKfLocAbjaMD;dg+TS3J>Btqg-H|Em{;3?JkKWD zsyv)u2SgImdAoX1NC~O&xdRl)R%wGY+^b&lo@ zqa3FS8DQP>L@NYuEEC96&GG}>{m8_5!XYE6?imS|ECU-CLNnEH(%Q_ntltVg5a{3KUIf8Zh-V&&i%=Z7XzwY_i%AVwzxVIJN0+s7pRhDdJq=UPd|YT$!Xo> z9ro#_j`ogCc5mE9x*>-E8-Kz0+IoXwJ6cAytas^n@&uVYSI2RUZ$T_yz)(XKTiqE| zZC=NKOuLSDVi>9^+ORETzxb-oXZuemK56APX2IbfDH$UCWGw`#0nG8 z&$j(eF!J*vqKwFv2a3{XS6+{}9`)iAWc^Vu8R-8R$ld@0s zW=7s|p&CDu*yon~$_38e(&#dmGOm0=DHF0;tZeatz3pS2*VPq%sxL0w)cpklA6J9< zIX!x_4)?*X2z-h?damn30jQ`=lcC>XEyy%u+-ab6aXXm5ugH*H-K-E)~_MNFRJimud zbE7HjwTbDe{;sf2eob|YVD?iYDLy-fwyXiQKb-Krn;GQC!s>n<6wrBx$dSf<0p?QW z#ti=2H3)0!Lb0DUg1cwf4HW*^IJgKzkg+P9Isfa;dT*EmE+|A=$uSdvrhl6}}tY|no zStCjmNg#ijhR2>1_BX^=>p#rM=4N|bfaVr}6Gz)9?DFe#g+Ld$D4$U3N>AY9)ax}e z=t3Q>f}$E)WP>!;CJppp3{6_vnrY=$+ynlDnwli1(*aXqScpYIe#&F1{AD<&qoP_J z`h3H$mN5%7tuRC)y?p;Zp{6+0s-YbN!vtU~~F7i>)yELUrRr`W?5a zqf>i~cnd;!Pp6&&#Kl^Av3Rsz{>mevkr9jFoInVEP7E<#0HPo&-TZv+H(Ugvr(nTI zd-DDE@YIv@ix``-5&Va`=phjfM^~=ws*qh#?&R^O4Vf=%T?bsL?Qkm^HWtZLUnM9Q zEH9>!y`x8-;9lSFmVtK^h^+-NRg@D!+n#T9n=hKkF8g=(PX+{S2UMVM=r&*0d1AAA zL4Pch>>2N3&lodKCLa2Th-%XU#IqGxUz4$|l!Mt%Ph|vFCfh z4^Jk28Auo|-2D#54faMdo<9is>_3(`_d9Dcm;7r_J8TYA98VrecEZ8lvbBPW_I(9G z^pk;8PKRTZiBt1+G`(~h$_3CuIMhMcALj~<{#n*VrbwXX2ao@5|LZ*esT5rZuBpM` zVay~9iitwuE=%Te|JL`)1$GiJ=rkn7aPkg58z%90cMx=}x0=7AE<#}4ZmN({83a=} zBl-JT?dd3hr5<6my1a2kU~mwIiYB&34kKZbzsZKHAC5#`F4BGWJEEs~l&Jh#y@K2h z7H3Pcfe@t$a^|iR3`Ha^pZs9Lrq#5=@)S0!xB7wXD9nS(6~lQe?=zPXO>N|^jKE=_ zVVLZa#Jj!EG}m1^w=YqBc+p|y0FEeW5t!&IR>(N+Vk&N_;Z*r5WsdeOqFuDZu-xGE{S$A>s&65sXi>U9W04qCX#|! z9Nv!~{Gx>odqSL1AEhw2^H zj(;75-#<~QncC?YrQp@NYmayh->>~u;>?Q)JZG@wB6@nUP)2+imRv$rN5(Py#y?6< z^7v{xOApiRw(%uUK{j+DLG`M89{wiW+B4zzEiN|+`+3n9)P6z!tdDJ`xVqbW=jXVS zSj3NBcqx%i!Izh$mtwTkHd{k!2Ef23gQXjbGh>sX5U5&wZu~Fbfpdr@X|iXV;=j&= zmN`ox8;2ESV4^|Z;dTOOB+dlRt+y|aUrd*pmx!&H^PXL~5 zU42l=54=1!^U!HoxR=n0p^@O7MW3Z!z+B4UWB4T*Oq0ObpFN zg`tvw6V616wzI$=I;!**CFJeP? z)XR+pw8qza$>t}sFdeq(s;pY>VNWF0mG~QD&~7LtpVeK*wLO_(&BplW7Z>1TyW40Y z)z?&n?XCED--jKkxJh^Ea~2_N|K)2|dXN<|D=SFzc;p?-K`8z>vgJ#E;?HX;agKBc zvoFa`c_ttot3x}swh~!S@Zh}-oCy9yhy{t&-%b$TVRfhrjgFa+aWW;I=G6h|X~jpn zzB*UlL>83k>PJanmSJlurE|}yR};>oHej4P9B5Tc6rH9nWJVnF--5a)25>4WjsPAe zPAZLcB8^rko`J$2HK7U9tVE{>X!cZ=;*t&+9SLV-=r#0QTD z`P@eGPI#6SbunC{Z%gMZM-4pz;>=J1L&YwiD^UKD)*icL>Y?IHddmC?<_A}BPq4xV zmr@~jsRzz&L~_*Z$zWslCO@;#-MA7$?xW1AgY2feqam}sLqB>Kc&*O2V|LZ4K3xls~d$kOT)daM%V@GGmqJYoox z#L^g);n0dG1%rebs5Yt9Rh`I_XURqB>abGqx>Ef$Kox8t13N$=XY{0auRMFCJBwyx)>6**T1yI~B z)gTGkRF;N`@?0ZxeJT-L5Qsx}C#40nsO)Y+=NClAlmiP1Q#nL=O<_#h;B-E6C25S-6f6z02 zzcwsqVW7v5$|_R~WUA+cQ1oTH;ifq{WrY6V9R|aBirj=1htMaJpx>yGARA3(A_s|~ zkfb=E5yL7s2jWGXj3p?OXBPd|^wX&=5kn1PQ-|7m8KgVVhEoDU@iIVk=c$}oe~5w^ z?sYF1xG-!?S(2*YwLf2yDsE*mHPe|OhYsowzO)}ZCvM7cnvt?R1r%F9_47^K-9W~L z@yqcy#1Jm>Wt$gmfMLc{v$-X2Pj=F^!M!Q5b7o`67O)U=fHNT`)h8EJm}v-tF6^tv z72(x2eZI{j24$0rW_*H(W=kKPm(J~M!6Zf1GZ61S(eyG?fN0Uf@g?OakPCI2zWxzG zHts(|=E~Yp8&p^zM9Y&QP}1`;jfg`}?I4K1^F28f-#g~fXC@B--q!7ONo{?WnSdCL zOJ?jUyr{cCcs8!dVAzdo;}vuiZWqa1WONCnQlz;;CcL`Z?3a?q1s*Q!c-76ac2>i8G?p_{N>m z{58ahC)vEo7Jv4+UF_l<=}-+GUa3-1C5QuIk)ixCHnSt5fJ3*lWGWc7%>2Vws?^cqj` z=-;WmViO}md|Fmx+?bK&h{yXZ8r$#ZZUGk>oVys?!@d?lyWZWK?(3g1`s9VIFWBzPjt*V4yt-{Firpy^ zGpwxL+CTce&f8^ro})%(&F2uDj_jl2dgIxBmi#i5?Abx$C7UzYcU_pmv)ldF|4wKD z%zT^s}P;#!Pv#;=D{!(7ePpF zoD>^dOF?7)W`SOo6I29U!JCC{5odc&?Z~P0F3Jy(UEbcl5g!Xgn9gvMlnrf#z?1)D=k%L;QWSm#JAFW>dAhLHiyN?3LVA8_zxY1~=Ggb0UQODCAsWer<{ zPgvYXBB;0Hy>5k}VWmKw-TpG8WeB ztWAhquz@GBzX|P_Bf&q_nVSg9=uhpt0%q>?7&b6Z?9Rt;tR3Z@9kd@Ya%)+5K6Oh+ zuFxFpnO_^Qf1!Jy#ev7Q6AlGU30m^?&k^faI8=V3bYlWlNXG=lq;{JW{E;^*n%%NY1On zEE4dlfyxV$h#CQc2#9mo$e( zd*3FhA<5H_vz>h=w4>zOl3Vt0`)!CAwyG1DrmO;|*hWD;@qHz^5N*@M1c+B(WLnXB zZPNZaQQP%%2Ca)2cIf_gCfJg^C(vPb)&RzBY(d0aKead!ziet9EW_B%R7=?h!Lhxn zn{j;z?HG-R7TVAR5j{1Nzdc0X+AzY)n`kQ7Vv{$URII?}{SL_%i4cz7PPw)~3b{q^ zk855QSVr}>S>vcKRYG51MAS=uyN90YQze6nwvaRB7 zZU|?ew($6&WJBMHm+UF;hLX|l2fBG*4FUO-8*e7LFEN6k^StQS#j#vu&)Rsi(T21x0`>)Rox!Hw7WS>ZwRK$*HNdt_M^R8RoQFej*6X5# zi7(%`MBNY|bc-HL<;*66{${>kVpIUKC6k9sXk0l7p0hUSMtNiyafjlxVZgB~h=boQ zmy;-=HsgFL05t6pov$5p(*RzdCaG3h&4_vjO*zf?7l$&EI@SqbEd`}ll-zTz^I#Ni ztTNs5ET(o52);ZEQTav-IKG<4&%lC^V7^kY&Nd)thX>8r$`=-}+4tLsknktkv0{$x zbDN95d>};>>rx8miPCICi^qK&%aXz{Xb2dr?v1Vo1$BX<4})Fz^>^2AqaKDs!?CQ>oX_OPD{lWTr0uk!Fw!dvc8RP{pD}2FrP5>Xmw{di7?=GC zE3O(|f`FO8g@PtStf;09CtPmQy{aDX7=gTrI?$spJv}X=Oaw}OLAI{|R2U94&Pn_KzfY)8 zJ^H(YCUz1n!ry5wCTMYWm&8+;H0v7a+rpT$2-XpseB^K3a5@kC!<3EoBR&Re&F(?jkLPP>9jh4NU!Na5& z-Pc*g8ZEU+j0)Z?xqY!IT=bO~@uNz zxSF3z;7c8&64>XZi6s1smSYhHC9Ut-wWk1bq4#=^eWHm2&^RmQgM~5xo%;4F!sETV zawBq0UpStHTGU6*o#bXNGU`w1Ia3?GCrz&|!!ndANhVm?w^pKeQ}?G!FY)E*Trb($ zR@2JPdY8G|JD*6{PYEo_erK_&U;iQ-r_B@FMviK0J`n?0L+q zvFXU*_*;_Z`g1uv`)X}+O?gJx@3GTBmW!=tdiIKWpU*Do`3Wh|hIdm%*8AGNy>-S` zP6r?RmuSdzP)@)ZOn_xy^YIaE2O8$RMqovqwN2MZBcx=6Gh0HU9Z(H4vY~8XeO9c3 zoAf>>Is?Dvvp6l8jXdtsI5MyP4dEN}>_1rGoIZ8?gOccwuNYE^|5m?Us)ZzWzd36w zH~IW(tmlGo)Bs7SKJL$1IdMnEWJzrveqO`E4`c{}bb=EqvTUD9lrME$MX*+mQZU=X zc&Woi;6dW6ka#?U<%o0G{>GO=ZKHvcve6=`KW)uvKWoT~Dur7jb*&A)b%C#)hD#g0 zhgm*afrRPf2Bg%r&r2lD`s~TMH0mGHgdl%=HG-HZnGBvft>|E_vD`@3h0ZE#D+l){ z`_<6}S!6TqF*Vf#kD;(-z_eQ-H2;m-c_v81mLeSdn> z;&XFo5D$W|6<;Tb0Ak&*DIPosf~hGj5szTD6qe(m-qWhP~9>ebK ztYfg=K0LP{URYW~5p=CIJEb-sszH7(;gJx^Fcv4*!JU}P_+V>M*ho{iG(pmigg5W^ z?iIaq9WeR|WST|{HOu!DfD`;^`EpG0>y;;Hw9tq=#Z-+<_P~}Yg|1c@=9(_%rRp;b z=qfB9lwi?j^Xo7oT>CH)OK~IH$W%^jawLHZEJ1P4QWLXz8%CCS*3J3_fN&#PQNKdV z-ruX1=y=|>MYSS)`K7%NjGUQwObNLF?3Z>0PH25VFJQXu=fF>Qev#bYzMS@W0eZ}| z5!t#OLg9UElp$PS5T47$5cN~drt{&9^{8oG3W~j6qZD%QevLdGXv)4Syu%ULMHGz; zRJjIW@rhD+(!}g2X#~{4J??F_9z;A1jKgjMQ}OYgLUZx=4*C~ak%lI7Zj;S}WiO59 z@&fkrDDGtwUNc7smPf^5tA%at;JD{IbXdG0g2-`J1ZV~AKfciqx`jwbzo4g#1N-~06xOKOmz*G()OizHw|J{a z|229;)T1_>(IkrdMY#t6_Y+p_Rjkh;$bxXUY5g>##x*Pw`*4yqxgow`4lDJi^~)$H ztdgRV+kx(-xc&9%W81J%+HQo#>@(TxTpCn5t0_JtILCGpO5(A_DRTIX0`b1;{-F_? z8o?mn>s$E%g=i?1U~1_Mh6VkF0eC($IJ}mJcMv2L7@$Gr1RSX~ADt~f)QvjdiPysa z;h~E(0=v!03*m+EPEJmc-)3P{u_PlAN|kvd z>LZpbODBfNSrsEyXW$qgS*=F`XTNejY0(JYZI635BKI`(D2!b??p`u?qVDRk(M#AL zFMS~_-{N}TAGaa&!b_e4HPPE>E6V(H!DbXc9Xn?!D)7+rS%9b~o#rn*en9Q4B-YsF zi-CGJ+S@f=Ac|&HQ9{V>*@%O}cncnmrPx+}nSQ}d>)@;{6&a6pEB<4nwA3jDCMt{x z)cH=wR@(GE@Tx#}L^hyZuX=fv&iKbOn%Mu`)0`SP6@)1(5L9JAi1rEjgJ1M7hOVo9 zB6~xMQCVdD>l+sKHRZCD=-gy-Us{D#UE>~)5YfaL$DQ?^@E$vBPA{zEc2$M4%U8{} zXZ^xo*l$*y!5LVZg2pDIPc?1jzWyNkiRczLiYFT3hTf#Mk4)Rn0Lvl2CeCUm1hZ=i|&*|O1C6k~st*$f#Q>7r! ztp2t}rw=7Ke0=}2?Koe(Y`>MBqa5!)$DlGr)!k-|b)H2V-6<|dV1(~Cq__YlPrSCA zPxqj&0nq@yf2-Dd!6{{EoI3qb*24}Ga0sETX_BURXG(cbZhnATXmlLW(*Z>n9v~w1agm@>Yruw4Le?PgR0yYEcP|}? z&I_&1qfGjQM7PDTrUVl=54iLPhVvcn3joV%TS;`;uq|W{5H$d>F}21dQ%Ptsor)7F z<%BAh5NU?prkglDpAY-rT);F%Fkr%|gGfnWI4&UoOH;`LTUtTcFQ>Qu3?DGclp}xC zs6m`{M`j6A%DnOifWgP${Y0uP#S7gVl+`Ouz=IKo_9lE3YQ-tw;X#8P*h6-;X7Skm+W@O>_ zH{4zzX3&hB82JON^^?2vPv%Mlnx7F*jmce+({SEDFYrY}1qtHa{}@+j6rR{RL9!FX zBw3TLg*IxOsL#}>+hI7oZ-0i}83w!o-Ayi>1%ivVZh41uO<-0RP28J5Iqwo(wsx2(L@6WuU>unItdfz4`f2iJzxh4Hby6b!Lzjurk3C?buXi)6 z>e-6ZKYp4Vs-13=yCoDKu3T91ra^W{*qIhMNy9Nu8uA<;4mqDal0sM3yTf-Y(u`U6 zRP5NA!l{S(+-^%NK1H}kfLA%(vX5W!VUPgUqXZw6xlrX zxZfQ)ztTQFfpA<79}2OVRftGh8S;_~k>kBtw$7N!Vky|)3~idqTKNOK)6M@bcp=q) zq04e+oe&3_G5oi6I?e`rTU&|3a#E>Ieqdu;fhQQSKW9Yz1G22ESuiZ&i&7Jy8{zOF6g%Xb+3MSD^sN!P6(G`>;6fd!kYQ<`yMLBQHgS?)Yl2tRkW&a#OWoGSP+yA#V(L=fHcJp?&nX+A^jnI;y`9b-kr;0m(1*UU%*=|Z9&jE!0y*VnYQ4*8pzim_C0!!jc?sZr{*PY=b>(}_1{(ZC zr?pf5gCaY>PC~*(pk0t4m_d_oCf|c8vu_B#KdmKzma0J9O0B|Um ziRj7e3DMENyI)ILQT&tVBCXoqiLhd(k+Hg-)rYO0>F(B7?v0#IYM%f;4sE< znB{ae1*lzN*VaC_)4QsXJm}cAuSFaAPgqqqQX^%))QLl;YrWAzkNX0i%MGDxzr*G8 zHxWRT$Wyk~;Haq@(-C&hn;I3ZSR->D|1@&So4-?P&r8!x8!59To~N+0ChwmU%_c|? z-^Sa=eK1ELb^^Z+lz*K$M5m=Pncw^Or`I?X_sV=`E)TK|C;5mH_QJunwvLxV@HzOI zp_j4lH|O0a!l}Qo9oiK=6q6)vsyF@9ReYyGqP4Or_Wf8b{Lbrp0Z=H{#KNEashhCU zC54Vx`jVUFp7vpDRY684yDX}qe;Eukj0VwqG8_R;;_rq|yGDIqD%Po24ZpUDui`nE znd&o%74|y(S+%B7qTjRovDBHd9&BxX$Y^yjO=2CA@>o6)-bJHe5mW?2Q>iwm+#sh% z4*FEwgfdg<5qfl&9oE0U+0`pxT|k?`Wb`LadrFKMs2R%q0E7S^e+TO_x6hi(etmAx zbGhfsOjltRw)N_cpeWQyD7#7v!Ual3-Fqw(KmgcVDf+kN5`n^wDso3IZhU zUGJsi5?|g~hN5O98o?8*40j182tNR3w#F}-KTRoKqP8+or~H+vB1gSTFx0s`+gPZH z#w+}}Rmsc)8tS?u<;Q2B0-39n;@Bs-Fq9%q@$D2|&j$*PdtlN_rY@y-$Nih89&1iq zLqWq*F+yM7jm}SpCGSChj=WKJ_rr$~!+s^OK>lz|=jdnl@v#xOj$6k9H$bNWfEI7a zzeT~|aj+P0t?di``fZOR-zWTi%zt=o2U+gZsWGtMDKJ;omTa>-AUC-saYGG^ z*w-siNV`Qef$G#2WHeL>_=_i9Uqhm+DY%4sx> zldG8~(Qa1frpEpPb(qdS)fTq!mQz)`96K zwR})1aL!3XbTI-LUC;xwWR2-X4c`rAG8=nS=Yn~vM>&fa`S5==nXlK3t}uRdxgj9x zZBBL3`@QNZZwFKy_MG5&uHXkZ+5#(M%j}HGsLkyar54*Ik8cR-~*BaU_1r8R> zj3GIeu*TzLt@r%xY4Rwp)b;U=j{e+3J{w~IW1DTr88YgL%yDZNA9xF1^kt6edVANyYbW)a(9Z3&c zb-wI`pxz+wZ`b`$;1owtkE4+6Wu(1?et-A-7Xm^a9SBvpll4_rR}YO~`Vw8-&)*PJ zYah`J0!Ni#(plk!nq}>Z!9N@L;UjGJKD54=?-kR9d%aw<$kg~C7#UgRfnnDiFK|Mt zc}~UV^c+fC3tv?lZ6XtUJ@eN^1qI$dCwwev9UNI+!k=ISt|{S;g-FXkW=dXJefY5N zAYr?)Wj4g+u?lTC004>Dm_aaB`@@Dt*0qtwuamTNmPEE0-{o+=o*TUc34{1a=7aZu zSz+%yht>A3?PNx7DwR{^3(lTD4W&1;+h2Gkza6GN;Yq6?cy>PC=}pS<9xdMR)amw4 z>`d@ui3k|$w}Fy9r?$bRL^R>U6OcJv$1!@#V>(%q{Z$q5 zQ5#+qs*(zVgU8e=r=LuwP7swW?jZkF>6429KT1FbIjc&{!0EAuw|1#1F08(4-)noW zRT$;#y!~xECEQBU(7Vy=YR;eCK#wJ7aGwwXm9$XPGt~)x|H+}KxMxURSKsaKi{L`> z$5;gLREwM{9<9W#@^aRTy#S!jEgf1&VZMLJLOKL+60UiqaEz9UFF`8w=q!MqF@#2X zuwGtV!69|i`YcJGi2aR`H|0JCR3K~CKDN<6UE#pgB);s6EL0?F9RcAd+Lzk70S}HC z{p-R)rd~D#vg$=p#YIUp@2en9^}~*~9{_mI>3E#D_Sav@dnZsYW4}QvmetKpWiE?9 zw(;ZAtC98hdgsuuYh<5phUQ7?=;6}TG7mGq^ySWHoHsXO;2ztRG$RMTE{PD8n0!JhH?w9Lk@#e!}Nx+P<^^`coUW*oz)(Y^%jjMHNcos8U--P*S-2qE2Pr{$i+@;MaXe+ zbiJB7UvEC&fO>n~V(VgqjOCZd#7ECl`@DjtIp2Cy)MRQ7wQ7-A1G^koO8$>a*>w2Fft+{@@0phqNaeG_KGj&vW zB^~g)10;Kd`&VunN+)C5H2aNg~4(&stpw%L)68(72VD3 zSKxbOqJ!d9ioF!p`NcWfQHEG6nPOA%0`|RT*#rB%-5|jMi?_M{>oIxmx0&7e`%LA< zCr7k|`~I;0PORO5ys7+yACiC1?((VV%N7MFR)z8)HZInUun;3kt zh$}wvs`ak_%4P;hS4cC6FfFnWMXY_C3Ds%)%dsfw8Cn8Vy8i22_NBK0Y1Nd4&rldiSvSW0Y3ovgB#>mXg2idroPd&M@0M%j^KJ>w1%`j=)gkZ#c7J| zE*UJ%mq^OY6#L`loYWGZy@6WULm+UIOliX`_1oH8yfXI0$yzAt_SlVd%BK4`HT1xL zW-`9tafOx0z8y$7)l*lP;R^|isviI}Y>fs0J|1*)cA$VbE&V(L(`4SIHg`Usv0G@6 z>;M2jtX<<}x8tMqTJU8(e|P`%)y}CtmIO)YM0w&8)?S|ZTQocOHg5bo^V^$zXXrUOqeDD~>#pVE9PDrs@TN zKzdR!8fX*yW#ryc+wQQvyfd^Ikl-KEO;oDWFut-dg+3?95`6Xm(U1kr(` z_c_m$4fJQ^GKnS&>fX3lrpK`O6k>v!R=?l-<5?zRZbf2Ph&HJ>x7{)=*gOQFmQk#& zfW6|bCys^Fg3Ht8GBd3KWM7^ZLZjIz$G}^v8ST$IaLe}sw#7qF9F;JY@8Ew$Ci2sl z4bSi5qV+g-r*c00%?4(Wu8iHRS<^0~Dnug}ss5yupcbIR zfwu+BOEdCIy25_d%oejKVV|UCvUO#(6V=YwT(5GH+OM1W%gZHVegn Iu#|xR1-Hz9e*gdg literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/linux/configwizard.webp b/static/images/auditor/10.8/addon/linux/configwizard.webp new file mode 100644 index 0000000000000000000000000000000000000000..671731b02f3d4a333ae3d1439456473c83666ada GIT binary patch literal 38146 zcmb@uW0+@8vMyS7mu=g&ZQJPT>auOywrzCTwr$(i@BU}b>@)k!?74WJn_n{5hm6dK zjC|vb%(a%Xl(_hN5)hDvn6RR{A}8VXUu`={kZfRTUoZ(!erxtLDN+*Rd}1fgUcVpV z<~C0PGh6rfVV>(G1Y)b8O9szrk2uYarWoxvII+N=p!VT#7qK@4UDpN$-wU6)*Ewll z6o(w$-A@0`%Z(;Vb8ROpRdvP7l2~D_A7VQ*HPfW z_tC@u+x(m6`DE+hGxuBI!M6th_>T6q05Ab2K5sq+;t-B~cYR+xRRQ&Ym1~x-%&(Cz zfStl&&xY@vk1qi5o&f0jNCyxc?tGMf8Ei3pnFr0C+|DY<$=FxVhdr@%{A81^@sHH#z`7o9#v|K>u8z zUf>%HPaefdbSz#SWL2XW#|m0e^?1b&_uc^}YyBEDM_x!JQ?J)?Y?Rv3vK6G@O(oMX z?$5qV*?t9e^&>+jHUW05g@JI6X9YEJk2Dr|n6Kt4(Q(ms29ZQ-Aa!@F~V%Uinw&rlGS zPu1)q(l)3+vS)vQ=^T>$5!6j2CI@=&s1kMu z`uwvm*Wn==SMw$$Z&pAldxzgiV$S%ItbFXKMd1Hw>;D>ZdRs9&&*VOJ+2BK;2y{|7;F zkR+>*QwtHmIexEYm|Y<#x6zFMaI$}!)`1(s8y0aytA*p^vhgcKw+2Y7?!P$Z-}_j- zI~Nmj9d5Wk+R;2tfRK>t?1}kkvn)Gt#0mbpY<2aoW(U1W?qz^7-E*CvCxkJxUbkax zSEza)WIAYnYcnu+;2+5GgWnX1wO1=O%K5p*QHABG-T!?*z`K)wmZzQS`mCH>T4@*~ z9NTiIR>%Cz?+YDC%-poV6+Qfpb_l26dM<_gGgY(6ROsj`6aK4Kbrgi{zd68P=2`Ba zuo5G}GZ(O*;+}r62K*Qfrd1BATphGJW#eu@>{zN5mcOlBB82Kc1_aip^`eZ<{2n6kK-gRIf(beQ#aE}K zP!XML9*-4&K-&$l0UHpS-_yUwelHe_A(yA@)veN1;;aC(sc5t|A&u%dHqOL%jCfRw zQISw>JnyCc9a#Rc=HO>j{R|>`E7{MJxnMeTzAJwwUf4Tu@`rlmoK~QT?j@5{OJJ^w z-HY~y$le7}?bRj(q(*~4_(XgEX@-Crca==Of^Lf9$!vRL=@QD0KNAUa+=mA|JJDzw z*DV2ZQdGxvul5B4+pT8z{~P4;9;RxBPc|y+wWwj}4SDxN`Q~pJ7^_Rm=GlOtD07c! zbZXGHx`&-~cHhAMwrk^5_v1MybZMVw5R{rBOj(gpOZfS|z>$pV12MDNRX#ixRMf{5 zDFfL_^B7f+t^THh+5=Sd_^-BNetBMOnuo^f!){ZIKA5$?qpfYA9Z@X+#$oKbw<$Hl zzTl^nF{cvnKIUN=s!)atltrMmiN`K^4Us^j@5H&W_r^D*zD4!j*xm0|eHZ3F9F_Q6 zjFMArPU}#OVgp#O`pzcVZT49Gq{*bpTRYBbXc?Hj3Ytyrz>Kx(BXD^Pj&hAT+l=!; zRIIDU@ixGKlLaQFw;EM6LhjPf^8g3yvZ%|g2lI1Ss7XyJH9RaUCp~no0mk*#ixb3; zU0Da&2lO4`d*`8W>a>FE?HSOldav#hinSUC6VZSj1Z||_){#{Slpu3bwRv~kkk7_{%A%rYs<038d@pUAq-c|RZ*gcAKX-1 ziq2MO82qA-W&^6n2UKz_pHE~C8xiXqD6K!5!|lE~n>Rt!ABalbTt{hpGz4hVDOalB@N&6v7p@W6wEVCy|wIXC)uLpwj6DfWKFmrvDdi z{|(hDc;xJhG!UdP&5UR zbqpR?`@y5AG7v%Tj`&^e>N#n1Ddg)shG4THhW$n%ABv=7L&lAILJ;sBrWsaGZ}Yt% zeHmD6*pXx@UDJPD$p1lVNa8EaA-RkK%O{+8vdY`o)n7fmq@l;o_ZsdK?E~RhE;fvd zDOdPeR&a(K2S}%e{b^qkj7f8FfgZO+JF@opw#>{mR1d?32(qE2CZmhhCDw>7e(}=~ z6u%n@-;x^hO3e*88RWKxgj+I-LcYSv%>_3}CKV#&!mae=p&0e_q7oM{zdw&LInyHG=K=U#z%#N#9hNS(&W$?G!X{ScQ z&X%Zs9^lUP47#D&gQ9V_ejS1Sjne&FwEY)$@;5L44{Y%NL)WXl>gW7A#oFNn(CoAt zxz-!tBMZmaS`#K6&A16ySnp@38}cu6;v4-8@0Sh^9zVlG5I|L=IiOnjay&aL&y=_q z0?r3SFkgmoCqV)Kj2@^>=r*6U)ItRR;oTDi_{X3Hxzxv!PiKd>`FXl*uSX*q)pdI{ z5rzMAS=%z=zKO&S4yEi!oR<$jKeazn1sT5FKSO}6zE~$SeqAb7M%on=1518&6E83b znpTPm)}A%lu^NPoq6~t0-*owQ`P{zci#%UWt}d2U%3H55suJK@l^0&O%&~Qu5iBR9 z(&I8QMCG&t@}fV#o5yBjPFwcI5HiJW1VmEOgah-PiY zXa71xZy^9{%NPdWZ2bwr)?-(N`_Zv{2w~iX>stvV&`9J;Z>eIO)&1z>9~Jk%X!_ND zz*$bA!C)nDYb+r?4yNXD!n@2oiFac6rafcVt91{&lsJ&L9Y2UUzDZvF3Py@2HdMYk z>-z;tPVe;ESv4_9aX#*@Zc2c&r~#^xQTt+rp!KUQ~R^g=3g0EPDgPkoTfr7#ju;^zSnGht(zpR_-6sn^P6?d;+E;& za%q+f3>j$lhWI<`)?<@a?n{kRuO|Szn-DO9E9u?m0d|D+*Z2_b^wF#&c%(90+iW8x z27PWj2zZs(gY{$_mE8kGM_c3UmsM1VU>du!eNr8QtO2^~+2^u}g4ZvsV%A)K&2C%e7zFVjcDk*k>{z%X!^sj@T|1_Cw zdO_o!P%$X2HAAxxJ=*&c6ki{ z4EVs5xNLVZ@qyYCsBrI02R`&20r?w2`)|N?Rqc&21j;(xg}}Ka%*03zu4pN;SS99P zf2)qMYVV{}s{QZD?qBc*A@lbP?f($|9AhWmWV_5U)rZA&NYLh-Md8R`r?mzT;h{ukT)Z-qd{SHP*P2lt#G zQ>Od4^|{MFGuBaf5*#EA#Bod@!u|u?3rHT8{c9lU1p@j8H2kjl3Co*ki}kBBcQDh% z(~%mL&l$JJpL3@f)eeSWou{Qz;h86!Xc@WVSEgGJrfIVE72}*hY?7PZU*}TDu?9<+ z@Cef2h8|gqq5()pJ8T?G8u^f>Ws7wzgOfyNQQy)F=*68Z$}F1q+zk~$1{6EcGKG;< z65l$YA`;-b0y}>31|wDKM1qd)RNezKq@%E`i?L0%`AQAXA8M~+VzEc&coy5!THw=? zlon<&6-CA$4u+WCzv$SnanXu>oj-XI<@kcIHy)}~xZ&E-81KLn!XG!#Ib4HV*JM<; zc5#WOOIPVB8SLghp2T;!5Zb=E$c(c~;^WV!lqf$$(G%RU{AKh5v4g0h#~M$bCYgB{ zAF-~nT;~M~zgCb&oU1iqA6b_pqba7wF{ojvmaF**0{l5%=YZCXG@Jx)yr&S@lm-!g zDO1Oppblf+l$R_BfI5;U0T2VPQzy*$y0`F+|(>WTf~u*Yy4I|AKO zCSVmRUkQZ~l3V9ZiVd9+?Z?XyueEPW!j%6bQXNX@Gs9(L1jD?ulutl@BnXm~=<&rv zDP8ywX*u~BcrD?J<+laP6PvJZ4%w#_C3S zNMB%Nkk4X%lItIjE58Ih`I2x+Mrdpsc+Lu?fqQkz0$mI7rB4L${r8OqB8$2LZ(nFb zLtZhX-Y)M3HeD|TtG zG^j4Wt5$~S8n~^0Ao_#opqAfn$pLZeYx4xt*NyErcoMHw)v2!rxMt~jrTw^55z6GQ zwcK%7VN!BUq2m5CTz6}g->wnCg)7uaM!x0@Rh-$Dz+I9l3jytgPlxcl{fs-)%1`y% zxS64IhVCIjEY{&ie2r^KhQUg@B>87wrL|Rk+9i_Y5WLGh z1TG+H2ndP4sAWXu^8tvsdi8c0Yb_`$7&l=~esES_v-8xeWols0lgLtPJS3h*tf*dlV{EcPudxi5d zg1|7Wh1Afy%-HifY(*x(x$nr@N!uw|MDzKfuFae5btwBpAaL!*2I>zSdyh*uEyRaI zCWm7>AXm+;%X{&HL5gq!_-rAH1RiU$0y{FxMFxj{L2*9yc=z*F9&ABCauizMx8 z0&PRkF;I_C(SYgCL+*I{>03p5B~&u&i)yRE;Rep@&!nJ7sV$Pu*zl!0paYYh*iGJo ze)8|R(haZIJIoxKz}CJ^ii!k&NOJi>)Y`E>KNxPfgmH^sPU`WIv%!Ty4CR1|Wrrr_ zmvDkEzNj@yQ&|=7Oi|%fF8UznScY2b>Zl~Q5uCUr5;5VeYNYtj9x5;@UdVq>Ir2SF z;X1@pL&uliPrP9s_S_Ehmun{IN}dPOAVCBfPo#8^A#jCN<^IqsaxZBom(ek~oWgp% z62kM>PA_k>&rQ+}54DN}R&8(wpb;IQ&t)Ni-~L`3e(r^_XN?eekE)H=TFhgQKD&w& z^vLxC0s{8@1;qCDIPW<77Cm;%2)$}Km~Z;U?Cd$|02o#I7IO2#a+D(CDf zk0F(oq-80Wq5X6rz-cQQX1PpRGOK4P_q#jOro?SjjEGKJbZ>*F0P?myJF$#Cr*kHc z4Nu6OF45Idp(;2ych}pM?p@48<%X3?P$m%QG4Cu4ZX3L(nA2`!t+u)11v6 zV>LA9O>oi;yTzs4K+chh00F1Sd2^(&p9E(=cyEs58hL@Sv(c~N>n{RT{|x*qk!S~q zfx&@#?_j>>3_Q0ilfTIC1i5b(7(cJRibh($(3Smp$iXJTI!l2V+j3Y9W3$0#Ja4+! z;w=6xD-5witD0^ACWkbbHjatR-7TsQ9bl7xdpRGa`-@`lD=A;|RrffC7Hbx8=aPAa zaD;<&efIzXJdZg(cbfcT*Syx$oXUpr$B=F&Vg)TE>2Z)CycUraoPYz3T*S#Y4gSNG zdNS5hWf;!5)f}SlS!-oPlsRCxhXS-|=|NwPVIQ1c1T_Dq;h_8cu>kMmOW-FK7^?jD zmm)cFAUHP!CyBc2w$naCQSg&QnKEB2%);rI6p;FNLsgjV=Qk<@fBNq<<!rV_WoB z$diOQs7o^mJPpZbh0m~ND(N$;WvYDP>@?osw4GY+?xM1_P%0!Xid3i$}x z5rQ!w^{MSY!k$ym0@f#A>SUuPvLTsUawi2qOY9ZJDX7WRD=6~!B-yrosn$e!Ab3PsF$ zwM&)jJ*xt%Bn7_iS}Z5_XL7dk8aqWg3Ow?nElN$mIQ;uxiuvAA0s$jdGq0e!=OC#Y zKs((i1x6RBUJ==P7U8@YtJ0ttVXrKmZRv~$&_17Ea8JMi%Ai&y(Cx2>YUVR9ztnL4 zU@8SRqb>#AFV)ZzV!k9A^${HYVqz?|syI&Du_+U4(+^DYIo z0cJl10s@;3#yyBHFFKW6L|KSrgNxc?_ZdmBgprwgORb?S6j&6Wc^-{+GnjL$aC$Nz zIe*NqRO_Td0?-N&^dN zVoQ}!rL|{m8C^y6#x>F3FT@dhDD%bATir{3x(x(`kp)i!{#dqd%D6E6Gm^5RZsW(n zq_>4TnBJT6nxPl2APBorL-XT3dDF=baiVa9%l;2jmNSf*8n5mtGLi|E?V_N~VicX2 zwa^_M4x@nfaNR&%<+LLNB8_{9K|q%xP{n8^SvcrGiVCDFux3L<(*PF#q^PYd*%nkX z4W{Rr22TJc?{|F?9Ur#S7(e6hR`=s9P}zXRiG0HpZ~JGCT_EhSpF`B=$y8N|3@12$ z-OBuwG2ho_p+XTFim8Y=nHfQ6tz89k?Lq)YV&%jC5C+-V53`ID9H2qWs14xX^C4!jRhyjVZL9vDV7@rxUp`MG!_5wq3K z@TQLhMuZAc3ILTf2C*|_NYl!p7I0zgITezuciqb9J&d4n!=#%^iLOimSE#j~gozbU zD;)+@+mi_y)5;mSK?t<&c9)X~mQsZ7Af$JfJMNI@^+J@1HE~^?oSr$UIE`kuA8(N) zqA6Pgw8`F25H*3aA8&|>eiA=eI6_*OaODlg(*4%7^f^iB7L`_piO z@A@Le(TDyGecCJw7!rLI*ejeCJkYDGy(Tp|(`>u|QofS5C{EVQF-;lmL#dM&&K}?U zDPGj*;jI(pD$Wo--9Srq>f*GGmi*BsDdTOH|4vTb3L1rzyMp)_Unrn&zl z{5K3my~RlXWegB-gPn`b`=s!D=Dp2b$(@7Ks<_vKi2(yHl`)jHlp^+W1o}BvU3cfX zETmXL$(r5e1XFUD%8^UX5Zeo0fB`P?pLwfF$sf+GCrZeV8HNP=KwiWy2J64k#>opg zF1@d~%E92Z?o(54XYIj_LYYgCw9t5}-oVV_TX|&%XZ(SB|0Xg1UUkyDJZg)YXjy@P zA2MZeFA;(eg>e(yT42?Rwgh;yuQT5T2$_KfIS{s87!Biv1Oqlnt%Kr?|8-s1aF6ww-Y+muFP=Ql0K)6dL)!KX=?M3{xjM5t;)!G|YR&bY;QsqOE{ zU?xjrQ4hWaxm#7XR5zDbLw3qDlC{!?pYp+MPI3FUKiAm6<1y|e;9l^rP5D}*WWsz_ zH0oM4F+JSn@*;kj4X&O1?t`|JtFkN@vzIHLaci8k z`rg|+oA6DVraQgBQdxGaViSCh-xM>k<1(St_K@(%sSx#1+}E;}$}jRr|v9|D3L z;SCiQy(3EG?91mo>vQI|9|>3iL$?J5J;*n@@%4jbSzseM4=!EzMXVIh1(&2-917Mhn6hhjtXTcz z@V9Kne_85|jV!3leH%i3y4EXi^dsM*FC@EJKV*Ehmfd_upJaH4p<_%@4Mi-%UTXY= zjgIwsD0!d89E)Q~4@t=NP@*Wfi1`3g;J$(@N8 z7jv@p2Yd8Y*g8y?EtO>%!dj?OadsNp)^T{_cIY@2SA@+r=QkC=-vy#kDt=Rhs-9ZZ zgYtPnkm?g02-ux1T%OA=1A4F582Y8DdzW*TfX$VW?6;#NL&LER+NnX;n*D9S-zO07 z0;F`_fWmfA#AV+GnXD%WGQYX8puP`Ii;dc(fK4+xOYIV{^A|)^d3tPkTW$R+S>=Pq zTdM9{v$wUF7~dhnJT(T3pTPttch!C~k z)EuJY8Hg*}c$qoAYT0$XL+58%`#tJ!#$y%>k7gUjbVRC?$=rBJDz|q6PR`H!@wjCk zn_Z}Yu-RzE%C%nu5*C5^px<9L1G`quQ>k6DZ9fa}<`#w-58KQZgrmBU!%)wkrIx($ zMCd8AqLOw;6N#k+0*Y+Riplvc*o_J`Se)Y^P^H)l6m_{HXJ+y}`d$U+WAYZS5N8Ul ze3r)h)-@LVGCtqd{Y=Ug4_#RQN2%Y-~BLyv9jSk#>I zz=SdYVM#prIduK(TpmrkRL>(?ri-Yc<dnDQbt0$Hv&H%e4xT|0HTK7A?OkvPv*En@{gKvPjg&tAD>qy%{-wrthXFup)HQ+WXk&O zHN)ztWPzN1S3mO<&9QuJZ$?Tk`k+*lF8m9@J z1UjFdm_mp8U48!2yreauA%`}$hD8L>km886T3~YsS(uHbKwrW^ zS3i-TD~7%xm=sqeyM{d4@71s|=uE}WShUs96VYHb!M3$T9wj6*950eTH9afdOf#Vh zDz>j~dAexn!OFtMXwapwIPo&7$0k5iwL@^(%68FF6}gXN_@%!*WD`CsXM@Gl9H+Lm zn9vGLTd?06Kf%4My^qtucEP-}_S`_EhXNLr>fPKR%DVRr!TrsDq48pu&_62W@`tsu z_;=q~pQpaqN;VdIO(h&+Bj4iQS}95ca^HFRV1tzuP^LXkq|OfGQdnZH8y(dk(MrLa zqr{D3;vh{A)ugxwBo8_xkT<~eCHt$RO^mm{gO#R21Re}$0UO>bl?wAHSrl;Ek_%|g zlQ9Q0UoWAO07GEL@zh(O^{zF1$EwB}PJNNU{picdtSS6GSxXi^gAoZQnjK0>5}DA4 z5(^FWQZPoB`)bz~xicsJgHtjaoY#^VV&=V<3(cbK)v*EdBBwP}C&sd=AXzV6`?pa) zrNfai^NU>0Y|!`@x2O8lVnvV!#ToUq&AtBcZGGjAI@sM>Zb&S3Jri5pL(~lp8btXT zbQ^J_i(E%yBm3esMdq2C4(y`*8~nc1?oV-jW)nFM>g_DNF=jSj7Th(>PBw*C%~ZKa z)LlyD&`^@s?AuW={uvyqBQP69Cc33)O?DTUB!W-l*?aQ1C#s(DM9q0=NrpgmTCBWQ zl`WB@x^dHU-WfOvlIyRq@y{ZGGP;QjEFi7??8uHC5(rS>*DhlR)f%#W)ITzB(8s;J zVFrWOM8?4b&aebaOZ&cl@+?fc(arkpSU;U=ndm9F^o@Zc?| z^#;TW%x>xHwVh20g6C9jJQ9gFy_c@QkL(LvfSN+djk}fe%?%U!;w=B7!Wvm*7KPP#g>8H zV|7R*K22P3>#lI+wB@ir3;aBZ@7QXd8kU{6YcyZm81w)T`7(^u*aV+Dl!tNU%g^OS zk#;5%Sf~XYo+eVg&}x-IXt{2H5B~b&sTY>0oox0b-N>(|+)xsj9{L++M~^D7H`7tx zNJ;ZVM|ToxF!ixcSVci+YU2fv1tw6HM<>1)la{%0GN?>LU|tVzi9&6fD<#D^weP z>AF*x%%D}82xZMeEfd$Zj)`+6Ud4hIBQf!_qX_x<>IcLO$qKib^^V>i%=Nk_#SO(+ zo|HE1E^(%X*FZ_B$_`9RQAu|`Nbz4u_g6gTvnm3_fFwqzKZPQ!JI>Gqtb}KeE1Dn} z1q+x&o3+0i4-Mk%CuZ5fX!oWt6pL~6)AbH%P%ssM?-Q2)@ldX2ETB_8Dl2x7%H)qn ztHiYVsXR+j+JKn$?PMX@t8*zzXuMHDXgBk@thKL{1{&v=`1rYL1n@^RG%7JBJ{KxxocU2FI`qeOi9J@h#2;cJ(eJ zmFEK`@R?D;1mDFRhU6rUI@ziu(0C#`Rr8J%0jzp2NgTMA_;6|^CJ3ZKkh?n^>Dp4E ztcF6%+{{%6dc*Km&`w;vdENgzQ>^ zgu}Y=qp%y*Lg}YtnlToviJq%XSGFH(GoCBKEjW-5++eio$E8M0pqfUkcoUNyG3$*m z>Iq?Tld1yNBQnj*Q-?dI3Fg%51=u^DUZkC_Q~?D&p@fpp)GB`Z=l~hf8~>4E=$OB% zETsKSQHYX5iji4&V~JHgl!czS_^rORz8McM^GJUqjC}{4BXU)T$l)-%a`KM=^}Lfp z|0Z+&DmG@D(RD-1#lK$SdP*0zxal}oNgaYhz7qRtR<>nwntOG0)JBsjMj%#AHK%Z5sH;*9oFD0 zhc!Ko{(RpXrIK=obaTV=tB~{@Ab5pCjMssu-KEZ7!bMlB7uEex!C08XmjxowOcO0_ zZ;}`~BE|Wo3lABu>xaCW2|3H-z%f>>QjW&lwbHunHv2 zm4W+0Sm#Lz<@%3f41$lhhW7R`?xsSE=dB58>v&F|o3rMal>2no5rZ0h71~3)nt@SF zhGt1lHOhnk(1Ls<(MHLe$99xNO~jK4(+~E~TT}5*f?4YTOU=7IZ=a~w zvhXdu=w)2@ZZnf&%ktRIyd7#bPK*hqzVCihj}~I4CZswm!Fqk@=lpP3^Y<|E&Yt|| zRi!w-zkW78{we|PlacN#7!F~_<}uBeL|(aKs(qL>h8Nr)8Z!B&KD=U#=C9iYBT=1w zU3*YTW!DT^l9DjgPU>t^0b;kn%fBJ_1_x@n%S0f(G#p)lw;Vt%(eFd^C2wD3^ zWWE5TCC%Ve`+GxOtm)8uYE1%++{WnmyJkq=o{R?K!NaFKXD%~PQmqgHV9@(e_()gUk&gzyM3GxG6v4;EG)< z(;Sb{AU>j;flGt%jxfj>T3j1H`dv>&tWQ+$kbN3Uk{LED+4M&)h1K$I%cIU6~4ZZ#!$E(jx^jXfBcU>(f#D|8Yq+HZF{^{)}L|%@pFh= z#beYlaT0P9s&n5)ICW{Z0uPEr6I9+=I(j#&s^#w~7j@0I{bPnq(=y{pMRW%mn!397 z(OKHIh~11UZ_>T8AfEfmcyzMip_pY^o*C40W>i(=N3TlejM)N_Lp5Xg#^*l?GY@*H zniD0KOZdqY6@eMA?nL8U+SkGA+}^^tmleRb#oJpJdZn)&s}m3iHr%0H5rapqQFoa$ zZ0|~2A{d1CY`Au6G#dF%i?^}v!`;Yy3=Q^;N&?hEzn@4ErX8?lPR>c7$ARg8s@m4U zF6=)~69!M4r!d(H2~O9-;Yr|etB8~@;Vwe3$Ax?B*l}6#!41vtAY{p_PX%35@1)H} z)A`jZyu_jYX;v6-9`?KJBTQR%wjXcSMRV;ojNse#5E|iN6KsbG_UhY4zNa5+j}RfW z3Y2A;=U<21_P4U6x}mIUIk>q%yxI!8xdI0UmA2#1Hx~;Qx-b=LQy$o9O&Yj8O~V@ER&6B1cUDYoODzQCsd1`3F2`cxnW-d8T&1#y@omuxu9GRMD|?~dtd$ha znvQ#U+xvJAz`Rk?T~>;|Y?LrOX{~l}b#T|Oqfp4Y!2<*ksN4;=+Q|$QrL!SQ-u|4) z%QjJdsZjU4rxg2w$+EC)U38HaiSP1lZ5LT5sLwGi(kC$NlhqEe)T_=2fTB^~BB#u? zaA2}k595cPF$u(8Ur~o5SX(E53LSy4$G|;=BMIEF zZ!u{1&`nbDg3D)5vFEd=1%kri5?w}qqX|PIU!J=XChKSd)NG1ZE~v{Dt42b5j$E|L z@!qPBzL&m9*^s}REoBrqly^ph99L^DnfNF(H^yzK6$<8pJYn0p=qp5iT#+8brc=@r zYrfr=MYFPdv=oPnGlL5)Jlp~24D`DjuCGt<5qS2pKLBr^B=}uUV}mmf@Z0lkpy7yC zz>F(oHELrlCwG`no<3uG4Of+@t7ky^lKk#vETX&w;hgzwOVz1pOIUaA^sx#zs&eUO z;A?HE8mo1{We>~JwG*5k^b92>^-9PYXI zFp4HIB~MhjMgpg%*+|h7TLx&MEtC&OcS`|K1ZqL#ADR@5s6S1nI=D2ig36k+Te-tv z&m|Gi($rU~{c1DR7UQ8DbNm>o^5#-8y>#^_POma1X-qSUTI(M8MX`ttJ~+px4wdHB zSUA+Ly+k>RBY&|Wgei@t{iDo-%LSx<>_?OreExbPwvK4Zm!LwhfAo8$(u!(tKIlZX z`2p3)()2Z#Y_NKB+!@zbTv>W<{JtYPyXkfplh>u&Ip>W${ z=6v)%F~kvntT;u^l|Q7K8Lg*`;Yz*LoUN(MAi>AJEf!Ss&4Szyd}w>d)>jGo<6GLRwqD3-7(0Oo5r=ZHopGWWN4G}w(I-~k3Zp=vU%F`cK%@e zpjaHJq-)~rp=nGAmRW^ADSNV5K{d=WYwpb9&5t;tGF(nZ-?9GqLUP+!xJ1AqKUYa& zy>b4D6OQkIZ$Xb${XD$&jjKL7GR<)(R4L)>#^I~c4J|u_^+A5quLp6XZJ9aqMDXiS zfiDV-x&vB=AqfH8+!XLkFR0-jy5GSzt6Qjqfi`It}^dInLfB zam!G;%2IiUFa>OUuWX$2Fg*RrT^~z@rsaWz%l+k#flyk|Z>x84JmJAuTxs(R!t}Q1 z$j-cUw7i26*?QV!Tc!Qh6serA&{uC)oW^n%3tw}^tGh8@WZKH_o6wm7G?BDkM`@AH zbn>~=H2oAzn;XJ!A>hF6Z}d&S*b%ppxtYkvDEBgO?~Rh!)Oo^8_7KGb2cvITh)9M7 zP_H~Ss)d#(#Stq1)RD&q@s>iI3;WS*>7j1NXK{G({5FfmY@dib?m({^P{UQ_jbam| zn|AiCzkNYm1zhMmq~Uv`rR-70MBt_@Oc_>8$A-9Ja+74=XpyC~iH@7xa7#M+F-{_z ziVBKQ*(5#f7@iVLAOp`ptn{(_Eu^lp`A08ggiJci?~7Savk8N#@}og>?j@QhJsmh8 zViYO})Okuv^LU^aVjJin2%{^0#t(xIe$eqSr0yjz!0JXWRoyW~5Rs^eZ1r*9KF~Vy zCR@;iO!~`f)$=)--JDb-pwY%9c)PS|#SZMgd#k4lY=1AuQdqTtcs(pUoYSSMSTZKgTLc>Tf*p87=n; z>!!LUh$MMeWsJ-o(s7o5wy>916iGOGdVJ3;<9S8zcFTQ`JE5~adO4z83hA|a(A}jH zTfU+V7~pim%5Aggp1+`ue`M@ITe1B0-I%z|LC}B&(?aXwqV-E5hm_$`XZ(O3Fx&FX zFRzulA4~WbriLmBhja&aq0=>=zEggk0o~+D+G3G5g7Tc9kmGWc&3QeNKDRzsHf(!G zBRxsZx6P~a3sw}oj?yY7Q3wtiH-skl2REyuPtjLPPE=i}1>TyawoZ$iU%7W8U~D%5 zDrht4#0zMWo=DKI?;La1KcGYnspeIBw)WtqS7Xp|gw6GY_yX)F;}TagygX0`l^E8qq49ln$GzYJ_}nWbxW0 zG~+yM(Sv~WdN;yZEO;OPB)8N_`Kfe^G+~UDpL+rAk-;&`>YrKKmPPS&oq%7h8oX5e z^7ColvXh$YO!Nyjr7;e;hE$74$v3(c zV@&9~_>lCJzT;bV$QjtL%$a~ygCXt27IPo2ZI}#n#Nw=>{B8OmTr*v?cXCu>Fz(QQ z=$XMOi0A-JN&gIXVk*%9TtA0qxe^M7j;~riqietA>pZ^nv zC8KmFqM_6uwIB9a?TWz00Qvf?fxE7FX8--GJ$@k;R__z6!x++tN!jtidxzIWKHY$Q z#0RS=y3Q(8*7>G6!_Y}s<{Ij)6=EJlDn>#2#Gm;p#O{mH{2TPdcDb~5WV6W`o1g>) zdZ{}fOMb!v1-V%u*I0EE!`x*A?TXuh`gg~<+ z?BEH~X)Y&oT%w-yz#aK*J;w@72)Y5UE6Np&Zy{j8`^(K7w!|H0W~F0 zSw|?6W^=!6+0U4@KOyM|&^NDO{=T(I{RIxOhJsmxP7?znwvW$ViL#8B9zcZ5+M_E; z2hy3T`L}eH`q#%gL^janzQowp33{v7^%r}FAkT4(aq0rH&^=GFb_-`0EHKqTN8^w9 zFModg6;5YC8K-mvrNz=8aMLCK`fq>&WyrL$1ir3Dgi(=?4)#3N`TKwjM|-xshrcEF zhM5>q;6ZCwORp)lCi=sY`a``^KfDcr^OeW0rlFE7m#Dw-0Ef8>PshO+Mn+xdzM?6s zmeMl?SC#OCAEI;XK?}DQ&cvJz?x-kg+SVPni=i}liDE^ejbW#0J5V%58u@VI8~9!& zt6!jtWy*pun;qN!5;)vJ4r|!p$+vYe67WwpR0IHi!xq)qw;T5*HI8!I{luWDpa3mjZP7z)N4Qh8 zMOWAFRWoCErgdN!Nw{FKHVKm)gVZ%tNp-`D_RL7cil3J3UMYGak;y|`G(EHnRi9>V z*TC~R5EYYqcuB=0IY?~FE`z$N0LWsj^OXYwwP4Iq!w zKC(KMs@?|lm_VN0{Jyt;dzv=3^HIUpdX6qBEd$4j0TH@rHTpDg4-bA$8EMA7=wMBW zn`qRhAabTsE~u7+bW%fhYKMErETLkUeecdiJ&G-kV9d$PBxSGF7?Ka{^4&v%7$ozZ z`FKEOKhrIJ$?lqP?4I*?W3MCcT6PU482_D!vA>U|T~@;diJvw<`)^Z$NMB}*DZ*AT zHX8(M!-QSu_3n(M-rHaFr}beU9_9l6sfSns3n^g(1Wy8DTv5)ou?S~9jsc3Vu`zP! zyHPE6l06wnD>Xt>ozXC-kflH}PPkd(T>>`c+0FBw`$(Fmm0;t#xP1fH?1cXp09!z$ zzn<15dg^WBXi*raLkf+If>{O|fZT7j$qsXA!zBwjAk*ws-dHEE33|tCEmb#E4a%<) z%aq{pyOwa8g+gxRdGoOh7>t(JWu`l9=sRYNu#r-gKsx z-&%#dkIKWh2vtAiKtbH9WXq~bTl;I1*TUg6l)N^in=EA_C5rR0*O1;SJv-Ec`#;SA zDdc7IF5jyIuEJ(%$vTrDwE~Q#yb-%Wc5awQV0X6F-G2h=>{$?vx|MjUDC}5$OPvpm7m1 z+^SS~*`Z>Z3Wvp8-rX2($C3HeuYi#1x0}d8v)y{=RC>sFX4UGvQxKYXmkvnG`umMg z<9v~acu0u`MPUf`hk}j`Nd-eV2``j|sN`NzGy@hsrRo+O}km(Jm z|Bxv%AR5cS3k)eZiw}PPgeT&8u$7um7MMqI!N#9~%>rV9<$I_oBIe{$t)9Cy>PYEn zNRtL%J7vaDp%rd&KD3}v^#AF+=>v51P8CSncs%1U*nkTUtP@+U4cDOtB|$8WHq zoE1IcnZ6&t8wZTk#oM*iZk#Dm-fiMgY|;ix{X`;=wrp^O+nV&vC>jjpaF{YnG#Z)- zV0ED`MtYe~vN$r*kQ8p{rmm7<=o^Kd_=%S+t89IJIlo(LSfNqzce)n_ZjwTC9Jh7l zHIBx53=@y>!39_|-Wt7oO4-e^lDc%>N8?`Dg*zkwy3@zso!toYotMZVz(JUCRWDD| zH_W6CMFuek8X2CA&S~Cf9|Flwq!`l$V)^ixP|ylycoBE;b4tjR@R-7GCs@nx2vhe2 zj!%qzM{RQJJP6^*6MNh^L%mYVW&_k@$bKZA2lJ0<24;NvWZAoq&;H}DX?We!834NX zUj$xHQ!S5ombO?O;;70sA}xelVZFM*@S7kXla8)cuMZE&!X+5K3zxpl*3A(NYyl=HqxPe1A7|+4cgzWZCL-Gl6l&wSMl$fw4>IJ**m?lg z7xVqAh0yAsJ>0pxU$zWazqOb~6$*_)6GC?awZai7yTT{SG4{hTGo@Dy#n?i8v%p^7 zF)jk>uV^H$^m$gY*RGPoBggVOImUZ;p~=@!GUHdcdjHfN1rq(N zdwoz>Qw*0oPi?XW<&8&3h-P|^8}FEGLf!(B2i#nnu1NjXNC4o;^Lx&g`fnxye6UWA){y?C|8U%#fr5Cjk zv^|X0zP%R9;!fkh#t% z_?~z54jA8f{3AJfg0qjRZ6|jU0IhtlJVt!G@wm~4L^j&eU=|W8pkkq zoD~@=9*g;eKVss9QfLz_IggQvd>bzVBzCH~0}5udS^X-;X$erFOL3pw-qH;U-G>j1 zO#I4phQLQAkY6cVaIE>F8MRXNKEqm|M~6!`h4jTr+ffsLXR|ah{1Sb^Y6EBc=t&+9c5tzefIWikxu5>YEd2=@E%QT|J%?G z^|`7MolDj&IcW__b#+Sv301`0%l;Mgc16L;ar6Xu z=Gb{w``H}ziFIq6M8h{JM_+l^+5o^QWX&B$Ab(Yt$ygq9)`!c8=lPH(46|<>8OtR$ zLLJJ)1tst{12z08tsyen!6Tn6d6W9E$-`$2PKDAA;ApLJRix9_#P)|D!zYL=FoJ7u zB+fMy{6-ro@?R-VR9<1tQrAT{D1b0Qy=fqG$Vad(rQiokBv59E%^J_#L`BU#US~u~ zTwDgd-^xQ6<>IJs2WF_v_7TCo0X ztzk5C*~M&m=$Z3QyW{H%+LX+T@DSnxL0zYf1xPP0yyEvtGwl=g7;aP1tAe(XcR+hi?p$+3tby z!C1O6T>;xP_|2o5Q3OWEjYu?UN=3t>Ep`Rz9drlA06XSQdIHJ3J2VhT(mTR*1`Euf zm-J|Zu2+#PMP@akAo&>^%79xV=4jBU{|Wsz*>lAD_{BrM;<#INkSDnkcu_PyuM6XM z2yOp^DfScLfY!BH`|{*cUPWNzmy6#+0Wc8Lqs5bmp{cHmLV!Y!_Z%;D8*;5_LfG}- z_qaVPM2y7^S!zA6rnJng^wjT@nqxyD&I3s6(3RUor;*!feB_n~x#q1(^2`nsK25|B zrYOx@1VKlkqbS@-#B*3C*UfhQ5s>*1o3}}zeMGB#LjXqe-P}pH0$hMS(t3U8ebsW-{-9l^6z#n58i6NJrH`9m^>Qd$z2-{`twKz z4e6~NxZ;+}Kx2D2owV!KYUHFFTfdxBut%Imclk4?3SUs}VQ0oa z#)h|Yi(OB)S{Lni{0nx6k3J19G>dU^MXLBubFqvLEtuWv=DPt6!v}5HfqJz*hEe(Z zgfWi_LH<#P9LZ7%jSxHg>H28OuO{d6Ft=>E2Dazq1oQU$l=$>qZ8fcjG^8B{-DebR zUJxh~%rtP&6leqH9N%l#xSik)9JPoNZVS(j=VY`_+#{CS1D^Q>tukFa_}l^)Y};Xs5wh-@$;)A`NBbHOhki4DF33csdl&!fvp! zIovihd&mk=X&6F$Kri?@$tz`5Fd86>+ExLOdDSEe8@-+&@-TYcPDwQj*NQ6WcYuf! zUjlIYxni#ur~FLokjwp$ISF`JFL>B^f-&p5)4O9t*@k!#$?0&6z`t%b4j6+qBIru- z5`i5_A}OZABCB~^;6~|>P%)*l?R?gUaDLh?4=w%yd+Wi*#&cHdLW#RUjXsi`eIOc> z{Zk&A*|i7{ad?r~Aa^1vA$Eh|)XJSFpv{KXLOZy__0 zZLUzraGU-Ae3<}6st%o5z_#3p1Hih`w}otYN<+ECHoA`pFjT0nSoB3@A-;KL z`ab^@lrD&Y(Fv3#a*N8KqmO_)Qm%=MW8(p%=Fyv}?H)+HgZPx{%5{hE3v!2ofY+4U z{rv96_l9r&LO=c{Z<<2D=1h0-{DWcrz0Ag4-x|Fj?wohm zDQ2di@)(lTYNQs|z#^Uk5J)oQ22Jq&AyCBAn)vnOISH7AJ%p)YK+pFyaQ?MrZSE#h zjy*4A>#6m)=jNy>r4Cdz{6(-4KX|Sz%BPFl`MHz|{FqI?IGjUXWGN5=)T)x|vxl;Z z#eV$kS@qzpCv_JTYUS7VkRj8nq;&;~tHKp!-1D3fT|aYrtdpmQxOI9-F0kg~g{Mc| z9(llD@_T?;Zb#4Be>7_%JAZSx#Y+p`G5rLifS)$D^Dk90UlTkSzw~_IsyTnSot&k| z1m?|N;X<73|v~nPrbUHbd-$Xwnp0{Jgiv51&A_E-DwQpnK(CLeDNT% z<+Khg#e%5wPcx0%2wOFe+#NoE|9uUhlyz%Q=gLVJuw7Wtr% zvB7!d(ZK^$POgs)4nGdvXNoz?(r3e(M z3OUR5uPNtcK&XtQ!(t=Anwc-P(qKAA-lAB5IQFXZJ6TF+$=R|Ir8Eb!J370m06{No z2n-7XwHJ7yO%NB4!0)psR2gWwmOGOgkncl0xv4$cl&rUxHlXn~J(~F@_>i0=+lb6# z-0fos4bgz9iODWLfxy!F=i>jOH2BpMkwO>UInMSV4(0p^Zr<&z*?>le&FM@;cwtvh zE5VOmsq*ry;91vcH>{tx4&{8LE+kp^VoV5ODYVX_Dy0@WtpSkQ9|}npe=L|Z3d!q^ zFU`?F+;s-dFmU^)24GOtOPgv-?5}eL*pRmhem?VJskB_;WjV&xFq?#!8wLoPvI4QJ z*KUNXK(L)542#$^DspBZ0xq-YPQ8O#@-!kshz9&UR%D0Hp7Xr$HtDu zy+VoZFe%bK18gTrsPJ;B*FIOPU%e5jG2-{GzVFobD#)fTXCJb;=y?opIaAMGv2YxyJ5WOP9*s9-H)sp7+&MGGF^s1rDr@ zcv`0=Tb~`3jM_HwPl33=W^BDBe$0nDlLjJHy%Yhy^Ta^nZlTW^^uZ z5pr&k#Jpyo4SR0_g~TiuwP98*siG|xc~TapU%8q)Q=v&X#g~F(t&@rOxGVtBHQqV& z0#gexENM4*(&7R^rYm%|fks!tIGmc*yGk40ha)d>bj0DXjz0B*4)ttQej4R!cq6UTYJ zY#q;Q@ZIK59Xr3PYwgq0b)zR+JZ`HI^w>N=w{_ig;jmmX&;k449i^)7T}Yb{z;nUu zeGrS3WBd+HHom6O5T3uYdZz3{L4;Lfta@hf-cv(O-3GMuxCEOCJmvJv-RO=ZynQ^j z`_-a-H3D1uawV+pC2##<9HSyAhN)>2pz9-#*ISjJ*I<_CjekPlO$)U^T4#glLXMwU zkklu>=;3RKaGNrT6MspMEC3tSeqOoW+_ZK+N}4mx&#k|}KvlO>KFW0BN9t2ct%>d4 zpv_f?MgjyV)Fv9Clw*@sB)zO_jwDF(+Z$Up{!S}o+3@*xBi2vny{vIP;Jnt~P$<74 zl>CzVHeBsvJUq$We$fmIuCH#iD*cw;z$+K=#MROb1XbWO(^D-FcA*9w&{LPv0NEh4 z+^qy1`8)C$8=UIAGUZ!C__nA|^$Mb7*+;d1yyYY_UyENEaVcD{pSSbrjM5)cjHsCX z4@7Gi852DKW?}&&bJes*2C{cUjB)i zKkh0XqdRax9DN4V>-j`tucPI5j4UfeVl#6+EipAT=K$x27ibDgzmV4NYL=11YQIZ{+hX2_V8GXtf@#@1QYg7T z5Tu>rZ|V#4$E9Z@bEoL)T+);7Aqk{u)At56DJvGBrm80gWN9}RHHdDsa3U%#Q;7|h z^O%cBMT|ZWIIryR8E{$z8Xih#Qyrxysk_ZNg=wCY&BF{W!l6bsAxcSk|HkboX==Y6 znlWENK7P_s+%St?BwOK-;`k4?v_8K0{H9`NDW)G!E!6K?lfpLxA5pW=OWq~ZhWLnt z?sbM(-$he~$ZnHE1678^NJ9q;pnoT^!>9fobj^4bTGB)Bdsu6^u52ykysQ!R*P#LO z2L6N5JA#tgz2Hp#L%C?pozBIK)Rao(uCKYCXO}X@d&62m2j-M?V#+fZ7tdObKBlN2 zt$6f1-uLswimIxY+vnTp5R6csQ7I($n#ed!c@*1LZ7I!6?}G{pGA9hhH2)Z(J%QbGzz?!uJ4 z)`eqTcU`B^g;JB@S2@*7#cah5Q|PELRR(9jkeWJm&2q+^1`G{D>c&}cv4BQPNc!VK z#7K?K6Sx%sz#SNR+BQUvwtq};L-S>cg_zpLQO$JQHWn_~1KJ3lbRvEL+T;e)c`r!% zvN>8JaYQNGE!n0|{r#86lU&ng8Gc8PR>r?rn>lm%E zE4`arfCmdKP3CqM04fVgx_FL~yHzY9_H*W}02NS<7mU*w(@t~U@E>X{TL8lL^ysMDVOL?9K7tT11Wqor{BHK`%;3$w;#MVO)?4U5GVR#E;^HK zgurOBB$D00FyXnC9mtcTRL$;#bQyAx<5Q9P_H((-?VIQOB5fg>?U*biDoZLli+Ljx z6}VTT^klO$g zg;f)kdFpY!gor(^ueR!B@D^zW_6Kh#ClW8|k&6+|6!c7xG0@d?a%v402k;~gNjC#T z&>H*b2=iE3TB#gL*{%9d;`6Mqrhn#9Rg#BrcS!yWkzfb5Md%u=weq14_v!AVM4v4R zr#ls;9ozPh_dF~dVw`a>1~{ovV&cwM>M5Vi-ea4*SH`SD)ikYiqX>fp-zP`aFX{Fg zw0nX8IbcWV(<6KXE06nv9(mOE92^2Iy0c7}@^v&VGJTL%40Nhjyg zy*b;w_~UpCuv2F~@eaf1*~N%I%JqW3%7B~$0y~APf(aYg{3>RmNEbmZjMo}9c6K;t za>&F(Nd%b9J27V`md<^}MMlo(+DuiT*YjX-DYBScJ>is_^220D85)D|QC?~2_7QTx zp@`{X$h|`)yoi7?!#kES?2(|9N7DT3KF?dR=G7a|?gE?CSNO{>)nWU76w5&h!8o8G zjkLGl)3mrpD6l`q!KUG4r@+x#!Z1*U8aw|d)Je}s>R6=th)HP`i3ge1o9E_F0JK04 zMhh03YNgDyPUG6l7970hyRqn=?iOa^r&`c+v5vT7spAKz%K6`;1!$?yk#(pVn z8G0Qiy0*Beg%Cj;tg+1=0oc3;`URin53W9p(T_@;4;I2~FT_fP^68K&G7B6DC9FyN zW~*I8uBQR6e^pYf2oB##+Vu?mh0zhH+uLf}nqHq_PHON)&YDEYbY;eUz3~Kx(J>Zy zN-EN(RyFcdGaa70EOkq6G-AMim_I{Pf_FqiTfo3^UD5gQ&7mqIR*+-RSLTMU%h6>h zV9}u<_QWVbu5k;yb+X`#KZpj8Fu?U`6QINH{Ads|N6hrEjPZhu`3^|qblyHvG(Vm2 z&-30i$OpKv?%H|<2fP?c95;FFx$>uS?q#eo?u(u!-X8>&FFSHp-mXJf5Z)bgf};bx z$TaGlmEAIL62yNzeg4sE1o^=nuNtVKMNo)7Amp>}w>#YNloaN_{>I=`9|ajBCtxyy zKq=bR8HdOQey?yQML$@hEi=%nb05U4W(f5QJY7lkM9jy| zPUZbohBHVv)rEKz2w!sURWejOk#eEcjw~YQ$o{<*OJv!=xy}N#i^Az_DzI|u5|twe zja&b8>J8eo2XA0Kbcd9_GwLR z&|(!&%1d?pTYa=-!xFckoLey-3)9jOx^-S&d|a1qGclhe9%9&;MW zo~HzKzsRHtSmCLyL3D)vbl7SKV=g*LdTgXdLUC>R)->+)__1a-&&qWd!Oa+wY?h(@ zG9|V58fkt_Gp~ig&Tiwyne4cJmtyKyEN%>U>fSb?_R6H(4TgsljL!$X61Xts=UtV;SF! zx9BVm&%l4uaTkQboassMP%eLSOub&n$jH$07iW$JS78calDR~m5k^^yGl6r>zI)yq z=*;vSdqgn-!-;j!6VLN=9RMV+`%tX>oMGMi0_wb zj)T0hiq5a^Z<>=8kbpt&O-llPP}H68@67fSqK^;#Oqq&iCkyAi^)V&>%(2jZLA!&g z1pe?w*}fi;ctiRY+>hedNK(fc_9T2fFZzK1L*dH+5|(*3=-;4}*X8 z7J}KsSdWnBf#ydVA_dft#ItyavZH*2h4;m)s>RC>TPflqe%4m%Fdl92QQECvFa(Di zkNK~O54fqWMPgMAnkJ;IvhCgUvl60ba%ID9j(N7>5R!w>CrW+yPubU04doDIKcI~Nf%m#B1j0DyTP5u%|#3Q5YtXiv;FLCY!_3b2}nCYjiL zru(en15mPXv>`RSFvy)CNIsZ);lGOgwgsHyk7k1^aX_s+Mz(CEL~9GOa}rh)T(wjj z^5Ve;7#JA5hT9j=gr8&(s$@>`Kckkor4^lPCa%Z{_NDw!TdaX5y6A|KyNV^{*ODGD8O*)*k|1&$1eaO;7W~*yx7U$fDqtT=<|ft1UPQRN*4h{^udadJwa0$XumhFzcZ z8l%c1)Bm$y)$b{BEg~u0K5_}OD-qrQvI(g2+2lUXi(eXry0XZ$PRFuCc*dSIPYqvy zYXCJ%XWq;T{ph;CMxN(InW)Q4u-j%!3APjAD32h2R+3kgvL{3TJCb_g#WUcsV~*@F zth&oTo*gG&)uv&~;dHf)w`CaNQ&vbo!_Y!}zEZim;_Y0D6Bs%$!Y~bosZq|HS*^o# z5zK2C8(nPL`YH9&QRx!uPS{Mt<`uGD4CKYDb9t4qBtIqITx(i|G}sPh52_9;UsCsF zp7I?+--isa^IoDiX#4!Hp?V`%ON5iM`m;hh7IEX?O00;#aNUS@d`>0q6XrI^?cm8y znq*zUKXvMo3R#Qt56ZAJT#+vFSfeFM#1j}6yCU}6W=1{22$#Jo=5ftoO_nzJe?)2V zswUlaQlX+S>lzhHFggV|HXkH69Df)SON*2)RTz@OVDxXUiz>U3=3a8=7yIGmw=oWk zsFP(h&9RYsN5=Yhd@F`nmvDnfvZCyPb^@q4lNcBD;ex#_TV1@LUj6fo@2no~BDo9e zECR=kHf%>TYk;JSGlCKb?1Ap>LyH#$NE=#z-uZ7NGch{(#^{}i({z6-hydJ;KL62p z55hps#OrmoNVKPviie92}6Qu6~&7%6@K@s|pgcAtw8nz&K7K+@M zA>BgH#gxfgO2WDDQk?Y4k>9r9ERzPQ+<@n2GFbzYNF4_7@&`$i!5zt<(-;-qx)CiA z^ok-3LPV4%X7o1E9o!AF7Gd1M?^y-y2u=RY82-km+;2R&tK)RvK;J@3$RRAGEdRt7qZQ~mw2K=`qwNEJCxrYZ$z$Y)lcfzxe9>yd-5Lm1( z-oM9nnd8E#Txwk}clo7dMthmDe2ys54IDJ2KgPNWssS@=tGt*u< zBAmrH`}@~Ln)#<*3>T6#^*j7K@a3|P)1lce(`y4IGT}s}@?}c@Mf8p}+t|~{FAvtf zjz2F^+QIAyKYUc`WHCl)x0DZ&@7J*IGnQ1=?o%Q(z^)YuIfq|!)bAuOMc@n8+V3l` zS2-u&NE3JfEnNHpdrQj-*g&@dxVBdR3mOe)Qf3|4q%4V#V2$a=;2(!xHPZ)S1hIWB z-kK@=xpr1eVcXS39c!a!E7_4}^?w_shGTmFumUE=%o%;jbxc(vrw)$@AY#WRJHYpu zi=)JHwD3wUZb1L^=L2ZqDl1#Vtc<`larus_p$9!$6~F>0owufVp58^w2#&J2X8f*v zK6lmM6{qVwtoGe-Y4OD{a2FAkG%3cj_+LO%5Y zYzr08y0Ii(y%O>7B;k8%aNG(!ijQB!ziEV=WfGDIGPpdLu?}8QX(q9bwz=-jQgmKS z8AG2LZqLMvQ*>U&CFNY(MqmD>_ulTRO+hAJ?{XzXe)12MVvhn*G4UnGnZfDpnt*#Y z-^IJ?GKYTGTfa5^)DVh%BB>D>_+1|lx+b{P!H=P zJmTTS(M=?1MtQbG9%pLN`);S(Q#T(FPK5IB`H@jGP@MJfuhBB?=!`&{xbf_&b;sa{ zx0-x*`=9dbi@UGu0UB4MvTy80kl=eB9#tdqnjKxZAMBw!Rc*?8N}PF&12#yu3Mf<( z3%Zwhy{q!S9l3=<^)49nDWfaQ!epu@B$&xkTj;#fJd2j%fR)7T5>h$@s$@WBs4#JS z)p=Id3twXN0xx6(7nsm=-7?Bcvm;`P7LwK`xj~$@H381ep$U?n#CL5ckiwLOdVPiX zA^$|j=U&{t0Uo3{iPefc44-9Bv}kG}0B|d?#HpdAh5%iO{MOM5Fj!do0`E0n0%=%y zCSmhdy0*dxR*(RuwVXTa*6Wi*fB*uvH%D4E)Un@gm;&W?BOq@62AoqP0J%(hR)2b|N;TaxlinqCF1a1FITw2aIHt zp`2Q0GIGrmIwB*nv{a~!g-+yVd;OJBg2U@ef*xw5!19w+jU(1ON^7!p-@Gj06X5Gc z++M|>3?Ma@r9MS3_F5!mh&fqD4G1#*e830D75sM)1Ki}kMCxr*K^7kgmG47>gz5&%jc&1EPl zD>dF4(`x1g2cZWZN&m@F=k{S2l{iyIY5gv^s68FZjj$^*o@AC`OkEQ(0j-Hp$dvTo zlj@YJMz#q$uHsC<`9vLnyr#Q*##DGP%le>OhqL?Pf89)-&k(q7mIBI^sb8?O4S84M zX;=>rMy46Dw}Bq;FN(eX|J#_T=ja$Z$Cv1$MU?yA4{K-U+6N^l24<03eihS?2F z6AJfae%!xuH~D_Ntkj$LAXs$9Eak;!3XN@+e2GJ>f8G8T)H~6ddZ) zhX_ux9mp(_*LlA*zJmjo;>o`xFn%QAbwlJJz2H`XB0yHprymc9 z)Q)pFDWbJRC7dsuWtZNjpujT;Aa8S{B%30Vz;2o@92+MU-QJ*f&ra<1(`5x4aAC#G zKxwGnH18fz6v8G4n@#RxS1(|N%SXx4!vj;?y^{HZJm!tVsD&X^oa>kQ*G+U+Lkb$F zDFd@D{xX&f2&RFW6ZL5jUO{?Mi^BG|$M0>>g4_(FxvdOY(Fa~0jPkAXL|-JcM``va zp1Za6DuQ7Ws{}lrNMI6;5$T6#aT{@Yv;gb?qhJ1zf4OV`derb`|%=8 zkf+}gq=NVaeQbQ@RbN%cd3oY0m@-1>v-c7oI&{Yqqtm%_KU_RJ<@H5#rJ*@s(G`ARWFjXr9t9mr7tW-V= zX)G78GNW9T@W4P#pQHN$@3>FP;)j88j^*!`N)(%Q;TY!?y2|9`XDlIUj9*q0FFDS* zMC8W)Yk8B9E?;a<-o+5@vHK$?wUxx2joG5Ne?yMz1c4TJx3k-vLQ#CZVX-CO*w`nB zsI{CdN=zi@_c0H4?`aQL&4Bt>%M}S?b0Ly5>jvQNc zlDv>s4JUVM763mX(F|9hdHc1#yi0ptj$>OioDb+oD^42-d0qc_&mHO19wm2iw2w#u)Mlz1ZQyF9C7$`4ekt2Rd5+1Y6+Ko}mn8r>L2VoMSM z;`>LoC?L&{fv>*1UT{kndFmJ%8H16{YZT}gTijPEHc+K$QKAgcdl(~GaO&}st3wS{ zt!C2kW2H_Fn);CfQB%qTJ<7M>6ZSCab?KYL+a`vRJFor}W!5znX*?5=Vq(@r$}VzQ z_FQ2Sc_=9<*h2#7mHDj)@7P+s;q9m}Rgx&+!|7e7RUG833EYQcQzOdP*uVRw$a`Ea z)!0n#kpH%{uXxIiN}8Md`;UCTqW1?PTpK0yMnH8m$<%4kK@dD>G5t+qE)}>lplog8 zGtejPRhhHw^+f7QiPUY13;%c{*Ra1!R@NgzIf(Jh-bZQ?#~J_WUH>A-@tHglfrBUESdFNH$zF{7H zSO^QQtMZ*^v#A^$T#;(N6Wr`(+#v=WaW3%P6C5A__+BuzVOi0U9l&tJKt;J+YTw?! z^vnBJ=fh3py@Rl(Pg>cx+pqxr4#Sh=5})$2o>leLlnDME$b2+Yt#h%g`dH?eMksT7 z*qY1Z$uk6CbZ9KUzyTPowau*qi1-vkCmmv^6P z!%i1kVGJdrq{=}|O;AIgD{>&Cdi*rK zY$MMyG~sY^Qzej6z!5<7cVk@UbQxfl7>ejDP_4t1@Fhi5)P;4y!9g1ZABI<*w+Ll+vEOmm% zKv(_>v2`2-ae@lH!GKkS&3|DyzBd@PnoX0mb<Ki*Ic+#mNM{((+?@8gw5p{L)PFB4D98)ck&{*zS7 z2lnT?RKQFsf){SOo3Ty>TQr13vv&Ygv3u543J4#S)uBK?RVOEEP+sZdG_bm~-Exo6 z?u}n+3E9QWa zVa<@)URSKV@%$g_l%;%wV=*vdK%3-hWyPZhl4P`>RFs&SEsE#< zv$}R#Q3D{GpgL7{+{Gtjb887iUKX}Nl!eVhAAH1|sIg*w9!!|?KzMkEm*4PAT=K$u zP(AzHlLl%c$y4^^Z}B(+tAx_pQ_LkeXOElDa<$O-%%wK}8JYxwqskOju>@ULsgMgH zdP;dyLzY$tDBasiat;H}(igvFMlEPS>{WiUR?_cu6pwxoRD`4xtmzzo?@_xRRU`76 z9bLx26&dYrTpsemrF<Ii~=0s{b zq2i5?-cqdG%WsuiJ{#^mFP)!c2Y(HgRBqDkhD(vQybg_KQ)@tY<^Mty6f6a^~9tno{B5}}Wf^m~1BRLcJ zJd52bq={mW$dIBDd!Ze%Z$;roum4{`IP#CL;YF+pI_8AwdhO)8?d#BUGCIX;6nm}d zxl0_-h%j5dW!v0q3^(Vq9(MStfBle|r#6)3K}6|H*tCiKCJyOWVc-|=o2v#4$P`E4 z`?WhP9)Ofp`N;gUEH}yfPc24DiuA{e_&o>3w9@=){yKpmd~fwWgA#_tbPP7=htPq@$b1+cs=HPJVLSV*d&?DkLt%9V0u-` zs(71=mbjbKdeBNV`RVndY^K}v^yYyFPW6u|r-%{9>}OPWneM zl~AL)uxw#q+Lh!4fs_+U;S**zS@RDHFb#eObB~$%=M0cc`WtNw zx@L(>6J;7`yM>N2mz{-qccT+dYD+kU->?H}A-(gV<0$|O3Y+|~S;Q6&G_90F6%oTz z(Nd+{7xvd|vRt_%%NgdmA1kV$xBNj+o{0=4XdH93)D%3$%PLm+a%ARq+Xi|(lkpZu z9vt!F1$jGbjsRekdzKQe3q}Liv;1&{^71^Vx6@A(#W9w33b1YA76zKQ$>>=Rc1R;6 zKj@83nU5u$wWa1QuseaC{IWfBvx=43{IP8}*giD?}t)&k_@^VBLi(jx3F2Vo+ z000000XMq8vh@t=dK{T%1B`S+0nU%-_sE4;*D-wy`4JrJh9cUeR?YFc0A5jhIiJwI zhU>R!#1X6EZzswf<%!D>W6G!t&d`h;nX$|_ieRIE{0WHZpj=3lBWRW9VEfhS z(GQlz_=&Tyu2-a2id=(6an$X;m?F-DQ+dFu?#5yyjaQ~Gjk~=lAJ7O4k)m2i}tj*i{P>-{lrZ3w5J`5m9vFtmAe*7y-StMM9Xsru&uN zcG0;MBSPzPiV{y^DT0}_jOQ3{;<`)(2%7;0{&on=7P4Kkw3T0ag__p;Sx!W5w;uwk zW7Ncr6L83{R}aEBz@yA~0ICu6^e3skYtw27rUz)Wq4EdKtN;Ka&Io3F4Onr|vr2au z9ipsBaF=#~$J!k6_(r-lhM}PdG(nbuv;Y7g%75{^;WA1CZDAZ_NUn12E>2=L46gVP z8u+u5;w@a-9J66L*>55z4NJr)uj99Nl<=8sCS2KiOJn0xztnfv%U}SdK#}O#3s=L! zyXKpT3V};<=7G6vnd65`zSV8gQttbv%Q1GOTRl!yu@rK1Ra;?{h1jfm!g1IC;y<0q z8i;JFJNRrLSPxE*+`s?;6ZL4R{i#=8V4N4@>+8)!?6+s_$XT0%#y9`~2v1>=MBgi0 zD}7;yMkbFgCbg0-HbS2Q{0y8dBE#FS+X>d;&9Wn;`L?)n$hW^|; z-XN!Ot(KjN`7DpH0Y&r1Jj!0pe|EHThi1r>qbVhQt_Jin(UoI!g2JwF_MdWu1(?V2 z2uhZ8ExShbf4tTC1xj8sC6B8oNEv6OI$3&Hh`UD{KxigO2!=1h+MVqia1Sf0a2Jzl8~Y6Zqpw*qq_d?_1KO%s zfU52HlRm8{=i7VXyf^z}1D-QZLp zHNM~SUIy;j#!#D2Cg*s;rx#mWkowdCn0wP~nhxAPV4~_T~Ve$tLc#2D8yG+;|exP4xA>FfhYwt-qHRT;83CSpKwHEb`g?3*`!&3r{=l|EAHsRO2dU0(5+#`k9 zhFlmVyiVAF$owT)U%rl+(W(do+lR-fWLFQQ)_3O}$O${5hq|uA5|8dW+4L4ty?B&} z4S)1IDAd-3)C==A@r@39wBfc>pPU}T>v~`&z z(TG8$`Ex*%m@5s&`aOAI#FL$+YD6CPVYkXCCpV|n$2~tcLWt$j(XH7b7BK_ywrCLS zxGThcvUH}Ef#B(3iy*nV6Uq1{2J#M{pK6KJAgulFy^E;}*r%_A@{M~_8J3(# zXLpGEw1V8;Me4%_xpxa0o}!3{9V>@C!9H!gphfDRvL?0;&$(r{DnprfZeQ&RSY-Sb zJqG}>kIx$mtg6Za0Cj}xs!iKP`CIJznvyCVuprxeoLz#jt-o?d3p#tW7LJnaDEqaR zaf}hU8CDP-;bMX}k`k)cS0(ffttXqfI<|V^JM^wPhF=hA!IhzaxVYM{H15D#KG_g6 zwB7`>*DdF3-SzX0buPx<`omSOv-=yALTgo6$vSV6N_*&uG@ZkRBdW4R`UJ`hY^Jk| z#8zT6+;T{li&qVkjoszv3Hy%B{lrHZ9+$iN7+7`9 zee1Xe$X_=U#VEh@*zf9xUT^8=Y=;`zHi`~n%8sN5%@3HMk*6Ld>Ond}hG2*A{ z*ZcO}2z_@x4=63WE2j|f*lZOD8mvgodriT!EpQ#yZZ3Nxetn+_S_$zT)OC^Dii+kP zPFO;pw&|*c#wzlC6mAAquLnhWNAvfHpTVoT01NchN@~O>jhY<4H`7H5iJQ_VtqV#n ze=3YXK$N(@E9w%6tb14O*jJ1kfC+fkkEWcDpnKYPcjLQplII) zo#tU3@HTh`EujWncEx0Qz=o;i*YUE$S2L zxN~IESzvyoeYoBbGtU<6-L_;h+5N(;C8KR`t>TSRah-N)7&A3CLr;1sEB_KGkETSo zc-qkBu=z_deX>v0uyblG+yRp|A9?oN{wH3=0=Gnn)ryp#HJ5j2OfBZ>E@t~YY6?z< z`Iy6Z^?nHb)uscobS?N9r7$G2M1zjHT}jlw28u&*mO#!%gpQ#hRdE`&HmHd7OHu!? znC+>AdXcfEKs1h#zglG#@dKB=QyN2fWr>Ym~_xK%xziDSR z$4!5?+tl2V{srX%!jBjJkd!GP7Ey7d?p*O51CSNj2j~jdSE%k~g~0Vf9xJMvEgmdL zQp`bG!DSeQdO#mU;`hM| z@x+w!S#Qt4OwYYrbfH`^7 z^L!a%&dYmhEKurhMMh{L@OO`aSAkN4hbohVV&&cwSzk$La*u%S08b1Z&OOauHFXI^ z`WJ(bsrOUJjgX!zZSUuk4Q8wJ`2%nG-ZmmuY_kfKX|LZLQR~Y z$(_;O)r7coHi9~^60nTFV$$`d=p_6G+53mG6xCjBQfv8@2s)F<4x_4oW+d zI~6e*=oVJ)jFGyqX(cW)f`c5IXhdGD8561m6zWk(gmAdt2z<+v2O0-8f0|oqBo8@z zH)Ub;yMz2B1zzaSp&{#CoN&Y_h*}F>Pg}u{;jeI&cF6$U6!87*WX?rN*=f=FBN!!> zUBOOYBX280`X#pro+76+{6ZwNBhot$B_7aTYJ%Lhz`|Dgq0ukqE;vQyJC;&IT>Kq9 zowDg(92?ExAKtk0nc(b_$Gu=DR!9d)coPa>P;C#$Fr3f$xGWV7^&fb;vp z+vud;Y-F#~r&(Grv%l6jo5{s@|9CtNQt|8@-ltaL};8=I|D81m}$ zeynOtTg4Bf`NA6^nbBDBY_jsvxBi(lRc6!piM;*>vKv=Xfgl*noecx<>a%}<214iQ zRc0OJ9+V{`3W1scaPAnkRl6;Pb!kgVV71vnX*@-d*3Wtdkj%lVBHg#l2hh0lvT+uZ zG6%u>c7F0M{+eljvW5)rBWwZTDUX}E<<;9I?6|2&pDjfL4|(G0vKu=EET66l zgYUfMh~Ti3$Fec`%n84@)1#oEY};Jt`tN}_J~02BLB`%IPs~<(<|9m>r_KD=6*~L_ z>MiPZm<1SKiIoN1;pt_Vy&q(a}X>5bDbE@>ks;v-iqsR z8B`d=BD*4>GvEcxprG=S;iXz^WmXQP|2~&i^>S0%7ELlg-o>ByAm~gaYQTqcWyDLZeRP_&QmCR*bc^3WNJImFU!^d{#pTqjvF>d zNr2IVT4JrZTS;gV5uY(ssjn=~W)Y_aQn*BqJCye*W2)R zZJ3fNx`lL&6}@Au4dp-{7V+9vS0eD<9be~hiB34Wt`Vw!7S9NpLJoOwrTbn9U?^Yh zv^})y9%4Wp)>&pghTo2Iv8}!X+ybEKa2F>yn{#%qO4}*p_OSdRnSnBYM`_4#3E_g^l!^1bYJ9PK$;)N$VvuGy+@FW}h0XLlWbg6MWe+FAVSi00000 z00EZ@;5(*H;S!TRkc&xY`4?E75nEmMnRCgD1jCrotxc2ouu-2Wh8xXqnoC5MPPE6T zq{4Xs1T9}lmZjb#isG_QP&)hq*yydw@Pb8hU;qFB0000000000001dKc8a38D)K%613N zX-d;uA3A17*y~Mwn)L_Fm%#r|ao)~BT%^@b1Jwmn&?l?5A%ry;>*#ij={x5UjqK*82y(KERFMGlj94kxk|EZu-T)M)Rm%ejs6+&znljw4`lI>NeCGx|U5qlY-xxd=4kyS-6GDZ{kLY3umGttNP_{)n8D3 zr0GvMBA+W0?S`k_8wH1C)HamMxZgYhFExM?A1!}LFM|{?s&4FS?MZicv`?pGtn-=0 zAITh*O|(Iw;xI0Yl+R$s{YdufTH1k3E6j|$WZyAJ!TV_KCL<>d=FT zoC-%8FEd64|Kp2xUc^1`FORAmny0p(!bBYQv!)8H>WG|t&|rmny(R)(HMjWW6CSdT z0hx%3!i-;DG_Wg{O<2VRWkR7-1&KMkq~CFbtyczcN;^H03Jr%KOf>73>|`Xy8qHFl z09)w<^htI0Bl7_fMXgcyQKTJ+KYi;K-?tK-we!)mHQ^6Bo4sdwWv*N!dp2)l{!-NGczq zS>mR{KYK?S)e}M92dgvJ$#C3xt!TOnRE0e>ww#l5TSB;X-3TSMJPCy4!eWu2002RN zp|)*3RLkQ;E2BU7?Y7T(h5z}fd;ho6!w6sds74r~MYV2)B0kxQb0F#@(gw3m+P)Zy sqZhq<)O%`{c(NDLxXk=)k#H`;*-0}rOWU`KR*?2wo&W#<000000Fx#;#sB~S literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/nasuni/configwizard.webp b/static/images/auditor/10.8/addon/nasuni/configwizard.webp new file mode 100644 index 0000000000000000000000000000000000000000..26ae7ff0b462d6848e9fd2442d219f3035f425dc GIT binary patch literal 25792 zcmcG#b983kwk`U_wr#Uw+qP}HV!L8jY_nq9NyWD9RE#h8ckVs+?R_@xdF^5TvD$2H z%r&t_AH9z;TU#p95)y4@0Dz{rh?0g97jgAp{a=uvIUux~5a?h6_8jTb#iWHKBpA?v zfe1e=9j;>q73_P9q$FMSeZTzTyUkRNzIO@p<=rCY=y{iH1~7awJ@ve_-y9GP09W2a zUZo#U=KLi-;YI>T1cxt(P6XGysQ!3-2Hfr>^@{f%1ABcEzes?|t8j0<&xR#8F})j1 z-}5%Uj)8+d!9Z(Zz|+Cj`==yO@UG`Lpf(`ks~MR5>G<_mGa{N1YzkO-s{Q)@m9^>f zF8Ma|-m@Dp`BnRM^A!Kp`CjogczE(2@G-MF^C3vO(~|cUaO4vhaQO)M+F9ONn7Imw z&wcU#{toqYGgfz%TL|R*leZPn4qWvO@dx>w31@8j`u_R8ICB_aAqe&P{>=Fy*eQ7S z#s0DNa`pN1#nH%ctT*Y)AGq^*0*rsj#fr83H~}I(0{aX)KdC-$p1OR z{Ca(6crW_8_<|ZJyTtm+k9N#H4aXgNZaJI#X)oCsr_m8|p)dScoBy_=Ehq%>3eAg_=T<61e`g^^8n2Wl|6_z=S;3b9k*aQ< z0}fXo43kl@1|Hoyo`ilag~d1VBxMsqI8?YnWNJkkyMef0gRt?%BuQmYn#QR(rAiQBZzs6x^asiz=L+Fl|A$ZXpXb@}xVQ#d;^Y6DP5j;N z+y=PMWiz322*5kvr{jY4KTjlu8G(O_@_z<+&CSa8cAcJ5>}l5iE`mF!$w0V%G3?|5kx3t#K& zi|^9bMXlW%%0t|1o^i$SC27sB6x47a(|$Q2D`Zqb;7)}f^ zAgKh?2CcZhb*9{UENx~4O&IFC4T7?(i}bnT*?dI&acq4V1ILgS|y7iB%R{MmWp zUq|LyO#3LKA&5y*!=v)VNjXy~_^+`*$6B+XjB}+gL$BZ1gt~c)3rCc>ac(P<1jaxRrApX)kiNZ~BlGu! z@t?7p_W8-gbvgs6=cosIl`QnkOGCj*V_CmC^tM!Nqu8oeFRP}e(ot6|nNReCNTB8q zyOCE+|1%I3gORWrLj>G$| z)(lK5^FKOk5=W)}iF4qb(`B@Wa3d%v2KcjQK@V0^EDtiu7CC=rK%f^l15I9KDZzNc z4RvOkK3WYo)NWw7f4DqJ(}FM8F>kc2Bt1ZsDq&%g)12jsh?uSX9cvW8$8K(SI`I*z z!G0wbte(Wbrna(>(*K3;I=W$&D>4p1k8)NP>1?xJusaRKPagaT*5i?~P+7tIkfQ0~ zsvjGVB6SMW_bhYwFMYBfA8Lt!5F;LbPcWIkrvP>J+{7ro4bhQB5Zj46xlXC6K&BLn z zTy`RDAtC;BB}Y8=li#$J6DLoPV}tK#gwhXLrB|SiHDCy{U`Z%#`Jp?_-_Ew-3EV z@|URzkp?y1B+@AikrWN}zrgShLi0aygAwDh|KF+VzhSrkUS$4Rp#L`2j3zH@7Bg=! zR}8m+LIpo*r+8#OqeUwZh8x5)jsa(aahv+F;8*VHnk77~&aS3Bq-1azRYv{4O8`o8 zaZ7j@H^M!pPz?!114)g>wvE`dbXQoK1*h)NG!lJf24X<*L8=_P5V2ZqGH=SNO2Shc z8_}^R2b=h%!%vKMzrI%JBakT71vya?hxK@RJ4?&PCpm&M2w%u$I6eYRynxH%jfL3m z*`(#6IgR3TEkEXBOAq$8c$8}`L<6{>q4AHt3rmvDKJAZm!DY{Pzi(qh^er0Z{)Vp0 zp>V}b*4`Xz|IF^LMSJ^MZQ)Xv_<*sBey^@Wr##4H5!5-Q^zE2X=Hi3FgX?)eeD(-e z2}4dCjsGbN2Oi&lOf>`72XqmC@+IRUzZVDU#Rsbq^?iQ5g1TvNy!`#&aGfAir#WMBW!4g5lVxOx26NfVdUT334vcqNhZt`cAJw8z(%Ae}a z2yJYOiXLVIH=SUJX1d~=(XX1yHS93fs54;>G7RT+&&g=4habE^N3Il_8z-mMK&ZpF zBCOh|YY$=dKV&I057nA;{=s;=f&7kE%b)Z=@Hx<`r3g!)AiC{-aJ>@$gIv(LF?}gI zHS#6lEro<0rWRP5lP)fb^eBnQ`-5th6iyX@LC!*({C*RBaDZ0kugs({fDjUyXaSK= z2aBU52`v>WuR@pgrFnV0`EcUkpGU~yzeH<2o+a7eQT}sps3zel1gW3xVEMfuAH))M z7#z1Xp>&v4IVfa9QZrA;I&2PnR?@OqKqG{&+_{^K&NtP?Y%e))yt9RuRF6NgAQt7! zk$Zw#-O!>!{6BHe`nd<&t=!UH2st%n_(MxPFU>@&3U@%foX@$I`Z=t#xam1|1w6}UUwSctx(W8 z&=dS2J%AUvr*v~d05AIO{kl!j2b#p7UAhepiFk)gCT|JbD67QMf01PinR@C#d%U0&gMD8zayOg-?G~>7m-|< zpZuQ@doTV(|JMV70P^+VUwGudZjaHzH*)?LF>McFA}qYQBtY4H3-FM!s@j1ZI6=o4 zn&}dh^Ut9ChZ4l*e%0!>&g>5NZShCN#v8D=?nAKajECsj|BmKg)m;BI>M^mpW1g(3 zXq~au{<~7@?==0Nk@jED^-qP~e_izND!~6&2220|__fBtWC?$@;3}Kswz6mwMGlI0 ztbA9?2;^KYPR3n>Zl3)qVJJ}Q9Otb(zm7dk@EcnZDeMuul4SpR26*Ieanfk<&Uye@ z;qAbl4*-CC1*I?CPW_JdU}nwWh{*?uc6hn^1+A@Bv5(Y)$W-~Fo!33yvUg`*nES!n zQMb30UI5NO0BTJgqz`T^Cw$$-7{fNGB5>oN4?=eC-YprGz&whlsDOfk^A=exdfXU9 zPCop;wjQyIQJv)&o@2rD{-y6*t$8zRn8GeCIsXikWm*4PK45zun6>^arFuL2yxAlH z1~W76724q91=E2eU$7&Z=VxwR!h;g>8S<$%&yjE~(*6yskX_!qX4(XL=oJmqg8+Gi ztgEgC`+dXPH;R{;c6!9IJd?T*POE*o018L~GfKoIB00bH26Xf177Z}+FsLe?s)3V8 zed99w!}}TitcKp1A6SqCIFjwQSpe4#Vi(5B`aPaWzrvE{8o-Sb< ziBuf%mG{8$0AYRE0=jDfW$0aTbU$%L=iKZ5NQ!ec*a@XV5nXdcXMTo5lEY|c*w;(` zP9yM-JQS|6c=gXGCjuej+!d#Z<^taH0VLyI{#N|yi#%ZD28D!B>P<+iOuh^@@AB-T zQ78Eoe!{C%8lvsDI{GHZbM9XD?|*~?PARQOs=Ia!e0tC9Z}mq$VR^xevY2ClHGw}> zeif36y4r~(GPHMw_RQ<9zb&~2p)A%m7B~_ke8kEk3KCI7wea42jo0~jZMZ|i?bW|p z(ilR_H*JynkSo8X4M<~I1ypJ%&2R5`RZ^tSsMuFw@8B$~`F8Gr7wmH@>ElfEHWDI1 z)nYyn2;jZwFjjGB!5~*QPhjye>1i@HI9jC0DEg4k0}c-wSlW;|Wv}nyG`mnm7;pVj z_n=FmzEd%NSB(!E-=az=#-{2qvtvNATE3umqhLYoBNVsFq=K$d1gw`#$WP_@^lq&L ztvgChQ8wz)ABb#PAH0!wo|ATBz9wC4b zQ-L1#THNk?!=oP2hHx{)^FXv30RZSe%h^&ld7(=s29;i#hEN^b8(d;on9?HnzUR8YW7|&%( za?1P2ZK?6?rVJi~D|^$ugN=`M%|K!Q9|Gp>WUB^9RG`_>+RGqQ>|GFsX8W35wwNV> zGj5eUDjq37ZboCZ-Y%^i{nFI#N{W0cuC$*ye=yIqL69B?PzB#5dzMm*76faafIcUY zH}xnZwl^r-36LJStk#uG>kkr{XBoQhd;x;jc)mwuz%o5|Q#4bl_pVXthlH7k!X0N@ zXhV<}oK5tztvV)M)%ve?Od6HQ0i&yW8(kmITaHNY0y}3DGPyct1E?dV#%Zd&%=uFo zP|KjiCLU4Sw|R!KXhev|_E~OQRJzToy3eDVgqvxA82>?6;|6C?`hMKM|0+dWJ)g9s&KlB z%Fm#C`D<2S3gQz(*)?FVLIlkha?Xorxxx30ph>?2cPqrP9p$c6a_0U!b;mTRZP${q z7~8P5X1Ooy=E1I$eZyyjfy#_3j z>u^wNIe{Jk05Go%_Q&0Sj-ZRKEvK7IBO7K@kErFJ!BLe>dU#h@1j$2 z7fz9_V&{2S;Mhji2XXEST}!UQmX)fGA-mKmREV8(I@+#jf(#z=mkVX>Qzc(n>KwL* zTrEw}z&r$twOwf5p6y^urVei5)ef>&rX)H*75G$bxN3x`EE|r)QYQU8G~J|R)u^-2 z{1l9sF?eF=K(x(ed)o>6@H7ZszS4pAI@)OQNYpy`x?f+H(3zd%bpWq<-S{&ep(=rF z{-bz|DTRZjV@fv<7fT2nRs-#jjpEnfNBU&T4he4VWIw&8OD1i+NBzLUbhCEDlR#<@ zPYvm92Lys+go;ibBFs|M@YDCO5IV$c@1WK^Vvp`;E)tM5oE&r`Kv{E~t8kBAd6i6+WLnC=D zkh0=NLS$vQ$*w;-b}!k=);!XtyB~N<=)tNkF?;^BQJU3^zwMMwNQw4kN_b%(EfG(A z66&1iUZdDE>^0SoB=eds!nWIc1KPxVLkVDObHY3`C<5amr`y0?8Y9)h@-D`)WhcVC z6IjifTr7WhKpbOzE??IjVLKQze9g~R2Iq6TOOS!xs+4han{Y8aI9^LYRgGMZ+cDUT z96bmN(<1&j%Pna8wTrZybngij@m(Dha<-1vVX_^$?X0MQ1MBlJJ} z|M`G=a=HAg+dtpx9iuc5*xe`3i;^_Mmm+k;`dM9!uyU3$sJR4%cx~3{t4~*rh&&q5 zDle{;m&b~@i^_|n5wPy&r@4Wj`1aPv#rhck2C?s{r5E}HHy?(=sh9&!;dMTKV$xlY zXV$OzF0INhSN}&uuI1!6{2Qfc(`u_AtxlSmm*R4&FRC$=!%kU~KE2|5QsKhGZ_BeQ z{Po^*5IA0Qql@NK2G{Q|$}LtUFuRkF?6HX(`x6C7auU)sOW+zorMm!ts8NXgAHoEg z=5NY)@vYzR61&?9upq#Sg+PX?WG^A=>9l$qf5gJ5E!iAIctTWVcv2xZ_tl#b2Qe(j z@Ycx|QgkMSdCpgqpeEp}ju(`P&^3mNv)e@SNGS%oEMTx}okkImQ}ywSK0kl+;)fyW zqU1g60{~#sr7Jos?D9@$f7pbzT;tE{Q-GI0%5p2b#!tP6BeX^gmIppd{xW=+jfpj>V( zUW7Kr_MyOwFTg<9Sr0t~EhYnd-~NU#^TdJzetmGjx3qD|hxqIvQIjz_)4LZbP6sq0 z=GTxOcL+s7+9>92h&zbqBe1Ss2r1|J2vNTXJ#vE-ni{6)_SZmWI8$uwXkOmz6^Qr< zRkV48iS6z9d?G$^g0GGPlX3`ms1{cD#Pko}_{zYywVyC2M-#(2z;Px`l8PU;m#n)qiVl}ucBq8%x zm;DGaIJP=aQ~Q01-!fN*)(miUR0$Azh)P{!4ew!1WF5)8lkdKv=6yQoZ1}RGSZC{3 z;e!JEkc%1-in1_&G@tmu;C-{PRpqt<0KhgeGb~_vGnoV3llQ!t%GMI_teRkp)cbC8 zzOCyVa!i+7Ggg^iIP3ZtelVoESv3OYKhp4Rb@T(D)YX2Z;B!aMrP^08t}6&oo$>+Y zp@4H7Pu_)5oX>+N8PjbsKJqrfo+e>;+qNI7dSoNcvr$y6>;RC+n0^*qp<%@m^!ateVT*AT=K(beV4Pcbpqjv4->hu2w>4}66Uw2u!?t32`D5XB3RZ!IG!A0$0L2i+9Z?JTQOwv z*yR;6K#u-a%bnj!*5bDJvp5ZoK?6_;1&ALWZ#G=Rs$xWLq}e$%j1B#L` z7s|c{D@=I9$!vkW48Ex;w%89<_?-MgrTdG}K6z-DfZ0sB)l?M(o9_?H*s?GLdPqm+d<;|AYl8 zj!oPQA`D)XeMAY$)AWYhH;GP$bw+Z<{Cz?IsY8$pou_3+9ISA4O9`>LxayD)ADQ4q zvjnVSKoMp!GQs1`5#$ycND}>D@2!i!3wRDUP8@=7kHF7 z*RO9ON)?4Dc7Q+54D&VcLt9d}l&P~n19G?;kCi1YEh&F zlg_8q!&1_*BX3)q6;)#Zt2jkA^~T+2;2cteQ-63RILaDJz65Wt80>a1umlN4g)~A# zI4h>CIpFdMx}S@w@r=)k9=I&&MOVVU+$40M`sNWm&V|;Hb+5#To(+|~QQjtHABFR7 zZB)be{DKzU3d6t$S5urfj(^UqeMfB6&y_C7i{cCf0OSH!XXdGpO-TA~dXo848!Pg& ziiYu&8^9g+uvzL+Q9)ZJ-_T@EgryNpt(^+HK8kxtQQrmma(+Kf*`&3meOWBc!p+O$ zBK(EATL7Dv^LQz4`W#s@#jg{S_r%XMsjnt`Cl^D^*aDpM?`&r=lzf$JyMC8&k-3uU z1}$NDoj#=<`<(k&S!V3hI5EkQ-A`sxe>!jd$F>9t9IAR&&3OYK=%wf6Hpi?=s~xT` zN*kSMS!25y3{4CJUXN0l#Bw7`xA|K0fnthl#S8odttUfkpcQ@|_;v02`$AM+*Ugr-W(HLw#M^(5qVdjB4}B9Zg5PyGSwspUIf7&M_043VEj=K+5HfvQg>_IH6 zztRcfQ~#K~gX+C;Y+|xF=eg^ETvF__B^Lzkug{YhOEx(7wpmxb&TPP6Vs(VM*A0c2 zOgbMw8wW$M?3(##h@a*!gSkeh2Iyd9{A6q;MSOka3SN3;guby8hiHjyj8Ybc`F8GW z?6bBteK%20F(<{pY(_aKXLFZ1{4RC+i=#5}Q(cTs%1J(F2kNC$EHv*4d1G$S{ejLu zkeDU(Zt&fF2(oUj7?F6M6^^!!MWXC0RZ`v~+|nRs=iy*ur7o zFC4i`7O{Uo8s+{|)r1^5j54r%-LS6@K;8C)k#g-9pl_N+`ih5d-*sds(gT~A*pYP3 zyrSiB`BaImamf~6Ib}!k=h-q>X!nNNe**^Q(7-b9O1A-4S1EYRF?N8`G98mccz^R; z?51*Ltmj;P_CC(u_NYHDR#b^(nc5s#wkpn*xL;`OZl?om&{6s`tlby9c%mti{t5+F z;h0uVG90@p>vD8!Paw41z6Ze{ZBqzjDX4(e9RS)Mbv5L@<)Kg!*8pi5goE4Z9H$>i zFr2m5oFQ!di)>v;NR#5nS+LrkHPJ%2!>0%{2k_5(1Oy)~JaLem^*kTSiiC-0u_{-$v}=JG=*rBAkw*QrIp|pU zlo{1d;g2iwCy;r+r7#o>WuJ90%_tQMRjx%@Vt22vV+Lw1!Ni z-Wxze|K@%2Sh8s!GTx@}vn%43m+sHt9y%W*B7$;cp=1D@Fi1B_(1(C2&UJMie_^vI z6uQk3M8XD~t4q36b}{9?L`Ek<0jd>`X?>!J&l?Qi*w}UAjwzbZF+2=nyT48><7Ybq1zqq zp{;QwJ#5irns3^-idn60jG(o0>z^i9vcHVP#1KG=LOeSHqDN^cYpd{GcyWc@-Dk`{ zF%FIqt+r7t*0bFtW1{}NOqkRb8^I0`rB{YgrD}nXsP6|ti;#KFH6ROulQ=DIAb@XG zt#%`zRx9+VG{S;7DsgFLvm-)^(U|IrvmqjYARe}AUDXQIUcy3M(R1?S(InIBw;NcG zBOrV&u$5@IItL`ZSQ59c?&=PV?EFCj+oNcZ<`P5wjcW+5CfT~3Z{Gx7&g>eE=_I)A z6deCXh}!WZKHc6pxJobb8FeTa+ML zWVF1UDSl1p+^Bx^P_BI^$_*Cmo9|^qL&#i10sM2WufQ)QW?pbXNKcjV$y{JklW2BL z3GZle#QG?g7At-`ofP%udc>Z;>CBTSM#Q74&nLTi4SLx0?T{{XBq`Q-qc)7H6|x<{ zP0C>WWC8T#K16)U^lF8=F#gmO_dBC?(Iebf*^2dyLe6!i$auBWp;QF>A=F}0&rb`~ zn5W@Zf<%h1%F|gE7&L9nhL)T!@5bAHJzS7}{pkJ`lvKlXW)w*Fpi5-@I)FF?4JF@gx2V30KJPJ2rRGiSW3&E50h1G7vSoz?t+Jl0$?D^2YFyR&ic8!E!pw>p7UjnUS4`7gzq zKSC+iGjj5NS=Ch3Tuxj~@#Ao|e|(kjSy;Hx(BDi>fcY@~gGj~(3R}G%m)`j9Vu_I; zsGORTJL(jm7(`?*$%|Npz_-`aj2T)%F&LaS$(Vz7_iHJ2 zLYqm9Mg6CNyq_8loN#F`*ItD!C62*M#H;?w3%78uGKRwFNOS6DK|N?&UkiMh z-F7PaJ=+-?z$Q_|H1A6jwMLU?MyKW>y_fku=AHgo7YGW;WzGmv^AXju+&S{?tZ!mx z@$1Pfez-GWu7_%W4X8v}mqkK}?0A2o{mkFbw|I{B2%4LPPZa^Rmf=I+Px{+|qk~IV zzn5`K?2$#rPBX4t0HXuV9srNuU+Q1TayaI+PKI+9H?4s?16MNOxz8S?vp)77j`n!D z%8kjzFI6)eD}gmJ=;mMEQ-RiWn!&o}heGc}gpkluDSGsA*O1nl&xn#v_;5q8287-lzqlBZw2F3X7cG$E0EI;5T3(90-slW&tSV zUg!71VTJKKcC#xw;s7KKC6juJfKowJ|cB~@hiA!!>RnRK3XBBGfl zOW(`TXh{DRO5ZmqL600>!ao+FgqHYC-L06D7}wK$Q6B2Ug9{zais)zpcU145CX~85 z@(IL57LBC!kKBO32`p6rgWaF(PO4_Q5xeiG=mU8w-n_<}U{3U=vl5=s5w5_e%L23u z75S>s4$k7#pv??|BN650PW{PKJQ^p5!T8dLR7TV6QzRj}Sf+FszazOWvvUR8Z!S`T zeie)?V{5Pd&#zYrFThj?cmZ#c*{?yP%H1V{=0ejw4_QxrkDof~r?!lcN$WjiL~6Xn zt%P8o`bFQhVLjw@j@jrKDW}$PU*|zpqtY4sri!#2-^-Mxs!wagYfa|58+`?c-)2vJ zK)L)p3b@b4sJHlJCHG5a!tlzSjo^ugfp2*| zRZ_vjvOAo*%yR!5WJ7>Z$s4YJeBYDeP>Fi5IDYNt6>hvHagXjwsUR|gq%Ft^52tF8 zBmGM0{W|x#?aUJYt*G3$02-s^%!(5??5e}Up9?ub45;^ zdVy$LLuhjqe@xuQvlH9EW=wl%KMo|BJn9$CjlziT404slY7&ZUJ?6qLR!D*s)8Fj zfmR{7V+9ug$ye3?|y{S(;Yvk&tgTs873*qTDBm<2}lQ_$(gSO$&rW+BlVs6 zHzrr&Vc2DUzIYkVfBVf!Q47M=R3P(&!8~;#i zpUge=%84apUHysGDB1&nXt_|k9CKWb3+!y~(sq!SXIE+rbqjrk+xp1tKY2N=rj(V0 zQSesg6eT<}DAN|Yml-k=V0q@8f3gj!mf3f{JX#Dn0Sf`{A@Ai`QT!O zmo<}4GDY-pC^HhnqdZMAaPA#BkA1c)OMhH+3}u7zXnp*KMZzr20^*fOA{J*LG0eoB z{{YKYa*r01)QA4OVo8u&J4PXM7wqkm^(!ceNz2|xpMVO83`vt6nr2K}mqP&Z)Qezm zJDq1nu-Or4M2s{clg_nj&W!qH-Mc>CvY;Jk?w7zs(v8brh>RAP{l3mvQq8DBL9 zR!;2QUG3Ly(R>?FBeU+8s-N@5dfT09BG?4?O>rOBTCO3%T`XFl%$5pRJzY z{Kk0WxR2T_0FXAue>E=fp>o;yde%(cvhLDJJ@?X>Ju(e{CS()d7HMVaGb>J zS1BL+id9W@LesM+PJBFC14Y_`sdmiwp5<1(i}H(Z5g z`nRLZ0eb@Jnq?-o;E>_5KNXis(5~S9?YYKM7FXEvcg_@g^X#PXo*hInSm^~_I1_aP zmFsl6AkDHfB^b)g+UQv$-VA3WRy8cV08;m_Sv@0(3p?}DgWeYkCbdO zx9I>GNlHJju)hSlmDs6pZn*1yWe?y7yxFr^@7+akT~0aZv+ z%?;&==#NiYVJ;I^WZ+6e=)Vad-v_~a#k2Oh!5i5f7P&w1V{Mbjeg)F=ZeFc3Cs4d7koTQE|`=J zs~j%D>c85wsEM$4b$zSmH&~^pm_(@E`0ED}fU`%9PKlMCZB*!Q z$wE~Bh3P@Y$_{pP)PwQewU)BZ{SHI114=_F$+rcGxK-}EaiXIcBJ1Qy9;oT0-!}O= zG1HGM5pBmr!PB{Ynw^j6%;RYTfkwG$`(>UvQ|PJP)F8FB4;4BC5uqKXhgpWAB`Ag3 z`lF0wQq^V=tuFn6{MW3BYYTjBI`yZ(DHxDD-aZky3&)xujeaacfj2l_fUmi)lUQ&Z zO7dZSB6P9fho?*1PkNL3U_y{M~cKcF`$z(Vc;-L_mq~$2nlg{H$ zF^;=%SKSl$D`GT0U~9>gm#wJz!8&`KuS@IqlFBjANpi7$=R6L3%ERc%DKEE=?oa5T zav3`d%>+#CM?|m5Bs>~JhM#f=N!GB-6Ql|NPmEb+M;!DM%W-i zM+rvFa_~94L$nzwLk`058VOxm?g?SL0mB22woV2)M(dINQ*2uGReXPx0M6$aVbk3L z=Og*O;Ic}1VA-_7u0|lDHYz&YG&rLH$jwT+RFWTjf1Z3Wd?&857$CF@wUf}(QL;aP z9=#CS*ec4aYp)%v;8kbW824F5-@-WlqY=rfmd_tbFS#viK5@UBJSP#4M~d6Zs7qaM z()RL5w!s**!Fbyn;^Pfxt^-qSarB^Si5eWpOxzxZs`N8kpgAPSj%*@+VhlZELvJO^ zrZ=%C7WY%5C2q~Yxe+@>4;j?3t5Y3WWfwBDSgR2B(oN}xDNRWs z?XYXdXd1FFocZ|OjU8j3-bu%N`5HBqD)LSug;6H>5dD!CeGoVf@{06Ux*yfheo?d_ zjhK}ywZDY7T|vv)^-Nu6y^In5n>D|`So?u8dGg3MYZli7 zo#K1#I?-;pXV`V4ydaYTIpQyMju0g_#n*DGKqUQDpy08m#@#$Fk4b zA_uK--B?Rm88+GLkUhEwg&c|`x_JOtl~EVBfI%wKwD=ODImU3pol zPsHr0JkUL&+_=!AI&(r`pyJc!gi+}*yB?+wUU63s(itLwwtuI)s=wH(Ub2gKf}q5u z+g|a`FDJ8LlbS_L2A*Y+DwFlKQwX$bes?P13iss3ize%XXcE{~fsONA%G9GA(kQ(_ z<=#)=T36l@Imv78yu0awg^RrU4M=M?>?SdHqbuW~2S(MT^5Mib_6YU|IGmh` zVGpx^1`XKf5)dfysXvt)WF?a`LKhL1yx^TTGMuNJIZ1aWzVB3Ds0^@!Y&Ty$QR-iSHoERa<-t(63QgYf&|8F!Hg z0L}c(I*cjT(i+EhOPs-7j5r29k6jNDuKlT=`C)!7MKkr|?cy2od7v{#>s#`l7N9FD zq&^i}QB2M2AwnHj*3tzhY!L4<^E{~Kf;fi^-U~@?Q^)45xCaK9TrbW1(&x*L<1hMz zdFS^~0f1hM@Ce%AFc;QlWq`sBjmonPVM)V)_t$B=U-XxYWr1Omd|x!9G5(ZM4@RW+ zaXvg0Lam}q%4rrhB_9H9Cf}R(+17rb>~*uIj^MCUg45Z${2B)}&|xaO@LnY&DitdC zmboNa-@#+wonX)=7g4a}JL#?x*L1zoiZO}6jLjh0Y<>Q36H@W#wU3bk*|un92af#t z>aF=Lt<`{X*iW@JisqDBU1Fo>h@QY6q;ls^RNi%JVztP#eO9)8_R{m(oE5Ax4ViS4 zJpg6>xODEXCL8z$bv;Yyl!3Y{-uOwFZ0r+hKwm$iFwtb6=7$JM z1jpJ-jw{=PGysRuKwzHarEl9$+9Z!Uug0dX&h}} z;-UKnFU>|yK5zgUf6>$xwpM4ik;iE+|R+uRDwWuFq@8@AeX0!;nfhJKoeher5w7V~f!5 zDvTmncxoxbSWwCYsHzY}4KSCq$W#pA&A$@Ox%O+n&JHhKR4y4tpTp9aWZMx`6I7(Y zo|Q>lRZF)RGqgfwaYT>QJ3 z6AmSqHDw(|OcB99`Wg*B3?OZ!RRq79mE5hkj`GS{s?biI0&MNK|Qg~~Xg^K7p6WW*~09HSDV*C5bY^Kd{8WeZw zw4!oJ>pOOg*$0T)q?+9udaI^I2g|!cKh)$IX*j2fKw<52u&iB>9EjO$!Ew}mSIXl+ zL+)U=8yX8~vaHg8jdq-v>-w& zMjwV2iXSg!D0zWyA`uwwlYVg6t)`Rkt7wc~U2HFwC(92p7sDD&__ed24yccuAiW1F z&+NxyRWXL@1R5@M^e<;bjylNW+TdOhYRWY0T&O;c`D2| z1;0_@*y=Nep{biEKi0wLCBM@?_0B3m^bW6okW{JU{XkSVo+>SnbP78+6|<`8OZ;+1 z;j}5Y?%OldVh4)7-djr1s(*o!kXwVYuACc-l6gosSfBBjbt(+s*3cS;u95Je1;d_o zRN$3mZD-!ZsBC`O;2yx^E<&-U#*6;yMbd}#Yrcs@JR|)MZ0K8EBHn*OuinQbv&x+Y zy$N22uG!5UD~v@_kP8pfkmUl>o}z4x?k}2kq$Mnop{Bi6AGCo43FKXg?S)ocnoDN? zvfJ`m`KFIcWjA!J$Cd6M6u7E(F-H^Z;b@vOQd9ErU`V8vNp^4@WS}msUAYB%yCA1N z-p?AWC#b#PJNY|V<&;Il&a2=n7WY;v=vQP!old&UZ9CDa<|<04dusinEGW7U=O_x8 zDU5YSn0ngRNg4AR7gsl(qSi=lKNe44ZUtg#q=7a5z%vWT-l(~n`nGwpAaVLA@csc!-~W+bnC#^+)8rLg=yW-BkC7t%3~a* z9}-sm&IJhJ?T5zQZ#;&3*o$r(q-dH@f2IkkpBHz`gO+~~vRG2BRycteGnXjD8Vowb zuG>p%Tj?i6xXj*7#X;L)2YGXtWIFG&?&GHjsAHOBko+>d@KFkM-E0uCYWtZ^E5}=^ zbdm}z0H^#dPwzUP%m5~8*cp0mKbsUJwkpU zT{}fg`&1~3l)uzJZeVZW*&X0A0(GyY)Mwf*&)KutE7DV^g->gveqI82X0fj9hVlkH z;5kt#GVySNsJ6Q->RwdFjguC~JBY-w$1d(fr51%7wmlPRc0rn7S)q=8do7W|n=54$ zj;6=p?-bXGk4Q?k#~CbRHPx$+>K#;u*f^| zjqJzDGlrkskG$DZ?f%*wizpvH(jwodJNcz&<;x2u&a1I={iU-|kiE^4GYx2?;C`jn zKM@WMYFe^B*}45y=o+nZKoe zVnhjqg~MILQTJG6T@4$}PB39vb?HJg^Krk}cBe{@0>47WQyf!{p|-z6>hT;o_2>vA zj(AewC4V&_r-ig6+XI&jJJ4!r{a~ZJGc|NP95>(On_(WkMH@%l^Ik(R4u|4IYR35z z5eaVpn#e|F8OOj09JAS}#UyPU3Mh(X<{~{ay|wg78Gk1V5{+zO-_-Mg6DdR2wz&AD zuo+Nd^VQ5(-bSmz+k*C{vqFT65O-UmkYOGg&1y*t{wQ5T?mN#8=A^;ZHb7$TN-^h^{5 zzfC<*<&Nlh#1K&QE~e?vXr+9V3Yq#;kp#}t7Z{OJ)eA$oyScWcmH3%(SweMjzB;XW zllJgNN$_%P{Yi*pp`t{%OrbT-_Nl~TGtDb7x*B|IEm%|_gvvS)qyYFJagAE@=n+LS zaU&ialNg$JZq1@g`3gDJ+N6EN(dfIrPqG>OX65x%UuP)#>u0|fJ+TuTSR4PtL}O=M zVltkqC8|Y4{%3_q_O{Nh&G~6AGMwHZ8I*>fq~T7CLV=4ZzIHg6AtJHqCGeBOe<K*mc;1^e61osA{bMp^P11N z$UI8t?#uyu3INd;e!W(@NAzN6XT|Vr&bgLv(ko&KRAD|vg%9wwDm1A@vt$QgA_k4D zDu>qM<>nv`$7xY$y8d$4YTT0O(W~cV^vtEd_L}5(eV`7xSW%!ne@Pv87Rxq*0}4W3 zc(g5e*eu@N*6nWj^Zc@WAC9||BOYf#YlYbD2@~%_iQ@Nw5z$^*6thf=$j(npvpi~ZQjFC#a0NFhunRI&nXHR+uXIrOo%z1^= zi|{`00QsAi6b{!aD=+6{qmqZvD^MIxLOtTPG=O{I-__wjrlMTV6Wx5-#lcT@aajU| zk>GjN6BO^?tN+XupE!0;t95i#4?}+EC#K3HOinhH>1vqr5y$!Kp*|NM^~()uXBqyw zq>q3gSqH3w!b9&nk=XqSK!_xhMA5q~TM+dV$_|R$+rtsq2_706^gik%ForShqjjwNlxY18Ts}@~;lQoU z2yS;{tSS7ql1CtCSu~Sx-KQ)*U!v0=%Mg6)#$DV=XDy*@Gj=ml%)P@ySZ%b+OV2~L zpA5Lay>BXTg68$9QFZ{e7)7Jc**Lru{-WLdfH-qeJ5P{^!ud`O?34gwv%89&j%iSK z;eMJd*Sv{w9KJ!Gi-4HkS(&fLG96Nx=TnIsZ*P+jr+iYN)q~t~X}SNTn3f*=2nKpC z$Al!Bygz+E%FiW%f98-eD}rNbkfUl|Hi^O$x`od>ptPUPi5%_g^rrNEP;LdgGf|Z5 zV{8>$R64gJ>iuoS#h&&)I7{&?vbb%ijn<`q1vQZSaDWr-#B(Zfq5*Q(%>csWs(YSk zou=5>?D=Mp`@2Ee27k4gaD~$VO<2T4Vc|Le*Le56aOQ5UDX+=A`RvPgsL3kTXY=}O z*e&;Lcy`%dh~8ZJ=p#bZ#zaKtN(?U4VT+OGsmpjVbnLzGxI+7@+au!2(gvxt#ePc2 znG}<;cz6m)aWtmEdGwG7#_AYBkWVf} z>B}(@m^IWxrQZzu2w%)8IT79qq9qwrTj#*v0$1-L>gUw&eub1DMSvwoJC@AP0fK+^ zTJWpyDh}8I+$a@K)A1H^D>jB)yWErSbAsg>sG9nvAlFFzK(-3Y!bELeD=pxav%= z!dctQd!-FJrJn5d?y&hms~mI19pxMV1jAK;WIr69n=+LGb6J5ZZ*)XCpatX?7zY?866Lh^iy^=*sFP*o| z0NLIQFWi<7yD$UfO#RLA_bxU$J(-_#M*(lV*f_Vd_CI##G+uYgGenWen8W$Ru4r!{ zp#Vw#D39%cMgGNuLO^3sgd(e;ytjMzDs(1_+pbBlf&m8@fGw2m-iqh^kTa1ID;hEk z0Pn4}0@+!Uz`w7n;SeRgf8(UKP%!XsKL8rpPg}0ph#OChj2819@qQ8ebG1l#Boz${ zZWLsSANnFeR=7iW~=WXK)`hsidstC&78*UqE^H|j00ZyPn|Qq8B$wW!n*(pRae9x;G+Kq>v+n=F~N&PExF9m2JyH1PrukG`QK>IrLUG&On7JExk= z67jMvYZiC7zX7+@?V&M97p!kU9ah#BQ+71j`Q_fXL=2vzc&OD30FQ_gY{ERVT?Z*D zuiTrPAFJKy5ohq0IJ`)Ilghf*eyA3+=6yHRLN`lFA!;b8Qr2uEW;JFktD$*st3eF9 zpBj4nr+p`iBG=!S)_9z%^d~bFvw;tN9|_w4N^49P!0|{ zlH`NEr3S@S%}_~MEe2qNsM^cQG172hCJ7@84|OTogB(@U%*0!0$wm9R?S6}gSKSZFT3@3WB=cMuj6nf6EL zBz7QiPaMNxpjE7caI!dG5TTymL`(WY{PU##*{E%ttSrj4tfup0@ z8n}3hqC|6CFN5!Tkh+gyx&xZYAk;>8DM#_IJ=Mq}3T0zP$jd#frsj}^MQXvz@vaU_ zkY+f0*V|_88h~8R))V-N3+VN(P|yayIff2Z7Mqb4UvLyGB?IB+r>oGB)c~fN^xS*0 z8P~|0%o=jFCi?=G!YuFkf3o!&AA-G|f6~kxl;;HF^48Bbkh?cnft9nvnURASmt!ld zd`TBlsafoF+rPR>HL`Q;8@T6vVzBJiciF_815zZ2(G=6x=SfTsHo}0fxWhh)%l26m z0gfaI^CUs4DFC*Rd_&uZBU%`HY)CFSvERy5sfIpnpfIgiz-B1&+`fVDU@K_MAnKRs zwL!;Pc_gE$6+lEgLEn`0_HkA+c2KHr?gRy?A4{HaMEKpcrvrc6p3T8D!0{n3EYnA- z?h~sSaau`X7wY#$a^T>yqXE={kR2AAwl%{X#O(OGu}bCZGw{8mjNb{W&HS3lVa|$a z1lKM|U>zmH^}3Z6UYts8z$jF*vIpk)VrQbBHW^on=Jtfl!06qymCwMl6CLJ%*h+(T zOEZRuKp?=oQkP6p4a0L?#c+Bh1v+Man=SPd)&>mFq2f#n77imAC>k8z=rAgAckJMN zUL_e4ZSkWNbm2KhVB13@H&oc=ZBOvZQT9D455+{SkoY9JiS)>>g&t1b?k;+Aap2gb zb@6-xoLzv!ka##-UU*Hq#01fhy`0b>y90d_5$sgwoX-qiK`p}Qkm0IQmRo_=mOaGm zoMLMlO;H<+8_s63TCbF-^x`w-@a330^mI(cct2|q(hF@koK*ZfsFf*FiT-I^KUsxR z_>2=iVQeGrb8Mu1u|lw$zynhQ{20otWZPPl#$yXbbMTwbY@jDu4}&#ecAxSiGMyL* zx2E{NM#k*(R+j#F17gC5Q;qVMU^&I#f)N<_#fqR*0&kRCQ0j^53X_UO_yX@otVfI9 zVh(k3W0KjaKsz=z(isC3s|-hPhGykAjd6;#q&%)02i3&zYU1g9YG2oxsw6{LI2xf% z@>z*%yZEIS_(~J>2fq$`M!(c*)?^;w{#FEC3_VFV11c-es`R$<{1`o=c zr6J43*e4sYL_LfEIO(jRP%2TEh*Wf5aglQegaSG=#4Ji3RSVLKe<5D)kI8^uAl&=i zxAPB`G4>pu)VMlQafCL1l(1G0D`NTkMEJqxhasZ%EGpSNLu z_4}rNM@U~Mx;uvxVKw-3_~zjetc9Yhgx=Y}dBcnGD_xiwaW%U9xvcI~H<8hX2)boM ze4DA&Oh*n31_n~)98Yo;eG~#t;HD>2HG+1hlv{hTkkJTr21%LpIgob+mG<#{du`>Z zglUE^dpqRj1F_V86S6vfGB5Z9rxQYt>>ao-Mg=R{mY2}T_hkB27df;~)2$Y8xlsRs zRO89c4&Y9W*>ON|j+z3h3pxN;Tqz_sKzg^_!kCt~pi7NWW7C}KOU5hSLZF~*%XVaK z6zko-hWftcdJ;Y%yw_Y_uH9zP`GFop;sgCWIE`myWz-XftM^7$^ z%0weeb+9>8FpN(Na=D(vp7ER|&Ds#CJDeRJj{MSP&f+71YRcoY0Op~8t9JW!gD6V6SsyEh6T1kOCMn>B%B8U&ABj8InX zVK>PG`)?#+l{+hgCH$hEEzOM5OgZ$?|F|T(VL-KUWeU0>h=W-DbLz+;T4xjJBObzd zgwZg?Mhxa}n8e-XEz~V#Lo-arMXu!8LhzQyR3LidvE-eyzB^v1aDv-&+j{wxe(xxL z5pOfko+@zwpmE5*&w#U%C{Q2rO;OC{UqJ~*mGb6Cw^AF69aDLV_~2qk8;?pz3t?Cz8kv5UEb4}dW ziT7&g%253y3(336(j^h(=d0`9+6}6Svw2@j$Y8L(4g0~=iha4~zfwo#*16qI%S<75 z)BL6si~-na6nv+c(7BoA-s)D3kJh%0Cjl;DqXCr*KE!$+iS;`SitN{<~73^+@-gl04k0Br5mpW`U^i=2^V9`MIma^3QB+(R`4U7hVu=#o5FG)y(xV zzijOuG&!GOK*Ia@Sfw&(I*emHxnnG^$e=Uv&DlF|4-)6(lI+V})Vfm}JaW>rMJ5UH zV$m~AmPfQsVD$Opf}$E)H@(LGWKtpT9J?0pNBF0;`ZZs!_jBIM%leWtk*CQx;`_d^?3t3 z8E(p&wdfCoe$R>zO@A0441Xlzd%+e2C`yxAdiY2pg?graBpkASNBG@gq-32yBcJ69FOZhm+7 z+r`Qkjo<%*n97y-Uw=?hy81Cy-6o~3Cr6d{7SHgSZ+L#$&8BEx-J#+X_q}zA`HlU; zxnGrbZ?fN-Y}o;N=a}sVt>4rlBHzhl3*#FBx44LW%*zv&+eg^OZc7GJ4HfHwaH?;c zZpMcjCRUvFwI-YtD-El?4@;ypwUP@SK(I1upK9B=3f$XyWM1SuHrpQ5jOfx_9ISD4 z_}YQ9fk=FLTBE#;9hG9~1nLEg$YPEcA~-4n1yH!s?4UWKHOiWL%@BcpA0R;7IA4B6 zpk7(oZzMYz0Pizg!bm8Fj?8(klZShUO5u8PNYw*3*nM2V4`(F);m@=IYzx}=2p1Y$ zSRFwBf~~#crvHQnO>mmiE#r<>24Zk(LQ0m&p-KJoyG%_;i_$+-OwmU76bQ?1xiSs2 zOd^qsH(f9z2_1=?#Ys2@Qk4Ma&tGl1rU%=^jxrCVeehgPh6+GN)SE}X z*{GH{0aUaH?{v`{Z`3IY0RPFi9+$TbC@Ff_ zIFi$1+C-NZOHRzDqOf-NT1?sdM_Na_K<-o3n3=!nk)&V9Kxfuz@_4e3kT>WaR~G4Q z>cA7xrZo4qP-(H4o&?>ufE`xE1Y8fYYyXJz2;r9QRf;p0w3{3AC-G_abO(xaeePMm z5ajX2l0$MkIdw=HN;?obkkjvIBcF%!~v8AaKZ4c~^1| z3MXP|%!~L}^7dm&FAMdeY#sb>GNd+CRj$_Flr#A2##&mH6>88g5Y+g~REt4;OpsZ- zl?B*y7b?MBhHw-^mSOYo2HRjHwfk|*0h18>Oq+j)D1Y#1b$IV}dUyqJKeH>nLwfBg z)7=JgtqpP2_Vm$WJ#~Sh@)fD$r4xi=5>_<9ecd2OZ4XvFseB|QnD3mgYwUh~Cmv(& zjV373q8xs>=mU{wO#})_q}p@qUVHKm(u^f9l2sL$3wW6pF1^1TAyd4b$V13FI1y;` zAk;$7Jc$Gu(%C%z)!uaOUXjQCUrU7Hg5bw0Kgqy&f>reKNw)50b1{&Il(vF8Y**zs zd_xhqfVwb!AeE^kWk%#D6^h%~j5I^LvAs+n#Ydx1xkRSAqk7@GUse*QKRDMWRdak( zX5O_{LkUvylLkLC&g_Tk`EhAhX^j4ycZlj$Y&Cxm33&`@R&U)!9QGHJ%Hf2^ibE0| zb8%&`7ZLVP8TiJ;XNHi)A9Cs79dDOK>1Krg*<^aK)qdkBWaoxxR#r& zL<69@+0dqHaJvTmyG?rtaj(F6>!^k3&YR6tex;PUaTPV@He^%L;7oTcB56l>rP{D- ztB1mgF4STmhO$hvaTlPV4!3{jnZDJr9NW)xe>Z8a$}1WHU{{{o4mv_1Fd*HO;e<1Y z$@3ZH3C*gBn4dE{p@l_*Xt}fvh!hIG@k^_x{XX+WM7^*ocg}!d!m`Bfc_%;)n>J0h zcp)j@@QRx=Tjz#S1Lp>=Ss(@$u;N=IIA9hYD#oXonX*ofzYYf zuG(uq;2JB78o*e0+QJq=R&ci#`%kM-N5%=*!M1F#i?mDYXj^Cc^0*~j!iVi3>NcJh z%U*p^C^iQXAm*(gGj>u56K|51ezN+Ndqr)$EUpN*ks{A4_ifK zgrMkIoG*rxNe50uVv`2E1yd^rqB`_XX>y!`weg?7m0T_bg@J;0FGF;>gV~xHWNtr> zRxM^%A4^c*puF#Bk|YW_-AWR;@FDTx7*A12N1VncCSEqlJQ@0GG9e&lpCgsKYDe`Z zRis?y=s7);;o?A2++1{YNs-QGJGRD08W3nkL{nXahQoA1H7|uM@{V3j8ax6Ld;Swo8hi%yik*+QxuAvS>Y? zIVWJw(TS;id79-f&05)ZNPy$k5x*+_k7=?^B~1B_*}rUe4)POF3!7ocR2a52tGTp% zlS85VHEy0cW?R&0=#dPf8_s#C&dv(Lj#+j1!9g^PO_|H%f0{}hob`|RgcaTOLU*ts z6#}i5u-^rO!YTX(s|U%o!mh1;gvcA!2x}1?dc)4&?GCAnV9|s zX}@}ldZ11oXTrd2Tw~8q(b2;|{Z#k0K;KDcJ-oQP2`+Pov)w9Q`+6~B!BlIPl@mQR zPmNoX)H%e*Iv(sn(|syW((jP;$IT%^00h@_o z{fx76kmx(NLRE*S)9MOYP6|@E1s!U0nEAso`pyF?_)EwjUXXG>lREbLsee$M{F!YE zl4P>67VbfQF5jC1WR6*`W-IZ&(AJS#cNWo?!mDvgxhZ+Zy zDc#k2LFJbAG9aGg`f@Z|Ur`0i%DIZLTg)PJ2cxp4NCtZr!YRw_*yT};pS=fY^!J@x z44zb+&o(`%rPdjfCZVmvzsoJpHsk>^j|fE4y;AAr6`tS#00000000000000000000 z0000000000u=e=0JBfd#PmcJLq`|0KE4}-?VU%QG=xC7fa z5o2=%b$p2!Q_a6G!TK_6vgY5H;QbjkS#xj8@P3Qz2A3}=B?CozAenP6YgoA1Ng#z( z26uRg`)B|F4rFR=cgcyDD(aCxEG?W7L^N`0^BK%a6QkeWPJH^%wzBkGWXcdb-_2KJ z!I9a2uxJU99%P)f^=@=p2pL^ON7ifUoDK}5fDk;=jVj{Pevkm2-YS>5=u0Ok`9e08 z@W7`)hD)p0c0Rb(O4iJ+GMnPFBjKA?4p@+lk!ALDY{4crAvJ4{H~+bNCXc4NMP1;n zkJ86a-njcz>_1K+8{)PRkf z@=Jw`PA|c6gph&h8Qf5~NGiXHVlMd`SAw zmFQ%jovruzJY)5`Ov*25`|dv`2&n{xAp)NRVW&}PNXY(*9MT7iPWEZ%MZM$(oBzT? p_$HSkLW}*o`RR2Q8UO$Q0000000000000000000000000002DWbH4xp literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/nutanixahv/diagram_thumb_0_0.webp b/static/images/auditor/10.8/addon/nutanixahv/diagram_thumb_0_0.webp new file mode 100644 index 0000000000000000000000000000000000000000..1bef9f78ae29aa01c93cde71cc54a22c0f409e1a GIT binary patch literal 30556 zcmZ^Kb9iOnwq*pj8lNb-w`m0L%8;KM9z zKUDQT-PmQ^=x{#mnY0xaj=ApBUcWD9EECYbG7Sv(0Ll(yrt|}Sk3DJt_+OBZ^E(oc zkV`oQc9#Nvg2leEpM%fofX4T%tNVAsQpktx+ik$-Z*RHoZjTTE51{V+8zAF3V)y=i z`$Ium0RVXH>=6XKn?1}wY`=FuPp>0-8(@D7e^NfxYzSU;m3(pD*KBmReJ%OA0@kl% zzM7w}@w3Z5BtEw9^$P&l?-6ebXWOkgn*w%Un_mSVh?mD{08~Kv*XMi9*RKQEJHf;5 z3*S25fX}3tgs16uy?UPO7rT$G+^&|7?N82Ug$Lgc!G8B!fbWUI6615XC7~hVm|%%- z=f@2I_4fG*acTN4+jiR<0=;w*8Ut5Qi zdRl;bVmXVaSSIZ1_cZ~OQc&T7{Es&vb) z>PE{o<@}HDPxjqn-};g;_X+Ex-bfhGO1rT>Gwo(hNIXaMVn5kuN#6{~MSPVC>_Q&s z!#+m+>@;jYi zz*RE{N!kXGG?`zOzeq~tvKq)U6U#;O2Ip}j0;Kwe2Jw(FGkF+S~ zGCg3St&pOkJ@toqcEfFia|)x)b4`l&+*~A;It~~LOvU}T1GC<6w#;S|0f1&PeW61} zrhE?Yy5SAwHn^mqNLT_+hDwvy0{U(cJ@;lun5AE$IY|CZXH5Exbe}DMH&DdAvt!qCK!jrbjmCk@&knvv9IOhURqL91cG{z@FfubN2u0)lOuPq#QVy(eUj`t&eJ|l_ClBp{K00z*u(ZKM8GN6>g$5T4Yee7JtY8tl=*= z>w(5{0ZP+6AlUx4#ZgD5X!Yf!0ioXn5LTzhHA5A zg)1Ul0+OQWK~5x|$42u{JX(tvtGf2=s-8kb$jYp}El;_V?CI1buWS^F^=O712vxMl z!xDxcIVy2SoHT1)E*tt$zutXHz(Y;FB(5eZ!bIFgS9oSM>eRa34Tm<>|3{R$MOZN} zCyW!2tW7xg4$W<%?dj=~WYId-G#8sz~H?Zb7J#wAu(pn4S&Fwu{YZzeWB$oeKT@L8HUWRV?`yoh7x zORx2~(IX`$jGbkc5nNCAIx8)U|+x~nO%lwF! zV$uV5;o*lTfN+-%;e&=?w2}J*YsXzQ?oYKr=^N!uj`(v4Dc;{*AN53D;dU(fhVPo! zy}>;v;C_FCTohix4}7_B=ljJT}0o`(UF+^F&U(uYNB^B1v%tF_3ws&m2vV}64 zbp5x$g=5i|7d*!OEc$j|Sc{lXvX=I*-8!cQX!VeM7|fT533}QLhF|HwtEsvnq|875 zP)3Nj4MZ?RO1UGUYT!n;@!2LM3jRrr5C(>uYbcMttR1&WXf;#E8ytjR@ zqPlxjE#HNvyEv$OoIf8;ag&BmqAB~YA4-gx{r*JcjBC>(4}CBXchoQD@bbQ3bmGbk z7(LYE??Tgkp*f$v4jR;m)b0xRQZ;CKBN4$=V6yvQ8B-ma@e^{Vot(uxt{PvZPk#J& zvWZK`+2lP zJ)1(WP&?yudv*{8jwnr0o25CDxQI85FMI#qPU2=g(c6e?S0Evk!bj`4$cG_taD+U$ zW-om%M`(d@mNKcD#S}#U8BssJcR!eGjQBZi>D~d0{b_zN=Arj3lQ20gpl$d98CWt! zYP@377zzzGdohHAWo(zQ_lP`ns7|cl!wp}6y9s1(1iJMNMJ=_WV+mF;S18MWIh42& zLZe6%`DDd~GUG!#k?N_s1uKROi*-rjdV~=7bfkS;=Vl5+m=ae$MpEey7VesK5EwEn z%(R);ZvO5jhpShy9oCEpMszw~ofhM-CbmWW!I`YHZQ?pK>#+C7eSL`_6hAY1 z_(>*FM=ug*?f-0j0%;4X_M+fb^B=%8O!I||79)wRhK(>Kg{!cvdtByjJTSc&z)T-@ z6$sD>pI4g*3};gu@vNBP#SIH|#WkUw`yiiz%mUc(51XD#BAqf{`xcv+CjGT9e zKBcGeZ43VHCr?0z+t? z|5_mSVxma*cTih7bO$>T(hj!+1$@RaxFE>RkEX7u;7Rr1J&X)z+}aw1Sl@3qdskJE zQMoE+vb#PKtvnbFRK>vAGnsm|G}NY5!AH$(mS?!GR!slu5bpekjGeRA9UC%Q)q^vAdG<3$MYmvv{@^iv?Wam%$rlLU&>vhGHK5t{+V1WDZ&i zgC-)d*UXBD<_cAuIfG^l@PgAQ;y1r)4HU*<2m>0IKS+iVD`tL3@^Kuqw2Q?osty){ z{h{>;r`I{h+tKZ;Qz8s6Aq9T9oU)5YZ~U!KlOqH0^BAwYrsZK&m@^@>25ClU-(fij zl?fTWwAIw6XP~Z>O4Q=YSOEQuUa!}H{6`OfJIYQHB2;fB$=h?BilY}7} zOUnFJCX4$mlT9b^k-v2hrl8iyYw3xyPQPWi0%9GBzQVq1-F_Wel?%T@OEI8Ps+VhP ze$>)*uJ;@XYrr&wm=Lx%GDhVXDWADu2oqdasqAmM9f_!e zC$G&V&B`r)lA{HeL*jib_=IK@7+G0(xt&tqHoHQ-Bwe=)@(qsJ&UHZQZ~H)^KBbe4 z?o(&$4KN59aVoj)v!Cd}BaQIapej|uQJ@9?NP)v?d{c~Hq&{M|j%iAlb3V!FzbXyW z*U2W~s7K?R#zLIHLeU$XoY8)z?q?u;HKEQWxuIVxnD`ET3ugXOka5=b!FCua%Lzt~ z8Rj`?8&LX#eLHJKXN!LVhLY?~O<9Dm2D5>y{?b@Ru~(-X73z(ECS>SvI)4tQug2-$ znj~w7EQ|(X29D9E|MqiU>o#U36%{o9ZyaF$VVDpGV*e#5UQcL!V&bkJ(rG{$d^tw2^&0%YO-wS!Bs!(&JofTQ&;0FRX-r z1vh~AZ6*P++Z@#z%Ab>IoiYxt^>I zik~%y1iyQYC}w=W@dTe6=r;FHVRka%Mwl{vA7@IxOe#7QnA3}U_AdJSaMZ?hHR>$6 z`+=&ctv7B4oBe%XR|J^PKX1C*ga4_*Nsu_Lp6!wygxt?Ck1pHnSc9rHB@6Ta$kITz zk*p6X3O|h6vHx46{;AmcABGdBcu>CI-|T;y-`T>thLMAZ54El46D<~W@*`U7nd#wR zYZ(X_=(PNH>hX*QVmY2Q>txTYf^4+?llXrZ_&?<-0kuDX(5h09ttWXP6v-4cyP^~( zK1aGn^R3FnBHJlRw{LJK5-3HVO~c^@)Bk@K&+C>Owz_YOtK|Tqr?v6TaT7w#y}xMt zH>MIRfimBimj{oAC|Id=W zv-wonH)4O&ZhdTkXV>+E_kXtYB(zXJQslIw=-bQig|;1)(zs17#DDYv{=>|^U->|P zpXqO;rU*m`_uKgX-+KNp(*Ip(^>%y3&gBJzrZqS=Wt(hN&ImQpReJ9j&o0{>_pnreY0xrT{n*@voV1`lvNw;-cVv-FTsRKvcx8iK_b|iRbj`fQ@gEu%8 z6o+K>;h${(cfI)U9tMIC&=;WPC(xe(qSDxR9g_{O#_DdlO39@Ra)}*mX{l2>_2U=t z>d!|Z?OTmFAqN;7=do!s2lY`o~16uF&+=Ul~?ne3XTA?ooUG8O_KJm z?iM7xi%#VgoJICXwwS_DtkntJ_U;THY3{&!Re$6Dl)P|uWL)?QD7=DgvwnvA3oNW3ZBJ93Ayn=Rw%bjlE3nTYvUOEjuR&WcLq1AUhy&YPQSg=@&|8# zmeG~3L%%5b)f6A^1cxUp7eBje>hHUt!f~%iJC7oikocg6hvbc5Og-I<^kKwGJ;c~F zx?K6ZW6dE6xSgX*1KxfW@lJd0(o5bxFwqK@(*!=on~ZZD8Pbk{pW-W{L=7wr5Oq+O zt=5S!+Faq7vLZqLNO_#t^0>h-i4k`?H$%vVvMn;1bNs;nF8|oDBX9gJeR&iZ0 zI;L5r>pWGr^RXFM-{YOd)<=$)!$QR^r^FRgNnB8S^e<4mb_{+Q>*6|m;pdu9|_?gps2Ujx)*HT&53D zGj8(jT+1NPPWW2Edx}*DQS9=WGe6A#BoL3z4LedtBH;%ewPuQ9QnbWXwle7q{VDc=cTinSpbL@3r2$J)v%&M-29 zrv6|JTn$^K3}z(Vb;7sv_|Due?T{is}&+fEyueL2+n2vMeVH&mVc8Ji$O%a>60#R>1z z-y64_EjN164<*^hv9H;6uBDEo&lMNRXV~gvNA5fsXOnb+k(;0odwF_hCz((v+u^vN zvq#p&GOk6mUCA>fbzUa1LpptrJW&2+20hR6ld_S^_f3%92zLqaXT~K%Q+57pe}AX{ zw{IJ(iOg=70RyO14v^R*#bGh{7QrLAgXC9eO2xD0+*qM3xLZX(%RVQICa!P#V8{?i z5X4E~Li$aH6Bs}1v+>TYcIhJd;U*XCeJuO9$z6X(F7mtt#;vTwxT@p>B#tUWCIRnC zt{S&X^Y0mA+Roobn80LW38Sr^da#W@O;>;= z!zO%jrPipCSQ?4-wMgPR^;o1UhtczdJ%l9pFO3Bu$p}GV?iyUBZ-f0#h{2ddcJHTH z0sPRlGKQ3XKtRd@80SHgM(lfDPDNg1;Ah`W_f9d+R+*$^iICUUed@-I1kInCa?LzX z8T4x|>^)5JKEbv3OV}3giAIfH0+lh9F%@awBGD>wD5cs(I|h>2ojaI4wy-+wU~lYg zuZjFJaH-Y>w=f;pMX4sv99b0yrRh2buC_9LJ34@Xzz$udHTr~dve8GhfG{YBWs(P2 zw6S3h==>mdzwbu3!Hv@OQ_wP3s1XAsG>OD`s)}xMWY(dd zNtW~c;^BmL=c;gQv+H@!^Q zM1JG`%Ioxi#hXg@wk`d=y@nYHOny3*z3{31;~S&O-kj;>$3vR_ZNp(KAxO>F$nneBdE5C{m@aqE5&h5mNwj%{cGU33vY0Q=^IsED(f{4|Gy6(tBAfr78= z#bRjcd)5pErFC?zaym({Zi_xB~1OCfF6wphp%6SQq@{o90It01TD zLNgV6;7V+z3{(&woEc!8Slkj)-03|Lh3iqgQU9oh0mjQ-EC9N0#yN~&4yFx#q8Qq6 z`(|nDR@p)KNxZt9FCsjY4hB-JcNwg3$=7DBD!QR`LLa?^ zi^R{NBkQD;!Xbht-Mpb}$(0d!^sxm)V@rTt)$qJWo;9B^q_D`^PvyO2VtkVg} zO`lj@pq+i2axc&%65%QHoSU=B=S9~zZ97}mXv(z`R(3em{E=T;s_CVT|AfMGIuC)- zIu(<)fN_Y-+0Wl)BEgzyHG~G57A@H2%OtKV_kj$y-D8U>cs{d6EI2pa{Ij%+0P+-z zGVh|FUib7fSFt#|K%@v2f*F#Noin=&%x}22H!RyPZx3Ci*{VZivivp5a8x^0u9blz zl)AJ~(-Qd>lf22M4m|r2@!5*p11h*onB^NFA~#*#e&zBXJexKi@7^3?HuvJ4v66JO8&tV zLX9A}Y=YLOb9Aq9RBU&0J4Ps!#aRtN%j@M~=T0cW8W{)wCuby=ZM~X+DUpd@sJR^h zBrY&&-C=qPvLI1}&wV!ITgsb6g8rRHxl#xE!{^&XvTfe>Gt}Yrc=c+jwSm@@9Jq%Z zN$*(DQ2H#6s_Ptso!r=(R=L2aPzy%FNo9WKCmN)MiA~laq6q?VSy-k9-|yTNAl2V! za3&t3XWXY8hmpyA(K$`T@xyU*&3!^q7x$n@%TDZrc~isEq+H3urVet--af8&ZQREP z%%XC;9=TkWihJ<3yqb!htxx=1V36-MJmxPp%_^iPb)VYg+kI_f^y`woQk)d=qQT z`ElW~v9#zd!pT8*NH>i|+hnU|Ef@~6yoq2Isa3&zlchX8YdbwQqTe+L@`Jc48fadU zz=d$Nn80ADzMNVcSFtudobNXMjiriA`DBGH*(JOYZ3MaWmw=HnY6D-hRQs*&J$=nh zc&Ag45C=8; z%=~A2NfFKXG3-Wx3qaE^gUrdEbOLaI;EYpb7)Sav6K&Fh^hjm>FO_!=5lOaK)6NEy zUP%;d8d6Hf8=P!iPwh%U;7eIYzV1HEQQ^MJ@d|&|icoXelx#U$jF51f=&eM<0WRKG;Kh)wEGdti4DX zk4n$K4_s?w;M?_;8b+YT$Vrxf=>|4gNY#WdCHZ9N_@`g<cQa&TY)&Sg9x*R7xc4@e&jqX$ zp5u6}_@l3CYWT(jJ>lBhES$cpYifZvwRNLtrTWt^%T zc>Swy%=Jc9GURNu6S<;mj9QPzp)boRzQITR+%klE-5k)k!177Xj&*oF0THA^l>ZiJ zr|-(K60OJ>-Y2^&@ydtkmA{=CCc%4`k{5OwG1Hl_``bN)1c!B zFPO(P)sb*G6^?PlDqZ1Pn#s>XcHi{|?}en?TFw!Bo=2JE#aMnqvLViC&5C*_jpA_; zyJT0Bcb`Yp7@hsyyIvdLxdcTT8>5dF8rLwDiA(;(duj!ZqKNBwet){7`%2yb&Y(}q zoF-cz7FQaYCrelt4S7zfIoI81IB0r+;};s?hP^Ur2~|10vQu!ZZ#j^6b~aAMA>u5R z^S;DVg_-O7orEBEdxwRtHB+_{Mv0t6;)bAWd3)7XLUlloJ3(2BcDgHe$YS)dtwz59 z$@fWW_7RA}(H5za+Rw0Xey*%d96GBhIg?>u^u(9G_xg!42ZYBS3v35soex%#0j5uD3h z29Zk`Rb0PQ_}iN7Yp3xl-D)Zg`soN!-fS<9lFb}3fs4d88bijfbtzwPwC3&HF<4oK zW!`$o+xvw&p*><>^dlyPz_0g=z4IfH@tI4~K1vB0XT{_2!eGY8Zg5F{v7o^PBE9|P z?n@cPLVeE5#k6HxBmM>gNJF;JFKiW$P(&0nT-?iMgc>7L?Olbpm%PJ(sK1u-#}+ZT=|al$*{(EU zHMZ>;fQyMUCli#zpY5QQ&XeVmW$#C2P3?^BdOk`g!zUhtTIHI|osI_mBtPh3-inPV zPv=B2+CmZVw1D^KMV-At3YlrpL$o#~J!D-UgEvGJ(R&eJ5pj1#gk%BwB)8f!CtAWm2O_a+uCd4p zEy&WC6^`0S#%xvUw>$Wb7UDSC9UU|X93?mNA@7<w;l{1RK6*}^kIH6GubB==J$lpKV8c@0e73_^U> z3QeUXOJZ=p)tZ10<;x3pbJC#{5BJN8a`V`_P&?6@#a0|H9qM%9(zcN_=6Op=vGF!{ zVJn{Kij;E{kMiV$_7jmL$c8^0=2)Zt3NtEQDVzazFZSSvx-ZGC>CTC%!EJPkeCA}V z$yp?8X*kRv+YRP+sUm}0=az-z4N#QY>({#n2A}x>Q-EF1<_;BMPB5g&>aEN*ZTP8u zIWF)(G)KA+?jSZpj240W7Oap+w8kZqf=QC%!D0mjj#Du&w^!u88Q7uAuR^>t$pI3Y z>7c2M8a6#Qf3)dMPz?mbqCVwPKGE3e9u7VVmiIKH-1VKtn=3YTXGyUKAI!oUBOM47 zbR|B2zD@qz4ZMRM5A75F9!K!!U7gS52$nwsx5-O4)3_8xu+*|P2#!wFQ=)7k#7$hXw<(x- z3`49Je&OKjHtMhu8?UNE2B^u^P6uF81L57S4+ugYUXL8CFe`}V2xuJnX%)S-mCi=z zMp>^sR3r(R_h=b(D6|=(uAPt%g+m+k{c79z{Pws@`%Ca*YFDEVwn|xZQz`Y~ zM#u*_oI)gjscLV$=Sk&z$f+?;_X@qIOjH~Ht22C0Nc`y71}XK-<1s4bEB>fFd_KfA z@fK|hZvb)5_y(yJt}l^IJ0e6rh`cs_Nk73%p$R?ZX`8(zC9tTdnhXAq{mxeQPf3sL z%>*2TnG7!E>n+|h&@U{b=v_J|TQ3n<>57xxZ8wzlcbl0{J+oxbEHE(?L~!rY)4Ehk zME`iK7jNBbG(jl92Nkpi*vy@AO!xFJmr_?fym<_0=R$3`H7nZUOlgONppW;xC~#;i zw@F2k&lNken58)zZwAnW%>}7>JlL_X>C=1>_@zcChn?sdyfpDn>Q=n=g zVT<&kkK+a%kw`j--yX6k^^h}ego~YkqG!XYr~-ARIry86m7?$MI=`)t&rq(X9Dy=X z*v?%~9=8!_r{o4zG9S_mk*iw!vflyXRGvVRa$JIbW1{BIa&+q{h!O?S9lxswr^T^o1ES?hlPu;-*=ia4Na zCf5{OdESOlh-1&VZ*R!ovLf-0e&b`e3Z*ns8FTTIJK=M$+Oue<_mn6WIx(&NaeB1U)>K@8`zswh%KT0wCbi`KQgyt)*X`C^;!`FMEkmF&>U(giOs2kkf+;8D&r^oQ+){d<6DU>T z(rV&Dy3QM_wD7n2#4De|gComD)|oEmfz#%TW93PBW=GF*Ag9&@#QVJsso^gpxTLo% zkc_HNl+X6tW22`W6KYKNpVm{(v`Q!3Rg7@{yhPkZ4q{#d6xN7mwI~?-TzlS0|8!CY zmCCWjf0U1LOg{%_Y0S{=>b$AuXs^4i_8=s~s12+%U#Ma7@Tf?6!jGyORh zmT|?zhL&l+hnXb0d4f8PviR-OHt}I(dkjm`f?i7Z$Ln{out4w{s2x-HolcXb+?D2G z>kQ%wO(pIG6=L6?2UTrP5YnOGhN0RKQD;N-R0;tLl8SAV1jpH%gB6sgje~%k$PNun z&@$9Sr2?Wg8#2t{Sl>O}sPFv4=0rt1UJjMBU?WODChwAp8Y*5Sv&r$YMcAy&zW9yd z2!X1VI2M%=UOoDKSZ?)U43Ach`Hc0KtB}CHm?`+RzW5& z^nLa1s|r>lXt9639#1OGWeRevlT=!YPKS*LR@#M~j4C#Bs%?H*^vMfb9qk8i4M znZIv}YxdrEC0=TZopG3kE+4HQCFTHSebGuG!^(lc>UTq+5$xfI(qy^C?kyv8zgs*}-Pv!P3VE1Co~jEetmpRaPpS@Ub+EO>Mt?D`_smvL`_csuw=S%yI6~Jt%e%4YB^dI}cZR#*4;6*2$L1N#WkWCx22$&! zepllqA=OT`Ej~PaM#%<)@_BOn-sTjTX870uz0DAx&|ybbNV+?|y36~XxO-FG!lurd zeoE;7J%W_?mFOJ#;#fPV0Mk`4$s23LEx;n*qiRIBwszcIri!&}hqgdaO*Yjs>3+oa z&0ds}B1nsP$OC=L$WdU2ny)*e4W$BNk~Fuz+X@h4;+HSm;tU~Jld9wpK>yj{BbpIa zhVhB0^c${AP(uGoFpODVuTSKf&Uk;5U)7;jQeaaD>>0w^{5cA`p{Mra6;$B97;{T9SjGSAxdfG|MY;u3shMmCnb~GsAHKLy!9w+ zWN>KL54feuUBF%-rHLU@7U@^X0+D^HPN1swl0RH@)BJKovRU+f(!KE7urb{rSKWg| zw}1|^8F}aSl;irnZ?tN|HOmMFKrlYo>0McIBr0QMx{A}NVM7|(Q4afFGQ%d*I!@YM zBH#w_iJ{q29l*_PXI@f#j4{AIow*dML^2TOo^eW8rj-YL-b713uXr|M_Tiz#6e?|Cu_}z;jv>`lM=!HaXXD zYB+g`KP)Q?tO0J{XL;0B(Lz=%ol+uXEo01=(y!?+ebx16qUa3mtH;>zbGvc_X=l>R zH-PJ%=ZtKqmBK`V{i$pu^+5+|ZWtVn8OTPRr%jUVR6HlJa#2&A0qQ^SoB?-xs^Gh+ zCnRRUr>e(~^e2yej!z`{a@BYx8iiY``M>;AhN!A(lM9ltRq067qhK$oDsCdQh~pT6x+RO)z8m z)!zPkyPXopkbXLhk?T@U_6u8ve6IP7KqZ0oB1G)j7zZntb*49IR{9d5+ecqkVA4?D z-C2&S3T?F%lD03U^Q z5B-n<{%!4z&28*Vm6H*nM|klYT)&0 zt_c&&LC9$wi-Te`LJW5C8pcz=VRV#akGXSP;)h%3Gj`SNyBG;l{TzNVg@$C#Fw^yB zRu~>D6wTW6sXG>knoR+V#YC%@w9!9*r3c#4=nhjx1YB;;XXykTyfwRl1DD zpIq}@ZFgC$zCyD{aTw!_Ci`mMQYd^eu}>?{kiiO$ag> z_=JFssyF-)`MV!nTt_qP(2fER1j#87QBGt0TU+t2*TH%64+*mi!KOD`QVn1zSK;+z zP2c4hDp7$a-Ve3-7-SVU`y#y@N?|z0j3d0yPpdvA?EA57Jo-+1LmlHY+%5oFc>)1?FOM% z6xuT$HA_Awb9k7c3DHo+9$eD?Ei7**J-vI92IZ)ng_W9UOb(0TmY3&p+t5)Wa*c_5fEn@`PptBve_VNyY}ZOJwXt=@`03_nf@gKLv8??dv4`? zkk{1Njq0+)FQcp>L6t}9n{BINC#Q~p_ZzLzhufAUzWYNZ5L7?3t{t4roM8-*(553? z*=;)WI3~l!L;s1n8pt1_cYHb0b^`t)-2Ki!z4*x4FO3M0sJ`4m))8C!wFuysGhZ-u zbaNGS)HF4m86Lmrh#Vff(cr6~^%9MUH`t-)xE#sm#{U$%*HMcm!Zp;328bs#MJIJb575$YHX%4eOCe1uXYh2JfSs?T zLByl*$cVZ`=t77%@I8$Xy-kd!4(B`*+`oXEqTL6-wa2GD&rH3E@&N@hprIyhTy0 z`ClQ4WSgrnqb?#7XOdzS#Cjnhg*G?}Nk9n5T<{rUKvY#<3|J_6E-JG} zSm)+Ro`;xUzf#*ajI|JUjJ04jW^UYI+&}?F;5py@@Lt5#_~4I*OH_rX5nZ@thl)B0 z>7k%^H8*fi0)LdrRgLIaCzZV@od;5V#uFA<;7a!q-E6b->D^@((<22G4N9L!urxUt zI(3;DlVc;pP&m17CAFypN+p|}@C?m#`Ig6wT#27!E-!F}UQS9G*wf56hq_H8z_Wdl zc1I&=xE8dazzD*)Z#6UO2&819?=~>$gt5_Yk#Ts|`MO$F7+M_7I z(pslT`DKT6A~SxM)p2V&mMU7)B7R2o8fy4r4NMt17$jIEFg^g4v^?JqiBAqIn4tI& zkDVG|YwwhscrF;NvH&^Z(0huHc%vSOi^$A?Xl8}1JIX*3jVJsJ=a;GUaZP%8Vj{SQ zLaM1{<^rRhFx)+3Rlho*m0~inwyibs6d)GgnI*_L!LG0NzjI)J! zexG^Gp4&GFunu zZ@?3UQ$4Tm%UMrEuM%B4;}pV>2l(HX67@3KK35Cfs`j+!O<^4R)o>+9m`ZP!lP#t5 zR>h2crTk#p)&ZQ`cc%LG#%F1o^=uUWU_MkNfL_3NK%vt!eN15D(uT8jcFH&v+dbcN zAhGsBMAJtD5eyug#vujt&%KHrYOHa%$IB&{jyyvn>FL-uqMX7w@(PpT7TAHgemT9# z!W~`tBNK3>q#TjoM1G=LJMZ*pWhr|q!(GJn*4N2k3YcD4lJgiaa))g!7^x;0tLtbx z@FpIeX_o)ir?=&HK($g$fF8q=DGRrw=7q{`&-6I^kT-Gepd~YRqzr=KrM#v~!G7>6 z8#%3+QMlYl8pF)vh9Xh5{`wkyhv)I7*c+B5S;PVp$S5u+^ItNsTzc8a;-vwvWo%_3 z%J!JsQo}3Qgq;}@4&}1?`W+x39%a{NT#rCnL=Mo7u^kmk>^o2+8HZZ5myzVWxauWZ zvyMLhY0`0o8FLQH&v;uFBw5`D?Z#kTA|L;IZ&MOHwrd9NgT|CISk^AAsbPvT#Mh(! zEHn+}M@XX974E(vli6Y-l$8gNn5|r8N30neg5ia0sk{7e+gg{+9SSeGH@8j$`XFx| zaCLfe((Bmbmy~Pu!0sJ~|FNBm-5N5^0HP8sqq%87_KPMEREu)iV_;Y{MIelQG+}@n z&`sR%MWI6+j(ZdKklQ1fdVJ2sRAOd&JSflAZ9Ee`ng=vo1!QFBd-Rv_l$P2Z3iTf0 zM%$=a59Xa?#Pk>tVCHY9Bq$jtMU9hXigTk_67Sbq?m8zsJfqYEjS)n$F;CxSdk>I+ z(9fLa-z?d3B2mI9gTZ;I>D|l4zo~k-PxQnVlsj^4PPztSTfdx0UA=)4h(Wj_5lR;1 zIhO@q#qiF}Nmg|9%kWiPsvBMWK1nfU3bOMtA#d8mUBAHbFv!QEowV^oF0HG z&lVWt_8YiuId|qQ$ai4`rU*3 zduvps*Dx-4KR@(-A=|FPa7ck0?L({ijnTKE*_+3)ebbSK0fSGOc?A-n0X6rh)`@MS zr)W^yZ{hADV7Vi5o<=@Dl@Pj^estOT`T`!G_BT9AzZmD!t#=vSxdm`BN;hgsbXClM zUN0eONLsX^HNHo;fdLmZY=evd5wN+5f&oZ)yu1aNjzu4n8eaOd5ED9NEwKuBr0v4{ zzb1X{a*R0uj95+2@6adj1Td2*+Epcutsci?gv+~GsClu$7)^k?6_6DJ6Li*}k=iab z`Q4xHZ_rrWOgc~38|IFL`&A72Z&2Tdk|XGV41^Po1%P2%nde>gWyB}Lj{v>8UOD1N zA4`J$VQA*YVRG`<`7iS>2flcmJ?wm}TL_!H%Mv$weY}+}wRQtUq1U4FV6=HK+4_6G z(y;7`hlv%YhPH1xm7SImr@qr>gFskH<}W$6qy-W~`j^&%T7|k7cr-V|PmGDDh;Tl_ zW03FAt>K6hdTAapWa(R6(%AiZu{x)``_Qqf8tpT42!w(9(_0s;5irO;>L4yDDN!ZVbH2zLK__$Bk)VY=$7jO$w0yOw z-A`14{`|0t>*iw-P__3qlg$NI?wWvhVXS2M@X0B>H`QV+&hvD;{WV7&xpWDgB4M#8 zRLXrP@8F^G-V^pZB}U|k=deW=F1f-n9l4ZvP49f_gXUlnWY(jNSLYO~a`&A^g|_N5 z=4rtSi@HxAL)QXE9ndY_hE>-bk$3>?76hUtFGE$N`-q=Fa6F7ma_(|1tX_YJE-N1f zf*0}sD&rl4G~t18(RXayHg;^=wr$(CXUDc}+ctN&W7|6W9o>8D=1;29Nh%$5b*H-@ zn`#*R;+7y1L9*|zrVqM$t32L8*XGY>2|B?(u+ka4cy zy!%Et`cnnk>e|Cb9j8i{ z652!WHVpCYuX#|BP2DTCjIc8#li>Eo%JjFcLy`?gw8mE9E1oSdXctPZHn{!4%U=?P z?S50x`$6*l1XsEk4wJ|#yE#p)4w$emF08TLocupDM+v=!jnLsEBE08PKL++YD9Vr~ zX1R&~yb1U#8NIZ^Y)9a4Lzc`obb_)=wxig8FB-CGGDQho?@=CfMh;1Xn8Y(j(NmzY zX0EQb3psr^eZfbS5f)6PMvrgM=>7%g!y+HWhLKxoO*vc9p3i!ACSrAW?BWjjyfVSU zfBg<^o64~x^xUqjFpK`#Rx}Bu=K(e}2^i2Q+2Jh~u2`DahIbuN1y7BUT;*-Uu`B#z zLYPoTEX3tS*ZTz{-D+THyS)?{7LBT=RegLcT%>c~3W=!@NQ-;w2eLun!pqcstJiog z*Q<_2i$rWNVBG?S4}gfcB>APLuapeNoHJLgo%q`m=xyUg!;lQE{ijP>^YPdq*Cile z{s`kOrmW`{%0M`(C{RMn?Ufd_WTfmDybGUPUstf5M}-t>99+lWEOfTX&7OAhP8c5W z#O$6=C|VgColWkm$0xz&z{d5{-0li;kj;qoL19Gf&Re`8%nan79=SK^ zheU1)IBxlF^B+)RJ6B5NvVHp?g9=Vw1x|AXSkla-Mn``00(bdbp>{{_f+ptp{VInQ z*<=t_ZAi<%l9Ltc8;cr+UBC7*0VW3K1jMO{i12s@5N`y z=!6h&O-11G_72lLClG2MA9RCYe^9%J2SeE=pPS99Nj>jdaXHo_N%!7&ra1GJ(D9I| zaPzG?R@Feo)HGy- z0=m$NM}AScGeHixDyMDTDYEpnL88tsB!YePG~9Hmd?iZGAg)|FqNk+)?MW3?nJWSUH0Hjx9Tg|M+p&~Ur9dx z%BZP2Tx@M*nzqF0g?q$sbx_WpFM>c8rd7lvpjj-Gk>=X6f1Zyl(g!G`B`@s^QegX_ zc@%LMkF#ugc_tYp-{VB6x>ZZ)thxC}xfCHKguU?ntb9@eyMj%4dwxc z|0u#DeciRM;7GGLt<)^dOdtoV6Z7rF;}`SrgAxL);+aBwJN~1B$sc{4v%3aGZSh}u zC~|6j21YOVH~|y>)32YJ2=_~FOxd;{4sd6KT$huf{z^t9qzr>eh-RGvrI8s~zO$?( zcTt!W?SacBxC5g!9?frO{!kl$cd@#w|JDG1;(JemYCfB<+|e4YM4a zPGp(Dzmnh6R@LZI_|f||9^$4>xCEKAOP308FhXU>D8L=47tSd%j%#!hY+IX<@Oe1ni~`~0HG zDc+4xt<}EU5F(yYga`L8*?`a!_zZ>NdXTXO=*hfAtGR6g1}K9UJ@u3cwV!|vAV7{# zgs2e0r7B?2H%m<52vz>DOix8_lzayYrb8*{VzzD~%eKfx8$mF#9djPje>+u+X@{Bg z$~5Z*tbj1}ms&uaW-0XZ*(WS!wx|^uBYAzZ0i~L#d#I#twcHRwO~9Q*fxLSXS*{3Q zbHAAsFq3`9g$1FzcrTup9>-1wCmNc?d8^=vtz+hJV+G@W+G?4BZ^Qq~$DmYN#^%@%1lNKa}+okOd{Q31%a@}zk;q}kzXNvyIkJQN6QjuC5Xq(0V zX#*Va4ru&yK#ZF89ss2o)GHHc;FPQJAbWV8BN@Tf^>S z%-55|F>8-JN&LFZx~`&Mb)q_U5lHLV9fN}sujYAS#|8nNAwh1_e&>e?Qqr4x6m!SA z?(SdyRu9Z-Vo<*D@uZdF#7Q)J`PS9s7|iV!b>{?wvkkNAm>AvWf}*hMjD~PH+7{;G z>|sQ9YO2z7OO@g_me z=Y0yLT3+0}X=LdJt2ZpG`7;_mp8AZ3D+#T81s-01APVS{-aQd(SNf&t+4tOTpms5Y z>p0Ju+7HQn8*RY=JBaonMG`MKbJ<(1;$(4(_b~R}w(s*v$kr3mya?&LFZT5XkgqMh z?Z>T=ja+FfW6Ljxpaf3#FXd|CY{@?!EbKWHo=lIkDDn;>ju`Jfnq?)!a#AtFB$e&( zW?Gs5>d4>V&IJj!q&!Q7q_qT)$m$v_b&V5OI}IB4T~*J+cTnyTERTErjm_pa|D%W$ zM}a4e)V_+DeU{1fM33=pYas+eh1F6B`wicga{@I<`peVhWymTueCCq~V(o_fBGHhX zYW$$CVjKYAbW-1MR_E?Af%qZ%-IcOHn42e$6RAAMr;3PxH_nl)7%cn%_Ht?|C0+1=~Dzvt>PHP)mgB|!Rc z+k~qBtL!z!yRy>zbds*l4jQ_@24U|zZPUOcupVlRxZRI9f@?sV#g@&3u! z=&9;gxq!0etGVMQ@qUn_;H_J&=En=Cbx;xSq+qEAaD@KC|GtFaUbQY3I$7c1xvY|c zxlOld5H+owwKL5hMs~ibL@SY~w?*Q@C2)rDoP1>8w9F_cak3`eAPPw>dgj# z>{hTvf}?|*^%R2zaDJlz8O*FV>mDz)idQw$1ReMu2uw9wBE!?ejPs(lM<1V5g9Woe zsk%@ulH%%MBzRFdqV&&v7k`v;(iJF}k10V&;bJ(k0Cf;Cpu=v*G!C4W49f%Z%cN^| zRYR-seN=kF%wRr1D{qJ|NxCs&K3m~YpkLbyXstbGQ+R!RM}JMz5!t@*2>=ux9Fub_!)0Y9Zp zE6qtuuq6)Stjm+OT?n3|i(>hgi|y%rD5hL4k>0Cl(g8hpqNdRxd~ zuO)%10bo>)c%QO+==qe8b*E8>JIUm+dkwOWkKc3|*lGPp4U1vVJ8c zYn$>rA6AMgs-S`(AT&Kkh-DD{3~t})s3th6o$g5{;o10m;@KkQ*pB`*eMQ{GV?WTo!BJuQZldDRSuyA!n3qc?6|TRr z3z*hyu}l9Oy??LE7G3{wRUyi`nF-RJLO&HUrOQ3!hQ0BT)T`9CDZZ#PO-ruItL&0{ zk<55lU6srS8*64-`?(1o?Ciz%Sm&i*p0gnR7h5WKLkgsG!SuV0Z2$5(!ehBb8{v)U zxgIrNGvj_X(d$R%2{Z_yy(3#DeZZ;oF6J3>?*0M7^vmqV*K5X+VDfI8drm114f?NU zEbnnbTjV9<)jM*rN(HVq*CkG1K2*qB;|*W=+@sYLxqVknOr7Qq-Ix+6+H(NwIgH%o z&wT3=I(y+p%6$~TkQa@-@i=@LJ?)dQH-ytl6;SyI6sG$}f@D)*qO#G{7wLMdGp^6y zreFjkU5PM3J)9D}$sx*X==pSyC~OU=Er;JAgVQ=-FTSo{lbQ1W)AnaJuU;m*rQh~M zew|!SYbRvmc80uQyxhTlfKJtH+GI%y7Tp&Zi|P9Y}?0zKCf5dYuvF;5dY)U?~r3HKi>C|-wD@xUcC36paY&& zd8L~Nf8IxR9;ktR;T@abS0oTz0shmEh^eMlkMSuy$S4*gJRx*0ME(>-qAX(lOS5zsDq*MW^F(&Q~~4KO4~HGF^)%BZ#pZ0 zRZwORC~^=dM6NGksGUS533->vr7hO68dKDtUA?!UffjL^6JXzTzb&fh^OjGFhp@-9 z-Ox7G54Z`G9H`Cy?eIXV|@pkMq+a5|E6d zmJw&iXEH*o(55VmwbQ#^8#{RIPWSWrB!Elv;9$NLut_9=h&7Frz3kZ|gba}{u2$m^ z$~BbK!olZ_uGB|MgHr-zsYc1@-CS3Rx13v1Bw4oLgO(g9dQrvaUc2iRz%pGkJ7g#TGAs>qu@}+fc z`k8^2CdR`jfuvLoQ=a#1JdKk6`E3i7*UbnhT7w|rQs*dJ*XZ4^k5He94X#gTC|6KT4J zLYrpzd3u5Jhxbik3~nDlLX+u&ho<4t75+g7*nB_g?+BC~wT<Rx4rUi=U1NE`VI$F|a*J zT)V#5f@0e}Kmy);ruZ9ul?2x2FjBxmL0bex8635#^%#JBY7Stb9s}5W`5_y=4$=r4 zPoZYp+=}xjA&esZJ6nz7O9Ur^( zK7w^{Vr#=)i-sGH{nz&im9u=&#giJYKX1Q0w`QHFTg)x!j~na4Udr~#31Wz!vj45u zDea%5?}r1(Jq|+E*Cl0^qG&l}8O?S^^)V2V(aAZ~uk$*K&cuA6XJGd16H{5Mt1ITc zaYhebC!{warxj&Fh%gbG!I?XlR~HFhtkz_7VX!34sL8N%-Hz0HXS`hIzUr?fvPXXw z7s%p^xQmuVX7`Dn?U~Y!I$0Gong5Pb*p;0^&^q%yP_`D9j!CU1lC4@9U}I>(eFW8} zQ%$60cJ$X6o2bBJo_4nm|HO*&Qn7c8A=cCNtlfi#*Hw=^$&V@{5Cu zDkvMTFX+hQu*oY6#S9^K#jj~C_{o3$pLx$SEIrE}vMdE{O2yK+{Z9Gac_*HmH&0JA zVL(*BSF?0kHEu}NyIAcvXiyX>@i7Q8BT!JKPmQXUl5dK`o-Lx|k>I$=S{sC3WgN(j?j5V9DUb_L_ z5hlnMsCU2TTY*NnO~Ek(oE-W!VZ7&(H0v*~WiUV*c^qpp7hz}@1_ ziagigkX$~=2&PU?I^hLo?V&UCB-ii~EV1OpC|PSI`>3gCMK8L2za-CfN(zv~Jn@g* z3W)Ppt}^ZnXm>HD>#?4aHQrtTEh?B4>BN>z+E|oyHYWKkxrqPpZxJ+*0?}zwxn}4s zP&?EQ6ulm4o>8b*lsgA{J%Rd*V!)Ejmcprt;Ub8RY){>#rAp@_iNnQ{2fd)tl~qxV z%d1qlTV>;;h12YpYv##df#6%I^rRr3E1H;%k2N@3UCGwrsXsCd;MxcsNHnVFj;RYl zO82p%KxMScIy&=&*j^8+zkXwf-Sr}5vs z{e@EV-JgE$ZZ#?~)`x2y`GyPJrqLGTIR+>o`%)v!ZNSEAX<(V(>7;pK_P9f<`cy5{*yJj?O6JSJr%55Q=@ zXJCY%mM47+G4hZK)@=|$blNup7j`CToUz_{X(<43dp(X9%*kkDoSR5)j!UXZnWDHz z&K5kou-jND-V*4oWc9Tp*!N5YS^P%u1kb-&o@*RNFu>dVg-O$fdM?z<<2_qQHQduc zzr21pzMNR4>ezj+(9e5e!+1LYXFfT_#M6SB-9J_ZuBB zZohGIRkh96@#0yaSb*kVC}gs%h>Q9d=?DqVXm*4{&>m$UYJ2u6qAth~45s^^egiHq z`K*n@w@nT$L@vGG zn9+*~nZzLy*j<$;W}$)KVV>JJNo`%W#y|{~qMO%-SI^QUssAiiRhV;W{e(@2r&o}k z$1&?b1RizNk6aUya_NlqU{a69f9OC=xCGn{<_ zhSfJ!EFQlr9+OT$-HJ~NALhYjelrM-}HA;&11%V|vjv@`ZL=p|! zA_+QPtZDSZ!s`T=bzt)Hg(43D^`OQlGdh504d2wm!fVTqL1rlLA!}FTT)w&kUZcUr zPkCyc|Cxl}l(2ok#Q9rSuL8@)aGWx$pYhZl)&=e-w%eZd3{G*|ZPmOl=ccTCi9$N{ zmgovLpN%Jo_o^i1sN?x|k1YM=LfPSC8Jp8xHK8TTMipBFDIfbDCEcq2(Ud}?xVCkZ zE4oeXGO&q=RYIaU+Na7n9R~?GfZdUc&2=wYAtcOxEIIurgSQ45@jd>0fwJ8R(GRo9 z8T|E|)w%w5bm5A>s;@Du_{4+6ND68W!c$L-Gshlnc(!{(w%8|Ezj#IC%?9HehQigA z(%^g@z@m;nzIH=Z%}9KgUWTi!K2sCrvP3p&4dGIk*G)=7S)e)d7U&$9PwO5)6=9@3 zza+4A+Ldt;3@u$zT-3M9zvHCK?q5-4r8E6^9(iGGNYF4bBFK9R#=!EV9%* z-hWhmEmgz5aKt+YI(Ox^+uRoq9IrEPdn}i$wAqucJC+R`ql_XjT4z_xAFN|nkKO9l zEdrmE*z<9(Xou=0A}?gBTX&LKzBIR;NhyUuX+yPyBvS1HO&o9HIoWDC(o{AhKd4ml zUUk`wcoobL6_b4SnKQKJyTq~j>kwb^iyw8!#A}VWSaVYX7wWKEaj%>vbLzb};4r_e ztfq9HxInP{c$O*>lRa8zl)5LB%*j)lkV_=Z<@?E*uR z(G`ZH9f}+vRFxJEjxSZzppTwxDzwT-_8{&ndeS#)UykKt%TaMpQShndw=+|>BpG%4Mc)zs02l5_M<&=rZjE?+XCR|^(G;NtsykxO zwd#=X9lak4`E(dVy^jd^EbMdYsb~MlAji?7XM!$c^-aPn)}vhhVWL|V#}@^(bKapW zCeZk&ItDXS|Jj&(l#t@ikN`m8ifY>9zZS1zi^p~wd2GF}n`J3$~~_98pSh8ycr zr>!0ir+!E7J=zvYd?1oABk6fGn zz(tovFL=Bcqo%Q-&_|xrfQ`~O>SPk6!ms^E;7XV z7R6M}h$zupq`C#@Wh_b3!~yPX0E@65Ds zRr(fZV2DX6%0^$Oj57Nx6c%i~F=hzF6-?;6mCV)AAlVG<98WBpr0^A1iepTxA}iiw zeqU3PSRGQP#E$+}6jEF+$9o!SF37=kWMP$$`O&q2UNyJ^KW8Nz zKAOy{m@9{bcKp$B*5eo0t1g|E$`7{dy99};kAR!LG~)d4heM3Zmtm3Z-zpv#8;vHA zxn@Oas;QNK>0z-tggFsCi=^ALev`US$if4+ z30Vzam8ix3xhd$g9RG{E!atVCPtQ}M!eVXTMCt3D1b6u{8x({%wPpac^FUjMK7Cz= z9{tmp3vlh3c1VfDaPmpxWPRTKii_80QY2e^_|~aG+V(Fgag^o(YWt*ajZgn)<9A>; zw~RN=^g^{gHF)ZlvuPpHK=UJlxWPa=u~Qf8aAeY~$}(cZ(T<{N z4!ElcFvf_U#3?eU-*E2Znm2;D&@I@Zi6mh{tKC>dTUiDF49>kx2>xk)dAlS<7ho*M zAO6boOtezGgxQ}7p9`tUp7m6fiILvX2%IKh78tjo@%BgX1_Xt3iA6-8ol_1IRZdFN z-{6W<3jwQ=MamTs%QC_#wEo8Scl!UUKUe1wbneIVECI{V07^z#H|YRW8leeQ9mM@3 zCg~zk`U+TJgBt;TQ9SDuz1$9S*77q*%D~)EsP;?Hd9|H94sS3+Q{yROL*4pTF z;zL3VSoxT$0y%i^(v7^c1-| zv%nsT;2Mw~RjGLYuv-uayuyhlvhZGA^L^%HFEHcNMrro`ieAn)zb8Due$^x_aNF=a zpWH-hwL)f^&7Q(ev1{ELi?6Pm#CzxmkX$dx_vVGDm$>2i4!!~)+%hOH6-P20IP2q{ z#ca5*$|3{?pG=S?0tBru6pTLGP zv|bm@(x*#x$;>uO=ae5^Mj1t0Z_~EDPcFS7Kr8vYxjFqJ9-2Y^XVD1kjjD5J*#4<* zHdFXN`u2)I3pF&y!@d0n2d7n`MxPMoYoSzLz8+_}-{@=yc|O01gJ^~=gd1#|=*kUj z=GOY6tr&`h%C6%Eh=d-`UWE+MW*? zsANH)^s7(w9$WbMy-~Q?wTzMF%5&L&8GADvJ;h%;q|Jf?H=gTdHn*7B0T)X_%32P2 zUg45j>bQ5^gNbq*J>!Jvqhpe&a}|()+2sB#4PTnZON*h$_FDpw+iU6^`Ai1WYEYZ( zISR!g#>pLELL=A2+L$Z!gei~{W*IO1iu~%eA=kf=V>@sf02J%@_wd#osd;}2OxGCr zn_$R!vdZQIq~SP_Jb?3Klc8UA*%RD~`dnLKZ?dL5ya%Fej=_ZsdyZq!;jnuy9@m-z z(?il@Y8xGERe-wa1Q$uRcx4a|U-;g@V}8mL#0D(#cbfuiAz~WuC&oJokJ4VPQSmS4 zE~_Tbm+&w2iyJe=tLIw#gbARA7Vd*YW_}43twHDb8;reir2l12F(yX;6+jHxV)v%# z=0bzxI^~OwR%@9ldlxPIBSJ9y5~aWF&D?y1l23`c841ri-&%%j*;7$pwoUm>O zg}oHVTW;AzUvTFPAT1lk0kH?bgecj%eCgY8FP`B-LdXH*pQb46 zzr{#I0gWj=dMOFd@BdqB!I`y>p7TS;eBhdA3y7!6fLh_x!+3CP^pC^1gCG0a1vmX< zPWpj8{2AipznxV8vT05I7e=}7BPzY!`n{dgV~9L#ZqvCKf-7+MzBDm9lu>(F#hzRD z{?&(R68^P0#nDgQ4e|(dE2-$w0m_}-M|fKYA1W-@iBR}=rN+l*g20SqP74gaoj1xe zC+wp9Efx6eY|Rr26#W&RGV0tR_j-SGI{K@AH}+AQnQ@sI97&8ARL#ghrdTbcph~iHIvw%ZS!DILF++doJH*{FR z3wV6o0YU^FFQ{>Mds@2yXx>OquXmjkDWj3>2{*cP4l3|_lkt#XL z;%|TfAtSMtuo+{v$H1n%9b@naY~Ki)F4qF+9#Kpg3(vkn|DVy}f`dI5K=LfbdNTb+ zP^aPvCh0!L{Q}n>>ux_qDHEfQ1TbResh3@9)?hY?DRoM&sTX)X%o_gqZ9MapnR7Yc z)^Xa<2u-b!E8fUqp?rS8t$eBJ`$?RSTi+1&BWIL-1@t-_8v3m++&GV83K%%iE>R7e)|1DcRrmQ zNE3WrXfWiSN3Y@2rhxD7Sl2H^kO`6gtb;qMrc3y-OwdfgY2h~pTejnsuxy4aLUb;t z02~a!6CllA5Ul}XZ?mAa3AYE+t^Eoi zslgAoMbJr+)Se2^9nrF*5xrQ!21?!nPW!>XN2GKq7DRET@7wTnv)PFu(hRX%RyI_n zuyF|KGh0Ll_*jQ}m8Vlt2ub1W)6<36Hc_1f z`fTQL!r!beYEQ=~q5ufj!zx`*{i^hf`!$cljmI3e(^07K8}OCS81?A2xEW(c0q&)o z_*q~<_A9boE42?Leb+A7A@MPVm-C*?or9D>mCQI}?Ww=A8wso>dHYbC7Tt~bZ}nop z((wjq(OHCCGc0)p&!gv2b`{0QAX~yjEC1d;7Vu)Ji~5u04&01fJ3fh*&B5LP zBDA?u+V$zjuZ(7zCLZcup(WK7H8b(jt`Z<=N{L3lCN29ZCmF1e@t6-55$vXaiN7c( z@L}l!JpPgAaF%W`1IPI#8yJstH;V!B4!ENyp&`~yE|s+vpd!C5>&A|wmqlb_^0`4A zUC|nt6;;u1nt^lVK$*lxu}IB?aR&w=zNH&~ooerv0O9X(#?HY&PPT0IW|r<`PJMeE z_H!P^W_CKCUQy}ZU}X z^OwGGZ8fxEjKrYH{Px6qX)D{Twd}0kr4$Ew(ghj!YhsW%dj^Y3OuA?;3fB&dm*2<| z>S7+O@I$}7W)C#k$a~4i!lYnHk}r>xj1w`mPX*TQUgfg$!ktm!!Yo1X<0n1FKR+$@0Sb*0`ODe3oLo+{KL?SInd3MqjvF``O9>v z;Kt1jJW))yIvN&S>0Nh7d-*2Zw@)|2ZxH=lqMOM(?{#p zoN2`ijhnd-kiKhNmqOXjjz`tlZJ?btVS4_r@VNPte18%|ywR0{uBo+1u ztNr22--8OKqHzoY@dkARWd;emn8i9-2QGqLx&wf+{>xI#DHqlapkswbm3Lsl1N(!v zTsyXk=9ncUEIwERLF!T#f(uRK!OFLX?D~J;+OLHY~WP-cT zsiyoHZWa*LNU>(JRbs#K_2!~0Ce?}-h`q~Xm0I{fl!OjQ^aVlN={#JeZO|?vN(GgX zHWoTJDr5ke^6CdD<5<8kV8)NV$Tcm%UF#a-_IcRMhtBWj^#iD&4JYove@CrV`Dy~o zgMS#i9tS4`06;3u>>w>+wNSo6y~Ap9_Z`NWQt>R(bMcso_CZo|>jfsp0oU0HZ$rSY z)w&s!%8@V8^^U6*(-6JJ}{HG1?V0AQ|CL7kh#TBD@BStn6}9s^aTz4xTo z;s!Xa#%wYn?-vnCC6PGm_F=B92NSEbdn>*xNg4fIYPP?o94^ntjE9jlOU5b94C(n< zE&X0Gm*F&feaQ$`Gqw*qarSFpb~fn0MCVz7bQ+QnXiyPl-)!*ZBkdW)%i^`LM9A)c z^Vp@L^X~eiE;tm#b158e`HzfTd58G7%P&<6D;xS@)kKeEJw=asSe8diM*Fi>ne8B~ zyqvulnrZF~|AURX&t5=@P%o^Oioqvi6YZ6(w>#TSD7ON7Q=gYEdchYF%g!IV2L&Q@ z6ROYtb&Aegm-d^V?wxt55b>S+mXO*MPvtuLq0nLZ&M2P`3A!4$VtFiF8gsS>v3!dN ze`e3F9u)Q|Rd|%WsP)o^uhOIt3JYR+|MRi?lKwOg^Nfqd(w+FWT-^zbpRkO%nR^X zqJA?;S#2dVacD?p?Y+(Kgw=Z~ASY*BiB+U1`+Zcm6Ny1|d=1+=^l)}kqPg=+nOr8V z7mEV@i^~1Jxg+o3*|wbsD85=W;9z;KlzY`PmrOjaN}I%Xb)=|{`)Q_nE1dE=tiqQGxUR0~M{T}{hQL@m9EVtgjXfhl9*stUD`(panK7E$uZn@kpDYb}JnKAQpp)aS zX}))d533j72cdEJ$nKU{)*$-F`8{np^-P8zw$bUO$QCm;i;*p0POBpm_j0ph9Vyoo8s)$&X zG(I0DyJ$W~0BJkV5q&9|!TS!VtP%nMurcKjw}*We0hs6vI9IW2`3wbrRNs3=eLvA; zjsAgFOAgILL@TUdXVz6r_$>fvJSp_r6V$dI#{E@90078XsbtU?ObT5W;P}l&3F@{Z zi&Ts!(R9uiFlCJZ0FaCj5Dw1&q;CIrGPZL(;r}lxKFTA|-?fbYhrok#y1e2mn^fBg zPyhf7YPN|S`hq{PiSbXv%>SrJ>Jx4VbTvj!v^47V7~a*tuKU>Vu@T@P#D_;8E>PpR} z?~w>u)$NwtH8i2HLSek^o>@vX@XxZ9Y2jLV=)fzX@(i%+_F`S55p>Fiw4xj`LD%FZ zjEpIvZdiTMIq&Q=q-Fx?Uh}U_Y^Q}R5-or;2o2{TMNPVn$H|oVh~)aOx|j;lVrNNQ-H`V{ zgi_%war2tK7q)GQ((*}NDHB!b^0TlmWY6h1*) zxJyM~=R^<5ZWJY;N~~$EEpuNj*4*myDdVqS;e1%V&`{P_bR9vo9~b-yq%|ll7nl~} zDx`)BbYdQ_P~-;+#`sJg^)2!wJ`SJi9@Pu|e-&8_`+u{bh_PW?w~YyIK7tsYc5yKp zagpl%dfpkn#C||v=TSy3gU{|*(66wvh)egqW8026;|A{@TCrE7&eBvGbZeK2yVKz{ z3QT>FyiaMvG2I3S*Ku%rAd50m*z)iB0iioiXTtT; zL3?$@-qasQ90e^>MUu77bG$33xiz?G3es8RN8`rmVgP+zb|b%PK?w2-rXF(d5U~#+ zsrOM}+U||uk{hUFD&Vo=Msa&Lx@ctu^Ml26bC9+#giorsp6=)xa;-5HK+>E*MmueN z7YQEBG5A2)!k+5vQn*3V>QcDp@wW8w6J*F`>!9?j>sPoVg%(M8P%a7EW6^(jv|O?0 zP|pV}_zz!70w!ta7m!`O`@18);ogL(m!k_^-beA literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/nutanixahv/nutanixahv_thumb_0_0.webp b/static/images/auditor/10.8/addon/nutanixahv/nutanixahv_thumb_0_0.webp new file mode 100644 index 0000000000000000000000000000000000000000..46adc033c42d959834280256aaf4409d33a1e522 GIT binary patch literal 63146 zcmd40V|->$wqJZH|#oOeFI`^(8N?g3?2>{R#6IN7L90E7VY0D*1!_xAU|uP%3gS3hKd-@yIPt(R{=oUeD_@#l;K(ieXL;V1Xu z2kp!D9q?eg{tNge^lET7b4Iw|Gvsd%+&(urFu?odc%6Axcr@7YfAnv7YkWd_Lb~@~ z6WIAu{g^p6c;F8KV!s7H5nlN31NVWMpEK`;uL6($SNY97^F8jL`5)Q$*N?y@zJMO; zFY?d)H^%3gxBSyjTp;t;pO?_R%y^(W(Ehdj)A#^x6)D8O_$%=<{44zt$zhx7i|f<) zb>?N}NB{^t^o4pwxgoF1uzyp2hjcD**V78D1U7zo z1OHyL3J1VZfmxs@5C)k3u>u5s0c`|c1UA2bADN#Cz&~Fz&%hJ&$K+4{ixFVmeJ??H z1-k1tB@UF{xV<8|Zfx1XHp_*Ojo8-(S3PnJ5;+%z~~7xOJC zE~+e0Yo)eSClw}0jna6hpa-IGG|Dam4o0mae zq^ahjPSq!IYPl%mjYVAQE)q1;5rgos4*OVP8Wd z^0>qycIx4b|K`jP)$g%~dxx*-xM|D zS}A#JGCBL5N!gZc(Z9R=&tyV&4c`75m-te7GL!!MAx4xbQgw=|x}$VQGpF>3`AWD3 zO^^~>gA)&REm-dk>xZf8PdZFe&M4LDvmv0G8~SJxB8Tu!f@FjnLD~LWkQWES0kwi`1>N=Bh8zK#x)7{5nL z^kI|s@hGy)<8jfhGMDI{Sn6rY-=Y1+0Pw-28yQFFXz$^)&x||@=A2WCSi!SHxV=KcD*r3i@83&$%u>=X{+ng+pIx-2l15!H@0}(pf0b8EdBprfRayu zVlP>6?B72R*wxxk9@l#n}`V@*PCWqI4s+9-4!S?{CRcOsE)ycQCAFD-mDiv@=#A2UeJ?&XI+oS@2VK zOcX<}V(D4YM9^>?y7{L0vQup)Z>o5CP%5Yr%405#Tl%boMgIwE52xj3W59n7%}M12 zytP~XkrX$Vi514Z@~uCz?}<~~bs*+DEW8I_+*ozI@rd&hz%;cL%>>=H!p9Kmj}S>LtN9BI(eb}# z)!bGU6a4zG*G_Tg>>*BzhqmOJODk!?8IXO$?ZTG3f1`*L-fH~Kftz4rV_=f~&tnsd zV%jQdxGN!Q>=gw`o8{0t6x7e&SfIY=hA~;2XMPwB>5VL-(JGm?j%vUi-G6Z2D`+t!l4$=g4qW^tRTG6lUr$JrrSp8hHWLro#0wZ|?eETx z-irV$o?(Ba9CB#?JLLVxUiQC%a`aK;z~&|MPSC{Qv7x!sI4rGhz>PH=%sg)|wh`r@ zpr#Qvp3bAan=)w{yZ9ATB6Q#ukj_$ab+LMUPchG6uJMqOihuz%9DnF1=YT%@9+nwO z$njA$uc+k{bzeZDeyUBvKMw@%F*m*t7hXYvePSrJHQI5!KYa^_P};x)Ab|}FMS^xy zHFJy->L_-d_U5FJXyezVaN@YX-bghtwdrGQBHy|e}m;TkXs&K z@+t@bQUM4Lfcvf$57-tEia%lhn@Idu!7(|gMU}yT5o&j!V8x>ZyGGE`gz1_1FEX~= ztYFGlFRs=mLrg|Mp)5$e_Yu3p+F>I0uKDCG>61})-h=r?F7bWtt&;3!=IS>Lx(x!H zA)jPI+tyFdKF0PdS&|))eYMIiKIX5`^%#6e`J(6}i8==?%*59Fx{><><374-uGpOu zk+Ih73A>O&!Q-Hk({p_NATghPlCn>NTZtM0aTQ}y4G2G)K#hLqV9q#Cd0QZyfH{h_ zP5yY^1_NO-Ojv4rzx}o|63w1-KihNwoi{doxti4h$u1t0Lx&#JbdRwT?Mm!Unr-P& zglms;?D05`5OmDQuDqOKFwSNV=uUbl5o-MMg1p1|cJAOH)n`8TLGNJQ+A4##|K#C> zp5g5Y?Y`)Axqt}1j118JPj#A`#!_cR{c)mfSpg&>N5LG1wU`m^PCkK##!9w7n27)!&B`bo*Bn1qAd!|7d*qjD|G(swGjna~^EwxJsa$c~nC zLKVHV8pFH{4V2GxuMu^VDr8O4MT@D1rp5xR{`UMgFIxPi-G(u{z7T<;_T{JHGF_?UCMRxJMO9aUS z%MWMQF}*sx0u(%yF*ei{yPIYU4?vk~zrtpE587$+2Ezk7FZ=B;C$;yb?LfLbff=!$ zusY}9*a6J(!{qV2_`!a$|I-dy!E=aYH*(0}1t$tfSHPivTm~I^6_k6uP$T3Fm0Sc@ zRWDM9NcbUFPcsRkx}*~0D**YiEu-qf?r%|ghn7y_adl224J{79Fw3l`yMnR2)vMtr zjX>a6IC!_+hSkX7-JJ&LIJ(03mHAI8cVwk5J({hjJ0aIlP8iA>Rb_y$*~@b&fevsW z1db>T&>Qad?U~Rh(_-bB{~dbwNx2RPp#X%wyCZAZAISBMmEvk_YlF0c!2!ynmc~G{ zir9HPKi`0zj5GqgN*tz!fdJ@7Ls*sH_hGBr5jv8+8PDG*?d$^yODN_a?X#X4`iyOi zp%mfz%?Z$R&W!Dl6tfKOn;ZledfLd%Igd^2@6|x)nDkR6VX>|MrD#}(AARx&ux{b9 zgK)l721~vX9UG~GwoGg`M&>>D9l?$S%XhSbH_LwX;d5XmhTU=4gJZUyj0I_6DAyFI zlXQUoPhn(x!aDhnYCKi$2`QqY?i~G>j4Zc$$+qyP0TsOzlsc?{L2CvfaVsEGH2!Z> zqrY_Nxpe<{#E=qF0zNa&?zAf*sZE)do~!6Td(Qz{V}*fR7Y@>AFh*5;Y|)02jT zh~F`!GV(e9*#-u6(mBo;{)=+vL|8!k*Y5d`pr$apgwU|Jucper{-yi>&Uycj z{MAtNm$dnR8d@tOL7E1$Ff}>TIa+6;c|Up&a>4g;cv$u%XHnvN1Vmc@Nl^Xvc z`2V_FY!~KT~69wKU;hb(0KJD{*1D@!d_?elvk`Bc6SF>emqy5O~!n&k{==LSKAIXZZdv zk^4`ezh9{i9T0-`HZos);V-O==f{wG%BrtEEvLpQ7CmtY(1)8a$GY(J|LHr8{atdR zDBA!lRp0C8KPgDXcd7yQgd=^_8M3ywI$M#EftIuS4XpUuu$h=dlJl=|7nR!M!#6d= z-N>ol@C7T{P(WIqy$fXzH9!mK{G}=THU!LN)snKM?@iE7cIsrHfs|X>3B;_SZ z9s#W7mAo1+g1Sp9R?pzsEF^T-@m@w&yT`8+dZ?+FjB#27 zZ9)i*mlue76N9gG0nUFNH3=ko4K8sMauPcTo6m zf)$I!WCj2h+G6Uqbi+D$3QCk(rZW*z5=#>5aZ|l}^9#AczC<^!eUbl`f zD>kg)f?+j5>-xz-LLpxyNdVUJ`frJ?|JNsJ+8C-T3u?*Fzl@UQe1R36t?VGWrkugSkEw%YK~0#`1M005#lA+YeD`TKuj=l?7( z#JHelAZMh=m1Y?@TuIU!ztA%9j?a9Jk(PgYnRxyPN`$X)R;etY;`+Iyh>pK_RsoA> z<*Et+#l~F;8l07@1|l>i|F>p*RIVnd`2VL5N58!fm+IPh{pO1T03LFMcZ6>x>yN82 zOeiooN^$nN5i--T%_-WdU-xEcQxal&<*9S$Zg5$1RML8ntOIL93`XW1h(vy!fY zdR$#tO{uM==H#6v6m;Jvs1vzsJe-T_r3O#yc=BR#WvK)N=+W#B6k40zG6MI{gnHKr z6)08)q&Q(THEBEebX?;qp~)Z?0U~O@CCh``xwVjNZhd^(6+cZE$3sfq0EzqdH1X+C zNcFkQssc{z{W5$C{p8#*J!&Djt@4b zIz}lNcgUtGNK=29B~BC$3hB5s?tv+%>&S^lskp3Wf8)Z9G9k-5RK}y$7qE^S5}T1# zeVze5KjKx{8D=^>@SGj&rJa#nxP=UQ>hE!wC9$h^UZ->Q<(-xWO^2wS!yvNlYYLy# z!!9hW?S3?l;Lrgum``Pt6CWR-WJ4^^-8lv!GEz&Z5S`Fz)2P5hg;vufw4sotzQ{oC zYfj<%^?0Iv0?Id4eKNCN_#No^S6Z^m^ih5|B`fjd3Ug3#J2`P43(JOoozyb5&c5|w zE1gSFXHc9L8G(ntl{SE_f`rjnyZqeb9k{!9s&0~;-Pm$&RjUn06|~%%==8WNk~pf! zudKWzD%b98C0G4@W179H$1=@l0{{dD2cp4#T8xz6063`v4m`ix})G78I2lt+F$C z-183Ns0hRdKelCB*g>k!r(JzEdvSU20)opqBrg>H$%gAy+8Be{jmj9j={V`W`$Lw= zU8AUd{dnAc=mgD%j30u8d^pL&*S}<33m$jF2;IM`NZnuTKOa43yXmX%qjv(y5?r?> z4)#-8^%Dxmo2eEA0GMp5+!ESiN>w9LL%g~!B#oN9(eQ&PbKot=Oy^56-eV7))iSTt zDl0R|*p0~i)$ZFiL=#1^Z&2^Ddm>DXT31ng1D@+f!r@*qTsLLErje@zSzW^0FA%)n z)E46kvVEwR5LuT^j(?fSNs*0RfQ$Qiqf@04qA}Xgvs}dez4oPL@3`!UmDY4=ARnkL z8+FZ$#awsY6MBlIm{Tk>?Df5du$IeZ^Y@O!&I81pQN;Mh5kl=j5^}RBI5~Bd;&Au? z`0FJ$leQOeb+@p`?#cT}F`Phgbj~jrUWD$xFiAY;=p)z=*-&!28An`h=dyZ)Ym=k@zT$?4v0^rb%$~-3L`&U_Z{C8`I9)XK$&j<-_OTFDOx(@S(=tla}>OJ zqHyL$0f)V26S3?FtxM#Iq!b0-z+kCIm|zeNQeOgZT<&jX8D>@kv_*MCK6&cdVpzER zPlXA(^-YQlsx0ltGVqyr)X zx2v+hLk<=L$+(6|-`~Q#LWLS3u)d{2?P?{yW_m{RWz9{(F>_NGQ>a1Gf<%ZyR_n3u z6ud|AHdT-j;(@jC%3TVDh; zMw+I^M>*n)Kn1l}6i;Rep{cCL(cWyw>XQPGy=NzTEjfI@rso$!k8@FydEk%SbXAyX z;=^&n75Rxu@MGk=LniBT(6o;0_zTucPJ&FvBoWhMRQm{`;WfV}o~6xdZuS`S2waO5AFj+QjSA8!w^2rU<}3U% z-e&RFm(7IAg=M0t!Bc`{RG85GZVe+mBOYsIgu*J`IRID-kA3c(>W>e_4>PC64p3ib z?!YE9Xnb`@N3EZ_ifR|+&ZIpel@=2ths0A*|HOV%yz-%DLm;J}~YtOy^5pe3CS0E;J&-GNYF+54m1+8uFDy0@3DbcdH z4D={lVp2Z~f{7tlVq#Yy;j2l{=lC`5HyBW+*7Oy@fKGU(JEd6*qcXf8Z6C%V1Y#ui z-*oE1zV?A8ctv(X&`UTtD2&NyrA>U|7RN%D9*A3}9n1vJ*!-f$C9zu~5Wcn;kKb12 zq}Pnu^9V6Dno|D6CU>oZd0JflhHQ^gS*3NC*d`0*^s!|hxu@6@0sLXZXolG)|N7Hf z2f{Zh=;!0uGuE+$qoG0Aq~jK)QqRL}UD=JdN9qT#-F8f&J+c(@EEYwbnB-Ar8J}O{ zQ0;G|3N5+K$Eqeqb=I=Oj+D}Vb>dk+D>qu{tyK1##GJe$SmK0B01ZjjmF~rPduwjojnVR2gP7<42wLH z?`5&0Q@xilruyF|Q~JSlhMJtod1B{&CGqGje}#6mycgU>D7 zrzOuFrJV?0yw(SQr)0k&?rVRVk~|DqB4sXxiEv9V+I#6iP+%2XAn=)U5t6%ev$hbr zq@5`gU-4zmR_rk0P^jkS;gBg*qyb*~Vp%=!BvQQLVBIlDb?x>e>&;+)Pf*BatwSATTVZ`3_gV z-heE^9oK~bV``Gi!ce4D)cQ0LfTX);^dRoyvi@^a64jVJE*&Z^quI{<)#$1(DYm_i zhvG1(lMO){-Iy+lSTWnd<{>en2h;|DG&;2w(9KsdBGWkI<#9T}(fsEf#?OrV<1i%T z+3Lx0PDc>(BCd){zkgugV5+lwexZydbLXoJPc=Ma8OXbW)c$EZxQPm3bHKYfA4K0H z{=WHN%#`x;uFIU2qvh&?{OZ#kY$%`p0*`0J~^O z)oz#2nf+}dnAwsu&-)0lzmH-cv`cg-%If8w+$?l`s0n|tN`WUq6y7(M8qteB%)KES zeHpx!S__#mygIPNFbV2}p{{$+S(#S6Fs*)jHb*{6$?>K}KS}$t3+qcz?);#imK-z{ zLT-;svO|n_I+P*Is&JfN4JFTETq5Y%K0)m0CDq@Kfbo$goG@qTJzIElx)kHpOLgZNHWnbE6ov=yVXo>BYC z^JKjgCqdngXn)H>sw{^`H30jyCr`uv`Cnmamz#!j$ zAviVUB4pjCR2FYwIy;ss>+}rb3g^du;WR!kai+ea@!cPW%b-K5TnExQ<28xCoHT003JM6iK5=L)+=gEYzLyBJN z&F}G?{=;URfAMr24yJE2ku-a40pe(3Ji+<;vMV}Iv6~O|fjI#U9?E>h7bqxSbak;# zKAF}tDa&sB_n>eftFFLSF|waNT^z>O2QTza6o*>YJHojZ7pvl-PW}Od`lU0T9(!*n zoxftOw-*9q5u=rB*@8}+6 zGBR#L5kn1OxBQ2|!;Vw4v1}gt>V}|4!WF(p_JVVQ+aea}RP5+?6L%)QPN1xkqCFWn zzWLL`bCpxE=jK9uQ#lR9mh^^UzK5IqV&RR384E%M;(-&aU&Xa}6aJgG>7bd!YYEL%(<4F49@NaQNrPu5}%`3~1>H|4g=m-g4P$ z|M9nMT_=A~qn*uL)4EcZ7B!-WY|eTYmfjWg;v4bZUtm^X%A@$Az;*!w!h;aXkdE&Y zdmxIis`#MZs)Ob*I$F7gkp$OE_qQ1K`1ChBXCFN6dOd!hF8QT6=R!kH5kEC2`*fa& zKo`LRT;3j1F->2?4bycMVZ1gVPw})B2ld@t`@bTx2?mRHUFQ{KW(>oW9as~FG4GGO zgw}S(=}0B<*;bao-93;DiaVEPy-BI!b${4JRD0l;76jB9rE!o_lD3}bm`lhnx-=AVJa4*+$d|C$UY8_w-dM!T&JH{eUn?sXBLJ+{`w)1*K%^NRp zCVxE*7Uku$5SG{25^bH&npy07!(V@}Wf7k#bTMG>8xzdY&OYM>QV7q&{&|`b8pYSUn zSnd*EKU1OGh+KigmEYVhJwqn;or}&}v8(LrLcp$!~HM+B&$w)_TFj z(qY%PiOFwt-V+ENiHq#ZNKMYa0HJtt3&M9{l2bc8sTrPLr)MK<>M|fqWOMdUxx}8Wtj7%&77ua zQTm{4d)$TwF_sS|SM%ox&lD>c0@$OWoWbuagJtRWOaWU_lX1vD^V5Co(n`=|bCn$a1*DbKo}pg570oC;NXd7vJ;(8uRPPOt=U7nAh%RbY z-*Sp)p=@~FqR4W_?ZbMK!N#5Au+zw{!~_7XrRh2+V;5ab!vZudqwxqVnR+5WZuitMCIV~uSaP$miju|-YqU!#W&gxF_O_(% zF8|*X8@j%HDO-?T)}fI8W4oW=wGxyk{C%mCDDtS_6aI!})|nrbk(8SGb>w%6ZX}$* zjv8>bI)D#gTu-I)2Yq{JZJ-=#8|A9hm&lhm1k`-a-|7iWN^dbfv$LBer+Bpg4>6Ah$D6c_50iYX$(*c{w(eOoDGV{K7|yc$e~ z$kYtvlGX&r0ZhwvN)92w6(+qCi_-wEHJ<>A;YX{cHa$(RR4H;*O60f?dvVOSy^r?e z3B7I~eiHEuh^N}%4)Zn`xlhDN0DZNnoQ7GDFLsm6asj!3K|KoEO%uuZZv8#Vw}$H` zz-e^sX}%OVR1Rvo=H=|=$$TI%!P9)@O`x`#nTJ}C#iGHXj<;!@8w6`HmEm*GTN8xKk`?wjNn?ZFn`WTKlO9@CF( zo9U^Qru>fru*dkg=DZDesuv0{zheW#yU{Y;P=75zggDVv)2t=5pT;BdpcD&(f>a1F zKh|dwv2cH$CF6U~7(DX}I2rGG?B=*kyQ9#8T=DUd;lYrE@cgA}+~W)toQ?VS#9s`l z^sKI}|uFW0p|mbjdO*C?3=+X~#JMSaOZWSG_l zy7fcv-|0hf3+df(2uAqtMNT!2u;i$G0*m*Z@=_lkM&G$iIhakkYj6*$26*iK438ZEPH_D^v3b7z}gGXOr|e_bw(bOcJ#CBt$l zbSD{T?1EkSUoPgMF8W<698VJhCbRB2LZ(fO6|G7{q!a)!Y^u=h(I;TOdG3AA{wXn^ zTh%p%{P*%xn@bE5!i9SZ8F2#|@PV)rEs8YBJSGg3zmxn^U{x1EHk=?{Vl-K_o7+YU z+TsCy{C%J$-_v{B(;%5l6K2yhieSzn=QdjBoVt-c87N8g@>593PtahM2SV%mqWYaa zUG?Q(L*`G?0WZF&j~ey}hWdtuMW*8f&nRaq;+7dmxV~u;m%Cj?&=;~~$H)ifrL+x7 zf?yR|bbjKzZCpl!Gf@g(bzRrDfoBC@bXDo@i1L%$fQWRDxB{}TJK7wiL(5$xejwm& zF^W+&PvPc%L1jfawv1Zjg#TnUe$1afq1fhkV(V}GBPC&`TqHXg%%AAW*CH5Sd|xix zNNN?uT4zIT^sgXFw3-p6#5gxYu&F#lzX$80J{EoeF)8o|L#E-2Rl&|VvA$2yc`E4L zoQ%AVUzaP{#yEon9mh<)9}cro0D>DMsSag=;AIgvE7W41tSsk3nXN88^|ypm|XhBkR;oOgQwG>Pw!Ljj#u;vERDJ*+A1|4Y3*Z8)w0opb+S*R3_zXuT6 z9}5($aUv|5wE|gxg2!G#3T^2ZO```hGaZppIGEyF4X(kt#-F`BbADm$G2fhaaCZhh zj0Bz}Q=x8yYWX4kv@lY!wb|nfO^x48u}9w8yzC59IhQ0Wh z*8(fkdHHiu^pjiL`v}?@kAE^90R$6ncX+lVur~RFJtMB7aGP&L4rDqCo`NNepd-foffN%$ z!L@nA5Z5mWMs%^^EHccUvbsCuM6%(lK@$?pv3&MY3B$mH!g_@?x$eQ(2;PQLybT1< zNOn~l%XlFu`yoQer%a+le9L=>3~`KC#C~6c0%0HPev=`Rk9HnZB%$laGfQ2@7i%Ar zql5N?%*^>P1i1s3NoB=u*-9|0UX*B#lry-eP%)$TVA)ppTYjAP^0-W2Bu(zwsub7c zXfSnCu){XnEvW#$DtCD)=MZYJbbu`$E>dsW$nomj^$!nDUusR&+9-B-Hp1pu`(69g zfmQ|U$Qt9DL!`>^Jx)3wdG4>NUIHO;9CFrHpFCieneeFLePZCHuC=Uqp z8JYh|#w5{W_JjP55nGZ!?x;iZP5-AGlkO#|7LFjHPhBw7n&7fBxNk{D1KEx2avfKG zq=P{`)`^p^ceB|Xn>ju?0kiVTix_0O?QOW#%I7&w(5PiBss$ceA~qC1 zYWUBa_{>lp()xlhVy9Lrh@o7QY-6dRpPJJYx)ETfidnbOU(xZ~T?XtkBaS?vLgaZhr%qex z^rtYeJJ5^)1R2KHE1Hb_+CevamH}Pdm4fvML-px5+0*6{?YC*sI-)_!?FQ+rU2c)! zrA|Ez=3bYmFw%#9y3>#AWT>g*AMLs4O_JoasjtpFD;5dT8nkyu?zMA7DYY7hlh=Ah zLe#o-6Pa7T|En3tUc1<6C2Cdis>mT9P)B$G)kRaDWBv}}1#Re~s>P?Zy2}>sbHHp63)D+k( zHQ_+Zt755=>rr+CRUbd6mn8+xjVL|Cj=eAk7dV{z>m7J%m69pYKdJJKOuLZTcB>Usm5_8E;YT`|3AJ z(KuuRc{nYhk7-$;IOkD0bYJORLKYRf&UPldfTHbgK->sq-%B47MC%b36nacxN0)@P zNhA3+&EWh#b1c1b#Ib-uhZR>TR9k&iRMhQMJE2STT`MR(K?3^#PK%l`+Oa+12u{>E zl2&%(6B~0TL7Jr1W8#3AYnKKGq$i1;%G#^GWA!~gnA7=_k8{6Se8*Y}%7iV>{cJ4e}VF^QBs?rcke_PUI55i?Jp~Oa5 z3aQT0WG6P{|a;U*&RXxYmzUZ6(TMoi~}&yOtMfZ`UIxVu<5J6O)6u?BvAhrrKi8Hii^*|O1s&_h9tDz$vt5+Bj8x|X|TePC%CEuZzcTLo_7r;O?wUe-Uf0b<55>aFepZ?fEQ#e4w z_$wFT_aNiDHw4ESMp*5)q>RI;Dgy{QI>uP2Sz2ywWR*`9+g&h9sb-B2Y;Sv=FZh}O zzn?n(o*KQohP}y=T<$Rw&*;}WxGpIrO!kJTHmv!zTgc!gjwmUJkRR zbdENG@Na7-8i_@x{YhUqWZHyEfsaDsM!O?vNJzb&_@0Pn>k+O0(`c*rNA{lSVu9d0 z`$bf~R8ng}aP??>XpdfRx83bCWM1qnlsloV9Eb1f`J=Wd9QIQUe6GVmm+OGk=(J-# zm6@%ydT1hHDF36_AU5aCo!9no`CD=IkXe@?0B2N5_k6HsnOB=NEiSZNn)_45ak zI!R(HL2o%X_gm|nv5yuCxnrP<=DN@jHUtmtUS%!1Y4PZ{G`_l6A00l{g-dir}U z87#$OH8`U%}zDW;6y?u&;SDOaNOKiYdkD8y_@l-sS0wK103}fsnxUNn<`xnNl`ZvA^vI@m#_v) z3t1MJl_;akY4-VIrd#Z<>Ofi6rQ-5w|pL;!7m zif?-=95JQ7+wPGmNf{U%JH5>CON_)bim9%KG`|2h3$*z8sM#O*m2T2;pAR`|L%gb< zuvM9)f0UDYn0y5fnxu?je#A}}^fQfo#~g^i)6{+A!+jo}*e*?Uhl^m(UjH#bek~`9 zAGoh?wtGv(Ik~9P1Yjsn*ilvN{KgrO0=Ku9N)ubX@iDq9XP4J~YG?$dE@dt5Ib$T+ z!0jYA#)E~_O_Bu!Xzl$$zfM%rbix4Nz6=L}_3_!bg4hi5L?=$l$;jOHQrY|yhg+7c zMhl8R-3LL8`}69c)wB5j|i{&3xBktf)rR6cFT0-3caEIL8wB~AKMw|MxFA+U%(L~`UYC2 zB?Yd@F#JbjvJ=HI+)XEcgg57{!0yk{A^3rI(=#Gk3Zi;zbAtk=GvzVe%s;(!q~2yTMwc=S3NEhe zoiCE(yaVPSqN_dl3TsM;Tvts8w5-X@pIKClh|#}Np}zIOMuK6TC<4SG@R&5P9?-Hx z2_c7OqbLQ~S(<-ufz#clc} z&AOjod0x_FvM|-vj@G}z^u95XOEkuYTboWSRlMlxVKu^!f)v7{bpjh675j>r15uGl zJ`y8oPp^QT(0yZayw0194*d!7`_ieX`In!p_8oi?f=RF}#(>$ap;j(c(OCK_#9#JQvP9o@(A)>$I@t%Mr;9{#72cWCW}`6d zuPR@E+^NT4xkA84G^jQ3<_9!NOh~wSXxUAcHwUuAlC zS`KA%04RMcEO|yYNrQ;LyO7ojmQvZRjulF#>lt(ZMRIQyzl^M5i&RfP2YQ(*lKeBO*zysEozn%p7A>~9*~sOaEw(9Uazo;#aA zB!5HQz*`+`YTB^xPtrZl8ttO*UfT?Xt31&3i0^iNA8tyWnL^ydP*Firw)R9%VG(-D zSG#;VP69wa2J_#H#W)y{h5TAFRfmKgJqX@PsLdqE9&^&K7n-cPa^V}4hdar->GF)6 zLZ^8mb{rhl_ZCg{Wc@oluO}?@WW!0$Ik#UUL^%w_zfnF-agh^iagY*SNjf6;G}5R7 zW(;MnK|#oNYl?$u&D3kBT~ia-H@g$K3clFEMlhu222~k;Ii?~(z19NwTNfZ5=xLFh zFVe}EsN~>f=$*Uv2Y=BuC_MHL-;1NSpQNCZ%^zCi*;P3+oe)O(Dv_sH9+GK`m4ER# z&B+-jE@02Gl2-Sii}DDc=3;V@8CAYB)Fpub7=QhMyKx}X2ErYKB#9rMv7^QGr8K`@ z;!T5xk#vEzy&m8TvgXf4w8{vLzg}TID=i5G zw4H`B5$|xMCJGB&Tqw8)M+}^kxBDc;Mhc>E@`c*{!hgAqA7ZRmDHQC5 zmj)!gM`cg|^)mEhms27roWNc_t~2J(Yi16TC%V=GNs5h`GCKS=6ZX%3}bd=Rwk=l9EEyVeUy37XE1v}6{~JJHMtfq*X;!ih@Et^2Xf zf&_fJMR^{D?MF(<8*S(}4-3eeKMm5VSmmauK;&ct)g0S{oc?uba`1`>QniU@WKjY; z@2OM3U(UYVbIe13$$_gpX7Xj=g0J-B9Vx&i+E`+M6`Bv71@_vV;$4sL{`<9>DB-^t z`RS5x83!Vgj5?0Y9@N^7hXvhhwJ?SI!RoJi#G6w3S zAsL0&TJe)31yBA$_MVQxmLWyEewO)IS+3u@8m7}P`BprqPV=(f3_u;BE5(5n$}V1A z2Y9jCA?dl~J^Xd)s`HR9AzuI_Br_|UbV+1uU+KP}_g-Dle3d^hHZS`pn0w_!WQ8K6 zN!FCy*+txQ7wD?Oq8ba((sv?Ee2A?oDo;pt%~=hA0T{z1UnAe4%e@qXO^*%P$z_Sx^+QwgI#V}mwk0#=C7DN-NUtfAL zP~!{zxrH7mH#7^wU>~SJaKx+OfDR9}jk05-6tl|CW5dOEPwmLbcXAR4$harl8KJmr zZ6`9BAMO(0=QtRiq(AvZdI}q#401MNfrnb3?e_{`J=MitKq-~y58a9IPs851lmrcY zOPE_QUR(MJ%x@j~RUXQ%KdnGNs8h>~W- zd-{Qe5zYmr-19iwkjQs5&>2V|t#}}zFQQ(SO3=+PYFe{4ONrAxcy|A!$$Gp4)ybs7 z5*WJ_+(lWRY%~@sL9=0=wxwKl6ntaCx}+6g*48m=0fd!X!0a~2+9WNyk1_A86W_qW zEUGdihgnu2Z%+>or6%3APpzc^Wln^Hrj!xI_1+8Tgkd3fFCn$!nNkcYfCr+(PGkzp zf8^;1yT zI&|=0kz3Q`?c2h{ZKzJJ_(p<`1_D2jgS1=_!(LAtkq07XLOk0UP{SKwxk#Ds3~myX z_*sDI0+5BdO{4bi8o8V7rMO&d=6vGJ{Z&`*(gAuh}S z7G5V6$X2IXJeqWR3H2t1Cl`VEdpl*O16rO8l<}HOpo_&8{*I)=XitHk@a#vjfU}33 zykXO!_DMGnCstH&!g?sukToKF-KtaU8V;!thTgG_+yzFzl(AW{4ouym3>4$X6>Vb4 zM||D|NdF?laZMLho1woHM|d7*x8sRh!Fm(S=^GHp>Df<1vI@4ntuqS6hI<2fZdTQ! zc}=fIl^#EXI(BVoV77m|eS4G0676Xa8h#M!=V==`7Y?A+u&ca#dZlTGvvQ5H0pAq4 zC%a^->~LEd=*uXNODfrv{*{vCah&yMzSuj@QR~d1RY>fq>fbP&_1*pRMk1ys2Q+r0 zNUn}^dA`INzV}-j{Z9RsnVCuGSG?aq;Z6xs7mMRT6;<}6%$WDfVrgRU_!snv&5lKD zlGw!VEdlkt3M^8QR56~f$L?$`WGX*%MMWvRz9s=jWsTNbFR;_-&kCA)T*fu7^HiZ34$thRR)b0`P>b({Mr2TF6E4irv(3Q@$3m(|1}b z4XfID7-S!wxT+~88P`fL;ibfuZ-=QCq&uXQ&j>(#;F&lMeYSYg8@=>5v`E8!UboaX z7DB-;iip%#@5^H?*DsLh*49`1dtvq;o=w4Nglf)vKcWtv>EWfS*8tmbR7J*zk zt^$KvH$>@hQffX`t>YI23raQ$7p4|U$rJX~8~$k>{2nr1fP}J%iROoVvv7vYj%_Yd zvL24W`DLb#*)0lr%GPwkv+++=-9$$P$Z;ysW!TZPJqgO9yv9&=3GzN*q@y|f0rI`! zfUs>vspDUJ$;)XF!s;BQFmK?EwO}%9}?B{_>3+H6Jhj82re%;R;p(+PDU)yhPt93&ARi0Fcim9OB2GF>dGI!3lOT7=2ypBoXTMvitFhcym5o2`x-H+P-=$gljKpc zG?nkSdMyDXlH^l_I2Y4g(dc?d1(LzB*Z1#^yE5{aU6*K@bpTdufe-kk4=KSS3=f{)%$DV#AM;IsW4nX75GMNTrT`$$=>&#VXlT`Ul!_a_W!S^O zv5p4plpMP;vZ`A~>}n!9`*?xj8Pb=it*c%s0a1U;D98uV!&`qhx{dgAe zQ72Ht53sU!02v67(B6d)Y*V24Ur@ebq~mz}ad0z_SrjZRO@n-MT%BhYfJDfhFXsHvmwJU|5(|gkjuySYGWeX?iFCmNjaO zpwbZ!0rNtu`<<31law3rFi_<^qDzJs5^rUvj}s|DEiA}}&AW@+TOK%q~ zp+&13WbL>4%xV?x(AwR8{auJSf413)o=9be_yS??9_Kn2ejmn8k(j#7q#w( zX~A>Re*C346xV$a_ucF}%OW8Pzz4PJN60C@J&{RKwNVp5);N^wcnqIECl(=k`7u~@ z#MLcj4a1>&6IbO))-DzYLRR509%`Me;3;pWmb(WkzlvzTn z=h&RYN!8WZp)-tN7dz;05D%A1HG3+~N@7J09q z9&|av^2U7cJ{7I-WU?hm`y?3`q58?v!mAz;Kq{2kzcsp9=E9KcYBaIVJ~sBE^PCUJ zzf`{+05oN1?{z}#*cur7s4zfUYy}A(U=^ap@n7`rVVmk#lV?JFies-H5_vTxO9$QV z5f4d}KaIOuZ8a9|UqwE#??ErScw%ljR(yD$-|^p4VG*D))}SDr4#HO8b6D%7?llln z6Q(UmWW^s0cGtHqQu7m$P>y8=0?IaQtUB#3&TGuA15!qPs*iMwmpXW`|ES-pOcX=3 zAj+zlF_6+)Z^9(6qZ;?Gu0|hbF^lWtH*STdeTCKc_x;pW2GkE`=_4qca)M-)FUrov}MeV5bb|a)vbacOIUclf!la`aJ=| zaX=sYK$;4K4AsXM1_HLYO&wf6y^G#1*YAW)HoHgyt{(;-&YUqY@WJj*Q`O@3E1wX+ z*4)XbEb-S4hF`8r9B*3!MN+1AxKkQn2qRGppi|1r8!|*gj+TNS--3<`G)5qW+UnLA zmwNCZhu2Hzmhy016Ah9nlw{_la-~tX~Qq&Vn4}qlEeX zaa%Y_t&bMe^qms7f=cgSQ5by>&}Un%ij7srY2nTTyf>XSg7ASKwwB<2zJUPf90X_Z z=nhj*0Qno?#fHcP@D16c!t|iqUn%@1%$264?gQ|VJnaawEGa!NwVJ&%UAl=bcOXDn z7PV2MSrBM%e5#$r)R`oMO>^-qOit-(2@(CW(aqW>W9O{_tvB3ju~{2VxPA#>IZ}#O zpC@(43U`x7U662krnVJ8(V_tW2aix*pwq#6kv7YJrYA?$Nrf(AJvZgh=H+h+p-RF{ z*h>)gEFIj((|eV@;RK)M($6`xSSDlV1T3>c!wn>h+WD7V;*8%i>hQ6JyVd=AHm1DX zVu+-jGqiu{?HFu0R&jrQ$@Q7Q?-Tu611!RN2QTgog$MePSp`{Ky`#s`!8-T1c-k-w>fbW3dlz>r;A=BcCKD5?sR`5Si7`Vf^6(7V7|L!~9DgxSDk>ElWCmex(tPT=AvoMjLBchD}Kca(?qE?-!VQ$0p2?jC&Y%rT!+s`IFM3i zmt|-cDYFN zS9uO~KoBPQp30ARnX7Jt2+0AN1QD&bFVgGNyQb(LoH?#M3TO=%094?!4L(PYyua%5 z7)CfRiV=9{4SUO2KCts8?+foPw4@ zvBG+9U~^7f^FowR1k0ONqTa&~F#aWl=hfpDJU*yWXx*GSp&Brr3AiYo7bbJ}{EPLn zzE?i-Wjqi4asI?#rw7&wSbolrx63$z!&Jks)y4|xJp z6I8#MLz@Md0%*la3I1!=12Is+wM2_RKX3#!Tad0RjNSm7BxR2fZ;VQT0Ub;q%{J7^ zLxI{rInkLCLJ4)rl2hMn&RZU?M_8Iw~5!OHah2 zM7=`?bSLVmt<#&DXrel~c0S&jM#89`vih-J4w=daH2QeF={?GHseB~7ayE9L%-!?s zf!!Rgbk|- zF6E|5C@(b%(wU+}AIzurJbL1;BFb%KXiBcJ`J`TgC*~(eWA@hgKVl5G%V2@~CdsDP z9smr9C;=R-QI4C_1e@K{U9d38`eD-C+6gy+pkA^zYy6#0Zu0)fi5Rg<_J(R}V!4T+ z%hu#wWi3kuyb4ETn&*6;rx8B(DFn(XT9lkovXJ)TEYQ+^4B=ODci=x_GpX%pUG{HzDDNsK-xb}IRRnh zr3gOSpGyuBj)NjcQ!VXK88(gIb!i;L0XPr(IGAG4zC zD6N=@hxcxvg4q;|=bGQQ4!v}<(bkSJakn9v-W4$iSE z!tE!wWXqv{=bGMWrKX6>m0U}+Orm!J*<`fei0F@rlQ}GA2)XYX+K@H*CEMj-W56Nh z`(s;tyXnrignhxu4lFSv}r zk7~UKribWY#%bp9NFn(Q;?8}@Oi>wK=wjxZlqtQe$iUq;!~KCQ7?*+{}^ z;bx8xeSnJw>>oC60)H0JQ)f7-H{7T6ITdXR>Rj7Z^&(NPhUov{M34u%KSbx%h|QiO z>LsA!nU{4{ufmOp$9?k`n!UpoZ3|$%b%{Z+^B{a4pTr9N(a5awn5eJqm7yRfawc(N zeairqH=FD*&k_z`)YWOy*EUo3OR4{<0c&c{1FL~CV-cu=udj3#wW91og75jgU`usj ztUvlMIVqO9f~&Pntth)5??>8Dj%kM{7R=`sjDW5han4k3!i0!|NfU35V(-gwNQqMm zO*15*H4_5B7-=NFn4ay3VzGMm;<sCG4i;~e%(UR=4i&nw~WDANv zDfczT#Ml_Wa^|xV$*>Yd4`qCA6Ih%xyZ4$G5bFWgMa^M_^vLQ|HF)xLSr3gA}GJ)xN_;7u`Q!wO~jMARu z&Ru!!v8v!9GqY^dDNYu$%%L93jIAs0Aj!0uz_6HQDlieNR1*!t%3Ta{3<3K575DWC zP`K5bsb|5KkU(lNKz#3b?QRX!7fD~z^Rz_Ohv&-L!T}vcHhV6ayI&8Vfh6}!;J*2R%j7p{DE)n67HHSN1q&A`$!_!{7~+iIP;;QB zgz1tCYXj*j5x^R1k01>R0nz%tuMheQ6qzr` z*H8bwkuHVbDoXwAPF`lg{ixoef<6LNSk-|Bs9huG7IdAJOI%)Vbc?Kyd zb&Ohx0l067CrxHQ+ilcHQdclKYtK3=7z7QL(xrp+8>YACJ&dVAq&VNIsd!AuHC%=A z_HEu&2y8$-6W%h8w4J9cZXf>L3>~5#1=@Hy`Q)z0>eE+iR>kxepn#P}j>qt?o(;}2 zs?Aes_%=KZWTAmgoV{{7gFukXge0g9DJ_%Q`*UX>`Rdq05lli&lq$QpgK@02RxZ)4 zrbYJh#0A#S(#aw2hwSD%tVMa^2yz7(Xl9BhVTVa6EuXP+>>BumeNrbxMGW{*8lMiE z9kV2{+sBA?M2v8!P$!C2V$8D>yAgXVQOtF7|`Q0Q%&m52MKmgGg0H?$c#)Kbam`bI~o**G&@v z7D8PnN#_NI?y+{*T5gT|HZPvnVRJc&Imd@|py9&fNiO(kyDp@a$PS@jJTDq(Q<=Wp zw}^rwV|kbH{`6JeL00myf8KI^;o@q)4R+c3jEB$9N1a3eB7o9e}0A!FNsfC5?s(emP>%?%2BtVLtv# z00oed7*AY%MU9l|^&|slgKcf_Aj}kcXMSut`yuP{_nMILr%lPkf9PWZ0GYj48BJD_R4s7z* zTlx`}Hag&^NO>s7i&oYlL`4k}2r$0y_`!eX0ru^Iu+~ceRuFA5(^z%AYPkI| z_|k9{2pJ`KaMV=ul`8SpK7xESbJBNpA|%&?#+Aju95m@kDu;AjCile0_;7 zE0@!>by9)bem(G@-f3RpcHDw1w10kD$Fn(LO7%jlWgp#tGTb_rQZVF2>r_8&h<5+& zl^5PxU^<*?;Y8CR01=Ca8taPgUQn(t_&L&JRNR!LMfQ-pKrZ^41lA#n$k|M)D!W3# zC`NSrH&6b|9^#XuRZkM9$N2tLxyGyV$k{`#d4>oU$Ca5BjI$W=)3em3;ONsUDH}(M z!}NjSa<~+iZIg;Y>0Jn}^pkKULqjllqjO&y;Dn?EM$l; zFMXXUPLMfWW$NH@Zwpfv1hXjsY8 zViKhn)h)W|oVxCet-oHpsrhOx#vH{pXemZ`%0lSGHU`|$bDHyhY!CK6cmvxr~KoBqw!N;Pr>}WA=SbwZQ-O+pj@8)xBwSEKLlLp(M*d-{G z9fX&(SAqsq9y6Ym*O`e|#-NEOSmPjo;6w0_tsPsD0kJk;S?g^6Lu;KIHt2SyLK@}k zC-9+H@0ZkCL){K_4L9!99=t_oWeg1!({2@NrBLdXX~QeHutNr;Hq6)Tl-8XAaD5abDIax zarM9mp*>5kyEHjIO-+bd74l8s6Dw)|(kPyxDeub$MYuUFAp|#FmBb%{`PMt=SfwiS zwkvgkmYg*`rctrGH&&k;mGNihzjLuPQu|dihha-32xUo2`Fd~_1^0yQ1?Sb2@5UBf zwXKj62So5sCmvglpAKMFl{uKx(M-6;zy<&SKv2hDhnSsYzIabCh4xV2Y8h0P-90_< zo;GZ}CVf5ye`{izhrM^>68acnfqwaElCI0dmKy@9c`K3WIs-F=lw+4s9#(le6L|zx z@#F3Rw)U?Z>Rf2-ezF8T0LJYRoehJa3w4oZ>H=2R3m>}>%Qqm9at$nrZ3bwB3rV1P zZbuV-wDii#ptRRw2uM>UfW=T3OQGx#*rn36S>9&w!G(?nBKNY9=$o2oqCrUgR6`Tmn(;;0EB2M`NPMzd&>IT-QjP0}>Ov3n9BJSHpraffU_ zJh7G|D{_&}_3b{U`$8xx{VulD)d?C>Ocw8uWfWFZL#{cI;EiZjjq;8)2X1-={E7GP0arN2x6kHq*L8*cl> ztjvH2+fmw0>J{?WjhR%fTvj;PfD|T`P!v=M)CQj`mR5@+X5mmb3ZqHvL7Syh=Nc0aqPEw@5g${h%H z4Gd@CNx-PGmm8Ksz2+Vcz_#?1-(MuoFAoqVWO|Yux&ZW0#D-J|7+z9YDt?gOus$zR&9i^?G;5qh~002gi2J$77jQ7_K8()T}*p zigSL+sH3M;>@@Y6xtNLy|N9GXV44mruaAI@#3~MKG^?%v_-($=sGmhx@BG=nyJ?#X0}(2=dq*Jswn+nYvc=UcZZh8Y(bw6Hx zDC!Ns=%w_lv4?gBc|v$wGBnk*x}>3jv;R-RihWsRbMh>m^Rx0T*wxHet~+xgm4CsK zyMUs0Cx4y)j|ZxHAEk4FRT?YwGAuk;loc1X&VBrbeW=gsx4Qz6E575eKjT< zPwq(5Uhs}FU`Z&K6z5dgYU?h+Q*}RDxi6d^B15!u6FQ0=K?$9+)LW0InkrLD>a##5 zSK_hz16dwo1{5tlzKz%rD_nsDCCQ#`+8H7(-x;~Gk&P=D($Uv=uH~-2Zh8T!=XCrpk=YyAUB5$!5`|0xaZImFT;g5B*O-u=&a6e^N`J#u% zMwFG99?SQogdFJ&V?_7_c)B~X{q3rM%?Egwr+A>cRDr*Qoo-`KzG(TJ&|Uoki0ykK z^G4g7WjtWv7KOBaWQnsLA77O6yzgC)qnzWZ69YkqzZK(kl*#zG>I7BID}v4R5pr>O zeTDqYL@KYIHiFHr{j2fF9wXsLXMW||3)BAr->W7?_i+w!6Fjfsp~EtyEx`XKK0-aV zqy0>sROEJ@LTNM?VqP$de}Dkn4;F#d4d&;(!5#i30u%a44dx&PpYf3Z60^}f_R(_l z=1=FB(m9xj)W&`Oj~x+w2~M~V^$^PKabtV>Y@asRgfMnod9Z=UGU=??+|ci=Va%J) zH)Ej?NG|F$=hq8IcC1G|@^g4N#i@Mix(fQfL2~>{rBII!rXRy3YxO=~Wje}%Mw*Qz8{ga#F{!{D{_lCQ zU*~5j_};R(OPT*pWlT7cq%k457^E>B4`WPIEj8iVd{kB#6H500M>7c%C&JU83+pacX?8@Cs#N-O z?>JG@DsW6?xXd-!ZRMjm%j?>8-A^W+M93-}@x^DUULBY^M5;7PLktD}SDv^jsNRt1 za0Xxyeb|8Ix7Jv}ky%s8IMuFz3j6oQi#1)a#Z3aB4L;en;sc?V zMtr7eq9*g~P0w!P?$AkbO(6_S8n&6@EZ-!x(Yw=ImkW6X?my7k${^CAjf8Sh1)&^& zLN#4=Z-qff=-^-4$P5w)oN3)5&0YEmm^{DJ*TD1Rmy;1 ziqOe}WqG_#{f9elbnH4O|8drGJJ)j2rPK))dZ8-F)kR=ks!KqTp_zpIFAYLmXk?uS zXS(S?`q8t5(zdM057_|+8v_n0-`}OwCSA}=c52!s0I*8T5%Si5VS8v+uA)w;quA{J zhryfW?O@WEKHI5BA&|Z?P(PV8%XExC$!QqXOJA9eY~(wG-amr~ab+p)TYYRx{Fqm6 zC@XV2{>Zo#5zgyzV8pl?{6#=doZ+;=@PN{0O|&_vYkW`C z3q`&9W8jw(KX+BL% zVTJxy%c^#ptgGvjp&%!4CURnZO$U`Vnd&sn6!c@%)@s((G*R|Rt^2J8Yi`R2tA#OR z5vWEsdYXh70N9~o1;RU@P&GjLIh{OuEn@fYxa%*3X*vq0c4G1=Fgq)stFAD40{BW z-cu(wI^{SJZTM9lwX4>D&FVK)1D`rnnP=BIE1bGloQ8lBe9(HPtHClGZbuV0A8)j$-CZln46==jw=O4`7^OxdoZ=9YLFyPX# z7aXT?J{f`$4>P{{-zDZ(_7N#Xp=x>gs=S~*c^B74@pF2MUy1ZR!4|ga!D>L}E@n8> zq*7*#KEaqIL1y4l_cYo|IN_44&X5b|t@pHyrb#2093Yny0zTmH^Qxh@5Z&9R7D`ET zVZzk^tLf2SRITDz&-Gwr6v;7H%PbBN8EX z5zhMPhvS!V(+Ep>2mC6l=@@G9cmwJHs&LiM9{#mb@v_msr>5%gCgL|uD_?=4$aqG+ zdjlSbbSe1KP#WUF1Gf!{H%>l(1g}j#qqa#C2usmHD5HkEP#qNpg!HR`b56CSpFdzp;CcK~yf#}pMM)CQ*Ef(OXEmUMeXgks05CB}G^S+qWS50iweFGpgbJkKH zIq3;c#SZ(>tJb{^sDHNA=ZeA`U09fcu!)3kSByXCb$f{}L7UFe^e-M~s1x*2l&&IUivT3JTm-RkD8Yx&%DGNQCoP&)6_im1;F!>271u+| zaXWRnP4KOM?f8ciSLMl8M**-vA#f~f(!bhZ%<(PYwy3~h<#nST*ojvO)6lw4mXN+b zI={`GGSVO|kEbaKU`2#4C#=DuhhCGL=hiQD1Bo#3=*-)%{ua;eowSkkuj&{|w@lF@ z=LmUD1J=Mq0q~Qy9eN%~T1hiWc5}QNslwe|Om-uDbi0RVJrhiC`DmP-t^|Hoa#gR$Qw8 z?lL7-X)w$($z29XDGBQ)Sov*3_6F_z`*GWnzi+yS9a-armtXvef^jaSRs|n zz$QD-iSKnpdcuUHOt@?NRY%&@Yho<3T88ayt5ke?w}Nne(7WSqK1}7|g&IqKx`Iid z<#4xR^usLipL{OQX7U=uM8_zimXp0ul6G2uWV;Q8QqvTrE-7iTzsqn;r6ktCq8hWB z9kPc|TQM(9P*SGa8Fyg=|H9D1dvR*1<9fg*AiZsMQFv)|?*&rk3Ea(@adhwz81`CH z6x(Qb@Lg5+g7C+_aU90%e6J*J_15%)loA0Hx5vWzV{ek=vIoh;8W8N{*zyOqKh zIRj6C`R~6dt5r#{Hb12of-l==^Y9d?!m$KomJefv&f>phRzZ}X2$ai6EY;Jyq~^Tn zLF=Ni3NuoGkZaBfD2KQjNmY$bFc#NO0*PPZ&#!BD=9)jtqN0J3g6q31nfoH67vrVq zh9I9=HD;(w(h;g4tlb5xXhU>Tr}#;$=U<%XW@aK5eXwLOy@H&aZyBtd1ITGs=WPCI z;$QS7;5)D3ERo+g_#%Tk=>&7->4*4~JwA-LFy8c90-3t>YKijf2%&5ncTG|8`||Qe zMb2^!h2;BF56sn$!7}EI_JMhJ>s8w6A!BFG3_cNh_9$$b%xkL=^xhVE*PdcYT!Q{l z2s4UFd{4M*jfS*d4htfa&}md-M7D349M9#kH#a|g4y_0fME34dcPq&^HDeOd7t`Ye z$Ji(yUmX^oZ?I`o_mA*-FvRvOD3oZY0iE8A?1A3QOi#wdEEI;@DiN<>L5FUCZYT+6 z5WW~+UVh<;W8$n_S<)UntWb_`1py&n3@W zKVd^ZfFMyt_&b5iPW3r0ep?F^$`=DCd5w5;M5qEK;(X{n@Mlo$8woy7SsV{Xn`#3F ztsQ@J$H}{W#YI(evcfS$3y{F&CAaJrJDX%NQPyt5D58 zV;G3kQXgF^la`x+`5hPOe8{S@07IH`Lp*m6`mWBDXT?8s1w~4Kp;%4OxDnbs3R-lZ z6WJ5iBg_INRk^H`-|Y;7w4t@hpZ@gcFUDd>boIuk~-X~*DWcR33^vV2Ae6T5iao>vZ}Sw?XuF^+xDum0NSt<=A}O< zF<9p@7KJPcTmoLg+MTkBHb%(~?N65KArlQ$w4o{3$*E-Vt#fQb`M8ccwD3}gOe|f| z>_G3jG}Z*c$<4id_uH%DM3bQ=nWYM$q5d${c9a=OWs8Gd;{MN3Dt-B&?aqZs^Q{ZO zjDZH1a0b)EUH$8J^)V99LU-|agAP-X7LHSP7g+UDcX=@0hhzzc=Y9h2Uy`6;jD4@s z2c{op2O$+K21;4g0((B?z-rQ@F>5olQgsO6H8F}ZSKQfOwC(Jw9xbDDd;8c58+i5s z|3EKGFc#w$XQ^yl`tp(Mz{7Tj8R_;&Rph*C5OMYrD-V)3`4v*HO)3=KK5DcV4yNvu zJHe6T#rL}nw2-0bt`&w~zv=bh&8p9RSx82-g0$x0S4&Yzg=ns9L~}7=bbe)3+CHy~ zeysG*s&jB3I1|!1j*`uQ7SG=WPZ8<*xNe8Dgkz3e9Gs1;7bn3kxPK-#-q?G&!&#j`PY~+jo)9_$MQXW-0TAhz>fIAn9(|V?t z<68)T{>S zop)$fdx!X$rPj$D8pfa)KtQ-Ci>rkqFt@l=!*@=pN>b|fg((|eBT_S(GE4NTm2P=r zKr1TBk}xS7n2YcuTlA${wbbPxKmHnt=&CsG`hedYkO0O33D#hGTIY7kR`LkAo5G?m z4(J!ksCd{mr?0@wIw&wyv}WA1^?O-znUU&g*PUSY-(AD~3Y&EI47`1weR@g7R{b}R zHom482ApNASE}3&g@OL(`~JkKR%mS0sm}4Cx~~AxrG}Y^Mei>LOf54v^+g6NcU!LE zOsSTQijH*~6%E-IkCvM*nRi}nI?bA{E^`?QefAaxQm&0oruny72Sw2%B4gI*vLK)sgorHn$tyneV2{MLg z+}EyrrE=udG-c;Im_G%ELwDD~2j#Hs)Dw_wlfvx^4ouFTF-pv79Tw>AWVtD zG*9lVkTYx${Lsf9j6X$ouF7io@Q7j)yAU*5*_M#->70y@YA6r?6!5tK@DwtpbrN8R zu;brx7kDs#44Rjiif-`EQ*#>*D-UMao{YsUIlwsum~rl|m+TlQFyq|WDBadmVE%D$ z%7{hdqZbGGTlZIf^Gv&1t2ZIu8mP3H{tXmP(A^kzmXa*z1sXDo{MNv<@kOJ>mzZD` zRMye&CM9CcGk-UfNPgR+3VXc)f}rCm*@D{#F=KKfQMt;~;YVhqu<7N1NZ$pHY_X=6%$s1p)B|As9EtSTX@dUwMsUue6`bC z<%972DL#u~O*R1Cl7{)1PS)?_{X6B7?dF1nVpj{LP2<8)g4TnH6X#yX^&!wx*VHn> z@4gvcF$07ciJwDH3V{DRG>;3!@mU< ziS4MWCX28)JicaqsU!^#PSxRU587f*Pro2Uzsl@5mwQsRCh`;rJ5%!Kjvb5cociXmYyZf|l z+qP}n#%bH;Y1_8V)3){YbKlSZoewh;lb-OPj_X;W0KPI*AfPvPGw7*mn+8lB$!ITeUB-zgdl5=cPaSYN*h8f&2euZ^p~Nqz62*G zQi}Ot-x;+#-6Totwb129>>+@G$kT)=$BlJ$s-bVSD9*yaIH`pNe@wACgvhLTxBp}F*W5s#EEFxPqYig$q?x^z`2 zcI|rk_DT6Nf`+Jenx3*%dL==gF6v!41%3M)o>e-B^sW{N<_G2J3!Zt|oZ zXC1uHvIA%(b6d8bA_`@@aBk+nm~Mj!97JIH#o>CS;o(e+#jsylAvU|=9{|maB0(v_ z;x$Cw1M<2xk;7S>o}*!c66U2~Jb8S#0maV4xak1_8fG{ea-ZbWv@k^F6x#?NEo zDOBLfFMRJF>*B?NHcfV_v2YuDEF8bE6fx_^t~&%9`@BW3tpM)g^^QOk<@uhpUUv>n z@0ZD<6{xdkKeM;EjuB*$fnvcTlu{s4=1Ki4!H<9smYR_n$i+z2syK?K3zKEr0_t(E zt66nz{T_~VJ>@ganEhqgNiON6esxqp)g){*S0#O>xzq(N?p@D!(-GNi1fH>O+S7sI z81_~>J4yJ_RApt#VS(i#@)DK2msyGyXiiGCMX7OfbfXljDw*D1Wlof+*cp%Kq+h`1 zD2EFU#zZ`md3Qb*W^&hr0&;H6K*`zsIb1gbrhUvy7p1c5Clc^WMwHo93qRwcy`Po&A%`Sj62OR9rn2~h!5Pi z`v0M-_|}+v&3K)~heh{d^<-&h@BNk>HpMYw84vD>_@&KM)=bcR6NU)GvJ~P{3^MQ%#kPaFDbf4zr|1ZU0DCQ@0!t}@9uHnRE7jfZfM*|Bu;ybAiZL1OIdf48nv$cCqmbpbiuKh3Srg1BA**dNW`oX#3A3-jnY`jjw` zAxmpn83Q*j=h-?F#8M*rW$|mydUB%USUK#su!mWN>-}~D=4eF))XQgXA{YCWhf&J% zpuEqDMGuCYWcr4VPrfH!;Uv{Z(f4Yk(DAGQ%drAS9PBsF$eLQg-0Aoh)kINrtPoo` z@-j45E8Xo#Th%j3T))nAvse>H6>0Ih#CiT;On-Pz%{~PLKti&(xkr~lwgZ$F0{a{| zJm*{PZEob-5S_&o-QO$s<`aAT1zk-+(cwkNzhUaXFw#vh4)Zp0f7^JUTW99kS(Z_Z zkZMs?bY&ZU&DE<@%eFepDC&si)`b0drqe4-w>-jy6JfWm816uG0=^PuL9_=%DgW-qtq}@I_fG|ABj1 z1*SfEXWr#(UKu}afdR5)(ORuk3>xXku&s2{432gm>=RQ7PM~Oe^)|=;Z<)Y4Ji=I@ zcdCbWnlNn~QA(?oK%gb}PP8?hLf!JW*9{>!dbZG210kf9I&p zFH~CODB^g4ezUHvCSIX-yAxg75|z4DL(QbC+sZbfb%jDP+frkQ` z)-U>KHu}+AM45Of_MyTLsA({p)F)d_VUdyKntf=ip#Pi^D!TY24xVZN#Ic#wIGEJe zGQ3E5!Mm2kGh(PlKW!7qi9Q0;h#v0FBk`ntMrCoSKNcWC0#v6IDx34P{k+)?b z&E-|Up+1>8@7~f6$~ubi_)B*AiXJ`0FyQ_q$YU5XF*|i~?cJu+jfJve8%8lZ>QmbK z%!Hw~cbT20r8c}K=pob8_rHV)VLJc@&mM8rth?c-5y8~bgj{RJvFXndC6VW)#d+Wz zfhyiE!s(ou98*AP67qAAg&!6-D2?EO!d|0nzrSyoq)tK!y6tlixnrE}1nDK^kxkIJ zU{qN!SrrI>%BSmRnvKxo?}5~#QxQ1#EWLEs!J_IV}; z{bobH{}Y>{6^R`-o|WTIn|+})G}6rMU(L`h9F`Q&%u?S{XVvXtul*@SygjOm!raKe z(0O#I)hqs$sW5BjpnGF3^Bh}(c-SP8K!I)5$Z3{rt>`k_dr2z!ar56~EvSP?17yA* zG}0k|Y`9$KiQdX}09cx#L5-f>4qN(;2t^hJkyYM(WeA4m?mfI05LI*W*JX1jS|>0H zA`x!Zh~!bwe316M_O^Jb6x5R0KN@y#F<~Rm!zL^J?NeYR06`<~+C7l0b{R=!#_mM< z#p^g%;){;9!{cL&{*(V>&ay;VOa$EsUY;T5ZqL<-XQ$h>;=ufVPt`bmJzZxL`;!jW zFiek9%ezgq*1{5cr^8R%QP&IFv7{>iS1_3NneiV3b`97#DZTYyuQd24S&xOT^{pgV zzp*ADc2G%A8g?edj=r~}K=bam_6&ZnzpPCF)-0Dl z@c?lKtY3Z+*$6%o%hKn)@(9B6{2If8ayg1zefSG}XxG14#o4Q7QfvLWecW?V=r?Z2 z)%j)uL~Mmu2KwT<*G-$w2tn)N&mE+N6@fA~m5HESY;Ofr(0l}V(H7o_PX;*+G22P4 z*Yc(1?i=@$!Y})Krv4C_nRFN}u;KZ?csHlB@O#a{Lpm)gu&Q{CzZI4P4=@#Z1OLjB z#rG75NQDvoS=HUE4+zHsjLBb|JFv#Bkn8AKSmIyf|MnT``As#>hWCE_Fg&mdtcj%8 z1^CbexhOuRzi;8vb*G-Nj8xeKTJ#diHnYeq%xXyuq5 zjvnq<)8W^DN~U@AmFg0H$?OaHeOu+Q9&7R!I%1rf33#0b0R7O{G$A^rEnuG83uL~*HDD~$(S zF`6XsX?*OFM~4)4s;H{Mfml-T_HwI}FgOJZG;5x>IT~NhK9XuNt~ zCyr|`Uz3R;W&NDD7R297E6}h&79#OeFfaxooDBSI&FEOj!$T`HFYKfsmqR=Zau}N1 zT#a{pvu^=6tx!*bd;Bex+z!`1j|Fv2mJ7Q{1I@DH7cqMU?FC@GB`TgKH06b{=;YPk zYF`xVA%Zr@S5_iM*Aq_ytT}{Z_-Djt6HKIx0*CD>s7g+w^5}q}nK@cq$`M|nL{~ml zncB#`xKJmYP#DF4bpEYqm!DE4Ivn0se&3{$0hbI=fljWiDclx3lBNg#qtao%IO~yY zBEV4#Gf7bJ4f9qrKEL2#lIB@GO))r(;?CtpqkQ=vuiX?<7CD%Q1=YM?j1CR7r7TN? zZG#N(WH2de<8zK!2}w^vENGRRk5Twdrafi|eexV(_*~v%RITS*ens-)N%8L7=X2}L z=#4%%FEFU!Qe>6)ExP>k>CbxlCv{%Lty21+!X&~1QDsL4)(li$1S@Efp*Y3Co$dM3 zQm)yVYEp$-CeQnk4Z~S|@!idSQ@S*|gJ;>S)((p$wP&3Ll#5~;$MHYgKD$a*!r?)x zTE@FQ2?u%i*=R?+2Xnh)wqah_WhT-txcZv_Xyz!KMYaupjtEg{^_D4$_~{zZgw2?! zjPK{J+|@g6w7rfvV@vL8dVr3zBk$0v7#YSI&-=CeU&|b3$@@HV`xbc*&Er=g#u$VY zjxXY-xE>Z@JC;kOg+-u3m#Ongq-Yj=0G$#~lKFR?|L)EG%{9VK3ZSt&NnMnS(ZCXN zUe$)t1)gCg4>7w51FsgrmjVOK8=0z2XT+nzx8>c+)41RpDGKW>Dn_psT>A4?d)vjN ztEyqKOC@Aw*+gN6#|*+^R+c*>QZ}-R_b)qO3-wdyO!Lj~onGB#(BP!n1g4OrwFIq< zV4VJEI1fz}YH-l7GP5|dSwME2FEY5V-s=Z8sey>MWQks&nhZy9igIjcfFAL@A8OKU zrx(3e1j>$d8X?X4moTJzPP(cxWxD{+3q~5A`xhvexkntgGY^DrN-hrOP-qFBZ-l_} z;_YV;EWYz5UtV{S^kg<~D(X5Vr9=C+Hs+r%?Jq0Fli0BQMCHlZfTH@OwOG>^-6RVJ z8gbIhytr$Rp{+G;jZzbw-_lJ#PQDI73NN`IN6Y{LYB^*s;y#c(-OnIiDeC-;SeO;@ zY!jFhDwk>XBe>{yy@=Wyui*%OLY(uqBy5fcbD zvoLG$ky*m)pd)VkveYe&4Y3?Z>)aUJyr4Q^@9y?^BB0^#REPgV+6mf=3X)EM2S2uu zopsolp;NuiSTEXUho$rwIvH5Rz|a~1TA6kA_sLED(z>WeKA*(%RQ0wuL&N%=_9fp% zHm`5uu&9^euwY*a*r$!H9=tTYH%H0(LxAH!={Xg@xXP>(V$RF_4h>G@IeSxCoZG{6 z#LJ-{ae9(3Ii;7{C7dvi@JeGlxDbr_(>}>(fZ0s69^(9U2G(;2As60&M>=cT!v_WX zoE@u0$2d9y@ST+gwQ~Jt!qAdmilhbZ^lL{8l756pYB9~Qn147J%%3%Ede*W6PMIq1 z7SMi?WnW7FO4Hxjn;zcsAiPlY4`1c}>!dUQx z0^Zu`k1UgI<$f6iS%Dki(Ki1TtN6Y2v4%8Y9$JFhQP;U(Y3MMh5J)iYO-QD-Pf#_9 z;%ff{T5KARXRJy)m1(0U2PA0rWAdn*wapi`*WZ#SSwUGVR%%-ovGe}}HSSI=N^j3@ z8D%h_W%S4IRy>2o$OSB8L)b(6Jjfz3tW?yVzlc&HD|mjt-qw1?ZFay)nWO|~ zIqZ2HQARp3J+Ux7-Z3Nqo*Z$l2SotVgQ<$Rwj2!LfDM(cfnLS39xg{22lW1|L@e)H zQ|zBVg6RZd+TFM{zmW9mLh606bhw?(S~E1FIU}ZtU7&v~d195MTzYSfX7q!Zd!2|i znasbkWTMGbpghfbUQUy~4~q4kzB7Ij2Ep%;_X0{l;*puUmSlYAegqDi+1r+t=mKTp$`C1EWJrzB@5}89 z9Wn0xt3e^Ai}}1{rTA*Wnt+v?ZOOmIXo(fofnAwz_?Dtol4SwX;Cm2fY8QINQ_aLE!|mHrYYyR!*{_*gmj$q)Yem!9WoA5(nUe08%o zd)qtd@Z_cJDNhVj$^ zl8~Kx$`A&`BkVb~ke-m_M*DOVXL*oIC>Dfw*MHCNM%WUp3&{=Ttu}%PV4jr36*#w_ z(F^KW0o15A18)}Zy_5-xUK@_(V5*5TVVUMdRN?`&*uqyWgWqo-X>=6%ahlCPa>KO_fT{w!L7S(5g8nAcXzjQ+<`AYDHL5@auMb6IDv4R(hZ_g;~ zYvT8x_j0BT_R{xStt%o(ap7%#%c-sy1eA zQcP3L{TmZsnfqL0_#n@JFAN_zxT4*|53B9k#nvCBbQ20aw00G{Xoz7D1mkD;B#-Wl zlkYs8q5GETv(w02m{aUDZFP$L0e%kHQwEME=)9&ibS4~we-R~uF8oArl!r`EXetohntRMix0v|cCOjsRV0GLEpItSK)f$(Uc~G{g(lVuRZ%E)e?T$&i$SLvx zwkN?yFWJOLXGS`Bb}@etON4$bO|&`8o(=_AraKIFv8Fs#|810>Z?aOProu=Q5e}ob z^|TM+N!c95fII-H|9)T8Fw#T*_}f~+8}S!ChL+Y6lV?uZ*e_BroRuvjK{ZRZSdQZY zUANoOv=gLZkSyj?gLr@FQ8TZ9*rgCHqT)QoYIpTpA;;~um?{jFq4IBUr$rBoFWJzi8 zBu$9&3BV1xmm*l;tGO&e|F5#a>YL}yMx-mlrK!4%qiWmYz!K`2W0PNpSA(dO`VH0b z4iKeb=Etm^_M$ej3uzl zHx76|L8NKn2D1j*>~MTqOg|i`H@(B<{?jO%YFw%dkV=J!ID zq)sN{`H3?;Pw1`I`i4lQlB+idl~u@B-J7x-G#h5kSPnkmV`m5!r_EeC2 z9p%_Alm*&+Jf(>|oj~zmA2TF!U*k^z0}26{8bkyb7PQH0sqKf0+ujhK$-W4sc>ep!SZA#XF9RV z51?ZIDsFNH?VB!u=R?W zB)PL_&@l7pJC72+G7O48n9Be*0pKTajf}a4MUf1N?RU1b^rJhp9CI*egnFYo@ztg( z<)^tM3L*7- zeUd=YR|4(e&-AgWcg2GfCpp`*{m!sS?0Kiu$co{Bs zTLZDv2OYM;GAq|zK(eTwzibg_eU?y1jW1rUO>w;LHF5)1&Wfg_bXEXg!v_vGoprAc zh(dD?A09U2uc1g2A|_wl92(y2o@6I3oi0Wt=2=~<7gfLPB~!Lb6G}mOF9|OgOZ}9l zDNCJZY@D#=S4SyW1dInYk^yYfDgz^(074vi}?X; z5wMnR{>VQOkfxO@#O%s5wP=3R%C@U7=FKMH!6mkMNkWX4tZzGGMEMfaD*XLVEk@be zRH9(??LQ5#{)c(#bW3b6u&{Vx83~{-fjmt$pr!HJb@1YBMl|QzGQtwRzmRl`IxzS} z>jV$*5`K!l3>Trm2&vCp1d8l;uXStxEnv3hu6)II&0n4@gLfP;|6VE7;jmBTF-pl} z)PnsgpZV};E;TOPh@AXy=i15;GOcoMrDRQtB}#xmQwX3CY41t&Hgb!0E}hqCoZ2O|sYT29=X0G|~p{cBk=^q;VXV3@7xkU^@U5v6TgM@R*`NC*8l$UK-yW(8_lh{)0ztoj#ivmYzwkpQ4jzjR$id`XAE1q!JZ?E^&m!psTRL zO!OECrV1gUi}E9Gien2i9do(Bmc=EOz_Xp!xQW7LcB#! ztFkUHP^o`_hfCdGG!}SMcS8UFB=J9o^DsL2>}j2K@`rDPyPuFWkG3#*N!+*g(J@BB z_q4YNs-{p}99}^4jpFc3)M&?3Ee#?>(K}{?HF1=>Ax)TS?)pv}gJeEEw@E(HdLoA6 z4O9L=x@8Y`UHiXa-1x0O>gaNavf%0DwrIXFjU9m$~)V^q3yCEK~`+q zl&V#j0XaFKO>vxI3oGIv4sW;s%QtB~tg+n6i_yw5hH&F+ z%0`kAzr<_%c-4csSz^+!>A{RRMdN4VGg3AmE;^?kE@}BO)b&t*OWIrxt7Eo=@dJ*r zO_}%lXgU0iHCJp23I?Fdo>Je4X{Nc&%`FICUrY|02V`a!E{sk<}A18_dac{BiIwUw!yjXm;n@oQoerfl{DBh@*4dFux9;Mq_h z^zk7&3kOv^lT?yE!WK=|T?_+ip*>Rw?eevY0j>7N+XEXJ6A&IxL_|4VtG<7}CJ7C#di30Q@7`P2E0<6lTdg zsM7)lDMLHF*l8~|p~c3t2&;1G`YHmPYv&{y+o7}fFXhO!CCX76a|4Ptb+{@Ts{JJ5 zoNa_JFa@6`9dwJFUR-M#*;Uu8(mc$k2bY4YO{9^KN|KH<-)INnS-H`tVI2&puJ#MH zrHevPdnNJpgY&jxm9(D22?;~|2bTQ z>Y-?PK=%=^aM#%;rtm@jFaJ|Ng??9>>4z&Db(5-pBL#8i@hClDbwQY&(!=u=vg_@*ttd)7W%`^JGX|8vS}>Xy&J#jZ!L2U8)&5nq% zj#r;pf!kexbFOTx;0C@rppCXM0dGy%$mi3lTz!u)g6&ZU&Z55FfXGE@U4BVGp)wDs z7SXH(5pHg)$ymXP=?JBuvF;+0Z+xn0=m<4t#+u%BP;sZ2ANHgq#~cz&$>BS6@ShVY zx;=}}+>@CSeJL|nSOY124JYfpav0~g__tf)3R|O0Iq{`9q8A}2$&h9%*O6-p<36jg z1TqrO`8p2jqTpHxcys%AJk=Nj6ucWgJj7A+tu_i2eA6cL0?<1Q2tz^$UfH-S7ewke z+6?>r?wyT9ddQr?8mG*`6tn}pI%?_QGRZu0Y_BvgK*zI6N5|)(BvpU|fHP28ox)Eb z0rPJOi}2{Jm`Ftts9NJouLqoY%k%R1of673f!>fH+Rf%asmn^8tb`b-%L4nM<~?#a zTbL=p2!H&Dz+Qn^FRJKfRRuhg|K zY+l4y?fGLg>owsxdC=xh5|Qw@5fzm_o$ErO#7};@Ap$sxz#apj=;B~ z+E<}+8`8p5QfTO~Ox+ysOqobAVJ912?}v9#lV{HVxof{@b%N(%x8x-14qSKFbwsK) z(=rO=Kj%gL+u|P=$`yY`*&BkP6$2&fie4Cw3(;6VR&k+}coLkFY%FyE7#*EZvgkr$ zltfoXpdcWh0cP!ENZVnomEwZ+* zYf^W$n2zi{ic~}aI{mytlF*H8h%D(po2vWxM}%S)X6Iv$!^ijjXCzt+?MaLY$_zy1 zVt0ckYUB&M6R~__6Y?cmInPFRvXbu#{|)i-ih25g;}XHulK=2bLysm_oYKZ}=+5=>J|SFYtY-?pCCun>x=79dJ(?ltf8jS$+^fhOyBP+S7lI>DNnODN z?ECQA0)wDdEHmp2%|Z117i2V*s=(`jt2;x)%T|};{6CFGsB3+ILYi<(0;e$Y>vjJY zw$?`Y2>FzeSII9}>M49?@RoYNEcRq!N55(8aiU**C$L8tR=2_=Y!W~KAQTSrl+G5; zb^%|>rkHl`T z`vFsTV70s$YHAN<@NIn17>gyJ`p{@Jmzc3JOTGq*7P^i7-;qvIX!{k$?$WOq-^QM& z7B~u9CJf^};q0zqOVDkd<;u8ZcINAfEI^DloXy0#Y2C)gmQo*GTC8~lwHh$Z5eQ`) zT@zmvAHYuuzV{LnRDh9%Gmsa}UKo?Kd;)u%lKv8LX0Ds4KuOiGw2j||=}FtUwjb%t(to~dA`|K|E(O5Oo94S!g!zkR|dA2{?yT^d$Lp7%-Os^ zm4Y~6iDnwDMsK<{{;DxZ_=RX=0zBaR8|humNb`*qna7g)-8MSeg)o`t-k;!erM@!} zkjOG-^ZM*=HOTZnmv!in^nI@{pMV}b7(}`tGB&MhXPc_gPzw>KB-+n$uG!hrr%(+7 zV8z!I19m*t>OiC6fUa?fkHrSizWj&$cU3RvaBqFc$8f#;$m06iiPU(p{tzsmuF8Rr zPFkwW>of7lNTsYQS8B)LJ84!9|MjfBC`-Y>82Ly_%Lw6yQC> zv4U(U%yszug#F3+Q$mR&nE^-{7KR;ehfXUOmC={;Q$Ho5muIlXcprTdlufs*{k8I6 zRXRxQyv$^VxmCJ0nPt3SOO#p;XxW2N`q!H2!8C^2Wj9UXDLH~sl`nY_Qs8gB5+&|y z09z{Ty2f7AppmKl%Zqn^yWb3%8or~0ncStFjfXruBy|7k+yGT&XUlt{_Ry_0x3d-@!@%6#z7o~UZ*37;z#xxrdUAB)&zjjQb@eXga5nKyh#`e z1{|zd={1x`PByf~jA|UJw1mvRv)mhvfJ38!m?o2N56O=__Gs|A85T84xAUs&a^GyK za#J)lC9_!}q^$}zIS8wmr5+=%FqJ(~ zQt18Q^z};VBqX_SgKk_bqvU4_tX`JU#eQ8%DD($u52}RHVUeO*h5g_TSV(W|D!W<> zUF=cD#Nif!V(0;V?oxNPOWG*Nj7=(n%^25iUz4zF&MMaJHNjnz@bOy-X2TN0lpbP%6 z%oAf~8p<5VLRma!4hiX46=_y?B?YmT?tCIg2>Y>0x>-)M8 z=ox7RQb1p0+oCq|v$RdY{K!#nD=J6aB}^bFs!|lP-<6W(km6%paink3yr{0|0Xuwa zgZV@=`Vw@FokL4EPt@vOf?0sao>5I3#%TerXPO)->&=IQw&pkoKCrVehu2cOT)Ncm-el$`ufChv=q3SZu;o`4o|DwBm z?u?RPM?~0z{A*D#xw=*BKaI6J_3cy;ZnYK||g5!^Ri$7xuR9&U8X~M<* z3r`ue>ltlCf-Acki_q2-neR<>IJP3CKP#8lGC$5hfjpEL_>U)&{Omw9n-UaqqDJ3C za=qSXGS{3fM4{v6Os`?OvDNNJ7!<_((&*g@BFVzA$?Imr*E^wh`Bu0}ZQOrxC~O#9 zPsxs4NoVGlH{YoN_K~;zEjk*yw&%mOX^)djrh2_7WTg=!(flYuz|_n?Q&xnuw4v#D zvzP)qqnNqN8O#L+l-&3Sa^kF73pMf@%;Een*FNMs_`G2-yer7{#N`3HBEXD|cfwIf z4}nRi+rJ+K>=Y^iAVfj(d}5eR+YVB-EdHkaF63BGM^tqbRbM-LJ-T(S4Al>`>60+D zfVS@K#yldyO%M62!PMgL7Y)e)bt9aIzsJs)y=m$M_45LET14W=(sr+Og&GrY4F-wL zpG;QKw-uoG|M2I&i*s4CnZ3j#CKk;lpMdDD%8NglUt zU8QNi8C%CO*k)zcv(OzuDuIBj zxG}5}sc5uKU$HAH)?6L9kWyX! zKTc^GoGeV&MZ)*y2+VgL9D4!m+(Vo|0v`!U=Ci@CKXW>MCaK4GIVpxo<0iBz^h9{o zo1G7>$vi*JB)9`<w5=9S_UB! zT6GcYB<~nXEI>E7%L7wd^Zb2pj3PYu8^hhrSk8nyLTVgEF4@PhyWa~=Sp(gncHMfU zhQnNxswtQhYaZuo_hG+M<6DdQfaRoFKQOy?EHfJExZ}enDogMzL@JOsBX}R_#S7A8 zUI$P8W!4HCh&I;UgK1fa;GfqU4>>AF4ScdF29)MN&xRhrrqWWB8vo#Huv2}SL^jFs z+q*2yPhkNO8dU^=tC#+?p(PjFw|*XI2cC0LWKvSE5P1HJ5PW#FAPSBP>&~Q>mYzB> zydzh=I3eB-bI|ZjSF9Jo8E1i)0!auSjdW+xWr~^Kuujw7_agUcySpbl7Ha@{= zU#p1pc?B(u#E4LGV*^rj;m}^YGyZ6+TJ4zciS+PEoZoBjg|UXm!Q!cOCc)W6-HQfX zWKmk3iYuEUb;5{lQzw@}yW7wkWoV+Yud1xaI%GnlP%k|~O-P%zhI^h#sDZjg7 z@Q0VV&5~m9R7{4HfNQlr&pGY}tjpRB?bk5G*uUG^K^2gYVUqGJLuZUBk0C3z4y=?< zdiLZW-Uf1Fl2hc>>PsV5Gb}plE54alSWy(8kP-O|*_kjdk;{JR8-^w)7selgPtQ(p z#chJe0aruCLg8+FNF}w6bFE!e|L#nv)5^fE-5gJcE-HM;IOAJ)!{anb(DtvVkJq?YJc%`=Ss#h^TN?Rd#_>{``X3;K)_qtD&T&xWG zPWh+Jpga9#lmB$s7T5!UD#}|DD4opDuhIxYc{6Ti=TBRk6eFhN8O@-Vc3xa~6bS21 z69RRL=TQrgH@wm&U$kfqUc$A2?>KYRdqYFYtj}taOKVk*kizeWzTsEDl9(}L+}43w_wj9SKJ=~9HRn!1V9J zq1h*eeFC5f4sQ%8vt61hD@%Y)3W3=nWT;^1%w znD7`C(-PRF*)pppItD5`0eGjVTVk%8bLS2R;ViaVR=;ySlZULvs~p3f(e7k1`4-YK zAKf0g}GgYbD4k&Dhr7Kg~k zm8ecQOF_Cm<9yfkuJ{nQJa60Pl;ZKyl9aWDWg?ppAh%iC#gmV|=AJs)wU&rPIFY7FjIGK}$0{xgpw9IogSBzmp z_6>5ui)?pSPomvujXHS6q06pZS8biKA}O%3LEN$bfTx@OrE0{Bu4;0es_{xOlW)Ex zuFbi%D3*Q;^7rfP)RmMiM98urM+x^ikd>tgo3D=bMKniE9a)A8UwC-$U7TqEX&zxa z5HH?aaply{1A5JeoU$KVw&I5Wm3J%?DK#5<-g})%j{2^&d;K^u8SFxnd=4_LW4>R# zoWssPs?k-RO?;X5qx{1tjOuhf@^s#x5`cZw*omkLAeKizFxnI7cqtKF`VS6aAL7LO z2Q#0Y48SiKIIxz(+nFczKDhD@?yasgB6`w5(3j8SJ`%4cJzR^LUj+s>> z>orPBND*51PqD3(vsN@qy$sUSKAWL;7_4CkdrlZ?g)q*%0?!|-=6aGVF9oCiCZs;#T)J|5ca zu62T{p<5%YAQ+DkvKkz{4p3FGkKj60+@x3 z&{W=f@4JMp&U64@;SBvmY*f4j&l3(~OB5uWMNMR}n|5;oK>A2+<25=I;6bZE75J^--ay|Kj{qv^#uEr6>ObbUL|D4cR?+Z!BEPi82* z?^)U{i~%geciYEK&?4n;3&A;`hQH)(F{G@5^=d*?2dLoq6tHJT5$XeB45PR+!F3|8 z!XwwDMre7TyGBQz7nq7)h#kYOL3~trvR6SDq{mn(Pgbxde{qb~%obr_*y`F@e5)KH z(WDK8soZyQ^I9D8$wLQOgem(0X5%nd88D16_f=&ot!=ZlhY&wQoJq$?4Zuc@nIv*Z z+`6xcb7WfQT$kc0Q8wHtBxS6)3?9nr({SA&#@bxnj|0W;~x@ zqFaza4+a7#$yAjWCFHb5poB(YpbwHYz3#LzO+PElQb25kZ0audl>Fv|OqCWqF=_^Z zO2%4)DdS|5C`nZrL7h;QqTLmW0p9K5`i^!GMHX9q;g=(3aPl0S)b-@R%aj=AL)$n2SAG&6QQp=J>nzAqTQ|;LhrlPM*V6A#6cgZ^HwKOz$0YLU8iMYK2WEy3PNx13X*niY)hWSMCK4E)tU{)$a9!Tjx$LW(t< zn56o?cRDHUJsA8p<`A=w#o6`cM#$NZuO(VpnNtyl9WdKR-=3L*Wtu!8q;&x|8iIVgQ|jw)yr<@ScOo6?%LwT7@4)PsY>8kp9u?cXv_e3PuQ#Rn znoo>Ko#qr3Tbk=wT#~=vHwE{Nb2RptYgecyXtAgFyx@h48sd4b!M5mvuA>Md>@G$+ zV?6dfT>Z)!Y2NT0@&K9{sTSzmlW#5+u^*xN%yo)^M{qq%=OWa4H8|^5anu$lH<`iY z+ttZ#HQl|Q%jdO%o^VeY;-cm#rIY6VRVn1)7y)Wo&2w={&zR!nEYPxs|9ugb^m(-E z@d6iOgLgvn_@{sYO}&_M;E~x^WWqiP$2tByz8p8C09^HsIK}aF6;5fW?>TMa;u4YH zf+5G<>lgguF^Y_@wV z{2&|Db(i^`jXU0?(ye*F%~atGS!Be!ld=zk1G z1~UPAhusqgQwN>$!mZq^4966PLB8-p*J8w#?jRKm9IW^GZ_YGp{_*@P0OOdEv&U2P5 zEy<)-a$kvYebjDVye!%%j-d zZ^o56MZwjmaH*$BBY1fFweBo=w9Tkq8;xs=`sEZU#=OT%KX$9}^;arMvvb9d-tfo6Yv>q(N?JvwzRl399y3D(^QQc~c5TZ9O@^wH_sYkk6# zi3NcL#9w+(j52p|-gS-0W)qA5FkNsSggwKHKSvbe6b~^W3aXcs1iNSj#+<{;l8U6;i{m}^0V zAW&}sn0|Njc_QaMXLEnv`{GZz4;)n!5tQM@~3d7*{}a*WwyN9xkhPjj#ai!e22 zqkZEZJB8py2ASM)UL@{;6y}_*CKKRa-BWoq=?FT%3~hS^?R%ekYm%U!^0m#^f%(Wv zHPbo4oF3(EKv|gEErt52avelv&kojc%jo_^=<`w;haBJwvW74G^GtzF<+QTBW?7GpE%~tsGV)C*-gSeNmP_`ITTU2$(&8uUT?t+uK!-z105%d&3Kk%D9-xZs?|&@3yeZ; z2+&&cG{yzS)e5c5`LCts&nJKNwy^zkKrZd4{sArP!ZbL^m8}9gRMo_>b&oB&vMJos z*orEMRdC4i^5NrNB(m}+8{uil;R5Kt?h~Fo(U%%d04Tc>pd;#irY%FnYjTmw1K$A3 zh>g-ntUqn<#!v>WsRp5&d#2%qyKZWvS{;6}|A``JrkQ5SV2W%^s_vu)n`eqJO)=LO znO5$>SFkR*sCD{kh85Wa@%(%Y_Mcx3ihOBqYv3iCZoLVQ^LuE z2Ak}ObMLfK@!~52+T<$f=PTZ%D^gipRp4pD!L9;B_@5ziV|H@MN(oetg>$~e~s z2g1Sp%3Sg&5~mMlBHO`|8FqQWKEK8^N?vNU5uQ)^s8|V(fC7$*Nf28UW*W>up+VL( zY7mh7L_(m`Fx0@eJWYHw0PJ9qve8S4W`e83=kNDpwKR_2-zZf}^H&-~lElzq(3*Q> zMM9(}yg%$<@8pg+nwG zJ0!7Hrv^?aYP~gIR-(ID?S$&HbX_v~G>iR)gr|ZQ6kCg`v_k#{{SCLW0@DtS&zsH8 z8vy9YEc_`QO0fz5JB0eIY6o=SwE%MAZM5K6r?_(w}bi4HH~uJKHZVr`hIy;x24`X5K}! zjDLYtGr{>#L@kQp75=OO2N^ zwQ;GdHzC2mFCCU->xkmK@vDHzY=4`@6H2-c&jlSwM=VyM@xLP_i%BcmtCjW%O<>^T+#7HSX{KBZV7lO!=uGS1dBlyxj~|$8GQmZ(j#{pgVM7kM(lEyiLq9@<`+ux zP*ShwiE$WJ0&a%7i29cl!!Jv8rL8lawkd_P7eW>a7Ny^*oNBk(Tsv2Dn zc-&R}W^Uo`7&6&MWHePL%xBa@5~Qvu#SY)X=<8+QDpZX=K7I{`zZrOP0a}wzogA4l z8P0mOY!GW)lvw1GPGitBFTL!W9A6rMr0bxjM)L3qI0JhoZ6U`w^V`i)m||*!+hErf z9Ul#$`zRY0Lnl!wvob!A-@(qg1$E=p?dPKFmyh`2g9W^)UI#4-!H|a(oV*Ka$sAst z(xhlGQR%H@xlBxRToU2IZW$U5OtsFx`{7(K%ms&Fk?G*Y&e_-@Y2ue%!OsgKYpLo> zsG2N6u(pvnezf#CW8mf2KV+|u3=+Q1?XmC%-O{CEdkJ1p24p+H+p|bUyyLOyQDn$O z?a2@fJH#B&+lyoqVU(Pc)v5a-VsMc6f3=Rty=gEFU)DdTSb46N0s#4E0bg3A$;{z2 z0hbzHpm?)Upjn?87 z+Jiasn**zRUooQ7@}9T*3HXm`%f-SR3@P!$bygn0x2suzbz@jVX4}g!G_&W6YJhmi zObETf{P>({-4+nZ7e3@eI=ztspIi@J*KLY6@%Ufk(iZ3^7(gBN?MgQxP6`9C?FL~2 zVn_=mm=0WXXc`-P#P64u+@8OwC|!454<(C+iW&guwN7oFErZHS{%2Ju6d;q1i{21= zJpvn_!iD(gmFjUpGOjBenUV{$*`7syqv+hRkCmORvRcv#z$}=bIOEXTyeQhd)Sj)e zi5P=Z50je;=Xp)F-l#2HQUQtpDTi*~-rK(FPR3KQwMuvql4!4Q z`iJzT4+AYi3f|`b#eHQpeU|LMf&gRN{}){T%?*{quPAKt*bi6iUqw3fo7|v{MD*)9 z@W0Y{7l#_8MOW8q1pJBFe}Q?X{8&{=F*0OY6qZ-I`AEE__0e|waZt;@=yNix8el`l zKYK6RC!GI&;r=xc8rNxyKd+a#TEey=MbF~iFY{NY9;&8#r@kCcKTMVF*dWQtkYSnl zIsAKXmWCCN|6wk$v+v3^-UmPoD9qt^aOQtN0?I{k1^D)2U;GyyXp`XXwIkOR;jj!_ zDLIY^M&9oYa+ra7e3cSr@hE`*mMKd37cZyqOrTgdv9@F$@T@Jmjpd6thz3HNl~l5| zy}9gFG+iIFcdPps-5#9iQnD78$y4iL%} zT8zmIR)d4ur&tim(=i!mIc|PVgv*ZF3%Bi=gFCJgc=1Gw2%do^EjAqnanvu55C6s3 zO)R`YZ%KRak?ygs`KSM!U%(g5r4|UI6b^LIZyRm}=>6t%7XTi`qpLZJme-!^;*O7BrGpuN>PJ6G zF;K6U@^j-{-O0&+KD zFv7_nQm8-2VQus^z;Yz6ac5|HnrnT|is=+1^;@nI76u7PmHy|>fCK;te$?peTvj?7 z8=6%9+vty6H9>ow^(gsCn1(v((0n{#OiDRGHq~4NSpz>mRThh5FzbsHkc$=&#Nf{0 zXHSYzb7VvIU~iah5J`-@hLbw3c#Ad@UXfp0ALJ5 zwdMJpTvOlnY#n`%_#ADZnOsSTYtkRb+K5u$N1gs>sNQR+7|&XK#LN0S4jWoJEkUMS z`JdE*1%49s)p}j`4{Rc2$6`5i;^OijZJ$Q{$q74Ct4rk5B356S^6s5vjsXLCvnYl8 zPhF&k&5?9xN7-4(0iEBD+)p^GOHP;JoG`@`5egw&!}BGha_&OVSq~_wuX*}j@gsKa z#nvXsAEkb6z>#|@NaLwcbBF<&5LSkaMtRA~@( zd_64q+uzyH#~m8wlD!RannxNj>q-<>nUpM^+yNCelNN6Q#$Hgyj|N8&2LaAqc_Ui;e>t zIgi%B7AZs^P)^vG>fR6lYweTN`DoOy|aOl_=UDV6hn- zTJOy^3_=iN4#SZ3oc6YsG?EI-u73$XTbJ{B)f1HrrS}%S78SZkA!?YRbAB<16OYea z-t*zUz-1STmtT=wEyx-PF4Wue=~J?i(rRy)$Bj(V?D! z2mh)>;91X%nE2HOzP5Y%#9u9)soD zFjJ9SEC2_$3?SQt+#+o5ksd$Kq|e86gDLqWKqvg@lFNTSiBfM;hCwXv2|M;VJ4o;yX5#rj!4*+*HyNTyj9r z_pCi9e1E$=7iNRycml?*rkQii7eS2Z6{Y9AGthJQBe#V4{t589yBAocGyQcCkb4CW zMa!JU(JsvUZ!MdG`4soZMC_DLfA$G1gdN7DMkP&-BFU2n@jca0XIitP6$K~4)Q&3*)z{FJPd001N;OI!Oi8DzTvslm|q0bO|N^Px~ZnBqf?+zC%w zk*FY0i4S09vgfcf_#Cy~)Czww0=t?RFcTv>{+tQX#GcK%=?4A~N`(BR?a)@=mjAct z?zvmNmxgmJYBo8%l!}~5foLLG`nnZByJ1Ra?mBplFO6V4OjIU{(5AE3YwUP1mSSaU z!4T{Ad2?GBWQn5d?STHY!^Np^vqog981ijBoHw5uu$@6-ujl9(u4cs61~tTGG(QwK zl%%~@pQqNnY`C*+*{7w@;W0=hmmCN2XrgtBqK)wg8}sYLTNy7ZZ#b^M?NPVYIdk-m zdh^NA9zGz%Va+{l*r?7#$S_U&a5agy$Ax>}_tsZm*fqJ0PspcMxs^hwZpai-dyPmKBvyJZ4t^*@Z7{;xNO?IJxv zzeBaBX~3pt7U(p(`p3^O}9PO^R%@v|67?Nceu(}Yuemh10L=}1h&YPH#OB?Aw6!gr<^w3 zzgTq$M;jFvoPA6n+tm907{;Y*!}9s^TaSU8&L5oh2_(EP_kmuqZwvoIkAJ-mm--m0 z6Ux}BfpV=YAM11k+7Ncn72$NP$oC3&%R~E7mF))^>d{hkQApV$nl;5Fhi0f;SAdPz ziVDA7)_`J?08B1UstxwXV|GN;7oio4fGQ zsMG3phuK=~>c)sz9M->gF8W+fCt6LMWTmGK-#BYh%K_~=Ay;>-$YFL^PiO39Mqlwmcfd5we$vOs#om!oZ<7nv|a^}i8biRylU`&28e0@_-z%;{w=%$-vm8pyc2zNv?#c- zX}T+K(0?`>_%=hwVE<8*tWL$O-0#iwJwUsA-(>Kg@sv|DKBG-k*F8wpT7?bI5YZW= zBC)TmtuNq3`~>8k2Aj@z#uwfRbzs_*&JQUV39)0xwQsC|D6R&A1)yIfiMZw-uz^Kj z7RXzuO|`b?TEQEHn49=!7+^EBkt2`-7~92*QXS>2T}Zf6yT=2R0l4+2t520MJt{x4 z4>wFJ&g?Px5Z2$z1Af~??w*oj#oXCs4$m_~TM$LP3g5}v2)_-^$e z%Vmqo33(~<=)*0yupm{ND*X-oNe!~P(>DC(G>5|}#v{jLL5rE->{yEh#vsO1LaL8o z4(OXe0$nTz5CnvEOlvR{aqa;t5D|HHwSmKx<5_=A^abd3mJ9K{lXj|;?-J$GLdN-I zc#oHh9Tz)|pnF3n@Pcjin9c0KEr&aK!AK85PD z%X-b+!sW-m(6>ZhKg*(vEwK-8tRq{Y6m6s4G2H@%K@2SlAHXk!Yt=vCIPI@pvQ#x8 zRw|FVPraE0nl|!pSmdZd`ox$jK+T^Bae&!RvwLP@857yc1CC;w{myuHRIjj`l}(v$ zxOj`~J}#K{nvJ>5goC^fmF9Yf*tE@M+ zXz3#1TzfuP|9iStMROBDm+cvUh}(JV+85#8+bpvu(k<6dS+}`N$5L-g5_H7`G~Na) zD0W(cOj&2)Xt8B)^tSho2{Ab?U1xC%nVh{M{%=5D@;oH(kh^V-X??IP(F>GaCT>we= zAfX(TOkZ0`ksQRpRQvN-OF`%%`Y&D2_JhcwZrLvo1-**=PQ=;}C=YD;XiqjPy70}y zAES2zWq(Q^^GnB2c_lr|CffVn(%l5YY)5AHpUQ(4$RI1lD0YX!*!W~Za3NH*Z4K1r z6|?xiba*FW$jV(oPfn$*1(lg`!mgK3H9wYOvqIGU>_aQueT3q1SoGP281@tCQq(xz zO0f=K&Es#=@%sNOEH9$(o8&gZ066neF6jRcT>@|<0o)x zg*9do_qgXxQ8Ug~26E&}-J67Dp2Gmy`Ad%9H-eE~6Ay#5zjAa%9z?3t;7;fNCZVn{ zck04G4M%#P*II&PVIkETbu!A|$g>0@58LlZh6}>1u_lWxj!+|%Q}p92U(ZqX_T-Dk zkBA%o)1IemI3m&S0xS;|IRt{4WT@YW#JIlDpr~9RZ@;^M&^NAckn4EY$2c<5ntaK& zIc*-HeN-s7SV{E{2DuwS>1;GI_eX+BDzt_tl~bQXSoP1@2xt2Wmndtgly7Gw+lE@g z$MloPGflzE`v+W^owPt$4gKeEttHbq)bUaJN(uO*=cU&K<07BK1n&NFz)0Qc1xXwY zwNz7i^I3#Yv9h>4)aE!d*lovzc5GFcj&#GI2O?J)|9~3d@yFX&a$%p&bIq(gidAjk zvFX-L11$*V2t+wH*rsalRc`UlIes0;7J^$b0DD^7Q1&pYKJ#DW^hyuH07^;V_&D<) z`)&g(eE(zlw#9iHD)O0X4wNQUv40Jf!jT%#{+1gS7T(4D4Yb)0V@P37IZL9^nH zk!`8S5@&Xe9mvL5?!r&yv@yLuGJY6aY^G{!tWj}ze)Sa9LgYUr=oEWk@QK1}K?u2m zbxoejk{aEZG<3W5$D%!op5}CFPGv-7X?bdT=;nqv_yOaA?<)%1I!5fg7+*flQyMJBesihtX&-C~HO=w}|pmt^M(qJN_-!IrPb<*!mDIqaW%mkE`D6%NaF z-%RF4YHm)Ga3Xrg7n=YWV!UxBZ8=dJ-RL%g?hfXurK&>#TLS3Abmyo1w>wmr0lkll zY;SQg6#4ktuc!&m)YICww}a6_VG6eH_k6v!sDLPiObU!7tYmQu_7?U0h~Q&UdC5K{ zW~<@My(DFnQ8($ecq2Up$Jnhip`mHg=*WK?RFr^uRqCaOo%$??v1nJNz&FnJ!GWof z%gK}Wu#;!Gc{6gUNv6d8`nQo!snU^VN?K8Ow2HZ=4os&yz7vj85HwCa;-yCK+@0J4 zi#@?{rp$+}EhDBh_UAv6E9#KzUl^i6h|e`r2r6+E4C}g)05PaPD`rL&Q!z1o6Tw^r zve{R*yme1t2K7BGH08$KQTtl)%rhgWdH0`s#KGnGs7XrC-_9QP9`3D`Wr}OtndJ$T zaVT1%=N=NbwUP0?fP3L;Ijg#1VAhdmWY92ZbqV4ZO(T1(E)%q@@X*9_ur~YXm@V5Q z4g-8d<;<-`$32R%>{>hFt^r4d8PF7Q{=DmeQ&8Sj*I_w*cCMg_y#O(>C)1ai80~V? zhC96$v~}=VECZB|&As>Sxc|FO^;?r8dh{pn7%wH2N!YOwQ&xWKl`wY}W)5cVz~8|| zQH&TiCxPiBo=^2Kxs{z&s+&LgE-9u??8rQttUEW#WR%_xm^Z4=lbo;SLdhC>{eC1e zmElH+i7$IhPt%ycyF&K7PX8f|8z(b<9}191ADGN`e)_5x$f?wYP_Pg1Jrb?|LDx0X z@YT3$j!J0zV)2o&YG%i(?B<}kv%f0VD8fn@jvej$6j%nOsLhw3)kDS-=I71hGc`b+j6M87XXrxAL0vftekPgk- zYRyg|^q@JUtlk-fHzr2a1Y^^p2iKKC_B@5{##%!61>F8AE4*S&pBbAl(5# zp7biH!4Z8_o9)?iYE`dlgBvA&goXf$gzLTZ!04I>}6G(Wz!^*fDX}EJ83%1d3PPv-M z7VKKGx9i4m3JG4d_2OTo5I9{U<)&u8GUa0tmq#}A>*}xOBOHR6TuVz8yM7SMQa^I= zaw?E-aKOQdP*Zt0(IRX#^mK*E*aQdy^sj+LZj5sRI?+lb87gZ*=ZcF=9&Ts*5xK)< z^#4q|6sLJ58jVSSBi{#y)NCu&;zSgCd;IXhcU-@P1&e8X(zv}nm~y#zCC(jW2hZy8!!>`6vxmTS^2yFPVbDf7cgkuaZ=D ze{Z0NsVkp;*l6{_2c{+>$M;9@@(9I}QSVhWDdFFb_3})p*`oBH@GL z0l)21GoeDrjWX9u8qZWmA7fPDX4aF}|LPB?sCV>V9B)45K=r9Yi<{gRjP7jXX> zb?QuhZvL8N*8$TaOSYu7WwUM~6%@W80911=H`-xE()icQ$_{OjykAWZvS|^(q6I&O ziX>LQAQI3d7?d;-OU=$3@j{-DsF#5Ngw1cOt*W~QK)Jr)7fBB>ag!5&vWH*$Qz;F6 z#0K1`|A|i7I;J^jB;6X-9_Wic>3E(u+aDelVB%E?2iYxlLRBwjgNLMw#>g1e>fD>= z*6gFNm(H^i$r76VN$6fg0JbR9){$|`b!VFl7r_W_u$Y&qa+8{8rn6;0x$|4KmPM6# zyg?#(D2Kx#W~^(4NT(+-6-0A9XnRGY=SA^Qh;=?LbL~IW*{*m^m45p*;-G`dV%z-F zs~$(A-W;bY+BEpct=)87q#6@<1sA-3RxH7vB@|_Uw-F02)Kj)cT1Q_mzqdb=JQh+c{nX8*g3;&AyA(-N zDaC0P)2}QE#&V2LeNKX_6d81_C830-J}zOw9)59BxObnTGS7OCN1ym)(ispz&Kc*cyiLUD5nDXvr=ez#cW ziFrTbt%^z>mKsC75KJQEn7dV#b&|G$TBJ;VQI*mVW^xeWThha5`e@5nOb3i<36@ab z!D%8Z_USrGuG|x9hej6%3@b|74@F#Xe-IVfV_Jai!Qjw$JS;iQILKMFOif$fjKn0x zmzp`+3n&()4W`f)+>Qwx>Ze{(A{ zLc9N&8}={jx8n}@%$uEVEf!lLHR`X1YpAqF$?WzjwSwNto!dl&GUgbTl>Z2zwY^fs z(4tFvwR@z-y1{(SbAbXO>e{9HhQq3KyEX8s#-+STjjHHz#&f%Nv_)|#*7{tiE>;Gl z#Jk2G_wTKdFVBJL*ys@#Uo%gzM$`6|le7;5c$s~U=#qR-KMLNt8hEl&H_qUE4M1!2 zsx9;ua}|0y0dU;@dgi3|U;uhReXTbX$o6FycWO(PA5IXskW7kRZ!Vq3^W8Q8MRh4hn@l4rG#lDH^ITf*hw$}Xov95a zv7buXpB|E3wZEF-0GS2&kJMA`6W>7hvd6?)?WXj3f3oNBAKK>5GW)SbdwGW3iRs0?Kl)^`mfEUA6A@*Q1NIffH zr*-k~@wzy(7cat2EIG%cj*2&*6Q*VtD#l6^da6*sTtBV82-HIfmI-XbE<+4J<>%9d z;iqr~=)jphOp~H(d7n9CT}1sZrn>>HM{<=XqK%q(77lGvI#2719M9@e@79OSb&&<% zBOxLS6!_$v-oi{~tnJSdIsq`7BbjoZexMyKRhU!g#|!vo7-{KYMJs1%Bh@S#fD~y4 zwvQ#ZWV!Jh%(7`4>A*ON$tJs8QcRydaSlS1gcHE2$zql4ZsnvW)n*#RJ9Z)hXCI|($ zo9jT6c4@I4MTo)K=^i(Lo4*K84eCVPhow#~Yrg5`nz!@AA!EElf(SfIom0d6>j zVA7Vs8*eL~@Ueq|Q-GqoQ+<;k&Qsr;Jy;-l164zopXr2z`&aDU~BxGP) zy!u&G@xm-2Ceg^Lew`eFfy$zXxi5Ot~oMP zo@=6DGPU2J9>Dhn{5=&moO#MnA=cXhJAV!Ws{HiK+w*Hi@Q%o1HnJ#%83VIJggdlp zki9-&q@|VCM05@iA&trkKU^z+rMPY0!9+MZFSLHgbl> z3~gT9?T`S+iUmHifBriNJ=4{mU-ihNj@=t3rPpPXdcR(G zfK>YHCEppSms9;^dT*O38X#`bFh>*b=i$vs6Ji~S#G>a#uqTx2CMCy$~j5TwAs$zbpVaxE>UOCdML*`FS?#=CsB^io_Z<|k4Ps+ryPY`P$mzLQk zv1|*da_^;Wzsxk<;#MLzcR|+^W=+irZs8(>zM8>IP)m)&1CBWkgI{|7nuPuG#c>ic zdXh$6z8kV)!;A~Lx`w_2X~2GGWrvG8Pu_N9rt3`o4fJo^zL_L>J*PJ!n3L>?B#cV~JYvMTOLlMmmxtnCv(H9VC zS%`C$mj@9wHlMy*5(r%r^XI9)jvMw3goZK`~5D`=l+NpHHIr>)(G~;PrY!r z+Y@HwFt(t+Q@VX%xmm(Wl9_Cb1a^0Io?2$T0N*UMh{@WKfBVx1sChdR@!8$-@8!K{ oNnis4OP5r`RjVQ@35O9*4C(c#>`T!_T^%keXXus5egJ^~2Nc?aeE;TIFrCEcp2N$s8NRuWbDI_LI zhPe$ui2PxH?b>gk*Q@Dwlj8LG`to+%*n7`>>k4!suSCqv`^vk>20~|o9&=t4#Y?2O zK0FJ~0AlUitZd&iWSskFL1^4gk)tx_=WjCYf55u1LZo!$an*)z>|2bgl*U6>-ykR4*q`W25wQ5NbM5hhqycQ|J>uPF?|mh_ zy~#W1ee{ogWqg^vH{AF4>h1X?cv|_KeOBD`zuf@>K?GC$1%c#%o6j@=(ybv7c;|=m zwesZ09*%J-GYDizNfv<-T+VhU;HEfDz$MJ{Z{t|+!vhv`s3{d0ROc31U}@Q z_}dHq9RxssX#+R`Cog#q{(#*jx3zirHJNA0&(bT_FrRXm&O^ZVC{-ozQ5EPVd)MD8OF7x}WV z*C%uv)W|O`^1-n6spNr$#QF$QR@>R++lZc{PofsHi2yNJ#yGvG+wW&7@eAXpi1SWt zt5jXz{_`6D)6|1A95yL_&!kmb`RWu2`ru{hjjMcjf08Z|pjGiJk+x-3c6R69P@P-O z)whOG$qf%Ll_mdK;r}$*zgb4ICJkjq+H2D9zBy~IR&rld= zu!<;Ne+6;u?oz_Yt+kY?Cp#H)7w#|YZ3Jm}2dLuzE%4{<|Ln&9GWq|>-~U&F3_fYO z;3%2ipFW}8WKCME&qib$tRGFXp6~N^&(*$`zdtktnst4v2zBUtmg8$McdSSML_4$? z{x;jmfZy=A<|{f~=KBi&xRE)=Gm%iu$+~k+_IwVb;z!?f>H8dMY;C?H- z3W9#uuEMuiPj}upon6N4ztWPA9NBO)ZQGyu*VU4phtLeC9d0bws^)S?#wQJU=gxl` za4H0ub@rMU4~H_W_!CLK7cSM#4QRh->(>`9i2w=y*&e3j9* zy|SKmANt14e1O%LAo`&Pfl3oqWF{qrUXew|*mLT`;QAc5*k|uu+Ms4aO@K$$e>oxi z3s@64*w;5^RS!KX;OB#^Fa{)IV|8V3!W%hg)?CnjCu4|M;g*CEAo2ZQ|5c|?%4?F3 zPVSeM3^CPY)qRaR4zo03|1FS#ulm$abx_%Y`<&&?5m~aOWzMU2x6DgM_C7aq9LV8rJWPfA0R-*( z1qMvD9aM^TjzRwt9D#qW)LrVo_tU~B{&>cn(2}XJr?BMNB-~R@84|IKRHe^H%A&Fl z!s;spB9@{1M|t>vgw~9&3qt~js=JINxP9eVw$qW^Ve}7#*ce%|>5P&8ae}IEB--zyo#`MU2D)V<-dL3(7~J9EVi^cf{hVCHhQjh%BTN#3vIUS?h8++ulI-( zZ8G{3pBo;w+XPTviZ<-Lek7`^y77*Nt8Ig_^d|Rm90!4-WnXYB(rx%#_mm@$gxKZz z+jzXT6=~3MIQqBMS0%E%L-aGYkz=9#p~ae)J!%@BynJ0`4ns+xcP7X*0Cq%Gf7ryo~CXrWl}bo?3k8~ z89oaQRUp4jo^QGctg^quw)f>~YVMbJf*y^y2I$Y=gjo4(=e&xvWL z=AeuDkDaiusl_sFLGt7XLDAFG(Z5@I-8p1zELy3VjC`rXIavP4l;csEv=vA^?DiY$ zF3PS3JSo`D62CCZM(Ci1l*H0;m3+fqtLVY4N5SC9mQQ z(|}G~1_${AxNBdE(qt@@$hZTkzb0vh*aRRjlFO7$A+xgVI3gUL&Gg{q*-mKA6h`k^#w(?jXo4wdRB=54yd95< z{>TC2mWN;QiVZ3D#S@K5?Y{99ZFW?)30hU`co)$*RmAAlT5$AQQ^V2JB7C03J`R;b7S$L~c&n8Oa7(Fnv0g>f@L;|uSDl*v`7{!7+kJY}yVbQV)T#Ta zUkodG`%cOWezQj+of*eomrfUFM)v~-onRwU)LaFT?Nu0wmI*jtu6>88BJySOr0t3S zft$9s4*AS{>gVWjr=L|~)Dg>%VwX%}^ zT*huCLM3=h&P7Mgf2nY~VVpHB_J2VxVsS~kOVXc{Z!$LDnsF2PJ-Z~*wpM%B&d0BL z31GgbU6pf})~=@*nu2>bg#ImOX4X7YKtg# zeSR8W&WrU*>uaFx`!hM6ykCxP)s}}B8MS0p&2ILq!t;?5wNqg24qTSoP zp8B&UsID;x3&%moiw8!P5LmRgTD3x!`pEk^P3M)Uu9Dz{1a*fT!FkUc>F=*noTSxg z%`Rb+FV9WWOul!X_jZ`=WvWNqDtjh`t$we>xM5L2LC9BP{rf-Ve7m>5*pSW-ad*is z6oVF2SYe0m{zo;*&A?Fv>HnC?{|Pbtdxre)68OJDi~kRTrhLklVLkmv>+pT;XrO;4 ztrtPQa0a7qWi#TN!!da)-Mem_y8R}dwsZR^jG9DVkD={S9_U?Yam(&8fO@%6HJ3Lr zQ|w6Mm$1{wYa3CmpghPYgXceU{H#U=dphRaKn2PecYPKg3{{9u?;1f-j&UD^T|5PR zoe*j+1+KK2)>PuFN+~5BVInnu4e4vp=z5>sl9(z#c;+daI9n}r&M#HQ+o?&L3%;0G z!xXGaBrLbIT^He{i1P)Uq>_Og+x!DDNftU7#`L4!ln6KNy!h9s=S`<0E}tT2Jj7}# zOytaVKb5MiF)JX(YU>ep%;`4*0Rx<18Rwc~QS+qFv6n#J{+iw_C_dT>9FH1Gxn_^0 zqm$Wg0U4mcUX}ZnIC4_L_YMK*r((KbTH$T>Fx_l)XlmUhsnkW|1`Hz7H7jJzRI_4a zh`FCb{C0K_%n0g_EZPbcOHB9x=cT1DrC zsY<6(tL?5|ZQ355?PNZHB;};ju#0O^u_+2?R6|IbYRQ>_9LFbr_GaaFue%Cd{C@zV z!Ca#RsMV2QXf9@L7Yb;U9YZMdq$L6zT*>K=w!dwXUKV*P5-Xr0HBD%qD59=yl#fY6 zXZpae`v55j(CHahpw^fR#{6Zkxa&y)+;xbNx|sWSUP-^s>T{Jb*X7p*?^G2*#G5b= zl>qsPv90;?il|O*$uQwUfCdySlFFRRoWkauXThIe^DNS6pwvt?pl?SLx*Xx2@c}nm zbpT#Mbo=lN*01iB>`#qyM^>cvUm#3Q6gy#hc2g4HL9G-%w+q|){wOz$m>F>Ja0Ej@Cq1!Q;l6i$VCzE6uXSaaYc(E@J z2%mwB;VK^^IFoBk@Te3KYUBYkjUiaN_MQ{Rom58rcOr;!103u+#Xh!&mp6>qMYq$v zAz4?sZOv&$$J-+t?|rEF0v9E>=;;GIihZU9STwYshYN&pv0ommi(<}TBh%mfTKcUT zj#)Hu8GBO`?AbpFpAwuCOp^Sudi?nd^dEX29~+wsBz)2-89&z$b`B2A8)>r>kBHMP43{f$-IDB*JYm7m%=? z1l9t7(R|*swl3xx)`cAHkpc(&aU4@<>cNwlr%n#`K`)QdZSC#Aw_DKZQ!cjX2&swC z8;5iUj?Vkl$?OD9A#cF}JzgsUUl$aLGo}f5`Z-o+hzn;H6Xip9cr&oiO%?1==idpU z7AFm>1UnVP;1?`Qw&RKrY(T9eVT;0N_R?x_$MVbb?Rmkt5&*>tH5;T^49pe=bBoA( zkLZ;^-Oey5ykoV=6ko`m-~r1&WhO5ux7^@?c`ilKXQ^A`BYpT z{J;2?RSH2F-;!!4YN5p^RN^|PoM7*f#J5RXu+Lyt=~4ln{>6I;M$PiqeTLntYzG3o>E3#_|JnOihIQt^}`Oj*E2 zVqK-j7a);LR>A6TodhaDL3ST(vO?bYhH4neNTSPb11OMoMKh5tEVYX&TC+)&T;`tJ z7w0@9vFV5?J@z%FL6H`Jj}#nO(HT^WHrD@?UI*ByNC$yH*%`4^VGp z4Y#7L3!vyoN#~NeRY(dl9Ifkv?#bAtxSmJXXkc4r6AqpAxl#J33PK}k9wGo~n@QOd zTOcbR-|SCchs?io$X`BF|5I`4{}!TFB{v!B^O>PXW4ut6{$;@89Df2QDCZLi|JU~X zFJ*@%@7YCH@Nkt+voh>U*Eqkjyz|8`>rZM|n=bf#>hEb!#{WVQ|2Mww=!fba-Djw* zPA7Z;6-0u(SmRZ~$ZQzQi*|MZ6CD2Eg8x!NdlS1gm8Vc{$#?$C5|43&cf?Lbl1 zbTz5k?XZ3brQMVH5Gr0*%}}0btzIpj@h!;{;cx6*&+Gc%BB~s5+OC4KS8^wh&Hhx(7atLA_;8}!NF}+k5`{;6`~f(r-Hidi zTRY^o?>}>;(*l`g`VE&Q!q-71Y{1WWh5p$TO*CmP!r)Ls{s-A7swG!Y-u-gDfU1&c zr_!ipAk}_gY%DhgaILsIRX$SLAgrDu70!~-f#s6XFog6#Rlqu}WEMpC_rXU1p;0lU z>KW+L#`%b>Uvv9WA`fx}8XVPU6!Iy!6;5d@H;toX18!E?7EU$+ysbcO`%krWSpK&z zhgB!MUJ&!jox!Toi=8U5g>^hw-nNVM2cV2)s=5OIhjTyB6zLp3`z>#$e=0}04h?|q z6drykDkAXY&VeMx4|_nFs?X3TZ`!STV4VWcz7UXnJNS{)yz|*y(L`r+oF0NFnQ;Yc zns@i}CtVZ-#j7r7q)`+2PQtGkKl{%A(QkA{<2o z@s3gGzzqR%VDajR-o7q5BnUxmJi zlmUlR?y(I+AQLH-RXK+*C2SjgPX!3ZOk%3PJ8)c6M7(^0KEb)$|rIIZ%tE!XR6>R~}-VCNO z*5C+Y2dxLIdV=GA^nKR;0Rd#2#6ZjMD5X=d62ir@{S$Qxgz&C~Tuf>^)i{yanh0rv zpHYlz%GI&ukN7t61EM|+ca-fM>Z-2%3`hWuKdTRa5N}|Dh%d_Fa@nxxk4h+e5=e<> z`u%v7k`_&t%o5*a#RAOx_Hh(b;RxXwAr@0My58<3ObmkkyYOtefGm1+Sk-f)MwJT(C#{0N@Cm*O% zS??`y!)D8aZKdPXi2+`AgK6ePNV;mA<;pAwK&oou|CKrh=iGx3XGxgLS@(u*tyxaT zD(f`asrTC;0uRH33}V+*A$)zV#7}GMHgXQ<6lLjEG0_DPys z-o6B7FeBkcArLv-b%E}Qqd{T2FKLj1XhdLWzher1BqHX11|9mEwohVa9vvOdSsd!M z_R`l=PydOmnqqidS$DZo#J*WqI32s z$@ZF)%~7y#M)!_T8CosuRn+w9=x@ z{6Xm9!no$_$POA`mbxL^#+>)g0j`d{9}#Yg;m-$oE7lTq6U}|eoMmLtl&It4AYrI% zV8?!|=>i&?I~a0s(P@wq701}}FsYyQTPNznmmxpsr+G4{3Gw1j3CKw;uoe^96Dlw+ z*;zk~f=B4~so!rM@O}Vd<(ONFN&hU9h7Cp$G5GrI+dND>S)^1Kq@NpnM!n_vTrklg!?ducZewikU=PHiClbXZUmt9 zGEt|$gnxmC7$$jeVO^vX4Z97A>Z^Sn=Zg+)EY=9mu1vmsEv5$6jSDtF*&1opj^L2h z1~AlZ8B23T&<6ubzx&c(aicA(mrARN259an);|Yr31Ud?V;oCG-MXE3jZ2>5$5~cG z&>5UJo6+H5d@tPFTSA;GyNtW?WP-lCelW0b!`9fVJF)%=Xs>O5*c=TuCsFXTT0b#Y z*hH(A8+fQC!YTi;s}({^csc$auOJQI=F}jaz-00(;9jgNwV1@AB?v;o+|S& zOwkaog?2a#FqCQxCx<`nlu))U?Mh?-@L0EZ>Sd7%7Lc?X@S^L5SaHjiC}0@iXjdDp z7$AfjP=juaT~RIbEuI<)y3sSdZf5O?hzle@XUr(Rsa<=oR`C!E2QGd#4_3hjL6B(Q zNX~j<98XH-BYi*V0&5Z)GzY(RZ2sPcty@L2=ul;eIc7EQshW5zSkIKKVHzmM{&r>s zSz4yQDpj=+Q)~|f_fQ|75K9qlYq-q2*;`1Bm3+OJ_f-5E99Zve$J{bTwOS{F)Vw$V zc7JSl^C5tsF3_dEHDYU#vnBFMUQ}4&D}X6(fcMV{fk0DD31op!Lq&f3j-sv9z`Dr- zQno=o9y)eQy{I6oUjYl`)$J2Iv4{%*0U;#o5A){c*j}>mTg0t8EH^I>V2cK|7qMP_ z<6USJFsEv>wXqD`X1)W78-Dl}CyL)&%Vn=N9s+A&m4}aXA8hv*G{d@9pv;p}s>CduJbYjO1I&+^KfwK@xr4XophCPX)#K z^IiG2p4P=VL{@tQc$>NcL5U1`8u!Sp8ud)gPC}Tr5ds}r21-OpV&`!UU$RA8U)V;m zc-7e{7ovp8Kp$d5l*Gk|Oj;aNNO3$OSlFcq&Q_j}Ji9AXfZK=j?b-Tdf5PQ@>m^b$ z7JUu`gj|*c1`4&=sp;tAASY1Ped0SFI;Og<%HjHzh{Q+0WlX|3yXj*fM!x;fFt$)? z&M%2KTqPk)d;i1imR8JP=Y$ru&7e?)ELP7)*PZO#4E>7R$sY}PjVbw=uOmCcw z+#JnuJn`X4co>b;A_;+z@KeA?T9POv&XqhJ&fl2Jpg(^T6-g$Bk8|5Vt)6B_6zkay zedkyS8x0O8vJKgR8LRmD6pRP4k%7X+(AI$B?Nb8v0d2p4Ph==X1#9xnM}mbPW4A*_ ziCIXsxmG~~yG12e*bagcGRBi&Pw>2MAcUm590DK7sw}XU`!1OMgf3ZdGN4m?zEW=X zd!zzpR?8_oH7Kth;eFKhcCX7l*_TG_4l8*1LzilW!t#l&9-Z*Siq1fB<7$FzcV!q_ zHw&pZl3vJgNBU{-bfpB2rpgh07`tIoXF5lLz{ce)zb{qL%y5?`MBTbS0X$?3~aokzySY5Xj5jnZ&PNL$VslB z;NK~^2%{Jth`F=v)ct7s#>P%m^I3j9o_ziaytUTblQAwx_be=34J6-&7#m6*B2z$o z^aE|@=v1f`pFXD|+|vg&DG|OW5ZF!CXa%ymp`={Wk@(~X(A6@<*`n{HaxipKgSRco z_w7A9I(E>P0zMDR<1?*5KvO}Tzg2G$)yYOYeXcr7bMhd94caqhoPIl9-VidkIBSB_ z;ki3!M8R%0oghCvGJo^1Ta587!Zct^xhz|U69D6h;M+G%!g7}P5(G7rKooPDWLVCY zLGFf)oBIhiXYks)gPtXplTmvh)m5Wa%Oy%m+W&n=e0!VK`-zlZMoCJ4?K^lr?D@3) zAEv}a^wRHQkG{`Y;PRDL_VVGkw@^8i0@}mW8eV0WM>cyRl9v`Itg{P&N^2?b>mon= zPZsq{Rz}q?8&z~qBERa$%eV|ZhOvG(B!!VDtG_rGE-ta>Xq8?fIBT?Qw+ev}dlej+ zWY23Kdv{VRSMRX;@*J@UZQ;N%)JdN`&b&L`lOJ#dylSIC4{B6`vR4uT1CLL7wX+Hy z59+Ttyb15c)yqGg=W09 zJ6}g`MICsn%77WD#plQmA~v{)Accw66>Z6+88e5<3bs+x z5FLyF(yoM1h4O%aOAdxq!26tNAIJ|zYiLMvLsFIbK}zh;8~$U8l`ZPL5fD`2-Xw`Y zZeh{tvcQ1dc!aJI!w4?4Z;b|y04s$qFy^!_pi-f1M z%tG>`qpddX+u1X{f;&#HB$jAjR1u|1#XKs7RKScjHNQR=-ehW}8fo8fD?x_Cd^UEeVU zhtYN9Rm2jEYA>!dopT?RGTt{ODHzQG{_;N_v9*79Xn}~jtplEyl#V7UoBpOy!;GKb ze3*}2u0T^idvMzZ6L?umR>VvIf2q{7H_3pGdp2m2nm=K|#myY^Z{?e^#*l1Mq&6t> z+1ddN$({!iuQKvm=$O?*8tn|}gjr^HR$kKmSEKBo&tV{y?>}N5bYvv3Op2AiSC)bp zjGYgxtbmWvtuv#Ou%=ab#8I_a`S7U+=v@Cc_%M(#U5V6QtKe*$miLOy$~AzhFwSSW zhIWi88R9M>tv0mb)q<>={9+!PSnd;Nys6zmxdQ@rdX=x1k6LkNd3+^3-nFDa`c?`p zPOU7VQ{_WCS))_DH^LLUaef`l#)$k-4kAwS+NS~Vr3~@Q+tDR>nTiy1V7!n*;P4AU zKf7@`>iX=|_$d`8bZO++M(W8ST^$hdTYJKbUb9ayT`QEvK=~|7F;UKy6?46F&r{DY z%1uQ))S_+Fx#=Zc)vt(FcBoKHk~F$Js;g+m_W)7C|8TErz1qW}f`D&Bf)}DX7HB|A z-~R!VHGSV@!TVND`-k3n3QrYTWnsSt99-CkE;?WAyv%x0ar)_Q*{N&OKyx??q5om3 z8G}LTA-yJ5ZRN46G-Iw^JkC!OT6zrE?Z<(uhNy6)afxuHKZDQSyshLhalalbiwv8? zh<0twsyvaz2_8(i!0@2l7j98S_hoBXrU&vQll@WkiTwDv=-7w1#Y6ZknNHnFpfce# zgxm+DgDVpOhm4SFY*0X0BiLjscfS^e;fXPxF4?Y9bf)N!7`B%vyu)dgdUeMm+69Ck zsChqUa`X$^1&UN|{=TEf$K$|{%H}x-8){{W3n~}RuT*q%Fy9<#FmK{{l=JHIiNPxC zUZ6KiL{(rWkk_K=UQIDL9Pe6(En? z^BA2ym&gsd{Hz?C2a)~D{J1ID4Q}&sHoxj`ZiNP-;GH~6_s~;AexT5#mO?EkDSv6r z9@5slY%x=}K>fCk(qb2RC!}ON40Q;@q^T2}SpC579Wn;ko%6R%F^d1FL8`v6=lWL8 z4FUpzj5RL#%y4<@*i~V~nhQE(aKt72&{KAYLLgy1IWMn>yDT5-W!s<+)9&#z-$&^Y zU+qk4hXSH(ZeGsaTqsaLRui$Lr@U~ZSW#c9`2-O!5}5|-Q2JT}!&+cArJY_H{^K{m;ow;-z8;Sb zGBBNp<|}&FQvdOH9~9{fq2B~0(5WWiC6U$kzTL3Ff)(LX546!NGC4i9?(LjAvFn{h0*(F^P+KsPjvYSEAE zj~iCAlkrT>9Nb85S|jP1=@=F$lxnq^@vQHI?Fw zM}mN&O);-_bjQ8*Eb{*H@He87T5s?6Jkof=gMi2uY3Nf?L{LmN9olGJ#2)E@`n10_ zD$f}~3i9G6b0YP1_rK9nPej8y)28BqsZZOlmqG81eOr*$a)a7gKD0jEPs{+Z56aSv z9FMUO2yBt5^syb#98O?A;G%egX#D|lRe639SZEXAp#!FIV%<26K5m72?!CcuAs7Ut4Xg@rDqWO`PH@ypTQFNVP)t9i=|;!F6VXL} zXH}0?ZO{A|L2fv!zj|XTH?H-~4pIINj8-mcMcm0-iY@;cwx4~x;EA%)siKMM7Qjqb z5bM17k{)B=bSXE0!MAlTRh9hh|ZuC>lyuZJ0 zmrztxwx<@JWwXnh(68ySlsZH4;S?vINq}6;bfe*tU0qum1iiv~;=8mt)arv+=~6Qo z$M9+=sN>-)2q=p-iWG=ZtJ!S5ii>MvXZUL3n(S(_XnpQ`uXw<8OJA7{5vU^6>fvu4 ztSDSf6q@M7J+VoO9$W+ubFcK$PGo>EdZ)b3R2Yr=qoHSQaXlFlpF&w4X!Qm@EhMyK zt~r1Ha^K+7yExg!pBqu+5f47B8N{?xqxUqy4$U8*aJ$v)C-8Hg-egg%rXVltSB*=9 z2+c^4x2-$$R{k%SBHnxo_xsa(E;Y1dEnYJ+Kf<| z+uW(^Y>FT?1Y|uYR0~*?kfeM={R0&hoY20;(+r8z6r9@Hv!C4lu zA>=;n_#;axFI!GnY2PmcL;U0?*=uHu*#+}!2sWp*%#`~NAx2K&3T|e>2#+5O>{9{^ zb8#g!YF*k{4(NFQvP{$N)Zbh1YM*W^0-72e1D2)dsIqCw0+P&bkmnGd5UMH%4jf_| zz4ABeT~8iH;<6Relx@c@@>G*@H4Q}Bpogi~(orE4y=kC;@|7YZ#^Hus1Ok%qu3k*u zgOLrfOFEExR13imrEoOd_bmqX`Wgl5Ow~nQ-vl1 zYF#=O-IIkaI$D83JG1k#@0fPOA9^HV6)s1C5*;pSm}PgM_L9+!!k~+D9%^#rc*v=s zt$gfx&g*Fw4=w^w57I6g%yIhMqouqj}gc}GcP-!sGAK=Qa1=0**Zs* zRwk&w2VA-AAV?@`7uA;^^ExJ5*bT*hEQlBrYzSW9W0#Z=dyHbs=!cvx<>%YWJo^UA zuR}=foY+S(B`Y?!piaWgj+~TYa+AjIf8*iByX1JRU>J)k^#$##_2}d^2b1dH+eL9C zTDMc$RRAQKPsNU9-^V1fAG5Vv!JT$3*PQz`;X&L#!W8^|C6No)b@rmdss1~h!*hEk zfx1#OADS0&S}+(23LN%P+0@W2u&gK>wJ8655%IcEj$jm1FQRNy@ua6?6vXQX>xF2FZ1T7lU|yuWC~>N9ha3aW9ZM@uVl_8=d_6aG4b&0% zsi@N(BDYFZh~HQ#UZ-K`h@wrQO~%LnS?YuP8YMy*VHkjzt<3&~-=72rh8&PrJ4j4Q zbn0*qbew^6~fA{^h>yy={KE z1+aNfIARy!-~bEBn^NaLv-P0d&)SeUiKz#hm7*TG=Hk0qcJR(gc9w{Gw98xejn!Hf z62b@##d~qSp0PIYKps zNx;-kRR>z-zBn!~3=Hs6jDpXV@{O~%glw>;Gx^R#?W36-2jf`h26w*pb(>>;U2yk8 zq|t$JD%X7+dI=zyUOgwolQ%#d9Ny{q5TGTS(a%lyB{vCf8iD@W4S`{m@AoxF^NEHS zpDne>hItRM(RW z-AWD}1y7l=Y+6+%dioAU^iJ|lv6wWZbU(jl=8epU-DvbC(ERJ(E8N$tluKI(av|aq zc#}>xB%`RrUJXx`Fq+adgJ!xeVnA+wCllk@BO{W2fuQU#J(6!xv?Ul{u<1QuDW;0H z6?=#tTGDWs*c|ns2?hg^YSqdvEDFn$L|5Ye(y;qAL>GZUf#OP7*)JWchKTFd#po3h z#K**yrs)nje$5C_QCW{^Wzp?Q(pNQz0^t=UC%(B;HkOV?{i=X`s`E~OKuATeVbj@9 zf$Zz&`XVof$WE7&zkcy1PZMSUpz53ISb2D+TX2oBg#%Z7~6|EsVUHSrX&&3HIUdT zA_cN2eV~Y;p%SFQ8b{3C&2|uNnrLW>2v&nJc8gIK!{A%o5+ksKXwl71@e+JWJL>!F zi4v80{8rq*gQd}uP8%YiSsICspqino^T{^y#Mjb*FsZ1%X^1?F0*x;E_6zdqr%c*UKeAuxL zENX8A`g4AJAXz9+dY_69AG@fH{mTdIAYk?eDowq}(C_{%$nGbGrPurWcuK$F!rDRO z_2o}$3xK|Y0*=r!_E5fmc1XZah|jcfl3G+hF|@w7C87t=3!U?LU{h|Ms_IYJeAjP7 zGy2PH|5F2WFK_sH z8zf)Q4vyBS1_=Fy#y?1)zD)vFAYLFdP1BqMg}l+gaB&TCK;l59q_c_Funx_2*KWNk z0x9nxn%J-MKUJ)eD}*4`^UQ>jC$0H(1U6#OyNc2-y z8jKUAf+Nh6OJmcQ?C32F?l=)kPN{<}mB}W=uzta81J%%!V>`G8T*l@phVCK{2N70G z7Zb8+PK6Y|34?*`^z23!LVylRr!>FD9}p7o0yG8)cDp9Bu9Ps;!<`JZ)d#Yb!=Khg zh(8%Y(s2(U5JPpcW~^>`i5v-wK)xgS?u#Q!zZ`1SfprPb4>yYw1$6irD2EDc?FWT` zf@P9MQ!gu`B>$rSktfQ!9hQMp!#;s{-8z>dv2sC2#`*1BA*N7)ws?3`hx!lla=Svf zIug+=QJci*=Lz%tYsEzzxJ>>>V^Z3JG^9udpL5-8J0lkz*|Qw=3Qmp>1`RTiwlKQ} zUqy%|^^f1Ze&)R2D|Me(M7sqhs?PNERu*>NU47S`BCafju=rqq+^q>>1t&ycAN4V) zu5LgxSNw5!R`Tu@BaloR3Q~IBcy&X!Zak_n`Wib%p zBcz4lY8nIU?3srPCQ5g^zRFOk;BKI#UPD3PsUNV*ow}O-X&M*5#e@NB(V98@ZQEf& zX^+&_cj%iRZ(rnT^}5rx+U?Y_D*T0YCgVKgkIxr1K@Nw0pDRpRVD_)PutZ-BjG zZG9Wrh?pRL{~ICL=fDOf_4MznsrC@Z%rRpb3t^xf;X$-HiJkn!Rev)$5_7G1Mr>5d zaqKtD=9UtOgh7r1P7j!ZJ}^PGh}~`OJvaaLDm0~iAnF45T>@@95~CBD zQ7e-uGT^F?hudmPvJ^UKl_Lqwp~BSY>YJ1Xnv-v4=qTz_HKCLRaVYwAI7yD@B+D;d znWeFP4?c=0pAHncyHpr~S%H2%Sxt#=y(&8C1Z4pEEB2b&{Uu!r^KNLDG=J7?xWvYV zel?GdXpm}EL*I+nFGRP|-}qQ%VZb7=vv6ZQ z7f~76)x(_0(O=`OigKDLT_nh|8I=1X( z*{#W_>%dOxp6XSih+n$?C`L4{RV%hKd_(3c<)aw#7k!$tJrKT!@3`lG2~MV?$33gZ zd_b8w?!l($1FTQBRF?6ystbz#sHq_{)+Qv^&A7QiSYo+H4H7Z796q0 zoeg9vX$$#){BSXWQp1ad+frLbji4q3Nw{C0b1`5TBVhn+TJ!$5u}FT?Gst@xSX zwMu*#nhbhQkjS2@!M}N$v+{E|;%?GS))H3OvNEF|xJ94*D9{6Lv|fIY6cJpKZ-qrD zF(z4q>@Sp2T&f?H@No%b{(7$F&P8n^ou{>itwN+x`E>FJHRPGPL+_Flw6u>5^%)F# zmfZzYlDE368jk$L%?pj_Z6TDtu(Q*A`CW$DFuYqp8g$esBm5`CfP) zLdx5EKk1egX8G+i`hc~^=&k&4y1H`F-fzNeGL{sV^Da-+fgT8gQCa_EZpcd(>0RX|IB#Ez-SwWy9KskjM~ zEJSHsHa+Kcnu@uTc~C7);hD+hW{AX4ovkzyXS?EDZopPrSij6-nHW=3Fxhi4g|o=+ zNBDpMJr`_JD3Pz5`F-e%7`=y~5ZaO+EF$|z&m>ZT?J3v^k8i`#G~F#zfL5pYtyHSI zqI0=d{}SI2WvdOqPC1SIUJ^I>Ko@4FZr;T$#%$kq7ZIie{&d3Pwf#<$HDtM8e(~eP ztq7)?tnTzUEP@I^Jsg9U?a?`DuYE-<2DaFmGbHZ=RNbnbSpX{PgIAQ+x(wKSBjjcv zQe}x}0k{@sEE(MXv7B0bRR7Sb=A6G43{^vliw)5{G%Qu^`?G32X^YbrHzC^E(4~)m zR=~rxk>am?GutuUSJHpGl~%vHNKw9A*db+>c1w-XtyzTcK!Gbfxx;_$PVE2l9J=0* z{i$yT)PW2}Xwxe9-~8?dP8w<68}tr2kQ#9Qq$s0y4JcYF=qSYSovPqUk}4CD=Kpoa6U(*?a!!7#$@X+h(0;x&VmkF)EcRtt!*j{Bu<`KlF0B$<0JoTE%{85{)1>5VT2ssbu}E56szxP zS#$iGZ-v&;gAqu@55Z_P;M3}6L;C&cbmaB%w3@fnmzGG5Eyd@nslCukG^B0fxmjhd zc={&QAo}!(T?!JmS@A)`2Zn-Y?wmSJ3N+^OI8drw%)Ft%74|Dh-CFX^_Gmn9g>UI2 zjVNGP(JfQ1p8XT0we4q&thxWQn$|V@a62Kmkf464vw52PullcI7|GRKg`=gSyI8$I zh)E0|;dbOnQZA&`4A+Tq!-TCk0fNFfHBqUHDx zqIg3X0drXGYb&ZYU&aXg<} zeTX|@75dgsz44DBjU3xPpkUk=%8klq#DIxClqZ# z+05Rb)xKzjCc~1o7OGRwv}fOiq&z=mDKAq=%2v^#GGfm$w=QnD%_Ds8<1Wr6B|eV?Ygo=6NZQ-Vwv+4)b42=Kv9}$YMc^44}t( zV5ya7;(3%|wd#n`z*_E3P0Y;L6>KX$5uPn=qA5%)s?5;6B~ui8n>q*&zyhk4R?SQs z>YGv9m%#pEwzV;j#IY=_<|WTA|{dE1d5HnYY@W?eNc6l9N$7Lx3;OE z#{Hy8?}!yD_$H_N;r>X}#c5*BkN9@7|EHn|Yo>USoStPjI4^t|-f&V)q9d^KrJ7H$ zC{0ajQ@C*Vx9S*@eMw4v4K{{U$erdP4V&&sg^rMsG2ubMvuS9RjDHB3p~gPHUI6mJ zo-3XWzUHi;5m8>Sh~4evc?BiB&&xNsm3xevnPreCE#}l{%!A&F)tPN-=4sSrTAmB{ z4cqQKVZ2RM-L1K*&bP0tLZ* z(AQyN3HAa%Ce^G-gAk8yE@$jr(OUj(^ zW;PNq5YAV)g~#96$2$gdIIJh43cy<*2r$I;2RK6+w8eKQowjJF4(<&PJ1o z^(!nfli-p{$$D+;OZ1>K+slb&Hm<)E4|--^R%8)#3z`g+I-7WKZ0f_AMcs#^{h06iTZXl{^s-#>>0J$)8y8;3#^$LO?rqh`>vM0vO?)(=otK^L1RX%&1%PPF8ZN=}qvFjagLQ|Y6Zi(9UuP%9%q^+e zJ}IpwsZuC=$rH~f++5l5JDEBT zEdTervwjol-lg8LF9W3gX$BSUP%jY9UES`H3%AgmgP|>ZL7Bu!kT$BE#0gxmB z`@hXXN(XZJ7DK(eENA1_+(hkOf=UI1sX>Q?+Zdt=cjjJn>YSpNE7KgJFPA56FyrqhJnMCC zIn)GoNwfTBI>5I!+ETR8Z0y_%q;uH_I{04ll@k-m&oWFj0KTfpWY z=X51##iHH2U!M^`5PbU2*pN1f!?XaW2E2Ju!cRf;Gza|_^qOf(uDv9g!t@unjCEJU zNZDfYH~HcjU^U<|PbSj2E@n;+0kC^Mv^MylGLne+KJmNw`f-$h=BmP;0-NR7!a=qM zpe!Rwp1LW+AlUabwjrZ)puOF_64gEfXmN%Uhvn% zU*rgF{KG;*??=5#_dsx*eOLJllE4V~vlha5MlIvKcFZ9J?b2Hza@G3#|MIQ}k=%E| z@=jBvqIR}T*`xn2nXSrcxama>5?=qf6KI@rYiap=U*l{dG&8cv*en0=LBKea&Cm&fj5(IGHm1}^xy3J``PlIm5IYDBjCOz)=#3wiLJ?@Rx z&L_9B8;(OCqaGL}=R_2acj!%^S*P-Vuq%CW339nKMI#SJ-s8e{bAgEv%LG8Pp+<;~ zi>ibl25zYh+;3RJ5ok7%C;3x{O=re?5Jf!n`d;rJz}vTo(ornRDW=%E354<0I5U?8?-xwc=z}*@bUn>WnCu-3 z+El}rU}Erbc=wIV8Iu{GIc$%zM#fos&#?q>qYK~H^uH2b&Ux$u-Q|utX7g{FSHHWa zKHJuY5Zdz$=k2Of0FPC?SUE!#!VhcS{}AbRw(Hfx8mzsB>f+%fIPAFRlZXz zM+sU=q8_%b--D7b4xo}g%Dluo>p~z4$UTe#x0_uoEmfdq&PJhsa#Ly7&Ha^>E$$;; zEtah3a}KZV(qWq!6!z#w$eWthd6c~mnjnxX*#+N*Eoi}L+r?a)!U zQy$E*A^Odi9%+icOfh-*Xv4tfw_t-4U$9fBPI9d}A<}SIe@yQcN)c}N;j1FNkd6aZ@0D}bL9iBH+0Bb9wiq*iXH%F@C=E2`(Mh+ z*$*B7d^jyo@lZM$s6y7+XN%hAhxr{~z;D3@LDKB9r=w95POSIck25mDaP#%je+BcG0+y*8?CU_V}z62=?kd=1zW*7>(^#e-PM z=yuYSH@K!42(|rl1ur^L!KQ)fZh@37LKrj~gGg|mPFWNF70s1W%Q0s3cQi;hSn?iN zqB2LnouR&u8QC6pX%W;Wv1)6=R%DM0SJJ<=gqHEc#Rqs|1nFu^ufj?TjxO(8br&ySbQBQyl}Og z$t8=}rzi<-GK&6*I5ELl%<0lCLOv1jmaQ#yTb8RC=&rL9F`b7si+b$2YD>>NR4`?xjmK3umskVV;+OQNKxs_$tsM^GfKpce;4d5-%I# z7ki7r+F7=+VJTB~{J%{EJEU@*Om%e^$Ofc~K-8Gqk77ak&o%BBAX})c!qilhM;u~c%kGoH)LKIfHigam ziLb-C7UYLUtN~uhUoqG&yp4>0ox;RD?di;;PVe+;{W+wJ`b;=!5OB+ig*(E;wlBd9 z?ZP$)LSza9g|3SRC_FfPwEFSz9Q}cbgN0sU5C&Ov5*cUkCY@jLWJbYc4m1Es=lH~o zP?5K3V!HqDSkl$g=<*7$>Fya@G-mPJqMp`g7r-SS96J`mV!rb>b4-+sJPR6F>^Utt z2*n0Eh8fS;&&pNZ=@-r*U{6&8*OB}aJcMgy;iapPS^Y!DD^qgwZR8n}tQIvH#75PD zzM?GAM4%`r!V(nya34!x9xOGIdG~W_Kx0mrx>uV~Js)n>hein04iP3b^(1>okIBTC zM!Mm>kDsG~Y`#c{Py6vc;@MagRgxTtU~92-QzbpiQu4{7e0B&*`UE<9OP~JSsd!Fh z2K~MzC>aAHlq>*QL`b5q@mBhcG^L#wSgVv^oXP6&fvrnchX_GqK)GutK*#h-nnK{P z6{^BGogD&M7{qkR&5$^@kb)ji9=cy*?Q@ zY~fPdiZrx$3d+8*r=D%qMX?_gQPES(nptSIu1^4^?jHZkP!fMYebN5k%dj$s6WIlY z&hxg9$ra|%X#K%?zY-Nz2;OJmXn$`153!5nx-8g&RHDp409S(1JNT}_)K8D%-+c%v z)ie64G8NVtzM)xtYm2fF=;8c9$oVm90nYMZnC6vLL-~qEw|JVw5or)f{<%?{5mHE! zMJK7?S&v&(W5IWf{aU5N91NLjx+wuL*sq4-y&6;KJ$SjpRJ{|6vDWfD;h_1Sc+!bMfs)qqF^;1^7ZkZkMH@@$PgeJZRyjwGcjG}npf{^IV&6A5PUA~ zF4lqOBW<*59t(*@VtV9UcM0vuEepi`ollDy(%fUBXHUC?MZU7TNeTbj@TXaG3vQvY zH(&4EvWg-vT6uX9Nh7gc6A2f|TAhy1o{SQW_-;O_tv&94@a)Nf{VsgEKbr3V00000 z0000000000000000000000000005osBjB$Ga`CjS)Mdu4(=KJ7|K60l{RE6<>=6^1y?+|{|f zjav4p4#aktp}#W(S#9F&q!4Wow;n)mulivr#(UQ9oyX?w%K4gVOx48>MREY2a)Ud4wZG3^SSdw34 zXj0$#{b}~h3JS`sn_d#LDjbVPZQ6iS(#igM#;5ochH|Unuth0v(pc;dVMd`1U(G;{PC6-Rqda!f8zu&{nv8wa z^TzN-Eb@2;?iXtDKBn<^mNC;^22{I8s00Z3`?1eX*YzuSd?$0a6*Rq6Z&Vy~pKt&f zq-McKlSS?!aS~WUaYFaG$s!60a;dUd713E@Oo|rq0P*xGf>eo9c4y~k`RJXCpw464 z(ZcljvX*|@M|x$(shEu7skA%>I%$-##><1L*7jy1S;}hODB$Nqh_osP+&eepolQ#7 zuB}Wg&WPfYp~)`9PzQdd6^hQvg8}N43Sdt33Pk*N7|U&4??_#!3X?kT`Uhl8MZzcj zII8M=_F}2(>*0;!o*!Ka^nw4$x@Cvl(Tx=)nACDR_l&H5(~8j>0S3G6&I~EH6=4Hw zqgbV=sbg6(^0n53NW>}Z-e>9R)A*P7Yrong&W?`^xlW(9=H`Z+$Z0Y++Ok4J{q!m7 zY@0%r#n_TtS^GT2(M_-2WcLf^YSEw6?pfux9$9+63`)@7G$?8l0QHi zO!#&DsRTrDnei&no-08R;b!<5Q3bh~+siUeFjzbn{Wmo+b}=3dYot|eeYRieAe|c~ z)?l2B#wt&kCD*ibL-JEOo}d%t2X*i{Q|ZNdzG+BFPqx&@G2#kh5fwvxm8A!u@dX?h zTh?^=QNZ3oEMNc6>Hr|f6kVfvn)8$jw;W5Y7jrnMJ%D@?#ry7R>a65i7Ra7vXA_;r z_YnbPkc>N%VbY0}^@o`CV8UBBhpdvO$8gt9BBqZjP?Qnc>wd2*sEb4Zto;WhoRnBk zjBSR#OkV0Fw~#V?0oui%?Er{wgv3@ZV0eV7oOD(3$314qmR&&qwXJ+14Nd|lm`xpp zpA3ChxWj{;WFSCh)5pigp;+T9WL~8bP~OO`VN8Ryw>oH{wb4k;2yo?>Ee=2 zgPWFPMoE!ud{sLH|P12?gJ51uRx- zBg2xa*ZnYt-7nrgX0rRN2kxo?vKeDF!8||~U>!b#nh5#h-BCho$`{QDagg3jl>1v_ z{$b6<}|rr&}^hI%Y0E2WfJ4m#Pbf#8r&SJts#woc8A#y4~KcWHUfE28W-AvhFSr zX@&T%&nEU-vX8~}>b<+oy{T^u-L`4*43sLYgS00w`~9_xY+XJ{W|eCydDa*Eh5eht z^AF*BsOEK{mkrjtwmG_4;xm~V>#7?_R^~7fC%iL3>z~Qkr0-TS@tIa(lAufIpIJYn z4ppVmP{O_$a5AcoFEmr!;9ISpO6JUJo7Ke?x%Qw{reD>ey8~-ecTs3rBSq#T zmJ1(FZ|n-%XKm3Oc^4eJQGPZX`d{%Alh_SfNe^>%oAmB@1@``z?wz>6RG+1a*| zaV8_s<~58-lV~t?V#6tWanMzByYXLG-N9xaqKy*`r(Ll0q1fE`!vE>Lqqa$G_h&yV2PSgvEznDl&#ZcJ>;5PbJ z$a85g!!EBWcfumU$nBvcNS1v^8g>$;k?Oz%7_3h~=WEJTNx^V>4KWu0lT-%i+-n5& z0BX{dLX&laS%cGe(Fo@Xk=U|jPEcGm-1c~MStTzV)R3(mCCrf+7$D19%=2w~mn>v? zBcT7PVtg7&B96w$h%^R`t1bG+Bg1=blUr2i|E4f*y1j9;39T+&Nmk+;>L)xAzCZ;- z(;v`^b7YvKBCz81;Ry%wX=*+o!`NVJ-!nO6Qa=pNP<$2>$-fUX-P~hWFo%o4vy^y1 zb-Gxb6oXlI#Mkx17rCLX+xgFwXC%t^LxDwWAOjAJW*d)F@gTRnDD~T1uxA4n(X;-p zVPSy;ubb&(3HgIyNa0?17Hib!Tl|)_CPrOhCS~EPWT$*sicll5?-`aO9|$=pHX)GW8Kmo^ihg|acU)cbxE0302)@{Rs2yR;<0h{9^7%T z6JmL6Q=!MX>|ns!61&FpWKc{QlG3aG_fzso6`ApwD%uaPJp}94ko^E9c%sHQb^HmL zv&MLN-iZQY5((@Opu8mGw`898niq@va_ELtvPeGyL?}-ZltnQf_oUG#LG^(Q_+ow= z!Nob_&o(U{z2KfHlu4Fh{#4;ZxG~)I z&GR=j`j~(=e@N5g4^ty*bUej`3VDyMKNxAi;8UF5$Y~X0!l;L0h`>%9N-w1XI6EUs zg%KOi-4UnMfsB8D;6%baP4q!mi(*$0Oh+ERw}$~^gII*SURFS_nWz=BVj(2N>fTZS zjp1=ZQt)GSFal0NKz&n#4pH?>9wgTE=#CU(!)=Qw?N!PF)14bD{m?XUuUcj?DD4I? z6ZDJEthk0Uw|two(~b3IL0rSHBf`C|-5nb6oVcuvii@Hs7Xh>1*&|Iqs!-?Ev7n{IP{-JDa1`!lIpj<*7 z!&>P{p>2uT7i{Y6y3JrRoCo-z4h_Q2BQiKg(X1C<8l* z+&*I#aE4E83EJc>T+RHu5RC4Ppirb?If0Qx0l7{WO!Ja9e$ENMyq&KMXuH=*$}4LL zw00$IMe<}W1E<@}@JKZ5GO;L>J-UpTz{)ny-oZQWun9@@McR-~47~XviW&bOp$2mY z9h+X6K}Wm9y!8{(a#*~jnkgjd(M5bI_2M~mLls!vX6MUT`QMDs%qR-=Bkb9Eom>0Ot27RH)1@}=8j30uHYSK(-K9K8Tti;aa6X_IzKLS#$6 zm#t@^RruRrC2Vw8$p`$}{`}pfUk0bBf2VX~Rxdo_bZWiE6n;Vk(4i>XBq96XwiMn% zgV!eC_*K$ySaNER%YSdC>|wD0PgfKw8GQ*05)317F8%_ZvxC%1;&KMx{@@L&$B{}>MCPg z;cBbk4xtMu8Gr>Lua_LiS?wNr`k|wn?g^Bhs zVS%{Qsn;F}^D*&fDw<3U&H9693C0#Mg9AU7k)u#4c!PPuk~P`fh9#(g=G<*3$B#W6 zeUP(7IYy8>OOYHpkcXG%XvRe-5mP5juRv6ZT0%=T@#XDAwV9F;j-CB66(beX88w{8 z&SDto;<46bc-AlYkE|vE$tlr&lb{9P;{61^qDFz+Zb}CtP_6N#TY19{LTNXfTr@8} ztMwxj7Nrk9_Th&|cdYQ;Kkre})5buWM7GX#EH6qD2i!FQde zuVb5SbB8jI(vkQKVLWcV?Rwn+<@Ma_qWcnu&EcTMTUz}}UV&~zL&TK4b}Ts@r@mMj zQ)h25EXGL%rd0;23auhjx;<+s0a?MrIZBJSOSHrAySOIvW6Exx7n2R!ooCY5WDA&7 z2i@mAP|71t*AoK!M{xB=jR`H<_XLHI_m#vAdq8(VTmCoduP*dNVMACQI+l)RBDO_Vj4)#p8j zbc+upqrFWQOEP9wk1}yigrBoa6xVF_BTX27irXKE?GI;lDu8BQP|oE#wTBvqt2>;E zdI>08OJ@7r;NY8~MCK+cbxK<#O8g>?(#GBVI8kRh8A3oY2}{d9!}MYp^c?!?$__GEjJVm1MsJZd44+e}Pu7ZRF2y-Z+Fhs#F7EiO_(qs+FEQN!}=K0i1@ObTr3^!XBQM2P<8=0$u*sc7 zJ2@wD-^Ie7Nn5eQWxIR`{=|H6prILzr^!cNG&)wk#I9xY;EP%0RIu2l3{#HDKadrn zP?lWc-SgQEJeK4$EEw~w^-)Er4Gs-9WDs2{kGvE zOx<_wZKa~K4)okP2&TCg^<7Z4&8b3MopDpd9Z5j&*5A*D49Gs`$Sky#Kx#&=Xe+cF z!Mf)vxk0VSU%>UHr(1-0TZenscj_*i1;LstnreMnv&J)J2xgvhKLEvQ>kqAwNEA})5fo@Z*7cG%^zua9iGJTsCA zr#7u^-k8iw+=8H7WNvyf2t428ghBjFIc+PymFn? zyj9&Pan(Fl*x3HvaLt}x(r-_*8sXf(I4sUz<0!p_I8nL z0Z&O>JrGK(_dtef=Aw_9BJP3{5`qmdP3uq$1w}9hql&805bRrUgn^tZH&JvO{{|HV zQ9wT~H(ueB^o6~K25*9FG%S@C3X<^I1g@Js6x2r`xy>36obh?*+1f3$1I$*(IN?MJ zuCXa0iwzOGY$(;We8lLzDXY%{Wt#BwZh*Zxer@-+Qx8geNj&>l zxJdn+l~YAh_vEjcxTY(?GiIRQd#2smOUD_~Ag$saw44|vXCqt|? z;I0i#gnz#6@5;@~q|gjIt~?jUYMWuCG_&VlwRX)&@W_3-Y*vU>1ssA)C_N{5z+6Fl zgiqP&G{V&C5bK#C$2tj{o<1GS1N;xH_*~l19M?~C8!cmGHL#0r{Kp(<-=Rfcpm0$1 z_qaBiQO4LZwnY%~UIb^Qicwr?LenVDCzpUT>T1AsV!AH3={%(3EN*;PvT4nKca@ug zMtq?si5iwgAxHxl@Bm*)-^WiyETXJq69lg@*wn$Au)ifUzMe?a9oIV5C^dc9E{WrS zVq>R;r1uWE`p~>S*VfT*^4nJ}VA>Jy(BDSD`0dTqRK$EL_JJaP@W`kZcY}$w(bp$# zq!c7k2$nQ40Bsx%12 z#g4j7>kqG9+VShu*5y2x5(WS&;7{8^3DpMd&E>Amm_8gey5}BMv+2m}mj_84R@GGY zNckOu&H}r#Np`$rBu5q#KRh+_a@iNV0cdF_VKw@Es8;hob7{8 z#?`pUw+OsyRK_`sfpZ*md7Q)J)L-psj{bVG>%v9>DW0f|I5Ej6S0%*7^@ekk9twj< zAm@PN1gQ2zt?hPT)wP*uQvV3L#rc{Zy`1!f;sgzd7gKHyVi|WX`Qe*i39U6~{Ivuo z=!L^bFMwSvc^x_dJH}6=i@|QV;n-*=I{ldvxcmU6A}AqXSFjbN`abz(v6=5utal|W z(%05GoU?RweYY$r%QF-meFQqSMnn;0CRlk6XJ==DYhOxNmkc1Bj=KcyasiBnLsQ)y zhdVtFV~?R-_KR+t97>9*3)x;5U@RZa!Qiiyf( zkRa8|7$>X;XsYwx)^Pb0Ifjvp!5)f-`49m|Vt{YoA6`WZk~4W<9^U2zKQ<{#*F1pT zGI^?MxLeeMSz(~8ES`bMM$<3(kJU)at#Fpkq1D-dB0R}l#=s@Qi!yg2Tt{gS8} zmt!^C4PKFy9%zS%1vfPACthxIYvl8k%19fCbl7J}+uQCSBZG1INc}sSsfOJmnVqTA zDOI{(rTtR9_EPl9o4#>1RMgaDf?Y#K40p+gzuowOtd!wkZEes??}e~1@jv*#YUT(0 zjmZTQP)}BR>qE;hy2_R zp|8?RG5o=2Q))-BBvsj__xF1&s)XokMvQEb^C*6jV^F3fci)=hbF=d>Y6>$#vo*aq#akcaXmt%X?iN-JxU_Ui+-b)?Vlf(ta2GOUbs zaa68_cciL%2;>oNFKvKU3!s={mT}NYTs=6GPh!^+s+!?96aaDdSumH^KNwut{F7_& zv(;EU!pU?1##zCmc4(IgJku=z2GP<@u_z_iznzvV{Y2tYcv&(DMJ%2ckvA7>RlWl)i*0?+*0Cp z{6p=n}aM@4*+bCbY{`zka9V8Cwr(5OQJPZ#Y~ z<~K9J*-YfVe$Qa3{Fir~3ZC63l2yT1>W3ND4e96lg&Zu-+227y1YX5|j$4Eq@vPCi z?x7CF0E5}7_ngD40e#9~U-QrfJx&o(XQxX-o>^jRLiuHFDJ!*3EnlpL%W!on%aheA zgN!GgmL>Jv1E_#i?~Z+9)0G)XEVIczIT$0$yYQXiVIbxe6B`8+0yaz+ zl0jpO{vm36vtlnL1b~g?Fa~@LfCy4brIh8(r3q@cXnS#AM*Su z?0oD9c?&vV->5>?MT*fwf;yp4Qmbri$fVDl-8Pt?R?nJG&~3mpQR!{yx0;6Dk`IUp1d?Ndb9=H0k_mJ`JohiaVN@e59IVsR`4i~!qTK0S*o!+!O zUyVk26dP#64CF+|6WLSjFP3x;mCnVDCwl8@Lu)xqz1~@b*Qp@5vUg2{+r*~VyPRRk z-i!6UtnUXCZKz&sJepGKwO}EVv9j76v_%2-d)(rbPFt@ll$9IzauKJYY>VKp`g9{N z;LWU@_Q^}2kr1CG7vJds3P$)Ctw~M&wlTd0WC-o!J(lPiD zPLPgy0Deb1TlVt0bhHWs0y~pKpt1JN3z(kPzqC$%F0E+lox^ z)Ffpr&hBd~yyYeZ;)u-+j0m65%~FqAyc&gFM+PCmQB#qnTYkDlBHa`Qz`z6Yk#g#~ zka@?;8$^!Vp1+r*`zn8lsnSoNKW5A&E(;)O#z>~dy38RpaSQ_ep2@x!)B;~7*e!-! zy_R)0?W+>(?pDdma%g6Y1te|B<%Zt#^hRFJwZreFpH_ge$%@zIZ(D{UGPV8Z(4j2) zT!M}Ob{AXcpDK|Y^BJv--mgiG(fTIizcIF2#GlF+Q_7^+B{!*R>p>;0A$ByyR}n*5aJf zS#hbxNt#Vp6rpnSlc-Ni^` zfj)I}fX<)5Wjp57X?{=TpgWaIYGz9A&TSQAn#yJ+vgv1G+2j$pxhPeDO z-?sHXQ4dAq>-PUDlG*?2lr{m-0Yd4UOeoLQ9swt|vRg1KxHZKZa!^qtFe9TtJ$h}L zxWQ8Z!&*Gb@Sp;hVl>H7==eO{qMs#_m=QVtw(+eo{Xapoa7$CD|PZH*xc z#COabz16{JUdG3ACI=No^#1G^1-qo`3{MQJGez?Nb83I0dOUro2*<=ff%rk}ed&wU zTNrBnNx@(Os{v4k_oOPO6UaB>FG$x>m?f|=J7gTY(XZnrg|c9dd%$|eNLd%50~dfB7@(oh-+f^Js%fz@9wUAV4bhI{qu1O?>I z_8a@znhd89{(2gu6~#;DmpmyPm343!-elFuk`lAthQ@O%S2JG4{<%2q3^Z({Ok1SJ zuQ-k|NEiZU`Eb8WHm2TzW~lv>rrOfaP48r(@InOVH*3f+Q^<8{Uf0r)vWXrgoGk^` z4pb6xwYWJEAOG5ugxyb%>+*rdAXzlkNMI57?X3#>Ma$w1-b-=5bc+j_kE?=B3_9tu zL%7wAaC*u^U-aBg*`W3S&9}i%K(hdVMhcQ00Mai^e|gpYk@I2()djMXf_5pD?^ty3iNO~MJ*0kIx6s8`G97fhFwj(}=Quz3$n_eP ziii9(;&$!3hxwnTx}anKy`O|5&@^BFyy++jk`AtLnL50}G5~L+Jl3qY3q7n|9Zeh5 zr#n?L($ObQ+J7fxg$@Z@`k^L)^1H)&lpTb-5qzQB+WI@;bQn=H2T|vh?GJhXa{T#4 zlWt1&w_~?!og9P6fSl$S)BzW#Cj6-nrvJu0xAUt~!N$Zal$1u8F7pEQS%*vS?VsM) z)i2)6=a?QxaMys;$BaECEtUj~K1**O( zS8FpCw?vyX%*x69k%R5^#eF)s{4kt@U;ddF&-8S=lGMSJ`lQRk+h}xik*n-njw4Wx zjiU}Y%~g$4>J0a|;QG}zo}vw&aUiUhXcukHS42(hlChUgW^5S^1AfC|cEyu{4_N>J z_j~8Y*AnQVgz0Uf+OVZ=l$f%C*=`eG&24t#LmZ&>V)hA4Bc&OqJy5M{NFTLlaq>S8 z5(7$YEsvUAH6T&9i(43pTqdh%hsqVXB)kRj4T+>90K$~!sCHBWBMV@GmxyaX8zax* zDadh9quZJnA0`mAfU!T|OknZP8HA5nLSeFcSBn&nD|o2K!<#c5^eP_bvGakZ0}7CQ zuSD`n9F7MV%t@E+^4sRIJO2`wk}`t&yo8u|wW; z)`sMD+PrAyGHk@I-+ftrii=ge2-jsnt8ll0E8DYEf7SRBG;e77W9~mCxLYhL=wQ!` zM=%PtNctXS?^I=Xm}A%e&C8~GhHmo`Bw(GtE&7OV3d3se#8QH?cXtdf@>6B+JCjg*r;A{z8uX zhX_eKwXET_aNhoWUcZ>ZxLoe`>1+!M;z~dT;eLyo0%q9Gwh>T|2hNji>J^MCmHNiB(f0W5`%QGQV0lG?}4<_ezBsv9hYijXUDdV_PubNo2! z(F8kqK2akkl%*SP<2jE15beAvF$lTU0TJxGZx{FQs4Keq@e*~U%V(%c>;Jl<#v+|6 zIAY6z#&WLF14=I3`PxYY(DastY0OgBRwT!ddbkhd#K5UuG80Cr+~|;{REWv>R+s0~ zTVqD}N$Xru^~Hee{J=~2k23O!sJXXRA3XPItRN{FxI4dWIP~QsJ-9Y9uv2QwawlAK zeOJ|?N8(}@;!9nmzNhJo!;1LEvN`?DQW4j<`~_kdM5P{Lw4^qe>Iw6$5ALbn&0=GE zmDe`KSv&ttnhd1YR(u2=vo5i{j0iydLifj{7ZQ*=XwvR!9!v~`a&khC`Hq# zuG#Fp6EqW&Xox;0_%Ic|<5O+My@uwtY3?55PLv?%1qww1%D_P<_ww|gXJ=P<58z+C zyZKxyuz6kZWNqAwOs#)|qoV*6)RXnD)3X0?sH0_KB%f<>ENU=mPHo zJeHfd`t9{)Rx;gzQ9aA?y`S1*Gb0WVSiVVvSOgvVy!Jy(at}w{F!FuA2WM8c*H4a6 zT69E$dheh3w9F=apYDo&U7rRX9CpxMr`GY9;`@QM*jrY1=U~8dBJxB}zU0 zM~nUX=wsFj=KiwUFzWu~;9RV`o3y3$!$tzjwCKi5*B$=HB9kzW3fG^O&gS(2XV+$o zk6r0mq$C(bPMqW)uMz!$>Q^lD9FC%P6iJZR@!vzV0$jWPP%&5<@VK|Nb>o|#5JgfC zZWGzu3v5Vrv&or#54Hj8*Dcuao%zf9pu4L#6=D6$T@zp>U1RtqwSCF%}tAKv$IWuopLN7h0Fzixt_EkT>y>D5~6 z>3slmu}ysfp)gksbF!Ir3&Ff3+Z8RpGb}>C1@WB+*=LYP^o`&VW8K+ym{t7xR@U{gtFWGH#qIpzH%Jpxmwvkub075a7VH6{PGCVe><9LtZh<+!Ru7+5skccZhSTwiwjgMx^GE(O_uF^wA2RJj>B8T+`*a}h6%gUVCr zYJ;3UXDUs;iHxyG+2Y2>3)d=~ayPxg*4e>J@%oD4z=R(P!pGV{z!t<7As9i#4=}a! z<#QZ-vJhL2Y^|uaBue_RDItKUe+Op1I<(^!@H;!vBWhPI5%e7YoY_^d-Nc^ErQ-S8y3p&)iot=7@Q= z^4pB;ux*;6y0z1i*roFNxc@&dUFIzy%U}pBM{qKHj3_{8-apWn5ur=!;Y@_Hmc@Qy z9L`5?8+D`BFzCcSbKY{5;DOhLWmvrNTQT!e= z=GZt8Bb6`C;+~C`WV;wgPC7?LTQrWF?>#X4k0L0id*t@{a4!$NTY%DB4}V9#gcTyVTi`HhswZ)EC8M5#7igH3e3U z!d5>E77_9Rp$HDDlL0$7Z%q|Vmff5NXYCK_s_)1go=={2!5sPQ-gFBFq!UoIp*aJ(W6vyi^iLFX}T;@gg6;m#22ZsWDeQO#oT9uBBO2 zxPB6Wb+-M@)7{=pRBfhjMA0jrsC8y~71MF#!SVlUSIb6N-XoFA``pKcuRr+nif>(U|$Q z`?x99YpS_ZaCiVu7VCyb9i)HMgWOJzmHq|&zel-|f{O)hmvd8lU~68P}< zfGOsRU!UJS6#e`U9?=rF8^BE2x#w77I-;(?i#v0fk4|Z*^6SJ7_YOk|pPzg^&^pRJ z{qSYmvErmRv%YHEwZ832rS%9*o#;d4|3Jm6x>Kh{16?ta`ToD5Z$#?k2`cJpYoHKA zs=yyR!{YF+l^kWFJiH}Qe@ByFVz16dl^m5JbMeSJqU+gp3Ia_}D&DQ9)p~;?Sq4{+ z3PePvgyUs6CV1FzBlYKxjD^`U)C#Zif8%R%H#CPo=R@c{lh0&=otxCjSU>v;2uK!q zaFL>{_NP76+Yh`nMftgpO5~z5<`n8Qb%`+DkTe)#{hOg3Tw)m0E)E$Talilo00000 z%b%zvYVWDdfaZfFG?!nh*t`e4=9wJ4=54y?AqI;`7KblTq8)nKXKhr^QNFU70Uq_7 zOHx+W-R^R}9Q&F>G(A9oQ5G34EzWukilRW6Q6-u124v)+hBMLT6_0G$JPIVP<70L3 zHLTE!&B=8TB2{|VS8S|@j#_Cotd@ny!LDPVxgl1obsg|{7x#uTV)LvB)t6PzT`^Ic zT$JSsjLT6IW16pw!GI6WZJhWg0uJP!A7*r_$T)^v?>$zM$RE0eSC$ z7irS`QDo=;_?KPSckoVgNROmqOiEd(=YlTLwYav6WnywZj;_EGU0h?l<=U6gl^h9s z;@(s@BbSb5VrZa&);SqWX8*FLnl^wXu;WYnkHGzguq=WkHS|06M zUCUF|4!H`Km8_I{e&#Nzl3AX{DTpnLFR!69-Az5bbw8KV>!zn$bH9}t&1WD-Zb}69$Td$O58QPR*(JhKv1)&@=)ft-hnFPdCv%{; z>&eJ))}XLK$#Dh{=H3y3Zoj)Rdu99Mqs-?AaP)1KQehQD6EHYxO9aB zPnp(*2V3a^mM^g4>-2|gVq8!+Sade#(yLy&DHSTHAB@M|q?de%&qwDI-v+I8s0B81P@?XU)WR1J?(;wb`>5y86WS#j?KU{R5 zH`?GlYKnMg$+1Mt)*TU9P}n$@3Wq zcG-=F<=Td#`!PlPL2pqYK@v?ksSwyK!JKxI1Hrk~iN>Y1x0wQh^J&=!%A>HHXnz5V zHFV0~!iBLy#Pu~KB)qGfcU&(fj&?-=VHW9{t4{^nO+PW-A0|sP1aEgDKu2Vj=X>R(#*3w=s9DMeES~JhX0%=MY@TNNf;v_N%UlDS|44mC56H&R?&hx zla;Sr;t}UYvQ&DitG;n1&4W#E(fB4!KB4%cfkIpVl;xBrtXe;Av?AiB2OM)of`agW(#}I5)%nr(=+}Ev-F5y&#`-a1WP6*#WIF(DGrVUe6!csm+B4mb%>_ z&v4)c(eVz9kkzH)cH*xofF2HUbU1!7HtAkIk?A(#I;T$Ea%hK(d7harz4|e9@J8no ze@PIS_9#%-O1Tez^=l@QE5ka@fCI6HN*P1$TnKdL`FgT39ZtQjU!x7DU6k=qGu~q^2cNA z$`vr?#b1omVP(!|JF)r)W7n6jS&+7A1#Z$5rXXO7;X_6l5>MKw6;iK?*E12@iWoTTyQ90-HLIDo)fT(D#WNko_X!MoKKKu> z6@Uk^ah1e6%L%8=K32-%zsxw(Hyux1TqD8@x0)j12^YR`v6hb{i`5ANOh2!Jj38<*5%7!!*PrC;KiBr234UzY*hoCuu=hMkmV{=FlvkMH8 z2mG1huHf8*5Is!eDy5yS+M!tGxDD2)0w7KI zho>UVJjBr-A^jz7q|HwW3MEB)wvMU5p^Tq!0`mm`AkcEh9h8Oz+8t7PmiVTqyLW#! zW^ima)+@JGZyd`^}ou^`Jw~Pc#3fF+hD={8vDTx-8>t8u){SX!?S(CMtVEu)Zv{Bw9uL`QkBmSoJNb4hw_G|!3-o*C$qAt7ScU_ zEjeM8=%tjaHay1e$gZXV4ohIU6l3T&EP3&y8{`oSYnM z{!A&neie0`-bHGd_kWrLt&E`S5vZBh_tR!L%m3c~Y^y1UC{Pk$4N8l}lt?eAkDO{x z2=_-9B$FR}$QF?ypB~#am+#wT{wn#_a=Y-;3++id4fiW0D$mi@G_2tOQV4t=Tqqq} zsW?Dj_bJN*v4*6g4f34KqV9#9dGiN4WUrDFH4e%n#AJV$n{-M$&ljh-FFXfTTL`{X zEi@!F)r_CvbmwBzavbsR{fN@{dIE;P>x5FSflS=HS~S9swJdz=g-n$lio85XN}AzQ zmuQQVbvb-e=foQ%R2*0uAE5Eg~!CnB*rM$6; z%u(M0Uw=dgC4oX}RU0m&Lq^^9Ij^U7T*UK@A?o1aLRBo!wo%-OU(tD9td7drm@Y-6YJ zFGFpkE((J(Ni&hf61_4O$PNCVz59-cjtSOM@dFI=7AaGu>mQlfCC{E1NC$9b^ zoZX_0&;qf}xb58|jrX}dt9<0w95|9XO_TH)1}qlJ^`CsBHX(K>AlsI+&j0(l zhjKHr@$k!zK=jwCssl~?K+zjN_QG%e$1KEUQVDSmMUl%C9--`q@jA^+y32zwdD%j) zh%R}*k?#vJ{ixQ4=S_=lovb(o6Rt&Ep$a~zPP8^UI5U{_n6pT3JbWQ$wKpC4b|Fk_ zt5o*&-CHKs9ndVE0_+Gxp|WclI3=~Et)O;}(iXXdFB?bgyTeAw8PH)qjKF3y2IUpC z*S%*kRI;=oC2uHN4L)R{h>AI6&D^IG^w!08mf?lr`#zr{98y0X3fz;VTxJF=#}30p zF-SpDW|$|)!nUYC3mXdM3ZB{Tc@-Zs*=$;m$dBKutwKldb7ZS<{+ z6xn8b`Y$yZ;2ja+j`|659>MXydHtMVAxoQ z@hCpRT`C(gGns^mKl7Zd+rh?IZM&2^X+j(>R(zL8>g#10C$Hd#>P|#nRIb(qn|kU< zRd%vs#q*%B^-sAPNezezx6Z^1B!sEh=kswCSk{T*bK6=X0_ z5qBkh>R24SE)f7sAwrhZx!f**)RovKD5CVd&Y!%hcbQ)2!ik0sM{ZaGn~8R%U?$x` z&^Kc%;93URyPfF+0#yDu@!@LsFGF7^k17coI&KF1h)YxCyHSbZPU)bbK_TD0h3~lV ze>XESa7A1Y*iu_Qj(V`X<97F)R_wxiVRV_%gNEL%?hB>T?(%KA2w>+W8xiyV485qC ztunUzbi%h<```49P`pd1>&Kn<|20`fmoHio;p!Uy6VdyLSLA{P`X$F;FA8fB=sll5 z&H#cofYt_;{Nc2UNOV%%u319svfjIFO*g4{F`I&z=WQ`GE!?kdfETK6V@Wo-a9njp z96M=5_75Iw#WH)ua8llo*=yPSVeMp=fr$aYM|pLXF zM_p9=!3eL=3aOGGbOYxoR&x$FIpdnI_Ey?d*fuE4=5uTv38+&pEFK>I-O5?2)`qpu z3Fvi(+=r-s*EGZd{IT=dkl!gGszRssmhyc zupBTH#Ywh-$IhB{vhi8JF|6gB&bHPIsNKZ?#Img1?Gd{!ospj?ZEqp({^l@=HyrcN zoFBCXB!zFy?aEkXbr;k-SVCHtt*E~7naam8iDIZ3fm)HN0)KSPT2?nvO(ObkJG51z_1Ad-UJ}_oDm2X zqg67h>*_tUGWbLp4o9DsG2lq2UNu3bf($*3!<6F%a()bf&sTYTt6~jPdFSOEb91-G zZ05FP{s7DA-^QKWOZXZGvwQSH^|e2_ool~p(qTcjDuKTGhD8=no4hCbQDpsH21h@} z#7Y#4+FQpQs$$y@Zzn=u6>6NF*JB8v$uB{Qm_YEiU$*AZB1D?pc>8B{KML^_h-C~= zs~``r+-gcDkx|!iFwNh%Fy`-uS}dVuQZcsJ!m`=K*5bZju@Eh-rTTI<7NsNus1z;^ z5W5J^#PjmYtU}p+Hf!KTl9aMu{>`j2J{lUgzC-Z+g(Mzv%Q^Zup$ap8)0=z@yC!NK z2AQP8e-f_Lc^TZ`^s=6_`AKi;uza%oPx-6K>+@I=gB5{~T8;tm4D-e|auDNr#Y?#@ zd!r;OfiOQTHgwxQq0}l)_vHbSzEayf#HM(WrmE;l4O@Pdd7tP!HrXTlF8GHqV%^`j zl>{x_oPsCYEPV-BmU%BF8n}tcgFo#gEm?Uk@-ho)y{S8fU&egSFnsuDvmV~X0GNN8 zNsdt^bb?eoRdu6!&>WxVtkI7tC@dj2lKndCPA0fH=%AY^wjj-&ffl7l%Lm2k_# zfnOFQ1W}6)%DHb9JxpoVEiYwah3A+rhOzv8@TUjY`dB$xy<1CuAzNzApm#NRtzE!AhNOI8Mj{QW#=#L5YADTYm;n zOM)r!zM_V(5ky~%t-`|BXj{S7;AWFQ8td3K5bz;ekpl1h6~B2GUqszS>Wzf#1QFUf zR4ReP#fXUClh+yf4erR7B_=BYv9 zp9p!){cAh=I%3xO<94Rg5t*}Pi%!7Va za8F<6o8|rKT)|e-%4P9n_*4%dOwXC*>HQqQICT$2nQNfXO4=xK3jm5R3G>j5=SrdH zx>I%WxyG?^A;CHcd#Dp=52P}G{3u^3$d#1syImUT+UiDXskr(5!IuTUw4~Y2wyS+d z6_hX}Z8w0z*GGzRHp=kzgzzAa;B^RaVW7hLH*e^_R`Z3Z$+JqBR?9tTO&7tl z-p%Se(bZPq4Po2Up<<)pNZb|P_%7|QdgQcl`y5KwqABrMFe389i@v{EGxHrROsSBs zQ&aRcmO+6be;gk?HtKIIG$&C@#|M_uh(y2a!<2a2_Hn8n*o`ErIHbnN0p-VO5tF`% z%+2dl^M#jWakr>!a05-DTFR2Gx1X?X(-){q-! zQBf7672HU7t5ZS)NF+A~OlAO|{Q^7Ad`a@vh%qRP;bb6Z2JNHkWb7p5%HG*^j%}(l z9A7WkjjLVk89K108WPI4`dz+9T4INJD8N8C9lg|>j@fces=JzMbD9!6E%wDfds7^p zU@K}f!T_QKr_m-$mXbEEbTR*1t9JDrMHpf;DkOsD#O$8I*23jP0gFZ^`X}huKevPz z>3OOE#1g8%uDh_ZpjG~WZpP9+u%S=$m~silL^>_$yLJ=9b@3l7ba8FLP{ZJpQEf;M zPZ9zavB=uC9rD$DVI0|E)8t(x9x4KJz+v4kV_n@WMAny^%r9tq0y(lw!$pp+T>{8Q z7j16xMFwR0r?ax0Bd;-d7|-QJ6gc3_@d|Z`tS1n(24@PM|H$e_XQskborLSH|6)hl z&E<}ddIvVm7P2{x|xpO)h-E=DTs)u?=OeU?K}p-y2A_T?!NdmBBY`=u2H$5 zRF*fIIefMFEiPcNr{rIMTmi!TcK+wnecQ@bJ-F2;kUEYl!qow5FFceY{4s&qOL9TI zwg2vCZ)`@q(RU%1%~M5%TZc3@E}V~nbJ2fWrI;f3{B+7sT@CsyW3vguOG9Yqi!ZEeZ&t@XKrhb3 zx+ipP(x)m+_6zG=Z@f!3>Si}cUvd-r-MGuUvL09+GXF;^z%4AJY33lQ?T;9zOH?~Y=UKIOk= z>8Q%C9urJI5l#kw)F#X3)1OQuF+|YyqfPq_M!Xa%t=l{se%8!mKNHbw)aLb@N6&L6 z0%;LW1lpekgI@mHJuvM7?mo#v%z}z`h^pSbJN5IRb186Dr@>Y?}`cYzc<=HR2M_Ipy+<&ZwJ2OeFk%e+sh4fWRVQsg z`ADvwo0Y-xb`F?yl@$?UA9e*I!!S)($OThH?Lt#grJZ6ss8vM)}M2?3pG)rLd0INyVJ7{S#SQW3L0cB4>MiL`@LOV!8FG zo2;ElBv_kkb_)+|zQnqMxegrNhPU5w0xP%KmPSHL;YQy6_th&wb8a!?a&m@5h*i%V z(6 zWvDQi;*O~Iq>;c09(0X-&VlR#7g2l%)$=+{Z?#ti%^3by!e8VN>ZC#$7eT4LdO?~s zmI==jSqPQemD9Y6F`X5xt>{~Ab@JRL^+Hb!V}+6>Nz5bPo-X((Xnb*%#ZaI_^GE@^ zo{XFTKb^9t$BqfLR9`jwdWOu>CKw$~lcb{Xd~>+FuuJLy8@A!AXW*PKCEQ%B5ZFlL zVKgx@Vi@7(n$2u{pndh`mgU$}0Ke3RCJ+SZ^m#VQGH_EGmiqa|AXX#N)DK%W<+gUk zqn;BkVYg&F0hLi3o3VC#wZL9@_GWFm;2Wd`x=rhCAXQ|!YGh!%Hg`tN)zozy_?{&4 zOP6{_g);%+YRrdC;7~VCCV#!+tDT%IC))Ql6Ki1HLpa5w_*|_BZ=z>SPcsI9PRkQ} z6}r;9q|mnACCx*e{6V zD_Ba~G{=~#uZS*J{^Xph=1aP|9`fXE?q6lMCpGSlJLtEKFI=U4kU-LH>QG-5#0^xY zzwM{Ch#Sc%4bzC;^P=!YHAWWH%&6e6DcQ?57F41NRSm|S-1FCl0h$YP1;{d}s||O; z*~<%n(0;ds)U8zrrh08wF4eFr{q#)up;TF@_{>H}$&@W0mWTKUN-u;APucAj({3}^eX6x?T5fz7NjG^f-guqeB$;qV0b0>={U2 z`<7D4^C!~NW^|a#X&jLsHA?_9+zZN%%>OIaWm^*Ps1)h@F7tMJuSPN-9&T5hp~MOr z1UOub8Wv}zTpv8j#&iulI*vv|MoFGFnrjJgR?vQ1-~g-gChTrCrtJK`GYs=D3i zh4U=_@x%l=wbo#^3xBQ$vOdrnP}$@jqrtVt{D1Z|K3JNhIXWz~L#~hQ2)kOKHEo_C z%X5VJkBvN()4OD0bQ%cT$&X2hL9&ggrw7_07h6nSyfp?AMH*i(Vms#8LVr8~Z>pIu zmQgW6IMD=Ca<=O;_?&+kooF`Xj&nyc@PMkTg?tda3D$gB$G$vkN*mgur}|z>tW|)2 zlWONz>s0W+9>akIbWzKGKl>Kk$<$|4TkDVf&~9#EtQ9wZ}vHzZKpL@K`0na&d%H~NV! zwIE$c%j35Y9N$1opvqJdz}9g-sS1*e1&OFQ^7^4Z`}DeRG|50pmCdvgh>jV%wy_NO zx7w15{>L-^iD{9YmX*!kC7V=Z#_bs7F9^(1VRj);`nT1zlYOvP&Az4yPm(8IJkX<%q~ES> z#BM`JNJc{l)kZ<(|9xRQhC}!1MiWKtd~s;wTBvg4Kp=e=NF@9%W%g zu<_%14>Rpg3=2wu5ZeK;if5Eg!r0pU&4G#VcbWs$x!f?_SGb&?kas4f6iKR(1pC|R zUc%-8uG5SzeYb7x9obN;$*rvR)N25zouM*p95raLUY%pY)9X(GNxuG${?*@7`x%y7 zq1fzi;V<&`Bff2MA`@!dLOgoQuy_&$k6CiaGW`pkoIOW1F-_!+MYKhHdWVc;s+J3e z_>uchqq#RS7NSq5SVQb9Ff?+`INje5wwRN**x}y}#EUGTu13E{5<_qd-qU>VX}Q|7 z7j3PmQf@NiAV2_S|FEQJ;BaQW=pyP}w!DQ%c5qk4>OyeO0bFk!r6g)uw&^&GVycE1 z?n`0tr}U|Y?myj5Xw-}9aibGx;57ifrfY`LUef=XRnL=yX=cGz8@<29*!kv<@L_*I z!+=C7m^FkuS|P`I%rf51BZXEKt9ww?yE@2Js)*5lM{m||dd#Kri=fmsa#(z<&M*e) z=WoANRobhyb2dFBI3Y!bNk9T8ycF8zm-`m(2>7ybp)e7 z^ZF)3%ZZ}c&ALv6TAyC|(|>ZPRjx}`%<=zMC85#|4L;co1^71@VGG`h?%;-vt>_`R z`X{JrC6PG&HQq5VL zXy5uEEGo-708aef(|^@qo=l<*$w&kz0Iy18+8}9K>hm)Vje~%S3{VDl7x|A}zHh{1 z*6wV#CN6Oj?U?0DYv20T7a$xLh|K} zYko+tFy6|Sw%iIn{Qpz0(?DIm5>be|2K3D~&W_lUL-1Hl|_S|IQzcBVvhN%ZnEdQhF3JsL$lNMz-m^(;aFK)YkenUB5L0`Il<+OGk zjmOJ`8s!h;KV9}=*Nv5?Mad7XS6`@8FW-pb9D8rI3;UPdwU$82hMm>O3>9jKeV4q( z30_G7`7*rUjyd_r9q=i2wS}`TZ6T;xP<*SF3Dh3L#8y&Y%qE!V??oP|hTyJk)dSi^ zF}MYGZQIGK*H3j_yJQcsRd9_!Oh%b})dawvbi+!;m{9eiF+w44Rn4-&B15KbPW$Ig zIGISB#vJBUj)DS^lCwXi!93RZ>Z>)33v1zIOh40fOh0TY6pnLzHWj{>Ii`K>mWJBv z=pf`$lhqYHZ4M;p0ol7S*KTp1fK~T9xL0M!py@*$7D%l@A(VSqx>2IUac}h5_VO6y zTQ)by%vZ73dcCH40y*Kk4)1Lo(Kc#`8z_vH4K8|&-5QD4=&=|lmoOat{L|(g6(%Jq zTrr zDW3!0ESmPPlI;jBIxNMB*n9jR)%l!G5pzxCk&+ZiO4;0c(#qYb!>p0Ki?3IDa1MlM z=yy@QRz~xPbVxHsIJEZsLK3Ij4{VyjT;vF6tbGY;ebKZ>#i|k-Y~>1g!Qj9I&a}NT zZMIR)SY}8#@p!9u$P}C4!0K8rZ8J6h?N3To~-v@IV$zibWb^uH;4WjLYLU zEP_7wc9Y6Q*gSc|lRC?7A!!b*A>Petj~M@2h5ZM z8}4VQhX4ONH#~rj2q!z@?wq6TZzmzv^`Tq0U}^jhw5ul`Wk3}habVsYDpD0H(rP`L za1|TLe&@!7dpb(fYeCoZQl&n3vvu5t>G(~AFIC8^PAERKZcUB{c)P92E|6qD%n6Prqj2Y$}hQOnviQ)E>)E%wug{*H`oD7gF`z_~+R~^zb z-GVW}u!8r(jYlXUOFIA@BiiQQESl##due@kLbg<1XjwY@991~5-wi2VMZCR z&yIzW+Gu@_d00nPC#&e4UU;fPp%BlLnK29s`IL?`l@VWt>y%fZ86K$lw=jW>m6fr& zL#c{Jx@%Z4na(_`*|cI=WCrm+=A}w}?`G?{4b$+O2#SSScpn3P1>i;|tFD>W_-h~O za$R3ib45@b{K7k40(cqL0}*XAi+Dy_7)4>BuH9J0&K{B6Kx4daY1;jG1h==wJ20;2^rR)H7|lqxR6~<9y{fh}k21&B`Vq8Zv0THCV?V!wcINO`LS%<_8_%--dxoZ&O{3KUzv*CJL%m zw`!Alx-ol^`QKd38xjyau4^t|dH%}C+V?Ue@cYLSE^P8^R@<(U601RDvQrIrMn5>U z1U#jE^(NfU ze4iCV?P!ZNh%T)8TsQz@Hn}h{G<&?GYXa*AS?GO4SiZ*!rT%|QYJfnTyxbr%zWq9J zBfKCs3HdEjcCkF)<0j5WxO{l0J))X0A|ecy{@n^CyXEp^V!Sri1KY8sXRA2B(R*}S zJY3kZPk?j|Cds?0(>JqFdL{kXN9yFVWvy`9yGDn^5R2pXmRSUob!#z0>hpeIDdzZg z$meRPtSs@luqTp@F_uoC_K9zUeYE#rW$(DQIz#%{gam^aS@{=N^0Xf4Xk%^HJ&}90 z1&kL+5qI-RT6r|^bs~yxj^3Y5wVcIkDy&~4V*YQ-X6m((BqvInl#N}e^Q84#>@2vH-v8n|&vCn_Fveo)W&jS<8XMV%BrMt~5Yx}1=ZugLD)@%Cs zs#GEQ%A*lj$preTpLNwNNGp}sAK@zKz zI6i`n1UUEe8?Zd;6L{?NNQm8hxhg4Z$>|f$Njmv{{@}&`NHcSL+oPl~!w+zltJ3Nj!IEBcV}fj#Ylpl}Xq)dM$B;ca z;E?(MuTO#gZDkl5G3=a?gzag79u4llChzBxXqk|~%Hy}+5lsjsUseJei1&nd5){Fn z17Y8HFun*T|8lG!F}vBMB!J;dS1Bv#PO6w5T;Z=Le^J@BcQvU^PQehkVNzOZ>3OA=G)fCtDkvH z_d{tQ2Tp$uw*hV&A^%9c$agJN0PYcZFXEE%%fAhQwYt( zS@v>%D1Uv?8>$4zi*0SS3+G>@T|3%}JH5U&&t7ovt+n)16=eiW=TK2Uq_kq@27qv? zD{C`1AEt#4p$`4V@^61-s~9=Og&rq?!%&v`XIm~_CkQ?9>%C#!k_;yG&P@5l-uaYm zf%4m3%}l75)E~I>fvPIU1={*HQpgzm%X@0cPFqk-T&er0y&Y>{0B^Z26wNie7z=s^;sN2G!&EvoTM(>s5diB5+F?IoEeB0f4j zUcByPM|l_q;#QBaGS$u7x!(VSAEcgSv>G?O(x|V^!Y)%iCD?%Sw9%ev`I>0CC0Gov4O*8PlC%iES zCbf!hTzdDj2V=@7o%>^yFeD_gF^vMdM_HUNxXBv+)|a3CvQ!g}oFbu)Z}ztAmh$r@ z+W%_`O5IvvZ0t&;h~ayqyUuaBt#7MXoK2Lz_qd^$p|-|p65=O88O)D!5G#~bK;AZr zFWEee7kC~JIanaHD0!w!j!*XO7v@>kh z1n3*f^!A+ihVHoF$y7b9B}MYNmykp`ym$t2`hYDMT@Ej@s-jW1VqAXW3%BP7j0cJI z%*%E+Mk9U2H9s`+!yLNEJPbOtVAMjl_PwFpHpuqH9f*tyMK7xZy#DD2ZCQAit)^-L zky++hQNd?DDBmPdGAV2mX;;Y3nN~j+xAzdp+Q#}Zg!C*B`tv3lV75nP;1MKpuGJXK->TP&ab8Fnkw1p`8sG}yNYX~Fb;7|TEN5NC=) z;96$s%Y938=0zUMsQK_qY^3C{eD-Pe2kZ$nX)g!xQ`g&v2}Ec_$>^)AxemxK#) z)Rn&c<_&pcN>PHAhfKhL)%VAo3Zf&=tviB+3X-nQAMh)Be+B~piH=-hNQX!kE8KyGqHIt>r%=4 zOOY~Br%w1)%3xX-5cX}Mgi=<>rRUQNZbPaU$*peXzo$o@HML(yzPW^88o`$;NJ+uu zqr#);{ML_t`6}8LH$3!y%@D^3Y!)K=+(1GYB;H+Sj;c)>tH2v)6803Z%D{`t#0EhOXz04JBQkTPmP3KY802NxhE@>1e@;C@5(mK91( z?=rM_(n|5Ii=$A9Z`?Nzn-6qJuuk@D%quDY0{kEX79m2V;CQgKzHt1PHEx?cr(x+X z=~p)(0{wc0FtHyCqZL@VpIVu5w>ZfP;XvX?gI*Hj-C>xwc+!_pmWU1#uQe?7l~1sR z-7f;OYYaqWMjlV#=7?nekgW~Q`9{c8J*83W`{~&+`yBSeA55`y+Vf5d`b!%IbsHZ( zfo;2OSl(GMZ0nK1uEf*IE)K1v9y-=i=s|0?O^GqQsN^F0v&+;3nLRwPm`7(sUKr8+ zTIVj3z$VDwN&C%FpC!SLPXr5$&8U`9K!{c6W4|Z3v)R(9<353i6A@4e`x+MgBV3%} z2=?I1G1T($-ZAOo`@y2F0V+v!3#sxl%uQmju@iy5VagcNLDq@5qwNS`li}oq=hRDu zk6q>cr3a3qoN2iAevJ?>V)exxxxiY4v?Kxz^{p{&XWg(Ojw#lsuMEo1=Q8s4h7y2d z^vFP_h_q7tScY;j53{u$Tzr*T16GAyW|&mbM7tVH_@r_ppkze}T_ROcKR=|a;2c;Z z^Ef5T786ykuC3P>u8sM<^Lk$cOG)`T?TmG+6OhTu389S-PnKDOXi0t|0pgT&2vs+6 zDPeE#hY)hm5dI9wBGGYjYoJ~_Gz4rL{zCiraHvTA40iK25;5%OsmCz06VSJxjjvA^ zuxjtrEhD^oFcdOoK#$257uSr@R(?sO6p$)f6vEw5{T58};?yeqsZy+-0CQ+6LSiPy zTWEv{9?hG`7cXBVs#qAf9O}E*osGnAP6!qMiKB!)SubVvODaNKOT&^JTjuh|fB*mh z000000000000000000000000000000002~?9S*W+LJlu3C|mvpx5Xdn7VUu%4^&zLV%vvx4F3<{!d0qD>b&y>XqfoZCn5V3aG%x3(fK8hq1b}ydb&< zcV?gS)FNx0@O@$p>`RT!)JI0M#}T*u%hAeTIN04qL}HaGcW><0t2X1vT%9t@xZN|T zlT-kSl6g~JTO{oDD-97)oW zHN8elAa*N9*LS`45(X$2Ef!rCYEMZPdzM8aYIvamL*HkL_Y=KfIP4u0v<0*~Vt@2< zes3^x8a4^|8MN_pwhpb=vy5$p3By6Uzt8M^8A3{f5|PIp8i#kJR96q@*%j#g-x~DeozRqv)Tfxs!B$s-FKWrAv#i!saYTv)|5dM3*B)u zKmSJo3XU3S+(lu$!SB1Wf!ZP{aH8;!OQEjH&3V_>e2Hmkc19}#*8Z4=`UIP%u2NwX z|BrwG06pth{#*Vyxr5JTp;~P1cq8h({B=>4;Sl?U$>OcaA$GDkBx^mguNh6?C4tkx zQPGfQffPj9dj3V#G8MR$h`5YHn&Ua+0Iez$v`MuWNyK|wZko$=mtS-peEAueyuhSu zAv4u#v!m+6vOAAO4lL?*8zo;T&XTD0fMQAB(n-s*a^Jn!Onk%|anl&Z!l)uF%K+X+ zu9Y747)^T$PKT+=tle%t^lg-=Et6H76yDjWNaQ*yT#4FopGL#%ns ztQ$}6#d^2w_e3}u?l?I)HNQ^vcXb&IvQlq93rveG=Gkrv>?8cH zuL^0V0Y;iLva7XIpNnPKXb21BW5oyn000GYu#XYr7gd)*9FRtGyCFyZCHkW|k~cHK zs!h&U;iUEi`h7XDnoc0V*_nMR%`!zTCi$~BD-g_WXRhmWHp>}eGe|AIw2)hUilKU- l>Q-EAIZ&1H!2so~_1FJ8e(_;4`YQ;(kpKVy00000000pZa325w literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/qumulo/diagram_thumb_0_0.webp b/static/images/auditor/10.8/addon/qumulo/diagram_thumb_0_0.webp new file mode 100644 index 0000000000000000000000000000000000000000..9ca8cf7211106235bd504aba0848d415a1d3f116 GIT binary patch literal 28916 zcmZ^Kb9kiR(rs+pwrxyoXJXs7F|m`0ZA@%UY}>YN-po0_Ip4YW`ELH{?)`LXzg>G( zt+ndyR+JDGJ+lJ8E&;KwP%%@;?aK(S%o_0%qV5I~Dz^qc1b$0@$N%~6?j7md@Dk*U`q^}<^qKrf zz5Vza^7^>}Z^8e`*Mg z_f_tUf7921kLhtyG`r_)>5?eQo6t>$Y}H-4$F?q|Zo;sfAY-HY!V z{>0^VC*G&oyX`0D!Rr(LlWv_Z0RK>Do$u1e?z8`0>09;({Vo25@8jpvL;CaLQ_NfT zA^+mr4_}Ut-cQ>%{ug|A`ZwR~&(DvZkMqyZN1Av2&nL2?hNy*_)&+Krfm5}0OY90m z=W?6>&(g06-^`)dBEkW%`#aG29m(1;r20aIgjG%q)8iIi4m#DA6_k znehB?JvL#|3I~Y-&X9REJv^p)$rs|kFDMDfML~|bGBJ?zft>VYBO#~#xfuSvgi!M) zH>;WoONTe#vLVP#LnjjVXe^w)BC|g~T>D(+xQUK58#MGf`ShTz^Q()2L#b6Q!A7b^ zTe#S^I=iTf$>eqYe~J2M$>E7o;PGXemlb6E<6Fa2E6iGYX7aG`x0H-kg8* z_R}Z}_9k8k#K!Nd<}{Smv(B0$L(=^3Ih-idNeL>iZIBdtQp6gl#~P1`ZQ<$^)>1&@ zEL=s%zxssGcXE~2+aT0z3f2FCW3#p*X`B;ePMu+Jb{rft!>A#c*Cxu4!*3 zO1FWdJlaOng0?U@>niZesOgGAadW_^}wMyG!$l5-5*#v-g`}`=N!G((g&nt)T5pqBXU)AQmb3qcr(y}noL)CVe z{&rZ*HfwT7yD86{5j^`hieX>jnJI++ z;2DDFTP{nqd=1BKcyyy3=eAf&jOsPdleNbtn{J(a_J#9OFCaT~-3fSEt()mENB3Xk zn}^t}f?3A@Em%a;=-j!jW1&E+nbb$$ka;YM^<=C9zf43kRCp}FX&*9RPUJ?&rMy#y zLJUHC-4VlBUH#(>aMdt8DlKf&K&vb3ELd4+i%cHmuR|EqH`^wSn&5^_L5W39Cj7p7 z-6L31G}`PUM+lepdcma_fC&o21wM(T*Lf7e%P4GV_;dc~*_GCUCePD~F#B_5BKVN# z1F3_wN9x~A%USWRj~0idrga|5y65c0zn{u=Og_alLZ&AoUljeq4dka?M-;q|M1fKs zWEcb+kq3% zSbw29d9eAJq5^jglj>->5=&vF5Czs>(kst<;^!W(wji#-KqM5tIrxQFY{Dmoo7k_y z^asJx(bynJ(v(tq$d63imn*@B9ODSB=0E#wt@2=Hpv`kYGoSZJr-92flK(DIlYnnA z`P%Vjz#eFg;`Bjun8K;9KTN_?hZejuRIvjAqFPNTa#W4OYg_n3#vAzMXzeizSRpnQ zu@*Cl4RFsI?=Igwp45Z{;9=~R2Wx|6cVf5jMMOTAOGXo5xL&4;OSG<3VghaW+g~Em zo;^67#z6XM2G8_+?_5%YsW{811v)~Fj_!V$TBSvof`r9eBb{IPmB^5cd;pL62Zqmk zhi}`Oi6{Dj*@F4M5`#;o&i$t0d(ZunqjTno_f_}a4AYz zDu0%9uuTGAdFitAG0!^LvsY?)Pow#3>3-WM=NgXhau*1Aa$3 zAzC9aDQCZg(*o}6NiJzP!cm1cM|Rcddor+b*Rma(7VNAvhPXBlV$rr*D1Ol)#kU;H zGq)$=jxG)GFVW%OziV~|5&MrG0tNiG>vd)Q76V@G<>x4N1H$gQ1@xA##+-P#0xfQ@ zLAx*vIerKa{lfPE?XnkX`C*)V6y9vzCP)8@sC!+uSPiwJz35V;08txVmXgiWC)?wb z);?rz_fT<<#_uuEvV}r@=vRhAvMj!kPWOcy3;T%#z0AM)Nv<#;+~@n&vpj-b|Bb)^ z?9vVG6`jQ+m6>RV`vAUK-|?jL%{R~ zg{CgULl5s?T>VEI{=R-fZJ_&aR8Z+Q=jX{ATUA2mCn;jkf5`{+fT+Ueh?bjgMY^nd zWxH=`m#-qS&Nr}JQee61!1AblufO1A!Y3q=Zz3dJY8y2?z zj0G=LT_9A#JSW&2rRGa|g8NOAru_O3an&{bNNSAx3!?}g=eTmp(z;%3ZE1pU1c%?w zkmWnhl_M z$CWrYJDCDpnKNA$)W_DYILMx@XNRYWA3_hT^gC@Aj(z0_{&uI(@y0H$ZKdL`8u=re zrNIu@V7EVs;{@VJsWh1b*;Gr>j9N+<4S6;)Ik+_u=n|yGja@(-KU4XP3|O<3z2Lzp z=et&JW>B(%)*O|3RdTfnwXa5ps(0j;uV*&WJrY}fgAb5b-v7mWrr|DrP2Jzh?Hwvp zL5WRyDN@B>vcwsXY+s9`;;_w%K1pP?L5o^-#i=O`Q2wjwg}JX_WRL!;`_Wdfvu=(; zoqzW~df8GXm2Ica$p6Ux(Z*V5hmd~}0k)|fYH!=rm#p|l$r~cBi)+imo=CZn zE1@WU`zH*iN;F*T9@0Oi#QqS13tRldLqIHZ?6e4^r?-^viIr>EK#LkvX z`T||-OS$~fAa&iKLt$he=YOSsBIXnRW)TkzA9OJ;jcgJYPdAX7#2+8zWmpZiON4Ns^vN> zeSp=3fJb|DqYov6<*!t0;DK5&jh*|aY%(TDy-=D+* zdVuY5bNXNI3L=#@4%EUcxqC=|$*qN&N;gpW(2D}PVsJ^BCvSy39$N`&c7~OaLBUxUUNqzr00_)0Idf`>+YbMeu(d+ke|FdRgO-c7++H}n>u@Qn^Jq1w601s-fps~Rb z`tN!Fk01Qaxsemt8UL+U9Fa-kgq1mhk~x>u*GAUVc%Ds{3qeBOMs0#X27`&W9}|tD zb+ne60Q4Wh{eK(FuViw04%0=EZBZ-~Dt$jmJ5u;3P5-a|L@(x^LvZ_7l$6Y^O)Jr3 z#Q%>q?qjP%;Y0YBJq$2A3iE#9`a^zyd&S>m{#kMmU{`B(Bmcu~!attzbZ2e z{#$cxt#Zdhw)W3<|G6|I67pe`#?Y}pLivB(@&DwSNYI<@KW8Fpq2YA(m+k(;mH$8$ zT@GZK@XkNuTN9K*08x94=6>XsoTN_bV8W#~>tE^o|M-2`u=eEOO&)@rm9g>}lb0sEju^_sLcFrmg6dxFEJvG>Y)Nw6+whc(nwtjW1P1>yg7l+cm`@bS6E z0r2%Fsmmc}zgeHob+VPJ%D})B0xn8R>ST>vx*ifJw?We)|2_+PLMRPxE>*X7Zy<}x zkW5p6P&03+IMLBm$MZ^_DPw7KL0jo7%F1Ot8X)&vT<# z&1Zx2v*#Kqa#|C;qK4PQ3J0;lM8fyCWl51QZ9{0S=&Gs5kGc*aI)`>`Y77uKF>}K?1#SRzXY=BU`M%x9@N>2*#v{^PKAE1zLT8@RD$$8ClCRvAcAvq1-tW zliEDz3q)`a%wl>wdRB8NH9SGcy1I~B-A|25Elr*Bx5(^Jz@kH z@Oo|pK?0B`du0Wz;*Bc$b%dMUSQj}5uAF5Y?{j-~A2J4yy@0fmp5`gu$7!Q6u_x&; zzurL}!m-$NV@Q@Q;32Px0U~>jCe7Y-j_2w+CO1N!Ps{`()dNoD2Gn9(hD=|!h!<`m z?OYry>SJ6_tU&8($Y3<@#QfG2hpJYQbbbCOgxmUSTB(-ltMXb{|JrnMBMCG;7y6+R zFMR&fGxjz&hJ8LWC3lF{BWIm0)J5HTdOm^Vk+R)p(yMQBG=&)xLEUVXrpCpyQR!8b z`=&fO{8L%>9WkcFTaZ&S@|*|FP9TVDFcY+`;o~tPU(OYO#APSH?aVJxE65q<}VbR~#ZGC^oC?hyr5^Ar6kENoQ^nGJ-udR>$a_@& z9qfwKQXDgRsa{oanAo#un&m05)g!byTz9aWcJ(FXpI3&UT7N?Bz~)wBankgXq^;4R z0wY7DEBNJ<8x;E{NT4Wynj37W8i5Y(q_S>FF2pj^*O*ln#*046mC?YTEm*19TU_}-JDeT#v#_QQd> zCs`d*FGVVi@;lQ!N^u{XgfMvL=;%YJRQ+dh2&ZBwrk-6N8Qo)#brjQJ_zg_vE?dw= zll!-gGqSdu021|o42eRaLXx?0PTkhSVr-v2OotXFVEn8T#tT+0T7M_JFjk=1q#X#`eY8~ zQNnd=VvS}=c^$xBaNsXP3M4Tmr55|rj&%l($;j(dz5;J%zQD6K9UD+u-5+y=jc-C3 zxuWjcUpTw(g>V)U0*5d0bq}s{7$Bp2ZVmrBsSH{(dfwnq|wenI2U^f5&MnaTr&+!NZ3<-6r zhSXz{ed3HnOa7}SL_Yw0A%0h{%aw|Fqw>SL@mZrD~jV5{hMzN_gpu_vj_*%wk*zXol@Pwln03xfjj z2Qo!#;yUmF008?sJr$0v;{wVPHO3zIteC28JVxmrDO68K&0P3E1ErKJF_;1|QVECq z_jZP80%fCBTq}0eI#N1R3+!a^WQOSaW8_Zqafe!c`QH8Ra#bfQ?GB!u)Ywl;3H&ws zCCP#-@3;V5`6i(FJvb~c*I}ZgM1u56x=8_q)6#k)hDl1iG^Y*aEHQC0C@l(E4?K+! zDu$I#VSVkYi6^!X$f6VMw`|V(+%)LZ_a*j4g=xvl6M>dgREqc#qnWRC@_>05iIyUaKM#De-xIET!dw53p<8_~qag(4_3QLkk-f zAbSHgUv2tvb2qkZB_yRsG)ddRAy?c|ucELKYOMzHl;2c!mmv1GdCbQH68qblN0t*S z4n~mLgiP56c4`JeyJ|{~V$%8ty&`rP!`xMrmvS{X?PH$YJDUj~<(94Mf`(HHw2JkW zJ=O>?Ac5aiwgF=XgUl**sfnmkh7Q^7x=0jwv)ja@%Z$3DTMf3}b&&-%`t>`VzH>v{ zGtMTt*{`N|YssWFs$0yMBb()~{JaQmGsMRQjoV9~%#u{^wgUjl*x)u_?=ZjMBN~<) z>Yozlq33E4t-JzWpdp|SADc2AIw0e-ZAYdP@ePc;MKBv2V$3s$+X8^UnaI0r!Ma|v zToK-|!x>T^r}p!H+$B49Ffhz1Zs_JI_&)EbSbynQ?69&rz=gz%Tm&6-?ZlzKKl$To z_>8kCP1fBxK_0Rp)=4#msnTXc{(&vw$S0#r@BFd>KNpTtIvk&c58f`8bi=Wg8P*<@QtBz78QOh$B^Lrk4rs8_yx2w2bh$tq>x*9dxc?2QyAhR zVX=24AJMt>)L`f)1HT_!^FUgW>OFo$oPRUE6@$m=!W0ZwXPu^75d`-$#h@fnx)5z; z-{db;z+pLcutoOeWv0Ey3@zSNx|zQ zk;9Z?!_M!F|Gfiy=nak9Fj{f7^H!Jj`H1$0uJ_EFKH4|8Dto>G3GAjJ?E9Xk-&++i&<*Ji&_7-UL&_;#zteiC zIEA~hlswQp_F7ocndZV}3fnY@p^_rP^lL%H8R1$GL=f8vf#Ch9hlzLLo%n^f@H<&& zJuI@)13u$NdIHH*qlq% zD2wv9;yR=~4$>$W4;yR_LxX7Z3clTq$tn+aygGRm4hzX`& zw`96Op%{zqRD@4&Wmi(?hqhO$ALY({V>N#Tn?yI8q>m_FKpN8NIPYMeI^{EbX3!E+ z5Zi+|GHZQ8i6TvSxueX7n1UF0Xm$xFX|g8zx{zk#8fG}6PrUYHD*MJ71L7>JvCH?} zU0XjrsHh&FYk}Cih2+xEV9l8Z!bd1E)({x>I}Wv}`ct5B=91&);6=0+G96ZKL6G86e$*yr-Z!?OUPr&wPuE)mTgY6r&kWgZ< zi!oq=SX_!~>&WtY4Q5G*Ni54FI)RExZfJICBMQiD?_1^4X#1xRh6hqRg!!SDy@vFm z$sI?82sjK*XNIr?;;1xVHx##Ue}vJyWi?&@vb^S3(k`4HzvbfW1(-9tx=r6JYHMHV ziJA?Q9m~yW>fzoSNM=G~73%xJn!+E;VcZ_GN7J`Pz`4^x!<{<6Y0$tS$-L4#9Tgb{ z%wN($+88Ag$7^}?daf@h6eONGGnLXcw<4~?!c}%vXke^`@)-y)vaKMB!chlu^+~IP zNa`iOy z-K5l=a(=1EGnmIu$dZldRvC428R2DglS*rC;M#2*%B8qT;_l()oz>k8&n?NCHA^=U zATf#vj*|EKxYG#8m@@i$*4JQ4fp9Xe8&GxD58z!64hC{s0)1t!=9lswi8`VCr%wzW zB0U&Ms%hVhbB8%_z+g%8>)47eZp5T$PJ#?rpC)M~Qqw!X@hI)nPhyK&=IZb9D3S zQWa|}t*4E~ym>?PO;Mh#cu3pp#f1+zZ>iMZY4Fj-QkdgdfKN3Mgv(VsQd&CdZ*-V> z13f`QNQD-IuE;;Sel8GqRpkJXa_WCNf}tAEv3+EoZT<{MaH5&?!p#v{tPq}JUg8mY z9ub5o%cgQ$qpgG#nswybnBAVpli{3arP4{&`=*j+l@5jweoS98{jm_z_`Ny%Rcj#X zq&)>JHk!4ZlvG4^&ithvtqklrI|{5gC{u>hZ)IaLH%hE#Q~Kcqn@iF96Ax{zWyu${>-&*jOJ8!m3E^JSx^F z-SrfEKb}P1-tt(0cq430iTG>7oVeW-0&Bl?M21cPWW<5uA;Ty9NlhF5{y>e|cfxF= zx7USlw1_8xrK?}zy+1f{pT6&#v&2F&QcLHs?ngU>s0>_<8LrGSI#N2X(pvL#RpbfcHY3?#o!UsHr6L9z|FQ|Q{1Nb* zNvD{mYIO=zUV!G{fd1jdstFSj3=;%8C!!fsP zS5T8Su+_+(EiF8kq6W*rh7!o>0}sw;o_jYC^YgSZ#44VJO{|Wp4%>*kERN)^MjsZs{qOK7fZisLRPxyXS#Uo0gh9AW=n;! zAnP?j(0|P_&ls`$p#(k)rEaF)q*fc=@=c1p@jMt-vjrtm5cVuu{b^Sn%x?Tly{8m9 zOIf}a(nm_1kj`}_Hg^pN5Pm^=qd^&LMtk@D8S{ zk3v8EaM8tzHJM6^v1&{Hpr$g)4Ifhsx+D;_a#IHA4Q+^kNb&v}4_(I&DfSxYMXVrF z)O#kun<$b4`?Z4J)DEwwgLoE2?2%&D!fjMFA%Fu2fKMRyM{*J z8^Fznsvzf_3mV94nb9FJU4}f)Gq@)5#lUz*Msty4!7+ zrYbWk5Y_ENurA5wVAw=az2yl>uWs?Ax&u|m2bu-;213n1-Hes8uXNQ0LnbbZB))ai zsT0Y++J8giin^pm%6c0(zShOUH|x(P*h;8_WU|r$ z;vJH%j#->b-gBnMB_Ruu2O|lE5*+0KVI|6oIk1Y;cHP_Ee)j_uV1lSr1Xel1B!~cH zx!C*22wV!0+cIyzwVh@Nd*Z6pt@<&Is6<41bS;#b#xj4bmy*gsa87CP-me_SG}#9K z-~Y#Qi@VW8mm=B(b{toLfN%hWiu8WUV~{LSJg&JzNYzPh`iqn8`N&PFD7&mszbnWJ z+lAkgeV?G{N9(Nu!5@38VRYDN>hhdru61{fICXWn+wu>B?`1 z1i4kp)y-X>pFJfWlu2<-Qoi{%dd!~}gL9pm>!Q;yOlE+u?vMRb__k@jV3q)=^NbU2 z5Gu}YqID+DRx@l-aCgDM*(FqY3~1VsDXXk{s;Z>0f+b8;(GFIT5JTqKnW*j0Z`{Fl zGre3~Ll$>0g>-4ai9o!uEo*3J4a&!EZ_(`N&b!-H#mFqP<2=+tjt}j{*DHL22Jy^d z65&0^ht|&(K-_l%->qI8>l@%pOW_ASD?9A3XMKJiT$Zz$qcd}P^5@uc`4qYXG^0N9ERa&!-1>+ zLcPYfio%(?HZ{tSVtT_-I2ju!TRDlQQiDQknSz}7GLMDd&Ml2mJ^WQ)^y42o7MxgOEBuzSh~A{`S{nxk@PhO5pd zAlXQjs1H0feIp3qtfh%kW!3M@h2Z)XsIyD}5Jh;Gj=$$^q&zjl{O;7NYK#W&Ae&$B zW|(ID=VxvvPar6C$b%&iNJ??VYG{q)z$_4e^w5at)#oQ;r9xAn^7#Xu)G{GZ(eRNa z=)j6T9Y+Gn804P%6dbmA6ra_aHANY^2%Q7xemc`(Q$gENuJvCoA|~OZ6^|1-Q15tB z2W!AFzwx0aZ+IcZi`7a=YqZz2-U5UH*s&l>jOMlDZt%?IXzSM1PdUsl{#2(UM8cgL zuC+^w-`vT+sgJv3-`34h12ECJUnOM896dRl)`xak`5?FR)gzc)Su!JKM;#jSF?N9{ zd`|1+mw5TQV=?7nADlRD+futgozDs8930eDiXW#eZar65AtGPCIyB3Z0QpT)h5gjv zOuM?~);>?VJAq_W)%8?@uw+C38Bo6NXq;4@EGV-C4;+G_tyh5s_cBra`%3jJ&bfwR z)Q9;Ks$5#RiBa^4K-;3$c;MX*W%y~CqkdI&TX}}N*PwBg_7)PVY%&stk8{elBS=Z{ zvBs;&se?F~%QHb-y6cJ=0UYY}TCCp`rNqkxn+$KD_?&3=^iw2%!1I1XFq+cLi*;T@ zAjI5&olXxhu}-Hj#qDh{0Vlw?QP#-Shp7UHy0nE4v{_StPI8^@%>z(JC|n)!%{8OuXYiOx8-w3 z8P520&}9q-NRs;q*9@nJ;oa&%^U5b_vQ0dpOLS@wm#$NV0BJ?E2zt{%@wepKwkUV> z&tkYYsIX1$J!CR`F#mC6R}Wk2NiTXc|K8&AisYB;)A zD0j1|9vZ(+4EbSRECd}}dMTHt(5?$w&(LG(!R6+^aOX$Tz z;?yfQRy{WOsg+e76p0Gkwnl1=6!!kmKWLmCt<*0DrZS zW?@@~;+X?JVo>@gPxuK+tp4G=qAs|^glSQcMCLs$Ow4eX0X{D1d@G=Ra1Wyi-xm5@ z*`>ijfuOqYYYJ2-!nGY^#gozAYa&t&WJn(S6&>cYaaw)A>&~z)2#iPEvG2@;VHOgt z?M}B|J0Jk*t~;NAXjIgF#w8t~-*Rb{mV#0<*?6`0uiq^YsA{u4-;n#~D5yERRwU0O zy`0eg>vU!0zJ|gMCO?Pys|30+2=`S?vlKLotJG6l{Sdec40hCBmN@C=;O)*+x>Q^Nc!+K{>8%6K}<7- z?~lR%ZN9b!_Q9OtD>R0G4P^jO7f}CDT{yTd9s&4*fqH&`j1U3X_2eBEp&3!Xbk|*` zN0s4xt4y7j!rZn=hh7&+!iI}|{}Z)hp@r~IkB&65z*q5TMVD6kz&@zQIN!|M*d5(Pqt-|Co8d?|M1?0gX)u$ljyi&pV#McHv#h5uIf=NR1|yxM;UZ zh|Mwm2CB=(EBv3qXE6^v|`>dR%dDqO-s2mZ!%oFrA>r zApne__KEBmMc?U*YDxsfq0JKR&2&S@%Ep2-yCexsqPz6?0*N4h7NOv{7!b4xEq zy9Gsi&}}{99#nTVM*Q%NpV0*9{fRJ=jm4qFO>c)VV6wB2s{s>FBfS+cla~Ygszu9l zQrs>kGtO?peOK36)ouCnU<2dk+O5?<)58Db!{%Zum=X4b?+2MpcF98MC2sgFlc zdGGo>5jt_+Y^)cdGWL+0h)?hqKCze9n6n_UE`7&PxC5CXj~Dkx8X9`<=210l%Hzi$ za*E9gq3~L(7%q?;$mdcM3u1yOv6zM&d@#l3{~6#moVM5pTYY+IHL*CgKQ7PfN*LW5 z?5|qgNTQEzsy#BfsD+JlsHHB+Bg}eM-r1sDL+z4MpmfIl{UB~84zIR*k#xZ6tWN6O zT3o*WI=y~#u)RNct3F*3V#RhPt+#%))a#WR8JPv2Z9<7I<&1|*?%^X}<1E~>BUoyq z)_)*~fY_VcNl1KlbUqAn_VN1;pDOh}D#%-nP^s_%XTp&5eO70_5^hyHo>tHUu^j4B zzguawn({_WHa+i-3e{T+zL|`v{{g@BdKJM#lMAIU0%|e5br@8K<3t-A5m>b!7c*Pp zRE2*AQHOb5tWW3e0PEpwLVut`7zYCxHzZ0CT-9id#=bZ#_MokbtMcVEU@ zQ&Haj&V;}TZXO4#IlmX(N({Jn;#k?#x8Uj`fRC_U=Hy_SuB0|q_$GYBpqUc|CJ*D@ zX>69WU0!=XZ0b2_qA8`xvA5O?2>~thF{;lW7=h$tyu0$?>CJv+0zEL#G@zn#;BUh{WB%WuZ!+^yf~m@(3dSA>te&5~~^E$!VE%Dw~;oUu+`q zu5Ug?fni=S%0S==mUZM#`C7sLW^F%hEw31=fsnq;# zBQ_~aqV_o-Z$}iJ-HXiXlr4xyudClS>;#}Hg&Z}Qn(WvP1D5WY;G%tI!z}&sMWaw( zkvJT3H?|0kV&t?SjHLkOmUC>guqgn!=oF#Wu(-c4QudJr7xgMzkw}r1yqDR-xsVWo3 zwAf{q57#%gmempPo@$(J;KDE7As-&tc5S`%2V@+%U5#T9It{s5fSp8PxLGU+t{oU# z7&_yMOTP2g(Ni5k)>eX&-Q!%;(N zK^s~C!^@uAk})|Ioxsk^t7zHRNGR`j5DJ3s(q>v1ER4YzU~@Nw4DEQjWU`2Zn@vq- zmP>N&kS&7|roc1TnTfA$779T)#3>8!%%h)iV!gnf#Er-&{3VN2Z?L%>^1INNuQ<^b z&AxEj)S}6O;b5dhdQuKIol;fI^ph-Zx+2zX9iF%XaPoa{&pm2@?5A_YDXeMW*su(r zq_ABUt)Aw>xlH+%QNd`NmEshua_Hc$SF*e?IBrL})Htr)DPBE##w#W2$-rAK2r)UV zfXA6pGJlFAh4o#oi|!pv@W<3by^6Oqn+U}+v&N}o^%%e15R328nfAFr<5f1#oC0ud zXg&!q;KX!nS?1v{l5_-A`l?fabxd5qw!7-MoNC8C1R(3ph`0AvL;N}}uD+oYATw&D zC*v^fg$Qf_u=js7&zIV%!+lZTT-<6HksY8EFFiPUZYPBN8r{c3LQJCb(lCQk3L3&M z?PW(^QL)N)<7;w{Y_6D&?%et_2)D>zJ7x{EiC%#M*F<%h$0{|tE2?SJLfkwkvKQs9*ojz zNKH2aIt2b^GUZ=Op2FGpDb22fKHrkQ;b%N#nZRS?uUWLmJi&Y#Dv4XNu8)@7FH>sL z6aYY{ydQ<%X1*9WHHXuJ6(^fA)Y9C0(=uwr(jYftf%NV9U3qe(AI@^pS-c2AWkep! zo6HqmqGm01Ca9%RBgD5aJHJ|B!RokwXx2{4#R32?dR z#Kj8LoHxNrM+d&VngsNE&}mXMn4O#1l~y&9;htNQ);d-LPoBRQG35Q+>?fgkAN|6p zXvn}U>HQ;&dSnI@VXKzdCQMajA zsAL0Z7>VC)ls}9aN)4_-55Y}37VKUbb<9g(=%retpbS=+&2 z(}VVn&&8y0WCRTvI_w?(WvX?w%US!_Zxg(Bv3HOUtMFdfL)KBdy_4pvlOiI;6SS>2 z^{q#!VkQb-uwzDH0A&zey@QTWC?Rwv6XW$h;guxHgXesei}Q5ObsaUqR}~Qh`z4@G z2jky>YtS2FLU+J2nUv}19KKf2nWjCRZ2%YF>c}Ik%QU%VGmU%|6O;>_EfBw*iK`!k zMN8Kk7#l!}q@Z;k&!6~BC000`UfssJ$61s?TRR8raL`R#<{tp?S2n=X2xPMxvS3;Y zTJgDl38ZoVtlP%)Lj=2;&4J>QV)qQKi?WMJjI*8yzBYO&w&>h9)CGasr@7tJ>u(3} z(MZ?I+u*8!sD>^89gNi_C#*#%%?4-A9VAb2t&Pe-B#Hy>?Cw9i*_v$O&qdgnZ0v@njq+_h9E8NLT0?k^VqRpjH}6il-Dj{ zwsM4FH3(2B!F+#N(PC6RHMh&7WOD`qX-5(Yg|KX7yq?m=)*VL+yv!96 z#?iWZiT1t59$*Zh&vvT}G&I-}vPCmL^`_Tk{+f3{Gj9O_#ZCfbxFofl#atSJ|h_HEsRkVQmK9I@_v*up5lx)wF-Z00!`sWa6(GflmQ zTiyg40Y+;>fO;lJ*tfGPm?wwoHJQ!E^Ku1(Wzd@e>E-?x5ZROXEby;~*kW=cmFPEk ze%e&7uqyTBbYvknomk4cHF7-~@D^bf1Su)+OD8li!piTyu8plZ)FzOg3?M_*$tz56 z2F5Lgn1iE}+a31NT_j!RKjXj+{KxQd$mpV@%Mws^Vb%$lPSL)6ED$Fk)|AKB9Aw;s z_^Y#5C$?r_2wUs+_=%^kR~_EYo{jwHf`*L7Q<+^Nx|* zHL#TSnT(glFw(6W+3UU>d|L@-NWfPaZx%50_??wfk#^-6erJf~ zhm^0i8yxit=IWd7-3R#3qeYSnM#GME=HkTY$O`pa9_7fF1w;5fLF8b4l67RJ}Zf%G1EW*$Zm)GNu1 z78?tGCeF-_{jFY%74Un1Grj^=u6xT#DtmiXAXb!VZgq|ng_3p!`eM)lza{!PF@Om! zM9ImN{sU$KsQ6w-;(b86I+aa6<^{pf z7E*zcGY@1sO0i(Ip5NtSS11o2@0mH^Ah=5UCggS--$P073GB8sWvYaKw;5az;bo(z z6ugO~@*N2+h}h?bxzA9umk+VXiAJ7uycCp*5W67i>pjlkdM&0Q92KIJO~ItsGg>8- zh}sJ|($sg9vB&MpX^JfMDY+PmufAH8`&VKPIMXBLHBKGm+V=l2@oGp{!_%~XL6pmB zo_tiss%Cq^eiR&dhdV8NyGpcEZJ#D2l-K@td*wq}a*0xxkv#BzOkycDeS7CthdCug z0t&#L7Gm6Tu#Shocc6dbV>yb2DbDAm`R0RkC~DH!7^;3gh435Dwd~e_^5-@e*R`y__WP5%%gFa%ygDocu&hunuTQ*{^FCEK zz5!bKyKkgL!;TMF@#tM}xY9kC`8L3wNy9T|-OJVNaI5vqPQHT~y){n(=Drv!ef!{Yu&oELHK!72LSlk3! z#|e$B-JQ#LDQ{XD#jJicA=X-V+hd4m_Yjc5L$ONUo;EroP+j*EDbB%~=p#h3UB66+ zx%f`};Cc$op>h~sJKwR`2xHq^*krN;27VoCEUeSndDl9$!xKW`JbYs^m{*|PiDA9= zJLlMn$AEFK^xg%2b*_GxJdtu|A>+NM@|``+tAG^)J9iYw%2O)7QXQJ&I}{Slr;#XU zdkp33C*!NlPS9X}M5aLfg(j8*;Hn7JKs{?1&J#pRtJB<9tD?iUA+Z)Z9@E*^FGMAo z88blfp<{vC7qSZ~TmTSYu`tK6G(vz3d9hcslyL6N1mQieN}9-=rX|AkY=aO71FWuy zKs~J(7~pf5E8%N`)I;3-y*aCoY^1{_y_Wu=N(B*_cI4~V^B(<-6L^Sl8|{J!T0D3L z*S(|XRWMTkn(~O=$2vA~9Q)wSKUx8I2S460eLg~Nr~GX*fZyFl{1OTF?M^ndvN=0% z@1BAbIHw~zL_b(|qXI>nmGK(!k|t2jb4MO?mfFj@Vl<6U$?}#YvY#j6nm3qNT~dExJk* zvWB11EU~;O5Kz)WJ_d{hC|+)KXq(svPN~1+4Ge!Mz5LkZiq$~!dk06$|ydM1;%2hVrnZfGu*3t4MT(Yk2s0+NA5b@cxZvw*;!KwD7@rKazdP z2#rxPoZMIw)|&YCVFHd9hLcpcZg(`vD4e+xsBX1pgG`LlvxnD<1)|lo@XVnD!qmf@ z$6mu~Inb~2Q<-^@m+0Me`||rv4mFeoo4plu2O*iSxRh&w@E+hXDAPxrqmDW?Y~kdR zr=!%k!Z@N~%Wn~)g@N^D&t!qXmca^&C5`4drGL3eJID_Z7X;Qm`%WeH<{hb}{h5;j zL+ZJ2iW87`fVth;5+53wO#C}dYpddpHjM62?qCm;n6w9Z7!xSRPqKV2oa^@pAx_!d zM0dVv?kq)gZE>Z$#VK`mYyT&hSE%Wg|Z*(TaI(CZGqPY*$m}BSh?9G0{bwFK}l^1~Z zbhI&PKbL{Ojoo}3yscMMy-|RO%daH-`&L?tf&9k2xdhY_Ra-{sO7_KU7?gvdIW0S* zoR%~`E>1|i)Ra2IB**=;437bcu1ZFLz~!WUmtX~& z`;8%`f|x{2+z2=?eNb6G(s%L%=Nawe?jTEnG3KGVd~eWHB$!DjYyQf*ag${B9RPEy8s zfr~HBtVqmEooQ#HW^io%Xv*%XdMK6ssCOnstl3jId0Ycl&K z5hUP?IgP7W{QIKr5OTBaX?#TWdn8GAJB%17B;a}ru)S2!Y>M;wjqX);gHdL^#arW^CusARPAqHF`*Qjm1#Q|CE-xi zB1MQe(*Gf2`v+=Y#4(2T!0bR{`wwn1sr{7Tc1@Zxi~*NWvQsXk+sZP~84tCiqlTv> z(bF>9YxBOk3R}cl`fsH1d5S2z>}EJttvjr)&L074WK35iB{?wl=iHN6@(1DHc)@Go zWK9eH^O+}y;nk>bSb9pAVG8qh^YMF$O6HIlT0VrQ2B}b$zbdS4*2(AvD!OWIp{Ggc z{jP08g<4~u+Uq1Z#CB)%^bv<%fzTX{)tKzBecinUB1do6} z8+GYH#AqiV#Ig;cMd3TC7a-$to*d)@#rv-s+wd|r%MdoVfp(zPfqGi_ z2TBclU$GhMUHv;!(+E$S2Eq#9D8u_dAIE~99~n;fT>p)QiV>fw_BUKEm$1*I8T@e) zH!1}^*x63pwa5i<^d==H?{_--w~6rR*5tmuc)WBLNzYcW6_KrUzp&S9%rj4XA!r;G z3;XId?NvYW@bvcRr*azT-re7Igj9E~vfP0@%)vhzJBlWKA=uY0{M-Oe3IWh?sKL|( zZWoUgVkF$z5;DISP*i(p@(m3&&EC2#8i@x5p7`HeOd95mm`W3Ka#B(wnJrBj~R)%Rt;hJ2?=$2v;r9AtQDD^+<+-du1C4+7(eF z2l(Kyk+5gDSR=Ocu~!@aB`dS^OqGyALLxKLaY6Weh=cUsVyN&(aTXZT`e;i@iFd~u zt%)Of0N0}nei8V^*Xv>0)&zqKf*1(Or~LHjRyjJnGhi++UhtDxYp?t=T6Sv-Ez`Lg z{myScqAN?Nzuj8D_Ymz0L<%BZ6wZYTum8Ho z;Cm(el`PAK53?+HT4RVYRg$&hnbW2j7HTO{VE|&ndaYX_J?wDy{sh`_VUbWA$xkL! z>s4r_sP5W#r0I^}eP=ST#c-salP97e7BO4h$Yp&UFDJgm`MX=zd0W1fg}z>j-%g5^?M=w74U5ZA1Pv6F$-remxkN^&8s8xmKZWO#}P7HW*yN50bVYE4i)Q9myJO#)147V ztYb~p&k2dM4*ZJFcA!Ut?Z(;tmTl4Mu~R6<^b~#MO}ip*!R;9U6X(vZ*GcHXlji z_esuvi5t~5+blZwMyF*7mF%9J$zxq8Ievub*(|b!T=I<$=2r)2jQ{c6CbwXMGw(G% z)3`=a`hOhbWMgZ6`MJ#7@OkN1UxRB(&{1ey4noJL2`=o38B(uLS(vwuleA++_Y_uk zSD61r#z_#N>P#Cn${2-;GbGy=)^4ROMr`cGtxj&0TV_1k*FP^pJ{hNa<|B$nSG&LO z=lbah(V9Hu>6T?@7LOo;i&k9at%r;Kr!p-dig(d;5(SE^pO17NbnY?K{yrt}YsGi9 z=z?@C@dHe;Y&`R>zC&xhuCnj+_RvH5MI=$8Sn5xBx~L$o9y@GJ?$u8n1TWT49>beb z_xZ633F6DMGYD#7x~3mr=$yL-N2#WkO6gyN6DAuP*Bg>sC9(U~r;(A)`{@3I4_K@o z3mF@V%0pNMrjAYT^0EuPzLwfJnrSS^t{=`c(88e8eCr$&r{U)#rNS{>oIF?|kO@S4 zB;oe>vDV!?-BP|rHHRhTrLcKpr{Gi4h;pOK&{vZYlSF~Yfg1<;PEEcL_L`b}Gz4n? zlZ(w%J^Lf4jg7OJ+D%t+_Z1^P_xO*LF-(6j(QQV4WfVDB$=s7>y3qYqe7ZACoX1-I zLi0+<_0LF!c=<0P$E#m%I_HwRS_w%n0{kl@?OMclYJn}8_(tnchWT8tqWEI}xWx^W z*6k(%Qc9`$K%jfrra=gJ=LWYQ>iK~JPYS6PZpq)slI6JvN&sn-a#J2zPJy{pLSzL( z-yJQ8&5K?1<;8Lynh9vEh?exiEj0}xn->y16Q50I2W94|cHY>A;VZ{YUtL+NhL|k+ zUF_na;fyV$sg$-nWz(yf>sf(afHalxkDJQpRJy*zQ(RQlR7TS~#n*Z&hNV8pL~DF0 zsp)5BHqFGJ)Up7Lut}F^B7`LDywIST1Ec*5rr)y4ht0y!Q@mQW^}oE+k3gAm-G1X? zXk;*1JSu%OQ`6Rlu=IRiNx?MTqaIG}q&O9~D<%F#q@sVb?HMw-H%dle9|Mt%AQSmN zfQw^FNld;fGl69BRh!CXcFy*Fna&cN7hZu|s_Gd`9GNy2(Oec2MwgB66co|w z8K4#QK;J58#s)bXcV}f=E9|(kAH9Fp=qg7yD(M`*s19?XIjHozMQS+u<{qps9(4i+ z2Wd5niB3i1ZD|p0((5Xbw;K;frVub&ToXeTwpeY!K=dANJ@RUgCvoHMftx)OvcJP? zbn{;cI>v^v+*ZG07GI%?8D2d?&1+%@jI+jGQkMqcnyp8ecD+sT4L!+{J&WA88YU|g zdGlOrt3)7W^WveJ`fUnu62Bb%FZzKl9D~y4wR_VnPU2Rzp>_D5q%xueR@Fr*H&P9T z1?3E4@5wWMi%S`3=r6$0WydKGbD5+m7x{2YguN^!aHoTd4F7ZI#ELYa@TGzMIWe<4 z6$i_C$$J+}EH~z5bluyc8jP|j7o#!`II$#hKl!ap&GIGl5&ZY46&uln7mtn53YQZjhJ$ue60Hq4`tVco7aOh^$UMs32X5y!k;!>T;3qy{F|5LTL@s08*3z*dEfHy%04&QVL=&=O2;idTx`+f0G4U%L{aOO&h`I zJDta#jB7K_L3I%6Gizg_BL8 z5PL5S2~jXQaiGkSrD~w-(b4Wo1nW&Znh@MgF$crC(x;`R3Ez!$Sve9qJf9C?G@^12 z@*M*<|FuEgQA~8UL^~fdstGPYUL%Wy_f)of$*y#k%1nm_cu679{2pm9@cR19OD#LX_hxzTaC_~0% z_moK4TEVHo@4kAtPa{%mq1zP3j(la!Q6%Oc{9xR2XE>OUK*-)t(zK-?BPD3iQkgP{Ps3 z20p%thC4Azsh%e9>czv5>*ix8b!~pdh?`#QWMzpVuG9Kz?V;F!SQEed%7# zNIs=*3a|cdRn^vAK-Z;XJ7Sw5GDODvPL&tu@_M4%rg(A!;uc7jGM4`*rA0u5f`B&o3u+glKW%%8WXmXFp3YkF3-+lxBn8?(~{*dcyxS> ziSkK>CtyX@N0OFWG`B3;(bVU2I1F2X#VPCoZ-g!tfH7pQ_dc0IU&r{bqQk%MB><$x zBb&oMN{JNHX7sqCU5(}~>oKl4d?oaJD;JaM^2!n|Z=7&w29k!75(uRe9HZ(R>8>VWLJqB z?NBVK0R|&Sawam}|5;~)`HOe+uZ?kJ9bK0fHFKBUYEZvdjiQuqqCBXwe*(WrHnlfbV)IllaoVY<E;pL@kC;6XEe>`zh^juHa|IqU^?u%=qUM=9fxR9dTVx1*+f^ltLKe?2<# zw9I2|-h<@US7C|6M-aXgy#%#dSoL~wc)%~Qc6PM zFKxu)3NAby=I-V8I_XMRMbI$(;uf=>jpR+0K6}@jin&>6@0PAcxbWjukAWSl@Imw& zSAEz9hdU_I$+Vm1fHlsv5=A~bWJ_^nY&qER!lYFnIEs-`zaac65bT@vjZqTp(*v1! z;qh(5fp3LXhT{3aZFXQ%^&x3bQ9pcSs@ICQjmPM7XIC87b3sHWrA3=`rRO;N3kPq{ z%_|$e{t3aJ#MUQ{9AP!vZC5^~<&Wd>W9JDh-}vJ-QM&m!0dB^i^6nD=?NzFNYvfI_4}HP<#QZOE_aKvi&)V#4a~#TNB=XN z7Vxz;xSRY{_A@M^V}=JUG%yZidCZov$JLb8bmWiiW*m% zoKVuAv01ZTW!=2S2IACv!r0J^sjM7f(u;2>P`L@czsa^wjm`!v4;z(<#X37dJ{odzhkLB=}CR z=Vvj3vM-LczN5+Cw)_BHDc0q4mfCh>1yWY1J@PM`MaZH%%tn+A%j@q|_O8+`Brz&P zA_pX?w@{(gddV@NqixV8jA73kl0Js9is^~bX`38+HB5<`U`@*h2++~Nha!!`o&fkd zK8l7E-5iMc_gnywcxVE`7t!}A3AxEMNbH-w2DlFUEg^nPvXX}V1>Xn8%_XI4YPy~i ze+n*pEx7{kK0+EyqK_l-cIsg#9`-qS8O7V2GBID$DK$2VhkGy?rSl_j6slmoRakpb z-ksQxa^XW(R7)y?@N98^y~4WV^cSG!dRwvHM@uSRdC-_GFe(eGsuF)xm$Dz0cLw`C z4wriMhdio4jYvYly2|peqEG+H3{mF3b7)w>b-#sDO$dkfCUn-c7_{PrWtGU!)L%OoDWZOS&iU!>Cw6e zyAWA9d#Ee_4Z{)wz&CcI;lO&8F=5w<7(!e;eZ$(|Fm~cYIGCQ|NiYq2SnI;%BQOTs+QzPnNx76XB z>#}@AUdVox*ZG&I2L|OeHR&?exj&&05vw%p7@{w{ff`o-DxUNYhN97&NpeT{1EkC_ zZ8pg@GZ?~~?uMWy1%}lhVL08Z4G1Ng8Jb#4S~)F;w0(^h*Ao{+?Z&?E?+ppM%jC{z zq>|o@XP7^>s#MRSXDF`y^D;nv3s4np$$BczB~-ZRU|zf{NOjy3^?A7j5FPvUdn?=#=?1C-5P(#f|kao?o(4z|bPXN%3lbhT9Q5k@m` zsuI5KU4B`oJt)vC&n*C&mE~}Hlehw;VJ5gMS7e5z$q?q!b)@vO-HVZfI-gWT=eGV* z9_$l;C`2(le7(It(&EhTd*Ty6!{&|~*vwb8B_4w`yEguMt$yJK>c<1uUl5SUo=2v= z6@&&Mo^`-gEP_z(RGxcR)D<$t69~~)j3$JB4}Ua!0`XP1>EvwXbj0yGGPTQKTJ^l(XZa#{S1x~B0k?qM3$%f#hzRnh47MUD{UOY z`eLWL2|uhXtC+q-NvIuvd4YjoQ)6F_fx2K5N z$|%tq$dFh^u#z-T654(dj4Q_^+i%6)qfeY(y=on3>~G+L6y7DcBMLt#TzVK!zK!A0 ztckst@7sm75vs2RCrdJr5Adh~!7bQ~d6ugMU@<(HVtx`l>J_7GN$BBpw(rzc=b>{S za1W%x>cn;v4$g4}`fO=I-^yh$?pb0I7Y0m5a|V4M>Tg`^t+KjcFaTl90m`T?#=f3( zeFWVo{Z*;iC`q;jk^7S#3h*OetG4AEZAffLjL&PyoT5K4b;6fsrv^hBs*{xzZ0t!H z6c+KqdcM`d_?*tf{r0iD^2Nc4YT2vY#kYul^wYATcZ0o=@a`T=jd)FFrY2TX8?G{+ zMwm@hbB5hVA#CWC6XjeZJ!^`rO7Hc07Q;GgYIXUju)u_v-V!vAQ7m28U`^aRf^UTd zq0ctf+3}Edw56BP#3ky++=uC&n8)#VBxT}Izvw=m`7ce2Dbj}p3PRKGlyNQAy{s_? z%YXlZmT>h_!c}b~RKenc{Ti8~fx`tQv2iP0+6#FR$(u{BAmwy=((D=DzpiEm!m02G zU4oRmecGK35OJg`h9EFH9koSAG=BDtuW236G&S{zmgaYMnDw(p`1-=Mo;Kz&4Dygr zq2qag}ElCsQBXSj-?XLYVeA+$^xIDt-{&UFz!c{tMwl_zyX?3tOOzaFi1Kt zyVP5e7z}?YKp=;AKbDr?O-KJxk>b*S`z&(;7(}y60{DdKHxemjJZJ~m0?&yuGe_U; z8z+&)ufR~WD4{l3^3@fJFBH@?V<@ zV6Kb4H8#gYSO?jlL5rd|71y!OhIa};kXzV}7jP31t}WZ-sYdQ3|8p~^x2e(mZSC;~ zeRU|8g;UT>#RfnB{)z;sKs(ph+qM2_*O}djf$y+$=A!*X0I5d^#8CXd6L09k=nr<3 z5_V7{gGxGT!MW!jWxau)XjmKa#JJ|5z>S>%y4x=Yk%8YF;G6)HG10Z*viF2*kEC^&_yceUVBT((%7e zfD%#;kH38un#)ofy_9|$?T&?UV9#Pg`E#evoH+1d{~8zdQ>5^RJRNPJ-Z?JyPWWFD zw8s!_@Nh|VjI^&UG}DAv9zJ9aTGsJ>tskRxfyr1 z?T0nv(V!PdRIL{w9CF>i*v$NXFEDUq35StEhXEoz>lUs)q^pk)j$eBDa&FfN3$7Db zsVPT9$9^ir?TxL?zu$S#hTQB<8W63k(6fQgZa4=aE%b=4{lrlAp0seT4LiCswJJ#V+N^+^%9U8WJAsv2M4-!C4FSthM5f z7QzN2EN&J^)5;d(r68^xocYO}rJZ><(URAP1^>wt6 zWd6E8d1~eAplc;Vv3hKvAlNn*#{8t{vSPICJpKkb8F-si7H%4u!M2EXRD@Vkj^TyT zw4yLtUwY1$0fzu~01HE=nJ7I+dk1FThmFEGp9eOnGIDGx3PyN{cir|!)SXfEE{^%+ z`Vtpu91Yg=L|MX#Mec%qiifh2 z*(8W703`!BF@R7gI>$rJ!!y^PTi8nFXQMqdzD>%Mj9%vgME|m<&5((3?m{^922w5a z{04RSjcg_-%XJd`{AS6_jZ17~FQp5BYG7qE?(GW<68t)nGpV%%J}V_x9q58jNN=W( zAbD>->aZBXhEhB+v~2_K9M)8$j*s z^JS;y8-eFKfY+OOy*$khZDNdA+*~(dXS_9`&ONu5roJe3nSCNNdwEy;sy-|st(-&s z@cm}g%H^NPCufZEh|mGy5tvx-iYAQB7vIkUBX-^+U zh5v_g%BvF#>sA1e&mmwSZi3)ePsWxeQMqAJKRsO>)mtKgg#Q@HSE zqzlG;*@^Lf(Pj2(Uk9!jT6*>Ng1|PD<13u+mu&LNdhqL49FVB8@)VeDRIR?f zM$(O)yCIYT(IvEZI=8zIkmL^rL13rx`2w`wFq8qA*u|9Sv(4B{ZX2Zx{VA|5SN}KA zo6IaefIF#0#X7%Fk{k-8@3-xPkM>6u>9}BpC$D-4UMz1wXX0M2;Pk0oz)UWG%QpcT zJgGGiDr}-TgLm=8Wog%$r%z2+s2!+P0%s>i*?Bl588NFTzcPKm;+<5?!s%SG`N?m3 z@14tYzw2Plx1R7+$u(Qo7%=)9ZS$@(j}l&Zcou<2=6$&UMTc|Ztln_A+(vTFB-z3K z0~fvMCAcTYj#g%5_*7r2ySkXt4Qx2?=SxA$fB>EZN;qf2n6_rDd*hoRVq7N*`3RV>T4!#7w=N&>R4*QWg^EOM3{r|3Xq$elneWmljB9<1Fw zXsgy*Fen{=7!oymK*B_uGRW@pZdmZxh5nFtmepg#%t1Jc8xD>7K&r$C@X1=~3yw~_ zvFBH+0KZ>Su*+6hE%5@b|}ShD)thhdKf(ywWd}7GNu2eELk-pfgCJ) zCqoF8I^RL8<8lQ90==i)UxU`knK(}@9my_)- zUGn&Iwrg`iY@r5QtnQ7$^Q&rfyxuix$cVA1To(gNlRo-6-TMP?oh5C zpn%Nk=}PVa@b*1VQu>|RNR7a28bkoUwh%5OJ&`NW3w1Lj7wj~Aed6??sM)G-?c;F5 zjIwi%F8^>8#l7UlV*tq+nwk^=L6ODNZW(?|aBThr>nZA4CQS&sefC31OLS02v;y4l z&NDXMXw-x%a-^A`IR+e_8-smcf(h=<9o`e02&sYSHlI}bBJA!{V>2I_{iaTs`MH024h*vi=vDv?yQPFb^2iL?3G?E zbAAQwSn@00bjwEndN|)>Ceo3N=A18gndV}wH)b6ctY2>J4M*D;PN#!fk~kTn&A`dh zC@%ctBe+V959KE7%uk``wXA>`K*tjUoUueb#T`(D>7l$;Gr7Berz*Vh0<(cWZtr?5 z^KIp?tloFC9tVT4h3hNtJ|^(f?(b>&g?pU}?|7Z^%`-x#nZsRW$BRlFND^H$mUH>Ie1jz;yMGNOI4XviJie1&R5w z5H$#Fo>;%ZHSq46Pb{4IJJppjGdm#iD^2{8LYF)p~OZ5uokFZ*fr){>8vkm?^@zwoq-dv zL`YqQ=l5r?!0;#12{4pQOot$IN;emLTS7uONn_lS@;j_^94L%`Ym2(d(#y!(&= zu!>QXmQ8wXo~KliunppZj36Bq7mC-WM`Z*NC^1z=bAM6OqzfH}Bap0S^f9 z@c;6TR0_}mTNNBfQBVtM$eO#;83VHhpTt!?BM%Ums0NUsUzmOfgLP*Zwi*e!9hlK1C)3Hxs*Z0vgYaIZj93m6+ zXWmG9e2wWw7pmyWU`X$PH7omngE4z|MRolgKYmYP{|77PWf=>2ngnOFj6U6cdHenU8$R%4R$b%$7oJo1szvpGMgv|7=oE?CR>YJR2 zqM55!>OSum1xc$J-8O)wC*NUR%6TK4@VOTInnck(wd09f8<-{6Y!Rx%538y;j5cl4+5@yQP_E_csO&U``<& zDFRF`Q6en(B7Z)cx@;%RO64zgMB?lZ4+IeSsyNu^&85{@L;|B@5xoVXp^_(Tg%}G?iPAEBBuH|JWiZ z#XBJvV5xuIW!y^4Cb*z=d;{UQA?C>6|Ez)6+6k_g!mQ_i9Lo9*{Aj#WeaLKzxkB03 z^f8|FP4+CHB{dBZ__4qrDwq<$+*}QXyP_%Cu&kH4Arq{s$TY23YII3~$aFfv(%5be z!f3V94=i7qONF?C@X!F?Pu7^pTz+9#IpQz?@G literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/qumulo/qumulo_thumb_0_0.webp b/static/images/auditor/10.8/addon/qumulo/qumulo_thumb_0_0.webp new file mode 100644 index 0000000000000000000000000000000000000000..5dbabebc97b2001823cab4ca0751fbc4379c2140 GIT binary patch literal 113516 zcmb5UbC_k%wk?>Mm9|}J+qP}nR;6v*wry29D=Tf=wvF9YzjMyL_x0=db@%!!;@fkr z9Wi6h5i`aJB}p+clTKhDbx|P&H3bd=jX!ONV9*?3Do}8$Z+y0FsS+f_La^KLrzDP2hX3IW_7b?&@P57&2|z)$%7bD~{I-FL^&(-8WPKB9hA zfV2yk&*^#jFTk3-b8q)nA%C4;_UFp8KcMbC3_!fo_B{Q{*Oxcyx9-{E*AD;yAa=yx z)j#wBd6$0YAAx?108#+p*=?^AV17;i0Z7`u-F^jl_}zTO0%8G0f9&PkApraUz`IW$ z|BK(B{uS^!!fx+SZ>}HD*W?$xcd^{04Z8d%!>REA`}lX&dwV@iq9x{3-ry zzph``o7`IspnT~)MVSDY0n9(&Kf>w(Ltn#R((eeb^6z<@KCxf-pUa>4AJaF!;a|pY z2(NJ$fNsAXUqL^zFU2q7cl=j`PyKB^-Y?=Wh&TLuz+G?O-?1Fo<^eJR`d@L+_|Jd3 zD;VVfascyZ-3R^W^)259Uc{&TJO4}X>-H)?0Py+-aYujLd)V6p$OjC6ZUX>c+cO9U z{4;=Azra6UNc#9=^o1|wR}6^y(tfUbt*g3T_8ap%0cgL5JbnA9dXs@ z{CRGg7V2A!L@3i-Zzt=AZaQtQc$HK4k z8i0TG1?0O8xCQ6~gaLrr;q$yN`n&Cm-aqfdn!mg-Mhj+v33IxMog^vTj0o=LoP;Q2 z9h48kL&&ADy+|d|Za}rItUwauuvq>cJUK}ynqvUX(oYDEDY`Ls*PcRyxErN*^xG!J zbs<1PCflz73Qu7FE&(bM(S9aCL?Sz^1dK#v#}yA5f%0R)XIY8160utO>0I9oa4Hq< z`S4n02UioeUxr}4PQ4|1IY{edmD-d28~%&CqsS{FMsB|ZAZy+WOTz~WdGvjI8@Y^4 z$o(mm*k8CTF8tiPCJ!h~9v^AxRhthOK9`TU=C0KnJ6k5 zNobIzDo!Si!Y>a6?~j9~$;m?2TDTSA^aSyDKWg(n!ujFfEkqBJIL073i?vG;&)U_`iLF zf_Y?H*8_Kt0Y9`pvg5H#G_cAfI61UUO{kqe@R630#Vt9W!Gx5}0f$`ZehJM5lq`;s z{$e`jydZy^uh*?EURqO(&(H~2g%-bG}**$TWo z5QHJuGhNY9EnE7wC?xb!e&OFl_7y|Up@6ktXcr>VJ9dg7Ov4Jlz^nTIGr0c*6qX9; zM)>e|%@qi9tSb#w9?aMEQEVtG#XWl7>Qs|~Kcjh5=Ks4Nyhur( zmWS4l^{B``=vciXtCaZaajR4Hzgdhm8L~=AA0Gd9EK7aQn=L+gZHo|@i_cuns6Gb9 zyW^)9D#d59!(1*n_)%0JrI(;@(lU&xk@9Qh_2fzVMFCIdn}xIf{l61K>QE zgc|A{M#tr;-$Wwoj~j?YHvX3cDw1*5Yol}+2Rzn1LreP(Vos%GK~*a0({tT$jMyMe zcYwc3+OHI0&Ha09gN~&QsPWd+<)%xYk&HRi|Hn!EnduxDf7)O;`n?b5?V3j~oO9;S zL1P%vaX{fjfFFK*!sB9z@QZ2PDn6Hzop)Mx$y?(v%U?bD8Nj@;`Nkv)DR-_FY<&yi{` zz?oBCSomv|?{c!U?E3I@XO|V5fmIjI|MWq5_Jdztzwe7eXbE5uSchExq^i@AM?SyIyKl{}l{; z)G7ZsVthLCP_sU>g!JzI|BKOK=S}UuA^C6e{&77a>i3K$jH7f=k+2M{M@hKdNA&`$ z_0X5cGXL~n<3uN!Q&kBjFJ!j$p0n{)s)Dfbt1y^gU}VBz z5jt1)cP&(hJHcFtCgd5mj~k?S!Baeq00hJMMgm(d&;JrS|J(kfjA1%Rjl%>0nh4u! zBC|1AFq?U+QbvJaGENswVT!^Wvd4q_pPSUAF&NRmQ;m;0oK=Cm)$dQ%{b^c#%d54KSDYonR&{7y)9_DBcG9pL& z9;S|D1D!}ISYo0Vs3;u!^1yzY$mbB=dcHN){##Q+#^0DO(7?AHZ2=+PN|~dN%Cl)_ zu|*8UVUtYloaMq=i^rk)S#fsN!XR|*yg$e?rC~2$h>(qLG3?rW9A^$ta6DaVK37$O zb$gs`Y5BRADfrn^!f8(G^zJV%C;pQ>ukCDC3^((R8Qgpr+lAEL)3wRLbjWr$kO1TT zZvJ-pXELn^9@u%{=N+84ZRypEWo4p;o#xMW>^6WJ>7Rcw5w^U^zvQ>6545(Z6=XZ^@%0?;Tt>PzbghE}-OnJrJ3TPXp-iRAqK^Xl@8M$;=#XH)nBZsnFa= zar8sn(?!!k;Lea+D$hffBf|yjk?OE&-X)KOEi(dfWoOjbD{<0;8sTenwVAzYQLo;E zXUcv0F%fRy$d0{l@Q@kbye+NRL+v-+9qU#sB5l*y*h2fPBU`&xaIxpem*Ce5l&iNd z@TV+l>kvM=L-_?bhS*DP(yFq9O={{YehEWXjtlI23b z9R>~Mtjp9ziSV*w!4#K>GpMtvM8@-~l(gxdCR0`If72K6_Mls=3Hgk_H|u1gB?j`4 zQo7MwM3Hyq#@JT0@T@GMi_}+cP^w}|qb567`)>MTHUuYTi;#$W>$5 z?eX4*ygjF3KC2@nx;&IL*P z6Bt16H4$^9)C?xuj-AkM$4IwO9Mh>1mD({xZyAlLUN*KflHt8^mLE(R` zrx$eth9&diTp%0KuXSvsbg?*EL zcOCMg1P$8SeUY)lK*>svZBWCDvE+XkI%!Ec13ipuar2x@mge(9|Ego=8cmkql}4+epO6UO+l zexDF4L>nerih>%@luGoCNaHS8IpA1u28k$l-A#;-)Js7un8qFs%wlyR3hZ z<*BIC9C)nWF)oMo{jCZL13rtwvoJq%N#k=!meyD;G|vehaoy>YSZXd_(>GShn|UcE zb>WO3o2XiVHn3oN_V)r5$$`#3Z8Bbzd+2~OHuTX6oQe;he;L9EMz2dZ))i@ynU`kN z(w^M^Z1l4HPOnoPX9BT~;I}C#26p&uW~xWPJ^(J9Wi(7V2ZYvsr0+@`j50Zr`$A)Bqjq+W>mYK8nzDSp(jNK3vtXwZ`aJZRCe8!Z2uIyJ{4Ned( zmV)qO6-OBYaVyNqZud%2ddVd)Fhrob*B2~U`{<_+Vw~_r`(Z&10~}tHN=UfrA8PP% zcSjVTkxt!1=Cl0>F!5EFvSF;O7}@a zFS)+S?J`Z;6FHVtw(4Bw0>{f`t&L<2D=g+SDu~ffGykgQ4rmw@U+gq^c0k!Jo~5<1 zLGDTWBCz6OiaZ63I8NOqD8h_-RF1k(e(YY4ivxvAB3@pdQD-*-SAS(Q{n*2fAV}l= zWgZ#)aIxV`&bqbad7aADX@jePXZsuYp+vFY5de`Fx?K=DgZZG*XXkv)DX)-5t=oX0TxI0;8 zoF{9d6XFz$woij^-R2H=&|US59k-Ya^5;l~QW5VBaF2b z&=}q$USlp0@{E@a;~WeyvT(8r zBXwI=I6iMH?K;$|J$WNm4U3>1n2b;Jm)yiP&9bf7(dibTnI*ev>2e{w=_njjcYwO9X0&fbL0F5#IR`zL(*S1SCGPd9}@ zVJgrD39_e2<7oRd|9v^uBz)*_mzHgY_xe2+FHSbN{;D>!O$MncQ@+L1-OP(jX|G#R ziEk6deW38FQ_F8qEo6bG$7Z*VQG6~K!JMtvx(I9?syoJed^?(0%d{^TD{SA)@xLEd zq;fNdVvF*br)z`ZIw56p*+VMm-rFM*(fGe zamq^S{&q_08c?vPUTP`I>@K18ojuZi1@o-=zD^khB3j1-Ai{_+kHQvi@72_GX@fTXuh>68Ww)RUvQ)U`v-dgD7-rt>b6KC zfzr6yqamCg=GcUHYm_M><7N+{=2ZFQQ-UObMEf^*62dz0MI*@&Z_$1iodHujGBIU_ z++$FAqQ596_m5E3r?%hkVRNx^aKYF*eUJ`RDTK~0Y1xLADH==iu9NXV+hA;C`CYQD zP27&A&_J;?1NgDR{8ib*Kuosbys*u0`6dt3UbXf}(L1>rQ(7cw!?r{Z!N8lwUW=uZ zf@hrSnI*9B7Yfo(bekKA3=u)pjUVqk1a`M~h8WspFOU&`SqK;W*Ero)$CJqdfyJYq zXC&TW^|P!mG2*%<+q0@E;}i_0>C#sk!8_zyNZGJzpI>J!m#gE~N$|R`f_k6t>^K9u zs0fv@dlHdLr z=1u00V! z-Gs2N0Gl^csC8k(Hz^?o|3$D;5>Sj=_g-)YK~tuWPCZywDXqspjKRB0g0Y++0psV% z`47+Fg6|*O=N0&aYsyS@A1*N9xfLrNR*erYp>uD82la8xI((V`sM?^?!-2}N!e^%L zvej;Cx7S70*cuy693K2UK-D&u+&Xo~2KG5`3EkbFM0EJ@!?>H%QctGM=E<)i;NlNa z3v+X+=JnItC2ENaA73}2)j{9jQ|lV4RPEq_Zymeq*fVFSv&mMLR!VFdaEsRggN?-f z;)YRZa=nk)DHtUJ=hhYkbK@{e-l*HB6G~AV6|O{Rdqk)fMmIXSGx&{xzj!cor8xg2 z9E>uuM(C&c-+J^t`3T%V8KEE>ve1G+;#Nxz#>En7Ohmp6j%`HFE}(T)fECxdv>KjHsbi1rU=&j>VZhkacsn=o=ZDD9gbh~6t22JSwf;(JL3h{U-U9|GXgEgKEOBH5bP)V~xtDJ5 zpZfb)3ey3g27PweY9_V6=`$l&rO{CFX=Lk{ECgtpdcr@IkAwZ_Xla*fr5tN}b%O_8 zyk28!%dS(^sfQuc3($&X5&;oc1k2$^RWonTT8&t`KUL)ebIX4K19)|qPtzE5nb~Js zalsT9W!2SsqGyKa>qnJYV%07-FZ62`2)v6|XW0-JcSm*aYt7`H^IeO7VEh*ShX^SL z#Aa<}2m2S*WD(Ws(K;DGzIoAVdT^*uIE*9+$@kfSf@?I9np`u&05#aK$>5<5&Oq^C z&bE@0R!U5P3da+tFIul~ZNB<2DT?yGyq0G(z%kVbk0l;$#1oS3sii(KUmQ_cCZvEdxN;zo7{u(P2@RV%0rG5M zlM#!SkJ6cfV^^R)UzA2AomXPKu{gnXQ+o%g-D1J?LmB`wFY=GzM}Qp>CRPuV^VxPc+=X-r%ww*8+hpGs^Z1NZ+>Rc2*7kqHGE9(nS3 z8d*D;M!w`Hl`0##wQHq~0-@!Iwaw&f;zF+*dO~K>bz6MPfZS!Av$hJtiU%UU}jXC(dHY}om zYq@WqPT@T5?dodipQEBBbQHAKb_wGBe9G$^p93p}s8A$K4zmjE{*iU#U_d!Rhm+fz z`B1wLJ_Y(@OziAm7Uf@yU!JW^s}e-Nb$#{`Ffcn0ojydFp`*X&K*n=x^p97z7h`qAq5_H@soyV(g(+P>#4|WB#zcWeLD-R+GZ(d2Zc$xNl%9# z*=&rDQRfkkT*Up1PEX`BTy5-=BK*SZ8?D8KAF$cz9<@+yeZz!NvV3a)J$%5#!<6$p z;moJ_80}T-8N$YO{33cvWgi;1+OLev_K_`&OI`a*Hm zYiX#eq;dMujt|Q3k0ldgeSBILzSGmB*0Jd-L)0BtKIX<{7oiw6u+!Oja}WF$BRwWw z zU6Q#gWXxZzRiZ5axBf(ku7qR7!-?5r0$mc4p%6)u8#38Pn2}YA0)l`Spxh~~U=0Du zBbtn9XdSA(VN|E~P@j&5%Vo}p=dN9OIg{mKN(UofK|(4RhWdE9W$|8^J=Z{TPA+2L zg8!GAPE_%FFkX;o#8c|bbrJcoD@m^N?{7#-naTm|$dPq54j1K4MF zA$gg6-77t1N1jz9M(P11_|3tq?>i@{5e*sBD;dK=M^_9d1u;5#udfn_y5%;j)@)r0 za#&mB#da^dj-L!5TzQvS!rnBfoq)}R8l6AhNOxdUPg2B!mGX|j{^?9nK$HbXB8Ohv z^NAb2$V7V53fTT9&;Z&`)WAqBtj_VNrG$c}U_W#p($ayK5Kp71dws}Q;m1ply=6&H zZk*K&Hg50P%zP%RNU->1T|Nka`Mfc`wa&wDE7*2Eb0gV*WVQc@W`m9uVb5Y_x6(ZS zCDGA5@}(V+mP1<5`lWh70BUfokfqd<3S@bZ25fH1GM@vsU#|VRi{rQ|j!5tzCu~8n z<562aO^?ng@=j^(<0I4;UgQYtBxWpYxBAYxI)t@;gpbHLtC13$1K#HNK7oY8TF%V~ zs^!C4hPYeGL>!9i>QX3udrhuiAvb>Y47xxoy4kBzuyM50?jRSfGcA1aArFtrx`4Q2 z3qOS@U{F;qs(OMK8M|nc-9n?}ZD3Bo^zVnfP_+8-b?7f?L+I;An;3m;gy2K{!@Y(F z@C&DhV~}u1^MOF43|f@{dke=`8VzI9Xm+5S^wPncj?L+266%Cc)U2^X67zss_dN&| zqHI_q|AkKMEqy51c-o_7<~COe2a{kh$~iyia{c`f`yivX+6=4=)Rej!pRjMd$23Cw z6NPA73efu7Cg(sR4}+VTRa%8a_E8$UcQgLEvz9KsLZtMFz#`69eo=-SxjUzr7+U`M zrKu%SKPkvTf_^hj%^R)Ujua}xbDk{G34@S4JLb~uvs9Mn!BmH8bPutf#cxJPM&TVoj4m+*>14dLbegh!Or|<$hq^A#C^$}Wn=;;F73mUR z%rq8wUYad)gLJbMuTfSBVo0KDuZgv&OGnG|0Zn8Ldj|#1zLE*$c*9#T-dIVKF_ri% zmrr8+vbKCydJMy!Yn3~hUQznYmAKp#2st&s-eZ?>LQB)#bp*=1?3YJPo zuT)-{!v%zXY!^EopyBQc5v>Fz;1^=Kn%B?|q>{J4BH+<)F8AlG{@TBqpp?868;~ou zDUWAfQSFac^4f18K0L|n|8Q^ryCD4EK>FW%zpW@$Of5ySbPx$v{Z>%CYUtg?m5@ADNg|I|I}VNtV70Matvf)KGz z{o%jWFz_=ZDw@lmd~c;!o`c?R+!T|mEo#?v&6$TtIgU!3#+;F>zint)8$~n2!Vex; zc>o!;zwF!#W1?6z?WY*&W(f2glc1pMUInvr>&F`9rN{ARs6$fQQr8GM?s6MW4Y}Ue z71XAcDqT(UZNU$TW~c}6h?1EKOY<~3l`hmeuw7~9p z1CG06b<>oWLpd>4IcSIcD*t(DMO`|4_-W~{?-|EW7l!EU<%_#&t<*S&=DdRf0uwYT zFjGD|;XF?f$yMxyrSW_`1AFs<`Uk2&OQR8{h3`;~95rE?m~W(9fkzSdb$2-WuUmI+ zH+EbEVY?$`*n01=JlG7x{HLn%L>ht^qK;;DSxw%1q$gPI(RH(o)ez$bk4tG%N~FTNy<)pWn%+2mp#MAG2NRs2|@k52>Bm(jUsZRLx7{P9UL2y2G~E+ z-tM1jn4y$yLByOE8D$8qKy3`l1N|DIdA(q~JZoBry)Sw@oOSv`b#sc3otaJQc#KB* zTU< zhcrSD@QySsW?Xs6>?lll5Za1>o(B6NSw2xL>bsql=KJWsoZBp@{b@yi@oVwMIyTPa zTcN88kgHe=BjK{jd``X zx$+~;2k6cW&`)KV4(>H?`EZF>Rl#P1$;Km*t{xyqObKH9q%LEW+^!&AP zbU8fmp`Rv>j7i9M2VC}IMPb@5=Z}=#d6=7?1Z^PCW`+v%uZIq{8JjPdayuvcFmgrs zRn8?|IVkTak0nmRh}-Y(`J7yl&wkvCz4&rlsSSr0L>tLnWwPY&pO`7U2DKCx1t3p4bYk2fqj)NaAh+tb9F(|#9SKFZa0h8Bvn zKEgf~m3kgG>UVbxuU$4XndM$(kGvmrRPRoO>6`l!zr`%Q1hWPwcT-wUCbw@;4$3$y z9R%LK_vr>CqtW`;{BOB9!8s^xsmYeoi&ZIy7VWbtQvxz3GTNZQLg9HCFz2;+#!bu| zbIL_9e!}jq)4)u5TlW(hN>7KEVaU1^f^04?HVVaA^=kB;%eEic^TOaeed|zS`Q*nh z1G}nunk>Dr3at-12pYRNu_eVZWcIHxju69ywoeP3@JDH>#B4gB zk~$wkyxo+}ZS!eJ+Hei)4g_pB zRJ5JEV7>!oOSF+x?ljZm9%uUZ_rH;RF<)CqB;d}e-cYY@1jbYcdq3i{dr!g82nEnr zxImhU(M)%=Q`0F-A){M)2yvVoiCTlX0h@zhY)QM!D)j$0{TfR}3M`ih(Am4QK>DD9 zKy0BmM(&b!c}7*~J*q#bXp3g)g8EIh*fwt^P8X;WY*U+N(5QD|3V95H*Ref3h16`{ z`ILKyv43nITn%#a?|1})6junaaS(2aV zNI<~(b3gO3wU^~R>Vtn?O>i>Wd-FarwYv%Ovjkwpae_EP(ua6djS=bLg$3Kh--7l(n-4mBLLdLPM7OyAZ%- zGnMRL7r^-f`@Q};u?4NBulK1VxauKUPaqZS3LZ|lPFz_3VDADEOiJj`xx&{Sh3wa< z>4OF*S&Iaz)iOjavK%ij5b(E&*k`)57Wx#{b^{g5+O$LUiG4A&O*Zt#_t_!FM0s{I zT)ShXOQTX|UIKKdmS}6Mi77Z4y-k!<8*E7rfT| zwB`c~_6BR|(N*2nD@Et1&^UOdPKh#Y$r4O1j+ui4J(eFXkBKnZ4tqL9&YX?DkVq!M2o{v;bAUeG zxxA4JSm(~X<3cW*T5R-HIs^#WDuvSYM{WUiaq{HOPf%n@f3Koce%i%FQe%C3Q8LHb z0Wez<6-colzCQRH03e>>n!zHyRBrtL`8wf{unc{h8s%1Yb?0ZL4*N| z2Y*%pXj~=oBe#9N?g_ifK?GCz69P_*x?&{?Rxl6{97jb_#rUhNWfUM6{%nw#-R)S8>3XFM@S{N}j16QUO5saH(q#C&qLr(iJz;yDV z>`M_WRt=zV0+VS!{SrrpRhh-TV69Ag&QRWYEx&-m7)V&AZGLXC5El{sf z>M?cf)E49zM-B#uasn(^-`I5Pun{n!MHrdFNMcIkVp+FJ&Y6ar3`$UOf^heuLdN=J zKE)3ISiC1&K6>0FGqiy?(U%?O(iSKSr@fi0w&PmV^2_Zkv!?q}a_Fe)Ol@ri|wdV;@c<-Y)iY(Tc`chnD z5a=9zS%sVf_GWS>EM$j2RSTtFxh%ky`jjw8&$VPdr03#$g?W5`rqrI>e1!o3F;E~A z_81jEjc=j(FK}%fpvFGOj|$lb?<&h|=q}*3>EI2m-*9a!*SFy!>O&g`t;Y7q8P^v) zuRZ94I87_op*XKOt9U^@HztD_`$QwA_Sylb7qe%ELnM#2EvQ#F4Qn76#ihSdl`&0^ z*P-%nR>KxjX)?j3x^Uw8nJyGeAxNYK!Mdj{A=SUR6P)6hDBG7-%$hk^!!mM0yz2{P zUtBaH7dbmxO|c&j57Hb54WoRPlpgKL3d)D#LhPefQ$K1sSZ&CkJbk!tPa*xeWT=6{ zRpD)NpK#|3c^<@j{ceIr#0HW(+mxebR1_59!;)r~P8OWYUABphM_odxzi#$OjRUUf zyzcaHlcrRvPnH+0a=!?_umhPdF4bSvRKP5cDE5vLVR7mLQM zAQ~QB1`1fW~Zq%`2d=Ys)^bq zXYbnVWgBl!vjs&Lq|=;_t-5%@M6~`t`VPC{ zN>c`$?yXmYix?7GW3b|{qg&vlE1(1x=S=wl+BRjvQJZgYp2S&pdIxbR=xlIZF&Vy2 z$~b4-evT)Q!{dT7tPx9LS7v&@MrKSPvZZqr-=$Y?#N|7Rm6j)gjeEK0{{TUqoxxTpKQrez{s6)h-R4j(qL#x1FSd`?89- z!)EyYg2ci<>y`2bXPLPv?IO;{hB1aw{v>UOHx{U+eKsVqJ&+P}SKd4Y5BBosc^F!x zmp?BSJeIvf zpWG`VhEAMuzqz^}3HZRGJi2nxN%5HCE^&9Kc}KW>h`Kj^Q1BZD)g0urQv@vG?&ns3 zp7QP)e;-z8jO@s~N6orfO}P_j;9X?f!2(r)N5PVx`ud*mvyOM4OV;xqff=fqo+8`Qfk|c=ZysaN}(E>9Rmy9%#f6K~+dCFIxZa>`8Et?#lly0wpe zv$JzDBCS;^)6?!&o}e)vR5lT^6UbHSg*MoIQgoLNnog@HX+U0#A|VTZuU%~kgn}!) zw+lIo17%?!ZAjt~vmx)qn+S4Q=M2kC=pFTysmu}NE&#valW%9Lg5v}0@tYT6 zadCT6RQWWf9l}=mUgWMz`IMpj5R2A(7qLJ>{KZR7R`pfHGjjyi9kSH7dYi6O^ov>@ z)1m%|a#JZfhtB6H%?350Iq;5g3TM#}u1-=lIU48ZE#Hv_0b<-_4e(eXrV|W7T z(}2;${%O}Vd_}H+*`N+gyxxf-MxOoq-zXdm2b6Zmanwmkg-HAHrDuLyw1Qdf0oNlk z&1V*MjKZ((rsD_~E6qXNSwl)9uSe`itIjIQD4#yZQ;*vGCOhZu+6q=w2llTfmvO_W zgi;sasU0U*sQQZ6`bm}uY~5%J1g9nt?Zz#>rB&O)eRC+8oQBqmBDMV+-fg--_w6l! zsy6zaz3kY1|HBfNtXf5R%~H=62x(GbS87fcPxwh1-#}ihA(@mFFO=b zipinpij6s5x2_8G`t1N4fo$w)FxFr6!O0-L`B=%)~e3R^{K?;_e7oy#PGkyAh257t%FfPkVs zj~L)BAt*scrZizt;GE+8*-Ncdktpzes?4S&XP6qodZsHdI61_fCv?83Kf*P|z zQ-GxG^({g9F?Yq42Xzm?1^Yeo3}MS$XD*mIx$Ha%2kyAH8vE<{%B-_f>lbx5eOt$6 zx%zqV$Y4Sa&=t^ql)kml1Qu-0`4?q>N1CK-89~P04T83LueXE+7kYnsV;*F7?ryM^ zvDpAxXnh9#TBg^44yneSkdS@$g%HaABx!_Hw@rymE$KYuJugys>hxN|2PSa0&b2Rh zyC1PB4?a6@sFJDYiaw%cUW@_?4?Wb||kLY}F_=S3E2O&mxSKoy#_Ffp1ZK;6B zwe6>AD-Ir?fgR5w$KZCdyg+$^kle>Wi|U!zy&HN;K|1jPg|>t?CJ&DXZV7fXqoReU zod606s*+ru1L66M-_NKva z=RsJ&L>%LB5Uf#+*pDe2p($5vM3G)E2-ji0zw}D2pB)51(9Co*V7rDaY&ildA)#(5 zXz5-(TXycJ4={L$<(t*Qe<*Y%o2h^M)~jqPyvy)Iab`aj1r+YcgaX_p6~n0~td4=J zUIOvVQYJVVE^T%Dbua$+Cr#M(INoDft9vS>ruvW$5X%+5vO}@bxcN;G?8P^+N&4}q zp|n-XRejKaH{bZhj~mfqaP+Kd9?m+Km<0$`aF zVI!DN{YfWC>0ar2!yJE$)sojAUY#2ABQ(LO{(h^jac#zv&8Ek4S>j)FE43vmA3)!F zYreV5!9g!Dt4W_CUxncT`YuIaVdVv%2(G`kF+-tiYG~4nw0AddD*!2y-37Pjs6s&i zM?Ia2IGj8S5LpS@+BUi|6pt?B%&sc5MZgVSMC*7D#PIs0O)b#Cua+4&Tvw{C6$#oD z!5^Kd6l<(Ccm<26C zGW=w~GLHACK_gY&b0;-cP<#Io6yc)B=*2WpvFQ-ZrA|=BheT9ExxcgqfZ=4N_J);r zZ|_ec3$d5bOTZkg9cQLjFFz}<9pX@wY-2|SFO#wG-jcz-^GjhdEh zTo0nx9#@WHfq{FMBAjuhk~cHSE~eJRV(u$oM=<@k>3faYD3&Z%2o08=fh(Z<#& z3Zb+5QMy90vD5~?hSQiDC58PxV?dyyHTxa+7c~7ns<7d{X?L_WR<{$u1D&9K*Zm`- z%&CM;@iww>^*$KlQ)47kY=jvwb6MA2;8G|!}g~zKmvYK z{3_IbZ^YWMrnhT+B94H!4R}=-*hUL>7jHHZV?@wZJB5u7hX@O19O9DUrZhn&1jXDVa56Oh zQzy5k9Uk0m*T=xf^F_WTBUf`Uuy0{yv)36Ka^-#l%a62-~I6mpJ@^5k|Fk@aH= ztCzE?Eq1lCGVSz)umcajVwlUIY{O$)IU8%yy_;cXBezpQ6sMpr_~V{AWE1YXxV&_8 zl44y~X53eT(32ILUiN=@bok>h?xwr!y16V2_j}wpGSg8EegFoJg~JKBFvJV!uo6T! zI0la2L|cU+?=8^GkP?JVxWD#Q}>> zoqJZ*cTf<-JrVDN$lcP;$RYrL zjc(DZS)7-~;p5flmTefuZ+Q2nY+Fkd~Cq^kwANn6dY8-{>so zbWKnY{x_<5f8ans-b5vjQ^taG9XxoVJNd^yN>G7BYVxa=v z!fumrJtA;E_-bUvD3J+2GP|1=`BHK%N{hSpo7&oY@MS9`DC;Pt1Vm7 zV8D#l;FGm?8U`;0GjCuNYECu;tx*Bn` zVOPZ719@~f%UF+yI%D~ZGWnTtC(e0?(>&{os*z>NgX~wo=rG&4hjBrvs)>ra*UOYm zq`l}z{TPp9(6m_W!pR;3#<=Y3=Tgjmmg=J7Y z=Nly>p$~8ynFt@X3(HAzyEQ+s78yw=-tC7Xe-!M1nCHnWeZTCeW$LT-fEPHKGTtX^($hTGwnNqzJQk3|iLsyU~85y*aO?K?R*X;ypOi?q%h`*z~L~0q}@~_j-uuWmAEo zx~2*(%GoO2cAEu{rLw&Eyn2KC)E{O?izaI|AT4tE2pn>){lRWwHOOImrrtMVF;{(Y zyt5TMvlo}Q?%-NMo12#EQUQAfVer;J0@uK^nEWV4=O(0>yrGDk^(616493w1VUrhz z1xp&5UToh7jy_mVDU;=+5poa*an(*ze zJffdfU3hvYsz3kKU0%hb!s@GXWXzw`Pex^)>904~Ikgi09g*k&9v%-JAa)cZ)w{?M zN$l`}Q|~{_ZmPhQ0)TF>`jB~*)zG2$rPVNNF}O#HZ-{fq%AMshl{m%Gw>v<5LcBrd zxaK~5*wGz^`C{PSF)M3*^>i%${fA^?k-9nRy)lvEc7S?{{s{833_>w)R&OrFxSBNl zCM6u_II(Sw{H+v+QDb|Om&nl=p8r6dYQ3Xz0AIfqlW zoo>u8442&%1O#ohq&ZsKa9|(mZjF5^(8#6|da1ssFpfXPbw@{Pg=u2K zm0UXI;9ls0uccDcGu;mHo+3De$gC zwm|;KkNl>CS6J=u)3Q}fcl`Ae6f*!kgtdzR)00KV-P&S|b75Upw^;#_Eg@H|;u^zH-8wRl7?#m1bAfUa zw_24weLF5|~@Qc(nSH!eOML*dQ z|CG>b>SRM+ABWl36QcLtGKXCX6l%<}VA2>RneT^Ad-k;H0EXw$da34;gUaXEcRnUy z?k@`4AbOMhY6qO`#k%1-8|UxLa=rocV8u03vo{umyp`3sipwan1|5aPPka)1gmfHN zdPH8N2@M_exwXMv?93Ch?wrX%R%c@ctux{ZIOlgykjQV=BF{sBVC!~bU4l62%vj4s z7vNzRcnVs5#zs@|1Nf#(@5fY(k6z#A?`18GK|1nJ!#r1%drGK(a!aDukZ5%UfzEm! ztGLjD7hL{5?jXLyf}guT=KCBvlqGWav>ILzN2P(h+FX>3r8{U);V3tPfu^(k8h)NW zyS=y?yHs;i^hq!fA-^V|M1A7nm~LIsW!tAQ%x9Sn3TQK)w($(QBN!|&A{Hbwzyx`f zx$|VzTzCKg0(1ZYVQ}i+2gbR}1SW3arH~|cZHbcCF3GkCc4huW`EryIU}piFzZL*x zpH>2Zr|J6(g+~fR!hylD?5o@00rD1j2>3W_7gH~P92v?2ND5tRfF%-&62(qZ^i{cX zr`Y@&Z#GEa^fA!plVxnjA@>Ey7eS$R=vXlUk`%NnJMr}9!Zm}%A;2`5AOHXW0Nrk0 zFMdZg+J;0JPT1c*(_6U$5;cczKTTaPotz^j6ta{U=C3q76^Tf;TybMb({C3pS32ku zRIYyxz`Hclnp;VIg zMwa>{2Uc2+LW+bSxt_1!k8C9--*~k^i_BJm-zx1lNIvIshv$qMt(_&71yxcH{07De zFTrP2jcl4DA`C12OB7BQ4NML^#Cpjw z0U%P+CWBPP>)n6Kos|k0i-5|w0tTV$;RfIU00009Yj3H4pMU@W00qp=S55DlTOC(q ztg{z{suNyTPN?{KhF1OhgnJE z&SV|=lb&S!e9a@~bD%w{kWUV2rCJ|x9y&w}67A$TC^NVKxc%5z;whbuAl3D>ag)~3 zrw{d+;-tG@U1riwnml20Rh3`>00000017q|3r47(jQ5h&NpTE{t^W% zl-}a8HLo$&jB^Ah@A_2k>WI`65931yH#$18aX+sro&s4|I4&>(58LhY5!=ZoIBv6x z{OhZWmQlwBA_^m@xmF}d;459hKZC{ipB)}vOM=r+lv-fP`ci7TU=GZ5RMqq@}4max2QI2<(|qqy=63y2R5>oXKZ}?sx!RovXGxDE|oS=MJ3f& z+#Qqk0+^DP_Ld3(apXpaR<@k&@4knW0iuXCD)C(3KY2{{P zruKm4E-@MgYSMj-62M1cd{&&XX-NIyU?r5=bT@SXpyzhy=E7`0(U%z~j|z&=2-K!V z5|2pC@YTe7`HDF+e{!yHlw zc1P$VxoXP(6i2|2Hf|8cbfDuGgw_@cuaJ=n-?IsEl$@8VL<{Ylxy>)2cYU%WSr#qo zz2Z=J!`67!^BBuP=83aBI7wBwS>spCUWs{s*U;itCnc&wbsx=thgCo}JgwsP_=#Sz zyb?(sgIf?fflMc&m1zhodp(VNZDh_>yTwPT!HO@ znDa2TYfHAG3B(G|Vo3_XQ8fjN!YcL9ir>W&4Z)9)`Gi5649&&Tbe1?zZaOrp*ybns zEcnkXY9N%w4FZy`FjS2U`m9`w)-k;Q~#u!W2_q^Q)i^ly>T~y`xh05?KhD9R^prS zv{yA=qqb%~p@E`9Pqc9Z@eneGUdvL&d~)p81FFX95^xm9up3pfjG0=E z(2Jk}s5v-X1k2hLiE8#w6?ERs0fsr~E6QK&$TkGp-PkvSz@d~hzbkA=xm*P<(HQ8HiZ}E_tlfQthN%Ir3$*)Xj;FN#~x*HHx>8>5D z&*c*FlP3KGLG^M(*r}t0Zj*WKhusr`UO~c5QhO;sIS@3!p(yxR+N){ErBl!GZ z0N!g^m|n46Y&dj-)YH8~ebz|L(*3<|zKCNYS-J6_EcnT#}~)zLz)kV{})0w%#) z(j07IKkp-@(Ze#w>{fX^9=i9Y?(S$jE2L=o9v^W)*+jv&ml)h4J;wZ)6U^}aAQhNg;E@SG}*Sw92?#|FE=NGDTc!WSOl z(x+Obx0Vc*=#8OE0YW!#^U`ecd2jOQ8@E;6_;1m%SJmy#bJXVP{4@+H>_q?jnuSNW zRNBmBOD68r9~Vas zMgF;ut`Db{C&12vAL~;<0BG{tw~cusDnQ8%SR-0cB5_@Ct^3*;WqsNuRW5iUB$+0_a1 zC2kFVdc9t+SF6?5uLw$8)$@lwcu6*|Z}f@H+j`gTm8)5VT6jwjihqAmG=x9!mLC-U z{y##$LT3ngGOYuCrF7-)ybQ~nd(iDB_-WLGh?+Ldc5WAFU6kP;W zs9YtEJA&Po%XDfAo4BExHe--9En&S?h)C97Pirfb*=)93Etbn=ve|65TP>E$WwP09 zt{Qf<%v|6V={P+~RYRqO7^gg0OV&#RGl>kyBi+jb8}l^!Cd7SUKWt>MYC?-I{tpZR zdr!6lQsRO6Vo_oT5L~=A_MC`u?oGg>I>r#q z7UlajSE5x3kN4hK+fA=x05WEca6MBslw8ZF4YggH{JJxX8z0nxPj4ClaISRznn3uD zPTO{4Nf59uMvHBD%>a>uX*l8Ht))AwaVc%OlQKyrGa!$6)nF@bY}%{zNpqR;Ud} z(9{=gl(ul-Ti-Lu8F%q-B=Ft@&JBz+a5&#=#xrD=nuoXFq(R^3OV9NATEm!E0=7ve zi!e=qJvSIvXPVIGe$m>G3lr&~0Qtcnd`ZKQj~CdFYdOai7s6CzDaJX!&?*~A0 z!jYAJM(z;NcJ#?+f;d7jdu~T3pjJz?j(x7l23{^Fe%vycbPEs*WY0fo1_WE)hpW=fEZGXQ78N^oHBnYux&Yi3|Di-PogAP_4y`w{&+ zFOysN9%f2y@rAnS%8U2TsKw+wjvO4gGhhd*Ffe`=4G$n#(+!g_cz+>_V<^tj>8@x1 zbeXEd#8glh>{)blgp3-NA@0&L77Xv#*%AzXr27c2+n(@YL%NZO(|fiFXe9HOf9Y$8 zH;hkJ^{8Y&5w0%yX#$o2;7kPLCQvIE%Wa7X#H0@>r{qc!%0DStE>&j?tTk;;W=)?> zSLKMDzz+$>^J~XFYrNNAvZc;MIQJ&tQNnj+6aFsFv)rNC_v-DK7X2C)n0W5yJpPJZ zCNh>5-xa{nAzw4iYQvz*(Q*sHo=UR-#3;^^wG70wAEvWR@lBbxX-Xr<7 z{gGIHgH5qPK(s{D??cW0v4%bHm-=X?rUhu z1K?9I3x$$CS&~{GcZ8}+f2T08XNx4q(2;c1I_&R3Nb7S&yfoqiLNMVf?3SJ*%ReP> z2&7ZgId3Q>nW`Qdb34eA@dmqH3l3FaPHO5jkq_U}w=iu&J|+3>I}RVk%3ecxg&SAW zsA9IXv34anBz&xC{LxLQSJdI$RupUN%||PQ%>)(Z@|OwUl<6p!7jA^k=6LUxA6bIU zhyWR-Xrhu~e)+ZdztwDz4HK*3c9h4J%)_Ic5k8BfLkaV86m%8M5U;&8W zFz{A+EWg2^Y}zDpdl7`yaLYXaX(aVlGuDgLmuK)yoa2L&XlGqK-KRoGQ?*TI=FQ?` zRT&EY7otao8T-Bk@KcatuLk4mE8WuQK|e57@sT! z*E_+Zdq!{8J;j7&nZ9XHu`UJ0{O7I9=;0;NxzOIWgB;1d%lhJEhTLsQye`c}$`M?OQOC+|-XPNOvUuaol_WeL;D+qL! zoC#&Ht|ifdH4i@gQ4vG%J@?{(W~Ikv7|tybTc|Wp>2E@U-je;wBf$&;W640ZJblkE z=GXQ`Vfqa=#RUS<6HmPlJp|i8w@r4vU^5SkUKk2AC*SSdD4ranMeV-*j(OjMGh22@ z(w_t}2;LJ=kG)@giZ@X97AAcn4#+jrLaSsK9PklZSRJXDM7oY`Iub&is%tkkZxb4* z$XD>a5Y#%$atvz2s4@rC03+6?J4+bJ8OpAo;az+w9e&4*d80&9Z8HU$x=;J2Dlw(a~~K zpdFUMVLACkh6%SWK0xjl))^xQ*wgz*aqAOuSX9w1aCA2`0SZ{j2Y6%o{yToTn+{#m zmdWtcE}ZPf`oqSva_)9o6gNbi6IKQF^8I02ero-{DZ_5 ztJ(0_7q2fQDNmV5E56S;O98`l<<~;-8*;#NJ17KT#7!f~2#SYMmJ^Y1JvEj5^24Z- zVZO(vXETOLz}un)zP4E*bhSj8QD?h!bBu;$5$33ryg9Y_zkJ&KU%rkPh*L>^nr>ND zRTs`0zW;jkgS15O32Xv{<Fy~P%G_^N>P~mwFo{MqDvdLTAoy2$6plhmzX-< z_(L+pel!=`zXyTkr(Q5xdnGVv3@OU`d^QYxR(1rr)i1NB)rppocBG%8L8{S>Om~Mv zA;g2VQ_=+kvHdoL1&d|~thp+z=IQ5UlXikJ%@-OAE3q^+Wt3ygI(+jqQ-vz#PP5}> za>IJC5UrwMiFFN2Y(+rE!Bm!~)N_Oe!=u+pnt+OM-Q%Ne?Np`U(7X%&mVQE(Dw$f& z$~M8NYr7>Y-JMnPax6p;x+x7_gC<}WjFH85X~*Nzi#ur}T}#RqcVl1fx|H55K1q%s z-V7N9sbZo}^?EgfKrxM=E848-fhri_+9qK)D`G>!J?9HOXIPWBZgE=NW zqeY6c^t|Xv9052r%&`s>SWZQv$9q>+m+{vBV!ed(D(<-gx$y$75_$omiY?w68C^R1 z@`Bx1p5!~yFeli2p^mKC*DQZ+$UeXOlYll=JX3H+iuRXl{xbzFxtx0_M41SC zDX%~#hG1p8gvT;_3yb2qQocz}&eQq|0Sr)n5(nNeVFtgb-(s>qo$%3GA$p zj|{!KjI&8+hj>5c5rDrMLqP0w5JW=9-yHHZnn8xF@gJ~=mdzZBoDo2LWSPHSS07QZ z)LYnsj-pVvGt>{~26bxeA))7Be%>U07xP`7;JNM(!sx<_0#fAG$z3xvZQf=HL_!h34I?Z^v#5^({ z`A7DKb;NHM%~E4dSU@b#`Njr zrUvH+9`u3%i?E1LwU`tp`}N>_rVVM%zNK&8EP#!Bm}hH&RSR;*j2fy z(Gme?8}(K{+s(;lH75T(YZ0Pu@dmN&ZqGZ_|YC@ z3fAp6TX7ax4hpA_+Wb?Po<+mnAKU5f+`N;5tExjdX)aV?{|i-IVVV~^xgXbTt|Dw4 zW}xD_ODFEY-}?j)rF_4zBn`SEyZ`-~Vq6D1dj(fy1&on(?!L(|<>LaovP%bNh<+_L z3jyH>(9{!OQdA>?_ajv$d_ndT(c|4(J>Qt)#~NdQLMCwPOx_={=xs;)6S?ASc;>&Z z)Vd7lxaiwCV2_bm62M^!N|XTlP94xc2*As(WMJ^h^9dX(G(ImpZs)?=t- zCWQhF7(5mH1$!l~`*mA!Tw-mxTrrnu_mYPCLZlylE@r7&w4?FHz@W7xQ2jD`rC)2Z z{hQ1@-r>tfBIhy3F3sP-7?qniV+89r)s;sIfdD1PLz@j6#VVX*aMr*h;wJCsA+=3m z#SSCdnIiLS@GW+85C^gXT~<{-yPv1515Ei{>1$rMg zeJe~7uWod>j)lgBa_`I55=_VY!U{`ifmrkyO7{|KM z`!E5Olw^a}k2D)xrtN&_a-kR(thGT8#U@_}Iokw4YS5`{2obw?qbmkRbiP*&Jf1s0 zt3$|YYI-GdW{mpqD!yAD0GDz;WKxB1akJ{uM1VZwG!;{ix8M2OVa!=OwPSi_w54UD z8>mEXraq#W%H(B4tpTxuk>Q+!13+)a+!xkRQaV<>=qtM=B!PwZvSV6nSm#>KA-Sm5 zTQPsC+-bI>QDI@gj-8OWt4lc#&>gW=bJIJ0)}+z1G7TgRRp_Z8o(x&zs-{xK(GFJi=@GKF9VLx>K^9&~=dipOFiaZYfKY3ewAwUV9?b`94{Rd! z7CAr~2HOR5KoH@ti7nCSwO<ViL{#j7_%+o(+iRucx3=YH?dP{hE<8 z8|lq`W#yhyhxEjHZZo3li3z2nuc6-zH$>$Isw}@};I+@=;+R8}kX7@dUaR?04C@MD zurv!TN2>koAt_U7gUi_lB0Lqr#<>8#!fR2Mv)<*z>nd20k8QiD?h9ZUk*cc%G0F;x z8K_wQfL$mt?BNiYHz`Kk{dBJ}6lUef&oFxmTd$UrC&R+&4C zHH|@t$re1Z#PQ*G7c3E8F$#MiSX|XLRq3rGjNym9bp#m*Wtlfw`iGei+|Y98OfJw_ z*PmRCn3Ta^wF`tVpey~thD~TX<;Y^~d zo$m;um=kjy!1??axH6|&aPubCd{0~!O!_CV)Vam-3=gn}j1-HGDw%&!89UHtfw=lg zl-o;1SSe%qLwXRqp!TS^%Q+=M3eg~ASCzI@incNZ&CL?K*y#U0MvH!rf(?DgIkR{U zZioHq{Q4EX()qdjtLc+o{jE6M#j>^||5)@Ah7xYNV_ED|V?UJiRKJh9XK~31r!o zzl0ihl0KUQyh$d_G-NWV%y5-o zL&|V1l9TpU4p6t2`t*HV@ftMGVX}%}Q3DIHhnZ6m!rXzX9Fhg5`qnVqM~);EH#Ki2 zkLLl3!9Y7-1f55wrtZVyN9SRv+DtuKdXj-Wwxnx4yA7vH4iQ&R(U;n=l2I8^I48@1 z0B7q9Ol7s|rICmhy?;RKgsUZYab_IY8ee64W)$2YJXgk~RK%l)q8E~3U}#r#$jG=8 zPy<^O4^Pg39x)3p=tEyvA~O?W?1K*k7xZ;gNvb%>m#``$_$Vn|Ub|S;gz?Wcq`eKg zY#Zb_WF;lfDJv~=@l~XtK%-NoXlRPMAV4ZEqzSHvirUrzmvWoEz%RhZ9G?9{w$7?& zuV}W24yNn)@)`y@-L8qE(|pX9xCd^<4Y@+m_71kA#&V^10<>Im^Wzr2H7 zWthXpA%J8u-!hU^`)H%kqkhg#Yv?i*U+SIeAGzSdNq$`*?Hk}oV9_e*-e*e{7&z+W z5cNe366SuXIGla1Kt9O!7FfIEVv?0r)55qZu^;h74{Ab`{#;d$SO9S4HyqAM*gdD4 zG^LX#^6?O1jh7B!F<{hp)q83XE-iSZ`OLFFBKquQmTSc$K02L915c!eu!3$fhSsaJ zT7Ut?E z+%8PU=jCfuU!#+s>1pilZClT2=0f8=PrRWl0PXY#{e=pPxkP?@i+wL*(~+;kdHwJ+ zj*IC5pBLW@P+UutMSnk&L)0qoN)KHu&6dmv%6!Tkaq=G%{T>UrH#UN=z=XXULyAx!Xlch(qCe^8RWgg9Ch z)(ASe_2OZ$Al~revDeT-AuY~Q3Ra*?`j2Km^kyoMY)6xV)(If-Kn_jEcwZxQypp0p zs(m8%=y$K#Rq4hqUBe$2nYuMN0cO@GBAeMpHcz)Ej&--3Q;^fGa&(gGxE8rth;rigqgcH6E{*bnc;A9RP)rV4JF=Bo?tM7)8*YC z5arJk>a)744SP31UN2XB7ub}2l_Hdd_kLDh0H_JU6KAEgehu7|gKpg^U=2x114Hv_qFDO#Z*_7lVQ&!LGXWNio5ZN&oh9rl~=wYNrj zlAR{Bqx*{C;m$sq>%!~dh_BZQ5qO)EeXb6hVhgeTsd2cFqK?myfBHj+FUM!l7(%J2}t`zVm#1him zJX>J^QRxF!yh{vl5ac)_^m9EwNo(F|2bM5!zb54!iJ{>^P@JyfG(r`B0f>Co;;gC0 zgRvu;)?4UhRvXD9=c5UJ-jd-|Z2jvao@8!y@M*EQX1a6_SxOw&phSFF zRu;zce01hm5)yHGE`6L9y*NA*z8b#2tC?d!tt#}&v;@9x_hH_ta%&*rs=a$ z$I*Yl;~@OgLKap!^A@NwPtz@~3r07$*ZNnQ9gB}4$w$z|-hYivH3ir)$@{YESg=FZ zZz`_R_yfjN`Ds9DLSg5hiuONaeMa*^>DxGTl-2UJf6Gd|0Bn}U{tY1mHJ@fY9`?ji zdjbs~Ql%R5hn!V4XjoM=#a->1PB!U;Ilj?9btdHhi)8XVt^qKlR_+r zxhAfyFT;mOsy3&wuJ=iUQA6AFgRqkF6_Z79ak`%qIf2{QSjE}AZ1qh>(lVMa(OcVQ zAU#E_G_YYmPZJZB=59V^d;6Q$?P%X$067~oMjhx=r#5W`#i+Q)?#tcBxFQ9WZuy!8 zI?wOO{RlgIcvnQ9JPA0^)XHVeb9OkM;a7oEAok(a{5FbL>aR87s?5QQOblfU{()0< z0PxBTujAFq?J1bSz(RQnBgn)ojoH(5DRK&;D&1xD8K|a@kD-qG?W$T)zLP>CPZSqp zUvVM^8IP&Vo#Z)8=Y2uQpCCzVo;H9001k7#d0*o*O0$;3{3R7(EpD7~M_}b1-y8Oh z51MqZWsm)ZQRmVs$1d#YMW8he6DQU)J}yppb{zxuq^!`Pf7|9JYMVFjQjr_dfI{R- zO*H?j;;QKdWo99SvmVH_6Db=)0mc`8L;nK#OG5o|4pIFGrQ{%fMcwRBD1B2}fv?oT zjx|u>!;f{y9_E$%h^|!$F4R+>6|_Uj$9w;kr2sU0z`G{ARIOpa(6+-qT>Ntx_BO8cmqB0crF z`;+u~LnD1#gGG5wQGIK3r8=*yD8@7?$**Rz5Iv^JCZP#!s4LhlVpW~i| zKeN5(_j7B&dv#`bg0omeY{46m=LQ!*QbUiDoh#Nm_7E2=xjtK_x?jnONY`S9V|stE zMn1T$L#re9)BSUD*hOIO4*|Bqzs<2Z8?XMn);bHFn21T^L$6Q@AL?tCE(Ff%M+2k0 zP&}^?xVm%@{H4xJ<2e*>>Lwfsv@JytgJ0hjYj7WEQE{j~G7MD^N5cD+ zG8W^-*f2OcE&zpXI=k_n?$eg>MxA~Ky^uG^I69 zZMxy~!2pte9wpmUXWe#S{OC;r^xbL$s_*n$SU#ZU(=Q=#6L~OTi%((Mn7p+;1jFl| zghBmxM6KV0!01LF+ad#O%p6iHVYt#ohn9BSmxwc!u?6ePcWytRBt$n`i%|@d#HY40 zL)m_#j=Ert17VsRr;*Hm-Xac|#*d$V#iq=SO5~6C;YhKND+fyA5EExNLtLkx?vqf<21p}C8Zerv zN&S5+#1sg)-radlD_@bn0t9pERGb0|7i&I+=}&4p28S2C)n`smp*u7XU99E=q@zd; zF7nw`Y=Cj?OaCH#s|Q;9)s1~NGfBWtmM6}I?a-LuL&3k}GL)?Glg$xnFmDU%hY~c5 zSlOL60Kle)K%UjbqAoZ9$F#v5j2IHQDR(ECoYvVljB||8wH8?mR3(?ZR|I*bOfY)F z_@5`V8{Pay&{?|xV{VyTlMiA&$7%JH*r(T7+Wl~N`IiDbYx&r6uSbWK1a9c>w~>3J zW9&Q=>C1J92sWbT<2K|YyEC7oj;w+}l^o$`r{bj_7$k-HFlG{CaJ5|ft>=X4z2(>I zkJ4D6X+%!YSoz)x-T186ajf4;FQ19P^_wgmw{C|g8qRLN)ygjzn)^O`EDE&UD3Hkd zFhVt;9Z;X!_e)<565f?6hEEDy)U#E_`u>hy^13-Iu%U zmW!_#9mdZa8QOQ` zdA6ua8MXJ~VY$$8D6y=6;{KMFF5G zcZW+QT2HGaA?`W2j1d$*F(UGPyV6Weyu+>Dwx?(YkW9fgj?9W1bfF}|pz+LxlEL^O+oc4lD>f-c z1VMROE|}z&i@2vMWyF}wWtXQxk{}W5@PO7`QgW0wl(r_!{WP#$KbIP3i7uwtlF~kj z;sn@oWTfH+fFS9-i_h>Umpr0n>rZ`~iDEY+j#njzXli**Omt!{evx>8z7xhz5nu6hSnFuV^UHGadC7(6ufIB7 zp&bqcCs!zB5-oF+Q?~P>RbrEDSSB+5mdzL5qk5asRoHxn@A1Eu)(i+HVkSJHSczYB zbNJAI^zhk83sUpbd2)n-`bp$!O19cS9Z5&mn@sK$$q|OYT4~)+x(Zb3FjVpwg{0CU zO&k*>WP8fK*+YixtUaUEwrf&H()X1o3%8kR16@{e^5rZI#f*$&C z_Lkp`OqJV~!w(R>3;3i+bm6f%H6|Z}&(L+@Z)1>-=%l}PuWGYNrK8#$yXCn;oK;nn zG~iv%8-C_;p}g87+|}#*Mdo=goIRwT4mQSOi4lB{?-+@A+Lpc!M8~WM#n*?nQ@DFe zSTmWXCQ`fAkyZYVLGjO0A<)(%DA$b^94-8-NqW)mj6h1?DJJ%lBdP}Er&Lq2dM7?f zajTXB5g^O-@v%!hR!>#=`^nE?j5qp&$;P=Hz0;N^-b_$vv|XAP9X8LQ9ye%D>GF1B zAtZf%PZD(tLQ-$^V#>EienOhyv@bymE=*L~KS1X)z`k*}en^kX_^t5-tPS#-zVecx z&vG_qIy092I;gt_DG%WwGH%a;>yR418r){NM59bxBPq;RYEN`WA3`sH1yXH8oL4)rQxkZ)(s44O(LOk;T^6A{mrHj-@j?GSlXLR08-qg+ElNAPQ`g6ra_vyde z&E{$2iP1&oEf8FHo10Nm)J!yy;h#%9bGd{J{syw0Fq?X1L897aEmJ<8CI0)6b}*MmDd~QRa&~~;?3EsP$S`X+7RAtZp<0>ii_1pD&6C{6^1S6 zahQV61@)zY#M%g*I4w4v>^Ue(g-?{0P5uX*KLdb~q)S~7D-ocUpI)ih#_zQfxOBQ9 z;Svze)P4T=ryOyzo6~s*4!JfdaFu5164w(lEEb~;MgvZgdv$vtM&xnIpv0K9bOIyg?rG z-Spcc-PXqZARjQ2cWl`+9A|5y5wI`L4ZdXW%f^GEh(qKN3T%U4xFJ*|3u4H#lv=6& z6TG#G5@Ph130@!zpp+86gvV+ic>xVVHKd#OsCe*O`NBk$1OE4y?Ov$zS-M@R_4+Osc{H+g5h+B*>mzQxS*9NJ8Y*h5~F3Mwl8 zk57l@T+V?c8lng|=EPtLrnNr>j9pqv$0eh^uzm4KZ8OEg zR92>Xvy2$r>W34*?Y3mg=Nq$}|IG{aoJbih1@2mxo&qgVtKjEVZT7M07U!HL(IO=R z3VYr861ROQj84@t7fN7%BxOyLvu(@-2<|*TkBg^{YK%a@-4d-Q)sXpHPd}TXmGAe? zHh0+dANA7IQB1*e>JiroPL3U5dwc}EvqB6*0hrE+XFd@Yqo{C?BpEd)@^C2f_a0iB z@a^v5@}3F1une_&C~|ioAOrZKp$l;3|i&X#~ol9o^@X8iF>u>znczFH=UU0<~2lqhbZ*vs{=OX_^ZbMST9d}uw;)05T2^*eZQM^5 zh-`j92Ui&j%+fjbe`^k2_TpO_ChNjrml{2Fr`COaueHEcouOJ<;Mc~iqu-|<8K2bN z*(DO(xuE7>QYhmf_B`#1JM1{u>kNFj(J0hlM;szcE)SY;E#vW0H{llol*^>zdRPc8N zK}O_x!G+3=XSHlkkSWWb1l@!YnvsT)3*BII#USCvY?^fLLyaW`zq>fc7zVXC2~s0y62}NhWwlR~zSBuCl&c>DdvFGHE)k%W zYNJOWrdDE)d%q%A7@5ie1SnD^UN@%Hh@psoD%PM*iGmCu&>U z#`v&a$pTdMvletel!Z61ZOeW4F>}ns89v_Wiz3A|+?R*-gL01JLpcS&a8e8I=oF+JIXr<&=7 zq09aj{LIeMs-mz(4xK}!7C9KcV~nlri39|4zW<20Jh;mzJn1V+w{%- z8;0`Envq)A0P+PH{4T&xeyu$!f?R!L6Wy3Pd9EQfb2G=a%&*>fLeiFE5y3A`;KDcs z{l4>&Bpri)$Gb=s#5I;k+sBkNNEh%R@hhbt`r{yAEIq5_vLI+I=oOD!Aht!bAku4O z0xEyS8!5S>h)e)9)3i~mp!_*RG$S*ACIvHKC>#rJx(fkG>YwScIArWCv|{;&yzelB z1n_aUUjTt^JtsT70kt1uzvLPN)W>&%3u23KzByNa^fiX1&MnA`thdnTbL@|Me}`z( z#NIr|gj+$5_6!9vN90LlP&dDHZI&V=2btp0m=?sLgO(*WJAit8-5G!>K>1hz04z=n z7|vKAX&{=L%Ct4>2jwEA$6C)uogG@9j~ab*s$&RW+8#tM7qV^|m{HES8Ro2O0<=Np zpg5};%h~C>afiWafzBQah8OLr4A(w8V6Nhd_K#y1GG3R2zVbe4% z#z`+80vT$uUXzXXua%oA0u5gh(?1DH0cI9x=6VT&hpPFLWQyT)LwPw58n9k{qbYVN zmh9#QAo(p}-B`hDzC98UbM6$s_0k@bN5d6lw^45NHq$h|kT0c*JW6|BJOnb;WW6ff zz-Sz<)NJyKd%w(7+h#k0C89UoxB2bNC|j~^!`C9i^;|DusX%hyv|yc?vP(FFEFer2 z>(drSYr993a+VJ){?DImvK0O$tNHOb08K!$zoZ%nnT|TtqRWOq;ARTlEF_(gg!F=$ z9Ol{!$I+4s_@){nT9-b9^sF*^pglIx*04%p9FHH?@IRC?cf+WLraGPB_cKQ=lNW^! zc@Qy6`8AjzJR@o)r3Jx-TpwQ4mo`J~!ahE>FW?e2=H9q__DX6MM$7YsDR64j>HIw) zG|bCJ-t&&a_jN3Bj&hDoS{6jC#e=QysJftt^iNz>5EorB$$Kx?QAgY;0Aj?WK3E=0 z#1I2oD7BlNW}%e;4LkTVJrsPB(((*ux@9(nK6GOD}t{7Y=ut*^u1iWhV6YNs%7-_{ZM~eG!oSj1}zudi(K61RdAc;4zbHV*JzW4Vq((o&u(K{J(}UtIUA z))Rm}t!I_|>~XCEDrNK9hlMTqW|o!}U44oMeKAdbiD_e>MLW2lOMVC{Murg6RqNlrdq(r59-`M=h zwksGG08ESQ-~?*U?CVsk{H(jb%E_<=cnY!INZtV_1{rv5zJIQH^qG@POLiX8bjm^N zBko~Bd5)x6Eltrr^6&BF6ItZ@3-v&aFkSJa(_8NY4!j4Ly+gWrf=)kGG`04&S_8fI zYkU$^1k{U(GwSS@PO^ti=1fN;sFs}`scwF?AjRIlLawkfve8aG6|&iz5-rAa1JEnS z$Pu9rwq%_8sI&2V99@=mtKx;URGP=IBW=aDAW`G!4pxwjbRr7@@}>Az`X_DfC4Jy@ zu2KRys5Y-}`r6HwdenB!TAy%?ck`|h)2 ziA3!)DCFDX!*08W-)it0zs9)QwvX{8oOL(_r9xV25PQ4=C|Ls`7bI2L(+F@vf&kTP zuN19+#0ST)19=M=hOcKbNjs_3RnW$&Aadi_w7Hu>C!^dteuJ%|5ME&j0d#MV7L zrq+x2UD3QC4o!inTcmODX4kHtx)iFis9!fasS9Irj?Kmh_w=quU$b^Fq3)lTVoRWv zDI?GU<0d}Bp&PEavW-5(BAvcO)^@OXr^Imwra}9!K`~+-)E4%Sm!a}3)r4-~b*~Tl zl&LaLldqHiJ|_lDvL`^)DVNEUQkPu;9FpWDQ^UdF41ctwU^um~lXtitF88uzG_!o> zkTR|4#+^FFFQY`;G-6*d#~A=`X%F36M8?7)PD}#qA4JgqPOfqD(lSUo2daDCc)doE zzO~p5GaNxPV5kDDSgJeq#pVnVHz;L0es6g8u3K`F1`I-iseoSwq!Pl>VTvmM`2O9)R?4GzBLI z35ThyZWgh_YWg{$Dt~EEa-W`Nkw3yL~*?bFSd5s0&wj4Z5VfBjNKOWi7qx6jEp2?b(vYiZ=At#4l zH-9$s$+4hb&8L_35Mq43YLJX^^`fbC@V>HZT8rQTp{d=e>}&M}c8Y^_NXYf={%YE> zMcUjNa1{U4=q|La3s5DiV7pb$B81EdiUqOhYeliDusT_qLO%pBac&xV*{)-Hf4^w7 z+m$qq-Fb+P%)VCWrC`nBioEsmSEbY?GA_Js06o5UrmJvh8_H{VaL1^evCBUy7Df#F z8IKA}yys$XeDA^R&Lkg}X1B$udT_YyLMGhWpfWzSp-dOgL?}zq-LA68cDEFd(ra%M z_z8vBx(?xBTSSqfwa$py(eD}*Z%;<$N@mwAn1Fs&Qxy542+0$AvX{E2(=gz&uW0%rXHsmr5LFjTHYvG(-mEd7{>BJq8&X>TpT<%c5b~Ty<_llhW5$(niy!)L zwyF!)`cH(=Vf6Fo@lWZuxO7d}6mg`e`Rt7B!D}RkiP$vwHE+6VRF={w`EVwr)9(cB zM}uoiQ)nB{hr50OcnOHfNXx5hdM&}tH?X8FY^Q?<4d28S>;3QF8K@ldY=mZ5S){_K8f|2KW!e7IS^yU*(}9NI{A z+a@ztn!SJ20tp&wMI9XiCql)p>5~g2mFF5tHO49c0C-@dwI7xrqSm!`;E5 zN)w58L&+U*3ZGXH_lbne{G;4abiPFKE~8z+hh_Yu=aN%{wu4|C6$bW3l+`ph)>P47d^?JtB4sdR*7M@Hn);OqB6(V*#Q zBo%^+js$8PxU!94{~|p)x<9Be5|-8=lc3v9g)DZ4hCiYVWs0`U;;NS&gLICDE2KuZ z<)5Fjc_CJ2Ii$ff1?N}^{Pcy`m}Tsh_I9K8v#!g2E5qZ#Om@?`{=XJ$PT<({)mI9l zuw>f&c+1V_4x@_#vIWw(nBK&^H1jyOvyvRIGtU zxnHoe;k-g_2dXpBE4S5dDJDQZY_N#iR7kTdAGShLr-s1aI9;{aTY&U^JX)dsis&SR z!W|f9sXAc0mNutA87pl$f(F@hx~M3-Y9d4I*f)0hX5l%IP&eeLaMS`S_RZXE>*c{v zuDwmfN_v7qx@_$yIrodNP}pW0Q39&$#4PROD<^ap37(p{@q_jD%PAGbg6Ef?0VHhg zWKXhAHn#Z*rk1~FpEYEE%%rM=+SYlSmS@W`(^6MnvmWKyyPA8k>ZK8G7(LAu(JzO@mde=iJ^w( zvUoI{P!1O6m4nGIZZyItned-#w%i%ixb-b@FR)9xy1(bKY6Ht+=VcFm@A?Ek)Cs>h z>f+ORzc13UTwqZbR#a>bU~{Ml3-l6bI3)lVa*%zNO{72S)4|pM8Sr1Zy^WfDYPo@( zLccVUM=CrFX3{pI4138-?*E?Q*VI*3n*N-T1W8gz>R|v+I1Zmbfd~sW8)q}lOQoQQ z#&iovDd<0pavOj)UT!^{g7}f5<)38_A9mn6+Jo21ZcST*f5@a@BbBYVi!28PQfdpC zInNc41*RdT>$pUm#qdzEp3Hle1USE|H)%O<@F6y-9QGK>swiatru9DV(skS-3ose`!m2l3=3hmUFp z@Izq-du(LWS2_5;>^>lw+0rLxB8ZY?7B4un+hX9VXC*}cQ@wAql|Y#T)Jp=nor=lI zqe4}A%(VwFzHYSisq-Ddf*VnfC3wS<<(g#%r%aBMWS7VmlypIw%WPHQaecrTj{x=* z^f22IwHEyLdNyfUkyD<5_+LwDXv9B}OBJ2VX%bA)TlinZb_{4pBAEm#DUMzWjS3dZo@&~$qG^O~^b)zPUm@ke$zji@ImLL4bgAq83?-;c&30=`s zpZ`tJEoM~uvbsk z1!z3;pf;lxp>jF@b!N{5lQF9FkBh9aAxNf#yjIdkrZ$*kLe)ZW@t~bhswT08G`ow2 zgldSDmB#Mrgpk(XH*h3&+^DYlJuMY+7C)qcj7GZGnyiAiJy|;V*|Mv9p&>GFRP#Ev z-305Qk|R=kjumYX?J(@|{->~MB!y{L-H8i*PA|_xN7FVr>5dZFyOB5OCjlm&CU(Se z_$4f3PXkxefsq1Rvo9R+IU=uPh9q*NDLh1ilM@n39$Vag?m%~hQ%4G*v~t&10QRBI zYrMLV(Y0)kf^sl8d=J=qjk&cp86(B0r)%zGt>*MsiKi;Cld0=@<Cx3T z0G(%`G`yCA065FG3j*Wb7zum~pcT~IvqadxD!jx$SHHKLwzYZ>wLAe<^(g#${SV0F z1JVK$upgo?J^047P6EZ9&TG_~{FoSu<6|2}VTlz56u@tnsW&PtMO!9Ns#$_!240(q zH4O+r2<_MFe#QFM@Q|fJv|EpjT18th)K9*L&xh^ca2PdA8oiY-@118Ev{ewLu9cv} zJoLK@&?emxabcAouMhpaM0D!c$DW%3umb3Ow)>sF`z48Yy5 zs0dRRViJ^fA?ysY2BHAQLARTRd%hE{Hh%EVY<*7dE8_jTqvB?6J>5-!%pf<^z+!SC zQHuh7Y^CMQ6^C$4yVY}LoEujiMc(ArNQIIG7Y5?F=MZ~JT8PW^C*=H?C@snkdySl$ z|M2TT-P1gHH~`OE&B2+{!U8UxraKw}IFLd~OBmP<&d5;5L7A(0FfsEwIJjV~ z&fLE!@K=SpY-e*KP29PQtxA?KIc?rYJyj2)+BqyJAWATLn^1`gg<~(g^tIa3@-|_b zRUp_$o=SS#fNsE=K(cNH<3Sy(Jg+pIYMrY3Dr_&E=-Y!(T2u}>SA9Q@PQf!_#V6%# zz9v1LN$c_EF<4{0rne=h%7gZXgGd1)c090Qx?bF2Ub-q>xC&q#P8v+qb~xKbTRqx) zXX9|ZEP@L~(5$w#Mk33LQ4((EVF{^R#f-+MXq}8c5e6>9F2|N%CBHo#6;6qkuwkPY zkdO)?s3WShk@Xl?ZAvG z3p)X~x0^yJj)YTds8c%}NcFE6*|#J3tFnGlksQi$(jK_~Un#2^Nvq=$l}@~4a=)lP zz4OPU)VoO?Q;LVJ!l;_dwes*Y`EKeXZCs#%VbkOcJK z$|+nwI8Z>lz>md>&M&Z5TZmI$NhC7@jQ#lLJTIu>D0cU!6wMhZw4vl0qjfd-E_p6#lo>F9-N4I9&_UO0Ewej};;HoP~_+h3rl@vjC2YHP6 zW7LZiX8)}fo(u;r@SYZ3z9!vOxs{DLbcC!aX->SQuCCam+Bs5%cz?S`q1Dcu84ve0 z3gU(3dqZzR2MNxp$%L|vZhOy{DNeBoLZa3;Qg%5>!c~hfL^0OtL5kej5Q|*VGdSox zc5?B7UI;WP2kbagN2bvK$R9(8NC#M0+(i!h(=$wntSmTp+rh(0NEoa{uM5R#(+-~! za0Y$YsCj zwbo36BV8jBjaby@shaH zPjjzYEAQLm00&+XyckQ#tzmfUR_N+Q$H-$r0eoHLYlOK19PAXKr{q(}0Jxqm0q^jc z-Q@Z}@jUzh-Hd)DjU0M4>xmWv%iGPYRG;00yqZgYc;s%kOKxMCnfRLyArNh}T?jb` z`KQI_3KFvJGcg2GR0fL0A}()j&Ccb+Za#8~}Uv|2{`4sVel9HZC9VraIP=3oC6 zPy`Kbn35n~BvULtEXUOnB-*a#!*VRF4ZN28=hw>Q0uhKHH9f>^P74Pp+DkdYqj1Qt zGoPSx1)*SM;@kj~Iks|{m@)!wOCD3Th3On>oxc2GDP4+|wwoDM=3%GA)TX#sl%sB~ z%L?$LRiO+hQgQ!_|07ZoWZz~%6r0o6O9j=DxM=j(zurdkhHTmrX8s4{cVcId;>gx+ zF{00%fTKn9kdpSlY9n(OHA^yD+;1thlgT28K`}>VqjnqC@Q6w&p`?jm(;K|3zUnDm5@3|`=&vQBUvFac8@hE zwDiN4hDu#w6(|>N>c^Iu?I2s-Bp1qUx)EeeV?0y91s8bxMSgZ>uN4zXvB`iU*JErYdd6wIK2mX8ePvb#M3`Ut(&w8l-ktfc!S`E7`zB0F^7h}Q z5)DG{D6boj38N{MU=StwHAVP(7jvp9TMo*;i4xTwo`E7aT6h(z#Mcv@CvTP2_e zoh1tc;f6YaqX-%{(~8^cDzGvn!vEHnJkQ}YN7VrvPUD$=+0ez7V+J0{_f07ik@kMB zC#H5b-&yw+c#x8DR0q=?J-eD3qvezqn$$PmP{ zPq722MKgf+M7cepS?u$GzN3Ka(=Wg+(qD%eI3p#&?35oRov^%yv8PR5f0CAPFxtlo z{30R2jfCLSXFlRV5o<^Wm&C3B!?{V`b`Ro)mEhaF#U47+Opgc zIv*dR9IN|wd2fE}&^jqx(-v~Ec%3w7}IPQDEcWFy0 z1{bD@+hp?(Toqm_$7wGh(lx_j&hNmWDtsZiEZVj*B9T1^#SdCZy3wfzoM?KK(@ zwUX9L409a}FE#J+OhzcaHbC~}h()_`ATSHE&9VF1JzX7uq$WQ`O!^S|d1&tyH3iXBFut91 zk>f$oESTzB5+^y{M|4}A*<6Gu)jQW)=5MC&9uz~wt=nkj8)xXOqE1!Yn_?_g!(QBX zuGbFJYaPciC`AJ?PnODJOROp=qn)nOsP=P@#LYoAn8tTLs(iZ|$(c95@FFv-LQf#E z8-s|kv|+^VB+nJ~G-*I0z@z#Rbift!LK?AxPr{8|`MIu4T9xBFFYH?--U)1QI|{Dr zAmAEgfCTs@TCe<)SBoXv`MLIAEv!k^q0fct^r$UQ5*THp+fUAN7lRUsicj*yjPSnG zNKD22Bp^RYv>@NiO}kf`qcna!@@4v>vg}G&pOWFV?Q3ZJ5{jvxgs+g5dx$+ zGz;8q&ECu1n(=Hj+sC1%DCTH(?EjV6Up@YNAANQuUpa;J(a#QzbL+aMztS2kBE!{8 z35lK~q8AJ4;Ywvw+2h7G#j3<0g@5NFAZb&ICOWud`Ox|>EX2C44-%yjZxX`hm=YJg zSBoB%9n_uVRF0vo4`;Z9=vhQaK7+tss#UJGB}XeZJ!{!V->>(pg0Ye4RMRILTZ^7#U2qH4>fIc7%^=)jTAtQold{wY57j$ip}5%udw<5j zvS)!GwIO^-J~^2##+z-T7tiavQ7e8hHKiSvdkLZ) z)uBdWgO3mS{0J`!2n$XVddOvMQHzCUv2d1d+OP!03x_}5^O&X2E4#)A(iWJWZ@c>C zNqKNhjs9R|nUd^|P^8I(6T`N|@U^A6ld`_DuQg0JEbde(x~-Ucoar&Cbwy>|;{*@8 zH;sG^O}&ef`gVXkV1qiD&U8k(v%W!s*<01vjLOw;&3G3^R|S_5V*(4^q4zi+t<3P1 z@p0XP^IUH!mExT;ANPPAs(*>#>{MSS7W|B0A_^|ISvTEigD^;>oNq!?*!l2Bx~~3% zT2IT`5Ej(n_yFrdi;M63Sq{-Kfw`GC?FNjFQa*u)Y!>PQKzGLIAXW4616>tE!E4tL zT__LuK^NDdCUnoXktDs1-3#By+>VBjK6GqgCkr7f7U|85s`D^f(gBT^3(|2cX3UFK zNmXOrX5fXID)P##3DLO<#p$|J^M{FMXb~}8;QpXtD(vzt~R$g!g396+> zRa>XpyOSwK6SU`CiN+h48(W4{FIU{z&U5c$B3UjplHj=gk}hP4TnpCI$T97R<8%A|C66(jD8%G{j-M1T*B393@9;TEmv$$%yKRb~Yqf^X_v;l7j|V*(IW2|`cil41+3f~ z+asFE0GR*EXum9I$V387h=Cdlv!QcPr0gf0&W{H7IOH6Mq&($9@TI+#mUWRyS4CR; zL4xDh-;}s-_pM2;w$Fiy=*gu3)ZAw(_^G%gb_vbnx~LAri7%RS1Hu`+z4pbzVB>6E z0)QP-Oh|SLRqt~~7}qlLE1yC&pqXy4>o{*Qza|!PG%A6C?kUuP#kOcgh~SwZ?6laX z_>&OEs%6?&g-Ls12>W!lZyP$e%8U8`kwH$68)hqKLXjIco~jnlb}k2t{a>yUTL;m82M%vk+xE7= zM=opv_caBhO?lbsM^!d>ue>Cv2j&ADSHy~Qm$`nM4^NKoG2p+mI>jSxquup<*gU>eQ*CDlFTRsDjOoKlT9?xeGxOXO+mTQx^Hkja1t# zJkU6#0Qg@RVdoeM0b(8G?-nhCEK2<-tc~LY)k*}ZDVfhDu|RH0aL#>#TIGSb-J%-F z<5wF~?}kT=k|KKOa9#~(a{c@N$U^=)MD`oGI5>jW$`mpt;eQY8S5>|9@!^cBn}n;r}!{|#F!bs3>j4d;}Qm1y?)$3~FBvi_9_I+NGz2$MO{EZoo z!G%V_V|RY=s*}WP;#XRBeIjWG3MN@sXcLiOiq5nLt0vo2+^Aa7}xc@O1&$$p4VaGDF&A2fAog6v?g)aZfm5B71cFVf^DnF|RopY*1k>tvM#ge4z)R+I zg`ZYMr6c_iDjT}V|0bJGO%6n(WdqqRK-bSrslNCvsqSr~r`64J1ECG0kK>L)PTOR7 zfGUQwW_k|JAcwZ~K1Z4;wE%8jKkLlKw_p%!UAudTOl3UpT9 zO`|o{-uz8IB;tor^M`RpeIKQYbB-ON*`V7j`6xVdfGIaK>B8E zi2kR(uL~~2tB~gB_-G3%K^mhvR7tNLe!UQX%<6{Sf870-RL;)=7cxiGR3}sjVKvLf z3yLe47cfpwv2@TTLkv9yLh7Z#K0xCx0Khmk_P53%IG$OwSXKx6%c&?31!E&zeIRuhxYn=O(+mlCe(~m%|f<;SN$II zT>pl)M%ED&m@62VHcN>=i*C>07;*CZs7KlGaz*Zm9tJc|Y}GAz!imyFz8M)EPb0=H zj#r3RBBwVks9MN0v}epmrg9^0J;+ch`K|ILoQZgy5KkG694;!&^+@!8DF ziF^clqP2C_k}9&mVk7qS(3h1L_i)%x{k@B&M}CBlZ08&9fgyFN&uvzm!Oa4c*F}-- zR%S1U%SkaXM{w7%|LY|ZyJN==&Wi#3O^1tEyCJVxQA5(ok&e^Q+cCvwqz%ac){bi$ zDJ#Y7KwzL*GVicJH{lXHMW1)J9SYhMKnp5Iq`0p9G#qw2>MC>JPdkXw$iYyer)~83!~7m(*7^(*qVT3w~D3j>()ojVQeiyl57wLiN`HI zn{*t8T`sW5z7kh}wdJaU^0NJi<84FXr^F`6`!MFTQCzgqArFJPg{ z0s1$Q27QwQzXb7-5C8*~h>nIyuuMHb zc$Q?|;E^r^2o7f%M#pWn6Ie3*{;c`x6G2Kzd8mX+Z~D zmM3PY?BPH`eyx)*Zvl1syj;flMpCkgZk-IsjObJnc{JG!UQVHSAwo*3TQ^ z6P2rOt(th9kDeT}QTxCtSiclyF|I@WNJ+nP{km5U0|xe}qsU20@`KH&uZ;L$0~PlC zm`s-C{S9(@{&QI2@d>U&Uji8*iOP-04B$yLR!{iw_&IP(#3P`FV>xMjCKg=6zOy^U2-8R zqI@qL&~fZ%TWK9I+vIFVEka)yOueFzOOb6d2En~WjY__g9JRC!vV^FcC$BNHiVp?2 zqDjyc^oft-NjRe!<~$4|f83E6a1LH(CJoWcPyIW7Vy5*$4BdMJKGINZtTA?yBBP&P zw0_SwduP@4Ji=gdu?xWvw`BNCAOJ-r+FB2o3cA|jUP{L;LUwvPg5*(qzmRwD82Z>0 zI;ChoejBIHK88zOAOj>4i*`EVrum%sCp~z@rJBnsLFf+efi}+*E%y$7=s~emm5C7d za{e5{E~QF&)YjJkrIS_$f2^7!FdwoOR>Pm-fatUp9PEx=s*LIC;IqmG8*%~a^BD31 zGvm;k(TX0H$+6CXze)s)c{l;s-8+vlKPjo`pyu%Fm3da(P^>ak#X&#lCRl%`5Zi{8 zW7#8Zmxji>052U_h%b}{F=P&ZA}+3=_J<+xWj9h{*;j{FWo1z9s<&5vSu&nFIRtB) z`90i)^SG4Ol_qu~<=hE=TyMj`w?OpKpC`NMF|@WB!xDi=BJvTr7%qT z4&q%!Ew7$jbdn=ST{}(HA(VaN5lXEsFmr{akw{T|+Dg8d%wIw+Yx)UNl05(%eH@Da zf{F-V<2}=4mTC>dt@x=C3-rhgR4zu#=t0$P#n>9H8gNCh1P6QFrNn4{KuQFDiX?sU${@xpM)9Tg*IPqPbn!ykpC5usHAo14u=ofSw538JKSw@uFw%$Elfl6hQq? z9l!CG%8kdd$;hO-Bx^&1e$c!=)1D)#MAWg%*nJD~J(o{Z$UCuXM4_Ywj`5IE#FJuR zlC4&=kycC{-^N)+9$lgG<&|Q2T6X}!$5E3k;UgE(Q8^Ckbups+h20nsVbq28LPbA zoa}|Rc!ARdJ8jfB2uvVvF;*(ESS)yYpY&27>>Ct#$l9+g>?-(x%GHv#U;o2mH&71H zzhH*6FgjEi^5v_IC?gWJ09<;11t<9LKF=MLK0u#Url0}9Y@@t-ezfrKHt~4oer8iC zo#H?gj=^5o4e$*Iu=pw8ECom1OM4$#CijUSRiEKaW#{G%d^iz7V+qq(d zlUFmI8KLT%P$N+W7Z>hXa-{!Dx929`r8)q0BeA?Gu63^gc3Qh4NJ*Xr_ zRh!_J>$wHYoaPQj?7GKRyKW>w!UjgkB)0V819*GuuPpn2AT=x#dUuW`fHI7YNr=Wr=piJkG zOKk5YaC^e?)M0O3Sw5sUfakK+5h5bM?Zjaa7a+xUO~*0EvKeB z^;txE@EB&ohc1jkXVaRd3m?l|(R88*jWbp({v7Ze>%?yBLy%`KZCWo zJe9rd6cW>XtE6fp_?x3m**l@4`(dWbK@vH{C}8S`g>`LHf4-vMBe?ci=p`;4K^t*W zi<~(2$QY*+{D2J3UvNEh%Osx}Dq^6Y^b;(9#go(UHpQ>UN@t&Z7pY}cPZ7}QiMs~4YQZ3{ zmDlv$MW4dvx^FTRqr~kSV?Doxfidn81?Y@dldLS#YWJKK-=g62;>XJs<%6dW1j)zn z=w2kKpR)D|C&VMu<&t*s$a(+Z63Nd^v;97-Q-w3Hf!ZEY!?U;AtTA&n39(pmdV$8{W_e-zjs z1$Z@wwdY-+jk7rZ9W$(a46;~?4Q2(-_X)vh3^Ex21?csWlQH+{4)2N*nLz+W8p&eh zAIH?w2*7Z=0!iir>(z6~)5aIAx~|sljT$CB-V^n|%lmd1y`9hC8kISFdB*q9JP3&> zB>BY9fQAW+;#JK@Lv#Yx2>(U~?W6aIo!Dn#l}H14W_EdyhisY(BO~{q)2ybb*A$nNtYS=!i!4vtU`%`PMoM=kY0P4bsL-x*8P$*9r>ok@Lno zlEMsKZ3H8|11%x*7Mu#WAraHKzN!nP_!}eYQ9AxDoREU?Xhh*%NI{f4Fo>L_%}V=C zuFjt1SAJu|tiUODmVX6aAUV@$BO)P}y$8Fae0Al*0s#a{F^0wdQ@w$;3T$tb1BOS+ znAHwhvRFoUimo$-kQ+yvy$y)@fVrIxPYcDgJ5W=gSG zc_rfM%5lJ&59nTv4fM)RA=iHLscLsG7z>}giJqX$xPs~{Ths?+M>e{7v>ETVjxCBQ!dl#_cM=M4`QMoz=RYX6k*FhriogN25I6SxK2|me7v3O|DX8z z#eOH?3^#}+u4MpbVG|KUlNCl*0b0UhB8y|PRCwr>oXckk(|c7e*+jG942!1h@WiTV zQP3gPMSY2h|V5)fbIPp81`p@ox zv6(=0Y`R_KDVfK4q^pz4S#}VEN=Y8q>eqm$10z#&g(4>N<6e!pTY$cQh{X&o(c0N( zX&Q+{nxWV~5?PZiWGsep=_-KwCd$yDG>9=QAgU=m!vP(IiaO!7+sd<`+(PdeA1$)H zXopp1kcwP~T;yF-N3^l_`F*i1@%hF$>!nuY;j0}<6mXD6r_`9pRaX{_s^kS805w#x z-Gy`URt|w6$yl;$+=Fa$M|-q+p-8DHzN*D*kH66YJ}#@Vdy0uw4~tCrLR;3EGd%$v zBeA%_WD+Y(Vujg~G;WuY2C$$l)?>nW)Gv%i+Ycc^K3XWK-8Oz$zIL%UDXJAG6Vne`c z18sKYzZuJ{nXfm{C7M#bV|_@l*_t5Q2ysw#Y{UexIUsF~IK5)K;g4P_7vQfkuU2Xv zD$|v-6)qUR$orQwVA?$jAYr&0D*}dm55YUqG+AYBMZeBOuM5skWguIc z1dYY&-FBt%rsySuctsIbM&^aWX89dK=wH>z#{s9r_BN23n?0DF1O82(Z`{0HSQ5+# zGx{nLG$WMgGw8$DY*~-w(sCkJayH?CqF#N@01gcMy#*oUYooY?vbF=m!cpVU^81!I<=g+ z-WLtuz*0~s^8A#<{W_VzKMkF7TaH_(IxD#=eiPI;W;=^&t ziYcX^o9po%KEu z3^~&arG*v=EqqW>)iD8Jyxo<>@<-EJwo)t2=XEcr&oq$UIp#+*;2ccw3rYNyU3b4>ZYAi=*VD z7|L_fX38cAas;k_G(9IpWmQTh;W?Qy!y37+s(Hqk%|{E{)H(iI%ILpaR~G*W`vz=+M%3x;%9 z-$I11-1SDXc|x+MgMy`xVg~|CHet?^5J5A!G}lDt{@}UIpn3ro|K%k2oS=u5r%UXO zZKK&}$(j3Dd(kz2|38~wJ!{lrHP)y^J67U#v?L;Wps-duwMbS@@1J&FftLpIx4f@X zvVKUYQvODWbwMX;TieF?vZg@hO+~~!V)|PQa|SgSxJ|x2wX{E1{!K>2b#RbV zh+iUl`CG>h<{TtMxP0boWlaLwsSq+8|A{np$Ru-PL7AXCG<7b2IICy<)9lL$VoFOB~d?3FeDbWpb1_l|J z1y&@+sP%@J`+7U=6RoeaAtf@)6LG(UY*}*nuSLOXG*Abcr^QaY8WHx5Sva3Bqtd;~ z9Ma@vbc1Ddc`mWE>%g#f;Q>c?5@uKXzychVO+w0v$XdvUlnNSb617*aqChWj3o>$v zaIFm_sNqc&KJ9j7`Zs%Y$o3RP6+`Mv0jC8XbQb@ z8<`FSM0|I^2&;?JZq2$^8V9l zDi2C#MLRq9|JTADZNDWW-S@vQ6VvLlEfA(LaK(dBP-Eb=T!l|(bUF}wKUv1emlJ%A z{O{91TkhBM8(U2!Uz_-G|HM-ti8-fte23*4-`OV$YghFivb>pbKZID1Y_UJ;`=JS#NlSt%qVLLV z2^6P|^u-WL+Nk$iHy{@Yt0%Ju_oi$TF#&49bE=*0+DY!!z%slL$DHBDbYJ7jnB3w@ z7cyi;xRs1djVI2gKD#&Y1JbiqgPL`;wWm?2jAvvB`Y`7>*0hbJOBy|F|E$v7HzRQ~ z4L<+05czDqQE*UTU2?*j7e>i}U!uzpsE!E@7d zu)A+7sj*0i=oqiWneh8!C_Bbd{SB}h(}B!36Q*JivRA0d?!0+-TNNAzNd2UO=5zve zP$a>&;%<=GN^Oz#sEaSbicD_TfM48omH^Xw57Rp6=oI@hCSu{oIjusAwZadwf_Lh&n44o1&+*b zWvyX~r2*}O+`!6=m)DwxL&Rsi!e;|odl8fC*r%-hk)#dfuKhd%e`81mZA5VqqSqKC zHz28F&?drqD9VcFW+W=(xN^EhuSO-j<;Jq5u;LWEokbu9=VyYpKDb`#U)V+9|uN=gZy&V_YcEANc}*+r5s zRIt~RF$Ipsk*@IJ@SAQ-eG0T7zQQ4Yi)V;|dZI|KR`HV>DZfK-K8jY<0w&hx=78~} z?SzqY5n*_|Q9MCK0y{vf_-8*f=*zvh$<39{wIKF*$U@&fp$S~<-)Vx872+il@x{D> zcw-{0jxQsp0pU9Dz#bH_az3lgI{MF_bz{dPW@X4fN5>`LSc<+dl0kstm7b3DH(-mS z$<(KSaSTuwJVtXpS<+M>P6(HFSX*BQ%ndmhl^O{IC(3wK!SIRrEttPu zRi1CE_tZ78Seu8@#IsmJeESx)Hie}+X-E1$+;|8KKXET<@|)?)6dt=7yYDUPiL1lA zH~oy`O=|M02d5p}lsnGlGMkX*d`1pCS2mwsK3=~;CkH}A#3Na`d>WPqla`L?i8lWA zax4g2-9Nxwv;0m?Gp^F?bD~PSr?7;9O1z>Cb2H7{+0^|~b^7m!=k5L_B|A{ll4Q;g zEk6IwMSaUdSdu|txfdL8y-YtqPUSw@vtEhl+y4T}6tM;}ZEY~)d0+tHEIi&=(|fVT z3=x>j)=6^bf7UJs>&Yu#shPS(gOd+O#HVFU4(!}ZSgLJkt$Sj+yeuD_trtSQR0mUkY3x3Q%=2Wgqot z{`lf&2#zIk1!W-!TfsB=NNyk+%Dp^47FL%f&xxn7KwH9S z&bhR-Q3oI8OBjaY<8eA~#sjYOqO<3H&}enGc?bB2OS4j9L|Jqa!l*e>L>yB#qs0mD zT63!A30{bM=9I2mSvO}UBX}v3e5Vz0rd!3|Y zGTK2)tmAxHx|D`%zvN|VTk+a_Se*TSi=ZfV5xIVQ#kvi`LLJ>9+OauZ7}HEge^bK73rX+ z$`go#%doL;;u?_O+8=bJJ=NAp2rPU11y0yre5~k$K-)jbv$TUTHV~oQ$xc*hEoJmj z=R|v+>ox3Cu%4|EJ(Z-HL^@f#+uD`LBWcN}wng&#RYjb)$#)|5CrEQiDxm$j4XzjA zyGDO*Zb%dn%ci7;OZH=K5-5RhEu*|EQK{oRXnS$gyk^M@hHq4O(3B>{UWA3gb6W9! zw_reUyC2Dvdh(xYvk8*<4IN4?5G&&yH@tUQy*M8pLAT|dqcN+dwG}0?C&q;FXo$B) zuL5^`S5cvgdhs-vi6gX>>$&A3Jah+Q92I-?{6G*Bkg8w^NlG`l2hi829YY!w08#kI z3X+Y_s6@{#0RB`w1Z7Bu=s}w1NT8`ud#2=ov~`i_6{QPphxUwP6^g>r?Vqo=yHnVG_ zdsMk^;$&Sg&=sgB1X646G}gr+x@3DkvYEg57UCczBW+(0xD8}QF7jP5s2K9jkT3Os z=}V}0did(PE8q@+Q6+qR$2FwJZr#=WD5IB2>;mTj4}yHM(`i{~RZM)d&NS8puL$g8 zBAWh?W#mOPrDm0Bz_d1m!k9osetMeq61qcb2IIEtK+eLcH#JLv(ar0pCg^l)vqXV! zHDCY)V8Y8%cLPwl&`mY4i;8N57PU*of0~TF-qtsLoVyl%vCph@oS**KpG$(=`6jP`@tg1t2Er$1=i@xWO! ziA42`tDt5su;WSCT@>rPU_B*WyfF8vL>{o}9 z6U^{@-f~C5!{+5M6Ay_mYe+n6_>z(51bs#E0>FERqRvVNUaE^gRoD)yv2{6QoK{^n zg}v~!wMvJ>sRsT=Ic{ZIVRjiC&M(Nf;Rzq!Z&P zx6IS2(S|DT34)+}$@E=O7_9T_-|F-${!I8nkWWAf!a=PiF3vqj1Ija;SFn$am)9-M zooIX`3?>A9oxT5Uc>6U&rf0BMzE39-RU+s9vCGvCQSitQe-|DhMBh= zNA{Rkg5pUa4Dr~K^ULLPp(NK2lhUSNW9}LL_>0V^-@9z=G1!T*kaFt02;8$ZMuxlwJYZTg)OvAr8zmi zzs>LCQP&2>&d)68gsf^uS+hw1LNRW@mkIiN85gt$wv^WDp>SPD8cL-)b6aY7k5}Dd z9C=t0gkEDh)*CCo_5$yHV5e`HftO@&ZCrP8!7JpOLA9#WU`WaKDy;raU0`|C0`SA! zW(<(BA13k6h}e%9V2DO-xrvki+1|gd_1`WLEf|3$sd&{0J1~fc}_P>F;6xS5% zhpz=4!TV$yU8Aq?4;6vV1~#%F4}@~YyOp#hjg-$X>zyk_1fL$)b`|EiOfq=iihcJ4 zS1xLEVTcK{`6mE+#qinpk1k}m_kUI&?H7rT63PcJ$4QIi;n@$8_&bx_xYcQAv|kYd z(wFdksUk8}%FK}aeQ&_|-XV2bFeygEqLys&i^$BQ1N3vTS^;t$%fSlj#kzCh*{6Gs z#L&teFcCk-K)@^0TK_i(-x#QD0D!Dk52+Ygv+G&Qyez0q(4Wo>wtVUuEGW&Bz*eI)q{sRci3f@Q+(s1jPgz0NtpL^En=6?%& zXt4?(Hp?aH)|9)+^!Wk_Dx_<&wO;9FC%3PlizQ+^U^%qDqH{Z2odnq78uo%<^ZDDmoWx1w{c%ZJBCD4Im#~)|5JW;-gy>n0>Zj28il*Bop+Tbf zUh8@J_$h-3r>4L76uH)JdVJ+smh43N<+M7s=m=5?X{sbpIMJRS!dS!Z4?X@A6z{2+ zi+kigC~26QbKr$bfXRPiS^z&y9QjnMy?5AfT0 zA9@LK4o^ALi-ip5DnRtcb257`pE?AOkMVz= z;g%q1Cxw~N_d-?L?lfAlRD2+Ay((sSQBE74%)ogZF+HfNpHFXgB-7zWnR_mu(sYK` zy2C`IwoHMm_8IsfMHG(KIzjc*!|G$lmZ0)V=qo*+s~frx^`L=Q7m$*l>jJK zo1`sACq?_t!&BwtN_utesixtb{^+mtriO}$xgqs~E0z!I0ee%q1edGfvLku=sEFxU z-9vVRb&>?l=ow6An%Pmj4A(b$9^yo2^tBHTP0tVAbPsbM@jXHiX+mor8_g(Tquc!|P?Q%B4CaWjH_~g~_+O!k`pf zFXtq7C@~as2UU;ezJFTxz9hcFr4VwMkt3|H;k<#{5nvEtR=o4ra!hzlK~>s3X|5y~ zvihTtfdNKhK5=kw&*N4!hFk*6RH|;%>SvTB6lp?Y3i{jmk8x00SwT4JQLEJ@=S^cm ztZ2(VXI>2|W;_EPazD=CMI$aRj;dAuM+^KkOrfPrp0-|2FHFZvI!7vmN;J%BGqN@8 zd@{qP=}lLls7l5~=fe2pIg7OxU%>4OPMiqzr5A9as6$91hs;xIitW zztS&NU+tdVM_Pf2W(jd|{&6MYJAEACQ!%?wJxc$c@XVFJouqpHK2s&28r0NU?}c~9 z$_9wX=T6+TDE+o-;nrXm2FR2?Zoc#iwm97gzxi&_1{ynsv^#Wb^-XOY96X~a*`d(! zkM6wRW3 zgZ{o>9ki8;`=_N4o&k6H5OJZ?liaR5*ico32E*y18&a#D>*2#X>E- zvy4pm97DO(F2^)zlus=z$o$e3kCh8dwlH*?3?wdUbrMlCer>qC|5RA| zU8Z4Va=)4m3r=%*gH)v;Ri$>t`5HR@B`aG}7gPgR!-ESI3^>`O0dN7==K)e8_y$$h%ia^iV6l42*|A{Pgt2~P^=x}{O z3mD+6`n!KFq?xJ4yKgBR*oFb$a>?n>P0#}$<(|ie_bplJ1`-^h0uyL2rBb!cmZ6U} z7;I?vp!THFK6{(3tA_q5)IlVWFn}J}YF0(|wy?Z~rSO>h|jZLn;sD9yz4S>dzG%x9JrypbBi_Haq)0$CVWn1S>sGuvU{q6L*`?F6z zqBJ}*z{G0@C|M7GG(}&h_RL!$=oGNW8Zqy?R#7DC-}bNr&0OhV?9_cu4_BOH+m@8Z z%fGVK5>2KI6qwRB>b+hnxWOQzvQ?SCz?Y2*sK-J`+2H>}g`^`BloQe74h35ht7W0k zDV*TzKNuA40S6+S#}yDBOlRLra01T`4=i`uTYl@g-h2-EJI+BhV0{lE5JFjW79MqzOzcg=20SVD#hNktUh7+m;c|q1VZoR1)K>1zqCE$Y(&lW8fH&+C5XxlEMf?#MS!e zZ=4u5@%KZD31DjO%1+9=G+CoU|5G2lwXd)nWta)q$s0MG;@VhOT&i_ociKL<27l3b z5kzdp`ma3(m$&CsNGOi5*@}JpkiEg}hESa;;i3^Ns<-nt3qmckeJPZb*rdZX0Fwvk zd%iSg2c8qY|6>9dW4{VVsO7+2%P#KFPxp@sd|mnDy|i^MuSSK=asIU?Za>LD~$-cqNxc#e^{l%;fj zA}N+r7-ipJ*N9YeAZ*2He3KkAYjJRUh$W5ay-U!#(JT#C!jWgfVfU}`T}7j@NLs|F zTpHcpZlk*bvFww)`1?@1dn&2GKpWlQtq;E=`g^0Wo)=V$D?jX6(DBR7BW$bSm0>~c zC$CoZ3G;zMK&k0UF24BGXxjBZ@1Ru>u+-EFPK4Q2SFmPg=YzJ>l{WK#dV1%Uso%W_+_ZPi?1n-V`9VuWgmp;s{M;q+_~Eh+CIf^2GzG~ zU8jp;cHXY{+XpyV47SUoRqR7?RNqr1Xm)MF!+<5rd+L2DwH#J}oMs8wtl_kUug*4r zL6(43=Y2X1h=(y4s#3y*TW;QkT}68@B<573PKcEAta3RKiB!#n{0<_5NKODLYF?v8*mTbni8x)*%$#%I8M_qC0gF$7 zs%wjTMU^Fy$=3J^6T7MF(YeyDG3~uR_M+9omp^>vGWkb$>F9E*QkXQ^_Fq>V)i|3| z3h?okUWFMwtG`%lb6~!lN_|h5+eG2rgp@hbn{naqu{K%6X(@kMGs*;RblD@Bjl%ek z)bQwvR_fSRW+Oa$O6BkD`6c~6$`SKcs42iM1p516tVxxU!{!^)Rd=S&gN^EnJ$i;mdzSfbp6uU*SRMbI720pap0le#KG8?jyMiWdHN-Rfg zpu#!;Cp2U0eY&IL>`Yi_+7Xt<^H+3$VAi*eA@&~5)F&vq7T+9`E_6ylG=k=S6gJmb z%C+RZMaT=0Y9d2o=4GTqvphh+hrRR=t#dcdDiQ+WFqbUwE>v`5zDU$tnv&nd1zkr8 z7axeHgegG+v0kmasj0xjPT>9$J})gj!BkyRpuoi!;LHm^ZoDE!*Cq~Z3Ty`FyE02I z-XVsA0|Re}<0A_@R@Vaw6@5AtwjH!iRevspiASP6hl0dYrezp7SAWU91|A|&KHiir z1XPVIc(Bw>rHw%i-*?zT41XmVpVd-K^oIhdogqXdR@*CwEQV3pi>^KDr_;()@k%8* z)|L23^E<#127OGe^^)C>37PS8tb4glzIyzCHq)CcORrjXBk5$?IM!*`!m4El<93N3 z97FO!)2^f%MwK-z(qlbM;*NyCeRYj>#@rs^V;hrAAFDj~>0grx&zt}p&6kpAyP>>I z7l|`-Y&lm4h%NJuM~YM@h44L59Hx?R>x3Y@u{5JVqr+<(h!#wRk$p> zuhUSe{Jtm{?h~~~y&CMPfu7OaYOMr`E&oo%W=mo4p#N01Ai(7gZzriJ1JDN%-EMo( zER;Bu$?wL6wQ};IVH-r;bg^Hd`8aV_y|bek=sgHUwz~j9Y)F-ddANBP(p#IReUix$o=z9Bisloh^_K?utw{QiImcl-qOh2qS7k00 zy})47K1lZ)X(atP`(eggek>F67u(~)x#2)*In8zri86bvHRFFnN=+EdJPi1C(B=p^ zYQq&7g{$&^SlEC%U%O@Zpo6?(?l-Grl!rjfxq~D=zJSybR5?VGnEh zpZ{9Eb;i6{{E=6wsLAu?G_vxiRA32Og|zB2IMjlrr+0?8O0GH;1>wEg?j7 z;?uf}s#F{64{>wmA2(LVf~HuGDJNvKPx?QsYz4Nm2@Y}&BS}TvN}|Z`mS1*458UhP zp;^FxLb%%}Pc}6rX-{eItS(Ps%e^jX$KKHtmCh&Tgejc{77md0eY3PFi?ZW>XNaSV z8xj#4-m&Bm{&GL^-4x*RDK+}}S>rm$upCx&Vo>p8h4Js&T&(f(X%!^GpTyr=Sx<25Fm1@7;?CQ zJF{JR;GAUAQaNsvmhCm-)w*)8$73){30d6JbiZohX2@{ipez#bZ30b9+X6dr;zmRjE@JLd*EU4C$cx1tL z_N&e_1SYURRQ}w(_o&ilqE*?4gxqGSg2v?9rv!1{!h2#Af? zISuwB+0j%dp{??c5_C$)O(ax0YAT27k`uwruzZ7gHs*(wm<+ATN2WQ#beD5wvl3h5 zlg}@5tnC&5Q*e5a4!)@kacR*HJ-TV~QlLZuw)PFB9!%_05HX7^6T7L0$kje#^Y>GP zo&l{-ln%xz=CW9v&Co1W;!F}B@6P12+wCxVab|)#f?y0N9p=5E zNOsHQ#+1R8(PF(#jZypK=OHTtmhvx@P3f`*v?hZPNxi_|4W_<*%Q4Au)BFdXH^d;W z|MNYf^Cb!QypUt~N%!emAwVfCnFzNRzriZ1McI+n`yJeJEa1%8sCPmJuV4ko8)0Qq$#H zME{aSJmZzPpJX?E1he(P^7PXq_LG)~wiDZujMctN4aPKQ^aI(4lfn;Tb%5=KN!;K~ z-G@dQS!UI4)m3DX{nXzNp?-BE8Vmw>FUm(_GsQh0cs!HA14iQ{_wR9E*#012@vpTw zwKWyHvF=llGVN#gC{IAl`!m_IQFzIuob;5XuuRrsrfoCRI&O}UZM(HjS>!v{ZPc?D z)558>EMgn}`xIne<1}nWe1`-3o&%g0ph5YUKL1~NiSU~ zO7VACB(Q4`YfIjzXR3rYc8VMA19-ow<5#bC|NX8kJzh(?AeE4K0q~fNt*a2buAwR6 zi1xZs7T%#@*FC1;m;8d~dOahf$#!J_&Ke^)b#v4woyUt4g?4pO2ugP(fe0#drfVD} zo{WV`x-w0KlX%lrAOWjJK`e*A-tGq52+J)E zgBBFs<>09ic=;*PL2RS?-;MrOGcqc=OA-p0mYsYiIfALvF`DLKK`wjgQ0=>~jTZh- zFQUGsw@Tb$kI`@mp2T=?FLb%=29e=+kOx2(bVQ7U52K?-^U zEoKPSvxaJ_!?UA6mtpRS-yUE56w4J*siCKzQTkqcEw1xVY3tezi>U>^dE-F<;+tO@_t$UBFsP*2ciOlFjcP;Op&jw^NNz5@B!8hdD zcxELmA=}lAV&fYnt5RHCuIA}n7I3&3c4+AFU?h^Mc zf4;NvUG(bl;9k(vXCkW?qYi6=LFve;aHLj~Kx#Y2V_JlNwb?ise|_bim>i57z8G=L zbP1fZA81fKUpJhD>J&jF)uK{kw{msSYO|Yj!5vla-@z#kJ^6dV7@ANoCTl``BZLjxuYEBBr z8k!6q7gCogHTir6h?Ry~6>|vz2#4!$J7lM|pwA5)q&%P0BKHN{cmJ@vBQ- zeQ)q4J-JoPfAXl7W07uN3_3DvZ@){Y9^Z0tIBgI{2MTxhj(D1Ce~W4T%^(zqC*dFc z^48x%R^>bqx;bNN=*3z8U9B;t^L_Y^fpYk9Z|cvx-PRqiveu1E^+f-C_6BiTIK}$3f7V%8l<l4a1oYX9;cS?lz*8K^$t=-a1nOEaF$o+pcs057^cXd9d1Y+`z`wn= zkj=_csg3jJ-U0p;nNVL9X{!AJ+jXj)lLUZtXoPyT(Y-E%(bx1KsgP}Y9w2?mO1n!i zU3<)%pH*csiOx4QoPU8A%--s}{l2LoL#f=@l>_mS#C?Shabh}U3bOQlK(q8$Gjd-W zgvh=32>45?J&HmKuEAm*nI6!GgM-FDr4L9LvRw2jf}~}Rbw&Og*AjoJ(fpfsBTa+* zX$f%>Qj<)~{|Tn0K1Bj6%dvx#+U@6?Df#7T%80PWRNT5Tz@dN4JczLxpto!|8d9D8 z?2VY&4sDYe0m{UkHkO<)nUhhQ>-CQA=V+4qf%jIP-2HNOJ-QZ0dmFH=NC{X6ZtRWL z5mb$2Ky`SQym=`Ur{CEh9Nh!1+Xv9c^;OSp*G;pr^bsK1G`mid>|d`_Mzvck$mmAdJ6BG>7Y$g^o? zazTW8^BTD#*zfUe4rXHBTE-J*8(A z4Hki4#M2^R*qqXSxzZu{YEzIL@pz@!>P-$SvSW5Y5t8e*F1maWSh45SA9mDXnj zQ6Df=jEVdiiU5erSJ(;YnVz(A%rkW5I}*>bxYVfYV7mi+?d(WG>+zkoz>rFs0VodU z*F#*o1msP&B_v~F;VBh)MRt00#9`rE+m0s4> za5DJvISo^4CzETHLEEqr#mY@4U&2HEfJQeoOP=XeE3M+=*Zm`%`ptJCAxP1V%xGYs zir^(&W6*{k_UEvmlD*`fRo^)^IH2-y?ReOb$zZvIC zbip78C8Y;uDF(a6@E8RO&^~d^f1LG2llL!^acgRc?N#b|MHHf>c6&S(`tQ4Ywkd;d zqojcL%%=J3W`ZJ1C3sc?rFa+xKSH;2_7YDGH(7W@p~0_M zY3l(Xhe_)rDp&ly<1tP7c&!n-QaM}ouu96&2!%g!;S$L4;{SIY>M!7nv%uV4_&?=m zZ?&INP=q`{&1vv^4j!Ywc5aK*GVeBd#xH;Hi{ZOHQ@PXv5!Qr=VX5l4dqP7z+ad@a z*6t1o(&>{7(rZ+>LBCqs)ASy;$G+fm-f!oHr~cWq*;;#5qD9< zxtx_s)JdiX>3wnz^G=_8vme??b=Jr#o%5e*%68N1tHHYEXF(vGY>$yB_zoM%jP+Zx z0~4{L763GW+c^&~7@BDJu#GlA{N_LX9kWzyDvw_E#+7-K=yN59+?Unb)VdQ`rbH`& zD}p;ufkFsC6-3d)@QqO7QH4Oj;xh8)01Uh+s zh4AIbvOZBiIKgBAW^AU0Imv@Hy3HUfGjBN7rO6atGy|94SVU#!dUMk+w_hHNuerCz z$AKU}Sc7^D!e*jQ!g~M+XqCNoj*gi*DaD2wlsKgTgEZKE6j62T40OoMBUkWzUsZA( zuzVE2XbetijxVRYBt--4M^{c3h;>L==Re2p5g>AmqtPDvYdj-~U#o^T{-Jwy<-wOk+<}5`KjrlkZTfCY-d}KS=K32+ zqM{YO$+Q?!ZA4#qk`bUew~kVfNEoXJq^Gf^)8e#C}^IM^?i#4z4y^ zbT1a{jj)7=?5y3B@RdImOGiL6?BaaIlMl+s&$zpxPqpSnT)qip8pJ2DG0p7PQYpLS z8e;$|x@@ILbSTTYx&^+@{rBL)x<)bTC2nYeKD~{utu?TmP8sE{Cx*6h?yrR{fwjJf zh7KD|oP2UocKM!UcLR2%SaIv{ns$M)0|EvwXSLn}O^WJf$BD#P)KAjM!A<+1r|1udB83!-|KX5I7+hneJIQ{cK)HyeYA{)?I)0^xK zDT((c_iK5o*42G6gCQc7tCaPD&lV6|gJ0Qxkw#LSnF!h5H7~NC3EZq<&NMd-+mpYA zl@TSei8KM%XWvwN+`4OSJL;#4f_`S)Lyb`}adK|J120Z2fp$sK8cb-$YP?gYJbx|j z511nIaVl<OTabIiXZ?~(}-5H4q0k68-VPr-tDyeLo(XG zS$qP;#$UlTuQ7OlP8^jM6TJkrIS7lC=;5vA@7hJ2kHSR8J#D3bRXSHNNFV53fMsb9&<%=D?~PJTC}eY< z$lQ8;l&$stv5AgerV!XcPWdmg^>|8(eA;J-o>8fuPOGOHcybC3~mt!MfP`ANggsv`P+Us+S6T3q1zzX=pl?f0x6R8GW`hDwklvTJU z9>j;_i$Y1JpK46sP>0mUGGljbc`V7s1R&f$G-(g$jV1JCVe&Y+iW!kR`4z91rEen= z(ICH$lHQ1rSa~JA=kc3*tS~S);|B|4E)|(DtI$J_TFRj%OET@?|9%`+UwluF7STh$ z*g$MzEY;~9WB4h7)kW0(@z9`S=-`l!nuJIz?*zJDu>YM_i}KD&BpmIKBOL%;7N%<3 z-VMvkGVa&588P`l*$ZlU&ldw41J7;iYAb>)euqJ46^?`SfQe%g-cy8rG+M+#>(f|i zy)&$Ejs}y{A&o#WuVj&e?uKQySVA*wDt12j=+G-7Co}(~&DoY}@>geV<$j9V6vRt) zP55*{e+zeriI!%?t89J%i$MU;<|F2$rsIr6Mj3^vs+fP6^S-2ELCPYB^;w!~LlLJF zSJtZE=fjQt5XhO1*Z=A5h8eT(-JviCMh0q(eec+{F{1j@t)ETYrGijZ@hIydUHKtQ z6G40ASWS?!dUnKaa5&B-&@0?tF;6I^z*%m%Tc?0Qic z1;kiCr!U{*gQYo6yIUly}ew12Pu1G(W{=$$Cjtgw;(vY zOLXeLaE*ib@z{I3XD^R=H@-$>H|a_NWWL*zsc?q^tSOljQ~YP*fEm!RSHXIrx{G6( zc_B@{7m`#E)E)|N2U*r6wJ(e_&<0d;KW0k~yHZv?Mqo;&i?b2a`yWcI>a1<& zIZmZ5LIO1L`9EF24XwPwkXPX6nOUUf=%pWjUx@V3g6!(R1hG?0?s)0*^V5IOxbF-9 z!Z!2^w)NV*&lJ!;*$LCOVruO2S~SQiACjD_SsNA~upg0m)^7s7wlYU<8sMkQk_EsW z6K{tuRh}I;_bYvtJN&djuPn9WL5(~ceO50nqD@G@>Il&O zwuQl3uF)XdNJn+AFl;w<&`rc}!z_AiiVGc6HM4~Cs4P&RMk6y?Te+rw$HA99V?qn> z@Z=IIgi^Ps;oI${vsBTe%J4m(0+JZ2T^qiBwx?FSnB;(5MH%lxUnvkMU@Kb{h#MeHV|OGzipVG3 zbABH0=L#T1G`HS|YLf9;V`bfUMM-I= zK-?Tg=}~!B?tplwR|93^{08u(3avWdTb5A zZLQ+sOVyY2|5}LF)h0=V9`ETO)dsZ8IHN)1vCvIt?nb`aiqeIGYez&h7HC$Cd8DX5uUe1ulO|(Zf(W{9r+` z3v>{|LT|h|`oZr**Z!A1Uu8?XVhLGOj_`YVp zjL$|E!^Gp1stkEh_KRpC{mu3n+M@DBRS6{`-7$Xl+dk=kG=zqe3g@NA@q zzje(jXboW0Idnu=IQNlD$?o%$2l>8GeY$LLH9I)CO9X3{P|c*ckOg{`O%ZOmCBOi3 zYLZAwHMGK=GesH!nYmeW>RBNDnKm zvMAf%O8!f9bZ-e3noUqcggvkePvx*W_nsC3_0bMA88E#<!|rp@zbuzH$s{-_T8KR-noZSYQ6DyE2)|> zb-|)EdKLdj>%&EcJ+UwI*1NL6#qTH^BK_eFiS2HYSWqI@+ssd{J#W0WJj0{BZJpI}nN(~+t;5DZmtUpua+zT93X=Wm6A0IJsM3D&qS8o_XO39! zOlpmfw7U5TGF2oS8ly2IieTxjUK#s|Sj^_2ITaYlXD{nIw&z5%U`C?Pv2w1TvylNXAPxMA%G}P*z}1ws zNLWa3~R3+R&;Y^IN(fp)6 z86XqmM(!-0F^Ng_6o1T0F9f2d?3LxCzJ*th7hPfwQec3ajo1C{eP5}N31nu&i#G8mFURV~2y<%H)@YuK99=F# zmba1wkl3P94pZmxuI|BzO(wp=HxZ+yr`kH=T}*d_1mU^W&e#3wZb31ew+!(h&uP3G zszxs71{>*oN7AM&)L61G<1Yq2cIEx1!l>S`3H-i|HwJ47fnBQ4eI*LPdv0eJ=V+@F z+?StYa_xf~8C5z4!sK%?u0ua!Te4rO8i)#StR^LU{+uFufUx}Gzx>uB0(zS4+tea0=8X5;D)D3_g;c&ITE z;sD{Cu0!%8f*}M{aUnKiRf7m61%!9EmvX0$V+zdfp!XrTh?CQNJEGvp%JOh@uw{!& zG5F7Zf{|*Dt`92tZ>$FJ{Ds2ghm%1=P5t<%4wiu+oI9BJnOl}=IELlfO3}uKtf$)^ z#l3%}r(Qyg zAI9TdY)M}nu5a(lqXlfGbp(2r=#Oyj^)_Ms@oUuO;^a3-iqu%5xOpHw>mQa+7=+Ef zUwkDqOe90!OUWFYZcon?B>-7tRk3K@Z=Eu+$%--Ke|myrRxR_O;)vEb|}0BSuzpT^9F+yfDY?z&Xy`vi!z5CCbr%&@7-e0tT*$D(qKB{4H*RS3R(ICSaG;bUsKzkI zR8o}yCDr&RWk@vAmjS#FbfH%}C-e*OTS-=QK;@;%{MWiR(r&s=o`nW8O+ZRK`L!y# zhZj{ZSJm)){Y|`Lky*(wbqy}uw|Lw1xJzHl2OcTwEy7|!sn_i>;4-6Oo8~v4b=s|7&0zV-Cp~3gc z!;r0(Si%N&fRj#n4Ou5CqJ4xOOu}4RDRDb-Ey7gTSCbLhkp#d3>%``TTI5Q)5@X47 z$p81MUVGk&uc+4nWvKdQ#L8A*HCHLIn50^5E)+swxX0GChz+l#eU2^(z%?NHuL^r_ zxC4(h0|wZQk?`vApzYKo>-MDk!+@Do&ovD;(~K z{nrP6lFi@W@O%k9?3=#FN0I@`sgo9Jmu%JjnOYi8#(n>FFW(8@CdHQml&{zSHbqev;1Hl9`1} zE6Mpmzk!6VOO`JJFCh{LI^c>-y(hDXj1E*co6ea}V!xw|Mo74!=UJ%rPvtS5mOpA- zCCKwB)8ocBd*9#^@<7x`3PCo~GsRw4w)W>rQbek#XPMD3ZjPO#;?Gaag35@lE)sD0 zf{I`cY9&otS3a8t`~L``5K`a^A`t1iGH7mkJQWdrqhCec+Y`Cs-2fUa+XI<7!Zkh3 zL*(uqJ(KA$5mVQRf~oXwf*Am;arD41^GNz)AdB*$Vm9fwasL9floE(g0&c zO1>q{EVppJhcIAJI8@H}A?U)h-?}l2qwJhMKj?Ptu>U0Rt*;wfDIDi|Jn$YuyDx0e z+5DG_He>P--kvn3O*5a2#q!c~G)hIFf`rSS>jUKX?lSc~^&2i4aox3qQZ@K-A?`To zeg(fLqxlj5RR&SPKu@8kDyx`@zD1;Ael>e&|%BsdhnzWzWeNFAHS6gY*-j)$FeewA^VGjS- z9=qI=jNS?C55}k>s7L8qIg31|h6syPMUBK7v(YT0(6SYUim2X%JoNt=BBB#RE>?;E-@63*?~KqPIW?L@hJGPfigL z22@jpT-QCHjKOseP!NZi0ESa3X7_Oi+Wa(ycvu7QddZLBv>vTVz@t(21nXTt7y(jw z+j*1jqq60KoNDQd^$=>mXdmCc{!gKSuLw=_CYbd`R!>t6O-|(X&Z@K8^t*8=Jc(A# zs4j+F6Su>rnPWKDV&X-s#*v1UO9gH_%R!+O65c`Q=0;2;GV<_uSZBQXT2eIPhf}(`ry# z(|WJI2|gk_;yKm}Y!$4LJUvvYget4gHbPZL=nk z9*B!}rdFH4m-la|!Y>lt+CZbNhO6eIy&_|9bT$egW3xYWUc@u^$055IkHSCoGikuo z5-4+eP^dc!rrKrcoj{9kUYV1Zx1%7@En)5|4(hE1)7G+7c?(?BH22qiwdwKNn_tRnRUyE*ofVvdQcgpHd z&I`$jMbgH~Toxe4P8|n#^~9%!NmnJdK7Igg&-&>jLOhVag#hub^iJ7_mYQdkDy7}-jxo zqLGSl%i6PO6Se2dXgj6SfBF}GpL%^XVVUeGe{2TJ&Zm!tp zQa=>^kRrKd;w~GNPV(WYN~`8PI7RWFD_rHbppx7Dr64B}SIFg{PP(t&Vt9aDt=J<4 zVrr8W*FaOjBLoeiXg1E5=;e6HT#*||POTkfs+2Q^>f(4-fUci z(m;$S6sI-5T4704pV!94d`Mf~Xsnxke>~+H8`*iP{Z+W0q#z1r?MUUss1i*%#S#;* zm7!CU=r2(TbJ%A^eG<(nV{aA*Wa$I+HVHSVwJi70N4;n~?`a|0 zriG5xC1P(zOxY;38q3CLb4P%m^|8T;X&r^!z2&2eMLr z`Rd@@ixfgR6I)#MSuJ9Nlx6eeCK)jvtjaHu1tqFLUrCBxm~XCA+5AUdCRP-~#BOPS z;Hv|zg#p}OG?kJlTTH!GK&k!m=i34vLf#Scr1k4H(6GF1Jnp}bEg zLc7cJwy+Ab6*4!eq|GNYo^AM?L{ zOSXIU*?;?OnV{CP-YA<1(Aa)J%niEyQrt(S-&=f~YwnjMw8zb|jfO7sLwhr!Z+t8N z;Ejjrc1FnIbue1#4NtS<8HKW{e-4M28hdh6AZT@wB3|?uB62UE)+CS~IH^}CzdK+7 ztXFY~KLXg>>d?**W&u1O-kU!>c~JEilH!49D)+n`^F;UxX+EBuh;^_VphQ>0u{bjK0ae zH>?XP(Ql`v1@QRCq@KURQq{fOIA>q3K%QbguKQ2!3BS%t^~42w#V5V-s}(V$VG7B; zC-Kw~Tqjn^EU?Gz^V-V00IsnMo8p38eZnEYUumTlTxcx0H;9x zQZ#K11ylPQJqW~0xwM5lj4OPh9%@E1Y0jl@a;vO}O*$1?6-)iQS0w>Zm_d z5XD~>Tny;3$)$$v!7KKV(tN4D7Q$@$XKzLyPml$_o=&1?djufKFxV;943IRI-t(iI zboGCS2rJ-wSP2uBeTmF0^?-#0iuI@YHQ4i9frtOAp^G?prXRsQWA3`}(bXo2Mj0t# zD>{PW3^_T0%#hc44(Q46umkwR<%G zDP_@Urz&LkL7&o#97X1z+Z@M!Le&qa{t64SR;||4sobs0rC0otR^YRp+eLjNPIdt?n^m=PoaGwzNBS7;s#X?8RZsxx@ zsE2?y7yUQ%a@drl`N_(%U#hD{o4)yth(4k&eXnT( zXO+EHTp~R00T5IQ$W^T=y){Si=n{ln25b8Xt+llp8B(rjoul-h_Ey}#7mP3| zNp@(+cb8Nk1vH=p<9dl3RAmvEf7Rhi0GOAf&RjS|sEBZdr;jBHkFQOf2b~#kV#k7> zQ*^YD7V7X8~b*iT7BSLiV z3AAtG&wIP}fVlpOsLlVHk$cVTb&T03R%AHPk~#Bb!SWYFBXjCl;K^wL4XY>N7~b-X ziih=n>(owWXq9mG$@Ha4?jOF_wxH3@uYhLQ#Q@-1A@jL2zp_%#2!p^vOM?DpJw~wR z<2(=#E`tHoFIe6D?)9fH-4ZB?dNwe*sBJ;oXCo7>-o9jmEeC=PE6BQYMP-*HMg_b&bP|cK?0~qB zUB(b?u2bz(KRrsTDP%jc0UV@b7N75>J$(ZANb3kDo>RNDZ_HvRF%F` zA9ZII89`3pq#RQNe}^8O=bRR1$>W)RAhc&yrSN2V*Rq=U!2MLFlPF11>Jk!&`8s#D zMcKMZoy`aZ@Anr-VAa7ak-Elkxvdnmiw^)|QVU~y%3}dR*ZS~e^=sUP?o#4o)vr~IEKNhUgZA)kgnA$lfeDl3 z9r%_f^(z+!pErlxLh7WYsnN{>Y8)iU$n z2bmIUx@v)Cg7EFq75%q-x;JgtiPWBfMqerJ6zLov1_S~?W$EEy4~gBugeZ;LH1P3@56!qBrsx@`L-SoN)uzVv~<41MGjV-?QIXE){`}UJ`ptZdd7OmEAA9(xUbpl2@@V!uS zV!=OyE=4&Js5<{G6XghBwyG-%GEn<6j@wy$>&VVC$%({b_FrZ@uxucL` zJX_9~mKes>v=qi=Ab5Z5;DAY|5;{Uk?6W77K%F28ouX7)*m`rk@}IGjJ>|>w7HOFq z1JTz4OpFU=*pG z;aTylw&I6+ZRd#6geG9s3Z7rWDThWWi!;!xnZVDy!CmJi-?{5Vm+~dsfM~~vn}APb zAf*wqms^?#PVHC}WFY#6XM<|*1$=UHP*TujReScvg^(!|$YGCr;)GbVL^Pn#(1RMQ z>k`U>mFMQfb_rx%KNNw$3~rdZZToGf%Xro^&q(Fh3C_0mx@C&)mJETP4}xgKc`uZn z`v5Qv{#s?Bp41Yq(ZwHU-0fg5?XDR7z8k)h$8zkF^->~Y7|HI&?H(gmVxVy}m_9Mp zONJu{Y)%}Aml1n1#Ep2 zbehHNF-f{&)Kc$oT%Sjz3FNh94k<+Vy#AL+yO+2<9q@*_P}rLjnB%m`zU@q(c@jGZ z;HcsmNJX!I|HLz8i>CZ}xRM%Np~J8-^J?9%x@M?J2%YVkNK4l_k0Sx#R^Z1CX=tr? zK^IUBJiiDW_)$TE{cA0g8;0JzE{qJr{NlP_egHk zK+&SE5$dxUhjKKwHNEM0YD%n!u<>{KaSZ0T_A~zSZI^fmQ3G}+nt1W%jzkhsr)#lu zk0ebW-u2Ts6o}GV%B*0W#gN+&K%I+K3+E!5DBqXzAqAx^{ECR>w>Ig^$QQ8NQbBHS zn8Z|P4$5oQ+G*X@X5iZXisymDyUk(s*>6Krh-+_#ScRI6N3tjem#-VD@<(UK<`yuT zKMO;}!!opBu08<;E>sX4q;F1=Q^#{Dwy;$+iHj|%Lxp6u$EGTiwft6l8@hi1J*Dq0 zVdh^v3w%)#4*RW7YNN}vR~ube0YDXECXepJplHbBkDR1W7?QRMDuWa`*T1g!r0xs? z=V2fv~JUv38RB`=eaq zP3M}s{cgB5X?3#T4W^lv#wdI+7$d{eXPSutkuN5|F?RHnTNOd{qky_rvWNOtUy?vK zrQYcvd4T2*zia-&sy<(-v(G`pIxZmFTS25H+bf|wWEkF6qM5|57oexB2j~gAK~BEt zlmH~?tonB-osHo0Mo`P1ORKxYoZWkqv;6UYTDUjz#-cx${E(EDpWSeB=5C=DUmP+A zoe{Z%8C;4uc6<=MP!nKm5W)v%>G`5xK$AlJ+sI_QmU7nZO8jv0*#cfF&j z$V(GTAp`aqCG$!bDhv|$HZOY&^(x-5QMtd?gavPblnzeQ5oFS>!__$Sj5>Sk&wDEHC`fdWCJn9q!;y@H6M57+#KI7*LRf zf)Txr36QKa4;Rl|`)#n|b+&7guW95go(8+*CbIbp$9qF+5oJ5(&<1SsES_OA#Z*M) zAXN#D39t?X8`l3&G1b7rr$X?wQrR2M5~89_ zf%+{H6<=hOXk0|G|1M{c_}q-4IZLO@swq;atd3EucmwNT!0a-H z!e;XU!*z(T&-pftJ1B0-St8}z2i$!po1^|mD*O=oWpqSDY%tqb;y3$+%E zsZ?x1;sYf1#|-|`O{3Y&0N%pHizU4C}@quh_QZyu^Q#I zfmKtJo)J3ST})=8`D}%67((D1o!R3Dr(+-5k>>ZOst@SdOSU_|o3#K{^!J!|!;V}B z(cG<0wALL*7YOc;La%kfl0=gTG2P$UergEMm30bTY}^WakKVY6uB6MDHh`WZAJ0^h zhL&;3ZPRkIUaw&Qk*zOs-}9zzXKcU6~Kv+I2Zl zY&rc~x5`EKF#)NcP08hRajxvBC+#8(rWFs%kQ!&vzYdkcb;GI6WUAy*&vr{4ngw)k z(+|u3XiEIewVk}h zG-R;KO&_1tc+d>BnMon%!%7B@z-#CUb;8dTM+(=d(o7O6r{!k4|5f>YPoGE|kn3~xJW(lIn?R>Fe~$O zra6rKm$i{>{H_hlWK$|gVa;`7tK?yvI+LN+LSf|IsYgoPhLrQeco0i{exZPO7#}sE zCbgJC!;3tJ3GBePkI)mm6uTbCZ90nqIOtN=hK{f zF0zZq&1>(roBwz%VL6W6880IsDZ*4?LVw`kBu>VTHv$6);>A91pHP=Femo2F?zbN_ z7HQfW&MCL_fOGM(23f=ry4w+g+uXny`Mxl4w|fPyu~SsJmt~QEVJJIsJ;1Rq=?!Ga z(mqO;Va*?k2j}SnTARb7d}F9zM)c^nng4UTTc`=*66l5+6%VZCQrI-RY@;oanrUKO#{g;X9KLZp_DYPM>~H4kW>xV8HS(m*+LRR;WOR~s31b_)hyip zSH~sds>;WQ|B>^L)u#PobX@q})Ex81{z`XyO+<|JSCV^WEhnNvYG1P(@xpOv84DaJ zmKUB#k30wEm>*bELv{}9^?Vv~s$H0jMXVk@o;^UH*JSOIOp&N!3yzAEn~w@4!_pEc z2P(6P9o?_k8{6~h#F~*{WXaBsf8$<+@Jx*eVUeU4GPklV{yavqGsxBGvWG>G5A{3 zG6V?sdAFSwv0ae6t4OQe@%ROFOqt^(f7AV@*+%tPPLaO)1J1#Z{b_aQ{aX7pmgCj4 z6?|`S1F5cEM32jVIh3k54EKY3(K8?Te}R8AEfNuAlO9KxG=nem274<)S9HYPON)lU z9ac_bR{>NZIAjXev*v~K!zXqbYX*!0?Lc79brVHT(yg-6wVjqee5OmaCyGGV05tGS zdnruGQu?qUlUNnWufsbgTybl@-`f_xHFeX%Rgw6IGc;NVTNut43u`!ztDW-0SyDwa zX8_mqRVW1;8U7Sbr|QT&`Nv)m(N->0G5gnEK?D0*mh{pdjE)9otiu+>sg$8WZZE=y zS~A1YSoUzXum6`13$RL9#QlK|e=+(Nd9x>~=>E3n=VXrI^QP=Jm9_7?a*%4s2DI~4 ziB;HS5Ht2FR6eXvvg!jmbyk!Cv1lG{q;YG*1q38g);$)Fv-qQ9^KiZUx-gBOYxoE~w{{?!al7?|5#grl z5++1oE712tnxBHZKNj#L9@~mpv6>1B&gvTjOe66)^Lzp(fmIfQDq|EN9;LakPR7C+ zj~ST=xaqaC?V^$00?W*y$=w@58t8hQChJ_tu-)26xB`cJsbsH4_b^p>D>UyixRzf& zo9R?05$z>{k9{)ww9&)c_L<=#AEYSjtc8eM5l$MMozig~)t8ljz^`CIzy;!X6k?l| zbH8wAD0CC4pkH1V1?tbvcDU6|K<-6C8q+N1q4 z{|(^Fj8nu2py?d7(vL$crCfdT!_VTkaLXAL zD2K(VNy7!nA^_j)jTh!w?^z)~j^d~r^84r{~TXa=4; z=iYqe0eZF9CusJ#_t=w{`gg_e`{N@nXh6q@S)F8;Bl#B9=hERr(AMiVOxSt36cOM6s-I+UjCM zU%Co$|0Pua2aBuZoPhAu=CPRvB+3V3#r!tR?Dn0U#AHVtl%Ro`ZN^5d0X(cRXnEB% z7?Z_tor>H>9O}^m*0?@zXBoxm`M(=KH1)mSpU-^nS5m#sFz1CrebH}c+^anzWk@+l z2Zu%KwYty=th@gK2h5JhiLcNFAm2VB<(KJQpg59XE6@;W3Dr z26|b$hYc1Lj9gFTx-TF0&3Aj0X7RTCToYMIe?MjA)NH)g8sq!)Z`8q!N#-j`olZ~k z_V6)TsZG_YLOFcS6YmJ_fw~&fkZn|mi@%QF&@cr^ ze>}2A>+SzJixWfy5lbcTgqyHYbfwq#(h8Z5=J)U^I7QAY=2$P_8p-KCvAFb}L2rz} zG)4K8EiJ_q+f&yEQyWEL_h_v9Y`)+bOdHffal7tJIq8xr-fV=>@L+pB%r8uVPL@!d zMMrB3nWJz$GH8R1M4KRdivX0!tiYboY&I;Y9eC#X)UGPX*PuVQE=Qur#~Ce@U5is; z^S22T>&TMngU4l)@^`=*(`*wVd{#~5*Qg1EN8YXEno}nP43tgice7p_7RMp$1RpQ` zUJ4ijupkt3-N^Npet*DU*NQ#aG}84wLrXf68@s69jwDi%Pivl^lP@$Bs07K%f4{xn z5iCSQ(1a`A-|Svu;0=?cp<3G)wM3H|gvXku{u(*t3v^S&X)O0>?O_6k`XtjLa1MOm zRw3&8K-8a){R3Zx0V(yt*kA=~aWs3qLsoC78qKM@S|(l8(s0%>F`dfQCg#S`tssZ} z{nh~f2->^`BWH>3-wKM9x-e$kqh!AchlN|BrO`sGvNC8?r2?>siszufg!q|*`?~rD z7&*&W`nLip<5L~QzoTjM1D~*ZbeRZzR6}vakotP8=4?G4e<3Y|_3*pIU=~zXVXeCo zM8=!e)t08^6h&b4kd+ktaxY2OI)?|9)BFwSwBgF1h^4uOBob}8M|1((I>v^X*HKPW z4<7_G1uj%VSr{C(+BD3qk6O(phFoTMu*V1xZ}sL6Fc%zP4OnqKuI!j1MzSu9U>ntr zLH+#g%*2oSH`-HOnA|@WA;Qu~_k+&$zQoGjKoQH=SmOB?dyeAY)nV5YM-WwuM;DUz z?XD-_T@}r*loNFku)wzKmO%t&RXK^UcGu)EFks-~-I7Ul)W|;PVxDAjl}s;d%`8LE zsxK7iBw*B~1(_9s{TWpX zLCU8z+LSqQ7H0agXXAfSXaz}D%fCL!J%}XMope3;Ce@I}(AEzY!zzHKgscDP9iRvt zxMTk=mMM%6H+!c+?qf#^`DclTb>wUYHrJA8FiEu0pcI#XsSCn=tO|C%v`y~_Q6|9o z?&Rn~zlM)+j;>;esGax?o&~V!((@#QxNF@oVf~&Q8?~Tp-^okJZ*|{O8t4dcoi#cxHabMrU+G3bQNhic*l5BdFwb(hc<*x(&$sj5no)pfWx|;2 zo2{p^8bnsB>NIxxsBqpD*Ih)9K~F-(m>#e$UPWmR%%@~{uVNn?uWUFxc+vQJ_-Skq z<1IVN^jpkg<_Cx;eXJx>+uf(Eq zq%or-FF2hZ6e*i&mr zOi<(u;m$QL5jwY>k`E$Q`ziPK{EbiDI&?{V~^I>{B(K)|5)pH z$sC9&Y~F)7$oQtE#f_U%>Sn z*3=$qD!T$M5UW|PQPDHLaB0O36IxgeEqb!&%4~4UJ^~8wQwDcEM>r2Dl%QdQzXcd};Q3SuRoFV1srr&;Q+@jH!#;Y%z2LS04|rDC}#nvtQH?+sNsjmfjUr z6(EcVb1y@@y~o&SsdA1R9;#+xN%PL8tkTQ`WacnH5|@S%LW|@CpE~q=qMfak<8u1k zf!@ERA)P84Y_{2}7+OYgoy_s}ATY@aQ1@-rUMA)(V$sxZvpO4Ft~TVlE|{w7(?Kbn zy$0~oUUQYei4cAZtbHsP27HM2#nwk@J3R&3D({Wd3%C?9pYb|XtC75*FxEv7(HY^J zjIy6+J_2YNJ2BPoo-6HI@$&xEc-Vy)x=dZ5W<;-tp#5QPpsr6u5S+>T{oeKswV7!ysQ=Lxe%U(+{6 zhuY={MUHyPqah1aW0d)9bfJf)={3pYZ()`an{l`}JY_0;a(3WH>Y!iaV>mG}Y0^p~?*`l+C1@!eppG|n*IlWM|arxUdSf6v#KnwNb z%-vcESfuph8In>)b0ZIj(;+E0xf9Ehv`4)`7wGGuBJLzVq#iX9RAQ_85Yx*^0>PJD zWb;W>SX*!0>p2$`xs@>K9en`fPn3=ZcJ9xbU8!$GrJqnm9|`vtsB zJ7MB*-*ei8AOE$s-D+4=pL zD@cG0Gu>7-pf~U#KPtTh%wM%I=`_tp<9yfg)^@7#!XBglN*o|`Wxu2>@*vepi{AGqgyrB4m>ZIBSHaYA7vr3p3i&EqlnHPTb-M5- zm7TLpXnP##0dl@qT@MRv_Nhz8Wy*H<-HPHiBV3XbMXTz8NxTpJ3?D__%?qhPmPHOn zQPp{lV*m_E@rJ8S8=M{;SEHLh7)R3Jq5^yalz)#yAb9B ze&(AZ@C6G3Hz2yZA>B^cNXdS3Csv>v6l_h3pRq;9?I%__p^pe>a+1^VPIC3mZCR!0 zMZ~V~9gg|Yeg6G`1WPGb3n`Sh#I_c0`g8?M7h<|OP#B?Lj6h9I$6+eA7Dv-ygPaLZ zweqRKg{5aBLI$9Ch5Pfm%=FU0M}gY~#LU#RN!hw{Ke?Pv?Z@~w8um2(fm^mUMt01L z(aR^DfoZ2#{`%Op5}F&>cW}0TH^w~A^sJGfdr1TtlW*WoTZ7bX>eh`jwuZracltrl zGkOi_^mcYN&0#jY_rzUwD}2Jjqqs)p1Dv=^)NWHt8juVWnh$kZ_Oy+ zAs)w69AsJQ7WF;S-=JRW78a)WPs()`z!El{HHa+Q>My6bcSc${rdC!wny+(_iJaz( zSAg;ek?uKKZl&xem7gj$%{lb#3`GYrgF7e4sPLrEY!d~8*c~28*w)(n*J$Fs7NdT- zF|1RD50406SNw$P>U@ywV#SGOM;2r9L#MPEosTNgHl1PJD8!Np?DHm7E) zezUa-ATAtOJKq0JkK;|IR#&nx{WtDapf2FG@fw(yU)x=70-v=`{n(&s`Wm36E(&I5 z;my;3itrz8l9A9%dSxx&>R#I+&|}~@yLju;;TIqQ^E>9vbu|WvdUe)YN?JUVre_)# z`7Ez)ceC<|X!78H;Es06o7lxKI_JzP`EthF68Zr*IC&7;4DJKLRYd;@l50@!xZ*du ztwHzo^>u;)BF&AaB$wk$7}l(wQ*aMuJgvNVY+vU}tzF43ouUSi{l9FQU5l#0@*9Cj zD2|?tb_1CWVA(pkk)@Y`Y?uig_n0C$d)3x(Lo_?^x8Sg`iHXx>LaRxUl}gP(Be&ec zKgrNRi{>G_mq338Mc}v-72ssE9~PbN@cxrr znOzpsj0@MyYJSc3^`DC$?0`1pHJ<_VAL*Lg;NW6A?wTqkg`91%pZ~Iex+? z_lxT-ta?de9=L<-6_@*Xi;@d}cGUms9|SH8YqDBnN!}j3Ch+bb4E3_EI7LNljN*0 z*Sus%Za>ng$B~+<=7HrQ53T87yhqAj`6GUt-ef7gUKr0)$!R$t#%NHE2{Ylzd;m|m zT3&o{gQNm(3PrUpti6j07)zl8xxeT;30 zRPr^xK`nVwCjE7R#@lW`X5o*uI`KRapE%WvIIgYhK226%+LGTk6si4HhT+XNXg3u^ zaReSi$ z5bMp}S0y?YPL0e)2$x3+rI*B2Zc+Fv7ViKAT63+i^Vc+Rj@g7}xL)11HoFXN z_emo=gzLf9UaiV*(y{;e{IaB_c}fC|c*FXsU@lkXW?F&QNMz?Ti!p93 z;{iD^L_+eT3F>CfzKO)0DWf6z)jgaQOVKGi6L$nIFRB=qi@o?ShDR`JUp=1j+z@Bk zp;W<5UI|0j3w6__@G`_8Tk@kiX4@Zv>zqHs7uPube6?Qf=p9V&2`0ehSzrcVgjpv$ z`Bdn(JR|2JkkABI!w)s0yXU*3ko?xsFR}Uzog=MDPxKV$z|V^qnq==>ft~gq`a4su zS7xJJI);9+jKE8g2Qjg$QEzQ0&w5D6pwn9@e;E@1eU+D;ux{a`Z%R*J8qhn}83w&` zuXo=LI=9>hNR6$yKd6wR1WvM#D$BEh74iUg#N*2yVpZIKE^VI`k-)IPCEd5hTPJTh&BiS`>27Nu}J1zdJ z1)Be0OqkMLfn*S5XnXxk_{ znkcQA6t6*ZR`aTc)N4{&oymitq4ACEo!ho>@%U+>*5Wal`a zZw?#8i0Azpfj7m~MP!MgY3v9E!3^St)&#?(_9Zr3bB#;?RjX35`YBN>EqPnyDykbxNn=dEYae3|pOfjytuW;!&_KEng7z-N!}X zy7?x_Cknz=x!qdb4d0_3@N5MyPdLbH2KtVb7?C^>LZ#z>C0&@|+z92}ixo@XlNj16 zEs^c1=jSHhy+=`^Ea8n-5(T;;BsFq?f9bjj?DkCSs8-%6{AtGS&z~XE+f;^zC%Sxm zb5hL!z}@rtk0AiczALhom4UiljR?nd23K$J-fHhRXgPD{fE<=UNjb3pwi5j_F4p1j z1x`7^4gC5%;n?hBL)~Zbjn*VoVlT!0*OhZh5@}RO=_ny0`<=g~`$ zs8kw;SHg1^v~l;DVn5Y?{ z4LeqKU7k=3kSVO1+7w3xX6$6uxT!~q3t9*644NJPf-EejTdN!Jq%IxffC zO(^+LVC?7*mzz*YDDV`I?n2g;xd9j}YlVDc5DQGaUFH_SXY3?3EN*we(x{rv5E}Un@W?4Yh_e6Lo zwW&n^h~{1u7CW-XwC!E7;GDK*dr6j~$0p|Sej zitp@C*2E5*w+E+IG^PAUuN(FJ2?r*!(ovy_X!-gx&XNMA)j5s@l1|xYwj0;1M?&TT zul2<8(4A;vBVUS=Gr?PKnT!#!&M^|<$&npr`MqN7GwUp-e@VbvYIier%?m2dq4>=I z5kDntv7jzjd3Ky777qIkJ{{J7iP{76ZMgEE1`{O-Q-nzUz{65G7}{S5r{;6Q4+MCL zEv)&9LXtixgxc%5dxO!{8d|j7%8V-4`Luh*G-GzRprE^KgB@?o3mPeqnhh6snZ3Hv zY4C%6ZS+U0O$WdH4R5I4@~{rJG*<;bK@yvyrpa9NMIQt#)($ak)F!@uz$(|FyH{(pbyAn7|60A);O?q49eU+V&vf zE(WP>R~V{Y6I!4@D~gxJ`>g3*oUM<*h7YgcE68eLjiNc#wj+XLa*gF%v!)n=$B)u4 z!ULhu=;&c#D7lZ02zm8ct(06rrx0#(AE2zsroY*fx9)XH``JO<^tu@VLbL#2#SQVl zjXj6xUyWH*>`)Pp>~G+BT4-Q$wB2V!9i`SFWu!BNB^Hioc@>{#zwAKTY2+$&oBe?E zJ37uy5)o(3EK@i|>FXI+kKn@T+xh~zL1rX&gVxE?NEfdZMBw%416bI*&ObsE={zrl zkk~n&kH#FY-IC||?0i(+D*vJ4xQk5jw#(6BM<0eY#(u&u3#{VVSKv$swAEWtz=s+6 z%9Aq@um0NA0W)mgw%iM1w=!*;rt`pYM2J;||i6$+iuC#mlHB&t`5e z`mQ1pJh7}NJDruS6G+~+ea;loQ?fxk2A(`HaE86!Djk6!yugHK^9;Zb@sD>V*p{M{ zlWpy_Gv&tWrkLu_MBDci|K8m?Id1COBMtZW6UnPc(d7oBkkVD?TcT5!LWH~==e73e7j`CRU z6yN=+2g+}vJr{yx9+{t)PN((VB4!<@V^NN9QX?YKKaUkB(D6tawG`#WAE_k^DjEm54?*ZC^fSw&9ikcwX_I6i!#Ae)`&h*4fQm#|7QzS$l zFxa=yNU=`!$8%1mffs{|NYL$d0`wUb*Z*zF1|?+pU^Ht52%aL#iCVlnrjcGT$5G1j zuHT**7)I+=N)DQFXc*hb_tPuzTiZ)9Vw14JmbNH*`2aPFuqlfa_7 zyOO}Ii{R%KOt1{iK_5xK2r0ap$mwn{vasSo-$?F`u5z#+k*d zn~yg`kE|`quC|W|2V+eR0f@*OIMw=3lnlG@??169|9PrquC_qN9!X7Ac*~v{*_3~ zAqn@Cu*$P9n<9u5IHq{;B9b+6tDX|Ox3vvWB5uN*`7s9>vB|cNlh9Nkb`Hh zn~uY;K#c-heT!!FGbp?P8AoBMY|ZPxeV{ugW)^i&0=_X^1lUaL2s8!i6W9B?V{{gX zvOe@$k?7D<+~;{W`wdj=olnZl3S3a`2$mM_ohg(n-4Isfd|<5*zl7)geA#)Z7;HNn zO?*>PRTF?j-JgI!OTG)^JN$(fGHDNP3&z~>~49w)wqokxgbcoex?v2_$` z1151c?PBV~J7bA5N1X{YQ2dXETxG7%opiL=Y-`eAI){tnzbAb9g@hOrmSs~7)fq`% zzd*#C%_I*Xly4mlKxv>$%E^8sof~x)CXP`ZOw?X0Dl%A5>VJ0XahcGtP4IpDb}9iC zC_AIoP3@Un_@DrTI@9)_ac@U{Y<<$EtdN|E15x+u599YVN-$o+zIzb$(3Av}Z~tWA zFZO?#p2?{xkw?Va{q7z@+3+|7XY#c0@n--1fr7!K6tf>+p^N=iT>=68*9mL+($Ekc z{LoU2{Vk>VJy}>M=KzGKwus9*AyPOIF5KkSouav7tI?%=*f1Udc^KMjO3!A3F3*dJ+2c zqeNEjd4ctigut?MRty2{&tQ)b{{oo@^utI<3E}Wl!FI^K{5MgRiy!sDFJ!6`lq2YL z)^w$0VyxT8R!!X2%O#M7=zuLrnPiLNwYc{f@UtN5$JonXJ4hH#?0Nku^!kvvDi@OcG|W+fQv z48)rHKb0}?xzj4hTU>D?T>(KAJbF+A2E%4U|L?jO?^%n5Q9*v6{<$ZHOdYo?ngrqR z073xIEIMe!8NX6nbf@)A*01(PI7%ZVZu5b0Qo|J=NANB94Lj{!(2}m;77Osu?F_Lr zN^%;@c$OxJ50r@TJQ|aPxNE7+qw zU12@FI50_m35b8DvZdU3;y4>(^V15+oh}u0Ag&!lQP^sP^!;DZ@(uSCOi@DqC%@Lw z<=}R#ZE)dh4~ITUEwGKqDrls3Ea*HOfZP!_88*n> z0>uAX(Dy>LP@(Uvxor^3Uv^$TemC6HgrtM^zV_To>U{#|W9X*B%makBsw83PP&Z_U zfK2}YdEcNfBr@r4PRxJqn>;r(;`mkdBE5FZ26ihRU1 zv10xNkZg?9&mJy4#|hhz`XD!~n7);b?wAC&TM3C~9FB7T;BCXJ^ydCI820?>nUUMf z(eXS@$SD})$;vwQxdBR2uWICt{j4CW{A`3^q&w7uatLicDL^=GVJ#VrZAGrnvXh0VRk9 zGYKGp1HiP&BL~JTfJMWgaCQ)gfJRiVMr&P^!FzBL+>&XQW>KD&izg#Ut$7LB4YYG? z6B;GWTe+Htv_Sjc5P7k2C(a`xa%?*UmHtBWD7>#KUSGW4HP;?ZS|%z(6HzKBLvzce zRJU~c>&H;^nRW0&Xr?bq`1U^jmi-@63%3+-oq>aC(O5*%q{|mnwvh5mLu4~FH8391 z?)fQpPy4b#3TOLdS70tU#=x0%QNCpJG?z~=TJE@Ge@=GE*rgULH>?390Z^dmhD;Fu zV6f@#+$`~qtbSx*?%lrkrbgUeBCP=bO2_`Ah2zgLuko;pi2;O{jqlfVO|1+rnxCm8 zGA3J{bffd^t3IsgvSZFxzaw`ZvW3>)q4#f!dNK>=*#n1mRyfjfZ$9yWfDTqrP+HW9LJ<;i>roXD=5G z8J11oeHVIl#E7ZF)gj_fKR>MvOycoW6n2#KI==ujEO&Dg4dZ;Dwu?>mp0Gq$w5Nb= zS!#VlN0rlEx|LaquOhR2j;+ji)cCc=YZ5ci5uB&r9tw3@7-QS~Gak;B8UBeF9uydk zDZCc~kpi{yT=*>%XSR_~PCG-1uSb4dqE1UlF%2PlmxiDoTH|A<%sR0_wRp$cGEJQ2 zw;i%I<_HJB4!P=gJ5{)#vkR)0CZu#`B`G59IILS4i!_6I|IT+5nY|PUA{>SavES5A zHMG+vvCvi0P{=8_Ck?lM6$blNJ@(6rn^5Izzk7xdiLb;KXV}DA*MU$ir%MB&xSjkHQwa5S?^$BLqlKD=YOERb>CdO+ZoHs3TG$Pq_5L+PN%T zrDuRJk-pyzLo>~nO^&E@sJ>Xg6S=u?3M|iD+)1#fx|JFy|cl`<@S3L#f-Qw|4Ebwa z8JVIDaiMr{UH=%#5tqtbk9keHjZR4?&9%wpv+Soaxogq(kbrKGERygzn%ud6y%Qt2 z4!nvI@ZwVX1ze&}SBpM=EY@!4Q%6ABMVCMv)m8kQ+O*C9Y~D?~-E6$oGfMaHrwJBl z>aE&p)eZ)*o;Q-z)9Bg6XHJ#@C^wLO`SMmr-D^+c3 zxVE$+=7^kSYxk*jkdNjpP_Yl{Qk{6=IlZ@cv{BF=LI`Q*?$HNAJkQDc3^CiJ)tJ7= zmq&q5yQ_@Dboz>F6`vqhoJv*>K&rh+gu(^{cv78kb8Nw(8SL$zHO|m3jwRk0cddyS zH%S|*ELM=C@iadzzHTOU-Xag1KXZH?Avcbs{{4<`8z0&DB|IT;NLW<%L@ul;qmQbq zPooTrj9*p?gG<~Pc>0z{QK*H799hfJY#wJH8vOA5bDt?}QUY1sQz+!hH(tpd8+=+x zWbJoQo=OLZH#PC6RDv<_0IMI%9}7rbBc*Mr?dAlo0(EpyV5qF+Zb#((FbgqU`G?D4 zM=@intorqy1nUd3F!b7uk>t%8ti6>PaJH$!W1FUd*8p@D^Rc6wdS%gU0y3ZR(#hOu zv`DUa>jl@Vevy&CykNHJrBWA9ljY@I*aUHfb$wnl;u>$fLxA3Do)U@YUp4r^?6BfcB{RmX5jG@#K!j7ceIQxG&@4u(2`4mvq z8W~;#2ZYRX8nOa1$T(POFA6+llAqQmpRMqjfy7Q<(jPM3mme^R005*407MsQ4K|-G zAC~C>SsDP+S$5M2QGrAC^=6isvyun#cDSHgTO~~eIFla$?&?e(IyL1Dd4{iKUr%WO zpis!=D8ftm#BRF0^?HZH@6!jNAuwvyA3x5B{)BEg>v%%wNwg8Ltt1iQMjsyRyMhTE z2@u6Nx@K01=#McReFC|MN4HE({M|(H*%mwx89?$O3M;=r`#Tr4spBLJ8PS}%_tXJh z!gjiz_g?Z;0Bq%ydHSJ7L=Q%R!BY>DR|IgP=F1S%rVRU?=9Kq-IkA;l^(D4h+95TX z6@&!ZoAHjT7$A7jLTVh7R$jFCjLWh{Ml!Mro`l?^lm{MDW#I|!=Q4iL2PMW;q=}d5 zdoA9-${To?oo|Pdr$KYcH*CY1aaaPQ$J}KArr$QFbw&x7>DXdUj*L`_X?ce)u{7`F z4E>NHYBdIybqT%n2i$><2yI=iwsRt}m=2fBGGVgMA);grExl7nNrJe7_l9I|`m~-P zt;fCl=so;ueLmp82I)FVxC|UlD^cr&?5?z1GxiAro0Cv%VS#>4YnHH0@ErScZPUc} z9c!Gu^PMFIE$g4WW?frq3>oXbQZqg%{Uw?A%Z$ozH1%(xuHHp=Vw>UpFx}(P1>L7NgTEnnhL`-9F@IPNnal>efxjN({?*L zUjk)$?U~5KJy-UdOeE7|&)B9^XlM;<;vWEa0MeL4EDs#*-jlF9~-C<|I8rd;e0gZ!CUgGb$>}AB~gQ z5^7*p3WKANvCw(;K+*Izgc*L-&;}&%$E##}_aRonb3!ajQ^C3r97Bty;xdLSIzV3u^zu=)_I8tz)88`kjyq}?eB(k3Jm8U?DAj3veHeV#d=xFNNy zL?#v{OUP~uhv7Hh)6?9N{?XSZg02yw6BbU0t{;`E6{-xo7csjJECY_^5QYAHlM(a3LgUq_ z`;)KK@@YpRIo|??NbWSM76cR~J@P)4hH2IMm{fQOqji;>=fwGvhwi?u%TWD2U=qwK zlUsH;i_Nl{ZN$njc?d(C4e*{nq=C8r*#RWB#R&fvPtXHL*I+$7gHFg)$)%w6$BX81 z&ImSjD3&wCwevF$srH8`>S5bAj91vNbfTJ&L~B3EWBc(6V0jf;fL>hs&9k#25!7bS zgD3bC!Q*3t>2-a)2?Iy{k+K8UFvR=<%sgxbNwsK)gb>+U^UJx^<8{C@RYmz87cM-j z-YT>j3F=+PPi9Hu>yK6GBcUXFGGmokX+>)rez1TiG3tNo6mDnj+;0sJBOdzaLj#Ns zU!3R>RODAZffDx+Pw&P#-Hv#EZy=3Mi`Kt#RVe$?mwT>Z$@N#)FI8|@H0sy6OSQUo z9`l6TATEML$CD0}8bmMQBoK!4t#9@f+$!-$6`%IUv=PTZQ|rleN; z2q{`;f8j?i?-p|De;Q*Jwg0&IEGlFe-eZEf~K z#3Bvn(CbWLE9JwaVh;qeP_UZbiiw3rFIO+dZ_axXHeY3M9Y@}QC{!n(bR(3~Gmnta znSc%0iy|7W2oGAs*{~TiR>g_lv||>OVwFUlnYLQ5n?;!%SvksOed*~bzjT*zNL?ijI>P+Soz4G+creA_Xjhe zvRwR~dWR6&leT{cM zVe=+JcaB&|ILQXXr(eWOT#u*HMPtcDQuOqq7X|gvbOakJF3~Y|r&FA)%q50o8->yG z`pV6v80lo-aZ!;yOE<2eN0x^wgH z++7lQco%t+R)tly#Aool+>rx^xbX)mR@>ojnL0()$Fywa&U9_}|40455UGaNliUG7 z7;zzdnYaBZ^wE=_f)JJHVx51@&*5=OF=XO5;wJ<%V^36I!xtSBZzNLBPztqKl=83xs zk-kc{O8twzoDc`?i>??|CIBt1e$L=x@t`Cq7ynfRaQ|`{%AiwCojao;i0|2nJH8o+lgQRWG&dA2I0L`!_Ldw0^zJ~wuTCl7toBH z6ooeRD&;KqtR6xV1M#J3%32ve(VSu>p(fd=W|mR93Zp@hB=#IvNplVt$y`HG7vten`$v4bWLZSzY=(p7U!TGn5R^U)3&KuF*PpKgZGNU<{c$k*V1; zWjY>0`}KZ4e7&2O(AU?~bj=A9HgNm`7sJWfig0*{UvXkc95PeG#4-fz8zM_;({Nq7 z??c7@_e%xPRfbnomJG?Np(;V3exVIHYVqyJZ33ZCfk4S7z_&pIW;K`Kr~ z`k%?njGZX_k7$c2`Z83?7&qF^i+AxD{>&&J7E1(W^Me|D8%bj@^3w7LMBK`dl6-wcbNd9vdUUO43ENpUL#O^B4JFyE;d!6zxufu z)5u%dq$4IE|Bf%9t9je6DYXdCtPy#{xKLt!#51v`DWtuLbq^^8V(KO6|5lbvJP+cE zaz;vq)f42**>@PG?btV^4Qgib=?0G?$@sotMMp=y#kAFi!3h}#MW~$tF1hj#I4QI5rTLE^lJGnu^pVjL4p=?MXxYACrLi~I zUn_Yv*G@Qz_1k|YfJt6!`kbNC}ac6IqYOUKgRI!>(8Q;!@yE` zu~UY&^-#(4B9Z|nt|1yLuU{8TfG`Pb?;eQkRxjUV>rW7-23xX2Z{#PEQxa~~g7l#^o4!2ml;ua%}X1ic?O|X)% z?t^96L`OC()@xV6AU}D5-RdM)Es>AMq8!4j%TsCcH{@bgt+j zSbJbSz=+4cUrQHX5FKSX)6N%=NlrPbj@u0Tjo$zu=Qy29v|wL6orIQpeznHa2hvrT zUg}5>ij`3$fx3Clz|>%>yHK7SY+!3HO(W8V-=YwE%sldFdU- zNtrGRk!UHYHB_<~Wl%jI%ud}ao&X6oJQik6I8ydyVJYwPn~0603DIyM?RKxT+@U)+ z8oO0Qo~=#fS$kG{43L}j7btq?K603XD@U!=MG)JObJa09!NT|0h8iFlzI zh4nQOkdz$s^Xh`9gHLEZ^*`%IFgZ=jlk)Y2qM*4L7^6P`G`gIAGCf=N z4|(Sgk|EHQv)L`wXVM;qRIN#Za9IFSF_+$Tx=yI)Bb3@8esJ=^#4_xW2uP;LZ?d*^ zr_lgqGFHLYWc3Q~@oHY>x)A=~*!T9egV)S83X2LBryg}d2SP$_tMxFbKST5`xvUWI zTFxLc-Y9Dk)JAGdZH}BOc-^CaIw&`bZPOZqWifU9B8RnpGUO2g(*E9w8Q4HalaM}a zXJN>B|ComE@O%R`VuT-smDln&o749eDuA zwt|NQ|M`SW>F`fyf=FSVRtqBQIzg)b+>hy_LKQk#Ov-oeOWMSl!`E)b@$a$@)9=jY zC;<{R_-XGIe-!q6HMfBUQZ@WTc0PaGixG8fV@q;~lB-mnqktFT6j_*b4Fgs0oJ3`h z2+Tz5P}2!S)(gP__pRUD9b8}C{(N=@6M=6*e$W{GSQzzVsZKgZi4X<7 zVyo^NOAq!s)NZcB80`y+$smLP5?6iaE4m$+#dwS6weVa?E=sRCfSKTMr!8O+qrh}* zSYOlv6PbLPhryRyN*5KLK3mkB)g1Bo|5eu|0D};BE%5oCC1)_$LQAg_d{{Ua3)mKP zoTmjX2OGogdQJ&pyi?R`N>S|KHIHDw8KtB3E9XMYH1Bs7FS~cfy*WMLZ5%-eLqh42 zgcHJ#9}~fZSlrIg!L-s=+;JeW3ehr)20b7bpKI^-3v>S{1hjk@|3FqY41pNCx2g#m;M2?veg0MeYY~S|AA|@> zglXY3pXyV>l_(68j38W#QK2U2Hg0pwk?HbU}t=TpjYA{ib0EK~s?__T)d-W)URu z8Q7PaBUZ*atb6UScyio7fNse-MPXJ=Ybi)zPmBrS&5W-yKxT8nD~SMZHmfxzZ5@nS zKB6rtiat2Z@7rj#vZl1NFl|SuY{pnE?(+)xlyN-l<`z0Tk$_o9ehPiiM;{k~!1aZ0 zgP@k@izH6#5De3y$!OBIvmEm<`WL?Q-04Dx-9U#VXWRtJf%FkE3r6hQ&TT{Y@00>P~hX2{+6ly(#k2TuhCvEh#QTY0XhN zcl$k$8;mAoy)X`~H0UbB6;EzPiZ^46@>NN@zOf^s?n>-`!jOU}2Wh->EF2#eb1I#@ zW`@WshX+>*_&~JtDdu`{stIk&UT;;-8d`6P5TY;^$mkC7D^xN2)6Ya-kCsSKCaUp3 ze0LEfn>w<*lROW~@sk1$oXqpwV-F>W_SeYJRY0E$xHHj7Ix9<~3xzusrR_>)le_td z4yVe6XVJisfNQQ$+2gE4nTPfVu4?|R+LSp@Q`S!}y_^|(ku`8IzM2bp4K}Spri+bg zx|Lx^(A`$~f^*oDZ3`7Q0~ho>-5b>?6k_}-N~Q2jtzHrlhK&ZC(bwvgFx7?bj$ZmV z<=|oyVkVEj0WM7N&eSVi$%AaiY8dVZqzW+Pr9v11{~n}3*|V~KF>K@}u1k;k^Y}?A zqG+_owrzu#~M{xK_4A} zGRgy?N@t*=nFV=y3+7@yakrUi-JC%Rn2X_!X=L@L(6>mafKvx7OPYbF^SOq`Yl%i| zoy$80ybYC3kJGjjBy!aWrxKa-s(1+ORB@QeGB(9}=XpBJA>>mvlkroq6u-g5eZbh7 z_lc&H+3HX=g$=4#{Ho!y)@w;Jjt3T|p4}oU3Z9flVER)y~;at#_umPc5a&MslkS8$ECVlvN zonFrubA>PalG4SIv&mRtvkNhWTC^ZzRi=qcP7_OXlrym-7Oba&CEQloKXzUYo|sc4 zXBqHLR*w+zccLfGezxVl=Z(1+R%nASGN)%FpK(=>O11Qu+V32bwlQ|?mZnP9{j2>~ zbiiGoT?CtFlD^ys^5Qvpw}rIoaxP?)Y*>nJpI!+ftoy)$=il9!LUNAD2Gx?c2jgK( z#)=k=&IvX?FPnsmcD;LmxJIWOIEEI@ zFH_CwPkD|+Q<7NRS>ti8G~L0ftK~DADzNDgX%yJ&!A3++XrZ*zwndkYv2J-;ft! zn5#ciYjI6lU=7lN^%KuE8QTf*M$-LTASvl%hnJ#kj5SGbe_uWqMF-;v(mdYHD(d{h zLHTyUio9PtM2M+cdoy&9``Hp`xA3VBy8lp9&AKWI%}jB+v(pi|qo5DB-|Xm(F&xYj zGZJQ_N%16bU2ucyc>y0hMSOc_{%EP#N z2KWPDEu;}ynsX@^%!|^`nI_Gm4?v6ehYmR1c81TNf7%k0Fd-8~7PGP1S6UocsjoWG zLNSLzL zH*uzcu~GLrIaqd#Zk|^dEBnk;i8q?mQ(#J2ukm;;IK)3cV& zmK7Qy5(1D@xMGL88f0DrSC9mym&Bv)H*$i^<3kmi(Tn)U4TzW&WJr!8hEBV31p&)1 zF!~t0vA5KQyg-tgp{Gmt6NMQDycvL6=}y6%_y<*Y&3d}y_~E)Y?^5Uc3?$&k{QnpY zlL#@_f#Og1_6n-$D#->fL6cKOUtnDfxjk+A>YJTxm`K1>k}7~aALVD{Bm^35#w6?| z`Jn|+W9&41EL>*W!lLu5Yg$*Cl6A0Ttms!)>=U+%?1Q>}X(>21M?%p|BOeZf9t;f? zH`^CrJ%ABKRVt?!bn00tpvY`rzc3I}SiNz7Y8F!%MnYS+S%izRsOFQSv-$ssMCp}6 zF{z-;VA!H;(SLv7#g`lh+*{g6%@v0(&DsO3xl)94-SxkRm% zeKB0Dy}oj+0;??uwU7%AAj?}~kykv&xJ^ylgtvb2=R+K;XSYma%F0sP-B|;@Bca|& z+A9vLj$vbCGHW%@2M^UwkKak*$IVw6j|9Ev#<8hgMDYBpEyEBqX&Ma6AVU&cI#gaA+2vky-=ao#t}5_O8!}rSbIJvrjuOKY3!FjNDYP0^p8{mwCDq znDW=&3vT)n#t7he0Q3D~?(8u^zCd0SEOrRzmy+*eFmXKIWcIE!P*HCwp%JzByO_!w4j+8ZVXdIfT?p6Yff&c_^#{%=$~{9IaR{b zDrG7I2*GV@R*P|gN1=(UQA&H#A&4RdnlPur+?z&kBqnx0NSqYL720qOFMGg2jse8F zKdxbbUW4lV^c=rz&*=UJAK$j7n#z`WBTidXaEoPDr|qoE;a9Ua8DFV{;BZ07K7-m zO#hYmwaLi`VY9aU^ix!dH0pSuMKoaj7w%N?!H(ZW#eQujgLWQQaP|hiGm1_*k!)2?8mdI078`s%-RY zcSVZ%UXdc}Z02;LnidWMmwC^7-5hVp9VZ-MO{=Gj);WxUdo9pYOL$2jaG3VU3)7u= zMM_5dJ^-QyeGNPFbc+U+)>GPIZAIW`f0LAG>G?6a(t5kwW%@;*J)_Jw?!6)E4hH^l zxKBWJ|BOEiqVBLT1o037ar56;)Fl!>)FvlQo)^Gy?T*}#(zu;QI|)>I69F!l4*c_R ze7=W!eAw@SL-Pk~os*gN8(vKCsWrE0}W53bQPj{}5WE9-Und3xJ zkv<|~&vx$P{Cfw;L!;phi(46aeKih3(wdj-E14$T1d%^p)v3$GQC0q^#-w3jmAXro zR_+u|eAr)a;^pA@0+O2?4p(1y;K;X+sN0+>jgFy}X!GWSH(l+`)i&2KCR z!t+ZWT)jSwH`IuYTT|7^0MuB^Kq=T&O3Or29g}5T5(bz}RvSeCRlS8uqs_%^Bq2so zm#<{5<|Zljkye$#3VLj$t8>rX!cc*3OTdUHa#wRj!y*~oV+CcFPlT56fq-+_3Yq9ADTV5M~?AL^1bfgWO;-huQ|)I|bd zGihJ1jW_?AH;cc6diD>D*d^#+IzHG!uS1i7o=`aSI3$xtC;tBmmeR#IfJ9?-leqv^ zlJh1ny!n2^c?^{rpJyZgUg(K~t0syHfr007Ls zPX898xsQXmpgr)_c>@AErl)Wxu05UvkxbCR0}#{@c|afh1*hqr5-ECBp<0ltC1u;ASg_Ti&ZkNMlrfpZmeKG)YVWER3n(QNk_4rkbJxafdtBftSo`F9Ah z^t##ETf5*2Jutd*K%J%QSacNI1suJAC>_&z8mu2qHUJUJN~%$gK`4+^F$NU{1HLU8 zt=OUv9aJ5SqfR=ax7CAJw70NDu=-V7<33tHZs?+QOQbYrs{o0jj#p{B4~1$|Lk(3G zT#89tY%dg!c1VtKtU4lu(PmkBTW$7tCoj3*OF_%M+lh~fGI{o%07^{1vvv{! zkm=BGCd%S?>0pcGbK#~lr1zU{=M(l+t#j4az|EDgq=+)m_2C6*B^%BXSAjfhG8X>` z{Jyv|R3mNV(SP0l9Lk|5LaB_t&e6V>?+$tISZ;4M?{{?UF&OL0qTiJM`yTF9g0%}D zIIj`)9`ODOU`KG2`(I*2SabbXfOe8gq#g!@UANe?s;qW7jsB z;5%)ge#1$Q7VZa-S`#KQwPm9qtybmElEfW>pfxFh=G$Q63@?eT#SxjfAc@+m%fA89 z^E4{&#$Sm$SxDmXbeLX^PZ31uophn6ShlZS+zA@2goS3fit|=^sBcyOUKO0NCKkMg z={S7~BVQ3JhSY>oKecL+VxJ_tSf9GB5v$-d)u;{h*ra8xY{LpL$2O01WzrqzFH!A` zXKa&#E&At3LD?+v2RAwH8E91&JrFWpSdxl7=)Uo&fZRt!R+%RxBvAjH9Uk#N*e)QP zesA2?>PsfSY`jLWlIhL}AoI_gG{TxT>x*OquQL=^Zowwl!gMQyFqR+~8|)8#Qz}xN z?LnQ(66=xdwUCG!yYMG24vDTD|ZxQD9wcP)=0m%bX5i#EV9N4utC z%aFRDc-s)!d`#}CDF zPp|IWmuRvua(&@>r98A9|Hm9H@iVa>TCo48pVGCkgX!=Q&VfHAx1mM^od@^ywuV z-j|3_V4tG^&j%<^`VAP?@mb-u3Bsfil@FO?t4Vj~RQQ*Fd3bQz;+T1%c}f4@amgl_ zW>@j*(-x!<&SvuTUn#D~;wibvR$^3kFS*&F(OSHLlnnUiuqdNn{4y%gdN`WfRKj7f zp$8^}t^0m~Oi)&d@0-34_UtZQ zL>Lh%tT3__fmg;bhGq2oKqeHy;brRPB4Y)QbmPB^p0f8czm82z$-%_aTGEpLWs{$s zbk1rH65U%|HwEhIncc4yFR%ohAbf-AV$nH8NBaYwkdkZ`kB8gyaV&G8`wf9@iDu72 zJ#!<^;ODtV0AnDbm{D+at`fzVOxGm!wLpEg27-}3;|#I>T>6}M079&jm2mW5;5xqh zS`tIufz0H?p4j>l0lLt^I_uR6~mn&6%nQgz7!!p3(9 z4-BhZ_832bI)tzKlSZKXvTnb?U&PREtIYb1uCsG1Q3~iXv&D@#N~~=ZEamZ+=FWOW z4GaWf_*&FN&btq<7~=X6*?M%M4*rfdZ>@V$nKH4c?0&V8)Z(0fs2IktoeK46*7aO? zq5=Tylm U6NTjvr1Bn!%W0!k~C-XLN}CzGk9P`q&Cq5{^{Gs?Tfzaggqi=*Le2 zq`ph2=M^1eSJOX_4<2!SOyKsa$Y^Oa*uZUS#%8hih!VD>|9NBd3yp^UZyIc`7}nfO zD6#ZUuMy}1BXT_Z9nQj2&!y_MoqgeU9kiZ@PhX4*gwmgp5oJDna@fdETyM3IJSExp zMxN(9WqY~{=3)ty3h9oXX?k$?6+Y2aV+no$( z!Qx(K@;e@9SL`Jf^k_bjpiW+wdJ5^kG1-MZJGxr?p)$jpi^feb3*N0g5kGLO&s)&! z9A}5qNua3)=uJ}96p`nifn%k-r}bfZXR;cb>=!4&ZHnHQAmOx>@cW9gJ)N{3Hm~ba zC)ORz?bl3C5nE%YEg5!mrxW^Ey7ybmkp4|5S?~@A2xl-mW z!~1!_1^HLzjOtzu4}1sP_BI6}6AyYm*nsNaF1u(S&gj$5y; z?awbA7!QnR=oVK9oz=Xnk2h8SDoH*QS@LL6wSpkZ8TG*(M_k2t;*wvzqq@WNwm9O4 zQrn0%Xf`h6AlJ45EEdBZHd}ud2}BgjD`Y*!qx1cm&^j}(=~t5Y0RSW*tW_1hU;Pz| z0-?&V&=(e+)l_~G;&(!v>IOS{-O_F)htf!DMwVU#gY%5w6FLx(kkH{#2>$^w+$@XF zE*C?ofJ=c6egFVqPC*nv$5*NcKMEAvPXjl1=91G7-`htu*I&qxzjs&HvXsLSf~QGJ z22d5;j#)t>l}0}d!%1zF?F3MahVl^Mp~LB&&t2T@I8k04L>Tm-EJY( zkl3@BP396=Z}!DBp|3Ftprst9l~mBQIF})vI1UL3a6LS>AHZ`I*nt<#d#3&v9@N$)192 zgU@45H_!qtq`E$;)(gjz#>su1c#J zn5`HBpOf?U^Vp=01I_qauPD#kb#R3ZBSrH-@WlNCz({^Un-`n?6{axxu7Rh1g9=^Y zeOd(zN-aWEeL*A{ETxQ>FSa#|oO|(!umCkA+hb9;pMSPlViPblFE*{95!p;}C6SZ~Eo}dshk)4RDHy@!v|3dPqv-TLoR5sJ zB+}WbT5D9WP&t3Z_0FiIJIY`j0e!{A#g+HOyIjH=9ujYdEmdq!@*V%<$|$YC4ZX9} zyj`6I50B?MSIPnl8+0i_N5sN_PbhGWM%@qdl zE>JF(#q=#F1R(1H8*|~B8HkDNvW_S)7v8Eq$1St04E$&v!Q+d4errAbfyBo*j-=w& z!BqHzIcBk3e9L7Hx%C5EU#@x)Pbjf7%eiR{1+J4r0y`|iufuoiRYvee{g)8yg|(M3 z3vU%;C~Dg<&XZ*!qMZh0!xQOwGEW3CQtmV`fb&=TSnazhunzC7t!p4z{d&-@ldq!} zIQ(3>t3M}S(=Vx!*0JxJhx`02GX!1K$ESX3LWi$!pVROhKZqwXRHbh`}vqrvS4rx@;X>Kt23j*;B=0zqO48DSIogvjgi% z)b(*!FGY@L0`y4G?5O!Rcgd-XtVsskyP@4mjPOsZp>_fpD1)`$3L{nRP`|Fnf6H~4 z)Tvy(9%2x`6JdSOhkqTM-Uqjo0ii;qUA{6VHEcIyHK+~iUO=ZY{G?YPFGyZ_8cglV z$ui33is8GG{o+dIxnxIiJrd8VwB+_&0pW1%k&tB&jP;NReRF*Uoa6i?dQ_jbCM0Lw zW`~pmbTw!0A5*YB9k&DXq4x;ihZ#@ZyoHKrbZev&5HZfQcyB{J_MFM^p{kYc%CgA% zzv_C2Xi=iA&GOi`ZQH)bwr$(CZQHhO+q%cLee%BdkIEWVIWk%iogLAL#@cJIZ%zPj zllsvXl?xvP*L09{2YB+U1Gfs>*`P1VjLT{>D{vQ{MB&E-MP`M0GR5Z+8TauvO7q8H z$+{gD-EiT5l$|RrxRo)9R=D9x5Qfa-Lpx#|I)sl+qf}JAo=NBlAeBN6aY9g4?KHXO zQBse9&&rFPV^PDc+nJ??o^dz2KaR&_{{M+dfB`9u!VB6M{u^*?kqr zSMo8GCHESB0+5CIQ9XjdD_E?TuDFVqr9X3qejw@#q_UsZ9=BbShQ+1|>BxH#?DQD1 zu|gm1X*eIz7*JMCxEtbgiAqi45;v_D`E(tlKGVfn=XK6VF_~tj6*S*SAG9joh|S|# zq!4Yq$)@s-bRUrB~&I{h6=0@J)^+n@_p;ZHDsliH>{w{$E?YJAnXF2K! zF`|>D{%{6hNi_+gP!)7VkB}agEEDr6UgiZCJ77|WJNUfyveBR+HfX6ryanRi*|coe z9NU3Vw(V>xrQqm#@@a{x)7vSo0)YKda_c{4F;ZQY$5w2!#<2tAwv|y;dgh8+VC>Qr zVi9#x^Z;QTu{pA{(e#$Z(TVh7>TRmY>oF}AA9TUZor#=kN*-pLRTihaOnHR9tctCZ z-ZK4rQ)0jj3M6Q6D6WYEl%{+<{m;eWuUWCs%m2||pkCj)r}}wHmx` zO&*DZEg59?J+(jH|_ zlc`fYNurWDFd|%LE+UW^T|=M@pwudQXs>*Gc-x}`b5e|fIWtQa>kCH3XX=mkDeZB4 z#lVL><*qLtpH4~Jz6|RWJ@*p~11t(f0%3WkfKrvwrzzddEn`gq7IjWYdhO#p7KP3# z#iY4yN7<58iS^e-xGNS=>sNfjCRy?dJwstx@VGgm*#AsK#5;8)w9bC#9bwScmvH=c zWqhK168}wMOy0chUY1~@gkbH)GBWOCEZ^2#f^C4LR+OeZZ%>Ff2T9}funU6o8$L?l zej4~TkJgP~903w)SPU%nxQ)ynjK`bUqOP#`wtk0K+JPP7rRGAWdBu%gmwS2DYtAkc zE8StZb)#a8)zKDD$FVXCfy2%bSBnOCwRPK-FMYbfm`(%@;5ZKp zU#-o`O!(>rPKVHsxalafC5U}sh2^xjg8i8}wTL$@0ZN2#?NIG`@SBum5x93_DaBz=6pz1^N;vEo08x5xOgubsqdhFr<804 zG=$EBIu7ym((8ZFoKqC%t86FY@uG;jZaA;GcbGxeEXiEwMCt9;8coo6d%6CLD}X#l zYDxi(INW(%EKC*686`d{UTQ+_u}FPA0j`RvCh5y}Wx%JBlu?b_e}u>y@$?q?Cq`R{ zL5l0Iwe4xY)g}1{UKZ4-7Z`UQQJB{Kwo8F0fTyNzv_ILO{!sVD6ut-{Xu5?Ctli6H$!1l@3KT zLkHRyHem%&2^oruJ>PD&SPWPPS~Jm+7B|c#RdSsdgy}Hm6*S?#mqAk>iYk&sC+05v zPFKY9vK2;F6zZ6l;(8GYPIcvTUoDM5rOdYss8(YfaYh!0RnwKM%5Ee?Yk$*=&x4vs zY#+WfFb~DBqZNkYg#hGIC)5%1@6uUCxFrluw7$#ryltVirQ~Y%+DYbk&@Z(qtzoM4 zve>e1CZA5dJw5Ml_PKbLZ^|BqxjD1mW#(y5n1+N0Q`(|+fouksYXd-eMUoNx1XJ@S ziZPhcj!BNgV9UDNjw!YwEL!##chkE6JpvT8DhLd_m|Z50_ipFCKxZxt+&LV%@xrSP z6S;3_Ge)ZKJo^$i9D6yw3q2Pwc}cPu8n!f=d>4o&O3$ZwHv@pY$Qqb#!=R!t^?RZ@ z08`lKdH!puxvl78{*wRG%wSsY=qm1ifb+A+dtER79#!+P?&$EQrmN>+bvP*c1iTsE zL1=7JvmBFqr9C%+t2U1o(0af*V7pEii1h&8Ocsry#mzAx(LZnP{x~Y0_QkA8$(B1k z+{wW%a|?GEwW$4}mgnm;6&q_aNUkUyl)g{FFPw64j1+Lg*&} z39#d91xxIi%szpZ&bVW8)(_DZ8iwjO z4BulrZaQ~YbD$>*!+|ocyMXTS+q7vXvP#=Zsofg*$JCi~-9_i)Ou`caU~AhhC{`H) z?cUauiNaiO`VW%THdCF_tTdiqE*Y9LJG0_96kYm^NPu)ff2i@!`x_K#=zK!yJzV}e z_1NX0YaLs__al4(dcKvPdjb+bN9uNZ`ye{%13*@j&)0D70%0u+bP+chN7G?SRstU_ zX1d*g-MN{+alCOI04kvC z!40R85WEgED4#wy|L#34b-*fH1Yjk6dHT`&ZOi-+?AFa+vPCa&S7$5wQE|h-sMl@H z;Bv?7aM-l64&af67r%v@bK)y*_vV1t1b%pBQi_=Nv2ACb=@p` ztg5O&EF0C1DJennG|08qVrmJ4aS+zFne|K)wru?5ajyBJJ``gwq6j;OP@Pvs%R1@y z1y~W6-)r?GzW9jx?F<>_Oq zuRyBmk*NqEflw`=uJ&62SaOjSi#Lg&uRA#@MKMd2(AtMX6MdN}vD74yAd>#c6m%dH zfRBb?{=|r7KxFN$gV-6(;42U`m#OFNkZfMw-!2pAg|2_qw!I{4y+KzX5Ib8rW@TUz z2*5Q!Husf4lA6J2&u{-|AmG4CW5d;FUSbUfb##Dscf-3Jh!^04)BSj=1UROi zrhc8-D5L3IEiyL~Mn(~vG5MHf4AArNElb0wAwrf-6*j{5rxAgt_jeS{yBgh+2B+tK z4~k!VOM-4j8O_GW2p9`olQd_$G3MnDH*S7-(Q=-MKV1dS=a$bu*u64~Z)ubrb7Tty zwIeVdMU4<)@;x*x^hc8A#RMt++3QkUIJ;Sv0}$6Z45~2h0JT%wjbP&Y7@S#B^R>Zp z(>4d^%MqZKLnWMnGJjK%YWx-Uu0sY376r^92*`Ghns30oo6Q5TYR=ZE(2y&Mun7_P zx2yRA7h^x}#Vh95)$wNO+pW3{(Eq87=A-}zoz&1C(dmdGlsPibHEN;Rv3$~@@WGeg zP-&DbR!*tUe(2}au3UP==g;*?GY^=95 zJd{xY008Y9eb4fa-@Y(~bJXb@(n^Xy8*MC=m29xsPM@)>D5)sIvU9CIMYs_G1>BuI z6mJ?$%&Md{J=G{T5dh{!Me(?DAikm7OTgdx+;&#Ni5N6iz}K;k^i~nyQWCsZ(z_#b zg>E~ms7Jqo*Y?{b2Nu8zq1!M6ASD?iDA7@xHJC>mE;j|Ez9zQ8L2V3<5M0`4c{wC2 zWzD4jg1N{xb?RH?mDP1;DiZ(zrn}v*S=k;=+TK2k7wXn8t?Ov@kW$?^(Lsjo zTeq+~AZ=3YS=xYGtX^#nUD~(Qwgb#U@mHOEk*u#sC&_8<0ovg-|d)KEqDxf>?90eY$>)J zDpLt{)5J^@d`+at^`N9?Ez1KlD;D%Ix;!z(j=7DW{bPUCaCH3I0PqrLOIH|BKK+6? zunhr^P_cX?04@-Xa=D7SZWsejWWE&e)mrkm8ir&Y9OcB%39f-}(2B{_LbmMD5oo52?qgtg8f4u6js5xs*xB^^5_vdLw$vKF9x(o=ez*x`(3p=*&27OifOE%pENDP2$6 zc;4#ohTUgV%$=<05{-nF3IL#2Ukj@&jY?`_A)hD%%RV|PHeHaq<%s!9Q@!EM2M{@* z%J5^iXl(_0Hb;aH7Et5fP(ix@%roek_zkndJBC_pAs_;_MZ-Tk+y5GK&8^AzGm^WV zLtQHT$(8CT$On4?C3-z~4cHv#SS{HqA;H39F;~ zeSwfCI5_Pi`e;^lZFj2|Hzq=`A7M9XTh=ZNIc`1Mp&#?MFw zlc(ocR-s%iym%}hrz&7U_m`?B>1!Gg3s}t_t82@im{uDjZcF>MUQEO@n>U!U_9nc4 zy|H)3ZdD{jyGc47*kIXi!&BA|=3HD4wT)yRc5o6tl%457Fpv-%Rv~E} z6S*>DZg~=Rf0T@v6X@qh^wj&6J~jO=!5qDgMp)vCRpC!fgvNngreyLKp z$Y0RTD;tdtIo2MJ@dD6$c_oOKUBS6Q&m$-H{2_+rKvW}9;bk&3n*JH_V@TW8@}Cbk zeb|ID{ClH=AML}Nq37V<(>$ihO;wk_oPgzL-08!v9NX$}8Vr#VJv zIwY_8O?P|*AJB|{L*ce%C5U^M2%PH`N`o+oh1*B5oB*d^Y#c*>j5;u%Rpd;@z=H%E zz85q=wLtw7GYPMI9$zny6%TW=7d!0EAiDxI@`tYz!i%SyHznfy$DA<4nf*h~z~ZA5 zi|mXrfCc7Ypy-Hu7Z>G@Q#npY$RNKAT6LLng~ygGqeb&BgWRlh}W( z5k>UBM}M?&TT-zW_0HTW_GU5x3nY10F<5%|Qc0@H0w3oEtfC4-b9;>hJeJKxt^`c; zG2LsrCys7lU}AKBG38+D#@&oK!b>Xxr0MfcA6H*yjtVUwIX(bLFdD29TwKOQJ3IEI;g- z2&7z14s*##6vz#b&GGz2dS~N%e>+BEXAfSS_^k$c!L;qVeWoLsRDMa2pjqa>iIFwC zy;oG#_MF2pNVmrA<<0B??Ja^GnE%}UFq^?a{}p-O@v*@%er|Ti^jIy!Ept(jDS|h1 zFKyp%3SIg&jjtNB>_|ZVH|6jl8LDONsffDN_!S?yHk=!|;@v3;6aRJ@Ntvd2nKI>l zCj3iBJ{9{+2>e zL^8#qLCf=Wwiv!rg6lnPby6SvFknRTd#0LH`tMUUCPbcioD~|n`wA1u^ z#~-$u(Q_S+8ex#MtRA_T7sC0et^w;Grk28^CGMmAY8Cm}&lrN?zD*oi4%7g@=YyII zbvUhbOd8pm_L)RZ)loH$m1-F^`vSi)mIS0^Q@`$Cr@^g@6MIOXQzhhu(g$px#DnKk zU~X3ux$P28_5RKltFTY72{3|=O`7FXp%#ZaKdvHl8CYqt-n9;|w@MYK-5GHe$?`q6 z6V|5QyBDzg8G-jN+fAUxFPt^hR*kyh9QJY)=Zg4iT9G@NUJ5@G?Rl?|E8uR-w(aq{ zESd;uM0fZp#t2Z z!4xsQidH+)Q{YJrW=MG&ySuH=ae}FutVJRD*si-T@g`x)<{nzhxyl9|Q%*RpbP6Ux zN?F{#zCXEMN5Hz8j7xb)&}4kldgX10J0<0JFu0(r5I@^zmfV!?>yUR(w%jG{0gLY@ zV{N#a3M?8>H#-7J7 z>xvSnKYNiYPP5Nc;pfV=``!!~1{Ep6M91pn}H-qbp7IkfEm&&_;)vU6J(q7 zr6Y0n!bn}kjU%!Nj1X=)sfJ~CR4;3V8sYs%oEw%H8oR7fNAJ>A&gGv#JtYx<+yW4# z>G4LD9#hB#w5GJnoD1p!X(fCzuP%MSSvvR#zTSL736=$Zyl!++>$YH|1Mm?g$OAt1 zwR7C98hPt#9l^kcdF6R^tgx*l+jqkpQ3rr9^&|z>GWL>+EJGofZx4_zFjkuMWT0b- zBo6y}){nJJ;xYt0;#(LlS|_U`>)`~n7fh4Q=zV6cPSth4_>pSuYP>h}(=QD)vMx=! zQi=l9K89tcB>HB77~5M{^;KMSu~TjGkWM2p$h9-)9D~@V{ zT5wsRU)MGq0NX$NR!L)?Q8DMzziio5!B6Pvz1t!LWtB1_Y8;Ddwu=F>>n!xL_4)4a zIT}$}Kw9vV@bmB*ywU{VPeMb78b%O)_mwc^)<{5tkUec)#lX7lQPkgs&4S(a!(tr^ z9FjsIxJnj`;}o*%olNEMea5nBDoaHJ{NWp|3a-uRxUsAX3kQymR^KL3MMC+p~WCBByABnkCNr1G57=tgm%bIMW?vvhMX^=8qKU#wTf;H@afHX~6(9jZm};@SYMSp{QK4+K+9 z(ELnNiY)Q#j97@PfmuW`l7}4qOxI?^U+~zp?lLfoLp6tGS-M{hIMurzJt|HH(kydK zorK{OxP_nVXng)6AHsp>5)v2k2SvKW&v%I_wfCWJi-u2DkRUZo^&V(TiV&T(_8PJ~ z&f}Vq!((NwcIC9!dadO8`5bvWjVbz4-Dh@$@P*@%A?Rip-Eh4LlLEYp{L1B4nOo3r z^*Vv{)(j;v5t~ak$*L$&+pjs!X%U#8Vz*2qbEAQ1v2B%4;of3N18s&8iaS1PL`WUo z%))n@C{laZz=2yrKT6Eb(j?f0CAyLgDF zv_`o#DUXGk^bc3m0;4fnS2E9J2Bk-anaZ;Pn(UtKzcIaEbKl`c+qYOA|z2AA!+Tf z6VMGE-dD&5Tz$=AnpX%_<~SBHh$=nh+(`*_X;sDP4B<8zge&+)$;tvP%7*vSw$1L6 zj|89KQv?Ol>r^(MB5BnJ`0fc*xwR=T_AbEt&M%W*53jVTbYwG)bPk^Ca-CS({{(## z1UKR4Ftazt{)rr8*st1PM0VA#0nKlcMH4Qq&;vIH%Dlzb`qbj0?YtT;ul6@cWkM5$ z29}}|GxVY<3);?){?uHJrh)@b{1kLj90)rF1;^_ebrfU7cIvhd?utY*-cT>KUV8Z9 z6ow{`t-4j<5)pG*XXyp|`Q~0Zjm)t`DYboO^*Nc?)qP^rk&cx)qOSe~lY`{>&?*}J z%h=LGerzO(>X5&;!yk_aab=wd05lUVIyrFGLO=wQ8!L!e>1tgB%WE))pOm0FF0NODrqyIS}+PTzr`euYi| zbh4|6PbNkSq9gz_5VjM+Lm_esnGs3r9u1VQ?jwvCtrkc|p@|~5N z86+RF#>j`hR*q)$QBb%4GzG!5iGK?lI%9=&c}t?95#j^>WivyJg4~s-*bCCUB+~f9 z`rCM>C*PTot}T6sTFSjBQ|(o}7u`qGg)blWLq?4;mR~J?Ri;1!6+p(nn~}@P(!uM5 z?$3+mIHb5r&+<90z&+hchrAh-8KP0bhgfUsJ06P5WWRL-$Yuf;C{V~ehk@p*5NhyyE>QJMb zp;HjCvFBCR?cbP&+i=e81DRKylp*Dey5dP3N^g9H*_ic?05$Ww z^i9(}+;$lITWXmNX1x+4n8ttTk6i8$<^Be5H>%q0iSnjZD@slX3HN7$4eYnzk`^IO z6ejCcFni#)dfGl<+`^~)my1SVwRYh7Q8b@%HU_opg{g9-n}G;UWz zib>6h{NhLDvBMG5??aW4m$$gF`KO;=Km~o06>zBBcV2<*;9mSsJz~*JKS7BSX{+T| z+f>}<<%L}Z>hDdTJmbE!I;VT6n+O+#G1JmTP8}}iwv|~b>g?{=>vhL63hnDT~i=ey_v)FcQuw5>yNUggHP zfGX2HCS?JHBmo3bo#J!X^-Yy~JJF&jvM4Q#8`D-6E9%qah1h;(=SlNHN?@h6`hDpP zbdH;^^wG97;DwEi0~AqDr)#bf^vcDER~B*mAszi?TTqxhW^!3h)kvet#oV9c&TC0djs;0wHnmd>wACTI?D91Ijlo< z6o&QBu9g?*^>O81x(C)l?EpB}Nn)IFU3lIzs^C-Gt7CCj$R=;)LHaY=#Zd$N!3L9I zRt?;thCZV$FXv_%zjbA3)cef@8$FhQt7jJ*HtB9CH@=T%6tB!&JZk4sHjp%C^SndV zDgKyLK#Xay_zZvM6n*U<-K_9Qz(n8*dUDY+;(dYPT#p$;P**w5^4tMKc$m4%1sL_! z-J*>dCe#Qb&;t>sp}%h*g~C}X+v~O>DFNAN!}!Ccl{5MWg-Xpt`4Xb4@l*hmTf}x| zVxJafxNo4d;p8F5{AcZU#BEEqq}|XVxZQ0%=EHbG&6#;`wTnDZO?AiK@(8c4Pi4W{O_#wB_wBPBUKF==SO8aG`xz_(9t3b; zp2zg32=YrTtS1pylrlEy+zd2k^%&4rLuWzSx4960FZ!y% zS(`<=0~Frko7c@wui}mzequhez_ta%N7ZFn7pD>JidK^R+`FfzT;_JOXEX(T@Rd(9 zkqrK>rtxgJKHbjv0w0e>P?mTO|6LJ;Z(3gcpn6+QS2=8`j710M>@dz|&fxA{bBARk zno{=szljz?G5$L@u=OvPSY6pao&^1?sr|?w?5nP0ltG$T5fk7X=n}()BKb9?ui|6F zf!9Cwc(FmW{N7?1QoHG!w|I=(Plj{MLTg4Fff*`V7mO3R+muRdK%Rfss}8otEKO#r zDitRLM>9s?`%kry-%K*LSC@dS>m}X;kiAMO&2|KPpl^qmpRKo>8iZptE(?(KN6V1&=JBaD$5e{y#Q`lJyKj z%t1LV&pn`jIbNDFv>_vYRL*|+5Cyc;rbk<3uqnVvMH5a2bLEM|W5>%F>SxZaD=kDd zPSX`dLj5-hn1^j~4pvbc8zL;9jY)#d;`q!?7w6zbrYk9sUHrJc?tTDyN$Nw2!a}KW z!LgHGiMYgzm&+2@V|j}O9!jUloBOa)T+{vRE1%;3KDnVez$cB4(;N|tosZtgfWE1eUj-;~T4IA0ow%-dP9{wjpf)Y~1s% zv|tWm4be9~*TzQ1wCgl`t+NLYASsy=!ji>_Cl%Fw?-DKgb-q2WFx$^$WCR6lc2bTA zxcyS{p{kTQ;Vf(Vu4u4bsDidB>U(GY#Dppj)n+71+~lLjy=--Y`dx1`fN91?ym!<} zYo;7>(_d-f=8OKR6dCqyx-`P_#784~bRXR?EW6bLZp_MOe#RaR_L-x(D@QHQ)v4V3 zFSqzMVGV!M z{B8gAQ|?lg>RU3OcZr*Q1e!#lv@eR9VqH(lQsM8@2>#b5H_0gh;js%g z^(fg5yBUe`w&?I)y^|XZO{l$?sKcPrib>!GO9}Z_SBI<&nt0y*8WC+|L5|YE2@{Av zxDpVh=h*ra+}td(3D(^oA7Vu!2PfN&T~D1(+B^06pTCm=ZcT!KB_RltOZrV)l&W;Dl0Q~?LON)?uKWv^v)csKUog3S0HJ9RXDHyW z-m&ciali`DQptzq@o0kpE{JX|r0)9>%bBD^D8ruph%VXV)6VQ7hE9F&KuwB$--rqP z4auruVY!tO7Xv(Hs*A}CfgzjoYdI2f`trDG$f)lCcbT(TR zH9iX;7Fe8*YeS0lPK`9TVps3^{lI0LcV{P|m7sfS*l*$?VR8dWFuiFfze~)Kpi4v5 z(`QysbcK*0kVjE7G<le9R??Dx52bt4K3v0q{8jb*!d~NB1T&E)y$@kDJO5HFS+eU_pc%*5VtcI9*JlqfbYvnkBBBtK*z!EFnL>UfyplJF4Jn;(? z_?~C9()l&8@u)BfaEedas*L9_Tg6mSLbDTW!k;Mr>MypKHhEe&@g1htmG4$t{t^+7STEvRgJ(;L#lXATfh=Y6oF1!|elU1~|???E{zg z069@`HF4lP;;zrvZmj#*2i&K=CrOIZ-d2g%O9c;}O<&Z&&(|AXkVSsI2t`fHhVDVO z!8Zj*TysH&YW@4pL5WVHBTI@wE358wlOURKu&GfgNija7cvY{_a5_dI>;TW-eG(Rd zc8KRh#XDJdW*jrBTv$E^m;l-#s~)^b>s%D*+~zd=aPHpA<=Po7`Bwkofu>>YJTJkJ zyObKw#^x{Zj~Znh&=bu~hxR7a<@DV{k9;|`;OEFE%?q7vV!Sb}-YuX(j{>G?cPW#v zpftLhRAx}076^MIFo=*ZIikN11~{mGH{j6s9%c-q8aKRC5})1MSlhvo155-lv`=5~aYz}L=)ZJYO;f*;Yq$G$|N(_xP175}aFU^edzERL&(bx)J zbJ!b5*x~d8fjkMnC(zRU2(r52n>V;Xr|-Xp%0#e)r?Y$k@MC-?RZc>^gRDbb@QV_mhm(g=$Z;UlyfBWX^roPD8iYdTK3e7A~xEr1MGl zGZSd%*RM#)jIFnA!9R~+LS|K&AmD`{kuzAEX1!>#q{ZOw(*Hd%JD{s0)kiyYzw*Fq ztp_!=*Fx|^$_#lTM&LitE&W5fa_aL`UJ~8KqKhWX=Npu$%uf_FRI%L84cEraa;{Pl z4L;#A@9Ngm!BLH)nJ)4nxZFiX|Ej;;!{kuoer6$_K3Kl?tXnu`xs7yz)vv|SN+M)K zseDKn7Ak|k^#J8xEM8%)0Sk{dLl>Cp2cU0mgj&l!Cl;u0D-Fqo9|DcG15mU*o7!p~ zq)y*I{p%eQ@%f~rHr`ms?#~(GraHe|Nf!2#m9aMrWlP6X%p`=BOFC|K-(c~dH-tp! z>7Sx|V%a)OO$Wp2X1Xu)Axq|z1!{p^XOig347({TK<`Hv1&r!28r6-xgMi2^5PG3a zDO-9$Qt4%Ju}&awngMCXUX>k7@y;f%BItI3qd^cNW!iq+Xu+N4I1WBcww!;lVSr!^ z0*dU~HAX<{6IBiS*w+i1*WEcfP+E9bs?jQQNTJ|TUSw1s4^I2huj9_)Xk!@fX<%GN z3UOIU-s1>ifA$GKs>1RbfxriKE(sY47L&L1xHA0Py>>Gxwwn@77#OBYUq)>R^zlv{ z49zg;I2t5|hAl$ViPF^CFDq-8ZM^Q})dn5ddQSW!?zwsrYDGFe9fRLg!GF56g{zDCkwi>h-i-o9 zmENud89>Y;6J%K&%j`(F%bT*KwV?)YUn^8stF_xJp~o0(Xs0o|)+UW}=z_qEs2)xH zF2V*ZSh<99QkI$OZs)SR@?st%ezOiTD{S$J>ulSQF=iP+*p0RZ@4k%5MD4A*o25BY zSupQzx#Kx<24(2HXoPNi$di1q?4AVfLbqG%oUKo}43XhSH}_o}ZRBVw#K zS31NG4L9w$;RHYBKSlRIbV*SE1y5D+qW~(xV4%11J)K&?#V8&$Z>wUkTF7{kVRP#o z913%FSJ8uI0VW_<8 zP=I(!XPQ;Fqk)zHM-=$;@NIp6LM%{ftmMP-VMeJ2UcO$1j*6eEb&cqMxQ4TA&a}9P zEC3J2CD^6uGF@Vs`6%4{dLwuH0(}j$VfA1v^7Wto!kr%NRnNl~)3ktJA0O-=*Sj(i zW%&@Gyai%Zv{sYu7@Ww{H3aRa`@hR5(XV0SEQL6J=RgB-uAzVSO*+gl3vZuf zpzg1SgSfa0J-$JCJX!52)qq^TmC=sNR%25gq`@La;0qraY z*26i>Py@LKm|#j&v3jP1^N+9_h==ek$6oN?-ILoC8q>RR4-jM^A~TL2j{-rC^3cAs zHALv`et$qgam4GKxP!;+gg$-9(T(>lY~uMulrh5S%p>9ovWrlDMh*94b9d0vD~mAU zPkHOiB+>bi!e&9Z0)P$Bd>GMItCy;a?+OOeCP5-C7ElbOzW8aF2(VBJmOHBKQ&X&- zsOYfnZKps+c}{XsKRDgOO8eq zYBNY8p0f{}*9C9qDa8L?HaI%NHEZhu_6s(EPOcd8k%0Dtz9}g$mWl9@%O6gM16%eg zw&(9VYf0~nwUx{9ZUtZLx0vb?WtH!+2kqvj85`LS$^~_>#GIyMn|6slmoog&#sxS^ zPUTL$#aKwLr=QgNKM2eG`ngJTqBTf1YJEW(z-<{->Wngc_7*b-;qr8?E0;Ps-F~gi z`O)P_9rgO}SF4lkcQ5o_pkKvaWYpY1^}$$=2~C_)pbNOK8`8I}r=tGRMH$2J5Xw56 zh>0w1DP_hcio3~o0C9&ZmaC4Z-(ECnBm;WKY%nbh-F;jv8VCQy9Iu)`86Z1G;wIum zUguVQv*F0YukTvVxOtBec!FpPmcv&IKQ#|`R@+qm+3u~=sPs?cI=q*p5N)^rZ|`sl z_T2v0B?w*Z`h0n8zeV6yg&CR=qKZ)`shK^;$g!Nh^9vevA;wp7pUrcM%$dY(79|H` zO`4PbMr6DeK7sS9?z-3| qXDLA?wUT|K1ttnec?jbD8h1uEv{yqNZ=6?Z>b6KeX literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/radius/radius.webp b/static/images/auditor/10.8/addon/radius/radius.webp new file mode 100644 index 0000000000000000000000000000000000000000..e8302eebeac6ad96e5d0057c01f733504fe9db68 GIT binary patch literal 50694 zcmc$^W2`Su>^FF9+qP}nHt(@*+qP}rW81cE-(%yuzyChjO`hy#-|oDaG@VW|Z6}{L zZB?WtBz{MMfHcKLlr)sMh#vo=kw8H5fN4CzEPw@=v7$wbiHnf+&?ksM!J69radzMf z5f88{^MP6WlU~v5-n#j)@7&@P&p+p^rsA7_JU$S&_wV;R1$lN!FAV$L_&x#x>u3JQ<9BWzA;WXv0r$o*CSa}q)qDDba8^+2C-ryxCk3GRaW}}g6;S`+ z^+T?2SzuVuzUpS8etNrzWYykI9$?Neo=2d_5FSq}%Z_+E~ zm*Jb>dcm#WZvaq0WB|@@<4?-B#|PjB00`LetNVTWN%(M}NazNn0s?+jzb$SgHxM5T zPYt&Lt$-AO><<6{_!b-&ybf3dqyfYMxL^Ni|J{$?7Xc9bCH;Q;3Ah&o0RH_30kD2` zf2O}A-{;>AcmHGUd^G}6KK7qEUqb+dUk>|#lKs_y7s9-PegI&g7$kA1JD%X0R=_4* zR=|Cq)|9U<@v%*GY7>#xl$Sf4#YPO$m!MLQ*mex2T=68PC|}tlP9YTUC5gIRtUL=P+f>FXi8`NATcfQT&d{nGi!x5Kx}S>hc%6p6Fb}9; zf`vM=jtJ6pFwEDtm~+B{&CXnvH|hu`sMcE3*ct%m0K~OKj_LV*2fiMNX9ew7t|!85 z`-#97CB7%fJLq-*i6d5gN0@iebq^YcagQQQp=|((&yNv=xB7}@u+Nhe`=m3_GfoWo z)=9E|x+-&@#Wwv!DL(PiO7>l1l>kVe@!i;En~34D3iegtIFID{SHl?J-LXX%T*eN~ z_eKS^gf+#nV#j=VMZ;x#mnV}f1`%_oBavu7t~HHs)CF6po&(GQZ};Tpr}e3B9pvKE zz>Rr%{eis%t3y-b*2kl(-YAVaLO+dCzCD@-|NK`W5jC7nMM;-8_>2Z<5fOuvnAo|k zoA}h!<|2}LT(h?ifa)5c7uOPD$IbYMOciFTxbJIA!wn{;GNd8~8~*p5>;o|3Q7942 zngVI)Yr(r*b2%yD zJpL%dI=O}3Z&KcqaBd}7kE`LDeKFNrbQe+PBY48uSpxVl>RP^VPcrz=bBP=ad|kgu zu1~f)t>$Q@-(O~X>#U9sn7&&iBckYxdYryJ(67|K@#TRfYDK5Ekr~O)a8fZf)k%-- zkab_;@!Ey`9lp33lF0q1xN=bnQ6T0kw4j>gHvEj?`Z#Ip0rz009J;?2ku(ss2OD?P zo(w%e$5N^K$4@<&20%`wG7JwNd$0}voBL5>di*_tuLlrF_A?Itt(GQ!WE6EpoqH04 zFK&-ZN>Iu(yL`kz;7z)~iTv}onKk$oqs5FeBPp5(BhY_o407);vau@VG^7a@KR(d|AH3Mk#U@8dumVLx*z~POZF}YTGZNY!4ExHQ}|35 z+b{^MvE+pwtj&9&i~8FOtg+yZ8lug6rHyLjD)8>Xz!x!dba$524LfkNWGLRCbyuuB zQsCZ~cHoS(7d)bEv-$0m=EtR|!(9!UUHJdYhH??X=lRIBS>z2;mjLaM*2H1p`DX`z z`Y4S9J^Vi%iERw0VxWl}rZ(KuE75D7nnHyF#HE3mLraqi;sUp5{?qion}s)&5KSH{ zO%zSRteYJF3nBPwV@SttJUFUyIZM{4I^^kSmOZ9$^($9x^{eqhuMeRG=@rWc)u=UJ zd*M}NLwdh~*9l{@m$pPuGmv)?K?scmRWLjC-p>cORh6GwC=!uMx~ZKdW=fycRy}bw zQV2mMJ1nj{1c=9QlVOxIXWbejer(YZ{skg%X`5fQTw|Nmn#DJ!^OP{rqwxpq3x=W4 zd9jqu(s>Gm>~52wNi`m>gy0TH=L^>b#o8QspXbD@Oiwqf{GW(&-MOobjLwwR+{P=| zEG8Zyn2nf*CG*MZwpwQ}nogDvqLREqfYl-4I;VguubaU&f8~6UH2WGsJM%#$L6vVf zQp0F<>BjNTpbtHbSxvh&duQhH)y=^I2XDm#0?A^9dwend86y*x;R^7=^G^E4mXKi z$MKv6V0Y`hzh0PDbyBrtZ0b)@4QH098X{ofZ;J zVB3#pnO8@+Ma3{I=LwI+(+BjfevZ#~udi{BCkrUWX*Ka!K-Ow9_wvP3g+?n!pkPLU z=IUA=z4w-({#<;xfw@zjaXJ2he*bcp!1d@ur%rRb;VPY7-juD1Y2kw!r&J3$s@}YD zlQ#@tlEh%CdTheL$ApJbui}t2<#3~OmhJLozWMj=aBGIi!~xrgc#fIo_N}^--F1Gk zC>8#Np+{j6%(a%R)DR!jlwr9AIYt!eI$x2_YITt?QiALe_#M|cGBDCvd2EHF-%PJy z#G7h*H<9D7rY7A6rOurpb+xvwD2KAK2f zCQPu^=6QN^cQy48L4gCu&E|_!hAbw7z3wty>hLZ3QEc|%<6=* z&glP>NR)UPH}_>plfTsQt#kx!K&UpsnDa^Ztgb`8!$5uhxz<|Rh0pQf-e`Jz15FUGw=R@U)y$_V z6k6k-ObjPNQk>hMB{Q7qj;_j9CG;M62x&y}iC&uTk@IN889+0gMNny=CW{Z?^+>m! zbnzMa0-MnTa#vuKL^qsf#`o>(lk7^XcaFbSFl(3L7OzB@DZ>p~l^C)59fz;+lu168~duetSW11XVPN^9#dHGDsW1hB&KEexs4?j zK8BuKrm=%^?z7y})DM5Im2jkW3boSRAau3Qo4KOYHT7x>jeExH0BAPe^SJfpqux=d zST*H;Y}+AaFHoL@ySMh3j0QZ)r!}e9iBpv|pyUDx ztXUf5z`Yt>AuX5?o zCrbQ_*8Qgx77bYGk*M8?zrxuxmCGkF+N!bu6UQPT$#Ff3<43?1-t+DO^4*N9i1gYA z;5@e>qeS<;idUVg(Qz`*M#k0$HCix;4qK%4JcJCr@NFO`24*R!#~}8#6czdwR4h*r z>{|@~lQRWcgh{G9eY5E?7J)(Lr*4Y*@D1-IjA@|U<-$RCgz^4mw4l71J1|`p!O+)( z7Q+atIUr>-wPeghq+Hrsi8m!ERiE(&)7?a>nJ@2F-)Br|8Gg~)=e_Vp92^zaB>f1*F(QnOa(DJWCCmfkB z^}k;dFbp$HG&4N0r%(-1#k+V`y-ss=A40{&o{jF2d8f1rQO@~8WGRG zRPk|kFDr(FMIP-T)rf)u*e_<7v40(*KF~cg?{>W4Gje`)$r{9)yQ@58a8U&$S**+^ zt-K;3%F~)`qF5~m7SjzhgFDtql)TyZtLt)VKN0ngxmf>6_y}u0y8z4V7xeeO6>lf# z@Y;@jXiNWbkvMF?16;1zM+7#PD+I9LnwFTD5jT0s%uoL1B9Do;;pyN)rwB#Kk%o& zM+yfsUFmiZ)Wxhv^s^oV@pau5cSfW-6$i#%B`j!{;R(A zM!VJV^7?|QSUiD3t+TmeQEwTiY9$cp_s5@}_(F4ckkPjW?g39E<4VM}JCuHD4p_Sk z-F>v)73UeCJx2%H=;v$j%qR@o3hn$vySMWN)_tC_oV3~MDs1c*5bw>8A3c>B_46yw zKr(u@L7jfm=Ny-RK#PVS8!FyPoxDqjd^CvOa@%SPq%gLNI&&QW0sN|Y#?K$nLYb3&iKAqhplW9~Y1)N4fDbx*Q!~;uv(WWVH2)e)KAXsIfeMPq_ zzyHGEN58;#x3J^Ox(_SP6J(WW`@9;=n2z}-6s3a-v{aGsT2rd(&%wi96MJ#9L~S9o zqfBa!7DN^RHR&zqus#2y|47X{I_!f;X|f7ducVHPf6*HL$mSzFBm<&4iR2WD)=-@U zv550aVpeJr->-OatKYw8;^gP`fVzx@r!YtT?l>mvK1F>Er&2ge85f&v&*1DWd*p#%XB_*{y9o zVOJ)BL32i55=c@nc#aG8g5|CZA+kdS7#zIDyUG!mMrkchk~}?Umqd!BdUkqv>@4cW zeYlx0aCxJ2%Ohh_L{#93my9jr?Foa0bz+}y=P&?jUNa@3Cv#JNx^{SATROAn5V^a^ zs9w?)iFbldy=%&bdrNH-wclB0s+ySWk$@-41Jp2j(~5`_UADEtfwKIJw?Hu(TSuJ)9k`F!wA)Y*A&|9U-$Nb4KbIr7O@$>9}(r7 zud#h}Q9r>~y0?baV;0kYYZSJoU0`#LH-r1>n`mVNCBP2W1xpZH(oLh#HO+f4X%&U; zKajI#&D1?qaF=x~{yB^Vm&l9CNLOPRi$$`$qh7{2Kq2@2{V5X~iu8t_H_zIGaeiNh zHT>hc|6~)d8W(OzIO@kWg;JeDWaAh-CyZV)*mKPM_L1)s@Co$pihov0*FZ~98XQX`S^0BjYzhz?1G{i)UnZU>1g zFPfj;Cl?c&doGK>38L3oM^y<#pkxF~3a~BC6Ku5_ulZqQ5@%qR9BdohL(5fmn;*+* z#j~C}>7mMEP#D2H5W~<(Zrf`7g-|u#C@cy!CZ)XHQFWfhev|&q16FRPT zlAzcAcB+MFtB5NX50Mx&Em$bfZuSu`eBM`_gkb%Qh4zJqi&|EqvX=|WEr2eddzC#OmbGfT8MmMZn&$jsOe{?!?3 zv2K{MC6)rozYd&2S()e`>A=5~c=ql<6zoU?=BRJDQ5RYFl%iT&#bzG73Z7UgMA4Ow zdTJ*I4{8sIWmOltMEmpy-uk*DH<6d$JI!i;seM<4lySEZFLT;8=#SjwxvSq}g>dZISkoFp$Bu?mfI(=2%OP^q{sJgfY`a@I$)<~f}} zM8W)R{MwJ4=HQM3f%}KV%kcdle!_m^vf}ZWK_$8koOfozL0o@0Nh+ zvKg1(%wKrywYzr7KC=Ckw>}gsrCoQ$OD%`Puev&}1~MRCr30`?o7kC2FXmp3=j-vu zGNg)jJt{rAtSc1nhVWl2T?-3q{pE=$+??D*g7RnSwjLMeSWEWaTBFk=VBUi}({`g#rs>;P=Y- z86)7IRHM$^xREeHlFaAWzSLDo>V5|(5!<41TJV>=jcjhw$&p3@oxZ9=cvyE1+u>Ng zx#9RBI5_l(fgtY=4boJ$tTpfN;uXF@>xfU_E^Oc&IZLg{qAz#;gQ9U0FAhC*Q-d0f z)_A&~SR|N6?TDjoGyc4u(4{6ozn0&xQ&e_0&W)dw8muQI^m;Xudxr;YAb)xkM&W)l zcN+#tyb*WEI)TdVPu{5eK8YIHA03lwF}dSw>c4sN9B^22 zt$V{P)Nl>d@sg$KJnaq{G?OYl-I4ACW4h4sCz;$YY_`oECKBK0B%IF5Ea^htl2*T? zHKL>@^S98(JR}iRqym7PMs^2N)xNtKDIB14Z$>Ui(<>jWKp^Ddlv2LIcQ!vPn0 zB}KQ~%o?@A!k4%Nu-|OMw?))u9B}mvB@*IRMCs}eXUm3+%y>34;b>nVkUA7>nz)#d zm#S9ss}jZRISTC@h`&3Jpn2tkGHtL^ycXt=p6hG<<*P+HO`afvFA&gyr0`pXCyTDD zj6!{<;Q*DL-&|#s_`E}%Q1tdys%uiYc9G2e78c^P2q{u#MmNYFksDHFY+pn zw0RISYdI5t)v)}KI6Dy+)#xH}b3S6U%VszYw@UvWU(8NQi_iq+1Mb97I#4?wyCbKC zK-)n}q`8`kNq{|E05ocL-)WIQ0^UHa$F(#>R1Vzr0{^+f0Q%I@HgR1` zXN}MSg%a;(1Bv;2B_gAi*LbPmH+=3@4sC^-~Fb1>te1Z@E*7vT%6inWt;Sp-KP21U6L76D# zl#R*Kb;+=R)kMpjxdJ0p;ESOwud)9Zph-GhhO*K(1VHeT&W$?R^E&T#<*Gx7_unXe zfmUOfVL^AM2_A+tT62x0gwpUm#XwG+dIm1?fD`(rSZd0bv)b4!Z|&p@jJ`7eJ+X-r-S=GU+6&BL%I4SH^65*sK{{%L~Qn)-N++beci?gxi zrfbUr^falZ=vteCA2K)nt#nG3THYHCXcP!`Iq=)tiMk{}ntqm+g?MJbfDkCssy$r4 zi$INoElj!__Iwm!rREB1dehJm`dwT)l3YSWEUe>Ty%N1hw3tevGgpKN!zY}Kv4#Ap z<8W`)nE$I1i96D@M5Sv?!+hwShbQ_~e_PUELy3vKnb>!gYr6tN)avI=0R~U_2E7Qx zc}UeE@Tl^})trT@km#7m|Epc9G?Jd}*VbVH2`D7|JTH896_xtIcc-KpMO5(Zxa{%2 zdNLNk{s~h$Pr-o4xSTwh2>DQf`>v9lDDN-27JY zkw|&X=`vEDmc4$2XqA=%O!V?_XGw#7-I}Q8lRO#px%LmO@%WbOIu}>t zmj|-I#Pp22DNUSX9X4*jVxBYXx%*hi^+0`Y%Iu}kWn6QfLN(;8v|WK)5+dB;Pl}sI zD^C^Idp|@xPViV#UF~T2=ja*TjPZ=RERH$wxiZT}|IDgRB$t&*Z68PLQY(u-`_)X3 zg_ZT$yWLoTB3hTAWP(|P-_2|_`5cOc5BFfp*v}V2p>h$d>eV%5mA>jF2%@8`hKRnC zL{C6JqoXXicJAjs!OeEU26os~c59`^a|D%T!sm(h-3Th9$*}b8T(PoDebMV3GfMK$`of5~g0e+XY_`oS>jZ!m5dKWLrw) zDHU=sNRpO%$s4$+`W0{wo=^qf?!4kjxW7mK7ok1GI2IqlbxU4_bw zfIsiyv##Qmc=1bw%*Z7Q%TeJAcWnOMGq#mRdcure>CYqTwkup%{WarN2>+GO-8u7c z#A>PUS@nu+U+hUYtT+RUAdcq_MKL?i2<-#0S!f!WcMrU!` z;)2yDw2GG0a;i@oF{NtNB_-J2+?nXmohUqd&2JLbz@YNbsX+?DS4cinw_C(=0HYjsWNHT+M)8wAk;UYQ)Sg3k1`N`qIwBu#98IEvT-ye`n|3 z#(G}GUoT27P+}nM5WV_F3cI`sxr(%@1Fnu{I$~bk?-5Ch1j9?eWQnnFFA5-5dKliw zD^z57B#>2<{rM6sc?G(`z9*jL%qP@z&wQb@=>dn!6r884HsT#wo;=WiicH7^-o=A; z>kks0w;2C^-f|i=tQc}Yx)vL^4dW>D8w}nOmLqHAh}Vk<@=xep^UwSVi~vGB-!>sS zw(A7?4y5lK^RhU5wRpo8f1e!%-QQxwt_d1>Q2q|kZ^7NEJ%aceJH-Z7DhP?U@YZAa ztUd92GPEuh+o3G!O02P~ehKaYl|>D6OWAmCxajv1fj)y zirpQFs`rjq#;8cQr=LG`5F!_4G-njTHj6$Oc;z%i)F@}G}WUFTuS`%l!qn3P(;-}`z2F6(q_-xJ5!;Q z@09#-#Xgyt_y0zOwoggYCmDm z;3F=L6yh@6H6&l|;rvw4X`xVK@(T44NRUzPrGXv_?{vAAp5Y|?Mm>Pu{o`^ht&VS~ z5(?X8?b1)nZ&*kVc>{-hC5-^JhBd;ah`>fHsz`FsYZDaEO%Jw7a&+tgHcgkpE#uq$ z*iNn;bhK^RhU%9F6=VyWJM3t0JVRi+l>6%-0qlv)D5e?LQgY| z=Iu;bEqa1DLbpHosXlEQYMag}t9f8hq;{D*X<#)b>WR?1VP!MN$~zCE<+J2}7SZCa zv?7F&7C-s&s)};~TEYlTR0GvXL1!A*p3^D0`pd8oS;&eFV){<&G04$_Np~2S{ zJ8N3PGB`IQNYhmyXF`cc5(aaxme0!(UU;izyFKriEokl^%)m8q^s4CbzaF>=A=M@F zC+UGJX^DP8Rw8Yb(&@F0p^SE73`ox~zLk{V3R(nYT%;APwM0J5gpa}+Q%HgFNE@~O z8-IUpHEWRqlGSV^u0&6y8PzLPvaZ%d7Qn&z(HRI#;So_ZrFtR|u$=#ZJ-mALE^UQv ziIl=f-m>1GxclM$-^GAR))4gateyR~-m!FBwtF>ssewshm@%OnU%Z!M23t`t;zMCn zDNj%+A*rD-Lhbv{$~m@@3)7GFoIOb*O)(cJdR52(4-K(M*Y05~IW!pyiU(8J@lXABjmLgn4io$tEIRHZ~??CuLy9P11OJ2{SUszG`Z*sP zT4+wYvUq5QbhucmvnXd3zmXP>zEM&`UV^m&s}gi_T!W5SP(Nw;RZVxI6?)m{!B~UJ z1s2PJm-saB*b(w%r`tFJ$U(ZUXty98pGg{pEtz84W7PL%3w&>t7M!N8{3X=#`R*{* zJC*b1hwuYNl7jHYLXUYnfesk#C`D!GkRs=*pV{-IOy2BwGa*iMn{5gz|I9Y%{tX!{ zNlYaX!TFq@=5+BbE6y|N&u*?in*zxc&>f_Qm_MDd@j$-)r!7u=E-&M5@|9IhBDc!K zm1>c2K-#qs?f8&IggRNK1J%t#Qe3#x-#PX-6pii2+bxm#!elTi-O!OaP6ha-<)mj- zcNWj@<7HUXjjWht2s^546MCY4FxC6ofBkt#8-I;a+)nlr{^F8^dUJ<_o=WJ&p56i< z&wiaKFig4ui6FcCqVd6pnYs*|={l!SE;?+UuP+wH%tyUpM_+P*Kxe({4ZhuU+au++ z&brPnEvNlFdeOi{J&(Ipy1$Rcn72ZmN>#Q>194*6CwH0r96J{Q_aduu#JT@#vlCdR z|CB^EczS4iN&K%X_W!m_-j5^;&27`0+*}{+mtGPaJw2DTCBsHMN*G60m1c(bdq&;~ zEpHP}<~Ntk*3~AU`bYAmhO)cL?nfdm!&ug;LfoC!>qDXm<7<(9Hzp#attK+_{|&{f z-GL#0_1oenxE60%N9UaIyhLZCWP|Q`z1m=x;&cJB?&?kPX$nB)Q{oKBl+g^eFN&%9 zO0yKJ^M$`A2XLi?9GV)9x>UVJM-{gXNrWH|h_cx4oyAumu(`HI-p&i@tmaAls?RGI z_iW)@j#<{tp~%@r58uQ((5~@Fpc=ung6V`Yh+>e$BS}V(jsL$H8SV*C77o)4r^Kh= zl;&h4tT=jBPHNH{%9wDIyU{nTyD?{Eg`(-_!#t-&p^s%l`*Dr$JQIrbH^r8f#Gvfa zGY6^T^JzkLn~|AJE~w)hv<2ZNPKBqwBG3EdPbKA#;#&?fv-sca@?&C15>k694IZ^@f20R zr5k)j;dMD4u2F~KHlh&$C>Z)zcf0Db!b|qsz1tFEE??>FeYK5MBglL05A>r!Su<^# zHNTEdwnv-K)yS0>!jD0BC@6oo0AM(I-jhec9DZO%(R4-B(U@3fE5Q#8Q|KZdMXX%)&lrq11 z9TLTTQf?2Ft@gT@&};Aa2w*&i_q`Y~piN`Mm#O(xd{>Zz+M|#K5`0>%+UafjYYBX3 z%yx8RaJ6>o@9JnGiq?J@Ac4B3ZYwI~K|M?ek&76EOG$VU+Y%aDZVU=gX+v!-xk${( z>j52hl?*2B{dvtM1Y3BpZwWlr8eF#Hz8E*oKq+WR-^9yO+EJVi9*+fejC z0*ZCM@MxFZ&U3~KLJi#XbO9Bd?Ia&RPwm<=G8|`-F8jLJ*@MCRIPc3fO98Cq|I}!2 z^BCz6r_Sv6^*r_peIWQ5`gbi`iv^IW^U~9dF*0K0y%x}B^3}9rrIw3wjA9&NeIt7G z*K!p0@{Vux{T8Y{%OwL=gFl*eI2yHrS)64NO0^3Mcy<0b>#v{R^8;{Ez7I{jIDrXZ zH6(ve+tPcwh-@FCJc_nrDe$%T;14h~c)D*X;8WUMC!qq>{=lWi_D3>oWyG3aa?0tb zR>k$f8x81PtBCHwE$?cJrEQCxP$c_Ke(rK90z-))Iv&SkXTS-gU7lzL|1UYGJ6?%5 z0G(RLUBzN{kibF|LBa!8z9wGAy#S0LvI?n;JZfa!<%bfNignoOd>Qe~o1QUKD*9ls zc)@7te2QIHCImZQPERcI)siqokGWS)b^X60v#`7PbDWR+Tj9IJaDGD`O_iMZ*wwSL ze2BCG@)I@5{!W6SX9a%6q*$s{6Ua|GA*7>R8d|^sh-KUOa&mkCWJE?l@p_I8-eK=z zDSbhaFhl==$CdAp6DIv!V5YY7;Ng#b<1Dj~y|Ow@7LOtj0kE%GT5)Yj-mUr?o&gp~ zH1XpJCYdGmbHdUd6a6ZJ@8Dyb#A*1k46rl&}drp1Cko?)~>$i`}5);cle zv4$NUpS^=Dxn(gCQyKGCOy0z2wv%PZX$hY~sw9`a?S2P(Htx}TEA9H3`yT1es6L&Inkp?il$Rtq5GDNAVjVpAE6A@>8RnxG23Fp z2TS{oexYZeqo3IP6_N4x<&y^o&|K3@lnxB$ux(hWhExBx4*&p&sSupQOaAagz;{vr z#?*06-~no3IwA1jg3NU}6V+W3CtE)Y(hTj^yc7kPe$;W{-Q;Fh2iqU`B3)Xzk^%km z^EVdjnAld-8$()RCn#cDO#L+!gQyoqh|!qQ);d#A#jpbdadwyL#y;s=sK#45hiPQ3 zniRye79`v6Z6uX+UHNA^{L(dGqkL&^-H)~IpqY^0LQGQ-!h{3b*7 zXw)lCoiaw`9fJ_SbQtYdGXO^NWS!`|_rJlBcy!w1WaiDc1qB0^15?B~8C{&v=e3+I zx#zodkOE_cdMLxin5`m=pdGFJj{aNFaC_C6ZW`g98Rng)-Ji$kXwbzK_%`8^-)1ne z$r%>~h5!=<2FNJ31)a`WTpU?>F+K6u2e@cx8;aR^tg9o}?~8Xpne6OI2sydQB2_%N^z*z_Q#hdR82h=FY}E-= z@Z){{m}9ZfR`#tQaD?k>_%Av1t2wdA;Igg8Qy)x94#?K*3N?ajzJWV}GblEBB2F4L z?PfW`gMVgHmXhj!vULr|WycCgiE-1G@9DJNKe;YTyD&Tyq%^t(B%d-yB)#bNlTOTcYCP^NF93T8c6 ziG5&Y?-ep*s+%e#nrQ+%kj?Ws{;Otg4i~mj0iNuSWV8upaHMk8TgqHZWD9xnZ@}SF zlcJO?d^qT88*c?($)LRIXfC0a!}_c2|0}hEH#=cpA5@X!%45Uf3JqS7(_75|WpvSB zlzqJB^D?-}5lQ7D|MmFzG>*{^sP4h{tQ0522cRtT)9h_R-43fe{C2LxeL`wOKrlq! zN+b=4AV$u?nZO}3=bQM~_(>Wp>;SnjHBNkup4>Kysgy+$00DVlR+ElwW z9LMZ0%N~uKl|OEBadmA`%0eP9f`)Z+~;43+$i!P8{hkyRZ zzHmCySVk7~dbtm5^zMxD9PhYfsOiCdDBTC#1gnXd`_d%gnf83d2K?=uXVeI`JR zbW{Us_Y;~jFYomDCNR)`nK-la!P6qKxT>^a?%@1^EiX@4OLgif4> zpIc^pULuimoe$yfw;iDS<4_8zg&ZfqWIYnE4v(CNy7}(tF)$CCekMwWW^U4i1xd(A zi6@Zajq=G1=gd4(7)lK2<5od8$6e6s!6UX}N^C7VV&<+58%;(;EfDX1b4<}JH+#@$ z86#aX0}KsV9Q_GSpE+^AECRkjzVK3VqW4(ApqYuX&4h6+H?i+E#o`j$Hx z*@Qj=|6_6>LjI8dTF&4N7_wiYFHqtk;>dj}Zfz5O=T@|H^A4wNrs|LHMTTdIT33js zU3@ZQW7_4re@LDlnC{)T-KO0jF8-Tn(W5)R(W*R8-`wLS;K!ine_4g@uFcM$Z~E+q(wntpGk|WSwM(}+@1=}@df3BAD)+1B*rl{ z`n?G>d-fDFE1bF}Xc$!36^h#D(*eCAmp0s7DAdcqv4vjx=%aVr*v6~L?CegF(Tj@4KXd_;C!^GQ;0l;!ZCai2fwD$$ zl$R>{R5z^OO5zFBgSrrfOJkwwV$>RY^5D-^bFu9sdJ<`Bx#L2_MJc2L( z8rx4a&dUlMjb_luXzju?@^OuBYRZz8%8KFaUhiX4GYjF zBC*b%NA5%?wM@>4i?|o2TMO5^E$IfdRd$o~Tp>5-Nj`n3NFLP)>fJ ziJ+vvBbt@l3qd5jS+gzeUXlx>9GcJ`LV6b7Lpv=&8^!LhdhxDDMwTlQr<-6c%y3yyoXut1&)OhDB5yNY<$7DP_=-)#3SR7#21cz)m|C4 zFM0xq3_4P1oop=B6^sC|fB zC}-l-_MPFTyhl4HT4B#t7r}|C-eqnGeNeY8aYx?MUH?w$B|Xj0@Zv7Fbuk)UUx7Fc za-FlvyjrBh^-{5GUOs#@ieTF6PSQE;r6SZ0pe&+XL~Y=?^8 zy9c74=u&F#b>~A6uN`70_W|a7kgBc0NIC!16yhj#vpw}bqFQ(U3)lT4u!wGd=qxFl zb6An67)fMhRPAtSCKxok*+t3D-e-&uWl4p9)5q+4{?D9IYRvN@$oR}noO#-^N3 z3RwsFfhZiKKFmRqZtV)CuISXS=sLl~j+Bi{O0n=rNdFRK$)36{#2&=Srqa4S!0%+o#G1P{Y-Awk*9T{U z#z{Sf0a}p!I*wsFfoor&lPoKBr_Mp6=ur%zMh>Tj!P;7-O*a>K3ywu$-jT166zGS# zB>BWKwWeNGAI3CA#-p{DE97qa6-QTAJ%7F68SIH9IPjL>?KGWBWmLW zFd`-CDpt6C%aAp$gYGfjiO)HCowxoRMz0RzOEYa-qk^ZiD!~+g?EC_AB+6VWjW8}N zILZXWI~Znld^G90SvKPj%fnKx@HQNmRVnTr+q_T@T!8EdXx#7n%BrXC&T-S=;(^-CM#6^(Y+A zWw5qDVYtY|tPMBTT{nkZ=DJDje4*J?V|k`)1@XdA)Cz?_{2Nfk_2_>e5zXwg!`RcC zmuPmnyhcBdhnDt`w;+4dgIP5_eFZr?c45Y6uGz>lJpnoj?wh9(fPkuTr?>JbAAM<= zUk_e<|Gwo&n>+=0t|my?~gNZ%xHo5W}xa zI%wpEc@2i2H6_3Ls<4%Lv*>4-9NH*xbS_H$#6#fvOoWK!IK`sO@f)MoR|UsmPA%GN zj(>t{jAa1Iz%FLL+F<)~k0miDX zZ5dau9{Kx^ZTxC@$KxgcgY$ncF{NkxD9)r*gq5{Qo34hYxvVcJ_Y?}cRZ@6ce4BP? zq%zU4x{gI{9#f!B@0eyFG_p0x2-HTgK8!+H$zIzWl@uODLp=B}Z=@+Ot+D@?ZPzgH z7U&sWJgoF?332|8{XoB$J*-?8|D!FVGk92MZj{_AR@Il|PaHNAD+Q4LaMNZ`VHMBD zEc(l@y!W`@f*FcJj5!M?XyN(I@!FF>P?oM1Q2Wb_7d9RRhlX4nxWWA3JHZ`lWyS3? z@rs~xI1~@)ncmj7V2a3F_`}Iz=LIMcU>!gAqoG*xbMoX#e&=(~^GMZB50kTcbbE%3 z(#Q^s6;Bfl7RGJ{OK=U#-qA$q2ml750>#J&nbc$WC+fBk zZqn0w?Y;&8iNop`zZx}QAl6_6t@bI$(rr%;r5+thJUTOm_NcbQtvfLO#KL>Qw`guA z2TB?3GIJ5!qzp582a<|9n%m{_khbquFpXukKeWD=O5xseqS7{_+<*giGi=4AQ5j{p zmA)c9%9kx6-B@QN@u6{G`-=|KZ}0h8c~`HqdOfF6|FKl|Huwbulu0CA2|fg8@~3&@ zsC&+`de}|jGfz?`-Vj|Tgg5nJ^`$R`)Q&$pYn@--mb?1pDhk+#c{iVL-f6>sTAmm1 z=4j4>>iapB8ogcNxhCb*UvCyiiM2&m$%IC#vx!w!g&8v@umVre@w|=F*+xbt`^!=V z=h1pfXlr6E*7&#*>zT*a7L7m@&9FtpU^*sjhLJ`e+4D-lSAhV!C~#UzYYz1->o5T@ zF0ruSU1MRuy2jpAJ}Ts27ZuK4=o}-SqoKx-E5=CnyCjSI7aW+T5r5`o_Ko(jX*Vn% z_6XOmqJ+w?|YWB z-O27FmiU`C{N!5a{f6RDHencqBWFsBl_H~(%L^GvbK8X#8Y(f0?H4G zQDhNd=1F6?83DxhafrtGj0OYQs~Tz;1Hzz!z`sVD(rcTH)KeJ; zs7OD?Vjy4!V|7web~7}aESnh{`BA0nFlspvr5F~*l1Zg)=FrXsWvCDRW^JMo(6Lab z{-CrBK@7nB~|)7Ye>J-goq=X8$vGnm9`fhI1PGz82@pnXE94xh9%xcTa7@m^N^@Qrb5v>e(Er1 zh@Z43rVb*_jL`Jj&ubV}!aL+ps>VW#HGdZc0-fJgWyLmGPH5bHMbH3J>=JvEV@W9s z3aUf;5%_rNlv}Kjv%q(uPXY$6xDGAB>Gd@1U9G#NASOW)b0WfP7EQRlHHMN~sspq= zjp`4is`t`futW^xsxzS;5sW$Z+O6a?m6(KHcO0*al!?66bog`*_Vy6zh zBP>$_=Ex~G3!-Tv)-gDB9CTe)#!_55r9|qQa*KSaq#RDsWI)wgh=JiWyN+TOS5z(F zlaa-9{g*E_I`HY3ZmC-z?{9CtYjoV7QF*xdKNs_*4B@fxsbq2q5j;FJFM4!N?HyGY z^=vSQh$&I{uD>KJV^VCdrS;t}nz(^2fV{MS2ClvUVN5CQa|hO^gN0B{ww&GpjFGL= zHiH@R{0r1~-i43w#`1w#7E0GZH4bC>Oa`t}p#!ER(?7=J3j7cC4(OEb3o!4KYXdx) zgdPgEAPt_1EOStps%D4rIYLJTnu+Tfm-{gM**G6->} zwhC8%>%kXBOwk$p(`n#lgD5NgDh!pxwM8Ajh%+Q3BbOBpS?_5Y1}|Ac{4FRBff|rP zlE8Zm7XYnlsU?DTWoE=_vw$-M&R>z(X3qw0c$6f)#M_tE4HP#zejgr7%@=A==Ar@n z^x8qM%yU#GIZ>KJ`H~Ds_~=y=m+G(@nhp_a20 zMU>E-DQi!-ct*3I*dn3x<6cXMS7ouUo{t*$7>RRO3oxahs4Y#Af&_kb@2Ls^vYX_s zaRlv?!eEZh?$pIueJkhJ`uy-XXH>wISmtPw8o8P76|B|v1mCb>y3l6Bk0l9=MH)s5 zWu`(4Es265qnxfAt;=2Zd95vzY$=Y<+C z38g3)L$mgb$c(sUAR!gio7shsb%ZR* zX7hw}HNa$^Q!8%!@LUF)QqH({KUR%#1l>U*N!4x%*Yr@u3i^eQVwf;?B{(GYTzU>g z(_<(InM}yC8X(*F4kf?6g$8*PT0_#4Q<}Z!QW39QL7S>%GoMpBoGbhmTWD65vG1)) z$>>Ly3lu!MJ$89FkqS`iJBjivDd~*xMk|dXaOP_qMB@t(#g|-Iyf${nOr@+jrEF$9 zpas`qeH-d(BdAigokl3!>3q*j!)ZS{d81VPYHDDz%Q^@H9B2lr;~4v9$BZ<-MAUEn zoU4O0z+t^rPcfaFb=awo(|i2=d_C9EuSqdb9SjEK000291rC)myv}M?l;QGLpW$gx z^)>d056I3H_86;q+2h3uAx!oWG}ey_lWbh{LzEJ!diGG#uM2y&RNS?=$T=~$AQJVl zVVM4pX%+D636+&WCDnOW9fIAWg?=-!oAOZt66TaWXs6RvdOJSdC8gHmy12jfPvo+} z(0Vsc+2;uBBs1{U5;VYMt+abfI?IG5)h-g{6L^I*LaCXz+`nF1R|%sw#q!EPVA^1v zoQ7CR;h~6%?dN;(02a)8rq2=S*iy505_l{xb3Hdu2hDHZEP?<(kyoqwx#|+YJt`uv zlMKc_j~Ht!oXVT8`$VCt&mj@}bOPxmb&$H;4^|XZYhRatrtk9Sa&NzaVs*NFfN8TeY{A(I?t<&( zQ2#@K@EBJm}d-;6Y>Gf6)YENo)g;X8Ol>Dx5ICsN(K%6R6ZCe=bHj>d-7Qq3lvOD8CKN zEwKS80N^^33hQ&oc>=-RzzE6Eez^PlXaS3(Q4qE=6NG)=hoFpvf{eG45G8v{ND%#^ zNl!V1DgChG*<`>JwZTQr@9c<~7pXvx75*tPuS z*oL)TL@@FXpE(`P#a!tUn2M4ePN???yDPnc#-4CBN;A@QgX^WR?is~X412Nk`soj! zv_P2Dh^6E0J9tntW)pif7^RQw5XGn)P#bLo8i_nV}@kFriGC6z872_HoxGAm6aFGW6OSoeZK1H6`p%riq zc>zMj%?%|pry9g&jYhdKu{nO0AL)%=x}oph3|qHJZ;10C=}Q8md(w!7jSfR4>g=0D zBLiXk;F=8*xBj7{h^ay|)WKNPOTS`aRM zx#6%5X44lF-4c&5N6kT%{w;uFD$KNl`kOuPa|nUNK~2J|2|2Dv3tdX@_qLZpm^JxmXHrd(pk1~s ztPk?Tb;)laEvvAM0BF*>?IZVY&MOMbxD`UZkHY?A_G_}vI>`ESNDGDO@e#|<5HD_1 z`|-3NQ@Vv8!!{fe&uWE2n$Fd^J-@j}i-g`|$=XpJmr$S-m`(2T(-pF(dSLjgoq7Zb z)ZAym_JTLovK>~ES5Ot-QNtVu8&uR%MbkAnC;Xg+J?s#_!~5Dd>9^^Wv&sH$nQ#hn z&&hltGv|!sPGQc z*ez>K&o#O78nQkHG?W_G^@hv7BGHw2U3L%6Jw z9Yf6+GGSCTDFNk7-p|+--D2Q}a{_XFF(fHzjC(JoS&vsc91I4lxvG@|OPW?wz0&KP zBob;4pUMurqsy}g9kE_{vd{P|w)#s;_A5F233b5QU^qL3v>9~^ag`%Vg1u>q#KLC! z3TKKJJY75+M^M5gDSS~{M1ObW_3(G#Sh7=bfnTxgnZ)e;jfM+9lXINuxWW3fU#HXXoIF$S@@WR^( zIa&xaAqYol0}%BoaVy4f>zyN5Cr91B%=e@{C?rh|=6=9*`!GBu2IaY4&#dqP_TfN_ zo`jsgu$(Cf+X8C}Nk7ew;SU-5ad;S)XgL8J@HZzby4MvJVu5;W1QIl#7oR?*7~&|q zyu^kPjQt_|gD)9|wCErcM)=!!U|ZoVVGZGbhhlRvKd>dfH=7HKLR$0^f+$5g5Oy_n zfMNlq^LRmfWbZdpI`n>qOjkV)gv%Sh2A^EkR$%g|_+Pp%fBw1YQRSB!OaUNm6Y;6= zr=p+8X@t_F%(0eS?kesqFcY_D{De?MzA(XhQN44MhgqXWA>Ctv`JdL`t_`2di!FQ& z78i3rkEu*(HOW3yS^xqY{$gZ~z6W=X3w+$APVbiq7coi2i9vS9tIS!`+^nFv2gQ?q z4YVmuBn>ccU$h9GX4CT((|k;OzJir46{$YpPlgUjP`t6YwwanT=uU@;-EJQ1LvR`4 zK_9X;63t|7VBuDs$TWXmS+#`mi6v-eTBrF(EIv3($M%Q>e;sK^-Yp?eGM%R7ge}@* z8-G3z{G?d*UcErzI?$>?PKG#835i3GtmfanAUd?f5-hFyKMnvEF zu~X#Cm)V8CO1tes*WzE4WZoFCWKTS!ylnM%`iOhJGtkJ!L(X2638dbdr9NBQw+Swu zZb%jVP?lI~LYvKBP2$eJTUF|P-wS*(Q!67BX|^u=ME#sD8y{fGvYN`th;kJt_0i6h z#r$C+U>aDVPEhyH{zO;R>^grW-F$qRwEB#Xe{kARDV$gxC_aDdknf`z=eYCSdE=Z^ zO8N;YopV+uP_-Tn=g@V%jiuBJ-M{uY7h~HPKLbc_7sUS409mO;CJcGl8Ba= zW~%^^)O%F1iXA+I5b_bYo@KAz0OTtE`hJs#>KHjW9?a?vH@H}nc=Plth9dxZ`xhFn z(*gYw$Fn!q6CVzUPaxG$*NR+lA0Wc;qRzdxXPVvpRanm0!`!aeP0=# zRyEDe^)91?>V)rwr9To#dpWG=ABaF`Qg@N98dJRW!PX!&F{~m+<}18ea%Q$Zr+e1) zfztSvp7IH^OHh@IA?i9XK+fV>+$Hbyg0XY)TgKdO#eQbxkau4QQQRK{jGr`;35L$6 zJ zc&q6Zq96K44zZNbcZjjZn~x6{2<_IN&49>ed=yr$WM?~~;X9+Pdxr$z zu@MT$V4eHT(sVW&5qr<*5PjPqi{_VileW5%`QVJq-6|*?EHH(+1Lth!M%qhSv zN^%F+i#cLj&oJ_hcSnK3=$gIKY@}b{61qIhnQ}o-&9ch;P1TBG-7E>cKSzF%v}xCc z3iSCyWFPCGu%-C#sp&}BBx8M~;h``Af(yJ_F9ijhmjPhvogK-uRa)}ifZx*WuLI~_ z9d)t{;^wC&o9Wq6T5j1HxC~Lx)an-u`;VAWeS13)pvfv=kAweg5gm zeA(0D^*(Z^Q=PHoLa6eF(=3l8c)9*Cb10YIV3VolW-LW2y`Dd>UojqJ&RsN~`0GYz zxA8}^{9Wb#s02QgpH z`ZHVkKAzit>BtZt59KBt9bwtlM}>&G;OST;z&YFoZlDEC81PCj?FBA?%sS7x&!f^& z_cu{Z^mabwJQB!~p7cD_He>89dq%U~b<%>8t1s zInJJY?*5z(K*`@oj_LaAf<*9%Csu*3ea4a93BivVNq)3y>>^U!5`sE& z5iSg3RS#QAZa)H3q$YHx!y=a*5XBiw)>x4O)cJo>cZ*yqS@LtEC&bwWSz+fx&!TyM zF!Vlnj_~|Swtt($Y7xMlJ~z0iswu(Y)bEY4?G*jb6`W3wvOCeyqCtlpHo?NOL3K&+ zG2ZM-@iv*Zz+-j0w7wL0s&@dSiJ-7<8U%wOUc#+`A|a2{4)NhVoG=uZRZ^S$yg>lI-iMdkt<1#x z0dW0l0!a$Ie9Pey>A}U_Q!mv!JqvXdPfw7e6OnFnf5RH=l1SHwk-&G@Z*0;;^7Sl6 z!Hg7VHHu5Hy}HB|_(u^ymV#5{gR(xH%)q02yNT-cHG%8CuA;y#z8h;hn6glSD4(Hlkt%dCZ%ZDW4&L5fsN6gx)8I=BCs&4PNeer4d|1RVQ zP6y!+OMMhpzTvriV!mH{!A;7W_Vt_{a(4(4+!=yj5+yj=rgq3oK1s^<{Jd5qA$UZ*uAAgSW$bMS# zT><7d35&qDSjbmWYPn%F-)gMM4m<1cW}!9NGWc&4^wo+5=mGz52@Qr=SnDQb* zkdDvJ^ohpjOOQ~d^Qr3+H+d=Dm^o_Bf$3x#6ad431U?h3G68FFA#c+u!RF<^>s|H< zk~sX{%zaGu5zGk&`Q(fEQD$WlwmDkD2_8V(Z#i-%Y)01GR-=ZpD)EO}K!^tPg@* z?=4tOcdZF=lYZJzc0kWCvDe7pXp$!-x+K^(Zeg8)1$wE5CQKfcLj1ta@n#4gSGyRc zKn!ycIoj5o`Cp#TT*q24=tF<`G- zJPSMg)X-KwO&SLk#;g3rs0I*0voJk6x!C{NGl>Wbg=J;)pUY`j;gVHSsovGCd2`lR z&jw8a9I+S6s#;;3`su+~Wg?9z!S3fks%DAVgk8|7#?ber>qb zX(r06LuN1IU=ISD*EWvoN_@}24=`6FU=*P?D$_i*-w8MSYZkfr@d_+wgy3M{_m+4v z{Fpt3ad_61SX=Lb)PeB#j%28O6Uh}#FxM=8K20>3BtrwV(rNm{NidTq17GXfvZA3g z*Lp?JO}be%KM{D{RgaK{sqRiYgzkklAi0Vlm@d1Cp?VeE)JhRxMGEDA`rE0K^t(B% zsi&vIQZk+0!u=1Sqzs$$?DK0TB&0jx!HRDmKK%^6M%Py{)ny@ti@N_9CTz)N?T=(n z-mW%EV^O~X;3!9jY-}~+6=+N8Bj0@R*cDi)i0xG~D352<`TPJrE+hLMYjkGLXk{H12w}KZp%b~z42P9R=1L>R>gR{#1 z$`HpPtkN?#T2)^HcT-un=G=_{+E(p|r~75!14^mnerYnl67OL_7%%Dh+ZgKIv4~vo z*e5yfiXqWAnT?6TDoR8KXzTzPxbt$>ougzVA+rr%#6$(`R;WA!?Hk_Y5Rn*5k8i$8 z5kEc>xAA;T=E4j_Oc;q)Un*EN)GspQJVO)ilcVAa1ZXCRb=+2|H@e&746mj#ywYS3 zA!Y%M5JHjbo1%P~Y6UT`YicH<{0XbBY(b(Jb4^u6W<^uV;Er&G>6e>03Rs;j`oeRv znImJNd}yq5D!+oB@I`*0^UbBNqoY@$EAg&mDtBvBSny$TTiVkM8F{elE`eA$&w2@G z>{uWG>s_*ph^FW-1bS9THn=CNo*fVqOh*Rgk3Y|I_Ws~!%5umBtEE7RAOh;c7@AF% zQ+qMKyE*9D>wP2BbDD7K|I>^_7!ZALge62Y@elD;${CQZNnVi&Z*3Gh>{z8_Yujn2 z>bu9c?FVOcV0kFIU6==oFRd&HuvX(bvtD_L@z>)SNNC2x6P|YjvpS_xckoraeUNzA z0Pr@%g=4|WTgX%A>e0V}C#)*j<_(-Jma8z^^?&|9Snq?c)0dY%@Q-Sq(I{-{35*m<0TBCM4o(Ob5ZFOsV6E zpC^vHYGS_eC|9^KskGv??q!Vnk95_#f4VsF?%;&U83ZzRoYT~!2^N6yRt z6*UzbMn<5GVSOUj7u4}jiKA6mh|~ZW?SB@B&aJcx?-$mMbN}V2*Fmb+H|@;|{G7%z zqB_EYHz}+iC8bveh6lY1$7O_~$*vu*KAZkk7q}Vjujr%nV8#2<`0i81cZ{DvoMOl9V=*tQHvUX6owbac=)%%4;q<@r-b&>}aa$QB<_i<|9nfT6EVARz z4tqJg-70qyL zX(^H4fR#ae7ZistV~xk3C)xNX{{fvYIInqiCYHLj!Kmg_ZkGOSw*EbK-xK^ghI#TT ziwrqz)^|n&U@fcJ!YRBhZD&lFVSs_v4BuJRk+a<(fC!7KS!hMi{6N51=CVu)jHbe7 zUt)4p1?}Ve)sBR5z*%5UYTk3$$B40$0$nYvIkR=kZ=fo}oAJ-CR4wZrVVP zFGOawt-fO+Nzp(5Odyv4PW6@fPlEj0mDEl;P@pVHdU*|z1LDeR0&Tk6 zG3&-VAbvW6iTLC&yiHlz_}C@v?GoHh_4X1ppxpiS1CGHw!PTyIy6qnHO zmEl)3!(Z1pJ$w)US3nWKpU0kyJ~(Lg!l9M=SvyvtukByQdJK*uHf7h|+pdal&W9hj z3CnzDf9WnGQGfyC&%dFEw@#Hz7JL18;&9V0`X91#5S1DSQFa`D{)lM%pkYVvQL>j1m41rmnEAZ1bE3j6wc){%qhc*rmbg&Y+e5tbDrOn zc8gReRJ*B_uYrv$VR#v$EQgfrIW2s}$LG9T?iq_>5L`=~)zm+y@fe8|ecw;uZro9wd7 zupJ~y)Lpp@^-B;PKCDZ6lzO;rYQQOP+Hx7mf1L>5z1FbUO9 zQouqnk0`w9kaS&k|2_2w`EnMGBtv{H69|=*ay!imPV!^GZ$gFp>w%ptf!fL#{TV2%FoWsS251ubI;7tTY)5CLa1lsHS_+D;3-*yd>=WMd{b@p7fr(tW z=6038p@Vw-1p-5U5;f!~hiM>1DZe)5K!)r?#sMmng!!SrXT%t;O5CdOMtc<|lHrHc zI*a4O+NPw4f=TmK%~a{^V$fs!$91zy(Wr5|&Tr8+|NKGRDWS@|_&K_fb|sy=dP%X(Dg}f?S%9Y=DtwpcqL?EXAK>D97nUyS#7WOHgaPE z!0`J;*2VwddQfx9f0#dWDd1$N`S`mJfrkDDG)smOL9IKWt>gTy5iaYk3x8sIi!pHz zUoA3L5+m5Lp{uIXZgVz5e|Q?t^78F+vMzMd=leGuIV8$yQTFp@V|>xbhg$7uz0X)f zO-lEX%Yb$O;g9X){5-dOAF9hQ3qBJ0+ z+dDSBquXPm)74tU|7>@eduWv;XXU(7&o6vNrUWzmq1^k5k#stlZs`eGOsw7A75@%!Zrv2 zFFF((!<$0#Ve4t%@-F{&Y7R>mKGu*SAQBwf*}`orQIs$FGiyCfDUdCnL(T}x$%FYw@c>{CT_2v4@ zm_2w5P;$MBc#yhU6Krh@!j-t(Q)G;isa)52H-I?#gerc4R+=F;5a6e06~%voHs(VD zevL@Y?zf7FLUR$Uw4vuHcT}XpBWVgMIgT79QEhl=y%%RQSZ(lUQc7dv=!~x5HvZFA zX__NqDR+dTyTfpL`f;9roWe`#^Dq0Zux;;5B(Ba&;d`?EeY3V^o^dH}xT=3AoI#1v zDAaW|EW|N^oo3pQ*P}O5g$1S+L>w2R?;abXrjCeTVtQ4x0HXl8r#6;8Cu7S1MyJ=88iWB3@6V%Ls^;p4lZ(YopuW+N zHyiS}r`X#`Q8CZGu;S_}yfw{`z({)fiIOV|lpSx0LTySRxqAT(;a3(z^N8rPAKG9U zbvPIk$z?tg2~6%}-D?bqqLEFYkbX2{tbzley9+F0%O+7$&!c>=*yC&(Z)*@{Ox&+V zLbEh?-1D2X7et(|O6DC#(e}Ez!#z*sS-6Y3(@qMXnx}XU(emda*~ydWekRlW7X}~4 zgA-&<#cQuO`E2#NCxa(nqDM8v=Toxy{93Er!u>`-7`G3l{V>FPfZUHoxBY6eVV#&G z2A7zqx#VVo>#3N!$%95eFZySyn1s%Uk<@D3Epm+$E)pNd)Lh{+nx zX`_RuK=Wi3G2-p$GlwjzdLxcrQ}9+iAd`A>ofoA%s|(Ig(e^fmGfK z(2$M(iUkJUD>D>*wGQ%%)0mn{qL^O%wx-65KkpqJx0ZD%(0)SwWwaI^1MM}M)>`=i3lkCYvUAA-Pd*iv&y%=??Zn& zGh-r0<<~HtaYg@u;NM{70AJAjB)_!^=zjv|SKw$@K_Qb_RQH8BgJ#6T>xjSTEtWq7 z**2`e_Jtgi(eHg~1>nex7aC(SK(UPmgueF8@#gJk6rh1BkiJyh=cIo+CC53{G~Bn_ z)sOTtwy3|fY!yA|_;kFV`MHl=0qMY~ouIkHx{|DKOuz3dj{ac=q?6K5JI@&C4Qu2^ zzMEpKi(65;Ik3@}|>Oki!MXe#e}yT2|1(fI=3R~9JZfs)?;zqg#%uQ@TL z;roU(SHdpQYnoW5O)4gi-ruK4%TI5AP$nS6R-!l<%NTwGJv(!>*fi9Y1;lJn7n>C_ z`RxfpgxbILISz5otr0_Ez(OdEB|`)X>_?QUxh9fD0o~4%$r`pvwHAiK5dIblP#Z}`G(PmO`x{UyAyGVQ>JA|Ebr&!0_fW0Qt2?({$ z>%89?1XmtZ?1avMV7Vig5vn-NrlO(kW9|ZC5+6T3c)#9}s~gj9QEp-xyPn^Ue;MTK z@K~3&z8E6C_SU}>oL@fBLxu>5f0JCV89Fy_4xGJ4>eKwUy9dV`14Z%Cy`ZUr`fQ7+DUF`ajtdy3ng({t$&O;$UMP(GA4&gY0o6<#r)bu{XP% zT;e+444~#tvg$l?uYo}uK}SYPmFxd{xh<^f9R-LuCRR2l3S;V0E?Mmz+1r}=NaLv8 z^k%k2xdPUxs__^;1P51jkU~EZuFc^;zkHT-*)V&^aWq|+8T%9h-Zio_;x9cX?4rC& zviA1-nF6~>THO}*^B%stPtQ+9kdk)}R-=p~)4f3qD}#}gj{L}w%@563 zWu0aiIOuq767GceVqlZOAH@_+0!vZ9sN0FHBD}xRB4`*NhrfIi-x??+^f|rFsz_(o z=%Pb`?=>CPfvF=xo(u0qfHm=#Kx=p6ju1~|M?*d*HvmoI1q^p2d6xW@=6^B@k%$4x%Y4aYNgtVKa^YE1 z<{Ca$kUErDq^2L3a9?%CI$~O>tnb6>3QNun5}#f*R>L@xlkh7Ke&x$pWyX_6>%}u` zKhNHUgZi9HV0}CnjA=(-y84!7^#?EFt zNuV5Hu`o)cFMmfX*TQ_plYJo&Yv2&=LUC!e0VznOg{D4D5I7n4T$sKIExh@z zON_#ZRNX+q*yS!`n^Mn}sEKn44KBtFb>-~N`!9RfO+jmK8PM>Q*oPknjezC|iN0VK`No7@MRe`P#aUBU2tU<6 z^)sm1oVExT2`#Q#Jg?NOm&4V0CV8*r5+5;rrQ@J0IR%WIRVBP}0cU`!s0Cc^W(Ot% z>*d-i0A>o*jhO#=@?sgh?VknF1OE#U{39aqX){H*FdH*CM^nZ8Ix2>ARbC-YA$H{o z!#iLvgo`;uocK;P+}QwcEEl4T;3_37WULcHtAF6dpHmnWF#Tf;h3M6<7EWWrozHLr zLf`&OMV*COfZaRgd|pvcIPGlOMmT!u*o%Huvz{?IJ0hwg`EUg4N5;dz&(xnOTN5oJ zBLt}B)5|mZ-(LPPQudgs&8w}ax>J(KL; z4XTJ11c%aQYSOrWxHOT!`!8!mmraUfyFxgFoL1ziR$JGu;Z*%5#iqV@A})J(vg>Hh zW5I5A=A;szQnC!>5FwZZMutgPDdMt`_VfZW80!qTpmO9* zgNFe%Jw{poz&|Qg%N-H0BInI&s=yHY?aor5h-3qY&c?7A7wVe&bj^UH8=Y;~Z$PV2!A5;yIcy*sDH%{?dR->Ma*U=*-c+~0lbBUA(dY+Ym5Y_RpNTCE@ zVD|O`S&4v3#h&&t^3h=GD?xUYNetwUr4p!cOA9cDSLBpkMgdFU;8F)=+N*ia7-5U6 zG#kxV!HwK(r}!Tp+WTbRin6rw!0WPQ0Apsw09cM)n8uR)|2JS zt=h^L#x(s`MAz#7s4BU`ibNBGq92~9k#Z`^*ctMSwZtVeU+7e)zvQojp|?u)(Bf%D znklVCz}^7veu%)q3+T}!DPLmDQ(SDd*k8@8~s(TiFvg$lS%v8FBwux^JsyCk{{> z(Rkd^o`WR?b$(inr!9TkRiadF%sY3xLt2+Nz~Y?5_857+1gw7>-Mb5hfCycwP4=Fm zi(OPPSDRyB)@NU)os+rNEfE;SryD@D*l2Fv?lJ`byyM6Oi2_pefR4DM>e<;q$i22B(iIuQ_}-FF(%g8 zX}aZHate$QCrRR;B+1qEJ%0DOZ8ql{&E8OVg^~AKIegI)4yTUml1C?KirhR0$4%{G z#cAYL&@ZQ-&_^?2HFT z6M35vWNy&BxZAbD?4Hi_2d2L<`@+9?eXBldm8i{Ykl~7(DiEoJcnvX zr+EybhZrx=h6n!y%D%5hIsR*9&y$K%$S`ROS>Pw47s90NEfop-9mU^}m@|Am!)a9R z2=?twNF-SA6GUP8(jXWy6G}H1E^ONH+UrdHm_%uizPUnjtP-8t;`6CEg_@hn*s9X7>SGKwphq-))?{EG>8}Q0Z;0xJtOEzl>ioM%j1tR7ha#2aHZnR9jx8FN)N`+hyMvjIV!$`mtbZlp$9 zdbYQTiQ}9_NU-<0WGM(^=A)#O9gp??B*9_1v>?jpZniiA$Kj0NjSdQ2=dapRb<83} z9H1a!(UzO4^y*!u>Q+nl6uSezorA`t73cV=a;{uAJSj0IS7emkKWbmbFgW0a*N8>*_8X3` zjW`dhl2p<9(x^G*FX||e{q_Z&YQ_IFs~jDpv-mD8!JB1ivqbSTNaT5Au)IfAbwU0N_BC|9Hr(r9`NLT=DpzKkExUV7$ZY8I&3gl}LTY5Mf7BZa8L>fXWA?gmB zbRDS6TL`QhhG@+gKm}Kkt|Kz*jqBcCD+k|e(`Lb-Ie{cL})4UL%fOT!P~Aawn^S3odDMT$2)`W zd`*#~FH!08!x`x1)@kB3b~We*b^^I+1ji(KW4zmhDXUWE!87||-Q^;*WPugXg@>MY zzr10J^KnIvhMPaXOZI7WXkviS1Y#v&lkq&mWJsFa2kPJyo8*opq9~pAw8?EQHF**k z=^X+|-$c4|qwnvsf_}G_qff5b$?NJnLA-hc6kOY++okviWlLs}un9A9Dj%qc(#xS| z))np_*vN*Rpn~*sHW!wVLBASvb0#|v7$OokgX_bwsFC`RpQFmyb;wyr&#VkhE-0EO z8&o&JJ3gBB{H9*dLj1@dHaCiRT_8cb#WNBMv@?dTZBg@WQ;Q*l2nCHP6lyks>RElX z!|s}T=Rbi$(B3!ZXE|*W$4ttlsR6~AgY4zjQP2aXv>gpZoRJ$m>3lqQ%3J-?vEdGQ zXna1F;%4VhgmVyqbLX|A2Yi8pdb^JkRtRoLf$dR!!o;+VJ9mps_vDVN^0d8wq(6i{ z^EG9E*=VqVdaZ1}m7js>+@i zClpVF@3&pt1F)Ze^SZOUF6)KA6oTinlG#8T1jP>ogUZYZ&7rNEv#e?>M8S6vpuwWS zD-*AuHtYjSB%1M16tk2p-ez|x5Ee}`vc)ff@!21%rgP_*4}Vk@awOs!t@5H5YqEcz zTBc~1iFBc#*j5tRl*z%^CZz!{)$ z?6c$_zvw358FXk~0;O8HRw9Zd?rGv;l;uxS!c3aCY4t0PvL&TtW$2suf$l!3Ktu|J z5bv$pTci|cp6DYX0fkG0&DB!M5k3==(8K)&NDhOC8}h^;srnQWibE|rE7a6|-IyuF zsV{ErGDXo>*S*Z7u<`&pF`i}Os0dOIUwBZ!oo7NU;AVpV?}R-CmT%c<(Iygt3)ncG zJ#n&dTv&~>Qe}{tfJ6IbFXFZ}$Q6c@4L9llyp7ryhzC}Dgxa6S)15{PTV$_x;F7>C zuon<72E8Z9p#4WuDysDQg}u&_o=HYB!mHD5Yp$ry>6v*&Lz~%FN*+b)+LFW&)IqXa zBG?9k#~A5lyx?WWbsmcDJ-{&nG0YDHGAZC$gTsLMg+VyWzK|yHO@W2;2#q80a<3S# za2oq0JI!~zYZ$T#qWlsqV(lf%yQYBIn(2KOuC`wIOXRz!s^Ku9-Or-Iu$YcR$9Z80 zGeoJ9_GWv}U8MLx;?iA|q7jY|rC%Bf+-aXAqx!e3hK=R}82EJPW*ZP|tK)UpNbUOU|6%xIj?vw8{iqr_E zWsT%<%X4L&jo)RbuIrKoOp&2t?NQI_fNvwMLLY3Bn~$f@5qzbHsM$YY3>+@-Sf54s zTZZ$xef#i5ttPfH^$U+aP6#v~jhmXM9;A{C75yQAyP!qVwy}$h-n*Za6;=VayWkaV z1yxGQHhAZAG#t$UXFNI#Y2Und(A3x@<1swmLH96#4R>g7!T;Lh&+tt)m@D9I$#<8Wr`GwNd1j%B)i4iV5r znC2ab6bAv~^a9_4JBc5W4zrLxTdaw9uIml3a(0d^hc#^~x3$WG;U4gddgv=LV%!l9 zUf;^Zblt1`d|_aXYEw_%5Vhx{$@-1Y0Yy(rwpg3Y!fgxicO` zrKu3_OL32M<%^h6n#-(v5Yz7Pko2>gE;A9i))n&r-dv815@*Gw4` z$bc`PaS*0-4&|sthqkl1rIwWcFP}#((W??-5vkB?3@uYg_fyS~a#y5SG0Uykc?dKgM(k@`YN}XLoZExf9@w z<-&J)#Y8l^d2mv!hmpb=izRP4pHe{A8=oiqhh+k;#9Y8i9G1(+O$|ye#FHpj z{#v3fP$I5{8AiVnri4d=jfO#x6lgnv=|j#V3hS$={>%%-byc3}t~m93as=O&QWqtb zOn5{;9wi|=JfsLd@vigWf8C@HB%Iq0LY1_%%VRjTAg<3dskmALNL@U<%dc69d zSyt^0DnnB2>l1_dcsmqV>a?kF57Vym4$qxftzx(0j;imt6P(yW>g3J{hrTomE2bSq zW@pajo>~HDS=(_=-E%=+U5YP=HpAKqL>YO;rFj`|L~7elPfK#zfF01R?6Wfl-OK#P zUp@SgDLjI<=y2zk|762Gh6pa21^CM{dw)cLau(ani>`DB3Dh`2@qx#h&%#NXf-)1) z>wRckGV0o!b&doB%mjtnpF05y{O+1qx{CeVKxewrwh4546MQ~pH!Xkk=6iH+EO)82 zT^YIo2duaN5IKBL3$*HAAuty3_%BUTmK0+Gs9J2Lx3ncv7de(jxLL2UxkuC&#JQ8JbLPdBij5$9mS3Ph|i9WK1Bj(je_Z@%@N6PxV?_P{(7;gbD)|m^h+Idiq&^4BpoyTnNjL`un_6#~Eq*Y_ zSr4z>go=P8+bPz{e&GkP+5;QPk;~BcUWx}EQ4$|U^c}ZCBrUy!UT)ky)c$<(nvNW> zRoXTnEav@dbP1tDe|>IEQb#FPRHm>-$=IC`yrZWel2?NZ*StcCL^$pIwNjGYEwsx+iMC}4 zR8a4Klg3iY7eePYy>I&W-04p#pZG3 zlD9>v(9a07V$=Wy9FitDCa(>Ci-2^>{LRQI&Og-Pp)Ywb`)#d33g)k6J;13*Un}*dCHfq$>1JK-Alq%F*=hm&FlZ%f0g=kB!|HQ-;fs&dG$05EzGdUatTbLlww6z?oUHP*WJehAH@D^X zgxxdcJ}QKi&hL|7jlfe4wnf#{wfy-Tkv(-1?Zi+QbeHq_k04r#Uzf1Thk*bk8V$+i z3HHWOt5N7Zw8giE^stYb9?{C~BoJL>$4JmZ{(DZN*MblC*0n1?!(GWEPx=`8f=-PW z#~)*Lu|H}HEOR4BFotik`#>U`5DkjP*N3w`8zrYgkKg0iaJ=?S;|8_+dKIF?rzLn> zB2^5X?2W9gIElp6luMjrZ;EP8?jbD{O^D9wZxl2kc-q^MuZ7q9FpPziPOHB=B76rr zz?LeeYpijG?^V4x{8e-5Cjtz+4-mW&853DDBM#yofOwyf{2K;AB! z^6pHOi|JFTbED*RxN%8HuXS~}WzScbKs*P3X<&M^bt9(J)_AGpSPSbMvUcM1x zaYZV$(g*NBz(A%l3c0($gBv2160Ggv)7w+X&xnAw0N2w@NSaQ4k3Rv0is_(2NQ;Ow zcc|D$1wI4N0tU*opA-_S+JQM0>qAu!_chjeS^`wD6+CZc-)ko!qCqrj-0(-I_E=oL zJlbpi9@tW3k3pceC9F>-gaPZisD*ZOgwB0=G71N*-{#Ql)dq-&OucKxR(LiMeV)YZ8+zuVEm3IU?d#sSQr~^f{&$`s z*P1$xspq+A+HVwz&nt8&Wf@D3h7^uKZwE9fAg<${Jddsm4pV~#i2P77P3r}K^`LvW z)-7z}o1822VUSD#?E*)u_*$#W@F`**-hpWgick>BYXj>bl+@P zJ)QKrL)+0w56wiOEY#6VA5ue5REN#RCtRo(+s};YBS?;{JPLu$qewoWe1=a<*@40v zV|yWQ0a_Z82a@)zpf4R}i6C#2W_;S<(XE>1c)KvIm$SxiuWrU{jT9mH0HTVheH*~XOA1tVX7tqHhNu!oA32aFY4*ti0xWP%U9=w*Z_ z#H;4de5d=lFY$jpxC>0F1h&M@jLZS8{Mn=oDjvzJsWIlT~r7fEYW zN?*C$V+;_VfFkLh=gm$-;vPlBBHc-|7SjL<`lZL6W`vR#hQ;G3Nu<|m5z&I>tLC!& zF3-6VuU#LG(su|NYs149;i9Yk6wailM068Z%mlN)GF05_wm2sP*UD7OVN)atmAO!H z4nkWwFh2DLK3F7AVrKN+v&_Sn$Z4zSD9-?kc*!QB*>y~gUIORyMi58udVW^V~!k3puL%qc`sJF(r^h$rb(j``vpM;T*jSl^hS z=s^u-pE6fIZWetSMb_EKJ&u0#R&qLzQ>OuU&h`z5&9kU$$Jn(4c0A)j9g;d(b4pxc z|F>01Nti%56lvYnY%Gv%3vLB-lEdkg2TU~4iwNDwJh5upjohvSBuK9S8?~O>?*#Du z)}mN0f=U3ac$FPo4ZJp8jRv7f)Wf{Se1ka~ndyiUXw!k~Dj2TBwfWL14fQLm3$OsX z32B_giGiGY+6Tk9EQB89MgjZ?e4H&`tCHVD9XSCC@$Nx04siCnU!N9&iZ6c~A*=p5 zP!7->KIe0)v$vXjOzDzVBioubPHut<^ib@Oi}2-TfA_2Atr_4QUj62n(EhwkUVm8f zO0i^3xqEbGP1Ot6T#GLN@Amb@L1RN#2Qph>y(w3W4@efcF1@+HkjxRopF}r(nZ^%Z zc>pOIve@8MHX7YU_nIFy{3}yMCt%d@cgHIKrr}Z#}&<+3%8++6Dr~} z5a#lV`!5s?I1*2_mqmS#e=tDT0+ju1aU|t>Vv$sM_&s9?YgBbkI&REkMRL`mf%dh1 zTxeT?+{(H#mK+tAAiqk6LGs%c69R>9K=W%uOSjl|fwY+b2{FAvcF6|T+9d!2X=8F_ zx$Y_hwHDp7`Di|X6c|qDFbi23(DGH$v<>yQErI<)rS5 z0*`nc<5I9G+e8f14Nv-PW8>qqNw*#Ze1G$;8R@qMec68R#UcLvGB?SJG46x(iKo6f z#J=WhhQ{zF-c~=`GSK)j&K3^f_`%DOQ}=RKnEy?+Vmx*i#jH%HB8|lVoW`PXfjOI8 z&|&jsp~ZB+J_WYLwxZWf*R%d}BBsXR;sttIb3z;8p(6W?0PgKn%-iZ$;U3Z!3_SWlFw{<0irq)8`TR;)>YWt0wFws@W5a*w5C8t}rIB0ECRSB;+(?3TKxEExS z7ffk~$%&C%+nyCK;$CCe6L!{wMxGm2RnQfxg^oJ%Um7j}7YcXHmCmjE&q?TvH#1o; z86O@_24e9Dqhj{?WPOA5m^nZ6*k`cph5aQ7g?ic|?_e4e+BndB)>@#WHYz`jJ0-y7 z{k73Cgq^n&qEY$iw)|PI==Lz|RVk~9yn3aAfypgA-2Ho0)JuQ*d~c;beNI8d_Bx0u zA#IRhrVYG^D0Y>ruC*AWDiq8boUM_ zEnqP0C(&Czln~Ez-}XG7k?py}(^IXD3Zs^fC{>hZXxln7N;V0}X4-*4(pFS@OO|;78=H@Cl&CI6zAeg56r4$)TGolSSVAZ1;e4uQea7-g=lf zkkNhWH%%)^4KuRbgKT;EmKHA?tuC>Tq89*Nh$&JlCOt~>R7g-`c1!9z8%<$aDdZHf zv6wR`1e<)T)M1Vb75XTgeh=4PqH&yBw=bebLNXu}qbv=ie5DJ*+O|K)#}9SCwTR1) zW3q1J2C^5BFs*FJu9SI^=3@Bikxm$=81Ch1ZH1n@`P)_lmDNwTxw>jn@Q zdwQN%l<~*tEv;PayS0r~kW9DZK9v+m4;F($Wo$5~E2*@(N37eZjQ3Co8n_!h+b_{^ z(Gi$X)n^SDcW}AR6s?80O<`~&1g@gl$25@%FEMQHc!~;Lb`Xn8T$%x4bc4^l4<5__ z;u?@8%g1`8@?M`n_km3CK1_)Ub(q_45FVD$s;O>CT&Vi5Lul1MLh9DW(h4QMI>?)@ zDzy6%!-&o>`zl2m&-`<@0<#~0{Ct{U@=TLyq!yYrMcaWOVUeqE0cPd>_Ft+w^CM8o z-sSuAj^Oi?d8qYrsC>RC950*hX~^Lf7n3VN9^7M_scISFN)Afzs&jd{^ma?x-jZ3R zTH2mGgC8MI5koQjLdKMbayv7?9-_jb>*C<(v0-JRZN^W#eLMAY2pOc_I;Yfs2QiPc zc|IkJ*;5#kyQn4ZkbTTExH#Kvm)XB|!JIiwYn@*lQsMbkUbDcv;+{*fq;U6HM>xtEQJFN2URTB5NKFI4+ z)d{SQlATo+hI_5*zOG?MHD=3q;`=Oz`6b1KtkNQT)fz&TK&ow%+muK~*PoJtEaK?a ztdb55TQ}bZ8$ZS#acsk^%kU^bf$>C`@o(xsJrKdrO|xVO(*f6420N482mh^ zU$pR|&^Bd@(>xGanQYy6df)vIkM<73;{BXtYM1;Qi3rZDQ1eeC(W8nsgs_o)Uc}r^ z>@j8tlTIGx6cvD!i0IcJA-@PMv2j$`6cx`%D+Kya1Emcg+4DxlQSY?#@aMV+-kgR} z-({>a8z(~4;p7s}avx5|L2d1ojUL4}U!|I7m!e5bK522!J!D#v0IYq)5oU4mBU*nmM@yU^FyQkTu7ITOs3x2{V0G0a^CvLj7s=IVAE-@HYt z2nZc)5Ogw{lmDc^PH@FOD5l2#{_CEi4(tsBrX&yki{Z1L*rnMojR3Q?_vAL&*>iOp zHOPs8Z}ed{6v((+K7Q^=sPhRsg`UFxTU3C}(U#GxmP9%+)m7s4_yo1R8n$Rv2Cp7| z>Av3iQw1ExMNB{mju0B-zmV=17&=IiRUt~k()&7SJV8fd9`z@=(9=*jSl^;wZ~SqJ zG*@1iKfUQ~fjO}PMVgZ2oo;7ejX=#?1hMWA<^*3Pn+wTPC0GS%uJ~EVDU@y!WvR6E zq*3Rl-)io$Lc3%KRyzQg>7A4SnZqGKof6kxfsevuK7dh%mJoP zEJKsY{^*IFuXU&Z7qMGK6{o3@?eB~uBOg5qKpp9rn3gm&&P;k(^%DT>D=)foJ zx>ZX?MZ}734jf_og|PGteiw5)E^E#C)T(lK8o&cG$^dUgrJs3$y?J`w0|pckL`!yT zM3EooET;<}V3Vm88<FAfnOTGrmotNz|5n>FGN^vGq?P^KdRT~*CEFe6R^2wMip4bsNhR5 zg}1d#IC3HrVzgO{@?i8IqUmG$G5$TJ>yzC1*<=pD8QI{#yNoN%=_06FJ(;dACUSO51Yp;{jnu{Z2d z4}&e}nvjM){N=#db$x-?4hZ>^*Z4od%k2P(Om5rajEn(MnvRrwk((6D{0A8x@a8DK z?|c}vT*@)?MwYauwv5Qg*)?>I_!t4IYeCT)?|9*sT(XGmtn>n)K~V~w$s1gh2*>ej>jIp3n%y+%?(+>LLC8UKgfx_~C6`KVXe zLL9)0o)} z!M^C=XCJ4}0^x;BFK5z<=^rNz`0|%{^Yw+=!RmjWhx6^)09EuSU6f!itGFsCpwy~K zhyctuF(Kv3@^IDWur9gGg%~VfnWq|>epWHx0+jtW5TQ@y<{j=A1?#5%WwQ3hH`lK? ziS6wrYQLfjWUyY}^qz{PlGvEBE#K2f{T)_eAzbo7KIiXn!f5qH$b)b5Da}&MHS4+{ zY48rvFF;8q<|--I>{*U?lA!~NK?B=^fKWx_lLj`5j~w0DJSL0q(|G=cX3lcRT5HTK z2)N5SczO94U+HNJc9od+RZTeDJ_s=_6f~Fmv6P6dLPh0mAIy{{DpDLKQ9oW4w(HO?mXW zo9o??yVy{}!DYWEtG#N`N9QwXHm3%u0QEc@0=gYZgWuO`|7m9eJ`wfg8JS_G7eE(u z-^6S9*Rx%nFFP2u3Q{>$GT`3{S~CjmX|&NndY?jZlw_bpVMra!9g(JhT@e1wxZ(qn zc!1ui^U1^LzzVzGYta?~IlATdkpA_vMKk)fM7y-Q!Oypmz!&!3+){PA)*fteBL6#l zwerLF4}$O0Q;YrNjx4_hq{=As zU})JoPc<2BER^1p+eKYpFHoG3k{9u(WVjr^#D;K3f>eBMF&*5#0@V^d7z|we8hyY?esmE=Og_ z$%24f8{DdbuO*%O!@lWRN9zRzn%WSKByJCzlvVC$gesuz-tk zx44d=C@YC-&I^3ewy1T`<#agYpwUFI2(FT6&W>%ts)t?j0|Op>`S4`H2(b&+y!)BQ z6&3GoyG}HXpfI&@kMSOogU&A>7dRZw*uJ~e|K8gSu^p~WNr#Q~{T7`?bIwc45^`Qn z0S>NkmFgdH%FvzgX$J?adr2<$d+|laDA8z(cfTI@hJ<^UGS-KQu5g%EkNKZQCo?PQpDM%d9UFeZ$~$&)j!3DlqUx*&xSxv=wsO(r zq7!OsGPU9!OGk~N$ElUqT?#jo<$3<-@;SAVjWVZS{?PIMa&?>qRH}&tnL3i=ns7^U zj$biK5`f#E2gO1o7V?If8TdpIR%B=k3kEJst#(%n?CzQ{1eDn{>QTKyLIMbQ=5uJ_5$r1;D zUCocDGfGI$^%BtLeok#>s8fNTyBqnS1=_Atz zyIL~Fe|K@gcEbJ&8Fh4 z3FsT+=EB%@qCOQ?2hW;TbDeK1DugG>1+f|Gy9w43N~&j3%&J8_B}-Z$TxDVPnO_+$l_lQk56n^yS`7 zJVLq4B@Cc~Ve=k)hD}y!4z<2tKR$8zU|ZF783pv7g#}?IG&1`U(BsC33#vmlJ%PZ;%Je&`n$)N5S>=S!LapS@xHHt>Z=jNC8$kbq5TF;;C5e zIzL*Q(&BG+kLe6XcJ!1dSb)>`5diS&5~q?BpG1WI;JFQi_VZxn&r{aj`5Bb zk$T8Fvt2B=l0jdNs2%0845S8%i;w7-`&bhYC}EpWfQsDxb;$TX0XBsGvZTT88#(f; zZld*V$Gw%?Wk+4imo+=@OV4GyDHO-Y!Q8Nes6CsElNv@iwo2ocS;wIB2A6`B*_lKE z2;L)Xm?3@stng`9k{2Slw&zP9$Rp>t1JAUJedGK|mb2T{bSEG>7E=8Tv({RH2ly%P zP5eYS&gwDjOZ0k0aT3@WLC!T(v}ld^rX3*-$A^1!;@GVx(tH@aS&~pzS!QP$+MHoQ zDTi;>*GNE~H^y49mOCWY34~Pi-zH8m!Xm9tgg>A$VC}X@SEYxCx_xc0p`F)m_DIAt za+V!)@jAg;f=!tZ6K4QWmWSoVvFNOQC~N=1Arkw?rcsxc@;HS0@dWtnT_SH|$|l{! zneK)b{N{rly|;jToc^SeNb8GqqS_8R)1E^iXLznKeH?-INmcG_HAU>S+{(ao@Yf_1CIBjgweybr256n#+1mN7&f`m2fI$CsMiT?((mvF9E2Iftd%uMUHHiKIyHoa=y{YHf8STM-(L@c zULu1yXx;|=og+o{j9IMuOwkJy`G64WzABD7s^#DvO|{PJ?g))kC$_V=;6iqPu{3*| z`F#eR2+79-$(1nLgGP}kx>dwf$>(L|w*?)8)f~^%A%JD})=rg)k$*Mj;`7WR<&*Q; z;t*xt%Oh`$5b76d4#V{H^rA>JAqBMpHMc3+j|OruswPNU(#*36eQsfQr)&8Tkp)t8 zll*#SF-(FaGIX)}GVRPm04ZYCLEo}fFJPOJ#KQ|z>!K>F1PZzWifK!cD2?S#)tO{I zUB>&crO~ZCBUamnpj0_fLGkV zdm5D*!Nqm+2v@%}_9GgvAtMBTeQL?JNq!`=jKxsLOH?FYu{#+jP%B2Pz%pg39{r+4 zFfBXB8@$yEM2M<>0jzJ`or z!mw#}h%`wo>m@1$=QcNIUHXJYe-CF~?{@A9MwZ3NqEfBt|_Zm4S`qZzQa%qBf9I$(v(s`Ry+|k7Q6EoiNLA zU_c|S>gmH=T2!K+ImeDgZp}TU6=kN&s9~=L@fne$-;~;X?_*nJP4ib!)K{Z`4#>RE z`bDOY7S<^7@6Yah467^lX7w%Wa%;`FJJDDV6vM1j#=lmp!nG15`MoEB!0-0Kn7DdK zfIBrEhN?BY`bXGk4>9#o@DAJbcQGTKSxZmh!+f)x zmw~4X#>?Rpcoyz{AOX3CLGbN$(FWi3SixC;COq%r@_5=F&e+zr@n* z9GX~xaoadCF?n<^7`w3vYuQBz)j;9hO6l!6f9LwRYRns-cMk_38cP(2+I)aNJv+wv zLYtY8aqwMW4YZiV^*d6)rHn=qgIHhu3}J#%_`xR454O;3NnZGpCbdW31e}M~!24a# znE8rAWnLQX@G}QMw?K>hmmdq#h0t$cbMF{(xW*|jG5e=l)a@_9w))$}TmRp7UOyUU z(-}YAC%wI?+Nf^6Qhd!io@b%r^?HOhXA%L#U;qFB01Cma$FbPn*Ss3LSfpez)G-`e z6D?xPG8y(g&YV1KhKZy8n`tF$Oej7sYNi1&4jD0LQ0XlsOUXZ`>O?XH@AdPaAG(M8(Q{`e@T0Cn zxuQOhkl-gHVU5{Fc%Em{R|eX%RW+kznH$dg^!fixV-yFW_73Diep&TxjAG&$7)N|N2GU*RW93lL61cDP=Hp zq;ZF0Gn)~B5b7x-9>763Iy6bC>m=Nj{cA7&BojjCTufp;^wFHnG3o7-YKz3#Aepwe zw7ckLzt=1Z)0yHy7PsTSMXcNO-YLm%vom5Rp|{)^LJiL*sWI4Gd8xMsuHc?%ph|^X z(^b)yfy-WKnkP=*{r*QQWVky{yEpyyYQ`m#71N*lQ2HQG**ub{?i3Xgd-6w$7&S%! zaRVuH-{EnsVxUam;Po2_9`xyQ23{fXtr*SxbgP7}5bU^m5ZN2W5jyo7K}8CzOT{KF z1f!Mu05<^EO#XWOu4Sm*#BmJ9nEhx8UA$9ngoJXF`zWxIyt=%7KNLxpEy>GVk#R)_ zGA>Wb27B7F8I8ftEQP_0f54;apH7FtyAxlB&C7HAaKRy`>H0?il+4UZ39b4J2}!tl z!JQbA?0)$i5Y{Hv?nSyg?1>NYKYFTp*E*!t*{P@wv8 z(EomCWRf+h^%$O3y=XCcoyMw3){p$wb@lA#FuBUd{5k$p3}5aH8URiF>L2V}D znlFP_kWN9fAri>7l!JUjbXy}=mRE;hSqKWCp{#tj>!GQt54p+$!mMy;gvruN_6E{* zAIX>vuHj@e*V8Ad9_p`bU2~=;#`(sg+x}Tij6w~D^Kd+->?*vIc(wEyOC;hGjlJh; z!YG(q!x^wnb2S-Vu7d(Ox+*8QO~7g3WW#LzG2d&BTP>_;`oSLkNG2#uqM_EBWO?0x z%428tRz67AeR9j?B9VJKGxpJca>plqhz$VLtxwK?d#^}>kA@g^oSP86es6Q=V+4-6 zZy8{;zidV`-|FbgzXQN{7a*f$Cku1t!=fME>$nn5U|IylA4EVUSq!XXW&V#&3<%==6Vwrm8Lrzp4k5+hs>G+9XCBeoinz&9AK(K~~PZRqNen!b7JEzLX{Ir$)Bm;1u7*QQeCh$c1 zPmoeM*%)+yn^Phg_deK(*jnR--ifxkh3QCAIw~MRI)OYf^aTv3+qLh{^c*SI!^mvPB%CITRA{y;!@ED-y|0E$m`$G1T;O z<5tGr$;qNHOpH?yBXMOpA~OPXs~L9Pv#O0N{GFa_<;8p2{#BbJ{Bs^K~3XM33jmBp7#&s=;ES-mQjtC#DI{5Fr1v-(@MLFqFF1gHP_ z>L~!V$JWU5F~(Azb5ozh|8ekIXZ7ORt(TUPt7Weu25^(fauQ>GK^EAh;9-s{8u)hE z&fld$(*rp!&TL}I4aGFUI{VMzADlVyHG)Yw!KdOc)DE{f8KBfz#y>-Edr_bErKS__ z0pQq!$MumVM{{ie-YZwo3dxCyoS>!}_?Tl22qxTvRJBpdvK+B=ov1E-DmYhIftueE z*KUybX@7lvSwZeu;}=a5v&0L5I;4%AQ%k>lCa&FJ6p|5%<_ibv1jz&;G0}bSd0s0D zyl3ts(FFV8na&Y8^a6nnhg;!mhb{%(WC!Rvj@j55M=+iJ=-k*Al7f%S zxyEFy+^R2lYlodp`jm9KN-b{7H+KRt60bx?R&lWT3SUHufBYHOCz6dbPJk!s^&o2y z<+&s!DORHX(bI&#kx3hFEzJT1Qz{DcS0OVl;Rc@5|!aiAu zoJ&Qko>$C|a9r7SIbA%&-ni;GTuuqU`xiM(48-V%W%p;UxWSx#?8W6HnqBBwQ@&NG z@syuj*K42&0Y8QF7sNOW&e*~kHBN#|4PcgF->iHd?G*9h9B!wSx}8fy3OL`Mg=s+3 zWnK`1u`?~gfXfQIPL~!aQQV55`HWiS=<)ynXAe#2L(k;H#wO0(gH001fz0?$aG1{rByb3>46xr|4O~DR40;62Oy+qdOMi6|j6$PW zw^mFT=X~v0$0v)=X+a^0fDr^MKnH-RTvbOI57hpNLS403BcQX6U0M2+q@o0?wDh2%Hua6mr@gwoc3u9*4{$jE8|GLr14o z#gD_%;&1{pH0JJs75i*o9Sa$F=LyXy!f9=eBWL|}BMvWCzcuS6YN9SUh5*|o=BiF1 z$dYmSvEFAdkRocwPt6H&VAwk~qtnHOj{M&CYi$5#mWT15VL$eRc-8e}+ZX~+s7yGX zh5B$UB^SF2AK>UaBPfV5D*6zdVN)Vdk^^1_Ucjw|G2C<)lmY$E4$Fti>dCQTP@?vZ zxfGO9g=L(D?}Eq`Ua&rL1Tfrm7yao%3%Tpr!PcXE0lfAz0tDg<Eu8;0XQ^h_DWl`u66E0(z&#%#vLb0X5G!1z5*9O8#nDRI(YPT9=K3E3BFb&u9?< zKf%J}i$O%;(1|#2+w#E{G5jF{C}d9OpL8D3rv`JmVg!s1#%wv|w??@Rd@Qf_FqK9j_I?;-Xp5XIfFPOjp00009bU^=~420tu@@E;> zEl52o`>7VFLjikb&K=XD!Z1E&VS_*m(styK_jM3oxHrn7)(|1Ze=imsSl6I5OO7D& zDRNIhNFI=L_Z8zU1t4ui957cQY4Tc%Qy@3v zWVGK$;u={Pb_&^n1sn8uvgeg81nI?8?WK{ua?JMsBhnT{=+N!Mb-h*I+vR%WijAF|wACd5h8%BC%fF z>Ub5ntPbjJ;!T$emn`B2^|JMJY25C2d0S(+H#hqcCNDRLLUwB`-p(ac+y$cm)BGeY z5`P9=a-v{Xk5&neF}SqRS%~Qyt--1wqX7cbGs0A8BsxT2{(W`rCl_NafRsCgI8%G@ zQhtH%c>#>=0AWgrfAb?u*`wZ64c9}!>hQCe?Ro*MK1(J`9=_Tu@Og`xbP}R@1?Z3NdVlg+QD|-| z$^{$vgmTb3zmSy@xuPxENf0I>IcW#$m6*U9r+`eonYuI$wIITYe9V{L>sq&#q(Qdf z_uMYY?AlcUFynQKiN2t|fvd$Kwy-#|SU&0AB~>)uW%IK!eYeV=VX^%U)MUz-26)J} z@8lq>T{(g#dGeShZ!&i~oT9tC9z~&kgVqR3HKzO% z^IX}k803&-d9*Y6I_eoGWfYfWLyMptOu*daYrh;v{<$;8OZF7F6-U{yX4EeMaKQ~7 zQxRq}g|qU03j()@abXrDh^OJXM{;M9XuJWw6J}2xhcF@>~9RombJr~Q(nANDZSAbjQei@BU>g>x_ z1q_ef#sALhTjebG-}QaJ+MgpVHtfuM7>o*aATGdR<0W}q7gYUi>7}HHosY!!We99TG63)5HI?Tb zkTFu+n*4nZr!;GWyAAp&!2tT{N@R-((Y&AEip}K->2CLJu>ntUsy}s!Y#7ymcLMXH zz(x}7u)e-hdwix=iuv%{_(rduIVH?t5SR>fGslF2E1XD3*587~8Txjej%1<7*RE4> zu|-@~OLly1mRB000&YC88$myT``}-z1~(EYZYK~U*m|u-1Kj)xs0`^kc7haodWW;0 z3cD1E_VbP)PUvd0HMSpE+@O%OU3SXZ{5B77XvSUwuzqe-NTE_B@xMJ9!EQsXeL9Se z+4d?YgQXJ)RWaR0>Cg3;?jZi+SKgM(`=~q|01Yq}yoC#y*ic3O}0oN9wTmxwnFb^+1j>QYqP|LbBUkpxE=h2a?~Y*vE4#kA)>_8@JVf$g{G;uI9|C zwzDZtS`aW~oJQB-VIHpC2SU+5%c^^F-IslySzqq0vsZuDu!-w*gik|jlK%hzyR^35 z4n3k|?+(0L`e!h#f)gw;fWK7f*&X3BwGm9ID*&emO9i*PoBrOH7{dVKanPc;_ZK|! zv6{_5#6$Tlj-96bJvEvdV!h-D9eDJ)38T>cBR`dR!Oiy#`JQRJQy8B<(dx0QRr+$k zDKmr{qKs~B7q6IY!)K5^_v$B6W36 zEU>sv4t_u9fS`B{a?9q}^Wm!>5$hdWF|Bzvq}nqqI*;&H)@-(~FN>9h*O+T(2YT2U zPi>_W+yU{rms@^M*VpHC9ovG*rw~PF1ioX0$FXUqy%K4gy|FMME6wbaYtyFEQ3@8Z zkRQ-fldX_t}O(0_wl=kI0_?Mt8nkCvnWsDIlR2D2uG_K=)EN(GN^nBNyQnn(p90b z#5@xR9}33;W^;4;lYNuI=xvoKYP%e*NgP}a7X>$%kB2gVlGYqN%<8$NO?taE+TOJQfY z@9Wd~cAORKhmp&Ju*zGRja^6l16#2e9}pgglYs~Ft}9Uy@HMbuoFI1)HZPEPkx+KPqjV8^mrugI@^nHo)LW(b zgId!W9B4dEC#opXj1FUCvLHq&bSM^gSf8ZAPpTn_i}C0e%>DfTUk2sCM7{1Pi9V4%hQm30W=+%7yTL z;u3Uj%1K5?rvCPMq>HQykL}{hKr4iF|8QjXyv>Z!FS2!%NVmY{-?=$1hs7b``B4PR zC-t1k&3lk;IAaR~eD3!*xQlK15?)V@mI5wn!~h`SL%_82#+XtVup&%#JK+Cw6~E~G z$`>pHIs`>Zz!n9zafM?*A|dUMbz}I$p?o+df~4yRH6|u^$N=s0d{#vb)lY&a!D>}o zCgI;V%g6}|ewVH=KTUPD<&UYJ^SnF0o3`*w@5gA8yUXc1dR{w-|F^6GGzfBJgP+rs zq4!a;vu=no#TT9m-&YJbvn{8n-Hyr#-gYE7v1&~{OqJ*%i@sG5QTRKEzLwgYJmW2! zm)e&$Rs*w{>@So64G+2maGI$8G~K{|#ebX)1jiXciKF75F_nPr0e=8vSfn|6olO9rT6_uPBPRm-= z0dWM5`wyqHuFIjzAHAJH3%C{HNw;ZnEe5!yPS>ws`b|LG6 zl{WW_L!#DT?zgXERp<-dPxzCf)x$$WJt>?bUH`rV7kBvSTP|L}lga9V)_LFIqa@Qz|*i+=Z7zjxoV}=giRDaQI$M zgkEhJ_btcPOZ+N%CT&s_ow!1=33-;>qa3ZA*7qCuIn{Oz?I`lRXCsf5?F*!|{Q#hg=-^{xfUevt zKLOW<3B+S}y{y3}V%mfX35;>O-RRN{_dx*-e|2q--wglL- zyb+VyCopcYZY-iUQY3S+fxj<&9PFTNAWQVJsSys+S1Prs-uet5B7sdiU+f+yH7x-@ z4qnviCdzlzPQ~KW=O#j?TXV1$9eXaVW4EJSOaQJO$r-p}_`v>%vPGTAN`k~=?C6h9 z&4;81;?fk`3l=?ZE?H};thXxbuS}@moT1dDIX%H%ir`;JLT-TjzcPq%>|!%)wceGF zel7eP-Rt|o5ndIslX)DxLFSo?J0)&2&^{x2-k4Ufd3EefKcXjS#|v$E22=a?H3x0Q zvXGe>=WdU*!v-zq)vr6Y5A;S7;$_6!>V@VJnam^}64M%9|lmf~q+rJK=G%Hm#8t zJn^LI12F9tpnsZF^5#;qhhN-Dv#**=BuO6vjlj}poJ}$cm3e?j;ZodCw)E`7+2q$U zN|_iR+~l_JWOn$M(9|*V0)Oa^t_eVc4`sum%QxdccssFfP5=M^7?w{^=@u4-o!Sif zYf98otWRSYxo74?-(yJjr+ zgP*t*=r)Z?x=xMiv3MFHB=6V*x?dd@DC`PGT_%7400000000004MUhLk~iiadZ(Pe zrEFsT45((JI1C{lN^_IIfoHF!jFkWY0|Wo{9>#D^g?&Qhp$%tvl3*@@Xx$p6fB;_e B&e8w? literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/radius/radiusfilters.webp b/static/images/auditor/10.8/addon/radius/radiusfilters.webp new file mode 100644 index 0000000000000000000000000000000000000000..8f2df71008776d57e699c287d749a623f7ab1989 GIT binary patch literal 4180 zcmV-a5UcM}Nk&FY5C8yIMM6+kP&gn!5C8y>M*y7xD)<2+06uLpl}Mx_q9G&}s*r#U ziDN`}AjB*^5AnR@`#sia&g>KIyl3B^{s*azx_)PT;xywotN+B|MR#KQtKlz*e=mDS z{b%VT>>R)KgQ%y;e!Km{`tR-+_Wz}SbKVgA4gQzZ3-TZ3KiWRoc(APR>QAs2upce| zCH?dFWBg~y$HRY+^aJVl`0vYq>c3zg$Ul_-iTuC)|N67OyT(0$KbQYy|5^SI@&n{2 z{onDw=6`BEyZrtCNBm#;pV=?4PvxJ~KiL0q|0DZP^Ox*b_Yc`~_K*Mh0eqKirDCp0 z@l*&7Ru8^`rfIr;19B%dNbkU~PO{X(3T@E&X&8uvaUx)c@M>WyKY^iPg@DPO!J+tx zMCp7xDyn=$(DrU-PK7yTqpWn2F>@TKE>HCc=Gf#$Spgxa%g_zi9rDf_bk2YnGrM&> zobYQw*_*Z(k+$8LKr772Pc{!L2L^Q=Pej!y8+IM!`-fCFO-D$(i-d-H4r>lx54-CR zvRxm#U^*QP1TCynxk=;S;vFtZ5yI^J2yx&FqC>(fkr#QD7~Av%0&x*$*|ZqJ< z*!I{=hm;OwbRO59pAHZR#Oxj4bk1nMX$w=opFy{{gG49$Ca4LiYsF1@XnCOhPo!BWkz%MCv4Gdx8!Q&>Ll~lI>vQ+Pls!Zdw`|hVr6rF`I3n zbo3x)z9RO@m!`>$fMP$PJj@|Ob;Po#YYbICm27YYGOb`30PtUkb=fyWcfb4=_@M0h zMP9I62^ljP5&Krmd7jcl-z*;4QTw|;&$m>&J91-d5-BCJu?ugG6HWbgjPSC)dLZ)l zvzBl>>Dc1S(vhHe zjvi|oNrLadnlKg;(HDjX4^DOc%s0x}YRVoyMY<%oJFWTQpqC zYfGTN{>3s&>&>mGROn!CExM(`80%bXF#u1uS}|pi=p23HaZFR1CNhu>Mh% z#s?-+j;F*dtne~&Z0sm|?_eo`~?W^z^7C5PW%2XK)*} znS)9DkoAj47wPk92g6s&3hkSLCnW%#l?!LPmHCM+$Q2nl#%g0RYgD1AJRp|I;Z3tB zaWFP3AMD6o>Hv2ENk=&veyMTJap<$QwO2jT&F+ z3j949iE7VmOf$)hZm;@XP@JF)*e7;DSD-Q5yjc0<{LB%w*cY&+TzD;JU14omIY_w^ zk)o}KywR2K`eI_vph&HbcmmacP~GuE!+!w{yN{W<;QWG9Uj~RFS9JlRsyb(y2fIVI zQ&o(5BSJzlGj2_Z zo7pivjB1LOt;Qff;ax|4(E76Ozf@*%8_@{Za&$6lCxGCyM$cqE&Vf+=aqZOHnkb7+ znRT&i9Z@J8C<$F~{k4>=&ZFt(K!5LI12r20s(4S=7S6CSB#G-t_PyGE>CgxdbsYvU zwAX(UEputw$DW6(;g7p+xLKpRKQY}La$$rvwdo+=`Pc(jvPLvMy2M^+0Z=NBOL~@# zM3JWUyx~dI4JauzIOpYjRebl#quNtEheTnn`T1nNE)CMvCtRp@gpyyp4-*emOr0D; zCK70qM=D?b-6ht-d#Lp%rD=VzxqCIvnW3K#D%I-FQ*!g_`HiOjO3kd37NAp12&|88 zuJh9~D%$az??m)sIv}JMy_hz9ms1lS@qcb8w0(Q?N`J7`x@i90nN;N<9NFNM{McUc z2|%87hW@#I>p>%j9fm8`#aB`qu|`eE$8ob7;rlsBfz@UjNHB}q1wH}}HPvCTxN8gp zD;kF*>+8d7u2fb5USAA?W?l84d>y>w-{2Q&xgI)y_>b=#q^|yb{46+~p(K}26d!T^ zQRFDPX`>=!~@d-q7-`@5w{_imj*#lrg9pX+oUsS0D2+G zZ1^M2Q2o}poqk0>!qG_aG4MZ4pF-6`RnnS-qqlNF&U6*vl4nXK?4!gl$rN&Ybm_Y) zFouKIoSr5!YpyPKPP3azVDULKkL=F`vcXCvUhNc;~%D0V^<UgRu31 zE#w;-ftiQ@pQNg2H(N+qaA5#EP5JG{cA#WyW<&QUr50bCy%3;}G*e#6=@an(`95aI z%c@rfL$tH!y|sKBKd>ktU!iImy#^ZD>U6c_9=~^BG~m*>i2`s=}G)rq5Z#Z@nZ z5LS4JjDGCp92N za2fH22)#D$Ks>Bkn3WVnf+zXk=cDk8!R~*x=c-bZ4+z@Y%@M3HA<6E1aO0^tvmpG9 zj%2oC5=xYwF>l2&c~B~pjw#&B#A7`j-c=jz&tp7ZfSFY2aiv7j(7JR;u2*_*!uC$) zS83fFOMW$Z;2mZ4U)g5&cL%sl5vi^qa?-zRU-4(D{-v0R(B5ENb%!0ux!;sxZqQ>t|eS zbN<+X`va&!=)9nr>ItUZej&BLflgu$(Pt6S2>kX?e#iXYC_x+T0h^u;$#~_P)1{yC z;o;f2AtuN9ok;O%9^O+~d0{z7twcAkbq*F<@5~+Ct0v;P6gq3YXLxH6pErzJaj6K| zf7GPSzV_C>Y!qX-&-K**l;od}U9x$Pu90+25MU$Wm1`W{EcrgfZsHj5g&p5D?E{Wy z3VSx$BXy9vJb*-4snkcF`#^e}%xBgro!e&Pz|upw!w;46*^~EbD`_%AHKT7qLC&P9 zPXgAyk;BA&jN0C(BQ9pY4}?QPvE}q+z$KkuI#xR&2QW}{`0VvB!(jHwb@}y}rI@){ z=Nrm-o)rl84LkHE55ZW14XW}!ziR=y$Cr82Q%p-J>2Vjkj9^Oq^d80p+d%#w4Bfn8 z>$02iXe#7)Q84X{D??lzLQ0F8Avh)gv_q3e9t7bK4nx^S0Z&geMFvupkBRQIxU6(M(z)&=(sh1s-FWd(c~E1 zpcLRa$xj_I*QyCdI)#EB)Ukb&O) zKcibb=E2%yjwBYaQIbCcJvY}elTrz}>?D$mEVxqiw<=5jU7bzOQ|Y%!xXHza!wfB? zog5KS^j8(-p+8X;`Wzw^*B8#Lx5PPE(Y*+%R>=Mb%|N&HZxfQ7Mi&CfO^iV0be)#r zx=F^rfbG$wVsFLH6hH801|qNF`WH2fb(-rM;d!6fRcE+1O+^Ov87zzvop`}G1~yl% z+?wV)zRN>kGzQ8sxBh?CMw{Q2P{8&HgwJ4?J39qci@l%yE?ba1)-$-_1oA#F(C*am z#~Ko#P4RvWDvJj)hTYdQARsgfvCQt9{M@3SRN8|G3R&ZDeZ9ye^@|N&9bkK!DzOUT%^6AY=(&-27qb9VD!Ya5;zRdXvVSYEXd+=@YU2Ku{I{I?DRsChkYWKX3 zgUEx+=BDYtPhoA4Qq@frB6Mhhq@;QGJn_OxBYapB69or8~nq~LDB;*hW_J>un5x;$Fm0J3m+Xk>AQw-=bC@wbL||r@HYW>rjk4J z9*he11}+<6N+k-h09SaFO$Ln0^O7hFOP|NO;U}y=R$^ z=yUPu@Cw*MyzTG#S^g1va@YlQ15yFGKcE}QpYh1wT!8F9^(TAI0FUp_ImFk!y#QK1 z^snmYy;p$)0aAXU0FobzAB9hb+z)AlLAomsgW$)79RbVI}_fZ*u`C0#7 zZxq1!Q~mSw`S$*AwFbhIfYpE_K+r4dm%%sUvq3-L%}<5D_=o35;T>^Cp@HxWu-$(F zhyd7p+C8^^L;mDH5nlB>_jdUw|5yMt-uqt-hzaNWy8_Mt_&?Qq6oB#0`7Hn-;I{wE zx6FSA@JJM^pIJiy>4X#Mpt4lb*-t&9s^u|MG~I`ep?6==boW~<-ItoS`#{NTcV+Wx z5*5tz=9_hD@z)bi#Mihb+xv^`(d&Ypxx>N726_TIe`?YMOuqD_DY!zZX%k5KVv`oI z%7qqfVC8cq;B5YkYK&&qq)2VoFn<^Ke7}Z8DJvT(j?sxD=Lgx{*CJHlE2IYSw<{Ys z_5HtdjJOxcA)%^ZW9bzVoB}1rG>Di1Oygi*O+?O595s1R-teV&gJu|2mYLTuj5Nva&YOdEO!PK9 zMyfZ;#fCF?jAQ(f4o;vc6%JHe39#+n@U8;;miq8#t39Le1aoT}rT#dvpcsN-daET3 zKC!=&(Sad5V~~Ks>BjuHA)D>Nq;($ZBI=r?M$K01rKLw0R9f|(cqVCrfO#%(a`Jn5 zlYF=137mOKgqVsB6m*?(`zGUmH}C75lQ_>3yF4hEORLr7 zO_D(J5X7qGbYx)g)}EnBYX_=3r+_pkM{DekR1aIves|P(Gp61TAi_~kPObK#v#LfE z#eZUqah>v#Q193v>|2w9ViaPJZ5gFrlN)@HrQ!J}#q6~Z;i3h1g{GvN9n`=y=tf^j zv<46(i_06Y8^ipm4?B>}`xVGl&54q-gUrwCVQV^Vobp4WAB!1N+pSF%9tEs5r4alk z9Doz!paX@odSp!UBEKays%~#om7mIR^(@drW=TS^<15Plfh8J|t%jqESp!dx;C4%4 zRh$WIzaU~@C7f6!{n3T-Q zL|YdvN@gL%TQA~diyf+OUJ;iAE2M)8J1 zCBP*IOdUHJp0;mKK5Nv$I$d{b5PcQQIk*F2&nO@iI*)EVI!NQT-@a6U7awk2v}ZU7 z6&VuslyKuWBoM!swg>51cfsyQKsz_(i2w02DLy0qX4OcX_+d2f+1d#h=}22quVg0p z!TH$#y~RF zta(lbzsc97w;7K>B*yT_=Q4N8(9$micci7Yjq&4%#wXOvS@>0tEgvixF{*%sVJ3m9#*PqyNQs0>tge>~|qbcsPi z?%~^zFA4&!jE1O#k7WKUp>li-)TYODc{s3n%uRD!IO8P1QSjgg5G)#4)sB??DGBd6 z>{UpbOPJL*3br%r%dI*JIjdJdBKg+_Zw6}!30;`{BNf2CVWc&>z`|esgqWBQS?#-@ zQhy7W^kzHENxZoYVDrLUO>n20IibyiH+%w_u;QQQx%k7;k`tLUt8CP@oU)mm1ToHW zx@OJ^ z=czn3`92=N&3$;Qu^`R`DR(^47W;$XfE)c`^n*Jx9t9q1e~Oe2aG6K_8~-$zLQHY6 z0bk%jK>t9m{Lk5vz(WQ2cy{e&=n(A_+t zHWvG5tN6?7j9B}&yxNK$_HM3rTxdE7ab9u+NldQ&&U~vkr+5m6D$jbH%*711ep5D? znYZFgpTJP;JuOvZGX$6DDa}ZBFXGXFG|!EhiYeE<1jKI|%dr5cd|yp*nFIQl%`2#m zU4+&#=s09mOdQ>OTnL;wQnmF~i5LB{ry7o`JeFnuk=ZP`jWqnf{12MyGrwpF>3k4c z-d4eMc~Yj?dn!;Kn4rlMf5!6l=25zBr)O~k%6DQRru9uvQu;Tj1nT=Wn(b}+af^8W z+PBirC57?V8kzIO<5`dAqxm415wDpYijhwZHYzH+Qv!=Kas-M}$~vK^lmpj^wsGxP z(kD*TR_ax8OGjF;OfDeit7zL*yimrD^r?&(O9^{=+>-3?D@twRQ|Zdp1;VgMt9>J_ zHCChs_BJM?;59dAaxMFXJ4rP^uCZ)C3O43hm0kBpmh8#QM!hEK0m)v8tMk#%vWii8 zDcLzfO|xvf>#e82ty(llG}_H@CI+xPrT~L+ZNDsKdj@`L2{XD2Qt=pC8-1f_ammeOBL3Vbly?;l zSNTN+HtI>jk+}R1Nn~!L{6Z?nw{}WEdGyS5n{zr?eKwO>b{C&bEG=j>KI7HLX#J`QStOJ-HmZ}$&kn;m z`2^AYsOg>$g!2>s{?RAYbN(#SdHu{~q%x8b7LuYEGiC!YX#5<{kiUkH64o;B`a9n2 zrcV&MRM_WslL#9icccy`b4r%a2PFw^O4KK5xW>yD8k_caad60%ITxtuKmNipUAz?Q z==j4DB@I|Wx8xK5r!CB-h7&UM>KlJDC-YNktdol1QbR&oF92W*X`|e<0gm4JA-mpQ;*KvHL8*VAEw?>D7 zDzEGMWrwM7(6~~rWeqq{T>F4LvT2jtd6Y6xYc5<`PZcqSHJ<|0rV{DM1(Hj(u&Aqt zS1n7OezxO5O?w$k+})E(8fbTHPF~KjXT<9sv5a30qXu4Ns$Nd>G<2J$bL42R*RByF~iTmy|cqxcdS3JvZOD zdi~(#sFiLl6JkqE!;yv7S(k6%dcF@X;wK8va*bTvy*lMxj6w5sE(};vSkqrMMPsY6 z6k!|%%grb;jWyhwHLYr}w;U_c^{0dG9dYbmNrsC;4g{WXYnAdIh`d4m^Xj*|z?8XJLIjg?Bl9?>1vFHMhs30x) z;k3_{phD|5Ik*!z2*YXKszC+UTo$F0|I@+tL8N!IGGcut_@4ohijv0BbWB)A6ZLAa zVz&=7w^w|~?;yx1zuzHLSh1a)Bc!X~6M@rBh2Z!4_ZK)Qwq>?O8@yI zCAb9@%k1f<9$S_m)fkBjve}|WSmSOmA}!(lr9=@{z(w;{1dQ=EJX%bLMO3G7V}Hk} z$563O?NW>M|6uxCE8pX-cH9FDp3GdYTx>ZtfS-BGtDu6Mt0K6Y911P zq+p96i_D=fAEDY(wDa>64n)A=Khn< z{(;B;sHf{+T>a@Q^a8Mo8end(TbVhAJFCEx`uz)(TwI?yjD@)3yQ9HcX7IL1Fmv)P zA~uo#Z|;9p3;&yes_#85wh)c-uE`*ROTJk%gnnd}@XG)~7SIe;^l!0W+>VwdEnx6g z($iVynhj_F!;vzJWACHnf2$@}_YmoUSBJ??3w>^mW6}nC-!f72gct6z54PzR<&S3 z_3waWbR%Z|{*T%Gqk?IM|A@4%8w)icx4R3BQrbl^J&#ErDdb`DiM17hRe<)D8E(OD z?M#o}!9w0#KX=RnEKS7{=5m>gyY8LM(ZpW6N8QuL#C^U9PG&|&*8 z&j9-c5Uy>AYzpdny5|jj=u_75^=Mr<80sg{ZUIBt3Gnw4By+zq`={6=QlD~d*g#)MSa~P=;eIN79;EU^UL!-U0l@XF^UjK_Z+glY78aL9vRMMmh7+QL2BxA-z-hIRAu~*l#aM+YNGYUj zu2igKsMjk=N?J>Vl$OQZ0&5K=0D(nvSR4ol#HGJ3BB4A4$gr0s-}%9bX5fdC4neE# zHW&*q5$oB?Lm5J2h4l-*?$cQonM_*rLBzO?B)b8m{$|jRTLU8Y81T7_RR7gxl+TS2 z@Zbuv728i+2 zm$bB4aSLU5U2^?E!CdRceLP@(cW+=XP7-x58lG*NoOgq*VBm75mOU<|dlZFj^L~5r zDEVCE@bP3Ktzh>xq&v44~*ZA>4U__oXXeC`0L(QAd|z zMlCzdOwI^VJk6TDUtCkhqKB5P=R;7vM_w~tV*Da5f(gNd` zY7_0Xdoj(D29K4aa$O7W{qFN@v?q~0eM=pB8W__mu`*s{C`iv$2>J)@a#LU|oui!! z1?2FwrFY)SR73tv`-co`z}o_RydaSM#BS?RUz3@GJ8t0S55~A$V4D~0J@n6Vcp6!e zq*M+k_4NSlmr3&2+dzTbFLJagR9{Yx_lhg{}AnU1Md!2^Fv7s#{sP`SL%s1+&;kXb3}1l74t>-xIvALO9?mQ6 zFyCsPVX*sA&#CW{&7&Kwkvg!Qz?mBDncs*#L*C{UzZPc6KN^3ABK7|(PGWlJL{$e` zOx<0mMG&)ZJdUQoFuWNBZlr;(LsZ(!17fj+>(?<$v=}%pY1Y8i-xKpi2q|^{i0flD zg!J^V2639;Z3Z1H>{JgT!UI-|!*AI3_Y$d516JaAM+O+zt-&rQ{rOMcjKQt_qA>HN z0(-^BT5ma;PE8JJ%Rl-IZ*MUNZ6EeJUBh%y6@C|ZmoNcK>UVxpHXk|E=ZL5jUociB z#jSqe##z%t0dk%36Z^BrQMu(>k%sdWe3UrD`@0?aqk?9bf{?y^A0mn6%>*L^9XG?G z$bKQK1XJ5fwwe@&8~oQ9C;sNjovtQ*@Wp*Q4)^pw5ZE)^$2(!e0{)f z-hz<0H3#U}-At&a(FWJ0FLTq+6@{#3mzqf?^z`sNp{-&_@49t#NX+ap-W`O<2eQ%{ z!ZdIKX+|8Xg8}@Qq*}m+yjqPZD%{)34tzu)5E%O`yFzFgCvhy1bKb>vuteF$3Mp93O;tMY>KBGSAjsE^< z7A|T@Ad)(KIEpD#0E4eqnJWGHK$JLZ@౎kg(P`uPfZ1UfQM>sm+4YH6A-0{`7 z3NIc!dkcISem=#`Z%P$(pBA)==Gdh*2M?tH4f6(MsKYYYo`MP66-^ zw9$vSJ06mg-(pybdYUyGPfwC* zRoHojm`MdBHF(*W4)kw{d6$No>@f96ky=udU?c0cn#^l_(o^T=QN8P5eJ40 z+LYqK=Pr%c-~;UrICVCko$XLJiWUH|)l@S?Z?pVv|$s_1c-G9{* zAdpLE)2ENgzoJV#$@qTR!8(jQ3^vU$w@aaxK!>piNW_68{e$e z`TG@$I%7Rj%t8KRYWfxl$U6;%!8!LgK>xm>Ppt))1PG=W07uIMoakB|2)JP>6!g>d zQMlfiEAIQwc$Ec8GB~ZxUsxTC!tc+pv^C?mx1h(}U`3+5zA)s({oa2R@E9}wC1nK0 zs5V+D-Wk{i(EX?$ldgk=xU7!@I=Fs zj*pO`pH;=KV&4l~az4z2Y7G2k5i55;C%d@K?JB)?F?jZSNi^m`mNZ8CBJ{CX80UIP z^2jjiIJd6pO@*Ic$g%BYkK39aiS-H`(YtxRrt~+}&#F^Zc_&w=AK7Gx2gkVa8}qmn zjPH&C$i3YI>Bm=%8?0%%tfMj3O%O2&6KFK5KlMM5gVCk^ zjsq`y;|!Itm+#mO>_QDN3V%~@QhoTWph{mp5*^zS!$2fPcH7am|awfKj@V(#0vwUheM^$5i8=WMQfp*3$^TOq}L%gsIss`M!O zU=$g5%X)6mNXEuLZT8l16TC}46+#l8*PJAe&i zWM?4Q;HwdvZpXIm>h7Bm_XVS9KFsF3Y zum^uJp-;FO*X*W%ea_j0{npnL&?J%aU|r7!C5Ii=`q>0iNJcBZ|D^N8# z!c|-n@bX|oCMJ9BU;HyPV7pZUE3Vn*!UPF^jAl2JUd7I*xZ z+@$oSZthP-gOfBGsKxgtcw7l${8DY}-POmQ#ktW0Br|UFCiPj5uff>Vc6iVifIe}I z1U^KBjuwWa;P8k7RSz??(PR~ROa!Iwasv-=G{sKj_e;f}lt1tRfjg_aFO;GZj)?{? z1>r)Mg;Kh?MP;`@WQ~WeKc!w8B&qJU;w)Nn5!3bI&(7rR@ih`c7>XupcX;1+<%+9h z0@VaZ`k}guA9Rt~43CVj?etbCs(N4W%I0Ivdyd)ohH6A|Yk6*OF*T$yj%HwlD~Bpm z%^8CSM6mUM05YxyRvUEMY_`W=YMRP_OacwU7m4Q&Hm_NFj-4MPDH9~SInOS`ydupt zi62r#xLG@HjhGO)RFoZc#gfK&_BdVL(Q=O8aAZr?vf@!`_-xSdt|ENI!I+NfT!!Y# zQ?j}@S1c=dZ9YY<_KIM|Mq_?ZO~9yw#X)}@8p%sPr$Pd&6a3!u^c_o3Ih;fsK=!0} z&Fa9jy0X#}4}(!bb(fZ4ML1Gw!{36s$GL$L@>M%gnr6H=G@}-2UlG!GB;>D9mcT|9 z$HE_i{_;rBR?sLG$z!ixBCFV(9>_LO{NZ#Jp-c` zSNlg`#)(6dVZB&x3>1k*x&CP4V^v4sIe3hwOsA(EkBEUWB13F!-I!8~Q|&Hw5HH*{ z$&@8>a`&bhboju>fOyz@HPMe-aop%uK^WgL3+F_vX>wk zy&gUssCvzQZ-^`DWF@`WOn7UKW1CD)ncKs_!*!1fnEou(EYLGd!|(PUHMf*_&}PUb z-qKLw?VPvvG7keA%Y=g1AaIBkJ;gn2;{3d;JJiy_zO|+K- z+9Xg2oW1m6cf7|)+LpVG6pYiUmU?pC?v0so+ugzM$utag#se+JdnF&6`+FSvfHOXn z=3@QO9kBh$pvA&xN|gs7M6|(Vr;ovVeM+-d2D+{eXOmyqZoBGeCKG!jrQ@B{CnB95 zxM*oH>K6I%k`BQlHZRiQeU_?1`I*Tx*{_Ja*E4}6xgiIce?jb=Bv6bym0-`+$@G%D zY1*hqH%J4tU-$C08%=DT&q^Bv#rH;hR+8hrQ~d zO9+OK9P8(h$%8 zH_WyKjg-oVd{ZCG>3S{X+(QQ`2iAr>{DRjM~(L4nIJf(?&M4hC|vEX;_0%-|HL=DB~cM4Y~N= z5t^h=x+KlhM2#riS!mj|P52k+VWrU0lF?4``0mdyx1U>We^%U{G<8CCg%);%5U&5bMU0(tiB1PK z0^&=JUh9Hwjz8NfpeCPp-rRdgN4TuJkKu2IC%et;N9#c#M<&)cg-}W+)=j3Uu+NC{zxTv{?f*S^M%U>I&<|^I}zV z8==ir6aL85lv~QiN<@odu3OQ2tn#-PYf#v6K20|PsnFOk_MdDf3}D)p4f5|@fjOZ| z1^lXsG1-KN)F<2;4F!#l@}Ey*Vcb2nK6#Fek^`qiui@gC>6msBNIR);MJYzNaOnC& zsYDennXEIm?Etr4Z@%s5v|~r?HkqkSjIVWJkAl*bc~*?i(ZeRQXrJcpl^V++ehlu7 z^igkl->@SMYg8sQxwR)3jR|tU@OO4O>Y~n*T{k)PA%{F^8DnFfXKL*GR}YtJy*Gy8 z-!$BsY&5&uhQSgfoRua{iO^_7xO>Ip0k1F?{vQ(%~lxU@JsPC3eE z5r92cqVNW+8r^W<6eVskQ_vS5Ga;~)EPG?WLH)36^2glB`tVIl!#dZ;!X+{ z&U-a*RY6RlC!ZlpFpWM6n!|Sa^VYd_!xvR^0P>4?=7+l1*QH{L^9^@coj_8FTvY=2 zm*X+qIW)$~-kE)u4b!&%CEu~ddzOzV!eZ~A!J=5~xG(#ogje9=w(Au~K27A^r5tv& zgL{eJBv(vX=zn>6%WhWa%2KGa_9qNS2&`16Pe#$H@jNs3qy&1*zJkWWgq`TJ?#}b52E&SscOvzAQCO$3`qHDafRnrwYjtj4_Tv7BXFn z9LH11=N8`AiBknRuJc{!99qh>0fMkX&_Q)p7ionpO%yMc%ukXnj9{T3O`$>T-)l&z z3|Y%QDjU9FBzD}P(>F9jsQQ^4cGob;@aev=;rC8Vboc8I)f7gj3-e1sLwExT6|MCA zZ5@}9{u)vF{g`xReK2MYCz>-g>ju?2ue65?K#SbqlTvdaZ zz8m6BcI8vF5|+36qGQ}Y*|3xUV)V!+)qAC2qj$ZWRb9Kq6+<3D8?+Y>_Za0pkdjv zB8v0L{6^z@ZFq;os^vj?)HPiFw?hrR)y=ZbAm&_?WniaPB@1_rAiAmrF3S78p({Z2 zrkTGC+R%LVe5UK$_pL zxG`=OJn@R^OXFKnBW|radMJ5aozLwfQe>ZwjbDJeN8PoN-E)NOL@-1Iu8kz5V`TWzl=mVpbsEG@uXw9P2lFt^Y%P`4( z3V#NX1TkYTL1R;nOguosYK1z0H~g63OxqlsTB5XCB5MJ8qSJhVcz)Y@3Rj}OV(FWs z=94sk09v+$GiLOm$|5};9t14xh}-CJJgB-k8b00IPjoPyhdp5oTr%ea(hE)^eu6N! ze@i`GJFxPK-gtdnwHU@0M5ZfqFdG%OM3L+cVaStEX7%#0i{T@*?(mHdgyqEq`O5W0 zC$j@O-QMDp)NQUOK7%u?Ie<$@VSy zJLbGB1KFS|S#oWh+98}eG3<_ya5)OH#%Zjb$FGo?`qIhP*`;j^E8qPmbFB{{))n?a zurG5m;tkcqmsM48%g-oO2*G|eNea)ko`O`V@@8VGTm!`9yh)L{wl65d_f5ZFg#P*u zzpWo3E(-ZF%bH^;q#1wX4Y_mby;8XBGsOK}z}~O$nMrbhcTsv7zjZY*C9){SJe@Ng zu>Req{-(h-`z$OdkuvFyAynL`MsH33=_aO&bBnNDSFSq;>X^WW<>;neN6OAu*j66X zP?JtOKzQSP9T}vI5sFLI&}eP)=-2*+DA)RaM4AYK7zIAUBPN+DECLHWU3QEerJ!tN zfio1L$Zp!4qW~v14KteV=BVYjZwR?_z4i=b%V^DGjkILc*u%5oRBuSRtuFzxnWFFu z*kUU>OlE)LdcsY-O}ry{rdERH@r~97A6;@78vM;OtR6eI?!XRfuPi$K!s&A>jf7}x z1Wgo4)AUM{V(?(*cJSd$mPO73TNZcRLJz73L!hnxlGYevr9fqn zv0qpW=#U^V>5bd7o{J6l;Wuwd80n8XnF7*ouqg>GjBqA76bdn1} zG7<>xJghc;0jv0gLpWJbz=lm@qr9p=+mOoyQjinx|glj|L*2=&N%!Qg?d zJ=Swc_Z6fa&s|;ZuhXa|@2Z$(k7-Z0{E-1KF_ss&a15Mvzqs1n9oGo2d+S8vusp>t z4vFXBp7S4)Y_wQfg-BO==yvlF%31Y#A6Wd&NKeh#=cI`>2C+tAQ0G8(uv^m%jyGZ{ z3gND>YqUQw7t%6sCo3*2frgK}P7x3>C@Tuda;~ko_luzXSFwlmEr6p+9jaJzQ*Xfy zm;7zyuRqaU4)=jT<=L2s&`GPsa@)J28dO8I?x`@kyJnD(9M<^4el5&Ln%5H2feR3~;~Z z=SQtADZol|+F{qwP+4>nCIs>+ z414w3U-;Ss5^tYxej*V9lm6T;64>G^3^HIUL}qEzL7!WW#3`$2syPUBRsaq=={3Gq z6OktI#ldMU6!%A-BBc+NV?a_j;buxa$QbcBMJMFJ?-JqY#a652(MJQqwY zf+FI$>z8_gRNo1#Lr6xN#(X}ka*#&xLU>v|KM4zr_H zVB^?Xh}}7pL>0B|%xtm7#6(iQN-8+w}CW3=j^(zrxkb z1ZOaG6?zMf)qz3iiQ07_OdhS#jI(T3M+*u|(q#0ZS@mbeU`7d4MJC)P zW(Un=cML1s!;_;LuHvgVf61HGxJ!!%8y_se5(toza{3k4lXFzygDa{{+S!!bXT7ja zL?AWL>jmZmqWT`YwO+~)#>}3QB zeemqCLcKB3;Fr?t+3iT zxYi~gRNm8s6dgqrOWS6`Y3|0FdQ`ID}-Mqu(%m=X#DOcV2aDN!aD)?lA6DBw0(*TQZy= zeO4Ferxv~E`mh2cVfbCS@F3^YSma;o~-evE0aQ4_6LW1D%T}e0pX1wr{G3We;at#IZwszoDw$P-{{b2C)4Jpga< z9*0(&=%-ZrL68=mij& zJa4V=KBG;Epmb66y}hAbd}BuTdmIOZ?5mJ95Q@52X`i#4+FeDtMI7d+EM-9DP|)UT z(oSHWm9`u$a&7hibZEY|l7T9ppHb*tp2y&6!A1}{92qXy`3GX|mPlFfS zpW_cLl4n|8MyYn9oJ-nm2RtSiaIFMru@E>f#$~_#)AhUaa!s2?l0fX;o^h*Ig42Ge zQ2)K~=MCsGb#Ec|83g_rKK%0hnQVgaSR68&TIzy<=Xf51D)1X)Hsjc-b&K&KB}z5r zXx0mV^C05Jt<(jEX*l+E6NNwd2a1(K1Bn~%Vk!UqwlnBNh*#~%B2sJE^b^@<#~7!( zq~jXB7Y5r{yvjM37Bczsob=+r0q`C&Mmy&4V})j|CnLPq0(vl&9PBQqP%KQaAE)4c^nVfoUfxk5ECV1)UuCC>7Li3Ly~E zif?iH-6aWi|Bx`G%TRk#kI_b$hsVRYE?0Ibu-YWfw|B&J2(o(XW5%@T%w7ig+aeq3 zR)Ma{4@WoQ0(`OLf!|FsN)b{O(}2P~{h|H~##j3Tv3^{GojWhG5{z~P?P@+#nD#;; z(kh_Cti-aAra8ROhJ@C3=`)D@G4>PYG;|y0mxkatE+#yAi(s(-RtZx!fq84GxC;in zgIq+5_!D%-zS!2$Xg{`!z8Qjp#t-1&N zR4u;cNY*B0EHMLI1CPBUs0uVE8y6c8hD||B>?mvJ+c)|T#;-%17Gy{;>!0QW!*oNW zK~(d)#4@dTF^xnS(d*jlAwzPn27OoC85vSMWmA7_<^#l9Rzfp!jAdw1smOd+KJkcTLXOb7t)3z|vB+ z+%Vd%e9t>pwKV3z%O#*iUk3-+peVv>1+--ojWOwCI0lEioXH;MS7qUbeHW(Hv&)&u4E@pC;-k0+If)WV(7jInzkc!9o6(`=A_zcK#4&0jh%G(fU@PqlWc(Pn4Wq zuzK9)^nG{`f3Ow>%wl|J#q`a7J(XTz^k=qn3(U^j=+un=OtovLMJci?ixS-9#_VhQ z4^_H*#l~tJEBRp;M=>a_s(jqSm!5}w9< zCoinbL3ej3ZKm87vVH)m&I+ILeC_#7%G@^h7LuJ5K-|%1Em&ylWHvnrGVC|;n zZMxjf30wTT!Wg*T*jx)5tm)H%>-p6S2RCKnRk)f>&k{}aqJOo6C40yxC-J&=5Qeap zJ$wRCy#e|=vNE&wf>u_E41uRuXOh8VIXQkf4B`=QZk(~$LNhNc)bWqR43aF7Me9!#V}#)vC{dI>Cs)< zsHnsu&xi}R!pkq`8>%c+TA(OD=u^!M?X@P)>I&9IxQQcfI57do%P*bRuS7B67@!q$ z&O};$`dQ>ke=;)*HHIIQ#JYqIwJBwx!6X$0bxCnz)>$nQpJ~NQvWPVkxHNsW0PTNx zU!AMIkULp9%l@JKW(E=kjo@+WF>z3Q?h6E0N73yZIM+JXM`BIx@JzLkx4I*w5D5HKM4-J zDDJYeIyU#Ev_N5PZy#IMU=sm6dgZLEb3E=pe>Y6yiy$Doa;dD_#A^!k++_6w`AM~J zj+W$v?Nx-hEJ}2>0u1YqrWvB9b>$DA13~)oqUNFZIIKM>Za%bi%5Yx~#nx=!NE4YI z(6r#hy_8q&d()P2X9%Ak8XxkJcoYL(1$x&AX`SO%tq1C~UUHzM(rK90fUr6YHQ%Uc zn$r|RhRl&5WDY^?OTLye2R`+%Ro)oA_N~Z9Z9Eur6zi%K`_%&Eow4N3OYIn$W+JoK zX1|po=?MRBM21L{UjJ?U4ZJ_M=;nPfJ@i}FBNn{#+Kuow@k2c~0L0vHpP%gWu2LKR zQ^QlBSN_kC1e^fES(P5%8&Vlv%(~5ji9KOY<}yR}8GEn6GmLzGYI#$aC-1yTaKeiV zE^bt};jY18IL$4lo(akFUaX&DU}I*mK@VWFLh#8pR&VJ6GLf zUXG?U?K6z@Ku$usO8?*b-vJMq7GDu-RB^6B^dVW@<)Xyq(XMTJfLD!jh_9n~xrb&6 zg82A8<0UM36*7UZ+jjj~Z|m2IBNKBM!JVs1SYVLKlmboKa*AbrqOj(8ETP92B>dF- zZ^7D<0tQjZdH-w}TBp9dYLm?1wLI!TyO!FKOuURP;Q|wv-q&WX$N+LB&^oKqKM#}< zLIe}DsfKg;w&+)0OsR>GJ$Ri9R)=8^%N>nQQ}BpqNn@G=GzXb_qS5E|^f;=wlorJ~ zp^v2rmP{00*g^v{0YD4#o-KcSyf)E*y^Rnud*$bTTF?3~a9cwvr=fLgbS)Od*`HFA z%?v&Dz;syiiomJww1=d^Jn9CQy?UqPVn`G$&i1-P${D`E3fsofP?x4e`?M?-phh~P zv5MxL^zZH-ma0Q@8RCA!C)_I+#pv+5f1-Wo^!mQ8cd$NvK-u@JUV(u(`>GX^QZ#;P zr7aZ(?%(d$!}fuq1hL<~LmK{e7%BV}Bs;(()HqN9p^#wY5c8|aYH_9DEl$C7L!p42 zc~H@0J0#dj3w~5k%2;C5Hj{1?P~Sza1_&sv5xgzijW)GS+A#IAp)^0|g7BVIf=*fzmFjVDvb16g_)O7yzmaV6aUc+b^z zQZ8qRKwqr6toh}hE+IYb2uJu_3;_k>h~R)#h7=EENOro&_U_J1xC9B-wGjXvLORtj zF%obH&s=Hc?f_M7v!+MK6s%?hrxQgnom~P-T>>c~apv|ak`I^Xb^>aVL_hmTfBOXE zD95d$I+2w*4$uY<^zc|Z8c671U1JNsy$3|uRTXxEkc_HWCuJ$49V$(wjby=@@T ztUcaA!$Y*P_knO+aX)53l-<+4yHvD(xm3NYcl3DsPIIvO~J%dw)8WPFh4E%~@JkljA6It)c`1U#RqH8uAN z5`okx-+(Opng8m`Lm^e~MG>t919W1(C@y&rg^L=$BOIIvhmsJhy;?nub!?*Iy0=+j z^@);ub}hVj*oYH%yJ&`mJCt8x(3-Yh%FchG2Ny1O_h1^#p$NbZ$8xLLwlt^0A)(LT zO0q1<<)_+N>fM;i-u%8mU!ZT^s#oHL*t{WklsZBdS+z5wq^(cgFG-SA2$9b5ce>jD z{$m}Lwi-B{c33BU!WNf|y#sy=#?o|E$)#p*`F{XHK)t_1z&f8FPN2Q@mn_PEgm>Q?GKHsMf)%4qM%A>tHlj9?8cEVd^r7R*J>& zf;?Haf$)!+NR4gelA{~GjqAw7RdeuGI|B>rG`ZM^V)vk0^7rEY+qNiWRD98yZ!|xi z!tE4a>6ZHV;cMjPwN4)xPk%ripvdsZlxbc?mEv?^_`-4T&jgb(c_*Y>fI zw-hWHCb$<<2PX9bVm3=+%1!`=R3rMcT(X=T{K~;JsxeE-vOt0Rd%5njb2k8FxV&F{ z50%u26teAg5rM0h%*FsBYZ%b-p|MOcpojxp=}P(np4vu=ro0~*M)I@*{9C;kyGtqR z+oyzo+R&yM0C83*nNmx8?=;@FgHQ?WJ0b1=h2d>zcWlns#|WMl8M>gHe)>3bv(k{E z#p-Ok>>mgvq~e;XVExs~r3}Ffug&0BVVG5FbP_tz=7m=D^fgAjMRAqhONI3h)NWHQN1?ag1SiLX1N!)Iv*_3Zn6Yf=@eFQvi zM;N8R1M-BE?4(n&d#}gEKGQF>RoD)SATx3QyCJav&ieZ!Ztx)o_|pDS+Q)zg+LCKR zUt1HE|Iz*7&87gIEZM^t?M=@6H=7kmu9%?KSs)%=uU{hv^(b?q zJcTJ7ig$O@r5LilvEJBF-1~y^`%vOf5J?j)vxAW#4;je%fj*(gWpyR8itW?c={xOZ?I6+i@FB)>;gsjDh%|*B z&Iwhqo~*okshIzo4ifJlMW_csX|-<5W0e8HYgAjV{lZ>ZjiMH*eu;YV<*c>u)-ef@ zrEi@Y-bx6Qzg!EuU`B6CiGGjL!91H}Vgm>J^xlj(bcUGc8}>erWnzL<%Zv(Pis-q= z5%m_hHb)D3`LGt+W9)1mNe;a-a>Pg>M|8iYQvnnjB6fm^`jQ0%Fl3My|GydL&Zgm~ zRicm6lmZg?@(zeT!pW`w|MuMbtkLuvMiC;D7m^*=6d_!Em;}AyVewVtoodDK{IF@2 z5Q1+a9R9q&{tI@8NN?(kALYK?Dac>@X!!1dvG|pHh5TQ9K>hP~oOev5r`TgU<{$KJ zkjF@*DU~iYN8?*YFoNw?|Dj{dc4atjFHkE*cZ zan>X}jhVTY@j+0yc(BE%;Id~=s0-HfC4d9NWQ6IGC6l;x*NXA`d zoC;S>&REzG*{pRBHCkD4)?`8&_J0>})040h4i-&E|-h;_I@h@#It` zuC?Wz1@Y9J6eR}m7ZEL$V(HNDj}tRcrU=(2>zeg&eWf!*6lmdgEt$1$@FjbdG()$c z2i+ggLnOZ*og9*b9j6bv8*F)}Mt*u#AL+8;GYx@xkS8QdY)8*;>c_Zy%MQa?>n}=< zhaS;JJ`AB5ED*x)bk;haz9b4ROM|`oxOGWGC>b#qR!y6xX*Vk8f=A*ZY(&(lv@Qr4 zWU+Wl3}m(UCGVy3PhbFJ*4)ZY)ZT)bec!f+7h(ECW?O3Tl`thqHs$G7s!!+of8fed zCA*aAzF!X=%PkZwT>orIIJSctz3Bx{H0zHv)&Z^*7Na zHxWPdDBro3;k^CdI}X?#dYoE-n({cNL8uvGq44H$InM^BkXx*xDk69WT~cbYpuX9{ zlPx+`jZlU_Z-rmy z`_S~m@!s=WY3i340){a~^!3~tlX0eEbP^dubMYs)=vf!c{vizQ!~L;IIsQG7&H)k4 zve}{tbmSStc(w_t)K&yN&rR!nj$AWY`5Qmj5n)x7Rc0MLQ7trAfAYG_J7vx{9f=MEppR!{yEJ9!|xuiSf^1}>dn&)Cy~zF2Y&N64Ze}>;yh~3kvvnqfR%8HR z3z!}SI+=%!2ph%Ky>}&f9k7GTv5hPEYm)T`v<-!FwdSViw6rZpMSmV(wD3rqZ49k$ z@*1l??WWPqA7*l1+2gFbEreRu4A_wkj%D<!U(}?tI%F9wST|r`}PH%Da zHjbu00`^8TED3SwL^rVyNxDv}_cAB9Z|P^IuGVcOW%!~-54v+0ynTHrXBi?}lwun% z$39HAcN6$eZie#dZRxwXYw&`1D38X#9p znAyqSXqJogyN z4cZu_Z`quX>N)(Bt{MiDW_X)tDr?&5d2sS%=EVR?1N=Fzwoe)odyqJY2GweITzv)S zT$EZ1w^5SAF>QQVWBOT(z{14($NS_Ux*{ur52mu8{60I+%tu|K{a)LhboPr#4qwA; z&WA%y93~XdhUil8@o3yM+ZWX>LIPF!S%MN)0D36hDKvtoe(jSpbWM{(ZvZVhO)FV+XH)7;B^R^gIZ1A$b$7xM2Km?;=S{ zFWrBaf}Bt8tatx=m#KB!kfwE>ZwbH}^gFUY{nvDD%jI<62?^8%Vfl>hQh?Rf2S`QP zWRC?46>I5Eq9~nA9mImA7X(c*IuS`zH(NcvKBw&$WJQ?)9n?6|&oBmal4((wXTrmy z+PKAU=8;;^GXC`Z5m;ZSQ@tq2h|P{4D*o0rHGQ_OSb^{>P_}i2={AMS?3Zg}Q@_-6mW7r0YrfnI)as6~ z?A`>*up71qO_qM(C)Saq$ly7RVp%vdIz%^c)!~TCQZ9q*tZfIv>n0f?@aokFo=rA{2SUB~L)(DbnOo z^{9Hm+dXUlv-z6m*;rw`J8ZU@x;FEwTJb1FxM}jx$4vPZ9ST_UIMer}-TsY}h#+9B z88#(CNx&sDbbXq+BnHeahC8MrwiCA@ko**{I|JVJbXl5cEnp4yj_N77z@hG5E!!1x zW56AoRqs|8;Itej5yr`u%=yKwa15ons_#^t{+M ze3Y2OyDFHEb)ZNXFUp-o6Ai_st^KzTM$$+Gn<}v+pSKFMHXDm!r!bdF_V?A@s0#OP zPAa>vS~wSTjz((!tRFoY7K7S!^SXcROO~hmOkD5S?1Ai4FAI1g{ioJcO_ zng)GMhTf-ZegXYh7t1S13e071>3yaswSJ2K?<<*n6$^<&(Z}v#sFdZYZ^*6V?E`dn z)sYT=+u<=vR0(+<^H)B|#YYGa*of5=Qqa60=_7>wWWLF?)zf_;MNWF8JM5+q#zdwg zr1Dw(3#d!2Aix!NJH2AY+4}L8OwdpoFsnKb{5yW`oC)imeAPO-av0x#F{U?DzRGKW zJ)e@|d}6z;6Oq1%Mh;tyT08#L-8zsf%IP?q^neTkIr@~tE+ovdtL5QT&mZYd#_QR* zV;h=xL;w5gg+F`JkuicMpB5PXZV3dcUa>$4iv%3uXHkJ~ZCOSL!imCIPfY6`9L+%& zkvfcbR)A%y;c+o0Qr7I z_Jre;+zd8b4@w~-)*eIoL3BrQ<|(R8DL{`xfgXlQRVFZ-cp&e_d>5V~?T zrdr_rQRoVU4Gl>{^i4215oP#Q%BHcO)r2#^DP_X6nTr!QftQ`q}~@mHeFcJ^-;W%kis z3N7Xy;TDRF*yGcUV&B&to%9BRqDkAF(l5V1Gg$%z*p^xRHJ*=nYK*O5#)NhCNIvr_ zOceQhhuQ@iMQq#yvO!TcVZ8j8b4U8nH3El4#J5#@IHRu8 z5#Y$75|5s6JN^dq~(RsW4Y?*lLcsph#8A^Wjui} zQW38JDu}bO5$fgoHOJS_v- z=xzA_E47u6gNHQ}XULjY^^Tdd)P2OIBxZ%<&7_jriSs<#pAP|Dm^vy7zzEmLaV~XF zEE@RAv6VLI4c}jUh@X3aLBzJ=T^iSLFEy+I1OI?Wl}OOu6vel0UbUf{HZ}g9vyuh^ zh8wJNS3nsCyq^CKOMAJliPI zV%EQ3~~L7qb$U z)||x3_U_6I96M1(`Nd>&dSl>BI6c-zz@1|>9K?mv3oij;%Eth+w^e^FX<+YK#n2qW z1SW=){}i@@hK zlH_foLVI2N?AN9&@kr8TKITTU;ddpkvC!&_;M(jtEr=Ca_?eKvg*>K2Ut4%cq$Nv& zG@o6@sKTp9;#6K--J$SRPc@3_VP9Zg6X)#5)PY)f`8IcA)_V^7ML{E6>U{B(e9C>{N21~tn~sO~FZ0ZDh(~=wa{>d${YwDP3Vc*1jPkcYvVbCX3ZTjt zK+BH+Qr3I5yqyWB)l{3^DR8S_^~wOr8f1ZvMEHTF7Sts!6MFURRAxB-yq*`o(bV`| zp=;;le~qzCMHXQj1M8ru2ftL5X{9})cSkoBY)#|RS79MStc+~mv31CdhM zm2^}=w23I}zWlV=E(xl9g0*Z9Qt&I=VBkLG>hfcM5C*0RLcx^NXxT}M=4+w(u3D>S z<{t<6tkP0RKl1XVOuRO|`|pn%i1D~2S^l*tc<)RYoQx=m&gQs)3km(LPH>TkLmLt2 zO2DZ1dHY3&W_s)X(2U9+CR?bMi4WIp)3>ZkjKtNXobhqDOp%C4Kv@}$@Qn5~K>Ks} zg2)r@okOpa6?1gIG^<%Vdi)=+l3gGSlp5g{6Fyw=K%nx&A9*P#M#;g+izUArV8$Q% zCFnpXs)V|;NBo-!+f(eo@$R}~{VUk?1pn#Y@`hbXgj;WSvWoZ}TJ&1LwttD!*$}j; zv=jMx_@`lV;aKXyeN~I)Fw3L85EOmOn(HVsbcK4^<~H>F`!RUpP&j=x$L0C}mgfm9 znz+te#mG@F(KYiZT0K(6qzs)@*XE&W8L(Y7aIA2y!mO5NMVQHc%$KXmrlm+HL)n!B zS&h!sg;QnS9WGxwp$SU8#OsJh`W`8B-kzcSfVK4(*MIaJh|fyLrNH7vdvN z0GHpW;&r!J07<=E6^Y_sk|Hp?=L7lEMVbfP7L7bKT-D+>0QEpy=D{IVT`RhrqH*q{FxT2H)U48cLMb>VNC*r*)w z;z`5t!>-QPfb;!mrJQyUwEiW-pOxp1S3aCI^xFZIIfOFYC=^>y6aceYijhL0=ldV7laUG31>2?au5R?{QbyFz=kthp2CO<^hMu|CRv=N2R^x^HZ*(rB*XLaAjK^Nj zBr}E45qbD($%i8@_^FWKN4Q+~DxH8gq+>7REGCS0tCjJXhhX(De7gpOYdKA)oAzGr zT;yh4_|KN+$WFEkmOI|n+CfVw6Ti8dC&b?~UD2=#bZO)onubSpf4L4Hpx!jNz4=Bh zrd&dFw+cfzG~SEfTaAotbp8u+(2Ll&Dn$o-4flxAdqr~SjEA5!k~ozK=7U1j^13n? zd*u^7ueo`U6<1yX?vR`9VtlPdIQO+@cAH-3?8bQ{{Emw$xJj2qH=X)+L}&}j#y3M` zXKhY*;iOKexhLY#3WALyA)13f)GZlsng-K!-Ip3@(3`Ty3Mld!qCz-Le6>PEj9sw0 zt@-ESm+;&=a)rhIU5@@vn^DUA8S%rj|BNG;>VA0M>Q^w1&2-3iEShNGI-lVU!XByF z9hPkTe#7vb)_T(=qah1OAgMBjQ-S&rNxx8dlnbfrk?w7TAgcz8CvR;fO1)7i|He6J zY8xo`&4Qf==XG$K0W4ZF@8~88;WyT;&w8aXpaPZV_S?QTt4dYDOSNE0zU)XoA9|^1 zG1w6lebV$@dP%dYAeZ?vT)7SjE>1X|yL{Y(1H5DJkKHeD*wCD&`f8EaIcg2hKBA3s;)# zp5Gx~*^xGg3hpl93A8-1uB67z9xnN?PV6RH9|h}T8OxqK+-wTW9h)!4o4hb-R?q=h zF(M}a9Kcb1Rchtx%Osu_YWQ$rN@>-S7N-y_>U_pbSM!O)exJKiERRsQ+J(l*cde%g zWrkUyuuZ6>M`v%+F^~uzf&S?q)s%Y4V7b7p{GIU0D~Do()>`NFkgnKhuN8vQH0091 z^}CBw)4# z@*74>Dj4J7l9{f>c;islyXK;1w66q8;aq|*e5f7-ghp&3clQ^{Q=u2N8wb}de-6gm zu+X=aR;i3-oDlX0yP3dt^F9$!?`1;_5=uyQk+2vjZ^(IexkGUroo!alEP>#Nwl~7N zsr>Ir6WNMal)y?=SL8JmjY)F;(|l(nw>Fqr| z@rYDQQv?hp_vr@wxpu$_lLz2PSE) zjH`CB+!lAA2ch@(NLQO8$9JHI2LRX&jUEt!;7&CK4oNsgv5W;{2}(NCvzD~`p5j4P z7HeNxCL!hq7#XbAaA*1ywA!acdNaoJ!@)sO^#IW}hhk3h2$IdJf;%XPgt3X)WlrYL zQd7$ju8jBKso7hyfp$=4{1P7BLQXva0)X=x;_YpY&OT@%P@C9RO7uZ$cHn}Pfe=3< z31;HLbXIV~<|_17KOu>~vYS|gQ|N0@{!ym+0QmCHVR-typah&Z!U_giX5SK7DpZZ4 zrfj~C5kE_XyXpq1sVhohzm(VxE2ZKQ;_O|SJ!j$sbf%h-jk%=asvRWpJZVIE3HzUz z#+r3~o8+XwU2=s{R_)#KZVR|E626o6#ChAhbdM*>t)d>AF+5~F?4U=4v%K}|nPpcX zq`!7r1QLCc%}dKd)fHzO+&=FEB9l!!KOLSn&PBZjQKdkbavJ4bN2Nm#;Czfv)(7tC z9LQWtqd!8(eoKOCr4h|beXfgz52_xqxcEWMb>fXAREWuS1Bmfup-u^=P}bL_LRqkw zlBDG%g2otZTgBo)*8Xm>Zj;1V<%te`Oqrn4Pc`5Z>kIWo2z6VEnBM28fB(mEja*&X zslfl~!RKkodIh3`(_`ei1_OBAoZH7uu+c^cBh~wC#`}Lc=8Z!M(h8$6LF8zB!+(y$^09qL$C{i>@={Zi7 zI@WJIbPByI<{3c@{{kjDCxB2dL#ez=f?WS(O|XpJXR;KdTa1Tp;QQ~p#D$8js^2`5u5ed;mOX!Rj_ZPQ56B>;J(eC`Q>tlDyKzu*00y3wHwRgYz^8oL;QVAW$-^buET%uqaGd`+7muHnC&=w zgIfSSr8XvPbLtb1U@&Y|QwlfjJ1kHW==;C`p6fJvOs{oj>E24u$r4^By3JOb@SVj+ z^6zB&K}V|up6o1Unm=BHg*>>7M)cjM#*77q@B)7jsCD(Z?uy@wV>i6m?GhRJvN;YD zH)|0-jE;mi)M2j|tllmB$fDx?7?r4#9`MN_fBneJM&sJj95}KfN&7^j9^YQ_EEgw9 z!%A-dly>OndAf{2k6L^JUmWMRu`YeZ z9cqX+SYASF>3}{ED7gdv7*fdo6<&)2o1w z?mK~H)_w6Nk&P(=%$&(iQ}24w``$AL#lb{aGNru~dpt$EfGfDKNIhWMBV}y_RhDGP>4f~!eb9E}b?@tFeNo|x zq<3=}6eP*27uwgLd!0eO7|;wQGaF4(8vpqwV^-4Te00&!2zF&35+q8-IL=Z6 zU#j8$;?X8(Q|@1WOxeDdqkQ&k9o46dnO<%mug4Z^HIa0RNbJNXhq%42KMncVrS)ax zvU^3L@df&^OXJzBOu-g+Z{@AS=Wr}iGiU%mDS4yeGuw{;Bt7$XeBcuQu247jMb1IX z*g$bID)l+K)bQYTnf2zD-?qw8YNBQVF^FMeD85j$zfUFFU`@1T>U&AKcp$ug2lSC$ z)_?Nz_TG0eu(jV|8sMguVRQ{F&`HcSvV_t1`sFEozTd;7VBWVMA264(_BE7Leu~kP zZff~K#CJ)r+Ku^uQ5n6n@L`Ul>-4=Q3z2zoFWKSaq=RnLTh@hPKW9Fjx@#J3nX=w4 zn|2B6O?8QT4yz+sl@+?fWkG%iPfy^6gWa^O`@N5YMo20pMO{4e> z3k=Y3JITO>*ZI1a)b=^>@sUzQPRpE)lXwZo(0gR8r>|XlaChVzK6_YmR`6P^h<{1` zJO%T{1_=;7%^mymlQ82cHDiBU$!drj%EaE&&{mWJe^WL34GAJqAvn(1`rKr-QJnNJ zZ3H|RS*{&||5fY5Cd8+OODd@1k*HcfH%~|4cWsW7X2X!h3Duw`j-=1DYqJ5{ukkq{ z72JZo&gk@XV1CNiPL19nG_#L^#2FJ&#lcH0O&> zs&rPn8=9cTG7}xMHhvAbDy2BJPQTCTSg$|_l?3mYz=mT=NkieRF4eZp~WAZo-g%DSzi2r8Pm*|Y&1v@Pw9uNU%99uN z&e>8Y;Z#qlp7m4yQ$}3xnOqDQ812^jhN-o>VH!KP@uTCFeTOq<2QSmSsNT&6q_+DqbGcl?B z*W7s-$l-V$u@EBP$&V0kiGfk3weIM$uEDmcoj8V4MH~@CbS68qOY#MO3ec zjYHs!G66?A^~K$hG13Mk{$}>|IhwCqGrt%ke!EX=7p#eB9=@z4uGKZ8XIjM9-}?n8 zf2X;hf%kxqqz{|G%Q#=qU_Km&>Yjcyo@V?a^-Hg&64*?!A@KsNP3p+0oY3$KNMOlfU?zu$b3 zl_4`~HV$L6Xm{1NxciIMo#G%WFl-in5wpBl*<+m1-o#q$sIQsz4q2!{~uiDBeDq^=Zox9A~m=W zM|nu67%cd~eNq~ut`Shk-;cLdEzweDx>ZIg;4Jk53+k7Of-R|KdoWV}n|aU%7w#Qr z9k}Ii*8%LtT~xx$?swcH^j>yTgYu&8OeVarRKXG#Ff3+|`P(cK(Bb)ui4#7CD8 z^h<*-A>T;w4Fa2gtq2t61`|%1RpA)Z8wpcrv~tEEXGMdC^g=w!?xfswI99epVC+YT z_?-VF0V35VOW*TEH(h<6#w4*xoh!oUm#wqGvA7%Ca_v0v_6{AePLWh)w;z139CH*gVF7x?!t?Tbf}DWuyJp+T@o|PFbdioS}8yF zJ?~HlAHzit+n%R36Q|4EiGVv$HJnzXMAY8kcMYpWhDQ5e*mDWC##Xv$I{X#1)^2=U zG6{{v{!#3pOK0R@KI;qbmA2|&Pd7)*Qlu@h;k|e68Cl=ItPo;OpNMcuvCoALTj1on zj1Xpx;+dbCL775CVP&Xi+{T<-cTm&$uNE&XsvrqngtVqGJ_0!0hn5?lNae6_1n%Jq za4xoSbT(yVmF*41In$OWrbTeZuoE}Boe4ezo{Z_=Hc#g->%^w%H0Z5l3*F=PZS!@0 zO!J6&?pZO;N06>>#E*>=W@Nz73o0YAG4~h~5a`;Sz0yWoshGRxh-SQZ192||>{h4a z!xFr&U#SP{BbM@6-9mF2P1}jW!=$wx>p(Yom2pS`zv5wHMzZ%!PBNo0Uu#`>8 zsks*m`>H;f-%@1+A?P+0P4ZC!sB+EsyG^!oHTE~XP-tNoVnh^INo5od>4o*=h)L?q zh{;*ZU<@@m)3RNZRB~Wxb}&@$TW(@Y^KE6SC`g;`mHVTOd}>uuaF$;MBc=X?Mg6O} zXhn%tS{t`>`jpPjBLpsbkvO;+)Rw36-DnFyQ$NejpIDq4F}iKWZXuI%NRFE-V&^~fvkN|Oxdo4g8)Fx zKF4!iS9$610Y$l$*uN+LYIaeJqED_7Dr_9yFQ88p**+bi%CO;&adM|}w(J((SU*o| z*(3op7)-m_ga_b6xiI%78<|T4=)CF^hK*H+ID$kj$-OKP)YNhWiD~X2TOZ`DgF8Y` zmfbGb)04cnS8T1yD&KU@x9n2kR5o+UR(e=$b*byQZ2S4*qCJY(L{n|wq zN{d)Esq)w+!h&Hxp{OHI{_SK&;VJaKgHgyPG$B%#RpSAUX) zb9NcWFH2xgBaM&lfR2nquLGtoA3Hc)*%Lw{M!vy{=r2;ebPC~2nG|It)g-}4ls`>b zG||eKuFLkC3HQtlyXW12-yea$?I112p50tki8kA`hmkIS+G%sLkN4zX($2@R5OMfEBmxwi4t_-!s!R_z zM+8#aKe2x3BB?B%SH3%$pOUnhvFwG5n%SZki)eRk)p)05#eVB=00MQ%0Oo_8NaO%* zUA(x!%pxBL(=8d)e=Lm4KxXJ5s4#p1+E|WvLn)m|=#Uv~Gpuqkt2$Vlq(n-CAJ0OX zj@JoE2pULbnOL($2~Hsl?QgdT5Pkn`nXCPaOx6{HiE6>s%C5mI#;Dh^kiqyb*T3#} z{?z1WvvuXvEkTN8aLTa0lZ8Pk{6Ord_3#HAS1XcN1yzK6UD0(@JNeo09SplV>3ZU4 ztZ&BT4`8?zzo!9Uz=~PlZupePQdVVQx%K>fc@pKV6yJvlh-Cm_P5rn+J>V%qyx*3e|Erv=PRQ|ap`dDri7heczY%m$%Iv71IxJPf=GDfPh2`@8B z71&g%q7xf>e;uTmuAi%8@W;iRCvC0>)6p4TaXA!%qGmsH%LJl|B&lmv%S?~bfdi8J zDpBF$^)<*c{7X^*7hhcI8`|JN>S}*toDyJmcJQ2 z34C=`abSkI-mRL~zB=oFdZ?D(2PZ+4k?v)6 zw*4se_Ob3T0N_q!Ex78-mHa1#i<8>llu-&cF@1w}cMtR2!cy4(*OkiF40M2zE}Lwme%D7=VfDoz=rAm z-d%I78x4%tM3n7ai3X+}NSCCpqF=6=!Hr9y@&bc$ExKAPR8_4~bT7WBw@VqZsFDVQXZ5zgfG$A1ng9h1I87`bF5c-ZON%6< zf?9`O78{GyL0c%;J1qb2J|d=4NrVmE4;7sZ4F8vx93ErYigTqeRDrp6ZZ#2$`HzPT zt`pawsp@VpPQa(Toeq9{Nl>DPFULxY3wdTN(Zial_Gk8K4s~eiIcaupJTvdOu=erK?8e zIREevEYpLs`Eqfa=R%Bl+&L6ED0>VVZlJ-#_epBSW9jHV%{Jdh0a1N}owE@XQndd# zEq_%+#*Kb06ES=cy1d?9%Jydlyd4V(;=e2!^Z1E(fP;n;)%nN5t8-zAK|qD=4`2ut zxx3I`R8zT`bLs18sQ4+?TYDxOQ0mS%Q|!*D@-PjLYQI!8tFXI4sZ(0}8YmPSZ;!ZA z-y-XZVRoF3YLAD-+`D=my`R^Ab-}G#Oqomk^nx7lgW>nGLjEUp?TA@2_PwHD)~YO! z6iJ-&Q9TN!SQiZlU1jNz!=S7*^EpZWFbogvv2^chgqe6A`TywJ8`a%hAvA?^I95ynp-ru zC&VFKfJ@pj>seJi)?zxg6aWqbA72uocH@S7RosP@b?~ZSu)n+6&5jZJKzC+&Pmmo^ z*<*L|nAyI&mwHK~z2T0`c!_m=kWhTdMF4X3RLyGx3R(5$x5@CZejfUu&AFWwv-{%e z=?+Q1Ujfj$WRr3?`Rkkc=#8QeAs<6Ga44X2 z{`z}_-7OtSR!`Q37*tHaU_u>A%i>-0ou1?@qm;ed8|@;?E4J_8)YG_UZGkkkrUC2f_OPyDd zu$P_2xVUD!f3de>2U?7LU<;S%p6;jCIKBT7wSD*T_JKinvI3|}{}y^-sd*V}pwq^i zp1bTZF;_ME?X5^7>|2yk>Y>@FVznaB$$Bya+EdSXRIeA9G3Hd|f%cWEjyQWLKr8whOiI|tpfPc1r2N8d3@7{7^p{8|YM>e7}R#}g{w zQ}@i-^vE6wY9L8GfGwU!+gW%(z3`iCViMeIF>xMmZ2k4TBqp(Jy|xqd7V__(^4Qv9 zIzQ^8s;5&3oQl*I%6Xvb1|l;7vudeG92LG^`$Eggxldt2$ySKb^NwT1{=o5o=NqIf zv>;244Q;=R`uYu~pEDLO4bynKGirwiMC<^-{D8@e5AljkLK#lK7i#eDPF8}S?b6%- zIY^?HwdOyXL4hIS*tM!$D)$+YkiaRQ22OzZ&`o*pZ;rCi9-lO)8dR4K_mSprqVU?#-yq#_NM7cJf-a|E79HafbF4GD4M;a>Uqdd&8UhvAuJ z4Q?lJY0@*~A@Ir+q|H*h>h^`u70 zQ$zrM$)5~HQXO#|)lrz>@Dh;(~eoF{vY=U|rfk*(y5WzW?Y}Eq??76JUH=bQZFc&kA2D%DOjYV6xVW;&-%}^&W8=UcEzZ`w&V~`EMvd8oPWy9w(n}Hi@8#MjV z)-6iKRM;K0I}vuM^{Y?={=hj8?K0aOiMZMpmHm$YH+Pb`R8?Y6}|1=BvP-`#V}MjeC(uF;=*1qQb^bS3lPRxJE7NnMF-0r;)Pymlo+F3wo5p%w{)*}D=|l9YkrAp#Hy#wMvopw`Ot50v1w}uwgpY2N{_@#`JEy^ zEE0i@Ztl}E{39#A7PAO;&EtbDfIHE{EVJDX}iEyD}N5pC`EBy;c zcOhaHXx6lgd>5IdQpqql6{(d&8kM9o8|!W(BW6MHf3JF$o^XR3XWJwmBXjs!#8Zq` z7@x4|KB}K-u#+Vi{xUS}kN9Yk-JXlq;xO;In(b*8&{3cr!__Zs;#24gc>1pR?MS$E zpS&{=B8MBBruKfTz}*W&XR6P3V^Cr2FSKSVSHUF}vbvMI08P@@IJo3%5=EBzVHfp% zpyy!U*v&bxushs$hku8Zz1;#TsvNQ4_}lg^xBNdln;(}#WDr8@z~L2&JmqIHSkiBzkJ)>xQU=zwxja$pKA0d16OMRyF!n0n>R{RCCH34 zMRtx>E23@ZQ+!jM<|nd)db)GGj~avnN$YW9X%-2B?_B3$+5TwTW6g^v^$~R+y1>PJ z#DP0vGS+*UB zb0m-#>9CGbM3K~VL&@AsMJa5!dpgn8_xV4(rmkM3k!%u*bgRr)LvCbnpt_rX+9d9; z_b11ovqy-mh85|_!M_N+$Q4#t9LvBfs6AW4`edk}XJafcV??QuC1Me#To%c~G(15Y z^jDBa=U4D@t_46(DFQeJCb?+8KCvoSVXoM8#2pKcD(_4B3I9$N+&%1f?u_*{;XgJz zI?XjprXpeyW0ceviTIG`Nd`9Ye*z+$jKM-U^#Ca-KSuGPs>5rz+2E4I#^50sCa7Vl zZAO4kaNz4lS49rc;H?TS-0|qTD*^3qDOSgBWP$zO)1h^JRO#JA&sO?rL9vORXNaY? z0_1>@t+d5ebCVq6$JZ=DcJEbwXFY8y+C0M_G<_pcWMsn#mL+*_Llvujj>GHIcy6WB z{vobUfMc1&gJkN}|Gv%TJJVX_l8am(c0U7eN;Lb15g zE%a;uvkGKTqky0LjySiD4JF)D&B+T}d7g0#_MBAh3N{jsl5ddZwV7%N#4! zW#m6~Xb=W+JnaL0)cb6P3%C!*pwu*^1L*Be%oBFZl0pph1FyEMU`grfj=uBC9AwN#Xutj|6BPfe3da@HC3cXSm!({ zU96Ofcb@45Q*4O1yKr@E8huYH+J7;}OXoE7o;tn~Fp@Zq4y(4iTNFt_gQ7|;h$6Op zAA(jcgPCz=XOkFH#G$}bQ4hBh^YnDCkI#c6F8?X=9gn%s9F%X-Y_bmO8n>rjn!Yv& zJ&;>Dt+x^rxR!={CzcA66fjftegHV2-X=AK$TJ89>LQidEe+Uql52h9$kr?UysVQz z-KdmltxjLO-Nb3Q@(@K;Ac5;p^@gRAvAQP~UQhcCRcxt|8|H7+9m`g&EA@)#=oV_>L|N3>yjKi(X#(z^D*R6*#A7Bb zi|{5jA2$f_^br?Z;u9F!05&oF?Gu}F@+6A56p2h1kO`>_$Q+Gt*|yaTn_EYE0=xhK z0000002X?!?3P`aPx=~vZ2I=0O7dGdUVeF-xhYOGZf+OJi$)d#t4;85TQ@*h7 zSofdlJp_@X+Eh0o;2|S&93U{t#9LjSL{tC{P^HRC^P}lM{QPt$pHbVsW)LFg72*Sh z|Bt!cn{@xH2K>tq8NJKPHpnfTjMKHBLqoVw%-qtdf1T`2)*4q`F^GhUgK@vs3x@aB zK*9d300smkEm`ny7(w)GiqZ;{^bI%LIPiOQ2ZSBMDjmL<9DI~U(F^^xGqz}HIl53L zIYPn{j)5_Xl6!Lyd?#M$a-9AM>eA>gP3)G!_nHnW2gbiZ>*uLf^&>b-FhDlC%JQEe zAu~nNOXV<#1pU7^S8W8e*~cnHbT;tr3yL=xA$=17_|T39-;#%9IDA6o|Hj8f9)Qw$$PVSTLMD7_hUo*L8VM_CRaS7+e1&wp z*a6cJEbm43c)d@;H#uwC>Uv!IEZoH(Xk@%@F-ZQJ``TZ?GR0uLy#SwGzP2?&9~j(H z`uS##!$sI@<%w)5cmtfRlxwvh004%F@c#5b#?0|BVXR?g1eWBDxHN;-Jck8EhZr%- z-p{)@Z-5<)jRrEafeys!(k-Ntu&tv|&)9qNW2hJ&czg$hsf=2#Ese)LcJK@gH0qA| zxL5`kKDlG~R1H{I0fzipx1jLii;OLR@*LxaVI4CMXaA#d3HFH$O5C(`B^t{GfXWcOysVzb0MdGOtBE&gMNYUcLr}iOiyUGb zGBx2?x2@as(O9U$ViJb_S4%ag1{YIOkv=(RPCU6ZMO%FH1w!W=8a>enVQ+fqdu_TD zr{ion&2;=Xyat9{+Tg@rV>o-M+2oq&>DRuk*1^c&5wq`i!Df+BYq1$Cg^KW`-e^#r z0E}FFV1?oVZWF?JEKYl-d^VXv5?MV4&|^$IlZDCDT3KqiiMV52NggU4P7}Fl)MK_$$ zax=-e&N9n`(svU86|w;~XAE*Cx%6UeRj>dc0O}hCy?kJGlW#QhIr8KfY``-#=Bd7r z|Hise|FbXu-FIDyQ+j{=E%M}OD*jSG{=Jo|M!Zw%gooS}W@+a78(I{|s{r=vizNbV zV{qnCcX@F31rgM(!z>);)&`rrqcW*P!at2rd4Pm=-<*RFD9QMlhm~Y=B?2qtNa-gT zU_5s&Hw>%B*O&~X&>CwKEtfi{{l(3RzSDs*T$+Xd32NklYN*n=y1TCerM9y@Q?p{Lq0#L4ctU*yL`L7p>#$EUJnm@f`B{^)eLS zOf^MtYQdy{FsAdwQl`9a#fO3Il8SK@y6^kX_)xvPgMVE3z^)k;!z1hn?p6~QnJ@ri zme-XLf$Hhoe&h6`WncL*YhO_dn1;>$TnOx@Zmj%nqS@JrTqV%OST)!eMyWlNSl;DU z1xGJ%glL7D4O?|bo>vfNFcE@(V$)SyJIa^P|7&V%{Bjn>M--TI#zeEXZYK|4s0(Y(_0b(l>r^U5n)El+?BKvXaL7-!@-1E)sm3H}_u69HDs(OW5o` z?NG!Z%nPj1bYyZ#vx|hf(A(_ysmTVwM}vf*ENQvNc}OFiSc&XpD3P0k_$uP}0e;%0 zr8*c{BtRuUb&0<03$s%aEQB=+jA9cn|8r^QcxA`?0_dk(9a9nKg$uWPqqpME z=OhX+-nc$L1yko#o%El8@oUSctb$|jRdt2Prpy0oovHLdl|Hh3lB6(}!l*+;KNnNv zfdmcaCP!r50xS>2;8o73RCs-q;h0mtmu{`E0}@J(ldl9EGS778|t_7Lwe&x%8CG#RWhEBa@9KG;_g{XtyV`FU%K61PE!tO=Hj&8 zSf%Q>LHEi{A);hp+Zm7jhe+!nA%;NJKWJi!k$Qaj*?3b>napJEje%dO6?m2e0!v{& zVdyb|7ytlc8h_u%Py-sbvYx|U|EOrUMhV;_GU*otNkIdK32ja>2vI@4yEGvR&LO%& zVhe=b{sn&UN^v;kp(Yv0=*Y3DNyqIH-S--B_*B+_G-Gj25`Ry6mJo{fDW)#-KT`hy zUn8Qk;&Z9=aQlldP~%*#_vLPYi_HL^Z=Cx8XA^nVJCS&LVl?>+pk57OMNpdpV|;AM zo`05|<2x|`w%g>fV0%f9UTC+-^8GHxOGYR_Ziw|ie-bot2ZE{hxS#>e?vK_H zFt&FpvvFSh`VO8eEs8*oQqQGPHp*|*SkV<$oJm`AHh`rk1WOPrpOLf^1ck)y6IM%5`u&s8~^|S*uP{y=4~3* z=^T#c(*)zqOLeU?PYtR&+!B=t$G7>y-4%l}KN!{`b1xXxpL#J!O8W-Uhs_Fiyl+d! zvlVFxD4ua9E;9FXZf$zP-FQ{bh<+jcWdm_BrcbA=tF9XqKYA!EIn`FQ57^zK$}dKB zLz)NvdLyP}Ln@|F?|wj%wbR201rTrB6v@W@#y6z7+t29}ORKq>u?XRIe_V{R@%EE8&U9I7Af~gstLE>3E^0(~ z3kLiHP|Vdq$rWPGvqEIH(M4~h{z}~4s9-<4;8s-OR`i4PQ$Y|6R`;Y729D`aeZCKZ z+;I$n8L;4`?AvVsi5U2b;ra_RU~zJWyD5(oL2lx1n=}QNUti}gA!s9y+n}f`-Q4G0 zhkVS{J`3+oLxu3-nX1IrJYxPH7eRrXzVn;qlT@$FzdXGCB+0}`Wz5QxUV)>ZQy3pz`X7!`6X z8v7MGyNt0iw<|6;$;mJNe2B7-%rjqgp9_mc7&2*vL|#p%tf|!pkO&nj7#H0=Q^^#v z8Rv;WNwn?+yYajYOphm0Fi0BIFNcX?S7)_dlJN`;h8d5pXJRX_#6hs1{gVg69xVBf z(5)G`@ag&S$qUd=xCxiyvgCrJGmRa~3J7G*k7q*o7J=uQFY&KPBtVnFokW9n+=9H* zlWlHcEHuG|uzruD8f>TCP&y_2XKHl=yk-5{!G4H{4P;v@1=rBzQTx zM$sC)PUSDD*BycQ{g)1qgB^_NG^BS!|NH95L;fQD4M@RaWknsz4Dp_9C-NZ6u@7h8J_*at~tF4J7SF7R|lfX|6A=EI2Pr{OM4|WpMRhE8EUdh|8SYhfG zZDO&?9Y4Sf2u~OmgD3lj5rtjZ*`1oIC~p>A1Go=x2)!9*sl8DY_;a|g3w+D001qPcIGYEbCtVnuLkhno1Q^7$tZZx&`qz$Jx||0_VIO@5X(tZBHZ zclID28rcEtaFW{ztjmub`^E{8RbFIFoyPl3b5_{Hb$+dMiL~yRj1ci4Fv|!RYTZ1# z;9=sdN-zCa`y;0k0NJ$qO9GD?C1K3EN|yPrA|%+^)lW-(LBE|PuuyWp$9k;gz>2wL zK~iZpmtR<&eF|p~LO_zZ|8OzYDdcxL<1AD9lswt(CjZ|pg$u&s8BcJ7B21U-a_PLz zP)^g4dU&mnow;0c*f{yh+_y1qcM$9kuUcu&uPSg;k6Jvcy3$%R^@7~UX48X;wKKTh zV#a8GfR}hFb293c#5IjVCc_NhJsAhcj1~fo?@#y@o<_c+$tO;6suYiwhao1b4c%~KqbG`oL2Dq(0Q^8(IaY*c5a+-E06oh5 z+TTc$sDr>ieghW(0Uj6y;JZ0|}&p(eg&v6wC&I9u~-OwTGBSW%0fW!GW7 zR?`DJTo?fwNmqO!lheIBGi$@=*IPk*BO8wnpQLCtYqMRE%@*a246YbxW&5#S@eW-y zY3c+00viG7qX41E3b^B4s#+4PIcoNug;v%aSw;zkt?^9f>l|QH_V7<|wlwHl9Fy!{ zWSGW*-LTa*3M9r}fz<%Rq(z8hOFu$|rV{C~$3IoWp+rH{pp`Va#T*R!B6>^#we1Gl zZ=d-uxrW&w54@Z^G}pygLx<0xJ+<9MIi&^R%}$HD%(>w?>gVg^VMECIQ zUs~mm1RB_(Jj$JZkOg&tN*CTfo~pdP0L23DL3e&zK2e}hQ1p!KCFm5?ym|t@$`Q2l zgbmySy}p$N?hR{SbzOi!&uLvV{!bud;QTiCBmUz!DE9~m(Uk-W1A##BK!*W%VD3r{ zNR&2r!~Yz3?SFoc1wsS~fBrvZ^aOFqdyflmEAz?;wnJ_8dU zhd`jGTybFN)7}&MP3{HxnSZB02sHZu`DA)8dl!G4y9GM%cLp!9w{N(+_TX<0diEB1 zCVqPToO_k~%ijyw?H}ha31S5AasJuxG#C6yAdTM^aOiREQ52ZF2VQLJ&iuaXM)Zz+ zvug-+29gDTWN)ATqH8brP_)HA5wr$$0RQN;^%P{-Axh|PDSGMW4;p`D142FrgUI(l zAeCxs*RxXYT5AU)tuLdLGLhm#ioF|R~0ghNOTNyi}5VL zIa@d9ko@a?ggVwU1H2hc3e*mK49Tb1de7^uN$vIjaU}|)vJ3PJln@kLGI8L)Ht{Mi zfxC9N&Cs;ze&MO}WTln1;8Y*;l<2OW%g@?Z0qU!xFB((~aXDxDdQTONN8rJ*jAKXK z)Z2q<_LD1b`De|6=hb+5(ejqAuam#%ueI@Sy@hFj<(t4$*`nN8eZ!UgtHg(j=*JGS zPyU)t{vL&YU25`NB2{R5o^y>H*yq~>JAa26%^+)3B53$tC^31_NJ|bA&UW6t17&t0 z@X8t4P?c`0x3|vu|Ns4dZ}n+1nUKR#6U~-cR(u*(X?;(=Sf;og(qFf;AiGK#$?eG^ zOIkmA=5k3qc0&1Pb7)>r^t|n1$tX4K3)}5_SO+velQ| zW$K$Yo?|X?O*J_$0uh6Wcw9@C5Z8eAX}Gxem!KnvfS;Y{t-s7GqWRv&&d;M~!l2@C zQVi)UlM$L!-1g=5%uN#Ad)z>fd~T>9>Bf=jgegzHSZ$zxV%&{n)I5J^+J~$CXmXI{ z>;Kp@;B&Otm0ay)J>>g*ljrXwf`s?s)A!>OlnrR)(IQS~KyF+}+aS6sLyQuEWng3` zE4$vx$q3V76Xz;Q(F_OQ_it`BYXeNFkO9{raZDxOgr2P4^kN>(lOqIKV&Q#*E@+lF zBs!%kFC{ARyOuwi!hl{uKqchckHAg+$@uAx|EkkxJuMc9lG4FyD>4 zXY9G{2r$DWR6(Iw%1<<|S1h}=^&yx_?M%dPJd~Z_Ka=NQAx{vYb%18&2~6>@N<5P+ z-|Sdm)Y;tUUic?&wQyynq#0^i*27!n!i7A)#pQ|l=HQLIGog8gt~;bpasNVwr4cTE z`-+s=za|nvefa#6JLn;v?PC6ub5myD{qU=sYr5k0<(z&%U$bq-oVeI4@6iO$cjdz* zk-_)Fyye>8x@sYI-eh#fCGaN(22mM8X)63V4j4H5{LxH>y6=z@EOIn_1@(<54(;CS zikLkomO$Twz9Y0 zc1-+?npC(;zZy7Tv$%9Atq?JxWtE)~=4;MMcC-7t7Rm6NE&25l?XM^kY_X+3jtpM0 zQWrHX)X6->;&LBk|CQtAMdf@K%}=;P+2dLdL^@v>0526zb9z{Ghy-pv7@o|oqwKVD zE7`)~edL6mQm6lxSc`x1y`BT$_|`&uGea|}4!@CE^o(*w4qOh^MkzWK2)e01rap=g zsW>5cuIZ5n#+^)wZ^R0{`OazIsTP6p-0tdn?)P58XSdSjas&)cRb-?AaEMi~t{94V zEJ_&SniaR}oe6y#lA_Zt%NU^^dx&)1tH*G-DAZhZYU}5X<=iOk7ic1|H%-_K_377N zGnwW_Z8!8VKYMh14BsK=Z-6Ta6G(X5QMW27ALxEiZgdRyb$~&DhB_9Y-oFhCW zt&kH{==mnBVbhSC2L&$eLptB>Um0@YMQ|kxi?$0aM>VU}%k32&(V@&y8&!q!dPmhN zurGe$3=^9wE|$^|?OOvEe3~=wHM8Kk3K!m6=1;ElOPN^v;b$7wB>C@ZluIyKtCXW@l#8on^431g^yK|9--$iSk{i=eFV>O z1IHA3P28n~NhX%gxIMrW_eEwRf?M&JEbj%+T=ux3*P5)dG8~D8J4Yw_aw@OAtjQc+ zKv13JLi1~GvIU=^FDj20&oCC+R1ftS7#EQqxZ8)$KXkQm;c7KG*KL25#4 z0O?&Tl=i|TiAi+Y@>PzT1l!Jp)fNiJ;_0)$SP6V4>*1VQluvx{JvqW9uA$f|;Cm1@ zO#EvwM`6DE7~9D@fz~(JAgEAZ3?nB{rbk#JMO56w4zWWEDZY&CP@dlxXRFo|6uEP*phY@!AF=ON zRocGDVBRZ=u|&j3v4Bm&LF&>o8RpaAP@hg*^6cu_e>-e0WVn7szs;3H4QTCcc4<+C z!ez@{7SBkF!aaj@4(y6w#kU!Q?W*OR&?E0=Gx?zX<3H}(%Ns7CcHh52ECeh3ige@I zb|O4PxcBH%J%t2HxIWR@wZNkd`U^_sj=(xT=c|f;_WN?3rs!vBLM1w(=IF}4xH#dT zxLTA3ksSU4e?X`!<~37>mi#xun~d;aB}c;4#Ks{qS=EV2TWsD zIVhC(F-RqM_xFJ*Y}S4z*dg{jpwG_Hfjo1(G@H($4vw~pIHFb=p2NnL@eJ5pRLuOgk!`zO>>}0&-YyWX6ByZa5+?L8K$%(EicwsmVCy4!EY~lRT%E* z@GhVeqOkm;Ps-lN3^vipf0UXYI7M!2mj!=W@6Hnmh$e1qHx*W{=gv85O6D2tR0aE8 zl-tG|+}LM3K+pEgORhLTPvAL=AoD<3N=Y(4_~cn`nArF% zPMZdUd1gOVPFYyiju+be~RLhmHApruCQsPfrZPaTWObAk01WoW9m z5d&1BXrU&rE$MMKJ7Jt~M~`g4L0Rb^`W!-VB{xN^i0aQIR3>*NUolXiH;gT}zE;au ziu%rq-3oQM*xkBR5RuW6?oKQ}Z|-;v_OS8bn2KH@4I(uynK2+XD zCTHpYSlXz9Tv?+|ckTr>-G`y;(w@Sqbf;oy+KCC~tdeU-R`R$R-Q+n*+Cm}WGw!T6+RkzSPxZLd?EINcIQm6u8E}fYSMXQbE$ke z566j(|A;Cl6s#0?%>(cZ`%6^u?-#@uDRs-t;AU+cSo z_w^aI+t7+`oZgz%mXLx0L;}T|F@~1WKO}{c2qg539R!e9-+r`kP`N}cS>D@{bSf@C zITnfh$QEq8=!^Ui%ZWsi``z5@{S$Q~`|A(h&~THrbfIxLtz7hA!DvED$OM4+uD$fy zO$1`d?>l`u4Z_ot>{hu33`belnQ9adxPTJ?*{J0x4-=;BB{?Xwt;+Bj1d6PGG>cD&M~9zLL3BwFM(_|80KW~!ukk0hJ17@SGDRJ@?IIJY<;QH(`f#t+w%>! zR)hMh{tY{L)!-3YEeSamf+j!KH-N$LC!?}#HIXIYdIUNK=BPc&!eJO}Mw+{Z+LaB( z$&&de*Cd#=*E0B3?aZa>F9CXi67eI^C}N_sB{Ehztzq>%hGi$h`h`EhAtl|0yeDy5 zAD%-^U|?pIF&#W7yNZ(P2zC&;xhn+vSl|&w4S>E`RXYX!XuA%L z`Ad`IlZ4h2m@P>hFmyLfOVKjLoOAKiO8>?gy1 zWKP3j{f*dC->%|s9U5^@{E9Y)KCMdGS(SEY+q46YI24WhB>yc+O+uWF_$T7Qw&5{A`Kd%-Trn<^$r<+uEHavJ*m{QbQ$2RfLb zQk($9&SR*gbFSimxGJ3 zA6Ce_tT}$09;0+a!QAlKa^~YB-39lY@0MYZDlb@gRz7lqf~zNi&w2-Mvx${4a&Gn~ zS@s^wLl*~d+2LhhER$4CP2DtibwyrtID>?Sk&{oiwt~gx6f%4%u~cZ}s|R4pc(*4F z>83k_`D&t=%9s z-lsD$|Xl|$;oD3#SAb!AChGq?bAvpDZI^k`F(C8{ZvV4O-V<*#W| zq;xj*7)NC<@s8jq*2RQ}&xHf$^kHN=`O+PoSMrZvl-M;r`;oBL`;G~BX!NEk;~yVJ z#%M$J%S(=aAQ#fuyW;UBj=s&A`YGQXf-5|@!kBFUAe)*X4hGY4bR;9EaBmoR08x%8 zrOL@Z+3cZ8A@X&<`}+B3#JJ>|LUnt zqM4nwig@M46aX=sW!z#6!qS@W4&rSh2+O;&;X_+!uG5^4k2`o;N!kaFfH;Z&g5bL$fe z_|~k%!c;$bs$?h^oo1KC)Y`=x%_4s+)Vc6->tV5W&IY0n`mNsVcW(&tbnL>a3f1g6 ztv!AdAQ22UEq#-QAM`)Z?0wL#U&p@fHJ13>d|S=hsDfFdO8y*fF2zNCXztuFL-V7x zAX<=(*;K2tSRPVJqQp{U1zbO&0mqFjO9u{ZP;}9)G4eQM{M8q0*!o5ye9HmuM)lh` zChZ2U^(WCU4gq9^G^|y+EQXk_yF~8s$6>f8xjuJmC(M(0VW+ z>D5EzOjYamQjpXKmiDM_eH)id%U?#u4)2Le(&c)xid=jGib>t0zvPhfAQhUG>^U0j zR^-L`t;@khKIx+NP}-^)fSoOEmZT!78I8Tc&-KNQ^+2+JV0E!>3#G=2)H$Q?htP@) zX~~lMo$FwDdHs$bPwm3i<*IKsdh?4d&cLIOI)>$1&>uu3ck<3oPOihqD8z!1z?sER z5d}mdt@)7iO}n^DV|QHluC)~5z{<6GDvzNj%0T5fOrV(0)bWHIoxmdM1!1OC4`d&l zXZyaGy>YX;7D0435iXW9yg_Q>rO}H^(wH&T4r<^uqDYlpayT%atPDOA9X%e#R`Mro z#-cO@G}KlrW!rX5%)VqA=U(qLyn^2BqIa)yDBHY|x9I>$`mnza_rzZS6TyXQ5x4(w zlTDR;gl)TP0wO~DTq_p0h5iw|a5^gAFAO0{5iV-oc`fq3CT=%4TtmT-gX56GCB}?uazZGlnVe@*eUWn^b z$b_Yl>|*0%u6(NUO@;Sx;8a)#C1)7FgH4p*arka*=h`8GV9o1Rtr&6Do=1P+VdfF>Eg}%IA_8 z5}H9vG$cqnDfcSNjGE>bH1+UVn_IbAQA{MkwcHE9`B7WhXZroG-b7m4eeA0!g$UHn zugaC?ANY3Sr<82m0)JaFaJu{tt%JkQF|amqDD8T09DR=gxXKYgsFF}PzB1~vgHSdu zFjv#?61;x#Xr9D67!ccJ&c7*YBDh=e#k_jwbwC44v(29(unaa5oGDv*B#-xn;~3MQ zPZM2gy|f!o=K0C{f(#B2V9-Rl(wi=Fd+$15Tq2?dRsC)0V3wnrDFSD|24_>^_Oax_ zo)eecSry9w%;w*9Pp}h>fULl{*^u))!aA%K4v=RM_K0NT`g;Yq5QEeCF?#B>=uN`U zfLTvwIrL+22A}_^b~aysF{s?j>|>WkKc33pwBa&X1|zIN!vYl7aRL)QP}zQZAy_MS z`^G=|x|`3W#Jv#AKPsj7SgAga>~)TQkK2#uLKzI8BUzQ69pKy7dO1^Dm~@! zdEy|R1mWo|cabc2b~3)!zZ*Wia?dlo*BjqL5n#XEzOq(jf5{p!%M!m{ezt1Y{kc$u zbxGQe;gP*ay(2$}{#R4wRDOP1+$dr9DM%SPkZmh_p622pF;}UALTVv#?G&YfizSIJ zbG}nSHuJ>1TLQ6p{8A1CI8suM|+9$+zR9o;jl2shTU^ zJiOSB{(yplApIMzmWX&|4YU#)1J^aE)kW==dx<*Z-|!#&RABy_)yz_+Ce4{Mj?>pK zzTYdixfmfL8fz7-9(4JQ@JzBayoKWN#pH3k-lwagg~2NvA!>&mP^=EnYPPn$qLmgP zi8{$x4X{Efc+|xT`*MJf5=dPWk7X83KP9~YF&BouK$E@*PL3B(kzjz-?PQ5Pvr;@x zy-*aEDH9p`Pe*Npw1#5(UhA98IAn8?-f;E^M7HF~{%+RN+dn<5VW+r+V@(b))%wov zIx`AytGFtMfR(qPtb-KARPs_Gen!dbL#Q=$<}>I>8>tAgqhW^U<($z4&- zwkZ3TwxI;I4MCx!i}9H|Cc$1&QJfvANxZg zE+d%7kBomKoii3~e0fV?LK>Mm0xlhbnt3I;){HX(k2DJSny<#BR(4C?=$+;0_kLap z7+?moPqRiUV`p#%UBf}UxnyeklLM&dEOQba_+3#wqBKd1YzBFoKBC}te7k(n3L@jL zT#qo~5xe!stlwgkT+w~Ah?kg-%zhf@ivL3>z_zUOeX5_J;qhB{*E=nD06C!W;O~$O zF28>%lrK$IUn+mFQas<;+gLL{ebTGjtHB83JHV~Pp3g}l{L$&RpQ5^n&m4)k8RiFm z)vKZ!EZP{Q?RHcn3nU3@XuIvSWpD%U3oqUo04V*%WAremQqDKGc*fNO$_J! zDmZzX12??7UO;>xz3t(UE=Ck$b_1e)s(*4CO~OxVXqL#M05eJ@G^e zT1^Q84eUuTY-psFN5AL-#u_`+26{<)UI^y zmwyS2G4>$*5WQV@N$;#U1^u+O7JmRkq%Wc-^Um4=g!6xChP|}Yigk7&{&{-HKV38_ z#dU?xhHSuY=wvRf9|y!uF9rE`aitdJ0z2Pk&~Izpv#2xBc{?;-ed<-RSQc|ABYL8M zl6nNH3zskQ=lpwr{0~h3pG|shw!Y85g*P}~3^ZT3)Egf6hsMc)Q#zuPTa~K&E2fua6LD8cUjSMo9nGWc;_D@1Lm9;SY??Nnwxp*AuxgVxTqOLp zXU2?x6e^C3#(x;y|M}AYnT+tGJWA4W|9fFB?#q{j#RM?Q+;k$8v;(n5B9sY7n_`Jr z2;&FZ3Z_3{glAYRM2BM`L9JGi#WHRDuY(va2u@lf(&2Xh89MnGB|@&z<=o_aj`d+Rx(Z|53mo76yNizdlnbU=_@#Os<9zi*Y0CgH1xMnhf+7#@C%k?Y_*;q! z+}Cz)aIqcFdAoX!$%fJ=BPqe)d5IC&`axcn=ulQqwl8Gmzzz6Yo*C;`04D~&{sqzh zX*}egU5IA!PyHs7zr*V}=_Q#dYw1+6eqGNyegAx{WsXie8Q@8xG5u<-l((T+;)(Wc z2rvAuK#il+_r(k~1$T6%iIKjC%=$)s!nU;Xw>XzPnqG}o7LIO$Da7K5cJfL8Dn`GB z#J^6?fc)Suk0LOrP58yqQ#XJ%4z`09g6qXcJI=6AYC)I@y-Y1cg(I=$|G~eeYy-Qi z#@aORPfA}eaBj1RKJC|PZ0x(MWtv)a@$k{GfCpG$9 z-@FL4H?FAFuZ^TxXs?t+ABks1yJEhYwVAAjdY28f_8cV5Ycl6rCAK-S$BxK=Frp4b zY}28PhvU&*js(iygH750%*x+)QTUkq*LV?yQFXip*tNo$7xOXsQc(wF9r@4^W$tL{ zhJF6S=_mW{>wICed2Z0|!H_!sl~V9ve+uF?9@<4%>>im;e*ol740u7gFyI~7CWpLPJh}z@wWRJG`*T9#8EyYK@On#Avi^z&J zyx`ole>_yMNJxr1ehPr7_Z-bIKqb+K#j3T06$~lbezG>^C;Kg7{$}d`Ue-h#I{pDJ zfAbeo6Y&8EI$oQYN?eut0TWHreA&DNzIp;!8Y)b4`$89g8`1xH458KSSYWjMU2_w= ze*4({)yXa2O(vNn)m*=s09G6^$4LVH*CW?uj2=Gj#lhh9JkySIuyr$Jou2~E9z{ny zbx`lSc|WngRumR zhs9xWANRDL{R6bSjE#n6qx)83VR7%l7{((+7cW+fSzvs{g!BJ6TlR1F{d^GnP%V|$ zz1ssk62@M}jsC=Gy(4PEqnoK53a-2-FQ@e%S^wXS;r$iF@i0YRL$gB05)cr;B<3s+ z#pO7oJOC^SE9*GNSV3ghIw=}P^l;htYEmpXl>vd;6Y3)VPb@#2PN(LaJ{ekwhzXq>Z?>+n zn8EIK2?6&zTB$Jt^F1|ek}=$29|~xv$Y((CN^}{7M%) zbAIBL6(F#JuRK})3$+4Bazl|-eXZEMH7=H7#oSfMxh_$Y#xst0 zdWuR6qyF=b=%7}sT7FV$xVX~@;y@IK!y%nDN);qIX_v(|Zn%@MI9D2v|IX%&A-bV% z^OKkFuAa?qvY9c^1Yx389&^Ni{zB#?OVo9}b~yrMOfG;%ASkx)`J>i;dq9!s*FL6c-=OloIS7$KLrgp^Wad(o=0#t-&jv!sYTM2n7frqVjmL1{(liA+LJp zwGTS;zByJHPK}v`vEs5{Atz||PHN!i$97ce_to8}ki498LNqH;jyUHj<~-bfWU2cY zp8XKuf6!k(&`pu2%&0xC=8p)}absP>AQyik9T3`!KaE^Cc2qpr78Z!_4(ikxA5N7$ z7&ZNx`X;ti85!KK-jWL~_;J~ZJTHyCCv{rm4spZXqt#btnZfA6jmx_71(w{=1G3{| z`n>0TPH)Y^mwqlZa+!nnb_t8h?U9J9<^#l`kaPP^5Rd#S*S&4f;0#`D-+sF=WlQzp z6DzOXY9>SecdX+Y#C4&0$5tF`AM0`tnc1N?7lROnPnFL3G-*}P-9pdH73qbvC4|zk zASYcQtmE+Jt74$6kc^oR2xxhJPfP-74ehG+U3;EY{V9~U&N`KE$qPPcg>uBRdBvdr z)#5`s?Bc?Xp_;w8`5TeAp<395vabDseQVsDQm3MZNYZ*;b1j z2!}c)p#l+oCkpRh&@v-Q7xyYpNu_7(nK3LHO6!MA4E$O4C00|!WQjp(nj|ZVqrDzl zc?{)ls0%M=1hJf1^lO5E`Mx@Fsv*m5VGvIr2kvpAbGNr}Lih6zqQ@$fO}iN)i+gPH zH~krEmJJ(1KcArB>kgT@foNsvN})ga@A?Vd8I~;NSJelz4mmzp)$3X&`;m0&Pj;Lr)GZcr$nk& z_yh8*$KWw!m3q0li1(cg@j43#i485Alu?*XK5~q|eN#|-0pvA>M3imrpjsBG5U0u}*qbL-&V0uTYMm~00 z;1d)vgF4S+F!zMt0A$GiVJsye{XUKvZ)Lm!g?&;dYUo)#<}}*q`Lo!UuNWU@qQ`zk zE&*nNZ))G?Z|cg=VPq$_%_#6dlPUy?DMy6HBph|in6Sm553%16;uP+Sj59O4+3nyp z9#}#pwn_6$^L=_Z!N*dm(&#nhM3?iF1^qygiMxOrtdkl?hmGJ4$)ZZOA-4@~VPbPXzKR=U+0_QSO>PN55 z4m-p>Q6Qj5&_9c5djz~hD!Fx>Aq+%8$85H=wr^6)6ZdZAYz&gyVfuZPfxPn@BNeeI zH8X7)Z|x|wZYSHZZ(53wbNBYp=@Dy4jKzy@az#HpLP{_d?!lKEWp?qEYAyLAh-~X% z|A6QsJ~H0Co6xl^=R||}H0&YV_>IJlnmkUT@QsWJU-|xP^M|+fdt9u;;$94mHUp}# zp+tpIEWSq&;=%N8Ph}J-vn4Y|+cNYb5FJTdiY7$?8O}<;VLP6p5sGozFnOE15eGQY zr@;y%z$gpuhAMDQG2P>hVb~=p+e*HqC|{9qga)+BE90pMg@&BF&G(3R&TBW{$M;yY zTG0eTl5J&p^KNrW%=HO^$QU-P>U3nBo|ix}{BpjGR(?zD|iF^+(CRIE2^#r+o7MpStnOcO;@DZDz9 zO0vOUZ=a`OQZAcPDlWvrnnLzJkz7>OW=~DehVC;DpI?OB@aU>T1``9`1IEgDB`xNK z>ptyHwCGEFB@-2Q)O(-m2QvBSH9kq;Xt|?>fyNC^;32N_(f5lO>?!-+a z96M2c?!!JZUDZZgk=UksF3h1Sv%?i|3c83Y+Kwsqv9$a0Q_-0ftg0;7Sq5yJ>HU3< z^u*wZ+YUbx#~w!~pQ@)-tYx%il%eG3??%p55D~ zogaE|GBVF{U=ag0#dx7a_-gx{(#nB`mHJgr_b5I)#1i|$rK2I@7R4=~FJpZwuOW}D zcT%}`uCKu_=rZV(pZoKNF8CIX=oY`|&c~N{g|OZ_q1CtudL3Di4yFA~&bW#-f4_VN zIz<9-qIPCQB#D5*pE`kVK#H zLMyxHf~l7wHLq%Lm+(x=tcH#iUL)@!X`~pYZANxT?s;n*YFEQcFHIIlsP=NpevWe% zyJnzSyP13_H{frz`@VLGq(sp|qEk@JeR#J8DOb%9RLq8>WERq9+X!bR2B*w18~%0u zQdrkVz{qiW4WhSFW{YPOdvIeQVV(|k8t5Pi5Qn&A(h`G_W< zoS%cmFDm)#-)|}+@WJ9@4CLQVL%Hv`jWnd!BQ2TEwX1MGefHlqa3uY};N0YdDB-=S z*R<>ZE3lZpJ=!7-z25y93WbxXTkuC;{s*)5;Ls z@AsR>TlBrRUJC2hhSn^5c{9rBR zi3f1kqkz!Np8!~tJ^IO(z(+81Td7KX^O0#W^$YeGmR@K7%7xJeFZOlm5qQ%G+3%}X8ReK6#dnxID ze^zOS@HciCChd916CcV^Xw~A>N118}%7yjU4c_WAqTS6jg~zQn<*4uWdW3<304ttb z{;2kPnF@kih0>%LBrdh2%ycJw2K2}v-a-C|L%Upo0+7I>uwEeA5!kU*<5w9*H zr#??^Fp(Et{w5YBu-4{enbk4@x+ zWhMlPlP*CrCV2AT4hhvp!3leOg0I_S+8+B!1@!jSw%Nv0DMgiBDhewiSDG*W4L5;r zVu`ZfM`(8&!swq(t3_rpxglmpV+F;7cro7k-F^zB*>5zD4=W_G>IQku%p&tM--V*i z)fZq;50FOpox@Q&~Gv3AtH3!+z#=m!P{7T+=?orfo{BNF}T)+gHN%4`o@l#}}+%BWTs zFaOi<_h_u(!6->T(x841aykNI5aX1NDq{iOW9b`c=wS1HgyKs}MEm!N5lIs3D(~=S z6`v~la$|MTsJzq|;I*KnYHNEW)syBcaWy_;y@`PSW@~W{Lk{5b-$c3U359ClkVNH8 z@bB=wGjb`(dTm%C;=S-ZRXsY zTR9P@SyOoZv90>)k9RVu?mV?=dmdH1JrQIY2rnhZ3q8-4__qgmUrRw4+7GZOv_dlr z{zM_sO!b}mT=r&}od5)d!;R=I$%fhUwQDlXk9}in`Q1UMF0|h`=b^`O7!$x6&$Qq> z1v!n?`%kg>O5sTzGQ}S*AQ6g<$iBZmR8HKLl7^QOqIqZ$$Yu{#KuNCfH9|}3nXiIB zX0F3Q^I$mR5t>s$?(&P#CNhBwI(!^Afi#->A+!<88u5F=6Y6B$FLjUv zLQ!P?IFC4wDG*lzkIYPa<|NT+9Byaslao!ebW>906L5_+ZRY6_#dhOUI^N;Earbc|ao3HLy-S((_I&xJ7NX?2i z{Ajw4SEs3Z8<1yOzb)oadgjA=Vpv3H;>*=I>m-Su*eX9p%0O$rncv2Rjv^2HO%m1u zWibYWbmUe3s;~^vt94{3juECGqJ7VRLZn(tKD)d$&8mv~(cE8_(1`m9!fTbx0F|%n zdYgkSqlmJci=c4&t`E3^@5L%mkeWCxuT|i>faYJb?}jqtsBmjP)0#iE(UlIv;qq=_(ThH%P~q?*m)Jh;kp*^q!N5qudq`Q~F_* z6fd!t|7SYw*H_0g48wOJhv~pfHLLnq&pp+-w+1=llGpHyz*D!%VBIfMZSiL#I-I7S zrW#~#c1&PW+Oxjz>6$gAU@fHEYPUc^w+YN;6MU*#3D*9(rKDpIC&^p9%l?{G{nuc+ zS_q(TeJs$|K7)@kS*6JLD5V`8kC$Tmp{aT3^-~;d;TgLtg!nPK(4y8)H#U?BsB#&~ z2cuesZq!v66A4G+kAhr$THi!>9|pTIC%?`cr@aeQlfQZh=263b)X)5-)7)V zg`76O@Gdtbd54`TYV6y2oHzP}wCnOR#~F@h)ldo*tvfa`jCrphK5627gC1gfeH5F) z+envo{*%viAhXU?sBPlijcY7U$rjaZ4_3Mkkk|fWzCN<#o4rFCQRf>Wv0KW`LO0^m zuzT9+=Y__URI|=l=>pn(q!_}nUe&KMXKI-#Z|^ZB=_7LqS+pD-MPz7H=<}9kGh{Lo zwy)SQYjy60Qt$EtjibvqRp&6(Do!Osc)p^WCJ0e}VIhJ{r=q766l3~Igs*;qGqqt4 zgMaTSjTgO<_YA0g(7+EiWE8uQ#>p)7I18gc(VeY+ zx%Au~IAW}H8n#h|a*uX0i|pybp;RGCm}I$)p%i`nyo`l<4aw8^-tw61U1(pl%(ac0 zpYDCB2qQASk_*E^^Zge}#}7Cs0n((rV`YBrTl*+}Z1nO%rCA)*jMvZ`y~9}QR~0+m zw(U{eZB|P^h`Sl$>x}W;s4-avyR=>wu z^B`J5FwfDsecD>&x#=q#WzxylAt+yt+js1c*J`t~2;v+1uC3-Bw<7>E>TJ$)-r)|U zdGF73)5SX$1X{i6I0%|0QXa>V*hGIUNXJ;-dBxxk6)6LCyp^j0nQ?8iL8$<2%eIf)b|9 zy7f{A`?I_b-JHnV8dloVvtN|rlCJTUgw#V%vh}wP(&R9!gv%*-iNSEXWb4%$@lv$` z-To^-`5dAUbMk1jzARwxa35xWHidl>MmP4~5Z`?tCUOD(^Rgf5iI1<2=tHgCLZROx zTS$FPKuIR&cdWw(>^JGS(PIW0-w0UeIJu>i>C_9gPw4A?@9GE7jhJwfRwq+%aL4Ap za-Z)j9sX3qJDGe*YvIUIjFl&;LQNF8dJ+YtlfJ*huoU=fu$$X$wTt&vzRQ-#hqtv3 z3x>wec*P_{s3x%7xWv<)v}VO>fRjAye3fa#l~$ZBQdf?k_9Gz<1Frh4_!+o;Yo8G) z7+;KE-bxUVs@(9hYENk9q)yCh$&coYS2PL{NJ)Ak#SonKax=371zXc|$&#n;n`6&r zB%-99UhYw~eCa@y>&h`Li#FYo0hzT-lNPk~rIjMv_x_H0A78&lzK_MUYL~>u^eWzU z{8Ehki21pyeT78t25A!Bj7}($!WjB^qjFPNW`3Bbf@_-q*_;#BO_@)w%ea=gJ2*u* zf8~S6TfNr|qHDJw)jPM9epWz45JX$|KofO<^6359L{70d-w_N>mkm=^BzE8uK;Yw> z;tp)Z#k+n8m~r9 z>540?nAANVpnf)Zis^(b+n5gRpdN$+d>8~lzt`e-ksk?YXrRpzpT5)EkMtK=om*>B zA;*F;QyZJ{W@EE+8U^wP#YgVfP)=-Cz$+M7CZxz>HvLR$jfe{jhcb3}_~o z0|Z(86hb)9w%X>QZ)uP3mk0J|7U1FLyWgD_A)zmgI7BdwewA<;5c=+)A|q&hG2a+L z0r?A0wSiRKR(=caychw;v@tWo?i^}x4L}m)ne{Wma~*JjDJ_rab6n{0ZVC;?Rz8>! zez1iB_-+_r*fa!<9k+OQR#qT0NDK`>f#XkHLDxYZe+Qgfg-6GdQ=D{zXnD{VIc_#m zK6z`-%r05}DYa#*f%tWo6XeDN0lN{3Beefcmc^;Y91I5HQ@(xPG3bOTFu+{p=W~rt zlA>6^86*be6S^yhSiwfpAMp^s(*7NnlS}WMLvqtDQi_1$bTl z`Ey{{Y=6&}i?d;QMJA7jvEWBYF<)EAW%FRzFx{j{dV3Jtj;zM19glnJd4WKQ&yUk~ z0u2!>Hv6jd{yDqVrvsQ=X45p$XXc@)%819+#V>Eq0p57Z@YxZ2x4Hoj- z3MN38q!iotU$sSEN9G!Kb=PH!%pUuUqd+z6dXetvP!=3}fBF6AWeBBCj{==pvrSr+ zo3H_Q7vJY<_ZnAjR#Fq_sQPCcUy5`ifVOC}&fF1v)@lpBCPKUnnwJS2CmFU}y#0HA zc*4w$5N*@-zrG1?5HV$TUnMxFb1cePJOj4}3v&%AY;MCrIl1<=3AgGG{d^65u z;XDqh`6f|cgE-g{=hPf6?_p>qsP{)jw)nED*(!b$3gubwuLIc*o7&SQ`Z&xT%gGp|qkIYN8beAp?hOfCI%vC_VBu2a6}SB-%yuQ~!;x zQ?My=q$&CKE29RIkPo@c@FHiV=*5B)c=6gpIT#5NSW2ZZ5nl-=R|;K;GhN+vRc=Bw z0yC3iwcp+|nWLI{w$I;g7blI)%hCUT04_k$zlJxR)92=&d!>$WC+iQZTNX$O>NJk) z{O=zEiA~soxn2U@R@>|iD~YxlWAB~e71XYv-&jjx9Z+Vv%w%J+=6%VH=FCOfNi^UN zIB_Q*dREDtz6Y%rtM6AldjOY{fGfhVLBI|2#y^w3gpYf-j_L5i1{6F#j3Q=DHuvz_f|WQuu9U3hR0}sZlwte8Fo8E>rcn`0NCvg*I(woz1>*u zpRv{Lc24TYbWlTVDvUI5SE2mTvL3$vYN^ECSh1|s3 z=}y}&>b6=z5`jV3wB{KjhY@2fQ8c{1oUb7oh5;4(z7FjB6T3C#cCjixBli2oxaKGD zRCT{d)&OT>>x2Cx{xGHp&;W5*KVN-0VPN~Kk1ix^;Vl_8YxRgi1>x>_6|W-{6>JT( zWh`8I1emcqDJ|NLS`3sws`+(_^Ak=AlkZt?I}4Irc?L3WUwe$!(t*xd7j!7(*w7Uc z5L=og#nHcBc1bnRa*O(%%j1igO(`V09-Gxslm8o1utWskP79uI@Z3}EWBbuu$ah@u zA1`AC8+yw(`Oe{7;{WI|p>BIL=*ZIUGJJy2p3+you`{5rUNi7DI=lS{i}Q^#RS|8c zzuO5CEbHR3-3`VBJbqjt8SU=zx{0CJQ0u?s(@@AAMqQ;?t zlhHr?RNuc}=Q}75dT8kFqw8OEPm&l`I+Q`yQQ&4BGjS3gkCD2%;k9m-Ez z{!9vh&yd8!pptEK9R(&i$|cX-v}pH-PJ2ce0S>A=+?vQvxtZUT%DUOe35|sLm|?MR0&-uz#t~V!{X*y~YFND2KrOf8*Pm|ncZdSR&NM+Ly+#4|agb~E z{hG*HTA2%ntdpClCT&Ct;OS*YxwshW!ZJZYKBY=CDiepWpPROc`Yuec zjICedJ|{u&Y6trZbvUQ?kK-UUtVL2~>}Q-~f1210sYS+kVqv&hU;Ud?F}RRd5T;;~ zM1c&D)&2Sk3VsGsgzgdrCOQoCPw8>dRR24J^37py7EH_5pV|Ofv^-ATbX-Ge*jVw` zE+J+-L933CW6%j9q^@C;07ENoJR{i?m2S%GiFF!svmZJOc<;5HK%Ys0AU*q~q%9H#} zkkL*6lF5@lsJj-^jE!K~p(@6=-_?gy0A_wlB^*fQUpfZ}DZY2#c%NI^*myfkO-@8wV|aqcC9MkTf`{l8GO;yyJGDUimpm5X@E1-aq5bwheOrze^d9z>P69 zX>%1x@3vA+YCUnlUUb<&kj`N*PvkpHkrBaE=7tcPAGTpM#DY zRx+UcmxZ&`=n=-?Jvm7~CBiZ{6_2B?o>+1eiJYNY#y-pkW}XcHW&O}wGuK=OT^~Db z%+D8D%AgPdnI(qV| zGCI+9Wk~*El})9~p~!Ma6cs1R5NG>VD33AQl?JW5OP99<-Gm(0V?>Wk&PgSI$;m|N zxAjTPymUpKO}LwBi6BiEr`(wVEdlZp0Qvw)e=GdU7|z;>REVh8FTrRf{HuJiPal^Y zrEwD;Hvu!P%n+Yx+o(i9dQS_W?o|-uKtIK=9(X1Emx>@Lf4O(HaAgTgCc#o49CcdC z81C^y47jFF*ljJ-o{vpR)8?;3QDhCe2!g|wjRKg0IZFukxYv`Tncd$;+D!D?$m6&n z-Q<{b4Yj}xv+}ShBb&G$z`A%Ck&+uyB4N&&${$$vY!zqcgLYjh_BW==sLFu0(h-k{ zN100o+^ZdgrHnZ6MnRtp#{_)wsi|l3tCg#7(+~>8z}f6*Hh-#F9Zw#cM>E#2J_4NZ zMmfzTPT#70@+dTS(76fedJE64BGr7|Qmf!&_6(&5OdKhc=mM_W^n-W-FiglM;+%E= z%IKw{5Vz+iPTO;6oatm+AXF-UZ!vG^khepTIp4j`ffHkI zr?#hprvq+m6GgsMS&>4k*`u$!oDE{ML4m=VR74z?*n9rEp==K)|Fm0LIO{_eKD%1# z*+e~B6?3t=42JPsU|*< zc<0Ra;Bw{mzM!{003ufWs&9MB)HXWbR~%%!8j9UdfTrEi?Abigi1AqyKsxB#zP;(L z0v9^r6$NSOM9JQn5RH0wTBNtcK@elU#~%Asn~dPx-1>lOoZ5<@&<5W#R8t0w2u&}< z6vz**OGefwJwi0pbOyx6=Lfi067R!c+6e{W2|*N5;oG^?AzGUo4z)fvYe;B*u|GAH zH;?d2M^Uix-;u&|z%;USWK&3v_JOhmV7mznFa)rdEVg7a0ry+Y%=5&L;T4A~`hO%F z`fBS@KYpKxyj1x+`9qt~HVco1K*K@6X*1@!U-55}gka?CWhZ435)J?u2y=^N>@q#{ zV{)LA7N&Qv;n@4mUI{sC)(5iiRf#kYoljIv%4Cq5&&s5UpEDvoVA4bEr1ct~AO)9{ zRRP!bwEcEmN)6{7NdtlP1VQFAH8=M}et>uDlXr&6EpyqrEi@QMfT19j+`fCHCS|Xy zlw)}XZa9?h6<3SuhOib3*n-zs%<;9gz)Ha-&8Qx?FY_ox&Zh!aKrnvoEizy z<~-n-b{kB8?gs|1BRuh{Lmt9YYg}Hfq26H3*v_iEyGO$Re$?cO7(JtwiFm+;3B@Bn zjb73CGkWLF<^6fxOKw$=Lg>U3)S~wvl@QP)$rvy6$fyaEpaDh{Z%5+(c@Dh#5=5tn#}T(tQZ{AKPJ@%=Zru04q?zJ%mPg=xMn3pE(<5`hO;9>wPWJ5ItfUP+ob`fUQ9A!lQTlf2%LYJXfR;1?En}@Tiswz zcx7Dg;+Q2Ts>5LvRuRWM3B`5rXGVs`z({ZWkIEdc;gseorjo|@z)Wau&opf;FY9HJ zmzWQOI|kQ1YNoBdtw3u0sw8I`IAcNrr+v094r*8TR(#|oI|kT4jNScD4{pnj$s7M( zjd>8=^L^Z=6gr5TE(eR=n?LJTpmDl!sqk0`i?WV>feoFhH_j&2Z4rhYr=Ui%7O#%h zYBF}zh|mT=1qfAreq>T<5EdoU6yvmMAmdUjzqbkDvo!)1_e96=)IwPP+iiRK^;3kM z5N0v>Y`y&~4pGP`cucAA|58JF&QnH1M9Ggzd(&TPO>PCvWm~=@zlo4n;Bfr)p8RdD zWcip$H`aZFxH&|6&J_DpG0&~3x0;6yL*E6Olwtipi3R2pQS@w&h}e4E^GLo-DQ>ut zDz^3M48DE0Kn}`kOu#N~cB$YEX3S(mvRcb)LB!l~m$~P3s*ML?QNteX=XrWi*x*Ov z)j{ubGj)eU*PwRf{)NHl-0=PP?D;V7)+Sd*jevK2(q8nseG2RQ@lUrT#)$S6({t|a zDc}xI390YZ4mX+rS%E}emFRpsY@Hb`p&vQO#MMM``o$}|au$L^=ilv2YH;|{n<6FA zK+Zrj44@ZFvPXYFUVfCK03-b?y->8X^Unij0{tBd>FZKPS@&=p=?% zQ=Fnx2?hQlSIbM&Xiixz%Xm}#7HnQmW(hv9%@P6kX%eYy_OEK`h$(wJTB<3YOntS>1`CsbE23ZOks|) z!i2by!eU`KQGTlYX^E?`p$E2QL6?e9j#e$}!46VpuN1YzQt80hVK`$O-yb{)9*;)vB$ za^8o-lgj!7!tDB5IIdu#g<3haNYqEXx- z{KI(iJCe>dH`2=G{!A}u<69c9C16o%`LZ5CL#WM~zHKBkt^Z?vq?B1OrJKMo;(h91v-|v@!FQXhZ8DcBR;z z+mS0~M9x~mTxn@gh4gw6wCtR+S|YYBETQUSF7=&eYAa`lYOZH+350b@LJz1V9*x3b}7%f;0kd7(&`Umm&>wv`PNP9%|jodOH)czt_hG9st{|aRrW{E3bp8hmR$m~UJ zHKX>f;k%Muf*r2q*U{h4eKNx);9W8D856^pQndqby)g$R#8C=8OF8KT*!2pdctp@K zJJQQCm9nR;4YFmw`<`Oj5L6ObD^eV8vGY;9H$jaxULH1c4ct{SzX4q@`@eb6Z#;1x z`lfwnUumN{r^n*5CAQo&$E;}dCLDZ1Pg)eeYZ*HLnyYW)Jk_Frwsg(g7(w2Kh&mM7s#?kD_0j2|O zJGf_e(7{GG7-jG@S{Tq2G!Cv^0Q4B9>K`ewQ=kT27M{g`Yk%98sV0->k_CUej(Ox1+3u0l#Pon<0$z37WDdkw zyYx{~?a@i70{9(Q7mU6Cm!1o7Gt2R=PCr4yI?>mXDu6gv5a|othPjz?uz;JlQi=~b z@%J$nJKYODGap-~_$AZI|MNH0m;-_|3NeGw+`MV$Lb`|~Pd(Kp?DYY12ZVI98DpLE zhkz-LDATGPOuJ~34uD4+`DR7mNCJQNy5pI+x2uo$j5T`ovHL*J+c`RYSkcK0_!EsJ?GzYPv(>~=%xlw3-k!wa<^!H9@{%2S~q#( zOJ6K|JIR6Hm49a|K1{e+pXn-60zyZ(ZUAxU(sZTH1_q zftI|2-N9?DZ5|q}1YOs-FlDX^Mu4?e(~b%6C6E}2BV-6|&I42#5Wq)ivfGy&;7F8k z!m&x-=irhEUE;VJQhWHT-r&jYJm>G7)fl{-(c5`1D3g+C99i*`D1;~9Es=p;By@Cz7-Mi)?kiKYxjQ;jx;H}9Edk|`JnB0mZ z56wUQXMl2RwR?i|X{alPSR#7T@IO14!lL4S`vWHB=zeX2S!aXy2jxSaSsh`9S&H)& z`?^5t!_X#Mp5|Zrf~yZ8t02vfv76<8ujL2_L8ZSX_+mY6vzgsUu`d*x`A^sgCzDFo zbmq|=|A`FGY0j!>KtlsqZ&9Z(B-C%RVdyC3+bpLx&Kj-UsswKl83z+Ih4*C|v!MjY ziFSRMCX$UX58oRoaH(|9XncRb{RZ`)P*A+Z%uk2V)4Xjdni@zn%!;w}nTth*(9#IV zNSN(n4V+b4w$Kx#gMU9 ztn&_Pc%ToI%`HlJ>`zX}-7>LpWb}Ieu@8ENOTW^~Y-+(=3`cM@`!-|Vb-Z{>KazIf zP9DeC-z=tc`B7+Xk9`#5D_=KhL?$1c%aE++)BaR+q@w9{ox+{KBbhQj>?X_0NdQv} z)%OP`_vZaH+CP$D;BR_0c7s{O?aR7YQtYR~m6#8*adeU~=}?ODrZv>UD%%x1(v#rR zmVt!K5`@qecDCP}*BVg7Lqe9D3Q!bhJot0~o{r|Le(0H4Xyp$Ww{ospPvA|druwdt z+&<`R;k3_(RVraZs?SgJ%nT+0R)8Xm+6V3yJ~BY4I;$Nfb3;;&~WWlfNEZ02q?9}jvkHQ_~8KLwG2f9yx3u#LbhUIb|^JqB>WUPv95R|GP;FU4e zbwX4#;}6h0L)keu{U&5TOcM43s?u*?Z07k`q%-iv@1+mxMTPf3BeUw37r+vNWn(Ucu zZXxJd*LMN15dMDw^7i)Iveu5V!tuwT>HMj9=&6e?5f!EI3=bq`=AoDn| zr+Vsl{udIa#5A7*VRz)2L!}&^mYy9f-~h;BsX{6cFlSO-N`miwfAk43()CBcM z)F=R+{chbe^qp!sF{f$A!NsSzt^ajokh@3Zi1g#MI^duWc@{v=}&!X%$|;sZ{2o<16_;l1A0x*OPftLD}p3>)8iZ;`R~xBy%33*Jjg z%XAvx>~p`wh(^VE@RqB!R`0~=$69HQL#PeI zXOAUA`AUNLV^E6VZTEEUrWlbwhPyT;zC<0x4qnl$W?Uz7La!?8bU{x0pia!qsP)2- z6wQ4Y@K^Z5va?AnXy0HV{jP&6!UiEJ{xFW%#2jV>la_aex$+aQA3&C9D@Esz4YMV& zBj^Lqw9%x~dq@fJErTF;ea$@-zB2>^WIj)Ia#_^atJ^&@9fyhoY7GF5po9?X!{h<{ z|0cp9Tz7A3`aW}!iK>XP7o3DzjpeY8-In@FDcyWiU+d*;o)`a!z$qTPDO!SE|mq2&yvwvmf2D? zOVy^*C<@1GEmMDmJlFndusZE;DaRvxHwe9_%!B%!R_rEeP#nN{yN|> zIno}{JtKDd(u_ymczqu!?uvJ1CoqddN^!tzDxF$|hG%G43L%m1Kkp;bTF$V4_^CtR zObOeS*D?IIm8CgP7ORnt#uL&4Hvuf)gD*3E%}MYsALU-)OQC%-Y*a}D#E+gk3u_mj zMK+s23WORIvIKKmiF{5l_I@~c1zKK3fBuX{ss7iWfrwsFFRGH5^#RwoR40|n`p~?$ zr-A~`?C9}$^wCEcJEOZ1{PU&@s`$jGkptZnu`TrEBn!m%0mNusF@f4p`i=2C<1TgO z1LC6uMgR!<0)4V3Bv4aRK@nb5{$jiWvegR2<{YG6>1ZNBL=p|&{~c(i$p5eGE{2a= zt2T4vXIes+ziZMkJ`sb>0rDmp1N`gpMe&OnCg-_=1A=?|P z^;cwkRp{OxpJa+%5k47pi`?|4{{pj%APWfmJ4A7$f1z{*9Of-Q5Xg zGYoV*yR?sWNCU!Fkt za0OqrXisc{IBje6wNO=59Ucst%!r?QfpB-0DKw4}fd8Ndv;xs}wXUV<#D3K{WZ%!I zfEJP8w{xP7OQUlBGjI@xf=TjFiqG2YalZ)odY>)8Sxyet0gdQ5yI8h$WCh8qJgnG9 zx>w#>WB;o2cUtj^uD%aqRM;9r$%7^16>OaNRL6n~gII=-0zqGGLEn&ZlwiHu_lr#< z(zbo)#CfTB!cc2>`(hq|;ZRJN4G4C`nS+!zkSW%9L*DWSWi!Mdc;$`|UM#(?!gru| z68NDd&&548vNP6QtX2Sm^ReC7?$7CW86|+LmBvsL;xeUg>6u&8r5W}MR9;Xpz$x|M z=CNbqRcK6#>%E7#p*6~~EZct^w$qj4fS?@qv&6_y8TNj56nkPQ(Pz;i#lERn-6AA9 z@7Fll@#^!kAHzV%+ksk=B*sus(}wqJp$6>S7f9bJ6gAl?G=G`Zi^_zY*r0f=uw{<6 z|40gjtQ3LpN*R!qp_ywTZyR$)`&`SZjTa*uNe&>M>pqZ_}T-F-;5nM_`X~ zlrX^OPFJ9XMp7a{C?h7|7NB{g-ubsn7&d9z%Agjab#W=OB1R|_^sb&^nDZrMg&HAR zMLhjG5~3eULa$GmpZnj%Mwfce2!=YG)J)$sq5owbzw?9rwwZW`4@-4!gu!|;cKHaf zbT>ZssNSm@#)64m>L^+U+@!EnxN;r8fe~Rir)0ql=j}--*Y4~mIyGb3vA$6!ed>nL z#m_D$dzdQ0i>`5KByjrQ2Zhum*ih<53oSNy4rEDyGA99!k+u4GGLqNPmy9HyJR)|E zWc*2n9gzQaP5qI?znPk4(zSL84wq}g_410n_gDw9ZC~Sq-wcN#N{6;u)@oiuVQz$W{=QY))oOz`{sd~A5c&P-M@a$!h4KaHid48M4#_%Ow z@4eSVH$^regQuv=DY{Z$J7~T9zupy44AvF;C{m{$Ne4hnE3Eh@9|f?G^zVom`8bXO zOohV0#$Z*B*oW>+qGr2HjhWv)dc%rf4cw(Ecl#4pMs*#41Dyoi8Sa+wRtl=9ii@TR z12r523fvhuLdU!q#Sq?9?w1#M_>HG6rTEGb`R6sB1Z9&74X5Pgakz(uWh@9BNGWyn zS>6vmlcZ@}9B(#oFc@*${zB_usPr1CpaM+nz0Z)qsi=scJ;Yd)uwdZHrnP`ZAW(PO z#|@6NI;3H};mfacwCN7vRXWu{={5*0c>T?W^f&a%qVp%MsRl70Y<%wYs%N^u$RAt< zc1k;Sg(PUYUWV7#otc@LVN{=-EDawTxo&RkoYA|fw`BlWGL-{CLaOZYVgg&hWG=uf zUFx51BT0XEa*Fe&Eh$NxURZ4HzZ6e@ZRb{P4*J4WeR-Sflc^@-0tMn~P3|p7qhVm% zw9u2jYp^EE5LZy4sDR?)R`uFc9@)}1_+BJ@V6}?_<+|V<)f0@a-(pRm>q=0wyM@&P zvA{azrsm_S^S1+SwnR0X^19ZVvStGcEQ#nbjkezTsA(23?asM&5}i9}?k|OtBALOQ z0#$giw`?En1IvWFQ9;By1dk&p>wWId{{DI z<0z;NP`P{G+<7d5u7jfRUyD0rxhXzEMCGc9@h1JHWe-{2HZ>4Pgt!nnl|s$wzgrOG zt`;!o%v4E`<8uc3GVznbaY_8}62?==_DkRVCa9~7^|zqgLi=~+w_@sT>^+&p`-FK< zRu|#zZI2ZN6_azIhp|fmGF~e4f=G@wz`FIX;~!NEUXAjiCp%xh=ReGIcEb&~g-oIx zIdofRxj{x5<|nnef;A+5#^DZU;_{0K>P4<2oOE-KW`TE8_B1d9OY{7$lldceP9M5t z=dh2K36xxtBW`uu9fk6Z=6l%7S=5a=!|fG~BCS(?_=zs4Jfr!S##M2)IGz{eQ;JIA`vvWsQasEXpXFCohIEQ%)(nOkwRXCrz zkb;58)_sl=GFZ58)*NJkZ10BOFgy#Qz1SR}9$mDZmE;=pfVxhhW-;k0&$lVMNOl5V z$v#{{O39_>E8fE8_yp|l4Da=SuDUu=*_nIc9~GVHTbIsJ(fvoq!e&4? z8<{6pSGA1hm(7ik;1eEKe=bfkAQ)GEV?}mL;fEp@hNsL~%;L8f>B-2lTUWql;4in8yJ|7A zCn+PiM1!HiW?Zq!p&u?K5-m1fG15hQ9h7)^3EV6rJ|NEG@#QKse!w6d>)v zOfjk2gU*C9pv`TvKl9dD5!0Nx{>HkCa9VVD#4t+{@MMGGoj)U%vTw8j*R?p)(4ogc zLMWhwhgpH&fy9V<7uC8$Y2ncl8SrmaGQ4AAkp{>7HZ_j(zMq%UC0Z#+mc*cS9N;rg zXJL#B@~Q}VvyD!oY95yv9LxxQ9aA?dhKi&{`}z&DhqKl*%v{1WjeO;BWyPW$SlX5> zHUpD`gZHwnTeEA-hNkpv6)>tf%|w|kkH%%Pe0sxM9Un&%gqu#Rm^hdO0-vCg`3t^QC(uD6KoU&yCgF ziZ6*PcE6lA5FQ8XgVQ^Nc!ycu0Eys>&E-mR#0!QO*csRB7{}IIm9cjUiqXHU<$cPr z*`H)s4P&rj>YSWdR?Gnv^SOkHcJq-rphf5D{5Cn0v8dnqoP_aDlb zRl91~2Znx0=iQKQ(pjwHpa%_nwNGg}e-LME{nT#F<`mB@s3t`m(d{^(*21b<@FwjF zQA7+*;4}+dc{8wpdX(%MM}Q%(?!p?5CX-dk^@tH&@C6xOBb=n%RZ7WNie8hm?U%`o z*5Eb1_ce7VX32NaXWC4;Ml? zeN6)4BG<VVz9lJ>RN6&ML;(n8Z`XeQMH{kaMnPv^5

R)NW|e_#(qPP7#ta^` zz=lf*hP)N=a>&@#t5z%sAf!w|kq-L8c5G@ApN8OE_0C~ENl|v zL998M)?r0tCl-5!`D4bEPcWC_F8q2(xennPE=agu@;67#8tynu_- ziJ}p-BjNOWr1TMB!4?be{`mM}mt@kBmP{vEB8d1g`AD{MsjiCe37Uj}vH$gXH8KR- z)Tbl7!2*l^JYILPo@>v9b_|*+^jT{H@)_+{t8+F?qDhu@g{;Roi(}WQNp%8!8mI}g zW{0KsitStXLp+)@4Ipka#%7~Z1y5Oo>wfJ|V?d>fZ}D!uB^s<;^auRfK5mDMbQ$Dd z#!y6*qG|H~>FEX4ZdU)5L^Gw(=MH=hVoMoD`T|UAn!7=<8Q{89H)(h_ibBb^0)><@ zGLokoyJCl`2F%B>LY{V?dg!HRoYQXeDrs5B_JvDF?ZPp(tE?9kXf{S^K($t(HN#gs zPa)Aw95ZGl`kQQr6$xr`6lFa6XaIZoH1L~4h*RRUe8XEBhEM;34+115nrW-MVeM*| zKI9S^iq4>;Zomc2STmse;r+=)j_bGT7uiAWJTgktt(OWXjZG$EThL2tt9ZJcS1A>{ zgc|rz^JZh8%Og`A22{iq6E9pon|4R)9s7=5ixrE>g8)$03cW_joB$@;di&x^;TF;O zhG!jsas!cLI;JDq{f@)N^Lry#OR(f+fEycMX@L$;fxKq=g5w!iXH~&BZ8v^V*Pe z@7}B8yVxePSBE)#*N1THLP|9CeCh#!w-b8TAmMr-B@qWgqO=S&7fI>BK1|lKtZ{N* z5tgDLJ`{HKT^Vcyt2wz>Xq$F;<`kksU`xKu2Wpv7P)u06!By1` zo2=Llw9zLNvW*#>REGnBofuhzJO@S^Y8lbo+Z!|a)SiZkNv6!&rVE%8EdPyI(z z2dv5TT`J(IT%SX^@f*8k@kYBl*zIFi>l1FEEdc|$;w7ycO4Qb2eUeT}pd`NWrv+?I z_wxYAn|E9SZkZvURC!bEM)isY)M7iW6J4j{I;ibN&9ov|klv_dI!OIc6Am`LRUF@Z zI;9ddkrAs#>-B0|C^7)h8L2AxQ{#D)iVp4ir^om?XQ~|HlgN+{M215j>^KIHK%8|x z8-(e`pnGPsi=U&Drr7NbPLun#ywVok4N)*)=Kla^$D4)0$F2B~@6r?cd&cgH_&$R1 zGu@ReVv`cDt`8GW!;0dgFzpNUfC!dVE0S2Bzp}_?O)GFQZZ2)!de*ez zt&T>83?z!!U5@-V`$6Y+f?_3JCTxQLhwEM0TP!|^xNUQhwRa)ddiO)7F}V966*WX98`6-NVZm-QOF*b{6z;8!^?VJK5iCoADVjkkTSl{(2ZF-nfVzPyGYkt5)(Yq zs2p;#aTyBbg0_iVgbF8dy!%~3SK|`!{=G==fDCep`S05f&wK{Dv+nKUj+LoRex&0M zn1E&jFxz5lEX?UvP09XOe*rob;`%4943O^`-8l?YDA^HIwfa5{0v{*2k+`}6l?J-Wq5h{>!Q|xn=9c@UHU3dL z3HamlSRG_MKelNI=d{^16}SY4&>&}$Q0g-F6!qLLb3J5ZW(X#hdOsc!6PgA}s!bj0 zs8eTqw!OI+|8IkLxe}mjo++`Mq}UR{_?QNun-Wb*SG-tq%R|jG+>EbfaHrk2ymH-8 z!Nz&Zy9s|(O3gDv@olwI8k>I%%%jJ-p6x;!KpX0ncFvJWReeq=R}tmVVR`L@sL!YN5zCH@^u*NQ_pSQ^V{D zKPhL3h!mIo>Mn>{*AbMX`n`^`KFdA`QR_4U&ew1d&ab%3Ik&@T`dby;T|m#0ts!B6vUwz%t$FeZlvz zN>3FD_SpZ29ltD7M@^r{|4_zi!zII}jb-I;o1~&rNcnbtt_K6moZy zT;dvD&7a$NY0XMW&6jugq}TZVv;Fm(Joc90Ir)W_c9piLg@nYQbQaeQovZJxVx({Dal z-95GGBu_@b6j0iGiB{Z<#FX>7jP#~Tae$7JzSe`&$?aq?2b&SqZ=Y;`?*=h)lCy&y67-&@9vmNVJ~Uie z%l{!U1~Y+#=RE|8>+@l=js>g<3PxhzhcHxz`gnW*OoM`@^}TepWXixCqFtCU`|w6FOlL;jD*C& zdyBR!q_iXRvbo8&+nW5Rnex1H#gjMW^PDaP4_cb zNvtE<1m6|GMAQ4@9Cvb~ZEyKGvP74y^DLy0P&a5!$nSNRJ$qq`e!h!uDKkCHf!*Q{ zjfn(fLTUbJ3cnNEMm1#_I6OTz`fN19DcOXKA{W0EHvd2(ggWVJ?gfExEmNryA}2`d zT>t&P@==<8zKe?$mP5iCSfx1mKrY7~(W9Sq0)$v+P>*>@YuFwOPswSt-(LC2KS4gM zbFrKzkP?+wnFmiQw=ksP@pYy~4Y7J$a5cqjt)X z%DDB`6DPKuH=EFM^dxXH0?m~k1udF2?DgM!+&JN=?9g4hBz>uObj=QsrOx@ueoPv{ zZ+`loD3-U)YP*~K$jbS)Z9IW7G{lU5GxH4Hi`IM^QD)TPdliQ&xH_yeC7ajZz@6?( zeLq5-paQDO0B{?&TVw$~=06bkTw19TqbprYZs*`(0p$7eZk?aEfC<-k6fC6r3l_qK z?}eRKXMWV7LsU6v{?(1T>!}`ulz=l$M(+Q0pb&Sc-p}(86QO)Ug;S`yv&b$|-T)T# zxvdezOng9At!_EqE-SN`a+stRCepzz*Zj@eOjd|xughD|R1PqUp+vHaBYRbyjCVzx z^e!fJ)Q}TBP!ocH`l?1-v*xKtdOx=V*_Izc%|W98T`wg z#RkKdy@bstGlmJ;O+mxI-hd(lV2nFukeh0yinnza)&3blL#w^<)j;aOZJ#jCujbj) zkdd+*FjF${SW}vz|Hkw{C)s*g!Lv^u%_c7M;}{~n&cApNQ{{sVLP=?=I)SYFr)|@A z2A{(OIjT#80TJ(yC;`8}< zx0;4h5eIG}oY(Ih#VFjO?)#f|gmA+xx^I?UfhypI%F=~6>kU+pLWo!8s7Wm~M(Fyq zIx1AH>XnGK6)m%%{HT?ON#bgWEKo;-+Z_~zwRHOVK%K#&LA{hJP8{lFa|Vi8W8H1Q z7eB5n5H|){%+EAL{jcD-CjzWXr`@CV0lEgcv4*?HXt!bWl{hR$`akNxEOOE|?@f_^#f&n;hn%#m+07n5qmGrmx%qz9#yTLFVCJuCDNr;Dr&+TFbG9 z-%j0%g3v(6tF}#rxzy)jLB>FUYl({OtDwFN=`~#3Hb9c1e#VReKow$U;`Ck2aoqZ{ zuK!%wv$Ue>Di`$L;GDoInSo9O@rH`^68Ln6XUz=Xu>AK;_+#R0*fSvxp@k#A=LQ^> zT63wm=fz1)t^igTb}QGtOeTb1;sYslrij=&bq=e z`Gg=TPxEJlKde|0e7&1X*-R7Gb^onWS)HFs)Swicx^G1pYOw4wUei&1TVbq&R!5Fz zj45RPKb%tU8YoFD+>u3LlEcWaxq7g^W8DG9sq-M$A`aOI)1K1Jj@L1nmA`iA)m-v7 zgMun)6CCrcal?&NW(*dd)>N)jC@z`oIIjnoYnim+H? z!ohwH7K(@S4(2Hn!T$}DX*n{j?s6a8OFXYRS!KQ`H;2G?_tsQQ%p_A_Jq})@iET9M zx5?iW-WPINQN4{L0NI-2+W{_llVM<*;#Ph&y9xf);a*VSjCowIY8*qki-WcK4g}ZB zctib=SXj=2z(tR8e_SaDAk3N7fygd`HDPAWCcAu&lrEMzt$41UyvK3JPJejlpIrW3 zPYU=ZALznNb6Bnvy5&>n^z^4RW|8GEV$?=n~BZE7;m=DG*|X z$n!8hC#a5=`t0<}>Rp|ch07QdvAN0;krE`yV=(0A84^@&EzIk>5RHExNBj7qP*b$& zvDGpVfywQReWMHgT_0bx>sIV9wtvN{bTBqQp(0Ym;1&c{F>q49n%GtcZR#A;3QNLpi;owpx{shycS+&CnO=j=js@}03Vy{ z?5G^r^9Ynchj9?apeE}^VPV}YqdfN@xqj&W?Jpo6Wr;-XKzEpeB*=kH-lFM8x1wb2 z`EECnX#%+t?6IK`IV~mTz~un)+r|a%+NkR7YbwU@l_F0E%>=4y36|u#u<1RnR?}gl z7`?Q3sRfy5ukG#TdUdbFNd*OJJdV%2A|=V3V?RS-puL^H7n}Dp%n*R<0L1rc(e2Db z1hF3mNJ_G%rpa|Ra9ke3y9&u!064ag;Q-RArgEHjwWBMeIBDiJn>b=Mn*lwVrJ`uQ z*0QgtPdm|^;tAfo-7hi|y6huNZ(Sy=q%9xPMHCms7*a~^RtQI~-oOKz;Bh3`yZlTjrLj(Bhi2L%w9ck^NV(AB1dv}~ z1^+ndqc76#>&%CeqDzX_=Op5hcCfrJh9p0}-46k%b5*Cr0`3^o(+ExJ)}ZFs$`K~OZRgj>X5BzH7tJpN zJ`bGabUTP9B^?s1?y1c>=e`+2-|l^7!ax0R!Q%rcnuo3FMX&M3{u4t*^8~a?;6?qdnB!-d*%UmZm(oGGL89mzNYXhf(v$pwGti>hJPH5i6y;w*fOhNas!PM=AWy>Y@-d#pILGfl z#GHST2}i!C7`TkV%yYSgSL@AYTN!*xo#NB=)&Z~u%5`r9k}blRFm^L5X1ac*9lqE! zB!FV~hZ)&ErnqB(4)#a#YOUVy9In7{dbxNlep!UXbq{@O_7sPVT;y8K5_r}G@ISHJ zf2c-wM07`{sp%0XuejRr$I)E5{v2axGsy3Jy>pZ$&(inX=CqCJ?wK~GF>TwnZQHhO z+qP}nc2C>J-Sa!=yw7>>bJzWM@2bkks)%oVa;?b7Xy4f-p<|Nj^Xl1qiKjYw@4|z_ zV?EFCZC9Jr?U~P2-c9WekHLJzoNQICU{rIGe74Avw32htpTu8kw`lVh>_R~aNMRG~ z2t!oJcQd|*B7Ed5>%+0#KCPse9>re2>JDPSZIIfm%sdE}5W@4Pnzc%x(bk2pI)vV! z!hKaLtY1(%7~#syZ+4FT+nO5Y8=7Ct@U0bz8q=w1@v4vYL*YDO>U9K)e)}PwDk<8()MbidXqRU7YYp*aRXg7>@!UHn) zT(ie&2*`t{w^ycH&H9mGf#Jp7P?sr2@_|ybf+c?ciQ~NtMdTp{eybY@8-@tvG!9L> z!X_X8QISsDyrika8ERyc;dE8Cs79z-woe-gjoHb#T_?MxhWjqo9g@i;17ay`!emZ< z7vlF8!zV2y0ro7j*xQI6GVTbOIV3g8juzr)0qUu_H#s;7A$kttWyfmu4pe2uo@kQW zz?8(1+>dm3u}$DGCs=Bur4+a&YWrt<0A&3I@wz1krl7s?ReeO|Dvg>ivoI4g&F^!f z;zzP>!wuN5WdcyTjN<}UMjJ-{nsQ+=DT&|#qes|M(|`x8#9FwALxpFWPF9U#<>~71 z2So;y8=FTYZ-2(q+gU^K#kY$-X<@o*H5*S?L(RIh`km4ki=|Xez{@** z9GV{x(|@PNnlw#ZeAfhDyg*I-xbDq7s(7X&woF*e2CG_ze-C3zXI05zpyaWqYGGN; zzc}c-(Sp75|AcdTAie~Qu!Ng1s}?OxSBnn+9(q-qHcv&cZ%7o zng(twSG=Pi5MDQGTQ738>K4$8+3UU3(2W{)E|OQ0b)8;DbL_k;sKAgB;a^iOIP8X# z*M}}P=24E7UWE7slxVeFLweT~ABmu*akopsJRcE+!$$z7ZWzb+<>~V<-jIRRZ?lSv zE}E3wM{}#z;8uTAWGb_cui4%5XoG6MFR1t6*ahmY0cG7a1aQr)hMgl?MT*od72cd3 z^uWZ}e3j>E16iL`&*4{VxP-yRoD?ltl-*x;x!2ydqEQ;8jj5b7xEIhNhY>jJ%a$K zDvM%%>uAq;SmDooh(?mNtCp@6h2x8GsKhSV8DxL2VJ3JJ9Iu*D0&DK?HXt zd;teB$v7HeAtHwX-8c=HYc`;I-u+lqg}S3bm6s`}U$dj5IZ_2;plae0Q&6S~jEX<_ zsRyu^V2{Xmhu6WAAK4e@NV}^!zaCWC-(Fuv>*43!<$;2CcyS?hs9(@!`usJ+DFdg| zB{b`R=E8CFaV26jkG@4UR`XKve*&Y%a&Z{V|JuAcIVqcR$fVsYsHK6J!l`Vqhv%?# zH7EB6(*vMC8d`6aR*09IY0Xx+yZ;1uQ=h*ORo?w2htrIr09#UsvV{q&uqm;KFrgI- zw@vITLDvCHlB-+WHgIPZ7#p4lulFv-QW8Fmtdz06$yeOo6Rm*}T#MW}vnv_zrxX|G zQN1A6woy*rQawEWsIL9L)&pGmO}aI>l*_^|p{`VNt7e#_uDA-RzQ)$V(hN#8%IZ7J zjXgm<>9R*i-+w*y1Pd5>1f|{Y+I8CL-!v<|a!7U#y>8L7?!tPY_?XT<-s-wkgFp3t z5f|jNb=EfAASd=i5`;++ccrZoz{`LQ#lhsGqL8@e@Blk{J>pxFpcWg!@kUaI!^hR~ zm?-%isaiwjw#`$P3npNwMAFHnN~&Hfj4+u?RHc&vJG$$e?h*fv%vKleec0>DUtdUW z8UxbQ?)gIbJ)XeY8vA!(Wf`MRy;`aNXbd?MCoS(=tMgGsZ8lhG0#>zhQaBlP4Zgf* zKWpXhw(f9%nR#*DU6}M808!9bx$lL%Je;o|Ut+R!5l;KJAqb^^pWO#lk^}UwtI?=# zA0kslYoEF?DlBI3$pPBdTeVfthwiR{K{LU0B!ICE`Ju_1_7FD6x<^cPd=@q|QSh&4 zZ>QA_c_0@7tkhDY%4zHIlnx(`8RtlI*clmj6eTN1Uw1veBp-hbfcgFnjV_fOjq+K! zlf3A-9^G>_AN4z67%gE=)7}Zi#_+|ZXSfTS9|JzGx+}h_tUp7KFnTtFj4NaEX6F`# zJYwZ5$cKjcpG+X(Hy9LHe65%nBaF!yen!{PtCmXh%0ztWz<@l9#Zc z4x`Yczr5MQH>INtFM#6uc_fJVXDD*~R`x}xKTy1m^VZ2N)fPEL{EbvZ*52m4eb`0{2DS=KI3He^V;C-|W;Kqac>!AgQ8WE_pR^sNW zL(ks=VYD$u;htjX@6vRJ9g}_uI$%JsRN$AF(6c(w2sc#YIRFN%DSk)YuwC1K=F7jw z4L@lu2HN3s>mQMt4vh^PGs2Y-9&k{Mou4&`tlJ^grhO1^9shM)zsyY-`qls%Y$nA3 zs+0mc}DfS9&Ohq@!Y?8`J?fVCs0T8)u=L z)8H9|t7Q@n0wonAlz4&Rtdxs6s=iaBX>1^5vb>4zEis_XQw*-slFRo%G*5_SyzyIO zWPAbtV5#NbbWXc$O+)xs?J3p9R0aq!7OYsnF)!x$Z*8T`{SIfQDJIDz zTmfOwxdw3TW|;qv?CrWj@UhY67N_zcSVN!MXG06_qFpQ9a< zypjjnZ#Y2smjs;o9iIIF$bstme*}oydG>-g)?4=CRQ&h<2p&YcTiny%=^TqPZUUeq zZw$74jhymr*Pne-^_tG!!Ru1@C_MoEO~O&_30K;UP0pO`6YCfC5wpvHk2*xT&iHxUsht05}t^9pX7Bc zWY1fajFc(~?R~VJ<#G7+s~70(=Xnm;n*U$;o$17z>zJto9zRJ1k=%k>q5!J(;Cro@ zkHj;P&`QIa{*ZWShpcT#2FVvRhHjPoy`Rjk8I=BV#L86b8~kRFj8?OZ0V8XR6Y^~K zpM>=fEB=!bgLvYN(neuoK9eieQU>$`=iIhF0Z`GB-Uw1*WT*rq>9_u zo%X@g`?NT{pkMB7D8Ts@t!R4gYP#RZuFms5_!*I_{B+zU29xNj`_v}PGAsbBWRn_rLVn5G~vYA@;i8 zTuK8V@U}k4AYUK=->v|tSFR$D_hIjEzEGD-dj>?t^k33VT-)7_6_z)qM1}IyOkewN zLjETcwcP@$!vVm{CxuXr_J9Y7NkBZELE)tX_|<3nuh)t>=`3JTb}#_7b-2>qP<%cs zNS55&(=2fPpKGzffH0J=bpKvk7Yex?mI??TOEL33t=f97F|%nuW%FP!!S9k86*4~_ zoU8!~@XvGqmHz)m!`WzbC?Fugp;@>(lo#CH;vQFdU@HjR{cx3jD@QjEv^B~}ZK^|t z_Jgtt$kCNWB48V$BW}~=VuKM79zTZ4lLEinBSlLg_aRb2Cl+35!P;)NeIiB4Mf3>3TtSKW@t5l@NmP~e#z>nT^QAroz$dgKZPlx_K5hSA|zdnaD zu?++Qq;&anhaY|w!D1L}$jL}!V(Jw*oYTXCt;^eKPii)|h~Kl+RyYFLUs5zE+78{4 zAEo$7nnK&r&=p@Mopzy`q($BbP8#nt3bCZ;T+pQ0A>rK$9hYNo1?`G--}vGoCmSjv zr#w5|^OSm;wzX0-df$r8?MBP`NWw@m+DCvjf>w<|7V;8t;A z8GXabHnXlD7JOW3^knR3FuK#bZiz4fK{8?!OJlh53!o%_HJv^bEEbgUxHX~@+sm@?N_VzdL;Je?zWgirG7 zc<%xP^Zc_nv?YeV;S!&EX=B(sI-}IFui*4QCRJFP>@-!_AzH~B9H)PWyr#QX!49Bi zsNoDcMaQm>n7JlfLl3O(ug@Xbi}jA@6{we{)1X+d04)*QkFtSh!48~BqIs`N4%?MQ ziW%}vtl?K4xk%Bm&}7L|$8TiIHcY!@?pVa!D5&IwWgL8t6#GNQkh2RRdGuyZF?piI zWkc-yg^2fl)rdn8+4eg>o9_F)LXop7m9uDVzmkRd^L9ybqvhj`U5UetjM_d?SvlX8 ze34`;*!1`Geq86dO7tv$syyf_3pk!x!7c9uZ~ttqRP&y1wk+lt7+pG*3}ki=Zg4YS z57TQ@@Wq&u7nB4TQLKVyW>wo9t#plz7c&qiJmaayD(-K02d#6BU$*ZZ7X*W|dE@hb z>jOCP0qFI0M?|Sd)_WwI#u#x2=+&+WCBL364a#O%g@scFh3*l(V-&UpmA^r-I|T(6 zzZ1Mhrx20@Hxu8@ud6pHnI9K7HQT&9IV_f6SebKCoaB@BGY*ebmV6d-!&h*PVX(Gs z(d1CD4T5Qf6nXKuDCwE*zJD!#-EWR*F217;C$sQf!=2F%O$~O#0Q4>)vF6a2(R?@VJsQ;<7*CqUV8y$i-2!q z=4G~tqV@6ASSkzR)`KB|C9!&Qio@l_;22{sF?j~v*A~;bZu2%fg(EFs_nbz9(l`f% zz0Rv&_>b+>y)YMpFL(FZcpfXGzsEs1*(K}Ullm>WQ4@YNLSngiy|zO*>M!A-D-;?% z?NGFc-ux-NHEcL_y>|6J*2USqD4u@fU_ZO`J`JEF{KF9;QK|MP80)?u3%+<)I@c+` zZ&T^}Q-(vP^N!d9lSN-R{0BxYS~aq^@C4++b$YLf2oD^l`;%M-E6RPxf=7ELo-mR> z%DUZRYs1S|1V@8wlXw!V7P@|?s;v698MhRBfdlo@l@ekC+^+6W;h@OVZ~yhd#1#(F zmh@C5gHCYu#PVm44p&rGBMBg_R-0}WBm&$IvXH~=6!EVToq(o4JXi~OH6pVLFkaY) zeIGiQg8L)6ypa;N=ITixqkjfd)s-{J9Pch(yl>-WB7Z&5iwiFeCyRH} zCV#HBa>Lo}dLzWpXtZb#rU}X-L@Vy@*Sm|2lYecC0WRypmv{f!iwe84HB!T;_8mud zNc~F%cQat$Ai?0CN69!=Wuf`t}rQ;}VOeUd-d zU6H<3SY{tUiGxL=@f7b?Y0&K6-WHhLv!*go`75JV!C#L*} zk@%i(VBN2y$zHlNpSga>>xDq9FbM8#@wPGO-)(=`v1&i!3k#`bHR$Nh*7D^5v(rTz zJE25ujj|pgf7PKJEmLDGFDW#O{_K>VtMmhGSvX^12Su0jGw(_?iSP}A=_)qfOe!c( za_39wdF*J+la*6zk1#h=52()2qeQC2;>?n^-ytHwaR$M4kK$QDz&~lo0xz@lEiF|D z#2}nJn1nb|jGDCn^zt=^<8-H|b{2Slx#BXXLhiyM&^&#WE$^DD7y@U`f6mCH zZO8f2B{$U|dEAABbgK^Nq%BuJs>#g0h|68GU7ceV-0WuZca_fVYh!VR6qwt&vvf1n z>S?TAuUW}*$W2%*T3wN-3tQJ1^Ilh=9+&|V@|MW_!_+R3 zL0`U-Qd9$CWHq+){m5ERoqcxx(VR5pwE`>a%SI^J`GXHPUcpI~EeJ^*y?XfU~(&_%P-ZzE< zPxIIK-Law7F}RI&hwQgB*mg=SOgLT{qd*Yna|nJ#>&~g2VDWDSczqB}B01Zx8n?5B z=pAduENhE^p2}1UPOZPhB)~it5_EXS#pnnmA`}cV*vSu}(`2B- zw+cb-ITPIxFF%i8X;c~4gvuGR2uM5-6}^d^AH2+(Q5iNh#OcZ=N9Q`a@9mqUK)9D0 zo&T&5fe|44FmnetXIP~Qs1|4uQtq2op#i5VK~-mChi0DqX!JIKb%Sdgj}UHgIb{f^ z`|UyRrcpQ>5pK0E;qI$^lyL;BT?k@vHhEg2oA~=tdHt&;vE1=(+6`ZyKls6OEKE{| zXyzuxcdNPe3VugZ_+p0|pKk22>iNJk$_G&kQv&+k1Kxwcg30{&G2yB{WBz*0<7U~s#~=r}Z^F4c(8#Pe^b+ewrD5yW8HwggK=+G*jc`N*`d?|iu5OOy zPcrEFt7$2ps{Gl($^&FhOhaKYMl;hmxTs0dmC@AyXjq-$U->TeIbI9B{I5Sf()Z`{ zw9hkz1;9;^ERL1x^;q!U**d%b`T4U0s0SeV8qfgUHU4A}vE~*j`*CyH!Qo_Wsv3Qm z!20ayL3sffI?ZUx(VU6>kI3uF?H^}=0{+X;*TA046)7g~eSx66`>;HGyz>5GqsPR5 z8`{^kB?zxt1Q@gq=fB0)hSUiqGD)syY-kNA@`-D~)h}-Lq4sd@YJ&J{Neq`{Iay!g zAC13R&C2M+RieB=SLYH4YT$JD@{~Le2a}=E2c(W)zV_FsXcy0;kPJ=P!Y)aT*?+#- z#yKb?1@k*>7-d-7AeFM2Poi@CJeCa<>4$6U`1Ee7f33N?arj}h$(T4X7yD3sN~jbX z&D%UCg^wkft_o|mM3rPxmc%sN;M6ZsR<`-Z0A65%ZishAc4F$XbFT$fX`pfU<= zG(4}|Yr7M-+S*PUY7cXcO>bCRCvzy8u1VhC?*WQRQ$2puH7o+-YY~fzxv8JvEM#|* zSaIHU9qAwn`cWjOD^c~8InJg%M|A@8f*PHseugk|)~4kPDBt*4~m&>GJH;j$o7bY zaobX2VWvxlVj*f;ymb3K_&OaJll~|P%F14Yf3fqYD{b&K#$EB`SZQ-E1znP$o)6*u zyq2T=lyY2oq;g08*_?kd0HLKv{Ig5W9`HqcA7_L5(Ot_vPw}Mq9f~Pb)K52C)7wuG z7GtZh09(6)`VxgI`PcjEnQVHP2R^i2e||UXS}y<5>bs%wO$EX6eLDf)3$*uCyH>2v zmH&XStLlmy9??3)QLd8eI>}jDWc2|n*Fs1H-_|GjBPQ%g0NfZ~fITs?K7oKUeN9OS zdxTn%df{sd-3aLow=P+~}*_8o3O z+ydU`N=N4B_|<@}zr@(XiMS^(2CupI&I|d^c0$lnH1|>iJwilj5~1@(mPzE>L~ek0 zsc@bnd4M$gO7B)8DAifcHClD!PSx}|V&~j8fQOrvBT}O_%tKeDn`4f}1>gQ5-UU|o zE)=m%l=crc5k?RX^AoOjK$q5<7|-lx=HYKpq2wm)HC7{m^6?{x8)+fh6(<(I#(%Bd z>4NCT$a#l~t61P2>w+O?n zm$SO!=HkD6Vgx_f-?KWer5At-ecJY05NpKg@^ z{BU%j7OC^knJ4?8bFsmSBkUSA%Fb_uC#IpwPT0p@&#z%3f;Ck78 z#&IZ;ibI+Gp@ndc=FTc)2c+IsAP&<X$0F@Kam6jGgi1^C-li zqciL3Unl!UPBZA~Z$D8!=#7l7Hoz|8GFpU;fe}rp0Klh$| z$NG7=pl$!<1I^#CglEHB8{uP1Iq=xxD=`UnnA@|s@Al{tm#5Wte-X80;@b|Ip&-CNFB;Qyuyb?iVo20--GUW5%#eEKKgJe*%}w~7z)C?QP9kW~Qx(`-MbgN)%2tU^-wB&WXV3=7S-Pc)BZyV02YQW)N~Zn$?UIB zA3v?5r9!=5JU_!W{Ya1g0trcH=;Vg=K$|($sPF$;{;?w}{B-ugg!X=jr+)9#{@@2A zZWaTY%6R~2K~j%#GIJvP|Dl0YT41-szE6CbzZ#PnhCuE7FUgP{J@Kjd%qw;P1iOpN zIbcx>g#osociFa7p+sp>?=(b`eEiTM1Wg~!g^P%-NBS1hhy{#lfw zDHVYP{1Z?p|NH)JsM}-fN`e0|vlLB$i&Hr;W8EPKCI;(p^6+0_eY5&k3jbLV2ao@i zLSsGu@yy=8N>hSr=SD!uUGiV!_bQqh?7uGBK_@O4o#+O9fEQwH2}@{BoSNh;CPD#s z&EaKRn`f5iJ+-G}NFXT@h%>U9>{n!ZYOTd!5{)H#+ss`v?`#|=6Nd}gp`zSzKUhW zgvYa%SO!(1Q&To%?FDU@EG+-R`voed&H<%C7T4Opec4mJe$o{PVn@281vQFmV$Icn_TbsvmK&zH+ zQ+H4XV@Yj^V!Y+cHUlOpKredB^pzhc5ox~xO@H>m{BS9w_TAA$yZl>tE;8qQG%L-&%+lxdK`)is4}q zYl!a#u_inUB6Rkqo^b2=^f~xUzWJ;!?-fx4|9b$w#w=h)_3ceRR{UCqjh;1IeFVzk}W7PQOYV?`+S`N%uv3gy{;|9;h8XekJ9^mk; zgpJPri`^MFYPDt6OjIU(ML-Hp+%vVRzf^Ej&O=noOx=?kzK!QOa@1NWhMB))m!U+>8!@=Ow@wn? zG0tSPR#&wuQ5{=pFWMQdH+DJrXQ{$uXR|I($2te9nn6%N2}3u?2bbwT+(Shu&XL6vm^nTOCLSaO27p8K^~S&Co73 z`Lml*R(*-lLDfV}uc8~7JfVm1ZDlk?yB;9F&D~1Ay}gs~5re^B=QPy_a_Kzv8JzGX z0(Y(HbbTRWj@?}p)i7Fk!v_BhG>y4|a#d}+&YgL7IBW93YB(?Q*UD+a=!%&tbIA6U zg^82k%j8sH#>dyuj&W=dhEezPjOmiPZx?Gvnxyxhd@?Vzh?Om+B>W8Ef&7(j4I8Q| zK@e6lx5?W(;rm6wy+c5-`B4BX*qj3?+>U8w@oc=NFh(s9fPk7WYYRR_w#$13okyI@+Dk0OIN%WrB-T$;lb$fv2hY_%nzG9 zvHgX(z5-M|X*xUY8I1ipjW83#)X>J8^cmQn?`ff1;OrLjd@uS!+xr%!Ipwn*oLr-* zy+|JPkr0F-J?EAl4WORoRZvw8itAI#H&qUf-^la-|97ePEM9n>1jsk4bt!}dw*2Y* z#2%$&ouJ3kfTZ!f_o7&!{w-#wFgXj|y`MOkGv@zg#2GdVhSi7MmUmMiqzR`tZO4-Q z@ci7!O--qFPYPG5EB-F8YwEw!^T32FvmgIM26wK9v7dk!^IpOt4K6VQpDLP(lcBcubq>+LE6%UA#1$L&#Mzs zo&LEV*0bjhmp|7;kY|GIuqB&dxppel|M@&KP}_iL+2D@yBCBDOt%|#g#J&y8472Ef z4n1w?{`fs!nM3w>7x;6V0|D*ITF^G-gj$z8j2KX|0wtB*MDKdkJ2bz`9P?e)?^a@{ zq>^n8GFFDLG3^K$)H4Av9j<$KAN9^;OG7&{ihVs`?u8=_ASs7$k)L_~75ogMb08}j ze8I~)ZLdXwN`r?=$iE);JP4b=@Cy>^v$Y*+^7Q$5X)ee?-5Y0u`SI`K4?STAWF3I% z_xqL_*w4ej1a@l~rX}o&GzPelnB}$o)lZvKNS(DlKC?n zcZi4FEIVrN=L;OTTg&W!pf_ZFa_G%I-l@K6eA6^H{XAq4bF+#NME;1nXs^9xC9}=7 z$OR2Ac?^fTqtF0BO!_@`P%bsmLRuW^1(LFOo9|N4?q8a*fEp|ORfsy5RPt zN$vV&EXHU>T0NQ=cR3sQ2p%2ZT^!0>@Q{i&X7j8A+IogK#do4T@Xneb^{5j%Ftr{*Wv66?OIHVpMLB>h4L@mH2MxwHb zJnrd=>6Lmi(Tf!q;`i0P9>*l%2lP`*?0(Kf{j|fqYv9%U2-ixVMWref%^(y`22{8h zvmRUQp8qWTuwbAI7ZDAouIyuUNlFH4@h~sP3WFQhRmg{v{fzB!QRQReAKh12-x5$L z&!o=2QRHl8g{5k(CT>S2McO@6S$-pQ7EVcm&BywCj}b5gHM(F|NZp40g*Dq#OO^+w z47YSVGArtpPC|OHg-ZvaR*cbrB}%@TK7j`V-}iZ97_M#(;QfqH9&mf|m2%=pm;~qbo)R69tF%n-BE81tpeb*v2E3I#6e#L=o zUI`QwabO`S;+oiz_?i@<=*x`mEapQWV|2_MV_1mlWR>EBU7lg0ct|;DZ35#d z=#J4)bqdEP-0=ceZ>schF2vuS%nyyxXS9(FEH<%$Np4U(#2%AIaAio;*xcrZFV$!9wte|vhNXupgXcf z^@qAe<5c(07g>hc5?xPz=fk1F3Pr<3@qHlG?l8Q3%CwhxIS)|i!a1XRnm{mE(_$BlH(yYY4jVu$q*5?-`mY#5TGCa>MY+Qu5FqCX zuu)cas?3p@e%JboY)8K};`jsFOFKki8TZbc#f^bGyB%TzpZGYmMl!4TACjb6x}a49 ze@h=MFtFF0>e*Njb`h$boufT{IBugT{C@8D9zL;nlN$`ps(%u44A$po$OD_2()Ib_ zvQL6bX8a8HJCOy9skeYV+--Q1C=_||IhOe-YY^`yBAQ!66bj6OrX;nXX;L_H8ygH+ zGp!}|M)6z4JT}}t4f5+=44ZCv6qoPdk99QDD7pid!TCJRT#ZQqJa`=*f}%}(%X{-C z_VMOB&T_0Vwr#i5Jt@~+UiBXb$LbyKqgtm-gqSe7?pPwH;ox1b+O<)%%PgF8IE! zx*G@VSdeO?xlGZpR&WahK!WmX{{K7F&I-IA%v(gF$73uz{g&th&!k$RIFY&I& z_ijRSs6%E;Jn8g~res-_zEOG>S2Z1uCVHQnZ|%<|yY3%{0MH7}Bnd(+vasF2gy9>z z%seZRb9mocYh%)uj9nu#uB9Z3hPx4czmId4b(2-l=oZkYU5}NUP>nMGl+K?pJG3Jo zwbvMnn_lecOx2S6@*VYmc!S6VU9U3&$Z_UV{e`2e`0XHLH%BYU5^9#gGF@&$s?pRm z;KE1Y?Qs;>I-v}NSN!tV2tsD57|DDn?9guw+gu)&l|ZL|K`^y0KNlKq2`SI_W>EyOT~o zJL*kqhV?cC+?OnGGH4t==9oEj}L?sc7CKd4)rxx%%#+it$HP zd{PE16zHTOgoV$}FE8v&knCyxY@iB$ipz1>oNdVxq|<}tl8^I8W+3P8tC)CGeulqg zyAC|O$aEK+tt@#k6-Ct9t?sT93da0yJ=Lo$#(rV4yJC}VXQg>$6gs1Q8(4ID@_o{e z5I1SdIw&tFx2nBQ;4o4lx1lv>CT;&9Ea?|?5%0Q(r-`B44Ek6`5)NC^EiFw~1 z7_&FcEfon2&vHcqtsik)2`IUszd6)KInomcwd8xrbZ`2!Dg9;Yq8meozxghpQ*`w> z>{I652IeQC{XP?QTSHcqE8Ya+6mF>LN6kf5HcPawSk|G;X6CpS8z?OFTV5m!KK!xo z%L)s=BdUYaU$kX_s;4w*O&wS3CgV&_Maq|y?RL*j28}MH7z6bc#xO5Fd$RG;Ilsue zhVfb(>*q%MJI;f`fpOF>BS|Ljh5oZ^<$4lq7XCuGN;h3u;ju94t7aDt+|xs z$N6<5y&A#!SV5GPD=;#bSjHzD#%m9-QELOqSxy|04?}R7?p$7gLtM> zOnCG{7|Dn_ihJbZ4F``?Ss{LsynwdGQzqLz)7iB~D@GMMtXOzmFfhg_(iyw@AG$X2 zHEc1aXac`IeRhHppsTf#;rRB)^r?lFq#?qX6J;6dU(P>>`%iuJU5wq}G_O^I(2B`D z=VzVmw@87ii;CRfa?>msC^TMB13*ipWJ_{mw|FuLGzM;m?@Jo|u7APNLu$=s_c}d| z*UtP|`Drjt@wCF;k3TUHi!9BP54u~USD~dj7fvi#f0{D)%x}f?4#w`E(eJxqA~ZW` zUmpv?glo5Ir~@uR!D-;8xA*BTS6uJ5f^FM2WM6=m6)?^+TbFiKNRRZ$XFX6(>AL&*L@SE|BYD|Y6rA^@ zkx4~QFW4{!#`@O6UMdF|stw+b;qhD?j20!m%-RPu9Pz^~`9kJ`@Z|IwwRf@qvyvHX zK_xR@V)t4Gziq=ehP=rxeUYBoEC2RoW@6m-aFPaPlX3H=C*1@sX-p<+!a<#HaJ!mH ztuMD)TGsb=v>hhB$2*gW&#DJhniX$o`})b%K~~?5{5w1{b0!wZG2ac^lapN~^GtEW zy!ZMB(s&$59?=5vj5BI>l2TXCRJY0ykE=(UeFrqA^u&wjT3|{yU&7D8Nq0&J(%J)q zu|Y{z)TBm-D>xMAqbFC~s(fOxEd|uZ6fobnZtieYUC%Yj@S87nbFt_W(aYbeR;o-a zK`@15QJh1YUZ${tGC=DPV8a`TgFp2x7FaKTS=<4MJHn#6V@S?6Ok@bNKAnaRG)BT9 zHM&P|EAGC}OYd&hp<=B12?LHxgD+9$>Zx#lIn#v?LET#2FhRj+I8puE{|z)U`oM!taTWF{vN@jN?L2pve)$W2SJKWmeX8b;sAPSuyd=rE^;@c6 zIHpN7_mEe2#W)KVG;by$AAw!`cjjDA66R$LjrgtX6-J8vlwzISm3jwY zX+sTEf(gyBXCOCEk2|#~o=6kU*DkIfnUu~8AwwfbQWHc<4YKp=w9b}hLaA4QWRuu$ zn5t6r&&7B~ig+MPL+-}F?Ylm`T5LPt(?F^7G?MU;gS_=&;B+UZ>R~8 zA^FH~*PV`!RhQ;to`2#;>?U>TUNb8Owg)U5TFstmw?R#CVy$+0ZxU<}4`1dcT1L4! z#*3m#I-6FMm55BWaHw9sLr$7jD~Dl*e{ZS5SelYFNXEU^etI4r9>AIJuxZ$X<4!fl zDbVwv+Q-9*PcxJhpxN^v9}i-^VoF2vR!=JRkI-Pr9+`)iJ|OCV{xOf5Dz|#dX=%K@F zBKy1T9i4B3nIu>Gls>pSl+!a=pkwO-hWCZke+@wiIUbkdy!Aa!M9wZKy*03!nT_ox zk2O9^3Y%!`>2-f1+kFd5@b28)_K&#P3unSEc)?+kFud2V^63=z5^Y%0Rl2-`G$N`UMy}i!l_Qr zXXa^@(mTkJttt5fHLRO&kRz?%4lzrTNfcUX2-}3V(=E`!G8%sI&uL;=Z%}FYv>e8h zt+KWL@*n11AMRujW{;w*xqL_*SwM{980xLp$xhq5iA1k$4DyAN;^@k^)|lmK;VnhV zyP~UtqZuXVIjprUfd+L(SeOFL7Zor3WDkB0(!&xdqujLopSEza z9Vb3QI;Ib+Gt)1{wKS*ZT2x+}@b}hg98caE&9stAF&@1%;Npy?!+arjak34^NqNJ9 z`+Rye^p7s2N}xat-Q0s##>VP(u5076q)#N=)7=5%23d|&EHt`z?^ITw66-7rj`Lg$ z4Rj^^NU)DwZkG&$%`p&IYq<{F-`Hpr`nOS?yYhkJLm~r1tCEq0{l64l89by*^8aMB zZ}8Hti08om>hA*DxK2lD%jNU=1r1$9D8HU9Pt{G=K^z<)wzjLzTMcgv&U#S`u9*mq zC#`>cfDOG`Hg{JI&nH3k%Tbs$|*TQip-~X7jc@_<2T-cqt5}D| zzN39lTe+8)!1#U7Pb^`V9Hxl^fkMI~%Ff{V-^z%ogG5+5u0Q=tw|*Jp7daJ@0$QdO z&C}w2ze7EO6XjemU{jQhuu*t66^o#Fjk)rdd- z51r9N<_~zwoZ)B1!~P^Jc(mj#pZNK2 z_eEK%P@b6=)yJB@j0jvCW$-_^Sva9(HeY_Gs)Cv)iu5sSFsIP#fN<_iTwk6_$q-Pl z;)`9lC#p7Ol(AnZ42f=REceQ12~DuZTw>K<8#fh4iXG4h#2Ad@eQUTY|9l%BOv7CHQ-7=vt)5mB-}$SM2h(p%#su09OqWl5<^iZ`amX<*3+U6kz& z$^2ylzW#`+>AsEx3?z|2lPSeNuDuVwR%0u3#vUd+^65?^aO^04WKvMcn;FUagP z45(&okvYsrK1oKRUS^-r$2&?9qm|jaQCh@#B$!I}OWf)6uOz5~auEci@!U!n&Fzj+qO~lZp9AKgGvm&OQ$5?{gGYe{pclfE-(JE*(AQ&dAzs(;)Be0u zN>cmM3?u|pwb&$sIR1Pxl?2b3Ley!%9mRb0o@=aMvlDwwzS~*APL&lGZtX531_464 z`$)l{O_>^yNzXCPB=a&(#PYNcu;xfK3Rl-fAR~JYQ;MLYSHdJF=M{ppB78UHpH+|j zk~SfFCL9dj#S*E`DBOB$t!>oZFKSajof#b0*AY6=$VX;x=mhQ=caamU)g{9gKGm1! ztBQHrQpu?$VuwGWJLxF}icb;iaMogxEj&IRu)f6n;3CdHzX=+amKn<6Gms**fXfY3 z$!Mlt#3i7K|IrbU(@lV$pt_>4>{Bt{^X;RvvkaWr(OFPjXP5tDjdu9CAMW5Rd*%`6 z5&AR7DUhd}!E@UwE>9~;8R#|BaeI-s3WwC2Xw7(Ia%56vnlnKxy4BH+@QV@>j4QDt zN~Tclib+POp0Hhbqr$%qXZVPT#BAaUv)Lyt?xL@v^Gg*TDc{>S`<%ff&OEbMPI`eT zP7M}x+(uk|Fj2lcW%S3Nfb||=4tx1eL=fF338-6bo&yOj^5-LvcU8YhL$!|*QH7IO zyIz;Hy&1|NRt0!6F-8}6hQ2G!!{{^x?16Knrp3V$=T8&6*tr<4MEcvi14nCWpnKPu zhh;$_&8xelj=7cR78tjohxGZwdPo9Nj__cLi#--@cHjI9khc1&G2J3&Sc!Qki^MC? z;CQ(G%x~5|>gh;%TP77+0(lcns-l6Qefn*5re}H;z6oaipki~VvY+g$5N^v-IH3`O z$*^IaePpRUue#?DlQcx?!G*Qwsm@63yJ7IXCGp64#ujY89NBw77ir6!r$V4VxMq?# z3Ai$_lj{PFV~Ih#=JxA`sgDeBaxc2 z0e6MiS~0gr{Ad&_y1f0Z0$$+*h}h)7{|{I1z$6S41Zj?K+qP}nwr$(CZNFpNwr$(? z?6-Tn7kB#?Iy$PlI`hdoY=Zo3W2p)NSEj4ij%Sv$1DLkHef(xgez7t#SZ+Dq5Um(I zGeXdP23sndLz7IjCKA&``5a5;rZ7a-aD`|nCdpVav99eg9fHjlbG3K(TkL=MraX9=X@_yIF0A1hw8Z!dFR(HIG68JvZL3YI&g|8h!8sO^91aq3WhtvK zXK9y*rBW6L%!VwpOn&#On@rjNBJOvGkze2C4<4dkQ=#wp>0iYGnqUh%bsy`)6BrVY zhz3v2UIFSQ zB+^TZv(2s;zoOEbBcw0x3QvC(!#K!by0Q=}w#uF=FQ@0=GdKU)q*G&qZ1^XYRC-R5 zl5qx07-vTf)GaV!L+8jkF)S=AA*p-<&Bb8588sT|l*M5U?V!)94_DOw&ndBI^Ymg| zLLXkoe<+MoJyz7Jfco4r>KG`M-?1O-AqlCZ>s$7#AFW)_e0Uh;;EzKYg=6ROu=W|o zM(L8yLw5Q16{X3v4FDqk%fu9bLGT}SgcxQp#Li6Ay#{lit&}&+3lL!~L-p(9<^~&L@`x?m+faKWlI}Pk|28f;sVtj6|{f`~%4ahlD4P)XiIMH3_xbN`-RLh=yRyN{#`DBp#FjnT@bzymPa6oOoh4-cBAtb%Eq>~MyS3GvET zQ^TWDXYC1{iSacH6FZm*Nv^rl`zI_Nl2h67rY<7u)#m`!;+?t1v?#=T5M+LRf6&?A zT2(OC1wZsJohi%L;j-FWU<}Z0Pzj2fB?ra*d3g>8Im*`(^5{+Yu^H?2bp?IY$u&-$ z)11`2LYB@*2zHw8lV6AF`u6XHj7MQdR1EwzZUL2WO>-(8`hZUIg`D?pPl<+Re_iJW zbRfiEV5m@cDR7ynQ#^|;8w^}~Jk=@35chn6iy;QZ4)#3mnBfpuTex|+LLQK~Rl~BH z4D@OJwQ(QJdEWG7b|nm!b>dRB zU}h~n%Vp6Ob5+|yc1U~$_aE;p!R^NNWbBnANvA2IUA4sZ>TGh%42H#{K+NQy10 zNBn+}2_NVR%o%PcierF%+yZQp8xAL$qEPzb|J-^#^UeM&qJ|qzF%@UkWiIm9Gtj`Y z4JZxRa;Lps+jvYP?=(KXd@~7zfTzzL1@WeXo#KhZt7yZJJHKo#zf*Pi+o#fK;SgRS zn7sAo&gcN^_2MnfLs(vYOJfEn%{gN1HbA6Pdl3SYbX6Uq4|&$5=`WUf{%-UaUd!2$ zw~Ge7XaP=T%Zx>tpOXlcFNZ}7s-@+t*%5y=J@fPQUd4g*{Dn51ZCzhED~p2<3t5OKP&1h84mbs9F?`7a6MuY? zIGk1TsEG6w)Y8T)THbhC9yfBU^Zbnd#T2UF9X&H?MVIjqK)70UgL>X=`G@88rGc6O zLvf#hcBRdu>}pC=l|mt-3J#J%U%|b&%JF(Atm#hjiG5%#Flsl}q8!1m5pq0^b>L+G3>zl>mWcwXPsu*7HeGX!u=+Yip%KA!TnpagqIO?q``3|PdI(;} z_$abo1XmSIQQU>jT&R7$iD97Aq7FFn#uxDh;n z?@@YrG4rsaG|B(fOrePM?_&GY|MxW$eK_WYR^_%*4-fO+?JpH0z|kQf}rLa|=*z+E#p^!N#ni-D-aqL~KZI5*BJ(W|N*@ z5EJxY4&C$UX$8 zTJpDfuh&MmXD5SGW6%-@WlxB_!`w{bo}ok}4wjN^@g$@EFb_@S`m&5HF$XBEM8DIvH&v!@B~@*R-(IS@+s~U@eYZSpR9%Xd-#NU z+K(5*!H_8lwU4Y--x=<#1PA^+^x;ZkykGtZE4IEvo>xW&8Ob5}%t|J>M1;B^h{j@d zz-{swSBb~K@f5-S$T|7AqVprx@zPDsp3K=dq*e9|)m)LoZF6<}A(}+7l3Id_?%H&5UC|Wi^q4kOP*Ot-syf&57K_jsFlB9J z#U5t@-k<12&zTrlBtWG+KyTNta-`$uS~ng*EbInxkGG30zg`VTi(p=ZekRF@bHaQ z>Y3AF>c8d&v@`U}QHEJ9XRwHq+wULmh;WKW`B*seAI2yf{pJx~X?6G8?x5`Z`L@G~ zPPexmif~Z$%U-);b!(?d{UQ^Q59+PQ3LZ&KQR8h>C$Q?b?p-?(os*PmIlOF%%^>}% z*#-&8&k!2Z$@b2E%Pw?k^B^sX$+UrIb-+${Mp~Hk=j{c~<}_hb1|@0&{8oor2<@dIyN^)dq6F3e03iSHkk3!*cpCb#!?A=wG=Z9oH0dK_ zB4|vs<1l{IeNq|+t1zEd_UHYVMC>Sq8U{ztK%$P9zCZ+cen-yBoRwjFXrWFs@n}>! z>%db@9j4aTqWS|leYEhL!oo83x{0iO32MHhDhSHvUvDWS^~z!C1Cb=qht%lEd4m0s z)09FiQwkyV9{WoHNy}r}%(PI)A;wr(D#mvMLFp(IAL|?%M#yZhh=N^(8fa-qgpl`v zKAG?3ORG@)jqiPuJtl@2eAlY~6fgwpiB-_${_tC00b`0_^CL&Zjcq3Ug2f8xx%I9Q zn~)1ENYu9!rNeVPOESGgI~i8^)0|OWXCi%x;`&H^85_Lt7B(ieIFusraB`6>dwCvbkv>mM5F@Z=4MgOH| z@Ith@l&%q(?J1^wnPO+0?0xNCkLYFMuKDspvfYPBS z)7L;7t>k=%aLFpewLE<>!`jJsczX#DB~#lKAG$*BwNf?}qv-Rk(i% z!jsjfWW9So8w~{NVbGf)eF8Y=#-6edbjGo2uxMlZc3S*S{Xv;yr@F0)h+z;1-mW_) zWakR<#lwH|SAY4q^5quODZaZ6CFGA&nbiX>?)8_|9{?Hi;T7-m*L7I8t&e(%=&3^U zA`w;(SW~arDei29Q~>|zHWZxTmZTEQs=458hC;g%)dA|yHkum4!@of~drv1|K zG$~qVD3QJF5@<&=WvtXxj8R}(kJE0Wbrv#DG{O!jX{{85X!L!gg4?j1@|XP3^WT4| z?rI>ZpBS1i2TE&IaR>-=LU9s)qz7G@kL}5a9DXi=cVmri`q;J(SOzM#mLZApLsOd% ziTzgPAl`@8ckagE=WjQGq90;7-JzEAuyUrds8p@Jqtg}k(6zejJI_Zh*6Q{HMpdvmk5@PfMf-7PdGvN z5Z}ZNGLWC9*KyG12n+oTTW=Q^Cg`yRdil_u7G$2g%h(r%#DeIO(w@zB1D+qN=*LMS zUPBMQF^adFt8@4`$SF${fI!_*29W!leVNH(PNS|AX#`1pxa!^ngr8Pu8e$8|`>D*S z>0_p2lPV9qzaCn0suP34U?**^I`#q+3Z;)c3i}?ze5((mPV4V|9)f<7@&@_!=f}V) zn&Z3k8ON+$Lv3>Sd8=#OT0YUkGEs*{x@nYYHV$(QLXw0TzbO(#?U7db^L=K|O7QdQ z5|mDkJfh->XIkGf#V4;JkL#O^08g}|K>?rqDz{>CO!DRlEcvK5iWKvA^^7X4VnvGu zT`zKf6pPu{0bEvK0T=q{TX>LDDypDJU$$eCJ4;LlYM+!jwhe4sJ|d}<4&f+9#b_ds zWx-_d!NRJ6YD(t?npIR`G{f#bB~I~Hk4Q1hbaw{Wl-#bPW&KIj`6 zkxnG<3wDjcU6Y*ZH__+jWVg2rwdiLS(r0f84yMt-c>n=)$>=}+9RPMtg@V_t!B{h7 z^dMZOqleOYIZ5ie|Jl5MOUJlx{Tiw~C$)b5I4Zi6RLRb0{`kh>>;2Zu@q4?E#XXy2 zPeLCoqPJ&v9j+%}jyuzP(%d{{IpJK$8uR_pX2kZ3kyB5_|0A3Q?0we817`FDnnIp` z3#%Tv|1XANi$${5mm%&t3aXYPlKxNCtD7Zl=$|2G4BX;;wxvf?*=XU?u=#*ApjDlb z60Qp~8BF@(eV**kin);_C!6P@C6;X4%wwfk0`w^oTE>4trKd5QG`e0xvX%@O?tj5L zo?>UpBqrauq4+aH+>lbh;*Ky@m{P@{5kV0d2LnK9Fzeeb)OxaO)yMus>G$2 z^CGB@I$KMHFtoU8HpQCHG|eGjIW{r*OVb%_eX7b(^51LD>;!2>3TEl(`&*h#u=6Vv zfbb8+%Lt#%nT=NiWOU}>v#ld8gQ}(^v zuZXGKS0X8FKizI+vC0{$&8IRHPq%g3iLd|ErX?y`b9q3iqCAG+gpuyh%?K~OU-ly^OkxP-4obcN=Z$;UDzbqzSU zeTl-2UWFNwbhDl3wZ>#BF-`y3Q+XpK6{8+Olq%QpK}>^?o}<$DfBJ4ly;h$&G_mr>k4XK@`QmVV9{#xOSw45*ECf&#-Pm_^oVzZawa4~}dfFk=} zA0^eM+@aZ1B%vjHodhy6O?A<#qp?mE)Le-|;fa4%tR2U7e>y$zoCI(f$CYM@js{9@ z6E}Zbe%P@d3x=a~=~*_=ENS-(~sE)JdE79qU>kO64+kD^zlBOVQryYLSN_EJE*&cC}_fe6xB8_q;9wr z%}G!&Ia6S$`3xX^i4d~iev>Ey1CXlgZ?KxxFJ#y*-gA@qdC`(g*mHxnw?V0&#osPi z0_R&0Em;SBkO%pR&bDLyi~P6@kU7r3#J$ibR-yCaLNi@8FB|UAK1U^(aj7g`J21FnMT61t zp)L&EvZPva4lotLXeq3%OHw;~DgwLWD>_-fA3`lxj*~lgv#dnqBR6%VoG9_#3{`)GYaM)AaRnux+3E8objk*)+%Ve=T5DNagjDrKUPcA-@@6Z%y%-bw zceeXxQixF;|HB-fe;%pau;sEksm&p*Nl9tv-Y+Z_b3aiY=hnG#`~{2h22Xi32Q;01 zt<@x+N)314gAK)5-cMbt^csUO(X0+HNWTf_j8cYH12!R!^5YZy;r%LL_)NlEi3@5K6V?n-nMHdYCl@2fy6h1yL~9bv=ppI&f4hV_?busO8xzV z_Me7V_jk8L8F<N8`Q(Y~xbX*tUp%BC2~lq?h*3TVhQgGMNNsYcQF=Hq{qEoPbjEAC^q0oO zI>?G{S;G{~9cI`p*F4eASSrn;gCAp)CQxR9D)v=G7IKbJF%|z_Ms8Cjcy=H6ygU{{ zwI)s1u3Go6$yoB0MRiQ{6Vt{&CX7X%58WGBKaIBB=CM4o?n`e|#%wW<;w~B}*L_Ad zo~RwQ1IV<PGRij=1JQZEOd7n?!(>(-wyn40s-I_|8` zsaQru{>fk#aK4bO_@QkOyc_n2w-K8K&{fiO0JhZPpgwiJUO}2qv+`mgy(5#_g(S2` z2Y!nBFM)bPdg}BQY?Oda51czflM0fN^E0SZ^2G7q$nl)P$l~E6*Zboeh2iBJnTz+Z zwMaZy?L;4b76mtL&}~$h2<(GS%9~3RG(-&llKpt|ioGLXFyp-&rc?QT%4LAXGeI4b zLyQg1Iz|*&BqWU<5X@$Q@s1nsw+BfNGzAC&-96HjigcTJ0{#f*ZZH>VtTXejn0Ois>-9W?Su7L+86==GzW*_1^@Q>Wtv>vq|Ilyr37owu8h! z%tC&o+KH+~w0Vi^cjteGjBo92QlT0R0rd)f=9(k4B1DRLX7xV1dpQrv*YCmm#2|0< z5LaJ+2cg zG$0?a=n~8A1H=FI#-^WD3OMzgo=;_yVoMNwg%X5p8Rj@OFvT*VjR!k>6sh{kzwPIL zzs-!Yg#BQaLy3&oo|f{eT44NIzH!k$tk1z{<`};h0&4`>Whl)jf1}m_T2j41Dq>x| z!)E09Y$=kob;7f!&t)MQKD#16Kwn7^<&jQ|US|3P1`b$doqH~wvF0@vD1ANE$bnwi zh&>jM2q9|V* z-0!`tWw|mnuLxy$Y$_-^z^UtEXaO~RYKhBG0`)W8)cC*-l0yJswDax!Kp;67b?85q z%;i8Zp-srCUXULKKIq#Hy917>r5H$1-G5O;i9Scd7i*B>5k!>9_8P#%-TkgA4iz|4 z!D1?G{o@f~T4sN=?ra7J6VLNo1BZN8^Ma?$<+NdqTbQ4b(Kpgj0F@7iN0#yhOsH+a z50+P>ewQu*2JowK|AYXt^Lxlqce4v7;)ANL1OcuervLEOSvt~4j=qb@5evMlD++c3 zkj4IBZ5iP)#2;JiM+R<);&9aQ4(k>7{$JVOP!}{^WgRNrC{$1x<;xUZw_2x`OCp#B zl=Z;z(=#w-%e79%K=iO?;6QGtiGs~l=3&9-mT>&fStt6mTpeEw%kr2WSK8MtoMC1R zWtjERE?dri;LnzxzVTc_qEW4ZvKsHEDVsYaF;x<0$1#XLbFP=GFGry+&QCNDstoRQ zr^+AHpFQOdi!o@3UN!JP_4~xd9PEo|BOGGE(dx!dW!Sqe`=*~>?;+PRZl^^e_KeEC zJ=^N6qUvBz;uvBKY)+rI)28|Rr1@#XWa0wD4E{44+hM%O8hnko!4bIxEJc7X zr8?0a&58a+D_2d90>toHzus$74%ai@c*TCP(jc**KS~Xkns||P44*?lQ1zzzWq%g# zLQGu=+)caEL)P=QUxu`4M{NealSVHA`P4h+-Yz{8R`$Y&?q<`;H#A?cV9Pkf;cHdfpIbWC zX%cR^ma~W{P8pmV%|v}~o#t$V1FXD#ZWrxg z1hFW5hvKlrUvR4r!#1J4v&mQ6H^(R3dGuhMJ$*AMHjEv#QzC%c*Zv2WmPjCR(BNX;BeJ1}S9yRC|D>(UFgMCczlo-}rjrR(AEv+VS`Qjoo$<`7m9f zcU;K+f|{cVXWC*lVEf)THWDBLRmu!A82@kV_9oVqKE^v92nR(>jKtp{?*T0`j%WnIhQm4R0_9EIa}Tm_t^9`ZV*-%997 zRU)#T!nnRnxG)YCSXo=cD)2lCFPOfIJ?Ks#8&J?EU^PICuC-;kha-NCF<%a)23GkA zt8Y?s;=V6yT0&8Lccu#ybp<=zp!x9oR+zj|k)pnUdw*Nl@OU;IC zhA2NE3($rP-@}<+qU-=RwtQv$ECv#MCPO~TY^f;YvivLK;8k}Uf z7s3hM%-`Mrko42X#!=?Txa7ofaI+E`xOajTWQj%2EOc!s$^>*bnF zF-PIm4Z*#~kYa}7!L8Jo=wqQ7!rN<-qMdsDFasQl82|0f)(9*#Y_K|yAXD$_N0$o$ z!^T$FK6a0$dQnc3tI7ix0EfcP*4X(n69wSpX0ushU7P_r54|}jPe2N+Z0qFPJM!4- z@?JD&B~U)}FES2Ptre?eNp4V9y}I)z0pjPHC5(e6J4*Ly?BGAr4~sTdfC1YPp!N6Q z)h45mrDitt_*cC8&eJ>%!b%|`a!s(1w)6}J#`V)R82K?G;L{TO;H9CDNYc$-szhD< zw`g0R?*v4X6A#fYz3-95RY}7s)GNll@j{q&@bh6%qzfyA(I@&6Vhv-$KvK~k1{P~wJITUmjQD(r0(TZ&*1!?omL#m5fZ2(#dhEfTtV(JH z&`;(xLMCVt{#lXFdFv`5x}p+%U+o3$^Yz?6y1eRLlUEGa`TXz=S0+ROozAfc zGamYMAGCXV9&rf|SxnvlSZFBm2jc~Xk0#CG&?azo+GIwR#TDP{$!G*uyLv#~>J0c^ zQSv%`7q+}GOTCP8<-tS3s3_Qn#l<`Ns~Vz2{?7$trVsmkNNq2yLV%v=X#9`75F zRPe|86=$OQ$G^PH4j%@xtvl@c1^P6;*)q{^*6J)7Xrxmc3F(b>+-^%<2QhJ5a4lh7 z8DA(sz9BAWF$$eFGEle-S;MhTo`v7dSnwD&Qr1jA{sY|=L&&VWkB3b6p(?qMp52_s z5FhJ1>56{6N3w{M1i`KD=KJ3Z70A~@-cr~Zk|mg6cCj8Uj4?tJdWhXMTq7eLGZUM7 zDGttTcy%P}QbdGZ@G3o`OE1%e_tkxa$BYW&lIB zz;2GJ-GxR9_UiZe?PP!IGSi!KVgHe4TuvRE=;D=TAHz)#hjbDkr5rrLwX@B0Jn?>5n`ub&B^)X zdKrI7XlipE%_+pgEmT)7^Z_Qg+Cb3;7(f;5vh4T!Smwz-{72Kv3K3Mqb*Zhih}3{T zv$3x%2grow;DQ~#)`{ylY~+Jm1Xhupx$xG3i=TF-Uds%1+-^Z~QZuHJI4B75b%%TK zEk;6iMt`mokU80GR**ttWz!Rc!HmW*)Kb(3$a(T)Da+O`F*o~)gCS{M%N6c(7EntX zEWQscBT0tPQ+*R>pId+5Jml%X08)_OLEmPVC@eptcqv|(SyTWrsn(u93;eyDVhU{zQ)$?WIFrO)R4^q3j{spI^{<4e|SVEdZ4|S?C%6dX9;!J~6(< zDTt@|nbOovIPl?=F2@S!&1*-z>p?@HkbBrvvXVR++Qb_o*qt?^iNux#(WC+1q0Wmh z6*AW@L`e^a!u$Tgg~>; z?A{7o9FvCcx}gu`B@8q_;$m-i)y7f@WQ?VoR2Y8Dlx0Ez^CjZWywA%`8aMiD7uZF0 zD4OSv$b0>@P2_o7)Lp1{U>kRTw3iZmnFC`q3qhq~c%Hb*!Y8#TeIxB?LWW#P{!O?w z4{Tv$wp)@|h&YC~jNmc6S`)^P87PBH7mBACn3sW;Fc1;5eEvUN(BKp!pU$uvq`o_^6UgBj z-S+G$H8T*h?NuyyiHby2s!sx!3NDi^Vw^|)`ctB^5}Rn9lnz1k4`*3nWcekmhPDD&;z)BpNBBj;si-nIgjs@yZtO~YdKafiP~`{C#$W{9rMrkmWxbS76%>Gj z&+5j}md-#+YH6{8&{uVk@P$)hMJ5>O3!f`fMah^vP`B{nVEN+SK%SJk8RtoTediJj z*2m!@1k$RYvVx2Ic*mYGUrJ2n%~`~~2_sFR1d5MBo36;n^?vKd#i@8rwGA6XEt$+F z1QzdZZ0Zc*_Hr4n%r|NMMIL!<@Ex10(ktp<+iF`Y-B?yqXu;pMxFka^s%6AcK5?6% z`c2audDoiE)AzUwpI1yldy;uS-RyCwDHV&H3%6oVe(nl^lT3p|z9-#A>Fz|*^a_mVp4@_&qu(bm)85u(70Tc`fO(9^I1e0`7bvvehC*&Ym zsLupNgegSlJ=e>~sCUQ6pYPt)i1WO-004lXOk((MChyktLT=aH+oJ>uw`e|kVE98r zFQKkF4SKB#jNX0OvN-w;V(~Z$cbKkblF+f;YCZt9Gq1wL71#hu?()CeU_3q}H-2CB zd^o#hwF{cv$D>zZ9IdIfITYX-SEzcFpN-`YpGbs&1%Q^H>!b3FRDYuCOj%%MvBxX% z4<15VPJ24ED!1?+xgnjcDY}HM!(CA)otqe6Yz8W(HG`Zyz z07Ty|c`jeWCP{hZA56atHP~8xFf5>n{gDIMKD$Y_{QR(Z^oJ~=AZNOr$H;p{&Btv1d*uGNjJnrtoCw~YBN&M zn0iE^I|J|dFPhK>(AZopO4nQD0M5TQ_vF%a>;^L#JoDdk)5Jbs0l(d~$W|1t?7m#O z<_cn(B+EScG1rm-d;r6PE1sOX2~Wvl7xezv!VxO`&6i`@(>}|WPU#*YW7Vtm<#2Q5 zMmd4h;Zh-RH|6*JgB}Wr?X)EP547uLkH|+z;i6iLREL1<6Ul{d9X-jR~XpgOqgGC{E9ACO|Z{4qY*+44il zILt!$@NpH}R(k>ZHjWR4pz!sD&v#kU!ioVI3%B3=gZ}13E}IS$s-EO^@}nnhYOHW` zxOHEcC9%x6Lv0f)d_F0l_lnbLjDo9L>BuHiB$?tGTs5YgJ!}b0YVly5R6!Spu52Va zX~-4Cjm3M?M770iPMw2s#?YPX+UI(ckper25kR|9gQ$|j`xRc?xVlaf`wp^@J}ldLLdubnFE4>1E$O{G+8*V{XtX(RBBh61ov0;aC!^rlypN+1X~Z6 zQh<{&L|K(8&ELWzYL69Y>Mt-lmk!3l_QYnpmz{XldayebURkUCsXhmQ^c47Y<$>JZ zXNt+gT2sXkE7H>$CXH)NHwvRs?(x6$xvCr*j3$3lE(f=y0^U#D0Iy$+&D|+q9%O)yyBtgfSCB9E(Ag$@g7dHAo&e;Ur$zo+_iyiBv$Kr9 zxs#ELSsr+kYu0l}>yz7kfm(dlIhR9ll?b?^gZJm$tb9Qve|*dq<_b1;=+at$mPY zbOWdQH6;S~K4Uu`A6D6rC6(%X$3u08$t8@32(o!-1CX!i3q28a{t9pO8D|$%?$^;i z4(#C8ZXQ^QfZh)4)?6hMA_=M4jVclMuM_vxq9q7;*EE8Q!p$u&<=_Sz;|AgO0lp#L z8P%xH)!;>On6A=WDGfcJNKJs@?tCj4tsiqqBN7l(Mptoyl~il%xF*45Ou6e&97Y0@ z9)_#x^inIQ_+$9a7Ly!q>jSF$R-Tiz9Nos_?AF|Z&KwwO@uol4L-(`ckz1{w7|snWhR6^{UP zvWOCYx(s1Q8Z`3p1ReDy%|sz?*4G|v^?Yw8K+r<6>vt6`#>ntVGM?bh&U&Y+)BR7c zvfMo|({qwIsRwHM*dRFZ^;7oh{TNC%bk-Z>gL!Jo4m^~n%T^v1SZr94K zS#;Dv<)Yi?!qFtnvJ3GP(62AZGJIbEJN8jwYjtsWh#f+Tg92~q7H)rd@L%NuWCiRA zrG1m5$ra_sxz*{T1V4i($l__ZG+{v=G0i)~Y68C)I>M3(VSfhbLm_Kt07hl5-hznc z1rZ>|MtrbDz|?8|Iel$_zmLja2hHubDQsXhP9(ztBXTo3ZA)xWHMTHNjzexpt*6SI z2t;FAwQ9$$f;#arvheLoj0-aKbjz0BIb(*##)JJ%k)+<3h>s;RDs)Ta2yz@K!YbA$)| z(1dB#o7F8$(jSh&*ZMbHu8HR^IT#jpql|;AC`xr5>xe`$pr^?a zsF^*EG4(2zjp_42JeOINyCWJCd#a!L=#1Hi=Yv+&OjV6NM{ zD}cQSgvFDQt!_n^F7Mh*{|?%&IA=1GLQ?!!o`hZXHW@FE=Ncer=~qXd)PKf%MP@Y~CsPT$Wcjarb^y&cb^x>MOc$q#I9K>xWS zP$pEoGnM(T_KzN%{XIp)b)Mf&*b~AHzeR`b`!2Cy^ZXbC9N=&9ma3GS*{4`QFnkh4 zzGMaST!nX;-4k}BP28x}rG#NJ4s$kV!@)cT##^PhPaR&C&;2WgciuZQf;wRi)U9SH z#r$j+L&9_-7pYz^!m038b_9EKo5J((V%886MM%}uWrfB`h*gzri~LcVI}B6TlfRmxa0N`L%wkSkc`9SS_e6th4a?F*qL5!W zb|?K2dj#*P9ZAWkLCLYq!+f_wY9&6}NH}gVRm&dSEcAIkI|uANnTaM4B8No89(k}> zquR3U1DQ@O3NjjcoV?V>)5{Ar4r*>0anM}CM{{CFJeCi4HBF1ch$ho0IYT`EAtSTq z44E{yT@K5xRKh%xZXE2L+8|HazR5IX#e?Xy8KiBL zP#RUeGAOV81z@Q{AM}`E?KiCbC5Vof(tRW3Qsy04`GWyn*kf+>oy^0mg9-BcM&#yB zY28Bc)-K*M46!gN8wjfoizz#%l9xc(f@GUEJB4IPcY-3jVZ{@6H-<+BUiKl4$zV3s zH+u8w)|ut6L03~8N!2kB`-b62ABElL)Y8`QOrgy)livZFdj89Dr{4ZS92giT4@{u4 z&=o|?|6@ccpvnu5^Z88hE4)g2VZNzTxd54fg$-86&v_yZd_i^nPh=Mk>4);#O!}}$ z=j#I+MzYD#!N~Okm7ukCvv}n>0}t9hhebzo`kOi!!2DELCE(X+*eNA%W_mPWkO-$b z6=<56)YuXAFs+*I_N(fZ(%Cdx^&<>fET;nZLaP3w70(j8GmhUMk2x~oixO1l=QY)9 zB%{GZAmDVzYyst|~UH-*)vO0$gg6h3v*n``j7jBkvHoM5^tFc%+?7>qPEE`3xkV1dDF9 z22`Cj^)6$zLYRAftfK$Pc&|tMW}+3NStZTJ=+cxuWs>=_*Uhbln-=C9^dK*AW1Ie) z5tHd5+QG1v0N?(yCQZ)5s4`-@=!X{kskuRUyj|A=BOd8m`E?tE{0{f^4zD*A4=P`3E8{*4{B^0$VG9VW#7Sl z+q#3yJox;RQ=Y)}pyoq|;X)eemZ_+YUP3^gp!y^oGeq+xmP-NJJtsY%47Z3@Nw!ZO z)l5}FLLXYgzdwjm-I7`==^8G9uI?8cta@MiYE>*RVV9>J`z?jyawS5BWf#xD5;d{E zJO^vbfWo$}ek6?3Fb6sL7#GQLSIu)~K6M571AF@16ry3S5br5zy^aSh zKVjLtrw>N8xk<_#CEGC{R!HWAoZvacOSe0^uTrtogqsJ{lyP~|2d-cLf2_Slgvf+1 z5}cIRw_*K`Jeo|8H8SIiPD5=Me+p(u*kji_Pty+)abV`36CDQB!dZ%W`jAXHqGYVu zuMiR%Vf|`Xp4a7Tqr$L-2tc%r6NLV~{XVSpUrY6DTFY)8vO&HhD6#<0+E({lRq1C&sb4|G9vR^rgN5t z?*<}aU4BL|P{PaNGyNU|eOm*n5fB(x$UY(d4YWvu~n~~9qmM$+zIpBGd zi?`9lVRa7k4o^csS5)VM%`y}fdKTh_LL=+eZ}P%JY1M0g2oV}2{$Y65;R|%}e`(mp zobl>(qCCGr^KnTz(clNWOa4`Dv$S$jJUssQM0OX1L>+6d%HM?MCKkr$rt!JubPbUk zq9#+hr0AWq!jHuYze20-X3^w`W4XF^CMUP zXplZUF%w`rP#M3`@o63+$z1F1%O511DxfrTgp-}2%eqpezCuIeSf5E5Ej zw#XfX*(kR%c2RQ4T-`dK9Ts27t>m2}xYM+eYT0AvCpWosaFDTa+JOvayw7TT!PutQ zQriA0cASgyc~JJWEP%1u;<1MJh-#ofe+7mWlC-4a3at4iw^eoxOEUn;A{>lcAy^J? zj?pH09J%my^;H1^=*ld0JbJjR-^g|8a)^y`*Cqba;j3`E3LMwY8mO zyK;hKFDbhfwg;3ETVJ4Mv@3lHG89P*^id zNdN>7L60ra!-wvyAoI*!#=amVHp|xZ*@AtcDl5T+y4wJmj82mxxb*BN?+QNqVG&-8 zAMpOwll;3W81bV>wkXAvC4N1jZp!oC*%p5{Vfq{^%u?nRRZz3;k|m)wyk9zL1L=yG z$&Bdkei-LJ=8XOhz+nyXG&re7PKb7c=xL;ii1}LiKhMD~zDl^LRBHEMa@n?cmgq&R zTqL%dS5}~xPS~-vP7(t|RK=<=vPA+t@@)YEXhjay6Ztx*A~6I&bjgovy4pjJcu%}` zD@15fCt$t|y(=xx`Chw|D2~%JTQY)0(#F)kE94v;{|yB>l{|=q`G-{fZMu7x!YB8r zI6%@8Rhd4Gi&L>r=G5aRZ6$DWlns0Yz~i48 z?3^vTg^_&^pmk1h)0}$Ij(dh;WWCM3TP#Q>6$-*!Xzwa-%BKA!OPm#p5LpP|ay1v> zVxfW(P^R`(eJM{9vE_pvy^GjLw^9+}TIDEhisqs7rtj(#7a#sY6<1|ja}a$o!k z!oFc|in=5JlEMFA>>YbV3l?_Uwr$(CZQHiHSKGF2+qSz`+qP}neb(9gJ?F#Cy~+In zGpU(Wsw!3E8P7k{CjdtaPAvish`2-dyvlDQ<#=S=1=FVt*1@}y2zTov%bX$79;C7O z(G%nS5~Dw5E;f#gW#`fsa=iEp0{o=qeUuJyG=GF<@3ci-=eI_Rp!Pc|)jdt68nuwZ zBvVywHo+ARs`ltbszX(5a%7i`>Son< zf!)70Jv`}?<`L5!z03}SP@QyCWSlndR1-ZBxF5(YR=0G}3eU4i?V-A_{KoC&%Lp1? zW~zT>PRZXNrxl`?L-vI#zzJ2%9xq4au>!z=J)a!b>fM{yPH2ti9JA5R{qG&um{4rvdM8 z4E2s{YoeJK>H+yOxzz(-GmQY-A4~p8AzG||ifCNi6VomG=-YkRBU9Nop=Yjv`f-xA z`#JR}A7AqeeSkS`n!2DHR;@cXU#Vpq0V2s-bO@0OOGs)-8!EsGb+9vw)?AmNzo{`a zIDRhd;2u)E|14V3y3ITOpT9E*j!GnG$ki{u#dD+Aw$pm^hLbPxfgE@8QpQ+Yh8J31UnnOn}O>id0>(4V_)u_lIl^S9qfEz z=F>YhbyD;&QxvUuqG0pylX|#40y~$?ftV$b=@IrXi57tuB7E3r(8NM=JEN8w7yntg z#Wcc901-iN2~g`!p2}p^pqnWOZumJ`#uZ1Hfw!V0Y4V}1tMG;`1Q3%tFsLv#1Q^Iy z3jmR_MH5@wDp9_ef|n#l)cXHS7LCmBSI&uUdj+12ANFx}U!SYD(JM66Qfse5PeD8g zS1deiw7NdhV&YuWfRFK{UiC@wbV-B0E>L47sJ2~HCz-j}(<1N5t49mN9nZHALv`oo5j&+cDKYC_i zaI9tn6Dx*L{1F+sA%l&5e)ags;+TY2tt(dR^%z@29q0StM z6RGKxNbZq*ar;C>Kf_@;N~BPNPsb-T@X^cf3Ts#S%Hsa-m@f5_m$(u%0~iE{GNjC< zdnZ0vkqZ_3iy;bDIR*oWzpO_ViWa38+0(1ltsNE&5t!?h#OU-+yxy^iAGuVS632$> zz2a-a%KW=&9Tn58w8gcKO*i>+YFJ@*-OYmn@^UBr8Q#rPLL zwnK>13^~fJw=-XLrBFuwb~bY{U)CxvPHX_5sO%;Lsi85~GZU~Y0zvPoOPkBX&(gXO zC>8Y72o>Y{e(xrzM_{a-T5v*z;!*wLB}@1dtflO0CCAEBPh@;kwmf?64e;gU9W@U1 zmu_K%fHGm2ZNeV@T_zv7%y0*MH>pU_OFDa8Hf*c>DfcVOfzIfcm1=p4%XwPoc5 zy`JN@CMP^{Z8XY&YxW)t)Yh#d_7nT_doQZID6ohDcsL&6Rd&`-5)*zYq!-|_C3{_~ zlNU}xn^lzd9PuZ>x@G;b16IMvIR;1NUX47Pz4v07f6V-6L0$ginxp$DF+PhlEb(ER zZRR!W)1~>PC?PoYWktsub{3;UqU^GDT%5y0jn4GcDE1*H1kYZ zG&4Zi=+bPd8pny=+^lE+H8v65Bq~3qF?Ke%;_jeHLJP|bkD(oUWrrAYmNV-{X^Nsa zQ6^z7uQ-m}In2-pT;QablZ$`riI=cReAAahUuYZcbP4YLys(40zWO7$Je4+Zs;*#X z%t@l;f3gQ31fL2YPe={B(16~SR9-cDUcmKEv$r_@EHc{!-)OZr#b>J)S}q{5r-4UA z%=V45ywO79GD>L;Yo@vUH_mNmgV-3O8UUn3X#67~v?e0-Jm7x! z6>st1GI>EUkpWTqc6wjuHXbq~YcxZWR{atLTg$!m5&QAqxR)~c&Ta4+CmJ!D{s0sK zj7c)m{p>XMb1Z=?Q079Ghs0MQN2O!8lh~m_+af-Hm-D=};w7YJA%O9Rc zY|4vdG$xc{?duat_+O&+>i-m?h*)m@(a_DzEJiWNem#?ZUZv<=a#{Y2y{4W4UWL+V zk9-pb?OLirref<0VTx%INf{pk-YSD0aK6W&HLW~DCXSIq2W;3_U9~jU*`S3}ewY5C z(l);k`{~G()<^HQc=0ago;3=s53x`Xe}Tn9&C{=Sm2HPO0$qh9>BbFu214@RPve<7 z8_`M(e%Gn(fLfoi^t#A+UbzL%08y#t?TLm&0#*V5F+U#TR8z<59w!!ZidHc${Go^C z4rA{Kni_5{J$Pi&4-IP`;+y3VO@(z{JyS#qL-g8NRbvHMMH{&{{TT9p@4;s6;pA7E z$Qd6)_Zu~DYmnO(&wf(<;`yY~j8cL(HbQ`cU4_AZ$mRye4VS|71uAIg)K;zW{Q{a$ z#N^Vl6Io#SDQpOyL9n<=^nifZFtb4a4!^^H*$z%sEITu5t%dc8MFD87xl)Kve61hc zT;>FGwC%gQpY8cV+z~K#Bc2P~vy3VA!V0jvxlSGr<1NI$De=3F_xIQ$j=xYi^_+jM zIF29QrlIfv*2P0VY_HnXf{T+%z0hREC8aXkdO35m)Ph*^(BXJ3c^NHqqv~-{5r5U1 zAYGw7Q)|{Km@vB$4=xRg2P^nC@Yv4IWkBEDUTlG<1ynyLQ@1)5VpNf&!e1h>>Tli>Cj*5EY@2o zB)b)~IO^&PKRW^tXdh=HC=pHJ&ixzoPAJ(cQ_h9>5@&x|GRQa-cr{z7yy$F1k#^-~ zyB(J>E*t}G3W1|5-mC#{HX)oN9^$HAcVV~ZPB-`OD^nm?&Z-hBJ%2eU4KpjWo6bUJ zxO)R9;S%v2x)IAkJ=u(d<9v}q4{~qWw6Xk0}yhVv#ISpoWN=DWj- z{g?%vh!3uB&qVAoshI0__j5#(gIL>dwoSS3ZEf_+!n3~1pD>7$wl_(w?#DQnMD?dl zF^$;m)ROG5cY{XFYdlEPt(|x5>n~f;V=tXBxOGuOMgtgfbls@q`#G$62c&y8kOm0WSt5sXG~ zJ;!_0!%l#AB=1?RwMM8?B%0)DOfIX&*9RMh7Ym>P|A+2?8cz|hpkezt&xRmfi3?qZFIS}47HPy=%9Hwm9_$A5J=8gqpk8P zTIq-&n&-M=uZ)qGdK9hidj|lF2JF>{fJj^0ey1dd>?A*%eMk)t0k{GkYgC&*(5cBTaVS zXgjiY(u0V~T{z!q{D@gr-<5a`nE^SN{}V7iaK*e2RmE|giSUmE)m6r`c3eu~p@@_* zhyL1PrcdrKraPC#Fek!D*O{5ndxx=JYL7Ki(f>K;{9cyD4njpM0>vnJXI{6cq3Dmt zLHSN>AU>$X)GRfLVX(+Hb^S!L1=msv$=RYSM~wwsrDbQwRVpt{^+*{jLHAJfm^j_l zc`YItR-owS)i`tBO%l@z(zhbHrd}; zm1XkQh1Fpg1FEzTfBlu{A|Dcd2ePPSMW+nxea#k%vfgasIg0IZ|96=8KI-i*aMDao zTAZ7?1zeE|#?k_SmEpYNM8q>FV{!hr?MnXB={01qu5O)Efgwq!J@QiztOF1)K7Ltg zK;$N0gMj;Y!Fujbh@y+StTCpBgP&M#sLgf^wq>1mNH@GYn7!3Q`wPr?sXg*kJ0L}y z&ZUrG%5fs0(xd${X9Ds233JQm`YBLrc)q4~F&|t2jY9p$M%*Vu?s1R0JSf#hb4aKq8$R@=0sQI%ILeG3UVK|>4X#u^H59|)orLCU?jmJ6bJ8X znC!p}+>|>T*MZdIux?=Ue_fODUWon%^6Y!t8pwu$X`lN%<&07VN%^97TnRSlyLA67 z2?BEV>N<^;Wy`<{*>Ax%*&E#jB&*u48GR!m@F>NIPOzV63%$wk-vl}Jw~#%{Oz)O| zjLnlZTwuc4AR7Bh)D+605SIC)d8U{~KJEOOoR!{HY}=jw&_Tq?P3Kn~F|a;~IPdM* zkIR{b(9wl-9wdo<=Rsa&MPdT@8L4UFf%b+%uyZ3HMhq2R&}g!~gPq9FrK))yhq^;9 zg)^WiRVEX(_*<=K`JOm1v*84lyg(4aax`BHW)Q^7JQ1&NQi;lB@`0;zbNe6}I+vCL zu629AK4VSy|74QeJ8!iLb@*p2CtiZw3P(Y!i^M=xG|vFxx`5fVd3M12Xu%oyfvbFL zdfzlP5g-Co$&4@<$19IMh9GKRMmqn~_jWRvE^uE6d^%(^f9zz-hG!1?nt`lwoJ0BD zHt+yP^;#(=#Vo9NPd`iG%>h)m(M;Ydh{M+Mp;b;*2^U8wc!8mvmhd7TVd2D&N7u!l z*G#njW$%IX459Rs497kRF?PEk;wF%@TfbAw?OPo%%EudnJQ&Ru--og`KC*@Fo{m@v0 z`mMOs2RM4TXzbOZvFf*1vn{eN=Ljs(F`~P7mW~yLU3~gkwi8i%n6_A#lC|3xg2K=B zV-)Jy_IuM1t?4eWrfqmDjKqyYqz)C_$zUOQRHXge(NGh#*88?ynCQ zs?hL?9At<~7o$?n24#WH_c#ZN2vgl%La`Axi=sIq2*_JABAm-z7ENhAv6dpaW5{oC z=cS714u0GXCF`h_$*PvZtGCQpW9P>FZ`**B==J9nKTJM5!)5V@?1t$Oj7R+sBWYAt zIMXBsNxfIxL)eU}3JQCI6)b(pZS9QbGBd|&&btbGc%(E)$=pUAyKmfAHx(=edC!07 z#Dn0T#Rih?M`=nm-N%`!k_GHsGQxor2#Wp}wRNuE#OXSKVE36?Iet&-vLz#^f4y}C z^~Al0!bcjrBJ7800xCLlId~AX?J@K~^~CbI=#-ktO6t1IUWtH7Xa(HrR!}d_9@?$( zdg7h3X#iyX0Jvp5x04p3Q+D)wiQ#N?9X*Iv&$Y_CdK>5z6u>E z!HUh=2w)N;EZbej-Jl?h)!IaFMN|#oc~CL5!vCL8M*k)t)r_6$2HCjzaidywsf8%B ztvKxuHQ3eVuWBkN`;l-LBRM^`_iyC=<6a zEQ4#M%Ts?0yRA`6&l-eBzk*y3*eR501i1omlnzYE-Igr zOa)PQ=vcKpZu+h_IpG-noCqb&K_E$3(a(J@31p5ts6D)9*=sRefa_IxfTVxwZ$V;7 zY3Rg^(|NnMIvHc}1Q3O2;-Z5K+2OS#T|Jic*$^cte1JjQIyFUGJvn5O+ekh@*W)q&pD6HQa`m74T` z5E%r=%_fw&i2KcY?v_+E1%x~x-G#X# z#W|eB(VuE=G3o zQ=cAY?t}|i0IcQ)JeJ=Q`?d#|N@o|^0Q6pSlt!(=+ye4PpU-&6=qnx@kh_)NWq((? zq?a0UVT+Oi|YA)Wcqi-+)N6Y4?%EKmS1A2iYE^r64!)+*hIM|0d~C$ zmAS%ZY4{GM+-aXZ~_<5dSm<3x_G;0%SvQZO$FY6k^%G zt?X^j4-MipJKm#G{s87WuQO)7dm!Vu1!Sx!leY{7YfV*J_ch~};|!&%M?!sRx5nA6 z8iQ|?hiw>)w>i|`u#Hy*iePB5AL*NtgY2X$qLhM5bH|lhX3EcNO)$4%U`{049s<{b z7jdHGw8rao;!q!t&S{6bhtY|Re+FH*__T7+ZyX+)h6k4D-7NN~Ofj7>2}w2InA1M9 z6e*oin@DyL+&J?-W~-ZKuzeI4hjn2#0}NU+r{d31PmRm47?9>ueDnGSWQ#zbols~p zIxcWuqv!(jArGuET5^Dl8za`Sn%n1hG-rGqb}=ACcEGZO=*ZSq5EyRRgS@{X@DWMR zhIKXyH=5CkzN6m}pywmHv66|;Eg!I6yLx{D87w|l?1@O0ymf5-vXA)p z5(Q_fX5G#p1N&2mJZ4?>Z0hnrp#?_dl*z?eMi?TESzcY?!NBbhDPdEYv-ICjP2Mh< z@K?gH%`MXGknEj%Zj3WrO2n66oeVVhX#x zs1fybEc(aD(@J@={kNzVyYfK8PuU8BQAiF7?c=vri#RDpP&ad3yFPp?F`( zy_cXxKtWhLx-E#<$x+rNg}1mm>U|g;0k=DXNLUh_Dogn6fqn{#CDF7=-Y_c2m4v&# zK}i{mV1!2R=@?i7>jmVJk1y}POo;3*6;VEh6&8*x5Ju^d_f*yyjW1IcoHbvjGdk7( z8~MIFe%7&WByv}P`@Z^b?FyL~;;30sfyaH)*J0uqbc+X&c$wl-wee>B{(a0Iv zELdKf%my7Nz#2N-ZgjlFE}Tt2=-svcSir2L`cU3~m>jSMPWzq+79+G9$vMGcfy(Siwui#bRMRYS zByNBwsOcy0Z<5cGVZx@sI*P%@edLj^1VNLM)+E2IwqlZVme>r;J(X0etjk!gK;Z@U zytNnf(8IW7j9iPyjHQn(+Xa<2pd`>}%HnK!ePnRn&f@guc3wc!S7U$AxPcf>RV?B; zdL|PHxRFKmPy=cc4KFa>5iI}tdv%*={+9CFf?}+JXL#c%Ahuk8jvINj(P7|KpEa_i zMMe5L9Vc(_#^2QDP%jG#}*3?^Qph(J!c-dsaMI5rb$%xshaj0%6WW&TlHlfJ+@a=ld>@6-aE zN;rod+cGAkWNsM66QWRMiI{<4{0jgVUR4}Nf2@BIBL zRFa(*{S{Vxk_#`dZj(fmE*t^=ycyoI*m+>dWR3%p#&Zs zt5xKL@kRuiHsE#R1dvL;4uz$tz5eFYy8Jg%&gk+n?(f+0RqZYAwi?b}@;9GY;Jw4# zh6Mm`#%alvwD8m#q^W9#JV#kZJvJ(YToUUgXRbpgaW-hw{8{+5a*U@>y#Bu-hg%7} z1s#MYgoE&N!WrjakB{rl7@Dz47|fxmIyo`_WUa7~$3|nu4Cwe-<`0G~Xk>%tiLrP? z+O7W5o(k>LGJiW28jC*a1Hdb2b$eTMtysff6Gb{1TCvS-Ctt5!b4 zbtfD{LEEMOePFkiQ}O>iMMk?}l>J*6?HU71L5!O2iXX$Mz^xEqDj`J4u{k=rRzI~$ z;`uiai=2c#@__^)#=#r2HBGr_=6BrAQo~xFAybTRf0mo05-*_Rw-gL~;SbjslDegh zXod7)26X>-(zK=Y3<0XXko&i$-RWL(X6E+Ik{MdY3nn`D7m)$y3cyL46Jz{_Z`M~^ zd4o$c_>dHBAwvKgF-re6gflj*FsNpGu}m>NGeDwA;`@U$?3+Ve4JCL0)B}J)=#aMh z{?#B}z04?scBlIDlD-u(#(BOr;HVBf0kVc9cN>v-m%Bml(ubNUu23d5NF4VYNE<`t z{-`0kM>Pd=+lsE~oT>SL%#G|iTO4L`;%r<(jygc5=(|H~np5}Cz82+qu!=Pq9fYnc z39e3`VRfRN$p{IjM)dee2df7Zp7%_WPl(4-)j;zKf$rw*pjlS!)wN;s{K8%@-eBdI z)dp%xw5CT!+{jrU4f0z}r8sXQ;VQxwg~uH~9orT7Q6*HPR+=;qL|ooT70B3?wKO+- zY)5(0oby3;OKL1~uvmh%Gdi${Vm%t;G6s}N81-W{KV`f+I~%{&IjO0|f`528B{`r% z=!OUslI9eLEZbP-3$PaH)0BuNbhdB)8De-hkyA_3JCz!OBjS}Z4r|$p6W;Ku-h7ZX zSwrwm`Wo!$K>2|_tas{r9SWP%lA-0E;wni-9>^!#@OsJ4mN?=jQ%6}w{+R7Yvj4Oo zLUqEalAqsDPUnn+N`b}hRC!Lvdk$l9SynlBD1H>`9!aI zAJr_xPd%cP0chIGHMFBr(cXg`{shuzo1w^4;gQTMRa#o?Gy)tmJ8@KilTx=aUKt-^ zmfUlh#uWlIidFd;G|Bo*H0>OsOWmLG_x)vJ>b1?1PremnrIN9s-_n>U z2k!Y*4-Cq67d$<-kfRe4O#m$v>1N9T{g(MOzDJGeH3bocZ1pIeeY1+V%D4flUzdWc z0$n9xYkyJ%9pDO=Dlqz>#JIsczSOM2=O^i0H-H?&S|qJ2^Wqj)VL@$eXGRGv6hgK) zWM)II7MY;825yzo0~;?>v3fX#@r4Kx@Vt)WdQYoWSu8j_xUa)VW2>e>NEVXsVVvyi^A^xLs_IEQ5(W?UpES#a!rq9<7~-Bt zW0vrfeN;KPXLQ1Yf4%Xb@Q$U0C_&+kQB2tGkM=e7EmW&0RHmK-%+tOBY3A<0wMHf$ z7^5p_#hlf3y?XbC)$glXLP9{6hcf?aq!9_SM5M1g)kCPrmE*2hti&#*0iw(9W-zoqf@dYVF zlYJV1>B31y8YG#Q(EoU6cB5(pgRSqWce!x{b(uF&EqYFU<)m~C z4l*`PJCebS_FHW(7~2(DOFKNpjB`<*gglC|DZPynuw$eq>FVRb0v9A_nFm8`IY2ov z`!REWM0SUvNswKC$=B4|&>FPFP23jt!Ng0=JbxAk$ zM&0tpjhp5_>@=0A3Y6b>FilSrc_V6vQ$ZQU!&1r+W8kDJ=0!wcURDB;#uz|cb2Ou% zq?fmtkr(xG8}*LY(X?}?fzqrXy}R!H=4pfWFT4_k`4S6G9@FDje`NP zt5-esD0I%MzmS+dlQT^`$ECy(g92=L(mgjHKADt2a|@SVEr~!@M5dQu7tJaS3X@^A z;>^{WtQ1lNj9M#$hN@92#5TSbUSt4_2))4yu~y`D21Noa`zPeWNvy8dh`=)@t))^c zOkC5WRLzrFsaj=^_-|;#*&^CiV=y}|aga9fk73WILNrWbK3&4v@%QK-;vm^EbBg?D z0g!6a0~|vu~6@CG49js#8nhr#V9_Fh_p_0L%@tYC|voUZM&A zq{4aw+?PR}b5z*wu?i7#7oq ztU9$o##`wk4~~rhnI2RNAp8pn4&B|90*($y@D4rI@{3pj)M;9NXS&$z9`R(jWXU>$ zP1dO?pZfV*%!bq2A~y_fu|OH2g!6ap*yb&e!2qaA%n0&wE+CA~Q&LSx6lewBrO?hI zLmF-icf-wpQvk??&jntz@F5r};Umbd?{LTkz3utaJZs=}S>lAZv@urxytHkHy$p7W z$w5*wV@GHR5vM1U0cy(PE+Wz6Hl}L~IBiWekr7jfmO zIi}k2o!M>``x1jL9vY^Ypz$nVUKBTl$L6ha(Ms|YrKH_fmh+f~)?2VarRi6XGTjht zCc4_tfRKez@9Uw+ep2eO;`jIfs1+yC7^Z`WG940nL=&G#mMMC zq_N{uytz!TAsA&Pz#_0yjS(@Fe2a0AF4ePz4@IA{?d;$?vO&&O=gmcB(&v_cwQe!Zx#F!I90IL^Po^0d?EqiKq}w0x^N0Sc?G&1jR#9rMg&fbAbf*hv z-4oB@@I;Ahcj*gU}xeSI77wk%C@w_sr*xk8rjKKLO4Dr&hF7 zAMB5Q>(?$irjeLQnDZ?wTq_{VAL{FVL##`u+XDS2HrgD`#=jV7r3{CZd+WU`mULpW zjNz)!Uud$38ND4tR;LBkB5a~_$uw~puNqo=Z0s~3FqUjZfeG{W{xHc_>+U?)+6EVNk{pDC_C|Hrxc z$a7?UMhPZOGh1k&InOPEoAp1t5+y-O-)(E6td=``iih&YgGT(R@ry>M)X1WWtQ{~8 z2S(mEG%%E;lh}W`D{to^IpvUjE_chgqjPCS)-Pq3@nEVY2oGvztcIxUFfhVwk-K9O zL3hDrED_=8Je|oF)8~N$$b|mPyK($|p@M(Sav}sJvro052g85E3euYl%SZJqG>Cxg znV#ISOK{3eOPL7h%aH(TlZW^*zf+H_)}JPNywk>A^6w*nFzTQ;ve? z%%x>{qLG(G)Y(?GL#O?1uXQf`02@!r|I^=-2oNl?$A_b*>$zrHY+6(-}9juQ{ilKZ&ByOHPq)ti6gcZ%_d%`BbEYs|g zZph)xp}NEPBopHetwTD%Vl91H%ew1tkwoi`XhuzxH$TVcNN6zZk05R|z4#2}(D9uLqsk3!O}GRxDsPwZPLGmn6G#b20#odgLo zEf}Hfx)%EYsv5Ve5JGDL>8fa<&0DL@oP%J&HaQsq@n@i(GKUB}JAiK#P?;owq>cjM z#P7cIczo76f(}`ErqYDV(LH_#CDz)#u259r$%DqOwI-a=HF+JL7uQtE5_)cpU+@!I zD=J89i|BBVhbdWmB9>s0(tZZNvGFCNiT%nfxc1zl)cX7c2qKWrJA!HD%e1C1pYENc zq?Mj0eC-_gSCEqzpx0k>xMbuStC!a8D?vphiE&*|KE-+*3AP}%9m00S$OOr*zbOAS z*AhrX4Dew|a!nj@p{h(^V@x1CfJ!C|NB2OAu+s<trywZmuvb>DL1eBk7VhCT?X$#T9Y{Icx z(-dQwT%)60?K@vc3MK*H8+0BA+?*Ltg(}5(hb4N+IbRak5c>I5&PDo{+a@O-FwWv%{(TVXhg9>e)`d^9-|F{6% zW1L>PIrXH>@3hCYS3Z^y#HOx4j!lac-LR-(rd*% zX;S(SP{KclrMnMAHAe=olUZqPbX{Sw7fiylE5!HVTMlxTQ6Q$lk*?$qyTToTs)k8Z zwH95|i82bl3EoOa;a8oqwcXC(#fRWh2a)qeW{C;-{U^2ACtdeDX|t(H2?_(75qq=1 zfE}erD}TS1Y%5jrF|k{&mFmTv@eT^7!(rHV0&FQnx*)-|#*^~*^}bq{jW0MHTwXgR<{2 zBGLt-y!mskJw(mJBDQS^1&wTokWl0V$}VpNgZGfG1;ZMKwxyWdlG(Xlhtm^Zbk+Ae zUAf%Bs;s4|iY#2@;c+ZWq)!kb*bw(6A$D{@4Qjvj9(20?jnMU`&A%dCR1qm5cInUj zIx=zsmsy?2CsoTB2fdy`oYOe#YqMqzkJJa?2h`8h?Cm9~EWsC<)TJK@Do5N8#rjy67vN$Uh~i9&s%2u^zO2CB!+|+)}Te! z6}=B!WnCs0uc9Iw_B-eh(1odcF&k%g54M4hm|qM4K%0=-%^7T>S8cNkxnFjfo6}G-1Si`0+%D zToT9Duz9*buNmJs?vxr5HW53n(4GND6YW4bHqoNDpGz7ts)6VpY#EvH^uv^eN|aOJTZZN1prG|#vm{2+(TyrQ_=$QpPJA)eX7pbn(Vx^hmA9RjZ#U~yP$7O;qr5?&{QL9>p zz=XO+d9{U#IpdCjempj3n3IC=<4O{jivdTia0Q{!Kkln*#hKI(JZa8F`<<}O&fZCI z)aOl0!XhG6BvTo#W^s@kS&IdBKgfLmx3}GC=!=X;H5I71FC9Jmeu|lZez75O>F9JI zuA6le!l3bitOVKAyv{#Enm6nm-JW3dG9$I#xE%#IxFwGG8w>fy>?~qAIXHpmXgrTq zcx-on>=zfYQ;j(Owqd7d6gRIs*}8Rfyov-f|?6SEzn zge5UznC4VPuD#0rd`k^PcKfmNgl@##*F=>#^^A{?_2rn2fwv?Xq=$iwq?)08Bj)Wv zVoyIaPfkf?X{T)v^9F7tZ`!(xh@eC*D!hf0)oP8^b z^XXLV=68+Bl=yl*%c4fBKqHX+g}a&5h9C{l;TwW1jfMNv+nZ;)-he)|(Xf@X_05B2 z;;{in-8Asxc@HDxZcQTZzE^BxmVTffrDC3wMY~HGThD%!H~WfdcO8KoOo&C+640%K`}pgnK;<2<*K zoowtWtNnkAGO~taGhH~2ZdhVL^sI0@#f(M_=17_|ifWLO;SuyKU+KZhuOQZk6iH{5 zOipJ)!o{>c{Lj}VH-6~t7MQ@l%76W%PuYD#X;ID*uUN~lAONf^p0Ga!_<5~;;Y}MI zLu$IfU8y8Ev~Bsy;`wLF(gcFEvlq$r)i`L#83DEGz0Pa~*#~o!9Z4~GNG55cCica_ zp@q|q{nv+DEKu;Ju%^95Nhah~#BxTSL)I%Q1;rp|eS`aSJDrgDh$(8wSI|RPH!$)y zL=efcGg^^|Au|#6x zw6xRQ;N$7-k^kJcs%6|%8pZRqZy2?(>jq@e=DP1MEaItjqd@LLxmMALJgQp$MZfQ# z%Uh0O$LzrYbZtTaPIC7_@?}Ry3Uks&oTO;al5@s*NzY3d+$mbwrU(0A zr>JwPPCJd~!vR!35A(qZ@AURXYJ@~p1s4yBHv;?o5WK(tkr=)^iWsm_A}9>yzWXNkyLGutChcAJ-($+&P)8B^&G3VDjeDETw$d0!`k#Ho({k~8;fL+>osrLV>g+{$wXAxS`=>W)_LD2h`k8e1(Sky%!87cnX zWZ|DM@TaAssF_hWYpLMuwfqFJZUZmCN0vfy zjPIQ`akM*I^EM^Y%j@B~nO#`S4JYzI!@Vmh^ns1lZc?1VnfqtD7?WiNym%RUU!4K3 zg!IDcq`w%0u0#~5uHF&eSz*h!TPd~FujH8BuV{vli>|Ph02zXk@UhGXQ}9hJQW$n3 z=I-*=Nv(SU^M%&T)^aUo4<}tC&d}1jZtqllRp-i4t`#))HRRysH(rI3=~0fQBIC~h zAj$nx^UtHoG(OJNN$ICU!;-oHNm*T~`jJ_Hd#8B`xZ&d2II!WFQ7gIPMGCXix_@Me zlfUtM;?#D?OTRAqK*Mj<`PeatSh`l+MHrV(3eDbY;6Evzf3xwgn0o*@CBhin$R*zo2(Yn+{7H;*l0caAT1blYyXv#gmgB5O-bHd= zE3t*qdD?Ss464BBI)?KT1~0ww&=rylg)1;2?CwYosUq+1sK0UJWF&2H1si0EK%%}qYjhewM6?6wrY?(l7NQEHnfMp4)t ze*Zu+(J0Otb|$7)SqU}BeO!oA&jyuv8j#+Agtbya^N{~)G6w(a{b=rYcu#fj201aZ z00+GfmW)7+!5|NsemU`PC6Gn(RVvr|+RT&(o4`PguycGZKc3iwOjjtup1}tWU#B>m zrh)sQPc$Uj@s4G{C!UA0DYXCLn+f7vIf_NUSh*{ghoAH92$0oywM<^$#(vD*5u3-< z(Fl;BIZ`=5c(c$deKJVZB@y}Lrmt>=t|&m$iux(#UvBd>Yil3z^v%w>#RXrn)>=kW;WS2Hm80C-*gY!nMIB|pK#Pa$K&NSW_n^^H_Odod_< ztNB7d$pqPD02Xm=Y8sK9D=@RCFCigw8AE8Fg6A>w$2{L%cV#%?c^C&QD(vR9Nq@+j zD6YW4^}7U1b~$xFlUxlwMNnqzu@zY7hF1#l^qwjTq&|4arQ!4dIbFwVs-FKCf3-4A zBkP#U8D-I={pbiPv$aKOy4k|p37 z3zLJjYm5R-#ntj2O3$ia3t=}>Yh8b&=9g@}nqrV)T7OL8N3KZ%BO&d2e}ggg-JnAF zfT)1^Hj&=%{^xUTgO;2IP@AU7{8uO|giZpsI)UlnavmJO>Sdz$%&@u9q)kw#X zP)htK9*=A!v1LIttA}^2_2f%|%(D+x(!-%Je*;liTf>1p`13Qcx9$kj%I$|=^H85_ zE#T$yOUn! zinLO=zq(tfUgu3>xhfy}6y=9=<+IcbP4L+ft(v}j{@7jpc`cnKN%XJ;WyiMCqn;O# zpf+aaK^^CmhG>f;w+f3_AamqsF57e|atEm8D|L`{vGe>r5wp*>M@c=gZSz25;|)os zyT2aYvlLD)6QNtz6A!o7Fvuug%MnSG1Oq=RSJypdq}%Loc)JJ&Z18%!rUc{L0zIQ4 z3QXM$1g#xK1_tQW;nP)ayTUmyG|eH36i~H|CchIE4Zj;8`P?9xEQ%#HEFl~ry4lFp z#S89*KO#y}yLX8wI5XG~`R5`-?I$i55CkzBVX^2>D>FFuYL)MqS}Vv_jJsjjuU}L3 z|Dx=jnnVk-fXlLNW*iAQ@ zqT7d}F#paOnu&MdxS4#xk}Ni^g#F@%06T)gc#N*;fv&K zmP^h-k4FOFA68kudq@>kZbWHi8A_a)Xb?w;Pj)bo^#MXqTE9~1N%L6dU(Me&FJtw@ z|8=ZB2o^<;;=1uDk#cMDZ@zECCaJ*|>tG{6e~qOi@GOD`y0KES4Sxx{@U53qUaF#0 zs~n&N>yjT1vf3QN;=EnP4SwV_u^YKya_f3yaU+ZU}1N;UaRLKpHW# z3lmd}nD~}#dpq=lwbja!;Vd^b5fI%GyaE2O%(v!$6^idKzKKjAlq12-R&Y+-Rz5o$o5kLp>e&HWS|if%)rgD z0A6oXkrh{H9sPH7|g(?(ufDKPsvg z2n_@ylIc}pd2rLJU5nyR42Co<{^1`in7HOJ8ExN0!e741C(%M1qCc6P1lRLb9%vG? z$c|_I=Hp5Bh%#`^Ua(r3gi9vwv5rX&DpVwf6rQrPt$L(vTK+3P#9XnaPkJr7C`PR9zr=G3-p-c9xC_Drj);ho^FaJz4t!!qOzHn0lQHTwbvk3-5eF0~QrutQ zD#G9(%v3^aKqE8VM4cevJ-D!zlB;u*>3vd|;VJ$8OKC{^WG95e??E!E&{_8G(O9m; z7|Z```CE1DNnxT7=c{KKC2nwro$5_aIA;z$%Ka0KW&4VpXa0=%&F+;Y!2pbBNrvt$ zz=rmD$~276Tq_+y&fVkLpd8%VCPCV^#v*RKso@bL(Uq`!es(sO9KC>0&j}!QRC#_5 zsj=zJ?8A$8y=!w;H1AHU=-I?~$0Opi4^xN}liD z9jMVJ1m&{1lygH@{WTl@%m7d5p?AH~ecguIuZbmt(+}Kj(dvzo?B3a_m`z63615?5 z8pIhvce;6lC#{q(tmMkXcYUMaZw1B-FmP@@nB$v)2J=`!!8eya+#XWoclO{zgkkhm zujbT&vp;Ql%?}*wyq3%IComPVn}ce)i|O!KmxQ&l0T~*KL^a>NoF`?|UiO~71j*up zm6&#s2=m2)(_;z?sE=xRamZ-V(QhvjXk?NEt!#m;yS5B-UE%v_p~;SLnBv?r%$AcT zbZCJ%25?*3klh7h)v&8peh)gbGlPwf!7fX?qbB@Fhr{;p!?Z%t>bsQ`G}47Np0q6& zICN=V-HN64L`^&BGzBYd2D-$D-t;A$erM8F(_oQ?w=`-p4Dw?EaivuANilA2RYziczP# zN!e^vl+r|Wy6H$5%_|zG%FY=4Nql^ z*#q5U)oUv2*v&G&S*mJ2G{`b53Y(4gbPg-LHQOAk|Bee{8Dl*?4xK@K z!S#{fz-LEVKgl@G<`BVdG)1bHjNap#x4xWD98ii2J)al9iBhpSOgk0Cxwnh&z6p^g zKnqW0)|NRk#XD{nn|8&FtEmAnj`Vl%YDO&Mqg^0t$rw?D9PfQyJ^S+eUxJ;v5`(;m zfo;jJW^Mgfv8idpbTpen?FZh(;r|eAPe0s8ua|qnb4t3|DkUh2yYxt>rR|(qI~_$g z%^rA3ao7wnv5dvWn+@IBd8Kgu$o0WNzWOlFd%QdAJMXIau$P-{_~lXV zHV*OYylcF+Xw({djhR_NAb`c?-GY_fB{y%|-H#Imk1+S^WlEcwLVw0`Swrjf$_z`S z+iIS+{0$WY*qSIM)$|!GFCmkkiBc~;qCXTFQ^~^)Kp$`&5<}hkCJ?&-a~UwC;4bFl zGv*?^>!V}8iN&1pA56owK%`5JPl{4kL4`m4`D}U97}!dMYf6L;&eP7r#}tivasl3Q87bUGfB^-3u7?dno0;$keG!?KxL9ZV;Z(SnpPj z6>w~SR9aUvp|*kII`d7^A8JlHg||wyf8>|hbh1w>lW9*<=5GOdIaw2|3c7(yR!5A8 zeGB*1YTu;r1A8|=SKk{!JE@?l!dFNp2+7xEXgV{QxsVRE(6DQm4W^ttL#+fdH!fE8*gA%dE9vd)OBU8!{|>yqAiW?Dl{Z^(uD zcg}yFF|mxOJ%0*=E&3$w4^7SIE>IRoVdh*Uxrfv`?W=T z4aWh~)m@T&N}A=F$FMX{g}tO7vAN42fF!s|E=As#aYb6jv1S{kYh$W%7n5O*ERg85 z4x-Bpc=V43+D;j6T)!{Z=q=% zj&JAX0V{mUHEVv1*prbpe?TpWq95PwXxE7%N|cRRZY4 zhrkycA+;H*vK2LytY`lDJ&6yuFK-ht1ob*%=yG`P`vW1Go!|(n9KFzr3E7W_4Eu;I zxWdv@Z?P;@sD`P<+5SM_?$~si5A3ecpZX{mXIRCV3`fwrcK|eC3%+TWv?m;K5~Zpg zEb#v2!*9uthVFE3>aY68)UB@3(PXUZKE|zS(uVe{S}5l;=}+ifc5>;Jyn9Q}RvYBK z_|_Be4beu68V}HQ(kiY4h6hRjTRHRE`@1M$0TVB^jTcJ5zK+x)Bb-WU%(U_*TY)21 z*6UPIV65qwZ8}gr7t^4TEjq7k*?xjD004*s1ECz*&BHCtNIOzCT;?S-)UuFK`KR@2 zqc*b$+iHiQ8a~{@zaOtqxSXxI!#)WoCX2 z*coE0%B>5z@+)eD&64so**MycaWuEZQseP?<-Tb^_KK{(i` z$`b0dUhGtQ$D=PrQd^08?IeNwgf!$6 zN736+du8rw9eKs}MP$VwB^uSx#aV|b7wFh}o=_W$ujfv2fE0(l{~uHhBLFrvC>(pS ztc1h0+KQ~{K{Z6pMs5pg7H;IF-*iF5-W_@Q%UnbEK$i=TM=WcR>qNpt`|}DiS!*_1 z)|_Q@%2W0SGku+@ZWD{ehshy~GeSAHYS*gERCHaI>Ebche2iogHuNhRV}%cDx}6Tt|SI%a6huqGvCYk&rmnQ}DTOFFw6=u*|ll;d&i% zF-8etKT(M?;j7VDnAoAPeH7w+v2fOv1v(A}qO)9jWmhDcq7P`4f#B=FOchhFrF=mp zPP3oo$hON;oFKC*wyO^+*h_BG5)TUaLhyOQM;vL@OLDa`K>_lpWH+squmdta0&103 ztXov%H8_eEdOa20rT8xYXLOB$0?aUm>`K&|o0h6P+pI>n5=KckKi_DB!f+qf53fu- zeS&v#YKo9`pr&->#6urR`uUfTIhW-#S;{Td(R~b+8g6LV+D!($}dL^O5;8bM&zxy2tNw+`6vQOYzs5? zXDSb*qAj4H`#cp~7Mdwd*GGizJy;vY+!uC#ncS;vjbj|)cS9R=9+~k){-~hw2rdyc zWjMn9Cn;!74s2Fh-7)Q{AEs+qF=)9WrDr&& zdG)xdbPz&Zh%XihDy8cb{jVzS+~YPFYFnCU>mf|FdmeUZLoBi~6J6v(EF+eR;L=E7 z{UqgNV&x=Pe(UOw2cYz{<{oNsV4g$I3}Jy1(|iI?(E=+uNjErE9HFSJgBZ zy?zi<)FHvNdi9ryiVBq~n5x;*;u>D?k1xV-W8nS^O&^)gp^@krJacDCC=#+f{GN-S z8$rxvl^A_afkiHWEo8u(kw)R@O51kH!b+pIj;K(VU6H6mk*xx?A0)*&fX(GlOdtHm zc%OwY3V^D82dR_Ajd}m%8N1AinLt&X`L$#~BPCOPYPL=`?+Q$VM1XR@3=10u|W~Opxa1pwGykBD<6@F(_=%|$oamMp_S5BqQ9hq zB^BHw7MRF9X(J~ZqZoxA_QJ10vb*5FN(U{E)F`tTt}B8A)VngFo8Iy+Z1ned?4zVq zmUC38GaEd;>>5wQ9Xxop4z=?uqrk*lZko}0J+GJJm8fJ=Y%wXYc&5}jaK99`(WTME zPDMuz1PD7gp)0@i1oP?M#n(!5vJ}O?9%eyw&$qDDMGQJrxaHJuhM7;j`Zptwbt~L*HZ(BFJ1k$r zGWb&+?WxZ)%EHa^N4r`@nsbwr)8iGG5bu2;w<^4Vit$ zV=3x#YtyGJ*4lif@1rApJI4%tF&C3QO(JwV+UNGLtb~>LmdCP6K!e1L!wyip?0-s_ zX0*mFMudqk%%y7}kAB`-x;f&AwO^nvk7}|^vpW3B5iG#H!&2v)&*gvd-xl=1HPj7g zd(0~sB(j0jj`lN^@tMVsd$4JrYpf2co{U*?&g-^*{ETioSF9b^sDpdI!qrn2M`5rt zo*)6#QfrIAh`oI($`L{{%@jpFq_wOI2zo_OfrX)vunPFWg6Q{W9jiu)WsL0-Lj(Q# z-N#VyDn!DBN=%CIA@UwAA2Cjt7-K+igzx@jt=zlkIst+C_pvTB}8; zexRD^SH{yvBh4RXxpt0h8(vksGEu>_$0QP}mo9Y{vxMD#P|Y9>l3F-Onlwkta}|c@ zz)Uld6P$uF+>dFsR^mN1+uPOVyl#pRN(&wjV`m7yr1qin9%{^JaJ9C5%=}x#IieVW z)>z`g9mCIsnR4LrAcozoM`Pp6HV{*m0=COQ*(JMXWRTP_>=CuHJLQv&{w%+BLW}jB zcW~1$x9epwzb%#_V_pfn@OF%0W$d`nAY2fO?oqxDlIGfkwGB+m^WEGvLR3%3Sd(*) zvwC2mC)Pexn7BgN&)c|g!EYk)J7YH=6B}bC?7wD+>tz`#Q~;>1n|A7C z?KXCQC4GVN+Uw>FJ$*0L6tL<9HX~w?$2QVFx0Ns!Rq$KKcXgF{_uO7%rZnmBDaP*B z4-rvS0C&l(n;Ynds|kp)8}i*|Y#BG&zP9Qs)OP5oW!Q#eq{8^5Y{-Iq9xbs#vMd?V@)kJ+mN-N+oKTG^jzYbsU1BLV~Ma3{o&yGC@m!!bEoz(waNggEMz!M29Xu z?d~Q7a+?lhX+;lYO~mjNm4cfiM$J19=qhF@L{h1_{G#x2^xmCnIP`^@sxp&8npP`# z)}FCKp76$u+k%rftJn|Gi4PFrG7)x&f+Eg?BceGmNU{(+GLa^~XCyR#@kV@LFZJI* zVv$@dn$s)|lT0*lY>@Lbpn_crdkqNKwe1#7!q!m%WPHEJXg=d}Po`BIrPh)6;v{B; z0XfZo_gzT@2#&h1tb2-d(l7O}^|eh|J5%O7{ru#5^Z!5U{?63t7hLP>qH+8q8;q}H z&D_E!j(Z?&4RYJUBKB!FxV~ujO_tS-)CDJS`}jNn?SV^j3mrA7{#&Yh`AruiY(}Aq zo%-8bPnbhmfW(h~WBsmOWfh+)GumD0em1t`O`=*LSih7W>Hit~Pe@Ry=6s|~-=i9f zjmV=AoR=7kp`99D@R_kk$#lTamsb?MYN?WR$9}8u+T&-fUV(=f-WZFXoEJNY49fIn z4vulb*dA53WPQvD|nPqBWJ4MsIN7-!omRzIGUMsw(x51v;Y z`F&GjB&>$k<1Phx*QI1&r=nyrXL5vA88a3O?cR7327 zpTvr8$jF!USb;{RwEC|Wi(@}gJH?+bO_B^|ZR-^8tw*SyZ;e`P20jJ>VxW4B7#Z%m zA+Cq0cHhF<@p{ffq<-i3jO^DD*Dgb^B*7@|8f2Gkl`zbkKtt7jpLX7QVKr}T7)xX# zwa^uU-PD}vT$auk9QbKN^{GRdSXUp@=qlM&RDs)t{JA?GFp;R%zIOB{BTy*kQ+^rv zJkfxjz1bqJsK)(t+?u$AvYG>8m69|Uf~PG^Xm0r{?WN0_*H}zo+q_yE*(Qo7d?q(> zx1!ctRz1>beq<*DZ8Gt@aaX(>hb!7>E<2=lQP4E8e@iWar$ioo@yl*J>F=v*uPg7a zDNs3<`#*qi?Co}_!T4APP?hlEy{ZMLV{++4o6XqC>q6R`o>Za;0!3H~2&&mt(=V}) zORt(m5%VDt@p#(-@MU>$B&9>!lUJ!|DUg){Im!Y);b+g(pWw2ehO+&{ak?Mp4luq# zs~BXUyWf9&euB(K#b5@$7;0G zx3nf-Y$110V$9+E{pw?oJ1v)tK)|<*c>9?Lw@TGQl9xBKd}qX_{)Ru2PX5} z!c=TRM^iu4l2WxU)OC1?=}Q$BPtillEQdlKaKAG_x1%|K7^C{Ds;}eW8J6yh6H`o znpohWN# zY9^a7s8AyMZ@$c&bJRFOuxqBkCt=VnCVmT`%<2BKD6(0+75Zd2{9_wuh;(3hj`Sjx z_V3qP%3X%C2Czs_6{%SSQX+bs)n7}m0}=xUH8^+uFARWQwt*l1*WkI*cOTGvFdEKCr;$zJuX`cYt#?2FRIi#eu~y( z+~Lh*oYK;juX{5qCu)`>WB6e7-V;OgRAGX$508O1UOx@3ETZr?tNdF|kK0Xe9-L^_ z?L6cji>kav-{a~*%}(*u{8!~Vc7xq$#9+E+1{~`fmBj1f7UVw#BMMBe9(IfeKas5~ zA;hHYf0Te31M~~_FneF!0X;V<4s$&M`;-@7MsJRl<(Jba!)vCg%@wnbg7PUH?~Kmn z(swObF^E0-qi4}-C|yP`ydCzM@=R9NcoJ1aY{WM_Xt)Bl!b)n<;My0L1vsHX1e-Ui zB;kc?gg!*?9LetNpvI1I;~;bfr36xfP+B=^AQBjd&1S?cfDBoPtnh$LThZ0uj>Mq} z;0|c-??3&tuPg;47#A(a;T#%OLrrOE_$ zWVyiO3?*_YERPvVOG7R_Jp3~i_Bw8cTJ(fqs&iu5lzXDeg-QLRBNLj|+RY{ZAb{JW zD5Z^1BX^6#A`dy2+vrHWI;xK``uPMu z+8otUSV8CcErQY*$*=l1^(#E~GXUPH0vhV#^#-aBuJblYreT*x8uG>@BzyWm_JmZw z4Y5Ko;YYQex0CwUtclC^o-$K}eWB;vBr^lH;td9U!3K9h?WIW(tq#vj0Hx=7?llsI zeeFiQrkQlo;ZgXpiW{)zV=jnYpPdx7p}=e>gdOa{y_aQ78lF}YPABee+AweJIom7S z9SLMz`&gVniDl-HF9GvmK{PwLnQ8Q&1ZT`g{E)_6n8RY5#gK_oGnT~#D8D#5JXj8& zgwuB8GS*KB8>ML34R+}>5ndd>DGXcEkH4%13dRR9F}hpI+z{DM8PHma`| zX@t~g@rmXK2hBE>#+Eh^e=l=5zC85v`%)1#tf={~8o1Kw1)hP!yerLX4me-xlE$4$ zL=y6~km7^3Mz6AUhmZ*~b>|Y7;T>651|ou;d-bN;!6SwrMV;P69^M5E4eYP8n3C7O z1g0G-)7=9KHUT&FH1SpZ=1d`5_v2&v7au7W00nS0`HdNO?(tmm69PSk1CgPhW?==G zEPt~3xnh0}qX3T>ty8F?yco`(;%yE|jAubwujesF#Yv<(B$eX~gvNlnHz{5IfW6d0 zu*_v|S=u7)-K=kjTD?YcR1UA*_=+7DoIg!4@|Yd$bOw2&<6nfvyy87tUPzG=gHL*GsC#1sVoW- zc2ifz88f=Aj|ydbh5hj2s}I* z$=!h&!@jmKkz;eSjPLv#<+|{$KwoqTN3%7>s89SIo*98!HSI-MJkxj=;Ys@c2dW8C z-n$9;rM=1BTEEb~ybL;%=RDRk8^Q-fw_FB>bRIBKaEy3qooCN}kzLYh!p~MzLZ=yL_Ys5|9DY zi3M~jOt@+q{Q>$2Ab>iT7P`+{w-v3)ldf7F_fAtj7!lfBgMGYK3h(i%)d*el`VdZj zv0gsuK$|yvX-KMvtn898O4Zn5g3XSI>?Xl~jZ!xEa)~~Cdj$5fP8@s164Y73^!d^5 z15@ zx>(YAM76gb1L8}u#y6gNwrc|phGABMJX>q+l^_364#mXzakFSlyv>gwM!K;}n#8ia6pg#?u> zd`ILiQBoU$Rv(85y88Lx@jB)MknSpI(Uf)(ynDm3rA`bOo&NPiZx7@$ z4ACow?L_IJOUY_YsHUhUS257Mfb@OC+Mk_G_eRU-*d1np;=$*~b5+fsTlptq06~F@ zJM`ZIoS1|pbhoPNo9#IBDx{Lb?xBf~^qTi(>o(=ysyF?7hrP^VunUMPZi6VYr|3gE zqj??YC|W^SSF&~#JS-~Q^UKd`y$q9rh9vf<{4{BN7F7RqI%7=Q@a(itD8pW@6T-Qs zO8}$*80c9|t1W7@^%o%r-~nhx9e{JSwA3^!pc)T~3}(xEog5)Zqwn!b&H}vdToDnl z1^KI|`9J7AdxhsBkSS`HJ-DTior)!AAbTa@&2f+g-(dT|++`~}3?8#pC7b%Zb>slQ z@3j_a3pFy=a+GJ37C6x5umh>xui~O(S*xzbKGxSd^6;=rpqpE|4x0~0sWn=q)-9-l zp%gCO9}Jc?WjM$?QUnZ0qP-JtGFey(B#O_;Z5ifcr`88@3=%u1dkNtkPfMs-a!Ap` zRgr#IS&0hl*8bS7l~8>P=47)l$iOut0#coBiFfcnyTlF0io8shyLX!A7YQq2D8>^)JTKWspk z%10?QyCCpfovGhR`lMdvK1XPLoBI)eKbiLvmGpLJRB&U3Y*Rom*_gG7e$7_S*Pd3W zq42uI5}n?1%VO*CXi+K?_?W{tp`3;b{;s(t;TOxu<+E{Luczx#vV z_sxt$K6C!oU*M4pZiNN_!Xv~s6k}L&;Rz`Z8`ayf zRK@f8C+&M17r7|EdUY7#+vhYe%i-n}DReuXC7t-+o=To_uNYrjCEim#vR!Rq<)>(8 zOgaaWU>u+@G^uLGV(-n#-xktwsXLct@(&c{Rh~cb+&jG4#HMKF1^bK}*2{9xX~EK8 z6&=?rs7KC`GU5<%B){`WWeY?67#5o=qhE-D-p?|L@0Ty*z zP#wAios>CR!yK@3L@^2W&HxJ_2fndPeUo*4mm)Yog5kP|mz8w9JA5O0XIdn2HEByN zrZ0*h%)m&>QgmYai~JrswJpaezWSV;w>%rDMkYCrZtz;B;11};m`wU#3)XkpyJY3{ z)U#_L->KBo3?Je5OhZlzdbPj4euR$3zglf*N;HpreHAR5Y^|mG6Dwk8(b40+0ZDLx zB*T4F%ZK|Mc|PkACzb`CsSn`E5l26xbXZDM6yP$|4@h4r*1Ir%&7!)AJ#41~3^vg4 zk!eCQ05Z5aMLG0iDclX@ls@2Oclht&jgNMpGUC7KrPko8B)WZ?vW|@g&Xyn!=<1gF z9*JZBK3EYMJLzPy2-o5fSqB=Tw5ENpUg;@tKX|%OIcgd-Nf@H#YGaJ;F%S3dYWv}b zI(s_+nsa^4J-f{O6@Qz0dNCraA`3LOyn#+56mO8*9km&4h?rzHQGWHTSR%DbVuHHZ ziJpFuQfWTQ&tEggDsVh;MnK`=-5w^36SJOmEi{vP+zZi&5pvv$7dIx zyGqVsLm<;gqLF_?NzJ!;5-L))7WXG+Uva?3Ax|3d0Js`Q2VAlr_0x}7aSmBNSl$qW z$=r~x|J$iTY4s)oP{7*tkmGikdS%3Xv4^IH)5{ZPk+X@^(77)xE@0^XSRto#7uGPa z^b$ZGGI1OqGw*$o!Quj+2_L8~H(sJ>mSh_Gp9~e88U!2=QTvX0rQbTr0h1liut6Pb zrk>$6ha0>-jCH2_*e9U}MI+b4$l=S#XUjsXc==LF!ml6!V1z8>);c|CVIq=gKAreO zWBk4*D`TnG&F}yuI?vRAj@s z{oT>z*AH7AR(z$L;)$1dcDmohdOsv9Kaxp%dQ+)Q$p8?SP+2~5ALM$1G}>&18r{a1 zf=5nI$f8_)2J;&)hIu{h&IZsU^TJu@AS&qr$ArxAgpYzI(atBE=kN_cWfZM5Ek9vn zRxsxTv%U(~b6E2QugQg02LJzx``dg@HS=@<{RydM?Z0N_c96TRy3{L(kf6K&@l~6hdv80pGDaPZR zz*)!(E+m@lwih7(QbxtviRQ_3k<`9kBFjEf1Jh;zKv$Z-9XpttGd@Q8ICLtlpBv5= zgthH}xt>@%>gDpk*@Nn}n9ErQvfEfawaBX|$v*ynTs^N z?LjU7g!Paldh{Ymg;QRNrim9vUS%c_Lbkb>0fHyqf6IfIUOauvDj@kV13t1X67?VW zu3;`9#VYV6l=`6CpLd(|688d#7Btb)Waf8U&r>l60u`JYTNCa`lqR78K+zmXChbttrr&hthK3d)`5Ld8s&S~O9hYUz_8l^Ogf%UOg_kE|3^ z)+QO=LB=J8-=zYe)r)9?K%xkD3=HNqicfsXGsht=rM0OlT+Lk*7>3ui!W~IN0K4{_ zJ#2JxCQ7GM{?vo_HhMj6u@(ocgwylo^)VD$TNmInulexkXYu^4i;yv=dj z!Jbs8kJ+C%qN4jLn`ev51(T-)JA`g=h`e9Mkd_sFwGi{5P}GrdldRx|munOL7CHU8 zGjBB;E$!-uN}IilbG~!@w2gL{)>F_D#BxmNmJ`ws&qqk+|0FoH=Su9af5%eQNHkqd z`gype?odYRQm}_fwm59wA5NLCna<@YWjBLDr&Ctzn5LO^96lJ~KMEwwHi_8seeSu>%^GVFyaEg|G>a zZMpLp=IkE*FPdh^mQyEUdYd}Un3Ym;K2z+l2xai4_35gLs0Pd%e#^spd?WxxH?l-s zdXOEf;JP+47;|ovj#WfU&7u?@#b*}{v>!MnQzvzBpZ>st`5GpLtYH?2dUV)fV%l>ub7cN6#<&mS;(cqn7^=QMQKWg{q49u$Ed~5 zMXm}&JO;t_;bQMn{6Q%P46A!3fy)=(+*CSv^=N9ZQOu$9v%$FM9#dfYrda7hrY++C zNg(t6^!VNLHVW}DEfjwLr&4X!pEoxX*^ikL*9xnQSJJ(4T$5k5`RKqdfixSkJ${A} zx~41>w%t{Q1JWf~du=he-SP%bjnj49BK?`XWY`Kmc;nP61Pk;zkfXPmR=@b=TuX0_ zRtu<0e9+$MUYTKR9{f+-b`bV6x=!0ab)Yb%L7Rhh7VzDReFsvptj;pqBlzxk+IkkL zIUN+DkA1ba(OrxImzamLv)4ow_ad|vDNAfKYT$|QBdba{H-)z4;MYm4%hYDz7#^VY zNq_d|F0=L7LB>d_v2iwyT@lA8O{QlOJaIo7XUCUgdsF|m#wu1mYkkNZbdQ9j!*&`l z;%LR+dopwzEk45AZ2XL9k=a#7WYvOx0qqYyr$%Y$fs(Vkds^Yf*_a+G=%0VLZ%GtA zb(@lg@znNTz+HWY6_#bJwWLq*O@W(oF{x5;;Bx}?i;u%=*5eM*9BXybp$#elZW}V>_QQ+b#AP5oc z>^(1MNp8&^)Pzy>UsgaqHPJd4{DMe#+8Qg&)AKWOFY@KNCq#2QU^JT22P@Im9#yX$ zmCxl{^Yr9Z-n^i_kXp>C(_8hfW@3hcp@YMbKNnrD+FB=G@%8S_NFi0c2t=uS!g)~x zc9&=h!!_vkZdGiQO#u@Evd~+cc(stzt%M=-%#N-rO>t)G^ah&;OJWIdl;CO3-QU|a z{`&sc(4EAf#Txcp7YU@!oC8|h(bR3wCKo;H2 zC#r`+XWcE(3&1t+w(^6|c)Uh7xse*5w*o9NHC&;XdIv_J^In}fIfb&W>+oivjrsAz z^A-Ri2LjOG7DXUx;@%Agc8LG*zA}_(cm&-*bFSus%8;gZ=aC{-R!0TeEo9SlA-8}O zn#`wTchvW1Pjx|X-x^-q_(6)LM$vO=1$WSzu(-0`2Kdc)yqM8IVPT}b zf?;0ckAtK({9C&98Sw&naM2%b<1xx=gzD^NyhwVU-Fs0+w(lH|&7|FIQNxDA2_X?` zj!-CrRVw?VgnZY#oMkds*^>y;L(o`#t_J!gFuz;^o4^coOM{JN82OdvasCYJLR@6> ziQArKPuq>UDM1nPa6RjV?!Zt`VW^XV+z#Kwn)|2mB?_qlq@!c_0K~WJ+)*4CDT~_^ z^`Ab_Ww%H!kEaymoPG2hZS2x62~vu7%2V4Pan&(MR(J*RC;ez_N0A%E`+`{RfacO* zhp{^=^^$K*D%GB>c0WyAjPei z$6BPurtCH4#8Can{peW}$;aVnZ4Vu4{P@;zW!Y(PK+V_bic9c+6e0}2hU5{@KqUhVzAzC78r1+e`dnhXY zUhPfGU)?U0+U18^HrxJhydgZgQ$-jZg*%D8$M$3S%?bMSAZ_vuVhzsQ*wW)ePI|2jV!nw)?a@L!D?gJVlV&Jm^qSJwQhp@YR<)G$NVCNur89Ffm7t%FD9rio zXSm;qvpy^pNtCLh-+ebf#*4 zm@-Mt+~IkK#-yh6I$?bSxUn`0^Ih7G`osK*aRY6^a&vd>W|?sXB+(H z1VN*R(|)V3=&&-0o&aZ=Hyl2k?`k$8qcEg=v&T82{~F~POVi>DRHPk0)U{kG^s34M zF~F0pxeiL4;S0LZvI!FFv%5sKgEKzA1BCnkS?NV{u zLX?|0PnV>L)ny`~`w$H&G2o`;bOgcQ2lR%cea}ntifA_@( z#7(Lsz}ys3m%F!h_N{K><*N)Nzny&09P^ocM2N3l=zc%#_}eS~3KTnUDB(A{kQ)bK zaQ&iXgM%L&r<`{6Af7yB1wTgZqA^v^2g=x_Kb%>?nJceVzkJzQuXYZt%x6hx-;FYa zY<>0sS57>dBEDcXf2(BweSb2y8XEzn$z-{D-u2pI-!Fd(@bo^;A+E8dJ%|U(>IkW0 z)Q=YP5>BH#9iBGL<7n(2y`H)~#+rSKgfp@vQ66tY!<=P(wzSRkUp_d-2~snSKp z7e}q|xZrkpPxCl8?6re+G1In!h(nQUl=xcpCWG8>csU0nEVaxXe%Yyc5Us=WmAvEx zYyqsoS*>FEyeA!`j?Jx{`9{tC!mV%_^lJ)*0Ah{`Xm6(eqT0}=f_##h=z5g%1+<@U zN|f(^;JAYBb0FB0Sj_itkNxSU!f^NW;uNW>Ybyq1k8jn$7eZ?r}XLx#G1@rjB_;;zJ++Cqm zk)~Rz_&2=hw56`%2sCwn7r@qCE5YDk2j%{Da5DyedCKVc7}^Eg?$^N-9+47pE8GPF z|Lc`cMKO*9p0Iw4^o>_>Q*h`2Q!wji9-(YE^Lhd_VR_3%Rw?_8GglJ8D4&Lv;%M(v zg13%G%^xSjvCi3I5}=z*=*gEf54Jz4f`+wR{y<-z&pQ7FnLh((!;zo$ka5%e?(%KR;_?M# zqvtOd_Zb9sL#=ndfMR;d)Ru(jGS-HsKn=TI+?AIMiLqoi)+Yl7+#9ec=%C|$N75OR z1Yo_G73u8+fFqs$c8}{Sz+>rSR)h3iag1zXY?|j2Z0Q=!Gk99!yAQZorwGyk0hRNA zZ+D;ZJ?Jgi75j}sjZCD{BFL>2ESoY!B%#^Go?cWkBtv^j+M?MSO;}$RJo(a2-rPFuScV z-OxXcjnHitckT|y3JvBSbr!JRo`V3Fwt**$%!2_x)5+A?P5FNC6_31bBW>rfSa{&( zHy0Dv(Y9m;((PMPxO&u8Q9fJJ8UZv~q&BJ|kTbW-N+t&BHSOe=1>Y#@z$4(BPRapQ z7Ai9)501%skf9sf@TXahOzoOEjd_++q{=iopk+O|-(W|r&nFyvx(y8`PCd;*YP;6U`Bhe8Lm`f?EV*=z1X*bZ4^F^RHe${|hYf zt?eT-;T+J!=_-rNVM4N^TDIMUx_<%KZ%)3AXDq>Sys6lLN*=3H7_I=^NuIJ`#c@^h zd&(-R=JHC?XyC0qmY=}8obw2CwA_3bkh`BC0MM}UQRo+j7mY1sTnY{2aM)z&#=hN)?$MQu75(BREpDV{!pJTb?AOhp zjAl+s6~v#rtY%*NQCo?}lBh!-=S0~JC|##8m$FxJQr&1gRYb%>-%wj}sZ10t-R+E1 zVwcN-op!BLlILUS%&BJKNa3mk12WO{fO?e?hBqq4%SJY~`ckEMB<;6ZGKnKrm5m;{ zffI9=32tVf5OAq0Cp5!@+{E&+@-j+{a8*^P>-+&_`Q}h(LtDm%B34Ety!2VV1s6>d zlPB@%dUnN^_R9==AO+iwmEa(%iTut!;|N@(BO-+l!aSX;#{ey1dFq-4d~p6$a&;dY zvF~)2_TlRR@bdc@6&e}UgTV%7$gy}rnYrUGGtoyzbJ?SF{>>-U<-m4q5M&;Tdy+0z z8D)A4TsNRe5?m$(6jD~)lz#!VExms}Bd8X>nz`?mVFm9g3YMZO`X>836_DG~^?;bx z1BQ61JEUl)Y^0fRrCd%%{3@zUS>{TI9D~6_0~u`UZ|K1aqxTP>((9KefVHi--8@^W z7>V@Qi$w|N!FW&tM<43swts+%LB%Y}$GGdml$FouyR~|Vwuj(Tx|-D%oN&cOV9pdO zfjBxW9dGJ{2NEhF%TXM;yq5C_kfXv|<=`=t(+!P6*F&A-sB3cW+~l}_Kk-zr$fmnS zN_v|yVDP*W!KQ{2pup*qx7iY%Y5>9gnV_=t7#V<7XVnjx_l^F?sI+xW+W8(e|77dN zVh9g7;j^(pQ>==E_QX7Wm;nW@FIvL&RF?1sQf(i^1IeGMs}H>@1w!`L$SWdveFCTWViRuQ`LwxNkBNw}Zn}T2 zgxWkU7ev!JmUBMZs{oy-GMBJsah7*3<5XpQd=FmxZy1bY9lY;nn#!`|5l{-BLm$?C z1LtidCVKzo+o7el$u#3%-m&t?zqBGq;F%tq>u*vG&t1J(46a3k^dMs2jg0;n1WPGH zL@@oqwkN~x)Zi0381brb;);7m4tGiXrV#c>Jv3K8MTx@MNVEK6jn;7OU;k*Q=<#O0 zwb2%sXn$;2>Vm>@u7#8;ac$nG{O{c6;OJX@5`6A{{ zKqiv8=aN}oq@obyflOGW9JrGH*dp%;|5y7KD>6NVeuoSSN`9cNJm7HwnOwr$(CZQHhOn>)5`+s;n1W7~N-=c`wB>fZP2 z-u1U@{aDpqt7rEdb4)aQ2}H>hn6y|PlD09W>V|fp3w1dDfqo;!(1dSKNgkuRc93)d z95~5Sq%IM}3c%A&W0=ep$P;0eFEL9JjBfskfi{%&o!V@5hQmF7Y;Fb%)43 zk+W~gqgU;(kT#3+ofUDe1rAg0?v)XZJx%t3GE?>W6y%KoAm?{DHu3& z>H_{YwCX+oeo}i>G_$l%v^io!r^9DGc?wSdgP$j~tjOlR5xTnOBX8O~KIB<>j^zWL>-UPwiR;x~@FQgJo zg-=uwig%JxfK(XP|F(n65`sw4s3x4eGP^2zZqe{BXggjrV^n|~DZ+LtU6$zO$M%Ak z`nP?M0p3g}kL4O&P@2Ww`^O$aJrBppqZpr9tbZJ<54%5YLyz+w^Gu>y@c_3yqwx_f-0yvRQWQi_Ft5)S3B!Ga` zSR;x!EVu{D@&6Pzc7V-+dC>4TFLUr(LK$G9QAzKL@;Rq$$-Rj2+EaQC2^y{I#41I| zYuTWBQ%9KAKs|qBIJx6%9jI?AI4f=c2R_IBn zL(>s?VX*5L;2RpEa^WF9O{XWm_ecPN5Um?E5sM)D=)IZ4m}_B#@R?9z%vZsf0YfQ% zOGPTmcM#?m!0}cN(G(!DZ0*2Tzy#0n-{Nc}!zrQv5&80?#pb#l~D6r~Tr@_QGYTsqPm7DAw53s%N#HJ2_sD zpz$2lI%$4pWZ7z@w|@|G*NlwlICoG(NpcAD&0hqlEE9f3l=dU;P9zyF2I}P5FAP=8 zrfd>`lD!O&j4PtVu_b19piDcT@Z5sjPx_rKi!ZK25$jKz;enISu6^JN+1gQ4cacsD(&*L)SitzEt2uO_@Fyj}9o-RBnI2p;jWMGd~)#qLN3)XtQ~lhToEQk;()$8G9XlD&Fk+le_W8^ow6%C=IXE?SO=|~ z&0jj4RKqs!uO^`_@~6keLQTDkW}=2T9YZUT{#i4He7S8du28fKeIx9YJaz8l%W7D0 z-^FlObfzRBl57VdB2QPZTD}3=PVFnVv(sPyvp1WKt4zgjRVmz;vwU{+uj-7=3wSi3 zItT`7fEhoOD-#~eR2byoL*?aR8M<_UzZeM{meCG0l>y7L!`hIcS}$|we&Y7-ZO2^w z9}ft1-(`8mzgR-S_QZdw1OGeLUxy?X;KR}WO`u{mK-G1SngphM@762;N{60IUx(mU z?M3}H(1q~2(wK#0 z;x$3>(+QOe)tzin=2myGC-23DE8}xwm@GX6u&FLcT{VBC7q^@Ht>7|Mr4Ue4=F)XC$6!Z~)b5WI3hcUTnXj7gbWaumOO{a-ND4cj>? zti#()g$9WtAXi0cakYNR;SRUI4azXPi+%K|+(K_L8q#tVOu~(w>ojnjHIIr@nG-Of z;TntY*u8A!|I1jMyjJ#?Ftf8C5h-7(bAU#e^X~;otX0FO07drOuVv_&FGxXym>LL& zgJZ%xfT^4>)i^q7rdl-QGU$U$nrMeUo8w$k;yR=IdSe2z3h;cHYQ4g_mLAN`z%W`5 zyUA7$bFe|{qIx}liSa62BCmD7_Us7lpQw2^G0m5&u~EZ^?JA>+0E5>hxX`NB8N70~ zA;}SkPxo*&w)#QLqm12w!TOE9dwxYzO#PGAyQsA?SMnl-a66?XEo27$uU+bO4+sAX z?SndxiG$1+g)j$K%oSLd%A^E9klVlIti!JT>l+#>&s09aSyLlpK0*4*b1&LKLq}JL z6y$S{9*RrYzkZ#_Elhm1LOWwa#xCg$S?-^2ZPsw7OY7A2-gr)08}(H&aPxg6W%_DHH zoZ%5i**NV?Pn`<~PJ@RPYtzqJ{xu&yshX;n{z$9`+RbAsY6+6#e4GsOolIsTD#?*f z_S@Pwtwk7ujtxO>T{(nwNSTXOzYzN=vacB&_wwcIZ#%EK2V2&153Ehez?X{S$U^7% z^%f;H@6KNUL*?JzPtQlHe`;kd2fv|C!pOb_2Y+WqEA<&S|$`AdDZiv z*G==xPaxVt+M6H$7`3)%+VkRVLsiPmzT!bOwF8`%5>4~3JY^aT@q3(Cl+24qd{<|h zrN?@Cg|9PgoPf;Z?h^tV(%;Oj_4IYCAhCfZ00JPf7*B_YnE{!M`)9$DH@27^t3?wk z=?77J!i3CU?qKJQ(X+dxYXn;LgECrUyR<%z;^d5}nBablD_K`x;I1y@>?6PNjRRge zPO4o3@L`;lOid3+tIqWjs#b~~WYlA$LdYYro^avXpLCD<-Nfq)>h6<8&ktk-2MdXs z>K-N2KL9ESv>;t`BN6B3Oy>>FI3)~bu{50=*#6Q02~zQhRX%_3f2gO{X&@RaXgeOK z=arkkcVjK_FWG_Ev1oL%IIXEhLQBEuPKZ6@7k&2#XLhQ2NJ`#Cc!sKUG;M4^)x}1b z=K99e(h{AOcg9UR5k8>53k?6=culDMqX^6!gPL|99l zH3l;-m4$CV#DOQ!MKpz6G~X)3u6V*`G(ec2`$p<^A~Fv^9d z6D+=syt4|w<1D)BXI)e$s4mgBsiF3vZZ>O2TdVHv?31#01P1PLeYGQZQ{u6yMN}Ya zJ-s$)G9B@SGY{}{NXN_JIm-NYUsa}%&78#X zcx%443xT`h;A~djnrXw21V?J^4 z?0qHYGEoxCYoT>1{P3jM>3{0!O#%oJIpD+5)Ad?0Eio;w#LeK= z6~FDn*CZ^6Sln|tLb$RNwvg%wv^N(dxR@C5EZB=s&BfyLEdd@#)8Cdd;4p2EyxK@1OF3vb6BDlTtZD<9Lbr4|PCtMc^;NvYj)Ra}no z{jo{iViMYt1K&i$H$j6TJ$3pp5Wh(?-WS?CG@;F36b2$(Q;j45CTYR^k- zC?j#SOra~=_aoII>~ykywFN9v%nNyAE<)i!*f*uwU{La5A;qYoSuCzA1R9!rC+3)5 zdQsOVnvM(B4!-~e4~ZK0@cR2!JF`46~Ae{vt7u6$!UIvpcASZkHj8W^v0q#`r zEA_dnGu?AU17bXvcVUYAOOW=8&B-DWdS64)r6^>o`gQ%?G{`Qc(hHD-(ukJ0&BC9z zLtvitwLL`7dGFM1h012JIl~9p43w)wYKAcrh&>qR)!ALEe^JJJP#S~fPN9*npWWHB zarU)UX)a~aui34BYaE{ZPxlS;6#A%`qAA1|KFjf!A~!bB?#f3GJCWsTSFmcPul$R? z{RM#$c7iaH4DB4?>sgP`!4F?}Fz6~${o4#!C4>Du=4 zrC`jlTF+gaK+%wudnT*NrYr%B^tZcsrjAi^iqk}R?WM52(GB>9g6g)tu zhI;40SB+Si9U4x_nJl)sU;#bHD?j;C8@p8l1>(C?N?FK1cj>dl{N&A4R~4J{z# zXj;cxe_wylEWG*Ci`QTQE>zx}J_kjU1%Q`&$k>_+(y3$Gr)>4YBF5`2uLDy=;Yz6J zragnZrR&-FZJu+^|9#}J6XA$=fV+k5{2SyPMN9zJzEb$2d*@DDwvEW)UuM|nW&k2# z*5mCSH0TO?PDr+5gSCMau+Tq7Syoy(3cv3`nx~ew%tZ$dEjjSm72o*!ySDA|jxV%y zf*UBt`mtKRAc|WID^=zK6bk#U`q6w)stElq|9J>+(ORyWTwslhD;S+oj7}+6{Vc@S z{TJq$fy`*)pnsG>Fi|8ry{5xrL8Yb*tQHqXokbL~3gN>uVk|tB= zgT2@i*>;cH0W@=oA5Z<(?KmlUz4>hyqMpnCHkLX4xf?ow_vVxeXGBun9}(8mbX1`it#W0Cv(%3^AsGOs{yK8xW^f%P01%I0&ilp<(^mzzi{1F~T$5xe`{wIuE8C+I> zc`IZz8^fyY&d#iRedcRme&l?d&oI7M6Q44G3R2gMox%E1r$*~}9K_cgpD4p}lg0G$ z>9{V0RQo4LCysY+%A>uym>y|aAIveh)@`hNQ`}pImwPtOuh$|k`(hX4ZTmKKWIkPn zN#Z7XfY(`(m;nCLYKwX3a<@K_#Ltah$67lPg zBz)!2T2t?AxlNh`)!2NJ=4|#chX?G-n4KO-Y`Gmu1d%K!i*;ZI!JN!}3Hk(o9ru}f8i4JYPt#q?9j8X7TDh_V8S-u~^}V)sWQ?4~qp`M=3s2&E0{EQrot7aGOe zj7!7>5VwhUIP~NTsTPM2l&iL(ON6V~mG`PfKB`B1c=<+A1`&OjL&1mx25xM9T7W&P ziy-P6RJVuJPwOg1Mi`8v6(?UK5Or^3T?vGCMN((OX#$T0z=s1ii~Ek&YzTi_JF*+*A}kbX7nOJqSYS#b#2qp34y6`Wmg&W1Pd0zx z-9w}ZLm}w)@+A!?S;jO>##}{uNP)?RO0zUC@-Ea<(oo`7zJyEBwfA4SHNf~l_kax; zuMAS>^90#Jr~R)XPKV3*n5XYB@Ft@`bMOKc@Xr6wTyCY@g5|(27aqgK=)C2T`5R=Nq{X?Dm%y$%DE9?=r3k(}uVcX;bmg;FaL#`?hTmT#j zJ6B7`<8=7<_$jR=jy!-xgnCSx!_N7Ppl~8EL9e~J^Qi@h*b>oI%8Tl$2yPOEIFa!H zU+t%xKx}aJgAwaoUE1prf&bdqOQZohq((+<`$QEt8Q;rd;j{nRd%XD$&>RoJav>se zb+V8qhRvKb2L~Id^%+1<(P55KuAqj(=CMq^kk)moGQ9wQqP!(2OH9x>I+4vflH+G- zN)_AZv89p?^!bGt3EZCb{M$e;I!O+mT;1`^>b-=%;MS^&OI7Ur7cyWeLp+?{LqyuY zoBPwi0U0E^Oy(85LRPsy;+>v91v~EbML7Q}iMu|_e4S|~P8PW#&YphXozdM&Zd?1N zrKf;aG-F_ym%i}F7nT7CptYOQf<2iu@GBt5tn-{rYY7fJ;O8}!zilkZ?6+e(dLbF%TI({Yf-TitB$jnfTDmP(#_pCPq zUnZJGy~WJUeJVKM+kR0;4_TrUPx-ypJnt}hsUl^i*RiUtJT8wZSuj7Nj)ZxFjux%oiy(O4q^mwac`9)8M;B%{+_`4dk_OA7~331YI|=o+{nh z>x zES6|8-A7&sY*DCgEu8ntBYv|E?UA1)A0f60pLWtlWe;k%qLb_W}5;0K&ada17{Zm!%$BZPzs;wu0v<+u1~(v>Yn^rNn+UUN>_ z#;M1eY_BpO02J;gvmYSIov&3R8Ym>K!G2@}K?~u_hNimBXa+T~YPzwnZ)B?#lo5Nk zH&@(GycQmicVWQBqo$>WX((y?cw;n((>%+?%t&E$273Yc&+oea^r3)T-UF#1l$FIK z-dIEs1Ft(5PjK0)HQc(zXP-;X0UYj3$~9fK9x4l{9lPIC!380`4U%?>l@oNfQ>=3? z{Sj<{ZGs%_g&(mXm3ww(`9CF`zgI-2rl}ngP4;<*e(k{+xtEi2S(Ijkh=Zm~ky^pb zET&$}#<8hOp_rra>Lzy##-vj36`e8e zj2Kx)CVNl(V6r{-rb-Kpg3P=t0tKEavAj+gP3DZ@Dzpv9HJe8ji-op)y#-ab&uGu2 zR`Z&SHhmkp*im5UkO<^2WfvRvwyD>AeFw8LNTu5?=RpCqem|2|G_m{fm7?frosS;^kfN)+oFY*#EKH(5`#KKk)fI077Hc-o714-SnP|B-^`%Fu-9 zJXKhx;FhaMu3zZ7GIpw-jE@@LydWOWJzIM*QXZ-MCFZD+YJKNZeg|nkDW4zdYt+_% zD*>)w$48DYJu<#P6WN^7*#(!J2D4lcznfI}a5@57WiCv7cKAUqWS06^|d z6#5RHJlaNQX?ayPY>al*Va?pBy7)|LayNMDY^c}8{ZCZX@?EU(UK-Z*A_pTFBP&{u zp3uKVlx(IIS5lhzH4L7qN7kBnvURshfpLV1Q(Z!%vDE&lute^)Pg0f%#Z{&?qW0Mj zX6rXcdaZ+r?sh~A5_-=P{(J%h&Hu>W*chK+=CyW@XoNbGQ$69GT+~c-$3&?*v76{v zViEVYs_=j^iU;v`?>1i^^^V9p@ZuuQ@v(B&nhT`?Mrf8LserTxhc*8muO1F-K;XI+ z@h>S>(Mku$N;wMFx~jD9OXd&9DN0w5g!&Lriq>Xq%ztz#C7U}Sj! zT!{A}H^kzR!{ptljZetkc7PfHX&=Ws%8Yws-hDvf^@$o{9-*ofnud83mVWPGHzgh9 zDQhRZr&iZUmzAZJG!^bu2Ghjhkuc$$jHvCudDQ8{5B?=TY15MtDEE$C_ntlM0+Of? z!tZz5pa3QS3ZbgAIa7`$hxU1=Jb;FZ2H**$U_gWRnU?N-UUKkP7!n3gmmh+C@p)-? zALF=d728@5;*A|?d%d2cH}FI%3BHW%C*b`wg!CmD(w|IVh4J+SF$Bm5&WY;p5P6H= z*vJQjD3#NQ3E%+GG+iT2QXhC+0rvj6&@U8r*?-eYOmHP8wA^Zq@Ny6YVDJ1gDLTyn zUUkwf^9K8tv|QrcDsr_tBHz<0RXm`jA#bDK?$v-nJ+2*Gx@M}iZ{{dr~lW5`gX@A4^9DRPOG12DFqRal{rgQ(>n50!T8z&aX!PGZCZyh*N# z3VP!HomGhWdXSh{7Q43P;DXG;RB_0jTcy^G20~Z!s;UZ!xz@$m-I%QqTCmgMR*xZ_ z2$lm$%$mGZV}DlNBasQLrn*>N*v~dG1m+Rc}nJPOAs3uC960@X2uDkO|s*Y zpxl<*SCZf`d1iIk8D?Sj9fF##ZOyA?wm$mnF+*3rd%vrup3NZNkXn9aQ+hsMEUYI+ ze`%9gPhQuJcQ_6!ZU$<}-sasKew)EU1CY0GT)LoT4`&6RTKK)7~>%mq45FxY$B>xH`yeFBWWVa2HaA*Vh@XgaS!!2*q5|evTVpO zK&W~nP^k>X*%`0631PHMi@m7i>csi=nSv1B|4l{xUeD;k0ug7z3l9|-fb4w88-6b?y zs>ByMS0Bg+BdOc6QnX(UR~C1WTpCMGsBF;XlUf0CxvGnOpPDuidq69egxj)H1t@nk z+lDDoZf{G2udXI9XIsh7L^-BnxdHE0c(R%xJKzFqxzGbN<#5#2 zoeut+xejgf$xu!sqi<`EI{_tY7K|8P5pkkjn_wp7vWOO?X%n(9E=-1a>yRB9SX2nl zx>U3Cri$D`4NA$tQyXWt{m|X?01zpNWE+V0{3Zt(6Kmlnxj`3#KBqafa}oZL%@pXe z`<|3|=Oq8KiG}URW*gqe0!3g=J?vSPAC){y#%s}B-rn-O`8y-`BK02^>CVFr2WfaJ zzw9{G6m`82QwP&ucvNjSZ^5U(vli=*!TOn`jhvJHrzqMtOQ8?teUi&2Ztb-ID1MeK7SR-HTt>*yg7ZT=Zy+fi2~|3tR##-6xY+r z6hl!9;x}MshZsX`O8?xNI*o$?wSDT;<%$$Uxq}?m-J&PdW&ldz&%a_&YT>a$nTx>% zL%8eBwf4>I0}ifssI=1oHC_|sY;Tkw;6T~Q-Zp}2lQ~kMpEftRg2o{wZ;+xc@*5Ga zpP1h@$bmDwWn5jbOp?Fs>TL&*WoCHkVe>L()cqkqC^H&kU0Fvd@rGcC(?IBs$^|n3*0`uP)l-C%1C$b zA@`jg(}UtB9F*?*dov<@E~txry&|o90fg?BHCY)FbJ5ULb_-W>z)cKc^WK1ZCT-8T z-*+B>ku|i?d$0KH`hIE5peplAN`|J z^n<=d1O3=3M^Q5T^VW_P?osUwRIGI#^Z_e(OUUnW8L4aU9y^hIh&I7#x>DsjwMEWmGLxmG$q`R74lWjJYad`OwG~PKN57UJMg? zmn7o*(G%8cbv^q<(GB&D&L1e%E1dJbd+Cm3$gSAb!<0P0NNaTt@%p^&5ACm}lMMA# zS))eM0NKcU0n5)(6XST{3^U~(NlG#Kj^ik{MR~Z0Ecdjs2 z$(znWU_2fd*#d$c-}rL?7`&JNnRx%%A&p7=lc#z#(7(T?6KR%d`uJ!>GiIT#{(GgAj>2`!TID5*qT9C;s7#O0h`pDtvX#(ISPO> zUtbzl!z6m$l_E_{rqQ!jV7@a6Amq)h+8=EwN4$`HF z9$XN*`4&cs%b3n=MU`#7hOkKyXsN!;b5qZ!W*(h{8;9Ea$QxU4-*-T)8fRJRS#hS2g53jg+EkFrYkx!Fkv7ta z&6BQManujfxl`PcxFadQl$?5QZ*iKC{3B}1ir{)J#>p7t#ZiMqs%7wSOa|{M9vJ14uX}?xwEEs7%2yktq%_;1M?*slFTf_xtX;9*_Ep9Bd(_pL7{zJ*bl9Kc z%+m{#s;vfjwrX5Azg;Pl=%qu+4rO+wII^xBBaFOat;W$9`pm_uqd`V9LcM2+u-?4VXCE3U4i!Pn&d+XafBlq%N}K56V61>6 z)vcq*zyD)OMhmv_SMp;vUN~KHP{DVY<;l{f2IH-HKnK`}X?QM!Dy?Q{{+2<(%;uBP z7XblsgGg0(@T20kj+!8vrGpYTfBQp$ckAy8?;6Mqp^6+Nv*N$@yxc@~`F>O`dEBA0 zeX(=`?Yl%Q)J_*4bQHawk=#*`CT(}(%YrN74aY^dLR71lCBgM2QHGg;T5B1lIozQm zf4XTMm)6=`ITPfVIqVs)0*k|nNx5z}0vD%6$lt>Etd(E5Snwu-Q7{h8T|3+QQ8T$Y z*0kp=%IRkM+s4_1F!39)RzA%rzI~_|(P-7%NEex*)!-uSaFE0Qx*y+BmbWX{EIUT9B_c&I;sR|i zr;8mAlA#?9z3#Tc5xapd@XAm1FRDM6imwVdgvQP~R-^z+r4_V~j*ujIFS z!H#Tzp^6zS6`~U(zMy(V?eW@jR$c{j=GV8h_f)P2xjsMVZ z1l>eZw4HCB-#_!QHszZC(C3SL7sAK`2kQm*c>>H?d5q3B44rynMSU4%;IV26 z_qvm_tm4Y_Wc;K7+(&=*Le?2dO#M%O<0&gYjIt!NO%qJkv0srsiyBrpJ@3(6aI7T< z92$!_;wL_Bk*q&k*0-#CJx%!c#~xPbo+4#A^4&#YECVbKzLN0rMQGlBb2q4Y1|-ZB@yIo zI=BHN{l2T2c8%txFNJN5D83yDA6qm|_ST7o*pzbPR~!TUgw8+Bf`595HbvKbG;f40 zZWy__1xV+81N@KB$-T)3d0xqc9xqXClcV5Cg+JhJb3QxG8|N0)sZ|bi(K~8a#mh;& zeExSdvI2p&$fl_WEfLCPM(azc^6)BPoF05jP&pPd;RD+m*cG4^vh#1$)I@+XQfg2| zF}tDV2rBu{q~++b#a2^R4F=?MG|0_F9$5D1zK z7wC)wFoc7jq3+nc$SXho2I7N@wyYrI*v_*GhW5D2{1dP1KZngO-hw-eq{+i2w(F$| zvxP%D-@~D*5#ALC{9}@^+r+rJ(oAJ$rt_wHa$eg+r$$4W0hdc<&;{GgA@f-|yO0iBlb1gXic}%-M=xpJ)71k1iNX9x zdu)gz*1uS9L}m%+4?Pvb_xmtFNkHi`#Goyg4q}`wlzN9}(LBgDbrJ*4LrYUpZg{)* zv7X!VzT-wVf-&Ldx3#6has??kaZ!&HAZa&jwxJhkj+gDVUv8i z*Rntf1rMfZ#T3=dA3sW#>v{$U{7!Xd^BER}k&iG~CICd9HT7akgP!{5nY;nd3j`m(&d_$#nwH zQyujlzNnV^MTL^%)176zDT~ z_1MM?h5q(fy#sNrSAJP@yz6$zv!(mS{^|G#XkT2u@5((K9}mr6G{L8=%`#}PmrGk zX;iDHXyacxDVM}+Ah{1+?nXTaa?B)n#mU^EKudR%0;-q4#>_6lH$Vgc^;)PE&j&qj zK7tD}N*DtkeK>Oe{%WAwKs2RIFakoM!F{AU)PtuP0c{i?BO16yG_fonN%aSHYTh{__XgH7(^fIJ`C6L^bU zb13zY_pYF<)x`an-T`{`KwKe)_y9ibaOp;)6l3PyF(K$Q(>q%3&QVU}!t^#+>V~df zNQNPrYICe>z)yA~kKkbqf&CK_&^BVfqhr_dY0V$_#(i}RHeXD3S)hwTcPSql3Utrn zx@i?z->2uFkF`jLI^6Ai$d4}Dq`>o3cS=+A(`x?B=dpK~kfyGN`z*74ydlWTGH#o?)L@-5e zE9rV4Ff2dLinp)y%VGuL`XcZC>`xw;)!G@Zu0m)vpKo?t487TlkN?*{6FfT5^N$Y! z0DxF(H@Q4pf+;va;qbJsxLj)&kIE>Ayo(Ti)kz_EB;Jj)IUw>TiX1|dN)jj5ftRTc zk#TV8gtRfYtN9>gDn!=1_gs6XJ_doQx|4EGeLrX3sBGaMBctZBN^&Pdqvl2eTOj^{ zBVumnq2q&s93Yywqva(FGdHN<8%1wcCUz=DJYtW_p2@EW2|1%3qo*0n*^BoaX+-Ya zn^{y>JV;V;YqAY4RSmRWmqHp?1*3&S`X2dfV}eP6p_z8B{y!ynNBxQsZ?dAlsQ+HU zM+3KWDdjuddOM-Oj8X)tK9Wdqi(1LpI&mN|dJK|eH?1ng2FG6gCVsq3-!+k^e0;78 za#tDDT54_QOlx({^|3}i7GYv(qLTPO<%5&&f0Q^Zqn=E*&s>NBclf1;67Qvd2uVEG z9QxioB@Etjc*dc#FhL{P*`jWD6wtk_D=(05nuDXIgKi5E<0UFpo#X-yq` zl^t{q z*?0XGD4Dg6P}zK^*jF`FA0jXEe{RJAV+?0nZz(w>2E>VWdaGQvjjL{LNVt4Afhye% zFjP#GHPtzI>*6L>BZ?&U25@*AG3ODb2a)7%XX6MevlhgX1bkOvX~Dj6qiq?i>mmqrWsjQY*K%*AOf z#o1Cks#E^eG7N|(y&7SPG+On;NCzJeoYM17U>`LkKk&omVC5|~EI8ivn|L#XVhyW( z?|loKbs~Dsp)@%2X;jGI=3e2NXC%1TK_Vr;eZ+me68-1^*(Tdr0AOp6eDg_SFj`6}Bf`7*JuQM&@ zqyefr`3r>f$(n-Qmz|#eC?!}Ic+i{bj@9DFg>-P_P&*G|jV-Pa9kqp7_o2p$YfP>F z=i1?LuBA+-vCgQrAYpsHxhgdgzyeeS>zo`rIsiR#!jSFL2v`R;zu3rX+NC_o=DcD? z{A#Gz${MhbJRZ&yWNR4dXZ>O+L71+$OpH7qb3sHHO3Aw%=#H3-yhw-cqHF#IYRmn* z&yT8H%|0mWu0kqaV3=ccv!CpRAcw#q_;DoBlKAB=9sn~eJRo0X%_{1xMx?|5h|a@R ze0+dJtcX~%BCQm-%_eET9s@=kwg0`R)Ob!1Psjghi2-_$dZYDZvWQ|-$3?27J!GpN zwhkR%up7wJXp4ZcXYAD9ps0uYoG!>M%h|rU!I=3r;<{@z113;u3UNLiv-~seQgC~j zlT|NmdYbFK)(H#UOF+1Y|1Yu|#yl#d&G2-5t{c9X` z0*=dz0`|rVOzcytzn7xn0#O)4vyYv!Z*I^;DTZv@ppew63uHVgc0R8{tpq|)&@UVe zDd@CCWVpf_KPE9*G_-KY1A7RArhzn9^`e`N8%uD9(cujsOG%3Y{kc>B!IP+Pp6dnYG*s`xpU+>M=#xb02K z03?~*SVO`33Er;B4T&(p(dv{zuW%8EJd(w)UqOo8Rd@A(!o6F5j0hrxqR~Mme8@{BAZR^)}ffOZ3mo$H+f-as=RMDd5UcVTw`; zo;OIj-w%0Rn2u46oyFhUlG1!k3Nr%slw#0M=m82DRr{TACxc>*o0k&hu73{~`BS-qktq3yRdCmE2<3jV`qIa>d zN{{EaGuWh|nL^3%osDYB1))KbB$`7cbK9^MimTK7$}lk-x(4Os6$bzB-#ng75arz}1lVByH5kufXE zUG1j_+szXTJp39{h=4|b=4aXZgG4*5H<2dk#VoG+c*xX@zDJ6{0aNvDCM?AfwNm@R z#YIX(&OX!foB)(+91}RCVx>t*OzgB)jIN9_zclInv`jP-f}TPZw!=~#5vT1=nb4fM zd5OytJ%|zl*nkCU*mSdp0St_IF&U-o+4`D2u_)`$k(Y1s8d4w7yk#b~XE%VR;NFtW zFQp1%C*;xlf96*OMgi(VM~wh}jAq1eajb{8UrO5ifG0aDzp=d5bDOn4fsLxp>uH4> z5Ayz9gCN!*AWy?be$OQGE7hqN{@g|$xAly~Mh5;pdE~77{(*te-?6R0L7q29#rG2= z+z=StP~Kb2tBBtP2IOTA0Q}X75`V$>(7X=u31*@xCT-_u=;aXrBf2>tiaCQ8VA9j` zyzphmqZJaR(~cG`5x<%@a;o~#vk9Y)vX$DpP!*|A8v;PlPf^2vJ{c4OmBmfTR8?itpcWBEBA!fT&vEe#WOM0uF(K@{wHNOQO zMlOML1_K`w4E9gXb+G{Zo>C1mF za$4F=Q5}wN2Qxd)>w70f ziTS&V-%T!Ib<<4zz&$Fn`nN=EGbc`cYyI*OwJb7+ZLxwcybFpoe~-uWuhJ1RF|(OTi*^{ z1rmD7ufnl^PpBeM%deBr`>pw%V+MbKX)x%C0*eyWU4IRUWGnk}kvHh}JA=sctQWAS zg_Iz!cP7=%`BJZ{m91}vq~-3Y<)bMbQu_M+ zDzO8236KIzC#tQCXuH$OGZ_i>f-onQP}gum_==N9YK{4|S!ZI)5Ct zWtR(PVWc|x)7=|oyGRLeTJ)E1Ox5d4FpbSO=tvgiy!p)FLtLyjOuZ++5N#GBwazh&6=gW1vXyQ~$F2Rg+4 zqvDdEU8f4%Rr1H8($R%D_*pBR_HntB03YA&S0A}d41A3r>{lGl2dLp-j!Prl3@uc3 zX+NLb+fHid;D(x@N0KC6dgH8-(xS4H|^VX8bd+ue`8 zSKg08(>rr9z$N$#F3b)ec?M*XuP6@dzc7)_7yHE3Qkp%nW{tHSZWVNCDvBRcsd3-)167v%#Cd zNQ$6Tk*hsvhZb*OL4X=*iKU$ZI3I=P0UdJH#RwZ@nJ<(dTASNEkaa{Rq-9ou)V=v; zV0F`>g3W?^gDLFPwAL74xQC0U{D)&yWk2gD|4vhgQbqQ|rAAqm#MvTK#M|eR#25cm zehWT2K$pEp%CKJGiTkXhBw4%rX~jMM_#hn6mr`aq8`;Ne7=)?zmiRftSWsR0OHTyx zc?k0x91IRASpa^p^B`hR$qXm$}kht?Q{JO3a$ zvCs>8ox(?MvZ2VW=_m=w>5IV3A6~l%A5mN8ljqj7etKGJc5-cg@9T?5-rRdVisiWw zjIYoTA?vtK6Gp{_3u}H3wDQGY>a;))k+{1Z3ukAiHeZ4H5_VjyV$kHh69eEmisEVc zkq{c8Wvgl95yZqSNrB_E8c%XevVC0XdE!+YuFjrMBw+NJB zW((eSC%U|Ul&KcU;0gn#AnFhZZ(0VCC&YVz|VXwGxP*_r;5d-v*KuWG@XE%6k;k1S0Bg z!!)$xb2^+P#ap5&)6<6hoAW&A{<@FK-Gtj}Vm+fGJLhC?L5I7EUZ8Wtba2JrqY|T& z9p^U2^ClwpcSvcXlWw+dKu-=BL^rwqct&wzPYW`EKiSv4G~Nc62pJ7vRl%xMVZgHz z!sNb(2=7Xz)poZ{dM%`c{$S>@^3X{fLrqwqGFw&j000000GwgUvMTps!H*T+L7O8dk;eDnTO8yjf|zfer4c$B|!L%ElwV@bDzJ5-sEe%uqtr$}nKajR-{z zq@Fl*uaxwRa`yyx&Jcre=x^paOu85p2nNTnHA4A9xGEywXL-sn0P7r6p7LSssTcZO zX5qDH1gViPec@b5!xpt3A3Fr2w%vejx8+0;KTpUL@m@#4`n5my$hwZtpPyO5n6o8? z{sPeCvRu&x~czN3O^H`;!^nx@!uVkM^d>x}B2w_NT zUAwF*I!6BggYrZJIIXOr7IHdI7FeT^*|lAR+5zbj$Va{f)jvjw%de9W>GkPItET`rBgnJh*->l zu1&}c*W${*@~c$NUtjRWr?I7yilit9`?A9raMuWqxiE`T!9c4h-tL= zK=BEGp_AzdWP?x{sF%H8uhjVsgW&(c>wG|ZH9|zxS;Cb`dy&G8m7Pkj2q4bGwQGUs z{_(lW3eGgA^C!ht1WDzG!7=nNFtlnu*#k-N(CwJtX_gF0B7|IZOm^P5nZp*zss|)c ztd|nPJBY2S~co2s6|s)^^G!z_BYF;Rzttj z0qiyFWKt~ik_pk(yv^_uk}+5xpz+-u6C~xKI)kH^@?LO~4GZ2*7tr z<8nB?=5C}0+|{5Uy6s)we_-dx0j=qt2WbhL>&VdmaMhXV?8Z-4NR8DXv|L0+O9kVV zCPf-dLIAD_!A{DlU*wB1Hn0!?``Ee47Wd==T{gKR!!v?;TS+N?%o~Lms&roR$X-PP zu(K5F58*TGrAgCl+eSY?iOmrh71YWNYaQq1<7a!B>s|000CXSdF=EsC#+cG-DmY_e61pRriH;N`25;Jqn`e zS*lHC2Ze55I8_2Xf`8C|Wd+wg?6~+mq(<~*ihmv`hL2SrEa(w18RuGiZ_;7EuB~D| zZ#gml(3?;>5>@9?Dg}~oUFPhcO`H`lLDAzL45)i(&jfoBxhGRv>l_lL*e&qT3-z^m z!o$%E_;;i-I}C&QqZyE*KS|xl6j)wQ-x*54$o2+AHHx8b+J~;lCIs3chU5Unpf5m#yqk_=Hju?6SA^pynCiIA&zO4`I`W zmf&`~K$Z|LHz$?a!{*>RP(SV8d*8`?h)u;u5{Nq$i#~jlf0$ zd@B)N?+V&&GJd{WXWcgJYQ)Ya)J_)-`cUM&^5o|E#r4Pt)F#QM(9kOOmx~bc=92S_ zjEZN;UPX6=Gj%78Urm619-9eb%k7((b8QWhV1iYU`aQSdPNIbM#LrOb+;snju~ug? z`hy3^WP(B9O!r3Wx7G2{gmoQ0mez5QvIr=ojUn2zGzSM?ML{?InoZ<^@f~q0Tx|!A zP`VV|-8T~I0nl;hRQI=t`!TyoP4=H*^KS?V0XRQp`amn65<7soA_}7Uy%eH{gu!~N z5M#*I^pO}SUv&$AGF1IS>%R7?SRkbD6VfPT@FcktDIVGfXF=OEjopI1_zsFo=Bo>* zIVa}ebmdA=Y?gaF=-7lHz<%hS~h)>7%8TD&_ zopws>FqURVQy*O@`|CBN4SAGl-NMIjHB)P4;>GxU5;}nNJ(gM1IKWwt@4$5<0$Q54crL?p5@}qrQ3mRCF|4Uu`MMc`gT_ z!JK3AB1#X#G5{0-Rw52;1wfUm<}is!-&FbbhlLIyIgF2@u~4_2Dc>F#xQlXg@JGJ5 z#HdNk#Q_%mD~y|8(EX&;_mW@JL;?V#~(M2cZhc40GvwtvA`ta7OkeMfA>pSL?2^) znbO#7EO6iFaH`o>aycwj3USD;q|6CdG?q4hG%(B%-}ho>=gSfcig`p#3g4&2Imd0d z%r8cctKuIp?^ZMu`4NP6v%psULBr2PuF(J8gTMd)01(IoPThs5yQTIuUw8?swRrJj z8}pS#nqdz5XGBX{<`vIL`o0IY60Wm-yw5^;psp=*G}495BG!J5K2pHZeV@*5TxT=$ zsx6jF=Yck;Ra1?RRr;7M9)Po_tu}y`KN*j8FV775+uWX{MU`^Bb|TfaplHx}LvZJS z{WF@Pcj@)dZ;UzRrCoN2AKs6BkqrTCS33zXh~kopxwQXueU!79!9v>;>gk9GWxLL$ z+^nhlm)!d$5>SCS2~@H@6wrpPS{dAvHM<}BluX+KcYtoU>=ZBn57`3kq{el1nw*mH zSF*tw#Sr zbpg{ksoW79FoMu2d9p!#hnkeIXyG|r8b^k+eWVQI8a=Y!U91g9wA=r)smS@K(<9`Z z)TY}J-8UmSnWgLZ@f~@~64M-#rjE_}K$y4CWRL_7I%m^w-M(fY7+&>+OVi@Gw)QPvsO|BX{3nR4KACEK;DDD%?gDFth+IWhX zTd+51H6nl%26$>KZc=hFHDmb_x>D3%spxHlQJg>q?jDD-$N7tGD4s+j$YdLiAl>tB zN28D2lXC!}{cqVY*O!m-J~S1}tU-4zyEFoMUjP;5Qg8SO`i81BX4a^*mN-dvO2#u^ zwL8ZV$|NIF^JQ=0aj5R3%pk`P%`DZC<8G1rkKZ~2&25fj$z2(@V|J!s1XC?5so&F^ zd8ifG+yAD7N_zcPAy=HeUd-;YxQ8>I5CyfR;Pl`gr{e|D+IWj@dT208^xZU+?s3E2 zOwM!$RaB_EnZ_O+tI=86Yk5j0DFG#Zi3`4ebKus!QCyV?l0{RZxP|ev_f6O8w4GkO zAI3@H&r|Mue4NKpEkAH|7>TjHu17}^A*)l6cj`GWQ)wN|lU_mf?@?$g^hGLSAQpSc z^!T7ixc#sn-G-^)sCjf3%hHkShY~=8Y@4MEs|~7e>TO`*#zAWU{U* z?5NLn(m?wxqm01tXO*Wnf+@Q#?v~8BWpAs zPVgOv@zn9Mg&w1cFneT>ZvNJ9;iK_WD6iE7b$uOsAYq}p&30vzp^{+hm0xCw+hjLB zB(Zm|afW0Er2>P>7W)tCCT56aykPw(ga(Jh4=64~pQJb&1^dCmI#Gateg`dA4Q-?@ zhO}Nl#_vVoy_B_WBUQxwUwm{!t6h;Lu1OqNP@1PlYd0?xs-oIm7=zs`vjt`*u`-Y9 z6aVjm`-k>xym88u{n&wI3bst*R6ALc?&O6x*vaMu=Qt~L6i)Uc&TVN; z?sJF6iY?a7z%*014yb|1YiB3-?0N@>Ytzc|VU3G-*{mt20h>8SSH~+358~ryh$*uW za@PalMciRYX*8R!8tA@ou}Tawe#1uX9iyjV^^%Fg-s94hV3U9PHG=Y?W zWe(WMt~YjHvR0;Uj3Rb5IsbsXqBT)SBBR*@*CyCmW5GQM*;2nqvC9?ZzaBmnsn7|r ze8KU53?@iZQa1ZV@v`8cDY(lN;s5&hX@}o89^Rh1g~BXYXPZ*8?JWkQoUsFy!f0zD z2?oLA*D(55bs;8DZ!nT|hLO6qT_hn>(N!CdSI>xULZ8x~{q`h5BpO0zI*v7X;TMQR zLCqOzaT6HL?e!)AxfY7>J{d%$i9Zx<{R48!M_p>+DO6p`J@IA=v*#2P-Gawu=2#{V?- zweVcHG%HvDNf|%v-IIv6HnOTxjQmEint++gukMwOz_9twx_qTURlpp&KJL6LIU!9s zL47=Wy=0tDVl#2a*?^Bn#on_y`Wxk$dxZ$J2@3X=%<5_|f`#tTo0~e=z1h+-ARUoW zbTFTw5vlHm+IAokltQmebCGXfs(FhD%BiYxkW1>|BAHqogU|D&bof$|s=*S0i)TBDlY{q%UPynZ}UM@H^_ zyww((<&50ld^a)2%uE=7QeDREKTzY>YY%qBoq#n(E*PO{-aN$z)QwzWl)w*AN~4!H zAC6n3m>dQ|AR2@qcqeqYldU*hR^p)@aoOmTGPARQOpAdP^kS?x`Y$~(QTj;ZF+;sg z8w@~Y&aLa+Cf=Fcw6&a8SGc96PV(0d9QD&#c%i;@0uq{f@brttkq_AZ00000a7o~o zw(ECIK-dM$1z;jO}V~ zQ9&U8^s8^o@(Fl3W=xAu{IX#`VjS6())uQCZDD%uCB=v$Qoktcidc8BqD) zU*d2WtN(h=>9iWokij*vn%^XDzP8qir9qLmxe9UtQk4#jA$5;!n$3`1*X?-n3y5gS zcigtkG;9FziB_hX!C?dom-aa91rI}x$kg~Svn zE)e8GZ0p+H}Zy<-v@e8&{gkiWZ~StdD4q%_e&b_&IC1CjZ#U1pJN!sSwwYd&3fB0G2E}%9_IxwB>#K-5|)eFOC;wdQ! zmurS6XxVK@sdl}9#rF#w2#87SRfChmk49K@3Q<3Ld)(W)*1?bkEuVSf%>lg?+GLaC z?tU)2s^KOT=XBj&+}J&_OaxO~cPjhy|ICvz#vHysj4216bsPAVH*LxYc>K()nHh&% zbt(~^MyqZT2Mme}P4R6*!i5a)$T?9qrZ7ej_E?JgW-btN!Gqa?jWY)O0B+XugC~&^ zT)=?8N7)N_AyARXPla1xr_>W?@+xpT5_x}UWO4D8m8IPQw1j+bsD}XOD5}r~ot2j^ zQ%2=VkIr^2HWh~-Dj4+_;@@4~yG+^O4 zuoFdF9i5U6qB)O+n#s7a^puoGJ7UQ`F$dGGK4i~5?nbS3eEi+TiLP||BsWxW=lo;q zurlbfX~wJcOxM;acP`j>xxxrMA|Jt9m||)FAASOIvIh2sRj_k6#`4eYpsgu&?;o_C+N00000E)?5tNW=Vv-U7p&1562j4J(*X0nZGUN=^RpgQxm zpPR`Vr373UdK-&j#9|NW6`Swl#4`}|{Gy;B7xju@m9=GFdyLN46i4Fg<9@n&g`$r$paLth*YB7CV& z8B4G48eRa=Z>LyR&tM6^UgI6CXAp{K#RuZxa#nE5;vzx8yq@S0cg|U}e{(EQw#I8D z;2aytDnssN=xNfOM+wDGH|Hw?185zF(f`~eL+Z7-5?@f=xJ)pw)9xbqsr3j3EuY6T zun^X$m_{@>&afl_s)E4~Oh@MnwzktKr5xN-t4%Qyy>!qe;dof*);ShogS7)0O^nxU~V{n*;HxL6aVu|gqm}+N?o?|+jbrojlz)0*) z&}TiaW@Ec|-F=AXvYr^>l^&Oc;Co!&X@~z)w-_@PtB86~lEnv++#Y5V{x@I=rqiNN z;7}*|T+@A_D{}xQ93bsS9)ugB6G9+ty`NU#lY0k~i6^qq^`3LlSTH~MZt3@#3amJ9 zf>0iJZ_4|806`AEV2D7~(#iRmL6qSVuo^%2C*IKTLeY(#lwuo|0d_15U(_n-tS!xn ziAl>`Okymm&M*J~00000h2qARl*kjAIl(9GEqOfbV@rl}Po7=@kwd}jSgR;Zt+!Hm z-V}kT;5~SJ%P^Q1n?Ra5AH)Rpizpj_Zl)e-$CK3yzXsdjmt4HPM5!V;H`OYxT8XE4 ziDSY@pk*5(dgiB9M93xz{XQJN&-tp?<2!=oR`-0XnJ;bD7Xw9#uLBacCl0UkUF6uc zMxM0yD@=0{v=peK_)`l#; zev_s&-7*by&(bnMc{cp{1m9JU@NAEkC}upBnt)Sp9l+(wTtGsRyA(UeC#)$OX7+V)%9&Z$Xq zqxE3gJ2#mm-!66H=3RfR_8(IIen>tk=1lwd_d0t+zVa=*wwi|=KM_K%xa`gj69OAT6kA(<4sGolT!5|-#>NY!+(3D)4s_?WS4dG~sa*$H$ zB(Y6|9THb?9{C$~tpw*aaA{-t)?RG=^i@aT>(nBz_~yIe1!p}1JIx~f#lPChru@a2 zEY=dxHrc?EbXP#75^{8dY^)LXB=dt$N_!|{UnL0n^#C(q%FVdPv4*+0m;}tZL#@Zo zdFHOZFaU5XXMf4bCJ6zZZ(-vdGRF(b+W!vNP4Sr^s4GG|34T%uO@fivA1QSDmj_unjxuK{fi-tUw zT8H>bB94MZG8aFX{;5~irT>L!Ti5=Ep*10+sXo!`z|jcL^D%z4Y?Tfl^8p#p??<5J z1{_+Qyq~@Wro0PtL}hKe3tt*Ax<~MHm<1?7$bA!CCXeu1W_{>vb@^$T^Ff6^LnkX7 z&j{`i(qf(ao#@4eLa_zcc6QRng352s^JM^(=!lGOlVJp@fROiyKxZ8_nSlR(Q0^?p z4q0VOMteIhtK?i*Z?er+ti$2N;pe)Zgh8af_1xMx?YHJT6h%$%>_^AaJUGx$WsVXW zG$bK=!~LVl<}Z_C|-k0<`1$D`}UKTO81_60AgH~15I_>OkompdV3 z<72X)ew$$ankakCuejZNblkBt|4-!dgwpDJmHSJ&U5xIvP867-%2L9mK9r2TcSols zv)qd(SgM)@Qi2sZG2<(E#$D=)uu#TnK93mn61+g;K&9}3l`G)#gW@zuCVAFJ2K@Yf zoR@pqEDY}k>W-a!-z8VWl>aV@wY98kdODZsoQJl@E$VY_*iE^t|!QVr2Z38svGioktqH zcv!DF1stD?dD@(0000KJ7HmKN1gyoPDQ)0 zjw~G%hpJhBkVtRU!Sd2s2>X6)ss+3_a7*ojl4lbS=7czr)hG-;b`@57+)jScSzl22 zAHZMx;J)g%Yi5FY;Mc`0*aRGEW?;wcVo(HEZSM!vupR!GJkV?aM~tkN7DD1EWG*A9 z0002R03dmlADmd5RMjT;AfF{l6l001!?!Pql%sa@Jdl!P$=0032eZfgJl literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/splunk/addaccount.webp b/static/images/auditor/10.8/addon/splunk/addaccount.webp new file mode 100644 index 0000000000000000000000000000000000000000..7cae8a5a4b8b5f03e14bbc82fec3f98746fc6786 GIT binary patch literal 4044 zcmV;-4>RymNk&G*4*&pHMM6+kP&il$0000G0002<0RYAT06|PpNFD$H009rs|A+_> zjbMnH{iij6lRu*W6QFV9Km7L&|8+c8P&gof4*&pATL7H_D)a%z06uLtmPn)`qM;)( zs%U@>iD_>3hiUJ-1Bq*iNCw~@>m<$omx_FbX!pk>IZ@dwA`&^02@gpdcRA`b)p|1h zXR;&N7yB;`{DS%NSsl%4LEU~K_t)_E!VX*rE$cI{1KEKw9R zB^jfZcbyfob<5E-R>;Qr1C`ETc_yKT+jlxtkNn>&XW}w=_>Q;A+4zi}F)?j49Sx&r za0{=!9?O;(ete5M_jU*kxM`G-x|`6nzb7ZTW7c4hNM7(sCHR>%SfYq{xO{s*LiY1G zf<__U&@2P-)+^g3g<3UQX={do0y2XiKcTbkV2qwVBdzg!(QopOUT~SB)*Xw0{Ya2G z*|(eFYM@&WVB;kL8)Slq;`6z_e0)b+*7K zS>AFjHyJ_$9h!g5hBAd1tQ<#YjsuVx!Wu3AFBw}u5tGNnUDq9+35flgb5lS4eTju* zn0=S|7HTmwC&HL{wk(prxK#J|r_hA?C<^1Ovb!K_Xb|e662|$>ZWWDt<2@DFq(m5_t|a;aGeKi4XiwNp^)0o~d$0002~|0nY5<}`di zzkyW9f8&EPtphK{az7LDlx9MIdUu>zXFHPNfxo2dtusNHu2Tyv?dP4!sN{kww zE_m^EambcoDNfIBXZx*v;_2i{>=2Kx6YbBKa{iHk#i>$@zh^vAq$uH@b>+DlK`{&k zQ~RkEFKoOKMWT?owVD-a@t)URI$hOJn5$AjHagULFyx~%La?2F9jB+0^JG;+<-Qa_ zZ-oiY{^c3@{c9#L<3$;$~H$Q2wZ^i%g4f= zArTQWup2uGu|f;l1$W_qIw&`ig&C;8>X%>-mT8g(9V1?L$m%)*vp_jz$i0K*urE{K zy03SMxl6G1-`V$xR89@cu~A?`_}AP&nhduo!!9>|RF_qz4fkER63co|^u*i+6r0#_ zpM>Mmd&Hd@a1o@T(B5On?a8I`t-@$*IJ^Er7DD#4nE?wuaK-HMJtwMI>w01B-Yw1= z%FL7jCzG3L`v*0+40B_J;~0H{gi!qrPC^o-mHnDC<~CehchM(4kc_@j*)9%xh4VZ& zark{~bofP;f0(?VaVk&4pqtNeP+?yAd9;0h-ccehTdqt0%l~C}%N&0-$@s=iE?43N zRFtK_kr=sIExsx+eXYW&*D9+PiVnn)@2gqoD&8B002RH!2D-sC7!r8;qgwXMN4W$S^eV`n;Opn15Ja`qB6ej@-yqP?g`xf zkS}TgN|9nX1eOVY!dqM~|5q!qa_WFtbSFTjkN2pnCCP5((){4KP*Scp%@5ua zs9PX%F|$PL{+2823De)SEf2&K?w`s;i4r78ks;&#uVm9 z?*JqU=A|c1D%ei^UrHC1{Rcf`Iio~nf!5t3V?5FP9SziaX`0)Q;HPF^)17rWnGab` z&T7Nudnl~2Jv6~*gHPg|1jRmgNypxV4OO15IB(kkl~PD08ys}05Rxl&P2(qlSj7>Z zFpyd@)xBeDUg+ExyvSgy1f#-fP!l1~ek~J*>gkNZvWsnn)WaTzn@Y(`{gd9LOvb}a zTZIKLodgh9r?B;9?U5bcr?HlL)^j>PD9tx(o@?s92=T6UpxNtIAWM3$}aj1@m8_Cg*0NMqyZg2nh+eC^r^Md)c z8`rIBMEFLUhT|A(P8M| zokJMqB;s~Lj)ZcgxtpkxqdZ01J_aQXvw_gOCi)Y1?A4Mze}dTN-@-LN91> z*Fwq;936#~q6FYHgLZh0-F!bVtd3$boD=2AqTHnirukbl+yYw(>m9Doqss2+LGTTn z7ZhjE!WK*^G}rtd$1k|~L(P@a+@aMz>;Of02dICrOtSjWxJ9k!rrXk>xt$i#sUl`= zz;2%sE#4t3Zp7w`G}QeD^9;R%bt(nd2n|!5G9J|Dw#zr&EXla!*-_@*Dhsg$;SDzUVT9#*LhuPN^6YLt;&@$I5>l zwiH-PP6_*Qm3js*&mag?DY*i9S(0d$fB;|s2A_l{b3HF(X zu)7`O=t)hp*A6KI&jGKh^Fbc5QhgrfR;Z*7T1Bs7R`%9T_3j>uiTkJ8#2{*A@s_+T z6D5uX`8^md21IFhHe)7Nk2rXyVC!&}nIGT4)}^zHzsq>YH&-Rkt8tbettju;K+R7m zL{)sFfuLf}G>Krf_5c-0hD>k^-1shykf2%i?2;O{{1()ez4jRJ+U}73Cydm!iO+QTz&kHA{_CxZ zeN_IG$iwcV7=zIcuA*jdKA}{;Tn`TIf$nLQwBE%Wt*B^q$~>4Am>!Z}iJVf<1xTkg z@?msmMwX5)*Y)sS2%xWAk^7$9WKyf*xPKk<=89C2Ux;tcb{TdhDnc*#$(M^_DG%2# ztadibL16+Js{5UUTe4R*nze#G3!LZa3CIABGYRGeGP6U#jz?74B8WY2aAGs_LB`^= z!aHoA@uvJRLG0-DfG82tb&_qM25xiU&qI->N+eiwbz#WdraQwxmpv?iFZ><8uU4>* ze{Hl7x3mQsRM9RvUW7nD79uhZ^WQ58Kj-4`fRss}-O#E{ea zJ_^w=^bm(o7rAY~g9oR8$@O4r0#5IA)3XVeL)ZRS=o#K z7>FMH3areuLqS0uA{+!tnD$l{W`bQ?CcfMkg$X706#xJ!f9<8aZb<{l?&*7xE~+)=kK_T$*@9XSoy~DRYWmnf}rr_}$4}Ul{aENigEZ8d2%DPmhRRwb_ yE?Z7NsJrGxChYrNuoT^B?dDH58t&*yPet8M(il~{l|Xf_`#=Ga#wWTZ0002Ce9623 literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/splunk/addapi.webp b/static/images/auditor/10.8/addon/splunk/addapi.webp new file mode 100644 index 0000000000000000000000000000000000000000..d65f058c6d976ba5482cbf90f0c8336c4678945d GIT binary patch literal 21248 zcmce-b#Pp});-u}hS)JPGh@um3^6k^GqW8tvtwpvW@ct)h?#kE^WMAnee?UKYUZEm z>h4ogOD$<@?X}lFs-qw-BJ!jF0H_EH$bFY%SA_-u0EoXo?Vtb)5CFfFoS5|Q5)i`l zXDDQf*;*mupzfP|6o1#qm-nB(^&D?QKK~!yj|kUW4XuFRmooo7JfPrwX^#AcTkkCz7h=BK z{uHSF`WR^TB$nn7;g`-DXT-$wU?|I6*wtOx=RX*w# zelC2zbuD{Beu{j8d^)@(TgQy~QV+$cP0*I;vTh+R|C$X~s>ZSjwRAQUE>(qV>SyI- z&Rw7eU)#mPNs~8E0^k`z&zFO>Kx*=wN7L#TNq|%OTD*7yXczceo41UKktHKfVd z1TG52H$q+XH-8DXp+4&4{MGUQ-oItmZB1&+61yD2rZk`VS)G z3WOgMw@SxzJ&dx~$|L3Ok>n3gI~h2!E7?&cI{q2yirk6t_VA493PU8$Fg^c#AHW55`Br-fH9k2rz+!;!sd}<+o1-6+J}ZBvL`&$7OOG*Zgt>VEB@!yr_DOE z=T3%d`IP+8USvu$wMKVe;FtKO=%EGKHqwmL zi{?_Fb=e=2|I_}rk%5Z!&i+Tm|7P_jE`h-A0mlnb@!^wiIAlcm`;Hk=@v*b^95VlJ zs=hf{FDm2nSnM<@|1Svmd-VA^Ke&JFY?W@Zb633vkyzTk_F8xKqH5)&@~;(COA7vt zqC`F}&!O1O$STl-?TmKhWPkfB8EvSso^P&XbfDJ#Ge7@@Clrnstp9)xhLSq13d+sG zwR_r4hj#YYmwdg7mB^p~sP4^5bM%!*S;zmv-_Uo|KY+DTcy{>@C@=Xs*YDK8pxjlh z0!A0Kt=?Cjyr@}w4ov8jp>F=Q$e{C@#{YuyB$iVR)yioa9;1Q8MeR2XR(?^GO>GA0 zPw{JdkFb*#ABXUaIWjO6>}Q;KI35~iS9px7{OvmW^|q*DErN8$H5FvMnTnU(D%Ou* z&l^>LcE0)uwdC#}H(4^{rj$lj(`6$NWbdw02$Mb|JSx-x%DkkNb`2f6em-mn+ zV>V!|L}cMyjCC^hYDcS1x*uj<&M~xtyjC)NObwAb%rW?`M)I*=% z!}8YSC%#V4!L$Q!e4IaHpfwJz{)a(?TZ@J&-dTds?=a^IUR?%^;)K{CAF{+Htf`Co z6^zNS)whSie_^WsgZ+<66 zNr($BZT{#VcdL*8LrhCXleIJ<2~%Cd{{eMfoA!J95n-0i_aZrIV|03^_w!9vfera|&tFQ4r0 zhn(LD6=qNt8)0o~{~6r6`cv+^=NOyF^7YSha(~XkL~KRQh{7W#6DD6itmLC(IoB4; zL8GfBeU_4_Th+kK;j>qA5WWBMJu7MUfTXN{XjX)b+(?S)Y5BCi|3M7pYOVBd3N9vz z(SKNP`xjOJ+3o#_sL1Fjcg>*`<4a*EWNH2r2VA}M_P%^@SF45Jw7#I9xK8XX>-(qh zo8#lzaD`FAJNW%?TYJaOMMG$j;%p)B!Ys!aVd##w6Xu-T2>g+!_=}H4BG&$R=#NaV zKQZGk>JOT6cNSW3jOAG^n9Wr%#|Rv>(-|VqVJ1}hKx<$d(ZGXd>njy_i`w!DN>Hcf23v_AVfBR%}9K$MaqO;6=bO0Q@9+H)DU zaagyx4I2T$zW~0TqwnjvCiGtc%df&@p!{uNE3NHT#oIhxv8;#Mqz(?WocfP5tftvP z&~X19f>OJvh2<+M$-}9WM}V!;uQ1rJwVk)dCAJGN&~o*(jtxCIOk|Y$mmT`L@#8@%?Yedk1)Wsn-S?9RtHS&lB0&$0nxk z02XoPbv4dX=gmkWmQ(U78g?9)`8G1cCiCm=;)JAtTz(9ByWs+a)ck(_M5i6WKgA%3 zJK#WJX96+uW>7APESyg!g$P{6AQEOD+&yz=&-s_dPS63G^tt}eb=SxnZhoY{sYGv* zM)BlN%x#U~`whZ)Y$^9T;xb|RHSaf`BrM<a4aiTy5gp{H_gZ7GA+l-Z*+3kO@_V?qeUTWsEnY79B)aIG{Q|4^-Log6BcI$VmlU`$A*L z@0R9BPGe|}6}bHjqO`1g-37shV?;=VsU&o(k9|F_V~8)Dr1 zhnYjz8)S?A@YG0phDE?-uyZ7W8|$wU7N>%-%>nuNM{R*-1AOh(FD+RqYkTO|amoEm z+$}Ht;YvjIyXkGVwUcU(Ua8;XvQS|dFPh@H2AU1a@@|5xP4WcN0eZ(-7!f=Tf=ZlZ zrG{x|Y%+hi?4Uuv(R@kTr@XFKl72?lRaKYMtPFkOzGLeLr8){V;3|<9PGO4DFc9Lb!?f z-kdw_>C(H{6wYwyptQQN;Mn-H>nT=(?rt(o&|h+DU4madF%=yxWlP@*VFf#(_eD%a zW$%XaUqMN!Q|pg3rZbcz_!+@;6&$BsqqwU+^kJtdJZA)*rLaRwvZx847vV5rx)*Ts z(~hS+22lBLLNC=}hWke+bELgG_R7(x*>LmtXV0Jw6TdenP=tjP3nC^v$6rN=2uv>e za-$k{7Xj$Pf83OkI4T<$04W*N(%L*U90Mb>QdA}e_S8`Xi9mrH=~e%U`3;f>>;DB& z@-xoh2@SLkHu{oq$n4naZOCPuk6Oh{H7)px@9h(NTElJ>yyn!6PAR*-W+9#BUfXH! zmKMyJ&hqLqb_k$nrZSrF=RY+C6-N%C==nSTnb`tevfV#<#d;2%wv@>KrdONa*1!%7$>a|j zNZR0Xe|uAlZM+ELpQSQim^4!_OJhPUg?HS{XCch!ZoMx&vVRCbGrAB4apo$9SBuZx zM9}uylKTzDJpg8~L_cbJc{2}UoPH&<{3mcuS^gSv$pi<@5W82jn$M4FX&&v<^<471 znffD+S}&SJ zLaC|orBFdF#BI!%IQ?}y(8VP^;MTvSQ!*5z!~dCJ{Ueh8a_PIKkC{e@zlQl=vV#9K z{_aKTR1FC?IB6&OmyZ7*qS^c}P5XzJ_)Fi|I#auM?Q9 zph@HZA!7eA;cwyb`U$>&m^7;^JktUy;1Csox}(9mGqx+HoyEOV@BX?jMlyApzT+A# zPMFmlYj&8RzI1X#HrzuD``Y zJH13bksECb{>I4vnxYluPdjb1W=f(MWf%}O`dV=&a}Nb025qdPyb`pHKXSS|Gk&!* z|0(;=uz$;(KUp*i&l0R@V>; z3Tb_IdDDa9yr$G~+qvk}`a~Cyd6P)qbp3aSfj6lQF9f|VaahpsrErc?`>K5@*m%q2 zbz&2`yqhE9D1%xNIE}}hRVs-cP|w%f54u=uB_!Y9w~hXJf#I@jSw@rsPIJvddz8|K zawy}Xt4vo7yVtDve1A6sV&~TgKxF@p1VMeI!ZnT-TxMdzXm&3tN4_H=d(*6Ju!@L! zT6lE4i6Ee^Q3xCfiwh&_WxNB?qeICfdFCO3S_2naB@LsM+a=vX2*Exu-;tiyheVes zWeH0UA5q~3BeIRS<4p>Z77Xp+5kwL% z$B>7@aoXa;qUiK=VMid2P+XLz@n;4teM;~X-Hwv2jgTl~?Tthn5!k*{V7kiBX<#kt zb9GMV<3?e{x|okOu~JH-GsrBnS&iBWpVSXBES!U9Dv}hFq?ta`KnEq#j5Lo9%rkj* zSRjG!xMwQi*=rw=oEdu~T4;HQ7g~!xc70~0bSq3Nph7)_CmVSEK4`#PeRiq z3&;5_-zddE<1rYnK~O7MjP}syQl5Ps{r9y#J((|E3ki5|rUH8I1@;bZcwQ65f5o`Z zXaJw+J6)zOO@M(Nr_y$%YU{Slg3EwxzS3XFZgWt zK5G^eHbsrg&Af{G=C1Q7)2fC(m3u=b<3N>3<6<1GqeR*S8>ckgHQH5p(KT-sWK{8t zYBP>ZQ@ERb^JZSqR@QL|UR3p*Al07n?Q*uUOkdy#1`w3kWbg&S=bC~|R1A*VZv{5x zheA_myAJu$gabd#for^EjDkV@rohFLzo#b6c;-YOwZyhHxWXyECLK$HU@SC2Fq7=E zY*X^Eo$0L7l%|xl2bAsOO|{uoD{)+7LL_vbHP@AFV%1%*+sZI5iArP)*iIp z$5#Ifsr^T_EYOEfeaCvXHS?kQ;IXLS75v~Tw5mlA3&u}AG>ou|{;bbntw`!w1l_VS ztd!-96{R6g>?Y3`^2ihDz|zab3yii)rZJ<#Wh%miB+6KA+lKIv8CdFHh03?fIJ0?f zJ0#y}6ler)p}E?~J+`iVzo+=;-})IOvm6l_gl0jTx@=KQQ=;5SNs-?H0FbQ8ae@hu z+N5Q4KyS#?LPvPGr8$z*UoA{w(_*jHtUSDll%$i21lfSEwhLNj>$t*{<0$H&z2}N0 zf+eR}80dJtm!`n8bZ-f$d(y#(SuJhGf3+$c!Vs<;Q#Cn_I|1V|*FF1sS#(sBB@s^l4v_q+2-~;GVg=BI@58`}cPt#S(A^uF#Z15nRUBWBO(NHS z#IRno6~-$mYlt$f6MSsP!eR8kfDt~6Q1^(mY<>l+)2@|`>17Hd#8$EMVdg_$8Q%fO zfZdxdk-HXC8$} zZdM(EpYib)oJOQ5#mRJZ0;JGofo%mYypIjedrTc;RRQp>TpNcS-&vZ49%}e-kU24k zrBJ`;I8dQcTBPV6!dDRz~`vMhGp*ndW1nv(7zlP&UWcWKtJ zbcBicaJ9?#1ub8aVw@nPW#cO8F&}RWq}QkcJ#~@N5lo=7MIRlzOE40dH|4shYI;+b zyvbMSCmza3kC2D#0{ZIjfBk8ckQO-CeD1X$U+h0J9=JizJ$@a8x80M!x1&cOd@hZr z&iLWMKS=-p0Mp#iW@O2mfj=9F<1iL7;x=YpxJmlc_I)p)SuVI(G;ZVG7o(WO1WES@ zBX#uMCl32LYq{Bxbv09A(ho|vp;!cMF3$H?1O~!!>9<^owvPF$05}!`cvqfAhA|z{ zuwHM6}7& z5O3{LUrlMscSe$-$}z$9y3_Nmv-mvd^e{JctV-XQP7|Ggmn`CsEs0j2A^5$42#bjf zv9BC@rXaZfbNTf1#Z~=bg5RzLfb{fpWMkrc!v1KP;@2h=EI2?P$E`)a0FK1R;0TGF!d0C7o6Isn?TgGlW| zi9Na4TBy_N_f=B^ZWmIxOtacTJ~0~Ea*5}o5Jq4kNl2D4<;Qzk=0>(k4m7wPDc9Ju zCXf4pL8T$bg?Wt(0Z520hR+#z8$f~!qCQm#B2`~7G6rPpr0(&ww_SikmePlC%T}@b( zfh6U2DPi065^|xY*UT4J4gF%LR@c}=IJ9Reu6{^ohDxA6NBP7G+Ev^C^8% ztyJLCfFW9C7Q*uk2uM$HDpAlB%Pgqk2(F$Gb6!nCqBe;K#A$Xn-60kWAZ zuqO<#LyvMY8U z1(9Tf?oi1HL~o-PDGtCB!Q*=LR4jk+g13r(prdn2L#@^$&%6CT6k7#vwf~{@3@^+h zUJ%#f?1lD=Y{pHtl1GQ=L+t>6OJPr5S12?xnZMGhud2Qzxp1i2{WT6I8vq#rYaeA! zdCTes0M>ltlnOBTw4b{Ki>2!0H|@jg?+a3C*JL#4bpBPf>(H1;;4~k*C&}F(_aJp? zR!6p*st#^BVqirKv9S9y@0T7PqakoO!DMP(u5TqSH(OIU0%A(Sj}=uk4;T{d)*(4l zW$uNmrDI?-GCmA0>bw{Ca;1)rz*P7ERO>Df0rseo3~I?$9GaRRz&(wFeQC+hxw9lN zw<(y=!9aXqO-t$X$CNp|e5(d`@IrRj8k#z;wP2{&G%>O7&MczrTfcZKHi3MO0>&Gl ziajayGH<=en$hre`vUaJ1+GrPx#p0|!&UM~!1^Wga1R8k_q~$~fJ4b2~+=$KKL}p_ngOv-HL0q3&`eF9?ypGeJtvMAosfp?Z+*g`?eoY!%?8aYn6jp5AgCOjuikqqtQj^dUCOd-Um)VT zmeYb-SpM`7B+K_`4pdMtzy^V>nx!bZ#Hg?E*LxNFX#qWf z$8Ne3zrAwdIDUORD)MPZMwBd)j+zcrGWe3Yl#s#k6l#*6YxPAP;9Cjd{^ zl1_XGYDGcHOc$zyc9P#}Q1LYnKemQ5LR5MFAYv{j*kdB#{e|{^=Z*5*DjMe&G+*p8 z-azR)?Z<~UaY^+Knl=pxOp|1$=SQVcVO>UiC8 zMu;i*J{$lSZ=e#dd2wKxlVQXX;KyHWXVzZ)y?p3(4uG@ifx&!leK>a;mMk+ZM#3T+ z4B{|0z~#cD5)RQ%p7i#tVhV#(>9Mk9?Vw4$O+5cJ6l*de>@Q*e>KquoOu^PoeZ60L=GoQJ_2vOwe_Yt+=A>`SIzs_ONVQrssk7X7OdsQYqFl1R$k%x8C zG^3<-Sm(5}fv-E?^#B8^`m=YX*4neDw)=&NS|SOgfKClaRI6$@duHIHcFPCOSmM4g z>yW~T|J0JlLL@7E--()AH+%_b6b3rzbKe;Y!$*swPbh%ZYz~)X2EPaJHC{z+vX$H% zF7{km@dvqisl5xG&}A_|S6y!mpv!JKSZ{j{)jELvef2&H060MbYUb1A( z(>vG<*($_(ASY-D?K;Mxc*^ZO@A!sM!tOSx?nNsz8A01;HAry(YrS1jue>9Vm3~O; zX9<<);%OoJ3#AP~EujJ7nT(At8_7!Qdxa9f)%{~v2`wj5p&Z^Sh2W8IoE3-yhSG%{ z_zep#uG}Ng7%huV&s9>lfvv1W7CJT7#|PsJFAd!OXPx6U`Uq0;?sE~bQ8NND?PMM= z;yyD=S$Ot?7(G+oCgf_MsjkqeDuoLykeJk%arB|wQ6(!&*%Yl^ivKLD>qkq?aufD7 z_n29+DTU%r(qy4Oef%@@wURW5x3gNP1)581Cn3f2q@`pR;MFSt|O2OI9BH8jx{G*BO!lwIwNUq*Tg;~d_Q z9BE@(>ZVhQ)F+R0R8!sWsxN|n`=tG9bwPpmN(ol~ct~SL89Kherd^iw$~23TPqkPX zS|1TQ#Ddf8uzJWCh(v%VeU~$JCD71zMI#J3s9cfl)75^|@CyB>v9_LIr&I=#q zi^PET{N91$>vkeW&$uZHst`A^-mt(RT%bYPpB#Kw#ov7Kf-Dp(vXI>zxZO23u&pzcURFJMR4ganVfoQ`dA$anYBLsE= z$>{H}`3#|jFSZXJ0dP5`+Jp@18dn)FvtD!HE+8~hyjP4{r%xQ6bSe_?SIQ{r{J=4< zW{8JGJzk zDj6qT{1Qm|P83_&r#droayOxQ@E!c~k+IV0yX}754dz{PFadsga?bO6rNsw(sY?$7 z42Hz7*Jy~xM>JtcbUZ;3+*}54MVLZ$UC#tvz#KkZj!0#9Sc~c`Q+#r&;xYpRMudWw zi<7vyE7nJwqw>DhmFp#D_9YDnt#tb95JRr;e$IoN0y*qgF++5v2Ym_bENl1O3g%rk zDqgkcg#>JAX0|RugtQr{K4}%?K#$dwHz5l z34(G@2iEnq&7o7&l|qF7N^)um`uYQ zCcAz~RDIQ>63bj-;eCDCD+aj09)V%VSprm|GlwNpuRV4FxbhP{4^-$L$Lq$c)OziC zA1Kr%suu6$u+ASewr%F+d`K`k$9DH-5kt@v-brE4pVj213;CvJuYqY##oyM1?4<92 zsSU7|=-KeMY(VQtI#005N1``@{vHT`yzFEDXSg{D%=vKqPgX7>V2syf)>kgf4r zx9i363EviRfI;TF!7WJl!1#r~ zAzbw??Wu8SHK>$e7xYDW`%J{S^%z(gXkZ=TF5Soa4R6VW;$?0ckT@r?&o*T?q>v1C z?6<>EdUCf1G1JYFgSTRY8a_KZ+_k;#{;@Vj;@%F*Y=VI(+^yR0+Y}yk&vhJ7pen$0 zI4&&SE57w2@SC5Ug7h7orNy6H0Ue`$xs1aN-*=c|!*p|!xAR5%Z6FqtMTbVJL@^>5 znZ`4TF!YsUynB*9dZNC8{nCZ|3Ue%9VM2}#joWi-5Tt^*DV!I0T#XbM?!0vRG5b@e zuMA6M(DaOcVhIS2i=_i{Qcp&l&G%?`Zj50BKC@DNrInu1b+UzWF7nPaeRa%X(6x$? zLS7u1Au2qNi^OQvL%2SccRI6T0AKVc>FTy}wZM(4@ydb3)8VRtz{56HSSiXX!iLnYSshdoVD~WZ zWqh&&9veh3g@-5TVESoA*8K@O(om}Pqx{;8f16GP;V4j=Ate0RopH51G!hNp(0JsR zt>s2#S{t+qY@;~L)#01GP|y!vlj+`7E6^thArOwhlRo{}stiWH02P?2(3RT22mnGj zk{=RB$^xy~NbZBf@>kLk-7{L`koltrFUv15gI1o;w?|X{)iGo=)lm>otde^8GyCB3 z$f8w&(JU~XIFNWFYyOYF-RAczkP;H06d#w-qSji!pqZxx89r)CV%L5i3(2O8P=lXl zx>(^}T0sBjQm8Jd{9+c*LDXsYZe?gjrIb#T4E?JPx%li-M$w~;G;Ulk5QH*+9_~fT zUZ))2tj4LQ)p;B^`^?g}q{a7x$yUjVfUk&V$f=Xv4a^*N?IngGudgI;Du6EyvngEr zt4;4pbqojC0qXKMC7R-86|`!464`8mTov_!u~SnFi9_0G^CfQ@d++19MK%Pc2mHwE zL~MMhH0lJ+j4>@R&yg%eDo48Y=AFy+6ThuKXssO80_#1$jg zq%jJAhW1*8W`MpKydqt*&NaQ3U00ZAR|lI3+s6fn=!MoIA?q7|10u6z5nUT^BfmckiJ8q9MW&ck%fBFG+ybE5dj%@> z*c9Qy_`SChD)N%Ms0R6|BcFmZzYu#KHRi>H2tD~vVk2eUw6?{q$Ap1mf#4lts|=iJ zHYenrd#-dYh;QNA|(}-bWOd!cq{GKf>)(%+5}pBv_OXJ(BPv= zcGTJMvmAmCl7Hs+(gT*FlN>U(*D($bOexSbGv-k<|nW8PWY*PVx48oc%N ze=G3cYlBHbA+P1_skvG+?= z8v(uyKD0H(7$sBvDof83Q<9WCVu%@q}dKX#CvsI4jF+ zo$i@xXFwm>KVGXKlQ_q5JqM{SI5$^X^C$W6*^IwpXJ%I!Xcqwu_XiR!PQ2^UcXUKu zsS*Bah)J>a58oaa}xJWtH{<*BvqcUN;-jl+^goK42wupn-vJ!FD(@AwnsziY*6!Z z2<|kK$-IsTP9_8{)2%4ICuqNL;wc>+;opPd!ZDvM!+IIwlK_QznmR1wtONhf2L@ zubm0JLJQc_R!{pab<~Ylc5XeBolR|m&~h* zL}(M9Y1P^M3b!7d6deKDwjb`U3n^nMVp!ty-K9jj=YA&lC|z4;<+YQ*#vr3%cgq88 z(X#8v|Gd7fo6ghNlH|0bD;l$l^$P4cEP4|+3RX?7s87xico5fng^u?((=XHl{)d5@W(f#n zeS*3zF~Kzy%t7&M@INN)cc2*I5S~%ic@|SlPQEdwFta7?VoQFNPNDNtX7m$CUZYEQ`0K|@dh&ze$ z^~2=QNOS2|cM8mpZ;fCoe6;v1fXa^)E1(myh)hYgG-N0`iFnvXdY05cz=B_ZTIL}s zfa{4g=$;{J7t0@{H|x^uj73?|&?XuQR!E<%}+N*8u1KRWHB=%Ar! zwjW3`S7GkjOeM=pSvlzo9Cx5!cl&lwzM}qW%L`jX>vkwgyqAg5vCenIn9}LLAn%0T zHg5lE@*VY{HzZS1M3bNxUwi&NzV;22m9$E)h2{9z7OYFg9M!@s;08!U!GN;`UyES4 z4LdeKAgQ^+DUdZ~<}w;G%`9E?DeOz$i=Ol*FW!N1aN$5AldPEhBzC-FegsHquAuiV zRf#RtHzzH{UlB@1{;GP;|Egr3d1yqAA;~Ae>gC zkqk`yY9HmydC>u++b%Uh>{=t@Z)hGEznTmPsd*8w?;jRt>d!fMA|1a=NAnUN zj8X?BLOA7{Ud|r9&cc%zK_-zqR9*S zEWHJ__>5WAX(ic`jpW2{QhEkFQ$}C*IBcMciCK4Mi(@gdTE@-s?tH@>z+D_&O`RxP zis3}6+%PH|{F=6Bc{7dCgLPItL$j!uGhJZ};#-CS%?sJN!W$4JK7846u^Z>=r_Mqt z9tf!!+Ip441wX0C;CzpmYw53}K!jNySj`Tz5hi+O{ zovV=bZkvx`P=}4!d6AcPsq0iGzcV3#h#>4ieJ!i5Y%`r<_eHnq2nBB)_D(mlf+c2- z*v8`|W3?wSEZ<+|2e?gdx!!817?;6_6S-=lYt{%B%-#|e)u*>Ijv4|DJ01p%(w9w- z08dT_(L<&}=`S}YjmEtw-P)q26B}#blJRj>w2|D_V{va+zfX10X;)~(vw2#H{cpd? z)m-1@w6vt@oXntsv(`+zrZ0gRw6l|qEv;J%MME%umTh41n~^{a;4AsO-4vBtl8@y93@(x z1r!n0y*}9R3@dT&f=nQKBRz3?PgK+JHB4{Iye+Trq{8X+aLlpQw6+GFWl8+5MKbnm z8b2H27z-`hC^S<*XxBuGR4lSb zTmrIhqGDe$otuPzIdu#;6GA`Muf*zspxpye$R)V_B8pbXY@np%EMpqI(9OlvBQB_A z@hof2=2rDQ7j_O7%6oqE+U7Q9m4=_|eKvB$NjA>DBdU-MRN%tNMzn5nqg16bh}X?eac%>iMc zkP5;$UTs?kEd^M@vnk)xxx=Hz-0Mo|AtXJeH8!wodBBsK1fHs~C3G1tr|M~jL8<9>TZmvmSh7NS3Ygvi4+|N;SROt z&3v%d7A+Xei$V|u)Bp1mFKOBIe0UFpiG-gvd-G`JL0f1y`Ta!XZ1iPYFT4C&0Zb}f z`_=Q1+mpA>6jVu&4;u&mx$hLy&sr$Irv@)dpG{le4PfawAL`U=hG$9SmieM*U+BQK zvuoIXNfL3nSPZMV*I|!xOJJaj6?Mq7;NO5a_W`RUDRwl004t`f=#=BByIIx1hPtj) zscuAIgG{JXdF3|IKz+IrIkE7;0^j1_p|}om>Bo2yPLk4gVF{Td+y=I`w89sdvCn&nyFawuvNCAEQ2VV93sFOe2%?%vFihkLSQHntf~h~(egp` zqRxjWo|uC|J;Y;t5x7GG%)z#qW?ple@-fmh`mc~c&?E~(a3WfWmR|Bz+*E+ zrDw{D91kL)#EEwsT+>Z?r9*_Z7wE_e){ZS^Ppc&P$fw1uQ~g5^*U)r z>>x%?JO)=-jLIQ%-t`_d2oq+*%G)WyYwp$Z$N1N`SsHUd$GauCp55qbQzPWCXfvr1 zYL}itq%B9$4wRxG3V3r^-r^T;Ds2U7*WOW{J@i=tbL0i}-8oXGT$PG&ds0Hzq_GbhP(ulL?!C zAHyxZ%8P|C==+|wRZL)}ovWEORceLVJjPAmSELhjk&DM0pw{WIB1(*OW$~+EZ!tZZ zz^Sp|9*I6LBI;E^Lqbe8ZG-Vq=iV`x_X~aGySY*OR6%WXbZO5Z)6>`sbIZ~p0%Tqe zA}hMt36ecpLfz;dy2JCd)1}3YxB_n(0h-X)z%4q434F z#+)+yFs~_9P<3iL)9`IXa*C|4GZ~)-v*Z-GAW@H%BDxVer>ms#xz=1zd?~$@xLX0V zq-i|M4j>r@_5`}x7dsL~vM07)OQ@B>MECvJs-T+I*{}7Q5ad8)!`c|8cVz-K+3a_; zN8OBhqO6w71wmTRw&mx?dnwJlj^I9Wf@w6UJzgCI`(}x!iWWD+^;^aCUab z6oO_HN7~cVE?s~1vpuk(0gs0E<_x*rdkf|g^r8=^;3f|BH74(l;)Wz4frPgvNGtN! zG>?6sqVS!>13qEeY?c>-jg!`a+F-jP8%?#F;TFn6R_63cCS%X)bB#`TDxbV--+C)! zJZNf4D%y_l(?n{7>#Ia!a6>`87x;Q4Kr}9GQS#I}W$8RPEOeHblX`Tb{$|qGUzZjs zbzhnFhBxP4kG*_wk&xZJd|!jaTbHzG)6w{HHvhgG;cxdSRt0ytK3qlEgk8TRNJz(n z33JmeVKsPfL7c4_QJcJ<=Rrm@6h6bDjrT;nK#59eBe%5E^(8s1NLTJ0oj!%WDVMvzgr@l|xcJ ztcsK}z2gmRLu4W8=vx(;yzFD-ZbgFM0p1RxxW^F!()ULDc2YDl{z+fh1c8Fh_FmV3 z2c|u>>@kRm@j%jXT)>$jgubA_?S|tSu>U%`(J;a@Uo)JQuE22Y{{q5{%kw1jOiTB5 zGc?i8E4m6N>p0d^9bRBIQR2YeW78vc_PI%%-ArD!L;h>Dn5ENoM}a1`4x;-Mw z-U^ob5ERI_02>f9oa8|A3cKz(Zq@w`HsHs^9-oM#_32qNp%!fYvRZ-<)C@Kj_yVw` zA)*KGt#)X2Gz^0mI`dJS61NPpyaOc+zk;vSx-b@0 zd}7QLj|-?|S=y5;iGnC*)hUI_@Pd@aCw!%FFvKq+IM&cQLXwtHYZ!5gx4cYSMraL$ zIiZ57H-@J~#vUQhF{PLmPM{8a4(2&w zr>NNPC8s}Roro{J(Te0W+WHC*vsk%H=rOdy7}o9bRpMUI5wc8_4t6Wb+Lr;gx<^d6x>2w2&}RPN*IR5r>Sd`cR0oQ zxF78UIf~2wN{5<%+NG1h%>_+9RI8d|>odQ#DW!&~7Krmyi;^uu10iqj*Jn(#bWJLa zy}kRZS#V@;!N?NyO3Jwo;@4SN``WLy6$d8GreB0pQ(a4^NDipo$C%O-c1w=#*&y$k ztj0j!!&Z{zlG>YZXJ?Crr2epwQ2_dw&O@P2+F6*u z=FX&L7Ymz``*Ltag?;w3T%1(eYU_KIO$D#2&DBW*TL88e96ZLxS7=E)@jKQ=prnl) z39a3?adFgzc&S*aVpP4+J@I0V^^^GsTZY}4S+sZp9@<&-DC1JE&y)4uSLU#*joc68dWi7V#gd-EhFRD5l>x@!5n4Fca3 zpR2rSLwVpLLg6kX(3fn9P-T&jkYknIh_ z17AL_1d@=n&0tHO!30%ifG8&guZ3Q*VVc$~ z(-;@|=)jy!k*?3V4uHBl>xHXznZs{9JkB4?ifdN^G44j%X=ByJ(`{-aTR2Q-bAh}b zsgap&10^zvjf|7$(4~C?IL@Gni{C-o+$bmyUu89zHk3P4~28+Xs+8+I+1ju7z5o*naT)raU1xW=INtr zvwhw0!vuN;OdU?xr^YMy*$fr-I_J}w1aCb6haM>4y6?Fn3k4ZfeURAyi%9s8px0WR zC)Y=F*VkiXS|^taJ%(_K@mHi%Fni2;3h)^xI*D{YQCPolRc%(y^Y;w86&EL~(eFld zjq-X~QaEU#GuXO8F%SOtS7_sg$=Xx0SRNkqgGTr;u&l`ChMEyFWRTu%i)&0}?Miro zvx8`A+1ZC4f`&K7AOipZYzP1Vj}%aJ?A2vGijVtTovTr#%-=xi`IU8c+7W9dv@3Ja zI!gw&jPTA{(kEaW83VNIw7@ogwFK;T5upF*Uc-mHWcXf;(JfS($Ne2s4t5v-RDhxC zv;URqRH7Ct&v33H_1n~wKQLCc@9rbkhv%sHjt@;|d&a8B!#<=gPf~85tgdD=2XgeqxQYVZUtRm&HV* z#5c<$Kr!U{21%l;|H>oM!c!)wAN!Zh5f!BGtxdH~VE_iSq?83ybqdh-zGiJA&HO@% zZ1O(9AUMd);Du6=e#+o8%xCO#C3o;teJ{Ei+HLn@Kt1$IsK)B=ooNao`l~E=ZqY89 zK#;C3jNxgB$>D9?l(z-Q`v<{q1oSo8C6`YwaG%k^>@-HtMl`P6zBz73@QHH(&p%!M$D^(4)eXw1 zu}?3OjbC6H;v41%=+IqOoo<;>^2Oj=1LVwM=jfG(qn%sgqc;N62oG6ADWF_s#((cU zL*`*5t?jdWT54`V05p>zxEk*O!`uWMnIv71o#M<>H?9$&mLYF+2N#ZSwnXizd9%c0 zO@{GV7gQ;_rrSwCu@&(8>rX)k> zBc>hnn6R6fwnDs

f+#q z8WJOwg$kq2=HB`_ORAfEBV01eKQZe1qMiA8*vY68Vo_PtbHpG!X8>*45fI><&dotqj53A5$7KBNvb7f$qS=5<2X zNNZ=u=U#Yr4u9A-(w1Ek22(V;l!bwwp8-5ce{=JQWEg7iqxUDok$kchz7gyKFH%cU z902&r84M?M3E-0%Hc)fD5sZBmfsJu7araXr$dHo+FhLht!2qAk&_e{SWqh` zoiS>(w>Ignqs5KO1V|(RVgHmTs}5;UuYU0mt)Yq#0``Ca00000L-YVht&e!#=|GQl zFep?HRAGjk|CaoECIbd-JkdG#j~^aBJ{nc~N|@BVY}>`}+Y|4^^5xR~8mT{IXfO|L zLwta*@$7iw+7YU90QIBXJuaeUAVjjV?XED*s*=IwST}xI0lioR-DJrqGK7sq~Fh9-%!hhWOz-_dqV}jI|#*6y41XPyrxl|$>^cHkA1$UV1qKGNi!on5=veCK4-m~qGZ#c*#B{A-hN z3rwZ_?Db&!b)Bw!R%<5x?sj@Q7yg5kD?onPq^r5W4E`=9q!_F^e0C_DK&1_!4kuv6 zWb6AFRMJ9Z1@D6$R=Mmt6BmN&W1hiyl1PelJItYq$w0H3{=9MHHUGnAS$AL9&Ui#N z(5#o4x4)$WkL1Djs79WTDQ*obx{lFBx-3%o*MBo+IZ2EMibp7>dSP5t>+@aoc5(sN zio?j#1TVH96n3bt0Zta3o;bRfN1+W#O8j8%C^F6BQ16#d4x8yz^-|NQjEhbt#Su4w zeZO`*3>0w{aY*Ap`?kMw#blGC&eS1!JoU!}D#>b_nGxf;3U3LyWRZE?cmMrR{Zm_D z-+;FY6l{2sJ=lW^tq+uu1%?(Yo@Po+3Wy9w<_B_cetn$jMt_JicH&(>8LI9YJX%fv zdZ!(@Dy$N#UV7qC?UNg3y!cIlK>CvTwgz0jI-dOIrw0fPqN^Qn{2zEOHj+pzWsUutFKT}Q! zRVQCedL=ibcGx?@n}PrU002i%J-olh;K>6D@f(4SwIgOZAPF(6ijs7%({jA*PeSBc z7!iPaNe34`VXFrL=slIOezpANxW?By{ThI;MN0}WvT9SYem4O70y4DxNI(T3LI#ex z(C{y{M)S}NnXpv_84e1}1*DaQd1)^z0~0TG^0z-An7eD_bp;dKt0-LADJL|f1rv#Z zLh_j4N*%`Ti@sLe9&|P@`CRe-%!sY-E^7FH>yVD#6+MkT1n+;y*9WG-eF2zGa3TJi z!9%imzZb{DQL7RhiNeQBSk6zaNxR0;j7hM!c>in;$+40eMPI}8t#RNX0P2Vs3lN5+ z?{W}SIkTG>Au;7Be}5R`_0+@ZnE+aH0o61)`1>;j@YD12Lw0>YtT`MvZ%!B9o$qL% zBRN+1y)3lBpaezY_RiH!bkQcPz@s-%9}$QD-aZ%#FMokqS~pZEYD95=Ti>LlZ$~Yb z#aId}>O{!^{S+5alB!0K79v&_YkHSQRmmbAV!fX{5%fVSPjelm2(8G0wH(-!l6=Ijoree z$(%p)0v-A+%!3f4=VrT5tHYPH01V*GU!P-02@5**8<-umYWLJ-B*=N0-*_soOt+vOEA;|k&8xV8JK2a znTBQ=m}X&_hGrRwo+_5bE&%m-< zmao-%yRo>GK^?RBUiCC=pP&4HUV1V>0000Bz)W)2dzAAGFmy0tlr${y6&RJzQZ?B} zM8ri>*jxsP?JRTtxAJYjoK*X`>k$WbgK9A_mk@EF;3>A0)Ok6J46?^X>35S>E^#2K zfM<}>GH2BpxsRYOnQoeja^^idh&drw#9M}0fZ?y#`2&Rp>Ax!tY&U2!FIkRwn0VXu zXCNcKszfPWZOWj25Eb&x-qCx#Wx*!6@L}HyZ?yL0%LOvg8{qP{C}&K)azp|#zC!TS zXIRRUG+NbC$EL4FkW)fPCLR88pjR zlk3RXWNX?=mN%2p_#ap6u{wzy>YIhom+duGwoPY8at4P2HwOj%AmR*erPPvBPh zDQi%V)wYuEAPh?eCWirV0qr;e%X4yCq9wf4iEe&nlc036aV%njWeob%?Sdb+Rpu@I z<9?3c)X57Dd{LGtL@XNRu{D>AtoQ!mEefa-4EhM#yej|h{muMxwmwb2jcqE_(E+oZ z+zR|7)h+tX+cf4uaQ0$N?K)e9zA8_s0ML00&ohR|(~p zeti*hXjK87mt(Q`5yCaV5+aC*C^1MgEE>MW$+mgd#2Zg!=^MLxvPo!i5pJ9tf+EO^ zfpr9}0HDv1wOtYVzM?A45O$Wqlh>iRc-Ilij)@`vdE4nBfB*mh000J1HaidbaGoq+)^hXI{d(Q`zEfA zOKAIwMC1owm=6DB)zQgqA8|;Wfa~)C-|U*YIW42^DHD(#eqcNOlUGM2w0)?8-=}A&+-1C-`{;S`Y-bp`xWZ<{}=YV+^3)i z_HXW9vEHS>-+%6V2mb*78S8ENLGb1Nht6}<1ONX8Cy+nG_MiRp^54#%3f^t@-`E2% z{fufs@*lMSsQ&-^v+DHmTER{pF1r~1D;|Dpe%|I_}1;3N76 z_a3zVlVi|>i-75zPRWSMM3hUw0!Pa7X{)}$O7T3!)4;QaZEUlo8%m6qGcCZp-kG~em8 zUN2$4uQsnVP5EQrhm9B=B0k?t+n?bw4+L||9Wo%9lHj6EsCeBcWj0+V8us?fW{Q)5 zNPJdNx~-g6^%?WboPvjE>riD*&Cp>ZtIHr+9ZfHDe`64X)b@`0VNPvrlOifQiyk)N zSoihjJ_mVJ>nJ*2b#Uwat-z`mf2M6=7&UI`F1w(7TH#~;htj!0 z?Iu=x1XG0&8*!Hk3!NANldFo`^o(}lbLHwcy8VI8n{gV5_v>lW6Y1z%aIAa!^J?%S zTZ`aPjp5+vSB{tqYc}iLmn7U7bX4M`)I7dZN89Yi7a~H@;E68CWRvePI~mg~3DgpX z0z(=m{IH-x&=`%JF8rM^tJ!F&&pgYQr+}XRn*0y-wG3(7UjYKO8_$1UZC+?GUP=1O z0erD~f}dTiD+`-cQdm1Lb1!!x+)`s3YJfypZRtqnV!v=?Wz&R+q!Ls})CB9p!C1o9w5{ZDMH9Iv@~aYyLI+#e=ia3c;6M{Q+;gSy-axM4tQ^3js#W zUTt0##>ax^#G!zY#)-ctjpRktr5W*KQl*&-Lx!OddA32j*nRRL6zJC-0SZemMrfPz z$G@*OuScn2Soihj)#fDx&#vOt&?NYMi8gg2-a&*W0YYFDCILcc4}g%yiMpoU4QW?2 zS0f!1H&NGyw68$wm;nCqTU&#FP-w*n0N4R4AGB59>&qg*$t26_L;X>i-gDY9m(Gcr z6Uwr$Io`UOv;TXh1je!P&kYxbB!fX}2R=xL<2SWDoW#tVR0|DMSoibaR~Qd$9=gj}Ym@QM z_P=wszR)ubS6h8tOr&b*tt9$;xRoeeCC0eznz7*B zewmn5j=j3e8_5OBaW=zjUHbCI>|IO0!@@zG7|EVae@66nWjzBLA973mVH=p4DX^MazM6%b^6oa?wqx3ELpY zKeKeObJI7i)@o=BWULS7gM8v~?SSS!JkFoOQ1r@;rCl2lBzgPS(}NKbLaKHT7P`zY zW-c2vx=(yY2rJtVVoA52e^dYU+GM zZ{=0KC0iPb)t^ZEW(L+F^@=~C6zk?KyM96IgF)Wi6xj7eHNW2uS~rvuwjQfJ385*5 zj)_1>2M+A`fsgHhj6M_b!%I`gBjH~{Y8pMLKfcV5_+?J^%KUtp&9*K6EjR)}nO2u3 zK%W@#bwqYomZL20Y-|3+yx&L+V{B=v<|E)E55As3jl@K-x8`{cBDZV{$ z9jwN9-C4pO^X`1bipesjz3KMb)bjtGWLEII9k zT(&8M&?4|Ud(P34ybIN*H0AA=D14M^6)0U9e&hEftD_lFjh0m2GJDhkEC5+NZBxfE z8fJkaF}kucHC>n5WqGD}wyPq&qcY|d_xJrx4y)*PUvYxxW~6*a2lZMb=Qd|(1-|DJ z>@qVecLqs2^E(wx+OwE`Ofz; zPfimEsCG5y{?4-Lg=MPyRR@<0#v%{nmMR6iXUzDfLL*WvZUkGF^`}Yh!pWI#7)8UV zN*&|NkEmPjeZG@)Sw1AH8P+U{G6^p+EXS~IjPrHwEQGf7d#GUjwVt@S( zM^DAQ|Ih$WxXm{ZY^f7PJ7pMQs=x95xNnTOCuK`X85+WRo9BAEmGa^&QpBw3B4r_ludr__Nj+>=X zL-hmT+gXO}m_m0NzYEgS;$MSB#Ql(HBAUIlTC|YULcgV{`caq@!|#S8RW(U3G4V`o zxhcG-F#Paq6)^R$$d6Uw&n($Y>27~<9&?~sVDJ(P88af|-E7xN5#|zMwQ%b@(YbwY zqg$ND^$iQ}A(~(Rc8X81z!yS(Kc5mBQOsuosg~m(8-zB!Z-edK6OWOXTv2eary}BT zW?5WSD&+v$&7yxVRglm#bUKIYDV_dQD1Q6u^Q5|;OhzIxo|40bIyXie>yG3_DsB56 z;awhS$c0jr&Wc~R7kHZRc!(lw#Na!>ThBDvq5xnQw4;V+f5qrcOXrqtm9;f(t<=y2tcYY6+TEwQ(&Oba_Ji0EBGP3|FA{aKU(o z-jhZOf*`-e?PaBe`_f^eU*(>0p}OmPVgb$EsW9*^2VG0g`_$rh_fm!8ojct}izf*xd|C3aCLie`d}zpuz$x5qr0aKrNx}j&of)E-|Ld8i?;+ErN8YkdRjW zXGj6m$W+AZLl<{U7H&o|*e{RL)zP2Qx=7KNF%bNKLN{M-LClT&2JHu+XezBsPU1pI zxpBLyL;Sij|$`6!jM`JBhPAGrx5e2$vgWi5q+K!jh6`1nJ8Ng)kuPJuvHB6XOMYqi9qZ-bV*R&U zi{fa!Xvtd{CeXNqbh$byva_pz&)7a$59#&t2G8vLqdzq(x;pLL9^DKvefQs$^8i5O z8h}=K0*`;d-w3;08eE?CLJ{RM_M~RkU$^Zd2%fYK#wB)0Gyf&OgvSBI zsF;+=(++~S_j50{-|Qy*HTR=6+8+1<6aWALyCOrB=xy1nrR#pjsU3?v#PN;!zjaF~ zR{7C?+cClQaw*|CjW5(MjIvUkj35J)EYKgL=_7*_M%!JDgkk{UOwkqybyX$7~O`5^|PGU$5=u> z88{bxO{hHhwlpv1VL~wQpqO`{Fp~*pKZ9wy7dD72M5C?ZBoQsOA%|aaG%0nGC?|zC z!KaEXsQA}V4*<}S$UESX_|j(*qA<<sC-!cE2f2SYl;&P6(&0#H&El$(S*k_cIyEq zuEOVC>O??c5AP%t3wl2V(w82uPS=WS_gV-##PXPJ)w#f+c!nnOt)!WJX~2+q?7ZY= zD6|Vjzzj5Rk*|<${W}}3_5@&o4{-j3}>Q~AHGU*!3Y>ZG0ltG3;oFe2m8uv;WZjdVi$f@}1n#4_|W+q_zu zDbYb^Rl&@EeIuh_RW(AnKcIePlm~XMNqqagux+Gfn-AOSDZV=4z%)f0Fjb;OKOzy? zh4iZ&_(eS}qScU8du%xB(T{NASuwj%XCD*A_Q}6hSflBgFW>WMuq?k8D`y$|yVoU+ z1UFM`6G{xgQosYV>;QP!%G#3x4+1^0lKeNeyB%hZQ9g4o^DhY#N&mivteMljXEpHz zjavSON&aU-XSCRWFaA7iwKUcN4Uy|#dPOMX;RB~$BEEzt#!j0P-{CMT>9~b@@;@`5 zC45X5+RrPcSEQnFR6C;x8ZZoEs7$863TK5)Rml;^4E>8M{ydKgJ zGG_&^m|DUtHV`J%js~GzjL+%LK+SiRQ%jHzi?u>rwkH6pNZrsyTs{e5wp}aSvsA4% zZ%Nnbm?YaCVmkmKpHlKTd64z^Xsh}u;V01F*3Uj{6kCnif2JXyB5~+`1$*_7DKoME zJhQk7x{WahY~U&HRD;ig`t;Ev4)eNuj3^)LyKpW*jZt<RS*59w8E(>2ufKUwWp@6+og&@VLxE*YFE_L@t5KNffFmr_ za%NL?048wIzQbj22qOI?^O_LV6A(hZNEQk~Fvoq6@dbakT4#Rhu614c^?-k(5(RhB zCT__}Vjn-MYmC=LBJA2oJRi!Tj_lp?*vg4mQ>t~_aJaSd_0Lg76!UYNldo?g5s;Rq zvOls>BwETp21U2b${K&gGW@LDv9&Ag)i%o-ePPfldc+qzf0i8(GQV_z_?9SoCCfz0 z7jQ;Mrdlz~mabPP#^t`@t63_0liLYpFZ-1=>VLXf%x3PL-LhmGtqhwEJKWt~^MS7C zF~kwNi!P|a&4rIQBwhoRXTVCU>UA9Lm4Abn_+Jt6yTI|^QTlsgC}41O8cTLqIflcF zTaETNu)1uG30CswmF#;SVh<_ z!-c0N7Dry?F2%7jhG|p6^lynjywQa{cTAx4Rrh6O;0vFj1Sn=;yq$KxLNyNhYoCKM zdh%}0yS))>$%=9x>S_fNAn*`y8ra(5PRvEBfj$*>O*es|gm@LHuC5P0*=^pR%9}}* zjC@vnJGQgSBTpTNvp+}=xIaL7nt`{_AGc&Wc1FN$>Sz35^6_x_I;`V2eoz=jkvOyV zhaTvb%O>1OMyx^1nR$nZo}U>iPptDy*Y&nGsb$Vf)+yhY=<8yxzouZr^}tq|KF~rm z5qlKXy>7wU1P@Bk_PosI>Lg0|5$3&e!M>L4S#+u>xs37&b82zS98>m$dC z-g~_v-5koyB-qCb3Yz4eT`GkdxH2kFW38O5_$?5cK(S*jzaLUqm9+t@_c@ z+MFRnFQX{8{|GmPRfI@QgVfV(^xpEM=wIv+0tmBu1q=vU0a?=qK9n}x-M}LzpmnWM zWehXT(MZ*j?rpWm$p4H5O^7kJ5Du{E2^$i&uGjUbc?$0g*Q$c{GfJbF82`E6)cLtu zAiO0Odv%xPbH*>*vBBS@Sg>*IFZk>=HS(D+FQEhQrqQG##wr2`O=UAW4n~YD=FQeN zXA)eZ550HKw2^1Ba21>L`-+A(_0kJac$2V);Jtu+f51=T0h8qa zVHt9yFUtt|zl&Brh2}vfsK1QHw)!s|SHM9p4~Lgwi`i7qeawVKmm{=`_hKIL0kAIg z*TZ8!i{=BeA2(K`u{jbZE4u}Z2Ol#RU-B;|Ie-B42G9R$L=1b5WNct+7h5!p zGWJNf&{Z^U;3GwRv_ervw?>)DK@EaeQv<14ec*0S-UbXYQ9`M%WIJYbt~1}!S!z_d zh_(a$!QDY1TAanM5zpum{;~7p`Rq>)uV&MN{$zxlPn23F>+t@;)AbTV$DU!4HB#gL zw&cZ15QwcGeH%wo(_8znue)V;nkBL+Xmp)@Ni?V+A6qU8slZHxBhWY@6-9Dojv%IT z^(z~veKUQr{er^2VAGP79L@ z@^_J=G*@C(ruW@+r4t17|#{z6&+?;S0Y zj|%cWas?=S3ijWFuI(BmPY|ipE3yEh3 zZlML;AX6~Iz7%cCYUY)TaEk9|=|%FFL(VGMvBNhn7?KTwd$p|D-|K?5)C7%i{eO7J zAl8oD4BH(Mm#>AX051iQ4Wv$t!G<4@U^2&vsWxk#Bv^%@GY}rf=8ubo!RGxh#9onQ z3i|X%xRXm_23iNG$jW3R041D?4D1-=3_0O)3Gf@9o_9oN000QYgV*u^!|K_&?fdbzL- ziDhp5JqXSahKu6-TyUE{5@)E#!nFOrMLT?az<$H}(CM-CS^CU>l*wN7C-{Edf3kRA zXee!qJG ze=PpT|0mOL^&j#)a=x|xWBwQT4}dS|KiGfd|8VzU{-6JU`mf8cZQoCS?*BpX5&G}x zzw96PN7<|QGyqcLb5rx&tp;C*hM^Amv`F24K8?&q+W0GZPtBxdt;@`zv;^f2+t@cwjSld!$@DbvJ2 zsi2$|A3WC8Llcbu9tXO2#S__WeBwct6~Z$}vC3>$tj-Xj zy5d<=wT3F6#}PulWs5Gq-mlc9e7cON8I+~)T1CE^$>MP5anG%m;yB>-Z zX)cFcY^jOg<*2AdDj1jf4)BY0tH@bH0IjNKqIaKcDH(GBt*UvCp@93QY7NR*_1+tv zgXgpW_BY>$Py0E!_dZ=iaYZL#QFsDk>U-HXAgk2L@0F=VY(cKV^;($rqy#Y{ODO## z3dtN<2;|+PFN&+EFjeYg_sZ0wwjit2$?uh^Ln8yaFt8u7mWB|3q4q&0*SJBjWCX`m zr!>r>|2v@^3$M-#%D8xEtA#(JToQjoxFr6Ga7q0V;4s&Bj^pTuMOci+xo zDar$_7^QE$m(q}`kC&BfSISI{!`fxPcgRJ_(HE)1iYNR?WnV`L{Sw--@wkc^)_Y;qzC{pz zDeXO@hmORbQiKY5p7+Rpy5}`Q%G&IYJ!Mw}pUjv6DF*bj%jOg7@@jvgTlDwKxu0RHR?m6@-ep;WuRF1}*)gGeh-y5S9zQ@wx0syDfjIhMn{ zZrroU*0(1gFk>>01{m5hjWUUpyK&!a$X8jAJD7BgkK_16lIR>)znqeV@2@xw?_#EE zzu!-7@NUEHG%g51pO3J{gX!2Bi~<&`o{U=VJ)M6=xjK38&$+WiXcj_bb-Sj?RhN_H}QGAXZNcM_$3_No=Yd{YAa zHA=-Q-F#J1(tBAA7E1KqZAsecC{jU4r(?;k+%#!@^-W6ubR{Iht?pJiDoSsHw^yLf z?91^w!bGnT%m-}3dJ?zMT?>2X*HzLu7}o$a?#Dl@5`a8P+|4pxoaE#?Y=Bs+v5S%Br{w_`B)1Zom|PgIflU%d+yq2Z-CvS@ zg6}W&DC?}-E)caLey{4i^{D6A@y9bncy2`_B>u9@53l*8PTk#o@DiT~lvb+%c`)5y zH$@^FiU#){8=mx@)hWFExkj%t;I#%023fvkfh#`~4tru6>?8gv1ybsJD3P8>fBSvw zz%Ai(dVd_Gd>a-I4S4=i;qUkP|I;+2|0lwqb?ZbpNS zXD~F?N+yNL;FH7oBece{V2NTQjNvwLUT3w4lU(>rE3LKtKv|Q>QK%L{nb3+jNZ2ii-0YKzUx(B-IY>28n8j#NS8A-ws2kvlo0Z zjyXR^cC91;2;=s-+t2w(hU^+ir7;{$Icp;T^U?LgB}hBwQcnK4H=MHKnILL0vPMZa zjLS#S#$&+KqMq9FNXRVF80jEp|GwV~0|1L~B=46^x1PT(ycxj;H}L8aZ_d^yeGN9_ zz>B_jfE0Wne|O@#WeDARgr@FmfO0G2YtH~HcwPQrBVK(xawqD|!W_sk_)y>Y{(a1B zt67EfqzW;%0QVo(2biMpvot#@QlCV-U^nrWy?L$i61kc)`ppQ(Xd@CCnHL4&ItlH-vgaoK2WPMjuHG=zF_KY7AY#-_oi6SXRO!NT^qwX<4HTR;bzWqvD zjg^Np{P)2BNzfuxt?nU4<&8_5O6fFsx}-)_F8lUBa|3WPyN&FECszniXU^hHlMvFl ztZ_uto7;Xm{~^V~4XOQ)^h$&WU7~F+vFKMa?O^~wJp{;4*?1x>HXt%Ati$*7Ag{2| zmm9OFdW}~@;hol_t!@Ce#X#89uV-S)Xt5>tHQSYc!*GG2838`?d-kTdXJ$w-8>?@>y~t5;ce?rWo~`^0n307Gq3TodgD5Enu-G{5c$ zuomX0>^fPot7>rv+KpQ`1KNVUQFiOI-W>~KdCYXE+oLocP=0))RT;1iz-8&`11Eie z13JZ$eJxuHEDAbl?izLvo)6oFB3Ge8_b*Rz%WBf4_QFE@LGiGw0QO+v*YlSx4c^WB zcA%Ju@W{$9rtip3+42L{pZa^cf9cp(4_b(IUqt_PWA*<@zgm4o!OJ#P8g`3Pk>^x_ z^R&^~Cd=;jP_lpdd@9aF3D{+{V~ypyxO-U3NK(}AqDDg}hF9xr77{|Bq{e)|*cBV+Uzpd9#pc?a>>L3pX!^lb0M&lqwFcd$c3lYMu8Uz4{G-t^jr#Mw(H1Wi2 zFa%oY!kvngu#HtD2t5E;Kptg@O4_s;k z{xHQlH=LCgnxO;ruG~@=Gc17MM&httB-ym|%?QNhT;9`}e=s)6F#X zbae&)8i=9UAoLZm26HG4&?O6u{C70Ht-_k?I_F+7USD)P2yv@c{UIo**~%o9MXX^W_fp*0+egDo+M+OPNu#;Hrm za2k4THgcpHF$h#pLHqLCyzf759RYdz%wL2R?`+V7H8CHi9(g8A@0p9`pw#PkCmu#x-uMJR$lIVyf_z?xlV!@w=k z)fn*II&Zt4nun@`W@kJS`$+ry_PCR?Bk6hg7Q@Ojl@y}D^9!Ukx0*-yNp@I2H{y8^ zU&7mf9Cn7puFPVdF1rCD%ay8BzyrO?k%;`NV*BGeZ73T!W1Gb-uaW44f&<&Ji+p@W;7p za=!v5L0bw5CJf+)sO|2+hJzLZQ_|1BinR9hiMAU}v-mQKvORx5Su?Q>h3-~hMpwNG z*a!dvGN@+p{B*w~I9Z-;N6Lz)9)9^1JP&*_7~)pyH$Q>uledMT>U_=tWCx&|zPk`m zi1m=0k0@&!HQ}7Dx{X|o`37Cye->>8e2>DYKary@T+1}jz67`=M<0XjFUe9v@+xT> z_>54B$g0&p{#rK)P1ki^HVbcj3#rDzduCN52@r%0Q|!^V2YHAaW`t8ss&j6^X|p=S z54&Bm-KdjCIyrX!=`|z?W)bGb<*{?{i}i}AlZzB<%_VqOr!m-%hpDZ@?Y{M+#chy< ziZt0T4B=;1B2P`fOAJKEG#&7#@?~M13{UkTYnuj9Y00?|%w1nZ9Ddj^|x( zztUK8RSmlU3HJRV=4PO68Qjac@HKF9!WjE>oOZvDSf?k2B2TwH_6V!2HoOe6W)l@e z=!kX%9cRMAQ9>j6yXqJGSm?~n<>Zu^V+lRlmmwULlA7+KYrxHG6g6qFX000QGX~CwB4KOS93vUA&5j6B;1Az$;p?%*{H3o^#~@(_)N{*7Vd{zfduc1uc6f^U7;AgM_H)0v%|<* zk6d6Ch9e;W3Z@8P#6%02#3(x>9jB(TkSw|)hw*88sF2s})A@1#7;E!atsdI_TaQEk<{X+Yt~K?5M+ z%vJhV2J~svy6{k7b!Bv2Ow+W%HtjFRl358Vrg!F#4A$uBgE^1Ct%K@7L~8*_zr*j$ z^e^e;`dFM>NbVw4pHXOj z9f%3=#ROOZiw`vP~v z;a+2_^BMx~m-JWZdHXwjEcvkKO2J`#I+WPJu0R1(Muya+9{j=$e|dX%%IL;<1Hl8# z#*%O`ox&-|Y2RYEo?fpTM;NvkvIL|q|0tkoK*M@0092~SBT1U?SGw%;z5X$G=2$gh58bIX%aV^m%D8>hQ=48f)-{^k~SuQX7y!=01 zn0*Y9g(+ZqI}>#lbGe_F^s_c8(Y;D?|QP(tR2Y`FglL$>_;lq!%@ zPQ2|Z?yVH*x1d%vfV-Xy8LPI3O^j3c zQ+fczWqFmXUHmnPU26$*fbo3nVh;NZ)ax}qJJgcli{Jn`{{POW6qos7Ei4GrC`OXN z5rJG;TlgeLMAX|zfx~135`#>}>SaZqolXt(xUQ@*9yMSlqEpDy%|@FK4MI50>@Ff(0*x0PMpN5X72mR$jcvO!=J;1TO<++2icDzI|N zr2F^2L|cbn-{&h`iM z+E3x?0_+kmtU0pJPvV@ux8nlVthi-LixB#!I>|UzuVAl1cz0F0W@c(+SnMbV)z$i8 z?x}Yc7+SdNLeDKjVbayJ(+-N4qKZUGKmq+`f2lqXTvcQvvreL+wx7hLk&egDeKdn- zIN~n;l3sa^Nst=WGNdL6B6MbA$vttR@Cpv=J-;lTUyZZZ^^(67GvUPaZ6)qUdL=mc z*rLsCD7vl!$!`JWKX3p&v)G1LdQpfoE&+sMM1|?BUj>TD}RU_j;is;rE2GFk~&#GsD zJhPdm8_U7tEEFT${&r}r;#Q>02S4@FyJq=6WfA-sx1b#bfRnrk5_30M+e=jt zVlU&pwMJEatixYbET0^JMcgXB_zs&mSb}R}yu36LI4W6ga)nv|dp((b%g+CTcwN|(f6s)MLde!)UjNM<{Cg&06ys0U@R*xC8Yz`>1nd1Y*? z_twku_QZSMfj`527O;R=KwU%o^%neweqRt;vCn#ejaDtr8~87tt<^3z%7JS7A`Ldq zW@(H~D?1Vcp5Jfv>Y#d1>x=-_)18jiw~3Avu}PqtA1!@pUB(dZ^v4h*696l9c-BH4 zMb!qv0x12AqU%i6F1W{d@{#L)-oa$~+ti7MEIjoJdv|^+$tulETCdiAnpXqvd#X8$LX<9sE zrOfxAlWG~)rfr?+@QGtLNSV97_@ESH|JL&As2jb{f`wR9Op=ph+PX!?1W2VLASOR0 zr8Gz^$!$6b8q)9UxA9&kYs* zB*_|)5o$Xs>)ZVY^S8CDRM?EC_MLDO>-V}*$pN45Y&l%@M_mW-Eajo>g8%>k08+pK AeE zWZQiH&<7a6BKki8lM|ux-{k;SP&gn^3IG6bH~^giD)9k+06uLtmq?@|A|WJlNdSNi ziD_=`U~|36<{&5r1e;!Qj?^}6vPa}{bQ}`-4?vGm{_W?1F{w2F%?#qem* zyP^?+;4CJ}CPb08ClNayB6d7P?0AZZWyBjwgL7%>9aPyKrixE-wlCj5b|D2J4)im$ zNCShSY7WJzCh4o6#B-@(l^sS6OL9LO_Fv{Yk@(&KNx$|KHEE7hQqIB6%_nwx>@%!M z<_?8{#-iSzdmB>qve-}~YaDVv31F=S_-8M~osSVa9#IAg*}t@W!7Y_eRQ2ea8F+T6 z>Uow4OXm;nuk9-`;4z~^;>Am;%%75b1nC>pd0`J;aFkiM8D}REJ02o=e%oPUImzG( zwz1!K=IFS@ibYCm^#I>)DPolH^wCA;;quPa*gs&|Pq{Z_LDjK1iP-Ti!Zq$bf0NJ_ zSd5UpNffY+B4_KHT(G{^4Ef=km2FEUni{dju?Sr_SH~NxkrRlWj}bdVHp9cw1IFzp zE3oX-KRdajYY0Zx5RI%M8)F~<{{H`H29?w9yNe9=`~P<}n|`vT*B-o=>azq7s@TZR zodmc`xz1o8fp{BvTSES52^0WOvp)rGI{GgN|4oW2wIw1{t-%rM_JB^UicY0RqMrPF z`f|2*z$>fXQo>u{O&|OU{`Mx!KceRjJ2+f=+L+jYjJF+G3e$42KRyq@ZN!zz+C zMpXc9M31JK(hGhfeXShX1@6P}?=Yfed@X*^LL5B+6U-fFeP6q$*qhT|U9S9OeAkXT z9{AIJSdeKKtJ@{*bE4Y@eXkGv_b8IcQ=nrnj)qz2#;n?w&UvkY$ZBEbd>5ldr-jbu#^Z) zR6pm!hvA?yGJ`+$O{8mi#4FtpMeh*L)GIr$NHn5m{=`apG<9DJSxEZ>JbAI}+Vn3R zgdnWs(EL#-&%Pa)*Jd6yEEq4C&au=3o9HSi3;{|blYg3(->)RTjp?u$9|9vj-V zwqrSZ@3shk$>+PCi8JL@Lfw49_fV^NMHjO2{tSE&Ywr+uNMVST^2JEbOH+SOhkWBc zT_%Bn5j2~*gc5Szu+mai`wK5KzTCC(h!g+;`U7alu=Ds%RU-RKKNPeqEM;`W>%^8m z4?AjZhK~_f@+G?S4*tIl+Mn2v=wFt!3h-niBx{s-HJz0t5uFXybXzgkJl3qQyv8uI z*XgtjgPN!58EEapX~;Aj`%1x()c#!8tHGU(k8i+hNVmlhz?qft(h zvgP$(J4;>$WU10l0hySA4xU0*C}rrFpWZg`upGk58T4!p{oKjV1+_#__#F1z!f6Oo z4(1}(BMEs_+g-+;e(5f;I*|z5K;JnCfN?XOd_Klvv}MSh_Q~DesD3mGNQohF6#`Cw zASEJ(`g8ZAnAWtZw}-L#05F%sV}bDrz$D!$2g{*zsz?4jjy3V`Y%*Ti;&n2UG)Eyb z9Wet|w@ya7QBN=T-rhb}S$~a;IPYMbdQ;S#QdxcRq^G(HLPY-308;HweSHnt;yQ@G zt3#<)DatT;vEII=LNfwQXjwaB%L(n@-&5lr`xx_@;BYZ&76{$WBCrr9CjPBq8mK9- z9>h0kfK0wArz9EWJSxoX3<3=JnOd8pYy`g*T^UI9wJoUOe-HVb4OxIycicn^eply= zxwlO1q=EYk+rtXTex97u+KAH$oEmY57=%5T{jbhP7bBbkwP`IIW`Q!m!sTfeIiPuH zLe?^5RaI9i1_iB7yKkr_t?t#1QL?!Ocd^an#gT_IgjT%jIZ)b?OxxWXYeUV9(9!Z_ z=bFnkZ$cvZh0l>t+cd|#$0!b2IfW4IWvMb@P`Kujs}vIabkNIRfQ8S`Sh_QUhg;Eg zb-S#;9N$vnqt4t;GrCbQ!=^FJl6JkqDp7ZSK9Vl^VHtl$mK4Q0jH))HbgA@X(<1Z{ z3E+ZGyCy6HWfvY^LLuQao!6esL`96-4&>t+lO!bVopEodJ81>VA-cQxf~z|v6$fzf z2@1dtoDc$>p{@_M<gEUh~b_#Ulv0(gAA~jFMxe^`Z8{qfoKyR^m^!#coV*X@(Fu?7)?HF9U zAlh~z_`-QF@Vli#au1wx)>x4<++h1y2rn~MvqezcoYmt5`+_eBFkFAuWu(u~~R#^D@e?%gER( zyPVbwf9pLLHFSH%x9|daRw~^ S7i&NJD;B7=n_t2p0002o^Db!s literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/splunk/diagram.webp b/static/images/auditor/10.8/addon/splunk/diagram.webp new file mode 100644 index 0000000000000000000000000000000000000000..d39c856a76960b9d7c4cbaabf6310e2d794524b1 GIT binary patch literal 10050 zcmV-IC%xEGNk&FGCjbCfMM6+kP&gniCjbDjq5z!%Dg*-i06uLpl}IEaq9G(yy9j^{ ziDhp5GvEhETwo-8$L~+rdGKAo&ibz6y^OrGIiLP7_8-f?nt$ehpyorxc-CwL;rvI|A3$7U)aCz ze}(qu_CfoF|Nq^a_kg3Tx^fsP*j{t6yyszZ$8&4LktDSfKd3;XBX&~9P}W~lZ4H2~ z2U)dVAueqN$wKOW=xK#2dBz_gykb`iu+c4dB*O|)G~2kbU6!Es32()c--lvQ@^usY zJK;EEM?c`Ry-{u(Db;&__E^x$br-dF?0ocza^GmYuEa94K6QDHEz&_DtSvQ}y*2W; zIFYx6X}0@o&s_*E@wj5>XTxQ$nl?#K-V?H$%7S?M>U_c9$V2ddmI1C|wLx%~n|J;I zQ)8us@wQ&AHBO-v!cgy*&&95Z<2p*dl_o-)^Kd_iMO$@TUnVkw;tJ6)O#2T`(!<(l zJcA{s{G?lC%w|xDcV-zXs;a7-fq9n4$&oAM^T0{7zSSC*;V`oVeJi z1=y_9uI)GtIaU~`uT}`{Y%`~|IaVsP0sc$vd=8AM$yLW2i~UVba4^FRFvAQg>H3jcD4ci4 z`pLzdGuh@7(%hS)3~e5t2=_|lcWH7prLGI`(gIxSgmG-}Yn&qDo0{p8sEOPIi1Dc~ znzqqWLp*TlD|T#GuUe=FpP9Gp*?x(`C1Hm)cCA)f3Yt-i{6nIv)|eN6I6Bd$I}@Oz zQ&Dij>XCw5Q^W=hu$0W=f`=p6pUxa%;zN#Z9^S4AOPQDV!T;qt7Rx2d_(R`|CBGI+ zd>@qUZHVgtFXm;Bjn%iOzbsdddfj3UMd8Ggcbf~q4cqdu`R@Ds)hN3_xU0@?F|1R? zzAdn~8Tv0a5%M}+CYfa8WUgQkPREoDq2BUMW_R$qS_5R|@5R0?@o$TKTi>Q_iEjxn zI&$=zfeKFlhkTf1!zLLp$%afaVUrA)TKwwO{RfvkmB&sE6<_bgzAf=@i+o$+-xen{ zxl6-9w}8dN_Fj`33)UwsHswjKa1lG?!zLLp$%afaVUpY$`2=m7{~>|+GS=cX`JCA@ z{lZgyY>{*iRx~a1s&&0`7h1=L_82d<^OQda3G?eEaj+i^(v*HrVrERHXTuKei_Y6X zNl)Et>iD+S8#85!y&lzmEs&u&?~@FeP6Rcxn#@k?&nd=ODdi&b000gVuTuAP*`rn& z)XV@StTgdgm%QCStOjY`lz*n{Kmh*#DkwWiizY1z4i4p9 zJrpJ*>dqURfqZulznfYrv3vAgAS37h%{_T}x|)Q5t?6UsK`F30+aToLH9Asa9To)i zpQL49!HZ~%j`yCEXrT1vojSXK+ZBjsg;aOZ<5)c)X;1z7YKw&(>*_2TN%gCjdp-A~>(=#~XkcW{7wxM2w3pYMP~ ze6X51i#7sLNxl-ut$Y2IVf8&%H_z;{P-eT5?GqLThB;+8J{{V#9b}PT)>W zIHmavedr3LO;EEm3wtiy1H#x35$N%Cqu)aCq+Zoo0bHg{k_M;~0)~$oaIK z-FVmTD=~wRvoWP|v=TQTwN_gW6;zSRcpU+Ri*l=rIYDeLxxaj^kQ({*1u|5pV@nvH zS*@H^ND3@x>>4I^Vqz;-&$|4*8&f| zPf@v~`;>ymqx%Yt9=4nP#CgV&yMPdLM)-4Vl##{Xmu-U2VXE zOlw-#-8H+4{^j5LmwWI0CuYB`hamHX>DL7!B44|t*DfECzdhzXHg{@_sazlSM-TQ8KcVeiO*sYB-2eVvK|RgwlDMi%hM z5tS}D_vQdzfZ_CrkqeA@q%nV&w#_m@5k05kOaojy3OJgyw&))+xv@%tx-Ep|;ZLa&A?kgx9>gGYg%fLpSfqgrhCn7>dKon3LSg(kVjy#zn9|V(E|AL(q z>s_@J9;UvtQp2|%OG2V4q^Iu;YJ}1|4*pr`>BR5J6)$8 zL^5^BwEGuG2*Qw?N{J~tpmQWJx0tya6jA!v$&3gq-j4r|W6kY2W4T%fB^X>Hz&8_w zb4bVcGWS6nXBBx4q|V>x;xs(C3l@(@2i%kQkqB(IzxPn7aLn{E8*bM`HWV_GTsBq| z&7EPg*>#C9A}eO@gDPy`7rN{cWyQt!O1ssqL zd{9E}C0l+{XfQmd*UNpAiKXn550jHAGt^@qW1X78?W^VEm+fBH$xy1TnZvv`?)yqK1YLNKe~?7K=%lsU-m3|Kh)z&{WA+v>NQ2Q825#z) zIjY=g0pq}pOW@M5K#ZxJKC)~~R+fb+ZcjlH4qK8gG3$^L$j!m(OkO4OEye6%yt2v= z*G&z$Odk?DmaOq-8)KTF7E!WBdaGY&c4fB2&21m$%xfmFdza7GI!I&9A0Qrr1?=YL zl;d#GWn%B8;&Kt&k==?6{BhH@L3)#e0UQ8askOO$^*lBDdw^qjb3tHzZX~ykk=`+) z`;E~H&QC84;tZ>O_p&K6$mlrk$W?%4gIHob3IhyAJH{m%v6|ZK6eh2k|59E*j{q*`caoGpn}pfnC(tZhaz081 zkZE1zhycj}0fI6vI3> z$WwNl(rr|V5nK$+FSaQR!VV93fJ=cpJo57XvNzHiP<`~~3k}#bac>}5<=T?FD?lxC zatCHCP-gA)u|H&}3)XG`lUsNLiqdkM+ZC)HSu;c=QkeEMDI)|bR*~duzvhu~ki~Hi zwWDWM2t@pPW4?P-3yMujlBk~7!eUVEq~7!Yh9o+i!mh_)9uLVG0ZX@@OnKaij8gc` zgDFH{U43V(PTQHk#uH9(qEX8bYJjpwUCK=P+xvyXfSO>Cm6ti^>H zUicZjstO#P(+p7&*`g12!NvZ55R? zs`Od_p@LWyS&pZVLF29{xx@|I!SI4BDq}-UE*uFK0n%^6HS=t;;P^U(dBCVIrL(@L z${tCs)ztPZ)OrDL7x8U8AnETm`gDn+RgtF=Yk7FtkOCRRHwVCIVS`{G%(efCxC49% zrC#NoioqDV;q_}XCcH)GV`${Cd(fjvQI()j!|WPal0C?FflppcrXHo{?88By(BHv2a-qxu^<-5x* z@32-labd&EI3Pv3(wE%kij))in{R$t3LoN}+##F>Mj3)}FqfaL1b36h=` zy|EPv-%0Zk1OFB27%3p|eyxdhBNk%2BpxnFIK(r)b%I;n7 zzUK*(Z7Xj_Rs(qy(=1>!TFQtRl_c!%{is~qAA}&PAA`PT2D0A-XEFl${s3l0m97 zAruN45enA#yqP7Q^`sGDXM5P+mC0M!MNY^~ag5?EN+{jWL@39Br0BSstc25R6<%pc z@@UjZ6oJekwpkLO04Ql?Jwc&tQ^{Dtoy9dbZ!rMcjHdTTI^BDLoC74wtS3@LoF!s>kiRNPS-Ialol^z2XfvnK8+}vRC4K>P62ZN!kWfg5% z3)vYB`IsSu=Yys{q7{x`Nd~uUv)n2LtANf=YEOqeDN1Gm(BGWolx}u^nJp)tKlh)} zWqkeV1RX!D+c)Nm-+3g;yHBa?yOOY#U#~>H#6Z#2- z@&A!iX;lNG?o+HbLR#`ac)P&i9vqLIX9DDwu9tz@U&EB9#RP0tEmR@tuk< zfn8q3G7_i1U=@El)=~?cA<}PQlo(U;Vl>a?sNByLgaL9S$gd$ZICMGhWFGw&B-C0U z1sW>d@2c%&TequFjRpB#Fr%=cpH6RCu%89$V1YHs8fndP&HdZGNhDOg&cVzrr#$G3 zNqa%n#hi{#+2Ao9!JMHjn$>_dECqy>6;l|(zBhhJ96@erA!_nBR_b!``>nr!H*7V1 zHfitAmtL~tn(P0_=-~-}USO$g1ZxuTsMsYG&E$@=zyJUS=dlS2VA;^O6p27HkOOm;6w4{>35U$N1*(%CR!2>p{BnA-H8sh#DXcBEZ6M(Yuq zvpZUxFzp?r2Ht7vWB`g4!vy$1Sk*K7IVsk%74iPQDL+E&t>Hpcx$_m^-1WmL{sJJ+>bYt?rA&SRqt~ zcG`>Ft(xl~Vkv0ig+y~&2;)Mc7#yg)`GJ~lF4lH2CH340u;dPr4F-5FKER}edb~Jd zYBNy!a5==eg@LA+F*Gkq0CkM7lmGx)bC$zx)8AFCIqt<&u2BXYF*%#6`;x)=eqJ!i zYlBx5dE`1)kphxD~#_mxaM z!1tIkIFht;tw$h8sCRHh;I+3tlbY1qRuBwV^AP|SEKl(detw%r9ox9CqbMViGa0~y zI&e3~ZYEK|p+vpkh@9`r8o#5~IFcYakfWWV?syB@GHzXV!zjx<YHUR8w#<%&1cJu5<1UJAM0A{i=i=v$)?*zA{AJmLEd%pq9y zzllzHsP_9M;-sK_P#dlKku6`b#j7GNQ9jywtxnBNZ29~UOLbh$B$HJj{>z|HUUV_D z%3Idd8i9gcpP5Z>zL-7F(2D2@bRm0%t@FtJw_3Rn^M}a^oYK=R89rUGY&6k2kr~)x;hT{JEno9Xk zTG9V#_M%;;z(S(=JZ*K5yNQzk%n%pVRPU7Lzhz=x588S!)WMyd8zgNr$6}fcZRZUq ziPJT~E7zK|iQu)ISz?+a;~tfZQFVT133%xTs9J~DqEqWf?hv`~{E9`Mme-YW`F2Cq zC3!kqEU(q?43#Guy0yS0qcV7=6@1QNfF*vWsn|%HxWINrt{$mpN8ns5r%i9}Bt5xOLR+rTZV){SNB4_sb_>yur!VCt=#p=1n~P#5 z1>Z&*6u;O&BJ&;caUW+zLayR|_2wfdVT$=$5xgGQ6a^P{6u*YJrNK@jEpoeW?5-q? zQ&Zv5w5&h!G(QMvFd;DxU~a86?Dq1?F{Ns3+m=Z187Y6*PK5q#y* zpsI5T_B0p4wp47&3$-0IG3Fxlg^vBkU3+y1iYd@f?-@cq6O>al8>oDDOkeP z1>va4-?B~Ef)@K`X9M`uA(90apW8)*dz2ReM`zjYt_sWUWa{_-RFmbfL4X~`a!uRw z8;ChOWg~L0L?u9FAC{C!IU2UMXj_*)%C+C60kF^qxC-`eWrss5k=#X^SLh8s^uG@~ zZ`82VU%psKoMGk#P3^5poHEXybPP%gq4MI*U!BhR@S(&dpCn{NeL172nr98%*eb*Z zA5XmG)?IHdsr(=g5*eaQ7(I~rc0|kvQ2k~zlTs&`!i3<~@A>)F;)G|5_TUKNGvc$X z0Xg6UcPRukiR{IP@Z^7RhUowRCLJt~2sl506$!qcHBG{gBF(bD0*vE9ur4VQlU1j- zD2?`5#`Io+1KZ;nI5zXnXeoR?IbnZDe}-!aGL_4FuSZTKQGtq8z2W5DrKcLJ<`;0{ zMRTzqMGB`~)fJcFJYLcL3 zmN=|ldcP*Hz^MUS&E?p90Aj`(^*fIq5&yxc1!Kg@iH3cLH?yqeO-6JLOW2E~O5V;o z5B^`NZBx8S+BvzzJglT35*N*^pbrPi5iZ32l`D8JMXNaDV;!=YgRD*i9M=?AAuJyi zimA`OJCNc=UCvyVnQGutG%aoS&RB0^DC&2EVC!0K*!*3&F@~ zp8BxnE{(8}+6c1a+;Qvk>G}jJ4kn6^fq=b+8aa;#$4u6vO24XXqrv}6WgYzPe0SF? zEP$n#?kKMFU*(7rC>W06vOAP&)`<=w;z=rU&LZ1Pul=KQ5QEoT4}%Y2OaEu1^EnV` zBrnv@yXE^t){R8jx}Ytu;R5V^>wc7B&OliWV`KS_nU%?-l!H=@O+C4^;# zB&MESbM1+aG-%skSu+h+mn@XkMlo&4uuYdr_Cq56LJUs5K zSJeu%nPcRHtsd*Y1=ok~|KMw#DBqKzzH5y-`$BMV`RosEK)=%4eqgU#PL#?@AaKI|s$ zwY?_ka3g=+ZVyD*rZ8IY^0@NYN)54q0P|!RbK;DpY?}vrN!F}Sb*^Pr1t`0xNukPY z(~+y$*HTLxi%$if1u#j@@fULHSX-r*jUc|?6gvHEsCkR2P1`lVoYy*;xdRPvhUQUR z5|lGm$eb zD!9LjAmD9of}n3s?Qj*EFDM%W^7R8@1Bt7y(d!d9B%z&~rE>h`-k@$HumA!*l;eXj zN=V&Zqr7LJbFYPhWyoU}JHU#hX&u+6_!q4~zcRQJ`cZh}B#ezLo+TiBar-T9lIyd0 z+J|J-x(Hw~_A_Dk+ZY}&GYMMG+qNg;_al;BR}q##903Xhu}B21pC}tOrBns>ErTUB zecRb~o9og7ka<8tgvWTp6k~Dx^%z&3THY}A<5afI%&|==5^EIautgJn~(sSDXzZM0{?HpDHo`A15BkIXudLyX!qC{JeWK53zr9St6_ER;R30 zL3QC2XMA(I!vRoRkH{3&Am>J9Q0i(tOw3oiO2k(G41N(X!0M=WlrUxDXL50YDQZh(TUv)WGg0d-#6$hbfe{ z_NbEm9`2y{DntIeJg`8h;)PoJ&JYaeGm-+dy(gku&p;z09zMf zo~p_!o2aapmOXGGdBfypJoseVj@l)@gwXxI#5}Af(mXAhz=6_bej|3_lprtgGKv~X zt`Dr+#G;KUG(TjV5<{X4Iud}{z1Byi3P+fxRMUs~ku`ca;^Gb@1J9Rli-NXYKmhrc zhjo*d2|Cuy$3I=oW^aPvi1>r@SkPx2Yr09~&L-SB3!sT?+&}OC%ep}2u`DFt1Whsb>cY6A;RE)H?8m+!<8j*H zi8`Gq8@hA)+5&Y0m}H|68zgld#hr4_;cET zjynUPZPHTc4Bv){eo=5DHd$J9h4b_0kSwd*%f&}!0&E9s+H)u&=#}pn)w$}*y!&c) zY$sv$W~+8r&7l@rKvneFF^lQF1Wv4orZkpI@=l=iS45}7ha3*<%>m}y7J!&#MGR)k z1){cMbL(Q1gV1zCTM;)H-z+@{`nE$Zgx2zc8g?MAc_3!Iht&EdX&;epVx3UvXZ*#* zgx(cM@2-r9*D-2s8vy}{lWI9BX>!r(5IB06{N+a|qDz)*on@{PHyXwpCv0{|8A-$BOIHi%qti zh}N%*R8G@u;Yl-tVE=3wDi9YE0Al0MBzCGj=HA9G5s~QS3SFJt(dSuzo=lYj9iAOq zWsO#YZJ_Ws?7I=zV8`hb_fu2lzeUVq^JRA9ILi!-;$0qD1s*aNb5n7FAG@1Ueo0&x z>-*VGCVBK*sokGI z--h@hS33s?pEGrsd#gD-Rq5(;guB}%R;#OM>)eGSKId=SSbypO4S%-g+)~kQd{NGt za-mAHi;*GcL`Fu`)>|72w%ZK{#C318sQL&BnvD6x(o2NWPo-u4hqu`i!p@vq4avJyJG{+ Yqk3{#i9uP{Z(8!6kBF#3ga7~l0GQ*9`Tzg` literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/splunk/inputs.webp b/static/images/auditor/10.8/addon/splunk/inputs.webp new file mode 100644 index 0000000000000000000000000000000000000000..a64e41187d02062ce28180011c283060174263db GIT binary patch literal 3924 zcmV-a53BG}Nk&FY4*&pHMM6+kP&il$0000G0002*0RW8v06|PpNE-kE009rs|A+{v zZQF+N>HgnaOCtI|0nq0A@BQZ!09H^qAPNrv05DPjodGKF0geDZZ8n%kq$47srL;-_ zfDMUdZu}8f!hiCz7ix?iQU525uj6;X|B>qRZ_hryn>R)8rQQseXCLXjL-K9zy}xjG zJ_yper_dwU`_Fn;m`AZcaPz15fBJrfeT()0{$2ZJ>TmlW1Mjr|i2bDa0RBt;=Dv~(X;mKHc4jadYw&jvtwtp+)QQ~~^`mTA;#Q`B(U}@=oscG109?7+%y+fNrIPh4DZgg7Taz{m0 z=kATa*J{?(Ogj=+JbLMuu?p;z%60ni^H{(ect6J1s_$_#SbA0*hErb8lOI4$%>!s$hr{L%&HG z+aoviNtJR&+9c5h8b)lK3s_>!*;R2_YrJJm>9xvyG%?_E#^7O(A9}KFr2K*j!QQ>M zs5cEH${vzs7p|47y~_2{y>zWz?oUbm(oC9NNHY3ppEhS-f z0VqoUx$qlmc~G27ujP#@e0gI5O1?eYBfZ1wBL0_N$zI>u-P6XRH;1n;G?D7H*{L*1 z(^yAb2z_<}Bak8W*Z}KsF})DnNA`lNR0aC@t7jhj^zC==GS@eLDX{?&$PQ@HZkpQS zI^aX=unRDYSI4hZKQ95T%)j)P5Ub{7_&{;Iof^vymkAOo>cTySc1-JfliIbf-?iQ6 zb?hGHL{7Og;ttyI+3E@5*h1+UGn@3$VcIlRL_&5)cK07(Bo2mG3p@az#2Wa4{)ZYT z>#x`A&Yl)sS5FHrtEYvRRnpJ^{`G?_3*+*W(&!Y5OoLT*_l=A8#vkCCx)Gjhnx%hUa$b%8FGL3&^PT^ z!=MjxaR*F{DifUy(!fR=^Kh5{&fn++VPE!%HiJ6d9L;woQ=DOuN0XDZZ`O^~$h&Ub zlQ;@ZwLEnULBd~ClMV@+Zt(=!>17jkc^|s=}9Vv^&8_-9R>Och7NB%+(GuT3(v}tPsKI5hCefkcNg<9!V(_MY>aA)T2`Y3?PPr0`IX7-=>^HD}=Dd zJ$pK#6;XdK{2Wuxo#?A$mnIk}nkdR3u!n?HNb7`pnF3c$#zFmW<`v}K9pB(Shi%gK zfNW9)4uJEX2hU~AL}Er)>Qj1v5EP652T{diMhh7;-U|@^OLu*ZM^t=My0XU7t{xJ4 zoo*jW%hcSyFKEAp2+Jctlx-@3W7B65}j)YhV6HL3O(( zt^nFkO(<)_ogU}owdKl%esgi3&=2c>R%-fyiDorspBPahWB)1KJL#zNBPqVtn4sCZ z>1SJufA8ZGwbth2o2TEVQ)rifNOG)_l{3B}d0${L>=9Pto;Y#6dLhruVDsVEZ|m3+ z6Ilcn8dM*TH^L4-l2H#0ga(*y(xm3TpE_594h!CKbo|(O+nC`0Ga^IkwL&^;P$Tuy z_R40@O*1z4-dK;lsJ{hvYC(EST0PDHp5X8WmdDH@HSv7@p9Z2-!*c+YOUkn5B__-%$3>n4e2P-Dw$esnbnVZ6wOo zroA+MtlYAN%*o=f2eHg{wae7$@LtIEZaQClsRu*iF2a?-NqZtyK8tT~qLB);+O5*n zrC`|bi%Sg}t#DFq4d>pudAzPB8eDDzyj|a-3Y#oL^(nK;&Yg{$*yMG{^Q`-yklHaMepU>pD59SZfeAJfkkiZst^dO}AHW1G08 za#)vujg|r3S)IuKw0VS?{xvA%cVGOI&pMs{=X<#!4^?p?Y<0yx^ckJ3anb|~|C92^ zuwYbC$?KwF4paD{vgX$bC)VnJq zMWS&}e&y;Ov=)wO{HX_Y0wKPBANxz6>VfkhWzymY$v25%nO9@Vj~!Cn^y1Ai4)9A7 zL(WP6>01;^b)bLY#Wh6a8^Wh{yEPAPOQZLfSZTW)5l!{a zuVqRv4Mm;rGRF~BfQ)UyeSR!qK@ zck8bln|jpFXs$&IUe*FIuT~O61rglKcah1Fr_5gVb?-H1?>_4Smjqow$fMlw@*-%p zc|Q4711c(Wt&%gkZ|ShRvjiS3F;LwM2~vU?dk z9B8MLfng#iMC*RhW~O}%`=`K>0v-hJTdrs#E-V3MGkdaRPY5Mm8cFANxG@>j4lCLkB^xWEen*O$7jekD)5_+V) zOc%iMz#^dn=$yX<3i*os_g>s?7S#!WijxsSi<|?oxB@ljn{xJbpY*DnR2~3NKtqYK zx$90rVPq_t>{I>8F%{2G;NcA08Tmoqt>a$*{OGnj3P6r$MKuD$LJx?8YaNNkZT7Ap zMb>F_1_u3y%AGhp?Y%L}RzLs%0B^?Ys#_v;^+x*c<4mKmRYQbu{X&ba66)y=@sX~& zcHYzH%3@TdV_eQBD+;@@v#ONE0&P7aAD@s7e)m_&A|c+lz2^UK6l+O#6!=lEYPW#^ z?mAtIIlt6Qt)S7_uP8*nl(N2zoQ*LD|9R7x*|Xd(h%SgoQ30{@Z8a`>{A^CKzDosyo7H5yx!WgGhSB^GM{z~8McF7kSgzj(A^q?=TckuZB zLM&(P4tue5OS=o723j@kHnq-APhnOEAN$3TL)dEIcAxS?cq0D%a411sSEM z2CQHMnef&sb4O|FO5kAgd5~lJVfT2Fqf4E@_T>e)5b#0lv6ZhEk3PS_M$ot))=<{A zr`4Yvt%D&FEf4EzGa;@EgM#kP*P`~%QV?Uq5<0bDXV|DFEwv{^h;J zQ?BqNO4p{IZHn+ZQ6NRd5mw-I3C;0+^0MO$@JapM+?)ZI7VRf#_!uBM_?(ShGKgGgax#3 zQc)p&O_4BQ0c?1#5_5eqhi3pZl?;(4*rE7rNp{mlzI5t=*DNX6`}O0>F367q1_K#P z#^OQB+Y;seP9=!G0{td16}T@307Lq{{+Cm`&o&@d@QpCPM2(-wB+)RKWI5NY$y$)DA=woU zwXKo9L|WNJivCEWP}n%lP163-r||)!MbZ~Skjo28c+~>A%biH z*+=X^zmZNZ1Z|98R9ZmWben6%sn2+s!l9(zenI8~$ZEP6@*>(L^2d(k+ybD%mG3&f zTG2HB;#}B<@M0&ix<}UP*}ar$%t+NVbOsJkEmyR_d@I+%^8Kl8kB9K0D<^T$gw+AP ifySVjHy5i(9f=?LlT+03kpKn-00000000000002cJfJK9 literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/splunk/installapp.webp b/static/images/auditor/10.8/addon/splunk/installapp.webp new file mode 100644 index 0000000000000000000000000000000000000000..2ea351415ce8f6996c261a40d2f9ea627089a004 GIT binary patch literal 3486 zcmV;P4Po+9Nk&GN4FCXFMM6+kP&gop4FCX8N&uY!DpdkZ06uLpltv^YA|Wg^dXRt( ziDPcvUQV|DdHSs}?B08Wm3<5UX7zi|&(M#U57=M!KjXdPf8+YG^O^LW^)mDT^RfJZ z_;3Gj=MAd#$^WMoV$1?#8MKizl# ze~;)#)Svdg;2+69p?Vqqo57>$U*P}Xdx8Hd{>lGy{Ey|2(*N}Tw4dbtGW{+8uiP8? z-}Y{_-@2aD2g&&xHO5oj<}0FWZYBD4 z5T}NdAn6jzz(J{yN{r}%K1`)oPd;rNmGK`>4uryAaaa`q+#QcB%~NK*c9U+GuAl|@ z>_xdk(Sy>3VuVA8kLSsTSj8WWT`U8}5{lyW#dtAQYM(m4SQ7aq&@9)!3?|YNLPQve zBWlb+KYbQ;s0x1Q)!1z)dvVjYADC2qKk7$Q*LUwLG9c*O&3!%e_tW1`eLeK@Y2r2J7b(@RY)G_=ywPEev`T|sPm6AB`D@4?!n zR|V`=SO5V2`tU(T^NzkE7Yxd*s6p?q$|}PAJtluI@~mxF)FHRr;B$ z163^c-Y3dQ7W+jpjAWN!m}tB)fjU=s*K;gQS<&a)q%uxM@g>0%NMcAEOZbn6rE8XK zSuzg!JANOEK#BzY&QoH-$b?|(a#lO_{nQYODPzIGM^JbBB@H2TV4s@_PoZlu1(g+u z$(g7k6&at9tt9w*QS+uE3t|(T#5xGCk6fi+kIl2Fjm~B?rj6!gitw?mPKA01oUr(Z zIW{Psi_Ev**@3VLT`EE5h^e9>20^C8Fw+9K?3`AWr6B<2;kez9 zR~C1o-K|Y&uO?L`K@>3ikI}U8Y13npkOcB83nI3MH7v3OI{KE)psvBhtd8o>?#(cG zr0z%F@iLtBn9g}y0gpS?ou?WF^Q8o*^B8;XXlc$9K9I8 zQ&s+L_VHZXYwY~T6Pg(qBVPl2O`lE=9IQ*RUmpV@(zHo->lS$61IRuv#_l0LK;(M$ zG*boTKJ+cp&KA1*URnarIV?`BmM{z`QcPIS8f_^$L$J zV>Zfa3<+7V|7wCAaGsti|Fn!=NTf|IgM_NE0c12|Kqm3jqN5}gYDAXzQk=p^;%J(zyR-< z0$-Oj3(8;oB8U9bq`-gVuyzT>|4DK{tkQRl>fzn7wtc(lFv$ucPV-@jHs(LPhXN*?Gq{MES7o?oa-g zsB7pIi`e$H%fqN3PxkCb_+yTj1D&@hl z9xCIH9ugi`x~|+nAv5Fg(?T2Axr)3li>H+IbiZG6+(`e>av=ZAF~GXT_K~TTyo4+K zOM30%j1PP8>Uxwc-|PdogM3lW?JDZdBG;jC;z<$*Ar;ZYCOhDK5y|) zwJ-Efthbo-H=_{Yhb);N?hSh82haWg5qCKr0Wx$4RVd{0FZbgzxjy?3k=YNc%Uhee z*V|5_-m5FJo*mX&e0OIRc1LJ$$b#0Ng_fYx4$iqs3zhdxB=jkhWs$PXRO z(gp)2bT?FKNN=L@KmB`d#~6CiKh76brC)Zr3?4bDFSOW5rmj z4MP9C_j^avUO%7ZHZ+upBDfMT?xUdNG3fd|;(D{P{jGK2Dxu`? z6OqhJu&_(%At^LxoA%DIwl+&tLwfkj$KV#+>P5UIKa9)6rI!(_0H7rEHFC1dP3X5X zM*|R0L6Rd}oIP-r%mPK&#l5~=;{fToPUpc)Xc^c-to3uri{f1eK-PTX05#ix{lOSi z(HPdXjN5O-K8uw~dsT_Yt!NdV`rV;>+Z|opm|_+`?^LwgpX72Jn2!Qh9^5j+P2^84 z&dX4)QN-{>O0%^~-bCg(n=jhnLN#W0 zS46v$TrA5kQ(%Ilrkn##^J|1a!|o5^A}Y`F)LVmy*-wSNx)VWanK4s_T`zYY$5UL$ znoi$P$nQX1!AsdBPfA%hvX*>Y>#^-JsS4qdZYnqtSOM_A_+Mi)fG5q96kp8EsvR^ryki4TY&^<+-ay zrT#5Qa*iFzv&SV~m|T88GE8T)%wWGzp=9cmc&vb^7pD%F0K-VHwXW zp+l6FF`#*o;Xj|9e=pbm*3zIn8ZN#ov-b`uQp|hkybt9Yb5_WBpa}J2c(2Dt?@`eM zC%3w@VF@ZI=s{=h!}VoF6-dN^9V;E^=Q8mMK&nYzQiH+%o#}*yN-BJlq7;`ouemYe z7?qyS+m%{<6J1Bp46pOwk<1#yVMbLQTgJBw>RJhvQGR~~-?Ro;aEPcaaC3_{&9ePZ zUhg^Tc!miGl#5VOY$)^+w=PrjYO`54V(!$kB7Xll2V!>w#WnF!CnUbdkI2z8yzk}8 zLx)e*08jpNSV55M;#OI1ehh$Fu&w<`ys)!c3o=ymWC%Rnx0$QN@Gu;&)Di5=U@3GG zT{o#uNxL;(Q0~apDiCeldZj}3i~mWu_#SX&83xxpk-pk88s_IX4Doak1g%)(4K^qq z95E$?I*y0LHK(#MjYgTOEViig2REhdUeqSi-d9NcX!G^EjuR2p(i;N->C$gs@VngV zKG7>XbZ1@gBE5XmbA+Fg<#@07A;MY;{6UvB!~z8L|9Na{-q-3%PRcLf3;Y1$6FG+WKx4m(?FI9Ux`56?b#T7E MV%7>YJiq_|0EW)ru>b%7 literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/addon/splunk/searchreporting.webp b/static/images/auditor/10.8/addon/splunk/searchreporting.webp new file mode 100644 index 0000000000000000000000000000000000000000..f72a9c99db4991b2e96e313e0cd6063fcf8b1336 GIT binary patch literal 5542 zcmV;X6#I0d>u2{*Xg@*w(Vxw~-TM%EYxL3Ty?s;k z^S2-L{u=n4^e?wQy>;1YS=wLfy>x!p{?q$6i@ywi$n^#MYx$4+4+{OBI*0l%Kwn$F zvHxrQPl`|Y{(^p0{lor`xCisE>L2X=RsTcbqxNs}f3kl7KhD3gf7AaF?$P~6{}1&( ze1Ag!EB~kcN5D_>f9~CGzj(c@zimsOGSFKq-^`nPV*^EEH!QsFH6>BLxv3GxT-&J;OBRrKPTc@;J4$m?7!!Q}bCzdR&*X+wSdq<1KN$f)8HAKo{3Qi$VSiq>G{OvKG2-_qNhjS=?N+xco6E^IC0@2?~#wW4C+ zhoVFs!$zeI=o|okk^Sra(9E6QU#gx!y|C2$Z9AHtk*$?3FC9#>X;ufop6!9rQEMi9 zP0Snn2z(!nJESGxdvSu>gzmDQLvNx>qgKuANpx!2P&2q_aaBuGzo@yL*9j4_wjW1O& zG2=fbR5`tHSUw&2%#>go%WU_#-;sdkx17vK<7wpS{F!-Xl(b_N`Cy`J7<~ZtQxY*% z6uNNios=He2%0{IKG(XAI$-FcQA>g{H~_5D#yt zlI!!}KyHCz^vl_jB{*Z2;IVg5FJAnfAtgv8bI1BxLZoziq{HX^8DE*@9?s5tQ}rzi zUrs4kBpx&DvYz`A$B8NHX0ecmkc8str8Nx-r&sp8gdmOtz)GanQB zEJ|e&*_$XZg~(>_`lPuJ6zpBXlRmAR*plegvwIR-gFQgd!7i)ovh0mkE|;E|Oqq?J z27G<4nJBo8HZvILPEF7!Cg>BBbP3721me5TY$MoifZjuuLUXkAm68;#;5~-Y-h9lz zP*v7Y0RHX9>b&?20=8=mKf01BMnWc%IT@M z&P031t0-%?IHT&oY~Tv>je3((A&n9b0e-F)!eARIBOYhB?Y2e1Y-*uR9Rw7fyk?|J z^bd9Or?cQy0@ZdqPQO@5`gD*w$j$zyuhNs()`Afb(JlAoxBCR6+3hLJH$=z|zt zCFZ1IuTYY58!6q-!}V@2El8?^GcRuKNqG3(Ve`BQe#v;FEAUF$jtKVbrVguk6j|VB z0ZVBRLoj#Mk&Y|cE2aK)%xfkqG?8(T3hQPGHT1+pvfRSkm}ZPbrZ~(%<(l8H$coVy zms_(?NEnQufYaHT|MP(Uu-K-*>~622N%VhyA1SOy@16&uH~q>U7GD33h%a#Rp$R0I zS$!ch`9LZu{wj5mC(WmtAxN>v&G4`0i@Mx1%I#N>K~pjKVOPIpX-wz-zwG6uAQ0vXly5GR~}@IPoGs|Cdx%ba9HwmKB%C4_v+wg#glw_&_IS_~ z69EtBQFS9Y6^lbe<$6>wtA-_+4P7a#`>9f(`S>%|C#G02D0(+1%~(Wz?M5tQwVFuu z_dw@Qo4A5IxFsO@YC)BWj0Q&+Z3gr&$!1V&1|@1yS8AV6E|kC|L7AdtG5g_X!|J{n z`_GTj=n-R=ASOS~*b98maD&Col4=rN$ClccYFcwxotkntrji-NT?7`1E$w? zlC2{*^V2={qH-G<)j5(@uHok;K$XDjDWu-!gN(LD_hADo7@!dwcQiqtad|N zc^%%r~qx&Qz#r&2^>nJ5rwSpaF_Qhb15 z1yEq_oMI?hmOEqn4QwtNcVk2?WLn1&qiB=W)Av0@hdIS(TGHUJzz90># zRQMM>r$^1My{gz^snj}{e;%yT*5WlgFb?7$)_U#+?0ibTXc1YCOA59q zZ>+dkw334Bh7D4$Oe*E`hx4`btU!Di6tT)rZBsQEUzG$itVxfXBPquUO9zF*6pew4 z1jmk!LO3uIG_%kE0001nj>C?RnPcG=A9)nk6GLx-H-GAQ%Sh^5QIuC-dV>O;F|2eWJ`uYf@kwud- zuo{kW2dYz&r6a@d8@HdMvk%Xx02wPgC9)0^2a-lysI&q$eB#0_7*WzCQBVHS(RqC>MYm5$Ew-+{}gp$LgixSFyR98U^{ZWVCp@NjLpgy>(OcG)qtp?8LNb7V$n2g);lzmalT7 zq9>1Dp^qeQ*4j6#g+4l7tZ6iOvfa#y_f|2YsVZ|fdOh~;y=r9%AAZFH0adCwcuo@d z(5R)3SN$6WdEmc-mDnnyi=|_#3%J`SM%i`ZC8bRhXp?w zInO&8>r6Dx?oZU?8mm%+v~cvZ$|?_7)cN5sZUCqRKFW&k(w&-S*oOi>tH(<&yy`+x z)5MCu;-|wR7PcDkp(AgDlZMEQ0bv&)67l(bYM%Kp9hp?R)ev_~o^Sm$Zi&)|PR*Q8 zXnKp6N^Sjhdn_haT0_PF!u!k*x>4Gj4otEv5zS~t)smAr&Ju~h#Xj<`?&uU=L;|%* z0>hZ!`c1HrKajJrb4B?H={2P}pG}Q3Ydp0o6i^XQ2FT7|Wyh19*xprWKr*Lg=0KKjh98a?{V`m**z_rwD3*-C`NW0MY{+r9R8TAlNQM#Bh*cysQ3uS z={EA^0e9@D!?+`zO<SLV4l95OZ~@yi zZ~08UnZF_qQLoFuL=X*`FZ#7*JF}09i1ted3E#@21;vZRF4zFv%?DIDMqn!_zzpA| zxY@#JT*zX0=xl{%^1-9Pcwmuai-mq!6SElHnZL5ffxDkr#_sZSyggSJdPb|_hI65{`Zf6C zunu159+Wi(0;ax({asp~7z=BI0!p3*StG-^Rq@t^@_#kk0%)z&fYTHxBtY74IMU;a=z({dF2&)5@R`jA#O>q1`~JSuQzt4q&-J~4d%FCaHo zNm~SUEXDPaezz~B_Px#`pV-?{;I4Fq7JjHDQDscNe^LIK^}KNI$FJ$uD|n!@NX$H~ zj16K%Yo6eZ5^m?5kaQ^XL5~p;+(i$08*FyK!z1cWvqPfv!AM39H#8rIlBwWiZZE%Z z*Qz^9Gylx9eZ8D?{iM?od@_o`A#DOopC}V&`xAZins#MaMW`zxTZ@icLU!wtJ`^KN z?D?ixpkHhpI65d7bB4h$ZPlvDPmh<2l5}vasc5dJhJCA2AAOUw#*K}?#J_CN=LbU` z6=jSwe`)Dp%341F3I5y;V9ni~&wcJS-S|7OSD6uv-C%#d?uEwBFlUM(1~L+tO4?D@ z?rQ7%Wgzr`BfKyAJhS&Q785tA~7kDrSZtJhk(kzIxb5mjn425(@A>>>IzY^j`h4W|3`A@Tg5fpy z@*1-FZ9!{WT3#e1YULv__=_JM56m=%Mas`ScKT*aw$synjun(;t4fGJFZHWV#gzm5 ztT)U<{SfwxxFMExhNClb7|FC=+iOjNucW;)80a?N;}2RYmmT}jI_+gmXCdHrcIs7< zzMF!+s3m*M#J6p&p?2ne)l*yEcOhuK1rF1W2++C-n4gNE zS{Um|ki=~E?Lg)9m|Z%mRVz8v+3y%>At8hAY8o_dBixTP2OWgl;%^Q-*Y_@@V|eFv^}`E8YC7_)f3vmpDvJsb9PR01Oa3U*w5ExmjEoXfUmV}VC)5Tdcbai z&9vPtR}V^lv`+Hi@tH4S@5wHyBSUWfSPQyS{52FuC4QB6CA+z~c-`)cl+XJZ&RXur zJYTGdfBkZJPevl(f|o|D@Vco7vMyiHA|TD0KSYE=VkbG6W$t?YN}hhZf*6#S9=?fC zG$;MNan$z)*EL)mHaC>h29eKv+@+1)PyU9hxi(pdgQv3Qe=BO$Njp$Y@2+u@L9}De zH%_`!jR+-|HMsDUCMwifv>Ym z-t0mB!8twedUSOjW0k2mJvh-yMi>}b`ylv(>M6qY4UVKgy5vi7Wbfp06vGzMe@3K zBf??Xiin>wujiDRof8@-V4`6!(!EWjrXOexiZ$c7{QxjlLw%%Zq4P#*0~-v!9M*7i z;1j!jx3-{{vB#V5`e-5q0ORXmGWtCQoMb4c%E@E}Wx&|^oil&P?Te3=y^ZZF(kx$+ zSG+xw5mZNkhX2A`@8d{U>#)9@H(}3Cx@#}DmSb3D1(VIbyJ$-_m2z-bAQkdl>4>?n zEksw@X;U;xTHX<{&5pNw&Yo8FcmjLemG)*03^QElZ^5^SuG_HHw1P zH25N3Sb<&<{zCY)s!R542%%OFw2@00T>C0P&^-*1a}Q^9%x)N}QsvQy_y8O(ZfK9K z)1_&oHBcECKjv$3Aaums?hkQ(GgH^@R243j`|z!BFk-{`nGw#{Z8Hng0~a2cCT9gA`;N(~y;~?wS&%h0~D2NSrm`L1ENyg=cw0qS|K|5vB-3v!9G zM&M#8dQ=B7$31i^WrS=Y`1!Y49~}a+9JKK3qkLt6 z8`9UzZSMEy3IF%oj340P|9`|7;diik>xh#k)j zcHtt-Y(K#`Cqeo`TT<5Lqs!k;pY#jq3%A5g-e?|X@^@apUwFg)s=os+!2!ab?A5vN zxpm!#-*$cmy#3z--@+el*G+(d=a0>s7lh}X=G^OUA;0qPs_%;{@o)O??>4&^`j4IO zul}A~zliUbZ=7wb@30%U{+*Ya&zy99K$k!N_lL zzwf-q#~a3MPXyorApF(yieO7$#8c{7^RV;WGyR?R%>O37F|+V(`!)ZK@Ie0}|MYi| zn_thn@*Tn_{cU$|PpTi=H~Cl3i}EKzh2G560>JEx|L^dQB--;3Yud+xIl zpr;k#VdlE$)o<`4d&f#3mTcy(=k2@WvFs`KTmGpBM1QWQ>wE1RmIvUwD){+5TFtW| z>cW!{20F?Wi}VviOp2+c7qK~J97p2ZhQVgW;Am~e;Ly|#LPlXp-5w!Z5y6X1!Xf1+z zsj&`7_efOT&5y8{Em+|E4sbdQ4%dSHP+;?SusRCF*z{12Z#D>k)p}J`pj~$QIPqI~ z-~`DYt!mtt0o6#P+ueormUoOyq5a^3)L*T~=x+WkZk_C?46K#6s#T(PvcmddIl2Zd zg^87APbsxj9g7mVgDh>ikq3{CM4M3T*T|XK$cfjQhx1J&T=XeI82?RHKs~*8Fng^z zizfKSzD?G6vD)Y>zEYy5s@Bl7#T@30y{ZTZ0{PepP)^_Pm984>79{H}J=BAe%ub9S zfY*E^`+SOpx93|qv%wcBaJBKulj5eXQ&KSRu{U7-ovY`$0{mNDlBSTWavUR-bgzX6 zWZhsR2lyWg{&QwM&$POF&8^lS_x3<{5MjR^Fcf2Cc4u=kdy4*yIx{lDo(pXH@%|Q5 z&Tw`2tGQ;h6r-m`lge*=az(J7D)4vPE9rGZ){r!l0C1oUS1-Cxc?CSgv&#w8RM~-v z4*IQHg^%I&KYTm@Z(!P&{-VEbJ<}=f+(}Utz+l!Tnejv7PRRxn>luhcgj4Z zP}hW$^f3+wT@$1#FE^AYRLD23S4Z0v@2>0cPUQ*V=@yFmV{U4!?p$W#Jtz~x(*qV# z$kg#in);Z?Say-8j+bd0DaE%aZRt`h`B3;ehxl_ppwE!tJ~avTUjRkHxtKjQ)wXE$ z6!W304gTngX{3h+`Fwu3YP$%k2t1~lOL+6R%dX-g4l(Js&1$*)+jlKj8|bq_*~yqr zZUlQevlZy!?fmd$Z+>cI{tGe~aWxA>Wgq633!Hxg2nPpSqt=rU>Aw#=8LBV9wKde$ zyZl=)y#I*W{@@AHQ6Np5A=Ga+C$Tf%Rr%o*EZs63zL#xg(}oe zDSEo1_egSXdkKAiZDdgV_1Mz<^pPNU;zOQ#Qd=3VNAV_+@tMV-Bji&MKaL@!^O>tn zy9&qWw2Zk9G?#b#F?r6Y+uTD$mG(AUSZbD3d&%|=JvO;Htb$e4$%~`id+j1?$H}hd zFN?6@`pvmT%8P$paX!`x0TFcQn!q&(bS6UK1`S1n0KxdF-(u_o;cW*^nvS$|YX*JV z>txA;xW_~aq8yW19vQnSQhW9NAbYmG{g{@BWK{;?iG+{rT#2a1gbBwU-FNuBlO+kcrcm|oKfhe zdsWG&8mc2OJq|!3i2{@E(RKCH@uCw?91C@lF|J~SIKycG6)>YN+aV+Z(_Rph76mW` z2f~q@w#$s>O*@AZIfineR4;yNjSsT-kTp|&7PNp+_^Nh=6j@K)j@CJ}`&>gOu!F$8 z1=+eC*jp0LAFI(+hw_+D4l}SiOMLUUX(cPeP2bi^`o|3GzL#T&)7q|1pMwMLRo=d} z9~ulPck@UeBO-;`)py8*os`Q(<$eE`a7*@k=n=Yyy`zvSSs@pCRyR$))g@u|?+5tZ zRq)H=KdbcUE_rv~F{aWAikv+RHsi=KQDH6NxPc%%Z5^boI+*)RJX58!^X323=F9(s zNs%@eRF^%}BAd%)$e)+ldkjK#nT!z|Eo<>-<^+b81EDZV7(U%-uCqhdB=a1%r_B74 zWgS6ZZp8d%>uE9GoR~NoOwn3T?Or?FO`02EED^<53LlZMV0Nwf+5tHgyCSA!qemkO zdO7iHwE%eT{4_%k!L@~>{)*%qi`<-WM9r0xIwFYH6pqunq`x+qelYCx07VM^ldr5Q zjzCjunyF7vTpKp=QvtlOcNjkUZ-C?`5)uK|sg(bl+sFoTq?7C^1J#0~QQyI>%h+d_ znHvs$m}Nfu|Hjj#XN0|MT-9F$A{Mxl;R+}u`F}GedKpekF;1*0 zXXU%8I~ZAM`7ez;Cfc)#Pekj9A!^cHhKy`%khPw;RMvI~>!qtjGb-@l>G^UKxtUKU z^>+4g%m|3p_xOkI=ktY*RH1x8Rd?$3b>abbR}VdA z7QH+SB<-X2a5=*)I;Vq8>-ki0-=6biyg=bv7F%H$ek&gbgA0`u4ITpIuR^v;q({2g zaokJ>l>kV4t9IwO;XjtBLiOjIW#ipAPUVGs;rEK|6o<#oMhCn;n$_NY!NFSI|GSJF zU=yJ|vw0U9u|h6k*Os2X*A(GAHI9P__zLw=cB00}`(OzU{{`LO3*RgpD95dNtcC~b zskeLRb#4KD`&*puFRNPa4jc-WZiOh$p67CF;)C_&znL>mK#TPW+rYKW>Au+7LoHHT z&ZB!*M`u4aV4C@@Y04Pg9ZuF644;jvkj6S_GjG_PX`a5cp@{5yRks9N zEsf|v){HbYn)CLqNpP*u{Yk)9EoT-rL-ww@{|bzMSc$#>v3Uz)i*4*=XA!1rj1oJ^ znR97HQ|Q(hZo6Mjf8R#~g+cIDSN|%rZM$icZ5~D2JKi2jCAl=m^M~l9VL}AhZzWfn zekPnTQN{Gi8Fd4moa^CG9EQ%S_({B8&DssPZE2~OFjQW(A`$V37P>K=t>GGSaNd$7>8ZhF|0})7IGrfhe2=gm_L`Jey*0Y=Z zMJ1lV<{Bk)JA~+ImJvn#PR-jW*djAzj}}bLzi*M*PZ{9^5Zh?La5`9{L#x=ygwIS z${u|CX<1-QSEaUqDWVhF9$F|T%Fcgc))Zf?3gf;2&)>#9uz14*UQND0rKXUa`6o1r zDWQXa!c{q3x^_Rs<2vYc6Skb1MhCFPJ1mD~k_=6Cu)lAH}A+hvO z|6Cv)8S4Ef^8cb22y)xw%g6PJ)bV<9Bd!aKNF{J70|H$f@(FT>TYC8_z{buTBii?@C=RMrlg6lJ_7M5&EwabK8GY z#>@)mcnYSYz(q#}f4e%_nCoh(%1{3vWJI8~UU*mKhL0VBbNsNBFq_1QT_yXM&;5%x zr4KHj<_ao~Ab;kYeTm8A(CCsIZg>9_FKimD_t1D0Zk_nbNt3(&_mF=~WsP}B%33A! zZ=GKZSM`WWw0`Ym^+Pmtyt^W`9T~x3hG6g^mxsSml$mgA2HLl<^_L?ohO{&?N%|+^ z&5-mo3p)$~?H}0e8s4vvH>mus%Kqwm-ySt}sRlbG;^1t_4cW%0N+AKWLUW-bLbzoYc*`&V*Sfk#C2vs+lFEL zdYKENwfh6Jb%#90w?K~1l=LLgMoU;M^1_T1LKNHb4c#OzlPPGRvn`32HxYPFq#**2 zw1*$u`{Fudh6=ne9(>a;^%ib=x%_bEOm{Mbx~}O79BIchj)$4(g*eOEK? zH&XCWx-vSZ=~J(ee|(mr9c734n0w$Dwt1o3C;MwU3@2%*sf;En0h6Yc@f@i2 zPD%URT6wlNBlCW?D(^#P@iwiM5e&FcNoM)6k50p%Z6Ww$hYo*dA=P}-BV%$jJfufP zUVk3%*z6r@5f4ThW079@nxC7qG2XS`6LPI+Wk;P`ly z9$tcC9K(Ffg*&L7x^&oc@U?~XdPS646m(Y;&qqTLFPHmD`dDnN_)S5LlNK2h`Zj2B zOGqvbukrIITb4z97-RyK3p%KmDo*N=@9d(f(ngx-f@fj$4)yt0j-_rVH?=U%kM|^* z4eR8iZMHDY-JrMB0PTDVnomv(3mU?HU+Rk#*#A+)P&9=iRD&-AMjSahm!wxK@&gXI z{sCAlj$BZzY=YOabyCiYJs0rYefd~-0rK&9JzQ>XQf7ow*G$Y8_`|J9vH`Hd)O9K4@No4`@91m_sue??3 z&K^blWvW%Tjx*1#6^Es?V-6tNI z-K%A47I3P_6+@ovHHB}!7(@3YZ8}$mG`ut6NLCH$(;>rkkp8w)x03#Z>ym`WCqwjh6t(dDA|R zSKfIzo`u#@znubytI7tfT9lKEz(<^6*mCLU8ogZH zr4)kDf@Zf4uMpR_6Pew^M{Lj_OqzljtjXS@dDWr*8wbLmQ@b|EWrf79Q})wVLSY>q z6SjDNyh!<=iq1O~#``b*jwfyly$Djbmt6-s@_g@*Z_Uz4L0*8@u7mR`X>7a7*Hh5f zI0PRl@Kc{==T&7M!J$FHcn`Oyfra0(bILe67_iZzB9Syv7gh5x{lO|dwAl2QUuyv& z`*30^`y^O+P*Gss=4mt312^Sf{gevrOXv)|?pMm?@~Ek_4OO(3ggk+{{~7dnn%Bnw zFO88jXp`j(@F_i+pv$|XC<=EoMW;Z>&FPPjz_0`)5I;;v6ehQ;4PmJMFveJ*QpX(j zvY@IeROwxm6VO5ELzX@j0@uL`*A}=j$)3BxZV%js)j_0MO`{ z`ULW!7+Ig6xT)CTx(S9eYWx@mtu8J+&AALGJ!h9*luiEQOW-CEp(_8&0#1|xZCSBr zbYmeu;@N`_*m9YLl6sFsmx=pItyS|J*On^@2>MxE%ZPI9SANygFE6v29bFlbzD)LD zVR?V3)+MMCXV3y-YqV!w^N@Z}&+V3aP(l=j9TmbiY$tb}deIz>$d@4}1q?fJ4|akM z7Y#cWSAB(6R9H<=CeQlj`Ui{i%zkop)l;m3BipDsw+?u_l@J-fT-60;?k?z6(=-ug zTvC?&sMF)sjndPW-G$TF?j(2jD1gQT(oORmW>*~TlfBGcgG3}LV5&-PPXQ~|3(79N2-<_q zk77Ghe0W?hU}qEU`3&zgrOEs!FeIcDHi2dQCPXiei?r4fd#H$3X_~f+h=(Ao7nY8u zySVXHWaUlsCE`!JnThy?yM$@dgAkb+rd9j!y}KHA^gW}b+FRLM4i>fz_$*FTxIwDqJaYDei_jO1MLr}(7s0#AGWE| zrj4|gDHl<$Vc4l1$MkJ`m@w!D8BQV5#8<&ayk*sUjD6b0Y!PH6k;3Ji4b?8rD}g#v zx>9kzTQ@(xKo=wSyG;XQG%h4EgB%CFbG0gw&1@@5Fvr!aduMTQ?ObdjkyDS+lj~cElDIO0*1mZ)6rl#=a18vSI%O^{beebyWxD zLp_}Mu(fj`?nhniYkx6m(oE!sRTU zs<8-2Q^JA!aKv+*xC|`ke1L_E)CR}T%N-Z$c#-k#pzzpX)ZN# zk>a2|MQBcmE+H!mrC>-F*>3TT%|&eYgui1IaFuPYfZVv%vJhj+c29oQhH+bcb&5bB zyoBQ7HU-a+K8rAr2Zec3lt`?I{9*!6A1*~M#yXcrbk?kb_^Pkj)C4@GD<7xGU5aJW zyH&s2I()8+xX~KFY4&N+pnEwqRY`X!=MKZsErEN z=Xt9rN=lefU^)G1D>-+WK$jWv-ZdmOr4A*NLfAw0{^J7(nbqMIh9S5`rcaYxEcAWm z=3xJ!DR`&jZLzrLd_vD?rO;CYt^WCOcP8f)KiSf0&~{xs#*%mh?y`cgT0?+uP+l*tJ(aRzoGT0eKP7fky6ws*SE@x3h<{}~A~w9yI8B~-Mg+FaQ3pRpVpB1~p&9!faDDYp+m z49D5DYz1DMF@)SM~0keb2=B*~~&RbNF;kfoL1iFitVFC6Es<2|%FN;@x zl`zI1W?NqFCVc~l9R9q;c8jDBLCUDX)zd$-B?qYz$NmX~{L=Jr1B_9u?1aqrw@_!a z*y6vrt_LFOs2s8o|A{&q&S)8rJ|7o5-9e*`9(+fmV<$i)`a-*;{oy&T8AaY(TMA!-mp?fBiHK5Zm_E;uR)}9AaX{WK_t@xs zGt$EKxBf|$hq9tzvso5>y?itZYuQ1n6oXHruMVmhBtHqkVeet`26l#~Aq`)R>{63P z#)wNCrN2e8ITOIY8DvH%95NZ<&KL&tny^1Ng*^%Cwa6M>Em%8e6>xxO7S&>Z{^^Qt zujQgl3@?T0LbC_1dc}FhakI~90nycUq8e;8*&A;rnNn-;sUDOrER+XEx9G`P4IBmf zXm)e?=rbo|j+FGWdW0HfBfX4E8Dt?okY4x5LV(t5F;{K=@djYmZm`M-vS ziMZoTByQ!eqfNS6_rVH}b-yB0AiYwVn*!?S zRCAd69$AJBXVOD5K*$lM#@(!?vy3XE*&I&n|*7yC_rn+CW@Lz0H@3N=;E12 zj$^YoA@%BBE;fN$n|Ut;@1o;ceP^Q zxG%}MfII}%(Hp7iQ^iodB}!Qhh_pKb1%DeqZR-6p!E!c+@zx3^KDDDKuZ#-b>hKa^ zrGfFiU!?}HjO0%23TT|^{}5TP?j9%^0gN|^@dh;33evv7;W=l?%}Dh|(+N16iML;v zI$w3@fr0Cn_)_++ebr@POG4$a2)vdBQvjO6nzaR^Sk!cZDs$HFwm(RkV~H56i~}vG zDuZsk5_R1|xU?GP?#ZSCIi|98to8YGWf#6sC?}RBxE&L`x6RIkC?Dkedo?!KAz~%e zh;y)Lk4oYvv8EdgN<$YsZ71*f0^q>hTI}_9oYNgr>w2baeex~14Gb19yFv0_B*k8Z zBd9iR1gTZg%imJ$yU3m6Nu!`ZP!~ z&?EgROv~>F`FTYR!&4Cz^|R%bpOG7Z&cghsdrVcLm`va4yxY`AB7o0|h~5 z#iVr)lg5qV{jKJDD@R^SMK_2=B#@FS9hQ8ZKhddM(hNvuycJ@eB2eaK+z&+Z&kQ=F^g|Yf zjZV!5BmC$0pdI>fnWhV`48_EpJ<1H*C3T7>5C3GGKvJjzHjZXb=3O%)n2Kn77FDx27<)Y% zL|-znC*W9p#;^&}0ykio0hxW)=yZ-glw4lm@@K4RoR*Wc%G+MCcT(V5Jdl@6XIE6K7c2-6<>hQS@nyIOCPOR*1jNs`yyb{$Viy9%Xa0gWB<4#skaMx zh1Z5LRhxe$+fBq^Uj82Bo#43BwO9iEMBJ7+x@mCYku5_4jTehr^4h7ObNLZnJa%aY zy}HxCb+kQfFu@DIqaXS-d(=3wCsq7~uL6)0nGZf90`lJBwum9k=&zA0K1$3|(ZJ%c zpLE+`F}(#_dEDC_TnbX}EGwNA$iQg|FEZ~B>sui|%N-YlE7VV2!g}o7x!)Voh=Mfn zu$IV>#7;)k@uX=m^I+#`W!8~w3S}^%vF(ea1MlF$CE_tb>a1wWX z7M*;^YXYddw;Q%vjgW$0)AI|TgV_ON&X~1GWygKADJ;fXIe)*@fflDnJAuS`eS&Qd zb!nj6c2t%NF>p}G2zAda!Xj(P(rP^h)uZ#aP68@ii+7TDC$V)PUP7^If`*QdIuDMfS@ST z3(>(7v`k!QOLC)?v#pEzKe&2>Z0;a4p@350I5&?i4x*UCzSS3BAU4w4?A&hYuEI2X z&aPq(X8VpMf;_OVLb6@T@dG+=SAH!U^R}+RHvTM=HM_JOdu_!2wpv+7FLXX8Vj%sa zho;;6Yn`RVhM@P9qeOQ(7WqXU$aQzFZqI^}04gcz=6T|Rl*JiPO)2sF%1rqx)y~!NEY8|4dJvAs#T3{~1m?Wku zlY5Op(hWkFcVhN!p0u8|V9GO&AS?rQPWjrhm|^91y^BspfB7inv6P8jH|2OTf@wxP z!v;4vlc%&EkN8^#)k~2 zF^nV(9rg#+7fCcpS?z1Mtg#<<@}uvryE&sDgcUyLV3Tb_s3(i@qp~OY>8Uro!==IE zWJu`aL5f%kJoFGqV_kaWzMknj|MzRnqd$R^0}K-@+bwnVs~AJa<={ zk=fZ?D)q@v`$I?WP_{cUql1t4-y9iaV-?a^UUIv-!f(k0ya`xJ{0ghc}{3+=h zshZLyqJxfwmQ@C1I~n7g`~$@AoF~ihN9krUk*fw*4cBjO{$O_`uMkcWl6lWkxKnYc zS&)Lm4Z^u#WABGQ2Dr0U6fKe;ax{Uv;BfLS$0dUpJ_$g!dHj4q>+4$759Wiy=OMy-b{PjB2sOGqyY)E;Yl1Sjg6Z#A4W8OTw*=*L{ z^{E!B*C6tqewogiy%=1iCi?3$q!R?6c!ZxtM3q2`DFsWz{fyC}Mr`V0$COn?%hXih zvQzmjNtSb%V6M4DP5Q+38^RQ}F-8MAI`1Nw3RfXX%*ruK0u9=h1Hks1!$=*P0Qy2s zi9H3o-2quzOl0q%;fS%=t~R8KyV%XtYDTC3>6JN1Hj#53Rm)7uJS7+L=DNcC0rz@M zr~acV%rWTFY%BUe6a1$#BtJKY32E04lY2K8iAj z>Fz*3GG=d>fgvc}elElv{&h4l-ZptPGHU&?jed;3E6AbP?sYIIuaJ6Yz{PewaO76< zQP(C*lS{zWV0UeM0PE6@UN^!bbxFfw`l$mxXbgwetswP%DGg}mQ|6UPbvKYA zE&A99h`UI9lJ0XupXBGp4(m;SollISQ8A-<%XO@6I8usq9y(d(m7M*(%ZGpB3>`mMVtrPwxn1jC)z7LQuYqXrXEY-1;=I>op7`5F9=DRzO^(?| ziFusLP`O9G0YAvmU?WbS;zbOeZX5@?dUZh^OXgDp5IfSTX2fPBd%A0_x7(Zfg?Pdj zGu^dnl6KESYp5*6_k1i<9!i8)nsx4eW#vURr4Ck)FU@pvzoPu>QEb8vG4n}b7sEAg z^n7F;CB)mEIHfTEvI}+B8n6?70MlA{!uinRFfUps?8i{imI+k2k@T)GaT!1&D!ke8 zky5*6yEWJGhKlGMb>qW=O<-#%;5n3^2 zIXFkc(MLr7lp@?dRAEWlwo@e&aGTychc?SaWQ0!GxULHPLjM^co@Xfiehl@p&FMC{ z4yxXVmB)t-m~5B;-}*CX@zR|+`N;1sh}&_qbM$#FX58M>t@pfj-;ZbsvldhTB^!47 z2sN|h9aI;%BuJl0v8Jp>qkQ<~4K^p0d{E&#B+Te7siI@iDym>lbiC4#c`*C}ab(w6 z|7yrJAR1Lkx8Z_Oky|)NX>&W71v_VS(p40cTT^fPHq>_R5gG0KTlGYqWto_S;rb`G z#42s(y*ED#Us$3&fjlRgb}Q~QK@eo1E8(wnTk@URf(xRHX5nxxZ{LaBP0q{*gJ41H z$iMY7(R#)h@!D!U4_90~^pi1*e%)Mq4M?X#b>}a_@V(_XJn-`1cW(JAcW)_6xN+wh zT?H~LA_Jw&1YlC~G4xXPPcWgf?(i~=h?&}mb<(HylA~z#2Fq;(L130L+nROQElPq? zeLZgjj=N5w5mFN}r34yB-zrN!faQ)&f|l?yD>_N5%ZJbShaioPu%T$%A{bEc;2=wj zYwVFK)T#|zI6h0w*sd^7ygysVSmq!r9(C|}OUkOWqj}+#Z|(4{+2aUK0)8)+&W<*^ zCebrDlGL<#AZ_x=Cl@tPJPS5Fx$GUEAJx6Sma=>&?T_Pls$+)=?WQWJnMs^n36AAW zcE>6|zXG^O&Nv>=77H>-fWG3%4+wKVlMeRHhJ#mm#VlV(w6{6x1gNMh@#;JFD8^I4 zlDHEz-)?6xaYxQ&l?G12i%r7E>+z-=f>1Y-AGyo3qh7>;R~r50v7arj!xGKb8U@@4 z*UiX7#Ws|!_!>292uExg6^+=yk19!#utuSt8sy4npbs>;2JoeBpG5rQC0~d(W>=YZ zH9dX2??xQK8a1{s0jG+XG%yquyXO%FL;CuP9Cfky^wL(yCa}K$X1DyKuibF;&HQL zvV{w~jWnf%`zKh)hKgv~UL*;qVOA&B*^u9px8Y!a9#z9%qR6a7a71F^5xhc)G8c7h zSec}vTglj7(}_T+s#8CXikzhvXJ$D!^;F1dcN>Gic(M*>RX0V6olIp>n4lh*Pp-Y0 zB|P3$ye?6Ml%Mq2{A4qFG|;VvMci23^GVIVd3|srm(di;}h)0#-Pp4RU*zv@$Xeg+XP_+xQFvicFX~DE>XRgUfZ4tx8x<@l=G*V#;#!t@tT& znP37a`;%Ft$J{;%^`e+!0VQ*P#(DaNlWVX1nI|mN!|Y-uzd+_0&)Z%E;{0M-dU)l+ zZFK8u6}BshJe@x9QY8V|**rF-M?T{VX~c}V&}8X=UJ#QKL6uK86JO^S1xXXmc64KP6tLC-6Jdxz zCNK2%YQQb4z~*`0R!^UGBHNuPfivRU@En(RS?9@

sPv_4IGSi$xCPOznWf#RG!$ zXy9s6JDJ*K57E|iUP3u*dvI1@nJ;mDtA|R5@LGQZL%||R2|mu(;hm(>EwBkGTjWU7 zpIqYOxWM*|rstS`IDt>8RDFl8tftXZ9_wQ1Ws_80bkLfMc`Y#uIM*I8UPR!HSBN|a z(Pva7hhSQCtGlWd>?bNUGVJlon$^iN?6h$&s+U6(AncH5#G}ob-~}O_QuMM^d>?tQ zC)_qHG>;sLjnsMndB5RSDtdM#DXS(i`DrN!f(k|- z4=RLw_6yM-l$^$-Hla)F3kTiEAbVo#;$7%$>HL?`71`#Gyawb<-IJ=xSD1#G=L*?U zAI>#JTPzx%Ew3NJ?CxlfG5Dqzx9=V(N!($dx~^U3z4gB-D>wY*$gn0hXyu~(*1s=b z+EqJy?S{*)uJ&^d+KCo?HY!yoOhT$-jte+t^|nwV7o#S#tK#swr=z4=V6MEf^r!L9 z=JSv0tgo?J#`Ie`a`sct06fXjtATrT3&Z0a(o)Br+5%5T5$;tQbi)`L4bgvWHfJru z9xiv{N=3b2v2A{#^39-vicKla4vh(HfJ7u%3n5d9lMu6FkeG%(0M?Je(&-+iCU-(n zTNkq+EzVcp^=SRoof75lGN{Ja)6ncUA*9sRxS zzIGN1I4kPyxu;u)zJ8l+!8UusD47Q8{e+PL08m?Mg6qr^I(Lw!zeUR$>Q7UWuDvp$ zHWSS?ytLi-0l11bFPZnsgUV8CofmF>2?w)~X{G_1X)n@?%Ri)MibNU8jclPZ`@AG; zC}4Qy;25vJ5;uEE01$ZXo?_4?UD1q~I7(AY+nVq)Q4#}NsXMKZ)B(lC#}L41vIx_P zrjJ`kNbsV)cOK{%RWlz`Tz6af@E?GU^{eZhS}}nJ@!iLaRbKs)({Tt?{daxLsRb-B zl353~RdCXnYRgPotZgzKwj7hKX^zEDV{#p4mR39&U$2o}u4ZDKQJyKMIu5pPlBG4eOGO)eD$Ty9tId~l z72qKjIk93QVqKOpew-TUYg85?`8e~zh6$jvE7!uv8MDp#j#bAb#yaT)I*uStUpq!q zSyacQPLs_B+?Yf7znOz}&ISm#tJ}N+!QVZXlqOm7bPxMgwuYhb3ZE=I zJ1mLOEtAU4c*JS>p{%F&+~^zYi@zpiWH_8%GmGh3;=S0HNHJTApp`fuFS0CPE7w^O zTtqn;^lLbm`8D6dQ~kbdA_Oj9m24n|;=BRl_-i^JYrjgjiGdzUP(ps9tS188FjEJ zCX1J4d{*kApl8r7$VT-MC;egJbGAr{Z95`jV0rCz}hh3s$l? zZ*G5gaF$`D@7ZD7?l+I!!L7#nJO6 zY~hiL9;+d7RA9bY&VoO=;-RXxy<;NdQ(o8q*a*|JdjDv8w-fyuOB$PYbg_14eo@k( zlwxsx&y(@wK=(aV50eaidIMj3aW0QB5v%FwMEXM06 z$%2JKHqk2+-|=#u^=)7_#TCYt$$ZKEP?U}^<{Z~ADfk6U6oWz6!MuQEH5rs~SX8{E$xH=4}YMMOYo^wMwPro7cmTS}_^&@kZ{P~&oR2k(H z*Ez;RI)-r65ruwQRh5?)GV1^X!^EZ}QDM>ridNc9a%fQ`S%QyAPNoxcJW&UFF*Xv> zcQGeJ%N%-QW6aKwl%0bUl9MC1W3Q3IR6!0qz0Ac7GPkDqpqt;WVXC%QUIeoH%rPm7 zpu7;!AUeyjfT1E|D@be!P^B2x;_j2-3!;$976}kK#htx&uoLhSY$fQ z-wdVnisMe-0{X)adn^igb{FiI7N_*p2Uys(R*$B~eAEps+WzQC9|0?65xvm_ z4@?PG>QGjJGsI!xuelqv58kTast$F|=4g5bY`~%?Fnh))0E1lJSm^$2k3(Ez!I(fHz!19Z~jFLi(P%gf11pptI|k<0>j4 zB?c+4zE_#!CvCJpkeCpUyPE*)gTo~PJ0#Y=;Mi>HK)sEF8CseL9(f1bTrnCxA47xF zZJL?_rN=0(!%EbQGU4g*pv*6V6%a))y9aZ|ol1%FnBzzpV5LRhHK65~*olnh;~tMN z*oc0vIJ;^vThFkIee?X?ghuO2m89w4YF5!eC-cg(OhZ5NVH{Z13pm6g4wFJEbV#I3GX z0hf$q7=&k>1VV#(R^}3t;JXdFBrVj-z}f+2QUPQL2F>)1GP4&WDGg)z{^rJO`%eBu zjfL_hk3E7L>~NRH#@?yA!Snv|Vfw@+7V5GatSB%_*L|tDDePwB+f(530M9IEiw~*KQ^-& zi-XmIK-8n~TvvYAmE;38RE$i`@KO)th!BgY3)LWolO8ZDCb;mzT#$6QGbrZ&`>QK| zk2>V{Y{&8AaKMPVyxN{2prj~x9)Q8?Gb{U5fj;Pi4)yZ9Sortv7mnsPVy@%G1M#Bz zQBg5-S%~_jH~|$XQL^ZtVtRbi@&oyx_ffpGpCfIomnPjXKyF7r5*<2Vr~_jssBngw zZBE*YmXnWILS7de3!hBBHYmba#}hsv*ON<>q{M6hz+ntS+)zt8my{K8Z#N8cy1H2zdGYocIK`iwr-v=eGFW#zMdFR1F1FGeFIqy zIgtcf8>SoqbM(A$9*#ln*8W_8#5hgn?>4k$s2dJg_U*3a_QtIq7P2OgvLI&DOKkb- zp`NKFXD0Z)Po_5@%4?dFYc<4GW~UI|Mf0^gZ+EHv>_f`y%=7BzZtRQ9ER>aJjr*tn z#MHBxZZ^>u?`FVcC6f?a@2V*@0@{x~AEj~VO_8AbwqWa~rVUO%9OSg1(MH4(_WU^4 zA8x0iu9ln7{&o|$p?DoEjqIt=4(DtCSytIO$>vO&Hs;LGP2{($>Wm&_3x0WC&;{0D ztg0r2>+yc>i!}kFJz@dJ*>mn@A`|mQNj?s@V$gkMwIk$2c=`|GcRS+Ex8|3w*weNN zuBh*ylAF!oqrSq%J)y-sG@l`*_JV%e1~J1#kjY}+6`D7# z9v9a+Kwn(*VioZ_>}QarTpf+HG3n-TCfQ1p`s3Q2oQv9XRUcv|)5h`|%!X)v`qNLNT=zuj#D({~Ec* z?o5~<`^0u8wr$%sC$??dwr$(CZQIr)nRw^j{R7*5PM`YF-QVg~om;oc4d`c++b+T_ zCILIVvE=o=%fE#OL;t09`|s*WAj1ZIEqzn{ z+uHPssQGj0eAb#-qB&dbX_Q`BqHc=1i@ZyLC0!GwfiW<2aK#s+KAw;8c&H~x&f5*N zn@!uB=~}ZL%M%wg@v{erG-}~SLi)GIwU3lxXHGL@tbTFI)Xyap|F{sBn@n1hB2PCu zy>)_M43oia57y%^;d1j~DBf8B($%MgB={SAXe_x2xnd#N3b}X&ewmBC^V%|Ye5~ej z5wb))s;JZXAlf8jdAEmKZhI7R#jL!|Rim?oDv0t0fhC2)zte_KxEQW%+&Q564L+VNH|x)zy|U6TUiOQNKDkOEwhFg&nv}yP z@!GHQTN!K3f4Q-ZI&qCFP9nc!?Gy@&8etRT9zR5F;_Y%nH{@|mIOiNN#X(!*JvA=; zXFn9gS_a|m17Rl_5A7~mM~G=QHz=f8or`Fsa=ME%slc|ub2;=b=tAqhIC*s8Ky7<4 zD>QP&8letvQmF4e2xP%cCmfavf6}UII%rdg$lZw=QVU+`yd1CD1|g#?(Nv5cJ%sN~ z=a;Sz50_WO9kXD#xYj&H}iL$v{EVDRhhs$?0w4$*NHh&O=J zG1CJWpTz0U0HP1_6twq`)6>@CnPH#UengyF1M5=C^1whSQQ^*H*$#&Jq4~POv33}= zYP@@fdYx2oWP~@mstq1%icRJ8er4%u3MfX?+f;$^_B1ztx+l~$L!74wl`+$}J4%UX zw+Cbcs7PCiv@0R*fEvc&WuvrZtv>;Ii5-V#2@c_FD!GhSd{0}*MK>kXlN;S+_ReulcZzN+>G9)(-2>U}(sqCb4%qla5a#N}ku z)~pv1l7V=UXpTqWU4L$iCqsj|V!EX58#yd~XWgwP8@UTkI6(dyB6R=@B8>S(A`dQE zGYJ892<`noAg6aYZLrE&gCPfrb4q%Vct>e=5%6pWowZjcmj)qn&gIGI}(z5I`qlv(NcTFq7Ha@)8&zsUXRY3>_pc3 zeTq01INsU*Qh_sk5FK4R?vQjME zi~fo`%Tw8{G5QN+L?;-_o2mC@YC-B0^?C7vXpBN1rqUnMwZU~hX&$vNfPFz>uXo>W z&=@P1pL}$6FI*yL>_Gb&uZX9|)uxu!MQ@VI@xjoCpxaDB@SQ|2W419Pc&%c-V9^x! zlX6WM4rvR*KmGG5nMPn~{pHTQlq)pyb^Antz};=P`m}kDaRb2#)P6DhGSI5F{G2gO zfLl+k4LAE5?r|bCRCHtnK)R=!3^Z}%NBwRs7;%ps`=s6%Bq=8B%uN?^CaTNpqA8dwvozqnOe_= zbxPX}wEePu_vc2JqK{|Xr1uCLNfkz~VIFD2vH6u9#4zD~;Y^MIbvUQBhW*5$kgoCC zVmso96q`RKf>OsjJ>~K7)MlCOMYO@NdZo9w^$nEK2d44TTNiWVUG>R}K0vqp-n;#% zYmBQh=!nVM@()8211iNj_sEpFn##C~J&_xTQCKA6brVpYh1IyUq(MjulkD{A7cA%` zon>+K5xx;$;j)WC_-`911xgXqKRBf3z}L%xv;yzNTBWvQp0i{CFbVBWsSZd7_n2`z zSPRWEMW)c$9UkIWV^{$?v$uxP+T)2E-xT-m+2-W4igozXpqb&qkB(RI6BT-`dF~9S zp4W`G3Adq3OJg;FS%bTS2(qH%1)Lz=mF}EiDM^J1Q@LyV2r=}x)!^9L%B`_Ps;}ZF z-=A2-xcnVU*&B?aHdTa2V_1l zYhs&q_O&o@j%KxUO%cj%4P5KyWY&=#C5oTmz%~{PZQ`TaV;3U|8dx5yLC-iEauI&E zY9j7=53G5b2 zk`zyX9J%^gEF_`rWmpKFnUsKvtp@%u3o4lZ@un8$x{xV`3NmUYIEYlcVD(CJr0%rl zGbjgA*1ax7Zf zJFdyW_vLrt;=%r&TC#wO03NigJ=}W~Mary2jtSnR<~PIQz7J|Cb|eqHBMkbGi~D)| zFz$0!;1hz`{#%E`z@`_8T33>6f4>@NVZfX!&Nz7o)rozDq-(F*7pY>*q2pS|o~~;2 z;e*GV86D<)LCM+@XJ`8{Kj270R2bLGul)Q;hhB}9v6Zl+Wvd9^KY$%we&RGR{IjV4>{Zkal)P``<9e%qL_e2u!->5GSog&< zuA5c>9IF~DeJz5Gj~|~J-M2Eyk#=ClMX~lm?e0=nQbu38+FveUL|J)(1`Ocx0JM-O zbB%>azjy7+EtsS=#dy{hBEF>C=c${yS!8bXD*0)C)^ZBrLCry?qz^XA;Dw=nP;f|t z+Pc>T^h;Q@D{u&G<*>hVTrpF^2gxM-dOVbLv0eUM?xv0DM17qW6pME?1bNZ#BA-i5 z-={OF)51bDSx;1}jf^gB40>(mbhN1@PvCa=UR-W4O<(Nr6a_e%i4Ipbj|I$KKLEkT z68J+rC@NV)JD|?NDkml<6aDKs37Gk6=c=XWZ0nBUf(wF%6I^T(1vjBU@GNTe>@(e~4b#-h9W%irIGJI6RD9ya3gOZ#boLGjOOG&K^8VNaj7Zo1{cnyEE%uFWb^sBRw zUJ+lQYcQQ!rbS9iEXLzF02t^5->Zms6jHe1(+USdts1QlL*@`>iDtQsB z)_fU^OtpL9LGZc~q&D5q3dUmQUI+i2BPXDfMAp|LmIokY7rXmW{JI9XUDWcG3FAT* zh9;RPE_(s-wx#p@$SKqS6nLT9%*Jir&TE_gwe zLE6fwE9I%UXnC2tH9s5yo?y5O|Eij8euFdIca?7=(4sB&vnTjGGF#;B1-XTwwL6t% zhRm4ntvl&G&e%&&i*urX5Tv2IH^2WAJ6dic(}T^D)B%;+MdvgkQ2lLwz2_~&8KCa( z*Kj^!jYA-tKl!i%!K6mylPm_Xv1Pu;ONceQ`j^fkn!io2i8iMKfcN&7gQeB+rJOH7dfQrd3GKtBtu2!u5Qzhvc71@_{F@e1JcdKl!qgT6D!7-<4YXTFkg6;)IpqhNKi%cd6-#(5yjwgI-EZB|+gq$I8JN&-20i>3Pj!G!)nxH6F|}%4~giwWvdM_0<&bacy92d>zdRn^oaU zIcXw>#^de{xTml&p4%ZG5O2=EwzY`;3~iq~BB8(!OXD@wRD#$?hNre>;zk;ji@nv_ z19VHW)F&s}2kXy8z$4u(H_J9pgTA&;5J z>ptc8@a-k%%~Km|%T81V2$x^$vOqDlhwZ9tcv44f_%Lu{4%BzAF4?3jT^z~@7B_2j;xF}*& zi%7Z3A{P&HwtCN@BO?;1vAsdN|z8~t1_#L@ZyU2NKB~h3V#m@uV8mSPmxO;PapCQ zck<|UwlJI;!z~wHxU!b)D{X?>CFHr&N4$(6JqcZPmujx1CjCZ($&+ct0MNv@a#PEDS?9&h9l#0k7fPv{v&oMiX42^~Uk#VE3K+_r$xT+N$KItfWPR%| z5MNyy^p7JKiqYiMHbD{Y?G>rIJxM>Ixg(aGRJWbP>}?*=5};YZ^e~CpAV+ufj;T|W zusq(Q^p!_2`4pwDk{o_Af@BX%i_|mCq6m%?E@;pWXWCS+*$%b8M?%Cj5k%f#cY$qg zG&N{{&S1ZON4`V#LS+!3o7Qa@&zID9ZcAz@Mpcp%61_@Zs;bjJ3##%dWB?ONeZrHm z9G?b)dCA2!J4&-Z>W0Fx%&)5p$Grw&9k!brNowM7A|H?c-rZ1TQPS%x>ggF{pZVnB zOq2 zM}Y<#qifbq{sFt9d{2@G=VG+f0O^JOaZO9=k5-4XCEYHs@~^vl{mj6G2psnFJG~gY z0w?=pOZ1CH7B=&Ws+My{Xal5vb+KJaS92b9`YsYdBtTKj{`VXY*lvKp;)tni|Ckm< zHWWAwxRZVQbX8A?%uL76ntKb@X1u7%yQ(>;3B=)(xXJoct_U>ulLIP~_jP?UC!-1K zrpoLN3nh;E^sf_)f{lBkx(lP0+yn`dz6|w@sb&)pXF5=PJEz<+$D1e+#Kc8Qf^jRg(~ESUv#Jm#e>0yRW3OkW)s(pB-e`PX$nCHw zy!0f{g-qszWR=qDeXHq@tJRm}&64lP8udJ^TEY^=RdKTBaWa|7R|`0Omk{yS;V!kGU{_T1a)J zqZ?v?`sHYNdv5&r=Z-MQA)9YebN{eK~BmIZugG~TD7d;S$>iFI0*(}HU z&`e@)a5&n2D5TJG&49Yi0Q?rKkiBoYM%!(!pABClf?DqtK&S{59B3_=vFU`KYr`fR z+LT6nDOy=pXSf8XFsAT2f&Nb?2$t}{>$LioKJnayJSQBOBWlK0w&a5j=`gXO#hm*s z>!Jm!Gj@BS=u%JbTcw~>%+FR7lgTH1qD(_`!aM@nJALF3=lTIyC zu>K%KelV>Y2dC2!*%C%B%|Ui=37v(@Bo(1oO3z|i`_8Xtx_MUF z@;b0wv3qOrtNQ36%I_Fq!h3>D7usU+#LWInn;#%*)=&F!?5IF zYj+q-;b;l2KY>G@uj?gMKDYbC)R=xC8Q+|hp6CVAIKZ!>@T_828gh4&**kLuw`fDj zv};ckl95e{97c95X=M4;yYh}$bJuD_H)mLP36LNF05saQP=}Gw-mtp+FvNuH6`xwb zQzi9`sVrQ|3x_+fIX1zg7S$RMwW&R1;S(7E?hQ!HvA+t{E0O>JXX-L^z|#ajQ9UoB zk4IGRIt6qE52Hy5PIY zU^NLWq`6{J!6VJh#S-_yrgl~s7*Xo-!j6n`odh&<{ett9?b}Q+s{yN_v^-y6KWQB{UmliJallFqmSv84TIe@C=l6{6B zLr*dxN5Q{t)oCNSijonbqcglq>>&q6x~2N8uj@JESZVx6Gncps+J3t{Kf#_(01YsB zJQ!1k-}-Ts8cfB>{E!YrXsNOZzvnkR(19J?h^fG$ZwkGeMSr1>9*Opm`gb2Z_|6^X z$tM=+@q!IID*F^_&5pI9J)27?$S^@gs!M+RerY9h#G-JFNK&k5f~iLc=AVjF{Rcb; zy`ujzj-*eH;aQLk9uK7hI_o$W;D^!SFCMfosMoOg7{cdFEJEfc(03aUiXpa~?c^*^<`?d!F z0^Fs<47E=B{jXnDf<2&9X9AE=E&^M?900xGuHOXJ=hwkzm1;c0T4m7+q4-n=w!BW1 zE_l7&-S>ljp@iA$Rhrfwiw|mkaq5r5qRtg?bm-)l)C*;A&-wF*^K$EKLrhB5%3;Wg z?v4JJJvy2w7CQS`>w95gOp3rl$$Z+2EU_c=@}F4`F`ZeX>=KI`&d&bSi@FnbL6}5( zP$q(*WsM~>X!0uNwude}?!PR6c+b6hdoh}trYvJemNBI;QSHlEERATSjvrdL4Nhd_ zIDi!#Od$6oLHsGO*iu59lH-4MxyE7+{W(H!Os0E6M?l|TXkk`?#;L4EG=Hp{Y zmzIrmD_uc_GFsfn5_n+_=87YA=!^=tAB&+MwkmrQOX^&03gedGa9X-!)k;Z;!pFumDYQrt(nsr%9GR83tqsI}ix_)BWt0?d`+7YgnX(o2hCvn%PiDCKUSj@%N zsZJT#+1IJqg_vZmaBk3qo4nu!gVOJ88$T)*>tV;B`0xP{c;}BQ8!xeAmYekVA^U|i z7QZR9!El~GDX#W8lcN>*MC62U8ObCyxm-l!y)ApOAKQESl-;sdUD_IN9(qt|7+*o) zIPo~I`e2VuO?|_Zeyu~bl$GBzi0LUWHLEAYxDhGCBvwe4aAPZ+;y|F)%eo3NXQzMr zNhNL=isTApE;m1OF#sOHTGr&NJbd{(g~D4yYEzS+3G2|WeFj=#at@PFnM+Df;V^m5 zw@~j++rQ8x@>U`*=!rQ#(i-`_&UwWyjnT;O0p3)Cc3{S=EukJ^YrwX~#!*lEjUA8C zW2e>r&8`-NPEBoEe!n9~+5=hMu|n47KJU@>6>vE_G$+i*|9k1XM`g0d^8iOZwEh zBiny6+QwUHr|ZGQXhWlCnnpnV*(Xh$-4G-TJt_JLujX!Zhp- z5!Ec(%foQ{-!5oh0aEdmi2O&I%gTjtpR!6X~63PJIXkvS@0t4w+ z>RPWkF0>0KNP-8C{H7Nt@QO{m?1-WOq{HsL!KD>~Qf8@HZtCp|Rk*_>piQamHZ<7q z3g4OuDNv4*LTB|z*%%Q68m)Bv(6Z3|{rfL40Vj;y0+nBKRAGmS!o!s$?JUhl1nqZ4 z7Tl&#*Cv|G!sKeS{w(|Se%9<4eFI$Jl=0OL;-;x#rOHGCaH01c!R^aE4^mb6aI3$d zE#%%q7T+Xsi@TzV7d4JoGtoep(s7B`by7}nbkG{^-*@21t_`$lD8mOW!Poq_6vfbN z;)TtEqmjNx!9=SMUCR}-t)1BkkO%DU$HV8WDLKn%#a>e3GuQv%VI>=N6iWFS z&@yj~lx2$}wxn{?2^7Jj-iY(qD^W~&TTG{W>G4zHhJYo76ct;+M`U+GVcrI_;RiQQ zZkfLDsTxSP`l;mve>l9RI6)d(U^2e{8k!T3gN_@7_+GSvxytIVlv0f*>-|bsWC5b6 z2S7k~4(|mnLDx4Co$wHi1I}=j>OQ^>8E^h6c8i&8*- zey?;?Vr6=c3WRXwm$j2`QqTM6#LPNA5$+>)KT9fuo6h4=5|`>5)(ZU)D@vwfy9ah* zF4g?)Q;Bzl0_ke}q;ht3wX&{sNK7uRF&mIIocqP(n-^VJKS@QXp6pg<)C#p4-b$c9Y;kMG9S>`C+3x&u6y%!r zj;0w)<^=w*mTH5o38kY7`j-WsKnRF9;F=oYP3CWCrV2-~Nwi7Q2qdqG=Jp($hXmh; zi5_Sj3~NgYTZhc)d5cO5{Gy!qP8g@ID9Jwq>rmLhsUxVu4J1xSpHjBYQE^MyO3*O- zPBk+wzIL8?Y1>y4;=x@JScl#Q7d3SrJ8o^ok3qN=v6F%IysF{C1BJ0+tl)lSfu>&P z8j}a>FocVz@3pQ;xQV0)aMkU)irq%oI^{8J=JZi*tHD>H>-IVQfAG$ClR47Shp5#B zHTrG*>;P2G`RJy$hc|(>*v)G50fpF9l-Rqc%D*c(@S_i`bqPQU#FR?PF~|HtVa

GdW>8g|%iS2md&vk#P_Z{YF)>&q! z``$C5JQL>Ces~{%wr~Z|j2|8(=52TQh_qGwc7A{7+D7cwGXCi65=&J&|2dL8X^cw_ zJUohSJrHb&a(AU3i@Ue?Eh$61+f)u-0xa#c-oBRn+T-=Nv=0VHBuZ6vvg93jdA4^U zdc*+=hjxrvwohdS?f0UxO+3`8w)9N62zK^V@Ryo{Bfc#~8&8di6C--7Bo{XPCiU>% z#B_k2ifFbyCY%i@$=*tJt6EtTFjx#=`d8RlO_Yc^H?{Wzxo~pE;zFDPYo^{68B_KCIZZ^xIb*hkfUGtebEy&gQgNMm z^fA7t2!%d{rh9+L)|z#F*87618Op$|HG>VMM7HsT z`u*GKg8a9Q5f@i5Zrq;oml|7$$;G0%zq$THZkq=} zAgPXQ;$017j{$_Sx@m4!k&Y*Qm?XMLoVt0IRDqOwCR4IU;@~}0Efo-_seD^`}-y% z#0=1IT>|s_&b1Pq-heV;A{+D(**CZkx4V$Rlu@aLNR^sC$=nLL-5OH?JejD-Hxfdf zTS-v;YF!qQranxkoX;Ga(Q}-bm&=n3A-50A%s=e6CQA$@C>FKlg|paI~li4%hnr=$n>zjD|zjt^R^BZ6Pf71f)R%u#a+^K zN=?xdvmALb<|MD-Ns}`5P^>2OmrEAS*R%5l`5+euOOe(QIwLahPShZG=~V;>m}U!) zd<(~t!DjnDsh(1SJI&jB)35Y9R_2dlNxYGn6=Y~la%j}bTdQ%SPr|Jg#LB4Qee3^4 zC152ZD($LoSx>Hp;Ez=5MEEkjloNwYxDS|=Q_{RS=)HVub^eVB^A)tZ1Zz|xkEsSn zEE~*$p6u}zgd6Pe?_h5gxJR@#r0_>+vEt2U{yVs*ZY@FDUIT$I*bMlhkkutop!G1cF@##|5{M}6H8W{IP5A+L4u+spe52clhd6R5R^ZLXH>$R zdj@}J!5{gr*5PbpNId)6g1+0-*hmqoYZcJm6-Px-$5(EIo$9tg1?C(#5B0Nlp&OfZ z0gDg2ioH1hW(_6F?vEIhC+*G_Pl)9j3g{I0#LhT7+$=YJ29eUJ+!Dth0JTDT>YwNb zzNS_7KpU=Qj<2`~WnN+)#!W>3BMfriy>a=k=bZuN*UE3MD|HASI)MJ}CWsc81=vA1 zmJ2pQQ-XP)+puo#a2k}>%2o<`*bKlr>V3-BKWxugl%I6i!c;a5$Abkii-o%JB)IFt zSGrl$E?lnFalXGCe{&v&^b?O|`eT(l=?&_~*tDe{!CyTy$3X^B z#9x0U1+V^rt)=Z`z*gywyn^QVObk43JThA?mDL647g!bMV^9arX$^KGxW%RrWa(0< z75$aBevTOg%D)*CNh#Zfv`$&ia$4fm&owekQybALo)<>DYi1|7Oh@Y4QoRzQc zcC#H%|K@R$1TqbrW*3p%Lv=ir5=70CB2sZ(cxDk$dBvnJy&*%vOmlhcz z43Ux7S^lh&*8btC<1W zHYcrbN_E%pHK*tAb*zV53qW4(9u?s%MxP{rx^{51Q*tAZYJ1KO(+>qT8MtvkJ!6Dc zAvJZz*jP7cuc|SNGv%VrTGkc!hl0ors}tysKQBsRXjO{4-?OpzFhrl7AsdpY;$$J* z?)A@@dn@R3p9R&3{(9E3C^)9Re{_o9_ozyH_ic}RTFz<`C2>L_wj&xXevJ><=i&hTt!!R(%ifo1v_Mp2&+HIZ)#=#-P7p@zB*+?sH|l%}2B% zu`N&EIsBzUoqD-%^A)2Foa4^S_rymuFYe9j(Y({vuXos!0L&gAS~3Vny&JS1e(B9k zIeW)yoLKvj+OH=1u0AoK`udq))8P{>i!*daUAdB*F8#(hj$j3m6J5&@^r_B?iE~mK zfo&_5p)86wFdr;-H*09~347e^pHu@&n!0Xq<=NYmI__PBh6Y-uv za4-|~`JLnpwMT&}(Cn}SEwMuX?B|9v9k^^q{qg8AjyJPc3duM*2Aot@%2u(ts$o?W zmJ9QEHNY5^U4%)(w@$t%eKlKqhA)mL4)us*d?mshxq^C?%x8^)${*fqr9e<9RQ#U0|3#3eGz*NGG0!=cZtL#`hLQ8 eJYxHLhf4~r_1(PvXNK3ZtySvD*leX2mZ?b60b3T^Z)km?jzA(_dof5d-(y7{Tlmz`JDUQLD~7}^XmKl zEcg!mUjOL1zWJ8_{su5OAbjI5efRT!JT*OLzsEl@T>5W+!U5L5?4PAS%FF#@K2M%+ zuKHSbcKU33Y5N+!;SS>$`~1JF0W6<$zX-BIF7HeDcfq*EajIiy<1^9H&bZ6VJs$68 zxV-O#HeDhZ8cz4p%XPJ3rb(*cmIfQQo zB+c1`Nlb4zr25RjHmG=A-8UrNdv^R-qAVzgr=%pAgoeBi3gY?a;A>qRjya*}UinWm zQ=lNef`WJoD$)@+n5W=B2g+~sGu5%n@s0oYnXO>)z=(f;T`&*gJg}ztMK*JW+!M;o ze3qmP0^7y#B(U)+4wZfdF}ax*-ZOOGt6d^(I+BK0$wTx^M$Xq=CPk#)K`a$wASG(G z$6u0;2zIq=9AVDmj_|_l7$irxanCiCTo)HMkVkNf-Rga@i zL>YvyPyRIf%4|zXfV43;ckAmN*D}5r5)ob4k zo6}qy1@Wv@@JZAY$|U|Yg(1+RMABemcdsZLGIC`*27dPY_I!}4LE<9*{mj^frjDI2 zc|Tc))YlojQhh>wFOSOI3GL4yUm3UO&swOuf&ZGhkN!;3VKLyTEB8{D`f6yh9iJej zz)^XC5#gq}f`V|VfG(=38+@QY(k9{2`)CaeDBD0PK4$B>40l#oDAHP{tZpU9B6(yI zl&w$|$fO~#ww|S)UwaXdh0|E}l|ArpXtWHlQJ$nP(lCUdgrU0_#)k-Klz-H(g(tHI zBFF=pGi3^{@HUx1J}}aK4f%W_>@-@~-1^Cm?OtJTgZ4zmIDuAW;)Y|QeQT)lokFA! zb+K07;D7UBDEHI*v&e|Hv(Ej?Eb)8w$%|v z7?#ttH(z~xr$tB2P$99G&aI!{S|Ayxqn;K=!^f?GpY zS^UcP5Q%ym!2;5c51v&T|1nwouLot#=JZzzAJbC5YL-Ydc^-TjIEF?hWONEv3fC+q ztBm+wmj;92{QT#x%TvtUXC>WwC%pwT0w`i1Xdr@?_8(@gr-;mu*)sAD+0CkeqjvA+ z#chrw63cl6_il!f^-wTbtfK-Esd22C^ z5n-hikWihbAUc_18sTXkK1KY)TCK$7D5QDFJR2=j&E!zb~H+eAY zKrXwS#>7a#N;YrH!o>24V_gFZp@w=Q<8GzTy9*bMYE8 z=>)1;3TYc-MGNrWbt+M+a3upF#gL1aQYWT{EFab&f>AU~bcHM6Bix*SBsz=z|4sCK zeo_Aowtu2U@;FK`+S_ZVCW@&4kt_d?%c)HLi&~T{&1W1x@W?f#dvv=76SMz&tp84W z@`3KF%G!j&%Rv*6!kxG04@oC*jJ{@4{2yGJqVzhRZ8*2nQdRT<)ZnLw*POfPs4IGa zYVa~68&2G`R298|HMm(&3}-K!tBM{$8r;5eN6*LB{!ii3HW(x8C4V4KBI-DN($14t z?KpfK(65?mI;jG8=f3j(Br7aNs#mXIrPti%HA?C*w?seG zOOa6v`ksf{slNgg&iq0^8b;U#SQ>!KHhR7Nc9#fhb=;aaD{d94$E8%2zu-r7u@K6Q zHyL1@^-1Aa#p;=x2?gK}Va-}D)h0{wiM!OLodJ2pcrF&UwNrAmg5|Fw@>J7p_FAd& zo<;ga#o@M?a(L08qP;vr?wW8E2ku-A-XB@PC%n;+Vr2iKO0150rb(CDB?8bCJ)&tN zcJqXlD*Wq$OM^e4QG3qRUw@W#qMA+XUgQ4;#h+*$`TUtkCW`vw2@({?f{3Cj0zKDs zH|c=QCxiuNSK&e_D)5~>gKybv#Q}d0p_NF#|3L|1@EyTn1Ed2YwbmNi?4&N#G#_)=N2_iMK@pvc%1;>~ao$d^CpcZ+cgPFsu{|XR=eZc9w zcMu}BOKN9a2gH=WkHo!hKerp;>=;`j>DhU?b|~jqp8z_)OpUs=lG`)d@-`Hd+}S3xtBRoBGpnsfV4P`s z>afS$>mEj@Ep+9$ULxX*Szb0~h?>oQs{&)tBm`)w|5I;2F&QsBSd}o)R_BM3sg7NZ zZ^YjWvS9WIhgB<=SLIb-6trL)sm@BO3%|cq`?G$jN&VwuN7w&W?GFX~%m1s<{ZC)c zZw0!Y{r{o%{bW)~!N7b-vbJ9vkYDuTO7++C;%81=ss3(3{L+cPt3R5N-gV+i^|uS+ z7Y|*j0asvt(S;hrW&hsb(<-rvh({k=8wyaUp@O*nz0wGy58oe0t-+!y{qNWQmvw<> z!eC?3-$%inm;%$HP?)(t(qDUL-S@YA1WxmQbq?%e{|DXrd&Y6XRc4;=q;l}&RXb0d zxBaae^JiwPz+R57EP*_ltjqCVd5Sr>2CJB#;m*5T=_TB)NU;W9r1+nv^2Bes7$q3I znLu=irn2paJsE}HX-z#YKabHic5;J2^3>6nK@razNNH6Atu)iRt+>Dch!<&t9Qd@P z3wbHS*{%)oRVN1fiqS`t)xWTUkdFvo#xw>#x~E*VjBIsbFO)XqkU~omXlpnwoU1Ce2(num|HT z+GrCUv~XTwm-hRM&AtJjNA3J3Xn?;<{Xde_mzS@-<2+?^_j9yTOyvmWWVCe4v)?fn zfWkOS^qBWlFme7sInOG=qkTjUPym_4Lg5U;9LgoWsxW$2^46* zI%LDQS`W1sDA0ZWlnvKr+uKs0LEVrl1lsQn+HkGc!|w+QwB7EpSWc)G_6zIPT#nBFT z3G07^V7VHz>Z03KjzoAO3)M@djbE<6ZduzOniZCd3QO_QgIpKaa3?T$ zB{z&mJGUY{DVTZmXBMiE@>UKrW082Q)T(m(;X=jRc^P0-1!nStGT3NRf3TfSC4D^*+65^qL<;MQOboit!q(;Dm4NypxA6KKJ!w*a?2f?N^QdKrGYM4?XySTMM_U<;r#=aiy*CQoxZ~_3R(}=@3rbQq4_=1c`S8LvCC?!iUtStp zMQ2V6pw+lfuD4jb833Gz>K|W)PJmn9G(>dJuk_)SswpD%k&PZkA)<${UaIrKjc_EI z|C#A%2P>B^tCH{cQa+&8nJ(ovKJOlr&@I@2l=&`$7T?FqfyfqUhB4N})(ot{H0189 zAa7iud5p-Dg+%1oW5s7VFwSa9tVM3|PL2JzKNP@etec2aUic1kB3;za&+P>_wtOyI9weR^TbIgYf{z@+3*v|B1i(%D>;X9L)^dFT%sUHWG zMu0K=9qT)x$#%Kdr<*d)PN^lEP0{>yQ@wfT4XEPG6zhv(NnRKOuCjw{*ImyP$$lcn zgI7C^@dlU8osNv+4ev;}W>a2nU7ccIOaj@uEzuQuTTP$qE6hKV+oisCavW6dJhMMH zv#nTWsn2mMSW4lCP=7PU^flF-P7MQ>FiXprd8I7NOoi?KQ_^QJrwFn)JOM3EB ztS~2+s?A;~Y<4zlUsVNVqmn%JQ&*k92eU__!w}2n4it7H)Ke(k0Rp1{&Jy4(5uh7s zYSrIr4oieo5iF)>?c8uH@_i5?MU|fu6#}ZpxGv7z;(cff3E?9&3?TIrM!osfd#sndBRl;KOzOU2fCche%uS zQV`&X3a$2zyij1GVqg;hB#CiDv88h z$u!j3B-0%1v|R_VmI^yjtlDr!5B<98qa%9J%4trZBf_p3Qq<&Hxoy>X7=|N~7dD18 zRZWf=8Au!WHRGfJwWw?DD7iK;rl1YdR45eDcyGHVc21vcbM0O{EIXSbyAzj*;#S$l zu|5`%w z-!>^ld@^ekWEs`S1SK5u0LPDbK$Q2diFUd%jOBODUMmEwef3-)ErC@A*7&PHFJk{k4Q5W@ zWUxg5?&@b+=#q=#sHq|4$OMX*K)?V}`Nca8jtN7{=t)dX%dtXi(0QpqX7BbZ`UVt& z(6hAk&rk0LVA%~EI6_(I6EmQr`6hLYX6AyUhow;zc}e$HpXj;!%SF2vQ?sS!J7wsb zlfnfG%6iN#=oI=(^)wG|H~tGF&cH2(;t0Lc#z=?wL85uqM?VTybGhR&E~|DP65byS zenlPVU1$Bj4M->19ERx8hFdW88jc}KvP#WxnROq`MFw8i? zzuUXtFOc#-w@&>_RqmRW$*)reVuaRzmbX>_EFFJWJkR>m=+^5(Gc?pvMI9J!4Z-r* zK`Dohyw@A=@VzwtwLu{r|1ho{1}d0(wf2LO?}ocN-vKtKeisKR=9R?~>(~U+ zzEMHTC@34zNjMf5^`4c_a<5m2m1#Ule8lbtd6NF|Z2r{2j2mc1xUU(l`b{-yS86N* zSTU_@pn-3+jQ51j@aB2A!Z&ABIPxzgqxe6glxUC;(Ldt-+GWrj#y&P}!B5yhG33WN zV(U!T(RU5upGAI~q_noB2zB5!pC_~sUiELAKd#I+Zpm8pAR_$bV2C(uDr7RXo0`tE z7n%9%NXiq%JX%hetx6|M4k8OQePi~_n##fORYM8a1)RDZan!5Fdk?&Ik~k1 z+qnLr2#)r`@TQJw1B}-lb@BitQ~5oKWB-_#T^Y1~_Vdp}W5DhBJ%IDmbh=y8m%8`0 zdYzUViXirg5Ic#z<1c+}otG0UVXZrCS~?DD(f6r^9DO9P*5}5$C=Fy=!;X*jUoa0G z`4#3wmDXa6EZ=7U!TLeH4>^BOsNR;Hg?X0$LOC*#+7tl2?*?1r4HR~jOraV`rRLlo zMMr_8ydUMA2S2>jhl_9)kV8JQ(m*(qImViMr780`1HIk5B6yjyo9wHNa5k zL?+bau)r#rwrYhwf64Dn5P(b)CXFVBcPp9q*qs&hsRN`e`{4M(eI!j?Tp#> z!>SIX6`Y`dxXpGefdKEow1jjFZy88)wxtIxp_d)0pG&eYW^GWtKzd1K?R0EIHi>}b z3XY8~9(jJ-Sg7e|(2I;5XgymlC*@L)Jf<+L-q;>>Sr@N-y)g7Nfgkk(>xjT6I6JE! zU2IDmvK|taxsKS2ha1B)Lwn^HO@z##bX=X#lJ&=B0$pYzFneYW_NT+<9Ja(&k5L6K z=s;K#_xG87Xy;)E=gO?&Un%p1gF`>B1+hJ^c4WxRmczRQ2*jAk}&1SaWnPQ zMyjUNg3GMMJLz{1_Zb_AC@?0TAUn~FoIZ|qDVWi$0K(Aa%Hqn1{F&*q1dC%acb^8} zIZa4|+x+v?y>erekSzNvs)d`DNCyIT(Vl|LqDEiad6|E;E%!xO!qkBy{Wraf4pG5E zWYgh7fCDiuuBfZCq}HCp-tB4E4-x`P0k3<5E-_D?4c=N_u2>Vi=n#4i}i$~QyI704E3(llv7Ac zBEI0({q)uqr=oj@TSXdTB+;t`$X7LgBw<}4>(7{jydf=qdUI9=_rnIMs#_Fl4i2bR z5IZ8fQ9Ak6YTzd0B)5uPipqql3PpYLUcMCi;FN1#EJJd}_Nylq#+-wbUUc0d=M#|I z)E?>a@oV7paf=CAhPkt)hpMyM_gk(J&hA-AK&-gzFuE*C@OFEh77F2DIw0vSxSi%Gy9M(PVmc`XFRV`NcAfhA>#@wxn(CD%Ev_C<;*Z$>GU}~M7?6k;f zhDAvy!5i!v{&B~Cuoz;^snAg(|)(`vhH1J52{bwT-7xOvhe&3}F)_(H3pan%ub9t)i!Zt~V~> zq01w~6dEa_oa!h$2`3v9R&9KOj(h?k@i{E3b*IRrbuz#qZa7Td>If5ZMqVBM=Lj1M z!>Y)k3f1V3`!4s~B+GjQSjXXBK3!EIv(Bca;d&ae?^DHb!F>7OimRkZTK4w;A{pRpnQETs^X9AZDhy^1WW73H+0#ayZbCm?%m^=%mf zip!MA-94?w5xfq$nx81^(EA|FfqWz;f+Yi^ltQgFUhRFA=ebBf_-T)I_;J61Ufox+ zg68sSaM6!3V@WePOH*l82euG7lNZShNVSG^n*>mcD}lXlJ0zt|wQ^6=l4CVaeb9gW z#KniU!rfAS`6yIfkx|3BhOXZ__jA*FI(aMD&tikitHxxb9xZ*5z&d#1hzt?}l^?>B zUVb?=JDM;+WSG78NJ@l=1S>5HN%bs>MmStG#5tSf6}R}s(WmqT?bExiu^d=nf zw)mrkA=iH5f>m5lDJ^gbn6gmnlx^j*#rIOzKq*-UzK9T@!-tF+poGXFSliGK3e|D8 zrSPK?RH#$u>NX=|-KxmpKC>_?XI#uRkO3l#=KDux_=J8O(Hc3tGDk%Lft$TWAAkOc zveK|K`d(*fT)u(bjV#Ea`;vj1FnqsQlc?e@uuF+$P8q|j7kl4ZKSHd0LpIvvj=KO^W-4a81tME}__K`8dsG8d zhPw7HS(e}R05dL`{e4N8X>5hSCm^92Jz3%bqxMo`#IESz;);h^u(|Y2ikoAr(Vg0c zH(}iN)Am7$&M8O`W>W;w>801abzmk*WgdK;GS5qln0%iOhS0f26IW}MyZene5F6hp zg|V1t%3VK#YTN?)V;oD}EFa zN|uj4RBkW231ZX2tMc0iA|^>#i2U^UHv z@%;#nGm`G6ZR2*$?v+7|470>j)F|R@_UQBl-w|VKpPW`Wl(Cd}5I4N99^X88=P$eZ zM1V@=$<)jR80RSC7^s%S{gIJVWbEcZE^N|pkOg$rtZ#mq4h}^`#4;Qh0&TUEbX4SN z>@#V;$GFpEp-0pY%*Rf9*)75FHT3+39xqg@``VKl(c6wHU!mLtx)j^6c<7_i)|IJo zVXmNIJ1X`;+SCjYR~ntS#IWElrf{NXdk3|W<0R~M3clM5NL}+}zQHXJ(qOB7%!AO7 zW0v})A1kzZtr}(x>yC$TB!r?^qqd1wHzazW0KFd7thyZb{lW%i}w|1 z5R&uPEo*Xq5(n56-Q15+D2@D6w~0 z9bV`JD2v>TPe|p^V>hpxll{p9vY2~3XWj!zM+ulBI!QS!9N_!zw>vxST^y~<`fceL zdRYrYVK`RL2sd96{F>9sglDC^U9~o;Yra-cl;PL~6;*eWllO#lHN1T>_*|{pVw%8T za)c-^?u)Rwp6Nml?xNcBfFB7(+;Q(oTS1HVz4mCBC$bh~TTa=_noyLsAad1xm!Gz$ zIve#YWfwIw>EebagjYu}<%5fxdP_F3voVc64E>_ckn z)!Y>$7`y*KjI<5JWg}v@a{7mCeP6#vc}eD#*z~D%9yPLL*`Z3nuKD??#T6v9LRgU_ zrLme*FlltTUgcNv&9I_O26(-RN+=Mr5P@+{r7ozICSf{ZnwXB2;N{pMvyOrGYSZ&U z+{70+-{df*mWt8ZW;A>An6I$wOo?<|IzI|M_6t#C7jTp5bI^?qOW`<^Kd7B2UESU; zJBBUiz>cDG$BN`+%Uu-)1DWqN+&Fts#domnRqhiUPrLx!{Vagc| z0TJ4^kf?_H?J=t*A}p_|Oq$Xr5-X7I$Z}I0!3!QA3G>3oS0W3D7*YT!cJ0Jd`R>dY zAZl=;>$V2OKJ3(DG>X;$F|*edGbRg^Tb}ae^>lw*4stf;lOjRy2F_VM^oVU_sv3P6 ze^f0WY9ai=FnLx<0Pn!M_HVU_<^KdWPIk33%L#;zG$ntLbmSnr)#Lp%n${beI9xI0 zSEoz{#>X`At~O$_&AAl(>H#8lsbF6@&do@}u!g@m;H%Y>Nz$`ajDm+^ngXXZ?vhk22RAmf; zETKPk#YXYrfL&}HI;;h$*pc=z$<9EV7^{vQ_nrmvUd>&Rbk%D&z_^%qpPZ>Rk$*z* znCw{K7vW2gLErJhJcYLwFx1hVdEP66JB)_%X19fL;&+1 zzPxvc#{x%sRGLW>_6Qm}m!4%w_&YNJb}Ezh+ANQ~0|H3pHBP1vf`F1rJyUf&pwULf zx6xEb(Z`p3`mcUKVF~6(0(qOuX;e{WF)L!I>Eo7x-g)%#fR%Zlq8PqOlutI+rwHSlI4F}`@TA*rhw2}8T5`d9#i~Y zq$UESa)kl0q&2VZ#?GieQX82ti0!`DJbEd-)46w)YMp2E*FL#?*)ARI>V`q3)jKF+ z;2>TGwZ$Qn8e!6y%&0U0xX)(D#HikE6iDI15kJKlaN8@ z6jcU`x_efk{9Pe8&8_*H@XZHPmm+u7CJ8jCe+es^{pjvxFH3EMMvZ%yBC0 zP92TRdX{YA^tECyDw-=2PG$b{_vDn)A z&FSw>jd%ZAWA{f!Bu3*P(EZa)yzBquUjsFyek-il$z__!TB_F=|n-zZ;JX zEJ7P=OI{RLH|h396n(8|ba9&t%dH|^eed!vbW^W+Qx1WQ5p&>iGts=ljQgM`atato z3g;LInfK%*b>!ReWd1dVWt+C-rW)N^@BLxfyle3m2QjmC6I*|q z)y(tE{@O$E@?7VEp9T-cG8K+mHoJ6Pg;UCVttjv#Y`Ut-+1)k|%xixKGDg2dOuo2F zi2oVd8hHq%t;BBsQ*Cg&xfpfr*tk>sa;s&$plZ$NP=EQ4%g4TnASJxBzka8hTTc;O z@Pw^DZeC^;23-VpR`Xmijd4*Vp2r|8Ld2-y=<=SF@+|HRv zxV206taA&*MaHmf6xQxTNL?<4cAQF9x}jB9)E6F-f3_XfnVPkhRe3vI@dnR3PoZW6GP9Y+ue)2QW>13>$l6J38x0i?#8uwR>iqj{2sMEpgZ1PkIC|Rm3=nOR7 zDZSD@MPjXP@fN)-#}`u!&%) zJu_A&bdjsp@18ldqwv6VGxDx=we|-=o-NgAX@(ETj@ufJY)yZV(u;N)>U3eY+%GmH zJiN*uK!Q-Z>*W9Xyts8iWY!ptkyHw;XM7SVZTva+UmQVm*<3CYs7<&R#wMY+4nAbK}~HBNcoD z8t_Y&d)yU@y2J^5YV|C;gf>jy|HW(HuPTe~3`GQJzvfs@s>DX`9DEod(s-AdTEf=g zsLJPm&@sG|Ji0~0#T81J);ui)M6fqGP}d4_Gz44^ zjEtOHVssQd@cOr5r5X^-10Mu}j=-Sj-OEFeERBPM85<$pI~I_5O3xLu_S~GZ2vLu1 zh~XpSr8d?41Vmpc@0#aPCRA}VgKN#JvD*0U?~IT7Vl9o8j(OHwkZ@)#6&T(i2^_2l zjHbdnQ$1TFmD_uR7zF8(SJT#4LA{LJ_?Pkk?K?KhNsro))xY3j12Z=*C!(;c;HkTG zGdr%X!Sb1!&~D|Nq|0w@fUe_5_w9@>Gft{b`zc4Be2cS4UZgz<8>%4y`#YE>kg=_S z`h7((uAMo8AC0aw7_Dn3{vT{ue^9)C%i1&Jv$yPARc48|a{_kdNX7;2??^ zlT?0%$9cMVz)gnoat4~!28v}_CZ$JD+>g9ixd3~xlLl#ml{B?)k~8{yD?@QpRY!Z( zNN%m1JkSqFNghR0z-Xjk5Jivf?bYGhLFBcUow8lsoj*3G?JDi9^$vlDpx?=3JNZTa zx}joT@)BBqoLxX=nAfcH#pf6L?(Ew#b=+0Ue8}^e9a*q(Y!x2wTfcOS8}pFoYaJt# z>$UV*6^j*bEu;od818Yh#!3~8y|$?wu@q#DLIXM67HGT|ZzH4DtK%PVNiCZ6BDDFv zEnT&&wT7_991y?7%!u-0Mvgd z59J8^oFNF-l688FPX+vPp7eb3i=%j~HhJ%fHc&dO)Njd)k@MkJt3cDRCk!xvXT%h)5?hxOK&aD74-<2{+JitB9Qm~81*?xl#`itozM8%1-J=JJ)nZX); z_0=SCp0GgRp@|37Wzq)b-oSEr)w117;|LcKLJz`0P9XpDCM-^cz;cVfc z@31=m#dLxoP3c*P9rMv88}_bjaQ^sNd%cbr2_0UwOatMoD6}g(O(+{n94%33Bitm; z({re&f-tax39fdAn%YSD_@0crU2!-ZRW=!542h7j zDHQT6*OUb}!Wbfqqe1GS=)`Ss%p;}K%R^<46`%{Qh```zIznrxZq)Buk? z%#)-}g4mRF_<8&_P#}UYeHCqdSpFhd@7+T$dnl#Rrf2%GCN+b?_S}2q`fyyXi}4b7 zUL4*4ZLd>j38KkwZ#X1o04S_Ms6tl>IyN`irqlf8RGm^i^qwDhVFqvtustkqpWYKNLU4aR6XM7lup9and(WP;e}?0H?;!} zUswarwC+nAPoFtN(-Cz(5~OSSWrq5_S~vk)XVgU!&-teZruv3S?j^`Fa)QapTp`>I zo(=)M>ob9?sepXk625ZE^tyJJJWUTKJ5i4TzJ^Le85snyR(+l8&kA;x5Rj0_=iP+3 z&WN$L`b2|5gK5@&z+cx$e-ProG*^g(f?r-YfZ_;)!tI0?$yEIc^-FAc_Z7;p&Hk8O zaV9l^WkVqt!Lk|4+~5bjJ#;O0{Hd*CgF5)_>6!ufh4P99e#DpKk02D3`jPahsmF}bz)*gdC*}RBK*nMpPVhacR0}Y+K}(Hjp!9yc>9t^)dL;3 z9h;yDC;I5#?WnkkkEm~uR!CyeyT4%v9f9R)m&q!wibpB6swAiPa=*W(~&PPTVP zMXbG2s68^4ICM_fSI2T?6n89@8#tjl)ZXwmR1e$C@YanG(!e}2Q? z^gh3*>@fmQJ5sjF7|b*ypXidOi#$^<9%f-ueFV8Icx>fLz>TUnYySCyFPvpF!?3%w zWHwG{q0Zn6HV z7Dz_6XxqjCJ`*gEy6v4eAxcS^U+_KeVGDd@E$+LWAP4vPxi>W-yCCC?A0)N{PUiEk zMI+;%@pqXJ%dorO??U=vO$}BOgUoJOzixqmSII@p$`H(v<_t_*v-+@AFYhYWy?nBj zy5YuMg1~$Tw?!c>t{wQ4(Y2L6I<9nH$+GXp+XYw+Pz;?@SLKMfUD@xzk6m}3ZUh>; zbc9bxS^Ugku=^eF(L?iIJeH$B(5S}0`$^i|hHPAhtrT$xZ}0(;og2sTIn3;xkYG{j z*d+dMon9SA3(1gaTK>rTE8XPSd1=5DqP=-k$l+zNnyIcm5JR9R6$J?PlMb>WUxi6@ zlAOMsO&{}tyELmiv7VeZC(CaHQXH0+D={oTjqB7FRX%a@glQkQ5%dl54nn+sy1bfY3w~eB4`Q9L<(JQ zb2lID-Gb5Q)G@3`CbDaFi~4qM%Jg{ava-ry)Xxa(oAKn6G+yJMkZvft=AxbE-(&!kk(t9~0VSrrx!MY{#T}AGomdVm;872)(kzt!0f@3Iyfe_K0F^s^x$c1m)={h{B-| zZ)SXQLY6$Sw~qrdmq3j%rF>i39f@6{-!bML{LNdh_6WiyXQ%bPb=FCb%V@6$r^+3WA3!Ep+4S=Fj%uCR5>)ospo*yj5b*pyv07c zhuE9LCGx3Chd7HEvT>?XK$+Z zG6CQM?x*k^a=|Dy_Y+NyJmnthFF1jXbu$sdW&P6dz?M4wZ1;J3jlPO-PKg)5)Pv#3 z_O{=l>Z3H{VbS8W4(8Sx1GE%T@ubTu^juljvAVthg7)21mfm(NLJ#-xZ>#u>QME@r z9Ko`;Yz9{z-47}XYgD)*se@{la)5m< zW?q@y+teFxlHkp%##OVl;foK{^2n_(muQ zZuriBI!0*ye~qo4#EKKus<8}dhC_HJ3fC%(mw#{DgA6E1?tm0QJ(pX^}tC7 zErBwpTc%-JR{1p3GE>Rw;+OjMN`p~+yXv;+puh{YSSL|{O?t))jnMH?;VwJ8n)?Ae zy8J=B$v%^9w>IJI8KWWn!@qN%09x?I!(f1W&SR=PA2ih}@g%HtyTtL&>4GdF>Ns|J z)lw)>SRpJI(xL8N7X9LTY9+Q0c>dI4_UM9PD$GwlDdA6n2nj1sZ@1eRa}TB*#)QIy zhePy;^PmM4f}gjvq~$nA85VDFt?_gO%clo{q@9Cm*sp0Pf}REkU{pXn;Val}AH!tM z8$if0c#MUHGgev4cl`4b+C%ayp=@GpQ9EV#;(Fwm4sfiV43)F z;o+7`#|C5#j2Eu>a+S7s$6(VnmpopOj^~@wqO1-Qx7GD`_JHQ`ZMbV)k91bmXbEgv zfBm7cc&E|jMieExz$Q3ZH=wpyNCcE4$#JWaa~qUq7}*XfN?~#JQ)>j7h!)&jd9Hng zd*%>7Qr{-U3ndoX%*d}nL9J)1Zl8+sJF^7M3>uUJM$hp_kDzU3-$oJ|L+~oFq%hPNFZq z>^^?|gllkwEoe(n;8fT@=GHF(Kh(|RbZpcE1yxw1#@@f^HrMq}0&m+%p!-o~*M4ve z>xhSml|i8CSPJxR#vW*o;#@NW-O)H6M96%aWvG9mJNG;CU^RpZ^|5StFsF^s^T(w< zwQ4vc@Yu_2`H5Yn66r`;#to3L0Ba9qa>`Xp=#jW;a;?2;pVqi8OM}}HTUG?r9NDyc zcmdMcXN2wbjj4S8m7N7L0QLBB`)gdte2Im3B5 zA?7k&=WodzmJ$DH;8qm-sXT3MM(=pjH+}s-K4D7S-6vu;s34U%Qe4%1UFqaJ)OlXk zn9i2oawCaaEO@;~spN%kVA4Dd)tm^IrQlbPim>x z6hsZ?YPURx5zUjQ#92iGdIpKrGM35iUm}PacGAkiOPQAX~>q%lmpa=T!-j zOe!B=p&?;ccjk%_Iypx)bW9H81MgX_=I`)du~S|STT;1O)3#p`v@i)*>#2G);)D5$ z2~M#M$Th*Iid>~*gZ@FePhLP9IVSJRhSIpW~)_Xe%@wkk;x4Gd~NbL+En zsG!o1s3z-@c?BsayRskw9>%#begabetFLd4@$8Ad{IqS`wrv~Jwr$(Ct!aDOwr$(p z)3&km`|c*Ye{H?IS2vYZUMV+~Tj!k8Rr*HeixTcfU>6ut^;$_($>)r745h4Dbi}N< z@Ost#QihVwpgn;_&wiMq(R%rL3o-*TRzJk#fE}w_2A#vq7wH)7d1lydY&MCgx11lG zS2>YcWN3P;Vo>N21EchRbbEPYPaJsz9r41!-j|LpbHrw5=ex@ij;?$VfS-lP&#uoC zY$#f|bZH!W%yF&`W6VmMW7MLX-}5FC{T;W{SxbA>vLqZ#$<9KT)E ztPoqO#>hIsd+3&te8DdjlfzR^T(D2R-wGoGD!!U%wqTy{s+wkR$YoF3oK3UGE3n#P zR8oQ*mo0p+#RH93;%WXPqj!fJm47W1T?ApgNdttw(7c65{%8_wCPE-3d56#2RlHsB zMb$dGu#lq_fKk!)Ot!FcV(Z18&xC~?&S=8zzB1-|wUkvY;k`2SbeZ|pWVXJts|-J` z3?CIYY$9L5MCqRg)smKmWXZw+v(C)O9ac-r#l`>6EbjJ-L9RaDz>R6zU z9Fe+IKJUPrW8t2wT_yFb0OT!tJcZng2+hyl)=Kn@U!f>a29uG&X(=HTI>^yA$By~Nw&y0DgtNLgKAP?fe`T@#sXz5|t7+TzzK zE;;Zg|HwAZgRgp~kgE~Osgack#lcj7PeLdH&7cMCMA3qmQK-mvM%{aHfk{nzg++zo zz;1NfoXKS&4{I-!h!o@b71E#0=445i-&^9?g(AU1dvI0+pzkKEh4%Zkhv6zUQj9&C z9|W~<^A|U%eashD4fc_#+*$~%*@_@MsdNg)qcp`LO3E0pqV`eRyl=P0jVwz+(ZA--kkA_fR%I&qCdOcq>`(r%Uz zR`S6QPfnNn|5C$BOcsD+JeJe=WQpU4PSrSJXwy65olBE^uTLhw8{nqCvvguH09Pp~ zcK9v@t^4^Oav}_+1EZs*w;_td`-As__SZX}lGht{Wd{&JSA)NfRFR)1mfunMfCxZ6 zX(Arb%l>Z6$k8}$j)Wvm>Vo3Lxwd4)V#z|&V6!#or)LPS2%3Ka&Y*tq*x$Jp0IUD7 z0zrce6cjsw;|Y7qd6#<$_pH9I`>X7gB(>rH#uVqh9S+X>C$T91^lb@S0iMKu@YZon z+55IIc>=`(-S0N<;^LlH`DP%u+a22O3o2qdu3FyDinW_F(tG%68wztpCi3lV*^GH2 zE_Ul}uRDyXjF_2TzT3H^)b9R08Yh^Epg++VeJ1doq9GDKcWeyuRi^5VrEHntFs0ad zslJb)WEH^Q_5~)8zjp!vHG*O%1Ryu*Yanwm!{X7PREt-?_HRScwD-Yrf)OxxilYTm zjveswzmsQtpq_EFvr*4M0raOJr^zB>RTaf-&)6H&OEV#$WY<3kLAE!m8#h%!zl(J9 zPFnv@SeeB2mH$5zMBohZCa09OBWIAUNjHZ)`9;l_98jj zJYc!91tx-*VPG}EzcS&wg+OtA^TCMWhOE0YZa(=DMvk>cg__xyJ8i(nMFs}Qys4o3 z6rf05IQ-vlAOqF)fC%xAJ<#Z)CgG4evUBURWR+DzCk* z`Bb%w)>tRICbpT%&P=Ha%BDmdprFe3EOiREm0saI8fU2T)0$`u3Xxx6i#7*o{dGw$ z>_OQAf;-9X5ApJtJs;9>&|!@!CbXV%hhq-uOsxS&Pf@w*AIXG28U8KQ06Yh$!Ziiz zNg-MWTgu>O+QqIz&d_3wLAl37N;7G(NRGPaJZ4dSgS~<@QfndtlA)IlozpQf6_!IxEhV64D7T&&_*8x07DdjLY>-g^uiOV zbT%`!!rAWXOUU$g1-qA?&Gnzzw$;H#Ib20To_6Z@70ZGL6c;cmXk5TFhj|9;0?rNc z|0%$N2|&;d@4jezURE%`9(9(0^#uSRRuT~mlWiT99#=n6(j*zaVdipvFx`xEzi(D< zh-KW8LCa&snZ=@xUmP?LiqwF2R)Bm|wKd76tv;U?E?BI9~r5XT0Ua_jr65&~R zF5D%}g!MQcA~D$G+pbS2g)6HT6gL#NEc&F>)|>stZ@`KcyN~85smVx zDWIL{zNt_Ti5Dt@ zRyGu#!40$QJ!DCuWf<|0_6Iu0kfFenI5Drl!Y59M)ca27vhGtyPSN~|g=pb{6O1og z>13LY&I$7~h!hp0!HhUV#G`b2Sme*r@nW%=3M?O`1LQ>hsPVqCO*MSqCqc1^fWyb6&r~l9bc2-PpS_Bl^@boXKb7l=}g4 zI*WBgA=we03I(AEV}0^xS1MS8QScO8`@L$KqMs!Q-13H=jFVLS;#-x}Y}fv&^MgVT z=fw}ZWaS-O>#sG>u`f{h&;?tS(@1QD;RL%#OTV+`&vgkBZlF0lZ&?GPRG-JbW`bb% z2j?85Lf!-Z76mZp#-{}{>0lz$dO4*Eb3i*9ocbMRywBvE^^3c7Yf!Foy}y-%!JiBZ1M73?hWjgUxRhHq8m{ zzzl1t;LuGNrUwCR(bC4W(llLk^g?p9TXal~E#;dLxuJJRNb0G~6ll)~Ezs(1&xdC> z>DQlvw_|6U-=fSPH&zsMQ4j%QIkBgo|DX+lDar?cq&>bey?H>$lTr>FIIC|qu*XXW z9YV>=bEY0?1{$rV>FRF*^)nG%Qr<&^Up1nS8p}M31eXCXy_oND>|R-4!vK)wqN1gB^) zI{ty`=7=&BQ=?aEX4UifpXE?5WkS~A%B=cq)>cQ!5?Rvn+7okOMBw?gVA)uqH_0pl zAu?8%N{-cIZIau9tX~i&Ky_BrH;{FXdw0T;e9!E{4A;Nmi7X*9M8wjprp7r-=-SI` zh4As{wZ~?!@cxmD+87!7u0$MVcg8_y{|fZcdhfq5i7*wUn4tH_m>R zVoyG5^08>PqL07VQVSv=%^xr4FvRveAv(;6o2uF0lDd$iDzgM`XMTJ~>7D|5+cLi6Bqm z`ZYy+YPr-y6Ss$Jc1QMl4H$=jnNV!xqY~(CE!N+q5La9@qn_-;NHoMfnRM7MTGyee zN3eB7wK}_I&YB^V{@{68(}JD~ZfE3OYdUcS&<3h&Ja<E;usj==(}{6OlEp zScMLF6nV*o$OGz_1sYoeFqe-F$iSLo`2{^Nr z;~Q}%j|D}(+RaH=Lwy&xEnNTOq$E%Wxv5Fx1GZXIPssbU?Mz)8Wz6!k&+^+HXvxjE@`Zpf#)G{# zBxlNr;!R+ft&)pV1H@$LAjmTE>n}RF+8l$8NR_ucxod9}C%Lb`(uh^Bayyjb;gvS2 zUd>*QKyY!|`IOTirMJ7h%sm3!+W6S+U#^f^dk(?zpOL)7o);~*-l5JV9>_L@UUObg zeNANY6M%-v``0|`z|3t9b;!&5hOGh*TzD%jnn174?n5UfikC=s^`0Mg5boByab2(85jz{!0T79oaBnECN z+bKW+$!m8@*wC@zb0`jW|A$}<{sEV2z~BVb3|ME9<7L)5F7$w77L%L(64()!S@>Xh z8ET6TmiCRwoa~=6z%`h%%O*&o-u&8imLhIR|Y zF87?38`!ymo1`O%qe+s04MBTP9*M**0vjXaY9jrpY$C0$`I2X`TQrRBNl zlh2p|KK;oP@Vvs5lOaXfB5}$HGxk5*GdBmAQ={e`8c3HFe0!-S3N35nN8$Eji{r7& z`Y5_7H41}J5pKtytx_(dQZ0{gc4tfzETqJ~4^B(E!Q)Pt&c@Hr1&DA3N*BrPa)@eo z=XI>lh@`EM^CJ?W3p1N#q;FuTN5GjGfrDpv5>YcZ69gk*(AuyNGln-n>`ORD-Ql18 z;Zc#4-6}rFz3phAQAR;_4j108I(6G}l70lvUiRWC(LstfHuTgIhrHevBf#j3x*l_v zv|nY(xDvjdchtEH#hrh~)JLq4hC1+Zp+wH{pDe(KK^@FfRs6|E-B76G!k#1|WE>ZF znS}p75p+R|oP2bs6~>jcZiz7&1`LX-U9|A&)N+RT;6Mp$HNk}?W(=XZmY8{4A4*OW zPdE>M^^RK^B`OU|ptqqvQa%*{Oum7Z8-^pF<2|;0jD>#>ces?w$aO)-E)Z>|z9RvM zilGrqNX&3X+^d%kyOVket9mRbOU@>`N6qePny}XkpX1w8pqU!B5&J+j(;}>n&5K$^ z#gv_G9W)5*xkNV0=*oe#8w3wmFL_a_YtB}gf5AW&?jw66T|#=Y%ohn4)^}qwQ@Fj$ zEi8rGo5}{uBFnNt1^RWv%P=ex|KbA_xz(+UY?ULR1CSY zlsPZdR0-Y7#3-bowg;8c~X&8!C_NI45l#)y#+U2;9kF-|WsLvPr_TMa(O!$ZNpv}IvI|lj1=eQ4Z%K4bi`sqh7O_#c# zAz$SI9XG#nfN0K8?KG(p4yV6&;->o=R3!1!wj*Y1k?$Vlq20+9a$7z@4PVcv!M7Q& zAsTbaLCho$*qKqCk$!q0DLQEfa?vT2>mZtqqx8AESx-QYU!kxwE9jHb*hy;I7LV|N z_pgont?#{xoX4RP1KuD4``r}S%K_h8TT_gv1zAzb{xKNN2+%@3 z%bq|i%+Aby!9hTU$-DEblf$r5nKtDC&+Bwyc3aOU0{!?AL(Gu80wP|B6#%g3*c$vfx&QEDQ<;06?Lk*r!$^ zyd)GQTa*uAiRjvI6{Bd}zV8&l#!k>?#=a_DNag$gjFSmq#dSsYYqkxDzO|Z}bLd3? zb_=TQ6*NHOtLCjF&}*@qb>G#FwoA-QFUbEr&;*N`e>)au|GiJ*?Z~19S~k`ZNF3fj zxRpt`fDV-=eBXlN44xDKfU_y$KamXp5J&+45P`Yu>_RNVhvlO^9!>qq#nJYE%uK@lJk_Aa~qiWq*o)tE)RP23c|(Q*XGTM zhvHPx=_5q?ezS_rxh`S$1lKw&d6b6G5vZ`Qu@p<{O>$1$ZUm#2ojbt7 ztaW&hT^>YNAwR-z<;(I$;kFF#&sc2os{7SwMql%)Nc5;TnUWm3IlfS`EHtm>J%zKZ zRH@St>(2NVTOQ=%kAE%kt|j8tp^vSCrNOD5+l5!8rh}#%8`4(A^f!{7&#S>LvL>Hw zf^(A)r*!YJ;&Pw1^Sf9m?oy#QN5J#CO4D`G%hn+4PDm$-vA&bSQFJ3&o};<;hfsC2 zjKtqq5b@-zjg8Ty?RUX3*&}~eOwar0lKBFk^`#CWjufi^QEj=dA{HF>0=(~E?nf4B zzk}urhcF9`k48HqK#5W#4s}T=9*KzP4x8;71lNAi2PZ=IswKdB<5YzKa2Xa z+$1Gn@;5VG|HYo^(2xRxmePfacF?lTnX_o5%#I_4A@|T z7|I9Cec7ZFIUaS5WDQ$n&MRR*9{lN}T&0Ah;&*3Yq@kPdUaG><3S_^dsiHi}X^x(@ zaiLIRR3LKDmB^doxD)uHDD0hE?V*$)8_o#LfWO9{PdkY(l>U?QZYZH7u~I)1fb%fi zXYKG+T|oAzA4H|Q)oaG$VFA|2t-X?SH$tEaVY%{&@WgSwVRF1AyZ56JQC0>1|l%^|yDehA$hYD+Phl}_%N~*dZ9a{jDpUbJ& zNU0*6tety#&o5D}6k7-ySSB0ZW4q^5upJ4hXDIoPn)M$Id31qRH7hDKb*G3OTVWh! z&B^(smy@EK0=}Nll>(46^aO78Fo-V3wT4uW*KO?dw!#l|RHiBdxv>wgwopyDL;H5_=j z!pq|vWsv1&I0P$~7WyC_RN1skbQRGDT)w@%Ogx=O)6OiRy1BjS1Xfdd>#fJbs6X98 z5cOlZS!uUjz!&=;7AY#$`fU+aG(ixpsG%7RJKNMHj--Rou!WLtV?s8BVA-iT&O#`p zl!SO;%g#pnsY2Bpy+OyP(8%D)28reg6OXIPt;uy|o;`RvX$u=o-CHycO%D%u^7rLs zY{OM1tRBw(l=!WiN!)|ANM5J7+UEUj5RG*}G^yI`X{J1!H$_qu6wt=%+`#`k?9G7E ztd8d@NDtePL8afe0Y<}~iqLcH9!qMpZE%LA8fWSt8R8M&gde>!2={};>fN3Z8}(5B zy;@&CcW`)wY=sP3XQHAjiWDL%*LwfS|CLm3O(nRJxlq|W?0bSeJR#MoVdk`k@h!() zAnuUdix<&@TK5(IJehnnJ)eJibIIsddtgXw`LS)71Rf3hGSSi*o?R;@L}I`ffyA^T zdajqNiM{HN*HQ<)P8wk zx7{f8w@F_s(#pwyUp3g(Zih9IJ{0DpZ^vHM)G4qS+~kp#Vc=68z+wD*JSG2$EOul- zpbzANJ$sX|hOGFtPrcnN`*hMG=Fup zx_$56`y0M^LnO@6kolM29&|IkC1RA`_M+|Rvz`0%_QK6HPQE`;jh^lk1+h2Gk+G%p z@~z@5qHj5yrF`A_8-buaEu^@g1xJ(^)DM|1jH~UQ-Ic(N1nxuCyz?LA8N5LxkK6K@ zAvQjUVwPHfU`Q_n?qHR0tyrg0{qmryrHk@fsrl>{^{Owu(xtlQx$HbwD@RT~<84bV ziI}XMwKNB`2F!7z9*vdtJjn`UFV`_Co#{g0J%Az((*)?(@+CrcnR+pq^e~9AGl~E= zz9An;P@DKSuH}?=$y#vJmmhnhH;jDIYTv7YEq5s&gAvf45d@o% zbpVG)gU-M4{mU=Kd*nM8mny8s%$F)M>I|Q*I<6n1zyo9xiZdO}tn>5Ee!$-*Fmc}i?Gix;zp0!hXBTZF_e7zG7r6RsTEJ2 znV@NL*3#*l-w&oj&Pts%)+-w>Y?OGP1(IKAuhq@9x1=KFB78(oYwYTExC+Gm*} zzT0f3ru0-)Ti{9smfpkazt4U$aBKU>i9U>1eUNM%5>Nf1+sKjV23MBG%`w+jBxOP0 z@`?;L1}xEmBUi_688HQojNfSJ(|MT@FayE>q`d8F+ zujgt|*_pWzMuodgJQar3F+D&hsUNm*3trAg8>Y=FT=(hm?q!xOY+BR6) zwMHl&$c^BB`tQu>FRb^y9LX^DBsE!T1INb8OlS~SF$(6B6wdK^8sNEp@~tkp zHfsp3&BqP&U&D<3nb(si3NnA{=-Eix1xe}}96*t) zqlRbv%&%vo!On0gq^tS;=r+R6@pCAyDy5PLy0J}<^i@g{U6bc{BHznF;I zK%?Y4#MQzV#>Qziguacte;@Yp2ygA3kMl8vP@L5#_UgScyM&^9eiB3@Lo?r^IzDP( zjDtK%8-q;WxT|-|0gD$$HZ@Z$I<=)Nr0H2_CqmpI1dlk~;oI=rUS%ntaEz{54{L-O zM*Pym5JKN7DJlZtjp)gEVr=t-=fu&{S6drkOY*xpqNV2^jc6GA z;JDS8c7(66Bo7wC^w%*_XVYhN*6-h$P+Sg_7i1_+Qr6|OZA-*k2-d9pcfQ~WoQ>1v zVjQIMCX6Z}*`-a33NCOZ=VF1cjL}a7k7)Izgy(7bwjN%eoV?Et0E_x!jCZGz4)pOc zC*FnikE>6DnbOUO;nF(@7!(#wlx!~(Wbu*nR>R+FLE&y z9Y8de-3AJu%~HFDchxQDK^o3I@9M=!KW=#ceF=tTRo61%15OiJ`7djK&%oU6sy6HB z1;bCqU215Vf0&9dgp!NNr!ta6DlEfRUS)~4m)_PR{=b(aRe2aWxWL$hh8>uP&C5;$ zy#n4|0vHhe02}bx4BZqY>-PFTXEBuM*;XecDE#71;6hq@{q5Lr-9*`h`V}z4%qcHF zc9}TaoH_C}Xat+JGQi$wz5-6*Ps_tp12{~oJC+Tpz9%~0QU4_WlN_b(=Zt1~#G?Mukm&;Kn^^<7$3Y?BE*n%(&akhSkE7hUHd$dm-Die# znFvfenD}{b(0agwV((GVoJmATLVWnSr|7Y$dlG}4sEsh;qDu+dgoa|omK!%?ar)c}X+Zx0g7i`3 z*@R!_;zVb49Ah8&M2KHMV@gO8?HY4ZRhr{JT@^xP5I)*Rtnln^%iQUEP;5 zj-`VvLF?Yh1bKUWw6=iU-C=ac=Di_Lv^m#=FRO8qDUZnidFexDcuQdSNjUuwV8`S!Xs09%zjIv!ksoGW?hi0Y z1mU5kM6fpxGbpQk6;N_2(BuE&i;}17LVspiG%+rgZyE8iwASLsr$%I}q`MZUbck0~bM!l$SLGg^SaqCs&ZsW~+ZK8W68 zoLH|J3rat8CJA}{xHmiVFI;~UW?pwO-D*$KRPVjK`!iaXG1-}@Nnej86ri8OI9`^( z|1E)iME4dOJl@y6d=x^}{I1x;Zy!FVv6R}@|1>YJn;(8N{^YRv}8p+0FS91(S(KT`i}d&~1%)}QUcY@}q5KJ6IVt*2F$SPW7H; zUw;uVd2EbIXIt7E-SvjDa+_pYa_S z`h%rqF+7FK(Cpb}UwMcTe~<^@y#FVY-GLY7Y50tuCxz~S(OaPXh>H}HpJ8-4os!sj zY z=zC$|p*$EN)t>CMFkiY0REixerZjPf9bU2E=5}a92@OT;GsW5rKC1_jQ>M8ov=PF4 zW~$p!a3r5Q;*W|wyIdVz1pNIFBmw0{u?#t$l6H&{wJYMg5)32vT!?}PnIJQr>!ODn z=P%u+0~J9P()ii5@E}^P>FD&b3miH;giaKsz3psP2Y~xiK()+irqaRSe*X~;Q4Bjc zEwIcPfH%Jdi#xq!*%5Nt<;xqbLA0?u{NH^deCu%1`N_Mvz!AUY_~#tZ*QUnDv{9|R z1(7SNtMqm=3VHk+Am0vtlJ38m)v+j7I;KlI{44-6a}M@Rwnql0K)`f@3Mog2iWGdV z!24Pq0czR?AuPHy>b*CyFAgfIoRJvPZp|YOxTidsR}5y2JHo+c?2Zem@gFIeSsvlv z_jj1O(e79sPF(#&8A?mpYoxjcfQ7K~l8*)S&jh_NrqY2-jWyStZM-Sv_lh|V z`5+jKYda#E|52|Et;^?zojDS;cJvX21r?vBGwP4T-Ou~TEaFc*K)tA3TTfI~OLBk* zV+V?RkJi4|*ef42U0Q0?Y?G@Kn!6yKbu+2{+hZ&~?ndyB$V6xB-+h=ct)wS;TOTJL z67MgzFq}L4mGSi|*s1Vi%O8U70EPUc+&`O72VK4UxkuuW3UL+9(=-aVxlrYQWi^!S z(CU#eG$*;nTd7lGNRTzMU#DHS5}kX>bo=2E-N*$9);S_Y&^c$iBR$z@Ml#)tTv!7w z8fJ-FQDHTrvX2jTmf`jm?x309SfLM?e&<0<&M)N583|!A^nS0@ki} zH6_KMPYk!DzKDH%L%b##C?5m^&a+}@jHlK?-afKn-PHh{QMLU5o|VsKM$4pqZ3k2t zXSElUk_T)E+r!qsJ8st&!1bR}LK+BAd+3-<*cvVVWwH3Jc85?!K`dLS0HZMVLxq}z zr>*+X(?w}DE_ir^S-Nh9ddUY5l16DHt05W8BP;3GuzZ`6m)Cn=>?6Ls@7<9qA_1-% zj+p*K>9hEt77ER^j|IeeqDNK%^b4!))yRpHi`tu$+B^VhCBzfDv*W-T(KrR2cl4Lc zEKR|(R5A)#Pt{qXyd^2P04~WQGS*}G0};f@W4UI-TYX&8sqPbQ6p?GSHfpdcp7 z^$V@&%-P%kff7*yDi#BG9fpvO%54|-E!`?Pm7t7`(k^}Xr&QIq^3{kEk1nPL28tMaWB|y)WVing8vggkQTA@` zKa05=>AxJV;#HZ;O!|$@rYojXDnnXc@PCTI&ZA&H?E3y$K>RH$b^?A3Zw)Ttu#0i> zk-{$5#dJIRwAwxSqx?SfhsGIf8U*co*~(~HuDy0QKh{lU2|q>GX4*gIC45Uaa&^i) zP?zC;{C^q$VAiHqioC%+2&RO+`C7&Qs(ef$)OHP3qbspp?V{>%y1IJ+ws~=mAUGo+ zh+(}~)Bo9X^}DdKdiH;pZZ_=gsQRC#fulb4b8Y}Z@vQ|-88r0)uJuMc%_S^AW>Fpv zeWscc7ziWK&J<^*y^mrlR>LS-hwZQHCcCDjDqQv;5hFy2ks_(B-i0RuE&N0;+J1Z6 zEOr?H09?w}w^<4${t>#roYj+O>Q8?{3xI6we=xM${WG$l{H=KSe!j08SGsz)xBN|e zv-|^k&Oigv>a-#YBvhX=9HDnGs1*TgI{E~|Kz@S|&AR4A);}I8^G^PF9EV*As(b>f ze$n#+J;y>&7#-j(Krxl2(`qscMOB|^gKJ|BjwZ=Nt}^!IW;BrGJ~Mq*YyTMW7UW?M zD+rQu^RqZ?ADe1p>0LoeSM}R;)6lJNYYHuV| zRk3mcfVCdPHf4!n&~p6YLr$d@yw!$4<&p|rCbM(zqABsN8^dm&!j|Tot@Xoq*@W@T zPouzhx(P(!g^XW{6O``}S-wr5JI0|KV_?DDFB!oY{FcMB1)6R%qH697AY)o4GA&X= zJzDIw3BBM6{6i*yUO|K&VUhz<8Gp^d{Jow9#*kg;%tq~^7ZM$I7yzj^=c~^cXUhoy z0GKSqd6+%4d>6aWphr($yZT=I*fkrZ-Tjp zgQg;HsRlGKI_{|{qjl_dme9&JRqX3p*}1Wbs5|8oj9B!YCir9daG@jpF(=eekB}%Y zp^{3U*T(t1_75DR;A`k%yr=rJhQSd~WU5yfsV8kN+I!O@Y}xQ2W_*lau(*8jxeG*e zjk(BAo_{q7e*)o$Vgwa>nz`4fpYLJn%8*i7*p3l{kuhmu;br4;ppXJId)}MdzSIax&kzvwmiy)>Cjau6MfbD8!}&(AXeGXwR}0+2zo=--$K{W0hL?c+eb!r2S4Yga+z&_4pZHp(?yBU0e1+sXnU5UToY zwO$f?ty#I;=hsD`EpWZ9tvxgUp zt9MH(E)np4wPJ-PX5@9MUU9*46Hd#%mI*D`r=d=gK7TYoODr`)<{H==b5s*=bf?n zTZ~!JQ(aB7E8SRjmF@SF9z6TFaDqIbFMU=e zPE@gJJq$b-L)b#lZ*z5SGz!MmYE@}aqoB~7@xZNnPU+(E^_5dE>b;6A?(f3@^2RHY zV-^=a@*3!cr|Q0k1G_Sq*Vn<>^k9fWj^BtI+(luwh-i%Fvkw~k*vbG#AU+92*uZ#H z+Ey5>JKjs|D;D-N+8l9$%Fc$dqJeb8BxJ3wa@aSF%Tid9=PqIaYyb_3cf|g-0N3T} zTBYiC-&E{rvlwBLZ(sF|8X3YBX^sps-3(`eYvgRh$__k*mFZMI7K0Z5aNPN;{}wt? zs}icE-Z9LBeAEI^!QEyj^@C3#iz*9H=eA-P!9WYzpu=kMKj$1Gt>AW}eO0%i9GOn% zo^hTH>I5n00}N_+l$MJpFaY+&RD9g_&l@|{YBe2k7sHxcD$R{nYhfc!pO!bqI+S`x z6e-1ut@^lErcGcfAj0g&sAF%*&I_9d01fz>vQy40hAaP@UiGPi9@~qAD>Ek7PgU0mH4!sp5~i$1vkH&x@H2pYWyF<-34iO| z-FYxv4!MdlW8A;QNB8@ikyH{T^rm2Bo`McYfS4lzIQYdQ1F5kr3YK5>T dm(z|sJI*X~W)xrRTEQh$Rv`Y*==|UGzX0i+MZ*99 literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/admin/alertsettings/ad_alert.webp b/static/images/auditor/10.8/admin/alertsettings/ad_alert.webp new file mode 100644 index 0000000000000000000000000000000000000000..88308caa5f024bbcef0bc7b9f652f16b0565887d GIT binary patch literal 22994 zcmZ^}V~{VfvnD*YZQHhO^NeTCSZ8e8wr!oUZQJu3+xG1F-+SM8_rq>gQq}2nr90hE zQb{^0(h?FA+CV^>;vz~KN?cknKtMo9|0)Rx5IP8uu$+>Vz`qtSCJ~aAN6s7KY&G?9czb*r%%w0{Z^o3=jcZj#Mc! zQj!9ag-sxT_y}{mPj`>169(&>i-NcM&y44l%N?AJykqdaH^IlvV@3DgQ+~;x#2?H{ z;IETK#(V%1;ot8XzX!qJ{G)z)KlK0Dy`P#@oS%L_-}`=>KSw`5FF@a%-=IG~KYpH! zU%sQgdxH1x6F=KeKtE4cF`u9nfFi-^pTzGzZ;;o#qr7>)2H$Q!`$vO2gShXSufb=7 zPsne8!|Yz?%UkO;V5=MAoARmdDsNSA!f*8Z>tpzq@@4kQuT9_lWA|(DqwY%aSumb) zL@?&Z_`CTd8!&mxi^h5Fm@S3;F-||KKLHT5G4LJI#`DfnC zBjKUJ>`%X+%U9R;-p|1;=xg15-d*pSpu(67{ z{m+izu;11X;Xet$KIfIeMQ_JX>d)pk>_0|as6m>a?T^>j&*$n7;iKO_CEtO5MBfhI zZXbDXai2d2|5$e)4L`kCt1cW*}Hipwo%h3Z6`-;43d9jEgGkY+%* z$(uPM{NR_kYK7?a7w!`NAuk3b$<?R?BqOcXwvBj zP4qQ4Z2@p!HNzw?vQxwlhU)heH|VR&spr}@`0A*zC|T(EbQYjpD>xa&?B3(w?K*y0 z1-~wn0DTp@)9&y@1FgY866)W~v<+QX^ZIEEIbQ8e5_|p{Z_Xu?7PtPi8Fj$L$cc|b zM*4`N*gXb5Myip#CS*q~`Bgz|N8!)2XKTpFc@`9&+Z9=VLK(t9$a)N#9kQQppV)>+ zahr5tTqc+PR9Y+(``%waL^-jqhPUGi9yuDVrYDALd9T-;hOqa{zUs{YJ z>)Ars9$WXB)%3!7@L-sv%C_xw*d~wA@`aod=z~fz)vTYnTp`77 zMqG`Li4fc-y4kYYv;J4d9+2igg58rRCRsB9cpaCj9tHF-hq56VPR=u|{2woQQ@{(|a`gwFf5T%^&mK4dQjsWhWKCXFhcnio?;; zfr@?@S(PTy!NINubOkmSC>00DV_fE<&dUBa zRQ%$O`XTchC3~a)(?qPm>u%Nm34R8uqsgL?+E`W+K^9D@*j5-;6LPN+h3MSnWXwZa z?8ZG!GQMXia1yBoTJ?ShU@3L}zrFI$Z+k$<QYLsIiM*4TEK0)S0z1*%Y~#y4 z+V|JjgQF>IR#_gIw>ZKf_D~@0nY-h`p8tRX{Qn{5AK_MtEG^UaXveQ;QLDukuokfV zIvpl5YK5IV?QPMMPqJ@P8unPc^+Y&iDRlDYLZ2{w?%w zNTyp)dyzEDj7s4G9Id+$`qWHh(aF~!ysq1Hk&|`^8G=8p=Qe$6cJRVA`4zASx%vX! z=G3bHe}pL))c{vXxL-#%(@u_>pHAD;y!cqOocuEf;H#eHq0! z96lnLW9uLa_{y^_o)*SDSII@f+&OUiKTQ+CkC%Vfwe^}qjcp5=l5&9Fhnd)e`PxEl zg4z^LusH`{Noe!@|6_n8%UGiNKJ8C9p=1vnh}`BB_;r$Z$UdwV7!tSDiGefANaz>$ zJ~BzJ1w225S`#s`F70VJwE}HT~_Ud|7CHXC75aU=W-Xp;vW{qa_FEvW}ceKS&4ToMAx||Z82t3 zNcza+CtcO5O-8mLm>nc=C-(j%h{^Yk5B?EaV*UYF`lO5YjEmVpv>Ji$1k-w98qr-a zi0uT0{|OVF*RErctl@H+^K}MQ_AsLFH{SJX=t)-;Y3{zK{zpNUX_mIynbo2=wmi9H zEaoJusfJNk_GP+5K*d_w^D*(^z0?231agie1yOHijn33W9dw*0Qkoq)cA2TunP}*G zXjSqS*8F;44EwqOxzf;>c<3yqbhTTj;OJb3 zo*OEVsU554=xc)3=~XwP^fEqPSwLNFC=vNbH;@SUrBw_aj)}3bOq%3v|C$!ij&EaV zcQ4UyYjUysFToLQo|C7?_VG{X6#JQt%17WTCf|#3dhe3ZP z=EmDGA-~Xoa9i(AemW%vwkvys)Z>LHN!3HI(cH~lLQg>O$!Z9dcH0;s#(=5qJ*6M- zI8yOr8;8pRn5_SzHrXX^Q6~dEiI6qp5~+_nIWp5k>S>uH5A!*A3!yBjn3M-h3pEjD zGVw_0qDL{}KO4&OsjKjY@JbQ1Cxb{$vv`?~oh8Qyx4v=UnEZkaZv`AhS! zh`;;?{aeopr=?%~2;~hA;)!Cok=zh*s32r0Le#CM^?%m&s;91=CSytEx=A@_{U^#B zJ*o92a_39C=uMyj?PWS`^6XCj&fq1bl(0Y0rzHC$xvaa^8*{(8C(IbS>ais{u&PL1 zb901x>Ni*LsE+pv6sBAGV94SMr6jh+`Cq}O`Zbi4Yh@K_|JcU97R+wYNBCHvB zGnithZ67RyJ4SF@J&3+4oCxJA3(y%CY7V#g-N!T^u~r*s?vnMpA+xu=CTWw^Fe;PHn6vol|5->xiX4PEIWN-o_fh zr)Ri&tAn+^e!6D)!|3CVzZl8z;QyqpZ(2^mp^y58Y)^k^>C!S|xJ)syL>(?ADrhOt z?#q&I3gt0>=Ds)1jnc`}1CMT=+ZkiQr0WbeBXf^BlWXO3d;7@pAcJr)IU3oNg(EivCBd4~-MZkB*uGWvOBHkizA3=Wg^2kL zoVMe-KOkRo5IZrfKJt5vATQuGv*+(*Cm zVFh)D`9>fzpHu}(Q@!EiWi$dgR*@~>z!H<;yh>(fskpj}Ehr~kl-*zBe;H#08$06vjY!Xx<6EVJpW+846QmX2ZqV~#>{Li21n9m@V5lG;S4i>G4Y34> zM*_DZY7IK{F(6RPG(k8(%d zjmba3AWYJ5E8XZ{G9jpglmFdrfPABU_e?`Y15X@|fLLrsf&fGfjXG=6LiI$r1$H`a zJr!tryGq=HBB#G*E~qSH+eC$nBIJ{J8N^vNy&cda&8HVBd3NF#ptMkM)G#h9sMi;Z z0)Sf+(vFxq!9b^-n%xcWz;j-?Ha-mwIA9rDcyubmxj?%1l(y@-&c7uJ9Oj)?UeH8wp#>nWUDNLy{(K%3f8fhF*UM9auqVz=^>c9>Aa zN8m9&2?4ty)@c|up=hC22*Bams+kz#wo{?4kyIFp|h{81`BhG@+&pyO~sM|0g=5%yD$*hSbB zSu*EW(E_p|uCZBes)9AtpB|GrKsPt8)k(_qr|*!)vPovI4ddl)$B$OzJXg-;uA}|) zIN`yb1aaHjH4@PGZ|nFil*tjXP8U#X!dTGu@u3VAZFe_~f5y;I=h_V-ugzCT~= zFLF*PGyc%ND6z6H{hdTpFZ|~NuC4^^_i?paBWgD_{ODw~Yta1kl9<%jnM>v;A>6d* z6k(revx}u{Bk{)Quvm5Y`iZtif3V#-9AoZ5&xcjgk)Si3F_bQ0%^d!t` zI^owY_Ddna}WTkakW~Hxg5tQxNgqcTM8^Zm^3+VQIN_ zsrWW{gkTErGDTp$-m35~-Dc**kLewRBT($v>z0BXw=8)LOd9V-3%`6N@UzU>ao7Wc z=Coc8OBoBmX#k4UrCNNi$Xva$*dhp4C|R6^bNMa^!I)Hi4Osero($sKfv5c7qmYE? z)hoPJ3}o?HyK71=3tk9_xSrrI=U|DW1a}dSgLXP(Jg&21Hr#x&i(`kA@p?mBdb?u3 z6q|Z?N##-p+G_MSP1AV2thLs~x;4p>?w(TEr1XyNPZxJb@zUMSq+EcJ%sJeRWtUM6 z1nXADJ)SzXoYH0LEE!d?={mp~45QxhOKANW)$0_pt4QpDGQA+6p)NJkxm=JCt?bs( zD#?Qm-H5KIAB3_BhMq?aBc-c`aW`kz8K|}E`D29qd8K}2ten)2B3&e;&)CN{mldq@ zcZ=cL$SLDMm>+CXGS3ctqhB~uAw&J$nzUaS5RbWal*(T0?%2*R1MN3U`X#DUuC@5` z8q~yyJb(SQd2+gjQQo^9;uO5XsW5qsf!CE2s^&EAZC=!$``~fDa}0^I+6qT-Tu2xG zh#vrxg=yWtB9I%n6<+9#QEwRAoRlJKvNAz0;@ZvOJOAKT_ zNf`yj=9~KKiJ@x4nYf#Gtw0O^6+g>JQ2!<8Q6j;$9rKAK=}|V47#YC}E!>@i;~~7E zcncj4#3id9$qkGavF(;BY+Y7s;Z%}1`wQ29?^R8|UpVP#3mF{iH%X8yIapgU!_pMa zW$A=uvn_#MFxOyS6WMw*3CpKbBhIl!U*(4)n!x6OqJCtt+~@kMh8+mW%Iu)zPD&)r zI~T;kX4=YNJnT|M9+Klpi&e@e1IJ1Gb9O+x2%>IaTic})vBdx-@4%v~wWMw>d`F4kGC{kg=p$Le zh$)oc4&10Warx(lz9utjy<0tq4`#F%UFeU?>xY~(6D@IKI!#5G-G5pC?b>VZuOyqH z$;{v+T1hMRQ=FUSq3{=8H8=WZmCwuC2(isus+8t+c4Ri@PGklLjzkEupC`jDuuiQV zKf`!C55f0PR|`*6gAYj)o6Y2TC_^k4dz_NPG~?@t*7gz-dfdIv6a|J*Cyz(=02+P6 z<7kp+|J8`(Zl8m9#?H838O3{as87a%6R)+%N96JM_7ayyk}y$%oWAe4atXWQutM+7 z8WC6ao3bwOrqx-7Lu$(M9A+=N!a*fW*g;LgO)W%<@ ztkBcGgY%K1Ii zj|4R0Nq_&A=Re#f7_#h|#KYogb2 zy6dIzobI2K2)z>SL`I_J&G@w!jI7#ycaiVuN=%9}Cbh(xsGPV4z)RCDafj=q-STA2nCZoFW; zaLN68lKILnUBK=nVl*%VttJ5hS76{y9rZUZ>H(ASYOMVxAEiro4OYrz)n9X_pSwp7 zYD~NGxBEn^s6at_WVeh{0G<|HwMx0FuQxDwk*_88S=R~T!z2_=$wK1@40|}Ut@EY9 z)P%{HOpWaKW1p3@@m!k(6_Wsn(+x=B7Jb-0i_I9UpkmogVAi}e4>fr3Y(K<9vAvgB z(sJ`yW-?Z%@^hiG*i$un82@@xMXt`QrUWtrn9tCIj@3=~zydnUM~d*} zk8n79D2gBWwbld9A>KS%Fbid&M_@*QBN}Hq5`Bxh97uD6bZ^9bIBCb1l)Uc!aN4=5 z?9~K!RwCk?%$HbXh@L|C#vS^M)8<7=R1TJ3rv-jMB15s1ib0&5!|rb(AeUWg%tr$g zPAq@bci2m_10)z9%KG7X6(`I5&?3`2o z|D0GsyOeQ#y{*8N09dd`31zU*9~+Mz;rLG%kcsuGZW+vk{>t+ zn5?GgZti~am;eF-d03p$?6+DEV$7dU_FK&3P?{B#m^eGi5oXx&3V%ac-X zsF^xb=91Y?E~AB%ll9Hl7sG~{xEuw#+El~#Y=d^WP(hHgfl5h3AO&jWNSDuZetqgn&ipH#+Ei!2Qt8t zxqC-&T1=Pg*4*())#{F&xJN?OT+qiALVbPgi$>@&6t=?8%J!lg8bgrTfj(byHcqrA zEMrEXf0T{()0gkdx2k<&>L7qxY@c;R)DxY4X)uSEVsb!4pgvIV9`?AKDcWk-{Y(vg zql5e0X_iA~8|^cy0FXMg zX2Ybu)9VA>Mh%bAhn}+~d!G>wR_-RpF)~AT$Yx(G_SHF3A-A?2YUo&@zla*MJ8+0B z@lQEa!9}(iG6g=*vKHEmD0o$3r}=Pjt8q$|IpEe77rzj6G#X4tUdd-9pv8@u@%9K7 z_`)&q?;@`oWE$687nS;_3aq%qvl}ve3M~s5~W@gHKpsqLr+j$^|{YeQ$ zX-4*xIM`B0JtDgx{{#-P992;*^jr;lbh>Ef8SUi3BrEz>DMX2sW)YsQPlDpsX(B>` zBf*5TgZdLJJHkTIN(ow3pshNM5n6?Kqi1Ok!%of@v z>}1I^Taw*r=0c9#*rvo7j|Dnw)oeC}i}OVJDALSs5`&KpZfct7vU`ND2q0QG2N8UC zS3gY>HoaWTGbAakP*sdTH{ugjriV@dKVEq!!Ps5Ux^` zFB`(ov^DH5=lRQjjpH~j!Bk#56IbK=t99?1uAUymBcOt(J8HE901XgHYy#C zKr_k831UrI#F&mM8$0kEHNz#5{m7zJ?Yiun<_E>bzF(lcLBbWYTvJLevx_RijdRw2 z);rm=9e4)I*ZF74xY5W5_%Wu@nO0!|;D&_y)%F&A3oqJMqSx>9-0#6q*vNPaLQkf2 zn(k>DRzv?;m2UcT;uLm61w4Rbh!b{8?8uKlK50j3h?dsYL5hQpNi2R@4|Dcb>)V&bv zu{zL%8qCboY5nf6_`X6?WB2b>F~#9Oqf!>5TfipEPrfjRzsI#Z3apj=j!4k^`cZjZ zSwJl1t9{iZca&F#M z5^Z6+6cj{$;D~6=^zOEWp&TnGZvJhA;eKI~Uzp`EGzUU7uX!@^f%tDSr%}UBh!!D8 z0O>tI5e~zd)3wU7#V)JC=YX=PKQ9G0cegjl;Trd>gOo0%vug8?!4PCs!O%~n%t;&L z?v|Gw>?Dum0am(%Y8mUA1>4TLa1np2Ul$*|#<39y|ld)mNwHl@mDf zcA->vAnoNKU^gRt^MV-gNQvPyIh=;AAivI6 z^uk%Kb>bv?qPWD~JY{tbew)0odw3RDZ2|>yNgt#YlfXo=zrT!aT>P0s8OaJZ=veuV zdP70$%Wx(%fSd}r*4F(^FM>Th7?RxO$*zz6%Jbk8#*YjN1)g;1JFM<{Zl<_JhH zk`b|SZkspxlyvRL8_WrnKe0BF4gZ~wfR$1s;~y`ydv-L!L%g@uXANxi_Bbz?+_3qU zDd~mDiP1CL0LjiNT8M`Z>lg#5$ZiaDwOz#kfANiu<#{Awi4_3_SpE>So%#!{*O-w4 zgmuVc#c;h)O%+_c=)=BBRrfT0x-~T6XmFKUV^ET3O+?8vO6@+S&50xMdBj+x9h=e#YMpa~(Zl zXJswUT7lH47V&-ojXOan=2pQtWT-*DCH_|Q(rK`HmkoAqqEti+Awo!{HE_qvm&P;= ziFJgtp>|ZuY)~F99_LmjE4#;c42?1JVj*rT*S;|t?9I$TSZw|EvMTay+k z&(e^xx!v%vUkj^Fe zj_xtt`hQu&GY%Grr#U?NsgwsgZ?5MJN@c(W*^!__o|^~?74nCosp9dqt{gGUQz(0o zZVoN5n!2^drwONu28flH%H7bJhN+#HsH_j&Zrj^5j#$d)=gUys7N4J?`(CHo7y^aj ztu*6pfr?nwKpuC@@_5TRceBEzQtW$I$O*T9L(mu*q^fCg*B2p_o%>8YP5ss&LXsUDqVm*34{r#^BDUf&gyU2BTk%(gdrPGJh)u^hXh@OFq`D^><+6yuiKEGo9Ql3~nXXMhbRO zi>Pki8~PvE_2OK!7qRLe8Jz_%q1neoGqrF&*j80A?s4@6cruos&%HuK`?}?09iYkbMq8^ps;+64w)ofuT5piie8M{^)x z>r8x7Q$3htffr)X(D^~Lv>i9XeryYhXh*i>$X+HF&$-3O-f9*`i+M|L$Vmupy$ju7 zvW0>?+$BNJH%~9mza{ByAa@3&Lb@<3SbqbdgCjcEd1LE&NHuR!xYvV8$n2R(PryaU zI2v!*9&h0trfd4sXVhAlt|C8uwoA52!@N^ZF?5X?IT3VYuMy&c3aqcD$hsjB#q@81 zK@w-}LZHm#gJ_3j{%n)Gfkq_zDJ{Wg`(B=v5D8Dr-?cH3rxpr2uO(~OP;3Iyr54sQ zO6)}H7_DvK>kXz9d6z1*QccOjx&*%{*|(#Vl0HcSY@TCXUHXX+`bw5a!6p|YwxpA5 zNkz1E<-Wa>di>_=ft=hVk5OvmTuFsboA}BiS7@2h5H!6IzJfgGQBC_Lzax9xMNA8_ zkSf1xbGTq)vZ%r-8zPQ#Y8E;qKZI28C|#+~P~k-bJqEN;I~C5i$e)9IqRVh;E$IOn zy8H!>IVF)zRC;-z^t!?zxJSTCOcHdDtXJT=O&KS335LB%-&JUCZ1=Rv^Zkd;o@ zji)_1P_`r2$wJ|T>)5$~Gmv6!#l_zmJ=ozp=sx;Y!RFoSsck0WGSe$kvi;4DKGj}> z(XgkBID-xs;g0@QP)UvUE2@B^b)t)+!zv>hJ2bjkpGn$uE=Yf?g!QL~@TR1X<)C13 zreIXzU4R)7qx$%IAEpe7zayt|>Dx4I)bnLU-eH9WKX{>X_XI-LhR_u{=b64{C&2ZV zp#`~sk34nDbt7Mr2N4`>Y3@Eb5Hr%eDB*C}vBOG4iB~eTuncY7@|#x^2&;BU$ab>u z#GM&nID{Xui zllJ?KK3%v`hR|Rwh=4)c3ErrutF~&uP{%F!>0FGRL!;svd);iHClI%Li*Q&h8OyI? z*-0|b;B{(vry;>_fQPvE2AeJ+2Be@dZqbA_;7#Ab&9pa_2b-Lpx5e-2zr)Ocy`#i|YQ!Ty>vQ=IJu4OPFXY=e8}_{XCwq(YC?a zV@$GMQ3r)1h;;^oaou5`CHgrD_RJw&^82Ay?2!Za`%R}ctoy34>+#k?i$ zP$>U76JxC;kJ?+NUo=n5Ukd1Vj*&yd(a(NR(g@Z&*srTh9eT~;RX~m-(x#cyD zB#)PcE6H5ewE4<2?wfKQhX-2r2aOVmwS*hq@Wl`+3KP|3`!*bQ!m7pXaEM-rb-oa; zNP)@^d+oYLDH7M)+8I#0w3f`>9*|S-5+{2pVvNC4%p7>XFWxG3#Bq`E9h|KW zZHE5Gy|GP(qXf%LazqaHIJ0$Ohn&Wp2ul8{b^jLM){Ixj^nLgu~*CdmHVi-NI%Uj-?naR=v@4m7PR-A`)5V;_zjD z%qGK*ye!aSizm%}m+7+M&MMi<>1nT57rf4RdY%ZS5oJ(+eTv(zjUIqs2TJ?R7Tw1n z7io33xJofirqhoe_@=^SdJb!JO47Rz!ND;;6s;qq^rhwGiSvFt`&Z(umpq6}DwnN4 z*>^gX#R$8*o*c<)@Jg$1;)4CP2ib<68SrQ-G0fh4w58o<9Vg03%M-1Nv|^arS-7*E z#S^T>$bitqfb$Ca_gB^Rl5R-L@&G2}DO&C`#p(xB4mVW@qx-WuIAe-~!8kIrv}zUW zNCx&UB%E7}%3cZoC1Iwbm|G7=#yQbhi z%9XPQZ3V16*20UpbcM)a^O>Cva61}}Yob}OWCbTd5D z^O$1W5t?NY{9AcvMW0+#8Id8o+~y<1!M4Oaxi!|sCmm_v`HQS=mQavya*x+nIcBAhCiS*oNYZqd4{}Yx z2oG$_znQ0)dk&T@W{Jc8ZrGc1qD^-6Ziq^1E?->zOEO32xk?}zOPbRo7touO6?4op zv0qqxLUe$A)3FrcMO*U$AcDBhsd&_az+TVd0j+xYXz_K#jj}j=hR`4EBnt^k#<;7s&Tz*d`xS@Bl2Tgn97xQ8cO9)Q0vjDAWo{xzTC$BQS%m>otAM}=d_zfS1LE;X=1J#ej($2ourm=!{WoX1Z8vie76h9wsHX_ZDc?w-TSm; z7I83}R=#y6$bfPkqexTOEO$v;mrTv50eQrm&?c+T;8(CMZugQQ!^2K0K^M76GLPy$ zqQfKK`EdN=>EVA`bDKw}t;RvCcSn4olZTh19={iLzvZg@E&zk5Y7i;z;#robm*f_9 zID5yNBiXP`Z7n{00gut~)9CcBmt>w#NUUZ*9!7%R(l54`EChP1R8biD`w+vJ^>JYK zx-q}p%_3{a+7uFApI$gV_$3)A2B$ER423>1Ez3s6q%x{W-$}NGJ*Oh;=81)r>j<45 zXd31tpddB4b#j7Ip;Gl*WQR$fW}ficO-BbB3PV+YvMB?c#-9)ba=7FiPRHMXUKXI+ zU2EvGfL^hUpj?c<=?>+sGUQwzLxs9DTiX&-S8>J-7#szd^A4HM4tBL#A^1!Jo)gK? z6A-yWv@vt%$jTfQSESSHx!DQJ^uKUBh3U0UQzl17zT(~IoRv(k6C1`PdfK?cnmpQv z`xqj7A}So~Qwiilo2b)sMt{o zqLg#BEv$4JkNx^kg*#p%DaAf&D^*a?j(rY%s7PUph;qm4D+80)l_*{hR{zFY5sUQ3 zMz?GU94&@5C1(Cs8fh+Buw4Eo-*gUB@W{vq%Q_*IvDNPCMpS^~gsMOfg_}H^F^OHT ztX)1R+&#KM1IhK=kLk@(iohAUUE(LsLePZOljGZ{kk=Q43}Obv0CNY+j=HOwoxjaf zrurmqz-2lfM-jBqYOhl^gouf!%0p`LV$7sGY+`Oa3gUO-t94&p0R0{Vjxhvpt=Nd( zdv9*x>CZ=-LGUUWmx@d*buFN7?aGn#6E=e&Rc1 zopk;ih1E6p#1y+75bVE{q;vce;Z5LsuHMqE$+@&aGotgtqKE&)3OeWLri1QMKmYO7 ziuz#N`NZ6M;cjZM*2-DJjkKl7Gr=GIx= zFD;hN(5iX5*|LE~5oRF7n0a?sgz68gU=hXE@u~#^mvZX(*07-3fkkT5ArLUy!{g`S z=`m+E%f0v*u%&Ihn@^!3P|kac>!qOaPnqVAm~-Cc11@)Oh0;>&uK_iQKjCO^hY`bv zrJ&=w$c^!F+L={sxe)PW@*Ay_xyT)*TiZ#;QN67cSbkdK`!KkXK=T zUF2S4XlXa#hq~2ZK-qfPb*LyDC_JjB7;_7~_WEu)Z34y=D{IZG*TsJ-z3Hl&f`8Kz zbmQp1Fg=#s1BqKWfZKB5$IQpqI1sNT$SMK^(w;A6*w?Q9bR31Ve(p(~p?ojQB&EG| z_Z{GzR+(Miq|p4!1$kTLOFvi_iSG^vA?T8ea(ry)RLMf1=L2tghNlNu=-;%tM>$}S z1pfr7RM1!_Mn=mPdziA3Hc3>#fW^5jv`uyQv~w3`tBoZJzqUkIw-fVx=@@1ijUQ_h z_*;8j!ZhP^M#E3e>kY?7jckbnY5gEKeK{=pCX?`t0sA#4or}ucH`PH{i1$Fea*MlL zC!M;8m53RSdpbxJ{1*3K2IeDSZcOP^QcswlZ0rj7Wn^qh%V^2z6!tQ3+r3TM8}L?V zotQ@0mZg!{O=1&iWD|FAfQiRkw0VN85-VH%c3t`4g9**6D1(|$tsGq>3@Y(fxa4 zw=Nk@*s1GMv{QXYKa7Wwd|h192ZI`J3&T*Euu)P z947__$0gi8d*w=#4PviENytBm=vU~81fa@8uubD&3p-E5_D8(fw{VT2{tyw+ll=Gb zMWb`_=NJ+EM4DY^>y&~JuV}50qZt@=Sb-$@8eIYetlr`P;TJAqeOVOA5IxY?=d;0P z4&SXZZpEuBH3eM1%H5`p7d9LWkKP^BC>0VZ+y3;Ic9NTnAm%8tjMM?~$^K6`;4|QN zg1LA3dRz9V7MPhQB))9o!19AU!|s6@Ui~_t>|T8gFB4`OG3>o;4oJaG`dwe{cn+7w ziA73m z5_1}rYku!Jjz_8Ad+@23eNk~CJ|Rozm-i5K4o>@l?W+>z9sQ)Y<}y@@P<+(4_N3q&Q!M zvx(4GxB^KG1M7`Jozx$4f&9_Bw^Z%8Mj=sDe2w3cqaUW%^{#3QB%C^Ro zP+=puVP6(KBVWMXfe5OH@OmtYi;`Pwx|_JHdzi~@$~4nfKR@FgDOtpq+I}{AyYkpQ z?`>VuYEERMDV2Nyk-#;J?RtGoOXcTNZ{v~xB`4Uqfj3HQ=wza5#C!E|Uwr5!7H-J! zc&|k*_3FFxMgwAT=l1d<+k*dKT>)V2bKCzRz=Gn*+bQ0O#zui)Lxw<~J~RbJyGs$s zO+m|ZmW^Na`CV}g+T*XbR(yQ1rW*7>jfH?hN~Twm*7J<_&~_GaqC00B#%#5a@Fp~X zrWYsjU`dq%KvzY%f^f(1ldECKjG)D}6gH#E1;Cdq2nX3yHYLUZ$(c^p&{$OgflMZR z3gfD@)eedLway$9NX2u()?X<_hrh?qXOR2Dx_L@DN#fB+l003Fp%}8an@QxaQCB?< zRtNl8*I&hcF@O!WRydhTM5vMTsXAsC*vv5Up;EWr@T0I}2CL0oWC9#+Kr-CAI_M{| zAC#m9elpxTK(yrr+3W?N@~e%kK2lhxJ#Z8V@v-k#eKo1@B~rTAvN@~9>G zibnM?Ehf@%fH()dy*-^-Xjpjupfd~vT4HGWly!aSm?Veb+f52>UIL2s)RoZ5*H_~# zAeHfFT<_%dPR|m;5Sneu-j3J4qakoeH)++fd%;F;SQUr7h;#4Y3$xW#Ayutb6C*my zSY?aR{dtH2W)iaIp5j={FvNU7&V=mP@@y`HeoeIXyKmvs{0HDS^t79U!SUYY1K+54 z<+M`v+v*aTBwq1hSx%7-8|=|p+fyfTZM|#g$2?{gZSI<2FZ99?LpeuwKhVpK&KtKT z0EFYtf;C|}c0@H0U`tl8!urjd);^uo^eH;L6d)2A>#FUzqFoe^G|`4(M3uNP+QmF@ zayB7?_``^7`7>Ci-#cY$yp8~3XRV@+p+XRZ<|5YWjcxvOaE3V~-WDlIZsqJ}(6(Ep@Senh% zyk1zh;og~rf$q^K?0V8V4x)R~quiN~iyT7I4vOU)#j_ghkOZwQoK9_OXN# ze#5bXXRFeL$R~d1+Q*`ed0uIKq;OZH|IK!D;#*YodAK1DvR5BAXOQ23|BLHg@Zm$W zz+R=ZfHS=!=Mx(P=t+q5^o8BnvqB%|ox50M&k=lC)CS=*yX0x|h)3~MP+OgT_KS+X zk&(As0R1!9Tt9<2125n;4#3D9xY>53_2VWx(I4dx4LTn)w0= zH5r@To3<3(ktD*!hiAlUggela@`T)3Q-pdIiIgBZ14>8kkh{WqLoyz z&h`T&58~5L8(W@g{h;&Gc{YO^L#DgFyhdI+c@|B!fm^5Bev|292F}Vq66vX}Un;(uaU24vK+aC!geW?M0t1N=;(5fP@5>*P%_;PEj_wCX;8a3h)xb zp3pwVa}$^2eji*U0n-+SZk|uP>i_3BNCR3*Rqay>;s@x5z(O1>S8g5aW9x z@Q0e?!!hlf|M>Z&5YofZ>Dh@r_Y?xko5NqlrE=i~NY=%V@X*v06G!ta^+0iMgdA(2 zOj)(EBwR%EU^bNN3U0h5y|#{@?l0?y;ge43`D@z<75$Q`QMqu>W+!a2`sJ>wO;YTU z>#Xo?x>^#mwT>Q=hBQHJ>ZKbRiNB+K9OjXTAO$->I?L-3BB?qrX$E4|@F3ph-<0jE zg3R+Lm1mqhotBHc#7JD?NF3T3N+Au@*lT`h@o@TN>|KV1|8 z5BVo+{8*Kp=#XV!D{fk{ZMNp$_s8__NOLdmX?)EgI~gSk*UEOmtzJ9 zcfnoDWS6bO8Sb>=L5d^!G`iFNc8jt@#1B5Y*aKdC&azDeaRrg@M4Qq(caUbfFAquE zN*Bu~HjKVVuwG}GQ7(}WYZA#|jnrJhBL)SqgO$x|`@8uS*}LELkg!T_e43Gg8_jkb zm%VYPgw60Sy$BE;Olql~lGqi`ujz)hx;^{nWD;Oo14BoeW^EEd)340_G-cOWw-z4- zHCOiYg%7v3ZP-s}Vd8EtXxZw{nzM(&_`?jT<84kLBA7L;C$S%Z4_TkZ-EZGiBxu?0cbHy5atp>xRv)*jik+bvU<+cp?A8 zBxud*svWg4V7g&)M^9Ma*H-i-PTBk#7u@l+YckX2G~JUq)X`wje^H z@6YgBxdiN@HA{n}8$4M9e|LTBI*9qO&k+bd)$CMf#%y8THT6OfS1b$!uJ$>v&$X)X zr_0O(h<6SdoQ76|!Mjm#j_3@c>T-pwHz|w^shx}j+VrE+rLoR>>#f8(m4(#YNbHS-yze0kc z?bX0h-9AIZkixYkxaT7RBhc_-eST|zh+rEo+1k%Jh4d$mlD_&#e0OEGGQ~wwuOO7e zYJ}CXP5Gd4`A7L+s1$21W2F{dQy4AG|Q?y zcGkWC9bY&+Vs<;~)qqxqef~)?>%wOLUjYFb z{^r(7uFy)bA|+W5^E!JD5L5)>AIXDob`KI`go64(+jPJa$h}`22`r=6@%|#AX(2YBQ(T0bJ}vX+Qdg zSyB1-@Kqd#u2F1s{J!_=vpM_iKYWa2@K%4P7Q&?F%|7q-(_?I=GC|8~(Los?8%dFB zM&EeFQ1YFxN94E(z?QV1kW569dYzWJ-Txqlylsp-zoYCu2g#g>Ho6flw@fi`uCnez zj|%`vSIAPP9`agM?SxGPXaI*nZm7u%w_fIOZ%3G*xZR_QgPnB$Z`nY8(8WN)6I+6k zy9;PV3gZ&XIvs}x5f#|xm=ho&JRcvWuuBkWNSr$RA21|n<0 zDR=jExcT!77iMiZ}aCpCc%(n|G=L z5eOI~N_q?DHBwfx%JX`L;Ew3yxnm0TN9agfTHZ>{2?~xn;>qlHTD$-JUA68M#~d)6hd#MXH%mLu334 zkTpDhxW|IyOAQ=FyXQ4u?vo}lX4}<_Z)q=&`p)Tpr*p5hbC>KtgZW~Z+rl$#RKvF& z=OPL@ObJ%<@PEFmRdK((kTe+%m)?wCMTNyZ{lw$+O8G zljh_9E0~p=kzMc2mx)?WK+UlIX0Eol9g;V?1G}L3p%BPIDuOVDFnRTcYDvZ(1X`pQ z-08Thc6s#PrfagxBb*`z0!`T#s>D=GFfiIv#JXi9FegQ>yhD2&x%2KHV4)Y2<81sxS5-vRHt&l6qoIA&s&N#W+s)3ks za%>o3$q|P(5KB%>fj3C~5|imCDGZ|f3JN#AhEH`t8TTvUsvR1-nS4P3qd?NTH;XRu zCna+bm#DcKpOKDqD=rUVk{>XwWdgfw7PasrlNC)DY2I}8_WC@{(mI_rA}Ww-Gr9DB zZtT-XP>dqE)z7o`+3lPj(7R|ps*@u6i|T0*Kj!!7yVIBO@cYS zgFN0i^v}=nYL>YOguf*;xK2GFR_J0ujqRpN`odv*%nW=TttkTaFKvBmP+rzXu50zZ zI~oQh+Wlwf@a#Oj^=R93LOvGK19MY~%Yl_t&fJhjD8d`?FGO(h^p;`}JS=SacGWAo zD=EzKTl+l04*ezhp`mf_cH@d1{j0GYc?420gRevyuMPo_`rA5LMMjeAvp)86802q+ z=l(Q$?5aX_y6+a`sxSU!+Fy9P{2s^6%P}4=rP&IWg*d8`Ufu1lqZQ>LT;1_Q>h+#%K1s4Pl`^#T;7uUwjI9h$*;u; z`mZjV=V!8>J_o(wzaNHoOxcQ2neXrBVO^Jrv$?68%#Kafp9Pb4H=xA)>MPuono3-f zNx5w#Gq~6a)K#B)6=4_Pda8^$+R#@TD&$f2A{U%FSY{LDmVWk|8UriGun62TXuiyL zWt~*0fiiop?x7^rTM%Kh&2cy@EYJ>nK3F=dIxRd&Dt5GJAhDd~^bIslW*v{r9^K|B z)%hLhB6-v9?I)=S{d#~1R{RScLDB(%XGn5rmWI=6VH}ki=Qf?UTIzAfJXPv{tFIBf z0o5FB)mg!t+`$(cZ#&)1G-5QFbrP}I!G(YuI*qa^O%c*-_MfNiSLaLzj-QJ79+E%0 zF|;A|?N+pfvQ*u=T+9K~g!ky}o>SJ6XC6(!C?WzGq_h$Tkt>!j9U_NF&NH*41)UT1kH(g7mDp!+Ji6`01bl8S~rg7*W{D#~Pwf>v>&)%$8AwSS)V% z*4?J_QU-x|h6kv6?4HEVrS5W}{y74GdJNpx|3>+r@C49qy}%6Z!~P{rl;cm*3{%7Ny5J2R8PUgN7ScFj_+N6$>T zk^do#!jS!R5gfZh&{dT-co#7Xx*R}sq?WIllVTW~1{u!$UZFJt_^qN-kbjKuETnLL z;Caqihk!)(smB%pZHBXpgrB}6oFLNkf2YK8@QGW6DX|(n42!hopuAE>e>(W(?9ZcuA6)pjzrE;J* z)NeG`$!JTb?Czpjr3pc@Z}OYQ*?oQATEu6;A7M>OKN&4--=an;#|Ht`jOyiq+_`cp z(K!!t{F(x11mWm266n=PP>YQ#BZlZ2eX$5)MXLaa{_VcqtAR73yw97b_n=rDAp0vMsap${nc+HC6 zk~fbXY^GULHj&u^(Hg(k-y6&;n1=&k2qnQYr0^LsL$_DQZO1oG3Xk#nSk4c0hQ@|m#SmdNOx`c7FZ~ZLV`rv@UB(!HrLD))pq<89ua~%SCR5+^2!#tt_=`Jk4U~z(qoQM0) z_ZgMU1T*KX^j8!UuZ_y}r`=k{&|_mH>yN-(@?3Dlb$%Ji9$F{sZPQ(NHW!df$=~v(nFj$(8E8&~( zAINl=8yXq}%4g_peq{X8AgtIVcWuR^CY3N0e&BLuv&Rt)#1MSmNMgC~{!)sTGBGcu z&pNo*-hdat38N}F_2v#48L2WiOFVg{Wfhw>inq9xbne!5?vsq5rG2dH#=pD$qfB>& z?ax_0%`e+dd2&TBrb}yl<1zfOB3ck z3N_1miK!1Y1TE8K* zI|T_jF#U`QQhTMK4PXMh)y758qlgwEGD0?cG*34lvjezkDx5{&yq!uu=*Hs zWr;bKka=)#c5-Ev7VHr3K9lPb_wjyY_mT6Jtjy*shZGhB6W}uFfPqhhWOh0fBqH$@ zE2(LR-@QcZ6}z>K2X1eAbciHn`0(DUBJ-7*$ReB-l7Jt#GEfimq>AL=2LI#3HS8&| z?rVQBI=TJu=gU@cFFg5Qpy*9L&(DQiCdQ(TWT7OnC@k9y?YG2o zk)E_#vYI|6MTJcW%Plm`La31l%BLisw+7jEIjPv#+&V%y0AbStklTgBMd8Iuc5Ar4 zX=&v+_DbdiTRQXIdl?Q^Vy_z0Uz1kHWiRQcLM7+LB+}?i7iL=ZSe<3ew_V807d~a< z1VR!XHoofL@6$mn$6C(g{W0kXeF^MFY$36R<>PUwY#@JsgF$5|Ru`O2B8!GunQ`XV z>Wja+4y0`2KscipcZ`mW)L;v@-|Dd@vv>7Uj;0^7ESxe0jBHcu`1}(j_w%SuolTUH zn%0dpN`@{C5RkU!_p(w6kq9C_lEfNPCHpZV-6~<>z;OJ#ZCyKJx)&WL@-PQ9N1edi z13MbSvoCEa*+f*g{12mEy7e4$W0JQdAjg5!Bq9v1{V>lxbFqsP*|#w0VzPfpE@qOQ zln{j4HZ`4-;=KpgRX~4b;B#m*-k#`W>(E%<)EwZ~_+#sLD(;~X0-;ocSK3AN{a>uF zL-JcQj2^`cKOl^6saAuuJI^$w2O{RmAhhcN(Oq@gTc{0TTow^8<-PIr$+C7kH zw!sbbFE(1Yx?U0ueF+cZAi>kXR{ZQ4`6ok7lByqx%C8IAtF?IY9JM1QwXNB-MDbXB z#>&5Kky}vMx&15sQVcJ?=b096iAsQUv04ic?NX%O0{Ya=+?(`Hb4m%M zboBw>aBKnwk4~59vpT^ky5l6M8W<&46_42c_bSPxkS4(BKpGBxygM{~K9#(0Zir=4 z)t7lNldMiYhr5UtNRp5*b=l72Y7<=clRJJ)28xl;Gq>P8kGG1d(; z2(aX2-v9hSXcWE+-g zTSo*$K<)5jNt4Jw4Bc@#@>}iW1ECj%V){%VOvq=J!Vj0~P;nWj&03s|>}}pM`c~_@ z-OjZS>^sB`TqJ4owtt}R)sQiVh6r@VsdVSg`Zhd2c=nhvOsS=Gqzf_8i2q|p)3v}e zXkMF-#)VEr(S2Wwx}Lu21NR(9p0P9E|86r`q+CK^V`dq>8HAX1|2I$MhsUME(;(^-K+|bcOJt>&ux|Vb zSo}q&lj9TJU6S^!+fbnJMP4ShaVW3QDz=NIl#isRYc_nDBgJB&J;YQemQE8DQTFAO zr5bQH~oGOF4JuY7LzYVs}Z$F#Wd(^Eo&>TZc_LG*p^>BIOXdy z9&3qDEZ$A<=0v5^O`)Pl5fMrBPAdJO!Iaz$q=>uPm0nbe_=2X@1EWP6LH7(;pI7_-OH3_wa|&g<$dzA!hLBzI+kV6!CBXq$=evyB%H4OHztV?r z{A$vMj<(xVX_AsOu9q{y_GIY>|Iy$gH?F3vnf0g3X~-FLYm1Pg=h@duA z&Wp0!q{vxGintK;IRB=mm{3+%36Pq#6Vq>O_E&S%?h0JY@^-xDKwr#h z{3-2_w0W${%p+N+5d<<*8j2R^`C8UBRL89OsBfY`ZFH8($7-z$_{rfHde{qnmjjmG zKTX`T%Q%~4PQ;%^(|*e!7Vcf8phx*pkpsB!!nJPtrv^(6EhJwT7guc;6j71=W^0c@ zoUy7=T65cx69G?S^9gV2@SQku6Y>Fx=2BTVYaAV&sAQGbEt46ZwwABLyl{rq?b-BX z_@~+CBB#?qBSi_lzBcmmVZ=SY2Otx88s0Hb(xIAIc$p4FiiRP7!CyQ(bvIB_Wos;U z>#F0HB>C$?$Y(91Nnl_ao%zx3b6-$#)VKvzQ`M;R-u30Ls+HdO`iU%l4a5xG1!K07 zVjcbDH}Y5BL{2Q$o(R@e19V3tlYn7oNfD;E-57u^)iK{S-q4@?*qx(AMTW8BGF$O~HLK-59FNMRa_b(aC}=QWrA^bDzXwyrrqr_v~hdH5g!NDhIsc z4_**b00^&ZZgaACeE(VJzLt1RZ%p|Fyp9HokkH2M8m?t+I?50v8oImK7Ab6(#Vy4N_`=z?v0T)?j_W_LA|H6ZJ_uJEE-n$CKO&E=Eg4T|d3{0CpnEaWB{p;IZ2ri3g?}$^^_@WCiZH$a%<2>}Kj; z-7T#nW%bSXZ)zH*1NjRZ9IE6o5cMl;vd~tdChfY>?$}aITZ#)$U#Hx6F7DrfcZ&E0 z*_XM*kRHdX2&tPsURa^zS*x0SLtee9SC7c%hT-1R%cxzJdS!P~F?;8P9sZB@cwb0? z1_X)TwhY?v-PN1m|HXl&H}a`Z@T5cpM&?n&%LFd2n?)~ff>G%u(FF@3oF`i3B+!(wfk1Mi4d$4bIA2F_fy%UbVBkkc)v^B&N|Suvz)E)x*O7*R2dmEi zzu7a0M=lWmM@<$WoM;{;AFoR0pb5J2kq1QCgSv1ux3rupbr(P`Ypo#);{3u!EX$@XJ?RSIO^7??*6#<-nRZAcvtws+=f61R`>&KnIYZg^4( ze&Mz97Sm^ku|^{|0|F3d=@1LQx#Zl2p?&oOEXv!g|4JEU{M<%+Pvc z4D>toDmRC%f_fckDxXD*%^A$UD7zM`6~b2?7F83fRLWN?_-5Al0R9R>ky|TZ@zCbK z3v$t{jzqw;A)0@5PW%|6Z<+F7gW()6x%=)aCM2Qj_H_hRKcBEyRZf!dP&;%*YmGwH zBW*>Kh+?m!{{7&}=E6TmgL@7B?hFhSDF3Qe{AX9BmI3uPc>9-GCwY_z;fI&Lp(Vkr zU?^_M3T#wc zUEqWL33t)@IwOBaX5vjNO{Hz8WZxVKlc-iQ3uO=up5q%I@Un*hQwn3^W-g;x1k$YPc(W@d|-nVFd_W=4ydWic~Z%*@Qp%*;~vv(G*E#l%E>Zzg8e zkKWm}yQ?d+GFPqK(MpnHV(v_!AnKw*3Tg@*gg^e+Gcw>=pw!9`D`0#!Y$+0?B*a9d z536zh@ZqMmA2xU|==ACL%q!!GQs@L%`tyFm*HCQ$;rH#k?e^`hZgajL@6!?DaeT~` zY^U>IZ%TL$0-TT1W zH~yEJ5q@33FhKt!=UE<*a{>6)U2x-aoYMj90SbS{uK4ZwsRQ9Z?LH7c^>2Wz-P%Bx z&%~#ikDC1MG(a){=cD@)_&gn_KinM;^aV@Sfv=xiekUKm*VT7%VCeld z5V)#-9t+T)-UbNQ8IE$hQ}&~M8tAht8^fbP3qy}ylu)}<4ri3rg+zQI3O0FCPUb-~ zo?KYz7X?G=WA>sN%l^uAboRqAKLFYgn>XoD9s=v$g^h7mAeb>Kd(5#UFv_DX1Ir>; z2un=fl%q33?ZavTPx6-A#iM@OnZpO+6*Za9{CqYghX%a0vg0TAeU^lTRjpHOs_i^C zGRzj3OArU@p(wXe4HiKWd{%1JM{X1#@oyeuRvu#3SqcsVtuZS1o+$?qpFIZ8 zF`WFPz`o9PJ3JmYy$F5Dm2M=Q8*R*GYjAt;Png{ENLxoEGz~&PJne zo7ou6U3AnSx<~*5=-u!B6BD zB8wPp`5jh2^3@ZqDOpD68xCR`IIdZHCzqE-8_y+|hiVH$cwk=}yZn#QR54IJo07z0 zPdtj0ASmuLgy?Ru+Zz%rD`$#mcF7Km9tzeI`AYZQ`HHnmYEe~HEJzOqsIq@;_9^^< zNqs@)KC_sLvhs0K=SyAwKcKP#w_p7~{$g*YHoPtKv9@c^3|A)}D*A?=1IdF@Dq6k^6ww_6O zo7N=fn@9(`ZpN{A4vl-h)?9SKlqXzXO+;ai`G^F9tCAbz?k43SmIisvkspZxq!D%X zy5%=#B{F6bjS6Fuz#R!*@b8X?;5pOm4=dP;D2%2AS34{hSxNA3ixSX|6G3AB&==Ua z;y#E`RS9rxURQ8G;2`pFM_%4z52TaarqOvae`Q8-;PYW}F2yV(&BwOuA&UHnBD`yA z^Rk|UvU;RwU^`yBJu+(2q)hET?{)RU`HuQLg($9o(&s29q>EN4k7m$o6-D1OYvZB@ zhp??<6Fu4AE+=F3H_`qe%3O53NNd#LZefwq-kqT`pFlYp;|14^zZVAeggW)6`y^}SqO^smjYZIO;xi0P~Z7)sr&%i~?i z3d%nt2xxU>gThWO?bi52_r@iTai5PJ)zG9@dEM@Gzx1p5kCBigh;E}{Eg)iZCte#9 zx!uFIdgqJ{BxOig_3Ld?RAn4O5Z}PRLX8_Py-?`GSJA4_PE1UGG@kt5sPv{>8|$oZ z!fWYYCaDI~y~AhX_LY>EbW9R6=aXo$Svxdt7DBn(D#NRdqsvn3C>N#Ov}IA=siIrs zR9SDQUq{W6Q$PLlc2=e#6?(wTCctJ$HT`-q;gB+F%C|C=O2o|R(WF(1gnAWXpBlny z+|QJ?%Ak}0vo?L#!jO?~rVd$I(NRb(I~!=2FvraA?SrVPLz28R1FQwE4f1bs*oIlD zPSvCWp$y@8VH>-X%IiyYk!0MW8<^|HZXsn;@)_dRRfQFU!MyDnmlQubi~IXL3Wwj~ zqy4|G@^v?mMck})ZQReAPzTZQOs`W;%TY2%`msn(ia$Ci-ftLk^Wn?TCn0o4Z-YoM z_JogtZU39|uxj(^2qnv#8U8A<$fS;2zK%x~Ar^T%7QGwi7@sn*M~+_Rs-lx?n$AOJS8 z6jH0+Cz2S*6;d7_Mi9d>IHXU;2}@|tL{bbZm!W>3`9mFag?(kyY%D)sEQL2-`LQJ8 ze5>z;_zq6lOdTCNa}(0v4HPMx%vqSu$lhM1mqXs%1j*#+$x8h zZdsfeYqG>8jV|GpIc5`=TrYrg4Qe|diKDtJS>$l@deoU_<>9d;_%|3JkJ3_6KGCL-}t>r9Rv2f(9PBWkNiG$4`l zW@9aL2eyA2#l}mnB^l9LTpVJ~{N$=!A1?&|H8hj~`L)G6+&}+XNA<3$?s>b`Lj~Ga(zHE*3J}qBcYdOjA$-k zjIc@NghlRTT}<){{Ri6|IE@f6*=Y2nDR-hKUWc2MoQ=rG^&2L#nWC+~^{8ro!R@y3tGp;UG;Tc*!bS+r93!Su@b2ghyGz}6w~YkRfLuO=jZ-Yk5cMB;Cg6%Z1&h z7c5<1cZ>)Uxv9jVZw5czDTk9BleAl~OKBg~G9PaPM4NB)G3`han;C3YqA?iy#zQWg z2y}iEUV#y&RyC;c{>!-)EHS>7>a%75c+PpqQq*O}iRg*d16hvLCm2kT4Du!k@?3`p?cPjw z@w1$-2yE?J!JrP`jt0WsU2%=1+_EbUxcN2bDaXbRrDbpae?(eAm8Z7Li(gZMX&Kg5FJW1yvT9MW7Eekpqt{Q;u`KQU4NwUalJsDY-{UOxQ%Qt_0YpkAax|#Tt zE_0lqDtMq6wNz`B28o}qWzzmSM~TlA_m>7YFf&g;-q%JzD_UO zBiEe0!JVh`(DmKCPQWo4MHV-lmnTGzHC?smG@4eGF$CM5 z3HhY^3k5giNN8D1O-7*507LKQFm@41e%^T6pq>^b_t$C_%b9lB!`&W>t}EGT;NHhn zux#HZ!M$~K+lXW%q4~vX)#CD5bNh2=kv;UES`^4`4Kc!^Nly@dRyIJ|+@LbFVJbK>e&kIh_b8|Ispz zOI)Ir!1QXpc16vio!hmS)DB%0GBTKhvd8Aj#6*|WZk0?Y1<$W(vY+Zlw?;yR^S@BW z2uU*hB6(Eva17B6UG#-MreBH&Gsexn{-_=-=*JHhyspC&T`!$khWoz0dgKl~IwzSI98 ziwR)}F~BT>um6b#c7wr##=EgDJ75Mv9e=fAq#&CNNr^S8}Rgq(q+05v&w zW!Wt-JDAo_f;ZEe=olR8F>KTdy0^ znKWc?Cq)qycl|?iuc`t*&gsi>2kgo5CX%TEUROM}$=m7tt8s24sB&lxC9}u( z?eX}tn!ZUg6pK-)ojX48JK#ze2V-Q-2#L@yM!3CrJFYgS7nN8Dp0724%rP<}JniYR zPq8vE^!R{(L$N|z+8ZXKLp~fojDMymhyQro=KWmqa49j_W_lq+r2lTc15=Bk8~&+E_Bz7z zzmsj@Pgx>SptEOfM@@_$RDW9-pK}`3M_^yB>CJ*6YH1-$5)fwtVz^gW^_$>!CDD+W zw!DYP#r{<7^uNEnEBqqAPjD+FgWbdN=E#koDJ29LM`O!Q3w`XhZI-oCIoO{CB8B0O zwG;=b+Rl-#0193#bXKG>5;oNdyfa3_(NA3))z5>B{yt9m2R7s$(=feCRu*it^G1liD|@nqRayA3Ff*HBman`KQjrG zLshp-I6rm|?eUzfX}^2whAk%AVzr)i+V1Ss4jFehm@U0Pi?5Lz_Q-ima^zyTFQ9MU zZ*Q8XYPrhZ69j_X?TdARWPqBkn2k<(<4KS*+kcQql zxq@y`{2DSe<$l=cQ0rP~*uob3j6ftxz~knB6M3;`uUO!F7UiM6_wSVrny>^{ulu^7 z8ZjHAU9(U%$yt@#*aOgsRrSTNq)Zf(;D?I8AxH%b-u4FT`U-wSoAozGi}YBWjqNLR zr{v8#1FQ{dcN*ut3e2f_v6eU~@8xl-O&W&eoGt!0c)hKhcj~=o|1wq6tj0_E)hjnL zF~*x<1LXX8y6cq7w>=rdc5(ZhGZ1x)8ZZ^-#bvm?X`425xpfdAno<}jn-wkiyOg8W zY?sj9QrI7Ot>bl+{uB=#-(GgVW$keUlul3Y8z?GwR>?LiRwLTX1m;XV#U7OS*hv4p znMrBSLLTn0?C9WthY%1zoC-IwpgJ5uR-1RFhj8FR{C%{sYokD1LGo~q z_*p5zJpcsjwC=@Op5~|M@wn z+gK1tvXbE%qYgV>ohiky5pi16j=~0?D)MesOWTpdEK#pETZfIPu8dh^a2iiUw6!uJ zUOU-FGD@N#^A4_zI#|iLcFaO572*mOoMVl+oB#C-HO=m_T z8g?E0#FjNB8KtZh^indpBf|@guB}cmd+JD(tVnCp3z4g4CHhoM?k??_5L6l!Hnn>0}z)Ne4frb)BUS+j`uvx+OcgucK zPD+X2L_+mh*WV#ZLc~!`_xCukJ_ZNs1`GGp=kCUU!$*%-J#V=2*A!i4o3awvgGXGqF{7# z==dgvGy=a_M9t7M2R_?S1j!Yo_y$~T3pRm0GvAJhPtVAEK>RcK|F>bR-!|h$gZL%J*|8ekUk zL*xHU>N&HAEQ`}^;kwg!dd28c1c#W`)O@=)?nZBCx#&jk=1c6ShpQuqPgmTSy1qW!eI6UIf?3RK;F7geGsD-bQ38-GNryk5Y{`O&4M ztMd@4Y2OmeDf2;hv|s8@r>_5d%&3J60Wf8Rc+oMYZe=>AM^3?}gauRVbo+dQ@#q`; z4!(jIrs1(VtndUNi)7EYDAKtIL4$*!MxxN1ibFxifiu4kRPX#T);))FRJWTjwnJei z=h?%DuGbGDxyPv!FoMg`?x%5$k~Vu&cmfCu-JnspbYT=2bG}Rkh5p7@LHHdTuQX^j zTD)W76x{TYY1-JsP7FkC1Wj@zVCfn@og)0oOvG~OyN<>Fj2KFCVAsope3UbmdhqOS zvDkuIE{I_Jy^JRBw$Re@JdT-KLwjia+9n_ri7d8bonWt%i|Ik1btoY!+RFqfdB``w zNA8I5!&VppB32Z=N;*QPtwa9OtxWUh^@IMIAN)TUHDPdd+=CdeNFN|1AKA+TQ<5@tKmfrilW9Hy z9#{77zTApd+ht-*w;TZ>h&&BIepY2Grta<_OnXbBf%M_4E7_@7LmmsH1?{NS*Mnn& z1>+0Q^_%l9`8S0|WRtKS(`y2Q@i^ricq(B>Wi;-_b;!|^Rc}*GRhop*5ULvOS|Pt zmv^<4CrNH9VKgXVkfQBQ$1b4vzKd|^Z9JW3>CS187$!q!9G*^qIhQ#x`g1s3?Tk?9 zhz$>>*PEW?h`#)%p0KN*D*8EA;9cE72{mZ_Tlt1AD-Q~{4Ro(vTXI`R0Cz~98>5kc z#YON{d+{-(147UiF_^)aRANr=25Lx>@StoL{u^k&szF zNX?T88?@tl%Vb)J>;}D|7qX=h=U#xqYwt6?Na-{0eYbHw-{Q^7P! zO8V*5>%7h~X9IaUqCl^Y-w|Obga|GUwxj!Q_J_Qdvw13{Q(=3JID9ZUppm$Jzv+Jc z_$G|Up^k!>epSOdZ4Jq*KriS4Bj#nAUXhrAd0F1w`dh!xX$kKuapvIQ%^L2ZqcYBh zZF9ZUHdv7K8O90aRc#AI1w{-o$RA*e7u}H9CNy?qw3Si@W?3ZdK8Q=1oj|bkPjVJoqOpjgiG<^eP-O^(3oCE8T(9C znyKyd6Lk~|?0oBkW(6E;<}-(oe^uy<+YX&EDlRhR9zh6wAu()QZ&H4U2P<2y zlMVXoh1z-MKueo%>7jB6DnBgZ!`kYL0IgaG%cN@l+W3Ms=k+4k%Zq@4p&fYf7?%K= z-Yt6!8z9KsIvc1plbEg{iN4xjDSrcpr0k7|qOnvuN?@aw{6g=d=9K*`k}oMZCWgXX357}|`%BTuH8_?!Y^qI)&I@rvY*T@xbje)-7$3xo962vBI zf}Ln?A(lDXHPM}JueVhbp^I2Fcpz^Q9`x$N0Yd5Sf;wx(#bdiHs><(q+nHjn>l|jk zp(`@sglXlo0W_VUPsHZYZqBFOc*S>~gP3t^w&|Ck#T1^$hEV0vNX!ulu~&IhT5`tt z;1RK3^@4ER_Spx~>#ozDu&!tr7$FeRU#ey>L? zf|E^7w);nCiC_mU2qlt8%r9UYQLX^;%L!&(V)or7oYx%G2NB{ z526m~)SB>qN!~PETol5$P=>IV4X1GYx_r)b-Ipdqdq64iwMNmF_dq(JvvbkbK>i2{ zz}kUwM9Lk%4*;=HGEvA;)^<^*lM&ti&>4<$ySukQz+f@0w=;^%7+4yDx1cL?5T?n# zIP^voX?PSTZyqTNeH<_>4ec{*1XovnccGRTR;|)`3|XwKnnP4(F`dx=(R+w2#BKG| zl2d3^w$H7DR>t2P;SW>~E-ANbi$i?TOrD#u7Th+IM*0!;Qh))qbAb7|kS;0wJ16F; zPjiwh=7_|S=I5uBbEHH8N3`*DF}hK#1<~>VPiHQLsy7UFZ{LM&-otmKQSW!v?HI+Q30Hpw<|ml@-OobIC*9ibFM%{SCey||Gw1LnRksHx?8XXpX{b?Z@(P~d^%s}_tk+_P>GW;d#-lZ zycjyjmNJ^s6TX*_Htu7E+}BmUhmHR7LpcDeu{9Kh16KXw!Shu7EI#6;L}>DGKz_rg zuWT%u;c6?~Ol3zj#B{ICWvKBtr*z%5wtzmkP?aB`y4};6rpAz*BfQs>Ey8TuEavPw zNKwtd{l!>41iti%ksxbPo2h!^k-fyx-c#8oO$S!JJxsr`F^-x%{$h5Z;o0{Fe_|B} z!$kNvn0~ZHDAc+-&mfnNZ14)Abq;=-_7cR;1u@nH9uhUAgoSK)a0@1>&0#=&dAU`S z##8UbX+wQis?GjkB*lU5{f%Co8vHG>jH<@SHasm6!A)phm^MZC`vgcZHSYp)=#|(; z`syzll%kQ$>icM_YYJUD5(=BGkPN8~3XD?*>0U-32Y;d6#HnDma|R$9;|jtwknt4a zYn+-$1RyOd{aT=*0c+KQN#hR}!{|Y&MD|(q{N?5U;0vQXlhvbqwATqS^g#Ls5vsyC zXp2S?s}PI2UYb=(bOp1N4V}C)oUNgvGo`~dQi2hNMjc6QcS`JrAwyJgKl>y`E-Y>5 z0j|?>=`pOZPP7UG$z7zabSWH#=cjH^Y4g|Ck>F3EeHV5@6WfyqsWZCYjJ&3tx7iDH z0_5OWad6&ea7Oh=iixs^=mp80RW16yS;x1IRiJW@%;M-;V+jQ#dk~jLVm$_#vZJtV zw3+vLXLxtUGx{DY5gJ!d+ijhk^3%N$ev|gp<_6|i)@0^M^9Orq&Nm`0nJXnuJBjsV zuw?to&3#`k2nC@XY)Cy@_s+^L72b-^^3Ry)=YzhzU|qD)t!!$o!ATnU!S-a+fsAWM zpfh7pXhW#ue>m6S3X?MGRL3$4>M5P^?R=gOU@FBi;lOtVY3 zm~?Dt2JZ_YuZHp8L2y3gwY2jbTtx6ll8XM+!@1bz%RoOFgy7C&H>z60mV~@Mh$N+= zBoKbz+bJJvP`&c;%&06p(?X*FsfGwoP|;e456k@B_QoKKWhxrN5b6iP>D_$>Cc4kw zk%N<7fU16hFf4k`N`+T12Gat+cZ3`B!IADZUD+`W4%>qmO$=D@=GHj#Gy&x5X$?@t-Ej*x3YrmgWS51(a=T z(Z5>Iw33CZ1Xp&|u#QUr6gE~!AqbIopN4;+M_oe3ALc^Q)WU1vz(k$lk zeY9OrxvQCWCTtkV%+_yqws0HL0RVCQ8-UkzA^V<;qMl=Z!0xtbxS7%~Q{fEfU-kww z_yvQEVYDJp!81$J{dm{JUk*i#Oa?Wby%ajb>Z%o4SW>t{>REpWP#vI{siNjPe4qSe zi@Q{aCBDAhHbQmtYr)f8QNZExXx8%tYgvt{EN{)~{sN(W@dmQG*cHwOqM(G~6xAQ;>+Dn9+)+*sbF|2n_@nj>{ zJ=Q9I{Vjv#_D>mu1={@reRz6{7^gIc%a*lf4R*{yd+%hIoGzXruMID2wv0cGA?FG76|%3e?E|l(BqD=VIzeWB2V)W4 zXei~C3xX)TUa6Rkz#u!3gn+*=*w8n7Z$~k-C<7B%>9F~iE6^~_mnTe5T6aLw!1OYz zW`VyCeAf#DFx@6_0gh)5fv%-XWbsZo&yZRgedKaD(;b7|%u>Bov6{URhD^8ljq~9~ z$rzw1-Ta;wL_weDH@9pm;BS7tNiIVWem;6mvirJ=y>58KUIfn0%hSy#_$)w#&Tx4Q zG5i}1LTy}s7=@6O-=fDw)jDwQRWo{%EvWp4{Yf}u3pd_*QwslUoThU4J(powXscw} zR76AAv-aonWOgXkk8BQ5K=P+Y`;{F>?z{5fhP1j_ud`yhBUr$_! zo7jtp;2x}s`#u2WRz-yP=Wiud5KHo3;_=YoOQZ!_8W~(33I$}xE-gve z4^c@kP+ZpZiC$dpD+z`c1*U4Jw#bw^sE9N*Ut}|=%4$izqifp_T999Q51hB{VHMV_hTh*Vb!h2@8*f$lN@qjiF8^$44s@(3oD{ zSiH8*5A=pUmu-%a%bSw(OuL#8Mqh05p7NU!d}39lPAr^`fhHT0B3|wHH@EIcL@h<5 z!cT0yPm1OdHzGxACBi`I$fiyTE5XvmvZ|xs9j41B^ zJ6qd-7|EuFIK<@!vBmC(2m%D)C29Q&2BS*6S)Fr2;IC@VF1MGk`w*jK4q~Vd(@+qYL znkrWlpb#1$tz9krW-xglN{aek%S|}*(!XnDLLL~>L^ldInE4mMGVuAsRVOqvt8ksp zXZn$OSYChft~O1B$+H!1yfZ>kvptjYn5slHbYrwY;nI3vjI@&?RC zzDkmLtVZJe3PCC^MeM%D%NE~c{It89wBqfnN&_a(zY#Z`OWCf4zVih?C|kEwW54*B zCptVE+fnSYtmo8CBA@e1bLXRnf!Uk@{Hb4g9g(n|P=+Or8NV&75g2XLTU5lA&WlPn z`!llS4`TJ$DGEd7Q^EVy~yZE)@))WU*Izc@#)WSC{ zK_ZEhT;&mD_XVa<`(Z!T|kBZP7iRVWp=@h$)6IZ3M@Ikj~PG%)wk{EU0jY#qnEfy@{s z5upB6OY~S$FIZOhsIpF%fT)07~~_Q5y($=p$@0BM_A zQTCe5CV+WyZ7!NHSOqdp8r@=Ry>@^}8nl!^wAYGb4{8UIx8HVClblY=UK9|!9v zWa(z6laf%V)3(W`@m%`MD{zf^hBz^vL(LZ!cH4lhE*O!s$LD9AT{qt$lXps%l%bB; zpSpgn5pcIN+Dot8y`%CyvC4U=+hp=lT|(L+?rb?ik#z-Xq1z{A%-$ey#av^n{n8R) z$?b6S(6AHdi3}#RO|wY({I&GnlEPlwyI|iM=U0flWURD~Klw^1B=&QzB#4TB%Sll9 z&YN}_FDbP-y2CJq|FIro%5L~|?N*qap^@<(Vdg(Xi+XfNj$Z!P1}BJp%KVyTcqomA zooiGdWv}49W9%lh(E zgg<&(hk|;ND{ucelY07|j5U!Mj~0v4yfXqm+l7%`qkt7pG1pBx zZT_(sJD0(nUwT+Vi04RqhTQz2l+IxBb!rA`1f2zoDI_j}QVSGu4BcMZ{t|oroe{Q^ zUxz^2C$8tSQbcq9tPs#J6xkZro3wg=G)G`z3H(_4 zz}?ZBBW3^}>KwMIjNTFg+F+ln?XGnz z;ZgRl{>X)@YRI45S;vJuCct2{HT%R=HS`92jM(06=Du?k4_=1q^Rsx}6Ag?#P=^1k z+TW(5i#7K7^{U}w>i*S8T}lZ{;oC%Jl%wh=a(U1|O3}x#_tZ+#z*U+Axr!r^jp-pv zuSL)SPt;~|O>LkR|0#IWcfuk9#SP6jO#fi_kzm0%S;Frvy6EG1F{?gyYBo z8&unfr;W$_v(dqLX}u?3-gFibO1KR=)mWA^aJ64#s=GWUFV)HL+@f zJM~7j&I#<*bcYjPovH1nC}Cl#z%3WIsc&IzPSKiGHMb2EvDa3YlMygTzM;(_PQwV} zJBW#zKs97nB}jM(Mclv>1<)N`MbonV*i2|1g+jb?F@BK|!xIIGVTry(T0=Ot6w~;* z;XN+D9JggGyjhn%(Q3hQmlhbBB(~rffc$vU_yw0jMUZ|57kne~Y8+dD@rEnl8?Fp;T||FY16-63M+~e^ zS87&pY8mE{SJE%Ht3*4syoM7nuMgTM9KCC;9@4R)D|Xhts`g5@cct{^PzZ?;1u`Z* z5RC6X?BoTNAo=A|bB#?01KsOXDudiA$gpkMt_X@uuSDB?967@ej}7e%TpF;8s>Jp^ zmD4=*9?-doo5VVXRQlw~UHd-d9F^eZ_FM0OoPcv zUt!OtUJ8#RUMe-feRfBR#V1M_k|abM{3Rqx*A+?(j3|wJ1kK_ad7Yar2aF%XP=A9w z^sNG2e&5L|NJ*zG6|wY*ir{8*Jd4>RZqQr9L6I89sUuV*kIIy2Y0JqMYS~Q`|>PD*klF7VV@Vp!|3h7a&0D=z7txe?eUUOEF7`| zH8_eEwneJ~L@RBUGy$wimW@!(a=(x-yj3Pcxby@d$A&`5#UlGj;4{Hrast{H7RH*9 z>H6k15ro{RxrGo;?&2ySu53gc)IC1hWHvs!`l<$8;-ro%AmwyuI8C{ON@(_$l@u-w zhZu)Cc-Hg4*x3NGA3yMo#1e2iiWO%N@0z}{>=d!0elG)82y5+aZ+B@Dv;WhHRUNiA zZXlUZJ@h*&N28pa3Zd$1p6?Ks^ncQFkyl31J-bPEr-olqkP zFlpnSS1pKJO7LLH1{ZTk8yO*2YMONENhOzFhLp&wqc#u8mw0*T1}HS%Y)%r!DA-QuQ0`E1yn=yG=>^M?%6y}A6P3UOFG11)WPtR zn9AtfD^82M=>1D{jfNe9B&q(>VZh^e{|`@BmASeesi@%n;i@&(Ag1Vh#4?_9UgKZ= zCrmwW^P$On$~AS5bZpjnVql01GYw8cXJLr52%2U%b6z@@zlEVJKGWTt%_D7^@F;?c zrAXvKFcrYYoWM_}ALW+=L}k4d-gH)Qs+SXfT)PT|_k;@#Hx9S!h z=Us1F@9#Se+?r_eNvPo@(*2ER!#TCsweMWBWBw-%?HLo8=t#8Jg<5v_`Pm z!dViBLmk?9_Q-;C$ZfB)I@78oDg;|oFH+U!XMANy+t@X&8;-CY&xw%UPpOKRVLT7e zpHM4JGc(FN&#WnL*}RG$^3#xjAq;@s_62^mbPE~`8`xjd;~$p2sZR%y35nah$U})J zXn}Waqy?A;yPTwM7`x!d-gV|=Z;9*d*9JQ>XY(z+W{^6TI7bNr{Qay|4K^wi-;19` z^o&)Uap3j0sbPC{r1s{f0<#Zqpo&bvi_d*-v)CcmsrL!$hd8t=)j< zirzqn_GEjW83e4RE@ExzltFIxT&$e1Y`a*bB1tJj>-QK#kpMgPRmiG*KSMXDe(`;H z9i&RF5#q~B)GCS*f#<~k(ok28k(WN-GJaD7)Snp?=9K(CpLi6<@xR#=QU5?r3wgP{m3 zYS9jSBal^vvT6V3r|zwd5y$Gg1400&`r)hQby0E zau*+}hN}QGVsU%*$#uHmtN!PoAu!6wvW4t)A}o_)HpCyr-DR$f4U8o3hu+NWQ}=#9 zb1qY^(U(IUBM-E%pdaiZ}FH^rP>$2wyD2W9jkJ6z|jI=;R8g3Q{2ZMPf;+f|$ zM$3-U&mj-+G((7y)2E>>lU#A`mfScr*cR<$Cej1Ovn~hajbH7inPQusy()5ofyhpH zCF0iNTW>gVvjr)5LS6V(hzYY>eH0&5tfXt7`J2R7Twz-to_yG`XW|x6A|xzQYI{;c z;MON101V0aH3WD3>|^#Fa2M^pxNj_@)~Lk943rY_81a!HhYLc~@B=M- z1A&AXhX@Cvm9M)tP9we^-+f-A&b6V6ZHH|?W}iCv;@3NRvjKv0QrDit(> z=J#`th?x2O%rHz1zwV`s>z8O!qauo_epwYC1_&zUPpyU&Tc&%_+n((~gMxeVEQn0P z#V@W+b}O0gLT}~iw3%$b1?%fO&d6WYmXwAiDnyFUehRVa3mq=7y1MdD+|TNXJ_$?G zEH*5j{7kGk9Z zODql)9ZBEcbLCpo9FqxGF{&wrT1cKsM;(LS4Sop+Bslv>z85J!Ecl$k$L(ggc1xp0 zB%c)S6oQ7Y*7o0nkVQXpYbpevF}(K^1o)Yi8d=$8N{GEIq?v9)xmV_Y*)7-HzPC@# z+>PyD=d@P}M8-~?n|oMIi|v_Z3*O>8>`Vv~tUi_tA4tJwCiUqIKd_oT1+Gu0OEIwI ze1k^9&HWUx^Q%3=oET&E(1;>Ak|K;PaIhbp1Dcx%Yl^@OI#VnMkcUE$ec24Q%kE$m zKCe%+zIMmJ(+zQ@XnvrwumX z7CE|G^g!}X;5K~wPGlywL#M3mCbQ$kni6lzS)R!1t!^?WoZYnI?EJzuQtT<%^#$Xo zKh{9i7Q+9OY3Ca=4T?r`3^%loiw?N7Y#^PmO-&Ei+#?M9tX0-Rq*lCG?eCm)f@j+Q z1zkX*zj-tY2f{IAdP)O5FpU=$dX9+RJI%=Z5ZF=c?7xi&S*fc{Q$??-AVJNTFG$c` ziUe#$w1ZCRO_5l3dC=7==Ee^>xOw z>R1sJMA~42Hitd`ClZ_BuyaS*=TsBFOhlH!lpi}!DDk+W!P69L38}5SwOYOYK>3Rg z?x=SeL;At zRmEUa+o z5G;H|M?-D=7r38#)%Kx->MllRr8W73I8@-Y=({^DHZAnPk8hol#a%IIA~J@~fdC3i zhEHjA{u*rj*ps`*0?mwb6c^jec+-rq0vI$p39c>03XA&I}8E8HbupgN5i`Tu5mCfjJJ!omjyuGHvMfI2Sj=^Y!l zZi)wpjC9Ef7W6>rgRqI2@~k|@=Dq%fNKBUKGW!>rVG(@BSO%qg9Ivo$by;dllpos0 zI@an!8WuUGbzH)fF-uHtL_?T0pgDW#!?kK8+ck`gUMl&(^{!NjHUuVuY?6V->^0#q z&|<$0Vz-Sn>W2-Uw%C0YgVn2au?!Z6QbLw@A>d~3@i%!qIxc6asEw$ISSkZrXj6Jz z_aTWx5FobaqHA5VsMInZHY(~eX=IlM3??n@u2v^ri_g|hcpt7zu_@_vr>$we>=$8j znVHR?j z<)wXi3~4)UL&r9sS)HWD(Elk7p);I;wEP#FA`7q{A7O(XJ{6KSXBLN63)%ow?Ji9u zIqPkPz;vq$+%)@d7#ca*>=mNOr?Q*M7rYYFbLIuYjm&nJLx+xm+pN{ahAi1sijc1! z1H$y0Z3Sri9Ffz+LCOq_h~`9$FTbu_JtHOhPUzQw$~d1qZn=0!<+c zLN>K?S%&U2plk^tr@`N^)9^G+p*N4YZ&)Nt5P02IC<>&Nb*jM};IK!{3vxDh_5~R< zNIIoX3)AbmDQ*N7s_TZ)_P~NZjm5(!OZ}aZ4P_7}peM&ytPQT!^xcvar5J-9Y8rU9 z?58-nz4?K&KkRr$u{$!u>M|cfx@lxfDnWxQ`M;BWK);Xwuf5<#-~@06q_Qa}x<79} zIR$_uH8w@;@0lBfXmE8)aT!d+9Y$4jB0`-#HJR{2~*(BOhUrJS5=zzF(7i5qZ7>+?~< zeN+9;)4}h<*Ft2{5D{g#F9xV(21}o^S37PuuP0B3f*nXP9YGwD$uV@VzgprOQtu!? z-k&JBdx3$}P7p6_^U$pPH;U3@NCj?K3;ZR|K52}ee)WhS$d7;xEnNYxdtpKlyB;~! zZSLdN-$uvJ7v8egNKRZpd91*4O7AM5T?f!mlS|X~BO*?)=eJjd)dS49>xXi$ zV@&&M3=X#|315Q{q4phyHHF?PrFXfOFE`cH*<&km*i?O-(jmjx+ zB-h(VK8VTK0H4EN5EE4dIn06_%sRAsJz!WiDe&2O4+tw?{Ez~xd7?VQV1P4;L}ZTE ziy!9VuVrvFgyjm^QU1i9E-Noal?>#@7|hw1l(6phPD05aJ@|+sUR~IO#ANeLy5a*-;I1RWP*D6@61$z?GxZfWEB zM$ad#1qW`J%_7-J=)%DEze#{SOxz05V%mjL}dyP;-q>0nlIfW zZ*`&s%z_Qh?2T$juy`V($Y*S>^F|+nT2B{_X6k5Y2i6ox zx95Ix;sTV9Y&KeR_Cjt3*F$o>N$_&pa~I#sXdY<=C{8ib=CbcYKe$jQQX!ELVO9FU zKtC>C3LKrVNsPZRFeO@fl(eUlgq_wSpw+^ZE5LM8Q7&Saf+EToR==quRP7RW2=`p8 zc^fo!2fDw!UY}SM=(vScAx0DF@7|m-6Suu=UH?mMTjd-t1rGaBbcjSUk=jWxTSM*K z8hMxnsQST)TnLhx4-3YTv|mQ#dATHS!N&>}bB$gtsZg4Mv(Hf9^mtznt4;GA>vS7S zK&GKyd_r+Bdw?5BIoQo{gxGfQnZ0=)4iMKR$d3wd6=vwKs4mH+u=h~Qr3Ua^wxEzD7lA2o+DcZ3pR9vzg1-kTGEDJ(a9 zsP2p)Hb@Jzfk{znaEYJ?WqMj-6lQnQD7{vIoG#R!Z7K{>$|c8$xaBoWLkR}oeEZ@d zkrfA>jip6C&BdMN0RK4Mr9bi{jcEuU#7fR?0Y&X%pkFPA?|j797SjK@Xy1k!1FMBr z-2$R&TSGSym%v+gj2Q5~lZwy}0nU^mD9kJmz&{rKe`Cgg5W6tEvcrKA+OgedstKsg zkqjPr`S9IXHygDSW*4?BDlrTsHKkW*Q4~p?6b7cEe3qjg@^p~A*42@fM2gM9cA$oK zqVrnVORo|xC#zQpL;kUVJb4YrkCBMi#Og#cB4Uc|ea>a)@$inecZ}_L!D2%u@zP(@ zX2p2*{5NJ*@u9n9PO#_1W-qY2Lu`Z0Ia&Bd3!JHOX<@88&UmE2tQ~uomKiNRVAOrg2g&m^Qg)r( zSiMvt){Op;tvr7y*M7;ppbM}Wh8({J78|E7=^$^Lt zbc|)TO@`rtpE_nJF`jLW2ATaV!I{RyoEmTbE><<0QMSaRJiP*Qfvl@ti@)EC1g#NU zYDk+7jdQLEjLGuPg2kOMiHwJkkmO2rQVB{piI!&E=nyzMn=y`{;jpo&@r_P$Bw2ti z)jjQD#JjjHsd8oKdC0)!D7E2q@LBZ*{8NV}jle4y)ZFl)CH*4k*{mfOZe!=P^ig|i zu3E=tbTE_v5ylOeo4nK$Cx4y5k-s%E1%rV0zQOAg_VC`c`|@PKSG_nCIAOYX$;5?9 z-k75-?A~Tpro2gzZ=&)fHn&vtB<)uXxYQt38#?V)vV8EeF6+TO@~g7@_px+N8*lvv zn`qoHb$oYW>x!^9Fk3N2GXEmo_w7$C!ja@UVZQ2VbrHf)xoAp^k8aXPbAU`LcZ>=5 z4l>|Tcxsv=3A~30)-?Mpf#?VOlUNlHC?di|(e5JL7lTwXT2(wq6Qu|uB;cA&ceCd4oxOPWBkchvA*uApF!tE+ zK?BMMA{&+hFCmn$PQ5LX9WnQ?dbF!`ls|zR4YQQ>`JU@)W?}`~0LC_>zKTY_B+V|# z=sh2%7$GjgdlKEz@1Ceb^s)osddb%cfO8nOsRu+N-OjJ*eAdZ`{F}d%Otw#@p%v~6 zxcLGR8zC|Z0426y0wStK&O!Y}*8mDApG`}-;KYm#a7POl=A5r+ZU8!6%sVRUCW;y4 zufOPo9XUjuN78;533DBlO@F!z;gZAab!ViYd(evOT&r=`n>gj z_{f6P)_n{TmxmOGf6Wd-RRA5osR)gg^s4aE^>FzpQ(S9eBeslh@@MAOdSNR+d+LPDeP(mY|k8 z-ywM@ggq<`5#DMlxQM}xgnlVvm0+xgid@Vj9z;749-|z0>`Nq;phv-uY*=j8Y+RXz zO{(6KB++ZBvs0YrDn*`x82P0c#o0!CY?2bUyg3DxR1`l5cHAqsp|yI8J(~7g(BICY z=u7Bks|FN1x{*We5X)%OIfq-ub_c4wIFiFi#OvLz`Rdt;WLpi(-zEzm)3+-l6?$_d z&Zgj_<_h&dIv=zO3`^H#=SM0?5}SOpSFtX*cjA>*|J5H>tAaN@^`2G#82D{y46Vvg zNSTUGjjz{9{q@ADQ|HlhLj~$2y4GjMalnV*@8P^qz68i%kX~KS$;allX6y538#vc3*9++I zf0vcY8ac2;8;QceeOuaJLcxr-HoBk&`19Se9E^<#W(L9gC%_|Irg7X_?*d>@XsXZh ziUCGsq2T`pDp#tbN{9QgVYi9gM~`GnuS?W4H?6~O0TA37145rT)%ec-7^UpXGPV2| zN-x*qB+JTY+T?i{Ae{NQ4Jd^x3DG<2V^w8??I4{6bA8hRvtLp#Qf%Dx1UPEFoWo|M zy`_2|F;G*aPplrmmBWXxWRZF|bv;VpU5|tAbPWokTSf`R&;su2d!Xcn`fWzeig~n) zKO8SqW3I~IK=+L-DL);X>k$Pr z7Ujopm}{MkROPCiP=A9xdZ5uI!=IKmUC_yz%o0sY#me)5G^tHE3O==1tDu5|H;l-M zqLa9Q3fb%xoph+ySA@`!>*BA|UDv}5Y2BGyBxC*Kxh(oj}IsM_J+=hstZ@m8OZFN8m@#UCw!a@Um zrq05V+7<1oJ)k##iBY3|4}$R=+(Ea@#I+OfHppD@scHh~OJ z+3}FBzlNdHw*uBS=`Ey_#!KGsIo)5)_*qVJKYuor)whN*V@?p~n36JrQ5pZ@!PY7r zr3B~OmoSNs&$e;$@+IXmuCgNm3$04i2EL#T{^S_zA)xz-5)!WRQvI>7j9D+uq7{_= zWXG2rfepL_PqbZdz|vHNe&#!z4suqBNvbJ*xdW@?CGtO?pKQ1g4CwW|S1z#&^GQ*Q zesn%xl<67vL~l}T`92)n|ER1~j{0q!KJ3fU-9{Ykx`D4Qp$Ot3A4apw{j_i%A4{Xp zdH>njLD&40Ni`9^NQ8-lq1m;WZ#T2t%2i}fL~G9vK#U7IK`NK$xmgLnetI91)E=RYrt|q^{x8~jgU&k|5XXP!XYY7TT;*?$7^bJkN z)ncImZ8w8qk~KVjO{RTA?EJ=|!(16hnhdolV_Ms3A;ORL>KTSIjyRa{2*j$12=Ib5 zV6`SUYx)C+@d6N&Mf`Qd7`)q^{gWkWXD-kwP8jigEOO%XDaWrX+s@ zp%>=tFXN78tnj|n!QlLVCF5$NK$qM|NSCq`4AkjByufaacBz##{$9EhRxN%DOy|R( zzAFser!iq^GlCoUzr2ive&_^H5pC>j?c9Uw)b;QHu6_9h_?dfdvz(2f8^JxeL;=nG4|+xDSC&1)UJ^bUr=!<;yW1ju&{}Zkd`t z2MrLi9_fhjM*AE$X!V;Cr||JSqIA0yu{=b97gY$#`5y;W66Y?WGyM`b`5o)sfgu^v zPzEl!$>kOzk7BX3{3=6OKxQd{OAx>yYf|a}NjW|oU1+U8acGjmQjV{N3vg??Oc9Si z6(5IW;_B@#Z{T*{3je~YkDBgN96`{Q>CXhf9M-dH(TLBC@pj!1L5 z)dA(vCtMj}(kY>t4)I62HD)@+MO8xU6EbrSTk5XfQ8U zefWt4z&@^qy%5qfMi8MO%>gl~15{J4aoAjj)wgPYIq5lzr2Wknq$gaxiU9vM=h1NN z$D)RSJ5$SA#J&g(`>@CR8|C{~@na;1&XLdz^1q&qZOx8T86*Wo-+X1}mCRpjngmU8 zKI(6Whb_Mhk6Bn%faecqqdf_rj4h6p=Z>FS1I)^;^!)h2t4^+cX=3-q3B`BtKa9;I z1CB_k>XcX(X9(Hd{+&aRXkS@R!ayI_1VohLsqnCV>ao~A_&hIgsUte5o6l76iB4q{ zKnVC+O`WAHJ(OUUM{)ukZJ6>Z7-B~>d%Z$wqi*Mp)0<(}xPXBsEPums({5=9ZKxp! zwmy0PWLqs1mAczf)2ZZfozYC|aj|8a>|e;BrsS}B!QwYZi|u{UPgl|#7iEs)AOJZCg2=8uXFrvhge276zhU?@U> zO?Rx|hiG?%9l8lx>BxU6lFdrX3RQSxFk`~joL3|X#7jb%-=yYkVg|50m)#o>?|?+d z@N_2Hd6^TO(Nazi$lZS}HaO`}KBlQ?yaQd60n&0Hr4MN`DJQ>Z1Gx3J?F`xS&!1%N z0>r`sl3S!nP~UENk-Wo^rtJ)94wemOVv#1gpuP5u z{i@;zJYMU~3yM3DmlZl@$a`$;48Y*9a15(~@*T{!gMut$-h#AoB# zEpSx)0aCK&D}H-~n8LvYlI4M7PXEU`5)(Nv>~eWMali)(mA{H0*B6c91+bGv6h|H> zDMdNEW9nZy46k|=zSK5jkljm%ZMjghcDCX5OGSOK@r!n>8{MudqyxbF2NC&ow{S^Z zWWZWOW*Cc|C>xBRS0g}+yAv3A< z?{L|(l2Txgr#UPHW|jXDV@}nloD)ue$(h>hCzCQJt?7u0@Gxr9hi6sb2q6y-2k#x@ zAl2=>8L`?eyTK3mHjxH7=rr1CCl5l39dpHCM6p^1ZXcxF?f8!8cmOidB5*6g9u*Ty}0P+RogBcRn02Fq$*hj!$3IIS+3lS;dz7 zRb9{qhgsf+yrNbzXi=KYd0T9tFg3{1$@VBlQC<$u3yQ5Y4)E}R(#YO#EvT)8wsi0S zHbJ~zJWuaJd2hlGZm?1f$cut^A0TF)AO=JifZ<`r@8LMPLgxH{g`kHE$;F@+V060M z636~-lTr(a`P+>Uo6riO=b9Y-$-7fxt<0DBv~Iu|h*Q>MEd8rB)K#-ccmKXx)(~S7 zX02DYP1pBBMp}c*8J8yO*_bXsxM9mk_8qI?aKo07>^oP&;fF0F*mkdl!wyzF*P=(K zI*}fkgsOm^$55Uem=DN*vOj9b8LBRIiA~K%+Xvc+psAXCd|&Yz?mFCAAo-h( zxjjOjrX`_!!gTJ0rk746EGGKVX+nw`)zf>3YakXalEDIrTh+#xtelZF=G1<*tP@B{ zjPRK}jVIi7$G;s0)pc_nx(8*4Ts9nvBuGU;U1y9$I1QP&TTAi0^{U*tfyxxklN0Rm z)?BknAqXd7=xk5}76Tt3MHOT_Jix47i6U6^$>$Pays65x{KB=cfcgjZ5-{+_Glp{B zi8CyOuwuPk@CcFMLy&PCJ8A=IeFBJ4OQ5{?ZAh^=TZBW)Ue;B$j=}0m5}{zY?$NC* z=EhpVc8S>|Ud7|e?Y0b8=;JRsTy*y+h*>p-Jc#0yx(^w1?Zobw)h^fkr<}JgoDd&E zG--|*-~{u2?A@4{Fwo-T-qYR;>;e-m#y6p`+&u?MOJbL;s;_+%0dTa04i(eoUT(on zciruPjT0T)hmsF#{Pc+TNV6Du;7tr>dy|{DY1IDe2SVm8d2NXo`E?WW}Gdn`MHZ*RiCkhM((4k^jMHA zc)f^L2sG5!C?`43k`0wt^r=MLxfi&~5Ld2{hSU>`Sf0<3lx~$D&sil&vH0HG&2Q~p zrv+9GlGVrgeD7^mBR<=Zbe-*1E*u}Y)qwGhDEQ7ulz~g_6%tCN_`ippbH`yP+0>1@ zSlFeH_#tT2ek=8r8fK8*e{7Tc#?~No@26_GSQ=v$SrF_}!?2ifeJU{EZWEkALJrn+ z5zcrtiiy{uajtEclF1)z0Wqj<94F+CcjmM3F@Px(thdR@tEA$a%jI;{{&m?uv-NK@ae)D0u4iIBrtQ^BBwkG7!J`i-glPW1@QB zQ0~;`1;>?_aXDR}y;6+?$AeRu|GVKAHH6Lao;@h@n>#Q>HOMuU|F6@UNqq#o2v`6d zv`}1jjy(5F^?)OWrZpc}nSPGOmU*H0LT<2}Q1iJ|Nl5hw#`z~t@;|CoFhDOX+_7j5 z8UM9S3yjr=HJBvvtv5z6+f9&YEZP^(ZWbFobY0mF15#7uzH1>1>72_mc62W>A2e@u zurPkqWK0&!d$I4)u;`mMv_x6#53>SYb?ory+hk4=gaKi3Df{qMP(z?oo`ymm_9);) zM~sCD1|^`ZPZsLhA?FG{Eo%Om_4HREl>E+_`1^;!>r8U4-7yJS0qP8DL{AXOV0@7>!c3^`RU+Kd}F8Q84>3jy$w_kN8Y{qm)oZnDoSF(^&y@|Vl4|f@#_Af>uP?)();zG&NAlTQN^oFWUMIx=ZVV~T?fd(R)lSKoU zqQOY}`D)rf;?bi|v`uLx>n#t|IW!MV?{L_Q-#Sij-Hn@Hk-tybZ)YvM@ChUYNth<> zNpJ8`ADFH($Ho`0^O~~N=2xHE!WjHn;mI7yYrl1H%y74@u|IF_R)I^arwi^e181|s z)oi8c1Zq>A94lvlP4Ollb6xT^tZ*NdBvsZ#1a(Q2(#*1kCXcR30^ zjQ%yYgze7EM;zmzRb2O1be_M?3z9A~6~)buQ5447d6zZH=Pf8^WId2}XpATdP!ylO zpL&ycfKIK*y_UR{%aJVw#yoAh9DuvjEn%r@Vk{S(VHn4()U38MV34Ou6@#02&vZ!c zWtjFVU-GPLX&c}4)>4(Sg$nGhOUbdgpwP86EzAfbZ5yii@IZ|H!nb@*OX8Jh9McHf zXUt)pB-KD>tY1)`lp+t!lBzGi2Ux1X&z>@k+gTFqP>=;|9XRxb1s&B)Y`QafFFXRs z(rwFP#lu@&L0~v+AjU8wB;EfkgD-~j)m0njr*&;ltwgn)beGM@g~}>3=sQLz=E)jy z;P$jHGgj8#s>oCO3_JmP!rF3gC2%g^l#%2TWhb>$xHomZ>YYaY%-AAfimux&S^E5Tuc(D~H<()WQ1Jfez!Qczt*uz7IBk|5kh!#`N@NNu z5kOCAw!f|9bG|vhjb-0x^W?7@F}UUoDWhD zmjfXJr+}S7dz0i%Rw|Dexz&Sliq7k<{X-C4wlR_}=-%bUjEI!?g(iA0aiz|kX{B~a zbadRX)%=<7^xFK+=xQBsxN!8L5X6z&K~o>ls-!uZdG3D)BfJKdGaMJ&yuX;Ggem%C z?#`<2%<(Yog_xhHSL=CtVvW2W2&?3H5)p>SQMX3*EbJ)5V<6lP0gh$cmU0<^Gd=&3 zU*I+xfMTZu7AJaW`$j^x!6wA9<1L0I@1~Z;Z7N?0n&Sp9Fm5xu>#g!c$g<6$eD>jD zeOWv%h+f^tNqpRhT%_1vL;JJo0Qy@vYohMRa2k@LZ9`P5&MJ_U>eSB%)wBo;4gMAo zfATCQ7qgJkw8|^(MITS0pgc&vsF3AQ0uqg1CN19>FCnz#3M~)#QDg7?T5WeqRd}HxY;)1|DOn)r7l%12$~NYy!&cQFMVy!$IVb zK8-HErM*hK>d~s+OCPfmgCb3JsN~HD&OY{fBPPJ-QTq8Ca#~uy=bQ!j8V??*RJ2sY z^b6S8Gqk+WvKf83wioglA{oka6kx+r(KWBD8v@cS8~iXGT2XWT+ibc@PGhGkVazrS zQNJA`dB+;RqC0*tI^!9{f=_cNHp=rT`;S?jb?nu>{p#H-_r4R9_^+ElPmu|W^EO}j zAjczWY|4Qgt~bP98EHVnHHUn>wDY85O*BLpRv62#;Kj%*e)Vv%5E!A+FAW3~a z(zYW-rZ9ILiU(a3zT>z0+t5;}m|u6IixYBbgzO&QNIzvKgM&aF)ix(pa$k6Xti-Me zNd!VbiWmxE%;Izf^oBXbm$R#e^Be!AJkG?#{$Pl4ctb7x`b*sHr<^VPour~sBp&%v z)6w&Gby3IOUz%GTn!=l#poX~*l~3(qta}F_GFbeL5?8CW-%JGk(;Kh#GC)nduBTHf zkjxS2NZZ`7Okl6_ot{@B>hiPE`EQOdk+&sX&A)_uD|_-@MkE=9Td2aXi}|p@S@+s| zKfQI~?WaYg_&#F5KI&if%BR#ANHH07?EQ7Ish3s6R=Q(`GMaj&Y3A%xCMkTMGFPgIHxoBtr#sh)o(LmM=-U5D|35jd9 z4c9?qF%Fcc$T+`SU|>7x<3WvVp04MI?)f~*W!%ue!4*wJWgeJiMZobg>FOx~?q_ec z5W#O1GGM}n{(NDRus+caTC%?;CNyV5&Jd}Jmz*7+$yP7h3<%`fYF1p7#$2 z4&UMr4XJ+~CLx4<4QKI|6xFXctd!Ald*g{wnwAa?Vhbcl5F`YqNj8&rfgTs-Pn810 z1U$s>?H-QrvNKwL^_i}%gdq+~9uqDu+_&AwmZbd8FbJuSXsqGopR73k-UsLiZ|)z7 z-zH)FWnRNeV6+V=byErmgghw0u`Topt2+R|$d|4A2qy%)siNJwj0jB8S|`dZ%hcx| zy5q_Sl5viX6yZZ>oUY`9?QMuzfYs;M(0F`yog$=~!NnFt&UVELACk{fF9NCY}%TIu7Q#is~`0x#A8Op1C_vt~hsjZm3xabt2`13NI8wqnf;5Jr5A6)*bvF zvt8Z$y!JzMAo-pgsGpTeXixJ){^Ll6$ykJt2rD)GZ*XgLHL!H-@`1y;VuSr`R-j`O ziy$3S1YB(=IDUQV4mW`9r!dE}h4xJ$klH$1P-?D2JOjKGjFZ4c@M+ydbRGH&Rs?(bBneHYD{aF#Sb!z<0Za+g=#in5xll+(s=@VH zU?m5Wp^!Y=4Gf*igrTTHE$jt4kWlC2FJ@XD+_&>HcB)zSU>M zFeNhe&TQMb%zCCFoXFDpv_AT>ur>})NYAzVX=zFug>qp*tgNTp;Mg>bYU-5ae5)Z1 z1QmH?_RMQKZ@Drjb4~If2hUY$jnr`bc?AjDZGFNdsZ;bNl4MFoUZgdL;G2(uUbc_Z z8&E3~(`9L+QU#djsGt-sey%#t&!1(6x3*jsYOie@b2CERh@iI02?7TMpps7E(P()YF<>+`(-P z+GtZ4rWUTr5y8`G2)sk1uKO)DvuA@$(ovLV7fa~`E*BjGva}YDekb}ui|Qm6Rzlu{RM_(UVYIC20y!>h^T)kx)$df8Z@A~N+ntm|K4@Zh*$Ie?$lu>FIG zxPAV2h{C||fDJ{vM4WI3%Pp}lB{D2__oNFympEvRc)=iq7xYF12F8Hdd8&8N6MDZ9 zgalwoBkN37)g>I$xzH}m#+7BbL*yVx(VH=B?Hx0Pbs`bc0kt*xwP6e?BjvRCa)PR1 zXr|CEG!ygLV#g5mrNN_t!Jl_kn?=KUj9#6b(VAiEKrn=_7;H?mhkP}5M$%H>xAmVe zrNX{i$cbP_oaVh7gWEnFq9r3qvCh{M-**5lqN3eliyt1nAB+G6-wGASjDHd&lX5?5 z?jX^!1g}X3Mc)?TvjV(X_p3~XmhliHFz=<37CPpgcAf!Yfd{*-1mWZ;a~S#qizv;~ z_p|Ps>{j1N-Y3RMAEO1UGOI%qPR`@ePJr%rq@4`)!q2n0H`QOwEo&60|Ma(%KM=H%7gvMAs}z)cFz)NzO50BdPFFO(=bVHp}ntEBbuFB-X9U*|~JEas32yE~#bl9z>p z(jp7c!C{DrG;&Uh4=y{^k;F2H(sY4gqvTa^OD>4AU*z6^f8yg81H+in2tF%)aOsOk zu^tn|HH8x`M=prNxjg_ekfz^um7O9?4rkZ^QO16KNuF+Sm0zCi2KDjxCOIi35gf;) zkZ^gM*~D8ta+>}T0N-ujlC|od)TOh62ZO>HOh}bmHvn78lpNI^dBf-4Jj>py55N1X z#`IGW4J$7D0PpntOw;-P8(evA4;+32*V2D0gxMCp1h^Qg!$!P0_o{s2sSSX~Gu}p& zdB6tr(lWNuFuFo`NANOmwoLsW3MeJ+v{7D90lLT|e>?L8*tl(4?0^udJV_QylInEC z1#6_m8M|+#JM&=zl3RtZSPEds8yKRBzECt7T5vDb!AC!(Ntcg>Eds8{J|3F`sePmF zxXm1Ifm!T>G{dAHEp`5JbK^5Z_U%=)q?W5rEfdeBCV<)>*urVxa!g^~QNp+SxqqLK z!kI9ssQBU3i-p%H_cMUbIsF-|xIRHlE{h$*ESuBGQH*7tANBaLMS~OR%4{u@!2=ZX<_S2k5I zVa+vSPcaxvKkqo3!1g*@32LKcQz{|okal3|yW@Ha{$deoyH;u`^vJ#-yHo;Ae!6ag zcl+aZS&lBhthpiFc;5fapd0JM>V=8s9mAB#?Fw1D@eqm$A(ELQ_?sRChG7&$Hj0BK zeBh~}EPoguValRDF@t5b0XCMsn4#s8<+An%cpQEbQYdFaly*hhzbG&C^>Xy% z>;GkGx`%XwjE7<2_;EqUps}_W|4t-Kbjh<*pGBe+3@tr10uLkc6NK{%;Gq_6=u&4? z_!+rQBWOM55fw789tSP zV$Xv;1SOUvl{8* z*V&Gm@zR@RMhLokMgifDCAgfaQ~2w72?GZbH6AfmT<&{tW18jmPMYx_L+cy#|FfKH z1eD$^6^MfCX)KU5afcO1T^jNdFVJ2>?lEI{P5=HM&y+c8lGvhUuJVES#yb#*u0V~I zPnr80cQ6k_v28ak9uB>T`}4oQzqki#iq;;LlNipMkKQl_GgR_CdE-%bD_F(jt1-^+ zzeqn)n-AoOZJ)jme7zUTSndLejfw_m2P=tKXTDA>7fYvrAErlpG9~3Dg(w&VPeM@-L8K=v$=I{>fL@ zQPQzO`Gu)lt;}<1JWou&;pMs!7wuTPM63_L}3GMW_yD)PfX zB3<;fNA7LJ6mhn1)~Hb1>C0(4zXr!dugudU(%1rADUlVoAo{#v(cDPYHM}q zft`iX#!LDQbJeH>1=)7BQhf5zP0|VMiF2P2f0E>Krvx%+MdyXAS;992h(XmbGgCd0 z^`}vUHh$bAm534apN367B%aCJg+%{y0C->Sv|0Ra6dy-qp>)N&Ok!8@96FhnmZY}t zky$$WyrJEAzCtw!DM+TkU4M^#*pOHAEswxNj6%i`&!UI)OVHq464fNByES&qLK5=f zur)g6(AylxtQF&);8k3sTEZZ~BvEVQXxHdlsA+HFFTbL0=sHJ|q#EM6ZVRDpC!<^k z+-BD8Q1D5DS-2IKfvwMAU4-rQ(ma}~-b2C~1Zx%U7zVhOE!A`zeYz4UD|E`7ci0+a zFEJWob1gA#P3fux$xx!1fb)HrfoTD8|DN8gxBql#K{nDU2cg)uoh7g1sD5MJ#w?vX zJ-#615;jD*7sJ)XV$~~lu%3L=Pi;ejvi*P@M4RV$6SU51PI}^0A zGdz;!A9_^Lr}h5k3=9EwGrqy>b}Yc4wP??OawqEH2`eMPwjGxhVGxnn zuYodd(&C!=@3)y7Y;}@`d$#YFHh17IOY7Sxw|1yB6@V9Iob}La2(4iQXeekS?vUb( z9#}Y^iD`^motP0jeGJ}sx>J7kHu@A-I!L};N{&qBcq=B2NEuzlVE-z;G>h*@VG=~v z=BxmZmYfB}=7vHl3xjx((BLJIZyf{!zwv4NQP}_ zXPNy6IKXQbrR4ui12BuHW7D#eoTx;=+PE>^x&P!Yn6#&wK zx=%z+q4JIpnalY>E;T-XkfoHKpd5L4^zsmG}sjSqTE{5$4v5(eDjpjC5(Yi1)850FP6V7nmY z?kZI)b~Fm#WV?|k7}EQ|MlMF_Sc$N(D-|U!IbM!7=rx()6TrUMRpkBaKA3xi8LaO5 z>{~l&$o!V)%w%$ff?hfI@;=5%ZU6H*{_Ipk7Ye-+pJkj4C`ke~uFL43D&c5eyMC;G z6deQm6=nSpZSH!2KfVX*3zAyYJU=5C1D}fRa5{PW{gOFMVjhw2WoI_2%V+H~xG*@` z4G@GUiJZ`a%bvD_vO;E`mu$3AOy-IeQlQGBEgEn<_Ir$&Yq~XBW^UwkWYj;BA+~<_ zIldu67fyxZx;LNynBT-?qxFm)gX}0L@-vj{o^YJTUSks0iWwzPqtJk@NkfV}7^6?+ z8jP#+#s|7IUx%cRENd#E$e)a|?-B)*yq-N;@K$DFiT+uc}R-8Bl{>^K2-fTkHF zJ?lrzMTt7&ye5h_N;zxD4pjDW@!%vHE)(HW*}#a&^kzgz0xKa?P-N!Q54*%eP5W42 z^e4g4Reo44dj`Qe;Dm4Xy?EkHK$j2ynx5E^^SC#A$ra{(1M=_FOCePrPM+@u7Q(U1 zHIJ8-gT9KH`E;Kd6X#t)DSjm`CN_8UY}nQN_Djpbl(Y<53!?i-&O0(e?1p_p`}qV+ zF%!12XVde;c3ZI7J9RCCUth437K%&(6wJ@*HHgxhq!VC0@#Gz$CN_DyHWHfTdFRCq z_`}$!B>zt#Smm0-!au-dI^8k`=DmkEoFbOpT&CDoBZTLd&Y4yK1R+%1LaVpo4Z!&` zhXTbZcQnoPQFbZbiAK7jlvXv3`g&Ei5oBG9oh*@ff=`BBmoiLdgHby<=pEj8d~m4P zi38*im0!fIacYBL?=FUDHR)TviAeK5I1pl`-9Mk}SiMk89E%^sxt3mPJubcP?LX7x zbd-yR9Jc`VF1@V3(u4N_Ov!_J9*?A6cDc^w{r)>~Hr&cH$GZTO8?*@zI12J-RJ++> zB^#;pHwZjWJ=%l~yn6_|2vEvFlb?WW0H{u;`rsIZ$ddoheY;nVw_Mxiiz;?(hqS-NjWM{xMdtd;v8)Y9!|*` zTXOas_sExM5YcJ8Sk{$FCwFnG(7={0NWXrX0wN6XWVa!Qx_pNfWpR8ouQA3sIiO&Y zk*2UVTLO%76Jua=3yx;$=*xfr0000000000000000000000000EdreG^PIk3fu)8y z3Q(QTkcq#G@KL-4Rr=GmZf)NjH08je(nIWpZ^^1zE5^CR%YvNu-V8n}C5@C#H9yl? z1EHaKrSDYJt~$=)2z~Ed!MgRk6Bt@>(cn*|G4fM|H_0(A=XR#!Xu~3^-g&ZCgd3b9 zj8d1&D`i>Z+{`G;rj-!qtE%aaL9d@%)gSoE@Z=~@@ng3TMg3FT(zKF|iCGArtIQzx27ftdo0!)c-+sX|UQJ`az)U9VZimYI;-ESDZ&H+dV| zehS`q3_Q;b!)R#Sx4bHY{Edv!q0uF}89FtHDt_ z<^Sn1<%Omt?VUgr^h$^C(v0;yGqas%fy-M!Q-W-jp$6x?=5!$3_keyz_TPcchU$JI z5MVi?z5>#Qq2bFf5i|J|K#zjyp{t_dPfgBAH-2<-PV;GLVcL|8U9wvHn|ZQ!-3b40 zSt6}uzER25OUSTW9q}8`Z$`gG75*^y70D7zMh7=5-7`hZ@SbtwpFr^>tQuQ!K0UoP z2h+sBn%@FK0r>rS7<|H8@$?IoAG{b+3 zNERACMOOr}=!+`Uw{#!cCLK)#)NUh;F-F>4LR!U2k$|SYOVB4$e;wq+l z+!pS$qj$^agg~v>jm&P5I8YKweb`Rfq6?Unu%GlxpDYsu=(IzC>!yR4hH1l-5~<+y zsz~%hEmSYnKiOGG?bevbW^m?rjRRo*rFEtqQbL#Wm3_6qR3Z|TW^sf~WaK}%{u%$X zV`0u)J(NY1ml#p|U1wJY$4fa-zBcmTsFeo9jW2_Rx*YwKl=Qn}BrT?_{3<=QXia_E zH#Fz6XZHd0yi@D%Mqmu%A7!V;pkk7vvCbNI)YIpH>=v5gC zi#Ahyr}095Fr)8&7mAaNWpxpl!@Q$~Z}oEjKOu!OVN+$5kB>wG9qG6`DQC+FBD;RK z+6;<^&A!k((6d+nySNaVBKVspQ0oi{=F_GhW=4h@QRwTH2wbQmGc1Ofm0fkDCp@fegu3iT4ZjI+p$~bF?|TTFdRa$*r~Xg)S!50UX$Kcq%53 z?imdy`2qOI6fjOLvlwq?vx==GsxT;SVg^=h=n5fdgn7*p*OtDFH9Mb1c0PXu0g)RH zR^`z631GM5sEgbtN#}uKsL;j+P!OjBJgb6t6~Ai^Q+)nh2c9H_nY_mx$X=` z{~2YbV3>n9hil-*F173|xO5WS>4s?W3n6-@!xDRR%I3IncAEUzpQYFIz_niEs>-eS&qI#hGNAummw zi|Cfk=c<6dVP3Uv*Rjp%hymDVc6JNo@F=b&Pe0L1{{Q29J=0)|!v*NtOC${(VZ~Ax zM!bZJ^cRr3j9A_ifB%Q`qV$2-XyGdiI*-9I3wcXtw9OdY+>XRu$Qf0|B86!hAzr zmpeFquX{)*_7GReS+UMFj+$CrFIIec6N@0@y1WyWvkYCVEr~ zNxt6{MTD2tvwK?tZJd##a?I!G#J>Caagz!$GX$Wl>vXOsEk>NkJMYjfqwcjmy)J*;T(MzHh^Y zk(YZ5=2z)}cNExB6S9nV;6;F3~Uo{TTj0hx4X5Gcpsqo$Ny@<(?0O%f0M zUUn1Ea4_sNmyO!Wqs#*IdshM1E9{ut{gP9zKZ0F5y2^dAnEA$~ZArrYMW8Y&6q}hd zZ&rV4lHSCV!oI=hg@oK!?zWjUrvRVNcaeGP%QvIR=mIl;v>BpXnpq@;hSR#I#sRuD zz>*=e;2G#@IasF1)`saw&t!2=C^i|=LeGyRq$_kxca*z+reIAG*!wR?tYgeYiS2QT zss#N<=!fdk{`jlQndQ#%I;pE!K@Hd%ib1guiP z1NN=D&cDA9eShxPHDsltwcczm5MuB9U6O%{WUS8r+rt2hdtbE<6G+&ubM>~_mz=u4 zPh}WUxW=_!y?!~DHs&=Xtdat-r;5$w+D0dqYHCg)b<5t)w!No2fa?QFD8R!x0f6!{ z;ltt2sIv;g>#6k)OlU6NsSE67??qSH8DH`53&NmD54g5HoW)l?36d|QmUtz_pJ!j2 za?=F(5TLNNsvYiH%X2TFrqx@w1H)jlG54SOS z$Lmy43P?yBw*OAz6{ERRi5pQb#Rk-b>%i{wZ0B>MpMwLL|4`d*?XJW~E6!?X{Yk6= zD!;IL*8IBo-x|9RXvb-3`v>>!TtVMva8ZDQa5poEU00UhfVo0P0QtbdF?u0cuaF{v z#9fCATIH!IzGutw1P=8Ou<{)F5dctEtM8YrOmanogl&lXKMzc-=M9eR$-qHC4k1oY zR3&rLTt?#P%kA zgb*#=rulDMU1oEY+mWq!Yk~gai{6X2$SPWf(zz$zw?-1}+GeGA7lS?lMZ!8=>igec z(+q%K8e6x1TRdyB%=?&naIU-~tgIt=u`_hz z(jmIdSl#A1KUa0o*yO9?^8g1h(OMg$ilRceu7Qt6{8<-GjX@)lPwzLC5|Fc<#NXIsL|}Wo;)K`EZdmXOl%IEj23v~ z2%CIf*t-b%(4~U++E}x{Q?>_;@*gAc0x!r&?-&!#v+P}52+Tg3Qxvs~I7JT4Byi++ z2GM*;7L2vC=(uO|KDY_o^;H$2gg%UuUE-)R4{pzvNhX_glHgFWifz}+Nlw^5_(Qlq zh*Es|K6&bdq z{y}oc^Cvebmn9yvCzo~eU_UI#>_2bf$d7@esaiK)1$$lhr!=T8uPSJ*(t@p>Z~)qQ zqoq|odtjRO?{Mo&F;~d^+L{{0Ttt+=sEOBq+i13OJ346ml8!$d@SLi=y6q`u>;Jl= z2ui2Y9)nb6W8iq&(#2M(hehO2v%0vpB#F%d+F{7=UVur^^Q-CJn7zD#ZK3Gd9{2g% zdc2XdKe#Z3!0s(;B5oXU4AdWiTXW&kaxDMfW(a;3g%X=;jpy(CoiuA!*&QkUwY6&! zks_o35hkWj8AImM3XpZUZx3*DiCEm*nUK;B+>Zw#U;0-{h`yz9RSwho`*?edI5z3P zjyi*xGk^Zt)F|4lCw9c%t<|{o$usM_kQh2Zd0ZC3d$?owpUEMZnggzD8%>o3AQqLq zn-**8ql&DxFN~vw5x*I)I}(qWu^=_(_-~(vjzUF;#qkP2>RN454g7v98qf@6d^nZ! zp6RFqtnmfXWwB%EBG8o-33xWQlfVCIpRq<0=2Ph@drn-NYcC3~+3}t03|nw01p<$PoVw6>`wMJb$x%Juu_*?Z;*y#XFKJOcOU3`aB?UbCp ztW!9?$ulmDdRGJhLyUa~IKus1u>~haz>N3iV%A?FY&whjL0~D(NXR9=)zoN?_6pR- z^VzX_so4W>e<_VFy2tH+ytO{02=?(_60;%6<+K@~oZ#QUKBH zGjZ4T7RjD-A^I`=$i*_OpbWqEyzK}i?hp{|lPm=d6&+&^OOh(J;pG&h4Jy3yDrF3o zyBMe!>BYMmCj^43!OvuH5R{~1byND?Y7pv4J+jN<#?Py_?XexJ;ge?;_PQT%qKq0~z(p*<{nGT34Se@t6iyBrwQm%^pvCtC5~6!!3Yu zf0j8x5%=ZOib@xcA+W22Q%#1lm}@qH6w_(@OFU`IobaaWyLt818DU^A#kfD{SrD<~ z^2^v$H5i{;F3x0d*&UE|f>Dd}qCj3f`#wEv6Yim1f6csp`e77^5O5lru9E5yhAJmq zqt5uR=M4co`f>OH*M*$RkqMlnnwD3+XkNtdH?0HlYLf=(P}3({_+3NFql3_AS#5IF z)$1kJpfjc5gHp~4cPan9hfM(jn0~I%HG8yb2JUm5kBL`TS?Aj^IS^(fIK+6}0dHr! ziJmI+t)P=?Np!6FS(G`@=V-&19)79qn2#VVR6<%$I_l8o*E0b^PcrwjxfqQ*;6%=J z{k&~0rUXT-r*{iVZESjRVX?BgfU+AmrGf}C`%d*CW3`*V?5X1Hrnav=3Umo^tZvIA zs`iT&gHNEgsM2B4pOkfMI07z(tF^vQQNZm_qhK{AJ<(|MnU!-;{Wd;#HDT+++7qlJ zBJ-nvhuKM;kbjZE1HD1y+KcA56_w!{@jnUXD?c1u^&TS#tY~1#%7$aC6kc20QOZBF z4PoB(n(X#onqT?8GdVI5zA$hKDH|{g!@7nn7p^$PCvJ2q6_NL(P#CQch_b0xa!@}wK~I`xK*-g!C(!6(x| z5PRE@X|ta%qZy%b*qsfRd2H9;Na@-s;PoX}_d`Usb??s=mD$H{H&ot{?R|iW?s{zE zF3=*ca$SJ?XS5~-CSM19di-2r1!D|W{KNG}$aC##XAkZiAkX^%DrCS-kN<1#1^|B( zhqCXyCKwlS`%WYT@>AhYSgD0bEF^C>xeU+RraG73e_7aQeaJ*dLPK5Buht-~`deAcIBSlO2n4Uc+b2ac!*q`~ z$IXPixs}uob7;n~WAerPgJm9y?s|StoEjj$i}6jJp;Hn9eVK2@vwjL?`AsjW)I2Xo ztjua0B7Ryc`n8#Tbr$$`w^>PsmOjqhqrh9_B+INkg{{jhQKXq6>6FdK{gdwx=rHC_ z$|C~Q9zKh0syl500zlKs!*F6%kI_B7chPA7v8rc&xnap@S z)s8OCI>`)kI_s;42}k(64xTSN2+aU^>@Vn*>4S=}g`Uu_#)-(KrNC~DF10Nkr6H#~ z*i)G8YHbm8=~amhP3^FP?=IY@-tRP3fvYGl$PJ*qdTNI`VBu$dKK})FX}gD@9JMMw z<$EX`CaIF@F#J`%3|BM0i)~k0lvn@_iH%q8r|uw}Xr|c)e+ds&6kx#$JA{#MNkvGh zS18h>s7-i+T*@6iG)F#3%9Oq6LU?_QPGFA>$LBA1EM)+S3j%7k7HO63r7NFjd0{t* z&|`Aj75TgSmvEH05-zS^fAM1vmZ%l9v+8X7;e8*0%7w@gt4IbJBq7%Ysl_bdgv5&M z8}W1!q@R-pVUP3tpG7mn?r5mOjfXOU2Vqhf`dRixMS;t?gke34Bm0nljjvqWJX9&J z`0H5L+71OGs2C$lA4#19{)R8a_iAm;F=f{Hk1@#zvd^mea)158j1paRSL+3dKt0jl zy?vWdK4TId+O=_L^GZIbSZfU=U6<%-j;r+VK5shYkI(ruVD`~<^ZPRNf5$(T^i?>X zN@Hu$M);Uf{RU*!?ng%Um-eeXa}q0~Hv({#$(dcd$m8qO|Dar=nh!-@k^!firg{9V zZGX+@%|-M=#XrgC(61x-oZmH;EQsS=%BcYE{xiHfn;V-@OJgM|uzFS7B4}cYLd3DD zaO1erXQr@r>==c^kIYf%ZV=tK*$l019`3Q2S4C1T4cPnC}9X{ zb_q~YST(1P&3s+aXTEcV@Xi)W$hvrWoZTvtBmC2@k;xe9c?~KaH52?TBcChn-6lOB zSL|KyE!=8U3o51@-^`??=Uu~D4^CyLK7u-#9BA`2 znX}4(UIX10+qH(7iwMAVGgnt=<9qU2k~zKwso%dNFPv7F58t{V#NjZm7?@jbE!lqsa4hl4hq8CRE=aQ>L;7Q268JfHQ$$ZB8)*ddfXg zf9rHt5~!At^NaT!=V;B1XNv>h^~*ecsG7)5d~1gDs{c*K!mG@PihB9_(B% z&>J*E2CFau_rFV+Dk>o0{6XUQ?yF`LFu*?1c+Ehnana*4i1LHx=%Rca-o5`uQYKlr zt0#O;&g^?%pSNlMWQPG%^qeo2?M?6bv^L&f!?sQKlcLB~&=s1N;6e%$5AL=*45;`2 zYbf|c9N|DCE!B$CqhY{{EM^W!5?agQ6hjZsd4#?(z7Ix(<=d^tjy09*15c7_9l!U$ zOL$qHK2M<0qNS@|*z(j>N!5My3s~X`)(wr+&7=oa{5C7=TGTMUGZ?ZEH?X051;uNU zV2`Bl;8ZgR{d0sB(-8UkKsY+Fjxt<=x}CP6sFF{cI)Xfm;&aho#+_-qPiZ!*R7gRa z13mrX5t5&4$cnbXw@p`X8%ooE=zDQCUtgqIf&5powVGMz4F{$Zu$$c4>BQ2`EGVQO>%x!QR|5ne{*9o;&Lci8fdU7vXkfZZ-q5pV091sk>$Ml8 zcbi!JKVU8NfU8?W8NF2#Ai0C836_8PbM9)Ats4RFLv##7$~(0wmG$;PU(3`a96cF? zWuZn_fJ^9;9W)O{N3904OIU2U4cg_G;BLcKf@Ga|5L|#SlFMab*k`VVBdw5Fv_(0y1pSS`0#VW z0ir+}LPkxy+G3?2qlwLKm1}U7P;lLQ&F!ND4*kPG9mJ!y^zzc&h?wlHIPpB-YgASm zS6){0$z6$6BwH5>h7CN6Ak*)HVla9lm5M?gfz!9&7|0B+FPGxDFM>;8imvdkSd{oU zy~KbPcFMn$X)-y*3da;iKtriIKkh}wz5RyVR_EcS&lGd$<{QaaAQkW?6{5Bh#0vV$ziT9 z(Unok?k`jB&9E?oUFAH*i+bNeP#lrPRZsXs4QlXZ>&584z#Lz_itaqv&S@F&=bleq zJ4v-r2a&t7@u1{?GB4b_65gN!0yi740bAcCu3+F;1O*5|_e>cG>W(XOF5*&)57#LX z6j}3v6-pRNB84*GIkWbOu&$z&Qqx;8Q5m5R!mP8q;A}(Wg6DHxs-lm-k63R}Nj~*~ zbKb!qKcWuVjx%&{L$G)$k5HCVq2}2C9n4Edl=+PYhwOPBq(jHyPeZPaaE*5;@wnTb zo<1@tvwLT-$9YcUd&d>CKyS1N9A6J2DEHp|@hVp?c^e(K`=m&A_j2&{qFnXOpdXqU z!}%p%8(_+ok5G#?|1*Vv(I8TCHxtjW2ojJRFhu{d!G&UC0|T`?=`R5o z&6_fjMIN=AI5g|awl*4lUuR79*Ba(?f2lo-wC1H>XTPK3YgQXkspkGMNk(C}rnFk_ zO&bIeH~lm{Gf=lw-s!0sS2CT#-1+u9!g_9R&<&}wqE$Cw#RI1 zoV=N&6=XIR8u^IhM)jx$C;|l*bXH$9zJp0)?|IRJALX85^h_Yq0MX#p_s`O@0YInv zaN|~W<{SB|uS^y@ zJ-ueT?w`R+TVG82Fk z8ODaYtf`GP4WTwcVOb}y6|Xo=b;WSGg{v_lQam`zS0L;lzd}B1Mn*K{qZeJt_i~MZ z(#N0Lo3q}@v4vXsoS+FpGr@Z%QRgC-EjA?lo#5kkgIaRoT&5u?5=;7)iuH{WTXaT5 zXU(|INO`%o%=l>rx^}4ew$>tt>bq~*Ix2y<^4+9i!-02;`-JhxE3w%?4X%l`8_bEq z@DDY54*D}DovechT^dz$rI4}9x^q&-Ot)Z{}gnZr=6ooT^h6|NkE_ zzvwMc;rzrozse-tMVm;ey&G;e&;F1*4Qe}l^^b^_Xbqor}e!G7|H>2Hgg0$a6@vpYQkEt^3H z5gd=gCf>R4&I6Vnx9>?!1^CSB&{^fu}c2akI49KhDUB77y%_+g3t2?Vtv z0r>HL0Xp|yT2#D_d)9=~ReuDqiZ!;W2p{+AImY*l0r38HaAtp8=k```&yjELtwSsW7S zq%#gTPZ&9n*08N7u8 zql^w7bht49nj|j@4O%PImgUxbJ!{r~NYR(z$ni4T25dbx3t8pX=K4qg?QhyUI&KJ;JN7$*Zq2Sf|iC8~Uo>`X*x)go%$T6}% zZt(da%_5P%0WO#zyCT9lm{{p9(8fqVh}}`-y|4aDkP1jN0T?CN$TC++)dg=uL9P-Z zfXK3X{GxO;&dd5DnN$4NgCMrQm8LN6IVb_CH8VbBc8sW7al#_&YPMOUqF;UjYvpwb z0R}fPT-Pn9;@dUDPr|5qE+-=vws&50YWE#zMV7;p6NKkSfe|O$0GJ0N5fXc1157{ z=S+35TNP28L#8a?aQ5Ncn;Dh#W`pjF14o0fKE+FVM=@&=j#^5kTC z+3`-eoens1D&aYzU%89gFz$u3`WeWMZ=gW457DFkgSbZfa4n0xQ#sd`end`J#&sV9 z|Br9nVt}wG^mT(;qWm25_~Mdq30bnl1D^o%HJOb)oNxZ@gug#eN#H?~tD{%p1p zp;jWsSyDf{OiwT&^(D3UltrVixW^5=OUbOXT)O3r;L@(%(Caqlg=-?=m^^Vs|Nu4 zc$$X9*>4siQ0UsvR4k|!@%>7jH{o}h!>91@l2G;FI%Stu$%7ML3mae}9kGrZFzzUP zob6q#0XaD4w}cCHURAl-K#Z^HM#YfErAK?dEe~{zWkN4 z?W;C$xl42^4@_{U#iH|lWqLX=+|g601wK{STLK7FDyJg?1q45p%95tj=fg)flCEJ0 zc?mFE^pjHeQv>#IRzl{k6CRP*=z1W3r&`l?bZwJvMa^+fyIC%-cK8NRF*0xKUjfKAKEB zgDNaKm$}=*XZZ%fg=^JOz`q!|YR#o+^p>*j!ljb(o9yqrqsGQ;*ykdi_-`IohzzcO z&h$p9i~VKUq!-E+ zr54w~R(@ZyQIk|4oMIcI0b|w*Uv-nKMGGXrEfVVBAq(ij8=T>yVWNt|0}V7tXPu)5 zu!PwA305vj1Jmw`if4&u=_{i17bxb@DAq*}99qZ`3%-b_q_>q5;#{TjO`<%mjjoS9 zDkC;gFfGp3myKIhIB0mxT)5Y{*1EwaAE`zm#>&mB!j~wu2n^8-zc0AV(I^!=j^MfG z5I;rmCS|1a9*jSYX`C>c1|duci|vI`X7Lj+C=%$x|B+ZGe}sk1${1B=pfV6g@BLq} zD~Jx!SvBR5%q`a=aMkII>bjAjgZu}vqULA?$v3z)tN|!Cogh;Ua)aUZ=}I#gD&kEA zyeI)6nW9~8d~?=)YX<^sF)CTU)VxOvG}+cffaA;71=^y6T$}CM z?VX;rGhln0q+tRX!sz1C1!Hio)i)l@OF5Nd5(`s@US>s4+$>RL8H{XNJ(>EZ?bjrj za-QYb*oC@Oy*i+RnFsRPKT!)3?kiRzP!Fvn7xfujPzm;Fx}s94+JjFLDFk$jm2sVp zYcFn@qt8!72Z|^z@Fz=qJ+|;Bw}9IgCEb`SR5Rc1F{4bWGQ5-q{qcKVT%Mc!0*_Q zq!ts8UOa`wHcTgiUAS={_p(h$0KvDr6H`9ZO|ObK+BqQ zGthw5bi14u7%0BHQDgW*pL!+vXSNMxAN_gPIUBV}ieNPVnhN<@Q!@dKnsK%^s!~DM zr9o_QX&P&<;sEA-eHngNUs*gON}B;geVmB{1M?vawr|HcF7qx&RO6nHi3DYmey(x; zH-;zy@btLHnJ14rww^f=s3w_@^-t8-hAKI1dNM}mI$JBoe{dH#MH16+Ld5YPY&d1X zb+yrFUBu+944@aZ7nAY+--0SGE+KzT(4Xecr|IXOF_6QSl3}ukwtykFyp*z3nVHQX zOOZhG_`;NGsdm@mIRgBDN-Box%*}8Z0=GYkM7fh$&L?M>-)<>U2sh7xTVA(E0YE}<#!X5r6^ zh{ZHP8?4mXDG#aBWjG@bII~(b5O_@dV{V}%r^~(Xq}*_}?UnQGNflq?285fXPUyiD zXR(0+`o499W(%@n$R=_Dx?TyDExxm5I@UK`+82sPiMZ4c@E6t{KCU;$-7s6Et_18O z1rqo4pU-M{QmQ6F{~7+Nwo-luwax|##)-9WiOqa<4po<#nYZxWRDleyd%Mo}qs6JB z0*>kQEpL#$_h(TW>Z`2BE&C5wwPbwkNj%pO z;7H&G=tq`R$bE_X6a_=MmL-LYEL_k3snqDf-N_{(Y3e>a-g67|gYbAqfe3lNA_q|0 zqIf?Anefu4|G05FhJhq0vhjv>7`gAQy%ntr#^8uj2!P`~B~ke?l_&AV;!fJs1bGW} zuChswhi-hrZjsr%P^02ANEzJ~o%i}hZEr*NM z=DBRAvW}?+^77P7SP?hFk%=amn5Ql@XL>0c8-=T@z@|9O@&%kUx!MY8-g`e(zV6Mc zOf5;gnP)E6qzz<>t3PZ4vD#sMbNo-%{Asb{aGrYnu@{VR)oN~@5offsye|%qOpH;w zxFw5+KC`aL^e5#;!Q!dasPtlaY9f)~4Z#+CeK&3IV>vUeKgpaIJ3}6b81@QIGGQ^; zL?5FI;@_+4O7}bh@1NhWVcjeP@xwRZks|0xHePPGK{Fja z6{B0Mv&tNh>7d2OjA*|C2hA%20(nqQ(~6S zmVb2!B9aAav`WiL&yrm@`@b=ilDltH)@BGzhu!%d#%|u{LkJ!l_!%BPQb}$7M@;^o zMY2y6f4q?_1ZKNX#|BoDSC62UiLjDuUZ8!3s47J1NDS%*-p!JFGZQt9JG9$TSUL&k zXeEFqYyP)7qrIC8zS&o6nxc*om-w-TB)0tC7~+R4>F zEyv3G$~P2%6HUh%q`}fF;R}~iMyko=WNHu+M}dHJL?*)TC}Zvss6+6$8StBU-V|ke zD*$q;t~X=)2zZk^Q#i)f7G)-^{UXgOA9o()FS5P0=VuHtZxLa*NS2x0Js>tPmf-m+ z4LQ3#w_xHqNrz?qRbzZTc!gXcO}u2^X>f(6icydRRQgB#1mx(~KE#YC!1AGhY~_Vt zLXl-hu$TONE17I&k-TH7mdVd1$_Z@-Ee^7D`@Pf+whQOZRbvHSkEJS=Ql{Qv0I8J6 z6N13H-Q5hT1JI|XFdnuRShF-N;?mYz~79|vEAU(9lR zfT71|D|4g5;%QiuT7*S>;RS(sRIwKbp%*5)Yl$r(W<@P#0FKYJd}6xXGbqzaqvt|Q ztg;%EnRa>~eDaO9QcqAMaig3{oei4O>7DmJfK>HwF_$AS`GQ}x&A)qO8vlwQ72RTq zEuINsH2dO!{=!velisa+KIN!Bxqp`MS}{ohyoYeM%_U+xr~UIXYGcY37Zjzi1d~7V zW^CVBUs5Y0?65;==a@PHPF-Fz<4j?0NHUu;4L>WY?EJ>Afc!|#R$5)w3^`hYpfJc% zS6o=M{(8FSiC6D8I0bSY*w0dvLmy1m{7D0=Pgq(_&g84MM^WM3TwZRJUPJ2tiQ++_ z18U+4_Vk5t^QA4|ODAZXgOMe0D7gmaoyKPN)*0<`r6*KwtxlubE`(m5TSP{_Fpe>)S;Tmy))}*rJ4klA`i?S@~a}n~q z&q4D6fH`UuHuIapQgx}aTmM2juU1EKDuIRF@mHzamYF#LC?@L2Ux3lG1SK-8 zd9dULyvD5n_pBO;?e-lF_?L!74J2mjP#M?reDt*+SNv{%Ezjl51f}sUIFIL%1mCqG%K(DiXIA{fdPsw_% z_o3wgA7k|++Ot^bH`wZWUDO#QJ?z*b*(^RSE8J|n_ow^0=QkFA2T~@}!=++_{CFHd;s9N!I=BIi?=oVaN3xhU|%=`Mt`2p zE0}Sm0j^)&j-52wLazjy+-~AJ`&P1wYwA?K?^75tU7;}_p2A$*k*8Qla+%?ktzTD{ z9_5tR`45K?NR;-F2Rg$fg`VQ{qSKB!O2ge0Da&cdRCJaL%0|9RdiI;Pk^u^-G%w4RFur!4z8T&4I?+E)E$reiTSIN0b-&H@#I}%G;C-MAUXfs->R0HMPTn@j z#xT&AF7&(@x{MN_8hB>3YRT+;UU&aweGeXn6;O4MPS)V|ie1Bgo>qXYOnr_QpsOuc zEShfK^{;4}9AKH^aY4i67Hmsu#`B7q<-4MF>h6azOSR<@)TD(GdFF>0KE-CUZW7vu zM~6X}>F%^;z^Lpj@w z?KRliCB3Ys=Ppp|a1Ol_lg&LSE4AxGDi{SI?}JnI5aIrkWrB_HDsoZ(?l9F*-{xy7 z)#`nC0vV=%CYyF31~j3ftteiyvZ-quZo9&ip;}N{S-@4h`U}75thuiX?qSBFosX zdj-PwZ60a8)*d(^w=zo(6x9% z|4EdS8byX}wPW?wu!T5yX)fS0P*{uT)Q%G7fHK6c&eU*Ug9;TNtAJ;Zw+AOUS`e;2 zwR0*1#%ux+uA%&{$qKMFL1sl6FbEll)9M&r#2V0>gZCX;n|9Q20|DqUot(M48UhZ` zAAJ8)?Yts-*bio(B}g4XHWGFTG1ww~^snQWUvGL%>ZONPiqFjak>A}_r#4X+e4vWY zQklX)Hvf;EoV?N<`B3hks6m)tfpC6nj=}**8BVCTP}Tg%a{ zK1R-kq9?tg-=E9!!=E_O;%pt<>cJeda`BWxs0fL? zMbY33!O>W&l3QvwM0U-X5i_#S{yfU9(9iwVCZ-s*z8h~+3n_O!ED1Usr6z{$j1Z4M zz<0Y`I>+)B91XrFL;DJjo?##pV4Kp$be&5LrF;-nZY#x>i#ucKs`Xrd<(DSn2)98d z+!zGP(0i#VWfmbyFTP0N1K&!o{p$CJ9A`6ASb3CKfPQYv;d!B&fm5871>>vh!xoX! z%_A*rrRB&83rEs}?=DtbEA*?-raYkVJFuA7;=GQAG&E9^&}P}SQLH-Hbjf;kCXOs~ z076Sq#dD&LFk3MH zU9IqbsryA9?d?0lPZJ(9)tKCNo)U$mwV3ew!8rdnxI1$b@As z6^absi)8Kr?DJmyeM*rCy3BJNp`j}JoRNPnE!;kl%*tUZD-V4l~;dxiJLDe zNv%Vm^3Fo?M@2-Bss&7f==GtKarLwTUr$W()1yoEi>RK;m^^Qx=#tYBFGYL_LkcMF zUVHoSTiFSzQaW-0|LuxENta)AUbfG>0U!kjUNnK{OG;dW{+H6(jx35xlAEfQhb0~8e zG;td?kd+c@=j)DSc}En&@VM`5i47kGl$s6kH2l%S3l9+q_~HHlY^0ntIFG&)QOoFq1jCtx4+`6Z5&+!rP?0CE z{_i~5k}%Z8z8vnL5+A`$4of+dJpp%ezFr0jfo+D;ChM2mB0Spb(Q0vE8g_4 z5KQXZ&uc9%i}CL?vuR_;&_K4HDkQWrJgJ=kN3QrMr@A#JE~{e?1N^La3ZM~vsqjQ+ z6!0VI^U=>}I;2zl;xO&wus+xASkhzTPLZG&8y7q0t%F$#hY<;_KTKE}AT;c^W;W?M zcpmm3xGiC%Ik|}>wDj&Udp_q#-%!H3!W(gpx1bI5&BxB~K+WPK$CljzyY)~P@sZx?`(%`yWA;7ict-WWOGPF+p2U=^miQqBbjk%DWYd2u|YqZD} zDNMck=M=Uip+BrB`#s1AWLMgOUw?P?e#?)S3}qeWCw%4WF8+zwkguf#2v36$PvcOl zwJf?rFarmQm}>T$oBH{n|bC2Xd2KT!k&S+3y-&E1rWCYu~U;}gt z#LB9D_rbIr`AfG4mphTo+P|9Dl=vt6MoPRCZ=qft>5tGlJP`#XGK^!qekMLX2Bq-@ zp=v!h;Upk2ZPw%dTFBPZ?aDGS^f!xG!b^_tn*sYXUTrH2F^dQVZo+v^j+KilchzSt zq3x;eTfDdNqUb$GY0LaRjSHI7{cYuATTsI%vZ#!#0zP=<4s9)5O{^E9tcmVr ztowoLfXtBcu_o^9drEc>e_xRR03*x3GLj<6sWrD^aSzJ~B2A3($H-SNh|iGmXDNG# zNrYvPA2_!?0#We&$FIbrMOK3$zawH_>oO7i04TaL!nIDGIYi>3`MO}kYx_0}0Ma>k z$<>D67?bYayQv4rxhA2JvvSFu%e0+5UAg#y^MVEH$Cbg6^xfMWfIbYxCDxno65gm@*<}T6Ta9MFGUgL$HHQIwJQ?VE&dNV(g`{^ z(6$Y2OrF|0H*--`yL?;+hf6(V!g?&=rBmV)E4TZI?bF~6(Dzz3;j6%bk7O|7glB^%zyI>95*${IIoF7IqcJri2(+HH zi}lcsNiTgoC}6+5nqu;N=X0b{yY0Xg7ay$u)h75nv^4XXnm{l-h`7x{A}~HcNBypp zsW?_)z2QBOs&ufLG&c$Q1T{48k-8^WhzKj!cZ{Db$4Yc)9DfrT3qUh9@22jJG1Eir zp(@tqrx|mg;ECIsa5~b}Vi1_aM*}G!y~>(?S8#>nOon6gmSH?`wv~_sY(FTk4)A$>)W|zZ6o!O(NHe zLV+qP=sh>#Hd$_kOBEH^xB8eXBDbJu`c^zuvb<>u*Pw99!qF;o?%ZcS?fNt$(uHa#0K4nWt8!u2Y}MpOq5V$k}9-& z2CJu}DTL_v`QmC82gS)W2?*Y+8eN9ZGrrlNDN1-!hTUxl&-aLJzKjiBpQNBimfD1v3BCfZq}`50)c6-*T#vJ1viCZes^Q-D2W)K zmyxSA7lC;IkG*BRDq~nlmdJD3jU-9AtPI%QiPf&v(=4oP7kfIh1HI7`YShTC4=Z-D zGf%0+AcqMoCR)Zxnq4de772ERJmQ+XUN)0}jPG@TxPI)Y9l&KI5v0>!4!4$T*HVxQ z&Do+{d4@W93&xCy9?u5%a=!Py+^B{RR!`tR>Cd67My@=yZc+8DGT=V+Kye3^z8t4H zl1*0Zr~jxoRkCVhwx-6=UCM|$!es=di(=_RFG!5i-(sr=G|dC(x-xv&h&BO%;W1 z@Ncl<|F;2OIaHd`YSj?O>?L4@IcPg81lusxmvRH$<)3{6{9N@U$Xh5aK z>qjJ3#Ahws+0X{y&+Pv`A>lJB{rYUvj~NQ4FCTj}B;FBM)qt%ZaFY}qL*8*C+k+hS zp@b38?mQ1VnK8uY`7oZd{1Wz_-S{Sl7hXI|2(GoQ)riaT%z94{m}GGnedC*j3^f9r2`vwirg zYuFHM;~x^NxqcT4O#t?<4E$OtBGfOE^5_Ps%7~wVcL~K|iles~Z)%eTKlKuC`E>Mv zw&@_%=ehIxV*NkhikJ0dtWq_W;ArNw(;4sEK`nymm$;71Jt!-+>q9CSg&^;OQ}qyk z042%>8sS#tV!XkNsiC~i)l{n0`|$imjR4){X5V5FI80jO>kE?9fucwX1Ig0gN-Vw4 zE#Y)TPd68c)Gc;;$thE-jjm*ZzZfbi-J90#1jxbxjCX@*Gq}SXdjIzWi^*zn2w7z^ zh;5?`B3LC_k4SF1#6=N&`+ISebG?k}e#N_o#!uKRyZgfNuI{NnRzvZ*ytZmmAzSCyj%7Iz!Avwp09JuG>w8@c;6yGsmz3J+vfHAT!G{)7c=z27WudL1y z9@gx`ylt(a9T=<220f0qGYGzcW&`?;sA&D!P6yijHN^zjUYzTmt57G12)A> zEGPi_{qW;3--jQx0Q6wzd4^u68PZ!p@ViYeVXCNrfb)fj;k&DvmO}^oz~nUpsV2aR z%OK7Vnx%{IvU~IHN}*0Nb5&3Hn3&%4zB+5uAmT&-RP>xH{@t72^I#@Ug9GIx`FGZ*ADPO5#()Cav zu}Z~3(t@k|t%&jJugkV9-V+cr)rFnYb@s!sgitfOl7ci?CKIg!DwoGmtJ`5;qQI7O zBR}sBOrXj?-d#BEf@}v7a7VL71;a^z4RJRM5`s7@CC0f3ys&qTmx`$Q>7<_)(kP^? zEk2StmJN$?Z=Dhp_Sb&Rk!DJr+~=W*?mrqDaU@HDsHY{1{gE+!!*BZvF6hF%s{3T0 zdBePxp>eTAxL#WI^%n$XX)j-6?zYQi*^Lzy$T8Q@Bk9?bQkshH7l8aIxJ*;D;VRwT ziZFXUhI8_ubL*u-!6zku6_&d4d)x)iD2?Si-nu`WR|&UnL%7)*gdR`wmzx-%9offd zcKlF{*gz{mGpe9)ByzXSCIV*32Ez6zk&p)gq+;IZ5%^?3h;l^jOTju-A$HGjR%G<1 zW@r-&p68wIsuW>U>un*UpI!r&-6+=PQ}vjhevLlJ6wUB@a_ap$U70N_VJlw*9M>-g zw{wF1VmyVq#u}^e{ogiSl(%^=yADE^jTFMXX+l>B;F$0xXs5OeSVO5tbOl3&wiSgd zTpTa(DIsCAJ=jotK~_(o$G7JfB;=V#Xg}XNpq~Y&dJ05Ii&go6x>jU{>3&MA?gUSn zXX6`4k)xS!f9rJuADr!&HP8pgl_CHfpXh&9pE3B7UN7vY%}$ecP!_6N^myndr|gtj zEr} zYzvnu@3PT+kfQl+w8XQ{6T{C3#gV2)b`uP4*@Jw|Fy@nknHoR0*xcFiza_Mn1F2hNO`vjVl{A=dT6kLE_Nb zRh-EHwy$njh~a3F{mN`cNS+JiNf}WdZq@W!fFt*v-^59ZhEoUE8tPOu7{An_{10A9 zjni!J{3?F9(tlmzMogK_NMKr+74aSp*a<&TlFokPhcZ&!jU;*|J;%#3M}pxc<0H2- zlGwAlyC!D|(UPC&{}9G9(X$^U2cN>bZ9}?KWSoPPYwrzCm(0_S8!o?djnlAPLt5Id z8Ie%D7AKwse2)BGZU|^A2)S-g@_9Vxyv16lJoJ1f+v+V@e~cO%5`##U_skSJeOiH;+3M#HMT4PH z^v({dFx)D%{O5Js;()%8g`yTQsb)5)C`_DO?bLreMprdaUKESY%00NP#_@~df`-i*}Qs-S0nIX$0eBU%{2f1(qej6Bn%@fZ_$x;v4m4R4d|6gz-gzrcZY1{nq09*lf#vQJEBEWnDH#NIc&oW*K1R#P@DPv-znir#d}jz4SSvA%d2;ex2yFA{vkt?kLjKi zCI4yxq*2xKRZ+YaOPQ@Z!l1>5j{XZ!>Kikv)#9q5mn#3IJ#DW?G-jKr&)!Tk-z%BL z{80R9Rhk0~-KWTg9Q=B0NLw^=VL<{$B3weyaZ4ULcJf!;$RrOJi2tuX4+?eG<(r+O zF59UOMW@>3r+fngA6ysbzsEM~TD>*WEd*E})mm)vvLyXqhs90A9+$A2x4&F70PZe@ zyT@@1SNYhRlNi(D&tn#aEhl>$gp7QiS4G#f+r49O8qQr>j+FJ4uPFe>n~pL_gJqUO z=P#rUl#?kbR3O9;{XrRsjefnMkGe*n48ap*z;6(GQkCf}1IQ}7UXSV`<4)*IVjEgp zlo_%1i#Dsg-@1`M%k&2 z7V-o&@lt%H!4;Y+MnMu&=^pkIlVe@^kT4$u%ZGw;lox&qg_j+|UI+>-XL6W?^N%W9 zCO?@dCba3b*vT;L_0l$2&!0J0jTU%3l&Vxp8+(TVq*5P^3xex*cQYvuK%bN%xLI3Z z&d{-l$&9JI$=tu-kPv>mbbGiZs?BNdJFv7yt=mAQ4ztpdu_df|fndSHZLys_*XGcUN(l95q2#WYZ z3;YSGqR$b6&yBQK<6FL2n=K{)_D}QzqT0OE$WuxqXTnUZzcnZ`?R4JxemB}mKSKSC z8R1syY*3d;@4WK?q^W<6y7&W=|Lc>sDY-|w@q16N=oU?C@kD~4-WLOK#=lxFi02As31= zpL@>`H|NoPwQQM$Q)3AFZpRbHgO${Fqbnm`Nvmx_D9CBW(%xG=BJ>G?#D~E7LO4^$&;fY4iH@{&GZ1l?%)oj_xXWgr z{hs6cl3y9N(+B$}4rzpdK^R*C0>&5I;!PaUy8!;78T-N$7DrLt%cq>(Cj=xv2``?8tpo&sJFrkIlpjcnAkuWSz$zl@Tb=cIN-cmb~n1H$ufLJl8)iH~R` zUq6dPQf{&D*b#7Ip(Hz}l94KHG@7*y`}TIrpjw8N zRz2>=VnlQL(h}TY07met;rfr)z53utkDS*A)N0U+F5}LXm;i7a`-7<7(@1D<5p)tn zBs-Mc5%;vPMeR!QCu0gm27R3Y7@54s8HL(yO{xnTFalKmt_`euM< z(Xnj0s_y8)qUp~X^N^}u@G|kf{B(xZu0RiKrSjN`az^%TqUqV!!v|om!RkWrYO$p4 z^Sq1e$*os|U0qFd^SRhd`Ev4c&z|pCSV?BSuckPr&;b)<&n24+a?$gY5w2}-2>|#Zykk81{c>mHA+;b9UL^@n&mp+1g@JFmHA$;OT^2@Hzc_?@jhTF;hC}$3I1Opp zzY=lDsddMZa;6qdT5(V;q+Q%OQ(f5-azIqWufYV!UZNk%aK06e)K z8#(UP0_DSdTXbX8nXXQEZh)5+??A*5EPbHXhDUcK%ZCF_;@p~4T-wjZ5vu!r`H>t_ zWT%isn8tR4M6TNiE4907YhTbv7e?2jy zojlE?O&~}HFE`;j0}ht>_XZ@@2f8C#Jm33aFJ0-C7(E>f1@pE*5%xyqB(HFTNS{GIb zuB%%c(2%+N7AW+Uq~64Ie)d6R1jP-oq#>XWu0=F*MsiX>Ki)2B>a-0Z&4|q1O4F%G zHZLUzd|>|*k-CG@Ht9P3`@sP9Zopfv;?- ze4p!PW?9^zZ_|)F(-^Ed;YBj^71pDPyiv_DF?6;>zxPlKCy$!J*sHV+PO1^_d1||5 z-q?p~#H4n6RYGW*;=&PUi5y<~M9>dK`yJY|?6k4=3w$B4xeyoJ&<@RsRask7xt3sq zTM+g>s+haYt_#4!kYFVE%d0h8k5dvpx}d?d`(Cz4@Qp6%NnJs_l-uan3JD|9ycr3) zn@}-)^cgeNzeANEv@xN|%t{6tb2z@K&W~CzCC7$Wh(ku-z>d2DK;P_;Tn#H>S2H{_ zp(J=F{k&euIZyLUYa>cIK5njOxDw=Fbu31=Ig3ao!mp1;G@x;{sxNiW8+T_j(`+61 zcaZuOts#>hvFLZ0QEx0YSf(%=ihSqiwT7x_BO^nMRW0&LcYX{WxMgS&ac)(M#^7LnlgCze#}&-*AG_McfZ7i8qpQx zq`=acXys73+znY>^?PFb)}0vnc{gDJmG*hJ;5u_N?1sSYPZ;I&#{gEvTuuvfqt53U zr$g|9URIwd!hcW1f3c84#iy_H{gh={H7EDnEKFp7=2stTq}0lK6dLUeT~&)JQt(AR z{wd!Z2Fo}2qATZ=@{3n_hs*VrXGJAU!2E3`Yp7nK)Q{b4wWYz5W9;%lj-9$GqQ8)i3eE8lfmfAPAB? zYs*=0V4}ycQ*XV)?f_G1j6N;%Uog{IC5!>z5(qB)N3H)<`7IEh6z!ya| zm22*w)bu+&)ku~i4HJe{cc;%vARd&M|7ty=;aT<%c3Tlq`G19!CXlI2$F_)`Op}ZA z&0;5-<;kVvb-CYaM7ssYhYKyeXquIA@|04KW0MO{1+hd-R1EXrUyKnfWuUJGY(?7GR? zP**`Kc0hN~z_(a=7c}{ua1cwBX=cI?e_fgv+4xT|$2R6BMVn8x+xYH`3&Iy9rE0nT zcz!!Gcde^TDT%lBG4lzCJ?VJ6ICAy}@KKttbdhG0w3Ls3Y-McYgpNlXe6x9$5#C*T zu0z{%lR#GjsE);WYVJWp_ebKjM#gGypu$QDJ{ziyMY6b5L+l5{SDxVYE|TchPC@>O z@#igvpp9YBFLG$qL1~sWIn%JUEFxG&mZ_!5NGfe4!J5OQNuMaS?FC+Ni2yw*2E5k- zFLV+gNtH!|;ywVZFw19QxJU7);)E;x>x2R)o@nJv;hYBF zldmp#CiQAbVodVdtjO^_`2&0~u0ukC{W`rfYTFFQZ%4dTpYstnF6maqdrwyjYlk1m zYjBx&pz{&_HA_>N>4_S<_FxnWsO_pu>iaE(|D*Yoo8z=C);!q4={q z=WswIX^&&b-b%C7FO|#uOy+$q~JBom-5ak6F@|PJf+D8v)ig ztq$9tITFEN6EYT}FY8#H`(bx%fJf_*-YFbo4L?-fRMRLa)F32IfI%6Ej)y0OVBN?IiS(ai{fWu#Il6D2!VN#ah+A?BB~@XZ!0f%^Tu8pdfHiEpd4J zK&+!Lq6ycU^7s4hBFFQSk0}OgCiwbri+jRacqx7{;fT+cV}MGc`)QkOl`dXsCW^kC$W}n=0i2v$`Q}=O8)>_m)abf99 z*m8hMpWv|<@ingYR>w;}E{~pZSonqFd;Nwhu=bl$44oiRX$TKP`72$yRlH>a_~r5LMp9dt87Z4-fTK&jfS4}t z9P+Hn_{9hltGpIvj{V+epM103%yVQZf;hKIcax@UR`(+SAWh>3oV6GX;qZ5DOIn{y z^MZ=WvIku0l}mB_=0JSFMgK;ntn&ss^LNezx8~93KpH>|_5OOt_~%;z#{30tjXe+k z3P?~aqd)43fzvDs2|gb-*oeKF_@(}*mFze*g~y3M9zo}mzG%3SF#wXP@l>2$w^)~& zNpa?jgHO0(_QQx7l~0}PLPtfoz znqrw~=%r77Of)2(`03foM*5D>zh)|1CvQCOBT@8VJy5;!F&*3dyBPVPB&K8a1!=ar zc>>;-8(bCLsjnfOUy_}p$SoGRxo`LBZ$#yB>(&Wb(bM5<7sHs3v*qk%`cia<-8lME zEC8`xd@mBbn+WR)!nb|{lxOsvU}DwRR!qpZ^0K;`r%Q-fx@NW!Sb5P4C&tZ*;u!4B zBczO?$7~ulZh^)qsMb}-EqifHCvTA6s!)Cbx9btTf?ar=ldbIk`4=V)n9y!N^W1r1 zgKhJ#7Q?qZH8>(x5B(}?8TeZK8KX@7mH+?0mZNIID zqE6`A4EU;P*QUf>23si@%i*e@N*#WR7BrB5;M%W8&XdvbL%>JAdC_c4p9P%m7^=Fhw7KH$oe7;;ts@zYec4nsG}X2Ut&!`r*Jxgd9bPpZO@m3m)2mv~td{){_9BnU zm|hg3>l?izgszj!2K_25lhGd*#i$nvy@rX86qQe$+dkm*cgh!N{{zbVj}Yb`Af0Uhz089h% zj%i?_pOLO`r04LOWSft=qROK$`M-vpYxIkfX7O2Bt=kw;#VF**5j?{H;ZIPCT&Qtw zRRPBDgJT2bL$R(}qcMO-9yL1jfSY}nMc@Q=lW!nQN)PhiZQdt>vQDS;EQ^7d{n8iz z)HFB2TZ@#EAI|A^1LWcW{&|n+FmlMG{eIo?Ad5CmxmdaS$lgg0zzK6X+3S%7iZW1o z^h)l%^=@t4W`XFU(}^YaE93;R&0~is!k$>SO>>H!Hu6@EF8~e~;wO(HT9y!;hD81N~w)R#=KR zHD+rK8m5Onb+WP|F{~f@AWvy>F%^wD7~gpFbGe(6W7QMH9;2sk({&c0XKFyUij|0~ z5x$X70z8d=MyJTMt8ucq9;Fl?H_HQD0g7-1i_ulq98!VE)146w=(`O5z5;sr@^E~N zt%cwkP`juxV9X;L;TkF8nXUrc5M))B1A~x(IH!&8MX3Y*?Q`nU+Hqn;{S$ze(8*tD zsKe&~A>;?1>EsvF!+JdPCQIT9v7WF)g3S^epnsRV_Ho~9Q7=EbUVLd4jP>QMIlF_g z>;qMPnaL3avk89Y=H{2}DvW*i$_T^w0Y(DYa2O3i!gfrV#H7W_71EeTmLiVi_KES2 z+~ps+%YXWI%s+CM|2nygoX11lwzdVut=B`gBzGUoqO+$Hb!Nl9mxTQ{BT%3xeRCmH zB0k#ivWFe#4}0s3ly&25&~N60O^1(jbBLyNx9(wwVUMasdO8T{atd631$`y&$n^j`lZ5Q{d$ zQh@!|YY{>1s_Dg7DM#O`cBRvNF3|QZjZvb6p-l>vcxh#BQZHPKl~=E$2HKCIYCGoX z^YbQRmu@{m3)TaR9&-(3J``+-QYy$D#D(#tEx5J*DkyQ1j5e;6uW9jp02;*;HtyD> zrDp6cOI^CvzQ;oqzoGsvD_K2q`j$9B2T~M9TrInatB>e@MFzT92ZBJpq3L`fJuUN| zx;moItvA?Z&*>l?I1Yap@~nqyyupdZ-SqVIkwKZX00ibIkmG%_yE(wx*vdEb0lF<)Bsm9CxmXy~1XNvEx;b?g7yD0C| z^2Vs)PAno~fV=)ya$EmD#=uXaS-X$0evZ8mTNiFO18KfAcwgU%AJLJG)l(eh_%?X9 z9rLHo8O3{qpd7WjLVw=lvJJULZP;O6qCD{89$im5wkLV*rRgg$@oi(_RN9 zlmj+I-2Aev#L5-UV1zJXmik(e9H_nf9FLiXT*zacs1mx9W5B#BqcIJmLq1WOE zTbwLD{bj?3yx2KHq~sLcYA=-ICdj*>3N$rE;ofMC=AsZJKBqBGy#1aQ1CKXo} zH~IW4HCLjz%TV|o#KHDGmus8j6wyZr8-*wc{YgS;DmFiT1+**e8fLuB8NUD4Dq!oCG0Q3 zt*xUcEQIyq+xd%}G1s(gFJ|Sj(^( z7oZoaA=o=S5G<9-Jj(bD*5!Wyg9;XxByk~>KcNdRuff0RM2G*jk7jj|>?u>4zn@@% zX3PSz;u3(WTqJZHeJZ#VGzQa&`}3;i?K>#easu6FP5jCEDY{@_^JPlIEi4QMITyD1 z;P9UQQ-eSI9=y1pmNXyK1qHzSO7(ccU!co!bDEo<;#$ZMu6VxDgG+ZlFMyRA!SJb~OX5C+w_Y+1MjIA4@snR{oz_WPT*RqlwYPz*zUMKtcad%|{>J z@S;jNQ;?3&%6zTQYZq?`n=|n<;OQ;9u7jiI!Gj^GO`@Fts^6Q1u-9@8CseJJM_s^2 z*VggAGLS4^&Mb6a*-z1#B-$D>4xG4a&k+t5Ef&%!)*Ek9o}QdCK8&H5xFC&p(rD$P z5tpWzd=F67&M^JHj@^e*N!I2@I7}rAa@06)k=3zu~`gv{ylERj4P((B}iFUfXd?cRdK%jD5-I2RkR&^NvFKw#iTRf#dG@3#_9h74f+3G zO!)^D^dD5vf49K=pHV@XT=>a{`88_uE@ZZZfrmEPG)40cICeWPT;5W^MAYPx2qt>7 zfzqXAT9H8F)yl(U#I{blF;ca^HXOOUXCdb6%lj8v>?csjk>+)Oi!ouEOm~W^+*~AV z97F?&K-(@)fPA?yfvU%Rd2l=i*^Z&(OchLsMNNh%lJSd_SN&!_=l5GArxhTre{ zpuBcgvGO)=T;AW1z=Px1X>|?dt&hs6*~5RrIF#b2G0MEZs#5k0ySuZ(yK`Knkz_H39`QA(1--9{$ zG~BY!#TwdCPc=B#aS`CR`Xu<67;QU!*B zOb3vOshLaH{YdkOe=Uy90X-g@gn`G zFf{)*dlpdnziE0r6gg{e0f*yPSC?zC+krU0^#MU|;&sIQE~ynuzwxm9fnr+GbCjij zEV}!xkdBGdHndcq0EE7JdKad6-$N3?>%nEl*HUf0*&D(VxC5#u{caO$T>rHAnGq2p zW8pzk`ZHSp1G7E^cOUamCGM)JP6ce7I|Iv}qd_T3U~JXgCp5?Pe_=sg zZ$bUv3Ce>LhsYCoA3nfY2)UXu78%p+E+mmh_O#W!4^Pto=sHN`eMP;ig5+K;vKISf z^}~?sf9B++WOOCiEyZA$p6~7Th%#xA_7&E9M&shTA7OtjD4XL%yRit10v-k1$^8?f zlY8(S3*^iXv3vDlFO(TbgZI+Iwykp^Z<&#~Nl=#jVwa&c* z2yYM7v@wT^!(qcC6r@2)t5tBE7r+3X${(BS-&VimoGK-%Y{v-<;aV^V#CAOc$!qyA zv&G1lwQ28*wpHnD&NESm&J~3;U>7>Acsm8EN)%BB6W`HrA-xHINH@Ekmx)ZNC5Fu( zIzQ(?#%+2G&^ckf-Tm_5>q?6SFM8~)`~hr`@ZK2R@Ff#FD@TKFw+=kt_E`5N(c5@l z^p>NrX?mB&15RAJa@}W?NqhIr)C1&9 zlf=kTx#ZSq%I-I42RQ&-15R1PlVPsE_RbdNLYMLYxee6rCQf=q_E5eP-|qpZ>JXZ{ zF^KqvQBPpC|*)gJiLq;&_7O)U0ElA3-a+Yhbe4!$c=UJFVu`sL1za zvk#Ac#EeaQ<{g;t2{PMWbNPAJ-t*kOMsewUfo0P#d#j3XZYu-4M06go(}@k-B?#`~ zuw0Ej06);*NTu}ql|SPE)`bxZRpFI}hkkeMrqng$ zlHnIt2Tim7ek-i_&2UYFrTy4BI{EUF1us?+4;g7sR@;QiK~ffI>qi$Y4R0`KKQd#T{vCRHLcKYD?P75jE zI6Y732I&f;2&{_Rxfn{tu06`+0(5&mR?YW&)^(^6{8p@3<8ng2%!-Pdgl(YfiDrP) z+&vv{GO8mFE|_E6JMCZAL1MX;z2WgQ%XZMyi;~A|Zl%*XW0d3s#mniMUvA_oQ!4*F z@L|vRbe=OjCK}I$5^tYoF5yt3T7$t?B^dYb)?%~wVinXSs|&EsXGu7j;hvPZ$L`X% zaNQfiOYE5OSfNcA#{Dq0X4Yn+E&hG~tx)vM6MhrzXcHZ%CwC#(R_&gN{f2NUd zFTMFR@IPS6OFff9gpzGbu+Z3Aw{=A|C*NI!FDCyqlKd}=C&GpqN+jafWjav|!}F5m zJPSt78-(_7=%WUvN0mO6s=#rpH01R<9t2F-I*|_(I7I~!MYG8OQB+VxK1c&4XioM@ zw?y3dKs2m-nnna5={&kn5(P(tYafN002$nRgQetO_y;TItpj}lfX_78m{1wX_d76Z z=0os@K&Iv7^)A{7A_rhbWY`5&bv@@YfZ|k2f6M5~9g>+g+e96Lx@OX~Da3IGx zPJP!HoJ=WQem;p+0;_UH#~dt zo~Yv_Ez7tT9Ivs(N>2NSUXHf{HlcyczFjM*=gDG<8*y%P4~C(BrgAgaIe=iP;3e-G zX0V>wHr#OCS2=$?r+b2MSNv%KAt523Noou4v?DUo=7-tJ^`*8MBX1mzE} zBe7ghZzQ>7QJ=~W!!cBWRy7mm9Uxl}G$}gGV&9IlBJ>2|FJXfsv!Z%YxWo;JMe1L- zhWGQ=k*C78knc+Q7hFMX$`kXc`DeMO3*qDy(JORO-e#YHsx<6(_EMZ^haf#uw(@_H z>hfuRL}zv+kJlHJE$GlRw18lKFVk*V2*eZxFpsS0`pCnt0GQu_==R!u4hUo+HlYF{ zL6_F{Sy8pkg_$4eLcrdv0lU{UG0*ISp(wL|yoFNPBi5PUN`XF2Z62AmUoQv=Z}9IdjiV4M2XGr=eaZXMO!es1EOMrr+zwC}? z)VI?_@`u^0xbeaG1vfC}CXN_JVhazBhlImoutYZ5Zu|m1k4}L@PM5eHDpSxW2_N{$ z5#LooN*~0~9!nC43fV72d?Y^WCXXE@9|P`SiZ0Rgm+^$vmY<1uVaF@~!4FDM)N=Ne z@S}dxyaf0n$m4q2a_1Iy`e+?ZCmHwCr+?Shtju$<0PMOBIRe?_Bqlm+WjMkci8$Vl*X$C1ruMx9^D`;1A*)D9o@iJSQx%x) zcC(`2;}Uyh#p%(bZjwh%o);*I8UNG>$yv;cG9DU|H~S_>4Ij73E1s8C8 z{Er{!o~Md*C4r==HU&3(R%hKQar*q}v{M9-p~TB**XlL}BBVGYTi?$*JG^yon6H)E znj`A0QNmG)2(pi=`f`8$!i*AaELZD!aeqDG@Z23{LJZJ z^77r`-5knL#}l=&nX&azeeDV~bBx{46=5lQMRZqWJL(@AL;OYs-mIa|b>^+Vd5q$` zKM(UhcwQM*^B`m1Q2Qr$Hc-fvj_#!ys1`(UBf|6M`M3KdRQozZnmpY2;moJ#4J4S$ z^i~Uiq0bSEArACFJV|%rWkN~ooOU?J;p49z-7n*!fD50AS_+CA|R**ZG*Jax>ltmRwooshK~Y#2^C|A1im6Ur;LNGhoe9`Fe56eE?f zJtEKN@(Qp5FiKw8--l2tRwE&A=d^3XwL9W_Bbm0v+ zN7rE1hZI1?Vw=0q!W>pv08g^5rk3wBk}BX%$=fe@wIQd5o^q3 z?q>QE0T6Z^WM5t%_}LGV?%YhaTr`78o&)?yUqC|U4DtE`=y|E30WfYsaPr+P2xP#y z7l0VD=x?{TfMeLXz&psPiJ=X(O-)?^vfNT`%B2dok-BC$tTb_}NniV>Wv+cbTr{}xGzt*Q~91R4b- zkPh;;6`@fPkf}&_8Z?sdNj%DVpX8)I))Q&v|Bv1jeuaVKw+d`B16dh(z($tkrTs2wKW6w#xZif{&a zWuPm8Cq)!sl?#1;@8UNqZ{fSn^$72LAWZ)e5IjO^1&I#{qfFovsFxYz|E2|lO%0NW zBW?1^6y&6&>#W>}JJh)5xznq~0iGQ7IP&FD$JVnZg4HAnurAfp+fXHj zO-;mTU1e)U`3~-Yr%2!!jtkrGhYY98JFhhQtce<(mI3ra_Tn(#{_6($-S^qX%DLNV zo9`daft9@YfI?C2SJP5!uf4w9gEU%&S3Gf4sA|(}f~yE!|A@m`PEVjqe|}4BnKcRk zNdMa&OE*k3@Ixmzzf4Cyoa+Zh5XPrJlFzC)Py{_ln;QL(A?tFSKNhz7O{Z`|gq&YP zMMrUEw(xVfJ&T{gRUWEw2`x6~9We77UX>|WOXv)Y(1 zA9jIbfrpB(=~EVzKd5+WWYvaaD(LAe7>jf%x-S%!SIfUoC@K?TRDSQIQWWzz>C$?F zi{Y&mCgkxVB2!eaTqcFBhwXgHi86kxHgQ?m32NR!Jiq*2p>#GG)p?-5!j216**gb- z41q0+>XJ83Rpqk-P&&-z8c+V|I-%s$P!!S1&yWi}XC6j735C=&K>ooCDY*At{;@~p zdYAoZVhjtn4Aa-!c|JHBRLyscqbyf+n`)abc8EaIq{xP|5UUqf>Hk(f1d6e+zw0Lp z8H17S*?`lmqLl(OiPX?#2i@#vPM@ClDE7v0wgD!xFgXF=+-H~S%Vm>G!aRw1dGUiZ z2*Y+n@)<+Yhi*_W9*h7*LI`JZM3Es^(hStKdPwK*BKk(`9doeloMAx=SV5;uPe7f+ zq?y;5=^W{|9ASiRMcODEW7BWeo;_Eq3raDbzJx# z3ozhrC5sni+U)DTE02|GL|8l95-%#f_oIE`{MH*hvq+IG-&{%Y z4Ls+y%o}QF(Q!|UGYlt{aTfT}sv_TB!2yXjFEH1DU)-_XDy^_Yr=90m=V6TIGO>tB z1Z=?>&k(`0LF%S8vbxClw08&A%5w80k||r?TZ1s-3#82M-1)5iv>rQ?Q&KXu{|mwR z>HP@;`5agtm}7tPl?L}nRO#_$vM2>4s0}L|Y|Ow_SCe7_S~YaDR{EOJr1er%V8y+( z=vp9`g^{cuTW&H<%^5pVjF~R$nRA34@5W%1s;(`1BoN!tyJ9uS}5q^S9m<)2k6VTpnk zgx~o^0wAINB9cm%?fn5i1>-S(mIZj!y*tY~_47lbomp@rzLN@Mf{pl4A_96~y1Q^g zUOW7^+RpMV3Mk6MG&ppPfJhFZbaxC&NY~JvG9V1n-7ti73?<#t(%qfX-6bHcAcM=Z zyI*#{?T7sf?w5Pd^PKmd^Zv+9Q{S#MdpB(YFl2UlmtU&kp?_414VTKgXns_v)K1@> zGi=kQ0(5O2pHIRjipV)+ov_5}OYNZQ2$cP-x8k@Ata=^)-^QW4+|b90S{P$#-}h|D~3xM|p)>#g&GN zCVVY2Y>1z3UB)qnM|Smmqk8C?JE=BQ+^GPr`VHBAf53ss#V+f6*U6AO-lLfnVim%& zm?tkQ^4mKEaZ|>iE%Km>zAtDS4EF}7={pO7X!@3{1QC7 z3b+1(_$ae1i^VY81KeOe>mWYhDA(_<$gqu9W2r_u_6pb#!pqFjm?n4J;VgY6_Bl` zH>ejrza?}_cNY^&cc*;S#rsSa;JU&#s}q|6wwqT||~FcvH>$k4A@T1N$);?upmW-q{n_6i;V zbRW3cj^G96`od)*h1**vZ#I?B2~9Uf>gUjSM&Ye^c*1DT2(SQB;uofSQ9P0Mgn5=b zLuTlE1t4`l-x6`v=5Gg2t_HuEU8LncUAOxGrf>i^Ed0ur;#UebGTvHRKiSIa7sBdL z4mB0Vv*pZg3TQ`0_9t(7t?2G zds{+sRu>N~3c(%yr=CvZQ$C-r)yn%n@|C`9$Lv&Y`YXV6GxffB5G5I=p^bVu{_ahB zlMGePDyE@%L~j!-oG%;j3aLuP)5FF*H0;PLFW^PrZh#vDIU@MC0S#Bc$n4mzF2d>n z$VNQ~c}f-x4Q%ou^Q9v3i~XZnaOh<3KD8#QF41ep+eeN$bSv?rdDO%wQNK(^iM=;j z`q}Z<>-Ii|DI6t5Yh?e^fX`<(LX`GhcUA+Po{VV~ir42)r=vh+hdo7zSX?_*6vhDt znsowh-;W?tu@)Pq)7JS{2j^AQ|8S#GT2Eh8i{s-c;(1jndc2tQOb{Y&Lb_`TO}-zw z;g=2-0hO2Vc&lI8V5O#g_9{dc>JH2#v5Nf*@4EhDsJY6a(qE{|Ezw+6y3Nvb>ecMu z!qA1JWu1DCN5H+%4;N*-JjYO z?f6b$*nNcVZ_#<^>*YCE!Y8;Zc@CnmGVh4(Y< zvx@F0FI4s?rnLvQ%q&>yWBFrpa9Sp7(yt`~K$6W^*yT~nn8lAV+N3&7XaoX>R!gl+ zij6@%xoG;dLy!R)0Apl$GY?jic^RY+FDbp^tsO$wUU6HVK8Sr;Z)%Nz(M5v%) zblmFrG@+Xrb+!KT&`6zG5A62KmxeNktVyF?YtCZI8`d2I+YFG*JN6UMZW5~ z?vFc#1aoE~JBEH(TQG5)nu(7CA%QWzN40rK33!3(xLWssUu0P~{hgT)GvD9pMI}`@XXXC=79khVj9Z zvQcAr%s4U+Y>E$BRltPHe;QiCEmB^T4U4`XSez`8pfZM zb8J;D# z$>5;PA(tXZv8a5RJsY4Gb>~z6mRY*V|IpPF`E7&POSWAgq2QRd=~^Nj)EBCPwMWg~ zCY_OfvHqzFo_u7pmJCwN$OAO~6YsxM99tYSyt$&%Aj-qQjvo8F<|R){AVL>z7Jr2H zUVC#?+0)*00oSC(!jtyf@;hPN@-z2wjRX?Z#6@RiK5SXRWxM2EHj9lsZT=!w{F+Z+ zNAavTw^Zp{^+iDSf*Y!T=ix&xh0-NnTnts&D_NB-voqg$6_qfVp8s8Hf5Nq|k61bG zJdr^UMzQwYr6xs2F}9u#Gxf8TeLc}1O{Ciw{3FNEwZe+>eqvV|iLEg#Jdgzo6=|}- zh+nHYLYfWk+3|tZ8wgX65`I^96EWB#mpKQr(>sc1Wg}zJTkEC_{2+XPFlMDOW!FoE zr=|PDQuRv%$9Vm+4=M-gq9w|XT|~aiBRe{Sl>Bzg%g)?vCGK!rb@bo7np*v~3) z(d_u>VA(J|?l|Iv8!_BRy{-SgC>Km^%utSvw!l&yMI&omL9}I2UiBgu&O}`Q6tGmB zsa9XDCcE*nyI5_z??Vylu&aiJ@bM?g#NWR)v(JN`MJ@d7qQ|ps97g47evuVd?+0tz z94$F}uHp1s#Erk`TW92j;U(=#Goz$nz!B()b(qHXfqzGj7jFfIziYh z7K7#W1?7QXfMZ-E*JfpB7B`{N1PGg-hoO3&_Ic`^PkEVFgZplBh=(I*$M_GWQmQ-d z`)%naQa8bIEs5X-N-bcyi4u|wuiaDwUH99;-XXYg8QJDZbAWI?WAB>=H6bkeEa+F1z(g{`i zT~;cc^o#JOXVty*tU>m$B?vw9&n|%SCkZ*3iuDv%B1`Gx7K}hdtnJ5Rbx^-`d{sd* z&!d7Ao7$UEedO3qysdV9iN5brjSfkbtAK&WXM>k}zTOI1HxkJ*lFPAGl}aU%*-L_N zQ2zkc6!8%rOE|4j^gG?O1MzI;hf0&8BwlOjc{B`6w*OU_{Wj-LXLblxw}RcBj=$%5 zSkVpvbsF7LDJ&Kzn;~foEa9Dy@Tj2dudXVI#~u@^#26j?JoGwtjRBH6uJcZfMhjaQ zQw7o|ZKPzvNrHQD+2E4zT&|UQmt_3%5ty{nY-yd_!G%~nO!67=3a4h&D%>}AQ^l1} zg;c$h+3QO$wXm@k4T&00s5^bAxHxgu2K@fr9ebMZP-FUGZBi6~+tojAuWdY{KsJ)t6J++AFQHM+ZWX!bjZl2# zJekmi2)DguV6`u!!@#Yp&%WHh@4Ur3dqQ9D0w>Ha({{4i+GaUOH_)L)LwJ3wrJf#$ ziO0KkCe*K-ngGrXnhg0-Q=oETOda{$=WwYwO?(Dd(F&|mucUc7r^OFMr3`{{M$_`C z3whya-({zwMYq2Pr{!@i;dLIHC@(mhZ>>b)m^q(~em>_uAJZH&rP37;S|5MvNDgzs z;=gA@w<2$gy6zyOmPag#D(1r3ab!06wS8iD^GeB`F9k@Qez}f8)*~J57BJR-xK(*_ z-n4msCCZ=Mbx^Jx{JhCZB|x1%g4%5xU`DECz9o=-I0I2NSNfYM)vLS##@y8 zD>mMhHF{of0)+kQb=bE@<8P#Y>P``R&aoQa+IxOr8-|^vhrG+^4y|NHy?c`Fx%bEaQa!O&zTB0IsZD2%e9-^+RjMb9`K{G3Sh~{0lC+Ui zJ4O*P-;y!*x^YM4v@zdGW#yEVUI##B? zJN^T68S(Y_pklBGwZwksrxgVVp5!_rG%Wt%bXvnEmH|86YOHx-yegmaEuy5b>9b3W65-1f7Nig4P?qzZygQOYrm;_ zYELmxk+C@9w-K-}fP0(|yx6Y%x?NXAQUITp@Mvjy{u2!wYn9*utLz4#Z-Gkgi{y zB&+0+Yuv&6sOF2mn10mhiMEBLTu(BJ!vj0eUnm%o)np=>AD)}Y_<@%|97F0U@9>wt zeRpPB-gYh#Mkd51Wg~^m=bch z?`{DbsJ5ePNc)eLm!r1YpE5n|57k~7bk^Z=GKvp&PNJ;y7p!rJ)p z!^~wjUJq+cuV^w0qQoj6;blNQe7ilj1I|??DN;G~w35{?Qn~@KH(~KLRE_-{GL3aMjAZ0zru>ig74& zezEj(N0$yIMkodzy;wV#wU3Cl_Cx8{(ckrWL0PuXx%N$viXxDQ3@u#Fs)v78!yqgD zOSnD5ww_9>$R(zqBtCruanKdflVRpljm4l%RAzr+1^{gnEW5}?Jx${`VY>zYr&ri~ z`LP`|8;Fia4^^GQ0IBW0<~Qr5AuqQ-B6AqI@1`(U49WO(b5Zawd`4e)d@PaaEX2(f zf7`k0e4+?v1jJ*>1#OZ$lEuH%=3bPkk?QFh%=>3?uO0%ns+xw@4XzAC{o@x0^+qpGD*236M*8k`x>p+I38td1dw;_eHn*C1{-kc+lbGko zUs8!jnVP|3vI zUhUH$w!SEWm#iW+EM2p6URAs8i!bIqX@;Qwie+A9tjbG2flX+-HwR$uXp!E5&zr9a z7RSQz&FuUEu_*dy2~Aw{?8wF9&G^h_NQ0ykD94<=swk9oRM$ z_}(g`<@9MQ(-9XFy)O(p&m3JVn{IwBB`f(OS}oFc3us_qKMl8aYA1;jPY!-fKl{D` zF{ZmydndX+H{vjb)%`yy6t1Ka=)km1_(hpcqDKX5BDXme7`h?(j1lDmz-?KW;|H)f^I3Bi1sc+qH# Mi7VQl|2*hF0D)CB@Bjb+ literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/admin/alertsettings/alerts_overview_thumb_0_0.webp b/static/images/auditor/10.8/admin/alertsettings/alerts_overview_thumb_0_0.webp new file mode 100644 index 0000000000000000000000000000000000000000..46192e75cedbfa43dcf104794306fad1022bbdc8 GIT binary patch literal 44446 zcmZ^}W0YjyvhJN_8(n6XZQC}wY};M7(Pi82vejkVwr%Fy|9#Fqd!KRNn_n`=SZn2o zh#B+uJTb>omJ%0FsRjTv#Do>q6*-9_|Nj0Z0-6m%Z2>L>#&64>CiR_^B%kDQWyT*N z!rbn|JAI%w3?Xgn{4@2*ej^TE+kOjJ4y1WceWiK8UH*{h47$U%kdOiLj1%VcoPMtR z2m=$(2tSs~kX{t7w=X|i-r(;+-bLOmuWrA9K)(-xcR~n(PT=$t;H&Rzf3f598R+*! z2->sSvjO}7hTLF(0N?-KXQlAz*O~j_D=*ORcl3GsLJR}}k^+IBJq}18xj-QB-QREj z?^o>x*b-rJ&tlJapUV%8d;L@3wtxX}$W!E{Wz^5^tLaPNGw!)|eLLj(f*0p?`5JiT zHwkoo`t~xtBG3nP1X2NMKDMv@Hl~*aW`RjSkT2k5&zPS)5ao0H+5D66Ds1K3;r1A? z7ia(^1RB3T4^1}$v%el+p7(5P{0e{~ufsQRX9A;sBYuWo??8bMhSuY3KjW|Y&*v|N zhgu-;qdW8?>aFyR@XoJmd-to?FBT{cRQgPP*8VsK0$+hzz!+f5p3h^?J>j+Aq#r$S z6zF^b^-A%Odq=qIH|zHYNcJ~N;9lIdz-`X}Fy*uT$>+7_Md8)&Kw#`^$tMU%^_BPq zd_R7@{^~jP`&*#*F5vn5>K)qCGcfo4I+$Ul_LDGI;6rpUbeW;fjxO1jkZ@BDmfu$A zT(q?FU1G8_+al>X*W$Iwxf(U+{*sVA1jYz2MIt*ozHXkcWbTstfJ}V+oP~&WVI7?9 z`Rr(G#te9<^=s;im>+JDkd)k*`VbbIC#HD>VKY~O5c6}^3;>~G}#Z-%I=2{e>gnQ*na#&bN#l9 z@%-r!`F^D*<^$9r=>}%mPACu+ASMXJ?O#Tnrdvd}aw!)y{Yjvf@veowV5|;E*58A< zKH&N9;1&KeW~&1t;pFMaKt?YuyfP8uea97aS}-)@ZwFwiNNDD(Vi-FrlM@HIkge|j zxd{KOUek@ix5Uk!oQ(Wvy|PvkTGzL4X2dupU?AHyDEfZO(6v41!5Z7EFUR|7jgA{Q z@k<>azODZXJvbsZ35!{XE(w|MpshRwaK56^_O(1vxGHBfJzL8G(pBKziIy#>)&phx zTofL&R|$zg78h*cfp4j=*i_ABs_&w`ul!1sv)lOYf;UXFzygbe`MVii%|isi$9o@? zK{+-3DTEv=OGfGQLmYJQY$eaePKoa$%$@NdVsY@*Lp(AF#qL;ih1v!O4%fvgA{6K&Xz{X!N*<1-GBTp2U7!Yi zNaxr5^R740L;uqt;ojFY8*hKRLN+ksZ{cUi;gP?(|LNYQXo{4a5TtK4>Gw=JQSG>Q zBn(cMznRt8kQtC1b8|`?rM$=f55ZMEd^tc4Y06N;gyN zOB_s4kafjxVMgmPDJ4LaBK-ndJWw3q8^X1?6_ZHr=h^J333Xo1kGa`+eCW;ITOI#+ z4Tooj5sUitH_z!MppmBQv_&1-@b>PejGIhnJK0FRDaWWL9%$-wV?au%jp zg2;zEcEOy~Hv~Y_2-|o=A2#C4$!`Jy5~O-v_#+WPHd!3QKu2zBOqO4FUDdtxq(%(e zf7`KG;qf`w6Nz~HGSJ!- zRJn|&jzP6%Wux|1E+oaupK&5;8PKT8L`Q6 z>1qVs6WLS)L{`uNn|7k1r9h!e^|y^JUU9kFT=c=;$8AYZu_p(lRRn0`Oehz*-{Bvx z#Y4MSVo~#O@s7{!#@^A{{aBQ_EU>h&&SFiK|AkyS{!#7AM+(C?Qd;8=k9nnkHYk6& z_)jC&I1i}zboxGL<_zqdxOwKw3v{y4)sQL5azWsar8&XIlSdXF?K0fZt4l}qDm)%y z^$;XQjEt5nmNo@V%29uvYP(SU3nc1k7@CKOucDpoMz)~LGTMwfgMsD_+#g;B{NdV0 zYQpkPtsqr5)mNl8*iUGr_TN#J)7OkEp+=$X11w_d1hu8>@M7UN%WL0eSrh&NJWrf7 zWgUq+joLpb#`w5pQTQ+L_x+`8D50db@k_OodW-0 zT3S+G$IKDk%LHE$?UcUTbW=)ftUmTOOyTshjQObyM7>R`h<~3 z{BO=4YmxCCul*Iai@%tt72x1GMB5(u|A*@Iqp$lVI!ny*>B72NJoRVA|62}uw5OX$ z@SwBr{=v+D@?Gp*Y|E4HS)%&{ZA6S2UBQp|)8}|A7$xR^%PC=*zxp9bM{XV~^A891 z904Mt{KpOZZxXu7n-4|1_YHq&)cVg_5l{}oa{`-mfIm3<0{=GMzvB^No&p0jwwxbq z$I$C(W>mrN$WtC`aX>QvOAxL8C+V0%O;DcZDeHIx3UK2a4r|JpFz68OC91@tkn z|1D|%UK!XT5YgqYPSOa6!}WQ{pDneSd}-l$&-id2(mvzu^PXDO9kI{2>Et`&c{E>* za-`GRKZV;d(OYG*Ab4yi38@^QLH!PO!4Vw>D+tr{fBKib{L z!s%Rdg` z-{t%dA^zu)*S&a_YBUne2u_;oRfBE0^fF|`%tn;t5*w>5_F(IYe|wsLFX6w8iexI{ z0~kHFc)DhpwkSJFSRGA&?HvQu|8f-nv*_odbJAW5JXf|7M?Bezi20D2bmi6eh87qQ z=MxOYU~`r^#k+og;ra6^Ob9P4OkqLt`fw3r*-iA|<=Nlb*hF9+5{I`29{Fm}^g2iD z_MUQc;Oa3JhP-fUbL>ZF{=x7{*s&4i3Epgfut06+d*|!sP|M%EL+#~X{@WRa!Y1nL z-2bZ@BBR>npwnE{1;oz36r5DH@`u;}L=OYJ6RI>6)LsQxz7jC6~1^6T7pGBJS(6n11ediF`ZW@WKld#Oc<3^Uc*Gx!6S_{mGuo|d5R(B$en77(* zaD5B^M;eH=fsm!&J_(dZ7+to(DLkOV4CcatcO1(Of@QIe<&5E?rM5&_zvF+Z9~6c~ zEA}-Q-!D2h;LK9T%<6C4tkmDevd!4J%PKX z@)MoQc)kZe@P~*NWInA9>Oz(f98$BPi+*78i=b;BOff1D&A!RC3DR11JS0~%bm}oG z99so&vMrykM`3dKu=H(JIT%FS80D^N301f#fWy`6>TC^Dtb6!|!gPtK@oF37SAQ_k zZThgYm~4+u;rycvTh?{3xkf28L(g-e`;JycL?kWNy(97#kSybZn|DFC)Z9LGt3H!q zI%!I8qDJ0p(h?CapxV~+U((8`B`(jEcvz%(Vt$~^;%|0ggP+_m_+hUUZ-na~C+Th| z4eC-cqr@b)OK;Cx5XfacQ~<}lPmo^b+zoJ863VE#P{eaD^SZx2^-~e50zIla1Oy^{ zzw#(QG40y!x@M;oDSsEfslt*I?=GjwmrTr{97T2PtA1t)6N0}e zgsA>ukjQX@GKlMHW?AaqWcd=-R;Z_oGYp5OR_JN40n%KFU*>TQH513aG zT@yJP1uSZ|TX|_hi_&;)GT`Rj`LSr5J}4V-R;9qQY<0ZtFkp53*2D9*j-@N4yQ97E zukrOC7cko7+WfC+xh7ifE)ptAw1PWW%oZhHzAweDN+J(+rR(c|W|jZTr*J@kzYfHW z6onKLVI}qq|1-S(TW0<*QK{L`PdNNT+8>~=yylR1x8m+YYmtXMHvnsd5jo=;ms}a) z+AQ|mulBZz4R&vh+vI0Y69oRhtjhlxpDlLXN+_2Hju0sq-Ip6^A`FrM^^7 zvx@A`$kjt%c%lm8eF-BO=f=0^sg3y~nB`j#r3$ynJh0>hQ9}LYrNLXo6#ow)R|K zZ!|nds7ZXRc`%=UopivITA2jG2y?%tl%EV?9{;>#t*fl&22964IS}HX(%$h}Fp2ad z67<(a)vMiW7}}D4LuOlE{zNJT6$vH`bK|L>B1y5->E>95LK_EX)Hc1xzm9ZD<#NB0 zSsbsl9mrAf#^%rxT2(J;>~Y`5P=Xbdt7Dz&;SO$Xr{BUeruZogl9RoZz)0`^VHIw_ z%XTq^wRNdEUSMH1LhA5-GU?Z^iS71%Vq4!#c}u+;CSPk)alp(+FTia2ZaRaRIB5yBCn$pGO`x}ef$@G~_eFIm1PAu!+Qhc4fPt`})V3+?@DQb38 za3o(IEnTO5+z@3MI1ezkgYVek>E(y5=z>dY78DwP@Tb-u#D~`=<;4FonY+$g|6Y`8 zrZr3;jO{23C0X%cj`6J`Vcp-cE|4y+&a;3sQN(Suw1}s(zKcL@*YMeFQP$*(n^>p~ z1Wr||U#Wnxp{M_k;)?@TP4~*}{>;u3Y;7(yZJ$pU9K`s{)xo>RpHw%QS>>h`EnF56ql7}N=$ zY$Xt<=i*0v9oJ)j{2;cWYie~^A%Gg)3P&_V4okwwn6=oD%5$wC3i3J8^1PdAfH3je zzA6AJEQ*1e(2JmwPO)2aal;lGq;2{~5HI)YFj}J~^!rEUwt@k%#Fz`HDg*r@=r=&F z6iH8ln4l~=>jL}!A}_IYc+mm*EZ^qu88uHveFsUBsA99;^`Zxmxbw3`1>OwwaXvd{ zhQKQk+1Vl}zrK!PD5orR^ApE!r}Qk(va_9${WK`Tavp{tIxPp5V}cqRlkWu5Ne;mS zVVKr^0SBN_?uKjh<{A~NKX-KaDQjekyW}?!pw@f&{>C-c>3ie1TBBSs1yLjhE7;8erb0PG`NriWg~8heXOZE z%*Cr68wWiq5DuLK4nCDNZXw6!-JVe1(rtmVuL19J9K|>_(tp};-vt2x_}%rAPln|< z4EQU4p=nu{OG2m>x@Szn3mO9-Wz+DhvQ1Bp^-b* za=$#E1l?b{;A^&)jk}^4CS{5wWKO5~dekCb;;Q=qH|_(9;x`bYgp*a1%kr zj6h-sIt#e_0BP^DvXT?8H^8MW5$3=K&rxOr({ASk-U~WybP-Cpe(*?X%w5l{Ah-Vb zet~HUq)&>2VkZYJ4bv#w*=_fPAPUaUd73)A@^@#jECJt79~4`lCIBZa5x1slgI8Hc zV07xzsd`apc2kGpaeK1AA58Ja zq}P9TSKd(aS@jiQ$k82p}!-A z^Ct6?Pcr`W+cTyp1#xrIa zxq=L)mQ@5S;HfXdP)Pynx>=)ZmHgUCqg>!;<$bqD?3Y~kc>Ee18Ml+Wv2_(f$L11v zvVeJ^bB5HH=DTE%Rfnjh&%_OL?{5Hn%K^O<*6NCYKL7xe5dm{-jhIIG(uRnjGE@zh zz!RxxNQE&W=On9}jqFaHzZ4pQLum)%P9c8cmT)6Z-cs4VDUXYhI=ety5{@+g1VT7x zYc*2(!(z(=EOHd~xI+h{9cKd$$!&`MXGr7eHS)DZ=(gL${gjL2sIgr}z&MliseZkT zluDgrSdkg`c4mq~AaBk&$Kpgyytz~P2{A}FfB2~nO#^;)NMHnP3)&9a%Vn}(K-3Un zE<6?L(z4y8&Zw7_8-X@tA9hkMd!E`@F5AEeFE;=0Kt=e@itP#Nd1UO32qnE$9-tJr zliR}9Y5WaK2xL&g#Z8k;hb~P6b{1Rp*%AY006MT)DMvR32O&?^ckg$RmG)~%M3X1brS`t!vg6P zmlzybk71?2KhVu3@N=BqwQG5f>la} zLjVJlR5fTwYj_OB{;+q0YmvaNC8m^E1twDIoG7KJY+(JVgZ}veg$&?($%c3c1a*o>JGqU$K0Qx2!M{ za%prbXLe%gE?Z-+#&xA&0t*4(pC{>RE^ve2(~sP6sU6TDWoxm#f))yKnP^M zpA>w{dXUuCgH73q)>NQqO$jnD1|-pWF_624$4_2muB!RWd)wTgn3DCw_s*N4O(i+V z%=*8%hob!L!oQyiJh}xc>1H-IO%l~SPkhhJg&DUPd#ii`WD_UsSN@^YGk>UoIMv&C zBK`#1(e4xK!vzwO$w(syK$O`;1x&~uYTj~k0p(r*tjIY+IWCr_96l@B*^-c3iiRJ8 zS7az3#||J6)0jf2X)*?K$5C_dL_P-Gk-X*V$U^74T$X>4gqE^;Nubx$}BXpSR(2_W!31*LK_sMhE zA}84$G@nbs+kz8K>Eot^AQ!w6Z7gOUY~UdGGe+S#`e1nBh}C0F&BsEnM`Bk+A{vx) zMP6?hE?a;P>$fte@cwSlDTj$>3&))`UlPa}#>jwJ7N;Ug=#vjGYERLS%;L8jS-0x9 zP<}ZZ;TgJN#phpL;}#$D@16?J3>`s?w%?7>MKfJv=8iPaYE*Nk7sTOBnrcYzciF*2jXB6XM939A9ho3IGSIQDF~G}>zk)?aDg5sB z?DH?5!j{S`a&GV*9Bw^-Xf4~rD4jHkLwW9*Z0L+{b}U1zY8U32xrD+nQryZbH)j-V zo}8JNRp1&$TjHAs%EDsW=oXrBhz=PULnLB0hsrtV<&cd{fk3KHMTU1rfm6wwxj^R4 z$vcWs*XdQ!j3T-AJQt;nAo}K{zExYyXRH?Bwh~@pl*`pK)^G;2&9yM$=$SIll~!Q# zY?U*$daKfsNUwLyl_Ie7R_O0CgFIhXBBbr2au{bqvNo&Qxfqx)Zo#uuu{Rp)QRe5Z z?)!8lDju-1M>1JMi}-wGnc%L}zAT1TXaf=p{k-SfH**;ZdkW+@8-Dwu87OLX8`$>^ zl>}5T&jbdHL-Bz}0BymrNyPX zB85#26dTQ|c~H4v>_ehUK+U6O8tDXS%;XBsQ1)x$0Q^5YNsXtMXR0ocl8u11SrzE< z;>6e|PzOD!@gm4+*(~4U3L9L7ZDk7hu!8eV(2r$uuGIGrOh;n0MmgzZS!&VfI!@+U zChe7Y0n+l3mw7E#c|k6f-MzwZZkWr@rvvg8I|pVnoWc4qKg2FP4BV?NvCeDqWuJ{5%D8^X z>lA<=qx*WDd62t2wD1#CM8SsN4|OMrvQAxe*`J1H)P?IWq4k;IO5_aXlaSOUsD`Psd#&imi>OB- zS=p4B8xzMuGOYK23XtW@u#TtoIyg(2I5jA2s;;{gV~N6gVz_N#^Ng8Qp^$KKGn7e?%?WTchzBfD_t^27jk&(p(WdV+lVJ{i5YStrC-m57qtPUz3Y&Y#G?)YPu+Eso^krrI{#m&!g73-KqVO|9!|;dos0nvJ}hl z2P0ajUtvIspN|%ye*t-?Z-tRs_P~lr=&xs0L}%^7&_o{6n)Py;`TN;6#%S!8LWeU1 z9Qv<-g(mu_A)$8d4l9&Fzm^vZkHzdFW&rhu`173IH|tjqmk4uEE`w29$MqtnoWD61cwlBn zQw6#-&s8w@n@~uzA)5-LjlX6y8^QR**TMp*27V#^``cwVIDyJ2#M3qdRA3%I@Jn_C z%~eU4bi*G0UKpO7#n@WNEVt@P_v)y%pr$k)Yj2d0kVs zbeX0@-)E3&i^XixU4$k5iDP!3c=DA4vuZ}`!;s8;{G1ji8nrDnQF~u4A$71$Tm(Ya z-}`e|Qljyg*wR084EjZ}eQNWg-!eEw!iH?nq;CvOuNUj1PZ|I~S{teXElwGB{j6HY z@*hi|W@Ch|AQL%p>?Hx~k;wTb_f~xBrO~*IS-Hw)h$A(|$+P|0;SNK^F|2C%Lh|(v z!%MD;lMG2Ofy0EgbV!>2TaBd&;Q+|=G|9f_d0y*0ta;Q*f&}RfWo>#N5Cy;LBZzi0 zVQB{`c1Ca^jqN;HAhj1bki0mOIp7B9#h~99x9{Csf_uu|eJ(^w3=t^7-#f!Su;xrb zrDSfUA$DQsTI7NM@=)TS9uwgI5z9N;P68c14LMq2$K4fY)MYl~bnoO^@N$9)wOc8> z2x>w;sQ5>MN`#;9Kv_#r+Y)5uKmym0cGCzOjtB%J=vIjmN^=J#uiQ2%_JUtdoSJ@L z40-dm2$!;8#&>3}Q6I-kNmUrZF+1tJWy=sBH62kbj|;5`VOB-^mAm2@{Vo`xL+G$* ziC*yHM~mRO4Dw5Jm1G_S6)j>Kf9m|t?) z7tkprsvg(c-c*O9t^|`4&ns=Q_o&WK)9v>EwM}*jTk3`A)-v)W6X7#FKV+!bS1L8N z-g=>NEtLyk62<|?5zzt{ib;4W(qqZ6`&Ya%#I|m=i!H6X>$bVsv8{rr`y?t<5i(TY z4-H{VB{W%(ep^fAxk0lS1p7hu4$Iw+p*h7wP&kM&&`&7$Mf`-`tc*>-(`gAU;Zo>5 z_$Ee}9>W`BR7c=SfXDs!z$N9pC|qKW)Ez;9sYYuotIc)hA^l@ca?8d6u*FR+;LpXUlEgV=S7a zaOm16Cbk=5w6uHQkb6GctG9FV=ISJr_R;NDZcuWJn(N% zJ@Oa-+sCSWXI*Fx`$SuVenVAk%1xzWg5aZw@NVX=b|ch_J?Rn#y;ZebivQRqKYx>8Ck3tU`$VFH{SXV@(cDUzIOMdto`#E{&?JQ=T-2c5w=KKV%DCzs0K)cpc&k~?vYpQTGTC@=pb%&)%(s=J} zn!{KmC))D1Ik9*yk0md@H0RU};`m}*2d`U~#>bmzt{a9bL!0l(CBf=6IM%7jJFzD8 zSQSYibjOS=ya7EpPz~UTXOAx=Vq9j=!U4yYXL9&fuFV5dXpebikpGNT!wz#uf+^Fq zXc~f#5|5AdI;-E~qsTlji&}`YXdSZtu&Q%y@P&IkIS)O81hq+c`t5}p<7@l=a2}#b zhQZoexRcc9TrIX>f6o|r_!(YfLtd&K_F849=rZq~WEWl*akb~-qSgG_5wC2b*D{Cfj;)Rd z8Eq5sQ-M~|!MNsS9hpIxE)@K^r}b&;r0nCAz02`hv6LAeZchowwHnEf6iDbYWhU>G zK}i+M2LJ)}B5Ku{UrII|SKFjfAaz)p>qtv#8_Fn@MFZS=Sp%eY zN;avIZ!$A(e6bI(RkZrgm2xKNF*WMn*YJb`*D=55bxdFv3SJ%X-Q(0!UdZamB?^aq z;zpLj3Pu>yYoou2>u4zA$Hx2~qN1O;w|`l1!4%opd>fPRnaDSJ7b9uT+U&ne|>{|sm+cIOLPzkj<@G(nI zQaGI>p^j@oU)I@yc&ElA+PGw-wA`b1(zA-cyLiQWYDUbE{%uEfP?n~@Xqe1i3@7}7p72II z$H0>l%5EBxzU#{FtN+%XNbg<<=3a7WFTN-4u*0phh`eWfcc(}AkOrI>Z97rXg16u< zx2n4DH0siA>%^hO-!MxZA{graEQ^PaE3{)rGJw_GfxRLv#Lm+1I=`sd;M=de=o(0}B$>A7HY}wa zNr3UiuDnp@ug$1i(i#{wB@sf=N=>_;cDq@+H_=Jdz!|;6Re5&rO;~v~5U6;N3VQZ- z>DVAEyah6pQ&W#)GREm3fP2Ppee9ZA@Vk_+lOxIF&;l;@x%Dp#7=aITf7~(RkG@af z!kY-)hJ)t8|JGv`%~8|g%ySeqru(VtIU6WXUGr@Ia`^rJtR&Oy?370<+`@jR;zf~$ z_b8zV3rIRyR}~z>XzsSzsj@G>33P5*mwuR(UzX=pYjk}lq$R}Yps1Ke8D+FBWJb&m zbcTXofEB5k=BS%vNJET3TuTP8<6XzQCk%QT?zU?Oi;#X#g$!U;)4DBt9aA5IwiR(^F zVj>eYqkhXs`LKN-CG3G=?!QN4CyJfud8`pfQIf^ug z0bMVfzx9M#X1xu(2ycK=*1+8~j_MTi(R<5f-Xx?H{pmnBU9owli(@rcw^>xgax%^o zc+TZAIKS(*0n@8VzbTUIQ?=da&gUFC;oZy%PVq%jIBQa7k(#VV279T?!N0G)l9m4t~MN^PtAV9hT2$NnXnfY&ccM z7GyrD%_o9Sd<2T5_v6LOp;na|Fn0sTSN36f{;MuAXS1csa?~YS0q$o`u_7%B_`NUt z6_I6%lb2rmlZbRbeT|ZWEj(P1k{w4ii1bgSYHXzG5=F`mRwHKI;PuDy?J~G#@FNek zxvNWzoMvuU`83N4^ZAc#QEtXd6IYYGP6jw06A@oD37;ff{hmBjoMP8pDOb5tVdae3 zp=k;b6F`QcQl<%K+x8DE!kYz|-xl0mJ1T~|i8URyuu{G?#cES~E@6Wj2e0!8{N-Kf zjRU)SeQu2Plmqwgy9|sRUEsyI`+`%YWpwPB6k~@|>m7tDSop)~-<2hdM^+NwH=oF+k!I^V3?&vK)a+(hMQ$KIOLK$K=XWpQkWO14I0memA|a>(Yuj{Z#3 z?F84jiLrz8-!V&L+gt|1-n5sx_2T}nZ29PfdJ}Uk!-^@U{9xzng$2voTQPNlHEG}f zzN`uEk zQ6L$E;Rw^Ddg9BSw;jgt(?lGWaZ7@yy*k2=R6!$7rS?NKzL`V7iUa6J;@p&#pyuJF zyuv<||FVB5mHd!_siyD?^iboDW+BDF5eJNIC%W3e|8%%$hA*!t>q`de&xmF{9H=Jj zx_RyG@WP_;TlDYh+ajId9sHDXaPx1I?yp1&NKPTw3CBI{+-|e&3Vf&NiWp2NnG2rv zF!f$4kjg~`4FhK4xLW1%AlrEgMhzV+@I=~T0x_;iY_7UoPwTqF)(l3k_tg2QX{O^y z+{J-h!jrXio5Is(;2atzyR8$cE8P!MybRLSes|?@KUP}S0gLlu^sX2h7>U>bNu~+I zM+NZEKJT0;up}-6U_5rTLdi=Tf)NAR)DPJkwx#dmOHE`$)Dsm7AD2xL-Tog``L+de z0Rpb|D5R*RcO{1AFKm?s5L%uVqdv_<0y5bUIHQMxvC$GUn^Jh>At>`YO`q;N-@ef- z$oN}7XgafW$o;m$_9@Hi^_`BAB()hu2V4YM((24`H8Dr%c2yOlQ%s!b6S`-`da9YD z?sEXDxQ7M8?|;V(fUda=|&QPGx~mXOXzf_r)-`kDq^lP;FwEExGqu{PqHCFjT6Cw7J2vjLm;ZiqBZ!CS+814E(Al`53 zva>q#FD^I{jW^vC9EB-lu;zCRSadK2UAAY|gjvH7CVjas=IVNl^nWE$*Nmx+M;X7H zuWUt|)jg1OrC;E?E(!S(xgBTTcWA(lj5JC#vKNQ0I0~FkXD1s^wW2(9!e785WPQ1I ztrZPVyN|xFd3}iVF_4MuUMQieWyBiH!LzoAL@j4iy9hU~C4O#nS7*18)UH)|sj5kNsg8AW!AEb=>W{Rgf$s$ovRanTVIE^@%>vVHDbAt>b!%0U)lawOWkIU6z6v6LP``SsKjTKx{sxfool2HEA8|Lgfldeg_+gN4 z_dQwG79GC0#_W8hm*@oXEe>o*t&ip%VPoL^R60-XZnN*Fm`G;_P-E1gngi*mxCUbeSX-WNf~c@)C7TF+&CYZeWn5`x-PnFS z{I$>Dil>uoNj!)%(CfbbHAh<3Y!F&zrCeePJ%xe60u(4Axh4j(Dv5RX?*}_4{}Saq}0u&HoH!anSBuGf8IZX`HJL4&O4z z-XT-XQ)6fxF)rN^n`ywT`YZ%x*~rTD5MwaP(v0sAu$q%y--Nh*K$r;39K0&I&CgP% z{{`T7h8PG@;3BEMI`fXH5xcGCTgeiHzxA|SUu71~&gR|RWUkpDIK;~S}xnm#CW zPK0?aO^x+ieC8J_fcR+`G-^AF1{T+25RH%SDJ~EcY8E}Fq)LJ7{36IM9IXK0TkXrW zX#DIKo(YVx$R5g!fW&{0_UJZ%keFnbp3)<}gv40HhXfD3BkK<&mWo!DC1T<~)#RBr zXRfBF77cgJo@ezSj7vd6JXFnsAAY`*S1Cx}Q+D#nv3-)2{mBwLy=l6KUyKSKMUl#i zG(Z%1`CyB_Q~Hqmi-5M8ApBU;6nv`^w+dd^{neJS(y!h>%%D^GCgnh7TBW`XAYd9< z_r`fzQW1l#wbVNc2#SGC=_9z|$4hr@J<(qft~h(VwIcgg#Kq%8Rf|12K7hr;D<+lT zHI_u_owDy%Kv-mc@aw@5zZ4LGI6zpsjb_KhLw>mQwPN-Q*QV-La8j)`qX#8ch}H|r zWcb;3D20^@nz}Qe457dt=;m&|y3N&JF@`%d^>k^&S zXzkqn_ScV`Zk*0BHhl@WH*)YHzhp-+hU+S&_1&LrnYCC^3kq%>5vhVP7tb6iiHnF3 z#e6GlhGXBV)dT4^QEx|@s6S_G1qF7N>fN&w{PFIfy}9@oOTKE<4XCR+NUVy!T^M>Q zqGbInqoH-AqaMK+DO?tfh~8Do+MT*C3-d1yFTmq&TmQ<<9 zc!XmOuEs?}0p3;^A9SpKTjf9W!+I~cRE)e^=ds z6wax`3$Y_{T+%krt^aiv(F#G$e>3d~$y7P7XB&z%X5Krv*YMDaFyvhj$nZP^mxo93-c zbwaGh1pq*7i*{U}pLr7iamYFMOnfBD(8xK%-SFm&qav?tr8TRhe_sR;BP`NJ!oz7} z>bkCh=VK?TVlnMEOp~_0 z*fSaN5*7>57#ZZZ7pJ4c6qb3-2WB9?ae6h9p@1fRd+9DCpBhTs)#_{n8D#e%q3Ajj z%-0+0Rb|V!MSgC0L7IIEiBHPLt-`LAIAMMLj`zXL&t9nSiCdF2Xh2X$Qv@y;+^-Aa z=%JOsQ|9TJF#j4z_VNrrdOm1L&=f>s!cWzC+i!{V{WY<)cU(|$>U7yI_f%Mk7i?Ag z%qf>!>{D<0%Q-DDK2HETh}TKv4f2t=hjN$fy~5Z_nJ3ByQ$B_-ufTr(#VZ{>jT@4B zW_!9mvKkpz1C<_%XANcb+&S5}s%4RUvoN1<`3*Lc`WNx3jWW;;V-HpgX_T+^+4I)H zLW*PRX+%;qEnb(cWG05EVFj{mz`QMhMz82OTrCmPekroOs*LI^UegR~gvlm|I|?Lr zE+R+>%0Ou)_GMiK%6Yl%Qj7{e=fjNP74!Vo&rgK%RVVY|Iot74&JyjZ-30{%vNBy) zh%k8FC^GFpF|T#ns&a({M)S+W39B`t6;ci0+U#whkk#MMs7%%kvP^!5r?C=M`t6q~ z`uMDvK4X%4$&lPhQ+!jyS)$$Sj+V^N;at0}P9IC^DSO(&{-3wCC5XNFJ$-k|VBT~> zW7^(?I1I1sZz+p3bFVs=JvUm!ZL9z)vkTU%jQ+5%c(tXDD_k&y;a#h|t;rrSze?lF zaH7qzo>ym*Z|+kbg@rb654&T>2EbruF%+{E&KE6pVPeB+d z8N#>{pBX$3YT-;{K75A)5&wKdi|^m*v07*`_oWHioaBe#vZeuNG7teTi3vRrOy-$2 zG-Zi#P-zII9*v2HWI#{mgL-X8C5rs|#xAr3SWLdxpfLFxo#vHztZ=uMyG)0cVh&s! zmy5f;sx@S@{5pRZOGx#W5}VhwZ?&Haq5rzxsv5Lr&lkm8X@#0~CC_Qh2gp{`=+{T` z6uK$&Rr)U z6o`((S#)`vATV8P{LF9?8HN z0#vDf2J@Q%7$f7XO4(*ymY#m0;=4rl8JIY8ICuxo$3P0Ug+Z)X+P{iD(2S_mtCe5i zQxT9-=^4E--Xyw&rL(a}dF*bXSNIW%#U7R#FMdkg8%cs`(QTv3)<{o!xa81cMRxqF zqs&OgOJ}40F{aY%q$EOmt!ByKm#vUB0hAz%HB0{j+*5y~W){tYz@w4dSpo0w18`bR z;#k8wepPvcd9v%}ZjuLf+Xvr-@6)lI0;e#?CTHC%^|iB5V_$OR7m&PgpsXJ zUAghS`(a0Q>#s7CmXU)8V(aaHdOh-)5Vi80xi7T-M2sc|OTa>-wy^^+&2^jL6@P

+q@*^=|Z7;-{_#TI=E-n(-3nbd#GhU~wI*rc#1^~cr-vS_N6hFPQ zh?hi@wbL3G^kenToPZy~{~uG|6eJ3;EIGDq+qP}nwr$(CZQHgzXKc@$v1j(|yL;np z|8zuubo57dR91IZ7Q~(jjd_ncDqOG0As(*R9|6F9_4T2>n=0xdyZ~a+p#UIiETXcw zEBWdG08HOtaw!k-ifg@_k!G4y(Z0`5hwBHqmgK19vNb?F+%7hL^icnD$U!*oNMun- zzMhMf$l28{Tv?>Gsw+N00aVz?zef)z*^VVBABs5Yl+gG^uwd^zKoeLLmA!s^tgNPc z4j*{*Voa7&_%(lwP?Fxf2|{RWxsviSomm<+y@(d+(81NJN_9HXo=dyS4)LvmI>X1? zh6Vu08hE}+Wi1_4jI-#zyOEk{0HG|zXg_!LLguE%*RJu{d(-M*&b|R7Ul+RurKuDL z=pTUfC5qPwEASmtmaqX<2>Nn%u}K4yrvipF_Y4U%c&b>dq=e;dJ(*;#QHO4kh#W7& zihc7)Xvh=U#i@Q-v5{>{$&9Z)DOnqAj1QQ^ga?EG+WbY$m#nUS%vJ z^UfKjV@|6{WRirnNFev6=9TdgH>d+lnaxWUVuja?$m*na2N}w21!+lKU0AW1VydDo zPi%PWeP45Nz4U6S96#IH@&O<{9h@{DF|7FaB2{`8Xm5oq{59L1o`a)A7-%6#faZJ` zu9=(WEC+jqz<9Dtar7{eNqzXFR_bGTQaj1*)q^enG5+{FKk+31f>2T~tbArlZx&QTdjm=%j+VLJ|5<+Y;{t_?1 z2LmSpg6%Tl|NZxZcxHo#VHuYr*>*RbN_a_wD(f6-61>Z9PS6S%xQqi>HB9^y8wBS} zzcEk1qyQ}J2Pn;RcD5@=1BeL^(_ zuZHFr3Tfdx2G(H_f8pqwp1pq(BbVZNMTo_we~Zv7s&tBE#4A)QluKMcOAOkVjdRGW z9*cYNuQym1ePr`9@)ofr#Gkv>f;mEN(xx1A%gO78_JWDR3=E{om`DHks-yD1DY<=q z7%ALUSNju8oye*%12wnRnqDj9C&k~6bDyRUPte6aF)8`B>?i2(94Y~Tdj!8p#PE zW{g^Y!I!=1;cqD4Ts(R|6KWWnalnB~QM!0pHgqLWRGt6DE<^%7K3P$PxBg4`p^0|t zaA)2_O1YeS*sOYqZIn|)Uj7b#6^}HeuFd)58VW-Alxe7qu;8afw*@K(@ODn$T6T%c z=aDaz4O+^L5vctU2ffd+TgQXCGg@xgoAf5t_{i3e!bhI_IrQFg2;VMkyI)ET=S2Q= zMt5$9*C6;|J!6co2F=fCvBpM4^EHK`=unu1{4Z(Eo+ACJYYk zTkhJy-z5qB`U0TVr#F6an_@6PIC`!PMlnQOBq*O#Z7=An47V!*lD$QUmtGSN_KiFl zy5-SY8_+5L1hQ$vqFpw80;%;$Vfl(dC2t+}TKsg-#O0f?OlW4vS2%E#7NOv2wHwO6 zTO$hOd$YFS1fcs0f(R{C;v_f5vg`sR?di+lh8Ac|=Kz|q^uDY#m?*79{90768757I#z;>dC%10e-w%N$5H zaL2y0V^X!&2<%CO(poYcWXMyrU<$S=oy!FPgyaJ3NlKT}x=@JBf5G;46fJe>C)W!% zt%(SHzgGOnZvhPa4S?kd9er2%c9b?+l>M=$+$K`=CM?oW8>Mar$x%5x(aeJZZb8eN zj-M_V?+vT5ffbjw!@0#8dr!^Vj1j4BFlw%QZ!?=LuX9P*1TdusrgU#7yu5H1`lR@; zLjwTtUvUG?gmR$ERz1u0>)cUZGDdlT5M25sivWdqUa4`Q1cqrcxBA#~XWCD*RpREr4Ud zXLP32-l>_2{$zf#vqkT8LFtKKIugOY=>Tpk!tNF#al~C8(L6^4(+8M8? z^Z?)0%E$3QnrUuP`Fvm4xpDgIU}#Uf`OB0H)rM6+^a$fEgl8s=8#G)IziqaY;2Kt0 zxIFy+v>1#-o7Q%aq0H8@c;~V$r3${1+|j@Bv3R(itAipXwo2`#G#s zSN^zREu1S@2Z1k5%by?G98eVlOoUnYxNuWQe)4H;`x(k?ZKh^kvw<1zWK#@``0|K3 z{;sd;Cv;#3J(aPyiPQz*#yxSo6g8%cpH&X6A<_(L=MbVh057sDgc{qvUL7Xy=%wp{ z*1l2SoPTI)iKjQXa~NVuZK);Ml7Tp_7v;(lL|`;J z4~jfAv~gg46%EO6pTG*!hxX(P^7H6}XX>+wj|V<@gO-tcUJuLx*Dec~gw^DFwbD zgzjDs;LC4vUZB+?FF*c?Usc9C0`^+d^7q!zw%(}TfJ510x>ubXS3Q;o-w$dYb64)z+M7fgE}WKw2(RTHMh{2)YuiX zBg`Sdjdk>S{7JyJyjzL^?wYsuJ`7L#J99QyO!1L*oHXL8M+Ir1%uU`5duUSYA4lmw z+PfZ+0yYB&A#;{pVJ_S)?sa-3OSI+@U-9qK%~lX;0f<=Zik5Og|B$QSrH2_BQff0f zC6suRY=L)Nm?9F7zOz6+9rh-Q-vzgD{y+(#E3;*f^2qZ)`HZTwwl{f-*QLbcDpo(8 zSv^JBATk4IPj21eQE#A(R=w=)UE^|=#^yGpk<Il{sX)mh0`xy1V%7ar~nLaeC%61DIfAPd=N)0>v7RC@i}q@wg>|o z{JZi7{uW-l6=MTvY$%Fz?oly4d&YyI#ot3p#}a8ass3rBbGj#XVThs~+t!Izl-t~C zypgzri7O5NYQp^0FqJ^%O(uAQp45yUaC(le@!u|iTCYnjUtXu?X0NSQ-?V~rO3+(Z zz`XSt5_|1QpZ$;Av@7FPQF1Bftp2uJprfq%NB{kGN96#*%bqM~k04@FPqaKQx}N$D zJvy<>4Gsu+;2ARf0YFw+s!qvxCnzKuPQq~s{my>TJm(azMG8e#VieK0`OXOn249-E zE1}#nU57c*0TD1{h99JuM>`POU!~=XtJK`=wVmqgx=C|gasBGV)!ByH8?`}%P9oJt zO@U`xAB&8jJz*xex0tC=icRC-Zty{xt8XRgaG+RiqlD){@3cSFk90H4T z8IB$?c;`-*h<)-J8xdt&U%II{=FrB4BL3P&$CT*ZgsKbafBD-5oL~xmbgGv=!1XYD z?Tv`TBK=yiND^+U`gaYn_}L-m6okMBKq5HI0DHm>i1hv0{LnVKdKem9Qvy4MPIw2hsnF(ensR> z_toK4CIQx`-NoCHDH3PBL+CZ>`&{$D!cdo>UJOgoi+1+NOg&A|m&hAE#OfeFK*5UZ zd_~@5ypqNWZ^o!UI})sezqt4h!6J@4{h%kT-1FlHQ*TVj$#TcFH_;q4S$7x(_`C(( zm_NR20paKoCOEpop6fnHRVw7MjVk0+JQ~d>Ng*h3eZV@iyp>bCsH}w_>1oW6`H>4z znW>qIY8x%2r1QUr7%wwP!wqUs2(J8zckcwWq6OQ66DN*70Ukla`E#b(L2mYK;^cOF zHm2{(QNZ>AR!&I-k`mdfZY%BVXw7l*#Gwx+t5o5~<|B(av7Tra>E^r+iX0kQ%m+TU z>|?FD{#D|2i3?jjNZW(<0ZA-0MjDE3j#9=5wR}_t_QA;^xu=y5?CJj8)e(0Zw#RJ>Ak5fjw8z<9iqYGJLy)eAeX+(d^(Y z@Wx%cCsHQ86#~3g*yNr>ZfaG=roLPSX8~1j`X53G6(<5f!(K9xGzjkr*j;u76<5)q zAEDq%#~oPQU;lBy{~drzd!pJPK+7GCG5;15E%7rN5Ogj6|01Y=%nV7q%Hul$UlQgE zhF-p#QC?-h+kRW-hq((VaF?z%Nb=TX;CDllJ{ONxd`xj{XOyHU86l@#aMWx8@(EsE zcwPc-}MLc%e{0(i+l&KFF8lyG)M>dT7ZFMU)6rKhmHS%EpMlraj4fVhMUWlKLz za%~{*X{4K56}I~uPi2H&PXlH26X|LZ?%W@;0XkYFR*i}1INSr)a+H@d)1$Yd;kt1N z7ydR8rnubUrvO$GEB{io?P7lAciL;L#WNTroyBdt8hU@rS1At$LvDSCzDY4Q31YZ5 zf3`>ZCkM8V{W(cVV=W*s?Ah78?&3Z?dNZ=roo)R2{z3ZKQd!bABkJ_Q#8WC3t~?iW z!|;Umqd0{q8^P1RQlLqcSkvDDCmjh*%D`nc-Tq_l!tG)!bR|np#9igrZ!o(STJ*d% zLo6b-f6os)aG_NA9}n9o72P&EO60f-(kpUwe5%_+->YF|e^;3a`y z=J*Hc^Yw`t7vS5t%GNettl=tD_GaVg>|!<+o1gQPG1gR#?YfN#Rf58Lgq$F+{by{N zD;K@Vf8Rz}yBCDyh?^ju+SqeDg(ATSrq?a9fr55As|qa1EB%M=82LgW;jc@1=#c%z z7pEAt*%3-FlO$;Jeh}GJ0lFE5A!^!yhXMcwMSBpjW#ZIM$N`flrb1nulo1G~^~;r9R`dlQWSkDvwCyH?HH{^60; zPtXGoWzJ4$Ysncgo@okwb5|}+P7rAIp4XXgJ91rSDpzD?dKsp;AotAA`K%xDJmk)}X(4JtGB; zW~XzmuW&#o@v4;kgs^9ld-iZ7OqjEN9#8EXxP(fqTNwi&+>@g#6i!O%pm)HKz4#c0 zyGo01RLSl}vc?c&?O2V^OsNupp_Br;=Uq(cuvlYP)jC-&p;H7_mPw0Gl?=-n_mfM+L=H(EAdP_vE{HiGW9I^yA%knXd zj3iS_$r%4K6P^ADd=tV{{rc$7`MzIx_#bXu(c}y_pu3n~csk|eYR+|(V|AdvLRY!1 z#~9Rn96$)DGm)Gx_nyyETCKmusdkt{r^j z|G9rDNmz*SrtSG@^0J$sWqBQlwQ`4(UZQn@p%d~bS@RcGLh2`HK(9=S-Qmu}DhBpZuNZ23&ag+Fk zptcmjLu&N;9XX$A!ptsEwrq@&AV}DSN>nb>IMR{VhK}n?fS;DU$pLh5AmJ-o{FeyTSh`e@b1!Rr+!eK?$pj%zOh&4sM0H-e>k@ra_gkhQn!c zBD?Zdh$KopE~Bn?1MH7wQl|^;!I#ctcL1VtlzPk7F;r_-IR%zn%>p=td+bcF!h~*F zNRD#V1o`NIpC>}RiBq};Z_d0SpUh7NV6oDDEB3`~KKXO0i~mwB|4_AeRP6LR-PbTu zCWk+s$(}VYP4BWCih(` zf0|DmHL$cLBHSjKI#OvCOZ9Dj#^n5@8Usym`)cc+(49E@&sz7zS)0PxLdVHanj_Mq zg7KgObl%vM4bCC0B(Wt%;k~sr`yY&^6O9q)QW>z2a>>;zR8rnT%QoUGXJOeJUTLm6 z3+03VRmo+OC(QBBmuF*k6N)&Y0fUZ_8?>@gf&;u3`JX!X`<{oP+hi5hN}=c6;o2pH zRwATN(|$~pVnefPI-6TA*PD4i6zv;^#*Z=6Vl+^~a@%>FX(kFDh+?&XJ#=s`_VLP3 zetGLn+!}Te;ynLl`u;v1^9V8++`T3@VE9IPOqUleDfp>R{*ZrJ3J zT+lAClG~RIs`#i`44FGp3;p^xgqG{6M3qqP*=2~h znflhGx=w<3`S)CFcKJ=3#8x2aOLL(x9`5UZ3hTH^Fzk4L711g%0%$;2=2K zN!;wIBBAx9xeJO+F@Y(Z#2G8mWe-7=`5F~U{1XZZN2-a@RopU`b5dT0(WZ7g~1vyr6699YMBT!`dTXQ?l4)GV{C;hN})aumu_#SvnFoCb90-Qd+5wFX{}5~}&L zv3Bxh@}uh46d>Ga0+%;m?v}>B+vFwhItXcDLi?HZYM0$qS@$LOIAyd~tyr&Gr?WXh zkVP&-q=9WN)xS<0&74eD2|*a>f8A|xF}0Gp(UWz^B5)pDYW5Q<8%#5VNF7sP$F%Rq zc79HNMtqZ*NPs$bd8)79Eis16=RQ{EYU*swEUW1J4H;V@ZW{YnqQFR#eRH!ngU;@a0E7A#*Or;H-X(B5tY^>W&rL{bGc@u0Og zTgd+go<41mTf<+}Y#Ld@AUq3p?GYkC1n|`hxJHyv%@&>b@ZVZ((UlT&3M@1yzi&OY z!rc@G*u=9$xNH8zx16RWv4uxX->*U#Fvo=Ve(~T9@*eKsJKts(Lp&W{y>X}Nb!fq@ ziA>6OW0T4>A#=B%+;{u~@$mUiDqg0bZ_k&zw)N=p)8qsZrpMmjnCQnXdV2^F)0!h&VVX0EKQOU+P?dEr6$_jfyz{S<}TuNEh>u8|; z1sFicR6TzsLtt6kYb@t{`vMVtm3}CPJ9?x&H*hE&eeU>4Rv~(=XB66dl|%FCDi37IS(NljDJ;lug{+S;yke36<7LEChSxS#nu#f&%#Y! zfQW@^o}h#E!@Gn~_*LZ>F5ZLm(kjICYZ*|*GO87dh=Md`{QWdw`=>yt8!3^%mK{aL zpkF*kw**5yUHTE2pWC3&1$iwwaC^-h7KjLSLY&IA-Rts7g2DDGXI9;nW(bdVbChoq z`r2|lA6`(hPt^T4d!xj7%FFrZu_c!7#{pwMMIeSZR$fDCu%ebs$xI5B-uwe8K-4p{ zj*jS=WaguBgE{I^ph>J<`ZIi00)cIo1O=QEN40p=&{RRfqg$wAt~c@CvAa{(Jt)a# zlqdjxsitl^z>4mb1&}B$@mX z(isciFxcBhLrwzS2bpK(n4MVj#$?o3w6}bPhY5iy>qPEAPk*5y6N-QFB7>><(ZV8D z_?{wxVhA}>rz$~#&#QblJSo_4bvu<1K2q|WU4n0aLXv;EsCYh|g&MFI4Ye04YJ8mD zduO`F5yYp-+I$P^!^!xwlamHRST8P!X*h%44vY>zqMhl#;h(17@Xv$4~As`?^D9Qo(eriGc#g{S=p-V)1eXOy~@%g1j4B-QMMCiot1 zCS)I?sJ~X5Vk0xCPh$>m@|kE6d8JrCRXuDWVd9AFh7l#GK7HiJ#S z%Uo(G0~KC8yH$W&;g^H&Vx28YaT^n4*!HvTnE}Tse;>9~3A)9(b%BGKIj#s+SzJ!Jc1|47^RnMHSuy%b?Epb1+4hK zjyO4pek$Q-bWrE)tsEO-BhP=)bO%l^5`SuEltA-*uXVH?l0l>3SP4^7hvn& zO_pb#C`-|B#lYON@bn5N#LwKRAOiyQTP4&fL4m8#ZUDmvYW@dSWr+4dJh{% zNCz-<*c&ENUY5xuAW)HwG=h>#b>T7^RUv7VQ7AQs0snxmJ2&LVxPt0c=-iT>7#maF z@MaNn_UROo_H%kfy`t!Zmav^Pua*!?y;s&+x;z36YIP;XaNH_tlD~mH-S{460bT*) z5S>@%YLAE85h7@tjplPV`A;+wsb^b=9yYG=OkL8;Bh^al)hXZkZhoR?0bJ)+=LU^7 z${+;V&?ZP0evgBT9!2{wYYKKQVZty@VBxncQI+`vlQ_H>vBAM9uuAWt`$?)#IHYKgmE zV0sn}ZyS64dG!OnRXo;lgA8zh56SYg&Xqnis=jm_&LaDbpl2(`CL*Gp!{%{lKw=z| zTwWu7pA$Tl0?|+0GUOEb>VRYEddVz7v-zhmq9JINdg{su^T*D0r@^9O11cCo5Q5$0BXI22-8>B)t(^JPDGT0Y^TSqB01QfYt;Gh|q}$T&8X^9| z#xxe)KTm=6A#v(?n;!8>aFiBHg=~e{UmFJlIYoNTV#LZt11#WlJc|vr;YkIjy_1 zgroQ_5a*f`j?SeT{F&(#EA9OE?20@cj?(B6ZRw_V$SWSb8=Cvq%6iEvtkWxn+Vk+& zq8m9T*lrOGCkWbQ=# zkT%Y#Zk6TBms-u1rA)GXV&WDl>`CsCJ#Wi%zP3z3be^D_p!4-p9@F@k1&U|wT{l{l z`T5M0;14$==@B4KTY%cY^E+_rhA7`jcx}FRkJF4OrDi^L%fR8CG$A+_=xfqnSIJ9g z|K{z5zHRuA==N{H8%ACzw{>NiqTK@&?tNZnF>E1L*~o=U=85(6sJ2nd4@u*Uwj0+0 zKC`sRcQ2^}b>rFV9O!NecZsd`8$+jZlhAo613Z=Deq*r2gypO=Rff{EFJX zt5oU3T>*=39sv(o!QI|qWWB0Afr*DGnO#JwaFdh@%U&t8JQgazKs1hbU&~JQ7oZk6b zyYX}X8~_13KWANC!`3m&PhP#=hXHh%`D8Q6b1db@H^Mf&U!gOy5*gA=pU!WPUKeEG z_e@WT{XTn!tG#)DO~tqba+=x+GXwtU_M@KTfy@T*FBuJq9To8wO>P|TgSz!=#plG2 zQQ_>c%{O=c`aTf_mnQkGj)b`D%gU4++z!4>v#p-`YkJ(3ZuO|JNRUqf@I z47m2Jr%jv1n)7B@cebIk)j$f@GzbLuKvw~{3Hl0SJ<2IW^3#yl-V<4^#nRrSw@f%; z`2h)58fzV>b1I4=Lk6}7Kt7yprlC;}ZqhbTt z3bj#F*Uwdu0;wXOb)zYkNb7@{xmixwybBaA!nS-2ZWouEqwUtq=9Ed5q{dHL;Z4?I z@?d8Ejzh?-+fuXkk^H2YCo-L=9=3b{^H76xll<-6 zmNQagt~*ZzH%NVPG~N_X+r`g*YvogTO>h*$5rg6l|V#@cJcSUUx}Y00Suq zB@9U>J!7KLN)F~Tz&D9WFcDJdL)R2=AEwttF;p=D-7`ao)G-BiO#5UkFKpYPheO?bC7KTXAt z^?c?Itu6U33MyY7aW&89c4z&2c-7Wc-oSv=*ay09v2`R>|VzsAAmt-s5>BC$+4 z-oz)XGo`hLpYc^&7xCbxAQg6E`0tL`|c<3^+Uf#|e_#zj56 zjiUwOHj1313P`6@qGXT~^buav>`1DrD)0P>Xx?YPe{k+WFff zBQE?T$vAa@4kYj=9FN*7CZ|fcoUcD%0j8GSfer8z9aaL^J3OIuvswbeP9W3B9F51m zFJ`Y<-!_f4K*lZbO2%y?#~;RKtVKaiEJ>dsPn*1h_U{7a7#CO>&v-!8#7>lfr~9U> z@208OZ(V1nIYPfQU(Zjnr76OpkM3@9>CNo3@*M0%^Rcm`9W!Wd3Q(o5jY~LWm4b## zG8_#ru|N6DAHY9%EDW1UjJMiTJT;hJg9N@AAb7C%?HP+INtsDW1!m=>PB-)gZ*xpV z=bol6=3s#uA^Z$ZPjEfUkXNLQG*b#lkgEdMGru`Lqz|(dZ~SsH%j4QTF{!n}GVRh} z)VLeTv|gQ{`y7=hEbX^V=NDl;LS+B)-%mNlneJcB)x1@Wb!)9X3W$%|T zV_3pLU!>!d`M2Uj~=FC@S=R%VI|N=pR)NYeklN0Q~AfcS&xhmv{zea z(nTm|?S3{o3l#S@bga!^3V5CNXZpOVeeem^%?<~e!k#$(F515ka@H?v=-k&L_c^rGGRa}J;2_^g)jU|h-q%?(~u zh|FYT?kn~8n)kGbYh?x#4moZCUG=I3pYVA{q?XG?FS7eTIa$|!0u32($VYmzDLP*J zlcgZ1)&yiyj`q)9eAAP~^rfAE$33%G!zwx`MUwiEy8v#b>TSirHuE}{5BydJF_Xq; zw_)l`UJ+K3VO#Xd&3U^N+Wm%`SuXAsGIVH($~WkoyZh}%9eSUvKB;-Up*PKh(Psur z6y1A_>@R-*DSmQPJrb1Gbci2(>w>sgMpRlI7IBQW28yqaUuH2{+9V|tb$&2ha!32F zn?3ZCzRh3|lGG7alcR?~-dV=0}PSE zi6yIgPaZTxG&o_Z<0Z@JV=Rv6616ebA{jpgsK~XO)rAe!`Jj2*flaq)Awr$dz5i_B z-0kiB&Hc*1$I=4tX&Da0ARe3+{w5 z?PSX9jR>Nhcy$rn$e5lCrzpoR4B%QqoWez283B({?G;!du)3UpDb?4j>giT1jNGK@ zosipvXy{vH$C4$Upx&X7*9qRW77%rVTby>qD)QE5PhPj+JkGz>G>f4#7lh;#?_G4Q zm^w{j2t)@oI0=Oa@e$tG!rE&ROSmqvAT!3vyYO-jG%Kn<-$b({nqflhFPoPqfH@+i zv&s2L3(l-cLH`Zk3T-wjjZ-$-Q3UQvPg39jRO}qi98Z83SKS5$WX=*xeFMF>l66D( zI%3(B=w~5${ticRJXK`b<3}SSkkMQXch77ejXQ$rv+MYb6_LPg0yX!*;~$5^uQ zn)lDU0w-zRtO%PiS;C%778f7FZ=X=B=p7|m1h@aLiF;5ayZo11JstZgH99@QtmJP$ zrS+fEgzm^^T_ck|H5|OpWh@+T9+CfWvBo=AQsWH^GYua??v`SM%9KP+hoU<)RB{BL z?8iFV!hE}s>zbr@NOwUJHiQAssy$Ck-l*FiI!ArK6GjKQpbNoLr$A)Rl3FiVr&kKK=h45&d2=mI zBF6Uy$P;bxPKK(Ak>sVPoi8cSWh6E~X=VBAEXFY46m#pWyVc1pKUtE%_I4~4#cMd} z?WXSxi}dJSQ-{UrdH-p>2asYnYAk1$B?!vX0J_Y)v#G@Z zd4>J4nb&9I!!P5U<;b|9FO1_+pSXA!EpTJTjZTW|mm$Tj>3ibS4$HTvm&} z1}MA%?$giMV0iT>hMYb)0q|NM!RcxHu_2(mj5pKFO7Su?&9%O1U9dL&7TRPUP($5V zy{?$Y%kxT7l0rWZpAvReBa|Z3rm`mlEI*bli$k)l0sCk?WeU-sx^C(|0+Von+f?N8=f|6#i zu{NW@rZ!#TU)H4mwQ~9-xZg2MLK4Vbi>r1TZqPJ(Jo9;OS9yh=*^z8>WK2oB2D?YI z3%+8H&x>^b*XJ%vmswQ;RA2^H`Wb9mW;crjYWx|~uz`k5 zWPDS%QzrCAtR96;YeIiuJh>2qL=BwYw$JfZh{|LD)Br_p1^GW0u4>Cx(O6Cn&iK5t zb_U)Ut zAhAdhpi!^otUiWPj~Tbm`IAjRjFCrkLk=vTtESM|64*-BdxoB#tIIL~#*D zhToP+y(_Wt7zmTn8KGDz!nTDVQDpt|Ktg?HYxpb8DDDMyTo~lObUBau9@w@rqHzEa zxOdw|)h;m7{0+v|8Y$xKLR0qX-e*SEO^7NGA4pE@9(Z6c$so?Xxoe^rPv^llEHl z0Tlg#EJ5Lq0oafIHs&)J!`O8Bu~nMk`h|!OR5W3_Rq^kNyS-ajpR^(IV)+$0E{o~O zS}Wzp@I|~%eVSP!u{l!}UpJ?QD>Xw%BClnzaSrxHH%3R5V>^fa>W@YSP2A>%Vt=`* z4HiL1lTNkTh1@bKB5iVkidE%#h^XW{!FA*lr7U5#HZtau-$V;1 zRv-b_^Hmct6XifOlO1kjw#_>-QAl2&bewYtGcMpB=^0T`F?>okvWe<@=*qBD+*nX( z38Qcs_x2PlYpCyErpY!V)gmjW85MpKO*T2%MKaSL_d9FG*Oaq-w#4dirLV4o<2r45 zJ7qx4X|wVrp^el#S(fV42p3MIf-1#Ckp{%*=+83-W*LaT=P2saZJDYu^x~ndlgTh) zuBSex6!gWI6FZ_i#s^!tYqfJ0%Rl;fjuJLMU9uo<7mUG5j!q@{L(OsE65i3Nnc}^o z`bN#hO>1g@=kzn6Ln~4XT{HY2fm@H$<$k-LiR_)ohDKxVWJETCj_jaMq^rxkl2r;WEEFb1FP_os@YJycpTuCx#j63g9Olg>(^=*j0vx{nn#J$ zH|y2+TN(*5x44c|0dJPdRTIF&+DP^akQ@tIPrINEHcc+xa%2ZX2-sQ@I6|jMYu9od z#zD2`sS`SbHPOCT`i!UA+fo`hR`l>FQN9URsw%}CH4?xmDSLeW4xJ>uv-OKV)NVUK zwgb3#5&lg`GxKT)z$#FknXTlIuvh7iw0;%0!SpN|-ZA$2@#+WssJO4=2I+-drU>Aw zo=-+=?Bf(j8oX&t`KdOF=<<9&btW)U#}YaK_Tw<1P_gaY;+kDqnIa@2BiHqYK?bX5 zS@Y3}$(J$FZ2tw-B%1w$M-VdR!*vVQ9FHi?!`t^jybzCRHCFIQ1*u6!FM<8qp; zk`1UOBSp^$%pAe4f@)17#`nCAC!dN1Hk|vfZdfe~jn?C?DSH!}?sj>mIiZ}>;xcLg zY}^Cs`_nwByUIAX>D9h`NC6xr>yN6y^1}9Q(xw>32cWKL?$C!3 zbQALsU*Gg+aPWcdN{u2ejXrX!dXD?1tW*vLszubi_%OPCpTzzfaRgUw25oCSsOAy- zmEHg*&ZZ_hxfxT|GXqqeJzfVaRsph6R7Kgr(nm1EON-3-1veoS-0hbAaENECY)ym> zqoiiZM*Cx0Oa8yMr-yy@G7b~Tmv@FEvTfoSrXp4MS#jtCnCl&FoNHZ)X)kHH?e@oz z_U*d*O7=j{Qg^Q!$>%dC5Xl!K)x>C#Jn<}NnUd^5npQEXBkM4K%?^qfWjP3f+lFnc?Mc5`Tc?tABfSyB3OD<}tF{&8(rIgnzk4g{l-0CcsgpGoD&Ji;rdk z_dmn@n|EsR#3qi#87#}cr|zJk>PIT`+O^*4RKp5v2V$fW^C~BoYvOxG2?iU-k`We7 z(L8pC2~N6ZtHJlTdiMNpv~&1#?LYVa$z1cSbeHd~@0Kgk>4A$$o6WtC_2kn&{Zv?_ zFNoc6R=ZTEUTU%`m}W|Fl`-~&C_4|2_B0|q?nQB3@pOc}Vw zHt5y5nVdUjZM~)c?zv0eJ?gDyL&E!7Xq1No&SI{`I{%5-Av-(?6!_?Rrgj^==9Bl& z0m}9VkJKB*-4(8Uh;4o0x|ExIyS!J_ZKN2X^~PjSBMa3mXziOxpBbV4<)_#VzK`iZ z@RtyN)fu_fv?}8&+#|@RMVMHPUB)@V0?=;yZeN%rmaxzww#7CuqLq758mp#lp}g#n z-CHaDv$GRn>jEJDw~#GId$U1AUJfZNUByN6OCdCrSu6@tDjES!9+t?0U@S-mL4NAq z_VnxfNLRN-ecaM)5Z#2gpIu(M#~xkMCDSailfl-jH|)xi+QP8NArSbAMq{kQ$DEc| z6gf9M(v!*uQ1wM{{%;e%g$S4bIAK+$0aOoNZWz2kT?-WDg3M^xnm3<6mLs`M)=?e4 z$B<2=_j*%~S0559Lj%#Gin69-tPE;o_go-kFm8E6+$(3AEi0S7tVCO}lc6j%$69j_S zlYniU0iin5Q;3QP(k&&i*i#DRD--g_x4`_~9IVZ4=9^P3H@8Tv(fY>|UsIslja_AC zS7I@Q+hX9RbKCf_i;t<}F` zna!ulzywFKKn*DvtfgK6QjzE%N5gp(kXZJ-KPCT<77xEqi^?wiC5=-cp-?S$(I7HE+d zCCDejP~Bly0oOBG3yY$IM#q_T*#Ylb(0qQr)+G=?K2TNy>2QT!$_8bj#BHGKUbWy; zKCg(h{W^z0byn3a<5IJkvF-vpZR_w9LtAqnu(*iJn!v@P=hO9T(#={znI198nG;=5L&TIft` zMn7NoPO?1nL|KZ4YX;`7MKThB2JwgO8rs!}EI7tQzEwbWUG0T@k-?Ec-&WGDuI(C? z%bzN^dW!IP$f2}B@0cAfHI^D&VU2W(#oto9jHH0sS6Uj`fJ4T>^rz4YM!1|Gu)T7n z*j_8kBGBy23ryHJnSY#4<;oPiqm|6?&!mVvJ+U&wG`Rni4mA-*Q3|dM~;jN%`S<-NKPR}c}h~?G6 zf*hl{zr-@gd!sMl{ek%u^=O}f2A5Q!!smIBwKNYOd3{fUzn+@InF#BmBP_#`$6Q85 zB*bZ=?c=FJAObA}iAiVRDoPVvV@>r)nY7o$1GH1isYkZ5fM_Q2Yp(7pm`z({vRXeU zeH`?vfDj|_K1Gug6bm8N6u^|qKP-wKpb3X@0N+P}0p4j0+P)g0DHz9@%@y>@BXS}}E{L6DjUtFBf_75ySgtGZex zPzZJHnN$#Q@<0E%w{2k7-Q``#f#CI8Y6_k}RD{aytp1MY8LdsX{h6mk zqI=%kI`lwVw%K7zE^LZ^tumOm3;m7~CcK`D(a>@d{?m1slcv;AI$=-dId$Za$0<^uxIn59uqL)@1;+@E?Ku2AQ|Sn^!Z@~ zTipB3KDVho!ktWsh8%{{RBQY|@j0BCs%0g9Ho8}FMgj}MHeBeQuP!NVl@Xb~$Z+rIpuTfDvrLn4_} zrxOY)*N{QxW*_$*TvA`xXgIpPE7T!};Y6qoclS4oqkF|_)oUOlEddbWkXt4a>|!8X zp!zg)Ls5aTDjS2;rhf_EQ&vT<%JE?91ur!jjv5e=NX7s$M!xCucp`~PfObkJO=;*w z?^hC>NMEW5Oe%{CE|)k_zHXN+~+6oq*+^K))DelwCF4VPd} z$IUbgQLhFKzT&DyQ<)QA%%ztn4I!%F)IA^rMS)&1Y3IU@Sj5t=zGW;>PY*N7{4o{N z2Egze@k!>5*yDN8fE0Lo2(+9l_CjCn{Nc>d8>HL00Tyo7Ff(CbH?GIfyKD_L+J%$$ zTbq4`fzh0A3$?P~+P2-a;uZQWR#2Pkw3LalrBZQ)SkC9ruZcYxpF3UoaeZRw5;a1Y zlO3IX@5_~=ChOw4N!XGgQcvjdI-8>nJ=OzV3&$+LS0cJEy~B>^{&=!HLb(Om5{a-) zJ@?(!VPW>9Pe5yyF_ip1Kaa4bf zi~abNe&B%e9-HU+(6+ww%&5l1T4}3|K+oUun3Rn1(Je6GN9f{e08Hu&wL@?^ZP{K; zdJwg=36qLBG?S+`hX=2rYgH>KwlK<8G3!P>+9Kzl2cH*Q7Er7WwGwzzyPGxeAGvg7 z(|ymh<5&)Jw-A(U|5lyU^BM~6xyY+I&kvqrPZ1iTBV z->NQb&6l2+lw&NR&RVa{x=XqQotc>$Y!6Hl%0>XQs)bDf0-{E8X;pp4Bw`dbY-jm) zF^ZBPPfe5BV#2i(8Z~N1f1%3S6lSDjU%P~XkA#M^{SwU-SxBAR$9oQH{F~5y{)EPp z-=)qi2=E1_8cYT3PZr4z+b%Mr1gCgBFb$xd`O9?eHoGIl^}n8l{Y$u1&rBh!#v;If z)r`Oy_N(as6f|dX>EC;zFs#EJ1*X9Rl_JA>xtmn7sVG8W9Fw$) z)Ufbme4Zt6=(pgoQ~T*EIQyrhXh@kG&WgKn9-Bl~GNZ2_KX8wJs?8(xfpE7(4E+g$ z@dHQ7%NFYqp9V#_@R?Xy)GsW-n?{S$?C-~}b%1IXq$(*i>~6Qwn#yB0w@n0wNxN7A z;3x^^EAn1vW9a+;QMU(QD$k*ltKrj?K=KEr*XFoGK=~e|JWOW}B#gG1$w-JfW(XJ_ zw9u_-Kf@&_^KlJe$)%Y!z{Hc4y(Cy0>TXYh^LAFWdHQ>UzM|bV15vc&y{0?j7lmaA z)&&QjkX5hJd8qiyA$t0rD%K?&DD}~uVW|J2yYV^1(5dMzj2Nnn^%!weoEinS!XQID zTPgI7%QbInUx#83dvnA#EyL3B5KI>dWGww1pIzgsJ4 z#wP?`Gm_EN6V*&AE*V1~1Ae<)t>Ffy+jtBZHBNhXK@pL$7VVx~8A`towM-Z_9=Ka+ zf~0^Or1JT3;pl36z&ZFI42~uAH?PM0`E|+6l4eArN^d z1NAL!Ka+&c+MusEk23ZuZXgGkhJd1fB(#cKS6_(Bh_vts4;*Ue@+ycjrK?@BiGUQC zynsaw=Obz^5BT}~iI^smU_Geq9fPIHnFjfsNWQx_OZ##Rg!b+5Rc92d&x16%JuXRR z)crqamHL7?bF68Rwmli;I-o4WyCp0tG_t#8FciExlEyZVoY)oJP43X>cTZO0ofeGl z=VYVU^xoh#(?HWIzwoF>e$Zi!9ycI5yK)7?F4-J~1yBh#E)p7j(is+HsOO+j-V!lv z7)X>!j|KsbBe3Z+$6M~l=N>XD*oD>XhYq<0N^sI~lX+mnwPR6<$Fu^47J`$tOn6c&b)=e%s z!aFFOd;yh?w}um>CADev%Dz<@k$LFoN>1Q>w?mR*zoh!)Ci1p}tqd@Y zPWBCi24y&Y*z{J3yt>&vsd9i^H4*7|SDW%Jb(Qa}eyadR186>;6z;~(`p^z#qhNvo z^+g;NQ6idacz3I6PVez~V$VJF&Kukxy_|9m;(-AUCE zoxI77!U%8Sxw-k-{!Sr3G@qoo$=uJf}A5Aq`Q4N%XVw-wVLGRclWGSm6ySQC##rrVSAFSrz~gb zOTUjv7L^UyXAFq49j3;KkwK0o@{e#Mpwgb?0*nrGBXv|mol`3t6Ss7UE6#BlW!z_- zrwzG{{Nyr6znP1~JYD^8+K1cmY$fh!8uP-PWA>NJ%ljkZwC$sApGKW;PjbVr&z?$4 z&C64B;#n&59!3uAW$!SWXYNUr`fyNt=<7oC`hw)j=||nAmqE_MLgDjL^x75yPH{`a zFdC)t5pN5j@E$;$>y030w{aQ1U*<)8um+xz=Oe*k|9H}o5lm+IX!Q$%9AdrL%-aHX zutPAvgCw7oT!XiFU~WXtaxDo@P|}}QaAhB8JWFUeD+rptw{A45(Lv+UkARNNOIl`V zS4+z12%^%o)@~{1LiR3f4Lxwa8OKy+PADr_-aU@TQ&QpMYk60@vj7xP!7$9K*uVRI zjTYhn+=ElrBTWEeG(D}=*cE>s$}} z3Fm+W-#EESNU%Ym10$Za*p0LONy5f^p;AGsdH1ICG{5F-OF>jw;``W?so z9wAYj4^F(-`bROD1N8J?pJ+{x6P>3lyQ$;%poqvdELWPKbMJbFjA^_XU*=U;J4Smg zv`B5EU}!IFHIR#t*9eZIykfKfEk)fuzo{p$lhoAbnn5di8N7eFWg&0cVyA%JD+G!M zHEj*u)9f_a(Y;qU@SayxnMouVuC@T$iMC+Qe0AzaB^wiVp%_kuz@=*lw^At6cVD1h zX1(g82Ll|h+--E1hebotFYRS31{Di*Loyugg9}REk8%$@SIr^3ktVYF+_e^BTvZ#b zm=`#Cj(P<+dT0aeMJ35uN`htTZD_YlKgc@P(vgdXBdQ(u?HdwgCl|GO%OpNoKbLl! zbn?I18KC0Xx8==GNK~ZfNxY(Z0{9l^bSj7!6YC)fKa*!Q)y{iQcA-`Jw*Z~I#X@f* z$S`1haXFc!f0Cz5=y}rAe!~p+3kz3G+TbPl7sgU=i$k#~S>%G@)2%F^)XjG*cJPnb z(DZdVskUd(m-Tp`np{tZZS~pQh&c&1t}-DS^l+u-cNsC5>=>+jg#86^+D{ z4yU@@!D`0=WhNmH!6R+1OCkH`fZW~sibCSxozp1B4FMnqg#%8NV3(xhvzooFNn}u(2xv#K#zzfa3_1;D+q~uV|h4N?8&68bX-G*A~?DY*5>D zkct3y$|>`k_1cH0O!EqMo#VbJ6#U}vy5oWA=A%7e_e(=v4P72j=JBpj{If%R9T`#F zSd+h3y2^mfpMvP#v`3ZKsYmUOkG?t8ejB}`SV#AGwz7!&Lgz&fc!WpM^ghXA!CRzP+zyA#~(U>$RDgDD45I-}V#H?Bv0ZUY~ zg?>pwrs)yTL<&8^@bxSBNT$N_7!DRBH(53`aVAxboX@>zOZLbksPACdx{y_yQeM)q zi!7n1QwEtbyx}&Ud(J#VcuVbCmpaD~W6`BIPcb(qF9gOSEB#%+7fce|ITuAt|3S3f zomJ?KX_%E(g&`M-cS}LiiE<2D02!0-NK-Yzcg zDu?m6t|)Yei1{Y{+OQG1orFUDoBQABKgK~nV9uMl6?>}4=I+<2vY+wZP!U0JJ-+(P z##Pmpo9JPey{x+jZMATuvCP)q87Rl&Ph)Nk$gl&EURx{M*ii<>iBPy;8GTZkUN85*STFbk4`MGTiDuqWZeeD zG1=K3Fcua_r1|`6ONqmsXD1tyy|_u{ZysFFN9AhdAnA6ARHLxfJQ|HQUYwOY=!Ri7 zGc|W=|Hj>bl{Dj}V2!~O3*ar)@_|vC;Mpt9vJv&5tQK&o&y!#XK+h(Mcf{X6tnzNx z66PeabQ1}yrSKXml&0O>Dw^fvTDk3KiSBT@i6a+&oK(FoX`7&spI&Ol-wH#iO7Z;g zBW?5vf>@hIc*ZizkSU4DzB^z{9cTVRaEZZoJJm&ABfIJnal^tBsv5KBBNj&g)JB@q z8`xlW>rTPmi#5C(jvP0?j_}?dpWm{(;gXTJRAqJ8^!PePo_mtJNe}lR@$lQSR0_O( z9V6pN)d?4*fCvRYPN%MF5p^&|peH z^cGEybyEGw6>d7YX!ac(GCebk>*m}zya0?%U~NvHclnlQ)|_VI_cW`LBfn1QH*gxA0q|lmwJ*FTH}_>J)T@ zeGkFvnu!j$iPWokML5@FR2FJiThkkA4iS&iPW||5yEyvX2-FmhOX(LfF ze;(678b1wI3BF8NdE961>s%aSy{yHe<_;>hhk?Tbc6rSxf3wdM9KxJ9F;euHO~LF} z3C=GO(h9f$fo6slESJ}W{Fea5ZV#=gK<2xC?y~d^jnKpf*dt=7l|U}0iV117O*;yc zHp_>&hZ^@U6~7g12PsUlaaA|lpFMyt_@1e~ul!7fCKV`joyk5#HL7gU(^l*X<#l4x zLHSnNeUuls;#F-|9}^jNgMj(1tI$nmsqj&R=B^KTvsqXzP22xB{OF!h+WcK#5aF*uKYjqN4PDQrW6K`RnYZ18cN<^w4|zS9D#u2YLm;SifCWhsIU7TChX-h zWHE3~ed5>s1v>V0RxGoF9!!}LO-(I(=bV69b*q|7c(I-!D94vixutfjX+JgP0gsDt zp}~v_$$C{Msh5OYa#{N--hLDN5{2>6oh)XDC9T8v9DGb*wE@d3?cHUBx; zk^y3v7Z_=lqJS0CSmR7WQuZ{!*G`&2<;0kV?v^>!4Qz9uU^eW66Jo?Y8BpJN}>V*>gc>LWlOBueK z>*g19P^jseSYsQDA*U3(ykB`X+zS8U!H9B5G^CUL|EhF|M%QSzcC_m$6HQvYK|_?q zTZQYGh@sAsL+l1o%oLbv02pAr57dSVkxI?Nk!^Vv#a(h|RdDSdGuCNUtbyBL0<`r5 z+=Z#pDhm168so`yp4r%%6htj2Ad#Z%%U8?}AFAnTe7JPWOZg+Ff2cAgX(wz?85WY}izL?u_TcjG@}W|vJK&l5PCocWDI~qQU41JOS3GO|-yf(5Ch7SuFvS8kWkeO6*k;Y0raKr7&z0yId(91^}13bT@tqf2SD8Nd`sIpzh04s zbopccHcl%Xb;+5aogcW6>3@bhIZ^Pz*($%%)lP|5R3M(M;p8SrQXbkj%5chCD`jq& zbr`_91Z~}^wr-uTYsC1xiouB8b3SMq03horGyq;gQ0&o@ZZL#^WB0rVdjp7ueK=`_ z&lwjaY&fB5fqE&ugbh>PyAuT=9+e7-sX$+;zG$kl-~WPUfprN+P1Ows-y1rr63lXH zbk7u!G9Df0MK>MJ@!ofc<2H*{5mVw66>3r`#zKS-ZqfoXGe25w$&IZ_tuQo7HMiDh zu{qnu(?5yX8`ZZ1@0%9%7?H9%frdE8`*|!s?*QI4E$92^LC)tRR5vKSUg`mJA@ro* z2WgTPj(S!xIQ8hsR7cQ*hYVt2Z`C%Qx!U8m*0DIXVG=Mwq91K1L%o;3@dqL&iB5hG zJ77YXM`+4Pt*waos;PA(kni&K-UpZJ``LVzq>?WN{z%ML+MJg{5R!4Xk*1;WHx}fDEAv43qVWUHy$}J)}_B^H#L) zBl$U0?LvqHqY>)8(<33FU)CeMrtPef)@GrlD3@O+c|( zX*JRaM3{8xv7vdc!6-gKE@gE_-v8%*+x;!M(K`5|jf&hI+=IvZ|7n8<$pM zQ%(7XBIkU|ag|+rSUX)qg=$2Iv$#7X4Xmbycq)-u(;!0Jm3Zz2%Za7^RBia{7gL^{ zvtoKiw@f+Pbs}NL8fB_j=NN2Li9GA$sqzS6r`!FiR(q!|bhG?S3lY+#yLaG`of*zR zmY0>bC*jH+6F@o`PP$Y^QvHZ&&Z5+hj}U)<1h!NbC^s+4IF9utO(uGuMK8V)i6M23 zI64*ViVQh6>%nM+;n|9fxBel8thaj4RB-lJa*SiW-HE=qyH46Pn-OVZczA*BMG%R-^X>*dVBKKR#n~k^wczbWqevwvgourb6a( zXUG!06N_B<(*qGUcD51F^-2Y+!sO3SCyx>V$E6o6Tkqq8h^M3sUDj zRC9?ycb%{h6-*&^fHz0s5Elb(Jz%RfVzk`;)iE#;g{y7ofIqtF5NfCYVaL*t=1A<; zYRmly0e^?z!%;#GnD+h9;Bw`Yg|Nr-{$M8*>v+OOY71Y-Rp$*D2ST+Sl=X1dmS#;a z>I)~}`sIGA6RW5sJc`{NqqjfVpq7g)^4JmnaMpamDVA2K&>x+4UL_CF8)ig9?C{A? zEc#W%SoiXVcXb2W$xq&0onHwIl$~E%cpeh9QOFPx#Mjl>4qz~sX=cl?a?rt3b?7X9 zZtkZl%=qsRQYm8cH-ywUuF{%-6bm#!;eOAcK~C1PDa$8dDc3L1Jw|+_W{|Vjy#@fV z5LW!8F`xXa*V$`rf8AY zCORA?n6IN11D;kp5yiFY*Qka5lPIj9Dxf)z%KkYcMZVBV-gSv#;ULLlTHSzMo$79q z*vI$ObKz#bhJL)&5mRdN@1RlzU}#92o>#VH)AhnmmifO<<< zL`pF~xdCmTOMeTDwj3}xk>%ILF@L=yC4-@TS`LnoD?CYB$0o+5y?ac%ki ziJXiQq*k|&=aXFFH(P_FKQ(T^ghB~HaTvb^kKefZ?t@`au$(w#Cx&gh*+>a|zqRS} z7}yK??*=EMWQjz}bTh{514Uji%EH0GBN%^F@@5jVWGNFv%v}f`@Z zhF~nBlaaIxPm%OH&reFw$Y?RSd7!(%o?$Ui$w`ecmDNzlv4%r|kW*Y|@EdN& zt8bnA;#~GSi~R)37i$Nk#8k&g@xc_E(dPzT-5MM}T(nWY5z(R|#6D!6ld4WTCcG`1 zL3dOxZ&%RbcYg3)#{?>AA`)~wgk>ROkx%2!aFUZdlX&KIf{8JK$Z(nf$~ompLJG9N zPP6aq0N)%^qRb8Jen1MqJTK20x@@!AR6Eydkw{YESCzlppxSTo1LE z{BIlJ8wj$0GXFva!AY{EEgCOCl;*9=nOUU?(QDRnpYOwI#*I4WeHo*N zP6~;8Bs8xfiKpO_6AMATVM67FS>jNIDDLPz1`;GY75z_Qh?!&8c|ZAG zgBSB>(5gF2@*rwoTZubN5coVd(xNc0v3H_JY7(H5&)-J=-@T-zTQgH;v-yq;Xy|19 zT4eQ7O6&3vna+Fd!`u37ehM3pebW_7hRQ`GrDgj7j3l+MAOc;0i?9|r2eG+Q$nBS8 z?jKhx-E`()+882OkcCdYkDqpxO61C+_WsxWt|P}UZV9!LZwd$~)piFWEKM*gdkJrB znkm;ooJO)w3@Q;x!S(ZiY!aQdaRHtcr#KxM3?GO1$Bb zt6lJ3bv5xM7kWp&S7k+Q{gCf0w0mE>%S^U>t)`>3hqqROPyIdj(s?aLVf@zQP&n z=KH~5x3eV{oX>(_!`^u@-nH&pUana8To^|OJsHOjqM-?VMED2B$Z|_{aJ`DP87#?Y!+ITJpd){$O=|5v-BLQ}rKv-w! z`{#&gyzVVI4ij`bgGv0zKQIVP8_6ZL>7q(O!62Qp%Gn!z(J zDeiMl3r!35KxGxi%};rgIc{DtnTPv*nMZaXcyV=362^uXJa8bK3XIH=q2+R>O^i|5 zE);Fn-tXOz(Tj>O3U3$v%MRd8I;4-KuG;zyCU)+VWp>U^b$%1n#`#&M?)dNwje z2|}S$zTJw>!`+hV6Qoo?xEcx!R2~LELrffkewu(&(1-Z(0OOZDueXFBokNcdB*q{| z#0|~kIP^YL=Z9xvPXY38ELJEdVKJ;W1FHxztV5FPWHb(X??2gt1*3FZ(<9$N2KaIU zW};7`-CDrfP7O(}**`YKggYdM+?P6RP|b*P9qN$O-*K^yI-BSOWO(3N2Cf1f9g%}~ zv@4a>Ih{~!nb823Nc3j$R2PO0aNTzJp9GS_=dUOV0fxg|C@>}F>9NL%xbi$Mj$*#i zt@JlK7~s6E_aGrXZys#XbFbmQ^F>d9Q%lul6@LwfB>ch~L6#wKW%mk6qWX!47??O= zb`pOdF|a7T{z6#=F~{Ebtx$mqva!OV4SpObe4C>L6DiO7Qd=iP{`+;7i*eSB4AZvi9dWHVk>H+<8 z(Wm}b|Nn5G>i_b8|NDS{5C0kKFaNXHpZkygk4%415C2}EAOHI6`d9r|vmfjqlHPdu z3G$bew z9X86I2Q>axM!(A^0xV)c9#?LAl^8D(hq90+gqkW3+R>(~k)q5-8)$UsVmQz{t<2~g@~Lm(8J08l=? zE+P39Hdd~Csqj=iOsHfaB}1u|41@%u)j62F#0A6Oxe%@okuWN$d#omEDJMm&cgA76 z0Xm-rL)6NKLIPAenNY|;N{3S_7?ew9ZaUm>iGrR z8qI8pZcl!sMddd+@=({5+~>(dUQ=_QB@KB^&U}tBU@09dTG1B%d+*M4Cn8)95EeiF zB>9`|ue?8M`V%v$_5H|6g5!UwSX7c;UK}|f>3+Ti8B?T~<^l)@p#A87qZq;sG~NCs znY(cw{B#-mUg36a?#;c~x4Sm?X5Y;ss3`de?4j3B)T8@&Z^Xgy+o<|I+z=I3660@SwD6ctER|t)WF-wOmm7N$@{RqT{c6GrUu?ZW1LYIPu+#;>9QPk zFgEZoE!7A2eh2+40N)xq9=-2pB+PQf8)@)#17z#psX2`5>OZw6{7f!5&VD6F9RbCO z3yy%|#D&K|abiN_pg6H1anGyN9gWoI&Q`z+LdV&Py6yEQVRj6<>WXOnli#9ae8}wm z*8~FQsY3B0#D&K|abiN_pg6H1anKxCkhtg$EJ$2*2NonQIs=Oe%x;pXu~sVukcSy~ zmX6G~C%;l6@|&FbC~L}YbL63~DY?&*hPOk0zn4FWVwR<8J8mK5U|?(4oj3qnA}~df-qDhLCGY|# z>)7nr5l%-{S&FTz=~Rh=00001jsbGUlIzL6aG0?3n3lMy6Gp7&Of}B ze@u{+o{QUaJok+E3U1k>z;DAS=^oaMWjvGUh$C=`RzAjuQck1Xg5Mf=VCXbV-LS~LLV`;NF(Yah+{ z%XGqNl|T@U93J1?NVv9Ll;Uv@EZZ;Q33x!23^wf#K&!?o`xj72R2Q6b_KyutCr6o{XF>S-$I+>8W5wxYZ<Jt0>Vqi*150}LVwMA%)pX$l zpB6$5I92)l6D^mV@A~RflY0@pE`)d`j)AHK=tbL)J@>@BQD~68R*Fn?d_^#Z6FuUy z{dLa0U2^LZ_lpq)Bv`~T(*DYW;?;?_ZOv&zs7eA&LZUWOO(kDWlgi6x8#@A44wK6+ zT#>8_h7t2*3?vW5GnmC%5Cw<4!wqO3VHD0rHYo1k6JJ9Q?@=g{rV1ctyuEq?gc^hP zqOi5WOuYLB++2}=;q4fG=g_*0hHA}zc8whhi-%3`4wrI|qlioAi2{$g))P!w=VtSY zO#U45jM&vCQl~cHVMy?F({PcU{~Gf`g+q?~zu$RhsxObjyM> zb=v+B-E|m|(%9etralCG;_T!jd8ZG0b>oK6-}Xp51j2O6YiTE9>vf6L?eQ!56Fc~$ zif2{DGzrQ|R=lQD7d; zDw0<+KfSAka{4conKB+uWBklZs=_3_%T`55+?pRa8swQC_eIadejZ zzY-OrJb!IT=kdUFIwt$R0CfR`GyHmgApLG))+Wrmwg{Mt^s66fGgr(k1d<%@gSPpf zIQU|4@poC7&m>{;;3;o&&3{4}!!96B)=89GppZBfA?UAi1X1>%s(QmIJ&t6dv2N3) zqP^Xva)v?3TQyZLLfO}-Z2bBnQRToow(}PdOliZDIsYD8{_!zD2IIUE7p9i_6>a}k zp@nS72B`h_?a$#(B*OwG4{8?D{i;%XJj@!0B$J5!6I2q|23|j&-*=Z&vT*%xbAiYv zK|1DAB}sppMK1+o&YEv}Dd+6vLj^=b>@~K#`xLROF%$(eJu<%tP?ITFDHS=)w!^5F z;SAu!PUgqzJ@y_z8Cw$tl(@NTx&wIDV-dA1#HMy{u`_t@CzVM89I0z6E)K{d=zDV8rT4*w7#R_5W4e| zb0k$IGe2nYRS}CBd7PW{#fqIfZI>TWud1J+y!~4gkk8kjDD+QZ&qP6lMZmL#Hl|n{ zj<;GXTXgEn{bCFv0_&B#UdQ{Jj~)~^;i<(V;#(iJRUJ~hc|!Q=Vi|7c8vmag$XOvG zfCd?UV4QVc2|1r<{PrIbDV?4gqen>vr$j+%rB*zL>JEn`gUqrbZMRO)82AFy&LDmB zUA&Un@^u`5W%pg+9>Dwbt`sQW`J|m!Y-_mRyFXWdEKlFEW?F4aav%TzC*BKa%mx|^ zT9_e11)YEk$e{iC?-2h`)^6;v{(lQ-Iw6l+H^KKMww_c5&NI1u3cOt8{P^>~Za~Vt z9B1%TecK=1n-+}OD2cdnv8Fqw67fU@1ZiLbOjY+x zA;jnfz?3l+XK|s7Z-7;9mzya!qrIuK84c4Vap)MUmkVG!+nC-2x6|rOD zG~NQYkZ%7;eo)4y&Nbkc`|y=Zy@ChhqhF-`f-A&`s{A%FuI@PB>zF!12qC&|N#A=j zwjq;woY@aAHF6PFQ;p$fTK42R1syqVD1X z1ydMJCo<&2UQ+KSjq|Ae@6X<-SZfmbUb?B1qPkqb>kW`)A-Rb9`0 z@n~`OjV!b^@~5sE_IW^XrxrNixB?*{oqKCd-lZP3IIB1cULXqFl-Ab#{J+!muJDbJ z>Jkw%gg$vjh#~+)S;*mc%UG5}97T>iF{(;~Eiknnq=G*-8xP>_ooRG=T5*#e4iwfW z{5~&eyg{jbTS;&pMCI;Hig~d4=P?Kp5kjXeOEim^rnLNMU!xvLkKr<1u5t53Q)eKR zd*%#25aJsuDjH8>!gG1FTAH#|5xY<^o_ta?wYa)y%7H7BKQ=;5yW!=W-V$wRPxlE& z4v3%dUe;;?gV3x-yNp(PPxK;ON88#U0BE}Q(Qo`5O5SjvI08++is8EMPw#O#Isas7 z#G}PztY5Vs+LlifX-MP7 zu<}#Spd|ZY%GkFbVrs_nO(2&~t>V(j?B%V8SinLFI9G+r@P7s0v?seyS=X%kqRFEQ zsb0w0xY>0#e~U^WtcXZ>sWV}WYay*%>_O>wqN3x)79-_T+tgaewdh}bQej3OH~3>8 z&a7ikHt+wXIb!+1+_kU&RK)GLzT1hU-z5iQo0U_2qnrU%&LhvnQoB=~I|YW(QyaC4 z1BTpTzko}ie34PYNqEB?oM{*W8ek)pz2noI2ZUI&)Bm`)33o2ihA)Y}yRWG9$wnK0 zQ`bKU<9?!THb8Q{eD{vKXiXCGzl9bZBYyx|&sj{`NExCz)E`x1`|cD&TLguWdc7!` zuyz)oJkeW<{#y#7K}v|KH{vptHfCu8B4~43d9r8<9S(iTl7)=b&>b_i#wKMR z=y8rO3ezQ+oNGvUpxUhR5cqN*)E~?Tm)A&k++jp7j}I|M4_HPLI@JzO6^{{>oxfMg z3pJAj&V_aJ3qp2cXZ108J0n~{3u1$-_rlSBMl;n8I`(cuHx`B>Z08QA&}xC4NTBS7 zyBMDqd%QmK%c%z7dWn$rp=e2Z&d;Q55xEvm3P&P33;q_kmw^LAQ$_MvL^JTXk06?I z<{1)b%l3;Y0R+WEt7R{wntMnGpQ=KwqjNSjd12wlI2f4Llvuic4mOlzZ<+oQJ?x}qAr zInViG@6d1?Lp#HGl-G@6E9$PO9?enwP_E2zwe$O#x~LfHyd81?@H*Z=9tT^<1HkKf z0C*j5AP)nsh;+hH(nR%wUBG6jYl(bTo8oL_h4mK9^A=Uo`ne*y$ls;`-G@YYAONTj z8}CPev@fX1)@i&wO@o~Ae|gc8GlC+HmawpS=Za0@7N0!PTZ;a-caFnm_ZYjE8zcQve2kT!4Y{nQMMPc^w( zd^_JlDPFJ{<6(xh|-x5{{Y>Ptj86?0_BHgJ=oT6$~X6nqb&rebtj!ma9A*lRV|P zV&xkA$}tew6@ybUT*>3z)7M{tGmGGhbVn4%F}iYGzx)l93WHRS${FSJE!evQ9i9On z@mhhj-&gGsA94^QWrZxXVoI=-*6E9eZ6FPv_^#Oq{|r8sk0u&;W3=xocxI zt|5s&4tebJIl^VX*V6r2sD1xCNj{}BiQ*>=dC7nyXVngPc|D+V>(o@4D{gEhxOPY$ zV!2u3a}0#I!E_-mr5)L}%U=iAvaz!t@f0{Gzln(AS6#5ESAr9>7-x4la2~xTv}L2K zEjE09Z#aXO9X`z4DqrBWJqT2~@p>a38Gt0PF6ok0-f_q#h`CN#2k4oUC~Xw9SL0Pk zoBlF=8%E@)n>QQhDilyRRV?5RFyIR8qc{54EPapmbH3RY7_V_V^^aDv13P|59(98vf+Llp%&LJAAJpTj5hd|Q5_#} zHdj{rR*UzAL2}vy-Sbr-PAeKXyc)+NLJv~z*7-X(OtvZ=DtZKr{YKRN)%ZD!bXJae- z1h)MZa=d}`{LR1g^sPR2?m}@fyl%%3|tf=6vOS)colcRrT7`-Lo>81 z6$N;QDqallXjRe}(p6cn9_6T;kPOoJ0yHVRWiT?5t#JWl$r-0ugzn%u($r3ytR?#!qV|;SYr?|*XpaX@?sfwt#d4cK}kYP zAA}qqgdhG4K?m(~EQ3c`cW{IM!H6LJu4RyD>n`pPfA}#N>MkWZMAh3E#Mdp~Q)9-B YQNHPRpgsPe00000000002lM~{02q;1%>V!Z literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/admin/alertsettings/configuration_tile.webp b/static/images/auditor/10.8/admin/alertsettings/configuration_tile.webp new file mode 100644 index 0000000000000000000000000000000000000000..1362b94db99f23f254357a2da336ca9be0331c2c GIT binary patch literal 3198 zcmV-^41x1fNk&F?3;+OEMM6+kP&goJ3;+P|KLDKpDlGx106uLtmq?@|A|WGn82Eq< ziDz!%a*+p_9%uMv|9m8n^~QbZ`=8~#LT!NlW#|LVo6tx3ZkKQMp1_~pKf(Y1_W<(l z_BH<_(gFYfgIB`e%lk+E&EbE6??U@|>I0WPm$ec35802@`49f1z#oEtzIuUr-~6xi zj~zXYx^MYE^uC~8!+i7o-}aBke>)G{f0_D$`1kZL?!Mq3$A7Ya$n<;s@A;n-f1Urc z_5l7<{d@hV_K(HSq~G5^@qd-`U-{SgPyB!3egS`!e^>vT{p+*`?zgf3?O>m(vpkRC z6L~39pblxf=N(T2g7%S8{6#e%OY2iLw(q-SFfy|?@n*s_PK|r3$N&ZI4XsH}s2(;PmK& z7lI-HB`)6?O^=wvG9cA#BZ1yAD1dYj6-;+PmncM5qLoH%qc?p`D0hS2GpApVHX(}PVbOz zIL}=k)9GIgqkEnMXcijUwl5Y2Ndr8soPi&@sx;02H(v zTJ>UE`qInC7w9_x^=8JUw23eUOooN)g|2sqVNE{c_Njka zhhW!=21qpez#a^}F33oRdbPHoH~t_Dx_IZ!c|pvE&ydzbBFf>aj!{GUR5-MH%oJWV zY!0=-D7NOVqMsHAn?&l9^(z$$@fm|SFfiX=jmIGXv@x3A$S$6s8wY*Kcf*PCW_^li zi4PV#=-ETx4n60%|5<*xHZUat>Ne34yHCd>m_cf0;+Z@BlY(V&xPD~cCco+$+0bx4 zYxV^aY_#dC%()4V-LPN`wF>u!Lp@neAFHbwpToxAN%Wm(6JCRM^-tf8-o5g9h1FN^ zmgU2o>U|AYGOYvp81SZu6;aDUBcy?_&S0|E1>MWpw&fHwP~yjw6-=kn(KC_5bfjh* z5?dE(9El`{I?<6srwAaDJ}<9+^R3ybsSBTJ)B~*zY_#N+y~{?r03pCF+LTE|Xql5o zEF>mN0U5s1D9#ouU|*Gwq&3^~N&CB#PYLG5IA?m0ZOGvprcqyrxs%|REwRD!v&89z zmp2HJ1l6xCO9iB-YpAwtYW)&(ZV#oY`9esuXSYm75Rh~P=?Z^(Q3r(Cr)^RoH zHTt)d%)0kGQR=LsGxixljuC2GuwSBF*Sl>1{7-0epRAN8<*UiYj;~=L9|b<*zl-0-IH7Osnr#97_q}4-kUKE80Va?cs4Q2;u}J z&Ffjvq+}b^c}(FK+n&SSG5<<&&zmW!adYHN)(9WP71%K!5e*E#Wj%jP02s-~rUFdh zd>Bbf_^fy{&gR$PKLhR@8PR>7KrS@%33Y+uz%9O|VmS!Fp%TD4jFm}L=DE~1K=<8! zSDr&b%YjV=G~ZeT^#G}V8wF_&Z+Pw$S+sd4y~)Hw9=owz2l`dqYOEZ)zWUoSl-SLuGwun%dA=bKznSO#{ z4($s-=fbRg(DP=m&nv8W&HqxKb{=YIt??Wl`*7{2;mP1khU}Ccp)1r3Bd^;os4RjJ zT=Vk@e0mO1>+~ZcB++M2ssS}`LT*f&x_lP;kPgNU29dM5MTV?IgC=*ZSrz%mby&#@ z2Na=~hj13Ca=$!PZ!t4cGnTlf;__b=Es9EEB8ypXtyac2P>lKx`=6LS_s@uj@=ZAb z{sT=a3(@eS<;mU^Dy`nLRsbii1B3mw1zJN=zrfM>C&?R3~#)m{tf?AiDu573A7(GRfcWKnp=i|RR^qty1rA@yEuL9N& zafAy4ipatkr z$O{D~Fw+D3o%tHvT27pTnt#tK&94F`ws#(@kr~1|=y7J<{C#fal4Gm5l zNy9{7g&vz(0z&D5F=mF>VwxLX#&gTkDXeZdWfRYEg0+#o)4ag$DL?7;kn{uPV`tJwl-_ zsSK-vi8lEErmR|16lAxNIMF!|32}N(Y@5QdV}AT@0&z# zwlm)s*pRKx=tvFEMoPSRxGlR1*@fB>0cQ=Uhpe2aZi<3p`s>bjJ~JrN!s5E{rI^kB zNP5Cc`cC{7`j8IYP3c^Enm_rCAl355ohrDwv9_FFnh1Vi?@|v6CTV_%U?Gh0&i8g@ zLN0(`NN;E!8~AqY<4bJC@PmhGWrf7gR{8wR%oG5_p~?)#vDaANyT6G^QDoYANdoBX zbi* z+aN-a;NN|CQn9Nvpd<~XANxbL+`;#MmC1xdXl}+3%wsTiU(i@O^YFi*USiDI8E$9r z)c+O1S}65x9eP;8);8sR4X$?eD}4OVHDKE+3=_eX$Td6Nkz`idtAd$cO5jO29H9JJ z)x*Im?AR-Uml>~p%Y4fXe_beWCZ1dDZcCR-lqL_uId>=@2ZcSxQ;ib_OtLA{8GgCH zeV^toXP@QT1&i`vqaHUrLAO_sSNNHIm-HK&eaMCM!vA1&sOcg}F_A`7% z33ap?3^1(gF`oe#qc~poRaOBsCFhP@{eX(G<;$%GV^^(@kCa&G<_?Ufycu1FDe6V9 zAaHsU0+WF%2|W`{MI?QD8Ai6uysGEnzNiEU+g28H1<|O(s2`6ZUc!p~@@jeynao!# z^^2ZKW^FX?>&n#nQP_#H^(GTVbZY`<18#&x)U1g%psb~cqg4npi{YC@rBLyZ8EZsN>%;X5H#1AoW>_2v! zC~{$uale8Z154-!pK|^B-Htyl$yA*X08J=(#(`E-GqP$WI>~vu`=sfJO)45yedUyEYtek<|0785W&>RvPW$j~ z+}w3zIE7y+%1;!>C4DRr>*6%U%N*<}m>9P(X*wg%g1HNlj=CwRCxD1Lb(6C)tlH)t z>x;RTr({@M$&@iGzUCCyg5b7*A=1)n8FAw0z2q8x(zF75)(ZpiG zqkf;eGU2sPrZJ+${S29-X*hYJMt^=HV2x%jfxuAr5&&AAmu2=2enOhr!dleXaz?%K zU~0<9&Ye5vv06D9Q80P?ziEyEy9Ya%nn4!qXX4GhE@`+Beu;?8LB*pNhH-XO=@|!) zXRi2mwx5c-W!`ysGA5!GEPW_x%8ZB#9HWHjF*P)607`KevL%=Na*EMe?$}H5U!U=~ zh7qVO7b~AAyQ*56k%k1~?&3?$J#5w>DV|7kpi_>{2g*x;Y{^c}54Tgd0v0E9mY;~V zpU;f;hGR4Eo+VsWJ%WhN@!-E5A($n!)w`)quGR;4R`HTw;9P zOE;9w2au}5e2tKfSyJDwqsD3AjjALJBA6+cl=R9YnC}CqwlZmXEv|4E({G~}S1M}JRBZPI~cSXV*E3C2q)1gFTm{{zg@tosv^83zHf&++vq)|qv z=Tc1!UH5%Fm2%KH+>pM}^vJ*{4RHm6gw=cIICW8|H2m*8Spv5XFeQ~EF`YnhD0b>A z3-Myz(RAY%Kh^;D4!E(fJ(E+z^yU*_z*^?G&F+Xo`DpFC-D?LE%snuhgJo-bko)<%)~!nGt%Eh=Z8qn)U@d88qpAuwKapEYGkK59PMxpegoGrVk#wc~#zT5*)MDM6 z5BPX7)TIGYGaX*=ss_<^Uf&f)BCa#W>eC=2Z@6y-X~pkuig#Y z3}QKk3OLE^Xg4^##X)6!;QbIdM)x7!BgUJbmb!gYvZX6OOVztY$RzHKG%Pr)dByd=y?3o5eMs_G%`4q#oX2`~J=b8=|& zU91u>vA1@MP&w%Ef>;6?lAJ=jST*Uub1o&XK45A`(c8J{MQGYoHC4Rs$T?R-b^chU zOzj3HSrmqKUE^P+3*L#b-`-4IIeB~Rar4gFJ0}z2n;})Dy#aGtb*or5*r2Lz2<(w# z+`#71*3f097-HfU?mN2%WI>~eeqoMmY9A$uMm5^_s9Ll##vrIji=J(jEXoGE7{&TT zBOAV_*9zCCr6~T@2f?7GMn|k}ZVSkuBvtKRd{1~e{2XYJcgngRy`dwHX)vJBR~X^f zWm;QPM&Jo3JER*?(}l=!8TcO*8PsK4MYJ452z5b26}cgwe)TO12C^i;9*RPTrDZKUhKw_Eu-l*Q5o!VqD{7C`n8yCJ7!(%s}WpIl@y@%8cSV6e<&x ze5#iEK-zl7ZL+nLmxYOJ0*DxL`4S4xkoy`L2{B)+Dy1>#j5@tpBw_6z+;a?FQ-_ee z!W@)-s-faa_8(axOf7*Q!=6E6N{pDqazN*I?Xp&rdvVqpgIiR|>5&aclcLSM&|&#t zWqh3qo@33SsNCmZAE=-bXu=L5+9UgDB1_PSBCSpGQ7xN*VTn--GWymo@Mz8%(y7V}yK5__KiMHlN>wF{k*z z@?p}ATFAqmC}}l>eD7iMu-G|dwHG`EQKw^7ekoiuwbxiqTfEp7V;5 z0zO8LGFaa7xtGYb?K5+eFhhcC;U8B5dAxrQ)r`3EBmht2^TB0u0^?n`Lq(8rw4z$! z<#IFl;_J->l+Bu;pq+&lmDC~ux3bi$VxZCgbW`F=ukKLeErAeXZbgys8y_rMNc|HKj?^7Xrn%$L ziVD8|gmVP|hbXXR&4{xEvBa{QWj5LgEF!AIJac1Kn*ukk;U!lIR`o@-#}p^I7Pyw4 z0*05X9r#@YTpQ;ktO@0oi%T;+qRY^pZXdN0jMUlGd?QmOjQ`4jB+&M;7^UWb;OO@aE&q z9O-oH2wj&TY5!@K9kF0^Y($8U_AUU7fVcGk;T@3E^a<0LH(#0*papUj+kf?#%d^BO zle|!CoUfia{TJ~0zE{)87flAQ^o*#|)A<>T0wo8q5FcEac32TfsvfZs3HcZyH6}4Y zI_lnU`&ILp_vfYfCzMSqv$U5CxqZyJHWJltw?G`|tcXkUu@tl!?PcaS7uLUHc6G%6 zvo!AeS$I)LRm=X?ehqu8Vk@y|kiz_;27qYW#{}VP-+2ENIzJe;6Z|dbSJilzx39jz z7;ymv-V*c;F!dsgrBI`5YPC5WI0YRHG3n4)qYd~z{ zL;FNg1%esMUEOSpxlpEJthNO;o`OfQQ{g)ix=*Ea5=u9d)3vHn+`n^V41cBF8qZ3iaM7(B+=PDG!R1l z8*nGWK=WoQ8=%}CN&GIzD*581JupL#9%>-! z$xAn$axv-9%GJlvPWe1nD$k^i%$HAgWb|FS`i@g>)y8CP3m1 z|NBL5m2vl=u#fDWOR@{pu~5Nlx5TU`{{AmENxZ9)-KJ-% zk#^$yH@-m*&`E&l&6`>FsW)$IeM0|t={UwLLx~-D#Izz%*qA0OVWnOz4o3lMfFSO# zmsj81uEJ8H_5s@A`dXy14xifw2v=#Ct}F@Yjt_+=xX{Hej8H41{u=FjriWI1@C?~K z*f#5yZFS*U6yHzN=S8;IuZ}+v#EATLk?YSX^MB5~IC7{nIt<*bujpL-i8mrWN*mmM zR-Z7XioST2kHoongbHcGv3!IU1{X|e$qv3!wgOzsY5w$ z6(iV+e|6M3Q+S&phzVl{ACD;*-_*b{+1Qfai6U-`Qy?u63*gb=f|}@@hfzrp-skTw zc2lOz%n0Jvhq!4i=^9S`^plM7?^YhpBvDUl`%Eey*6C>r?tx55>VTXto%BTX9NS=? zUBCqXUxm1-#3Em;yV}+xomxFHnHW)=s_L5vkLieu7OMEHwv-61pVqrxLBlauR8fK6$VtXD z6_R%zA27%0#Ci`IAB%SqeA_$;wJTNoD3K@UtEUV5SDjWRVuI7g{>I1M-~7v^k>gUwDNrr$SJ{ zm?FvxPk1QA(Z3Hz$(Vkk_`CL+EBGf?D)sV=OZeKk;_CXd!Rs#!NcPj4*$Ah;is#Fmg?ddjt*-_zw)jyc~BP=MON?R(k3-yM05bSC^QQ3Sl6t zQtx346<7_HojwTsH)b_+hY%JcRvn^{x&N>F_oyY|szd?gh5!7r(v`NkO-o=krw9_d;d=BWr{*i`q7%9fmc z|EzVe3WBJjYY`m(D+CUq>*Ji~IKdb4NmnLVD>+Gt0qQ2jB}*0mS$&eeKu8fxeCxb} zn}iQ_|{_KkV@r7-m-g~l~DVKke3#BKCfeN!t(DZ$@2}7 z6KnKlv0C$XZM@+vsB(~v5_Fv59fao`RUF^@7P2p@1xQv(b9h-P;LaKG9LO)K^=tfzqkz-NDOhM*5{`Q34vHJ8o;DWB7i_7yu2JC3*daoch c&0D9fq6EqMmrUh>7*0hfF$`j=FW>+G0K16!kN^Mx literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/admin/alertsettings/editnotificationtemplate.webp b/static/images/auditor/10.8/admin/alertsettings/editnotificationtemplate.webp new file mode 100644 index 0000000000000000000000000000000000000000..47f3b9a8c5addc81b023c1558a4f125659c3b3e3 GIT binary patch literal 21374 zcmagEV{k9d?*>}iwtH&Zwr$%sKDBw;p4zr;+qP}Hz2Dz|=FZ%A_ubCUZYFuMndHev zSxQ{oT?Gh8LrhpvU6GT>`oHzu8c;Sc^(nA5Fuxshl0*?ne*T}vuC)O8NDKQfzB&ZN z=^tCvJgxu$&?DF$;vHch*Lg!x0^(K|$|~z>E*(PsMZnukX0V-RJ|u*safY`B%~#;IZ~TcLQMHSAWa0 z9zXw^0{Htg`dj%m+DmvXu=0!22K~eFRC>O~nZe?-nK764H{767~lgN5HJK;{?A8_0{mUhbYi@GsYI;$(7wmwkbA>R>C4O#)6 zz2JmIzYbU6UovmGZ-`FwZz2}5Gzvlp@-``)61BavCiQYwk=TGHt z^jG-r@6T>t?zlk2FW_hThvygbo#8*o_{V=&{oQ;Ezb#(SzJfA49EHB_f{PJf0pGfjFo5?o0W&LoKEV(c@E{bGlu zj2%9sLwlKuU%Gu6N9Y`zvst+8q8#pmbFsKGT$m*n+P|K5h{j_-rgD2b9**OO5Hblq z3@ou6ylhRFH2dkN#Ds;kvZ27QD6+;~&m+HX$|TL1;UdJ2W_el%P1_hxc2A@3xz(;; zk0HT6ttoFc3%m4AtDDEv`KPIv(I&s@EGf=E^(^l`i1`I!XYcE7(z>L_IBV;WmCyJf z!`^qKe={PSnWkidruO-D^RRwSzO@YOJ<&URjTKM+<3~V_ezg121kfK}iKXP$&89r` zyL+Bi0ZqCzpX48lNZ290TN8t1+luyRGdo)h8o-;f1B7#GP_mFT5Q{PQlt;n_bdsY^)%8l&RA#4!Gn4GE>?6vRAG==0;LUiz=;z~?h*MGG) zWJXqW8xRsC4+jQ#eCl3E`C1KRh*bqlAAliUs|jY%@(+N9P4P8KY!I4QG(DGUU{wxZ zxetWc>D|V@OU9SQr>rwP%4twDotozENpF;FWDVF=<$t%aV z2zT!lqhA?ePn~dST~ss@9GPog$H4FxrrxYqyOv{Kwp$W=TJ?T2^);CBe&*2Y;OXI| zwK1f0f5iylm@^Io2iHLQ``t;+B1v$qmHz`W8<%jt>x`9Bba>SY%qJ4TD9RPI694@O zv9-ZsN~#CV8XU-_h^ILH(~7IZH|Pyv3W0+P)Lx?60?B0~M_5Q1c_RyzW|s1+R9TkR z7xe!$`A;a`lYir6iA}PXWj%mF|GsYyIS-!hlnR{`OmI)S!|*sjI;X?*hsMw7a+G6m zEL^W+0$(+x#1A=kEYZc1|C^FA+%{|7EhT?29TuAW(SHy#n|5|nvQ8GSxeJ6y5mnma z8jPrICa1Rz^@XxAA#Ia#r~hOn5l$#BM(6_3pu5MxAAsZ` z!}yoZzUP~VclOHXFhWZhG;XO3Z#25*&{3~NkAs2rBlLVg)cL%H6L(XABTiP<9=F$x z<~-i(>^o^RR04m80i$pZq%K|13;y(Rl@4=%jCi;lybMm{wrale`0z`LE;xsG>>3xW zxL}j$hIX!1`_J67UKCgz++an6vW>A^P+Mow*;L4?^b=ifq@-5m+z(|Z-!@8c`pI0{ z)-Z1Tijshu!xL|xuVYw7ymOW17U;5NO1h={C7BklCo3|=O205Vv!J^R~cdHjIXo(Ra?D0g>?h4vYgTe>xk z2f&S8TxeUUDX>Mu3YlXl2|=f|gAh)NT7Bq?@z0 zQTc(15YM%>m&7;zd1-^;IFil2kiG9(b@oL4o89OCo{^YB&(F3l%qC%x9v}!rlyXZh z0||E6SILU6t3tPHh2}Ycp?rSj8Rl9hkJ@46a-71G!ND1|I%BU$(Nzmy?PL!{<3d83 z2kNng;wOcm%DP!Cu5%`d@h7=4YKapG-7XQU+(SMEr!n<9NgGB2D7BtKz96^9QRt83 z(DgI#{dmFPCP0BSqQY#tkEE@_4KzYE#Xp{4VT{TdKvtj#=M#6_>_PoNzh)sINJ5Y& z|ClAiCjr6YFNslV1Pmz&fuSWOJq{4s08!%A?u$WI-t391O3Hms@NThE<6;K#EcK(o zk{`I2+q0nRq_niXWzi+pijp<@RPo0Z(f7dY$IF1!i7EdZldI$#sW-|Z%sa~jT#~k@ zS61k=DjzB|+AgmlMpbo2V8rR9!Tq(=&evAwkRWu<*U!ocwj{YHuvGTjr(S0z30df2 zR2T+Cy+uO|NzaFE@^wH(oOhTysBDTvm0!~6kwbQS+Z~>Z&9R=wD?@vXW zJP@u(Clyu2?2o;zOGgbpyxYgb`ZOa1Tb!a|(O$my)T!>GjH4d(wf7hZ1P7Fw9uAwcFt_E&nHGW`Spp&lsOp`mr0Qj(%JB?m4lM-W!fOr_P z$Y5t=a(HUUtW>N$B#CyqQC1NjiI=93 za4Us^j02$?u2khLyGExaJ~FL<1v4@2_B_`?a%dn}ppj61s}hCeggs?fIB0slZ{OybUE^sbydhiN(FA^D<9 z^p9r_k5BZ346g$4m8C=>E7To_KYnAOwy@ZMpOOPLEt>{jXUkmS7M8T_tkr>6J3s=R z;7Wqu$|`?WhbW!|$!3OF#$BYPFi~$T`uI)fTi`3L>2Lb5+a}TBhr3->Jy7q})xeIU zA&#V1AaP0?oiFV*85wgcc%5$*MRH{t8~VD771D3kSu>Q$2xGM|;%>a3HeaOpcKfsy zG{z6vt7~k?VCsl1mJlLl=T^;3c%5rtWc^!}_?gF7tE)K*UBpOCdmtu-mK@rXiVFz6 zd_%_E{>ceAYlkd-Hp`ceE0nFwb0C4x zoybwMBFwJey^1nLRbDFX^--54z7Urj+Ib1vP8h0M zw13g!>RblVj1ejZ>UG$?Cdmd!r_YhT z4@R5<_B^2DkB(DltijQ7=Cd?j1YvLK1A^pjD1QSmFy&_`>uj{qq-77O!F{R^(2yd&jMB8K)EuVU0(_B~++f0f6eogY#T_NoHjR~0v*c0s zGIUQ2mbU%k^UwVcvMM;e+^|~GU<`!aBSGfnKA>k&nnXgobonCAvYh~8*vnlcEjnnR}9@jZC#ncowI zWdbuUE_&)*c7foSt*!e1OaVpa7R84j=EX@h0Zs@^SX=4XSdDojoKie~Dx5}4KiSSd zmF$l{W4wjgt`iLrHwu>Q&oRt6-^^7O<=qV&&8w#~m?#WSRU!HsP6*H6@nmabR1pD& zFr1r;K^fS={`&Y!eDa0B+tM~Uqo`ud*rsRg-~^43GAO3fHh>XJg%6IbDn#kd5*h$h z_fgnYG$6>h-vhkVU6+L)9S4MPK}t|4n8+ziVZX;$1B27ZOFRxAIxC`GaEQ>tVr@+y zhg!5Y1D8(w#0VyblvFha+A@iBH7>Rv`DmZdfNUdQe+f6TnNB7!*f0VNxe-=bY~z3g zK;MFfx@;>)%0Us};=sxv_e)pusV@bJO&%}ipK?_I)T{G6k_i{+(d-#oluqMVl!#Ci z8^2g&IP+R}=ZC6Jl73O^%IVfY(#NdsqIF4e<$5%1g8WKGZ?J+6F~DX^3FZG@_J_JE z=trRkG-LiqwK1i$o5?y(ralP-rCPz;ohubf?{|WScp4GRWQbq15u=p0DC4~K)I@a! zVNLp4Ts55ozh_(Q5$izeambi13w#BD9vkY(UL}?6-uI^#{>u?w!D*KJ1LS2itB3%@ ztDuKYUWGyF26M<)5ZfoT6%zQDN+~9vZ6aV__Tq7x+8&4Q`&6Su;yLpQkyzR180_Lf zh3Nza5}ac+7$!|>Q86y%$vKR)5xou!=8vbvb9C@5MVWFW=V;yicYg;o4zOHGX9zKhv0l_#XpOdl&>S*d+y<4pAwc_a9IAu{r%2sZT_mCyFk6sp;?+7U#R zKp_fqt(^zb?0^eJ%TP%9cn*HV?8CPQT->k0^p!atW6h2ncLU!)P=1HLi3?Fbcs31Cb$Y!zvQg~|wtP-ap zRTvP623$lj-VE#>nP3sik~aBL2sIxUSUv{=w`KmuSd0qo!7PlASprQ=YRb`rArYDS zlw5ct3nQaPqV|SSH_Y?k%I;GK)4HdTAP0H;4k#PyUOI)1|Cp{fbAG24(CUpgxp>Of#(xu%<~9lp8V(p&=wSpP9X(Q2hG=0_Qy zvnp@ZslW8~ADEwaFOH33*RwJmr4Vts${9!-{UpdPU+|eI@2B%3M!vJCH8@W*q-v)b#_%NAbmy+-n%_TSIJl4H8_Kj16|%?aT41b znZy!(O3Duk;W4{H04eylVHL`j$Pp~+Sw%y|m9 zvb&=oDL4H)kscypyL|0V-cX?cp~kvkIXrxxKrGc&7*OQH*4f`3OTXq>CF7TLtEUHf zV-d;7GrQ5y3g`JgZNtC3PE^IR$f@p20=!IRZ23@Jew~LSm~H7oJ4GrB5QWG@&Tr+; zfB+NEBob&0W3pcJ&=c})YK619JYx=D9lwGj|1)%lW-9BLR}T2rLjmIQeCF0-Z$_O= ztQ~Zj1xY|j07^R$#+yTAuQKeIuK()=B)ftuOzTE+v$#)YWd=ntshcP5lOGPP|IfNDPRmSc{&(nZP(#7G5b;a$r*L9mHG2E@}B>=?-L?02jqvsJ$iw6Pcpm8-H}WS`Fdx62%r* zG6mnRSJ7871Za0nn>*d-oZDJ$i*)oGC!?Em&6->30|UV?FRc6Zl7Ic>kWMA_M7Mr2P3`B$^odGtC>Vg;*L+HzWw~){ z0;|kpS5^U;EWhT}t)Bh`vUfn8hbx5wS?e6yTSO&Qs_IDYavwi5)ckvrH1>B4eg#+} zP*9@Iferw!#@LT-oOpW)HD(&$?^#y1|Ll*h*oL_O@{T@6@fjUg7!lg81KS++xb*}NSCySBXQ-} zcxHjx(zMz@*0uGG%1k;D@o&-AkhN1D(@D{2jQfQ7W~_37LnwJs(cp<{!GqO5;hL;P zFtVew7LKmyGO7Y>L($KyHMCjio_~=vYZFQ$0ZGz82n><1%W_fDFs#_ujN3H<(;nQ% zHd%3LCQVbA3yy-cs=4-`nIKbiDx1Pqt_$I7zRjb8c790VRtuk$cSQG8hX9vP7jiy@j zGegrNud5ILTt@ehB<}p6ls9EWY=krmRhk+UbFLi`%5y)mh>LG3^3-TLP@}#4 zYq!h&_XuvUkPj?Cbu{R|(N#0?5r`88T<-zg&Sr8mFUg6I;#<1|L|?%w_QgOChF^a7 zpENcV=mvekZvqg$$ZpCLkRc0MUqBqL+&J^T;Zt+qTFh})d!n$J`US%$O(Jhzd{58K z1U~WV6TVKS^4RY&pfp0z8*?7vfvtDz-5pL-siM^|pCshc&W(V-UvKU4UQ2QA$n_8s zGTSv9%F8THA;t%Tp}Hbb1c{tjRJhstT!FFXn~JOI@7G+{gHQB8rfTl;*hM}fK0_iX ze5$Y*hqd<9?!yonV~n`M+c(fSQT?r<)53Q+&XXD-(lk)~;${KqKwec#$Ei>1r}oDO zI$P)q!NEVH#Mp*ce^IycJ>AhQf*$_8R_h2-de3M>hJfRykLVkH|wx_jL9{q06=9>Ct%nQ92u_Fxai)s7%5 z=Vqsk%w$+OW{IVrvoMW}o;x!yA}niFoQDSwIY{|Jme=$2p!ll5dTFCv9;Ub8KG>w_QPZi_o8$xCaZ7Y=( ziJ179Xb+m)p@dRrcZ=}?@l|MAZ|1?pN2t$oxO_CGEe;`Mx`aRzDM6rnjhTXSS6s`M zvpPg}T#ylKT4Bys&)NGMUh(j7ze)+Z;XkyT+N3D>3kr9jNa2$UXTNZGw&1-aNVm+e z9>*u_#fv2E{?*;HsaMPExJx4>`A(JG2f-PyZ0L6IE2mDyt|u_crwtSN6d%C&W!Iw1 zDDtoqg491jixG5%->f#XH8j-Zc1km9If4Fs4f$o-hvr?c-ZZiJUnY~ivVMcbxbeEd zoSwFfi^t^W$f%ex`!n^&oyL`QqAvQ-9OQ@3<&(UmpyfJ)E{%kZg=ZdewNcP{}O!PKw*1FAKQwC3Eq8 zO}4)~E6BBr1+|8C*R3}sb{-8;rE9H6bSlt7b8w0R}Nb98zOVT$!(zZ{|y8N$SJ z#F|21z@QBBm1w3G(zs#ztq6wFRK*6HPw9(8_|YXp?w7O$)8Mc zWbZ}A2Um#&EARQZ5;DvegaiLc29mG*-nT$FVSrP@@b;OktljbL6{ndS5V9dx$64+v z;Ik@(<$b)dAM%2`;HDZ46^4_hCLnYjIdqXm1CVhGU?Q6+8gXN5pc*%Sb39yquQ2=W z?o_o+2f`3!`JbxAp_}#zd^SqKT#>y?dDB?f8#w3rLp2C6% zZ$`UbboUw!h3`r4W{6Lg3B|{Yfz;?JVu^zZfaLsqLuNvCX1S|bKzOC}^Di!2?K!Ui zLSItCOA^t9ZQbykd9*!4ZJAah?)}Iy%Y1@mB-Gl}w*G*a9}V84^>{=LoHQaacet8G zI{Zo)M>Drd5|}|s=uye$(4(!GnHD$Vhf)`_DC9=2pRJ-D1G)<)4v0ImRpy-Qv3{$j z<)FdkcmX@pz|u$3_NQ_@t8y=rQlXmvS5Ls*J`dE^!m;z`M_cAyim=6$TgaOU){?(n z_GhDCfF?@xP1GLhux|r7WPY0$m|*4s%(rAYjDxTi;iSsle`mmmjge|ME|earklFh9 zV~o_CaravPz)@gD2rrFH4`soX+wzR5Lb)I<`4A0cmYqIdGCLl6^{nszV)j7c{Ty3K zgDyI>?TREu+b17LhUjcFJNQ0v{b)vf#hdS^pd*f%g5$PxYw=xL{QZyx_nVnAMXKc8 zl3po1B0Kvj;q{y&Vgw+hOy}K+1s)t#$Zzw?k|>mlKE4s9rRfyaK@q3F6udDkK4%WW z;!AukRkFh<4ToKPneqs1JLBmj*wCI zJ2(niw7`ehF^N`$+l#A<7%5d8(Gs|3N-E6(eG&THZb$X{Z^O~y|Jw$HwIDtpwKnLc zr;m}F(iS$7jW*xb6b|?3ykA+yX{J8}X+%{0$(H`71RdKeosg?y%0Jeo7 z^VW5*=$iMXN!;p@Rd5@NA=TG4ps2B=a$uvZgI%>)zwOayD8;(sO{xK%GHp5>R+>&b zM=iyuO>n@5(Fbcru^^$^7eXI-4EJEOf9R_}nu%^`go?3RMnQU@W5SlE(>VQ%6QlwN zNJq9$mx*7G?dj9rNzON*6#TM{e*JN*Vx5n3ZRRR=!`f+gpz*}>g=ez=Q0k7WJ$@X{ zb1H_@|M;6orK}D*95KvJ+EQ(7pV;HGLM0vs^0#vDutPF|J^UYvvq=JNgt$`dZXZ?v z9=e`f#yhG&Lv!n%^XxL7=({o6I{m5eF8}D=|9wI%U+*9W#G$i)gxlM)^!x?77Pb?#K zJYNWde2i}=INnk7M)cIC(tt-VGaqi&V{1v43LQFwCuq2u?f_5`&{LarMMVfU9wN;% zQyfB7d*r8;r{l+c%-i9H$;Vcm1OpSORl~svuj63(R;`UQOE+1?oM2q`KHDsgqux8`0O+5TK=d<9?2@ENw}PmP^Es==WzaiD(`akJMqVb`4%oIg-PKX#y|$) zD%-3Kh3?pqo&DvEl4X6t*0OozjU(*#x_5l)P!b^ErXkbICwlf*SvD<|*azM_=XFHN zp`^PrU*WGmV1xA{H{lrB4U#5u#sOVQyu^3FTReBNjzC?AB-3P)oh#>8{n=0goI(qF zQLmyha;LRIe7N+&So=4-{Bv}Qm?cR`{=6~HZP`(t2^Y^=lLrXsQrdgO&NT$3Az*>v zYQR}#OGg-ag{+whD3}$QXvt_=r`XhYX5Nd!;J014WBoSR_L&+T?V^QJ=$=vXXW^@y zv|N)M%t8+Wg4wn&#}6WC&o>K+FT~gEE#{2WD=}5Gi7p!JcDq?A zD+6(iWv4FStbkxf4~)}cs)2+`RQcN8O!;4Xr|=x7<8#LT7d=W`(ik_P%3C!kK6P3y zX|&QaNunYz*@g(%dO!m2Cit39F6mr=4{;m{QHw6i5%GDQqn#$fpD4hg`w4cQAR>vI zHg-8-b1^|H=e%!EzhJ)Q!E^{dtcS5j40wBJ_iJhn|tT5#=1; z2{hL=6&YVV!26pHRfU>O?oDiki8@V5JoOdZb|+`t_oY*>wbPCy=-0GfnH!(gkb%X| zmQ~C#Jg)HK_7eO;Ycb$CzMp9Citm5Uz#+`kJ&0H_@z>ZQop(QA{wv}ODL~F$I+)p* zCY46W!2GW&B?F<${hczw5PzH$bYs;VeNjTnzIEr732@_}B}wY!!fl6c$wvd51OT{C zYub5r)GFr!SGX$~3`g7b7cuK|Pig^Dpf7A`_F2CcM25L_NHDpLtO$Lndc7nhnJP9|L5vXNk5Cu$JqR!)sv-$rgZ$NG1{+WjO6nCYfpJt z(q0G3hc&Q9gxRrc^u}J|GfUbeT^qlmgl3{>p-wyz7g5oP5I{Lod|&Qu@rgc~9g|yg zXoz^TXV*W-(^(Z5?&alHEThgX)DF~mZ30u$lusaz^3u4@Xv*6M7Qw^LE7Y&YZ0ix7 zcdrMjBWIA8-{84Jb#PO@q~M?1uhbj=g4}SzQ?ccyz5eHk{(-Nosp{u(br7~YP3F3J zWvNz!_={x{F0hq3`>G*vG?M{2K2ItzF86mW=+#B`uy;Q%sSS4{3;+JH8)(Qi?R&#T zOORQx+LN7D^S3SG=fU>zmBTlXru0;>zU z%1Z{!)cOyv*>SFdLC^zx$KfpNjCHYRdnB-D8rk8Hmm1sKS%)XQyydZ?WT zZ!72*3ngMziM0}Ez=+2XT?!u0w&PRHr5O5+ChrGR__;>c00vAPmn#l+l00oYY%a-( zrnt2t$?lQoR=U|%EyRl=p_cNi>iqKuVU$Z&$@wLI4(KMbLb(W-$bXk;k<}Rv_$bb_ zSL|W1uG`NOqI{B<*vqwJuLA#FVY!9zi^=^fQdMz6r7piqufcv`Q@O)?q#dCl%rK^l ztb{+uM7;i!V?uY&=*Ql+_-89o(^qHkrO6xkTp!zOB3{dj{@CGI#K;=&&%9z{S2*&+ zc87AzYLi%liuVJj$j8jk;Hj3!gd$pyw0R58y+NS3dl#Xo%R!1u36wM|&O?1fk=IK+ zf4=X40HqviA7!|s@!995P^+=>`w{*oZy5EZq`ch>YH3Xa0gMVKD%k%T&z}q2sE6e9 zYAqC-C<^NJw-m}zG{a`Ngp#@Y0%;DnhE2Q7h1mvgsSbA0!yfji$5|oSLI2fu5bF=F zKP=-n-0GQQ+;S12{ZD0v5f=2pVqr6mGwI}U@HIK)o#xHPC)L8zUC6Q1wEF``>1e8| z>GnPvX;ll>u20)2utfp*a;tadM=yxbN4b8m+zCWEq_kceMYb~<4a;6HT29?AXgL{8 zJd@A+^E&>PZfy-`=OQY;=##|v#{tnq9d>kw&W{b^etZXUNZES&(qgH+&S4ZGo<|m?T z0{?+{{Mdoo_I;8_(uV;@VfwI{2<8hAFqaPd2Yui^$cdpd9iK=dB>JLdX8HTX(1182 z;^cw~(*#fl4;J6ef0fa33@IS5sr0anNEfiDVyPLkg(q1`*Q1Q@Jiq^NCRr!>$%!C* z@_bYOfLu8hE`fkZkfSlZ(I*m(XvI8u(&nWOrS|gyxjfkY8?{G!9!m99e&`UAA+QeC z7tf4-v?TP7=73|3a!obVEKK{7Cu#JEY_H>h^ zt6ezJ%fM~Fe7^+W>;^!fKT zP4@LvRV;-Spf?$4V6n-HG6LVN?~4AtV6j<=3#Q`;*!kL71KyS9h3YhtN}%D*r>U8$bI0tJ;zrnaBJm zeB|z@nTfWOr1BnEw~mESZ&MpZj__VmXW*9AckVma@wP&=%)zsvEHRDi0)PsBfS2n? z1|1K+e;vK5t|?OkfFK^XCklfYBJDL(=fQza1tncqHW}Q9t52~`L-t+1$ zSNG(4H75xa9Kc*05h3Ze)A;nLulOKz@L4`^{t_bs4g}a;I_BXOK^_d1V&x%^ z%HVV{l^}6$&eF8EArYVMFk%2m6lnx~PRQ2mW+%>8#g-lzM`vbIs~M87^=skof<2N!xtB>QvoNy$EN zWVPoq>M|o((XOEYrP`*2Zmza&GX&p^(N8HwzBEJwe%A}ySGFmNG%(io{I-nMMV0$m z^lC^mS6nn!z5OHDp%rs{bx~ZU5$=z5Mf)vJy29}h!<|Tx(hp{7Uy=157dVoOc!n9- z=rV^I|1Ywg_3&b{iuJcsRyoXzVsq6}?P%B}N@&Tg{{6Gdao%6p@cTpM{KjhBQLP|J zo$z{%K1i#22%i7kFHw?q(CJbBG)7n`;Y&Z%u`Eo|3@UNCo8tuK?AHW7sfn`##Fc75 zid=XLo&Y5=_N^IKEy9U-UcMQ0{=NBgUNFA5`DRg_QJe5!IHyRGBfQd{VPGt6IrUhwAmfm3(D&GvoideI<&T<__h zWxV-yEu%*+=5Ag`y?C<079m%Rh1dy3-^CYQka|ztNrcFm*0p^(vS_2Ez@9?cHNB;U z6O1NRH0*R7ciB-+-nYtz{c6@jk|eLmxAeFurDc%SR&(zY2vai_#o$z01#sJ_3+k&VgYwV{3n zh|miWkV95_0C!O{s-eY+fHlZ!c(}U07x4Z_cPuQ=;etUoOrEAeAGqyxdf%|5(tfIK zlce!>7&N6*0pCR$+AaYc_k76ys>;TnkY)}a3Vns>2d|}AF|-_z$0J)BA}bDz=6sIT zF@qZqtFV-4UZcsC^C8%^4bDdR%>-PAQZ4~14_I$@%`-SPjBvKN%1L$B6SG_e6phr3 zl5{v()#v6KsZ%%4W?6Q=BTDv^2I5Rb4(^{UC^=BOFv!V!jW8)1N#Uk+Krpyt;{BTm zTfx=`%4$Xb2I{AnJsU^)A+9Fb)%>8pp`V{lR^s88!%Kud#C6s4J?`@HMj7o#D#CD> zAwE)kmBeC25KjuPY8(MyXb5hCRq)uj*PJ?q3>?oyS|O64yLt9jDp-zf4?&rtUwLl0 zkPERaL~U_d-+T~_IVtm;EV^!XGWH$Kc|idnvHuOt{2ZlQVAj-?i%!!-dn^%^l<1>ZD2U=*n$&0=qwjA98-DV2t zonWgq^f`@+_ykwAh%!0n@^8d9)71B%AfpJ= zSn!G>fhMt+r=4|_!I0m$@o((Q=zZ+gg56F3-x<1Xpa!Y@f!!L6SxHxhL@>sOH5eNW z4}mx!lT9lyhcj*vrP{w1Hv!ED%6$i!#s@@Vc$GHxKDQ>4P*1 zqe?gKe;5kI;=i`fP|a3TJsqU^WgofEz|aK^ZSgziP*f`+3~Mm2H^tsv+y`wFuzv<4 zXL%^>Q)$_^#!RzD`^Y*YFWbgfz*x$;7Bk!zsb$u6R@|<8kbU2x9b_n!45G6PRd$F^ z0UQ#8-(Q|b{%}b8m$D;p{sZc+TVdrL^Q9}DDT67TQJE^drV)eM zP?O@9xw98hl&42b%No9hN(~X4ov=IFV%5^QWv!;mv{b-Bzhd1&Az*%Kp&eNl}$D zpl4ipX6P{rl<6|(8X!H~P|Mj^IW|5V>S1jvWS}p`=(R!$5>cBQMZJ7%-p4Pw1zChs z`TVyl#Iu=yT2wC|Fc^vbhv7AB&*%~`6TrDP@{Q&$Ax@De88r`3BU=CQ(@3=L_P#}P z!t>|^%k@G6$`+Z)-$6*2Uri}3eOv>rB-?OGuaJ+hJ!IID^-;s6OlzawV!r?5;h6)s zs~a~86gXpwl+wB&Y_4N9YCtJ3Pa1f`Y@K8wNA0CcE$0ucdiFUs=I{X4Bl+lST>O8Z z+KA}v>{FS*zyJtRE|A+gtSSbbRaAuGz_J?oanW`>B26sh^ds(ni;rUAx3&K2JBz-K z@;q|;bDb&iERV=bVodJI_8P+^@#+a;$Y(R6>oT8 zBj#@dOio4v<@n7m#I&b4Igr3@KSS=JrV-q*16P#z_=hd7GC<)DiETx4RC+Kw%`gV>3eJ&8?R$*yL$4faHM8+87- z`8Fy1^IB`ICL@@81l~!Skr!G53oOck7{8<=C-U(M?v(z*w$kTdQXEgIZqWP)SE~e! z+|&+KNV@2FT#L%LmfEq-KnQb;H({1m8&Nryb#Q0>k&RGjdYZHjltJnNzvTomX4dNE ze>R!S`J{G4991a5V*xObV$RJiOsw%~gVF{ZtQT!53)Jk!%OvW(yfM?J3BSH)k$G1MqV<>}%(1SX*z0zA*4kZJ>*Y!Z4{DXI?iQ`stXV{FxV;Fr_k1s7 zLU*OZH364a0PZ+#({)iYMXD4*)Oe-nw6F>V?CKz}mLZB|?}}>F-8wxC>7)sI3X4)Kz&3^6`%m0RB_)!|Y`nN<*k1zV?0LvKM8mIW) zasxy+!h#b>!`1oX)7FZ5cf5Usjf5-CSya34+nS;y={MbGT~dGG;-H6ShBy&({%P2e z!cti<*!SJs41!TWrS3Q4g8zht{~xd7cQL~)8ggE>U>xmpsb^9A!JW~KDG90DRmGLW z9Y2l@S)G-vG->fbvt{_@UN^*7JuRHVeqZA@;Dbh%OxUDvyv(d^sT2x9jJchqplZiS zByRBrcnGdcyjELH4NxSnco{We^W$n)+hk9({_nWNdYPgqaUR#aCz zRbpwjqK!l?=H>E0gr~SJ;}T~SO;)Y7Z64mM=!++kVj1M5OqQN&w1Xee-&BSx+u@K= zZSQi==nz{VM zh9#(aYKAz&r7>Kjya_K7i^kcIc9h4|8F>jzk<(%<9`90!48Bj@aw); zLO-EcX*Ig?^%{h{xhgLYt*soSDB_Q@p;)$SM8i${u+4rWlnRg0X9 z=ZOt-%R4lnREi@n-3a!T%g| zst2tlhf#j7w;hbNELa*XiF1i(dXvXL#B(MpA;a1nX>xL| z-81p&&3&M8-shEx@s=Z~a11U8X)VLOuEqjc(e$$)CwdJ1P;>y%^%zaBWHC0S-D{f0 zjEBXfUJJ^lA>^PqrK2BOdy**J98M)Y(v{aDb9!Yfg>s{d*`0pRQx5A_M zK>Q@0-TJ&zrbZHiJz~^?>uO7*0o?leSPUq;QCXg}&KCRx_7ZC() z(*uY+j=yTm2dQb=aK)oBBaE1P(p!?>2ISYmFozl*-3-Wh2EbHG6bZY!YC1Y_iO$eR zgv)sYxv536_}`?3Px4~E&!MJ4p7cv*$0?l3NV1zu;yGy1WJ4ryX0y zs%~ph1f}}Nkp=;ISJRh3qDtL>mPuHCp~>b;iM#-%G1JC92qd&1>V&(@IcMcA_ASEgX`R>Jh{uMyZ<=d9eqviS{L$B*voHGzO8LM}d!(?aMEkp} zv)N>LeN->-0OxlE8=^w+t8vkPMyxfP(-VD85Xyk;0sjFcnFE0(MEtZ>u3PaJ%x=S@ z9ls^x#3z&ceyg?47jE}tX-6wBC}%#Y45lI$V$Jvs1b<65F%}1<)%8;Lvc3IOE0apm zgtQqfK7hZhBpQl9A~{5UCa4=ALwRt&pT+-Kpz}7d({thz*`)UikMM=%V%p!Xik7Qv z8bRBCkz9~sv&YwKUaR`UOX=^UQz5EEyMXwHdch-;fgLdAq2AArF-SdZt$_TE<62@e zIy*q*Hl-#*5Tw;SxA2oTtOI5itr7Q&CMH!0j_!`OSwrq!1k zqyM*9)YmHj*-vLoT9DuVEu;6s6z^vk?o}!zL10d!>MXCH4V+yi4FowYcF$80ejyEV zEA$jrFV?nL3E$eNhdecOzW4ZUPskF$8HOwv5SHKdF90Gp=@~;zG$dFg7CcyPv_luGI0-HJ1Xg%Sle~^x0xrK zt{dV5wstk5k>6Sq)u)<;Q@XOTA--FCPH#;eE>D)}{723J6aj)NMsT?M#b3~Bv^?oQ3h#=e%9^2y6 z?)3&zLjP3aV|n*DZRZ3VH`G~`Yd&j+H%jcZn3RsP?RO@E zr!!)2(eo*N4X|4pUpq1VxT4}W&2(GtIur2pC zhE4!TMjhWqe+8O?bpGtRbqW1`6Hc|%U%)iHn@%OzlM@tZn~;R_k0fIrg&Q590|CU# zqf~K6)T7=d)<61y-BwN(ijRO0^AlB=%jugvY^Pmfb`mV&Gr!WJ6@|+RkqA~lIOQME zWPkaJWvM8 zy1ZKZv|4J`$fX~l02Pf=X+>Xs4E)Kcy^?Z`z^>hm1)7v!Zx$qzrs%6$eLb$K73rc~ zuawg{%zF>d19S~o1%Iwcjz&I##9l?;a(DOd!{r@j5)9Fg^D$DjB^lv16+|4ptRX85 zQ(0;n4&#fAN#QtT2s&-n;dJ;YZce<>&87Lgm;cH9idrjg_|Jc@Z&HJcDkZSb-df2o*{ zzWNcsuNl8UlN)eIoS@KlN~@~O$q$wRoft7TT}lChGrTBH^jX9vipgVrJ=&bY)%fpm zU%7#ka_B5~+>A`6`H`P!SF?DxF22dk>9;Cjg~9*OIv9oViIIZQ~3 z%({-h-mse3Q0kd7Al>E{kCop5iy|n71RgxC>q%T<$hu4&rNNQ_ z4ne9X&r2*bz$S$lhL~yzoZ}I?`%j7R{QEdk|Lmn;7|ZWAM8X|RESkF)>##4VNzgYt zC+lyzhw$0Gx^c{xMTlRF=MSXG%fJ)iIftDI2cgV*q^e%11+3AyjzQ~;Q2+xnb7(|6 z_uYbvStt|;$xNU0AiEA96^onnY-3uw;rofVl0Bj%!hp)QYi6j^pMmDklKgYAxi2lz zN1K>pfrLaWAaXrKADne$l;COi2;Gbi%+s`X9mEzlH5j%}m^_|S1yRS8U;tR(n6LB2 z#e&ecZLyK*961=H(vY54`lycVja5PeutGl=b=Hj(o@1jZ?GQ8bODBEO!%cGimdaYj zX(sW!gGv;3#OMI9{XUj^D_O5{hp^@0IJ@xNsiLHetCoT;ll9#HJt)kt+>jOi*F<0G z$FLNU&GtHVgs*4mz;&iWT5bgTdkNx5`ZZ|%eb4z%burW6q>oB(7;TE1#RXV_ksUUf zBq{e;0z2}e!tG-Hbg)SCb6`)chz8s7q(m8gqlEBz*G~)5@a|gek_s7Mg}8Br8|XR^ ztiuj^jaF9C13X*Rt@{(EIUDJYk0A~+e#eU?PJ1vT%!PS1PLAZ0lHq7Y??j9_-Ncmb z_H&s2C0Hl@;v|ql?U)Rv0#QQF>*92*kFT#CLvZ9^Mh-F|Zs9oVd((WRj)>qB>Y?Bo zUR#e_yV^8|1j^O0)xyhP&JXM{DhFZ8o@sa$VXM^rColZKXEToGFVg$`8@$Q*5*<5w z1idTtfA=8p3Abb*(aP_SI!t=hK7Eg%N-&KnFk3_<(^qnuvkNM#Yg}u$h>sm&;HAwL zj!VczJ*Bhm5TKchjDFyM5Oyf3k7Vl7W?0>NasVa3(M-qT<9vWD1f z&jmeb(uEU*dw|kPOT!H6)-2ug1hNYMP7yD|W-~o0io6i!T^(QJzg_f=q0Fj425wRU z$UvKP;MjUC9u-2BKD_lEZGNK=fpb+;CYsEbMX8=@)7gO@WGl(2gYqceG}JWa?(3-r z$MD%%P3xG89TOfM*_xnw9-s;T5J(1Iyr~F1B5g8AQ|_O3B6<|3)Sw-;)$LUlhp`t95mWlKwKjKadQ%d_dYx{ZJ|m8`T~}~VNR%(!1Ks_CIK`#HbVmi2i>ja3ahAs`PWQB| ztLL>Zk6VQR;$9r-sduz3Nk6+Y7?Ky|2KstL&O*EFQHXfF`{99w;xp6U zU0rpbmA$qv72UU|VKK-`<~@+h&c}w@*j7pYuhYA%17@dtXn980h$9xmf)dD3s7Z9n zY!maYyeJa)wTb_Di6iIDam$D1zK3Q!1chHfQPtj%@4-z_ElPU^GLlI?YwIunbO}ry=r3F}H$Pm)!L%FugrcNk2H*zkv;J!wkG z@;nOYJbv1|-zn%%a75Tp)GQ zK5{yV`Hcqc%8sQkx~@*FXL)WP1h8)Br;9>jqG>UU*idGx;z-O<4Ah&hY`|;3#1=%| z@M?iIx1L0~fpNu%=+jni55C;;?gTQ>Ze1Gu^6ceU(Rxht^RL`vpSj3OB^vO$#mnF1 zm-5kA=Rv5^ee6c}aiX00GV^SnDlps|W9X~@T}Sedsf>w%6uMn1uyzKXP}k`k;jp+b zUjoyFeb>oqE7*xvB4F!#pofQlnp>-^r2`xa(r;zTqypCq)64d$chPEoASrQiW9X*b zDi;F!StHm{%_yoJEM?f+8L(3@AThb|bFw%z=;N?ibZ9v&W+Ko2J=b-y7uTM(#LV>O zv#%R^xutI>KR=P>-HgFqT!aD&UpwqEPCpuPm(v%c^3O^8feDYJVe>LHZpFeDyCqNWDMIZ@srcPjuxejn;r+XKQoCMOj8hr&470vyRDL{cMvz9{Zk)xp22-CJV=-< zdpvKcX=Jn<+J4XQ_|U3#!-b*UwYOaCVL zRRI~O<7jT7fs=EYvYr<4s zLyGeg7|W79&GE-qq_faJB5yGX2gW6>Lf|B8h?VEzNZt%S&#vNOqcr~Mw>J5c3n?Ph z?*koUzKW~LRywu`@V00J*NF76_Td+{XdA?lo(@@_7T`g8T{{#>#^J8FY%8lx`QF{C zfd=dbs53FVfuhjEY|^brhL~(vgpE;{C-^dG*QsSa8Z-x`w)3E8<+dVAo(W9?8xZ5B z@TFm10D$5Wy>I@klc9QJVbM8jHg2|`zRjp$CB1$K9maaO_prUR#@-3d1DljiyP-Ro%Gy90eznz3SUIX&XW&$bfnd*8jRa2(p_r>#^U*W(LpI&Z>3gR5ByzT; zZx-hWbyl2PhP}TVrmpcik~lZp?a8F?NM-miQA};~eE)6Gtz1IBd6QKtB;&{2#A4E1y$Z3ia%n#HHye9%PZt#PVlBo0bp}--YoK^%Ot?cOG-bZG zQ@6xbfa8;=U^HL#DmKOd+F~+w`WG8}rW&lN#`zw2Ic$fLlp4)@$cRS)iQgbb$R#up zO4^JUZg>InCg^oT67W?DwLOPrRP-ezE!$)I{>L8WR3@XHiFa=TwKMn!w=m)P_y@?S z!3`&Tqpsdz!EMh`QGa{Rw?Y9rfN``Av(&P$#`iQrBTotVBv%CaO{3mGkDqj+M$Z<= z{ZZBGf}$mW7eIbbad~3y{VzSu?1?fOqG`()y%CaCzynCrD zqE>~VW}+mq+*kx*ru?GTLbp&pXZ+{0NfNDf%6)(q;{SEL<>v6JbF>eJR1bGxlT;Zz z_-n*lZ$rQWCe6^~HY^7NT~Ilv$t z$WcDWDQQ{F=89-4$!1vaZ6$mIN7-+MJGVpEGr_8r3Qn(LR%VfWC$`KRP5Cd1{b?4( ztKt1Uhg`|R7luCIRC7s5+q>spq0N)hu>}^SOhsp+tQoSGfOmheG8}ut4OhsheRYuf zkSf%nJ$M2v;t(?riI*Wuj+UIKi>9d}cUue%vI!^JK5RP_@iF&xmxkerTN{U)*j5t) z3r-cOmqX&ZdVccl_8r+mXVKO3Xzp?YOfuqe02B2KthA#JrpY~`uhtJ29VsVoGe_W0 zy#_t#s*U#XY-MofJil5@^bj^!^$3`Gjgq0sg_=r4B~@s{9?jiJyJOb@b@5Rmn9NRL z%B4#9%YPsM_%;{AOqAJAxms<{iO_CKLZ3ygC{d_xGF$#LgL&Fvv>o`mpP;4=n$m?D zhT|o_<3-~0;S-45cx^MOX6K9mZX5x=%Q}M%9jv6O%G&Mx_!Q#`Eh*`y3G5{sQj9A4 z2*4Xkk5NFE3<)PD#5s-sudE+FeiLLLJ{e$)mU70v;n44~7WtYy4k&_@>{T<3%M7s; z)kK6eVj}D5(VaqPs!wX0_*vE)!Es{|Fg$ z;JY@V^3(b-OQJP`CQ7I^*G0x;rFl7e3dD(NtkV$8<89_#@yvPrP$Il)`IPxn;h$fw z{!j&C%59OP=?nQr`Iq7Lj_m3HcVW zphFl=Nz8xHkjULnKtcv89UPT~)#!S4HT>&BkdbaNv&)C8kryzb3Tu;-!KTlLjEiSm x&cq=OV8f1#@cnd^+~wlo{3gzI+~wlmy^iaGUyw5|x$%m*?W7MI0hwS3003L{t#AMU literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/admin/alertsettings/emailhealthstatusevent.webp b/static/images/auditor/10.8/admin/alertsettings/emailhealthstatusevent.webp new file mode 100644 index 0000000000000000000000000000000000000000..ef5a58709a10977f3508e272c5df3f2d2e8ab6e3 GIT binary patch literal 55556 zcmaHSV|XUPw)Gp^wlT@Xww+8ov8{=1+n(6AZQIVow*7u{&b{}Xdw$%npY9)B&+e+O zU3=}dc0JunQsUwts{nwSn6Sc61x|HX004me_Zk8P7=ZzVWECXY{@#Hg+3f+t!UQSd zh0s15-mvC?Fy^`pA2Y!J>l9tr0t5W*k2v>l-?LhvSs*mSpvGYQHmoU<^UBGR`OX`?!i9QZuP4%%;j8BD_6BZ`DAAYqtLN?fvj$l53N!(tzha#etpJC7wk!Rlv;8D+tuLlqagn9sb zX}OcX)m!Va_3iuH(C|q0?EBP{?UN`V3nT+NzCZV3-TpZSp7?eG>V_$L_bAZ6DpsH%kSa!^tWKdYE9X(j4UBybv4_J)06;vy-hs(a2 zDjvx0MqFk`7p~iM)>W+mT#MS45Y`0)TX>7&{%!09x!_Kw;>a4A1R3TmH*f7b8#e%^ zc4Q%%hQg}0Z}1JnNt^F+jCbtm-gZC^JM&6yZe?qAl$tng0mfX!$&iy_JHtz?od|Yf z5Sx5Wx*E&60lWR)@Ei{SdukuC)lYscBhj@+!4`%h+mguP3qLzjjMsFex&4r4H{6V0 zGI15v9bDbByN!5TG?NbYe+`IUYDSLW;>Y=j z=wx99>O^%GI>RNDy-g`(BuN9Fu8ZyoPY+-VpiVMu|F1`c4xZ;vxVoCKwv9D5^z@{8FH9#b6vpM2@UVg>C+3QJ`gviD^&5j;-_#_vW3xM_BZ zJQ!=wgc*s1*dd(8qy4@9dp;{r-8W6iAte@dzNR{Nc43=EJym5KK^uSGNM{BnVhyFr zY*gZe3wqZGKjKb)|b)E^4~Y>UKc^16^Xr2Swfw zf2WD{?!P)wS1J6;^*wBKP}k25>WAeT+paXNp)^s9?cyBA1;i*cb*r#Y4k;bp7YI*~D$C>;H5VGiV4lJqTXqVZH1CKW*W*NTzf zPo^I5WWfHwJab8PbCuh!{MK%u-Mp{Qt<1Njid=CXFt7q)zcWAyQR5QxlE(M?+G6axJ@ddeNtK*k>pgE0KE+W$uV0sRrshdFn(=Az zip#Q6nOUtN++F9jz1{j5Y_2$JGCG7`3T|HTzBfF)w^=8D>wx~PyufV#BQneLQ5?}Z z-tzBm4Sc&*w=)nFbI@&FYGvM5e?xV)Bce|m`URy zM!xnID~jbKabHZ|ecqAOB(C3LT)d&akPMF%5=!~|kAlAIzOdJSg}{HsL`3(z0BZ>- zxT&kwSdBvVV#{3_f8zsCRJoD!fYK)$a2 z?+oxia7%)w)n+y*N#y!4kIU*0KczH%ZvV5f@RKV*y$zLLqTCzwYaN*~t{F_iusoy6 zQ-15fFMk>QOrN+O5kuj-OAF=x?!VUKZ@}KkSQNM72rsGLh@l2BjL60R3IZ*J5893z znJD?UH#}g81CMY@@+bAliO9S-nZR{ye7RGrPfglFXwCL?h;PXWExreZ?A}MC^5;Ta z)a!U=Jx^9!jpsIsDHKzS=F0c4y)9v`qkLF_*$p|Dh{ByVd03wGqLwJ^O6Ad<-LhTOb(eTh_3cO#6ge{#Q;%?cht@!$CiW44U~qWEAMH8`m|4}M9O7TuTu=$;umvBRuS_6oXTkY1r* zgv^U8YL8?}4a=7gwXEJsEJotv4=WaY1tWN;{{iyldl>oesh72*L@cN##=pYFQ&A5M zI)&>_f{V ze0)PW2i?k{dxHFT&LFL+$+)=k)R;dFPRqNCQ3};@OXV1Y7$m;<*l+bJ`d%ltrEpy2 zCppHJulS8RDM?zIf&w)mTuLH3?+l&4i(k^Ve%Xr15SMl*HtFQ@jov6C&$oB2`+NyT1oyzD^hfn>;K}OzmZoY zqL@t|C5aMQWxn)-I!RA#x>ONoog`;s{y$iXNjjtipV<>Ly0drDUw>3Uhg1wg80C<* zPd>^wHV*a2%`tJ+>~E(7UG$!mpcP%5%zwLVr8#~dLCt$0vIEJ){TiBTW4?<_jrwp5 zu3bh`-Dd81xYzl4%-xhQ=~4Wl<#b^g89clN`Q!rT3|NaDR86E}V>-|x-H`tLPs(dydfG3o?7Gk6xvOLjx%yq_jgpe`%GdfvY*2g^~Xc zQzs)RsQx425XL2%C4hvcc|7GId3L8^&gfXi(14tXJ=W}QWu{HZ;-Y1j&gvKbIdwWK zcK6KmCYt0hS8+bim0x;z?{<-SgTBE)NMg*)ijF!KI*OC_QCzNLC3ZYWE9hMGM_Ql} zImGZzssD=_LHdS>UG72b0IA4dApRNfI>S?4irf96`nCz;&6IPVWyNP!ia--EwV@#4 zbh&45hu9R-`k!Z(oZIpNRQeiPE3#p*pqv_g1@F;`^T*GQ`T;IHA&u%wBVQX_>q}WM ztfem@1TS-y!~_^6aNsiFE{5$`tsRf24}#0p;#nqOLV<|l>O=JR>4Q=2ERQs1`$aAN{EiHMKb##y`o5J!^p zG9l!Jyqkmx9G`4KOLlwSiYu8A^5LSWxx-yiC~w1kd^h8!Oi5z*l3SwUVvW_9iuFj- zSXHz>Y*9$+Hto@j_zf-LuO#Hh5T+LVHX%l#pN{CNPnx41ATo)3OQAvtt3_;f z)6CP@#14N6XH5B#aop{?P@h*QI8zY9T?0!Gv=&+d_WYv!=q-hL-1J<*WJDS6qF#S$ zQUQKd-*mAKBC3QQ|KvOkL}6P(raC!meq7F zJK`H$6Gv6k{1Lbt%=MQSPt%waJZ&=72kNlgHQb#*Us} z8U|(%F9kBAH(pG%KMA&r4{z2oRvD#gLqcX2OC+XK&)clN6 z#|S~YUUv(@m7!n(ocdEyaqCLymeJR~HdCc;V&fVEC~mspiP>vYe2>zjZNG+K)y7{? z2&Hc5N)W$ceL#pQ%r<=ldsz5RK!?e~$sy~>pPa|lPhP^A6vI7!!yu7sY zhut#Agv+@VH zKOPFj_`aoOHXo_7XS7o#p5UMHWEbu*A$2Bgewj!M(S%^JCucs=+KYAc#q%IKZ~I1NGz95qZIqy z8S@}y8*x761nd~DmUPUlz{Feu0%ubh&{d%%0MEk%K=@lk{~$q z-@}jBG&0lc%CG7LgcAxlKLv4qO_tu1v}rxxKnnZ;K`(&(^=ZA{U*+?S!w#t7Y0)xA zauRoqBCj!X+;55C=1~W4k4&yB@n}bofS+bDJ}?vPO@J~#!wvWr; z;G9dXI%z#&HBsUv8k^9~-Skh(r65@c{JKSa2I|s=0Vi}jYfxfk^K}EfLnki}F+Mo# zUg6WV{pQUkBVN6?%t-{C?DqDTYp8r<0sclMS< zwmuZm_35VbMNxkT-aBh+3-C?CzW<=7@UK#plDTy}YKg9LET{-hMQITO3C`;P(-Gaj!(@;L?UP)pcGrnjRR%c}u* zL`UalzavRkdy-hg)2eigr=fg?30?e$Nj)a`Db{zZMmzAyS^OOVW5X1JnaApr(#q+m ziC7I$1V7yP+R3l+nVNfgXFCkAex)yK7BtQ!Dmz0>RNUN(e-svMT}$maHLa5Qr3+(e zPQBYmyvcphUtfcxX!dGLw^|t~8}Z5|O*RSX#N?jQx+%txKk8PYEB z<=^?93zl0Dv15y=o9$QnjO!zy%j^CrBuSGKsBt|;H`0wnXDvDJv2e383@?LWUEvuu zdLy+S1sk@AN-Mn276KE4ecxG-8~(e72r^vc`uqIyHSumMlm@5k$Ou|A?DXlq+i!z3 zBR`>oLK5K_1~3y$(4ZtybV-lD+8e!cuBPPb-$f^aF5OtO4U*;E|51}Ris$So^a9?z zdxUBG=^RS21>siSI3VT<^n+ZSVUqrx82*&m-`nR$+0loinCBZheYu%OM@8-u!(&a*Nq5D zXF$jM6?AqX!f3AQ$E#J#DUu=3ou;=Cw5&QgkWH;CXX)`3{frhKg>mn^49|jLqWvEv zt{>3jU?(T0=Sg*Ol{ptOJqkxgsB~bVN6!}T+~S@mqZvd@a?g9d^-ZK&y$0sCL;~T5 z(GVrBEuYporg0%%HqJCxVBmrjut!7#<}$>@{miHG3j|qB=M-~sSuo^BprXPIpcTBj4Gq!I<(f8cZpUx!#7tSGYTlp*5if`!- zMsUZ8*m~TBadWby*u*5x$FM>E)zMD*-IvE07exy9@D8db7R0^Q`oY8z{yWKx9ZfhE z3Y{TJnzT~l2%r~9rnF+HeTY3NkW)_}LNb|fZ;@t*=OQ4CGb*|eJi#Z+?YmBj&pMdq zg2vG7M;(Vb9eb}H#5720JH)PZ^0c{o?g3nb2s|DG<@z#g{Ac8k+rYl5H0-wOY-|Bg z^o}Uci<2lEMVlas+c*3pXl!mU8krlm9y?j4A0Sj9Y!n$eoiKn5!|J%ud&tNXe|7X!MMvMl-7q*vZqVKpMlEkQ~fk(ZpL%>82LG-)Cbq{57HOXqkH@sTt)6oaNE%CM;=I8;BChs9W+gP;;LJqYhGZAtQsQn-!J736 z4Y9v6_Y}(WJ6_N1Xcy@?rF*TCCYrv5=RJiqNOu0hRq$`#?Sj6f_bx2jI4*&-0}@)g zGAR|gAtIIwjl;J?5FVRk4S*iyUa4OMhFq~|g)f<^489vUfzaQnH5(8;jhdK~0&?Ep zpL{XYGNPr2{Jv+8?CGW-RvY<>hDnb=koh9f#C~jPEr2v0+!C|7QdO1_fBMI(FmJH# zK&fZH2!KQRF|ZQn39%N7Gz6hH%F$7V#~VV~rYF>49g1AME3<&y-oPkPV6f-WXG)|4 z+oVnpYZOGi#m}P=S&T6@7d`yOktJnpp}ioliT;QWRvHKwd1$4Aa+w}CQt$sEuMFa# zL`>SzbRIl8|LLQ;rNrPXD*n{3I`Emo*N`!syC^L_Yg+(LDZJ4nzu5CIJ9$CwvCi1T zVnKNI$|6C~^b&B?Z0f;M%`9)CT;Ak<3C}DVdMuwr5v871E^kk6_&g598e(S){E;Ep zK3PdG1UdM9d^K!r(*ih%x6N5!sNJDbe=OqX%9b)NY2mbd%&s+fSi4ZAs%7{7&M0Rg zEF%Lm-PV&FSbF&1V^=Gz$r@~2qs!w@v#ql?ShUQ#VOOW_kcJtHK z)VKWrNNNZRFa3b6`P4?)JKxUVtxEkMOHlX)r2A+Q13y{N4)hmCc;a=xLXNLzMJTUm z#~s?g|B`TQhf$WaQ!tl|{JB1RuC9Qsi{q`mFz_79g8jSFA#O8j5C8fN8qaxlwUEXL zuR1TVyf(MhN(T+$-ndaN=R*10>+d2mggRj^%9LWiuz1@O?M4W~Sbk9(*FYZoDBQ;#mYtiWUxrmn+mIW! z@2Ft1?WSulxcAIw8f)@9kvIae%ZO_e=-M#~WYROpWfdQ}9sV^Sv(;x3L1(xDgG0iX zMc>P5k6WM%*{kCP^_%i-;(mBAdMFw+o`V%@hLXVH>L)}mavd>B5bMPU-WgFxL*+Wm z5~HNQ)02@aM{7}S%!5p)>#!hfL;I~pV^G|Lg>{Uf{uJ@bu|KvkYg<$@wjK1hV71qJ zFdLB(vvcf(^SX+qy?JV5h7`@o+`yMfdiXUXZAIPf-!se=kBjrUx=AiG%1$tuet~7= zj#!K+=LEhS!jspm9gxw*5jl4=1cHJeHP^DMED!6eOj z%_R|8ZExma_b!EVktXp`y93y&aq^2czs_Z8i?CVHVgXF%aQ0?nPN6SwC#88HLZuv& zbv`Tn3*&UxkmVy?u-(oad_b5v8E0PL?e<^}Yi3G_p(b%B+sHxCuxPFF z(SqiOqkc{40aMskq)HTAp>-A1!vNvQXj~!(MdpHnEd)j>+hHKVCmKkOB}|MFo*$jT z>qA<%euL$7Q{JG0UR|y2bEMp41}>Fx=gsBTRU~r(vbcepy`-PnMT@t2FeC+c;0!%=V z&oP8Y5+f*p5X5`tZ;pp3L_dpKQM7qr7U8d3g7Rz5Ji=4bz5{birCZ2H_v}wZrmTzT zW#_&LVb$;hLFsyK1s7dD&)3Z~CdotDnLOilWTT}mAu&(QYiS9eo^xpzuXr|hR%qJq z#sM!_;QJ-Tn4aE!u`E6yM`$ExSjhMiZ>-dVA9;A$ZGDQW_G2SCTJ!*?x!RWs_ehmv&}$6f+g z&{SWpE`08s751g+nsGfbX0>flQ_U-K{(j5S2q>rcE+M0dGF>8wob9i-o@fbKfPKXuTUbQ$kc_F_}FZ%MQ~2yi7!s+qIC zf2;!Lk)t-4%T+ElcLq5qfht-Mg18#wo7+IMyLpVvG|43vZkHOz(q zH1uJn+YlWJO3eh`{nvmD6$eOyI^^}-7mDGsgcn0Gt=}`br?B0e8Cn>_Rp(&#pOhM7 z>$+*Yn}fc4`!`6>F%42iD>nH#grEb-xi?{YuTF*y6$udx*Vss%3iJ|3h73Tw7E~lR z{b`0$D{TyMXL*aIya|`G3-;M(??2T&?s8LH z@bLUoy`G?I;4s+>FBN|qf@p4>0fZ{w6dB_vKHuD>p-~}mTeu>e+k6Lm{6gwd7uZi8 zhL;^(gP5JH#b||A^k6)9u|T1UTxZiz11BSpMpxvvty0)=TaL&Q+VR_`}SE1Z!GV06eKEh+}_`@uvXD`Pz%%kn$a%|n5 zcH-Ww*L2_`LH1Hr{|>->$ksXcL?Jpn3+hB_^M&9fIhtvxQv&z-ERTJjdWHHmHsx;# zFGys$0{J24a4I?~rcSRA$F*DwN|i+aFdEh^v1AU{Y)6%l_&UF7WWOmd*dcmbpgCL} zsITmqvpsSI#S;ICH}q#}YZzITf{qT=x>8W&xkO#pf)p>*tL`xbw7%IB-I+n;rDj36@w8A4-n{v%ccZ>lT5;oy*GjBVggrVcM_!@a5NfD^ zYI$k1MlGybdjTr$v(8Hc2TyhBG2^;@u<1hHR-w6INdjH$AB|>na5gL*qWtGVBlx%b8nZRhPBvz77YuYhY!eZt#Vjja@aU`KYbw) zjRb3#8Eupm6jL^cmFQKIXVuw{xi_vRa)m`a)9fNGKzXCk6t~_`_%~1_2rv zn7A7^cYcu5-xVJ1D%m*bN!SzIi`}mOjM+uf$2eF57 zFWui4)2&fAC*Y&zb6?Le>b8;D#)6MFG=zH|yLHIxu1?X^;bL1cYW@h|Vqt6& z>Y`#Z8h;q2mRRA%F$(paQ`dwio2ie;V5x;M?P8_IdCMs#gz`8=5=+y3Uo%qiXa#LFmpL@i$` zq^Ni6_z6a#G7?`}csUmTN+H&mp@h#xs>I&G`~p|AMs0VJ7*LUMl7()f4srl0+a!6c zTzLByQfk>5JSBC;3nmo2d2Sgiml{u>shDo&;^(G&doX@c4Br+^3z3`fLmk&F5-aT% zl@i8>#^HM$rTL`%t8{n9sSOT5oTwj@YwCuYKbVZy`k}WBf*0HkLt><@lcXyPgX_Mm zm!=vA1Yut9KBu1(c;5Lf2>mylY3UqQ^M}_hbVOyQ{gK4^sJZTz`HXx}?Np8gRd>TR zdU%drtQ{x$oBM((ykVLAabMO?p`URL)?@I!2IVbM;Bl>8OQWHEvZ-zqhGvSLi-SEa zib%Em27Z3Gf$=7<8p4W{gXBLB7ihr#s0$2|y6~DceA}jiM25=8q4;re6^f92h=vAQ zfY6xdSLFskZ4IRceXOa{3BW~6?M!V`(BLdoYGn5+jOe!6m41k8jtCN}QjHh}4c+R? zTGtHbS{wU}o##y7V?;cZ0PV|!8A-&xnb#vEJ?v)>uL3%_hk3$Y} z3O@1y^%YiVBa5S0@olpVh9p>zWk^PEKYm#=9Pb$XwaV#bZfPr<=I8zf3I+A8ktlbG zp%Uz7RkstWJuJ-a8c+f&Q>!5X7HbC^3`5G@-lDGzo`dM}Pp#^MKLi^`!lp2!og0Fx ziZ0aoPNIm~gjkj$9qch@u(UEws1*C(k5)wJ zUiiP$=SFWF+FrD6@AkAkzCYDkk=-2uyf&0$bv}TDlv1v2+%D7Uwp{*JQJWVltXBM= z#FbsP0c6bEytA4WF0id0CbAmxd2?ul1ed4uh#PK)QEf}<0V#|Qi$BrQS`hn>z_U7_ zFE(-zom8K`yU^Q#sD2wE>Z>wY@2nP%x^FEP4*D@{M4n%Ku$E(y`YJD1OkL|JhGC!Q z{c-qwjR|^he_Y(Iac0E}8G(=jXFQ9J^3qVb#6G#>$^10+T&I!%{&c+8&RQtZ8Rg0_ z)y`;{uOw{HDPK?V6EG;X0z-Z3LKgeo*Z2F$gQ3$aAE=coC?@PZ@%oUV)PhvzoQ$wG zsfx$UyfY;R?vuz`pJI_u9ew9Z6tu&W6Q_+KPg{EZL3rm5mL}KtU)@C@qbi(Zb`emQ zP7{G3OmHE=;9io_(dRa@^W24*TvnA9l^TtzD+Lj+Yp_p7FDWHx;a$2~UJ*G(mjJx_ z;MjWXDPd^xyp7Ldr9PYXvZ8O>6+LmYFzZm&sFo9J@-yO1z0$AXf)%fgoH)Gb2Oq4Y z&A2%rv;ITMS{5Oo@DkTKdh5;!f;Pq-=x`99N$q#zqd4p|!mu)Rs;<;qOqCr%aN^Ih z>_u$AT?Q}6lM7;&U!d_Az`e@d{566Q$i0-(E0`Q8$!f{IL5Yq&;@Mz2C@rVWgx#ua z8=j1TPUt}?cBsZ5% zGNQk!3{bHX*dvhUqM`sfbRxMp1;3k zxu?eZN`=mWu@Yk(XZ4aB8F{ff#8-1&7pV6sTmc{E$ETEQVCLi4Z$&x9zL%8|cl`;$ zKl?!;q5oeyGyvWtMXPFN{5X=}VkU+y{g0C1Tz-&jVH?t^Q|B`G7D@fz2Z8vad5$?$ z?p{X>Wcj_mM7Y4LFwq!>dzl^T54e%)do=Lbg~+>+$8sx#kW!-c#9%eKT*VrQgzE5q zhv2y(!^+;kHA1pmHNa-Tq2Piv-T<+Cg_tPQmVUhggA0HuhV@hq$Cs3MwVviAXY2Y* zf^O5%HEoPek{H7E#CqLF2Nb9X!fk@Vo86ql3yNvRF>J{ob}V3y)uE&>>`2~qC<5Pg z=8It&5v=cg6j_dt4QXKtt)2xUTxi}~p<;Dr7|DeOranw zmq^jdZ~W@-u!Sm z;v@P4XFXT&Xl8*E>QbbeGSo{B@#QzcEi2ESx$EHUb$H$%wEt{Yx-yWk?E7GJS5EYy z?VsX&;8FJc3bDB)_}ZE0y{~JiE0#dmV|PHK*G)V~xwf|H4=YIrU~rK#CB!>l$DMXS zLifKvYmTp4GtcfO*FEr=StopbRR<9QOS zN-`vfSleMs${rU-o`OwsLI>T>7&xB_`4r-DsHAjjU;1|;p-a6+QYMbXlEg4BYTT__ zS%Ab+dL1}&vr+5vGg}TWK^<7m1XoCIzxEDkdIBeGSsf2`jSzRR#DY33$1^Ogo-vW< zqsqgxu$Anl4++;4!qR&d&}+_qaK{%qEAneW-j62ZMgPbu?6qf!GECw=mxj05^K(&j z`=esK`lpSmUd`5m1P}X_0(>iH8a>9E<29dOfS2B$)46ez<*SS zKxr=}530Q(XFngwz~;qyebaX;H4B2;m#?cbv~ zz7vZx%KCO?RQ!*Q7J=yI0yp|)Q!%}R>t`|ElQlJtm5as&L(ECNDa2dMt8ku|5*O_8 zJEp&5tv9s--+WZju<=y*rbu!Cgh`Mir$0vr(USWZKL|C6&WQDuFfT4VAH8u6{YHE}k=9f%luz*Lk|Q`<=;3-McD zY3j9+6Pt|fCH9?7Ub^~j>3#ys1WbH>~1`s)9IB(~<7B_7SQr&p@(NET!8-}3q)6{OvB~_g#A?AxWt&T=duuttr z6OtwNN|c4Yuds%So7>vQclDJc-qSE>A=Qwi9rm%6gxCS#(>6A6cCFj9xbqmuA`_#J z264Z~(8^r{1{d#y=*U(@Wj9m=Eg8iE(%oBlu!GNAu#$*ddsQUyZEQm~N{0Q)ijhw4-TvNC0vHRL9uRO@`}HkteQGe=_5O zQ~TEI>z9OZC4d40Npx8Gq_`1^PMngHVT4PWMN5~ko_ zUbwI;<39uK|4?W{iHVnnKX(y)&-vA8frH`C_`r|33y^SW!u@(m zNY;hd>1OWY+Vet}_hf*^ueYe%YN9@J6y(Ao8foXy^# zQU42KIN}SU{>UUk2*zcc+&H4Z?(0F|DVaxe`@q(;MIS74Gq?PnJywl79QOwWJzBV` zGkeC^qMKSg!F^345nPfY9A%vzPQW-sgyvA3Tw0X%oM%I!aCCf6m0&-dk(z2P);Gm$ zNm>BhV0MtEGTGFLqm{z=9c_&zjSMt$#wa6>#i&smGU3WidaBEH%fOOn-SJNGHl}f; z;8lxdaE%k?4r2=EMNys+lpXOFMdJHgaN_|ekaeebb9iRk%G<=bGH3R*p01dO*Rsf- zBqu~xraphl*Ss`O*Jq>}_6dn5v9T({`P)eB<7>EP$Wy;B6PWWA1|XDRr+Phu z`E8KUTkv5O0@2^=3<>Fb{o_x7*58_|+vXm+eC6;=cBm=)vl0I@?E&oc{l*~fM(aWO zs>1|7Z0nG&DB}Q)I0s|kZCdgSE$$mql?Bz?vD1NB39O{SbtaOY7aV(u1P9joQV0_0 z56?N3oeP=O3nc8sPy5v1^zdqxmwj1W8DP5yPEsCqQiKs2d>@^}=iBT?_=MA1KpLsp zm144@fcH|~_s**5-#=;{L*j?(qqy1C@i?4uJAP+ry#cm3J(wU~TWN{w^k?UO=(Pwx z>fOTL=`*Q;iHz8_XDd~XHqwPnQ`}*JoKSf+QR-XW1O3i1mW1uj=P2(87&l7@a_n%) zyw=Sqk)>R&Y&XXBhkGN}k&0uBpH0AapN;B@gKvlvYeXMdQ>2K)>Cmqm9g>u|Uo1-f zAcpC=GDvj=V0U-@$V4BxAUn+KH`tWX9P>X4S{$R129>|#XAU2ml(!0&NBw4M>wXPu zy=^F7l=fc2Mc2>lNteaE>{X+fcku$`<&S{~_;h+qo~#J(M%ZOSUUa7zY~QbxR60DF(kHkMag?uKeZG zCGD#U4aWY&N-9Z0CI!IYCa!0!MwJZB5so`haI1id-n#ooZYnrCw7`h`qhBnQvy zlZ@tPbME+c3ql3eR1U(3Wuj$aXOC@2$M`rWX2SIy9WH4bEVBJmD-_8c^~yZ0jG%h$ zpBj##*_fpIT(E6kvkx$sel-?sjg7RZac%IxSF}s-K!fVsv_^Ii$X!pQv;-z;Ksv`l zY%k(>JN7MLbdOJOs>+!;+(1?t`$->-6y`IigI<#{uDU%xNh4p`yd3Uj@`i*KWQkIE)X{-o{bPEX!^;or=js zn>TGgYDUR0)`!iD{OqPZMojDa&jhBHz+ZlLa7iYi0jlX{^^p|(%$h=X$gd-80+X~8 zotH*``kM2H+BJ3sd3-Hq>w1;x-~UQ{(7Y0O^6|Qy?0wTD4K38YOJAbb$43*q4ZC#3 z@`J?1f$?`(8<&-w+`OxOjT|mju)rRVn~u|;!8A}c3PP4a!C;O~iVQ0CC|^oZv(~#q zn~u&fJ$*2)c9klM1dAis{f3y=D$V(AOto@Tpmm^hd8qluX3w|1JABGgt5ymPLdo1s z@m;I!xt}n4W12%X-~jL@1_^8c*gKOlm>-~SOMg=v5{2IRMR%KPj6)yY&BD)u9k5!< zgw@OY{ZkBTwJ+iB$1GUujHMdr$=~ML|EdF(;ZMkhU+tHX^rRDnMy;9i2-sEp` zZ42;`(RUo%^xjuaEb1E%8BA2z2D{tka6i~n5sU{$tq0`-J0k~Vx@L%hW_!EjZ}TU6RiLba1NJQ>w=YeI z*E`OpjnGOwC3fq)o233QwVv1$@3<7R@pn*7gzN?kx=76ERj-CXF~kk0Im%3*L>&w` zr@}b2KRD`^o8lxW;?ra6V9XEg&y)=f!4;*$`|l%0s4dy%ATq4yR9ROGnsoOl{gtJx zyxkw`wGxEeU~p(BJ`wMZv?D`iX2@O9u|ppID0=hsxbC4x#vHds*xw45uvnFPc9LE- zk(yf?T7iVIm~*uwiF&TvoSVVbeq&$zT&@pfwvnWAa7L=2dd zU|r^85{};C1~T*fU+NfFm+#?us30cVJt1zC-6f6`4Lq_<79_k#fg~TvPl`I|bD&nQ zN9jT1;A;LeWaIL7px zna}|UN9zkKikqHu02AP}Jvgq|o6FjBiV;piaNuXt2TWLgDzV$~imCV(32 zPxm{n9v`7oCX=p1@L63i73Qg_^-uZ8hx6ZSur7$5#|t3C5b3Efk^v7jMK%So%5$4H z85{68!&{wo39b4ShRs>(7T3+ea3)$wDX}GRJj?ocxzl=*AJ3`>Z z1gHR>AH^&WicB)8&rD>K+qk>buCKmH6>$EdvVg(g=&<23j%6F+33<4q>(!r(wLTJ( z!tR4gf|}8=Sii68EU`^k-fablcs5W84~`o9B9>pNI#bVMo8#%)Ma0lGs$sgu9PI-o zCyXnamgYgg>#q{CGzrsGLWb*_P-Bxo=t#-ZHFRUGrvHjt`}ZKc9Ixe${yeGOuh&Qd z^`aMeaAv#%tAnL4Z*)3|{iX#Lb9BklTl*t7h&2!ldu`pdu48HEXr*DPdQ?)O{z&BU z^C`XHkPVERF}Ei!OBGYSoN24@ZyY$f%kCoaY@`XU{iF_=UkMQ=FDg&Gm}dOLT#vvO zi~hO55cCaiRdsr~>976@vGbI_JXDm}d4g?hUx%~`x89h;p3?8L1C6mrvGiettdfdt z@+;zgeC(Lo6Kf3;_APg)t@%{~z$@Vv(#6GK=)%|~-x{*9Ny|(Ibm$ZMjWRc$CMitq7MHTM;tDcv@#}UKUIrJIyh&u#$SW(n;L{IsF^FP?e853O%&8A zEPFS9|GFv})u)PcdF$W(QiL74CRrVx;NOZ!dL!h7D<2l80F{!G^y$^<##%Yz!RmrB zg*sVg5`V<3S!ZXy~CeV82S`rXfymVM{M*tQvD-f}%2=iM5|d`WbD*v8@{U z9l00hD~Qz)2|QY<#}p)Z1=eWq3eRf|59H+VH;=wiQlVJTq|#B)y9X|DC)70As7*3L zBz`GFGUzzXgMEse0RB**w593kve#Yof>gW(hP%8PWPh7!a;J8<)&LK$vVfNoQB5luN`i4KG({dT)JB|0fZ6wNeflVP#v)VUr1{%ubzV0 zrJo**vWH^E2l%-p@}4-h>74ch4z`z&5bJF+?(BUWz6O5QAux5dYCTqr1%p<3$1kR zkBh!l{ELN8ywk{R!^E=Ug*#vH&R8Z60TBJX+qz)`JU)LgLTzCKV?A~o>AF0z zs`~nEg;PICDqI$x6RLT~lYiHD9!C=7#pi+;?x}}+Jbj`AuYwe zmfnd>!rA!(;4pDwrg~xE7~vSu z=uC*>q9f3Do0&Yrb`6bg^`i4O+ra`7eDHFU*3Q?@8rR>N_Mq=q3MM4^t3VYsFI-M5 zD4@F~TdlvK7ny8$`?8q^KBgk}`xZf19yxJ~HD|(4)~Q)ZLaBF#e+XtI#&`3e`t` zbK=tzV9r{Gm{UFOja;j{h8sNTJ`_x^ZBja%2nCWUHIG-eL8GV97MU|0*6AywRJf5& z(X_jVba>-XHs8SAJw4!C7gQ44OVH#8R_{g0*P3OTRg*t7WVbd5ey!a{83Obks<=s= zmpC#*WlrasTEq@QB&)3Z<}xT_50D@|REK{{&-A$$tAT8z9xB0Qw6wb>Fr-pBk%XFG zfdq60&)QjNFs|APnP1k<$J82e5<-T8EKt8-;YIP-wmZ$!lA@}F!zb+r5Qt2(yx3=%Bm|3MrY& ztVI%Vw8OY0x)G` zNy| z$Ck_?3%%>7533_;I7En`JuKD1?D7y_jtSLKF~F&y>e;qMy6R&9rvYoJBsThaPFS;@ zkKh7_ZUhuYhs|!Ezp3}K6^)9QOfkOe7F1Y_Sq7CXo!Y@evx=gDf{wa>5=$@(#*U6B zKx#Z(`axB(k+$84Ll2WR2V!Cj?43Hu=vKYu3h_O9PMYnAot;OeWj42{`ABHv1u zvLdYc8c7CA8Wb4{x&7G41NFUwac}5dInTJia?X~keGugOPD*f`fC5WpwE+8;{eG`# zgwFD7P}U|pU>2u6+#W}1(9hARIx`xurU4pt$nJl>84^F1P+pgULivyftj`f1i?}+} ze*bKuTDxkV#i04Zfn-+o;^FW?WO2nC%Q|rhBOtNIsQfj{c%dT)*)YmJTL4}<1a1P9qe^t zy3DN>aHAu1@NI(SEfeD}L@A)nyQWlQ$KHzd^N+?1es`%k494iIP!tnPmTwV3u@C=D zlx^Vd`sr@)5)$h??WQ~nncTk+eSoGRJ#`|7{O7m&3^p5a(1q@u{7?auQ7UD zSrG-5A4WS!HIe7UQF@30RaJkG3b#8wF?Dr0Sdhoi6ZSg*9*gJizSbv^LEJ3SZ+4>t zH$YutvfklKyls$EuIqmy(IFV6N`fP9E_T$QhZH8=#K6isF`ZEl9*xN5|IF_bQh1H` z;*FM@0EmjJdecYaNPT2%CNcc`vxB|mu}MPZYSu!gcVm4L@xlIg^u z2)Ots2f67mQtcEimuBPQYwXV`rcYZ+8{KgJSI`y9!SX=YG?^tg|8TD3gQn#pF_c&U zg*EJpd@<^>2;_{$5x2VQ-t*mY?G)zf_Kk#S zR~%TP65-Svn+&7=z?}=_NDijPdp{qJ=^$f>_CE+mXtc4MToDO;Xw0KXgju7Wt@Ui= zMIZ98@8AWTvY7ETDNx^BT3rk_!72k+OD)ZTkhXsb2hHSfy|u|uU{j?9-=cp9(Pui= z13=oh7;-`?6q$(T?kXftzfERWS5e=}`fg!GO9hC#@g_~)hAfW`}+ z@{w`20f;s!!#}M9k?q^Ha1CtckfwsB3$Ar4DK27U(?#pabU^-MnyAEygK7m$&I0dG zL5Bljs#fyXMoziGe=uZ;HgZqC2_z5hP6+-6K1^oa1GI&7F@l;l<3gmJ;#s#`XUFjf zW&JmQN;6@)sVS`=hl_H~4s+-6x;$NKHrPghKtCc{xYxq^g3|4-%TF67#gx#gO2{ zW{V|`8Y+tT^=l8hp5@`pSAEt-sMeBTWH&`GDojj!SaYDlJ2Jyn>x$rezQ!%Bs1=x@ zN&SVhGBaj_zyPM@px>jOTA!cl%88P`P<`P|*cKKu7m^-|-T0)y19Rl^A8$qbB~;6yaL!-1zyk)0d70XXB zeMf(}C7Fm&k47fL@a_%Ds5uj5a24N!Gx^-6xXbxl3F4i_IU4N&@>gM_!ZhDr{m}^6 zpdIKx1HPJP%^3Xlg%|DRt|*-#B-Yv^>MJocERdS=cznzR(yL4vuS zx&kexJ1yn0zfxYA^h=Nc4B#1IIjv4{_IMV}}^Be3D$d zmn2++Yj=)f)$kS;b1o6tXRqK>)T5|lbO=nk9@#r=XYraykFu%ryO&oc>98T6E~F$N z_J}LL{QB=@m8lx2;w;t0T0OdXwW^;>L;dAb2cmAtdV1}VFU#w%zv<8toEqC#X3uEh z!xnicf(^E&KHa+)`}w}A(~8X6%;N&P_0FB;yQ4JFv3f_x_pGw+VUP@s^V63-ROj4Hu@=YL8sQ00Vw1 zPvLx%jx_@4eMPUrUUq|HQAe7r#Z{JZvHp}bGcex4c)i;T2`u%_AEZE)r?23qEA~Rl zHXsl4OX7#}h(0aJ5~Mx3P3J*aQzCIWt@{yJRHJthY^VBVt=X9%1*f^hcIl8$ zNU(fz!rfR^$+wx8)P6cAt+S>14b=PeBeq){jSQ4bs8eiChoETP%10316Wu?2*`r1P z4-WBc=!N5ZaQc-N%&#JH{k=Rm_wywI7-=sAaUk3?S?tBr^|HV5|ESh@$)2X!@H5{VC3Fxs!_W>g=aoMEpnA z&^47;KOZvuC{}58H-VTV#lLm0f0DwT%b<&>W89?W<}Y2{L5R45l$`uu+3gE>g)%Pv zr{sFQSr^^hD%mSD8m0?F9{5$~7r zryxAQ>ew^hq&_}5Pg`>fJm>kk?In~+l@s#6Wq-z_^p__MxxJV8ejvA*#6+wt1C0%d zrc7_7)$V0vh4M07GflOQ6g0MSIS@l3@FqzHP#p6ps84v3jE~d`2=iJ&KGLiMa2r<| z7Vi4MPtFcUF4D`8o!FsG^TX6<))vIF;e+13V?6aHfQfUkmTJ?C0tmb)82|zOn5lv+ zr_WKT*82po6UX#&P62|=5-(#F71r|n5W&onteP9p!>fgvqC5`OrDEy80K45_++WV1 zrR1YPzL@7CaR`&|sJez+b{q-f+>yFVKgK;QL#~_P&2nG{692=qHT@J`{K2=A{l6g! z!(C6m@5iI%OmXR*a49mkkIq;3K zp2|bY+hi>4FqHj+RaSJj6C`jvp5%Mk3u*ep?DCw=9yTyQdDWGu;ANHoaY*Kd?=3=7 z@i4FPwp(-$Y~$Kxy=$M*ZrW5uNHfh0VcJxfzJq*yM%`Bdt6bz*Ry}{t+c!?sYKeJD zI}D3H`qJ;0X|~a{kOK#(kR2(8RQQYIyC#%7G_b8Q3FEQ~qupBy_PFyoIxTMq9pIlM zTJG5K&}3}y_0df)&#!tFq-CTS`FKXEaDQjx!YNH=I;{U{7R>0+fM;pk33G5fXZaS} z--jX8!Ds;aJdxvuz(%{(?WhPmYr#V)1H>3-o$FVSJq1rruUJ6kt|z0_gZCrg!K@ga z1*sV?GTiK%B2UL9oTQ<=7Uq&SH1M-8X?TA5r>hiqfe#HnS7D*QJ6H9p|5t$jsO@=q zKYjh2_F;gnUTQOpVHFcnZjcg4K|#@p&5eys>aCA9pu&)}hhQO!1FB zEq0J=vG2El9b=5a5S55%KV8GHv1x05X2%u|jBGDt!f)jG)-x8TeXeR6oMpgJjP72E zqtib1^n`at9cB>$w1H7}f^$+(lM&PYX#$C<Xhpq?b$n1H(XlLR(YC!Nb2=<1%rmN}(Ug&)K` z$F*u%v2P6lVxE?$DJoVx_I*oociCT2s~hoQR^C_rJSK#wuwFnVCzppM-PavPNf(#1 z88tYznf0tzkJr24wROKS0rCZ)Y?Q`$>W8HhWDPK-ad0i>XNZgpd2lAwst~CK86&~~Xr}z(P8}ho*FC6nO=PM# ztUvo=APTI5moR~b2RN_*QlxH}HJgc2{a!*}IEqiaD~wP|KcEH(50ni@fZLRtxq8em z)Nro!v)VNX26J2Xcm0R1Shy;DtrruT#k1(RwS;5`ANK0}H%5{XJC?p%xqBB&DMC)8 z<)aK9qjWj!EF8n(Wnm`U(fq|X7QTlb)XsPmyLwjNu$q5Bq^?7k;l)jWv-^YoA6&%> z&m2CPuIStz2`;P9MVK13Vz4A5nT!K#Cmau??s(oWeC;BXFT!Teul@eNWYhlI7*(WF z`M5gUw(uAM{bbP2JwRz>e2?o5vkW^g4U(+;Vx6Z_H@a36S-XM28RZW#gOE#6vey-88=US{ zw-ATcevJi@wcnIu>xytd^Jv zJ0+xb&p+lR>Z4SmkK@+OPJ_%NrzRDD*=~Gou;>cl^lVtfB;o5X5-3zc8>XGKG*(Xn z`}D#&e1$2Vhi6Bf_4(y6pU9qDlnte*5*!h33Mp=ke~6J_o*hhc2?$YwwQ`#_olqQ1<8gJq zCa=SOWQ}Xomo-$CyhyeuUlI#aO9BwA2S=?OmegH_9cdnMd=G0(`&F~tNJ;K30pPqKF_b!qyc7tNN-ibs~_ z`~j!{Aay0db^A%Id>(v&V)%bCGtp(C6t}V24k{uoh(pHx#YH(F*cOwextuU@v9w zzjgQIs3;Q`FL`px+Et$2*9ikOh^^6KorwtP@>LF(3j}3!AG$HC1gb@{h|PUs*sbQK zlIy2~-oiLT9h!QDA-l=2|EoB_LzcPKi|B#_iu=?TGzO(1`!U}8g(ax60u`#leR0A2tIqaN?t`WX9E#N>{FOXHwrQ6LBa3vr0Y$*C#pAJ{5%hc^wWOj8<#MXU0QKhUvdsErcTT=XsAc7 zf-st~Z7&5i9m}H{P&r9{_kxixse^}YXhB&J7`l=RqcUwV9a@~&O_x#LDNqM)0Qb4{ zWd|g7t#}i#=}4DCmuvE)u+T@TB!sqDrf4p9fq-EdYv`Z@R7jY4W~!7-F!kh|qJwr` zX?t$q=E(orc1vI;Dz|%rtq#&oChSGTBKK^`sz85VvIu7d={ZnV+gdn2t>8&WXeWUn zdF_*9v}OT)Vfb0|4mcWXAF`@cJN<7d}VExox^3a@DI*lVs5Fx8?3 zzNVP<%PZ!kX5|meLzqT=9B}jiKTF@Wi~yB_3#wU;*i0n^%YW1A(%y=*9|5wb4NR`@ z%Oh9oEr9B;PpxkRJ$IJ#ML90C&&241S15XeERGWYb%|BwV^L2D@a)TJML*6jPWO2f zZ%V!j`o;?&ub;1IR)MMH(%u223`??4c_iV=i-2QebL|*F@MWuEK)w@O_FJWEDA3VI zM%N>fKuRDmS|J+5q#3_)P$+GY?AHjGd$(sJgQTu&&o4@V8Mk`~o z=)hYDF(IAYLJxmVeD*#-eQV+FhCpB;RRUNdwaGsFRGZb<)S<{0X~hMdlH0Jq@j?=n zD;Eg;!hs#^$TFdqaQBV~HPcj8rzx1nj(g!LX z_MkcpGH{VHnQFDN4~K%%@9h7bSkt_zAln>o;T}@s=9c$EV53ey%F#MH#lvy?w)}XR zKjW=(jqnB2as|+i&UhLlGWT=S147~EfV`=$-7h_8#k(Tr4iQhj=2iWr+l`W(&05ml zGNOI_$1(RnMI?Sbamw4TK!X01mUBBaP2ko`jRtr5av^5Mj8Y{IdTbT<;Qc=o44)Ii z2-<8?j5)WJAo}p)-J`3H#p-4xtNs>Qlhp5N^XoPd?0^oez@uvuAz^FlJH9&r3>MUe z2@$3HT$X8uJ1dncAG>xbtZLqHv405KBBha+BSU7$F0aG&g_CJRQn*gZWJQ5Ip3)47Mt>Dd$68@{=Zq^_UW#qV$?$mxRAG-dG+CuDSdIca=$Dn=%;y zl9dnFCHJoN5!r%JXR+TiY>SHJx-P<&X2;*IlDh9niK@(3ra*cSANEfyR1}8|JtDB> z?tRq(b+pJ5qA1TC(`F%8%Ls#<;ThX@CLvAH4^a4 zkjQGpCzxw1t@FOq^X*vp-Bs8&j@aMl!>IC*kW~2@z05? zXQ3h>jLO@)I@q6hD3t<5LE+tsx3#O^q@|LCw>{Ed5`eBIR6RZ!pwdd)`nuuq!?~R# zXE1+6IUNl6AdxG}gS;Zo&~T4Pi3|tx-YRpON|v-;|Fn_yM;Xl`8Y2!EbrL z!cxDJjEbWeElnS?zmLN~?vt}?-Odq#RRd$|aPt0F5^yGG1lU1XM}=G9bwLtiu?g#{>5 zR3`NX$z%gxGhnCUZw=G~>{9}yFBPm#6y#SK{77j3b)zN=@6Z}~zYU*L_sE#y=57%w zW^6Sml06Z{(()+BLahUOW$W@5Nm)#3`Mr%3ah8WEY0M@EvEiD$NzE$JIgX?8=@1WB za1S1W23T+>^B?9dn(e|Z1lo{K=lAWV8ziH|qB0(|sgvN@dkh~nL zSw>06%qo^fb+0IULYCgXN+QLFhMbjJo^a#tWgVN1fLr{Xr4j(2gW;PY&!N{y4@Zlc z@qfYXI!~^SC@HE1rsk#PgHfjJYY(HP3yu2&f_2wo!{Skdp7d0AJaYNmm-0Fla){O{ zDdjHgET-5)#2k_$%*=wj4{%xuXj7g-=Hv!Dv&38GyS(n|O}`<$wjejilB=EG z1AqwGQ8}`62cvbd-)K_l1{~sL)1*rbTSe>v!PMZIG}oXzQ-(;y*AmyF$d_!SxH)+k zsuxJw!&ZH@$rcf#{cfyQlwr;!c6R|9Me)b+vta2@ZJT|KI%LQgwmf95;Fa*t9Q#?z zm>@LdtU;BeA7xaK8|q`F6ALTz#)}JV?^{Qc4N|LvdDqS;exGT zFLlz9l`^v0TiT%n08l4aJX0;|%fYBM_u1V41dJw+wacs`rU}FOz7ND08b#=9mLDT5 z9L@A+@NC{?#|6~Q_Dm})ISFb-<5HXZmFzuGOB%O}2DBLCoT)_UIB(idTaSdMLvL^S zw>R46%0&*X<3?s049m#o= zJ^3HF>0A9+9lc{tYRx`paG!bhpjkyVDW0APTmov!br)zaxc7P9zTS5NtjXPy#G%kZ z`UZ!%{Ts3NLdyB=R7uYq8iaV1L0askmsyvwpZ|JnA$I_kn5o?+#QPS4sQXT#B&i1Q zt`sYVy{h;wuNUwxHyXa?mHH#6(AUB-6eUkFc+NkE&$LYiuUnx^1@YqPSiTDq=XFFU zCKpuV8NcrSyKce|`@qi{1>_P?MlrmViC{i-EI+qsKMl(3b#UUlq?mi4Pxz_Z8iGgF z0^$mnMIcO?_GbdEL8WQsOX#)R^A5v~Eicqlg%K!qxDlhC6}(SaV>v)G4gw*Iiv?0q zA<|g-b>5QM_<1;01*uj*6u7GWvw$0Qe$<@zh2wWGen~0R>yTsM3LAYi${J|)&<8?% zzSu_sH5wj<3}6qL=8=UZX|LxTxKqzu<_W6z)~jIZkDq>fknK(p=^v%I>x9|?b(Xdn zIeb)F_Y-Y~eUBAOCXpAqk^fPK*1P7b4Z=P@Fxu^%?xj6+1C)JQ4;RoaQt?%Qbk34ub_ z;^v~#MQ5?<1}DQ!z4u3?QdiN<+S}mT1^^Mw`RTPf;R!1Qhp60P3QO|cV*e0yAKLJ7xg;Ozg=rl%XbiGs&2$IX2Wk)+H=#`x|)8XZOPB-yO z1H5Cs{qifsdu&U)cu6}*n#dpe?5)y7t*(9E5c2|;{IV&1&hKEc(a_&DGn&${ z@ej#DZi@b^Nbj02r zpDx0O3G05)=J6c1Uxk>UyY-W+%eHs!(K2Jm6ZD^Od8P*A(F)y^;T9%$3A+_r&63B( z4FS{1ALJ6q!AeJ!-6jO^7|Wo}-8B(g*lS+yP^)ui5)M!(BlqI?^U9xF5$*zq0MKEf z?Zb;=$<)5)$2FuyG-m&nlH+yPDMw61(?V)dDRZLOGRm58EZ0D&iC-bcT293QrKkHw z!tt|~?DlZB9%z~jPa)hiGf!$E-{BIjqS?dBb2H-t(Z0AwG$vKH0I!_}!+B^+>AE^3 zCGSx!9>GEd47jFqjM6*XL%TlWwG80YMM7RDoNOe!l%7HnfS>mQe+6Rxj^JF$f{h#e zLrJjwjdslp@#ovqn)W4nWVhefYJ)c(Rk0~xpQMn^sq?sI^6)PvO*s)WGjw^_+C#KH zx^l|KPf6>70_yTwfYhr4b}7=nPwbQqNeIvTa#My}T~>SXgPp`c!4>J~XYTgLbR((& zq-_Zu6|t-9+fyDQQ_NA6B*o{-TKSF!rwwr&Tul05r!V!u`LQXf1$#qI!3br^$ca5~v4E z=J#h2uxQIo$vxoY&dCtEf}Yx6nugO|@E>Jvp)*fXvD#N{(3}q-Z%l5yElqC@9a^k< zB|*`ujTUaOk~Y?oe*jZ>O2@9ABPXQm_gjd8eBt};+N3k6V9{K~sJ1-zcaE07n6XHj zH7*8z)NA-5A#DbmIwIl(Lf{&W=M&17;b6+5OS{R=i8zWlmY;!5+%xf!hs#i^cqt3pmr43k&lNlGj!`B=0hxsXLnQv+oy3a3%m$?d(h4 z5?`%B)n~_uC$Vx23?B>UGx_F;2#n(HERm01%h|zwE)WA3g7D3>xf1=IrUF5Hlln5p zPnC@6oW0fXPdDt79%jnPXL%s5*d|yDD-)+gTo2}o_nff2{;{>#S-%!knSzkz!gMPG+fxeD+5OM$WRaL3 zQGV8!k#Dw9WnGADZol_C_8aOx*y&Pd1{JIfQNJO2E;tfaGB(9$H)`w(=D{(!B#I((dw(wp&35bi zwvA0Iw~10p9PP$9ZBN#6CJIK-6_qhFreHbk)(2kZVIBn}gVmljr$)q$ceSml8uirU z#Db)AOz`4d5Lf91Ddk|kv39Iix55Ut&#(8b-_MUWc37{D*gFKi-EONNb-ol61r!{y z+va=Fc$0FscUBy1L?%0INasS*X-h`0Y*kERU z9+g_{*aX!KU#7gULJU+i?pFWn`WIVZYuVdIU^VwDEydF|l_7H{vxvh_)rQh8U&=|? zKO(ak*s;QmAuRiwJY7L*$dEWb0xL+-0(1Vq2Xf6WDXprt_Wl^M)W~s70BBvmb%KZA z-A+vk85Fp_3`nZ;{une0f@?e-h*8wf3f_o>w1WDycgP4su;NZ{7>HmrgGkQ?>Fd)0 z`D&M^>3{z9-7KX6Oe7Qv_k7{nvfraGzt&K&ZQ(o+T|-mE<80Je;HW&ir;M~FvIYY` z{ku;*-n)k+5Q5Wv(681}DzZo`MZ3&Dkfx?1MAwxPu$gi-AS-7x4yAK>jkRqX=5yHX zQLH2k!m6~9x42U~20$XUsnXtw7v69NJe z{dy8mT`DO|TJj4EsPi8-d}8UrRh}a`B9#dT#Fo5BT>s-_%(_0DrbN88H79?Mj{eTD zC3+&2BBCzCw^n^#o>EHF5Igq4uXdoE;eP|6i-op2g@U{5J!yVR@e4F|$F0!=sUF?z zHO%;`ift!1RPtu9Pd;f)E4p=gr zf|R~jTUmJM%dEZ7>MW~w8y?uldyyvRQghP#}sQU3DMR~2_-jI4dO`H>V~wd4t8Try8yY? z)+sWAIJy0V2llllF{5xsWFMjHmh&O#s+H^GwsSrRDCmVv_?;~=2i*_Dw^+{2LN!VX z?XYc(IcWo9=rl%cOCQu5YTuXg0dpSfPx%8*!?^|~AHSyjHf>EGT=2@ylQp78_JnN` zb5o{e%^E$aWx!Wxh%#+a2ZSY}Ja!kxg zxuVJF$lA3WD%$YRZZR=!2ey5)jc%bUv1R2yPQV2l-ep|_nCcs*l)0DEfpXoyyZ=$C z=r50nUh!yl779dJ#F&kpAx<)apsiYFBn9ruwEw8&;WQx>Lv1M@auqrLhrW#QywD0? zjYjZ}{)dNE+yeNiEavb^UO~mQ`Y-fM7V{!$^HJTDF}t6;LyQRHf+^c_T9GRWJlcv> z<`K5>Y5iOsPsb=e8BCMbYDKNmL?yCuo#N>X*uf1}36BtzY>bs6iDsgbgv1P?AX|j)54I@H1IOd9$3veVW`}x0*3kQp$v0$qbAQS9zoc_LfJemuhXe~+G39dZ zt7YykZ3UXUcQtkdju{DZ%zgp_+eE>?H1&=WoB)Y zE+Ae5=-wd6`Q$&aFc0>i6Vlw zW{ev)F3W<4<8;TD5Ch$n1F9TJNsU zUeL*vElU%Jb3#}S+j>bg`!bD~?l)qJQhIQmZxpW-xN8@G%=G^HZSakhd1GSKs#UfP z?EqbN*5{A@(gk1!n8$p&rgE*jq5iqqZ(~{BL@ZjiOqr#sUWk+o_YZ!tWuxJZj>k`P z3%ul>*XL7{(dVmR1Y5_f1$(j_!z+tEwt*E?md)B{@jV+I5%AU4qh^>+iqGCUdC0^6)H79bBscK%4`3kvEs4$HFY@~VG}G1MFw7zUk=_AZKInORn=eSjiSv$geO#YSA19ym8A`C+l+$% zohmHsWaoA}2gcS>z6F@FQ17)Gr5{1-sW?`;a#8HKAi5rt`Qu@zL?eQr_!#lxPiyf? z@G6qFFZ82iaYhRH=a{mne?!hBVlbdF8k1Oz6exGWmky(Mg_xoWj0E#IoKDi>sptIfs+p2lnGJ(iYC z*@?GXi_X5+GI)#78%qdylOMoG{4UGN5lK9Vtca1 z;Znb%?+;}9A}0+KYw`+sQmv~pSi#z|&okuyNEZpTO$nn%{hQP>R<&wmLgfXsegkari`D9Lj8X@L^Z}MokT;cfR;k@XNPt z*Ak%mM&1v)B}WN*%Q_KriPj7#>r{#vkV?O~Nr1retZX~Hhl{zxqr<^RaAA&$(X8z# z@=g%gq(x$rjxGUG#s`CRW1rrfDCc8N9sfK7?u4U2ue>Mhup~wC1~Ch?SZN6yNzj;0 zVB53{Oa|dMyN#lVMq@Gcqd1V~U6W5}UKoT;KDfli_%XY9DGe8SodRW~!y?+sy9Mim z*eMgTSp|>`1A}}zt~8iI2Cg%lwo?@ctr0HAYZ1(z=3CAHH$(9932@k0fUSzT5K=P9 zXz1U@jA*TIfSAFHh6#S)A);E%6rhX+;)UijOARN6hc!c1P5lqFqbR-p6*U|r^JV@u z<2U=pdW;IFDY{6012)HN0PDoO>5RCQXfv#A3S8SbKFX zO8Ap^6aLkUf@EJjR_ht1wV0g&9yMS3PhdTKc03W8t;vyvPc(*dJ@p(cvm^-~wB9Nc z)bdbP_#|Yn(P-oEFgN#(%+Ns07Wn9kvuG}m(^>foFCGT>-Ke~BnB8K%#pQH@-Toj1EmPaq+3zx~f@LVOvwV?l1ihL1K-GpzFl zPmy{m#6@8V2pU97zh6>!Mj^ZO&jiL9vOLh!dCX8ma~o7nS%3|JIzt4^s`>$Gb~JKE zy9w zPv|nl5d&|RhJ)ECqwftZ4ZF5ljfJ1QFefO)yqS66c~{vq;c3&b=D|CSkGblPx|Cjk2x_KFqEnfaPLgx)RiE)m*}+&$JZk~TEi{;gGxzRYRWuDj` zr~m$wDgCSj0jv$85gk0#_w(~$^0>pBW(7e0&?WAi@5>xf9?dE~-7 zsMio+w0B^!6Mbhfvg58h1@&LJlMMA+7?Yo1)`$}{L~A3eSTRb8cyr7v*?4=IIZs({ z*t;&?)o1FVts*r7!FdA@?6to#r8hgvEm4L^@vhThqXK&zi|a%b&4v(o5z;^5`2HaJ z?fRb-FP&IsAXfFN+S*PYCFzGJ59%@9EqKQb#}myST7X{&2*}&ST4hwKyxW#A+tq?0 zr9g`n`+}Y_^SY|Hr>#$qZfFUi^Y0}!FEcaMn%bLt(*>i;|It*iVWTjIBRuICODUP< zsbl+W<~e5cZu%fuMXtTn8gbJF>3znqgI!!yoa}bfX!x{{L~d^?=Fbl=4oECu7jKvV%fh|L5J7s1=3Z7^;g{=wv5%&;Ii4G>@Dm!YTp$ywLrjo7N|(jSn-BQ(A~A*Sf^TQ%V*H z-MWMxM^E!PQ|2`22m|YEgTQ&M%Dx)C7Q6KPrA1ayL=iyARMaodx^t-faV3n zfMZ(a!5mHOUMJ<}MPj%W{Wt227TsZI4!p-8GR1~XR+ucEB`{y_Ls`8vRqNrYdojwe z0Y0xpJ&wDcWl@d3}CsJ`Zi-wG3~2rBmyjntwH~> zkQ&K1%vO4TdgqqSRm|ci!UhQv9U{lhP}s9sRe9ow)&*UARJ=y^#bF*cSkN)qHO-%` zm)4v1qz|?nXsGyAQe#wDzZPMy7EoIvxK2H=v1(b$XoqbFVed=lw7Ry5*NwQQ|4ZD4 zO<$2l_L7FmPb)Icn+2TG0vf8i8tEY-&HUA@6hx!rP;$eY&a|;%oHpqKg*CI9J{s|d zX4>|s$FwRYbVKBN7|Ra9*oT^pCuq8ZnH~v0Wm~JNKA`dufN`qvF%p((C#U+k-ZWYE zi$V1r4GyI4Q}YM$rEWAdbaX^Bk{#xTYr2|VyO!xutlK7AMl1#EHWF?cNQ?ft$0V`` zEerkUP?R*V=JTyBVGjjYwk1rS{yJ#3_~^vEG3@tYErbY~VO%9!Olkq!)I77{XrG*x zQ)$KI(|+fQb2Lt)6CJ){vjBqp*tScC1!yu}9_pAxV_Qk&yj6sC1}Iv%XguXeb5M?l z9(-pNYe<5ROGtSqG0Sr<-mr3eu0=M{#&TNa?~p4QW8b}w6>W)K%eE@LZO2!RuKA*4 z-k%bb)ZXmVcus#biWp>z;9XN1dB>%F8*ryupEEep%s%{+|F9 z^~`@kZd_|5;W~@f#z#%fBmOL+c+&=2!=l9+d7#u`f=RmRvcZ4 zbPYv>iEf@r>W{WM=i~P8%g-7Pn9^!7SgkofI(x+UuG1}gR(k%V!Hx5LWiOv%kg`-r zYand!L9D)j3sZ+JE9XHv?ZKtly0rMEj5`dH2bq+~&(&BZw3Ag1LOjIP&que>X{lL z>bp5nf~gbafG=vMG)`ck+inu`B7pk?38^C%*@xn;^-0zAI)03(B;^bwm?H#8wIY&2gOb&-^zbI6C8Z zL;g2HX24yxq4A1v@tjxdb6C6d?Tz$s3ws0vZpem`4wEtRUyMcJ#PF`-s>F5j0D@s0 zWQt1+|1!*ZPm>3MgJrGkX)j=`hkr>Di1cw-v)AeBIPc0*;JG#bCRed0#Lu`CMQtkV zRzMRqj?&!RJHrilh#VVJ8sn#H6=3zlgoeQ^KepYQ+4G#a$I&o5?h40v8e zoDXrlE~giFdG3RTO+A`9%2>YE9V*4NLHc3`aA^y033&AeQLyzh?S=7UN2e@#J1LkujnN@Q zQzAZi7-uoIn{h5gu($hl5mn|MtN~-Ru8TcPa_A~1SdUH8gZPy;go2-yQrlW18&QDc zxzWK}W39bHE*91w5M3xr-d}vKD`VgXvB?MRFeN@cu|A^^W#L!{PRF3#0CD2+Pt-r! z@Gnd#-=-ScFZAI2nXf^Ju~tQK`vX5d(Y1D2gc`4j&lx z*@P8iR~BkAl^*_T;d5%5 zDk;K#-9SJ;)x$DVc!#QJC-|Zi81ZZm>FpN>MIvt=xCS|Tt8v613d z;YfoSe$Y1dA+HXgp#7dT^|bu+!`vUreE6Jd6O{1`3_#9E{H4kV)k**?QDvEn4M z>|lbjs>Rgpkg=m?;=qdeAk#?(A%}(^Cf;#ME)Yydy1Wba$q-E719+VCTzTb*Jh2O( zdu~^hLpn)4z;dZto4sHFB1*gyx9w30#VbuJg*gUO|Jf`?VncqK9?{3Svn%UDUYt`N zH5#K8qlj%{WCG=)>5%K3N)Ea8PPQa}wB-}B>%GUWkECL22ct3?&#&GR*my?+ktm1* z8suYaB0(ND#X2!#)+JfwIo)#X3PA1VXx_QnKYavPZnY*}|1c z*rdqY+gY>I*g}TtQ}$t}tAwm5(KQ_LfZV)bDe%hoWV%UiX6O-yBv%_q*EulNVsU}x zRoIB(=C9j|OMC&OnhHx1B64P@X}VH8+$tXcTjecTr)&kvzmX>q*IOQkQflj9Y=+ zGA%^vP4?&{6evsVtsI0*74EF0VUy3(!dHh5h3GzrEi)>f5<)PF5u@?yo~wNEeBIfi zD`rnDpQ{*-a}@fdUMjx8eYdYTn1e*dy9fSof>v%NwG}PN96q=F3!4vQ+_kUP7kTQZ zn`@?IJC6oI)V*wIRGbtp8_z--kc6X2Q~$PArbbc2P9`8k)=@5iY1bz?_d zlyYT$x!F4}4ui&X+fGptybCic<^=9wEEu}ITtx8H#X|2?PsVFR+LY<;ZX(BC;F;O zs<&1h?YPP4O`Zn6jQQ!szf-jJN8MoDST5JTY!@9Vn9g?6DmaU=-pPKW3wc<9t*U~! z1EyF6Ih_X8qfh4EcAo5yG-Kq*#v&Tv0P7$W`>)UwV_oJf4aD1Kpqkg`$UG&1?3sTg zmHlRY;v8!N7UV9(D0=3XDOuX@5YykzQzyJ^P1l^`cyjgbTC!f1()w60zns2tK7H5wT{DF4K&P)| z6apIlmVK6ad~23zkPJ>18z3K{o*Y0R6sg2b4TfZ56hK)xhs`Dy@pJYCiQS@FrNb_J z-jiuBn&D;|k{pGD`KCPf_cM|&P>#L*tFLII*lJ+*t*lo~6CZ%D@=3hfIZ%~r0Hjc3 z*Hv)xUHWkRCO^qM(`g9GWd2mfEO+w369>8<_c^nj#hx@`VN>{zql*Mw|6Ag6H!U)e z-mqcYNDpUKFW+#6Jh;`R%CvX0)=of(_Bs{7=z#b{O5u-_O9Q9^XX)6=Nc=L|zU4eXIB8iS??7v{wZCUf8J&1eQ`HV0`IxlFi;N$QFX zlf)oKFdi7+qeVOt9Cn_{nrz(M#Ywja$*hnFRt=QQ=qx6m$f$1-W36dL$t&=9*PiH7 zHp^eo&%Q%y_}m$@%h<=9)fX$2cl!`<%kJvN`4?2R-b$9Q)M&|dY z^t0jQj-Zx{@BxL5<;=hV+wk9Ij`ASEb$bI7-IVXnwc}bv3u!#2$?*#UwCx=+BPlcl zW;MCQ{aCFL260nS%IHmw>U;LGh;>3V*>=-5TdC_L&$ia7=aO8v17xzU@L%Eomqq;( zMCnluiHhwdEbLEtH_b#5fex|&O)sss@SPX0t}n#Yx%-bm2F$sE>8K>V)uVVV#aCqW zOS_0Pvu}rFn-Nmvd#rm1U@rXQ+~`;!E3$5AzxBK@JVEAeYUEI2?AEm)k-J|%+aSx$ z3R=4aTrBXv>=C9;nGeEcd2pB$PsrH4Q(M|{>=%7S4Z+dkoP%-=^z1CJ*FLzUd74_) z9UA4whH#^)-jX}F3oW2m>9>AsB^TMt_@uGUapk}xCiVk#0>fn?ChBZeBKo4NeW{$< zt1FLWJ?k+!C-DPPmqd;j?=g=f5HdL4*#a-|n{iZGxl!nh-fU&Oo6|SH! z)(~7>i1~in0Z~;gUat0ksbElNJwXsgbD2yE{ z3LmQgat{Pul?L?HU-&Uby$!xuyC^8Ju8)AKV7L}4N7GMElGV4BK`v1l)?Rua<7#@g zADY{$ZV}AZ`YQJVB2}!^ka5Ivjc<+>8&R)(YDY;R2yS*JgaB#ovQ##40 z)5v+Pb2@Sh9dQ9I>Bh-}tMyWOB~`B3X6kL-2pny>(wG@d3icN3ux{kD(!kAz@ZxO4 zz@JvWC0?$a50^+T8=i%Y7tIfaeK3@gG1>oyA0j-LB4kasJ_I8z@&sSic<@5Z+kQHq z)SNtNg?0q);YHn%P`_ErodDp$UiC*b**34Z#r1eNjiucbn#HBpnyCz^q}0PVwwrkr zSY7}u=h;sZB@w43W7&)nnblnYLD9_fOc|<8c}r@;glO|pq1;dF%cIetE0MpiDUY=5 z>YEN#T-IvudYrO`x0F)rTXxsc8!-+1%Q{4C5YnjC2UhN&QT3Y%`8>~>!!zwaZiqh! z6|vlwMhpgySyw5VozJd!_8k*xKJ0BDWkn(*)_~U~noKR!*mwWGdqbG69k9o4rsEq? zoP8_czC?l!D{AzxFIHbt9&zVhsndjH+a9lfB4$Z-oB(4 zG$61wzALtuuo~QlRA_8um^0|a4?=4js3yc@Rg`Niv|g&loc6>Kc-9wlX1r;xg)Z;V zJOlDBN7c5blozX-=5){9lu9c-^!OR$y-Y3$kr8@}(j!G2Db%2Hbl#3WwiPC-X_j0K@&R9fhqwC2ZogJ9rW#oOMH`N2;+F( zT|r}8js0X3x~inmKTUBRL_w|Z2PHQ-2e#z5P_gh3W}91n&H1WJj+NRVpR9IhCLxc1AD_eV zf9vM2!PTh9=%0;W;}q~s<*=?qbgkE(1V=4zQFlg&u%|3JMlQ{gm#Pnw z`;adq!~^26@*f#kf>L|4P@nMzv`hM!RC^UCt8tGBXff{azA#zKs8uB1_`Lj5${-G zV9Qp5rf)|bE;UD(HF)nBKU5fDQ#D4Dayn0vo^_b>hbjbtn3t05d0kon|7!hA8F60I z^R)A`IQxN+F%QfOBC)Aybz@#?9|M@h`PZe&8&k|op_6%uKq#m6CQLCxw+B-T(42@X1rY!;c7!)`J`6&uNnj1y9`W2Y zRHcXkumE|UO`cu7%;09ik}}ate<6){@^q`fz#K?RlyVlAwJ*)dBK)NADpI67bSqdt zX~c8D)l%#=(p>?XG+Wthe1;rCP|AVK+H1AcjdvNqR^6SA=)Y)I4;hbKE!@ms%vcq- zP$1@#QjetqM4Pg%U*Q%>U-9t`zVE%yT1QMiM49yyG01yMP^Hyf@C$uW@RV=zu$&k4 zV(uy0a`tW;!zdt&&E>Ej>A!!FXgiVAi{8Nh6J@c2?&Tx9gb7X-Ia~CY#`5hMH{nYK zqs^~U`3P(9PvXS4X>7>v=^)Z*$KJ802t-|26%K&<`}DU^Ig0yrC4mlO zhzIgNQ-yjPul|}aa$^-Lg(c5juo%d1?P@DfNrQRJ6C~h3QUAP#dc_%MMD;d9+Zlrb znascyR!mCws}A8^?vgYuXBmj^<`@x2Y?$KFd7abL4oLVyg+fK|KmCx6*U}VSEIktb zg79eM{jm7r>i_6u^2RXWo~I#h`+OAaEs0@5H_=wJtt8JFh9Z6#33ab$6CWNS%7gBu z@k4#8=J?m7BH?~3=npV@>}e#<3^fa zsPWXuP=kwSYO7|JefB3NbcxX|%-i6Mfo#^GlPC;5Wt+h3O41n46G?AS`!9~A6^r4# zYKh$AyJbw?z3t@;>5belbri4TDftjlpSebhpiq!Fbg)6rb+bqM|r2%NbK6k zTGK5&M#L-da?-GYo`XXE;No9tP}GjR+4{-hx0PLaJJ(=m+!q<6Xq##umSGok6x4eK zBW>-y_R`5%myQ>6E6UT_i|c0nc33Xx-|}G1fyK<6QlzK+frdL!iBT8@nSPD6)$d1Y zH)DH1ov6xwx$oX$m(a1VQlcor|A}kQWiD~^TC=x@q(J2rPrGN>A?p|1Bj^v`0%h>~ zGGy!)_+HHn9*spvd*K-Ty^Nh_p@#PWXHv-#Z)F%3_`g!g^1943$1S&ClZ18?Z-JhQ z|J5%YMgFF`{{KH8bd-kx8(p?Q{y(0rLpf~AE??SPt-2iD+fr|qN(&zKIJBF_lP}y> zy&;b(N2M9nYJU^F2xcik#F1w?wHvz#9TaBxMI1Sg(ZRdznY*5uBpEr31X5*QAztcd zPDiI{zD-S*2r8A8I6PGZR>^ZM`a(SvJ5ddDsO@gfT4($t<6 z1k6dJC&f4f&pf^VYyFDsy&GMEh!>-(+v%mOIQ+N>Nbs7FMQR^B1WwCp2g|yT2jbAP zww@vyC@hCJaUk;IJIp5aZ9dTEpk}*H6a5r1fH>Z06vIT=K~aCH;4Cx!N4Gr^cy!hC zdsrU#uI!N}OcXTmGskw|&R9m4mmc(hx|nfqcis?P zQPiT8Opol*K>76>o`l=ZRC>Lc4SJ6`x9*ye#gL~-i#+tv89}=h&laP0%)^)jI@>?H zl!hJajJPQk1dMjA3|RJY%w%xR>I3yp)PS7)9Y#`ua1P-p>$kbQA4#lLpozd*n4U-J zgO22MahRi7_iqI6D@J#6rVgO2_3Ko%oWfK&9BYogPs0?2Q%)Fuc_Ab4)r*yhr^sAW z^~H+>Dr^TF;BKF_s>Cqzx~IP}b@HKdcJ2~Ljw#v}I^DBT!s58!Frr9HZx|gb39@cAZ_WhR<V!{NgWFd0|fPyAmShY(`>aCs-2sd#=8*Cb4=zX0SN zA-;GM@EbJM*rIG-3@FK*QMjeAwV0fu$-&E`?)G?IZFv+tp{P|0TCQ(&8!{N^1xWlE zaCZnfFkFEkE^R!O1~lIG@yc^;$))l~aDvk%F_lh?h8Ah?~PV_eU>N${&DC@slH_#XV` zd&flRKH6QgJOirUojGZi&}Phe2Y!NSK02^)I?y;XX3C1K!6tRT6<6R|;(fu>_9V$#(^?9|8E}sUgTg z2n)Gu21evWp@^dk0;-vUn+C;`$D+>Po)(V_xE`F^WzRhKw;OiWxJ{=mZl6_4$&awe zht`7LuNYqlv_F0Mc{^M@1%g_cv944nt&AUOuhG=mxAUp|Nv#It_gGS%FnO-yX)k** z{uWJ+ZO9C`OjDH`&87u~5geqEm@+~=BXq&ES0{@^|3a{8vUBkuYk(c6^mW|UXXSG@ z%_^=sOQP>#VZjch-uUpW6uE#dmaHEsdCM?hbJ}OfGidtL3!|BXcSd9ix^8-47(dcx z!OZ>wz%MMuoo6Z&6=@)r(r+a12f}eT!AhEe z^+GMt!AGv9laomA(?;FExo5OHJEjE_u06XbwcS)7Ig?MIbXEGP=`wi>S6L3f^Z zy8@DW<=bYCo~C<&Pgu%0rxc9D8LWJKmQCb4_`u-{zeu zB~=j5lV+kL;-Y&sEGO!NzG-d!Q|5QTUMmekb{!%?=03UWC{fE&u>tMP813 zPEFS9z^>pzWN7A1oWFoa*K@q0%|l5f(&~A9pND{JL?c))d%i-b?@m5+BcR z_A`qj6i9gUXCKlN)M{70${4k0G{YNW>oBbaTbdc!V3V@N{BF*S)nh#=&ROeH%?SF7 ztDmQMqc`WF2;)__`K>b7;wJ?YTNGnZpB1pWOf12y;8%D}+07LWLH0kCh8Vg|1B+=1` zcC$&|Ea#pDnM@Ob zc1CXxe^m?I$PKEIMi<*UPZkKKN}1f_`_N!j(-AJyy!u3LhzNtVRUt;`6xCn(x7Mi0 zeiH!`;{8Tai)B{JUH(pv`F$sRSdFWBlo}|fc_VTD9&lv zSB<6Wv7IXGFC#yi8`+{Ej5AXC|2mP@GVpdn=Nm0ec!19j)TWkx8e?e!{xAA&59c}6 zx&95Dl2$mUl?le0Rn>tfH&|x0?7v_zy7U?kmHz9~S7qJW=werf?$$!(abfz6;6c&c z0&uAtr(RKX0mtXvM$mowv@~tV3Y2OIkk5}S&^Z!j!ZsUJgem02saZ(lthJxqDC1Fm z9)h!C^@J-~Ax{~NW!~XymzU_ zV!^5IZ27^J;l$mRV#Ap5W`wZ^H#`7W^+b!_*P0eXm9*g@_b05e{ z;F)`8nK##HJM516K*F1o$-drQxs2N^{4H1xZO zoARcLj*S#E8>n#Qqm9<1fpW`^pUhO(LCbe4{a?(NGvD(J|13MCAEl?#5Nfb!nK}2R zf$Ka~jvPqF{hxOn-GC^W=2o>EUyw*+!Q6Z*eqPS)0|Q4bz7lQT`xYJE?i95Ux-Dmf z7)hw4j;0PE#?2T^F8N2vdIK{7OE-^Bf(LXr1Ym2$W1@HgX6Q4VQaJ?BA~;3(kvoNX znNY&4Whn4)T~t?0qE^LK#K_Kn^_@l0iB$(~t)IMp3k~~vsPGW$eNAPGgwu|Kr9c>F z{DEXjby3N;X4lHPmYsKE)G8Eg!lwGj5{8u}vC<``I5rCR_pgnIoW|i+LZ6F=^w5eXTNmB~W)c^{EOLa9bDEVD!QE5Zb(U0R<1Q%u)faSX(Gx%8t?`1H{m`WJU zL#sgb@*e8#FVG@tS3u3A&>;6V!@G@^|8JMdWHgf51PyAdMkl0FK7Imr-Dhn1Q}IT) zALJS-8xVexez5Cmc^I;eW;y6IZe|Iv;m?m~YN#CtJf5pyN69>AR{OB0Q+MP%Rz?oo zn3Oh-lp0WUcvJDzhfIp+x3a)7-rxwIlJ8bqTjo-fO(67~5vPf4ReMdXR+D)}YjLrH1yOPEbeuF|Z8N?Z9o0K&dIgdo=E0VaA`rqgbgaIw$AY*!qTy12Hd|76 z96x4C(b(Yn?qDiL>qT@rHP@8miCZ37buS5DXZCJEQV>i+fr5_BSmn9&0Rn0WXTVNZz z8Z8ZO5u8mUpI!!W{5s;24A+-+yQ=dd2ScMu16}6zfw=7ys%AVAAW1s>bNPAU7E^>C zG2+Vi{4AcS7oR!>pDKnZHQLcD>o1Qk>(@9Q~>QzxbhI2?KLK`z0n!irdGTlBL?4bkj*n$E?=tdESgwg( zaOpHvU<&fdMqy(rF>C9s8DW$bp);tM*bEiidj8)u{s36%+OL8AhT?R-?CdoTe z*s(1c@fn7Ne^j)as(TiBy1}@xYxH@RdwnE>6u!$^3>I<88Jgki#k+Uf+xZhZWI6@IFw3~}B8+ay|GPg5uEcP)Uw;wR>RQ)}kOa+JmCkK#pM#$O9r`4#sALEPyE#*nCqwGFCgIjaff`T;?XB>sU z)lDXfEsr*ZKqDDdf(htsMW)bqC(Vcc!C<|k>{zpkZN*)d&DwY3oDl2xu>9}}*G!wE zE*L$`c9~j1mAZQt*deqFkDbh_te)3`v9T>r*j+QQo}(M+yAk~S1O=dNL$GXXkiH_P z<7(U$;w`^-rKb>cH6g_b9LX6>h{10!KQEmbvh=S7CCTvwyeasEq-p%+6~>Eqy{1DG zk?sK=`ko0~QXh`su(%Xqti&)kgP}VlAgqooPFCcb;}w0aBb2a53ed zJP$!I(D&Y#v^dfcy<6M@s@`T8mhiw#KThfCsSTM*h2o8ek~;;jWP)l_=oH$spve)s zvcI^-k%^RbE8NoNnk@U{hSQnMA-_*4zH^@YAuf%IB2CmhVRRAAR~3L|AMgg;cycR{ zmZqAp%~w@Mv~1b)*E*NKt;H_#OYdvllW zG-Jq8*Ya8s^(B%lzM_7m%j>W}wA}Bfd48-G*s1>_s&W+yIKx2rjN>Iz+d4 z=$eUNPZ@I1E1v2S0AFJZ{X~-i+d&zsR)l?d@V+=YIOL0JHfPMZ6~rl}(}hQd|zWJ!?HM9?+8J zpuSyN;+$zNM-O#51&+9Yk`8*uxw1s496}W#$}=!G2Obgn*5gSiTUV>89bCMnxKK+< zzl36G+FUhEEZbP|B&rCDweb9-YLSh$vW>?(Fmn198k%p7Cgfi}<>_2Xn>G`ls|Czv zkWBYC@iKnIHg>w;#w%e+0Wt?D+WvDF0DX3aZQ1Y-bJKDHoAf(^2N@Yd&8ApNdP=f(3v!!r5bmMnHeHmJtou_i4?RzSVa>UmS!* zr7N7=wYLU9W_;D+F~;Yt5oIrjip;QQPz46I;pc*PM#BjLm2(yGHKI8lOYPm(`<6(qL(EdxI# zrzd{;v`jiRZ4?RhXh<>J)LBJ8Lzfw56LTwO;c2)3G#O@JAnO9<%SP0@Z_{Yh5$mIA zT)yp0x{DBJh)a#PlOsyth}pZ93F}qmxmUT$GcCRo57552F&VRTfjhsa;@JP1K!*hP zVY=r^iHBaPD?PEp_W?;SR)OuCiyZouHq|d7xz8`h7wskHbA#31*uN9sIgNJQY(XR9 z>iz?RV!KTo9`bm1z!cszZFZjYo0w94!nPlVJ0mHa(j3?}XA zLBy_xTrdYniJ1*?H?jR%KeX2!Rprx(=vi`fRhiI;pBAiEgUh7cm~~mEgd6;#I}YIt zt&iw?l0`)>J0)irW!FGr$E(4KYeH(_U=#KwRgE_zelHC_F=q?hi>TeD5KS))bzXf2 z3@gy}RqY=KVNF78x`DFOm9xrsiZ7VRLS?t3y`xHeo=5iZ7p6cNuO4%M?{fp1<+jKA z1Qm*VdwVC~3_;HB2`(g+9mm!5A|czc#}@KW3AI`EpQ5Xi6&3D;s=x;wKlb%z=1c0v z)30TnZoe;LMwYUKw?-DDz#^W;wJ)d{nvEth9OLlJR`i0XA_F#;{yzd%_*{f8n0p7e z!Ex>SJz5#@ijOwjn5eTDem^_{jJdh!^q3tk28~nYQ>6IjtEzudJCQ!LXv7o%VF$Av zLl~Se448oCqY)8ck7VyRmKNv!heXNEYSar9_3s$v|3j~+d-1tv|D!%tk)X@x=H2G- zuly)6#wa!5?loo@Lqc1U;IBu5cxjyEW;F0QukrCGJGR9#x~cjgNces$$U6)%h^Uac zg>M0RWC5D-=Psck4zUtrHy@lv1vnVCgnWA^x$BbWsVMDm4+(O^j;%Fe%`v;18ZKV? z&D#x52nI~aXZDZvky=Tl@yqI0S`|${9nK+9sWzfP6&a35?5XQCPBe=Ucg}BCCYA4~ z!%5n4llK3z-6L}2S#=43tR;W)Iz!)dFME$XD)}d)ZY#_)<_pNLz=(+3)j?pb!F^lcEFuo0IRJ z=q$}ONmZGpc7?pI`0P>T5vY0@{9mJU_KzAe<&2nP{=H{q(#-jc7>ov=P`_ZkM!cO(-m7GQeI&!e0YDA`Bl5fS~5e})N=x)nl9Cpz`#}wmhpyv(THc7=+`IqosWh`4KrbK)2V$j2R?ndv1w)8rP5s!fmzXv z6483$gCs_dhqv=iw`C1gfR>MWz#Kgr1508wes?c^I^0E2JVij}e2DB`dQ}Wj4%teP zkTu^kQ8eo>JniXW6yJ4Vi>VJzZ1!2@XAmJYz?%p$iOTibt}J~!Y;3Z)@Eh!t&or=* z1QhC%qTgLfC>DY*EHk^Xg zv?DNj--cm3_)jDc#w$>s?{z84^w0B#h2lD=Mn6RG`V*F*oeM)Zdbu6DJb6gw;$Oz- z>yx){T`E7S%@g8dA&@>|(=M034ZbIGYXPDX7x_$2&0hH_UMfCn3N#vgpH_D2J8_~t z90rJeu5X>

    *rziodK4#Xv1SR}@Plcu0syjdu3uI{rg%1u2@#_REmAGe1cgW9KWIl-jTyLIb2rk% zDB5$;bPWQDEk$G)sEd0e6%uD0IW>=Bk9>PVcQq@V{X$jlOcb49LXM}KFV?ur51Qd7 z0aAmSJHgcP7dl#RB!|SLiy**OI@kc-GE~PgOgn4chL`V%LTDsj^FW*BmkzuE^oK>i zSJMv`9nO+M=#B|3&MV0YgBTMY85;4NcRXm^elPMn*s0evC8i{4_rgL0=$bXJf%u>I zN_mn<`%S%n`cLp(wztnTHvxi^{Y2YN9WRGm)I^y#*DT79-wmiJKn?%!^CL$`H!Sb`poU+4)*t4)+w6OzcT?Li{l?I>&+zk zC_GXRUrz>r6~%zte4wlQziJ>3u}+jZIQKwhjEjf?0NwpS71coGzN4OJYaypCjRptp z28IXy%s`7e%W`E@Qa3aKDpQ4qWWwTD1(+vWS5qW0CZ*qfgSH~wL!Lji$+i!Bzdvfa zi8fjQRMBvg)2u+mje$^B2xVpgOPBu>K89=OV*ORfVa*Gq4ymziFGtl=Sk1h8R$vcA z1X@tpx0*gEkaU#t>=+CocL$sO)WOfqt^Qltz_WrHbZAPb1 zX-%y-m%?G)Ao!feiRe3X7!YdJ@8y79THk_7@8D5p?m@Vc)`ge@9#-gX=Y|rQ>F7Ii zKMslUkJKX}c-{Y7W@9S@>u z;doyUcCnkxZUZr>l1-1EK>sP9g2RbLS*S#lZjUaG5S8tvxin`>Pz?~I`WZCCrQZIC zX|`QDr?lyLjK9ET7fW?wfqBk-v?Fh5Cu6BpMvKStu>!FUE)BRNf z6`ZCnTS6C^wgAzu+v^|AUM>hJAhD3R7QZHN54c0Tb8vp$7z!4inJ(1 z{86^=FR|FMOC>m6skuPBLsI(!%Gb_{scO~Qo8JC}ys2UVvyr!sm`FOE087iBu1C{7 zHkN=^cDnGGi5*8Uq>dNgh0+I?x={sQ53uD2*^Cy`9i-WJ6goaKj-m2k;+R-FCWzB1B%*xYxfr4Z zD^JK~&@8W)q|}R;g*+_I@8tQPlcu!X&j2eP)ZrxXxh)zGAL9ESGEXO^pM%jL!|&Vz9Ube z1I3PONZ*83P#QK<>t0wS`;5v)PxAU~6`*T%413 zWVZ3i@q`I8KH>PifpAX$UH)H9g0u~8yqMzzEwA+-_%U=-xE_XUtR058ootEa!*$)! zG$s(7&3d+)5;J!;!?xrI)rL*3d0~pwz|fPm(@t7q6^-E`e{!I*dV1FD+_V3QOu6&x zGj(;PGFcJ=0YG`w3K9U%Q+xO%jL5|)z~g*TmSqC-sQ1Em=6q)l_7f;)Jmi^y8zTA@ zGV^s>nJ`&*b1ZjEw?Q!HF{i}XS7{};pCx*H=axLDY~^HsQb&F@9svHp4-ZV0wyS%T zRm3b<39A20N9>2?)5r<0HL5)yM*om2NVx{rM$UK{0T~foYy5` z#O;0MC?}+Ka(}3QAU7pWPl`PmunbgDcm1pwB-x0su5R0e-CoclgBT$;C3dGM-naM zkE;{i&^{~FjlwgeT%>w{Q1k^P@?7b(_oN7*CC}kwD<(#y*rQ z>t*-ssX_J!at$=bGy21`Mnwe_!Rq9g6Na&?l>_ObYt?iO*A4nn(11_{;YG0!t(+}RlD1r?au0WR$3Tq(gNXx6?x* zopQHj9wqfW8jEudhJfNWXvaj^7Mme!YNXtVaJf|8BWEl+%(UYr&GO6BEi!wm`+r);hIeyeO-1#! z&5)PQ#85z*FJZ^NgAkruK~E)Un3NR!$&P&fFI1iD%H?$Rc2XPYQ8AN_G8(y@={}E) zcb%9rfly%H=A?l2dp)F&elFf3%_p?L(rr+!Vi9}dhUlgT&ULY?^p*caH>nfQL&q$2 zIoc3waQ|9F?O`k_S9jE_12J@vXfEPs%t2F$ou_>7JXEJcDnZr`YXu`fQy(hTz5DT=wC-2G`or=(^+FZBVD%+~ zxU|<+D_K~uSbv8v03b~Yi^;AMZKBx9$|LO%;_EHM4g(7SPmV?R8QVVEb=X!G7bG)& z_5)7W&D~}^5`<|UsgZ~2teuVQ$EVz^@yOVS7d?l_o(01o<$k?R+r!@{$IK`p+U@W^ z7CuVZHNsxf)5z=*MKDLrMWa`OHd6Er1}{& z!=>K-h-tQ59q@9$?yUI8)SY?KO_xAG!~2EV%j>Zgo+5vv1ZGRl$(hFvT>F)hdkH(* zL)c70g%9%7|Ijro`J#McqLR*no^LPOuit%^TCec zkJ;TDfY7CwpC+de&Fm>X+S#F>AyyN{u2#2_lB+v6c1e09xdE&eQ|XHFt&75P8Ck%<0+IQa3jO?1l#UaqzZrTWpI5z+ zkIa|-xldv$)U4*kJ9Pjp@TD1BRHCY8Y$H`!1W*i03qDVN*=nr*9+=4_)-wf8UM>9O zer~Wv&BnARqo>9Vc&{k1vFjeodSRJ7Bcz^S;kKA*IUA;0Y4#O+q^tC0AmITv*qW6iaI1csXd=mILVME-CFP`De=fNt}fOGLy(27!e=3& zSO3B^dCt*xBln@X3-k6VKcbTfS*0uryl4_0ffA$jF$&yg68g?D3kR6I zIL`tg$Q^yuq1hNnM?QtgIY_$IkC0rQNU!-d>^w8M=6oz(qWElt)nNggi2RRdCd=1Y z8H=fnJGNUmnw%zWL9(=;d$C81bNgXE^2#H(d54jm?Egkg#{H5N`xEFVCRb_TTD(`&%- zhNR}nezH()B~5-@L25mNF%T$na0!~9SX%eEe?SLLKLDgy(=nZ93s4IKVsKVY> zAv!-I-^=^!@D=weG&V9!Cltu3n&5l@adA&_vLQUHh)o0m`Q4odaOKC4_K4}KQts~A zlwWxDpc6y0kbJW4LnvFrG_>IqQHayD9B#V2UbP6hdp6_7{x{d&bzC~ZKK!s8r&nOJ z`O*!16ZVYC9slD)I+tEzw-*>~m?+-4+Xm}zlvJSxA#F-1GramuqcvsldK`456T~vU z=AOK_ChFE~Itg#gcIxhD)4T@f&Q((QZcy=NmE^sLpiejT+LsSlXm z2JYC4#r3YF|A2x1L($TP$O(vo#mNU&7v^2l3zhkhT(60MRQ?aX2moq*{ zs!#|jI(K(T)sPtZoI94IvOqVcqC1C&^$Tl4S9!E_TJ0S90Yw=Isc^zO;*sie)iHkD zZ{hEIi~Y8i$5TnQKOys9;2Uc=jqgSC&{4!ujX$X0izFDcOf{Hyl zWeqOJetX#A!UHA&r|M^<_9Hs7`qL7qFwpC>vfm7p1aq36+&W?_#{$~R3B8d>W+rS9 zWs?p)U@WRvS4CM*;4nDYMHkW>JQ`v6u~*cW-g#mtVzMkR1(!OomOCR^{i+jEr#=Hf zZTHZ1<`+vO#Dr)K*)=Vm7jfv}HFgQd!fQJc5B^Sjm&MoL)DJ`2`l_LNd`O#&$e*WC zXB<+W5MGpMooTz+CIX(UZdwa;$eg{G3JNWN^;KUlv{eerDTe-6_mN(Z7<0@Ea{zN<4yzj_*wySKc^?E>= z#F7VDrFOo`rxC3->?t}JTT0ABAttG?ja3S#?JS>w1}bgOwJo0LSJjz5ni>@lKK3L? zuM48gnP_o}?nOR?%wq^)T)E0xLfsPq=ekpEDpV{D+*v1E)9Khs12#wJmI0N1%u4CQ z0PYBF5J9db+q9n=>=Bs6oY>~+n@RFcs}^(yM27Gg8~kZnXP|?Xpzo^r&8*!NIx6Y9 zv4!>1{h|2FJT+hL!~YzM9Xvn=7R{6lX_{3t@e*x?MqwOL;wv*?w`0p?HvFIy0;? zPToeqKWb&vm1tR9y;x1*y{mcxGF~LILjjY(KCF>vVVz=)=yoTotj4eOl$YlT{2d-%Whu;fdO1rQ8`04#uc` z+$7f;BRE!@RtNcnQ_T!)d{Mf$LlH|71*glOl1YMHcdBkQv8d&_>HJOAW%jjp4qAeb zH#S7C>=dYosIrEWjU0J^qNmN=h(E+UMil-S)5wE`yPTkTI-CCfQ|uf;9Te;$4#h3< zC&rr73uB9|$e)1_`(Y97u)J>-4`pwdr~FrtuG_fkJUYR)&-W5VVcuH;k}7!5ClC;p z7uO~1!~xdst&bZjcQP~w&z`1V3>O@w)n-nvvHcTIH5)r5>Q0ZN$As{``KT>@(3Y>- zT@cH?a@7iPR0T5biL><|nD&d0$X!0{k7`8{%|#^%!9_PA%HPRJapVkoe%sTupdP?u zgu_LWoz|Zh3;@t+8upTEP+9A-4su)$srf*Potj3GLAwU)>Fca*5-ycs16znTA~7oL z;ck3kci-L7uI2OAuWQ71OCd2Q#vWd}YcERug%>9$Ro>iWL`wrt1;%zT4DXm|wQ!Y(r%}iIC~6dS&_G3m2dOe%+k3e}WZ0ed0MYUlzLKnHYI@nV+}mDi#Hl6Z zn^xx=h-_RAt0m@aNq-tN1i67#Cb2UkT3&- z;9A*jTE+E%?vZ$1LRoy)SAVlE(fF#=sXp7SmDx1hsLD?FBiN!Jw^ASUX_`C_e@Yv|buTs@66!}z@*ynl{vD68sN){EwX+f*^rxN4)X?HVKX9A8x3uE`^}C_R+l0ER#l_?Yj68i9$GsTH z-9h11HkaA32?G~vdn=zc>Y+Jwv7aphu?sfB#$F>s=+)^xQ2kPv?u)Ja$@G$~-|-aM z3Sm($?0XuiK<^*76}T+3HKRg2bl&m2y!jFYrI0~MBj2YcDM@!ki>BJNLO3c9 z_&pSNBtC-;gh_wFOz(i`06R9MuJKS8kcN$$BG?Ltaa> zZwYy1hz0sprunJSYqDUBIv47>)xv;L_fN_#pQlx^{Di$TV`jk*EVn0Vd zhTL+<_;CnO=aDD=Z908JmCM1X+=OZKBE&a-l`BmHY(k>kBKEc}Q@E)uszX%F_k1Is zT}&UYrmD>2srscpP5@`8l-1c{BRM$&aKXE6a7oGQCJ1Fz;m-vz_L(2E8_9&J333fq z5+&g}-Rx@ozViqHd$E{3k0jkW#6GApswV$;1IvpbS=~9{wMQ1J6;7SLTtf!OY+k%F z>3keb1+a%25^Jd330dMO;be5NU6-Axq3FA#+V8(&jW7sj6xkL~;O*;QMt($C@Qi^I zgEBihfg2Hoj-kCo?79&WRJ#&nFr&V=sJzqE$*w?wZapr!FsN{eUHy!RF)N`>78f)_ zH}yqfjv(YbN+`>6E&*slx*wX(=C#V+0v*1%{Dz{^yJfT4{}DrVQslXlqa{d%Q%bK* z`T^lb=*i#I=RmeQ(D`S?3}WJ=SEWqi9|zq0m8!ha7PvQ1JmGu6kI&}==MS2XiapoV z<2lP^F;IH5eqKM6iWq{p$^j<)!i;us?tE9e?N&GkNy_T{@$O#MS6!74vGV_5T&7WV$ZwpP+xt%h z39eqYb+M914PziBSXqxK=zg%ZwkJR1d|GR}tWA!k2TON{JJ0I5ggz-s;sc9Ky?+p9 zC(18)J5vtVfWL^Q3D20_v5?kfQA1HrwzGy)Zfi1fXB8$w7URr9OS>CqGE+Mkl)ZXN zCWxOiwuB{q!QxwN2iLE7>T&rG>))6&yvE##X~ch|0)qHA?XDO^Uc=^fS#lhs{cRB* zvswAWiFdn`OE4WWJmrDz-4pw(!JM&t0@4b`IfK{?pYaP^$B+mrGz>CFbKzNd1^`O9 zkboGI2aZ0jeJzdk?ZNrm*pF2Sf2BOGugIj-n*9l2n8kwwW)D1SEDb*ovUT zvYD-+SJIj;%I+{9)W99fjmQRKyXqec=k{SbQLo1r{x4EVP=&buY3GaI#zKmylg{!k zc<<1OGPVOT5AP*TRX^M@^y_X zrrpMCU7d?*_K`?pC>*bGW$>F`a-=TsX2z(N#qb)kif9lf6Qflr4g!aPYO1p-Wwx0j ziqA5&Qztd3DpV0mar;?)a_W(P8a4uLlBW8PqWrhgqemVNFj+(zBB1 zA^FzjQF0lxD;AotA+KCKc=kqK(R#?E4&?x=vhYu%8-}@?+?R^b{;~uno|R*Mn54~U$?2j{>ZI= zO|6ZtS=;)bO%k@UB#$GZt4CH;A*0k1Z2A&1_J=bsZpF6;o8ZG^F3UXJB0uQQhCU)+ABpn}>=RpEwDnc}PAkIgmPOPS3%&$T8RmC%4)qZN zDJq@UjtRxV!@Pt{>79P3H3OnN&#F*Zz_I#R`oO_ zO=Lpz5TwPUFpG>E6H`^M$M-| zz>iQ8&=2y3huEBXTzI_P;&61k_HZBE4eM&1Era}e6FiH1slaGW&8iqpOD;^m*UOg8 zvz-KvbwZV(+`Y7$z+uN#FK4c(!p&oGBH?cMZ(EcxJmS4ww7%qBSjzs$t=a}-{3%dG zkAZtkm>ln~$nJ&)FVM_CdZA=6jG5k{y-LO;S?|!E-B(jq8RV~2XxMZh9PgeI<8wek z3eeqq_Y9YzAMJ|Hxk52P5t?75C`a=XX-Ro+38W6M`i78Mwa-P-ZC3f}_mOF1t_M%< z@S|u^MV6UxsC`>|()gpq_sr6 zt2x^McMq+3bsBTReb5jNZn`?j6~PWCztQ8U*aZrJsG0e1MGZcVk`=yPra>X2v&xmu zF<$Fuh&s-sU_gS$_2!KMlUT@+L{ma=qV0e%6Y{<(hN9N|&^h{`1SHCrwl~ zi4tCT`W0TY&hv>%R)zwyV|#hrTsTY9;c`94oHiRCt)*Pc6z=AxaREp&7}?DtG;0=k z{}K0(P~mi)+~53B6y2T)$T5%lyqA*6i4aA?BAcffBC;yLh5_Nh!;s+4Qd#I%Z6Dj- zyti^}%rnDKJk6tKoIe-OF>y5ob!bQok^8@0FwJABYO#Tl(`kRMFM|>)y#Iy`0-&1D z2V$|fh%W>T@~0Rcx!WJ#FiUPC&YST2wWVk=@Zg2?RhOlZ+oU-V8{^v>*4-6W)HNtd ziK8HZyNk@fttb__NVm%?iI8HeDJ~ep>~Scl`o(KP|8$Q0dsVR$oR;D&FvZc{^nv&h zf>4J@%U{bmr;*z6j+OfywX5d}-N&Oc!8|3t9+DQl<~lOr)lCu+JU&P_pURS!TEbqiFK~-zfyG<<$>DB{p|Au#s(Eom7W2KxX6aKY(i&9DEBJ50=2Y{17&vN z6rck>fkrWqOMqC5^E`cw@crCf0WB!y?L*G)1X_B F008;i7M}nB literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/admin/alertsettings/eventfilters.webp b/static/images/auditor/10.8/admin/alertsettings/eventfilters.webp new file mode 100644 index 0000000000000000000000000000000000000000..6d81b17855a5dff5b0ba42ae1a6ac2517d2f686f GIT binary patch literal 13420 zcmY+q1B@=d6E^y;?cKAsZQHhO+qP}n_MX*Q+qQLh83>Zo5ilxBhys4FGSD96 z*CG(cDgpE7Eb#v}&1nII|D=g<{$q051LT9y?120N6|m>XkRl@`DJE6DA__u?Hh1_^ z6H_38o-0{;4@ z{PZqu|9Ap{ot`g_FF@e;05CnU6u5aU53Jpo|I+*k+)ecA|N1E+{OA=Dd~qLt%6#uX zfePGT6(j&Q`^df}PWBspW&CVkk7o9z2ZlW1zKyRj_692cd;`(G1ZQv81^d36d}MFV zUJZZWCNYlnCjf1Kaz7(~z?L;XZ??XsKi1y~C+33;Rr*+e2tUSO_df-<_?`v%zG{Aq zfk0s7B4KKvr3MMI1u;~SVTA~m=T!pbNpHVz5X9UutspiOWWqY z6W?$D;}^IAettT9R|7Y1Oh2xGp^reIl^`-skLe$uXn~70l>GJAT{5LMJq!toRyG%j z>P5g+!UgM16qKH)bfKFN&vCchXYoa^9A@tn!jKWzJcu;yMY-{acK6;UhU{uXuLJ{4 z+l692gPd1VVXw<>&U5urA&-Vg$Z}*ZC8X%a$o5f@_DJMcgm>9>0=M#kW|{)jHF_>W zvhxNE;mS=l1Bt1P50sl}~eDk<%hk49=~%R79WDd8tq? zML&%MG<)`wC|8hW{U8fNRYhnh0YoqRND3L_=APXeInlaWYBT}RRDdxk zR@5^PXr_Uq2!d|z@)tMRnZ`>157c=)OA|$jS85(QjL8^wZ}KnUk&C!PG&CBT-5`WL z-my801=Bbb*evf+9h^7Ygt%HlOmc68seALsnYCfA1b3gBs5)s$nRsF0Q<^3jRiSTa zaXgqyf@N^=`vpB1&%WR{i5#B}q`S4tf_v~cv(~~_x-EaTy6|fAO{G+I^tJG=>lk*hk&e77bzY6Uk9JlZG(qPXCb(VW z@(03N{X%=HS5<$haR+xV#9EpbVSCbfd&d`*kLTlRn!sk5`3<&Np|;(nL|R420VS@X zr3lBQf(-hsXC>EX4-RaIP@GYRLFLPBV+&P8h~LNSNH6*ByOo2^S?>tcYqw!>=MhF@ zm@Vx49R`n+&`8_BL@wwu*TP23aUse%Pk1f%*WRt5;30a%wZ5hJJBIkzFiL6?SUkmD z@JM{DoPk9;1|^y`K02e1#`4fGRse9yA-%$Q0Q?>-?SbdBEuGdlm(fJED%MzEU8zs8 z8A6rS*qg0DVTlJEiQxDZd-KBhIFj~IjRe;jg=tg3ZRT)Mg|lfRIDEabA2ic=_HuVA zRG|x#2fbb!d3}<+B^kkQH`A9OCZ?uJIt^q2-nI6l+H=f>v2Bn2KO2b}lDX*}7zSmG zR24G%qL$!P<71HE9{I0g|2N{i|6hdKbMU`KLR{m$MiuD3^&ie+qz}A&oZ&35D^Z_M zH=+r@X)9jU5;y}i!)a1nib?&!EhmTW`2S;RVjH97R`_~`LXGwNna%=N!7T32;1T@o zuXhOgmws&jdmk3iI9YaE`%Iup9J%>=Aw>1}WJqNk{O?EAW|g1r1!B;Ze@3w|9d$H{ zbQB&}klu09k+Gz%^KNAFT+yG1&zP>AMsuSPb=E_|OmuNMFu`VK3$jm4nGkqd2?k+E zjvtTh5q&4gGs9(lSDndr6q_Tl#vB8Jb`{dp6O-Z;c|FxBZfty?UZsWY%V>8!c0Ak8XSNpI0IHrGPoLBhV1nBrmEEH>U8=h;hKUS^2i5 z|G$=rvOTGfuBKZ9e*GC=#{|KCCWht@GlWIq^I}&YCmP~-!uP4XwD7Tn@ zhCOjn^w94&m)W9PpTx&N-J4Ui0_ue2hhnQ!GT&dnRH^lD=tAk}xq6ppMB=Rc-;LQ( zdcB}vm0jzdj~j$NH0>rDgM!odV zIsB6YEHlT9egdb`3uPgNOkL%$l@bjltOvvw1=B%>$M!dI4Ya?A%FDrxIbqVBQ_@l_ zV*_J*Yt_|qD2w$7-w4gmRe3G0lSEw%VIte48n45V zWwkQaPDeifVW?DTogJFy@cS{*5tl$69<@xxReZC~eOfg72CVew8y6UqdU3vgzMIx# zN^T9JP#nxcP!g(v&j3=9xo)H!y0_A#bA;3Oz^lzwIfekTu;uNVAw$q@b9p{O{>OO* z2C}qvZgsdUt#e^U!ahtm7hJcNUjs-XlBi!Vv!l$x)mA^bo+(N}rYPdidJ=xML9p+7 zw2gjC1UZ6+!{~_aD&s-vH6dgUSn?{{BOSyE z#i?FgF!=Svg9G6+ot-a2lQXEdTn3m>crC4JD1U@=ca1?thH z7mee~cf@0dW`Vu#7uoo5Cd!9ku%VM3fkN z!{){DTi#cQiOdO;&ye}`rCRXVt2OY_b_>K&S}xQIqL-Wnp$LOB>t6V&mMbmjw#@6~ zukwZ@=hrFtGg@vaZp|Ln!AmLj3Y!_>R@Cg{H<9dhfkT!$L!%gIf>8Ruzke0idE+}F zKgBT-=ynBrmy@mL8feYHVkE@tb{9^=`(j?|&iJ0T`dHgT=M$F2}{ zrGqj_5_A>5`0fL+aCL{rpWGnBa3d_Pi^gIj1IQNXBEt2`uO188@4^Y^27;oPH2<~Oac&t? zuR?*ea|CX(up_NgPX2<7pf`2y#a-yn8I`Kvs7yg4T?y1wM1#qbYkK-b#>7o?p@Ym) zoq4rznf&lEYR;0*Kee}=eS91K<@!ncP4*)ZtrsxL#ncZZ8$Iy*CxNZQ7;yd&UlOpn zO@x8eHCM#1;uUO9v_*!7tz^;D3ZH3i%ogXtv@P*Cb|HKkvQ`zE)@wLnU8%bN1PMAb z0;j1&40oa96=qOl%1}_rr4-Dv#38$>Pvya#Alch9a&Z$b?hA9)Sp$YpyzLiBzhv1- zmpGv4SM4wbRfzmzqv}w3!%fC4-)z%|g07Z$dq_p(x8#$)K&6fGFNcQNq(LVJ5%!Aq%B6z#JsoZmeSvw2$P zZx2$=NXDkfLmd%j($gmo$$h3%-jRWv`<{9`J8mQT5m?&G+FVLptez zTiD>HJXAfgf{PB+m@@A0hk1)|&pQqv-k{(A(Qx%s`D1f^DW>Jcda9i8R|!_4T*xEA ze@!l2-N(LUdfMfx1i4KGh@^SM`Y zc3`qfP-m@?nZ)m2(D8HiC^$DtzPbjbw2|R8VNPSdhN>L_rm*o}AoqG!v zYdsh3vb6EQ7@GvtRX)&2dhH=T3z>fkUGHhoBySp2BSMaUYh`(0UBLvo__@6%jmr~I zUbu9+EUKt_!L%TIRASugKFDX!{NQ7unC<(a((;Y3Ei9F9-%7}5{An+#H`ETIJ8LCh z?uyaZHC1uVx8H@CAQhlS&GK+;#+t(kXCc|+VLv`g2HB_#)v7%p>{zIYpcIYw8{}C> zG^ds+j~{gcbh`fF7L3em2}?En!Bzw8-y)^UsVC=C1tUc5K!*R}Vh~z6+@wpiJ6Sdo z2sPa`hZ26pH+EW{8m~7BayNGc>%mc-3(|g8GG?PkIgBHCtNi^gJH-UOY%>K5AqxP2 zb<~cAjEF@v_WqtJb7SuZdpjE7eIash5mPi~+6O(~Yn`Y^dkn2(IB`@J9hPc1XsS#L z;xh9k)GBAKgH4-;<=>WN0maod(9G{P77Y|1%5Res{G$d}LGi~5YwItfuVdbVamik_ z-(3TSO}3$eF}{aZNH!QMaXEf5)pWa|daH znud&LVVdY%bbY!K+zsh>y(=vlYdkt%XD|{Ib-1)+RUX*U-vcxBJte944Gfc=Ay9lG zwk`4S%` z+_LXqL0oIgGYmOzEN`QxurmMD&)I6btF<72%&uelF6rG4X4@aKNap3v{Tp?l?8SFl ze_F49kFd+iXD+{(AYYIl?3!UFSVMXQ?|`jWZC#4j)G)hL1_;4@S?nb>G;vR<&^E2} zRGSr6;Q1yvBwf)CP48uS%r7E1c@e=Qy4|BiV&THR zL5K;4w#;-R=S!LNBP;b!hOhr3?2(XNNfuQU#n;tqCU{T@K{&%)3^NQ{H5er8?a5Wo zXSRx(-J^wBB@be6Q;SX(xc zL#UAu$C7X1QJXiW6)v9%I9BvRHzk6>ciMx~lI0%g&i<_`_77FKfuP%~P0gJ#KF9;H z51us1EFM36L7$7K*}*!N+9Cm$@U>@1Ps%Xj)>)O7o#pHROS_i$^0QgpZsV8Lv?@A| zVi{V*6%$=4JgFC(VhfXtG6`6CFuTAbT_SlmBPTUQCoGWPs5~<}FUiUu_xc6UQ(CR` zR(mI-UN`7yu0=})ch}39V{+U+=ee2q1?FefY3w@zJndfFUcXPQWgSptV9V@IErJd+ zu2#t|zEsge)5ADOl zS+_kKXvQ33J+AaojXS4a2E$CA2yH=iuQ%j=4vC z%qQ#KpHA1up3Z6Km;&v~H+YIL+_{^&u@2 z+x(t0pAis8+8k>wR#0>fO@Av&)7Rh*v1%CQ1JDVnpDuNNkdzlRb&U5b{XmwuBe$@V znaaXA&tX{dS&rX*6!gZL>9E!XvG8gOlGaesH*ey5no3hNF^Tm!sgsG2nZn z_?2}}k)1pREdygknp$2=Eq|7v2w4}cs5GcHH@?GG)q1I$zmI72ZfRZV!ft{P{sr=A zvikjWWJ_%Gkmo(REqkau1@hqL{4s!Ml zMJrhZS5ZG1C9p7Z1q72K;EGeVs*7q&=x_*C1yUsSFQKK8*)wOhckQVqc~W;8CX2Dx z%(C};1rtxkf)eWsgW41D4dQD%7SceSdVPiRWyRpm`tjpaJGk!_eq&i}NYjkMInl@TG8)2jl9J7n1g-Qh-Aa?OtLsTPo+k-f~GfV$F58Y!SdAoBJL~+ zf}uU4NIzkH%Y5p=#}2XAEFEFf#>bQ`%JtxW~Q)?o^*5QF9UAL+HDRSVb}x|T(x+%!aa=F z0{bTj&DkF!dkWf8G3ePwS!hpaY*+Pd-jmqv)mF_Sr$D=+QcJ?lF;Ut!klyt&SpD`P%NX2}8&-PF7@* zr@eT=Hy3p^T!bPZG*x=hg1f=QOfl^_p}80)CO6{_ld*P#2}e{p$SOl<=$zNgQ#ikl zS$&tm#^F$b^fulYS$Z$5`svTftOV^vE4}=+{8U3~+iZh2lkPC|E)2fe+)JAIqg#Y% zynMom9Usp4-2xl$<`t)r+Kowoz^d6A)@5RzLGHq7=F0WIj8A9vDaO4z_ zI3?9kbw81QC*3(epE$WG7${qTBuH@@%Hc}m%i}^CZ1N+-5f*~3zDGeHE{K%VEKs9l^SDydy;u zX$8OB6Ex1S_&sx11qN1=YJT%bgRP(zZy`Oj@|ORX^9m~U5X+Jo-h(|-{4>pzW} zy|bOyy2i+x^gMT}W~V35d}ZAakMcd~w|DO%^PVbxG&)<5~a4-mS zYA8ip-A#sAid-Hz*RdYvTw$twLf3-MB@1_H^f8=G1}E6K!+F~$m0`LypYs-0Mja2f zlcjad$F@))Ol1m|BbEt9xbaGGs5mR$X$khjb8XGy#HEKl_3|GsDCpx7{5UA?{H^%9 zHe0AyFGoktHXs~2ZD-+)Da83VV7M}4;rb!Ic@;kJ3S61XhIo!T02#EF!1lpg0DQ(- zdh`;XL@!6J!c^&MSmWKev-e$Q=xnF9B!H+#4E3Zf6+BssEni4Y*k12!TW^outBP~D zK~~mg8PHy#vBSH#DaQQoPP~>117w&d1a9c&ZyD11`^_T7?=?}VE1|_awR>{raWF}H z9_5e{HKD>rmmyOM!RW0Gve%?RzX912( z(p*s~I#1(Yd^y{Y0I;WGHzN>V2fV)P#XQEBgZaQ)vxR-!qXb;I>MF0qUw>=7*J#!N7qKX@KB{;4K-c_>j z>geuln~1|fvcdVHd~}=WKw|XE5#U!GuNxixyjPCvs|}g`Q0x98+{19JsII+pXCIBdg>{{<4fCibTWgA7g42@;`IQ1ew`3e= zkOkU6WWP4S@zI?|#czDaHl)3>)!n2_J=q}G>pbOS{^PhktU5Y`djXB$SC#R9iGM}o zsjT{pNeGnK5y_fj#FdZ&D-?XFkN1&BxF+OBJF!F~$tv;Q&bESA7)a9fu&NfuUkru` z90v9^lC{cW&Rw8V)xP83J`ZuQiJuc(O}IQS+J!U1BG>XTQxAdFoFF}L^QO!F=iwF_ znly^0o_V$TMK~jjc?Nf7XW-I6NhmbKus zHmP;zAZ9T!f!dN=-@re7;DRpAJ?msM*i!=g ztx8V8FmOoE#oW&QTB|FKRLOfUHx6WhNPAsqqyEh)Ssv}!I@xU7ih4tQJ$QV7Sp@pr zyQq%{%&1sY`X#=hxJ~0SdVt4b=E#4=MQBN?urYfXw;m?1ir7V6jjIk@l?rS28@JmH zhq)1jdQWqPtu3hIyAnwY#Qwekl;Vka-|ZoMvmiSRyhoKBhF(3fz?E?JrA=a)`FGXT zCbe>^O5L9&UT!{FSdD!mx;v4p-d24i0akf^y+^bz2kA&A@JW4nd7^Iw+^6dJlzYf; zB_q2+b%E!J%172aH~1tq2d&B++el6A;?h8meLjf+*h z=*nQ*0y(!99IYEfNLX&GMpCJbJg!A8 zd3;(1zh$VeY=R5iE3PMR^!J2m6smf-i0&3Q=LKJ}LCPi8`93@K!Uc$W7L`U4=w;jG zmEdJg)4H;io52p@F6*fL&%7xBF}K z$*@=7<1*X3CU{Q6#M~@X26gQ!HfljH;AbE9IG>j$cCiO=@LaOPE7Fn_%e$z-5@qzM z{01Fgu#7MQ(pAh1^ttB_^<~?Ngc;@eO633L+}i=K!1HUVE;IylUDX!}8J*@dby7QC zz>rNd{*&V~5@kPp`XM77LSKFaMo%&fgBKvUYsv6?`;NeTPYXK6f396n z#-@j4<w-XIu+3vTu8ttW&^6p`~0WIGZf-HiGz)h1R|Z z)701W#C}mg7RHw;sG%NHna_5%caPWhD|q?@QSODJ$u*Y}mPx+J(P)@))r}d(HuVS& zr)UwZwicnvO*THYYgpL&WZOOW@uuTNvuX6rB;s^bt@sCNew0eApJ*|Sa1_@2Miagh zN%J#>jJq`OOy*0Y&B^Vb!#<5z!Oc$h@$xNV85Q@K8kAl1Jft>`D^((?O0cT)h8KqL zizQcAVl4i-1^2ocS}=twkktKZf;Ew#qVU+-^xX&{!}OV(iFoP`Q0XafFa45YhhlY- zJJE~Zp`K9b`mKtb6y=O$!MK*K={!I`eGnYE*@l9QV|eY0*15@9=HaQ0Ak_5yB#WDi zMIJ!@my&kNqQ}<0vMU#s6jf=HC-?sNawY867VI^=V2433Y6Fp#=#NS@rV^k9s~!tL z1|Q4@fW`|HlAcKBjF=V3Enmd}S$EMW7-0gt{kN=7%j$|L6wFr5@FhPjLMcwoiJ5%B zoFx18M&;lq6|zjb)pefAc?RA{7ETkk{*i=$vR`21=KODh7Oh}f z1d9mV0t>5Yz?v4Ay%+nQ{R48z_nav<5qjdzMRmshwD;D7^odwWty$)3ms8(WLC~E+ z)Ypl53AbWW4|PS|k97i4s+qlNY67Wn_wPb*nqF>O?|FdyQx+2q;m2MNXGnbeQw4~ z_cR?z{Dqm7eQ%(sC*?9ax*l)xMVqbZdZDLzON+S2|32Q_y$s4Q%SBUPOiaFY$!&+D z(1B>E)13ImCsdu~Pq521TuTU^>T{w#LOqO128#tACK_+5$# zYSVKg^EUGVZ5*rA7={P!LEwZOTH{d{*veu(!! zD4$W>h-W5_3bV-jiH+rie{7|Z_*uUMz!S71+c3>-I&2RZUHQn|o-Z?w-~DN&RmHsR zc>HyD63$#`NBRe{V+jfd!<+~-+~l>|65e6&9U}2`Mdkio)GL1M!`6IWD<~Kz=wZBY z@Odfqa~6^BEs=O&#ZiKqj#yTf6lIVWl}Sk322p^Z=MZnQavZ$8adPB!D(iF)=Bp_2 zPpq{nh6nMOX&HD)4#jc7Ymc7MjjT>y>TPajS^Lc|X31Z{ zI9qB*#C-+4&CJ7pl}A3Dvdt+IA3?r@l;u64d57;w**$rdwOiDI zV5oUs8<)kQQP#n-#W?*i6BVK|cK0rU>3xe_-c0ZvM7c{8C#B3I3I`qETj9o7fR?tp zv9K+oEoUb0HODYvk&y!@iUjjP)ycgwm6aDpDf&RQ@(`>Y`m}U9T$<6XD{O6?xCDfq zO$Ww;R+bQ=^shF?%-h`~Iq%CV>l%;B4A*t8%OV;yfjk@)Y*sz9M`jbNgm zy})FC6ogSl{p$yE$_XmTM}uaj$)I&AH+gf+YB5|08&BZ}ZU0)ue$sBC;vn#+Rv=gi z5L`X~%&?(T(8)~C6zoG*ia#|Q$$!oWghd?3v6B3SfQlvB4k$|gZLsenKZ6%o?YnUr zlbuPHpF@*fRiH3|p~giK%eew126(g=|M$p7;4!R*BCr98Cbt3TiqZ41;O}>$|7Rek?HKaHOyc`f)xqPSTlRXC z6Has6Vu|ULxRRC>)mFh8Tyfz7g4fkHRE{gWd$OYzt5o&4@$1tU_il(#Lr{#>(I<_l z=E3@|E@j~Rwq8L@kL`}8I*V;Q3b|y*A8LaRBh+HYrdZaXlIjIMCf{&i?l*yAixh(} z_l^xjTxn-yqNkP&uDO}0S*V)@R*i2=+Z#||@K5Nuj)???ATVdZ$k>FxU=8ergi{E8>yUc_Fl9|39 zspm=K;k2X2${s!_n@;CeN~d>d{GRrszxatpT1n+uib0!xGelg`+#P1Gqn5st{&)iPOMn*BkIeSZR3M0ctj<}7Rj<3b!Yn;Qg9^bGeu*2W$ zDv4fRgn|cI`QG(htk)$GU`Mz}F*Y}CemCLIZ&$dZ92)?~Bc^NMPGt!j0R0Cg+l4m( zfSBFwLkT@pZ5&Ct$i+ou8f=ewgW^=qBKLWG?AG zcRm-FKQQL)L!6AyT07+=H*<>^_I)+yLUIAAXj_I(-#K%du6M6Cp>u#m)YkR;gU;J4 zySSz#QD8xN{kO*yu$y+<=E{fRs_(=4UhGZ?m-7Fm=9ki**z&F%9#{(Wq?T zj5dS}A*~mYZL&DaQ9Vex*f~`8BH@N_+;Y;mQ~CBJl9f#=-+d8=aVx?*B+nPQ%ZD-X z{V%-!OS6bUtR^Egy3-a|9zyrf*iY*lu?54KpFs3F*JK@qOkI-SNLet7JZ@B|!Hgy0 zh|gXoC_p32zSQ?>?WXn$Pawxr_Ot$1cUSYT&-xehndvETT zgjX@7Z4HOIxb$vg;wk1`-rQB^w1N3Wd|clq;2g@qBybZDazIaFJfjsizjl*=7~O<) z$RfiESYWTTN_E&De)|b;>|Ib%B1HJgF3~b$(AL{{u@3{aoeeBb1j|{y$re!@`3@%peI^9^Lj$D(Y{GdIw<56eaf&T+mRnj2S7=tPrdLb(r`cE{7dE=h zqu}3m`rzk5OA`XZEX_l-%G2vG=L;;BDM0HL<3?SsX6ZMyWX?tsN9tjpwe{9&?K827 zKe{HgCg}7^o4>~yEAfgIZKZs;qdJjS81x2f5LqjB&@u*zE@SJV(hs2NMY?VeOy!4Z zve~Ik3q^|%QK$JlOTH2s1(H#;e~yY@qfUknyqtq`Uv>=O_+a^1`Lf+u!U0Z4QMyZvuYja^M#gC4vX5?Y2`hl#hNpdv||&N8?I?=cfb(3JzZ(mO{C0ttuxcP3;sE=OtxxW3I5 zod0R2(t&<|{hGVgVH?DI!nc(-twA-rR+|Hd;L*VW)lL6f-w$J&Q48NdnH|pH^c$t_ zH!J2d#qM}LuWpXGpH}sgEY_&dVf#>srB?`}2g@tOu-JpffF1HSViLYOdOA%>O0E6d z1G$@pcsd@*EmV@Pf-yC{>BO?s)Dw#Z>tKI#XIC8CgiE1&V~Y~1J;bqk2)e+5FS4Vj zkF8TF9C|HBrEl`%vBQ*XdD2ElcUrnDyBtI&*+~oUO2l7^m!68h%x}+|8fi7}!9m&j zdq$g6rq=k!sK3NK-k>aI(F(0gX{8=EcWDW5x&1I7>(rY>n6qj}6Cb10EkyI@)Ld0$(y1;d^*R z`(In$&xt6p%V-6hz6q*Q&?rp#a0lMtpv(=dhYdt@C?hg(Iq~R*Se3PZc8>5A&RdPw zzgfgKS&kGikN;`pgDlKPMZ4ZenbhHOXlf<18V z-6Ybt=Z0iYP)pWYJioR+pXX@^&I3d^6HnJWN*BxN$fy8EoSiM6QzDsr<5IUaNgY>9Kj z+bsXaR}qr;?fr+IZL`Fk@`&aA^Q6RAuKPn70ALHKeid^Efzz>oB0aLzwr_X@Utd+; Iq^|<}Kd*h|EC2ui literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/admin/alertsettings/eventmessageopen.webp b/static/images/auditor/10.8/admin/alertsettings/eventmessageopen.webp new file mode 100644 index 0000000000000000000000000000000000000000..9d8fa28c41544af8243de01ad354a9a40bf6f8de GIT binary patch literal 37814 zcmYg$Q;;q|lV#hsZQHhO+qQMvwr!iYZQI?qZQJaYLabN*^wsgr-QW9dyPHdQ|`nEF8Y836nML;;KgkiYW)0N`gp@cBQ()h#f9 zb5pP~a3+wvXX01>`{)buD&ghsr?38(^bv7Yup?j~(CX*!JHwCTFlOQJ6F~6Wv9flWk6#+1P0-RsHJOLzcApwtqR~a&Fb$6H3b3h5w$}JZ5y!P^U!~jY2)S5=Z0505dY83Xogzq~#8CfDg2ezR>X&GACY8#( zfhl}zeze|FS3G+Sj>Z)#8QC*NIuLDLh9U7!dpdpiX}5F^Um$^_i9VA5=P!cDW-f~* z^1K#C;y5|VdiS1%DvPNWHyJkQdzVVo&qfHw14qH&&_LIZEI0GNFpHn~MF<359g-5+ ziIX~xL_T`NS8sczv({E;`@hK@#SE!$wN+e4TXwds6|rg>1vW?`wJRNX?z5x;fBV}! zO69xi2)b9o4Xwa7Q;aDbYWk>KcHO`)v(iS(tA%Zqus-YmpBN5#n~|5lhXQAHH%cT{^(x zzd@aZWccx$!iFd`u{qTzisQO|nZ~#vVkgf?4LSDkdSnL|z!2j=$qF16!Z;A1sQm;C*Il{gn^IJg#XQ#C6iK-554w+yo?7sH0T#F z_fJn3fbAMP0Kw8&=*c|#aumt&1GA$C|F0nDDzUgiHL_rLd88Vbe-NGJKf)1ZGCcQW z$+`uuITq}{-&cQ0WfqiknRbFE0cey3%{l#Q1z7e!{-aA(5`RUC45t!x$A7#$LJQI| zot)y|Hu=F~Kc{E_@MrQlz4>h|^|(u*=V$g2mL&}&lKQ(ZVx3RxQl!ThJY@9&qZ%MA zmiL4TFu69q6o@j3Q5vKR$goSGy_{^#c(V)?l%hk|owEdUBk3EFteh;7rN%O#EvSPc z_{nnm2g)Q~`aIDdefR-}J+BOWT zAlzmn;UmBE(}8I6Q!{!-^XXuZZ|$?db$XgTKRWg~EeE-^VHp_b^JqK~RUF zJMpE;frUCwNZjV^&T#z8Js~9Lf-uQq?;l#Yx2%=wPzK~E;CFE9X%BK%XXsh{IJg|YOw>rcq0~$co+XiZ? z!(h#&dJ^0W(3?w8vaM?Cu4I2ENnSVQW-@-+%pt^xBB1aULgb#Np`- zE*&CBXdPkT4Ggm1SxkV!bVI$hYwwdexEVwh6^~9@K$%xZI*Fr zVW|d(C&Hzyk&MK~FA#>FGZ7sD+S|$9J3Bof;`=XIY7UvHAZf`;sk^3f-^rb4&0zwvwq%c-#s6Zx zDGC?uSIpgY^WdDa7P24>r~U0#r}dRQ*==9)GkZjmHt6lZx6vm5_|E~j3JQr7Jr4sV z5tMhU6)0ZNNSaV%hT8YBcknN-Sm>(T!bUqf;C{ge{Kq zReYI3$DSrIEuQqd`NPuo)4GtsXGc5w{P=K4Tb)!gWHUdU%Rd$OWD_7q*_5^`GR`{4AQ>9+Rjta9^)jnX?#;3X)QIsjiq=|IEw=JvVu%LPIF7MKZB1}{N z58PPFUwXQ`SklryC(ig{rmN{}A2|_GkD+LoR}iQp9!*rpBcR7h7!G=Hm09dS(lB>@ zf7PE7xS^@6Me`z``6UzkR_~-V+~L>fgx<=Fy-^;VzDp}(xm8<|_#Kh|>@%88$SujX zEM7$j{U=pxMwCk@B#6QIlv)-()M} zlVpf%)7OxSXn2UEV&39)C8t$gj*dg`E222}$Z_R^a|XBzjkcE!#1h<8rar+`vr91x z1H<4-QW*;nFDm)1?2i`~P8jJh{=vTTT@DuvDsBe(E9kRb(pXchG3NhIF(y(U zeD8y1m`$0{Gn5_oo%8>{3;#dsna&-%S%eOxiv(0j_J2A5|7l{W1l+mG3W0w7FGxLb z$z?)>Y(;<97kV9!Fa;H!PIsTuW0HrS#8{09G0vh084phfANSiE?Z-5Pc!rFoOh6B_CB8rcJFnsaIy#YIOfZVcOA;mu!6_L{f{M(-cwYKnVL{t0Vf zLVWViO0PY9KM5XFe?x!qNy!72z*yA`1jy`7hlTy2z9zFh(ifvUsH-mx^qnBR<}@Jf z$U&;>%HqCx&8Xf37lvjV@H@O$?#a|gB&_?jB7nlBYhj0bah|RzdIGfUVqgf^9`lzmWREoDyZ7JL7sVCf)QcaN+gjSJneCt!v!~ zA?_m~%W=a6MHx2Y8Q<%paGn>x;|&$&frMBRRF=zqpPH>E{qV|_=>tM|y=LDLG#B6Vu!N+D##^T^N7oKvK5>S9C<`4lp-l!SV~P=Tc?lSe^Y_0pw_<|FYS!T&Yh&QkF1bTXSx1#tvcE)yNq~ z=c~^p3NKF6JI$A&8Bs%&+ci@E5Q7i5i#J=&O>k5s56;&nnwN4kQgu7*oX+Z4U;9DS z-BwR{G0`nNJbFzxr7*xQtOTSXWTP`lh4>yhVCH3=pVA6P1W!zdT%-)YTCx0gvLE*> zeeA9hj8L^hpO?9Sq2H?Z-12K|JP6Tl-5q|4F#w*!pI*SqRj`K}dI`PUNn}w`XG?XOa3U+jQfUpCI_`;@bwT6uYz_EkrLM6 zk6lkOpX7wAU)FN1@xe^+|HkB^MBia}ddzzL42-zq&a(dAQuw+JRe$8PMJ4@&J@yvM zV*}~$=`CMDWQQ(e$w46aFups^mmck*OlaD0ibev4k-7|jVS(1M)SBdeJQcV)KyaS) zu1;qgL}|G}&)gilq&ngJW<>!_`VvTHq{(mXUp*F^YeqGQrjkU`7f}&9C}x+};KaU` zK9QC(Xb6L87r&9zyI+Q~Nil20Q`#h0@-DJ_sk@EflezXN=V%eA=2~FIh@z6X+wj(H z_$r)(HS8q4Pw?|c`Dg*DrQ8vh7eyB2R^pcoI7y^-m6x2G+h4q$6sYif%T2=CPl1 z(to|{Hd$2kF8b~eTy2hH9!&Z4wbhQ7g?KQ7kY`C2Sv8E=zOMwK*+VktrDk%ToZ`(E zT^>)xTW)TNZ4u;DJZf?kQTQ5PqB>&7|3$NA$xRiHftA!Il$+p#EzUVebRbvl1|zf6 zEz}q|!-*AWgsxv=QlScns22|cm+4_`*ytH|#r*q){%^_@1LV5eQcgf#6>swAt^)c% zD+rr0ZkV=12BM&>mP$r>78Z>=!NxceA6`z>zdMcqD$$3UVwiivirNp#1>PbE2q>l) z?SY3YD54jN6Udw0!J4>Uo}n8waa(4wMSU%^3;TSBj3~FUM)McpkB`M5jl--JI~0rUO57q!*tb)g@a2XK zMzQaQar6Qy&CT*pa5rwx)|!+1ZsfJkMwD<_w!j z+tTmL=Ezw*B&ky7XfIWb4S z;!)6_EncE=E-uoJ@hi}Kcy#8SzLf?Ma(GN$w3~g6k)gD?t4c;oMuw;sEj%oW_=~lZ z`-JqbpvV^@K|WiDtAsPXLLrMyyb&#<74)sq-|5*>%3(vSC}E2@(BW{&UtX&Ot`*xM z{337|FAk!wFD{eu`m5+GMc>H$4i&6EyZfKHYZ|cQ%Mqk{R|5JY?NBoVT!(+F;qs-H zO>*UBqR69%q|zW;&O~)oumy#rC?k_W_OC40oE8Ss*DvA+hbqDd@(gb{-gG+^B>jX3 zI9#nQOD3%^EkXE>yw-!uN(wB|YBTnC;X>dZ>N`_+GgLo%Zq2+g5o=UShbPj0 zrd`1|m1Kf7;=~6LSi;*Hd>~!*TrWXU_nixYT<_{QJ8+B)ihTPuy-*h^$H z_^J2#F76(K@K7AM>V19{ImtK|K-l&xDR<{=V&e18n+bb^0u{sBov~0R&HYhEu0)@J zv_bW4eDR9II_*3yn#DVH^?aToEv6l>QY+9PP0~%3`h*6$pt_T&kHK41Fnh5zvB)kb zy+0+G%845zud!#E5AH3U9;wcd7q@}kq8nD}B3Y5Dy-TujUcfj0OuOy0)%JbmQHFBw zbaoy(Q7!gPOv=__!G?#bq*J}N5A2J}=QbI9F}1xYaSf~cpNFQnDot6(g*nRyq)X^0 zUDRDv?#s8jZ|gewKs>2)syT5`QHPRf=st}J3DxM9&bWzMR9#m;w10dR`k%Ck?Bsnm zvsXEf;!c=%aOsUb=mg*9Q&cTUYkNx6ddSoDQ2CZJFlicBB*cYh$7qo($dKVkedI~6ZRw*=p4Mkjp6A)e7;+;EZR~9N zw3Zk*!BV^e8zgmD=)q;i3DTWWBEgth*_;M63usOIoflt!z<6d__7}7WfXsngAg0wf z(yQwS6|dPb&9at`QS_)XfXNJCBPbOBQ6sC}T${5vB*|EUD2G)0Un(+5s*a^hOEnH+ zNC>8&SMl(N;zUbJLro@fX%^y0)C*`o25h~0HuMdr!)@mc>7{&~J;RDYtqo@Gh@HdY z{B0E#k6N+ctQ3@LnNbuS7X@uhbK#6(0&xUmf&l(cUr9~#sJ2s_upT>g{pLGhe&%LA z+9wGn^hvkp%lzr)OAQ}Hd$@3FayqzWn8NY#qV3DwBs~*(1T_Qo3b_5?6!HKQj8ztw zu1mS>xpM2-a!$G8Qa3l?K2~e&sf*w;`g940#x=<6shlg=7HEB?J92^FF9b>94w{!B zh2Ya3<$u|_)X--N^E&0o&Lq>pdz;gXlt*WJ2et!I(JWp|ENjiqO)@PMH{$Qjy!cJ1%q3PQvVGr7nV-SfyL2puR*dm9rJBfPiuIu);dMV$tvlHDWj=Fyk$hSDRJF1C~}&wh}`cJjcD(q}E)X0S)h z#YRe6$6$t!%#x-`H8GeeEGR~j(%$nVzWmo4pZ{cN6eA#ObgC?Bb~9VOU5F^az-2H} zY$*{%2hDI3eMl9v5(o@4np=fz%Wt`)reI=lvtMEK!Gna$2^3OX517>I^Tp=16`-+`aPcSBUF}dNnNUPhEUvaaQ=u%9VN` z=Q(rE&FTB?4gUw6Y^4Fu9ZHgFuqm17Cl8WR*01e+jz=Fz{7!R`6P zMN?Ytxmt$;#IN=`>@~pz^@mCkg4pAby$BUIQ%Z+)%Q zM3hHY9$dF*!F)r&_AdAHW-jB0c@;#n6<%_9-A442^A1UL+~DZec#rQ-JbB=ZRLLZY z0}OM?tVylqxWdiC#SCxL)nP>hAo*x#Ev)CJ2R^#27fp!fIce|sZ$iHn0V7VUqF&8V z^dDinB`XDBujwa_F!)vg1C?SOsS$g{{#dv|R?Zv2CclLs`SR%IvPPQQ44Ilk;Vm!* z_;6rN-MZu^guoTyxo4BDhH%GKIBe)*25f@S`vYxy?JxubcSZsmfBDoHP}OcA?x^M z^Kh8lj|-_7OUGqPLax>0iZ^P~H~Z2kVPse^GYQCn7fO-dS_%EP`Ys*ApGeJI4&Q-O zSCn6sFoW?>>tJAY>@tv*IJ|(;3RjU?u^lmTm9`ycCP{s4zCzOx<0CUe$AG+yqKmL_O~B3~p&96zTcT-gvM@K17K-P&-8f{8`aq z^{VH#GVk-LY`wg4FB{H?w2rY#mwrRSbbc?ReEoKQA<&(}$o-~g*Ilk&O^CI6X}P@x zyu_#}s1d|Jm(J>AKG@W%AqL0~vTk=-t(Sx6dpz}Kx63v8>SpupHsok!{97 zDPRI`jN_P0o1$p^x&rXtl7md%1{d2VF;IE3Y&2P%wgty)$TB&XNEp z-hr`5(8#GPgMH}xDArHSvOFMW&ij$U$%=Fc6dAa%gz8rh$B1C@Ij7x?VNrY9X~9ye zSc9t--@k~`M01h>B&fOMx_E1atOdskAStkR22N4@`OSF9{;{e%3kL_73iI6(lyV2)_KBLig>l%_&>-j%RO|@9 z%Sf^;-6OuG{eck8^;D=Cve_T6<}GK(J8CdmlOZ~=->Dj^HlT-9#fFV(u01uLT+d3~ zsyy{uV9)_D`9_kN2@)%|qL7Sx_)xqlJ6;oRm|Iy*=Bpg+0#5d63l%K_G!Pujyz_ zN*hT8+c5^MhS!{+!x05N8;dN=V%HBeWo7sEX2b zAUR_7W@d!lbaca(zX`a_usJBeFAS-*meA)p%(mEgS zPdF3B3Jede=edvKb?++#Wn{I)5|(D^zp0Tgm!64l<5d1T^hCGo@MyKG3Du^^2um2GS=}@FWY&0U#?fK>xc62AcY32 zjNxE=uwvd9+_{Z&Ho)oc$(6)`@_^sramUD7Xu)AB@KadaWH@(LThI!8m6iU+oQ~lW zQX0yP`Qo}t3XT(dXC0)XS5R-zKO~hnj&36VA(oi}urardw zF&EZ74<=U{LELWuu6q9niB`qMa!u%lEv%q|0*#04567|b48f>m8Ha3s)Sm5{9jn90 zfuTp(23h-vU`!inYHESTOjHi&n(d#S(5Dz6`saCU;iRdLs&NY$V&_kiGHx^|&QssB zN0l*!`%VkGzL1bRSb*`DW<+5JynslRnrh)C$KnX$1d!3QksdjrU;@D<)^AxP`QhRi%jFgFOdl8AgcYNUym z$x6o`)eXA5Pa9|Qk$tjbBatFDl&%)=Aj-DH@>Qkm;{Cken{~5uwc#Hmmcfxb76zP^ zhbd10P+CneWaIV~VJJeS6cOC4Zw(5^Jeah;IV|lJ!kJ>X*JL{>s0wRm4r9f_H?hRD z71(xlKKkz1e86in#jCyE_E7vaM0V!`jM(H_Zn(1_$nIWX=HFZ^+}gH$6R)H5P$M`d zI?`8u+j5TLE}uO~pgZAoa^pYyqkE-hZxR8%7si*qK*G2X1Ow&NVCSHjm;i2D&FGH) zk$P%krO2X1qgLU(vI?Tab&sy?MkPp?I{ymncB1uZqV3IzDHlJ1F4Y73Tt}kkRQB0}(4Sh6hPDB)>uV)uFs6%8gEb|Ij zzc%zGBPv2=<{fy)JkI%;t-Kb0z}NOA1E7jLj_m`rDc33xeB8o@DFYbx?up-%Xi*E6 zit6nLs7})l>yKqMfcDFos1qSSTe#FS2RNS-yR2qjDsGit@wZe_XxSmN{xRNhdcH!SYW=ex1k*4ZV(kLe|oX2N}|}rvhdk zm`|Y~nSFE1W_OE;xCaDqj8Ii7rx)sK|Dd+p+%6z=k~dB6GvxCi;_pwHeYip)fX5E# zJh!ftfQ(ZVp^K%#$h$`WHKNd$hOg?Guh04G!(x9?pmVK4Tcwn`RzXAPaI9UKlP2Hp zm>J4ozbqGXTh%ghC;zAOz<(yRzL@Z^F5nr#byDO8kpwBPBt z6EJhMbJ_yjAH5ofC}7jg(;%k`M=nAN_PT{{)jpk$e5SkDp-*)sWa~)tJ)JY*1Q3M7 z4JJI~G~Y8|Y5_9U8iT{lkmngqD6o7pgKKOzVekR%A2s-hnYGYC<@LRoDYbeUF?DN+ z94VG6`Ln>KU1ShEyB6`d&%@Ego`J?l>~_2~w$@MNB8ha%vXqL$G$Sh9e^~)b#s!e+ z0P*fO#8pMv0-s;cAlQt={Ct7owv^hHE2Fo_J2EQ(z%SV%O)o<3v+yZ%F?7VcI>2qtGM|m}zO1X>~Pee@q<-#YB2x6sxaBVy{mtV69on?h+0+ZieFxISQuMQ=kB5DmAw{WmD;+N*;{o) z;v{G@9@h(le}p+0FLia`BCs@k3olHv`}qyZ;S>r0lM{usl~6@?vC2BZ zsha++>>jOf{F65o)V5Z~K(o_NGJgJOn~=21@d;UXvUu-AIqQzHpW?Fi8e#(uXT*cW z#;#It+Y9=no=+J1Z3At}?a8o!`A$X+`vbC#kpj#}Wv3G+m1FMM`Ud|yuUlI=2n+35 zzVUiJC{emM*k8VGAjJ`JN?NWp$oC_0h3h_u(=BXe>GV&+#XXKw?iS}+RI-9K`%hoG z!-_)}$w0>5ar{$+fbGUIdD3KicKSv2Zsd8;Ti^lVa8V`23=Ms8n0!;OBpyWWHc_F$ zIfV*xHjBlW#J|3o#ptVF_d5$5j_DLVIOV|&cDo7zL^-MrA(T5JN^pNrpw_0o=$^{R z54f(Y{a0-bmRf4mpCe2A>e$B3hA^ z>=K)5an)75^$oe{Gpuy`?a7NSs40&IS$Cy5WA;z&E8kKU@4Eq!bFyzMLXA?24AaG_ zWz8h%v1(-LL;?dvIFXgpo`0Fq!>AVFOHj5O!jf59lRu(7GZ+RyCnmF7t2zq^5Dk>||0D<>s{m-NVT@ikan%bIqp*o)EqGoG zm#!JKJ4ZuK7T0N}CGMUYVI~XLww;2Xc=NB#{Rt{a5S{aq6wLXY=UTA|cq8 zu6&c@WV@Yx)ZGTak1D^gldvT(C$osy=7_%)7Z`69+V_y`W{C%St1(FL7-=kkU&Dom zo-xRI0AroLLt`me(Up_NjhEXDS2@h(Rc)4u7Iw99W@6pkIk%sDk_*V-QxvL7i;eel6SBXHhyBJo{}i3xbo` zNa4UsC_w|aGt$NsdEd~m_G%zxE>%opz#5oFlPDRP>Cra&!F*7nv8#ulvU`L< zC8M(t6OJp4xhUmB=8a%$io;jDOjZ93lC9=Cy+YlaD~H}Z$`vR5Cw%?^jat&c>Jbn$ ze@C~i1$h_w3G$-ll|c&P=vf$pDFu zX-KXgEL)Hc)bqe}y5ziP^gU#8Lb?x~O&5i$eeEi+NjN*T)dR|y%tR=RsXN2c$XzEs z5@u5g1kn_@XkX2k5>8{n|IOy0@DGS}C)LTGI8?%Yk8=+!r%({mE z&2ro&peEQ81KDWb(qvGXYnX68MX4aS?7(_tBk;N_%BIN7?dA;l;|*hetSWaJ^3(&a#26AvSAO6)0X3`+_f>c9g}4WRFhv;N^w|8Bsz!Zxf{c=U-zr zJZ&UsD=uO66_J`L(ms|NgvP3WiFe>}=%klvkUMVs@hqByU`|R1ouzv+RwRj zb+wBF!j|$9)}`-a#P~}sHT#^Dpxg`CEjCR7-7eO+e5{d(oFN4(ZW0`&K{hiNsjQa> zquf?#a9!&+H-oN__R*xJ+shA6i(J(m=N!#e;gx=H!yCRP5sVHiGB~!4wNP!6?E2eI zy}&gu2H5RepB)WoNA~)gt_(yPhv{NT%D|p3g<7BIc;a>6TtoijH0ILWF};68^~jr% zwN)^evI9lwBwajErx3m$3ip7~$n)p&Qjj{QH{(iHAg^RE~m z(Nkf=xf(fY1)pf$g;DaXLJEx>oMtq~K@7FOzxtrjtS+d? zog@FMN{(L%6*8jNz=J_n2?;>-FWQYNjLj#3;g^l8+!{0*41NlsBg;EByjoK}#T9nQ zaM>xJGE8Fi>TVGD^9!<__d@SgRZ+2Gv_E|&JsvOA5Z|{RRTfuCJZ-9 z2Q1LK3%XehT_3$(m|+42k9xq;dknV|7AuKmZ%T&|sF)_#2HEc%%ehZjU22>tOCT$8 z;VXVR9YLMimj|8H$uiDMRA%_p2>m924|osO9op;W2?qU@-$sah#N~cR@hUZVf$CHS zs0d=ZyPEr?3?GB)uv_vifxiG)^mVd1l4a}b3U|kLnx#9utT>SpHgLvNIBZn`%)%G= zW3tg7^gx#~SBe?B1%4TU@Jms0RiFAz=)bl~if7Ztxj$xb<_KJbEvt!{^Inz-J#AKP z3D=d1MqEcH(Xy>_cmSg`)PI07QzH&N7rZAu3kW) z-T6k-)$i@NmBJL|s13@=S|wEG-)EoZ_e>*!^cRpkIreC`0&ZI9_-w7(GAJ-)P?tB= zRNn4GPL{w|m)Cc|hvMY4p%pUTM1Te_#3`5Ym^ zf5RL56i5uJUkV&Dg?aR{4Gi>ZX^TYX#I}bGIpXB$o7G{hnzkM0xrO%w+8x`3+;NRb zp%zt0(GLGS|3fW3zQ-A5tX~c7CiBM7Ux6oxI7n&7-k@(P3tz7mw%d83p(s>tsmoT0 z54ryVht5XwLM;f-s#XLp!$=hhtXShw!JJ5sa9@LBd|cGiVjg-bZyhs17AJx*SW}nd z*TT8`PNRV;yQqQR^h>Ex!_4R{4z~hVLx+2z;gX*4!uU;0MHlVYm(fVqGf%StDz(49S z!2>pR^YH@Rx_OhX*C(VSy7g^FbQ zIlSeKd3pA#-=x4Adya_9K29Dfr!rp?FJ$sP^D0iYa9?LGZklk-!d!UJZ7TCzei^YI z6dGH0zk=Y!l~9@Em5!|Sx@MD$1LCAHItzwjDE(Hziu1Y*BS1jFF9?Y)P+^KS+y~2E z7QqfAJF~@;E$@Yb9p;pMMEr^LPQ?@hxLZNb;dm^ybq;24MqwYFRS`)nI?L~yt2jgx zgI+@=~|aezIx4GlgBD z-U`+Ib*0h`mV>w=2-#`Npi>^I>Brxz_#hB`Z^7=K;Y*$_nsao_h!#_4m=A)s5m;+V z1-*zy!y^}w;%LgRf9uAfp;A$i*Y++{P+-My;^udLIt1{9n|2u9HoX;EpY~8=(-2}ipR*h$*tR%*2l5oBfbE)HkI`8HqP0u6^Gc10dev%MGn z2y#>v>iEyq6vs7}JogwnH`7#3Gdb#bGCls3u*S2W;}dq9!J$$A#N%#K3T(92BH|5j za*0f8(Y{OPS@}-}0t?#%CLG_fO>r~OsFL;dNqD#CLF0@svC^?8tkhG&McEuS|s1W#A@IJ=c{WC$TQLk`(KYf5VX*>t&(Hcp3sUSIEWIaSVs z{*j91!mf8MH9C&ob?_%;f|?cHmces8DwAD|{hOdK(7E^0rA&l@9xL&6LpQN45fL>+qzccFqK! zYmvvb#oQpXz&_6*zWlraTxHCTw^sOb+Ohr2K{7XuR>LNhgGiM3=5~C1dIyZH0n29; z(mzoan)4=KoO%r)@6XCw3$4SM%Lf^6*w-Urqw*@~ z@B|6ImZcmEvA~QCF>>h5SQ7O_xCV!rRK(Fy0~(w1gKcBzG?$b1hKfL3B5(GgRiG8` zDNG=>R8bX6arSFBq7tjBv*+|^FazvG628kCxAsm^{RnE8r;x@agur_>p#(i1X^(PV zT3P7E%NLNl!V1=r066uSQpqXg>uj5B{J+MD$PLAFS97ED?Ce<0oNlfd7mchf{^!mC zp?=At3neYqRvVdQBnExXQNh5d0PW0&aivyE#Km|wDJ)c1OBNdE-LOWWq*@}ArUhrb zvza9>f<)m2$sm&k@t$;pV9srmvsseHQYwy*f?6Ge8bvDLl5|=y%-lU|BiKhc9dk1;?n;zQY6IHs`vRGA1l6u(T1N|@{QziP*Bgmao2 zm+6mdTGrUo4D}3W&R-Fm``#}LQ1NOP6F70!DqNsE&)ZL(niZ5;I)8AmiU9nYAyXM*1Jj1eOl?!Hmn?&O& zZf>3oYdpj8BXJ&E3<+&3>~B=E9{J+r z5B)L^FT$js9`^p&q;{2jU8LP*GAL)1^Q%oS#<$b_6(A7WN8>y86?*OSm2J4wA00wQ zw#*d@V&UWdbf*`~nDD#r}7#>T35eN32pjBwOJfn$N zMHKi`MLT18x(#?^b2m5C7W%P&jMu}TqF-a6`ZZ>+3h6*D3D5%FGY@_-M{{22{*`-6 zQLNgo4q)C-UjNIPXguIbv-ZvP8YF4aRC^{$rE!}OpO_~M5RXb{37OzyzNVahWTaZf zaejd8x}SL4PEW-SIZ4>`qR)az@8pc4I`a%v&6k3BYQtnl!Y!=Lz<4tp<6K+pTgfZ0 z!7-c`Y@kfcvz2ae?BbaflTtqTR~5uBle#94wx36I^lru-)lm1G3Qu$+dxOZU@vp-X zhoDiIsUq#WhC&LhN84oPY2+5w@i}RklY3rd)m3|l@$g9DZBDs=M{@99rx^ zc_ftwKq$^qX7O~-Rizw~i@ANivjDSA)l-BEY%+KFT5V+8X&O9okUgH2rMBLx+_8KO zHCRFZ@a{udDb_sb&j2yd3*J42``dPjNROg5fB>H^Q0;NJDher@q_5elR#4xIcf}O> z@$JCiSM%Z%7}^py4;8CiWe%lEAuv5kN$EC8Y(G^pwQUn&8F!O_LkW+swmz?}JjxLo^u(;Pu|;Q_YUR0{A=;cZ_Bx90@Zz!pH#fZ~@q94D;g zNCi;?e#u{Rm#V;v(h<{nyZ326rE8Iw{W3Ikm~Q@YdArj_?z)%9k)(@FqT3!5FwE0N zxLFL>IBW35p|E92gZ~8~cOg=jFFe{wt^jM&cBYz3>})kj*fKJC&k+=z0|zbG`Qyy| zZu_q+cMFhey0BA~##K{~PzZ}gc{aJzUn+ayP>|N@Q4)Y#s%dDSOJrCrGWW=Z-V+{C z2fwvY*Hdcvxs*t+qb>+qW{IJz%GQP741b%;E*?OQ9P)+#_3_JU&%eOM!8|Viq{o3% zOQNQD`EYUt0WrGa8@igs#5RpR>DeKP=X3Ptnoq#+R(K}fY$RYcpZ)+sFNOWKB!SwH>_mE6dLc+bNU$zA;e&HndBdN}ST<6QH+QA9^jcQcMV) zE)JOlDEMoj{Xl~EX>g*8#?wFqXUfRHI{S+dg3YpjJ-PJs&SW2@O*DI0C0QU6TWD{1 zqgB3pU)R!H-N$X0RZQS}OlFDFEL%7<_}+1&ql?IieThbZ>MMdEiQAdd=KT{Jlcxh% z_;n_9Ya;a}kLw0f_4eecjxXZ0#3s-Ch%{vF84#d~5x=u@?}0+suSN$7!IM@IK5n2) zMhkW8HX9<`!~AC6k4g`q3P>Nrl2@#2+|aJ7hwVde+kD%^9OU-I#R){y4%@a<0(v=I z7F}6aIA7M>Jr5(xjF1C76!u3kSBSd60wB|2>WuG~6n!%i=yv&rLTbI4nV7zrG0enT z0i>w5XZm06C>s>HgRv)9Fr+gI^JfL7FvfEo0KD$=-Q6{8k=8`hij|-VnFFV^&dlsB zHTO&d&ZQf33*3_(bkY6H(DyJT7g(!W0%$c8O%RArwLi3!c@@2`tna2zHv}yRvxvts zS54yv@E+yw&`8N_S`*CqW@^B+)gJj=H1B(~ElE?OT>0LmgFpC1t0M!bXI-Pi6xBkj zThBbB<3=Q$ZG4U*6eZ0H;aHLI}kC}cRu|^(F*$Rap!B`O|N8enGY}y7f z!cw;)u%)!h(a)s(p=9KxtJ#g7<~m7=F#;no2~`fx2U__UdZ&Wj#;mno&&4@=w$cU1 zBBD6Y_#umif4a}V{{vS*sK2mlbEsVvT<7PB(THZtwkyO~?Yy%R2pJyqC#V*-4~Dav z<8D(R!~CjRykqlmgCi1DN%=ZhZ^_f9xVS{l(#@SVfwU@ak(wwvfE|QrWFjZGcLHxT zwqAcwr3^?-kVRq{3O0kHFNXkeX0>Z+5~jSdXG~*`xC`zP}(~U>2GAnX*yB&O<_fF%8!r zr%gDV|Dp4K_#LD9dvpkC#7pzN#GuV%)=2FE$XzChepPC^e;-!TnBYc^^Yx6x z-_IZ>4X9P3Vvx!A$i#_c#Mb zZn7g(7w6ba*Qb_yVlxgPXRI8L1uxGgLKL0zF-gt`+@b z*3teT7&O^*x%fOzIsSYz0oNjO{9y<&6OIeN%zB7lo$JvW$;_<-Vmt{@TOa1t7l20e z;ev<1agThasvL$OWiHc&lU=TI)iT?RCDg;8w)Hi5%yiU(w-l+ujO=du)9YQL7@%8iq@@o= z)gGgu`Qtl@%Z^ig#ESIQVranz`?gBBkCbK2Uu`uW2l-(Yz#1+7ywJ9YHVSJQT$!3T zX1?Ttt~Z@-NC+xzl4_k8x2-FcCvx+@(l~AqK(|aSh8^zRxPr?tf&?gJ#Jki0fYGfD zj?zsB&&6rcfg8W5)@HhQC;5hx0i|02x-Kk1q>|M(U2IPhMBz6BvEE$%ZUOhE*s(-m zz4T&}Hy}hYy*rAGwor1VSSiLo+J5v^+KUnrj&_L#PSG<_u?Cock@q|Q5lq}KDoM9g z4dZgROFh)pz$x0Btt^x6e!VmiTeRMd(I-v|SWH-@P4t{nsyc^7SY>B^rwSK##cYg? zwupypyO#G8qV~L*sIVp)&%|?1AC|nrmG1{{qro=BRi3o$prZh)|g zRy=vrDvh#>8p;?Wh3l4D?G1Uk^ft`Fr);X)!_Fdxx8d;o<||fDLN{Av5k5e&1Mno! zoI@%p{jNc6s@Unq#-fdR5H@16>l;n%i3PNY_-GhyUkh6qnYdKmn05_ND+>`&t-t~v zjF4Emp)xj!0T28Z*LjjY%FYm-#n4NZ$uNr^U(7q5N4ZDWwGmOCtN-k932vesx#~UT ziKnCk#v#-mz4#B&t!(J)DYMPKg!ZI!dz-@BBdE|RRFt3)V*x2?9^$C&{`4mb`;A`K z5`vPMAk9k3=2rTmH>!MKt$~T$R0oy9?BMWJ%5EK~{&IDdmWXnr zwosco1QvJ9i1(a_VN;;oJ&&8PmhK_3=f;)k2Bgz&O>41@oOJ7BryB?!ig@0on%gxc z<1p5d;tO5G@GS*1!vMjC)cmFOjPuR|HI8AfFo>OR> zp~APlx&Wg-$(7KFC>U}+3S!i9>)aC}!ksxrlpp^Rdb|#ZbiZQc@&TvBdt{xHfOX1y zV|KHELl9JnL590AcA$?m}omixp4Tkl{gLu<~52q!P$0jju_A~7RGw^rk? zpJWqd{lI6~QB*%pVUUU3zPOC@Z>zR+WVUBEndet0&Rl_$9eDdrHh1H%%Rl-0B%V_! zP-ln+@zoRm5ClJMaE~P+u~FQBuuYHs%khWkr6^3jZLTs512eX(Wa{Q`iSsP}#rGM{W>SHNCOfU`$Y74V@ zAW9SQ&*1Obb(I`FKS6)0dF<_xkw;0jG71{i@JX25>@ zvE9#cGnl4Z;@YSb);`Kx{P+GVwset7a1JI?+?uNd*!E<_CQ8lLL$B)k%JH80)aT(| zl2m+V0O+{^1bm$?`gL7hv5>=BAEgG7ewtlgS*xkdB>Fx(5|M5Rctg48w(%B*`m-jN z9JUNKU9;?Uh?3+qV%-??#G~>3JP^7XqHiOqApQ@pL^@zX7FBbkq#+{hc#}jse|!O{ zOvio+Zw4PPGyB)VdCA`eWjKNm_y-9aOQK5~n`U?qC#|*4F~XyF!|;N9hz@d2qsSjm zGl^^ukuN(+W+jIQJN&+u2uOxCGw`=NZK^DnP*Oeowf;X9n%VSGY={)(;%ILXIBJsd5T8lh`LL>wTR4k2Xd&5DMmG7i)>m^%h z3gB5+?tS%rWWOUz7@`(fZ!>1}6>5;!8Dv8M{Hgzk{L^RlR@;Psn;iMoH~f2xMsC0I zA<4P(DXqpX0IT4PqVYIyY4DbLNL(`5FF%F%&Dq71@-H?B$1FyBx8hRuklH@AoC~qh zmpIj97w9~+W$Vb^^b0*!%o}Na*1mW6d-)SWZ9VxgmaKDS*5;#|3Vacn#Ud-cgzR3KgE>(`EW!zIwh94 zXby5ed(!9C%7rW|r8h))*j? zGzRgdQ0_opsE77^2ccbc@;XHP1wXIx(faf59jG)3wz&3kelj|P(%_}rxyVP&k?WFu zjC3kSK*&~QL30cE6w|bcuzx3m#m!;%sNr+W<;zO!P#6enMICb;n9|3Dz_dm6LHw2D zzX=PI(>YE$bU*dxK-@*$ZpSe@&K%NcXP8Qn_EbWYWO5;(Q{iU{tfg#h3HoV(A|GHaOY~3n_?neWt{^JdHflMeV@j? zJ2e^z5~WAPEdxfbfzf*yPz8LTu?llR+D!mbnR#@aG<*E@pOJ7yHqjD?kUU=2R7KO@ z1~+#}%FawAwQf0T48X=sU-ox@MeT3)FJmuM#l`Y-f74I`u#@YD2K?l*+67-f6a&yE zxxF3JH%Ovr{1K$XiHp}NZr+SR?JFd%pRCx`H|BT=KX#!F7q-sRUe14fPak}sBI~}GTh$REm~EK92x(8g5g~BVirXH z<=ZtAVnG8n7_~G7fY?K|pwVfUf2m{L%!$&rEM3)BqNY?|BVdskxkK2|u!;rNSIG0hD`8r<`Iy5?=8**?=cfRN5=?+TK z%?!d`ENya3(_nb^D<$Kzu2SYf?H7r9tpIQEOe`eUgucxfEgnKaQ)9jBanTkk#b&n0 zDMxDBk^$kKu5Vy05>+cI;S}Y>m~O`QXMU(B8&v2cm9lD6nuE}ybp*AQn3!CVy1-{f zU5Gb;rh9#`HDNfUM-9jR$v$~k4&wZnFH&k01F?4>{XFzb%z*Y1xF5Fk#Va?esbPjJA7U|+Bq(f2V6NjnfXmyrwYZo8_vAN7C> zr+)F7zL*D5+qtzf~DJ|Yl-bm}Zw(q3q^QzdQlo|>fjV{BMrforA5u)n22h?`_i^*=iiL{K)WDx$w1QvrEcTXk4V;ypV?Z;f;^kErJ@Id!@K-(DQyP_NS zh)$%gQe~1bUO#w&7mS+_%EqcrA$5Iqw>?<`h$6%iq1G5O^sw;ELTjpLY38T8mB(~nl4N6+*>I!&SlZcCHu3E6;nTDZ{b}{n2El#DDjjK89D9})K$FSw1Tx&=&yI@NCVfNO46m)M ziqEbu+KN;;nOeV{Y^$ON>9xA~V2_uwVV02zUW&S^NF6QS zwebX2c|B5QD2Ws?eU)1qIuAQIltVH}t*8AoLvf2r!^v;$(Y5Nx@n%2TyuNz!@T6tE zl7-SJsdj|8B(}52 zQ>J#?F*&>EPJ%$u%N2qP&Tq7^1^EUEBpOqD1z%pxTx94UY1Tm_)8N&r99u~Hq|x0& z3%Q9xa}$I~jbKz~GR%G6ob(kY{VoyBu0VGp5IUb0lC^%}K0HsvG27&wgmkD%s)epL zp1K$oJcDoUiCW0-^QFY%KIhs@6gbcUl(8luXeItcw?tZF{mo#^t{x`L!w)!DW;MMt z5yXpLvL~C*RXyfIj|mc+#-7M{0NL+=aV6UFlAqyty_{I}-8J*%Ts`Ci6iMN|9O4N}R?9y*Q&T@%T6Ceihqt_8f%MYL zDLy+_8wY(=8An7+ZKrbY*xQIE-pqBXq37~-+i_ zm&O=sGDugmwF6po9pA}l221%u-EwteG;iA@H3odtRo7ZM6J+DyjXA(Fz3|fRiJe0)BKmHnFVrR6}{00x{BgI$`IN|#8uMfBscKR@9)#^Ki zzdSkZ+EGfYTsVxpTdNA*Gx6t}NcMa=K!rf}upwRl|0;6Vk1)R#_keTc1{7EhSLW46 z+Kc2sAaaD95JX$|8lorvc^oTDqJw}pVS5zC?!kzg4#x%VaooADC$qwV290m0{#~}3 zA^bF}J=2D>X#6(5@3s6tF>(M`><(MGHXCif{MKB6yt^gMB>8q|&Lb)LBqXUMlVMKF z#BFB@IW?$0@D<=kikgSbzPwM1oDPCrP-aG#%p-m=`~-+7-exR5*%egoV6-OMrBvC7 z6Gvw(6(Gm!f=9+Ewc-%n`zlj*dsg?{n%1!R*_8#PmJ(!O24wbs3Z1b<&anIg6igQv zz|p|X!7sAmITjpfC0pboWowc)mEu8&qvC0}Xu%FV7#_1B{13mxg z$GZ*yuyHEW{ncT;Q3ui^qcI#Dv0M#H0A|Es!X7TtWaSaf5E%{{k9i$+kS`GvJdMvq zY)SAfv^(sIas8os+=`bDWi@he(QZf3Dt6KChWmt~v7~qRa1AyG8p_M_lvAu&dWelh zxnK}0@|mGU1d51kh%Z>{iwV*`!I{~{TaVcQZ0yTy$SjaZH8+nY-6ix<{X?BK6cS>{ zbK3Y@_Y$sD7#W&igyr^2LFGn4>7wzuPZ|3>x*o15t%qin z8pHt{yJ65m!z7-|4;mFJ?I%B9b(t%3qUFolqbd_Z?y#MWUJ~V=dCr4Q?(F=Zc~oVF zcgaUO2hMJBrS1JVHOrvk77wKa5N|9&VAGyn2onI&pkqi4K{P2iWM0&g*^tT27FVvx zNxEu&tB@Il1_G?YEAEBlkol`I+4<_bPYo2cV<@Cai1PwZj!Wm>V!DvzXP&C>p>N2n z;g5A12F{NJ^yc@BrPY!x`iJRKR^5kB!bJ_PeSkx zqPj+dv(9U8o$+Fa;V@|ROfl)B;NdU+hDsD=Z$^u-oBj1H(DG89$;2)&8>tO`;*St^ zxw>M-B(zo@$n=4O%8?MiL6mK$Bz=($YgyFiHQBO3$~z#6J@nE!CnMYtbtS_>)bl9# z7@{?~^cBK!DK5BwNU;lobFnFV#ZIkuE_%^{G#X?MH+>|l5pPHP#ryxrrF?EdU->l1 zUnqz@iB;7IgP*g^+Yt#zWWhfcd@SF13ueiC+9cj$l*2q1*x7PajwYr@e0S>xnkN`; zzy^B>>Vu2X0bSpHg;S!ZTu0@_q&@r)R7nC`L40p{1Gv21Q@Df|B)j}yHip{8KTqyp zi)__M&6H{GioACkv&;cYw9P$IO+qKZs7qk&GNa^qYCoYS5u~}?J)J3|R!7-Nm^+Td z)$skXIwg;c)+$0H8~P>e2i0|UQW91n+>-af6M~N7Y~Am=@L~gx@t8J~AeO6(>{$+c zO&c+d@_(M5&mXV`0G#d;6+*M#X_n!CV&f%zTJn+4aI_;w8~zgp|8LKPEjB;)>AkXm zb~GNz%4YV5v}!B0D~9{H(l(nXcCuAhwWSp@b2+_Ywpm zvCv|#Xb#KLlo1pM*9(zwV&=(%NE>ySH%U+sN6`$ZJ|X>ub1^qXnW&?mK7y*`r150% zzeRt<=T-OUM#{V*Wxte#hbwJxXvO@0HCS^(NQT&P$L}9K^4onZ-%xK{r~5FhcX=(H zd7d-B(Q@_8I(2I%)mkpx{Qvx2KYR}9F|mB>)D{O>`6Ddit#}V5yjZsJpcl4#v<~$G zpS9dhe|BbFZu85-mO|C0s{TVf!`AKWZXvqp#p5jtlxWRG_?=PzYZuy>N*Z zSO?brNK>Db72q$SGnd$npasTYE{hT$l=8`>agWLIrNmMPEO>V!D(T*+VYu&bt%Q6Z zM1h#r;>1er=$X0nRVjgH48lORfc%zZ6=)igE7@Wbn3Yu^)U5;jlbFEG&;gptglHaPe(WkLUsyLF%?{|PM%P79d^CeH zsnp{Rl$**gfT!tA1b)glmPzDawp6bjS-4%AJX|E|F`ndP)i0sT8_VFd0HRK^1j(Ib z`)xF%h|EhY`hU8-?vLW_OWnQCzB$it;hH8Z25xUbAIC>%ObZdV;vNed3FnZeTY;+{ zO4(^(0_4b5GJofCVM>%gtr|D}C_a#4%`!qFYO_mzEK*-3!qC*Xz8Va@mG=9==ISG? z7$$d~2I5Ar|0~q%Q0H=BRD1GZMKi}Le4c%ezk8^loAE3k&hzvmTzAn@seM59qRG%{ z&J%}fq}&Bp%jVG2s<&v;cAueAnxr8tyfFa#f`9arVnj@Z^W>NW6x?@)Lhd+t%igrQ zDttceFpP*s7?+>u;=Os5q_~ck^y>h)&M-PsDON$VSN=|niHIO>L*t<|j6lHb9C7PI znCg;hvncCj?@LiqTO4A>D?G#$VpMKtz;DV?D#IfvHgKs)3_c3p!a%{zApu4YO5Vr3 ztJY|W(J7OjbX4ZDfx>;JNgt&Sal+&*F7_mQWwxLq_n?TVn_>C4*{h;^iItCNL#dO( z(Jw%<$rt`wcl;jZa*`t{oVhO0TcxG^!7neHAK1tA_=BW`W=FGelwFb|EnW!v%Zny5B6p$Ku`z@tccslyk>VwFc%gS+aBkN$Jc89BB znPBrZ0ek>ny3}l|bN&t0p!*V}5r5RM7z(xR7%V?c=|>{hpO#u0OD3X%cmF$aRbJ*9wny3aQ<9M&`Uh#3A48)s z)FNbX1Yw`Kxr8K5p}s#181rpU?~AA}+N(VvCQ*wh@SD9=&1!xWq0jaR!jEK2d+^fI z-F-NAHrmB=g=^{C0?`guG43wu3BU5?(nY+AtzM_y=OBUSP|sY-Xf=)Egm<6O zTfk|{Xn8MZ4CK0M(Jr8P%91FUKxqt0dVcGN8dP;dMa4IN=H~4zh>Q!L=%pz4ML7MCs$>Jy?Fp7f`i}<+*p#mBS8*6KaZ)~lmmttfRiA8J|;$f|_OMe36Se7l;T>Nr~ z;-~XFyafQ#0z3p7V4~q@8x4=N@26zxY<1u2uwZlyXNylIn!O@nVU$sx`2g77j^5MkzIz6y!0OcZCUE?wuzIsmclLa&7uGLI(po1wruNAYGio5bqE zv6U=srM0LyN$|(K1UepGHm@Ve5g2hH?RPy#&hkR=>g`l8k(}D$Y}08>3T{nRf^34; zoU6%My2y3?UuV{Q*U9no1r(+>FxB|bF1w7A@E`%qF4?w>@X?5-dZ*A5oceGkA9`(# zp6HRY#I@$X7hG-~E~F`CjtFrQT!=O6&XG~_J9Ul{y?Z^)oq7ZPu%wxEAN^nYl&O5zWC8{v_{6Q_J^5Q1AdTB>@KV2~df+^0lZB?U zuc!IwEzFh7bhS*=QY^YnPA-AZWvi!A3ugkSmw>6u!bQ7>J7-aUHAN+?{!FO4YZtl_ z+47h{>v@K5ryBi1&qJ_dhImJ>*kg9+*Ty7jz62NA4gj9fAL%Tu7g7fVCV&3aG=Yb0 zWluyWq1)oH*3wfqoX#>Eo`d5F#RC z2KC&`l$G+F#8IPP6&ND%5$kw@$mwes{xct3tyKgma&35yYo_gmr9R?a>m=Nh)t`X5 zylI^AA|l=F+(5KOVsqb%cXWS7afNYPvL-Nz(?9WONwy>vgHBA;S|D?iRF+PcOS99+ zId~3c`!Gy3X?+#<>{=$yB?}?zyMVZTQ(l_CNaqUKz~Zwbl+xkK2ZPh{>5t@WdV|7^##7lH`U@b;9Dz4udQGkf zrUHHBhI5ZrCM&#ake3~ZBGt=(jhL6)Ge6$G#iqz?GduXKShj8-95;2kI=N0uy%U3>8}(mXMQ*D0^*R zVlWH~Z!;P6V-;^1!h~PXUMFOj_wjP?P#c_x+uL$UPU zjj!PuY^-Vxn%Dd9*Zz;#=TdxIvArdw0--mQlB>JF-N+M(b%>XBXE-5fA|g^QX$~DM zKgF}Z5$azBhTy=5VS9fbLgq2+2w5v(eBufYTuSva%YcrY-lqY1I>ZE4XA8C%FvwI=#{Bh-;*Mbtnl84FrYD-;5aUO;p|!~d+T%C zR1pKbGtJJ3n-VFV0gv;H#D?-+x`FEbOm#ej0cBY~{Z0J;cse#wEl&I;FX!RU5WFs1 z^gP~)d^tRudvmw1$*A&nZ!9$1PSk6Vo??2VM&n{z5C8xNYeD~_hoOQTs1Zj_fMR#u zZxY!V#ybdRYfg0IJ>BmLzI#9YwY#1CA{Q=XZTUVf1#O3Y(6HSzn}od!dC^3i_MvFG zMnzcgAUM5g*SX8cvMG|7&}reXMNl{GX1;DGC@|f3O-pzK5MYV3*e=|$RbZ-;>`V;Z zQ}n^zle?|K;mL=?;{$lnS&<4Fogs`p;K#9^MWNQav^v&>n5hH@my^Q~v_Sejbs?A436NE2J!YrcLt!_-aRX~YEra{nku)_fb`2g)`JU&CG|?pO{^0Fc)K_< zAQ98Z(0OpQ60K*sKDlGsozpO1$hLb5jX)a_Itoy6q*Rb3#u8SX`+Dw7wEW3{GYnB| zKioY35}KHQ@z+KVrPdSVlGnBYgBhn7g)u_zSx7&q{Jlx)qI z$_^5`<_YLIwG6;@cDXh_|W;2CSLA6?=38m3Qbh)xbsdIq1?oK-lvRfH96I$W2$nvlz z5&_%A!ocI!%ng1ZU8i(j%~FJrQT6h}a{7@Noh^u;ye3q6Z9I@&GXQ|dyS6E(&J_&v zb|nOwIHQ?YR{DF=%fJFhFUTM`@`xMY_sVY;6hKN~+xx@ZZ-LF)asPZ=u_79!X?Jxs=hppZ58-`KUP? zzAv}{v<2?xf@R=ZBiOaW(LIzU;x0s;E_~DB{V-(@GeQtJo(kAVwRafpSk|Tx3V$XlRCRMn%jcqvOEB?Jee)m(g=_KC z3Y`_f>%45WILMkCE%Umf!qmRZdpV3^5MUB3SrqD)I@abhfFTn0FJFzaWuFaD052G` z167gH+%zXD3ADw}Qf;|U+uAus;kTUCG6*0lDbtBd-YRv?@OoIneEcZe{Ohq4)l4aH zS6&qUgRBWr7vz1Cw6)=keacieDAt5x9q~be+Ms%Ci_tQ-Qg#~&H;L=ny~829DGZ_p ztsAZBKGp(Ow*;J%RFfZ%c~Q9X8#nY!@TLn2TlWX+I`8av>2RdT{soc1Rv4|dEWEqC z36+D|)SzO5C?MD6u$gc=+j#`MO+g*%o;W)a8 zMBo!EG7t8?a2Vy zsY&#Z7fQ7>tYx@=gK*1iK{UM(Ef5F2K)t0#DLB-fOE}b0lba)%V z$b3D&;cmV{vkTQ=M{d@Yj@1isBnlOQ30})ABXdzNESf_CFql z5;Q=BuKc1>IZo_0^l<2I4diUqm#652kFAFZjZ` ze@m#1EXwL)%X!yKRLAH3dIlJ>$AVRszHQA-iGwj~nQow(pUdTYy3@0S1{3o#F@zaL z0UeCkIPAhF*vv#TdGL+7uT86H5(e~E2+8Yu(_4z^ZmznT8BCIJ;66YKQP&NO{`Qj- z8j6e(5$%pFAPM~3EL4@o3O82Q)Kr0(V}|A|WJcP@Fo=2{?XwUr)q5FVZXi5N&60{< zmuEU4Hd*Ny%E#Vs@D{}huumK4#DN8_19_oUq8?MLjxsb0j_17-Cyyt5dy0_eWXi>QG3@gw@!L?5{67ylFO(CI5m)s~Pml0j z@Zx^x*id)hOV80+D%lSwpctmILxL|z#UC>UuAL8yMsWQY*NeYU&l$(@z>I9$L)S0p z^sqJn07SB4idsH8htVmh26@>uYXdWD9qzBHp}3|$hM8dO>b|Nl;lmp$5v!T_w$_US>H0O3AAJomiAwdECz`rO0H8&{u%2q zZjzuNkD^GjiXNVo2{prqBE-)lUt5XTV#R<_xSueh{$W5J$3VEv^DmPk_2_veB~XLD z^oB*n8hO5Zz=#{!Mv!d_gO3uLap9&YN?lLg|J|Z_Vd~>G!CJ2qRk!WOc^CHoG3maQqR0Lpw=HgaYo& z_K6&FFhCmcse(lUY8FQgJ)T=3-`ArD+y_8Xe~(_A7)tKF%O{|bcNARA86)7L2#=NH zYgC*c^8P{D0+9CVC*p#b>9g;K(2Hp@J9*%RX`VFSaYuTULSGXPU%{#{C1UmlCLAd1 zx@$4a!hb+7x$sthMGQQ*L{RtU(_*ZmN<#;-Uy2Ul4S}CT&{09Nt?djW<-Zo3*W(O3 z?8&@yiAPz>q6B8Nok-7SxKVmOaX3e!%^zJ#BkH1JE!!n8sUJ#Pe=p~$A^rbG;;ku; zovnFB~T-d`fpUnGKph_?mvXfq$yQUF8&@cya(Y}hGrQqtf_S}WeMEf2%ZiC7X|nuz3rbe*g&Dhy~>8}bc@f+Ptg-QIh89~>l2|~cbm`eJ^p3ST? zK{`8-&!DhIBw-Hq8hwh`5ze*a<4n-kFW5eWMBA8(Sh@VLC-}?@sil2<*7^gQafd1K z=iFl~fXK?i+E%ic3&z52R)k14$9*Ja8n3bJ6Oi3@}5{`5APub zNH5a4x9NaLraElEPEMRq3BJjgBjH2t8RN*F{ae31c`7`4xZ&{4>$OfzbA>3Xuu}a# zW6W#D!c*?x3w3iNi`EA0pzhGuGOe?!*df-GBtpQfFJ_ue0nH$@x@Kw=bKDS`-sI1# z$Q}1s;2k|wd0!GLE`B{{b^o`kt%;?r3YD;p9MRUPQ!8waz6$77WL!o*^%}|{Q*u24 zCf^&KZ!(Ytj3N+1P^Rl}Tn_QPB<~|82EW_$JW5Y3Dko`s+{uO29UON^TW)_F1WUTg zoJz4HC4ah{K?Y(xsYaxF0Q^gUTo~vkm&c4BH5hd+9^ecmhrP$Pmc^9O(_mgB4M717 zN4ok!2^*Ugzbj#hG+v1L)uoZnu_$Gov(Zc5jDDHz3Aou#6(L1hUQSg8FEECZx zHCYMTYWBo!9WsC}QJ1t=;{FI9uAGvnP6CPZSW~J#;%KL+Lc4NUFUPhSC*LdCV08>* z(HoPxQ1@iE13@oH?j;ibQC*Je2YLUxNp}ef$B!uUlwnNzfFyV!{W|J~ED4B<&4E+N z;V@rn4TfnB<0A~13B#q4+`%CV$a45*R=t4Yssv_yQ><>HEmtUU-nL1=cj6At4y&C* z5^8#|QlU!+6ipa-{3aSS3Q#0I>R^zV0y5WeG4}xMMFiUXo3P6+CnjxD>hODuJ(Z8l zyiH1G%4Zd~5FI{d2?KzsPNOhNBBJ}uMOb~2bgeT>E$C#e!~PBUw#{v`-s|G8h=#4Q zbtMCHk^ei=PegK*0StX^_^`EOk|j8_X}M6>r{O!Vm3yi&!O3~M_x^gr8dkRXEFZpp z{-#|GXZ;5s!@`dpc-PU5sToE^mZ+vkOl83p9Xp;DGSnz8gfH^$?15QDtW6UNN`Qhb$2}Kq4Bp$+%mJ z;s8#~HkSS7uS9?VlPk=R6M(GqxwJdk9RMGh4d$JXTCRe|>9gFPIfHKTqJ)!QtrBBt z^$xUAjlc^qO3Nfov~6aBa$@ArdPENh+~MsbKtnQ`%_{Vk%U2l-7BGiKT9q>mOt?-$ zBDquCG`MGBLrI>4#4~gUR@WAa9Lvv$neR$pfF?jHWslB+TR70RIPYC^nwTJLlx)2+ zWkFb~zq&4Dyc4}L?;2Kxu8x6<;3UG^w320XBTH0-cl;u9$ zRm+4?qRWb!X-Nfs(}6Kb>HfBin=Kawf$be1Ve;oTt*+)(cAyXAI;*=7eYxmd=UgDz zH9y`W79$}cMm-bc@}A_X=Shg%^4Tw^iP*1MTeepl{LI&?1w6!%I+A=n=Mr-OEX8Vd!+rv6TBY3n!?jTxp5ab3QgkpY<73-E*_h{ zSA!*u3nLm(R6swY^cnNJNSwsqbD0%sC8M9Pc^~5$45VF03SoK77DOD`GROgXOC9K6 z)=GC3hhSyWj$G5b@~!D(!g>`$oxRGQ_`N9GL3~N$Jpcn?jbG+A-%zfPIGQ({jTD44 zRzW{E>I1}Tjb_O$js>|fj-(9cCnUe{IdZ1{Rd&- zrA00rWjU{X>8IWT1K|Gns+t)&xd?sr`Y#IA36X+FpuCna&Bw@ikjOpANtzp<$S4xR zxUwny&s$qQ9+dpjUn{wS-J6{xUCK)i^2WLQ(ooWX(H;`L^~LO~Yr<9<&OJG08M>RJ zyJs^ZqgPC!CIBfAC7?NY=Hrv1Y8D2Qp8DYW;$4F@KL>HuHN%ZUkJ#m^>`_B~04nPG zKk)I#0W@z~c5kD@Cmry>ix z>bcL| z_Q%Hx7t>R_gG{7-J-%7x20?J@U;UpO1p(>kB_8E3vk0O^X<%h|w1Qv=aH~ss2}^k1 zXPlxX)OiXCKF{e^!7dLd9Q~*MFMH`<6Eh{30;V)ka?Sym31j%8&wOi<>|b+AIW2g2 zPm#|uMtfaW;pAdSWM~yzn+C$MoIrZ5TE4+^(@CZ!&&<6r&pfmm5w0ghk&%dAD0W9q38svpmGhFrRu<{xdOM*_32vlN@ z-z}43qLTORmU825ONyJe@h97n2WD>ERJX|`oUaVP$no(fWOGV9_7Id10>i9B3(YMS zc$dHA)4?vqH^PxZD_TRZk!zb;INgN2le%FVdWr&fzxRzan#)Rv$LqskqpHMq=R_}n zf}@$-Xi#7>8_W?e=jmaNy0^qwdR5M@*YGD)GE|X~u>Yab&oLYi-p%1E!?j#wjlMX< zeKB}209~`Y$|Orce}sRWZ2CrdDhH5wyXXuIULygvr~VOA^3he*CDIu3_j79Z?EdBd zIh@c`qW{{+o7uH_GB%CX%&1hv_cmc!oAE6@FrftT^lDH`*P3_-;&EKSsxN=(4h2 z@Cc4dSHV$x86)pNwQOs979E+dcIl*#tEqkhDxjvd zBj8BP`&@-9Eu=cY4D1TP>_Kbx-({f}Df&mLpE zOp@r1@OfquK!F(;H+_SJNeur|K6?4#a_=#NE)zZPAD)MFy;BoCL!IT`BsWCd-Tx^KYMz#bGlqjA>6s$vXY1L)rVoGqt(w!zwpD@~L;)qE5j?CVdY$ zr|$~&HI!d2GW9du5yRVj)UFL?A&_ryAz*i(+Ayxdmb+t2g?bV~DHf5SEh|S@ei(tY ztL;*BI%Z5SPlP%~MF!P6?Ugf2)B71_=f7^uN*GtBM7A3YGPGv{~3A_`YHCDR4$)vWgU~GT{%`V?RQWj(2O_h_ zXAr#xfdGgBd6Q^xO|!{0xeQHu$h<6F)Z7+le{jJLbgu;iort$n4zf& zR9V}^x-6L7Jv^N+^g3rN6zRoiW4R$h5hZmWm@NWb=fKT3ukq-lAi`5PrCEYRB_0V> zt_De@julLDKY`d<#LB57&6?5&6-KqMU(T>whoIP<;mK?fC<6TP6tE3qIJD_;6PE|q zSm3o1zwP3TB|)ADK|1Gw2jp!?l2m|W&Mab*M$79z8t6GZv=E5OQK;4tqIrK_%E&RP zd3utDwdoXn$Is6d<2hSPfoB=oIY@xhg9)XB#c_XAE3)5kU`t4FDBi`ILg+dLYZ^*N zD%GG3a6|s_l1)F1APau2RnwCGYc`+=h42r|rob(ns75}01>iNRY#MqvTZfL4tPpxr zhs^C#LwA830z3;?dGg>d+rI&E%I$ca(qwsK3DY0xCuM^{_cl7KeS69Je)sP*2n}c3 zPZ|REPsm+e(pG8%%%S4zYpCw)jN!tER0rF%b!ME*xC)1~$`A9ZbzRttgUyL z0(rg0w7*qMec_9}(5htRm92_dKvZ>mzv-l0|0XU)MDm1A87NMK_ze>%onVDmKV^ib zB_bAv6R>+EKG|E2K(5eBBqp3`^ckkCG(@wrUMGQhRsmZsN>~S{5Mfx}H!5No<4#>; z|9<@0fPk(Ku9NR5e8Ak9G)5ryPU2lneIMK#D^Y4;C(pvRfZPKyO%eUe0?&!?%y=9| z6#l7xP37LR%*q$Mev|bYNjK^~;Xp569S__dg8& z*fp|hy@`C*r?ewzb2<-X5FY*2Hg7)*`W^aRV}9#IH^V+2Rxu&QN9W?5tZb(5z655m zZWj4jN@H&2lZ~K(1mvfG&(iAlin^l#t@%u4#vw}7US&hca=4>E9Z!fO5 zKA1Y?hqlF_M4Uf>FZY~uadx=F5m4>1%dNTdUZPrrNOMuUo*3@SI_o>msZ(RIJWWQ6?mqbicacDO3pgad}$ zi)wSET7GX0$M*>;msH4-iFKBA5pO(T)$G6O{fT?M1<^~3lg?qEO!5BoG+O_UiU9uF z8&q(D%}5BY;!*<$nrT?$-N%GPPZCVoDdx+FNj?S-gKdUk3w4e)#AHLKcqw>rDx$_!Q(d0IPcb|7*X(m*U9 z_a3y*LX3KVuTL(fP0qjZQs5M8=AlprmYa( zveo$4$m-C^*Z`EO|E^=@hcdu)tDwrjF~kKHHB!uyVuPiL86bWDZmc@A9mDdycxypG z|KxPR;#zW`ajU*Fw-C4t&D(_sNW{mXyJar@m;9SdUjgh-pbCJS3CJNXposFAJx;ZH zgF@7au3hf}qjNjZn3pp^L~A8SkFF1|P1JqZ2YfoW5>4qfi*M9C zRiX240!N75uHx(r5s%d+K=UOyv7Ey;Qv4r_riIzq zUNldY$a`|a1JmEd;Ohi(!^*8s-5IdEIQ_a=1^@7P?*S#R7xv@yY6w#Q0({I!%0>p% zjTMNPVGMM0hMr(b1=N#%5+*D0qF+N&=>o9(f4=8;%9*=bvx+cC5$ z&`0uMb0aCvx1D@`HDS{!zrr$RknU8d@Km|{uoAbP(70{k;{|C09KdCn3=i|NMLKb@ zE^hmrk+ggPU$9+GMplNJhTd?Pm16RUJY+W;& zMISF5U6-D)Y9%{d6R;8xWN*}c_I5plO`5T&4|tal-=)gyzU=YByRrf`^Ny_5uikoc zAM#H_`KlMTLMk_&mheBLW6zl0i(MX(2_%Ll2W#=h$*_k&X=xC>AP)2=#&~2Q;7kN^ z3DTJc$z!ZkB>T6{%{Id-)Ucf#{4xp=1BMLv0z{C&g1Q7+{OObOC1VEH&`e+#g%xtQ z-u!lYbFS($xqE?J4HfVcz8d&&u!Sd)hcSLYy@-uaWX2lB3`{`DSJ|>@#%uI;v-y)$ zbCP#=x04lQ3OWg1A~!_M;h4I5t$P)W)~kv7YYSB;E!TKt6rphtkq``-5rK-XYm^W9 zer;POheipS79Bt;htJfo`x~;NqIstr^8Sux!$E<}pfet1s3^Z*&Z0iX%3Fr}PH+3u z7}^1e5@nGswM&XyX80R5x5AMd=7zw?IrbXvC+h?`IgYfkFxJ@jBa%c3)2`S#5L#IG z;s}_Ms!@-(?4Gfz3`x5);A+dhoG73AamT5@%u_{V_} zdGm_-qFQEaTz4e4MIul7G3;f|2L=C;$Y~w8F0_|Qb45|gAuVss@-w^a*<>~K{rxv< zOZ^Y@n@TcpGkC3)QKa(kuL&ph6%K%=e*A5y0wER)*4waLtxuv~@Ij6UV7ZHw zASuJ)(#k(gcrVbMO8pu!Jo?lxgUA_MLhfftx|-xY&y9#nO#r*%szF>d@fb*(e*%eC z5-6}HjIg5)AOTQY*bDI z0Vq*K)U&#s+^)6ahGTCNjo5_WYR}rLLptLRaoBc|Qw9073KDtwXTocV44^XjMtbXF z?sp?;cpL`_h3XVJZTx-8DoL6=#W6e$eDoE*>2`wMNz!%px;y7Ez_IWLemSYXni*^4 z!3AYJF+V%fs8x(WEb#tUc6eV`wh{Sl0faQa zIBk93Yxx40N~EpQ-g7ToJYnR~c7h%{;gFKd(VV8ShJA*$SMl%AKB2nfxjCRwA9rdf8t8Rn~-NPR9f6CnPaGw=^TW^c@<<}MeEk%LqV3>&29 z9!}tCc^YpZx4eI1J!69kC4I2L?YNw8&&A@d*d5F*d%{>8IeCU@YkV!IH33k@##rWf z{`^k~1kMY#j3+2>Qoufd)C(SB@wEEU2i0}+FK^|aT6toeVk)Z|Zt@mva5QH-@`g(D zMb))r(v-**9=MC`dCe9so4>ukLmD!!8Cz>U)f*_qkADYU@#UvGKH>;+3P7|w3;V`C z2$TGOJgLNgaYzR>`qdTH`7`1G!Ce(tZX_*|BtjV;Nu&KTrADxT=Dme%H1a2jg&ahG z;uMI>+%E+C2o0@Qkr_RMC@{~E5et5Anl19b@1@&KV{1-0feCKHt`jpO(^Z5a;mRxZ z3eTR*p`hvuA19)#Q=Ty;u`FfW>SHv|@0^=-UhkUbakA34IkrO=XI%VYoa-7$=cKIfCyD-lw92q)j?*cR7fAIee zt)8BBKif3nS_im zPk}rtSF%|l09jXONfbD3DQ6{PuOpYF59>@PpmGjujWxytd(KyFo( zJ}#z1WAN7=78Yw!dZf6JE{ITNzEW~jI=p?B9^mtNj$)Z&c_2r(y`uC>WVNBUL#^C+ z0O#f;R2N&K*3=V-x(@wVrJJB{(BTFP%%r}dadgopEA$1>UkHLIZF13b3dzW%7)YY2 zqGU+2N*v^SVVKx_WxDrTH}bJW{d)=EO!{cnuZWk{3#sz0>Udko2*?4Vs^O5xgI`xm zKRP~6h-_VbtlTU5D#VnX8Fo`%e|Pt8BewyX{3Omw%Ku3wONn&R?kLSnI2ar^y-k85 zobRlBE!#4Z%x)|Y62NXUL2_Se7m7wzvJ2?g6U>_}O6euQE;J~A``z{Jgy)=A%FRiC zU1imxS}9(Eplk>8tqT@_cGyZ~Sk0%P`SddElE**+F;z1jcd*s4nZP@$kHM8Vlkf67 z=n=F*ZGp*7X#KG((NTo1nb{pC9wT!(gdTQz#nW|QJ!hREouGIR$e&{=XIwMI3XsWi zoA2`+R#v5ZUrmh82HG5{vjTJ#*XnK-S?#^{m_SG`HPcQW%VE9w``6?($Exw17Y)r7 z;d9!?wH&+8UH?2Wq=SfuKIfd8I60b0;8UDKRGQTML~?+6hs11gbNh7O*+23_dK2q$ zQs6=+eKn%GfvNAd-Ra6mR9+xpR8psyloK z7+BEZ6z%n@Ygp!)2I@Hktv?g4?1(7&o_Br9L658(B7#NA$W_uFOQ%Uf6%O7d@~^eY zZq!T_g+^8nQoh6eM{dXoq)!2fb+96wRV zl#uQCHmkQI)I+Mhk&dBdfrxB_aJ!VWrYOZ{05jZ|T>_A|u~QHwJZ> z^dCFq8?8J50000000008VDyq=+$_`~q=S5*e@xtzD&?mt*n8)|%F4VC57Wj)fcXCh zR+sx*5Spn$_>=G<)=l3$`>+e>JUP^w|Mftz@Y*UaIiBZ3Fcx z7)fl4fWr1u^)sVfpocH`#kn;?Tu!=t2`X_UrQ7LwUX&bkPd>&nyv1_rtOW;>rx-fv zcQC+*SCfTW~5jzs`Rs;ww)+u8K>U2+0PLsDf6aBI>NSo+x4ll)8`0QKPDm zRzx0fMV%-j@kbdGJxqPy+>ihO0JLh*@o)M!)mLG^(B;JEO@cGu3M7R!&?S642g8_ZCk5XYZ$^5(oSVy$gA^U;ywC*5{E-k^T*93MbnNrnv>l zb3pgNC5bwjnE(iQ@3=X(K^ixnnqWj=!abWQ$@~Cr3F86rP^$)XJ_c=S$`9}WpO$<8 F007OUq$dCX literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/admin/alertsettings/managetags.webp b/static/images/auditor/10.8/admin/alertsettings/managetags.webp new file mode 100644 index 0000000000000000000000000000000000000000..e591758c3a0ac9351dfa725566dc3a0c12758652 GIT binary patch literal 31144 zcmagF18}74wm%%36Wg{qv2EL$*mg3polI=ob|!W*u`{vV|Cznd*?Zq}&;7oxRCQP0 zu6|Z6{IK3`B}p-{Tn`{1bx|P&H3d$>q+hRV=RmT7sl&i)K>5C~r$~|#=jRj6rH}f< ze>Jy#gHr$Uy06JdLe+}FI^Uw2%WI9e(goSW&T_GT{l;i&SKx4M9J}(Y`8pDa`1(=O zv+fxT=(y_ulspVXeI@t&kKf+?+7p2wga={NNcz=ogu<=fWVyFWkRRUH5XxLsyg)W7IS{6O@x1;D=we<03% z8|ij?BRJ@JoVKee==AcGzw^88g8Wc@WVrF$^mFYQd<_6#^b^Do?0W|L>c3sSnLkVq z6KMF|y}CZwJ@H?>3;H;}e0wFh*=hxBeP-xs1PH(SyaE7#6aD(0^X?Ph-kubI96<8} z<+0(70RX7xKX~%_u=^-EW9X&0jlBe1_w@Lsyr;gHems60z0^$bdwwhOD*=>!=)Y~9 z`>mMY+WiDv`t|u0yjT7DRKTVAYRSbV0N^scdd0UkaUh1N&`jdvDjeI9*i2whLh;E2 zYOM20>P;3Pu-jZlCtb(arJRbGjOd%GhF_<=P*pv}S62<^1 z0ks#Hl*%7OLKz4wt{4cKNCxPWkcyZ6VKt#?J0oI&e~JOigdlD9zKW1)T7Xqlo%-XV zVd^vyStT2O7@e8?+A4-E4PL}V-er~}xCG>4795+>5iYBi6TlA7iUi~CB@u5$)AfL# zVusNINzBKB3u}a=!_%3ErL0U?+RRGgl|xDUl=t-7-vD$Yu0f{w)bxc$;>QN+T$u8H zM!rr}xtYpeVWk0)hWs;XN>Tf4aroUK#x!m-#{jeI1goO@ie?UjWPL&?m6gxQgIeh0 zm5p@CniksB^)tsQZ50PT3x?c;YJT+!^UMDz&VOd%uK*$K zufn9~VXy7ke9t3$XKP~Xpj+FMw|ohawy*Fri!(VGr4e4gybMUg(Gw_gyZC^`6#;;0 z%e0Q$Ncrp>J^S>Ip}HcB`k}vpjJrH^#yxk9{RH>QC4Qiagd+EbrCMIQ5k7pRs6@N) zk6bCHB}~7fEz!3gL(KezZ)@^^AeugC9|*1u+qbq*Bbv-y&XQO|`zRf-zXz{4x7 zTV*|3&S-t4>|%+ShvGBzz%Fizl-Uv`iMbo@zFu|d?o0jil0X&yZRh)gN$pNgIisih zMKyU251g#z3!`f~jfCP;IM|RvOGb5@9oO;`;kcQ$lMb$KRX7auE>wW=SA9&dd3_2+ z5X+jx(g4=wu?2w)>-}SYomCZ{zq>*E3-9>*9P;Jf4tD^?B?^Avx0v{>qi;7|=O7Fm z>%GuK((mbl7aX`Qt92ha0=t~u&b?iUKE(6YZ`~eTM?&{5N$j4hoX@STmPlTo{!y7v z>#<0G%@^UaKt>6EtJHw0S0^zkoJ?x()~KUI3h&8>i>dYfS9PZ4v-$6WNJ8JO(<*y% zl6Yuwjmvv3LvrAc9B$C>WlB?wClkH^DSH5Qtj%H~TnhR-S1t+tYgB)q$zU(3-T7DJ z8akQlV!KsT1Q1-eapCBYH08yoRA4H>aNU%p*}!iP9UJ-|F5OcNJDzDv19MHV0QguG z-ZyxDAi;q$+*uQWCWw4S`{%@rZNZoRJv)igeXVWx0d1*2m5tnQ&iUfpZMMvaKmBn$ z-lLq$N6TY@7I{pL-F^dFKLpF%Yb;oLyC-g`d@$P_YeJDkIjb7x_xC`SA0=EVc)AWh z6|b#D%>DO{w-`~i&$oX=5M-Ga1JPe#gy4ItFVca9RDXJaKlw^g$i~xldNd`T>RDA1 zE8zG&%~cES5C)Vj(%Qs&H;xgRxThVPZ|gnSu(E$0oLqnqn+XD`4sSPCMxqrCAQC;o z7}sw`kuAgBl3FV8+{A<)0LqsyLGOTJeGL--IH`;B4TkJ~#gkVFlNE|-*dEm1iwJU$ zQEOf_J^S$09hl@=9~9x=2to(5cXj$x?m8WcL&V7bYz84x%ew73eGsTEJKR{nK?CuT zK)+3mpDnv`(#rzBn@AKA0ma8u-W>|PD3m3C-P4%mJcx%KJ% zg~&atBQ*cOX4q;r>BXDW7?O605Wzjg#;)Ui&=hRo{?FJHX|$ z3?O1`{dozocKfQd^>4)NnHk0%*QZa`XHpfqG*%*eo-phIFwyuv;_AcfgbAs(2XmIQ zesleeLiOca6eOi_HN_OUR&ncVqt%n!-2Vd5ijO~FbZj$|;pg8~`UJ(%@Z!zO5Wp{& z>dq;DS-y-#2v!q45$oUlt52l?N32Z5C$boV?EhufS7cNF6*1E2nbn~X)0r;6?K_YV z4%5#8|6fV}gPoKBd|og~mHEW1$5NQ5es{bW_1k=#za~uHIU_mSn*7HI^5qSXr96=N zawEnw^ShJ$4yH9n#OH$SphCe^*zRDj}(l3a`K*|3?uBpV4B)0Yc$Zu-?l5`A6))vm&!qUr|iM!g*l%hvfJJ$8Kqe zu_m%p8&0Nb!)RoBweEG&=h-;_C`4zUz@p_&CGpcU`kb)DW68odjLZIew|Hvpa8u+Q zO!w|L26c~5MXjNVSUW+_kgTFl1lM#mw8Nf%>l%bQ74qich##HWCCg9Sy+VXDI$Up^ zO;_*n7&KJjvkjz&h7~8T-^Iq-j2wOlM*`z#B}6*(59L```>!CfqQasRpv?U)OyTds zcy^2?(+x8Jqh{;%wK`2Pr%k-;dYVyp|CUl|KzKWBm;mbz`5V*I}#uih%{_GVdZ>A%)zCyg}>~>T}(;8 z!u&Crlv@MDKexdUZN#g$9aeE-LDd1Npx2Xr+P3FFwZba4oWl8od{r=+t`8tif8fa< z1qNO*&{kkMf&pAbY{=vR5o$&LLva`iY_Fs*h$6q3#Xm*DMmK*h`o+w^Y@Pof%$!?N z|BfO|uK!Oa0;~2O5h@9sqW*Em-XcHd#`?9LQm|p+54ocG(gk2I^qbhk3M|PH@PBQP%S5K z_G<}=+6%9In2;3x!+f;)7PZbOvfBqr^ z8S$4AB|ESZQ`}r#ijkCwcT$$aMZ>WwL*@iG*A*V^2-9)?s5$R(CC2Y%E>FBM)YtY zf2*B8(@e(NF(0LOkz?25^Gp1wt+xkTCgN3a)aYSF@FE4qlMq+ByG+z0Wgv+g(i`j> zcx3OV1Ab%!KK=yLh(R^t+7fbtd4f+=9Fz#0M=gIU?*EXuRXv2(wTrAK(Dh`}w&SBM ze-qcAoaX28d!AcN4G}|yOMS(@At(Hy$Np}FKN<gpHho%XlE?Em7P_Ml~{6D=qc$b#=%196mJ>$&|EAEvww!OSNKaFl3U6mXo`cL+D!gMNu?@o_{}&D!RpZKh76Nj1 zhS>h6F#FqViSN?VgBp9}du<>WiVz7qawWH$TFmu8zlNKF8wf8lQK~q{{t0D&eY&d} z+`hip_eU`jhuwcjzrXAd(A{M?!}$!gO%N7~t!rq6$5XK!g`!!NvZ)P1;Npk^Pr=?3 z?W{caK25=uXkca;?FcXod(k_o{|We{zJMe`uNK6-qSnJ(@ZJI92x6e;2V(<)3qSW` z<_=5AWK{c_+lu470A)0c5w2v$&GCf%1s_~rRmY2yu70s%!uFU-YW+PF|54A*|BI8u&NOtzg7MLzkl%Jf5LCL zwegRLZNm>OaYG)vZ}AuY0!@ES+}~Xmi=YB;+=idPIcc8zVm$ZqOC1*_RZh3De zu}VbT|Eb2BS;tsAAdKPDrltOFgTHK@^!mPK{c0bk$bi5!;4Q$LDFETEuvj`>1EP@irNoG%zm5<~b|BGAx zjp@V^>#%22LWW#TAk)Npj@k_Ktog3^@+;{0A*;eN(ZXk^A~Z;G9ywCOB2J zzEJi_SSS8i!D-HqEFuhc=szv$Z&UD#8&_`|C|W#(`MnX#ZT_KL{zrw-LCjhR>9-uk z&ii-1*9-iut$wSDfAJ8C&%F9w$|oEO*kr1%W#e_OJ}gC>PA!m5=_dP5SP(p8AmWZ6 z)_2@)e;eica&nhwm#b_xLCrc$9RcA@&_6B2zk%#e@%u|6PM|~1zfrlx%Q_sXAXouJ zRc2>c*uwt1c-W@^_mno_E#3XkmBAm8LU*66>u|7zrj9$R*1!5=1{r6?_oAqU zjMz+Pq4#?ewUbFt<^LdVDVCY|20+%HCpVo2gjby;G9Lj3)$Yd9`yqrx%O*{P<&Ctz z>0JG(WB;QoQbr%*9@&>ay`U?BYTlx3!G1-hYZ85XPxTJ^fXu~JX;BN6Z`WM8W2H6) zgU;1$O+ycs)ro{SqwLiYAhew`yDI7NC96%(pw2CF|7$_;&$N8z+2x%zI!*e1JHrWG zwKG~~xcY>Sccd_6^ZbBfIC04xN@G4p6)*;|bQiU@qXcxqklk{H}MyV~M z^AeP|Xx~&r5T(X{^iB~P}CZ%{{?9N^b(?w z<%`1qb$I?aB-hYc@C#0RgwPorA~0s*4EEO58-T$fGrP%85kBBO8U9FqM3H3qd%5u+ zWAeAk{J>T&sTFz2`YB-DI3jKVrKVj@<@XMg1!-_m`yt!;5X}j|L zFqncecMF`9|B9%nZ3-elJE@XhIE5)TAw?tHXmQ;lquZ0lh7Rp{D>^L_Xu-`O1o8uH z6vx%?(9HzUEwVhit@H@6K^l3|o=?TzHnFg|l39-#wnihHx<}Ky{(PL3aIc=ma;)AL zmUMck)>ZCqj&6bQ2|7TPHX*WY`8BCD-b~iGFZ_y@ zVikPd)~_db!6+-%MTy46w$34^W*-KRuxD$=iiYvHX8RpWW_2_CMNZq=*1;GjWNrFp zu-D_|M;PeRnHI%!zHFGztT0YUW^|u8<#%q2`8DU(Sc19uGX9oN^%r!Sbn(1SsqG)c zDWexaUHQlCWP)qM%0D<2;HbLZDC{gQU7drMnit5AVJa4$7A|)vv>88Zn6V!~-$&ZC zVMK=u(;=B$=6Wh0ifOol??6WM13=S;0AKGh@h)h~8jX{gL*#Va87S=lsl=4E+aI1p zC;Dz6?OAPd#PU3iX3kqT`=aQ$1k)m)>BuoIHEzdL<2N)?f+NV8;W)wK%l-|YCZ`&df zR-ztLfTn~4#eiFhvKzOG?n= z17DTgv@TmHPfI+3vOu|=8r+=l-Icu|xvUQYb>_7S;>&b#fxFM$x&B~+y9H^^8GnbP zQY6g0o(iS{C1LDG40V=(uQp{?jKAYW0v5byCEUbr17D%q%ShA(_lmKDI+G?bOZF9N zaa|ALVYN5h4a%2T6}JfHO)4s-Dc*aL9_}@NARvgLm9nR^0uny%UjB{ZZ9D)&?ILrc7Url4&TB31b4)to50) zC{brH4&%=pU#~eO#rj3cB^uDKD7Ls^P#y>#y3FEasQ_%mUIz@oG>&+qBPlo+%noT) zOQ&RzK(#$*>HaBoILw2sIFRgl>R^2ZIZX?yjUrqcky#O&ko@clOLMgv16&c?i^+F~ zL&~B@`FJ1M78PsAU*4_Sw-p}rb##w)5Vk1d;$W)(XFH#{0` zm`z|VC}I7rA_X77Fx7bx+Lv`|NC4tOFum&-@d}(xS*cBatRtNKU>Ew5LKF=uCNu z|1MlJhCA~|noNv*mLmYe+1f~F1k)yMs{AR>iE$SO{bI7SAPgqV*Daw``MHPb01eYu z2m|5mmAnS`hdBxRlrx}NTWj*tMyf_FV9qQEp8q{a1`Lq%HhY}e$Msg8IHl|^zwE^_ z_F?QC$f_w}sUWfxtd6UT6xi>?24Q#y^y{A2xLeLd!%pECw};Lmyd=WL#Z!R~${T5^ zSpSxk8H((roZ(zsj`*M`q7L6KgrpaW_7cHlD_FfOpsT4N3c$$4Yne4O9Tn30PhhiGRgHYt+d;Q#34{-MO;znaEk}DJ1fW zpw6`qM+jN$m`|Rqs17)MGIG|X_fw5?lNKOSdt}hw26#CiDCeO{DZqyT1XG~5DWw=& zXuUOlj~=7m)3*+z?MMMlLnJIj7pG3V;j-@&)*%?Annu7t2ND#eKHP8O^A4vYw0_@s zt_ei6+z|)`u)!IiL7P(T(Gbc_Lp<#3hYcRVbPC#A(T}skcHM`cLmh|B&;uyGh?(>6 z?o;|mphA?+6gTSBRKE61Uj;$1tU$~Afs9UQm|Ylpc0zAu=+ay^H6R6fmQI=#5dM6L zTvTxSB$~*51Xo%l7ie9{vXhgGYV~z!ML$0;-Zu=;P=SV=!_*#*(8fB>*hYmGtp6cCRsWl+B+77%1U(HJ}ye2a4o&n98JV*ZPOWg=CvzT)izN1;CT z3{8}hNivOmSUy69$`U*_u>aJC4xdJ0>xhbFI$2}!69+Y%&rKwToPhOF_FO&j2n#Os zbUm}Rk+r=7ublp-XlHr0fAG_0!QDb}O9LdR)VzV)63NgV>Q=z(LoQ&(tkM z&2Gg*fc!;4Ig|iZepSe-HNXaT2c&5sS_O)d<0<0uYR8b?=i3o}Mdcr+{tBkP{c?59_lW z>5fl0uYnpC<#}$!flN|2)CtTgl94~>Z1BP|+dP31dkh2(l%b~p6t3-d7=aSy;L-Nz z#0fho=a2(T+BSk04IjfZ#6-d}orxRkh_GxpKUP?BZU(;-oS7?NW*CckI)q?;yf2gR zC^xRK)tUAswP#^#&!5Q4w(J!CkVu(f-+g$D_!()QxFRP^GmRufWW3W;$zpcVxgVq$ zqfnDH(mC`R@oa|0^hIVtHz;^$27FvE3%k2NMyR=E8voAJq}eNt?hSzSlhp6bQ|E2| zL>Zr__s5i{+;vF#_5hwP2ts}@xX?1dFoyE5) z(+a=;iI#q8v~wk`0~~-D@k|=?#VMVqnvsUjTf7IP45dfTW+Lxd=vC>~h|M`IULZ7xB zc`hHZ9gH$mKiwW9Pvd9wWce7$WEj=yTJHSG>#44H=;~v}VTy zD7puSWdQGs641Rv{&gFnGnIkx&o{B~QHw4>QQt-YrszuCRu-Hsh|7*XE$MemR>2|+ zPNCAibaP%ma`71{ei~J0G0`ppf97+1*k3_+_JL@XHAYKTPorrU)3s;uMoh~L)@l5X z670DkJE(nQ1XH`C+r|m^=0RXW030Qw!=tBX-?q2^D$BI)KZu$@cH zHN^Q2$V*w#gWo2rpz%EyC6m;_QlRy~6{1YK{JTtUOunk;G6z!HE3(=p9S#n1g@C9Z zxZja7L%(gSHr1#EN#_IWV0R@^p^o2&d%mo&u2}xwH_g}-@Vy_oQ(r{Kzk^+#>G-8# z8q)-{VW!CYN-;=lmnn#ATdAF9EQ4UX7i{jTD%CquD`DpUaH0y>Lbet^%-;hJ7|85D+L^TZ;?gS10hYk7(J!fv+Yc zVdHcxI(Ak#LgbM*6udxJQ@`I1)EQaJc?EDanuXy4jUf6OajKd+?W;*O0 zIb=8^|5`&>B|Y&GONsYvhK~}!Pe8{l5qO+vDY$v7)(@is%i6>RFJ%ybp(JBZJ1^Y@ z($;8M0YmbYqlI05?!JnAJu@^oN(qG^-tgkqmq_IPev!DFvblXS@K&{5Y?~yx8OF&d zS&~b+pd$6~lYWkhN1Sa>t9PwPChepgHs?LTS1(ZNaWe{YyvruiE1yJk4f701dn*v{ z6|8rtuB>iBtg^9w!%u?W_dT60hJo(A(*cOVC_WKE8Jlda4%|?oA>{n>^~mS(5@nIL&ReW3;q6~ zmEzklWOk`!noLjY+YaL-{N$gz=a+V}_`e2AbI996asFB!s59Zq9OS63&H z4qb^Sfh%cc+tQ;n2DN!sVA25{#QBb@W9^7Leb~66lWJKA`{q|VG$E>6dDVnenKOgO zQd<)t%aUrHk^L;6=2UBluc8JUldVTPNto!!v~C!nzDxiAUxfUW*z!aM%iY6CH9BI_ zqsrZOgpgPA8QHg1KlofmpjKGO?dxF#XzIn931MsiqYVc*H!cQ|bw;!#YMH%c#Qg@) zh2m`RXVnh5Tn8%wS^e;V^_YeO6Nl8fL8$<6lPrSa0AJ6n)kx+6HY7Vb?F+F=g;bIB z;;G3>vO2fROl>E+E%7|>W`hp#vA%U4ee5@`ClT8A-anFzaI_K!77nChR=Dd~yMTM5 zLn_bd8V4`Zqj5api2ezy!YU&`*$+2eY3$vy3U_5b$c5j4iI0M=)X(hN-Qnj6LSop> z5$t?)CTzWK9u|$|O5y3~!Z#4B`-bEX_gy^kSby=MsVz~+wWj3yhG)_(2L>vwK3^HZ zmluE59)Tsv&yIL25PAxIQxYWM^rv7w^ul>8ds$!%=kO3*G?;Sxq}z}a(Yq77iOSce zJCqlYk&95-R^5aFQQ7i%a8(v0xczfnVxj;aeyGK$JAb>=HCd=^+nRCLu00|&QO1DFKKXw1X>l|vGMWfi_%OjZOf;16Bk zr^GVwKcU3|aL)`EiU8!5KeyT}H;b5s3&aW*F`+4vPFUZNLHf|3^E25bVzdm2nb&y~ z;@-he(d~q|$!xtp4F}^6I20tg2Pw7Zx3-mlEE0T)@klV{sCrOa2%_JnWNyU!d>|Pc zUZWAMZmUxMO`WE}n7eUItWYOzV3I^tXws5u*9_dwa__1XDd6s4;+L17P`k)3BxQtV zW`-ZQcZ0idhdpCE7(N^&RECWJZ^im8T!QB-5v_2p_I<6lg6Jwtr=K++$B*j|5% zDVkGQ4n6>0NK^rTMF|f-5Y#6jX77^o{B$zFDs}GvMyV#3h}5;VeB5E3RdKQLv@xfZ zCUj84zewc=qN;9Y+3E0+6REj!C|<|Xy6gFdB18v_DC#K{RIQSHwqnPQ)g%Y;+9`Ug zzSdn}K`e(=jL}}_0|b+=Uk4=U)(D6(x16kXCs}%Ut>ZuYEYr=VNhlY(`^CDi@H$H0 zA1E1`Am$_Me*7k@RQ1jsILer3iv41;y8)P~#C_N{e83j(&V`{HRW89m+JGKv(69aT z3D~$3hq$SP<}nO0*;hr8!c08^=xO7qb=gT)K3=}w-6d30VmJupgwrm8HAFY@^nw|T z2PQEza-J#cdVVzO2vCmR1L|H5N_J29=&Np%ZiAF?+50$M0TB$n`RI|7iyzJF~~hObXJ9i^zh+iS$Tv1YXC z8W7$C-q{$Mzn2^D)zuI9OiY45bh@MO`Q)4x)iB933b!s8-4g< zpO-P40JB+$(N}oza2sV4l{4epeKcAh7D>Up!E1C012fOq6#=Bva*jo~b^q31ig)P} zX7oC`H{EJRYu`hEIX+B2wL{o1&voa8sQyd<=cjaA9+r$|gHz5RpC^cM0v1KiwB-bqZsqRKoAHNczE_;8wxVkUTua6v$OUAbhC$bfQu*svGkf>^>ib=Zys)rMCvu z+UuPrT@fbsR(iWT@~!~zoz84H{@iL~JnmjTLw}U5dx0g!&s-4CS15NKApVB!d2*4@ z%u+g)iq#b}Q+`BN?yLUFYP8KJ8*Ljn8w%*@TF9jF5rK|xJ@x@s8nHXJ*#4SzTC3G% zQoxDlCn9kJK9dn0y(hV|M{mxbp8itQ4yk5@u@9lwPn@pQM!1n4;~1sKeZqXe4>pui`tHcd$&wOOURnWRuz`ZiN&kVVe=iE0Grz4 zIvL=|5()Zh)>3IX&e4Ss;)qG%RwF%?(;fZUaKSl0P9ch(03FwcNp!bW?hFaWdXfJp z{_yR-IFzD*viuzQc2lnx#Z><&=8YT^wqpWOIcF+jZxNF~>>?-md@{v0J~WNQ&qtp* z3!+(t)DM419*v){0l&V?%2Ph!5qJm;m(REkBk>q+kp$E1VvfnoY+Qp_MOAL`^TL(@ zSjy^jh;@)vD@2_^eO)>*#40Fu>gQ5X9U%f;6Al3;1$=hT|2j>ka@EYt(= z=QV?aw62EHTpA4HFyIW_7l=&lozS~`7x2S#Z z1_Zb6xXB(qQ zcFr>tB_<~%40(QhYDnzy!R5E|oaArQ^ZR=J4=$s^TXRO_da~~n1Y>a(H&4Vso5!55 z-m>Jq11@{U(HMKik+O6YjYky=Ck`t8wX@87Q^46?w(;)w!@N*?HZDz zaMnL*rt8MUx~YYz0cXQLPETUZ&Tu|5LB9kt^uFu@olH1+vqnuvMKrUQFK-$)*E>1H zb&^!^Np~lVt_zk~VQ1{GaQpOTQ!)8|vG+mS_HNa5G5+<%!th;Wj8=pS^({l_+V&Kx zn;cUsdIV@YjAmH+=i16J*j{&XqCJsKZAUO_$Bjp-3TyA)hZ3SjXpQ(-ttulBp zMeyyuRs<6-@|NV0A|)k`?z(?Qgo+39UFxLqdjMpe?RD281tS#NC|L1I21>R4zJf+6t0O!%e|g=FG)3lJ2UJh! zce~FW$yOR)qdatlIv|7D=@F7W@PM82EI^jzagi{p*k2&p+dT^$R8J|V%r$x(cPxF6 z{RG!oFm&u?s4g*FMYkq zK%x`QI0+h8CLQcYu9Me2RYeWkWiU_gkS8iOw@QL(D(y`Td6@(2xuvu!?v+vcu(h&$ z;=hf1(QSkc>fF2C{0U=4G-)1R#FalfDp5l!37F1zyymT2l(PN4&@TK2%#mmBWk9kx@)T zQJIdq<%gz`-5d}-$t7oMeKOp6Be2RgaGS$S**@8%B-iAc6x=syrTvpWNiu(y+X4i* z_;_+C4&w<}0?b?bZp*CKmD6!is4CftbqLm^rP%@kyQ8fM^feN;Py14%vMm`w4h1h|@SLJ@ieGj;8C5c)^l&Fb8 zr)_%Rrf`7<9R-ckimDD}6A!{gjnxkhm#<;zkTfhr@XmU56rFS*2>}rinRq6i-)vJ| zK+1kTd-nhhk*lf2>Hhqh@shTE z>58@D4VFx30G^{fvYd?VjdvPJFvRMG zx1a2=JZ!0mv%_?4l=!=xd@n5t3nJdKiFi#Dp5<^^mu^!mr zZxO6xVe#K!x4o|)Y9WRphg4vnjpjDVbI8F{7?YRi;&3iDKN?LjgAYyITYR|IIY9?k zOfYv%C)cpnaO@2+&za%n+d2HRaA#v_xrel>MrrAH>amb!A8{*{!u*dY^KR9m>+5;; zBO~cb!G=Gl?v<(~Z-!#(;E;Of(C!oUhCpA5RV|4Y5-;~8=OLUvU#cdK?>@v$w1reD zE^FA{yeAd?$^IF=%MBllNZ?645aZtGj zYFyM-hcv@GoYYO4P)H@tUpT-a$PXvV2DzR~8n#wiN?yu~Zm8EooG9mqnosHIvqL+fbfWAoh^$S9)@rrVplx~m#yv5B=8uW8`Imjl&Y^1Qz6$GOt|uZJZ5 zpZLP%Z}PxgB8JqGeW)rCT_!oZ%_|DtT~ir|Kez_d%UF+4$b_4n zu$9JNJnKON1(I%zXR9QJPh4X!#-o3;`H{*OnuiYl-9XzKmwqq~UPe#Ra5O$X9}yc}n9O{sXs>kt^PviHMRyEojQ{s@<-n(q z^^NB*;xH2pmsH?wJ6h4u2cwEJKZq7d++9w-+GllLx~|*eg3*NIy7dz(#via;ev< z<7+Rql7M&BYR&SrHR3vnkCmB5e;ZGL5$+tYmOOjx*|A3EtS>P=8!shlVzSOE4U)lJ zrA_km4JY;aTvvY$x+};!!|ipVoQZlIlZPmKx+jVkU4h!@c1{?5U&|w#^U}+LD_uR) zXxC0)F0a0Uk>(REssGTSycW8diA(k2Qn)>gb{$~PODUfr=JuF`h@=J|u+1$6 z*0&(K5Qo^4a~Pwt^ofSKH$IMo5iyicuhHMUH#|}GXwMrqu?syzAM#&5S8KnBG^|t+ zbc))x0lrcAc{>ToFQy@tk&W%k7LIl45|fAVi|Oc)%=+cX>N$vmza&jUl+p|qU^?6v zLRGY@{xWT9O^t^S{Tt3?2be5#{k%5IL`*jFD%I2N4|X=d(}JVWlTs&j%DdJ@z940=Gxro6}!CT|O5=P+$~ z-D3uzuHBCBCz5jrNAEDmN!T}unDC4_G4$(>GjmX1Ih}*oJolO~Gk6Gz@#Y#(X(fxy zhv5=pW?30(-GeQVJ+~Ti9US3>0Rqmv5xzTLrIn$Iz~R&C%B&J8t)tWan>&-7xH%%s4!G{jk9RuQ}m4}qdeVy|}+}OL2pD1{&O(A_{ z7yIwH0%k|mj=)qfZ9fa3oW7oL8Z%sVY4&{AeFL9^%y*v+4->{78m6`Oz6V>xt85y^ z*IIs{J{8n#(D1|V+AT6yA3RHW?ZkuC*1{?;wir9$G@ZVzDXfH8XZz|&3qd?Sp4{El zGd_MO{G}BZcSm-j%f`tfir6HRM*xPv{J`Uj*=62$dcSlkMe5H$0-RnW0D$?&LU!9- z7Da6IGaL|Q?aRRmgJ&sI=Hcd8&xZ*^yLwtWPrtBPDwvhpr!LcsWyScaGuV;}E6hGN z60Gbw@%3tw;yCKQ`Px(`fP<>5=Wtz#r1WH1C+U~xDrLLerc+M z)crAyrD(1SR!<-*3$*@y{1YHeqgBrd+IP!!dHS$sH2PSd#Hq|14Q+0&PpYwC9Wqd) zh`BK}pkeVL6^#4|XANZjfb~E+rL$9(CDBXtseW$hgolpKHu3KlYd}}^Ka(5i+q9Yg z^>juxxmkHLLy2|TmUbi)XoC7We*Ut#<>vR3zt1c^_@?b>m%I(yAZ-^+u(IiZu841h ze(fcqd6{XnQOGVXC|}zje0qGWOHp*wLW%m792J!df=j7i|47+t-jO`+4gb5^q0Ntz z&KROW=$p?8S4>^x1(uW(8!%u~XXfS=2bD%xJ(T44@(1%$6W0Wrie{)}!{}}sIgM^} z4;%;wmTxnH9alCMHb^iZDyf%fM7WQ5ew7iuG@9)FKjwosoIS-Zs2%gVNW$mBo_{`q zS*jPdH$>b|bNqCAkUMH#alU|Fr%hi%l!pkg^GfXLYwG)SGKIIzQv?vlH=Y9o?*gv_Az3=qr11*BtNA{uM#1|b%H0!LPv!BLQgay@`)K_?uI_}}L|+S8?WJ_3bGpAIyH!P? z(k<-Ou-!*eb*vpHE6baZgEVLZjt4Gdud6L+6Rah2C`0keNHMJ*il7Qv;jG|$EGda* zE5lD8VVTn7Kv=b<*!}o@_YU2PeB*DnjQoUoR(87(In5;<&9j#nP-vDryh?B>dB`u^ zmnWJ0-QP z!*C@BYp@7^ZQKwxb(68%?iJ2tM$koA;s@NtC4u4d)4)V?tL)rq3wd%SlmbGfcQ+h? zA!RvGNpJLxZ*BAG;rRW@Ju7L=21XaOdK5vR}cYL@fwm`i-MlVzkUYYd}+35uX`NH*^dJorb{?nN9ZP!Am4B9 zTE-di#*q8;9KOf68l#pr(3hPf_;jMFJUrx8vuzEyU}yN;Gz{VT5p6(C^`an6s{-5Y^>+zK+F zm^n@bm88wKs?F*Kb7Vi}bjNO{Hi=#@S+d(8i!3QuQt}X?1B=5Z?9}kAT9&-d06Wc* z+~H0HpY(Hch%*w)Ijm}f-))W(zZ671R@>s_PCX4V6|0t%Sttda1gfskde)(8h2#Ac zHq)!MpVTMuvRn7~aZKw|yM2OO_}0^C$fGo+!qrV4MHP-9pOEe0dHcrm3ra7I#yopd zo()F3_rv3*MrbVANSuv6b@9s`!%HDD*sLlAvdeXxx(H!%NwQd#Yc+H_US$dYo^}gb z|87R45@K*%(8$DufcjmU7dUqh65ac9pk7N3O~0~3Bo#vv8?oV+mVIph9Y&-L-{D?y zzx=WDr=PO&LQMy*UKAKm*B1dMrfd<~s=Ub0u-x4xg1}>bpDqc}>B!MrbS^F$%*4OW z;lN3Ie=fgHS15|Ei~UN5`azahj&Xgyhf%z@H`1g|SaX#ZId4-qn~VdoCb7_;^t4Cf zyy=Ov&lJvgWaP{TLc@i!IFwmC$4EH9jje|1VsV;Z(&fT5VbWNm6nKaneO;0YWyDVC z|5<&O;YFRlYl+DmTf{Jxgjpvi^oIk(L*VK()HTbMw!zS({vlhHlgB7hoSxAnVH z1I>}ghFqj58F4-{1PmULyR8$bDraiCaV=sN4|tUxDj3_cYO<)!etOZxLpM&67q{O` zBepXjewuOGkI>5WNKfUHi2LC|#G!bNv=O|5q^C$j{wn8qz8ZZp)ab10;zWd%-RC#k zt@@(!ZmQv;+2?Mj;lR~mD0fwD$M+I9fSQ#D_$AZwR6v1~(uy>NRnllu8qx<(4h~02 zxkGo6D#Nfyayd>3GpKV>;OdbDTS7d#KlJs`W8|?gaV}1NCLbE6C{C`zjla%U4~xKb zbn(6YimztFPh=?vm!b;msA$ z#8P)8LO&mv(neOBS=AZE9hWFn#^%so%ZuMA!E2* zQJxZa7tYx&Fa0;b4TjS(obw}>Dx^|!yn(WW~nC!!8 zQXe&`GSc0R>kWsq>O_;+-Oe_8{T0V$530QI(gE&^O#8qRO^9>O72+D#b0>Ik#nnml z_H3<1OWfE`Z}~bYyU9L2QVx5&Rzt_B-%OtMESf%*?>vvRkufZ^0DW>?VI(4tb1j_b z&E(khMa~tlj9dYs>u#a?lK8&09vsw2rntV_3}OonRXrumzl65!z=$b zutR-o!uBFK6)6qx4rDf(f*kCckT~Xm(ImrIdHqG}z&#PRT|t%ugGVP`9ACqTcr$&R zl*E_C@e(Zmle&%`Pfr(+TBkV^d)S=`ckQA)9kZWd)lWkVBv2%kSGj%} z?wcM&{GM%8*4VDz?8k8;u+$L9&KzGI3B`mN{|l21!B;|ZQ};3Pp+0thGp?R@s$MHDxaq_s0Srq82bt>@Dy;Ha_&1>)9%V?7=r|d`q9Kg!%7qNmf9Vi za4KD-IebPj7r{vSQVIc5usa_o0%c)JC)UQGgy{R@aLc~7w71e5inv%_@12<&W0>Tv z=RJX`CZV1AA3@n`$!r+7T;7s=w%cmUmWVGt{Y7}cCtn&Oxe&Bz6;;a*R-`4KTJ0Ps z`Ddq7xYle9|Q__z}k*x9G%uJ@bU$5N5RtYLNsrbvC zrDqR-t*i6esV6x9sMZDmo;ni|WcC+NCqQKAZEYP-^BvH$ASfwzzc z_PuM{FYAl}m5bUq{6zA40mAcLTO2{QV!NI9o+18A;jSi-CBsnXToh;tW^je!1a>x2 z2I_EVF}~jFy&F;1aX7@o7e*k9$M66Wmfa?h534fH-oeOKtH$Gj@Y(Wk6ad>AT~U%c z5ipCQtBW@S_~G4v&!EM{om5|=VvkM{>J9taY^cA$djsj57C_xoySElQwUge8F|34t z^j`D2VzCSWPW!o3Y{EYm7;%~_MN}`~%4A@grSds!jYX7O@P(+D&Phm9L zED2=qi(6qASQ}{4{uM`Vf5US`#$ac=WXtlAomu6ppnN$GTo`f*qr!mr30}K^00000 zqkC1fuZKCaT@Ft~C-V{*+AnW&0Y3x{g)t=?=5$pFh7uP6+cKWpVv5}7(0*B@TJ(@; zaxt?)m4FJFkVt@k-4O%2ZRh|I+Fk=;btal0w(t>rqR3U>NHr!_QpI5*lXB=ba$8RQ z?D~4!PxF~nS*gZSO z0s@0L=rXD_dq;S)Ytsyntc6hp^G1F>Z!%&{ud$2ph!-d`*5Z4s^eufDQ2~U3Uw6p+03JOcNzY)?!73E0WGm{(2gD0}K4gHh4BPNN z=zs`XE|-mD^kSiJ_G6_SWUjQZj5>+^efPJeeM&~wWAUO(`>4-`Efzp=+KEwPwi^1a z%vwB2vJs~ey0(f3*S$@}?wpqn&^{OYMkTJhn~r}dremp&t$HhOtAA<0HQ$v~W=N;s zG4JL=Cy#)gBV5HyrC@1*nfJRya4M89U-gnRMxPkphpOCMBZ+h&T7Ut~V0#KjB{tHK zZ3e~|F6`5R=U^YQs0MyGQsQSID=AuA`(%;!Z-hB&5d*-yg=7pA5B%LA&DxEj3E>HU z{4~A}NV@U8s@P-@UR2qJvBG*Zu9eZmkO_G@;*DW3PDd*=lN*Dbf?5-eGwTL9B?;O{ zciznzC==$l+7E!ztF9=rI}QenxX>8QbGo`~W|a`iv_uzBZDX+iTvni(%L?&J*J&(dTSB^R=_fVb`6lo;86JIv_YV9TOlV z()zuv!#q)PD+j{~IDg~0PwkrPVZMuaumL&C_aA$ZKPKcbx)?9Bz<*qpDngdDOH~(Z z?kB6^dkwW~1TBH3VA&Uyx;(IMnNnZ z7xQo|wnK`OK1nbuz_}!pB%wg~h0n{=?#Fdqo37)bcLM@8Za}>qG9lTaJhB%(n4cK1 zDl3p-`GB1fNqrY(brqMRE8c>Marb!uN8s;4`nb{`lzoJb3~6l1w?V~7R0+KpCS%E~dT^%hd+%?M#IZLF^WA48O5w|SeR+U+m6C?uB zBE~Oj&!x!^E0JA&=hMT?7<%=b5VJn0KTkERLZhI3Cx2?ecrmhHSHi!c%`gJz9eSA- zY*$l|rUBAs{uMB%HXDAeW6nc$j%YY>Ven6_#$W9}8UjL|?7vDsS=v2WQ=RHRNAq-aUHG2~^~bq{#j&C}$F-2Y%D zK-dMv2Py7P&6&m^=oDSd<5W^8TdktTC~LW85(uZkTkizb>VoekZMiU~lh>swCs2 z0{yhB4VOEyg6ue_&VB96T+s^iw@p!$t#LR;6CT1L;mI|NKJ+aP{~zk<(9#{@8m?F@ zg2Ryu;RURPn}JxxQOebI22>LQ3No*pD2M~}W2g>X%MMIv{_AZ^Knp6hS8C2?Zs35e zLrwzIJs0AOna$e_Y&I92Zc3t$nX2GgjW{=tQ=yY;7KUtLV-c zt^bDHmeY>rQt?+qJo}oKi{;kO4q<~o?AQ8We>^*G&bza>VTRsnkNw-Qbe!5`JZh&@J3hWCXp^N0f3-v|sr(Qd`A zy+F{#;h62=o!%8{Y&cg#1S6K}yzi!~78_(&jgWam$V`Y@6Ky_~T;qfXbw~7v87qzp zdxDZM@53Hkufu3WZsavVKtQr7d|SOF#A&wkr}C`z^4aA)1BUd{O+(P2?9JnFkdgu| z853d7b{ZfH;!<5#umBMwig})&8hZ(*8Y5PgEN5Tm{W_dUM?;@d|D?R*NjzFePkh@& z^r{THcO;`$!b{#WvWx&S z;=0?jXRoNAQ9h!5MEZ&K6Y3|_PpF?!KB9d^ly*TChH`MhUw6plsOhr;WXLEVUqol~ zgdf$;mh`$D!t_l@&9?^t64srXBwS{LoFt3Wb?QkpHf(ydgjK*3Hy2{CWYL zZ_pNpy6S1!*;0t=zCduV0)NxqsOSe2shrfk^IOKYVNgv4(-NmREyRq|D&vSuQ3Gki zMtlM`B77%;n8lY_ru{yfiY>08!hF&^#&F0|%m zI*OuU+n>zsyD(oF`tz?*wt8al&zJzmiKh0`Y&J_a&N9H_4O9|YplOs=ojm&l$zFLP z`s^?)z`Lm22#<65_cfub3|G{<7;9p#4- zC{Re;6?}*fyrrJ~`6exh!4}A?Mk$AvA){T+Q$RikHAsZQD-@}vlSN%EH{kpw z3Bi9Xfm;Q5MS?@;TpR+)9N`3_=@GSFfP8dhxA@+1?`HHe$Bfgau=nbSfBm z8wws&Xpe02#}%Fhgmw5At^3zs%dKYWSU$B(7gzG9;>TKiUnsuX@c(-K5z{*-f}KN? zCw-WC-{WuCF9S=JC(1Qr0H5bc^?P7z0gnf7Tle;%BGS&2?_^F&KclsqLx|#gs$J*o zMzXvV@m-fmvX=lsu(E#ka9=}Twow0$ipv-r$m9hP9!-ls=dhSRuh>;JF+8OX*e>Z! zh%XsiMt3l%(M7A0ZCU=TFk!P))!CgFcRE>CtxbEMcwVz>OM{ zC(-2bY}xw1I3NuEsHrwqcIDo@k)}0ETA^&5aXh-1wT4-}m~6~Z00000000O&RHj}( zf_WTvVtz3@mm$=SDDfUmpTj=L(6Yrx;3ubn7{R~-#9hR9j=YKX@Wj3`VGuen-U}ey z%{WZEIVf!@-U&1GoHNt;3WNuillDh8x`lxMESR)UIMF`ZIaMK8^O+#^{$pM}{UNlP z@ljkfyv0a*d+;Z?gccO12c zf2e}Pi#|&6S-|(fsg=E%=VwjIif`yNRI<9_yalv|WC`gjp`>ehI?vzl{uIL*wv&?r z4I5DQ(#Dx5;N~H(mt0x56ZYteg!WGA*oP7`Z6^F6R;IW%R8W9E)QVMHc@T>&uUk?! zytrOrOBPTM9yo)_t!&B6rVxqG1;GpMRI8@xNCBr}(XPlEHl)vua#y4}5@^ocJblJM z0D3OdpD#t!U`-jRvKJ0n4T%;8JDx7!@OjQ2DR*q$cbqVB6g4_pzjvu}=_-Ezra<@o zG6%oukUjrQf$#cc4}Z*8*BOhT!4$fRxxQL16fj0CFqp3Hr-(o$(kBeoNI=<85U080 z8Z$Y^7=?s(!p_3FrrX^Bdn6P@06pwvw0bz(VT)KJDy2su-<>Ewf=^?25-0LaGLBY^ zskEK5c<-Qr`9j{(##j_;xE!^!y|sAZR0R6UwY01sHlW$IDGLd$aLUujF_=B z7Jfz>P{pZ*)-mQdD6=p*o;&dRA9cj2nWV*FlWZ5H%B?iKiw%*po0N_i%DKiT);Ky{ z5%dJ!6jHdkB1g}%JII_eO4rDw^`|cxWej3h8{CAP2E&W`!PU?l*UIcZmHL!@ef??2 zs#L@DHsO5s>C79C(DrU2$IP<9{EI>Rs%OdO$gek^U zBuscx&~(g)bD5|K>qGHWCjtbU`fJRUqmA5W>RE!U5K$BqO-C*AIHii&6%MlliSku6 z@QY>Z$zq0pW&2gX+c(wt<_$Z$&D4Yv+{NE0RYC9qb)|rRgHCg>Fsz_?qH{Tc6xF9s zX79<*-4~@$PnekYG7>6ppYZ=x}d077p zZ;8@zb)n0kV>%?#JNfUuGy0wWz29!t$*|1@51F-a)ZSzYrTlg#%ILW?4l>@qB?xV| zI`~P=o1=QV0)~k!4LoD)tv{%!H}7q@j3hE3+SxZ-)I*@(s9=-SDpisp1dpperCyx)PyR`|vF#Bf%oW$Y6 zIHL#W3|CRI&vL8+nDzFZT7J^Kt4Z(j)HExNR(;+59HUHUIa7+L{xCJUy4MuBa03i7l&B78uOh0?uz6 zH^h;{=x@6JpOIaUnW+Udq7{j+%hdrmd`jQ|00003HT{{l5`GW!THTe$1m)vEf4FKKENjz$dIQ3r_-c_{!AvY?o)^D! zQHaUO$gg)%3$-X2Q2;`W#h5JY=b&@MJpalHF)DoyCS!dZ412_PipC7QdT9f!5@{At zo3DXh5SEmz;T$ODpt+cHm2e@NTHE%6A!y+WLl7=pk26`EwJ{+{)0Ff*Iw8y@jJ<$l zQVWseUX~XK7D1~aSbS0FPyrh%b8N{5Bx#Sw%?uQ9m~9z*Zu3G~h_$@b4{c*#p8jMW z%4Ah!1jS;mR6NyH^#jSAdP1s3)4h^LLSO=i_sbFMwmvd6X6T`yo%40PrWNvTSr=wZ zDQc@Mb3#1G^1HLqmiG)&w%bT&V;A|Sx z(7P7iL`@0Isb4K5<}_HFd5M^d-0fo`L0>e$OHkU*-l28I!QdaNK1&G;)GwC7-v?La zGEv@$&}m&*O3}`+>$U7X2~ZeUaUtEpVNd`73Mgr%P`;DH?D@DkgP$GHU?cgOEocx) zD>>bF7&(GBR18oY@hN%$toc^5An#8~QJ_akBj?>hBnY_#Se*Ryx`wJKE-#S-EK&oF z<9a0fVQP}j%32=~001_*C})7nslEW#^;5S*ViRrsY}arSfmAA{_;KZgq)m|}X^C;Z z8k%^%zI-Eo|2A_;bbkexjKTv;sk4M)bqwviy(hPaH#9<)d;4O2#M{Ak*Qh`{CP>4~ zOJ+h;_gGeu7XAI*88>^5@=+++e zp-%*oPB0K+d|MbI^cnfPSr5^78zkRKp*mmuaTj}2tuOi(mOey%Ec&jthtb9x9i7f&D}F z@iFv;CZtmf*AC1a&m5r9*lLVsWXSlf-9w%|5VO>{d-F}%mDCG=OfW)auMXr*zSX~p zk%F4)cxq9ni-5~ie=`5mWoJC0UbfKYXK|YFnQzt}YU;ZBMv@d6gGU0!2c1Ka1#w5GCTduictc zTRAL+zPE^R3RB(giYMp~LA629&JVUe+r%$os}fb-8ZcJOW-0E8Hreu;{^}WAFxMXr zt~3t^vE%=`5==c=S2lnbo+%op%EVao9s+!@Dx$1c!_OWInuTa1n@E6VGYhVe(bptf z=11~^mWryzJT`oX^~hqbh`cdIl`U$phtiv$wFc*6Hp9{bfIjUsq4QV2b3Mu%^SDeV zc*GuzJawJSD9;q=2#3oAFJs?dtQuy8cXL#JOWKwgMQD6YVPi|;2^cu^P|Ws$$x)ns z$d04_sqgrS24GZ!EVS_$xW{r7JXjvL8D1|hR$a@^d$*2wj&ehf6;V4hknq2280Q%l zBX%Bs-G}^vA!Y~b%mze#{s?j{@x~gM^z7~r8;muZc1AX4jaVXrbDc`-=HNq*CltPn z03)7Jr#96qRwZ4YDzlPIP8Bi_H4)YGZ)H`e=P`=G?#gg;Gmw5!p7_yc80C@P+fEMV z%ptSiq;uLH$)!Ex=;LJTlGGVO%gRljR;!=@C%)q$%@Avg>8WEDHxoD2D%eA@LpDV2AWV2r3$z`XB%RM_UF{nMT6(BX)2P75}Hd?Wc3Z zJ^h|$yA(Rk5$a{ub4TYzayG)&uB$8q${(Wz31#wSh;&CR%z| z5-_?SctO~$Gw!IR+v6CzR%VPH&^c5-PHbOuC;CON0D-Du(?M&UU4`Y*rWpjI@3Ugx zJ~Ucv*h+s9-w5x7cfvd29q^9$M|>l`5#I>>KQ5neTvZg9f_-1$;UH(>sCC3k&KC>Jr!PG>W>RS~ zKl>n#x*VG$AJRBo?bJm}8F`js;XuWDRqEyqU2s4Nh7IO9SquFByBh|;5$jE4x0>+u zDMF{Y?A@fhT~%UYD`Gl8zB~lgBkzswSE>zJS71l0PbnGzonpNzgeQ7;uG9)g745Cz zpon*Qye`PiEX|J&stDd43N4~dx;ddUwo1}KzlUwF-`?_a7Mu(0`Bi$6d-PB4uA4d| zoOHqM4%S2*Dad!(ebe+W+$hv`53bBi7q86-O1NP{^z9aAq-nEE^p93q81h!oT;|WI ze?XEIRnIf6b%#?-7TYodpSx;vQ03vVzbnGEgRv7q$GZ+!lyWXg892j3)zBqcDK~z| z0FOVhyW~#(eS^uSNvj;&zT>Ogy}ODZpjy-s27!A`wVntf6O!qC7d)ySqST#klq$=t#783}g_ilLgwobrcy+hQG|!*a_riRLot-CN$&}@l2XI2DS2TmbWyuW!cd%`dSdgfV8A@`T2Iftpuo>WD@!Ra_UF^sfu zHVj{C8=o^I4qfpvnd&iv`duhkl}o0Tf=PwANM%^u4`Dthk05p1TwjF>b%D<_b_#mym2#iH?_Sh7;*N(P>> zd6^kdw*S6p;hRKO{V&Lr{nJ~zxYLvxoxfdznC1`FzXn2}*PLlxQO;~T>OU!S|8wW^ zuAVSg=MPe#s;Plhh;0+GV%w4|dB#bcS^O0vb?sE`r+Az0)XOzadvbioFn{r_oBbc0 zRrnctzIuVq-?E2hZHu12#nvwck3N$p<(tXG|8NM;Vq8P#q9c5FB=IP7(U9I8HEHn4&zO-Pxs5Dd+E_ITI^P9>5+yQQ)r9iD1KwA?U%D)xBA=oLIksLZ@PjWhMv*@8xyD6rQoQ_xurNI zqC=*(cN3ID66BiTQ6m^FNEI3cq+b0LPy7eAtsref@`tD137z~7&?$RKHxa9i0u`&F z5Pf{=45^i0kz3R?Jl3kFE-yv{Ox`-a3JSAfsZ8te;*YJ%=0#Z?5lqLPe-e?_R@egRW%}4 zR1EJ6pP*NXZq6vEpZ=s!?jrCT7Bi~@;~*KMz^Uaqeo|m&n(0F_>-cHP9T5%-2%5=vSU>&Y2OQ44i21+G%!Et`o4x+TWt|F8%`QSPFOIc@B zy3|PAb{#A+R4e0GAmiaTo{9Yn$Ksra1G7J7vj?LD={)}}kxr`*xTu`mpHE?yWWj)` zR^zNj{g5dnA@aVjfqr76{q{oM(a0140evY&O0oydlM|)5QB6^s{M98CbJ@B#{ximy zl=XPfb>(rKtb8gmhRMY53Lo+QCR;E1+S2ccviKRUzQ8C01Y?MRAV>vIj7=wt0006! z%;0z&{BsoVw1Dds5*WJLtuUmBpHtsHV*olK)9>&MpnV>p|6FVK0M}cdmpWYeA1XRJ zFuwt=_nj_E`l?faMLLW&x5R?fM}2g{l*Rb#;ZNW#NdSZ|v2Sv>f2gfye>z$)gHI2? ztXfKOitI2k{Xy^x9g{xE;>?}NEK9S!iH3yn-x5TSSX?h13?ymW?Dv@?|5oxc(KGTA z{|ezQSwsqVv>aHJP4idO3IOaIWKqtS6}up*3Qt@(y)iWuL8+P=%f3#la@~znlhvC+O3NyfB*tfpelU453@Am(uz0I zyjwMqUhrcj+V`I^63A9mBw16`VlqE53R^q=-clK4T*k( z?%{f%F$&;RS8F3>w7aY8aqrss>12H;e^tryDd4UFCAUp03%ygKNAwDKjYT~9oTf2* z)I%ibpV;NE$9pujrC3&dugmlm#DRsksack)b1-NO6LdKq=wL$}iFR2FZzd`f+TX`% z9S`t>^KFM??m)83ScENP4hB1Zluf$~E6o?<(tpE$c$^7imv54#bBx9R>G#+ZDr zw<=1H)%%q>b6`ih#2fR7Ww6W*f@_)sxiwlANkx$2y(f^lVE|E`Nqy?E5i<ni&lM0gi6<;OepxUIf@=@ps4Gur2^*f%Hl*Vh5M!a?PV#y zRczLM?SvJAPJoQiU4Q@pe&6P(opA=<>j_zf0{f? z2l=}-V?ih3IvC@W<*qV%AXX=7ak{s!Dsl%VzSjc$j@C~`lqzZGK^Came42@}3)fDM zZ-6M`n&Rmz2q#4w0ur}wy!8qB8?{c{PHua=V$lrAoZp5zHuqs|-H$)AEu%MmmEkK= zgY=%oj({k@1=|a?pco%bWFv}n8puahTdNS7O%Hk#FPDBdG?WP)=3Iebdg^prf{Wi5 zMUV5TAeGPn0056OI0zyZB@M}4T$8ew9Npn!3@{e;?W(J0-39!PEKu<-Pbcp&U@&69 zV8wvJivfcc0|qPx3|I^puoy95Fk--9#fc1L;BCdkkvVwM)2|N~E@DPh)xoh@>L}C^ z=-ULl-~a#t`+wQ?#Yl&RaY7LPW*9dh&Jd_1i8CMC-gzu^EwaRsE!5}IMoySk@zVI;8X4=_5?B^Z$Ukqj&F9Y$mhIzI zZ9eBD3deLXW~TsNYjv{PJ>~p*1xnvH#yj=vkW!JyPw|MQKn7^wI$&&K z=iefl`zUHSlC2>~(n~}NHBJqYQ3a`F&I9N6&9OpRiAoN7O4t6WP$-IS%#Vr4Uy~6l zjPkcA@w)SIiGUU}cgB~-j))AJ?@vq!mEHf*XIm7o!&yx^19rMw zwd=IZ0p`AgKacE|5p7+{MK{-eDOKEgl_I@r`vl3u4`(fik1eF$n=cS_U>q<_X6|*8nwl7QzA+XT2F6y0_ zxK!gEw})mquLayz+3}ZvV{XziDl4kLgZyBh9R^DD@y>&9RZjB^$PHz#0fkONe99i7 z)QSZkleoFm(`Qae~RnIors1K7azw11fM%!Z=Exe6C z2t@1*_%}wj4~m(q>P`w=8lUSECav_sOYVTw^FXtX;qop4Uj7Rxl-c~pnqqG0Cco!cS;n#FkqXE9q!+AxGicexh6 zOhZCLuyXGJrS|(IF5hH@+w73LeUcY%vO?|lNL{|k3%A)JcKakQ-(-c`?4t}x!F3OJ z2DxB?8o6=c=DAVnq_s-@AfFSG@IwFq0})P|cg8^%QJ_`GqPi^SpvVh6j$DeS)b8p5 zvcyf_ZE>YuwZX7Q4bI84*^BK8qMfZ7C&G?(3o5T|eNy-|j7Sv0ch1i(;Z)gI7ErFe zJZz~<7@}V3y2;L5wpuMUvmpi*ie;M)lN0iHh3^=i;QDAgVbm&p4@p z-+mVL+<|ul{l4=4sC+}oVYvx=NcBFTSaL-D;)7%Z3KiDjY9=bOzVCC46$N^i`Qo*>=LspBHs!YhH^=4OKN4=3!M}9%yAoalx zyi(bN9Qh^!Anx^P{{(e?v!P1y7ep3q-Yi27>~d5z_QrA{Jih^JeTzbTdeL_#AJZQn zdH)pU3tEyuM0$98NC0Bz)|(D5(w4BK%IQvve08URxH@Scj+mWG7rH7nVxNs4{dqeg zo#8R7fR)2*_31K4v!aT;1D_E(^zy)eme+`j@OE(`lLh$DTq0pEyA3)PNul1-~ z2Q17-BjrwtA%_VqPY>)`uGB#WM3k0(9QVnW5OXY$-r-57EDo@D9AUHFTM|tY0=l$H z8ltGMSBmA(2juFAK<%y)4TU86DDLcexMy==SKm{YubjjX$1h(wdlw3NhF?EUIP&@l zj79HoOl*9X_qZlDK1+Ikew7gdJjWiF7*tTTNxt zu0)Wg77&e;fhdRiAmy28S01nL%3gY~4FARCkp6CbHRe5P& zXrnVDEfGEdBsQn2cUSgxCjY4(#U`!;I;$sW>o8Hd&mEXcj?5*;W)kDG332I$_~W#i zU*hV1JDWF=SgXJ!+e6Y8-&9Nzpa1|ju69;INHG2YbHmOL4Nw^9-AU56s9TrcOJo?7 ztPAY4MMYKRXOY7nE|3^eS@Y#FKW=uK?c2ssi`M#{$rf^UH?{7i2~q0#dxvu28ikoa+M000Bs zsp}k#E`=g2a5$Z-f9Dmd<XjSA^-ph>Ioh-9KZko0001^pa@^MH~;`B{HS;USv70f zY6-m-7fI#I_u^fPWq#HSCa2C;f6JVVZS=x~nD4&KvIv(>jtk-_22q%X=Mmb#ue;KId=cFr;+H@3|Nk4UKmY)E3U~n5x05GZU5j+rc46-)#a3*1E4bQay>lYa8ZJ@PCn1i9v5KQnx>L#YSrW&o(?ubdg&iP9cj?8s z%b6ix?yD8y`=9#JgyoFT0-07g}i0L4N@6OI0PnAPPI4NAu>e{jvr(X~gsnk{r z2VN@o056E6@!N?)zk@Xes4fyZmP*|kPX1-k_1S0gF%G{DrS9)_{0CF*3DvBy`Bkab zTJktb+f3pB00nvZ(m(+;LjU^y`U<$n^NwOoQz>(}nqb6VtG$^=zpQgoPR3 zZ{PGBNNgSn7xzhwgcI9N@!lM3Sb|p#jDrAWj04S{0rDoYM^GugH~s1B*_~+s00W|0 zDsTV*04?$?HGnNRRB&;#fPMwPbTwX^%+g7?J7HjHv^vwK?Ku zN6w%hpa==T031aohl;@pZa|9BQNh{D1TN*l_+zG4YZ=7Ve%0xQ04+JH_F8pts69bE z-OvTN{2x{IX#fBK02fdI000006o&=7w8>Blo8qDX000003u=NAJda(bvT6*8F-s)& z1N^#bpKBgE-g(5#uPr&~4=cMVH|#gjw=IHC%h>uyl6VjgniL4C(J|f>_ws#Vn3kKS z;D|KU$Cx;?rP9RdYY~ww#l*u@rB-wj*DSsQvDJiE>@jmmN!Y32G zd%Qqb82xhqq#5NMJ9ER~Kn*(pi-L2Ug7bv6Ezk>GZp|C+9e?&<=@zDugd);jrfD#4 z4lfx>J%-^oI|XO^W}Ga$>)F+(v}{;Gj~|6k6U0!R616|e(f|Me0008(I`aS3iIhPi zP5E}=eTtkk8Fmm+_Jd`H*kdWt|EgjMZ*3JZyOki0K7pJHz{ORIc)S!0IJ>QfPzM&v z9J$Zz$tTJLm%=E=`;XUYT8vy#uxs~_4`>NkZIO(_I*#YPW>|c?7x_!n0>>UV?dba^z z@3Mf?&ojXKo$VJYK=7Kgul2>?!vFxddH44_1^g*npa9H2)z=K^8> zANyC;=jsRNOWoB@>=*rA-j-kW*P@@tlhfDaJ7Kf}&u87|>P= z^~m4nMhXY~(`v}@G=(SFqQtmaoIs6zbv;{W3SUgT9%Rev4-hewH7xp2qp z@$_VtMTMi54J=qu0LI$M)oH6z1rsE(Eq#RXdqC7B+S&|s2}Bjw3XS8+aq%j6;B@jiWt(=(2Mmm8zB>ttb9E7SJmf?nfk9sLxi<3pNF2kkJ@mzCzw#RoO| zhlQ@-PIUias=pgFWk^0`+QSqZLxLc=YnV=<$$&B<2;1OhyQj=gJ@ljY&@27K%QSHh zJEP82mSe$EU*q6hXQyLjZ6^($W-o933*%vM!`d)%VGo)L(ba8msoep9Ds6^1+lob- zI2M;iRxOa7CTngzL11tPi?I%F)fy``EF;L|cM!d^gY*;OA}#*uUt>|g|I6p46?dA= zGe=*i;;3^wU{hpc7Y_NnK0Fl?s89O$-g2NODg3gbq{tgula~{WsL#&yLp9=N`=S^y zf8?WcER+i=-bpm9NCxS&Qgf=`jAS#j>(tHExaKltW`+#FF}mED&-mZMG-;hF$EOU| z>jb~mO}@z@WY3lEt21WUVHRLmJgN^apgiZftBm>3DGh42rwTg#8-`xO!NH}3y`fii z@G!A>f-L?W*LNUpAai~oWecO(j}j9PA}^428n@a8mVl~0Hjj?K^RFk<*GacK`pvL* zSVvFRd`7Z&f|Z<&!pA0_;1=!hSr=;O6kK4N;mHjXG z*h?lYZue+$n1}12opgfVnL6mVPJLvS4WW+IAd)sg8!mimole2^ZtZ_rch*Qf#{F-h zMotEP5%NDj_rEg^XlQle~Kovg?L0vw0pR4-F~#u)L7 zBH8Pjh^FNp8DjFUP;AmGib&To!C( z$h`m0tv2(k<&tYjw`#R=Tj_6?jsa;(8n@wm(00venI;F=E5sk(#lzvnb;t|4F_kOd z90ok!sz$!Wp%N1;(6S(a5yP@FfJFtsx4{j5!znPvIS1Y=pDBs#N;PAp@1L3TPDb0W z!S|q>FoSlX7Xg2~v)!r~!%I7sdHk;qqjudpq+{~QtUP8H`R+b*FS4iO-U9@iU%us2 zFpcX56v8V=9#0Ie+~~EwjI2Ax?ngpn?$iBq-b4KK1g>A(TF@h?J)U44h2ZPlyjL?p zKws@Vd4msWqvOXL*Y}G6NOhY39)`mv3UzePD$w@pUG2fMXSeVzFw| z-5EK!cPCm|4pk7Ig!yDO(-t|lc9cTU!g^nB#ud`R0Ap4MjyBw&*1C`+sId;HenVGc zmEiAnHtI-92hQ%yLOzupgknD`6EGHfy9B1)eTMx|iRZ57NfL7tC0k9Z@`jvr{jqvW znG{y_s)cI3nvu|sLDjnzL6_cZ9wE}b+?WuznG*%|T#fBZDGB7HC`v}1gH|5wEd{>8 zC|%eMh%!O;<&RP%bTc8sPr^ z;`mXbz!((c_eV}XN7T!{1b-hXDVr4gOT1yS6HfAaO|F$@Z1o%C2?C{3g6+xSv+(gh zx#BN}vxsw7_(t8xA9ZB}wcQXF+!WN^V`II1DLUe4vDpw5DbmYi(`3w&yz5{?cCb3< zXs0^__H3ZrM;3Cv4@@Ewm~@JgX_xm~dpppE4{?1;^C2_hy+k$W+^2c|xh+@4+e+c( zXI4ZMDPh}S(+{@oVKWbZg4<-CF2-Pd$mCIp9^kvKwCw!_-9crHhLpc^S>uNJmtY>S zCRjEe3Dzj|lZEUs=lg*NxG$@JrdV21;T#|I2k`?c8l1c5XwrwXyn+wqamY{rEdGaM z98?1VAwp!ENa5iJOOe2?c_c#f2-8i93q>HdTfwk!WdcY*egj(zi<2ptxfAhDi$1s^|%U zK%C=Ei>#2%GtpKy#>M{yM-wDn6<4!!b^KB2?dEm;Ip&3#B9kg${7(XmtQ4&pMg}we zJMT9wbVT+>8+O`Yl-oRTOCY8};yOM2+hojjf^za-si^<>-iA84OUU2LrT;GfhZbP> zG-d3YnUxT_G=BCEK6VkO>z@;2SwNQ++bn8Fcb&!ukUPy^K4C3^3eT?u2I@HgxIml# zLZbgcJ*VMlW>bN6|8j*t!k9t+SF)3ax8m#w&vp=*HhAq;WmL)_P}9c`AsweV>L!8u z))+SxDi(nxvn{pdn^CZ$$==tTwM+KNWi6>M!;+D@cVfvm?zi+`*0Krx59+j_o;X)w z8faE5c-Z&y9^{c8ZX&Ro_k_--NVZUC)$jjz->EzW2;=IJu|jMGv-fc5qavDn+qi5YiksGWZbLbzDN;rq7#+W6quj@mtm{a)~Z6^t~@ zxs)4N)btN4C2RbZcK)RGv9GK5@@kXuV*^_bAqpkS>y)(GA;PN^f(2HsYMVU%dWVE3 z-P*#2ILZv4<}+7SFR5wshDPtF{sGB#$BxJmzFf1X#fo*MOOmJjd+kT=zd`JWPymH2 zVO&IFqZx|ejpG^Iq$JOQO3dH#{x_R|ktlq;?>4HcsdwYHvnZf!?ZPdjXOwkoMK;x?2 zp1+19GXRrX_3-;KHHP$&*=mf|9oboilal`psJW$sNRW!9W$CWGUYSh97x&I!|4D?7 z-#_Gn4;Np=wP{hS{xH(N$c|yMkupD=E2!Uf>%RlewW{m)e+W9VU3~Mx$M1i~ntx>Z z$NrVDJSpy2JPQ71yW%!1#e*H~o0G!fB}=nu-!_r+ zywT3*oPbT2cPbH5%FMsftV1T4GznEz<>4C5o8ydl!`nwDgOA%b*7tf!qVf7~1NjTe z|7El@L*Iw~Lw4(~x&Zw|UxXa*Rxb)3sySOdlLgYXmTche(vcuB$J6MyOU-NkSwFn3 zkO0YAyDbMdTf>Y0^dxcjLZaxu5fQ^4uKan!X4{=Lz0_=fyn0#W@J5C65+k$3;huNR+Mbi@3Qt-`;Ap>gfE<8m{qhi9+m z*U7h232^o3R{OfR_pJI{KYrABZ<;2{d99in) z2-%RkdH6>xWE)Fj6;Aoum|b8}sb6RT(d^P!?}0v3rOI7};t7Ykk7AWbv&4ot9OYOD zsxRfy?( zAB+Y~TjcrCH8BhkS_pyeGB|#(*6H)7x2`J#FDAYndPvXozYwkRnPq;$s-HCPn^iLz zV|^;QJBbZ42UHfATp&e1s$oRE*xLX90C_OW0Jf3nNKZjI5YU%Wyf%+Ttezk=3sM9O z{ZXdUgk?aEI`re1fv!$^v#te&yt=L9G{4L05n6&!%{LpO^@HM>nCAhLty)#roATk` zi*FQyKOPizpr z`1NxH3r(I0#Xk44*Gu8hl!%tPNmvY-ySqKk9?qC-j5SQ6}wwD}?eE)wQ*?T&SO9j$qiLbqV=yc+C1G z4kDet!POUq;ezqUR9Oz@$FEzu2>Fdal_)f@L=_8o;OPZa$9f@w#X*D=MmCfIAsdkQ zVDLRgHoD|swoi+_y4)=wJJ>I2-mdpphX>Y9C!5X?i9+hPzRl%QnZL;MIunD2<2Q0r zU?8t}0O=CLBW`7XXZP|pM~3SF@9^FTHB@4RC|~Blmq~o3_w>Ea9IA=09I6rN;Z=8i$*aN2-+pkR8@!JmyBEGc z4YmTEEag-vQYUO)$+|dNoxYWG)5Klmda-p&Jjk zf4Eh;1$q?13$C`7n0|1o)K#|8l6@)2opNZe&y_Y``30ZbhxdGtNuiw}*|R-w5CGmq`$)PENjsr3p*Ev+VxML|0YEY=1ZZo$Pjn3jID_zntYu?ra~Y-|N?j97IYVDe_EL zOK%ZQK0!~3n19dCfQ;>l4=Z!7t%Fj>Sdd+r@b}spjvaUK%YGzXc=t~W4BNJuL2!~Hq@LTc@q`{ip&)vqUO|7%=LXBIn43YyYorcujV*GuH}`YEFf3(H zNHog1o%X=U9+3zP&pHVw27p)Psn@qZtqyZi4bA=fZh=^=LU-Jk2_zE$i7pQ(>&U3| zP|NNj z0gzykV4^r!*r-Q|0iC-)=>D|J$qDox|L=E&Z4wU^n#W?Q)o0tQ#`lykCum1?W% zv&Hk}j0on5&jbz1UNOx3`b|(I#~288MEkye&Uf9nC&N>W=8Swr_z^5;d@1x~e{h+A=WE-#rJYR*E=I+>^6kS=d}n>- z;+LXl>*H1&-`6O6;a*fFESo!H48aeP;&0u(xIQuc^5q_^B@fvd<9fF7yq0kyB?Blp zwMtjpoXQ?*T{?Zj3oZ-!FRT4!`MWI7aswN{cwA`aidih$v2sptWG?T4g169QN({|i z8#_82S5c$}aeKKgam)SEervywTT^qy-wvVP`~Jiax<8A~-M-N4=B=|Txp9ZBlw?a6 zF>i_-3}1+i^2xvdHp^x-(k^vI#^1W3gZZO+4{%Io$!eDMQ6hM7X`*Yfgum-&ruADN zrFS?$IjaBp2yV}R+C6b&KruLb?Pg^vXA;xE4NVbaLVa^g1@qhNySSNwSg&tKG1(%) zwUMl^!YPu_Fpf;H_64ir`uI~Lfu432$^f2!@Q6;`P5oj5fN9+9#WDab_#H zubQeEX8F=nV`Pf)og~gY7oe!2-7@8K$)v0t41{Kl7Z8n{Xo(1Coiit+B%ah;turRs zqPSuu`8qcYrmSDBxoO>Iv)C!~V5#7R@GYYtH;g-twJpKNB^K0`>EFDo*4}&4aNs;| zK2U~uD(}Gp^H;Q|c$hsmKlI0?$M^uGRnU~eq;`J}f(@Zafcjr9iXQU3S1+;Z`e&ht zC8A+NPYt89TQ?1+mdAcpT;&SKPY;Kdy|Dyl9so_V@mst?5C?)>Q~7oeWtffERu!fq z7@9@d2e{PX*prg7Ba=D^lWfadj=Fl{p$*Q@P>-7(>wH4@`w;;*<=G5$m?gCvAgfbR zd$o+)L!G;DOU|DrOtXB5Gi}1$kuE1hz(AifUA1Ij@^Sf7$7yKNBNOHB;HyrVmo{lG zEF{J}0AcrqA=?#ASv7ul+g&~eN(hK|b=^OJwFAqpUVXIbuaijIL3k5er|DkP%}~|W zWh4+Z1LN0P_Gi*Z2ORnSqP^c=v)kZD~nd}BM_AzhtF4W(q!VUH|GMaSC z&X|p2ti99uQ<8d^2tzT*x9Q;nP0`7c71sG_H6%CiEBb@q4CxN57iQ(v=Faz~53X5B zVpGY1brw16APS)FthK*yiHll78I3@`9Epn(ud4bAPJ60O^NAt6gGNJ4!l$S{WNG`F zXg3OT=7(>|LlAZV(Pg%s&NpF`^>g2`S(vX7&A8CdAPU+`q~*Xjcujn{#hicDfFrr^ z#VV1D13WLWyxg=>{1f%Y5lgcC2?-9_VC!vdavVNBlu{hrd;_bXS{=33wye`&KI40l zwsG6d)%>X)!uKdo#%QyH%0?){iku~aMETeLN%1H#wfkGR9~bn(R(xgE1NAAw69Gbx zr7~u8x}~7kZkWZ(u9_aI0P zTKPi!OQ;4n(`d+}|Ti&rjk!G zYbqn=<9_>>r`u3x7HHD%0maG|c=R!uk#uU;{~6uwk><|s+KVsD`O^bIeTlSPeypGn zBJJ2|gh(?@4q@H+X1z=Wfoiy2JDY%!yI;*p22U_}H&TyLvChSYhhLogBYa6or}WOY z=weOMaFL@n++Mg-WM$4fosg^%+@2&SZ~#ZF%4H~@|JEpG!*1FJS5_2}SbSOCw5#lT zlo{hkSW8>#H=A(cDBe>o&(^ul*|doP5u6}L?w88X=o#MdN93zgvji!RETZ}lf1V`r z3zt`Emc{T0LkQ!?rM~jrDrZs_a>mZyM^d%~C?l}J7j<3Obail29G6%yVB2r>hPHKv z8S$=$Q{^-(9MXuKqfxzdGvf4Uz0K45=z$lT$}#Zr>()-uKk59`fBv{7pibXKe$5!m zK7Y`KJ81WCrmCWqFdKD3GZXHND2Cjm#!vkiQMyCHK@}+T{0&TO4_5`rdR+vWLd>H@ zY=)nV*GIE%l30jS9Q6B)e~rUC`<^AwE*Jp*f{ zs>(O4hF&HOAsmD`UiJ&E5{$qqJWqo}H?=SR<*0a3y&p#xH5wWU!^Ff9LYK7dl{t}i z8Rd)*HY<`5A5ITBC=&9t6<~yJUud9Pp_M~Gp7Q0t)DU=0ziCot*@ln^Rb&>U1-@Fd zz$8y+H^A{`Z6(U_Bi{(~d62-nS6tR9&@mvW0pu%pCJ;6r-|a^a85T47@i8G@#%0e| z4QhtJz^Vj7(YyFE>Ruiz%WuxXEQ;x9LPGR<*zasU7!c@1sO@D_OLGk$A zP4(X1POf3fHfqu(L_nkExPqzg8hKvFhLw~}*X@d{ARg(`en_?zIBd~|6jwDp9;(&a z>cxmvCm3%zdKcTCw{A=qxuqZMs^Y9!KZ0@2F+avXDYtsf1xsz^S(&| z8XVtJi7N*9;aL69;pI7!t!`_59z%GnzHSx){~7ZOI5K;JzdAt@b=c|k>0Pl*tMiiY zEklzRxW>9LRWU)Z))U_w@As#CIl$=yhHrUqcG=-hom(qEpEyx?+Forb_IBAou`Tva z?kJ2W434zg`X%B9>fG#Tmy56nf~wrr{yP}d;QF2f>A1ucK}$jP5EuhW?xLfa6C!l> zT$a(mcDzaC&xzcg_COh77^4*)nppzLS)NwP;b1I0#GAl^k`%>uB!Z;NhR(_(mieKv zm$UQW;?=YdSt5U0rZJ+cl5#>k)F9#qu)xwc5NCx(EZ1JURq6PST-*y3rM4c>XeWAh zI9FgOmGGZ=FQy9m*V zNHPTN5~+We;CM43!$FF6z^{!=s+}?sL~EuQMC0wAL#Yy-~_-@DTumKXVuVBF|L^)1XvzawPRTtMS9DxkuYoZd*nif1(x3Di4 ze2U)#i+Y-kC(mS_?Jh>NJ9Q;JiXiB!Vy^7k7!7LDAAih%XULhfB+-MP1LMOMcvJ<36AlI ztx+K2`7N}V@+wN4tQL_$2yvO|C6?oC84cv~<09iS?E57e?~tqx?enok+&#juf#nCr zgns#_K$68IUKw6ZP}Fw*G1lTNPt)8e=D3(Dpvj}g$FlOfNZ+(I)v>|6HME|HQYWs^ zVAAR_RQOCci#<*-c1XII}aJ4B^CjrA`i!y=*x-S=KzKCJ>=V;fJE;wD6=1%>uCMG zI8;qgSMYd*g@!;l4NND1i{S-9#V;Q_j(cgKKPr&!RlpAN#@{llsT^{#fT9YA#%!YT6 zoo?rVs6_my_h2Pnl)ZNr%JWAGaI@?s<7f86I4be-u6}pMEw}G2q9x((4y+Xw*$ht_ zLK$+90trRqT#KwuIblA@tA*eKEG@^Kh9a!y4_kfrGfy76QN8>LOatLgFx|~47_%|_ z)V36vHz9-zq)!Cpc{94AY7xE2tmoB!No!`Lc@U!rJe+~A@ z;+ynaQ;Yu0dn)Z1t!UM-U(g4E3g+-OJ zwK;&0s}fyBtr};fzJv3UNBpEa(7t`JW*SON| zySw+G)pbFYB7YV*qT4>`#{!?d8pc(22fYK4!+CDVD~3`Gq|pf63UKgB7bFo?=sIw(A;N7;Q4-gPjYNOe14GkgVR_Nj#P_tJ zX8FAsDsii#2u!_t<&N?isqa@hcc3jy=lSRc(v8GQ27y~u{ez%!ga&r+SpRQiHE3Lu zv?exaAWPxTmfDprS>I+CCurAPj=OU(UoOcRzs%v2H_^RJ^Ii-@q#sT_j>~{7>|tES zvnHVf5^|2z+j7Zz0bj>6wD;KYz2?A85aZ5VYjh?O9+Mlw2KfkOg}3UqlME}tQY~Sj z5$Lp)E|~Q$P$iI+>ARw)c;5Q@yj7azaZTuw@#Hu#b z{5z(tDo7SXuxo=k&nCp)=-mW5t&cI71MaW`ZW}nCOykJno;=790Zv1*X$#$qWJ={z zm=Q$A!0j4iH4gTXbnd*jZ*-)lVPjTwuM--6JB_!6l#mB8vkOuxHGGK98Yj-Ejhqy7 z|5i0HDbk;YG#QvHhS5Hn{0O&=_>0g_EM-h0|39xlwgwAcGu1X~f0r2NBs;bpKMxZl z-N1yr0UsVo#4b*~-;~2GbK*(bVoYhW#-0;d9%Vyk$8_QFaiNQT-3(jNxA44klwQh( zp2472EJauvsq&j~3#wzmTQA2Efg3#P84`8F1+}^slESc8(A=3*!rZKSr8;4CZ*`ya zqZ7hGvL<3V_Q`e_8=G#h$#3Gu;#AM1o2*lyA;XraXuE*o_g3(oV-%r3!LrDxM${Q# z(3bZY<7{>iRQpY&7!-oCEB@h0PnWWHu;pu0<(4PQiZO=5)Cc^V9a73~^hF^x5IPfR zhNK3rtpj~YL0H<@nOacm9!u9?|KaQ1C`M=VQyM#LB(LlSq|%`KS};`Jgh&?^hs)?o zrG-1TFFU8IM~ZD^ha{fx4*V(`bS^I?Ud>IEHy(Wj0FVA--+FQ*Aeh8F zL`;uWEhNg}muoZeTsuQJ761dwv0N1J0dVpOuPFJx!6q>6J9e2DZgO=&HuhV0v@Ii| zjRAxnbq2yiZtPw_;FA}FPgda-Dxbj&N9S!l^*IZ;1|7)M1W6s7i z`gYwQUSd%mf{VO>k~LQjB+1%5rU(<+9qPSbBz`+7zC255P?wJjOigd%^xWV0RVSm7 zU6}m$*ejY-9Dhn!Uq`>C9Xt?s^kG{u}nU)GxI4ftf{dK@~H-Knc>YYhh~Ic^7n&GG6$^U0mVuQ;%U;%^5{>~b7if>wRS zjHi|z8P&1TSa7ICxbU$|X--7UYq(u>pP*K1fn8zdk3o57OArYvWSf$e@S*BuKJz1; z>CA@+MwNYzIpd*QesVXU%&PqDbb-Pcs52(Ij)R@nr5CT(L*Jn++EbC@b0iEyyCUf+ z0{n63BH5KXEQ5o)YMj;$yU(%nxE-~nwSyVENS1?iq2kjo9t2G-eG5bCI3fs9KgobQ z_4r%xyCGw$>HBVL&BG{?4Y|^a6o8{ zQ6$E9&-sC3+Gv=#xK1q$3Q)y$O5QT3CPFgPcsAs}%(e&Qv+NK!e9^Tv$A#`ugt7oH zWY2qIw?3)=GsUjOD%E!o&ncwFd>@s=Sf0bhDvZNNqx`#pKzQsdxM`&9CaHOB9l!edg(a*C%>w7{#mGMDrQ zwN_cF#M4aq(!V>+&Y4M3_v`rXQNVi1y)=!4JmGlMJllAl$iboyDE@19xwWH4V*TM) z{n2&PdLJoz7su#AG}J|Qay*(zc@S_6*&uGWhoiI+Bk$VGBT*SNFSEaR$@$w$gm@%X zK@;^kI3%HazuF0&Q_;$dc|W-Xkztlh*G%P|uMB>Al3xr+^xB7-JnczOgU1Wxx42x< zyF3$Q5fanak`{jRV+QHF;uzs-sC3{h6j9(a;Pn-3r5Ux-`XUYC4bHbIblCiFFd|Xu z;M*~dpm_@`y|#!(k;d(rKM$#*I2pMvC@@H({!?&n~p%c~i!FS9mBWetIW)u+5*Lcj95`Ax7xA=m`G-|m31 zsul5O*=jw+Y4at6xN*(YSfQD9=z~$BiB<0T*4k`-PI5ahB(h{K5~W0f z0mC1%lA1ag;i|6)=R+nw8dSSD+fUswC$$6u<-c;Bq9IELb0)BS^F>ogs`{}~d?r85 zEZcTyJ2+X3N09$ji-oAUMIF2IBE75%gA(fkVjrBNCR9LmqDb+tA?UAVX6Mc7u9?Ps z_PW6)qs79kFg7p!><}tiS_SoQ9n6)J_Zx^zY!$PMiAJ{OvJzCM%}IZby=8dZy@2Y% z0i!o!>K6xeiFMvtBKoBj(sUc@L2z=859AM#s7hT}gMH=&Ok5If3j^Y5GMh#ig}O+{ zQHOV_z!k23_8d&fzc7BNJynDViidPl+%37_h>!K()|SSy4+w^jvbV3ctTWq0fN>au z7l3cgbXA!s?NYaOr%dw%M6z9DQTji|E0=qAjh^~gn^9! zySb6_f61%)Mla;X%LDwWh9|ag_DJ+S{GfwDZtA z5D+9nvCCnes^Hdp5#gbnunQ&yq4Dh_KADn&ElgW8F**3Sy1--UYpHb4@?(oI z+6!(L0#E2wrtZ{OHxff9;yKp4IeXF%b~*>q zhwKT_#AtJ7Ye_xQTTEiIQfjAz?OGf$93^ZRs^YVyNv_WUgm*;v!AFmkpWySYfEyJ_ z(%zt*z{VY8>N$lLNx)9b=dy{MO(!WXrCi&t+PVEiY1$v?K}`#MR}b}rxxomyuF z$K(T8J0x;s@YItF8PT^tl#~M&m{RG};+BuptoS{JFpuFnliR43WO^BLP`Tr&pQD-M zm+SE23LK+z!EUJc8R^2i<(_v!tG`*9;$--7i_P$@_@R;E3;D|kId~}7h3-Kfr{Wot z`Q$sR*B6(FcT3zmjTMbH(TEjR0)Q_+6LLBy7M{XV=3LrcNM0U_bRb z4_R9FCkK|et~h8)Jt4!y-oy5nEt)Tm9DlQ?LN*yBK1ySLESIrc<=rgiraOZbP&D{3 zxw`Q`Cc;c9A*uSi>}b_pJyPF}`67+a&1_r{Nti4JB!WDsoKqsR{+|7T9Mu8)f#X+v z@%n(JN#tsqC@$BB4;~LKhM!FtsAPrz#XF@vyQ~G~Zm!B~SMJ*tao3tqw#JhsS+g&l54R|QE!P88vldyo*M!X5-! z3fCvjV6%(N;{BEqf23}~vU#xw61 zlObR-usTd@AInhf&j)U(cNg4? zpA8=RN$|+6wf>!=4-^jHLZ-^Wkqk8&-zG1KOkhE|<&SuiuTJpRMZ;MOKS^m5QJ;^pc%Vo<)RD_cB%Nzv*3|>~ zP&n<@Dyrw=F9^PQ6QC#eG@4oWis{%9SZx~hYE6;-0Fn-sjPS(oI{O|~{nXdzeTi$Z7I@-QW zsrT{#c2L|{5qRK5l1fby$8elBKWW~bNbT6iKxCN*@ASug_F^@j1>Q%(?1lWk}! zOQSccO?EBX%)H3&?hJGM&tXuD+(G?9?9!q{zIry>U{>h~H(au|2c%YI*Z_5ari0Qz zdrP!VSJ0M8%nM9UxLH=dzMyA*#wb-=Ln$gNzbGaAI8g?c$4*1Im_<9<#5Q42{GgdP z>fL!oj0F6`TcTOYQN;2i&hdSkd+V`i5TV%IGk$*Ibytc_4()=6ED0xXxwm@!q7uxs{bfFjVg;nd1Oh)9S*}I6l1>M(al8)@F7Oi3=lo%UJKRajN^d;Yygs zf{6!v)kto1i9LrWA!REehGo^PXbC3j1QuaNc_q;Aj}k>ghZ?wL=+Yh9>o?`GR6tBy z3!xs63<A zK#S=&&Bt*e#o9uhp!jh_lW}9)l|q7Fp&*UN_RpwBIND+~uBlg6-Eh~F_?C5I8zLQ4 z2RUyG?+zMJOm&;3-kOV9w#*$!3TK`82iZ#klRL==QeuNT_-7ffF2o5zI!rVqOD>Y$ z3d*hc-3inYk+~7cIeAuR<44>Z5%rlQr<2pnynhZF?n>~_wl2jdW>?X0lx_vgkQ5hE z!l`A0$v?*SF`no=EGd|5g(LFh9EyieEy|h*3hI+9!Irx{IHo$=_ z!cZgxlN|O*eWDKV1j3@hAu;^gljM~c5qh&CRg0%C>CE>flhg_Q4sk`Ykw^q#nX^i0 zPJD9}?UQ4~d8%68(e+I@yCHV5Zpu5tIIM;nnR5Yq=!c0%68;lTgA8<1f=NA!e&*}_ zGF*(Xk3Q7%>zQ(Wsy6b5cX!qgAT7?k>cO*N52CigyhqS2EaIws z+WD~v-0ck)a7qna6EL5V+yKgQpo4PuvuW(i^y7`-{@c*q;Y@k4Xd#-wkzajvH?_Ih z_9vml>35MXUv(ZmgEu?IMjY$p-&R%}msocTn9jk#zxGGu4;$kLAu9S5=Ql{A83=-F zoWe0JT-MwZKA7w_XE-$2c<;2`TyXXbUZP))t){SYZWS3;Wu3;l2!3)$3w}oJD0;j< z6!?a}SeM$#B)zZU!hdcJ{uHZcJe^`lcVevcm^Lv`EESsf_HXou3ML1o95b&l(d#kNg z|M&5h?)6{Q+2lvV(j!O&xOA&_u#)@(=$>{5g!>yalw>5+wmZu*rc&sMs#Ca9&r;Lc zZ0Q%)qx`5ZOD;gb^1L=dbnjo#1g2H3l56jE6HRMkAaOVhzZ(OlKElien6Y9=sIXEe zHZ(xP#FDIO2g7{$2yi{}2)Bnh3#GNTt?8=2wT^iEQ2ByZ*vC+&Xtb&jDoP)mI(~xP z;!UWqab`=YdyZqPzAzZul-Tde1a**m6}Fa2Y%tAJHeY^FamLr+tXnB}Kv0?&tZ_0V ziI!H+yo|Y1p@0#80wI=ec5`5MNbqUT>f#a$BbV_xs)i5LDEmTu1lSZLSt3NrY|8wv zMVeKnKOJ8*TN4*Q9(_x$T?iYO1QyA6(=Pz50^YR3H8)kTHz}~l<8M>_Tb(=+6J5)X`Qt~CEfnewN zM!gPm;F`B&w-eAc6KbW7lDJA|{92EbD+SrQnIJbicm#gZg`0 zVTA#P2JK{bqY}fg{yF~LmQz3JsU}5i9vYKTo!3GWXViFKgn%Pt!H(2NP+_NBB4|_+ zA~w4(5)Ap&&nGc$=-2ise`+f)qL8Vs=+nsu?AF+!mD{Su22ggRXO-Y`vZ}UB*^-Cm z1s^AaUQABYxsc}v!*obA4GHqD1HnwT6ap|aBVq1JMl=t9)NP<~u?jU>g0C>j%XCxJ zBJn;E5~Cfm_5Sk;X+mVq!uJ}L{%Do*NGJ=sK1g@9F`?8NY1-JBZ6wl(#wo9Ea*H$f zlEnJu=&}<$Y3J6@1W85LD21mSgk3C*4CZPCjKkNQ7ixZYM3%s4@9>N0nxMF&UuqS) za-`I*2lB|!Y3E&&ax-H*+;{MC@BEE~?8%}n0|VQ-s|!!xGcsAggEGMu>));WC!5$n)GE||y| z$^Dja9hMd_s{NZ7e%tWC^Z<+Uwv30Rdbk^Gr?U8wqMu;bDi=N^@6b`*mQbo@+9K>d zTTs9f1`V38M*yTqJrTY!pxOjBdHDE;#kDJ`fUdxT^Fm}P6P=_BXU8c)!*}%Ycn?+m zlEDg?TCVLeY*qFga!m@4AlTJBWd^oL8oFmRIepC3No^h%0C=&w&B5ccJ2(=SiZqJH zKs+iHq2kStB7K@r)(#Sdh>31y4V54kUnDlB&!OH2KuB`J{6x1dA&BsZ0h6LC!JHK^ zfF#}bl!3%f8BGuwms+&bSvoSWL^7u69D)@Yfq%4BRDkU@@f<^p{diH<^0z4#FT4oq zsX;PfaZC||^B3AFW(0v$7OC!lf6-`(Z-EsoE2oj1tJKj6|4loRsYhtHLwrP%iA`_= zw+jY zEM5>`e|5XC`}c-=LsnpjVykKs>!ZziQ+h?K)zSoTPK;0c zy1BJXrKI~6SYlNgKJ%)HcTVL;M{KO@^Z3E>6sHsgDkya+vYR1(>@G%o6V2Y4Q1Fsr zx5`MiUQ}V^1n0S3h%fm;(`ylcwmzhb>wCD`?(t!@igSLc-n3mlGng|&?2n8^rKmj+ zt&BYV0P<0x)T(J{GT^BZgdVCfT*fr&#g4lsmAWM6AO9A7k$nEDR5;jV{}^ZQHhO+qP|c zz00<3+qP}{e0%@r=AStiCo^p)cb%rqBB?rZ(>~h;R1cmHqJ=a+SI(woKC3e}a zSOWB^^w>If5KJgpvjI~LK3Nc;bWG*GT2S^bB*hXr8kEIY+qNc0(lzK$M$ryvx$mpT zIiDedPBsDpiaU;j@}f6x^XZf#5DRs2CfQ-6Duf_oVS?F8)cg*yGE5EGC8YsM64kYe zhR1kOyRNJ!0EVE)soO!yX)lScdiA!ln495~5<$k=bUct(4#xt0-W$it3LUqML z9=~IBpNzL9ZK%i_Rl?bLuvHw)$=@9R=x0HT_;+8W<#&uv#?q>dj+e>|DO<-Pg!rg+ zV&>urhWyo7FN1b?Z($e6)eQA<%*r;rnUewlz~CwhRoCtR#y}%#2>x3+sJOSDs5z7# zw2}_g6u#rm8uWx^Opi2BJr-UF6z#&gQo005=(nqZ1yuecm?d?bp(JEeEISBwU`Cfh z09OM>n_zj-nkx~(-RYD3k8F_%ki)_Of*jBH+4`!&xt!k1rFh=I>IeWA(};YpSshwK z623wsB|NnUV}TC~ z0!H1BFbEO+CD7 z-{h#rU%M{Qn7`gX;z0<~QrfU#sa!kOnD8pmaA@q0P`vNgCXuFcTH=gTa7{tVl4}Ha zw$5rkA0D|v!ATsgRJ0>OcUqlh@JLL^pk-fpYw;C#IZi&6>6}E6VNtnI#=ISg|9+un zY-j^4G<%8QBiLA@{@pvizi`ClgaXbyiD&8!k0F`_)Q$KWaz4nZd#2g3)_`%AVq7?G z55R>3w@8^$7+I*q@*%SNcS*uQN7qzYS1osA36HO3&KY=7QrT{(i4<|)J)%$PGHJ#L z{0yjMadCeUYy5i2R5t$rdWF)PH3qA^R zv}w8jXl;yCJGHpAJv{e zj*WXup9ih~s@+LUQVM|wnkD|@TU8EWRQUQ~|E>?uZU^LkR*;#fO5zu4zXhY!Umi4Q z0DM2VHtl4ua^}oudFB|T$-Rg^S5EPO>V~f@y)OknoGNkMul4pkREP9b%z|nkbS`Ov zbCxGzoDFV;u$)&_=}Y0jM<*^;D^(K!rbH}~jy8%q=*FAF^alm;r@Kc@a6}5{ zN|M{9SjkeV?5H_F+_0aKb8frE1?w=Ma^uzRJMv(5GEYP*sy??jJw|b&jk2^I7ssoV z#~1X^JHo?V#1YZo#|9vsms!PG_h8xNDqXllR@j->s&m)?n0rv~YdXIA&fFkF@fioHp@GU!!;)w9npXV#KaHMbH$7+eQ z)9~Y`=*=n)#DBE-&(nU0lAgoBtBWU*atV5c5GY%-u?Ps(xn94Dq@fX4xvNi5IA;}C zrH;+8zwLMwD^?)=;ZqLAWQ;@NVPALLe#pq-nT^WXeu}TOSIeJA%_wjOtUha6qR}Yg zvlE!GIV7d5QIwo;WQsb;B%mv2zR~xWM;SQvF|SM$QibQY8odSTctc&03x^1IzSmBM z$PRB}^4I)p8Xd?7iMF@@`3G|xy+H^A;OpJPjLYc^kq?C({9M|yHOi#X7z&u2vx>i$ za)3p-5KggcD(`Y7bEzq{|MhHA6^hQf;tG$+laoo|pV5tM|h1(I=b31f6m%5>5$^cNbJWEVP>P*34~CQwXC=o+IsyX8_9UNvl)HKM5OA7(XP_ij#=A zc^G&a)3g}7(@uVqWD7L43XkT0e=ioFx}yM(qga=SAMD^R1#&Gr-2%LXSxSNnN(qOS zfP6Blg;Q!96d#F73R+apqL=v=aHar|t|);}u;6~)IK^zqP9dYB0Y*M9c-DwLGop>B zJlb^Zrry&nMD1$kpKnN7lWAuJX_17gVl<^17u)~z^0DTMA~?m47aL{K(Ebahog7!c ze5*22%X_IhV&hM{E7U9e+ac!MFVC}ujQQvQkDDS{+K(CQ(3^@zB12(9KuX0cVHOYW z>#QfW2%(WAO4y~BfEXnfI*5`XS12V`8rgoG*`+RJ{7- zjHLR@<|P6-^~WdnF&B?Sp<%kubSlW8#bey^eF}=(eLWN&Ac}x%i%Po6(=glmvQT|LleIJOi zM426RgAinnu-Ig~gJ6WU6fHihb8{vJxR!-d%-ZL)=v5d`3^gKNUVAn(4=t%@iz!9U z`RFTyqj8xk^J%8x?=S2d7K05FI0ImnD^YSVXimv5M-EXuCi;mJ2Mpda)Ly2#jm#D=sHKKc<%a$pr5e+- zA$g<-HH|phO;Unf_D_EUy?GKDhujDcKS>ypNx4F$xyg(tT(Y7Aj3KB|10oCh=Si^>VQz72CnLK? zJvSxDk5Mw7E`b{lTm+fi7l-Nvu^~Tv8pz>qa>V}8lj|4~ufaCI*hQnTtJ&R6H2x`V zsdT235goN1$^@bw4q^GEooXC7yAx&E*+ERZWJ-=^Qyq86=3z;T4dp^>flv}#+QoO% z{LaZ5#qIW6v9meM+U7eG-r&Vg0YEj{bW#Gv@?Rj-SrQcr3PMlUx9lfgl#GMcZ21WW z1})$Lo5>hlW=UZ*)C50%kA?T3Hts>az4t&)4vq|C6Ysk62-OixDy;R#&XdeAU?!8e z05Aj0KqPrzs5F#y^`~mCq)Hz973;rS1&sIr0I%Z!Ffr~v%XMe{HO231$4f1vVIUmDkJkk*@4Imd}sehlaC&n zVv?+>hcM4>e#kFXhg9PEWi(aJ>Ry3bQ_wb$09oTw#)&q_(jJE^K3~^Y9|%iPzniNuN%*+zgr{zSa< zA4vMdm8?37cu*@wsSSFkUXu2jX-5y9QNe=&=SiZfV0`6gcepy%1|~r8n#1SR5fYv} zHuZenGRTT$%MM;d5PxBh6*x+fQcP(0UQIw}pFlx)jCyHpxrJFYio zLozYZ1gryNmerJUJ8#j+kpS^$D{AiKvl%AiEtnXm0 z5rACsolF(cyjxb~uS}6eyH{c+U`c2q#PmoFG@JEa4vmV}#+LwAWsT+$hCwugBGTj- z7LEzIjXq;$@cVHZv<4{Swt|U-c6-F@;r(+|ppgk;1h`QXsTS8B!w>Guvt|?aaZO45 z^+nEpEGk<4k?kF#;@E7Xy3s>l%H1Qaifg-1i?KmF4Fn`PxsQq9F^IxTS^XSqkCNxz z#M*|7_N0^Txk5oy%>!G=ZX8>Qxt7EjUyI^l#H7?qku2}9ZDsHm)<7j#M0pf6y|fS+ z(C9AJySzCESpkRh&_AJTw9+~8ddEp-MZa1roPXQLfjs*J!J!u`>Pwg9&^kVA&faW>XE3v}WnpL>YIGboiMPF+P!DQRXg_M|e`ax7> z!lG%Mj3Z&Kxp)m_sE&OPV;>Y57W3VCLsy(+G#2;nD&wzT?5ZSS+`xWB>uZ62bA_l` zqOW}FWrZ0x=7N@2(xsUznbJn`qa+X*zPeR_JoQ7Im(ak4kj%Q+*<2S623ax;a-Mt^ z>t$?bhHG02RAqe71Ze)Uw9DwHgLz6`7+tuW8oougAzNL1_svAxFCf9ona;t8jGr2U z;q?n+o2=X20!T)Q%iLgFXgf0t=5AXUpu@f$&0hkacOPODY|zUTMy+x7YoM_g6F!0N z)~DKBJPqYTGH0n!3TT8zEJbI=fCDe13fOXaE;-@$%CjuEfIU-@Ecj1I#atDu;$G+{K^%hwmL=^PLPuf*!?M+`AI#Ml-l&q)Cv11KZB|;iCy^m`8cI{rl2}DJsMVI4AZLj+1 zR&7$F?1np$BO)QtKLlv6E3SV2=L>05YdNy#S&NsF*G1$}sdVDA{wCU@7MD%5dyWLB zTrwtXLa$FpszFT=6;6TR5X=>KwPCz+nPxUn{L$#9uyW#Dvr>I`8X+pwY;WYx9n+Vy z6emnP!=-c{y#-@SO)HJsyd_cwnBs%R!%ZY9g_e3&>YXL4hJc6p#)90LUZg%Ww3aYU zepAm@{=?~Rv;K2E>jQonH8l#3z^>-`=Ml=`6ZC19XjwE?-XV91hM78;<+NHl)LLxg63dQQ0Q8m&$OehBe&+T~Bk}*aOitEmLGPA~P z-h!4-Y>D`Bs3Y{uz?-{X3%{FLVArn^E*?>)t@WHWb{R%ba}|^mO||(`Dh0;0baqs{ zx*ZT9;f%sgzxtr;?vS}YvFgr5N ze1AwNi+s{JyMo4Z>HL8RL2_P07dC|jsOgH8y-c}Dl@!85VEjz+RF$FaAjS!RFTpa# zsJYzYfGSX zMBwyi{E6dFls_^uem>kg4Nnj*qu|z?EN8tSiQSlB^g?+@_YB5~fePT9Rs2J?AAJmLz%F%?p zt$U+JF{{zopi1vz35TjZC9h`1OKnMi)dlpE?rx+v0v|bALe`M$Wd!!{?GGDweXKIH z(EU@JxGB>~eB1$Hct0TrS{oK=HD)p9|31wpGsN2y*d1!A1X02sHGxdeQg z0AmdaY|{XlpKO9JsMCkQ&}*Dyi-7+=0rE?Vg98oWp$7jWI9zqB{d zDM*&2Lm_JK_|`Y6Ei^Y3!mp7x);%s0;f!$k<;odSjlP*k3^m-`Qo1;_zOm&eR2|S?sdb%@%ZV}n2_*R^<%1B(+e?4h+85Y(-q-5)ct9RTcUu~st` z5Jx8y9HYi!Ug z*u-Et0Srm~(}p{P$=)N>H*>?E^KzNYC$e>)Ec|7|A0X~4YoV?0G_p_E3%J)?GjC7Q zap}BU|7s?04Y692B-=t$RL`=Che^8Xwo69HYaG-|Co4Y&s1(@;1g^1_=Li1>*I^e9 zRiSIU2hD~fKsfrKjc%{xB;G30-|;WTH>t2|NWR@o5#gXX}zZi>1(n1)U{{|Z`_ zQ^?l0pFF(b!4PL!oDfmI-q)YMkbFFVLIM%5 z!yGZ7ME4v(qBV=30d(6v2`2-wcBElDVeTO5r0|UjLZWeezpb$dM@Br1| zx}P?(Md=77WESMu*Qrl3-Q?);l3vy;J28w{Gx3n=&v z+H*WPRdKjX^)@r6O12CG#%VQj?;2!}fCx>M^VOXSw-2>S`IFW^VpIhCns>dllF_ZE z7c@EWG8Z*R=ad=rY28+;mf*?o9a@ZY5E7BH;hNuAvnh1BCByprVJXmzrY#Q{-cCS^ zJ1ohAU2I(G%%Xd+L{r3kxv6F@J0wjxEoQGBfXmB3>Ezy6Z~Nc!#gK1QD0D~orv#ea z5^3d`z-}f~LA)OEQl^5Xh#mM3Ri7B1J^+fNzjYX#M|wNjbG|Qt!cc_J;;mBSL^TGi zv$$&m0}9v=c@#muHLEZNYun~K(hBX9)0lFDh4q{dCa|{toTr0wnkNZojt@w*wQ3~K z74b_xgW`;vt8Ftj)J;=#RL+XORY5uhAp`-QU5Xo-HYnI$rR~s?@^-{rUWV}WHC*O? z1aLlMZrmuRjE8SJ2dMawC%;{p*C6-E03mV*ilLb>EdIhTL7CCmdhOGvxH*welQQfLt zls>~CN(B`dnhk0L<97-3;+~HH9Ujzy+aEkx?#miTNYa^9OuuA~N#FtOjg-}j2xMG6 z=(Xw*bBFhJ)(3MXNg(xr4Ohy`>|*2eMFjQ)sIC#|H1K}e4;KH{gQ0A}f}3Z#B#;NE zV@teWk21E;2W}3syM=5b|Adr#R}5`aHV6nLx;liiZFnC+VbVJnVAMocKcAn2|5WC0 zqUHEk*)8xgO?~i36LqY}dyL=>lbw;~73CpH$j5wFEI2oyL$1lR_Xrnv8hh9A&tsUN zFWn}#ZX$(2yBPsI^2&@5$^?&OlP?tb@i0)Fx+PaJbn;4wI3hV54ODjyovbx)D~X@+ z!+x;9ENS-X+#zHvm6bz_-}{th4jsgwh=jtzur?bh>;oRN28`XA0bMvNmdsp0FEz8B zg&3J<>^cWFJ@9;EX~^b_4_%s1{@;?l*Y(f|0e#h55ogsQ7ZDm7M0uU!ME1j)wUonh z@uirQHz*T29IKaCsT^MA20v*os)zA8YA~2i4 zC!Sbpy9Bkt*dJicDq-l&y&t^V6~f@_8!%F%Pb5a7>o9@0p`4Va{bh`hfs{IEXcu;<0XiGkHbozw;<)x(!DEp7VhZ z%4S{}RA>=z_m90b-Xu{1etsjCRh}~_!zhwLgi8St$t|%QjO#!#<$g=#nD6bvjNSVh&o%;@M}`41ICOii_Cte-@3 zf>Ut2mce*F(k*o{t1~H}TQ8CB^IThs4aeiyx@ADMZ;v$5+1qcw_Ku_9IlJ{>*r zT7#PSNji@c;jIn7nii$7s+op;j_Eq5rndqA{hq_FB>Xr3M?h3EdhA~g4S9ZuBP(GQ zm*wIYkg=IQc38)fVb|E&+Qz|G{};u@ud}~KrQM4Br+|njXo}$>$zx~GR7&s(;U_38 zOLi3k$d0Re-QZV=4)0nGlqrNFZClek7)hRAi^0iD?=A7B&FYTk#^CsqVdslHZ-a#r1SXmntEkvzL?k8+)gyS@d@h z_&yuV*y;dV-C&JCNct-a8wPzCp-~8xU)j9>R=PYF!%>$$PQ!@M;5Ls#HUV~z*lYi& z@|6O23eVT!Q?K(B&sOj~-wZ&N^PYU=S)l7zQ=ydscF3X#x%yH6!?{ISVxAP#J;^)) zyvj08d1E@nP6K|Ys4Uml36MW^g8O+k^k4_?Nfb3P>LlK`fRdYmeEOwSSc~fEnvi9= zwl|2{!IW}{#K!Un+|w*Fk8Msmgg(acsVo^CaDx#!FdE(|JB}(n?U8QEp$tSm<&mC(b>UgTT#vgQcrx(r9x@t zv1=)o>cN|H4Mq4kJ(0mcF0M;0L_+o3icb^+y3AS1E260|#ljZKcyJmf6RKZbLE>qI zo?+Pc1-ZHn{{ww%E)PtjF5B+|H~oOe5r)5eukO)L8qlGTeEWD zW+H!J*%&3sE>j=Nmtpx24HmOKntfu@<$i{ezEIf;-z1aenFjsxFs&)=8EeuJtCJ(} zBDC3qf}nXtCH&+oXHPQ5CR9renlbdTk$K8@Tn@oig@16FezPR#!XbJ47h}zp4$N>3 z>jP2XhlT$iQ0o;na)xYMpYv(_)O9Qs%4(+%y6Qtff7*S17`u!`86)~{S3NNl{Sx{@ zIz)4<5`X)O+w(c<7qA{k7i7k8COlZSsM2;|^AF)9{ic^t+(j6$6EPhJh-*JoU;6K{ z<)=EID@ctt;x<)_s<8hADUY^qh{3kkV)DT&wv| zM3iJui8f-On>zZiHWKylj`MiBBSGkqB`WX5dh3N`>O1WR5&T%GK4s);I*ZQn*;l5U z(A47f1ivlWEnI7gEZ87vLzGippxM6-59ctH=)(61!Iw7^m*-$E?N+k(8jg4XM#>3Y zi}pJ3P!UZ40Cc*Kph}P{Z(9>QJK2yNxd(I7q}wfTv*MDZGkGB4+5BfV^h0+&8z zkXbshA_Eg^2GIys@b$?9&=8rTA~7r*`6~2J6YhpXbtL4dEKnvy+9)*S=Q|fZOLw06 z4rA@VRE-K43AZdFnqwv-2lJV69yd)=90tTAbMWU%GD?U@ti*)1Ws90uH}ePl2Y(`c zIk|EKjXYhB_?vAl5YEl6__JK0>wu3U~=>?Hn6wh+4SBF((wY`_)m*vV@k!)v}ldmk$v0 zIkpX6GJAnQkMo=Tp|a>B8V6BctEqy%yR;(+lY*?M1Y2Tq!hV6eXtjZAOhlY!xuoBE zp?7Ls+xa1p{dVaZu-$exlnwnPCwBFGt;WJo6EfE6 zn}grZq=`ik1D;61_;(a*khyGhO=6e-cW1+t-nMI}@vr^l;R*5X4 z`Mm;!4X(iL4R-DA*(fNeslXEdp!Tz!%KuV|bn$KDCr5KV&-iC>y5cE)&QG>IrO(9a zjvNO5h8}t}6V8{IaRxrmxO&?~r1pr_fvA<(MoY~SC1^2Lg82O3)wx?cH_TVVh4WzenP?|bqyOMSDFf14O~O_$BB)}r>EO?2l{VR63n70h!cSgr?2`voZXax=LfRef zQ@OjfmF;$NT_!q0MqUUh2fK>*&3HK3a5Yk|_3tCQM1TU^E1CLV`;I9z!3Y4L0+P~2 zgV-@hRCnodRaxgz5s-zdAI^PO*t0lhYZ_GFgCh)T>dWjw461SB;uVLkkg(nOQ+H*y zBOSwD0#`5;rDWn0Or{y)&y7J=XO4h??lQNNS8oDvhM#*61?UfConwvqmAGW|x*VOMUwG_$@dSX^gBYNjS_fR7)&wk6FN-QX2>KN&o5}Ef zoi5YS?hgEh_?YWb@m{cJ{B%@SU|^%bs*?uR#F)X!q+S}&J zWw=mP-l;4X?Ingq06RIl@5pO6r0l!ou$oyf7b7sCs*%k8=G+jE3{llV{0WFwWi^qz za~*A0YRT2NfvAu{Kl0#KVvXYyyA;Y_Aar_uv`jN%CwkIjS{W}h|COAK;>{CTGu9LXE@9%(V$h|=bme*~# zJciWWEGWYE&KRS8-nny8Z@rR7C^8#UBzDZ8NmDvxHx&NjVdzkZSmdnsFCtB8N2bfm zm$mw2&|*|nul)S?l`;agr%k6SC0L7{QKfvQ(f40uo_Rw~+m$YVgKT2Z(g698ni~0H zjx?fo7-i_tIvl}DC~ovr)r(LX5n%Bys|Vw`f92Vr*&XPfYcoa~H{0(;!4jb{3fXmu z+(X{4iOO~7Sy|^$v33*5X4>CxXREytAOFD)lh1CRh$MJ5k1vESiz$GrW$>8dpEgi{ zCy}Q;M1_phqR`2e6(fzC?bnK6vCt%i?3zsO0k>;p;;l||ad3r4udj0~|CWS?7uo-w z3*r~a%gfrA^&J6dk@1YE095fsZ@i#1;3Lq$ddLEnmFSs?_!iVJFTQX}?w0awx}*Kr z|FPF-DC1su2#x+@eod6KMF=T``yTW9n?j%Yull+>YuGnaQ9zD{$R<|@Jj4y#x_Xt< zbLou#|BTK?R4N8QOHtuIgI*HeYN@N~XQkBdlM?gF$Ejl9$WaQbk>$Nbn1305$v>?e0C7oH8GLW%kbKWtl zc?Vy+8MzFi8<(1_ms5XToPWpWy7z&J@5qCtv1}r;op6ix#Z3P=5l#@spMA97t0yC0 zN(fv^&Bg`i*k%nkhEWn6?=e8)fHyUS4+agOK_frZn_}lR+ZSHyIAn=N!gt>AnkW`# zkC933r9Ze-o=Unks;*J6!V7e3DIp_Z6{krZokZVGVf1YMrHDJH=GPXf89Z{z`%uC_ zSjjr$sZ}!d64xpvsj^$+ND9oKBpOqMya7!up_Ks6Q*7j+xfS{YHrsheuEvi;P;>7_ zU%v`|Ig@`|zpfN<#p#=aqLn?bMjID=NM&xks$dQNt5j^~%ygLR&&8z3io@bp;p?W5c^ij@4n;sxZ$0|5{mJF7aQQUY9s>A)r_6@g8N zeskX35efks_T*;@VZGv)TW;RjX2NEbE60rxFHhe}D!dZ< z+np~TJh2SuxFijZPJaT%ytKT!KMX8GBvI7}(?NcqWv#Y!Gc$`Z9&N<}iAV zA}K1AQkb99{~xvfBg(kr0s;8YE0?WmT!0z4E?KPt(8H)#i8&_8! zQG)8{iY0|t1YcY;hkn5)Au3|l2cQmhIg)wPsHS_pZew=NCURrQxnMzW$h}jKcO@e0 zC=+SUO!kPgIQC(b%Hb%1Ev!VypQ=7c6k%QstCjw=C<$H*QNpnkYL=BLZ0n1LeX8Bxu7AxKe_N}x}Ipc zI!fXM5E1N)+2Okbai5sj((ea!w{P?&u^g`T5QgU|-o1U_Sd_saqDSM-N-bmJR7w5- zNi5L?HoVYWGS_nS)QhULP!kt;}p02X3i+Zm7qMyk16vD#3GIt_j2k7qJ2cf=N z3#MUmj%wY>Ces&gwRB2^v9BHVtX#Na&8>I<^=yjOiAMx7PwGo|_{N%#zRN$3V3GUk z@c5V%IW{EjB>D3jxEEZKXPqK=9;F};XV8oQ{42sOtkP`o^E6>*j^g<2t?Mx6x6sPu zHhfm_4&sWQpS({9@KBE9ztM&ssjBPr%K;zX|7wdXd=3XCC2a=~XP45)|6f$%;wFg7 zk@{R4H%?TB)SJ4n0itrKz9@1o`3AVxdU;WKDgY!8y*vow6Ijx zBSrN$C?BIi$Z{`RRA84QM?%IW*1qZ862ErqFU9oEuf`=qz}%w=&YdUd&n_e_k3~W9 z#a=sW74p!7GI0OP2qSQ*6KcI{UjvhaM-!lVB zgf~M%$fNp`W%XwtSqJS)s`prLADBI8^YZsa56;UR0vQ#UfFD2pD#XyB`0Ygc&sWz` z%M^}YhcK@4G@>Jg5unXf0Gtan=`=0{#30MO6NoU1%f9jXRz%q4;30lHJH+x~qNikH zBRFCx8GR5CV%N#<)Hm7>DqrDix#!{fM^>Sj zL(^^4TSF2&*@Ra5%qbh1@Jg*y+InpRhhR%U*Jy}*I8HcZU1G_Lb#1_cs(vL^y)E;#kI>8mja+ts zqUk~m%x67b|Feb*z>c)nC()q=wB*`P*JBpMlZYXm&tb*2a1N&_XSka$@ABS+Lpugv-Y@#R!Qml5xLt3Oy7K? z5!pGn*q>%l0n*VO5&$**^*iOzI3>Cp|>Xnk4#<C_YH}v)z5TvQtd_Zdge?BCpnsmlX{Q+HDIm(ZQ<`PimOww=e8%^b> zl(3QQa_SKsxABCK*Y~kEBpZ0s(O`Fc%q&?&s>z42$RL2&u29*jdq7eGOb%TTFRa>PV zVe`dJm$h`*n;?M`>#eVuGSCLTtLl5Y~*Ua+vRybU<%-#|6V>%FbV3wuPO&E zlC(?n4aa?zjFED*LkZ7?&*-Fkur8u*6!0LoBg2;1CP@ zLM-YIu&Cd~qJIBBm|LM5Sl%0B%Z-z}&abH4_5esrgAdTs64sR>Cz$ejLKOjG#&2+> z$PhnLKYXM!{)y}hk)@P**k(?Sz7z`cf0A2{KgyeMNMZj$q#%Ej*=MB*@p1lWT1tVC zC6Sd342yV(-{Fb|@R_}v`WK(#C#bg(|HpCwJeBmF75ZNr0sudqby@^~A4cm)PZQJ{ zNXvmh|1CBHm9gU#1#VaVzm7Bjg9L()GoVe{FfYQ%g-o&tfPT3+xtHl=+&3^_HqEyA ziC7|Q* z?;s0zVyMn98T@19xLvxG_$_@}!RIJrqf@UL5v>rSIIk@r#bV*A+361yJ6AvY;w5a* zHXF|Wp{1ldSA3v*wWKcGg{CaKmKnw9WfY%QBtyKe$z-g)T0!%xGATr(!bu9BNn5

    4KrQHsd1XdPi3caOSK}6I_G>{322`H#YxIFXz;x z3m3ELwr$(?)7`sm+qP}@ZriqP+qP|Ux6OHHzNwmjFemF^9VNA@l3ZDL!eSTw8YZe) zJ-!gaL_tP`9TUQ3tVuqzJXAeTN3*Oajq61cveL3>HCD-Z>ht)|;eoR8eOb6O-{{)! z0v%ON`L;-n_tKD0!)g5K_Ai!rYKqWwnSu8(-;Bg#KnD_=Ll6CsmxX*$Fw{Q|*4ULh zrwWvW^{gbG@INmz*ZkOY$6)mL4i1N}*{IhQ;wr0n5^yl!+OwM`$46IL#Bp!z!S#$y zj1emnfc4_uB?K;{zs3!P2;O9S4KU|oS-#Dc^WiWF(Dwg5JoeM!x?G-l7>Leed_o$u ztp$&Kduo2s@}uSey>g89hs9fd-&a1kjXP!$ngHeFQ*R~m*iW#X1osH5{p$-!()~?X z;-ExP0_KD(T`+ipvmQJ>@_rL2olt_0QSk(oNK@&WBb@G`;*%#vYk*SOkBGZNj@>v> zEO10ZI79R485qFsMjAA&)0R7lu;IO?GON5kaVe_e*l+B#P3^P1-Wd#PA1kVbL&BJz zt78D7&lLkj%PBlSK2@6xytD)ebhPUfl2FGi3DW-b=~ox~_x^eoKyUw1?%fEBc{<=9 zvT`g|EGOlj>1CXXB>Q-RFxm!G@0azxgxohfmU#P+4az#k+E{P32axuJ0a1<9#z+T>F;7}KxE)d53eC=&xeLfl@fMWQ|jQDdNj|S zsxFe(TkPt}WcxV6Q51{{-Ei;A`2j6>=D7`d)T7ZBw6%L;)0Ee(;CnU(PL=5Z=Ebmh z8c;zv+CD4K)H@FE2-8y@X_^kJdh55!yrIHNRZOO2^t;?)aE!@Aaeg1yCWH`Zru$Fu z6)ILZs~B&GSJ`!};_XDq-ngo(HA8CBAELEVyNgZAacc35kr%f{r|fxgxdvzxP%_MK z1%1%mKw;fDUu>9$A~Nv(#|?7z7enb6m~3_klBK-~n6)f>N4Pbcm)O<-e=TB};zys- zf`=mJXg6r0J{y~H_m6e+2pmKD691Z?H;sz7HAm>=R!T_?;h8QK1^Pg83PnboPcJ5f=oC^Has*A;AIrzw-EIsWM6U7@@*Uj`l8 z*y~Gda4D~~PAWVtYM9W1S-x^gHX6H^)Y^ep=ojLM#4nL!Ca;uj)y|(^k8u0eFpSc6 zIu6h3BE_2jMjcyT3e5j~N94y`+Xo7OWZ2f~`qY8gfGGN2JXj>DGtLDCcrdXUk9>{` z{?xFqxe_tbG( ziq9P{>JHDPWf-kfAY7jAf6`a4Iz{;jSFeMKxWIxMuv@Czan#2N(S=R%_?L81#{Av` z4?QLc7sL9wnL4gYiQ!^*X?eR32s1g9>M*RAPL0C&ovIiWIpyKpje*tu`yq^)JvUOE zfnelpa_!YXv!7?zrWTqG2&kJnv9l#AbyzG7@MUT(Vji4G>Q0+IjsPn>HT?;ir*@Z-NWnt~K+^I9m^X5N8pp=3dT9;hbCI`9#VU zS0Kh6JcY}V0ho2gREy7@+~78+{YZY@*sKyd^eSx8+r9V|leYY*KZ&+v?xkt;@7fj_ z+Zz=|zxt(*&?4uo>zWLc2apmK1(}Gk^GPuPIjW<(Y4Y;cbOmbPT}oC`4@Skz;bzX` z&vJD!7QyfT8iO*A009}MJfeW%$hLFm``{k{#b1|!zvn7h$tbao{`qLBAbud3l0Lnd zxgJQz8ls}}8Lm65Wz|Wh4&+& zFWHP&?&11i4}FgEtpqa8n9oU%*hOzQXlu z&iz2`@%*j@J<)o$APV7bS-v4DI#z27ffWw})k(rf<03v@cN`)<7}U3I?TB9U`U?hNh^-40g)4ou@|?#AxX6R-;_+-DKYT z2WdWWGPgUw^REyAqt=pAc!9?z7tgN?`DnP}?T~jX`b_; zYd%7JuXusQTYS|MGe$o>5k!JDaUFrC=S?@q7W3#reyLf|p&E>crWnzYQ^#aChn9nx z=%<5laa;Z<(5ApbqeuK=U1gxPbFwflDo?T4W-a1;T;B-hc~bzP93U8E+vx?JU<+n| z$*q{pK0<3K>;;acS1lGs)J&dyk418CTx7>7SvnC$thg2w{if_SWiy+dW1T@p5JpMPO&OQ$c&TPys@!1>FI@%we0|KpupGQ8~}+wfzf{j zyc>Yxh9LQqgQg6U{@N6*-kWV$=4FQ`DPj7RG9#T8f3$0a`j&AANq?IjN9Kx+_rjPh zwd^7Ne`6OnOK1tR=fpEjZkZ>#Vo8YY+|daYt*4n~PU&`o@{eMb z&sb}{-7F(Uy)wi4J^+qkN_i|~MWdx0;0vRq1gdH9*KCY+E0p{lwB_8WZXLz!5V0Mh zbt}k+#>tQVw6aWAlTe$TRI-5Xkedzb_IcqBT=asEm{xw{=sFnRAHO3+luO^ za5sPTOc*_oHU+wckMVANzJ{#Uld(YdX)D(UXUfOuS7eoy2;dBPrBq#V7RgFgJ@tND zva|FL;O`PdO{OSLkZ-wVamEgvQ%^t)67lfR088B%31)LBqpZFU8&1D-iTYXo;DKIg z;kO8BGAd+RnEz3LSK?i>ZV?H3eF)hT&P9>uslGjTBrsziMYiQ4x{n?HlV^HoOzd4b zcI-P3T9sk-ld18^F8VWz!Waigv!O9j+wzjDa-bot>TnCPxAKyTnz11Fcv%GLfB zOK6B+hj!wGkl^88Yuf79Fy4G!Q&dGKi(<>i$)9v0D*&n9y*PoKKFkaNK-zYH8ErLf zJ!7Fq*Mz|&0F{aH$AfNn{SC(b9@7uYhW2lsjt&*(;7B6qto~VD3saM&=b9V~U`MPucI<>3eo4XM!Tcq!6Y74a~vtU);<38exrw^^HkZIZEK@)i^;nFOG!Ffi&NqS@*6n zUlh@!^NT?zT_2Wld1_5GDS2s4w315A36Q4lA;p*wA>>w*fWY|L%Y}ciBZS7lVt>I; z8S;Woe@J))7^ElNhD?FkdXaVRU%w1|Ztkl7LxlPJcIs1ilAPPovOCc)t$#Ep)3Vb! zJKGPd*osw5BI;6Yx4MGYWd?2M@bPx6G!H~~+(RhV$@ks~X`Yk_yq~V||?g2&P`I=je56S+grgD??CMXRod8RS`$Ry9xOdJlI z>N_v+8*tz&-Feb1|KU8B+Xq;u?CUmo7)lfux~Q56M-p%=)SN1i4QZ_`Wyzu_8ATmE zifu*#sD&rNXoNvLd-`>aJm?7OV?9S*9jvP;-Rx@Duwjkot}p zL?QZj(YSD_lqz?b8(xgao!v;%Z;Gru6YpD`yY*;>X%31i{E9lqKR{7geKODRq8+HP z+r*y2mzD!fz!$fKoZ&C((jlk9Y@c(fm*r@yA~{ZmmJGCuMUxav`O!5>n=4^@5H+ie z@J~&(!xklX&A@d}FLi0@o5||&Um(t??t;XBzL zArH{%L5e5h<+8nvUQ8Q=85BQ-35i92+%KqA*?3I%2Y##^=iL_Ad8SzHtmQcv!&S=s zn@Dx!*imLz5+M&KZ}I{WJ~g~cQHWhZw_mXqEC5aNT0Sr1qWiPXYpk!3L{55Mueni( zo*^AFmWuNX$eiRdZZKp2!nYkoohxXOaUygX-twWyK1aYVh0duDX7t+>FY@D!;^N-J z9Yk)|x5jy*Imn3_o7b-hP4K;c(Bir<+UEF(h2w_;o7}eQ(X{hJvmX7cUL-&78kbjnL71d%e~oiL32G z#%$OP*kYX-=NZh8#t{N=U_>U-*3j?XAjmThrELR#g!{~q9SBOlhtdqw|Bo&bD6=03 z1fpOMerpqHbpC&?{?pNuAM;l6(>HPUgmY0-n^`P5D>Limo=!t>`=&C-2MW#$H*iW&RI1HrYQIoW~x3bv9*M=`Ysyn zf+b0o0(*TcYfSbGM%Dz|aBVR+4Rh6<9*1yxD2}5dI=L7`{>9!Gi)bev>Zw4`%ACsA zoVMJnkZx^TVYjI8*h~rIdZ~d3k2)Vchch7%U3}2Hd>nL%p7t3Xz^H$byX&8sy6RR; zMO`V=d>lq$olf%O{A1P-NrTdBZj8VSBUoWN_T;k5>^w`jWby_Z*)y5W+)gGWg)7X( zYX@jt<1&%6n@AHOUv07`uk3~^!b?^8+8DQQ8rFVt+y#htZYuz1(_;gzijp{2U{_|= zfZu)eyC$^wG#mkHSJZKk3$Kb8aX5}PjK?duCh z|ELyfKs)ZFhz<1a?Trp{brCCBSPV(y_e`UmZOd}nN+?YX;8zzVcz7klz9e^xwWY@0 zm;EC#ke^vIqRcnEnOa=U$xIl9D7+8Gl_py9b$2LIt%{1lSt*!v8s)A7v>)LVjpUNa zNqxjZ_y|^;q3XN0f!j>D>M;qpq!71yS5U3m;|?<4Fwj}>qSguaq3FO{%DY_ueR)WC zD{~^J)$ymlKHppCa+D=NC!%oY9{R3wr5>@y3j2P9a*lY2O)FvcH_XXn#Y=s*)7Qvp zil#l93k>=xheb>*n1@RlbS-K_mk`Y>Jkb2PPnYd3aFmF$T?-FylP1W1CnN()RQ%7x zkDqMc$k*!nsf9>2xQOK*!-2_%cfLzDjfS8Ttr*r5Oo%TP|5hRV%hKNwZd+fOh4xWn zHl?BJO?BRM%>LVUY!{evje2zvU7n^ddBrK>TN~@Sz`;)vZI4LMV*KB}ZEC%0&s7b*eKx=5wrl~E^%Lh z`!7q1gyxtrb^Z25F$3!|l&3I@p`YL-nq|v8tWA30YmzOJORPHM+*&*m|CUV4W~G4%W9HpjXA|7L}sk3yW(&%Ix39!;#8__LInmJas7pVcu+@MQwk=C~OY&r0nDGqIy6Dy{;C7 z@%E@(LV`ks5wLxEFCr|qGJK}6OpRS){IXn%roMv^0yjD?5n)yiqPE+jV$BJgxAZd| zXMra`Z+Y|Wi%p-*FU7-$C#(ryUyV7xw#RSyawkwiVS=em6nBR+7zsNh-9bQ9xllCW z(=(Bmi)0asV8<+^K$;lgd~w0a|1;ar4J29e!*ZsYji#&?$tT@o^ao<)fXLAGOTauD zHo?v-9WcU~Vh`-vRXf`gFXkVG-?(s2X6d<5FgTA|L&2HyRc@uglR{G56RTM#epr*L z*nv<2QUFN_2G%Hv4$2Aur`sq6irJzp$3J>Q46&f2-)Slgs zqh+Nh3o=SQr!1F5d4r~gF!s+F-uI!YK$o1ZaR#7!lD0!#3SB|D%GW*7TrW`%PY z-&Q~_4OR3zRmwPl>Pm%jVzk1{8>GHc0A}OZUPp})`@Jvv^tj_bsm2#&ACR`Jk-al&GoYx%T=LIe|vw^W{f19 z9b1gL`97bU<*n;~Coa(6n!V{2YNFORo3u;Wx!9ZcMi!B5L+=i$`PX=#+u9IG>!fJ`&NW3&YcowPudaaz1gB%CXZw3y!Q+rAN*UA!fdb^k!n}YWa`_!8@}!@g=u%pRx&(sN}nBDZDY&( z1E2aOJtQHWIc4;PQFlzw83n;)@>pzTm~BZ$*`#L?_ZqJGO`}W~;e@6Z(OX&*q2pU;uU|Q0 zw5|yVAWgDg-1BsUB-L+r4r5b^ln~N)3(E{;_S0e8|_yNJKHavSbb`| zm2hNdYlfR=201r{QMX>0Z+q zDw(wdSnp;qi)fe^e}B{XUC7rBm#{0Tc1>BD3+jl>vT7HwsI)GXs-?kM$+#_E#y4YJ z+&<^dG5rtM9iTAxwsj+2>@hjkA z7f47Ml`Mz^^SZd%Ubh2a6HkOCV;vx7*+N$Q!+d12WZ#|6m18hk;8hL7j5(XVF7%Js zD?ZlPjq>A9zqdv|+P=D&0iQgq9NzRC3AX&q=F_F>;o6T+_f4 z$%Q|Uy!5b&g7(yuPPu=eCbN=zI%L2!68AH4aEZ@fXAaf-Vs}%Jd_U3pX;?-LQFB0z z_7JbAr%$W6e4drZ1umGX7Rm50UF~Twx=q?vHpBxekuiNI`nXx9={Z(43_5?eKpb3E z=$&VQE3HX41x6D1X@pn1Ca+NgdKDB3wXn{}GokqG^kD^cI-x3Cbo^ueg_#)^RJPU3 zyhzHgH4L6Jb2`Wo3acT2Nq4Zf!)-yK(2F)iU&>V+m2WOs{F6}45a966LEs1i{*cN@ zv-vm;J5w=MQ2Z!rc!j-VzW*NB<=7es=sbrqY(-e~++_COi?C{X%1ClE;n+IOs=ga(&DUw&)SSvfSFb zvg+Pp3OObG42U>%D6&60^%=^J*f{`hy8n9Tx{bcQRrE1F zch2+;c$>Mdks7;ATta%dH(Wq4FRC~A{o|s{E%~o<+p7pirCu`dtoaJtO6!88eHgB< zzq>hz;rYttkb`9xTrk`7bVB~idB#x=Lmhq7kHUy9h+!7E&8>Z3*mDLN>S%cdFm}dxAfE7wz%eGtbci?9E=T#y=AW zaWm4V%Nh_XD|b(=Jl__VjEMZ}RWd0DBf`+h zy~-wPu-K|MZ|9#Da%K^4W75t-dPFf=NL>2g0tMW&W!cuHOq-t zp}_IyD<7qPu8tzbYP#h`ZHJ3|0A1%a3`?rt^vp4UHLwr|mNYg^i%!~aI4ImxE>;E3 ziU{I`VnmMo5K6eTG|q8Nn}}dHW8F&vP#&&&m;VpvLEn=usg31Yw*Frf6tvFlmGE%r zwkdF}xERUrDclPFf?H=;>Cr?E;PzPhkNZwX#F?=?i0QSr1GiK%{j#Gbk?}+$r z+>O&&AcMC_)YaG4MPOiKfn{HFUNCIZ^;7md`a>K8)z-?#0b#)CYV_U?o04PCgj`FZ z=v>^4HO}q_w3B0a6|h`%$FRC&%g+)uQnm$2XxHf;fZq%O_BWrUK&OYeCS<-~7uYqF zN{#3g_LuDs7?ni2#lKd8LpB^&AoK~Yi8Tk^haiK_eQp%Dd319?+_w}cikS~cgXQsU z)<+@p;1*5$=~V$TBJI$yB)O>$dkmP8lX9jo4p_%edKb_2xTqTkyB$OS5By#xKNy(f ztxY(R$0+of(wW>3+-V#@0IBDz^0L6xF68Og3(pHkbU1;9i!G}>JI_M`JM5`9G0(LU zaoAZ-$6ZtPsJdK!y^dJbJ;QNHO4}3Ejo9R?j*FIsYC#&&EbO%vYZ#||dHHQr1qe3N zV$&d7)d^}Jws*CBZFeKBX+q#8sJBU zv6*`x*e5#Z8=Te-b!TJ3zNbbcg+a>4goKx+E=cFT7pwoYY&GY^2lCt!VwJMWGF4&2 zB6bq*V(*YjoTii@fr^bg8!+%VB@?zqnc}A|^a$SQCd`nM9P9PJK+;=ZsZc_P0!7YH zx@^@+@PDknW0m4Fq$3SL!%UO_ev+`=Lf{X1wF}!G^dMHL%8jSJ3PiK}!uF;>gy z3a8#%S*bcW^*v*;(HqO<4bd=DJ(um6MzQ$7@STVpm?!z;x)yRfJCrM9S9<<2-?M(a*9 z|1hC`U!7UzOh~IJd-*FRB7Tw*VrvbNVR_cOpROV!9d~twZvepYHM6^qLul{^O}vcR zRGmdN_AaR4`Lp~FX^8BeBFlKEZ!GRN6m708+Q{uYG1$S-Tnh*gDu6vX<2X15iiwi00bT;D@E7358Smu%UC!;i z)LD|uFC2E3H*VImBF}xF8yG2(=z`SN(aMUOOf+dtnvZFw*#LcdKw##f;+oEioY5vI zqtqXpN_e}Aj8f3}TW;eazxtmva?$)EL@lO-yMq7GTHB>t*REnVD>Nh@TL7?Aa9r8h zQT0du<1+SV-XAhIIz2xncN9(3+7l;1@IYB6pCK)UC^pX>L8D9^jm2Kzfw;uOgeNpw zBTUcY*aZV#Z0XT{6k?46yRsiSWkR9ZOTeXuBz0CS7Rk2vEh#OVU@$l%Q5+^y^jeA; zR?SWnhcUtz^9DiRsI{7QOH%I0V}Piy?%tm1oNw#BJEt7mK6o>3<3{&51R|_xjJR>?0VGtN{&voXE!;bOi&%1vrASenu*f|aZ_K5wb*F}F_UHoj`w zllQipt%4q)NOlRbriv<@9^ZC}OA*R-tHAtWxJgUJ8vk<}D#p_;OURaxMLS|mYxC2u zxNpq+aUv&?R#VAa+nos!9Kt6N5d>tpduF{Th&x|K1Q&y4jIOle zpck7Pc;)caXKNhlTrEndgt4B2Z0<1Bcc(~NcSRQNOEtPZZde(`RnmC#mkg>B zFf(+WVki?gzIIU@uOwB#gYo)hGcZ9mqHK8d(baPqRCikqCo!v+`i?W?8x%8QRWY6P z8dBt;(NpndWXx8;us!9Qdz?1b=^ErDnfUe-MK#L+Etf?@L~xS{|A#R~dh>P##?D1f zHM3mpChpX#y)H~sTJ~4-s75_b=;vQ3yE!^Pi&>q!UhF z&0SV5sGD2^^%UihutJg%o!aZ~0_7xd)p_T~R*E&1SeXQkF#bIn@k^4+pJ|Wg**l%-LQN^K zyk3gr*nz%vCobSSf`?4w`e>nP`6mPEQwC%})Kd-bzmTELR*7 zVB|s;>x0muUxfiRq-4=HrUl%DRtb~!vlJ2XaD!hUOMXUU?rdf4UyvIilhyOtrI46Q z)IfYVr_h@$)ig_L#ULj~cr6~FA0VxzoCGh%Qle{JX^QpM26#8b=H!45k7z1NN(0s> z_wn0FZ2hd&^}csq7YI5!Ny3DlR)UJ?K>C&@=J=I*iv&GhWQUbe=><|{On18Fi*@nv z?c5%p;lAjBDqm$KwK5<~zJil4GL7fLVoJcS+^={e zqFcv(ztYH`PCCuSVgHPOo+h7D9;%@zd&N zko&J0i%Ra98#5aqa9_2YTzaJE_9ln=V+cHoVuW&M;md;_sy6lKw(2`wUy@xQ&P?jQDu8C|e#w2&>jg9%7p+HB*GjUDkNB zoPYau>g_G9rV$S8IHDI_6J+N4Mn&F%POO$eg@~Ih_;#QxgS0AISr8!N+@vB)+bexS zu9`!UyLY^ZJ1m=&JQk~zjSFv^IxUC$8FI)7?^b>`i$hO4(E1IBQLJFL3d`)j+j&>R zpgZa|v56u*tR*w|R4h$oD?V8+oDrm1xf2p943Etadw^hWAo3IU2!49PIHH z`BnBjdL0yBk}A08Shf9vQjl!OtJqcPI5dYE>+tRaO#9)RO2N*C9ThFQo9KGu)Vm~k z3*sMDY;70Jp5)&$jT%gs#}5tDNTy!S^c^cJIS#lVKuYsO_#zfz+#Onn*GHN3Ex^ui z)Jm#;x-y1C@Q)nL+vtfGDe@7e7u^cvwHwp_?f$oNMxEte?&!vZIi(1WNc=b`rB%cE zcTG5T965Tfv^x^VPgsRut`~m#aGgtw|2|I;kLYOg$j()BJ`b-eeArgmBh@P0|KC4W zAmk+%2){1IkQ#dmJNc37R|Q>X`i4l_irjNN&@NpbZh#}yMlV)?g*Q^OzDv@)k??Rm zpnVA0Y_wXb((ZK3`AG?T?o~GgO)moMp+W%LC5DLN1SCEYoT&xe?Ht3MzM~2`XLFb= zAziZe=6G1ICCTf(>WX5+DfzLMbc9OFhc1~%_$i_JjqEMjD`zl4_HQ3|`#)nrA_8`& z8I8q#;hVQ;cPN>sy1*_aOWW0UA1B1qC8iou;@4LRAnrUz60|bOQq@+?hNi?m;ej=4 z_`qio(F-@z_IEjSVt;5lyeb5JPV1N$SnkF5c9;B(546m ztj)XYXIZlZom|$7cWpGoJ+vGB|I@6GOzE#R!+BEXQ|W-*q85pPGfqU^r;cefUy^}> z!un?HElOnrwcoFfnCN-TVFP|=xZ?muDXC_O+%QWzggdzgqp@<&@apY(N`CAHd$u!X zaxnbNwV2@&q48$jehjF1jY6DyUTJA^t~N(eZGJd6{CnN8(85`25!&AQktFp>i%z#B z6e*N8RJL-e!L%0hj#}V&;U%|JV5pvFe@}`q@>+*pUE6Lmfax9~$Gh!*k@#I-vubbS zPXn1fDurb^G>GTuSpJHYP7IXr*PPoNNi;)*s(rSGOq2ed+%55xL3})%{oBRrfkxf1#$+ zAV<)OrDz+~gFMt3TPoX5nOG*k)}vBae}yDN!^3~cwN1(#Q~=EG@G^dsJg&pOcyhod zgp#~ZiT`lGUZ36?rY7%8ro)tbw#{^rKD%9Y*0SB&SRX6}a|%yB0mddpNT%I79&69# zF;|L~41jBgv#9w3r#Kc}q!BL0?5`a}sdv{p(ve>YU495mfZ0UE96*n9lP1w+qva()s;k1djC9f5mF~Ne!(z=|MWK#D&iYl6Dhg{7LsmjB<*1GMuza<0 z)yxzGRZR}7ZPjO6mmwROT2)xAJ2vl(q2R{9Kkm62zBHV~>Nmb#S@H=h_!jnei})v8RYP=$&q*Qp_=e9JUH$ z`5wsRO%!x|Q5N`LS?czWQO*JFrAse%kFLxMJuO@L8oRjuSJ1%s10Ko$H>OCt?^0)L zD_Z_C?oo-wRJcAq_76!JT*Y#cu%W=ry4 zN(1v=FP85QE+$FF+7mrf&RZBvaQA>Z6I&=KUf^3_0oYe-k)) zYPHzcf4+%-(U9@l?ruD=Mx!;|MMi_rf{`d4!S?FDQAaguoKKIypg<9=rm!Oz3dLn2L54Edw8cR z&Qf1*zkU5BoX;$Za zE+{GuVxYi@(tKN~b=W>=9@o7lm4aQ4yfLH4dV82ZBaDBb{dx^@6m<8dsN8G~g5-~{ z*#G;5&#S^4Z^C@rT}}5QL_C@4REMQ%QElht#ZfLS?g|}-v8i>mG~H=Eo0f_o(SwFd zQ%*@aUwlBjt*_b=_B;nAfb*H^2vh+AFgUxz%4s%WgXgzOsUGy_pWN0(NNPMghrj0; zz7jV;_~0QN;v~@Pr(J+rq)%R0P4oJ3L|8WSY#{&Wa*(#F=4>uX-(H&Plq24ez z?!m>S79^H}#BsRpQOso@rRer7ix`nT%psFNjC@3Ic?_7WLPBq`${@nQ7qRIuqcYgn PIpvrnce~vGFYx^@mKu5v literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/admin/healthstatus/dashboard/healthlog.webp b/static/images/auditor/10.8/admin/healthstatus/dashboard/healthlog.webp new file mode 100644 index 0000000000000000000000000000000000000000..3bac3ff9312e394dd8ce305ab9432e30a75212b8 GIT binary patch literal 70156 zcmeFYbAM%B*EJZcV%xTD+qUggDz+-Nom6bwwo|cfJ2_p~&Fkr>-~IyK=g)K2+P}T$ z9COSu$2wbCN?aTa85l@IOjuD}k(2NR2^dJR5;Pl_dKJ6|l;4g$Rf?3jfS9z-?Ic9iQYHK3=W(GBNVVmh(aw=0U_`K|wD<{e*=kL#3W*6$NR5#bR((+AFP z7Ep4A@h0#|ptk**+p)FZ)8N8S*?0^R{UU&o_v57&F^I39$a%gY?82dVXO}L-g1MK*P0+cQ| zZnx`l!@hohF??M=Uz_=j`+0qYKSLKA&@6+jrkyp6_a|4L1C~3$%TBeM-C= zJQ(bGZLtg718xMSyg=T8AO1YVLC>_`CIIQm^?duZrv(rNn0p5R04F_D0u6qH0GwB< zC(w`7x77FC+wE?Goj*ST-b=nD0)OxO?fV@AWNyGezkMKl%slv=0qppb{E7j6Uv8fg zR{|}5bATzo?LVREd3wH}crAG{c=6lmnekou>l)9ifSN6iYmBd&cLO+sKOyYd3-Zwz z@3@7LmQbSI56Y8#QrVb2He@2$8zQ&v$6CO9dwA`g$Z1_I&@sK)s~$^cYle>Oywo0y zE*ZFP#r$S^H-r`ZL5GAFiPw#A;+E-}YA#U-qPg-iw}P3lUir;H=1k9z$xoFE;-D82yrRLil-BYEHWy-rcf1`{~ z`4e|u_L|`cS|xmY=ER``SRhQwO?~6`^7*9#U0oa_IVLCuq^=@*AJM#&sz#^)BKgio z|GJZ165BcC%1+<{r4>X&V091BY#4MC4iHUCaK*u@DtLTwFfb)L2Sb1>L8H7NNg|Cu z%6ZucQA=dagWQuE6n$1;@z4XZge7PLfbID*K|Pv1p1-^b&G3KRS_OeNS@%+G74o+A z$Vj|ml-Wzc(0wm_0n?;}aJFSCY_-h;DofQaE${PPg#O<2s~Cfmg?B+}YeTn^%!bxB zWziMwb&~Qkx?Ah5liwmL4h^P+p2CFDY8f7G9ZPJbsB87>*1Axgn6v&6;-fx{R_|Sp z2z``sc|f!tw|5Vy*E*M%sxEAP1__gTvp|{ht>er}Bs;tGk7s z92D!L?&eDS*-EA{!h(bWR{nBiOuUn9fIBIwi(Ij(rLUj6yf}@&VY2=mGL@fa>~P(p z%!;^BR)h2CwzYQh1P#DT*L8^J%GH#`MZaX>>BoVGQ-d(g(*Vt4u==n@875z=s6ZBK z#w7O&e33YX-3Ca&*T+(;&3WS5qfspWNAWPGnN-<(kd#zjkvxZ}T|+s>u<#2b{vrki z`>HP=zDthIX(&XLtO3cXb>t{QAA)X^ksdzzVZf?KT=4%&~DH-VHo4ySgr0zFp> zzg5JsJnxn8Jfc?--HU?C;O=6TP>`P##tKonqcV1-K-&j{A-o@^r4f-j^s?5LB&QZu zaYQ%;JidVNz%rn%mS-tu{8p9{$GlzN^?Q=Gf4=391$@DdiXI;R_QA0a^|LnMh#rxs zZxgv8tMFDl+pY9dugK{~>+W-C&b2!;qiW+WUA7_qinx{nPGUfRKiR_Rrfv4J7)5ya z<;UB>qlwOVx6&W@4{!=cdA?R7uz7-S0Z1@v|4%?kxIKo&fb;~r(*T!_2+9$!vVJYr z{`ssSc}}`5<*@S`XtVvdf8O|cucCd^4kd^74JuBRI}F@%Cpg5pK1h&j4Y1H(3pQ5f@9f3?IAf%NpL41!n#D(SH+;v64>Rm8*dBbw?}1# z$ho)8h63ibR=Y>l)YaG>^kK=I@k)lcUZr^TZ;Y@ zQEkV-!6|AL*DBx}feRdkzg(WwUQUBH^de#m5KAo5o9K&TIPCJ_ zix&}qdv9iX5I6*+|BMWTrw><~Xr!~^tS@!vH?JSk4i>rAt+crG*3!~O&tq*cs(Jn( z#a`y0&YJ##q9T2T!FtWXl4jg4X5L5FOUYLR!zXziP&-9o2KXzo&=C8@S8EL}oZy3a zK@ble))RP}^n-AcGci}mFKXK*S=HYoi=_R3?fzkQ=DB8NfdyM{Z|E(hEYAJ}uNB+0 zJz@~aotrp&ZU^b8+iSDnP*2To{X><2_;!^k<>Jz&KGt=h8^w27j-wIsf^C+Ro%4(xJz-5s3ZyQP3gF-rc=a;aAjN9M8B- z;4(lgQyLr?2x)~C_*-DF%YXFX21kmXAPi5|bGN{$2y9}1S389!L{L2%s7u67qUNW3 z$RnbmZRd@e*!zn&^`6~L;BE1H5W7NUK-qzQ>M}ab_(4(D*$Z;c-RzovFA7)5c}fO zL!TMCg%M$_kl6WeegV5G{rJ1W$g^DcEll%W%j?7hf-X@f13Mp zxI@z)fzlCKZzoEYY%CgmCal{>z5t!#`(-W;wRO%AzzL7*4mJhnQS_~-s>^CARM6xF zD!NT4-E@wt>@(SuadDB>TG(}cmcF+(vE!0l2rY`nPO_cFm-9UIN@((DCM4)x%UZ&o zsdSnVyH-b16Bj8LHX3lPsu41OIV8qn>kL!X!Cgn(Yni;f%^JykOhV=QE*?&;t^N%js+OMDM#t*x`KINkZA5-c(1%@eKc_2K~%| zY%Jm${7<-3eyE>$lKl4Tc`F5in0MMcXDQ-^ss+3de8QI=N| z#ZLt!S)l)gkX`WCo1>}5BLl7{D6*j+%y-6X=s=c#Q+vzdcFBTP99C|1C@K1vh2>pc zT%NPSSgv1qT1mi&41EKcEoPK2(-lhv2lg*UIpqoER*O&}VSE52+_6c>>GRM+3?mld zq#n*qbFVR=Tej$~QemOwApP}SALR6zL0LC>;)4hYH~-QxZ9X=I6#JW(#Dihes%$A^ z#tmkb1$*WVA726F;}q9^-;&cm*gUH=f^0`p36)>feh!wP@cMP)HK00Q zX^#fxP8|}Ztz#PJlxt6hEWgT3ccB6e8NqqMe6LF;Hr<*zg=Bc%!p|uyuKz*^{SQi! zrasJD%>}62*C0WD`A5woMDw+$Azw@kI=ZB3#YzxjLRaP87(u! zB%v!fN7Bb!s25`BCw`y8>%o@!F;ps#YlpiHhNkxYl0^+$F;L4j+$W6ZbBcz(_-=g) zCPdPMJVwaOo7OPjOraG_)yrE11F@kEb^|35Ri+|#3$*tD z@>*nOuY`9U(`<&JUpgMF(tc=u2_`R?i;rk*8E}zEk}z!^7R?2MMC{F11O|bwl)ZFn zgd$s54V{%ASj~j*s8~-?v5MdjxrNG|Pb(!M!A9i+RGg{oJkiu+rwEB*lJ1MhMhAG-HD@A zz&=v{5}Y^H66?@R=0j(e(u-(;?W-pny`o_MaH&oikyOhwm5R)(&)TIXY{Imm3U)sN zc?4^GUSBxw$9%Z&uB57El5kt!NDukQB>)K{g<55JfJ=_v-B2@O7}&i`g0gSWzI0!v zlu>}w5QXsIGT%NVMen(-OJ>CtEA=(Rlo*Dtah9O^fF$ryaV;U&l_Ap^cOW-h8P;DjhYSRLkRiP?eov|8Z$-n_i@<>>`bps zx`ymY(SwFJvKejqA@m#N_Zm@Wto|{tWBO4dI69pHi&wrMnY;kj&;AgADUiyTBKx+z zlk)y`*GsL&9_oT4atkV~0cFu1*ge%EVx8%a!18hn1?aV0>0g@==6O%j-^#*p%Yle~ zN_{2RRHj_H6e*!{Idxcd!G*i`2{xb7+_V!gO!i#qCoTwx8Z?bRUnG{|(3~=&1Q8Tb z`PI+rz@ev>Lbk!j0EPa!0h2HhA#er{0LZYzgaQ{2=c{hhB1TmunRoU}KtYp_0L-qJ z3N)$)-s$9DDe=#wV5XY7yx0{1QW-GwWsDzMBcav91F85E{~f!R`nn2m{y!cDCbH;J z*`FTlYiF*>`)A;}i!fRcSk^j_`e)Z`A94F@DlvfzR7qaM`U5 zlj;M`Sl?=Ell$}=Q;D~4ug7nblmzH~@3yruTPDO0M8a~xm!27fr9Df3fWARbL^<;x zOe_(*HS19Nm!-Y&Own>wUPWo6!zFJuWxzGZ%RT>{e+^v5+` zQTnVn?-ij%jHssuZIq-Bx=;M@POk0w$^gh95!c~0>y^*1iFhCB{xKJFJcQyla)aB9 z#Yd20p1qf4+Cx;xh?l_jjTLY&!OErJw5t560sgmu#TQ#4IdZV(_7EgkznM;%ouNaz zl(Pol^>b3&f14D_&osT4NXH<0*}Y~;KgsCshITJ`99?VLrxs|ZJN}qltaJlfUuQNh{=ErT!sygZi*gNM8Ee}bYh>e6od}^$~s|e z?M1_HOXjUf$w+q>;L!waY!yFb4IV5SM^lAE<J& z{mm{ss%0|Q31rnD+tjdMCg&x}<;0ACgz;^06|Nl~sQ>mAbuihXvAJg*3tp74;r|dl zj_jFUR)sF<(79rkd!@ai*SQfFa=}$ZWE3fcbpk?1n#<71A)>NQb-%`-Lbw9QR==Pm z3Dj6$CM*>z+NiD=cCi$#_{PgD&A669j0_ zTEsgyu@sLGe-+4oyu_a_f(%Pg7bpbUjQYPF{a_ z$O!W2OqANgM5ZzuBNK^wpfuBPx;f26t(6eTDF&#g(t$&?f`rVkY%Dp)(?D24&^BJ27kgf!^F#o0Wfc~>SE$xi zEl3F@h6lEold{5WxNB=jNgr=5oH-c$afVv3vtXGpBVQv3C-`tuiTYNK|C@|;3)rNf z*w5(1ghhjh5%V+Wm_Ho7q>EtkD5Ffxn)fTyFhQh^`m{Cg?np!qr-;{t<=!tHS2adG z-I{5870>1)P9C`qCpA0`IJdu|0A9(o6sp!UbXAGp=m6CTD&eNouUKrMm zd^fwKga3|Dg=wQar9yyhB54873!LnA<3+(YXzc)uYw^IPmK>;vT$9l@nR+lh@ z?xqcX-rB>QdAN63vFVX=jL<9ZvUQI06Q2Ngtyma8ufyn5rMC~uAdsu3e;Vul<%q(| z&lGJGQG(8G;U9%k34M{_Uc76E#Qx>*{MVu_2pq^<;02Vt!-kc#V)XGlWQ@jxZ-Z9NNfdpJ*f~}a3~a-mug!GoydLez`?r&)TS)3tKwxig4BIJ ztZ373v}apT&3JL#KWrkxj`^C{#z7be8#PCXE?Td{FMx2s2D)auGyO*${>LJ_Sfsi- zshNt2;y*OzGX7}D!lafb(AMU{?CrTGX`SnC74s#~C8~fwlc1^nU#6VE2};4k-Fp;o zWUr!`>;JoP_rIOJ!*KBb8NvTYllwnv>2IO_{}=v;`TxHeo)YC1bq9!FfAfX^H@yCD z#__)v5X=NC;yy2V^kW<$*oaajr{gd5AThxI-HQJ=$^Va|7x6%a9nB*|Xq5-3+9a?8 z2MwKhi5Juc-9YI22j2J%wPWpP_CnQEwbB2>S2kU9NF!S#y*i@t zjbfUH_(~xKA8@(w($Q{#gYX`5SJN6sWC0yLzgS6Ok)0r5Rw?|;qO|5efd zY+zb$z0(`r>*NHN&)#3$w}Q`Bk3c|QHQ-j_7Kw`ld-z;E$e`Sk*DJbmZ6j`uM6lM> z*YBh@F({_Gb`gvnexln%$t7nOIU|DQ>0s8n52sj&43NM;Q!{MjU!KnfUoXo7l58HZtho|;CbaT5X>5Czi(He~}KLY;1QbC#65T)!tO?P3?Z74C2my%j?Z zZ^)`T4uV*3`3@tLCoiw2)SQF;^bN4F(KkGneR8N>{PL#Emdj5wg|@jrAGM4-Lozv_ zkd9mu*gEuQ(?8@uaUCnTnXL%s``nUIZ$@vbCM!_g{QR{ox;wv~Vl5RM3Q$+N{1B*k4}T2tcVbi#Iwo@RI$=j*V?GIE&XkVW86F4w(1AQx8nugD>Ta@N%2LYdQhS6$lIKQrv zP=wIF9OY*`H=pXht9tc%qqXmExzn>vvv9F; z7-iiZJ*OAg$?xe$~ z%g`AXf1Z-`jVodcaDr#hqTHyT<|f}-c&Ym+PmndWab3tK|In~Ak`T+AOj4TCTNt!P z2eKpk>v=rR)WRtI{7-CdWV~p3$Z?6f_D(T-w-6|h1HJ^?F6JvlTo(10+CP_0=PQ5* zmF6%vTT}FdHM<{Vu_?}h7_{whdBczLx+`X7EJGa1WnrUD8^#wuP1uCcz-oD`T=sP_ zl%4U@U{j~o!*8VPJ;0WB!Y7@riQ!=uC1djK_5{dIi3SAF{Ca?3TDnJht_|}d&x<`T z?SE%-qn_yJDbTuG-G!(UFeWZ;)OhMHbP<5O+4K~pG>3%6eM%K7$u)~JRjO1Yr5}6y zq9au-v!qTs!vnT>qz@OjzoMMi(b7(TB{8bH(4Xj>9r87J-gs~(A>4sae{|Jfo&`{6 z?v}s_p=_hKOb~u~(tEDxEn%?X@$9$s7d&<^gY$TYEZ6f#^Z1h67c-1gE4f^v8*K)tWy))|B;dI6&~22dEeSJ z&WeO#oKBPg)OVUZ#KJpu_;=O!d^L=Q@7ru0l(cWY1z$EN`&6HOcdJgshq5-hRo`OJoZnJh3xp%JUiw@@1b2lJzekidXPlOV< zj4OfDnc3@p#BGxJSPFhR_Cn%UrgL-C85+<|L-{A!O zAtP)1o%!HTWDs9a@}xglTw>0RLe_E0DMTZlKJBzduh{~k=p+2ZBOf}wHY{Pz4D=o0 zy1;Y6Z}xS%VF#QUyF(k8p}*aH0&nmx!AtRc_QE`b=kS{UetH|xc3*K|U~(Ap=5HVy z(qjK!A!lF0zK#9c{knyz3rU0e=fmk6CQLjLifHmYhbH}+G-6$192Uz;G^2W}$Mjt9 zWYhfK1jZv-L(gA(nr}zl^s1idn1{TQ9q}X*+xIWCJsV+E*5>SJF~Xk4*#_R)W!@K) z>cw*tdlaw_1HpA_B;-gVyp|o(HV;Qw>SdjNGU#@-cn!-FiA&zA6)!$eTxCBK5z-_I}FJG{CW@`Hh`f zF%6Y0r!7|eNPH|W*1;OL5bBTkapi;$iFNvJV+aJa+R5+jO!8*653$O2fPc52e%{{ z>L2OcbZhM}AkkeU`Gr(1o?SJ#!X~GvEjLkLt-1Lu_JlA{b(2BwDhuyCt2PL zhbp`YKet0oBy(2w1hlni_L+=V5o57#fniJ&=Y4!RaBdbtEntBHks6KpZWKGv=X;>)`U-v zpTTQLo0U0gQ#C?xQTb6>+Bo5Ri=oOYh{rszI>weaZyeT+=6+}SOVBV!6vmKly46p+ zUnU=_mSC{RX-__Y5ht;;*KQ$EnQdF@B#nCL#i5R0G@eb<5B1paA>X5*=3t>*yq+Wj zhWD})JK0DKmUF=rW=*aIfXdLn%;e@g4X8EtCR#|g*h-;1(FpT=r!Sm1fL%Rxmmqb{ zx!Bz`cx04UftJ_fy%*~~77P3WVK7?o1Woon7Un>dmz3F`HDi<_iTg`)(+K8B3w}LS zfyce= zM3_7dxbi0Ci_N-3W3YM1an9jdp<28G+?ESDw36`zvR*!|nxyLUlg&p?F_%wbcHU%2 zr@(E(%}Th^ad3*B+QF*?--qKaq+rH~?yB!e21-@za=GhF{oWl{^o#P!Z~kN1okZ_f zJ-u;#eTON|Py-i0ypJ+qiIkFlH^M#Rxi=K3bL?cRtFGp$mJigX?ovIMFKiD}PR7nc z+UvwX(CPVwto{M@{M0rj@$l?K47sE9K082mubrz6I#5>Qs?N7ZkQWiWwPG7(f0zD= zEcNbuR=oiMskq<3e1R*os2f>HWZd@(Xny-N5oIdLGW*=m+_pioXwgjPbQOFGvK~^@Qv< z3U=;o$R-z<2id1z5J_n?fG=phs=c$MlRhtOH#m(VJN@K7SrFNduN%;k;fgV7`+|7U zJpOvdkGj?AEz=6W9iZ;-J;cm224zX0wfns1Hbz)ana4-G4lE+oVDE`aS(YvVYNUPH z{K%>ew@85vSQ(6RhentkD#Wr8Txs+Qd9OI9&-J8`7hVHa!Z_YPwo2`5+t!24$rH7wfWN-%mb;9?JKEzGF5q79CRTxs$Sgn}Q0G&G1V`Uj{iwve1RhUM)3$O% ztz&#_;aH})5^OXLFYAm=d7(D;~*{9ngh4qmTGi(oaTfX4EX zVLvXuSsz(l*a>j1swKUXi-Fu|4wbDgJNKz)o9FqkTJ4mT&+CX&WJ~YGz?D=#BF)hJ zz-Fc)g~i@2K0!E?xl@uz{+$&mkVlFeMYh28+Mee4blB^wu}s48NsnC2b)bEeh1?5! zJtIUg%Jq3sf}7Io5+Jk=Z1tFD*BPU}L61CXHkq)C$XX{*kRK+qrOCZ*p30SYHI!kD zE2gtIOaa7Ypf*a6YL{oo3CgaxA3yA3fU$a0p3wIb8j6?Jp|r}HDo^3{i1LbeIGE4tKF|ONjunG z?p-AsQM`wa#rleYyKV|R#)%GaphEDH9WrOdjrR7Pc!Vkb07)Q%jQ3(L_ALwC(0EMM zb2H2y1Tzw`_jPWl8{U1nvtO8g0CYi|+InMFAivD{)KUNN^Oofc$MVt{l>+dsjOyue z2kI&Ac)Q&09BNRhVY+(0XaOQ_4kKhsgu{+=zeKxk>=r9g8k}|%qO=QZ{q6S*5iwzL z&<1nmhW&8_qyu#sD)@!3@J~pgJp6p@tve}he#FK1GUrAMnU*i^{XF41KWys*2wEFsijI!2 zx-TbVTogDVH@WzEb2D3@2i6FIW=<|7@zo#psiWG`0sdk73NBY4zFzObh5lpYCt*?D zF=nb9!Ufo=mxh%dG2;$+B(uj;+-^`@gv4zqF~`h+RAqr^3U7>0c#jWSD~3&9N;!yb zozRJxR+m}b`2tbx)0!~TV{`~!=GvGb46PEGV2a|oOJ(jqIF zsMd>VG@aWAVbqrpiGcAEM{O8Ej>+8NAh8l|8~zd#3U(kMxa6}(r2E`B_!>&8+ZPbY z;fwf`gE~H7d0LVW6jA{?WxqPvz>oktF|;>Rdu6#kXME>k6NbazOM1jlH)Xl^Bm6mY zFVB6|V61zbhv$w!&>I2HN?)|e-?2_EGzC@%qUi63R#5PPf&TRYHh!$2Unf|8geA5W zZ{5yg;|E0g8P^%?#P=3Lq!Qe5W9m=W-3~Q6*KxDmbKAyktE9ekx}>yICL9vL^4iHv z>7lx<(UikEwDTL4rm}e6km4XpRH0_2w`3eTkEDV9s2+O=W zyGrs*WgBW{8g-lXJOc5tGlWIT<_L)Q55Dna^OoU%KzfZjUu#v_NpBoTjXOQ`>MC=J zEWB9{Yj3x54AL+--e~Q9_l&lWS{(%`?_+ch2Nz^jpw8Lj)1LnNwQ9`Jd34dxe`6L~ zjJLu+!1KP{wt5|tcuQ_*8tLyi-7mzfYZJ87q#?_I%-eiNeq7(SbvGPTQ@{MqXGZK4 zi4Dsp1^=T&T-{|B`MH_hzG@ZZGcQ@;Mf1))6!B0+#OTMjZgDEwu)teEwH)Vj`Xipq z%@-K!X}p+mUH#e`MyWn!2?fHVLmvHj!HWz&V3Mv{ z6)HdUkF37zs1^lP%N25^bWovlvt@%;L)(@Ycn_T?l}iYHVM(p69bV;*ut_9B-C5HzEyTltu=b!)pB_pqn;+ttdkYcd6$F$t^nk>c6JWbP)g=eDD<>?$|iVU&-6 zbd1$@xsFOAFcDbb?k~?BYfCGZYw(|4lywCVfQst#+VE0bOTbmOfi1#Y^-bIn$C9{e zcBdl~B=@vkETwIIDt1KqO@vjB9NRoI&A<_)n^AU)AuTQe7{@}^)%CcOjCk1pASH|>mhA=&-j*J{feAJ&)&w&*e>B zt&1VaOP6ymsoIBnifi{~4mpI)zURxkZ6>=^Ih4dn9XO(WZjEf&jRIG^4tm+a()}1D zo7oUlKv06oz^m;ZyJ}47!-Q+tA>VZ+2P{o=tpQu!Wu+z1`GKRD79O=l$CLGzY^%6f zL4HJ~b|aGd@uB zhGb9*CO>?u>Jv9{`k-8nh4p{rXaD?pQKp~0vibd|gq<>ZG zhB0_mxd(3-r;R&jY`-4QtsdHCsQt_fYr{IF#z4~uP8@%r6s;aB?uYue2tw>Ybpjk$ z&xZ2e?H5->xQ>RNQ{q$V7JWnr4{w|-W;~^9cX4eqM8=8E!X?i+^TKz*f9!OZ;7AH6 z(&1qb%zQ$89TzrI+G%hte9l5CGxYnAhMgm`s-#}{A+~b(oRN2B*LTw>Z#Uc=HGVLa2VMZzZ;1PQ7YN|F-FR zaHS=z4e8bg%+46P?-4hb#kaK#YP)Tj&$1#J1u`jd&s6!~UtI*ARJ?>NMUXmgdzbcJ zv=OgQPr09K7UH7MFtMRMNdP%jxta-a-VhLVp$e{=7Jy{OIVH<6Sjw66he5HXmGFXv zGny@C&O2a3fx_!fk769^1C~i?K7Md?A+%gXx1nU4FbQoqk#p9_lD$NG^yv=;T-#4L`DLbxviw|RDLKsRAQ0@KHkMo9BdzUyK-if@!{_XTa*DU=` zD6oVo53!2;HY18|Mvie^=yy@XfhAfyi@T_2(FButGxL0ypglv`Hl{lMQji#t(-@03 zyb;vCC?e&)i?zRfX`A-`#V&Y%0>ld zQEJbN$PdOgV%AjY{rtlGPU85wV8yjt1vAM6#;;~LBYcOm!S&Ng z&2o5XwUNaVjk-PTJ0~He&tvaRdp`r5cdRT-kAmq~HpNa-Bq`EYTiyIQl9R@3D>$zQ z10X%ZEWAlErX?ooXiC!IF9UQvo7=X~8DjkK)sk~oZ6WgG#Ypx($dL<+5Y~sh%3p90 zA{!M0=eTQ;7+r3YtP zD|i_&2ubYuoxML3Js`beEiy$^TD1xgL4!txsOWria7{Vbl{v(UMME#6gE$RnvwVgd z(P1<9XoVEqPKJBV9i&$%eA7)=gMGr*nvvgB8<+^+j#96hS0@`omg@xF8upXF)z~wa zr64k82A`T@@kD|PqFHJ-xBQVrg3SWNbM6n_#KOdJj;wZ4 ZdJ-Mu?=IjdBvD2qT@Ug zq5a{rwV*{1M85wr()Ol5ZaZIzZ^-bW$GHtIW$TH1q`JgB*BKZK)sgXM$yP!yE);7` z4s$$UMs(PERs`)qdFYIL$`o&5Rp?0NX3A7hx}6+~TwLQpV!_W5MG?^n<4G1selX#; zdIU{*U9IF}PD1%CL8N~)Tv({{7sQU@K5T-<*=wE2mt znoDpl@X{hSdzpmo6Y0#zaH{RqwBjUy0$sKnt@%UwOWWB4W$kX?e(hBW@8?Pa0fD>6 z+<}6O`3oz4<0s+a#tS)vH?cNdR&|do?5KPQUJz+%uzV}vqv15{Z|tBjq6^^+UwPt0&4^maGyS=DkhO9y1U`M``meCaT4&OaH#5e0J&>ldapGee+?t*ixuAUvE1C7fzEn<=ToanJ(jGz#v zj=OAhFqNGdPBD;>$e`VJP%rFtEzOT1J=)io%ST%;{LS!PUk8Xvgz3;&sc7}+@>Oa% zo|(duT-)GSz4rH;Jf>g9?{QmI*ccZeF$igQ8}9CmWttHV$0&QQiPQ_4Y~4fqpywH~ z$PA606u%4JhwDHe>gzh`mr9s=!hEEMK!t89TcLqY)YK71ml={Ws^F9uPHwfQStjE`NEVbsQNKIAnrPwR~_S%=;G) z$%d!d|M&tK!L#BGw&1U`%mY3t&4bglKUnSF1!KShk)=CDNPNJYNQ)zB5r;kj+KgeG zFYD|2(S!~z)sJxn5F6=*JM&$lHiCEU0j^~a4h$L7vNNTIvstTomem%;gqk&-K^GKR z1)>Eav|~uyHZZg|$>GAN7qaOHu_1B9kgP`x8|LUMKvw=<2hneJQ<6D;i9-p(NYx+6 zVMkBSTVtr+AKP-MZ=PQyb{EkZLJ1#uWFY`_l7HVi9sq$NzkT!*5l-Tvrt(;rD=pfN z$6nv4*25xn?mI9IMZCD;b{YXV)@a_M2yWi*X{xn8 zb86&&YP?&$LjQojr6e%RLoVtE9!vv3uEITh7az`0K?GA?L5RNeRH)*c)rr0w6!MTp zC12us-hx^}5U9h5WvFLeEUFDvkg2!)u0{F8D7N}C-OB^7OCp@~HJmNr83&KT6e9cy zg?ghqmZQ{twO?3!Yw(i*2&leiteOVr%4|q!Gb@$7rc|O~DZtJUv_Q(x{LakqA}%#6 z4PI%ZwQI0rZf3@0O!3)<%c-h7x)$F3idW(L>)CsnkF{+HV8p%CET!yX&kHOQLBZMb zabvSsMw*KV?A%;%IQiR1tklnHB4`cHOSZVDR4hw7BqT;;T>+6D2@>i}m693MrAKbB zpS<4y=WUj>dNjD$jg0~K4f0@COOJ7lpamZk8}9@U7W@V<;vQ`8ipy250C}CQD*LUB z7%aO8hztf16fz$Y+mDCTiI$Jk&Qgg0PllXM6=d(hw+GLz4fKAo2)z_B^DM*yD;@7X zutLBXUqJe2iW4^k{5@Y8zIE*xu;MDiM<~Jf!8V%6qe5Q8@Ptdsd-00eBpzh2%H*Ns zr1k(q^XKnMr-~-cMTOgW4-3|UT)Gkm#q40LY8ZyI9r{v+9QklO@84K+AVir^c%`Fvr z@z$e}4QN7!F8}F=DO^rulYHMGAl32{@EXqI$N;s5DM1f$VuxTd3K->bS3J|i34Hns`vI%jeG55bEm7j z_CV*R59?`RPm%J*rGZ54c-C0$Nxw;;`&ip=&Z|`CmiiIl-lzXe9iY-qm@4T-PaX56 z`I*!(u8Sx?6bci=-BWEgjuS zF^VQ}s7i{*kt*-w)_Ju4rMs&EP51lf86)XQgF(qL zNSQx3>c|G(o?X^m+u*4E*Nn3;p$8~&)`WP`%ETjgG&uTTbpi20CAur0qH7P|t;vKX zRCdtMIBPXf-*VLic5@qx6+0BsvI$6kAHVU2Mvv!);-vf)YO_s|xqjX>SzhNW+%;$6 zlE`caZNA-dB7{>dlKL(4#H5|)IkWqPL_fV;Uby+Q`xav&*;Y=fd0g@xK2khnj0_`{ zhBMmOkLFiSZvr6f&j~VzREJAJfaSn)RH>waCsgR#_t%f2>GwbHccQ5Di0zO{vRBb; z0`0@U>q|SW0-0{M6l6HkWSc5~`s{LHrIlfcrl2eiQQTsw1)NB@)5GomDAyc@L@84&N*z; zX9?#^$diDA*%o8xkUo2RaS3M3mS0xgQC|*K`*|6t=?D0lbu}UaPGVs-{|%Jrgmj+@ z$@2-_soVJw^uB!NWUN3kTgL2R0ShD(2gscWrP_&an7T(R7x!pbc0qDiiu;!t1tU2d zE~PgSb*^3Bot!-!U#veSz6+Z8TW1|yCtsxc$mRA=(l(esFTrWUM}V9`Vt>9H z5kqjkw$xZr*Rtkf3-*l~13gMwVO%M(S;K?`3^TMu18de1Sb_i@qh%K$b-7GP-uD-! zj0f22dnV#k+>-L;B;(9v?ExlhDXrKg{}*yvYQR@qyY#Z*$4CK%2aY; zavs%P{%9_E&x44Zo&r8%A#a#%oiV!49&>&U*?@6_4O`QA*vQ|WV4#kYHm9P*a7g=#_B@wcA z`JBqq9TXz8oXX{?Z62u&YYb2veN=DM95!E+JXsseoS_G?Nq=#MfCKF_+|X08eK?hC zmj%G-bz3pyknUZ`SOo2Pd(P@H|$YBW?4-C*rVzj?!cT(iqCOR7#e-XP%bnINI`p42q#WV6(xd(-ZOk+qrf(;-k#uW>s_@3N? zLgjPgCRMTAgiLW2V;j^3E^LWQ_ME>Z-857>l4H9bU(5yB*Mj^Y$il4tbCT_;J`Z_5 z5Vy(UJfM8Ba%=|;zeyVkliin(`@FF>DVI&0C3zPFTpHxe!9?+a|KQwPmgGpk*TP=F z(O+7*hGVEprL|+betGY`yO>NIg{_jzOW~>vR|)UcFDZ6s@lhg*6%@lD#<8k7aD|F} z!Q9K^Bk!;~8gB_hDA=zf?VSF=f}0 z`M{NMd6m@O;lWVolCs`_XG<$ma!)(Y3t{?U9X$kM?S`|3KNqr|8+ZOaC>-OJkR-r9 zP#RgBT3V0dW+s;|%W0rIn=Ec+E$R~zPv*SaiXyW>N}sgyc|zN{<6ywnYpS(JzJly9cidlKdyPKtunoHl2w9Jd&Au z>Y-8D=%Zc=k75dQc40s7-TL4u)M(Y8U_)ZnA&ZL;ol0%|T1a@4nQo-Ox@kkHc#c8% z2T{2SN})?MU6x#|=@O9)TQh8}yGYVL%*~_Zk@m zpcs`n@QBP{8os+eT@6H)+%5ZpCD-ur|L;miM8{EpfG|(#M7jw6%_7sNHwQDV1kl2e zx?u(xB{{{NcZW_Y6A9Ote9Z)q?^4#gq7nLf<6f1ZAVGE7K^dxzj%wXFc915uvQWhm zs{%a}wSNFbw(|^(DUiS_)8a5~=z`q}B1AReHe224Ld-k1o%7(bI#l5k=47PqMmILv z(s(Knf0g6WG&pm^Ub=B#aA(HPtSTsP9m0WrY5YXpqp(i#j23>@roX)fh!h>60006@ z3#rI%5Ay-<7UsbCYUVsQEO-@guo|)hLf;QZ9u8A0N60H%oO8_YOETvZo)KfW3lk!$ z@3lQ9eU`HA8p@X98;qgJ2cAkzCm-p_BKt~^zyzprBY3T%iKIe>SaZl}+TBRdh?RT5 zX>`cpi(T+V>+Hv)B&-`o;ta7DmzsIB0lEh-cU;YhaN7`>D)gk?N>uYZ z!S>z~gi&geY{UE<=)GF@-%5aCm<|!KI-XE7unmIKcjk~OzRhwcJD7Afnf6bEu_B`+ zIIAV|su?*oz%~Jh>$*hu?F0`06YG9dUXf~51h30;bFkJXFAO%{%=SmB&re`CX}{Q( zi?d_u7OMIj-`h;FGE^fU{QwML(Q}5wG>gnm+YVi(@?$9anI9hLgOARJ!n4Z|&&i>6 zWFKjLexbHO8br^XS5g5sKStu+HRNF+uKAB;WX|ue^8(RHAS<^83#T#Sq}l^ZEW(np zb=B4uX+3_HdAF&CxO^u{b%M0O@2laFN{CssIa|`ypG}5Ls=;ta`QFqp*a% z4Uyb$Pj?A#t=-FSJr@|}rC+vU%>wf`Bv|2p5T2&2*{20Grm3AeY6%i_Ki$sLjV^tM z;x98$3vo@48e)9WOl2c@i+#;7ma<#QjGMK$b$M;2uAEBFbbRMF57k2UA%D=5x`kxS z4y3e?XN%S=(5EOlo+aC}b~4at*q(tKZ`YURv!sb8YAxIw+plC`okl!bb6v-j%n1X~ zc&$++X@_R~em2Vyyw$%I+zl{wffCAHoSPCDRsTJ~nd}fY0Y$n3@U!W0L-so8T|e$p z)10607zzd*6A?jf$8zIR&!^i_2KIDjUgwuYM%S&pw35BU!EaM|nFXe-sn`LjDATXF zI0x*My9zP?`6}VIbY-6E9EOKp#~)en2vz034~n^GI}wf2R=Y&WIJ%6%smd+l7v$NR zci?`7s+#8p21o`c{f;2JFxT}Mxi+JpguI+aRq*G68Ff*J9y$0-p9z!UGJGaagvs!k zJ`*RxWcW;m15#e@im-p4)J%#`-kV*rIb#$f#j<_eUJD(K=@t%uw1{qim zibTSrTa^?;^?8f$=Cf{6=aBg9ubKg{A|Q%0DY3KZz`?v~2^NOGDwTt)tXfgEhV&(T z;y+9Ui-($rSeNuA`(y2c^(yfEXjI2_!YM%m!AvEzbuCJ0U4D3`{S|lat{RN_q%F)k zH0i4fU@a_)vp||5KP=6}RW<2XaQg{4w>ho^zJQG#^$4Pe68F_oH~@9*124k}W(P{W zQk)_13;+4x&r||0CnT*nQP+1%)@-o^Kc>qxOcZsl$2=_c3(4k|T8)g66%HhvqH#Tr^3G_8CQf z5bQQBM_wYsWn8Q6hIl0nP64$@aEF`wlxRpNPPRrDs8nIFZg%z5TSl(?1!umY_^_*T z1a;6N3H6clZEj$+;b+jUAkwLd;CJ6mYtIpE|I8;j^kvVTm`LRncrO-m2Ws#MZ<5sr zp?@SbRR>f%X0xHlrQ=cH!oY85^zlYuX5?R^r{Yk;b6G|1eoBC6rEHzN#X{_HZa0cE zW!8!dJJ%>nj489S!+OF-N%s6;nPSM*9ofmzW)rEXShno1xCQZPqSeKzGjQ;>p%Ko- z@gbfg`Jkp27xTDa@Z8UQ`)HhLoqo^Xwb|tkUO+{1wUXNRw~$J1=s-R!fFwJk%DcfL z8<)4To_k*e0)VYPLb)qgWRXfPt@FGAcy7WbhMUb`^H@mX|09q?NdHbgjB%nqB(NU6 zH3^sP9z4_VE{cxh(j($(k8(Mgt2{Q8@A*Er7y<61yUB%O(GpJF_kIC-?xR6Z}#cb*3jdIOoR)wLGiAzdH2oOK3_Tv8!P#HK+Ayl)G;})H=+eTb5>|RGs;N#CNzy2{s;qJg%$`%MW#Da zKL2+DUKi>Z`}z6z;=HRbtO|aF1pFZh48G#x_!8+AtN7wV7VqZJ0^CS9c*&La3=U9I zRTp>7#qPVX@>rWDnj9@S70kWY+G*Zihlpl`YI{_aB<{1jq&0SOW}4lMhU-EPU(}dC zhw(&)BZ0oKPja_6x(w$@Zah1a@YuW8K4peC2zDLbOR%S5%C!6214R!aU4G212;X@{ z^Xd6S(P6OHGVM~kv_h;D+KGiqdBruPTF}n~ncipzD!IvETYOXOWySy5f>NYFycmPC zqFvp~ZND?cYjV$s;SVfbr2L*UdC0IKTvz2Iz{>1-P*~ef?H1cmk(GCYX|k;39?G{F zK*KzlF>9Zlc6>b-ckrTKZ5l}&KKAck(7OM>b@qJg@4E_SM_AU#%7cuOUt!M9xl5zI_+9}T)mk#p; zqb@=~`c@vZ`xgcy)Sqda+$i=9f_>T&xs2o9F&mE%obaUs>&N|wKydg`*Nj^}XPX!J z<>c{^GCa{ZOK&n<#z(a}VI^4vv;e(P#o-PfoDdav@{c3?e}9>TTFC3IvD{5$NO@@~ zLJ`iCrG#PR`J1L>i-@&8)&EB?hO%ZVEOwdiQ6Vu}#E$;xJ(u}XTCDw<@A+7;+R7K* z$EPo*OhI*ctcAd-m>+u4trxb0hh`JvvAt}n31Tf&BhN=I^(Ve(_oD{@B8(nfrM2yv z?Q;_)xT1nd#4%Q_RU#qWo4-pZE-o&bfrvQOQR0$)!>$#zObe7FkNVNN001I9^IIOn zryY0YKt&QL68Yw?uv{87mY$s?~wj+~>eg36~Q2o(Fe z*k3^q{xo1lBrUyDn0)uF^;Y)EF*&XH7-OJ0vkd4 zYzbGp+~`}!Km$m?U7n!~g;Xncd|yFwU$Jg=6Dkkv&5Q5H@~LZ?->o$mFB7Cbgn?P! zIO1zwFS4Qft%%YBbu&)(2&$g`+^lWsk=CXhmmCptQn<<{#`szQdjfb-3D_ktLHhHM*oZtOb`~~HA+U`WX;Wrl^fnO9Vt`AP; zjxm1Z9fjTPZPd{wSyn@=v8aa9R`Eoz7ZXkZk;oL9)B@74Y;5MYKEvLuoezR4lb)^Hec4a9HdG{2hfwgHMEa-N*Otk2p0xXH|^AnDWLh@Z=J7g^#?lCj6m6B z;?R!rAv(=>@EqNsdz5x_fL>l~4vFPuSFMAX?`}bVWeBgHF{!hx4?jc@W;*~s9=hN^ z!R&@CemG8l6hU|W8e%U!u&odwbUF-^Ivjj3&X03y($)KEGg z^~>9aDk;ehY0@zBfEG5QchAijr0aY+y8tQxL`XMg>TF<4FcOI&X3d}7sO(p0;_A`; z^-N~tW8qLTBra9rFFI*e3b26ail#RhexDElYkecpA+|e)c zk*TsuPcW#GGPS339Cqp&h(7;cZhlh|qNmOkKu_Rn)ih>>(g27Y7h zfTFtub8Q^0CtiKs`AotX&~wOIL3!HSU?I?+fG3)88*ZAnoKl}~aQ))7-6z)k1!K`R zOAHGDbzVd*Ey=y}!-uhDLc0fY#f<)f;A&GLyO#5xUZQ`Zz8J;#4c#{?bJi zzWnqNH7aJl4g~OIk^zH#5FCv6@zv?8G-|(L1>PljIqw)K2om7wS4r1GdJCHg~Yxf{@oY(F^={c|5 zfzoqdxdWu;zj6mj%6x2-f@eU2Xps(N9CZ8epPN&Xs<06JM+Nyf&nA;7BzabcK9KF$ zdWD7ka)*3j(to5-_@9b%kD-f~!R)8>b%EmSpmhy?L$+#u?~lZB8?~Swsv>_``gych zT_a)wAc_B)kovFDrx@MQ0QW7(DommB7u0EFe2yaPK1A+RDd5}=&DPgVG2DG)T{P4q zUZ8X=z01}0IULy*fuojj@zQAy7lP7M;=!|zYaL6EDkwx8M@(=G#GGuk-+t(izU=J2 zgnwi=;r2phEC;@;%Vm{Uc&#{f*xr_nIRI&=YB?-IN3cb@u-g&nSrB=YByJfG#QxPn zunTt2+vv$vQGPV3uBA;J%y8asfO$T%k8OUdA*vVU2TVPOWpZYI&;U3D%gwRmG%`?e z+NVV7tau64JgD4DFMoib)9zg*@^!$S3<=)XG=8wpVg84jnYO*Vw)>bAwwz$5T|Q{a z^bmKv#&tCnvcs4XDra|NZQNgCA9G$R@a}gOSJ~iIoeVb)L>(n?Gzhf>DVL!ZL$}IG z0Rcjz0(NnfHl{X}y~2aF#&Oc*fBS169I$p{UZ0~?!}~Z0o%Ixy9xsR=$o18;9A-fa zt+!Etx&Q`LDNq#`au6i`(issM0QmCmPz%~${9AHQnG-Dg1jwSD@|+^R>hbb&s-Y$P ztlEz?4uBK1O?6hrm(-~DeEQDU1Iv!^_FU58K@qk_jssT}z)SU$H0aQ*XNMVtecFzZ z&(cYm?f*^R1zB8&Qfa1mGml8}hP z^SCKb`0Imh>QGvXuDh+RI{G*nk!jW#JV)VAy`li{XPZrHNBxm9*ovNxN`ut9h%M_Q z2x+8P6tIZqmqpbSOC%Mv-5Pc!Yk7DAO^S~|DSwro+}of(xpX?sm@H}MT9c+n9_i)a z7 zLI8mU)#K6aLo>CN{*c(S5Ma2JguUv_MQQK<1Q2j2I=EU0U!!P0xL_VjK;3_h))7lt ze6tjMyFb+Wg5Jeed|DvV+BZZM5`tF6&+vT%({MH6w}KbDS8ND3H26$$TKu(KFGEX| z&NZ4`>>ZiSWE^_r;l<62o-Nl#K30A;+2eBfzV#nE@W!HuOc`ZG@)sMDk=+fF(RFBO zTYA=Lum#wa=>+e)Tw+?;1 zKaz0%*~o8(>Z_EBzrd#_Zr=#L>RHnjs<>c)J6aQs*-I((IAJ&FcD9c*0_1%O^kOY| zeh@<89ZO45`G!{7es&HACF}Ta$rMOH?`%cFeBn9Z?@s=p|0eEroFS=#FH0KX^M_tp zl$G6&NWP(&`!??KJXLUJRhmgK>0H&d!bddy(q7WVaawAQpB>ZhV~>FV`7iJgar6LB zLZK;he(RqWTOYsWBynLf)~QE0VMT`ivoIO^BTGUhj_ zvK1LYk(&-$nu&at%-{w;bJFjNkdaI8+;YN4zBl#| z?{4ykND1~UqL?uU4#*8M4I7n1x{y7Y7ziXrqG;&@(4*XsuaoK$%KNAJ7L%_mpn9Jo zq|(ikghlX*8sI&8N*q=>qn1%p^+lS{X*JP$SP_;VA^pk3J_l)#+QCTqa&-jnxq+3Q zK01oF-&vPyrvK&|xTz&%nt4B$TVawYk6T^N)A+#CeJLww9r;+ zR`;;gjx~GE7v^)u zR+Tn9XS}Jy03aD2Yryc5Pex(?e%irl0M9y8-jFgS)a{6NN#KwQnSsZ42Uu?ZYN4*w zJzrH~!}<^AAf6{3$)|z;lqk^i#z*x*)~KrE+APic>G_I?lzAnJmIT^JSN_%Mx`&!` z!)U$u4U+cU)MlZ^lHo*&Zb*V&;qk&UOZfpS9)b#Ec2C4|-f^-qMamX%Pon6UCrrPD z4gaH)_YXX}8GuWH>l*SK3v;`@#n6$7S0m>OQ328z%2v- z=P(1dba5$t+;C9dAQu(=DLxOv!`TMg_-Lc%ASKWXIL`0HL`POPCKo#z>jG$qnTj{4 zs-qszc~bm7o#C>3fS@ly(uK5QS;kV#B$Q@%W;7}d^7l9JKbya`d#XlBU!{nyArN=i z*Sws7RlEo zSpznIvkNdu>B>F2&?MfX%Na4rgxVD!-H3)=IB8=d9xC)>?vm{BzOgR6b#7GY6K*dK zT-xY$MVVbN397;mZXT!&UoKtBlZCa0ukzI3-t>Vn5e`ZOe>`Rf9zdiu?eU~TGvxI6 zstT8X|4m6as)8pZ`4|{14E~W8F@*19zY5Z0JwLsmsuE;A{w%Of9^_{2qL8-}x4#c} zdVh!5aAH8u&J5{*ub*B;xyeNZd;3!JQJK^1Eha3@X(S;dG;U8%3j10A7rrF#CB({ZCIk7$LNT$G-})uu0@7aR(Ud`v#E zY-~3HVHj8*QQp|=dy2NB%IFvc*#N+giI2f4S-=T?GKlq9} z*qP9@zf)UaAj&DLB_C~z{0bo?vLW}{0~y2t#>Phm{=T4@K2)IeOWi(|9wDFFfx#_O zAlAEQ=kEaXreVv7;_&rBQsLa6btZ02^aU(GJx?N?KP}!OyydE;fz#8%VEP{OWzCG* z>Y7VC8lh3oQ=WR8d(7%pmu6na=v-?4PI-_IY}1)IjIyqZsE&pzT2`mfhj2_+y>UxD zGK{f*;&=cBbjj_b3z49kS{4l<+2YmG`7f-BT%6$XlwSqbnTTuTZKEKBx zPmNbQ70iN9Mv-jv!f#K9P(l7Hq9f>gj7}#=pd+=3@F~-CTa4v&G>thj2(HmM!f8i>~hj&r<_w}mS zK&-GQ*A+~Ste=wqM;~@D8Vy=Xg`}A%bWOm^))}*n-d|k?GyO#z=}R#G5QSf zb}tt3I06w*8t+A-=)#~Cv@Uk*<=aL^VMrf4c8LcUqF zb73^3QX67<6`^H?WA&R1+G!pq3<&bX3P-@_!fR+N*BE#{@8VwWXh47MtIFsJtwJOc zFV>v+AIYhB&RPh1g1l3qvj|#qm<=Mw#*lVLim)%1kQU35Z5j`j9c@gN>3bh}wM?XC z047u%q${+fKh&?{pv(0cLE2;{bS|Q5FzNV%-O3N46Q&uY@XI=<<@5Db4Om;;Uim=s zQ!LeVDk*CrHf2HXU~iAjCkg)2iT{H}-xbYR+`cP!k1=B|@bd%oV?eVkdqAWX!Rlx1 zG=U=MD`S{u;|iuUoH#xUMu%Ik$AXmXfwnPFK?1M8)YwYhiK7{#X$oz(Z&*HjFyChF z3+RO_W=wb#ez(R6JH|WddEmkWTh1bA$wfgw8IBTv2_?e^9hmrmuU5ScCQMLAt9L@t z?wQoJKsB7mAPb$Vg#JGAB560rz0n#RWPO5I8|eX+S@{)WUK(;NS^i!H{{`cVQMSvW zgIB?$JxyZz@;tcP#D#8XG4ycgrD7)laMHrwN$5hYgpnx%*dAb0J%aP5zYc{!z22w* zY3!#0Z<4bdc%jeGG(K0z7??3;kAzVXc4tHpJJg^NL8>BN8-9ib@f(2DFmsdy{Mc$dAT}Ax9@Qp#8-Nq zN@KY~;3lAMumF+FUY0Jy#r00wP`tfrhj&W-dBrWs%yObKWHGxi&wZnv+$A!rl zwxpRZVp=wtsWU)wC3SDx(|2kHDrmpw`SwWZQ%v>Pr$wA30q_bhFP|r~e9e-k1W@ES zy!s$dM|=_PcaqrrttTXWb{r~`A!p0YL*-hvxZ8LdqHc}qA27$~{>nsrI+h|e_@=yb zai~6R#vX+K45*~=B^Ub-9VJR3M2ha?IXV&#HtQ1*U3h36aU+7r2RM#|vVo&xq;d+e z@$Pws#sFCGH#$QcjH$*oh*O2PTUqiWCtApZn{j+Hb)RHme$l-p%6}UT;5dbj;ZgX1 zrdG^pYp4*8rG^+4?4WjO=k!$(lwY}fT1z1W=`8c~az?-ued_1F2z<-f*h ztTsin=P0Z@t%mO(HQuD3RQ0NM)=@_`E^Nj&L~QiH_tMpq^FzxQ=yNWeeO)$5mAIGB zWl}34FalVg+wz!pWrw)_odceFoBcOwE_6CoC395DL)pCh5WEM|q7KxiY!Xm7F8AEF zX7LRXUa&2bqrULJ5d4)aif~c}9!;3>AJxrCXv+oJw<>yIOq0XZtXC?(nBLc2f=45~ zHu<5#3-a)Zg zX>>n}viQL)n|F5esx{hnOq;rZH%|o;$hLPfuF~b(7;4lTNx-w*I;><^GOyS4x*6gS zlG_Jb=xz;P)1^Np@BHC$jeq!zGo*`vtE3CJrl|%V6MAIjFlWNGv^#obI0nD~^4Yvr zyRxH|p9Q4Nx=JdG`Wr~Ui&w+i|4(g_!a&~M?}Np6L} z0000000000njaI05H1reCio~g7M0^oF6^L939xT~_S&a)d@E?VF9L%c@uFV8YOql$@72DX~tHWOy)N+FY!Yh2N+e94&Kgu=n zLqgl?>H6@kWE~pPc`OsmXUiwI?r1`D(a!`^#+pCjudm6?7WvAH@}{M`3x#j$1JItg zT0;4Hyg%6dZMZnY$k@tSV{7wTsm(>loYPCkWs*OtCfpkT)Rw0=+M^G9dy{#XO>2g) z&|->fh1K4v(9_bt)4(63687hGDoW%$R4c`8twQ?wNUTmj=SHe$_D7pIq+dvcNMsb> zX(;bPP{j4?9&)~*S;f3CjmFK4f(t%4uEbz_#Ux`OzoMY( z%F2oRT0=7(z$)_oCu~Pxl94lSR=XNAlurH25As>eU8WOyH{~%T)CP>9CKmpKGgewj zh^BBjNx4}^HF5xfx-kwS?J;Uf+}<;SeNiBk3*?K;b!4@EVBHpBc4*9p@oSIR z7gl>@>P+Qlc&4zxy)=8$Fc0o;TzwolHTa%mzKauGgA-uah&X080!8W|z0QwjOG;y) zysj^Zk>>S`y<6Lz;x23Up);wMgwgXeBX2khK%%_WSKq*z~w=iC=2O&N^!|&gRAObx?VHf^9fK zc86wCaCzmy`&QG5AuGh^q5PZ29%3y>U#W(1jiiNHkyl6@EeTybG0Snb@N|&BZE?P| z1l4D_3qskS7p(7{xaP$Zk}&9)bX@n(px*f1E-)6WaGpf{n?km2pf`rO2|Kvu)K(N3 z6@|d$iI0;Nqf>>ny!PwHlP_m=f&phr?jysIxUFl)M0}m^M7)eyEcXo%;tT*qJ5Tiy z15Puo+<$UpfvdLRn8(mX4^@!Eb$@Mg(mJ_iN$A+sX~E57?aEs2tROEz9=$37GPh|-`dT1 z`$R`CJEfxZ+0_E8WMyu`iedmMe*S=tIJAcE+Gt8nxwrpIu~`EgIM@sESzZytWGoV1 zi9fWZ-eCu#!Zuah=9V9H*k7Epx`N(u=Z02TiLtinx^Uj~#q|MPG1|~!vFHO(SRZAn zd8(fWR)W9DyPNZ?`Q@544~saNio7H^GI2Tkm*Vw-F~f{`&Nj-M=z%mj~`$$V~@rBk19VfW$Jqfcq9Xgu{>q2x+-Qg^HT z#&grSxQ-#_m3xxb&zrParjuT-zHO0FU>_H3>uPn#)m0rk432MGV$z=V9SlC5u$ozE zl{aDKY~e5!rS+_*=qsdeX$ILgbfsEOm3Cl6tYn#oom;XDsvc^MXN^Tx4pC57-RjN_ zVj2D9*d64x{{zkL^SJN18^BgRN|r9q+)}WNKwGt{r!C*C70|Dzzj{{O z3+5F8Wg)OcZK725`|W05`M1du09#cmKnD}6dwJuV%{{P{txkUiv7E)QWqbxDT6&MT zEaI29+vo@BT4Wvr@OW4(^7gY#pb@zFgK#r!o}lUxzor<+U|c)DDuE}i%e9*KB@|Ow zqPPh>oF~FLAh`o7Tk*;VuNg#mT+rJ2+$fb)NaX2b0uUbJ7fru7LYG%{ccvUtP_(2Q z+BAM_eGX^@75bri8!(IeL&w*>)10+cXg$WjJG4hfpCWqH|C4~AUK>0dTer?aV~O(V=>9%We)su(TY zt{mA-Ptl7rVoPyYu@2iHTs#eIqAM&cx*<%c%*S^>Pb1QzyE7FQ?=R7!+~NQWur1&n zRCkVnVc@?#C7n44mGuXtEu%16|8iAzU#_!UdlYKQ&fVti@4>oih@-qvaE1H3Edm;? zvB1YcOk?FIYW~(uD&#!_=*2Vw(i86&bX*xYSBD7qlWfmN?FZ$Q(M-a2fa}#gGBjmU z_LEj)^@jcF@^K}X5<2UwhPjj}!{v+}H>x=5Iy>bomtXoc(-KoLn{c0z^vcDz9k0|VBwWp1z~(YFGIDcB+uIEx&sH~L*!8=$I-C`uJ~ zX>N|Eb<1iKzH~hitINtD(#kUFVzxAyf#2?=TszEe?`t%i#_Jl@2xJ2bdh(nNG zKZF2W>0rFsjxYW;+RwnVSL+08U!gTzD#~fDxNqnX8!X49(yBs3MZ^#QuOKBD+`p_( zy=u6Z+P*apfg_t)^`7hb_n7z-{%_cF;(G9<^=Jf&f585X*=r~WN`=u9@XIJtoQv(* zZq^ZclV-#de1T~Cb=g0t3a9!D%jyuBny#?&!#jLcH#>=mG+8GeXW3;*lu5$WV1jdD zZxkm6f`6^|Cqqc9%yQw$bjw}pFk$5GzzA|E6AD(O8vg1~z{lW+R=!MnbZpqZ`_2p^ zdIw6D?=xST??)`Qn3zjmbc%wv#G~RDlExd-INK=g@)sgxhY7LB_zRq(q)g3pKq^2Lyi(Pg$ic3%QT9R4onzq^3-P3^$9V2Cmo9;0H2Zc%Gr$~QgwB3 zH$TuVauM$}l0QmQH)xP(kS%mQYm3onO%k6=b;DvRB9m3ijFkUoZ z=brm)5*>HBQCDMH7*LKRtK#+_o98H8R4>36%`(t$G$9@8e~E5C?rKqHj5Xf&t_g0X z+skjFXX0D{s*>FvOdU1^=~yjEr@+zBcG6l*{<@!KfE?uqZ*^jAI%wbf#t|r%;|i+> ztlPsxNsKxyH;e=R zqFO1%Po644<_P@k%m;lA#ad)BigQQLx%I_grzCE{Y45kASHb(hi zqwG&AJd_?YtvG#CXL}cXsZDUFE|#i>R^$ejG`_;=$yYj60okHP=^v7&Fj~{p?<2>1 z_gdM;mSC~8*W`1a0{J$)#-8j-mUYos?iKYIDt`K)gj_+GWW|GVEI(BK5Pc+wW+n>R zv4qWUo%v2my<;M6>ZJ0Q?JE9FrSIN|CDW%yd0NFZnGd;5Nz7eUjSI=6qtIO09G9;? zsq3y_!%HT$>hDBF`U&+{cEyX8+3&`TWP1l11&O{9T7^|S_l5lHpuPV%(kv~Ah_D`7 zOIW}yA~maoHNCdl4~A)@|HNqQW}7_D(nlh{4!lljJGBJOs+J`{5k652{^ZVQ8&Y0! z+4{CMLaRdYE7egvZe-t7H-~+kw~c@JPv=JJ0LF3=3K#MJI*s5G9;Onw-u**un$@G3 zj2jrpOT4x}u4uN1tZh!bRiyPZzl!NiV4Mfy@|5GT>iZxJb~_9Su9=fLlL(|Du_{P* z@CNy*zLnRSfLEub+K;|qF*9Aa|EN2C*rtnp#hB90`qK%t~}6O12J{Rk^@Ufm}b^v^KUQhs%Xtt zNgFTtx{HN}3qG=Rq zC*$V5aA0ekGIOG$xuG@Cy^*|Iu;EqhUzlu3c?FI@*%{xeyXxo|)^>lr7ES=Q4cdl4 z%y@T`U6g@09SP!roPMiw0)gfGZ^}=ZR<7AFD0$y?J@K8j)F*v_! z8kQ!eiSp-{7|PKsu#qR6tUZ0p`VL?hO2%saVf+;eiO=dw2;WLP+=`1Pfy$GDLv%(E zf#K&s4JbzNk70mH4`Q<3u!Bz6oNikCx*t{^U7HL5009);!N3JxI{9h<0000000000 z00000000000Wf{##95sjr%rmTOCF%9wD^4-6Aq1Q%0=~eI~QPfIBL^FBgV&ZE=;jZ zO|)2WApBL_c8at1?%TkFEVwrC%_Stp(6p&UViBO%Kr!{POq1qI)?ZKoz)7yjW2r3Q z{AIn9xmq^Tn?bcRPB*6=mK?1@8`>zu@UIU8^r3R9F6G(L%vE>7i3J*h8%$fK`VSiL z)=zI1EBy)8^CsTQ^Xe2akuzijOak2J1F`UOR?!0V!Q;Ull)O{yA$cGjC5?F3bMq?W zvj@2g{X7BsK&O$Xlwy@DY5C8UHU}%t6O%dU&=y7b-sx# z&8cunlI;}B<-A*a<$zP1%4~Q zal0vHK8Fk@{SMV0K%w*JC0G%Ab=;$%;UR?>;qI!J7HBCVqH$`a(~mo!4aFKdNFd>w zY$tMZEIFsGSF6z~&mljArWw=_$1vlAtQF|b5)X)ZS`I9OI_iFfd*J!LKQmGqqo@NW z1wd+pZM;^Pdwg!K+!5PhRq?U<)1~IOl^p}TiF@Iozr3|Y@qLu_-nij&$$nj~{d5y` zTaWr@s~dj9LUnPXT%drTSIdQ=@bkAYah2Ex)Xa?2M;@>OQ)*J!$du*{7cCV90ib4v zxMMxwG(g|AUZB#&Q3AF7JVG?HW-_tub!@jX(U}?}xm0it+pK6i=3?i=?4I_`6lCu% zy+BXy{$mKlU^(_lgUs+(W-#Nx|gWH-bb<2+*c+_ zB(iD>P=--MESo%xk9y)f9>T*($XpOYEW%hnrDKFQK-_T0b#-->Vxr|$oRr!&#NHr` zyO*Q-h;>hm(EfM+s=NJ6%v%e0j9|+(vSL#e=()+-t(1?`%y=tMaGP!E~?hbwN*xJmi)NM3R6JP=79%!8QiwO;>|bP zG9cSp3GNANHG^I5fP4j(J&xJ+LuEmB3nD@Kn0uh*gi>im@Gh7zwARx3UEe7y*DW0n zqRXN-#`)4&*yzBD!oB0IQB}+xm3g!yulo!YcN6`fot?1HE8Ut+fe?xN?q&hZHUwKZ zH?a#=g%S{>A5iATzF^44%GD|m^b^$-WCx-py3nV+;Tgw*XCy{;)3Ql(E6aJ>>Qmnj z_#+Hg==-Xv>&?Y^&s2)Fc%gU!3Z(pX-(HP^b-@Tw^krx!#Pd5RpdD1_S+(-Iu>tAi z)NL)ZR1mK{vA3M+c*P%g4OHLYOOjsu_Yq|*HQiTo28k9O)qb^2|&}ht~~BX zeC2`koD0>a`$&qn@V`?hDD~5P{UI}RE+CW7b_q{vI=k7J-oC!eC-vf0w&)G{C_MPY zp5CpBlO;jif{Yi4))3USJPk5pn<>4_gCVPN4d+nj3d<5|YkE1L{v=;h$>}cCQy$G@ zL|YSJ>~-m4N9G_tR;MV^-sA{UfC2o~=Ve!sM}(RAFXKd|sJOJ9NJdQrobxd#GBAH$ zVEcKuvv-lGkF#z*SqHFB8QRTHUl6ql4JLuGoNV8Cv`d;{IKisAMcN*yIF*8W{c+6` zSN|4vOcWU};T58+y+BtJ&HffOt!3uQ@A-fRVs~VdM;-u-`%ay_nXd@gA-^L(8&@_u zvSvg}#Sp$N2>M z=2fV;^-vN|VZ6^+=L$e3Ht8nC01xo{S3Lm&O*lv|)m-UKcClxOv;QE%iJCl>CJDw% z7N=&bjZ2eBxO(qS0{EcTbFWc#-QST! zD%`E?5h*@Dv~P^!fYRgUnreCPNKf4J{K*y%zU6AJpev^{yb>KKoH6F6CK>oILCn;T zr?cot?`*`DQ!vPV%Td!Njs9BZlZZ8Ad@ACzqg#1-jmWjc1ce{Ere7OhFp)Ak$W75C z6}$rZG@~Q^ti7ND$4t@#t<%_w{%IO9z{t%yrm%NO#kpczkhRL?6xLM8QY^83K4v{m zgU)GzXp~g%oySRMV^k_R>T}OiZ+V?dWvhv;hbJ~pzKh0#QB%6bXrJ!|y|_Y<^JF0ho1gxBsMx8596iv7aCV{&h>)x< zQQgyKx4`|yoZ;0J)$FbR&|7z~IGJz{@NKATIFQ_BHjZj#+RwUBDekk9IU=ngvOGWJ z{q-6>{cnF|D`-NBggf`5a;+ge+7yRPWs;DD2kFa!;n6os<&AU~mk18=kz2jfiZO^; z0pk)T>!d7kK7E1IR6ifrIdj0RI7SPJ_oFhk8X$?FpAu6l=$zm1yWbQ!_>LlL2^q$tp$xDoN6W`))h z(D1!`v^=6|NTfEz@na0Nak;8eq*aLgqJsLrsK7j{8|Op;JkMEXj&%#-G-UNk}<@5ORYbQZb#Y1Mm}3!*k-F1Fm%23T{kg z*lY8O8yz`)fENJqm=!rF8dzL#x!_YlDR+(>z*1N96~+-g=yIUd*Q1kr(ON--RKXI! zO(;)$>yU}!1DEC0=?`b91`QA3T$KHb`m~lI^UKmCS)W-80ImNYtL)I3<4!A+Qbsyf zQFZrll!$|IMwexA)D?WW@!uJp0XQFaW1c<++y($e%A6$gRq*?`&&HW2Jsv*B?=D!hvmc&2fE3++ z1n~w>$9d@a2*p$|;0MdN0lx6yd4tncUm9(mxe*yuGqm(#<=UfI@vdy{RYbelU<8j1 zkWmGBg`qjaC~*ETR3rv1R?me$0=2!(UsWN#RyPKL`xslgGzf|-avNkmD>>J9Vmf@` z0F^E&Wv3eK?_o1&sSMen4;`clS;!Wq6ZmJ}?k45ALZa}dM@gKJIKtRxQN?iO z{!jp11-TgI5utJv1Kfe%r0bvPFHJr-p)-Ka45U~JvPjG5480OY12YypkOojEPSUU! zouEs!``IFLX#MHHtj| zjQh{xlZL?jJyCsNt|deexKya#ov;w;2C+#7f+mSfVW+&Okgf3qTv70SvolUbJs%@r z2)ICen~`AeFgJ<~B*0EY_qJFREIymm%+eP}S}pnlx3U90A>TJ@W`uDa31w|ovZ{dU zsR<6=KY`_L=#~&cR90`W>moYPRvIuu^KI^IASjh~avVaI!p=)6v#Iwa}^G`S13TAlH2!vUDWiEMMY~ z{G{Ifc$RL#+KKkbI^$;=)F7=7=!!k6UC9pCjke(lqHDFZ6(%i=1h)j=jp}&8p@kmD z^xVtQh)7b^FdklYTTx>xL|%bd&C3Yyix%nY#y-d%#~p>5z@PNHb~*#J1b9ve6!o{esv-_@9ynM72#-1q&v&NJ_ zWW1>L3a(&dgN{gA2Gb#uxr6xNH+zzYWzg7^?uea{}A0^jH^1 z>Jk{5nAr|4Icxcek9p!YT3Lk*kb(yoA|4oCM=kL`2w^0pisx?>BcZac71Yhh^tXNd za5lGi#snRm`cYCJF}l0wPD@yMPXK!*rw1!#eqU9b9PFy`=J@oKMeQx_o3> z=f8hY>T}3m7XGe%kTMG~WY@=zy9kpN-tKvac$pU;nA~llZ8apjPcfhJXF-I27nGWb zzRrYJo$5KAogz315+S&GfJd!u*3wkO4`T0f_Irm_jEftCw{0>hY>yQS>5k=t{5IIg zrRhuG`NHEG|M1p6lV8Nczp%zD9JjvI`Yv7Eqb3l{NHhQ-FyQ=*$N0VPn>2q%Qi3Lv z|K)Pk63x}ncOXtK9n7SAXDq64d*PrYP}GH|b?;yR000000000dL^yEe86p*o4(Ex# z=iO!(1bvEan;n&?fo)_eHoOIK%B__M^t(hMVyP0x<1t65^uVyQC#nDh9Xy18tE}X{ z**#|beNipzBrI-9ItL z^^%jH(0HR+d5>lk(2Y#ELum(sb@uvG(LK}&;Tkg*pk_UOCb27T`I@`%?Faop@%o>P zrSJ2$6KyUdJ|{Fv$Z$l--gA*ynJnFx%^BMRYil?N&E z(W_ILtNEDq8Jv>J9)dT+01xNY1l@ENxNaF;?DwnI%l)XU0hspP=;LI=AiG**Ho(EC zHtx)%#3VRZRidsnmnLx=0hLGWD-e{!wS_{Jje!tp5lz9(!20kV<5AcLmY*O_u9g-2 zoKm4{@w6mST2@meV0@qsv7+_vFZS_XC6|9#mkx^*POaqQT~FTrT9QWrZx9yu>c5?) zX5>|Eze!WP}!9Pk&7a;-g@k=+g|sEhd{ z#B>)Y!;!}sRREf&^>6pL&izzpJvOm=iAKf9UZZ&V@(AciQf%4~AHbWvVn`F!!O}6^ zXOGi&Q4l*NLT2&4J3bpdwr9oh7$2S>Wp|meW`^?X(dsmvd3;v^M-R#a?&!yTK5VG! z9#`Mi#pUNXH=xwX|Exd$)|jO-{$@Z|0F>{0>D2A_Bah7U(^>swXkJXS%lcd6pX9uQ zDVdjZGN*G^7wk@_lWH{rsE=w}uJX)FZuXF&>H-3*!VBa)3(=aKnT2v>N?f12)AO|= z-_RjT(x4uPFr8CUx=Hgn)C1$;T*0NeE^`>Om-?VZh0xvKk1fBvz8nSVwRJ_zGPcp? zMbf_fu7>ok)f1=u7UIZJGp}3LqXqR(&wcekA^&czj|v>g+5|9`*=WYrPMBBny5Sb^ zMJg>?!n~!nU{@qv0FZu7tV2IIIdG%Gm+xv`y^yRa%3|$NA?dvXeFj+qO(#e91Zv{K zD(xrTpdh=LH{PMt4n!4!$-$J$XPtU%=YQC}f&1@&eflwH*Ta~gnG2r&Oy1dq$ zi|2H~QWWO_m84aB-Or^>!BeyMl1wg;{HB zJT%QNv@%Zo^tQ&m-s_<3vSH+}I-WGP$I<*llRFX0hSDMq^tD~5Kr4Q*?_cy(QKSD8 z$O4l%-s`U8E?^b6;2g1sD}U_aw(UCmM`XRS^+V0sM-r}#p9&cE--NAg2M=$XnHP`y zR1@6Tl;E|;T3vqBiFwQ5#1HaI#{OU`s;~#&(l}6SWwNk%pO_u9AQqfVvx>?uLR?Z> zZbLUcZZn;PI^PAxhf?2~99dyFno8$=oTsVO;iK~TKx%#>mIerQ&Te*`&!H{&)0<-V zSFi_$X!lXXZoyX6YTZ!-`jE{9id|b)$%jgLX;CC(u;Atr!1G9Z#3lmFXa%921s%>t z8>=R_VRNQvqc1-VW}AyM{<>5-@MsKLyEH^%!h*baZi>ylB3&?(tgz&Zc}LIL_q5SL zEQs3F!R3VbsOeqG@5_cNep&ZCwe5H2O)bmEZ>t`fMygG)-g?PRIKi-%`=v2-xs1pF zP~!5CG-S_x9Ob{@J!*0fHnWs$1XgbyB9dCX87Q%hSO1nEO+B-~J_5@g$87qcvyhzo zC;B&?4uQ-XiRA;3G(V!rU+HhwLZ{8ld{`D=)(2|zTU z|8$!ZpB%>otZ(TS3U3yRI7%K7xDJN2wJPmc&eu|zmRD>?jZGN5cj{E=J^R@)msAt@ zFg$6jId97JiK$*hxeD5obXd&#*Y_(Gj~Q&H*v0gsqmL(-is+fPt5>Fns|0{3&Jlr0 zgTS+3AQj$)u2?G>39PW5DT@XVTJI~H^!l%&(fc=&7X$2W`0aU87ac)o$A%D)zNpX> z=7!OZ71g>Ib;d&0aowN2sb$9jx=#NKobKw`3!H}V4GR_tiI1MHQQ;C(hqfhMrvT3N z%vI-s{B2|xk;W0O78}G8?1};HF`CjMYjtkn>N#W#+sM!Huo(!f7wOZHQ4^aFgNu zPTnwBm?uw{UF4-*PhvN@i@>;e^8E{NQkfr&1kMlIw3(et zw-YKpbYxGA!Uob()FnW_hIN_*?JcsKrDwlFC$I*E$RDH$N0Q@Vy6th99OGhCZ^r5R zoh?<0+dBA!URCXc-vU>%&$U$NPuFM6+F`yhAOZr4}N%lkC zjK-c^Ru`oz^#IX!*p455V3hei++4F5*bK2K87@Vh`dtbPTnPZL!3#ZW07USnJa+wm!kiBi2o8I)NCf zA%KtI5bk~*R%>a6okWWitSGH~;BA@2&qjqE6|XS>)<{2GP56+bVr@68UsnRtlg@iz z=e?{*KcJFClBF%qb7SV0C88Yqh5Ig6r#*RX)YsiP>Hu&&iS#f>>c3;2>G`I>47idm{C7~SRV8#My^wG z!jvk-p4Yz5T3{tXuNH(O+~so|>jib1fI`j*;)C-ql+UqJ9i3Y7J&O!Z798zlVAqCg z$lgZaG|8$yhG_E@elBKum0D_i?NV*#@b}GT4?bL%N1$;{(Ru}s@1}k?viskjT)t3{ z5BOOGyU7T~2P&~@S14?!yR7cYMPXcp%)^NOibT8uCxD->uoSMQ|Mo8c%8;P%_)w;q zl)wNQed^h5$CFw4eK$z3of;0|!A&8@Fu<%u`ThB&I>w~q7@6j9*EeB zx4Rpv#9zHI_J~{z5Pnw-qsua@91`GGrOu+RBNJ3yHxEXo7iwUFMAyV+qKZ*dT8M0{ zpO>A_L!r9dmrclq>Kc^BF3iE({v51R0HoPW5V|U!sWm)Yr95EO2HCF&Ug8+6M?`s3 z2@dJhM}prKl#|9gvKlbzFZMMbd_@I>KkkDzTwPj)Fit|Xj$NI^^Hc00mFV%=dk@%2UF^jY$Ai!P>0A~n=q z>L?lPK%p=lK-X63oI~)9?V}!FXyUo#pJ@i(k3!M8B}!63+n$JLM9IFzfP1bkmti@KR1j?qOpe(PS%QV(dijMmuxgZod_xoz%Uq&u6BMFWX{{b>m`e z(=%1F`5P5Q>ovy?fHn{#5GyEqpOWdG+G4MeK9@kus_Jkfmm8uQ*|Mloh!*_y7Np6=_q}jnzp11>r zdO`1EuRIUz27x_oFE(_RxH^DhaL&%d-|wNC1{RQ0G+z~ zBr1)h0@1~vnK8%X5h3_wPf{{^nuRdDMrx%R$ayn zXplE<=docC+t>t{02P6?@H_r>nnBY|lDx`jw@vu(?rKA%?F`5g{s&pw;Z)Foc=Rus zhRt`69Ad|iNw&#Isp8wcP%{&DVMku-9+G{K_hT^SAys3RXP7n?Vnxx8d<|M8m91sp zNeL}HUFU}ml9=l<>Ea_x)f-MNiWUtG8=A&2HTcMNjc*8ytIm>lJz_Bqne+5Wep;Hw&L5??bQf-vwF6; zaYS*$f(GiOCQu70L%K*;h!ZX$K4A+3>3M_>Mg<@=I8%NR>ljKR^(mPm$bSnu8q4}1 zRxIxY9t%Y`AF>6DiZ1IDfeL7}3Z%g;>aN${!Zv`ip+3L4~qw&mRpL@36bS*GTy?;>=JLhIH;YXPHc68{-p^$$Jx38xRo zBc9;u{rlWfkU{_m_F5h17lIV$lQ_ez-E<|rYmo-mFb(}fmIhq>0!*lHz)nq3xhFwn zZhM8#Q{Kt=o)|(nt}xp~zaD?cbeE!D{Eu8~Huw&VhKbS-h=xKslb`T*TVP=uP!q1i zW~z~sC)@T-Cl@CuR1UlKCSi2seXpb2J%aKMc*oR{Ze;`gg>`G&Ly3w})qTo+5pk-* z@h(j6ivTQIo6;pUJfl%sNrBAyzx!##jK|M3y~5B|0J%K>!y6xLGC zLqEAQlP~8Sl9I`_AP3(@5|bNcDo7kWOIUZPz~Y+3R6HZgsGw~-b&jIN-0~|?`=>PRYy4*-73xW>w#>^QGC8( za+4(vq`SL0R>}ET(xsW^_RtP|1Gn+Znl5K{}8?`E~DB`A{bh?x(!r( zpP;v3XdWOXOLBO3%)F2kAk&D3MH_Bgf|zOvYl2+`6+v>&aYmDN1mZB!O~p-%fDH{L zyJxK;_Pgf76~6&9FG7fL?gB)bPeC%CN7nuZP?GdGUJp$gM09z8b=mt68FngpUnkF> zMV|UllMV@A8|#b}a0bKp#U>uBQW(8AmF%xmj3sX6!~r#ii*9E+7v^?#6deEY6SLH0 zf)G~LpgV8Gep@D76}}~xkx`I!V5?xdq%n-2$ld^WbLDYeT`r1iU0rr000002G)gwY9g$_uTG=1BvU!oxjfPdN6-KO z001vUAtv~tXphNLA3+_<@r z0FA^Cxk22wirO9NAJlUu$$5bO}&(-C82W=;MyHvC{HW_ga5H z>$@sP5_<96V1 z|6!R~m+>uIWbyxo-IRVNjGhCyWs1H4lU>m1@ zpl0wFMyNx#FtL=HXnSB+Z6{$Y6vUm?T3SZ7Ui!Go0~9M9Ecltn%xNiioH#Z4!0HGi z=Mq>!9GF}afbkW+8;vQ=fS3rTAxa@^1-Rdm&3RgKHZZORfmV0&_P4mISc&*Js5Z|J zOxtcQD0v8Tj*~QAf`bs;zMc>44Nc(yJA;4AR9}rRJ`Fn)9|N48xBe%1p;#SEee5aO z3&-7}AFv)f(d}cluESV3PX}#WzTM>&5@{&wQGpSa&>8_?SwBq#SB~C$?VJl6r8fFA ztbfH~h)rr9%-}ZM_m%TEuTcDp7LnV2j3%Qr&#kfBshu46PIW<+&z=FlPhydK4Dv%! zz3D%v&yNI_gHvvz4XRM|<^>Xe-M_u82c`WiM%IWOAbF%lBf_I$qM>5I3Hd>vV_%C{ zP2`h!VeIV(C_fVm2p(-3N`v}4$EuSt}7~8u*Iz1>l>iEjdVC$-PYdBtBFNqCOwx(7y zzXhNLyPNJ?6k5n#6a572R>_CZg2Ha6f=>gH%7#DHN}k-)>_M&=ospkM1VgXE}Sc03$;VM!Q{`9U>P;5Rp_1Si_Ugj-LgntQ~uc_DSBAQ`n zqU-mr#6o3sfB3Vkbs!2sb^5_@P>)u9Q`Z4oAJfZRnCfV*46cnN=%%-J=fz*+d{Tpr z9sHAa5S>u$c`lMRsl@bGM%TU{fCUTR@QQIzwv*XChN<@|FGP>I`cU=A7#!q8hPBp? zQH_80!`o2@zPH3~EEzyB%hf1LvAQ=;sg|t7t2(pfZj-8Dcr46FODnWiJ$NUjvDs|= zO^jcS^0e;Gble;vbU0o^F_=UsG#jo&* zb(xXZ&d+l~mp$a`_0SjWOw=B~ifpu@ua)PC7{z^;FCELvL3TJkOadux80_q%-t55s zILlf4`2t&s;&m-`WvcJ0?|{7IZsh4zc9m1f6TB}7(Z4w1v`?l8lQUc_5e=8_Pr}L> zA?1MIz2V`0YiX zz@<;3TKJI$4}N=gj8|bn=B0m4sJ<@^t|Uh|h`3%B5*c$=pGs~faHZ6_0=mMCj!aOMM3{hY8-P_ z6!%Cs&*+9&fzmos^2gcCcNl1i4erT-Zy{?_e|P=YjE0WeX3`|`-jVERtd#WCANHjB zuP3wq?s7e_e>^r@OOVjvX51O->|UJ5;a~p+r+^gS`gky?UGE{!Hhh+0iGvU{IYx=^ z%a4);o{gwPL^Vo<%M=N#`3#9Y0TD{*UM;aM==<7D-_1%!jAyPpiDX2suF;wbMG(qw z8TCpkYcdbf4R!OV)3)3QuNs_xo+q`EHE?`oo@R#+fx{>FsvKp!P0`T=%2qrcynMs! zm=cUL#`!Ll)ujstlY>(@Re@^{tkDP%nbD99Gvm%k=72%pW{A6B9*iM;Xx^6-1XBA^#Y!rJP?qPH@_7=BNaEeoxI3$u#Xq6J)id*nWqv+8WAuHid z-1Cj1Ac;*pG&h8tpctY*+UI+cYC%rQVh9!?DhaBjuxll=a@)!P#?$%_jV#d#OF}wKheq3q{HN%1oHw3`yrm|?*DJr_Pc!o zli&bql{+ALQc| zat%>m=JG~gZKdd3gjCGmdC0V02hIj85V&s8fdAW9 zlt$-ho7t}BtG;{tQfKj@sE}CHBW@M2JwSs*=%YW3?eD_CBa~|V{n*g?px);4|9*&t zg+P1^069VEc?2a!tzKB zGWBa%svtn;-k=yYJIE;PuLho!EO=+8Wu~ldUls9KW;i58-dWk5q~ z1p0Nu>>;_s)O(GZ{gc>s=#6W+4{NK&HUdmKpd1*GK#W=6@c7NtcsDGw8h=ASS*by_ zkdhJlR*_tcxI_vF4?Quqo0f`$)8E`f#a8u6tu6I}g|b_|RX}++k(AHkUL>lW{*Ufo z+Q)FR`MNIA{b>eG=?8T7$<0^#c-~#kI}e?&@p-f@M(V5-;l~p7XyB~N`f;?)q)3Ld z+QSZ`hc?Ku%CHs-O_9aUOJyMZWC)PE2LB{&@yAZ9KFO_JEwsfUfuuq!Gm{@Giduc9 z@kBp=pNj;bj$gaLhBG-` zTk_fRGFWhP4{!)rlG*m5z+^dRSlOlmN#bt8=SV?qHx@|JRGh=O_W=?WsQ2JS#zt?) z_cvA)aRx3ec?2_*nzDg66iuxJ4{>R&N0BCa-YgVSBKSWHqEGT#m`rio;_TG`!>xvb z8@R$|w*SuI_wsTEhx`_~PER2~W3%W@{%A1E!nsGr^4YPN6!<0qja&ZH1<7Gk?W#r4 zSU4*x-7vGH_1PjmW@?vOAUK9v9QR3l>NjVNX97?~6GbmHYHg-8$0xH-BHEofiQP+m zOZR1X;m7~ab2o7Noim7&jNf8P1QA(uI5gzBO&NB?W0W`2&(dUBHYL&*7hLI*_&&o~ zwcsNGD5I~(+Ht&RoK>QNH${>-)60sr1h}I^npy3A?4Q;Es|B9WqBv?y@i)#Y9U6WF|L(L+>c? zf$xrM>z=v2{r=gaq)jp%q>#`cLCzGd?5JfgOe3(Yblv)d$~t93)?TNsNGtN zt{Wfh#rocG+^wk&GzZ>1{`9+@b`h07E{7t3@eFZe^Zv_umE3769@E3|-Tca{a?41# z&cW8YMvk*uFG1&HjXiVg10sp(BLHNodGh7~H_+FCLFZzKbmX}bI6?67kV~v)Xj5p= zER3G2{b9r{y?kj)!(DS;e^+>NZ?XRDpvEWvunkO#nH9WOeVC2WoPD`?DTgH<@R!@a za{mJ6>ui!5GwHU;{aYwp*<3$<$bV7b=7X1LmZFq|8n~R>Xn4&?<46CvNr(HIt@B>F z1ftRf7b5-Cu8&Wp?yQ{_(nd1|Ky)YW79j)$*3-(XS9P3zs9t}6ZM(Eo>nqbvuO>SlcIQ-&u?%sX+S}kYpacVl2sbO(-OH}(#MTutz2@iJe+ zV{2!F|53zB1#Y7W`ag&3l@L40sQ~%JsQvU~--PVeWs^Db#!|jrH5e|vgd+{oGR;S_ z%=1+JOK`cmKb!H!YtWV@3Ljakno(L|@k<+c(P9uYIygFNO!E<=4qu+kYT{AC0%u8+ zjl`6^hO`95bZ?s(flq>97}e{a7;-o2pt~P1rGXD(&>lG;eUR-BywL$* z3}SM#=a@dborSQsCV!1I)rIxUf^!4sQM^4=y7$jC?F-OalYs>M-mOK~JF^AEOTi>a zX*t6N0j|_oX$=+~d|Q~{w^5)#2n16zCUup?%Fi*Igns7Doq#t8?e&f0JmRes5xO%3dfe{Ghq>w$LH=D3gb74ndldJ-WK60^EH<{3MYX#O zWp=g>fc#Ms31`ggbLaV!vF(?;F$Z;}{^>S5FJvWeV%SA8&JR}7l4V+vpzRELg2fXQ zwrtcx>oW;$mS+eHJ0^g>Y`bx&OzispYN72rB!yn2e{^(q1+pjzJfB=d>I5#YZR7g57x7-Y0C>J+x@N zAiT->2*mPRk)uIWw0HqQ$r2<#;Q-9cm^|)YM4EpX#-FL5v=O$+VIarVERGM6+^lq_ zN<6yjsuc5UFTSzAH-_WccHc&L*+%NV;JN?+0000000000E~_r)rW9estl?P_ANX~F95jTu!O8Z=~NG>b~j*z6w{zT zH~LW@s)#PL-nq}e>~GDhQ{Yb1i_yZ1i!2~Qn=1+Q4@KHB8TAU2j;Ist`0#M5 z>Cns<;XIDws_(ly=HZj0`_DaKvQ9m%2e!&rAJIa0^bL+r| z0@I&~iGeh#vg}ArJ@y0*g;|^^lmpT5@TWp%-VQTqqN zKSmn^NT9!{X-9#`id#0}kR(h20Og5OE-oFQ+!&50e*YKIt>48D{Qv%o2CjH(7nOHG z$pE8O97%(OCj5E-7pkp87)6q{@p(iqbVz@{p^})aT^I$0A9pFPgJa|8{-jvRjfhwc zbu#XG0k^l<9&U!d`72{@f!#eqH4_v_z06Ze>O$A#vnEC{Z1E+wU2GGwUI;faj(;VM zsH>!bK-y0S*`04z1M0%sccrX)GC*U8e8sjX$IOmCu*s!?kd4^-0b<-{@BbG}5xTkF&0$XrQ@gDn$2#rXAkWqAha zu{YR{78mY?pe^mF^X|oKThJMPopG4tY++mt0)fPP;5dt+vj}Vg{^h#)+TSy2u>vb9 z9H>tA*m{>tdaw?#roGXSxREprH85~xcVS|vF(KgZn@H%|4Mi}S; z45`)ht1_Q<{A99i>^Z&p1dTTf=I(BQWU#1mMqA$BJM~)ePi*s|Kxiqtz@0^UIwt_L z&s9#WYCzhw-uMCLX}nyyXX95WKW^^;xxI#^i4-OYE4%r!awh$`bpQle^N0{L6k9+@ zffV3Xjg2y-Qpi~3?WMqBkYp+x7o6bUgI60y&IN50ie_61^?#~!MZz>~oM>zQ+HfpV zGu|fWQD@xA%{9G#j!#*F$FZa%?q#PB6I2-9z76O z%|@!d`U@T$Xd_d|6nQ_sKK zq9(l>ojtC)Z^R3ppLaL=q7z(cFgwujus+LMD|>mclnx*{-MUV766jzC8-y@;0Bb$$ z+nT)4w3PeKpQFWAwHE2A0*{%eg3msSk-oBPAiYqBHJfgJ(p?L8e9E=>Y3(;)R0F{9 zlQF~R?fL6WGCd#G^j5OEDRR=Zs2VO^2xy`sNI6u)^grco^v0l zVvDUZ5j#shyu~4byh>aNl;!dtbu9pJSrC8W(kQ4F%~~@qAecYK2cPQy3t}o9*T9;H9W;OW1gV4IO&jNLtP-ad6nZR{9^8ZSnXQ)5#P;xU zp3I#lXMn6h3`$j>OJ266pH0)hFtv;kK)NN-OEPc+p?z}4a=Ni<9E~Kzs$Zy;0gF`C zW$n&hzX*iUcxwTB9&nscGoWtUuu&?5U84)QLYw9&2ZtO0y7;8$G)A5h*TrbyoydLz zd;jh@QK2mQ*(<&<@;Yjv)7iBm0+kqgj%4fFPYxi^uU9T6xsSD(f9BsLNBGb$01+TD z)9TtXQDYko*T8l)V2?ILcVNDJd6#-V_0M~KzJPv}rbJi*1=+|NAMjevmgW1a_<|iP zlxIVzXbIJ6Xg>U^1fIJFr|=l%*+e*I{)}EY zB4O9G<@$tw(tB{#+TUV@os6F8U6(>~of!zzmUH5|9LIpt=2)tvsuPIRl+|**lRHUF zohxT#Eu;*4fRSbnG3HfeQ^d6``>d=*uT|%X@lKPsWhB+wNc^eEjQp?@DY88qp-rE* zby5JJLx%!bqW%ov6Jh8@0MsfMo;mWSX_K~jJpjDtzSQ>{$dJ>>|D5Am&D~L_9Out` zYgz(O-7TPTv?84(8VH&JgozKlrWhlyj7}R?XTMSsPjC=C7hc01nWFCtbqaCPWOLaxDT=W=Pz3lbEcS7uqYqS4EX_h;Gpu6sQvbTHY zaHdr@i7llO%EWC#6Zd@u!1q8&*6S&KXCbP2I%I3Kpi+~Qy?hSkB`Z)28*14w$)~E2 ze+{%;5{Tjd4ZraYzzb*fAXeQ8R$S>1E1IfyM#FdD{<qnA6MhyjVKwG&cc6c7e)?k1;cE98jI zr8k&gxlIrMIIl{g$vHA7?yNm`0JH+1gV>_D~`m~ zOV)oU${wInXhD9pp<4i3HnTXOJJL!6xb&eShTpui2do2tvu68yRv97B6lPr_8>dsX zqVh0%mQ03VO;vVpK~CDa#n&B-H$l3w#M$u2z^_E>DElU_ZMgM0+x?ma<{&xO_((X) zWCdCWVuHuXPgzV6?bB~I{*tnK&MChxaEU6CzMa<4+dMw!+C%UIMg#b%?=(q>(((0K z(D``3Rx`i*6}mHyD(po*PXI2;4NZw)mYKuK$MaoQ0A)rnBrfbEHyA(1q+7={`p^KC z%)yHl>)F>gbym>Cj4ek*u_HX+bU^$0qnQmP@7nRAY(NFPAvRZsQJ)M!pwL^tLvFC` zG1zWt7YD9#n?5%LVv~X8we(=TpPlHN&Rt$qDi45;h1}q`s%NleQWBcoz_s>6w?1Q! za0A#LuHdia6dheQKZSJ~wIPi%hzysNBQsyzO2d_?cbQG#@B<_y18DKv6`X-!bW2o_ zsd)B0dOwl+-WE`H&sV#%&$evAGyEtcg2cy4!Kz$diqN$;(9Mg>U3lUpxx6zW2MOzB zouZQ?p_N`o1aD{uG+unDYAO4I=nw!jYv#4P26lpTsN+wAanVWI+f_Nv+pC0cZV&RG znNQ}L;N`kHQKLp@s<1S`ivUo4k^x^nQhJMUr)pshR@S>l_!8*ILEsC5^nbj1WT?O6q3L6kf8DiLjUb zkFr^-Ghn0kAN^?5ytSzPft?>?9`~l@>|N263I!t&PZvP%coRs|lfP`|#9-mVo;;EE z!LEnu=goL>NE6c|#x)8RBS7;iVH+cDf(oq5)2_ZgvOMKP_~KhIKVxxss-dvg*vHSZ|$}r2a>w_=Q>A zzdQIDRtg(Sfp}{^7AsWvi(&SO&2W+7xx&-wBgEr9n|h!<11y~enO#tCv$)SdPU*FA zI_2DV-lyBdFz!Cyn3DxQiQi5zapAE+Qqz5hueuHhYAck4AzEP_*56tD7O5ChbU>kn zU6BaPZ6$C-g(->Kl%4#hAOo>$&@x*GYW)BkgI&x`Qf)muNW(Bfv$S#Bc zQNVUu%FyS-BC^rEA-OPLI~P`G?AyD@@T!p!?UM!^o^|m>TGn^a@XYV!?Qd~Zu@mrc zDWEU)Km2f)u`z4z3_Y!!Wbez{qrv@wsk|TU1vU9Wp7f2j%cS*OMNj2=M%7pxO6O;eXATmco%1yAZ9*BQZbzH!WLKH|fFt^M|yOjv3 zOkIm1AU$<7>cOo6s^8z2aG&QBzpB(h8YUm;o_5<5kqX!NY@PHCd;T*9^_HdU7*_p&6K$JpM8dm&)6@PnaNkNF!2}&q;T;%jF{cG9TDpD1hRo z_o>S~9QrWwiB(qD_TSklMF(rU@Zq5p7(MgkZj;TOw0SuH|8|OAhvrn=q7&Z^rI7U~YQm1w}5A`Y8WB-D46Y`k}eJOX)Tje2X zQk_EcUGN8wwm`Id{&(kK{T$*k67R(E`w<0H7-uQu{T46F;Rz$}`u$}Fg{k|;PH9#9 zrU@^xVc0=+fqt;(@;aYg!!}LAYjYob?MBX8PmxwU{9^6<_YonicRMY%uJ#WcV__ZM zmOlGWSOu&}8R6}*VwUuac}LI*u z58WL@TUxW{p(v)9^xSg@At2y;M_XNlaIHMgf^-XJR%ZT!%}eegc1rdjUET)+4o-uL_kD15rq2- zZgc2yC+WoXtpUjSy&2&h+96ic+=Tm=GdykSy}3cu3B@b^Qq zrMD&$mk!%jWa$NjBCa1U<3c&9O`pgF8v{U%<*zv^T9ShFi7Nke9Xt3atVYz!DvtH=qHq@}9 z5uWaTCEm6xT1Kb_N#U%A8fCJHsxL=rlwd&K{k`YeQ3=!3hdnE7TYzFBa7kr*n6^C7 z0%6#-X~MB{M|}$BcPAWbPDe>RNfJ8xR?Y&$?P2v&ifek!55k za{G|Y!$$1I$D5zX_?odRXT@jeG(Ai zNpb)_qb9VF<}u&9VPNt_;(-WgmTK%imtES?3ABD zSeV`Z+1Ja+-WY3A0dKDdA}Cg9nF=o^*Pe5WjpIh%a&)d~SFG2TQIiJFm@I^c$@X?* zbHqFH3KNH+kp$rkv_H@q{b)d{rmc$71wj3hizH-^8U3|;hpx*oqz~lw+UcMoG8^ID zp1xF{VIn$(au1b2nU)ssJDNFaD?HgVMEEQ8Ayq^a&{tmoNDxKoOOY@L$gnAfb!9@% zrz-(ju+V|fhNkxt^g|Up=36U$Tn}17FP3^f_p^=quhy#3R(zu#l_jD+=ay7iIyjiz zJTGb=OkB1xJ3sAqAOrFA*0T(VURdCy?7ugwr2y? zVL95ySW`1bl51y)NLW8T?UEP<-fV6iJwRfPa)(FxhI`B6W+|d>di1~te>kaL%?Va_ zYi7a*@!r#tJ_a6uMm?7}nYel*&%2i1;kemC-U;R-|ACB7!<(b&7du%f|0a0>PEz`d zyrAm9^p2x1YBe*`Ef7N3!8$T>%IsHe&QfbjGm+7atUj; zfp1N2LGlbe@x!%%WAlm|8}f>)pRm<~cXg{QGb(3Nbetta$DHB+xD^-&be&_DAW@WM z(^+ZTwr$(CZQHhOtJ1b@+qUhg?w;+{jD zPM+XVTA5HBA7#0TZB?3r1;e3&@B7Fq^Torm6!>*`+X(HcyFnmY6Z)~ty@KC9L6>DZ zQhL895aMlSB$glHxX_E*$9m8m);_2zjBPXtqPt0aBXdaRutEl^@T6DaKnq~AIWC)x zyrsPLFU!hM*8t@V%*-^48#}MO83(LkJL-K8<2KaO^Pk)lH#qNg7mu8cSbD}UGipPa z#~;c&uH5IfB=Q@l_)8^J4>3pacx9p@Y?n$v%B|U_-Pq6Vhn-p~S#FKwN8Pkz2LC301+sP(%=u8uCc zw-H;>C%yrrUb0j-*@eAJ zRb6!ksvj>d5gG8Tz)!!XFann_l~EE#j@T*H53Yir{7Xa7ox4iF`?8oWqgL8YJ$;%G zS%-2}ZW(yztBeF06vuGM+2kQ%6nNpZ}lb?0xd&^|J&c~b_^ zr;M%>p5t79(&f8;*Zwz7Fp8=U;1(t60-J zJ+`iZHaHV#GilK3+D4#iAl7id#KTYrjjv>>RCIq1;OV+tJc3IDeisKrrYGcjvVR?1v2k{7illi6-*(`O z>7nnaL@YX8>g)!M&WzquTcP&t{j2R#HOW1@0Cf*vsB%pwx&OF_A`>@TWM@~i4Sb1U zNgOOh+7djG4vU*ZR?A6KF@=sLy|bzpn?Ar^#7l1*X{T3t9Nn(Vl6!f`or>xp*@3eU ziL7{VoVQjBi^}Jf1X@WS_!cukM-)O+j%Wg86d~#cG#mMN;Mi@LFYH=X@@p~ZoYvFy zEI_iHyUpI|6`tbg38%XtD*hX${50I$l9d4}=B8Lrd}=$^{>g@!7%v%spF9|5eCz1) z@NjnF^^9uo`<;a-r=o_MHWFUb(@voLbZDP1#DxZxk1-jK*_Y*OpV&tiwvJGU3OfHL zE919o>*YmOLshdAlA_>xOIQj5Y9&`bgKqoEw{(-amOEL*^p7if=2)j&D5rZbUcZEy z@=)EhqKSw#$2x*Qd^BvGzmFJut5-Zvex8`2;>8XoQ!JQh^l%km7k{>{G!_&Gnj@g( z+NYibYQFWL+=oPewTX{3wzDrKCJyM^ZHe5lPAOH{0Pf+@Eb8Xyj2rg5`6tzt$-woT z^<_X~ohVp6R(l(Y96BuOs>L70FE#1FI!S@?nM)p0(Mv1n1`_maK-T^wIb3>AStdG7 z6VN2?o|(GsWyE2hP+A5N9@-Jj!cIfxD(gMSRo3;c37sw_OJlHpcT7|pL!|e#eM696 zHR+)&{q6OE+=`=&KZcPB&oNQP0FN%nOqLlQ2vqXstIge`QP*gA+Xic^(t);Gj#ha=~(~msB+Ao|$VjYNCPL>Z!rW;>c29h{jUe z1guo27Syzk0rW*WURSb%({nW9 zy2`zy zt^Na|N=t>02&deW(>pP$7#e&a9l5G2e|Pdv(Rdg9j|#JiuJek@+oPeUI)9HRrU8~P zb^C#wCRAp_yf}^E`4e=c7wW9C-Vkrdql(Xz%`Bi21deVnQM6(|W@$(eV?Vvck%`Jm zY3@L)unbGdwkADg8jstW!k@zDY8-iI$Bf4u)zKVy?glUZ(Uwg$m(>T0fegx`x-y}% zWQUZgr?+}7P*%McX+Vhh9gJ`zMt*9dn9Wjw(v7@;rJ7t|xAAgsa_4vYd-Thwji~5?^Tidi*!ZS8Y^;C&o(`S14+*@=d)=#PMMJ zoAyzog|?uhweBdGi#zHNoHm}Nb`)3msmO$;Hn5`vu`gO0;!~Yw$GWP5b&=L4k$|lx zE#q7IlpzI0P8p_F0k!(wO%_ML{t-oauPe?5J+hU=QQbe_33cvn2XgY2B8K<@0CA2A zv%-E!Lbj1)5;5YOyJRlctk*KC6Tq~{Qc8_M2Nl3l=oLeD?4%7&G#rS&RrG{*GJ!_8 zG|h<4n^2@~JZrlBtqh4|(kdpmj`Q^%O?e=8PBpBi(BB~D;URY5e=PG`-_rWk1NTM0M zREYsdV}frt4M+Uh(GyOrqA$xC!yZa!X_3-&3f{hVVc#Hh!EfHr-!%jZ__ZnC9ML17 z+V%2HV9SOS?9hdBs*K4^JYOO|84UXJZ1}tJ0nXtJD;nUDE0?4-kdr6MuBu{Yl|6NZ z(_L1a!DtY6ICUC3ut9-KUr)9cY{1O7Asw6*1Sm#h%*e8(nuq7SNw4)Lu8?ib+LfQ7 z{y$qn4NL9j%fk?m;eCIYOo>o^zRYt?nBb%;JwBtUtz0HtK!D>(YJ)$&A6`MnD14RX zpAo3s9%Nb1PEeyI=_fh@fcerC^(Xez#}dSp{&!RCfz{YSs0DD!qawAySuHe}YFIR& za*;ebEc0x5ZYP)u;wr2(&|6e2%i?KZ9XG*KS%}64%Cq)ZDmw4MEqgoGsd-?!7lQ$K z&v`1x-42SoN`k1-aobQ9@?G3OZaVFGu(uM*NaPkEEAg)>hBYeK5oca?%H#q;Ne&oL z+o)%XZGH*ZmKEWSO8?%*Fzr=L&>F4W_7^Onq{2?-USbDcQ(?OKP)Ya z59Amwr@Im3zRSJ7#eI1frvLU6p>iKb8 zk~mQJbY|Jqyfkl<^3N~}?*xq3x74_xQ`^0GR01_{&#JcD>XeEGMyZcgYHhIt+PNgr z*41j+%ui%Nt+CFM=X2B-7WwDWpv?!WF%IV|KXbeG+7OH?RjQnKHylj?12wA+J-GT$ zKw3FibdDgOd3;Vs^H9smMq~UY79nXdF5gEXzt?Cr(kseVUx_2`sCYWj-Zx`YSvwYpZNh20&oF&QO1Q^Uv6&2-9AsOb$k&U&3O(T834xf zBdha}A1aVSWg_KcE<7*{Hn<@N z;@reHQ$0`HCXDOJpYc5HS{8k3%a}ioYuunA97ncZ!kdNP0n59!MxjGF;dx2;Xc@jMb*&nK}&19&ZUI9GJ91XXZF{;^8eo$5vJe| zx(nPDd0#jvX@IX{7WqG0-u2Se?m~k4;k%2_Mzs<2$sw&?8tDhd*~2RYWzsvjJe?3S zIgxY}H;bE`cG;Edk0+crX|e|gQ1y?H>hM#3b)dfetdI9}gB=!F25&yZ+L*p7c#>G` zd9X}(;YyiX8PKAA59q1%GCRS(O>umWEZM);^aVK;f2CV#x8r_^v|@V)_Ag-Os(LG4 z=6?Q6Mq9BX29jse>~(&QJEtGLSR5$_9Wj|jw=T^W2@4Vm8Tu8B#?i%3lUf=Wu+7L` zlimN)yNE>^XBNH>JvV>GKfUsUsL?Aq`e3cB8{#Z9^DxH8A?2eWnpYX@N?T(4HRX>C zQ)|;uQOv?}XQUTzlvLsQEMe!m*K^F$3A2H3uTV=xE%m)@#s|rN8Kh-i)CXZsrTrk+ zkon~48t8&JipJ7epzsTDz6QVO*rye~GyMvqEJx+pR>O6_1LPsKN}@;e z-evBOsMc5;clgE_dHIE_2WnO*koco43ir8S_^1n;IYjUbRe)nSata6VR@iMlFcsC%QeEUj+awn|D&KZW|EjE__%JI{l+X02@g{~!8Sr2Ff9;IF`cFg4KtQ>-Az|bq;h%kBWG#2r83%4!QAvHDqCYGb6v)K(%%wzRC` zgjKvo%(H!%PC4;M_)^3c&QG5-60G~jx5uCiZqdswFcyO@8Smf}Ow_` z*saJ3yj=13rfjvsD-#5ea$}ZMA1sKzsY8Yr7*-m|A{n72$vO0)`+DqKGKShdQ%{>A zKAnpVOpxfl0tujdHwIV-lKHdbg2-N93Wk)~uFr@N2PkFyFtJmp?z_PufHe)-nqicr*KE(C3utYwJq7|3hV)?jr$Xi8tVSheN*A^*f)vE4 zOul$tW8P8!`cwbVdvF8CUz!+^16kj3$0Vdr$7$|nf=I3{D(cSmDAQ2;YdZ}wJ zljCTJ@22iiL=KIn><6~}PyzY@Zjnk|0BdC|k?^wG=;;FYeES_tPTXdAw0M~w`q0LF zoEnca|7}iRw}lRA9v86fFqr3&v7q<+1P?1gB!0Z}TclU(x#0z?tTW4HypEz*i!&`c@$05vxRjH{WcH+3C z6i5-gC{?&|+kXfK{`Yp;eS$`UXlLpBgA^?}!?SBwBl#x^6XFq~(P3RYp_&NaTEfZG z^wyRr1?GBu3}@*e>uRpuPW;5YBtF&9RLkkz1K`lNqQuC}Q6+^T?uNNFhhGJ^gyA0J znwpl865pijzG4t?(u$NYRDPN zG3*fenXB?u)ae2JQEo$^^M_5sR8s+6*RvFU*~V&U9ze6+`|OEViD}4>XZ_9CIkh~&`rRD`7_GN<8KLnPDx1?E|fViy3?VidG&Hv0!)n)g$T zh67TrbF3h9-=TkSG(vP*uwgy1t)4FZ8?dguOWrtvp{F-_y%twKLdH4z8vqfLFFV-~ zw!%$EBpes@fWBujz=cU`wEMX~bw?jDa}=PZl~FUWz*%yf_LlRRD!s|4T?7@%a0D4r z6O1({r(YMd&kwSkKnSYxW{gnc`8~^)FQB~ z9=;IL&{yn9Kopq8ZWPKLeinkTkh>s1oRItyG6j)kLdnRE2ze=+Y5uN_W`a0E-c%-B zX)L8c_kf%Ag_5~B?UdoKG~w)E+CqZ8XP@urinvBcvxXvtvFJP+;B_F{&WqqCLGZXr6L9s{3!B_n~EofO08@Yydy;d+XZhrzfV!A8I zLX+ET@rhKmxy>!8KOCpWqGmufEFNLY#k|z>>yk#QSjIQP~mgdf9P2<-7s~IQ!Fa^Ci878=A9xx+rC5tQv(h5gj}08 z{NJZx{Zh_(b=M-c_;%kF_FC&z#n*RNo1-5x))%(ds^-tnk+L9nf7mnZVZiYCr)L2R zMbJA}9p3OAx$N{Roc;QDR}(`0(7nWqrSoqyTtLbyj0ui_7)QM0uWvlyq0K|4#VQSU{sfZ~Iu94p zroc%kr8cLC1wv(*4w;B*R=i~k!s0dVogOq?0D|c1d7*s0toiX9G_O~^amrl#voaT^ zGxz+nZs^BYGc-?^zSaLp1Y^`2-S(`w^TfsM0-o(9)TprseE}`mj;X`H1ONbaJPk_V z1XcW>pyPjDFe!Fo)$RZ>169i2h57F4pC2H;+sa8=9eLQ?4#uxt>@*2*+yFUFzICP6UBX6Ku@H5aU%F~7A z28737|9(t7b{x179bQN0l7f;u z?R^(pTwa!1XdgsoKQYFdOVr{YHJB!WIHbB`fBoY(tg$+EG)7}98Lg>Ojc5v#!?*su zrA$dgR)_RgGb+{)DlwZYK!rs~=|-(Vla}vyGP@9Prfu;_r8qJpl`OSjfR;zzT1`Xe zjp#&aAGRR1QDnTeH~YAjeY81+3epxl#(#Ss)G48b4&bAmS}@hIA{%X)KhsJz2xTT4ca` zpC@n(;O+H6NufT>j#O58FT=>_GQ#Bf27=jRg>48KaOrhCW;S{)cAWCL9=mC(+Ly8v z834P9-m_tH=aT|=d~BYOxR#u~IW&~Uc;%re-z|a86|rHKM!{E5z2vNxMkt-`IJ%yc zgHhmteQ%V7uee+|wWvA{8?wa=_q}F-enGhC@lh!VNjp&$J@K#K9jOB_-yuqMY9DLK ziB-7f8(teew3y;taAV;w$}gexfHZZAh}RCg{0T|kg_@|bdF(M|qMBo%muLEmDZ8um zDNZ#Pd(3eat=Iu4nze@@QU-N^jh}97^boY1=5-Blq{sDACe-wY{vR6|Q|7%AE45t6 zaZ^bm>JNoO8~#%WP#Y0C=f2xbLps@w{oaqDdK9V3p{zW`lofBW5iF_QD=4=9FvYVq z6k#%2H(;;5adYu3d>9l`t3=g3>ZB zU|biDh8&IW3W|CRWy$c^0JdNH0EG90Bw?*SF{k+E&F;d-55?~0G;QY{ z;Mz$N5%XSb(d(M%tuYPh8=Fgr4)Di$cbtlrCZfxSl;*}B&^+|LF)fan)r zuSgB(S-|URo@g9_zi4H4%I%w1hC-6JWGZPQLS{^tmDY8#0o@{2W=XP0^L=jDGe3M& z)F+^?>5A*%<+uQUD07kf>94~{#dY#&os{o{nmO%^N|;+5fkKluJbqSm=KxJh$4;f( zBq||qXeULpivTt0f)M!)t4ZkT#qJ+!d&`dTOtzxQ@65LACyiiXoh4d2mgCKFAHEt2qm0b{`6q$@gI z%6qt0ENz&x5Bf)U{dgJB2;{uzfEQhPv6UViGlf2*oMgiZc463*I|`}pUx~QMJJdRz z&OPao7GGH`6K1%I^}U_wU3rO~>WS_LPIY*u4lZoke($X}VK(5%*L61bXv(J{*PDT; za~R4M3hD)_Cxm%zz)#HAp#N5}NJ<{A{qo=kA{JuKGzr9Cu#FMbR~ol-`n}@a&Le>~ zcV>A%>qp%DLdbpLvApyH;JjOd9$|*KHUk^|vu!K~#uDy{`~$Pk;WlGCMIm&9v5yv& zb5ZI4X)!TvSYZ0@vxh!-4jcc-Ch=^RDNF$G9%8cKk^V$DrCgRR*w_^gk&3D`x6eT2 zsiX+Ne&0Nn+GoKI1Y%K!l))kL(sp{`28Os>EK%sIQs_E*37KaO(j>p*vY0;0%{d>d z)sj_Fn&n-&m^@{={ne()?desN)jm{YHetAiZ=uloD~44G0REj+?f^ZC)uBK*RR;dl zxxNmY=s3baZ`SOgea~vlOxdtIH44M;NzCQ=LI#W48xHAZbCpep(v=NhlEwQ*Ti_|T zg?p-)uX9DBibaYEX8~GD^K8gFCn|cY#xk_3L0rZ?JBh*#tSl(VP*D_r$zzz-P1OwG z9IBDC{aT8EmI#;&%O18HbwKQq#ba|p3cp|42poF_Tekyg5^!Hgidq_ZcS8xVP@Z(j z%#rledEsA{RMbfDt_7M=TOwSSC(L=nL#bls5A82TbR#*_qwsH%KG~8)y-gjsLG&rB zErq}RV7K2#JXAD==A`9VGPWsN@qh{+AUDF`g<%|KR0qvq_8x5QE8FlpM+b8~Gfy?60RiWJWYIEu2&}R#Z{BbeGs)y~* z%1a+#;6mPONmdm=6Jhdd0a^p@VHXu}R8Cz`lL>-hA z94Du~U7HREOEn3;3A&RL)Zyg&copke<14JnYpVi zFWQd+X(N#0dXGRkYayV=UwFyor@O=JEQw{~TNpYs8P?*3^{&t)i@J%F@ZqgnXnMhy zAnXc+zq{K2h}B{6P{g6Sc`ZAFH0u)i(H%Bi*FpT3p9wc$0B;KIP+5egTcgJxeSI9M z@#8aSxCjp>eoOGVAM28+p5^)v>-|eqLZ+fN&@KoAlt6{DUO2B_yq<&8`~qh5%XyD% zMYstjByTh7Ls-{9yFppB<=()IDFYY^Br4?g`R)s=kLq15_uM1EOvomu=S5#MhXvG) z4cyU>`++i_#CNM->`0vVsJjb0z=;~&_}T_ThR4PB`74tq?#jI)JP?LvT6~5p$ev3C zyqD*vn#SYd>Jv$XrtTh^!6aht%OTj9 zNUdo=qf3DC%JjJ{p}6xXbH?$S>2mw$oN#ex#({-*h5Jtl3&W^+6I;w+m%U+L9L?u6yZk^_%t`129a{u(;e1n_j( z?Maj3K99A;k>j7ts;lda(*y+3W&6v7IZrRbex^zCo&eF42h$9+U|`OZY0jkwNH$nna9y7!ifd05>T z3UzVxbOnBY0@$Ad82PwIXe=B5G3kLiFp9z*a7zW0fjq|Oe}1; zdE~le!@04s-!iPv({(lQ6ql*i*<)vBCV$-0Ez|W8^4OSw^QTwHm}Sfb5ylvAn0*|+ z881;htx@KDb%FboNa+Ko9u7WG(ft283=c`@kHaBD*+9LG--!e86!&cV26U`tylq+lz5|Us*3fukr3j}isd4JhBKVSS2{tl zRtQs{51){i_JGf6762;wG@$p8J<-SB=y?h60f<9iPyHHGL>Qpl=j00#}1dO*n8P8sQ|wt9iqr5p;4Ae^C#N~xiI9`}=!wVX-!iWGz>&mX8V5Q6;+xh% z!gj)d{rm~PicV&687s#Q_45(#R0K2V@Xe4x?$VU2z+2;H0{P#!*t%pLOk)u*{IGDp z{n57{UsbUNbbL;XM4A0;SqR%)6O1$_a2%aW6`2 zrE|E=`-(*vvmqu$XT7!A5$eboh4aR&$~A-pwa|zB9>?qkoNIi|E-G3@0wB|WMFk3&S6jEZ@AJ-B(G$~ckE7w@?0<&M%Av-~)Wv7TEuF?^{3^8-5! zl{~f|kTd$`Wgi9D&~{&n-bY_YrrD{=*eRTuBsF*)QzsM6ut3xkL^~k06FeLLHdzu` zU{9Gzk?l?4xnFv1(f;U}N8Y*ZVQ_g>(^KewNg8E;0nz5~g0HH_4?+dRnt0rlNkUv2 zD!;U5xi5y?^(J8b6$&GaeVcIc!bEl$fvn#b8rswRK?fd>n3g1q6L{zo6V78W`oHV3 zDSkTSG*r+n68cT6^j6LKfvALstPE*#HkGQ;l`oVb&qWFzf3iOr!(x-q~m<9 z!Y@f@_5*fv*Tzt82a>-4=+VgTLNqE|nRM}DgnMLsisIXG`Ka~h)pGqvcc1EEx8Dx2 z;VI(78QnT z%72&+%gU(&uE0@d{b)u`{(Z-P^!*{>br8?m0;YV!WqboV_{GnR1pSBAsV zOdr!li}(dM$4Z-xPdSZMC2C5HiJ@v-B&!dWqlAbr!j5fQPnQSj=;86@ZDXtDSiyGT zqQQZZWrW4oQd`R9#G{3sZU_JYcp=9uTuN{#8n}vHvKg4NJ6aJ7XT!#R zAX?)^H7qinVkL0PQ#m*ocAH)~xtAwzYG~%R$AVaj3ZGyzr%!0JI%-$Irkc|Xp=u+o zf)e*G4pZ522bRaxhWg_)V>kfQ8s@YzJ;tjLi^G!rt7Z!QdZ8vGRC>QsZ|g5s+9&{! z3pp)z5pt*u|AqElpR_rYEAU6v#21MCGh+xmMI2Pcr)x;Y^4kFbt3{@Tk~m=S7xX%^ zJl_7(YInH!_Rhu3cvAxvH^Opp#Y~JtRv>d=3ApAx36pb@O?d$S7kwPAuM!LOF!4kr z${IU?ftWi4#a3*zm+GnlH7e5|=c|@#J!y6CZ37(EY8#2H#8!xVIK8s-0qP0bFp&hE zN6L+@R;kdXwfeAghAF;EwS z8cf@VOw7!m#E1f4!G-sw4$uU5m@{%Ku`h8@Lo+fbYI2nTPcX@YF}TeZ${;h) z`q@1-VdyjyUT01%lAU@m^PZ_ov6AdF$}paxMFGb5j>K?i?R0YOV8!dieVvd1dD7kF zI^*p%uws1R4cUYi$0zb0Exy_-0QROvV%4l)oqKu0R77( zIsgd~5FEl03(A#l&yu#ocVEGW+NeqOSaaGyfCFNWx+GtUaduFK+{eOP-4Q% z_v^DAbFzMF-@!h(F(BZf?|5rVfL0!p3>0iHCV_3{7VG9?kdqX7V{gZ-VGT9^Taqfd z*;`!Y#?ccQIRFxtR6UANLZC5B*PhhagrMXk+A_*SB29r1c-7RFP zu3zbn3rZpnjt8GTnZDYD9^-2DAi!b|r%5Pmk_^y7@2^dDY-QjjT}dI0k61fy_3%Y;Q$*u6mCdNhcd?@!!N|y!(!p`@h({ ze(~D4+EO?yu}gOT|7=if2-xd=8s(_QRavXNp7$k28}Xd!*z}!P>kq>6rVP90qX2oW zr9s*$Wkpr*K0z?V_HxbG|50?@l``CLWJv4}j0AxplkH#BE0dS~WxrspG2BU!p4oek zCj(Uv>!7YNIk)Ex{p$ocQer54Gc>{fnZ{p4J9OR$-sy+JpgytVkkf&wbIRPSCyD#Q zx^aBC`&_(-{0GeNKfBkwWRL)d$ni>1vnfB` ze|>fCC6{q?2Q(SdHdtbSD|BG;{xlvD-&`llGz@F(YRIvV-!2V+Gc*e6)14>_{-B}^ zdgZW2kD)&*XloI9#xDNoQnn%;odLcW;2?*KU6wpPK_>D#FFnpq6X}s_8w1{7XL8gJ z`qAYW%;~9ol>eCqd(~}5Dp9W#_{Z?Mi%01mpVR4PrVTsl&*(d?trRoo_#!ha2epZ|c-gQWy}SF@LNk8JQ1QD! zLG1LcP3GXGpWEE}UJZ><*$nhfgm0)6Bumosrt}vH-c-HjPv+4BHb7$oWn^Q{IHeJ4 z+*lAAIx{wkNK)Z85bevoJm4j^MOZIAYuSd0gJS3woX>C8xB;V`s5|F`IlM_QIr%=H zDr0OZ;?+%fgbIw1rUv7X%%cZDTHCG6R-<7rQhST?2N{-p$PDcxiaTmjqPY22TO z+h@N+ez+>_`y0d=KDV7oF34F}@kQblx}M8h(CFIQPxTmiX(AzzbBm|R#^ zl2REVL2Ie*ch0pinDaAtYGEsR?S%t*t=h8bc~P3Pun9fzKBDopGDX(g2Dc~2mm}BC z67O@vG=JhT8NmYyAD~mGnpg;&_(Ss2 z2>(UaDgjOj+5k~(^H%l%y5`6CC3;DjjB5LcLFesqJ-zMeQsciAjfywtFepqD4}wPAuH7>GU*v*+FTW}aqSxX$$1 zmpx#!>vP&D5PX>pdE2q|^VmXkB(R?BVv_mX^LoR|>wliWhx6;h6_}Erk6m#hk7=qh zgDrv(@92{0fZQ_>sXKJh07P1@m2cSK7kT<8a9Dl&2bJQ+4)c>hK66B7wBInLx+rdu z;GvL-Z8z`J!ONh#P8$hWzXG0r`P<8Q=UOLlNk^`LfN!0-3G$(~IRO9wx!d=SWCN7_ z|2w+)pC_=f*Zjl}0Fk_8(=U104=Qhu0ADK#NVz+K$~%r7^K7r(RwxtGz?JxXE%H2? z@$|agRfMZ8>Tq9r<13G^6i;3<`mRW=s=Si^zjQz6X`;qHs|JAO#eflH3~~1#*zF;X zHnef55Fp)D-bq`zx}3+Jw*EBfl1v|;bT<$LsS$W`CCch-^=D3K`luiGxfmK-g=rR= zPxT;18oBKufuuBkpekrU`F_W1r@S%E%c13BycC%VL?HKAx@w>?3J9vQ+k`|c@t5l` z0uo|4BF*vFbe2;j)sH`aEA3%+wL-IL@d$SX@Swd=Ph+vCRy&(rzcuV9*9`lM4HU$y z$(aQNkg@2;$aYax1oSJn<)M+CV(!bqhb~42;9#5D*7o9pdn~Serry&R(&{UF*aOk7GX+$LA0YOySF;S{R?H8UB zDiw%U1D_Feb3`#bA?jRxhh}jd4(xt)Q%?`2=251KM_Y|mCPjf?K9sI*m%AP77K)b+ zs`Q%AbKU1J#K2Tc`gT+fEt)cv9r?fVE2%D(L{5##j1nmI+r=3pzzzah@e@6LhTo*< zTV>Qkts;={d3tW^%^E1=$|nk#E09L5HK=H&zK75-b!iB<*=@a2fY-)0@V@~@HV|w?#C32NvazuBN3(b~`lhPHe#Rh5WD-J- zrct;DxxTT~X)fQP|3rr~f1j}nwVy4IRQ?z&|5q&y36ytRI2iyIO9q)-Yf-i%5`Q?k zrsq6%2){}aCV9qsDbxX?+TOkAt26kQz1l(J3Mw z?o~Uaum-Lrga?630H=*V2jH7T7a!EK?kUKg6ubfj=j)XL%qzNujmAyl(G6Qlh|yVQ z%!fZO8RLbeB8b4wMR71T)yKq=3x=u>$2GH_Z$RH5v z7!>}ya2No-oEP@zih?T}`B;4{qhvbRCucEb~X*H%UU;q&YMr!f}H@IWX|_5!*^tf&+sx*?l`F5AI6 z-o&X>qYZv-gWk4EbJd%(g}4l29nV@`ZE?nh zx;uTRk}8==t$bb`coNT$H+dFs<)Kj|4lV=RoQnS!r|E1-lG3`)g2iG+2GGHyDEtX* zlJ&e~SD9BaS6o%>*!i6L%2{8;Ko6r_P?G8E{m<&Ew;H1n(CTpoZnu17cJh|}X8qhE zN@!ye%st;}j((665FT^wESl}Ealb+{(l@vJkun3AEgHro{kJ4~gSO$ds?Ux3C#qFw zf|$HCSJ&G)c!VbK;fZZLfzDI{b>RzkQ!(FH17Hy8nxp?Df9P0s(WU`8d0Wp`{yy{v zsm(+14ag3B@8xOn!EIR=91qAZ*{GRz*UQv_!ELx@#UmOP@}(QiyzD6@L3lGa?|^?F zcP&c?bE18ZP96_S8CSwChv9F~o%uF`-iet`XKdafFRQ&;zzQ$JO1&W&At0#Kw1Kfe z1C;iPx}HUU>4(Qb&>Zn4jxpjG4eZm2xQKdu-h%q(NBU8`fLYV>uM4wF{1aq8>jq0V z_M9IgUB%J6{Bf@B;wmy|I4up0t##9%XIgi`L-11UY;D-GzG0)eY0gOOza;gye9k)L zyK3Yy&bz4*Y26#+09GzQ=$pGlYP1hsjTIdNASC?fH(b>d?^!bvc*+(8xLG!kzh6g% z6tBEHTu0j1HZ7_{P%ch+7%5eONkJ}Q4R&9-f#0H01ZH_-$?@e1ckOvY^?^kTk&1s` zXoh{DV&{HAE!tr(BP%ISShV^{;*f212s>@)(rOL~et*&RMBzhWL-8h137iK8NibN- zv<`GeRVt)rA0VEmy0Ww(F2EZ4S2#VO?-w>7QnR+L+a|G)Q@yM8uQ%$QxD4QyU(T3@ zLWAcQ)yqH0xi*l#v%wY$^nU?4XqUEe_0L87>Okly-fbQNN<6jgG{ns5BEONe*E))(uZQ_K^ z;PLrIhu)7ujD3}TR5OqU47(R`Fh2*Ul|5p!B+QJIDLF2jW|izba->WuBdWv5SY>;n zM#`MaYh)(>2RX30OB`CIFT1vLcA8=hWxn;q!lgX1^?}4< zPb1p*a*T7j)Qv+m98VB_?CB3gF<*Kj0xjOC!B0*CL4n+&!k6+j5&l*ex{-tOXpX`( z5OhgV{h2_vCf_sOqFo%ty;+uo4HDLJ87t+Qx(*UiL>f+%b` z3!d4}S-aaC6yYo(W!ZV!yVO6)^KAL69k%#?X!}v;1}bSC@CD%B6_8A+!F9AmUyA+p zz2w#EFF~9AHmxH3dZZ-ppm^~_5nWw5Z`tqWuz%dGL(V0Qox903?P&qjdml>>I`sn9 z^(jmiRh;=>5{KjVwEtIU=M~Nd!^LqVqQqO92-+gGXNwX=j4BnQ_6TYPwQFmoeXW+- zv#1ejw;G#Lg0@!e)b_@zt%w!-^WJ>l{dae6{^wkrb90{aoZmljvIG4kjj;E_x>>T` z7Q50Gc;i#Pbp;za@=SW^dK^NtJ`brrJ!kSRt5nK1DSwvbTX?_5!^IpfYyLzVrD5;) z+DXDbmtkfH6)$}+&z)%C^#KMpr@oKniQU7lDA`m&Ypt(U`Oe3<+l|4JB{slppjhyJt1^j-6VFrEJ_Z!HH9-jnqmb-ds^Z zDQ5}uqcZ+)N9R3)A7QgnUZuwYsT2PPvGntdmXuzc*y`zXxXD?X(iKe%teb-PoJ*X7 zX4}6SCL2fetC;#eVPuss6)nSN+WBZkaE5c)-RG**cA>bhU}Dj*HYf8*>n8kc^^;1^ z<3T}owE2+Bl-*hm<#zw~bO*kOj;@3;fvK%&3I#S*J&F?=Dw+y~0^Jg~AM$SCKU9fD zaAU~1N0zGbP5ucJxI+tpwX~DqD`*!9({SeEXGkh}OUrszW;`|IFR)mz4n>0HRY_0> zAULYgVS8y=)g~=+Y4OUnxC;56iKg>B*AcH+g{*SYgTi8AO@|ZccGw+I8QWB>jOFBhELDit^*|@Tbp< z$Z!1RTa3YD_AMQndiib6G+BO%6jCOAQy*=L4|~?Qo7gj^ZP##pg)(akJ%#!xzYZw# zFLv6QGYV9hoy6r>3pd`pd?!b#9Zm-4!hy3`8uhJ(ljF6_Qtt{N2)kasl7LaP!(rxA$#nT)*%vwt4)(|G8NXo|KsiaYK1NN z`gtQNJ|9+z#CN)IKC5;plifvu^09M_@(iq7{Fad{nd@lAcd{Ur=XzGmdwp7IP%{2L z_ZykQPP5cr(~-OsZcN2|x~yq>)H4W|dEe+UDPfcjW%TF@V+e`nZP?VKdymLokhy7W zAs-u$#O6w#8yd4Lc!b{qlWHvE8QcL z4LTMgj)$ADzk{`l0Ep>q zo?xM*DCrG!-#GEQxP$AIWvr-N-_Qp5&n{CJc;?F;Y^2K@(HPlUPB|0+#5HU8%w_oC`1;85-!CG|3`DrbrrM zn^0xTv3f^?2T)}^{X>)hIz?l#`|+iy1!bcJnMjY^2YU>*GnWfJ%`(xQ?sQNf_;Y34 zF(Xsw0_vzS zVEx@`w4H?JWySrMDIF63>iClXr~W@8@aqI*Nn!rKO7&3S3-F6WX}8Htcb3?*mh?4022e%>;qswH> zsNdY}0rJR5s|q~(h}XllCAwTI7DcWf^{Yo}ts-6qhu!}+tmXE{n@B(xzAdY4Om|E7 zQ+bg|(TO-NU8rmn4C0gg*d+Pk2UE}5GHdj4FJg0v%h!A8aJOMG%Sr+Q5s=Uuc}F4q zrPniz<%AE<+>s9#DTA{Ig{7`Y^BLg)50xl%gr)PkcfttW3gP?_#{=(5xwcBi#V1Ow z?-(Q!-J@l^nsgDhB60%({RW_$qJEh*O^zY~$jo`voS3mUo1N;SBztkyIZJ$;nv%jX zbyjo%oh`^xCiv%rgBoj`0LBLmn7L09x%!}<)@zJ}UnWjzmC@lVbcim{S66)=ZlJW5 zWLRPa&-Q+{|1@$@N+B`2yU1apPA=~hf+*0i07lTLyfNon*obB{vF$@0tJz-<&&U~j z7pvP!MV3ETemZZS2mg*}yWT&Tt5?v$9J#M?`2+U=`rQ04swDz3km9h3Ijh{*XR+Fd zwxSTAQ9s9yw@t6DzICdp=PiXRwX|?kN@Yr5u^y{Sh0kv&Vjo z{;HdI{q?*Ey7#;`Y<&&-lsQGCv^=7xm}y@58QhTj)zQK(Lq-v{S>MB@)uS;ujH&Iw zilq;10781xw80g(Y#1f3O+OC^dwH24#HEVNzUy{P+n&A3BLw6T=1pI}RMg6|?nUp% zZX5X`ccGJ{_nO$P7fHWqH7K=*EG5@tdO+>=NnyWu@;+G3OV;Ay>n_nCPXBD51DYNE z^r&SXWWp>roY&vLgsRAnmcN=Ax1m$p9iV{p@|3pMZ>$9FVq*G!TW>yG{`RnKo4$1< zMw(dImVt|6_4fz9(5=y28xb!*Nw2`)+#Q<`PV z^CjwgH-462@vE+m!O15hdiGMR<~!L!fasYj;|1=PXaQLL(axlP41cs-RIzCrI8<`kYz zomNDT&@m|H%PMD2*`?jZRrgy#+pU86`EPft&3&=b&E0-dm%=80HP_UMCt~zH*;11I z-ifM!WRgimn$b36mn)D~vfR*(s#OvZ1rlI%6nX4(n_K|5sj>h dkWtnE*Xy`J9z2Pz^%~3H8{xpP-IA-c{{i9ctAPLj literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/admin/healthstatus/dashboard/healthlogfilters_thumb_0_0.webp b/static/images/auditor/10.8/admin/healthstatus/dashboard/healthlogfilters_thumb_0_0.webp new file mode 100644 index 0000000000000000000000000000000000000000..e3d4182ef9f548f03b77a5c737fc5cadc04ae09b GIT binary patch literal 19614 zcmaI5b8siXvo9LkwrxB4h8x?qZQHhOo10`~n;YAG?6!~o>^>+5`M-S^0@mIG{PQ0Nf83XLG7t{|n_t?!yMCJ=k>5Mt zi>sg?^2Lbn_CEysKMOz0KOZk3-|}DfKR4GuLn~iD+lXI36#BdV_aAWnQ9r+betyb3 zAiw4RjbD9$7uVTG=Qsb`os}IHK&n5__won$H{t@}&^PP*&NE=m{(5^nv%batfKbiv z=*#@$9ySJ+?w%69cF4=pvv<+|{>S|C;Qr@|@Cq>W6Z5n7 zt^ObRoctkR7BK(g@+0&!`C0yt)9aT1&R_SvwMc86eTb)% zG4w?*Ynj?OeUHE(W8{}s)-thr{050h!3>aA)>6uE3{%(u!KrAUSCe6yWQG%qMC4t( zd(b@u9Cb%qN_%1~q}|h((jRI|X^*wJ)hVngSe3v5pZ4yH12y*SSo-#LAVQd8V7MMh z0Ak&)jvg&a^jqE^tRBQjzRFj!0V}-cD6ruKwtD|x{_=srR95$R!{d>Fo(qM=s7p=z z#caeDHKSTCbQbd#^=%DdC+p~P+eJxb8G4=P_y|PtYvBA?h)!f!Z@xRO0)gZpvOwp-F$_s7&i#~!3TNCr?P`mq%QyF zDZReVLc2?cj~~*J1uOZZ^?xV;_ExHl7m0LzB{^NE&(UH8zq)B2w+2Dq*Yy8(Q^o_P zk*#_*2Y(cQ@rvVr2EC@lh^!8^s%zy3yBcTP2vC>;KfDUt_zT6zST(i3wYu+@9&WEr zdkI5XDfS|{@tlyWz9-nwMy?Ic3?tG9x)9?Z<1rC$lf3 zF6ar1aJ$`<=0Uk@Fq73Y3gES;Ar7zS--~Ge;izXLn02~WzNSH;T6#NNyqM0v$o&@` zOj!cmudxeBPnL6;#rWZkg!KZXF8}2Q@v6W3r?bI$83&Xw7=DgH35G1Ri^H|t^d!H^ z4{VO4@<=;#dIY*cH(#uLMx(5^smga$r`U++XFt$%uc0cq)WKbr+Ox_0K6i?kAuj)! zu-2)+3peHt11jvD{W_9F8sTDZlsblrBHc&ppdccAXd3G}HSNpu4!4y2e6f)A7l&BX z^lp{sXkr~qqBEQIu_#_H2vQ6TT??rdVk)z7yFoA;j$jNg^dB3u~?YX z=)^_`gXy55|Jl_-Q$hHasA3kgdHO!MNn@s>YB2#ZUeD1M+dAlm`H1Zr15zxjgVzZ! zon&M$@B_y1$>(J?G%2Fx!nl?kJ@68;?|2Emm5*iM;-|k)f;l9gt|2!{fgP6$Y>TF0 z@`M5>9u4?9UBmbh6>c0l$Q6c$$$bj^C`_PRq$N@Bz;+K7w#)G42w3Hd*L!CNZrZy}zzp}%RV zcoP&h`xx*;8E}B&-xQun|NgMgDJ8vJE^HR#E;Z@*zr(4oP4QcWdD3esCKjvkMVCT?0Z`=mG`k>1i{z%^+;qR#5?VHqWFO$p#bRK_TzHN7mYcXHqp?-ODp)cSfG9 zXK-y;u7oI_Z_fz97vl9KzYf=$6orY`&Qm!@gPnS~4Nh826>(fdE8(?-<`)zSg4Lc4@AgGlagbUy+7Ut-coMdt?$|A1iLi>?W>-aH#sM;4b(6eq@ROi@h zNje;7zDnR_Q>>r>i>TcN5-n_>ewc@93pTyK7yE(Ui#XUQf(pNq{GF^Cn;(EW*}F3CnSO?#!xk{F zNkE)iZ4XU&(2EACxZp4$c(z=^kqX6{Z1?j|SEToY1J^FL?eNV|P*qIE!nsM4uh_3og zU|2}#?KAFA#M~;&ayS0R?eJ#rIvW30v^rR2WQF|H@30x4-Q2qUz#7?hVza)-xa-28 zAxtfS3o5*)r)-7W{%oU>t7cv;t-cs#qNb%kv=)a{h1U^4H%SjMs=8Nbn$u;8e~)&Q zQ3Mb;fl zKc33Nl78E_i|)tszA4te;T^hx=Myz<54%;%!daxmWth@D7}y znL+wF|DDVeJ}L6Tu9U>-J}e&^7D{gv^-@vmIReBJOu9$-vl)S0XZ)A?)@3_Yr;ig8y}urxR*yz*AT1&X6h%2 z47C@9VM5A`4tyOzPEfRQik!hyBJUR4j443npS=HR(cV@ymwwx?k=+`TeoV1dD;f9_ zF7ue;O8RRI9i5eK(hYkr=^$lhemB!U8P4Z>uG>bnb{lkSfNX7DF!R8Pw3FLV zON=CRHVklDrpU&2;xzs}hqh?Tr2AxUym93I?c7?Bua$GiU~$co2^)k3Q`4BUJ_u^P7p! zv+E4NM&U8>v$&7;hdx7J@{rIyuG5nTS%d5sl6wQ1GNjqFa7Do=oDqY^=7pC{FTG?| zIP3*^Kp)!Fn5Zuf?tC)qVZP{%pKxSo3C9{%#j|<$n4*kN_P+GrSnZtQA_U-!7^-a2 zW_=ujodm~`5O>ro(Bm7BPf?`Q^qpSq_@ioA3z=&9ksHBUS0&RYuMM~bzCLgBoK{EF zOd3#XAU@G!selPVL}c!y0+x6Uz4tvV3Pjvl8TeS0B6(_vx@HLc=+qkiKFj)H(zW=Q zEfigH!}=&=Y*Q~|b7D`NbFR|wW94duLtgedY&BE$8EHohv>?7U=iXg|(E}f&4N#MB zE$^d%uyBj0Q)!(Q2i`Hf?d{mV-tfNf(h*)(Gk*|_I}`{DIM}vOW}~*2I+HGtMpWkT zqf{!;z6MW-_o#8r#segFtdH;U=K@K4<)}>-35}E{E{Eaw&%F;ZOyEfWTHRfE>tHm`%88``|XB1jR*5NFIo#gpT1}Riu*h&evGVnB1F#0MF)0*W zL-o4nD`h_Z4ACRNg2KHdR_$z#Msxr#@o#C2IR;!1S8#kcFL&Fr>1U<6VhUP?E7`5yfrV@i~Q+7s0TqG-MqDBL6oh z&;8gbkoxabFdoV#vkNi1Y#zPtuLGb-`f*`!%RYV0?z$xK<|*PXfw408yd5Rau^BxD zpS};3;$zaW_jvT|X^gS9@(}cdrVvP*kH13}4O-e~$#XYPjZU;h>=N*hQKlD!g# zLq$>!fam0kVZ_}Iqp}(d*zPMAQ>_GAqouLHRfoi|A1a z+TKIx?y(XE`Atyh=MEG-aP^UN5b#Mr+%#VeLf;3Hf1+pWfR7}I+p5cy z$Tqyu3z@n1lS!Q(m^`W?TdJjT2$ zUXO0dla~V8HJW$Ug%L=ur&tDW_?i{hhzpw5WS|DykmP7y0dSmJ$wIn{H-M7drtOYF zN%SJi(KJTs&*O)2s`d&-I)^dI-7qDd*wR!jhSR?3PW0W}UaBmoatLdJ=+}%T-%i0}o{j_mRg)B&4%lR5c z*7&wVp6xLb0O1n^VG_gnvk*A&X;ivUntr`9pjh5)`I1DGH`k;|hVt!wM9la5eupqZ z&BR`mZ2g)~KVr?fq^@N#O$-Lkn8D!}oaRreO!f<|bZ)G|F(m%| z^W@4Q!|e8pe~j^Zw{Z$e`^Zi!{Pk6p=rq6<|AcWXjHZSGaG1B6*zkt2bR;MWNj>FK zAMUC1HWPV~#o?`vsp~E4BQFo3PjjckBQyx1###~w3&T_j9^3+NnJg-sBoE1@p|H=v z_W2d(6drbG6Ly>Oh4;#{3*cg}D&-U6ZKZDFDcO*XA*7h}8EtV#b+WKRbLLxpfki!) z*brbqajmbVJ&WHHkv+{l#u`H?yhk#b!g$>VkAKL%JbM(B3*L0xY<*L;W}1(UQQIOf zcv*yg>eh$_yb=#o)B2rlNJE>jrWjE944mu`@JS>Y7ec-m&Cj#rC$Uyi1whmwfc)3F z>|dw6h|Lb~!=>Hs2oGJR%3#|C!WLWv793#A?%N*Eyjvlu-Si-fFQS3Zn3j><2Ckwi z{Q_Z@CWl$u0ATn-_X_8kFV7RSs))tsvCWqtm5`eT78YKBrhq0soDg8(^O9jRP|!X@*ft~W`W z6&T+{d87jC(4LpKPpn3AteA>GT!*yo@ZxS?G#|{neycG{W6rrRP3e- zz7-HT4M_|yw1RHUqK;xhgXjo^->c;4W*Z@8h2ka=yF^J$mGs=N0RLQ?LR8h>V(9!B z&XiH${u#U3dEw!G9PP~3+pmZ|5pk%$F<_KTIEsJyiP7$}mV}sJTxfrqa75OFM{$#+ zl8=u%3Mg$tbRy&nwad5plDFAk5zwk9;3Cb-f3y?bIA(BDOv;YrC?tq(_1)Nt#Rg4n z<5}BiDNxr6Yf|Xlv=B)(9SBB!SC9Ww$5dE0Ls9H}pyA{)?g>k73y)P<9uG=yJ6+0U zfX-dOj9jH!zoCsM#822`hlivpat4}2k}2`0^{V-%Iw^Gh3*AM*Yr0(efJGz8$vd$X=R&0)$MN; z(`)DIJ-R_`Sc~6>BGV<30Pa8VKARoi_z;Us8SUTn2Ud=W2#JH6zJ5=4`MLZ1xmnOu zyvafZMA?(Xfg{-mN4?jrn75x2?=Fl|ihk(oAi-cm7nn}81dNX#q3WX%9?*tCB>Ih! zLuBV-+?-1U6LV!E+0S`Uj$CvdrrjA_%J`v+eZTdRkhA`EF4kL5RI6b726?cPWz*?x zvxJ(V(LIOy1bTwE1B{DYvPNX_%Ehtl480~q?X!to6r(LXC~uRB;z3<*PfHG9aZHQA zX*d-G44ieqP(|gFNY+-N$c1??MnWh7+N$>;Eeg%5V8bDxIm|Muwnuk8f&Lz&G}#Jb zNk*8thhqGm=^sYt2eR(i0iN}RxPDAS%AAUb9wi=IWL+dwlAtAs>C-Y)jNYkABEGgG zg_2{)$i^ySpCaKQ5x=S@>F-2+9?6#}37IX=h>)(Ms50sslQw@ebQWHBXt%0o(J)jw ztaR5pcAmm~+L zqok1|EPO@CuwIj1Z4Im`_50dC6`G?gD33;OZx@0PPU!iTG0x}Dy7x;qWycrTyXDW9Lj5Lqf7^e!qN2N?CcKH4&nzHg7)5i6P@J%Eq0r|~)t z{QP7#U`-`~LQl?RMjN`0l5?y=7CLXyqpgt4v;L9O7Rp}tqQec>y-w7TBcB%_@-mKM6o2R&gxkTP97+@ zFUM7r{h)v+rGc$b<$Yo99HbnfmwN`b1nJ5el5Qvl>VQR&h*BRAXav@BnknLAusHx2 z8h*Qg^7l{p4ntgXZntf1BIY2;_x2F?{2BeFFSWyBvpBIfVlbshDs7Q7|5zgug9Oz` zz2b$rHJ0?i;Icv<@QY~lk&89a#|M}IlAUXaa+eQR#>7?kGx#1;;}l{l;JVV&>aPhu z+ygn^TioN6ggavMFOs^ruikL{X0ENS()ltk1|tlW_f#2|bnxExR0qLOwpsa%%mavc zcv_`hB2+j6HBlRy1d`qszobsatQ4S%Zug@y%w@)5o=|}Z>gRk?2xj|DT+GNl=?CXWH~YeBd)uB9^M!c!_f z&Ln0l9>adx>W4m!BAYSu3J28Skt&|7>N7_o8UbU^xD2{A)9mwAYFSP-5cg`d+v#a% zv`CUkhd0nx@Hj*tfz)v=>WzN!C%NOG_sc_ITloBa$3KNNE%K53Y?TIvg&bzUXKo`q zB~pGu@-?ybspN~OMXn~`EVL4S?PYy}(Dhj9L1GxGj4au_+j`uCdzU_gzW1f^4Us&XidxZ(e36q=M=jp;t0f1XCAcKUi zUV-r=bx4EoKE&_zFji>!xLZ{_k`gZ@4w|^94&{!{N5eYCwnhb(*Sm>}yar{06-LC5!dmz5;FM0g*l!Woxq)&|Jye)9J~KBKyO% z19s5ZdW6y0QPnnVN(N<=;hAOFhMBtII}1-oxxWnJL4}`f1SP6-zYRR&7vq9jrd0o! zGZ;EEHYGnI?_VKMWm?~Hv8*(MhHvYCv9jn&8Tgy6^XirOv^HibO_HJVvAlRKb^MAE zhtlKL&xX{^ty6oUtbZwD*oL|#Wft0l_PHS_n!U=uVqRni0nYNzw11<mu z={32-*bn!(s+P7)S|9C2(Jo8G(?X8f#yJ*d&0Ex$PxZ--j^UPLX3P#3dkI5Ehg7JJybzEaj97V8A9^&aja`S< zZ#QPNJbTnlw{;&c0t^(8yOz|nZ@;t`GnctuVm{PY1tPi99KQME(IQ2~XZy++uHEM`RLhK^WVCm37O^Qg+IjBi_Q? z7yINf=n8l4(Ig)AR_VZd%NklSTKO9kX*!Ak7s@=@9RP}_c27e}@EC@L(mG;1LPi$6 zWqhUiE2g;am&2#WkRGLg243BF-jnK7_ms0ddfOZqZTiJPh_8iL>&S8qoQM^}nefs} zyb);TNadO{MK0UR_B~&~cU9)vra)KGx|lLe5)_&(TZBgcI-r)>QT}QsP1V zNw-Hg)oC*r^i>dvCE`b8_$_Gmz0V!`&XOd78Q8r@w)50fQtte8C<6Iw*UGHb`ug~{ z+{2if{1BHHjjC|F@k*>do{lO)@`SNS1^cKmQEhW{c7#aK5ZlCc5g)T+6oyTy)a1%`(5Ldtj{KLYtnYL`T2oBksN7sTk`kF(XO==W&%pg7%f^^igxr! z9fWM?u~FFquahc;AanIL_Y;-tAe=I+yYlq=wEz~xD$Re4(hU`M-x2( z8>HJebjRNf+PbjXd^J&tt8rjDfmcNnJcW}!N-Ud~QRzxiT`|PN!TFL7*P$Pj?-(e` z+N8bvVj;ZNSKdF`BEBxA9WyF7Ho3rRTDIiRT-*$vu&NaZVVYm&uza{ost)zFJM>ZoyIU41871MFN3OTg)+1K=H4kj>B;Ei zUgVn_Qt(R*n{?44S2x*oh)zJ1=_&HsSU@YWAWK#v&DJ2obY#F&A2W=;2#@Fz7xMOQ z@A|J=R}$+U;yuLHZu|`Rf2u}5#^T0uSdSKA4LEB6C=ZrXlZ3y4=NIcHBS8KdtI+(K zx*Ljd<1~%Wr{RK+!Z2P(W7v#Iz9rM>FJ)>E z99O_u_A_Y$OD*Gtg#43`DPoBW*j$`-Thz4yDE*mkiwU>NQY3J3o#u6EW;SsEZaZgu zEQPs)lK!u}T5_^l@Ce&1AV$bp^Cqi03tz0M&_^^n29dytYh71Mi-Uw2mMqgAI*tIp ziOZYoM7;{gNeG;ZyTf=;xrSNf*!$?NU%H$R>0G2LAeJ1_ir#LcYX1J-{k(P*WiR;9jPc*h zx`u#Y=7*@PG(`C#KgySA6dS~_b|Ja}_K_GF0?r^s@lo3!W;j0sKdi(eRZ$(Tu!x%A zsFuI;6(O>0UD$3S*J`zJR$G?bw#jd6SOSxFmeDf`>xm;)Z}6yEG|> zlZYdfKV4!hOYTPAXPEUQ_^{~!X9A0&wMRoBrytzDmvM&fy1!5yXqx5{&BY2*(R z$}q9mEec3R)!Ho}FhXkjs44w6o*tX_Eh?M2(;@s>1V^4Y_xH@P;G10+aQyRiJ}1(6 zEl=MjItkP4Dv*-oL>)D2-xJ4|r+rH8g=&QjXKX%@ddr!bGG$p3WG+Arg~i3-WkgrL zQT6z`{|6iM$TgKl6BL8(_Qiz-YobA=rBhT63hJ%2jM9?3D$H)%%so9(rer?(3;a$@V5I}N`)GC+SK%ETIBMBf|eI=U0%+*eEDzFhaGJg@=WZq zQ5jm^#+_xD-)|k)={OO{nNo`n?GRBjSYEq>ftbmodP`g^IuD%(M3noZc_Rs5gpk!| zs{<{#OV1#{MD}IiopBNQA}L$`qFV2D;$qEexJt47rV$Ygn+|_Y96U5ih99ZE+2Xo) zaMRgdJEdC_5aUDAMhudXE$P?XFO`<5{IG^2N*bBh;5K0BIwXrotiJrWg`>&3n5hC(y@`m@M5^!D+RI531yW~SnUU|=uESmAJA)%>aJ!Zr2zF;K~3j*cs5CRlh^EJ z6Fqu@7;XSO8f^qi!{t>Gds^K^y@k!R{Gf)1YZh#)u}kp6x~8k_$}^5ws(I(;y^tzX z{OOg7j8BjNTBu*1*_5y8*Etg8;{5!ya$R+j#`$5k@q1_;G`yvQWGwv(sbfgQ7o-O5 zOMAW1sHge{Ha84f0oC&SF2s88ul`*%(*vMbWH(O};c%0KTtTx_dac~cE_(YU)2UOe zx*?ZO4Yt%OAg>PY1<2S54Ag^xH?g`OB7{(eW}%LF&er^U{SiEy*x@3A((jMBUx9o*SE3o=iS!KnmPokzHbWM$fY z!|68P$c#V&#B&l_^r8I6o|B(>zZxqNxTr4$avX9tppt&HaxSC$`6c46elcULYpUSkw#$N zRh6v1&}j@&ynE*i=Ga!C{1Y+;xI`!?esgO;HEj7YHbBV-;Gtpe` z!VQzYXKnU|e9Cja=pYBUM=H_`*(YU?6~Rw|`V@N|esA|RY-sokL4qv|=_7P*;m&9RXCOO99f zF=@@+9lAyhT7)Kp2qo@XUK~qL0)l&qs%k6hAfTF-#3KooZyX20e8M35V9EI#**75F z>|}YG(gk`YcE`~x8i`k4<%>*#H>3go9+81i1^?$%LA9tf-!{0}xkUDJ#g!eI5|t53 z1q9qtO?{UuuFHf61YvzGCAEPRXLVvH2E+DfBMA6$u9LN5 zQJ&NPAOI%e#=IU!j%{;rp71zp0oIvKg1$c4 z^=e)>9=L(tM?l=jMxfxZvAfbj*d0s<1jxAstq2LPL+}@tJ;LZ4fJqbHQg)E77M(90 zPO)eLgpC51aNAK6VvpB!Rq+8vmy-%uH@W(&DHI!FvZQsI!~~46L7;{$fzmo8g;zq*agq{!Gw%R|XGO;w=bE@wdoD)AZ5E|~LpO4GL@@Lo3OaP&JCNG7 ziP4c7&F^53MKr6v=BsD(L(L_S$SVPWtYgWm(`=fXQ~!L=DNh39)xg<|~4$ zil~)N$VV-GjsJ!Y`Mrao+7%^(H!cgUt==F!TXssqG{{MYxh*`pH&sP^^76a_NF@kJ zd7)<_E-9BUOrxEI2t(7ht_e&auBh5G+`C&kIP;fj(%{;!c$OZg;zD(TT#}|3YvYjh z(n%~?Br`Ot#g$>Tt(4P2-mbT~@7U)BALC2WSu$b3FKuO6=VO4lLwLoIdR5);n-+#X za6?NWKHrAtbwg=u$;!!bM0Z#zT)oJnFKmr()qv1g1ce(CQ*CVAL-<>5BP;`w?4Pe- z{qf30yR>T>V)x3u-2#^Ra7sqgzaD?At39~3rB(@YZD|(69RfT?1=$7~&((?^^*nY; zV2s+fn{}Hf({%iUvWct0vR}hS9C%Ted#Ve+rPgOZWZ$JJS~LqxZw4Mg;0z}HKus#2 z!T9s-i_l|{Z2DI;;Lw4)alNxcev0kyJuEi-aHY#u_? zG;XJ6EXIXAU}mLxfZi4V+!>NTr?2g(Hw!&UvvJSp$QReV&L_sh**O{`y_)!wbZa%+ zWG!5lB_GJXB!ic8o=1r|oPm<_gI+-}By)M-Nw3;k-P9;Kk6kpvaiAT!ZEc)K*=W6U z!uYpb7Eqydq00iG@KiGFbt-tuZPxe^5TMz{ovd`h|(Gq>xU`}wzf;B^Kg3Su7 z;s|TOG@|d@#2BpE|3*wJetv9-$A|e+2|1Awwbi!cS^xMRfeLGx1ZYFC){yUNM0 zKN_r_EVr^7r@l*&BzLIa$%*|dBo|RzbTJ*ls?lAPcBzg(j6t}QdEwIsOT;sm?uXfn z7u7n7xu~De5KZl5MugVRUQ}Qu=cn;auGEVdUiPbpp-&g}Ub!GX=k;YX#yrVPUl<9Y zL4$}KNVZdKwq3D)&jX&lH>fcTztP62F&bAUS;jZ{b}r)ud(;ECE$2()fvNyuTV7cf zsut@I9F9ei(3*1GN;woSQsks$vpDhFH%+g<3QWB*`C?#efqFnsYa6{`Q$TYm|g&^j-XY-@q%W!02m+5#zB->*)`{fT;@AgU816VSZ7E zl)P|OOKeOHS?Am0Q4nv;=7jxu<}udoRj^o4N~S$m_$r$yTSD0`A1M2xuj`37A4O4s zk`u;(lFi0dw4=l#%FKN2IwW9a7$w?Nd$Y0!7fl-$L!Pf`n!@Mrsd$cd2|u*rLx&|f zLMS(;|2pG=nsv?=BG`Fi4F=2lWJi8JTfC7$&h}O&k=FWRnf`oagDWYQ&jv$4BCKI> znQ*LEg!kDHq*z79)abZo_v0~se*kzV$A*>w2z`xF|K^8|jQtSn3fb=D{lD4?q|@;z z$4rVdG&#D8+AL~#u~RW#F>s3YYp3zTA7Bt)@O;7nD=s1RO#`~wHP5-;Q?uN4?I=_I zO0+{5!`Cnr?fga>*HUq{g>E9;-LgMa1x22`-=GlFGW-@peM(Xa9fMh2;L!XRbk?mW z%IJ*T);jM%_A}h{S&|FSe5<)jAe*mlCPnD$HhsCtgk?dO+S4=OyB7hX=~MW4_3(d? zJmMVD#aZr}n$9X1s6CQ)R*;+L9r#!jT-u%H=`CKjTNT!=c1On&YvZBfsT%+F$tKW*-a6Frx?%-rMnwdIcJm;16swgDyz~dUAom^a|-6y(;lrs4%#O`eXDfT+-4R5F5z?xynV4pc2}?UG+3P@4u&dVz>N_(6dn) zTj%O7*&>Ki?|vbsj#~{>6}vn_aj%tkB^j+kT*5gd+iD)QjPu>A$(KZSOQhJ?z0ceI zgl~je&@ndU62ag4W+xt0HAz^ooF7wmZCG4UX5r?;!%QfJ)KVkmU)x_>GQ-!08j^ey zXa}j91n9%(Rau@CZqNv7VWlKdG+`>8c=ES?JtTj`>zX2bo*TD5&Rj4?&+;p{bhP_)XXXJn0 z3qM+g*jCqaAUSwvjPCd#x>DqCkl_WVeD0w&*fo%@ig>&qp4#f-Hg9a5B)S@ zI67vjq!`_f>MKOhUt7v1OFvKFP}zC2bSMRlp6~HVh}2^_vOMjgTe12zE`+=W+&XBt zMBJ@#MK9;(YtLVx`QofLekmy&Pu(h|QZmA%C0w@l0Z!EcjQoQ^38;>rzSxk0eC*L? zeKxI|Q~&HyvbOuN#NmMYG*z*g(*k$hLgo*Xd|2lKS;v=R4EGF4VtRO(Bg?b02a}hB z94Rm+AzF^;>W_Z5QC%7Oei12hSi+S?z0se3jvHPtby32Jq0TSF{thFjf7tj6NB?VX zG<%ay1eDx(l+z?81)n4M>SsSXrqO_TtSRx=qM1-I0x3>{s0v$I1dnV(&C`}x5||02 zyJbSGQ94EyT%+aiY}Y|rI(6cw_1D>3j+q;kt~D;_Z$dESyRp`LUaWjhqg577Tpjrb zS?IqUf`5tvV@qq1>qyMb@bjW%q z-Hq#~HkIP!qNWU{Z$)^~k$sD-&fE#rk$2i`N@ZPtQZcLY-M~d=T$JL$96^t5uZOj0 zJR5@TjD%wX5WqB&_;qV(R6N5Q4-$IN%H9RsP76G7+b7Q_)qXPP;HPpgp|Z$w#G&1I z;=pj00;-Qx5O@mJ8#e}$gHLDjPAGmODZ>rTLFw?`H0lFkRYFpUg!%yP7Y-LnyW%y? z?B3>%n~*q%03u>9lNURdM`VX+8-CykA7bV&XTK8~V&uIZ?I#3}7pKc8TDkyAUZa++JDH|XNL$9UJ}uDd#C zbU-U2JZ*e!BwLS_c_nc&h;dV>A}IcC&%nD zup|~;nR#7t1CI-|I#=y9=WaSxnK%^ihL^=nwj1U25U6_AoiZ=za+uq9&(@_Y6V_eeg4U)r`mue-E8 zJGPbkJ7(U{Ka3DTKv@qw1p9+0RnL>;FRh{x0HOy+8tL?_0s191_?w5YIy_p|LDa!s zjO@>y0VMQRFJ(ELd!s+cn6QZED{yq(%KKu})VvpZ;Vzx3{d@{$o?BJwLTuN8we&f~ zZJbsBo+9a(71ut5B@qWQ(gW!QWL5<)&kC}cNQwrI?%O`K9R3)atp4;%Dl0gPATFvR z(hfQgbw`Qt(dzR&TZDrtZUuI7VzZe*-`Gvv1pDN^AtA<6$%~r6*mKHVnb1g10X!Pl zD{d_NEc3-^;CwvC&gF2GE=oU0UoZzUYa}I9mAh)`xH4uKMr*ks#yM$^RL6)!LCLd7 zZ1Zq@^>2iT$G*7_Z3q+{YP!wBYFxKW*GanX7<3Lb*!5>OV^0de7geC0nY+Cj3dXMH zw9G4{;5BM-OFB5*dq035SD+(XJC)e6G!4DfFJ!2!RH)}8 z-NP?E0nvqnahFJG4&b4|>^86oG-#V}5jq9;`bC_La{?2q_6QOiNK+bU7XAg6 zz9AL?t~n}bcElDSBy4Xz8Qu7K=mO^7MNQUvre25cHd2mtlJL;@)%3siv4$}OPjR31 zL2?Y24w*j|)~f~)Zu*QOv!1I_!5BteJgeekcV{SG#LuCSW2)DGt|Ww$nJ}9&Naern zGJEy1kl+PXiUE`Jz6$~&}i=PdN=`vF#}a@yi+WrsiCpR;rD+=%Yo*7Qv1 z<5fpv21Ias>-Csp;%gh1TsV}pK)y~QAsa`lZGnkyC650cC%g`&LR1DRZSJM+E9syh zpDb563H-T(pxB9|tvw<%rBSYHw!tdO3%$6&((QMr{UCAzl3L%9wXB1;ELx5g2hqW@ zhmiTq21e-}-a1%tbuS{AXG{}*#`*oL7{pxwGdk5dWdjkLnmVM%ey6{gqo)bNfXvsg z=Be;^jw%gHSuU1eR?>l#mMR8qoQZQwr`(U~Z)O3?fapzb)=Vww12 zFFA2MMZxSbH#dp_rLvfU5xqqaT7d_EE4>b*j22s|X-W-|0KbHjrZ#D)MVpY_1k3j*Oo{x!tFI@T* zPKexHRn!*@vMvXfbJQ><72Oa1R!H1hC>E5ujMJ^K+y_rf;F$L%_`4){r(VPKTd{h( z1P+=C=IRvEsFsW8_)+*fE$YKZLi?RnEqO$R0qJ5Ehx2i*-@@kl+Y$PZNMmUC19C&w zqHC1jDvEHG^i8VgWO{3SO}^hp;!#2eLlvdz=TvcOPG}=b(hDtAi4H*LWvUm4z05eD zXzij7$RU%^0|@FVD>S^Pw?XXLgXG~ke-kXOSuk(hbAr^kTsk3l*as>h*(FiGXL@+| z-@|72Dpv9S;)U*t-Jw;4-#nGj=q?DSwO`mH=iCvsexCm2^#x~ZebG}O0d=Q>_9^5^)f3HEQK@X=PM3d7H~td_>9 zq@d??k3AiVp}Bn;3q+%Yxw2rB4mU<|Zl4^lylHKi{X83{4O6t+zxNLyo=vAx(@1xv zQ3fICD5*If_XNJf5y3u`USL^KwR|V>nL)irXEdwc&LPo*=k8~dwAI|v z69sZO#|@F3yP?LOrAHO77-{8>Fp9eL%lw9-x_#Xtav$v{d^LDI@HhFWWbiNSTiZ?i ziC;u50v)jX!KRc8Q<9tYEzEC*DUBN9;m{|cZBU-Zp3Aw_m+X+yR^ z+O5&nwQBRZLgkr|2JQUS?oxjD2Sw}xrDWqiKh)6pyEFkrlNNk=1gIqTr3@T?bPLi8 zH;DNC?c?quH6JZENc%hPr1$5z%0J<9yf$_TQue))oZ`zfq;Og&J zN6tn>4fI(CyMt@bON7C_oDbCs)fgu*D}y-MI7|m$SG#3!*oh3fZd0EsP^4(xq&b)S zFE_z3`N$8xQU5AEQL^vj7mk4uhq1B&CSk8KAz!A#S9dV254;ZozoV>-?ac1O49%~y z|CmPI@oQ?APhTT~@rND2Pq0{i;P#MQdrAU-QalZ}myh_?0;k9}b(KyCupkT>;h`bl zdm~;KlvlLK>9f!3h&W_hpkTQEf^P}&@9h^%pWKR_L&rKEt1D^QRnOq~1l)zc{P|MI zl9ttos<6x_D1~?Jp45y%FSSwMs$98$$L66S)xsEM@={Ec_!Ppnp*|7v$q%1@iO5Ew zTbmkmoeh>yk5p$l=a$lSZ|u}qsINH1t&LRZZ^q012z$w97KX+E+2tZbjP`@pW{oM- zCT$8t0b11$=a($&K3#6n(3&@S)BlOLd=H=wG6oz=x)*x;qfqW#VmHNE9r_$~FK}tk zpyS`0OyO$}*ayxH?;alIyV8wMpgEW5tPYdnE6U%}xe`Iwj|T291-7L!Ehq4K)7tTK zv1FA}EY@Z9lWkNvo(>4I#lXM8*|t>XHkJZ{CMN<@RvtX5yn|+r)4E$exXg@HT*un~ zL#p)|vTi)v^Fs+4Qq;97W+cqkU0>%g4=@>YM;Q{us6k8it?$>eiHRk(WMT~JR6Kbz z?JHn=KT`WlGLaS7_YwGzHVFf+g|AjO$5Y^3kB7#-i260aZ-X4gRsUYt7e8U~G&0DJ ztGSZCmbgVo3?Rnuofdc#yjZm)YZ?(19g3^3SgVm=au>>MI?K5lGwJwGd{kai+y2AU{TWIjU{@7v~X@wy`a>K8pu6 zv=s<{_i49(@%0D}(2t7DS;mMJ+j$g@+;)fHdCDA;S8~eLQkR~EVLl)pJgQ;v?S-o) zMLb>$qj$rdlqS2JaOC zu8uO~(G6Ezkg}<|^fOU@nYGb&uKFu?rf567tCIoX@;E5%?# z^GtjPa;3A4OILkB8a^vdMqWufl)uxv183U*xk7vq?XX0Na9YRO!?983ag zCaVkKwv)2YFF2Esxz#R}Yt+%e&`(nY`*-`A3#$5T}02fb{M-P z6_ZmQF?pGY>HEB@90zDK zR;M)%_~2p#MOB8hx{h@&06aq+V+Fn@cu?{X>L+nR=b@rr8}U(P))a{d`;vIhYk4xk zqV#ZiO5DH`({Zqmspoa|g0;|R4<_{$asNRU;@7>kic*DJ!o*kqA4AMnwd}^@1mbsn zJtL_qFDf#QQ$wN+{0%+hG!o)E8zP(&l*MmbQ~54Xpchy;XHBQro;l_+ zwd9subtGG6NT&vG;7#rvVFpWmErmZmJpG>$L$+&Us>oksfh~S_1hWRO(Mx7HB!1%8B_SekyN9# zQwC(O){^vr;J2=V+(lN}tbFwr16*ZAPSCSN~)c4bPyH zuUDh0t^@?RsPX%--a}@*w0WM%4S*od#8d>&ckJjJz719zF`2OnAd+)>Jd~Atk`>qbc7h z?+Sj;qZs+aknxfE7HrZH?=)$5#&;P^P5+ZZU5){Ll38(+9ZU4?Vk`_i#MJ%2{w|rJ2MHXeADuMzEi~ z$UO>RUq5+FYfnwHY9-jNcmcQLV3&4b3j+X49H0#&n2`2f@_;u@lhG0e7=TDA*4yJN&5~Zaq^v`vw~4J^dEi6iDcWqIE8@lt)w&ide*ydPY|zjx}H2hqzSde+9(@RQL$R^Q3!aBg9D<9E4NOdR#P&mgh4TnLU% zx&#^>c7tR|e!+6BP3(7$57t)fLDG~|Aj>s^R^BcY=hHu8b%+1~W;P%Jr==0e%BAW- zZS^wto2D0OhT3lFb`OdN6{BZi*G4bjAC;JoMWsa(f%+;L*NIDk4@FS-PTGe z%|U=8sli2nH=D{i^;!+&s!1F8C(+G)^ih-ZN9-Z0S_GbZlkG!(VsJ~k*v3#q0m2c5 zJ&jisZ0Ko{Rpv81#edl{=h8W8Mp;|Ag1#cgO_`IIzFV10XP~dOS8XgEZ5bvyR#sMH z#o-8&n`86Hb`@exf|xESW^-FpTkOV=BwqM+Yq$vQasbqM@vK|8OFT(Mvli2Bi1Jmr zr**&B>lA0O5rQ*a@XMfKNFR{m73<6(FY`8xc-1y#jKu3 z8mQ%>RCY66bs*!7bdCb$jOTXnm$l7`^!2YTvhsh-Z~ue*^+n|8L$wYRJUeLScbc1E z%BR=ZM8&TG%sbEYR{fm}_9~{@nwA_|66MxCmE| z1N%|Bpt|I9eg&BTxxnOdGZYy2)RgPKwlh3DGR=k!kKdGL;zp>Kat13|a;up2V9<2w zshew#aQ{~&3$x{((<+>@0YKYQN(e%c60RQBZhW>udINBvhZon>CqFQaD6ZbFx F005^nYXtxR literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/admin/healthstatus/dashboard/healthstatusdashboard_thumb_0_0.webp b/static/images/auditor/10.8/admin/healthstatus/dashboard/healthstatusdashboard_thumb_0_0.webp new file mode 100644 index 0000000000000000000000000000000000000000..76ceb6804858918bc765a162677a39e7aab3c4ed GIT binary patch literal 39342 zcma&Mb9iS>w=Ejmw$rhbj&0j^IyO4CZQHhO+jcre$M~J@_j~s~_wIYn^W62%TF;tQ zbJeOEHRhOAr6egPR+0_`q%JC?pr*hL($skI!#k0Q(Zfo4f+zJwZk{ zq|f!6-&gb(;*;n0=4b8IX#4E7@13tL;Lyv@*8w1Z{tEyL(Erf)ySW0K^S^oe`I3Ci z0~R-Y0s1$XU%83Cx4p0Y?!E6`F}|*VbN~S0+Xe|h{B!^8F( z9esO!UcFF1H$Qxj%nN$ce44-HA3{G?$1o28BYptj?i1+GtD8^$ z7s7k~7vJGOP2PTNeU1I_q2<>HNWQz>f_}KYjlS_;_nrf8d^7&o0e9Rlh_Ac*{4>7y z0GmJMcTeAiO%>V0Cr8$sjk!jN#v$Z2F-ixHYMmH8*amLkr{|Vq!QZW#?6q`VcM&$@JwyD%e<@d99C^z~5j{1DO!N}f{ zRC7`n9sK{)``4kLweq)pP@Vnpq9FO(;GI?3LG4p)Y+8?jyI=;E2zu1-k6Ow$l;WYf z87=*a8saC^1}z*|M#rT8H-CYp^1nFVRT>O6)iuQgJir)hPq-5JnU>;TV~S#@T*!Qk z%Sj*bB?;5cB|b)##QzvMWLPPsJj`B9TvGqLOqqEWQ49}5RqwwwZht%W(Jc_*zxX%p zHUR#53wrx8KAC8TsG zf=L;0lh;e6<2okDl_6wWRrkiyGHPViWVGBd>c|R0Y|G;}tjugyHG=RV_zRrG)G9sN z2CHe61F%0jb=DWdzXbaG8IXv6S*=)KLF!KaDn-t3~HGNu9|N0U&$CxUMbA zbTB(OY!Ps161vzw5W2cdD2cC09O&5Bur*BgcEO+Wjq84|b_|>d)Oku;U`a zDie3m^-%?tsNfs!UOJ_|E>g7Il2*4TE>< z$|K)(z4{uvn4VhXV$N;nR~TYujp%b=)Sj3^>Y!TbGCt=y%S=p6|dR9lif0lmR8AShgE-$%5B;8CHBSFvX5DFX}NZ{4?UTW%UA?t;< zc07-j6&x??&2f^#J8s_xE*%pgF+unJK1FTD=)rJ9*g(ase`P`svmF=Z6^_qatLJz0 zi7UeOE=!<_CV7M|nq?y+NIY#Nx?pK4q`1mm!XO@Y*6`!8hngs#f^=d;m5G=gQRG8# zJ%tF5)LBE7lqt^$NWd z{MBaFt31+$4NU3j9X3Znm2#@Z6L z4XwlzU?6J3Ra?r}s0Gu?4bEv{{T~#2Cy>RM3&A@~#m+gOyespPhqkj6?Ejfd@5TMt zKaX~e6NxZcXc|2y#_-*u-jg{g{!YNZ(?N=#h|`u@F3^7{ePVc!cqLuo2l@W8Z;@!x ze+XJ)dwYWA1Xl!@v=KO)7K0QPO~GcgDyUO&+4n!p%>^BU6^Y|O6?f`_+S#T}wzP<- z!M6}`Y!TjU5y2OUu-vk{{!h_?>-A+&10))#xCON$mgS%S27_FOJqC%c;Nc+!2l-I` zf`4K}?Dw@TT|6On3l|TOdAZ4d;sbhU?wy`zy*Rz1YQpI;{|ag4F(h8Em`fT|Izwr%_s5g;3eBH`0weY^HB~hl2VjkYD&4NRc?lZjqW+=%- zh81k68rJ{^cpaioatL!kXfV|44UzraOmr_1)oRmVVJhmwgCu8v!Q0wc!%1R4BZI;V8A>v{|d; zw+oG3LIP|*zkP2`#Sfj70YX1a3-+xRNl?EZtwliC90HEBKLMUbe}>p3XkQ^tqmr*q zxZ~0m$@xzE4LEHR#McfnPQX2?>B!5}&e=eip_`K1wJb@p9|3DmMI;_;Cz&dAHB z-)ptT?V&d4GC1$nKGYRFRcli(2H|B1YZXxRWU7T03(@QcsK zGHAeU7o$@R=>9PNpXO{1D1D*HxjD)YF63nCWeS&!!PKnR3n~o*U1L)^E3$!pX^z96 z;b7Kq6}n}xkU^mv**D5IMW@GIZ+&UC>toxUi4S$>b(1_-TldCX!4*e?)+1Z{yfs6c zZg!HCrE;byas;~gMyND?-fU_jNKHQ-L`jkf{L(2Lmh-@&CgFMb-!d;#L zI{jY2PSsePdV%)4DxQtV+EzZrpV3G>wr;WIw#!psozastMUrD&v3k+-6Ii>$yK&3~ zR*)XTZ9j5uJGq!7t z6O`cB$Fr7eO_EqbHAJ_7j>V+#5E2p=QEEEp!(3{D7-dH78bVv5I-9e1-kzQP(K@=R z`wR0jy$e6s{svyF;}3FB(;@l(AEO*}D~BAw~8`YZSU zbA3p>J5<1>t%q0cxqN-M1xLliU#d+PKHT^V%2_yehTocE=zWyZg~}#pa2((M0r&sF zXAC`D!qrUUp?=9(xa*3>8~nGt-JkyorQvI4GV&)K)2uoNzBFz_kQ0@u-h_y6kj;PF zT1_kWuO`1hNQp3_XDGS-KHK10`5$o`GC^!i@^DC#|~dt}c3j@^T#wdLSGeIIASwf4B$ipx6H^Y0cbhuS% zImIM{rST-@W0bT|9c)J*FA{=X%W#U0m{nid zc$}vZ46IpoaY7%G)U9ary^6B`;?#c3$l;-yHv(6R3EpFIZVHkCYA#EIOzBbQt+ z7n9aPOca8J((m8Ac`{@W*FWZoWjy_`rFoA;QfInBHzz$M##_}^Z${gIlN!5=O!oeN zC9yU>A5ngURW{weaX?>axFo+#TIGZ)kx})qw}sr1x(0k8i*UXke#GQyWobRvgh=?W zZINVKHM;w|2u9ohuMI{#BNIDip6>cuVSPP*6FHlkcICMmR+g?nynd$9htOT}HB|A% zw{U*>?~17iNQ~bRmPmeh01hAeF zFULJXweb0fT-l*YwJvvvOb3JD-~*eX#ync`;5pFm*)(YH@_1Su;pJ&W##i>o7^tau)` zvSHkgUz&5z5{wj(4))aIYNwqy$t0@Dn;+igBa60}9bm+JdLrga^rZ*@07i=@{EkdD zsigcd|y0wQP*9>5HPJc zAcfd5@4xGn3w+J<^f%GYwP`tTBKWDKg#X}h*dG*lmn74QtIknzdN%NP@~A}Ue#_UVxnB)2 zU`_Psy-Z1#9ow~)5=QYs5h4N%NcA(WfE`xomDK#WR1dweZ(VxlJl8HF1GE4xk2ui~f^@sWQedT`ZfQgpy9h1HuVmSlMFpX1@t3+<2Q_euB!dYj$g!T}C z9cZ(COv}FQfKYu1XpI3*Po)PWl%+9~ZTwWX*8I3%iDHBKfPw-aYT1}2SeSqBjligPGA9*(Joc@bbTL;E#B3AblZof-|QMbs0D|ne#%H_cX$4oPj zY9DJQ;c>7bw&;&PI44=Tb1Z=V`vR3DDsIk=X`;bc8yZSd;v{RUnr}T2PY8>$$Kvs2 z{Vw4cY)TQFZ4cu&-`28|-hlZ~?Uxp1lF#*{ z4UE*VP7uWw^jpxDo@GVEJx@5DCQd{{g_@Ih*0gB(lL+ZW>go*)T;M#s)Ua~eQdzH? zE+(J&_F$LYeN6wdw0d~F_6}%tdJNc9sm+s0Lpr>$W(3{w5T=;`A*;MtN05i4HIO?c zKO+J2t{eu3NTXIHW9Bc?YeD-a{nE@30yJ)x>5Pg3ci)N!kuhHio8UHeZlarVm!38o zR=)~!>FsQyIWkw4(Q>&pqI$N(pGAw&nW6eF5@Ua6|$DT9S*1qsVzcK)`7J z`ax3)z0L11%%aWQuLhz$b#9vZi{>m#=eg6W88x3j@5&cKp5xYURZ>Cue1YdUa_+PH z!pCS0GMq417i0@pZKJXfQ}@W3xpI7X8MA5{cgReMI$M)|R1O?^1xiq+3mp7tXXn){ z(W4I{#mI+~B`0zk$7RStvoasc%GL=QcU`x>1r&K|Gi9M^l2bbw{kDXTZ;{vLSNYbl z9*!I)?9Cum2(r4{4Z2`@2Z_+Qv@uOIkqwr@wHKRPOsTega62CNDJOsmk;f9bn82bU zR9_cyO!ZzyT}T0yizErwgJAN*1_DNVLhq+7$8BzT*jw#vl^dDznjsX%`Ddzd@lR04 zdNpu<8-n!Df-p+{3BTVoI9kAuB8A2vTfB_uEs<{V+bRj;Fu^Kr@n@*CbFpV%bQGhd zn(Hicy!nkQCo7qOl#ZrXVEw&A-_IJ5;6z5#`ziWCO}rp-xZ4iPr7zai*&n&^vN}8Y z#vgulTkQw6$MO-u!C|)9D}jOkN*3p*fY%8{@<8~lo6x}%7%#dWn`%|$znK37HR2zU zYk*64fwKR*YuRscU`xhiD63sR(b^g?<x`^^=QxDxvo_KLP>~=lSiDXrM(89{fjI_-yXnx)7;5}E{{qtiKNel-WIQM z}O}p$6}{pJn{Zha4^Rx;5Qx#vYttBl0T^R;9F>1 z#45j4L5XwL%%Ed+v$^P%^o(BsO-0A3vyh!>U_U1a6m^rBZ5P6IU2#Dxig@ajm6%^wH7BWEri1c5| z;EFG%>lgGKupOCdY_t)z-UjLO!T7REMJLzH|Jph)`}K>#s~aZD0lX(FQ@X^=oXKle zW*^!pEXduHY5c)3$c4Y+?7Qt9v^6z0JJK>&c*CnCf%MYjLB5hh9cR(&&GRfIE2m-U z$UBz4JpnuNxKX-jo}7LTj7i__8fPUZWl9t|8qmmZ8lwHnqy71`WWmpQ%{@Zt4CwT% z%YGgr9nM4PgX%Rgc?UY|xbD}M9NqwUtk-93Gu(ZWIM}QHD_8z-hL~E2VteW755hIZ zjexCLWcKFADXwlJ{GTUVz{=zkE&Bt+k#kpz%aG`!>6wE5*AGnnm(?f62%bWa3z z#yQ(ZYyi2JP;b}r`jV7*AmPF6woC08cCjhLT;!kd2T#2vKq9ZjrVslQxr+>v{i3~? z8R)rn=w*An3rDGCSKz3`Q~*v%rXu5@Qna#p@RZ@=xE*Vil!m zI3^)L&=r7Af&gk*szu^h2p6tdt3ff2TojSW)XG*PfpvDIB6ns3F|`Wvbnj+zGl z`@R|7;#Dio5S2CIAlp=e0LQM81H=kP%;HTRLkjk(1*v<`A0s^8%! z@C+MpBozJ9t&)P#bAOfd&xwB7$E;`4wqf*ocOLPs*AYc5yn;uj-BTuif<~-u_Mpe5 zT(jRQ2V5zkAreZaybipAW4Qk4{`SZ^XqSq7x6N<2pPCAQuzs!5;Ei}X9NLj(jh(4) zAM+b@Q%o%$S|WAP<6Ud-aF}{_-{)W&GIA{_B^`$%EG`*o1Su4YDFl3oOf?uGekzJh8iov zi5-UeW_?)8k)v6JK#K0fA3^!ZSl3Gv(6^b(qIE0Up*CG_UBUclV(J+K6HU9%?DYws zZOMYSTt~!lSIU-QTuJ%L_yZK6`S#P}7kf&-FnqacY3w`k0;#rPa@VPM9|M%Ylqs}v z;|_;3n2b7+bti#IV>>u_6Pia|vFk%peG*DVJZFe1k(!Zz^~lB~c{qn%%UjZmo;HE` zs8IimlIE7@G(hWmcb&wX)}-Q>Ij*Xo!7t5}XT$jAx<`d z8_RdFcI?+amrw2;E=|6Fb%ttLO5Sfrep|LQn4Z=#t%LvK6E3bm6|3%IKQWASY(dAvyiv{5M za9R9TTA_Y`e$DUIvU*PCZVnPp$G!ZbLNhpCo=<>%Jm=(O+67l@X9SS%pHivUGfz3G zRes?<=<1sx#AtGB3yc+-123==LE!tNH^AXV2in5IK`5c{k=UStNIT)++ybj%?^Pz3 zF|A6{Mn>?QztUbEv0@u-Z3Qjj%+QcbBjs`aNS{qmj*ag4LN_fy%Xz>`c)!x-jc?ZDCb6gY8~2iobtIubuD0py%nM#jue#ZL`!ew$yBAqT-tCu zZ!0Zm^dJLgr{5^LfprdBCRJz3+1a{ibAjr=@YD;!O_gMn)}jy^f&|_KSt0wAk_qV; z&lqK`f|5PM4nV6jy98Nq%840qs9>MXws`okBz;IC-D zdEV|ikCSZyhau?#pb+4yK8M`^QurlVH`F8%3KF{?h+uO~kH)WW+&C%phzXzlb++@4 zI%R1sVkE(V4Vj>t0im@C-eJ z6vW=3I9I1C^7W+EM^)`3It;nFBQ#$hwrIc^nfbT=sb=q>8v@lpoH>J=ScRk4mG6;m zq=TGmJZn?K!CcVk@9Mq0+e?-pfXVi_m< zp)N-VP1BE*YJ#}J9otE-kzg>;;xu39xUWy^AV#*gaWU=PktxP862-JmfYrcsCy~2z z`c=hNdRqpz*Fs7>9VorRqapz}QNUg6ctnV$Hb6+dHRop80%D!!%cTTpvG=-ijQ5!y5 zNy^YjDU1%yUu(`fOpSoky{UZQk)+it`HwY=NDyJREgWo|g*B*(KJgP`HWk;^=`FM; z`?-SeM4@|5cmg+s1Vv0|1&bpvEu3erXKwapFr?y6Y0$5Bf9_8;pCw$F_=8?D^uvl5 zBVZYV+YnF*0>K0XwH9y8eOtD!;Y?@tjN0)TmnF)!^N5nfXDk-L5r*FkbRA1>R_GBu z6<0hJ<#WfGRutci{gbCC1~%kn9{kW=?kUxvc^`kpcCVQ=i&GY#3L^80qOJw*#Bg|H z48Q$6kpiQ@cg&-K+oIZ`-f(YH01PBCFcI?Q6qM*v`EMbp+_mW6h z2;uvgb1=wy5R_@5?T_^ zb8T1pL2)JF+r{&tZn)t^Db&WhaMLr**-Oc;x^LJ`qG`{mrf&NVqDO5gqC^t^3yLju z7L`o)AlYCr0(|+;3V@g?5N^H#j188S(t$`8pFtz4P=1ZT_w=ogifbrf-5urkBr3pB zFLH0t7U5trX!mgjYJSJPsCFE zq!olC-*5J(RCp6gMW3M~eoAXwmu!#rVyQ_wAW9ObN}9mPO{*V2zAiP5c+Qy7y83do zh<&KOSjZOf!uB(^KGSHox=0$xWDqgKMYnT2xq!Ku;>DA`=R)Lx(t(02<`1?XPMV3{ zzWY;}InQwt)L=|CbLtG@AD$BtisExnJq+51Bw~GPWsspD8Azj-YP>4MCoFrh&44}Mem_^I`Kfh37zpOdO;T2CSSS?{68@3HhBkT4%_o6gfqWWij5-kV zeFdUI6Q5i@UH9q>eQH%;J=5xkhcC4#5U{ssEU7$W^E*eWR9Q$yXOJ$Ve z?c*D=?QaXGmpDWO-Yt}!H1vc&L443+Dobh2A(qD(HiuZ%L6HpkT$);nxkYGxY_1Om@(LoH)? zgvD~a3zL_k34@_*fHj0{RtRo-7umNOYL%(aO{VcDYQAq)nMThO;6A)`+qLEd_9F=s zGMsGV#YQr(Jq$fYhRjDoA|)C;=zX`I_iskWOz%EdSBXc%sa>Ay%<^o;>6u-8cN> zn8eqUVsZOz6F&zYiEs=!%$l>@rjVs5hR(ntfhKID>QdYhx-+W-O=Fz7V1+4{!@w-W zn;p4x4Q@&rY-07N0{-fJqQJi6Z>f)RSUwBXP!b$#ds)d96=zN8 zbh{Y@BgTk62?jJ>X&j^qbGxxUl}PA9-PpS9T*y~9**tL^I?v%cEZJb;LNy?nhmu8pt3@=3KomO3dL|J_o zatEU%@pN-V2jE@Zm;+xlk~M+XXZ|2bNDUpD49@p{XR5N}awEpFH-5m&lz3MS-E$Bg zP5w46)K@)6s+2Ak{z-AI6coqWc#zwXK`Mlwvb(WH5mn&J`pbZk0YL#f>-8Av(%7SJ zJ3bSlZh!6~8-MS6&W)}T`IAz&&!@YG8Tw9Ht$?o_9!%}U1FtPYmYYv$=)`t4FvlA# z5Y?a-E+`{Gc@%?3107{MAqA=IgICwG#-{BI2cJ9F-1*N;)yv-{LBG7oQi7h6Q9YLP zEfP8P9Gn_baMU%Y+rDEUxOF)3dk}d{PW_lnDwkFC(kh*amHf@+Gh>_N?nvvu$l0*W zSQ7_%lCYiiizFnCr(~4^UM7o#PU~a?ofvpuKTt=cv4deJA6qWj_TYg>e)Mz~xWww_ z`Z{4Qcu>TJ!vilKbJ3bzk`psd>AxOZ4k6qVk z;cZ}w-_K6QiD}vg7i6FS6=u)IC0i+<+}H=Zdq)-n4LN5FRCivbbbJlNPl-<C>LXm`3$Ts?2Ne$GCiltwDHjABLQ6mM zbt}qGb8FiK@>em$6abc3j1{3@31Z`RnKy)sx2LwX)q^zOk1@dm6?w_g-3e<7sAjm$ zwp>6oFlR87o45ZFY-ys(C2Xgu%GZ7;V6`_yL?wc1vWL_kl40~-HNy@S)Djdla}1-{ z?ad5ttRf^XM=B>gm>*2F*(bxRuZQEU=n-+d1i%7^l|{hH=T;O6i9HxM9vA*nMkO-^ z^yWFHXfhQ}plLt0`du|W0g5hqSRznhy!h_67S?YO7ulRvXDqoaxdM^o021rT#|ayE zpABQ6iNnf4xjB*1{ag8*uJ(=s?oM;$Sn7d)nhZ?Q!_vYqM9IQ@ED)$PaXs8h0qgm* zTMmo|0`+OKeE($iJ(l!~p7m?OO7GMQ3gmVix#JqR7cf3KJDPEgWg-xEsSv^ZxP@HY zRjMKg9K>AHbsok!99X#peM;hl7`M|j{m}WMBG=@BnFJV+@xCpe&qwD8rea!okw^am zv;W&2O>ZcN%(v3e$D6^f$&fnU}-JiWl4@)FUuMtS!3-HO{t1HSM8aqn17?TghRYm(d*KiD z*}s*}Ydb>%VCS(c8g$*d!D-&6CjnAkH>!~G^<8gW`)EuN9;-}@qOJtUrg@$ce+%qDVM-RGYaXQWt;P!kEcR> zK{u#QTKxUf4=eALn8So`!Rd?1`+|eXBC5jdw_~+cmv^_aPZLGlqpMspbBW@^Nz6N! zHPjZS$6zxLIj|tu<{NYol90V(SU2VLCg|<8-M20?QLST3Hj&h_PAq48%b{3U{1Fzp zc*KWQ`YYKwA%mC|&@Jr+K2Tl{F97?*njRYkzo|a(g8i<&+Rt(NpJ3uN)1459`AjVK z_z-3Ta}P%C^r;zzv9mY;kHK0A7Hz1W4cKv0f)IPWN8<1kn%#*dpx<>rIU7XeqN4(t zYIVZ{8Z3*3H3#nf2Q8?4^SYtRUNA#k%2by{L~Wb!qY+57^T&>9ym%Sl@wtl7gOns< zdfsW<(ldPNg+Cn9nV_kLr9hM81tSIs3cgX^1P@F72AjWX6&{&zbF3Xy1Vc1`W*Ke` ztfuar5B9O6*3@#pGkg_HRz2u7k#oNtGfXnhZMRkxFj69qcCNBk^WL7+HD4us6mg%P z4aX=x2{D(3``!AC96Eol7De$G$9&3a00c4@IRyQ%rMHr^gpT>H%WzShK*Z-be4w)50MxBj~;Z95-8`!&{Ft^F&-+p@*>qE!RGWp53 zj>a~0iZ7L5vu(ZC_1w>Pb{}mZ5xuy5u|yxJ2X6gVV^&P5D5I4Vnyo90&42Z?JLq@P zvz>n*)pGWFra8A=!T_q~I>;sx@{^L2#$xMD{xr&%RIc01sL*7$1c<%Jw7x5 z?s_@>l+b`$W6N{Q#4M!fAx7E><|9dRg*=QJHjv2k7zFhTd!KdUS`3Vy8MFohJ@Boh z3wQo0A2jrSK#eu{Z>;SB); zz3v6bai}GO(jDzygJTHf$iXIY@E^3CbFx~)mxjX@Me=hhRYEfK+}+M2gIB87Eq>RF z27FOMRg;7c#l07(Tq-+LP{6xvO* zmq}Z|)e#DJz)V<%pYj=^RP zw3(S}M=eN;r_^Jww~dvTT~cw+Uo$*4IhTgpMy|yd9bGy+1zpX?1qZ4yW)ZS?{jIcz z2}qBL?MB*-;(WFfDSnlh_W%!D9v0y|+IqC2z$uPye&T+~9g#CGrJ%oQTHBh8E@Z6c0$hpwwjQ)htrlu`tg@9Y z2RE~x5)|qFMj6E#uYM7C21-B^k0gHj`+1H~;zi3eOsNG$mIs3?F*-ha$qq{J(>)3) zh}ahx6sJGV%{`RSxcU+{1w^LXcU?m0jkcIV-!?=C3Ia5(%@TYBQ%6@=3U~< zHmj(`OX{M9NUo*mTO>!qysV}pbs^P!&SF6931T*?h5PYZO=sv${b?(U{DD7+U*FEh zD=;~`>*vLVMT}9BB#D@5USte(^&W@2Xrfp5i12wO@{e7N*%txO}`&LxcixqSoYR0w(t1h-1_i1{Gm9xEnuF zAxihN-J~2{T!JN`BC7>hi*D^13P>ty3SKnz@ElPqq=^FCBgj5UUh3q5T&smK`(9>S zEE6?xa+MN8seJuI7I^}dPcYApM6q_9A1156RuL%e?^rCiFvY)R^P~yR=@<7ln9{LB zQg&fhO;k<|VoK5uULaauTaF$^_LD@Q$|M!chJwL1Qz)|--*<;#wE*v4u@nk=jnuV}%rVXjz$D*fVD`WAMrPfOm_%)fq5$WVeqTr=s3w8BM(oqH#z#^WA_Dg=A^@n--MDh%4)6{XFv+GbB**#|R0DY5j7UZKwGfuV%IiX6QIK9=7hmT# z3eOY6N0fb+D=M;V#aAXi2(_j`CKv3qW#sSH7XAdc5wFass6{_#?x?~<>g!I!R*@xw9s6X>7G*Dk=F%suDoTu-elc!yqAG#mf5M9I;7uv5 z@Er@tfswgV@#Ejo<#^?nj<8?MhpnCV@)WU%%v)7&Fq3adyWi3L8u^-cWuNueW{KUx znJ>y=EJ!9Xyh@EetoJ@dVAy7^F(oiL2mkO_s{A4bu3VT zd9rbbLhpD3l6vx7fPSms+CfPOu@uL)`eyarQ@PZRL+Jevm5IXNlLpL^7=IfMi2~vW`R&c*hPuo`yy^{mC>plh(&L3H5+nl4M1-w z5!iDu-CediZiimfd~sjgfRncsIt6(}?n5wCT{c_qrVr$6r(56rD`HKiR5HiceAsZi z{rqr#iFno&R}y&1PQHw(O#3w___x=@agO+s_3Utd`ju!m%g`O`&G0uG19hA7rxbn9 z#Mf~h)^DG4W)RC9ru~s(PB)ixO!+o@oDd^Q)!Kw!t04u`W$8?e|OsqLkn} zWdhvJ&Nw68&0SwpsBRIgOLl$Mw|>}ojYv}5eJ3hD+hF@ia{T-q?ii$Zg&+)V$@f?b_Q!qdxe$t$)^fp&5sn(e z5+*)0kWuL-72ls#{E;$Lzy($G(m7({LNEr&D;$$T@!Mt69KZa6jCO>!&eXOM(cm!@ z&gFIHsfPePw{;8DBelu?gZ&WzY@jr5VfB8LS}7=a%G{eg=3C_!2X6ZLj1bva1KJ@T zwz=Pps_pR8PS?qC`|+%$Q`bP`lfW~^28U>BRd@&-RdXTVTb^I7ov|o*s7{`DNlDk< z%ory?tVs~f@uyy<6gRda+4s2U8*8P=OZYQ3#GiU`a;c@l;E3pA&kXotP%l370nyernGU)z`93{E?;gU5OHx{3ib3f#1Dm19mcFol~ z6{!<-B29bcwA%JSD2LHWfmSx2*tRoPGaNz`9&!jd9fO`_sU2ahcnTo>ixSC5L7$ujXETy`c|rh7pMyjX3<)XrT)6Lw{wb500KhI=8ak z3VEf*7C~bYaVezhR@V$$QN8U zDBMp|h;z^j6GfSF=NE=W!B?VIQJN8NN-@nBFq^*n6@*5Y*h65L)aFIMC<-S4>;cxY_8?52zCa@gu(qinwqDjqg|Eo~xM z-T8Nnp|PvWa?AG~XZr3cV?YR+E^m>)3zt6bUWsSUU~iAiwthLr#!p4{@4eOQq&tQk z7|pXzHZ@(8T18Mh&|ipfNmtmr*XA*Lf}}o*Bb3rxOVFqU&%2+Z?4{0X7P=gC4*(Zfn@KuqovQ!Ik^rDA@)VNh_1(4?)wYPAo>9NwzU`g*jc5 z6c{ukXbWY4=QXvik3r{nnv@+o#ZLP)P`GzqQic1OPMfP7j?(2__NP4PABtZg^Ga=~mN5^9y8>Q)Nw5P4kLA zQkmK;svUW7v_0#Q6E+6>n(Sx^c_Yvr6yxGtcdi+`5K%D)mv)!u70ehqB=NxP%7=?@ zoF0l;IY)$NLkFMP8;Flougr6g$l*j)-cOuON|2Mft;dt60|+`%R+|t*~94O27#{}81bcFx25jpmr0ruP=+ha;oB+sAY%1_{n3^Pyq zh=G`NS(#oRqA@y0or+C+3w7qlSUkJ3jgL6CuL5?~FFBe_nt?{GI!&_~$2iTX8|B(l zb-&|xYAdw>mBm5+%&5(aEZ%rLx3sx`j*zepgyQ|icPyo`Q9HyJe9FB~2c6rvz0nP( z4QiO8dCDnd@ds62QV=`hJ`uw36|4Vzn$nW^a%>5qYo_TNy4iT+;CdH{T*RFIk*Zl~ zp>`cc3wPE$yCY3S>pOE`SEY89^aTIX!z3j%B=h^_hIHn4+g5HA4lyz<`{TrMcA}3^ z)K8DK_J=fQJ_~d1sT0zd`J80!P9(2~%oPOSNP0!OVFP>3#yf4Fl!{x_iCkqe4~Mo6 zIxmZ6>c$p0B$;;olF0R6z%m6nJg!9p?$E!NLDq0{?`_F#uFL&7QR9b>HamoZ8cFN;U^Ue&;+aRcGJ7I@RZfH(@nA zt03Tc5LY%pcvELSVXBu(xR*rio5NfYjGZL*@T@6QMvR($&b%!=(c-o37LSYWO-pIg z!E;kOyJ-DFxY9e~X21V6t5r^OE$gS#PCr(!X=sm*FT9+BUD0D5JZNyDU1-()vy+pg zlO8rpJB60fJIMX~=N*HYfLPBU|D5UJFe>5;7v0C}O*lgADq76X;Gw&GRxXwYF0OqRW##&#hni3Y!>3^X+aH0zcb!9ec2g8TfE11E7+fvF051~ivXPOTZ{(r~T$K>( zQdqM=tEBfilnBUWse_A>jz2v@JKg8skaHL-YnnbT9bBAe)U+yq((GQ4v^-#fFfSyQsi+6VMx&P55;P-U7}@aVX*rSev6_i z4k_~L$o$_n#d{idpw?psQx^3zzjoZT(fE)mfJm#rXJ1Ciq%gaTX zeRa_>MZ6lFZFoEcwkY~&5T96d?KXoysvv1Ce=376cAqD#oe@K$+=M4qCLCvXZMn-! z@>h%(2MwAZR<@u2;Z^gtYU8_!V)ej1r2jroe3*=?5fr0}GNY*Xf)w9txPElU8v}PG7l|F59(- ziC&c9pnYB?o0!?}Z-)S{^|K2xVJ#tnQ{mmyw0?xk;fhaIr)NWu&tax?x- z(7`<7(vFaYW+_;JJi{Xd2V$%PE#caE%JGJkOgi@BtF7Fdl8Q%U-ZO7^{vh|Efa06R zY~z_Qj#s#twGoVLn0G=;TSOKb8M{bI@&$^SLp3w?0L%vK`K~Q@Q!v6(gWB_Uv(Oa2 z$&>cz=OCf)4x`=#WHZJ0g(d`(4S3Jl5;Rd%_n48;e4Qcp?1vzx7iOj_;4fezQnZ5Q zTF9*WFZN=$#p1;he9#iGHnW6~x8z9)?8dkygi=DxYC#Jh3~%jbvN<4db$C9657-tZ z+O@lC0G*x>#xym7p2 z*vDO*7YxCswd!Lu;!(;;T**G(Q-&(d_QKCaa2&Aw_Evlx6DS0|^e(jycQ7oh> zJh#je6|@5mqlHf1$yzJ#Gth#`N1^Q2_hcu<^eH!pON`MA?4!yfn;JUaQD|LyE*di4|pl0ji6P$V9(FUEWO*Tzq zo~&faIJuzdJ1<=AN$Qe|0JoOabj<@r+oaFSUagH9bQ%D~k!B}4jurY6Ova|>tjXGv zLc7m&W14$m)z&cl5}|d+(PrLVcr_JpLKFj@qCD5$i4?8j+X^9la_xU1?7E!n0P(~5 zwo#$xFby|4c~l%Z+odlgL-EEqN6#x_k?-q=jF51KV2|4>N){tp_y*Hn1xw5W<>6cD zWWFZI%QN^jIdZxBF173q$k?@QOCg#qQe=Cu2K5B&bFom1Tr7J0wlws!f8ylk50@{$ zhso))6sb)W^XIc4Skd^|-!sp(axaca43#|66?1uCuE4Pm&t}5t%G*vtneS*il~A@G zIyZ^M_cSU8yhdOx3)TH68{ar8m+I1U6B-*= z%JOZ#ij+U^TSL5>vi#F`G{AfT4OPi`g4utiZcIo|-<`dgU;MO7&;T#cook_@@U8d;ZChEU)dLn2qPR^HL9 z9&iS~Zu=)A3BTBT9D=tI$sfiB`reV>>(6seML!aERJ;F~0bux0y6Uhpku?N1puHLR zF9AGUr{|Gsdx!Lok9CUj{?j;9Pp?qMcFUs@8xWx25(@JbGqa{#N5TMVM|}A)lZP3# zw8_<)XT~5yeVs>_gl5VMUU{>CyUWxZQpO32<+85$N3CW%Fwc7!SjW zD4!p@;GrXS)HMMIMKv*e4dj4aYQ*;Oho|WLfB zUN#BN1HO8UB|b4m3>(z=h?iM6L%}6!FM>~XG&-0*-0yuFH zOP(~rdfT%{dZWEE(h<}=Z9(Q*JIqVo39XnW&K|K)s>Kj+azeWyVS&&i0hd0b@&za- z($uf1$&kKi`7@@jiT;_iAeC@T<$2{Bg%_pP9Ty4b`!OJ07{3z38GhJaekfG?*hp<+ z*R%S*)|xewi!LNgc1jc&Zs(vnj46aI=s`1Lh!6gjp&XeqJ!rGuMlMJ-)(zKSv&4Yq zgI+5=e1EzpR#Exu_K>ZRlhfdkoXPt8M?3s7vQ)zUpLwdnFPkLc?#W|EyJUQIe^89+ zw%sR}zhts~Ord~s(3pAxZ|7Bw4)A52bP`S8MkB%Lf_82vrJU(amk|lx8){C(! zwiQ!8=VnL8Motr*Mvwx8#S9-P92h#zThdK~pjlAk+XFh+?u(qhekt-?bjcglkYc?xoieXwh9A0c#IZ%9r4cI}@L|UX zW_fRn=j*ESDZXl_xUsNv7c2arkx1K8QA6ObQPIohZOV#j3ClXe^W2DiPRvF3Hn2HK zm^?CT#3yyC^R-yE9Wb5{y{KBH-d}4{eBQXdq&wR$#{H}qF6+82AYu3h6>Iw6!QJ#< z-y};GK-$v*;hH)j$6kwy2{#FcpaM$+v54n=q=AuzHyln$c(QiE>yi&Pn7fQ#XuDon zS^4VNrT9S{om$G{D&`yv)H;^xfW{YcmWJ=!CVY^(xDGoYd8^z#WxU6q`G~SJi*1Cx z+>4YxHJYKQmr2%Z#*M|-eW&=J%i z%BEj?nolO|VzP}7Wyz0N7oRGbnlbRufd>)JQOf5*vARJL)AisE7!Uk*nKZ?+5Z$7| zUD-3Wwb;SHz=U=KAHr-)Qw&4@_cH|OXm1(e6TPh6eseP(13j`C&qkgltb8~fT903` zpwp5V(QBPO9umj8eu@ILL9JQ?_GIvZ^6_|6m`VhTN`5~bf}$-A7;!kLAq|u7+*w2f z>y$Od!HS-?TJXQVVw%GJmD;)t`Y>R6<=oiGQ2Z;Nq0RwIXk`3j*Wi5_bA7C=w>PF8 zGuK4cbJS)qg@ugk`8s)45k}RUlG{abo~4kyUz9&6VhZ_H1N--IFB-Yw@ zx2l&@UqYy&Mo?7e_{prFDj17iO+)zRfo#|olc2Yn1xa!MjX_&e@V!QePQpTj(Ml{- zr4i|!7`IT3skR1c61XFCrqGC2Kl+Xm7qvS(3JN(LT}888p9HTSk#l2$=b(Bi5qFP` z3Io5-YKg}#HgDLdboWb+X?S|sSFUsHytY{HAHuBg;W`^LVot|54D>$yBOwGH)BMI= z<0dk6zy@8$e}-~>bA?m$%fFfUB^Bi(Ne8ou0)m}NaVAi}QIzX$Obe~eKtM?p_1Njx zUOvf2w6!N5!@H6fO0Ws14#+)?RmTb*U9ITwrZ}1hd!KA{Vw*EO;*xjf%2Z+hmC@qQ zyKNuJpzx2;+iGG9?ujt2OrHndRMuq3?-UG`Yiwe1L|*y5(f=aq+{BjsWKaCRO<9XM z+OEKi##l#__ozBH5+?Uyi(L(6bTs+(elS!ZJ=|9W3UU000yVgQv3|lQEaCE>jSVSC zPjmb$cokl8J$q5xD>lQTHU97V$m7({fAfq2eY!}Pm3k;CJlG%1k=ZX^wltY)I>^ed~7rg}UIue_S=HQ!syWj}z6_tlp= z`_Ctc5t_znU&AZw-v52%4%!L#wUc~JFO;LD)SZ84ZW(xXQVJ+NMRey2z;70I6c7HZ zmNg8if|k{KeT3wJe3&2L8Z)UiV7mK^eR{{u2x4zJqedCEUG-3*2Sqlve+(A3r3 zibP+HMBeHr%F?WK9Ud=JfSfFhePrNvVTX}fB^)7c4q?J` z&PcqN{=@1E;lJQ;hz-{x(z|i#(8r?-+tNT^u!;*HXKYcU4fLU{Qx$o&o#AF5u&f%F zx-4>?MfWwII~eOTDxzX`XxLB3$K=ymecZ$|0E1x$$+C~eI_*gJ8ydKFEUf?6VH%lK zhF!9j+stQ#*;47`qk&%!M>GgFemr_WK)OFrYe>)EGX$nZ1b?&j{USeqtweZigShwu z-&u4-&Vf*)p5p|eoyN>?>g!H;NamS}TgUtkCpi6s{?_M=*3EbR(f=>UT3drNIUB2J zzDCHTNIHV`s{x}D#)d46tSOv2xcH2k9n}&a zMTyzL{}b!XD1aeIX$Y~HuRA{`((ch&**9t_$7RUg4rKIZi$jPJ&e}ilo9Ev#b=Tod zYLL#w<|A`rudin+jsU#{y!+WZ1=(CV>zC+oS0aPPcp;oFwS(q%@@6$)uv49gGGn~RwmY)0JX}|Nt_av-)^nuSf#hCA zp5u;usEjsu@*a&K;@R(41qFvRknT}X(1GJJ=xq!6r)^9*_Tm4xQVfSBN1Sr%&+~r& z5rUwNMYW_b#?I+zZ2JDdaiJG3ys_<7!4;LVSXTN#qmJ|9GVfgCALRts4va$m7b zP>$bt5F5xuw5n$}SYc;7q1`e+h*&OKMRcEIao^%GW}SE9m`r1z3&efo!GDj zr~FQ-1V%ip10tOf^ZkI;j#Bq4gLY(KU?>4$szZx6NAjc$**qmxV4;9<#9%MLNLqa! zrL7e3;&ZU4E;CYC=(F4Ydd>E%`AJG7UmMy657grz7@Y!V@7iy1Ryg}NxAD2z!Q9{e zm$JXsXg!j10g*uNdE{wUOx#`X515UPRz#kw)PUTiOr^#__CGv=aKBNo55J4w!*Z_;O#j(^4kPll`1Wbr8!H9UkDM*51@> zIzk;xs_vE3l+64>lDB5pw~+^;0DV4iT(s1@k{RzgwP~y?_!Ne+WG$E&2Ne~zn@<>u zIVEsVSC0JYzd6e0gi-~3bC3t&B7`?W{1efkyB%g+4NR450f6{_eekx`m*;(=4-D@@ zHR(_~BOCo9&@PFqKB~M(LIs+H6;p2c!w{@P$UwAp@6!Att2rP_ue2Rl^kE#XClgpW zf-!U9m_!l{4>Qg*s-2mfBy0<>l}bAc`ubA&WH>g_B0&$JK*FgK*K(O0_wrrSvUXJU zP0+@`$o?l^e0YviKDvNd;DGL(pGch6v<3i5?%ziDR-6eJnxaFxtwn4vSM0u<;Y3td zlVln7W3V%j8dQ3o%_|t2rJytmp$u9Rix!FK%_3r@k1CXfLgJ12YFoK^-aI>{@l8d6 zHVEq}?I8h-#q}5juQ9Z>K4Fk2!6et8KhhM%_mAXD-q@;#d|QN>R~79aTAP5=Z#YWC8N#eI~DCML`P z5Z*YNOA1RE=UX)iwo@JoPsm{BpyI-qh0;>Uh_xI9jz}jQB)=NyUUC4ZHLqrp;oD8> z5~)!Iv?2ekeU~vAfajI>J*W;q4!npb%!Av@;8qq1FEmFJ;)5F!mu1kt@eBP&-W=Yo z-zc{(wx*g@aMqjT*lzaKRMPP8yo46cr`jbpP$oS%cdQgu{=;AE{1I7w=^T5hD%ShG z4-9aB=+|ye6pC=9y>rx5NAEEG$-F`v zv@-h?c)Cx4aeENmw9EJkZnhr~?ALdhm#GPZFh!bcicA8!YpR{;)k9yEo%LkzHy6O! zwx)lsy+SBfs3{+9FWh_)e5erGi}uybr-k0;^Kp*3klk7@Nr-T9l?(duzp};oW_x*d z@E3_AM`RUu3_Sk@TzW|Zj|#7H9O@_gL%Ned$1v{}PXxhrbEP62lxFi;Qo~Jc7>*L} z2QH-yI=>gNPK>{!c+m{{D~{M6!b&h4YwtC(^hxoso09%Q3i`8CV@Ta~Y>V`8(02&F zAvJs7bf#Z=YPvZH4|4lhno;-yYfCze>i%6NZI6Byr2CWexWl%(2OR+mG?bmqTV#`0 z4{KB>_nbjiA!;Mje48C8^63%Wp4426&u9qzs8sbBmUfsxr&zArKk1D`1!Q!meKPei^^7w+MZe(7TE&bE!Ffrwq7_Bt6q z3@RnEkFoeH8NdoSve`^L_w8kpf$e4n`p4*kw4BlCzytNu2>;Y> zl+l7Y_WKfSa!1-CX5%NSi(ao*-Jp8#%$u{juICdYMG+~d+}obeueBR-i*ThgOj&G| zbZdxn%sdo87|4n|XA4p$`qpPiIx88Wm`KuWzC4zjtB5}nt=fd+Jt(#AeUOhBBRp%t zwjF@m{#6JocEA|fnVf{@(rOaj7ov%8X^zFI-aT)bxcwc2(vtLb4BEOoF#!%O5kKQN z`w~ORV`)HW`dG@x$6c(vj5!gI`O-Lk6UU*44%ypDEFNz9Q0Xs^F@WSn*^f%vb)}uX z%x>W|8|?K)s@(`W9F!}icX6!3iTFj?kgXZtX3*nD^TS`q7*nOUOBB=q30(nQb@4Q_ zM2kJ#h91q#42h^TtZifuO=og;fQ%Ht>1E4(DHB*)S_REvDo;tOR4jFL!OsmVY+&Zg z`<@k5X$N;&bQ9aZ#rPzElKJynG^Py;6US7)oYc$vA{r#hfRIp(e7I_H=1R+n+afwEvegAVcsrgl*!8pYIV0?qY&h<4{Cq&Nt+vCcYW&*2nWi;>&Te_{u>q zSl}d1+39ebzx?)~kHIw|2FrUhl?0m6*uvzJxLOg4lHPG3}eUuZ`QNbjRDY_?pdog99CQ)mZQ(*tjYH;%hNTFk-6~at(1OXoJ z@{|TM_h1=1*ZWgDa?9R?II6(zFNT$n!r!CK<5(G5q#A%xHiXPG&UVEt8kxjb{Bz!! zVfBihq@<9ez-<-&_W*zg2-L4_T1Q^WBQ5{X_MNzMSL>|T|It1`T459nJ~;;_>`tQV zdsj@_LbX#?))mEy#>=eEh#8o*n~QyTd+cg7RSjaS>4v?z?margy*~mqs&_bFv7B0T zS{;UqHrK4Tac`s0%8Ue`xm<9)=FK8*2&{IHM?4eB1n%>QD#S&?aE*qQe)?09DU>qR zQ2`#%*@jxjU7)0pzVnE{2h)0!#`rouzSo(o<1z(3U4v1Vrb|3!Ufo> z?m6h?If(kYOjiZWXXb33lXG-I0^|X1q>y;O|chGGti=-G^&apnL1>UHJ4 zZBi7|W>hk5uRHaV=&S7acbZ4VerP=D%2iQ&Qc_z{Vj>HEYIb#QxMPA$rlaEGNN{wZ zXM2^l2owOvSf}Q?xsoypMf$R`%=>ZO+*_Fs4D&Vm}LnxEHbSw(zslB+fD$u9c$R%Q!&l-*VH=boO%>z^IgL2NCJGEv>_kCn=$G?(F+v)wO-Qree|*mN)h z4;x9r)`_xywi=SUQ{ra8DY-yn%Y-EK5cSAQLH3(GZq7mo0AU01X?p#HePag_E`Tl9 zvdyOGVs++MI82P3+xZm%huie_uq|zp9Lr0(e~7di0`=cd^`{s9O;&;kUK#-G0jCOU zS+{w-qlO<3r87No-nA(Wb8Ky@U(|5`0%*D8C|SKa)@pjl)k{bS}E=%<^&Jg#D$vbm^f|T5Q81A)&;#4s4 zVV2hTdv$D>-@=s6~_SLb>VY##uQ zNd~@$+2p(oR^g)w zXJSm+RoOTq46x<{Xi-3g^8eZ01mU%@{w9K=a20^&q+t3YXo={ zlGpNk7hP#n2$#ij6yJX5A__>?Zkn#l(g&Aa8yCD8u^|oUExWAI1BMV*nss-*`iivJ zOig^GMpx3%AuXOBtlrid)u&nT1c;zb$(KT7uhvg(8v849UoIFvV}w7;(7J6pE}bY? z_Bio`Jsk-Pf^A}5^NTq$hkkA8JqOp#O+tEXAE2S{pI(zu*QxLiu6PE0crIVq=C_Ih zkSCZL)|d-b%*|+m7cMf0%D7P*VR!F*ax{p3bso(xvo1Yqdts={%P&w&x81c;IG1ro z-(x`SY6V8XYd9P_{x2vrHG%Mz(9^31C&!V~;-YAiB{QYEprbg~Oa%x|^ANcmfB;6M z8)sn51d#eZ+Py9TfeWi2fxh+4eq;w}pgWLVli-1~w@y_~uBvWU94)6S5%h*j6wld) zpmj0Lk4PO@QJ#@4!2_(Da+dC;v{qx!xX{PmzU%Oym4(4W?XZov_x>_2V~;icncdS& z5pwaUalLAFgi>h17i_;T!}x4nQmHQ}>Gc3Er|knG+TX=Tk^Zd&j03)>{J^00sVAoz z61ukLAs2lBD-N0wg^^%;72pQ$z)NxHs~bNmL4;Pb26C&-nUQA_@%h1#k`no9Bix;e zg-xoj0e7z=7ioc%i?~3osxLxDv;@hn^u(0={-+c)An%bmuFerl{bN;(tgdnU*V4^SK;O7=bza-NP08vk8%WTkZL$_e)7WVIEQC+iXva|_CGt0=ardd& zGZw9JZFiVD21{LuIuco#)J18ISWCQOJtqCDH%PzB?+`4=712{{Q+u}ZgsAk!SA}jh zae?e4@hg^+z%_}*S{wb;R3A9Sx@zQa`L3Y{47F{|-&^NarI7Mh$=sNcph5LE2T4Bp z1_;IWj#f6cL&+`O4>}<8C@uX{|Dg+osV#etPK#QMk>A)vI(sM`5(M_xUs*O&$mw1# zAH*swbE>UKwbLEcyL#S5o;pA5hV7sN+4igTcB_>CXQl zcpks70p-%RwG;iT$O08Y{-c(rqkT2-SzAcZosT`nun`)x-KMTnx84YAy3iSqUwj@C z%I=xH=9jtEjQN#^grfY4YS)^8Z++S#aNbzvLw7PKzi-y10T##3T+p+#Xti2#Y^H;RHbv+*_BYQfO=9c<60|n8LL*5U_XM zt&zuQ|4xdTqbY!%G#rlC_Hvhl6;V3FATdLO0mtL129*S4z-hoCwW0rc1lMYf2tYyf z{R96=Iy2K8R7+Cj{O49;Ysp?h_%jD|?M&#LM=1P1@T5SgpoM1EMVZ5+nXAMR8x|AV zQ7^#SqTfNKlE3tsu(Io4tVZuOUziIve3Ub&GS zIdl$1L{q;%G=QP82uO^?HGnFB*rzg2aSdzfcQ}?5OIqGExN?$|!*k>p81Dm)XnIZL zR~5t}X4vmR3l-Kdg&cMZCcfuLLXOYC&k1WKw5(xW#? zN!^+0bI62EYN>N_%-2OQS8$X?7987*$>x8--;R6RM(irxGupZJhOQes`)^-|t;rtJ zqPb{7j&^?Hgw@)0meF7a{eq>fj(AL$cfl3>`C$}QbVA0=^hz&gs_eTs>z5wmEw>1W zLP7XB>I($LX2+gg4aMFiXbFE+R%wcrnQmb{Xa8mu1~{;035Zx0sDwKlP}%N&^jUOn=sFVrGyP*vNhxIQS$v zX{A+0T3>o!?S~PdiH|hBXUFv-2)!;Ec+>Kwqyg`*ijG}8tJ6q$oa!N%gyuo?A-n2B zyMt{diG*o?6Pk#c?kV#d4^Jmly~!rAeV!GiSk&O>1Zm0wyT`c!P&`&e%MUnZuz@<{ z@;053k{ch`V$eeEIrRHpc<sf%meMFlD6oXk;?75s~Fr|TM*jD4u{4MiOi`rhCs z+xM*7p)P5eArFP+=A>0Lh89}D9maoR%P%6&(q1mo_Wl8HBubqEkgA3GZi{=e9hZH( zUbQ~%^B@yebmW#4gA5xW;Z4iNU0K2wtx^0tsR`NQpc<8ir7!l zsHh#iIfJ0Kj@L2W!?S1=j4&}r?NzoMPX?%L`jf`}U~muq(aOFJ3(>ZCJmH+On#A1# zfL>MOga7~l000001E2HY00000U~|IY00001vhraPZwpW~a zH4Ak8GGZp*u8y2wgAwY1ydXnYHEYY*JI~VuzZyT_5XeK-Y(172fq#?~qb(}`Vya1? z@LTinX0O2J)FzgcFRr>?A6@)5$fjr3jA@z;_rRYr|!HQ2S3 z2gO(CpRUlHS8Rj1RjsqnVSB5LX47J=V9lX$o)G3_*2h#ReR!w2G613f?W#>$l&RN< z|AK6C9J4V^-M!$?eP}zK4>+#=JG^QocEk(p5VO|Rm+S0p)IzSq{c+akI6(5SziH!o zaYi!~?$A}t&<}zrKUK%!3Iu{eCjU)s*hd33;L4Aq709j=01|<~move6Nxw^$I`L2l zS8VGGGo+u77!w7FzlwX=F;EE*=E<|Sf|_P5te!tiwl_>O>tes7s)ibr%2m%A%zHM( zH%#uVC~k7;36DwqJ4ykuQftTmVUCvW)+ z&bg)LL_ZN#?%xNw0s6obYb(bP{<0MWG`>iS7gT70{H^0ay@EM90VCiukwr0CRO(TP zLHilE3$6b!g!XOT2$vJC^sB~$Fn1GWP%$Z$dw%{yi>oUYMO9F({?qpciUV_admvo9 zL5l+*UpzSpnPw{YbFs2Cy|RZ}EHD2toL^gE)`48(;Bvq=u~yZh`>({r_*tuo7A7Z| z$HVAtANuEkzFvnXr^M}m`QfBopzhgW5sqnXJdWzy_86h!+Qq1Fr`$gWce0^uv74Ys zG62e|wj8_rDV_zjMti4N<0K%mo40!{8Y_bJkO`=pVWz}~sN6mzl4vT%9W06v_Pk); zXEwsa5(ojXnLR3+AT*CAGH~+8jfyzxx-3cxI*o@i{&x9$bQ=h3jD(O;+`x$cmT0=B z?z(5Yx%(=`Gd++n^rmJo-PJpr`cTM^XXi>w@47}HYa9h|L8-m~h=|~?PmT!SFysyh z>CqX3F3G|TXqPa1mc5lZPviO;b3`cgmIM-o1x!{aF){)syO4=<2J_(ZTH&uJU zi`E#*R;^*4kVp(?%cG-+Etm}zoL^vtm+_y-5|G~IYh1p}7gh&H5yRk5r|X3)Th}*U zf;YeMVzw21E!0EISP8^gw-R;;5HDn;2AKU0*hn_+H4Ak8GJ-`)_ItZ$JD?q2bh`>U zV|+x-96b4&bYuN%Gj&e)K!>W>dn_*k|0pR&T2Z=a>((nA;w9pSIZqY_g|eYy&vP%V z4r>C2m4^3pzUE+UD(_zQO@lx8b)In>+51vxr{Ytv3+vg9YayfKmp1!y!z>jsjW{Wr zYw=mIR`tqXH zFcnKt)wxQ+c+k|2>idVvR%qfgflU0%wj7BBfv_UnW_)rp)Q2ozdu`mFktvI+7q9D~ zQUZPM34K`+-vF+%5Qt8*3Qo%(WfuF5QyGJQkQyT2Njup^ zw*>FhPn?UYZ$NG=;+Kg>QY1e8Sbjsx+~<1pk#!BB87pwNO=^P1L$tv;L9Z1SK8T$h z(>Ys>c%g=Q!^Hrn8!Da`%a0p^OTq-r6l)Q*0E?GysA$0M zE%z;+nlJ-nbBm=f29=g-P^5#++?3_n1t{+Mz(7SGPf4w%2cIVvjbX06`P@aA_zr$c zW9A*zUi!Q2iV3@(A3_{?E~&`4yTzZoYV)cgVKLL*a{6WlD-uT8KSMp{<{MT!$f`^; zJ$YE-XUrNX&EnA}9{p$q!C zp?xahORAQ@V*w$a^UBe~cT6uuh_@SywH&x|_nP?RM$EWdE;WXvos)I}#rT08}r!{umD~O>t%vLDy?X zZA2dGCOT17mRYr8`-^|!=^rQtHUnM#f1s%5l#XL=0kT7LA`$BNdJVD}*p}1W0Ao+V zFQ1HyO=UJ=xPg649M@ujGO|nqOuv6u5mN~~R8w?fsQO|VbvykC`ih$z7Bs&C9zf$S zxTDyj#tE5<0BHmuf~xg6+AZc znY#pb(d-XzfkP=TD~Re))x%mYb-ic2z^1g0G8&t`K4HjTBtkk4>LAGOb<#r5_%71u zKS_;w_0^Zx%1uJ4k7iAkap2vWGN;xUQ1Ra7e&vG9yb7u5V6+iyopXje=iLgHPG#j? zl@2aa5QI3HZ&f}6i-`9^0FGuc*CVB5a;Q%_SiK**UTI37N{I=QZ-u?utE`fUwr^j2 zWe-+-xiN4_s*Il_XjF=l=80}Rp_~>muf>C_K z$>5p*0d(RNB6(y%GIeJ=ugz(dM$$Sd=h^n=Zm0Cu1+@Nnj*%i10QVO{*caPANMgd* zvbWjqGsBVh0V|#?0nmzY?&O9rF7Mjb*j`E(@QK9fx&{~M0@Wisvs`z1iX-d7v?0eH zwvH2OjeptE7UsU)^G(BgsGwVAqsad+W2NYl&2vTc@Ern;@TGbc$SU;u`j|tG1wd76)JD59 z>H-Abz|SKJsrl1~w!bD@jBJOe`)}d$_Rbz|e@o5g1aFr6b5Gxy8evUXXX%gMu@|xf;emuS<~JxxK)#Ug>MJZ@TFf`-Mp?kz?fa#fxS+4`4m=x*-&%i4s=ZNC;DA< zEApnbv=ODVrU$5eM0u{GSy~H)M=J@u>PBkrp^1m`vAD$a1OzL593ilqC0*eHlF6`L z+c;iB)SuE2ZOV#_K+e9aY;tW4^yCK+Wc7|pj>N&1MGLdeGb+L`ADUM6g+3n40)^^S z-|3a3OMGS`mFlBV%`SWzR#~Y+k`Fe-{jZ#;Rl8g1wB(T#4_DRZF<`Vv4LuUROPMpb z8CR4pjWCw)=1GffYTr^UI*oK!CZfoHpvRGE86gZ+5QE`9X zFJgd{IK&G8e!$|U*ubS3<_tmoY^*as-~)1Pc~_1zjZer#{CRt~^`ufF{KrDbqMM^W zETI0Z{{Pa41ueosMs+2ErN3?=F~{#%1vbEssmFkjsn_Ed_7x*h-|;eW)0t}o&1tS$ z8O>OVXA{CW9{wBRDD3>9y#gf^0s>c6%e*^RmmUUen$r{eZ*FRdywaFKdj^r|HtAQ$ zYm_Q?zk(-MZ)STK8f=YMV-ltZI;EDOgQpq7fuI)D()G)b+E4SQs>+O&=OKQ2lcL9E z56_SmO$ywd!Yga3wO%|$bRFKVI8dllvuL$H|0AQv-v1Ls`|3)2J0feClO6HbXjQ(h zm|W%8vV%eC{JAE6Ku<+t6@IchM4?&pv=az)k%*6cDQm~!ODLp(qbbi6P%RA7Z#X4x zhl@G33&vv2b~(4b81MpY6UVb1!g=D?Kcry@<`wCvD{YNWBY9arw_CGjjlo+Sb?Cwu z+4K^j@4^qkBqN3Lfu_X7WCcu|MHe1WoZAKCF=o3Q+uo86AQ5WEwv0vD7?Gp9m-Csb z*M#eW!MC4rrwvifrlqCFHn4TSDQK{&*F0vn>+U~h@;F~A8`ur{MW!}LnG zXq)!p6C8f^fKzM;`kZ(P3Y~s2e_>KJ9sd(29XXb;OxBv^p`6u-rg1zYf$!nIB970> z8_*(AKp-V`T)V@ydO;#QVHw|8cTkIoO~Ni5B`7}RZSneA5>dVZ8Y6iu50m`7n`5o* zF@C?Ys$D_~(CAt%ZY}@E+xPizc~?bvZhR7Y0uvbQNHcTH?=MoSY2#}N{&77R^R`-P z?cAuWi3@fqgghReZ&V^UZ1A~=ptOu_I=yH7CsK}&vaE}NB=oL9u9w!iWG#%|ilO#p z1y)ixCzxLst3OJIntpdC_=L5wbHiBTgoG$5*}825TP}=$T`W0+E)2PD#TQE*tTepC z-M{w(GtjP(JpHChWN}-I>!TfxXjCaSJO|}6#hB+_0426lY7*MGP~?}JtR#YFc((EL zR8`{a@0?Ro6IL>bce~;#~Mpg7>gU||{_8F(iE<~KWya{JnDn{ZTkg*6N&T5-o z1&&$4Lw2XllOaoRII~Qcpqy)I*9p(x%@i10=4)M(rTNo%b`I04AAB4b(0^*I>i${QMp1mHNJtDxe;z^lM9lgUG zjB1pagLy5{d_uG|$1mWSsA-3mYt=-hDanD`gik(s+c+$7Ey2U)=6gU2rzOPXRhf%W zfK6PlO(dHY$J?e6sqlhx%!exb(?}GdE_f<;bOJF`jwz>2OJ30ELsv?zDfUSUA%Hr0 zG2KPKAES4^O!C9XpQ8yL&6#JGj7und@pBqT+_rMbr-QWc>*1srPQ?Ah{D6FWPY6)Tp?F=s5~8xmzYD7(UU>0)JE7P=}&Tc87>_lc@gEv z$Sq0`7(vPB?-TV=Y#0Dnd}T@=dx5!Pl$;|8@SJ=x)|nvj!h?p?qcqh0x)(7}f2u1b zksroT80B4b-}~Z>N(u*NWt=@VCFtz+@gy!Y7BW?uE48E=uyd13IkLCZzFjpfgY@&R z;j>5_-J{A2oiCvkO&QOMWV#cy&m) zS#DE2cEq+S=pO*wNVCAlP9?G4Hd8BaN!KO8d}*LXA_b`Viqb7r0sEx2o(t~|uW;S>PZzO-B;TMNL&U4eg{pqnfCVqj@#7vPTer=Gw zlmjGU2|KtydB!Y_m~w(M<5hSvR6rUd!-8vXXjMCF%T2p=#&Of#+z}Y~0n8fRUW+*q zSz~6Cq=-nl$G?=^_@=~J3Gk{9Ph#>T+Ge(#0asv;Us(j_eQwYOqxyk6w0x51Tr7$N zvoqTPQt`F!gj}qJlyu^1eMqyVnNjrJqvf#P`qx2}vuF~*-y!JM2$If&eXXFPihbwmlj%}Z~>Fi8a5 zPF_#-d{a?qgYA4{J`x1&jbtYRBl-VGLC7+EKCA%E(-`C+yz!5*XMC-r#sfJs&x&~B zY<;zi5Jc(M5^X=l%T<32dg)7iTUTAgXxl*YqBn6C>j-a;UTwf4anxBhBU%pQ3sBw( zGWOmOj^8v8!=rSj&!eqUCd&wwPM@TY0EEEj5HEMx1;x2!P=0UsNk*=6zFyjNGkMA;iXUxxv#AgS{ou@kWuO1QPX}+c!ePD(I zjRFk$G1e_r`#SC`(P2@$xvYw`TJk zcZYn?F9oBVL$#dj7d5^=(yao~Wb8s4`*Lm=T$2=>`fTw zr6eZ5=B=B8+Bvqox-dRu*o6sTT&Mul@_DtUSJDeBUXBm7qKq=xVmZ3hG~-GjBA(w& zhCSoM2xZNhj$~5b6$8}bTUb7Eo*i~==yCA(?V-}1h`}aWPE|%sdt<8eZ#4X>;awv= zYpqEDdpwnrFnjr2mUq{<6s?p+7tOHqQdZX(;fEIY$DybfRMIi4YtBjRDI&R9p|v7w zv}v_df}|2-!WB4|Q^8va7bHC*b)ws1?lc0AdxWrgm9W^U^_%#w`N0JI!8dx~jsW2m z>J3#K{##j(nC3$NLT_Q#%#uU>NAilSu(bom8yf zu{ekT@7GLHSRuERmH3eC6e(I%;Yr1dqoGH6QX>3`oT-P5Z3Y#pD+7c2GGt3f$AitT zw4^LrVC)|nKt0UPW0}V`@_4t0?yiI4HrO47jgFiD!KHMG=>m&)t+P}J}LZa z*&|Y54QZn$1J4FSJ`cD|9s8TsLMCZ4T=)h~u4J^wUx?8_P9i%orF}(E989<^I(U#_ z@Zj!FAi&@d+&#FvySoJvEI_c}?(Xgc5AH6334@1$%fEQ_s_yn~zOPR&ySsYPeMCpo zHx`MQCE`?p}aHyN-5^)P!-L~SJe}URRXJ^QGDc{iP5tL%ZXvy2cRz48&BdZ2IsOARvwHoE&sU8rPVbRzGc=%pJwXBW;K6;v6< zE$r)@P9-Q;4N4!jbGF~+jwcb})_gIHqVIDe`{gfK^#SiBzy2T}bux5qo=NNs5kE*6 z=Q)*ByK|({@be@qIh?5&j23S>6g_w`I%)VN6RAAt%cx!_Ji+!Qt)=pw)LMP#ev2>7#h+ za-c{g_04TT%4OFludc9olA9J%cyVY9F3aU@IZbbe#Nw@!25)9{t+8SF`&-68ckAbj zKGt96;N{&vNvck@q4;JF2@qVW275Jkfb5>-#UUH?*~n+Kgc#T zwC-m@P63v#;`%SRyVbruN;P(3@`=?TXRUFBM^45*&7(agWL|?H0^4vc&iB-2HF#eR zxh5d%Hof@g)z89mK}uW3t59VF_ZodB2u~>;%l5Tk#Q&3?JqFYsQ5FoRC5(hXq8ISR z^u%O!t-@;377-=un;61fk}oxH1b~H6RISP`Pp{8|LEZZev`e3O7Pi3tQ$lgy+B>9J z8k>w+2EqJhg<-6La^kRR1+8Weq3~_~^x6~bUz+N#(uEMjc|l|>HZ+_`HY-@X9mcdB z^}c*X+q8d`HnhlHopfYVNuZ%w)#8VzBLAAq*u&jr%RE_@>!1@U1BTsu*Pg25rHmza z8BE`arrj^@o7_of*u2eLt%#3aHk|Mn4pr+sWn}}Tgx~j@^w29r=FP*}p|!@DE`Dlx zynw^zLXf+_i_WcB!zB?zso_#*Sp?_39F)`@Ls?1}G%^Y{`9VHn68%1wy0%fyu*Q!4 zPj#{Z9Yz=D=9nB!A&rk+usBtuJePTac&#CTcl+p0`W_;$a#udsdZ>MrC9N?~H9h}) zp+Mk(*{ud$Lw*{)Zea}{R7NLo8~fy2z{#bn@mc0$7cwPVlXyXSrfC(mR>?RKLbm?m zD}heN#oLSg=4{nx4-=#(Q>201^A3t}Y%^uW=sB5(#KGXHCQW#`?k=NRYm75|}zCq(Jfq}8L7Y}ESe zyRn+Z_W8#sd~9Q$mnJ|UaV9VNu2~O5>^Q6-mT;IoAX!+GMAESuTdujZut}vo73IP* zU-G`OL2*#F#}CUCXD3lXQtQ@EIDbrgNQg$+K@rtsRL)v8G6EOv=OWshN0teAVU_yy z^H?G?`$EsGjPon;#Ba#^AM(ctZB;7(tRsZ5!@-Re7Pr+(|Mkq9X+GsPt98wPWp~6B zx-D(~v^QZ&K1Ol?SmgR_LwNta7*js=xFicz9~>NJKM>~~qhSl@x5TU%53))wl)an< z&;3on$y3k=O29da?`?NE+}EP0uN&|liVzdW-BwT!l_}Yqmy!=CugajMP! zMQa7s2EDc}CSYmPHn3Nx9PrUdIZrmgfT$`jM(SXayC1K}RIEV6g5a14f73on&F+i9 zWM%UFJQghCUxtK(Q~P2x5$SiA@2_K=rl8Tq`_<6V-a86}CC0JS%?>p(o@bf;?jzWr z$m#3T?$_PA&L%<%9?+FhD(|R+1~*=8G#%E7?l7zN(lP#S1fZ`~gj7E_uwIQA?~4j) zI)jDbNNu@MI2fKM+d0T-{@EbQJS4zR>Kucy*p!-MKwVFze-QmR;sNDzugyBTn`>9B zs&e-7_K+#kU*`zfo-1T|QCqT7WWZ;BD&6dDtr|}fj!j29yi3bxa}GVBDzEF&9wrA8 z{u5*Ba$P_^d-@oh`L+4B58A&2kOog}VmQlExZAJq(lb;OY0VGB1DQ~44EXw5zF7`((ok54HusZ)nkxEO#TlK@ z#M%rTD>!X`ysTZx;K z%0d@!8o^3`KDhMsDn~Ge4Ub$z%bpu9qiEBn;f45qoXMH63}PhW zP-n{{$?b5Uj`q_wv2bjo?l-Z44K_6V-HbK2s@V@wnOPzt2$zL`PA_lHL&H^HrbK!y zO#q)P0CuB?DyNDG#C7b3;pAWTCxMR->czmpn zrZk<)ew?B(nfd0&s%svMm0&})d7%sx=miv1Ag_ytgD9dYJTJU?md9)`AK z68p67LB3G*)4Se~&S$99MNPfmbPOC*!_YQ}W|B}#cpbQt7QEVN?)6+?j<&w15prJ_ ztmD%n$0gaG?F{PG?YuvyB33Y5%)XJTG_GU;7J&sD5Dw@s&fCx&5gHt7RzL!(vq6rD^mZu z5N!czrfuIrl zM9i3BhREyZTaM^k)RKYWK^T>Zj}C z=UvQZ#I%G;f2PIXL7GO^<)l08_g^y~VohnWm^0A_CG5XXC&jte8$%Rpp0du1b#gGx1?TMq+aDNAq`CI z6O=2r|GY_a5>wb)9bgrAd)8`Td7ljc<2}KS5-MopUmq%()g%y`56MO%!n_|?oO zZ97K=dA)Wv&)L6Y0m|FZZJdnLXvXyI>A+x&vB4I=9*!Qh>nO)jRKzY+PZTdi#nkTc=I)~seT?`ut3chhIhY2~~^mt5#FO}UiR1%(=H4iUEr)RI!z>0Q4r`tz`U5mVy!~Q&o2|zb7%=NMgtauYWU_I}uUCSl zZ~x49+3Mu-{dheip;CJ4HG~hj7%{+kiNH2t>rVRHgybasXH2$FZw^x#kx9K_~D^YD+krUk4i& z>Q|b3=WrC_&cI_6@KB&#N}|+@+|1Ja)O7j|RIikrn)d2#;N@zDVjFtGAGwD{z-5$a zkQ5O8>rA&ff<)mK!W2XN`$l>9QWQZEz7{9!L?z*mqG3Fi(n~0La?VdGn{LMiRuDJa zar5&H0zY~Gf^pq${TU@1#DAXxT#pwNT(XsO15_zbYT5K}q~{CwO=_|Cz0(t>98o{3 zd%Y_41fTE;_htW7^T4S#ZDhp&!?H+Tj%n5|KJZti-zyj9?+$@CS8T`swY2*7K89J8 z5FvAghc^gWplpaE_OKew7YXsPaUE(w8#hpfI4+#=`w8;1zQk5ZY&h{z9f)_Fz>Rr<(M&_ zK%Z@U+!MPFn4v`q+(+J;(sd(e`)2CC$ialzi&gurvU}lW{Hvc>+L58dQoBja{4a*- zC$C>P+I*~$Hs?ijVGrN&iIY%B1S%Gvougf)ZrRdZQ(n?~gjVVrcW+30_SlPx2-34m z46+)4`5h9SRt+Yz9Enz{?RnN!AGYKRm$2^>bBVVL?!9){r7L*+=^)(USkKc%YH18y zDqQRn){#F!|LZge-t>vv{vMjK=*LWLLr=3EO@Xz+!6%LV)_$)xZrrU{Die48Ro@1W+Az0Nq}D|AJZEU!(^+71e;S(`i=8p!JA=rG+1ypv)T@E&kv%Gs z?f9~N@F%p+9*SS6Du1ci>`iz2n?m(QHkKS7ji1NprS%`VYY?`Thq<={)lJI9D zD?shgPuu8G9*8c0wbOFPJ>15Q`Wdm`-EaA9D&8w9HASl!wel6IiJVHdS}SXugkRB# z6rc?!Uh$WX<|IoT_(hUTxd&O5Hr;gpxMnq+Rg5?)V)QIMhJS|JsaF`I(#W7WGnqbc zqYoHN${Nl4$w5smYn~^gV5R&T=sjXFhlwY!jjU-ITM>*_tD~?Hw2_J@msOzIz7Y$h zP%q`RC`^8vUN&<^Tgogaoirgg=Ldf7f-v<=+zT;hw8^nbQEhLG558HD|adiq_aP?vn!&eXoCA-`L!BzTqJ@EO$R*Vt`vJ>wy z;#28M(!7HvW_gi&8e9p*ofV>{SGk=As9Q5?T-+8-G;%%2J$HCK>UC}CJ$87n6_=ZV z;(RiDEv>oJuugsIOjxoWjvY+f4K?>yFWOlwuO)qC@dP1VkeKa-xztipzkM+4lIAB2 wHdT2bUc}H(E=I-w(|`eLW^f@#V^a&rlMvzDbLlnH8torw{Ib0A|CT)Bpeg literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview_thumb_0_0.webp b/static/images/auditor/10.8/admin/healthstatus/dashboard/monitoringoverview_thumb_0_0.webp new file mode 100644 index 0000000000000000000000000000000000000000..0b21b09c0627d49abe7c914b819a9590a9438565 GIT binary patch literal 38692 zcmeFWQ-CCC*DYMOZQHi1%j~jk+qP|+UF@=Lcb9Fm%gQq|@67A(|G$fKdGaDMA~G^# zKYOpW_S%t3QsUxx=|Dj0Vj_xaid;lUzwIlwf#d?ytb^Bp3fOXFNRg3}kPxRxRs_ID zn%lh_ukLa{Qon9zw;t`kDLndIydmOUzw+un&A#c$e=fhz7VAIx6#+K90{oNi7f)oK z{C^VOE4<{l_FMvP0gk z{p_yjee!#FC-sj2%)kA(;r$f->;(W`dUgmueT4*HTzl`2-|8Oh*LuCTaX%p6FrO6G z5U&N|KWXps*Zsc(A_2M|y=&#K3J3z$?-Fm@_XI@%f;YnF{7b;0{|UhJQR2P)Sz)|a z0>J#?|Niu>KenBqKh~S(AN;xfHv2Jqz(QYXJB^(?8Vf8EXhd0CJzO zABZ0cHv+NxJN~gB$4{icdM^dfdnZ00{4?HwKb1dNKSm#Cw`L#o0iUG+b3p!x%q`)C z;FW*YGw^5V$J=N8v;AX!lfO*w55PV^_%r_rbYuHu`w(#Hp9he6vwy^X-+sed15gL)#QlUdZ)WIe?LF&R7Oz^P?;FO@W`P=v|^OGFL82M`9Qx!vfS$ zj2j`8>TaI0pG*B;{fa=x@H>Ct2|+^z%L}nCW$I?I##0%DHT+v_w>Xlc5x)l>hc=fw zd9ZA{k8qDt?(uuOKWdY-$%EDs2xZt9&1G=>Kyh1^F~9H8#dhjO0Jk~4Dd&Rfk^hULF?x#P!~fKV9lVMg=6 zC>uVd)VGskO+J3vq+uO8rZoAfmU-W4WYoQ2oR0w3&&KB~3{GqK?ZYoI7R9%GxCv+a z{Ya19?_nPt-o_cSBI^$%^87?O4e+TSSq~KNP(7C$@~WEAoGbs&tTi3bpv5SWf(_`K z_Zl-Rq}W+NcnQ^_871Bx&UR;#=87u!RB(y?q=j>?uyS97gz88VjdO*Ue=XR>RFZU@ zDWVXO@4e|w3p7p045oIWh#|voa^x#KXFZ%@&yq6DhI>seV+LU9Exkpl9Ae`2Qpbe+T=&lL}6z{x~4% z8R|+w_ME=WobE(<$)@#{pp_pVd>bX1aZ>J&bITrsp2YY6B_~8QVE@dSIc#0B!cef2 zn)fq1)~NjIar~ic^@`Yz54+T|+n2h@%by&T`t-d8t){ z)))qylywO`Q7ACKvv#M5aCzjs6j=o^Cqk6$cEoh#ZXMI&2RrYHgpW_q>fXjcw~p46`?CJ!RuNc*F5? zO}pGAlQx0>|Me4`K*~@nS!Lim-T4kcYfo3V8u6ulD*H5Y92*!#alb+)QqtGIx@NZw zFO6X`i-=#op@UPYmUTx94+vjqA)p`{%{e4^V+4orNF%>0BqpXrubJYu(G;wjBsvDGF}LQ*0Yo@kp3mDEH3Su(`g}dP@P)7OmeAs(H|K{BdCb+8BCc3A`i z3-dfcd43+ZO$}WCXyLyzHm-qE(EG2(j$az69aX)ch}`|I3Yqp>t1R{k0286vyh~gr zzPOa#Tf@3Zp{(&_vx^$6jp(zWQ&K%|U$U5Lyvc6q0pQ!PixC?ClRT#rJ3BO@|G0e< zr-VcPyMM5v|Etub?ZPX2$dHdF%0PyfC*%!0t2=5ActBNiGCB~p;ix0{8`=kxt73Od zA41!Ke$|D};_T`r7Fj~>qp3%ye|V7JAZBk`tz#eM#eM*t^Gr~XN@_<)f8vYr&tUr9 zto)%(Kj0cfdaYKH)SmCUHvjT51mS;=>@R0?ixm5sEnHCYHq@S+S0j!;#S@K z2FvboPr4T!u(eqlefQ(v#1*<=fhI!|M{W(j=<)9UG6U7i?{BLd7QnP&fG_0W1=>-% zQ4}#Rc@EW&T9nF9OtEPH&Z;(jMVlmmbc_m3{d)o>t-q+niGJ=I9>l*oiMtA6%pIyrP94edvmu3hd^qL6GvRVU1` zf)or3-`;_!YivrflUT zBvtly3UZ+td(SMMJWeNEgFv(5{MpY@|5pGM=ToWt5B>cgU``vZoN`bUzg{Y$udn(* z6ytic>OqQsZeI<5vZZ5PQ|5KS$HPEuK)-JJ{4e4&%$?qgEPOU8mZ-+}3L0D`7eY0f z2se;xCEM|P9%HsMj2N;mEf$YqVMKp4jDaMd=ME=_SfWS%BMzQH;sLLte@&c3=q6gt zhj`rI`p4Wb`{G}6fgKPDAvY`6VDC<$xYF3_&Pd{$HAHG%HI|emfX4B4g}^RpVBHt$ zZ?nTcvA4(TpKkd#qJ2XcA~R%golO?VYYz7B&QnA$orCX3LH7k3@CdoBMIZwjVpRaT zHAD;GQIT=GUj0v8{C5GcU;fWg>)*)##~g;YA+?H+2GX;p3i}$dgP3ymdRxoaK%>Ge zUDk#)eSQywL+`$A@Q@g<2c3GWlw!A@G&IZlujwDv_%SOJOi+kr$$4D|_numr#Wy4N z9R)EKhSKc!jB06`Y2$T+%Jt}tz}f+R zy!_k031=|!Y+|^X9u8}kc1Cu!{yWrKdTKpYLp+h|gUdA`5Q7pIua(cmpPdKYF4-Tn zo@-^gM}taGpj4X=jY?O{6e{*2{si@_n-~=-)|&|bH@|O@69lu+Cc8*znpc%Jn&MT^ zfnJ)o(7Z!Jsa?SRq>osCkc>J>$1bGh-)8qwjpY39zknCF#WF>cvyN5Ji6NK&{5P%2 z{Yj|BPXUtcxM0@?=X4?zKh8kg7MlLUdj{9K@XM<15wgJm1!FN8G)GPnQQg-Qx67Yl z1+wi*t$+1obV-9K98&p3S2?#^RXij^$jKq6(%)Nb#x0#;_GRXAc=|7OiFAj*k0nHJ zuJtK7iNP?5UqlR(*eBx#!L*2oXNDDZ53A;y`*u(lQ(a8(RaCHKbn!Z~S+M_&?+rU25=&@Dx*cpDY13NkDdjl-yv$ff)EDw{8%G zmtWz}8UNp?_UB`=->a_1{7QvZK^j&zc>2ll%_9BWN8p)1BccbsJ=xDDyhGG+fNAms zNobImiX(%yFyi2T{U+Q|_K)c%OoVbdHp~D2ujj`#4EL0SmrF_Q#Lnsj9Q7X0F86@b zjTjICeeO8)-W-e#-)d1^M(*c(O-2SEa~+Qdob>|YmO8M5LRDV@AFHb4Lwoxtg1GOD zcaWR`1$uZY&a5+I#Yp~?g_BO$jXra0P$}u^FWnZi8eXSAyG@kFY9E@E1rS$*?00)c zfLnROW)A9#z_VPC-Ti31SOE4ocMVKiF(UD5kDc!HH5raLtKKiXm$!eDe7;FFlt!IjQA0Ovt^IxP3wIgw;kLT2wE@AB zM!o&?cfZ<;ZjQD-Qd5y2V@u1Zi+G+mLn*y-_S-{}J%m5(YkB6&pxgwm^pAg=!H-|x z--j?AEvv4HKFayQCSqt9p%(R}?@(#EBBVepH}^J1&`d};9U@ zBEBkHJ+hGv1Yw(YXDau&%})wevVdf}lN?Vs|6tWI)${z=9}e7V?TO4QO!yI;qrS@F zG{Wfa+Xr_Z9x;?6Td>&p7Z>pc&3wOweYK8e zgn;!G%is>4I3JMGTnd4giPR3KB-yh#G$-{g#D0Zw9x~ZVTaedkx8nv#Ea2WT4Sa{N zOpNl}1Zy)jc!po90n}qy@25H)evJX)K*1A<@viGo=BHBGyZCUdq<=35&+ID_0+4*+ z5~1&7{hMv0W@iDiDhRp*H4n^;sPhWMSGN+C{+Pj8sTjoMSOh?oTBtX^pS^sTq-V*( zKxSNPRG1kB7>bU7eP%YL=`9gcz>MaLMu3jXc4`)2W`BZJQpOn^=To61 zA*R=rf!J4;LlK+qj%oG)NiZ|{W|)1soEU`LN+znd1Z9O85a&h|J44PUZmaz&Z+%9B zp4i8!AM@xT0L3`ic>m2DpG&Ignv5CWVoQx1T3GnRirK6c0C~3^%UcTKBob6q z+ClwwL%4D!$GEWg*kp`}Ty&YhN7)$NxYgs@#+~Hh z=5(K9qJ06!0KDELQV!)Oo~rH}mwUs`olBp@JU`=X~8 zb+XP#|NT65$XNP@mQ2*x@_ZA_xTwsnRy|pDc`4JHc7Ipvf^vJ}vYl>C68R(N`h@|! zoITDd0V}lj4E7mC6p-^NwYoF?h$N%9&7dufJg0t*ff?D}l$E*cU#qqygli<0nEJR1 z`RG}&mhSou&9CvBk##_E4n+-Z2;~&aQ$kV;*ZFL~<414LIG(3x@rW!w*bEGO7X~At zhg?RIR{7n5F_@5~F0#`wwZzG1Z)q~Z@nfrc6+>12Kej}PF)3DVFk-eaZo2V2?Sd&o zm$EJ9&RL$?8iMK`X6WGkGpFT;OgouhOMF$x`s5lzwe5r}zBV4IJTv+AT-KmRePO2>2IyFQ&}6LQhb?D0bgI$_F!lG5=?;jNV`Ap zD+~aAWrJ6sX*C|>t3&2clRnrrvvfL(Iq+&w?PwzZ#8JpWM`m&jPiEyqAAQ;TK3S~~ ztQltu)`!Ko9k_q5!ffZmrWHhbK5^%(%ypZwEpy>P8Z~e;N9Kzq09^_KY`=>f$K4~x zhI6bCFpx*>#w>jnyEK&F-}DJ{C^z}6zN!9Qh04S7+hAqzH%e zoDE^haQZ2gDa@$c27hu5eZII3aOx1Ypqw7Hjy3|)u-ZAv>f84;eQNORS!YqWbl?w1 z2$w8tN78+tt_6ER%)$OEZ@L*l;rj(*%{y=KLO@NzmCfeBu0ei|Heh@Z0p zZQ5JV$m{1|yDLEKiQk5Gc3S)vU+gazA2EWr*ju_j|>X z!}7rrup-fdk_((vTuUiZ$uR}VQY%S^s%be~8_hnSvI>rQV$Gkg6E}cAML<9U4F)4JB_Rg$MoQ0-lhsRgF;nj@k^ zai5R30YStaXBr!jV_`vU;e&`tz1t+CLWh(sr|zFb2N{N`Pge{A`>oaSJQ&eaCm1bV ztf(H3!Wvp`MY_jb)|>jWUMNBZwpA!yoS!n;NVTs+rMQQEOhB}(&&8iOX(V_3F9w8f zWJSy8_@9NUsy|BZ%^-@rsd~2$P)FE)qAu!JMWX3)iBzEpb>{i=3P*2YoZABfInOIw zoxknvg+O`Wd^UZs-IBVCF3gxcs_{La;k)+7b2d(d2N0p`nKXU13OQjFjQ==+N2s*E zpN6}3ENC;pl5mL8F6m>Q0u!@J&6xK(Vq^1+YSb>5&&u8jzjk)&-8(i z2#^1?DjJpyLEKtg>njtE^Bsiw;WXEHVX$h@Y@(8Mq2&7-z97;5Ix!!qU7_?e{mn(E zeVse1qpJ5A$?o3hez6Pwl1T{XJ1R(7LGrV5(&Xnt00f4tW&4?Dg>8D8#{RCik}x8r z_tE3zw6I-5_Te)~D)X9~Ch$Qrel_bhc5C+wq~(Kw-bap>@j`q55MmMH8U@rOva2Ca zeX?I@yLAuV_@!XV@MQJquJE?0P<#?vE8X3GsJ)2p&=>9NThMgeX(%9m<-_!+d5Gq= zO41*7rpIP_qf=3#cwS}9$^}u+F}Q@^BTN-9KXRbf9+1A$Pi`8ilr#hf)&ddojy znG8*pW2f$)b;9c4xfwq>W2T-=r!E2)KJU$(BfAg$uY|LMYjoLjDvHh#LD4_P(V=D( z2fg(0XzgX*lhZHhvm>*u!=;ODKG(n{4&WC)Hl zd4yG~@5aUDxD{tom_xPXHPgU&LV&L5O};V-juQhj1XVZuDkwvDbU(t9qIRmV0(&nL zm8G9#?nojQBcMGsd8nc4Kac6kY0kGs%O9Mf;NgQb`Kxe;tQ>;f*s-b$2=4e+D7Y+JBhgb}T?2yOME+_|5<6HrP7^#^#$AVIqtKNP%wR3$I>YVl5fiMdBP zANx!b8E?9#z~!8B3G3w7a8apHw>Nciwsh|T62ebDb;)!J*aT>c9Xji)PBX%QZB96D5?wU%7>Otk@A`L@4;^jpvSYWCC<}cVx=x((JA9f z484N$AZ(PGgyz%|u_Y9gLcf-7hH5!yyS-kV4b7(Ft3)IuuqUQbGG#^6N}F-d4b3rm zkJ_FaSjeT@qHn*^Ct$XKFMo!Pcg}Lsrl)}~p(M$Pdv{xY*m@L;GTY)g)S$BH=evVQ zAVezv#<6~v+u+Hm6iq$3d2z&4)0RDI12XaPh8W3Y?H8kqy;~3+$&sXfNBI;2eIXti z9apz^Z`-)ASDpI>8=1v@rb1r>bgR@z_ft->nCs>eNt!Acec3OgQ)Rq^I{>lUW$DW! zQ;X?045dOY^Y1?eS@7xYcf!ncAPtDDV8tXT z_!>xpmMEmYRx0)nxLoIHkl=-hT54qYr^j1Z!|71eI;v`qnM3~=BT`Pw|LJ-n7}!12 zqXX4dtN`>ZC@p9;BT{2Jx+@;NaTcdEcC#bfu*-eEONY3HVlSqo{_A_>1rQKMKeqE~ zO5JwNJ+f%}RlKWTU+Xn^>wRNPA?GT}S+xJcfI6gYEijifr)C&jgf9k1eY1ZNJ^nri zZq(1}$jn>TXh2UoQQua!Z_wn%`E(ryC*0*s@il{g_WrL05#i{(S}zk=QB$75v0ZF6 zWFerxy`Wp!|na-}S`YxX)`%zmV&#!(dt+WCRp_+Qjj^ z2;bwm@ow4A@;H*w$d}+!JpciBzzIa+9c|0{b!6^}c=lUQB)RbPtO$T0-Jl$<&GZHa(=WxsoZnd; z;|12C4IG2-d3xaxluu7=8otuQde=pNgKJho@k#F~37Jo5xWm54_MHWKBcDf_iNOEH zF{ztTGN7&7hHh-ZSh%kQ0x22D!c+y18cJVJXQ;2G>Kr5D>KK!#B*uHBi#3;YXC0_E zL(y`w7%6OzkR`j`8jrA0;a4sk!jfshMwr#$4E3N)B>p^)_)B-qD!#K5 zq}m{@n!!Cmiz5f3CBA{0F283}6X#ydu zIzil7ICYHkta+@7R6JQ}WeI!@dsJ06nrZFPwK+TSjLeLBy_gJio^1MF+D`4qTo0M@ zszNL!jS1Ug*0UEOq?1{#^_@Jn2K}vyeEBG8#A0GYuR~o{TQ!G)aSI?bZZC|hMHO?} zHK78Vzpmraahi}ikK`|ggRdx2{P_F%ss->`>cs@5a#;2RVUkB^`z8Cc-O3))R)O@y z6L;f&_z9?_DdC>fcz(D)+HDVn;=Vq|zh9)g=*Gd6IV$^e>v!=A+TLO-F$oD5(U_DRJF6q50Xt)zZ>Tcsb~o-$7o3aVKeYYP7e>K@KmTZUZwbjl<20E>TP3fj zx$^0T*@TzwB(fQmsso6LxiKv36@m z59Mc|`O*m^UaKsMzsl$jX71*XS&Np#I9^`#j(hM6YP^u23rex2f`|=pN;+c(FD?dnJ8f{(=y$d;Jl9mJU=vl`> z${Tz?NW8@}oNhR{Q=W8Q&t2@E0lW%-EaA{K-CbfJAHrmD0;wMvX@Vb;2X!$LkW=|=Q}&`ae}bYPeuUJS^8OgjBn8paHX0G zL6uGZIUh~omljG8i?#uR(a9N5r zuBNi;@0~nxbQhhxfC0z16cYSLBNJ6tw7t*0AD^PaDuvqF&DDvpzKH|@1f z80yYzM&RhK?b3$wMbAsYp2+KWf<&$)t;)(jbJf;Y{3?h)PDCpSkpgf|ui{3t=#Z6x z1k0H73<-mpP5^yF`l8s201f~~@A4_+;mDUH?$s8APah0%T7aTo!gKbA;ab7&20#&JFtRuM3gsb2EqfG3V4~29idJh;M4<$s7cr;5i$A6u8;* z+cj|V@8E!hixeJcOcr${aH0N{n@Y75`#O^4i%WSn=S8FW!kRbk#STe)$Hls11i$x- z5AF+I!RQ2`-6{n@j2=MV4q{l`$^n&9dz_^5DhXZWIuaAWgg{!tuUZ7JvNM_1Vg9n)d?nD|T-qmi zxuKtQL6@@IV8d;TjAHmQ7o?)A{VWW=qQtUYwzB%D4=e?s-mne%~lIv6mu6``7l0X_eAhhB8)nr z82Ds2iORaukEc1_HB-c7)3AgeJNjh+FdBF@#i%XdUYWzZGTFLEWrvB1>$j#Pbf>T@ zshO=s0Zj>7eYt2Ol2|jKj*Y4kW2ZXvu3rO_+>6RT!&0t7rEDpqr0PFSETJgYq2*O< z_fJGIQT5xW#Lskp5UafUhltu?w{e0?nwBGmYO+zeIx(6&IxdPWNlApr-@gjt1fAj= z*&FNidMpy3r-=$Lw++5yYsi{3rt37VsT#1Az0}&YpL~dg@?BkhZISTIrDgC|_WSAG z^>z{o5dx7%@Im-4z{`jV;e6%w?KD8ujVy^g-Tlay^f*HA7@hlMLudpel~>* zR<6dJYjk5|j^#Pb7Uoi-aPdetM0WZNiE>-sR>L<(a|((^%@1}II-ihbCkKa+_rtU)PYDlD5;q-y7+E;|6ln*C}S9Wlnr89uK z{?qU}5kpss6*tU2ec8uA*ljzi_iRa5%KLLQN)W~t5$t1e9oiw*5xE`q2E7Ml$$(45 zQpfmhm{stIQjCrIm_lB2g-1emUK0RC=dT2`M7;5vOCD%pP;c&ugMYgV%@*K?MY($t z0Ky5KZqttN8K(K!EjEpiO}sM;fWjgx%`BB1J@4DH;dYUh=@1jXARE1>HB<@g3Ru}F zi>b((R(!0MuHB{SiJ)21kNr-L@m^B?%y8?ff^}r^z}5GNCQ)F@Lef|8n^zQFB;PA< z!ctU_sQleIwzDEX4E;FBtA+ISXtYdgysy-_Ht{foaZ?-CfnU({Du1-Oq~ybvtq`l& z){h^qpkp=r;pP-L>s$>hfc$Cf;ylG)ErV+)qzVZH1mhEM+GHUA-Y`VwD$EB11lYP( z4hh#7F6iXmGm;W6Cl&>JzP+EDfVyS=j@SDO-TN5n&LELF(7Iq19}{E9vX};KpWaMA zqlFOEceTrqC=Kz8)|IBHwS!$RizA;jues2|Qi5%qL!a!p8;YS+^kjM)p90nW*7PC!#Suzu90JN>Tu+kU^Nrq-97PWQ)M{SNM(G?lo8Ek3liMt+z`>z z;I#OzyJnP`TU2u-Zzv< zr=No&Q^j0B8CK1_UyhZ$BFUr8Tshfjq;niK7fQmH?WstX^v%Ho2BJTx9k$NeH0po7 z>)z7dp!s)es`g)QdfF}(lL(VF_;L3KF*Oega&1-H1&T4739h+I*x=%}h{tch>^Q$# za!+nH#*WcA6A9;sVnYO&y-`()7yoA|_Ib<R+V0KB&GtTy6fWH9{Og z%yIDn`NYfE?<#Vc#fk!A5}cfa&?1L~geK#VxOET!-BSo(Hra$NTOuj783KZ^MG9#X zf9{pOT*f+x&E+z?LG$e*$IaO|bU86IRsTuKIEm=6i)Vrh&Gf-gfp(TO3#pDL16-Ii zy~E%i4A$`rf+jcr4Y&pw@i>MK=<{-{txrzmKC{4~5>@B41VvP5;hP{C!d zDzxH$w^{HxZC(xBh7sj#TeFI)df*)9Y`j%A(o(zj7KNxQon_Wz>#z6=sA4Id2U|_h zKCD^_jmPYZU=9Zf#VjYv7Ijhsh@%HiZkw={iot3&F6qaJt_|?@*{=d|l8HB=bey4U zt=EeM^ZJVB6Jh{~1)`uj@$5ylgHw;VZ@dUWgj@16u5y~7yiUv5bW~|Svlz>^WZU)e zV3fu*gQT)HS-T{1e$sfSbiSS0F;mFR8^+=N+V;WTbzb0G&9^f~4jNOpI_0|8e=L#p zyOdixQ)+5Yohe6AmYZoBO{z9{UR?L+%kYh}i)eV5y0>|3(i zh8Bl9ENLY9465iYPN|lLpUJTi5^R8+M~9m{Z$1WOsocLIR^F0%D9W;genb~UQt{(j zSJl}x+D+a9$!oT-cS);f_Fi~Uuy%sf&=%GqEq(1qq%Z0xaF0S$FflMlu|*;Q!ic`V zrCE}}itL8i8{(`7Q_iE^t0VWK*+&Rc_HNO-+uV5Q##)w75O~G6cfkG`Udk1HpcLty zJ;Zgc`DqmoQ&j#<-V&$UEWG^)zfudX-yP8uxIwd%17!+76urS2tdX0g5XXHM8{hA$ zk&tqrnRwcJO2LvzfBD*(o8_zKsb0F^_EYzgt%NCCc2+=Vjk4G$iRnY1!Tqkg)gj&d z;&lr(($SJ70or_XByj6dy5G8;g!NvvJkI#LU{aJtS+l_GiY?soH$ewZ?TeWchQv>V zGlvQ}xqE%AVM8^s!&UK!bt&CbYAk9oPj^)dfiTEJeHmNCsjaA7HhLSR8eLo9KC_`hsjtlR)dwPW~Z%0$^v#hJC#uH`p2!Oa6 z4dlyq7GvKUEhh7h?A>Ig&qqn=IzHq~g@3rg^1#U_XL5%R=T$CcOmx6oGvL=U;HX>g z^m>n8Lw}KktVFsJDN}p_UiLwQn^RiKo6x*|3f{3l7fd_Z_7QaWaWP)qJP5gZlh2e6 z)IcJW;2I!Olx1whlVZW$rfN^C-2_g%4aKEWd9V>?qcbzZ=n~oVPH@rB_9a?EDo|ra zvfQ<>s)6z-fn6u3aqzUg17Qx3_uB{@xh0M|H!2kd3s-=olZ!x|TZCFWHyaU+sF{u%f`7wpxS~NU&2@wEj6`Jwu*VIIFcbzby2S~klondTRWaAMSHkK&q|rL_6^SQ8oWkdG4x6fflzbg=0P4Q1vEI^(VxC zwp;T1wUmZLFT5#~&@aFSo>9Tx5sc(0{lLmg9Dio!CQA5o>LN_AGIJHqUzxQL>$A+< zg!w~uX3Y3CGdE%Mf4Gc&I(gj!->1o7Yc2v-4lp9mvxR>XT%WM>yW0UGg!B0Q?Zexy z(3U?-h3(adn+MV96fCDOL7NP4`s+R<$N&kd18Cg&PDe@gt_qiI@Ec&JoRw4^Dq|@Q zRRXf1N%gUx-koDLj22vb!Kr2S-7}Rw>^!#!O{ugqM3ujkdGa}9cVLV`R?vNnQ3!RE zVDy;pMmBL~bn_bBtn$8G&6}{@6!AyT>1Fq~+y^j2p@5r&;L16n2udzy4uhUq`PM&Ac6W!Hkxs&d}?cryl&L}})x;=r_M+2CLx;=9JrTTg@6 z?YNsJr0+O~J6^pY6;y;4!P{0*aMN(`T_-%n;%b=)wokYf;iu?3NB22yC0H}kKtR}z zN^=v#bk`7sTxwWn9ujvz=Zc1HAq}KA{Ostwou;}lRHZw_6TCU0q(fUh9W;6%rM)&< z1i{+k1{@oq7-2|PL|{xRljty~sn+CLso>YGr8wI}J!10lS@`i(thXo_-d zw8M0I(}jK?za0ZhY^$8*<0TOQL1*HD%}+vs+$+o=xO&_eWGl+F(u%qu728~thvpB_ z*LzsB<*MYrC!PDSh!BEyFO!4?E4Wm^vxew?ZEB>xX**zu@6>a@28aG)0-#50j5oR2 z-QueKOqbEs!?IQ^Ue~H?pN#u_TRKWKM{ORWl!5+EZj43flZS(2XT9~o7vpg%IybtT zle%DI*cn+nOSZ)?$F1LFfrAgs?Al%{#on>X8JcFQGf|~LE}oRA=BfTcwPy8|%4(>@ zd$B!Y123prFl5bac>EMEFQ@tRPMdDCHV@a2YNNtpOZ0Wdb1pn@h7F7<=^S-n_I1Ml zqXKoD$FEJZ6Td2at(-j8;%MV@>I4T45G_M%ecw6zrHi2i#;Z!lq1F!U5roh%q7A?l2{9*iS1pFSZidTzFM7oVlk^ zm@b7SKga`=qPjF#wns3bzK0sFN7NHkPET!PtAV=2>ANlU~5l*3R zizfx*Xg51qgJ#j#d^f2UE!37XVu{i*qpPJ)XWDZ?cl~8F35V8{pkSy3E$!S1Q!i{kvfuq^L}08o4}GwrM<+_~o{C6er^&yCu`5$Q@1M@v^n1of7lLZ@#zqP5}@~dz+f1cOQC9_lJl?7#$N}*NgUq zN-l;6EMjZgx+`32U~(6lXxydeDmQ6G%K!7Q7fT>Bn&+yRc)#Vdbp$sQs=EPkvz@*k z2x9Bv%pBb%THV$w>OYxS-mPQ?+PGzlfo_R+or!u$09N@h0twL(wR@((xM9=*RB4 zCxRhCFy8o#LSVrxuZNVcAGuvjE6)n_O6WyzeHB#)$>X3c?U~?VvLhZxA^M_^P=5~6 zK2qvoU8P4`L%@bv+XE+MRa{~M+T$3aBws`Yis2%&3Ffhw@U}>sPaG&Xc z=-Zx$c-W|)lbm_*dabo+RE=#cPPcwD=Pk4y(m60g^FG^x9tUFl6rVYB6wN8@_~ZyK`hLo84VHR z$GHcSbW3`2kC&8txsU8L8)LK?D$Ox)>EmSh*yu9zqac=CptGkA$~dO5j?=glJ13lm zG}^EJfSR-W^mR#x3D`jvRL-6yCK7wtN{`8hv+Ny}I>zYODAPAx?r#3*yp2RF=MzCM zQEIH_wS;Q?Zghtc9rX+c;yIK7+^LcZxELMU-~fa3(~PVG@07y!(SMOQNBL;ix9~(nlvs zjfufP;Ohep?54~nZ3}?0Ma%5O^zI2Gymq7cEV&6^KRN-GM)86G(C4q_#eLHA^RNy6 zFWI4tS9}_JUj~wIwG}^AzrMBE3Mm4023*Xvn2UQW{Zu-BvU%x!7b~xb)c@g!v}|JC z(HuKwXZD@?i*x|YrynKkBl(ppf2LmwRPOjNo212U(b+;0=t4P$xS7*lBP1sVCj5!6 z)Jq9=ZFNXlGWy@P?x8B_W2`#?I?Si$dQ%p696gAeM{cJi7;TN= zn$&%a>J?S*5PMsKQaqIo^oIyBbI96ZYo8aMNAT5z{!Z;^tAiK4+P5Lki?pP#`}vH{ z+nWr}EO+!ot%U8oSaeHx*%lqq_I@4_SxW6)gVil=or7xaa%38T0vBMPv_ma66wOtw z9{~UDr+?eL$F^AShu%9IVcLEDhDeDJ9lQOg(8v#xdyNKmn&ghUdO$m<Cwv?h}$Pf+)ke zJDY39)Ow(Pdudd{%#~gG6lN?9NghCQgxII3AP_+rf!*KH0etQS#GY+xa#tc^oq(oe z!ooV_It{Oc-ia$P7zNOsK=YIhM*|RV!-X-%cOZ7E%T8Z~x{4<+ zhi*vUW|8`GWbGb{WfK>1pEt|P z%u>G%1VE7JISW0p;=n(|emh_jFyW3()&YG%VJL>j?wBidC(+&a=6%P5<~96*NEg$j zEss$2`4ievQ)Ym(+#F0F;l&l#xv#N53`#rNeY>G-v`Ckj+^8an^pmbD$b?o}Oav^@ zxtq5_swE(lE6hd)jd89f2X%Yjc4a`RH>eXDhq_w5t!(epkW6v31|!dFYM+Y+xYh!X zLfjN#OQIPoDmw?W1qY{@e;r1q-qcYIU&80W7I%C7y}b%gO9ccbXC=ITYgY;LfYP_i zw_Nkrce%{e79%4Y%DXKB#9l)~Q)6%VFvVPYbLh2<)V8a8yQd4d=UHlOFq(l;+@;bM5^A;jkVLQl!`L@PiLyk=wr$(CZQHhO+qP}nwr$()K8@4%J9pli|EZ7t zQB}E0xiWU{h>S7@LxxPHd|xVK&KAU^UVR& z#;6eb5_paK&bgmkAZ9WMK;=!zl(jv6Fnz`geirCBuz``WH5wKYvhyH&n}Cg9I<0D+GH z03fk9G1`WoeUFgX)!z}pYOa%g& zB8MRn$P_sYi9n{vVMqirMGiwEkSTH)5`j#S!;lDMiX4VSAXDTpB=Wzf4qdW}5BfY-pWRl+`62VNFfnZ!BhfpPg&-|RZs$OT9l&ZY>Wy6DT-M<-+0 z7vP3@z24h*mm7Q3m7!ib8$ZcB-%G#x*}@BQfODpSU~kaV24Ak(?`L2tCJBpapmYVQ zz$!Rbu;q@KrrEu{Bbg|4>Yfgr7=jBGF%e{{Xpg<>zE4*wMrV_W`6E;-Hu zB_QQiQTz0F(jwGNI94j8x(PqK6c!~qNDDTg)#kSL8?&pKv{7-H@dZ^o|K;59MM@ae zRvNl4?5YP-1gECwY8ktbr=MKk)e+etjh**yK)q->tV&AyG5+5EUX8#hrKwhE?A?)q zZEfkS#0US0e_Y1f$S%rBvC~j_!z2TRm2~<7q?p3|o{ZT!S)wUDe0Y~v5rS+fuh-OD93Bnw$jmTPoN8&r{m8os76EOt>x{dPHDn(~enJ93t(ECWMbQDn6k zv7pU{(-0<9^=>0Yi;FVr&~B|}F>3n|kwY|jYbCiVqpr#UiB<+Zs!23L>mx}Ns4PMz zBN5~|rA0FOAz&vH4qw2Ld;taEoft-opMfrOAHf8Mv*9_Hq}I6z90~iv!ZH}ME>ROo zhW6mLxGYL{cs?U~e%80EIhQ5PNhp>f3Qc+g>>{=ws^Xt&I|`B$0*?5BMZ1N<13&30 zi();#1Z~tDOOJB=jM0MIOX#}gwk!;Qd!3M^9whDr_c|d-JxJUM?s-CzdXTsi-0OrS z^&oL4xYr5mYfE=M=+Qwl;Qc&}H8^VY)mBe6JiC}4_@UvxHOywEZ92@q7Lg|Wb3U)o z!ZM}re4xkZPiAA5zp(NSubNf%ABSHBCa5s!5LoCxHJg&wMeOlJQkTktpkPMruB{~@ zZ-%dB8yGpH3`;THjcJA%fZ`Y!lUS&|*%UR+!sWL*yhcDf1k>774`ZO+M0mI^!H@fc zIa@*Mlm%fI)ZEuT33$xS5f6)^FHHh@Y$X%LS!vuv2`%*dVx=slkbX{*#k=(E+atj_ zlLTL)S^hmK^wu+_Dc!?SVEu<$4535?PRjfv9W?#gX|4#IZXw(tV36icwb^0Mr`npB zSPNtfMS{BB`EYFSt_`UUb=(Yadm2H|)I8w9*080757o+Z;n(x)yufpShr=#RDJb6h zI@joou8tlq0~hF)%5Bo5R~@8Cmi(16E6>HFoA6&(*N?2H$JP*0tdC$azO+iK;D5^z zh*1qFUXrL51t61A`5ajuuAh~rew|mOdEzvRn9DfKqlsuJHfXS=m2v z^jlfHBlT2*;fstBSVrZcwTg}x%@zMpWr4BW!#H|tY~A^DhH0GuZkn>kYx>jy)8$=N zbrj4L;V=FC(Yk}6o(+MpyA3{0=~DXzU2I0PqRx3YEHCB`Uvu>D%jONVscqc_uB z|GA;)*tB?uaIzZ+>>4}QMArn`%=Oh*peO}vaPZ~*#N@kMPVfY<*o2*X(F#5x#O+e^ zxv7dS1Kqh078ScLSKdNHxb_UPxC2cHT!#q<@7M|%gDL=-ow%J|$0m5V_Gc^dyMBB%oJnVT;>k(HQxDb%hJ>92u zd75U7ntiaq5_Ikzfz`H`txHH%V=<#E6>(OLNm)C= zTq$ok@6N<->3Evov~TSzF^`DFs?&u_JG8gwfj2;oT<%A{2f@q8jXu@UtyNm_T>u$?rN&p*)833phtL*!wNXSRI{JUkx@!0wa z{mHHNK0OB;5N(eOYG>ndRJeQIK{_ibp`wxW0E9g5bxT>oCJwIE^@@IeIOtZsP#z&l^G#bL=&$Od;r$th<~AW-JiUz)ft2e zhqfRVqikMNpKD{dBJ6{o(zY@_wpi0mirDRV~QphTMmk3Fy-mkadvW)4S^*uizAebkbNJ@GJ zz+wxvXiDv^C7aY_*$2UHe}Na1_U(*;+WhDa(+v4H z_0gfURnInr=V+Y0CIYs+$Orr&xU8qgru$s7<7h$yf9VQIEmwt6P?^rJyI1Wvb`Cy+ zYz+wLi}lsngg4Z?ve1l9NK*b~_}a*v1zT}*;L7sk{bI^(4Bc}o|MvbP21p4A!Y|tR zhLR_A${E8?NvLQ&9|S})iYW+ylb5&ht#>o9z|*4cWiUIzW_w8c##(wMq; zwf+}F=1nS)U&;qPG|I8FJg3t)qj2-apPRnO6omD#^7XdW?><<9$5jW3A3%U}nEbY0 z9pwPfyms(p*z#3=J*5(ag8@84R6uFyxj%^3-^qM2qv!>jen!urK58$u$UqmnPjXh; zNNaC0y^{GkQ$3ZOR&X|k1&8_6WP#U6f=Alx&G;s#9oaG5#66H8DWhR&NtVsqVvWqhHem9XS1N8^^F5}d zcz$rum#Ft%LE+3|A0LxVO>rB7j|u(iY(k3hO4GfkntrBSsa|&9Cu040wId-VH)!zDGb6Ny z6dhr=qF7}vq>e}~&nk#$1T+fRDj-=Hc$Fbnvs3VulHTYUM!GGkWNWWH4#!CYgo}l9 z=0m*Xv`-pnZvPnR@J+6?XXp;yS|d%>{le8XO+=0h0{MRA#u6`i3dG6AR99zJf&m!=`9eb#E*}rdZ*L)v;cq{8_CWY%)S8GExZ<*N-wbzs~aER zxhHyqLfsx^h!^U9;ptVJ*>C!vQR#lg--!s4$+*A>}W4`bXvrYXd?*p7Q! zFkVw)S!}fj;&`QPJy7TUapX>h)CS^+H-_wOcpYhiSj3 z#}QGfDe$@n2+&g}Bayi|e6CuBHv;Q~D0=iG=mXI8>hBh+ta@1HodhC?RUh`d5t4Kg zSLG?LqdnY`MyMt`BY#xQwMxXXw_PYS4e!YYSp|faMy@x*gR2_=G#TvIK?+j`64XQK z6IiMtw@Lgv zIRjuagnzrRcZ7CIX?r$}qDu}+=^5&>);?r5jPXZcj+2ssSr>d*&2aQGmKyn+xxfP<%--wYfu5z zdILaYoBUx*jTCd69VR19s=k=znxlB^YG(pNmw%E!Ri@MlKwF{%mG+JdOnZk=gI~6o zy`|dT-@`X*%tkIU`M63{!llu-^9O@?K2O$iGFw3&!1Pdm#|kJ#kL)$_uzoWsCg9P| za14WUEA>(bAs0ul*A{p*!c)!)*3?e|jD5c=_9Y2&r`l10AN}8vEH#4mRv|gw*Vbxvsf3hr=J8D~n_E}7@n%~sDJNf&M@swQ=e^hYy zX;F_@qYw=uKy7xX#EfJ(6qz=%Qt!(UVNX63P}(DX!KValhSO$9K!U`9|Df)_4KQ8J zHz?P!Qv+b}fW&1N6}=oWYw#nOCCM}C&)i~HuW`eHRlJeI>h3!s>;ad#aJ>etEii-o}Pp@jbC{Z$~f@tl{FV2vcpv9>Z- zh+7@?S3PET&h-nuJ=$~h(pdGn(J?XytY zoK_1pVKL><;`PK~L+QdbZvong0OGFv+mvCp>{R_NuT}YxY)f+OnxQQRu-g*-niho0 zio$e?ay?t@vy1m7sh6CAz22&8yTRu!K64uvRPhJnEY-_l#TYi}^kg)&y=Tg&d*>GhhE(7g@PR5Y%}ztU(e9OGU4NxbMO}bbWV_Y z)oEQjDk448-0C7XKRILpS94842DW}|yM7;@woV3Ao^P=CLf%$Lw1(&S>V1tGr83C^ z?y{GV4wEAh&d=#alo!oYyNj1nCGXzJp(6TAm9hP!1xo%j%l!1-bF}M- zY@CqsaRAu_)pryv##$g|cT9D)7EKPg-K?L01Ik zU({$Y_;YNlt{Rt=E!>0RQs;K`TWKDW%?F{xSOlr&%?(D(CPGP(@jiKc5vB9Hl1gBW z5Nx9i!@1LiR9xuITeDGl;NRK9UYf%ZUU(xnYmLc=hl}bJw{%TeI^Rdz*WZPZnaP|i zf!GyH+aLJ(`1`wCR>1mK?kYpy0IUJ)pb&1oomC1w#ZfW;OX$%4GuKA|J;GdWj-^ruRJ_GB|;!?A=l+8d>TD+9J=Y?vS^tFbO zz}gu;U0nQAij=^)WsjXg} zP~k@W4D6=KkO%3nj)JSy#)@(Un`c=AptVUiS+$k@I1>e#M*pg;?RB1W&WOtNn4q2SN+k)!-h&zXDIBxw( z3qd3}SkT9AUEE=J!XOJaE->jhe?{BTov9`?6Pt9xZB8PWUql3AwVi}VdZa&U4^Ucv zNKc`+4V}88viXV4Y~E)}MZ1nBCs{!nyo>f;XP5~FbnY!B(}Nd|n;hR5kI*al8{dzW z&B^5$c63g%cET4@L3A0 zWz@II(m`E$@P}=rEDUg`IvT*dVxVj#Go=RR*XNbO9-li)PslwjJwRI^yZ8Yp&XU2B zb+_1D><0h@oI0zdoapAX<9}9~>AQ}hgB_l7jJ_Gd?U|kQRD?iZL5nL8 z_2KjTRcY#9c{}8Y4g7Zk8j^Ck_S}0FGv$B(l?-i?G9$5{iuP)@4o&%iQLs+Jjt?*~ zw+C!IzY^9w#k9K_NHq%UAVc(7R@wAuidq@~RhAdTE+L-`9*tU|BPAFH%GLbq@b=H*DE?;z$-AIlphl; zw`|2Jhb^Lkb~vqll4!9hRUoa+dg%MYN}y^Dr1Th}G0*2RLqhiFd)H5dWcP86JD8>m zVX9*06u2xrbB+O4wHLVE>bp!Ml*6C^$uL`CZ$7?ZE9V880zYlB5MIaD7~K+#0y5$L zS*rf$B%#sG0(m8*Zq}#FHmzSrk5b<{eeymMnJ)aL7KqCeS6{=jpBK4NS!{ zlVq^NIvdrdUDyC85pPc!Z^WZImEQ&Ao~aob24=gEadTW}a3V|c0f!eMWP?lohKOF0 z#2xl66*d|LF~7f+jMCfjE$0Q;@J+WZ^QZ>k%g3W)e{=a?B{bR~sg`j{eR1OQ9u{Ke zydtw4>4#1#r6dRm&HzX$X6f5dEceL%LAG z;ByZ7Bpt$EmzLSi0@@_E+(4lS2kcDbms#L{Qw9W1VL!9HTf!rQ&T%85b)|h5qQ=*c1-y%t~DI<8|9xZnW3yPcGQ%cj3uXR?ify75YGK0 z5ARE-OyY6y;Gi$jrvv`#d2wan1@xuM^GS);@dR&L@FAp9=(|^Wf06PKH70a zuTIi74vl;yc~SX0ZeORTvG-jeD4Z?4*}MD-8p? z6(*#90s;T&%2)72dYxUp=u6&8eZvO_Sg>Ca`6wgvIjgxeJPjYV*=272|}w6lNvT*G4zUD6ItZ!`Lh-a+h0AK+9?fDo_HF2=NeJoN42+c9Rm zbB-yLeO0x$?JkA5rSbxal_bdhLT%c7kOwt;(X7ME;1bHGI4zYr@fOPcaB0*p5j zBgf&8ug$a?EnsSnV)FRY0qW!R9G<6M4Xhk?K=7*7fT6WxEYm@>5ynEo(6Z^cc$rBv ziQ-dia~JcdG9{~94(qowywMuz?NpxoI(}=5sVTo4oA6V0p|wAZLO5XCwKyCMQ53GL zm}lS^^op(u+x#pyI=#E)5x$SLgXSX9QGu>>HmI*C`SU4Xpk`$S!J#KBqVXkjfY~@D zFzq7OWiGH}=4mhbtM2rEK-PxSAdIC@RCILwC*1t&#^)Fk$k`zXIhxdTz8$;%mb)xF zCE71^5p73Jh1-H#C>4}sofwQzZ#`QS)@<4?OrBMM2|C`qGMB(B2a;z!ZfbWz;q}If z(n-QIdW&8Q=a@nuy&*;IC{GCKNCrx?(Gyft6TuyFEy1%iuA}l;<`1~0txXIxTWQ#G zls~{PWFB?1sH>tfm=*5EhHo9{~twl}lmtX#PLT7A1q6ca6xo>TG zlAn_@VP+StsA+IxYVQp?af+$whlHF~!V_I#mV-O96dp~h!SJHt3F^2qbv!-b;7+DM ztM*v*T*M_$7&%4n5ZE3?a81HGTCEyUHo{j3unsLck9(l^8m63rkTup`t?FedapvQ` z!Gzyrfzd}$Tu&^8=^V$NBOVnya|+-|8wge>6Sg1`uev0c7n&)Qs3isWt})z68C?EG z9bR}4to?_7CWf-ABPBPuV1^%-wS7{c+C>>I2sQUz7J&1c)s%_F(#84miIgC1nwNQz zu!5*3Cqo0v^(;zAUWtzY#g5&xG3YdGV)7?Kdlzw(YxI7p*-ghg;QxL&GSNjFPT

    xkB?rbb zR(F_;W0`sp#=<;sdESk(ud#t{5@FB>^~-8&PfCX_R=J;PLabF6;!Tl+U6I2hDTd+) z-|HSnc;P}*{q9K#5l^GZB|cNx`q?q|xqw`Y`qLr8Y}?6r7!OQ#Oq@IM+7>+C2Gf)X z%=at0w8piNtJ@n}C_c*bbsnw60aGhoW!^{ao5JZC55cU!0e-U+qHTW{&h*L99;;L} zme0Vd)O94SSSpkXUH6n@7xmFH;zs;(_u(gShukl@cpCs!Eeb%DfpA$P!-$liJ0=(Y ziN}yr*dyw}{6L$6GT3!LvOPmEG+{MTMiMIC*)7JbAwKw9Z`pF#q3q8%(N(VOJ-G-y zA`D%WR7}nn24xv)SpJ{Oh4(hJtO$UVCfl$O81-bwVpbH=5<{DgcJumMpFsNNR0dUi z=QAIy>;Yh-{=$jQyDI5aVdl$_Np6d12r>av-)6^}Ha{=RsDmJT&2SD4nHReBBum>l zde=1_RM6e!9LW|rIh_x=Qwp~>-r79C4`*@L_XXDz!-NcO2#>gLc=U2KruOK~_?-RI zODbg8M9%NB2Er0JN|^wdgSTrYlVSGcZEGr|&dgG+b8&EVw~*}k#fDkMg*IQQqOl@R zN6oOg{gi@}slZQEY~XqeBbb7P(?6N#B+YCB+?lzt?E zFG4P&ia!u!t9r^fbmsqZOPVRg{#qjM=;I_>OPwp$F6HZo%8O>%2#737+PtB$&Y!XfchY&j(P+Fzv8fs=O~Yb5 z=j0Q<#eCc@MxF+2u3-5laoy9c$uHp?-ssxAIps8?$B;SUqodi-)r+<2)?Tgz8eNOVV=(SorY(6|_5^XT~})Y#O;`)D53xt_Lb} zSj8xj#7(|avRu}&L;jjuayq;_9A2GP)L@Vnrh=tK_0WxTikq$pr?*?V+{wesA>Wp~ zg0zp(-i$1Pu}+hIs6kmE1p>Yv7P%*2=fhSe=b4biGL*r?CS=ygO4A+21-uC9fBwbY zmjGLmUsbvSw`E=c?=p7Jkr({QSmI^LekRez<*Y6ar0gK_;A_$#SZCJod|}M3r4-2% zTY+`l;zMk4?D#Vot5OYD z7Ucj|RFfL3R|1~XXod>ByYZS1MSjt~ANNnlRwd30V5Jes1Wd>>FtPC?+~j#wsZLew zgGC8CV6Rtf8h#+`n^h7S^PnZzx%UNz7QFX;X$Ab1kD0=#rPh8G{{{Z}8t9%~Fyt4D z)2|N9>NiO7-Stx$S!&_Mu)_ZIWk>c1+^Fx3JJk{1NM11=kj)!9)d7G8f&d7;M@)Rp zu=wKBOBVQ-|Jmn1Uv&DMPHm@G$)s(Qyp|V@oxtNvYwTb`fA+1_a^q5EAo=ZvlK?!$-s1|#-1xonB_CP z%_9z7YegQYD8mCA7JKXUlnwe27~Mh;9W8?liyN*2DbBew@2lV{JmEtEy6%rXBFl~b zB!0-gRAQd!E3(<~xPyJ_{PUpJ#Wcq7ogtz#FcUg6#?sIp)PI12j=DGpZmz&@eWN36 zK9+~yP%usx9jNLn64*5n20mjZ9M=Yd{br0N5H4~)R>QRNiyWPjk)5m>PahEHO+%J% zkW5OPGCU^;Opf`7YM{Nhpmau2?`yO4dUm`9D*Y1aie{R$?t;8x!OG$&D0<0j>Ot4% ztbk{|P}Y)6M+D1OcF_xuWR{NL!c-}oKM_Oal*q^jN&)@&&I{3hE2f)v<}fxO7|7w%gPH62Z{E(|CLtF~0rE5_-`7f@CEQwk~Z# zz9S2r>>l!*DBlkAp4R@*L8KnvIFkaqLhI3Ec zY4XM$fi_aH{R$Erb=>Uyu$vG%==rs6R&%xcRUKa9EkK1;t=E%y#Dbu(Zh6!)M zPx4UKRSs0v)A>Q7H0F(CkKEB|x62%Ot81)2@}gqKH&+?A7Dk{T%e z!SC%;hkkEg9Nusx&^XU(I;qFtsECDYy$H!^h)QEjz;V^=Q+XA<|A+5L!pNr5k7HM_ zEqa8K3l#HHSHW95O}4JIX)#J61UI)8dn$L1rV_I4hig_ykk$MZSYZ{?iR0Tp>&F77 zPNse!6@YdnVH0v8dO=95&d~A?x_h;Qg34)N^O7^KG#&Gz*I*^Js2Bq!7ZvbF+9)ai z$~>Dgkk~@n?8T&ffWy=4BOhwpiq$^HLp9i%|->|d-;3jb%>a_TG zWY;ew|EkeLMyiaoI#6(C_rD&OX^TZYcc1zP4)iu~BTNl^3Bf#rnhiBOKY#U;JiR^^ z=^zxy(*TOodBd@*)OaQ)FI1xPkJ5tL z5sIpH10S9%#+cMv%c?!E5wsY&4ty|kMyIAd=%-sk0PH*T={DXK$40atonS68 zS1}8iFi6&MS+~o3K@R^<01FEA^->-83vg0x%Ld_rzYg{WFEL6C4s9j!{vRV`*eXUO5!v8Wh% z!6bIID>+oPnEjt4g|Q~lfueJ}5#&sHx})>}000D^a@OvP28CbhstBps7C`mer2r5B zN(F`YtFBPXcc_v(A?-wjU6TI_-ID?LU;Qd+pP(-icq018JEeA0^;J-+HGla8D-xT7 zFUOW7QV~&&j0GdXlQI0!uL(dqUGF9YgkrE4DJmO9Apdc|f*NQkpa-%rkqV}DCG&?Q zP5+DKNr0bwEU<-3!PH&@t4?|f&e6{ph-<{U)(bSGJa$8bT8*EioZmxf^8_u6uIAUj zy0xC*QyTCdxdwT6%>jk~Bc@=3AytI7oJZydyfC?cn+>@WFTq@PAg-nr9cpFU^yz+LUAHOF}|dSzGDu)&%E-R*;SahbM8c zJS2aE_#Co8CkvVXYao>RtP4Kx{uQ- zc_IiM1X}L%o`-II4wJ*X=$rb^xP^*`8JBef&Hnlw0O$%vjt78;AqRj$^8wtrvWOgF ztTVWlbkK<81>}>z8_Ar5nD2WD_|kXGy({6rxB2pFL3}3r=n#tFDXs)||KvKt zvZDGitU^qRXd0T{oaiIWo`r8v`mbUWmu2K+V`==SOA>t1fg@tUuaUC z7lw!1@9InI?9WPRQN46!DgNA1#Lp8si;i8aPLua~p$pJ!g?}NuW#APg)C578pb@T4 zMthT+w-}>5mc|5ggpir&tE-=L5=3C*jgBb}=gGz%@1)z)Lc*IXV&j+SK0sudmmbzj zj8&STT1B_X%@7leo`3Au6i*)_C)c+BD=p?ggOt^h(3-(v6RZ5P-NHZnWTgib&TzI} zayrr?*Gh~zU1A@WkHdEEAN*SUk~UpUEg*FObHBg96qGmrIBj=8)?Y2`YM|{HHN}_; zL-=#2bl0>ZY345~?*Kh4ChUiuJ}o>`@;6%eM|Eh8E|8D%JEcg8_9SfrJIrXzU_H|b zXYZ_!r?LtsH<|+4;$%7G9`3+ia;VHZ4T<(7ZxdvDX|k;??FN-u0}Z`Zj#nPo%y4T1 z7(PyfK`y_$`D)@1!ZX$nZxfGg3>3%o2NdOH$?+9c63;OX6^pN9sDtD?gQQd9xrozPLyN+G_AKeC?ew*|(EtQR z{NmL~Kcrk8NoD|6Ae(PaD}3UH>rjYx$pM0wRg~GD^0U2@w}zr%J<)5CchG!PwF{>b z)7-&JgLMvm3h$EJO*{9ojE(^H(1@hc%IN$TEybRxu~2D)+L~Y=-($?t)@+qjT=u~n zakog#!n+=|P{kjJq-i!M(fmO1H!kd#tXh-1tatQ<{!X?Qjnd1Vm$5d-eoC(w08%iSZwAb~K4HH`Tgt{HJ@ywg3PC zAEZz8BKuKi>iB%_!TKpb>xc3(`UPdAJo>hoZD&5<$Bub&zg@+rfDmpC)bi3%PHY|C z9J}W1sw4>YJKTmp>W=-dj2NnFvZDBR@(1!4CD@z2&0rlvy3=MsXFW|=wZR20q~$T? zfXz1uOqIpq{&jgr(bo*h7MXGbi z4mR506%cczjZ?8WC>h98woB%J9#p>gV|Jz?q-NS*d<7=p6=6u*r>T!Cl3lotTmPbG z_{TZ#eSbomT~NP?iJqkH!kn@*!+>`7^XS%-j4|dj5ilj;K+ExdzTh2sTt2Z$>X~%* zj>YeB2%Y%E|D~a$y9=cS&5H+*e);P=OPZVYRw^~K^cm;ed9ev47&Z904au#Aj(q`wf|O$yPnt_nwoc1*l>vwmyzIlB^G9f^+mlm7}0C)vs7tPRumYUS4VCPX~00k;~ zTy)g)zfE>P2kkG?!ta%^wlXr|vm0hE|4s=O3thLyq=rie3P^AO00000T$b84Pw?mfaXE(v@bTjyNdN!<>dw3M literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/admin/alertsettings/powershell_thumb_0_0.webp b/static/images/auditor/10.8/admin/alertsettings/powershell_thumb_0_0.webp new file mode 100644 index 0000000000000000000000000000000000000000..ecbb35edc2029e1614233bd1e7c05b7511361bee GIT binary patch literal 8328 zcmZXYRZJxe%%%_St~0p1ySux)!{7|=aBz2b*8v8%!QI_qa2?$JaQ55mW|KerTr^Gk zrcHa%CRLY{mJT8X0Cc3pRkc-lN!|bR8)5+Y5cC*OO#op>?hM&73i4u#CBE?>lxPd5 zJ5rp*wN8lVnvFic(}Cqqn4jX;aoJxy{lE`2Rg-;RXJ7aSi1+Oer5iY~%(C^1iYnT9 zZ_Ms>9~gZ0iu6?tmH>l0;O^&ccbfa&0-}Mv;EShtaQis~_;48tJZAuu7b*2L0@>et z&5{g%DSgl!vsBhU_rm*^KAT(zh63^4>t0#TNxDdO0s_Et`-y*mCjp{;_+MIIcprF& z?Nw-3+toRE&p&TWvPl5OE&iFGCa)xa!MDU--~pf{X!!;27JLHS>7(!a9S{Wk_GR#u z__2Gf@{9%sa{~iz1KxkW_N}A!qcxx%?k)l+!De7Su)!xD7~I^q2HXexfh|6`E}QS` zuXpc6hQVo|%n#@};zfK>4pCS|B|9D{lgSRrTWWa^4Cab%jp)$2wsaV{w=zf?k z;H=u6VKnge$#b6Za31i4fu|7){NmG7ayMaIZqH}kgc|V?D95Y7FUJ+uXr5lQ6i%4h z)m6^o3L_2yf-zuy7@CBLSnaj5)rY(zhQ<|}^2@6W+$@7DrMyBX;*>Fa|7~a}T#E=S zvb{A=6Zixonl?ug!;Dg@8Gq?Oe8qstd=On@^-*}$CIq_vALXo$FP%S9{;|qo6<~#= zTBLaW59Ceo@l1ci&AWcX{`1Df*RqTDFz+e$-HABU9nzThJC)zE+xBgaZpb0Q zNr7w;HfeG=f$k|=Y}3lZ>7$^n_qoU2B*@Z8e9i6F2!r}KQMl&-iv=;QrTi$vQ=#$V z_7l99GU_fP`e>7oI^l%98eoUw^~g}kWl)zG?Dvdxy%ImQd4}%x2O)qKy(Fcv#|O8k zD2|g4adbT(y3*DJ`MZ~H__XXt(Q@b_*cIr9M?7_kJbM%s+0loi?Lu?ueKWA(J%D%! z`GznTdSh4c`JNLcQwK9X{)U5ccgS?A^yykeq!B>O3G2=yLl3dSb2sVur1a@MPox1P z<^Y!(I48hgLZkzbksL93oLKGf_{VWkQi@1T3l}zVVzL<2rZ0#qMO}&V|5^%=pY>5YUe>W=$)_lyCsx>%e(7U8b0} zzKVM(Jg^o30K9!+{sh0mh(HzwtElyXKl4de`ktts^h90f8x9Yt*m8z3Gy!>xY&sQ> zSPZ>LgXNHwnM63!q_xsduYz>shA;dS zx}9`s#yI*)G6kTCpsDCO-3N!e{xMNi{EYdpnjG}YbX zlT=cjSY3B2L4PvHGd^E0ABJM3*=WJJ+E$jDSP~`d#%_hp{aCV+KZW@E>`rv;Ip1oD zA4EMAg}eO=$t5tj-^%_P-z-?4^!o)OpyUs@J39Obv8ls~oSIpc`IWn2MqtiF$z-l3 zw4fo*tw$uXU6{QHZ=&5~nMtUM?`w7>F*G^TAjV~BU7$Q5!rgM=iiIAy$+0Pp8$ZWM zwmSm%A{5!=nMIU z9pTxLT{qmEYR>7O&GW7*~jB^*p%Pzc0z$$;XV-d`r;Th)hDZyyFzb zI>jaO+jk9lqhHKAvLi%)5DYI%;%Q!i^)Ua3k>dA)lyzdZFFbS}zGY}5!pnjd#O-AN zFj?r9bRk%yio0eh#~j){gyI=FOOPUUwvhxyI@z)-xAC4(&c{76U|ee zknn;kG0uu>Ae4yxqw=^uiu|;3H=;LJEpKopz-hH1p|_N5lUHRP9=rnC#Q^pshr2B0 zVEaz+H8U148yv*oqC`JSq}Hn9&Dpb6JQ=Ky>6oMBH;twV7j%`jGwaUy0g$3P%Wpx? ze#Yl3)nw|9>wwlKR;X!atQ=c9proo5fg#+ zHLs>77*iezL&n{2+>ic=m_cng8k@|ov)px%sBMNQhP66}(l+>L=_* z?$8}aCax>YZh0m~qeSeglvmQP)UQFb0tHlPqV%0~5zimN!Z|Ph_bn%sSf=;o>X832vz@Z~~ zT7NFeO1;cN9NO^v+C-HiKK;6~+NESYk5!$w;360yEl@ZFgeTkQ1RAADo zGgo=Qq9HVB!)sF3N9^O>20xmrC8E9`Yslodp5vK3G>pDJd*IJ;k8X&2K~Y;r%^4BW z68S0Uwb))>{1w3?v*Z+maU+=PjwjGz`TVkACq=GYN%!A<}0G%o6Q>kBgkSn8tLW-Jirv+B)RQJoQ zf~pSRMcXaq{KAiz!T~7Vp*lqbecDg&2XsMoTV) zWU1S)vU876A3$du&*L?fr{@bq*$^V(~ zNUFp@cIr=2&{C&;e3@PG=U+ zKZp@k^>W(|T+4RWuzY2qs>jh%lX`n8`AI~-i3k3s$?J7{%^G@fvxawU?H+kW-@exw z{Jdb79oedbhWsYiGi4Aej+-67m~Cptdnqx;aCSdccXrk2^)a>Kud~7$7U;tG9RL?%TLfyI0(zN}Q%b9(0K)Ul_sp#2!k9`|$I!f3ASx0# zm{PV^>_5F@%RjX3`KV3xnNu{ocKQcvV|LjbLdCzZ{W1p|TV`Am84Scv7VU{VO}wn! zC;yf*`uDlj81ZP9Os+I89yKnVWD%_#YkI@9djo^402YL|LwMjLP)))y{C#&)w044I zQ9G!Z%*X<`r+@78-nDrfn-^Khs1+@B9&f72-T3@R%)iamV>x*@WNq(W-j8{Rs$U~N zkrGwmUY-?Lk`yMCs{WwzZ}(T>*Ir4j?j*M89zTP&vRc8@G!_Bj^vfa65^5j*-q8bw z#myZ?KCx_9adDn?4b`7T-ep$QYb|cVF}IEV!4YT2fJsO z-F>YDECLiL(t8HUz>zBA$KjX{cwyJevn^Q!&iD`RR_Rs`gt!+-o5hjWa$;j`8&eYd zufzFPVZq@tj$XyZV98IsNgwL%SeIcE#g)gFl>fu6$Z)zp8sEN#BR;K*Ft+VojXGfv^O1} z))c`XZPz8~kPQ{)XLL$pPbqo7G@?Q!u4?`Qt9dH)_j{BOYvr5So18njEpTBHSvSER z)=3F6_r|7I{49|Mag5f4xZzuW)nv{C4c`QYoBU8y$JR<`(*2DqfcFTgwwabCk*x^h z&~H_`=~^&vxuq99uUlQcW}D5UUd3NEYLYsbjr9#>WwkT2^d+(*9`2UC-5k+7RKO(l zu~Q%$10fd}CsDv8e&RvD>$xW|CcK|GcFrutr5wHqHSOJamCPg7@r4rfCNH&-NJ^2A zXa*V86y6RD^S42<)>3_by+KW#D6ShaYuA0?vT5ogAYm0t;@1AhZPiKE=LT_yZeHB> z2=|OG-eU8UcnIZ?-UT<9wEkk<*CFE1EUs*8Xp;2}Zaqon-j4k!WC!KBj`a#tq7_nP z+XUQgDzxe%>AJ+91@Q?|-j2-;oLM$XBpSBI`ztMmH2K`+24tDeo}LYOlg!yMXCnAo z|3N}`FH5M50S&sHq{^yhFrN;mSIN!yWkNg3fW%R5g#A^D^o7E~>xhWn&;FW4JniE$ z^~`p1J#CWQjodB%ob>pBe%B486}bKjL)z-UN>USg4tXz%kLFY=M%@_tO(A{__!d^K{z_i)GZ*HZG$YUcLHtzw9XBX^aDcd+O ztXJ1b7=+pNkNlx;7U8kgh%6jxWhCD>kbbzMAK}ArxaoonQ1_?kB~*EY^VKmZ0vBn^ zx)=aHaGF*NmcE;wKhIK&uor)!tMY3- z28?LefWLi?c%Tgx*wz;bJ$tfT)WPa&Q$u$~ytkrI!02dZ++|?TgU+Qqzn-HuZy=QW znUv=R_@<)kw-`E=UISFJ9?DFqIBVa{YEm3kl^2oh9yJ$}0`@hIhn;Wn;lF zw)Mar`^eqxwPOJP1OwRA&mzhPv}yNNAgF)q+uEjAZ}a@K7)t?Dw)%U5|1E-OeNes&^5pKEI2b#Bq=*W$6vivtLAjH+#-*^v0D zZn7&#OX>!f3?wMN-=P}5L`(=SjjhroqSo@j;-M=EZD2QjCoIt?Ruxy;S-xxzdhYL> z5y!SXL`JPK{6v8woJoGyThIqQL#_@ey5aSKevLx}A?H`#%fs|^??A3wrhz=gcN^6Q z#ZogB(tdU7S>z}SE8{TvHnWMnVLh%fA%x%>~tmZAi(%6D6O?LD(tXn&Bj7T0t7?AthwFvRInRD1Z2Qm@ic#H9aR4 zj+j750ty6wZ!KS>dW^%GZ5|&O(z|s4=JBB**;7*#_@!k-B7Tc`N)GGWpNS_{7CRWk z3WxiF;OHM@4Bp~HwyMa7GN@q3Eh=9#kGusX|52@ zDp>EJ*-+EQ?dpRh3>y6(4MqFVwbQ>xJ*s}{M$gW2c6WGQtXQl6E(c(q15#voR{_m0 zg*PHh2E`48bZy{NUZ4_US>f^p(&MqXWq%QV08V`d4pcCHC8!PHwZlc z@9M~;I0LA*ni;DkC2u3lv)Q}>UZAm`RT1n$bXvo0+7zN^I4^dAbef!3N03YDplDg~ z_hCAF)BY*JH`af#oEB{E9iD+tEk++6ch=jZ-wst37>a zYbouR_1(2&m}!d`O%rfK7K}AvUU-j)S?1nEGKQc^1MNRDmIP5ai(HFU5 zIBV7$drnrT>n8oosdX*n4HWfVRtKS}_Sfq~In8UQTMrPoe7VzUa;xDS`F(j1Q@h|2 zlHS2+wd`a$K+|M~q#F1CE-V+XSl%)znyF7c_& zX`+!Z3dgeBP))+j#ga3B>sdcG4x5rssI}gV-w<6RNk7@&A0^;M9h@&It2yfORHnZ; zqYc9iN{v}@21qQQD6yU{r$=ND=+_7~i|zS&$H38GAm-Lix9Bci_M0!YBMtJnt@94SEkgGYWvtyH0woYm6 z_s4%EU^H#7|D+Mm^zM`?#Gix7_W5SO&B`c--!q{Y@zbqg?lIxk8{Vjo(E?pyS=;b!crXBa|l;3(ywPyd6hIm58 zQsZs3Sr>swpA59Nf9u-IC{y_F$ooga*-(%MI}BNw>R%qo7ecx|XfVOUNt)6VlI_}j zV3k8?`lLGh7wZ3~-Wsj1Tp{x>V*Qlt_J6(io_e*p`y#EL{AKYc=q@a|eHng*QixdN z=)K`D zkODFg+r9cgB z8w|WMc8+-%f?a4H=JUE1K2@f`(&-KtoXwAh;fVgos9i9W>gho)yGr}n{MZ+gI?B02 z)BUShcy#5vGUb<1W>A{-Hsf(G!U9XwE&WQG+mNpNBAjEfhwT7^X%_|*Rq0t!0jI=J zd$6#+c#h1fev{i$t@)cL)kM0JZhg6{o=LGXE7U0{1{0X7ZhHV`3Uw3I9=V{V%pqO02_4*$Ni_(>aKy+}u~K0&pyKEuvv{JHkWq|E8S(Q={_NlKmt9o&9h z(7P@f<|x*iP4kK8<($YD-V9PvI-YGGj;?__%7Q2J6ox0i9#-TtCm~f6Y#V$if_>Ng zG7;~5UtonBq+!)yWi}xqkjE`tboaWpv~d1niy^V`BNH^W+mHj+o#t zjLFAVYTLdSXJ0#bO<3L8!XJ^KUdea3JBxamT-F zCdo(&Z~1xMi`ftgdyXQ5K};t>9wAT*#_tTU?H(9cEi+n<;we_dJ#04~R`e&UUFxaS ziw;cZq7P^H!dxL&!A&Jt*w3stk^2cp^Wwe?nQ)Ykc2|E)bS1h#D8OKN-2ZY!+G>4V znll_$Oxu1qi-Tf1@!w~T&xzSQ|19sGDzH|E_1_;}UM^hF>A<>bro8(pdmGMi@KX&# zEne69y|QfTeE09*2wdUsku{fAacS1JZa+`bJ?~#=WKOGd_+g|T;erx8nas%S_b7MU zDpk0*f5M88(G5E7E(EW=5f9$nPM2~u1$OTIa&oDIN@B1bNFOF7xlye4 zH{>gVn!RZ~ic1?je_|c~9eyN7*ybdDG%?m2v0jLI*5QIj>F15&lG*)e-u$OeS^l!- zpAUKGF~@WP_aQ4$2a1U54%oD=$Sr(iMgWB&iTz5GV0c}xq?a0W)Fbb$ca^<%1l?Z5 zBuDIJqjhj}$61!{FlEUJipM=*P-v{0ob#ig+z>tGbW45@^GED-K5sJ}g)vc~n$JT& zx4$@FK!PjJtHO_Xuy$Yk;H7lwIb$46@8CDL=+NDx3fraCqW)~xdmY5cxGRxpPzqVZ z3<`m;>U(oN(@CEgg(Qz;oOpu*Nq&$ZRB{Ir;XLv%pPQd79Xn3!agejw2U zu>V<{8ED}yY#V*T7zPCQ{&*$4QA>$uFWIGFg2=!v_|<|pCg!wF;kB*P-wqKMDD7|7 zR;{J)6P|CR{+JTB!qVO4t?eJ{tE2%gDE=Xc-2dADpR2%Uqv*oUs zkBnYcps+Mh){kwc!Pt(9=-j>7!tQn7lmopw5Qa~$CN-*dHhd$O`c+g?q{1v?Saq-0 zujq4(Ol=!PLM22!Fxr54PLKIlN&SGYGYA7JSsi(s$P=M9E9MRVlTx53kuPnoslU9a z`28_92W7-xDt%%48}*Uu=`scfKh!Vo0q^X+@)d$!BKAJ7Tp>HN5=k4c9}=|>g1zt- zuCdE;OO|nsVPR}hig#E>RRp^g0Ocv?=99pi4r{ryxn#w9KO0$xun-INRL^O!pY$mw z^m|M?M1zz3^`9#yE-r3XSoK0eEHQJQ*@5}Q5~*LJWr7Cv3~$pVuA;qfDS;D`PdU|f z^!#mMS>`%!O-h@Vs|FI`Grv_ozuCrgaEO3|b=f_XWPm zHQpCfQcBCoh9BRt;k;ymqtQ$aRs7s`=eb~R!)Rjy%s1^6;_H9gJLf!4!857XQ|iwY9rjshi`@QEY6qm;}uJep-Gq z$h`Pu?Md9CDND=*akaafk5-fq@etDn_63xf9j@hk_Zl-|`?PtH@V|F6#v3iXTz_E_ z#QS0Dg8P7V&Zf%?^KnH9MCYFjx3FI`^-RNDH>Hq1->6Cyz%NL&VF%?PSW5=^2=lb8 zYdX;6&=4i>hQb#2JQcf^y6<^#AN+|Pva8_7vfQqROOc#&Kjmhv4TrXtNv&lRg)sESm zEkfG6t$dyjM2Qm+kcPO3qPilNCJYb|5YoTL5)4QW7)V%7QA+w>2^fOc8iO8?Zx2h!9)x|Szydya3=_O{D0m4W(Z>-K>zw6V*A%0lL>GxFpU+MKCpl- zTbdLZNf9x*3-o>fe58rp7mD5+iV7!d7v?fM!uuQx!hLq#t)KIFe+fUC|LimF&)PER zw?v;GOuh1OR<0-e-MZE4Kge2mBlu?DkLlzq|tdi2rK>XvO@Q z+qwPOqwGKSzxR9ff$@(6Gy?#DwGPN{LIB{acR=vb|6h5_U}5jfKV}#3L;G&==zr^9 z-@o&X`(<*pR}HZGuK76wWS>UHz-d-O37X`;ZAiqQ}F?ai`0X~4xAJEs~eZ#w)_C{=Wjk{^UQuzSBP?Zy4Vgqx{_gw41hBfIvX#1^7kyc>kck#?L3f z|C6$9FW#T?=kXi$3-K8d0Ql?+{_=j;c#gj^=*nOH=iJ*j&=2od{ny$X;*S5#-oKh} z-0$um$cymI*Lgsz|2QD|4)`nh!~d=Sdhah_&EN4~lgE3;7lRl7J;376wl~XH|EK>q z;w|8)Pq;tXUl3sZ1NsdKuzxoAua6x9?p~fhT>;}i;ecPsg6r{L{rUUKT5LI=I7h-v z5iQ~cD$6;$RUoZsKP)01EEir++rYltwG1~m0*=IBZL=keZRju|sx=gv;oqs|UX z(D0di0(>RM!#PVPx4=U7sI^1N_!M#nClN599=UcX3Fj;ph;%}VxFeSiDdEz|T%N`t z0lSnsAtgL=nZwfv5%35+zdr{9ZSe_EXPEXY z!@d8j8j|K=g^LIu&&R|Pw0o;o&@o{fD9UY_zC=xHpJH{9rsfXS+7eye1G=>(s+tdM zb5m>_-C6p;Tk&)Uo&y^P9M)O?9HNS3wuWDxn%E3;19Z$kHL#CMHAWr0_%R6m_+d2q zm4r=9JM_QJ#ntjaY;8%Z=72fc64fjMvUMbVPUOVIbmyi~+E1NYAiB?1q?u|(3N7je z>=|~o9TqT`((98)%HnvsERI4zM0h;k-E|v&{r(?wsjB7y`P%=uyFk}&d*O0pjE)A~ zm?b8ca{;G74yu))vus=~0OUv?aCVACrrt@1<&FHp$E z1&Z{FGNxF&UMgawv;PCL3M>ZsJlLjJukS?SyTMdpILN24{> z@##Rct)}&<8g4~dzv7@|68rO&gP9n^v)aH}r#@4UU*=M?F0UMS1?Ucko{%sD$7H`q zDv^?qmz~>c;+TcA;CP3|?~Njrn9;x1YRD?Z-vl;Xh7du-&s+YF-Gvj{8_kyaHEXH) zpehCHjF=WbX^_W?*!hQvv{w5ERl<#aMgati57l-jlJQ zL98(bawY3fE)N9JEuvBJJGdtr4CGUqHKz;3AfrxQY&06k1r+f`29UyC9D=Xr6;Hit z5@l=w)?WaWJs)710Nllrm{x=&Hn;>wM6z}K1CE)7mEGIudj{19*-_Fl*U#!9yCoGb z`Sp5xL3&O+G{&IrA8sKJBeMRBZ6zzQJ$yXdWflhw8>0{xgk^!#943El{?v+!c*O(~ zboZ53{IZt%nHq@my#&{_`gL4fUg@5}TFA+O?)!|e!VTZ-2Fd0AEm17Gs4wR!Sn*AX zOul#ZGb4h;l&4;(%W+k!;|x3=yT#ofHx;Goq3$?05s~M%zZRY$B z&^G&N5A(oNa|p!f7qk4nXDn8uXalMpEwG=4#0y}J%b@%@QR)&Fr17P$m+7mG-Zhpb z#Ei@i*rbLo5cq8-%g-&DOKVR~Re^rSs1Z!ax?a6e%NMD7dm&Vxi*W$C$U{kcjS~OH zX~-(Y-Rl3JhuP3oN;}mYsH(-?>NXS=yQ)vUSW^ZpM7~VABr4$2PRRW=r1NRmeBbK@ zXQHAy3@w2XA`gymYJl(k-T9){4W=cc@sH`m`_Fk16{2yEdAv2UczWaW12xl6%eZEr z8cE2^^fsh0*o?SA2!sKrJ|Sm;U~folp2Yq+$`{O$xGtHTIoR$n!%C0SENx$rX_5e{ z5nFQIEkyM(ClJav?8Qxd4)X>iO&i-QFdJBchR1LUH7`jtgM@59fZ5Ij0c`V0!5 zbgW<39nn)QlkAQVLp4MF1)F56AfV5M2vqeDHm6^9 z5bl{HP>=vnuEEx5D6UT$&gibj#auNsEh=N$C=m9buo~*h*Rfz7v+L^FNK`K)EgkDK zydM^|c+uQKp+}75BJ2ZSfVRi8Tn6qHKaU5 zU)1B*6Q4Ko07)J#Otg|lkmdNCg{EwLK%f*~F24ux=&!nNGVM zIJLe|eH|e6>mh6Kq0xFsxwBJ>=z1F>Z8FI&!yGuJgsh| zAHp4~#h6$;1f7mlW&^YHynGBOl-wFmM^x36u)LV0JfeFhken_vc%rA)Hh-&52qI8{ z1F5bd%G~?ireQ14J@+58F3S)J6#l4tg`RCK8a@W=-w!wfB!y6zHZuLD9zcL-k$$~4pvKF2-k z>5~XsapPbYD(x`m=EtI4C4X2xcXM1tNOQ-aq0SFTpTe7WD`%HBQxrM>&V#z~Ilx@3 z!=x|b&NA4&f?_npd6rhawEV>6%`O6Cy=Baqu{w#w)0Oi~1QukDk-71h2|FNiei=3~ zShqoFfQ;KKVyJqiGDDGM&I5-C|2^Yx>C;&7&Dop`aahi0vaElkV@t-}BHPKuo){@vOg9I4tHC^Z5}DmCtAAU8jw4j2QPz@?e-432)NFV zJ*?Y+c7vEQw9<09XZnq`$Tj96^ApCL@ryD!*gNUCLCN9S_5xl1@Wftr0#qbyEMRZ%Txy~@1WE;~ zt(moU!wdZ6ih!}ONJG8Ol>}-z1{)s9w9)E{YQ4jsEi^MGd!N#PHa2ge_D`RF5%oFA zI3P5K-tcR329z#Wd7ZtSq?n~SMrN*WQ0$hgW3%iqrx;O~C%}G~2^9MfP+F=UPn-09 zaFO?EkRWM=Dec9hUU1QbG1I>kRLc(74Ciu{Y z+6K9lRe3>8c=Tl8`g6}6L5~a5z?LKrV_e(ew*$LMl?JCx&Jnj?O-+4R@y+nMfOv!GzTyIykdge=? z(8cZZneR3FNo7fP!}rFxh}ADodWQ{mpUc9m5nL=&wi~WD-chPvelQ?*uzPgHSni2;1T|_@wC|liVRHUF->sO4}XXhAN zVVJV==aTxQ_I>|Dz+#VtA0PaDEk?V}+i9c*%JtQtx zWIDgD6Iz^`Loj&2M8RM3>m2gF(%vS|%fasyyh5@*nM137EKy!GFbJZ0 zAhc9@K9a#@Ora~H)E>u`cDEBp>1A-w4^2wjJ=kb0MgjdzR!db`zh1@;C$%h*@ZK~n zAiu!*fqA6lI2Tf)yo=e{Fc5J|eMFJJ8P6~1E8EHWa_P|%!*vVvdMS9`wLp8M1SJT~ zs2q|oV0`cC?5+03?;_)knTKG~@|BQXJke|W5yMh*#ww_Ip4XvIHXMSHecKJ-KRm`D z+U%ox9uKYd_Umn5?lGEgWbyma`=ficjnRU7e>yy2;#-Jk46nSFyL&f!=ucB90*{IH zeo`lGRX)%fN;M9ivw4-&gY2vL7!|j-+A@7NNkMod6DueXZZB@01q$R-uJwG*VlL&zhpe zmGhEpMQ!i=@0h<;v}I6(l(=2SQlo)bWTyN{a9VbE2xU}8pwD7Cvv(w=Re0z@w}O$K z))mXdK^Uh5Kur+=JeB>#6hHbtWx|#uuX<4K8iHXeQ-t2^$1|@7SFt2YVgy1?cP<-K zw((OPkG{+O^CDji)D`&OBz0K22N{MiSy3iuO$`a^xbLi3QX-2sBRT*T5>6;0@B^{+ z$d1}R@p3rq&43qdKY&&Ksx+|4T@Y{Z5c3Q5w7!w#=wD?AYoYcKAyBD!pb=_PuUoYs ztBSTR2MVycrdL14uTl$7JHZTF)V^-#mMX9^K3h+eiE?mJQ#7IMCZHL@pr$sQbxgKI zS-WtlO#-JOl*~Z~EYfpU6CpJ!d0_^n+7A*5%Plc!=AM6fw*Oopv6q$~*r(g@&G!$6 zU|F!uM^)@?0yBy<{vfDFd?Y$@oQ(0(Y^2BQ+c`WU2g6QbzZBec@vv?_UC=EUx1*>r z#0wUz2wrGgA3?!Tu2y&E*VVVd$A)|P&Wl>q4{cvxWf(Au6l0^BSkXEvpV_4Q5Vm;} zHFk!>2(jT09pLxS3R?oy|Hm01;9S@h&unUE5qMhwA+s9KF2nkC~7HaMJ z=B@G-vx2JL3GWc@Ar3cz+wU5JLRI9^t!sv2Ns`Lba`}4|~xA^X(Y9OPn>C zzq;4%L~%fr&}w#p)9U0HFQ&X{X&wY!r+c!%mp(B*22mOU(YSpW{WPq&<(m6Hlp1kLMaT~lhrv&;ru$E1q zI?E~7d8`v%FW5z`0R5591LIx0i=BQ(>vPD?0nkhKNaxvb-rO83A_Hcf^=6l9_2|G(JQoj03 zsvAGG5=j3I2u05g#NEIES60&<-K1wTA|h)pfRv;Jlu+ z=l$0Wid-B!zxabq4E33xH&%3VU`372^Mb$4ap%?ruCtPQ|D${lkW+ktIo+zU2)|Ko zDY>cI^gkd7jS&?_B?os(d7n|PTk^dt@`|cuOdD0y(Sm#AGtbqiA_DR=8QM^~3@dyN zP-*WuWON%%$4>?B>WPM}E+$$|k|v-yKK{}QbbK&UwM6}s-fW(_9=U;HmV&P$VRlD8 z-hSxarcr5dO@;^@${-jFA~_6o6MJe8tZ{Q}4r^XbuKam1_QbMdZaoWW_p&C^LbUveUzik-{#6Tb_nloJe`fEiB)G=;FNhQO+j@LJcKK%>^6tv`t@?rhMR zE2~WL>#B(%VfH>6!eN1HV9^rk?{MC;7n`UoDrr##d}}-r~3FvJU!o;?q00r<9D8C4~n zS5E?xC+8peQ~8z^;X%+)F>w+*cU?})9Lyy!4AJ>IbfcrQvai`KlGML1Cb(j51c9NR z0Fr69l`XuoB>wVul#T}5qY!ML%Sl{v9S^ik?5ZYe72!shNodBXAyAfRbClB)Qi0iV zdku(iVIDsk;yjaC6hFPH@=W=aaEu7uyFfOhdwGZ?O}JEdGy8;vN_zK7wwRA!91yOp zpj)17_EWwLQTE6+o~9=gK-odr)nW@X-~w`w2V*jL)NBbbRMrR$wRy{0pO^4N|Aie; zCqkn&pt8K`z@H$xsUM4bm}TITI_tmtH>^cyCi2ept3I)~Du0xZ3wLw}-NiYAw&Sbn zEP-Hl4Q4y#-P)5CNrS(^fN$8b+zomHK}kX1;|>VhiUPKi$QAQF9BNW_z~aHsu~L3B zo(Mle&YKgOT3sw>)lozMvS$k)Tu*r&=4V(NW`sFR8Xbh#pB$D$1APlD_a4VU>a8*7 zpmcW$kGu#24;U9jCS!0uz<*4+dC|rcqfv=6Jf{gXYeRWxJD)lWimotmj}1XEl{}e9*H4Rp9DofDgt$y#S15Jld8Jkm+D2i-EDWd#J+LTXB;x9V zGtFwQT9rD-@$mN zwBYl;^nM=km`jT;Dik{zWP%$3^f7fe<+T&4K8LfZ^~ERFmp{o+$}Ywl95l3{*^NEM z+@Uq&qu*r){Y^U}wo(tf-kB@9r9sxTV=*I>A!t=yztR6?B_f(+EZ`|stA#PJeVs{(eplh}%N{nQVC~`K%z-c>*!yceY4~bt!9@A( z8pZ*_(pC`~Kdk4)F8{HmXZ4-kr$9>%-he;~M8L=qj}an*$N_pdvA?O1K67vqDT)xZ z8`it34rGR>RAQ#F8V$&bIw)?8APf9}t3viSwM}o*>H-T@2R|+sM-}AipV@;>h3UNM z86ZDz@uuyMrM<;}cyzhqI~Dbu=!F9}W%S`u@oHEoTHjbMd>!G*F*w4SbBS9^*^FcM zhSr&l!$N5KVFzVfv9~m#guFXwl^m!@E1u3Yw%>PJl+gOIX#|Bhd_=kSw7t85-GnE& zRpsyb0$ZoIiN>ut0@`#T(7tM24AjmI>y5DRT18zrZJ(lxb{jb|H;TZjtdJvxbf;a| z4%O25duv+k6C_`8cNM7coAr)Spx?o6=J&w{cn$m0k)?Jf5~e4$2;c}ica?>m8};pG zR`{{ZasJdd{M%e%R=@KKRr^&-6Sx)(M335;w*%pu`I)OS+V{>!!UI*@c$8mX@0@kc zyE;ef4qn*V$mp7Ug~2T9irm^X!hMPd$D`eUJ=w56i;Y*2{zicHmu{IdLqX2Xf-6n3 zdPP`S!4w}R6D1Anq|QvVdHw9LeHACnt%5mh6StSdGN?*SWWjgl-^|8}+Jnb9@qWYNc=VO-(aJXt_#dxj5rj8a+k7M>K?rAEm( z!2EN~QnWgaWKuipcp+~)WU*|I)iQAup`r(pEaH1n8}|9mWl8uj!=$?ZX;hkc4i9jAFV&`ntsOHkVx3Ou>I^=5p( z)xeV3ZxpRFlvcS{uK~9M=9wirF|( zlBx5xEdA%2=r$iw>pE;@$%dct)W@FJ0|b^OahbdT5m9>4I6Blxsb@3-a9cYkKb8E= zvVnHZU$!z~NyHqUX8HnV{(Be!aR3Q!Hlkga?30a1jUxU82*(p*bK^m6Qa!=51xN$4 z*8|NN5nEL$VD_?)eL(WAW^pROipu~KMVIYxh6;UVKJgHO&&HcuJdZCZcYt#0xTZ3S8T^!@gctmgDU zK(C;^(gSGU?I{hVlIaa>GDV<}U-p)h;sNV5XLI0=b`O$(ekfnq7`LtTF0jg5*a@mf z1G^>1gQt)CgnB$y$;C`hb`JuiM}wtAvxPg_s-2zSr{vzp+#`c6pwvJ0@RJZIe?YF+ z-`-pUPiUR$VFlOdNeQHnm~oBM#-Tb(Sj|M!5~y8FJ35b*d4ybl__*I)?-_`n6tZk}tyF6YlE`zWMbVJ(#cQ5rJS+07X|X4vASTUXK&AOI*e}j6=wXAu?G27qBOIK ziRFnoe(&QyJdC3(=~_f*T*R8~8X2EczaIw#Dfe3OIwcV;KcYJQquk_HX}RUrYHsNv z5R6FzU)88OQR{=!fF(o-%dz&X-gk%}REl;gQ}&d=%#F6$3BDr`V0U9j%BSh%bR3YZ zb+0_mYdqY!@7X{#^2bD|x>QR&ROWL7E8V;+9NSEZBC;XX#;U{gq@$5iwCL%S>?U zj{)D<>!$>aV1kmgaARa1F1YJ{0dRuIN$x%lKa-TVz7}?(gE#;LTUmH))$HP)hq}=2 zwSok)+GyLYJNVErGxg04$m>zG@^((5|8o0Y4a~)*(xPxDIoO%Z!&BTgoT-vA8;V2&DTGUiNQ-Trseaqjq@;v2j-4ENv zLNEoK5UIyEM$-P(7kxKF263bYszY76i$8z;fiOtVC6~7onNd|d&fNR=0BnFhb@MwI zkt$@c5FwYhTL_uTZG!H(!WYfenw*~%H{3nYQ@t*cdxhpe(VGw-F{o) zzG>_`(VWuXTj8^{7ym<>xvQe6uvD5w1zS9axZ@z2gKio6rg5?eb#H*f*xFr{in@^9 z3q5_9; zFL|pW`oAC+*}vG(0<=&fAf@h|8iweY`;SqZ5p2fvAH6Dr2R8aBI?>!w0zG6FESd=! zDXKYrZ^g!Tw9J*S3ErV6TTrFM^0WtB^l!pm)Y)8P^@_6HIAFFn!L0WxE~FfV<62sf z{Yi-uBxnFEhw8HOWNYDwOjxxuomuHbGMcBCf9~hC3-E#QeTrbcFq z{Z~Q=qrsQqUf!!X1DLhAc9ZKsU5iryM{wF2=_7CRiTqWgvV%tVAy*~!xo5!M=3F1I zuI`g#l698nx{(clui1KCx!2APjSII?&K{ERmJ8}eT#b#N%7U;WPEzt_B1jP3CWV6) zqIP>%%`ES;zVD+KEoUKl7sH5_&wHn?AeFJnp&SxnuCuJF2H^E{y(m-fTW*Y8v2Yqy z-liwtj>J$}wTu1SfmKL|>(JG>Udtj^+%}%7-}r&3U5-6KWWRJ@p|Zhe#+`qgQI%%Y z&t&Cw<^r6<-y@VZkyA`WLu=62E(@1W>D+Ic1w@*ntY1vjp_c8&a^pw2&uoq<*68V$ zWJ?!!+GC?FG8Tot97;Z3<+m{T&JRMw2Q<5Yp~*TXu3y8dZ?5W%>oL#I8(d5oXI`Cw zFKn4n9;9FEP}K1)rxQy`T<@^6-qsaGltHjh%wOP!+faG}5!Kdun>7AH9#?WE@D&wNC>xQ@yv0^>MW^sTp=|r2IoK;zbWDxWR%pf^5iKs* z`o=B#rdrJ20#VzT*HJwS?P$3jl+4|c0(QVm{WU$5-^Ahbjvym^d?x#G$>u^U96M(m zBM2=1Kt0+ipgRR#kA^WedcQcpW?-Ls`yAy`e`HgSUn$RiR@9TS6Y{01m~S~eHDk+& z8F4QjND7w9WD?h+D7Y;&R)NV@GDgJG$J95D3jYZU?7^(tS@vMoG7N#sWWiCz68;No zDaK6)mi8nNQ=KTn9%)z&*D3dN*rw+1xZ|aPt_^?RL!*4jq8S*RrK~)q&<EFHC9iF*M@tT!sCyjJ|GrM2}c`(4*QmUMD80ASciSfwo zsFP77!#Vrs0jDZ2_D@Oq)gFmyW*^==MM8GrI>*`cpSBhlK5=Ihj2 zn#*51&~sM=&^KBVOopN!{6BnT4vGzcmh^YaMZ@7*MT0V;23FX?AUY!d; zPQlD$^_;Z}_|^)tRkI0{16ZVTYm{55ED-O#SAD%0OhLTkv^w=#v*3ZQTFBJj%^89+ z7<(-^1O(1-sO9oxQ6D75wNX_?ubwUyQCL%;Y`M!z>RX#(<<4Qw2AFNC@0-V}i-p}0 zkadyS;tLkvq4_6ny`ynzP7$5Pp|Eo_`_d)@9weX(T0=<89h4ls2O+cM1+R==+!Ggh zm~akNjh=3}0vkD#e(I;(nGj@x^LrPWDMMAl>dvE@t_t++zu3olF0y*#PrM!1nBCm! zN82Raq$;%448PKq=}y-A3iD)rjuE%l3hY%d>B9@t>TIm?IBRtO3VJV#CMY-HrJO!+ zGPduF;1-9zyenb?#(IkSfQ@LM^UjKdSHc|>IBCtz7*gr7$Yb&QWWB0DvNglT7EUx@ z?{ka$mK7*>1^U&-)KFd%j(22M+miOE`c_ZXyf3hi+h>K{+zFGQ#hLEicnJh45!YdK zW)ngnn7?vCGMxxex#_G>e!*E3C}4!6g{hHIc?p#hn*U$}A$u4<$fv#s>?Kf70nwaA zon`@#?_5Hp%~ea5yYvZNE7C#n!b9W*Fi3y=!cH~Coxp#K;a${9>f_n@N~NA0!rAgJ zg^Pz86w5NnaxsP1M)=_y7pKrzVb8qXSg4b3)WT(Vn^)wkg5=~+0-40x9frrb`x7o@ z)^2^)m4t&fH(9g&r}%5;%k2pH=e1~(q}UAsW<&sE#?g)B1X~+qpnOUn8+R6$19mp4 zSeSA9*HHmEHm`4tJxxBIntV3RM`hzXqLFL5>NeaBVX$Rl2Ev;|a2&K-8SYj%l5};s zRIMO;1mFQOY%0JbL9uHiM^a|jjD|}5(Tl&Lg4zy0uG`if7j4M@PoLjhe}+xW%rD2i zWLt0<-UU7ql{V1b2yJ@A36+@`Z3}%5I)2;uu3R zJW${>J<_{dpOB1@c&54fkHKO_%wwHTZ}Ux=K`xwt>_Hs526Dl5ojFI@+tvojIlcb= zMV?Rf+921&6NOK+FnAGhOA+4znx<7uFnYqSHAQ%=70rlUE8AhGn0kdiZMHdX=12mv zLZ^`I_3V=~1fz!_2h2Kzs~JXMmV(Fq{hIoeo+1bFw=t2-p3u1qxVnFeAFn}7P{ZH1qr-hB)``&~X3K8>l!Wa|(wU1w{feI#q@3wzP z{P!SM76wLVSMPYhHgtdzav3@ox<`~&>3TrrG;~Rfd z8^W@D{!P%hrK?X|Y+G_?u;a#8>5QX_j+dlTYgcyLX5#jeW!IorKvlEF`PM>nOtS2{ zsLSR+s3e6;`#Z8kA&bDGN8)&jD5HN3{xny2sPRJ0$&l{raG#Vm+k;F-M?_lM%V?%? zZHqTbd>OYl@KAynI*9ygBWj(ABky6B`8{e~n9iu@fUMF`BRh`SIiy!h)w5iUrnoc} zsM*o6b#<}_;>LrtR}K8g<4F-`DF!kb1qeY(+Od^V>%3D*+OQ5+nEUOD6z9U9ltKj= za}JNXL_?9kN_>YB9C~a*!LjMgze2}mUkRf8+8AE{WhqXVT`eE`fL>d*Qj?D)s_-}7 zZC^H$O>o2TFbc91{r&#T(w*wVMV1CB@py#*gODr6r!ucnqc&4-LiLaHCbVG%T(isR zx~oH5)%0P;5oB*resFS%waZ z?YrbgvIfec#&3*?3!yk61;nUl{a|c@O2fy#Lzv+Gx4;l&n&h{lpP-qOmEuFZ3)gNR zyxq$d_}?--;b|;SAJ?Ic{rtmwxMphsYMJ8h0yO$LhQghEbZOCU&&j~+ccor}i!xy+ z#*pAEA1c&6Dr3c9z66#AcjvrHx6x<+G)tbC)^GLc#ChzyQR+UoE|BEZ4bFTdu=u-N zFJc1>mRDa;K&?I%%KQ}LR|h`ffX$Oya&zg9L=D6Owya%97<8&$2tPdJ*?cdNSe4|KKnJNKap?tG5)4baZ%HN@d6sai$)Mpfb*Cd4|AH~ z)==56H)s|-qj(Rh z6xK479znnjOx7+Zt(S1MhkWMiXy&Uzl9RK=36}*AQMrh2_=P!U|F*X3I~o;()>>$v zHar8+0`n{)zayE<`%z(Z5x0*_Rk%qX~!i^+Z7PaoSyj6D#4{tyL#{|xA#A_XutOJ28WR;RF z4oTg$zvotxyxT~Y7JQxor9W(9T2ZJf&s(=jqhCQ-S+*Yi`&5Yu=pO4s<1n)V2dRT_ z+Zg@ZoUG7tWCg$iIssxNtV>5Vb%+F1jzo;wKVe>Ch6JgH!+kL$c{6;|l=>hLuYM8R z+G=smu2==`4icIuXB8cJ|D-V#{U}r#Y1mbYh zZQrew<+XwDGPui)?sPCOll~jLS^|ciZ_33e@w^(5!?&Nen08VXrO7A>WvAFbPh@Ln z0k#dA5!b0M(Mf(&nIk3M>f*69`(ownIbIRvmOmP`9}iP_pn9CWLnBhI_;2x`!JHsS zy+rlj;uIf86~661P&zR^3tc=2cfkPrsxCif~~)uY)}oB)WN%s ziwkbIG~|XmMP8p~mu6_z&0*+{Brn_e}pf^3&X$OkDU6BBRlW6e_c6=2G~K*;>Ge8)vPBQK8m@e2PV-W1R>w8PZ|g)nl`)x<}jh>K_#TPJ4i+9mG-9+h6y?^Ct!E zpM93Xf~2e%#Gny}b3SE)v%1#2Ry)MWk7w4OYc3sO8z>eiQ2y=7!G+bZO*=M)Lf1wN zvoxO6;jb735-iS{ERk2=I!SnpHuMdQ(cvtDaEgo7m%AD+VGrcRi?_nd=Xh!H*Rm-e zyBr?O^w1U7768p`NwoLQ;+S_sJvd6H(qE-@hvbhei{OOLksDD2%9~~Dq=QZj=Loey zNU5r5wV{O6?t5a)g{v#^)8KCU5q&+$RL*f3Om+%HdP5Ai-$|?85FWjXC(prH$uSXVNI2Kn$^!E5Z7)e*~S!Z&st8=qn28fCK#S0Cd9*s zp4Kq1(sd!jRiD;H#_AMA(c0s`EK00-N_<+qkI+FTtg3Eo@TVX66gNSgQCOdwK0(D# zdrYUzRPu?QZ^L%PO#Hg|G80d5%hb zq3NNk+q(5#u6=y+9`FE4|aS8{3g*;HgQM=3`VJp^G9K zwJ(rO|C7P!_f{SYyf=P|)vKB-Wn5Z*7&+%U8xUej;Sp=5F=-#EZU+QgMG_jgoFt14c)~ z@u>=zp_id7gJtOU$Mbz4YUmn2Lj44a)W16d8YL>?uP}0OBAnTU`!L(CqYtWdXItG$ z;GPOXw_4N+Lm9Z~yMu7Oc5754xaodfnw(y_JgQirqVnI&K#-5BaXe<--s_u1cEt#m z*V5534;@CPO?AAs;^_noPGXp6YQ!41BTxMSzG$3#*!X4GMsB@~%A;C_J#5nZRNzZe zZ|1HtF2?$Nm8#3Hm3qp=3O(?ZgVTRUItF12+L)Jgc2%*)R6|}DsIh=m9?0oX->ul$ zDg4A#@02`zylaNXbm@;)2qSJLB4TF9s&~|u^TuSUZB(nOD)8-C2PuwI_z=tt^udNB zTtF|9(SP+eVx3MIpf!;%EIqCVSufcIq22o1|SUK$+4ceHL}8(u(n3^?J%JvsWO)=GRnu z#mjDIM6?C^Dk(uQ%}rNPYlK$yX|kvOV>)Ib;NvOB&QLozOqO%fBOArJCE%E<_0?1z zexu4VEa9~y42!t5+5ofMpzMy!p6ts4F0V0D3&H#EsCu&E7RI^^_?D*N!7v=;>U3~N zvdD-_Wqo5ZjLFxF4iRTi@f;zHV*Y`G`nuDVzgyX~^f#XJbBJ{Sl*=OtT^wT7A0kAXwW^RgN$Dom%`7-~!*ZXX5FM@K-NITEXLi$HeI=%r-6N(gQnVEVhH^{mbM3Lkp6G;u`f<=Dz1i$k`^%-!?|u65z0e&7 zM@LJTm>e(7{T$-S|JgnKpI6LZL)}3i!A#Mof-N3pHQC!z}EUl}$LorW^+bm4dUn+e3DeZ)P3UqZaHU zMp_q`AJDMW)0w=l9SzAT3=n$+Dt+r8?KY+sA>%-#ly-)L6nB{hYxRj%!j!4-KV1wa z4sL_sn9gApDl=(;!(F^$*7J#dp+!viw1gg($ZMHPtNBq`t$t5G9iY`4R92LxIF%%o z51Y14;Hbg6PimSb$J+(pRjCf_hxk!ZD&SWrCD4MA|1!rAwDnzvzl@mbcR@a7gOhZ_ zS&+$x115O8NSOG)k(O9Js*(!!eXPEie8r42kM4PU22nh>C464!2E1alTqv1jykk6} zE+1dF7BmYeH1)ne}s}odnnJxqY}C?y4-%F%^NQ zSyGF2VHv2b1}ifn`8w!3H6;Y+Sj2;9dS~FDG$!v6yiUL#^MVm@I)mE!-(n=lDYRz7 z$gmK@EDY+oO4U9=-4#?Wm389aBdjww-aLYj)<=jr!+LxcQ~uT^eC$1O(Ql;RQwlHj zWHgm-h)ew28!3veH30cE)dc>8?}IMugbNzZ>jC0eN>Ez=a?NVEx&=HvD?xUI4XO?+ zW066|LCc#KKd%UH7f-9V*Ez{wV{d5fPi8(+wKjJiYkM0tulW93`UEY*^*2w(Ylrk4m zrU6&ss^~S{7&7AiD>jtmUOf!5PZ%W{dFdTl|gNFvt)?O;az@$j+a=*7ZbKr5f{MKN3ofsh$i zMY6=}#CXRXW_yZeiErnh)#{Wr7HsqHM>ET>pAf^AKtg%F;JJ{4a?qNwpZT!CoK{p` zPso`yKv|VQuv5KkS%}%)uUO!BC{2V1>l12;!!GZD_g~iNk)g+}e(h_>WJ7*_Y4K26 z1;_9nJGcWel%BCe_9_+E%iqCf10Flfl$(!Ft!WB&D&_+fx=>GRQj*N@SFDbXpy+Fv z*jD?l*OJ>f@1^E?V#e4VR3;QUmkTD2st)Tasq)X)k|Xj5ao6tCIITf?fRZPY&+WI|l8@9kdOG6jvxuXNqgyo!r zsTYj^TNHB*2CttsdPGlnpsDQ4W>Ir^zg`@^AfX!Wq^9WK>5-^o>>qlG681v<8933* zgA$qOKTa5yXLBi@g^;NkoBv-M=M^-b3t&zNoOJo0@P%;-A~rC3qU9_FZU$=sCTt1% zK*+dV9&opoL9ku-*803Wfi?*Cy}_17NcuYu{-SJhXK!MALE>GotNOjbXNW9=R0Mtb zF9(lM*QFu~+O$HG#+iko@6d!I4MsO&vav1nW+gaPqKNGMhgD26lB>QiR7L~AH>A!F>Ox|2>TOgo>NH~@ zEI1jCD#mNGrNPcwFEI8+H37ma^{z;aLMZYtRVskk#kP?P3Zr?CX>eQlR+ktTv2=<% z6{ILe<67lE4dGZ2Z1_^XPxvJyIJ5>_TpPH;j)IM<~n}2z~s19ZfL@Q7b z0BG_SZ8Tq{0V!S7G7mLwErH(DT19@-XcCbrW1`t5O7yteD_-Z5FV*m{0wow^M>do+JLI-uf=35>iywx7TFCZy$I<0%qA*{9!h9s4e9hI+#S!^Xf{8AtaAT7941b#Z}B!H{co zggM4lLerh2clOu0I@7J;9Lu)j;NDCe&fc@0Z-Y8G9xDYY;CjoDI-V(jseBC8qt3g7 zwKIx>kL3z|!>RbOmaknK@$oA+by>b%j#D`nDb2^_uoY?o+KTGtw3Jtrd?AV)u;|U6 zI(>|V(OMmIA*S?|9I`%1JRk0NuRqLBcC(L|4TVXR(ft1d0g{J30L4VH`Ca9*l`0S-Mkb+~T z_@2w&4IQ^bkXp@f??%Qm9!%Edd*1&lUj1d61fWRR-nDT$DnIDxQ~ChdbWM6sS~KB* z_P=GuD}Z!MCv24Y zF!qJopdK38&uqxVpkVrCo&Gi-;do>?V&NX5x}Ye8QgswpIH@M`5(Zv8vMVW@r59hg zbrRA`{%U4(%+7KrX0_vAd3=eT!H=7PW1;jWjNvFER4L-Q+A*QA*rUQz(K;{oRK6$} zXiW0s8>^eBwjuxk#+p9LmUrtcgc^40A_&qUIf>=jXyynS@C1XX&)aZ7fY& z?1xnEt}7Ahe=#w`l4Xvnlm%0It$2R2gECGodI;~)61|}J>ugY`)@74;62U-YAWpw0 zj)_`zQF@55?m{=f7J^9=xT>Kbo!WRu0mZnd4JLp5g%*GIu%E#B2bCe@`*wQSSE$(! zkcCpVBnbJbFSU1uoc!hNKwk>gO}8Z=$|T118<3qC`b>kFSs2o$tSB?1%BqVU4QSA# zsq$}W+m2d^3NK%|1ry=mqE|)GG>QIg89xdtE6!2#1k1W%q96_M;;lhJsP(J0KZ&-V zm|(`B+YAu=7!>O{oaeIQz8=4=@a;O0_85srCX?hV0G~#V*{x+k;pO}h9c|C!+YgzL zG@6KkM+%j1`yFMCZu%gOc+(OiiKrZQtixS50mXV02DCeWdEP4WfojjU76$yx_~P5O zol7u?k+Eck_@RlU0a)M*{Kdw)eLbg_wD$rC~kMi#)8ZAgB?Zcb1D~Ols?* zvk~4cgyYZUv=Sl7pzRPva41rg6?oO}+UKLzMvllY22tY>m*F~t@+Oa@j#(7e{vb6oKe9ly>+ z9*jOpBSmkFK}`4lyXo9;l7qx)X^);emr!)`C_B^o7g+A%P>IfMznQgxNbQdD!MOVYtA0Fkh(>a z8xLWd4@wG=R}~z^iK&-&?rU^M?V1V8JP@8LNh|mTBR2tTR5dbXZj+FOl=gg|F~EOqr+r)MrtgHC)&{Y%-6Mc6kx^$|_@zX%m|7 z^*!XT69a$MH&xK41GzSDgw;5K>o96iRFmDv({+kg|D_P;y7#Qbw@!GJ=7Zht(YOE& ze;+ptrGfn)qdwMKzlOX73Gk|M=I52yS2^{f=l-|4U9d;~iSrdbk#Q>2@r9-?Wa-iv z(K@2IYxtK-T7dg*?1ua`rGw4n#51hWmwW5X-!ijiZdr^$=}(;XKJW-NT(hJGnC~VO zrDjkR_BdIQ*ZB>@>~!9p2dt9S#ehRa_THy0#hw$E!uT5c8k?|Gp8nPt>8yh2E@(9| z69+G23^j%LeNu)mO$Fm88)+Ax)?pC;oEu&$Kv03Vcg`L1+0NCSNP8d*k)>^%bn%L$ z-n{7E{Um+z!hvp-kaE)Ki0Whoq zIlRjFOB0m4*3pNSh+x%S?`W0}!eqLyv(XMBX5zW+`)2l_0asz|0Uj{Y4u^B0D>8rKn=d19(b2;nIFA!n z5f0jT`jmMNG?su(D?h*TxJJZ&V%@j6!fFVhP+N!dDZ3j4Ev6ACNY;%i5c#>U0 znAk+7vj>6mEG|xU={hvu<2>V;HewcsjRR|;F`YqBBkzOKJa7=ZSYl9anyNkSzB_~i zZo1KMGq`#B$WzeFz9936dl1n$4tkaB^hyA>nVLsxT5R}SQvk5&U>_kjLK^pn~Fh@%3Fx-(+u>Yo6USD(?MFXmFzg6X08k4W2JnPsy z@&HBc@F9ro=?*JG_ab^@@st}}oXR4k@|37d{g>YuxMi>jfvy(eRvcn%S&Y3T(t9SW9KOB`n|%um)@R z@4$F*h9bclEn&f+o?7W9zqwJ0!%4&z}xNM5Q%!l_HLYnW6qv*tbU20=q|{BMK95dLJli z-u~69^DPCU4<4&tiq1HFe!Df9pt)}JzmpPN?Z`mte~`>)iVE}@?hNzpaCF6TM_h^4 z93*s3=Oig&6f#oWK$R}fN;zhEu|AY#;Ke3RsqH>X*rjrW<_$l)VPq(Bz%pQ^$s-c; z>2M=UB!sGZ8yR2iB&n=5)KsKs8TC3ow9vXWXh;Q+Fjhil=Y8A5sv z$aeKCc=Rf&Nblld@Ln5nzs<}T9K)bmiSc2a`4w(G;%Htm97nReRz7#6yEadFJ#(5qrp%AF*OZbL(F#Lr|<{#`_-U5NG+H;uy z2v5B?gJ`A)YIzdHMN#DK1&BbywEvgH{cHXwx_9t;4=%()gFu*-Xz46MmJ7wXe(H;j z{*^u(j>kfTMRLMI<6lFT04AjB`8lW)QnCYi8{-EaxSEsp!&3{s7n{t73>B=qMx0^G z0h0s~h9+6gA2^#P{%tK6G^{Ahrd&;x@N0xKu$vMc6xbNZBfk&t)EwRMF`PqiqIB2= zIJ4Pd47V0U`T_*n7}!`*>7L-2UQ%YyZ)|kS`U4fk+bwr;^Za_V&4moj$U~?~`kvJG z2n`=8CeG`{VcNOpqB;0t{No!VMc#Enl&YxLw<9_dah)+lNS#{p%rA+UYymeh?b8ja zw6I0xcsA+`I7jnL4zV`K$Kz*E;7~>=t@-(96|UaHSqvX^fshtrIyby#X&0=TlGCB> zDbLnBDdd!4!2K zOK+mYbgrcQ%Xwr88~elk9dlLujFCp$rsfFEGtgVVvCizQwtnk6!_#pFM9_Q% z9*Yr^z?)T4W;Z@}OF?1oYOUONf%TfAApM#a;Df(Es<}Gt*srkRw)-!xOdIZg4bcjt zn?G$`pSbS#IdZ{rp8egtmV*x5@Hhg)8Dwb@sZE?=v1y33`dkTWY8@Y@mmF+cWW7LX zwG)X`geS}$$*>Z^k=F8$9i>s6k80;O(oV{xRh}aK-iD0?ld;7q6n&!i?p;l)RI*Ni z>b8ECU|I}X$12$=cKan>pua|PrUsIz7E0mhM-1J7k+C7IVxyy@(Z^q0w!BsE{Lhxt zULF9$F;qLf%QFq-s7>fMFToh|mKk85a=b|=D|!El`6<$?+Zep~L=L#pD^AuMpc1ap z8tjpzlxo#4&5L6ZE$vOphVJ~XDY)^~CxL*n2^P&yHxywEA*i`BeXuHhrGFd#p}Ead{MQSyoTGVFF95p{Pd8uw5|rQ1aFCAQpyZ-X ztew*>gu^~r?y3P!fMvg@EV$ee)TRFBODwC-;8NNw`lG z8?jg89Kc%wzQM?#8`Rh-Yh1ts72=bb&H;XDj!PzFl)c-V)uRp*kq!hamy!#f0sCFp zB0*py2z!75W7xLEApi3c9Brks(&$Lv{5o4?h)g?CijQ_h~5{IGtner7oQ(0 zvz9sFddBlYgTHSrqMqooIJ)&jaWx(bT8;Gm+uC6Una<@*iiN$^Z=1t9u}_b$z>(f4 zu*CnA;a5Q2NN_^~e5vFhayvj=5)7Ozd=d(;cdE?@vng84rjY@|>&l3&9*Cxw&e*h8 zW0io1Z?QA?Hd_{<5JBkH?(QTc%~;uO>R=v!&#?Au2Bv?+zBc1uHi; zkr2_#N(07(Az1YgzTbZzca#6i?XyOGR$knCx$aGVa%60442dZlzmB@3R^P26N%3C* zghY%FYS*>0&2-Dlw9kWp;PAcQFPGP38I2Hb3!?IFe-qc^|DU&;0DSD0$PpSjku;T}+iNBm(V>E#DtSvkT=5Z9Y zqro++`5${wD3K3ne>DhIM!fEC9A;+v*#I20Sd4qz=)cWDy8tMYFr^5-2yiKdQ^k@k zk1O8id5{JlfUET^FLg8{orX|1?_yxrBeFDIulMz?$+|0E0?>i4pUS{o@&=~*!^PO+ zd9VqUWFNWf!z6zezXu^zvm!Xhm+Fyu?A~@R^z`Kn=U5&XLRxpuHEN1-y*n)Oix@p8jf2I)w?zQ2bL5Zjf?1Ms7bLg| zA*=;g7qUwnPko=<*k@mba>w!lhjVL}*?juWF6SzrTu;9QAZq{%3)`Udo>o>a`2u2_<<`?g#Hcm1oW|A zwR5Gqr1y9?C1=!nENlmlBXAkRwkQW9B#wR1AwZUAoP-2F zL#G}RT8`AtYZt}!wpu(`UqZ?@kw!?%%maxXa6vuwxR3>1%3@c(NqFBVdzI|rMbkO2 zSYxfJb9xNiMrc)@T6H5hqJEG!>L#l3ZTCU3**jeyPODs$CM|jbROaK|m+~XJrcra7 zoByoEs`a&EbinDj9qq*MiN>KX3x7+f5xqe~9e$1;QjY42c!p5&vpjd34VmIk2a(vG zc&0@*9S!z(sXq9DROqbGptKqC8uy^;q#iR2 zD){gnMpfy(JgK2V9FPkK5v7@txcrUMWmcMroRkz}i96+@sxio4+$eG-bFKDdD&h~X zQz%u|{;&#yk?|*4|3!`H+~n%TD4e37q7G=n{Myez8b=?8r^f7BJR?*6eo-N+(~}P! zVzl+zQn?9b7}tmXJQ1QSuI|&P=x|x}NClp?CruEqedvnkg*ahsI+!Sa;yHv$CU=d! zmV6i&p)`PPIXWGn@9A}{HmOELiNzPL=c|BSRsF1JH-Eh^a2c5KSYU6&Hs}oEK54@TC zj~vaO3b*9NYsC;GaO_8V7gp$$O}VokzQ* zCkLUM>}#wSRd#DDi@#&jwkM(x$bUXy3xOxnV+rIU|M2`sSwY?rF@A})S1GFT{ z^s4z_J4{(-LX1NnPB;9bc&ObjHP0$`4k%4N1)~W=saYUS&|JB7Cdhj*5uDPwPnV3f zWGjz&pqA&ffe!BK&zGpFKb@02%KEJUFie^0i8KrZBB06!$Oe*;!>6WW*re^`9Zqvz zs*P-R7H+)!NqD`kvg^s}-^DAl3%}MDv{K(_hnQA&l!aTSE&j%rtUy}H>^X_(B=_vv zAK_Es(4rN-O2u))&ufSx7Ks8tKJsRZ6?)Wh%9Zr|lo=Pdl{Y3-{X~guxqO2hgoj&^ zJj0mj*wKEag%p8sN734~0Qc^$M=I%uNn9jf6hVo`TYiN#G7k+vo-fY>cpJB_-nJ=4 zSjsh3q!OgFw#g*K)M<7x3b<+T(Fw2Y5X3JuHK#8p91lh-gmW&PJXE8cRBSE2Z^|Jo zu5##Q=r5%~q~^%RGTydDJ3Ww)^i7S7E0EU-O~DbZcSeQZCrtUdh^zmpW|q4nTh`Hr zL(`!XW7Hy){>x9@lKB+Lvliq($q7@fgIt|Gc;y>Y52C%di1<$d3szH-_uUb84FDl z<}m0J+oI7a-kqk6%FlJ#g9=+;WT%CB;0bDL)ZyylRa$W*yMR(PBDz7vUJO;qPbvtP zZ^=>q0f=ji@k@>BWP?&zDU*fFAvwROcH_kB~Q}-fCS~c0sHtVU}>U$4S31O0Q zarD5-DfZlOg`#h!`#%{?Q@cY_9{l6OwC1wR0Bm+Q!z$J$J=F6@r2}%I$nNx~I92$> z$guaKc=4Xch<~~h+{UUF*nlVN1Px?K3~=aMkd78Srx^+~g)rsMUj(=b4*XzsHpt3p zrZ=2vB1Cd$lKb|ib%;J{T)I&*oWfx?YcO0M;m4|>SczQD@7TKpq1j2PQSv^;3~Ni{ z?`tBey_>ING39~o?+fFYm|1*ibS>bUHG734CW*vIhI9*{|GWi`B5($NjlG!zmoNAX zO(;Ftnt2K${P^dwKOH+`R4T7Mn$4Erq>tLsh7`#xgv2Pa@F1hbVwk`o!j4>g>QlV3N}#?0D5&qg5UQ1j=f^CCM)@o^*px$P9AdG7t-dOUqs@T z&MIr4B2CItt@nbvsav*{+eADc-% zDgL+0ERM+jCg}n_6`=+SMsNk!MwgF5;|j0g?}FGg#H|-ba_JTdyIiw5v}ZJyAIr)(dcoh!oS{82G_% zyF!vF6QmkGZ`z1wC?Xo3G}t8VVZWrOOv$9Jc%bdzv`?6f6y?Y7!8B*0|BVs;wFc#y zqCaVRE>nEwf4YO0ic4j@a|QAH?l!k)n&AG;Yf8R03GzfQfr)c`rW4D+J~iKhrDvN_ zXv5UL#wfCE>|ARQUNLy6*8{5@KHA}fQ4AaB^8XxHdY`;o6RygEpwAz8B0$?^rIsLT z501W^j%{(`c`3eu_gidYC}M`&Mq^H)e?DtyujI0$o-F%#DL$aM8}sNoj?)?NV$Kil zLOqYp4%@<$&7%43>YHek4otBq5XWE>w#2;d=lEs@$b3F^uhlO@ud{-PNA+uA5Sg5@ z(AK`Sx(ljmIEbBa1Gq)xoheK<-5|ZXN?q#Vj(*Q3q)EUTv@9Nd;NwH=o{Fb{p!%%L zqQI+LXuH~N0iH+ATL;+7R7Y<;o(&z#uh-kClv$T>$u~iLFc*4iqiJ)U1XrnBatPw4 zO$`+g1Y(K=AmAA@7dPfT>#x@=?+;;+(%|;p#lXC)*j;If-c#j<-W0FSl-K(KhADCC5*1FFZOZYRmS<&fq)yID|dN9u#+DqH7P8 zJi+8o7anE_{1P9l`c<=G)Oem#yQ+UN2XH8M6ju2$Q#uUI8sx}i3$P3d^46dmJT5H` z^0{05?QQTagr@j+Id9fO6QpC$72pPXT2cxjcvH8Xjoce;?x>gw(W#2{57@FyK-=$d>~y}Jb3a4 zOgjM8!_bXDwF{7-|lM#9dn?cusTr1&+Yx5${sw6i-A^J1 zL<9c$?2vosrS#9>wDv<~%JQJJEgo#**s7S2$7aMlC6e=jY*IDjU6S zxb*JAowip|yHjIWS^LcvoTFLg@xu2LXTxu2dP+G~1iXI&OsROY5 z+JJ`bvCDbykygFc{k~ApJxq^BiMa)biO?I^yUrnk2VQ}p2s}V8KZYV+k!rP?BxpOl z7zO!$!Zbr0JlpFD#SKOwa~M$3nD0ohC1$1lfcPYRjO$tDLkW)|tD z0(#6MvJFa4R>DL}53HHkwJkB2h8jf%?eu2XIVGeFHeRdk%s}ZeEi*L0GsKiR zw&6(?uL#ljVr_YBNij4dp_8HAEW<=3(wAOxKhpem-@c4vJ0m33_dpN!jlk4jUUj{L<(#osGBcug+)-gfuR~;CS_qOR7MB$m zE0nZ=E7cg1yh`EMp1Th0JH&d*R&WQIFZdfUd9>{5Mv%Gn{$;IvYppVh!IP1Z%eQvY zg$v24v~ITPs>kAKMJdA+47UEp5fxh?fY97Qq+b167eENm{R86jmt5QJy^mi6pb70Invrg@kuA9)4tt>?|0 zSCR}*kjSL%zqnWl1~P`1zEbd$!=ghPLf6c=GMAkyH{Wm1)YhkH}SI; zb=KPyXXA2hB>V>c2|HfutwK+uEPQS=1rW@Vu_c11D1wNF2TDfN*MN0Vz(1x_r&3dwLCnKBmU%z zU`@W@%Ag?~?rTBWubt2a^Rt}W2&)%|!|Dep=+)m6gUeISEd6xF?pIvSJ2jvI#cKv< zQvL^+Pir!YIoqe^B*i$@-AEIw>Qo*p znByKdR-f9YirrpE6WYx0Z@yeW0c7v;K-LKJ=yZu4(P-pfR?oPAMe_9zR=TS` zb+p+AOXi9`xor__g~m^eYm~IPYi*A(4MW2>ZY+9;)(mibvlyiPJUXYWcfyt+QShfK zN{o7L9CQm=ihmuz#`qVY$do9ty;ZPKfNbAbNrvOT+~j5Z-LE&W*viL%P-)mF`Be#f zlX1kG9tspDn+oWVLK85PyBh7@ zyy(Hm5@^z*?#C4`i~qu0uLQe|2y5-yURwpF%M*?T4rDe9KkFQOkuzK=RDbRP2>MUz zXYPt3%v7mBe3Y1iE9ug4eKD2(Aa4;ajhH6KSxUf~z#Tb`#dM^bkGinfZ4JV$9Y#8= zIJ`BZ38p3Di*ZB;bD$4ihBK67W$ZNu`QtzhA5zb*;iO1b#&;A%3>>EFk{1uR$gB5f zux}T&0uc6+Wu`Ek4EuPCuE*c}rz7k+g%3-ftnFtOM9KC3&QHqX@zUmq-|4A};|EEf zlkw(D9s>NR#`~h}z3K>o}y9 zx09L%VR$?TCDG7$n`$iZE|qMYg4CR(xh*hAQ7lEex>-wf)7Nmln|sMtf1wEeUhpkt zih>}L!=|Q>5h%Xl11bu5%LdzZpmq^=95yutsi=zPn_k_+(vxo~2TkA1yNt6?k!_*c!tFOl`!T{< z9`}XC2$X{_D`9_LX@Qbh1z+)9*HugXXbdjxNCTCIKANRfRrCS!TSmZriYU@VDmq(m zXaKwS990zHn!PZr_ju)ENw1~j)MO+tJ~NGKl6)CvSeWzwl`tNEXift*#Kt%(lu5za zC#1QiD?Xo2u-#J=2cTvQQZt9ot5$8DC$oewI|wskga1qsM3H7>6M*`kqXx;jxn}eq z7F26ju@u8L)+OD6=nN2_{C4%HsYtoeH2xeh$$1kfrdFdml~HB7QR5_kXAiB-AiIje zPZNce3ee*Dtqwg+QPGdJuObcOxGV&VRwdMDuuKd9JbLQ_dN++xgeM@CPtm#3mr#?f zO!03KYbp^MN{D3&i7_X;mD_=0=~T~{M-ag3^qpvS=g2Cg2&p?>?i_`F8)0+T4qP{q zk%W9wLg5TjtJfcDKob8Gi4ZnwG_`&nf$4x1lDcYw0;c)%-mOp0QK-K>om#=! zR=k*~qw<`I>dr3e&R%;7*mXoy{F#@{y}c9xpQvXdmgcQ-#~p-3bW)Gp!UQ$uzLe9s ztm?@LEA**IPDcwBdse@5QpWp|W;l8|M%p7*e+NaEN?egyz?hGF$xTzY41W6kwj4Hv zU6DBkOGgE4Z3=&*l{(HX66hy=0?T?YA_a{KV_6uKU(!@#3r7AM>W3Ihm60a3>M&!J z(R>Vr6Z%+UcZ)XSLow@wbOuzWP4E4EZK^7nN(Eqh@PIs+ybRwnv|gZeB`l?5?X>Bi zbET}^tCXyg*m1$5>+DM+1;8q&C?9mP!Vxx$R#LSGjZ-(^oO5d9t8_R7Clz)UEs`S2 z0(A^LP4!#H++Y9GQTrqOTegJERtc4gGo9|GgZNy(;Mb3mi1v=);m|-6T~nj2ov8$= z0Xm1#qg@u22}gURgGYjDfJzoeiucD2>67@C3;+TXlCTE|iV=m=$v)XkEM35=-hbVR zQ{gUWmF^ro%@>Qw^O^YD)?{ki%ac$CIF8*@H~@vdQZ~!LvC$esDw7Faeg4GMBi^=5 z;f@>>T`*WX9<*5g7;77QmhcY(XI<#b|GkhE0ohIcWbl@BOxv+@4$X?4?f9iAdu9e6 zRlMKeWIYg3Qbu7GJXHgj02diLe$d-pBJLy^8W(Gx?b2{hFDj;3$ zVJWypxJrTdf(sxHH(fp>yxu(j1zEqO_BRST{&4A91X4TbP}s;um(G#dSw>YVOU;9c z75uP4r9l-z{UDm?(Dzm9DGgpzbZ5GbtdV|rnxA+sOtfc=W}7NE7Ud%6a1ot0Oi09> z=$3z_dk${n&^6O`@Lk7d{hO))wdNnpNb}sMnwfhFeZ2t5#6KxfE)8_KQ5B((L5^(R z%uIQLAaOZFjtq}re3IJNy!j;ISa{+9wM|aD5@B1V9OPGg1Owe))p|gSb)Qd$y3OFO zo@fpau{x4rfYfTh*ev-%FY9bV#`CxyDAwgo5Sgf;HYAvZh9aHlP@1-_+%R1_ zxCmIa)ZxX7Rvx~WEjV7tz*p}BB;bk_0qsW4u&&YQB#@ASWGKJ;5wlPs?l-)b^f>~% zoB=pCC8!i?rH-UfacH8gbwkF>sJeC4qt_Q*vUpTqDq@)p;E2@_DZN4$qjvwvFL?ky zC1mehlKNLfnKa0#yA7a^8AK}1g=pN!L93K8E>}4MP~l7w3z;#$ zh2!VSR;bUHJ|AUo<4j-L?W_eb$j*gQY=h!(d7wF|xd;z+gu071tu)c&YREZJKP1$} zJkkMLb!5-Vj&KKLuhcfO2#Wv!{{OM5T8FD#1H?iC4&Z8@+Y_9gm%E54E}LKbl&_Vd zq<8W@=?&#v!3kSHW_u{sz7v}FN&eNahepX>k}o?;sf-+CbP#pp4#!OhfqgQ zN?Pku{dC@+$>60HL%+Ga`DZNk4@)(i^z}3s<0%AC9ya@>g#n9j>K%=M zEH(oC7|)RdW$}4{`Kh1D9ulf>xW7jue91XsR%~XKt=*FCIy>Qq>2cZ{ewdgBHKz9NO3d5znG$@)4;*VM1=4%PZnre#??^ zXBJ7^kaytu`L+dXo>+c2czXbaY(sP&`MkO8d2MQ zTJ$G#@x+XQU-_&adt0O;F`J=qKt3-)DzQ`g?kb$i1r%ajUzO`T2Q_ej6xczaN@$?< z9P=8zRfC;&QJAV*Q@iOA%}4gf|6LwYWoZX>SXk=^jK}4S!Hyfu5QXTWuPwx@@OK$_ zb)kbjcHOmlBv*)>_QuY@xWGnzcBKewok0{9U2V*?-jKb&;cmayV2!1iZ<|g1%NkVq zm#<+8b@^3iEd7*$VjHdRM;Y6)Ir-Lf zAYVEiPEp!7pkV0e8^D4T6S{@5y{-qOTq76b+IQi^4IXAf4|&#mU@i zyd(M;{-Qk7OXeVW@TZdjz0|#8{|C0E;py+#p0crJ1^AQR>e>4Tl+rSeYZ6mO@_t~6rzIH?{IQ;e^8JJ`5P7ITFjE9*nm$xsoy4lW=37dq^ z%u(CuPs*p&(7>1efs(RS%>`=ZZD6v0zp~hS7c|ztQRD?1qWXiXH;00H8Zd>ad*jwQ zMrYv1@G)`2LPyiT$egE@T`F`LfM8Gz*th0H`HKx%HRCM!pKHBZD9Cyos;=q+V zys};|>e$V~nak>EL2Jae>T7ONE5=g21VWH550rS3VCnO_LS+8O!}yNqNB`wE`_*ea z5+Eb8?1wHL4IGx)sqf)*6>`$I-Bl}VpFYaY4?>Q&!Ld)QrS70QR%+anXe(Wt-5Bb$ ww_;uzhnG_ld@~zFWjpq*-F5l62S-NHzyWks9&;u*7o4_3fFOwajB3CD0P0EKT>t<8 literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/admin/behavioranomalies/changestatus_thumb_0_0.webp b/static/images/auditor/10.8/admin/behavioranomalies/changestatus_thumb_0_0.webp new file mode 100644 index 0000000000000000000000000000000000000000..ca820e1a5a8536974678f1da1082255c0b260c8a GIT binary patch literal 16116 zcmZv@V~{T0vMt^6+aM=hM2ITx*{jx-aoS97Elf_wKd2SFuxsph7>6YaRG@7W`6)&q=o&L zPsVW1FF0R$;KiT5AA#&uukRAVEJCkU@-74a?q`^vyk*eu*V1?)enWv|K%78zDb(j(3DA5^eAztR-tgxe#Q78c+<(_Ss4NmZ`A-0VYJPp@ zeZ@cc_3PJtd4DN93ta6!`nP|&d4@j&t^~IF*8TMWfCr4Dz9s)TfAjDCpW_$cFO~QB zcY!N|j@_+)B3%C%`XUHoSnO*8%mJj{t^U!we`tIN-1(mi+ylJ-c>-_`^HTTHx9h+3 zGviJ5)%D5n8GqMzBJctz_?Pwx<(=RO;n`r*f71U3!1S+MTXg_`+q_1=hwqfXzQCKG ze-zK-4K)98c{sZJ=@zQ*loCAcI_K`Xs1EAwk*axHy5oejgY7(L5}rVsR2{A6oP1J$ zp`Zo<3BC|T6VAh2~l}EmYD5$ z5(5ABQWJ^hAY=|byEkZE9mGOY=|4_l>Fnfnun0cf=GawZ$`RVyQIS`ygO&dGf-F%* zMNzDaJbnHhp>~9mg`e+$sC7(#3lzaD%)>ERikg>agyV0B*hf#$ zW#5sU_x}#(`h&QHBm;Cl5Wd01tjKkUL!wSQ@?Wq2JM(V};$35>BUE~CW72rAA{M^h zh2ShT!}>P7%>$TRNZzKuZPM)$#r}4Zk78(meBTkSVhQjV`y32$FL-^9oR^$4pK^f{ zRvjoryDpYpI13i57p#3Mo>2+LNh-ttELlV~=8(8uifJ98KlAOzwgVq*n?mB}{x$lS z`y*+`p`qA6OO0D%z!$&9{?$BT8R9N10tIZSsuKOwD$}ft{Nn#0h;yiD>6p#^i@W^uyi;Y@u| zQ3a$JxOpgDxl#qcqLS%xwW?jOChZhM0QF_juwwN}Di`OkzYuJ$OwbdpR1$LMHiJU# z=N{CrS2!2wQ*)nY{lxnffr7iD9{E!h_kzMU~L=&L^@hm0itN zn3sYM;9>9Z7{9d`V|Yg7jTd~y9#>-m-^(jH(Q>-&jn@U!el!{r4R?AO4&soyA+pGi z_SgqiY%|!Tnd2{ov_a$=H>Gn;$60LYrwkKa+(4d#K-%i#5B8d+Pzt?HC2H{BCf&!< zg=kjJ!1?omow<(z)U!=38-3PGcw^f&>_F}aKIjlA=iGasCtrrq&Lb^|_afiaxDIAb ziO;=;{bZGuTt8P<`Ems-pz1~#W9a&u3-O+c(yEb9V87jjpUGlmNR$-D7@K71`=@W{ zVUC(FJJXv24{QTMWL;u^jS#?)E>1kzM03AH$*gvSGM7}kL^%#Y1U*Wj{N-fos+4hC zV|ZM(1@Fo`W6Odbli=AlC`qeP=leq-aLiJlVZ-|OvG59v9}smFLvD2d|0qBIN$d2>L;~Y zKD=l%SXMpnyh-yNSLz8B;KravS0@H#c5(Ej_X2JMRw)su54Gp(?p5#?%LTiQD9qwW zJe(Cp>7*=@vBSqZ29%0vL)Op*dSZ2F`RA_u815u96tXj2-&zWB@4hW1j zr9krIZyeX>x}xDq1u5S*hKP|9fFR)e@jd`V?{K7W&m)-X{uc;{WrS}*){DLGvq~e~ zb~u`8ePh>WIV+Dy!@0W@P{5-)JX`fn-t9w zt&XHEE6DxkdG8`jaVX~+M?$7YhtrR>Ey){@NaNR@N|P2Jb)nfl4Ca7Y@7gC*atc|Dl{>!=x{`q%yzUHjj@ifjaen?RSIY$J@*3jL!ryF!K&cAarEJsKE##R( zS<-pqZUEGA>yfp%l3_yF5<*Gm=s4Fd=5OTv!(aWNYC09%B`P4D({5=nG~1P6`&swp zXI}Ors1zrUl7%EPsY*7P^a}^mhRnM3i`RP?N1LcB0&Wi3vUJZex^BB^nvhQ;o&SUya-9J~`yG5p}%laI% z!-Y_KW!>5n7eJS|9G9#=1R?E0lh+~BcvpQ)ikJcNd<^kAbgGVOFv&C3dBP8T&D%;c zug`5tqvJld-Af^#(wU3HDF~6&pz&*y3EyY8;@b7M;tl682EGf8gBxw}Jxb5>BbpZ7 z$6irVA4{#cHq`_KQM%xaJGA09W6mXj2X}M2i9}z&n5y!~0({t22m{{X)^0K}yI}N- zffxR!1~h∋W3=-*@emjx(qNZ$A&zQA`NCR}V=;kQKRO@d<@CTQWw3NqKdye$I`( zy&pUt&w70rLoQ{|ns~8@M19{LrK-mY-GH$lQ5^MPpo;xw!#4rhw(+TBURL)7z%K;a zrGX7ha!f0uUv!F6gPCI;jB-O3TQsA(r3grfr*p72`cmO9H!PcRCK2T=qH*2(QBj=%5hri@aS?KUVyrnp>P5b_RuLiNXf{^|%}RnK_=@dL#b z5v9FVJO&Klo4iH8Gt)Hk+rlP?Fl%45lMLNpSn?!zw!iCWw9j^hP^woPdX*QQ_dqMd z!#utztNrY4L3GE`@8;3`jf)?z7bp=91EFQH*}|dZgosG}eq~elIg&tL4M}rBCc)^h z0oBomu7>)RjN#A8!bX(ki8U5AB@qGk@d`UkT|M6-%K*Z>+{PAUCBT%Oc#VH5y_B#< zJ{4_$RmL=ET-gj(;ihJ0scEiQ#GRLjoASn;6~U;^u#~Tnw_9xXIFuK>kIM-<5G;u- zHAU3_`%|4ZN=TZp&p4)Mf47p}I!nbjnv;E-QP1w|bgvB_;+VBTn1U3{NYHgOFoj}k z5=aoS5E)%hS|q`rL_o=u@~vcQ#KOe$*vJchyy`uQDw|QTgJC1}s$G`b5aJCdSsp{M z+?=$l_e3Tj#NYXNFf1pOMmmZzTeO#ja-8UHrRktslG8i;j*t;9NRgg#s;q9fLIOsP zm8F0cUl3z2y$XMx-k;cUm*DG9LXQKe4YP0>7@ky3LOT$I2S=JP8)eS{r8nKTbD4*2 zQ|#$_IJ|>rtsbR-)rs%BBh};ZonwO${EL~J!w$gT_ikesIeb-r;(QtM-0!>yiomt@ z-HpI8y>-e)#ViI)q3+(;<8AFuH`q^Av+3SDW{y%@sa5lqoxO|~e>8R&wL>o? zS3X+xeHId>58S?NzV;{JT2M*vY?_wkrknnmblwov=fy*(k05k`sIIY)iPNU%BH>*3 zmlarHcD${Ok5;NsN2$)?ddrU}UnakE_;|>77#jg(;d!Wt{?)PXF2$3F7D+MpH%pXootAlU?9or*adaY>%1;#lq&IAd;eGRUj88)^- z4fP-?!D)PUZ7MJUVtszw#i-^=H;0K>KfPe%ay}5}9pg)G7js;jw9Q^LMF1=;tDnjY zNpgDMJyJnSs(j84Ff)FX1p$o+3=f4Cj#@v47dPKz5!=ZnQ!nRWBl?=2Oi(P!mI9va94E3Ov zHtG*UOTHI+&ArBEQc&o!!dK$6R8p+jtCf(;t!R7xo3U`(5Z@7#AETkb?Q!VXKg1fUGLnt)Od`%S0ftQ!&AD?NgFSs| z-FPLYMB}ImA>BuEy{Qw!M?fHrBw^>%LYzuA86|st&cd=}y%>tLn~xRGVJE5rolxjK zdJDUGoD4~Kq~wx~LDeEXxVK}b=;NN;tHzZ@4KbL_EgFD*#z%Oy(+DYgsb@w{9Iba! zbofOPW0hJ;Ho$i&?2(5KNq6yXsK1oXtu*=z@1iUKc>;C@-4lG}YCB91pguaKAZd;- zYAh*^(6MAA(Vu+$sYk8*lSQy@%zG{CpfGLvte{?qb=}&y=l;|x?~>>l?&m!&q=_mr zF;<8F0LgdG54)yPn=NGkf=-^R!H43U&mwF=v>Xw#SWrk$ikl zVoE}GlZ%yrfrTAin_~?Kwt|JkVngnw#X%fP?go}-GowV*uQL4{A(T-IMlTCxIEa)9 zD=^aS7wigjKQu{1J9G7U7ovmhT*(7mJ8*U+M8cqE_qawg{cjn}B)-nA4+$Eq-{qQ* z8Rre80ib8E8a<3l@~VW>_4XqgTJz%Qq^Xk*B7%Pnx-xk+r_jY|n;^If;oIuh=T6U( z3iDZ38_cyD{Lw1OvRZ3qi~_RZRg`ZEEp4M7S#EiYgV#$C#EZDv1c?yrXq={n?lQ){ z7?GbnClZ`e3C&noTyWxPxfbIL!h|B4r3AAO*DnFcBb)eQs7kx<*(H~uSHn$85!`TO582;Mx`xcJd1b0-KM))LmGue$g*noYY5|J~{e)l0iBBkO`axdBtid z6nJatX9I`X(hyJuho%M4YuhLIYGXe7m2Wq!*7Ua=%9`KV$INTEy9-OKism3!AT?n~ zd0%(Z)Uo+J{bB1UIHR0ke#kgKPFmn1@?dJP=W|{p0p~uN_g5b|ryfh&SI3+y?CWUg zyHGj$VK``~Ur$vAgPX)+lJtoSurd1Fh4)K}pR&7lEbOIPVYR{DE5(?F3uQTna;%JT2Q5{cpPTc4bcF;;bM zQ_}VV_`U>UH0emsvxNGXS2PtMc)xYExw?k+D~!@Haa47NxPd(ZTRC0FHso91vL>)y z2|X*B_PM)r-*f)iAx7qhueKYb;(&vE9Wbe!Xz}O2;g6*}98RwyNtVL>S@kNK(Q_ z7#RDZsfTQLl$`rD=BeD*_lyUzAV)BCgAy{Os>RA*mW#Q*57q&PbLhwZ z6j)_YS2l2Cv6g)wV#wnU1kyBIyZr`-V2jNM z4FL&hdcW{Fjqh8=eLPtaawTkQNN8Ml)8oNhpjg2~*Xh|iEJ+$U-EfW9+WM3q5tm%D zmSaU6hGyZoeaqjMP#Lz?_(7ESa%rxlXN!t17n#0G#f2h{1@>R3Lku&SHw3&l2u-00 zlPP&oBBl0g`Cr9^@wn#4-BwO}bTPU-wj{`6e~^PI25r8sfa#S(A+WX{c3ze5A!F)B zPmsBv%+)e1l-zauFI2^6B|M2^5|6U!)L6;iGJk9T$rZs;Q-!OOJJ@M9qAy9G^ehzN zj~2j*GLGu{Hi;RVn6|(0%|FoetFqT69v3_Jb>xN-8jEP!EpyA3@`Y_P@n2OWDsIdv z2_HQbF{RK%a<10C(7JR73F3*>3x%!Pqd>0s!e|`%({cUTIyk0WjE$A4XIIk{M#+}Y z)D*=a3_Soebi{@fziHM{CYO$Y5-57-AfWpvccqx_<2>osN|KylVSVvQ?^w!o&tl!)Z&Cy>Hpl?LSmuUpPvk zv)_+^5qKrZ85XLv-_7%_+UV>IV9!M(jsu&8i%b zQfnih^%QNGNWAd zN@bVT5$>$EETD?q=W^#7VTm2kZnO)zLur2C*zwJ_u&2Ob_Ss`0+dYLv|6$D#Gl9z* za)vTVU;cY&{YAwokcXlr;Vjtsrm-Z##8)o752 zA@G3S0qnYEP2$|heyx5DkQ`FZsRd`c+jR31udL!zJ)8Z25O3C(i$9YO%U;yrhX%I7 zO>XCyKT91ftGTq}dy77@;>%zb;8+NbW=Ox{1BOcw+ZDLdA%eQOLO6qVl~h^x*TPY3!*-Pq zUvgUT{#v_$)h{^yD?aS_Gft)Kc{oV)xnT?~V*w zXgj4B*$rYiXl(?{gUi4&M7kcc_uXigw<)+U4fwgMJu;$x)0A>*=5V7=r!!FVu~OB~ z!0>vK&=ypJ=4HZw4@iZ>O=~LJIKPD5^iatU!0R22N3(w%+Z|I#btL7t?Vq%ma#ata zFQJ-DHwBVx)Sjf!Ms1=d=!V5^irvPnYZzy^H5JGpzkn0EN(-b%X^KHGE{lNs6lQG{ zj0DZF%3Gs+-49@P9tUbQvx^rbNPE6>9&QT3`Vt@$#_OLNObx$U`lwoTStrae4QM^j zt9%o^^TXi*Sw)dZtxp%bY0h)J39v1j7o`yJa2m#1F74+vAFSxUTw)8u!FQ%Ux@~R zTsc8gneqI=k+^VTp2|uN_S6-`oqkUph~&ANSY1-fcH2R`@G1A+jO%MtNJ?nILQitG z6P7h2kk({rwN;3+3spQT%KHS;3*Kl|4#HbCk?r5=#;YQ=>sf#gN>bD(K% zp{nPkWVo_&L?L>}{w1-OA!Tzp5%w*qrf?>abBy9TL|Tn%h5hJ9tF{rbj<4&B{vb;< zd9TK}`^0#+U99TH$XK5IVI#aOXkwugKa3{cs#qva^uu0qgem4sP(AQOp%k?B;GRhn zoK($fTV=0w8v>E4vYeD1n}xHGHTg3Q5RKl;+AS&Z*0%6dkSIjgRIJa|rJWTSv10McGt2p_7ej35X2dnLlvb-Qib@MFJeDrUr$Zb%+WyIncFl-b&)C{OHVxad$mYq_SQSW&{ zpCSo-pl9?JlBM=paHvbbrR7 zNK)>Ped=mt5`0NyL_e_r%9br67Xj*sA1A5b(I%l;9etLWGOnTxI@Nft z`f8*0{$hJd{Q^qc+~B@15GlfsQsU(a&(=x1FUwHF-=XJ$i&jkg4zuGXg)+7~ZP2Vf zH+QgGj&32|dJPe`e3_n%=CYqQ+>IguHX6_(o3e?KDvhHLQY2AiyK&K_!KcNs(CWY}i=*iKaD*EUGq^mI zJ0YH*!0@y*=<tuP@x_O4tA=5fC&;#Zhhw#ch)zFV$emf+==Hy zK)|fYxHX}iQO6xUXnH4vRASr_n4G;PH12~7Q#z12TVZ-;y6otRX*>^EuntrnT8E)y zEq!p=pkN4#=pPw91xIxhzadz2kA89)vueD#^6YvY9;#UA zn7fvl7u{#rxN(;(3Kw5FJ{K3Djqxf+9ZE6%G;L_5X;*RAa^KlVc#;DKo|c!?d+bxn zuI%c%aP_PCm-nt+su%+;!dZ#T#cDaX0~6(uHnu4R@=kphEm%% zG7iHEHA6eKt7w-~_@fC^o~{gZg8h)E=ABV}Pp8rV121m&pP3~k$;DP`5|uNKeRfs5 z5fw_}7Xi+WiyZhXOey4><20dqR0dHte^j zG9P*&S4mdQ)U^GbeFS^Xg{s4l>%1HZ@A%H*?!V@vRDzLhbQHm_TlyB~H2 zK?8GsT|1ty8@YW?wrwN8Pqe;YQ)%Tj?J^9rcwttPW|!Xf0KQh!H|CbIOwN3hxYfvb z!MicIWn3MM%QBp&HRBvHYCsJ;fMyb_VUCy%ELvK99>IY{XCloHVL0QS%A4IM0DT#F zA5k|l{UJ>s(QoNTUXm<`g?XczJmC*A%r`M*Usd$4NJn}=jgz6}yo4*Uasun$zlVCx zZcCXv0M;54dL&p83UQ4g;%SawbC;Px%;^p#);^x}=lRqw@%axKN zU_DQ+LjF3rTi;)YsiL?&Ve5kVN{&h8m178GoR}b=k+rmVtyUtL$BdiNsF6-l?fS@i zyF)UL-{j=R40gLY1*8;qFAgqKw3s`=FJv_{s56~Af>;>Ae<393nk_4R{WM|HUJ?cx z+0%=|S^w4x2FZ`acScof+>*H)|7V=m{Wv3Fz~H`QFaIbWc*kYNN9Pa$K`!NEPBb!i=ZH z67HSyqm0vafk-rUg$-$VhSKuIgx86 z1DLk=AZWwt?@hZe_Oobn?9ULYzGbQeJUXOmH=c_AtlT}#X37%4ZI1sj$i;3mx8C$^ zr{0=6B9i4m`Nj4fh#@99IZPuC!yUz#*ig%6@xm!0J6zyRp?NMCqv`Fs2>!8=(Q8xl z*bn-|8mE4*X7PSm5H`rvJkYc?z`pBjz1YpOv+BN+Waox&L>F!H47!|_b z=8No+1*0IVtw(l&zP$i(Z5NC{;b7n!d>VwR5y*4zp-s}L61A7BWV?p?J9}$#_f*ch zn+3QTkgDK-3zm{#Nr1NNW*+b+W;PhUm^MYFK0`o|Y^d~<>2mi2caqNI(YK~HXO4?? zHnR;LYuxC!ZHW?BXHNhBzN#mk7tWB#3=P z2As&RB>M<$MX9wnxqFk2{zaL4^GiP1Z#B~o3_}~cFaP$OKj02#|vFs*edr(u*-4t#h^9m1}6_GBqCc!qxH@ z0bmoHF>M2^)Ab=gdS9#r>?(o{6X+r8&3vH53QW`coAlKa{F;6KvlP2e&_d?D4~`uj zqMkhHDfdV7J9ef|+cwto#%}^rX@3J#lsob#NQ|g0;m=P(FIvbv^u z$BCGL^cGgfDcd3qtS&CHt;ssy z9va-QCql~IZ9sA8U@xDy(_iEw;5*W$vsO=)>Mml&`KEoE1J?Zs7zBnSw*7v+^xtzM zoJgtdcjkxP2$bQ3zWYh|TG%?n*gks$8bmNPcA|ea#d3hfq8~(liy1+b3~1zf(yGl^ zUpKMrG3|ZOa^!jA$j#y?uiAdT2y4I` zJg3EdS|ac=LNQNr;sK07G%az`D7n5muc5PV5*!x6ZQk}`FK!KlXMtJ-o1OT5AA`=a zWwp%*Ut(>^n@{%_mDU0-I{GR5jyqYxG;mzF0E)e#@Nk_C-iAVNFqpe(v$|Us$7&M6 z)dMcfZ0!v*ecGK^&WwilehmfkcJ)4$Z-a;xB)SrpR3xek(;~*0IhdRt! z59!AR*tgsFO#?)GoyEH?8yG;ulV)jx3pDQM`#mJ-Tk*^(LgoIZ zJq$jQ?DE^OzNtALNSQJ`-OdZ`2jDM`v+-|<3`%E~wd?3aO9xte*+sVPNd8k!_BP|q zm5)|SZ{lpPJ?dN2~})0J(8~&p&eE>hdZ$PKD+4)X&gBp&h^1g%Cma8 zzi2Nd87cS~8KZX%`OCeZW^hEcS1VE$5z~3N*Gsp4K8Kq`COAd;Envd9M-%*J|R( zUJ29nAczrx=z^0T1~{S4{_oeyuemuO;1zyrMf_o4Hlv=U$pHA`+9IE`1OD7!puXn~ z$^-vqIxxGaG{{XfTBKHLO%hwxdhxXi!`S~;%LTVEjpFNT!)$vy4>`y+fxI+BM1flz z*|DscC9?WUcSm#0A~ge+!1BwlgHwA)5_izCmYcy#$>AU+f8?xB~twEn;(@wFIeoM6g|xx zaC07Ha28Ib^{+DR_7`gCPc`V!;NR}`*S)=2cXAjt2aAw27;M|8RLzaMO18J%81|pk z0aN@J1|h%Fc+^259>IcjfJ|(a1TF;3ag|-oS1ufV0Io^AwF)?83mcd?fqrOr<+`S#9`NCz;NR=it!+pDt)EsznFVqg{k++ zNTnTkub3H$mLq+uC89awKWAc}>9KM1LmuhH<(ggx(Esc;gB%v(p9#MvGw0kbg|wQM zi0zAVQ|U{7h^F)x{GO@L1^{DyP2dQe=f#gjM|OSw4)pk?i$tDyxz<$}eU#G1U@lP1 z-QW*~S8mkDy>y>@ofWsX9st+$n!l+srEQEHMut&h1W}6dw6a{WQV(7A8cS~bDU8pr z7T~XN)Suy@9Sa(Wfy5O3yI--LfL(fh9%9y_+jy z4vVKCE_jFE-hW(5zDSVeS+~i0Dohb4hct^6bUZd>5AnZ79Ip;=<;A_Fam=$4mPY3M zje{v`H?z+qq*ysSPy6FccaO&Bq2#cVai+-KwoNFqfV9T5e*WacrwW7a&C;wq&cHx9 z2M5YEHkUtSDE^_ud&?F;R_ebO9Po)_*Ov{YWiUPt)?LaT|K({w%YMdx{9=4#0pi5`y?QJF{# zezXCmZLad$D0n;`yXB8&e8it?8rR22hF$fufo#PN2o*fqV=D1-eNQhAK)MOPGw?(our@L@8G1I=^|P8+{AG3y*wtc5Y(-?{L}z6e zRM0!LG2;&WyW z)DPhFE;yrgzIz{(CgZJ9S<&K%5??_uHYBm3IzW~L<@b_~8fvlxJa|j!;_@mIFuNu1 zk391_R(RSRiqZ~B#eztyQ2VL7)iX#oS9@3ji@8t-1uIbfpni^Hi!xzRKG0zDZp8ww zNPDDQy*L+Bs8PN_WgkCjlu2l?%g6{hDpjop4He)h45vZzZb0>XMQuN8NL5`9a{AF4 zHMSEV$c#GK8f==|?8~jX_b}ltyBp_eEE2^Mkkus2=5Lek%%M(??VbEFT}7Gd;O(u( ztGq>#;Z&dGJyefPFmrwJ4Opp@RZCNML*(*k%$VExL$Ie5ypi!g(Za5lGZpFB65;Rt z>HWKSy}Oq(IC&#L)B9=DHiTIxf$Bl&#h2aaQqbz16<9JFF2RXtrye!;hqM>lhFXKf zXRoBlR8TA5;WzB*iIM=~bQM{&(=qMhFZJ3t`9#g?)p+PPxdvprrg2;gb-$R;Zr{3h z#h+*H-62ipE{n&oJszdDhslsfHxqln2XgHMJ<$k^DIaF3~N8|^Y z*a3GMSIKkJ*~+KsW{u^G{9?z{v=Jl(cT_M@vfUvfRS1mRZQz@Z)Jv)iRPw38z33A( zCTn6Y`Xk#GwAPOiLa}y`NKq{$Jc>GB<5SRfMR?s3Wn-3+_y=;wUHZOfgAkP`sng(z z!@idgHTi}vYn6~)oW|Bq>J9xKEO>mNXvXEqO=|$BPD)zcIigKXk-a+;5i?F>OZXRv zv@n zEl!iYfMlejm8&%p%&~pIl9K z5HG(bTgdG@oUh<^4~D0xi?G<+nfVHrnAhSLCd@Nq_z!zVe)G3Oyu(hC->?yc0f=;5 zxoNDl+^FwC(+^8fISJRNq0Y~+l6V?JBs!;6>5Mew7r%;#lNdXNut zChDYOf?!6|nf|)0m3{aJj$3QKFP{79gCQ_K#^kRV$UY)I6pqVj7Jz@mL*{C=_4}N} zyUOXnqTa!uuX4BQjx<*J2&KnTG4n}2v`AmS1@%7k3v$Ar7xKnej=8Mo#C}D&p`)tQ zv3L3jsf)j!X1W%qFLlFZE&stB;G6}fUW(v(FDT~$hmr~o#*QhH@KSIndWlt40YSHZ z)C10~x&;=GB%_)5xnZoJ@>rF8YSZXnCGX z%;>67qyaBmG)KFXoMZ_DZ0}kZEd2&m>bGxfvxhlhCmjxIEofm`9gQe9e!V4o_#2wj z&N)WavA3s6=v9b`pw}7#v-%}Ol>CY&_f>NpbrA#J0;E>XLX;ZtD|;ly;`6pX5zy`wvG*Y!StijX1+o3DjzmRvz^aeq&rb5 zG8h%ozJ2OxsYIB%^^*vPN}>RLAfTQ$K%z$#>x>TXM@Y$)rYeyzDZxOp(-QwOPM*Kh z6Hy+cx_0iaWugP)fsyId)W}o2wx4(_Ere2^r~bq_)2+ygNpdwn0LJj^{81S3jvil) z`IlU=7$-_Guff?HV+AUl2B(F72$1u3L#<~)bZt~LD7+$X38TU39(X zbZYfuldt(xsDyfgapu^3(Ur@PGK*aGzU%j#hYw7|8e0`%u9cvN!`}}hDs|H#9)24a z^}Hk&KSU$PZIJ?myHrh^wGff&<%gxN;OV1Jq$;R!i6_FGk0}Imw^^QpD?0P03D}aO zOPFTYHc={kN-?)8YBXQi%Mh%Ol!)dZ6t&sl(0f(xImg|ERsk*RS&#}NdLvJri|P{A zQ(pMeP#+NN9>gQl@*mRu?C1^^6+C_qzva9vL#a$_OHtAP`7!k$$*-=eizxsiEIZrA z2isx|A0Ojq`RfH1xgwgK^?UUjS{88skZ$zY%DXvgt(c5!!D09O$G`-E;Cf1A?VNiz95JNl)-^V7Pb;X?>|#lKcl zNJ~rX!xN3yx^Ermb6b-)996JI=8YXiiqykz=rSQ`#ne{VZ-t@%@Moi+o8oT+GxdDl-I? zR66OTu=FPl{7F3c`pU$+{c38d&B142zt{VhV~m8EpstoPNqRo zxftHpS^R=|4D*wzGs}P2swW2(nnYK5z{H_b)JiR1mVpr@%3Am#tD>ZDkR@fdGi~*l zt~aPKL>9+r39-9iBKl*!#t_7@r-o(pk^a3<5KC7@0CVZB*A=j&5&)E;KwC41V9#r$ z0&7{@$l<>PIN?AZ`=P-GZB3OJG)s!6{^bte4~EAEXx$F$Z1=3H`5Jh>27JB(M{VP9 ynPdGNd@Y=i>I%^@o_5b^_^b9WF&=TbCA#n%<1^D^+ueLAinHzJK4b;}0sS8v*=K10 literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/admin/behavioranomalies/dashboard_thumb_0_0.webp b/static/images/auditor/10.8/admin/behavioranomalies/dashboard_thumb_0_0.webp new file mode 100644 index 0000000000000000000000000000000000000000..19dd55eda5fe093f10b5664cc355a968cd4e8c25 GIT binary patch literal 36994 zcma&MW0WP`v;SGPjV{}^ZFJeTUDajVw%J{_ZQHhOo$2Ry@AJPiYwnsg`6kcVdCtn% z5#Js0iJhq=B`)q64+NwxCakEY$Vq7T_j5cDNDeTyC0HB?zb$*36e$TY5pk2nt3P~% zx!tFjYk0?iP4}4li~d80+m*h*Z_UR`1bDJ<-6yo4U(HPppzcWET7T?Y|Ahmf@SL}) z{=TD#c;B52xO$KKJ_D33QryQq0Xpz+0M`I>pJhK=K+GlZx8K~sS013}*$=d5!*9Xw z{RQ-!?W+Uu@}ckvKn1+}IST+jivgj4p^r8I;4tcA=UX2D=*|No`1TPLc=Q7R0PBDS z`^%jjKa*}?Z{tVAGlHs~9f1~4iPxU-9*6IjZ;`LKmmZ6oOJ1H|JvRckeDL3F&$zce zt3Bg>3jp}blUIgG{fq7JkMD2w>xDzid;6oFeZLyNU_jfq!eQAZ53Wnxjo-Q7==YsB z$a}&4%oAYKZ_sZOKy$M84tSi|QrH0i1cZDUzQVqCUj6O_ngIp`BY+aW!tbk(zHbTu z;CrXRZ`OnOi{Z27Ti`(eNMHm|?pFxF{Wb@vzt{Yo0RXip01)>L`_*!-&=5B%(C4=V z5c)QMzWL|ctp1_?e9x|50Duax@+I+iM8FO3-PQiR@AnM|yEXg(1|&TI01hd@-bi0O z*rBmGc!-cvRqSG?X+YhqSaoK9mQa>6w*b?FpwpipIvs$VaLAmu=Qei$4-z8J!``=% z%E8Jte;X3Oh29@BuG6_k&^A16?V&~ZB|t_0m#wRNu%1qN4{8p>cU%Zof68P z)NP+X$$CtBGkC2H7>?}mLPJ}faEDv+NHE9vMJNZf-)rwQX4w~O%d)-5Yvr5Hw;Lh8 z`^oyz&gZ2d@6AlpM9q!pp8oplpbz*M)#3E`26}8N5<51?`>!j=9KJ4-v z{%m6e)wL^r4|PBfJ^U;5fD|L)H# zr)y(^&VrCYux6HlURe-X0+{C$svf*cFdwG;y6!aYpi}6ySZ&T|PR=-79k2R<-Q%AB z1meo+=Kt;_o*da=h89LCbf8h3q{k+n^Z>HzH=sQ|ra$O&zZ%j0Oi`Nq72gWWn5)ur zJ`yW-(DGCepbj{cdK|RxhkN{Qw(;h20E9Z+zd3=xqm-^x0@;5Vdi}rT@PDjWi(oGF z|7~zzq)HbJ{6Y)+zl1LB|3qcKV7+nwSA-d6WmsXyZkfXzqt#HyC^zZFxC%G+$jJB*&*TOEL zPQP!5_Js!t#v!_Ydp0W@X4={Paqz|cs=g>ONhf5#+(*OmN2>~GgqJrsy5DLcBs?XM zy5dW;9`3VD|Hc;CmDmdlyj1k??eNiEFcOm2wS0_Ai8Y6-OE*YR?oSK$Z-7|i4Wg4Y z=En&N!LFGW%?#qOhQ^H2Rsx`OqqHzomSs(#bh3+BK?nPgiB#zClEKkA!fNW?qUIDL zQiEAjamV)hw;aWat{(j1j}B`>NeRJ7L+1x2ih=;}J|#eGl0DyV1UgIg z$77xaE&XfQ+swVjrn$IU3Lkmn&3%mj!N`Kf>nIubP(&)jr>C7S=_aGWLI}^%`D0TF z%+;uROa6@^-ih$eG7(s~0>Saw{NX-I<%x$ZoWIW_IUWXd07_TJH|Io9F17rG9tu6Q z>VM|L=7Kg*l(J|Jja)xML(Zj~g^c=bW5*qBm5V}GuLwKJQ^QbOUlAwld&Z~cOeDGd z*S+D{F2`rpwDQP#LZBtm_NOkznpY84QnvclCL6$JysYVsPxa^KY+m& zsF1^RXP?CR&Td$IUrfGmdkg(WaYgxucbkNaLm@%R`FMpw(>sdPKOf_MMZ2f!KUk3I zqo#+&qw!nJ6R|QJGHl;7tX*7h5^CpJYQz9ly+|tv!waTNXDh8~LR+5^8h`l|H6APG z?)X>S(>_Y17>U8J4`R<_1T_viE1X=bQI*ALzqgTWZv5DP;iHvODq^Q}_dhQ3N$CiY zSm$^84;bajp@|ItODY#R+)s_6bLdS#JyjzOYPxqXPF-D{XUFa0CMOl`^BIdlu^lTQ z!TpuEptFX0<-y>xUBlq7TaUctj&m^!P#RXbC|* z{21K^D122o1vv%?=|8Q zre4sZpcl8Sukk)9sn84Y^go>N>f)#ap$K`S2nsSL!{_<4>U9~gMV75(FQ8~a`Wx(* zWTr_xP|9~6=ZKdYFQp$PDJ$O&a=OF3eei#Nu9p*ot!>f#YEe}bk zaG(oAR-Qo_(p5IrTY%)`{Vmz>{BVtqocT{A*FL)kA^JNb6gn{mE3zo za5>RHp;If!R@(iu0;WqU*=kX;1eaQdTAq4ytXfQixp#3j%qn;fWLU=L6R$~H>+$n` zRTo@H7XM2*E3WdiYNXQ?{{hW0K9f>2i|hZeCrI(;{{Zw?x8NxeK%L3xW}G#Eko0&H z5)Ds0>C=MUJ|IeE90@rF3<7+qIrJS$)Df`u+rj!j$Xg%op{Ir9EYi>#I}8{OFf!DF z4-dbE%C#!=?mNV+O==x=D>-xFKiX-UsaqYz&48`Q@vgub8+X$3TCp??qJ?#fY~+Qz zi@Q`#J|wvr@TM~V7mard$SHhmcxC>J)EM+zA=bd9_WmK|A?W{u`&Uj^=Sy3LByeya zb8fN3Wv`FZ8m-rjZF$k&%hpqMt2r!2OLtZN3qlI4vu11@*TgNe|J< z{L7xw5x9ZdF==a{F|#;8N%7Dhs+)g7eiUq?U26aaCG|h@T?w|fQbCEsbNeUh9i>Du zS^rD^2NT8v^u@%f!2J2F+>3j$Cs?Vk_L;}8Ks}COsxGU62X9vJ{;y9|){bBH60r5j z$xZ(V?EA&|FzBVPS#W#5$AmUqm(W8aFp#sMm-yH3hDeFylxVT zTldX~N@*4^S2-)!7f7LY7m4(5n9J zX8s~^qeIuf-N}c}Zzpaw5CrdssA0hY5i@Ww9q|IfYyN9)R@Y>Z*9r#TDXJzbF^ z`anETkb8IA5)ZFczEX%)t#KtSJsR!_^H9D*+e z32E-H^q1=E>0m3G_!~9MB&Lup`~6g-+N2>DuCawOBY6o*kO>X^)vNGG!!oHbU!xW< ziNdCWU5I3}B5>2;Aq*fs9NF(dv0HqaygrP+OF!p~ku~<=#l0-2pP(SjY|$h6FOzn} zd$xz|X~^mMA=Vu2H{nodDAJ^;pQuoASl4sYjsom5cyt%PfVB>R{8zXTgGpp94K6(M zQ5Y3q&ygZg7jpNOQqE>2I&Rlfx5f<{XRcNCK(1r`!*d(^yK}DnG%I9MP;p$9aUkid zm7aDY-*r}jfPn1v{1SjUMLKOx`<|JGi!2?Kr-036yE%S7$kKDoT~=)u7E%yP-!2W2 z)f|q&Z~~6ceR*RWqsNp|61Bn6Bs0K#eSLkzQk>cy<*l>G4V!*-p?IuuonY{7K)(b+NjiTsIiOriFEAN>&$xk`^;Zvl^u$^R@MKCgAs zv$2qYO1eUU!L}3vGc7&_6y4#kJ~-%Pqx6#zMZ zc}@W{PJDJ9G!Q=_ZWi}cB$jj!eqKtS&1I| z-8ZQV#`UBr6Bgk2M%uu#*aYRyK;R%SUFA|LG&!fPAO1(9stt@qZnQDz+m}v836c+~jsdexkvb0b{T7L-d zg3loK^n~9hkaB6{>hVJ0^v^^3ZT)+wB`a+Z-nK)6a6x8->ThMudAVJF1R|SZ-CK)B zKn+n$`sFPY`#qZRdUq-e=&ajB{|0$h?Y_RyP}n%nrm_Eh%r@m8DX(XEj~B4^$kp_` zPZd7Xw8Of6kMeQaw+f|>hB-==pn_ReA11oT zaVt_KJge0yNBam8k*5lQFMG79n}C*fDZR<~JG`7P8Ut@rB5ctOm42b!OGQK8mGef8 z)bwR=w;E9lzxwrQu-&1);#0Q-d{?z@S-qwEQR(Pw~4g%Z5PBAE1;^DKz1swl{AUE_RqG=bmo+t+8-zj z<8@o=&(Hj*cgsD0eyM%(*MOwAM)MiIHVE^);k=%lrqmN{j&2(-w9!kG1M|nwAHC(i5b2vTqkc4WfjindMDC-Fr`C|fp)DUf zRd0Ft`9iLr2w&dOALb=QbK!7C3({+(>?W>tg3Che%BePg6D$E*Sqr_D;_@*JuC6tG`*^n5p&>S$(AMv9ojrQOWw;O4BU zH&5RoctEN^_tw0>|0v%==OOXXF`yDvpTA!AJLLI2&YUfixa7CQ9Rq$oE~DKhAH|rI;)|di8PB7X zRhkwx9xqD&*Pt*LLMCv3&h729M6yt@SvpivFN%-UaDJA8`_~y&1MT=Hrz^I_^>_^RPs#~T4N)TnQ=!7pk%L}0)xXnCHtErOJ7T5>3HXci~s2^@AgD6;DHi`L0U#k}FR_x{$CEXy=k>DKMG_zC zMP?4m*Vh`4jBSC-YbfH3KbRiKieimg;z$IMqOSdJHcT{ED9%su(ln!BIg`?#y#iH_)p51Cj`P9XJa~& zGEl28MTX+lrX!gdRV0`?3NeSAmlcS62Kl`7D1c&ap2#r{%D-ksxEAv#!^O-&Mnz(A zxP-70F7}P4Tr!R%I)p-G?ZpcRA-OEzK5uIeiA0;plz_w%y8+b>s__Y zxCz53G@FWa`{X*tO&E|=%exet{`~##e!qb$o+m7-(vK0-e)-v~&E71psX)0^|J)W? zqJ&7R)#%)pXv2r@auar zeN{mKxNfBb<(lSaynSL1GC@@;^KioHVJ9n2iMUKQ@r{~@6n*avqw3ImQnePQrddvEXkxpI>H|jxS+eNqxfQYWUgaU2+_L786k<~I##8}K_j@~UI&pnA~CW(jK z1&dVz;v^Be{MK%#;IB0IT!?MD-F5|qzs&`C6{y%24EFeWe7djG1g@1UqSG?#)n^ za(~@XibM`p-(n;sUq&H52KQfU(TBQK$u3C@gx{dZrOmG$qyG7kX7#D#-Gbn$WHCR3 zMc&ptrC^kyL9;)z1KZ64@9dZsG2r4 zp5WTg$f(fQrjqL2#xXJaV>>QD6kX{agTxGq{O7!G=M_IQ%kH6Yvm@6=OR@+d06*($ zSN%=i$-o#Ass{H@)DuZ7r`WOHKnpZ42nX|SFKWvAo5>7{zTvl4cdg^({jR&#T~)M$ zOmkZY_AWn|hUS~$Ty4uACZ?pSos1R{Yv#tAK%AvGOGRL(-3LPLC}sS{QS1i?Fy5^( zc2L!nv$dn)AonCDXwnJj5_RGH(R=x1Xk&+8R|9@sHto5+W3aG>aP^57idH=_y3%P| zAKlhE%E?@=-hB|-EF?Vk1+n@a&t`OmuJ+xiz)Z@eLlPt6!)3+9(2v>&l%QN$SggO@ z{=|!4*oO(Iw$)%RFY#RS1WiC1rCM+Fg?cvLn_hrUNDkLiB_q9YQD9Q4P{48BgbQcA z|1ps(WXWBYx0e`{)(uQc|4Kz}W&8}geH0<_{aMtnkqY!_7M+bL_61IO9>>g7%Y$ff z^{DLsh4ptGf>@3%9Q2&j?rEbIAJkD#T{2M*>A|oA=OE?d9m=`g9Cg=xzKMYYe$U?I zE1PlW5Oc4JEpMhZyk=&f^z5&ILKSekklu;*c0}4_P$>3 z(%bl+$6{EL*6r9m@;E}-?tI}Kl8fGOAl5Ibp&Uz!3U{jzL!Yh9G6*w&D&R;%bc|bE z(QGb*6rr^Dp(A)kJF+?qQu8C7s7s*)h3{2g678{zehYR{B8#s(3&cGoHr;8~F>!!)EU@=rs;3T9={#LMKF?*7VQ%PNb>!nviUKMxvofkhdz z7HsZM!o{fEfV6MR`}uP#2Dx-)((gx4MTw51U*m;dnBq+1V#XUHNQ!U`TQ;S#XZ zF1|M`4Wh2U4x?o8YS^)ypImp~ zZ&fa^$~YCFB&c_K#W<+-woV9B0PQLNyH9Ok&;2_^o+^!lptX(FMU7-RBuwD` z5i8Q-)w&-3moN3)$4ZvBAO4f(du`>ZDEl)ZhsJfL$6c$+hZ~xof-C z(DTBFQm9C>8`#DMkYG-}u!rn^MZqsh2H;T^(YekZ{dJRM{u3orE*U+9R@*&732pS9 zPAzh9>V?Fv70j_w6r{NmSdYIN|L4$MPs<*Go@RuI2V*K^@2pkPULUv(otEpmhCXdV zlIdjqxs*pn@DLXBqnuM2RrOgLO+L|ZT4F2D|DS&&23Uh~ZXOz$_Xhplql`74qKhV) z^tJhu>FEvw{EBvDS&v5bitN@>Td4HU&w<^gCgLb!XH2ISxFODL^MdKRJ$M$+kbfKp zh>y?-BG@F#I~_LE)*>v&5;0xL!FLIWqw|Fw<8D{cOEM-Io)1q^loX3&+=* zLZDlc_ri+}_}!J_LZxgp=vIi?I~PVH=((3^#O7Yz~yKILaxO%xf zcxA^8uJKah{jEOl!8U=7%uyoouRy#K)xR$Gm&WbO4;Ow!pW7%vIYz@9=V}EXr>I9j z*0f@GnSFM~(T8U)Xl`D%RH-%fdo>lCeKS-*_O(FEk@;fq(#4Ff2_}`{8dRpDCsKYe z#)=zBD_YHld^3_%M8Ds}cWg-eo58aDeX^p<^d^W1s6gmi_5A59JES=EP$Ml^I+^gr zJFFM__mvSKSQDi9pE~pnB@5Utp17Zfq3G1WgLIT?G?Wpd=(R!s^oP;Bc@-&ImJDJOK# z7XiI?(VGz2uI7-oKXZ*x&6){y{!nHgvMUM%Z8v$syt)VsobS56UXXtMsH#xZ0VPKu zl1qEoq{fJoo5a?%$PnMA7uSroqh^o`0)J*4kA!KULl_Ts@Uu*V77MVQm?jYw-MP17 zh;X=r2sq{`ca=*)$Q0!r?sQ1Ya0teo1_DR~!$stC3uMG~lkhmrX*;t^>s z7=``@e~04}O9(iDLWuKV0k|O(yg-7V7tu~{j*VU3bG^wlv z9G$)@V3bl9zd1QAcV~Q_a@LfHzfXAKQ)^D=A<7>~Nr@){bpi~+p-*4LQJcA3!6>&h zdV6qY3}MX73u)}V-n2|*QIFZS1mm9gw09r$=G6LT6T6lk%`RJ;zHPVx6bXDP2-g=o ztXbiJ@+jR#=GI$gf;U~Com`~B!X=Or)TJ=@@J~ZH3M?q!N;+qe?>0rQhB9$6g8Vx` zQt(=#&40!^fz~G9hL#e?HRp?#t;X=MCL(JB#u_`JK!?Uy=GD4I0c#Byb>;NcCXbuzec(3w1CQCOy{Vp-+O-DgG z9e1@fd{&8@@qajT&T0ZXKe*Kq#{@)cvGkQ0 zH*UC1GE-4*X?l~IBn)=NS?us<6MKCj>Cr;=Q}NIIap6D}RzKFlC=71T+~%GM$c(M4 zc^Br%{t*fEgQVo3ho>JOD*vn_LDk5mN$b@by}<>np5b5}t>#2!i20O;hnUJ|(HZ&T zV2))(xhv4U4aQf+otG}?Po5$T*&7!h49ld{hRm*=`)#{BYa483tminpQzO%H;OUh< z!E8POGO6kV6hW`3mA)ZcMWD3N)J29*e5pl!_=kE~o!v1UF^V{83}@)@PhG7QiY9vo zTSA0nTr9o`qWNUrg<5M8l1Q61V1&ZVxe!}iOYpS8d2Z=bL!oH@QOO#A9KrefAWlio zZWPWulg1lC#e!@Wt&66Qp%Or~3n-xl0(y`0!9-s&1u8mnoZzzFj$l1jO6u_HiuhvJ zaz^SzwPR&(+O4|?>%EE)g_`V^E1igipwkQHwQQRF>If9|+u+x}u8CURB zr!YdA;#(BTpb4~jzP;(>?3L2uZWmC0{A_~Ey|pbwZ-19U7#bP8K!ny8c_3Wz=?9`Rxi@6<94mgoz_op zmRcJs5AO=`CZETVK>rOjKS=J61T|ili!%TinV4P>lfv;F0_HB6 zr1^bDu*IHM&|w`$?CJSerL6!*2|kCRR!TTtaLt#OHH|ieJ#~tmM9!WTB<=U?YlS8p zf9L^~tuBX^c}~zCUO5_Dy!o`6KC0vyO~6b?XY|A4YMw-zP?h9cyr3TnG$hevF}0vX zS`hB-l%ti{5ML$_tFqG-m1V}(3V;-!s zLXTKNA79#Bp!BJ?)lRng*3o&{}oi5EdGyZE;b7Dz17#M zz=lROaP%iGM;*hjZ7aSOSS*l%(CtOVDQ6CK;@O6cA5`&}%_y$L5O+J+g07P%xb>Hg zKLwM48ric9*pn?Yu1vQXd}?Mlb71%U>8Zuu)*-8IG%IwXaw-U1zQFGj%^MRK{|o>Nc%u=JQY zz7NVJp0_dv-PY!HmleO}lRSN5toa@ycWhT5@H$|Z^@PGo%eLx|AZQ4!acmw{MQHBb4}Xn*MC#5*D!ZPI9#$LD1|UU zZv#exYHSGA^qLhGA5?ai5x}l$rqz8Ul^NW+!P_1$sD=zkh~$w%tJC z9`3x{bKLiRICvnoQQXwrFgBm94AXJ4 z0!f<~s_08w9z-hv?zRgAY6p#tnn*7(PvzO%6IVi$7uxHju0$^q;A`!tc>Ns3f5zug zu5;Pl13060HA@r91QLYiVww8^KX|B&P*>=a8bnu^FMuL%7)K0%#M*}3IKg_wnivNU zjy~9w(Om9*gOQPO&S51<;r1geJUOvHS~4G5TrM6whw&{)l0hgUctZUBdb!bu8 zYpg_q`r{g-yWcFA2`lIsUH3^vU7Id)b*^w{@)$m(0uIg$!MTnvEg*{&2@FeVG|Mw} zz-sU+{OJLHicf=QrpIv_aRmy98XbTI!CZ(E3kM=5ulQrymzM z^}mVvfDUzDkyG=p`xt7sMLdF!MFOx2M5Rk@QCsP}10@p6R;Aju^l^CFqv?Wi@KrMC zKT{QIj?Irwqr0qBo>!?r1VB_K6%G3W4qj~#iY}yKk}~Hd{=NZ5!LG#rixA`dkj5#( z%@RhjJPq;zZVt>EX1FfdGJB@^6YOW#W!R&@~akV7y~3SWgTUtqU2*s^vBtmSPYiy`hasV-p%Mn6z~H{Df5M zE$%TaU;Uylv22^xRmF|cgvy)VSfPa2uRG(3lANJCz_da=6-WlRC{B#1#LwhrY&@rn@#GN8+`W^BB!&v$lw=GB?Qb#%!#Y~1b|;>VwuYu6 zJaKz%{%B*o4z~hv`(bL?>Xx4{jcozfHxHobse63TSRI!5LKZp~yome;ubJJ+qnKQk zRG7{o*goeIhAq@5d_GTsE(87CzTft49b$aLK*DAmp|f!wOt{8{JVfM#MF3;F<<|vA z8XwFOxKZ5j^-T^k>8Uf8pgMk7HuDn9k%j^lo9v=tT#wz+#X~GNc>SGUo8y)#IO|it zBN~dN9Xy8yWr`q*lCI0mowuThQ4xV~w_4m5MDTZ)c82Ub@VMSOoZnC_npsXh9y+Kc z!U29D-P3}vjg2OH$-zFL5mRY%-FaYrTx@(#HZoZu1?KFq>sOZTF0~wmOib@Y3ys)^se0_6q&pw z2>LijS?U=!nO>$6VzPw||BSIbN;FxmY&=9r<95b+LpsvRX3=b}@@S7%RRnUm4JB&H z(~0Gd<^u(Vxj2zx9mM-M(J#;umcAN1wyZI2?)UMz8nU5qAa%L%YWBX^tUp?tDGBRZ zvzb4^Y3OKa6TI;cdhbjOXj!C@8C`$6i>KRv{aJ1CE(&zF%VGrJUbHvdYV91C9eN{Z$MI`Ymd{`f7%~Z!4$09@;gcmSIhC)?z@53`aU`AD3>U zky%@~&N%w6lbj)S+bc0^u!6Y%8dR-ko@KG3;p{VVB;~fB&(9LLUNl)Rz{Wxz7Zy`7 z<;h;>NT;Ka+3A>77+-n@mGRro8N_OqFCgpKmFTyEv$%a`2n@fLMx@v-#lc_jx|98} zhkfEc%h)>vHqrLT$ROxH7RqI9oJ$(#uqr?#W!dFo1ytw4(XEg_CLNs@qxF*DbPL7$+a=ZKi+(Ol4Vq#t2I$Hif2jWx7N`mX1T^f?b~A%$2omKJ7MmZk zJNQGWWow|A?k-fJW1HdroKH08N`-IPmBo&<9j)*dLE(EdheN+CSeh+d?Ro?BZ)DBBn`(rt=m(aflnFoGxk&T4w`^v9wwo3x^r)62$)jWics(v zWoxd(jAnxvia2}hZPcODfhOK|OJ=_o z$mPLpfB;|Rgr@ZK*3}N#bcjN19UQYDD1_>mBdfDbzf-$QbOV2t#&bUH0pzTxja4H6 zVQyHp)?D5j*5~CTg#Stl-U_h+07CD?&p9aqe1CAUo6DZ|YJplh<F9&!^E#4MPSg1^yDd2dZ2HaX($MaREei3$A3>dK;@6^hjBo#- zFUr?LGuREt6&zbWx6_@?%b%_>l=lG9h^9}WGGV<&&q4L7gACn8w5(M5GRELAHqs{* zwt^S^Vx~0+v)SPx)2`0~yZ~6m>sS0@%blycinIUtsSGdkH2}eq+;Hc?+-GR}4YB@sU*z`QSH&B(o&jucx zymJa=rheQ+8fZ?9NWhYJxrAz5co&G-R^)fJJwy>xYOZ7&WEmV>Cj(2noVR3o-mIaM({$}_1{wU8Nen!tb^FyJepec~m1 zHCx2A%TZMzB~PZ)?KkG-gqIW*k7pI-51Yb`S{k-$>h^+kfaw5EZz?S0GLc8ESqrN5 zYiI4(`X{jIjM|#RIq<&fGcn#A=XFj_pUewOjx~Fg6I%adjn_#KzCx2HLy8!|@BD}( za_NOfvSh=17L%Qu4MMl`6VsWcU^LV~kb1QStg?7xBUV_aor9Zxnizc!Fi2c&Oa5fQ z8O?q+C-E6d@s%7^ymjrsj+QQiod;v=8JIMDdue^zZ0p~>g~#vp|5iR2b{4=d@gu0p zG@-C{9Hha;*CZn-Ke2J6+Jzj%%%P-iW@S?ozN$*cSy@4X99Rx{UzFD(o6e1X+%DPp zo0VMZqspn?L-m}{I;Q$S`S6epR{aJC-+17WeZCUgn?y?i(NY;uc2irHLTt}e_+vZr z-dJnzt@-!~S%`_VoRIzUnAcm4IRc03qjuVSmKsBK{9}O`*2%#FI_Hb9Pa;!l2c-2= zSTbLz4RIdtHIy-ITDEf-3Y{7uO|$lBn~4!46TnEl73gD2-(A>wp2dDxbCxxSBKqU6 zq#|LfbRrIx8}qove6_wK;<%4mHVO?T*lK91&%N6i0$OI7j1TF!SRM3*MV@GdT##pb z)`=(eb(q;3O*kX$O9JSyLec@A?}df9+DSotnEL^Bk%Ix!CmfI4wYVU6iJ$T#6p!rW z7hftC8_)-6-T^=}A#g?kSc*6w_tcJ>28BM^O*6wVsjGE499g$9n+9=cPknS~Dq3jm z>NoF5`C$nBE3SKD$z`4JF%soe$jDtvwb!hOS|_?{ruxivNXsZ=2aU&rf3i78ndHhS z(h7ypX>zpDKd7kt!3_5eKr7YR=O7Mx6m!LprQcxcLFjsZg0Z~&dH&&bVl1ApWkuH8 zR^;xfyL~4SslK?BN|%!&(7Zedf;l9 z5TWsoUKJ04)oaQD0qa%n!M{7*I%+_1z$TvQ{1oRZW+*}Ox)ocQ8i;x}pdA(ZWnyfb zmW(+o5?TJMuVq-6Nw|?QPuj94d-(Rh?g0M5L-PwZolu@_N8_-=Fgsp3Ajf-tlpTOi zJQ#NKgR$#e{qUB;(wQD|dZNACSZPu2kl$5x6E#5m8F`tN&H+?!Y5+;xK~rV16fg#V zhTlRkdrnfDo>l^{b2@0#bV%A|Ke_ds$lo!03vDOVc2>S};dGsNu@i;fE2WYh;ysbmp7hL!$UrHwp;?nh_i(vty1ejYFeC(q$DxIisLJ?%ba|rI;$5<~BUoBez)Qz@39qj83 z$1nCLz@mcGm>3#1N|fPd4Mub7LMg`b@>w5*zVus^74F-{_ysQTa>&VEl?{4C+Dw?^ zeco)TOr&Y654F`)-IC0Fj}Ef0_LU-_#+T{QIM42PsM$(;L%X!MpAlTnj)+)JXoe;^QE=PX%I42Io^G|(Pzqe_N{~ygOMmx$hpSGmv^a-~!)LBxW*^nxrM;=xS}pSE$A^IPi}ByQEL8FV2}R({wDeBfH zxcQ(H8n^FI4#elwyX)`L1W#pskHlyBT85L{_rV;CE#nY!_QP*&ZIl$JK=Vrrcm+0s z?jLL{1otZW1rxNY4oUGLI;?YtQ~{JGF2CUha*Qk|2=@$$mkHXYHmY^TZG$lO3iwg5 zgEXYGyBSRR<|vm-W-?@SCier>Nno*exqtOf*%iOGPg{|lcV!~E%m}1B7_efOJx8xj z^*z#^ZhBB&MPPXPeJGesOxt`(*+p3lqO>7!$S@_y_-lXnppJ{^H~z6t0w4^E60F2pB%p&EGK)cowV!}W&Y zrahStx%D1i=-%A&+=1AljLk(GI@cF+BMT}?34?V{`J>$qs;MfO<1C#! zYx8BEBb}=}UW^^aJ-EbYB&WPg`oEp1a3z_Ea9BWU4V1EkJv`GqxyIHuK0IblNs44} zvz+dQM$vsnnC@t=H>~qTm4ki7cZ@N7hUcP3aE`UcecsEKRy0Xv=COZaS7pF;MlVl> z>WN#MiBPu4S%26I|B#?2GhhozB#xL!hX7s|3a(Up{XJk_KdO)a2Sg14;NX{KaP)id zZ3`2Q^9A{3Yri(ddyLwll=U^(AE+8&2&+AG zTjEh^oh;`tLB~+57eRE1a;~eBv=9dXamKn48}ky`sR?<4CYmKv#i64BsW_n3xym4C zsRm;2R=bZwLjxxh=FKz5Bs&FBG$ZeegFKkj2ew>HMXo#_}#bE$C{f2#@A;f069n+@ixj!8N}0dYx2*xdw49_AIREM+`|Y) z!+Qrau_09T`&xQMC$L)78In1_6V-YVQQu3wz?Rg2kt}>wxjk#6?DWLA23BJ0#)M^$ zS~OG!Y!hlmG?nD!piczToQz$YiH6qt4WX@`vX;JNfEoEG`HOHTpJy>24h&;Iwi*_I z=&`D)@=s_ZS&ZFc=UqeSs*e~{J$l_$M(2=PIh=87Je-k?1X#ioOe;o63NS=ZXq(Ii z*WCJIXrk>Bz)VM8TfZxN-=H_keT!_ABs~Jm{?g7A3P=&Q-Tg&JiE-vv3L9PXBqQ3b zd{Suw@F=dXI=T)slp0y`uh(=m#LcN9f89)ImRrB~nTw!oX-d?+6MgXA(&Et1ivi>< z%xWeRKCZc-rR!uuB;_>?b6L)w2x;&=xfzsfq`1)}-IMX7p5CKqXR~O|8~2D_XCszV1}uU|tS}C>jf({~ zfTW3rxo?n`!RGsp@spTtke(j+CHJGEKNj){w^!9y#Zm7e$CEkYiLYi3dJq_L=v{j< z5UY(C3Bl)d7w^6+tX#j%knJV#tg`M?CkH|;9F}+MC8P|qZ>wJG^WV;fgO-z-ay4p& zPDB@Qsqp=eY^_9J`gzSaLwIHFF}DxK?1$sreDNd8pxUjJmrGhPs{v+Bhs`&_mM z_H)f~F|*_ZSP6(cE%t!XQ9)=-MuKaH!<~ycsExOGK@!wrmXVS3{hbactcG$vS4^e@Tm0f-l;F@F|EJnC7T_4-t-_TzNQ z6vmSt-Bg|T%g5{Fw7+qW{4@YUYARW?9^9(BrOnLw5$6=+Uvefn?iO!o3UL2{2-(pI z&Ov+=LQ8`mQ^T@xKCQ;i^ak`LIu~C7DpC7zv%|j4x*qdHY;C$_wwLsm}C~5rTH(rBqFfpx#E( z`o+-xw7)Ifl8Z_51+ifPoE=@vTP+jxI~6&Es)!t@L=-y`^~%$tK^R-tV~}ttx}Rvf zpT1N{vixHZyMl4#hfuA$Agt1PAYbIPuDkT~vuh|j-sT5_diV%N^|%8&gEcPu#_^(? zX9OV?1OA;lEqxO>t6}qGDnuVKWB}Rx^~o;+ct$ldi$z|0hheybN|>ZTGVZ8g3GpT+qP}nwr$(Ct-Z9DZQHhO)PC$A>vuZ|!M)9DjOAoD7lXZvU#G*^AR2#J%g7obGp)DLQLDY?dbM zFh6!xyZ3nGvq2t!WjsI*y>ci;sWom4+8Czgt42cXD2GMoc)UrXo6#sCDW&MOdp%8o zF0m8SSsj^0rbwQ5UJ{s29}lC)cD)dq(SNW96a_J#?2h*yvgv3|Csj-C$;)SbeRKfDm_@R zDPE3$q90i~OCx0FWZ2NE&*LXmZCfF46Jk-^Rvls>MSeD7V?MNhqdAVv-LCIEyU#Y261U zlTSJK7dBIt1bC)j8Iq3M;sxe@Eh&oz61NS;g&hpzZxb|ui^W@CcS=E<;@Zh06ht_L z7bu>{`TJ%6Ws5TCv!x7$KbusF{3@>z4Smwk_;p6#e@%w~0Dfq;OaXk&0+v_9yyroy zbUt@}MaKH^)Qx8R?sCcl^4kwbAYcgi`F8pz9|0kMEQOK#>-;f?-^QOd+% zGEg6&=At+JS5_!v^sQ)qCnn5!h+UEqSi=`LF8{X*DiVqXF&|l)u729w+_Ly^Fr@q0 z>>I$j3iTvkW~K#OR}|lxXY8Ju3kIV&S|`^!l?0fdVapomdt*-JXC>$ z=4q*~v)ZFTd*D_xxwDHs!{1Ipo10Cq44&d_Lj}gcF5HMnHH+}ni2g&1Ed$40s0$<8 zTaPK2AulR_7p*~);i7tHxXkACTx7$7mBxhg%uI3?bl6H(%+uE$BcFdRcS|IiCac2L zIqRK~RYtAhk^X?qx^7~N8P#I$hbR`ie#{1>8}}*}C@3$ZXeiE}RC@iMnCw8^zCRhq zghB%@_5#axgh32WytlsCD|hT?R%{NGpbtYzCJcTAId9gp#$ePdB;vBSBU2`&fnjrO z@#|CtvyHTd75ijvZYV6@oxP7if++nI?9bt@Q}V8#^f{Yktp8H!J(&F;>#f68P0PWK z1`FqF67Jw)2;WiHve9uW%Ux#{LAOIQHWzQ83m>HL6SHb$9{Zn~kWo05KlaR0mFCk# zFqe&G`lj&AKmzKYh1|4yE8f;8f`>hf9^}qK&&GEUyw#_<>9gHV}GZxT|;kypGoI-f4y zW?Uwk73Am-1xjYDavmm%oFBz9eFF+50Ay38+uU;{KH$_rd$A)30ozHtR5=iA+3VwEtO?d{=jw(^wrR=7oPPm6#_Oo3$iy?Vl9x=b*m%}xL^BM$;Y!t~1= z2w-#{;fGU2l!T^&zJ3VNstT}9TV|cn6nm+aF(tmL%^Y%rT^z-7{62TNUDd5*IC`c# z{a4~9ICpIj*RdUwqVQ0ny}R*t1&&f7G(~|JVR@Oa&&I^68&y>7Zq0>dKVncux%Q}F zRNFMWnRDF)U$}@;!h$uEmZ?AND5q&Mt9w4EC7N4zj@*f?B)J@aeX&8(@o~eaz#3{F z1@wvTxV_N0TTS?R#2xI6ea*kxRqmC4`ELj4V45aN;_5K)ix<|%Q@WPIu}Hr%zNpv5 zoGBgsNPJbl1Up@XM8E!kd!#!Hv{L*u3~)A`!wvP?{^IlfN}5Tu z=(NU~# z@r)o9vm|F`e5v&ZKBkO3s=SuDP{G7oI#nK?Jb$q1dNVgm2(SAuf$6keZY1kt1@y9& zx2i{v<^pVCR$WX|u89l_VeDvQKOGn$KQGC^RE1@M#iQ8}sMcFo48mD^TY`ncQ2jx= z`0*i2Q{-NP+2oC*z5yH50iczxf_SCoz5HO$w}E5uM?DNp$^utMnQ+((2CWysEGaSbGYa zBY4G$2Udhb&YXzBYRFGJA5?H2fkaBsMPe?y8KwDxkK#6UM9vSp!xWu)Yfa+hBE)YS zc1r0JU9dqOfn_v7j{NUHic(A53O=AgIe_7A;(N+^ERKwe)0ns4#5`m;cCHUU=W6Z; z9r?c9LX{FG*r%eYlRpR1by82O^EfIzWZV{y{J#8Kt4hkXt7R_7RZ$d2N`-z0z>#wb zN{V*}da_Ruo@*D5S*)1}OOs6-%T>KP*W+e5zo;yh&B-=nhMG2AfSkRAmCYw+9nHOM zArx`Lp{`5pP|07{tLG}>Qv&k< zgLHH#rEn+FTUjQ~PdW)o5|!2%fWS{a(989*?C!?~^FwbWOBe0x)z>F%aRJz+tX2`M z`#6?36{eety1N9PrTg&Qtgp>qv=3m;iZYD+umE;Mv;y#2THt^Y4YICJYrHkdbjg?A8IVX^}5SjpercwyFC1 zc~i~E^Yef0u{hAp<8kbme)Z%%mtF;Jn{bn8G5HinlO7XuI=1}T;rn_hzS``!-e4!k z8htz3zNZSB{6w-#{{*cH3y!Wo>4DxUdJD;p>gFn{VgdA>G}Fg8ABbvj+o;TO3h8*5 zA43MlonRk=byz!2L1sC~0lH93@3V4FNinDW1%FVFK+|71?{{K~xQijvMif?cIg%FecgZA*tOmPK0Z11)y zU2>wWvm1wdM>2B4P&D}>aM!EI{5`LY{qael1)y`BJrj%&4>iGWV6(*nRDs-1b zmB**^ zI9%dzhe&E9b_i{$tz&=|kAO7%T9hXKtkEZN$#lVp&DAql;eKOfi~oM(8^Df`>ldN6 zMOIY=RAl7VhRqK#!(&ri&!Ja#szIJ}>5ta&*Tp-ZplJ=+ULCKt4-e!8nLB`o)$F-~ z-$adN>cL}C+n7bUa)N`Ipb`Nmuw~g%b&w#`NK-ug`nY*PGBqg8xujDIYsS81+V?9Rr7x^K6x!G~!mn_Dyr4&~f{Sb-!IullG2ESMC?fX?iFe7UKyuD6cMvEBi5RW;o2;er>-=T+$%tzV^MT z;NxN}M0|a|mfv_}B-DDU7(n3uA5%KYoYg%K$ZtY=Zc$x0dy4yTybC9+{^L*5m)|y&4a$UQ9 z2j_mjCy@62F`y&Iurxdg8le~n?(iL_*#pgavB?9UnZE36(mkv#BXNa|&};=F7tu-% zo6_~8x;yms+MGr;>VWuaup5oX=@RjLe@_`(E3M9O>hH_aYH}iF>No}J_jNv3u9Noxhp0{TRSfq1l|I(Da|}dmg;odz63CeJBkzo@_nycGa938{@~oFUVp- zC9rtI^Znji@1sL$GMpyreY-*P5%8srO@10rv@#q+vTJASl({PwJ=`t7>pSk&T%vxt z8-|8?I3QJ70k`lmEUBMsRK=;Hk8R16#9*ke2bgczxPj6}1bxI^B;WhadVPs-yo$B+ zRuAzSx%7QbDnkZy`rZvO6^CWB8tIaPQ`^RSI6Q3Aju7aK3?g9#6B;|C|efe4fq zf-K#$*7EUmE0Yd6jkgkM;-j){LedCR$bAV8DlU0j?&JQw?#yzEnne{mHY+KG;Y6?; z73N~+7;_+!D!fV<6u;O}D@rTeaw=tb$!rXJk@6gk7txh>l4#>Qc~V#2|3|sh&`nLV zZhA$c?<7JFm%BXli_^?uy$=i;IEK;`SFSFHFsKi0wy8)T9$EYietbD?Rv++trfiAl zftP%mQxGjy%~+~bX~F}a!r=@_|7JF%jeS{xi~?@kaJKh$vTBaMy^_4RZ0rg9l-WSt z+B5pQYHh>_kT9soYXtZB<3Ib(-L}pVb%Cy4p4%~jx!JyCeur?zVq9X!^u&$NO!K^Q z9W5&gR2D3yelPA*$K-ssy+|kSBd+p^OG$zy!0K_On$dNMip-AAh^KqQT|K}L@Jf8_ z%$;kkG+n+sD8}N*I6p~v{YfoChGXY?_jRi0e%2PSq42(qR#~x=fp_ZG2=NoO^MD~o zd-8BjtGuH>7pLZme}AIe$v5w!sviQYA=Us-qT+;L`jUw$M^H)lQ|k1(30NiCuL&T# z9IyWERn0g%bB&bB%_&Y;^VEDUgdXpkGLZvyi%o5n^FNcnOXc0i;;{sHv;{ zM4AJsrV<%6us4XaZfSr@lGi`ia-FWYd4dK>K38`nnie#|vB0S?*-_LvAn;0oWj0g3 z)i6^0_j>(XMidys{dww<`81jrCrZk(38wqyT81;HH*JYV~mSfgWi`I{8ggn{BcGBzoQ?N;O!EAqpr z(ZsXd;Cjj8wo)1!q1Rl6dX^6}*NTk`3iPi`Splx+7rkgWo>LCY|D;t-pYclbU3{Mc zQ`qQ_+ur+(R*w4}fogiSz0Z(s%^cxe@OP`j1CQrB#jg!kV`*9|eP0Ythoj#@P-!zo z?L|BnUz_ytyUnnk%QoGGEBy&ES=nXF*f~V6>%6L9YY6v-^0c9 zy1@6YXp(3O$-3fhJ{zk=V{5VyzbMP=3TReX@h#m@JYk^yAsQv@Mz_c-pw0XcdnA&B z+t@Ztn=4X*k+XR92^QtW7%Du~(yqft@CpWX%!I8y=~e>x8OAGFT&9x))p%9)pXIYc zCs0E9>NMfiV|S)ZHB+1;X}s5&?TY^%YC35JJCt`L?`RWp*!PiET10z3P_q6};_1pl zFy)d)%nWSZkZBGLo3?VMTjWsN!mT^q@jv}q?{_J_${ABV4*B#@9F!hj(Z>oa@ZHhn zb&C1B&H1?#t_KBRne}{zPxi89Vf^k*=wPsvBN2|sgL!?N6Fb+msNH6ALr-*A3hMFr zz8kL{k-K+hyM2p3*hH2-FYsPZtCc5f$(re=ADce6a(4OP+pBl4llc*WyjvsfH~eEW7o@P-N|{@&2mc$vMs$^j*QkZ40;d^PQ~B zIMOEP`>HJ=9iG0+j?|9E(^;h_zTnJ_ycO}?8*~QS6HN3>Y-#Lvs3i;?d$~xZaJi;!#l; zK90(1hhZ`1+zCp2qQ#GlCL$9p@--R0rEc<(u6f_f3T|VX?%Np4z$tD!FKzaDsNV}P901JicptVXec$VsGND4J{ z!5}Dy?P$45@lIjB2OjJAB?)|3WW$5*LTRY+V(Xc=E$7tO7(W1hL>3b&fyEo1?)KPr z8SP7x;WSn6+6$TwfiJAB^VfK$mEjnYT{>T;%v`YS;BNR^-*mCz67|kpF*3@-0jbIg zAcYrlx;3@5=fE*mY#?6o`UcbmIJgLG)S~ZZFQWT4p_EGzr26PP7pH5{msB%vIkGsV zfg^H>0#Tv6&b;zu@abE4TUEdu!{SyGwI)lftREw1!8oIN{s21kGf>&&a1C8>pM-pz zkoWini>$mDX0FptHnR#tdX48+}aW zmbe>$Ov!`5P}%gPU9s+xnUp(0dou~N#4J)}7y&?JT7APtt#z?Bpp4TZ5wXowy5&+t z#MsXV{?75jg>C;=B8A((+Ng&2Nc3BZb107b5^PWxfL6K;;*Fa3?2|p)8jeA;ydRpB z1+I=V=BlG>-ubNJ=Ss8D1~brz`BlbW$f~ktvdw-J>4N8(f{B>2{1v0MEE&{5pgg;2u_%WMdPU zOID4Wq9~4(3jLyw67&tF8Sa6I&IuqULS*IsQF~5btq{tWT7WIr0?cr!np+C@S+#wo z!Sw)1jO~~YQlhg{3UGt-ohw9|HN9Q&7CiKo+JArfZ~11Cz^h6(!iD;V97)KH(!gQBWcaZ*#@r!J( ze8*v|xU+V%7e*8q)~#38n=!Ho0mytg3<5X5-o^;b2>~d`Ob_-p7xUsMf9(Rt7jP`@ z02QJaPEJyjP(JvW-pSF-S;BA}+X9T7s9e3z_gPT5@vOsf{~5gDm9U#NJi!8wNfTzg z1<+S1XEcIKaX%D4*2wmTVss+g6f`w2)h&B)nI!Fo=T(=h;?V>}jF3`H9};QgcYY*K zjp7+1e~>Dvzx#h|gVU;!$1ZFG{v(C}J%p|JD9^tR0A%Y4;K(@@ggx1tSGj6AB&(Ei zaD)5>E$MWoD^)(&ZHe7uqS{M`C_O(eYOvk3&>eozHIaUm&1q38hczXHu{q(`mqr!8dm*@WnL&yAcdxD53NCm%U z&z{piRuJ67!1K9>i8VTPo4-R*O&BUZAY+|^*lkT-vm!r^8n>C}H1^~%{T6McGBdsZ z($It2;e3hem0G>i`ukHQl7XixH=@pa5;XR&A_x*{Km;k6^nOOHEYEe2BRR)VfG@}{ zN3A8hCjAwEL`)Y5hbbahEb=*kTlnx8zK5Z#g}HJM&pN3fcE*Y66yk)AHdS+7Il9To?36sjExPZO}&LX~Lw3??$BX zXQwgBdl}XQ+Wmp7HgUl1OU-o6R@Q(LC!nAlSjUSsF$*s~=4y?D)1VkcprcgORhHRNcYc!?qv8dK z-vc=oF>)E*eYkHVy?eC83F?!A%S7~SwAC&$-LPus?9q7}`AF7@kC;fe+^g)S-Z&OY z5i}l-zHQD2bAS}G%MC#ZruW^$fm(!uNqJtI_qN}Qf9CwF4CAFZWXl|^TDN`vl zW6uUi4^Z-gUM5~naHCcVNy$T$A6;m|MGC_ptE;|r^(eqawnw<>Kh7$Urw1;mt(K2Y zB)_S!c;birrHqdAtiix>6r)NX*P1l`<&j&O9?w)kdy}Edj%)7LRkbHPix{E~s$z@W zus!v66EqGrx>Z_&SuQ<2QSA~I@E*d@cWdj&ZfqWDtlc0ytb4?8Bx!=(-V9JyyV^(( zcL-MVg#{^F#7+fAGzbfEr(@lF6G|ffRs3+^9CT^zioht^M{1su3V5-0s$okAt8RHR z6j}M{Up&t%!H<;A1=)g*ZG%@0pp7#6kVsF;ascC3BS9a*-i3)DNQPYjetVMR?2Oh( zVYsCJKdBt#{3urGD^S=ufc6`}N(viY_wd@Q*0)J{PD-fL?L#OI3yH~jl+ z@;`=X;T9J5XskIbWl5`24UgbfwZ`}Ds9};%-j$G3Wmef(oOSHtbj_(tjHAU(Ik3@N zW4(2k)zC%%gfIMBHIG4>_@VnGZa&$ahXP@MK&u)X{D)Q13hO%!e!^ zzVSJf?&J@W6MpEi4Zbx1ZSF2Eezm7olvcRoM9ScX*$DR9g6Lz2`IfECd`qz|%OPY) zvqZ!uSLp^oJWc%TwJLbAWmPi}R$V}1dZclf529yWJ>7aYiSDpgnDlP6`Sl}22qgg& zwvZ;_Q5Hlyeza$2{1ibLk)xhA*7Lsc(=6ltgPaPw+`S%glgYH3cgFuOZ5se7ypZFK ziIoEfj*(&u@rLIYpbo(Pd0?w%eLs5{-IpMT6gdmVDb3S2&_R&C$|i?P$7C==P}OD4C(?Eqv( z9t4KUrVs6gRiDhH+%ej#aiA4unJU8w03y@sCpK!MyOlm=lK(z%mm(s@UNP`rfhR6( z_XSue4An1paJ^v-@2TjY6zACge+i>l^JzOYVGsGaC)&JE8y^kw2rT0Xauh6mP>ND( z+!{79Ov{&zgxFK|i%#+QkVMy`Q9@Em(d+QKnE_p4$0oD>ViuVqdD*?|!MwoL37T%E z$OQ0=D#q_3m;vr!Wl1(Rfw^SWxG9R_NU6|oso!o_1N9c*31b*}2>AN6vQPL140#+q z*-FDi(T^lCr8hlmB79fZq`W_`ubMx522l-6yFGqVzb9O$s!qc!L3Y6QG@gRJqM{l! z>fBLP58diA__o{aLe>1tK)nQ|CXKpWomAi4(%Qu{GHXXTUI`F`tT@RiPXd*Jy<&%k zUC46@o3;q!!?)b*1KNPItrCZ1l#QR&2ywssY1U9zjds{?Nm%~|ysd{44umX_i5?LR zWLDA-lMXhel^{>6j4Sz(O#46ln;ypn(Tj444DNtSzsJeVZg@6Nw%Zqa@ye&k@jnZ% zc<-FG*yU01OO%&?c=7{6prZc!u3|*cTmnA+<8OOJn?GA5|*L zK*Zt7&jTPlBHTCWoY%fbJjYQ(9m`(k%~7g->48J~nUEKn#abe?-fWInV46Z-%b0Am zztm*qf)pqB?-kj?~qB>zkJ^Y zIkytjZHZsFv6tLC&FoZ1=$Qq8q^|Op z7j$EPE9C|I$O0b4)FK#6P zG60qvr}d`&(0gA&a0>&^*ES;7=+s&MDn&JBsCb8rO$uVS33qWb29o{UcLWfa~>1FB*>LoCA|N#aF56J6dV6gYU;6p#qvKDKP-> z_e?GO>P{*w#Hb;+UK84rqJb*AeF3PibsVjbrKnD!zwG>@D3bc-j#n$H!EHblWa2$j zXuIvNPam(w(Y3vg)?a-Ev6GOmIe7Ki!}_5{p^FYI(jb$=-hX(i=?2V{qgPTFA;$dY zHmB0dLFOZNMB-B{fBd?)x&D{@EX=+m8#4=-fWV|9me%p^q&v+p8zqpZbav^a`z?W# zVt?q?2J%QxMv#E)#;?>+S5K*ZI;hpk3)xl$%oiMPHe1PiT4}Uvw*lr!{pSO#=F~Q2 zX^9cS7UcP|f?BNSu;xxA{Ae3aI;(LFR=14 zNnnHTlgz(S{{zH>ndx4nt4$2k)umO!EoVgqvp#NZQ>WfZj0)&2d{4vnJVq&Ii~xLV zPp@*>Nfvb=gl$p;(9;Fkd`=)qZE-y=GA|OGBfIqWOmq4^S7_ahnEpvhA#hw5$4at` z5%|oS%BqXSapaSLQ(vb-{?vr4O5dw9sU-uXri@9HcSuRTLf2LT-t z*r(&PsR8I5N6X_KyL0-kXWp%Z9>S3WRB! zjmIXsR4*v;fqV5KGzmnTHTQ;q_?F~!6%PUgo; z2v0$_L($5Oy)TvnPe|y?9m*-AQ1$b;*;6<}(qEZ1X=C5!np;YBA3x{8cnwmJovNvN z91Y)B0?&4?A5sH)L?tEWmEAQJph-l3j|+`t;?0xi0H#v914b_I%bw}`tJ!wy>b(Ce zP2vQSlxrfxLKxedbu$0+xXUByu)$u6qYCF7;#Y=-4ID#hiYwPsob@NfsdvTy^s2Il z5nE+O5Vyv2&r7~6C{j zBW^sIb^XS8zU9Q*S94-ygr5MvB8v%?z~TkZ_w!_Pgbt<2aFVL~Ak=I!kfmFp=Wda9 zq+r8gy(1g?%}B0>$LbD(BktYM&-XrPu^AWc3Z0=u`zp)0$0`C80`^ynh>aI+tKM@= zpY%I`fiNx8D-pfi9{9Kkrn@S-Z4jrbRG~oVd?~YRHQ>>yI^zYhwE0~7lE*yACw>IX z@mmB_K`i~{;dJdl*8Vizl>k$tpkm|O&)TjZj|k_wkYpL?Qy~6Y|V>U zCnixHG>ec0tfpe)Ylq9G+frjK31>kxbSK|5v~0qoz&CN<|3M|sJi$_FM3#d>t@<}u zwKJp3AAs(cBF20Ywx~#)QZ5V)Ul(>IS~pTnBytSlMZCE&d@Fdp8`6I|;HeORjL4{Yjh+l1HQHF1J1mp_92qc+(@{EY0!Qa? zEFJ(AqUX-eQsYp*_?SM)(ac%Ga2%U`jGU-k-A{K}|9qMWqPNF}d0nrwdlM8fB1*A; zS^v-v{7_yR#Un(T(f=E(gDd;LTCIR|+G0^gs35&Vl#Q84-kT9YVH$ypz2pyAVS)YX zKH}SM8M^Q4v#vGrW*3hqCEQMd@?Jn#n;I`pGFVAt6Q@N5tjR92H^n+>eiwqZGcYtt z(LfbZ>D%G$-b8;z^nFQ}An$KW*LmjDXY0iq6Sgj=w@^H+rBQgew3wpZSe2C_HYN0y zqK#k!Tc6xY0%Qm**N*E$d#Qi1g5d7@9xr`NtkJ1E{9TG_!cg%68JiTut{d|HDDvZ| zvGQY9Py7f9Qm6kfR%i44J*W*XSE$~p#k;k4w?!fuc%pJG>a?ptV>1;&kWd36NWlbf z3L7myC58YxFVwPU7No*Lj2d#|IliMZTfuMrt>zEh&dhF8=3^}R-O7}+{8l~J*;%v_ zPH+wRV67ZkyiMZ{4JfY@Jlq;Xs^m?z_Dq&$V_cjdCj}+(N&^BHkWRS(?XiU9d{U{o z^d88|xWM{|Yb0&>l6=A%eAVa2($WrP7v|y_ozQ1^nL;9Ya`YV#TXs14*Tn2``Ib+T*~Rt@-j4?#BB3F!Xj?MUBO93eUWL zn>ONSw@5HQd2X7wSFHP}5yTM5uYHNt1~#+T%e^zmFg8-meMYj6rOhT>`iM$J%7t}X>^7RImcgmwliITGQBJeZe< z8L=}>%i7H*cl1QZg`h6auiMeuA-Ovjw#%BIcFv)qKt4P-RMZe@8(D^Hq+UkR5R!do4)|H4$#(r6;K zk1sv>b+3N0T>W8h`Q8g!bRE2=vdl0vB556xhcm%&Tr{3`@#e!@<$SY;}8Z*tjbJrJfA}HTKQ>lPjXocdG(BFoX zr%W_NRAD>=Qirg_c|dK~*oE>oQOK*fDrIlBJLJ?EFL$%EcP%*FdR(64{w%ukMiT9GYbWZ$hmxSmHFQ0*tkWtP z!WN64Z?VJEpg7F})@R?afny*|aq0460E7C#cC(7~{((iO|NYZ>gLSD>~_kVUQ5%a<8&RT8W zYVr@GFq7hC`b<}&tjL{0$^wbsMTQb6!5>UraF5yu{!&yA)mpGWiAHCB0|R#zU9~lo zF5DzN#+Hs%isC1SpNtPOjDX^Ow|>8%hYDgI1mLpI{7u~5zL05a`qS>VX15X<@Y6X% ze)z;sH_4C-MFPzSqBlRfZO-1k&T#!A_y{l;8`oum!)q*!&*-ZHFLC~oB`Y+c@YtIa zGwoZWD6@6QKKdfQE$jZn%S4Q1GxBmy61%EQ<;y|3<QZ?Kjs*)9lk#JWii-1b+Q_ zN|!g?%L!@xh6HR3QnoDH>2Xk87!rVsq>-&)?^piyJ8*vc~ye7b1*bY(LfbZ>AB(^ zTt}TC`aGvAkdODJ8$Su^@%7@32|LxZ+bbT_(kR?t^7?;j<0#)}b=4oCApP~o%S%wJ z?a9yhAF`>Ses$xLC^1qhm7c&ZE91WdwYYqi-mY-^s;C#yS^KRr5W^?1Um~V^WNH`j zJN?x}n%3Grw#25Cv+pa>YvIYl%k^EK>tKu98}<=sg&7fd*l}CK&M+3p5*j32SKHXd zCgaHYf@nNHqdooax(D@dY)_8vDkPF3cvbo^)LnU+lZ5#1<+;5HbWGwePsVdw)y**4 z5@keb*sfPN5TpnSB6*5XpJfz~)Z=$V@n9uLjz!QL;`s+WB+PLp=*2@6FGT-d>G<*L z-?VT0U25l-OB6`Ef|n@^7Gd&p1CB{j6b_eDFQ(eM$vuC}6I_CP0S!8YBg}bkMCbVE zcObcjGw@odk#@WKbnNZKSm z?B)A9Po)GG<@|i!wdX#U0@xhIU?(RjzM>F9ULR6$bb|@ca+@|)zvi^n6qP2p$+f|3 zLT_uhPLhRo5=Kq?aFAh(mieyDiz8I@@>jB+aAj@PkGG>G?0jIC96RHUVW2Ajd^Kt0 zPnZlkc#VZd#X@!tH2#kPG)y&`tWYredqRp3Z-GOsiJ}R{58_|PWMe{$1-N-Z&Qao! zL<^molTO=E19DBE^sPbCMEv0I2mJmF%^Z>xA)adK-}MVLBp2!gMn(}lIoI!@c6Y1k zO9j8N8faQyicUsE3LiUEuEokpE~Tb=%B4T^S>e@<2aRpJcxI0kU!=ze87!NZ6JwJC zEz4BE^HkIjX=_=A8>D_l(a;YSqhr5-R}`%yf6ad=rCigjJcvG-*m8YJ3dsC0WoP}x zZ6q6Zm=9mTZ5>vnX)htT0`-w^Ttb|%F+t|UuayFI73inq>IbqvcrjF(y)B*oNh>ZN zKxm7X z`9jPZWwCTGSz{2tccUUnk@dtyViYxmuey^AM~)t+ig<-q89p7G&PP6b`=L6^A6c-GY`*G@*~bwVkZB1rYYXD&|1 zyf3L{-eF{MN&`pa0tKQ%XPx`sqyC3a;Z0Qma|(-VP1NQrvDR6NoH^r+KeKnxVUU5! zCi^Soin}c2tAdoa+~ZGakyxcfM8f0blB4M$A6g-vtPRry?jCWeVuU92+Laq#F#LlV zoHiGK#qPflZZIrHoclqEueA8F@kC^zWj@9eF(hb%mdL)1U-`DbVn}PMCZ5q96nRO% zEbV*}Smt5QMMP+8H49iDLtPMoWBm**MD;^Eva2wrf-wGV8L3nloDORX+cMjQ?amU3 zo27qSpIgMKd+sbx+5n_&&>|mprM0FOj$E(J7^_o_vj9T^hG^65R7gN4)4&FazynE_ zF;dy_3ux*m5{4Cdj^Lhs{}HVVFk~nF(cA-bfgj9R24yVhD&3Bk_k_|V&+tf?w zcX$+h3*~h(kH0|(R8$NkMB6NMy^ zDr9)Cm**S~w~U`#Pj^2B-Pmu-_sy#x2>oeK=f%*(`a{J1Qc%!8Yy;AxR}~|`;>;Jo zU(*H8NW#iTP0#ta?$~;rj?2EHU=RF9jDXdDle>`Fudiu`q z<5p%>p>KwtEYvXw)J$j8cC7b1n@;g(`#5`Wih$nnL==BU1`VJv^{iMdN(8ca<`Vbz-yoTf9{~RCEUsgK zg@VkH6*I|ML`H5o(|M%`TBi5rwvWYq*o#@*Hv1-9?jA-~wnSnGV~LS{ zH!5oqvcy=X8T(jMBHP%v?Ae9M?$v7x(b%IgC~I~`G{`oJFp&&V#?mmBR|xZZzvZ0o z`_B3PzJKn|d(OS*{&>#4&+}Y@suMwa>!iDpI`%+CcTo^S<3R=D1z3qMukjo=?X25r z!#1Hu@4>e)yzAv5-o80pk1Q}lU7{{RcG+-O5?R24S!}oe@&48 z)L{t0uY845q~DAo>Y=Ath)gqqJgbp9)V`+W067g`CM;cvP!|d%#2`RRcQi}cG?;(K zNu2%p2z%^^D#t0>5nZ@Uo_tYY_J&J8f81PT{~yjih1hzEV5x}sg@m64er$##c8Lm0 zD6?fO<8o;;f6q zTwGb!RzTU6oPm3Z_TgO?7CrwD1Nq|<#r_KeO<}LpjlEo7FeaTATxxc>kyds;80M0x z*Lv-@GJ?*7CyMbtkiZXaA{qD5#T%{p&{#PI_tmMfQ?xkXruCHyY=mX}qm0me1NYgZ zxAj|2?Qx}_bdm;2^skzod2a$~vvHwV{n((9*}$3IePiEDdh=mLiEpuiN{Hs?xX9$H z8jlp_>-BQO{s`xv0Jw)6>vg<zWT(y)r9*T5EXB5|0?^u-KvO?6sKv_80VN>1vMHM7{S4`vNYi=k)cOy6&31HF;y zqW*`uG!DvssE$n2_Xl);hve(;uCmr(PU;H&d|+`At6X3=`wyy-NHhZYM@S@%?x^Gcsx zpTAN-GI2~4?)mK4chxJyDsp~u*pDV}MwV--Gp{ALtp5iA?`9=Ecmu#hn`l=vUu6Ky z`InF#qaYms)3kBQ5=kzP>=z~-Q$;^%$`@u+Whel3#;3Yd zrpdhMURm*?Ty=vF2=BBHf9MN0=@8x)zWXBt{ltrAdb#nQOXH^-9X5!^)ammlwdBJ| z5BwkWrq&a)Hc4%$Qq?q$U-J>{$^c7K5otu-?JN57&qx&h4O+b~^d$0#q-JXIQx0L= zx-0qZg}9MHyN#d!dkQ<)*L6=9t%Puql)bk3Wd`p^u!boGz4P_Z*8u?Z%7=4>I-(z| z4)vzuWQHA#HW;UP4%w8^=M}t4p5ij5D>L8Y{tuK479H*f}}-CVtaWO@Hpmq z>lmLZtFd+!H2nB!^way@Z>`aK`{Ppv^A|%WvX7&L_jcDkT`LNfY40h_v=1lPc0^Yp z=lD~gitOShP47oM)X?5x+sy%?XWPeLCvjh31!8KL8vEybvPG&K8rApIu+@9ufZ-g1 zItWJ4mhWhLBn-$~-wm3`zZ>`{OUqxA!;4Caz>k`#Ce{UwOz1m5oGZ@dxxBZm7NbLOu)MpS4akKHZ~< z`=05}YcM9X2Ao$4qkr#5MmMWbkoUFi3Lw-<2u@3MpMRbN~!35z|N ziEa8S^HMGZ5A&&@UjB5+S-!H5l`2mu{kkd$C?8_G`9&#x>`tqa^HD16EawsmS}lEJ5lLKA zqx-9^>;g=TVhM?Z84OLd6Gx*QM|93(Wf|W%rG9jJ)b4%9mA}~w1jGXd=ZliLaJpMu}KYUO7T%;K)=S1WvK z;u|1OjM~$p6eaBcY&irj+OFJ^BNTs2h1gBGCYz_*EUtIKhQP8Gw{M{W15JqohuI)g z>Z8bamw7qbT9QK&kS0VMbY%c2X2<`4%7+Xmsa^ckysGN{TN794{rO9ATAGJsl&8Yd zJ+se?7m%+v9{#c+gFUE@_E!x`b&~1D!qwDC0dxhl5q^;zAxz)*$v!!Py*{*ISy0W{ zcI9)JZqe%jv%`C_B{GG5`nvXTWZK$fmms~W`;xo$$0*ZWt;HM^yq+&G(8blibWJ4- z^^|;=23C6gd&_Bz(5h0Nv{wHd1U3oplDDSb%&nM|&Uh0-D4YXuHKx$$Fosk^w|HiR zHS>oUu(($O$uLGEx+g0JS$k3}(iV{3-or<>t^l*|I}q1~kBGJLCd{K-9*Y~F&xh}c zR`7*RRv8-_0Yil|0(`FPm?u2gQ^X2|sS5fnIGP8=g0esO-kLN+Z>%K{4;K`u^ysxw znUa;F%V#6RNwY$0f((_2!qD)LcOeVKs=50X(8AB8Yb$Ri;3cIxnfWbE&u3hy_LGw1 z&Y~K0l~x&S*dYNMBijm=K}yLI!lH%S9`u}tC_Y%V_0=nAI%RuX%y4So{f}cwb1c~L zoM8kLYm0G45{wovWx#c%^I||cC8Hac5`*7jWiTL!-BZEuh@;L|wp@?Dcr}Mf{@iEe zWs#d+vM0)XPzrYaGo}$Nr23jB_a$1S`+i%{Ok!|sHi%Sayyl literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/admin/behavioranomalies/userprofile_thumb_0_0.webp b/static/images/auditor/10.8/admin/behavioranomalies/userprofile_thumb_0_0.webp new file mode 100644 index 0000000000000000000000000000000000000000..f1e77844c5a144cf01edc3a9b2cadbc8c5ad1b47 GIT binary patch literal 58286 zcmZs=W0W9Uv#whDBAo`|P{V{g-2o95Hi5#(d*_ zVk$_8iWcny0H}%x%Bje)_nlk$soFD_zIjYe&1f_v->{% z6yWQ9(|bUBUpzy4+J1)L?EVV9-2UVX;M?Ha_A&AD^R@bRK3o6V{@#Au_UF6MJ@@_e zt^Q8DgZ#MvF#WzZpZ?VC#C!je_U-dM{Jeg_`o{Wp{r>)pYO@{_xJGz z@V8h!U*I?0SN3QA+wg0wcQ@L{@>}zh?5*zZcf*_1OZVuv>DS~J+b7x!{CaG__0e~! z+tdB_hVO!J!6V+w@N#vhufd<_LLY3`rkk?!-R-`?pM78FC%#ABMZUgY$M3D5kq2mZ zeEZ+q|9s(h=@;}t`)>EFum3mAH`7OG6mI4h(`U+yt)8yZm&g~F%ii&I{qFd)u=@u1;rQD83V-c;#CQHD*7x`HS@sRyb9cYb zy9e(l{73dD-=l9rwjSTecky@O*ZEh<*Y!*FpB!`}ciVhBe?fnme#1ZUeSe>MaeZ{Z zcYkc(;vIaO`+k1`eG`9$eht4jzixkSAN`5^_1^k@eYyO!|6Tkp8z{TH{n35Y?fZS@ zPZ(iJbo5)51(}cA)1Pz{$>FIHrFMP3ye~GtHOGrra0Ad7P`RFOG@#sG4z0=dkTDoM zNj4i#MuPCC8kAZJ&hO zUZ?iQ?+BnqM{^pB_qzQe;P%LYbH^gQD>Mw)V)CfHwWum{wWAMg!Y{&>d=Wb%jj=vn z&^~+7h@Fwfq#!TopuK36Rtvk3NY(To4D{e?9pYLKZf0fP)?%rsXr_Nq;yzvmGUr z&fE_Xct$RI)J+UW=JgTr1jhpp$%PHT@cJst>$wziIHOcf?POfi3PA5xLSH>74}m39 z3tle28g@5p;P&hCdc&cWcN?@zK>t6vCquSz8O$M(p1c0#(NPcz4XO8i5SKN}?(T1> zHa%j~4g)ToWQy4B#~nA@v146&GvQ)g)~V#*(5Io3$ZE^NP;m=ahcZI{8Z+F}B11l_ zg@IaE6YFpHTRyLa5eTrtk9SLcszmgMSM8}|S)2f#Lw-8I`cE%}RqOzemR3b3lFo^S zv5{pT184WL8f)#}(ieknfU1p>kWORSi(Y9HUeF86Y9SrqDbU|23^xzn228k-o-cKg zoM;7|&HA}R=((dnBE0^@%gj@_Nzk~{X|RMYn`@-T&Wm-}U^vcX6FO07or%`9u$N&u z3g?f#XwGig*2my9Am0pZ|Uv zI5Z-cph2fNV4lY>ukZ_m>ru>8#Cw#ds4k*OsfjeW9nhd@h1pLISq(@Z0~@(tx8^)% zSfN+IQrxwgfK_lQR}1enTiS;lZkbbA*8cKt`Dp7 z$JuC*>+5$}Xq$IDY??8vSjv~Q32}EPUqj~YnHPcWSSb)MX#ahBX8Wb*K+25RC8T8J zvuxQ>d?X4DSJiU2qE^&c!qmf8s(+^l^;@UrMN~<_*U!8l8MT7z0C{lxqskRX9}mP$ zZbAuMdq>D2NhOuUnxNCI4;DP;WL=n#%{3QW8Ft_N*T1AO*8h7f zoQ+PlC6B^1tZEW}-fAFSX2H<_f(eayHp56*?6ugJ=nz2?gz*CaOeppU(&MVb7a#4& zxKq|z&*whL)(1rfcgR~YdMESV!;P$Ce&kO~s%K>0e=d%{!n8F_fQV!6l@B7ZZ~V_9 z`mc>e?998#YPYv3{S!{2^1`ftpHJjFdF+ZtRL%a-z_D1a-koU?`+sYY#_Z|P&G4Uc zWPrZvN7?~H3gMeHXrQFiNLc|w`=3euzmi1Nu1rid$B_7q1grxQkUVWir!PqU3Ft;2 zn835mdvEiIl-$3zGhzirh!+e~&W0)&=b0$@v-lDSs4qm6h2S6U;>IW!`D8=+?^plTNm&W@6|9oR zP|nEYZe<-;UD|vesuCVT1|~erm_KT_=W(J%v_qeYL;XiZ$&k&eU?SDk{z(EQ2K!4# z`iO!bU=^L18kxu62WzKS%y3uf2Z_AtOEoF8E&!7De~uOgjVZ z}Dsp$k zzOZhIi-i^I9^YeRDpUCU1y;Vt)4br<@%_s4>kSsExC;jlyIrQMa+Pp}+L?rOSYUREy!FgWp7Dd+MW*PwTy@!mL!Jqc(RiozuJ(NNCYONs|t`Yc+#&;>PKW zIUzlsZC(y>!s-~qzw$=o({f48+%l=JRn{c;D1nF)QAJow-9z@6*(j&|x6}uZ^-IHbDN~?9qm$^UcJ3)}& z7GUR6Rw>n|B=%t2kzeFk9v#49Iw;jJ#B2oNx5) zy&E+-mImoONcpY=$!!+=(|N&yfo=Gr74dz4k|jmgf%aLS93&g}^V8iZYe!cPEpLZa zi`FW#m;Mg17h=!-EjLAOip&&&GA%L2D7vS+UvOXNZo=@eG1pto$XVoou?nHFpzOlh zjino4&U65qY_vXcOotPlx_w@3<9gn@7L<2_JER=U8he`$G~h*8_jX<~vw+!P$fV+> z^uf$EkXW`ETMCFNuajUvp7qRb7eC|3HtJ&wRW(0#1#(teHId|!{lb?rIv5ctcjODD z{8o;BYw^ndNH@dCI7q-X$jJBRkFc>i24WW}G-3YA3a2hc`LrfS9-(61k=QrkkNU^K zJWy;v@)MpTKQK~V+1>|RU&11!56cm_GT)v@6Ip4Zs?;}zsvFA6$a?ZSu_*IXWJN$| zZqQtzK0|v3Pr`2P+S)a@{Ig)o%$ANd340WBKO?Cv3Y!l$8)()z{&q%hjm{c{_0Pi0 zrg67kJoM*wFxTw}QT|ofr=V#|+GQ=wtd(@us;a6M2KePJK`n({@YhhTr?qGQ(V@Ls zH|Kul$X<+QDP1%*eI=3$luC96xtJKZft}C-U;&V1PSs@v=w-xAmek6 z1-`SjA=5g^A)ow$q%22*_f#R-{$hJg*}sW<*j)&L(H20!8F~rPAlDlHXiQt#aV)QM zbKAS{t+Bds0^;n5dr^O!0Q3!PYYa<=-?P}Ek(C0!N>RcHgkonnP+=j*TkY!aSMiBS zk6$8(t=Uw(TWu5m@#s0hTGoU0TFME58+cyxnd}9Jpu)nWaCSStA^A znQe#)nNU91{Hf;v1))Y9?2t8GL+yzCi%O#oi@|yJok6_;;48IhDeAm(3dFMdQs&fXf5EiRDM+WqVEH?vWF|8N2rYFK+@fJmI zx-cdmww;E+FQ^j9G>jny=o=@@#ea#;SxI9x7kiiV^=eT@c*)8Jo&SiNh?Irdi9bfCWH0ZWE> zIO9L;Wqd1n%Wp*|GuWS}^Tu8HDfn7B7O3ul1>)Fh$y2}A!boE*6BXP<@bRxVNJYj} z{96yGAF=y;YZBnKxLYUg$5`e|Y9AA+{F-0&gc;0ZJ+Y~bhWEc@9GkRE)wu}Y6E6Ww z(~d4NE02992GBh$!g%U*-IW6VG6NVANU_6z%*OlG^nV&;2=5dpHDn&@5n+(QJF$#0 z&>9-phsWi$9xNt=;Qs8B8R%S+=ld8O77AJ11D)F8-?pv%)!D%y-t;fxGz#I049uzq zhG6`&jb~}WFV*3NWA_{%DjS9Mul?BZV+Qr@c(_}2KlPQ1eWAUKQcHix0Bv;PcGoD9 zM(O1pCb1Rzxj-iL2(3@hvuh^^Vl7vi$8Kty&;|9sRy!l69xxa;D-J#qeyhjipBtn+|ZOWUuE}%*mp~+wO z+<>(Ci#(6{>VPd9(N=fiySgAh$kpu-HgyM{HfsJHx=|go$c3fKr|Jjcw2{K?YBmhP z?b(d>>W677m*i-1naF{6KU``Eo_^h@nJ1ux*Fb4UZ zul3zi{=t&hiE#7E<@%k!2}Cb!&y#aFtRV#ujCg|rJL;cCjgTO{LU6ayFhPm`K092u zVIxd_ZN_RIbzEs`#-VOt0oB8C18f85 zjq~m+9D~<>AODx`RV#$GGW$Q|Zta?uk1S-%twHV@{ag~h0ha}W`HA(%eTlUw2D1Q=WH&x-u7czt}RClXTWqRC#cT(mj1qKNI9!!yEC{mr!w{ zf~~H(5Yd!S)^0e}{^tEVH6TwX#7ewLHyxBIz3n%65G*XP>|FW&#|9aFHU9PE&$7Wm zPP(IP<)5>`_!;9=Ou=)&5o6k&UBCW1ZY0ZyovB!RdX0aiDLzr}-|EGt0~m;F&6nvd z;QYP3vhMI+UCS~*{?@C3reR2ZsV^Z78X}=Vc2^-v82j2Ds0Mq;I?0F_oyj_>jpz;X>}e%^RQ?Xu2?pVQ-l*Pab7j5=HW!#jG9e@7@}2#u}M2E2ME z*i)@tcpGhb>t2)RDSX{Pq)^f1n3L3gX`}iSx8fUd}3NfIBWf zgRBtLjQTFPQ3pVgNb8HvSLmsdvIB3=>FXE5>t=q0#EmV-|0k269ZS%0+-`Uk*J-!^ zV1FLknNC1Y-V%SuVFWW_pb+KlE$M2@pB|#Y)AW}x%AdT-OW&WNif;U4LX&Kzq80^B z{pWj5SI}Ai&TdK*bM3MKPIv!)aIA>bUu43Vd1{sLXkf%0s2E86Z^Zt`MhkuJ&3Vko z-Xl4LuE&xSj99S#7lhxCAO8;)`d>o{8e=_3cG!T7hC*XMq11ViES1T_P?OI#){*U2e%4$e0 zA@n6K9?OU)()(KGwyzCd9gE;qcgtW0E@@i=p7%^eJ2n8%C(tjD9% z%cPOqKQOSRbxmcgso2AUlbDXRv>MFwt5Z8V$&J4sU7uwpEgV%wR$mQgMzKkrK)KG3 zMypG>E45a65vq@Xs=mnt4RKh-;*FkwJ~ooUXBDXxpwI)VdaC}mgOpMKwg}Ks0!+I? z9+)sY2u9_GMDoXwg~L{$H-hadu-A$zj1yp6es4v^;F`m5>%Xe!RB~61*5qRc%P+sN zO2glX`gk771*x@U&wvE40PYT$;dGP{?K3BxAq~O-f>djf-0J;~y;Hv{FR1AJ*>PP= zRWK5p9G0ST^A1SeimuF5hNUHUar+<-SY_m@lwiTiOrP(`%EkGk0G$ZToJ`y<{ylwt4!qNJ*VeJBEp*horvs@f|Rx`umo;2d6ZEO(@BEjkt<= z#xB>sV0*txjOgHF{CBEO%#Jbt-V$Foa7?2;gJRlMF==ju-gNH>r& z7T*r6CWRo`2L$8tsjU76!+0CMBZ&?T0IxCpSJDY6%gQ zOMN+|;6Zu96Ow)N-f@-sA&B5PPcN3L4X%+mKZz4V0H=0s_w#-Zqvh4_JpoNE_*R5t zF%x!x!7CCpn#R@+1{NxD7%XS+o4qk0T|7q#YAJ3ly}ZvcVM1j|5X_xoZl4qz84bAD z61ms#H*#>_7&`$}t(yVZl(Sc#8Byg(?j!8NLBYD20KUuF+H$Kub_V`DEjh>B0hOk) zdm%CP5AFXx9t=cPo_wQXD@oQY4Q}w>8$>rpmhr)ZvFBJUaE+er@ft(o&f#g1L2HC) zhAUyTxwG4klY$|XM6EKfH2?qr7(PTkv8Y~A_0k$-#U;+Ogv@!{ewxgx>;_yai=dtS zKF$u!QBcD5gSr&Qh3<0GkIs-Y*v^jbqP+s7GM)X7`?8MOH?Oth9 zE&N#(hs2-02=&_4o}@$>baRK}H)*A@f-;+JBtdpcJ370`j2THVheWS80M&^kN zgab|~lV2Pv>4aFr&$(U_3B+>l&o4WTE&{1NU*Gm0@6?l4J%#dtvO00WUhktuNT+MwCUwv z27aO2&oOMQlxbL#97PLM5Af4mObUiGg*A(B4%1he%lRkElom9ptC+UY?N(GPc@3yD z#Lx?~?7AY!wMf^I#*id*3jvYzEK}FP&R`T_4xe@L5lIumGs5C2BKA(=Ce7D}R}s-Q zZL>tHx-6qCZ(tk=jEs^R?)OzG*|ZkQeh6S0j%Ud1f2uF>diwUKOym7a{q$}_-;X2? zoA`?>G*n1r!K2UTxB1Qpb^cUNbxHet1(0?VVh(!B*vP)ru6t%d-l!!@`XKEr+vqN1 zd{l+J6aezG{DXG^M#pTpYhf{HRcXk%_fw|}n4be?Fuc5`S z#cdGy)J%6K$(^*Cv8^Um8L!@6$QUIJ`AKlh+|~Rv<(2!bX8Mw?;)oXb86_p0Rd5)U zPBd2J>jRP7-nCe;@@l8qOMRPl?5R|*(w^k8pVI#QM?VqHU3}VR@vk>%Fjj#)B>k%0 zMk=unZ9MgQW!j{``eO*^V8aB(g(Jq8_yQ&G)dC+3z%d%!xXQP+vaajP<^bhXl;_( zd)(pW%_}ea!7#o0q9(^T^>@=hd^0}_fPhcB!phPODFTtA#?5C8Z$(-nR-0d44=^7` zO|bYSdBZuOa7!^aDUB2a7U?dINam+Kv3u30PV~8e6MpQkVj*qOIX-HqwU2BcWu4&r z_1^eCd>85e=eVXpBj7PeIK38XV zv?a*EEr76IVJ+f81$#oIKolB9+mk&)nO3VKaHj7)$L989geG5Yh9Un6SLAYkB{0aE zkY1Q`N`()~5))GdkvZ{l+4-}V7F9lr?TK2D93gN>0jfr|&Yp{$n9{Fi(a+yLIb`DD zS4ZL-$PUyRt{(v8V2{W=WCBOa$S@`Pg=wOzYFwJ;%z^+y5bh9%J>*HV;m;Z`aIDm% zw6SieZIo*v?YVl`^u^FXYW9jynIte!V?+O+_DtyY#&tgy> zl3i>%0>{|ff=o`Z-P&|W?UmKSA=HXeY!YcU_3@gnaP1^VAl+KtC-8#d2 zica7>CE1D{1L73h&+?OS)`r^GDK0%VeKMwcL!=x%yc&3gF=@?;;SHtFL*@NJzG1YV zHaFU-KQW? zOjT?&ir8JtPuZKA?R<%ttBY=iXrBdmv4$JqOZE$eWuRxPRW?$?0x{GvM!lw>rHa7{ zof1<$0CynvHG&4H$<|V95FR(D9sxu=O9`iKfdw6!3!B>`6<(>WUvAXTmB}-MZzdml6%2IS3oT7ky z5t+`&bzGT9K#jVXuZI1rZbA)Ac#2H>oDIi87_faz#yT(NT)G7>$_WN)mJLH40p8;9 z3>SKTG>-%=+4kraSQQ|&4FMM@3?O6ENauH6bwz(EBLp{4PKubk!!e$lFS%SuH0HBC zgtz73x~wbLaRSrZIxt5g2(Nrl9Kosf-!Vs}5s$%o%UKwHkZ-9W>df&={Vtq_OdSqh z03}uD^>Pajt|8*15hRD|UWdMBh75o#pz_t>P+sberF4xIE)uEj?XnA2`a` zj_|U7m`qDVb|D3684TNmQBP}u&m}c?2ND44b-+Q%@-NWQnItx z5j)6Bt?e%75(4Bd=%=0AvG(OTOx|}KkiE=xo9mwrsGFx_{$<%vmvv|<9IEA8=z=UZ@7qQV-57GE7!NY1$rJacv-RZd&>%_ zdJCqAx90UVD`n++xn=J=4|Wk?3GlonT=+&{6>4ww63D56JYA6FbvnINbF~??#@4K9 zZ#ONRgvRSEJUr=e%W=DI)^Bypr}p|20Yqh|OpBsnHP|2VF>*jH-}~g~TKw@?Opgcy zYttP{BfF9Hs%n}JrhSYq>9Nr#1Gcb@egdX;Wm^U6jmqi!5x%;Q?hF)~odxdakeujq zir-BDn@;(y1LtNaT|N&q9m-K{PaL>(0BgZ&iR0|zoJ7g?;kpJs*f*}vGRc7;jccgl zCd_M|MUnE?9czh7#KhUE21Zg};H5Z!u0xO@4|M&PFNav$n@lKF6HJWGU&-26{k^uP z?9gty?!j0-vNHMg{jG2WONaxU`Wb1q`pN}b}uT$~se@8F&oVr8b z{K4Y&y(UQ!vBpDg=0seuVPU2o3h8MdbL?#mSWSRnDme;x$~Y=3_YEFr)qcQXN)_-? z6m}(1i`hT?4dR4rqVU-o2knH~5|qh4Twb0M*#`0XTXrrSOwPyi$Jk10YsB92dis$`mOAcZr5@26mA zIF?e8){(DRiE)PuU%O7N`vMn3|LoUqc+l`V?J#4pri1O#YccX8w{HbDG!hyxyX$ka>`t5$Du=(N)8*k(5&kF zr%wjrP+tM9N)r#miu)OQFDMh~q?OKO#mvss`8terJuQ29zQHmYz8`=zVm)4nu-6m2H}tdXh(`KA)wW0{B&<=gykBQWw?Fwqn*R#SSCl75RkonK7OICt0;?q5 zC*1mHgZOEBR~Ks-{E60@@KsU5Mi&JaL8y4=thwnp8j?s#g=otIodSd3GR|aQ5BGiv{B0fJH7}-sxN!&a-R#IzQ|oN_yf>aGw{HP zh@PdHLY8qPSt+WvK|c>`7%yZp9}^9Bx7@=s?((_SwsYxd$wGtXRNjrz*Xzzq%;?w( zMUxb0;{9|@{tq-Vwmq-2AdWX{RI4^H>iEfWbF;w*QSLo3DV{r62$Pc7k7mf+tc%-G zr;1d8^iNoipXwrD!%bllB^&$^rX4TY8(>_<&=8hWuCa6YwmDzfcOj z`or{7^M`M)k$qcU5S^MAoZg?=TP;+gEZt{fJt#?u!up7DopbCzP@qIOvYw8}(2@qG zn!;Jb`;=p7`Vn*dueTS6LbNNDBwixGlyKs1aBgn^!oPrt=FwtY6e&?R(-iOl06;Uk z<0MW_(0$|Y89B(WW;e^E~rTw>nRS4FwY9A%kw z>3^JMieaDpbS>ARVChYR<*xzXISd{==O1;Zj|V2gz^bMum+Dgq@-aW%=Cvsu=)#JJ zH9#D-Nzgl9fiaNCZY~Gnd%7Mtq2xFGvcm~~EDIwu7NX3Vf3|W69(c!tC28+b80=_M zD)r^rVD%OPNw;3=gqPSupxF~yV?HOts^wSCP`>z_zb>g3AB9wpI*Q8?uow9`Wr?)` zE4TfXGCKVA4V7y{X0L7+!M=CEBbkp154Ege@pLv(IM)Nuj{O9xCuH+n#KE}pn+W{} zUL~`%XlOth5Qf2;TbcRvZ3iG{S=0Gh0x9+3VURTbRDnP{<>|F>YtdY zjq0`?hCAjEpR)u(gVQ?n0j3~Z)n#i^5h4coY7XwohT{tzYOUV>du>VH@fM!iOPD%;eN%-Fa{%9bervWL(~gb7=xvimwtfFTb|&$;DTW`mVbOs0NE}aSGmpRu`;;GXaq_ z?fzK5=~2%Q;>BtGfCh%0K!AydLYy!~LBVs?%fQJ<29cHX8m!LQ!X?Qi*|!fn895W9 zUP1e#G6xNAix`D+Zz0ZP9wu1tkh^7E{M?$18K}e-D&n54y5q@~%qOZT6_=sz7_>X;{qNg^=3=U#7F?%kUxZt}L6X;kJ;;76AXZ|Wl@(r`nzBqCfn^3Ae zr2VBu(V>mqB6qWllQtqfkFTNv>d1ebk#G1#VbP-_}s7W@|_o@6c^ z_^u7~2TU(Tm=K`qWK|k5AbLC@eOGan5Oc~#<(vlk{L;m5qo}V|L{Hp@`#qQaLw;48 zZ1l$d9nfwn1(=c;YX=AfuZ*K)uqs6t*9%N4DL6|_LTJ&> za7UIy^^m6A4pCQO+KW6=;NT+ItUF6HE+&|wN{0Z78xX?Of^tORCGB~jfYDMEP0cRV z<2CCL?Miq{9@IGk8eFs8=buBLmtTCsK#5~lC=hwBBwSes0*_j(!hE=e!}{(;1CN_v z4MB`P10ygu9ZKz-IhD%7xkv%4Nnz--9?I2tc_^cc`^g6Qj0dam%}cWUbd83!VcQGT z^^AnbFT=@xn&&t*?NU)p9*CKnz;Yn7W4ttE;99@q)0vb>mo;i-)R?dACE|n_#O)6U zLP*{lphsr=T+R+IyU`lbM#!H!%t1PopeHKE)iH0$K$narm@k=$?+ss2&P==-DlbTOFOK!2J)rrRa!S?bs{SL8|OzTCPa=2!R z=&;2T44vJqj!J%l!JPwZR7ysHO#|J`>qeH9*5EF}bd1P4<<+I0A{Nodwj%HU9&wKG z)dn*@6IRyK&9h|?Vl()G?IR2=hHnTz@+KqK!$v;}5d(y}C|%2ZBlDV z>eqy<>zn)#&>(6Exc+{A^FAJQ;JH{aZ^T=vAwTkr&1_uVX|em_i(*s^3KZVxh!Bfw zX0$1TT9zDTs)QT#Vut=OZA#+&iQ*;t+%^wp2oM1XR7^sJgJa!;>N*-M;dmnL7qWB#Sz07afN5 z+_;3SVgNIcNpW>##4~qL{Pu6F7!8F4hGtSMMhOy)}C23|spY_w3Mwp%rR2xUrfykb=m3Py6u)=i& zu~0a|4{&9-u}wwwGtpU=YXT2FR!p=qmOSKM~A3c;ttP^_~EVR=39mddzK5C9KRE6 z7)(HSQ}aVT<5YoXlgxGD_Lr)y=Ac&WPlLVai-)eup;XNqWM*7RNeBa`Pcg=YR{&o0 zCnSLg@obZ(465|dr>5`w0Ywf`;CUUSzY5s$(dUn7PCiWe%h26n007M&E^694M)IrD zm1E@q;POir3^2WO_z<^$5Z1T;QE9(W^`RusJn4*Y_q!CNAI!xZ3}1|5CL!tMDkmBm zTw@I4jvOlTQnsR`6WfO(-F@ea%qa_RWJK5RmfK}0CO@J_K&@pSVh@Hh%kIuK0eUHT z!lc!VOR5a6HQ05uCTn@)SO%*=P0lLkvE-F#^^2uYK9)|o)oKx-W6p`YHL7Va=z+j^4}{u? zP8LCyke0`aPDtEFyy%L8sxBgZB4R~;MPRGkC=j=12~gBW~)hm%=Wk|g1kf8`4ftTmvX4%%%UEhd!%O{%IsI35bq zJYMh{5n1cipRnJa%+a0~Gg_Mf$bnts9I3bH|5D=roj&4V$2;^WIb zefWrMX}-!A3xl~aaSh2<#N43Cy>>g=#>u1{3O&5#8>2yP88mzijJ1Rw9uBG<1P}Sv zBL7lzg&Mc#w>PUvUr7vuUT}2W$7AO4_HcdM)%n{Du^9a$2LeDqiAtyawh=jP=cFO5 zkjB{Y7GW!Ccx>q010)6vdg@WT^Ys2Y*yHHH?plcW2R;iB{0C$j6U;Ea^j#W3T2A0H zPGjtCgVm|uA-v8_7dUpON{07x#uHk0ZVL=BK)(}g#^Ju`B5!_E$=gFbR?j%0(O~fm zx#0VRI5k`kSIxi_ksqJaKN6jdc#@ zc#MlsCR-ES zaNQq6pD@x@q`mG6^2XIPr|+k^0k zaT6glzmvP*+$9b_TB)$59Z!UGM%RDsDXVL5AZ~Fxw;~E;f4QPzfT2hq@^NN?M85kU zsN5L&qk4L_qY8e6qZ>0&q6&m5D#(wgwu>D@6pUwX(|5|8nQwi+cdE_9nL3lEkM`Tz zH=VISf7~5Prq5c$-IauhY43L+V>6h7Jh~%BzmRD*Oocb3o2h2Ng@5WaVc^~@WXV33 z5N}5$dI+)SBukCu;%>wKb~)E;S8SHU*3)cupiAYDqN3v`KK%L;nQez7k-tL%wi1q%B!(!~er0 z@knf4!?_PpjSR=4{Wp$m{bRS~6X~lqSz%3x#<}#T^URNk8GwsS0-i=sAYb1o+rDjIDy$@GM6vp5(WW(Tm7> z(<9$;pJzaM@dp7}ic;g5M&~WF#_$0k$lU}i=LUUMZxE!-GN{^6F!dNM9G5jNf|!(s zMr_O&7?h&a@7l=Bm*pSpF&PW4))xq0VZ>*jV%~jyT%$;}La_;}8M)fr%b$@M0?rr} zWsK^Q8_3L2+6HOuVq+D!naR55EWqM2h|LqI(YCe-DwFy^87#qA&HUfd%YpG~&vo7M zTNXl^4og7r1#*T|I~c=rimH5}6s2;$YJ>oJDfv zUmlntd1h@*(yukAepPdNGaDjYJhwY=9?(a_(Bch{vwBbc~HdV7U1&1fL5h`@#8!jLuAJU6znVe8K*2Afo`K!rdl-FWd+oH+g;cv z$rw;YS&2{gz=Lv^2%8=NxL;&(IlDEaPYiNd(cF-8HjWnfH?lny@DQX1Nda_=NIo@B z=5{E)MYZ}f=RrODg169)w4h4!{UvG^H3}|kV1wFQ!2?2^L-QzR5FqlNGY{zY1dhXm zb4HVjLhv@$!B11Hp}BWfm`zl0~6bRBI8gME7EOnBgKsmW~b8POcQASx4IOAen?DJsUc5QJ1YY6i>A-5zN zbS>>Et=ccGoCG*5-FP9WL*UqF_F#)svxQq;`-{RL8{LPn*uOW>MD5AKVKBX82{z^v z!|An$co+*okQ!!tghLZnu;7vV9f$!^rrfL>ik?K?c`}z7hC}TPoJsaKaetmt1C*t=AU~Z zY%d|-VPdT#osi}4!C*%8kjU~_MklpQ)`!t-;$im0>F52(dxLQxAM4=nBOWtE%DU;g z@WWewWngMNz{Z$X-rHiR%b>>mb<@ghT4Jv^0#@1%#?F-w{l+--BKz2ky#u|#OL%!l zg(HK?HsmQaJe?sm9wE4-O(+Qq`x}%qn^3GZ?aEgVE%S;XZxMLz4Uc9hOK`O3 zmk){AR`Fk4v8Y<`fo3yzpdth^MTbKRfOrHf*^PtY@l7kDvXO-f+BL!Fl~S*0hq_z(w!Im&eTJ}LCzHU-ey10ABok0M61(vo_Ey%b z>V;biBKL44!g@F&W&}g#tPmSCr&n+7yEguS;QR5Dj2#_ieY|KmZH|rQuE0q*sd}^; zU;30J>(4(4?rBF$x_9(JegI0$Po#U=`qI7t{8Kj%-`3gfJ z`YRq91}pbUOK90v&NzjewzWPaouqDDPms_o(nmh5X+qW!Bi50zNMrMIanXa$I8y3(SWKM zmTJI$yGF6*|H=GoG^t2f!6}t&I_{=%nC!>XRm!s%A(&C~{z2uKd$+)qaYN&Glzx(3 z<;wR?WUDZS zl^vWcQ+csMUOGf3*LHF2FcMPxX0Qgp0h474a~9(-E`0vC>a&TM<-){`z@NI1lx zSwx>x`)!==N{?I?+qG_$HKN1?5?#E;jIw~CCi0WKU;)8Y%?)_Q4YIj zw zJsEm7g73@{yy=5(%61@H7pQNK$RaLDEE&xG)}m*8!h(8%>CJFmQPvK4{Rtb1;>%0{ zjFN~ASUjd=|1=7Wu@gKF97xWf#wW!_)s9I8qkMzSkwn+*yk+Rp+tI67fjqrM$ z+j>&=f$&_?Wk6BQ{F?DL=mZoTYfQ-sWmSzK;kqU;*NV9RtrqO0|jBYg+|i^8?YG?`-; z?+5V?VE-4``UiK@mx{2;SI~oeCe12U*rlMoEQ$m>*mZi@rzv;2TZt`gVk8 zX&>f~t;m1^TXvM-bBzQnj3^m31F4vxXtZB`SI)n`1CYxw477W>lzE^HAW4Mr!+CLK zIlFh94E`J7deAb)wghNLzJMr;EsY+9ds2X%wKdLEjO z7T{tAP>cN0aaH14%xYA11A?6@EQwK}C$>X4JJKGKX8H$200Q7P0|5V!p81&97{r0J z0}AkX00JA|5rfyu&qUW9a$zYXm5<(g`_hqNRkjNd!eT8>A>=M?@?5NHi%%xw0B8Q3 zB0}p z8QeMZrD_3;=}71?1A|q;uJX8)2FXcNz)*8t1C5H^i1zO-xnk`cZ?i8Oxd8nmRen`C?vOq|H;D4{_Nukeo-&~b98v8rZ1 zdC)^uS|qBDOe(?Y^=@YpY@@ICn5S+H|gE$5j^I zGf6L&d@WXyC%J1vK8n*Ly&KwTxd&^hnm1tI+De0)~eYU$a=}Fj*@@ZvU5`H)L=fg{dcm2!iQ(X}6uXOX4qB10E;4WZ-s^t7{qRx%2GZHS$ zYUeSPUK5^3hxm9?MTV`@2huVoDT}8Fn{L~O9j97w=fdKHi?Dp{cS_xrO3>=HoBf+}ja}~on?a>x|c8%YSw(TkML|~#d z43>+9XstWB0#x}4flTCuKONDya+Kg133Ny)Z4;4^8MtaV?3vWwFq5b3<5&`4x<$ek z6!)sF?8*+y%g^yfv^%D;`lQry6kc_>32-&;FqCqKF=JuWs0`Lmo1ynUE;Db9$PWlA zuMz zb^@>m&yDxUN&)4kXu58IrU}4_9Fx`Dk@XMAxamsr>O-%MbG3cMGzu1E*c_q$3?_EB zc;;2aTn5?*j*{CywltTpU@Gt^ff<#sF#tvRbfAC(#k75sc=W7c+ho;y2yb_EVfqvr zht~DasoXJ|VN?FTrG!lw;{^e6xa&jI(tMLy8?;;2S#IL?g=GwP#E?Hw-U1wa8bObs zBGZ^yEANdAi0a`QfZl~VgudKTRZD11TE3&im;e9=53aMI0vs2?fD~ItEG8qH!^6R_ zdy`z)z@^OKxf{Otp!}qt5tio7ljut-Lw_<#Ta z3?+-+6BNmdY}lAtZLw6I2@HS$e8*%VabfXyqW1~j`8VE~)va09b)9W2@wlQXeijg$IcXD$TwC&dlYSIE96}Y7h-dtn{L+fwiSjnO&Xn)8N?EY!+ zCNUj;h?{Y!#sQ&33Q`s@@1|y^y3UYL#evOlLT9_#JnJ#UDsE$53yS!SX=@Y)P3B)e zZ5$(qOXj)}t2ve;AlJo6*HEno`f^ca$-VgcGQk_bC1NcqHM?xrnjKFIP5R;F4Kh?k zRU1BhTV&J8M#j`-xhBm%<~4qTBV1PVgUYbVi+N>GiI|mpb3v1T>C@E84zt8pYMCtT zqee626E$jTREe?2Z^0!($4;y|0UlLYZ|^~xdTBL~BiOS6_N+t(YdQLiR?1)>TP#VN z{SIGkz;IuIbuo*arfTj16}R95<-Q{)im^XY5o}l*I;)j#aZ2P!h$4f-dcj$s#~YR| z7i$9tEyZ3Lx&rUg_I6*7rn!9TJ}n5`<^^u>sG0mbPPe_^$0E`KU>1HBlI{+_=%w-? zYMqZ52iOz9{Iz5!&VRMb!@rHouuW<%wCfCxS#qOAdE5oo(QgW7+qq#18$;Sj`uSyE z%J`xNJI%dYxO^TER&u|?8j)sWk9~da;`G;`Jz3$zSD__PlU zR`dB}OPpxBHoNS>qD+ia+4SxMkTep*`pCQ7WOiBTXYWi9^>A^5e(Bdx+M~4(dNss< z1Q#-t?MIO;aLs2hr<6R7lNTmXp!s*FLTW4(%oeRC&6z$<^Q7PYO6g~0`ONfi6u;-r zp6EdoT_)U?LHO0_5U1_YZ~|n5qroU*+zaC{2=P?>w7WCLlZwTFx>F~$UJEnXF16-*^J%fBp4 zr!)*eqIQRb9y|6KULQ&ot9dsXHnKLi;{aY9jg_iSby^Yeb2uvh+{bg>dGlcw@{<38 z_i~Js!-vWn(_*l^Giu{ctK^*KARfDs9E^7V&0HCKF&K7o#b8ws}OC>x^O?PAhystG~|? znwn-}+#{JGIPBx#v{$LGoXCFsx}T+Q&72M5xY=zwnc4zd?b;X?}c;dc;u1 z9FO!;yZjlA_A>xgH@LHdrEW2-)wtb5gwGOmLPHKhh+{i4z#M)SV&$Yto=RZEf0%MG zaGRXQnIy(YBsrv!{8_H+&NW(qDyCOli8Flh(Z6L8qpus-Z6X;;TBV^N8?X2Kvm#1& zNs*CGG7#z3JWW~0x|p{bJ49q{x<9!m!{gX+J1z+y4vle9B%8B!lObG%l^H!d_zKeQ zyk)7x8@Us{DG^J0KO1<2la&FBs3NxWTpkB1EYjKyL`$Tz%!o1=z&h;XhB(pl!51-t zw2^Jxg6sJy(Xaz65l@>XDGzLNb#|oGTN~bRcR!C~a!;JQUk)Ar8CPHRzaU$>w7^8f za!=kBxvn9pSPEIhk-mM^%fFSiCcSe8AL=-$5lx$LH+LV7#Ys|q(Oopt*}Hv7PK1`a zV^`U*gDOgwQep_&oP*##8)C&CH?dJeyHdA_BSn+wQt2QnxH<)1)d}+-sv6H!mDD0}}C|U*pmU zui+GuB9`=iHt`83O!);FdA=!UzVWGaM{|Lma~zkFQTE64XJr=1=3&n0EC*(zg!$h& zpCLUF?k_o_6&}h2_m`+W-|5OafLAM1-x&p%NgUE~-II%?)7TWu~&I#{zhsfTSMHbpsxQ7p%T0 z#u*-qiGU8=u81DXc$kqC8q_Ys1x+;WA2{gHh_}`y;5`j#KGOPt zUKA`azbgU~tZP*DyRHFaf=4WLmjOIm$O49bs*-jR zL6*yJNafikJVS3?K`2Vi-JQ?nfts?<-KaCTJ;Udgj(x^4xX8SNCaPOUv zIb^1HzSi-^emNkh+q3>GdDG-@SZ)!*>mimifh@B&LP`TkBnVR9YT8XEvIOuiDf(tk zLf*uf8nC8u%{9*n$Xtq%mn7t3lFUV|SoM4BcXqiK{?oSL%#%cO(`0+dLMT&^f0n9AY}v*dSrYnbRYdFS#2L zaiMo2GsD|K0FK|pY0^N&QE7MHTBHW-l@n#$jJXe9g%r<;F z<~LH|@iBV>v}I5pZ1RckyKLQp#XBsG2F82TFyk~z$!uN0EI{3s4cp!WG$a8P;*wAm z{TysCpKt=;ASTaFApOAx7ikBSL+22HMrR%*P-RQY#$~x8%fZOx)5Rr%7{C8vC)0cOB=DO7E?r> zIH5nmz{Nfu67;uDe$`t+u-LL2f%0>7Zh=8~ww!qldGQw-HFV9>oDX|@AjTERxOM_| ziY+L0zVT;;ET7H*zt9n$TAw_Ad*?S7TOjdFu`1O=7Yr9@_r2?@z27UL{XzXh@tD;@ z**JFbkE?UViLe@~E5cv|yd{Y1;lqz=`Xy&U$6F9R%)P@g^JVy@)u!pn3r$ks*^gZ? zEkIwhc1F?L!=rjB6PTy=pVi@30aU_Me7oUK(#n;kZ`8n(O$o~m#ObX?xY!)k%s{hB z<`h%utJ0^k(f0t>}@l@VuH2B z`llnqZnd#kl@G~@N}5IJqari4;G!9kY6sXFb{z*b=mV*@g3X;xGd0Fa|ZQyrdFbP+Vh0R#r{0000000000 z000000000000008PXTqDxFTV(M|M2Z?nu1feWuY`GpXT-10p0R3XV|Nqlf^sa!dM^ z^QEFDtjt#MgG4-D3sCcL&J*4yo;sT1l7iK5!VuU&lqC$UTchHX}|t`t?C$Q>=_mB7)NamRN6yr85E}1^N3U9eggq_OG4ZoTNT^NloH5U7oRmeKM)y;Vi z#cTcH-3GnZxR%HVVK}f%ayNZ(=$&KDrIS7M{AtvbPo~Go96g~%<7X|6Zb)Tg3Ld4c zOe^VlAvSmeg{Qo^-ihZ2xV-M$#1k|M3HgJ5Z=YKr3an9+n((=NHp<{H9HF#C5pN^{ zKD&X5aI70g;v$EidWM=M<>l`7;1SOyyci}T=5;$5Sh8z`f>9+CAc1j09&t0Tj%eZC z_YB~|rH;sDKj+iRe>^%05KnqKZwoY)GuEOZkqCzSRY^kU5Yqg%;*Zk-+n~il2Iy6& zzdqkl3(;JSan=wngsb zAzLQ6RRu^{t7)7F(*WVamzrX`Fsa`U=pOE zK%*;st8fI8@FITpoLsUci(#Z0S^gx>Wxq3c?PtXv==2EY4(I#dMz&kyqwBj)-mHSE zjj-^>?J&vZ9B#iPdKDx}Zf^%p4vgbSR$>?;^h!oDPD_Z?A`BFeh^mvGz~n^fdPvrV zg`fIs|IJP8g{2F&DAW|q(U);3xqZfMX`%WZr27wU*>r#=aJwC<-(zoAh;z#wbNoxrqH#Z}(MHEcZ|dWH2m{^|BlG8POr zIh?WFPnT<-4um?Nojl-})a`Ecpo5HE+rZ)?8>m~9BSNlA+d!SHFf$L26eMpP&%^p2 z;2>zTx3t1AK4M6Uk>qF~9Ul74hrON$zo#Q!+Ose=KTF@Ca{bq{X5Z!(Z{em>H~4V% zU`C}rvg~wS)D=?kfh<#2ji>7*tQu$Q$C?EHktJF($qt}LAT*xKnC`83NGY68@iT*;5a6C$*u?U~yqP-Ue_Gw`Jon9# zfX^cLw{k9cq&oL`X9*BOV&L+(0JT|nYq^JVx^2Mg)4wom(0Nm-X}PmP9>TGV+9Y|v zyCl7WW!W6i9lA#$=D_z?TNlST0jNHXm(V?@PEw*$VObb$`;s&(H8cm@k@@$BLGP?u z{~hdU_a(bpS&FQ+i|{`~m0%;)5o2M4%M=mkn_A3$?Rr6ZRz@J0!>%%ov})&)l0=~t zq2kn}Ny%#pb3dle)1~+fR)}aLe+>Y3C`rySG3&eN#?m^~ZTm4wz_dd)z}Far_5vZ= zqy?fSBK=d|D{htg@RqI%x+$9 zt%XyS8UG#WB0^&=;#4C7`jZ<8#Mb5nZy5s3z5dI2RB;;3S;;XN7g=}olk9oaa^@1= zr-{ODUAb$=@;ii?C7fM^-wU&S33}ywRe$L+-W^RLVax9p4$jkOX(OlIi~VQ7Xe)86 zE{`N63Lp63*k8J(r1I=(ZdI`IQb?2{lkK{Fqg!`*lATQ~)z`BueSv)ImLn!O7Op~T z6ECUX_nW`~0?al^u zrDAO#^F)nXLDDQ?NrM7lx23duqmAntaTTczs0FYCk=to$QK+%xS(?a?)|_MZ#oY!a z#fOh=#9@-UO6e=4u9CV*bdyXJ$2s)R&x2YAoOH91f~g2mynL$3T_tpt(pO1cC3Kb2 zS4mwaa3>8n(&C3rsFrigNk{TD-pmD5aBQDzxm3pj!b??2zLy6F@y^@(@Cx+5bgW7t zUF(y~ajq8AIcKn(Po=p^3@3@_jEjzQywsTg(? zHe)mPgnuLO)6Mx;ifz_wAm>yr-n@~MD7D;A-LP@0Y;ugwL*t2KE1< zDvrUqnrm~1agnSJVW}V!&sY2*0K0ZmEZw_8s<=QknVNW?@ z6d;@QZxCfuFs_G1owOmc^k3JEwY)44HLb83h@vgrpCXlEz}(g$nMvXnyobf$TMUdr8oB+t^!ZydJ-2!4A5vDD&cQsYN8&fryiujO!>o&R! z>QZ3VGEk1S&>Yrl=@oGh3o$Ui%kZ|2s9hal@de2;@8u6T{>&f(5pg=VE~Nl%IMC?@ zcLJMp*Nw}psE#Szf_@Scs;m#+NxoZil^&Cu7Y?rdl0}-LAep$vYp{Kl0F6Y`U0BARHx($h&OUir&w5~m%imt`Oq*a0b3nidQifzH0eb7F< zaKZXb)cmGf+<%6|tmr#-h9LWPn_i~7_%y;l?#%p=g6*oq24L`e*BT&yx|`9htwjb& z>#;g{a5c zW)2i#|UkZE2uxi`KUf zI>h2P)H1*D$1h&wFwcdVCbfO_JvOF0mV8Q#E>X=<^TiOQ6ADGmN&m30*4z_uJ6hy*)_wY9T`6sWN{QUZV+GAGwC@Ix6cTJ&f!Kj?X2wkeU7sBQk6e>cVCH1(yuRaHLzjAeB=nYr zaPpK8;ykYl@$!zvuD!q*1ITH`X`8|B`KCo1?wnJ0a3i7^7IJ?>i2Ya%jOm^6H^7nf zXAnaW`&1ml&$DX#cA?@S;EeYQdaK>D9aeVhO}CSIrW?u$J;UtQtMVy(W_RW5D6Iu_ zge3o5qCPJ`2u0?N^I{~^fC>Hde9%}cghLv}u1evI8$P(>I}=PsWr@Es6O?+RWV&qw zptK(9upM-o_sXZwdBLGE={c1BNY+5C3Df?WtYFlr2pt8+U@#pElBz<_sjzG^pVS5 zsRt7?r47I58=1&QIsvhW_b~;HuORaZh&r0P9+dk`=a4b{4!JZ9o`j{pTElo)Rmr-Z zrge+6Xbf9my^|%A*0;sE(`vfHU2Uo#!scJhL)=Hd)1#=Nhe;+^|7^XXxbr)?F&_mx zd^@18?S-jg+`k&5oL6h%C-2yXW6PoXt%(9; z<>$zP6Qsro_*#ry$4Sr6;zUicmmPIuq1x?x`m7Y|Zo+s;OK4QP5l~|#LYDGD>`?vw zz5taU4D%~7Gi3?$g^!{koNd3gUV}ZF=VhQtx(qX1ym}4#PsQ@`W~~&u;23FIEQ`7b zjdQhqc5Gyv1Pei-j+sngl+XLfZ>J(Oe@Ku3Fr6hWDJ{eV_wRYuAFr#qwF8`Ih%@ku zzQ`HdFW-0?S5xJbxnhoFA;A%-*Z@?YH^p9Pc4p~H=X`MxVb(rLsr+qM@9ck^gBLcD z8pBcu@^n+iG6+0*TF;1CIXt~|v9v+}XEQ$aVF)U&?vmL^eTaSuV;ssKqtoD#r|r%X zv(9_xS0Gc+?5$M4TB29pBo+un8_buzIE<=Fs!ZY9o-`Dr_CyQu{dr6Eg8UZtFpN*$ zex~NS{cg~uD_c&A=o2+UL`tjPEOn?N^OC7ZqYZYEk)&1Qj-LnT&8ja~)$tU|=a(8i zh-j!=ATQ^;s2aA_$IG2j8)yvt2iB0cmHHXsc=dsM-S&mt(05bF}twc#xoLznOpjiLlzFMP~oPW&NYtcfU_e#e&`Ba`p2I~Z!;qq}N;v}Izk%=o1;*X-g z-t%F55`F?H00Zw4H{cWnNAxc<)ogBPQaK`8UP|dFn%`YpX@j`5IfYWnttT7=Cb(fn z4D`57`VG%xp0;R?8rXDn;1zWlEIu!YC=c*oxxw4Ge_aQ!`wus9B<+7Gtp6DK2-0i<{f?6>1>&tGH6aVThmem3_{So;k+sKSkaE zBxT1c2WBmF8gv`bL^}u-{Q%<^nw=GWAE~XH=w}i6u68=(ASLN-LlgGVli(>Qs(QYOMXkX2;)Mv7);33fFU)dc zJ;4BpLD;o2n=%*Q6zk;yyMio-lnj`taPO(&rM=N8<9s=}Gh9~G&qErK-=>{D zAXSsF(JxY`*mn5q)g-qfghdd^v5DYKiztG?z}u1EZYX=gLW-V`-GYUObI-z zEolv2_Kc&m#E4w`kdG%>Ba9Q^z7BV-Q{WQ`F0goW*#rKo1|9i{5kToTSXi;|iHdaj zJSUoDuGu0a9t&Th+bVXuoV5*FLvEV1G>ykPc_N;G4i}H4(OAwi?#XA=G-<3K*glg= znr(9*?ymN>44aYg^immxB^6i_Gr)KVcetue(zxrOrZdbZIMtUzlEFwyVbZ`K&DjO_ z7y~!sSC?yH;zm_nb53sJmR)R-Q)+~_39F~rGy&p0=+MN}TrX-rj zD)pK9*q>O2%b8_ga3-O8=eszGQa;@S`qb`^r#KWEf9R&VVT`v&PS1}zUL@_-T)Nwu0_N_ z+BmG6RPMO)G|$JFMWWp1m9eR`T{U4X-8t5-7D1QLJIQli*Q4Agv+02l9HZrC`Qwe& zZs$CE6V}lQe;|^<;BHI?Gp($@mibtUicx`WrZSgeT3l~A2iA7){HG(qyN!^UJ`{dm zQN`RSOsf-7{o{cw6WOwFKC)>M3`)3%({PV9mi3hGbyfoBdSgMaJ&D{o zcDM0~z>P>uZ$lpfGm9qhQaYtU8-O*w@-?if;!z(uFSV-7L zwnsNa3r#{f)6c$`SNGS@53GH+5$a*rs1gDqUE6@)8}?hc*6Bu;a6ghhw+H2Xt_b%$ z!OyDbh<1-ahuPVv6O0ySPVjk2zjxf!jkTHAoj*n{m46BT#FQMFcr<>ibcIs2Rpe{s z_8G0;u-(nkkC|~RgGDB-2gldW%p>wyoOX66{>C2WD)!VCV?U>d4X8;Z-oaIMwsdeW zoSJ=ej=LBL9>pH+5U(7j^0Ol;w5&EJ`2ABN(#K*id~7|xR3;Y4of`KE%$F$S#$Fps zZM%RN2-ie2kgxO{r%?ZdvY9ZLYRdt>nw2f$uX=V+xUgFp zb&u%WTG>qCYh!N46UUA{Sn#;}IUW2gVs>DZy1;g~9F32lbD6qG=W#@Nej=xM9L_=t zvr3vb*^3x?fLQlrnRUw66;v;@Vk^9w z-_qHDEfcr59M^tR9*E{!BL}MTrw0Bp(PU3^NatXKoZ9LfrYO0PqvJ_#22}ZkZELWK z7)C<Pfv~z3c^GDvhEGS_qYZ+3{60>Oh9CjM|I2{NO@5=6pGV%GlZ%MqhZ8HFqqSbc zl|BJb2!gkGE?yC%5Gg%h`?uGB6XF8Fr!jf>|A?oKzFdWLh;fcF6Ckddg@$m*D(wpz z&OuRUQVp=T3J$E?j6M#=aW!dF5jGAA);Dnt`8b&ruw+EU4bh%H)auW>Ino4;Tvd=J z6?!!BH>%_#3>3Y!7ysQ>&s0((IC3MC!q-wp2u)J&Aws@DVRUpM@woG2wATIPtK-$0 zSaTm!58JR4B6_V*PzCd%c&ZLNj9W4|^QN6$&sv^CmZ`IgimeZQ@^}3>l+1haGC&!1 zj=4%{3OpIM!n?+4FXXiG8P6JUcvDa3?h4M+=Y&)l;0_+S)2((6s6LPOQ5D1V$c{nc?d z;jvfFTttHn>@<#eHZuSK06N(_vj70rD1g@&wP|N30csOEkqVQa41$1;%pdz}-&Oh3 zxQ4%=SC{r~DIf`(j#|&-TO44XoDDDAJ#M6YoS1`pB0lizI{db3b&b>LI_=WkAx8XS zF+t$(6Im>2P>(dj*LrLVWaR6D91|gaRI6`oe9kB!E`LJ@vCMCy$fMJV=OVs~BSvwSwE-!)X9WAqg zYJF5+FOV|Ev#rPXXzLQmDSe46w@|jld8_Xi^x^qT8J);>$(RNrxYXA2CGRyEg#>OVSfetK-2S#4>Qxc z`wkXs^qkKwIPSRmgmHrbt22L58}dd8?4IASF~p&4Lf9ro3>qcGpGTN9cm7*+w`sPk%?4$)L$ zZ1>47+4kUFf|3w@HW@${tPc$XHf31X0eCB&DYOfY-VXG~JhsEXfOmO& zzvRAzE2Ij9>f4N`bfTYq;gSC$Y)*jG0|J!wtLK#RXsXqk@=N9@sDZBTn(gUOV9l(< z*lDWF1zI$CUUkM^BSMnoE=FCZml426(Y?ydSMOX>Gnh&CO^yx=Y=rNB<28dh zfn7DD#+R}ev#*%f>cJK!#bgBa3L&dw%}8|-zKQb%Q4sv>HX2RTXdA87T3yoUL3kSf zfF83=?$1qlPND7oiq@zEO6m_vCsQSSmAc>s&Q~dZK4%^8hF35>Io2#({v8;7B1r|u z17AB^o?+{xq$h{MQTNQvoMmhp<>1eDx` zZ-eT`7d$lG5Oo7Dcka#*sik~KcyNgu5ftVVj=!W zrf%_l+Vg0UDTA@}l3Quy;#I?dqi0%xUbh1Yk%w$Rf4bGUQamWB#xL)RI}Hy_-e|2H z2m*1)!xMNG(He$eV}=^~Vi9=d*=0ywX4(~$Sa*8${miOfEJBJX>N?{BPN35yY$t$9 zNKbUZYOi$v5U=QgBQs`f)ERM`049z(Gus7xFR0&oqWEK_<|Q8{^R7V1JI4lD zvvukw5vZEE8HupF<56ZATGF5!dJ8EXU_o(w#!g(YAh^C`E7*X^OWhc| zL*H30O2smXl}C`b#$RtCcGgxT6>*$U%Hzj`Lr_d_q2^Pd&)R+`iy7gU5yQr=-)FG! z0O8Af0np@TSOV8cO!qrib?atZ)4cTW#zoI&x5-VRCz&K5v)*bG)ZEL(Ze2hMNNUU*1A?oaS9>{++#TJyA`;3mYKpoCMP>jDnXu1BlCH;&JmEXz;jM3nM|+ zG?@ojfe*(5KAJNr8ZLo_L&A;q6ZI|<=&?Vh__d(;`lD4CtE8l}0)JECtb*1Tjm6ycGr+C~ zN5fe8v$=Zka<-i-xlwocUg|ll)NAz4J3XHYR_rNIt)WA!J_eg&2l6>yfY$Sn8S{9^ zKid`m8Y9|lJJ*Wv%{}*e;nra+3ku$ka%U7xVy8)5>wzgtG9)Ag%&I;*xm{H{BnQ$! zS=-BZOlN@tjjFnElWUW4e_5n=WxDZXIATEjH%Zb=n)O$3!~*)Isd>Pf6d!f#X`j0^ z-R&jlj*=*U_2c{4W1g+pK>vE3@)VRH!4}ajG21uHY#NCr>X;1q``0DZ=;SlsdhX8# zeY+Ww;rxVrI41g5#zzl%jIMtqNmDpPRvH7!B`1$>JAC~BR1zDfR$|{mmpl&lT27453;OWB2l?J_r6)wVP?3@6C$CAF3t3 zoogOqw9p7bg&;Cbw4DeaMYyJ(03=5yKw22>hrnhK&`y6?a3#ZJ9ZN3ebxo2X!vi`{ ztFA~0gxg8isGzvU62lVLS`rMe+>vg&hk^|Y9sA7!7KSf|I$mN?;~mZ%@g}H*v}^41 z)!1hSr2RmOxTe`_G@W1g3|!$=DUK~+XbX}(OLriPe$t^VdNbQsJUS2_GC|%Yy))-| zqgcj)cWu*JUko)yM!_|^0ntjug&Y$?v!01XEEgE@g7W}PBm)w6&!ihMfc3%5fI~(5 z^-((6ugLDLYH|smEtN2e-UUq8+~MI63{mlVwU@fNc^da}j2F`i`We8*lqYidYJrEi zoFkGIRTep#^GBZY>%$kMVgRI0=WFN~`)BpS~HOp=E~h3Zoa(z!@PPLFToL2H*P6@l~;q93^p#la3i;=GM{06 z+FTlvK$)r_nl~U(zn7)?Iv@)rMi(Yhnz9x2Gkf@&xi3rVNPfi0;VrfmMyd28ki9mj zxO^VNDeuH~YL_?{!r+tc2*rmhH$HFf5j79Wo1POTs0a{Zh5r;=Fwl(iR%2*SQHbn& z#C&trKumv4=|F>~S+>6b!ESp|Ae;o`LEs;KTT58$w>pagn19|7OC-2)F)fUdqZ0^6ohW}ZCY{A-Zn+Y<(KMiy^UE4%fWSs-!;bzGkyU1 zN}OGcGL<*oH;r70tfS{Tjt2>1pSs%((;Pz2TJz7sUCioWJim4^8fVg^^$oh+(ja!( zzzrw({77~UN@qW$k)?zFKp(|TS4mB8&a$GdK!cOblx}e!@hd4?++v%*5}HGd4y-8s zR2ImG>A|i5+&!f!ap}vqcxnEDH~j|2J|c!Jkhw&0SZ}FrSh)u$8z$zRV;U~pA!ZAJN zgt^T28sLC-1h)Hk4bZ$EA-`ty90A)?mU#S}Y^3jOGFN-dl?!eX@)pggj5VCqiA@XKmM_x@Yz9#OCr0r%%vhncY1HWOU zZ1+jlYIW)sYH(zs?MIk6yjyn6v=F{mCn*s0sT)qk#4vpZ=*0ZR$GRmCE=!*^|ml6D!T~O#399!Vc3vU2* z?--R7+TVsSoQ^n_AndD^OmTX)$8{UohIb1O;1OwH3gigHd4uFX!m7|Vr5}pVA`^0F zWGk!2`;b|%xTe%YWuYYjH4dYTF99LopLU6r z1d?VfPOLx@2v`g|8Ac9wH_Ipv=t4mlg&~mOaLmrB4$MLp(y4-tK`KY8UnLC`+QF9& zO;yvomoIht&B-K;GzOiP8;2U>N&4FUIU0?uvCP$V5ia~sGnLTP^s!xcJbMHAiE2t6 zxu2is7YZI_?^Kurlbp*rQ2q8z16LYni0fA+n5?t=p86Dd2i@QL?C(Gn`W-0tCPn3n zGo0+lf%-CV&FKFZY3IlbW}N3agTBG>MR5W=UQRgP{d_U~`2H8s@n#C(uwE2VUSZFk5lav-eHt!T3i5 zi26f>D(?qw%paT%U={JuJP>y$Fqt%edb-j!$JJ}7%(6Pbyv`|XY z&n>c(mRAW$cgzvSa6a*SqOOd37($$2&VWKGoa{L)Kh=H?n_M43B;-&gNMOK6mW?RV z(+rqS0lSI|AnLe^%G&inEdFE`&VrBrjLHwIxk%0cuL2m@ z(HnU`t&fzMW*TXT*oNXDZZz7%}A32wb7IrAAns>++ zAmSWehN<_J+mK`G{&Y!G9EbZoemP(NUPhdQLS}k75W{0n0trvOq_Lo}(ULKv2KQ6` zjM}CV!3NnCA&~1ZCdZpOG=r6Y@&?Y@-Zo{q9}!n!h|I|=G3?iZ`D&U;Q8WleE)zpb zOi$C2{dv7^Wfr=5$6sL1>=9R@6x#Ulrd)hardw&mdjD3mk>L<$&5b*169g zyAJvG7VVcj0=;Gsh#>Dx>R%n7r7OmB>-||;Y+%-l6aaVhm`Az_z1v=AzQuntTI@W> zCle?)o&22~<=)iMELeqL0#oW?Cc(3`%a8=ueG6rHWmd8l#z4Ev!R!Yxkc2U zY4oWIP1c6I$Gfg!p6}47er(=C>o>D_Fgb-*!N}Y0@(Vsdd+So!GQ4Nfw z&d-y#Ck=9uKW4vv$LWfIJ7^Es>XL}x(Ova`wH@ZgO;{X92OJlX0}*`1c`s=|NollV zDl}%*BRS#DxvUpDMatrr?wR4G$|S- za8&V!sQHaU-*<-*Ez{m8H@3}^!8z*iSrJuqn5~h-gh3Qz(6+i$G?|L58;C9HG}wCV z{>tpSl70jnf;Z?7sgzcQZ-F>U4 zO=2222^cyYOpb(7K%%GtlZko(wil3FlWSJfDo(7fw~6IYMLXf!_%E{B#H1a!xDJOd&Ct9Z5`FfZ}0<;B-T&qpeM`QWHrGQ zLoNq{nPDdAc@{`+7uf3i`7(Id!<%NnjB`)wnWlK?jp8(*Hq`NkK>8dhEufu7gqY;oo`~{P z;cak%ZP+6Jc$7ko*SN}A5jwBNXK({rwLXj7b+?RMCZfi{zS1?D$t@8&YIR(`O=ylj z8b;^e9^n|uoUiE=&>0N-HgYt4g|Q7Pz zDZt6!??3z^N$$3$>0$YLWv(gYW)xj}v^&nEORMQap#0z;qh7G4DOe-N<#HGt=7!b6h(K*BG(i}X9*2y6BvORyGlu4|UO8LOv_6Zkh z^ye)Hzc&@M)?P@|<|KZD9al>h%M}b*h(Rw0rYE zdC!+Z^0|-h2bo~25nY4zc>`18$fhKPD=C*x^9YtC$ZBxX^!MHKW$aZE_vy0DG3S!g zrwW@3?{iboEQ@-@T+KGl-bs5KDN~rp98{`D9U;XoB)mo2kXGlc&w0iB%2d%Ux19-K5}mtU_~bblmUx<%w89< zdpgL_?U&e4+&w&OiX}rbr3&5ZEuE*fXa$`b*Soq)A zGprjG_6>;WSU;ORV>PBKfpDDQx=GN}CK$g%*Izh{-!rLs=J|XwwP1wMoT8jM8ts7q zVkH9uu&_Je|LHCkO=p4Iy2pm`d|Ek!7S@KFxoXPEsh3S%SWSV$5+{u+9znxu<)#$o zeI&Ovtw)`FV_#gVW3eh|68+~JoadIw)ep74r6_QCJj29@?vqe+baqiRUhbv1OO{?1 zNIMRJ_F(dw{U(mbhv&`k`>CF&=3(kSuA5AJ=!zC2m+r@~QY0K zIGLy*Iz%cw&NHZ_mx+t;Bs@8zo3DyM(x@|jy}%dMi% zssZ)fW+yu*t1}M#{?pwtSQh~%J62+Bs`{;#J6v?4A}%p0C}I5|*TIvS%`NLX-)D=u zo7~)DGkIiU71pyTu zGu}&s22JTrdg*UQ&(r+(4ZXBJ5|m68z*Qjn0o_YA4*3y@Jym~Cy;!E0X3 z9X`u8hw>(9OI(fh#FPAJZ24#C0J_xVBXtwbu#5+E!MEL$67pHZ zK>TDD-Fx%?awo&K^s{jkmcAR5;uY7&MUG%y!P%x`LE1FGkj3#kd7}Y)g;mQnLbz#6 z1p8)#=LR=V0UCdqZ#!s&)z%QxqFbinV~@J!$F1>_j0e6^)&+cv87j zMiRE)`PQgfliF5Tsjx%kDd)~M?~mRY2U$+M?={9XWfXwkKnI9sjLp4BJwq z-(K!1V;R7T@X)I1JXn0Cs*3>~6e8EFvQBRAtn^<8*}>S3Yr&B`?_^YESCVPHs_D)~fD4+Tct0CM5@*{V4)e=A6;60r6dv(FBQBJ!_h$Sc>05r={d;+%Mdl-eS~Q_WchjsM9AoPrck z_FqDr#f@Cow)z2K;YRz{v38ZTpxqyKTX!q}R-n z4nXPfOCrYn^qb99f1iSas{c?tq<$b?cmy`hDS0H*pnY4|pf{$e_S_6T_C}^qSbWJB z%W;f%?5)O%?Y;>#8GVlDVZy7K+K&kQJ`1MJSwmP|tfD4e9&Ea(nRQf}L7Iv%F;HSc zAjlc8WJx4;8Yapgm~JE4F)!-8L42Tx@3$(wbG4 znH4AbInog8!wCvks)hc0?jF4t5*C(SwT8D1FMp|KeWW6%&=}$(P)clNgq?o>rmboj z^m;@jcw7X~viys#a^3Z%3d!pRdyg;7JpuuONh7UU7fG|bR`+UL)r2ZdVzf3 zUjTA}KGRriM(HMBh9(G-_(|nGdjTB~u+{c$DIXnhkoN%wjgnDHP>bf8>{OeP0&mdj z+U#M$*v^_f5)wO@QL3R*8ef!WBa#v%lNHQtC(#DRsK*gMgx^bM+g2Zl|Ibt3kT*1c zTQS(qj>|lf-b4I|)Wh{|A2YP}aHzO~9KKse)uZ62nNmMCyL=27>7JpcA zo#Pt3!Rc9=AW!zxR8#S_w1i-9@Sp*ErYoloJ+cG0I5?^5!%fxl{?)ykTsQ zRKB(ri8oY8)X%`Ut;F1^=ngp6G)GX#G=zaDC&kxAjNravC%Dr0$jqD7{sn%##5gqv zEDT@HWna7m8cE#|@{V*`aa0sN)NE^(JBo6^ef!}tIP2!mQ^c(hfHghi3j^@$==}f2N z-jx1LM<8^h#h(bed45Y&Zox>s6VGG%!L=dHg|Ws(u0oe;2HRwC!2nUwtl=|8 zb4eh?S_I2N`JE=eA|@r5MwJif@cwu8*~6g_H=ni*!o=Cs8Kb|&l&h2cmsga#Nc!bx z{1-yw2gk>6bb@YHN4>MvC{v3h@41BLqQMSUz^imKD5&ymEXbsv`!dyS&KucD< z%|jV=m&|RNdrBm7TJHDqpG+TED@Pp#F!*! zZK&ik;CYl!aH-s=-~I|0ApNw&JC8b&_$qtr2b+8OPfMA zcnQX~J>p0>tk}@{ z4*n-4s}HefKEZ_c=#r=`D?!&u zJBMR^BFL`l`__`n)c#INTP@E00?dv;1xy3PeQrznxu0h&4-r!obRyG}t{=H;;4POn z?3!fK?(4 zifRY2;3wJgrq<<%vcG}H)u@lWnpk;aI@qCLP)e7kfT?qUYV9a8!-(mp zkTPZT|LhmcKa_$8q-IuASi$GX*WW1J_i?gNc4ZH}?NENFmAxsvWLHNP2F%}>|8dIX z_eN_?zIf%TfbSp=StHtT9u2$QsPO$#mc%6uSORXldVsZ}@LiBKANe#5QLkngfli?5 z5=uC}Ms8-FKq$o3a)xo|A@cPliDjz!msCOH0TrTzY5uE_+8P+*L#Fa{#42i zcCGRZ-O&omFlhh)OOJ#n3jqQA9*uW{#i5pSS`n1=>I3qKJ=+N zQo&)e%C(QRW)zCH?V&4yG`*i;9~;pES&!Ki1h%a>-`_5%m6zD#5nB@9K}^diVYo8; zNGBWW*Dj@xX-B^b$)+IgFRoU28ba(b`b}hZ;~PtL@!LU+$CXk8;0fc#o))5}zL-%O zgw+vJ2`a8{HziFe$JMBhyqZ{fVmjENU`;BI@nQum^0IUYIb2u0w2tyQ|Y>6;uZdh8uAbXNJV&Zn{Yxl`YHU9EO;9Q<{c>d9B(~oj3%800S@`*OBNs z2W?HGXH}@6$eE!3WWT@OOwjy3Z@VqUQObSn8L-54Z>-DcditJ1{GS(?si6dkZ$1^# zd4_lf-;vS4ASgVYOv%G=bsWE>&U@V8^PTQ(gb4%M#dTI!w~vwgMhGtNXYVPCrQ=PQR_{}ipiEo_>g z=2!6}&uXmezm?#T(sLs)D_zEdWX^S*#l-pO4ah9R8L>UH)8yrgx{dOSyp(=x6*w`YGhK!^oIfAxP0@h z3PLGZAm|)S$7qd5d5C4cQQn@MuW(3m^*q1v94+xq9th@Ol!v);z&|W050IHdei$Uz z`LF|`m}iDF13kT2QQ1H;59=DhE^^-_pqJ;)$!-CdK-tb+T)5GOAIV~gC-{3GAx3v) zc8U_rm&i+tY|X{Fo1t#R+1Ah4T@mxLCbmeAwi!G(gDzB+3nuXbk@QYPrjB?XOy*hc zYLRUwQR;g+XqsIRb`^1PW7POE;Q7y(v>U1yCtQZZIEe(5O-dsADT{PP>!C^j(U9`+ zs2XqogoE&VqaU`hu~~Y?QrNT20IPDJT%frN9tSO=$WTHFWqxOJ ztGPPBIFjsJQ8bP1j~_m$ieLzH25vbZ$y5CVr@M^tR~xL%$YJsfWyJ?Cm%w#^pV{{i z0A>Dx1;l!l+i!k5aA9W;Z%RB5RT$#{qfvmKF}85XrAqCU5B2rX4!Oj=_M5s2<RpeFgr&DOAvaWOMD2VNwJV-=OPcR4=*Ll%XEB zT~&}i0+KZs{!ObpS02C$9422&P+h5j70kZkD0|ZVLB-s7_^rB5<8e8Hxwk%()PLC6I zQD<}XX*IdY>%v1;Xv}WJYX5yNTEv>q5)9}zN@R;m?S1FWXo#!4gMXMI#VW_l>SpjYZy ze5KS#N+-_zBVV_tJhrBA7652DDity_a56{8s!mTW53Diwo}Ku}x$M^YDYPW>B!m`w z%~!?DN-!H3u_yySDrDPRzfVW=tNl;{l8{j!Khj1e;LzeiqA@j*wle&E$7bQm?V-go zyA~@GW%i2s?UW5${p+D(r;cf?MZ1TdZ$<38NdGYQUDE^9mk7vZQrJvnW@9dPaaY0o z)Vg6;ZweOLfxFOD%%wMyWqT@(t#%FIUv9)SqMBNYg8XwtSM{H!U#%9SKstPX9+jS3 zN&9uxVU}ZpJS266ES9`>td;)bB2e;WArrL>QZie_$Zft(8Y&kBhVKo!N)|lI;f%y_<=x1NxbNI}09CKOAo zqJ4WqICP;`U`Mm|aY99qDuh&=GQ});)ow#gsR?2?Ceu`38jY82sv=+vt{1IHV?Nkp zX7tXG@DQ8MvV6#Dzb}H9L3)!d%|b>6P1Y}ayPUjly9^(6qY&BtiVZg`6EU57_CqYw z+8~6H2x#4Ddsz9uj%M`Eb>_lM!g%!I^|y|f1fqJjJ6`XC!^?S0`ujv-2 zdgbl|MvF6C`A}_Hu9{BIb|3RFns zV^o5}V(uC?Y71J>@Lw_kd=hKObp17&=lueW7qRp6VY!ab+rW(>*-j{kfcMHUD5N$sw9Ju z=)JKG5;uXpXo4EcNmdIhzM2okSoe51a7>>(wL7>LOkvGE-hY@4S1sTxcG9WE`uXY4 z^X1k}j8;y3>z3mB+~p=Q9G2^uJ<26vDGgxmO(-!ri;ltS6jA@_C!hPY1SjL%vtdaR zx?6dB&8m6*ar^}sg4em19RHS`3+FJxyHQK{i-3EZG=~6p<5FVKAo0-yvB;;Uj*=o+Fopp?+)jKZ>Or78#@*V)*t+|*Ji+)2>@`&L zX8M#2bgeI}YsZctgoC1jHwAluJpL~P9dd+c z8)CIsL^lXvtrs`St0*trC<(mI-3b^aZNeRobo5F8W8V>ui|;@ZjL3jaxA%&c-7&ragboUfMwNFAC+(erW$ph9J*N@A46LV- zFo^PS6+#l0-sAL>;fTHS_Dek2n>^p5VjhmGENju+ua;~_*3>|u!hbHHrtk-e?=;aQ z9uaF(DG{Sq9-R4ZB?QlvS&%nKP zn0?m}X!%ckt}-$N&yI{h)OeTm0YG6Qh7U`G^|D{L6PimfY4NTl{_*+ZNk0y|1^Z3zA$%d(Cc`>dXn>z8Z~u3#Gv1kSE}ION14w*{ z^qpG_*2Ir+MDCrx1}`e`41fFY0CEh6vWN0(Qsn)8t59VSxq+{uC5mj(a%cU*1@wuZ@0he|EIDxp=xa z%p|_PP%>o+gkI0QAKsflKMrPqi}E}*v1=vKzlS1=rmvgO3@CHf9Cn(-x>pGs8fu*R z`EjWT7Iiredn_?#O>1$+sQ}%O6}kZNiOjF5aRkCk@P5q%-j3p=?RIjSTR!qZrWnbiF~Wwr3OW}zmq*g} zRYEC&aytnD@t5j3ab&g&t%|(2PA%1P5UtUTvig*MC7h7O-U^*X9eZtu0*?()-y5RX z#8~GJXMw(!ZAjl?O#V7I5@dWVb9)2>xrOiub|$M^FxVN?zX$OxLc$Vn#iV4l>-V+> zfBZz4PuPvn=RsLF6|3TAVIrd3kXEmsAX^pSAjEyhQEY2GHo3G<3qQ?}-nsd6likB) z=I?~d0{)H{e$xBwH`SK%y3!}m13@bm5g(X&==IQnGWSiYkbv22D9YMf5I6W{{s0>c zgXGXBKovPDwHiY@uj>@;yG@PZAo-W9b-uHFoIyE0!b*p|tFe%%$9_3s1h^7h(`aes z9?_sh;M2$vIEoB>mVHfKml)Or#A{0B&r>$_NFsCpvz^5*0C29X3ZXuuYw>lgW3eOM zom$)SG9s06ROKXi?YEw}khL%j&4~g>YaS7g9nx-4m}#}F%sw*RRDyTuk&U)d)RK2} z5R+reQhM%*)7TJ7oyRi}sTgX+P`^^`T2)Nd=w%wYLS(Dd@;SE+CA+=P4vS@(20Zm0 zka=Wdf)U7_=K;Q5SN7+@2i@u(n-@cky6vG6tIzh|bo!W5f>m|&u^B?~8!Tu~wCoqD z>MP|005r9u@7c|E7C}BY)Aa6N+pc|d1dUPxyO6L=hTLW_!29Kpp~Tcg(%q-|c&Bb# zIf?Hbr%PLZF>;e5nFu?7LFaEfmHp%(#Y%zVBsT8ivyaxdC zd4p6}h*YXB6E&U&5LqMGPPx$!+Zb81mhO2&gCu;%66rVIOTGLLl!L7Bl6hb*pnf;O z;=biEg0gH8+E7Pm&NN`?gub6>h8a?jGMN3Ibt#y-e^EoMl&;qVQkPuX<5KlJXbUoo zZ{V9JGo=giyAk4ApOqk~20>(%t-+pUTfFR9vXJ&-rO+a@sd4)gqGh<`LqWpFlSAi? zGL1eVjrwV>uvS>ETX|ULgxq}9S;t5)b>{cgh!^WN)>%M-kb@#jmV7p>^cgAXT_s*&bsJ{Mp0S<0tblrb>*`uzX8V=p(Rp z1o(UFW5)W;(jI4zVKDDS%c2&6e);g%rNK@O3VTXcL!fFp#{?ckWV`{8<5ejSmh0Ln zqY|fFM(!Y!orBu&^OU{dCTvar9|8(_&dQxC_ss4uH@h)|83OUdDU)4Is2ZERr*WR? z@AagXCtyhr#er?R`qm28WL=Ste;jKcX;;D?-9$C!R-Ng+Qz?__A=7T(IBj(x`MD;x zl5;M)T@DW&&$tvD*glKSqtPr85PVs&BM^iZGu}q5%jm!}$H`PwRmAAWoC_abJETn&Y zni+BxD>BV_zHk6;L{)HAQsh)I*GWnulXS zWpZIRomgs;xQBjn9e2g_IF+pNG$9FM#dx}hnGE7$w7Rah-FGNbG&3=t$YH$NDd#rv zlxOk+3wzrmphSp1RIY-yU0Y&DC7A7iy2G(G>!}X$YVnn7JK+hyn9he$Sk@6tmCj{4 zSP^q|2|n*koipfHn1dx`BI&T>Kv-XPN~r&kX7Fp*>$@%}MS#fS-jd%xYVbJ0XdxW+ z4BLv5c+AKwku`CFNeVc@v%@hlE`tJnrS$=fWGU8JVS|oRizLHZ16ND$o{90xP^P#C zc3m2@jjSc`PBLuUWy|dO2wNtGEws&^0@!}%4XmS_Cz%rUZ^a@h;3BD z>i|~Zv|GU|UwL;T>& z?Px>*&GeYKR?B~kFp^^NvO|PQ3bii(S-rOT<~b|%I4SG_UCJhr{iM1US9`2;k!N#q z@F6j^UvgIO*ynB_({Hd*Dwj%AW-7^WBte4*`Qr4+)qV>F7#J`=Y`2Q6yp8=wW!W~8 z_`6s+=KH zFl(wmRJ4;zVk5b1>BiF8{F z2WWVs(ezhb%DzA}N4p_=2NKmv6a+dzepM z|E`4H8xkixdx5enOuXcRoZ&0D(jx`z79vZC0|K)?xJ_yH^Tt;o$ap&Z^yy$_>8`C0 z3U>+S&I=u&Q<}+kuNQCGsJ9z1uF%KGMd*6q^{^EsZAbHi<|u>Dm{iG77cW@2ck|T6 zsp~KVNRMYZS^tTDyU-Ro;J+nvNyz0TZtLtr()ATmo5kqCfezcJv-n0cd*<4WL?PaW zD6H(B@D81G$Y@Rt9?phd9tKqFpN4x&D%?O@73!2{K&6}l(cu6p;OB$51*5_OLvn0F z;VHoz-Jjnf`p@UGht_yIY4iZ-OlAc)eCm^&fq1bac*78Fi#koFrxo8dJuQX%$aTTS zzb-9oqE=#gv9bz=2+9puD)14iyp=5SSfkA|^8DDH8K#mldoi7zJdZ-Rsdf_HqbCSn zyN#f3Uju|-v=4_|B}l!FZss>WjO^Jf{bJ)v^ru`y=#L9j%|C!es5+y7BKs_zLR)Lp z@$nHhk!w5vSIpO3|8llRN;Z}iIZ@dcYHOF_6Y7vr->>SVRSiR{(m^&CB4yAU6JeY6 zM4%JpZE|E=CosKa5i0@z`Y~ zu}z{~skh%L=4gcYRatb#2BfG5j>9~2nx3r39DvfFqeMW$g&klt*~r8YDV*n8oS2`# zhehNGw~$#K9!UH8&>$#-$jr_7>?^@`HgdnoplXeKFvJS~R)|FZVh`JyseXDz3bW_O z{Op}#$>M$F5d&WEmn+n`pBtPWzkvSPlOhrhfvbGZuTugjM&N(iS$3bmmbv+i@DU@5 z`sGvvuSx$py(mCe9&+X0JDHc0n7}O}onshPV+|%9BtIci)c8kso(LySztF7IFIu1P z2Yqaz;05^6vH-hpn>M<*HNbx!mSL1fMhMAsK2=+<)dcHPJ%35;ty=g5l%{}%XHx&esPqQs0}30`zf|TT5FrRM(}-37z1q2SjyM!3cvWn+Gu?;fR!^I8TmzN$-p+ z3SMC{153{fnN!UcxThlU3^-r#xMh(CtNGvoq$G-L)7CgdXfY`BLuUV|D%z|hAb{41 zS_PW=*p?Q2UA%irK+=PpFJMy`QPpkqiIcs5A_ee{Z+gYovEj1tU^j1Va>19U*u2D{s{8lqe+jM6OqQk|Bo{&$rBIgGT z7^l5^Eq^qPGf`ty#;-`Oo~h_avSh-e4YlJ=oCXI3sYz>+;>(Hv+eno$NB<2i#k~@X!eJ<# zB8w}Zy}owJJuTsG>>(Tc9>JqX2F%ad1j5p*LeDIHGb<`$xJG%PxP86ohRg&OHg564;iR0#?Hlrw7x6u*Y zq|?zZa)R$b4S(Zjz~O~N?z;_Jyx|i`hhAn~7|-y)J*ofz001fXm>NbsV*@$(9m=K0 z6ku*TbMhZ{r`V8#6|Kcv!P?$)d1EASG_&SrPLUH$U{4t@+m~5V(>-c>J0y*$4f7nP zQe{f{g(Fz{!c+m)AtqNPA}cpiA0}A*a2ABN^<+N2Y-lZXGT!QNG?Sl}X)K7MmO$YC zwfe?uh6n(dUJubGvZs3|vmcm%!$TUrkidZZU?eBYdW8tUty)+ZD?{N>Y{^j51OLJc;`&{3KSmzLPMnJqDQ35`Iwf z2KE?0-wWRUJEYv9v1-n|HxrQYWVM+{Ey((1-(y6t%SQk;c-@hQ<$q`xiTFdkg|t0o z#+09P(&3x*rgBrXEUzscbF|p00|OAt?84yXl~4rh-V^()vH~u}M9u!}BAPl)$8O=M z=V93yOPcCX(s4dnQnUcb=Ca{*R)c?02gx2+A zf%L?{~Y~JfeSt)bS0m*$jq5A&|&q9>gBY)w@*o$=vU79{YSKQ>5AH;C)|!KIf*! z7MBJ7!7ow_aH+|Mb_nFxPm(-V1}p;M(BZxGUs>{GVgNUk;97+toHu$G_OQIk?um$X z8-=P|d{}VKP6EAc&i5f6Qlyvo)~WsuSE3@B(_7icu$q!`QB1RXRUoui5C6^rN4M+YEPzx=c#zf#~Z?N1w66a^0O( zOdY_t?r|yZ?rz1cbmLl}xD|@ahK)NEch}->#ocY=4jXrOceir;KRNg5CMP+scOK?p zG7mGEWWL{8$@-QfA&u0dIt`)+^$Pg9@4DsLv5vBFF23_(^_>1xwKRFk z38!7yFfj254G!eubALc8B9E+qUf*4&ZR3&IzwDh4{#9SM=nRNE@oiAQ>XwzoZPxQV zZb;^7dZ+8tbD-{IPQUthyn#-;jHyHu^zjfUuL{Y&ndlLkP73&|b|q<&FNM=PI(atqVxjaOD(dx6C2z4$O3d0R~K;GAtukd;M zHKzT!8h);m{;2l7T!f}9OTF+{yr~3s+I#IKRfe|#9#tfBw0*Q=Fn_AeX5nuBh`qZH zLG0+$J*B+Q(oRJx4UM}$lQ!eZ_0>++E*Q|ml*r6LYJUiHFRZpnl2mvEMoQwMp()Yu z*~*Bj?g;G89q>tojb-8#D$UQmT8l2ZRRqy1@~dFS#;$&L+-pDxpXhd+v#PrHlK?91 z=IIRt`!RS2zvSCfcCO|Io#+i*kQpHhv% zkPLe|WZ|3WM#*?=8vK*D;eIogikc)4J*LQ=Jf=r`6ue&()h7I;;mP1`54z*IrkVOU zOaBgAv_n&~xmsHAvP>f{1D88P85GwQ5|}Co!z=#i+DwF~_&k@Yy4z@)j-x3{rMq|8 zk5PEDOoP?Gc-Tb42jN7iZ%uL>`72JS3(m;W3uTvEE(8pRHnU*W;6%I^I<@Z(rLN0y-VVfJ|T>w}-1e@%@;PFuN8N4$JyvG_?< zqxZ!Wt5(5Y&w~2bcT)n8xRzvz)#QOXh4TkR>GREnhvq5yI?erNMu5tR?1Gypqq&Dl zFPEOcQdf{_Ph+NZ;AhB#d6Kr@RZ7G`e_>A#T8Z>F-jmBxWOKU~_%9EQDZJ_sqL1tT zC8o83Z;gam<{l6;9PhCRNu>3KvOK~P-}X9OIp+Y<^9kby@UcdfgUbdT11fDf(N4UWyp4|MPW&{Pw^ z?J4>8X$9O)sxA(-(iB!~rqT2aY(F)E*}rU&);lhuF=>okH^9_%E;X;K-d3Vl0XQSQ z=h?qZo$PkEn&GN*ea&K)MneksZUJpuhuM_H7y&+Mz6}i>hUF)CqOLM%L~Te#5L0!0 zn>dIwi;DZ{w?DLfEEiv=a7*`N%UvVCPKaxB)HAB2;8pCCpW@^aw#rA}uj`_VJ_gi{ z*xTirEtF(eja9Q~1Btm$!Q42-HK=NMZSVt?wbkARgPB!?i zG)eU=t`3jDlJ-}R!g<-VzO3^@XX1?Y$ZRkx^c*!%P~^vG{K zGFWL8EZ*8;NpbknaQoB7fa3=acq;T-?^A51wqA$J=1I4S51&@V4q{wWsVV%B)up(S zI=mmvj7H^Bg(qId*Lp2>wxHRDDt!(>yjS*zFKHN8n@{Az+P~^y8zSQUtd$y^%ee14 zzIw7vRnAaBpxiyLx|7tKbBTgzgt@eQzdc~+^m&&X6h7hHYNs7r9_?^J+w5Tuab9yv zWY*-&*1=KuI8OCb9f+v178>b#Ma(*Avv#DU_s-%T)}CsyX$_L0ci+|5T1F9iL|ONX z+MDQz2oLG71`it#07{Z5+ly5)Ow8$W5(GReyDyAdMc+-;DSmegCQNO7M5+PH7Y;lvPtIKYiUVo81zgRtO zj-!h?g7#Ljsdz-x^061x ziYGJnmJ#KGj8bz;{g|EVLn6x3OK2mP7|#-7t!S~|!YTcS_JHmQ;cJBEg-gHxAnboe zKFf?UoPe8DdTcgO*z;j@g2NeI1gp3s4ECUUmcE)3nitL%KVN&K0gdkS>z4`QfP}tn z`=7KOMD{I#8ujXu{uUZS-Ww3jY`E_O9N&mJ!e|;eG`qepaP26rUmNTwVvJVzY=wpALaW?WE6=(dW}tWcc(AJ(H`&A)~yxkCNuw7+74JwQ(yLToHdAi zg{2uqz67VckvMN*y+)V*s0*PGi@7dm_G{X;Z_A&o!A@e^9u@ZErhs$n+dYv{^8%0N z)7E*TzgMpMNNfS5sW81gQeB?sSsk;gp7&hYm@wrw+c%*pk=|YwKd2|RGE&a|8SWa* zVtb7Q&(ySqsV1o(v^A`|YkwcMK*?6rVYJWQR@NB*NyW4CjuPymI8E<06O`R)T-^*K*_wX%CG9YF`o`bZW#*udUvUo+3h(B5pBr$zXMNOW4 z!BW$9dk3%{GG0-aCH>;gES&}#itb){`#T%W6Gw8jq2>~TU`=YHW9hx9O<>n7)-W}& z3qJyKvb-C`dp=>J1xB3!!kC9SQYco7rs+cQT~m1Ks{<)~v>Z_vrq8~&+RVP40C*af z8}Ks6AQ%%DshgH@dGzzra<#lKeW{+Xq*`g=kcEuc)Lh*kxy{qf1F4QUp*21J(GOOapro?OfoO5S z;dJIeV6hn@g<4P(|HtirQvg8c4zu@DOQT9AWPAY$zj+)kNSr|?qzWtP>?9Deu?FKS z<^=>x>Y@ydI7_XVIF)6OcL;>AasDM$Q-QVr1oS;B-y*kFT3ONA$l4!0#@yu19R}L! zf=jFKe`bQ^;n-O*M8E3^A%U$N9hrhr*o!_n!rfqL@s$t_n9GV8olc8kzT9hzP?*wt zu?Hd|!V<$#>*OAGU({f5T>f(8ulZ2^UY!0ED;D!>sF8uTKqcIXh{>AbjpS?Mk^ zKF6PrdJgtU=TrW==*0nay{;_2UIGpPOQ)0POFxr+=bpoj;w5e|H?nv0PH`d}z3Ghr zjNS?1m|rSXO^*rw;go(VB)&mi;=a~8QOG+{rQPkmv+@r6EUDFI6hqwwuXuK`F~wLB z8oxlY09R3gfRmS!!1zp9^rc+Vob9V`@$X4L@4HWNMQ@;-7v=izc3Lxf1lB*KeKI67 z?@_8J90dKQ?PupB80iTjOa0rHv~+!)M2i251~wyob0Ix-4m@zW3uXnQ6rV9#iq17d z%VnVm!hsqed8;e0ZOtk6Qh|Yvlh>K_Z;S(f7m8^*EDq(xN8@WO8zfk_Do+zTu)o0* z5fHdyw3L54uj*6nEUFr*A7)?sZyKm;;L0g4<1kn(DK8>Uzzg?xrxH-E!+=y^Y52`Az$GmyXN{=U~yBfjmaE-{@ z@Haj+qUXCSMJWSUEh?!*mM0}Cc}V@5s&n(5>+Dr08i*1bI~Je4>Aw?oQXJMBbrZ0j zl{bwMgF~a?JfaHMdPGyZQ5XTaBo}eGl5TipSrYdpI!W3A&8zpZ^Bp!@6#^}j+mq8? zVcXkFCYy>!xX6nLkS&=wX7pTQ*-w7(A+OypdU5tZMK&fLiNDdGCpCak1BGKXB?fi* zi|=-^Z~YSqLq@)>isU8hx-qffm(!`vj{~P)FWd_Ni1n zZsUM1%ZIF}t2zb&WG|c|VqS=EM`%V4L?|##b~6@Zt?I=YMe^M+!(>*}jl&7(P@B_0jbQV#G~-Qw8Y{Z2Pew@_m48@~6% z7u>YgIfH26^RS!&*X@$@WXUd{Ykq-tJ6<^1kbfqadsvyYcX8_jkE<%+N-!8-5y+QLaM%_J zhMb_#yAu^@qt!N?l3qdO3Ar$C^wkg^82*>+|7Su_{b!oTGEn;zi>Qik5sg|5GbS73 z|4;?*Z7}pg@tJEUkE( zbeAzVra+2)K1#5JQP?8r<}}pu4qH~m5-j=T^#9?}q0&yO-K9&3`GvxyK_`;6N=z1>+KX4x z-DU^llfaYo7K|ldGl18Ta2)LAj2dZYsu5YDdmS=V0fNTf1&=b zF~*4%o7AT1IUJ@23%V1dBj7bZjGQ{-=w_Z>gm!wR>1?ZbJHHO4A&qnU`JX)Obt@`GrMpsG#PQ{;+7KklU^FYQ<>Y3I}$uPy> zI<8iTlYQSlEpJ5GE#!m~%h*yb%e}P8)~p`%<5dYorbE&a4HB#Lc1liN|mrLRjAjim_?CNN=%CS&Kkj=C|QYuIXg{E zsXbYHXi^^Vcq6Tbtsnxktz0^y{3x!27d)7K94~|};PBhMUnx$~W6uzRm=Lqb1L~H2 zs}{&CeLsD{tFz3V#zcI!eoYlLg*zqPIa1jtaILB#}d zFAXV}5S)<&1a82<{N#EiXvO!d6EJ*BKD(KTDe@l%OyvyblvMFAM@?*zb|`Co3lIL) z#lF}nfa0=t5WajoQrbya^NfBqVd%t4YGa&@8IOVOdJ3kKOcA9}=n$E@zbS0@)6z_?0 z-Oe47t|YH6|4PnjErDCVi6t=;2(G4_5GfUNO<5sIS~wt7-`(K@Fg%=^PXdyIn{KEW z`8luL#P7e%A`)1zUshv9KO8wXC_Q5<)M|=S)M9K%+$i|;h~>%6nVjP%r4#aQGiwJd zmOaO0dA^F09mcrqKZwUEybA%|(lptjdny=4us_JnW+@J&8ExAWg*#G)&N*=$1{gQg zaaYdU4<{3oE-4gYqmEI+O#!Xey0nl@(>dGqcRP?bTsxhuu4CXlnUv+-{khpvqNr5K zG~)n{8vMATEc{YCMx1cjG*P4y#qmD(KigZFLMC70!@s{-XEWySQs7td<8%H@GXTU- zZ}q+#^62s08%H1q@0=LgHsLL7u1y{Sl|Vd=iOX} zjNpo~V9b@=Ns_T)x&p{e*nU4k{x_}7U(NxA=2JO;8;~tN@+cS?M>v$mTSJ$;m|!kt zM*iC;rd`?^Qw$~d_8ku0KyN`ToA%IB;};24=8WM=;=degKl_@EnLXSr`LMxwcRR8U zq3nwYn?kkf7QhdWJ&1XOLhic7zwV>#iDIZS5ya-|(VHSROjFZuYSfYP096 z@pNgyB()Ak{6uhuTgxuKy?w`%BWa#j6xY>tG+?x;XZBJ!@jEs^0+Cv0y35gLqL}K2&T6qTU;asF=)_qn=1PzM54AfFXe(T)eo-x&(vrp8i(#mf^cV_DYg|qJ zrT-v|lOH{&O8|Jp;R9Gi(EWea+ncJ21U7iZ zx&&KT`39>U-1*h~m>MPeorr?PYEGFGLfDc;a1c6fvsT>w|0L_(BDqxV4-2nKU!UbV zgawn|5u!N^-T^}IoY|5UXIbZXvA!eTY-VS%ERzMKwDhi`73ToI+jwZkSMT)+BSR9Q zVUP3l9WpT$mB`uG3c6hBOY(!DsEr*j2D9|eeUjRN$oo2I*t`cJsnojBJzPIkhCX$f zkPXVKg4iHiDEdT@)2tR%)Y##W=y216xK(8~ z0oYlncTY527GdG?dyM%teO)@wqti7Ez%Q}Qf+&L?dw3-snlquHt8gu{AtO#~(kW94 zJ$gl@SQLO4-JLFlZ;-sNVw!xchJlO4XunfnkFf3u()LOj!FSZ51uc%&=1_zQn%dnfqxlvX%{nx*0g~-2e7U7lB$`;%#w(2J3Sq+c8z%8#I@I~9alOb_;bHnXBzOwG_<3yfw z?Q>5n=&Oya%V+*Afzn@BlGVu~f5&S^l-p!pQ+{TW+Jw~{=4wH*hY=tp-)u|94=W<& z8xdbgd|V|CQh7Gmzc*}(2tg`<5tW^y^))*CqAzgI?I)^~`~5t%Se5~B>Xx6}E9U2V zz(B6zSRE>D#h0P3&+rkGUr)=|=ovYFv|9=B%a!byl-VC0y{j%DSEHkAxa?v&Qbf#j zXyRdQ6OGE+KI{xR?Lm#KL@NjR#o%XtViK>+M^lsT^2^#Zjd@NNCc!kS?y;oYM(0ss z?MX_1mDj$A;=d6!!Ln$a8>dHk2nY{RyCHZbIKSC?&N#%Cls|~Si36D74W0Be$J&IC z#{()WcSQ)34N~~2FDM2gjLCN1%Bi+|uKOzLiWw&K2ixyv3n-!JrgXEpzKmbsqa9p( zt1@bQR}S-T816S_uE(u;+jHYi;r>rP_B1;b^yB5XNo=OGb26 z+rfXqAz95YWQf32Sg>nGU+;tR$YaJZ#m@)V?241Ff#XJScJzG zeu(AmKwW-ys%Edl4X`*~zT6wFbz9{^DDdh5+r9jri@jDkq(S5^On{Y?a%&|mK8#V( z@P0Pg#akMst7rBUj_~@(8`0Y5UPhfo*2p{U2Xc;qJ7igSCi#Nd)#W8_dz2)U9f0}@ z)(I6>6=R5!p1Z*7yW7!4`xX(GODgh9LWV_dQz#Wu^gvt_gZ!v!+a|K-)szmgTJOI- zXvt3Tx#F~18-wco6XIX%`hQz5uY)W)C66F__ZSJLfp6iTjmKYY@l0kf?M;X+F#AT)?cht7Ujw_8gz7U_)tU01&z%oE=ATEk7= zQR9G3BeWbl#K;|a8>+iu?HT)DVK#n$j;{9p+WD6mhZn0OO*a$95>7a(yv8(aom7=} z0(=~YIB9gW6s+t#yoqmpDmw@!4gnB%$SE{ebP%6Q)6hU!`ZN z*vR$7cf`fFUXP+g050sZ#Vo0(g;)xALuV;Pi69g6IQig}nr$0A-+h*I0R2sEFdzL$ zI_ZAU->f*w*W2U}Dh$q-cr%($t9zOm5j|#m9SiuW#emo!tyW;}=_T@H*Uy3!i+!N3 zI-yV4LBoZFJ^?3R__;p0s3D?>RUU7{!iZu(gP%^Z2{um$Xt#eQQhyHNY>FT(`>~-` zEKKH~n(A=x^Vij*cBk=(zU;(Nf~2*j6oYZ?uc={?Go@XdnWJ-45DANfzd%Tzy8Ns% zMibu@-9{qH09xWCH2gt@t?p;e4r2U}-IMw6CwIud!e=TdAK=pr-0iufnQv$+luC{e zbf!_)+L6VNzK#_YpAIJiTIma`kI11HxwoJ^K~@pIXOXf5geb#J!<2Xbt=SZ^ppYII z%mDFBr2niCTJeE?1p|pAq5uBZ28`uhWl5a7SRu@v5P;b)g*F0|^I_l5IlpecXWBu~ zV+m>kkrl!|id=47_GW*4}>HgKC6#39Rl)B34?S;;w>jEor-QIwJ^ z(a9x#b83A9?SRRCo)dc+;~-P{1In>Wlrog6+$6rHead&AgDB zev-HE8!h~>#-yhzRNJg6RtT-ODrRfXpMY+3RI(fTVN8|A6ctwFCyEE0*GxqCsdnp6 zmbU8s`yipzxAd>q7`W+%x(4&>HBln_gRPTd`46I2?$#+P=do$>7mfM+1)G0#+NbEA zVf0Au{P=xaafO*C{;Wh^mFTw{P!&XMXohU?4#AYJB*D^B^OBQ`(3v9H-AdU$Aj5@# zZl_@Xh?iwif^(#X+izaGx>|il>$cl2ql{HF7tZke9iqvO9*MqiV_F-cUY?jLB&CI` z5iCLr(gy&0=2CxkxA%JqYEGxb=h}J3L>5FmMoE}vU(xE}i*`77_UB@<1I>(%ss{rf zINj6NeF+}R$mUqT7QNrg_ggzxa=VL!k-R0|jrcb&1j;VXYy7 z2YVv5QMsW!ib43h8nXd50>*s#lGE5i`PxuGxUI k9}jU;gP8&*bl5alIeg|q<&g0kF%Smu5%I*m``?}Z4+J?CW&i*H literal 0 HcmV?d00001 diff --git a/static/images/auditor/10.8/admin/compliance_mappings.webp b/static/images/auditor/10.8/admin/compliance_mappings.webp new file mode 100644 index 0000000000000000000000000000000000000000..aa259b93d3e2cb36dac89b21235ba9b1a69bd33d GIT binary patch literal 96098 zcmagEW0Yjcw>Mn2ZQHhO+qP}H3te5dZKDfaw!7>u+eSV!(=+$}=id9SH$UV$8SCUe zk&!$04?9$(B_wn_fq^u|MU*s@xQG<~xMqq5%K@gLho}Swfj_l&;#;L2|w!I z6^#_146*`Wd}{6>-|9{$0GLmbpJjb@7kM`Tcfo7FV1OQ==yd9{39x+8JF57|c-IRE zoC^H@0{&_E2?@A*OLzjHZodP3dyoOcfj1u)&tw2nKoa2UW5x*)V6d3?L-6CF_gV9H z=6L&;;CDdsXWuRCo?vdE-sk$K;CtN@qhuh)i{(Y&TJIpB>GSF)?RNXYaKq2e8*sIK z*82mH^GNstxtcHtumWHLT;BlAg!_U&0t)~opOkaGlK>+C_b2Fk+GpV9Hc@X>pND%Y0?H%xnxYUcqZ~3A4rg)qCqo=_i_aosM@ka2mcl0gH7xKmMGVe6- zI`9kNkJoX+G@vQ4`t#}26kzz`_~(#NU@|}+;QaCQzWup<+xy4JM+*S)ab|4&#_&qe zS^x-80PqE5eX@RFUX09_JrF(%&H#!(MxV%E317C~dJhAaKleVu0Gyu-0MU2KS405e zW#AuC-tHcg-u3`RfZoB#OV7`lj~|Q=6Qj|lll2WVCF}actxmHl;o@$=8WWyv<;fM^ z=2GU3y;f6aLyMl2JeMxtrlt&PX({TSDjttX3wDZpLfrH|z zGlzX^tHuN?y&zW`U6pYh)FNJZo8*yj3V-{lL?+l6x0imuH0C6Qr)6CHR%Bx^Njwrb zgnJPEV;wcPl@ioW0b(T^zJUwZ#ED~Y$Npc#uwm>w(+B3=YEuPA5bRYw{cb{aB{7!& zdpiHeET5U>lBGY5C)y8Flm*~;2Fw@>IRY@9!no;?7rC`B5lfT!r{ld_E!9GgUNeJ1 zMBeH0>BX~dMwNFKJOuR3?wxnFd^O1?G%u|g&8+5KxTzG`REAjpdoehwex<_wVAK@d zU*UZYGN_FltM|MC>efe0GP?Q&?9)j|(YHMavXu>~2h>Ie0b9^DpTQ-?nwF(x^)TU~ zFV=EJ>%Bx;Y z0^IbjbU3vj9Bx)CwRyWx!b(=Ju~^L__pL#`iWlSNQX(e?>(??Gq2-V=*Pfv*K-o%x zPr``cKbCh}{Uxeijb;z66O6)$4L|qpc`QQFQy#S(qEGDfpi{_QpD9;qB?v2IhVu%G z9^mptY9JP(eHmv@&o<7vmVNlml%(r^_77* zZUSCX;1~E}dtvHeRATpD2Us2Wp%hAAN;J!fqP}W=u{uPaCZBd-{&0~i{YhEEd=neR zs=$)0I(8$Ry%d9H3WUVJvtsX__ab|kYq*LL$9R@idks@rzcFwpfY6DC&LMcGVKV`J zk7X@lnhfs^+>KY8&Wx3QmA$@E$40M!t`Xf|#nThV>-r1v8Z!I0Z|sx$r7*R{ST(-g zlgq?7NCmHsE2W6o|4Q+Z>xV-7_@uoRc%tTg6?dzce)(5MMHgF_)o)$qg|yI|$KCv6 zH4`Sy+)UeD=-tc>FMYtOTsJZ7dU{FFV?}dtd>#t&1X0F&jV@OAqEN+2Ns@(F-Z`X3 zYVu+GbH@<`yp$9PVoW!y+-wji|37=}eyMgO0{5%K>D?scA>(U4Eb!rrcZ~|L%6pb&jyeWS{JV{6Dz^7(>c(|TrYTA_ zMnf7K7%!Z_H0Y5uIFFDe-eYiCfP?1TFP+sFB9p!gLKI)3G($0Iq3f*Uf;s}rzGPxT zHVz?103K*=`e8XeMhVsKQhgTdR2Rw2BKf_=w~I?RIyABf&4D@OqV0tB3MzyXxbA(y zuX9ZFN&qVYJX87ywx~7G^EVDqw1#=J$euYN(g3hu+U$gFdf@E*mZtn*TNjU_jNXoo z2vFm9mV}6rm|4enyRv2?6R&cAR@^qczw7VsmB=BmIP?3j@;GhtJ`+mw>S1`u9bKQD zwDec*T<-sqyS+(Y(oJF+I|(ne#gh)x&vDS$=s2Kea=)?__H50)Kb?s!Ox8@+6`r4j zU>{#krv>|qcXewJBh&{m`@hSEec5n8*w-mf;oli8l`(eCy(NVTe>rn_o3C_*gwk!p z=9?b(Cb?(+aw>JjchdwzFR)%oi|__I`q{-EU8L2V)dfYe8gi0q^l($# z3Re&4;L>mS`aOWjlQQ+|(dV)j&;%Swu3a^sn!q-Pk*PKs3%=IAGo@ebp$tc~Ur$lz z;h7KpiW9XXPqrYK8r+hY#FmROOsf|;=%GX3EeGs$Yh6zTV?yrR*Nr29nkc~QYq@{E z>#*7)$!EmIqlhbh7QG6Gz|I{AkD*fx#t_9F<3!5qKcyR|U7ILWtE7{K>tNugBo^Yf z>W+b(f&eq`VMxSf`67T3f{|o&4Bsk@AyTvc9A$d#LoYoRWg2~pL56CNT@ zEWeW=p)saK&`6dJ)l1I}O6*)kksrS^GB&~P_*$$ zXv&0li0D*$DLY!37Z^*sH!6Wo=R*iBLz5Rd?Ja{n^#GXZ4h0Q8x!Syzyl|xQek;}(5##}PfHaRp z=0|YjECtW^{m`>$K9>6e=C$$<`h)tdd6Fd4-KOGG#xEi-o z7fncDizodWlZoWCWK)?@5VSooA(I+tC|I+DD}xs78xmZ8>Gx*OSeZ8>RNaXnI-1vC z=9=c(v5cR;f z|3k*kn+=H_-#+K_+1aSSME}aGgKvrPR()9*QjKrg?s1p#P5FL~Rc#KEhRQH8`=iFy zm+;noRRwOUW!DB5Q6iR67EF`=*l{&Yv(~BjJ{JJXoOl?1I&cOHv3X8fmg#EF_KyKt_ncl{JdqYLj5;av>z{H_oOEK zPx=Olez+<B+^aOQ-r@baEi#?@#8CKfLRLzih$n^{}mweTNhsIRp)`{1@A_N*9M5 z=?j?P>0&o*Pj8x_mxnLQ(&*9pPqH}tH=w=rwdN+ZFmv+K9p-s;Mcfg+*NwS&N%FmF;Q$cPAsm<+6{0EBvb<=3K3A5}!Q}RV|s#GME_(*$+H?jLKwEulyjZ~|2 zxEUwuO|SW~Cm=_m*+kl9I(RY(Kd-g_0U&JBp`9rP!q|owVZ#T@V3g3dgX+Ye^ctM_ni+>JoJkT1<+_ae-266i zmfXETTNI>=+9LjAD-^A)Om0pX$H$E#;62cifly^=aYnEp*@7MNSjl1q|6B`Om`D^fvU+RZLlH7SOzVpSoxLAnkn@X)V-2myL~ zHm?)cXf5g;8z<3~Kp_HT{RE*^c#Nf=(5TCJ@{HYg0zTRHa z^VD<@IY+a96QYd!fjg7$2M&U9`fba&cUCAW25f3GkKPmM2k0jVdg7Z^cpJUh&LHtE z*_w5@mmn#SV9NDtgFmqhldZrp!r|Yd4`c;^lVFms=`5<9_!*3abc7yrX`u`zsIFxPG(^X-N z<*37%iW@$kL;n&!R3hLExOBKlo2RJutS2*j_M~Q7ihf3#o zIhumHY$w&e6j$tkli(%UE@?{0dq5E`;eXEY*7#As6G z$k8sZ*W{&B{CU8aVvLO;))17jZ=4JD)EJy33_~z>$@-0=iEF=#p*8sEr)lCCD*S84o)%^&FSdH7T_>gFA2JdU`xz2T!YXM+ zfwKG|g<;F3aILTi3N?mZAa-P9;jD1LcV%+Y9=Cesb*##3zZB?dlndZhJD9*R%$L1K zb%W!^7cF9+9#9y~!2*HkhAc!J#M+{Su95JA0)|Xm4HF|qD?7sm>DWIW(zn897Db>X^cPg;a zfbWljd=d3S21Ttfp2awOI>*#sszK%tDo**IiMaRQ?!ey;%9R`H|1>#R{i`Foyz~C_ zF!GHpJzoJ07>rcH z)lBC(%q?gCl%3y>%(sb|e>8_Fn`f@aA5e(6`)??eCx|TNGpMMu$Si~QC>o9Zm*V|H zlqMEbuNtQQW(byZ8CLKAmuAgOtCeys`xpNGrI`Qxz6*HJKNbt3QwC?UtcsZ%Gf2N9BKOgUu$j-rE}qe$1}J+xk;(Yt5zyC=G}KcJl&4k zA-j8`ByvYIY<26Cj+FL$(GYOn8~zeq$pi- z;-4gB+B2ix1f!$mH^qL|rtqZ}o1XYtr9{)nV7CbnUW^k35%?D#N=qeBFN`dZP;_2X zUW_7lWQMsS%;RomgY0$orNF(8Vibx;(-lV7x9Fny`h8~EdX>Ueg6Ef&ulj!#1@&wd zgXVOQ^AGXPNpk`}^!q~tav~gcCprh^?38+S-!q>;GU2t4`F>I)ewJrir$U~T5qy|T z22@Z@-H!`;Jf+`khCE(_Tfcz!P2X)650XCGw9SIN0X0+If^RhPLAlsiTTBH2!0HO= zUODrJZnbH@H>HL4TQs7NS7CUE(}pJHAEma7YyIH}06pAHp;70BV5~^|nW!88IDwDl zof3FP?8E+nqHXFvQ`A@%?0bJQrj=N*{9iF2Zl|tP;?tpR&1Jv+!WNRhGZSLa#%{^! zh;%luC4Z?w+09Yzk^H*v9^5jS#V?V)e{d_sOI4h{3W5U0uId-J?1l9jT;N@TOEBvG z)U$bSTO~Sj1Ah1~?7=v+d+R0>g*yGPqp;akFBXPJ@NgG+7r`M(7!sZ@q)+asjWnWk z#ViiPC04rPR2FAOWMK?mNThub_z@?cUMR(kdHQsu`=ePv!k^)hVj4PZ!zO;dqhehC zc5quwLiEoPqfJ{|LQ;bRR`>cnbSt9-%LA?+xFoy5t>gCTTHkG&SDbCUJVQySJEOB` zy{*+EckW$|)=d$;W`ZkiJP!mENcTm-unGr)8>iw^d_PJ$9b!ZL&M>IJ;ZK^qi@@@H zEq0>_jsfwn(LD+|)poy&KwdVk6@3tV5)6X-7{DE5@-b1<16}oPMi9(8_eiTYz}GD) zg%;J@=Qygygb0q`NlElrU*1b$)ek-vbW*I9s;g7aO*v|X#;clYFGF}TK_zFo!TB8Q zYdkuxuA3NkR;=l!F4o=zh+$1WjLWuCbuEp)G{Da6irFMZ2`CCfAy! z8U?F^RXcHQDQ5t`Eqlt%$;E2=c&8HN=G+%wI*Qv}nFqE-FL5nCN{{twK$;*YO9X-E z4(b!=Ix7V-VNQ9Y60+tuDK{%Eo;)5o8iVI0=#tUNIVM zR~?<%xu%!JM@nuZ>tfATEJ$-t9vu_opAdrM6)ct4Ei8M*8BaRRYaRtWNbh-DbdFLZ^Y4SZR;sRlYc?du6kH`p{pgX6QyPy!q&ki9G~z|K_}uapd*-)|&ddJo2ztE&tl4vQa=#J>GY^I`nWFpt4e9 za1$7iMj1f^wD80OuNA;CBTLqGp4Up?KOTBxR|~r2f8+rFql|juApfdkSpE(cuYz+9 zF~xhMsbdSF`fLo)an<%&d=#TuoX}y_T=;DPvP=#UL!F^0(ew@TsylWQo{0)0A6v1q zwofVU)O5Vog>z%`>C|-N_Nb+ z{<3u?fxXa)HQT$ku0?=dYA|#z@55?SKQXpMs}V54}Z)iiO(F0Z1{hC=E#j(4C~kG#cj}r>f%6Z;esQFj5Mz5pP!(<@Ss7 z9l7k^paqL`zND5kmnzl+rG8~;;(g5^7bWYrifuj@Dh zKUcAlE>jip8q)ns5C&hv2@DWbPBH|l)|&m0^Z;2>5zMIr{{Llw{MALljdTsb*5YFtQSRz`WrUkQ^Z7;8LUjrKFT1-> z?4Q()+j0)y3z+Dw`(KW(LA{xH2^@du9p1q8e|XKm?O=>i2U*X5j2Gq_$p2|N|JJmb z;zQ;)QURRjy_2s0L+Q#JG=u)r`e|ZeB{1dH8HCyMv!pC2k@M@6Mqw7D0ip0rQ&2-P zcj0(P7Nh|~75v@HapM01{&O^zI!GaG)2T)O30eJ1DI%e?m%4Z@%MF)RXRz0=r)89E zP!5%Ks6Y4T1Q*5MHiD-r?H>G6ikp2PXFav^THT&Wy_sKp_061&&{*crChrLM9r zGBIC`1w7LUVs8AJ zLOm4~7S>4cq@@09IqV5iI_ImKZ4Po=50_Y~8=nB-dGU)C|BNcfW9^h}q_2>=J%3&<~)ne(JSnLfUV3i0#m2&p|Q>7)2=!-VXb~ zMOw&m_*`Z%b(=a8Z-FJ!(bCNbEZXz&)+TtsK69Wgc|kGNO&53Dl?Ac0Iq%4a4NDS> zbFyd3G5$(wTtpoed4M_ic^H;}Z~ud${Sm>EB;)wk!=radEEB#Cm^exc+%aczutci7 zVT|N^=XVj`>t)tdm{ST8ZuVe>XFTA0AM(W^0Hvl_Dl!X9aT6`WjlT}}HD8xq>h1e9 z?DCqW=zN7P@@WZe2s>}Gi|BVGe%cu4`RbJak^=UwA*}?|ufSg1PJZ{kSl94dq?}s< z3lA{6zZ|Xan&hmlzS$crq+>*!C_q&}z(=g}E7)RTIP>CdM6S4x9+Dy#z{fw(s+FHS zhhs^}IT&(!m3wVuI(&(S>uBnrbB$bodSN1Kmei9yz_);z=iz24O!c?4Ew?0P)49V! zGEaqvucEZ$pj2_L-nVF;^|Fp#@kY0JYg<5|8bfb8JF8Y_)LO1XU*Ye4dfyxVF~pZ( zPnP^OW|Urz!9<)?;i*uhAYznt@1=;TOVKFRPyA+WWgN&?rPdV03b^Hpz_!*SXF?bD zc!~a7vtf{Glc>-9q^_3K_|jmjH0w>X4_By z@v<@)7`^ndYGBG5xWf%LeD@mkM6KD*9xkE^Xg#u@%vJP@0EROb#r4IY8Ipo3p*1A& zU!5cjZ~-K>GDTNL>7~DG@}^QuvA%lQ!Rt2_g|y03MOU|Mb|(82YGgdw;5=L}M8<0U zV@B{gMqQ>avIxipd?&`h_MW9oQiCTsS9NW2*E3>I&AtHSl}R&PG$$4!W zK7=@%FOVlNL{%JSP3uNN)-|y2@4~raev+zS>X^D{d})JROT@>NI4_OV%96FsNN>T{^|wz@4Une;!5vcKA2wJ z^y1LrdBv@C1q#OSh!?&fOk}B>XHmnS)^tDul$DK*_d#I?Q0)3pEkN;t5mYt;ash7g z9VdobB8Kzb;O6%v4K&Kb5t&U2$-I`N3nmpE|mCQr{rG2a2<9&o@0p4Q&vf!XVu=R%XcWz4?3*>?=C+t zMey{MIe+_2G$cADy2|4l!{tSx!dyRAfDV@mk%O!^=&52!(Oq!_v%K12RSz~3T-rg5 zeblNXGCIy}42br~mjDFj0vd{zq&2xBQIz?Lz!f z@$9K3-MeskWZP}{h&XMLt8UAi7W5GXdVgz+zisEk0!Lk;>B1neBBZlL7+=DokLWLs zhNg+l|0s{&i0k~9*gFJt_OxBAZ(T;`^|G#^G=4o%${C_*_CxzwS|rs@7>I%Hry^GJ zzsy=6Ktlcn;h4r!*5NEb$Ek91Rd(W-HIfpx6%%^sAsBJ|2W(zMl^w;=T32x)|d2aqf6YIj{;!y zE6UAjBpxL-h?=XVJ|6#{*(X(E-PB9utjIhq(_Aqe*L$z!m3G`Rw=_AfV5>!^SAKhKlm~7_HnP{N$?UMadb(r^2=G`AxsXOWK)<>B46WDzn#SAZ3 zJtTjch2`A1n=079s;!fLz_3huPod%f$}J|s>^ogo*Dcbl=7cg`0s&cHe##;9U`ifx z|E%l3oQ>tyRUHr>1KNSUe-Tx%2(-v1FT>I7d2A>xr_k9rff>TTz<DjWEY)x%o+NUvE_?>M7Cr zEFQ0ud~GpTjP^ziQGw^W8pb1U9)Yt({=~J>pc#WuD&(K3Wuiq1ku4q7Un^_0CCb2 zq9sJrYZF#gqlrOKa@6Z?6-62Al}(~;Gj^o$r#yY~PdD6k2&$Y%$I#VJr{4MgX7^pe z#gZ%q2mc}&9+p{pOH>Pbrk5motdX*8n_Wpy+tN>t&JP|RTW;rd1WF`)^}RWd5P<<+ z#PdOvCQ3Qt)owGUh^#>sgY`iWTHyV%$tcs+3GHk60R6^ev5X_n-V7Dto-|q{^`PurEfj%*QY#Yo&-2SZ3lvnN7 z2*!G_rsOIZ#%9Zlm)uyS9n=L*VCx%;Ym{^Q)i;|^h+LaanE)=kYK=hv8Xp` zay6V!-ljSCB76>;miJ(TcBgCM?)Y%*A+eRzvom7?y{ab_Qi61xgL%?lV0f?|hazH) zD?IU4PK5{CSE>5R%ztTwif0S(4frz>o-#?2_#&r~to|wkU+&7_^d(_57~?Ag+=$$^_1Wr-E2yzH!K5sx1>SsxRSG?leM9F+J4F3BO}1U1u_4=`kLnHwhjnnE09 z89IM4>{dSkvJmr_&JKVl$gS*pC6@{@Ht4Nav_!mp9rOPR32pO|S`9Zo_TU>Jy=xD@%P+<1W;LC{igmQ!5xuuRRgwROjZZ*8mvs4UHf4P_U= z(3OFYU8JojZVH$XdYBpg-L)~=SbKeniARkIE~lfcdaXq0we7~ed5WMV_S|U$aawgg z_pI@iQ&j+}3y|84x*Lq;XJOZG{(7e3Ex7dYy^9N+tOQGn@mC~tXd_5Y3=yBtIyMs< z-0`EjrAWmM=^}10S6|kvU;W(h3OTTs`+2X{C@M76p+Y`iYM}^nlbGbWAO{JHNZ}hK z18&d?xqV&W#F)5!Z}Wsi2OaA*{FnuWIupQbZD=^TH!LJhxPol4$2|Z$hX#qDR)R*m zsE_R-s5y5Ou~{(HS<({@5|5GgoOazcb|OGL_v>K`i_lM*`m=Ah*bcBJCr7pybkXFW z!r);tHW|T)K;v!%9IX|Q?(yn6J=j&}PJWgX z8>ZI>MC9O>$J@w_Ug}$#=_+j8J+$tzvp7%|I8aru&Q=-QEbFs&Z7oGf%Xz*cEg2GU za0b%Wpr{0-Zw)`#5AioZftl8s{Tbf9@lzDMs1WX5Avr%Wl2}_M1(u8FJr%{U@2)!< zxn*hPXAMQvu}q|9J1h1XoD$OhSkoH!oB0EpFqSk?8+XGCUN zd9!QF>=7abbO)fu8t-T58GfmjXT+Q&d-_;pF6o{-r5>lei???3#(wOBLyk6)wY07d zo=m(Ej<4HrGM31_&d*ngx)&5~>^UMbn%=aan z=>*;F57nM(9F-M(Mmcb2IuFnq?WH#O{tn+sT7VZ{qf**ZN4CknKf}C>toZKOsfh%p zV3hDEn7VKuyQaX=suudR^qn`N`@J(Mmv|;26Gu@jPCd05*rt_PFl2UOWEy^4LfF;Nc{H{^nrisytf($pVEsv%WPI(K+aokjZh$9ccA&!PwLT$ig4TrZ0E^BUk2V*jlsaAP~Kcke!ALRSIaWil46WO5WZhR%enn2#u~8q z(f4zuwjJR$TdBT-CH``Y(U&8U;6g2i(iK-V|}Yb%#I) z-JGn=B(wP1Am|oxd`*|S5O|U$ZYdQFlC@9E%fqEVRQJJSU@mw9c(APG-c?33r%A=1k0-~*T#Ev59{SJzzN#PH zCT>9O*45>&8X|MuVEN{V?hE$zpOQ++6t@3cLh~DO& z5M@~riK+d#nw;{@jPoFvsz$Z~;Uhh@?F-VL;qY$$rH1_Nd-H(3ZEsJ)u4LCA9!sE( zkZ6bGWTX8c5Cqa($fC`Xv@9VxibDP7Z1Vl5t7p|jG;2PB2y&@^{Wn8;L2x_)=Fi7p z^9&n;4|7sn#%dG!v?j)~%?^?(FX2wVrvw^)e~d5I4B+btpfu91RQBchbdIY$l#fu)R-M`=_W{{9DxN=Q-GfeW4x z$8)*258B0e-#M?@lr^P-6p+bP0F!S?K@@hyTP7yIK8S013nY%q<{GU9du}^{uiFYS zLPq;Qp@DHoO5UJaUcau>8!M5BFL^qMkhM&Y#}YAfT{2DXCoha>chb_Ur0gVtBphFK9VCDZCErs-tT@yaZv?2}r+~5o8)hxP$!k zuI|+iLJltIx`?cXNqBY9>EP)r*>S+`{e-;rfR``@J>A zDw?^Tefj$fUUJeNQI)UyAn+p51~T_yya%6#LvYkN%N=8{R{u{H;(OF!vPSLcy@+Q& zCc=w*-b?)qVJ@7nOtC5!xrMo7(9w%EdZ)Q3Nm#m7w2Vk*5?-AiQ{QB~<)Yy?9P6+e zaZ-9Bxskh-z(VmHM6&TzM2oI9mQBokgNTS1?-)%6cCxW*9EgCJA}E$NI?sh{iJXBh z^J?%@XK~UGwX~J}za3|e-wwY+VyTC%1~J|AidXvN486~$&q@(XD(jmG2D4bm*>EL8?`>I-cMT3AQDj9xTzly^y%SXgNnH9hm+@Y1 ziqzl1`Ch@#FQC*Wy~6MjA!z%6S>qIMvdUy!=IFya!x9%^kYD`LpSXt1GJ?tG*Lfof zO&=oDx-wo{=Ba};de_R#h?UU~GEh?y;?a+9_$bu;5DHdRR|8qD;LlCeZ(d&BLW7iGIc zw9h9GR%dYM>UPBr##Ao=e zG*H3s$u?ydAZE=3=8uu>I58cQ7BUJ@l2IS6QK9X*oKoT-*CF2Yg^XH$uji{K`uvv# zDcMdj`1*p1vJCokhJd|+D8rxo~9=F#ArF`dykQ{sw50hmJ->IU)=B1P$x3#j5gREvv z_6Z#W@y57`^5iBDo>5Z>%k`qn4_?^RkMe~3@#q&Bd4lphi3WsDNsWe_!mwP(>qXdr z#g(Z_F+tW<#VQ-4xe3CNJh=vmPTm(~X?=F3h|G5{hZH8DZ_r}0DAX1}emj`$T=dSD zPrs?-Fz?yyLhDP8SvOBFw|6jZlWK$J}qlJCZ zjQY0}`0saMJ`;F|xMt|aB*=+V=k30xW3%tD`lBZtF%?lQ>L@#pJvP%5-D@-wxZohi z7i7Hz#&U{kTdcNKM_;6&v?B-`+>4V(%Z55LRZ6nkoFx;jB5ai z>Pl$1v^gz{qSn1EKvu}0c-Tr-j>wN*d<9PM(nNklZ-K3p8ho$89>2A-=xt>MrreAO zhWz@YRta&N7)F?yr1v5W{F7#VW7!S?qYiu&7SXRlB?#26t2DC}L}UmnYnj97OO1h- z)!VK1or)`-Scan7eput-+YqPxLOuGT+&Zp-3XlH(~v^0jHi zs5V%Q!I*97G^s0}#VCcLBd8Aj~%; z`!~iC!J7&lA|>*lKrIn9_MR;%xNT*|Lq6P>Ta(l)@y=bAdhB zoCcxc)sVQ81zruBu(Xd3=S3IJlH9qcFuU*upCyG#a80`ls>5g=a--A9?gcwkPSqeX zGt)3u)N_5Q&;|3uthTS?DCn^(>0uFw;b;J5BSy1s7n8AkLyR?}U5VFNOiibWGABNs zt*`AqV`)2$7p!022bPiZMBPLj*Z^Y&*((gAAgZdwzUPGH*F|$a<{o#Pm8N{SU~;bP zHKBHq{-XF%nyTlXdQyxXC~gO^mu=4R`2i&VvyjbF-BQhYymK*) zb9UFbhkk(f2v*EJ7Bn5~xsjPTNBIub4(UxsDz(rk(WnD?-avBXKAsbsxzd4E`@_|6 zE4G%W*-%kxl^u`dbo3FQ;?<@wFXAWaH;WIw$zbI!E^;otm%5C)?&uPHd>~8eyO;WC zvuz{=zlsv#$$M`2!<9FSF(O273ORB3*Hgopy2e+tMJMXLYO&K3qedla?}{SAbZHJ(Bj(1x zY*pZurL0BEBDvkxa=P$N)xPVg$r5&A`|6LAZ?!KQD?RExzHYyHEjiT-+}$lKmT#SA ztBjT!}*j>2v5%CqL91fYyt_V_EJE=R)5Ds-kw>|@aKC~^zsNRN|g1< z&RZXTe%4W-oWQU~9Gq0RLc^016PuQfGpkiS48ovwT}?F=ALKzB7HT9!7JvVo&zmZU zkdb&dP2uyooe%^;Vk zvPzk_dNxkWNY6IY z?k_R!;arfjn9_pWDPw}OeHzvfO+15Iw+#{XOxLtXW{J>T2?dVy)G2Oxt_7WpUSG$e z%L_*3Yznt-7r12|>6vx)eiYXNs7=QTwbtpFC4Ki4rMv1}8I182I=ipv9GDP>IeS3M<&-(q(FWs`&oi^fa;(qERDLOSL6Czot*a7vV@SKq!@*yyF#UR#}ND- zZO&XS)fk7A+AxBHM+wAnUm2+i;{=sLEFxURx*Unl1*gxo^L*8y#!-l`u&{e+u+?$A zTp%#Xc25}MAzn0 zkGwWcx?}@3C?=a2t@7xYyfa@xtT|wyHd!a+`Uqu_l?GE_jBUZ^n{d?==d-PJnTm8i z#gLtI1N*mteTCivna?fKA){~j6&rFQK>PgEn>z3U&z1h`L&=@)CJmq(zR({#n{ZmKt!lg(%uFY@wewW6?3-R#4H~zV>uSjBA z>A0zOn%`EXBlg)Dxl=)(8o_i^Rg62}>1fAofe!{+gLuKjz5&%p4G0}0J5wT}r7K<^ zU5j^^Q{aA`@9%XqLv$MS0-f3U;xaDBNn8>hur*4s8+8qt*N1VCobDhh3-i(am45(v z2T?GDeuA25BO(?3&6mhGg7gPLAebKT_Tz|AVt9X7vK4E4lS!hzu+e`5@9!&6uAI?J ztd^q6jKu_?GUI$83~0#>qGoJrH`l9pJ=-3}F`GaFmN+|<70}N4`CxKf1z^g=tVNbk zErr!=rbn28#QOQVf-dniepL3|m>Ru~vZLjWTu$c8lR_EW%`J$pFqbt?Wg{5Dv{R=0 z*cl;8GTq=^!)$Lc8HUxX;|$n@uUu6{rDxF{6$vHU8aUtgN!%}M3_;OF!0i>-(M&Mv zv2GMJKV+8Xbf8((>uKf*w6VxSvMv>ie632XOV@h>Ok-jS$zWSJA`f=ZoWKeXC|(TH z$XU%(;6l&|)fMKPbJCJ!$D}kx0i24>KsGt9Prp1(>H+$eWW?GN8f32MCAop;5t1+D z0!z?mO#U#nKa~yQN3mj$HZF!$Qj^Ue2)I|v8(I`y3xH?$0-`BS)*v*;_}9iLF_V7Q zW{a7(3J1{b-#}8N)y2^9y6`qZf94BEf6A*Mcpnn-jA9}>5fi*jbPIi(td$(|omk%-6H&V2`IGx~p zdhPD-o1ulj-&LhU(fx+vSv)|ojDCPvXDm|U*igK49_^&y!3ek2Hef$pi;;u6zd!Iy zmEg>UPk^}FTL2Xq-wgmDkF=bnMxN3T8kb-!y@cE_GL@3Ep{3vX5_mRhkTMhDkA*yr z?@l<)#B};3BQI9MMdBdUV8n{=Ej6+)t^8y{{P}}T%NywdWJ>8nFSD9o@{djeIK9dl z(JWF#9|T_2z)UcnW2-El`WJKZ2pwKMhSKE)qGBqzQjdIlOcnnQmXxmq;8X?0nbD++ zhOW$&aR<2YSCLOmWx!Dt8$zE$6M6l1KV|@dd)1Rwog?G)n6V|CR#Yo-97oSX z;~n8)nHD*MA3^-2smZ!Y=yvF0Lg3%jew3?O*d4=qsw)r@+ht><@r1(M3(&UTx7!f`{v{A-=_oaA&&j z=%Y|Xm$PZIr4UXmfSo79*p{ZNW3T7B5Ka&W5fsb_hWb2~<1Djl<6`8oT-Fd~1p2Z< z+m-*!xEkV_yui`uK@2H?Qq}k&+%)p)s%_~Cg#BYFxMVR&M&DR^tb#w5H9lTka9cKH zxUwyU-72;UQKAds`{ii^M<`OWhr`S^SCt}G5a~>d7rBiTB+W9zFuIHeJnS(;l`cFL zPc|5C(+#p|QxV*8u5hoQGDE=kRovT6G}$&M)>w!z8lh!3a)}-JTHvog(25=Dk-`kO zMje5vD5k=ZPFjI84Bn9LCQAp9)l)Laslvam>oWsl`W$e#R;qEL&x)9TxpKhJh8IlF zRnb86?kpOV)V%Z`1{|3s*wLvg?hlK)6(aS`6}kt?rJmC$s@+ zpf{Gxv`x2=76`}|>hDnVED6Xcp{8_un`lC3^N9HPG7HP#^-~Nb0 zM3J6cPvG+xo%E)k`z|Y_6&vkmfewR46CXE_QnCcwE3UQyXx!rz@Qsd&dbYA$K7Gcg z?!)59N(Vb3%6P*5fvHE0BzCp~8-i@bT;1`!mW3?6#@daKaB=aaG<7V2PlQN_jxOl{ z(PmMfcr%bHc(lN_dTwG=WO}+KErokogT1X&atmWBu%Uhg%aLmiFm6pGPqh(J7YW0NJIYq^mmVp55kb#&u8EukrFDxpFX+cQ*_{QB2j(yfyzB*!da9C z%#GaYS~I5q4=_N_zfI~d7aRs$#LBo~r)VWV<3~oR-D3|wuj3vHRrsqA226LA=B25e zRx-=LW@HP!{o`s6a7vNrnq8=kPExRnDWc8NXK+8-Hf8NZp@lO478hj85*xMj)>p%^ zWh0zGh?q^*{;<)y@t!Koq#zt>nkjd`1y*$1?sRZNK+R_vV4L<^$@zf% zYcBRsow_|+{P!usJz2$=nn~FX70R)jCOG(^{|r$X>F07}ec<^X(4uh?5W*TkS_E)7 zIpqiwR#U5#si+ZiAX!;o#&Slu`#9y;=w+noL zuX2J3BFp{iqa(N4L?FTElkp&Zc1Il6?RpqHO%}et(_MQw*9|Mn^{%rhgMpfpY@O`msfHxG#G&M z%T?(O%z(#cQ)fXmtuwh#iSaaoRv9s)0s&+mijcvm|G0mQzSU=7ziY%J33`limKRBy zO<&loa++7?nOyp-+emZr$<=`(OkY!}d9guk3HpsC6*Ybh7OyY}kV~>Og|@0*3Elgt zK*{KeUv5)-wj62SCNt*=2MKyiYs|@DRcs zN54gdEMpK5YG-{RbAiLz@J%SJYCfJ06r_ozX_6u<2i+s0SmgIXwTGFUtGhO7hb^=pgYI0pL^rTHrs5|rt!9NaQ&#UgY zGBzJbf;(yhONrg?ANViJkJ&qTDbS^m@a%5kPE2~7C?w{1T1T^7<`Tgo3d$h-e6D4< zVl#;iQ8!U1l@hZuP+x1$#j6;N zP1b1Vl)#5h2Qp|NLzG(ZR>ji7mw(8U_7J9%Vx_#KEv|qh7Kde)18SSpgDYO7Q<2muL9l7 zfAWY_E}F5EQCRm`{2KA{c^gs#^l;Ot|7g?UEqOK! zL6+-L6nVN6An`z@C`DTCD2~%4S#Ok~kpe9#CS(^ikif3l-M_%&8xS&(?Ksk0z_ydv zmH$cT*ZrMo#xg|QGW+z4kpR0dnA5SM;QKKsb>!v+p!tLb%NKfu{FW~HH^HQ>2ZtOk zuG3<*xIx=+GcUr;&-3SCz;^v>xD%<^O~8eXvI!c9Z&%iR))s2dWL_E|cn%8qHG7rN zVR-#dw2+n+^aInleM-wDTYEClVQBIOr-M3hDk2g0!)W4~h_1_j_bQq?B;Xb>k30y- zZwBeK;xNYHlr)=?Ssb=D>Bt3TW5>LZenZ0#jUz?L*U?Tj^Hc<^p%g+fApkIBe_Kqbl*Se4mwb+#Y3KR% z?TakW2;|cq=-f7B<62AyZyYG$4Z4~BNOVpQ)9OPE0(pWWks~GqQtA{c4W66@)CQ7_ zLY=pa1aQuq*?EGE)7MlV=YLsvA+k4?GrvX7xVxE_tInV)Tq27H9Yw49PE0G4<;4dG zW36w>W8`)XS8X{UJ8(;{XLgKumzd(%;bqB_S0$exew?fIGE%jw-7h(0hV3$!%Za=c zF20d4*$_U&&JX-59*AQpDCv_t|5uj$W{@b>J_~f}l-7CA61CU{BZ%!H z4w`3R5s(uafVgss(pGYm)JiYvJyd-xl$$u$w#_*f%dFB8nzR-pxurf5eeZJ>t6xQr z5yB=)ZusO$egp}U{7HHl92-|l@jGJZkl^I8%#H2Of=m*1-TdBO0cYFOL2h6anb@nb zl^)pT24b69xj&aFPar^SYnZXrDKDS1H&G@i$Nxj-Pv5zH#w^`R)zc~EGU~v+yDa@5 z+>F8jP_#(6?j76jwzq5;%iALxsMwvYXbO8sia{NxJDY6is%>3oBgh^Vk#UcDs%?)g zn$rt{i_g_!PrIuRO_EoDY;ajZ76{Bbs0Pkr9ZpS{DSxBzr#IY0uBMzequ4Z+Aj27G z%(+T`#BGx+f~U%-h;d@Kq|*cyDI3)XbOPYj%s3Jh_?pT%d;yH0tW{oAsfl2+c|;fp zdx}Y&X_##$`^@tKMl=8b0000000000000000003hZ+A?{sZ8Cnx(F{@d$*p`Cjcvf zJ!I72%avu^z-6*^l@AV%IlleD;F;*6b2ICqr`2WlDH6@UTrahYUTa~m3gZ?$n===A zZ6iPjYu!(*!9>giiZI_qe4t}g6E5*Gauw&1vbiTlO_28bj+!vtM&eYT-xdu8li~8N z!W4B#_tGH}jy~lM^MiEM>x>rRA&i#o^XzE!v(}G)U?VNIS`mp`cgdF-=mnM6W4)i0 z0^i??DSYdv8p3fw;`{@vB2ZP0%#ppm670Z3#E%#1Mj`(O7y5KJ^Fe|C9k8^ z>2S>*+Re6LfY3Y+RUBv&D`@1A?%W05?eczU#VzY*y5m>!5$fz_Iud%ug_A8sz;y6* zm{SqjncU@nJcAXl9GRpgK;Z zLf$MNk);077H%nKcW&m4?#Js0QV(3eC4XVBA%8@UzDL$@1%82t+9 zN0H#StD}Dgt36_D*KKA#`nLLPMQD`*(Z1x}w}K@{yWp9eG-@`KAN1{V`3XCAkBnz{ zC(24PmOPoZ?4YkIu;AQNBJ1W_meJ#sEqUm5S8udQuRV z;&Rm=#{*sVDewPDPhz#vkr4LbehBl?a`Qqxm>T=?dQ4>Df@|&`CRiIS;(xfS=);ez zPVMc8v!{E5{z&WgYf6-JposYvnvX}&g$RqAhP4^M3uDiO_Ri-?>}u^w-WbP2YcUf zNpDa=Lt^Q3Rhn@N{Z)UjU z*CA>)=AloU_pNjW1QKCFChV-;37sV#d%stY9#1I>VJPBJF-n8`W$L)cr@dJD(kqb zGxVm%%nlLf)Vxz>nARSVWmL0VgSA%c^*!SLXL{BQlLptgEt3r4(S-jz1FRtVNIa7Iv$%`%<1TYB@C(6sq z+~0f*Vpdh0b3a4M*;SSB`hIi85U07>1EXT!a2JnpFDK0HMddY4`c*c_y#h3;cw}9E96?nn>S=*w4scVj^-o^Kohz}|?Q}tyqf&DtgXkCv zO7>$bv>9s$0(R9=Vxe6zJA}AN2@pVAX6ltXYSZi2ie>7YEGQIYD_bZEaQTXgb6pi$ za6l3mviWZKd{q?i<=v8v(WIQ^-YNjB>LDK|k5jc?S`(d}kxw|Oh`lDK$a zB61v`!M5u<3@U0A=bxdoXa74rJe(g#l{Pj2Bxm0MDA3|SY7m60bfw>u>>e@6k$P@& z&dhh0yw!(bK37+d?x~n;Hq*)Bs&Z&p*(9~FhL{A&Rajli&2GyM%IIIG%ywq^w1D}pu(p(2prvCADs)I6Cv@KHY`o^OayR(b0>Q#R;grA?zP|ft zXC6XN9x~u%&_Oa_mm}YU>s`bxY!-iTm6OW0Gpwyq9`8WPqWBK{2IjhOv4!`mM-IW( znJAyR6FuJiE61FF!xm^Sblh#gj|kAUloETWE-u6Ctx7d^d5RquX>nvaYsYKy%A=eH zx0>}B3e5)hCiX!E=t*}m<}<3PScH(HS|*~{UAMi#-qFH1t!jRX-&utX=*Puh=-I(q z84zl)uBK>@L+PE-9j%@J4+ezQG98Cv_x`!X^#%^G<8jy-2jn%cO-lcJXb=uHOZOx*3!TGWmu@}o- z#feI=!~G~ZdNpxcnLsu2gJ>k`#9oL_x6lJ4^o*Rw!>u82#67bc7kXBoV&t#sKl&UZ z644c>u-RSSxS4UL=CQ1idhuk}j5tKn zndW;qfC-93={MxG|xc&F@ zrX#~w*Q-7d$MuzyUgcxt%wYNl$nlBK%m zp~Zf09I-!nwaP7<{td1mo>o;I~T5XE|%3dv|-9qd|uydX8WF7MNQCR*BA!j*ba%bk*ilsc__dd_y<)3 zrloXxKCUq8+Tt~PI^i@ui_9KyhH)-#jy)&wrA&vlp~aNSdBn7U9$1Yw-QMm7ot*FE zEJ3;V+(|dk#VkC}h7-G@V}k>V)Pf9$s9;t*E^`PKf_vn5*?V8hgbEEuN8qPE0Tkxb zO0h(TU3mV(TSkf81x+Y#|jv1sRprW zZSGG!FI@UBe{>UdeLV{`iTNj~5+57`eZI~ZoyguMQmC{ckdlB52Idm&+BP!2&W$w9 zf>lq^gBSFf=g!CN{(8Ta>4n6Y7VON%gsFOhaU{euM0OZa01}0?Ia$%)kiT?)MBNr9 zuF}v3EueXL7;|T6L?a_O&r!c?E8lk&$YoTgrd);IdsYR3^2yISPIfyBCl$8EIzoU5 zI++WsC0gu4?2}aVWyZVJ>Qmm7+YeJ2utfg&eLa-0jVnh|Sr?3E;{3yJHQ^Nv=i6{{ zZslD$?0x$gGu`TY$4Jc8^_~EVwhvw~>RftkvaS@Ka|9-`6IRc1Aod6^~0o@ywM3t0O{aZzrmqGDZz0FlRZ=d2-O@w<_%d2u1kqrLx^~r`)Crf+R$u>YA}al6zcg z%Am3DO`5p{ETSdYVMG8sxvMws0_!v*fyS!3IcZ7vUA^S)JDUC^9`l&S&0<>@{wmotS9sYff}^;S zZ5~VNm`t|qbU|)|r9wGX6ki=>|0+Ub&xQT;>xZ`j)1ts*UYhO~k1cQ&PH&RI_)gm2 zc)esZ9+iYglTZE*WYVP4l#aJ@Z;^tu9y(8{Bgm>Q<9I}^krhnF^z|20PjS2F;JHo1 z>ww0BH4v(Yq6Ek+unOi?(&Dl?Z8~!b$xdeVHsNX^RqkL5+}Fb33a7LV&tO@n2%?o8=esz0iFSPMVVs3 z8EcRJVPpf_^l?!8=-hiLWv^3d4t?&H#VG4Vd&XlH5}0Db4jvl(3qB69ZrNcM4>^Th zdt7KN)+hB*)fH$s3mgJ7Q^)L5&C@;ZmWsC$s8KEz9aW7eU0nN;FTGJYvac&#_wDyi z54MfX0Hp<}+jps5Re_I&pQIUSChlJJ& z-FRHuQww2O1Koi=>y2K{`=h+H<{b~dWJW8n{L_IS{x@Ug#6hIgP*}I}_atz9>1G@d zx5X4jopx>yoIR+X4dFT3wD#KJ3qj)PBQEn&2CDTSrv*fEU60KAEKfPg&k>S~c9HIs zZJmzkz}dYoz7tJi0wx&A>ZR-6{sA=IPhPz`BrQ*)zntbBXEI(EH zR3^5~eu|B%D(kUDZQ#pgSWSR9)}K`j{e)fDby?0ALkO6k2lDurW9@dcWmDszfn98k zgLfbl2&F8f)H<$=M;R&h&G|dvB7}gDk#Jba^0uT;fIG{JFVLbhZ21 zWb;1~#6mpn$^kvQhX45y(@zne(*@N5X(e-6P)1`cHr5rOFq)#id&q~lk+W&gZum8> zTtZ^E%+r%sTe2opsyllQOV}yTt*`#rw(mYk&izRm-V)tF|0xwvIFBMe=;pPTd z3SzyW{B+QeJSQEHm>95wL!R*Y3<**0)1SIM_@Idnp)Lv$LgkK=oD)s3JAt9uf_0xSbbvAY~+o>nuj zk?_63fKq=aNyvLyXtLRrw{{y^2;g_}2Kk}9lO#gE&B>91YmTwh(%BW4Ga9xq0uv2-=noMYt%dIBxIQw8wK8 zRRMa%vE?~@=}GIv{ZV_1ANh{P6PLd$+v}KO3&0bw0KBG{?;9Wi1Ux7-S(V-}@#JV{ zahLO<46gZmu2PMa$^r~~4GmNF_&_c7=qjw3qmv28R%>(n z)yI1|2qcXgLZIPCxYijCjg%>S{~;eO(dEEOyH`h%b4JZ@WuB`6K>9P@mjNMPZElhl zmNmI=(_2uR2jY9=N4-9(CO`ed<<<&DnSI zO3ZQ_4T$90Yk7B9#cz#!Gnvq5wkn9RyEBFg>PKy6s6<5Ap3sJy>&sTsmL%T&Eli#l za7!jEvu{XdAlvqC#jMU(|0~(<>%*Sn0vpY2HqSv5{bjPE=y6}qSwI{NK@As@#4y)@ z%cS#J!3477gpa}62lWZSGAYm2&vIxz)*e!KggJ~pm4IE~&)eGxr!G)6u6 zDNG6iy@qwGbVPuGEFy6ZU6GuoiIHpex60OG@plI@QEIt<4n$=ej=qsbu@ycb6Z#ka zrAMVV3fI0ugc{i^PsAGlV2i*m<@pn5K~ym~=Vvz6hPe*9P#^S%Ik;=yOhk5Xy4z|M z241O)by%St2o%B$$Pt+{_{%S$5&wPOs0>I4pvvtUP*&)3NlPp$=|ugi0Ca|wd!?>y z#hw^fL0pLgmq~2RC88C75fb_MWw_Oj@KYUcy2eLIaPYpNsn5`@a&B+eJEMA;Oi7hX z@-ipC4r!H!H6kt{JH2;+Dhz1FC$Y@tABEH6sCw)OPaZZOx@xpkI|@KxzD`F}96?kR z}s+_?IKJ|xagog`f{1VACiRFqLEQX#3+OgE>K0gwhyW2mXNsRQ>?cm=Z zQw)+25_t%$$`^+v=h~te0G(3oJ@#_lRH9Ebq5XKf2&p`=VVKm}07`p`MBI^W*Ri;L z?sA_uMschP9nwIWnztsH$A^Zg79Z4pwFBO7#+tt~h_BVn&gs-P| zn3p|Y0hCh+O(K%9;9y~@EYSM^osqq5K^RP`ILJ>lv!Lvh>{?M><`mZyYt{y|Y30}~-k4$dy8}EFV(WUbwW547Un)}yr z$kC&aH_Y6e5$FcfCHaDjxfqYSmA2`_60%J3PYT4hjkINBi_yc@H%<@L7gig%AUcJA zTiIwb-f)J=m5Op$zjZAqC|n9xSWwdsW^ZQ@^6q(hPq-sz`2aw={Td3Hj$#oCXKj4v zV5-?U0m5K$jFr;AiqoONhlvs1iHr)p7-BqJV8v$q#YQ&|{&|ZQz?1-OQDz*VZfnbjV40B9xi)#XA(DHho5g34!y%RFb2sQRQCj5<^7PEzm25{y zw@EL^@XOgzVrcjX`SdxjI?kgBHD^oncCeH-eE@`_7sRH#AM0MZg|T@JU$gAnY)^8X zdeOimoZVpXa5Ql1R?4WVk!HG{Yw1Wb%+9!LGx3?LhO5MCGSd9H{|ooIN7ts1x|>yO zZi@@&632hYEpFMfNZ|)`$iw&!PNbHt5G;ypQxEo3;9|Zp0w~5$0ey9S0<$e&HcVu= zFQ`|6U_1s4LrOQgAITP4zz^(IDbvk-PYYI&Bt@HhsX%^lO-A~GvC^Q>S> zE1371)ZGjg(VA2>RaK1PqEf!(TNU>T|AL;A0g;^!UAcV^4|Ouq%C7V$d7Gf$_B zCpj}t!FEMR7CDhUw(;19gEEO=kg!<-eY*U*u8x+Lmlj*IZi!qL)hLr&W9$QX@)F3X zS6}<8ZZK$&ID^_hy@hR$elcv5o?I~A<%a1BZwRUqjLjsUyZ^YWBHQ>WfO6Va9JQy5 zheohCeTR2@#s&`^!X}k^v5Nukf-YQrl(}f;dM`vakg60|eF2Ewr7!uuO z6|F9K>@X>pvlk>2Y(``Rw&zy^JZ3Y2fab*7{vC1YUBz{|o6Gj`BP?(;71%Iv1Pd6R z=Oo3sBs1?VdL9&-kW2C7%}ak$sXoITS26V9i3CRP>F4j+q#L_-r(1IRpoBtK%Nym(!jg{zX>+< z)Wh2_jiB`fFmBZt`AD%*O?u5L4Xm#>BeA*XaUu(n4f+ZDlP}RcYho|_v8&+ow}70M z6ofrAiCk&sP6^~yt+6w>3~ z!t1y|L+{r{ci}5>Ehb`4=UoU{uJozJfN@=Ns72C`FK*T-Fn5VEDwL+1*?UooR13pEv z#*moDG_##5K!M*+l1pI`$!h%ZqloQlB2%*8j9+A(>D;q*_PJ+aVZx}>*b`+(MwyPWO5kfxF!}<_ zpGE0y^(D-K#t-$kbEL>=@{2?7zGdXbwe=bKN5gI0T8|Lh_nWpQ1C2dRL1D2%qxy8#M3 z2}A(TUeuv})LQ<5%dq8w5^n{HCi)<{ru__?eizZ~D&;k$mR6QCaS$`WMmO@>+Clt5 z3f9gp73wz13{c`9963*9YOdkM%BZ%(TMH^|VMspU_&X^c-LYi~Vr1Ao?(~6|Q0BGy z5BU^>gI}vW67H_GDfz34K4;_%ffg@_;(D4mfjyd5xrGwET^_$_JFU&3dfdWA(f%w; zt47p;lS<-jmP!~{v^8*#!$4tgr~ZaH7YVlLN<^Zz*lW2G_26jL3 zcLN5WwoT5JYjPYE)`p(ye{ zbkr;?U**_{GOtGdxRFy+z!&r`QZSrj_8FNOW26&5Rdb$+0zd0ZW9xLPj!cWZ%35Io z;gbvEcpK~e8uNbh8fX(m=ba|+hwOlkWEnZHI%pgYz3*(&c&s1h@Vb7Qbg>ng5|x}~ zN7)iP*0bv@P6Tdi&-~GjGeadKd>d zGb7CFlE74o8!@9{P=UPE3t4b8ty7!01oI5_z4|m9jCINzHb@O6xA(BWi09TOBAW_B zwg`4+#zDfiirS&r9%lGK@AHqSVRD(E$6{leC5pXU2kQ`OXJq?{lA_fPf%(|d4w+FS zphoBsA%7aiv8g~RSW3^}r^78y5`&vH*XV!Utt}_z_!dOTtG0;m-gl+{DeoPzYPxEh zJnueY<^LJ9F?JbCrrEVq{8~+}jPe(n>o3R)j&(P=C)})Ml9GaLmm|7v0AgG>7dr_u z)fBx$Y?^KgYlFL0X>R-(d>iVFF3!u~18b$uWgYnw0x3%qOhi+_vj%yWf{CSLm!`of zGF_Bb9Wajl=XziA)THCl3Cx^?2(18TzKw%CbbC3atS%SyTAtjZJw)ty=1AkvNKVLR zJvDoWND4dOLDf8a!Uk^shL|1bxKJEBZBRbME&aAMdg#R0RfE^=z73 zwf#U!{4_tWe0&SMOJ}C`C$V>^bWv%54Jamk-PZ?KXaWZKPO0?BUUgeFC}!JnN^co{ z-IaSTgBl>1t{oe^qLXNZVwhdYMVM|()Ww5G+}xp~(!cYkyq+P%af~kT_9L3~Q`LGx z&jP^7F?reZ=T|4bN5=CxV*HknaGY(woV_CLA6?JUry|40S!N8)4YQdM0FeB9_}l); zcgMBHfW1Bek$tVoCdQ;!^4+8qpNlht5Hoq!IHi^>7fhv}*lS5QvOp9}sB#^Y@b3<& zrre$nSfRyFKaBculb9@ldDH&&dSr>xQXO)=Pdu1Me46BT@nK{X#kB}d zH-+Z?_8=ww7PN68TGi2Y`$DK?MLmEpaI0yYKLjxF6L!cUL1O*IO6R7d_e?jQs}K4r z;U+2I35eHy+3`I;@PGJTYdZ{=L1zE24o=$$BP?mT|Hb4l%)YU1m&)+I%<+}J6`O1t z&mDA0=%P1fFZPkE^r~OM~K@&?}V*n&|my>Z)-~+9GKJ+ zA}6%??W{BZ;u1zSb4o8)+_UZ=g(}!}P$^=NFY2+o?xuv!1wk z?i$iaATI3}2k0TS7XMQ-wObladlRj1Ge-p^+?EfqZqn?k4m3x^2o>oq$BS)`z@N7r zu*)2T{`^HMb=};JUzy&9H0T_dr}5RTd2kbBuZ4vEG*?7rYs7H|Zxfmlvoz8sU4r(C z&e|hSYXU~zO*406&0M51s^TV~2@OE66FIyd&!?+BkG(Avwhvp)SB}!EblJH=1uKFA^QnMi6VpDRWDg*?6O4IAxovTt8j$36tT=Bqzzn;LZ_V}he*#G!`K?V zvl)XwvqY@_6++}kk2}ARI;uR*ZFrT5_ zQG{9}2QV0S5!jy4)Ci6(RUH`l+wcll_NSYE`rV=-m;{ZRdrp_rLHE{D$E? z4G5r09?pvu5ZW{b$2yv66gi5=QC4fcG-(UM-caMU{ouLQld9?5=8SlPZ9Bk&SP%{i zoH$lkrqCp5ryQY^4FX()KOE{~&d-|3nk76LuJ>x|ExYbeCL+;c{E)qEC|!%)xyyQy zfXtg*yMr+tvFfv7BN00J;E0e)%%;f92eKM9Srwq2mO(;MhWe| zB$wnyz#@`EV)O&xw)MsGN}!abL5r4F3H>`WXYANw90QmKg%G`9Ye-{w4R*)= z_v;x-jPO5Cc4Lf)mK+hy9G0e`F-RH!j!Pi+W6$1*OSmk#4z{qghy3Z9w-fKC8y~ho z5gsK;5`V*HP`+*HcVq-SZsXaSS`sCW0KCu}BA{iC&DUeL%@h@F_+hOW_0T3{UV+*y zHD$f+j5+6?L#d=w@!dRQ?$$~E-+*OUR-5V|m(T#zfC%(FS;4ru!c1cxeQqrNB|o%Ek&XXbgE+v?%Tb_o`1E3{oMl~C_LU}!JY5ml}a*vE-jCXRDOt4wf_Nh&9 z3{Qsq9KSTWVyW?_qODJ8AAUEGePgSExEHiZI-00Ft@;|%f#A!^tHMXyGDU%S%b78= z6<%r?M@c>o3Rjg!NnyZ95l4S>S{4!u72k6{cV8=yaBGox0iEr+T?@X{DQroQ%5=f& zZR1x+LRa*eMu^ebc?Uo3i{kOu!Dv6YXZl++XWTvLEqjIyXgnL|afDpRbaR@+$!@zu z#A+V7j^@}{3{du{4#B*VL<2~70kBBEN}__Cfrig%_+X-&T#~k zamz#knJb>@dvI(TvAwgqalbJZi`UGexD3{5(np)GJWe#A>z7(>kJ0De5X`QF&6~-P zZKyrv*C{>h`>e(-NbefA4BX~|3hdD}D0Jd;vF1cW&be^3XRt_0Q2>P{-FtYNgd~vM zA!2>(PZVEHp%o=0rqu~4PSu#D;iM$AI4SxiLJhls?FD{5SdvZxo4 z$L_73w0Y!rt(&HcQr8Le9Aj((~RjR@OE~kyZMHj!q&@;MJ zF&gKkYZo^ZryRA(Tb}B=()Z9OL@_FjF(j^|S33K-OtJ&7pM(A6#&Ka59Zao~#$7kH zR6n1iBeuuU=s@P)jmO{yifSbg?OON+_Ht0f>*2YMW^)#6oiOgS;@#`AOlB3wGHd|r zm~4fY8|tAG>d(M(B%5TtJ5~(R(`0SKK9X`xdw!JAh4Uo&5W=?Suxo%L~zQVccPV zeSjSSKSlej8O)yTSmUi?E`O#_Apw||C?{zAa@+vHJC{qWn; zEg|R*n}znS9;{U4&NwqN2nEt%=?QI;3i*d?#Go$QM8YX_@S;lf`M7WXyEJ5>W7*3w zhAG0)CBpzr4;Qw(XJQ?*8_ZUzo?0WBTRp{eZeEAnqQZI+gb(`Ei-Q6-Z`WLm7I6Q2%h;MfhOK#35P?6Ui4ynqoT z%xR`Bu&U&%7~DLodqgN{o1rRP@^tL4+o-w7_Xd zleyPI7I@JqA)x{RMqcg^CV7WJtf$dw3L?tUMe}ssVq2Rk>Zww9EKNrj{p$9TKXi!25WF(bi7VG({&A}Ws=E(4B zP95Ex7jT;uf*X5aSH1zj#9!1_tXqsJ%a+i3FO8dAAl*>i^(oiCs$Osi75+}ft21w9 zY{&1&O=P464qJgH2Awq@ftge~$G6VHoOb|lQS~QD1KB6h*^F;n7;of2M-$s-1t` zjhMr&)?Cz3|5{RJz#o>bENA2w)VQaSPOtbpz;El$|D5cDo8b%NVPZ;)K|lWviq>=& z1{^|)Bwgp`h|*nd=Kw~00K@Xl<_8<=X)|5S#YPoj-}v@U%jYt7w3`CgD@KZ;GXkTmyKavC!$2<9jb zx>C84+8bOq-z)QWPFj&UU6rT9*SQeAs9}@oCj4~};>QA514{70fnnH;{7NOZ0*CBQ zv_MbSk#Swt37!wneROfC^M$+>X>hfD+M$q$BKiX@}K7Uo?nKkne|z!d?eW@*19OVxw>3ECME1dlp(XfLDO|Voda}mfCEH z;cxKB8$S#OL$mLnkJvL*t*^F6D#8{uorPrH^{d$LyhUJzIE;9k%=}(On*$G1 zXM|;zqioRMSO%Z?)Vw6d`mn4L;JtI`xE&YvUxD8D6^!qw3=u8Lc~kqWZ%OLeZ5HjH zzmCA|3V*%{@uC@IjymeNb6P|KBY%J|tpcSSsN61(@*?Okc+;uaUD>T3?~=mj;E%ni z<8OrkSH;1}9@f%_WiF=a+Yhhdud;UXnUk_>(S}--EX=I|vRTxodD zFHPa(r@|f@!T3hECg-f!7vF9fS}M?HH`ud78D{VKKs70LrR@k^d)+HPysF4Uy>gcs#}Z=Mo~Z?uJL zm}xmi4)$VGtji?=$K?(N{g9kErrvB*Y&$KR)1xeF34jo0fm$?{ERv8v=Hv+D704FD zi@4kguEyYEq<{bqIvV3cuE=aII-#%mT41>JZPMFj)dXuJBQM`KdN`R3I6LT=)7f3b z4RI#NxP?iTz5Wk*h^n~7u*&*h)hfIls zrWNF6V(K!>$&}0^|DjGGyrNqmA~?k{<1ZtfUq(HZMF$mC;4ERs(+M9Ze$(~59T@F5IE47 z^P43*4L1X{%I_y|Y9*_;WR5!P@bAY{g1Mz?J~310ZF&MD9rhJihP zZi)wscHm?kP|s=7EnIuo&9FMYMaMH7q*jvZwwfnuLzRBb#dH&%jhvQb>qqM(hY`7Z z486`*>-z}|QW9-V{wQjRIg2XqLWj|4OaXn2a;hTWt?i+dt5`U%c#(!1X#T%cK?JjQS@f^^Mz%WsfCL4;&2w!<~`~@3d57_9tQpc7XqV zK@yaZav%Tz00000004bhKjfBqKriEE)K+*o1EGDv=?@<)IEr)Z2>*NAtbSQ`B^;&0 z1ku&!MKHvEngGKV=fNra`6V7<|wdFH0YcIiCObn#q%z%1si3}q)rJ)JMDmE>te@G75jBm zVgGrmdFXpTBfAd6?CKr_GoXZyK9Og%^&#kY9ET^kAFtRAc;weRp0e*W=Oh*q_aCx=5kB1h zB<2TJaf>lRlng{Gx3}Ip{Kx@kR)ueGzxq#bo3+AQR!@qKW>DBN?A^cy*{RB^e{x4T zy(PtU>;t>?0i#y`gz*#J0J9c^DFl~!>UXv08jSyYAjBjdZws^=NMx&myq}i$gEpTv zJsqiXfR~QJvHAZ0PJEwUs}&C-Rhf^}Ss+K56;7Lkc;B#xPI08uJJr(FVw+<_bx&&I zmxq~wZF{cwf%CF%>LG-hc>>;jy(Mo3?h36ynlrtYGyy|+b~FY_W2Fb)x=@={OJvKm zJ`C8tR;B$e8$WBBD)09hb_ZA4(kE4|LpUVCx%T5l)h9KUxZ|>85b*jaX0rUeMa0FL~dt&fy2_ks!>fDwb8N7Uy zP2-oTdigMlbw1#Oo9i2AA8(wxUAgERqQ>qi%^;s-s%Ru7F-1rILEt5nbn5ZJO1Uno zY${q$RX%`=_!lh;GasT$^o7Np5T%N-Jr)QAIe7$X5G|L~9GQ%#2vc@?Y@l*R!j|md z!?<;qRd9!sJ?_p$cL`{uR8i9wn^i~mGlpK|el`|@s% zgCbw_zeT&K<=gX*ZJyAL)njL6aJlL0NU|d7a;y5Z0fkgzSLdNnN|=i=8Q3MPL`!|8 zAa*{&R@OBtm_z*2>kQo(#>Y5nz7e^-ANPoV{MhmJ%^%U|D-vwwXc#PDGkA9fOmNHc zCdFOF`kS=Af+<}qi2-s4-ya;k6=l6ghY9c;=eFHoqR1+UM2=^pu-ZWHEfQb_*9?kF zrAVqZvSdu}Dr1%)EEYUq|zL;zBc(7vfJIp>^7PhinCi*smsXtMQ~(13h<@Lp zKRk!jr@HCU0#Ysmk4b6xb5#H83rgd0e%*90j>j?+fO6#NR#^-sShSUJ~GlI*_Bzk5}D*xU&<)JkB>$`hGFMz6e)21Tybt>RD+HMz{AAfK##alL-TZ$u-&0^@a}ZfFpjVBg1`U?Osvx6 z05eFH+RDo3PdI=8=t!G5B$YHfLjK1Z`I&A70JzVq5kDdT4&&ckqUi833Z+@f$t32n<+UcFv{&$s~U2 zp;Tg#(xjKu56~<$Zv?(=WTJAXqW7ozy7F;;REvUrF53l&k;SjpFc<)P1wB3LwRja9 zcK1rN$T;B~%tWOheNwIJDZ?YP2t z4RH6l@b>eVdZb%ps%z7p)J?khV8Bq5f+1h_e6b~?#Gl}gDgt7yJJW{9+-u@lJbqJ3 zQCT!u`q8BERp@U@#c+X$4^-FJ$=1V}ncz{#;Xlm8C8wZN(p=$GuiU^=g1|6BnIC#o z2rj(!XWVO9xX(SV8NnR;LHOe@w>=I~LZ&y@eH%18DuMjR%)!c}DGtW72*zD>}*5D;&i@|BnP$qO(9tzTdi zmje{Xcqfm_Ug{JNi~9s)E*!6IbESB2bN@65_VL+Fhw{}1P}>6ELd(3?kk;$|(QLN$ zE+aYjMwf?+{hXgCAQFiKFf5u48&OKfNpA-42fK}RQ}<`9P1SqwF*U3PI7YOHD&s1b zX?AUqQK^?UvvKi!R4AzwB-0LD4Ga#%XYbzBPqWDg-C|M0&d9w{Eu%LeE!inx$g-IO zx+$qhZ7x{#_sB;fXZE4Bw`^fz6UOXg3is;tuAuT9tqwASx!m_@!m@?wsxEOT)_4ln z*tQsBX^Z*44@#$^b)ha0XxVV!BiF}9vRH!?)z>fxtHwsjMo3a}ZC*!((jh=@#mdV^ z>^=mF9}BX~p<8J@m$PE+kWbNj)L#(G z2Y|Ppa-hF7oX)GhGA#tC+Lpw{&?aZqV21R6TH5Qur&;a|no?s{q@;4C4Wv3mH4YDX zSw(vOY<{-eK<_X@$7+`-j|?qrFVrO-5dE&6tZ->R{ zYck~{1{|$>3am5hulpBxy527VeDhe!Tw&vM0bE*S*2zfMt<}mXRMsAKJs~_rlo~{vT-F9fJxye_(LLZxV^uw&?aWE|!*Vsd*ZA(} z`%T3Ax_>iu4P{MRd5{3(LO`4Z?rYMyHon_yI9m z5o<4c0$#_|XN+!*VtNYON#p<#Jk|4oWeQ8e{nQNgzr2+vWn^`EdEB^EDy19u$Rf&y z$I-DVWCh0F22_N}wNx@NVp9t}DHM<;F59J-wmjWTH0c@SybFB8VL`OHFTTGddm&@b zC&fsQ6JS7?^?r@K%3+;UOc>UM#ViY~Wrb5EwmK4uY;hM>P0IZztXh^Zm$8??+pd=JOYOK(ju)3_4 zcc&!V_^Ywy{d{!4@b{S({+@pUd)g6aj&yJW?mhZYo|_00;;FV7;$Z@6VD5H_5_zjh?8TQxgro!5^iNGCQCX%JZtlj@rI0OInJ5D z(2c*}bp!LlV84XHFo(d_S%ZN~hn|NO6HLX61 zbM?)8Z%D(}5-0wTz4tz45vdj7O{x5Oq%hLsk8-a<3mXi)An;!#It0rT3c$r9oT2C08^Mqy-NBSI2pIVe}Ba zjSE-X2;)31+1$_hO5mr^O?`G5tR8$U?MOq$dxvL2`E%p3CJ;Y#XKmud+S41(k=PNBvQ?rb~D5ueA(}G==k$Xope3)joeNy1&zYw>KuAD{V*7% zYi1IKMUHlmvPuR3Y5{^4B@IgV;=9Ula&pt+#+!-aS~P~xpg$OK2Gnr~>SEe0u%=O) zHU6}v5DXhY{preLD%x>x1hj#3B=Vb$-JB3Kll(9|@`7jUm;u~`u zk{uRzaQmGmQ0sh5U{afuw@Yz#e=rHOCI+~pwsC*BN$F{p915`R^TFnXnFcW$>HwC4 zLLhcSmR#nmkMIa$Iab6m-qP2t4T~7^~b51`;4U>h9nLkH8*U3L43Dtg)h2v>3+&OI|4`B)sF{Ijn zfb12tM$UBBRzLmgX~-{5mPvz(qcPtNJ0={%pUxnM|LuI-Wc zkiUNrmQ1+K2P{1Am&U3oL(vpZS*2LVk2H_8$KGBGJ0|(Wa`RL;EF;nW?5H#d19+Z% zS?;x(n~AV@!(Hf%_@!4FZopGU%sgN^-$zSQrMxKqCXLlRkJ4>AF*Md|4AOy7@IDwC z4U_bZ*Pg*iH!UEo!)h)O@bO2{q+8L(usoY}%GbN=qqE$nKqzLO5)ruTO~9{x(?l@M zk&za36SkMmZ*DBL*ML7Y#~c=1v!{Q-hwBr|W6`9BgngHTknVc*cbST07^$Oz`!M?1 zuYyBmry5o8u?~U26&H)EwOUb;)722yY^+U0hv={hsrFr8JB!9~64J_jq6BUA9s>-v z4&kZWo#@e2&fC5R_V%P8d@iIw4xe@ii`)8?e1sJ4g)5wBFp&cQaVTyqnx83x$NH;2 z8;b+0V+YhgD18`Cuk;=u_~rDE%Q{FPto!aQ4}ohv)H*YG9j&P6U>wc1;v6o@y+3lf zM2i%=o)g!&;mbhW2!uDF_cagv*;PorU5W+zuue?(LYTV_smGF$tj4uHA;ZRz)y8;e%ubdUlj(io@qqp*w;VaTFx=^N4ILuu9CWe7MIrM2wxDu%IXEsbM zP)pcx$1yq*uoO;dF|=LU$sZ_RR-Tdl^jBW7HF>W#9_NrgSKKzP(b^_9cdJ3@)_y8z z1_<**;YF|$e#ZjwGn5SbfQN{0)$+0TVa1%_CBHPYO8(-Fh`$0XCKAr6THVap`b!gYRNSB^ zDLgKtZ_Ikau9Ovw0UeWj<0OOKzDEY!d|8<Y!!QN35E)nE-*RMgLKWOjSb;k9+B{r@WdKOH-H z+f~DhX%m?tC>U;Jf_1kaJ4kmU>CkE*HnujXXE?^^l@cyIHy+ zNt&-V2Di`}sOY|v#)t+4N4Ny%@x(WG_#Tq7U^~5tGJZ;aw)+ytV8D2uqa3DmxOF`- zg@Pe!N%<&j$z}5PL;o~Ke7BHu^!x?<{1cQP=h6&qidM~JYdeVeIL2oeg4q+j18T)l zw|IRsFc(QEadBK5fbQJYi2-9g>Dfj%Cm}f`b>&DXy&H%c;|@ogu+S9u+9zP2nTDma zdPj4e^CLe}5gdy%Hdludba!3x9Uj)k!%(Sg5nip6t+Ex+Cp(A;s2BlW`rZ<>#;VHZ zWTB4hUicwO@Sa4GoPy3kqwcC$xwsTYP~{G*S8_xJW1!CZ@huz-NRPOt;1Nw8uK?&G+rihpSeg57C};qM3km-!8Q0 z+EjjrXx~zqIUIc)x^?}T-ODOVk)O_dS{guUDwtgb7g#slc@c6gum#bNogMlt5-^}# z^x-!zWeMupX?#{`F`Dn~40dQGh{AND1R8b*a&(-6RGFEfO7^>s$JZd*CXuw0clG?hMTeBlPyLlYy3F*WmBc(R zjouwdieY(T{y<4W-lag21ER7ua=~!zP?Kaw4jd*8gW$===30>Mk=_-wPCok8( zug!o#6K+i3?M^7wm~qVpPkU)))qtP>Zz27WTb5gn{#>AB*UCuQQFlvD=OZ6oIbR zmmJ#~;g!0C#CDtVw9v9{jW2Smc(@W39Z=U>U&25Ipf%;4hxPC1IeqaD5T}VIAHUFV zk=}R?$VC;=rrm;Ngm@4bt{%J~__1mMO26LLqnNPeE(n}rX(gJccKmRV1-s(2*dhdG zU3{8KllNnfF2+wNT6V`xM9m~T(jSjw1p?^WiH;FjQ=5}iSnUFoSqFVQqIGMR^zQ6f zpb1GIgx-1tv)uvy>|Bp)=0DcM%~FfnZ>+GJLGoAQSnCZQUoGVDUVol(38lfDjAVX1 zXEH|12u+*9dP;mEv}oOwT#2cL3%c+pj4@?%+9lx}<&ENk^U1!sK{NG0EAK&GHcdwf zwHq`fm<7PbP%yTNx2JN6$lFj}=x?cy3fRT(=cwcZjau z6eN+x;U{x|3@kpCK*}JG0psP^BXZ_C4ll8ZSUSLFyHP`GTuS4P%jWm4Nr zr+KybUlhftlNm->CW)(3?k<`H$j~vOMlf>7x-$CLx~D4q@`5}#xe9Pg|J(B986CCB z91PQvo_)V* zVke5ihUa(vssmPHMGYa8C%I7rbaa`(iLQmft0ZjeY6oUM^gy80m8~!%a@<~8;09tX zse$pqeO~L9FM^)Z14rbb&F1@vXmv}R4@y2NXOL*+H8^MqXZ~bK5ucD?)nD(#y0@%{ zc$^V&$~5+-hckj=;%)c)oI#44T+zJ-=l!&QF~ln7(c!;kbUPX)0IeZ`3H^9tmg>N^ zqm8{K|0Lv6^p7h;>qMY8kp!Ps2TWe*F{?xbg*8})^V3@-BG*)L5tCz9VI5I*gbzW; zG|&K*eNDUILSFxaHSZlH%sJpj9d!&-yb(dwpL+gSj# zY0lWcv7<0m&h!Av-4|~sPTR@3Z2MftcG(i`x?e9)n|^T561o0ZL+0gLajN2-KXS^;6}E*$a4q7mPEyTcm_@V{w5oG8u92lmmY zpyMcro9^0a0~~5nSd`Q=%}F;JQ+pHd%n)n)Y7^}D9^HZ=w(4**>aFP7QuoYIx($K^ z?W{eR^nsnx!PIS|PeJ`fx*;V@tobo10<gg>*=;+0lW*gFpPSP6nEpr;uS^mVP@t#u_$N=+8o9Ui zXp4Jo+WS%sbYOUZ)Mk|o%uwPY^!Ro}jyGI`uqbti^WZGMCU>Lax6VJp~bc6>_ zH(`*-Q7q~5c|E5URrQ9Zhj@IAS<>5>VqzuFMdij3?Q;xM)-T0_1Amahlat+jGTeYd zBjERi6ZKppf;oYXwmbCSoOv1**F{nFJL|;-BJ2%BE-I1bbolnaL@lv`i*xthT#q=C z5}RA0u|UROaG|t7&`{}vS&dKF*~JJ1ulE7|+F=7559?Sqd&nNL0=7Mka8K-Z9bpvP z8$n^Rg|y$aSdE@KYhzpJeB%rhjdqvJag}Q0fyC-m7o}lN%uSBHJP*KBHQRUzM~)36 z2d`fx-#ocpKFtEKmHj-*wi8MX?9Y%Vv@-@tsC&2uOQrI_P3@!muAB~_;~I$XLQ?#L zM|aDVhiJd+DwS7fwLQW}r+FH!+$MBN2?vPbk$tfDKUU=kAISR`!r6R1RPhk0Ncq-( zf9mv@NqS3IvqM#vLm!t~RvhTX%SnKYzQ~zX{+}WbkXo4(hiU(PDe4%s${EwC7eRwY zychiqX4elsH9G4@IH|)fPkEg_33`Ja2d|=H>H2Kz2I${}7;v!zTWnlzgrQ_dbJJv^ z{H-XC^RU#(FH5skHVjPzxD?`@u!(uN4l26T>KpH|LRx!`3TOmG2e!rOx5pkZq>}!X zlwUmUABWI0u&Z4n!s3|NN8_zdRIMd>eOCiJp!+1RkLZ4ZXtYob;%f2&Xc(n#@C!nj zwP5jq`J(E`TZnwYUG@EEx6mZ3XgnVHk;$aI*)#QVAwbQezqv>ZG9KN8zP;kcx;?VM zY0asJ2@u=bKPn4O*w)RG4`wLsCE9VP;{7_ak7 z{;m2vq?$j6+h_w#!On88HKiqcsc_MWuqKopC9@64x|Ktvuid zTbgLnaE^Q=V|`bfB!cNVQTzs*?CCL!NhRgJ+u9tMuLI2LYkgpq2bv3q%`nSmudaSH ztiKV=s1VKjqKjru9Y2Mcaitd!-jf+0>=PirGiAYqjb~#BP+xf*yz1!iBFp6E;V2UI zT3Zq1Si0qVC_Sd_H7jZ9cLI>tt>93PLWJ8f9IPO!;HV@E2P-`Kd>5{Y>$^AkE(u89?-C zF}b|FBKpX$uB*R%faL%q%`yULcFcD}8L___IHo_Tc|AArrEOI+rDx9sf=lqWO`Y2z zVBt*P@p;cGVM}PmNO6>zqI1C-4N&T#WMO?kb?uzMKp2+e(Qo+=4)|`cZyxTAUorB2 zZo&dzo8$(qHnqHtrLjw#)Ll?s8C=6G%YG$>Mr>)ca{WXppOT{r#p(R`9cU)rKt#pBDIP|{Dj5n*-7Uz@ z{4h>9A?8&b@;lR8Hh)US%_y+XwP)H!;ZM>>?z!zPkW$KVy{(6j9368MRD{z>ZWY{a z9erw#vrsT0Xo0}9q^YlF0!huU%TaT7c*Zc^DK3)0O6KK@1kq)G z%H)%1Df@cY!V(KHx=9!lp;&SqZqK^RPr}x*$=sh=&lZj&NlcMy0Sh>8oj4D2+e7TH^BQU7pN02k@ zOzNKVF_wlWs=u1#iG@v%@_jPc)!ql>dICMon*VXd1Yb6u^gV8Yr{WT17tpnj!O6^(Jh{$n&~f z-7Gp?ny=yRY*zXxS(M9?SoOT9Dm|W)fJFF%&T{jHI*%U&XgQBD=u|n+oD(sb{VCffuCY z#V{*}buBt(c*>Sn8WW@g?iY4kY>Kz-vg0ke6O zmli+n?KWOTWHT#oZKvN}z4@?H!ArJd|t1 z#@2*Uz5D(?Sak|Tjda??-X%{aD*Rota!6R@C`B{XfK9mAl}Wi@F-EB+FtEtaXf;wXTfB;#OvfFcYBqoolSe zK}hf|YQL>})=3$Tj`=BHG$$`iJo${Qarvu5uteBg zBT^dSx?n)xeCH){lUJUPYz^DM-nDAEg}XRhU*E zWYdXQleBDIw`Qf>#d;jD?2H}=MJb@2M=+98HX;Niq5h0Q4JUJcK(b)g(Z+qCM+%tp zCqq}XheEDhbpbgvRAmZAEa`@VFwPAwOT1P8lVp?rO@hIfZXuS2tFz3{dOE%DZYk13 zp@_dTgSFR@jsm;UFOUwcRXXqlVCrp*mN~_2# zg9F@XKyj4`mm>Gq#R4V=F%cx|8I*0J1h21;y(P$fo_Ee!Tb<`2kskL(ZDuaz6&ODD z-FLVtcHn{)+-e#YQ7)TdZJJ1&Um}~CfmR#J;TV3ZuHUfrK6J`YfeD^6@ey zJv;+B)P5gtlAhoFfiI95F}@0mp(WN1Co90tal7IL+IHa-k^Rl(#o*V`LHh3PfYxi@ zp`}L^jh18ebv+~V{Z+M9Xz6U`_h-hnYHsp<@jI8`(q&mc+ln8YZQk&r9A+Zu}Gq`c~b z)Ov1_=J8)hP{|WymWfdAD&#oey185q=o-U`DfTFXE#v z@6c83e?K?e&-9#xk2wUbJy%m71)Kx;s3Q$E9$`Jj#eX|hen@GfoC0xgPB`y<{o}wT((cPAkGEV49=p5okf<@N_Dy$J!;0IaR^h}q z$}W0xrQ%*{! zM1?@2eYQVTQY{$vqx9J$EuRfzxSQQw6b3CLpn272EUNZ02(bv})@3!fjq7*C_Zg-E zF&o!&eaG%TTlZ^^3$edMFJZzK-1`0MtuUq@qU{xI%C9MxZ=!PK1ua`1=O5-e)!?W_ z5h^n;&vSSLqXk|8jJd)6L_y-2%@y$5OQLGqf4pGkM?${IpOc2(JxHJ|65)u%i$zs* zrdC0*{vtQUOlUIMWM80Wj+3Jrcj6AH*r$8^6j1`Q#-zD_s^418gQpxDy}(DDInquqq>})qwzv)xd(R3+n9-8#gX?n-X@c zEE`*%y~5Q~YV3LdF*jZto3HeA8oEBVf<7#efEH&x*8Itm@`j~+d!JT)*YlJ>GpZ&# z2;V-fW`0%*)Cj2t51H!mBnfRZm?@Fv!Mc}qQ2n~pb zW}s$qY<3Sdqw5%n_~E7wK2MHMzr&LRg5kwLt5r!Zr|kRf>xI>XOK2@jhqi{AL)N~2 zn3&kTzxX9}TKwge5o*0=c{X}_9^oO2oU@5}#nGoSJliUY#>O^@8M_m^jtz4Nen%z< z9Yvs7j<`{Lr@>@Jz!w*U_OK;-?eIbcO79dW1v&OYB zDfjJ-v{2OkaEs}voM@Q^&8F$o6^vr|6PA|F_0g^ZHoG`|B1k~=^hhaIQmoC-HZ!iAsDd!6r%=c+1J60Al; z!{w(Wc((q~{iTvxOCn!zCJJ(uoD;O}!wkUOA>O?caSufdUUv&MWnP1oAb)pqL_&&$ zE8rn~j78^eAwZRGPHyVE5~M*ZOG>>UL#g?Afxmm*MA@3(^hnv4aL)I7P-xiTJz$%_ zC6u;X<%NAMUp|N%T*sPrV9#>tc;QDSRm^l%@4o(G;g4)g@y0q$ps`)|Fg=nJ#de+0&Hmvs-{?a<8yoFIOMK07kf)?=~K_aoyP=WQSV_; z*{<**lrnRx3|B{>DE!SU226#tAY|eD{=e7fR{r%mn#>N~>t`^b4-G*6lN8pqRV{2&m6W^yqRuxy6&giziAyksUN2ik)}Q<)0o(Cxu{sLa?6AxQ*` zkyp_cv1h_|yd$Nb(VCHIIp~*7m|d|Vhy0c{inpkva%kSlkBLaltIm0@TVGMVGZ^`L zpqurRMEIDNaMlm4k+Ly*Co=xga!AwJ1f5RQzAcWLJwsw|&JrAXw7SUm_U(s1vj1;o z&HneyN7PLsZ-8p{A8e5;m|c$Dp1!V$IwV!ohh%}RgUu5S=e#rRb2et=xCQpq)|2DU zu>sXSWL`hp#oJ5`k^dfir-Uz+;xkQ4UbMB2hTA;9SU`(t?Za(_CTt1(uT1DfL$RqW z)5?A0mD2+-v+z%DIW~{f{ARQ-O=a7;lRlZl+@z_Gce|+7> zGA2P*jzyHvd~lR`@d3qyp9#oc_+eXnY!y;Sg~KNKmfYy1qsmthV1(5{XGx(}N%!kM&!Dy30%&wtJEXjHwjWqS@`Z4=b zVDM)k*yPj89Z~6sOJk`xoN^Qpc0yhkTpvrRJ2qkNVc+tC)?p(Zfq?@AQnupNS2mNy z01Be8E0tN%aCzEYkr#C=`|0{qGW7|Sk9FI`IQy$>T{S_iHpL2E5)FZcU@K|CD&P$k zJC2kAMOft6V2ju@X2t6wOFLwG^|RWvb@Q%}h6QHswA!^&$UyHnG=z9BMopBzQ6Y z-(=Z|;4TM)lZJo~p}M@6D9*T2-BW!EjWUvZoRZsPmMjK`WxbCn>{gMh;!{(u&1j8_ zxAo5)*zPS8Hp3g0S4bc`R^y&GSU*#C}S$- zx|gJX_QpFf5LGbC9;Tcr-VoD|mDL|hzwCCVehifcnoFY9nDz)$NDLHF#VhF|7v=-L zIZvH_424J}yo^3w;>H*%TTOlj+MXl3mO|~lmEpbD>g0ydv(MYUH!lmL|M0&#yvw|7&3Q&49<%Z zk(+j@!qh(?+AvnklKKUigV@-(*+DH>!-zsM7SW2a7Be3^ICuJz0wMz>_4zZJy_5RhHoQSJ$p1u(W%mZJUH_9 z$=!atdn??uM*F%HFH@<}G23;~xOcBm-Pq{pGhB#^gpTo)UNGr2MLLyMMPi%SLJ8V~ z>0Hz09~1S4PG$bcBqB95cR`Zd3h_@^Hx>4z9!a^PHI{x|=y4G1r<|SP9->gen>+AcxL-mv_yokM9qx3EHYeMJp*lo-~nS%*|S;KL7oo)^wH9x)P5A=)r8mI>t zlKKUih4xR)?e{3;&z~~FSSn4hU>WE_XF5bEoG#v#U|>+GCCLm zG>rQ}3{A!M8*0@2!|GkbCIf7IpBUO}j0k?me-D3oNy`Lsv%UH;f<)_MeY0(@pR*}6 zk3x=tVMw&;(Bw$9c7whn-;U=pPq9!;Gx4!9B4E*5fyopjX$y(=I-j6|e9@x-$oC81(SX^c+@L$g=9U)`btkB>J3spy%n#I z#B)#-kjBEOXcpfu^dELuCtbbsDBra1ar}qr#8T@l`fs&pT+Ea>1z26aETkCFA366l zGl$aE1NIwiI|}tfx6SQciz}EQb;gO*Xp3CcQHF>5G1O34aTW3Z34nHj$IctH^$+Gn z+$XI)2V!Oq-eo}>!F9G6$lS5veoq*90S2Y;nKqXzeZ9#EjogT}#(F(YYC-UChRu!I zgi1o)++J9{$yw??q?06n;d8E(VrhN74f6x$KC;PUNw>D(?&C%;<`6n@toH@LcQ*-g zge&qxD&d9$L2!knBxSsqHYKOywYjeRwC?URq~bSTwN=V77$1M-sk*(2lL9dy72Tsr z!`!G%RtDb(o3mJc5dg`~nhQJd=>shSrcj_@(ER@|*hbDeq=@27R0}ZN=cBr{P*JdL zyoSKvAZL@X=sDX{dBbYD1+E#d38oFs3uS;TZDzK#zr(WYrW4Ijz>zPLc>|A?zaKRy z7lYubFyq`jho8e;geOERZ2WY&mD0l^U10SQJh`6yRE^E~0Jod~P>}R^-e~A{m?>A* znm`^jRLu(LoZL>NyLsrG?X6G{Wg_Jc04woZpPPQeUdhYg-?Pu`j@qMTD=HvN6yXsb3$RGfQ&5F zHDYdl|K@YV<(O(wbItFy;cf%rUO0$mBOlOCqF&%FUm}(>Eu?YeNOK!Zef^gsb}+0k z_A+vO#)d%iwCiM7=4CMki|p#k zP{_uGn7^vp8*k9suJ}(oThVX?~Mj|q=u;WHi8s!IS4vu@aV zKbjJkyqRZ>Vf4UA$r@uV5n4NLQnJ47RWq?&S)6>C|V}gJH#wmw6gM=s$Yqs21ZcKd3HkQvY=oF}EYa*+!Uc(I@EDYO539~8J zKvW~}E4pcOZud~(Z&^;)1m0^Ou3|jT@~m!d3gME7tvw0O_v_FG(QAWMK;bz?w^|@g z$i!5+{e>D2S6={2jiypRrRtk{d4L$4AoYo-Df(xW z()5Q`MP6%Y6?`6S3}jHaD7GBex8w7-C9MEVKN6ojz{c5+Ez}=y6wq8ITB{|GhmtdOs&&CgDTWvaGEl#4`_q~L;kN_R!XRPR|% z=t4FE&@wZ_Thrtai-Q5*XacE(ExH7_cz>c-%gGj2DlwIWQqQHkj>V@!C_*6F6y{W@py(M_6>tPJTV%>+tY-wQi@>XNOo zLsalDkG9;LgVn>dQ-Us{p0;oq=FL4JJI?YbRx+5NU03fJNrz~&6)@>l67kGMacoCi zY6xpLXY;6uGgx6=Ftqak9T8HLP9pQAG%0cOlQ)9~G8qKl7l&Zw=tJs2vRy~3x64sd z8tCPfTDt!}TmOTi6STSU){h}yP%-410PK$zzGuu^oFkvXC(-`0UCu21ox(h+41AKguyXN%v?8z zh>A7d&*n9wjKQD=(H^2rAdo#N@&Wr7r@ybg*=^zb)Hu`zI3Fr(+}CE!CWojvjk<*_ zr5HhndA&Hgz0CDoNRRRpDy=3^4lhb-6Hr`zd{Y!&=tByi$y*r3LvqtEff}?+pJ)Ju z8jE0^7YG2f#(J#&nT*k@quN>;KF0^G#YrVne7)uv?Cq2L#gkP>nrb8D2G2|Tc z^6w(_TS5Dfo#LnV!<9F5=l(B2#uH*$>9do!+~ylxTh1Dw(sMwioM#DlL6K$n(Pd`_s}1H$F$k85_EA+Q|^)s0tr5d|3_o(p_x;B35OEyI#j_3!v< z`>l{%o+~;#InN3lqe$KS;({w1$B$18jgzh-Gphh9mY9_ZIr85e@94JHh9JdFx7sif z1A^gp)B#MT@PiZD>1LZd<9GNquLUu2a;?Rgrb3i1_6{6-!?#D$9vA?u zlh7vv`lFjmrm_Tq{Bn=syjxsKBh6_TqeeW8+bfhT$;3KgLUHy9xdbU9=95!U{-r|i zypQZI7=QqFRt!omc6vh-Ti4Q3#t(K*5PiZn-eEDNsj)xuQMO5|8CirKgy2C{LBK={v+2_4P-vuRu zx$z>u1pNOxabOJm;9~MWABXZJs`apCMd(dd+4skMF^w>cNPpEOz8kluzwb{5Ue1}` zwN}~ene5r}Zm`Mauf6$Vo6m%H|Is&x{ydK!lk>G}pA>7X*hA=U0(h(ep|+`>O={K* zw2~n59YnDvHoy^BU&~}T0S$(tE8Y65V|P624%BhAZA<-wzGtQ+|Goaj__dZkQ~8pI zjnmTz?(tV}EVC$mSP$z_so0;VeF`u`e9o!x)YMJy*ab|>L0Srsf>i=IBISpW4Q2PU zDSwz3ACQj80w$xk?;0rdr11*VY&l&4NN@_1NuAN~5WW-zBnYgJJBFNU{AEtk!a4vVvD+o-^3{#Qt%c0zFegqk@$%Ud*oz2awj>&r&d?j4k3qf%t5AN-bNHBtUvDMy%gCi9N<{*^j;|B zsdCH1`<6CT_3N9Ji#|+9{JY?0`aQA#*=7R>PiSFe zm!)D|+#YLwV3{NdX%=v zLISwQj%^z0&@edoHAOn+Uy(0Sz)*@Eew~Bumkody0?YtvCP^)bpSrt)-Ci4A9W13| zhSs5`sNOk4-~HlBa;NO=0|ouGx}3oJt(!p*_L!MHNViy&iI+(Gh0Hd{GUzGMr){$c zYb5L<>I)2kXpQqB{hq9 zNLqH0J+?F5whB#}uiIhZL+5^KHa!|Su?8AJkx$Us2EG<-OTzgxR~%t=Pvxye&--35 z^}L@6=}HYh2E49oznoT=JnulvxcZ!Vwk$?gJkpZN&0&Tort zPX2hDeY)UGqgfmj+e##2hMxFs#p@b{dq%3V_uhkdONW98R!k}sJ!a(+3FS=vadYCb zamNXyO-)C6&}u+y$*xS2aaT$?o7QAqwZpgr=Oxi{>iXbl*M{zlUMZE{nDd>#Ct2a6 zSda>BQ0ot|j|dRVAyTQ=~5mD}SHnAVb2 zTvk?ZU*Nc+^Me!xJ^$a^SYiVH&bIt0LGVXEm?{Uh5~%e~lAuuI#p*k1lF|9e8C;9m zR@W$@Cne$X0Q8c3EI+vKlbsEb#!ODL-bZ{E{nL9hl%PY2C9c=NQ(JjpeaXz0<_r4@ zY_oZs9WZ(yvUxGuPVYs4B-o`q4?I{>t^TN*!EPFx|1+|X+7YY^*S|;=*d<7TJ_b2I z4A%R7hZ`5<5rou1H=dyO_nI^A&Swh^7cPt_5DJVS@YOwyR(_7C#nVxka5HYTP#(s%(1;TCC`)j(Z(AeKAxb|3RDETxU9*& zmky+;pQf@89M_9bZ~(KBPuTV!3zE+p;wX=QNOY0*-0$z7(0r!+t%MZJ-NV%3$L^ZP zt-c$Iqg`>hT$W6btq{)SlAqlBtINl0JU-Pl!Qx z!i2@0U9X-){a51H|2AjLm;Kc~*|Hi)JN{-CQ!{1C@^;lNSv&g})vbht)qd4Ynf}Gz zJYhfZ93iPn*Y~7BhH@E)p_>{5L4ea-&r|*cc&~5zNB{r;00000000000000000000 z0000000BI-|1qqJlY_c(`7eICE3N7x0Ccj%5K!8})^n@V<+P`9Xe#uK>vgmKh`%sL z{vAt?+=OOWtpb7HC~qT9<>?fSuhe8~`GE?`-tAY%4_d_2`nAPYp#~>-bO?o>%2`-n zVvxN_TwKG%CmM06xk%x8?F+Z9r#v;Ye2!w&OwY!7xC52x;;Rb7YS;iJHmzy)RxP*x za2bu+XvhjIr$A8<0Zl>sM`|v-@Jzyuf^h7B4;4a_%_`6U%ND>p5OjIm#$U2*bO{|%SqL7e!yeSc|}O)%WI;G8v&qmzOm za{rpT*Mf+LC2_FdyqHnF$-f4pDmy<><%|)y7#YoNyCExNN zL|jmeEmeXQ#NSS{c6HCS8m(e^O4hQ^)&S-rs{xjjqSH&JK~}shM`!h-XAPHK8km`o z@%4rJi8_-T+-0W*P$lPpvyI{q-;_WdL=_oFmH2hMu|feU@Tf{aE#GW=O63)1Ez>g6 ziqhacp8;^=J&0@Gv}s}A-D}M|WIBcB4~vJ5Mwn^Rxwi>Uz4>bxWXWy}4OA1V^#nKQ z&=MuC7-7NkgZIOTdk_|H0#z8B5UH{bhyp=#MqI=of(->oo&sF%D9-j+*|81>to`wp@M0#a&1R zOdr!YKJOQv5OnIp*;orPgix}Z*@Iy0>z0=46ycB4{Qmp(;^g0{n)kSrpj`=PW2b4q zWC~l-A(peq(Rxf=)@nS zcBT!orObMg3q<1ZB*p_hwAs`hBM=L}Ygkc9j^#`;r|{Y8!6cY;74;9AfBlsEWvb{m zQ>e-_rf#B=VKd)!a@|l+|CH-~Wjjjeg-fX>nKS8}T*h z?Vz_8u>THpGk6hZT4nXUF_%e{9{UG=SqM1{1y=x@nvQ(1QU4S*e7d-lbFhvUQGou4 z$1Yf0SwJWb0hJW*vm9}%X*n8gCH(iU^zw~0I`r-9Z=;_ zP(WAc7T992tI2_*=NImysu(VlNQ%WFMTOWG3IIrub4m>nuE}(eTo;Grj7#~19PHii zwks5PPPO`<+7Az-2l88^jd7c{N3a*WunkfB*q&Je;)9H~;{KDFgL? z_0#ZKm1F<_8_{DO5Dr)j`u|Gp_DN~U00J6+^avWP2(2j}bDkgo9tt*VkQDm>X3loX zNK@RC&o&gl`lV`l!zy-$Xn2ieq6|1R4m|s9-~c;p9<92%zyTFFMq!&F#Ks>;e5f&T zA4G>($y3=C?@XRtAkuc$Tr8~V1O9wU)=&Tw-apr&fRzG%Oj~sbkon!pubk*vP#M>j zbUmNDQ5G;&8)kRO594tkk&)#TUQex;G@}ECTn_rry>mQh7T;X&+^c+svkkz zBU$2W8Wi=-3Y2Ky_SGS8x<+g%I^)+<88Mr=-e^XAz}ni;9$aw2heAln@~kzM-bUNF zEtRta9O{9Cq0H8RFuXn1{4o(HjZ~prI#?JyX&SC(6Y9GsxVfCtY&`7 zwy^=#XJXtIt(u9(Sll5xds4fHrl?C402zW^p5e zsR-^*W1sp7G)yf~)=E~HCl3Y=pao*AeSb=bpQqr9&Zj@vF~ z;*N&Gf_+J_#*{0<_K4*W#^Z~1eD|t}H22jq2VIDA$nkO)U#^Br^lAR)nScXaD}lDm zvab_wVY@uVC+kG#ki4I`XX8O$0ebE^Cvz0j>>ny(FM2M(n@NiZ(k9^A&F9Z%Uxz)uxbA>hYEZ-h)v;QWe=pskfn1XQI1$0*01VaY{ z+pQOr4w1a^%ztyLF#%8k{DBsy?2G4gk{82g03b^yeunv)z-_SM_Hnms(s!EN|IR{S z%^N)JKn}7Z|(1+7Kca0Xbu1K22UisG1ee45_ z5P=9-1LqS^6J|>zzi+|fAl~a zQ4aw2nDf`reC=T^sFdkd;kl86+^MvDd2%ONN6^O{y@_JZ6sGquiaVNRyxM%BRdOrJ z1=zw(Xcy>_lR=DY)UB&SWXGh+>BmR@T!YMY1DE_gNN4?%K~bUXM(00vcZzNXPdATW zMi3^qZw}?nu+4bQamPp%qr}DPkDX^;BwWcE9Dcnmfm(_xH%CGm7zrFTer7EeI4K_CU&NWLKoN@Y2!lI(tdF zzV|KheaEE7bv`)IhtoZGjTW=+vxo}-cnrW6Qgz}y*M27-bn-J2wG-K04_l15(91_Udy*21W2RIw5B z4^x7Nrfo@4{zEDBbd>XDho?U4CcJKx7O``6j=ybV}xkqT?vwoWveyyPkUlt=;Lf+`^0>_9x@`NJrJgfqS} zt;5sAfFWo`M&Ce@bJ6;oNQ-CG&}wHg>3{nGM{L@Py!8+)lqJ~!Q0{0iyH6g3<-Dd2 za`wo!O0RVb@kCg+f*B8+w=ttKHi}h!FuTM2R0KQe-U*$qm*`gi@S8gp{j$*^Q@5`a z#67RN94_B1NicC+#_E`=cd~>te^sBLey44#RA5E(T+$x*?nB$gWYd>D9*Ucc*(e^E zIJu+Bsp|C7WsO?um|(#N$9K)=#~kF z+%P!BVPx1VO6B)21~fK~08(Km{rIINs4dIRATQ-Ry>LIU^o?Wsi7?HYBr$UP%b~4H zqNrWfrEuhpmLFXw8Z&xXMW>Tk4gn6TJICpToqsZEj;f5Y-AaHqsTc)iegVqj`ngGa z;f3W6mac^RQtb7ALUOW0E5q#}z#51wwjrw{{SlIYHsXFTXZzn+=cVmB8XPB0RTSbJ zioFJ4B`CVb>oFMW)y~gO87-Xfbp@eIV#-ExKP|OwnfxB3ZIgj`gC#g3>E3121e>GW zh;O3|QJoa`y5~3QKM&oC28-w_30!ECW-P^HAE>Ofo=}Er02d@c4Y{A)D54JFqq|Bm zFs;WdhUz!E)4l9Ew7L;)gyk$z>_b^IC2w39L%?#6jvqNSmZq@%Q%Y2PrA0qd_TCyd ziQpSEbD1bR>;C`>OR}xI6GVBTI+*&gKB{9c28i0$OM58}RPx(19@u>j+4Sa@kyFXK zkX$+%5rON?-4x1@oM*%ef?nHXA~?nd^p|yeArzYw3XEqc95e*?7^3jT>r^V_x zaUPPgksD}sLoimq-@P4c@zaoW&N3G{!Pds_GF4Y`pdqx9piH4OL0eFkbw&$%HudT6 zpmx3TMRJWe>sBq=u>*5ACr%>T@d$<6sJb;%i3cAx4l2{_dq1XgPS|AC)#D7uA?KCi z%*}-%q|6liQfM^WKO#el#+tVY;3=@yHSj4LJkD1Qia^zQR*FMmib&Wise>?Gm)s#u zYsTJiI%ZE@IH>>Y<8Q`V1P_DDAq`j4_Mrn+imlBD)uD=O&VolpIpMVpV?dvYTh&%Y zLg56d&a!=%;c`iA&N^a5BmINksXA5DHpKX|_FFM8@KG&woa-^@sUSr0QV@vChpwJCp>`4TgjY7St}d%w`-Jv)W;Mf1?K^`@GZ_B(j!ptkD*yG1Z=cq zqGau}J{mkR#H*Ovf9(B`a%iLUK(QtX&{sR)7(AMPOm4z0s4n^>o2nl&BQVN!q6v-7 zmUVD!v(@db`U(dp+r&-LXZG8dqDy!jdQD&DX!=2*=5?mr5viEw=cd z(LN5|BS1!P^K9)o@@Tz-Zw1oQY!v=|e0@!q^iFS@IdzN$t-B?i2@4EzJOhEo+8bG4 zxO>Ia{`Yf)I$ne=OpXjWcv+FzJw7qinrGY(ydBmHSn#DSPN~H~ zKAmF*^tnDZ$`x7)T^mkk%KB5ikXKmNJJP(rUJ;i}RSsEod{7!6J#QCvz}hug zJPg8Qmcd8P2(As*b-~Hggn9jcuU@GeCzkLcZ=Je+LG0)7YvFqg4h_K!r>a+)^MF@2 z7DP953w-mqs-Mx`eQc+6R2)JV<1+$ejet(S@|u{n|13XW$(0|KB-7obrRLlW02qGX z5|yj5!hu!H-tNuut1Wi#gbeuS*fpxb{9s~3ypac`JQGFkz)`+T=`Ua z9tGW{*9{P~K;TNq(yz3K1+Z>C{^XwbEdX{Kv>-qHXB#9XMNE*s4CD<`x}ByAxtBwd zm~mW%N_tz;E$UwEp=bAs6a#-jVXLkZq9l_|S=vK`uf@FPO$LGZoHMc5=4B{(k^RUb zPd4^YEC$1T{M#yv?r|m)4w$N5u+TLuuOh^XvhQ{}VdM}^5^H>@Z9kBBmxEW1u|m&C zS{cGX%E5mZvOFAX6zCq5;6gPgL9qWW`@!;Um@UV*N$_?qtb2U;K#&mIuvNtiSf1t@ z^B92imhR0MwH1Is4c5|C{`sJHz6KR_Qyz^z7_yUpF#6fxjQo%-rGx5=gya)8glG38 z*-i`fJwzw;sH4Gv%@Zug#STqGCzK&AM>mk9#w&7a6P6=PB|~8dCTG)X`}7)5G#iQu z6Xf7&2FQJAaY>^xTFVU0%T_SS+HBeGLz=M6756L%zJ@{=l*c}<7NvFj(+(}-4Pd6y zi5I73vQ~FvEbZ6@k7uUVTYqjRL`JmdvHYdn)vkTK6DGN0s``GC0y#9AvD>1;!22D_ z5OoQlr|+UmO_*>7Mv4ZST&?C0Jb{4O8UsM);=HRGbPo$m<7gM`xLvWrQquDBO|c1KqyrhZeGPd6FPx_1N_?D819#Ov#~YHguDKwyP0dG6)FP6Q z!{%eLKt}cpBx@e7%Sa&Zl;asAWC8QN_?|rH>&&{U7a%vw?s~ZNy%}HL&fyJwv$G&bVV1JuAd8WnE2>& z?AT~yr(8k+y`C)EAPtB-(IEoRM{}t!}uLaaEIuHp`0qpB83rgRl?hH z<~AH4j3vf>OC>$VyC1Nz^^Z6{s)3(z+!BvM+%|;{nzvKDG%&RFdInD~ArnSY?S{DR zq3R~;TiLT1gt}NhwIo2Prj57>I(Jx)9kgC5ZXR-YVb|)?aMlgvg|LQ{62R*W0?-ls zfvZ|5y(e@XSTejL78o+E8Tg#;6Y2mc_zW_#FmhS_F4u|nNQJjA9F7||HauP^E}k-Q z5Dj-{>6DJh8;KCETk{Z{FZm6?mGb^L39m@zgC}{)$jaVInG<%`Fgx5aQ z^XK)GY5)f`)4u#>$}#9k*p0GeDF(>^7;{498qGgqoNz1!xn=(zoUYH=Rv7t-O#>o} zhohx3a0&;|$dGYbM=%(V9pWNPVjQ*JVT7 z{LISQ{Mh_pSK2gE2>zpGF%RHd7HBzmKB!=SOXFgsnA&OF{)QOGHhZE!YuYb&t5^bH z=3+HIS~~$dapTe=$7BTb(3A!njY4-^-B!K5u}h>ID(Ku?Fu?v#mbM>{piikY^XQqI zb0*blZDb9{1c&WY2{fe7Ftl+WO$dDRl}I_8y+A(At)yh<;gWnLVXsT@XM*rO4q6hd zMtlInzkP`Iky>b=#gLD18#{7~vP}CxSuIFjvA3YM4iF!gZMRu3?nX(83Lv;takHm; z@B&>g)gMG;qP^wMykx>14P^YXJB4xr>VgkV_c zBUjG(0*lsOiXwC?)l5<334!72K4Dw{!-*2k*F}+D#qkvJ6x-feVhFbNCf3*MXT0}U zB%9vo3Mt*KwCG&MVE}xWX0`C&iM1qK;U{6D4xhp_+KNTnm!eKo3rfZ8-4n0JpvT28jO2bxizM`fNrss8+F_K-VKM!=ULNX@eR$=LMO)SyWYa* ze2{*diB(cOpv}19(2mCf|!sMNK? z*th&zUZ|WACcnrRfh48SGv9NL^gS{INF({{A|_zF?(k|ejAr4OD62~vWM~vh)Hg*(C-%@_S{?jJ#R`14)Zsv;Q_K6XN=Ay+hdi|% zVC7j5^|XN9VIH+-=Jeio_?Z;gch${&B}*yp{+>za+DI)9>B$IeF@L|XiE(AP4)8x^ ziPFX1s=U_ysZ>3O;0@;lHx;kitkrsTCEqiyzOK6!L`YzNH4oxxvo#@%xYt_|{~5&y zUUijJgd4y5qFfZ&RtN_cy_D-X>AE)tL{)`DNXV$G)`a*C>5*!M>`^*;d|k2CM%cSJ zV9qc)LF9u8GkufrdLKZ5`rX@>N0aj(I zQv+wZjQyd{s7Z$%4CF&}UdXR&o$>g?*wAXfx9v+?)9LA}#d@2$x+cLQD!>JRvF8-9 zAx%`4ed{h@VOf|ak&woX;p~S>^7Fk_sM+0PuS~Ac^7@Z5FCfRk730w#n|FjK&#ZEM;&*LXNCUJV77iIthWGuY*Xt^dpp?Tu%aN_h6GDmaY1GT| z&5qm^ZfpC$6AH$dbia8O?kMc5TnVO0T5#`$-T(UE1D-4Wm%}s&3RUizi0p5qk;WpC zhF0mmx;U7g9kL)?`bg#uiDFj7hbIqfWrBRQk<4OlJDr+|$gPMQesl z{QKZYU&Q23?K(e~`s7(*Yu5he&TV*mIKK@ZR@g7dp{)ELs)&rAm>P=&7BHN2WDL?c zO#XK>AJgpXg*0xg z70f1?*)A6zp&LyJqwG#M(r%&MQvK;jcf&sI`O@E^SEUf`Wv(1)B5UOdD&|>f>S&f= zp&4i8ePYuy`N?X|+nGt^o-fZQrIIyQzo%twv$aBL`k&gXI$1p&02hroIphS>On_zR z{h4r2J&RiR+i99AxR3rDt$R2iFRV+&yOcou-R8GqfS8 zpadP2B~(m)XE)VLP;vpjDwd{j{yaE7PL|T9GQsr*Y}eB=GHVl5)W9Zjz42#7vUyyC zYHtHl65t?|sRY~YXU-6I{I-x~ZhV8M#Bur9e6a_bnow#hup@4_jMG4AHYPR6F?yU+ z+*NktMXqGbbw&FQ%UAM7#P)&*mf6AdA~8-Q2{PF`FGpZr9kSR^bKSfIjsve$+x)L^kkSUdFk{-CaoDlYqmn%lUK`m=?s z*8=*#H}9$+Dc7xaS8Sf}c*G&+qc!$sbjq3Rm z`D;!fhH+m;Ygk=T!697XpL~4=%*;U8EG)_d|5SFg$eFaljyoWMT};4xRPCm?jVS0d zGI<6~lnZ7c$o^~6Mxh4y4h)D6{bXUSY?Yt^aE6#IAaor?g|QmgFVeTf1f&5f&q7Y4S-BMz}m7?XuXBEVM#Y^L3Q^1P##8i`G6P4EF(v zgm42y`Kz|HsUltJwAvBI?zgLyioVA7uOBMagF$=923*vJWQeo-$5HlI{w(N?-}+Ew zqk&Xon~gY%r^KMnl#kttknV+Hqa`bVxt)e`x%0Cv+~+T z% z&q%1P=|09pi01gzzdJ0faQNadzUP-kr##c&9y-D}%IOVAn*3wVuU=XUr_Vi8y~yOM zX~szoEn#Bbna;%2qk{;+`=9f5&`}B~A^%;>4i~x~kpu)B){iOE8EL*=Q7_?%%HNy| zzv=6g+5<+2)h+$5(hQ-h3yAt9kE%Seo721kQ4}mf;v>!5H}fET5h0aA`>4Oho<29? zkv|7^NsoUm4b2%63|ut^YoBcFLiV2z*N$P^=3cl!e(NjS#+Yl;VR<7ll9tS?R&VYj z!(p!pBTV;XS=+YvlG#c6BFNV)lV2ehBFKt^AtlG8psR5-4UYJOwdSxyu`S_r?*!5> zGM?2|=1J>cEbC1KFn=}T^07~0A&3-%fx8&C9_^jWf7LrOzHLhc<54GYul2eaIt>aR zp6vmTTn8lO=SC?p5uZzFe&rUfPD1(*`oUk}3n|^wb^!^WRC0zmhs;#>9L%mKpiN4h zb?Chv?nYIkKNHFnLO-iM9*%TakT8jo2?{`TLcU`4dLq|r9Wn!-RG8`xZ$@m`8!X~C zlTSY{!a-m#8XI89O-Uqd%?>|ta4<+JOEYAm3%5(pC3^tr9&&dK(PA1#`#qOqblo3 zRdokePUfv<--S<;0sh(k=#N9imw!~y`E6)?HS7+G!Y?L;XRRGz443EbZLR%^R)Vcn6&d& zNBi_hQXYM#y{hnrS_ts&FeeRc(w`n%EG-Sk)i}kYt@_2+uYggvO2w*w22Qt-gJ%th z@s0m-7MGyz3t`h`l=pxlLS4qv8B1N>R^3_8;$hsdyx6F2qkQAm6pqq(4(&lIZ`Afn zKAI^;6VCzcupPvk>JvZAWh3Wu-j?ifc{SutIiYTJ(XTbv8BD)os&7Cx9lrB}Cf)l- zB`z(3J~Sn+05%5VeR^$|8Jmz2342K)zpt08jl7YnA7D+g^euerf+Z#)=4Vc3>hVnB z5Ad8oXmqHf7J+=`x7&TZOPr=v@R!hb|D>)R#&hpn4OV2dSnnKS%#976-ml~k8Q?$> zKQ16oCaLlZa6~D@++nJsqg_RNd=1#bp(<1!jF@8gVd_QcTVI!9PO|}5Mk4_|b{_pC zyMBT|gLo1?+{)3vSgZb2yXL{ZIs4e+UsY#ObklHVvk7B5-BYFeXDW?_oZk+Eo2mAF^h zvao0`ic97g1b-#n`5k$^^weRY-)&dzMlchen602=2f91Q#>Z!riFG9Oc zwRe=d8yO5L6BU1ZEgb6_vP2m+SQR53>y?xa97{i8rB7&jD-%^5j>I0=_APloiIw;L zc%@s-zr}-5cIs0Ag0=pI{%h?5fJ{i7LThTmeaddvS6gb@CzCC=S?UB}DlldS@YS+F z-URU6VRP?+TaCHtdlbh~?!?3ei%tgEA=cE*>@w|^;D9qo0e*y}g=9--*5S2Mc@Hr? zSiu&PNgzkMo)@KV01i;9PQFmKE!;9w3+|l@&A??JJC&cCrQ-dG@rM@)=xL`oGfc`l z=Ncl^?d$&pHD#+@#W6%Vg+n}cFDew1XoXu~ff~SQcyw<}9FS78KLf!Cz=Ou!6n`Mk zlLpwg)z>a)`|G*^w4sK~O2q($Yum|#kt03Mh`z>XL4<>c+NLz!v$NqSjlx}AFz%_} z{Ut=*ZRe^rnr!tPoTK%9E!_4rp~;q<(Gu&RqA{1sgI&FvR-Bjd`U zw4THh{+(lR06WS!FoCjqMxeGgZ-r6u0P6_aL}9T1lxbN?dCl4Dv4#dBOE_lu>jUTZ}TSjaLfO+e3syCrBSZ zBp-yqeD=2?39NSJpY~e3f}eDqpy0xmTekgAtVSA<=a?>kCZANHt0wWdSki(u>Pl!0 z1}(PRRVv)Qpr2Xc+AxCu!dbunPT%#~2#;4n@NAUHR*v`T4zGOBkWPC_-xE(31%BW&!Nt7SGABxfT`0^-xW90b2FgIIQ=JwbN68poL=To6lNGI9K!6 zsQWZpk;UJ7)>SU>pB3D1-sDDl#g*)%ahn>EfEn8Gv4BnYK}@q^M0!HY+VZ&Te&Gcd zH~iRLKDpRpa=B8fNSmj6KX`tbai%F<725?I6Ht~VpBydNk#br|faIErjBH^LDw=Iz zt9xTTXvp)(z++3qB$Mv5OOY{t<@^FnN(Yrjz8ukmTiY3cqA~b#BDmpIA{fJ9&AT@G zEiWE<_{q=cF4-U29?`{R3(5+CL`hw%()p*#c* z#U=lUw|eKo=UFU6;+~j{Ajb|X)Sz?bslEE%e8n5-=`MhK^r+NQse1>otjpOT3r(%C zwc{rZI6@KDbxX!3RD4eiz1fX5!tWR znW9Mz!low?q`Hm&QLTI_z;Qp_?(K8WTA!+&wNPVh8){Wbt-NR}ONWsQm7+}vsYz6S z^!?S|dsc&Xo6D5JoW&qtPn)k|)(Qn4=7E;0*h{7dHU^QroTtc(#l_nJFHBDrxrMaG z8`=s#pLT)xy$WX(_fueRlZ2PG9w}LiY4#+{i>#vp)ySoHd|G;49>7w9ItKqj2}y<; zyTPSzLVoS6k0;TqQB;3JXAB}U8RAz(=!ZRB1-v>bt7dW_?#_0B|%|`i>o>n++Sc!=Uj@@N&VQY zkB6xCmbmeDHFsF68vH|pKqv!qi;_caEynGwDgTB3i80b2ck`g6SbX#L5l0=@ZsG=C zs@vif2c68C6eVAYJTX;$;%axHK-!+d+C$;j5fG;r)7?}r5;jf3+g2rY$XZ!EV;JKe z$Vnk54!hGaoXEdUaSF%?9isHg+l#3G0AJNp{z-9@ez($YMyUUs;m`3W|9d5*kk#z^ zw3MAQ7FG%llG|H^fssZdcSf%hNaBV+pKLD1P2xuti4wxV5oO}l@?bn4(>c~D;j=l< znCR8$QD>%h7m;E9EH16odhtJpStgKYbq%@EtKVoXtL$%34M3?61^+( zjNL-rWT#*H`W-tSg3i=Rcd5fZScxEau6O}_Ku9^GU)nE6 z97b=QP&s4N5{DI;#Pm*8vlA6=9#Js|8JWJ}N8;Tdvty(iTREa?s-s1B5!(q|*KdOl zFZmT55-e8o`a(tg3cwzmTsOk3dPm+G`%Ryrkgit2VXu=*^hjHpg8U@XXr!1$Df4)N zQf5WWuwbY!7;&=NMo_QJA1Z=&pt1}=-mG9_N^D+>2;3qDkdRCerq6{HP7jxxO^Wf! z06$d#Jnkt6mXcP*q4|aa<`Zcw7-5fyYjGuUbS@SP^WJGiyK``xq!r(3tEZE9ug_;0 zb`aLHQk{p<`jkOZf)CTR^aGvBB(gkShgw&ZxH;(r$b`igLH^7{@E-MxP*(IIo@^W6 z541MYMi_OUa%DR3{LYnWFMuV0gV@*t2l~BAV8k<8vY$d3zl_H3$O$?v6*Ct6?VyP#e+-31%>xw9(vND|*qvv|5F6yoJy}67)lv;tdH^)$NOhsT0 zDgGmCAqf);LHEk(^P4;^P@$}(Y#eLB_9Ikz;HpF-H{ox{TXFxp`6b1MiU$)g)O<>$ zD)vXN*KEY4aTmN_Y3>BtA5^SMPF8G*p9M|6?FYbB@r6_u>|lOn5L z?28_lYGpZUYH>;IPN_aM@x9DV(AC0LTG8nj8Rjhi)}LJ5vwDZ#Lb(AE##jtP!Uf5z zwU4;$(FzU%PwRl3IK1I14O2{v4B~sn#jB9#gB9qhGXGZJsV!hFR;&3}nMYls^b7T? z-n4)V2{+gCgNc$OLUff9Xz&;Fs6jq;iMFfi3~g0V&f z^f@UBVpf7J_|WyylO{ZL#?4^iJLS(nE4xAMQ2RZv5}H(Us@r>Quh&^FGFXGxM5}>E z`P~#VuzBpxp*gn*@VmMT-O$_K!UeH=)EgTO|6lh9mZ5r%KLSCFe~j#{Zk-))5o zm4y|(99g@=6ou7{3FRn6-I;Z%`KVi~UMZz6Q*@ceJtpH)ygTP?l6%1xjB@02Y!$bm z<78gKv06V;NXN@Fhs1B>6*vDQAv`w8b<0?2k&_# zNhpYO`X7@4O>3brVbq~?ajpBk8mvROp=e?DI2xsCQdrCCpnqWw>g*_~N)?7T@p z^tD9f_1iDdBSyT_yf3bc45dB8XnEc`fa?f@Qx>WU#A39 z4x`shYmu7bk=Sv)y}>ut^0O%7c`FH7zueA1Sz|DvIUnUmpv{T8#z^!%YsR^)eKP;j;L?CUGGH&zncVS8Nounc)Vco%6O_AgBYmd0PCDzm@SBr4rkt#TdjqckJDl zo{owIVvM11-Bx2gv-$X?3Ocwy{n@O=7kr5pM4(m5d$#(DF5y0S*#74UBGUs1!>Hl3 zww1-OPN`m-_gTvKZ{{GHN?<=NBc}J7+yt6Op)CrOH@sZ+JT7&Hw}9=1p|13Gz-?7d zeB0t|BM}>QAC60)&oMu8u{oFiyb!XW4M9WX3A+We`_X>_uKS?DRPJ)KJHwWbYrh36 zp^7!>qRTDX%tzwv#X4xUJ@*ZiJ&AU-CjoRrfrg9IDSkS;yTEfonop34!#k^TAnXKy z0U3Q*5-tT-G>@+KLt>0|TKjop9`&w@ISe@OJl^!Js0$eO;g|Q-`CSEFb#li^A?B;^y=?B24r(rzAV@2VkPSa|Xik)>4;8abzb(1P|T=6^rENM6#nvEZnLAQ08SAgKZx*pFCKE!La@2 zS?+J;R%{FGS@53h&k|Jv9zTsUK8_i9lMId?GF?Uh;Xf0gAEzfxX55JQ5j*d}a(R@j zDCPjU-3sm)joojOrl6$j*nd@Y&24fSUPDH|v1nRvxkpf+1KPbCX9KyqB_8G~eo3T6 z+pcZu)AM$p{<}^A1eiaBSaa{fKDGbKF!i!T-ZYjGA;+gJmbG;(E91R4`;K;&6=X*g zb~lE2koJI_9Q>e>_`b|7_L4}@g(Qe4>ov*EhkQ)!208=o(=OxjtJitV;xP0@64Zsk z&?S1H|MCRt6U~m)S-uK-%j8v&Lq+Ivw0W#W!ZLU7W=O!PK8RWDHEjZr4yf6oJ0I5o zFctypT^#3XcRXd&wam7I;VJ^Z#z7vBx2*l@S^IXpv5zOCnl3j>c^5?W9A9I)Gjq^@ zKvvLN(w=k_1a>@0Mc`G;vwW-p2U07RLL@$O0^3>e8`NN5{R1B*&-y7PZF1%X>_a%;}Coxck0&nxan-i$7#lAGTxgmF{0f#qpq?_5Cr16@2!k= z?FAHn8FM;uMd2?O&kkINHt_FyeCreb`D0*%dv3g$DNDV-GkH3aqJ7TJQ+$F*ii-t&{cAH7KG5}&(8A)9?UbQo06KbD}^F_^r*h;!LH~r%J3*YFFZf1 z%O#U1{aISmsxYHf8L?Sb!=EeO5^kJW7(bWd6U*lL)x#KmLovaRxCf6FNofu=HN&1}Sp(`$MHzPn=+9&tH5cLcH%$`o{#hD;ykcqHJ|ioo1%q*B@Bl2i3gEp}B17f4rxe@v*$1hPEeHv1Kum z{scO#rH+46Z2_aW-#nyP-+N|FkJzt7p$NxU()PetiI-hfK773l6KiH`;Mh);q46L* z@tjkK4zK&qBEc6&Y}Yp%==G|#_8FJ-RWEt_FEzQL<9a0yun=7qj1Sp(crqa;bC*o` zbPXQ5(mIkvyzzkN0L9=26RV!~j-d-`hr8kv1Y&pz%R?r`x9~pnYE4;dQWeVd4dHXGM2cej(&db?G{RZ!e=eEF)l3Ykg7spu6lZG1fI` zNKu{H-tT~L=tb=Oj1DpB$djm{=y%*?h9@ISFaq($?uB2>_M*1VB6a^>cqO}!fU_$R zhQfkGv0>0H*={svtbTOF2ZrISD%70DQ8eOT5b84$l7kuupK-W?B=N9WO7BHVVdgM1sFloTri`9g)l^L~($dXNBR629J;D1&Glzb)oNH z@VGQxv=#enDEV_yoJq7?;>RiBL!&gOp3j$ag1UV!%vHwDX5F+_!Ob1A*^)!%0gj@- z^#+C7Q)lwEm~|ZCYP$n^J?OmypXJpsz14I~9@wjX{|UoJk!nmyJbwLNOI&pd?z^N# zXv))Asa^ZTF`<{s6JOLtM4EG9l|yjWaJyGj>s#W(IF;2QAfCm#(3F0_>r0W(a>q`3KX7k42oK z0O|a9^X`*XF#-OE=0j|of+{u&#cu|Qt`(h7J!N(8TgQ zzvM}z3{8}XbbCPHlGCD;{`ez@;R^P(bU68Xfgyj540&aMqTi)On(P~J0hPT3&{z&W z{K@*eJqk^UeAj}nMV(wHD~KR6*%_Tf)(=KI!xYZ3Ul!Jq>Uq+_cyXnwoxk*KtM_`V zjv0}(^LPub49d*CPr*Ab5e5m0ZK37(!h zYpi|jnFnVAB--2RYEaR8Mwe?Q2fKr-+85{;#cZ5)=F+`a#Het|QFod_r7yp?{gsZt z*Iz=vYMx(#Q8%-)*$x|C+E;2z((dgzuOuoxCo@ucD4GLaxuDl$dyh&~;9vS2ZB^_W zh638CYi$yzl=>{(B+t&wcqpxsU!=L%17to40ZJVJm%+WpoC0y423|S>*jN8aYoStM z@of2zujQ>WJgh0w*kW~#5m^W~oh=(u`X3H#CvCqRq13wr#G=9xn4Kt(Rj);H?avFl zMN0-BEOsZRu7%+khl@&=!0DBHQAr2%y_Tnw2WkhbzKf+jqbr)FH~^#amh+y#F`h58 zF@jW1^()%<{?HQ{sTLSnl$#UnV{Qn3F}0Oj88md@Wvpzsdrva413}eXPPhb4=VL|l zbslKCeV};BO|B}{`Q10glh8Zc^Z<1*lIpPTYNE$fy)AMs8WSV#WI@P7<2sAfe^bx= zv;R7;w>nv71yK@0!RR_mcWM@w?%n-(44?V5sEfnC6ph~MsYTBGD1N($*!=$pa;zHg z4b*iM_pzE3OxIGFCkv-d^a;jM z|1OK}eNi%*YgqJbrUB`GUum;Bp2z>jXDuF~lv@+GNw2=2xWL4x@Gq-j`6{rOA+M&l z6Ms8f>o>U!3|MPxl^ocha<<7}K7HaZVDnUxw$#~MGV+Lr{nd?nRgJ>p@ADuQV{43V zFBm`JoMDj>>a>0z7X&Q4d4n3Ai+q$$b&vZTJ4m^1G7c(N3nP<2$=vT-e^QnP&8I@% zEQ`a7w)le3%Y-D*qzUM=`K|!h$oF3$RTvZn+9)D?@WC1u%~7`KcV)aGW)bDQv>MZt zGt|*}+ifd?v6udCH#Z5X^Oasc*4aOxN_8W!JB->7Db$ri z*+m6CrJ$m`X_k^6vUvVV8r;zATpfU1Wpl=^s5OG;;q9NpEgr$9CWRH~f5?mRCWk(< z|LnB(o=A=`7T?|#B~PgT>j)E@uliMuGTkwM=;!R*|5HW#pCJI42(MOn5h9Z6TxDIY zeD@w44Wq~ZBPr01G8L=BH(6(0@v?SL4N1wo}VKEHu%+w)s4Wds(Z zlz?QA>02=%KVpRBHdJc+KV2-Cq<=>TQ({|eYKb2sfrJ>hKx^@x(%9#r$b%KdS+&a=CBFqtT0YBbYzSA7j&p?Q?{kOoAlJi2eL_mjXaP zg-mB}gUwE5OR@XC1Y3Q!(kDgx4GsuCRJ0-4*%qPf1@p1r#@j)ABJY~!2QUd4i=>p3 zj{ocFh^LpD2@4XYY{&ni1F$?Q7zkGDf*xYybK?@!Fr4nyK4oDTMZ z2t3z3QW=2KlOc(8c=* zky%&od+3)QYw$<<=xwM;V@DA56$^25%N96d)V*W@oGB{>SMJ3u>iKglfoEj%YzjPP zPz6YWvtv@yf8)HY6gp${R_=IsozjSnL*!5FKlvOqvpbdMMdcZ7zS5=USKoyIO4p*i zjZ_B!eI2MA%K3Nh@oz`&;txdyPon=8G;mVM&00{icvsav{=Y#)VIsauAw_(N3-K=s zlZt`~VS2tZP1Bbu)1iC0w^IX;D<^rNZ_Xpb<#U=s(`g}GW|{TYr}hN;%{ZkNS!eH4 zzyowBW~~j0ypXZUJ4J<)k@knFoSz*Yw!Y==&*F9|e53DkWXy&TkG zB28bi0$76s#85-Q%Is&-$;<@6ZE{`6H*#gAEs>T2G4lJHW}6ECPOb{M#>7N?lYFL25$ zn;>twMSA&~$pr%mA+x@*UHrbk4%gUum_+R35gey=ctutzXo-LSNW{7kj(C)%VWE6t zxX6a$zet10@Pa0J#8+W!aoH`hGqzHCLaavYk9ErsdGiNdLnJ~eL60xq5`TtAsII!o zYZ}s$qQ!Opch^zCc({Nr$XHm|yBsjQbI zO+>I3zDAYNKC7biLh7goSU`B#Q0$61txXwp+mBn76sVw?~PE6W;S!CRGk$^SECn*c)F4d4BmUI`@& zmD%n1G+nbWCzH2F%9w}8Ft(Kv0~weD8)CdQSl2q;RKcc@bFG!2hO1fN6II1p)I4Q- zm%v&M4y8YzDes@@&aBE*+kC1GA*v`BixW#&H){q!_Pg%Y$)1|-=Bb9zN9$D$w`{c3=cLpf}E=zAF1{%nFCXWRCA)%*?RLVaX6pGLYSW4 z>2$9N#ttNvM^VZBOPUd9SRSdeN2M1tFDL4qu{^)29+xfR4=8SnF8^_e<@buO@}T2} z{FEaLlSh?AuAMHX?3fS))v=_w)p573qT!_P50A`1-|+vxwKa?!(4}9(N_&;=#!mV* zd?2{oA}tulvw$!zoN5{wm5nU@Pe81pf3hte6?(q;h;jXal~W@>63!PipDk!LsJ^}i z?e)}A@a@Hx5(1{-(DG@cOltS+<_#*U>pJZ0$`U=cBZA8{(B0qb|H;}@2h(%Wrti%2 zf^9W3Hz~FtW`RxjsGPfpVnS*X;fehCmj}xgLmyZ~E>*z#TEJno{{(RxKt1+ermr$& zc-JPKVjH;TPauQfCo%MQMmzY`90aU1^ARN;Z5DR zzNocAE^dq?9zfNsj8f*&J=9eN(GEdEFEY{_@5JjOSgH7}l#EuPd%q+l{8CeA$kY;`7HB)Cvb$9fNY?gPV7$USHaMJ0DN%?~pRR$YuAm{oI2Tl$JM9T! zO@4T8-OOn1&qr!iGG?V@s!NkJ@!`vubT%x0<;;|?Q)IJT@H?>#uyCA9H1l(3&M7F8 zj&!=0fXW58)7tVc%84^qk9wbPzx}{uL^VRcZvsNo6rb#0$&s7u`jGtJL;BwXNos}! zuf`+0Y524jSmZM$je0_!QHc(VtVOA(WF@)wRAcIC7kJKcQue(vp9lPz%M@uLx|Hj} zlnb^<-}mQazUuYtRrXA#pAy!*7ko=hr20|dhpK97nfTvM%(UVw%fj|eUv9{AEL*?h zs-W>?l2uX9mJ=pB2NVKlw-gWa=+;IUewb6x6e}s|5d`6?9ZZn}*+2iAh2;>?XI>+o zT)|`5+t1bo4Xd6{oB=OP4+dJJG#_d2{;s~x*?HJX}vN)VL`xG;aP zmVHT+y@w+-Ap4y!N9@lH-Z7fzr1n%A{DDZA+8JnLf#)gy^;Zp~b?uLBOtd91Or*H^ zB99zEzVOD2f^KAHaOoqZUvdhUH7L@urN@;WiG&Ih1?mrAWm=)s4ftwP0$e*ohA(@fF162;)6aubh)%&LU*a{{@$ETn0#qT4!81E;y9QD5(bR z(*^2cl{L(XqDp7pYT-CjUy>zuuAVips-Dy5W&*~NNH|ljNLW%8)shR2$$eqyE;i|B zM^kUy#C`vF3}_6^hyV&eBILZFy{qYT97nI1;?P&kBk5?D{dve0U{k4q&C+81Ksl^n zRG;iQN0AG2Us&!Jfg0|P=SB4m(5AN&7C4pWOy2446=+9#Z^PtfUrsfcy;;M5manS-F*}-MsuiexM9;3&Rk>+8 zmliUSK9|_7^1zmQHd8^D!f5_-r%~XMRqMq~*q*uk(ws~e?BXPquJ&BGP0{KeZefx! zRK0${j2)6;ANtLwK$5U=5~FMQUyPmV@|upTfad~-KLCJwFjPZkFc<}txg64eKLhnJ zFmr}~;zoE?fq^_>mnCf#Mo1%t({BA0#!jkBH_$U%tJBPFCUK!Z{Bd_JL#nf?s z>9E|GZt#;O4PavT0csA|MEL?7{*CiKePnW&dMzWT3NC zFq_o~Vs8F?Jy5y5UBunj;BVEdaY)&iNu*1=Ay?@Xb*m&ljWouFxwvS2syN{ml{bTg z*57wN6m%~8o%)@2xf#;k1w)yjdZX1+;_I3sWVHCqLnV#|`chLfWHt=2=zFZwq#u}~ z`3lGv?#~&|d}pyW#hfev;OQ|LR2-~JsdnGNoqTAl9M~q<8Xi&3mfwXo6b)EW$$L$u zJT!Zd0n}TWkq0`sLI-%W19$V;V<=YMiyScE#DHiKghrb8Bmya{tFb4OlD88|m9r4j z4KJMy%nie!D>52PiXd4f`9$5v;7%hQH7|{GJt-Z%9jAyi(;d~o3+8wymKSyzb(MRD zJA^nr!@QBoo7)EAw@;eYG~Z2H`EM^lGYJ}lp^+g$$IlBHS7#Y84awm| z#`|^o08YT1?5urZCPX#9FSaJcrB{nL|D9c=a-QjzLORBK6T0EvD8c+twkxV7EUEKA zGs7VdSL(|%`PECt_zx3%nSCM_$DKUubcd&^)C{$&z#y|)iOV}vr}!0?C8klvgzE9L z9&7zb*$s$RIL*O`G+2%vlRo~7Ot?7Z8&{oT-u`tTFJHKY@J_s>6le~ci}T;L#1Q_@ zMysk9Oa)Irh)w3zX0q4V)$J)0E;DhY!cYyQ1qv}I;Zl`1Yqoh3}G73Z%VFz<`BVkI9w!)}hALDg&FzD;0*7S6DcqJNk>G z07jwL!i?3o`n>+}!5HWWUK70{mOBb^SNC!Ov)8DqzC8gZqJ^~BcFzKX!PvQx@y^W( zCFJKpct)&FEHObuMxw`l?3Ut-27q&R|CtFRO8lHS9};9zixNRS640~^PGiK0gUPs$ zO!}V~KFl#)@xekIM7!$B&+pI;;Rz_#in2N6S+pa09`~FjmGo0p{|1@R(q1RKOTQGtFiH zpw!2bI~2CSJg%V_w^KocDewwvRK_*$UGE#X3+waFBMOmH&JLonN->2XgQPCc0*VMr z{1C3IWH(3x8az$Da#40P9kZD@*jqGlUrP9@Bl!=c!yaZNDo0JzVR>_kbZu5TOpNsB zT}Bk>1iwebmPKeZ#dE8gf5UucBT3T5X-N9}3Es#mnNTh+#`$Hz$3(!P9ZzlF``}Ka zq`Tp*kmP^~99J-tMB}A=wEZpq_8)bJ?<|lw$gk$BtA`8szMT|W*}pnm;WD{6i_J_SYswMMn;SXW8Vj6oT+sEDn>2d++QTF3(mspdQ1mZP zk%2POs+irDNRMK)VKr_0mygbnEZBSv1CmQ5&nrWRga2%Ob8n>SU_9ra{&U<-#I&kq z73ZB6DPkXMY137(@A9F!(-yjxa-3Y3xdi| z&ma!VO`EVPB0BBdPN55575o*^4h#1{L~IV9wk&8O3|d?htk8 z{0o?9`=lH5_%9ts!sf)Lm8RA9bRo8n3Zo>84@tb#qW?Wv@8j~8= ziy&n|B_dj$L>%199d$-sIUXg!1~-h_)XZ~#u`%2IGRUU1gKe5bcKqNk*qR-`o957A zJLlR-T-v}j^FU8}gVXqPizhcO5~erl6mg!-&JZ45m#dKGJPKW1ncA8C-#Baa-Nx>i|1eW52%6mFPeY0osmZ3Vl-LLr@Y4^lKacsJXd~IpZxa+4 z&4#(_QF|*Ho-3khBQCIttU9_-25SbUYZ~v{h&!!)k=PC1RvKDpJ1;BJ>2NKlZ^U1E z5C*SkpPQGnL|u1YKMWjPnJ}nez8Hb|%BsKipv#f%Dx(G|SkCXst>eKB5-_gl$FUC* zL1ejE>`5L=-c94gD!+XTJDW)lVC_N_s^`uMU*G-$O-?};bCjvv)rR-?PHk!&Vr7-p zV_3H-2wv4EJ=eLk`9Rr4O{4l9n-YyypLTp})#q-chA9U-XtZn^s#0l^>Kyjt9_;LL z6RSl~YXNU$Q9d;)8$wt7a?SGqk)HlEk&-t9j@61`=v91_uG4@m*o{#=GGc%jn5~(a zK;GTt@;1JU)Je)4t|mYkEFw`KACT?5C7|OU=9%np4q)%&-AgQ3# zP(B+q22WDfL*J2=7PF-h$AR-O2wC)+WWkk9F>(ev`;dyli3>9ERySBxX)bt^-%TJd zH28P4=|}gSd13xW8|=eis;($;Z;uT{Y$3aGBE}6j0Vs9BsszZQk3c%98GE%C(4g<# zWwVq_OJ7X$%DA1p7A{#%rU$x)2dp_}nWR}0;Z>a)Z+u+UY}hy zA!}L-7kuNXgO#VYMvSn_Hnk$1(S_LFk*@{V0>ym`l5{fo4p)3nKd|u=h5`?po)1{c;)+LLcZC0yaa~S4iR5O5l6 znrHR=gT;)pYh|)h1P*B%ts#x(3cfPeMWKgj>TM3no!(grCyE~<2mbHjLtq(vE8cET zzDINen7vp_SF2H)BR1xLnClI~%rZkRvfuI=^*xtjq`1tosR-n?YoIzg8nK5i+);Qa zUrW9qh?$S-3hOTFr<0uYT?aH!#Y0*2SZv%|xW#7E#LXiUB}1b`h6|AOM?G7@j-0Fq zL6fNXntVOQO zhU3s}(pSrJ=7B8nj3onc2$je}r`c!`0Cflw7YpXG;}RDv$d%e-L$&|eRSUUrl1r7dvfY&$Ek~q66}m?vgfo+LlHtnYka*aK6(&*0#Hz{?q*8c#wLW zq>}@45wLjjfmD~$fi2+wfrhfsW4-o3dQ6=r@HlVM0TSDRC2g$tbNw#qkf?4DRG4@6 zD1UmaCCqokW$!u1T2C)*%n_BpS9Nb`K4emFGMv2)oV%sbCwo;7*6{u&P+8Csa%33W z50iaU^q42JNqRAbuYPvdqZN} z6Vn;-c3uKALzogyr!rt<%>d#H(Ph0V2S=3e||ZFrdgNy>S)q69!M#E#hu!<^D~IQA_?YJB_2%8x_3)=@g>B z2$!3CkM*MTgfbVN2UNxlo0QktSTO6=t8UDLymDMU@?2iIP*Xe~=m~FnyL{5gz`Wt;zZCZ#iIlkO#J3-?CK?oOzwfk{u zffz1ixxsGC8J#$hm`YYqB`~JYN6*&WrZ0*pB<)8jdh|+Z>0(Ec(Du8YV^cHU=dnfD za7P)sKVQLb_p%IMFcr!R83*eWmkeC*($Ra#2sI%Ez6!fPsvNY1iSoJVaa-hHU8;y9 zhhuR9J#kDOhUwwR%`NB+u7Y|svbJPe-;bMi(hN`>I}bL573;7=yYV?IU8#&n6a5D8 zJhcZStYG^Ms(`0`M9^W%-BEUw?=SxEF*uoG3F$DfkoL-Q9e^yKlVS3EpB(sJU)U5%np^I83 z%hpMD3j__pYc6TBoqTyUC4Fsk2tdt%&<)nnhbhxEk0S@9)fNXQP!hKwLx$kme7&on zhjWSv!^}j@vEuoYe~;G&!4z(|@NQka0)zKVjxB^O?Sov^`_+1=;=Ele!XOYdsZ+A! zJi^4{Z#eesWY&9>s6rz9h2PeGEHfE3d-cMZ?AP*yOYio%H<21zs{@U@OS&6H^a>lM z1b-mdRWd4wzvl`AWHPa{umuNe;^msB$J)@ket}!3*n1ZR;0Iaw&rDjQ-)v4sSGb&;KID+XV=yB@-g)%@v&S|Q6FVSsn}mH zG*<6W6KO^c>DqYW;Gt2d&-Zy93KobTE}E$nLiDNNDSnNGGx_gwpQ*a{D-Jo+(E57E zJ-$#4e{W2=Z0uJAH19gBIg6EEpik;N5kT9m7x*7>@am9jeyfZ!+kb}GpXVLAJY_ae zBD2T%{}r_V|1*@Fk}*#IP^3KVp`QECOF!3GYR7zBko6U(qj3Vj^zLF#;=hwB_uTTj zv2yv(uIXa+%P?gO6 zL|qLsMI&A;U+JQoTxz-<=y9abLaGF=6b?#^#)0E9=Kux#d;)-)ftw5(-Yxu8Da(E}^FslETr7;^*rXI81_u&jq{? zi5kUYs0@V-bizQg4j(Gj2<%48WR9X<@Lr5NMM(``#o!Ra!Pr@Kdld%UWH0aT7UxD6 zF5L%22#vT#uh4 zHOe>Cay8{M44@BFSve^pKyENU>@k88$3HlruP6mA4M1t=^%Tvaz=je^BCZ$nJ3%^| zMnfOOf7Hl($R-!Mg+(#N^{L#BxwP2}Tlv zD4L8P^rF283O9AffNxa4i5j;=*8bQK^_+^p(jtV2!px&Ee5D317hqAWdT z_5)3&|0Wq98nRN`q4P$0%mOdS-Kq4%`_m!duz-ujhJ(w;qrv6;0C)7EHZ?i9VHfU9 z%tSHyh=q@zDCpJYyQ@=Gn8%X-FrphOsCuJa9g~y4=A(;5=I{WbPly6(IvG4iU z`9bkMW5~8NNOcRT>*5A%3#wRUT4VlW?oq06a7`|d^a<2HP*2f}n`cQ8hqj102KmMi zD_o)cn)Mu}2GUcvlxTn3PtU+1SS&R$aPk&(Y-?A6$>sg^1hCVERaYO|{KJ~9JnbiQ zmF?w94h{lEZ;2_gt>Bw>Oay4#JgtXWD!nih=ehcbUc?-ja5OHi(j?4WKy+zM1#LdG z$P0E+0-TB@w`OhsZ{>|&!=V#;rME+Ms=Q)rHX602;HM%xe7pu67r9eHv3W-ZZpAqs z3dtd+_lL%A3 zzRlJG^KugvVd_8_AWLB7YXwd`(*t?#se~!_5!II3{zM{!BEMm+@eFiS7E5v4^X2Ww znUt}0y&aX56L;=S-uG4HqX+sKB@q+Az`1Te0-=>|@dZ1lRXiH;kO!ms`yC?sz?P zD)Dxt`asl4lFMQLxGi%G3}99l{d3~$L>6dc4CoFG$8QBI*5FL8fjx~SjL|OnY_6rv zkmvhqF#aCdA>COVo^A}fa6*j=Q9gyXfFf`3L}n7+^xi0rC$k6XU2q#W%y-j9BvH!J zhnYrU|7Hs#PknN$j|>t+0J!Wf5uIUU;(sWUffmM1l3&V(RZ3xrbIov?_{uToWB`#T zz(9iq0APv&xn(Kv#(SE&?Ruzwn@iZq z(-(|PihuZqQ(>JJ0|@gd(i(D~!==fBaSTA0>lD4~F3h~lDK~x? zBu^ISAW*3iz#5p=>7KvVTVRSh7H@?TuJAsb#SMr>xHJR9H#R*0evA%rI$WU3R`y|ND zLbS3eJyWpTuaPIw{!W>^Lwo2}Qd&#VeK&07I%o|KR-0>Mm)m^ENc`T+`P@oxSUB5z zO5rY=Uj}5ro2u)>Hti#{U?~%WP1x2YTW;KLX;!hwKn|00_w<|u!P83H+*yV~tTn96 zU3Z$k#;vX3=y$YH{gNa;Co43j|03ZAeQ$1FaXmN8L=uuUc`hb0!n5Y!V_vrW<*Pud z)fuhBWcKrcFw<@oNwg?Sy2cM)>a>qBHaPyUqC&2F&ZclOS#XlEDY9|Ljurdvz6ZGhby%^=%B5Dp^y<=GET%${k$t^ek8j z@m4+8-q$5I;v4z%#E@Y5V@DHpdwb}>74XwZp~>1;1#}@{r(LAh`!dpaL9kv|Jnj#{ zTO_G(q_=!Q?aoCoMOvT-4bqaLvH@fGrWi%MNP`B(P*Ml2^mYn6)$BWscSnu(B2{{Z zykE4iIv>==V~B%8#@2}J9#jLaJ_H+O_;UC4zoPddx|45^v??d9}gu?7E9wbyO*f-OZ%Ms++^ zdj%K2OIN06u7xEd1l>F?{T5dmzk1TODzf@Fxce`(DC0do1t|B6yDXdbgu?R!`@b0b z6;R)Rj=1b6$d!9F6zCa4t|L$z6v=DYR{RwL0$<$|=C?*N_2#-NneX@Hf*w@Gc_7pd0Zp=Bg4*JQ{MKRP{UJqS zp?JhK9z@&{GcVxXT3}xP?i|N72Kp{S}XUK}#k&$|he^p}^ABIQZ$4lMQCQb+N{iq6?TH*%Uvdm)+D4og~ z-C@ivrm$leIP)xgc`Ema+Rbip@lL)&`ep&-WxrQ)i|bT0y$1tm2*raP?u<#on(9Wl z+-i#2jZJwY3z8XKBLi!eUW7oz83G@88+cRJvsd}yMZ>!cUH**--8ON`^`EOJSLb&+ zNvRo>R&++Ff?MU5U>qmbGdR$XZI;sK87+e=ua%%UO3n1lZ{R4lFj_FK3o7y)GuCF{EC+IN%)l;a5EF0+a;xfQAvp zDnT1_r#ThBm=CDU>lL-aWmgrt^MDiBn{PkDxXIm(6QR)M{iWhkw-O^&uGJZ(f#< z(hyu<#j`FjmojH2Xul9~#OvOf$Kp|b6Ye{KGy_T-WKf&>;y$TS1X5b^oLcMAq74yd z7A{#`(m^Be2$;-bV`}|e`xWrk3i$(I3}OUH(_%dsq`DnS33!ii1F)n*D14^l=0-Z& zwAWI42~6fs5z(x2T$G31+O;29$&kT}&5Lh=Mic;5xhTwTN;(UB@{}wis(EJz`MtkF z@(+Rrl54*hVb1A1vbcb-#&owcUltnQMlsH<8kYdgjz5lg{Wfvz9+D_=S+*gKReFB} zl@ba6!{BvWYzD5juN*zT&79fkvW;oXt)o48lyOzf(1HHcu35Hm+7e-=GC%q(3b5_q z->iZRq3ueDw@yvyVMDKF)C5D>xRA9zJal~V+g~Ya2t`Q$%>yp}Z1qTFu$ED$JCe*PK51b zn7t7~xcN*HeF4&lNF)sn_drn{yW7aCFRACGD*??Y+ZANDFd4furu*iEA_6-e?$eB( zFqL$Poim;^wAQt*HhvX*+sEYp7nd_)^)q`zZ+q(h0<|%Eaq`y0xZLLlXKsj$I>h zYz2uU86w)*Hgi|qdXI567A^BFP+kFydd={eC|w|J_&EjL*xKNIwCqnP_pEmyH|*6Y zHrI?;Tc?F_guxQ4QzUd^Q4_i4Qh?CmV=O0Wacq3vW={tIbh1CS4!g=loQ`3*H@UG; zt-kt^xwBYN$%DSm&g~EI#T;((ARODe&~4-&=IM7HV4~2kpd;EmvjdFyIP2A=Wi^z8 z6y+tM>0x%VyhEkl`Jp8-K}4%YEz-|>?E7)t^x}-#>PFatJKFyX6fx`08p42!G4nAX zD2=bY?ejgduvU}0h(QMdPCY^3gOUGlT(zgTL#`muJOp}*tC_}gpe65GvtVF^B4f^k z(UQ1ihs8-pLQS{qm|;=?SH($Tf2`#7-)*hPZEh3mxb^0l|3ErbQqq+IOlZeq6)dl} zSlri%BWnB2;T*H^8GI;zPVvzv&TuP53C;D^F+Yzx{xyulq=@V+_VeH6<8Ahj0M{MJ z!ahH;TW(JlAB9REIbX#S_~WPh{+rS%%j<@y1d#SaCTT3vFXKvoZrN@Bq%p|U0GP5; z7j$K&B3g@|uF@BzKML{y?P9|_%y8I3%w_$F!p*^Xm5xZ3xpd}s9zCw#;-(989ul7G zKo7y0+~5voBjzaQi+2St+ux@j+y>XP!Q5SbB{eetoFDeZBjQ}2JNqFsMZ20{$q1O_ zuM?pXUaL;aJHBEf-q&M%ri})zelJ+uT8dvNy%YLH)G9>37`v>m%mV#Y&2P3*fZQMM z_hfkz>|!!rTU5Q{md(Ff&}|Dt)2S?V7)Wu~xc36Nn40whS6~~5)v9K$OZo4iM*ZXG zVfjDt#(2#B=Eq;#6`k3JT~45qF}}r9j+F^DLtOI4w$3GRyZgi3KRXD^+TSZGfNX7e z2isuArmf4fTgzVhhve|iR|_pvW=lWr$*3Vtv8mMNt@gKw9;Mt@?&W=WGT5sp^|oVI zJEiBf2nV)O*cP3jp=IyqtDWig>#yNiXbaj_N(S-y_jsK;3~a$XrySSwyT*D8HAOkM zssws#A!JJW{Rn*t<7P)}+U9GgKOrmf)~Jd_Qosm@_qGXdEqo1@v`Qfx9in}sIA)CK zf3#vTM``tRke3)3f)cAgN@%i?$efmGh0{?+gd0UAn;ww;^_I@sXsa4fKq;UA17T_uF7kWe^2OeJ;I>y{Hvi6wet^=l31tt@x6hLfy8_FpIev15F7H{ooTYUcAT}cCo z2Nma=Ag7>M^Xs&GrGLbA;`WPAu#(_c+msVkRPp@{()$NCSr+(@76p3=Iu; z?=n@}&`385$$xR`XfUfU*%qCOd-8>KdfTo*9V2+4Vu=$r5yAekPpbaz%OIa=m=2Yt zxJ8gG=+`Zzygg|8)V+&lZ`iq{f5x!=c8UD7-|97eO(R_{CqwmB(lY~-hC+!^sH=)6 zH!b)1lY+K2WaE5Fi&z@VJTEYiBO~j^kpV}LP8hpF5wI>yhqj1?*~yE5G2wq{bpKQ9 zMqOIWbhNVYdm~I-0>|W)m>=N3EX!_E9sjOoqkz50!S1tW<2Q6y=~0D9_rg$5&r1i0 ziE=$t8*!A6r570N6Yb)HnRxcNJK?=lY}4-1V6E+bQ+ZA**)<{RM|cMJqlGv@^D)Wk zsi0+^(~YVP4g~^R7jsnM9G5J>RtuC%mqC$7PeoW~-#M8P8Qjvi!Yu zmy-NUNdvQ;k)oRT82pgHmK^e$27}=gT$m$R>eLJsfIa;>-oJwEp~#UZU}&%*dwq#3 z12$%lWOSV6q{aWgif#R5#}=-iUnb|)`1}7JrRp@Aq9L5mc~~u82 z7n27hW{`!AqX`7|!AI~fUw;vF4BlR#sM?GvaVLjmr)5gAz={fcy`t;;?AQgBjN5F(N@_Ex zd1T*Uk+eF^?}fvk4^MJn^q^KXQs)(~%Ju;_aZ>U^5Ys8D@e6j%;+`3&y)_h`^{;XE z;>c?cEkY54D)RYA6rMKMWpJ3?3iG-jHrH;tDSzO^@vK|0_Fj7FXl{%)_$9M{;G-7G zJ_f(*AqXl3?-&T03OPp8aQ1%f&c$&v-J$WWw-dllx{kryp4AvyO7mNGbUnI>oeFw; z6EXGF$F}fmK(N_n^BWk(R%ipm-A&Tx`D*#EG8;VvglnUj%@4-iFhY`x z5=95XGX>z;f+c~5aHKfZ!RVJi5{?!-< z(dMznYWfZtI(|_#XX%cM`XNr%Q)GV(C{6Ti#2TdVbrOJvl;&0l>DxJEpJF` z=YG9-T1%kG2lm_lfjjV)91>EfSQ5 z*T)|R@C6M~zmdu@4O{*mBTx#P52xj%_R-=42$=uLsLxb?4c=6K832BY0~w@+i0GmI z+lW{UeqQkgB0|qnHF<2kixYLv?M81URxU}eT^0wRMqpRU0!rJI-3p{mwTl|VggQr+ zmEdP*rRcVQ24pHar_KF7krNHx{x{B(DM5wi;o!fJDFJXBJVxd zv|4}-riIGYb3LT1lr=-SwCl=&pb@IceFaT1kr%1xQvTWe)%a3dY9Gs(4J&J?^|XctGQkrG5d1N>BR7c)PSj;lsw)vERnht7=t!#g zsLD?m6;L44Cx8GdVR`TOOnjk$g%iBtuE$#{yLUT6H{ln%AVf0Gchew-u%$fW>Um?v z=t6yzH0c+}oZqp<#ZeCLIo>z&)GM#@bfzvguNP*dy$UBDdgmT|_L8oRnVKYOLK)^Q zXj&iTX0gLXk)LCdn*M}A9;dVhDCQbQfdqBMz&+yWTg!fZI)k0UawTj#Gln+aFkGW|Y!i%4E7qcj<_8;G~|qmztR~rm#LjvUQ5WzFy5buTsvYtxBex*I7C^ z4C`ndbeL^mU4JmoEIWKzT2M%_vc)ECrwN%&Y7y92)^9jo;!yW=ku4Y}LNG>wxpTof zP;4TL2&hQ=pynIJgKSl)z#c(VM0#IV_vXh+e3Ud>rx&G@;e!kj1%TF6MB94NXtFD& zY`d0TQv@gkk;y~wYxM^m@wz0u-jQ}RO zJ9+BDVeZ3lwwftE7{%x@7i>l9%&3nTOZ9-M4Y zF9Ky0aRJHLMi|6Yl{8yX%OG@FekT-c?k$LRjGg=!Psky~ULMO|?4J{@wCrkKo|%;I zva2vpE^jIUPPMPgvj-5;ZRvA+9?h$iOsmZGv*n+f?%pw`m#WTQbM^uvjO3axULK@I z#xh4;ut?u=fe63yznJx=VWkq)Kb?#F?6?MxC}f5|0D(9D$=vNGvfPFCR7JKyFTsiGY8!os02J!~YwVA2&T1 zUlF-kS;D!i{@JW#W-a__%Tavz92cmf)AQdVxTbf8i`g6Ayxb6g_iG@R@BR(??){-W@jOTmM7panxJQZ=Y4MQv8YTc=Mg z`ohF_L{B=dh?x4%z%PNgF7^@#ZA9dZF*be**DdF*!jVw6xi@jZAIgZZ@2dJT^QXe6 zu?TWD!0-;d`9|3r{zY{rdP-lcB4B@HGf)y*GW(~1a-lmF($oF8XhIqymQGlI>RCY@ z1lZb~h{XyOm(?YtwascS!9*Uax4a_a4x3*)ZU(q=R{?*`L#WIi(kf5Iei#v5fzgF7 zoc$pSK}ErQo!=OA)C*e}tOATlLS}$;x)8~aYy%diGk#A}(KKQagS`kRzQM>@ax0~g zlL(n|-8yjm{-;efq_#-k)Hs zZ>yh5-Ho%M>c>W#q2cZYnd;6!IA0^Gdr>N=!+-Z`t?bSTRNj(405tot@h55sf1XVo zLLCL>8wHztHbKjSSzUs3Vq~xb4M!jUWS8vlwfeF1T)2%J0U0X}CBGmCr@&D3(HXc~isJhwKXM zdd1OsoNtwHbyPu(VYRajW{Yql)`T)geT8;>2k(^efr}jG(f;o#;`W ztq`e{qPb`I7Ys5gjHMAWm^3d{$Pch z@dvlL-%Q(EA+4-Yn*VWgX6|IqGjO*IE_~TL--DDEB4k9Uyy}voZ_bwbI2J*Csl;Qe zXX%e;gKXPQyXNZ+WlYWo`h;0>!pyEkqhvPu8V%h(i1YsKSID=)qdtHuaTga~7my;+ zk^Q`(9@E=H->S61zx?~Z7IrBQ)6Yk8>nVJQMK|F@XbA2IlkZ2hmTG%X*ix1xyd0L@ zw?H7a!Yez!au%aJh0$1D5}L~xbv=C51ViOw6|SdtQDrZbp+BD$?+;Mb;%eN_+`qqbuSiPM zb?pN!l$jP0p|S*n7mV&=0t;9%0)z1d5^#xFw-*VriC4GGD%5w`Q_!K% zTVE*97Y~Ie#Ve$#CELZ6#2=T(%c|%>i#>@pr;^nIV(Ixrkwsvtbcks!VFf(3aKoQ1 z<(T&A>{Jm^8oTk0#P*goE`RJd@K-jkxL4d+HTIYQZs3ZLVj~U-$`ef&L;QZZXZrfr zK%P8flA7rV?dbVGqf?@tPnHGOV2*CrN$dl-1Aqk!Ue%+Gq$Q=EnC%@g;9*GfWJi(y zo?Zb*ub>96SNLI6B;fS$5I*#jpyA2_-D)o2F>-YYNz@g)8d-GHGn!$LKQQpbZ;!n7 zP~9MRIgSSHhIcEWp{$MeAlw^#*oZO?mq3v1BsxF2hm`S6Xh_i#TrKyMv}}k{>Dl2J zRE#angmYL6OG09v(I*_QF=h$hqxH3S;Ginom{er#xGy2i>T?}|8e<~J#%ci*uqj^} z_q`adR;#8(;F^8j!n+TqjQN?#Qj`P@KJE8eiJ<0?o4_lC>*@ghuo9Ey05l+Nnk8?W@dK$%&;w_)MymJn67#52S)DvOES%1D zMSB3wX(+j!BAW&L&B&01uJH}7+QrR4C@mD-xvWiCfDbP!L+D==IS;ih{0>Ez>KyWB zaUwDqIspg@M7p;?l|SJJ1&m@Ad199P0EQNlXQaC5K<|)> zZ0-N8>knkkNU1RL5H2q=<$j%iqeiGbDVx3ixV}oMW0E)mH5&% z>6AwiVS$f!Ap;*4M6}OfkIDD0qhJsb`FeEojIq3BaU-ztni=cAEv zm&{xqR^adoWK_@uB2@m(Ra$5p(|%x#N_cB8& z>s9@&pfpFI@`x73_#ot!%kTY-mwF;w_|q5n^xw>kXR3cVe5eu$<-(5!bT(45S871` z34{0|^{T6eS{}aI9K8t9AoTl#5e!tRpHZ&OceyG%R|Kgmaml!3)hg6Bd;V zCsRAPl&X@7O9*gfy<}ThoeKk1P?3> z)xHTjp)aCL>22QR)|s;pWPy|{kOb|^q3s`Cd2nl-f;?W#-!u&II+OrF;3GSEvC6$C zWlpADGnPdwBvtm)kF`z>&o%?4rTjLsle$HWA9B&C1w&i-`>g-a4MW#2tyNqg-Wm0Q zMw_q<@B&L^;9X%1S$iz)BEgj#T1J!jtQgj=Jh0Dr?I@euR0B3Hwm0&Scj|UaTbqTf zu^e2qap`d+6|Hwqk|2z@RQr*8m9ajJNr(96X#3!`w|pkFs=zs(U9f(+j6j=Ya|`)` z>^%L6VwJFoHgQCTW1r#*^*z-E-p<8HCv7CIDi4PpNPtD_`%97jbQ7$&;zB@-MBNfv zGVVN&^@qPwxL*T&b?*(m(SGw){%bmoo?(iRN_sFZW>3&uUT1RJ#5GkxB@uoM0E6v@bWj5oK@OXk#N^Iv z!Bnm#cVc&K-(^WrLb%fowz7vMBcm~p_ zOo=H~5Qnz6dcPw;1R+vzARH1Tp=ppSn~s(#l2t${$F#K(W}3YgKaDWT4l08RC;3Sm zUyqB&f)O${$ShVOpD)(%+d&QxB39%8^29f^sH{)X4vhn{ekER-CCfvbujICtq`GUF%`u`laEDL`Nk(14l*o2d}QG5uXU#M7B9#%-2Y7wEHQS;M$Z1zvpqAbliN&G z{ozJk6)Pk|m8~W$5(;u1)-FWqCYLE-eLD$En5vrDzWD)ok&t)YQ3yTee*O}#EuULS z!DP~(%!IdxK6(}tU89GHm=7t9NY`8cH9~p|sfXzJ8wPQ*m~T7hqc_YBk!e?D)}&k> zsmF^enzWHF6u_=EAwLQjIMz;=zkPmV(r%JGF#SE9W(1^-<^qNMExG@S-I>ah9fdGK z2zan<6^?0%N^&*pua{&09nV{sGJ7=pqmyKg-&k&bVa!Ozac(NsUk{a;q*GvC>+`Jq zN?qx1EKc?_&TG8`KKh_a>}{npeIEqysFXJv0v7d}mhRT|4QeoN^P*D4e(U_JR0I%| z$=|5n-u85pBEeH5mZ@W1>-{dXRnnGqxbbp~54yA8cYk(lHQOrbud3cJ8}_J4t)Q3b zm<=Ej(o!d+k|q?`In_{yG}LsLRkB0k3MZI(7OB06c_}EUnEsID6wT(1b`n*if=>Nm z8U5(qld1tEU`64< zA?6*Yr$%1KS@%%tYbKFKG6YNCq1A;K{_0|3OfZ~2&Ghwac^4GV@&^6hLoJI z(rH4Xh-=0qQT- zoEr<KlBAlBSX_DjxdmpIx1lNcn=LZB?4r1tFR5rtjRd6efn&v zuv}IT;!ek}c$mw8@d>0Kn@da<1%@)>^fjGUY5B6*eMb2KPS>3h30Yj6Hv@_tG~Y!+ zsW|@*jIh@;7dr70F_p=5mt0iBkghgmb>hKD^f1W;S5P+SUaQa zT>R%o5S=-)r8-Pmb@F{NNB)_4H4{8=(X5lYQXHIh;_)L90cQua!jb*CQ~CQp`W}8( z<{x_zl)4tDYIJcMc9wv*Tkuh%e`W>*%m zyof!YDl-JA=I#xYyZqa$Dpba9jMIFoiAm3}!>p)$`^O8(u~eYw?mABPxHBTKK4L{0 z08Ps>>)Wsaf$ZzkD2@`;{fvU7{T;(Ncn39eJ-Y%D(`$94=?>d_5o)84x3Mpo1@UfU z`Z^=!?!a-=S7X!V9OW*hb`E46d57VTU~l&6PoKoYsSik#i+>s__o!YswvS55H=(Ki z_ryzdmnL!IAAH8SH#TJxrg==ye3a6`6H32v!S4`oc?_ypQSueA8gc)Y7g7A`eR|bt^@k!#i%a+~;<#4dPKv3`p~$tw zIE3&ip4GNhAM31N7aGLSm!@-)#V-c%3B&bbMD^LGA4f6UQP z$IGeCOTKwRSUY^S6=Mp6uD6cU;k*Dl)nunu3tdM?cj!h8y$~B>3G-jUPJWb@DRq6- zF2hkCNbPRdQnn>#V+>5*dea7pBMWVe$##kqr?6zslf;F06hpJfJx&GnK<~rr2!%;n zXbvc-@XOr9VJs%I;}xcIn%CrHis!ZrURN&p1xdK zW* z>`r@>3^4$5rJbJ%@Sn!W6b&z_s}k^_n0(nmS&2-coJWwo@F*RH!)`i9PWY{|b%Be$ zI#!~jd=jzU8A!k8+bx>mSBv&e>of9Jd{?zfZt|izW;-44zYRweF1Ga#hO9>ND_qgF z<(6AAkmeKcNr)nAedu){KrgcAX+OP`yNc!OTmROele@eNBMDQ(&^RSGo7kmwY8=qm zm1ot9=#e9~V2jeT4u8Iypt~sSrQB=Dvf`AFFgyK z9lAG7D4c&}`USmG1Y_~zf+%ke;Ljg8 z401LuJ6{ahR=QSXjGZqmYNqdm+YciOoXFg++sy(idX5VfxavjQ5~vL2dcUMp2y%Gi zyXVZn)@TFgU@E&+&@10F^=23&wK^t@No3O?v4-?ov)WP)Wjx5w|4L{vD9Q49>##e{ zozz<(LnzR1@8sMODGYItmu4QQy~85f9G*DTjX%dD3eTo3OGK4;P<{bV3VluEO?c%z z-nU9&JuDL-XF47&{a3u`n__=O{}d4#KLdrd91wEk>!(ZFZ=yv~c5ZU`)vfB#iPTT- zdqPtxL()5Bn<@Ur0tm252X^1T%LTvO$%o%585D_`)uTa5IU4xmlIJ$yu}~bLx>fbzGxZZUi65$^h3Fq{ol>kR6zhY?U4ZU0) z;C{%U=k-@rNU`YF#&)U9DZ(X%2`N>F;*4*by~DPyi=Hpj+3Pm0U#QV^q6Qe?vg=|8 zTTOMN2gYmBc&i1tNrW^V%XG1}()rR)lRHmn*XKM5v47xqiHN?hHGB^y=p@c z1ycnQU+G0%s0KT%N+X`D&w*8$vC%720(b<^+{nK7&qH*L_gfLHfOcTMN2LfYh(QY? zCyACPl_GK&sHZKrn*SDZ`CO{RfHmslW`+SV}$!E2MdWB$?${cxUJ;_N$^-^ z-)Z5+p*J7BMfjp95G!G)wHnKKwU`UGqazU?wvsow=*pVG8 zouQj-^J{!s+Ar$lIEZrrKbl@5827?O78qKXz1sWM7M#Z~^ zwPL77tDf5P6_@#s2eFq_1T~q6i?H;pPh&IgOPYL>L8F-&%TMRYnuDjXVMPDqBIWA? z*ny$F8fY#)Q5^7dSqEJ){LnuOKh^g>2Q&8xnAI;?c%3EATr=VP0mLPJ%>s=--$7fL zHn_9|UF4UgZSNuX7xo%ys(_TlmO9`Ma&fvX@N8B?h}Ny{pH#>|rcQdj_sUc~3-8|# zew*hP#W?}~`QoRcw=rCL$`AaIxZ64|fa?4sZ*;~cZs1-k$gkT+D1;2I(@fq-= zcMTnmAUl7;7Q2t1%N|Co(Eq&`f!L_2Pu9?%gPW`CRmy)g8nq*}I(`RPBIWm)8I5;5 zC+(f8g?ucM}Qng<@wACs{CzKW%`)S=33SEawlc15)YK^*~pQYFT#!-@X9 zaMja%xb|8jK}8o`muwjHbd4kVsI3c;q?=}&fm!u@Nc$_b&6Y10nQ=f!NSz(FSwEF3vh>JdOs_C>3&lP@NY;#qYXt?#?Wt&Y0)RFMB+PP$7Tj@{Ldh!_oRDWNG63pD zzc6ejlVH;r39x!1ZS?30iYegKvEiPX43(2HugnB+fI~p5{n2tCuSr!``3~}q4 zL?u|4Xsa1I&*A`b$6puJIehVN26>f{q6mSzqIDPYRsO1PIrz74`er*9cm8<$wvoC3 z4+ZKV^G}H<;XFU(J&p2Dn2~3P$`sH4lBP2BLq}}ikFC?jjXLNH_MrO5u==}u0GPC} z4~=O5rz#q~*&}iUgEq0Ae&w>10W#A9u4iemMdR^Zp`wQwE-=U$59x!6ry7%aL(ZW< zZZ1Y8lZ~i$sZH!TMTnr+sbRGrIGDLa`%D-Wwx$g&w5^{fx@l_;73RTmK|@7gn~9DZ zc3>k7B+K};0F|Oi$%i&aZ1lA z%ho6$Wxi%6r(B}H^J6-_1lfy({(V+k%L2A^{X$B=xvpCvy5*2}RIyUKsf{VHLbrFe zbcG8JS9_39{cT+3+&hoI35ps>;S0)h355)Krv0w+KxKsMYcxP~=C~IpxSDvUTbpI! zwtNju(0PZBLJL8RnoZLkHp$c_u&&D)rqn+6c$s1!uPQdN+%I)O5AFG)rc_+o$2r3> z0vxq0LAC##4_mdO83i$O5ngtQu;}94ExRg2&+ZES1I5IFC*g{dIn6#(L+L^=+@91v zFJ#J!Zbi*Cu5k0rbkCPfU+hlDs09i)ubwQ~}kJ-C;KQo7aLx=5xCLb1F>Oe>hwx!eHQ$W};2ZiZ5`W$?67 z``n~*r466AUzys6G({q)L=0=L!00000000000000000000000000-WMXfRk@vBXkXohF83Y=U1?G&f*78 z8p0Vug}ctz|J#yyx2uVC|J4=6D7wc_kPl7SEpgPWdXl6tbER)3*ozaI1KN=(*0_mkh?wbE$CUdqdh4M#=a8pWvVFGKeBe>3KLuvRe)kT1>Ue z@6hwiELuGo9ELYE)VMd0cTp&Wd^l?36V1eG4B!iDxEMqOBp2-9$I=c z6mQ{}Islp6&KhvJqhPK7-8plO6Au*>_qwXI0fxCsWB^?IBi$+V;(`FfYOOz8I&Sij zY~il#0m9uc^~mzGpenXiUCZt2yjxfOugVPZ0Uyo!C>aSaI?<(Ny%5V^hNI+>iz-Vt zq=T^w%MM@>uKd^igKpRj`dT4qR>oJ{enC|%2?N85J~vJP@i# z3Vu0D^~nNUIY}Uf17Z5RTle0I^zBiJC?ZWOh67m(Zuu0oBCRm|YLLp13>sUkO}2e%s-=YY1iUPGawGOd{nz zO9Vy)SUZjqkmjrG0x@mykw*xvHR)D@^*4IvkC}^A<0$5rW0H6hXAfnxd@HEOa_oe5 zz1}lNOp{Ok#ok(Q;NE?OOl-Qp1YD4CWpYx#tL2{D)V<(cv8M(!;IuE24T|A;<%Qe} zW{BGv_)n(}#&=}&)N<^esiVO+(l8ung-R zi_KH^))ADT1j&6c{b#o5gkQy(fD3f`hxy)|>Hd*UzL+_R=i{wdp>A>Y94S2xh$6J8 z)^OZ*V+9XHNvI-~9p!2OH?^#(PTjMy*G}ENbq}>YZ@X|%#Tq~a9HfhiDx>Pxy3`b* zHxG*&uS(nJ_OGK3^A_|GqRK%UVW*^|#ut>I{+Xz1eTm)nlCaicpzb^_t}tWc98`70 zNWJ1v-pzYn{~7qvI@UaG;B;`x?kyzyd>eoj$f0b^u)Ng0o)!b3w4M1N>SJS93Mx-S zbC()IHiGJsK{z6jv%CXT=GjPx0y>bu^ReK$?*s&ZK1Uwy329eyl>{0yUJn?mcpUZL zqkhckss%+A$XE+clqUyZ-kUH`0fU@B%0_vI5NM!`+ho+)w9QLQx(jdDx(PVbl{9cAZ> z(qMMkW)f1#c+}OtxPh<$_|XQXSpeVxImM9or~m1^;HVZl6(KeSIKP{>YDRte^p-Rc z&1i=co8!V&vBro=w?cCo1E(9Fy{`7~$Nc3E<9BZ77HdSg4Xy*V(()h67ytkO0003z zw4gH!Q#qzN*7R&^<$u&O`*8A?S*n&b3&t9ZahEYWmw~SMx(SF{nQ2VX8?dp~oc64X zOuTq)xbp0TdCOt1z6*U@Z-qkb_C~*q8b;h0mx;fEgK8+KH+SIEP6N!gA3W(&)w&BB zPVXY*+N6}8nh)GSvmiGa@W1765{jF8rbjWr^!ca_PeAKOuVa)KbQ9m3Agaqf^ zB0xt~144A4U*3#MfNXrjA{Na^%5hoyBjqRcX)By#_yKj0Scp0Kzg}6viQYr%>2$DX zpRB8^-9AIL6OOex*e3q#oLZ^WRv?#Cq0#yb311m2vIs40=e)7c>JA^%pLe08)eAE8 zeGCy>`_a*d5Jv@j`DqGuO_38E=4 zT3IhkjMnTA%eC^dR9`_i++7cBO<>3r>vBSHhA5xJ-@BVeBs)``*G~V7dIj3J(QWwu z^q%J(n4HKoY|O+j5Gsa^??%F`6xp`L(PK1)(#sEqZl%|o!KDP|0ZS*EYd3FCuZ_RuuM8AtW zqf35Tyb|xPz@m74*6Y4IK|Q|xns4)N|F_w%t_8k36Od((hK=zQtDO8dt(Q#XnTblX zbZkS=zQRLfsP+hcU0eD?4SM=BaJh9gQwZK->z&pF;Hi)1{-!@eHwQq2g;_qS&AIU)cd|J(WwLMn? z*x}Q1P7GuK7@H|&R)0tutU!Sq@Xtm=P%RZLdhFxITwUrIl?Vwz7_Mg8t+Oi|t1_G^ zB%t=K^^0{mrq{sjO00JuT484E> bs!Y4H#Q{VPVNHLb!u9DjfCZn`bNY%q7ve*K^8y!Yxt-AXY;co zAoM-!O7Wes0`k7#(V%AgQt%5f^@93U`qcygd=>;To)8`aUVIe-4?i~n*LR9vv|rl| z*Dncgf&jqHdr;sW;7{8C1z-XIMu-|;2>|wsnYZP~g6qIN!M-=a7tgUky|2S}($4~b z=UYJ>;&rEtcf@7E`X}TU<753*&zj&MU>bmaUjGa@?`hq#d%ydVy;42Eyj9#U*aFml zod$+IQm?Gn2F3v>&%n-8GQOT$71w3}1P9x7 zfY(65-Zp$<{cpx4l@F4Z?>h~^Wc4)4(Geth3c)n6KlHR)u~;#SfOk%H6OpJ5@o^tU zb0^QsA)ZKdda-$aqpxgN_@$HRVj*eJ^;QYlH_eW-_YjqDvC2{~Dt20=%NZ1SP0?j` z3EXCDGyC}Ovo)GLyboKO4V^y6&W**)Ut^c1VE%PDUZ<;xgWZRHdozRrLZ@=pl|5K3 zoW#L$9N|x)6}=F1ICd^sCf3%U0e}*=EK(RQeE5w`VP`9-()=HEq2Va0V4uN)#G~yA z1XF%+=rW;iZ~K8o7iAdQaNm7Fsv1YlVOP-A(?zKadaG(0u|=N1)y)%o(gze3brUt( zty0HIQT$+o9}W7*fHszPssp&D104|hz^5a6d;6<^!Zg5B5o>i>khL(B1X}Dy#f`)= zUJ?~9!_zOJ8lFDawK}pR9hws{#yV+iYvZ_VSuLX$}C24qyF4It~fwtQ+pT9gyRTzL}DuZ z@=saodjgo6b4kZQFm%#b?n=ZWBgbZK%71l=?5Skva1>tx-fl`)6Qg?@gCDCcL})?A zA(v{iplV<#$2QK-c@mxEW&{F7EoO#z-Ae8Y$7?J`G^y9T2wUF zQZQ@&T7qWWES!$S??nrsQGA&2ZSX{|J4j%ww*x37{?-L{vEgCx2OEZeTIBCr=|P{0 zL;pKCzMK0Xy1vmu6f;@(aa<~SyG}(c{nI6xtnEBCiM&VGe}5Y-O6-Rq8NODcyNU2( z6r{$VuD{BwzC|WxO`*Tdf7${nEP`V?F*GVL)4ZE(o~Zs>lRWrEycRB%&UA(|Ca!GF zJ4a5EGyu}$7FMQRfKKgne~}G+ZpU7V6Y+UBHQA?&0BO|-!d7PtIol35z(lX$Y) z_P)L#M{hD7t zytK0_eb&3m4n2;fVRfeMbBH;UNC%EUDjd}lZ=mmhygjQz3NdCcpBv90oP)keqV2=$K1E{tdsv-qwKQ7Z=jw zHd=~;6?%P^o%1uih*e$t1V1^2V>`2}?&sC+JUJ>o;-f z_0oY8Z+T3HsXv<0IM<~;nVoKg z|9cVM++B(3%`(=aYKm0m&LaRNkO=)#{vD-MRNT#~ZJVBPeF;0E^x2G>$p2nz-1(Q1 z(Ow4@xo!eIUaO7gb6q%`<2vNqsSlYF7=hnmB4~hsb`2Y00Vxb}Yq6hcJU32qH4;ry zkoBcC2yAlb9VI0AD_H--ynjZyKfbJ50r>}{|NE$# zfQFmg#`U=|8gB-v#<|T)+k2{BLAH{GC$&B$cUi+bszt^5Xe7#xqSKGjQcMFBdmq+-vM!wp}+SqIn;oFzL-j`(Mz^lYuh!*JSNcDH{q_wrZd|>hhKn%B=nsy znt&35laRy4h_OV-6F(^c@A6+&Mw+T52*Nn4fE2OZqglY`RO}Ju?b7x!lYV#CI(8$l z43s(y62RI(29i0A=o(Ff+p#LNaS$I9(%RzmINV<&qIL3#Oef|=mfP?dBdW%J(VzS9 zf^Z|os$1vVJg~KVOxg^dUfY=9nP9_NLg0N({{7=OF6P6h&d9##Mv_D~GP#L)8h5u{ zy3&WAyKZYFM+~vt{&U>YLWiEAOoMRH-3yByCWlTVxxCxu>UUm-1;0y4 zD5WeVx8*?+>u=3%DmI5b@>10U2TVZ_V8GjunsU7qP!I5^fcE2ht|J!ZEezu|>m{OP zxswEDo_)cG;pvVSBnwew*l4|X4OzS4JJ!WCl2rqE+{+cvNZ8`644t#(l@WhQSfTBt{x?X+AWVVNyOeGS=0sd_m+9c>->85Ey_ol|7^sG%a$u!*H!0+O{`S zqbmlD?w?C67{{39N*lkg7FC_R*e>6;?ZW!h>AE9jkzt zX8jFxxtuPob zHAE$I0ZClP1$(`50eo^GOV^x*8hnL{tJNP?&fu2B1hi%2?|Y37q zT@}$gd9GNZ0*&!G`yHU~Y5O5bx}{Tt(Jxw-9v*45THzpF^`=R;rs3+Y%eHN*qE}Yr zW6lZthQ?(Ccxi_!0QOSZSWf=B!D0mW6360GnV#ki#Hk;lc7kf)PrB-PQ<6fnt;GR| zY4OA7N{*IM9>`=D&Q_NS`9}p>v|2Gy5AVs^}- zbWq7Xsl`R?I+b@B$T?U4yZd*Nj7B^pI7r39-=&O=(?9xO{jq<=6pqP6QSoL$8Kr|?38PM-^_@iH=|!JcN$FQ z4=u@2PCEq8|A4y>z^s!OvJ!(D09pe(%Gf|YuwrvEWk8*($DA+v0^x*F@AXu&!k2)1f~3)O6q)Lyoy!k7MWqkt$4-pXb`@vCLK zc4QeFYb-o2mwIrEGYU^?H4(5T(0f9aJ3Wh+-AH%@)7+vAUdVmmKbWU^M#I-e?`0pX zLrwcZ+|i#3&lf#-Hh4Ji=47|=a@x>>PmGm|d`XBTCCU$cE6R&^YESV{BBLH4od;oQ zO|8VsnC=r3j+2UL+t?DTGEpH(nC-DKnoW}hFRHZ8yXIt;h0aYs^ml@r<5E@?AcE2LI&y08kigZ6z zF7|~H6|#$1ABRdPh`f1rR>5UH>$@o4&_RJ-2eZtiyny@^@AL)H=2QLt2P9syl4G$&LCxGuSB%=3EC zGcF6r$GfT$bYXpA;j!^X1i_Q?iyhyS*P+uOr8?QL!%9+rwiNzKvvJ#9rp>*gc2V=}m|e+{WSp5;Fz`s4CJDX+U?r+fc~w{M!z zeO%lBJK`RQ>k`%p5=3}TG7czavwt1Y3 zc!-tRGW*FHB73jqqWskMDrTYF#2b+FqMpP1W|y;D$@w$fyA;~aP)N~uplJ}$Us@%R ztxU+CMC3@*Z)7f6N*1@Apn={Y5-5RhC1G<`@ro$Yba=3#wKezN8veyItpbdqIn047 zDx?Y`J_jYPeFF>YaG0`s$CNHfjCUkcdpQF~0X@md^ni~A&i>Rd1&KoW*01KSKwqyL zpyE~pcdu>wRojyyV2TsaZ8bqd*+yQ8ROkhd#1s}*3Zb!{2#a|B5{gry zv~~LnD$B9w`CL#8*-Tf=SadqvNwV31fx!4!x5upt05fknhmLBD{C-Oy?mVsFjI)mo&=!kBQGPa9aVDh649=j z4j&O680#2)jKl}gLu=#{Ak5szU#pjSp)gbc<6&Wyyav;zu&w=lqHRJfp&C zA`1D=qn3yDw6B|=@4C*QO_O(zPkt)~LHhNJU6S?G@!}9Nipw~#R?~_`3hF|dzH`aL zcRV*ww$C#ObqW?XFcyr$2D zXF@2>)GgR+9K?}(AMcgyH~n=lvLF{;4`zqa98^=IBqy0B&2~0ztQ?E)2}(HOAoJ#@ z#M@QR@cnTQYDU+AtYBzo2I8iP;3>^l>%H_CHHdG6n`Sdp1P*u+~_zn z99^SwA&uHf$`%Z) zvZls?0wU$L{&w?RrrF+*K@S#M587U}RBZ`@jRHCl>mP3*u8Lc3G!)818oE7R zkSI-46X_f^V!ZgQ>KaL2w6K*E?{sQ@%puPS(X?^yhsO!eXIcAA3cZ>W*jHz7S|;?0dkh(HUGI$ejOb zt$}(~atHrS9I|g%5YMd)6M1VrytDHt&XN_Ox=0)vif3UYdLV50Yih%z7p4y?Lr$}@ z1}TL9fQbI*PzJrPG(m1aV2rKG>GtPQfqAh*F}{hvtIMO9S{hg+{)lKqTP_~{vW2zq z_E9#!I>-6-Oqp!Gks|rlnq|FQK5EEdx<|?(BJ0+cl>KIjqFJGQ$2me=G%sTA;ZN931nq5 zYN{NRxD=qbnvM+UBPofH);LE^g%L%8y>e_8oIj~)L4S&d;;bk*|LQNE67t+1}U5jLsu1i%3rsl5jbUOC>~0$^?Z@F9Z^A$@UQ9e z>MEl@5O5CCqLUR_r;4&rgnCLiX2+YbMb)4EA-jGT5Lncxc$2c(XF?TsdWwa&Ea(U@ z1*KgYjP4`oy#sJsr`Wa`ykSwq5COVnbQTSD=dh9ZjZcl%Leb20_8QeF9_jCx^<=?) zD7@}%+F+){5W&4H`mP@&S9^^~v+q+vqGi1tAg|UZy$l=MdD!^Ad=Xu(C|5e(n`|$9 zhZR})?H{RDs3sJdZ3i`_tF2j#y~dUq-zlW-hIGDEWyQ@#@RIzp{ZLhK>2sn~Xo{(t z&L66jPZ^O)M)x?Fg_jF;ryxt(2Y#b_i*49H#}RO+S3IJ_yR3}O2F;ln^_Pjtd@TCEzzg<-`8s=z6 zii$nDpxuWh?aM_6b1d`r)|>k4tC)Qg1Z(AHp&E3P(`Tu^2w5Ox=FK)w44y=6m%|6T z`yT2Q{m&-2pAz{r%ouI~5dHhoyW%#>7Cbwo-l$I?=m`tb=9E8?t{a4j!^ z9iDX=V2xb6x{FY(Y)rQao5dvbLn)fx&U+{?>_k}LLlG-U??*+|MoY!u-f>|`6?L{; zHHdh04)hYZPP%BgymD4J7qA)#=H>Ytiq#<>Tq(7h9)1hSdgE=xeIl_e({-)iJNr@=v%lx z7gB^7gYAs`YNq%sWyRrr@xY4ONc5zJmG;F^B!bf5_fFlL|L86fP$JeZ1e1J zf{ui$Ee^l z8oSzunE^NunZsM^<`__wqp^h`b6DYE9Q(R;=QmZW_y_4Ffyq?nDXv7QwuHlw`<219 z{xSTB)J9n3xF8_O)}vY1H(_4m#cG9wV6OFCW9{72lxi z-q$6(XbP=*b}|gGyEGFI6^k6vC3=g=r>wwn2$tFiK5X=yHMpFfi^X0|mz>zsqWvW_ zn>E4~fVJ(Wn#A^V{=M`pzXFJ5ok13M5FaNd`vv><;)Hs!Kq)wkaUhfcf$CWna%U^8 z6aqrVTbhEq^nxj3O*d_2P>rPwtm2o*a$L1NFEN~A0JpA=$R`6a;(DU^?`pm$LLHa~ z=Uzxu2Of;D^!k+|%G3U+gR*D~3ZZlJ5{J?IUTsWk@kxaGpVFNw9^=Sm`)e2ia(>Ll z1g0#&9(2`f_{L2&8WI-` zv!&7ecYeby%LX0br?m|l&ZT!uXaw#ag4-Ff(o%xmoOx@>n;}C>5&;Gi@@XamD4A(( zyc0phYe~;fKWYh;D2Z@!6o&Qh~G>}(-;tDmAtV}wMXJbA4+VEmcQoA${iYIzj_Y&3*GG=1yj)p_t#a#VRyyb$8$ z2Jm7twNH|U_Nu0+aVle^bi4-OZ5pO2(&qq8{e(yNDQ8t08jD|(__Md;G~4Fe{92bE z?zD(?Fj>*d24@EqIVSjoG8X&cm78{&or&5nDDSnjPGOPy2=MAm_~jAOU%yC=`6im8nh^a58c84Bb-Q>IspdObdHI@D3O15*tU}KU{BiXg zm~bkKJ}Nq^GL3;5DF#A2nD9|SSH_YjR45(3M*9ad2@vac@;1W{#+V%%q}F5Nx?o?$ zwkQ4CKtwTmbHz(PX0pxLoN=))PG|lUr1gDA)QHfPf=Zmukixv+?o7}uI8tnw6=Qu> zp~ko80fmA3!fQ=MU}ViIJQg_w^vxEf5DRYHOfX%UuS3nOjQ8OppvKCw?0=s_Kc0L6Gq+QlTjnYtxyzqLO0_ z`!7{G)N?#o5R5b&-Z$J+;KC0U%vTrWF*y#(pG&xTmkL*Fr#!X22lU>Xh@caa7XW5_iybq888mLaZ!GK?xbP!o}}mT0=pUeqbN z;Q`>!_!?e|Gq`@Bv-A|>Akdg__Gt-5o2la^#ipFRZ;e~>)o@wZTpil++mT#N^Ru6q zi2OBT>U8OHdJrw8Gv7}PR7^L)joeB%e-?Hj~25)R!G zKVYqGr<3ernN=#GWW;GTyNdCG;#rp^U*2t^qu8WZesXHHoR)>*35t0-Nm&UtKH6Wkks(Ix%`dC-#dnvhwSVZ zFN)GAlB#pQ+?rT1pcoO=l81lTF?Ju-;f3nog5}kH30loNd1`}!ThXH>)$Cs6bT2Y+qLH(BrW4ZDdWNc%tGJRC z`wKCsoQ=#zy5@>zCEl4Q$KdWKNL_aXpn&O*kVY zjk5&?AjrcAhl`#iVzbr;JvOZjbgfUHSpYPDvAOpH5_FuZie&2}LZbpR4 z)DdxLwJA^fg7?3!MTGN>RDX=8W@W>%reiYV7fKX;QmGvVxH37C+25%ziuXr?P3Shf zf8ZD^6E2@&$}*b)@jeZSbIO=>$}0qq>Ea4n&6<~lfA;u!;RuzABj6w&OyMId#!{BA z*xDBqrkwC4$PHrCI8#Kj{|+<%%~oEH^^usjgYB6wxlVWfjUZEnQV6_3u9Isl0>fAH zWL7HHE7HiWz}q|SG$N1dF~IUOZZ`BMoG3@^`S8<`>K7Rk*3r&}SSU*Kb}E?PI7xbD zyy2gC0$W1Deg>abI2%V+fzohkhazS0WqPpgwwHeIjQy6UI=Wk7?lds(?B%T0#(93j zfH{!lQahEXJc@|?V{@OKRKp8Zw%6DOpQNjcguz3<`?RgP#z~^9mvBSu0ADki;>6Tt zwUA5j<9a~*hW>r=G&?-ga{7~|Tq_Tt4bRMIl7y2-)&(~KaK>`mkIgtlwDEByK>Y5P zx5yG3U(tQMB~kG?AAUnKT1}FH)wRXM(kL;kb(ko>$S)Gi`%7IAWz|)ST4<8V$CiSF zuf&_{*O(#F-T+SA$SPwBvDM2W2TIv}{~dNU4)n`77O#Dexf)3eP;nHlCM1_~e zITN8m1lw11yi`g@RKCB7?(A6_vZI+!MR;UBwR|xh>G8} zzk#(<;2m~8ZpCRVj-r`tHuJarIP@o31y(y->gMR>Wo46^a^atg>2>(1=s?Q-Ty}>9 zULnFi-&NDvudz|k`Q83qg8SV^cz-@18TQ~^*E41|TRocRd(1~N2=|kWW8on6o#@E2 zL~t)z6&vsI(<2gBLL}GL{sxZle66JmGZby0j-kN^H=*Ple#;kLvzr}sRw0eV>|BvB z)U4M%RZ7E#hgq{hCQ+u($L`v_x-Vlm5KQP)@yOWb%KERw8t0Fh^r(tfAr<`O^sAD9 zUwKLf$o@}lKXqD)xQS9Zryb96JXh(`9da$Gm&<-yn6no^Q6%9cK$_0(#3f9)RmzVt zR}>wzh`!QlLHSi`r%&)-yE^1NrH94m>F^7RbN+5^*VruZbB}MmP1Mkq1O7txpDZ|q z6xCi7c7t*s z#z>ckA@q);?bwrtD5ANe$DbAn`IbEM(oB;w3rB4*6Z~aOZcMJx%4`vPR;7GH(dmI_ z-;e0An%#gp{_r$)8;zfktH08HR?-_Q6*bk6wV@-}P$O}mh>s~7!a_}5_IkZVhD4=p z2GLW-`Dn;1is=0zz%y8z#fxIA0GF5}xaDBSq2#FKP&sg>7D!CW>W}~~vNj~eqVgydniQ~C;A&>L(_qjm|JaKNc6}W`U z;OQsoq&OPTcY5W)3?5+)>{jD3T8yY8A%un4clKkjtF4>^h;*^b(HJBN-iZN}IfVs1?uhl6? z7?FskigzdizQRK)6q9PkuBPOUYxBabCyQM_d*w0 z{pzd?P&FzmJnTdq;n>>UO%aT9|j&dX;Ml$8+7l~yh!q8$%#x#8KX?7wp$+^Irj|M+I zJwTV5Po^Mf*P`8IK<8KU2?{NpbqSuWY}cG+Ytm})p@obsXEEU^XSL?SiPolV+no~c z;j$Zu9DX4C1aL{$^e-w)^8~O{ZyzO*XEh?FLCouW*J%V3M-7A^kO5}5z~BM?QeKRf ze!I;P*F5>XwL3Y4!FNOMWSzZ=`W@0L?*yFeMME(kUkyoRMgQ70&%+kWW9Iy{ZVxVf zjE2&SUX8_kl|i7T7_6a9{%vrZsWIUCT)|= z^_aQ6UH3Uz_iBsatf4j zwSgU{q#%hTaqKUC7-c{N1oTb#mdCqOU#IZIzm25eCP^A1t+_DWy=};g8e&oVb*KN< z*wFd1mE7bI*Le$L?M!I6Dj*`OU@EC1>aevC>1AIc8|*tAl9meeE>#d3o(9$>h-V>( zH1V&W+gPnjiskR)df)qzcSFM%06jJkNlOBf(W|^Ed15cFM+}WIjei(W+pYhg0OgNk zmYIU;T6kCZYiw{!ZQiMh8w`rP0eC{SlJ%G(3Fu2%8;EY&UTAZL^|NZnI!L zUl*c*a`@V@t91w76vYPUPoXI(VLF*m(;W+2Gi9gaJ$x4Rul7EW+@BMIj~siHHo|}0ls9)xWi!iamFd1* z$#msfFlFh-Kq8S8c>HeL!BsM~v2eBiu10g1*Fc#$EPRmdD}gq9eT$ zt5_-7EqBIyP9UfF8yNS7H*P5c?E8#Ji;tSZnenX^VIQt4CSF4x2c!ZN<|i%8B7#mu{UF*JE6<@Al~2{emE2ISQT5 zh3JS#^D4KX3YLHV?be=B2H2I_nKpF)UV80-hK`S@+Yn55nI;Wfp&AX8N93i6{VQN9 zx*&{c!|t%3cwrd$JRF}~i&gIz`=?zi{_kV;_aZk(%Ve?=PhE1i91~ptm8MPW)#L%l z^F71mM_041^j*FILcFHm5y%BX_553iJgUs=PaInNE+7bctXd)!zh;TBwmvw&5nJ}e zWq*s80Zf6=_d973!alZb`%fB3WUg{mdahIjAL>N4wb0}b@)pYbLY@uxqErpus&Q3; zk!JdqbDCJk@fZ-&Sj`+KCf2O6p#+Cn%-xuM9gkN8&TZie2sRG4D|wbjJ<;> zbWDNMAcyIbPS}D%^6+R!@>c1$pC6Bt%9-Zp^8613_NSdn2-?2SA3~*REcGBNWFFoq zKNs9A7@uW$3L}` zgvg@Ebuy2L*jp9NLM3UiDeqZ3H>`4TzTL%g`@RrG3g)4I@1gVGJWbu7HFVs@A8m;i zAsYHki1qoT*cmljZhskTfCKG?G>*rgo_=dj!f+Jj91^u4+ualLbMf(5mpqvXZ^+%CwF7^xlYb?H2BGey0NuqgG^UYEbi+j-Rp zPkjSNBC2yy&i+vDt;=!4W=B0K@eLc?JQXwh^DS^x9mr2qsvrCz%89h+@BwOy+cD#{3u5eM5JJEtH z3qfXPdjwO$>=-~)ZzJ*1V1mVpADF_<&FjyBs33ocquT5u6|l{kNehc_jN>6DrNd1w z=alY-=h?Rn*1{rm85DZYTQjcc>D_@bu_YqTC$QybjzSfX&I%mw1~nJabQ`HF2t)&t z-zZGCZRSYtb-vWWxmV*hgli;jn9J%fFbhXe@ZG5>DZh@@Pw z!DZDA(HuEEuv?M(lfI~7baeC%M7<;iV@spA^bpPu8J7ZOs{bAp#&odnkPDpec7(;^EhmpPn*xiKZqQ}9U z?ESO84B}4Dr33{wX3`_M%icZq1p6e9=hS1Zt|C^cH$U$AH3aGeu@cni4#8>Gu4Oec zOL0+bm*Q?v2Xr9HH8crCYCpVQHY#VT%^b}PO@P}yQDajLzr6d2oq1!=9q%CX_@t|o z5EXXJIMjX6hWFXaESj|_M6sre05_YB(^P_z)&UtByMdkjMh8RDb#1t`{=#@N{l?PG z_f?MyyWZ0V4{v{Nsfd@XR(BxF&Tm8(ce=-7JPu9354ERxQg5~D?V`Y*$w6DoMCF8w>fz@Y+L4dQZ?X4EOpt`rg#4r z`Evw^Gn$L^=EGwX>b?uwQAwoBHF6v8+c(pG1aqTkM|4lccOFs{Q*y@Tgj+IhAacJm$zIX>;j#AKUF$K4h6VueqjZ}UbM zyyn#Icz}7oRe4Pf8)_Z`!aH6A|2y77k0s!`ABP$=$UCdE{(Wk?xHnD&F5%Fgq0MD0 z%!ejv$r2Ygnu_jcrULFl@lhjtz{P6a6{%Ii^VlxU zxpg}9vtI>^!UAud59P{ucQK9>^8;<1f55&SD<8R$-7(m`EuZ^>If)7-;0#1qvG0Dp zu6>Pn^ZBX_=>~;R z+auBso}qkwiGmg}RoP%}YIo+{eWBhKyvMdS1NJa&@ zy^OoO`=D%?Kmiu=z&NjPv5YTe)UAf{+h+k4B|0@+>A=S}Vlz0oeBMC|Bu;ve!*b*8 z((p+Ax!DxNsCs($Jm-YI@l~W|ev@;-wS%*80t*TiYkX=XFU6(YWX~uC5%L9FRsQgm zjAEk>p+p3!sbi(7$fJQbb)u7)*v#4Y0?dD^jM10>HP(@F%}ZMtnhS97{afkF&ZFYd z?&DaitQwL>W`*D+hJzv}o~_Vb*F|bAsZPw+dv&N2m=_4NK;kOHP-P798E!({!b!2E zA*xhyA~N6Wq+Ng?0tr?2(=EvtrG=RidWbcs7Zdw^p?voVnA9qqitG}Mjxlf789O$w zH@==o2Wyaa?UlWHTiiXVa9mskzHw1D-cg5Y1s3yz zy$Nk8!MJfAoG9vOhd+Vs1^Q>g>F8U)tRjnZj$m`B8Sq1(CSS2%_INV(U!Opi>j{4? zyHNwa_wEVMR<7dtl$+&NK(~Nc)#^SKbAtR*W#>LHGwZ2nB(g~I-sqq%$!g?sF$NdL z*7{8kmg{!a6z}H(m4B2W6je8$TAEy-qztTK^6}>nvR1QF)7Jh@!EDPGAZr?aVd#X7 zwuY#47PE1swm^a}?;#x(;0bWp%9}XIJH1TO4ZRNu-sordb{v~tVNask0$ey_GtC4{ zDY=4E9sav=b7`I*TC#Sul#*iYc@N`CG15u5*q7_GjnNTTwVA{}?8UVznLtRH9gokU z1Zxx>Z-|RZs-yQ$yd=PW=*lO<^Pp#0V>!VdZ%&AGP2Rk}m=xk*5mO}lf2UoBAT0pG zwI7rZkpT^}Uv8YsK$ByJ8kUt}BKUfI^2CH6(6(uqJWNbxLETIoojrf6>2@4=_xPGc z;DkQ^5))N}HGt-CQiK{}-A(_t`x%LJ?_U!b&7DTF6)r@2s=3x?v?N|DvR5jrj8-pL zod>V1wuMf$z;T8?^5`%r0Xj`{z-@`++t0lsB&SalK<03IS!N{mAPW^J*gRtbt zXm94e6FIAf%;HjTqK@S>88rmW1lpRn72Wa>q!I`6hb?q=Avi05!6;F;trr=O(h#%L z+`WwQsKu0w$<7R-wM<`I-qyS(fXGM;G77t(K>zY^a!a{d%EXRZ>qGIp)2qh~|6ZY< ziEL5Vv3+``Rjj)4cEMT0indoB^To9&IfBx4S5MKh8p6d{bY}in|EXomC2fx$vY(`s zrT_kiEhCG?C(=Gf;mGj*F+K(-tTjZE2#6Q$|h29*zJwmtF;GzCYn<9UrP!eT8kmL)mCP|svAsl zCswc^z)cfns-xQBUP53<+~LdB^yL$>1!F@1ay@%y!Gr+Yg5RTI$*i1DVcGwn05pBQ zNQ*Qd_18sVx?n+5(o<>Tmn!=SZT!Z(sWfvDptpK@?tNI!y2$)krgkj?#k27d0aXS9 zA(zjD{~+LfKD?rSB&5p;ECyn-F!_M8aM90~&cnC3Bnji)O2PbdCeYE>poz{JQoOoU zwf2l*|L3Hb4Rr^tk={%hjKQ=85MkuB9Wrdq8;0mwmzkZ*+si?vkp|g{?XQ#Q6OA8In@xgF%nS5gf+jF5H2P0qL?E_uW?3>3EBZ( zs+IJ`aqs&6>@azD;;YgCv$HgaQa%W=UP#;(P9}wR&@Jx6Pc7&p)Qen7P1X=Z7LXyi zkY5bEJ^>Fx#3wcR@wQ4{`m|`#Kc zZU@netS6dSCB?5&H6hh|YY~Wq? zW75N)P1s5mtwS`l@?oco6f(Un#jkHvn0-mzh16tUOvAlbo$&C?0Ow+=hjsDJ#SbK z8vPq(@m@&9gSUboN6B+Zn!mW!<_sT4mr5)SPPg zwBJCx(199iFcx)oTPmZbsVx)+rnhYUH-h3(foLD(fkvREPBRY*TIz#G!l&-rr!#Rv z6|(v(Gye5mF;2?;d#c4KoJwPdNea2c`SO6d&@7ZI;(47udB1kIa?RiX-kR-HLD}6| z1U*LQ(_gl0aQ-FB$Ar{;dDaxB=R!l7&ZqAcWVcE8+6*c4rl#+L$IMGG%5#xAt%Ed{ z6-WbE`6ZcGGl|=SqBaYQpAwb%N5_}NXUi(HzTBW5D8FI}7-{363sXK)6Z z8!)E#u=F!)wA!1BE7yWMwK1Kr?7W~hAUSIz>Y2x(5Z{tr$tTd3cPx-|HM%P^jLn=o zuQ~?qfI7$ngI0%4VZOlc!f{8|@0hZBkmqM?jOp|;ZjXx{p4us@`L7L+5fBTK$~o@DfC+QGvGLpCr>!|^#yvKC{Vh~GSE3ZW=n=1qke1ry~fuiPY;UbC#WvzosH9`e|Q+B*~%$; zc|!d=+aci>2r*B`gmdK{$w~On-P-pk9Tvkf8`sg{7uyt2f$H^1QG+&zMrRNvy|=C7 zKfji~EMcGK=b%;fR)zIg{xmr6UXQ643?^}zo?GMkuqWSE}%5q3tdEFqf8uoc15 z=x9mFWEnWxdVS(u2j}Po1j*f3kQ5R#@Ops;L;{jW`{cRlIU6)U}sk20#!5)e2B%xA&UT4Lnh_B~Z zUthLoGAb^GB_9&D?z(n2?sd)@$^;3{Pug@qQE?`rl0=52MRgVq?$-a(-~M?QVmx0r zQ4>ydrW4*Sf>yp`a_yO5^X5rO5c|yL3%>ddBra562YO`uIi6_z>*9=BejkRvx)j}G$%Swv}7ZNpa`eQ?vr7&(n|1up#S(P*`Yn;_kGV}&1G^9po zPbf~_^%m<2%?-H=NMML%*I-2!*o>0zyj7Dc3WsE-TkY~`hSx{-^Ra%GWXZpMXSU1n z*Za(j!&Z2z8f8pRzO!ic5he%wyh?=FX_YClrNZOOB~77kCh7rsxSeVdjn#>x)S$km z?aPHtGbd#Jrhga0CD6?2kQRoYT#f}|#ZCOMA2@(pIP3V^QRoZWy?V> zI)&n*pZA`G3>j}fAm^LxImrGeCroAlboEZu_u?Wk4F8&~xRE=#%O0yA_0SM+o9e!T zWbww+iJzjEM!<*<75Qf*@I$~e!4U&ZUdt#vk$O4JSMwjg_8GE>Ic2|E%h#nOm-Xq7 zOAqp!)6kkYJ8N)_&PR%Deer{WEbApD4@Pt-6eIib=|Ag@#{&Apkf+chjC2E#e3mg_ zX5k>E92-O3q|Vm*%D!5}ZS-#Uk;4Z^<|Yvt&FZo3K52p-tfwq&IM&JcNe}iF(fz4S zhzwyq3h03e%M-e0Wf5=$rIyk(IO6vIPdjH376ssK@sW}SDd~`o0i{HwTN(rhhE#e$ zy1S&i1f)X*hHj*W7(ifPfB|Lb7^S78;m_v3dh7SS&0C(ky1Vl`-#y>m%i!hiYS?NQ zUZ_HR2LCwfl$o4!OfebKCFJAO4)~4AfrZ=WI;03Q>ujkS#DoAo=)bEW6pqF7yUPC9 zU5Fm)>y@&1-Eo6q$t~glnKc;;w^#wo{-gGuuzfP~AOzku5}}AGX)~Kv$%EcSh)TB0 zcF3PrH2QHE`MB&KQ_z^@tI5ugz zPoY^s7Xh`@oj`(4VsBWK2E}YnStHa`_pG<%-oOK_l3E?R-U7(y__dzu7*7LPM|uan zU)!|2aqsATMpHYCHD5E8)a4V4CSebm2vEYp<^b|WlfqtW#(=xLb9pmJhLKswBW2l z;;@D;n(|Oh{80#}D~{C19xSg4ti`uqm35P2iU(zQGr;-|O*1Uey|kNCH6l*Um6NB= zD7hXE(S8E1xt_J?XL^~l;+q1(=-}L6I1J$;oFVFraaL;!Yid&O8f5=yMjWv-LwZ1e z#8{55s14c`np&fpx4`7z=ajYC@1gg3Y;mUPuV}lEURu?p^Ih{RQBf8TlftWQX`hQC zI25ZaV_LLfqz+{i6<1`rPQE$sBdsyXn;B5E)@?q>@Mn>%YEc5cm7}B67A#9Z_r)2$FYFAH?CrP^HKk-|A=ve zr~PgYMqQhFI=BishQ|up-|Y>=g*Ml0kzitIMMpnr9zooyT{k6M{N>exA7JTrd zeg@n@wTr^jbIu*|4d{1>5F-71UoX>~%MaF-&qakChMD4t0uViB@0EIEjOAwg*H5j# z)XO6s`okL?Y=5Qe{AE*Um>orzYj6Z;_qn9d)mEl8l#>qy8NIydW=}9C2Bt{OWVEFA z^Uy2dzQV;c)L||Ua_6$rySzqb6=}HM z5zmmtq<>D!K3V$3?AxYaKE;s-ic476(Jwe>e8VjTsNcEL4Caa}^Z11&<~{I}f4@S^ za^m>kT6aZ*Sp9sw!Kuk93UOd31|T8`pS{>U-wS{=mk|c-oY#ZkWbB~TGQTW{X9t(Bt0L(NN@u@xgM?l3BD}IyXg|if8bN^?`yR$^=&SdIMj22 z921I=!d@-)XY5$Bs?Souq-?DAF)AZCQl@E_6`zc~)-yH?oMx?Fr?slRUesppswFn~ zRw#!2JB1suR`yh51f>6Y)}d975tFC{aaKkGko&igU>sAt$Aj&DEdPXfI(Ys4Vt?+y zY}dbffGc2xT!gn~ihrZd>zZ17nt;vC&e_=2+E4Q}h+{h)_T^i2J)-R{hQ(xXelK5c zqfiqGJm5v&4SvbacpA<;@5iu}^U9V?BCN>0DW(m+6|GPxjwvZAYwn68jdc{=5M=~V z1UrCg^2`}|IZo&1ncrWun|Abl;o{xm2GfQEf1cAJ`u9L)aXSpxKKZ)kWOyiKK?hKW zZf@}EDC$b5&MjB6#j&1qw?tC|V?1k#s~xdX?kX*6cN3pdA)RU$;rLB5vCCFXbS`X9Xn2w|aeuVA zI&~Oz@>raBw)o&tp@MPzw4xM%o*$XL>IQq);lKOhvAayb=;H(UKMXSszD%D?7DO$JtqC(YbmhJXZVMbT%FqhgfX5bdixx{)L+XmreaP)^T5Aqi4QPj-Aq^K6+A4 z-tsZVU{aSYO2oc3qhh0w-VjH02K-^acS)U%y9DszQl*9n<8Ik zw%<8}$8KeKGxw4r2 zQYhRBUulW1?t`?iQEu_RFuqa1v0+AG7eu#Y^Y_@xYHk=VzV*sTYILG7nRfdIco#>( z)G&ATfkW+<1VMJgU<4ZRGsrbq;E3Z1(8U(#idz{idj{9Y(NOF&Iu%N zRz>6A-xmXi8zj4J{*_1T{V8D)8OoOw}N7&+-qJ z-J7F&%xcW-Y{pYO2LS}O=t7$HHIy{ro9-bWC%c<3+4f`FjHg|!kQaw8T5r5cHNuFQdD(*re@B9z}h zvqY8G>`?rqK~vZNA{zi8q3QJ?BKCv<04%cl5dZ*RX5fM7Sg(mg|F6e5jX;Xq<%-V% zp51Sn2Z|onWOh*iMKnFx(IN)`=zU8epo=OPBnTvK6ji2U`cR+{I2tE2r% zR(DpH_MP08K7oEf<-@)96S*kplN5w;ZuR-FTTpcQqND{w^&iDJf{T4Py79FZEKW4T zTICQ=r=GLf-7*A2XDTyzucIyWlYAWG6lJDVJrUKfE-Hyz-onjCwsE3=F1s&2Dn;qL z`4j*YV)C;PH}iUsHe>Q@mom;{EQ?QC3QJ#_%ZnJS$l(v5S0rdr>R(hVE?2%GEw@q4 z+`4{eA?-m;e7q2@(msf7*4yK^`#y~BzIqPFmg)T-cB0Y?UwR(G?9f*yt-MIAl6?I_JSMK*I0DwPII8jRCGEsQawt3Lzn*wqx zbvAbBb;Yfa3gITkh9#n+QZ`UN$C@e>Y;jI9UPZt48aA7AGHYthF653(zjFym#(t)F zxX^7L=#b#-WG1AehL(M0n+3vJ@r552RXMr^200zw1TVMzQLj}2vGv`)=&IR0~zPCYb^a@9^0S7jeP&@0! zEgp+y<#qW$@*i{a@zE?h0grY`zUI$*-RISN_t$qDJF7tqtF2H9g zxdmFTG$%2wOcCc^TtbG7=To;wmBBBXbWFOn{7Ov5iMsB1hYvh0PHji+7yhcVy31|7 zqn4C}&=pX3AI}xRobQWcM8`fW7ab91_&rO$S2l{UAR0jXgd8l`o$I-2iYQi6$a-!R z<0i79|1D9nWfIon0ob0i3=+w{CE)pVxw?+mHfu{E#G_hKmd3iNz2v$qQ=IB`4_+OZ zS4w@Hd9;f4hrMyZ#X_X5530`SG!=HAl&v0e&omNof9HdMhwQxFpE4gM5(fFQu2vnl z^L5n{*71i|Pe~<5&IhsZE}75=LJkIk$}0o(w+9&EkDzI&pP+KL``e)oN&b94Q)+V% zE+`XbxaDg2Kg5&XxtE87DTSM_H@mNd@mOW-TQXuQ*V8ZxrYDm z?`^fEC?P7E;tc?xCL$=WD$kA|@kd-k29ym*xdN&T#B0NvDnU$GKuC!6D((jxZf5)8 z?lC}hwBRJ$Je4B(9(opb`fb;#7yUhW*bLDX$hY(6=iBy)|FnL>_vM=hzcRg=>w5j_ z+s=FF+xFe{1n{-_#kSc03IF~5@(t9z%(wjg_3dy2{ZaV-{k?7J``Ium_HFdR7EUMl z`TRNj+^x_Z`G`xSaG_5nXackn&o+vRKajri^M zzWr-@<@&+`jv0r+uz&!jqg474sVC=%s2W${fq7c{A&B9`j5eU#e9OltG)TQ z$kpH-e9!VN__}@Gd=vcf$@gaWWw$NiA|CiY(_$A$n+&$g}-mP!VO0F1ni-FOg9b;=Jz6O^ItVZ9{6FvdXQWdRyu&M|A()KsG7u2)oZ^wl%7E~Zr9K4MimXCOIz9@f zkzcO5L-`3K|2CHYGq^tzSwxE~{w9pf2HsDBo?+eYx;o&f8et9y#_Rj04)N4o74GkE zce$X|eC`ZP{Ld6E86ID^YHBcASl|v1RVBnuzgaWy{u3s2Eb`UC{{QoxFmV2~6nAIr7fTQ(XPdsCWYl`@&kL}sD5X8K zj290M;h7IhT=5AwDhul`$S8j*%atB-hb{2ye?Qd?9MqYB8IvgN?N^fFjy? zHFRmFtoS=~abt`!zdJ5Er93qtl~#4%Em#<4`FfDN(_4)Z9#REmq9*m=Ml}EH0r=OV zlNTFHnClD?N*T&nU5@Hh4!t^W)4Cr?c#YDfliU+`8K+Jpye8-|O8vJKQV0Q+!FMUP zC@g0i)$qlh7_wSe5<8nJzb1YDqtW0?$!!C<2IWXhmnhu5RC{?^ynS&PmZ8k7DIllu z+6|Wh+gVV_tOZ~84z5@NQ}E*2k zjgDEGm}8GDt(~V>Gsd7S7hjA{uv(o& z)36IU59CMzG9#r%G21T&2zG+K_4;f(v)*XnJ_Cl`sW3K|0=KHIM9#L3^a#$kR+fg5 zSYJEYxBEKtLHaOHmcY8KcQ&b-2GGtt>GpR9oS^qXMR$Zj_D^77kAX!NY;_?Qj?kkA z12`vgkoi)}N@X_Y&N5u^%gD|^OZ^@joCH&#Fs;J>Ri(&??ZS@>lW!eqaWr5oq|JMa zUtiA=a|q=`Np331+ylKZFrvcrghRu6Piut0($tPyD6F~w3|1pD_tz8ZyFq9)kz~gW z2^sc?P;S}|s$t1WnQ;DWBO+g>lKvN9&d@g`QmF9 zReSFRi4@GpIvAN29_~i+ZqdV$9`sii14FgYz}_P_Y{Fyu_n3L}$7?f*o6uh?K-wvL zv$`v0R$sCWT5zBUqz%te%lvtLVsC}!e7-N%M(Jy7*EAqZk(^TUbQmEgYsy)@842<_ zH0~Y+di5E)Zz7=dVQW%GlE6qNe{MmP?i|EwokUgsuC;xGMUu;*XOB)L`#;W!SU zmPq&G4?TC{E_E(piH)yaDBtebC%H9P*3dKRxfOEq!uHK7D^Xj>nSNO2%VgLMU0PT{*vX#o5m zHI(oORcUR2T784L6gQ^%3w*hp8!9}@AjSEh_4WqN3S_2xw10AjV|dG$wIMAc0q39E zvl^Q6Q{w+n7 ztLWKs4;+krQ#>dUd;{X@SKvx+E#{#CX1nsdLtl8XeeLp2x&_y*)sn*X4J>;X00UJ_ zHkmZB1OHm7Kgox#Z9{Mp&)R!AV;~a+qt8kD4?M;~xV<*AMq$1mkspEiE3#l-vOY|nyx^-wyG&jrOP?F1_j^M!m(g&(<3O@6Yk2MDD_Ak7s z?kJ9UY!OKJfXOR`tk*_rXaB>1kcbaX*%AZ%1uWoufx$^%Q;5pu7?w3*)ys>2a)G7ezmL}KG z_vepDq*jDv2W6cZ3Yd;R_E+wd7gfwn>L2@+m&ISiy~z=mQTG2z%)c|0e_?2xrsdl$ zQFufUM;_)PyMuui`Y}CL-)lgbhWgP?AHQ1jw zwb&IdG&U&3E3+60s1X@T6FVG@ES~4RPUxTe8;;Pv&|OXlVW`ZVF@vK<{7wH4Dnt2Y zdN(*sAsa9Jco_P9o9b~OtDAmm3;dSA`1i5>$@?6?qjZxb(DEY=!PMw~dA!X?%Mjha zOy1J5ULxziyD9#sXOdZ^iDap?hB%lV_JVmwgEYNyY2scuiM`Gu0WL$fY30B9C_&xm zLJ^$wJeYKXzd8W97NjBg<_#!f<%((H5pcgrQ88_kdokFV^W)+q0Pm#)KuKdOEJ z)6;*H{sIHm$e)p^BAi@ouHSny-LpmeFO1RA7ayKbNsTXNxcp-Zgljyz1j-}0u%@G0 z_&*Xk{=EpP4#on~Fc{f|404aPL-BAQ!%!+6aH_Z< zeNvWzN&8$a;Y*p=7abq+lV4%2vp8tRDwHKY~^J};@AOT)WN)O`Mnd!h&iua1x#})Il zDcRJ%oU5VN-@?Nh@c)_x3G)3vZU6S#pCQg$Kzh>)Y-G4M$vr&C#@^a5Rn1?wS|zV{ zK`spiy!_m9dsM%oXyB<=whf@o3L{;?L}0u_K(#LZXSMJzv-m&d zL$av#b?TWQT)l2|TZ@DY=5@@*KAE^0r8%Rgl7pa!OQnT(1us!s^Ae4F(hC9%rI-gg zP^RjCHzWU1Ls{>TC)hM&_;!e!-oFfO2{5{BT+P%4i;YE!l;>Z8H$u!lqXYamWB%_~ z8M@5#A%d{rX01+L0%}FZ=iGt=VT3JG`fPfGw`}$ zdDbHzJCy$a7BU+DQy>4OnEyWge=n2W0RX;wK~CuFsMj`3`)9e+=c#LLg~TN!?`3cc_>UeKCK zUprn}-3rdeW=cfl$@D*do!rO6yUnx^PGU@bECISVW^Rw|ft36X4*A8OW%-(X z$F}@X5qDN zY$I=kl&5h9TYJ>3%qmJ$#~zr+Fx%unqn3=mI89Z^jruUjn7^H{ezg8Y02oCTo%Jep z5dhG$JHB%d;FOlPG1`gKlHcd}l1KgnY{|)FJT0uOhvuZ|ORh7F1%NNhJhlvWNXPR#8)3Qt=;c?39B=*c?dJrO2Zp!X^p6OiX%z&HX@HgC! z6m;K?oLp2g(1+an1CLrEO1USC)T@NfPj56(90Kw0&`ex55Z5yK$dhZHLu0`Jw=a8c zaepmF^W(iVtP)k3J?qCexOc^QZ!#v?UZX}nfY5E5k8=% zX+S@!0pV?9|b*4x;*5sVofVz!wl3HK@wHi|92vXH73)Nr7Ro@(TmS zI&r>u^8oe+Nrlo$Q_^k}AsbX`^mRDp?}U7yHSqp9FD#3>B4lzRXP|&3G0v<*0mTH| zxNxxZ61THR?KTGtblP*K9GYk(QGoU#XSyEVIXR9X4duWDW2cnSCox!|{he&gCX2wL zFozyYZxuTc+F>EO0OiZIJK$C+%qCzn;#vy+8(?FB&rg7blG8)GhWwz z#eUEV+(VnF#-^im+t{%w)XTp95Y>a4;5;?(?oXPlELIy=v`V}mm$tgOV^VbS4~H8) z?%{LHLe^S+^zxdKcCf=+vbfNiY|x%vF?Se`vQ6azM|=4svXT zsYq*X0aul{elGGxdMHj3go_=(yAm%mRtyiZfPt#o$bv>vew=g&&o%K)XEej1VhUkF zFZbJKi?r`~!SQWHfqn_2;R(FQHM8Cjsj4H{6~({qU6aQiaOp&Xlb)UdmGdrR6Th8d zi`#UDQr7D2an^i^1|^9Yu3aVJnQaySNY1XD|GSyBPK`P*?`=?K^C&9InQO6AU|Qn& z>SF&j*8HB!fZESS3;IjpMf>=4ta64-SxL$&7`7fpu4HTu^_L(~9BAHv4Os2Uz#*0S zvBD9B7#If~wrZqLrgr}nJ%}p+002)q6TsYWVwEc3%-UU`j5lY27a}{3f!K}_V^2Uv z2-^jH`-@5J&ysxzDW=i-yH|QdG61W3uzTyvsy6iWb)-(K$u`1G)8GNz??HMq<`1j{ zH)m)950_NkT($?iqxkwbb|!XU`s@G_l(*kKv*!`+h-VgFAFWtK2x=1EZmYhy8V86c zcmjv9Uuiz|1lHf%E*ARv$w17j@9MddJYDbr&>&)EX%wghyIjJ*o@X)KT_BzZj$j1K zhIU|NimC;H)8SB>EmSf&FWjVfN3P;8!K#&nfGI6;DUpG( zlvx-*p!F%kH93`gFVJ~t-HEoMpcKE!UT#{=S0VcciI4~p5{`OFOWxE!#<(hP6Dy^~ zH;0=99ixd<`LJnzMhB40;wFKKmC*G85bleKM3-(+cJ#&hWHF`gSdKZlHh-w2Lh zYFdJ8SvsDLxes-|e3(}QLgI?;LJB2q;=@sZa28d(5zDKYag1KGR)Ld&CeLMB!a-fV zxafg)CJn%?@%xioSM!ZUks(CxBp7tGe&a3*rj`~7()piQi-Wk&l*6P~m`P+CNMvZs zyc_bq%}4E)uibZJMdCG!mER%|q0vUy-J4`{di?P_6NGZT*%d4`A<)?v4|Gy7H&>Py zfQv3g)SH$Dc8Eq}9UA%PWP^8BIK|~|9*WbT2B10IR;1lP8A2{sT_a`en*hpsvn(yW z%s8!9#4JANhzQg}xnszcxU-hPW3lB9C+uh@4}bF8m1es!KD9aTh9dY8EkR zEi6yllI5`e4wf*^o4MJAIoR^(hO1`0Ig6Ei2PK(-c}g#P0-w|LJYN7X zVsxFcgp26f{F<~=3K`3311w`@bZ4wKH+5LjldZ(vMPSkOOg?^&Q|n4BF$g7^$5!wW zEbCHKTdY>sPpEWi+cXWXlZl$NAvhz{-BXwXcVZi+IDykZV~6>V8yiezTqd z;}}1DaSynD4sE^wY;_VzFi`0-&n*-w9maLV1%eud4qWIZ2!l6Pn~5ebMTkLVYDxls zw6K2VD$Royeb0@^{Q*lD}P!lZZq$LQC%#z9)G$c%V?I<%F3fZ5jyI8kShkuVhH`WGm>L+ST+Zg+a!ye36p}t>g^iE_fXaPS z=WoJ(`tGZJ>1dze^?V}FkA9aT$^XEs4qQoc71Gb|SomszMP%eU#m^P)75Zh@S6EFR zT0yVlrnck)fF@>??9NEY4*+-x>r1_Wd1qG-H@HmGf;cG6Gne|KUGgGIJ>Nu6fLnJA zpUgm%5XU!pB&F$wIXS5hmaEX;qDx_rlb0H@T~v-U^QkW7`%NRl%Cq;YE?CCaEkO6h zL~7wHVhz9Z`HTiWxgJ|O;1ZTZmekFxNg-WYW9KUJdpLFg+V7+;7rP}B7(b#d&xaZZ z@T9+_pswcxO+KS&$_}Gql^R!;8_WyXjduh%X@~a1$y`77y7LXQuD=XqzH=_RpBrnn z2JIq+_noY<1eZ({rim4)p^7n4R!=Y7L3>K#JWd!&ZY6O@?wTAv+S$*!d5r=0Z@1hq zhrpX)mwId!DEc6C0$f_p0^Q6M0CxW++Z|EOpyXKF!N zdI6XVrfC-0yv9VwFJY{xetZd3HT?xYqb#5f7BrHRa0NV8fbW&e-aJpn1$kUeBG;A7 zHHXe%YlmBl+H>szi2Lp%7#iRpb@YYwNi>Aln4Xk>8YYA>*;zGbkA5zS({Hbn7yw))P7t)QQ#Xc0FHxKX)o zjAWTE1oZ8yy8!M%( z`&&(}u_pT+^B=iwxCYRLw^MBIVJz%6W;mu9*dX^w>eZY-M-!zD!KzLeBN$VYv!|-kknDQ! zE(4z2G?M4rCWkwuSL@(tAIkfe`-c6DZ)~>YX7FrQo|xtFj&jMEUs2w$2fh;=XkJeo z7;*MFox`jBA3go`0CN$yM2{6h(FHk(BgaZQ;^fXe=a}MM^rB@V!vzvFTpi!5msLdF zrY9i+?k{~~#5y+)4es1z)BOBpph34)5kyS-vOi6vbTT4k$?VDusDItLlsX!O=zGdR z%%u!c4d>-7nqYzaY_5TzW_{eR#xI^K+w3#nWLO72*aN!|y|27X2vyFt`@t_ift1|E zM{WWaRUV%$%2rKJoNhT{Uk27h`u)LWQ)aRY)cK~86R8LGL!pWG+^g}(mk!G(69248 z)cIGVVe_%oLu%rrMn-*J|x==ocrc2pQ^52_S1&y9b!7?b;cRg@!r2%D!l>GYpEjv#eYmqksYqXiCIMq6R_+?v-^|cnZy&M>^q9 z{^?{&31kKbxIiO8sBbJG_2y76T{irKJd6)hfi};y7IKh-SS&r7@HL#i?Qb6RcUq-z zTK^MX`Ab5`L_|lBUpGcwXqYiMIVwF?@v@4NXJP_#E&}LaSTY?al4mRDu8B8=-Guwt7i#7WrP);j~XmPB?-4=@}4aqqoP; zn568R@{Oz4cLGMT`86mHGn;UJ@zh&2hnf0`%<85sE$3g(pl_UKRv42oG#X_nOA;r3 z4uq0(AEdx4Qvn78(b70B3zr5Sy1{QGLZHxvwaNu1nj(DkaVoD8*(?WiZMb+?F0E>H z`jM2&S^Zk_xO3B8B()omIWt0n@?H?Yw>sZy5~CYPa!Uo+Ux-4JUs3R!k`9eg%}_B&vBa7d!HUYhzA? zvPm`A^iy4!C0sNgergLAh@ijZk|ii>sgQ4f{$ z#MlyqcP|GeRz~u7nx@Yn^IQ$OV09#{$S1z^+J@$X0*ecZx zsFAgA0c~?AhKy(vN_vlS?snD_&Ep#2%HUy< z8fyP6)hD6y!DFV|m>{2p%6TrkUN#7%)vihF26B%<^7EqJWCk~M44aR_FRe;|Jk{zg+C?BV;sux{x-YUGSG3s;PS7LWNqIatN$V1h- zY(19SoP;jKMKsfH>mzUnf3^7_DfoyC?0c%b1CNETT;7eNd*}U#fxpa2lZv3d0E>2J`y8m%Bc~|5 zkrtE9vkyZ1DMA9VMdfm{{te8u17()>xO45>842Q^+}qidLiEZe1mt4^AR7IyOt!ew z9Svzx=)~N~-ndy7#en3Qe-zcbfrfUt4q|<4srt$#46^-v&q}^sYtl-L80cD^7SjTN1P!I}lNGr@k<=e`l#(OcR$1e%VIkPgH_CsyRAOF}$=wu)ft0QR437nA9ztiz<@ ztVN(41k|m`uJcd@jj!4Ht=i34%-1{2{3Awtm&m1X93=^I^p0OMRiu%?ya4 zS!Pv-UqXY0CD6?3l5nDIJ$F9zjDiRoJoCB{=&(O)VMYz6$fRIJ>Vh|^BRX(QrUDNO z?#7WGiy07f@zzI((!aHuomXxpLmE0Ma6>b7*z`2{bMyn~F1lw2l7&(50NrO?c@{zG z&tdFuDxSc=FANb0Q)xu9G%|`Hc%7?d{8o?69*n|izb0FhYkA!qsvC-Zm7bc4 zXN5GrvjV|_YdA<_9ds=m(mu=YeMnd(1&lQ+`cSN_4=DgH!s(zp;5(ISc7{yGhQ*5K znAFrXp&AYtVR1*vBwS-vPdVj`!Mga>r3%#f1W=;0Ad6vmc(J&?3Nx?PQ*x zD|{y7AyPbv6HZ)szPNYfC*xz-^F9rv4OhqlaCqy<3T1}e*T*}PHe8W;?4z!5d7 zwcoT#Fc6~s!;$xmj~M-~#r$Ln&ovRB;$rp9$qS=l6)UKK>{CYPU0d7Rpe<;GZY37r z7?a=LEyLt2$QCgNda}30jn`OwVy(noWS%+uurZ2G=nU=6L7yw|2UDmdyNax8guw2lq@;ZriFkG6c&lK5u#t>qTZ|^(=?7 z`xrrI1I)DZDp(hQ)kA2Wt_ra2DxUEIUnaT9NNa7B(Y7mP6EV0zznzuux+1R;fjll3 zzUm&o-!rruhM@V zY^-}7lj*A#KE?FZUt)_%?@4Pkiv>>&a8di`f4Ae8saj}xfb+kpJB|Wf(=^9vN}}6T zjejLp#IwF8w{W8YosNSzk!=+gbj)CXAdf=esq|2&qh4B(`pKxF4nt?*N^erE*y-G{ zI_fmKUClZpt1}#0WNp|c*H9$KC@3=;(-f$HO^7zG(Ih^nshq~(7#qpFs><_3W%Cj( z^t~C(9bKHCZai@mC4HQlJzHV5x9$46OJ6@HZL&$|YFiEnY`cL$nOi#Hb#N?xQ-AKI zYgBv3_hQWJ5$dS^Kv!ml0l&+_pvPI3x$IbfuUe$o-!XqhI+}=O7ODAVjJEp&VpYg1 z&AX+^kpi*e$x+iYYpZ*ArY++9F8y}u>SsfjsaCUFKo~0{u6m)y(}Y=QIi*TR#Kw%!) zYoW7s+4W9%xHq}COUJY4-kPfKb%vt|lXX8GgH16r21PdC1-NIJPdES(Ahzkc{X(Vn zDcEw!ySHz4U>Pk15NBi7Vi#f(Y_B&a@4Q>@An%?CKbPoH&Z)z~Eo&_Xe&rl>7AX~X zpOS9xcQavb3U$*C3C2U^t-sVuL%|@+@@I_4=8F1Iy$I4f3v?sfyYq`xD5*aQ0OucF zMK&K&nfZD8eAACBeZe-n0cHRjEXbW~2Y8kjEv^EbOr*c6*Ybxqko1?;ik@!jE8A4a ztgaYjNqdCE-t}ds`<+ONF=iSKb5+#leaV+C)|zLP7+Rk^pVWu#X=|Y8Y&jQcJK57>DHY?yzprrFr*htw%{@5Usia}V&ULX<5PBbI!hmcO z{#FwbV5nWh<(r`Bu6r3$4gw{P3{K+Z4&T_RR^{F08+`v0kfJz89mP?dJpdGxO$}2- zPzMBy86cYWCNava(aSP_3tHq&dk^`|cj!UeMlBeO4QM zn9|U1_hvYn-zZ*~Kg-c*owUOQda0@;A__b7SP8_}3+9RPA7_5Upv}W6ID|hzx7}fH z7qg?~e$L7xbIa_8ax_D^d+t|c$f_9a9b9;M{Srlip&%0wVbAdU13b8-zzHC_fAZm< z4-m*$XnI!F9<84{67Sa1EVzwpSH@LsPY9*GTLF}XaCPE_vpB(`hgq%&c80WLE!wpR zw`_Rn+Ad_Gl>0kq&Ygs*=8O2(@5^yH+xwr*?Y*ve{y`Y9i)z|dLCN`hvp z{#9Kde1SJBnscM)sv~`Ao!)4IyC-#(c=nDns@=@(@cBSSkc$nZ-wFh1CDa@GyO*0# z`{52g2i()*vQC6c_hS7m8@S!LZ!{=P!eY#>(mhFP0;ZnEE&wHnm4Z`mdIftdT8SS~ zKP_YGhblK$T%1syAV?i{!Zjz-?9psW>a!OYxb_ag9aEi2(Hv3B(CdroJQ{-^T63Wt z;qGRtCb^kch;x-6V~EI_(n{%ZXJO{?-oK_OojpbDH`Zy4EO$uC&Y{RukP$J89)3<$ zasgX1Dn%t}*L2U4Tg@ISQu8E}RfNw6Tj#t>JS4Dj@}z#}#uE7C2t zWGB&jx5BQfXS=AJO?nJe>q=R}?%U3V^Aekt?NuUjE_9`h7=ytadphCAtv9cF>OSU} zwx=U|DNwi%(q1;YIC)pG$}s#e(d2@wWKd>xOs6Z3j~%Am&{p%pA!H zQdB&?`Pi(EslcL4BaBhfZ2;_`A^?WwL?B)4N%Hgv004StfY1?y4OE`o(~Il))@`JU zdqF2Y=Qf$Gqugr!aG<=+<676wXd{>`xgkJ7PifuQ1(cXcqVM;eWj@bKT7A|MP3A}+ zr0MJ|iQOg!A|99hT_La=?`s^6-3ZCDTuql)H&A1;Bdw$`NkSGaWQ<%Elx=nA?r+~$ zW%biyLo)Z>Jh@Qbv9`0wWj){4{Ozskqh`n<&n%)-$2JTeE6ebZPFmW4&zgKL!jN;g zL$^RPP}5@vh7u4%Q5oIm&4czwjae7L-fZL1fSnrIXc4sxss1#G2op12Ngbj6lzeON z=xh^JzD!bO+9aBdLkCiKVTxrF`@Pm98u?guYT^iKLk#ggKB-E9ZC(W*M#vw(Z9g#B z2iKHYT15K}2(|C~U?#=5J`0sI#)s{Z6fnMKI36K#lmoSI*gb+d)z0 zH_sy!Vx>wjrAlvXY{FB`w4tvxyPm$t7%NeW=b-_3p-kzFB2rrh1BZbzB?90OQZ_=)7}(hh{bCniZ)wg4z=y-TfscvPn%X)lF4b zJN5ou;c-Nu?@?ujcd@#ozqIBWvfEfFT#dPJy;D9{fbyEqE505al?bX1dPEQW1uC3s zj-*g(tuT}nNg}J8bC%0W1rku4FR>mBL8>FedEZ5oYM88-@En1<_F|<)HXKiu87uz> z>s4i}e3+3+>-hsUkwXuDQC!w8ePiE@2haTI6{^1*9bVLnzp=s?tyULwglhny4WP^F z6IHd*kuDfqX=t@2(ADzM__K*l|Z7T*P+>KncEs<$LdPj?{8GCVIn3Ms2wV0!uyRfyxuH`a`hyYXp>@!Zk#O2Z| zZmIq3D{*v=jsm~g9GuQcaW@)(7T_qVhv?#kTPTj#pCuVxX-aoOB_tQ#qw-3owlF7% zJT#aDny!Ull%;@r&v>AKGwWi1C20fjbFczoOXyNtlR6P1k18aFl>Mnks;NE_+5UQr zX9;E~LFR#O_I&*IYel_`2};er8nqwyta<%p6^Ec17F>ufDYKeYb#Okkh*L80xEFX% zrHW@qlJ><=3G_F;56zW_z-S3RwWLy6%ACv(l^8fe!_ZDSGwA zd~`OvjxDEffe`}OB(eS}vZN#en8uiC}Nav37U`kWFk{hwhpDnp%(!I{-u{ zD`n?f!r5+0R$w>(MO=|P)n*?)W(eM8=d)KO$J|s~L*N6(?O(=4kwnMEIb`wNK2tNo zgc`4E_TAx{yvm4>fX9E!v_KyIHOHcuK>Qb!g!YVYB0RX};3DyJed!*wc5U ztc;jYINdIs4z?Gi@&G{}rstvk7Jo+w- z+;|G4mb+(^M?X$O$!bA2UX9>bF(B|$S8zhJJ0o2fxc=eHgDp2;ob zQjY4f=FIm6J|*c9k6qJlx#SdEs-4f14PbIc!HN^0k3m4Xw_i*`k^+>aB}9TZ(Qt$X zV;X+ry(5;Xp6u|mm>dv2Ul60ULk(tqXOT(HEfP#hkz=!I194zX*x{!5Jp5O}crS+S z*?P6CS84r%JY#F>;;~9gE?~2XK0OaUZ?1(xtzc4Jg1Q(Sp&+xHYK^_PlP&{V9C1f6 zknu-WRQv#{#@O-~pR5Dp2Muos9xT}8YO;kUO}PlZVgfR4F`04*1hsy+JDZMg3inTR zQZ=42OjGq(gr=ks`JDX({N@AH_QCH9Dz#sI65=odLq9-aoR02|8o-9V8!L?3TG5Fp zM%&9)S~H-B^HffMD|cD`>iIUX3T>Bvl zsKxfnGRT3%I*XUljzgyw1(#9ffG~}-3m*F<@fJdQ_lC0{er9J>bn_6C2+RB8cSfFf zRcPk7%tf_683wnqRq9+hxbiXHVe?O2bmTb3mNL?N#+*CGuqzlV3@W#nsI5X7Jq9hq zeKRj(E$i4j}_4Ug zb$a2i``Lo50n+K;SOn(^k=|Sb1Y(|*)(~#=RI_p95a8{k&>{FmsI;`)3)l%I8kjc$ zwfb&ePH~}ybw^3FdX6y<3;Ditai}Q1d3m{Lm(^*h%BjSYc+&0ou*9SzE?}3av7(EQ zM_at#fKolANn)emClb=b&=2H(J@SIY=I2}HS~#>KL}{h@D$2LSf#nmV084CS4v)a$ zJAkA<5rHQXZ&@v;*M`#|KVCQqA<}8igC6(!BS%XH&rO_0L5N-vvDL06h>|W};VzTK z=7RWu!(JNi>wanV!#@mZqO4&07=1lTQTSqGgG&JF=jqUdHF?q&xzpj%dLjS>;%!qx z7j)Jo_k&navR2ZGOeo0*jVy}Nq!h0)$)j_@=5^hkO1N*?3!&<)Arkoe?fOmCxhBiO zt=OF{z^{T2#qr?vL1N;7f-aX~UJ8=jWm>i+zcK#kHaDraJ_S@EhWJ|GDFfXmeyZe_ zyp*`coptU?JD40195Q_CDk#HSDy*eBxiq zx%!H93G!+KZLt-dgc*GK5^|sR1VzOfNapLa)#t+e#ft8d^O$U~)=;3`T7O|@T)Xn9 z>5=~dY+M(Y+IdbgB?_5y`dH24ftW%T$_51NbG3A-kcbNpJ*<1o%RW_-ta&lA9V4zTn z1%j2?ki|jAv}wu8OttF}tV@E&D*A~rjqQUU-^5zLm{>9l&zdW>cubuah9bStdM0u$ zb_XYNc1HV@28=Q6+$CUsz-p^kcIdqV@R(Au{=KC9ifgripw>t)$f6xJR7NlA(y4{c zdf5fXIerEp9osM)sKS~TI%V~6Ia?Oj+$Eo&?zZ2x7N<-1zzFO)>u3ClnPKKnMRRDC zV|C=hgLL4(5>+IoTYfRji$O?+s&r|8Q9j8e6p zO!l3^+jWF!(|P&O@CAa>dp)^g8+M(~Osk3eAg@Ey%k}#LKgrp)f{}}xM1Qd4MM)66 zp+Qyq$(1&)ueA;x`SB>(7y=``6S^`bCQRozF?;QZut_{0<^t@>j#E zH}HK^TVE$Av7VbRhg4t zlZyRr+0!O0+z+8iA$xkbx?d>Zj>r|Hjgo5C-&yj==wtqkCB5NYyP+G{j~KeY_e`vG zDWX5geQ*Csl@*TqiemVu;8G4L5u~L4RR*wkIsPoR+yg;T1jys_XHRJ#Ff$pbRvJ>a zACuuNJpf=njJ{ZW!?fJ!Pk^&`AaKZ6UNTU=_{d}9cOU^ivh4x)+E@0+#@eX3xibok zhnE?#Hhd0bf+ZJs!$@>!WE-r-e&}aiPT|kF{@!)!i#SH?I;7Q3#aS)IO*%UaMAjr0 znP=Pl5k_T>51oev`Qyt|-ppyf?o1(D$Qc%i<8E1uqblj8$vv02ZcwJM*nt`Mjj6}u zgiNQ1iu;E+VYCFEGtM=A{oLe}=!a`)cpwM!qR{}*QcP1eG~z)_;0Tv|T&UpFrZTsF z(@9ZE(_bO)8t>E#p1LQm4+_8n02lw?-%X-N>O1Js-y;~ z$)ZhP@SEsBS|hkBM1h0U+h?uXQ1N;E-1n0dAJ0ja56KRxnxJdVV8I`7*M4}+2TD<{ z_HzZ+z|{3Oo`!fZeC=-$BO2s(m)4L)%%}H3rH_RJnsYH$T^y{Bg^ER=UZmVWo>f}i z4BepIkI6Ali#g(U0V2W-?h!RXE%kClO_@Jc!;@ZVyn;3tAbo==`N&OE;~Qgw0|~*U zXj*?wdP5o>5(^vbds$5Wz?#qRti_*EAp|Hv8OGR+5s`qAW!q=@b~!UUO{4ZOez)Ku zX2}Gq9_KvkBVS2;x;XQ>OG>b3ic6xK~B*{bSNnl!|_cf5L~wCJ79(@4Vx>#7j>`K%kenTt`~ z#)U9soN+{X$w^FWr)wo7?AboslBWjxeLI5>$13}^#$1RlPc1o`pFaMEoD63|6-)vc zEJM;k*D?A@bphcP2z|@lgCvpa6TGR900z0jr9X?}x{IoH8Af`@pvHs9m|pFT``d;~ zu*9q@&^G-V0Cu?GKzqH)S~RagLk#OX$sgoKd~bgD@>9Jczuwn!9|ns%=jk?egJwv_q3FL#?&8vzt@DaF(0GMRF1>)Wzf2j;~m`)^XZ)g)xRf^)WJ&H#?w) z6l2T|jt5qs7!)UaBwlnO#|DB-k;9*40Ubv!F(vc}g&mALM#R7m0#r;ff+^dIhpBuQ ztI*O14jU)~!!~Z7xJrroRfwJRqCvTE@4=bo#xTn62d%r4*j1}1{k3J7Hrc6d=mfb; zeG1K8vPJ~ecPpmoAms#n;+C@1*|7$`^xo8;u5fo+dL&$~wK1EtI=e2tO}4WW+SfRj z9UcDoQ>(#UQ9EuHKi=3V&xab$F*}W%W`xinTuRMHvSmIG;au2(0*FEnN0Ob6`CS^pJIgW5K!(2rza%*n{-v=Gx}RY?1o? zou65QLx!QlEKnXcxOU_gB~&MphPCaC{G({rhMDIuxN95KBU({-XG zq-H&7OJA|i0c@#;VeYraB|bh5Hma1un4M$>8W42fjAQn?X`x$n8GGVc42=P<6ny zrViw{2lb47(lELF5<)gKAZ8if9zQoboj6kvyPY}>YN+qP}n_S~^;+qUo6 zwry+gtGBgVyZgEM>2y_pbfr3#PR>d8nqdO^D!^|kbH0z^4A-~YVZjNPk}B$=TiAj? zN&%l6jQ9h-OP`Vp+6578_=R5k46d5f(Xt96ZSfrPQHYXQavs?^riJo2nJHe!NiQ}{ z<~UhN+0vD*z0>fv2tF4XXQt~>tmndcxR!vEVtM7C`aefu9CX!9q3@Qb0kTFqJmo3T z;Uw52q-3qK;!!x%T`;|f2v$ZXEoV3iA!NhN_8?w*$@*z;utgm0z~Ap9fFENVzG#aE zOs^5921!Y#_YhXWkx=t3m75<4Z%+mN1vDq1#dIJBEc#ZCR`WW2S${mNLR?l8Humo# z0@96Ox_x%^Idknpa3n~OAVGoz3F7~61#fj{^79f_I;3N1W=m@$%hlc>Sx~jK}E!|;weH0gK#+; z1bazBL)wy){N{o$D+=eQmwahqIKRC#=P%j%zfJMc+f;Yi2lTpI4WUDI<2%m?y|~Zi z0P|2JCnDA}NX|W=RGn-pOtUQHM&hdo!?N#^+XxD?saQBu^S~rK zlz_nF!D8Bk@SX8(W&J1n4vLjn7Zb`h*LQsC1_d;WQwgBf7FeANfImZ+BK5 zHthsh=arD(TriO_;8e0+ZBnOhw99A}@5ibX({f2OHkX8DH#*n7j>v9+D%7IaDbsF| z{9~&UkdiGnZB#R4m#|+l_ImoN$!#>@M0P>B3`lUSP+69dB*5%ka;|=WLx~_w{^xId z?5@}T5yLPaIqHoYKswf)ro{* z8Ou5QrkSRmxhOjDp{!FMr0zcL`c1Q~k|a6KHO}e-ocPn00j}K2WMWdp6-IfC!6!zK z{@)Ndkcx18$CIA*h8;6+3iR_*@Bx`Vh@)I5&EZ|INSgMBx2i{yRkWnH-Gw^ABN`D7 z6gjZd>*CRx&dsm|DcW5%T+H@!2++;-RFx*Rl4EFdy4sv>c;~AShq%?y~NXe-@Kk{3S9__N-k}mwC}^ z>~lmQct``rs75JMz!Sd%LTtpZ*_=%>barELV!&nnK11|AM2y{;jB&(-I*2omX8T`2 zNPa-mvadD3Yz#d*Xg}{3 zhE->ZCLn5gqY+AK8QjxI7brf%uHw5kV+kYJe;X;EKA~D! zeqh!<@AX0@c(a6FPSggZacW8MdbKbUZ(9X?<*C+LMec3LhueM;)!~(Hz^J6=>P3$| zK2?8#^9?$a+RH5B{NZ;1hCz_Bl>`_V=Yw#9wi&}+<%7z%FPlpp;GxJnHnq3qn+$BG`u7lV`5%AIjzpD_`4yv8HS<6M#CYvSr=<}@K<$Qtx;BhlMoer}3&&XcC){~S5eKmspEiFJ5aMflTRphME z!*3xT)bz4ThgZgY&nuqmNz^_4*OP}*&VdeAB<&Y*zdQ9-)(<-+Q4#6lvkXr$TnUX} zJv{-Tm&3D_`gX7~+M^JU9eGxi&xWCrIM$N&c(#IsU=5b5GKl%3vD+eE!7s$imQJPJ zk7KJY0I@)T5S?=+ZFTrzfF226-=j*hwGH!zBMdFo3;=f8`1xh$B2)tsgd)iAJq-=6 zgcp1K1lD{<$K`~Ei>27zV!F!M7RPc{+O>!IMGcJar%buQ_^(ezIl;!xBF5GZ@B7nH4B&$1(j3VVXf8J>M?&2a zTYx-2zKT)v%L8GAbN_f+62VV>q0TL(qy=q_;_1JyY|TBkOD7}=p%d`~s#zd4QTjyV zid`U8;%#o)Z%E`SAy~)ImGDsXjaa2GQqjUt34auV8{0cxNfn&&zfcKY; z=yq$1b{!LH#;{;02Ym1Cp%Ie9*$Y}gzWL+=L-p10A23h;nMTEvvwpLv2;j@dsRthc zb3-YR>r*atNSykTPmEtGZeq=;Q{l6+XtT zC!EVOh{b$By+ob(55+=m@aa>m2+f-4ql}fNiZS87!xa56DdZ0Ns*f30hCgLWgfF2P z=sYbL4yd^a=rg0i<#9+XQ~2x&EVrcZP`ah5yQFyF2t4}ncRn=PfGiVKdLR+~c8gg# zOB?6-_;`gdfEIk#?PeHe#$9}N^)RNXva**OiB8M53UIp87^z`#dyh48)#cLAI#nV)KchEdJZrHk4^oOvx{hxV!SaG0DZwc!j0dx>R?ki{U z2SSZBfULnmKW~W4K5xUt?A1-#(@BhxH7_nSy<~bh#TD;=z7+Q4Hp+>5C|ZzVB7L)= z#AIkjL4qZW8jb5cX?0Yv{-MNW_C9PxDb~t;ZgKXFK~a;|Dz?U;jyHa%ZI7ci*N|D& zLv@vJ1oHbKYCTIp3Ng2ms7X|ePG{EV?(R(g%w=?^>YlIW`S01K4c*knX^d5=+iH&=@1 zXvYY=$P|d_`ad#vuxjnW0z5pGXQiGGG6`nj0~u<23LIqbK+%Bm4TN7yGyU@s6)>BA zU5CCaIuY2}r~^f~O&sHb3(+7<14!9a=ckG7yeC)lVSMz!jPOIfBLAfm2x6S4iUHQr z0hZyksJj^P%@ITY?p#++VFOeEK}8g5-?OYV@2Tmi=)zS6*IEJT^_sB2Ocbu|=H z6M@BCSKw2~mjac9nz_^9=DAi;@|b_ylhUt87GhLoZfo*|?`e!0JBxH=Xz9YFuB4KL zJSP>AL$&UiySjQb_!=mMY zZjgDnR7dO?h!_ya6guby!&^FJ&FJb!3^fiej_Vzb&91bAf4;K7=rY9-%k!A7d z!RM@Huj5S4fHhnL5hN$nUU}zL8J(u)Hi4Mu$A8X(r5~bp5v$gY`ir`BoIo^@LS}O! z595;DDb^yS&)z{7(CI#ZwOiA6lr5d1A^A`-@@8fh?i>R%0$gHm9B=57pwMf3I6dhQ zMisy|a@aJ9=dALZ8sXg6ZSA(=o)GjdZ|Gk4$YfuLT;&3>T*y z{3^-w!f8KRqTuSbx$9q%7x9{U(>xBPT2xJnF7L#oj>{ zzf;pf)N|RF=fh{khl9T1wZ=Or?+)fOzy4wEW9{2JnS{<~_Mw1fFzFPqI3rK#GVq(* ze^i#gY3cDnEFDksNZU_ZycY(m95nLv&C4k#$$u0jZRA0j+Q((-TGXe`%QI4debc&3 zHDTap%<<;F?cgarXvRTfUth(cKGq=k+I|0rAdGD-A@U}-$D?O5FaIpN8uLja)mJ5C z7{Hb-US&9>JCC1%JZUCIl+3Fs_cuP;4=&iRcnpENFzThzmd>?|xyDhr9nhmvl z?eI-Z>PkJWU}*uRD%0l=NK2ePRsM%Uk#fUy!m)3!JgigXP4BqfiN~AWj6R(-KdY{O zUCgC(Ad>_wOa~a{W2WUV05(E<Y%5`1(;&qv+}^}tPrNXjlQoEbaDYV z2NCFj7jk=qw$Dqz+Qz0f6NF0&ZYk$Hm>o&rnDY-w&1(^y+s z#f-RnEaH)_mG9L`ll|0h>Mu$p%lWSMQ=(1phJ=nsQn1;g~x4=+(K(m!4`PK zfe+yTp>e0buV0`PLB5%c11eA|9K$|-NWTxwumEzHK`x1dZXj*~71gmy?g$NkM?KH7 z`HYD#9jm~LR`uqO$HOpF`@);MlOpy$yVF_!QeCHFnI^;FrE3+vF}MM>8vIqG`HD?G zmJ#M}vmiY;ar&FEijLYIP@9aRim^kkc(mu^vV*qOnybtg0kug7!jgi@TEd_}x6#N1 z5F8V;S2r(mSKT=~05pZ|cORCiX!7B}>= zU;IO%8w_`X#Tpr|ENbSKO`E z9KerKm}G9h%Nw`W;nxbff{Pzcf-XF%(BUr&K;5z50H9y^0#BkpqjwV~KPlN4H@LNF znxh`3^o$VmwvgtWOYrFE3@}1DQq*gFs-tr;xIr{D@KigRFqp4D=D8hEC448d$~W)( zj_wH=KJJo!j}lD9`?F_uNQJJ8Q(pI=qVLRYmqe?QlFgFN(lzi zgo-l=C7QTYjwQ;D$4LxxJZe4ilsT7_S|%Q=kHxb=9 zGPw0+dQ2B5U@UNK{>0y>NrhrxE+vYbEyfwl`8O~*bGNaY%NDHI};D{ zuQ)FOaw(v$80IOTh*0=*0Ehws0BRSnYVdzh{(psq|ND#FWQ<5Fqj{tvS~w4?NDFFu z7pbAm2O}RfzZ2YT#rb)%xt)4g(~-aFLYPBQ>j*8XZ+vUCB!4@6k{+HVlS*c_b8_B? z*t^f1o;4x=nYhyTVc+k(rHCX^rV2xJeRK5(YZm%5Tf70h%!`(B&ulU?JPoMq+2VHt zH~QKQ^~lsZkZJa3Zp)2E&5N2gw9IoKhZ^EB$?(p<|5Vi4O^95Zbm0#3scFwO$V|!z z<%|w_OsrX<#DO#5A4L{2g1m{Th*zS=SWt*n`z{3Qcdrm&cn$;>#$<{w_Tci5cvD%H zEGiLeTN=TS>o_0h&(5@fwM`9;rc0VON11lo~ zi~c!vF12;S{@;cCot)mQV%;q+hpcm#ec@i#{GMCn2O9jJ#9(YY5;W11?#P`!X~}u3 zlcoWgM!nDS)ieLwX4Ah4Aq*5r_%4%RF)E+$Z)kT}StF#p+nwBZUnaMu3V}|hGm(WM z!csj#yN99yzb2jj`AZ{@JefJ<*1Q6s-SSq!*a*2y3KEF3@qL&%6`HVDpmPMQo_Ny< zG3;k_2GK@yck_5pO~AKO!9#)9c4z!NHhRggN^4ZeT-0Ir8v6ySie{Acy2|7~NL4!N-db4i3nkv>?Q)(}_xkR${y5T~< z$q-lH2b_#vq7)9N)Hddx5kPfFnV@i5%y40y7yg2e8}h zmgtH4WX_0=YC37-4I`I{9KB2=&x+bBIU29?C8=9A-w?$fK5Q$&d~Gqr4T|vD8*fyf z+~r%ZaDA=Pq&UcPTWjVHMq>~~AO z493n@uIB^KksA(T7MTS=&|RA1gh6QzxxBP%Z3i0ZxcWRZ^@JJZm&r%^e$AUK%v=@# zmC){iRDPJFVS-pBZ&AEg=zLDY%R(au@JBLwkS7Vm&JVmHx-q88Lsqh1Fsnk(%4kZ? zesl!>igHK*;epY_>q6K?L0+OJ{G`;HrC$m+Wf%%7f&-{?LL)+a8zoz*q#e75(w-NX zuzUmXWWo@^t~g30bxVfHm4r`eKxo__I%{SqA8EmD@Z{Y89cOdB*m&(Xvu8DyylNiC zaeSuEDMeEX3?Cs7#z}t{7!4I8Zaucm&;vQek*$Y6(tA6JB4z2Hf2&;efqHBmn%&!Kv^skzmTJjY_*3%WK#D8@ z3G@}RVFl^;X=q}9?(ED*x@qR-0*h+^eX?(JZvfij8WrM{;?3_ZV8ZU5-eI69n2H1? zVCvAOEV!*qQjAGG$Du(KeQBCKC!)286x%4!u4k#nOiX|A7+zi$kqpM&j7*XvjIG+y zP$>mUwtu%-GOu7mv3*Hy*H#Hn(0L=u5Z6}gP6CkexgHUA^Fnbz=w+KW(ofG9I;nxz z;D3x2XZ`R4>?uEkoe&c*Z{*n+GQ-Cu7Pk5hrP04eXFhrg`JkdjjqoKm_)N?+c(eN` za1A(CocfS9U?`$MHr9S8ZKC|5S|9=`%W4wMJr08mzA!&ek5PBEqpcN*Sx$yi3)*L{ ziTkHqvH+BG9v*{womWix+z(g)47M0GcqgVU$!Q|?!ZZnF z>5>jV^5u7Dwq2u(ca1}Wa*t!(1OAcEq73TBS1@usiZ^lsL((3n_N=p^rC-d|Fzzea zGsw_Vet*^%lh|c{b?f`tW*7rhe9@F9rs)OVxak7{ZZeHagh8G<5&kdn0)dA3SD@&f z2$!rh7WIQyqqbuIklTzXVz)V%+Bl{K)LJ@^7U0Z#jT3Ol!=LiMwnOOnMMEOLMRp)u z9;G3cq!;F&C#np{j!|~ka+PmqIY+&B;LG^60BR?Fa@P05 z%)L+0VES*sy46?}_tHHsEYO}@B_Bnd&P*V5{tU}>;fzp6goM|lGMVZ)Ujl#!K+*R`6Gk2&k;FM!+B8Y& zziDu6tj6+73us^_{?THlskC1q5!cANBe{tF%W&)M=alh7bp1DikNVT+QY`6$+{ha> zy_2BQT{=2l(n3A~f5YmBYs-kYKSG8|8Mlc!-oOm~vc8U(S_eyWE|=DrXIVN(-UmDi zMhm)<^@SHL%tyvrTbjwxJ(%Rbu8gE1HwrBC)77~5IiN*{LPuCkr~okP)fjhtHOrgh z(`6E;x^r}Y9>#x)B+(mQF7o$lpKOMgM8T(n3&Ulyq^DUTss1}mh?OkTngV);lNr#0el?lJ>1|^7R$j6F zLq!BxK`vD%D)h-k5WjyW!yi?Ieat+SXMjQLWTN2#K0RL=^S+&a64KU`<}tKVuZVZy z)7{1@x!UR?7A4pgy_jh#0lqh?S;>+o0-Wo;~)9C00r@p{Wwm~yh1QT^{ivCf^sCV43}0dIlQlWd_l zqDMWETZ0o=GnlGVbJNXO4mTnqTMgS7zK3{%wt=OgM&X7ZTkGFCMao4zwsA%eUM6Kj zntMS!e={v}6}9oE)=$bF0{~6^IUqY!$-L|ii+zwms#(*Cu#eTx=F^?`3|pi3qLe0T z=PlHImqL&tQ@Y783WDY1O7sdhFh2b6QS)6)b{UL%wHmr~4#0xp`86$$pjMJdG zuZ`C2d%KPWL`FQZZ3js6_e$YdGm+(0YC0ysoJ8)em6Roj`Re)a#729u9Uzl=qZVcV zSp5MoZx{0iEk_El86z$-Vo7S?~FUR9LwmuOU$`zfA zfYEZrD#h>vznTt&(xgKfvg#T57iLaO4Pu$4=I(lK!q)mE+?wO#?GqIHmjc~Y)egmZ zoK?~(D6)oh3N^hNFA#J9yD&krGxjoV^EFYoP)?qGK(S(Bs->t;{L3p_+MLJBI!@j{ zS*FMFOL`W4^?Hbk;s#|CCC!-|SJy+d=g#k&j6iRD&=A!|B=P)Mzi5L7wwUm=phTCx zW!bs-i8#9)OjBdMTnGN1xJ9QzZ*X$0)pnoWY)t=KRn!0y|7m0l0}GDJs_b&zgV1zb zfBn}>Yd;n8TICG`uh;H--z=5{1i}j)%z7pa++~r!ohQnr*$VJ&sMBo7>s!*?4U(SY z-|sibt`}v5nc{hPscxS=S1ABx@Xe|>%!}Js9dqXnC=H`ty#}CF1*&wO6P;wFo1ETZ z_}nZqet2^#%;x(V`I25n8S7->V|wa6-jo;QU60gUvFGUYlw;q>E6`RRW!;>Kr^9b5 zw;>3-;HN~q$h&||D1L4_ohUgulJIJG6hASVxe%=0>!x$7 z{?F4#e{F$%)1TVS&{z5KqP-~1zIwWW-cMw-5R;)G#&F7Eh&#&_>@~ zn|FY3>+y@VSgE;1N;Q6kT8A`Yf5VZ$&n}~(nyd6OtI=(rs?GZ`{J0eT3eZm%j%T6k+bd0dkWvURUf;qNsEtSGXP&Flol1_pWl$uqGaX5`Iet z2Qyap6ivwaFIe!H9Vs4qF&-hVdZ2}`hNpEMwaGD=_h?|a`oE{JFLHz@ULWtEUxYBY z`1xZ_h%~PLR=AGzI~}Jd853eqe#MwccE~Td}=s;x7f~4r>eeR#o)kLMYod-YC-4gS$Tb{ z$Bn2CilJT_^DM4#DLXHxF!z)`$dTsl$enXG-|iD{hrf?z(3F;iqb@E(e7E!N2tiyu zxGB$w#|?Wll{e4UYCtPBLckAII)e!3Q0Dk)x@lX>t^r>K>@ZFhbuL@^(tgGgrl3D) z`DJ_S8rxVnkg;hJ*A%PHlB-&gA0hB4aGybzGZ|W41F*uzDqw;);yOhhGzWokQOj0f zsq;IAUdeXt{0v!QFtg&83l^UfLgpSqjliE5y_Rm%|SL{5}eS$0p zx{f3v^q6#7Y|8H{jRZ~T+BHW*ZF_6b3}>s=Fnwbpu*Ba__bo9AjHcR*A=2X8%gE)7 zu&gT!@}8I&v|`J`qTo)fA2#sO=8k}7FU$)jq~>_@b4Gx=2`7bIwYnbK1s&uD-Fq7v zNy8Q_9lk#)mYiZVJGdI&wNE)T#Wo3}?O1mzzlx>WC344mQ~T|yIA0+@&ZEG)6vc3g zYT;3;3{a#<9(Dl#a7WhKv*UJY(nn}{gl0mue!n>|2$}yk1+1re4%AhFpmzMZkgmI+ z8iLnLEC~=mCo)EF1V{xkP2^#k%tT_`a?Kp`jfsj2G=?YBzppOweHxe4#Pa5d_Z=1iKK^myzL6uV}6ek=?y69~ML~Yk9-ev|` z(fGe|z*=1O5;qZvRuRublE?k^b&u1pf%-+u4U*p$;`F{9y4M{G5l;l8)XU7o`uN!i z*zXlGjj+>Jg%w#{UTbJcxqEDzN4WrQ#zg3IDQ6WUF74$%wPxc+YRcM60-`?;ZM3BJ zb^>MQ-P`xij{W17V88ZpLK9x-lHJ|;769O9whgS)D?_L@U}u)&sykSpMnYHMVnF`% z?i{=JyygYVLnSkk>$21i>RXQw&da8K`!4CndBf{&c-3ngBY+Jjv3zaEe`&E2^ri|k zYMU!6C)*3AA!g30)HF#T+g9}?Sp(RBDj4}FKA?P1KLR4_W)$S2Dyi}o|?d-VkkUAhE)mGa{hAITVSqAIVL|>oGym5*{ z5uSQ2XM;8MVw5jx4qs8in_mSS#o3KN=X{kA{vDf#v^OqgCCQ&!IYR%ve83S~a@39# zRQZe}=*{?y!lA(#z4)V>J*Rr6uMR^lxV%FD=~VbTVA;43(5_bzViggA0Fv+u6P2N! zJFH&?`QvE7=umVXC3r)%R+4$MG|L!8L{k8gH7JVHD^yY`Weguag6uTwqvykf2) z>5*!Fgquo5HoShpXe{vV&##xvIjA{p;mce1%!kbw`H3lx83g8_J_9LSi7Vq}P=%2~ zest&!6SXesq-JR(ZxjCus$x}#ns3c4hx4|^#^huN@>s^y)lX%*S5ZuC&fd+xZaEMk zH9;~X2vHsl->gJkV8tr{Kp@T8v0gO~4@LjMtnEC0cVzC&-%4Gi-!Cp%Jl>xb4V5JR zxu4tzBr(ADNvp&Of+&ALVdTiNB(o99%09SvI-wjhBe@c0MslT$^rQ-zDaoZ$Gm;Bs zW+Ye2j7YBJCHza402@`N)~8#((P+_w*w~_cz!sIitYUeE_%ycKiKKs*;(#A7JxysP zU9B%ytNUCaS^`>^kni={gF7+Nd2WYZ{efWJYTi}&m%h2Ka|_X`LF`T*H8qnLfG(9v zTRN=N<6!nPvaqa@?U`^8V2Zz=<~Q$@jaw1eRoDXCpC5Eb0+SZW*&3>dTL-i6a#}Y) zespv~$9zJdK~R1a#0Ur74L#p>c{F`FTTVDThWwM2(?d*t+H>bVN=*z8D}*FsE7rkE zOkNl;OSP}T#6Fy&MwU-$^VN_L7{JsPXrHQa<5@P&@Oy0Vel|dFGjac+j=(-`QY?7> zSf^OGy>i!cDL9QH_yBbjDoydAQ|)2h36LY>1uB=57G;2P@FFVCvqSgNk9Kxll;ysM z9z|LN6bbp?r1!PTQikdHT*_qx6ok2Z%rQ?(3u2ca94aPagQ5LUM~P& z=D%Fha}0m0$^+M@xsVz>vtWYxCCHz^`nNrnVfD6`i&K;pXH)J~e=lHe2S8%r7(25B zY=ocdMm|PsZKo|daTKJ=A@{t-eESm*NoSKxgmwL)Dk!3oGBnDJ<5) zqjh7aI+imlW}1#IEB+*V_X|zAtgzfJQ^$`-E=VR%ZP%-winoqYdnDc^r%(;2I4pm- zpif_L)_ga=4GJm%2HPeMv5^8m%C+H{j!wNGvS+YNFQQ?E*vCR}B|xVXI5`L;jp)gR zFR(e`w#gck7qcv5fO%JF6wU%Sigt;{iMk(^U4;!30GGt^ z+StM2!9QcT$N(&7t(x7-q65yUp)p+-i?y4~xWRlf@<|Ko(^Zm=+;Y2BZhiTF$mmU# z$ve1}U~2y@8Onw6eBLB~c-5G1?5M6{g4u!cl65kXVOV}j{Yq11wrx&C!xmKQj*2V( zH~LAKe$rNL3;P38_PVMWKTo=Oda&oIiHlRq4OA^8szdx?A9(2PF5RBMx$b`DV0gD@`v z^{_e_);_-4I_kCJlQ2qxTb;j>t6&*7xY61Qp;xgkQC13kf{pTyy(0=vfmkI`g| z<-M7z)i)M^Z7R*cnXd24wXQpg1lG-vQBboB=(?ib+dj`whX#YB_ZA*LxNk>L1Or!DRpBd}wgjyqY5E#=BsN2`_I8dWi_h6z%tU)m9u z(dr;kw1&xV(}8-I-@(2!p!&%eG6pEfDkrd?BvU}@f?N{wRS-y%AOyZOU`#Yx(Chp` ziw5-6lG(<0VbH>m#>8`0K5UG4A;#SRLxvx9jOJCOKiCUWZC_Be+hb>tBo~1WD-T#Z z!rJ53p0M_WHAievU?34ed+x4-GoiH@WA%+Xl`RTF-P6EF{0_3=J>1sY(RLRQvfvZ& z=G>Lp(R#RgAm2goYbzfWekL9kcsoCm5ul>`q$%YxvY8OtyXqc@Ba$!%#u086h0`!U zwzyek_rhP9MB37buc3%t6x5S5qTm0?3nK%d+;^YeC><$7;7gj|~q+Utq%o_U1d z9FrRUp6?258Jw>c#PI~&=zvD|-7mwkRS3*h^Y&ChgHAPA8)a{8?B?-@Q?usZU_iBr zy{z!s1wPuQNIgByRSQ==f7J*EC!E5Mvw>FHG&UQoyQiybn7e7mtZ6%y+HNrhbxkEo z5l;Q2o+b0bUWnWeaOm`tRl3^yDk@-*Iw6i{<1K86LDk$a+V9?s$@R;TrF@1Gq-L5r89 zPF_I$rDc9%h`bWJrOuK5U?olGx%)8oe<6pNcwqCuLD1IAyx>i?;f|zm^zHW{tVLBz zu@MW40z$aMO=BS%MEu_-j)o9T0{_D51-HnIzWplV)sH>zV{r%%Q~5L}Lk&Y?0H{C; zE8vOb?3M{Ai@FzY)u?ht#p=*bGk3K8@Mw0W12__BM<2jZa}K?K8ng3!(nXSE!`0gL*}e1?m?OdTOO>5pjHoJ~|k&wZ+#TmUM_v zz2a{BPF6EG*X_RQqx6)gC~jfMNQ-?_YDy4x1>B&@zFqQBy?;m8c0 zi&G@;SfntURQNXH9_y=c(4M)?ecvDj%Z8H1A>vz5c-K6JEk_V>$1Wk~!EN~`C*=GN zjd{~$n`RaK)8foN=BlQSI!sSaP-xez%XqPQ%o@bKCQ2%ju+t*mE7Y#CQ|Qu}P7cjR zM~59;DMVYg`VX~j4-lJ=#9G|W`^jQ?f%}*Xk1<8S?yFl2;b~2g{zP#0_Gt?z6N!Ri zOa{Ecy$s@9toK4_2cmL+OlY#Hvap=qN4&7d&`4l#XjXls>uZ^5XDthy`yN9 z8CwVEb40Xa&#UGIiny$PAW_fDx!2iiNN6;f!KF?}zGsa$x5E z5EJ^)T0+^oBb=R+D&Y_1R3F~BT)7C>W_>A%ckP~Zzig~wMgCfV{9#HS7mZrbnU&vU zCWhv1gRCP=T?8TT%i5WtdG848FjFr<$m{0ZJJ7%K6$V7@n{}8sM%MZrLhNfb!K7$5 zvI8*6vIkRjP;?aC2y{yudq)ZlV*X6D0HswWb#KJ! zyERq@$N=bmk>Vqhi>gw;)@$x=N%ognP{Rd>*duriDiT^B$fV2O;d}#ihl{E5Y<>s# zG>theA8%rI7kwyWrV#>^2C;I6bH<_2K(s%KwQiRaU}p34_M>FAw`z=f4%GuufWTS^ zgZ^iYx10evwl4$SrJH0czB2cLSbK5Cx8ZF>RL)mwlfhdnexwqL+B35a=}&Da-&kM) z$by9o8v4x|nY{+o3*$z6nfYmVIi-2em1Fy++Z#|sYPPyqgyNHL^mIgRyN+EVrA~Y{ z?H%3?)B~T+s_lnUuY-Ys5t>F(wxvGcyqoX<$h2AO83Hlu##4%aqM~RaFGYReRMQ7g zPa7r@*5nH0CHLVLPjt$IKM;`ypXcKVtN;>tETrCP$Z*{o#y5SB?Yi;N+lHW`pivJ> zed_v`-=-dl)8~?)C#N@NFch)k$0NzvuL;PIcBYk{ibAS|;6Fcc7anG1zO&pb#f(iLn>q_Z+zB@mPU5!`1Vrq#%a0udtgV=4{*8IVW; z72bqvxNy5-zfi$~lUCa}H2`B-pa`w~HG3#x;pH?i`1 z+CF2udd7GT-{kTWh{K1!TcIeYEC7fWWQYuTr?{&(=9{k@d7Cvp=~EBYpx-L-kT%P3g^sHMht!R^*L;*p_8KLU6?X}=!hTO-^TH{RDKM~&21(-N z{35X)s?vO)=3@e%Czt0bPQs4YBv~h70@9 vAuKZbWQJkt{W)4ewQF_&M;yZ!-IF zFvF1LI?|e!8uP&Kc4yp#^J@&Bd(W;Z70iBW(5L*4;&I7KtpL*B_d}16|DQ(&l#jvl zqS@(%XYWPdL_M>PEcrYX(bfGI0OsG!*8+WUDiNnlvA&F^z15Y9Fd(06k$^x-Px^hR zp9>Xmxb+LX(gqKm)R#Bk_8(X$NT+BJBuR0AZZOb$Ur2aX*(BkNM5AER+onE?59L)p*)>qTz}`QI--BFrEzg7rG>jFKp>k7TM0 zWjWCc;B1ghnQD^$f=UDoASAq+{ZPsf+MTKi>#M5ri7ZVw1(ek9wI1;B5z_a<6y54Cy|*VFdAA-SZ%% z_6}RaeJ$zO*iyZ1Qgwy)Z*|p@+>r(H>9l_^LT%r2@GfRaoO;TJkv72l$$L;R zx_i5gYY^OyjhqKi-P;c#BQ>O66)E=7irFngEF$pyLKM54m57wC2(tL#4JkJ#5I?{& zPzyXTL_9npTn^=YkB__uz@k^KBgbn;@{mE)8UU}cu4z;&xteYG&;T#qLcgPhDY``{ z2C&V#V^stjrnbBAy39?W6G#n*^K7Z;p-6S=mtRrAO)_!2x5$lLu1CT~0{YPr05BnA z{_T*Twup>#5K?U3z)40{k^zjrspqe&wn@53sAP=1OoBZXH+cmWz1?6Y9%ElPRXptD zgux2H1#@4Xwyfvq+EysfgQ>qnPTiasO6a~j11T)UImq8O?U=2<@GgJ-d#>?t4unYN zS|-w8pMPHSj>Xuld~pg9E!e8lOQR=3;^u*`2iD1zV}5WTKT6XpYF5cB0nn{Rn$Q6O zspmyS$}M8+Oth$n;LA-))Z35q}T zcMewkQ9N_NEEt{8gkP(I(+{$t{AEN#s%^ zF%e$m1N}uipBuWxu`XyPTj%YhJw>WqKH8kn?CeiU`kimG)~`iOu~K=9XLMl@M2fXQ zdR4n%7^MX_)(K#|hpWdVH!yIBLk-`I3HBX#qyr8Y`-BH|(>OCDkMNt$ZA-fW(2J#; z8Fo3W<~5+h-yg(haaFY1ysDCKc%Mi2bBuQ(22eU>zjAsW;Jg7GkeR13q{|koVbUr% zAl-u8!r#nQg${9&b_&X)GCWOkJOd2achxh*)_qc7@VDpbWw4H3_jMcIy8+dM?a|(` zIg6NogfP?N2;}B?U^<(1!p{O=0vP?O>!W{=yXgh^ zl>0q@zkK2W5&`QUi?^)beBXKiKYauM?@DhU-_z6J65;w zH|n$X+3y;^MQ`)_SC9Jl>L6d9A0`0y6HtLa)-&rX_fht$_rbU8lLe6b`nV&W=L^|g z^cnFE{8stg{KS8@+m5^OE%%~+>V4Y1>mBq0dB1twedgN-Oait6#MhjcyMOqmeeeDJ zU)djbuXe8hP2Xx?{s7wVg74Xn-W#WqS6E$q0WkYgWmy4dh?k0&W(K|Z(so^M9UIs}A8+UIGT0pfWcEVyB zp2j=PXNW|D&7f?D%24^7Ng0@&#G5FAxmluqbs} zyDd_1hZKjs<+Tk)eZ^h=3TQTTUyr!{HyD_y>%F{Cw8*hJoeKpnEWa2N7|~>Yjm^=b zl;}?h5Zm%Bp!+QeBOtxTyd_=?A>t)))HJoVdNST{#>zh0uM24~wA@1u5OCVeus#pp zQ4XSx79uMMcnudsIIYd`K&9rDbI^O`;sjdM>+H6!*;eMOsShXKt^ZP5f|Cd{?+-@l zKfF*5-SR*$r{zJGW+~=41r%E)K9fPVYX0qke-3fsPt3g5G_Cg>4np;a*QPZ7z_2lG zv%ZN=@t*KZ$fTsLK!PY87lb-6dSa*Hx8q?Wt>AJYZf?i#1$l9k+#3`!qVwKWgmu4Y zz)w5zFBAIb`2RUY!<8y-Hfn?2e0t3GJ%|UZ-shJ`JRUKF)*N<;^kz^1&tBc=C2|4A9RPLKb@w+#<2$5dN01XuNtz4e>L;}d~jxvtsD-2Nv|Riipx223}+PnktK>y@X$e?6dJ>< zb%|<{%AD2SJ$4W`Fe1YYM(}gDW#!>cny5a?Ee99g)v1VzURcrfqC=g`U47vU@+)46 zGtYH0j~nAtyAeld{eh5{>I*Fi9FyRdV5B~fRElJJymS&7cApm|GggR@=R3)~@oB;8 zW*JQHf6nb+TDlWvm0N24PfgA{3tZ02LM*=f*9=Ea8>~^-1pZ&#yd`;%-xJqJP{h>T zQT`aSH7pt4U03O>bj(zVSGh&fRcBmP zU=Z~BM_^1IWMCc__+{qPFJkQXV9eb!LDlimUxmUeV3;dJ;|lKeqZJRSnIPWA53g%* zpw=BZ2c{D6QJ1XO>qz(MJ8!KXm`{-%ZKd!I*Je1ADtl>cJer`_jb6v(c~c89w8`N1 zpTvcOz{>XqZj;G$jyJ*18-cKbJSL<5hwm@ldN$XFfko)S`hsAt0f{Oe#R3y?|2z%J zr8@*!j?v@i$e=EF4AAIdh)sP4PNqwkIK@{dX_vC~L(}&!eWeEy+Um&f1*xl@nZpi0#=`>3Fw6L-p<*`xcDsA=rb-%~MQ#W~Um z6bRN)C{Yl_$3NkL7{(uHTrM8u_QenUg5#VDmHw00AegLZGar)-CRBNT%t1bXH|%t< zqS6JQU&20Z0QGL_q8_-+Wo0n#yMV|bp5bz|Igzm)cQTOai4FDNV_g-;7IyOmLwa7s ztqA|?Xp$3=V*ntNYLw`YehN_kdCN}|ZP-`b^9cn3&^fikITBJb_^QEgGFovYtf(&w zZwP$kd3!e1cTyIj?}K@wpJ!Gwd84R({9AwHXM|5qn^5p(0bhe{)Jjp(8$AWqC%5oT z^kJ_7DY>e3ZDUlKi|JCC^R4hn$*ph`Y76bk62T{PnV*^ALC%bP*r^DWG1Hy{TDw*z zuD))q{=lZ^n7Fus^9!}PWo)Y5zU)1nzj|9#gc(Gno7Hi%_%@_rDSP}JN}U;H5h~jP z#_<%P@B%&aHNq^I*2H&WcTueQk}c#uspsbJx7y*|z#-m2kHAjn=Vek-0s;B;v5=P~ zS+dD{1)a0e>c5t1a_;qj0R?N5;4wa&H5FU-kgq20F<7~4g?ODRiYKu0d zce2EO@#T5A&P@9HZjmO;4`Q^UPUu#Mf$y_@VB5)o1Dr9y2t2sWnVJ0tNr4x}sv$Mc6c&FG9C_S$-2|y_eLJ0SGYhJ$$)JN=S_9U$u;KN{re>Y87%wSa^-PyHuI*qQe@%Ws=HK>fF(ab zz3HZ4iT);{dV2CDR4s5R9m!9EpT!|UsMXaMwWM)Q?|0Dpz4uLCtF!8p!u9gt-T(Da zkLPenE{+gURd)Waxx^M~QiQILTm_Ri2F{eWIrGqU!~Op(?zJHL>#ec>yTB{ha*R2p z*m2A*qnz+otgoj25#yqxrn3A`p=L7ix4wUfSWt`X6z;Y#-WD}aQ1?FnBAe1)qR=4{ z;15f@vf^G1F{}>>QlSf|XnHmi~ zk{LI5&&;nbB(KvmSjT_vu*u3dDf3WWA+|^=?DhFSk8RCXk;Sm8WCb+viS`9>zTvQ5 zr)-sM=iifKjcdgjIDpf|C9J1LtSP{caJQo-nt?GrvtS_Is&^dC*4iN4sQ;1Mr@>bL zp}vAjF=oL4+p7L2qRdSTNB1pM809aed&N&YWB9fJrlM8}v7l#2=tYQ`DKh z)nu90w7VMpS9X4aFJg&SMti^cdsA)cBxP@@;%~N{L83{SrB>O&GCF$Zt8sqyY;Kgl zQ$}jkEn{*tVcWL`?dXG9K(b~P(6MX_M8zV6!#XJlqZ?E>$PfWocBf}gkJ1*?{ao5E zV&m@)$Af=l&b)jsaUS_%-+#2!Dvb$$aDt7sBa*-#rMw%}5C6xa++6nheyB+Nogug` za;M%U8!mYNeJlIF@kJf@zU3`wIgkKZ>hWiLfTSfGuF-u1BQmv=gnP+1Yd>+ySTd#E zD%I5MV60#zrhu&&TpoFd@7R7lafqY?(olaOM)MGx5;xO5}#Rb7Nli{IA6F7&Rl{@5vI3FUW)ZRmg}*3ki>D zynBSbfMbybq?Ph7I2lHrilz%R1dd}ks#5h&$JwX*2X}UEo)xXh|Cd9}wvw(XJ3!%V zbHGnJJ-(Xx8518mqJv`s{Vt|N*9rVl{lK!9Yf$`)1*7Jl)a9tG-$4-C5qww#HM#U3 zW69%-e|W005SzEtj;lrv!yEp046H|ksh^=n!I;Gab}j~z(NqK~q8c@}R!Nnt7lQcR zO(#9b145K8A7FBsnjNS|ZvVIM>2C{4EXY;|Awb3y*!atV+qE*z)q>LmoZIzpH^(_m z)tJEl*7#4D&gB1KBjGcON~`#LVEij)Un4O8&D;JnKNl3mlsc**(Z(I*k)L5xaJ|!f z>CdkQB$xf_y4Ys$*|Ts4Jz2A7-7>cTf&gM9mOLtWW^UL))*KK8e+iEI1tipYd;xAP z*oQ!1bV7KawIE|@=v=&<*x8Pp(3oudTK}Sh@R0xh-uqkbw^U{DTsFr)SlUsOc0{Q6 z)=d+Vk12z(_3wI?=z%ovDnC9fTmnYPaej z0+DNoy^n|g9-;fA=zl*?M2OqW{fCkMX^;O^{{4jYFG2FZUH_L8=>OX1e`Dw0iW2`n zTw;fg_i`Zox}+D>SP`3E}u6Mp{li2q+oZQ?a66tfpZ zD3Vt|@U!d22J3q1m8mj43kY|FEN9&id+IpzpkdBp+CMhQ|9jl4SUKrt)8lN;sRkLc z!X{%uASU4=>LQZK^c+2O(OXMmq(wNamu8R`y4ur^KT#?$vo4|zGfFF=4z_O4gFq+$ z_k{XCY9_6uu-tLAm$hZ=0$#<7--<`b`>{biKtSJhr$gIEZLh{aR=_oq^aelo%f(li z2-9B(Zj)_NXkld`bkE;hbB3V`YXGS-rvS<8Ki4TShZ#7Vwz?a*FZ3U znpWC-M7@Fy5~gXvwWZtXdf%<9qEYIL0|{R+UpCiv5e~;KAAG>Tfzo(+kgV<+jI7$K z6+kFGhuDFN(9SCD$3lg>h`M_>gqM)3UBQ3%SD^ zPZ&}DRC)7mI&-^*=m~Vb{8hvwvpC6G+2l@SbSH)O`Ky{@1u`;^`82<)KicRge->Ef zTLCxX90%=`AQs(XQDf=B{lGf!)5n!QT_jRw+kJr6cnVhXt_ZtrB1iVjH_M}+ybK8x zBF{xo-q3DTvWjwh8^8KSZk=k=J`YU&?b*4T`#Xx2bZ@wyoeSI1nievpqflD#c?HyP zVX>Y&E;)^p+V?Dlnywj3_5R~@0269^|NIlLVeOW&0Yl(uex>k|Gx|%da+j9SURz#| z(Dv~B9ix5CX8JDJ=)@&X2t0r`^ywvij(0k&V{8%zT`eL_V-`1@zW=an&a=u1STDb$ zgv>$-9eTG}2BCSgwy68kqkIETmQ=jxJm75)-J*;3(jOo z@~Naku)7yoO1wVLP-wauDUDa351 zQ&!8z)}5uJwd#jHs9LTj%;HJ(x$3Tx9hcRfRFO3Y!L54p8u2z`%d3_cqsxiIWjK`` zX{R093xPQ8S&Pxp#QtjQI734+K{Mh?o%L0T%S%Fcz3 z%IF{=%e!gTSk+g;&-gkpcucp}w3=nN1o2M{6f>%+DjDpk+EN;K^H(7Jq#v1dL({Go zHO@kZfZ+Ek1mKvBT8+(USFN&n#P0(bp9yttM3hgJ6JFrD8S6Ri!O)lj6RA+2&0$+-jJyIcNj4EX{MTS2#`;fbb!Y_(mCcS%g*jU+aNP6heW z9+Jt2L}1U7m{PV;$W6i zkK26A3+D%u(o@)eoo*GKmLIxD#KWBc%EUa(J4n3~H`fc+Ozye+1y}*nNqKcSIN|EH z?@VXfE0THh(*3x%)#tR=c8N~Jzp2-ycQAW$p#6FZhyvfzCGa7S?bO=b@Lp5Ll^{nu z9B&v+K;T?SOaGkA$KcB$(iT54Y~{b3q?MQ6GXX`4?B$Y-oJ<1{_5OHFM45nhG$&gI^X?cA=LBk z^!udph{*(r6O6s}USr!#U5G8KQ+*Y``=(yOP;_^_L=nfoLK$wnC6Z+Wt76KAD%1&k zSSrdB#I+Mmse(vyli}p^m3F9MdWLDgC;3P`di1a%5{sVXr!Ov_+k;v*1Sq4VPn=HF zFy5$*iCC2N(6m>~jkm55KM)Y`@bpqG@$otF_Br+lesW~pK!17buXv)oTbe!Gt z737eM^vh5)p%_)SUkNMHse!0Q&7%VkYgd5}dT~vhbu1_;ug5KMT^;!wnW8TsD8OTO zHEA+BEi8R^w}k^@^a<~+Fm}16n#Wam3+iXm`!nr2AE78CwlU*MyZ!gbbr$9_r8Ch+ zuJhs&bEa)SH_}qen9DQ0D#he*BUxlsl0)9}`0I`cl!eHvvcn=Et|rKS4}y zeYJm|5RZ$`Dm9J0W$So;`V6NVf995 zH|83aBQ&*?w*-yAE`E}qB`8}wNs%r}D1Np+z>^(TVTaQUOFE~yBNjr^wDv%x(%%w3 z`Z2#s$*`!6*{LIzG#WILMD&FB;`5SYIxRp_o3v2D`&YB*g$=k5N9Qs@kswt@G6a~e>e zfmPP_+pWO7dw9jzV;~@+MTd!hlf04%IT}STlA~=X7q{B+@}x#LovZw90Kxe-qq|;O z>&SvO)b~2hvw^`dZ#7o~ra5L+wZ=T&p?Y$3+LeNx6*lSG8RNO^4g}AwW9NrpY~sCP zOXzA12@;r8&}5=mKl{WOdPU%Bqcuv7j^E$ZJQZ>m_>#T3@!Lzc8@a!+b?9j>-n8Dn zrzdVnl9-p*kxja2AbmvLO|#jlI5)Im%YQoBn~@d?OEcBGlifa>wccoDQ%z!7&KQi@ zr_e7C_F1s>V$*GLmDeZ+_bbv`t!?&Y%DM*?$59%xZLKRCL@wV;>i7lurQj108q|9+ zg*)t+bnS6+95P0UZy?PA=*?YJ%31?wl+fhxI>q7@6dyihRgx#g0TyG%n7tfBYb+D( zC;fON3m7G?9lqv?jAt}4{iL3aW+FwBY=$)GA<2um{-8*mU=xxRVQroMEZKZqA;k8C z^nw26I508B8o&J-q%)}j;ZzP2tYnEnJ_T9FlZ8U-2iM&&P+5@CQdc0Q1`<+;&lI7Qy*au2O*iG8&M?IHMJ1K#(~vP;oHNUy+?0|8H8_F2hP(5cUO zz23aW;BMsoI85)F0&bxOJYF0f&IaudI2IJL;xw@s2|p3T=nxg6M;Ryzo;C~+m$|ZO zTSWEDK3vQlWC;K%;u2jNC?G5jL#y)Y_pf%aq&6CJj#lez&IJ%+h36%*b>l6qz&Ct~ zb;#bR0QPz$Q_NyAAEnmPFCRE>3iux48uJ%4-@5GG>mwx}A{dPHv_89{4M^iT1w4H`OtV z&O^+(e|Nw@!*N}?Jw6CM`eI= zk&|DZMD#{k7V;L25;j@nOINwJ6;z2Fn!$e6glRqZ06s02dk7wDvZ&<|1Vkk`wEreM z1gh~ZO$!lqzXT(7yBibqzU>6VbJIXaTd@i^<$`Y&+`3&U{r=O7NYhEA z8aa*mL(`_kf+dLIaUh0CU|9>2lb|34x;9uXi6{$reTP8)Ks67FLVuRtU(=6_j|yvj z!tnF5CPUg;n$tHcFvptR&h?(BdU?VVoj^t!`c=J3;(NzW2>&RKQmA9{h6g><#|Ae@ z+;09cBIb;Oq#LR3QtEmSd_ah?i$S7?B2$|E#;A|IIRYT#S23P4F>X0JN zo{p}8C;7k~&azu6X&=_qjhm1y;8arkXUnW}9fqXEd}#%11OqkjZPNGYytJJ<(>8@v z^8TJnprYlPcUE*0IooW$E1wDXlSvl0Ibi@Ay*=b!Qkg-@+L0VowMJc!(B|~*68pFm zyftRbiT8F`gjf5PNAW5r37yIclql+p^Gdlq1TzYH{cojnBa^pxv&Qh(JNw-Nqcww~c7^(*4&ebC;n|=oZ-`rcTHiLqL}ddI zi=sr+e0n}*TmkVgjg^j&90%GNtF?FWt6Ap-%;K-u(E0QZ{yQ3K-XWmy74;NJVLZAC z!!pII`IUN8>m7Ul(99GjI%tilWJw8Gh<56=j5&eW;$%2PZ$y2mAifq-iu8acvQi)* zNO@z~s^Sm*+~ir=ow1CDjC<$$g^aui^&tF60RFrVwJ8#U{})c26F{NWyY}LY6!vx( zn}P6rYx~a@96KQ>4tzOD*ROyppx@wz`DtJ9j50>LkAcE?e>};Rqc1V(jjQS6jUx7? z%D%6RV}7h$SJCqvoGip3nFIa(BHxKxQFvVl*$x`o-ZLOa8bkLBUcX|ekd+@%Op@qX zKz{45^^P-v9 zom2mGNfFNS5_*?TtLv^s?L$yUjP~s&wmi+z9)|)05#!jvB?4b?{aWWhO2YfJd0V~~ zIolF;&O(S#8DB{ikzJL=WIj^03?I;ME@>PR%u5jTVqln6Twr7iK5`_&x5B-&`N7Is zIAS#Z*pA||E0QoO!`@?MXlqHI9nxF2?ENm1Z9@{(Dt6dh-)hB{U^PZyfS*qevkjx_ z%%FPZtCi~RO}O7yt>gP0Z=54GQvXt!W&`rO*g71^0jv!v#yW_uN^@e7_NjshQ(L22 zA7U+%nyK3|)3}$f72hmplW5KlzH2I&Th^^cYA8{DGE z)wDt=Pfa8c^whfkL|J~UMa~EU^^=|XinS}RHR6H{Z>W9IZN91IO_rBkFN@nm)SWt= z>DtG}c1BhR0Y3QIdFxTEnJvS_Y(~%V+3;qRBEPCsDTHIr6aTogd~e5)KP`uK&xnc^ z?vQ->>(4i`o$#@KHZf;FdPH|Px|BKRS`tPJdsIEob+gk473H0(wLU>|~ zxfy^GT0nI48NU-~?PEUIkvvIq0E3Fb?boCVfmo;5u%^Y(v0_ikPrsXDK>-cQA`8I1 zia~XOux*Gooq>ixj3}IX%v3XujF`9r!YYVdfHJzzM$utpc~IZPrYHHAwEuOxVGJ{s zO$-Mi2G1u1@*FwRq`~ER7;la0&WQVP+==%Wj`HTvL6s0*^}R~fPfrIvZmwsfUJlBM z57R@ay5{SYN9r{+*x*Zvw2}k^*!M+2AO8bInhzKJJWX%cy^zin4$`$3cNzv);}*i` zE4og%-cN}5VbU1O$`@=3Sjh90RfZYEM60F!bApXj@_WM9#>r0Oqd*g z2MsvT8XQYcHi!QX`_PRB5Av@$H>&h1Vy;eGW{?`CV%rmn#asF!U@<9a_@?4?C($goT{S3K1(_ zAR;V~yR;q=QLs_rxBP>)?j_I2pr*iQ2+ZVwclL;P7bN&k$;5Q;D7oHR)nG){RR#vl zZW}8NkTvnQG!z(tvW|k4p$Il{6OG;N_xwS(EAgDOA^ViK5-a|Vxr}^x<*eAVz~Gs8 z+`-$m{)g16*MBAs@&$6XcXA+X*vqo2k)=$foku} zrxHz9{1An@MJ9xbOq;%d^uoXpFG^iRACU|~N_z_k6^N~2JSYnk5puh_m!O1X82YR& zXg;@Zq3EmI?g+{-LawHG!R_O#y5zDKUnIJd_5-=AamBiZMdL~cc)jyqEmstVZb>mb z6T0DcH@^9oTt6&2;JX~W5E~2R2-r|7U6iLZ%4Wkz@81JJ1~2h$2#Ybe;@$s@K`Oh3 z0S)+(Z zS?0DO6UG6F^rfGzhkumA-C(iqY}ELe4)(QXpM{ka2}q(J2m`9L zq0K(3K=p)xcN6ajXRQL8p?Mj#5pGy=WG&3f*b599$CxYnvgmH)$z|aEV~$o`<1Bn` zd~TvB2W(x6k`o}A?SVMAp;5T|$r!P)&B9L%joAO7l~yd22N#p(FtbE&fpqYaTm$s0 z1qfkEw=+x5*y+VQi45~Or>!!65dt4*#Tw%@@Ughy1@ux~2Mv~A1zw!*JYMu0D$Cof zZkCK?_edw9`p8D(@GRbRl%2k2$7~Wg2>dd*7o^7$2lGl;hZ-d1klFN!TJ8Kp`x=#g z^zs!A&gkbgSx@nZ7&`YXrsu(H1+GzGl7P{ab|O6P6_WdDo7;iCpe=SMfS5h-?#Bc# z$(HEHei4iojqrc=ro&d<5C9pUwGQPVMJhJ5an)>z+cklk(XBnZaL&T;Dmd-XPQaildHG^+kz15 z!-rx{qWW!5N2ycw-8A8S8&>VN39f|Gn2BU;4isle=MVCo4x%CNJPfbi5CH#+pGWI? zc+~*v-keRvcY}}3H&iR3kEg{SGmg=pAR*j{scCBvGVTaZ<*zoKQonRwexYexr&cpU zDT@k#$kI+FgFXDpjSx`liE*Zs_lkZQx;Ofyv95;UK`ddCnc&QS6BU|)`f}o(zkijB z#Ct%^yk16LQzV{_@r;A)#d{3gub0&I`*d?{Ls)!Ivr0Vzg4rq*Quj~Aw?|q1&@B{j-rJ@HLd|t0P9O0TwxHGci$<^(&ykr+weXF6)Jh+(-IVmp?1LboqH;Z8j2?8E zDz4vliqQ!ExkR$IR0b(7x1Skj8G{jb%tPiwsoC4Jk(rCU>K30}>yz6`XkBf|oBs?u z2~>R2&D)#+C-YsN@gB#K2wb_glCmp+Si}TOlM0_96kGlwa`KG%XNn+6*b=vlqeZLj zOJ*1%gTn|eF)0&zXf3B@=`iZyn6JYT1#oycE36p2FaR}9WSo8Hy?I>*LR5nm&Vu(T zW-DS5p^lzaTQQ?_7U@JX5%Y9OXq>PWDog|Il6djZy?u`?^e5_t$y-Misb~}RUKdjI z?#9Ynf*b_Pd2zYjus5E7U)>c8{Hb(`H4iWK4sMRZ3m5v0Z%mQ|q-KJ(LI>Ggq>`E@ zX`5vg{Woh$ilkJdp!>_AH|C8B2Gba0ZDnt<+6KODq8VOlF00v*hN0Pf9)&9=Bu^P1 zqK9~p>7Ht`B$L&%%AdD{T`pQf*Zp1D!8J_AsSUcLuFqi-D7iWt^nE+I0Pit(^)?LZ#veJ6ez1YHq-9cqtOTLP%5@i^s+I@V*u1->-)V5$mB%0?L7%%D; z59h~4dKk5N<96p?B}f4mkZ||~WWphR78Pn*&ptzKI$55jSWy&`UVpvvunBK~b1`fw ztdy5`x@0-VbuVXG==&6EL-T?yIM|2JnWL{v+!NJaj~3$3NsdP8D|UJU452hxfc2dM zqN`qbnDK&D`tmIBHeOF6lzC)J(n>24dZG2Y`j;#9`33{mL*eT>Nwq<2CR8$;C3r)2 zp_0=H6&#e_?7*FsVmDFJyj!b5dQwfJwn7oCR+Ayh$s_}mFU%c&M^-&I(}=iXwKNhe z1UU4N_k^e$F{(<&h{D#%I`rGGG?`5I|5Rv?{TlSSQ{2v12|Q{IO2d&OA~$YhiWRWnQ; zsQl)^HhZzI-E_6J)~KAyIADL1ZRtBIv%_NgHwyND97vwXf$n(9Z*p=-)Tx4fak<=Z&i3-%;apCM11HyCp}5DN<@ zB4&JiB-u4|Q4%>+DRT0}gOv>}1X6vWcW8CtY#cyO=eW{>HlYC-VVm!Wi`oUOZLU-O z0}qxPLteucPFoX%*h`NX$EC5}R=Ua&t*#qL%xz_6Jre4?*JJ}zk=4IG^;D$6fh@H! zdzsf;c6wMj6-+S368p)1|LG~0t-B-0?H4Xa9MYd>Y@(-t01RA0fM3(EMdx=K_8ezs zv+b8veghSJU$h^}+%|mKntyOhJBb>tPx#j}h-@h8hCpfsmbG(QYctRgCMCH<q}9KX^s?}5r1`^1R?H*p zdnnP)x(Ttn3Ga>}Hv}NL-&%^pD%EB|EJrFx2!)k-Ved<_>8toE!D=Kp^V# z-F}FiE`Np-UqFEL?vgPZm_4`19n{Cmm|FxhCi&dH9!CZ|ajlsJO~)z>nF)|%e!WOD zK~+OHpACyPvPJm%2X7waitXgK3AxUib%XV+kh99Z&F%QEW!@&AiHQ7iX}BvaE(kdT z?60Vt1;h#)SDDqEIDMmJB;Wg61lo%WjV7L07FOt}lzMkN>%gy2slW%kGR z3FbP^P4h@({{{->pUkAe#Ms62yHfUH+Zhj-)MeBeXS&uhF%|LpLtV#V#5fc>GH7R(6#=R+GCJF zRtGfYfM?-><~~FWBIDizd5e^3;RAUn<3xgAUtT=w-Wx)~l^34uUSy*yCJZNJZ z3t(8hH!AF)=7$)XWs+OQ__c|*^-*dG#zIN(%k5W9pH_CSw0P z4ljWZF>YX2OnE_IcIQL;3t!7Rw#S8H?+-sL0@BZ!tPcyGf3MECgNwbHr6bN<*P}>C zh`gD)UXFN|vtAU6r>O38Lio$qGv;1~eaarDcPalN_M}_REyxoyA_o-S*EBW7?r9v$ z4COtLWi#5_F7`MX_ZIB;;i+`XNIh26&1Aj!*8dhsYrfwhy#rr8ccwkSvq@_X@QT(D z64STirOQl7<$M;|Hf!hwmjivafayC($k!@YwWzzCs>ByrZen_Y5Hx@MRk;ckXJg|5 z1%hEAw)l~KrtAP?5MjaF)K*cCZ}dx4q?DZKTq<@amU;gOL=O_*eQ!)Wa z|M6DCa0D(S(@gD?cKPHO(LI$men-qU=7Wr(fCzORrIHTx=eUqV~hx4X+aNEjnk4XD1%UEkz5rOfC@lQ#m zr!FPSUQ^+LNg7(g6dzJ9d%R{%sR%U_qZR{!fL*gf@US%I#2`#lhYcRHp(j(G`T6!; z;aFZf$GG*49{I;iT`_kEB5E(yCy-KkXnnt8CT5-+Uit!jq#T%tJuvyb#I~R%D3q?Y zk)!(JF^@2JcJ9cT_BMa1{AlW{EI;#&))oE?7rwa`+R+qlIav;fkROIvmy#<6OHCM< zJ6g~m)`k%Lt4iZ|bUAouh>c1$OA6+(MsC+W?LQ+Ut=p*6SXvIASZlGZ;L%=*zXL*# zDZW+m&#Y|wCn*pZaSqwLHOeT`@-hCpZjSZrGA8%liy-mkA+OkcI{j;rQV zfE*+p>+w7Na(dE1jSUz~nQK$$tEs7R6zzqg%3JhGyp$|MlqNGj8oAr9%Fzh5iC%+E zb#B6Jg{%qEgk_<1-LsOq_=HiPy>PK5e&BK*OGUIaFPpYCyxSKoyWb-Xs zHdL@h^5J`f+KxD?o(#efXBUky>ChIOe?0L3(_QDl|8-`{u+q4{&WFwXA?D|+)=s{` zruShaj6Psp?NITIk5N$OHe;a=7sD{O0T;`W!{41u`f(s;fSH-Q3YndPkPzVVUfjl% z*JmW9BJ#_yP`@U3d+B*^c+Q##SDN&=sGyf>BQvsLv-}`b^8z0jT3#+he&7m4s0N}o zSYi`(Z6(qK={2PZ$zys`suT|X)U#QAV^QFA;a9siSG<*F7t5O63a$|V4|X~J4$l>q zf33J&B(k6QQ^4w~8i#rivh(ZdSH({;&p7I}k7txw?w>pBjlnD|V{m-?M~N7No|S9A zL`2C6isW5T4B%(Ze;*f2`NWtv%6xl<&q)??9AF!~Anh%BJcDV#@g<|D2W*+ZXCx^s zUoQHqp$Zau=)>X@ea*T8i|B$b7++g@rZG@UiOcCh{~-YqY7!ZZCzi!mq8t}M!U&6t)a zK0A7NdfQjbRPi;66pnCe>62>ExqygJJv`&FicA;Li%cDfp4Gdg4O?lkTWmprZjE~v zQmYUH3=%Lmf@*cS>BP4hjjCPw$T=<@dL z%l_KB^APC`S1O{pNxMb}D9O3bCPObb%=iCz9ba~yE6t)L`|L79?_gQq2J?WlV{CZM z+ukSZNdK)oZ$%3|5+zE((GIpVl0R0;(t_69K`|v*-36^@3Az6A6Lu9iO9nCS!cZ=# zkE!)@mpUHLlu;7V1*2qKU&j^&<>X*5{IkWg0!kAia~g^f8vTcIf3o!krH+9<*nBj> zkL7zAs1M2@=uEwpvB=ZI?Ua`0h*}#uaFTEyqgo)6WOq5e>;Z*f(j&s!Y%c?j;x-`{ zO@vJvomO$d{o7s9!+Dm4xWJS_(w1i%c7p-rH8X)xcV-7AO6!DcN`~7q!fx^ix7H(XgYz-iF6FM$ zfa3v5jUu8Hmvn|8Dwz>It-GGfECjg&rtO);HApc_i+xoyaZZ#aA{KpZg!!1q!MnwQ zw*>cD{TJXj7K?lfBAj1_9T~%&Of9Lh;+1IaLW*2HcI(z`ZrB+%36)|Tg{41fHZZ!{ zR4Vri+u2DUYB&RfTWJR+g3UOBwPC|2EbWdqb*4GIF+xc>UP5k!zCM~ze#9BB?}wDH>*1~<^MI0v z_-g@FZb)(gi@ox@i*izHKe*D3$Z1lv~b)0D>(CnZp;!+w5HtW zPw(?3*@Ap@LDtXqBoqW~W=qyV*8Wg_^c(yI+%frA=u1oTwcj}k^>U;Mx1^fCO#$W8 z!;-xQt}zKVn`T32_n*qNA!=yC0%BSa_re$&mkt|+OZ}@ICPtvzc@*)t*k=3C!~w*Y zd)yzei-jgvAt%g|0dC%vxjdu4zo|(s6VRrNQjzB;2*-sz4ig$;?j+XZ4y5Ru%0EuLUWa|B5-qn`7-ehs+=~&-a)5g|HV_0F@*IcIQ1A5R7>hU^!`ijSU69f7xw&_023?{#Y?fee{9!m8gxCRL=vlfg)^BpO%)-~Ne1=eq300B&qpjQIT@ ziX>T;TbX~B;t>W~9kb}4yKu*ov8Z?*99>?#0v@5?_rhQka*Mvfb$3XTFZJ4$r#&ay zZ|ew`{4nnO6Dsw~=EE0&1-noHzE|^X$9}iwxm#|Jq|a1%T_+R*2DFayD5ISa2?@Q> z@1*2_Ef@7HZm9?4HZL3OAZK=NokFAoN;33x%)SMnV&4$w;xfCTbnPC#s}+06yirH6IswB#%wqZU8KF$sJzN5!+AMAd+< zI<1#tCem^~&;n=6hPodo1Uhvg?&@!q1-`7o((^XQ9C-W9DYKgAutoj~Q~ih}fOur? z#7sxi{!X6IpNU>C_uax zI)6{R(eRu1U-y-!f{`yKNM4&+sleGd4f(;D$*i@t_oviY*+VaDQ+IDVm-*|+5I?(H zkky5PCg2f{Yt(f9$`Wj62wsf`ThO1R$Y(UJu67?KxWr9!VweM>yH5YD;Y++F@DaAD zy46%^G{s)h@Z6~bV$ZqpJEr3L&vtsmcfU~C=dHGX=ZrQH-Ozw z1#^*GHzSJ4{}*0H6z}Fi2^M{`*~afHjT{4%s5I}o6DGtx=)EmqBn4A>$e=~Wze_7Z z?B{r#W+Vx`2^`k556HD+n9s)5Td8Tr7?Mu1T8|C5`;%h8O|zwpCXvlT7z$q56M3P< zB^b?yKIJtOaoGD0PZp4wgh-8;?~AWfe%$I)V@bJX3$?yScE+)yEhf|cuVR4_1Z&Tl z7jCT<^b^RMKOD$H+M3YiBw{G<;o0Y!IGFdEcZ9!4+gqCCYI2dzGwV^Ke}Sy=>7l>e zmEtiQ6n!l6x%&MQ95d;W*bLT|jj>IVK3*lOZa#GNjqgr!(|k&YO~wr6VvQUC!M!=s z<2A5>2!o*z7`RYy%s=Vbbv5KQ6rZS*05c-_$7KVHAep$B)fZea3lA@v0fvsFx1FGO&1n;6!}xM0sDN0J#D zTnU7LoF#ByWtO2BhH`(DetUKg<7)~n`A5ExQqZNd9E$Ri;GRqhRV-L0EWR11VAY_;%fe6+u6F{}RNjFQVp zjqax~LL4tTq_Nv7)s@q_10iLOBuOPyIoG6hbg$;1+hC+!m$ot(eug(V^VMODE^t+b)@(w5gHhjhquds!Ud9b( z???Ta+hQWDt3MOOORW*QKgl7n>IeGy%We0S_*m?EoEAN14e$tNV~rtU6{K$nP`Ae{ z)3pl^Ten;8_KEhFb8F^TGmqUXYiy zTnGYhB0VIvgyymzLg6Ktb|XG%P-VFJO< z%!cDoulZ0lK{WHG?<^Qp>n3c1_+k$a~1aa{|ZZ z@TF!MYiq(b>%as&TdzSf(((flVB-HSi`>e1Fj<|Sjnf_W5O}boB~eg<@IV$)yitPI zUfxp+^gY&dyYXj-M0i^2m}vUZfyN2MFW5w($rueUNMstUAfsQV6a0sFTjfJm*{G28 zK3tbaTn?EW>|{+PjKxltB7eO&EZ8W;NR=^ z_mf#p?ys6vedehkQp5#t_qX2dryzoJ7ES=61w`Z@Nc|qm7_-*zK^KD}OV#0~lsD