From d56559456a721ed5021d568104ac9ea32ecd3a06 Mon Sep 17 00:00:00 2001 From: dbyrdaquent Date: Fri, 12 Jun 2020 16:21:50 -0600 Subject: [PATCH 01/10] Update mac-support-install.md Light copy edit --- .../microsoft-defender-atp/mac-support-install.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-support-install.md b/windows/security/threat-protection/microsoft-defender-atp/mac-support-install.md index 564bfecdbd..115ca811c0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-support-install.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-support-install.md @@ -25,9 +25,9 @@ ms.topic: conceptual ## Installation failed -For manual installation, it is Summary page of the installation wizard that says "An error occurred during installation. The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance". For MDM deployments it would be exposed as a generic installation failure as well. +For manual installation, the Summary page of the installation wizard says, "An error occurred during installation. The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance." For MDM deployments, it displays as a generic installation failure as well. -While we do not expose exact error to the end user, we keep a log file with installation progress in `/Library/Logs/Microsoft/mdatp/install.log`. Each installation session appends to this log file, you can use `sed` to output the last installation session only: +While we do not display an exact error to the end user, we keep a log file with installation progress in `/Library/Logs/Microsoft/mdatp/install.log`. Each installation session appends to this log file. You can use `sed` to output the last installation session only: ```bash $ sed -n 'H; /^preinstall com.microsoft.wdav begin/h; ${g;p;}' /Library/Logs/Microsoft/mdatp/install.log @@ -39,13 +39,13 @@ correlation id=CB509765-70FC-4679-866D-8A14AD3F13CC preinstall com.microsoft.wdav end [2020-03-11 13:08:49 -0700] 804 => 1 ``` -In the example above the actual reason is prefixed with `[ERROR]`. +In the this example, the actual reason is prefixed with `[ERROR]`. The installation failed because a downgrade between these versions is not supported. -## No MDATP's install log +## MDATP install log fails to record installation -In rare cases installation leaves no trace in MDATP's /Library/Logs/Microsoft/mdatp/install.log file. -You can verify that installation happened and analyze possible errors by querying macOS logs (this can be helpful in case of MDM deployment, when there is no client UI). It is recommended to have a narrow time window to query and filter by the logging process name, as there will be huge amount of information; +In rare cases, installation leaves no trace in MDATP's /Library/Logs/Microsoft/mdatp/install.log file. +You can verify that an installation happened and analyze possible errors by querying macOS logs (this is helpful in case of MDM deployment, when there is no client UI). We recommend that you use a narrow time window to run a query, and that you filter by the logging process name, as there will be a huge amount of information. ```bash grep '^2020-03-11 13:08' /var/log/install.log From 6b1b552219097ddfd8597bba867902b7f5e4d680 Mon Sep 17 00:00:00 2001 From: dbyrdaquent Date: Mon, 15 Jun 2020 13:23:02 -0600 Subject: [PATCH 02/10] Update configure-extension-file-exclusions-microsoft-defender-antivirus.md Added system environmental variables table. --- ...exclusions-microsoft-defender-antivirus.md | 273 ++++++++++++++++++ 1 file changed, 273 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md index 213731cfa6..3dcee41875 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md @@ -199,6 +199,279 @@ The following table describes how the wildcards can be used and provides some ex +### System environmental variables + +The following table lists and describes the system account environmental variables. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
System environment variablesWill redirect to:
%APPDATA%C:\Users\UserName.DomainName\AppData\Roaming
%APPDATA%\Microsoft\Internet Explorer\Quick LaunchC:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
%APPDATA%\Microsoft\Windows\Start MenuC:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu
%APPDATA%\Microsoft\Windows\Start Menu\ProgramsC:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
%LOCALAPPDATA% C:\Windows\System32\config\systemprofile\AppData\Local
%ProgramData%C:\ProgramData
%ProgramFiles%C:\Program Files
%ProgramFiles%\Common Files C:\Program Files\Common Files
%ProgramFiles%\Windows Sidebar\Gadgets C:\Program Files\Windows Sidebar\Gadgets
%ProgramFiles%\Common FilesC:\Program Files\Common Files
%ProgramFiles(x86)% C:\Program Files (x86)
%ProgramFiles(x86)%\Common Files C:\Program Files (x86)\Common Files
%SystemDrive%C:
%SystemDrive%\Program FilesC:\Program Files
%SystemDrive%\Program Files (x86) C:\Program Files (x86)
%SystemDrive%\Users C:\Users
%SystemDrive%\Users\PublicC:\Users\Public
%SystemRoot% C:\Windows
%windir%C:\Windows
%windir%\FontsC:\Windows\Fonts
%windir%\Resources C:\Windows\Resources
%windir%\resources\0409C:\Windows\resources\0409
%windir%\system32C:\Windows\System32
%ALLUSERSPROFILE%C:\ProgramData
%ALLUSERSPROFILE%\Application DataC:\ProgramData\Application Data
%ALLUSERSPROFILE%\DocumentsC:\ProgramData\Documents
%ALLUSERSPROFILE%\Documents\My Music\Sample Music +

C:\ProgramData\Documents\My Music\Sample Music

+

.

+
%ALLUSERSPROFILE%\Documents\My Music C:\ProgramData\Documents\My Music
%ALLUSERSPROFILE%\Documents\My Pictures +

C:\ProgramData\Documents\My Pictures +

+
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures C:\ProgramData\Documents\My Pictures\Sample Pictures
%ALLUSERSPROFILE%\Documents\My Videos C:\ProgramData\Documents\My Videos
%ALLUSERSPROFILE%\Microsoft\Windows\DeviceMetadataStore C:\ProgramData\Microsoft\Windows\DeviceMetadataStore
%ALLUSERSPROFILE%\Microsoft\Windows\GameExplorer C:\ProgramData\Microsoft\Windows\GameExplorer
%ALLUSERSPROFILE%\Microsoft\Windows\Ringtones C:\ProgramData\Microsoft\Windows\Ringtones
%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu C:\ProgramData\Microsoft\Windows\Start Menu
%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs C:\ProgramData\Microsoft\Windows\Start Menu\Programs
%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Administrative ToolsC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\StartUp C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
%ALLUSERSPROFILE%\Microsoft\Windows\Templates C:\ProgramData\Microsoft\Windows\Templates
%ALLUSERSPROFILE%\Start Menu C:\ProgramData\Start Menu
%ALLUSERSPROFILE%\Start Menu\Programs C:\ProgramData\Start Menu\Programs
%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools C:\ProgramData\Start Menu\Programs\Administrative Tools
%ALLUSERSPROFILE%\Templates C:\ProgramData\Templates
%LOCALAPPDATA%\Microsoft\Windows\ConnectedSearch\Templates C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\ConnectedSearch\Templates
%LOCALAPPDATA%\Microsoft\Windows\History C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History
+

+%PUBLIC%

+		C:\Users\Public
%PUBLIC%\AccountPictures C:\Users\Public\AccountPictures
%PUBLIC%\Desktop C:\Users\Public\Desktop
%PUBLIC%\Documents C:\Users\Public\Documents
%PUBLIC%\Downloads C:\Users\Public\Downloads
%PUBLIC%\Music\Sample Music +

C:\Users\Public\Music\Sample Music

+

.

+
%PUBLIC%\Music\Sample Playlists +

C:\Users\Public\Music\Sample Playlists

+

.

+
%PUBLIC%\Pictures\Sample Pictures C:\Users\Public\Pictures\Sample Pictures
%PUBLIC%\RecordedTV.library-msC:\Users\Public\RecordedTV.library-ms
%PUBLIC%\VideosC:\Users\Public\Videos
%PUBLIC%\Videos\Sample Videos +

C:\Users\Public\Videos\Sample Videos

+

.

+
%USERPROFILE% C:\Windows\System32\config\systemprofile
%USERPROFILE%\AppData\Local C:\Windows\System32\config\systemprofile\AppData\Local
%USERPROFILE%\AppData\LocalLow C:\Windows\System32\config\systemprofile\AppData\LocalLow
%USERPROFILE%\AppData\Roaming C:\Windows\System32\config\systemprofile\AppData\Roaming
+ + ## Review the list of exclusions You can retrieve the items in the exclusion list using one of the following methods: From 6b66720ba7af22549278dbc7ef43930b64cf56fd Mon Sep 17 00:00:00 2001 From: dbyrdaquent Date: Mon, 15 Jun 2020 14:07:10 -0600 Subject: [PATCH 03/10] Update configure-extension-file-exclusions-microsoft-defender-antivirus.md Updated MpCmdRun coding. --- ...e-extension-file-exclusions-microsoft-defender-antivirus.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md index 3dcee41875..17b4284fa0 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus.md @@ -496,6 +496,9 @@ If you use PowerShell, you can retrieve the list in two ways: To check exclusions with the dedicated [command-line tool mpcmdrun.exe](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus?branch=v-anbic-wdav-new-mpcmdrun-options), use the following command: ```DOS +Start, CMD (Run as admin) +cd "%programdata%\microsoft\windows defender\platform" +cd 4.18.1812.3 (Where 4.18.1812.3 is this month's MDAV "Platform Update".) MpCmdRun.exe -CheckExclusion -path ``` From f19964ece2ad72272360d093aa0fe3388bbb4341 Mon Sep 17 00:00:00 2001 From: dbyrdaquent Date: Tue, 16 Jun 2020 15:39:40 -0600 Subject: [PATCH 04/10] Update manage-protection-updates-microsoft-defender-antivirus.md Add UNC file share section at end of doc. --- ...on-updates-microsoft-defender-antivirus.md | 109 +++++++++++++++++- 1 file changed, 106 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md index fb6976a1fa..f110270402 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md @@ -52,7 +52,7 @@ There are five locations where you can specify where an endpoint should obtain u - [Microsoft Update](https://support.microsoft.com/help/12373/windows-update-faq) - [Windows Server Update Service](https://docs.microsoft.com/windows-server/administration/windows-server-update-services/get-started/windows-server-update-services-wsus) - [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/configmgr/core/servers/manage/updates) -- [Network file share](https://docs.microsoft.com/windows-server/storage/nfs/nfs-overview) +- [Network file share](#unc-share) - [Security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware](https://www.microsoft.com/en-us/wdsi/defenderupdates) (Your policy and registry might have this listed as Microsoft Malware Protection Center (MMPC) security intelligence, its former name.) To ensure the best level of protection, Microsoft Update allows for rapid releases, which means smaller downloads on a frequent basis. The Windows Server Update Service, Microsoft Endpoint Configuration Manager, and Microsoft security intelligence updates sources deliver less frequent updates. Thus, the delta can be larger, resulting in larger downloads. @@ -144,13 +144,116 @@ See [Policy CSP - Defender/SignatureUpdateFallbackOrder](https://docs.microsoft. ## What if we're using a third-party vendor? -This article describes how to configure and manage updates for Microsoft Defender Antivirus. However, third-party vendors can be used to perform these tasks. +This article describes how to configure and manage updates for Microsoft Defender Antivirus. However, third-party vendors can be used to perform these tasks. -For example, suppose that Contoso has hired Fabrikam to manage their security solution, which includes Microsoft Defender Antivirus. Fabrikam typically uses [Windows Management Instrumentation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus), [PowerShell cmdlets](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus), or [Windows command-line](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus) to deploy patches and updates. +For example, suppose that Contoso has hired Fabrikam to manage their security solution, which includes Microsoft Defender Antivirus. Fabrikam typically uses [Windows Management Instrumentation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus), [PowerShell cmdlets](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus), or [Windows command-line](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus) to deploy patches and updates. > [!NOTE] > Microsoft does not test third-party solutions for managing Microsoft Defender Antivirus. + +## Create a UNC share for security intelligence updates + +Set up a network file share (UNC/mapped drive) to download security intelligence updates from the MMPC site by using a scheduled task. + +1. On the system on which you want to provision the share and download the updates, create a folder to which you will save the script. + ```DOS + Start, CMD (Run as admin) + MD C:\Tool\PS-Scripts\ + ``` + +2. Create the folder to which you will save the signature updates. + ```DOS + MD C:\Temp\TempSigs\x64 + MD C:\Temp\TempSigs\x86 + ``` + +3. Download the Powershell script from [www.powershellgallery.com/packages/SignatureDownloadCustomTask/1.4](https://www.powershellgallery.com/packages/SignatureDownloadCustomTask/1.4). + +4. Click **Manual Download**. + +5. Click **Download the raw nupkg file**. + +6. Extract the file. + +7. Copy the file SignatureDownloadCustomTask.ps1 to the folder you previously created, C:\Tool\PS-Scripts\ . + +8. Use the command line to set up the scheduled task. + > [!NOTE] + > There are two types of updates: full and delta. + + - For x64 delta: + + ```DOS + Powershell (Run as admin) + + C:\Tool\PS-Scripts\ + + “.\SignatureDownloadCustomTask.ps1 -action create -arch x64 -isDelta $true -destDir C:\Temp\TempSigs\x64 -scriptPath C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1 -daysInterval 1” + ``` + + - For x64 full: + + ```DOS + Powershell (Run as admin) + + C:\Tool\PS-Scripts\ + + “.\SignatureDownloadCustomTask.ps1 -action create -arch x64 -isDelta $false -destDir C:\Temp\TempSigs\x64 -scriptPath C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1 -daysInterval 1” + ``` + + - For x86 delta: + + ```DOS + Powershell (Run as admin) + + C:\Tool\PS-Scripts\ + + “.\SignatureDownloadCustomTask.ps1 -action create -arch x86 -isDelta $true -destDir C:\Temp\TempSigs\x86 -scriptPath C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1 -daysInterval 1” + ``` + + - For x86 full: + + ```DOS + Powershell (Run as admin) + + C:\Tool\PS-Scripts\ + + “.\SignatureDownloadCustomTask.ps1 -action create -arch x86 -isDelta $false -destDir C:\Temp\TempSigs\x86 -scriptPath C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1 -daysInterval 1” + ``` + + > [!NOTE] + > When the scheduled tasks are created, you can find these in the Task Scheduler under Microsoft\Windows\Windows Defender + +9. Run each task manually and verify that you have data (mpam-d.exe, mpam-fe.exe, and nis_full.exe) in the following folders (you might have chosen different locations): + + - C:\Temp\TempSigs\x86 + - C:\Temp\TempSigs\x64 + + If the scheduled task fails, run the following commands: + + ```DOS + C:\windows\system32\windowspowershell\v1.0\powershell.exe -NoProfile -executionpolicy allsigned -command “&\”C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1\” -action run -arch x64 -isDelta $False -destDir C:\Temp\TempSigs\x64″ + + C:\windows\system32\windowspowershell\v1.0\powershell.exe -NoProfile -executionpolicy allsigned -command “&\”C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1\” -action run -arch x64 -isDelta $True -destDir C:\Temp\TempSigs\x64″ + + C:\windows\system32\windowspowershell\v1.0\powershell.exe -NoProfile -executionpolicy allsigned -command “&\”C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1\” -action run -arch x86 -isDelta $False -destDir C:\Temp\TempSigs\x86″ + + C:\windows\system32\windowspowershell\v1.0\powershell.exe -NoProfile -executionpolicy allsigned -command “&\”C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1\” -action run -arch x86 -isDelta $True -destDir C:\Temp\TempSigs\x86″ + ``` + > [!NOTE] + > Issues could also be due to execution policy. + +10. Create a share pointing to C:\Temp\TempSigs (e.g. \\server\updates). + + > [!NOTE] + > At a minimum, authenticated users must have “Read” access. + +11. Set the share location in the policy to the share. + + > [!NOTE] + > Do not add the x64 (or x86) folder in the path. The mpcmdrun.exe process adds it automatically. + ## Related articles - [Deploy Microsoft Defender Antivirus](deploy-manage-report-microsoft-defender-antivirus.md) From 76de07102f9e2ebf8d9a976c967e3368c43d2113 Mon Sep 17 00:00:00 2001 From: dbyrdaquent Date: Wed, 17 Jun 2020 11:09:09 -0600 Subject: [PATCH 05/10] Updated per user story 4214879 --- ...on-updates-microsoft-defender-antivirus.md | 101 +++++++++++++++++- 1 file changed, 100 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md index fb6976a1fa..b71b5b24ba 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md @@ -52,7 +52,7 @@ There are five locations where you can specify where an endpoint should obtain u - [Microsoft Update](https://support.microsoft.com/help/12373/windows-update-faq) - [Windows Server Update Service](https://docs.microsoft.com/windows-server/administration/windows-server-update-services/get-started/windows-server-update-services-wsus) - [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/configmgr/core/servers/manage/updates) -- [Network file share](https://docs.microsoft.com/windows-server/storage/nfs/nfs-overview) +- [Network file share](#unc-share) - [Security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware](https://www.microsoft.com/en-us/wdsi/defenderupdates) (Your policy and registry might have this listed as Microsoft Malware Protection Center (MMPC) security intelligence, its former name.) To ensure the best level of protection, Microsoft Update allows for rapid releases, which means smaller downloads on a frequent basis. The Windows Server Update Service, Microsoft Endpoint Configuration Manager, and Microsoft security intelligence updates sources deliver less frequent updates. Thus, the delta can be larger, resulting in larger downloads. @@ -151,6 +151,105 @@ For example, suppose that Contoso has hired Fabrikam to manage their security so > [!NOTE] > Microsoft does not test third-party solutions for managing Microsoft Defender Antivirus. + +## Create a UNC share for security intelligence updates + +Set up a network file share (UNC/mapped drive) to download security intelligence updates from the MMPC site by using a scheduled task. + +1. On the system on which you want to provision the share and download the updates, create a folder to which you will save the script. + ```DOS + Start, CMD (Run as admin) + MD C:\Tool\PS-Scripts\ + ``` + +2. Create the folder to which you will save the signature updates. + ```DOS + MD C:\Temp\TempSigs\x64 + MD C:\Temp\TempSigs\x86 + ``` + +3. Download the Powershell script from [www.powershellgallery.com/packages/SignatureDownloadCustomTask/1.4](https://www.powershellgallery.com/packages/SignatureDownloadCustomTask/1.4). + +4. Click **Manual Download**. + +5. Click **Download the raw nupkg file**. + +6. Extract the file. + +7. Copy the file SignatureDownloadCustomTask.ps1 to the folder you previously created, C:\Tool\PS-Scripts\ . + +8. Use the command line to set up the scheduled task. + > [!NOTE] + > There are two types of updates: full and delta. + - For x64 delta: + + ```DOS + Powershell (Run as admin) + + C:\Tool\PS-Scripts\ + + “.\SignatureDownloadCustomTask.ps1 -action create -arch x64 -isDelta $true -destDir C:\Temp\TempSigs\x64 -scriptPath C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1 -daysInterval 1” + ``` + + - For x64 full: + + ```DOS + Powershell (Run as admin) + + C:\Tool\PS-Scripts\ + + “.\SignatureDownloadCustomTask.ps1 -action create -arch x64 -isDelta $false -destDir C:\Temp\TempSigs\x64 -scriptPath C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1 -daysInterval 1” + ``` + + - For x86 delta: + + ```DOS + Powershell (Run as admin) + + C:\Tool\PS-Scripts\ + + “.\SignatureDownloadCustomTask.ps1 -action create -arch x86 -isDelta $true -destDir C:\Temp\TempSigs\x86 -scriptPath C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1 -daysInterval 1” + ``` + + - For x86 full: + + ```DOS + Powershell (Run as admin) + + C:\Tool\PS-Scripts\ + + “.\SignatureDownloadCustomTask.ps1 -action create -arch x86 -isDelta $false -destDir C:\Temp\TempSigs\x86 -scriptPath C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1 -daysInterval 1” + ``` + + > [!NOTE] + > When the scheduled tasks are created, you can find these in the Task Scheduler under Microsoft\Windows\Windows Defender +9. Run each task manually and verify that you have data (mpam-d.exe, mpam-fe.exe, and nis_full.exe) in the following folders (you might have chosen different locations): + + - C:\Temp\TempSigs\x86 + - C:\Temp\TempSigs\x64 + + If the scheduled task fails, run the following commands: + + ```DOS + C:\windows\system32\windowspowershell\v1.0\powershell.exe -NoProfile -executionpolicy allsigned -command “&\”C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1\” -action run -arch x64 -isDelta $False -destDir C:\Temp\TempSigs\x64″ + + C:\windows\system32\windowspowershell\v1.0\powershell.exe -NoProfile -executionpolicy allsigned -command “&\”C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1\” -action run -arch x64 -isDelta $True -destDir C:\Temp\TempSigs\x64″ + + C:\windows\system32\windowspowershell\v1.0\powershell.exe -NoProfile -executionpolicy allsigned -command “&\”C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1\” -action run -arch x86 -isDelta $False -destDir C:\Temp\TempSigs\x86″ + + C:\windows\system32\windowspowershell\v1.0\powershell.exe -NoProfile -executionpolicy allsigned -command “&\”C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1\” -action run -arch x86 -isDelta $True -destDir C:\Temp\TempSigs\x86″ + ``` + > [!NOTE] + > Issues could also be due to execution policy. + +10. Create a share pointing to C:\Temp\TempSigs (e.g. \\server\updates). + > [!NOTE] + > At a minimum, authenticated users must have “Read” access. +11. Set the share location in the policy to the share. + + > [!NOTE] + > Do not add the x64 (or x86) folder in the path. The mpcmdrun.exe process adds it automatically. + ## Related articles - [Deploy Microsoft Defender Antivirus](deploy-manage-report-microsoft-defender-antivirus.md) From ad7e9da73e7c1cd9f9411ea0c77deb8c230be5f9 Mon Sep 17 00:00:00 2001 From: dbyrdaquent Date: Wed, 17 Jun 2020 11:58:37 -0600 Subject: [PATCH 06/10] Revert "Update manage-protection-updates-microsoft-defender-antivirus.md" This reverts commit f19964ece2ad72272360d093aa0fe3388bbb4341. --- ...on-updates-microsoft-defender-antivirus.md | 109 +----------------- 1 file changed, 3 insertions(+), 106 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md index f110270402..fb6976a1fa 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md @@ -52,7 +52,7 @@ There are five locations where you can specify where an endpoint should obtain u - [Microsoft Update](https://support.microsoft.com/help/12373/windows-update-faq) - [Windows Server Update Service](https://docs.microsoft.com/windows-server/administration/windows-server-update-services/get-started/windows-server-update-services-wsus) - [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/configmgr/core/servers/manage/updates) -- [Network file share](#unc-share) +- [Network file share](https://docs.microsoft.com/windows-server/storage/nfs/nfs-overview) - [Security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware](https://www.microsoft.com/en-us/wdsi/defenderupdates) (Your policy and registry might have this listed as Microsoft Malware Protection Center (MMPC) security intelligence, its former name.) To ensure the best level of protection, Microsoft Update allows for rapid releases, which means smaller downloads on a frequent basis. The Windows Server Update Service, Microsoft Endpoint Configuration Manager, and Microsoft security intelligence updates sources deliver less frequent updates. Thus, the delta can be larger, resulting in larger downloads. @@ -144,116 +144,13 @@ See [Policy CSP - Defender/SignatureUpdateFallbackOrder](https://docs.microsoft. ## What if we're using a third-party vendor? -This article describes how to configure and manage updates for Microsoft Defender Antivirus. However, third-party vendors can be used to perform these tasks. +This article describes how to configure and manage updates for Microsoft Defender Antivirus. However, third-party vendors can be used to perform these tasks. -For example, suppose that Contoso has hired Fabrikam to manage their security solution, which includes Microsoft Defender Antivirus. Fabrikam typically uses [Windows Management Instrumentation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus), [PowerShell cmdlets](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus), or [Windows command-line](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus) to deploy patches and updates. +For example, suppose that Contoso has hired Fabrikam to manage their security solution, which includes Microsoft Defender Antivirus. Fabrikam typically uses [Windows Management Instrumentation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus), [PowerShell cmdlets](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus), or [Windows command-line](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus) to deploy patches and updates. > [!NOTE] > Microsoft does not test third-party solutions for managing Microsoft Defender Antivirus. - -## Create a UNC share for security intelligence updates - -Set up a network file share (UNC/mapped drive) to download security intelligence updates from the MMPC site by using a scheduled task. - -1. On the system on which you want to provision the share and download the updates, create a folder to which you will save the script. - ```DOS - Start, CMD (Run as admin) - MD C:\Tool\PS-Scripts\ - ``` - -2. Create the folder to which you will save the signature updates. - ```DOS - MD C:\Temp\TempSigs\x64 - MD C:\Temp\TempSigs\x86 - ``` - -3. Download the Powershell script from [www.powershellgallery.com/packages/SignatureDownloadCustomTask/1.4](https://www.powershellgallery.com/packages/SignatureDownloadCustomTask/1.4). - -4. Click **Manual Download**. - -5. Click **Download the raw nupkg file**. - -6. Extract the file. - -7. Copy the file SignatureDownloadCustomTask.ps1 to the folder you previously created, C:\Tool\PS-Scripts\ . - -8. Use the command line to set up the scheduled task. - > [!NOTE] - > There are two types of updates: full and delta. - - - For x64 delta: - - ```DOS - Powershell (Run as admin) - - C:\Tool\PS-Scripts\ - - “.\SignatureDownloadCustomTask.ps1 -action create -arch x64 -isDelta $true -destDir C:\Temp\TempSigs\x64 -scriptPath C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1 -daysInterval 1” - ``` - - - For x64 full: - - ```DOS - Powershell (Run as admin) - - C:\Tool\PS-Scripts\ - - “.\SignatureDownloadCustomTask.ps1 -action create -arch x64 -isDelta $false -destDir C:\Temp\TempSigs\x64 -scriptPath C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1 -daysInterval 1” - ``` - - - For x86 delta: - - ```DOS - Powershell (Run as admin) - - C:\Tool\PS-Scripts\ - - “.\SignatureDownloadCustomTask.ps1 -action create -arch x86 -isDelta $true -destDir C:\Temp\TempSigs\x86 -scriptPath C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1 -daysInterval 1” - ``` - - - For x86 full: - - ```DOS - Powershell (Run as admin) - - C:\Tool\PS-Scripts\ - - “.\SignatureDownloadCustomTask.ps1 -action create -arch x86 -isDelta $false -destDir C:\Temp\TempSigs\x86 -scriptPath C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1 -daysInterval 1” - ``` - - > [!NOTE] - > When the scheduled tasks are created, you can find these in the Task Scheduler under Microsoft\Windows\Windows Defender - -9. Run each task manually and verify that you have data (mpam-d.exe, mpam-fe.exe, and nis_full.exe) in the following folders (you might have chosen different locations): - - - C:\Temp\TempSigs\x86 - - C:\Temp\TempSigs\x64 - - If the scheduled task fails, run the following commands: - - ```DOS - C:\windows\system32\windowspowershell\v1.0\powershell.exe -NoProfile -executionpolicy allsigned -command “&\”C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1\” -action run -arch x64 -isDelta $False -destDir C:\Temp\TempSigs\x64″ - - C:\windows\system32\windowspowershell\v1.0\powershell.exe -NoProfile -executionpolicy allsigned -command “&\”C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1\” -action run -arch x64 -isDelta $True -destDir C:\Temp\TempSigs\x64″ - - C:\windows\system32\windowspowershell\v1.0\powershell.exe -NoProfile -executionpolicy allsigned -command “&\”C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1\” -action run -arch x86 -isDelta $False -destDir C:\Temp\TempSigs\x86″ - - C:\windows\system32\windowspowershell\v1.0\powershell.exe -NoProfile -executionpolicy allsigned -command “&\”C:\Tool\PS-Scripts\SignatureDownloadCustomTask.ps1\” -action run -arch x86 -isDelta $True -destDir C:\Temp\TempSigs\x86″ - ``` - > [!NOTE] - > Issues could also be due to execution policy. - -10. Create a share pointing to C:\Temp\TempSigs (e.g. \\server\updates). - - > [!NOTE] - > At a minimum, authenticated users must have “Read” access. - -11. Set the share location in the policy to the share. - - > [!NOTE] - > Do not add the x64 (or x86) folder in the path. The mpcmdrun.exe process adds it automatically. - ## Related articles - [Deploy Microsoft Defender Antivirus](deploy-manage-report-microsoft-defender-antivirus.md) From f1a0a708e9990e76b7455ce6962f57aee1d45bf9 Mon Sep 17 00:00:00 2001 From: dbyrdaquent Date: Thu, 25 Jun 2020 20:47:41 -0600 Subject: [PATCH 07/10] Update mac-support-install.md --- .../microsoft-defender-atp/mac-support-install.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-support-install.md b/windows/security/threat-protection/microsoft-defender-atp/mac-support-install.md index 115ca811c0..d6656e4eac 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-support-install.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-support-install.md @@ -39,7 +39,7 @@ correlation id=CB509765-70FC-4679-866D-8A14AD3F13CC preinstall com.microsoft.wdav end [2020-03-11 13:08:49 -0700] 804 => 1 ``` -In the this example, the actual reason is prefixed with `[ERROR]`. +In this example, the actual reason is prefixed with `[ERROR]`. The installation failed because a downgrade between these versions is not supported. ## MDATP install log fails to record installation From 4fec3e7192f552b718cb535e40d5702f0bc7235e Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 26 Jun 2020 11:02:18 -0700 Subject: [PATCH 08/10] add error message --- .../images/live-response-error.png | Bin 0 -> 36398 bytes .../microsoft-defender-atp/live-response.md | 4 ++++ 2 files changed, 4 insertions(+) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/live-response-error.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/live-response-error.png b/windows/security/threat-protection/microsoft-defender-atp/images/live-response-error.png new file mode 100644 index 0000000000000000000000000000000000000000..a0bb10aff3c56d5ce3d115075ceb7c9771d15bea GIT binary patch literal 36398 zcmX7vV^}2Y--b8ab`v(&X4huBttQ)?YO1Za&9<#go6XI(t<7$;>p#!?ei(k3IgT4Y zUFQ|9sw{(sOpN^L(7;lA4 zEK-Yp+7_u6Pe>!PDB>!zuu#zPt~wx{S!_u|4yt-{9nfT0*4zOX|C7h1M@j2A zbG<#WrIcTe$A<6o?eSd6)RW_uNn`s_FAAH`!@BE~t;_w2Rj%tKKXFOU_miE0$SJ;E z)CAOX%*or2jNEfa#b!oE#vjaIMOBW>@AZGvJa7a-?~gpfqAbr)YPtad#+rexlI`R;Ubm!_mfn02ft)Q5=K+U3MBx( z$6q4G2>yLEQ{j70!)fY@&y9$PpukYh!YMu8OH=_P^=U_@uo`@SId2xdotE&}a9`f^Y9JP2*a}^> z<+Af7ZXpmuq~$1t#L;sJA4HeaXwZZ1@WPwS$O1~X^{(N_e)J$Tx zM+&UGfjmr$L+%SMTvZu1r($X|2^ZnMN2&O8})5>Nlal>EK z)YN8XW)mCsbWjX2D#~>&8=}R$f?PiPK$osreByyh>zbG4esWkilH$Y56)3xA;x$UfO z%tx*GGJJT{fO#YPlO=fc|5gb8(W=~9uHx$Evz1^W{ycrB7v8$>5uhhE9|7m!3Xs4PgbM(o z(;7h09aF4pnc%x+UrI+kuq5i}s*8P?lepd`5qtt6>lxQ(qchbq-&oS+UQACfPsOrwy>=mLt6P7x~KQvQ206I=e6Tm$g24)%d^y6eeO40 zH~-*?OkO>DaRb>UYqd<0`Q_YNSn9sMKCJtFytUAv+AP^{FM8_hf)s{&_6KW<`DJ^K z8sAu3514b+l#6E;s-$T2jk%=DR@DLJ{*Ltl^VR;n$D`%#?(RV}5(FLxa&poPLJ4z+ z@7&@1V)-ximG6Gf(dGrR0#95Cip1G(S_xbk@nC~;2i{Y~Lt&)`Jd0kXOddS-n>cB!zPf`pMQ zr(tmKvjpBvh{2?(eVao*3o{Q7hXBXfhctH$pN-%LWK6aE*rz*-H!c6gHp{Lr2v zHwcp`*v;yvbL92PBWvUE*a@+eMj`Wtj5N~$RC~_AAf0|s2oDA&gSq5R4)=w(i?ye@ zwWq!3uU2rh%F(k;n7vPdS|WC3M{6;+A}@n)NJ!}TDaic!J(%N~UAEUR!EMZN*g~kW zLkdc+XzjDPgb%KeUinsAu@nb_qScUob1NDN&(R>$l%kVC>GF@Td}Hy+s>CMH28SkY z6QOG_%cxZ$AyNYnTv1mrl8ir+Qi`|l_|7$VM~l}^-2NVkO+8YR5?-t;PwYWPLP$zP zD5;QGI^jY>L_|hGoI^-Nn?G0DS~nx<&__Mde{}(!te7C(0`IYRNr>z!M~Rw%fwo~z zX!6^ak$oj~$p{PufG!+kY_K3aHAxr&^rG zw;5}Cp|lCJcW)i7d!xiiai-?Bggb6q8h+!qz%Iq2`R(`9E5KS1HL4Bb3kyl8O9r4t|YQ-)i zd?Fv*G3dkFL=iO?N07i6+}pJ_4l~{vXpsi zqK73_>?TZpp{lu#=3yb(Kb%1B8sxyzTkW>pWiD1ec%_Xk?LF=dZ%;27`8=H{u!&xG z2l5*E^%*&~J%!6qc)#syi+a9fFBthoU$2&FlCavbn$p|*)R{=6wj2v;TZ=0nRxjND zmtdBR{LTZ}8KhV;a%!#Qv9l+&jePgpXXAPwA9rK7d~POGMBkEnteZ5N1FZ3D?njxb z5sQiEii|5)Z1L7$L%&^2ZkxZ@@3-2_eLf^Ngh778+4|hydHhy&>s%-IWduH92xNiu zd_}hr@ifG0S$mLbiqj|2XU&va@z=ixW7F$0fB(S<)Dt{J{$o$<<@_Ub>(aGb5x7{!p9rvqt$lLW(BHl;&q01%? z#>SKy*vNKxNse7urA*29?=P2IZgWci<#z%jpLo2L&cR@H) z!f)fQDx$l$I4UAfX}ijT@BJu~0*5Jf)!zFnhX_j!)(2^V93dESd68*Tvy1A9CTt!5 zdc6*_J*LGF$UL|GUz+(K)rm!B*8A(tRG(xX)JVNOva9g*F!hq5cjaNK(GLawt<`W}dgo-)bSVlw7=)l{$_wZ5FYZZ-dirfuDo5nxT*y6~mR|+=VmK=LFh9&XNva zF=ixq42w(Rfwg%gfl>$ss^j0qji6-db=20vDPzj3+T=a?Rk^sc3Q4~NS#(4on(-+7 z1SeVj6t6#NC3DBk~tLiTw`qmIn`tky8)VarbxnmfLjj=E!FhK7jC z)LD8@t`tx1c7itc*QFj!9vS}|DqIm6Sz(-GI^L1Ga$7OVs#a{gkWy>_yr{p>sOo1{ zdgsO`L6%ML%Rje~Lo44_1tWa0m6a-u8lT?@M)q(e%X#oRmtS z^P8{KSwPNgY(KPbsojnf z9$+xr@yw2(5prSQk~EZoZEj_+Jo3FsGY$Mv8|1#XYP=$}L!sbV-gK;eH*V&5AF9yd z3Eg^2v@Pb!zX~PUtF?NTE(|yTh0|3_liZ&mp5B%!I&MpV8gz7>*z4UH<*^PN&^bF`k!xKE207lq2*&nY$Nn+e=VT9nnw`wjh{*o)atF=IqV> zJ`jPoPF=fY+Jo)8rMotvYAiLq9o48fU!)?_cYDM)w;LmPF)e}d=X#XMsp}2ACQ~Lu z?zP80MC!Wb`*0N+gPESAlwM_!VmU;lW}RX$w#A&&e4&Vp4p)|(7!d%x3Wb*AdXcC! ztp}EWGI5)opqJ$TGAe-rR1-wz7qhjDPqhA*0-X;SE@qwxvx02oKc9G}5qtc(pLJ_w z&?Jc(r&^WYZ#VZNVxsu005~nP;Sve7!qKpLmD|(x||3 zlSir=yRzzXWqsKx;Rk)(K4|U|h5AgMXhm3?X4?ful!-8m1o7b6x7}D#o(+16J-cfd zzO%rGNx{qcI2D>j#zJ460e#~k4PMYWq!n=KW?r%Uz6ZyJ#%>tWk}q8N3q~-2%RYT& zrCqt7%l>3h&*|+Z_k($rNIvfwPsex|6n%&96Q*5%PC#fIQCu_-#5yWFS3qFs2|(Wm zAO)UT85Q)fI|T>T!bT|nHOgQ=Vzv}C9@f8N?>CNu(b#rq_PpAOWb5Qx>4mx+9%JkB zx%~5RKZu;K7ZzN{6JPfSIWoU|mqMLNzia6xaku=c0SKiDgP#Lu=@mT-&2^Lr2MNT9vXYxH4`5omTt z^t|z*PJvbLX~ZfqP-*ych|H4T`+kOs=vIg2#&U>~28_hSgq_=K<)M+#<(|g-?TfEt z=j&*+kq~7KM$L)frD<&VvH%dDH@?pf9_H;gR8x@`I(7C3ys^Pm1$aw9OflQv&<&| z*8sfW!Wnit{$lh6uL>gftA=T&>Wvs;G+Gm z5QcWm^WhcrkrLA}k>@lUPVB_ek3&M>>ObM9_Lq)7&h@8m2U?JJ1Qo|$ZpmI++RU_1#a_Rka{_zMsaCT_wVG zdRZEX-yi=Baopodm$&C9<*s$_JhSo$htY|7UC=ga^k_9PC`2k&Q`;f$7YSEWxj(1( zH&ET?IW!sT+L&@F{!^HiwORvO_`|#P{n|t(%j3F?P4vzFX6+fDnuOQyaW!*F=<#2< zipZaXU6qoMwuim#)w|d&@2<$T6}qh39kW=BO5I)8*@4QZEp26qA03bev?LpxVVA@; zAz4E!kw;GM_v*6Z_x^PFGTMILwDv1rBZ}D8^+w%Wk>P!ewSByN;Xxc(&vMx5S0HWA z(e?fqS*54^(Eiwy-T>hLaXzdZWXt5FE!2i;!vIqZNttH-RhIKMzp5PiQeE)b? z?H3&hN4KW=<4hmYxBrIB705i+0ZpU_{Lb8ZpGLcd=euhm)s2R|)Rd)KGBOvV)&ZmU z`PqC7>|Q}6EB4oGM9vJ28lXiu8aE`)VxdYos;LN!Ugn3A*Tqk>+9?xZMH1%G{rXye zRS^yLudmOV(y@}yT{|D0$o%?8A5y?{!suh*2>1ZpI(=dVPU!uyF=JM+#-L?$&03Zl zCsUpztizP}k2jEZ7|u+ov@cr^$y+B}$7q8wbGrph3&sD!`fg$qBTMak2GXE|=?p3h zSoxfmf)~q#uljKU7#7G_1Eoh8mVpAufrFNQ}$SD4o^DvF*4RGVoax zT)z<4IiPLOqOh6o)UAon-Pagx%BomKtEqtmue=B90X?@yoQu{?4N-}3D z;bWmbFfw4nC2(y~J@o!ARP^<)cGvTQ$jh0;1)2%VIIH!wVUnicRApFx|H`I=kW^a9 zH+z4E{9SUD$4l$4ueB;}+j`Nzrl|eXac2NK5l*wJwr7 z+yz>VC|&Z=W!iN?Is>aMd>Yb6#83!dZFGni1bV>x2dOR|n_eXotK7Tzy>PwOc$P$| zoa=F-U`dKGh5DM z7IjimR)h*W4gGIe%KmjX$(B5mVIDB|Zij`FQ-Z1S?gQU9kjv#AKAM3|T0wa;b{=`Y4_x{*T`;S&dip<1`4{LqUkjfAvK(B1Wa<{WP6$8Y3U!x~3qbwTW<;r^c&VW+cCQ-06WwpmYou*f zYLx79kK!WQAkqQJYrT8VE?}yK#`~So$2ZU+%jlFk-uS3Z{ayjrw?V_qS2wJG>fCDb zzyTQ?4S4}tF{2C~Zzq7iIX0E?;@ajWJJysE`;zjvU?*53T6NMTNCH!{y`L9Oq;h(4=g_i_|uqIxsLwKgTW?WQDASE|g-)Y5) z6K>El!LTTt1QAZ9h0*#biYx=zJf5&*#{{aF(V4zwG>$oSnT_mdIJSaUGOE`^hiXjb ze#H)jkMy8r8hSkwF@uj=6-2yCo;KF|{|#?vG@4~16c6eTiTt_Ea#azzF6GVj>sjk~ zDuoPzNZt;*E(Fv1&;`$OKb~^QlG_I4FK!B|qrM3ae+o)45*W5jFM&>O19(xYC1H{s z?kyg0)1ojaKrz3R7qy!>tV`3p)YXI53! zj4^Ty=P^_j$5zPJ5uebDVc=HDbuxUZLpY>bycQ3sNo%B`sB@0}xAX0Xk2P5Et?M!| zxMi?XRh*ibX9H+2n##;yX{W)nb7x1eJPOa>SEov2+FP(`4_XiJjA=#JXt-{Np%X-!K|1x>98E*v9M7IJG^I2__${Kpi+g- z5e50Xky^xjOA@!Gfga0Kl?5aL_}2U6sjAOs9d?z86mR>1e$R8c9Z#hGeq z?(OI32?NxtMmWk0x1wM(!R?C0t+15?12bn6;?yOEFo7iu{Wey79OkV8+p%rq7)->*0`EKZ-0OI6q{ zj{NEdRm%X6#V&e2Mz5lYr34stLCI)`5yyfJD(`j{My_cnZS%}1P{2U|prCk#dM9$0 znr`48)f`9n1|a8;Frm3jUNHZP)c98>o1s7?*fLZ4Vc%2VKk=ZeGk#oZGN+If6wK+x zo>o3a%f>^Sea^?%UT@JrtC!V6(x7H#>pmTajX>_1$8s}TEXjNt5KIbu|5|X{P3(Qq zN++FYi5`}rv~r0hLkd8wa;KtfdX?Yj{4bh8m(Qum*B`>=Hb{Zd)U)zDX+H?DLP?;`17cO zVJg@%6N?=2+G8m!i94SDH0#-1vv=P;xVuYe2^dQ0@vH&)aRH;0XJ)ucD7f;yY+wh1 zd#Rp9T#{VZHStdSQFjR{X|&7sLq;AvreF7yG2;6jMXdn&O{#*?u*!6%OE~!%_1)wJ zjq_C>&PeWo1Nb0JmY^7^OsAtyaw}$uUUMHN{ceXvIW{|pbDXPZUTvyCXK)tXRm4sd z>uQ|`8`9r_nep#MSI7vhrBp_#b&}l%o2SXt=9V1`8r>3_KTsv8-KAbF1z&rM7dw7Ya#u z(Hxc^2T|BIJqMEgfM7CwlC=ge&o}t96uYJAwmXka&$;8F+<)EY9u*UnC2tf#1Vb$> z{2fPo5oVEV$|yKq6au1F+d&;pcumxrZ8V*N^oLVu^t#E^p}*PzM4tg2iyhwCRN>|c zR@V$&TzB_8*jh@ALpKMd0k-FlRrLe+v7Fs&F2iwg-0dV9P9HmpMyuhtQuN zXnzUjMua*0>u{66wDmne@zwRXV2*DYgJ_v`7m)E(^gxh;?ivcV+}fCazj;R!D$m}z zLnhV19XW+&%fxT`2XxZ@&wl-?1&1h1SG8o0)L872O!v#*=jqo1>SRoiRpRHSoH9I_ zhG_!WC>eU|fZe9Wdxki=%wJ;&Bc^!9(8IGMy5{0PDgT8GJGf5HP2J}lj4)w`BJNGQ z^!Gb(u$%=otPY$kS zd@!Ryg@MG(G{e0XraI#%;=g)`q;+np?tW436SC8A@LSjRx)ggi?xp5z&KV|p>6x>! zYRRrM91@^xzhr;Nu8(9yO4p{*zuh-?-BJB*a>c@F?a?D*?U)pXcMVH1rv60dEucV+7Ouj@%WZr;Z9kv5Te6po2g#a0^R-F+ zw;W=Taw(x|lxer`HHM$b*Gu+l54kwr9GbY)po39zxu5Tfni!pSUxy27Jg-dgm|*Hk zVesW;$S;`Sm=n1`udC|72wB`D6HW46YOe#S2pRctrJk`@m%rEVu{GVy%+wYR`b2KC z0wvfOJ69i&azL3QM;$%3Wfvp*0kO4xM|+a$WUZE2_##-(Bf{p!74GVY8U8k zpY-!C=!l!BIT4TQe2p)6z-ls*VAT+hmSJ|V3(6sd7u%LQ5jxx-@#;3!iN)${wBzA* z>}huSMjh|$g1*5N(E}@1(ZcdO7@VGf=a$uZmhdAh6&`!!R`rW{AoI3XCP*hiDY(Eg zoFMz>lrqj`DfE+5iQ!XvYE@zpW5&jzRM*sHoV70c0=b=GltjJ)=k=1$i_~+FRxu-{+2cwJZ z6x0;O>xG_Wxs?FYga^lAo$*s*((uz}y+8@~tN5>B-3$k;2XM4znibl)Hz~#T@>m9N zBXzP2{A`Li46@Kg)@{F%%4`jvM{TN&D3~43EL{R~%ObEO+IK^5n4I^vABHfVu88>c@C7*JPb z-lQ=|R$6$~>2izI&c}y-*c$^7K_tD zP|zZ?LN|*06b@7ACF^#LUC&38d5wH0u0qM1&gw+{t~XyM5DIy>p3xFv0?kNxh3}>z zQ+l7VrQ9DpEhf98Qz8^3q#&=i+jEbU9N!oQk1f#Y^MVoxQu)Q8qa9Wg;s90Smivhm zVrU8)yZN6^T>eR41*did#YJ|#-&JQfm=#vwF3{N~(jSeugv^sRsSO+iGpy|;K4d=9 z+elxxgGq}#n z`&^&r4KI)cx+O^#ON@>WBH?wF7Xef1f#~hBqvC5OLB6>Pp!mA*b=fz1dx`siFeLyM zsm5Ma)pn4ILpo>D!>S#dioq#pA&!;IUtP_fBiKQ$-lLtjYZa4-n?bds(QUR&Dd+%Z zy3Na^r9)?ib^5CF<>Cc0KM*UOG2#klMeCLiILHnf_9<;cLdF^$&c>n*PbO7eo@u6v z`RBXWQVp4h6_w|VI3zYdy}I35!m_MlWp3*64D0;`wcIMKp%|KOGrUA=pP6yVT)rfI z_{4oe9I(o8Z>$W6=k6aW@S;PCOmbax1k561f&dB<=%N6GSK3tGTd6Fp&{e zJjbj;X%peZxa`;K{a8_uBQ>FsFTbAy&h_zOE`#wNHvD=`LUVogW@0zJx2B)bGbkkebaK#XT-DzD_th2V_DaC$n_?X@k1%OLp9+%r>qmiPT=#v=im7Otcf|jc}{+&N_ zr`MW=NnN5C_50zjn}nk@>JFR-DV7;BZ<(~7^Cb=~v;A(T+q(6c=DEuzbIKK8s%8>0 zs#iLk!+1tDqlO}`B08rjlACKrWV7LU>obk+Ky~SlW7T__E|2NucDzb&`db;m{~4uKG=c8X zjq)$_s~rm)l7ddgnt0IXoet_gi&tD74Gx8s_7I(caOb{R)WM8G7g{Wz^2k5}jN-!2 zIrG=QEK?@FkFu}Do2`cheUw;=G5T@Q>JGsdzHG3Yr_0~@N_k#+9iG2bcL|^Ugt_e4Pf0fN`Af6^ z-u-+>vQ+(YaQV~W@4pT}wuOsc3z;Fw`30L=+49<%7Nh>M(3{t!}e#gi_N7v${W@9=wF z^)n;%ROJ7&d{u$97J!}_3|vGcQ&=ve+ePY>t^o2f1vt{6NBW-XLZfVFk2l60^Y1W^ zBEDJc&bwXL!Ab1c+pPUED>#-etL?5W^_m?|6w!!>Q97rWSdXEJ1fllR;O_vaeVX8G z*=Z9Ds~o>s(^ive==>WGuNfC7F198~h%ild#~~UdD`&vJV@}7i~__+ zq2IcvH^TZBj?b#dmZ^nVu0oPBCMT6jXll+%CjA+1EZyK>C;~#-;`=LPZ(JWlAYwO$ zkn@$xkU{5dfnHVD#irmz%VCV5qi)k#!p)TE)3OgK3B)jWua3MJ9c#f&(@o(n%wOXjN#~e!C|NQ=)hC-yovUj+zYF zQ;8^<`!FE%?JCx9)$fBET>!C>%x^D#tg7RBfxyVEJuY)ol3J(xVc7cS@`{If@m&rj z=Bnm0$I%B|8mvUx1y1O$m$e4ZS!OGpC55L$v!B{<^)>+EaVpbNbw=R5b|)BOBZDkQ z_|J7xCfw*{O0J6GlzKZN)}-2^xRS!JXuwCF#L)_sMbhk9Hhp3zN6CRpubZwpsvBdy zAyHJ-#@QdFj+pNUFAZqr^b+mTyACld5(8dCA(TR6;TZ|z z)`#5mqsO+>;oP86t;s8r0Ife_s|g%7x*>|=pjE}-mk5{XJY&=A&l&Mn!xe}qI%y6i zKgEedj{5b&vK416RzMxmWY}od?wQ~aMVo<*N?1kn`hF$7S(%=GL~eV8(SGKkP|GKL zH|#jrXb!=z6Qv9Xwi>6W^@)IbH>5_5sq}Ag3?UKaZrDL-j4AoqS4u~9$Y03E;(`(9 zitI~;Mywieh&1SB)I;jp!2XCG5cuLhb@RM=E5~S-(?WpS<`8DCpJ?&<3oao?uw-9S zo&I`Z9M5j=MY`J5510lNQ(z&99oAoQiJLBXwl0Etm8ml*s&%ob*k}xUTahCK9(z@j z35t5-Ra)@*>VlEa)d&JbCxjTPh9F2o5Mk{5{wP#6H?Y&BZ;;y#eyLhUye|{sm&1+r z1qKFx>7@0g65M1(t`Gn3ELyT_`e{YOgD-A3^F^x4vYF`A2gNiI77|YzurIe0MR{!z z&}m0#q=4XnckH&SE>ZR{&MQulBlSSVSO$=Q8cc%Xlzv978U7opjpPwgIJ}?<4!WHc zJ;(x||0PGwIL;Rh9APmWQ`f*c1^3%&8WW%qGy`i;9@o!{mY@jm2XAfRTGiqM`orkt zEY$)FzL?3oDT-kV&C~b(#9)V81yAU$pTm-e0bmu_g0jsC@dKW^X>jnXlGTpNo}2*+H_u=^de)PF@20wIvGEmMPt2uF-&+PAI$vEU(3fNE2ipoiSl7F z_V}#Q1&P6msF4E*2FNRvl62>$Kxz=$=z*<_V{-B1_k98jP#Bg$VcRNAZK8DXPwC<$ zHH{s^&(bUsMJNMF@M$}w{<-YrUS~4UtL%m}U!%z&MJ93lbT|f393~RaakNzWIAhY) zK&{uphJ@o!cL7aa{#bFi5@yK*2^kK+<>&>eEr>k_%x__Ev7h=~F}?=>#e!f)5k~Qf z2KZCQZIq$pQRMP_<=lF3RaaomX}DbIv~w0j0FuBb-HCz0j5NFw&(1MUFpEGTzRhklCU4t}!g>-74|3^T`pt;4IZH zezA;|v)`FX2|)0Z2AgX%R6G;0Hik4$aqP@hU%Iuj4gF%p5nZ*A0#Xz;YQ;>EW;01a z&@}#35LY=DN&_U2HX;Hx@|;HF998EVb|q*gUcnkdfLP_PlTePhUh}YvF?Dl~iPEd{ z8F!r|^L1MF&Q8bJXua0OV&wZe#kpXyC`nPUTYK#>gPQDGq9rC-G%6HIj)k?D$qW)* z*7OI(sf)k`_$@o=D!exSZ%=&B1fN|;>$hlXj`R2)C>S)8@Z>&X@+?BK1F2ov8;@|b z=;w@;4jXIZL^Ui6dD7jS5XA)Eb7VB^TWss|EYjh?1QY)Eqa%FZUfde+&ZmRV(WbxY z?HWQd=eUz*P}9fIoQBWcHx_7h1XTJUa=rw#Z6oH67tK{ z`&?3TXcKT~auve7eG@AD)D|K%w=k(2e*<{tgqBJO=FsMyj`;%0$XU_EB|OGZW3`m< z3!9-w zBE$3?BPs{)5Z5Ia)A>O&ne$^(kmQ%*vZyGife;DK;l9j*YtWzAdityx21l-9z;jnM zQ(^|npm@222swrha_ev^GtHyFglXs4s5(phD$B0=R%+vO2gy;*A2)?MJQ;KdLS~g1 zI8PE=8YBf%EezS}3ambsxj+G2q56G#^ZJ}1H8Yva?8TEblsvmUR({D+vAL7Qi0Sp& z&&{P6x$jQSUj^4pa$_7~IvZ}@^Kzy7bxSNCo ziE;r$1&Jymt*%G6)j2q z0q6k!hJynyM@g_w=A2LUoLCDsr1+-f%^hT z^&C&wSRnnGn5E00z*rz$O~NH)-MZ6I$>-0TcL9WCG_Xx~JT5IFd*f3C2uxl0 zp4$xlBppT>Ue`a&ct{rR`D+3Tni-0;Njf=}{_y-{{N}9?M)sp=&9VLYq#Umv0P@bC z`tjb5YEf*hyA)T_4_9o8fXJXa7qc=hpYc5f9wkTGpV(ZMw~#rFPdbkfB|Ng!H}xJjx$ zXau4u5Is}JDyckMVqH%g(pwcciua4#&o=Ksu;nKRSD+7pv>zJ%q+q${{5d|{ZBD+g zq6Frlxg;=1a|zASd&4HU&6TE6AU;CyeQEh#sCtkxXgG5@l?zwsk3b23xg26yg_4Fy zQG=;i<`+4lMNV84=@s**3Er)7BchZp?;%WTh5<~XY#pY`J`+ogX_#kPddI5Yv2=}BS zaQy34?rU*@S%h6!*zs($lEY$yQbT;5mX$C8m=ja2Gv{NV#Gn=HJj7~Zr9dNvcCBK5|q&~X2-D=FT z>f(fD;jymAl7UD5Bg9B0_+iE--JP^YPNq>&ett4!86FN#T|spBE1icBdc#_4oUY$5 zwVsgg()2eezlkb-aA(G;7+2$( zW8-W|gEsBLCL$x8m@py+oL=;4=PUD&c$6K9X=q{yF;3+njc+|o?QuGMzbs8$uxScI zKK;zUhV}+8sg(itui z%s-d`KcQ2YH;-cXrHZ7=Jn=_`muVb{V+&NE5CmIxLmg0dQ;f~#7;sa$hJfu8hIM4v zn+M0ius{M3ezCW%Fnerq6Z{l=8E=-81Fog1Po6!2nld#AK|3muj$(&gl1LVrLz6w% z8S~~=>bPbuSv`*D1-ps{St&eo55{(uUSE1RAcRYP)A~@vGz<$z*c}LimVhgFV2KCv za-vuGM1kmqScGL!j%)RGO_CBpVD-%I0Z(?+vQYY>Ow%-FZMEKvgpPBG-aLf_DmQ(> z!su(m%bWvF1WDL7B%pyY{=8m~;jzeV6~ha%7fkRbMT;EOP(nka0F_f;2MCOW{s!Ur zTAiP> zJhZ1;<0P;?IX~JlK>HB#^*^V?MaRt~9+OrJEu=Y8=U2=7JmA|jeED+GehJZ(xHHt{ zh!nJpa5|wo#vxt^ljgwcu6N!2w9+exb#l{nO4tv=#3{~mE3EiE{tbOv(->o=DG2C* zaN*XVKG5&pwvdFa&8f{<2!HM$;+++&1IF5>3pVHEM%U|&aYI@;%#p7zTXX8#z|Zl$ z2W}4jDOK}?cr6^ZeESb`ghAcdP12!o@cEj`#srpXoe=&rh0Vy(^t~AOc{C~)LcgNY zZ6rV-Om?Oa<_cPL$Z(z&pUKaIlJ{B=Bm_;Y2%IzoA>02}zrr#HfDA^BzL^_Ay71$v zANTbT-VOt7MU}~4*PqBuj+{homjCD^rAa$1t+e->tNm_KkFE33bjyv3l>3$HS-2h31_BVB34>VS&($i9URZggy0aq%vkmwN#%AKp zXtWw!;3*)iCOS>pdDV4l(ZVAEd!R?hOR$*RlkOnbzR&qRQ+(|D#jU}a?vsQa+CVtrSvfi&*#Kg(gYH;_JqLZ1%R5AlDc=1~ z|H#Ge34j)C{LWK!`qd>XlYlp9*q`Hco~z3K18gZ^jhMdb^!{DeaAs-?j(!zfYrn#g zvj;awk#deJ;VytjWLUXrtGJRQAvUJS6Lo*a^9;Kx zwZYBA*$ap}m#_NmutXCJ|KBPNubM^1Kn1{ZW8S<3fEuQi!VC})x^vX!EhLlvL5<5;~7raN<1viv7CBv)qD7OpoEr6RpfT@?xL(ldd%gM4!?OlAA^lzC*u z32x5?Oib`PWsS?vTw{ z4w67;nC9oBxZ5h(-x^20UL~@V)Rs&Rf)Y=AHU^)VXS6q&S2al zmkp(HFPMP@bV8Z=t%WOD??`SDelt#1M!6i}F0m_9-*Sw_E4Q^XVZAqr0*)c`yQ=rP zmbdyuCZ}I`{c6g}C^M%h2i1OWcFEO0qs>r}WWr?gKVDTyTYjFwj~MtNkj`Yw%90 z=OA)$8dIe{bu9VcEI%gK_}At?4bhRi7s>q4{;x+u-Pf@~1;)Ktyi2U5f2!ruP!Qsh zxRW*MvIu z(}9wm`@Zq(s^-6wh>%I0_PYr# zhk0?7Y>=}iB?(WT|4pg?c7=Z1d2PVr0O0ERS1r|Mx+E}Ov5u;$QCYX@#0K0+X5g-^ zwp(061EQMNUQFKuyrpQ8SKne9PEKVaaJlJ&`=;pW-gkxOK0b~_v3}ysn~8{%C~!wx zed{ZxIW~24dLb$^Nsu-mxtSHx7wVl|KR|@`v+a>9QQJ?j3arhT60t4@k}jAYXQ1)F zL*J+RIkZzdR_4fo_B$KOmhbL~l5c7#)QQeFNUpp#@of`C@ix_;PT>_Y&1MqE9;y)iu`X8cVg9w&YC<- z7LP$pK3$T6jJ8tMTWwgzyiO-oMVpL`;!jZDM|(z*97CPgKVp8cL6`nyM$$Yl*y-ji9r09lnARd zu+8?&>5qUZsWMych;IwWvRw_%nMRy%ymqarU(bcpWP2# z>`aXMuv9jv;cGnP7JlAluPlp<-lCSB#;}!i8v`z}hsAbGWq3!m3$rd1woAnyn#Q_I z(OcuBMZpo`||8RA)G$jE~wK0GJ$CzW(AYRHGu7K6$xX! ze_3;3B>DS`5W730*E6I2L|fnG`~a*|{wx7if+ZHjpfM%7q8S;NAiup>c0qsZh|yG> zqhhn=&o_|s-U45zh{Ta4RJL0|Gx@i@TuqsUDw$=mp~#NxuvgWp(32H@1J~{b18V6# z$9KxMSmjObd?m`=#=|f6=`_q=>QDHvht)_5{O-l1Q-ZayZa%Z`alq%VAMrhhv=Y#wp$SeNGn|1vO!`as)9m5c|_u7IbW$(3=Y;}Wd zxlx)Xe?X&D=(Qm@ZqhroVpx&2ATazZr}Nm8ZfL2O!gKWeMvzDwex~imcG$rfhTiLI zkUr;~ZSWPl@tCq$X1;ZNPPO^_@K8DqLuY=+cDaZYw!-RIP7^w{Ug7=By$YGl|3ox7 zE_dxXem;Rn0Lw%_`_NJx;hifRuEc?-d$4Tc!h--TT$ek`sORQ%Bn4pCPwZ3tVJqvO z?}5bY@mSbkdaN-MsaivJeyA~Cju|A>_}|s0zdwvcYeQ3bF_fTbIcSG_W;QI55G$0r zP;N5|Pu5N;OTRx?V|np&12?UN2sxK7`%vt&@}Ovwt`mk0URa3@&eVz! zALv&u&g74_tUkW;GX3@6#k*v>F}0W18`=-wrTf@CxkQck;{x==JsPwse|BEPg}^ah z;0UonQp|LJ%-R^Z`wrKa8`~w`c1<@GepQ|)?9(w>sWM3GlK&b^Uf+o(2=}$xNhDh= zV_)EAjI8BOr-Dmn4*-^Iw~$$#7d3n_l?p-x#r>e>K3d_|5`S}bFsi?W4H{#Do z{jMEtb)dESCLi5QZ>+TZl*cNW#{6m5$iLUYuba*0zmE)R(9&gj#p3f2_)SFIpwoz9 zm2(I)3OYTd1XQUHHQGPY88SF7M9%OG=FV1J)vg9*heOQ$e^;6sXzUBQs#K!g z#B6bFzhKAFH;IC|cDfUUa=tG=bo>n1^XuY$?_X|2#_S6UaDS!Ls@x8>J7T|;FxkN_ zX|n8-vscI{pm5PhBlpRMy-p>ek~V|NLPwj%Z%x65LDGB0G1_4WvxVUZ!@Vczg*gwF zQ?j{#-*BU&7nez?Z?pKoelIf-gO9TQ)c&QQI;iYEYsa~iB zlGI|H`h9HF(9el|+iYR`Aq0iil85@Z!E__-Q;MMClI;}x{0&55 zF#C1(F7}Wmq;$02)8jo8*#$OF9xM3bMu+us$u23ffC@cHXVS1=1dOPVbx`$tPlGK%hKsL7@m17bwITDCdKlq9Vc{zv?mx*% zosVfx?T6GMWP4M>#_-v(ByvDG;5+yPvt!dyEY*Kt{W=gf2=xH$IY zwrd@Yq=1z9j-O|l+y!-=FbiV;yjM_uV#6fiL|$o`oTn)q`t=2Y%$c5fYt-O&6r4R0Q-$F!ZI_M=zBK$ z4l}b_dAf~o5U{AkggG!L?RY=vIF?CMCX2OYC;i*Ft}$soY1>p&fk>a~Mv@w<$DZ7wcQx(9s#!n+r2+bKIN7LXf>vQUj z(uk#TM++;)87I#C;Tg0=QT*j;LBpqzIBGl{B5-t+AR`#T_nR&!fGumb*6$t*m(JKM zCz-E4_3a7)uC)~qJF~;-bk8GEpe`QL1v##LUzik}oFqZE+GE!!kRq8eB$>l#=G4~? z$8mgF-=7VVTYbXPU*XhOHKROeZidhO{=au+UmjF;T~g`*eWjGpl|W+G%qTRuSz9TK zh$$Y#WN9GgnV$U2iA|N`SVb`rFQX8bhYa(OTc-4HMiXK>>0fPP4O_L?I$d+ER=F~q zVkTB@u?$1qLqrXMqs4+&r2UIuNVFZ;OvV-o_n{DA3c@#7uu^g3}xr{x5huOYsXW4-nscWqfPl@^M}NHYJ7-gbxPA zWwE1T--!DzlVJL*i9HO8uhy{!MP`e9F!*?3wx-&|*b6@`Zi!47NC+#M5M2R(Pnm98 zKYvnY6N@g9P`d~IH+c^k3?j(@P> zxW(f(I>;HR#wEMFk2e`*f?1GD2)0nf7}0ilz4*Zgo+wK)0x25Bz=t{$p_UlV<}olJ z|Gf*+o-3M=IXQUQhlTEbG#<`P05x&X3DonMxb6j*m4LqbI{(EZycJI&D5;)Sls&?gy}@&==9l9?oz1{GHO=igI$76441_&;LXO>-&vo9 z|Da{KiIwC*M9&n1rw3vTXXcV)+!bCMF_KoN1TzM1`=D&eC!td90J%vV_Sz3=?L9pzmPKL7 zlp#kUmY{`-zZ^qO>+ObsIjjXHNeZj~GK)IC zQ$R#iqAvY#qa@Ad`P};u1&6iq&*BJdsSCAO><_P)1ApMDn{nvMWBFm??O`N1gI}yK zo3)|g2!FCw9$}n`nA90%njeeelX7m0v95_+3z(RN4&jc(f+dS2Eh2f-sKRZidB!64 z#^Pgt8IzCfJUQf*$&KJ-WHWhux@Y_GI9~sW2 z7d$ChO=~gaJHTiNk18Hf-RYQ~`m1qka=dytKIg3F=u{xW?aMjpoud)fu7R7#VGo|r zN_R5w4s#9bqshOPNb!!^kAa+$#8S%oP4J+3eAK(!aut<)68#EbB%Z)@!IfoYOP{q3 zstOAce-y0h0BGPkb;=+Bk@Rx;|MAQ8ih6y3r|2B>j{N_1;Q#w;JhfN<`;S5xs0x^# zwsswL(fynM*C|Y3M)T-QU=(p!V?iDYO&{oR?l>`_yPNl_X_;QuDQpRrzbU=8rL+%= z=d3L-@vP?g;Dx3O&u(_L8DS3^2<^EDjmnLJi9&c7vI)|_kR8h#ouG7x8DbzIgHu-| zv376NV5g{*)G~+_PaS)PD5aOp_z!mlrKq#AONoy~nq+P9nSMZb(T-S*kIHILuOwqo z$-e->IwlWiboz2HSZ+s-n~>~@MPqXw4-`5S>@~i!u78Z7UzwK&iV|4oSHiIcBrqeSR7XDPzx<^=*ihVC<|H87 z^q_o0V%4i-fu6{cdA+E%BTHR_u@WZev~mfU8~~9iaajq@;b}C*~F4UMfw9h!AO)%RX2#91h8-y)1G6)h3}eMiCi2 zQ=&-61;>6+P}YAwZpHDX5q-_=S5&=$pp~~70$CM7up406p9{hw#dHE3E|bhNQ!k{k z$%pX*0rMG#RuQ8x?<8MCz!&W+ONcpBOxF?)eI9c_qtDGzsl2TIe}E$SZE~phg<3{p z^`w4UWqVja$QiOBp>dMo&q*m#yub|GfpSt%^6%F30|u?+2DE|XNR(FUcdPli9}}_t zRPD=**jn6+d~Yb-pT7klLS(8DtI)ms|B4pmYW;A*VxXH51stS}k{4UmAm)$Bxu1i- z=F!QGT>-yNH=xevlzGbV19_VEhAGkG44YiHC(N!rB2US-k-L30<>T5hL?obV$^j9h! zBPk2OekMu@q&B7uw)Td}O}&sT47#gRpfu8c$=-dK^QAcC6l__ zj;V&9|87T{zB?)zU=l?~+E!e=HPVBSXWSPm%*+Wa8b89h$~h}*t$*Nc%59;t0Jz|O z)+@WS=_6M{TV4l*KaQMpWPP-fiW#ob%bUX@faw*&w|4bRsfUfa31R%5%RC~R=;6(3 zpV%vX&h|rwYcnn|Mzy@P#;lcM zDUm}=%>Vm6#7&Y$O8}%^%%)aA@Rehg!RPwL7$=N)H0pG{Z_7;f!OrWS-ZEXAcKwe) zK%UvarQ=l4YNsi~A{Z?#6u?8tP0k5LXLo_lkb=ncuU@pSey%+zCB41j6#xNajZIPs zed2T@GBe>hfyX;eAG*fYsu+kCZpe?543`&7;b&0ndLei92q#p@q-K#39BdV|%1pgb zW3yKkz-C1P2r013D-?`Bv=RnyP#Kw-6%mld%ly$5cK?@hFCY$J_-*(AKF1}2mLeC= zOg-4#axtFO&s;%=2wruPxvzJCZ{WjDtPsvKt2u}>w~`Vi+$`K`JT>yY#^#%PMSPR7 z42LLBiH5Q^hNSd}tV#O@Gdoeek1Vviam*e`?|@4Ukmzq70XD8rcP4OjHB`imxc@XQ zz7Yeqnm9Xu$$lNJS8D%NvXAEr&+dG?v~gc@k6JMOe7-ouTQDGljhJw zt9Y_TE@BBY%D$;U(;uaNeT%^CenDqOh8`F$6~DU8FrT8rlu(V1*I_QQ{*S)(wAaKd zM(;H@%);H2BT8POE4I~S`35+*eQEa7%D1z2Eq`U}_00x>MXi_RHGnO;;Q}BNB=YD{ z&)VQXki!UIIDP`052pK(U83Fs@d}BW<*MF_(4es03|`beOVA)wrS79PPgW4(`@Ou> zH7b;*BG^rds;VumO$7e-az@cg&|#rTbVp~+*C_ER*kU?%Vl=}Ul3^o%u*hVhiXuoq zcndGABqC$So@NfV*4~dKd|G+9O<)QI?M9WTC!=l02mq*Rx8@_SqKr!pP_L zHp`mU<>-P(8g;;Pf)T60=Sy^HXE^9e@7@nQL&DN8olnfZtF#TCwe8woZ`_~7SaZ|TmUF0#@T^FMKBAugP5MpoXp?(<&puM zwBMuBVuv>ualm)(dsT1{{g{}1dD=K92Y*w~h5HGxuS@_QGJE<(!-z=Lo|Q5*S%fz1}%fZ@3%gtnAHRqc!lDJcm|MA`z&6#cN` z&}SH4G;LU}EHvLIClbngiP7Fg5(cy}zzrOU3cX=1N}!^}&zZV2B<%YES$M)%)Au7PQgow{_v z*b4_{UKw+aWre)TZK=0kU%ie@ckwzK^_4;406I7kn9njRLiTFh<27u(2Wh@3MMf=a0u z+wk~%iBo)6{$9$F7{A zCrG4|sk?q0&p40fhr%tQ3{vknDw2M$?9h6v1zf_)D2U7LZayvY-*pg~EFADQGBCK1 zn6~}kCNc1-nlC|Zy&&=Yv6N`e@L@m0roueqo0cbY>U@IbhIl?Qr||;rh?7FR&}m75 zd@&;bZq)H$AoF|S7B|gv+%?ypU8Qe8$kBRDb)t7m*d23!RK__7V%)LCeGNEOoZE|1 zEU9!%zyBgK2MB9!^|47m5~J4Qn@g&Q1J zbY{ad*9YUo&y{4KA>^+p$@xiEzo<*AEkU%C7%Ujusl;beyQ{CgC!7EiP|N**xF#en+gXK14|58L#}VhY8{WFz=1 z`S5yX9kD`l@4FD=yQEYzQ8;fN;r=dzt6A}pl_s@aBQVHM zTS@zgy3HOa>;g__Zik)P~?k3g0 zojhgZ;^9$Q4*qH&`-&tD#l}gcd{)fjGP#|IKg%EWSL+G-5dw}Q%gG?%)6eW##+#6~ zUheuM1Dd3>aXzt7+!RxX4z}!k&GX4|&b_a&48|lEm8x1XB1dw?+_)auT%R_KGU`KO zoX&g6%_@K}@~k@fgx)t4yU{rhk>l_Vz2bZ5!#rYWK zd%$K*Jn}uYs7lL?27NS}>t$*Aam;R(xLeMjcS_cVL4-29{MRtsU9W?A{hi`JrhU;t z#PPOE5yFgGHs7_N!qPV+xr7Gu%gWZhilT>%Kc6Vu;`$^+PzP_kA{Yc61UaA?T&ks= zHk)x|rTFe9(@MyUT7Pb%g-W70!AFzzR^Z+AUWSKA_VuzfQbwR%MboYX$B9Er5{ zDPs4D%CiKeIN(i6FL9LG=j4RgG*LF$Dj1$j$tlbv^RrQjrd!6{aVm_B)GFmJzsO7{ z34DI83lUGC6W7kuNQ+y{XDI0B@vv&X^b`*RHr5*jiNh0@Kvsj+*pzCf_#-0lGJ{IF zluZ1vh~8w~rp^RP{i+s`b~gmw-eysPMUQe|=ka!9I{jetT7u zYS|!+mDz-**aN>1(YsCTs9^X+nud$KS};pUBgCUeCPmhtPuW+f73@pa?3 zSKx44{oWS+w1!x@!-AWKsX#W*cP#gUCYl$wz3t@h;r=U)cvi1cV+oJ?)U8O}Zvg?9 zq&+jqObHM{`CjwT))IWM$3PGpax9m%m5}%Vt%UT`p#yFjpd!lFEw?V6*W2dfwaE<= z|B^-+MO@G%HNwbQJfWziB4MrO8b?CERTpH4?h>sW@AQmoqFdXydg~|{2^w{a7+K(E zT{`6DY7rYlPkx9Snw~d9MNj)1$BGletTFl9gY{}s&n!G>{YcpYH<#ZTA#bW z;T033)}4d1rw#H*=7>DGFzL079PQDhtkyuM;fSNi(Y>>>rv1eoyE zyV@?7GyU57l)O1JLS?V*xKIc2uu{C;I`x^x>=R4;Hmo2msKrms7I~B3YLhbV^D^Qs zsq&!_Znu-8qM*vR9XP%l-^7WPMJDkzsTWIj96)?H`Ssskz^CLVf62WjE2p%w8{f-$ z3d17*4x%e{! zh3{MN5v?uCHKo0X-(-pO>9_%|Te#J3BKh+jg0$Bt*P#vhSBuyx;te#hM^i%5`CxbN zg-!;Ll&WjY1Hn3_h{Lrb;|crIgFzu|7m$Yml|+IsPQ7<}OrJ0V%PS}@FSheJ!9F!1 zDSOwblqk49M1MJ_&}_|iHnD%1EttnB+Mlu3$PdO#DnQnP@pQW;dliZOpiYv680Y@EhAGhxUB#WCiJ!>@aNl zph9l988m^BA|WscLw`ku+wNoHVWhmoJDc#vC$ExUgsFr(D4>jPCP~M*J~gU|ys^xw zotBO8cRAi$XB8Y}q7a7Rim1a%9A9j)Um*f+J2Apo5uc$Hc~_4{moGfTnvTOWOF@z6 ztE;OJ_gp{XEsmYk+W4e% z!8c}XE`1FhH=Ri_5WZYLd*x4HWfeuII`;JS2(a4EdahRo4k@K6yU}cpPN`}Dniw!= zhuRCtTTbP>j%Mq!(^o;CTA7?{V%;g=>}YQE$z}vo9BeN1qP&yHPy8ZV!V|BMGOP!7 zEZ;=9J|RO*hR%~#vx_ap-8MMia#qB>A}S6fWW>#IzEm7W#0aZuC-JKo_KoV6LW4GH z>eU%=8atU5;h=!c6NKR>Hj9eX zjEzb^h5AyDF8p<|gQI2FH;fdFnEa*}3w^x?RYEAc>|~R3`Y0#G$!zn%+hMCLO|3Sf z3>V-6)OU9$OwvkjVDjS%A|{m=v8-fHYVM2q&uVmT@(KlVm`!}^THDiA@+ zRr%_bz2b8IpK(uIvRQ^|T>9(gA^hmf?MU+MR+ET;!%<}edycCd#~MnbvX??YqV5QwNTI<=Y^z(JkJ5waWvnjlWfCf=7To1XptLE^?Ui{Vso zNswm$UHV!CPw|JDj0f+~8E)gBbRkGr5m%Yh`tjUBogo4)u`~Po`^@g znejL(Sla+$`aSCTC5O4#nwDhAv$jA3%PjFCHmz$z{=p~|JNNA#VGFvtxtZ*Z!l?=W zVZ%gM+gfxuHu2`kU>6MzZD1jzFx81iI<4yTm!a6G&OV~X0cmbG%uU;<#2g*#7dB(; z9km8yYkZb9u943T>l7UfGBazlIAfwP<=wN~2Dhr11JZ@DZj?#7v`I_;S_kLKuwtG} zMV zZ5Q>p|FQgq88LYDYV`UTBnMp*=`_$#s$ci;)HT^6WHdyc?sh^%pE+X_IOs!%EmeL! z-{`(c|Jaf4=#@%fM6l;A5wj}UcH!X|*0-nNIXJH@Tn(i@2f;z~E&LM*trzeS*eggE zo?(yxw~C^WrmVR63ta6~qB!Frt&w;G`>#)_5%J4^H6_uHCXbqE>U*%_va?+l5W^sa z`r~BE@bVNAUX>cvIe3&7+Qt2fxr_#4TiK57ur~+%I1F^8EfFJ;2L!I7xivpUmulR$o^ga!H zO{s}V7(O*}`Xm}#pkZQF`ZjW^5t0e}PQU2c5huKbB^4+k^4tJskoNi0(BJ#kzIedHh*hj8QH9nlojSX`Y zYR~H@0Xo*1FHfzF`EN_ov3qG-IXF#IQI)nhHWdCmRtZ|Gw<6L#baa&tae`XoHrq}@^0Ud9B8HshEL!NsfyN4Z?ip%Z^wl)aqO(C3f4C}-9~PuG1xfBgy4 z=;el-;g=0{reT1I3FCRwb^zol2VAOyBBblQxo?2RRq_kHVmfoxp4Hy!Sm@d+8;+lr z>k_J#dzDnir-v%^-geh63BH9P#s@oeFXEa<2{NAE(C^OTiN&}EbRw$>8aSrE;eqyA zMU66uMWt%+sd{*P%>#?!P6gC^T`uk4#pP0&ftYu<1Ak195>uqCUcvIFS$tba-KOd5 zj!moVXSheHpFy-Fq9S`rh^MpYvJ2l;ajd*rNWr0r`>Xvp}|u!)4D3E$5cIv(OxH|f5+qq&QgHM8HmwqF7n}f9L4)K z<9g+_Pv}G>g|rVQW7vY|kXg*77cWQyiw#hx@4^bO_*4?fqC;pa=akdfibCq1w3kux zGw{s6<)eMWo!mIX*%y#mO=;Ce+9bMbP=LUyGVZIXfT$<;Y}w@XM91FAEKqI>B=@HcS(^f5xbN(K2ZK zRIV=aBc`ZMnUN6)L@=J+mAv;=O+6S%+Y`dkYuP?O-;M%gFHx-!@p~q6FttPqi5GXi>1bK-SHNg3!r#-@4+Vws@PZ-Ek z3&bio)?5v7HoLJE7mEe&=I#;6hnG5ow->fe?DYblb-V%%V zlxM5_^P5j1orj;A51A>#F^gWr7b90dj}z#OY`o?9$RhV+8Q&2*$DVM#hcJpRY%p`; zpWqHfY;76Yq2Th(>Ff)qBD-Ok5F@lnDBml7kEZhdGnf2nZc`H@+D;{h_g~2kbF2jm>+1fkP8wOnhFg`*)a_U7cl4Eu@?^b{@9t$jBP@|4Y;AJPlC;%um7sfck7|22*ZW)Ak?uzwb zl?~PIB-NZXzVotw3i}R%=M+J9swrKjTsK1g7=`KpG(7YiWFX*~ zj>!orN75F^agor6)bPc2Y4yW?x&3)`W&+9tQ1EzSgvHBzDAzEJ-$FUPX&qu$>&S6n z!n6gV?S@PpXl}k2`A5zG-a271wWgHb*l%CArp z*&_uRx|>7<-|1hXU@e8osA596bpX{K%up+N4mtw0wP8ROrpiT8`!%#{L!ll5NIrCA zbTOC9e&gW{2eN4Mw@oz(Ho7yYX*O0ynjiOYDNa1_P!Ve_PW;~c!ic|8qloJWpc%=c z`xRi^mf$8JbN*vE(0qS&^2Ja%y}Lu7hk&8*1iRxyH0AgVxd4=u6b>8u_87GQ>M<;t zWH;$zm@LF^+3gRq>x~y)jDerUjx1Ii{dsq*=|VsE*NhW99(PzR^&7`}j)uHQ4fmm#^rvD|+ zuy~!CSYNFvom8R~OuQ({MW0lW*j!oSAK4HqvBTY^$~j#9adcJc@Mo|3Mkp3f8g)q? zgy)&F0gG^tIZi#Ik`D0!7prn)+7Vd;7k>7AoY0u#V#h8$Ko60Ww zo;H#M9|Vt?y2&+Kk}Go%u?+GV&h^J-r(H1|rQfrx*MRiC`F1Dv<7zkVD3SUNsBrmD z_L{fpLnERWWKV3L{NOcZM)lMxujXyiv=*DZAQ0vBle+?PzGnQ!R}*|+-X_|B1)_u4 ztZ=pTgo*+5|LHcKxmNonLU)nWq0|t(dd&mOEj5?7JDWxIJ?0|lImgr;eL61F$)FFJ|HD+NE-8<0-*1$>xwiF^9}4abY0Oh3O9IN!d&JvD8V%57Q_QUzon zR!{ZrtsvYuK*#_x-_lubsci6Z_sRS2SX%6=Hlys9My>KqbZFJ%`0e+p+VoIk z!3;Dh#*g^VPjQT5=uG(KNLN z#HRTr+=x(89@nP3j}4~tS{p!=b}O3XXrO-Pv1%0n9TW$DtWC$A2TEj)HfOd038l;T zW^<4ihw5->4G1a!E4<>$;7;SqYk6=mQfTz~4OCw}_OCt)qcD3g;v7VY7Pa2my9(@D z-#uoLfPD0$rGvDNbtj$zWdaz6Ce!8LXj!V@hQ?}4;YOFgUj#GN12K8af^V}SgT~3+ zO82}na$bP!#SnUs=l`EWHb7kmsNv(Lkbq{qN8$MTmbDh> zpNUL&Ktn0yTe}3}^^Y}3G1Pvw|HMKy#ZLKOi+Dq~62~*6vzS|xyMJL~=g!_YSUV!5 z%-#C?0{opHwk=3nnw?coO}nB*M}GqMG1k2IiRX}T8h5}O(j9=QXzX4 zp$)+DNj)z%RaUbMpKrE~NWgI%*ba{i!y*0wcs7Rej~?syA_<2E3PLnn9#~%TTG4z~ zc&c6R!ujb%!Yf@z%;Z=@oyzMOPRUK(`Q7>AI-k~P^a?6PGj?z0lbx=jIsh^KK5zyI z(2BJDN0*C*E}b71bECme%tj9qst3ZN8*-*jwgl1ULNs#20xw|uxS*X@A4(b7mp8^Y zBb4HRBdFTh`B>v(l_$C#Pshus(LjiI$S<`}9<3sww(8AiDoFd-Sp(22fLtTGXrXu{ z3ka>sd45wrV8t74sOG;I;+M0@~d z%@*%wI<)`aNIZ3_Z_=2e(a6Xl;DtF7Bl!7uZG4@z^9ramYeQ@EfN*sNXK@3$Zof-F zqTBbj>^gtHcD>f1^`Yn^JI_|^=_c<~-U+VDjbkSuVZ&mPz+;BZ<1FC_=pJ>`A$rV( zzqH`-uJe+`UvjhZkSLz;*=Qfwdjr;J9GJo}1A3T=Ua-RU-)ynUU2%Xf9*!mmquYMx zW7GL{G0#Mec~4#+n?BfUr*s1oP7{`7%3Xjru=_lgsQYjG`_rby|C}DKCDW=JR{WhkY)uy43nD0!Rmx&zNBzEUOM}9Qco>Ba zO&9O^B9i^Sx-Xp)t~OKKcO}%3<<(L9uZ`B`zXHcq? zY!WlNtu3E>ZTCJ1`QGqG&8WpWXFP5d{GDf)VJBj(+_p}@HH9-=;h*1 z2(4)w=_}2?+Mmo??^8PqJR+Sn`Qn|oO0)Bl;?$w`-|?k!(Zp|L^^RuOZ+`CNwnIYJ zLh;6w2bF-@zx|YI1DRR052t+~DW{VymAIMR;8MS3le|Ik8LLMZUD4G}) zHpl`PQz?4UTlY)S-t^)AMQ<4Rt97d>-s)tIW=T9o-%H+_f5&_b+}gb*-9Puyz70h0 zp$(%jk9yWsME8zCnjfiFYMpZT``h6tvT|1x^|Xt*uAr^P`Z`xYzTbF!(1+Bd3-3%E zgQGWyEo24kDLas;XD;4x5yFW>Mn<+8RI5M2e)si(XXUP}{tUYsxby;VhRHd3k5D55 z;t9_bpzFrwSi$knAeIb_4YYhzxKh1xCrOd*9Hs)hgRy<43J@pm%sufUi}|&C&;qoW zS`+GPJ!5=1QAm{Y7ibNyqt)6Yom4;0%6plxXA?6depmil0p!048i$a_Y77*B?WkqI z84)bvj4nCfQ3Lrl{)O77@gsQZ+yhj}ZQw%6TdE%hNEt5_e43?rfy!1&iO%+2raY^| zpre62V5Fr|M1cesDt)*LZ0Bfq?(?21Nca6xf8spB(_{CrIyIQw= z+#)ae1$Z=J&Fj$lS~!uzS%rCy9Z{IKjMTJk%gCV@qXS@VtEFt|@@f(6)co3YJ# z@{%_13u7is99``ZW&bF1^ERVPa{aRpWwd|;sAEO%m41%cYq>SAODI>~6%ZGA$uGhy zE}~;lC4FEEETagD_+CH$p_V9z&mMTecz`9-n$xBTo>T-UWlXZ@CzUPQkp)ZzxcJ}F z@=1YD3ghPYC#m|Ujhb{BXpg42&!lnqFf?4Mz{;Y?!U8-3nx~2GaYVI&(Ub`q!}Ac3 zoa<&_hb??C1uD^F)M8`RVn4omG#2Z-_Q-wyIef3_LG19;W(PkMpHMyazSW@W`1RvI zaXjM$x&jAllU&AT%C)`ge6EwgxcCL!hd033;o?`2dNxU3e@eP0Og?oPU@`7z$>dT6 z35pBc7u|h+bQuR>Y`Z;mczAm}@9O>3;hxV*)w~F9@xyEf-k%hfC3z{zti->Rw82rzPTu@M(9=&vFf+upF?RZ~&JbySn zKk{q-*V6pf!2JFg;_-|K&Fk)XH#PrYvS&)x|D<+zwMV+zTiV*cwX}DA?|v~a_dokI zI+kwo=8vMtQ`f%`yFZ)UVLZkZB8dIUH3m$cP)xO5u;BbZBrFw!lR7h# zVkVbjRh(B?^rhkdK6>v{(xwObb0f(v_KTzk_13&IWqtwEhySePfieCwj0f&FZnt%) z`iIN0BKeL-<8Y6;^G8O6lL#x^T?KV{fxe&1oD2Gl2)zS}~b zU486sepoGvOgPH>_P;;Z@4-S3csGD+UXuU@TH|FoX4hYGKQpnhVPqOVh{r~DtSE%^ z4P`#4lT6uv2k$W6S64GLGY{NTr_eSZ4C1N4pG9yj z$8$c===DiqNj=6oK{sYuoaRGDRG(?^=e)r3tDlW;0XRno_S^zBK_ze%odp+G{|OtZ zeZqNo@tO#HEV>y>6g4yyOD*KIQcMlcH6OwoOt!g{FuKTUs;+UUakg;NuuKhOi$Bsk zA~k5~|M|4yw8gTu>NJ=8vcd#(MChnqp8zd@@;iwQ2VT5y=xAQ@`IStW+`z)uT@RQ&x49 zW*##@zxE~Yj^-I;$A7kpehkcDQ1RHl!vE>(O2e8+ld#MvpmGcX0TD$(g_T=`3@{pk z9D@jh4oA2|4!I=Uhd#<8U;>y07Q7FHplDF8a6}MR5C}30vO&;<5R4*+I9wt(NqVc} zj6Zgt-TduNcXfYNUsu)h*8BD+USxi}O~Kc)87=lJvK}L6HZkkNB`{qt?j7@cNUb09%j1t@r(B1~s=t9*StEXDRmsbccgS&xq!t%E`-F;*us$?f{xCK05j z7N2{0s^LyOBt5o0>hsM`2lVPpZHQ8yGXC%P$_9;O-C%7MwdzeAuUdbtSDG01E1@Ph zyTS}Bosf4DRSPdNS}?A?vu`QCh)MVor(D-%cE zjq!Po>X)KiQ!|KY1_Uled}JIE6e0`FB6ieYzuX4YG1dI^5U8d@!ORAZxI$gdFq4Av zYTN~_WI{L1(B%$i>kvk;P7m{nB&`e1z2VPgxKIjquN9@sttKJUd}>vnv*lF2qk%a9 z%Efm9vCB%7e5~#?yST!q>}Q*Xw~=Klyi%5uQkGJX83aY$Cm2&I9X-mCRX^l+2`Tki zz!ihqYVsiy6f}v-RxdRpLYSKP5VzlM&QJ2yTldN1m~`~xfRhpXFGDNIc=ds9$f;@3 z!sS9idmK8Lk*XfIQhO09SdOyHS>Z!WBr*5Us?J>N)s@Qup_$tTKdnQDkCq2*#Nn9u zci?RK2^a!1C&qC|!?vw8r7?3JC(e%gAq#%VflrI5<$lO28(HLw22;L7iC+3=Y{yi0 z6)Fw#M7eF~UhjH7om|2o!-~x?kJ?*7GeH1E4FW#0mg4s`{x8-Jsan?o>8(*GoV(ua z1NAZVRF((%qQz$66J!x(%d#P&+OzWiqJ>2)*^5*BKVvNtLy49vG8z@2>zcecfV{^E zGLn~umY~hxklGlu(jqWKMw`{6TO`iBgC0YyiY1_ha{zG47mQ(%mOc0^b$kz^5kf z)&U7xJ;|TG*|2FAq^@gOPS~MZ7!tU9cI@U1u!!kaHdP~{HDrh{9Qyo10|6bZ_N|c- zS38H@G|&(fnNeAcOSGxZ877&FD38EYQI)(U`gYLX3k-;8KoFwhoyj<$EK>^clq-dfx*C$3h>tV5a@DGDJsT7C z4FWUpB|@n1hGJf9hbGTCK(E6B$0;4|3%S>&X7{B#<;rf@ov<+jaP=dt88a)|{lO>M zbV7tX>Sg{#Vq2vtz4iz7&P0YHvEe07IgfnmI~62$<+sLNuv4hJH5Ntf)j~bf4MmlG~`P#yuePXv)dSsh-TLn!{>os`(ziR`g-o&bd`8--S>{ z)J;^N;6u>~Ii~#gXz)1+15 zwLI|na(f1ml*Nf=A3Gw>Y~+|Xytmj{9i~dk^43rEWbfY`T$^5j)4w?+61@wFF=dsb z=6$ejppaBp?lgSc)knN4hO)jyVoK8K32RGEQ7xtEz?fZI(81ekgb0=7W0L5qVGg(k z7zC(Fgpky%2FG{A3pb?eSKr7z;`g92(@mUq`OF&zOfgR<1<=zDQKopm6Uxv;pHS~Y zuEA*^R^+~~yQYKrA^MF>k&!oNLJ#xc75bv+(Rl&$wpr3eM&E^IaJ`BNR_~@{-WmGH zFuospo2a@mM?84AL3V*AvOE;Jbr-AS)X(~Jr1T%$H9GJ6SNhIA7P4HwKKP!2&(G%* zBwc9+7LIiW>hYol7BNs|X9pVOlaiqWMR;};bxo_XZ~c974tjyy66_n!(DCWaY-24X zsT!k$hXMF|<*Smu%^5TKNL8i>YvCb2&F%b#b3HqT4z)X@Hv(H!*3w`=sIrm&_dhd z^`%QufdR3x>RNR;r@bpUT%^0O(2S{L_!Rnqd}u*Ez?z!A5q-Hy>f~NH^P8?&LMM1C_UNwuKCytlL`%Q*q8R95Db4e?k?um&feNVjcEye$BS}K#Qtt~Y;{;_@J;xpX= z&Padgl8L$5M5~$ED}iGHrQ#opT-a0W50Pf_3B)whY-wFarcK!YGq1bTH= You'll need to enable, at least, the minimum Remediation Level for a given Device Group. Otherwise you won't be able to establish a Live Response session to a member of that group. + You'll receive the following error: + + ![Image of error message](images/live-response-error.png) + - **Enable live response unsigned script execution** (optional).
>[!WARNING] From 2590c98f02dd2a47f5770bc4b4dda0723a8d53f3 Mon Sep 17 00:00:00 2001 From: dbyrdaquent Date: Fri, 26 Jun 2020 12:58:20 -0600 Subject: [PATCH 09/10] Update mac-support-install.md --- .../microsoft-defender-atp/mac-support-install.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-support-install.md b/windows/security/threat-protection/microsoft-defender-atp/mac-support-install.md index d6656e4eac..4e380f4e2a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-support-install.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-support-install.md @@ -42,7 +42,7 @@ preinstall com.microsoft.wdav end [2020-03-11 13:08:49 -0700] 804 => 1 In this example, the actual reason is prefixed with `[ERROR]`. The installation failed because a downgrade between these versions is not supported. -## MDATP install log fails to record installation +## MDATP install log missing or not updated In rare cases, installation leaves no trace in MDATP's /Library/Logs/Microsoft/mdatp/install.log file. You can verify that an installation happened and analyze possible errors by querying macOS logs (this is helpful in case of MDM deployment, when there is no client UI). We recommend that you use a narrow time window to run a query, and that you filter by the logging process name, as there will be a huge amount of information. From a9d72d8f79e2b627dfd85e76048dfa88fe01c422 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Fri, 26 Jun 2020 12:57:31 -0700 Subject: [PATCH 10/10] edit links on landing page --- windows/whats-new/index.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/windows/whats-new/index.md b/windows/whats-new/index.md index f8674a3abf..6f809cdf89 100644 --- a/windows/whats-new/index.md +++ b/windows/whats-new/index.md @@ -28,8 +28,11 @@ Windows 10 provides IT professionals with advanced protection against modern sec ## Learn more - [Windows 10 release information](https://technet.microsoft.com/windows/release-info) -- [Windows 10 update history](https://support.microsoft.com/help/12387/windows-10-update-history) -- [Windows 10 content from Microsoft Ignite](https://go.microsoft.com/fwlink/p/?LinkId=613210) +- [Windows 10 release health dashboard](https://docs.microsoft.com/windows/release-information/status-windows-10-2004) +- [Windows 10 update history](https://support.microsoft.com/help/4555932/windows-10-update-history) +- [What’s new for business in Windows 10 Insider Preview Builds](https://docs.microsoft.com/windows-insider/at-work-pro/wip-4-biz-whats-new) +- [Windows 10 features we’re no longer developing](https://docs.microsoft.com/windows/deployment/planning/windows-10-deprecated-features) +- [Features and functionality removed in Windows 10](https://docs.microsoft.com/windows/deployment/planning/windows-10-removed-features) - [Compare Windows 10 Editions](https://go.microsoft.com/fwlink/p/?LinkId=690485) ## See also