From ae07b92b52fbf1bcb0550a7ddcd0ea53be955d05 Mon Sep 17 00:00:00 2001
From: rikot <rikot@microsoft.com>
Date: Fri, 6 Jan 2017 13:21:54 -0500
Subject: [PATCH 1/8] Update save-bitlocker-key-surface-hub.md

---
 devices/surface-hub/save-bitlocker-key-surface-hub.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/devices/surface-hub/save-bitlocker-key-surface-hub.md b/devices/surface-hub/save-bitlocker-key-surface-hub.md
index 461864a1aa..2354de0f40 100644
--- a/devices/surface-hub/save-bitlocker-key-surface-hub.md
+++ b/devices/surface-hub/save-bitlocker-key-surface-hub.md
@@ -24,7 +24,7 @@ There are several ways to manage your BitLocker key on the Surface Hub.
 
 2.  If you’ve joined the Surface Hub to Azure Active Directory (Azure AD), the BitLocker key will be stored under the account that was used to join the device.
 
-3.  If you’re using a local admin account to manage the device, you can save the BitLocker key by going to the **Settings** app and navigating to **Update & security** &gt; **Recovery**. Insert a USB drive and select the option to save the BitLocker key. The key will be saved to a text file on the USB drive.
+3.  If you’re using an admin account to manage the device, you can save the BitLocker key by going to the **Settings** app and navigating to **Update & security** &gt; **Recovery**. Insert a USB drive and select the option to save the BitLocker key. The key will be saved to a text file on the USB drive.
 
 
 ## Related topics

From 2185bb4e38ae7faade2fd180a277c45dac632d54 Mon Sep 17 00:00:00 2001
From: Justin Hall <Justinha@microsoft.com>
Date: Fri, 6 Jan 2017 15:02:37 -0800
Subject: [PATCH 2/8] Removed innacurate para

This para said the Interactive logon: Display user information when session is locked setting would prevent displaying logon name but that's not true in Win 10.
---
 .../interactive-logon-do-not-display-last-user-name.md          | 2 --
 1 file changed, 2 deletions(-)

diff --git a/windows/keep-secure/interactive-logon-do-not-display-last-user-name.md b/windows/keep-secure/interactive-logon-do-not-display-last-user-name.md
index 0177def043..5af92d1bcf 100644
--- a/windows/keep-secure/interactive-logon-do-not-display-last-user-name.md
+++ b/windows/keep-secure/interactive-logon-do-not-display-last-user-name.md
@@ -34,8 +34,6 @@ If this policy is disabled, the full name of the last user to log on is displaye
 
 Your implementation of this policy depends on your security requirements for displayed logon information. If you have devices that store sensitive data, with monitors displayed in unsecured locations, or if you have devices with sensitive data that are remotely accessed, revealing logged on user’s full names or domain account names might contradict your overall security policy.
 
-Depending on your security policy, you might also want to enable the [Interactive logon: Display user information when the session is locked](interactive-logon-display-user-information-when-the-session-is-locked.md) policy, which will prevent the Windows operating system from displaying the logon name when the session is locked or started.
-
 ### Location
 
 Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Security Options

From 4f961fbf8ed745f7541185e89d8a0ea1370370f4 Mon Sep 17 00:00:00 2001
From: jdeckerMS <jdecker@microsoft.com>
Date: Mon, 9 Jan 2017 12:17:17 -0800
Subject: [PATCH 3/8] remove redundant link

---
 windows/deploy/provisioning-packages.md | 1 -
 1 file changed, 1 deletion(-)

diff --git a/windows/deploy/provisioning-packages.md b/windows/deploy/provisioning-packages.md
index 47223a7427..1e7493e331 100644
--- a/windows/deploy/provisioning-packages.md
+++ b/windows/deploy/provisioning-packages.md
@@ -124,7 +124,6 @@ Provisioning packages can be applied both during image deployment and during run
 - [Provision PCs with apps and certificates for initial deployments](provision-pcs-with-apps-and-certificates.md)
 - [Configure devices without MDM](../manage/configure-devices-without-mdm.md)
 - [Set up a shared or guest PC with Windows 10](../manage/set-up-shared-or-guest-pc.md)
-- [Configure devices without MDM](../manage/configure-devices-without-mdm.md)
 - [Set up a device for anyone to use (kiosk mode)](../manage/set-up-a-device-for-anyone-to-use.md)
 - [Customize Windows 10 Start and taskbar with ICD and provisioning packages](../manage/customize-windows-10-start-screens-by-using-provisioning-packages-and-icd.md)
 - [Set up student PCs to join domain](https://technet.microsoft.com/edu/windows/set-up-students-pcs-to-join-domain)

From 42cd46ba82e90730ef92a43f511e4e19dba50ea5 Mon Sep 17 00:00:00 2001
From: Greig Sheridan <greiginsydney@users.noreply.github.com>
Date: Tue, 10 Jan 2017 08:36:03 +1100
Subject: [PATCH 4/8] Corrected Energy Star typo: changed "50" to "S0"

---
 devices/surface-hub/use-room-control-system-with-surface-hub.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/devices/surface-hub/use-room-control-system-with-surface-hub.md b/devices/surface-hub/use-room-control-system-with-surface-hub.md
index 71051b3d27..06b5f7dd0a 100644
--- a/devices/surface-hub/use-room-control-system-with-surface-hub.md
+++ b/devices/surface-hub/use-room-control-system-with-surface-hub.md
@@ -184,7 +184,7 @@ In Replacement PC mode, the power states are only Ready and Off and only change
 </tr>
 <tr class="even">
 <td align="left"><p>5</p></td>
-<td align="left"><p>50</p></td>
+<td align="left"><p>S0</p></td>
 <td align="left"><p>Ready</p></td>
 </tr>
 </tbody>

From 2f6e83a834bc03f1849ad08e7f652682fdf66ff2 Mon Sep 17 00:00:00 2001
From: Justinha <Justinha@Microsoft.com>
Date: Mon, 9 Jan 2017 14:52:37 -0800
Subject: [PATCH 5/8] added new topic for abstract of Cred theft mitigation
 guide on DLC

---
 windows/keep-secure/TOC.md                    |   1 +
 .../keep-secure/images/security-stages.png    | Bin 0 -> 16614 bytes
 ...dential-theft-mitigation-guide-abstract.md |  67 ++++++++++++++++++
 3 files changed, 68 insertions(+)
 create mode 100644 windows/keep-secure/images/security-stages.png
 create mode 100644 windows/keep-secure/windows-credential-theft-mitigation-guide-abstract.md

diff --git a/windows/keep-secure/TOC.md b/windows/keep-secure/TOC.md
index f063fa884b..52b2dc6ca2 100644
--- a/windows/keep-secure/TOC.md
+++ b/windows/keep-secure/TOC.md
@@ -871,4 +871,5 @@
 ### [Microsoft Passport guide](microsoft-passport-guide.md)
 ### [Windows 10 Mobile security guide](windows-10-mobile-security-guide.md)
 ### [Windows 10 security overview](windows-10-security-guide.md)
+### [Windows 10 Credential Theft Mitigation Guide Abstract](windows-credential-theft-mitigation-guide-abstract.md)
 ## [Change history for Keep Windows 10 secure](change-history-for-keep-windows-10-secure.md)
diff --git a/windows/keep-secure/images/security-stages.png b/windows/keep-secure/images/security-stages.png
new file mode 100644
index 0000000000000000000000000000000000000000..249ced9d4b5bf6099d2d35c109d5b4c5c9bf38e8
GIT binary patch
literal 16614
zcmX|pWmsEHv^9kyEmA1Oi$ie@?(XjH1PSi$E(MCaySrQQ65QS0-Qmmo-22@hnVgd+
zGiPMW+I!8Ma0NMW<gd72p`f6UB_%|ZprAgHK(2QYpdn>FZr3a1>yx9BxDZs;_|GHA
z&1W+~SwSeM+8D%FLs-cD7dr_}M<^(izW+X-hHOhrpr8aiB}D{P-1N>ezj&dWzJKJm
zv{en2mA~k}RkG)}`L!LFos<z3=TuP=<dj#fvLlp4ekJ$`y{Gb7ih;85cKg)3&~=7Q
zJiSTsf_uz+V+4HjAqPC1PiV4`oR&$MIJpThVIBgE-HboH@Z5j_wEbadq=b>Zv^l18
zoODvNU`32UmW+)t{^oSob<=B6Jr!N=+`p6q6<pw>o)T+p*eq-?v>Zo>Yb0`qBYy2h
zf)6{L;T?Kh`JgzhFPYVmu=rYsl@7MoXBsa675(uIw44s8SmB@n&;gqPsVTw6N*!ji
z_+h^sav)FZu{pdwC7#5O+jM;umbgQzCJQBg&vb=WQL{aDNp38Jwd(4&RzKwG8=HZl
z1v(yN`qc#+1!+a-4BGmXo&4m3pmR4jUwSYEnys8dL?{KfOq~a_%Y?QzbWUDOv|=2z
zO^GIlA25Xw(Q6e{c;X~dIjVnSGMfh<14Y)CKe~oaLfqerLR`qxLL{tYU4SxZ9@KBZ
z=I~eHerg$cLX^RWF#!sUjA84xx3d)~E^HFX(;j$Ypn=E9loB1KGB&S!ks0b&{~E{0
z&emaL;I;)5>YI|fs8p4UGBMn3#EADvHN#r-<6$RqD5xq;;1>P451k}gDDW&?!X*L0
z%tP#z9uDA3W9qwC7aHF6xM8q~#o)_gHFZcz@va@TQu3GaItCm3N&)t#u%Qbj+Rsl)
zq0r;xGnzV_oW$T9mizH#DD}65Z&)wbm+MKEsUc2{kIyJ7PLGw(VGBmw=baY6Sqav7
z7sQnEBzYkG7%5KZZ?LU)B;G&yOXqeo?sCowEQk>kCqH1Y{|!TAfdL1dYumn}SzYk{
zaWk%;Zchab=Sc|($fphphRYke7KaXFn)ZA9Q=8jyW33{H^CW`=>`Igk>`ITTxy{Wl
z&vvTb^WQYx`P=2T71S1OQTU_=`NLfJ2PU1@W{vh93MB)s_ipkNj*30blNh9372|ND
zf&8scb7UtV^8&$R4f`}nd~ZrPfc}^IytDcVdK}N$N-g-DWZs|mcLf^dY1Evg)sekm
zb?Ru4=ItihMO4c}C)T<z$Jv2p*<n-%9ULGVp+1+;jGWFh1ui%0_FDWed)If+jN+cz
zt}bL2L{v+4r3tQghBrs=%f5){OU!R+9e>7lS49G@C$AmzTv`lnGxdkL;ku73PG(+Y
zHK%6GS}<NiM81PTGxO-CIHvMv>s4<bfT?o$F%0EXJcoxqq^kNjnxdaR&B;V00gnTa
zJDCevY#lu?H96S$@%-DL<mi0a194jhh<4n}y7fm<+&4kmqpkm{{h@P<u&(IBsrTge
zm{y$ECJJsK*29EUBnKx5m?FpG>4hAtqLU=?c{Oah@j5d{b&$aU7*1a4d-LFbx2Wpl
z;(Ybp9wj+8!FHE~bmIpLm}GtzJ&^xdMSr4me?$U-sz0H~o9}wEhBLvxg)V18JP`MH
z`^Sz`q<<=1f4ULlO%W3HO_n>Abcj+nRy1Fon-yiwT)oM_&eqBXA3pQL>+u(~z?iu-
z0r0oxh?KW<qR&u)3C^Q<l7=9Md*8IWXUXlh`j=lY9!o7Xgg`Q?735hert1*M@Ji3&
z#)?L+MhWjqJ_6nT^~a-`Jvhku=-0f))esQu^IwA8J-j`m19pqe-lW~2(Vn~9h&}Gm
z(eyii#N%qAbrE~+^v7$J*3yc%?C{stc$K77dhr;o0ftPGWf;QPArdP)f_tam={DVG
zBUUn5o`qnGHS(ErOqzhJ4q`h7jD?6(USF!bpTZMmd8kg!2J#Jeg-D{k4iEobp+ye;
z^bfLoYGDl1MI_{?yGl%{^4P2W*r&(!b{iY*ruW|7^nWT<_(Mn7-{E-UvS>LLuh=iL
zksto%=>RG%zxgGlXZvd+EKa>2(hbRzsBC`kpJk2OYn=s>;NyQ>99YMgyl#&-X218c
zE9hj(==rqE)zd7$E{Der$&1y+sAFZ8QpuObtm$-|FBv}-TZ#_o)}XNGUp)@K?h5ar
zgy#QVA?W0MSnayLRrquefIY<IBL~CYNp(EB8vH=G&cgaTefh_|dlSVOZ<voXAxeBC
z-T$9=D$!1yveMAbC*G9A3=9SW#}<-S#r4W%#*@t?dD6MB*0O>_)1ktV=qDzbWvt35
zR{E%gaYx^Msi*$QTDIQb9Klb^CmbdwtwnC{eRsZ<FGb8oIx104$U?u+OfYEXcA?``
z)KuBfqtSod%-#7IbKL%&Nk~rbJsilXK_No#!KgxSR77`K1Q7u$(Lht|6pUZ<UI5NP
zU@f6u@@uvy%6L0SeceJ&H+*-6sutME%9?T0*S+23?N(Q=x~y4zT%q27X4L&Kqzj*v
z0XQ0C+SqetFVAP+qj$SBAnm3(aGM)%HDf|rVWZgEtW(Kce%#Tv&u~Oe433r_#Mfe7
z??g&w3{3s@-^z>}M}t0Gto9y>8^)mO1A@{r9VdGBJ>MN|MpE*#*S(4OYo&Bn@A~kr
z*vd&6!hNa9D6Rzbz)h!*XQI<;&a3jU*{e^Zy{1%fm7F#pMb~(){q_z~<8Ls))~Ua-
zG2@?ro_w6m&!u*f^<_;Zx^(P8HWI;pM{0i39&?Xjrm-yZOeyZl5XDSr5d7HVHwu}B
zo$fiK<)qPi@G1}kQiheM`d(Dyz2i*H6_n7NX}!n<bqJ?>|6xC9vfgz5K-ysD7Mv=T
zUDdt4%H;oOBN;HMfp)Vj{e%l7{BZVlRCU#paUSlT5R|<4b@}9y=#qd9zdDzv@#2*d
z3RpzTbrVYH$g)WP-yTS|TS#?;PAHKul~dW!ap}G+b;5tElu{gZK3$ah)IL?heg#NR
zjzV7J{-|gW)=g1}N7vQVUw1Ya_0X=QwGr>7aD98dnKr4MM!k1e({$(zn<2P!R<pLy
z1_l`{gql@iu5?X|`?@^j5`JLV)-O34!y*#A&Yc~;xkH>MYAi9Wa&iAK-v8K~(eu_3
zVO*cu^THZuh7iGWi=#eqwvO-jXQ#u}W@43|<hPN@d20M<jc%t~6Z$;QW8Ht*C;0C7
z`i;wfiB$NKd!0ENmJ`Hi+*mz^NN$0$e`~!tJucLfbi1ED9x&kRehBq1n~`+8v3lLj
z7$RP9d)e8i4VWxlDgIT8DVFxz2)ihzpw_zkKczwH>r+2Kwy42SIoXQ|K~rz|B|=Y#
z)#S7~WlE2Z$WT>tyQQGf1+gm-Yn;sM;IwDF1<E3;<JLe<Q=%ax)$4h#`Q<K}9(3HE
zYH!`>V5m5A{Uz6rytP>nnfSJc;t0q)!*=tZPE-K+uf$%n#xY_<z3wJbcKi08Bvm&$
zFnJ5oH!%6^b{C(8{@0r8VSWg~Gr^Xbc|Ugn3X&0rUZ1mHe173Z5KPdZXw%_%vK*9z
zap8#ReTVo9Q#CHO&tU6JP?jHD*2~{d9pBTu<VBsoq=uv>LrkUV7B<0kFD&lZ<l+kI
zGn;I*Fc_Vu6XGoy5Qnb7`k*83J-O-multg%dRT#}59H;5O7CM0zuo98&$&kgN=NSO
zRDtmq$kKKFWILG1E}XIFnuS20=G4?9g-!;D)0K#wmaHD>RF@Ca;n|mPp_~~yME}p-
zrodXezujH}cd*eQz~=NMyq1kuEE9^fI^sVkE^V&M^NgSiy&UlJO@EOtCt`ef1@e$Y
zJG|xh`P9O1Q#rv+RyvD=>PB?bWxG)w5U@m8)+O+X)vaGV2+1f<6;lg$K?Wl&?munU
z#@E(I-K@_S0=9p|v&{PDN418zJVBbPq_y;#N#HQr7mI<%e4ZI4_@e!AYHvCtuyb|7
zb*Ea%m7aNYNZ5r9_NoH@c7P~u7M?cr5Dj6B2G>0$MQ$+lVPV0fCZJp;INC)nQ_Z^N
zbF>S52-B4fBU1`8N#Xjha~AVxlu*aVMk)%O&u4@s^EMdXpF1sucK^boWG|~oVO%NI
zE!Xnok`xcd>JX1%;5Y`Au|3)D+xFY(ES3RQQbwTy!+NbymwswkWO5a2eZ#0~(%mR!
z!2|cXzb_n}VL(s?wBcA~TTEE^ipe>@my;-co$^3?!DBRT({O^$x-3_{RJ>{-1`CY3
z3iJ{gQ$d1jdZi2>XBajZ4oij9rIEUO{4Zv@U-PMyXt>4_5tC3D3_@ul97c$ok2X>P
zY)_@R$WQJTA{e|&lq0s(FF8^>R33~l#n-!+;=|=?l+J36y;<Y&g(^;XbYMq#c(lM&
z@nf}gz~_G|^t03!z(QP~o%%ACQVeDUd)BiMl;G47O9CV-{>IiHbwg-BRgt!wAdof`
z(=6{3;Zq*#($>P~ai&(CX*|F*C+jm(7fZWRmNH0UN9wNc>xFs(q}Ry<$3L2IreUQF
zDvHZ`L5~&_6-vShqdzRA(<^lU^&Vsn{d{cI?I8aaOi#!T%}e6P9yC*O_q6EOng`Pt
zDO$FEWTanwm3RcLimM;@FVPYLR0G5KQkJZKKYJ(xi|Bue`CgmEI8(@Bk7w4as*yy8
zXw8%>nO6okil7&=8{5e3{fpGD!AvcVuS(3e(f)WaM*zikx5jO9GvG)gnU3?Q0D8!o
zl~~WTnua-gp6*k6Dul|e$NDB2P38<UGueD18%yT2R(CL^<NDPKhuUlWwUhh{{0716
zbHOb-rV<ik2~?)WgFiNWJl`*Tl1GhNIWNk}BWzlO9WOdxi?fb3+UHX<qqVe4b#+2A
zu=N%!hJR4jgKll+M#rcy>MAUC+y9DKANd!M>{LB42v}VSi}U03`=q3*=vU;RY;+gk
z(i99Gc@?g3>P=5NNK+;MWk74ZG93+2(V88e$&#{sr&elUY<SMkrZKy~06%9x1^JeG
za5wDdQ(lp1$mU41<fs7%CWQx}zXOVA{-iE7S>ZgyiTmZ9MvfoBXvA!h+D)X9yRIsJ
zjB}^eFc#qM>+74<CC`C!&f<s_TIVXeLd@YLRgx{uztPm;Tt*4c;bq0>-S)&K#=I0X
zLV`U6C@To2GV|F^Qwc0~`BhF@EcHp2p&9*j;xiCKsTGUSu}M?fvF$-T;^1O`3}H(a
zaZ5H7%kvTNaIL>F<l8q^gUaVn$%(JFKITcM)DcVfQn;punUb#t4PF27X2`|0%m1dr
z=3=#8qNqu407ZO1i9Fo9e`$M_{ju6%@&$#ea43LiK9}(TA<^neAl%4Sm=t;bRPCFY
zkd<gY=k<-(FacH!it||iVX%+HBAy82LSozHq$%eaG@WzJr#-vv3@+!aMTZfa7-?J|
zeWE|E9+Q-3@|a`{Y9c`kukgc5BbjxfAIp5b=`XM!xPJ`MiL5DHnNhLHwT9<1m`ORE
z{dyF7L;#spCo8tn7o86dhYkRoJ%iAv1>J?qUU=+md3=ySYQ;E97E3jXWx8kO@x-J^
zE11w(GxO;&85VWP4>@m)ZB@=U=f|=^q*!Q`=e^sbWs`_`KQBT4R?lSwoNU$bp(GTA
zH)o1w9J9Q~VeBPL1pPan%_UM_4LX*sGK%^HjiQJVr2@ej9#qO!3l(1$z=amacU9pk
z!k-<wY2%~oCXyjmMhw51aEoJ|h{@zjqeAGarK)d8l8mKj^L3rs@tn)jVx02}pA>oa
zYAYlH932cstLNiepQyK{K(!#Q5a1cVfrRHe6L(1NA42=NxS}(txDmX6?PtkYf$F8i
z+V^CCiXBWZ(PyafmTT=ys^_!$X)_L>t%~rd^{xokWftAd?}nU<WUMwpSUyt{#=qjj
z55UCfsy0?`YbGW%c)ZJh{s`fB5(-+=R1+46w>QtgmN{jqoE4(5*RK~@H6#u;{?tuv
zch~xx{1K-4Ch~)&c7Mas{Jpc&Yl7H(_LGl(7izt`<?9x?rYJ?)uCrSHzJrDOv6ZM1
zvbL4n4)V1yOiCeQ0^Kw*&%$57<sCfs(`~txG2gLh<Z3*U75ekp{{3oN2`PM^AeKKV
znhp*e`QpNJ4^k0_xnHuXTgB?!0e|6+7ei*JZpQthq*USbi&)*eeU~hI+6K53vl<>v
z0NfpX4BNgT%>zubjjhvFTA88;ds}jt>B@^mp_IsqYiA~&cqDpiiAA}iGpiN788@K0
z7gV#5DJZ<GErIqHWt1-mO&a13gV$(%GEHXRUY0>`sQu4rU}90*?r0epQ*Nb3*34?`
z77*Ss4oALH=14MbfDKr&eKkS1RHA)WA1cknf=AS)@%KzfKYrkZQWU9pE(>iCJN`5$
z`}bD^1Q2ltPT}>=V-6OwcYa)Nh2xGG6j+>&NnYlU+S7KV1eXGr;!M>^cef(+9c{f7
z3=ZjQx-L~Hl!P^=h!T!fDm1J~$gZZaC#!VHXeBF9txWk}d!(i6wp{*rpd!%`KDVm_
z#l>FtIh@}{M<_pt!qrmlVM4|Km8RP`WM^zN>4{VEbV31XeMX+N@DH^%A!ml0MP?cu
z^L<_<vxze5iOAV=8K$*iK3%cYI>3fEh3tG*a5%sY`5;~0EM!o_C%P<8aE62x2P`*X
zgW`|{T9UbKLhP7KcH>+h@->Ecb?_LXHwp^(-LnO^vDqM@4oV0ce)j#~X1-l%o5VfS
zOmqlSA2I!5fVxW5zxP$uM7(Jx94mZQ6M6|%>|{m+|Er^6VDzKl)<}d%*)x5hjIlou
z@2=KN%6g+K9~%2c+1Sbe#sbPq?%`9J-TNPXCgsx=_PW+>a^wP4`ScL0w|n%a5!qCs
z=<*d=XeuL{=-dju%9FXR+*xfzP-4<%TQp%>TA>j}v*Zd1;Fu2OpyoUdDDAVRxYdpF
zO&&=Qqi)DZ^M|TP_pon@=FRnD_ls^0lNhc9NV_Y8+8m;}^ybs3?CEod#Gvo4xX<&P
zh3hVy&Fb(uv@WO2+UX>^%Mc;%B+aC`ztelKKwZCuQ>Ir{*cjDMq56^WazPm9BPx$1
zNqcF_;r@r(no!eP&LuG~M~$@ov|LF&>{jE1A@L$gqC1abea!bP=aLs@T@+(s=o%fk
zy;M(Z)S`Os$Nc*F$C^F-@$th&6+3szN)WHQ)7n=A(-&CV*13xwrXLJl_PnY(grkHh
zIP#eRQa?G?2;Ojf5ODckW2ss4M-@`9`{m9P-u!3DPENdE*<G)S<_{SZg6|8xVp8SQ
zJtlZRrPJTD#c}C5C$iE-Q*-7Ujs%hMt9NyV@{j(PJ$kq_BlzxPAkNoH+|umzTXP{<
zAI`09aplsn=VN6fHc%2JwECuUqkUTRfeSxneIzsE<OMX(Hz@OqruC$%=Tx_&V5AGx
zSO{9xM@%>Yj#Y4NO*&LT3^(tbLDiAgJobf+Ub$;Prq+=nS_sDi!8~z-Hx%60t$G!K
z@q0`2PiK`{s;4!IiLn1tUEnO|qgYoz*oMJ#^Am0`^R$UTAIHyQT5NY(ifO@etIzQC
zC=;lYD2NB!lO?yQUSX-^fcT2WP8udUq)(O3OU%bC*zOg$!VU<w9)7Nj_l=<6fjG$f
zKaW|whzO15+nlJ*n8l|3G?%;|hzB-r1elKF(3>gPy!ZZsI|<;sT<wd=nm-PEp7HHm
zQ?D_Aa;+U1Avne{xw}b@2PN@_yZ#L&caTNIb@sVsBWr^%-{*);<HE5WRZrR4+q*SI
z$`~<n_PxV^WTJQ!^68RYG6_3h_vz0Y=*4lInb(u58RKo&q-LVxSazdT89My5Q_-Rb
zz6g(>o_DspHMHu?FF=fmd!6v?lbd$e-wKauvXW98=VY;Q)7r09-9D2RHP~@~?La~1
zT`@(a*D<a)MMJaIf8*rOf!D}DF=NQ6rnoFVgM02fc#fm6ktr#r2~fdBy6Qf*5Rky5
z^%DN&L9#npp0R#m_Q!@xdT2_oB~DcnD)u$Frxgkcc7}jcDD!*%C-Q-ym(TqTD>lxq
zP<_wb)W1Gdm@LEx$}g*j;x1)l7_i;Cei_zbi2$n$<wnY{zW@gl5?(=7SD&#pLIEyT
zYjvi`*}m%yKHh7^*>$`tlixxLnjJf{Z4z?YEu*P=!Vg>}VT`-gI<x27D5^;-6uzqx
zec{)73#VW&KHHjD9=kCQ80sXbmc;cT-Ta|dDLPB#uFBUdLx_i1;wFTsVtSP)S|d4s
zJZE2TM#IfjF!Xy**A?FikudJ6vX}-I^N+1(fZl{QV}(o;+!m=Da&4HGpwH}0l8%rK
zUyY${WmO#$u0)mgU~AeU>N?UyKD^4I-4=BFj1mz~_rYxhn`B_Wil@fo77BfTb2xWP
zbz4<;C#*v6N#^PZcT2pG+l-4t@vf`bWx)aQ^BD$sc_0%mJ75d;6rCs(W0-t}MsLLG
zrBy4dF`j!2g95($44Exdm_^IWA#Rx>#Uej%*z!!x{sp(pVXQcNnKlUwPrw0ZdoUh6
zCVk%iZCYaeW}?}8Y5KYE+uhAUUzI_q`-0v|gN^RV!$z~!x{lXDW=(<56p5R3MZKH-
z+jL=KbtfD*_@j>ySG^ju<C)rXwj?PU&oKC&PCMe`^&mjo#^U*U^q$byYQ3fQkipk~
zZ0+j~FsJq?KV}$U#8M-rs#w*=_Zj?K&ASLdLmzfu!N-4|490M2-;tRqYI#QfX<^k$
z%h$SBth-u@y1i*_;c6AkL)>(JqjBYtSUPGlgXKc-Qs^-LltgDb?WXZ0G>Qpj_03kz
zWr(4spy0*C<)zm~xO2>qDzQI!!E1j+my=$KVj&e!qI_NE6}XfuY+`^j%bQYr(ZwA+
zVEJ^X?x?PQj?8|k@3T~<f@!;w#OT?iS8Aox%6#z6H+HC>Qd=8+-RGsBrn+FwC7qT>
zXKf0N9W?(G!_U@AP*XrpL;C1-&KWv0^0bRCDkRjbfDLf3;~*DJPaH^RhMhmc4FCR1
zPNw^6u!Aqy9$=vMFt1&OZp0FHy%!qdbb}b4I!`Nay?VoYu=JX=gPG1$;XquS-ZH{m
z$m78N@)ouXYY7rJHJ+Mpk*|Zb2e#8I)>PK9cI(d9P?#FJjH1P>5@y!(a=lOlipJ00
zT8EQq+0KfYyrVj}Z26xCuNKj^ww)w5u)d7$pH|<7ePmPXl`_5T(#vlcxa@`<q^N$p
zY{-S?bMkZmxU|Oi_PZZRXjQWLH%7L|UiTP^ZQ4qyc~-U5)wx}()_~HPEL2GYTmwcJ
z{5MEeiSL7Wmuw*e)Gzni993)PV9!Hh1hq9&)54qmrLp~}RKSi+8<pv`N&DJ*lWVms
zJ;UQ=9|x9DmVp|-C!4!i6r7s>>!kt{V&!YhJgv2gn%#1I!Euw@d(v59{F5#fb>Qt#
z1<nRWm%^{`1?&Xwy7l#xr&V8ced{AkL{pr-vjg1SRl3$0m3=uI&~j2mYWg_%d!xN|
zORo`oCR&h{jIWR5JWaZzKCNYVVoAEe80t9~Ch;7$rGQw!vJf389)m)h=6xMLW+j&n
zDCQ&|pibOhbElwXxqMRM%Wk&Szv~TDH8gbgd|<26x1F~HoOhsK`u(iiUvoW^Gh60;
z=#lda{mbc?!Ir*eY5naRJ1eVdg}y$gFJDLH>yz1{@Lq2qvb}wDIvWl*H|I<davJ@g
zkTtfB2LflQC^(h4?L)}e0}G}|<mqCTe{h?Dt}_S`e}$-Y3|>f`%|_f`>xKSMsh~WZ
zjc`qn<t6fRlwMbn)746@Es{!Guh=Kp_cf|L0dY&;h!lSnksNS7(4K`x>dOlTxgY{h
zt34dqZ9O#A|Hy1O_<b}T%+#Ehq>wQeD;4jmK79tPg`*4nMO_A}fzCT0ie9f`LaOMW
zN|ldjleWRBRnw5rTeK};E*Mn3*LC{`z3=nQes6IqYFC!Wzi@@S>pcrv%obiQEeh0z
z;NadVSr6~)ObBe0bJ}#fMq~)8*BH{Q=m%BPy}WFUS+W|yy|!TN{0XURq}33}Ld*A8
zE#hM;sD0wKuHRku-oWTU{p*c<-4^SB1?1{Ejn4i@vDf&sp4)oJGWlKMezoflr<5+c
zx`!I&sHG}m6Q-ORHaCYX)_kUq$69K)cRJgZ!V+}+fC4pVYv*fX=4vVNszt2tzq?9q
zj@}hmBMGU0?Z?#Ln96lqP=!k#!zq+BE3OA34IQ_@sloF6mDc95V&aj>3=6ya5y|vp
zEyra=`o4{nKalmk=N`|RPrKh6Ezh(f#gsn=uqwG-Emu||DP*^KAo9PSn(2+=;?sv*
zIW<+Zzu&eu+J1kLJlKC(Bp+I%$>vyekkUw}xy?l^7ATP;?Qoa%?MwaBuXMg*awiJc
z>vt)2ItE|a#Y{Q?3k=ZnGvEQUTYE+=udczY;XHJ;PL}*N_(M+*l(1weVf*}KwMURC
zIS`)>bR{@v3zwUFe-PUHRKBJ|9Zq+|gQM8UQMu(e02~KJB2+#v#-HqCG2M*pM)UQ8
zm9(_ncA~Qk;KpCNKStAdI8TbwH=UPR7ffU_wVrQha4w(MJ!cNUlIh&ZydbslXm+8Z
zWHw8c`6wK!i|*{Z`;}Do^%Nw-v+NI<r_I3IhjnSsN5e1&NMt<Zb2o?hjUOqfXG*!M
ziwm?5PH1(k-|$X;+YIFNeH5NAki==;SbsT$!TwFT(u6EWQ3B+=i(Wn*P)OvJpMV<9
zc6a<6G5@Z0FZm7T<<a&hwHEfcW@F69FF!0LCS%ZiMOa6)V(Z3$9ovV_yB>n=aaWz|
z-<$3*sy83AUc48_eeqqZ2>M69qH7urU+wn>(o@#B)^uYjUyk7ybNQuo@tcKA%IA0W
zb@8kpRtz7==6{`+TmHwpBgIQd@n%7Pj`ib!qY=(Wd=FkgwcccX_4FU$y3m>yrtJtJ
zr@~r*Z`h=(fU_W5D*W_?j7X|VCU($B&;*9a(Do9OEwnE#8^uZk$BNH0iHlqe=AR!|
zP7#Xr4}_1gv%+d2&r^ZwC>yh-27J?5#t)c8+fV-5UnvCZt+hwWJ)i1_$+aUXtm)E3
zkVvS~;Rt)bPWq5STkNIR;L`eI++QN>Z=EIOg-=f3kXfwuWjhz_3s=@>a*<d6qevnC
zdBAs{5{iK<^W9-&q2NV(`@YFc@}l{vGwJr-+#ue7v^Ir{R4j1VrRG>y-l2ZIO9Y;X
z_UTMW<3M0eyK{josbyX7IbTmYtT{1jeCVsBZGpKzI`RSMTi`$T6yn)B1OI~**c@W5
zr1y=Ftv7zE5Jg)~`<J7n==N}bqVu_AdXz0${+YILF2et?sOCi0T}?4DBXT!d^v%AZ
z%LV@d8)fiLiBfh=;7ghIT4CHLKyI)4!|2Ob!0f!5-Hfcsv8Z^TZ4e(%1{anXfkcEV
z1c&`px}mk}kiY!(V?Ds@ZuhIcVMyv&<4o}kOOD{6hTDv+hBNDbKsOc!C%->Z2PSNd
z#(ooTdJX+<G_$4p*TJnOi?D?ECDE)p7aYqlc6qT(Z>Hd#h5&yU-HS7pEdop!%wYfI
zJM*3WhHl#xF;Ieps^bZmW&{lTT{IpLH#EH&?dc}mazZO`+NQ#&9ono|yan_09T0?j
zFqW^oj)2zk_?tU+@Id~{7rw2QH<g`bU8nRirXY6S+#|$n6yZxc;Q03Ts$VPKvT)yp
z&;$F10!5E`*!Og19pf+y^hu(7p*|U-hmp+~f+tMCuG73+rc}P4STJ*G0yTd=@hB#h
zmOwtDdApl3al+PcbIkHJ6A*z@N@_7*Y>GUmmm#3v`2;uLuzWlL_ER(_T>~Waa=Fnv
zae8D+@b~(SQ{sGOr1iPM3bWh`j9oCNv<GC7F$^F3z@I)dBi+mFpMBCUQF>8&??Iya
zQRupcv1wdQv@Y}|Iy_t@6-PIup#&$*EDPMj6tLcx{v<v3lje^yB&2%{z!7R|X@Tkv
zfxBw*Pc<0wq*fmis6bfkiuDd)cd;*4J$b$Ia*fSqglVkOh+8UlfDa@7ZBOWlgcGfz
ziQ_J8rq#8i$+T4I10UvUM^Ws0UhwtU^XVJFq*+}y1KTf}#h_v{Njn4jQ$k#8;7p_g
zk+sN~m&5k~KjsF!{F5Zo-R^_fM>IgJ(nuyFagIcw3fsjp2w756<qM9xD%`A3i$@hG
z4fUaoPbuVY(43d0*qRF38_9<eoTbfv6b?F30ovGrV!ji&g<4-~3l+b@gF!%IWgy*0
zgF`;_Wf$}4)2=$WB%z|T^mQv#JcDHz<EE-z&ifQwlTxfJ9!$kU_G*CT8YCI0!&I@4
z&T3f@u_yk-n-*tjd%*vovp;;t3%v{5yl%<kjr;F!!_X@c-8!b;%aYvrE?TP<GJLSG
zcsM3rY!G#<FRM_BKX^YRhA*H2`E<}v9@zlK7*!5ml+XPhKL6cB-155aPN5j7Rpw%A
zA|No!dM${USM^6XXqOSjFvaNOJs{mCz~dsj1}>aLLHD5-UgA6^@=w%i5V3X~try`3
z@&^weRsc39c5r^wAk<CVOqkLBpZL+rR3;cGs23Er97F@ieB^WbWN<O&qbVgv6Ry<2
zK`o9E{zWPiX68KS3u341vWLXO*RH)WJU}9_(Ns`qax{+c-+i%R)3nbOm-E^y^VQ;C
zvw5x)rWAsSY2@*-v~HL_ttb@H-1mGofTX@iEcwfs3OL@}?5&_+KLZn3aL3|ESFd(H
zAu+c*!T=>gdL)FjonFrHK?_`>B*&Cd&|;Vc-_6ncEcubQWZ~O?wYwSv5kkg@y@D@+
zBH>twcLzTy{eFEQl7V&p&RK%AwAL~>$z9iA6%mj+J^=#v<9E5pbW>^7-tQLF-**Vh
z0^w7E8h(hv`#?}{Ytsdas&7sHwrZH|E|TWU=S`pdpI#yrn;w7Yu42a{)W4}uv`^j}
zw`am|7r5Xve&qmr>{?kei-<MRYpF1~(5~EVA~OGrJ8i{DijTthIFfg^?JQhxo>0??
zGRAIX5Oa#fw5_f;F>$@{_xeV;JnFla_%6FPl8Hog*F-ay@ree?A}$ZMb^1-VNe6#j
z@{IEGM@z~bf^xZ{Zsrph=SiNQ)%Usd@NQwC6Up{u!(IG(PCW#j;<AppKxqs7v&aea
zH{(yusFM6OMe0d%6UlorS1ZY*#rd7x-<3;io?H1S;;CPpIf)@S-{&kIE``ZR#FYtB
z?mGTod0l?#XDj|BganLwEi1Ay77eTtwqVoBP)Bk2?<We15Ue?BPHRf(64`^1&vehg
z(kX-cv!4(f4+ju?kDoW6*c_dC`j_yP>NTB$?O^uMF_>B|vrX1;D*dz<cOw7?P(Ma>
z%tGnhL{rC!8Ws@6q;4Wbe{s%qnWR`cUNyfrk2~F>WRqVdXf&C6s$u7CDj12AGXR=R
zXvlNw$`dKDiNn1E?$_N(eC?sCQiWFRWI8!x=?akTXBW<r(4WIqiJyj}1JW@Y7b(OK
z#`h&3JlC@9t5LbjrrAW#ZJEFsM*H0Y#ktheASB1s-hRSYO`p!fDnLorGk!*jh0Oga
zwJ9+17lhinc{5cjTQX9nR!`E;uee|~kCL&wDaR!r%&_D&3FqAyCP(g$D&<L~Z+R9C
zKm{PEksCQf6886RadLYj^+CAiUS?l^6groo6b^_4u@~L#dkdnMFC~`8<Kty;VZ1J_
zb^Y!N>453NqHXDlBkHdxl7){#elGuF?e_=sCyAbW;IhG&cRte(M4!%o$8)hF2@B;S
z_z<d%HoDmE1#=Z?1J_`F5#MTtA07|L91V+W{2y8LZ~)9>Z`GP2V=awlE6=njdy=|*
zfnD-ctVf@|`%y*P3Vw^U12n8oQ@1r18H^qTeg)Ler7BZRR86&eyL%%qNyoC*!Khg~
zkQN|KZachur9V2g)K!dTeyqxZ{RWH$3p+q}r`c?*k|X07D^><r{CN`Wk%9GM$m`WM
z9odUz!c8L+eC&zc?5!wWfx0wNKT#&;wEuWtm36wkG3iat_*^8TW>%$;N`Cqffn)Kg
zR7b69DU9kvB^Z#ZWG0J686KIQc-`>TLTZ4hKv0>xTx)^W^jeI+RM{eg!F+QTtt(;n
zD^9x<{W*(MIUT0<WkYJ<CqOy=4tqI>D@rLE!-r$^WG?XCF2K?97BbC^h+=$6Acfyt
z)i$xSOo<c>R!#{`xlUO>3>-NE$;!XMfpfx5FIa2xWo`advI^y0++(!iEbpcA;220+
z4-O9n942UsMhzeF0{t3JjEXREfg>2xb#T`CLD)_5I%7ylO^%lhV;%+UD}Zpr%|P9}
zt$&;4X9^l6W7to6ki_zZp7`+h8CYrrdq{>JWj6v}EO8w(;Y~>}3@2oZ+z6vRTal<>
z3vs+eCDE0{M_B<`5!r5wLvN|VG*b3*Xrh!!z$SYnS+(hqj5=}+4Xn-(hzf`;QT~R5
zP_rAN1`$nSC}`qx78CV<(*6Cz-uolc?>`EDbH;LgWhEyuO<%RD(?i>_4L}DJt|uu8
zu4)KEi|vv%in#K341XVnrSmZFX6k$*C2#C4nuYD3z4uYJGupS?=1ja^)iQ2UfG_1I
zQr9Z3w4D0a0G^~4BhA_DM<TPD+Y65>G;*$={oG4u-WGy0r6?GgI(5vFk}1f}@f(c}
zqXA-5esCBu8ut$$7%{d75zRPBv!$-yF!#S+Rat>`9$0Z=J8^Lsh}P^2xCJ$Rp)F!a
zm8l(OiA)0KhSUDeCa(u{hxCVYi2W!QnEL9pows!-$w|$aqsDzaQ|=l3{-yc{*r)Hy
ze8{EO>>F#D7lHk`uxN8$N4X;X=-N|$SPaJldbzW$SjlJ3m0^6HT4v5GIHUp4<dD$m
zl+KLqQ3ziAT?K$k?N5^Pb6)sD+X=(rhklx&RnwJh6|c_keuUCf_4A2YjNsHSNAkIY
z?qQDX|A30)_Dje$1o7GT72sBQ);GMP9ke<fMb*LZd?3a0((hl%%YKAv0U?QQQ=Okq
ztTnQn>@z=)shTxRU}~_j<$gtMgFevx;se&<nayotE!mX|$e_jIJT=5&3mP+|D16AN
zsz%eh;1XgSJ?#g`n0u7o?IUu1$A-=Y2(w$kt_*^FeB~a5ayi9<6Mk5$_g|<o8t*?t
z<0;;Fsn{WkVxew}jWf!KaV{E8Wh<;u2er`?(3p#4AcyQoQr}J((V!*xp)y;x_5zUl
zd~{m)df7syVxxHsYWgrUQd+xMNdH`j1pBsCT(Z_sExt#oz;D|1swf|49_m&_3y}D<
zY=IQonJ1FJjuirra|A1hqJbK)-+9DYJ69Jk+awpM^#vp(@H58)fQ#=gPU3azp?-IZ
ziIRGrVlS=3IIGQXuoyrUo~fYR0RHc)8`1C^saDq*t07K`CTQl=<U)>5E^2u+)sDh{
zU0nviSYKsWu>ixH%CQD6_NRHstkt&=mI%Z_`LoTGP7w*W>`N}i(l6i7wbERAj-C;G
zs`41WhJVnepnWXHxuKw`c1%w&@x&WeUTuWgbk6@oZ=)DXq->k>@#PY9?Bleq2%uJC
zq%!{_2KX)~m`eH&+u{$)l~s_r<AG5Y#+sNOvSazfJ3Co<aibw~nSo&bW)G5hUNdw6
z)3gE-rA%L_$`Q0SG))^RIU_b{X2H{%g*6EadZ5JZAd-V9iLRB-<^qJ)kr`}AQZ?a(
zQPV}>O)*3u8kC^0wB;!_hF3fwealZZ+CXR?dIm_Q9iys__r&ApCP&a!v_Kh0IR)%9
zScJ%x6*ORtG1WUNyhoGHR3C=t8Yu9<#~i~W6QPl7sfR{uK<Jv^3msbD$tDnsS%H`;
ze7_HcUCUQLnIf2XP@vVpVq3VSq3CA*=!uH^y<i1G?AR#DjT}#L_Cd3gt?T-wEWRYK
zu<lpN(1Mm*yENzr`g7-;cVC3q2KW5!sF)mB^-L||z5r_j;aCK;dS$CdyZ!SR@N|yy
zv@=m;hCq7N2n{+0!+91geF|eLxIuLU!isnYuoAkTRw08V9b9WyJ?vpAXp~%*L05H4
zi^xjhltO)R^<QjX%nt90<tI`RPV^ONtQ#MRP;Xz@7jOyK-!nq2G^;Hn1aj<)AQMhf
zCB%h5vwx&>g~lm!|F)5yLeF<zD{~;igI>0vs|@9yW=eC;=>Q%5_$MJOK+}Pii$);c
z&<QhDq&mN1pVq31?VUX$A`DJwhv`J`=7+I39&OW#-g(>uE7|m39z<5K92%USkey}E
zASoU598#nih8P34;iS@x;M|SRe(e7AaqLnwI#fdTMN+DS(LIyuS%nZd89Cv3XPe$!
zhGMT#+-@bC-)={-C53Bms_|SVx^zIMk+=B&wl-!yoB?v93SwM>fYyX6cAsfFi`n3*
z>YM!L+{=CC*;XV`u}IQlCB>;=vSULr0Cz~Y1cYyK%DW$T3QWkt|K0Ex$uY0U-DwQc
z_E!3baOUr!x}{o@I0$39x1c#(fYx^f*_#pbz&~3s9$_QTI$04@+bj<f&zvhfE}6+q
zHV?#6^k(E`il>qVh)r|Ss$31n0-5ZL+(ZLI=-7%?BxW8XUM)>EJJXa8&acI+AxLBK
z0|1l<p)rkwLPGE49hQ|tPV;QFlw7t1cIq4^m<Tv}f(iu(cn6eRceRx&(yaWkMDk=;
zead)~FX7?^^`c_zSZvG6)FxWW-6>~(a-cd71{{Y#d{teK0x(+PYLfY^nI)wJ1|ep3
zmq^I~U3aZ)3@^hBZwx&rEGDno3GolWkFHHElkvNnG8Sh%=5iL^Z&L(4N6@CY>Sch3
z$R!dcT)944y}k(5S~>r@3XVI3gN*RBWT{gw+;u!*8nDVsm?alBki#<}-=RskV_C8L
zlkKWsi*MhXfEN8|tbO3vWE8F%@~otAlD=yO7lc2W)2J&`!AZ14FtSm&yX#58!GEOr
zImF1Au2-TxFk_8+$gXnCu9AKsw}9;A%q=)3b!&i)#S~rp&pVewZhAe_;y7<hz(|Wc
zdMzF9n`|pB#ft}cHs`2ncc61gp>4u2ZacAB@#yDg_UX&{MrQxd9l^eak`u+d-yK5j
zM6T&xPqYXF$Qn^JQzF|F$?KxpY-StYeOL6RYZC7n-IZV@jB8BQsp^Bd*fXAQdQwWQ
zA0NF=CV~27RW%mZ7{BEb@5fpq*yZiUXB!qQX>F5nOW&XxOu|Snka;UPr+}&26-EOk
zVa>5Qf5mH{mxzKGCFnUzv-+5_ESc)Ie+d7MmR#0WLjL~C;x;p^+xmb@p3$+Ux*7De
z|J!^=Q|*l@Nl7bacL;%JQ9XBX0)LD@r^&kH70pQU9a-beQher{#?7w`el&E*4)iX&
zrdPkl*D%~9B?VPE*Cs1xHs2VnuD^&MQK}QdmD(9}+6MR;AKz<*wyfPw9)1^Hj77KO
zv%%<f8=-<XmB)Op3!dYb_QB<9yR*1!8n`_$#zi&T`HtYe9@@&4q?KG_(WctGcFj;r
zl$+%QwpRwK&j96!Xl>CVy2g-i|71~fk`SZVDAcF{K3Wy6`wbqIldr;+hUtqu^xEHQ
z*3v50$m(7d@;|zy^b2Y@fBwd2U9Po=4Mr)HkX+u#UYN3{MW|#1>F!bial0A;%Pv`k
z5`@-l>6iP+Zu6=wWPeM}N@Oyoz}yk318!TH8bf@YN@QWatxR{UfD3D+X`j$~dPo1w
zS8>cp9M;M{5Pze#3i2riMlHIku9uGbF-tSIy-Ip*O)yr(N?S%ow;^s*U3mZ@e`)?c
zSqN!|%@I+G;Gyyvk^J$Wy2Z>wqr8`O<N|+Q36{R8%%j0v(QjD5((j<I{vIiXnsFSc
zN-Ty34ceq;jzNoHvFN#4zUK3{8Lz^rYo>|U=9{xKEoF1}8Ra;PDeEM)M#JZk2s<0;
z#&JGA>12A>OKuEhc{@G6G~a|3lBrZZZbc7mE5s`+mgXH4gFFc>u5o(t@+Qp_qZr1~
zw@zVQqq&IN?Kd^q#zqT@B*)15Q_14KD(dWNz6Wu|?Rc?x43GxM3Z?NlJ?gYQ+Ds#9
z_2ZzXtZ{oS1W+*^U$Ot^!oD4;nTjP3^^G%$D~_D&rEcszNXfkaW$udBVtz&~A6#mr
z9j#=#uQ8*UMEMNYsrDOpLFX5cE1oo-!L=|lkbT61hY_gtIR*JDPtz8>y;o%hdrZJP
zLp_Is`2}3+U}hP3dw=-MPf*U!aQ+?lawA(!4OBrR-FDGU6sTV=55RkO>)0!Gi_@_^
zuGwDmxM|^FI%x@Vt^o1s&y=wJj<6tIcCdlRUsNanKu)=+y*PZ!PZieA1#zz=y;QAj
z*)`b=&1ksvc4uH$m2sDS$4^lG$g}1PSMM(8arO3GQq#r4lkBtJL$@A8i8SZ^`8R3M
zl13+FhXd{@-GJU-mcIP#loyUJt_E9FKOZTn_L3^HD-gkttCkM*<Dc=!gr4<mgRtK5
zCt&*s`mubblq0Z^S~$nS*aGTXRO)p2M&_5&HCxbGkIRtEM1-om<b?uuW&E`>t4BqS
zaA!6HuSPyXwQ5ipQmo{>r8Q_YQ5n&hBLpAKg|I^Hl_Y@>z5E3EH&^1-L+x1w08TB>
z#yGlF)41)aA;Veg!e`Q7Rwoz8cvBcA$o8k2$2NVbO%7YGeis8|DBR)I(P+@H=06g#
zei8w69;llgSs=bwbvswR)=(P@=SI>>6^=7xXW?wmt6@nZPAxnGyO>K^Kf@KX5R95|
z($^$pxVymr%}{fEi*e%`)wqqCo3v0>=cuIiJc`$#mQKA(8M72cE{E?$lIsnmkA({-
zZr4iw7vH`$n+@L!4v8_=4w+(;zG&KaI@TO&*JO%l|3e0yN~~$r$|a~;;-q7qP>&L+
zkxN%`n6xo4YTK1_#JH@U^zYq4?%auMLlR_!Z)p<DuJ79MCj1-4k>eL|M1x66t>V}-
zu2dFel6m@hcl8@rO?-o|%oM;HKp0`3KGN(Fk=iv*&l_r1n{Z$|`_D42Yc|WXya<R0
zjN>|)UrcW@`iEq;#oM&6tMNkMeU}UuJgL(@o{QBdcsjNMJ{zih_V64*PwT)MdzKS_
zF?77Mtk<%#S+<@-preCF07qokFI5yRGdR-~Ga6SGx-@EPe&Qr&vkT=*>7ku<mJ5_v
zEHjRjrNU5R&!ayQ{3FKwZWU*Jm{JNTWDD=D`;)JsPG7Bv{awrHp`b+LYI&r!%q8&7
zF3?akxJtstJv+bqmt;I?J%;4%MNJ{`oMre_Q(Ezw7Dy&Og-}j$un{}WdH#;)?D*?l
z+1JK#qmQ)m76whu2B`FcH|4b2$l+CsUl4B=qLC9;qdo9eX@5T#v3k(Zy0g^?h@8uG
z$ga9YR&he_FR40}l-0a&#p(dj_#lk}j}WsgCNgK@9;&k5S~xGN<s6f%j@+c5+ouDX
z>D(W3ekLIssSKtxWw<UcUEoE$8%`LNI%Llu{0?SLsk2F{r&zi<pDfVX$a)hKUw^so
z7-7CAGn-oLMBK5-yHqFL(Uj*ZWI|#nS3d|Jvk}pqhB4mnxqP4w1@L@au?$2--9OZ?
zY?w*wji}YgNl~fos2I~bb;nO#`*`fk(vCP6e=#_hQR|MI<78@###rH{Qoi=l+G$U%
zj4A$?gY4q{=k=~){9zim*vx6wPV7BK=E*a)(lzt!SGsl<m*S0EmnyJOKZdW8vF|bV
z2sr|0F>c&J03AW^pf)4+x=?xa?1<KpdFqxVpCoCZt^joqpwX09>yo}i^1kde*a+=z
zNEZ`qrmr)Ek#C^xN8i!o7}gn=yfcikNvZ)o8jkz|!99nVCg=)gEGe{X6**dQE9GYV
z(Z$1dtShS-%K4!!3xvR&=*m7^tHd1O0JTP~!#q{+$zLb=v;&VHkf4}G?CY>%gMfKJ
zqM_^~i<~6n%w~_JnQko_ABmdU_iDrVcxJU})OLYwR$D|y_&3UYETF{6(HPL(J1I6~
zuV5`{x9$|yHN6dB&5DQs?O8opFE??rKI*A=+j1}?jY~w^xiWWiP}(4-{aYbbxe|U5
zsz9ZRC6Ge;KyocZx9}h4@NJS0Q=|e4BH%CAyk^dc(ix?OoY$<UVKwU-|J#|*D*J7Z
zeVTLh?9rq&1lTqcZH)%9PlTBAB%8_@3Tkn1P$wHxcG!_Pa}h`v)$Xf+>dII+8wcUS
z6+sQ<$W44reGbL-8!xpHvWL$%ZMluX(Em_j&{@zNj-3w4AwV2yEa^kSDXe`?7Z-<7
z*{XQljM6d@2T;y3Fs9KAOo@@5F*et!vM}!?`m{%OHb(VKz0AXM&Yq_}9TrOmv*$6(
zgD4_gOKc$$u*FIb*@#$&vi%45&gU?V0(<;$OTaz=2)!cH=Ym7rW*CxC^7^UFH^3!C
zVbB|43-?$hg!1Rm=n1R!_146qqg<%@&#~_;`Ye-<5zuMm(YwBM1W2u4WrX{x9oP0&
z6V2<mkdm(`N$`by$67eLvh?^WJD;PP(y9`s7}AJ$DT_>50;8C0e>m8c)?*XXp&9p`
z+5S|dFxR7ROvQnmAYF}ml%HbA5%h=k6*mtGW&DvcMOo4)+(yZ>?Q+L-evv2V|2vNu
zNHmr!2*(1OHZuP0#-i+%^w&?}M}BkmXq~+MEF>7-;)XmCd2s9}`}2Hd0aBr*`u-hJ
zalJ=a-Zd_vZC1~A^W_1F@T3$pUxzWp<<Be#rhchMNScpm$uPO<(v>i>M`#Liv#Z&r
zc{ei#2vaO+{--6!rXI0y!9T|Gr0}t~HK!WQbcIpZj-7Ir=BOhTZ*Q4rRBs26-f#E9
zysdK{xP-2*ZN(&hn&0g@YVpW0>H!kb5mN8>A_h~?Fx0PQbKqGhvq*wy?F7C|*Icz0
z`JE$5&aNiq*%tkiww>ZkL;I_6SMJaK4-FfAB18$!<X<4-&%+SMHmJ-iyzk2*vKfD<
zY1Twt!2;j=TlrBv@%?MB?GZ{#jNl4LFv3#)(oN!8Op-+|2xv(s{(1ij4Hke_aq={X
zgA1l=r4h(F;;Zqo8Vs9dvZL2%$M#G%b4I4lcV8G1g@p$qXfBp)HVF_TM<}{+JJ=m5
ziO)x5ezy4ZeP){#z&XG9#e^Of1~_Y=1Hz>4aNdRRKefAZCJcEK7mSM2&UYx=X?L;v
zQ1@-R_NSR&PcAP65maEMSxEOb^QYm(>Mqbw#@rD&gB38f3b{oLn;YAfEl61fJ{wsC
z>~BEh@m{R_6zL7d$;DK;`>MG1=5<2x69t7jBT9jy66z&dZg?s?-kEfAG&`sDKI%Rc
z`24;Hr&wdS|C|?9Vh!2po4)ZE*FFcNFocCL#kW!FnwR`lCbr{=%HN4R;u{cmI!fhJ
zfKo5k82!J52)7ATS=MY6bpN+N*a=c;OlO_vQUA$%HK!HWg?zBr0t2)kxp@_5zOGK7
zBKnt^E6$88Dsv`BZ(|R#rGSVJLNx0R6ue2;cDhbHs(Un7q|b?A{CY4#7it>S+|nX=
z46YCDB-l_qrHeYuLB)168ohX9l+&BtY-B4DQWv=-6Q<X2>G3aHQGyZp2vb+RUxXF9
z(8emA^k8ZP1J9Tls(YKlXXSu)R%Uav#8sbR0YF}dt0JN2_!1x&bz35KhUj3k&NmOK
zVP^x=#m_po6e`^4IOw_)NbO3qQIq?>ScoUUT$QBz98g+*IMX(?cP<lLHGH*+E;3E_
znskG%M2ObKc-UE02w)EpzpWCH<-n37;r`b2H0loc+^%1WL311rIs5Xld`O&So`+x8
zi~0*q2Ngm-y-h~w?Je4HRFgj1-~C0$G0^XGc)V@6cRgsB_@VW_5;Sfe*RjDF7pS97
z04xX-Pqsj#7iiO%ZT&JgE|@r@sLIf%J=NYX{_GZ1hKjpiVJk?L52H?!01^o$H+Qbw
zY5cx(yS?Ei7JgMPwbF%>P$Z6Dbugu%tykJs$9Pgn^OkP5%T9dz@rktM?KA1$qIJl-
P37{lJ<wUB43<CZi{C%0S

literal 0
HcmV?d00001

diff --git a/windows/keep-secure/windows-credential-theft-mitigation-guide-abstract.md b/windows/keep-secure/windows-credential-theft-mitigation-guide-abstract.md
new file mode 100644
index 0000000000..0386127ed4
--- /dev/null
+++ b/windows/keep-secure/windows-credential-theft-mitigation-guide-abstract.md
@@ -0,0 +1,67 @@
+---
+title: Windows 10 Credential Theft Mitigation Guide Abstract (Windows 10)
+description: Provides a summary of the Windows 10 credential theft mitigation guide.
+ms.assetid: 821ddc1a-f401-4732-82a7-40d1fff5a78a
+ms.prod: w10
+ms.mktglfcycl: deploy
+ms.sitesec: library
+ms.pagetype: security
+author: justinha
+---
+
+# Windows 10 Credential Theft Mitigation Guide Abstract
+
+**Applies to**
+-   Windows 10
+
+This topic provides a summary of the Windows 10 credential theft mitigation guide, which can be downloaded from the Microsoft Download Center. 
+This guide explains how credential theft attacks occur and the strategies and countermeasures you can implement to mitigate them, following these security stages:
+
+- Identify high-value assets
+- Protect against known and unknown threats
+- Detect pass-the-hash and related attacks
+- Respond to suspicious activity
+- Recover from a breach
+
+![Security stages](images\security-stages.png)
+
+## Attacks that steal credentials
+
+Learn about the different types of attacks that are used to steal credentials, and the factors that can place your organization at risk. 
+The types of attacks that are covered include:
+
+- Pass the hash
+- Kerberos pass the ticket
+- Kerberos golden ticket and silver ticket
+- Key loggers
+- Shoulder surfing
+
+## Credential protection strategies
+
+This part of the guide helps you consider the mindset of the attacker, with prescriptive guidance about how to prioritize high-value accounts and computers. 
+You'll learn how to architect a defense against credential theft:
+
+- Establish a containment model for account privileges
+- Harden and restrict administrative hosts
+- Ensure that security configurations and best practices are implemented
+
+## Technical countermeasures for credential theft
+
+Objectives and expected outcomes are covered for each of these countermeasures:
+
+- Use Windows 10 with Credential Guard
+- Restrict and protect high-privilege domain accounts
+- Restrict and protect local accounts with administrative privileges
+- Restrict inbound network traffic
+
+Many other countermeasures are also covered, such as using Microsoft Passport and Windows Hello, or multifactor authentication.
+
+## Detecting credential attacks
+
+This sections covers how to detect the use of stolen credentials and how to collect computer events to help you detect credential theft.
+
+## Responding to suspicious activity
+
+Learn Microsoft's recommendations for responding to incidents, including how to recover control of compromised accounts, how to investigate attacks, and how to recover from a breach. 
+
+

From dfde66db1583a54eb32cbff50d4f15584596a900 Mon Sep 17 00:00:00 2001
From: Justinha <Justinha@Microsoft.com>
Date: Mon, 9 Jan 2017 14:55:46 -0800
Subject: [PATCH 6/8] fixed typos

---
 windows/keep-secure/TOC.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/keep-secure/TOC.md b/windows/keep-secure/TOC.md
index 52b2dc6ca2..99abea5c99 100644
--- a/windows/keep-secure/TOC.md
+++ b/windows/keep-secure/TOC.md
@@ -871,5 +871,5 @@
 ### [Microsoft Passport guide](microsoft-passport-guide.md)
 ### [Windows 10 Mobile security guide](windows-10-mobile-security-guide.md)
 ### [Windows 10 security overview](windows-10-security-guide.md)
-### [Windows 10 Credential Theft Mitigation Guide Abstract](windows-credential-theft-mitigation-guide-abstract.md)
+### [Windows 10 credential theft mitigation guide abstract](windows-credential-theft-mitigation-guide-abstract.md)
 ## [Change history for Keep Windows 10 secure](change-history-for-keep-windows-10-secure.md)

From dc8dddb0cb3873c179edf07b098cda5e42944e9d Mon Sep 17 00:00:00 2001
From: Greg Lindsay <greglin@microsoft.com>
Date: Mon, 9 Jan 2017 15:35:20 -0800
Subject: [PATCH 7/8] changes topics in plan and deploy

---
 windows/deploy/change-history-for-deploy-windows-10.md       | 5 +++++
 .../change-history-for-plan-for-windows-10-deployment.md     | 5 +++++
 2 files changed, 10 insertions(+)

diff --git a/windows/deploy/change-history-for-deploy-windows-10.md b/windows/deploy/change-history-for-deploy-windows-10.md
index f7e67993e5..b244f70c5c 100644
--- a/windows/deploy/change-history-for-deploy-windows-10.md
+++ b/windows/deploy/change-history-for-deploy-windows-10.md
@@ -11,6 +11,11 @@ author: greg-lindsay
 # Change history for Deploy Windows 10
 This topic lists new and updated topics in the [Deploy Windows 10](index.md) documentation for [Windows 10 and Windows 10 Mobile](../index.md).
 
+## January 2017
+| New or changed topic | Description |
+|----------------------|-------------|
+| [Get started with Upgrade Analytics](upgrade-analytics-get-started.md) | Updated exit code table with suggested fixes, and added link to the Upgrade Analytics blog | 
+
 ## October 2016
 | New or changed topic | Description |
 |----------------------|-------------|
diff --git a/windows/plan/change-history-for-plan-for-windows-10-deployment.md b/windows/plan/change-history-for-plan-for-windows-10-deployment.md
index db42adde11..6d43bdcb7f 100644
--- a/windows/plan/change-history-for-plan-for-windows-10-deployment.md
+++ b/windows/plan/change-history-for-plan-for-windows-10-deployment.md
@@ -13,6 +13,11 @@ author: TrudyHa
 
 This topic lists new and updated topics in the [Plan for Windows 10 deployment](index.md) documentation for [Windows 10 and Windows 10 Mobile](../index.md).
 
+## January 2017
+| New or changed topic | Description |
+|----------------------|-------------|
+| [Windows 10 Infrastructure Requirements](windows-10-infrastructure-requirements.md) | Added link for Windows Server 2008 R2 and Windows 7 activation and a link to Windows Server 2016 Volume Activation Tips | 
+
 ## September 2016
 
 | New or changed topic | Description |

From 090ecb8f828b41ccd6b091363ed8951a95de6bc0 Mon Sep 17 00:00:00 2001
From: JanKeller1 <v-jak@microsoft.com>
Date: Mon, 9 Jan 2017 16:08:30 -0800
Subject: [PATCH 8/8] Fixed a link to an outside website

---
 windows/keep-secure/smart-card-architecture.md                  | 2 +-
 .../keep-secure/smart-card-smart-cards-for-windows-service.md   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/windows/keep-secure/smart-card-architecture.md b/windows/keep-secure/smart-card-architecture.md
index 84d38741cf..41b2dcc225 100644
--- a/windows/keep-secure/smart-card-architecture.md
+++ b/windows/keep-secure/smart-card-architecture.md
@@ -74,7 +74,7 @@ Credential providers must be registered on a computer running Windows, and they
 
 ## Smart card subsystem architecture
 
-Vendors provide smart cards and smart card readers, and in many cases the vendors are different for the smart card and the smart card reader. Drivers for smart card readers are written to the [Personal Computer/Smart Card (PC/SC) standard](http://www.pcscworkgroup.com/specifications/overview.php). Each smart card must have a Credential Service Provider (CSP) that uses the CryptoAPI interfaces to enable cryptographic operations, and the WinSCard APIs to enable communications with smart card hardware.
+Vendors provide smart cards and smart card readers, and in many cases the vendors are different for the smart card and the smart card reader. Drivers for smart card readers are written to the [Personal Computer/Smart Card (PC/SC) standard](https://www.pcscworkgroup.com/). Each smart card must have a Credential Service Provider (CSP) that uses the CryptoAPI interfaces to enable cryptographic operations, and the WinSCard APIs to enable communications with smart card hardware.
 
 ### Base CSP and smart card minidriver architecture
 
diff --git a/windows/keep-secure/smart-card-smart-cards-for-windows-service.md b/windows/keep-secure/smart-card-smart-cards-for-windows-service.md
index a0c0edd3dc..1c4f17a7f2 100644
--- a/windows/keep-secure/smart-card-smart-cards-for-windows-service.md
+++ b/windows/keep-secure/smart-card-smart-cards-for-windows-service.md
@@ -14,7 +14,7 @@ Applies To: Windows 10, Windows Server 2016
 
 This topic for the IT professional and smart card developers describes how the Smart Cards for Windows service (formerly called Smart Card Resource Manager) manages readers and application interactions.
 
-The Smart Cards for Windows service provides the basic infrastructure for all other smart card components as it manages smart card readers and application interactions on the computer. It is fully compliant with the specifications set by the PC/SC Workgroup. For information about these specifications, see the [PC/SC Workgroup Specifications Overview](http://www.pcscworkgroup.com/specifications/overview.php).
+The Smart Cards for Windows service provides the basic infrastructure for all other smart card components as it manages smart card readers and application interactions on the computer. It is fully compliant with the specifications set by the PC/SC Workgroup. For information about these specifications, see the [PC/SC Workgroup Specifications website](https://www.pcscworkgroup.com/).
 
 The Smart Cards for Windows service runs in the context of a local service, and it is implemented as a shared service of the services host (svchost) process. The Smart Cards for Windows service, Scardsvr, has the following service description: